{
  "resultsPerPage" : 17035,
  "startIndex" : 0,
  "totalResults" : 17035,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2025-11-20T03:00:55.8863868",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2017-5005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-02T22:59:00.133",
      "lastModified" : "2025-04-12T10:46:40.837",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Quick Heal Internet Security 10.1.0.316 y versiones anteriores, Total Security 10.1.0.316 y versiones anteriores y AntiVirus Pro 10.1.0.316 y versiones anteriores en OS X permite a atacantes remotos ejecutar código arbitrario a través de un campo LC_UNIXTHREAD.cmdsize manipulado en un archivo Mach-O que no es manejado correctamente durante una operación Security Scan (también conocido como Custom Scan)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7CD45E1D-9336-41B1-8D24-9946FCAEB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "F551FB1D-0142-41AD-8404-744F8DDF4E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7627A0E4-682B-4918-9A2B-F35269620A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95194",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037547",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/payatu/QuickHeal",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=h9LOsv4XE00",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/payatu/QuickHeal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=h9LOsv4XE00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-05T22:59:00.267",
      "lastModified" : "2025-04-12T10:46:40.837",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Tenable Nessus en versiones anteriores a 6.9.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.2",
            "matchCriteriaId" : "42D8DAC6-38BC-42BD-9E2E-2CB1E57B7E1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037558",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-09T08:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the \"Import to Phonebook\" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed version. The Support case ref is 00109744."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Netop Remote Control versiones 11.53, 12.21 y anteriores. El módulo afectado en el cliente invitado es la opción \"Import to Phonebook\". Cuando un archivo malicioso especialmente designado que contiene caracteres especiales se carga, se produce el desbordamiento. La versión arreglada es 12.51. La referencia del caso de soporte es 00109744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netop:remote_control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.50",
            "matchCriteriaId" : "896E7A07-D2A1-4072-B549-D41EB680180B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.netop.com/fileadmin/netop/resources/products/administration/remote_control/release_notes/NetopRemoteControl_12.51_ModificationNotes_final.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.netop.com/fileadmin/netop/resources/products/administration/remote_control/release_notes/NetopRemoteControl_12.51_ModificationNotes_final.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-09T08:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process in the Android OS. The zero-permission app will create an active install session for a separate app that it has embedded within it. The active install session of the embedded app is performed using the android.content.pm.PackageInstaller class and its nested classes in the Android API. The active install session will write the embedded APK file to the /data/app directory, but the app will not be installed since third-party applications cannot programmatically install apps. Samsung has modified AOSP in order to accelerate the parsing of APKs by introducing the com.android.server.pm.PackagePrefetcher class and its nested classes. These classes will parse the APKs present in the /data/app directory and other directories, even if the app is not actually installed. The embedded APK that was written to the /data/app directory via the active install session has a very large but valid AndroidManifest.xml file. Specifically, the AndroidManifest.xml file contains a very large string value for the name of a permission-tree that it declares. When system_server tries to parse the APK file of the embedded app from the active install session, it will crash due to an uncaught error (i.e., java.lang.OutOfMemoryError) or an uncaught exception (i.e., std::bad_alloc) because of memory constraints. The Samsung Android device will encounter a soft reboot due to a system_server crash, and this action will keep repeating since parsing the APKs in the /data/app directory as performed by the system_server process is part of the normal boot process. The Samsung ID is SVE-2016-6917."
      }, {
        "lang" : "es",
        "value" : "La instalación de una aplicación Android de cero permisos en ciertos dispositivos Samsung con software KK(4.4), L(5.0/5.1) y M(6.0) puede bloquear continuamente el proceso system_server en el SO Android. La aplicación de cero permisos creará una sesión de instalación activa para una aplicación separada que tiene embebida. La sesión de instalación activa de la aplicación embebida se realiza usando la clase android.content.pm.PackageInstaller y sus clases anidadas en la API de Android. La instalación activa escribirá el archivo APK embebido en el directorio /data/app, pero la aplicación no se instalará ya que las aplicaciones de terceros no pueden instalar aplicaciones de forma programada. Samsung ha modificado AOSP para acelerar el análisis de APKs introduciendo la clase com.android.server.pm.PackagePrefetcher y sus clases anidadas. Estas clases analizarán las APKs presentes en el directorio /data/app y otros directorios, incluso si la aplicación no está instalada actualmente. El APK embebido que se escribió en el directorio /data/app a través de la sesión de instalación activada tiene un archivo AndroidManifest.xml muy extenso pero válido. Específicamente, el archivo AndroidManifest.xml contiene un valor de cadena muy grande para el nombre de un árbol de permisos que declara. Cuando system_server intenta analizar el archivo APK de la aplicación embebida de la sesión de instalación activa, se bloqueará debido a un error no detectado (java.lang.OutOfMemoryError) o una excepción no detectada (std::bad_alloc) por restricciones de memoria. El dispositivo Samsung Android se encontrará con un reinicio suave debido a un fallo de system_server, y esta acción se repetirá debido a que el análisis de los APK en el directorio /data/app realizado a través de system_server, es parte del funcionamiento normal. La ID de Samsung es SVE-2016-6917."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B4FF3D-35CC-4E86-A6EE-D065D654FC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13E2E2D-41E2-4CF7-A019-6B462A614271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99CD57-C55D-4812-8F9C-5ACE7555C086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6EA64-6B65-4487-914F-9EF9CBB78211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0002",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-01-10T21:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge podría permitir a atacantes eludir la Same Origin Policy a través de vectores que implican la URL about:blank y las URLs data:, vulnerabilidad también conocida como \"Microsoft Edge Elevation of Privilege Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95284",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037573",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-001",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0003",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-01-10T21:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Word 2016 y SharePoint Enterprise Server 2016 permiten a atacantes remotos ejecutar código arbitrario a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fortiguard.com/advisory/FG-VD-16-079",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95287",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037568",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037569",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://fortiguard.com/advisory/FG-VD-16-079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0004",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-01-10T21:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka \"Local Security Authority Subsystem Service Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El Local Security Authority Subsystem Service (LSASS) en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos provocar una denegación de servicio (reinicio) a través de una petición de autenticación manipulada, vulnerabilidad también conocida como \"Local Security Authority Subsystem Service Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037571",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-004",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2925",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el codec JPEG XR. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2926",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable relacionado con el procesamiento de átomos en archivos MP4. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2927",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable cuando procesa archivos Adobe Texture Format. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2928",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable relacionado con la configuración de efectos del modo visual. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2930",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable debido a un error de concurrencia cuando manipulan una lista de visualización. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/140463/Adobe-Flash-24.0.0.186-Code-Execution.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cosig.gouv.qc.ca/en/cosig-2017-01-en/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41008/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41012/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/140463/Adobe-Flash-24.0.0.186-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cosig.gouv.qc.ca/en/cosig-2017-01-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2931",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable relacionado con el análisis de metadatos SWF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41608/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41608/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2932",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en la clase ActionScript MovieClip. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95342",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41609/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41609/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2933",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable relacionado con la compresión de textura. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41610/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41610/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2934",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable cuando analizan archivos Adobe Texture Format. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41611/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41611/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2935",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable cuando procesan el formato de archivo contenedor Flash Video. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41612/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41612/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2936",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en la clase ActionScript FileReference. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95342",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2937",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en la clase ActionScript FileReference, cuando utiliza la herencia de clase. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95342",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2938",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections."
      }, {
        "lang" : "es",
        "value" : "Las versiones Adobe Flash Player 24.0.0.186 y anteriores tienen una vulnerabilidad para eludir la seguridad relacionada con el manejo de conexiones TCP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "259FB981-3C1A-4846-B15B-D17973BF1016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "386E1058-968D-4710-8816-120E1A2D2789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "FE5F67AB-339F-4664-803C-2EB4B03C5286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.186",
            "matchCriteriaId" : "02ED3FF7-F6B7-458F-B314-897E19EA364F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95341",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2939",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing a malformed cross-reference table. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable cuando se procesa una tabla de referencia cruzada mal formada. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2940",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable cuando procesa archivos JPEG 2000. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2941",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable cuando procesa datos Compact Font Format. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-002",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2942",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable cuando procesa datos de imagen TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2943",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable cuando procesa etiquetas en imágenes TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2944",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable al analizar archivos de imagen TIFF manipulados. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2945",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable al analizar archivos de imagen TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2946",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing the segment for storing non-graphic information. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable al analizar el segmento para almacenar información no gráfica. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-003",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-004",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2947",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security bypass vulnerability when manipulating Form Data Format (FDF)."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad para eludir la seguridad cuando manipulan Form Data Format (FDF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95348",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2948",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento/desbordamiento inferior de búfer explotable en el motor XFA. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95346",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2949",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable en el motor XSLT. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-005",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-006",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-007",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-008",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-009",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-011",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-012",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-013",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-015",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-016",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-017",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-018",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-019",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-020",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-028",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-029",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2950",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor XFA, relacionado con la funcionalidad de diseño. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-021",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2951",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor XFA, relacionado con la funcionalidad de subformulario. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-022",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2952",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento/desbordamiento inferior de búfer explotable en el módulo de conversión de imagen relacionado con el análisis de etiquetas en archivos TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95346",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2953",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF image. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el módulo de conversión de imágenes cuando procesan una imagen TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2954",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el módulo de conversión de imagen cuando manejan imágenes TIFF mal formadas. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2955",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor JavaScript. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2956",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor JavaScript, relacionado con la manipulación del panel de navegación. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2957",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor JavaScript, relacionado con la funcionalidad de colaboración. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2958",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor JavaScript. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2959",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to parsing of color profile metadata. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable en el motor de conversión de imágenes, relacionado con el análisis de los metadatos de perfil de color. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-023",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2960",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF metadata. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionado con el análisis de metadatos EXIF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-024",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2961",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el motor XFA, relacionado con la funcionalidad de validación. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-025",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2962",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:01.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related to localization functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de confusión de tipo explotable en el motor XSLT relacionado con la funcionalidad de localización. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95340",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-026",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2963",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:02.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the color profile in a TIFF file. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionado con el manejo del perfil de color en un archivo TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-027",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2964",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:02.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionado con el análisis de metadatos de JPEG EXIF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-014",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2965",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:02.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file parsing. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionado con el análisis de archivos TIFF. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-010",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2966",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:02.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the image conversion engine related to parsing malformed TIFF segments. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de desbordamiento de memoria dinámica explotable en el motor de conversión de imágenes relacionado con el análisis de segmentos TIFF mal formados. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-030",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2967",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-11T04:59:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor XFA relacionado con la estructura y organización de un formulario. Una explotación satisfactoria podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-031",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-11T06:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data."
      }, {
        "lang" : "es",
        "value" : "Zend/zend_hash.c en PHP en versiones anteriores a 7.0.15 y 7.1.x en versiones anteriores a 7.1.1 no maneja adecuadamente ciertos casos que requieren asignaciones de array grandes, lo que permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (desbordamiento de enteros, acceso a memoria no inicializada y uso de punteros de la función de destructor arbitrarios) a través de datos serializados manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.15",
            "matchCriteriaId" : "3A59822F-11EA-4F4D-9721-6D3DD9842FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.1",
            "matchCriteriaId" : "473456E3-B45F-46C0-AEF8-72D78487CF38"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95371",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037659",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-11T16:59:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data."
      }, {
        "lang" : "es",
        "value" : "La función base64decode en base64.c en libimobiledevice libplist hasta la versión 1.12 permite a atacantes obtener información sensible de la memoria de proceso o provocar una denegación de servicio (sobrelectura del búfer) a través de datos split codificados Apple Property List."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "4201391B-6535-4AE4-87AD-4112C3F2B48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95385",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/3a55ddd3c4c11ce75a86afbefd085d8d397ff957",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/3a55ddd3c4c11ce75a86afbefd085d8d397ff957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-12T06:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/lib/Control/Ajax/tags-ajax.control.php en GeniXCMS 0.0.8 permite a editores remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro term a la URl por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10DE326-DA8E-43D3-B6E8-62AE5DDFFA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95660",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/commit/6e21c01d87672d81080450e6913e0093a02bfab8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/60",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/commit/6e21c01d87672d81080450e6913e0093a02bfab8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-12T06:59:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/lib/Control/Backend/posts.control.php en GeniXCMS 0.0.8 permite a administradores remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro id a gxadmin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D940A2-1F5E-4B90-90EF-F704336AFAB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/01/genixcms-sql-injection-quick-autopsy.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95655",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/61",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/01/genixcms-sql-injection-quick-autopsy.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-12T06:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/mod/newsletter/options.php en GeniXCMS 0.0.8 permite a administradores remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro recipient a gxadmin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10DE326-DA8E-43D3-B6E8-62AE5DDFFA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95684",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/61",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-12T06:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Samsung Note con software L(5.0/5.1), M(6.0) y N(7.0) permiten a atacantes bloquear systemUI aprovechando un manejo de excepciones incompleto. El ID de Samsung es SVE-2016-7122."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13E2E2D-41E2-4CF7-A019-6B462A614271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99CD57-C55D-4812-8F9C-5ACE7555C086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6EA64-6B65-4487-914F-9EF9CBB78211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4422C-42D0-47CA-A8B7-0DFF0652363E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95424",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-12T06:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Samsung Note con software KK(4.4), L(5.0/5.1) y M(6.0) permiten a atacantes bloquear el sistema mediante la creación arbitraria de un gran número de hilos VR de servicio activos. El ID de Samsung es SVE-2016-7650."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B4FF3D-35CC-4E86-A6EE-D065D654FC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13E2E2D-41E2-4CF7-A019-6B462A614271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99CD57-C55D-4812-8F9C-5ACE7555C086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6EA64-6B65-4487-914F-9EF9CBB78211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95418",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-12T11:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value."
      }, {
        "lang" : "es",
        "value" : "LibTIFF en la versión 4.0.7 es vulnerable a un desbordamiento de búfer de memoria dinámica en tools/tiffcp resultando en un DoS o ejecución de código a través de un valor BitsPerSample manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2656",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2657",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95413",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0381",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:01.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en silk/NLSF_stabilize.c en libopus en Mediaserver podría habilitar a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque podría ser usado para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. ID de Android ID: A-31607432."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95248",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libopus/+/0d052d64480a30e83fcdda80f4774624e044beb7",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-21",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "security@android.com"
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "security@android.com"
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "security@android.com"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libopus/+/0d052d64480a30e83fcdda80f4774624e044beb7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0382",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en la librería Framesequence podría permitir a un atacante utilizar un archivo especialmente manipulado para ejecutar un código arbitrario en el contexto de un proceso no privilegiado. Este problema está clasificado como High debido a la posibilidad de ejecución remota de código en una aplicación que usa la librería Framesequence. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95247",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0383",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1. Android ID: A-31677614."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el Framework APIs que podría permitir a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque puede ser usado para obtener acceso a capacidades elevadas, las cuales no son normalmente accesibles a una aplicación de terceros. Producto: Android. Versiones: 7.0, 7.1. Android ID: A-31677614."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95243",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0384",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32095626."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en lvm/wrapper/Bundle/EffectBundle.cpp en libeffects en Audioserver podría permitir a una aplicación local maliciosa ejecutar un código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque puede ser usado para obtener acceso a capacidades elevadas, las cuales no son normalmente accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32095626."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95239",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0385",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32585400."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Audioserver podría permitir a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque puede ser usado para obtener acceso a capacidades elevadas, las cuales no son normalmente accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32585400."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95239",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0386",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en la librería libnl podría permitir a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque puede ser usado para obtener acceso a capacidades elevadas, las cuales no son normalmente accesibles a una aplicación de terceros. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95256",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0387",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32660278."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Mediaserver podría permitir a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque puede ser usado para obtener acceso a capacidades elevadas, las cuales no son normalmente accesibles a una aplicación de terceros. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32660278."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95258",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0388",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inserted by the primary user. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32523490."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el External Storage Provider podría permitir a un usuario local secundario leer datos de una tarjeta de almacenamiento externo SD insertada por el usuario principal. Este problema está clasificado como High porque es una evasión general para las protecciones del sistema operativo que aíslan los datos de la aplicación de otras aplicaciones. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32523490."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95252",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0389",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31850211."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en la red del núcleo podría permitir a un atacante remoto utilizar un paquete de red especialmente manipulado para provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31850211."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95251",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0390",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31647370."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Tremolo/dpen.s en Mediaserver podría permitir a un atacante remoto utilizar un archivo especialmente manipulado para provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31647370."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/tremolo/+/5dc99237d49e73c27d3eca54f6ccd97d13f94de0",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/tremolo/+/5dc99237d49e73c27d3eca54f6ccd97d13f94de0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0391",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32322258."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en decoder/ihevcd_decode.c en libhevc en Mediaserver podría permitir a un atacante remoto utilizar un archivo especialmente manipulado para provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32322258."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/a33f6725d7e9f92330f995ce2dcf4faa33f6433f",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/a33f6725d7e9f92330f995ce2dcf4faa33f6433f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0392",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32577290."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en VBRISeeker.cpp en libstagefright en Mediaserver podría permitir a un atacante remoto utilizar un archivo especialmente manipulado para provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32577290."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0393",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-30436808."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en libvpx en Mediaserver podría permitir a un atacante remoto utilizar un archivo especialmente manipulado para provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-30436808."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libvpx/+/6886e8e0a9db2dbad723dc37a548233e004b33bc",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libvpx/+/6886e8e0a9db2dbad723dc37a548233e004b33bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0394",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31752213."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Telephony podría permitir a un atacante remoto provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31752213."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0395",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32219099."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Contacts podría permitir a una aplicación local maliciosa crear silenciosamente información de contacto. Este problema está clasificado como Moderate porque es una evasión local de los requisitos de interacción del usuario (acceso a la funcionalidad que normalmente requeriría la iniciación o el permiso del usuario). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32219099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95261",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0396",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31781965."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en visualizer/EffectVisualizer.cpp en libeffects en Mediaserver podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31781965."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95232",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/557bd7bfe6c4895faee09e46fc9b5304a956c8b7",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/557bd7bfe6c4895faee09e46fc9b5304a956c8b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0397",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32377688."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en id3/ID3.cpp en libstagefright en Mediaserver podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32377688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95232",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/7a3246b870ddd11861eda2ab458b11d723c7f62c",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/7a3246b870ddd11861eda2ab458b11d723c7f62c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0399",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32588756."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en lvm/wrapper/Bundle/EffectBundle.cpp en libeffects en el postprocesador de audio de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32588756."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.4.4",
            "matchCriteriaId" : "539FC1E0-6987-48EE-8FE9-7A27D4C3B69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "ECF808CA-23FE-44E3-A28C-095DB6560997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "1903DAE9-9B51-4D0B-8B4E-6C2F8966820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "AAE0DC37-20D9-4AAA-94D9-4E347368D7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "86A4E4C7-C630-4FCE-A681-042B6702CC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0400",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32584034."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en lvm/wrapper/Bundle/EffectBundle.cpp en libeffects en Audioserver podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32584034."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0401",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32588016."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en lvm/wrapper/Bundle/EffectBundle.cpp en libeffects en el postprocesador de audio de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32588016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.4.4",
            "matchCriteriaId" : "539FC1E0-6987-48EE-8FE9-7A27D4C3B69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "ECF808CA-23FE-44E3-A28C-095DB6560997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "1903DAE9-9B51-4D0B-8B4E-6C2F8966820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "AAE0DC37-20D9-4AAA-94D9-4E347368D7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "86A4E4C7-C630-4FCE-A681-042B6702CC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0402",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32436341."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en lvm/wrapper/Bundle/EffectBundle.cpp en libeffects en Audioserver podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32436341."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.4.4",
            "matchCriteriaId" : "539FC1E0-6987-48EE-8FE9-7A27D4C3B69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "ECF808CA-23FE-44E3-A28C-095DB6560997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "1903DAE9-9B51-4D0B-8B4E-6C2F8966820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "AAE0DC37-20D9-4AAA-94D9-4E347368D7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "86A4E4C7-C630-4FCE-A681-042B6702CC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://android.googlesource.com/platform/hardware/qcom/audio/+/d72ea85c78a1a68bf99fd5804ad9784b4102fe57",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://android.googlesource.com/platform/hardware/qcom/audio/+/d72ea85c78a1a68bf99fd5804ad9784b4102fe57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0403",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402548."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el subsistema de rendimiento del kernel podría permitir a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32402548."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95274",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0404",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-12T20:59:02.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32510733."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el subsistema de sonido del kernel podría permitir a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32510733."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95281",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3890",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-01-13T09:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows remote attackers to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuencias de comandos en sitios cruzados reflejada en los componentes de BlackBerry WatchDox Server Appliance-X versión 1.8.1 y anteriores y vAPP versiones 4.6.0 hasta 5.4.1, permite a atacantes remotos ejecutar secuencias de comandos en el contexto del navegador afectado persuadiendo a un usuario a hacer clic en un enlace malicioso proporcionado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:appliance-x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.1",
            "matchCriteriaId" : "ADC9816C-3AF1-416C-BC8A-63BFCC67A57D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A603A1-4BB1-469C-8DB1-75D62189655E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D46EFB9-56E8-4CB2-B0D5-82A1DF6530D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000038915",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95442",
        "source" : "secure@blackberry.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000038915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-13T09:59:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the specially crafted PDF file. The Vulnerability has been fixed in v2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de corrupción de memoria en Foxit PDF Toolkit v1.3 permite a atacantes remotos provocar una denegación de servicio y ejecución remota de código cuando la victima abre el archivo PDF especialmente manipulado. La vulnerabilidad se ha corregido en la versión v2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_pdf_toolkit:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03B4795-60C7-4E20-87CB-7397A8BC6877"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0398",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-01-13T16:59:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android IDs: A-32438594, A-32635664."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Audioserver podría permitir a una aplicación local maliciosa acceder a datos fuera de su nivel de permiso. Este problema está clasificado como Moderate porque podría utilizarse para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android IDs: A-32438594, A-32635664."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-01-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-14T07:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua, and admin/password_reset.lua."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de CSRF en ntopng hasta la versión 2.4 permite a atacantes remotos secuestrar la autenticación de usuarios arbitrarios, según lo demostrado por admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua y admin/password_reset.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntop:ntopng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "553EDC87-EF7A-4FD1-9CA0-447B22340CC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95654",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/commit/1b2ceac8f578a246af6351c4f476e3102cdf21b3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/commit/f91fbe3d94c8346884271838ae3406ae633f6f15",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41141/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/commit/1b2ceac8f578a246af6351c4f476e3102cdf21b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/commit/f91fbe3d94c8346884271838ae3406ae633f6f15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41141/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-14T07:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección abierta en comment.php en Serendipity hasta la versión 2.0.5 permite a atacantes remotos redirigir a usuarios a sitios web arbitrarios y llevar acabo ataques de phishing a través de una URL en el encabezado HTTP Referer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "A8C50710-D1C1-4D98-8905-2331437E2C29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95652",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/commit/6285933470bab2923e4573b5d54ba9a32629b0cd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/commit/6285933470bab2923e4573b5d54ba9a32629b0cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-14T07:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments."
      }, {
        "lang" : "es",
        "value" : "comment.php en Serendipity hasta la versión 2.0.5 permite CSRF en la eliminación de cualquier comentario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "A8C50710-D1C1-4D98-8905-2331437E2C29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95656",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/439",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-14T07:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin."
      }, {
        "lang" : "es",
        "value" : "Serendipity hasta la versión 2.0.5 permite CSRF para la instalación de un plugin de evento o un plugin de barra lateral."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "A8C50710-D1C1-4D98-8905-2331437E2C29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95659",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/439",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2584",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-01-15T02:59:02.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt."
      }, {
        "lang" : "es",
        "value" : "arch/x86/kvm/emulate.c en el kernel de Linux hasta la versión 4.9.3 permite a usuarios locales obtener información sensible de memoria del kernel o provocar una denegación de servicio (uso después de liberación de memoria) a través de una aplicación manipulada que aprovecha la emulación de instrucciones para fxrstor, fxsave, sgdt y sidt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.3",
            "matchCriteriaId" : "A6EF8826-3017-454A-9684-A61AA69029DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74d",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/13/7",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95430",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037603",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1413001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/129a72a0d3c8e139a04512325384fe5ac119e74d",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/13/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1413001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/129a72a0d3c8e139a04512325384fe5ac119e74d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:02.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request."
      }, {
        "lang" : "es",
        "value" : "wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php en la implementación REST API en WordPress 4.7 en versiones anteriores a 4.7.1 no restringe adecuadamente los listados de autores de publicación, lo que permite a atacantes remotos obtener información sensible a través de una petición wp-json/wp/v2/users."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/daf358983cc1ce0c77bf6d2de2ebbb43df2add60",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41497/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/daf358983cc1ce0c77bf6d2de2ebbb43df2add60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41497/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:02.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version header of a plugin."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en wp-admin/update-core.php en WordPress en versiones anteriores a 4.7.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del (1) nombre o (2) encabezado de versión de un plugin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/c9ea1de1441bb3bda133bf72d513ca9de66566c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/c9ea1de1441bb3bda133bf72d513ca9de66566c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:02.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de CSRF en WordPress en versiones anteriores a 4.7.1 permite a atacantes remotos secuestrar la autenticación de victimas no especificadas a través de vectores que implican una carga de archivo Flash."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:02.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to wp-admin/includes/class-theme-installer-skin.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en la funcionalidad de retorno de nombre de tema en wp-includes/class-wp-theme.php en WordPress en versiones anteriores a 4.7.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de directorio manipulado de un tema, relacionado con wp-admin/includes/class-theme-installer-skin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/ce7fb2934dd111e6353784852de8aea2a938b359",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mehmetince.net/low-severity-wordpress/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/ce7fb2934dd111e6353784852de8aea2a938b359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mehmetince.net/low-severity-wordpress/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:02.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name."
      }, {
        "lang" : "es",
        "value" : "wp-mail.php en WordPress en versiones anteriores a 4.7.1 podría permitir a atacantes remotos eludir las restricciones de publicación previstas a través de un servidor de correo falsificado con el nombre mail.example.com."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/061e8788814ac87706d8b95688df276fe3c8596a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/061e8788814ac87706d8b95688df276fe3c8596a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:03.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de CSRF en la funcionalidad de modo de accesibilidad de edición de widget en WordPress en versiones anteriores a 4.7.1 permite a atacantes remotos secuestrar la autenticación de victimas no especificadas para solicitudes que realizan una acción de acceso a widgets, relacionado con wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/03e5c0314aeffe6b27f4b98fef842bf0fb00c733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/03e5c0314aeffe6b27f4b98fef842bf0fb00c733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T02:59:03.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers to bypass intended access restrictions via a crafted (1) site signup or (2) user signup."
      }, {
        "lang" : "es",
        "value" : "wp-includes/ms-functions.php en la API Multisite WordPress en WordPress en versiones anteriores a 4.7.1 no elige adecuadamente los números aleatorios para claves, lo que hace que más fácil para atacantes remotos eludir las restricciones destinadas al acceso a través de una inscripción del (1) sitio o (2) usuario manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "5C55F44C-4A71-4C47-9908-071A23D46939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/cea9e2dc62abf777e06b12ec4ad9d1aaa49b29f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/cea9e2dc62abf777e06b12ec4ad9d1aaa49b29f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T22:59:00.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. (dot dot) in the fm_selected array parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en inc/files/files.ctrl.php en b2evolution hasta la versión 6.8.3 permite a usuarios remotos autenticados leer o eliminar archivos arbitrarios aprovechando el acceso back-office para proporcionar un .. (punto punto) en el parámetro del array fm_selected."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8.3",
            "matchCriteriaId" : "9C4446F5-9D08-412C-B4DB-3BFF3B7D7831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/26841d9c81f27ad23b2f6e4bd5eaec7f2f58dfe0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/35",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/26841d9c81f27ad23b2f6e4bd5eaec7f2f58dfe0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-15T22:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (1) comment frame or (2) avatar frame."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en la tabla de tipos de archivo en b2evolution hasta la versión 6.8.3 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un archivo .swf manipulado en un (1) marco del comentario o (2) marco del avatar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8.3",
            "matchCriteriaId" : "9C4446F5-9D08-412C-B4DB-3BFF3B7D7831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95452",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/261dbd5b294e707af766691e65a177a290314a6e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/261dbd5b294e707af766691e65a177a290314a6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-16T06:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute local file paths and added as attachments. To form a remote vulnerability, the msgHTML method must be called, passed an unfiltered, user-supplied HTML document, and must not set a base directory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PHPMailer en versiones anteriores a 5.2.22. El método msgHTML de PHPMailer aplica transformaciones a un documento HTML para hacerlo utilizable como un cuerpo de mail. Una de las transformaciones es convertir URLs de imágenes relativas en adjuntos utilizando un directorio base proporcionado por script. Si no se proporciona ningún directorio base, se resuelve en /, lo que significa que las URLs de imágenes relativas se tratan como rutas de archivo locales absolutas y se añaden como adjuntos. Para formar una vulnerabilidad remota, el método msgHTML debe ser llamado, pasado a un documento HTML suministrado por el usuario no filtrado y no debe establecer un directorio base."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmailer_project:phpmailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.21",
            "matchCriteriaId" : "BBD6A575-99D0-4982-809D-60A6D11AFB5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kalilinux.co/2017/01/12/phpmailer-cve-2017-5223-local-information-disclosure-vulnerability-analysis/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95328",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43056/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kalilinux.co/2017/01/12/phpmailer-cve-2017-5223-local-information-disclosure-vulnerability-analysis/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43056/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en la función prompt del usuario en GeniXCMS hasta la versión 0.0.8 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de nombres de etiqueta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95623",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en los formularios de usuario en GeniXCMS hasta la versión 0.0.8 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95622",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/65",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en author.control.php en GeniXCMS hasta la versión 0.0.8 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro type."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95455",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/66",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address."
      }, {
        "lang" : "es",
        "value" : "La característica de subida de archivos multimedia en GeniXCMS hasta la versión 0.0.8 permite a atacantes remotos llevar a cabo ataques SSRF a través de una URL, según lo demostrado por una dirección IP de la intranet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95462",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/64",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Posts.class.php en GeniXCMS hasta la versión 0.0.8 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95458",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the `.php6`, `.php7` and `.phtml` extensions."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de cambio de nombre de medios en GeniXCMS hasta la versión 0.0.8 no considera extensiones de archivo PHP alternativas cuando comprueba los archivos subidos para contenido PHP, lo que permite a usuarios renombrar y ejecutar archivos con las extensiones `.php6`, `.php7` y `.phtml`."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95460",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-17T09:59:00.333",
      "lastModified" : "2025-10-22T00:16:06.633",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set, and can also be exploited given access to the router over LAN or WLAN. When trying to access the web panel, a user is asked to authenticate; if the authentication is canceled and password recovery is not enabled, the user is redirected to a page that exposes a password recovery token. If a user supplies the correct token to the page /passwordrecovered.cgi?id=TOKEN (and password recovery is not enabled), they will receive the admin password for the router. If password recovery is set the exploit will fail, as it will ask the user for the recovery questions that were previously set when enabling that feature. This is persistent (even after disabling the recovery option, the exploit will fail) because the router will ask for the security questions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900 y R8000. Son propensos a revelar la contraseña a través de peticiones simples manipuladas al servidor de gestión de la web. El error es explotable remotamente si la opción de gestión remota está activada, y también puede ser explotado dado el acceso al router a través de LAN o WLAN. Cuando se trata de acceder al panel web, se pide al usuario que se autentique; si la autenticación se cancela y la recuperación de contraseña no está habilitada, el usuario es redirigido a una página que revela un token de recuperación de contraseña. Si un usuario proporciona el token correcto a la página /passwordrecovered.cgi?id=TOKEN (y la recuperación de contraseña no está habilitada), recibirán la contraseña de administrador para el router. Si la recuperación de contraseña está habilitada, la explotación fallará, ya que pedirá al usuario preguntas para la recuperación que fueron previamente establecidas cuando se habilitó esa característica. Esto es persistente (incluso tras la inhabilitación de la opción de recuperación, la explotación fallará) porque el router preguntará por las preguntas de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-09-08",
      "cisaActionDue" : "2022-09-29",
      "cisaRequiredAction" : "Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.",
      "cisaVulnerabilityName" : "NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6200_firmware:1.0.1.56_1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1769F8-B2CB-465B-85B8-9D7AC25C63CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A466B29-3ADA-46D9-824C-8DF9160B7DD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:1.0.2.78_1.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A99D1C-CABE-4526-B3B7-3708C0E18AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9597966A-B13C-4098-838B-EC9AA8DE443D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:vegn2610_firmware:1.0.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D329D85-C180-426E-B430-9FEDE5C77F25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:vegn2610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0967FC76-F977-4D18-B570-9444459A19FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ac1450_firmware:1.0.0.34_10.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91292776-92F7-4089-86FC-7569C8F940DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ac1450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BA18B2-8234-4C26-B865-741D467C5EBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000v3_firmware:1.0.2.68_60.0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E35A89F-44C7-496C-B61B-652989EDE438"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252E5C7B-EF02-4374-A43E-02FAA9E697D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700v3_firmware:1.0.0.40_1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D59A6F9-0359-4AB4-AD0F-1D6044D59409"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603836E6-E7FF-43C7-A410-8BD9D0950F7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4000_firmware:1.0.2.4_9.1.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91561A20-30F5-4163-9178-5FC32897F827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C34EC74-D6F1-46F1-B47E-E62793171427"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:1.0.1.44_1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9874914-4D90-493F-BD2B-40FFF1737F58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9F459C-B628-402A-AF4A-72E08FE41837"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:1.0.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EB5F49-3628-4418-AF36-AF8FD6F5BA25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:1.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD46588-5866-4159-85E1-58B0D1F98406"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6300_firmware:1.0.0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B15B85C-F099-4584-9F59-1CFC3275D625"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78542C95-85CC-43E5-9F0E-B12DDD5B79C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6300b_firmware:1.0.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CE8A8F-7894-4140-8E4B-84153C5A6B13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6300b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B89703-CAFB-43F6-8880-90349F8ED856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200bv4_firmware:1.0.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CDFE4F-6C5C-4B10-926E-92C7759D60EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200bv4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C78A475-9DDF-432B-A94A-01EFAC7DC70D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95457",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41205/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41205/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5521",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2576",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-01-20T08:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums."
      }, {
        "lang" : "es",
        "value" : "En Moodle 2.x y 3.x, hay una desinfección incorrecta de atributos en foros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.17",
            "matchCriteriaId" : "45E88468-55DB-4101-9135-1B994EBA542A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12737AF4-B2D5-4661-B06A-6A06FE95EC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C59A94-D225-478A-B23E-41C4324BC643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88385B1-EEFB-4825-BD8F-215C39FD86DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BE2782-D167-4237-B57D-2E4C04571524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F277F979-12FA-47A5-B0A5-D174C2127A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38498617-8E45-4E73-AE9F-C7A0D18FDE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9047769-BFF4-42DB-8B19-F6D16FA910A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A75ACE-FED2-4830-B259-744ABF25463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04EBA18-DFFF-4529-B647-98191325663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A746AB-5D58-4196-962A-D22454C3550B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B549AD98-4DC5-4BE8-B3E0-3EEF1833E6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F030E8C-0C49-41DC-9D40-A704A563C156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9224D94-1C48-468C-A39B-B2694ED178F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7EE9AD-E122-4288-9416-6D8F8790D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4FC2CC1-787B-480F-BC41-538CE2507CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098BADF2-C1D3-406E-9E79-E25483178C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B027A-38D6-445E-BFA9-FA68524147DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5654B446-F7A5-49D4-90D9-478C18220A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7CA637-D1BF-437D-8AD9-A21AE97E8681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F27D6B-01A9-43EA-B5FF-28BB90DA6935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFDDA05-8D65-4D3B-BFBC-672C760D0ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2521684D-F25D-495B-8D34-DB8748E063BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=345912",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=345912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2578",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-01-20T08:59:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.x, there is XSS in the assignment submission page."
      }, {
        "lang" : "es",
        "value" : "En Moodle 3.x, hay XSS en la página de envío de asignaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95647",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=345915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=345915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-20T08:59:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en template/usererror.missing_extension.php en Symphony CMS en versiones anteriores a 2.6.10 permite a atacantes remotos renombrar archivos arbitrarios a través de un .. (dot dot) en los parámetros de carpeta existente y nueva carpeta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsymphony:symphony:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.9",
            "matchCriteriaId" : "0A93B3B7-30C5-42C4-A298-AD37FE96F010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95689",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/issues/2639",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/releases/tag/2.6.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/issues/2639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/releases/tag/2.6.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-20T08:59:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en template/usererror.missing_extension.php en Symphony CMS en versiones anteriores a 2.6.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de carpeta existente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsymphony:symphony:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.9",
            "matchCriteriaId" : "0A93B3B7-30C5-42C4-A298-AD37FE96F010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95686",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/issues/2639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/releases/tag/2.6.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/issues/2639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/releases/tag/2.6.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-20T08:59:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request."
      }, {
        "lang" : "es",
        "value" : "includes/classes/ia.core.users.php en Subrion CMS 4.0.5 permite a atacantes remotos llevar a cabo ataques PHP Object Injection a través de datos serializados manipulados en una salt cookie en una petición de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441962C9-D1ED-4EA4-B8C4-02F293870681"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95688",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/297",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-21T01:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short."
      }, {
        "lang" : "es",
        "value" : "La función principal en plistutil.c en libimobiledevice libplist hasta la versión 1.12 permite a atacantes obtener información sensible de la memoria de proceso o provocar una denegación de servicio (sobre lectura del búfer) a través de datos Apple Property List que son demasiado cortos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "4201391B-6535-4AE4-87AD-4112C3F2B48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95702",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/7391a506352c009fe044dead7baad9e22dd279ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/87",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/7391a506352c009fe044dead7baad9e22dd279ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ..\\/ to bypass the filter rule. Then, this attacker can exploit this vulnerability to delete or read any files on the server. It can also be used to determine whether a file exists."
      }, {
        "lang" : "es",
        "value" : "El parche para el salto de directorio (CVE-2017-5480) en b2evolution versión 6.8.4-stable tiene una vulnerabilidad eludible. Un atacante puede utilizar ..\\/ para eludir la regla de filtro. Luego. este atacante puede explotar esta vulnerabilidad para borrar o leer cualquier archivo en el servidor. Esto puede ser utilizado también para determinar si existe un archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:P/A:P",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:6.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E378D53E-A877-4CBE-A94E-5DF6B23AA879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://b2evolution.net/downloads/6-8-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95700",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/e35f7c195d8c1103d2d981a48cda5ab45ecac48a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://b2evolution.net/downloads/6-8-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/e35f7c195d8c1103d2d981a48cda5ab45ecac48a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout (each of the login attempts will occupy a connection slot for a longer time). Once this occurs, legitimate login attempts via SSH/telnet will be refused, resulting in a denial of service; you must restart the device."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto en los switches FiberHome Fengine S5800 V210R240. Un atacante no autorizado puede acceder al servicio SSH del dispositivo, utilizando una herramienta de craqueo de contraseñas para establecer rápidamente conexiones SSH. Esto desencadenará un incremento en el tiempo de espera en el inicio de sesión SSH (cada un de los intentos de inicio de sesión ocupará una ranura de conexión durante un tiempo mayor). Una vez que esto ocurra, los intentos de inicio de sesión legítimos a través de SSH/telnet serán rechazados, resultando en una denegación de servicio; debe reiniciar el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:fengine_s5800_firmware:v210r240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4C2BB-CB68-47EA-A125-7DECA73630D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:fengine_28f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA77F7F-59F0-4E9A-A6FA-55E6710D58EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:fengine_52f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8E0A26-FF86-43F3-9D33-EF0B5648403C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:fengine_52t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61388D1-E384-4DFF-89FF-72CA6B22AD9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:fengine_s5800-28t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C5E8A6-8404-4F29-BC42-99AEB3DF91AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:fengine_s5800-28t-s-pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35DEF0C7-1261-498F-AB16-9078806F856E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nfcwar.com",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95708",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nfcwar.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in b2evolution before 6.8.5 allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en plugins/markdown_plugin/_markdown.plugin.php en b2evolution en versiones anteriores a 6.8.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL javascript:."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8.4",
            "matchCriteriaId" : "14A848D5-3D72-484C-800F-A66AC941A094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://b2evolution.net/downloads/6-8-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95704",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/ce5b36e44b714b18b0bcd34c6db0187b8d13bab8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://b2evolution.net/downloads/6-8-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/ce5b36e44b714b18b0bcd34c6db0187b8d13bab8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the \"Volume Up\" button during device boot, where an attacker with ADB access can issue the adb reboot bootloader command. Then, the attacker can put the platform's SELinux in permissive mode, which severely weakens it, by issuing: fastboot oem selinux permissive."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto en ABOOT en OnePlus 3 y 3T OxygenOS en versiones anteriores a 4.0.2. El atacante puede reiniciar el dispositivo en el modo de inicio rápido, lo que podría hacerse sin ninguna autenticación. Un atacante físico puede presionar el botón \"Subir Volumen\" durante el arranque del dispositivo, donde un atacante con acceso ADB puede emitir el comando bootlader de reinicio de adb. Entonces, el atacante puede poner el SELinux de la plataforma en modo permisivo, lo que lo debilita severamente, emitiendo: fastboot oem selinux permissive."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.8",
            "matchCriteriaId" : "343FD4D5-58CE-484E-B8E5-F3C2B15EF6F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.4",
            "matchCriteriaId" : "4AB7D4A5-3FB2-4097-98D9-222FF350F10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "El plugin ConvertToPDF en Foxit Reader en versiones anteriores a 8.2 y PhantomPDF en versiones anteriores a 8.2 en Windows, cuando la aplicación gflags está habilitada permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de una imagen JPEG manipulada. La vulnerabilidad podría conducir a la divulgación de información; un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.1.4.1208:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C4F324-7C99-4A7C-BB65-263652CB3DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:8.1.1.1115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ECEB5E-EAD7-448E-B06A-FACEC75AA829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95353",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-039/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-039/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff."
      }, {
        "lang" : "es",
        "value" : "LibTIFF versión 4.0.7 es vulnerable a una sobre lectura de bufer basado en memoria dinámica en tif_lzw.c resultando en DoS o ejecución de código a través de una imagen bmp manipulada en tools/bmp2tiff."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2664",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en register.php en GeniXCMS en versiones anteriores a 1.0.0 permite a usuarios no autenticados ejecutar comandos SQL arbitrarios a través del parámetro activation."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95701",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/69",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T07:59:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/lib/Options.class.php en GeniXCMS en versiones anteriores a 1.0.0 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de el parámetro modules."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.8",
            "matchCriteriaId" : "ABA59DAB-097E-4E81-AAA6-28C5707A58E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95703",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/68",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5182",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-01-23T15:59:00.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to OES2015 SP1 before Maintenance Update 11080, OES2015 before Maintenance Update 11079, OES11 SP3 before Maintenance Update 11078, OES11 SP2 before Maintenance Update 11077)."
      }, {
        "lang" : "es",
        "value" : "Remote Manager en Open Enterprise Server (OES) permite a atacantes remotos no autenticados leer cualquier archivo arbitrario, a través de una URL especialmente manipulada, que permite un salto de directorio completo y una divulgación total de información. Esta vulnerabilidad esta presente en todas las versiones de OES para linux, it applies to OES2015 SP1 en versiones anteriores a Maintenance Update 11080, OES2015 en versiones anteriores a Maintenance Update 11079, OES11 SP3 en versiones anteriores a Maintenance Update 11078, OES11 SP2 en versiones anteriores a Maintenance Update 11077)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:open_enterprise_server:2.0:*:*:*:*:linux_kernel:*:*",
            "matchCriteriaId" : "82A92EAA-F64B-4DFE-8471-151ACE7A84EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:open_enterprise_server:2015:*:*:*:*:linux_kernel:*:*",
            "matchCriteriaId" : "F7B0F432-2442-48D7-941C-EA5BF417D891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:11.0:*:*:*:*:linux_kernel:*:*",
            "matchCriteriaId" : "2510A39F-B565-4060-8B20-3A3A9EB510A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95743",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037689",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018503",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T17:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile()."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto en eClinicalWorks Patient Portal 7.0 build 13. Esto es una inyección SQL ciega dentro de template.jsp, lo que puede ser explotada sin la necesidad de autenticación y a través de una solicitud POST HTTP, y que puede ser utilizado para volcar los datos de la base de datos a un servidor malicioso, utilizando una técnica fuera de banda tal como select_loadfile()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclinicalworks:patient_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D551829-1627-4125-985A-830130EF0D7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95741",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/malerisch/d32d127a002ac1f10bce39333ca9a4dc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/malerisch/d32d127a002ac1f10bce39333ca9a4dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T17:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile()."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto en eClinicalWorks Patient Portal 7.0 build 13. Esto es una inyección SQL ciega dentro de messageJson.jsp, que sólo puede ser explotado por usuarios autenticados a través de una petición POST HTTP y que puede ser utilizado para volcar los datos de la base de datos a un servidor malicioso, utilizando una técnica fuera de banda tal como select_loadfile()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclinicalworks:patient_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D551829-1627-4125-985A-830130EF0D7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95742",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/malerisch/898c7ae46abde5da15748beb1e6e886f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/malerisch/898c7ae46abde5da15748beb1e6e886f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T21:59:03.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of crafted requests, aka SAP Security Note 2330422."
      }, {
        "lang" : "es",
        "value" : "Odata Server en SAP Adaptive Server Enterprise (ASE) 16 permite a atacantes remotos provocar una denegación de servicio (caída del proceso) a través de una serie de peticiones manipuladas, vulnerabilidad también conocida como SAP Security Note 2330422."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:adaptive_server_enterprise:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DAB85D-361D-46BF-90E4-7210BA0F6B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/140610/SAP-ASE-ODATA-Server-16-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jan/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93545",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-16-036-sap-ase-odata-server-denial-service/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/140610/SAP-ASE-ODATA-Server-16-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jan/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-16-036-sap-ase-odata-server-denial-service/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-23T21:59:03.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by leveraging a missing authorization check for the (1) getInformation, (2) getParameters, (3) getServiceInfo, (4) getStatistic, or (5) getClientStatistic function, aka SAP Security Note 2331908."
      }, {
        "lang" : "es",
        "value" : "La función msp (también conocida como MSPRuntimeInterface) en el componente P4 SERVERCORE en SAP AS JAVA permite a atacantes remotos obtener información sensible del sistema aprovechando una verificación de autorización perdida para la función (1) getInformation, (2) getParameters, (3) getServiceInfo, (4) getStatistic o (5) getClientStatistic, vulnerabilidad también conocida como SAP Security Note 2331908."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5007E3B7-3C36-4256-9E01-51C6F52FD0FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/140611/SAP-NetWeaver-AS-Java-P4-MSPRUNTIMEINTERFACE-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jan/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93504",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-16-037-sap-java-p4-mspruntimeinterface-information-disclosure/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/140611/SAP-NetWeaver-AS-Java-P4-MSPRUNTIMEINTERFACE-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jan/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-16-037-sap-java-p4-mspruntimeinterface-information-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2929",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-24T07:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting vulnerability. Successful exploitation could lead to JavaScript code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de la extensión de Adobe Acrobat para Chrome 15.1.0.3 y anteriores tienen una vulnerabilidad de secuencias de comandos de sitios cruzados basada en DOM. Una explotación exitosa podría permitir la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:15.1.0.3:*:*:*:*:chrome:*:*",
            "matchCriteriaId" : "9B56A307-B65D-4EC2-B26E-0BB7D82CD15B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95693",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037687",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-03.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2970",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-24T07:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad explotable de desbordamiento de pila en el motor XSLT relacionada con la manipulación de plantilla. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95690",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2971",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-24T07:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad explotable de desbordamiento de pila en la rutina del decodificador JPEG. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95690",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0259/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0259/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2972",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-01-24T07:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 15.020.20042 y anteriores, 15.006.30244 y anteriores, 11.0.18 y anteriores tienen una vulnerabilidad explotable de corrupción de memoria en el módulo de conversación de imágenes relacionado con el análisis JPEG. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "591061D5-5A3B-4788-9219-E6A267C7F205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "2DA73DF1-D517-4D01-A901-11C6A410F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "1044057B-3C1D-4920-B16E-11E8F43B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "65AE21B3-AF0D-480B-9D1A-4D64D2F749D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "C032D3A4-80F5-4066-97DC-3AED72D6C15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "8D7F2E90-F6DF-41A3-A1DB-26058BEA2A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95690",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-24T07:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de Quagga, 0.93 hasta la versión 1.1.0, son vulnerables a una asignación de memoria ilimitada en la CLI de telnet 'vty', conduciendo a una denegación de servicio de los demonios de Quagga, o incluso a todo el host. Cuando los demonios de Quagga son configurados con su CLI de telnet habilitada, cualquiera que pueda conectarse a los puertos TCP puede desencadenar esta vulnerabilidad antes de la autenticación. La mayoría de las distribuciones restringen la interfaz de telnet de Quagga para el acceso local sólo por defecto. El búfer de entrada 'vty' de la interfaz de telnet de Quagga crece automáticamente, sin limite, siempre y cuando no se introduzca una nueva línea. Esto permite a un atacante hacer que el demonio de Quagga asigne memoria ilimitada enviando cadenas muy largas sin una nueva línea. Eventualmente el demonio es finalizado por el sistema, o el propio sistema se queda sin memoria. Esto se corrige en Quagga 1.1.1 y Free Range Routing (FRR) Protocol Suite 2017-01-10."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "7A460953-662D-47E0-B16E-06CFC2378895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0794.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://savannah.nongnu.org/forum/forum.php?forum_id=8783",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/freerangerouting/frr/pull/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.quagga.net/pipermail/quagga-dev/2017-January/016586.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0794.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://savannah.nongnu.org/forum/forum.php?forum_id=8783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/freerangerouting/frr/pull/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.quagga.net/pipermail/quagga-dev/2017-January/016586.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-25T18:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Pagekit CMS en versiones anteriores a 1.0.11. En esta vulnerabilidad el atacante remoto es capaz de restablecer la contraseña del usuario registrado, cuando la barra de herramienta de depuración está habilitada. La contraseña se recupera con éxito utilizando este exploit. El ID de SecureLayer7 es SL7_PGKT_01."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pagekit:pagekit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "6AADEFDE-AA29-4ABE-A1DA-BBE3841838B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95806",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41143/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41143/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-25T21:59:00.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta la versión 2.2.3 y 2.0.0 hasta la versión 2.0.9, el disector ASTERIX podría entrar en un bucle infinito, desencadenado por la inyección de paquetes o un archivo de captura mal formado. Esto fue abordado en epan/dissectors/packet-asterix.c cambiando un tipo de datos para evitar un desbordamiento de enteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95795",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/19746/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=781f03580c81339513bb1238b202b72469a1240b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/19746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=781f03580c81339513bb1238b202b72469a1240b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/835.html\">CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-25T21:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta la versión 2.2.3 y 2.0.0 hasta la versión 2.0.9, el disector DHCPv6 podría entrar en un bucle grande, desencadenado por la inyección de paquetes o un archivo de captura mal formado. Esto fue abordado en epan/dissectors/packet-dhcpv6.c cambiando un tipo de dato para evitar un desbordamiento de enteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/19747/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/19747/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57894f741f7cc98b46c9fdce7eee8256d2a4ae3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3794",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against an administrative user. More Information: CSCuz03317. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de CSRF contra un usuario administrativo. Más información: CSCuz03317. Lanzamientos afectados conocidos: 2.6. Lanzamientos reparados conocidos: 2.7.1.12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95635",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037649",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3795",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir a un atacante remoto autenticado llevar a cabo cambios arbitrarios de contraseña contra cualquier usuario no administrativo. Más información: CSCuz03345. Lanzamientos afectados conocidos: 2.6. Lanzamientos reparados conocidos: 2.7.1.12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95643",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037650",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3796",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir a un atacante remoto autenticado ejecutar comandos shell predeterminados en otros anfitriones. Más información: CSCuz03353. Lanzamientos afectados conocidos: 2.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95641",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037651",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3797",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. More Information: CSCvb60655. Known Affected Releases: 2.7."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir a un atacante remoto no autenticado ver el nombre del dominio completo del servidor de administración de Cisco WebEx. Más información: CSCvb60655. Lanzamientos afectados conocidos: 2.7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0048F-B88D-47F6-89D6-B7EDDECBF700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ECA8FE-D587-4692-AA90-9706E44BAC1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95639",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037648",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3798",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.5(1.12029.1) 11.5(1.12900.11) 12.0(0.98000.369) 12.0(0.98000.370) 12.0(0.98000.398) 12.0(0.98000.457)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de XSS de elusión de filtro en la interfaz de gestión basada en web de Cisco Unified Communications Manager podría permitir a un atacante remoto no autenticado montar ataques de XSS contra un usuario de un dispositivo afectado. Más información: CSCvb97237. Lanzamientos afectados conocidos: 11.0(1.10000.10) 11.5(1.10000.6). Lanzamientos reparados conocidos: 11.5(1.12029.1) 11.5(1.12900.11) 12.0(0.98000.369) 12.0(0.98000.370) 12.0(0.98000.398) 12.0(0.98000.457)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.12000.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A590BFE0-536A-4E8A-AB30-F85A9FB3397D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95872",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037653",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3799",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un parámetro URL de Cisco WebEx Meeting Center podría permitir a un atacante remoto no autenticado realizar redirección de sitio. Más información: CSCzu78401. Lanzamientos afectados conocidos: T28.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:wbs28_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7551C8-7EF8-448E-97B0-6DD466E788DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95642",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037647",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3800",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz16076. Known Affected Releases: 9.7.1-066 9.7.1-HP2-207 9.8.5-085. Known Fixed Releases: 10.0.1-083 10.0.1-087."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el motor de escaneo de contenido de Cisco AsyncOS Software para Cisco Email Security Appliances (ESA) podría permitir a un atacante remoto no autenticado eludir el mensaje configurado o filtros de contenido en el dispositivo. Productos afectados: Esta vulnerabilidad afecta a todos los lanzamientos anteriores al primer lanzamiento reparado de Cisco AsyncOS Software para Cisco Email Security Appliances, tanto accesorios virtuales como de hardware, si el software está configurado para aplicar un filtro de mensajes o de contenido a los archivos adjuntos de correos electrónicos entrantes. La vulnerabilidad no se limita a reglas o acciones específicas para un filtro de mensajes o contenido. Más información: CSCuz16076. Lanzamientos afectados conocidos: 9.7.1-066 9.7.1-HP2-207 9.8.5-085. Lanzamientos reparados conocidos: 10.0.1-083 10.0.1-087."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:9.7.1-066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DADB2C-D86D-44B5-B87B-289990A7D9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:9.7.1-hp2-207:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99F44A9-E698-4C40-901D-98908876AC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:9.8.5-085:*:*:*:*:*:*:*",
            "matchCriteriaId" : "125A9475-18A8-44AF-B73E-B23D40EF63F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95637",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037656",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-esa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-esa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3802",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.0(0.99000.9). Known Fixed Releases: 12.0(0.98000.176) 12.0(0.98000.414) 12.0(0.98000.531) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.8)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el motor de escaneo de contenido de Cisco AsyncOS Software para Cisco Email Security Appliances (ESA) podría permitir a un atacante remoto no autenticado eludir el mensaje configurado o filtros de contenido en el dispositivo. Productos afectados: Esta vulnerabilidad afecta a todos los lanzamientos anteriores al primer lanzamiento reparado de Cisco AsyncOS Software para Cisco Email Security Appliances, tanto accesorios virtuales como de hardware, si el software está configurado para aplicar un filtro de mensajes o de contenido a los archivos adjuntos de correos electrónicos entrantes. La vulnerabilidad no se limita a reglas o acciones específicas para un filtro de mensajes o contenido. Más información: CSCuz16076. Lanzamientos afectados conocidos: 9.7.1-066 9.7.1-HP2-207 9.8.5-085. Lanzamientos reparados conocidos: 10.0.1-083 10.0.1-087."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0\\(0.99000.9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63D5440-BFC6-4CAC-8F9F-81E494C0A666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95636",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037655",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3803",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service (DoS) condition. More Information: CSCva72252. Known Affected Releases: 15.2(2)E3 15.2(4)E1. Known Fixed Releases: 15.2(2)E6 15.2(4)E3 15.2(5)E1 15.2(5.3.28i)E1 15.2(6.0.49i)E 3.9(1)E."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la cola de reenvío de Cisco IOS Software de los interruptores Cisco 2960X y 3750X podría permitir a un atacante adyacente no autenticado provocar una fuga de memoria en la cola de reenvío del software que podría conducir eventualmente a una condición de denegación de servicio (DoS) parcial. Más información: CSCva72252. Lanzamientos afectados conocidos: 15.2(2)E3 15.2(4)E1. Lanzamientos reparados conocidos: 15.2(2)E6 15.2(4)E3 15.2(5)E1 15.2(5.3.28i)E1 15.2(6.0.49i)E 3.9(1)E."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72782F95-948D-489B-A19A-9DAB825DFE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95632",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037657",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3804",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because of an __inst_001__isis_fabricpath hap reset when processing a crafted link-state packet. More Information: CSCvc45002. Known Affected Releases: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Known Fixed Releases: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo de procesamiento de paquetes Intermediate System-to-Intermediate System (IS-IS) de software Cisco Nexus 5000, 6000 y 7000 Series Switches podría permitir a un atacante adyacente no autenticado provocar un reinicio de los dispositivos afectados. Switches en el dominio FabricPath se bloquea a causa de un reinicio hap __inst_001__isis_fabricpath cuando se procesa un paquete de estado de enlace manipulado. Más información: CSCvc45002. Lanzamientos afectados conocidos: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Lanzamientos reparados conocidos: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97083C8-89AE-4D0D-A039-1B798D60B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3.12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "768151A3-CCF6-4F37-877F-4F1F2CD60791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(0.296\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB84933-1B94-474A-ABB6-AFF91B62446A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167FD2BD-A610-4966-86DF-DA5C78E0D3D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2B1E07-8519-4F58-9048-81ABA12E01DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95638",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037658",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3805",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-01-26T07:59:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and Cisco IOx Software running on IR829, IR809, IE4K, and CGR1K platforms. More Information: CSCvb20897. Known Affected Releases: 1.0(0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco IOS y Cisco IOx Software podría permitir a un atacante remoto no autenticado ver información confidencial que es mostrada sin autenticar el dispositivo. Productos afectados: Esta vulnerabilidad afecta a Cisco IOS Software y Cisco IOx Software que se ejecutan en plataformas IR829, IR809, IE4K y CGR1K. Más información: CSCvb20897. Lanzamientos afectados conocidos: 1.0(0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:iox:1.0\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "502F7CF1-A15A-4CEA-8010-8FD15671D9A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95644",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037654",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-ios",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-ios",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-27T10:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects the EmployeePortalServlet page and the following parameter: employer."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en eClinicalWorks healow@work 8.0 build 8. Es una inyección SQL ciega dentro de SEmployeePortalServlet, la cual puede ser explotada por usuarios no autenticados a través de una solicitud HTTP POST y que puede ser usada para volcar bases de datos a un servidor malicioso usando una técnica fuera de banda como select_loadfile(). La vulnerabilidad afecta a la página EmployeePortalServlet y al siguiente parámetro: employer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclinicalworks:patient_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D2BC29-F600-47DB-A253-2B834D9EFCF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/malerisch/ded4d6e6e980667ee9f7fc7f2818f4fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/malerisch/ded4d6e6e980667ee9f7fc7f2818f4fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-27T10:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList.jsp page within the Patient Portal. Inserted payload is rendered within the Patient Portal and the raceMasterList.jsp page does not require authentication. The vulnerability can be used to extract sensitive information or perform attacks against the user's browser. The vulnerability affects the raceMasterList.jsp page and the following parameter: race."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en eClinicalWorks Patient Portal 7.0 build 13. Es una vulnerabilidad Cross Site Scripting que afecta a la página raceMasterList.jsp dentro de Patient Portal. La carga útil procesada dentro de Patient Portal y la página raceMasterList.jsp no requiere autenticación. La vulnerabilidad puede ser usada para extraer información sensible o realizar ataques contra el navegador del usuario. La vulnerabilidad afecta a la página raceMasterList.jsp y al siguiente parámetro: race."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclinicalworks:patient_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D551829-1627-4125-985A-830130EF0D7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/malerisch/8a2c195f385dff7f935db831a8dc2697",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/malerisch/8a2c195f385dff7f935db831a8dc2697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3231",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded de Oracle Java SE (subcomponente: Networking). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112; Java SE Embedded: 8u111. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer Java SE, Java SE Embedded. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java aisladas, que cargan y ejecutan código no confiable (e.j: Código procedente de internet) y depende del aislamiento de seguridad de Java. Esta vulnerabilidad no se aplica a implementaciones JAVA, normalmente en servidores, que cargan y ejecutan solo código de confianza (e.j: Código instalado por un administrador). CVSS v3.0 Base Score 4.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95563",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3235",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 3.5 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Core). Versiones compatibles que están afectadas son 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 y 12.2.0. Vulnerabilidad fácilmente explotable permite acceso físico para comprometer Oracle FLEXCUBE Universal Banking. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle FLEXCUBE Universal Banking así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS v3.0 Base Score 3.5 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95555",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3236",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Core). Versiones compatibles que están afectadas son 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 y 12.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle FLEXCUBE Universal Banking. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle FLEXCUBE Universal Banking, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS v3.0 Base Score 4.7 (Impactos de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95552",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3238",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Optimizer). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores, 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacante poco privilegiado con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o caída frecuentemente repetible (DOS completa) de MySQL Server. CVSS v3.0 Base Score 6.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95571",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3239",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GlassFish Server executes to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 3.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Administration). Versiones compatibles que están afectadas son 3.0.1 y 3.1.2. Vulnerabilidad fácilmente explotable permite a atacante poco privilegiado con inicio de sesión a la infraestructura donde se ejecuta Oracle GlassFish Server, comprometer Oracle GlassFish Server. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle GlassFish Server. CVSS v3.0 Base Score 3.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95493",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3240",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS Security accessible data. CVSS v3.0 Base Score 3.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente RDBMS Security de Oracle Database Server. La versión compatible que está afectada es 12.1.0.2. Vulnerabilidad fácilmente explotable permite a atacante poco privilegiado teniendo privilegio de inicio local de sesión con inicio de sesión a la infraestructura donde se ejecuta RDBMS Security, comprometer RDBMS Security. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de RDBMS Security. CVSS v3.0 Base Score 3.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95477",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037630",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3241",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (subcomponente: RMI). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Vulnerabilidad difícil de explotar permite a atacante no autenticado con acceso de red a través de múltiples protocolos, comprometer Java SE, Java SE Embedded, JRockit. Mientras la vulnerabilidad esté en Java SE, Java SE Embedded, JRockit, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Java SE, Java SE Embedded, JRockit. Nota: Esta vulnerabilidad únicamente puede ser explotada suministrando datos de APIs en el componente especificado sin utilizar aplicaciones Untrusted Java Web Start o applets Untrusted Java, como por ejemplo a través de un servicio web. CVSS v3.0 Base Score 9.0 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1A57E9-0134-466F-B8EE-9E38A844F865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95488",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-006-oracle-openjdk-java-serialization-dos-vulnerability/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41145/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-006-oracle-openjdk-java-serialization-dos-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41145/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3242",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: LDOM Manager). Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server for Sparc executes to compromise Oracle VM Server for Sparc. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM Server for Sparc, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM Server for Sparc. CVSS v3.0 Base Score 5.9 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM Server for Sparc de Oracle Sun Systems Products Suite (subcomponente: LDOM Manager). Versiones compatibles que están afectadas son 3.2 y 3.4. Vulnerabilidad fácilmente explotable permite a atacante poco privilegiado con inicio de sesión a la infraestructura donde se ejecuta Oracle VM Server for Sparc, comprometer Oracle VM Server for Sparc. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle VM Server for Sparc, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle VM Server for Sparc. CVSS v3.0 Base Score 5.9 (Impactos de disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:sparc:*",
            "matchCriteriaId" : "8BA52C8E-8A65-497A-9DE6-54342FCC5A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:sparc:*",
            "matchCriteriaId" : "F2A7DE34-BFA5-407A-B99D-DFD1295CA9B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95541",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3243",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Charsets). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores. Vulnerabilidad difícil de explotar permite a atacante con elevados privilegios con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 4.4 (Impactos de disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95538",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3244",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server component de Oracle MySQL (subcomponente: Server: DML). Versiones compatibles que están afectadas son 5.5.53 y anteriores 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacantes poco privilegiados con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 6.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95565",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3245",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Direct Banking de Oracle Financial Services Applications (subcomponente: Pre-Login). Versiones compatibles que están afectadas son 12.0.2 y 12.0.3. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle FLEXCUBE Direct Banking. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle FLEXCUBE Direct Banking, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Direct Banking. CVSS v3.0 Base Score 4.7 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC13CF11-2880-41FA-9534-7874904FDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA84D97F-A400-4D39-B60A-63F3407E2B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95606",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3246",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Patching). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application Object Library accessible data as well as unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS v3.0 Base Score 6.0 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Object Library de Oracle E-Business Suite (subcomponente: Patching). Versiones compatibles que están afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a atacante con privilegios elevados con inicio de sesión en la infraestructura donde Oracle Application Object Library se ejecuta, compromete Oracle Application Object Library. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Application Object Library así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Application Object Library. CVSS v3.0 Base Score 6.0 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BD1423-F7EE-4B53-AE4B-DFA784F685C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95FED83-21C8-4035-BB1B-3C8A93D4645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411C3C4C-5513-4F7D-8D58-A39F21F43637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95604",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3247",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Core). Versiones compatibles que están afectadas son 2.1.1, 3.0.1 y 3.1.2. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de SMTP, comprometer Oracle GlassFish Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle GlassFish Server. CVSS v3.0 Base Score 4.3 (Impactos de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95483",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3248",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.553",
      "lastModified" : "2025-08-13T15:15:29.313",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Core Components). Versiones compatibles que están afectadas son 10.3.6.0, 12.1.3.0, 12.2.1.0 y 12.2.1.1. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de T3, comprometer Oracle WebLogic Server. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F57085F-A922-421B-BD10-ECC4F3CB34C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/152357/Oracle-Weblogic-Server-Deserialization-RMI-UnicastRef-Remote-Code-Execution.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95465",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037632",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44998/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/152357/Oracle-Weblogic-Server-Deserialization-RMI-UnicastRef-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44998/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2017-3248-detect-centos-weblogic-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2017-3248-mitigate-centos-weblogic-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3249",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS v3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Security). Versiones compatibles que están afectadas son 2.1.1, 3.0.1 y 3.1.2. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de LDAP, comprometer Oracle GlassFish Server. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle GlassFish Server así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle GlassFish Server y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de Oracle GlassFish Server. CVSS v3.0 Base Score 7.3 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95484",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3250",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS v3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (Subcomponente: Security). Versiones compatibles que están afectadas son 2.1.1, 3.0.1 y 3.1.2. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle GlassFish Server. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle GlassFish Server así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle GlassFish Server y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de Oracle GlassFish Server. CVSS v3.0 Base Score 7.3 (Impactos de Confidencialidad, Integridad y Disponibilidad)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95480",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3251",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server component de Oracle MySQL (Subcomponente: Server: Optimizer). Versiones compatibles que están afectadas son 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacantes privilegiados elevados con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 4.9 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "8DC73DC2-8D62-4ED4-AC91-CCC929BDC846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95482",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3252",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.8 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (Subcomponente:JAAS). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Vulnerabilidad difícil de explotar permite a atacantes poco privilegiados con acceso a la red a través de múltiples protocolos, comprometer Java SE, Java SE Embedded, JRockit. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Java SE, Java SE Embedded, JRockit, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en creación no autorizada, inserción o borrado de acceso a todos los datos accesibles de Java SE, Java SE Embedded, JRockit. Nota: Aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones Java Web Start y applets Java aislados. También puede ser explotada suministrando datos de APIs en el componente especificado sin utilizar aplicaciones Java Web Start o applets Java aislados, como por ejemplo mediante un servicio web. CVSS v3.0 Base Score 5.8 (Impactos de integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1A57E9-0134-466F-B8EE-9E38A844F865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95509",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3253",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (Subcomponente: 2D). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Vulnerabilidad fácilmente explotable permite a atacantes no autenticados con acceso a la red a través de múltiples protocolos comprometer Java SE, Java SE Embedded, JRockit. Ataques exitosos de esta vulnerabilidad pueden resultar en a capacidad no autorizada para causar un bloqueo o frecuencia de bloqueo repetido (DOS completo) de Java SE, Java SE Embedded, JRockit. Nota: Aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones Java Web Start y applets Java aislados. También puede ser explotada suministrando datos de APIs en el componente especificado sin utilizar aplicaciones Java Web Start o applets Java aislados, como por ejemplo mediante un servicio web. CVSS v3.0 Base Score 7.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1A57E9-0134-466F-B8EE-9E38A844F865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95498",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3255",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. While the vulnerability is in Oracle JDeveloper, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle JDeveloper accessible data. CVSS v3.0 Base Score 5.8 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle JDeveloper de Oracle Fusion Middleware (subcomponente: ADF Faces). Versiones compatibles que están afectadas son 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacantes no autenticados con acceso a la red a través de HTTP, comprometer Oracle JDeveloper. Mientras la vulnerabilidad esté en Oracle JDeveloper, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle JDeveloper. CVSS v3.0 Base Score 5.8 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EF593B-376C-4367-B9FB-1F429062576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7506589-9B3B-49BA-B826-774BFDCC45B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70A973-A5C5-4E51-B93C-C22888E24FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042C243F-EDFE-4A04-AB0B-26E73CC34837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204CEEBC-3D7C-483D-99D6-264EEFAE968C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0061C130-67E8-45CD-8463-15D6661419AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739DC3EA-E25A-449B-8468-9A65AECC47C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95543",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3256",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Replication). Versiones compatibles que están afectadas son 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacante poco privilegiado con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 6.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "8DC73DC2-8D62-4ED4-AC91-CCC929BDC846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95486",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3257",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: InnoDB). Versiones compatibles que están afectadas son 5.6.34 y versiones anteriores 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacantes poco privilegiados con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 6.5 (Impacto de disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95589",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3258",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DDL). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacante poco privilegiado con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 6.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95560",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3259",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 3.7 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Deployment). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112. Vulnerabilidad difícil de explotar permite a atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer Java SE. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Java SE. Nota: Esta vulnerabilidad aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java aisladas, que cargan y ejecutan código no confiable (e.j: Código procedente de internet) y depende del aislamiento de seguridad de Java. Esta vulnerabilidad no se aplica a implementaciones JAVA, normalmente en servidores, que cargan y ejecutan solo código de confianza (e.j: Código instalado por un administrador). CVSS v3.0 Base Score 3.7 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95570",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3260",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: AWT). Versiones compatibles que están afectadas son Java SE: 7u121 y 8u112. Vulnerabilidad difícil de explotar permite a atacantes no autenticados con acceso a la red a través de múltiples, protocolos comprometer Java SE. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Java SE, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Java SE. Esta vulnerabilidad aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java aisladas, que cargan y ejecutan código no confiable (e.j: Código procedente de internet) y depende del aislamiento de seguridad de Java. Esta vulnerabilidad no se aplica a implementaciones JAVA, normalmente en servidores, que cargan y ejecutan solo código de confianza (e.j: Código instalado por un administrador). CVSS v3.0 Base Score 8.3 (Impactos de confidencialidad, integridad y disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95576",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3261",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded de Oracle Java SE (subcomponente: Networking). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112; Java SE Embedded: 8u111. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer Java SE, Java SE Embedded. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java aisladas, que cargan y ejecutan código no confiable (e.j: Código procedente de internet) y depende del aislamiento de seguridad de Java. Esta vulnerabilidad no se aplica a implementaciones JAVA, normalmente en servidores, que cargan y ejecutan solo código de confianza (e.j: Código instalado por un administrador). CVSS v3.0 Base Score 4.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95566",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3262",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:02.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Java Mission Control). Versiones compatibles que están afectadas son Java SE: 8u112. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer Java SE. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Java SE. Nota: Se aplica a Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95578",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3263",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS v3.0 Base Score 8.1 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Team Member). Versiones compatibles que están afectadas son 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 y 16.2. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red a través de HTTP, comprometer Primavera P6 Enterprise Project Portfolio Management. Ataques exitosos de esta vulnerabilidad pueden resultar en creación no autorizada, inserción o borrado de acceso a todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management. CVSS v3.0 Base Score 8.1 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56DC460-26F5-453E-A5BC-4C60AA3212EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95535",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3264",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version that is affected is 16.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS v3.0 Base Score 3.1 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: Open UI). La versión compatible que está afectada es 16.1. Vulnerabilidad difícil de explotar permite a un atacante poco privilegiado con acceso a la red a través de HTTP, comprometer Siebel UI Framework. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Siebel UI Framework. CVSS v3.0 Base Score 3.1 (Impactos de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD84548-0B49-4400-B29D-420E5A708AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95508",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037635",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3265",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "\"Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Packaging). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad difícil de explotar permite a un atacante privilegiado con inicio de sesión en la infraestructura donde MySQL Server se ejecuta, comprometer MySQL Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de MySQL Server y capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 5.6 (Impactos de Confidencialidad y Disponibilidad).\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95520",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3266",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. la puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 9.8 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95507",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3267",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. la puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 7.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95513",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3268",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. La puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. Base Score 7.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95522",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3269",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. La puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. (Impacto de disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95524",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3270",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código de Outside In Technology. la puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 7.5 (Impacto de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95529",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3271",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters ). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Outside In Technology así como en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Outside In Technology y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. la puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 8.6 (Impacto de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95532",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3272",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded de Oracle Java SE (subcomponente: Libraries). Versiones compatibles que están afectadas son Java SE: 6u131, 7u121 y 8u112; Java SE Embedded: 8u111. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer Java SE, Java SE Embedded. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Java SE, Java SE Embedded los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java aisladas, que cargan y ejecutan código no confiable (e.j: Código procedente de internet) y depende del aislamiento de seguridad de Java. Esta vulnerabilidad no se aplica a implementaciones JAVA, normalmente en servidores, que cargan y ejecutan solo código de confianza (e.j: Código instalado por un administrador). CVSS v3.0 Base Score 9.6 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "B1384D79-F9DA-44C5-A3C9-3CCE627B2255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "C747C39A-145E-4648-99C2-0A8C7BA77F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95533",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0338.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3273",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DDL). Versiones compatibles que están afectadas son 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 6.5 (Impacto de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95583",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3274",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Email Center de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Email Center. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Email Center los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Email Center así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Email Center. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1898484-F93B-422D-949C-73272AF8C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7437698-A0C0-4038-9786-01ABEFC9E2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5439E4-ED00-4CA9-9585-A1B339CB9ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBC5B43-4326-49EC-BDBD-3AB13D7A00D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD11784-A642-4F43-9D98-73DE8A245B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337D432-6BEC-4632-A2C9-40D00CE89390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEE9FFA-9A5F-4C00-8975-8407D5CC5077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95591",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3275",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Email Center de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Email Center. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Email Center, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Email Center así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Email Center. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1898484-F93B-422D-949C-73272AF8C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7437698-A0C0-4038-9786-01ABEFC9E2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5439E4-ED00-4CA9-9585-A1B339CB9ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBC5B43-4326-49EC-BDBD-3AB13D7A00D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD11784-A642-4F43-9D98-73DE8A245B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337D432-6BEC-4632-A2C9-40D00CE89390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEE9FFA-9A5F-4C00-8975-8407D5CC5077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95593",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3276",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS v3.0 Base Score 5.7 (Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel Zones virtualized block driver). La versión compatible que está afectada es 11.3. Vulnerabilidad difícil de explotar permite a un atacante con privilegios elevados con inicio de sesión en la infraestructura donde Solaris se ejecuta, comprometer Solaris. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Solaris capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Solaris. CVSS v3.0 Base Score 5.7 (Impactos de Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95544",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037641",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3277",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: OAM Client). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS v3.0 Base Score 4.9 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications Manager de Oracle E-Business Suite (subcomponente: OAM Client). Versiones compatibles que están afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante con privilegios elevados con acceso a la red a través de HTTP, comprometer Oracle Applications Manager. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Applications Manager. CVSS v3.0 Base Score 4.9 (Impacto de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FDF7A2-A97E-46CD-8F20-BF4A1C4F0058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2D2D24-EA72-498B-85F7-BC6E5C84DBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E4612-0D49-4EAE-80B8-8E3FF1788F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DB997D-7686-4B5E-8816-58A4E0009AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B77673-EA2B-4C7E-915E-0CD3AAC67F57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95617",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3278",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: Request Confirmation). La versión compatible que está afectada es 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95600",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3279",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Leads Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Leads Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Leads Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Leads Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Leads Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Leads Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Leads Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Leads Management así como resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Leads Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:leads_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054E2F00-7BA0-481F-8F3B-C0FA368EFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:leads_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA83CEB-776D-48B9-8C1B-7E549A645771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:leads_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA4C619-4956-44DE-BFFF-FE6FC6EA05D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95614",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3280",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Partner Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Partner Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Partner Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Partner Management. CVSS v3.0 Base Score 4.7 (Impactos de integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DEDB63-A872-4D5F-BBD6-C5195E58D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E51301-7392-4862-BF3F-8B6E14CCC684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15079C95-2741-4267-A99C-37474BF16F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD024FC-DADD-443D-9F29-2C6F0E2BC0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F3A48-9F1D-44A7-8053-1C23F381FE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0680EA5E-5BCC-44DE-9421-814B2386B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4C076D-91C9-41E9-A092-D63C8529C942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95577",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3281",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Partner Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Partner Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Partner Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Partner Management. CVSS v3.0 Base Score 4.7 (Impactos de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DEDB63-A872-4D5F-BBD6-C5195E58D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E51301-7392-4862-BF3F-8B6E14CCC684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15079C95-2741-4267-A99C-37474BF16F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD024FC-DADD-443D-9F29-2C6F0E2BC0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F3A48-9F1D-44A7-8053-1C23F381FE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0680EA5E-5BCC-44DE-9421-814B2386B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4C076D-91C9-41E9-A092-D63C8529C942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95582",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3282",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Partner Management de E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Partner Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Partner Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Partner Management. CVSS v3.0 Base Score 4.7 (Impactos de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DEDB63-A872-4D5F-BBD6-C5195E58D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E51301-7392-4862-BF3F-8B6E14CCC684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15079C95-2741-4267-A99C-37474BF16F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD024FC-DADD-443D-9F29-2C6F0E2BC0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F3A48-9F1D-44A7-8053-1C23F381FE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0680EA5E-5BCC-44DE-9421-814B2386B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4C076D-91C9-41E9-A092-D63C8529C942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95586",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3283",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Partner Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Partner Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Partner Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Partner Management. CVSS v3.0 Base Score 4.7 (Impactos de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DEDB63-A872-4D5F-BBD6-C5195E58D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E51301-7392-4862-BF3F-8B6E14CCC684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15079C95-2741-4267-A99C-37474BF16F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD024FC-DADD-443D-9F29-2C6F0E2BC0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F3A48-9F1D-44A7-8053-1C23F381FE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0680EA5E-5BCC-44DE-9421-814B2386B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4C076D-91C9-41E9-A092-D63C8529C942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95587",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3284",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Service Fulfillment Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Fulfillment Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Service Fulfillment Manager accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Service Fulfillment Manager de E-Business Suite de Oracle (subcomponente: User Interface). Las versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite a los atacantes no autenticados con acceso a la red por medio de HTTP comprometer a Oracle Service Fulfillment Manager. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad esta en Oracle Service Fulfillment Manager, los ataques pueden impactar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Service Fulfillment Manager, así como también en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Service Fulfillment Manager. CVSS versión 3.0 Puntuación base 8.2 (Impactos de confidencialidad e integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7DF672-FBC4-4BB4-943C-5ABB2EE4C075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59124B47-8D70-4A87-B76F-1B18D737817C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFF1857-16D0-4DD1-8F5F-BF4F0C8401E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A39954-BD27-4C24-B183-C8AF14876721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10038C5E-9CF8-48D0-B107-D733E5EBDCDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4003C935-10FF-458F-86A6-9FF96244063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D5EA0A-D136-4DB6-866E-43BD01F49761"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95613",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3285",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Service Fulfillment Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Fulfillment Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Service Fulfillment Manager accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Service Fulfillment Manager de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Service Fulfillment Manager. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Service Fulfillment Manager, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Service Fulfillment Manager así como resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Service Fulfillment Manager. CVSS v3.0 Base Score 8.2 (Impactos de Integridad y Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7DF672-FBC4-4BB4-943C-5ABB2EE4C075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59124B47-8D70-4A87-B76F-1B18D737817C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFF1857-16D0-4DD1-8F5F-BF4F0C8401E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A39954-BD27-4C24-B183-C8AF14876721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10038C5E-9CF8-48D0-B107-D733E5EBDCDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4003C935-10FF-458F-86A6-9FF96244063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_fulfillment_manager:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D5EA0A-D136-4DB6-866E-43BD01F49761"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95615",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3286",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: Patching). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Applications DBA executes to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS v3.0 Base Score 6.0 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications DBA de Oracle E-Business Suite (subcomponente: Patching). Versiones compatibles que están afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante con privilegios elevados con inicio de sesión en la infraestructura donde Oracle Applications DBA se ejecuta, comprometer Oracle Applications DBA. Ataques exitosos de esta vulnerabilidad pueden resultar en una creación no autorizada, borrado o modificación de acceso a datos críticos o a todos los datos accesibles de Oracle Applications DBA así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Applications DBA. CVSS v3.0 Base Score 6.0 (Impactos de Integridad y Confidencialidad)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E064D5-BDE1-4040-BC83-9BECED3299DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479AF1FF-B81F-4FAE-866B-70EDDA900EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5A8EFC-607E-40E5-A732-51B23C1D7460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC89B9D8-3C9F-44E1-83F7-246AC0F06918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007AA843-EE17-4B19-969B-CA7749EB2ACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3287",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle iStore. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle iStore, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iStore así como resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle iStore. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad))."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95616",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3289",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded de Oracle Java SE (subcomponente: Hotspot). Versiones compatibles que están afectadas son Java SE: 7u121 y 8u112; Java SE Embedded: 8u111. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer Java SE, Java SE Embedded. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Java SE, Java SE Embedded, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java aisladas, que cargan y ejecutan código no confiable (e.j: Código procedente de internet) y depende del aislamiento de seguridad de Java. Esta vulnerabilidad no se aplica a implementaciones JAVA, normalmente en servidores, que cargan y ejecutan solo código de confianza (e.j: Código instalado por un administrador). CVSS v3.0 Base Score 9.6 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "92EF1E3B-6EF8-499A-84EA-D7792B181CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "73185AEF-8CB1-4728-9E99-D0D2A3419D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB76EC4-557F-4C67-BE1E-79E837043B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "706F9471-3647-4D13-B794-4F53700091F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED8B5A9-E738-430E-9FC6-206DFC98B965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA3E574-DC5D-465B-95B8-CD1AF5433646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95525",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170119-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3290",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 7.9 (Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Shared Folder). Versiones compatibles que están afectadas son VirtualBox en versiones anteriores a 5.0.32 y versiones anteriores a 5.1.14. Vulnerabilidad fácilmente explotable permite a un atacante con privilegios elevados con inicio de sesión en la infraestructura donde Oracle VM VirtualBox se ejecuta, comprometer Oracle VM VirtualBox. Mientras la vulnerabilidad esté en Oracle VM VirtualBox, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle VM VirtualBox y capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle VM VirtualBox. CVSS v3.0 Base Score 7.9 (Impactos de Integridad y Disponibilidad)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F94D50F-3A18-49D0-B238-91647215AF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8899F709-B14F-4889-958D-F9782EE3B9C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95601",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037638",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-08",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3291",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Packaging). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante con privilegios elevados con inicio de sesión en la infraestructura donde MySQL Server se ejecuta, comprometer MySQL Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de MySQL Server. CVSS v3.0 Base Score 6.3 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 3.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95501",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3292",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 5.7 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Integration Broker). Versiones compatibles que están afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red a través de HTTP, comprometer PeopleSoft Enterprise PeopleTools. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS v3.0 Base Score 5.7 (Impactos de Confidencialidad)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95502",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3293",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:03.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters ). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Outside In Technology. Ataques exitosos pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Outside In Technology así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Outside In Technology y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. la puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 8.6 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95534",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3294",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters ). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. La puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 7.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95536",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-03",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3295",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters ). Versiones compatibles que están afectadas son 8.5.2 y 8.5.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Outside In Technology. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle Outside In Technology. Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDKs). El protocolo y la puntuación de CVSS depende del software que utiliza el código Outside In Technology. La puntuación de CVSS asume que el software pasa los datos recibidos a través de una red directamente al código de Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor. CVSS v3.0 Base Score 7.5 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05232480-EB9C-4882-9F54-D32996D20657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DD6CB3-ED55-465D-AB98-13EFD013AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95539",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-03",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3296",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Commerce Platform de Oracle Commerce (subcomponente: Dynamo Application Framework). Versiones compatibles que están afectadas son 10.0.3.5, 10.2.0.5 y 11.2.0.2. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Commerce Platform. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Commerce Platform. CVSS v3.0 Base Score 4.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_platform:10.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC3BD4A-9240-4F7F-8979-09C125521715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_platform:10.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC6415C-CEC2-482A-8862-884CF6C36EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_platform:11.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C1B35-10B4-4173-B838-F0874708964B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3297",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Framework). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Direct Banking de Oracle Financial Services Applications (subcomponente: Framework). Versiones compatibles que están afectadas son 12.0.2 y 12.0.3. Vulnerabilidad de difícil explotación permite a un atacante poco privilegiado con acceso a la red a través de HTTP, comprometer Oracle FLEXCUBE Direct Banking. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Direct Banking. CVSS v3.0 Base Score 5.3 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC13CF11-2880-41FA-9534-7874904FDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA84D97F-A400-4D39-B60A-63F3407E2B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95603",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3298",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: PIA Core Technology). Versiones compatibles que están afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer PeopleSoft Enterprise PeopleTools. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de PeopleSoft Enterprise PeopleTools así como acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS v3.0 Base Score 6.1 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95504",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3299",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: PIA Search Functionality). Versiones compatibles que están afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer PeopleSoft Enterprise PeopleTools. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de PeopleSoft Enterprise PeopleTools así como acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS v3.0 Base Score 6.1 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95503",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3300",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Multichannel Framework). Versiones compatibles que están afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer PeopleSoft Enterprise PeopleTools. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de PeopleSoft Enterprise PeopleTools así como acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS v3.0 Base Score 6.1 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95505",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-005-oracle-peoplesoft-xss-vulnerability/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-005-oracle-peoplesoft-xss-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3301",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS v3.0 Base Score 3.3 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). La versión compatible que está afectada es 11.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con inicio de sesión a la infraestructura donde Solaris se ejecuta, comprometer Solaris. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Solaris. CVSS v3.0 Base Score 3.3 (Impacto de Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95567",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037641",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3303",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle XML Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML Gateway accessible data as well as unauthorized update, insert or delete access to some of Oracle XML Gateway accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle XML Gateway de Oracle E-Business Suite (subcomponente: Oracle Transport Agent). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle XML Gateway. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle XML Gateway, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle XML Gateway así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle XML Gateway. CVSS v3.0 Base Score 8.2 (Impacto de Integridad y Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB33C58F-B338-47CB-B68D-9D660D92F1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25CCBFD-2BBD-417A-8A0F-9FB5986D9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAA16ED-84E5-4680-9BE6-C64B40550C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B07737-F462-453C-98F4-546D633514E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0528F5D-B4EE-48DE-AE44-5F76A86F0C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D11537-BA49-462F-99D5-68E200D7D1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:xml_gateway:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54313D00-DFF6-4FFE-86D4-B0DACBDC1298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3310",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in OJVM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of OJVM. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente OJVM de Oracle Database Server. Versiones compatibles que estan afectadas son 11.2.0.4 y 12.1.0.2. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado poseedor de privilegio Create Session, Create Procedure con acceso a la red a través de múltiples protocolos, comprometer OJVM. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en OJVM, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de OJVM. CVSS v3.0 Base Score 9.0 (Impactos de Integridad, Confidencialidad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037630",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3311",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control (subcomponent: Test Manager for Web Apps). Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Testing Suite accessible data. CVSS v3.0 Base Score 5.3 (Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Application Testing Suite de Oracle Enterprise Manager Grid Control (subcomponente: Test Manager for Web Apps). Versiones compatibles que están afectadas son 12.5.0.3, 12.5.0.2 y 12.4.0.2. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Application Testing Suite. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Application Testing Suite. CVSS v3.0 Base Score 5.3 (Impactos de integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_testing_suite:12.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F3E8E4-BD91-4220-B710-960A45C232D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_testing_suite:12.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E818A9-663D-4AFB-B3D6-686CE4DB9676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EA8B91-7634-4636-B647-1049BA7CA088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95584",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037633",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3312",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Packaging). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores, 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante poco privilegiado con un inicio de sesión a la infraestructura donde MySQL Server se ejecuta, comprometer MySQL Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de MySQL Server. CVSS v3.0 Base Score 6.7 (Impactos de Integridad, Confidencialidad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 3.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95491",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3313",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: MyISAM). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores, 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante poco privilegiado con un inicio de sesión a la infraestructura donde MySQL Server ejecuta a comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de MySQL Server. CVSS v3.0 Base Score 4.7 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "01EDA41C-6B2E-49AF-B503-EB3882265C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2076871-2E80-4605-A470-A41C1A8EC7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F61F047-129C-41A6-8A27-FFCBB8563E91"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "569964DA-31BE-4520-A66D-C3B09D557AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.55",
            "matchCriteriaId" : "88990BBC-2BEC-41C1-8628-5B78AEAAEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.30",
            "matchCriteriaId" : "54A6C1D7-D1CC-4504-BF4C-0DFCC3FEA297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.22",
            "matchCriteriaId" : "F41E7F44-7EDF-4AA0-9AB6-4773D74E8D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.5",
            "matchCriteriaId" : "5A7C3774-0062-4200-B63B-B0503C4B7738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3809",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95527",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3314",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Core). Versiones compatibles que están afectadas son 12.0.0, 12.1.0 y 12.2.0. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle FLEXCUBE Universal Banking. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle FLEXCUBE Universal Banking, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle FLEXCUBE Universal Banking así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS v3.0 Base Score 6.1 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9582BE-825E-4427-A3D9-39857AAC9D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95549",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3315",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM ePerformance accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise HCM ePerformance de Oracle PeopleSoft Products (subcomponente: Security). La versión compatible que está afectada es 9.2. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red a través de HTTP, comprometer PeopleSoft Enterprise HCM ePerformance. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de HCM ePerformance. CVSS v3.0 Base Score 4.3 (Impactos de confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_eperformance:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7DCD6-E940-41D3-AA12-50490E49AB4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95510",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3316",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: GUI). Versiones compatibles que están afectadas son VirtualBox anterior a 5.0.32 y anterior a 5.1.14. Vulnerabilidad fácilmente explotable permite a un atacante con privilegios elevados con acceso a la red a través de múltiples protocolos, comprometer Oracle VM VirtualBox. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle VM VirtualBox, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Impactos de Integridad, Confidencialidad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F94D50F-3A18-49D0-B238-91647215AF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8899F709-B14F-4889-958D-F9782EE3B9C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95579",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037638",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-08",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41196/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41196/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3317",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Logging). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores, 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante con privilegios elevados con inicio de sesión a la infraestructura donde MySQL Server se ejecuta, comprometer MySQL Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS v3.0 Base Score 4.0 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95585",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3318",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Error Handling). Versiones compatibles que están afectadas son 5.5.53 y versiones anteriores, 5.6.34 y versiones anteriores y 5.7.16 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante con privilegios elevados con inicio de sesión a la infraestructura donde MySQL Server se ejecuta, comprometer MySQL Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de MySQL Server CVSS v3.0 Base Score 4.0 (Impacto de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.53",
            "matchCriteriaId" : "DA05707F-9B38-4C5D-9367-D7DF52658AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.34",
            "matchCriteriaId" : "E9C89C4E-C358-485A-9097-50232C9C6F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "5E5267D6-D424-4FB6-80CD-E13132083522"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.54",
            "matchCriteriaId" : "7425B1AD-88EE-4E62-8F91-F3FE413F0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.29",
            "matchCriteriaId" : "5750A91A-1784-4DE9-B72C-61A3B48B0892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.21",
            "matchCriteriaId" : "70247F46-D133-4E30-AE2F-8974DEFDA1AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95588",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3319",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: X Plugin). Versiones compatibles que están afectadas son 5.7.16 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante poco privilegiado con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server. CVSS v3.0 Base Score 3.1 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "8DC73DC2-8D62-4ED4-AC91-CCC929BDC846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95479",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3320",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 2.4 (Confidentiality impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Encryption). Versiones compatibles que están afectadas son 5.7.16 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante con privilegios elevados con acceso a la red a través de múltiples protocolos, comprometer MySQL Server. Ataques exitosos requieren interacción humana de una persona distinta del atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server. CVSS v3.0 Base Score 2.4 (Impactos de Confidencialidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "8DC73DC2-8D62-4ED4-AC91-CCC929BDC846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95470",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3321",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Cluster de Oracle MySQL (subcomponente: Cluster: General). Versiones compatibles que están afectadas son 7.2.19 y versiones anteriores 7.3.8 y versiones anteriores y 7.4.5 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer MySQL Cluster. Ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de MySQL Cluster. CVSS v3.0 Base Score 3.7 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.19",
            "matchCriteriaId" : "BF2EE9FE-4A95-4624-9DBE-141A4ABB69C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.8",
            "matchCriteriaId" : "D0C7AC16-6C03-4920-B652-A76B5B4607BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.5",
            "matchCriteriaId" : "D23426A5-8B33-4804-AE63-04D4BB07DC7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95562",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3322",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Cluster de Oracle MySQL (subcomponente: Cluster: NDBAPI). Versiones compatibles que están afectadas son 7.2.25 y versiones anteriores, 7.3.14 y versiones anteriores 7.4.12 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer MySQL Cluster. Ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de MySQL Cluster. CVSS v3.0 Base Score 3.7 (Impactos de disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.25",
            "matchCriteriaId" : "070550F1-8546-40D4-A5D6-4F379EC6BA24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.14",
            "matchCriteriaId" : "FDE7B669-245E-42A0-A6FF-DA4032B5019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.12",
            "matchCriteriaId" : "3BB55F73-6DC7-4534-B39D-163A5D565884"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95574",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3323",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Cluster de Oracle MySQL (subcomponente: Cluster: General). Versiones compatibles que están afectadas son 7.2.25 y versiones anteriores 7.3.14 y versiones anteriores y 7.4.12 y versiones anteriores. Vulnerabilidad de difícil explotación permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos, comprometer MySQL Cluster. Ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de MySQL Cluster. CVSS v3.0 Base Score 3.7 (Impactos de Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.25",
            "matchCriteriaId" : "070550F1-8546-40D4-A5D6-4F379EC6BA24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.14",
            "matchCriteriaId" : "FDE7B669-245E-42A0-A6FF-DA4032B5019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.12",
            "matchCriteriaId" : "3BB55F73-6DC7-4534-B39D-163A5D565884"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95575",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3324",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS v3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Versiones compatibles que están afectadas son 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 y 16.2. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Primavera P6 Enterprise Project Portfolio Management. Mientras la vulnerabilidad esté en Primavera P6 Enterprise Project Portfolio Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en una creación no autorizada, borrado o modificación de acceso a datos críticos o a todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de Primavera P6 Enterprise Project Portfolio Management. CVSS v3.0 Base Score 10.0 (Impactos de Confidencialidad, Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56DC460-26F5-453E-A5BC-4C60AA3212EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95528",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3325",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel UI Framework accessible data as well as unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: EAI). La versión compatible que está afectada es 16.1. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Siebel UI Framework. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Siebel UI Framework, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Siebel UI Framework así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Siebel UI Framework. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD84548-0B49-4400-B29D-420E5A708AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95494",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037635",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3326",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications de Oracle E-Business Suite (subcomponente: Role Summary). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Common Applications. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Common Applications, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Common Applications así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Common Applications. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD375D75-8B6E-43C0-A747-F3DA4FD147A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE04C6C2-4818-403E-B2D0-5220BDC39C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F4DED6-1E2A-4DD4-8D90-BD319DF993AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27227D-8844-4D2E-979D-91AAA657155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C9C61-EFCD-41CD-8EFB-A9ECBD7DCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20D8C53-46D2-409B-B24A-B6023F6DF4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0505D42-88E5-4DB5-BB6E-473522DF2B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95611",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3327",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications de Oracle E-Business Suite (subcomponente: Resources Module). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP, comprometer Oracle Common Applications. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Common Applications, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Common Applications así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Common Applications. CVSS v3.0 Base Score 8.2 (Impactos de Integridad y Confidencialidad)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD375D75-8B6E-43C0-A747-F3DA4FD147A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE04C6C2-4818-403E-B2D0-5220BDC39C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F4DED6-1E2A-4DD4-8D90-BD319DF993AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27227D-8844-4D2E-979D-91AAA657155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C9C61-EFCD-41CD-8EFB-A9ECBD7DCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20D8C53-46D2-409B-B24A-B6023F6DF4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0505D42-88E5-4DB5-BB6E-473522DF2B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95618",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3328",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications de Oracle E-Business Suite (subcomponente: Resources Module). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Common Applications. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Common Applications, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Common Applications así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Common Applications. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD375D75-8B6E-43C0-A747-F3DA4FD147A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE04C6C2-4818-403E-B2D0-5220BDC39C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F4DED6-1E2A-4DD4-8D90-BD319DF993AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27227D-8844-4D2E-979D-91AAA657155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C9C61-EFCD-41CD-8EFB-A9ECBD7DCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20D8C53-46D2-409B-B24A-B6023F6DF4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0505D42-88E5-4DB5-BB6E-473522DF2B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95610",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3330",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel UI Framework accessible data as well as unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS v3.0 Base Score 7.6 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: Open UI). La versión compatible que está afectada es 16.1. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red a través de HTTP comprometer Siebel UI Framework. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Siebel UI Framework, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Siebel UI Framework así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Siebel UI Framework. CVSS v3.0 Base Score 7.6 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD84548-0B49-4400-B29D-420E5A708AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95499",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037635",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3332",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Integrity and Availability impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: VirtualBox SVGA Emulation). Versiones compatibles que están afectadas son VirtualBox anterior a 5.0.32 y anterior a 5.1.14. Vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con inicio de sesión a la infraestructura donde Oracle VM VirtualBox se ejecuta, comprometer Oracle VM VirtualBox. Mientras la vulnerabilidad esté en Oracle VM VirtualBox, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en una creación no autorizada, borrado o modificación de acceso a datos críticos o a todos los datos accesibles de Oracle VM VirtualBox y capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Impactos de Integridad y Disponibilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F94D50F-3A18-49D0-B238-91647215AF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8899F709-B14F-4889-958D-F9782EE3B9C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95599",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037638",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-08",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3333",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95463",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3334",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:04.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3335",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3336",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3338",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3339",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3340",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3341",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3343",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3344",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3346",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3348",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3349",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3350",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3351",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3352",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3353",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3354",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3357",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3358",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Marketing. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Marketing, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Marketing así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Marketing. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3359",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Intelligence. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Intelligence, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Intelligence accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Intelligence accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Customer Intelligence de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Customer Intelligence. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Customer Intelligence, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Customer Intelligence así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Customer Intelligence. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_intelligence:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300225E-9D52-43E7-9F4E-E012AC265407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_intelligence:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C300A2A-7FD4-44BC-B55F-E49A5AAF8536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_intelligence:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F06063F7-2230-4175-A599-9397EFDE6A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95464",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3360",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Intelligence. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Intelligence, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Intelligence accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Intelligence accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Customer Intelligence de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Customer Intelligence. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Customer Intelligence, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Customer Intelligence así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Customer Intelligence. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_intelligence:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300225E-9D52-43E7-9F4E-E012AC265407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_intelligence:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C300A2A-7FD4-44BC-B55F-E49A5AAF8536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_intelligence:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F06063F7-2230-4175-A599-9397EFDE6A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95511",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3361",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Installed Base accessible data as well as unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Installed Base de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Installed Base. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Installed Base, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Installed Base así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Installed Base. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:installed_base:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9203E4D1-0A5F-43D2-8BE7-62EF7130BDEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:installed_base:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5A5E97-DDCB-4F47-94F9-378BEB93414A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:installed_base:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4BB2B3-91E1-47A1-A725-0107EF6ED8EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95594",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3362",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Knowledge Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Knowledge Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Knowledge Management así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Knowledge Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95467",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3363",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Knowledge Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Knowledge Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Knowledge Management así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Knowledge Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3364",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Knowledge Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Knowledge Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Knowledge Management así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Knowledge Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3365",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Knowledge Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Knowledge Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Knowledge Management así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Knowledge Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3366",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Knowledge Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Knowledge Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Knowledge Management así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Knowledge Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3367",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Knowledge Management. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Knowledge Management, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Knowledge Management así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Knowledge Management. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3368",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Address Book). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: Address Book). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle iStore. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle iStore, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iStore así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle iStore. CVSS v3.0 Base Score 8.2 (Impactos de Confidentialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95605",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3369",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iSupport de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle iSupport. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle iSupport, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iSupport así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle iSupport. CVSS v3.0 Base Score 8.2 (Impactos de Confidentialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C39B616-E8F9-4478-9402-962E55FDDB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922FFA2-7265-4AA1-9AFB-792F28EE665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596ADA1-FA00-461B-87B4-D44C0FD1387F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95468",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3370",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:05.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iSupport de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle iSupport. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle iSupport, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iSupport así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle iSupport. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C39B616-E8F9-4478-9402-962E55FDDB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922FFA2-7265-4AA1-9AFB-792F28EE665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596ADA1-FA00-461B-87B4-D44C0FD1387F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95526",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3371",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iSupport de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle iSupport. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle iSupport, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iSupport así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle iSupport. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C39B616-E8F9-4478-9402-962E55FDDB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922FFA2-7265-4AA1-9AFB-792F28EE665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596ADA1-FA00-461B-87B4-D44C0FD1387F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95526",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3372",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Interaction Blending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Interaction Blending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Interaction Blending accessible data as well as unauthorized update, insert or delete access to some of Oracle Interaction Blending accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Interaction Blending de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Interaction Blending. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Interaction Blending, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Interaction Blending así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Interaction Blending. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AC797E-176A-490C-8FB4-9FE8F8213EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAA50FF-9D92-4973-A795-AF425727977A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD41A4A2-3D6E-4D24-9923-D9EDA88D0BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4373765F-A422-44A6-BA38-A75556621140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D5FB1B-F287-47D8-BE48-6A82899C3184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E30A1E6-C667-48CE-A6BC-6828AF0D59B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_blending:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1975A0A5-1D81-418E-999E-3035C6589042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95597",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3373",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95485",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3374",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3375",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3376",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3377",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3378",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3379",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3380",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3381",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3382",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3383",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3384",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3385",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3386",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3387",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3388",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3389",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3390",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3391",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3392",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3394",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3395",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3396",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3397",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3398",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3399",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3400",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3401",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:06.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3402",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3403",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3404",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3405",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3406",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3407",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3408",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3409",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3410",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3411",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3412",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3413",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3414",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Advanced Outbound Telephony. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Advanced Outbound Telephony, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Advanced Outbound Telephony. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB0F7BA-1A3C-471E-82C3-E4B669C0142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F368414B-E636-4AB8-9772-3F67477F1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E4DA8E-1C46-443D-A1EB-90443FAAAFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3415",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Universal Work Queue, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data as well as unauthorized update, insert or delete access to some of Oracle Universal Work Queue accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Universal Work Queue de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Universal Work Queue. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Universal Work Queue, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles del Oracle Universal Work Queue así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Universal Work Queue. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933006D7-EF09-4CB5-BEA0-248625F74FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F917BA76-6DC0-431B-915A-E29AD635A316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2769037E-6154-47BF-BF90-03DA704706E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91551403-6301-417C-B0E5-89819163D28D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60045D6-BDDB-4EA7-9406-72D9522C7523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3194BAB-4DA8-4465-9D2D-4C5F1D598F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A46E76-BF9A-43C9-A95F-7BD59EF2C6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95487",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3416",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Universal Work Queue, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data as well as unauthorized update, insert or delete access to some of Oracle Universal Work Queue accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Universal Work Queue de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Universal Work Queue. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Universal Work Queue, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles del Oracle Universal Work Queue así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Universal Work Queue. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933006D7-EF09-4CB5-BEA0-248625F74FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F917BA76-6DC0-431B-915A-E29AD635A316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2769037E-6154-47BF-BF90-03DA704706E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91551403-6301-417C-B0E5-89819163D28D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60045D6-BDDB-4EA7-9406-72D9522C7523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3194BAB-4DA8-4465-9D2D-4C5F1D598F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A46E76-BF9A-43C9-A95F-7BD59EF2C6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95561",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3417",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Universal Work Queue, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data as well as unauthorized update, insert or delete access to some of Oracle Universal Work Queue accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Universal Work Queue de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Universal Work Queue. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle Universal Work Queue, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles del Oracle Universal Work Queue así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle Universal Work Queue. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933006D7-EF09-4CB5-BEA0-248625F74FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F917BA76-6DC0-431B-915A-E29AD635A316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2769037E-6154-47BF-BF90-03DA704706E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91551403-6301-417C-B0E5-89819163D28D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60045D6-BDDB-4EA7-9406-72D9522C7523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3194BAB-4DA8-4465-9D2D-4C5F1D598F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A46E76-BF9A-43C9-A95F-7BD59EF2C6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95561",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3418",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: User Interface). La versión compatible que está afectada es 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle CRM Technical Foundation. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle CRM Technical Foundation, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles del Oracle CRM Technical Foundation así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle CRM Technical Foundation. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95490",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3419",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: User Interface). La versión compatible que está afectada es 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle CRM Technical Foundation. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle CRM Technical Foundation, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles del Oracle CRM Technical Foundation así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle CRM Technical Foundation. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95564",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3420",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: User Interface). La versión compatible que está afectada es 12.1.3. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle CRM Technical Foundation. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle CRM Technical Foundation, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles del Oracle CRM Technical Foundation así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de Oracle CRM Technical Foundation. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95564",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3421",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95492",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3422",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3423",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3424",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3425",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3426",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3427",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3428",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3429",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3430",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3431",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:07.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones soportadas que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3433",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3435",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3436",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3437",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3438",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3439",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3440",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Customer Interaction History de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad de explotación fácil permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Customer Interaction History. Ataque exitoso requiere la interacción humana de una persona que no sea el atacante y cuando la vulnerabilidad es en Oracle Customer Interaction History, ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos de Oracle Customer Interaction History accessible así como acceso no autorizado de actualización, inserción o eliminado de datos accesibles de Oracle One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F642BBD2-94B6-4250-AFDB-A6EFF0AFDA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75019879-7091-46AB-ACDA-34EC3C8BB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B71AAA0-2FA5-4803-997D-14D6FBDB3DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95497",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3441",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Customer Interaction History de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad de explotación fácil permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Customer Interaction History. Ataque exitoso requiere la interacción humana de una persona que no sea el atacante y cuando la vulnerabilidad es en Oracle Customer Interaction History, ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos de Oracle Customer Interaction History accesible así como acceso no autorizado de actualización, inserción o eliminado de datos accesibles de Oracle One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F642BBD2-94B6-4250-AFDB-A6EFF0AFDA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75019879-7091-46AB-ACDA-34EC3C8BB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B71AAA0-2FA5-4803-997D-14D6FBDB3DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95573",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3442",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Customer Interaction History de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Vulnerabilidad de explotación fácil permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Customer Interaction History. Ataque exitoso requiere la interacción humana de una persona que no sea el atacante y cuando la vulnerabilidad es en Oracle Customer Interaction History, ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos de Oracle Customer Interaction History accesible así como acceso no autorizado de actualización, inserción o eliminado de datos accesibles de Oracle One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F642BBD2-94B6-4250-AFDB-A6EFF0AFDA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75019879-7091-46AB-ACDA-34EC3C8BB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B71AAA0-2FA5-4803-997D-14D6FBDB3DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95573",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3443",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-01-27T22:59:08.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad de explotación fácil permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Common Applications. Ataque exitoso requiere la interacción humana de una persona que no sea el atacante y cuando la vulnerabilidad es en Oracle Common Applications, ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos de Oracle Common Applications así como acceso no autorizado de actualización, inserción o eliminado de datos accesibles de Oracle Common Applications. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD375D75-8B6E-43C0-A747-F3DA4FD147A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE04C6C2-4818-403E-B2D0-5220BDC39C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F4DED6-1E2A-4DD4-8D90-BD319DF993AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27227D-8844-4D2E-979D-91AAA657155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C9C61-EFCD-41CD-8EFB-A9ECBD7DCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20D8C53-46D2-409B-B24A-B6023F6DF4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0505D42-88E5-4DB5-BB6E-473522DF2B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95612",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-27T22:59:08.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks Terminal Services Agent en versiones anteriores a 7.0.7 permite a un atacantes suplantar usuarios arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:terminal_services_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.6",
            "matchCriteriaId" : "9BA8F191-45B1-4A4A-9783-3BB80D9F529B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95823",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-27T22:59:08.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks Terminal Services Agent en versiones anteriores a 7.0.7 permite a usuarios locales obtener privilegios a través de vectores que desencadenan una operación de escritura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:terminal_services_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.6",
            "matchCriteriaId" : "9BA8F191-45B1-4A4A-9783-3BB80D9F529B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95818",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41176/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41176/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-27T22:59:08.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive."
      }, {
        "lang" : "es",
        "value" : "Un error en la función lha_read_file_header_1() (archive_read_support_format_lha.c) en libarchive 3.2.2 permite a un atacantes desencadenar un acceso de lectura fuera de límites de la memoria y posteriormente provocar una caída a través de un archivo especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libarchive:libarchive:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE49FE66-2BDF-4237-8BF1-F9851B75B526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95837",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libarchive/libarchive/commit/98dcbbf0bf4854bf987557e55e55fff7abbf3ea9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://secunia.com/secunia_research/2017-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libarchive/libarchive/commit/98dcbbf0bf4854bf987557e55e55fff7abbf3ea9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secunia.com/secunia_research/2017-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador ISO CLNS en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-isoclns.c:clnp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.0",
            "matchCriteriaId" : "F796C610-BB37-48CD-8B65-DA81617A5449"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador BOOTP en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-bootp.c:bootp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.0",
            "matchCriteriaId" : "F796C610-BB37-48CD-8B65-DA81617A5449"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador IPv6 en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-ip6.c:ip6_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.0",
            "matchCriteriaId" : "F796C610-BB37-48CD-8B65-DA81617A5449"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador ISAKMP en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-isakmp.c:ikev2_e_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.0",
            "matchCriteriaId" : "F796C610-BB37-48CD-8B65-DA81617A5449"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador OTV en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-otv.c:otv_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print()."
      }, {
        "lang" : "es",
        "value" : "En tcpdump en versiones anteriores a 4.9.0, un error interno en múltiples analizadores de protocolo (Geneve, GRE, NSH, OTV, VXLAN y VXLAN GPE) podría provocar un desbordamiento de búfer en print-ether.c:ether_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575."
      }, {
        "lang" : "es",
        "value" : "El analizador Q.933 en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-fr.c:q933_print(), una vulnerabilidad diferente a CVE-2016-8575."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse()."
      }, {
        "lang" : "es",
        "value" : "El analizador SNMP en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-snmp.c:asn1_parse()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador ATM en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-atm.c:sig_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap()."
      }, {
        "lang" : "es",
        "value" : "El analizador ISO CLNS en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer addrtoname.c:lookup_nsap()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T01:59:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador ISO CLNS en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en addrtoname.c:lookup_nsap()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "615348EF-03D2-49CC-B96C-7CFFDCEB2C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T18:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XSS en la función de carga de imágenes en Piwigo en versiones anteriores a 2.8.6 permite a un atacantes inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de archivo de imagen manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.5",
            "matchCriteriaId" : "6B6B020F-0D8F-4DCB-A443-6A1398E0B3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://piwigo.org/releases/2.8.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95848",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/6ec3f2d0fae0437f0c2cc8c475a26fb6aeb0d4cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/600",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://piwigo.org/releases/2.8.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/6ec3f2d0fae0437f0c2cc8c475a26fb6aeb0d4cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-28T18:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en include/functions_entries.inc.php en Serendipity 2.0.5 permite a usuarios autenticados remotos ejecutar comandos arbitrarios SQL a través del parámetro cat."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62698057-2D97-42F0-913C-76CB939804FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95850",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/commit/c62d667287f2d76c81e03a740a581eb3c51249b6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/releases/tag/2.1-rc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/commit/c62d667287f2d76c81e03a740a581eb3c51249b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/releases/tag/2.1-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5610",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-01-30T04:59:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms."
      }, {
        "lang" : "es",
        "value" : "wp-admin/includes/class-wp-press-this.php en Press This en WordPress versiones anteriores a 4.7.2 no restringe adecuadamente la visibilidad de una interfaz de usuario de asignación de taxonomía, lo que permite a atacantes remotos eludir las restricciones destinadas al acceso leyendo términos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "7DB8B4B5-7B4F-4AC2-8EBA-A2D6B2273392"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95816",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/21264a31e0849e6ff793a06a17de877dd88ea454",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8729",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/21264a31e0849e6ff793a06a17de877dd88ea454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5611",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-01-30T04:59:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en wp-includes/class-wp-query.php en WP_Query en WordPress en versiones anteriores a 4.7.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios aprovechando la presencia de un plugin o tema afectado que no maneja correctamente un nombre de tipo de publicación manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "7DB8B4B5-7B4F-4AC2-8EBA-A2D6B2273392"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CF70CF-3DDF-45A2-A14C-340CC65EBDC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9901F6BA-78D5-45B8-9409-07FF1C6DDD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FADE563-5AAA-42FF-B43F-35B20A2386C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95816",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/85384297a60900004e27e417eac56d24267054cb",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8730",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/85384297a60900004e27e417eac56d24267054cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5612",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-01-30T04:59:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en wp-admin/includes/class-wp-posts-list-table.php en la tabla de lista de publicaciones en WordPress en versiones anteriores a 4.7.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un extracto manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "7DB8B4B5-7B4F-4AC2-8EBA-A2D6B2273392"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95816",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/4482f9207027de8f36630737ae085110896ea849",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8731",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/4482f9207027de8f36630737ae085110896ea849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-30T04:59:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Artifex Software, Inc. MuJS en versiones anteriores a 4006739a28367c708dea19aeb19b8a1a9326ce08. La función jsR_setproperty en jsrun.c carece de una comprobación para una longitud negativa de array. Esto lleva a un desbordamiento de entero en la función js_pushstring en jsrun.c al analizar archivos JS especialmente manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-01-24",
            "matchCriteriaId" : "2D69C667-E4E7-47DA-A42B-E4F386BB56D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mujs.git%3Bh=4006739a28367c708dea19aeb19b8a1a9326ce08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697497",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mujs.git%3Bh=4006739a28367c708dea19aeb19b8a1a9326ce08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-30T04:59:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: User Interface). Versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle One-to-One Fulfillment. Ataques exitosos requieren interacción humana de una persona distinta del atacante y mientras la vulnerabilidad esté en Oracle One-to-One Fulfillment, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment así como actualización no autorizada, inserción o borrado de acceso a algunos datos accesibles de One-to-One Fulfillment. CVSS v3.0 Base Score 8.2 (Impactos de Confidencialidad e Integridad)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-01-24",
            "matchCriteriaId" : "2D69C667-E4E7-47DA-A42B-E4F386BB56D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mujs.git%3Bh=8f62ea10a0af68e56d5c00720523ebcba13c2e6a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95855",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697496",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mujs.git%3Bh=8f62ea10a0af68e56d5c00720523ebcba13c2e6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-30T04:59:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an \"nmap -O\" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service (DoS). The attack is only possible from within the local area network."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el router wireless ASUS RT-N56U con Firmware 3.0.0.4.374_979. Al ejecutar un comando \"nmap -O\" que especifica una dirección IP de un dispositivo infectado, se puede derribar la conexión WAN del dispositivo WAN, causando una desconexión de internet, una denegación de servicio (DoS). El ataque solo es posible desde dentro de la red de área local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-n56u_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB53A0-E6FE-44AB-9C58-3D171D014C89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534C0C95-9DD2-464C-8776-01B47398FE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95857",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-30T16:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Linux Foundation xapi en Citrix XenServer hasta la versión 7.0. Un administrador autenticado de solo lectura puede corromper la base de datos del host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEA97B9-A443-4F87-81B4-B3F0E94AC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56434D13-7A7B-495C-A135-2688C706A065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX220112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX220112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-01-30T16:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Linux Foundation xapi en Citrix XenServer hasta la versión 7.0. Un administrador autenticado de sólo lectura puede cancelar las tareas de otros administradores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEA97B9-A443-4F87-81B4-B3F0E94AC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56434D13-7A7B-495C-A135-2688C706A065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95796",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX220112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX220112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3823",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-01T11:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control plugin before 10031.6.2017.0126 on Internet Explorer, and the Download Manager ActiveX control plugin before 2.1.0.10 on Internet Explorer. A vulnerability in these Cisco WebEx browser extensions could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. This vulnerability affects the browser extensions for Cisco WebEx Meetings Server and Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center) when they are running on Microsoft Windows. The vulnerability is a design defect in an application programing interface (API) response parser within the extension. An attacker that can convince an affected user to visit an attacker-controlled web page or follow an attacker-supplied link with an affected browser could exploit the vulnerability. If successful, the attacker could execute arbitrary code with the privileges of the affected browser."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Cisco WebEx Extension en versiones anteriores a 1.0.7 en Google Chrome, el ActiveTouch General Pluging Container en versiones anteriores a 106 en Mozilla Firefox, el plugin de control GpcContainer Class Active X en versiones anteriores a 2.1.0.10 en Internet Explorer. Una vulnerabilidad en las extensiones del navegador CiscoWebEx podría permitir a un atacante remoto no autenticado ejecutar código arbitrario con privilegios del navegador afectado en el sistema afectado. Esta vulnerabilidad afecta a las extensiones del navegador para Cisco WebEx Meetings Server y Cisco WebEx Centers (Meeting Center, Event Center, Training Center, y Support Center) cuando se ejecutan en Microsoft Windows. La vulnerabilidad es un defecto de diseño del intérprete de respuesta de una interfaz de programación de aplicaciones (API) dentro de la extensión. Un atacante que pueda convencer al usuario afectado para visitar una página web controlada por un hacker o a pulsar un enlace proporcionado por un atacante con un navegador afectado puede explotar la vulnerabilidad. Si tiene éxito, el atacante puede ejecutar código arbitrario con los privilegios del navegador afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:activetouch_general_plugin_container:105:*:*:*:*:firefox:*:*",
            "matchCriteriaId" : "7C4F4E52-9923-47E0-8990-8DB3761C724F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:download_manager:2.1.0.9:*:*:*:*:internet_explorer:*:*",
            "matchCriteriaId" : "8E2D077D-DB25-4D10-A4DD-7E55CD7B6050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:gpccontainer_class:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "10031.6.2017.0125",
            "matchCriteriaId" : "E7F1F1F5-E057-42F2-878B-CD62E4B7D4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "E1B0BEA6-F4C4-4A54-AFF8-E16B4C110AED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B9A3E8-DD9D-451B-81A4-BADA16512845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E84A595-4A33-4FA1-AF86-DFCBECAB8D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F6DDAE-BD36-4D8D-BC48-DD229F33125A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2010E860-9DA9-4706-BEE7-7521BCBC5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C2055-272B-403A-9BF8-5FA8CFBC933D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346A7C39-AF2E-499F-B77E-0F80787D268E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98825256-4520-473B-AC9F-F74B9D95DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913EC8D3-A9A3-4FC6-B2FD-87003F985F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DB03D1C7-F4BA-4B0E-814F-3C43395AC928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339D371C-57FF-43AD-97DB-A8FA9ADCB796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr9:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0B9AE4-75B8-43BC-B66B-0ABE6C21599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr9:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "09EB75CC-8EBD-49D2-B986-CB83D2742A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_mr9:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF450A53-1F3F-415C-90C5-E43E9A37197F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4AF5A4-1B99-43F8-A659-7C57B033F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F492431-5AE7-439F-81F1-B96EAD773E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC640D5-C840-4ABB-BD22-9B60BBFE8DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C438DB1-1761-4C1B-A6DD-AD84853C5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB2094F-B0E1-4129-BFD6-9FE1687B0AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B75EA6-516D-4550-B83D-E0EFDAA25208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2A712-E8FD-460F-9A3C-3760082B8920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB5ECBA-051E-4500-9B8C-82479D45164D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6F5080-355B-4A85-8DF4-D75D6A550C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFC81E-CA80-4E31-B839-A98FAB4F92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "23A09CF0-9C9B-4FBF-9AEC-285002175F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC1C33-550D-405E-860B-35F301B8B2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55CCE-2B52-4865-8C63-7E6C779C20D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9881CF16-F617-48DA-8CB8-08C3D943CCD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D743715-37BA-4169-9C91-3BD5E28694F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFFB01B-1B4F-4072-A68C-98C538DE34ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "47B6F991-49EC-444F-8883-A57C37E8BA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309C030-2F02-4E7E-B3E3-035B93DD1E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "A58843EB-A2C0-4034-967F-502A52DCC351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ECA8FE-D587-4692-AA90-9706E44BAC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCD22A8-7E04-4782-AEB2-07878925A2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7208EC-0255-462E-B5DE-9D5617D8C20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396253A5-EC5F-429B-ABF3-20CB0A56E658"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6589E647-4E17-44A9-A6C6-483C541E4095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFFA393-E70D-41C2-BB2D-147F8A6DFBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_mr1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "815D810A-003F-4D8F-B368-CC28152E60B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D63C8E-4EDE-4CAF-B7F6-9CB46AFE0664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_mr2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F8D5F3-ED67-469D-BBCE-A7669BF85755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B536C7-3E9A-4862-9714-3BCA1A8C6815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.6_mr3:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "56639D86-F53E-4334-A67C-D9DB2D5713E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.7_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7288021F-83C7-49FC-9CC3-CC4B3877C412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.7_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F99CC51-B1B2-4E1A-ACA6-766EE5907139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.7_mr1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "031E633D-2FED-4874-8D7D-4275875078FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:2.7_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992973F3-E460-4AF5-B1BA-48CC61B87FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t29_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D792EF72-4866-4DD9-AE59-468E49C7E31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1515E161-06AE-4A77-BA55-B04E0ECF05B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t31_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A34A56-995C-456D-9F66-2D4510A8746A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95737",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037680",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://0patch.blogspot.com/2017/01/micropatching-remote-code-execution-in.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://blog.filippo.io/webex-extension-vulnerability/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1096",
        "source" : "psirt@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1100",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170124-webex",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/909240",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://0patch.blogspot.com/2017/01/micropatching-remote-code-execution-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.filippo.io/webex-extension-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170124-webex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/909240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3790",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-01T19:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient size validation of user-supplied data. An attacker could exploit this vulnerability by sending crafted H.224 data in Real-Time Transport Protocol (RTP) packets in an H.323 call. An exploit could allow the attacker to overflow a buffer in a cache that belongs to the received packet parser, which will result in a crash of the application, resulting in a DoS condition. All versions of Cisco Expressway Series Software and Cisco TelePresence VCS Software prior to version X8.8.2 are vulnerable. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCus99263."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el analizador de paquetes recibidos del software Cisco Expressway Series y Cisco TelePresence Video Communication Server (VCS) podrían permitir a un atacante remoto no autenticado provocar una recarga del sistema afectado, resultando en una condición de denegación de servicio (DoS). La vulnerabilidad es debido a una validación de tamaño insuficiente de los datos suministrados por el usuario. Un atacante podría explotar esta vulnerabilidad enviando datos H.224 manipulados en paquetes de protocolo de transporte en tiempo real (RTP) en una llamada H.323. Un exploit podría permitir al atacante desbordar un búfer en un caché que pertenece al analizador de paquetes recibido, lo que resultará en una caída de la aplicación, resultando en una condición DoS. Todas las versiones de Cisco Expressway Series Software y Cisco TelePresence VCS Software anteriores a la versión X8.8.2 son vulnerables. Cisco ha lanzado actualizaciones de software que abordan esta vulnerabilidad. No existen soluciones provisionales que aborden esta vulnerabilidad. ID de errores de Cisco: CSCus99263."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DC165C-077E-4903-A958-D231BAEE0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87096AE0-122C-4693-96DA-B978CAFBFB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F5E4D7-3CB0-4273-932E-7DDA96E6B2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BB9CF6-7123-4A8D-81E1-82AA3599C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F39261-D3F4-490F-AEF2-E0B6D8E33775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94DBE30-E66C-4903-B9BD-7FB2114556E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D22EB0-54AF-4FC2-91CD-A56BFECA1BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.5:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B8EF76-D6E4-40A2-8360-A6589A8C0FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8867B660-29CC-4A6F-A116-D291E1A3F605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C625B0D-351F-4AE3-B900-F6009C507C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54B267A-5511-4CAD-83FD-119F4A3F8940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D4E7C8-57B6-4531-8977-9713CF2E16F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A293B34-C664-4872-A608-1605FC3C69DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16120699-535F-4327-8255-0570B6A910B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5F40B1-0B27-4EA7-8369-F3DEA77B54D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10561DBB-AC29-448D-AB2C-2F75680E83D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE620C62-16CB-4E54-BA4C-900A8645355F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB29BE2C-42EF-416E-B804-40D4153A1D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327F453C-1944-4C95-B162-01F5C6E93E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1AA69B-137A-4AF4-879A-ED794192107D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:x8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB1E164-5F1E-4AD7-A0C5-76D7D44739E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x5.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2882AA46-B435-4D42-B4B8-F93B3C1758C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x6.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0BC857-6E5B-4DA0-9B8F-9084582A6ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x6.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13345449-F9D9-4B42-9C17-77F8112C078D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FBF866-68D8-4C2E-8131-C5E4D20AF9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6FA277-B272-48F1-9FFB-427725F20B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B876F653-ED75-4130-AB8E-293D208B62D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7458B1AB-EEBE-4713-989A-5CDF37791E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A522BF-AB0B-4FAE-A00E-69D09E917BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDF9DC2-324B-4827-967D-8263B3416FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750524D1-77F7-419A-AD47-4CA360952833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2973CEC1-D2A2-46E0-B493-4664FB6F328B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95786",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037697",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-expressway",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-expressway",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3791",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-01T19:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with administrator privileges. The vulnerability is due to a processing error in the role-based access control (RBAC) of URLs. An attacker could exploit this vulnerability by sending API commands via HTTP to a particular URL without prior authentication. An exploit could allow the attacker to perform any actions in Cisco Prime Home with administrator privileges. This vulnerability affects Cisco Prime Home versions from 6.3.0.0 to the first fixed release 6.5.0.1. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCvb49837."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la GUI basada en web de Cisco Prime Home podrían permitir a un atacante remoto no autenticado eludir la autenticación y ejecutar acciones con privilegios de administrador. La vulnerabilidad se debe a un error de procesamiento en el control de acceso basado en funciones (RBAC) de las URL. Un atacante podría explotar esta vulnerabilidad enviando comandos de la API a través de HTTP a una URL determinada sin autenticación previa. Un exploit podría permitir al atacante realizar cualquier acción en Cisco Prime Home con privilegios de administrador. Esta vulnerabilidad afecta a las versiones de Cisco Prime Home desde la versión 6.3.0.0 hasta la primera versión fija 6.5.0.1. Cisco ha lanzado actualizaciones de software que abordan esta vulnerabilidad. No existen soluciones provisionales que aborden esta vulnerabilidad. ID de errores de Cisco: CSCvb49837."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cisco_prime_home:6.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25479501-2E86-431C-8668-839C05ADE5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cisco_prime_home:6.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC23815-EB9C-4391-821A-9016EE5643BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cisco_prime_home:6.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4EE5C1-9915-40FD-AA62-499CD4FB6ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cisco_prime_home:6.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6386283D-8F12-44F3-9B3A-8B0928C5A84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cisco_prime_home:6.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0AD4C40-D2CF-4EEA-9512-A5D4A1E4F316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cisco_prime_home:6.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F00F45E7-72B8-494B-A193-D1BB6F877376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95933",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-prime-home",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-prime-home",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3792",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-01T19:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability is due to improper size validation when reassembling fragmented IPv4 or IPv6 packets. An attacker could exploit this vulnerability by sending crafted IPv4 or IPv6 fragments to a port receiving content in Passthrough content mode. An exploit could allow the attacker to overflow a buffer. If successful, the attacker could execute arbitrary code or cause a DoS condition on the affected system. Cisco TelePresence MCU platforms TelePresence MCU 5300 Series, TelePresence MCU MSE 8510 and TelePresence MCU 4500 are affected when running software version 4.3(1.68) or later configured for Passthrough content mode. Cisco has released software updates that address this vulnerability. Workarounds that address this vulnerability are not available, but mitigations are available. Cisco Bug IDs: CSCuu67675."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un controlador de dispositivo propietario en el kernel del Software Cisco TelePresence Multipoint Control Unit (MCU) podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o provocar una condición de denegación de servicio (DoS). La vulnerabilidad se debe a una validación de tamaño incorrecta al reensamblar paquetes IPv4 o IPv6 fragmentados. Un atacante podría explotar esta vulnerabilidad mediante el envío de fragmentos IPv4 o IPv6 a un puerto que reciba contenido en modo de contenido Passthrough. Un exploit podría permitir al atacante desbordar un búfer. Si tiene éxito, el atacante podría ejecutar código arbitrario o provocar una condición DoS en el sistema afectado. Las plataformas Cisco TelePresence MCU TelePresence MCU 5300 Series, TelePresence MCU MSE 8510 y TelePresence MCU 4500 se ven afectadas cuando se ejecuta la versión de software 4.3 (1.68) o una configuración posterior para el modo de contenido Passthrough. Cisco ha lanzado actualizaciones de software que abordan esta vulnerabilidad. Las soluciones provisionales que abordan esta vulnerabilidad no están disponibles, pero hay mitigaciones disponibles. ID de errores de Cisco: CSCuu67675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\\(1.68\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5DEB9D-D154-43EF-87CB-3BEB0B06936A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\\(2.18\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "920D4FF4-0E1A-446A-B6AF-0A3CE1D3A236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\\(2.30\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DE420-0DBA-4C14-B8C2-8C2CBEBE94E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\\(2.32\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB21E91-9369-487F-B22F-3B26B560310E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\\(3.42\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C205C88E-C048-4842-97D7-47CACC6DB595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\\(3.49\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "635AA5E5-1319-4E8D-B6FE-7BC0B53F2770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\\(3.54\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C0AAE1-32B3-440B-962A-EB938B630E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\\(3.57\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C03917E-4EF8-47EF-B574-E4C6BD27F37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\\(3.67\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "459622B5-5275-432B-A4B7-36DDF2C04958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\\(1.45\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D7930B-46C4-4CF9-97E5-A9B6DE2B9010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\\(1.55\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC5F5D4-EAA9-45B9-805A-C54D6CE1771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\\(1.71\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "536CCE45-8927-4E41-97B4-BB23283CB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\\(1.72\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB34EE6-77D4-4CF8-AAC1-1D2AD436176E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\\(1.85\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "671D9004-A722-4BED-8C37-0E04A409C7CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_4505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5574D81E-25A1-477A-978C-109D667771A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_4510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96560014-147A-4AE1-A215-E2F04B3AD7C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_4515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72129DF6-D50B-46D8-84EA-95E65D86FF62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_4520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C64580-60FB-40CB-968A-1737E59A1E6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_5310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14ACCD9-5840-4459-91B8-E8D8BABB6DF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_5320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEB99C0-5510-48C5-BFA4-DEAB511714DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:telepresence_mcu_mse_8510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738ED7C7-98D6-4BD5-9115-48405F350CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95787",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037698",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-telepresence",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-telepresence",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-01T23:59:00.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite."
      }, {
        "lang" : "es",
        "value" : "PECL en la clase de utilidad de descarga en el Instalador en PEAR Base System v1.10.1 no valida los tipos de archivo y los nombres de archivo después de una redirección, lo que permite a los servidores remotos HTTP sobrescribir los archivos a través de respuestas manipuladas, como se demuestra por una sobreescritura .htaccess."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8958FB-0D66-4B79-90F4-B363BF62BD79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/bugs/bug.php?id=21171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41185/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://pear.php.net/bugs/bug.php?id=21171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41185/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-02T07:59:00.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or viewed. This file crafts a SQL statement to identify the database that is to be in use with the current user's session. The database variable can be populated from the URL, and when supplied non-expected characters, can be manipulated to obtain access to the underlying database. The /CRM/CustomPages/ACCPAC/AP_DocumentUI.asp?SID=<VALID-SID>&database=1';WAITFOR DELAY '0:0:5'-- URI is a Proof of Concept."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de inyección de SQL en SageCRM 7.x en versiones anteriores a 7.3 SP3. El recurso Web AP_DocumentUI.asp incluye Utilityfuncs.js cuando se abre o se ve el archivo. Este archivo crea una instrucción SQL para identificar la base de datos que se va a utilizar con la sesión del usuario actual. La variable de base de datos se puede rellenar desde la URL y, cuando se proporcionan caracteres no esperados, se pueden manipular para obtener acceso a la base de datos subyacente. El /CRM/CustomPages/ACCPAC/AP_DocumentUI.asp?SID=&database=1';WAITFOR DELAY '0: 0: 5' - URI es una prueba de concepto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07474DA-DDB9-4CC8-BF2D-256C6DD86C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56402F12-04E0-407F-9DED-AEE6AA148756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E13E266-B6F9-476A-8728-C97AB4493703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCCCD34-465A-4D2A-AB74-07E368CF98DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D50B7DB0-52AB-46EC-AD32-375A5CCE3416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "85CD71BD-9F51-4FE3-8C66-706967996C54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95968",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-02T07:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permits additional components to be added to the application to enhance provided functionality. This functionality allows a zip file to be uploaded, containing a valid .ecf component file, which will be extracted to the inf directory outside of the webroot. By creating a zip file containing an empty .ecf file, to pass file-validation checks, any other file provided in zip file will be extracted onto the filesystem. In this case, a web shell with the filename '..\\WWWRoot\\CustomPages\\aspshell.asp' was included within the zip file that, when extracted, traversed back out of the inf directory and into the SageCRM webroot. This permitted remote interaction with the underlying filesystem with the highest privilege level, SYSTEM."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en SageCRM 7.x en versiones anteriores a 7.3 SP3. La funcionalidad de Component Manager, proporcionada por SageCRM, permite añadir componentes adicionales a la aplicación para mejorar la funcionalidad proporcionada. Esta funcionalidad permite cargar un archivo zip, que contiene un archivo de componente .ecf válido, que se extraerá al directorio inf fuera del webroot. Al crear un archivo zip que contenga un archivo .ecf vacío, para pasar las comprobaciones de validación de archivos, cualquier otro archivo proporcionado en archivo zip se extraerá en el sistema de archivos. En este caso, se incluyó un shell web con el nombre de archivo '.. \\WWWRoot\\CustomPages\\aspshell.asp' dentro del archivo zip que, al ser extraído, se volvía al directorio inf y al webroot de SageCRM. Esto permitió la interacción remota con el sistema de archivos subyacente con el nivel de privilegio más alto, SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCCCD34-465A-4D2A-AB74-07E368CF98DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D50B7DB0-52AB-46EC-AD32-375A5CCE3416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagecrm:sagecrm:7.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "85CD71BD-9F51-4FE3-8C66-706967996C54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95968",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-02T15:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account."
      }, {
        "lang" : "es",
        "value" : "El componente Data Warehouse en NetApp OnCommand Insight en versiones anteriores a 7.2.3 permite a atacantes remotos obtener acceso administrativo aprovechando una cuenta privilegiada predeterminada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.2",
            "matchCriteriaId" : "9BE433F3-39BE-4B97-A6B2-954E1FD0C99E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96041",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170131-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170131-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1093",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-02-02T22:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "IBM AIX 6.1, 7.1 y 7.2 podría permitir a un usuario local explotar una vulnerabilidad en el bellmail binario para obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0402E20C-8B41-4A2A-BFF9-92EC843985F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6791504A-A48A-4ED0-94AF-4C8A3B91516F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95891",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037748",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2766",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-02-03T07:59:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Documentum eRoom versión 7.4.4, EMC Documentum eRoom versión 7.4.4 SP1, EMC Documentum eRoom versión anterior a 7.4.5 P04, EMC Documentum eRoom versión anterior a 7.5.0 P01 incluye una vulnerabilidad no verificada de cambio de contraseña que podría ser explotada por usuarios malintencionados para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD159D8-DCB0-4A27-BEFC-BFC626B2C200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.4.4:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C44A1651-72B7-446A-98CA-18BD0E4E72D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F12875-669C-43C7-9D00-164089E27D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.4.5:p01:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADC4B3E-A538-4A85-B084-AF4E47734C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.4.5:p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E06195-1C7E-429E-8E39-CB2455741E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.4.5:p03:*:*:*:*:*:*",
            "matchCriteriaId" : "8BED2FD3-0A0E-4C89-94BB-D02434499445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:documentum_eroom:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCE8AD3-12F1-4952-BAE7-98F0B667595F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540077/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95893",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540077/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2767",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-02-03T07:59:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains a Java RMI Remote Code Execution vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Network Configuration Manager (NCM) 9.4.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contiene una vulnerabilidad de Java RMI Remote Code Execution que podría ser explotada potencialmente por usuarios malintencionados para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5898D8B-A49B-4B4E-B7E0-D4901C0C52C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1230B15-B5CA-4C0E-B6C7-4DA2FD83E18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A611CEC3-D330-4385-A2AD-28F40B16BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE535D78-B893-4909-8AF5-EDFC2430B6F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540085/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95938",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037761",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540085/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2768",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-02-03T07:59:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains an Improper Authentication vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contiene Una vulnerabilidad de autenticación incorrecta que podría ser explotada potencialmente por usuarios malintencionados para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5898D8B-A49B-4B4E-B7E0-D4901C0C52C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1230B15-B5CA-4C0E-B6C7-4DA2FD83E18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A611CEC3-D330-4385-A2AD-28F40B16BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE535D78-B893-4909-8AF5-EDFC2430B6F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540085/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95936",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037761",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540085/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3806",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de comandos CLI en el Firewall de próxima generación Cisco Firepower 4100 y en el dispositivo de seguridad Cisco Firepower 9300 podría permitir a un atacante autenticado y local inyectar comandos shell arbitrarios ejecutados por el dispositivo. Más información: CSCvb61343. Lanzamientos Afectados Conocidos: 2.0 (1.68). Lanzamientos Reparados Conocidos: 2,0 (1,118) 2,1 (1,47) 92,1 (1,1646) 92,1 (1,1763) 92,2 (1,101)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB13378-A7CB-4EBB-B3FD-57F7F37965ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D850EEF9-1967-4CE5-A30C-50180849BCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AC6A67-82EF-4D31-AFCB-499A0C6EC0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "995667FD-35F1-49E5-96DB-2FDFF5E0B523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FB47CF-2A6A-4121-BFF7-5862E163B8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95943",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3809",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. More Information: CSCvb95281. Known Affected Releases: 6.1.0 6.2.0. Known Fixed Releases: 6.1.0.1 6.2.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo de implementación de Políticas de Cisco Firepower Management Center (FMC) podría permitir que un atacante remoto no autenticado prevenga el despliegue de una base de reglas completa y precisa. Más información: CSCvb95281. Lanzamientos Afectados Conocidos: 6.1.0 6.2.0. Lanzamientos Reparados Conocidos: 6.1.0.1 6.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6614ED6C-E77E-4C0D-AA96-0BEE84BE2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEB9A40-0062-406D-B56D-3163CBBE08D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95941",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037776",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fmc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3810",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Releases: 10.0_R2_tanggula."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el marco web de Cisco Prime Service Catalog podría permitir que un atacante remoto autenticado lleve a cabo un ataque de redirección de URL web contra un usuario que ha iniciado sesión en un sistema afectado. Más información: CSCvb21745. Lanzamientos afectados conocidos: 10.0_R2_tanggula."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_service_catalog:10.0\\(r2\\)_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB4B497-7E1F-457E-9DF6-BCD7B528D931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95947",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037772",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3812",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory leak. More Information: CSCvc54788. Known Affected Releases: 15.2(5.4.32i)E2. Known Fixed Releases: 15.2(5.4.62i)E2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la funcionalidad Common Industrial Protocol (CIP) en Cisco Industrial Ethernet 2000 Series Switches podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio (DoS) debido a una fuga del sistema de memoria. Más Información: CSCvc54788. Lanzamientos Afectados Conocidos: 15.2(5.4.32i)E2. Lanzamientos Reparados Conocidos: 15.2(5.4.62i)E2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_series_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.2\\(5.4.32i\\)e2",
            "matchCriteriaId" : "64126B06-A388-40D2-A0A7-6520BCC90EE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524D907D-4DDC-4439-A9E0-328BA272BE79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057243E-C776-4048-AF08-F1339DECFB76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-nx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D7518A-B5EA-493C-80C7-4938A36FF621"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16t67-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0474966A-3F71-474F-926F-D4C03F0989D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16t67p-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199F317F-4C29-4BE4-B5EE-FFD70C693A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A805F6F4-D977-493F-B3E8-CCE64A6F5AE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0122F-82AB-467A-861B-9A9EAF36F695"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-n_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A29BB0-4033-4067-97E9-372C797A29CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-x_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334BC0D6-E9D8-47F5-AB48-7AB3F3A17844"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1931F1-02FC-4F7D-8C18-C1482CD2530D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_24t67-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F9FB2B-D9AD-46DD-8D2E-0FB71E2EA825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4s-ts-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75325EB7-ABB8-409F-BB8E-1696FB3D0DA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4s-ts-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CB2133-041C-48EE-8594-2F80C7A89A05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4D3841-67B6-4E21-A68D-FED30EC2CDEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E906703D-3946-4EE7-BEF1-9753409FEEF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D64C4436-6BB8-48EB-923D-11B6F9F18B1D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECD0A92-A198-463B-8046-92D738C40DAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C75A46-74FC-4AF1-AF76-0CAC422473E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE4BC00-19FE-468C-8BCE-193E72066B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62729BD3-975A-4FCA-B255-FFFD51901081"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FAB865C-D5D6-474F-B42C-2C2958B1E876"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8t67-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94DAA2-D52A-424B-8E17-FC17D4B117B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8t67p-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429B7E0E-2897-4838-AC6B-41B3A5D85204"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22980E67-0A91-473F-9F86-3B594D7BE9FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360DC5A-DD47-42C5-9940-B9FE24422758"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417ACF82-6769-4441-92CB-8BD06470518A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36036C1F-2A42-4633-AFD7-F4F8DEADBDE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-n_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE1A077-564B-49A3-84C4-3E9EA6EA7675"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAFB25E-F057-423E-811D-1E4A8F9E2D73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95946",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037771",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3814",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass. More Information: CSCvb93980. Known Affected Releases: 5.3.0 5.4.0 6.0.0 6.0.1 6.1.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Firepower System Software podría permitir a un atacante remoto no autenticado eludir maliciosamente la capacidad del aparato para bloquear ciertos contenidos web, vulnerabilidad también conocida como un URL Bypass. Más Información: CSCvb93980. Lanzamientos Afectados Conocidos: 5.3.0 5.4.0 6.0.0 6.0.1 6.1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E233C0-7547-479D-BC2B-A9F75106ADF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EA38C1-A34F-430A-92F7-1D299F78B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E4035-E8E2-4964-A6F4-7292E1804E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1AFAC1-419D-4ADB-868B-1544BED58B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6614ED6C-E77E-4C0D-AA96-0BEE84BE2F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95942",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3818",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. More Information: CSCvb65245. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 9.8.0-092."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el escáner Multipurpose Internet Mail Extensions (MIME) de Cisco AsyncOS Software para Cisco Email Security Appliances (ESA) podría permitir a un atacante remoto no autenticado eludir los filtros configurados por el usuario en el dispositivo, vulnerabilidad también conocida como Malformed MIME Header Filtering Bypass. Esta vulnerabilidad afecta todos los lanzamientos anteriores al primer lanzamiento reparado de Cisco AsyncOS Software para Cisco Email Security Appliances, ambas aplicaciones virtuales y hardware, si el software es configurado para aplicar un filtro de mensaje o filtro de contenido a adjuntos de email entrantes. Más Información: CSCvb65245. Lanzamientos Afectados Conocidos: 9.7.1-066. Lanzamientos Reparados Conocidos: 9.8.0-092."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:9.7.1-066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F09AFAB-9F02-4B39-8117-BAA56A434289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95939",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037773",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-esa1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-esa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3820",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. More Information: CSCux68796. Known Affected Releases: 15.5(3)S2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en funciones Simple Network Management Protocol (SNMP) de Cisco ASR 1000 Series Aggregation Services Routers que ejecutan Cisco IOS XE Software Release 3.13.6S, 3.16.2S, o 3.17.1S podría permitir a un atacante remoto no autenticado provocar elevado uso de CPU en un dispositivo afectado, resultando en una condición de denegación de servicio (DoS). Más Información: CSCux68796. Lanzamientos Conocidos Afectados: 15.5(3)S2.1 15.6(1)S1.1. Lanzamientos Reparados Conocidos: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95934",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037770",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3822",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de registro del Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) podría permitir a un atacante remoto no autenticado agregar entradas arbitrarias al registro de auditoría. Esta vulnerabilidad afecta a las versiones 6.1.x de Cisco Firepower Threat Defense Software en los siguientes productos vulnerables que han habilitado FDM: ASA5506-X ASA5506-X ASA5506-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555 -X. Más Información: CSCvb86860. Lanzamientos Afectados Conocidos: FRANGELICO. Lanzamientos Reparados Conocidos: 6.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FB47CF-2A6A-4121-BFF7-5862E163B8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95944",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037775",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3824",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-03T07:59:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cisco IOS XE are affected. More Information: CSCux40637. Known Affected Releases: 15.5(3)S 15.6(1)S. Known Fixed Releases: 15.5(3)S2 15.6(1)S1 15.6(2)S 15.6(2)SP 16.4(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo de los encabezados de lista en Cisco cBR Series Converged Broadband Routers podría permitir que un atacante remoto no autenticado provoque el reinicio del dispositivo, resultando en una condición de denegación de servicio (DoS).Los Cisco cBR-8 Converged Broadband Routers que ejecutan versiones vulnerables de Cisco IOS XE están afectados. Más información: CSCux40637. Lanzamientos Afectados Conocidos: 15.5 (3) S 15.6 (1) S. Lanzamientos Reparados Conocidos: 15.5 (3) S2 15.6 (1) S1 15.6 (2) S 15.6 (2) SP 16.4 (1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F5F608-EEC5-48BC-829C-9C9ECF555649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDEB8-D012-4162-A3C6-7D8F1CA3D618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FABA72-1FB0-40D5-BF79-CF68E66A6A0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cbr-8_converged_broadband_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CCBE67-E509-43EC-9AFB-8A9B6A115126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95937",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037774",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-cbr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-cbr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-04T05:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Light versions before 6.5.2 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted GET request, aka SPL-130279."
      }, {
        "lang" : "es",
        "value" : "Splunk Web en Splunk Enterprise versiones 6.5.x en versiones anteriores a 6.5.2, 6.4.x en versiones anteriores a 6.4.5, 6.3.x en versiones anteriores a 6.3.9, 6.2.x en versiones anteriores a 6.2.13, 6.1.x en versiones anteriores a 6.1.12, 6.0.x en versiones anteriores a 6.0.13, 5.0.x en versiones anteriores a 5.0.17 y las versiones de Splunk Light anteriores a 6.5.2 permite a los usuarios remotos autenticados provocar una denegación de servicio (caída de daemon) a través de una solicitud GET manipulada, también conocida como SPL-130279."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DE14A0C1-C94A-48CD-80C6-89574C07379A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DA88AC99-F676-4FAB-AC4E-1B40A85560D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "128F43BB-BB71-489A-A385-3654E745CE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81FEC811-BC9A-4C24-ABDC-89506EBC5F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2AE1409C-D8DC-472C-9BCA-45D40B0ED836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DDC8A279-A04D-4410-A77E-6C45F63E13F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FFA99D49-F384-414E-84C2-04A0498C3764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DF3EFE0C-3737-4BEA-B68F-46BD50F484D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7EB21D87-CC00-44A6-BDFB-78116FF26E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E3452254-79B9-43A6-91FD-AF4112FFC709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E5CCF6AE-4994-46DD-BE0E-E8DB14332E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FDCF8506-6FCF-44DC-A7AD-9179B461A23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F8AA782A-2B5D-40C9-B5C0-044188576DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.13:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "80DFCCD0-45E3-49E5-B4D2-7309306E62BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.14:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B2983933-1E0E-4409-9EB4-035C80A26333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.15:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E73FD956-361A-4A16-8395-EB043780933E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:5.0.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BB3630C5-9917-4D6C-8E1D-087C03A542D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9EF63812-8482-4EC2-97CF-BEC5E27A3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FF70BF2B-16A6-48B8-9AEF-1198E6FBB7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AE4A31E6-E4CA-4C92-BEF6-649800B0EF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81D51853-0D47-4034-83E6-FB46A6E9F2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "06418BAD-EF0C-42F9-A2A3-FD232D9882B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E2772D7D-B15D-42D4-AC32-DC9A005163E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6188A7A1-76EE-493B-9A38-3564AAAB64F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4142BA91-F26B-4DD0-933A-1BB1AAB587AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2D0D8841-7BB4-4A2B-891A-84302EE45640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "24767341-D913-4A59-8496-AE2429696279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7E38696A-9486-4922-8B9C-798FB8BC5360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C2AA1ED2-FCD5-4E98-B4FF-C8FBE8DDA284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.0.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5D6DD223-CCA1-4C59-80AC-BF9E67479A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D645FC12-C7BD-4D2E-9ACB-509D3DEA73AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BE618334-8239-42DB-9F79-DE9241AEBF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D3764A91-2A1C-4076-8F2C-ECED2FFD15DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C9BF3278-84C0-46CE-9CB4-952D0361A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA1023E7-B6E3-49C2-BE70-34441FEC2CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A9A34A7A-7AE4-4372-805B-165D8890B0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "29DDC4B6-7832-4CA1-B872-41202ADA3CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E9E747FC-558F-4CD5-9BE1-0CFEC01A679A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BEA15E6A-4C34-46C4-8AA7-CC695116364D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6A629D3A-04FB-4C7A-B490-4A2E2E38DBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "72163879-BC1B-4F61-B441-014909940F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.1.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C7365CA4-4730-4ED7-B69C-E9FACB160442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6A1B5DB3-86EE-43D5-8FA2-C62CB0F1589B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1AD74B94-BA4C-4679-AD80-AB268F930800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F6B51A1C-15FA-4F09-BEC0-2365EA1B2320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3DF8E96E-9A0C-4865-9891-6FF686FAFC10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3E86FB3D-CD13-45CD-9D2C-C66C171D6D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7C568818-BFF9-4262-9092-4C441FE34C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "49EB8850-F83A-42AB-B4F2-F5867992E636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2B9A57FA-F313-4FD8-8354-86771173F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "00151508-4BC7-492D-846A-87CD1E2FFB56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A036EB08-E546-4FF4-922D-9E343918310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EE18045F-40CF-4680-8196-5381FFA80C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "48B31390-A81F-4206-A362-8FC71E5B87C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.2.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4852690A-87B8-4A0B-A72A-1D33027565F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "017E3E44-C062-463F-B9D3-75BA57992C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A2BB5352-F0AF-4578-979A-7E7D3259A94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "011F96AC-580A-4798-82F9-5D7CF80505DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8B2CE702-BB9A-426C-ADE1-6CC0CD96A2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "51ABD86F-DD27-43D6-AC0C-BE8E7B5A6308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EED5369E-4539-4598-85C9-00384CBB7410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "963C3008-04D5-4331-89E9-09FEC12FEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6C85C2D3-FA71-47C4-9BA1-1008F033E24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A7686091-ABEF-4EA3-B9EC-9B09C7B05FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D0BDC526-0F46-41E6-B723-D93A5FA288B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9BCB1613-C716-4147-9E1E-0FCAD800DE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FF59568E-ECF4-4AF9-9F70-01AB67CEACA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AA23CDDF-349C-4028-B857-FA1837BBEBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6169CE4B-429B-4DB8-B2D1-8AEAAB1BFB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.5.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EB11750A-BE9D-450C-856B-550DE8B0A55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.5.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "61B46B1C-70A9-4959-998B-1B9927378CE2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:light:*:*:*",
            "versionEndIncluding" : "6.5.1",
            "matchCriteriaId" : "19EBA2BD-619F-483D-A700-808310231B4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.splunk.com/view/SP-CAAAPW8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.splunk.com/view/SP-CAAAPW8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-04T18:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en index.asp en SANADATA SanaCMS 7.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sanadata:sanacms:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D376EEB4-C8D9-44F2-864B-051177483277"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017020038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017020038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-05T18:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en dispositivos SendQuick Entera y Avera en versiones anteriores a 2HF16. La aplicación no pudo comprobar el control de acceso de la solicitud por lo que podría resultar en que un atacante fuese capaz de apagar el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sendquick:entera_sms_gateway_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9649AFA2-5306-4888-8335-DDBCCDABA57B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sendquick:entera_sms_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7501D6BC-A349-40DB-98DF-0047FEA3F82A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sendquick:avera_sms_gateway_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF5B6E4-D97A-4B9B-8219-76357BE2BF51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sendquick:avera_sms_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9176344-BE46-48F4-A5C4-109184E37D0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96031",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-05T18:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en dispositivos SendQuick Entera y Avera en versiones anteriores a 2HF16. Un atacante podría solicitar y descargar los registros de SMS desde una perspectiva no autenticada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sendquick:entera_sms_gateway_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9649AFA2-5306-4888-8335-DDBCCDABA57B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sendquick:entera_sms_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7501D6BC-A349-40DB-98DF-0047FEA3F82A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sendquick:avera_sms_gateway_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF5B6E4-D97A-4B9B-8219-76357BE2BF51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sendquick:avera_sms_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9176344-BE46-48F4-A5C4-109184E37D0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96031",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2583",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-02-06T06:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a \"MOV SS, NULL selector\" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application."
      }, {
        "lang" : "es",
        "value" : "La implementación de load_segment_descriptor en arc/x86/kvm/emulate.c en el kernel de Linux en versiones anteriores a 4.9.5 emula indebidamente una instrucción \"MOV SS, NULL selector\", lo que permite a usuarios del SO invitado provocar una denegación de servicio (caída del SO invitado) u obteniendo privilegios de SO invitado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.4",
            "matchCriteriaId" : "7C19DB2D-DE85-4140-817A-D010708EB355"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/19/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95673",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1414735",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/33ab91103b3415e12457e3104f0e4517ce12d0f3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1414735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/33ab91103b3415e12457e3104f0e4517ce12d0f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2596",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-02-06T06:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references."
      }, {
        "lang" : "es",
        "value" : "La función nested_vmx_check_vmptr en arch/x86/kvm/vmx.c en el kernel de Linux hasta la versión 4.9.8 emula indebidamente la instrucción VMXON, lo que permite a usuarios del SO invitado KVM L1 provocar una denegación de servicio (consumo de memoria del SO anfitrión) aprovechando el manejo incorrecto de referencia de páginas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.8",
            "matchCriteriaId" : "631307FC-F876-4F6F-9611-3DA04263A60E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95878",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1417812",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1417812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number."
      }, {
        "lang" : "es",
        "value" : "La característica de freelist-randomization en mm/slab.c en el kernel 4.8.x de Linux y 4.9.x en versiones anteriores a 4.9.5 permite a usuarios locales provocar una denegación de servicio (entradas freelist duplicadas y caída del sistema) o posiblemente tener otro impacto no especificado en circunstancias oportunistas aprovechando la selección de un valor grande para un número aleatorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7",
            "versionEndExcluding" : "4.9.5",
            "matchCriteriaId" : "E7C80006-A48A-4709-BBED-83D2F1411141"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95711",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1415733",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1415733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/hid/hid-corsair.c en el kernel de Linux 4.9.x antes 4.9.6 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, lo que permite a usuarios locales provocar una denegación de servicio (caída del sistema o corrupción de memoria) o posiblemente tener otro impacto no especificado aprovechando el uso de más de una página virtual para una lista de dispersión de DMA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4",
            "versionEndExcluding" : "4.4.45",
            "matchCriteriaId" : "BAA44040-635E-42BC-834A-D2689F65038F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.6",
            "matchCriteriaId" : "6C4EC008-DEFD-4361-A4DA-8E99063FE606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6d104af38b570d37aa32a5803b04c354f8ed513d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95709",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416096",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6d104af38b570d37aa32a5803b04c354f8ed513d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6d104af38b570d37aa32a5803b04c354f8ed513d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6d104af38b570d37aa32a5803b04c354f8ed513d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/net/ieee802154/atusb.c en el kernel de Linux 4.9.x en versiones anteriores a 4.9.6 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, lo que permite a usuarios locales provocar una denegación de servicio (caída del sistema o corrupción de memoria) o posiblemente tener otro impacto no especificado aprovechando el uso de más de una página virtual para una lista de dispersión de DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95710",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416110",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log."
      }, {
        "lang" : "es",
        "value" : "La función klsi_105_get_line_state en drivers/usb/serial/kl5kusb105.c en el kernel de Linux en versiones anteriores a 4.9.5 coloca los contenidos de memoria de pila no inicializados en una entrada de registro sobre un fallo para leer el estado de la línea, lo que permite a usuarios locales obtener información sensible leyendo el registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.4",
            "matchCriteriaId" : "7C19DB2D-DE85-4140-817A-D010708EB355"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=146cc8a17a3b4996f6805ee5c080e7101277c410",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95715",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416114",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/146cc8a17a3b4996f6805ee5c080e7101277c410",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=146cc8a17a3b4996f6805ee5c080e7101277c410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/146cc8a17a3b4996f6805ee5c080e7101277c410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision."
      }, {
        "lang" : "es",
        "value" : "Error por un paso en la función pipe_advance en lib/iov_iter.c en el kernel de Linux en versiones anteriores a 4.9.5 permite a usuarios locales obtener información sensible de posiciones de memoria dinámica no inicializadas en circunstancias oportunistas leyendo desde una tubería después una decisión de liberación de búfer incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.4",
            "matchCriteriaId" : "7C19DB2D-DE85-4140-817A-D010708EB355"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95716",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416116",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097."
      }, {
        "lang" : "es",
        "value" : "La función simple_set_acl en fs/posix_acl.c en el kernel de Linux en versiones anteriores a 4.9.6 preserva el bit setgid durante una llamada setxattr que implica un sistema de archivos tmpfs, lo que permite a usuarios locales obtener privilegios de grupo aprovechando la existencia de un programa setgid con restricciones sobre los permisos de ejecución. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2016-7097."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.5",
            "matchCriteriaId" : "56274F09-9AD1-471A-8663-69116F7C8615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=497de07d89c1410d76a15bec2bb41f24a2a89f31",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95717",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416126",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/497de07d89c1410d76a15bec2bb41f24a2a89f31",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=497de07d89c1410d76a15bec2bb41f24a2a89f31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/497de07d89c1410d76a15bec2bb41f24a2a89f31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la función vc4_get_bcl en drivers/gpu/drm/vc4/vc4_gem.c en el controlador de VideoCore DRM en el kernel de Linux en versiones anteriores a 4.9.7 permite a usuarios locales provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de un valor de tamaño manipulado en una llamada ioctl VC4_SUBMIT_CL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.7",
            "matchCriteriaId" : "20EE2EFD-24B9-486E-8B08-FB740ABD8585"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416436",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/1/17/761",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/1/17/761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T06:59:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call."
      }, {
        "lang" : "es",
        "value" : "La función vc4_get_bcl en drivers/gpc/drm/vc4/vc4_gem.c en el controlador VideoCore DRM en el kernel de Linux en versiones anteriores a 4.9.7 no establece un valor errno sobre ciertas detecciones de desbordamiento, lo que permite a usuarios locales provocar una denegación de servicio (referencia incorrecta al puntero y OOPS) a través de valores de tamaño inconsistentes en una llamada ioctl VC4_SUBMIT_CL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.6",
            "matchCriteriaId" : "55352769-0317-401E-901B-1AE7A7ADD86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b8ac63847bc2f958dd93c09edc941a0118992d9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95765",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416437",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6b8ac63847bc2f958dd93c09edc941a0118992d9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/1/17/759",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b8ac63847bc2f958dd93c09edc941a0118992d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1416437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6b8ac63847bc2f958dd93c09edc941a0118992d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/1/17/759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T15:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter."
      }, {
        "lang" : "es",
        "value" : "XSS fue descubierto en dotCMS 3.7.0, con un ataque autenticado contra el parámetro /myAccount addressID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A30BB71-ACBD-426B-8468-58566A963A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/10643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/10643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T15:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter."
      }, {
        "lang" : "es",
        "value" : "XSS fue descubierto en dotCMS 3.7.0, con un ataque no autenticado contra el parámetro /news-events/events date."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A30BB71-ACBD-426B-8468-58566A963A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/10643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/10643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T15:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter."
      }, {
        "lang" : "es",
        "value" : "XSS fue descubierto en dotCMS 3.7.0, con un ataque no autenticado contra el parámetro /about-us/locations/index direction."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A30BB71-ACBD-426B-8468-58566A963A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/10643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/10643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T15:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects source_selector.php and the following parameter: src."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Exponent CMS 2.4.1. Se trata de una inyección SQL ciega que puede ser explotada por usuarios no autenticados a través de una petición HTTP GET y que puede utilizarse para transferir datos de la base de datos a un servidor malicioso mediante una técnica fuera de banda, tal como select_loadfile(). La vulnerabilidad afecta a source_selector.php y al siguiente parámetro: src."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F3A5C-6365-47C1-AC3B-AE490072DCE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96039",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/issues/73",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/issues/73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T17:59:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&filter[terms][1][cnj]=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&limit=1%22%3E%3C/a%3E[XSS] (among others)."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades XSS reflejadas dentro de los parámetros de entrada de formulario y enlace de ZoneMinder v1.30 y v1.29, una aplicación web de servidor CCTV de código abierto, lo que permite a un atacante remoto ejecutar secuencias de comandos maliciosos dentro del navegador de un cliente autenticado. La URL es /zm/index.php y los parámetros de muestra podrían incluir action=login&view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&filter[terms][1][cnj]=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&limit=1%22%3E%3C/a%3E[XSS] (entre otros)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D21BFCAB-D244-4331-B545-B38448040CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:1.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B2FB5-8AB8-49A9-B0E2-9215CB41D295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Feb/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Feb/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T17:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and automatically create a new admin user within the web application for remote persistence and further attacks. The URL is /zm/index.php and sample parameters could include action=user uid=0 newUser[Username]=attacker1 newUser[Password]=Password1234 conf_password=Password1234 newUser[System]=Edit (among others)."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder v1.30 y v1.29, una aplicación web de servidor de CCTV de código abierto, es vulnerable a CSRF (Cross Site Request Forgery), lo que permite a un ataque remoto realizar cambios en la aplicación web como la víctima registrada actual. Si la víctima visita una página web maliciosa, el atacante puede crear de forma silenciosa y automática un nuevo usuario admin dentro de la aplicación web para la persistencia remota y otros ataques. La URL es /zm/index.php y los parámetros de ejemplo podrían incluir action=user uid=0 newUser[Username]=attacker1 newUser[Password]=Password1234 conf_password=Password1234 newUser[System]=Edit (entre otros)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D21BFCAB-D244-4331-B545-B38448040CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:1.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B2FB5-8AB8-49A9-B0E2-9215CB41D295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Feb/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Feb/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T17:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&path= request."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación e inclusión de archivos en web/views/file.php en ZoneMinder de 1.x hasta la versión v1.30.0 debido a que la entrada de usuario no filtrada se pasa a readfile(), lo que permite a un atacante autenticado leer archivos del sistema local (por ejemplo, /Etc/passwd) en el contexto del usuario del servidor web (www-data). El vector de ataque es un .. (punto punto) en el parámetro de ruta dentro de una petición zm/index.php?View=file&path=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.30.0",
            "matchCriteriaId" : "9EC96EFF-9E48-4550-80A5-694E8AF0D377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Feb/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96125",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ZoneMinder/ZoneMinder/commit/8b19fca9927cdec07cc9dd09bdcf2496a5ae69b3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Feb/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ZoneMinder/ZoneMinder/commit/8b19fca9927cdec07cc9dd09bdcf2496a5ae69b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-06T18:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression."
      }, {
        "lang" : "es",
        "value" : "PEAR HTML_AJAX 0.3.0 hasta la versión 0.5.7 tiene una vulnerabilidad de Inyección de objetos PHP en el PHP Serializer. Permite la ejecución remota de código. En un punto de vista, la causa raíz es una expresión regular incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44363911-DB3D-43B0-B9DF-5FB2F0CE9608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F890FC-31D3-4441-8B8D-86A84EC77EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33E7BFE-5F77-4329-B562-C4FE0B51E192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33741A5B-EF7E-4491-A498-ECCB7BF71C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F495C13-4A7E-41B1-984B-D337C4902D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDE9746-0B92-4EFD-9D8A-4C0188CC718C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F9178-43B1-4A7B-AF47-6960B524A5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57FFFA78-4AEF-4DD3-BB13-BC1D665AC599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0DCF82-839A-45FA-9CA5-E67783B76BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C418F9-4DBB-413D-9096-2615E3924E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A68CC-20BE-43B4-8A6C-4712AE4D679B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB125CD-0C86-4E10-91B2-534EFF2E773B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E105D250-2808-47B6-B8E2-63E0A325CFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0F0836-28AA-4E53-A579-A31B30A2A00A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:html_ajax:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21140B8-BF43-494D-95C2-75F4AACB1DE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.pear.php.net/2017/02/02/security-html_ajax-058/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://karmainsecurity.com/KIS-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96044",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f5acb5adcd195f9a06b732794cb0de7620def646",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pear.php.net/bugs/bug.php?id=21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.pear.php.net/2017/02/02/security-html_ajax-058/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://karmainsecurity.com/KIS-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f5acb5adcd195f9a06b732794cb0de7620def646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pear.php.net/bugs/bug.php?id=21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0405",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-31960359."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remoto en el Surfaceflinger podría habilitar un ataque usando un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos multimedia y datos. Este problema se califica como Critical debido a la posibilidad de ejecutar código remoto en el contexto de procesos de Surfaceflinger. Producto: Android. Versiones: 7.0, 7.1.1. Android ID: A-31960359."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96048",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0406",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32915871."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remoto en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos multimedia y datos. Este problema está clasificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Esto afecta a la librería libhevc. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32915871."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96046",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0407",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32873375."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remoto en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos multimedia y datos. Este problema está clasificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Esto afecta a la librería libhevc. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32873375."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96046",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0408",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-32769670."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remoto en libgdx podría habilitar a un atacante que utiliza un archivo especialmente manipulado a ejecutar código arbitrario dentro del contexto de un proceso no privilegiado. Este problema está clasificado como High debido a la posibilidad de ejecución remota de código en una aplicación que utilice esta librería. Producto: Android. Versiones: 7.1.1. Android ID: A-32769670."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96092",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0409",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remoto en libstagefright podría habilitar a un atacante que utiliza un archivo especialmente manipulado a ejecutar código arbitrario en el contexto de un proceso no privilegiado. Este problema está clasificado como High debido a la posibilidad de ejecución remota de código en una aplicación que utilice esta librería. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96091",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0410",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31929765."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el Framework APIs podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31929765."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96056",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0411",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33042690."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el Framework APIs podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 7.0, 7.1.1. Android ID: A-33042690."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96056",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41354/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0412",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el Framework APIs podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 7.0, 7.1.1. Android ID: A-33039926."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96056",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41355/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0413",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32161610."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en AOSP Messaging podría habilitar a una aplicación local maliciosa a eludir las protecciones del sistema de operación que aísla los datos de aplicación de otras aplicaciones. Este problema está clasificado como High porque puede ser usado para obtener acceso a datos a los cuales la aplicación no tiene acceso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32161610."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96063",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0414",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información in AOSP Messaging podría habilitar a una aplicación local maliciosa a eludir las protecciones del sistema de operación que aisla los datos de aplicación de otras aplicaciones. Este problema está clasificado como High porque puede ser usado para obtener acceso a datos a los cuales la aplicación no tiene acceso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96063",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0415",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Mediaserver podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96089",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0416",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Audioserver podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0417",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Audioserver podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0418",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32703959."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Audioserver podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32703959."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0419",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32220769."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Audioserver podría permitir a una aplicación local maliciosa local ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como High porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32220769."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0420",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en AOSP Mail podría habilitar a una aplicación local maliciosa a eludir las protecciones del sistema de operación que aisla los datos de aplicación de otras aplicaciones. Este problema está clasificado como High porque puede ser usado para obtener acceso a datos a los cuales la aplicación no tiene acceso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96093",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0421",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32555637."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el Framework APIs podría habilitar a una aplicación local maliciosa a eludir las protecciones del sistema de operación que aisla los datos de aplicación de otras aplicaciones. Este problema está clasificado como High porque puede ser usado para obtener acceso a datos a los cuales la aplicación no tiene acceso. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32555637."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96096",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0422",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322088."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Bionic DNS podría habilitar a un atacante remoto a usar un paquete de red especialmente manipulado para provocar un bloqueo o reinicio del dispositivo. Este problema está clasificado como High debido a la posibilidad de una denegación de servicio remota. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322088."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96097",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0423",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Bluetooth podría habilitar a un atacante próximo gestionar el acceso a documentos en el dispositivo. Este problema está clasificado como Moderate porque primero requiere la explotación de una vulnerabilidad separada en la pila de Bluetooth. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96102",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0424",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it is a general bypass for a user level defense in depth or exploit mitigation technology in a privileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322450."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en AOSP Messaging podría habilitar a un atacante remoto utilizando un archivo especial manipulado acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderate porque es un bypass general para un nivel de defensa de usuario en profundidad o explotar la tecnología de mitigación en un proceso privilegiado. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322450."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96104",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0425",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32720785."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Audioserver podría habilitar a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderate porque podría ser utilizado para acceso a datos sensibles sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32720785."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0426",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32799236."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el Filesystem podría habilitar a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderate porque podría ser utilizado para acceso a datos sensibles sin permiso. Producto: Android. Versiones: 7.0, 7.1.1. Android ID: A-32799236."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96099",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0427",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31495866."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el sistema de archivos del kernel podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como Critical debido a la posibilidad de un compromiso de dispositivo local permanente, lo que puede requerir reflash del sistema de operación para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-31495866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96071",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0428",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32401526. References: N-CVE-2017-0428."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador NVIDIA GPU podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como Critical debido a la posibilidad de un compromiso de dispositivo local permanente, lo que puede requerir reflash del sistema de operación para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10. Android ID: A-32401526. Referencias: N-CVE-2017-0428."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96070",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0429",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32636619. References: N-CVE-2017-0429."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador NVIDIA GPU podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como Critical debido a la posibilidad de un compromiso de dispositivo local permanente, lo que puede requerir reflash del sistema de operación para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10. Android ID: A-32636619. Referencias: N-CVE-2017-0429."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96070",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0430",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32838767. References: B-RB#107459."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Broadcom Wi-Fi podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como Critical debido a la posibilidad de un compromiso de dispositivo local permanente, lo que puede requerir reflash del sistema de operación para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32838767. Referencias: B-RB#107459."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96065",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0432",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-28332719."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador MediaTek podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. Android ID: A-28332719."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96067",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0433",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913571."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil Synaptics podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del chipset de pantalla táctil. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. Android ID: A-31913571."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96061",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2016001",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2016001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0434",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33001936."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil Synaptics podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del chipset de pantalla táctil. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. Android ID: A-33001936."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96061",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0435",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31906657. References: QC-CR#1078000."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de sonido Qualcomm podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-31906657. Referencias: QC-CR#1078000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96053",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0436",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32624661. References: QC-CR#1078000."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de sonido Qualcomm podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32624661. Referencias: QC-CR#1078000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96053",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0437",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402310. References: QC-CR#1092497."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32402310. Referencias: QC-CR#1092497."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0438",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402604. References: QC-CR#1092497."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32402604. Referencias: QC-CR#1092497."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0439",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32450647. References: QC-CR#1092059."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32450647. Referencias: QC-CR#1092059."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/out-bounds-write-wifi-driver-function-hddextscanpasspointfillnetworklist-cve-2017-0439",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/out-bounds-write-wifi-driver-function-hddextscanpasspointfillnetworklist-cve-2017-0439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0440",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33252788. References: QC-CR#1095770."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-33252788. Referencias: QC-CR#1095770."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0441",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32872662. References: QC-CR#1095009."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32872662. Referencias: QC-CR#1095009."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/possible-integer-overflow-buffer-overflow-qcanl80211vendorsubcmdextscansetsignificantchange-cve-2017",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/possible-integer-overflow-buffer-overflow-qcanl80211vendorsubcmdextscansetsignificantchange-cve-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0442",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32871330. References: QC-CR#1092497."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32871330. Referencias: QC-CR#1092497."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0443",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32877494. References: QC-CR#1092497."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-32877494. Referencias: QC-CR#1092497."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/out-bounds-write-wlan-driver-function-wlanhddcfg80211setextroamparams-cve-2017-0443",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/out-bounds-write-wlan-driver-function-wlanhddcfg80211setextroamparams-cve-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0444",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32705232."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de sonido Realtek podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. Android ID: A-32705232."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96107",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0445",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32769717."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil HTC podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. Android ID: A-32769717."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96054",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0446",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32917445."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil HTC podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. Android ID: A-32917445."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96054",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0447",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32919560."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil HTC podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. Android ID: A-32919560."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96054",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0448",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:01.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-32721029. References: N-CVE-2017-0448."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de vídeo NVIDIA podría habilitar a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como High porque podría ser utilizado para acceso a datos sensibles sin permisos de usuario explícitos. Producto: Android. Versiones: Kernel-3.10. Android ID: A-32721029. Referencias: N-CVE-2017-0448."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96105",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0449",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:02.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10. Android ID: A-31707909. References: B-RB#32094."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en el controlador Broadcom Wi-Fi podría habilitar a una aplicación local maliciosa a ejecutar código arbitrario dentro del contexto del kernel. Este problema está clasificado como Moderate porque primero requiere comprometer un proceso privilegiado y es mitigado por las configuraciones de la plataforma actual. Producto: Android. Versiones: Kernel-3.10. Android ID: A-31707909. Referencias: B-RB#32094."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96110",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0450",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:02.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it is mitigated by current platform configurations. Product: Android. Versions: N/A. Android ID: A-32917432."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegio en Audioserver podría habilitar a una aplicación local maliciosa ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema está clasificado como Moderate porque es mitigado por las configuraciones de la plataforma actual. Producto: Android. Versiones: N/A. Android ID: A-32917432."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96109",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0451",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-02-08T15:59:02.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31796345. References: QC-CR#1073129."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de sonido Qualcomm podría habilitar a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-31796345. Referencias: QC-CR#1073129."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96108",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-08T16:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in a session and a \"forbidden attack,\" a similar issue to CVE-2016-0270."
      }, {
        "lang" : "es",
        "value" : "Citrix NetScaler ADC y NetScaler Gateway 10.5 en versiones anteriores a Build 65.11, 11.0 en versiones anteriores a Build 69.12/69.123 y 11.1 en versiones anteriores a Build 51.21 genera aleatoriamente GCM nonces, lo que hace marginalmente más fácil a atacantes remotos obtener la clave de autenticación de GCM y falsificar datos aprovechando aprovechando una nonce reutilizada en una sesión y un \"ataque prohibido\", un problema similar a CVE-2016-0270."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.65.11",
            "matchCriteriaId" : "2E70E5D1-F79F-483B-AA26-C2EA34A8CBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.69.12",
            "matchCriteriaId" : "29DE7CF6-66F9-4B13-92D4-44107ADDFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.51.21",
            "matchCriteriaId" : "9F1296F8-B7E8-443E-8C47-89B6EBD5C2FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96151",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nonce-disrespect/nonce-disrespect",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX220329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nonce-disrespect/nonce-disrespect",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX220329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2765",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-02-08T17:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerability that could potentially be exploited by attackers to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 está afectado por una vulnerabilidad de elusión de autenticación que podría ser explotada potencialmente por atacantes para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D35198-BA21-445D-9693-BAF66AE61099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341857D8-1DBB-479F-9C56-D17ACFC8117F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91524EB-ECF4-433A-A1D9-7574FAA3F58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9ABABD-2320-4C27-BFD7-1E6E34B453C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BB054C-6573-4516-B74A-5B6BED8A82C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87999B65-7C3D-474A-90CD-00585641027E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE8CFAC-5941-4A39-81DD-2AB3FEA90A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618AE0B4-5DAD-44DC-9C50-4E68873B0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B29B844-C048-42EE-8343-A9F23C513F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:isilon_insightiq:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722FF243-ECAE-4193-ACC3-25AF6FB1D571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540100/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95945",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540100/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1127",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-02-08T19:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "IBM Rational DOORS Next Generation 4.0, 5.0 y 6.0 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la interfaz Web alterando así la funcionalidad intencionada conduciendo potencialmente a la divulgación de credenciales en una sesión de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3894CB-8DF7-4011-B47F-36485A2A6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6342F6-709A-4043-A879-57E9C7232C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CDFA1C-9C07-4744-95F9-93A2332E2F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D8C43B-C109-44E1-868F-7DC1289D9BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFBB5B-8566-45BC-9123-5418821E6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A84EA62-E3F8-4E4C-9FEF-065300C4611A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232D8EF-1DB3-477D-818C-B79B68406197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21996645",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96019",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21996645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1128",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-02-08T19:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "IBM Rational DOORS Next Generation 4.0, 5.0 y 6.0 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la interfaz Web alterando así la funcionalidad intencionada conduciendo potencialmente a la divulgación de credenciales en una sesión de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3894CB-8DF7-4011-B47F-36485A2A6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6342F6-709A-4043-A879-57E9C7232C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CDFA1C-9C07-4744-95F9-93A2332E2F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D8C43B-C109-44E1-868F-7DC1289D9BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFBB5B-8566-45BC-9123-5418821E6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A84EA62-E3F8-4E4C-9FEF-065300C4611A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232D8EF-1DB3-477D-818C-B79B68406197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21996645",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96017",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21996645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file."
      }, {
        "lang" : "es",
        "value" : "La función gst_riff_create_audio_caps en gst-libs/gst/riff/riff-media.c en gst-plugins-base en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (excepción en punto flotante y caída) a través de un archivo de vídeo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777262",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string."
      }, {
        "lang" : "es",
        "value" : "La función gst_date_time_new_from_iso8601_string en gst/gstdatetime.c en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de límites) a través de una cadena datetime mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777263",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX."
      }, {
        "lang" : "es",
        "value" : "La función gst_riff_create_audio_caps en gst-libs/gst/riff/riff-media.c en gst-plugins-base en GStreamer en versiones anteriores a 1.10.3 no limita adecuadamente la recursión, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de pila y caída) a través de vectores que implican WAVEFORMATEX anidado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777265",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index."
      }, {
        "lang" : "es",
        "value" : "La función qtdemux_parse_samples en gst/isomp4/qtdemux.c en gst-plugins-good en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de límites) a través de vectores que implican el índice stts actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777469",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags."
      }, {
        "lang" : "es",
        "value" : "La función gst_avi_demux_parse_ncdt en gst/avi/gstavidemux.c en gst-plugins-good en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de límites) a través de vectores que implican etiquetas ncdt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777500",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi."
      }, {
        "lang" : "es",
        "value" : "La función html_context_handle_element en gst/subparse/samiparse.c en gst-plugins-base en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (escritura fuera de límites) a través de un archivo SMI manipulado, file, según lo demostrado por OneNote_Manager.smi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777502",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de uso después de liberación de memoria en las funciones (1) gst_mini_object_unref, (2) gst_tag_list_unref y (3) gst_mxf_demux_update_essence_tracks en GStreamer en versiones anteriores a 1.10.3 permiten a atacantes remotos provocar una denegación de servicio (caída) a través de vectores que implican etiquetas stream, según lo demostrado por 02785736.mxf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777503",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file."
      }, {
        "lang" : "es",
        "value" : "La función gst_riff_create_audio_caps en gst-libs/gst/riff/riff-media.c en gst-plugins-base en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (excepción de punto flotante y caída) a través de un archivo ASF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777525",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that \"goes behind\" the surrounding tag."
      }, {
        "lang" : "es",
        "value" : "La función gst_avi_demux_parse_ncdt en gst/avi/gstavidemux.c en gst-plugins-good en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no válida y caída) a través de una sub etiqueta ncdt que \"va detras\" de la etiqueta circundante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777532",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors related to the number of languages in a video file."
      }, {
        "lang" : "es",
        "value" : "La función gst_asf_demux_process_ext_stream_props en gst/asfdemux/gstasfdemux.c en gst-plugins-ugly en GStreamer en versiones anteriores a 1.10.3 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no válida y caída) a través de vectores relacionados con el número de idiomas en un archivo de vídeo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "85C43B20-832C-4441-9261-7DF5E33D2472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777937",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors."
      }, {
        "lang" : "es",
        "value" : "La función gst_asf_demux_process_ext_content_desc en gst/asfdemux/gstasfdemux.c en gst-plugins-ugly en GStreamer permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de límites) a través de vectores que implican descriptores de contenido extendidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "CFCF77DB-B4AE-402D-B875-E46E26946948"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3821",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777955#c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GStreamer/gst-plugins-ugly/commit/d21017b52a585f145e8d62781bcc1c5fefc7ee37",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777955#c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GStreamer/gst-plugins-ugly/commit/d21017b52a585f145e8d62781bcc1c5fefc7ee37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T15:59:01.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing."
      }, {
        "lang" : "es",
        "value" : "La función gst_ps_demux_parse_psm en gst/mpegdemux/gstmpegdemux.c en gst-plugins-bad en GStreamer permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no válida y caída) a través de vectores que implican análisis PSM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "CFCF77DB-B4AE-402D-B875-E46E26946948"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3818",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777957#c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777957#c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T16:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended \"Please select booking identification\" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog."
      }, {
        "lang" : "es",
        "value" : "El terminal de la aerolínea Norwegian Air Shuttle (también conocida como norwegian.com) permite a atacantes físicamente próximos eludir el paso de IU destinada \"Por favor seleccione la identificación de la reserva\", y obtener privilegios administrativos y acceso a la red en el SO Windows subyaciente, al acceder a un icono de impresión en la pantalla táctil para manipular el dialogo de impresión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norwegian-air:norwegian_air_kiosk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93320E3F-9B9F-475A-957D-A07CBAB5951C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugemot.com/bug/190",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=2j9gP5Qu2WA",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=WSQW0ipnXQg",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugemot.com/bug/190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=2j9gP5Qu2WA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=WSQW0ipnXQg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3807",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-09T17:59:00.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated, remote attacker to cause a heap overflow. The vulnerability is due to insufficient validation of user supplied input. An attacker could exploit this vulnerability by sending a crafted URL to the affected system. An exploit could allow the remote attacker to cause a reload of the affected system or potentially execute code. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed firewall mode only and in single or multiple context mode. This vulnerability can be triggered by IPv4 or IPv6 traffic. A valid TCP connection is needed to perform the attack. The attacker needs to have valid credentials to log in to the Clientless SSL VPN portal. Vulnerable Cisco ASA Software running on the following products may be affected by this vulnerability: Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA for Firepower 9300 Series, Cisco ASA for Firepower 4100 Series. Cisco Bug IDs: CSCvc23838."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de Common Internet Filesystem (CIFS) en la funcionalidad Clientless SSL VPN de Cisco ASA Software, Major Releases 9.0-9.6, podría permitir a un atacante remoto autenticado provocar un desbordamiento de la memoria dinámica. La vulnerabilidad se debe a una validación insuficiente de la entrada suministrada por el usuario. Un atacante podría explotar esta vulnerabilidad enviando una URL manipulada al sistema afectado. Una explotación podría permitir al atacante remoto provocar una recarga del sistema afectado o potencialmente ejecutar código. Nota: Solo tráfico dirigido al sistema afectado puede ser usado para explotar esta vulnerabilidad. Esta vulnerabilidad solo afecta a sistemas configurados en modo firewall enrutado y modo de contexto individual o múltiple. Esta vulnerabilidad puede desencadenarse por tráfico IPv4 o IPv6. Se necesita una conexión TCP válida para llevar a cabo el ataque. El atacante necesita tener credenciales válidas para iniciar sesión en el portal Clientless SSL VPN. El software Cisco ASA vulnerable que se ejecuta en los siguientes productos puede verse afectado por esta vulnerabilidad: Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA para Firepower 9300 Series, Cisco ASA para Firepower 4100 Series. Cisco Bug IDs: CSCvc23838."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7632C245-04C6-4E78-87B7-55CCCA6FD6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA0DDDD-C987-4DA6-ADEE-77B387C26A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E84099EB-2535-4A9F-8355-FF937CFBD122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBC03FE-3A54-450E-A8CE-844C4A6E54B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C599F894-DAD2-4231-8BB8-1427E7C02D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5123875E-2726-4AD3-A767-04D4F3C15DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F60C12-71C9-47C6-B43F-A0374419D736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBC6451-C5CE-4A84-8FAD-A0B6DBF67D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C853CD9-F451-406E-A515-3BDC34E55639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4D6D0E-03FD-4C3C-9F6F-0BCE4B9F5D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B296BB10-E740-4EFC-A9FE-5E8C6D9BA0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41173D04-CD92-429A-A201-094C324435ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FB6BAE-322B-48F1-A26D-0ADC86ECCAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF3A418-EF33-4BEF-8508-DA573885AE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929BF200-619E-4F35-9DDC-8DBFA7728CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEBB18A-F33C-4A07-8C3F-5042F5C5B66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C28DC-B15F-486B-96F1-D08529B7374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E00BE3-089B-48DB-8626-F5F655271CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89373AD0-3CC4-4BD0-BA5C-352322BD371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240E8B28-9CC1-4995-91D4-B41ACC96C44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB3077B-59B9-4B33-AE6F-A0AF84EB69EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03A1408-A55A-4482-B239-B13094B13BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABBFB9E-C009-42B6-A7D7-D897843F9A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FCA9A3-94DF-4A5C-84D8-A1E95BC9A8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9776E3A4-8F5D-4579-992D-EC00F0F7AEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4400D917-0BEB-49AE-80C9-0F607818EEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B53107-BCD0-4D3E-B090-91D6BD6139C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0430DD9-E36F-4911-ABB3-5B1043AE9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3639AA-0F7B-403E-83F9-538A770008E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A929090-A536-44B3-9371-A827FD0BEEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB1837E-A87E-435A-8C89-AA6BB55FE9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF45DF2C-54FF-48FE-A72B-9416CD5A582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27FAEFB-6129-44D5-A836-867B24C6A980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3845853-C6C5-464D-8BEA-4F3D6B53AEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C6B77C-1AD1-48E5-9279-B9F388066082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E87DA1-3BD9-46E3-ADDB-DF7F5B958009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CDAE653-39BC-443F-B2B0-06BEE9A66E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43EB0487-CF1F-4314-BD0D-2F31E4252431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D147236F-7871-4879-86E1-CDD49E9C4C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8708CA-EA75-40EB-A868-BA78B5753516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E853B8BF-07F5-46DF-8DEA-302F68B8B086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ADB02B-E12A-49F7-84A5-981C51CBD85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE8E662-2772-4D98-B01C-694757D9D6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1950D663-F0C9-4AE1-9595-FDCCDA1D83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6C582-4CCD-4BEA-8367-242CC3BADE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95627941-30D8-452F-B6C8-76D2BEE93514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7C3B04-B4F2-442C-BB54-9F4F192FB80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECA50E1-B84C-46DD-AACE-513E9D4C383B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1E4830-C94A-4B7E-9CE1-63D0A747FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C569D949-A2BE-4983-A5C3-14508676B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF586164-82BC-4EA9-BE9D-4B6CDBFD7D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A338318-148E-4EB3-B406-29A55F6E0B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F3A543-ECF2-4672-B6B6-DC1AB7D96D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CA0EA-F85E-4C4B-96D8-A7256F413844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA148AD-604D-4284-AE41-4E279F616B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4087CC-8B4D-42F5-9917-DA5EA2AA684C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CE8E7E-86CD-458C-AAB4-5901F66FC977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AB954E-D1F4-4B29-B782-2E9917D82DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B943E75A-F816-473B-A458-9C6F3F702414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C016EF9-C98A-4877-8086-39EA92031FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E552CFA-627D-4CE5-9E73-E97A1DFCF40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C47D6AE-7B30-422F-9F7F-2A95608AD3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF918814-7EC6-4F46-AA7D-6AA52A42DB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B55084-8826-4FE1-B0C0-0132354D9CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC75098F-97F4-4E27-8602-4521048C144C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA3389C-86FE-45F7-97D7-E3386403944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54C2EAD-3E0F-451D-8451-A5D29D005DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7025DA5B-2C48-4044-B11C-F45FF351311A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F9B862-1E61-477A-9ADF-8DCCDCB1C239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61FFB15-1E0C-4B7C-A506-BE69F1049D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53EC396-87B2-46F2-B150-841804F10FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19432EC8-2C08-4C07-80A1-36BD1A747C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E501CF3-86C1-4F37-8228-79A698236733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730F28DB-DFAC-4D9D-AB4A-42C158F3D88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656D49C2-4F2E-4369-8933-FF74A3CD51EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D2A272-5B6A-426C-B95C-03F1CF92A556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AD5614-6AA5-4607-9B4D-7F40E174B51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68E73D6-A207-4276-A972-52B859CD958A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743B9EEB-8A00-4EDD-A10D-4FC0A8C2E6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA384B7-938A-48F7-8154-442E46FB1400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250AEA5-7613-4F64-B90D-D600745F2403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44B4A87-D033-4C3F-B1F8-BC40E2CCDC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C93F75-E046-4E09-A269-49A55EFF2978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CFD97E-113C-4F56-9BF1-D57C81BCA589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880058C4-556B-42FF-98AF-4428CB8CB94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D6D5C-1DA2-407A-BE75-2189E04BC9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D61007E-55D6-4E10-A9CF-B4B5227AC909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A862D259-40EE-45AE-B896-7F68AC06272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D33210F-0FA8-4089-AA05-C7AA80C12460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2D6C8E-2E0F-4328-8BE5-8E6845B75513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313EF49F-4F50-4205-93D8-38B0B18EB7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E406214-2776-42C2-B777-92E6420FBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837D743B-CCCB-4D30-9B2E-24CBC4F9F9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B44024A-4500-4ACD-9C92-8EA996188B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C2A72E-C42C-456B-B712-D04860CE1A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC7F030-18CA-4F56-8F97-69E038319E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911DC415-971F-46C1-B804-F8E87A0FD60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756BFBA7-D2D1-45D7-B225-A12B4FB82949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.0.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200F740F-9D7D-4A64-AE1F-276CF58241C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B9D86-8EEB-4A5E-824C-4D7EBD64877A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD242CAB-9DB6-42F3-B649-A963C386C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9251926E-96A3-4160-BADB-2DF5CB662B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2B9487-9749-4271-8112-C4FA21611312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E478D1ED-C5AF-46C2-B49B-515A62B653B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAB258C-5D97-489B-8B4E-0511B00BE506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CF28B6-627D-4E25-BB61-32956239963D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E91C88B-7DF8-4ED5-B4BD-8C252C6EF0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519C99B8-E222-4FA3-8C8F-0DA6019CD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E26DFA-B023-44B9-80D1-A5E391B571AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F07BA4-A069-4CD5-B0D9-156320CBB5AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CDDEAF-C62D-4364-ACA8-14F14BBFB150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D140D4-1AE3-4D46-9B13-3EC78EBC4FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70158003-F6CA-4A5C-893C-BF885A388D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2C8AFA-A4B6-44A2-B00C-1950997493C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6297451E-196E-4C6D-9186-451BB42CAE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465313C5-BFB9-458A-8150-8F7BA1F8C386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF399187-270F-4560-9C09-DF18132FA427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7A928A-2CBA-43BC-B312-975EE9E24830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF721BA-25FF-485E-9102-5741AC9BC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F34D78E-68C9-4372-85F2-E74A1C8C06F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05748A45-8423-42F4-8F95-7BA83548C4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C15D1F6-997D-47FD-A654-AEF3332E6105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3E5F50-CBD1-4516-BC97-3AF59DB39A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B54134-5AC7-4D7E-A7F1-D4C2057FF146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFE499E-09BB-4C86-AC74-7568B2D3CA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5BF7-18FB-4066-947E-7352B9951AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42DD43A-B6BD-4C2B-BA57-928501C62388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE65B75-4987-4E77-8814-F7BC9875924A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C890603E-6634-46E2-AFA9-ADE8ED1B9E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBAB79E-83BF-4AD1-875B-D015A18ECB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA41C5E-F854-4729-9498-C54FA5C00664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B08E743-488A-4F99-ABA6-98AD534B603B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978A0B9D-1B1D-4E22-893C-52DE75247BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD17927A-7AFA-4177-A34E-5FEB7A9400AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4B884F-EDE6-4055-83D8-609D2D1E518F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8570FBED-D38F-49ED-8C6A-E241BF7E1274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2889989-8D9C-4E06-8477-8BCF6DC7D84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E9724F-AD95-4572-BD8F-27B71F8EBC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA7A0DD-9826-4AD8-B7C8-AD750BD87E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990B883-0B5A-44F0-B4DC-8031ED0F2026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA74460-D26D-4C0A-B697-DF9003096065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BEB7A8-B2DB-46EB-9265-AB88476B1002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF80D39-35D2-447C-A809-E4C819FEEF25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F417BC-5835-4F29-8DB6-03A62B7B2364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90599A3-F885-414E-94F9-B4AECEB34D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0185F882-E031-4B16-8DB3-62F76FBB78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092FB46B-A4A4-40E5-B474-4FC36ADC427C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB27EFB-BF82-493D-ADF2-7395B4E2A55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD84D98-1B98-454C-AF63-DE5E76E17C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D975A3B-0B3C-44E6-BE9C-AA73CF97AF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAF32AF-EF06-4663-BFBE-1334D491A212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB85D8-B247-4921-AE49-C2A1C2FDEB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BA59C8-F3D0-4B94-824B-F3CDAB465D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF3C75D-751C-444F-A4AF-303409B22B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CD6FE3-1B32-461E-9215-0F016798B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22552CF4-01F8-46A8-ADD4-7BABFA574330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1C5485-EAF4-4F4D-AFA1-E105F433665E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989F9AC4-C2D1-49A0-95C3-79A4EB827E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE2E079-D7AC-4FE9-8938-A75C12AF5CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B442C852-2465-4EA8-A977-1F10A4CE23AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB6ED4-3095-46C1-9CB6-2975A7B05303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE68CD8E-B9CF-4519-8B0E-4C4488B34887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D762C9A7-005C-44FD-9BB2-7A1DD4EBE90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0B1212-87F3-46E5-B14A-C0C6BBAAAC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4826-06B0-4DDC-B082-A536418FD292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E343DE08-58FA-4C39-99F9-8CB5F57D0CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76363698-DB62-4D92-8EE4-069891A9F92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6159BEE3-D097-4E07-9962-06DB740E2AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD606591-F69A-47AD-9256-20B98CA16135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EF3895-F372-45D3-9C7D-15F5C4712D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC5960D-B917-4ABA-850F-A710676ACB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B746A138-6650-49A3-87C8-3728FE5CF215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50C2A13-5A8B-4FA5-ABB8-1157E560503B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F9D55-9276-4CF1-BC63-7CEEF8F25C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F383D276-D5EC-4335-AC09-9D30F6443AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C2A7FF-6AC3-42B5-954A-9AA5950C523A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7F36A8-C291-423D-AF28-56AAD8D0F712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2009F4-F832-49D6-8346-54A7328BD93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9221DD4-498A-4867-B647-47E42299CE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B839A425-E08C-41B1-9270-E177E40B1E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4DDF53-0995-4971-A980-30FD15A40C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3BD921-A58A-47EB-B90D-21C3A5D02D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800FE449-350D-4C4C-A8C2-D4C5A3B59F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49BF8F7-5ACE-4D90-8F17-1AA9D3A2FD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE6D050-F186-492C-9813-895433B2612A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6157AA5C-8297-4A32-B0A8-1E7E801E9CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A13091-02C6-4D98-90C9-ED4C43BDAFAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C3E0E1-C3F3-4D53-8116-7D1AF3CD53CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F3DB48-E1EE-44E9-85DE-9FD7D5C59B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E064BD-CBC0-4556-9BCF-87D808809237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D5DC14-187B-4808-8377-5FF44A11AA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64079FC4-53D8-4DBF-A2D5-2CED256F4939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF969BE-46BB-4AD7-85AB-8384426E9551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EEA7A5-67FD-4CA4-8FF8-4B17A9C47B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E618B3-DD03-4ECD-AB9B-97F1EDF95E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0DFE19-1C68-40E6-B8CD-9CC03F8B4281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20424324-881A-496B-BC55-62AA75994249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67012F3-5153-400E-BD6F-EB0949875F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40E9AB5-26E0-4BA2-9AFA-496BAA0EAC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BA4B2D-187A-47EC-8BE1-7EA178549476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF52FB9-4EA9-41A7-AD29-E963C09FC98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C8C6E9-D5C3-42DC-B431-9097B2FCCB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B5CF41-7F01-4AE9-B54B-8DB6909504B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BDD9D1-0DE3-4FA7-BDC1-2A724162CEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C80EAFF-E577-414A-9DDE-D27A41CB3DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CC07CC-0C79-48ED-BEB6-4B576A0DBD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FA6817-C5B7-410F-9CF7-801CC958C12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1576FC7F-B7DD-41DD-A95E-23B1F86E4B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3768E4B0-E457-47AB-99B0-7C1A0E0CBE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D142088-0265-4987-8F5C-029F3DD06A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EDEE39-865D-4DA3-B1C9-033F2FF1A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F0A66-A71E-4B64-A66F-EA7B9C0D9151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33B43A-1836-4402-AEAC-59CA8F44E3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B7B477-15FD-4198-B0D9-0F9A8A2E4C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6887033-E697-47D0-B6E0-61B64E9D3AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C1AB6D-F2C5-4726-8792-581E8DCB9EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1216C-903C-469D-8615-ECFB3AA29BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0707169B-34B9-4666-8EBD-F5967059D6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D03293-9765-46DB-B53D-1B23D5C14373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0286DAF0-FACA-4F94-82E9-EAED8750DB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E77826-1208-4582-A94C-242B601BD456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD617A59-2A4C-4264-BB5D-0126EF292079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B9FC85-13B8-488C-80C4-C29C0E244601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7582A-835E-4A84-B197-EB40EE7985C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C489F4-4501-48D1-830F-169382343B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7C150D-8C79-4CF4-A6B6-AA46A94A3B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE55AB-8170-4E3A-AF89-A8F79599901A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10653A-0E7C-4014-825D-76B5B438D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77642A96-EF7F-4138-97BC-B3793EE0FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE9F46B-DD74-4295-BB6A-9239E29F4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE2EE9B-D44E-430D-8469-1DF0ADC322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6B45EB-97BB-4683-9092-95E560B2585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3AA854-0F4D-4B08-A249-B3C19C056D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EFD6D-A657-4102-982D-7634AC25E75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59593836-990A-4CF1-AFBC-516C4A318641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479676D-6B3F-4154-B0D4-D2C81E6C941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F062A64B-7184-49C6-BDF5-8A413B0A85F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B574E7C0-95AA-4A24-9470-FA282192D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5B88C0-F809-4A58-9708-60C56129142C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF8738F-8D49-47D3-B60D-3145218C9C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D146E0E-59DD-48BD-9A74-4E4823590E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FB5698-3AEA-4246-A677-7DB3DE73605D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56190201-887B-4157-9323-AAAA1CD86F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA7A9-F4DB-4BC1-9233-F72B66191F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D8C893-BA42-4EE5-A790-13614A6B436F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5D09C9-4559-4FED-B4B7-EAE5935EBCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074A5E58-A066-470B-840A-1148A8979DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF2C556-48E6-4572-8FD9-4DC8BAD90B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAD792D-70DB-4123-8BCC-B6890A9BCAA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96161",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037797",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-asa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41369/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-asa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41369/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3813",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-09T17:59:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated, local attacker to open Internet Explorer with the privileges of the SYSTEM user. The vulnerability is due to insufficient implementation of the access controls. An attacker could exploit this vulnerability by opening the Internet Explorer browser. An exploit could allow the attacker to use Internet Explorer with the privileges of the SYSTEM user. This may allow the attacker to execute privileged commands on the targeted system. This vulnerability affects versions prior to released versions 4.4.00243 and later and 4.3.05017 and later. Cisco Bug IDs: CSCvc43976."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo Start Before Logon (SBL) de Cisco AnyConnect Secure Mobility Client Software para Windows podría permitir a un atacante local no autenticado abrir Internet Explorer con los privilegios del usuario SYSTEM. Esta vulnerabilidad se debe a implementación insuficiente de los controles de acceso. Un atacante podría explotar esta vulnerabilidad abriendo el navegador de Internet Explorer. Una explotación podría permitir al atacante usar Internet Explorer con privilegios del usuario SYSTEM. Esto podría permitir al atacante ejecutar comandos privilegiados en el sistema objetivo. Esta vulnerabilidad afecta a versiones anteriores a las versiones lanzadas 4.4.00243 y posteriores y 4.3.05017 y posteriores. Cisco Bug IDs: CSCvc43976."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00048:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0608CACF-28C5-4A23-81FE-7FEB655FC84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B9DB6D-0ABC-4938-A36E-2F68AB94635C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086B95BE-3C22-4A6F-8D6A-20E550AD87D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00057:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0049AFD-B450-45A3-9067-423558EF8AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00061:*:*:*:*:*:*:*",
            "matchCriteriaId" : "514B78B6-E0EE-40D6-A3FF-3DFAAF422187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.00028:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A5414A-43FC-40BD-BD1F-49E9D73FD7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.02011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660D863C-F744-4C54-9553-DE4934632280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.04011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AF4613-59C0-42B0-AAE5-F1D9E4C4BEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.06013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3CC72A-070B-4924-A8BB-54FCB547C694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.06020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25990F44-B6A3-497B-A57D-E6D2E1993D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.08005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F1CB4A-3A77-480E-A66E-467EF22D5E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.00096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D44C0A-76C1-4E8C-94D7-7C3679D3BFB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.01022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2F9555-D1B7-4F1F-B969-ACDB6914B237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.01035:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD1B8E4-595B-4DA5-A900-4F2D5412A23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.02075:*:*:*:*:*:*:*",
            "matchCriteriaId" : "402E9717-A5FC-4CD1-A0D2-DD4A5D2D73E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.03013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFA6472-55B7-4864-82ED-D93A32AC3530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.04018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA911245-AAF8-4931-918F-B920976F7E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.04039:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD9910A-4609-41B3-97E2-FF1366559C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.05015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7700A5-8BFA-445C-B28D-86BDC0293F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.06014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841DC63B-B6B4-4C78-8A40-58F6DE82F20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.00748:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5C7873-878D-48C4-9461-9B112701DAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.01095:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE035D-DA9A-4894-A838-DA9266E3859F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.02039:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55034CB7-FD67-4DB8-A5D6-809ED8922272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.03086:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348318D0-1487-4ACE-8F33-63C6F21C62F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.04027:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D07037-565D-4AAB-A447-3B71C6F37C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96145",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037796",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-anyconnect",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41476/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-anyconnect",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41476/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T18:59:00.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option."
      }, {
        "lang" : "es",
        "value" : "Firejail en versiones anteriores a 0.9.44.4 y 0.9.38.x LTS en versiones anteriores a 0.9.38.8 LTS no considera el caso .Xauthority durante su intento para impedir el acceso a los archivos de usuario con un euid de cero, lo que permite a usuarios locales llevar a cabo ataques de sybox-escape a través de vectores que implican un enlace simbólico y la opción --private."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "0.9.44.4",
            "matchCriteriaId" : "1638C095-A8D5-47B1-9A66-D405461B9E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "0.9.38",
            "versionEndExcluding" : "0.9.38.8",
            "matchCriteriaId" : "45BD839E-B418-44AA-9A8C-731A5A82D2A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/01/04/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95298",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-62",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/01/04/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T18:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-5180."
      }, {
        "lang" : "es",
        "value" : "Firejail en versiones anteriores a 0.9.44.6 y 0.9.38.x LTS en versiones anteriores a 0.9.38.10 LTS no aborda exhaustivamente los casos dotfile durante su intento de impedir el acceso a los archivos de usuario con un euid de cero, lo que permite a usuarios locales llevar a cabo ataques sybox-escape a través de vectores que implican un enlace simbólico y la opción --private. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2017-5180."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "0.9.38",
            "versionEndIncluding" : "0.9.38.10",
            "matchCriteriaId" : "FBA4F089-E878-4C63-B9E7-F8ED37724459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.40",
            "versionEndIncluding" : "0.9.44.6",
            "matchCriteriaId" : "B40A5CA1-1D35-4A2C-9F9F-4BC968AB0E42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/38d418505e9ee2d326557e5639e8da49c298858f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/903fd8a0789ca3cc3c21d84cd0282481515592ef",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/b8a4ff9775318ca5e679183884a6a63f3da8f863",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/38d418505e9ee2d326557e5639e8da49c298858f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/903fd8a0789ca3cc3c21d84cd0282481515592ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/b8a4ff9775318ca5e679183884a6a63f3da8f863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T19:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para yaxim y Bruno (0.8.6 - 0.8.8; Android)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-serialize_project:node-serialize:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.0.4",
            "matchCriteriaId" : "BAD0F8BD-C80A-420D-908F-8CD4B48208CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161356/Node.JS-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163222/Node.JS-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96225",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/311",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161356/Node.JS-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163222/Node.JS-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno (0.8.6 - 0.8.8; Android)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para yaxim y Bruno (0.8.6 - 0.8.8; Android)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaxim:bruno:0.8.6:*:*:*:*:android:*:*",
            "matchCriteriaId" : "DB39C75E-31B6-45D7-B78D-3A6D799A2E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaxim:bruno:0.8.7:*:*:*:*:android:*:*",
            "matchCriteriaId" : "99906BCE-7B96-4689-AEDC-0C00F39A29EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaxim:bruno:0.8.8:*:*:*:*:android:*:*",
            "matchCriteriaId" : "9709487E-C162-4BFE-BA33-9C7C817EB089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaxim:yaxim:0.8.6:*:*:*:*:android:*:*",
            "matchCriteriaId" : "F8997AD7-819E-4D87-B655-EDDC74CA9EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaxim:yaxim:0.8.7:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4057460F-28F9-43DA-BCB6-750CDC7DFE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaxim:yaxim:0.8.8:*:*:*:*:android:*:*",
            "matchCriteriaId" : "468DD54B-9661-4874-8AEB-99960D62EACB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ge0rg/yaxim/commit/65a38dc77545d9568732189e86089390f0ceaf9f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ge0rg/yaxim/commit/65a38dc77545d9568732189e86089390f0ceaf9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for ChatSecure (3.2.0 - 4.0.0; only iOS) and Zom (all versions up to 1.0.11; only iOS)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para ChatSecure (3.2.0 - 4.0.0; solo iOS) y Zom (todas las versiones hasta la 1.0.11; solo iOS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatsecure:chatsecure:3.2.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "8EA871A9-0979-4D25-8FF9-52F29168CDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatsecure:chatsecure:3.2.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E0B181D1-AEB1-4BD8-B722-9A819DABC66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatsecure:chatsecure:3.2.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "19D39CE7-0D9F-4878-B6F6-916B09E2B2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatsecure:chatsecure:3.2.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "CA0652B8-53BD-4246-A078-71A1AC4FCFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatsecure:chatsecure:4.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "89229A2D-F6D7-4EFF-AEDA-DA90F9F89FA5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zom:zom:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "1.0.11",
            "matchCriteriaId" : "436A20AC-C1BD-401F-ADE4-448F03E2F85A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ChatSecure/ChatSecure-iOS/commit/a340b4bb519227d89f85f2716a10a197a65d4856",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zom/Zom-iOS/commit/880051eaa8ba32d1b257c87a7d8798a93561bfd3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ChatSecure/ChatSecure-iOS/commit/a340b4bb519227d89f85f2716a10a197a65d4856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zom/Zom-iOS/commit/880051eaa8ba32d1b257c87a7d8798a93561bfd3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and Slixmpp all versions up to 1.2.3, as bundled in poezio (0.8 - 0.10) and other products."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para SleekXMPPP hasta la versión 1.3.1 y SliXMPPp todas las versiones hasta la 1.2.3, como empaquetados en poezio (0.8 - 0.10) y otros productos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sleekxmpp_project:sleekxmpp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "5B7A0758-5BBF-4E2E-8FFD-555B023DCD5A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slixmpp_project:slixmpp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "44475E86-A847-4531-BA49-0B73771D43AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poezio:poezio:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E30A4E-C906-406E-89CD-AB193CBDD0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poezio:poezio:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929839C5-3E52-4CBA-BD28-868B1A94CC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poezio:poezio:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4B1EA2-7B93-4E16-9CA7-C290B9DA2263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poezio:poezio:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CDDB71-E7BE-4E25-9E39-8B5E22F77E0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96166",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/poezio/slixmpp/commit/22664ee7b86c8e010f312b66d12590fb47160ad8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/poezio/slixmpp/commit/22664ee7b86c8e010f312b66d12590fb47160ad8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity (0.4.7 - 0.5.0)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para profanity (0.4.7 - 0.5.0)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F9D7-C8EC-44E4-A55B-06A4AD0F03F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.4.7:cyg1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D0DE23-B7EE-4644-A9E8-7A97385132A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.4.7:cyg2:*:*:*:*:*:*",
            "matchCriteriaId" : "7610BDB4-D5C8-4333-BD4B-6ADF4EC7B421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.4.7:cyg3:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7A6765-DBEC-4984-B702-B798D72A665C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.4.7:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "0945DFD2-C235-4E44-BD50-1C1F9D1C15D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6639BA25-1467-462A-82DD-9E62103CC42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profanity_project:profanity:0.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8A3688-A998-4619-B1BC-828DD5871A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96173",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/boothj5/profanity/commit/8e75437a7e43d4c55e861691f74892e666e29b0b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/boothj5/profanity/commit/8e75437a7e43d4c55e861691f74892e666e29b0b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Psi+ (0.16.563.580 - 0.16.571.627)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para Psi+ (0.16.563.580 - 0.16.571.627)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psi-plus:psi\\+:0.16.563.580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A22D6-3194-4B78-8263-02864BEE76C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psi-plus:psi\\+:0.16.571.627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F5EF13-003D-40DE-B89E-9EB7B8315C83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/psi-im/iris/pull/47/commits/02e976d4426a1319a7af7d26d7aba9d8c6077570",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/psi-im/iris/pull/47/commits/02e976d4426a1319a7af7d26d7aba9d8c6077570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para jappix 1.0.0 to 1.1.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9E65AE-5D32-465B-B629-F3639306BE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B578FA-28F7-484E-945C-45B271BDB1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C68990-0DDB-4D89-AB76-DBECFA7350A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1E2A71-147A-45C6-8886-FC4051AD9083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACD34-E4FA-4A31-9B62-B66C3A1ABB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D06FF3-DD54-4D7A-B731-14071458382F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29576A29-0835-4BFA-A0D9-7E48EB24E1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F116DCC5-6D42-4EFF-B710-FD83A2E53B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACB74B1-195E-44B6-9F71-CFA58E223EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2130786E-DBB4-4B89-AD13-5B53499A5539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3658FF-8F5F-440B-9824-6974A6D0A88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CB32B5-4234-4204-9D57-92A348354E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E638252-1EAC-41AD-B38A-CD2DEE90AA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9B3968-131D-4CBF-A76D-1CE2D91D8FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jappix_project:jappix:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C82A3CE-1FB3-48DF-A05F-43A79148C886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jappix/jappix/commit/ea6de7c65b80880bdf85df47c1a8a5d3d68491af",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jappix/jappix/commit/ea6de7c65b80880bdf85df47c1a8a5d3d68491af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para Jitsi 2.5.5061 - 2.9.5544."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jitsi:jitsi:2.5.5061:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82E6947-285D-4B91-9375-5EB7517AA48D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jitsi:jitsi:2.9.5544:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACB92B0-9A84-447D-80A0-4FD7108CB0EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jitsi/jitsi/commit/7d66da61b316c9480b63000f831b6de723b87315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jitsi/jitsi/commit/7d66da61b316c9480b63000f831b6de723b87315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para mcabber 1.0.0 - 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcabber:mcabber:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FE747D-AEA9-49B8-BBA3-360CEFC501F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcabber:mcabber:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9DF44E-1759-4A3B-A8A8-8CEFE0A170B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcabber:mcabber:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAB75A8-B55C-4CD7-BEF1-27A7625595AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcabber:mcabber:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D06E422-7558-4619-8A75-ECF516EBCE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcabber:mcabber:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CDEDA8-BB07-4606-9255-48023936D902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mcabber.com/hg/rev/2a9569fd7644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mcabber.com/hg/rev/2a9569fd7644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para Movim 0.8 - 0.10."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movim:movim:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6AF2A7-99C5-418C-A134-F19FE53C6F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movim:movim:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E9E794-3396-4297-AE9E-691E50BC8DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movim:movim:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEAD0C3-ABD3-420E-9C9E-1EAC3F1CCA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movim:movim:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CB8427-9799-431E-9BD0-2E7DE7B3CD90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/movim/moxl/commit/838b0a42efc3b67cc17d63e25ae1d0ea849cd89b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/movim/moxl/commit/838b0a42efc3b67cc17d63e25ae1d0ea849cd89b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Xabber (only if manually enabled: 1.0.30, 1.0.30 VIP, beta 1.0.3 - 1.0.74; Android)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para Xabber (sólo si está habilitado manualmente: 1.0.30, 1.0.30 VIP, beta 1.0.3 - 1.0.74; Android)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xabber:xabber:*:*:*:*:-:android:*:*",
            "versionEndIncluding" : "1.0.30",
            "matchCriteriaId" : "86BE64EB-B76D-4A2A-92A1-D90F161A3008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xabber:xabber:*:*:*:*:vip:android:*:*",
            "versionEndIncluding" : "1.0.30",
            "matchCriteriaId" : "48B0C95E-46D5-4E3C-8FFD-C102D81B495C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96186",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-09T20:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation of \"XEP-0280: Message Carbons\" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js (0.8.0 - 1.0.6, 2.0.0 - 2.0.4)."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de \"XEP-0280: Message Carbons\" en múltiples clientes XMPP permite a un atacante remoto personificar cualquier usuario, incluidos los contactos, en la pantalla de la aplicación vulnerable. Esto permite varios tipos de ataques de ingeniería social. Esta CVE es para Converse.js (0.8.0 - 1.0.6, 2.0.0 - 2.0.4)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72CEF80-A5C4-4908-847E-A42A133EB750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE82BC23-CAC5-460C-9BE1-F4A01826ACD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74A2AD5-7E0D-4A05-99D2-6CCD9F065D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB99343-F9CD-453D-B741-75D8E375A64E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0B149D-BB35-47F1-B2EE-A46FA85DFF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE663F25-9D54-4484-A5FB-F9F39BB0A4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAD2155-0AEF-4080-908C-F53CA367C7C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9D0125-3D83-4152-9AF6-0E612BAC78B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428EA3B5-91C3-4671-BAD7-8F8E838B80F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30784FCD-8079-4A9F-9EEF-28694D55ECE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29B31EC-93CD-4468-AD37-563EE88FEF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3D04A3-C34C-4F3E-A110-7B7AFAAAA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF40A4B8-CE97-476C-A911-304774E46A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD977F45-D0C0-4E76-A294-5F2A7CFF3A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA079B97-06AE-480E-9A26-08D958560374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363EEFEB-2C3F-475D-AA40-5C1A7C271775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D4BC6-2806-4FF1-8CE4-613722BEA340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC62AB6-3060-4B44-AAB9-CBEBB7505188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE58D9C-5F96-4B60-9356-B55AD4997CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0441FCA3-D517-4B41-B687-EF3454327398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886B3A14-6BDC-4CB7-8268-6DF1D872BCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF33D02B-6C96-4AF4-AD5B-FFBFE757BF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1451B0-EE4D-499B-8458-7538F7378EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D9477A-990E-441B-80DF-DE43A81244D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC93F612-E5C1-4B84-8031-38EA8EE4CBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC002A9-F935-46BD-ADFD-A4107C70B0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79F1ABC-116B-49F4-A5A5-7712F866EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conversejs:converse.js:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D618B06-D4B3-4B49-96E0-DB0D357B656E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jcbrand/converse.js/commit/42f249cabbbf5c026398e6d3b350f6f9536ea572",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/02/09/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jcbrand/converse.js/commit/42f249cabbbf5c026398e6d3b350f6f9536ea572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-10T07:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en el plugin WP Mail en versiones anteriores a 1.2 para WordPress. El parámetro replyto al componer un correo permite una XSS reflejada. Esto le podría permitir ejecutar JavaScript en el contexto del usuario que recibe el correo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_mail_project:wp_mail:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "8A8C3F86-38D8-496A-AB6E-C01C5A845EF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96211",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cjc.im/advisories/0006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cjc.im/advisories/0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-10T07:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insufficient filtration of user-supplied data in the \"poodll_audio_url\" HTTP GET parameter passed to the \"filter_poodll_moodle32_2016112802/poodll/mp3recorderskins/brazil/index.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en el plugin PoodLL Filter hasta la versión 3.0.20 para Moodle. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario en el parámetro \"poodll_audio_url\" de HTTP GET pasado a la URL \"filter_poodll_moodle32_2016112802/poodll/mp3recorderskins/brazil/index.php\". Un atacante podría ejecutar código HTML y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poodll:moodle-filter_poodll:*:*:*:*:*:moodle:*:*",
            "versionEndIncluding" : "3.0.20",
            "matchCriteriaId" : "288C7D90-2080-470B-A253-5B5B04A99370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96212",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/justinhunt/moodle-filter_poodll/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/justinhunt/moodle-filter_poodll/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-10T07:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow."
      }, {
        "lang" : "es",
        "value" : "vim en versiones anteriores a patch 8.0.0322 no valida adecuadamente los valores para la longitud del árbol cuando maneja un archivo spell, lo que puede resultar en un desbordamiento de entero en un sitio de asignación de memoria y un desbordamiento de búfer resultante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0055",
            "matchCriteriaId" : "6C46FDA7-FFAC-47FC-844E-327A0F14E824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/t-3RSdEnrHY",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4016-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/t-3RSdEnrHY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4016-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-10T07:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE)."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en el paquete serialize-to-js 0.5.0 para Node.js. Los datos no confiables pasados en la función deserialize() pueden ser explotados para lograr la ejecución de código arbitrario pasando un JavaScript Object con una Immediately Invoked Function Expression (IIFE)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serialize-to-js_project:serialize-to-js:0.5.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "98DFC5D0-CBD4-42D6-880D-09A7F75DF8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96223",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/commenthol/serialize-to-js/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/commenthol/serialize-to-js/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3302",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-02-12T04:59:00.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3."
      }, {
        "lang" : "es",
        "value" : "Caída en libmysqlclient.so en Oracle MySQL en versiones anteriores 5.6.21 y 5.7.x en versiones anteriores 5.7.5 y MariaDB hasta la versión 5.5.54, 10.0.x hasta la versión 10.0.29, 10.1.x hasta la versión 10.1.21 y 10.2.x hasta la versión 10.2.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.6.21",
            "matchCriteriaId" : "B0C4A1F9-3C06-443E-A34D-743396F8E3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndExcluding" : "5.7.5",
            "matchCriteriaId" : "DF260A4F-5B6A-415B-8857-1EF4B02267EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "402A7D46-9168-44F4-9D73-053A68BE6C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.0.29",
            "matchCriteriaId" : "6C08F580-8B61-4AE7-BE14-61B3049DF8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndIncluding" : "10.1.21",
            "matchCriteriaId" : "A5033B0F-346B-45CE-943D-B2FA398FB1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.3",
            "matchCriteriaId" : "FD4D6819-4993-40C7-BC41-B8B830385EC2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3809",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/11/11",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96162",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/11/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-12T04:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the \"phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Phalcon Eye hasta la versión 0.4.1. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario en múltiples parámetros HTTP GET pasados a la URL \"phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php\". Un atacante podría ejecutar código HTML y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phalconeye_project:phalconeye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.1",
            "matchCriteriaId" : "09D5FE06-1135-4DE2-BC49-9FA16E53976C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96201",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/PhalconEye/phalconeye/issues/133",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/PhalconEye/phalconeye/issues/133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-12T04:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient filtration of user-supplied data in the \"path\" HTTP GET parameter passed to the \"ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ionize hasta la versión 1.0.8. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario en el parámetro \"path\" de HTTP GET pasado a la URL \"ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php\". Un atacante podría ejecutar código HTML y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ionizecms:ionize:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "4FB26C3C-9DA1-4F40-A484-5E34DFB9F278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96196",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ionize/ionize/issues/393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ionize/ionize/issues/393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-12T04:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2. The vulnerability exists due to insufficient filtration of user-supplied data in the \"force_ua\" HTTP GET parameter passed to the \"/contexts_wurfl/Library/wurfl-dbapi-1.4.4.0/check_wurfl.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en contexts_wurfl (para TYPO3) en versiones anteriores a 0.4.2. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario en el parámetro \"force_ua\" de HTTP GET pasado a la URL \"/contexts_wurfl/Library/wurfl-dbapi-1.4.4.0/check_wurfl.php\". Un atacante podría ejecutar código HTML y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.2.0:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "CAF682B6-156B-4FC4-BF6C-B81CB0A9C7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.2.1:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "7CE2302A-66F1-4E6B-B50B-1918CAEB43AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.2.2:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "D951F679-A7B9-4727-8FB8-28FD985F3B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.3.0:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "372BA7A5-4F29-41E4-8375-383EB4ED5B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.3.1:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "495B8185-B8E2-4317-9D78-E37C47B53D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.4.0:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "B0589212-440A-456B-BE76-41795C9A57BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netresearch:contexts_wurfl:0.4.1:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "958ED52F-977B-4AF8-A8D8-D26836AF9C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96158",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forge.typo3.org/issues/79326",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forge.typo3.org/issues/79326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-12T04:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the \"paymillToken\" HTTP POST parameter passed to the \"caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en caddy (para TYPO3) en versiones anteriores a 7.2.10. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario en el parámetro \"paymillToken\" de HTTP POST pasado a la URL \"caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php\". Un atacante podría ejecutar código HTML y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:2.1.4:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "D547F8EA-BCC8-4EFA-A0C5-409FA127A231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:2.1.5:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "87FBC605-B8F5-46A4-9AC6-D795DD4B0CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:2.1.6:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "2E9FB30C-6623-46B6-BA40-062F8BE06192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:3.0.0:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "E78620F4-4325-4208-8295-36DB4C8D534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:4.0.0:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "E02D7490-F858-46D4-9815-F7FF5B6E8F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:4.0.1:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "4F0C5902-8890-46F6-BCCA-1CA8E0823828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:4.0.2:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "7D0376BB-7DC7-413B-93D6-8B6D4E432DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:4.0.3:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "D0236B11-41C8-4708-BE6C-0CB2A6E404E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:4.0.12:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "AD545299-CA83-4803-AB46-8A16321ACEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.0.1:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "1BFA5F0F-6BA9-4609-8A33-31DC6C1028B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.0.2:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "270516A7-037D-4425-BD7D-758A939F7FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.0.9:alpha:*:*:*:typo3:*:*",
            "matchCriteriaId" : "AB243F01-9248-430B-B1B7-3EB3629E6F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.0.12:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "9CF7167A-2B41-4FDE-8D69-91FC832B36C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.0.14:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "27E9DD7F-3497-4CA4-AEC4-48566EA29408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.1.0:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "489D14AF-30E4-4013-996F-26C1B4F8C194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.2.1:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "05750579-0B0F-4B14-839C-BF6D46C8B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.3.0:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "79E0A0BD-4D21-4AD3-8DE9-D9FCA0AF1CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.3.1:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "5899F22F-FBC4-439A-A6E9-9942A503FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:6.3.3:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "661AB403-6776-49FD-A1DF-0A6B6BC9F21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:7.0.0:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "896F19FC-B998-461E-BEC0-95AA0743BFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:7.1.0:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "F577C538-346A-4B04-A2C0-A79A8AD9492D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddy_project:caddy:7.2.7:beta:*:*:*:typo3:*:*",
            "matchCriteriaId" : "682ED5D4-1FA2-47B7-A105-76411A7E4A3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96198",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forge.typo3.org/issues/79325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forge.typo3.org/issues/79325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-12T04:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the \"emoncms-master/Modules/vis/visualisations/compare.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Emoncms hasta la versión 9.8.0. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario en múltiples parametros de HTTP GET pasados a la URL \"emoncms-master/Modules/vis/visualisations/compare.php\". Un atacante podría ejecutar código HTML y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openenergymonitor:emoncms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.8.0",
            "matchCriteriaId" : "1099E744-B2CB-4346-B145-512C7ED1229D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96202",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/emoncms/emoncms/issues/636",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/emoncms/emoncms/issues/636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3896",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-02-13T16:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de parámetro no válido en la capacidad de visualización de inicio de sesión remoto en Intel Security McAfee Agent 5.0.x versiones anteriores a 5.0.4.449 permite a atacantes remotos pasar parámetros de entrada inesperados a través de una URL que no fue completamente validada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcafee_agent:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB38941-504D-4F59-BA02-159FE34E3290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcafee_agent:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7543F520-79D3-4AF0-A8EE-C57A38C35B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcafee_agent:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1F4098-35D5-43B6-BF6B-F38091FA7DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcafee_agent:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB19F73E-DE92-4249-82C6-830D55FC25AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcafee_agent:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE7CA65-6B1F-44BF-AC15-F6595313AF91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95903",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037629",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10183",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3902",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-02-13T16:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en la interfaz Web de usuario (UI) en Intel Security ePO 5.1.3, 5.1.2, 5.1.1 y 5.1.0 permite a usuarios no autenticados inyectar secuencias de comandos Java maliciosos eludiendo la entrada de validación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE33AFB8-9962-4D75-B613-D5032A0949A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBA52A8-233F-4015-B44B-1BF7B5593CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DBB72F-A984-4641-9230-97B815FCD31C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F542C3-C2BB-420A-BCDB-AB5A688689B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96465",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037628",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10184",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5139",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en el controlador XL1000C500 XLWebExe-2-01-00 de XLWebExe-2 y anteriores y XLWebExe-1-02-08 y anteriores de XLWebExe-1-02-08 de Honeywell XL Web II. Cualquier usuario puede revelar una contraseña accediendo a una URL específica, debido al almacenamiento en texto plano de una contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-1-02-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F06D365-A41E-45EE-8F93-035E1B8C2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-2-01-00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7544CA-319B-40A2-AD75-FF0159DF0DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:xl_web_ii_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6E447-DF91-45ED-86FD-921C6A4FCD21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5140",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en el controlador XL1000C500 XLWebExe-2-01-00 de XLWebExe-2 y anteriores y XLWebExe-1-02-08 y anteriores de XLWebExe-1-02-08 de Honeywell XL Web. La contraseña se almacena en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-1-02-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F06D365-A41E-45EE-8F93-035E1B8C2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-2-01-00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7544CA-319B-40A2-AD75-FF0159DF0DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:xl_web_ii_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6E447-DF91-45ED-86FD-921C6A4FCD21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5141",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en el controlador XL1000C500 XLWebExe-2-01-00 de XLWebExe-2 y anteriores y XLWebExe-1-02-08 y anteriores de XLWebExe-1-02-08 de Honeywell XL Web. Un atacante puede establecer una nueva sesión de usuario, sin invalidar ningún identificador de sesión existente, lo que le da la oportunidad de robar sesiones autenticadas (REPARACIÓN DE SESIÓN)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-1-02-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F06D365-A41E-45EE-8F93-035E1B8C2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-2-01-00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7544CA-319B-40A2-AD75-FF0159DF0DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:xl_web_ii_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6E447-DF91-45ED-86FD-921C6A4FCD21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5142",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en el controlador XL1000C500 XLWebExe-2-01-00 de XLWebExe-2 y anteriores y XLWebExe-1-02-08 y anteriores de XLWebExe-1-02-08 de Honeywell XL Web. Un usuario con privilegios bajos puede abrir y cambiar los parámetros accediendo a una URL específica debido a una gestión de privilegios incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-1-02-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F06D365-A41E-45EE-8F93-035E1B8C2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-2-01-00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7544CA-319B-40A2-AD75-FF0159DF0DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:xl_web_ii_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6E447-DF91-45ED-86FD-921C6A4FCD21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5143",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en el controlador XL1000C500 XLWebExe-2-01-00 de XLWebExe-2 y anteriores y XLWebExe-1-02-08 y anteriores de XLWebExe-1-02-08 de Honeywell XL Web. Un usuario sin autenticación puede realizar un ataque de desplazamiento de directorios accediendo a una URL específica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-1-02-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F06D365-A41E-45EE-8F93-035E1B8C2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-2-01-00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7544CA-319B-40A2-AD75-FF0159DF0DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:xl_web_ii_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6E447-DF91-45ED-86FD-921C6A4FCD21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5144",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Carlo Gavazzi VMU-C EM anterior a la versión de firmware A11_U05 y VMU-C PV y anterior a la versión firmware A17. La falla de control de acceso permite el acceso a la mayoría de las funciones de la aplicación sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:carlosgavazzi:vmu-c_em_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87350035-E65E-4A46-8572-8039A6266D1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:carlosgavazzi:vmu-c_em:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57DACE2-2D99-4952-B15C-3E106886ABD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:carlosgavazzi:vmu-c_pv_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB7FE5-E55D-4096-9DA3-241299899FEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:carlosgavazzi:vmu-c_pv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E6B643-2FBD-4C8B-A498-8D0BD071505B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95411",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5145",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Carlo Gavazzi VMU-C EM anterior a la versión de firmware A11_U05 y VMU-C PV anterior al firmware Versión A17. La explotación exitosa de esta vulnerabilidad de CSRF puede permitir la ejecución de acciones no autorizadas en el dispositivo, tales como cambios de parámetro de configuración y guardado de configuración modificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:carlosgavazzi:vmu-c_em_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87350035-E65E-4A46-8572-8039A6266D1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:carlosgavazzi:vmu-c_em:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57DACE2-2D99-4952-B15C-3E106886ABD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:carlosgavazzi:vmu-c_pv_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB7FE5-E55D-4096-9DA3-241299899FEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:carlosgavazzi:vmu-c_pv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E6B643-2FBD-4C8B-A498-8D0BD071505B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95411",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5146",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Carlo Gavazzi VMU-C EM anterior a la versión de firmware A11_U05 y VMU-C PV anterior al firmware Versión A17. La información sensible se almacena en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:carlosgavazzi:vmu-c_em_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87350035-E65E-4A46-8572-8039A6266D1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:carlosgavazzi:vmu-c_em:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57DACE2-2D99-4952-B15C-3E106886ABD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:carlosgavazzi:vmu-c_pv_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB7FE5-E55D-4096-9DA3-241299899FEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:carlosgavazzi:vmu-c_pv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E6B643-2FBD-4C8B-A498-8D0BD071505B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95411",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5151",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en VideoInsight Web Client versión 6.3.5.11 y versiones anteriores. Se ha identificado una vulnerabilidad de inyección SQL, que puede permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panasonic:video_insight_web_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.5.11",
            "matchCriteriaId" : "FCDA545B-B239-4CA0-A354-34E8A82ACB1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95416",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5152",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unrestricted (AUTHENTICATION BYPASS)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Advantech WebAccess Versión 8.1. Accediendo a un localizador de recursos uniforme (URL) específico en el servidor web, un usuario malicioso es capaz de acceder a páginas sin restricciones (ELUSIÓN DE AUTENTICACIÓN)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBB0164-FC86-47E3-BCA9-968487C9663D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95410",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-04",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/95410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5153",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords to become exposed for the affected services, potentially leading to unauthorized shutdown of the affected PI services as well as potential reuse of domain credentials."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en OSIsoft PI Coresight 2016 R2 y versiones anteriores y PI Web API 2016 R2 cuando se implementa utilizando el kit de instalación integrado PI AF Services 2016 R2. Se ha identificado una vulnerabilidad de exposición de información a través de los archivos de inicio de sesión del servidor, lo que puede permitir que las contraseñas de la cuenta de servicio queden expuestas para los servicios afectados, potencialmente conduciendo al cierre no autorizado de los servicios PI afectados, así como a la posible reutilización de credenciales de dominio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_coresight:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-r2",
            "matchCriteriaId" : "11887654-16DB-483B-9F0F-F5332B0BD6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_web_api:2016-r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7530DB5E-ABD1-4D03-9871-4FC7EEC3A67B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95355",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-010-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-010-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5154",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Advantech WebAccess Versión 8.1. Para poder explotar la vulnerabilidad de inyección de SQL, un atacante debe proporcionar entrada malformada al software WebAccess. Un ataque exitoso podría resultar en acceso administrativo a la aplicación y sus archivos de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBB0164-FC86-47E3-BCA9-968487C9663D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95410",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-04",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/95410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5155",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default passwords, which can allow a malicious entity to compromise Historian databases. In some installation scenarios, resources beyond those created by Wonderware Historian may be compromised as well."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Schneider Electric Wonderware Historian 2014 R2 SP1 P01 y versiones anteriores. Wonderware Historian crea inicios de sesión con contraseñas predeterminadas, lo que puede permitir que una entidad maliciosa comprometer las bases de datos de Historian. En algunos escenarios de instalación, los recursos además de los creados por Wonderware Historian también pueden verse comprometidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_historian:2014_r2_sp1_p01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E563B308-C7FF-428B-A6E8-4528FD27E8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000115/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95766",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037808",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-024-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000115/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-024-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5157",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Schneider Electric homeLYnk Controller, LSS100100, todas las versiones anteriores a V1.5.0. El controlador homeLYnk es susceptible a un ataque de secuencias de comandos en sitios cruzados. Las entradas del usuario pueden ser manipuladas para provocar la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider_electric:homelynk_controller_lss100100_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D235123-C722-4B40-9A0A-6BB40A2FF180"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:homelynk_controller_lss100100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F69759-DDB2-4831-8E88-0D40BD9E7AE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5159",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en dispositivos Phoenix Contact mGuard que se actualizaron a la Versión 8.4.0. Cuando se está actualizando un dispositivo mGuard a la Versión 8.4.0 mediante la función de actualización-carga, la actualización se realizará correctamente, pero restablecerá la contraseña del usuario administrador a su valor predeterminado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-99"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:mguard_firmware:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1A330E-D271-42A9-A315-6A6ADA394726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95648",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-017-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5161",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Sielco Sistemi Software Winlog Lite SCADA Software, versiones anteriores a la Versión 3.02.01 y Winlog Pro SCADA Software, versiones anteriores a la Versión 3.02.01. Se ha identificado una vulnerabilidad no controlada del elemento de ruta de acceso de búsqueda (DLL Hijacking). La explotación de esta vulnerabilidad podría dar a un atacante acceso al sistema con el mismo nivel de privilegio que la aplicación que utiliza la DLL maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sielcosistemi:winlog_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.01.10",
            "matchCriteriaId" : "03372132-C2BD-471F-A2D0-3CE01A3BB432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.01.10",
            "matchCriteriaId" : "6BE1A9F0-0F59-4133-8876-16CF6936ACEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96119",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5162",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en BINOM3 Universal Multifunctional Electric Power Quality Meter. La falta de autenticación para el servicio remoto da acceso a la configuración de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D22CB-94D8-4066-8D92-6B3EE21A1C19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E83CFB-E822-4C19-A8FE-9A4F88A9E545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5163",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Belden Hirschmann GECKO Lite Managed switch, versión 2.0.00 y versiones anteriores. Después de que un administrador descargue un archivo de configuración, una copia del archivo de configuración, que incluye hashes de contraseñas de usuario, se guarda en una ubicación accesible sin autenticación por salto de ruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden_hirschmann:gecko_lite_managed_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.00",
            "matchCriteriaId" : "F6C3FE20-F449-4AE3-A70D-125BE0934473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden_hirschmann:gecko_lite_managed_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F981F2D-B30E-49A8-9FFB-5A9A01C6D46C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95815",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5164",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session (CROSS-SITE SCRIPTING)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en BINOM3 Universal Multifunctional Electric Power Quality Meter. La entrada enviada desde un cliente malicioso no es verificada adecuadamente por el servidor. Un atacante puede ejecutar código de script arbitrario en la sesión del navegador de otro usuario (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D22CB-94D8-4066-8D92-6B3EE21A1C19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E83CFB-E822-4C19-A8FE-9A4F88A9E545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5165",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en BINOM3 Universal Multifunctional Electric Power Quality Meter. No hay Token CSRF generado por página y/o por función (sensible). La explotación exitosa de esta vulnerabilidad puede permitir la ejecución silenciosa de acciones no autorizadas en el dispositivo tales como cambios de parámetros de configuración y guardar la configuración modificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D22CB-94D8-4066-8D92-6B3EE21A1C19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E83CFB-E822-4C19-A8FE-9A4F88A9E545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5166",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:02.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en BINOM3 Universal Multifunctional Electric Power Quality Meter. Se puede utilizar una falla de EXPOSICIÓN DE INFORMACIÓN para obtener acceso privilegiado al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D22CB-94D8-4066-8D92-6B3EE21A1C19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E83CFB-E822-4C19-A8FE-9A4F88A9E545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5167",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:03.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en BINOM3 Universal Multifunctional Electric Power Quality Meter. Los usuarios no tienen ninguna opción para cambiar sus propias contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D22CB-94D8-4066-8D92-6B3EE21A1C19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E83CFB-E822-4C19-A8FE-9A4F88A9E545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/93028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5168",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:03.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been identified. The flaws exist within the ActiveMQ Broker service that is installed as part of the product. By issuing specific HTTP requests, if a user visits a malicious page, an attacker can gain access to arbitrary files on the server. Smart Security Manager Versions 1.4 and prior to 1.31 are affected by these vulnerabilities. These vulnerabilities can allow for remote code execution."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Hanwha Techwin Smart Security Manager Versiones 1.5 y anteriores. Múltiples vulnerabilidades de salto de ruta han sido identificadas. Los defectos existen dentro del servicio de ActiveMQ Broker que se instala como parte del producto. Mediante la emisión de peticiones HTTP específicas, si un usuario visita una página maliciosa, un atacante puede obtener acceso a archivos arbitrarios en el servidor. Smart Security Manager Versiones 1.4 y anteriores a 1.31 están afectadas por estas vulnerabilidades. Estas vulnerabilidades pueden permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hanwha-security:smart_security_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "38BFDE92-9695-4ABC-BF16-7BCAFC6573A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96147",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-040-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-040-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5169",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T21:59:03.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Post requests, an attacker can gain system level access to a remote shell session. Smart Security Manager Versions 1.5 and prior are affected by these vulnerabilities. These vulnerabilities can allow for remote code execution."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Hanwha Techwin Smart Security Manager Versiones 1.5 y anteriores. Múltiples vulnerabilidades de CSRF se han identificado. Los defectos existen dentro de los servidores Redis y Apache Felix Gogo que están instalados como parte de este producto. Mediante la emisión de solicitudes específicas de HTTP Post, un atacante puede obtener acceso a nivel de sistema a una sesión de shell remota. Las versiones de Smart Security Manager 1.5 y anteriores están afectadas por estas vulnerabilidades. Estas vulnerabilidades pueden permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hanwha-security:smart_security_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "38BFDE92-9695-4ABC-BF16-7BCAFC6573A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96147",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-040-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-040-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1121",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-02-13T22:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743"
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 7.0, 8.0 y 9.0 es vulnerable a las secuencias de comandos en sitios cruzados. Esta vulnerabilidad permite a los usuarios integrar código JavaScript arbitrario en la interfaz de usuario Web, alterando así la funcionalidad prevista conduciendo potencialmente a la divulgación de credenciales dentro de una sesión de confianza. IBM Reference #: 1997743"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC9BD49-31BF-4D79-BAFE-5107D611FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997743",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96164",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037806",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5149",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-02-13T22:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en St. Jude Medical Merlin@home, versiones anteriores a la versión 8.2.2 (modelos RF: EX1150, modelos inductivos: EX1100 y modelos inductivos: EX1100 con capacidad MerlinOnDemand). No se verifican las identidades de los puntos finales para el canal de comunicación entre el transmisor y el sitio web de St. Jude Medical, Merlin.net. Esto puede permitir que un atacante man-in-the-middle acceda o influya en las comunicaciones entre los puntos finales identificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:merlin\\@home_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "DB01C075-4332-4FDA-94DE-64EFA3C7829D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:merlin\\@home_ex1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D96349E-317D-4A53-81A3-1FFFDA942A36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:merlin\\@home_ex1150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E96A4A-6163-4EE7-A756-B751D0B0C7B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95331",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-009-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-009-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-14T06:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c."
      }, {
        "lang" : "es",
        "value" : "El subsistema de tiempo en el kernel de Linux hasta la versión 4.9.9, cuando CONFIG_TIMER_STATS está habilitado, permite a usuarios locales descubrir valores PID reales (diferenciados de valores PID dentro de un namespace PID) leyendo el archivo /proc/timer_list, relacionado con la función print_timer en kernel/time/timer_list.c y la función __timer_stats_timer_set_start_info en kernel/time/timer.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.9",
            "matchCriteriaId" : "CF87A92B-86F0-4844-BC1B-2BF0656B0372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=dfb4357da6ddbdf57d583ba64361c9d792b0e0b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=193921",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=dfb4357da6ddbdf57d583ba64361c9d792b0e0b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=193921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-14T06:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4 traffic with invalid IP options."
      }, {
        "lang" : "es",
        "value" : "La función ipv4_pktinfo_prepare en net/ipv4/ip_sockglue.c en el kernel de Linux hasta la versión 4.9.9 permite a atacantes provocar una denegación de servicio (caída de sistema) a través de (1) una aplicación que hace llamadas de sistema manipuladas o posiblemente (2) tráfico IPv4 con opciones IP inválidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.9",
            "matchCriteriaId" : "CF87A92B-86F0-4844-BC1B-2BF0656B0372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/12/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421638",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/34b2cef20f19c87999fff3da4071e66937db9644",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/724136/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/12/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/34b2cef20f19c87999fff3da4071e66937db9644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/724136/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-14T06:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code."
      }, {
        "lang" : "es",
        "value" : "La pila TCP en el kernel de Linux versiones 3.x, no implementa apropiadamente un mecanismo de protección de cookies SYN para el caso de una conexión de red rápida, lo que permite a los atacantes remotos causar una denegación de servicio (consumo de CPU) mediante el envío de muchos paquetes TCP SYN, como es demostrado por un ataque contra el paquete kernel versión 3.10.0 en CentOS Linux versión 7. NOTA: terceros no han podido discernir ninguna relación entre la búsqueda de GitHub Engineering y el código de ataque Trigemini.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.19.8",
            "matchCriteriaId" : "480F226E-935E-4AA0-AEDC-7A164F28B1A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q1/573",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96231",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-5972",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422081",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017020112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://githubengineering.com/syn-flood-mitigation-with-synsanity/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141083/CentOS7-Kernel-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-5972",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41350/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q1/573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-5972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017020112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://githubengineering.com/syn-flood-mitigation-with-synsanity/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141083/CentOS7-Kernel-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-5972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41350/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2968",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Campaign, versiones 16.4 Build 8724 y anteriores, tienen una vulnerabilidad de inyección de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign:*:8724:*:*:*:*:*:*",
            "versionEndIncluding" : "16.4",
            "matchCriteriaId" : "444F9BC6-ABFB-4C32-852E-D96303B6BBF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96197",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-03.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-06.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2969",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Campaign, versiones 16.4 Build 8724 y anteriores, tienen una vulnerabilidad de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign:*:8724:*:*:*:*:*:*",
            "versionEndIncluding" : "16.4",
            "matchCriteriaId" : "444F9BC6-ABFB-4C32-852E-D96303B6BBF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96200",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-03.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2973",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions, versiones 4.5.3 y anteriores, tienen una vulnerabilidad explotable de desbordamiento de memoria dinámica. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96192",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2974",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2975",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2976",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2977",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2978",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2979",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2980",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2981",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.3 y versiones anteriores tienen una vulnerabilidad de sobre lectura de búfer explotable. Explotación exitosa podría conducir a divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "23BF0539-1B30-4EFD-9A86-41FB6E35BA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2982",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de uso después de liberación en una rutina relacionada con el apagado del reproductor. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2984",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de desbordamiento de memoria dinámica en la rutina del decodificador h264. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96193",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2985",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de uso después de liberación en la clase ActionScript 3 BitmapData. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41422/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41422/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2986",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de desbordamiento de memoria dinámica en el códec de Flash Video (FLV). La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96193",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41423/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41423/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2987",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de desbordamiento de entero relacionada con Flash Broker COM. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96194",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2988",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de corrupción de memoria cuando se realiza la recolección de elementos no utilizados. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41421/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41421/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2990",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de corrupción de memoria en la rutina de descompresión h264. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2991",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de corrupción de memoria en el códec h264 (relacionado con la descompresión). La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2992",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de desbordamiento de memoria dinámica cuando se analiza una cabecera MP4. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96193",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41420/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41420/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2993",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de uso después de liberación relacionado con controladores de eventos. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2994",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de uso después de liberación en el envío de eventos de Primetime SDK. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2995",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de confusión de tipo relacionada con la clase MessageChannel. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96191",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2996",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-02-15T06:59:00.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player, versiones 24.0.0.194 y anteriores, tienen una vulnerabilidad explotable de corrupción de memoria en Primetime SDK. La explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "72027AB8-CD81-4DC3-9898-F4CE2BAE309A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "DB881360-123D-413E-88F3-C402DD92D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "A2E601B7-FB5B-4B6B-8AC3-1B7503D3DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.194",
            "matchCriteriaId" : "EAA0C4E6-7324-424C-A7C8-DEE39551A847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-15T06:59:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the \"form\" HTTP GET parameter passed to the \"PhreeBooksERP-master/extensions/ShippingMethods/ups/label_mgr/js_include.php\" and \"PhreeBooksERP-master/extensions/ShippingMethods/yrc/label_mgr/js_include.php\" URLs. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. NOTE: these js_include.php files do not exist in the SourceForge \"stable release\" (aka R37RC1)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubirto un problema en PhreeBooksERP en versiones anteriores a 2017-02-13. La vulnerabilidad existe debido a la insuficiente filtración de los datos suministrados por el usuario en el \"formulario\" parámetro HTTP GET pasado a \"PhreeBooksERP-master/extensions/ShippingMethods/ups/label_mgr/js_include.php\" y \"PhreeBooksERP-master/extensions/ShippingMethods/Yrc/label_mgr/js_include.php\". Un atacante podría ejecutar código HTML y código script arbitrario en un navegador en el contexto del sitio web vulnerable. NOTA: estos archivos js_include.php no existen en la \"versión estable\" de SourceForge (también conocida como R37RC1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phreesoft:phreebookserp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-01-23",
            "matchCriteriaId" : "9D4BCB80-A6AA-476E-BF89-CC911FDE0E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96219",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/phreebooks/PhreeBooksERP/commit/f2a32dede7cc7f9ff59fe983c5e4abe2966d837c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/phreebooks/PhreeBooksERP/issues/230",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/phreebooks/PhreeBooksERP/commit/f2a32dede7cc7f9ff59fe983c5e4abe2966d837c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/phreebooks/PhreeBooksERP/issues/230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-15T06:59:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Artifex MuPDF antes de 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. La función pdf_run_xobject en pdf-op-run.c encuentra una derivación de puntero NULL durante una operación de pintura Fitz fz_paint_pixmap_with_mask. Las versiones 1.11 y posteriores no se ven afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11",
            "matchCriteriaId" : "79F8012F-8057-46D9-8638-40EA6CE979F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3797",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96213",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697500",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42138/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42138/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-15T19:59:01.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función fz_subsample_pixmap en fitz/pixmap.c en MuPDF 1.10a permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10",
            "matchCriteriaId" : "7718D9BB-FEB8-4C5D-847E-9085BDA1A449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/06/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96139",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697515",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/06/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-15T19:59:01.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document."
      }, {
        "lang" : "es",
        "value" : "Openpyxl 2.4.1 resuelve entidades externas por defecto, lo que permite a atacantes remotos llevar a cabo ataques de XXE a través de un documento .xlsx manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:openpyxl:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF54C4D9-075F-47E8-85F0-8547C99AE4C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/openpyxl/openpyxl/issues/749",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/openpyxl/openpyxl/issues/749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-15T19:59:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and process crash) via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972."
      }, {
        "lang" : "es",
        "value" : "El demonio de SAP Message Server HTTP en SAP KERNEL 7.21-7.49 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída de proceso) a través de múltiples solicitudes msgserver/group?group= con un tamaño manipulado del parámetro de grupo, vulnerabilidad también conocida como SAP Security Note 2358972."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DB2B37-EC52-4FE6-9861-A98A9E365B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D1ECE8-0465-4B82-A0B7-BC55438FFC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C08BB4-AF7D-4609-A892-3FE34AF27F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://erpscan.io/advisories/erpscan-16-038-sap-message-server-http-remote-dos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-16-038-sap-message-server-http-remote-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3801",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-15T20:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attacker to execute arbitrary workflow items with just an end-user profile, a Privilege Escalation Vulnerability. The vulnerability is due to improper role-based access control (RBAC) after the Developer Menu is enabled in Cisco UCS Director. An attacker could exploit this vulnerability by enabling Developer Mode for his/her user profile with an end-user profile and then adding new catalogs with arbitrary workflow items to his/her profile. An exploit could allow an attacker to perform any actions defined by these workflow items, including actions affecting other tenants. Cisco Bug IDs: CSCvb64765."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en GUI basado en web de Cisco UCS Director 6.0.0.0 y 6.0.0.1 podría permitir a un atacante local no autenticado, ejecutar elementos arbitrarios de flujo de trabajo con tan solo un perfil de usuario final, una Vulnerabilidad de Escalada de Privilegios. La vulnerabilidad se debe a un control de acceso basado en roles (RBAC) inadecuado después de que el Developer Menu sea habilitado en Cisco UCS Director. Un atacante podría explotar esta vulnerabilidad habilitando Developer Mode para su perfil de usuario con un perfil de usuario final y añadiendo entonces nuevos catálogos con elementos arbitrarios de flujo de trabajo a su perfil. Un exploit podría permitir a un atacante llevar a cabo cualquier tipo de acciones definidas por estos elementos de flujo de trabajo, incluyendo acciones que afectaran a otros usuarios. Cisco Bug IDs: CSCvb64765."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_director:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCB4D63-DC55-4A29-9A4B-E08A7EBD87CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_director:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE127C2D-0786-4853-9D2C-0ED36B2AFCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96235",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037830",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0308",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where untrusted input is used for buffer size calculation leading to denial of service or escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de capa de modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde una entrada no confiable se utiliza para el cálculo del tamaño del búfer, dando lugar a denegación de servicio o escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0309",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el gestor de capas del modo kernel en el que múltiples desbordamientos de entero pueden provocar una asignación de memoria incorrecta que conduce a una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0310",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel, donde controles de acceso inadecuados permiten que a usuario no privilegiado provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0311",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver R378 contiene una vulnerabilidad en el controlador de la capa del modo kernel, donde un control de acceso incorrecto puede dar lugar a denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0312",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privileges"
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgkDdiEscapeID 0x100008b, donde la entrada proporcionada por el usuario se utiliza como límite para un bucle, puede dar lugar a una denegación de servicio o a una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41364/",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0313",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en la implementación de la capa de modo kernel (nvlddmkm.sys) del SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) donde una entrada no confiable se utiliza para hacer referencia a memoria fuera del límite previsto del búfer conduciendo a denegación de servicio o escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41365/",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41365/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0314",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en la implementación de la capa de modo kernel (nvlddmkm.sys) del SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) donde una entrada no confiable se utiliza para hacer referencia a memoria fuera del límite previsto del búfer conduciendo a denegación de servicio o escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0315",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an attempt to access an invalid object pointer may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde un intento de acceso a un puntero de objeto no válido puede dar lugar a una denegación de servicio o a una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0317",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU e instalador de GeForce Experience contienen una vulnerabilidad en la que falla en establecer permisos adecuados en la ruta de extracción de paquetes permitiendo así a un usuario no privilegiado manipular los archivos extraídos, conduciendo potencialmente a escalada de privilegios a través de la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0318",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Linux GPU Display Driver contienen una vulnerabilidad en el controlador de capa de modo kernel, donde la validación incorrecta de un parámetro de entrada puede provocar una denegación de servicio en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0319",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel, donde un manejo incorrecto de los valores puede provocar una denegación de servicio en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0320",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel, donde un manejo incorrecto de los valores puede provocar una denegación de servicio en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0321",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el controlador de capa de modo kernel donde una referencia de puntero NULL provocada por una entrada de usuario no válida puede dar lugar a una denegación de servicio o potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0322",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) donde un valor pasado por un usuario al controlador no se valida correctamente y se utiliza como el índice de un array, conduciendo a denegación de servicio o potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0323",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de capa de modo kernel, donde una referencia de puntero NULL provocada por una entrada de usuario no válida puede dar lugar a una denegación de servicio o potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0324",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-02-15T23:59:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa de modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde el tamaño de un búfer de entrada no está validado, dando lugar a denegación de servicio o potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-16T11:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression."
      }, {
        "lang" : "es",
        "value" : "La función compile_bracket_matchingpath en pcre_jit_compile.c en PCRE hasta la versión 8.x en versiones anteriores a la revisión 1680 (por ejemplo, la versión empacada de PHP 7.1.1) permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de una expresión regular manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.38",
            "matchCriteriaId" : "67B7289A-D5A8-4246-A98E-4B7F1F8A9AFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2035",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://vcs.pcre.org/pcre/code/trunk/pcre_jit_compile.c?r1=1676&r2=1680&view=patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vcs.pcre.org/pcre/code/trunk/pcre_jit_compile.c?r1=1676&r2=1680&view=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-16T11:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the \"decode_ne_resource_id\" function in the \"restable.c\" source file. This is happening because the \"len\" parameter for memcpy is not checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This affects wrestool."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en icoutils 0.31.1. Se observó un desbordamiento de búfer en la función \"decode_ne_resource_id\" en el archivo fuente \"restable.c\". Esto está ocurriendo porque el parámetro \"len\" para memcpy no es verificado para el tamaño y se convierte así en un entero negativo en el proceso, resultando en una memcpy fallida. Esto afecta a wrestool."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA764C96-0835-42EC-BDE8-AAF6960144CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3807",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96292",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854050",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-16T11:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the \"extract_icons\" function in the \"extract.c\" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en icoutils 0.31.1. Se observó un desbordamiento de búfer en la función \"extract_icons\" en el archivo fuente \"extract.c\". Este problema se puede desencadenar al procesar un archivo ico dañado y resultará en un caída de icotool."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA764C96-0835-42EC-BDE8-AAF6960144CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3807",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96288",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-16T11:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the \"simple_vec\" function in the \"extract.c\" source file. This affects icotool."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en icoutils 0.31.1. Se ha observado una lectura fuera de límites que conduce a un desbordamiento de búfer en la función \"simple_vec\" en el archivo fuente \"extract.c\". Esto afecta a icotool."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA764C96-0835-42EC-BDE8-AAF6960144CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3807",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96267",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-16T16:59:00.233",
      "lastModified" : "2023-11-07T02:49:48.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5357",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-02-17T02:59:14.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free."
      }, {
        "lang" : "es",
        "value" : "regex.c en GNU ed en versiones anteriores a 1.14.1 permite a atacantes provocar una denegación de servicio (caída) a través de un comando mal formado, que desencadena una liberación no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ed:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14",
            "matchCriteriaId" : "67BE59ED-6ADD-42C3-921B-A9C62B31D301"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/7",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/13/3",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95422",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVH54XNZ77ICNBJTPI2DLJYQTA3SYSFC/",
        "source" : "security@debian.org"
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-ed/2017-01/msg00000.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVH54XNZ77ICNBJTPI2DLJYQTA3SYSFC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-ed/2017-01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5006",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, no manejó correctamente las relaciones de propietarios de objetos, lo que permitió a un atacante remoto inyectar secuencias de comandos o HTML arbitrarios (UXSS) a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/673170",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/673170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5007",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, no manejó correctamente la secuencia de eventos mientras cerraba una página, lo que permitió a un atacante remoto inyectar secuencias de comandos o HTML arbitrario (UXSS) a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/671102",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/671102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5008",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, permitió que el atacante controlado JavaScript se ejecute durante la invocación de un método de secuencia de comandos privado, lo que permitió a un atacante remoto inyectar secuencias de comandos o HTML arbitrarios (UXSS) a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/668552",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/668552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5009",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "WebRTC en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, falló al realizar la comprobación adecuada de los límites, lo que permitió a un atacante remoto potencialmente explotar la corrupción de la memoria dinámica a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/667504",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/667504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5010",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, resolvió las promesas en un contexto inadecuado, lo que permitió a un atacante remoto inyectar secuencias de comandos o HTML arbitrarias (UXSS) a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/663476",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/663476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5011",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Google Chrome en versiones anteriores a 56.0.2924.76 para Windows desinfecta insuficientemente URLs de DevTools, lo que permitió a un atacante remoto que convenció a un usuario para instalar una extensión maliciosa para leer el contenido del sistema de archivos a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/662859",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/662859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5012",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer de memoria dinámica en V8 en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, permitió a un atacante remoto explotar potencialmente la corrupción de memoria dinámica mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/681843",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/681843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5013",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Google Chrome en versiones anteriores a 56.0.2924.76 para Linux manejaba incorrectamente navegaciones de páginas en pestañas nuevas en pestañas no seleccionadas, lo que permitía a un atacante remoto suplantar los contenidos del Omnibox (barra URL) a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/677716",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/677716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5014",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de memoria dinámica durante el procesamiento de imágenes en Skia en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android permitió a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/675332",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/675332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5015",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, manejó incorrectamente glifos Unicode, lo que permitió a un atacante remoto realizar suplantaciones de dominio a través de homógrafos de IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/673971",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/673971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5016",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, no pudo impedir que ciertos elementos de interfaz de usuario se muestren en páginas no visibles, lo que permitió a un atacante remoto mostrar ciertos elementos de IU en un página que no controlan a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/673163",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/673163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5017",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Interacciones con el SO en Google Chrome en versiones anteriores a 56.0.2924.76 para Mac de memoria de vídeo insuficientemente borrada, lo que permitió a un atacante remoto posiblemente extraer fragmentos de imagen en sistemas con chips gráficos GeForce 8600M a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/676975",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/676975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5018",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android tenía una política de seguridad del contenido insuficientemente estricta en la página de lanzamiento de aplicaciones de Chrome, lo que permitía a un atacante remoto inyectar secuencias de comandos o HTML en una página privilegiada a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/668665",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/668665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5019",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Liberación de memoria en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac, y 56.0.2924.87 para Android, permitió a un atacante remoto potencialmente explotar la corrupción de memoria dinámica a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/666714",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/666714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5020",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, no pudo requerir un gesto de usuario para operaciones de descarga potentes, lo que permitió a un atacante remoto que convenció a un usuario para instalar una extensión maliciosa para ejecutar código arbitrario a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/668653",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/668653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5021",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso después de liberación de memoria en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, permitió a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/663726",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/663726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5022",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, no pudo aplicar correctamente la política de seguridad de contenido inseguro en línea, lo que permitió a un atacante remoto omitir la política de seguridad de contenido a través de una página HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/663620",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/663620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5023",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Tipo de confusión en el histograma en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac, y 56.0.2924.87 para Android, permitió a un atacante remoto potencialmente explotar una desreferencia casi nula a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/651443",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/651443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5024",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac, falló en realizar la comprobación de los límites adecuados, lo que permitió a un atacante remoto potencialmente explotar la corrupción de la memoria dinámica a través de un archivo de vídeo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/643951",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-05",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/643951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5025",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac, falló en realizar la comprobación de los límites adecuados, lo que permitió a un atacante remoto potencialmente explotar la corrupción de la memoria dinámica a través de un archivo de vídeo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/643950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-05",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/643950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5026",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Google Chrome anterior a 56.0.2924.76 para Linux, Windows y Mac, no pudo evitar que las alertas se muestren mediante marcos intercambiados, lo que permitió a un atacante remoto mostrar alertas en una página que no controla a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/634108",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/634108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5027",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-02-17T07:59:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome en versiones anteriores a 56.0.2924.76 para Linux, Windows y Mac y 56.0.2924.87 para Android, no pudo aplicar correctamente la política de seguridad de contenido inseguro en línea, lo que permitió a un atacante remoto eludir la política de seguridad de contenido a través de una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.2883.87",
            "matchCriteriaId" : "20E75B30-0D25-4AC2-8506-1D29C8B87E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/661126",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/661126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-17T07:59:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation and direct SQL query execution. SQL quote escaping and a keyword blacklist were implemented in a new class, SQLUtil (main/java/com/dotmarketing/common/util/SQLUtil.java), as part of the remediation of CVE-2016-8902; however, these can be overcome in the case of the q and inode parameters to the /categoriesServlet path. Overcoming these controls permits a number of blind boolean SQL injection vectors in either parameter. The /categoriesServlet web path can be accessed remotely and without authentication in a default dotCMS deployment."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dotCMS hasta la versión 3.6.1. La función findChildrenByFilter() que es llamada por la ruta accesible por la web /categoriesServlet realiza la interpolación de cadenas y la ejecución directa de consulta SQL. SQL cita escape y una lista negra de palabra clave se implementaron en una nueva clase, SQLUtil (main/java/com/dotmarketing/common/util/SQLUtil.java), como parte de la remediación de CVE-2016-8902; Sin embargo, estos pueden ser superados en el caso de los parámetros q e inode a la ruta /categoriesServlet. Superando estos controles permiten un número de vectores de inyección SQL booleanos ciegos en cualquiera de los parámetros. Se puede acceder a la ruta web /categoriesServlet remotamente y sin autenticación en una implementación de dotCMS predeterminada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.1",
            "matchCriteriaId" : "2227314C-84F0-4DBD-A033-D0ECA8F3846A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dotcms.com/security/SI-39",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/xdrr/webapp-exploits/blob/master/vendors/dotcms/2017.01.blind-sqli/dotcms-dump.sh",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41377/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dotcms.com/security/SI-39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/xdrr/webapp-exploits/blob/master/vendors/dotcms/2017.01.blind-sqli/dotcms-dump.sh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41377/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-17T07:59:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a \"Web Admin Portal > Log Configuration > Add\" action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en InterSect Alliance SNARE Epilog para UNIX versión 1.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro str_log_name en una acción \"Web Admin Portal > Log Configuration > Add\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intersect_alliance:snare_epilog:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52003973-A127-4E33-899A-5533035CF445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arthrocyber.com/research",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://arthrocyber.com/research",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-17T07:59:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.4 y versiones anteriores, un archivo de captura STANAG 4607 manipulado o mal formado causará un bucle infinito y agotamiento de memoria. Si el campo de tamaño de paquete en un encabezado de paquete es nulo, el desplazamiento a leer no avanzará, provocando intentos continuos para leer el mismo paquete de longitud cero. Esto agotará rápidamente toda la memoria del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "A083B619-50DF-4A8F-99FE-E379FE4E1E05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96284",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-17T07:59:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que un error de programación en el procesamiento de solicitudes HTTPS en el servlet Apache Tomcat y en el motor JSP puede dar como resultado la denegación de servicio a través de un bucle infinito. La denegación de servicio es fácilmente alcanzable como consecuencia de backporting una corrección CVE-2016-6816 pero no backporting la corrección para el error 57544 de Tomcat. Las distribuciones afectadas por este problema de backporting incluyen Debian (en versiones anteriores a 7.0.56-3+deb8u8 y 8.0.14-1+deb8u7 en jessie) y Ubuntu."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0517.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0826.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0827.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0828.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0829.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3788",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96293",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037860",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/851304",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bz.apache.org/bugzilla/show_bug.cgi?id=60578",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00039.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180731-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0517.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0827.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0828.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0829.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/851304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bz.apache.org/bugzilla/show_bug.cgi?id=60578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180731-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-17T20:59:00.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows remote attackers to read arbitrary files or possibly have unspecified other impact via a crafted edoc file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XXE en eParakstitajs 3 en versiones anteriores a 1.3.9 y eParaksts Java lib en versiones anteriores a 2.5.13 permite a atacantes remotos leer archivos arbitrarios o posiblemente tener otro impacto no especificado a través de un archivo edoc manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eparaksts:eparakstitajs_3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.8",
            "matchCriteriaId" : "4A3102AB-94BF-42A5-A2E2-5E09CD3C3717"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.lv/lv/2017/02/iznakusas-nedelas-zinas-par-drosibas-incidentiem-nr-4-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.eparaksts.lv/en/Assistance/downloads/eparakstitajs-3-0/previous-versions-of-eparakstitajs-3-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://cert.lv/lv/2017/02/iznakusas-nedelas-zinas-par-drosibas-incidentiem-nr-4-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.eparaksts.lv/en/Assistance/downloads/eparakstitajs-3-0/previous-versions-of-eparakstitajs-3-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-17T20:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/lib/Control/Backend/menus.control.php en GeniXCMS a través de 1.0.2 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro order."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "F3FC9002-2943-4B9A-94AC-A1D1FEC168A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-18T21:59:00.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función sctp_wait_for_sndbuf en net/sctp/socket.c en el kernel de Linux en versiones anteriores a 4.9.11 permite a usuarios locales provocar una denegación de servicio (fallo de aserción y pánico) a través de una aplicación multihilo que despega una asociación en un cierto estado de búfer completo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.11",
            "matchCriteriaId" : "A2C8FBA2-BF83-4E8F-AA66-F34C0F33E703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2dcab598484185dea7ec22219c76dcdd59e3cb90",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1420276",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2dcab598484185dea7ec22219c76dcdd59e3cb90",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2dcab598484185dea7ec22219c76dcdd59e3cb90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1420276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2dcab598484185dea7ec22219c76dcdd59e3cb90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-18T21:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en kernel/events/core.c en el kernel de Linux en versiones anteriores a 4.9.7 permite a usuarios locales obtener privilegios a través de una aplicación manipulada que hace llamadas concurrentes al sistema perf_event_open para mover un grupo de software en un contexto hardware. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2016-6786."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18.54",
            "versionEndExcluding" : "3.18.92",
            "matchCriteriaId" : "F22ADC27-849C-43FC-A6FB-FEEE92B3C850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.4.65",
            "matchCriteriaId" : "F0B53829-8BD0-46CE-A754-72D6C2A2B7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.7",
            "matchCriteriaId" : "20EE2EFD-24B9-486E-8B08-FB740ABD8585"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=321027c1fe77f892f4ea07846aeae08cefbbb290",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/16/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96264",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422825",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/321027c1fe77f892f4ea07846aeae08cefbbb290",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=321027c1fe77f892f4ea07846aeae08cefbbb290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/321027c1fe77f892f4ea07846aeae08cefbbb290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-18T21:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call."
      }, {
        "lang" : "es",
        "value" : "La función dccp_rcv_state_process en net/dccp/input.c en el kernel de Linux hasta la versión 4.9.11 no maneja adecuadamente estructuras de paquetes de datos DCCP_PKT_REQUEST en el estado LISTEN, lo que permite a usuarios locales obtener privilegios root o provocar una denegación de servicio (liberación doble) a través de una aplicación que hace una llamada de sistema IPV6_RECVPKTINFO setsockopt."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.86",
            "matchCriteriaId" : "93414DAF-13C5-4F37-8F16-486DDEFFE6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "3116EF11-56E7-4D40-9FD0-6109280D0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.71",
            "matchCriteriaId" : "714101BC-5F00-4257-A007-F21269AE5AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.41",
            "matchCriteriaId" : "F5CF2C65-6A2A-44EE-A67B-5DB1663C2B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.49",
            "matchCriteriaId" : "5AA77834-089F-4556-A00B-CAC1E08444BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.52",
            "matchCriteriaId" : "87F9D322-C14F-4E7A-BA48-87789CAC2DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.13",
            "matchCriteriaId" : "B5EFB5B2-2EEC-4D04-925A-77FBE0E5E76C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0293.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0294.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0295.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0316.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0324.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0345.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0346.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0347.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0365.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0366.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0403.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0501.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/22/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037876",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0932",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1209",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41457/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41458/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0294.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0295.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0345.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0346.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0365.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/22/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41457/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41458/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2350",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir Same Origin Policy y obtener información sensible a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2351",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the \"WiFi\" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. El problema involucra al componente \"WiFi\", que permite a atacantes próximos físicamente eludir el mecanismo de protección de bloqueo de activación y ver la pantalla de inicio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0",
            "matchCriteriaId" : "483CCC31-77F5-425E-A0D1-6C8A4AF18D74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95722",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2352",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the \"Unlock with iPhone\" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. watchOS en versiones anteriores a 3.1.3 está afectado. El problema involucra al componente \"Unlock with iPhone\", que permite a atacantes eludir el mecanismo de protección de presencia de muñeca y desbloquear un dispositivo Watch a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0",
            "matchCriteriaId" : "483CCC31-77F5-425E-A0D1-6C8A4AF18D74"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "17036F83-6506-40D0-B0B5-43206EF575F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95730",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2353",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.3 está afectado. El problema involucra al componente \"Bluetooth\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (uso después de liberación de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.2",
            "matchCriteriaId" : "06BE9BF5-8D87-4C42-96F6-065A088EAF9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41164/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41164/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2354",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. iCloud en versiones anteriores a 6.1.1 está afectado. iTunes en versiones anteriores a 12.5.5 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "6.1.1",
            "matchCriteriaId" : "E742A9C2-557C-4D13-AC48-57F674F0DBA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "07638941-0393-4836-9427-8257547AED37"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95736",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2355",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. iCloud en versiones anteriores a 6.1.1 está afectado. iTunes en versiones anteriores a 12.5.5 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (acceso de memoria no inicializado y caída de la aplicación) a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "6.1.1",
            "matchCriteriaId" : "E742A9C2-557C-4D13-AC48-57F674F0DBA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "07638941-0393-4836-9427-8257547AED37"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95736",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2356",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. iCloud en versiones anteriores a 6.1.1 está afectado. iTunes en versiones anteriores a 12.5.5 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "6.1.1",
            "matchCriteriaId" : "E742A9C2-557C-4D13-AC48-57F674F0DBA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "07638941-0393-4836-9427-8257547AED37"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95736",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2357",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the \"IOAudioFamily\" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.3 está afectado. El problema involucra al componente \"IOAudioFamily\". Esto permite a atacantes obtener información sensible de la disposición de la memoria del kernel a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.2",
            "matchCriteriaId" : "06BE9BF5-8D87-4C42-96F6-065A088EAF9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2358",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the \"Graphics Drivers\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.3 está afectado. El problema involucra al componente \"Graphics Drivers\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.2",
            "matchCriteriaId" : "06BE9BF5-8D87-4C42-96F6-065A088EAF9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2359",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the \"Safari\" component, which allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Safari en versiones anteriores a 10.0.3 está afectado. El problema involucra al componente \"Safari\" que permite a atacantes remotos suplantar la dirección de barra a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.2",
            "matchCriteriaId" : "6E0DDE9A-9410-41DC-9EB9-2B85654E3DE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95724",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037669",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2360",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:04.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. macOS en versiones anteriores a 10.12.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. watchOS en versiones anteriores a 3.1.3 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (uso después de liberación de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.3",
            "matchCriteriaId" : "2C0A5654-F7F3-44BB-8435-58CBA014E30F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "C9540262-A485-409C-862B-81F607E120B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95729",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95731",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41165/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41165/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2361",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the \"Help Viewer\" component, which allows XSS attacks via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.3 está afectado. El problema involucra al componente \"Help Viewer\" que permite ataques de XSS a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.2",
            "matchCriteriaId" : "06BE9BF5-8D87-4C42-96F6-065A088EAF9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1040",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41443/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41443/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2362",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0",
            "matchCriteriaId" : "483CCC31-77F5-425E-A0D1-6C8A4AF18D74"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.2",
            "matchCriteriaId" : "6E0DDE9A-9410-41DC-9EB9-2B85654E3DE2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:apple_tv:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3180C69A-4D5F-40A9-B194-B461D82C8DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41213/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41213/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2363",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. watchOS en versiones anteriores a 3.1.3 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "C9540262-A485-409C-862B-81F607E120B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95728",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41449/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41449/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2364",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. El problema involucra el componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0",
            "matchCriteriaId" : "483CCC31-77F5-425E-A0D1-6C8A4AF18D74"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.2",
            "matchCriteriaId" : "6E0DDE9A-9410-41DC-9EB9-2B85654E3DE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95725",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41799/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41799/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2365",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41453/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41453/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2366",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. iCloud en versiones anteriores a 6.1.1 está afectado. iTunes en versiones anteriores a 12.5.5 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0",
            "matchCriteriaId" : "483CCC31-77F5-425E-A0D1-6C8A4AF18D74"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.2",
            "matchCriteriaId" : "6E0DDE9A-9410-41DC-9EB9-2B85654E3DE2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "4D8A464F-36CF-4467-8CFA-E35193C5D977"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.4",
            "matchCriteriaId" : "EBA722ED-C484-4D36-9DC4-F55F7EAD652A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95733",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2368",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the \"Contacts\" component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. El problema involucra al componente \"Contacts\". Esto permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de una tarjeta de contacto manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0",
            "matchCriteriaId" : "483CCC31-77F5-425E-A0D1-6C8A4AF18D74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95722",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2369",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41215/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2370",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. macOS en versiones anteriores a 10.12.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. watchOS en versiones anteriores a 3.1.3 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (desbordamiento de búfer) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.3",
            "matchCriteriaId" : "2C0A5654-F7F3-44BB-8435-58CBA014E30F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "C9540262-A485-409C-862B-81F607E120B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95731",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1004",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41163/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41163/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2371",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the \"WebKit\" component, which allows remote attackers to launch popups via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. El problema involucra al componente \"WebKit\" que permite a atacantes remotos enviar ventanas emergentes a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95735",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41451/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41451/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2372",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the \"Projects\" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. GarageBand en versiones anteriores a 10.1.5 está afectado. Logic Pro X en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Projects\", que permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un archivo GarageBand project manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:logic_pro_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.4",
            "matchCriteriaId" : "3300DB0D-1E0C-4FB8-B342-865FF10B4336"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.4",
            "matchCriteriaId" : "0F2AC9E6-E433-4187-8765-67960069853A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95627",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037627",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0262/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207476",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207477",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2373",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.2.1 está afectado. Safari en versiones anteriores a 10.0.3 está afectado. tvOS en versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sito web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "1E8B1972-710B-4BEC-A25D-D429929A5D80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "F019AB91-9FA4-4F62-9A74-9867F8646767"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41216/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2374",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-02-20T08:59:05.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the \"Projects\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted GarageBand project file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. GarageBand en versiones anteriores a 10.1.6 está afectado. El problema involucra al componente \"Projects\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo GarageBand project."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "7A55BDB7-FAA1-4C59-B266-31AD13890B8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96171",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037868",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0275/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207518",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0038",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-02-20T16:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220."
      }, {
        "lang" : "es",
        "value" : "gdi32.dll en Graphics Device Interface (GDI) en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible de la memoria dinámica de proceso a través de un archivo EMF manipulado, como demostrado por un registro EMR_SETDIBITSTODEVICE con dimensiones Device Independent Bitmap (DIB) modificadas. NOTA: esta vulenrabilidad existe por un arreglo incompleto de la CVE-2016-3216, CVE-2016-3219 y/o CVE-2016-3220."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96023",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037845",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=992",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41363/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41363/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file."
      }, {
        "lang" : "es",
        "value" : "GOM Player 2.3.10.5266 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado a través de un archivo fpx manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gomlab:gom_player:2.3.10.5266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F689054E-5620-4291-BB93-4E9C06BF730F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41367/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41367/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token."
      }, {
        "lang" : "es",
        "value" : "Elusión de token CSRF en GeniXCMS en versiones anteriores a 1.0.2 podría resultar en escalación de privilegios. La página forgotpassword.php puede ser usada para adquirir un token."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "F3FC9002-2943-4B9A-94AC-A1D1FEC168A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/70",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.0.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.0.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple versión 1.x Form Builder antes de la versión 0.8.1.6 permite a atacantes remotos ejecutar código PHP a través del parámetro cntnt01fbrp_forma_form_template en admin_store_form."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:form_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1.5",
            "matchCriteriaId" : "D4E11B70-26B8-4C0C-A545-5CBC12AC2FFA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.2",
            "matchCriteriaId" : "DBC86285-74C1-45C4-B9E6-C74B992D3DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.cmsmadesimple.org/project/files/69",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://daylight-it.com/security-advisory-dlcs0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dev.cmsmadesimple.org/project/files/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://daylight-it.com/security-advisory-dlcs0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple versión 1.x Form Builder antes de la versión 0.8.1.6 permite a atacantes remotos llevar a cabo ataques de divulgación de información a través de exportxml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:form_builder:*:*:*:*:*:cms_made_simple:*:*",
            "versionEndIncluding" : "0.8.1.5",
            "matchCriteriaId" : "02E39951-3657-4625-BAD5-C5B1622FAC9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.2",
            "matchCriteriaId" : "DBC86285-74C1-45C4-B9E6-C74B992D3DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.cmsmadesimple.org/project/files/69",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://daylight-it.com/security-advisory-dlcs0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dev.cmsmadesimple.org/project/files/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://daylight-it.com/security-advisory-dlcs0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple versión 1.x Form Builder antes de la versión 0.8.1.6 permite a atacantes remotos llevar a cabo ataques de divulgación de información a través de defaultadmin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:form_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1.5",
            "matchCriteriaId" : "D4E11B70-26B8-4C0C-A545-5CBC12AC2FFA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.2",
            "matchCriteriaId" : "DBC86285-74C1-45C4-B9E6-C74B992D3DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.cmsmadesimple.org/project/files/69",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://daylight-it.com/security-advisory-dlcs0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dev.cmsmadesimple.org/project/files/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://daylight-it.com/security-advisory-dlcs0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section."
      }, {
        "lang" : "es",
        "value" : "FastStone MaxView 3.0 y 3.1 permite a atacantes asistidos por usuario provocar una denegación de servicio (caída de aplicación) a través de iimagen BMP malformada con un campo biSize manipulado en la sección BITMAPINFOHEADER."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:maxview:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CDA7CF-58C1-4070-8C4A-E82530FF0F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:maxview:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA57988-0A33-4496-919F-1B7E8CB13C42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ilsani/rd/tree/master/security-advisories/faststone/maxview-cve-2017-6078",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ilsani/rd/tree/master/security-advisories/faststone/maxview-cve-2017-6078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php (Unauthenticated) with the GET Parameter: list_id."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en el Mail Masta (también conocido como mail-masta) plugin 1.0 para WordPress. Esto afecta /inc/lists/csvexport.php (No autenticado) con el GET Parameter: list_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/view-list.php (Requires authentication to Wordpress admin) with the GET Parameter: filter_list."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en el Mail Masta (también conocido como mail-masta) plugin 1.0 paara WordPress. Esto afecta /inc/lists/view-list.php (requiere autenticación al administrador de Wordpress) con el GET Parameter: filter_list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign/count_of_send.php (Requires authentication to Wordpress admin) with the POST Parameter: camp_id."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en el Mail Masta (también conocido como mail-masta) plugin 1.0 para WordPress. Esto afecta /inc/campaign/count_of_send.php (requiere autenticación al administrador de Wordpress) con el POST Parameter: camp_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T07:59:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign_save.php (Requires authentication to Wordpress admin) with the POST Parameter: list_id."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en el Mail Masta (también conocido como mail-masta) plugin 1.0 para WordPress. Esto afecta /inc/campaign_save.php (requiere autenticación al administrador de Wordpress) con el POST Parameter: list_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41438/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-21T20:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID, (2) change the Wi-Fi password, or (3) possibly have unspecified other impact via crafted requests to form2WlanBasicSetup.cgi."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de CSRF en el portal de acceso en el DIGISOL DG-HR1400 Wireless Router con firmware 1.00.02 permiten a atacantes remotos secuestrar la autenticación de administradores para peticiones que (1) cambian el SSID, (2) cambian la contraseña Wi-Fi, o (3) tienen posiblemente otro impacto no especificado a través de peticiones manipuladas a form2WlanBasicSetup.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:digisol:dg-hr1400_firmware:1.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5178DD-41D2-4454-8A7C-659DC5B63156"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:digisol:dg-hr1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2395C902-58EF-4A48-927D-D6B27FFD9B5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/66",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://drive.google.com/file/d/0B6715xUqH18MeV9GOVE0ZmFrQUU/view",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://drive.google.com/file/d/0B6715xUqH18MeV9GOVE0ZmFrQUU/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2684",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-02-22T02:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication."
      }, {
        "lang" : "es",
        "value" : "Siemens SIMATIC Logon en versiones anteriores a V1.5 SP3 Update 2 podría permitir a un atacante con conocimiento de un nombre de usuario válido, y acceso físico o de red al sistema afectado, eludir la autenticación a nivel de aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-592"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_logon:*:sp3_update_1:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "0E791A5D-A304-4C65-84CA-859984342446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96208",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3821",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvc49348. Known Affected Releases: 10.5(2.14076.1). Known Fixed Releases: 12.0(0.98000.209) 12.0(0.98000.478) 12.0(0.98000.609)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la página de servicio de Cisco Unified Communications Manager podría permitir a un atacante remoto no autenticado llevar a cabo ataques de XSS reflejados. Más Información: CSCvc49348. Lanzamientos Afectados Conocidos: 10.5(2.14076.1). Lanzamientos Reparados Conocidos: 12.0(0.98000.209) 12.0(0.98000.478) 12.0(0.98000.609)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.14076.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E96831F-40D0-4C7C-97FC-E8D3C063822C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96241",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037839",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3827",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco ESA and Cisco WSA, both virtual and hardware appliances, that are configured with message or content filters to scan incoming email attachments on the ESA or services scanning content of web access on the WSA. More Information: SCvb91473, CSCvc76500. Known Affected Releases: 10.0.0-203 9.9.9-894 WSA10.0.0-233."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el escáner Multipurpose Internet Mail Extensions (MIME) de Cisco AsyncOS Software para Cisco Email Security Appliances (ESA) y Web Security Appliances (WSA) podría permitir a un atacante remoto no autenticado eludir filtros configurados por en usuario en el dispositivo. Productos Afectados: Esta vulnerabilidad afecta a todos los lanzamientos anteriores al primer lanzamiento reparado de Cisco AsyncOS Software para Cisco ESA y Cisco WSA, tanto accesorios virtuales como de hardware, que están configurados con filtros de mensajes o contenido para escanear adjuntos de emails entrantes en ESA o servicios de escaneo de contenido de acceso web en WSA. Más Información: SCvb91473, CSCvc76500. Lanzamientos Afectados Conocidos: 10.0.0-203 9.9.9-894 WSA10.0.0-233."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-082:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61A651C-7CBF-4CFA-A991-4D6B3DB37F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617447D7-9DD7-4645-9BCC-27A0C5D3759B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D64F74FC-51C1-4461-9E88-CD181CF5C8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610C3E11-E7B4-4BBD-864E-06AF1331DC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4BDE8C-6D41-4BCF-8BB3-9256E2AD09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:9.9.6-026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0958602-8C88-4E0E-8720-F4D7AB7692AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:9.9.9-894:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD71897-DEB5-4DD9-86B8-EDB0CC74B0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-082:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F87B04-1F5F-4384-A03D-7FE4F3569C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61539DE3-591F-4CAA-889B-654037A07DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E4BBD-F14C-4573-B771-FA0303A6220C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878EFC2D-79C0-4B6C-A1FB-9F7B19CFC7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907C80C-4359-4D59-9619-C36F536CD3F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96239",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037831",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037832",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-asyncos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-asyncos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3828",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvb98777. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.0(1.23063.1) 11.5(1.12029.1) 11.5(1.12900.11) 11.5(1.12900.21) 11.6(1.10000.4) 12.0(0.98000.156) 12.0(0.98000.178) 12.0(0.98000.369) 12.0(0.98000.470) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Unified Communications Manager Switches podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de XSS contra un usuario de la interfaz de gestión basada en web de un dispositivo afectado. Más Información: CSCvb98777. Lanzamientos Afectados Conocidos: 11.0(1.10000.10) 11.5(1.10000.6). Lanzamientos Reparados Conocidos: 11.0(1.23063.1) 11.5(1.12029.1) 11.5(1.12900.11) 11.5(1.12900.21) 11.6(1.10000.4) 12.0(0.98000.156) 12.0(0.98000.178) 12.0(0.98000.369) 12.0(0.98000.470) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96240",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037839",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3829",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc30999. Known Affected Releases: 12.0(0.98000.280). Known Fixed Releases: 11.0(1.23900.3) 12.0(0.98000.180) 12.0(0.98000.422) 12.0(0.98000.541) 12.0(0.98000.6)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Unified Communications Manager Switches podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de XSS contra un usuario de la interfaz de gestión basada en web de un dispositivo afectado. Más Información: CSCvc30999. Lanzamientos Afectados Conocidos: 12.0(0.98000.280). Lanzamientos Reparados Conocidos: 11.0(1.23900.3) 12.0(0.98000.180) 12.0(0.98000.422) 12.0(0.98000.541) 12.0(0.98000.6)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96250",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037839",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3830",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected appliance. More Information: CSCvc89678. Known Affected Releases: 2.1. Known Fixed Releases: 2.1.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en una API interna de Cisco Meeting Server (CMS) podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio (DoS) en la aplicación afectada. Más Información: CSCvc89678. Lanzamientos Afectados Conocidos: 2.1. Lanzamientos Reparados Conocidos: 2.1.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B310B39B-7D5D-4533-9FE6-5F47985E35B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96242",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037833",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3833",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases: 12.0(0.99999.2). Known Fixed Releases: 11.0(1.23064.1) 11.5(1.12031.1) 11.5(1.12900.21) 11.5(1.12900.7) 11.5(1.12900.8) 11.6(1.10000.4) 12.0(0.98000.155) 12.0(0.98000.178) 12.0(0.98000.366) 12.0(0.98000.367) 12.0(0.98000.468) 12.0(0.98000.469) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el marco web de Cisco Unified Communications Manager podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de XSS contra un usuario de la interfaz web del software afectado. Más Información: CSCvb95951. Lanzamientos Afectados Conocidos: 12.0(0.99999.2). Lanzamientos Reparados Conocidos: 11.0(1.23064.1) 11.5(1.12031.1) 11.5(1.12900.21) 11.5(1.12900.7) 11.5(1.12900.8) 11.6(1.10000.4) 12.0(0.98000.155) 12.0(0.98000.178) 12.0(0.98000.366) 12.0(0.98000.367) 12.0(0.98000.468) 12.0(0.98000.469) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0\\(0.99999.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAC0A3F-DF32-4609-AB7E-174C833A3E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96246",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3835",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el portal patrocinador de Cisco Identity Services Engine (ISE) podría permitir a un atacante remoto no autenticado acceder a avisos de otros usuarios debido a inyección de SQL. Más Información: CSCvb15627. Lanzamientos Afectados Conocidos: 1.4(0.908)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_software:1.4\\(0.908\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F3CABE-0428-4B78-8B69-E145451E7FFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96249",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037841",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3836",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.162) 12.0(0.98000.178) 12.0(0.98000.383) 12.0(0.98000.488) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el marco web Cisco Unified Communications Manager podría permitir a un atacante remoto no autenticado visualizar datos sensibles. Más Información: CSCvb61689. Lanzamientos Afectados Conocidos: 11.5(1.11007.2). Lanzamientos Reparados Conocidos: 12.0(0.98000.162) 12.0(0.98000.178) 12.0(0.98000.383) 12.0(0.98000.488) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.11007.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D666F53-ABC2-4DC1-BC03-83B5CDC0DE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96251",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037840",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3837",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the attacker could potentially cause the application to crash unexpectedly, resulting in a denial of service (DoS) condition. The attacker would need to be authenticated and have a valid session with the Web Bridge. Affected Products: This vulnerability affects Cisco Meeting Server software releases prior to 2.1.2. This product was previously known as Acano Conferencing Server. More Information: CSCvc89551. Known Affected Releases: 2.0 2.0.7 2.1. Known Fixed Releases: 2.1.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de HTTP Packet Processing en la interfaz Web Bridge de Cisco Meeting Server (CMS), anteriormente Acano Conferencing Server, podría permitir a un atacante remoto autenticado recuperar contenidos de la memoria, lo que podría conducir a la divulgación de información confidencial. Además, el atacante podría provocar potencialmente que la aplicación se bloqueara de forma inesperada, resultando en una condición de denegación de servicio (DoS). El atacante necesitaría estar autenticado y tener una sesión validada con Web Bridge. Productos Afectados: Esta vulnerabilidad afecta a lanzamientos de software Cisco Meeting Server anteriores a 2.1.2. Este producto fue previamente conocido como Acano Conferencing Server. Más Información: CSCvc89551. Lanzamientos Afectados Conocidos: 2.0 2.0.7 2.1. Lanzamientos Reparados Conocidos: 2.1.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48DC084-1DD2-4878-B1DB-1035CAE3B918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA9A904-9AB5-4757-ABD1-0F6F933799BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA8A21E-97BA-4326-9F7B-FCBD480134EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FA3F5-752D-45AB-A8CB-6488F409D933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B80C9BA-07EC-4183-9AAD-3229913C9FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1895DF-AFB1-4B6E-A42C-38F7E19A5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC4BC50-1D9C-42F3-A88F-FE1E2C8A6C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA671C18-10F2-4A45-8D1C-BF460ECA84B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F618372C-0913-4773-9267-A835F31FA776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B310B39B-7D5D-4533-9FE6-5F47985E35B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2720CCF-3B73-4268-94C7-9AE3D1ECAC75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96243",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037834",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3838",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected Releases: 5.8(2.5)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Secure Access Control System (ACS) podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de XSS basado en DOM contra el usuario de la interfaz web del sistema afectado. Más Información: CSCvc04838. Lanzamientos Afectados Conocidos: 5.8(2.5)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(2.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D8E834-FADA-48A8-8E7D-88E04D30255D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96234",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037835",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3839",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XML External Entity en la interfaz de usuario basada en web de Cisco Secure Access Control System (ACS) podría permitir a un atacante remoto no autenticado tener acceso de lectura a parte de la información almacenada en el sistema afectado. Más Información: CSCvc04845. Lanzamientos Afectados Conocidos: 5.8(2.5)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(2.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D8E834-FADA-48A8-8E7D-88E04D30255D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96236",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037836",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3840",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.8(2.5)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Secure Access Control System (ACS) podría permitir a un atacante remoto no autenticado redirigir a un usuario a una página web maliciosa, también conocido como una Open Redirect Vulnerability. Más Información: CSCvc04849. Lanzamientos Afectados Conocidos: 5.8(2.5)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(2.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D8E834-FADA-48A8-8E7D-88E04D30255D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96238",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037837",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3841",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive information. More Information: CSCvc04854. Known Affected Releases: 5.8(2.5)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Secure Access Control System (ACS) podría permitir a un atacante remoto no autenticado revelar información sensible. Más Información: CSCvc04854. Lanzamientos Afectados Conocidos: 5.8(2.5)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(2.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D8E834-FADA-48A8-8E7D-88E04D30255D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96237",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037838",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3842",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments. More Information: CSCuh91455. Known Affected Releases: 7.2(1)V7."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Intrusion Prevention System Device Manager (IDM) podría permitir a un atacante remoto no autenticado visualizar información sensible almacenada en ciertos comentarios HTML. Más Información: CSCuh91455. Lanzamientos Afectados Conocidos: 7.2(1)V7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:intrusion_prevention_system_device_manager:7.2\\(1\\)v7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B813B065-3BAA-48EE-B4F3-F8FB060B9AC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96256",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037842",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-idm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-idm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3843",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. More Information: CSCvc99446. Known Affected Releases: 11.5(0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las funciones de descarga de archivos para Cisco Prime Collaboration Assurance podría permitir a un atacante remoto autenticado descargar archivos del sistema que deberían estar restringidos. Más Información: CSCvc99446. Lanzamientos Afectados Conocidos: 11.5(0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869158A1-B464-4913-AC4B-D79EE02923CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E04473-0066-43FF-AB83-97F3ACB7BFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DB2B98-EF32-4B41-89F1-9EA82E5A4FC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96248",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037843",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3844",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are vulnerable. Cisco Prime Collaboration Assurance software versions prior to 11.0 are not vulnerable. More Information: CSCvc86238. Known Affected Releases: 11.5(0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las funciones de exportación de la interfaz de usuario para Cisco Prime Collaboration Assurance podrían permitir a un atacante remoto autenticado visualizar listas de directorios de archivos y descargar archivos. Productos Afectados: Cisco Prime Collaboration Assurance versiones del software 11.0, 11.1 y 11.5 son vulnerables. Versiones de software Cisco Prime Collaboration Assurance anteriores a 11.0 no son vulnerables. Más Información: CSCvc86238. Lanzamientos Afectados Conocidos: 11.5(0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869158A1-B464-4913-AC4B-D79EE02923CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E04473-0066-43FF-AB83-97F3ACB7BFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DB2B98-EF32-4B41-89F1-9EA82E5A4FC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96247",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037843",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3845",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are vulnerable. Cisco Prime Collaboration Assurance software versions prior to 11.0 are not vulnerable. More Information: CSCvc77783. Known Affected Releases: 11.5(0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Prime Collaboration Assurance podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de XSS contra un usuario de la interfaz de gestión basada en web de un dispositivo afectado. Productos Afectados: Cisco Prime Collaboration Assurance versiones de software 11.0, 11.1 y 11.5 son vulnerables. Versiones de software Cisco Prime Collaboration Assurance anteriores a 11.0 no son vulnerables. Más Información: CSCvc77783. Lanzamientos Afectados Conocidos: 11.5(0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869158A1-B464-4913-AC4B-D79EE02923CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E04473-0066-43FF-AB83-97F3ACB7BFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DB2B98-EF32-4B41-89F1-9EA82E5A4FC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96245",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037844",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3847",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-02-22T02:59:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el marco web de Cisco Firepower Management Center podría permitir a un atacante remoto autenticado llevar a cabo un ataque de XSS contra un usuario de la interfaz web. Más Información: CSCvc72741. Lanzamientos Afectados Conocidos: 6.2.1.Cisco Firepower Management Center"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4A52EA-D464-4855-ABEC-FD98E0F3BD97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96253",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-fpmc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-fpmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-22T16:59:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2520."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server (anteriormente EMC Documentum Content Server) 7.3, cuando PostgreSQL Database es utilizado y la opción de configuración return_top_results_row_based es falsa, no restringe adecuadamente las sugerencias de DQL, lo que permite a usuarios remotos autenticados llevar a cabo ataques de inyección DQL y ejecutar comandos DML o DDL arbitrarios a través de una petición manipulada. NOTA: esta vulnerabilidad existe debido a una reparación incompleta para CVE-2014-2520."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA367A58-FA0A-48D6-99DB-A602A6B37479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96224",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-22T16:59:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum D2 (anteriormente EMC Documentum D2) 4.x permite a atacantes remotos ejecutar comandos arbitrarios a través de un objeto Java serializado manipulado, relacionado con las librerías BeanShell (bsh) y Apache Commons Collections (ACC)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4667B360-FF26-4F2B-86EA-106ACA727B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908D9F8A-87D7-46A0-BA8E-B7CA4A7808F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A08F926-B628-45B2-A745-758F7E5E3217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED28126-775B-4DFD-92B1-38E70CABCF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB00B8A-6E66-4E6D-9182-B3BC94B47E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E54DC3-7B37-43EF-B355-9CD4AF1F778D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_d2:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FDA5A9-1028-47BE-9190-0B7095C6441C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141105/OpenText-Documentum-D2-4.x-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41366/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141105/OpenText-Documentum-D2-4.x-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41366/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-22T19:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user."
      }, {
        "lang" : "es",
        "value" : "Munin en versiones anteriores a 2.999.6 tiene una vulnerabilidad local de escritura de archivos cuando los gráficos CGI están habilitados. Configurar múltiples parámetros GET upper_limit permite sobreescribir cualquier archivo accesible en el usuario www-data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:munin-monitoring:munin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.30.1",
            "matchCriteriaId" : "FBCA7BEA-2285-4943-9BE2-959FF027BB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:munin-monitoring:munin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.999.9",
            "matchCriteriaId" : "70791CC0-AC69-4745-9EE3-54124C342C6B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96399",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/855705",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/munin-monitoring/munin/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-05",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/855705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/munin-monitoring/munin/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-22T23:59:00.190",
      "lastModified" : "2025-10-22T00:16:07.390",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request."
      }, {
        "lang" : "es",
        "value" : "ping.cgi en dispositivos NETGEAR DGN2200 con firmware hasta la versión 10.0.0.50 permite a usuarios remotos autenticados ejecutar comandos de SO arbitrarios a través de metacaracteres shell en el campo ping_IPAddr de una solicitud HTTP POST."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-07",
      "cisaActionDue" : "2022-09-07",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "NETGEAR DGN2200 Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.0.50",
            "matchCriteriaId" : "39F9F8D1-4B1F-4CB6-9A51-4783D986BF5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C89394-ED7D-4C5F-9573-47A0378E22C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96408",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41394/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41394/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6077",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-22T23:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el servidor construido en web en DiskSavvy Enterprise 9.4.18 permite a atacantes remotos ejecutar código arbitrario a través de una URI larga en una solicitud GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:disksavvy:disksavvy_enterprise:9.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA3A110-67DF-4E41-970F-EB2DAFBD153E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96401",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41436/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41436/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-23T06:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Dispositivos D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28 y DGS-1510-20 de Websmart con firmware anterior a 1.31.B003 permiten a atacantes llevar a cabo ataques de Elusión de Comandos no Autenticados a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:websmart_dgs-1510_series_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.31.b001",
            "matchCriteriaId" : "8AFB2BDE-756A-47C9-9072-AFFB6FAA254E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95084767-AB12-4124-96C5-C3FBD77854B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A83310B-38B0-4259-BBC4-E11684B1DA24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7A14A9-7443-4194-BF36-76C084A20F86"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-28xmp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEAC111-8914-4DC1-B8FA-E9AF1AE1DF73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4B17F4-4DDD-438E-BC49-3771AFDC39E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-52x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68709ECB-A529-49DB-846F-8FDEE47B0BC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-23T06:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Dispositivos D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28 y DGS-1510-20 de Websmart con firmware anterior a 1.31.B003 permiten a atacantes llevar a cabo ataques de Divulgación de Información no Autenticada a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:websmart_dgs-1510_series_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.31.b001",
            "matchCriteriaId" : "8AFB2BDE-756A-47C9-9072-AFFB6FAA254E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95084767-AB12-4124-96C5-C3FBD77854B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A83310B-38B0-4259-BBC4-E11684B1DA24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7A14A9-7443-4194-BF36-76C084A20F86"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-28xmp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEAC111-8914-4DC1-B8FA-E9AF1AE1DF73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4B17F4-4DDD-438E-BC49-3771AFDC39E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:websmart_dgs-1510-52x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68709ECB-A529-49DB-846F-8FDEE47B0BC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/varangamin/CVE-2017-6206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41662/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/varangamin/CVE-2017-6206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41662/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-23T15:59:00.150",
      "lastModified" : "2023-11-07T02:49:52.740",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9578.  Reason: This candidate is a reservation duplicate of CVE-2016-9578.  Notes: All CVE users should reference CVE-2016-9578 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-23T17:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag."
      }, {
        "lang" : "es",
        "value" : "La función tcp_splice_read en net/ipv4/tcp.c en el kernel de Linux en versiones anteriores a 4.9.11 permite a atacantes remotos provocar una denegación de servicio (bucle infinito y bloqueo débil) a través de vectores que involucran un paquete TCP con la bandera URG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.10",
            "matchCriteriaId" : "C5D57D8B-3072-44A1-88FE-58FB0A730057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-23T19:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP."
      }, {
        "lang" : "es",
        "value" : "tcpdf en versiones anteriores a 6.2.0 carga archivos desde el servidor generando archivos PDF a un FTP externo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdf_project:tcpdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "7B1ED5CB-BBC2-4099-B359-32FB5D9DDCBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/19/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tcpdf/bugs/1005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tcpdf/bugs/1005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T02:59:01.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine."
      }, {
        "lang" : "es",
        "value" : "En versiones de wolfSSL anteriores a 3.10.2, la función fp_mul_comba facilita extraer información de clave RSA para un usuario malicioso que tiene acceso para visualizar la chaché en una máquina."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "3CF544C5-1FA4-4D30-86F7-E91F4A84247E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96422",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T02:59:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en GetAuthDetails.html.php en PayPal PHP Merchant SDK (también conocido como merchant-sdk-php) 3.9.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro token."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paypal:merchant-sdk-php:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E0E945-DB9E-465B-A7B6-AC2C08E4259E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96432",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/paypal/merchant-sdk-php/issues/129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/paypal/merchant-sdk-php/issues/129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de uso después de liberación en la función gx_image_enum_begin en base/gxipixel.c en Ghostscript en versiones anteriores a ecceafe3abba2714ef9b432035fe0739d9b1a283 permiten a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente tener otro impacto no especificado a través de un documento PostScript manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:afpl_ghostscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8452f9238959a4d518af365812bf031fe4d8d4b7",
            "matchCriteriaId" : "3248B027-E12E-46C9-8839-7A97CD4BAA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe0739d9b1a283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697596",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe0739d9b1a283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by the r_read_le32 function."
      }, {
        "lang" : "es",
        "value" : "Las funciones r_read_* en libr/include/r_endian.h en radare2 1.2.1 permiten a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de un archivo binario manipulado, como se demuestra por la función r_read_le32."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2BB74D-D369-43D4-9EDB-3F0DD27091B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/radare/radare2/commit/1ea23bd6040441a21fbcfba69dce9a01af03f989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/radare/radare2/commit/1ea23bd6040441a21fbcfba69dce9a01af03f989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"1 of 9. Null Pointer Deref / calloc return value not checked.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"1 de 9. Referencia a puntero Null / valor de retorno calloc no marcado\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"2 of 9. Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"2 de 9. Bucle infinito / DoS en la función TNEFFillMapi en lib/ytnef.c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/835.html\" rel=\"nofollow\">CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"3 of 9. Buffer Overflow in version field in lib/tnef-types.h.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"3 de 9. Desbordamiento de búfer en el campo de versión en lib/tnef-types.h\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"4 of 9. Out of Bounds Reads.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"4 de 9. Lectura fuera de límites\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"5 of 9. Integer Overflow.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"5 de 9. Desbordamiento de entero\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"6 of 9. Invalid Write and Integer Overflow.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"6 de 9. Escritura no válida y desbordamiento de entero\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"7 of 9. Out of Bounds read.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"7 de 9. Lectura fuera de límites\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"8 of 9. Out of Bounds read and write.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"8 de 9. Lectura y escritura fuera de límites\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.1. This is related to a patch described as \"9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c.\""
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ytnef en versiones anteriores a 1.9.1. Esto se relaciona con un parche descrito como \"9 de 9. Directorio traversal utilizando el nombre de archivo; función SanitizeFilename en settings.c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B0249DEE-D540-4265-BF09-B0BB1D6F8BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacker."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en tnef en versiones anteriores a 1.4.13. Se han identificado dos escrituras OOB en src/mapi_attr.c:mapi_attr_read(). Esto puede conducir a operaciones de lectura y escritura no válidas, controladas por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tnef_project:tnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "89F0C6D8-2B85-44C4-A8C0-1BDBCAC4E6DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en tnef en versiones anteriores a 1.4.13. Varios desbordamientos de entero, que pueden conducir a operaciones de desbordamiento de memoria dinámica, se han identificado en las funciones que envuelven la asignación de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tnef_project:tnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "89F0C6D8-2B85-44C4-A8C0-1BDBCAC4E6DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en tnef en versiones anteriores a 1.4.13. Se han identificado dos confusiones tipo en la función parse_file(). Esto puede conducir a operaciones de lectura y escritura no válidas, controladas por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tnef_project:tnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "89F0C6D8-2B85-44C4-A8C0-1BDBCAC4E6DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T04:59:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en tnef en versiones anteriores a 1.4.13. Se han identificado cuatro confusiones tipo en la función file_add_mapi_attrs(). Esto puede conducir a operaciones de lectura y escritura no válidas, controladas por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tnef_project:tnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "89F0C6D8-2B85-44C4-A8C0-1BDBCAC4E6DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-24T15:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context."
      }, {
        "lang" : "es",
        "value" : "La función do_shmat en ipc/shm.c en el kernel de Linux hasta la versión 4.9.12 no restringe la dirección calculada por cierta operación de redondeo, lo que permite a usuarios locales asignar la página cero, y como consecuencia, eludir un mecanismo de protección que existe por la llamada de sistema mmap, haciendo llamadas a sistema shmget y shmat manipuladas en un contexto privilegiado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.11",
            "matchCriteriaId" : "68E74529-58C5-4D73-8176-DDDF25C71F22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96754",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=192931",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/95e91b831f87ac8e1f8ed50c14d709089b4e01b8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/e1d35d4dc7f089e6c9c080d556feedf9c706f0c7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=192931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/95e91b831f87ac8e1f8ed50c14d709089b4e01b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/e1d35d4dc7f089e6c9c080d556feedf9c706f0c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2789",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-02-24T22:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data from the file. This value is larger than the buffer size, which leads to a heap-based buffer overflow. This overflow corrupts an offset in the heap used in pointer arithmetic for writing data and can lead to code execution under the context of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando se copian datos de archivos en un búfer, JustSystems Ichitaro Office 2016 Trial calculará dos valores para determinar cuantos datos copiar desde el documento. Si ambos valores son más grandes que el tamaño del búfer, la aplicación escogerá el más pequeño de los dos y confiará en él para copiar datos desde el archivo. Este valor es mayor que el tamaño de búfer, lo que conduce a un desbordamiento de búfer basado en memoria dinámica. Este desbordamiento corrompe un desplazamiento en la memoria dinámica utilizada en la aritmética de puntero para escribir datos y puede conducir a ejecución de código bajo el contexto de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869571E4-7544-48EE-9839-927A3F6315E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96438",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0196/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0196/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2790",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-02-24T22:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to code execution under the context of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando se procesa un tipo de registro de 0x3c flujo Workbookdesde un archivo Excel (.xls), JustSystems Ichitaro Office confía que el tamaño es mayor que cero, substrae uno de la longitud, y utiliza este resultado como el tamaño de una memcpy. Esto resulta en un desbordamiento de búfer basado en memoria dinámica y puede conducir a ejecución de código bajo el contexto de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869571E4-7544-48EE-9839-927A3F6315E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96442",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0197/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0197/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2791",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-02-24T22:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data into. Due to this, the application will read data from the file into an invalid address thus corrupting memory. Under the right conditions, this can lead to code execution under the context of the application."
      }, {
        "lang" : "es",
        "value" : "JustSystems Ichitaro 2016 Trial contiene una vulnerabilidad que existe al tratar de abrir un archivo de PowerPoint especialmente manipulado. Debido al manejo incorrecto de la aplicación del caso de error para el resultado de una función, la aplicación utilizará este resultado en un cálculo de puntero para leer datos de archivo dentro. Debido a esto, la aplicación leerá datos desde un archivo dentro de una dirección no válida corrompiendo así la memoria. Bajo las condiciones adecuadas, esto puede conducir a ejecución de código dentro del contexto de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro:2016:*:*:*:trial:*:*:*",
            "matchCriteriaId" : "85413E71-5093-49EF-B949-4B8A62A237DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96440",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0199/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2016-0199/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0037",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-02-26T23:59:00.150",
      "lastModified" : "2025-10-22T00:15:57.890",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 10 y 11 y Microsoft Edge tienen un problema de tipo de confusión en la función Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement en mshtml.dll, que permite a atacantes remotos ejecutar código arbitrario a través de vectores que involucran una secuencia de token Cascading Style Sheets (CSS) manipulada y código JavaScript manipulado que opera en un elemento TH."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-28",
      "cisaActionDue" : "2022-04-18",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Edge and Internet Explorer Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96088",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037905",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037906",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1011",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41454/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42354/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43125/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43125/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0037",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR."
      }, {
        "lang" : "es",
        "value" : "Los paseos de la tabla de páginas llevados a cabo por la MMU durante la traducción de la dirección virtual a física dejan un rastro en la caché de último nivel de los procesadores Intel modernos. Realizando un ataque de canal lateral en las operaciones de MMU, es posible perder datos y punteros de código de JavaScript, rompiendo la ASLR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:allwinner:a64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8167A6-98BE-45D9-A333-A4DB8EE9BE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:athlon_ii_640_x4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4355B92A-F9A4-4DA0-9875-B0D8BD5541AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:e-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF28E516-87C3-48BF-ADCB-E89C41DB3E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8120_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9CAF2-DABC-4DD0-87B3-552C469835CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8320_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC0369B-FB5E-48DF-B1E5-72BAD0A0CDEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8350_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8519A289-6ADE-415A-AE6A-33FD68AFBDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:phenom_9550_4-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51CAD25-267C-4BF2-B738-25B213FCDFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c2750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59CD7DDA-6DDA-47CF-9A75-AFA75B02A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3826FEBA-0B2E-403D-9A6A-0DA02FEF9A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5_m480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92B12C0-E86A-44A0-B302-3CE721237726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-2620qm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3B3752-79A3-45A8-8416-6DC1EA4A9E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-3632qm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B0D125-332D-416D-A379-F0D7C1F9DA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-4500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677C66EF-E9B9-430F-A19D-2D87AD83DBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-6700k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFC55E4-D84D-4588-976D-1E2637B1BF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7_920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E91E0-F4B0-495A-80BA-B6B05E6F1760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3-1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E0227B-8F2B-48B3-97BC-73BA1BACEED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5-2658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661C05F6-8659-4C06-8AC5-7A25FFA52C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1_cd570m-a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57EA6EC-A6B2-4A6A-A13C-EA86154DCA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1_cd580m-a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4020D9-99C1-4366-8377-8DD1A983381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:samsung:exynos_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36182055-4545-405C-8B39-CF5B87C014C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR."
      }, {
        "lang" : "es",
        "value" : "Los paseos de la tabla de páginas llevados a cabo por la MMU durante la traducción de la dirección virtual a física dejan un rastro en la caché de último nivel de los procesadores AMD modernos. Realizando un ataque de canal lateral en las operaciones de MMU, es posible perder datos y punteros de código de JavaScript, rompiendo la ASLR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:allwinner:a64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8167A6-98BE-45D9-A333-A4DB8EE9BE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:athlon_ii_640_x4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4355B92A-F9A4-4DA0-9875-B0D8BD5541AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:e-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF28E516-87C3-48BF-ADCB-E89C41DB3E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8120_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9CAF2-DABC-4DD0-87B3-552C469835CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8320_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC0369B-FB5E-48DF-B1E5-72BAD0A0CDEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8350_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8519A289-6ADE-415A-AE6A-33FD68AFBDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:phenom_9550_4-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51CAD25-267C-4BF2-B738-25B213FCDFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c2750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59CD7DDA-6DDA-47CF-9A75-AFA75B02A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3826FEBA-0B2E-403D-9A6A-0DA02FEF9A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5_m480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92B12C0-E86A-44A0-B302-3CE721237726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-2620qm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3B3752-79A3-45A8-8416-6DC1EA4A9E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-3632qm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B0D125-332D-416D-A379-F0D7C1F9DA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-4500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677C66EF-E9B9-430F-A19D-2D87AD83DBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-6700k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFC55E4-D84D-4588-976D-1E2637B1BF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7_920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E91E0-F4B0-495A-80BA-B6B05E6F1760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3-1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E0227B-8F2B-48B3-97BC-73BA1BACEED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5-2658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661C05F6-8659-4C06-8AC5-7A25FFA52C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1_cd570m-a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57EA6EC-A6B2-4A6A-A13C-EA86154DCA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1_cd580m-a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4020D9-99C1-4366-8377-8DD1A983381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:samsung:exynos_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36182055-4545-405C-8B39-CF5B87C014C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR."
      }, {
        "lang" : "es",
        "value" : "Los paseos de la tabla de páginas llevados a cabo por la MMU durante la traducción de la dirección virtual a física dejan un rastro en la caché de último nivel de los procesadores ARM modernos. Realizando un ataque de canal lateral en las operaciones de MMU, es posible perder datos y punteros de código de JavaScript, rompiendo la ASLR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:allwinner:a64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8167A6-98BE-45D9-A333-A4DB8EE9BE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:athlon_ii_640_x4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4355B92A-F9A4-4DA0-9875-B0D8BD5541AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:e-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF28E516-87C3-48BF-ADCB-E89C41DB3E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8120_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9CAF2-DABC-4DD0-87B3-552C469835CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8320_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC0369B-FB5E-48DF-B1E5-72BAD0A0CDEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:fx-8350_8-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8519A289-6ADE-415A-AE6A-33FD68AFBDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:amd:phenom_9550_4-core:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51CAD25-267C-4BF2-B738-25B213FCDFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c2750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59CD7DDA-6DDA-47CF-9A75-AFA75B02A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3826FEBA-0B2E-403D-9A6A-0DA02FEF9A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5_m480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92B12C0-E86A-44A0-B302-3CE721237726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-2620qm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3B3752-79A3-45A8-8416-6DC1EA4A9E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-3632qm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B0D125-332D-416D-A379-F0D7C1F9DA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-4500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677C66EF-E9B9-430F-A19D-2D87AD83DBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7-6700k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFC55E4-D84D-4588-976D-1E2637B1BF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7_920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E91E0-F4B0-495A-80BA-B6B05E6F1760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3-1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E0227B-8F2B-48B3-97BC-73BA1BACEED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5-2658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661C05F6-8659-4C06-8AC5-7A25FFA52C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1_cd570m-a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57EA6EC-A6B2-4A6A-A13C-EA86154DCA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1_cd580m-a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4020D9-99C1-4366-8377-8DD1A983381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:samsung:exynos_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36182055-4545-405C-8B39-CF5B87C014C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now \"Time to Tick\" approach even with the https://bugzilla.mozilla.org/show_bug.cgi?id=1167489#c9 protection mechanism in place, which makes it easier for remote attackers to conduct AnC attacks via crafted JavaScript code."
      }, {
        "lang" : "es",
        "value" : "La API W3C High Resolution Time, tal como se implementa en varios navegadores web, no considera que los tiempos de referencia de memoria puedan medirse por un enfoque performance.now \"Time to Tick\" incluso con el mecanismo de protección https://bugzilla.mozilla.org/show_bug.cgi?id=1167489#c9 en su lugar, lo que facilita a atacantes remotos llevar a cabo ataques AnC a través de código JavaScript manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:high_resolution_time_api:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA6BB7F-670D-408A-9865-071078594BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97036",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vusec.net/projects/anc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses \"../\" pathname substrings to write arbitrary files to the filesystem."
      }, {
        "lang" : "es",
        "value" : "El componente Zip::File en la gema rubyzip en versiones anteriores a 1.2.1 para Ruby tiene una vulnerabilidad de salto de directorio. Si un sitio permite la carga de archivos .zip, un atacante puede cargar un archivo malicioso que utiliza subcadenas de nombre de ruta \"../\" para escribir archivos arbitrarios en el sistema de archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyzip_project:rubyzip:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "AE0F706C-927B-4BF2-99D1-C0F3C37605CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3801",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rubyzip/rubyzip/issues/315",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyzip/rubyzip/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rubyzip/rubyzip/issues/315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyzip/rubyzip/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret."
      }, {
        "lang" : "es",
        "value" : "El Cliente L2TP en MikroTik RouterOS versiones 6.83.3 y 6.37.4 no habilita el cifrado IPsec después de un reinicio, lo que permite a atacantes man-in-the-middle ver los datos transmitidos sin cifrar y obtener acceso a las redes en el servidor L2TP monitorizando los paquetes para los datos transmitidos y obtener el secreto L2TP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.37.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5436E3-F0C4-4AD2-B098-A5E764DFB58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.83.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24343BA3-3B12-41D3-9F19-E29EA567FAFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96447",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.milne.it/2017/02/24/mikrotik-routeros-security-vulnerability-l2tp-tunnel-unencrypted-cve-2017-6297/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.milne.it/2017/02/24/mikrotik-routeros-security-vulnerability-l2tp-tunnel-unencrypted-cve-2017-6297/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to obtain sensitive information by sniffing the network, a different vulnerability than CVE-2013-6117."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Dahua DHI-HCVR7216A-S3 con NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29 y SmartPSS Software 1.16.1 2017-01-19 envia contraseñas en texto plano en respuesta a las solicitudes de la página web, aplicaciones móviles e interfaces de aplicaciones de escritorio, lo que permite a atacantes remotos obtener información sensible rastreando la red, una vulnerabilidad diferente a CVE-2013-6117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:camera_firmware:2.400.0000.28.r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6BC430-D09D-4F25-B795-E24C294A924C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr_firmware:3.210.0001.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D785EA-C49B-41F4-8810-EEDEF861F54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:smartpss_firmware:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3E1C39-FF68-4116-94D5-E9CB1E36FB98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr7216a-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF491B9-DB4C-41D7-ADC7-D5E45CC3724E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96456",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/null_ku7/status/835649185168838657",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/null_ku7/status/835649185168838657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically logs in as admin. This allows sniffing sensitive information identified in CVE-2017-6341 without prior knowledge of the password. This is a different vulnerability than CVE-2013-6117."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Dahua DHI-HCVR7216A-S3 con NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29 y SmartPSS Software 1.16.1 2017-01-19 envian el MD5 o SHA-256 Admin Hash durante el inicio de sesión automático de SmartPSS, esto podría permitir a atacantes remotos obtener información sensible rastreando la red y llevando a cabo un ataque a tablas rainbow, una vulnerabilidad diferente a CVE-2013-6117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:camera_firmware:2.400.0000.28.r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6BC430-D09D-4F25-B795-E24C294A924C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr_firmware:3.210.0001.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D785EA-C49B-41F4-8810-EEDEF861F54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:smartpss_firmware:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3E1C39-FF68-4116-94D5-E9CB1E36FB98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr7216a-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF491B9-DB4C-41D7-ADC7-D5E45CC3724E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96454",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the corresponding password, a different vulnerability than CVE-2013-6117."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de los dispostivos Dahua DHI-HCVR7216A-S3 con NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29 y SmartPSS Software 1.16.1 2017-01-19 permite a atacantes remotos obtener acceso al inicio de sesión aprovechando el conocimiento de MD5 Admin Hash sin tener conocimiento de la contraseña correspondiente, una vulnerabilidad diferente a CVE-2013-6117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:camera_firmware:2.400.0000.28.r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6BC430-D09D-4F25-B795-E24C294A924C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr_firmware:3.210.0001.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D785EA-C49B-41F4-8810-EEDEF861F54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:smartpss_firmware:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3E1C39-FF68-4116-94D5-E9CB1E36FB98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr7216a-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF491B9-DB4C-41D7-ADC7-D5E45CC3724E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96449",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XEE en Grails PDF Plugin 0.6 permite a atacantes remotos leer archivos arbitrarios a través de un documento XML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grails:pdf_plugin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A193B51-F51C-4C54-B633-E70D39FF8BFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96446",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ambionics.io/blog/grails-pdf-plugin-xxe",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ambionics.io/blog/grails-pdf-plugin-xxe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en un sitio de asignación de memoria u_read_undo ocurriría para vim en versiones anteriores al parche 8.0.0377, si no valida correctamente los valores de longitud del árbol de decisión, al leer un archivo desecho corrompido, lo que puede resultar en un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0376",
            "matchCriteriaId" : "83EDAAC0-DAD8-494F-98A8-522604E389D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/LAgsTcdSfNA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/LAgsTcdSfNA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-27T07:59:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en un sitio de asignación de memoria unserialize_uep ocurriría para vim en versiones anteriores al parche 8.0.0378, si no valida correctamente los valores de longitud del arból de decisión, al leer un archivo desecho corrompido, lo que puede resultar en un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0377",
            "matchCriteriaId" : "0A066C34-AF73-49F8-B14B-F34813E36107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2682",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-02-27T11:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request."
      }, {
        "lang" : "es",
        "value" : "La aplicación web de Siemens RUGGEDCOM NMS < V1.2 en puertos 8080/TCP y 8081/TCP podría permitir a un atacante remoto realizar un ataque CSRF, que potencialmente permite a un atacante ejecutar operaciones administrativas, siempre que el usuario objetivo tenga una sesión activa y se induzca a desencadenar una respuesta maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:ruggedcom_network_management_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "6D72B13C-17A8-4530-970F-2BDB7F4B455C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96458",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037958",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-059-01",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-059-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2683",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-02-27T11:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions."
      }, {
        "lang" : "es",
        "value" : "Un usuario no privilegiado de la aplicación web de Siemens RUGGEDCOM NMS < V1.2 en puertos 8080/TCP y 8081/TCP podría realizar un ataque de XSS resultando potencialmente en la obtención de permisos administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:ruggedcom_network_management_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "6D72B13C-17A8-4530-970F-2BDB7F4B455C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96455",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037958",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-059-01",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-059-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-28T18:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función ModifiablePixelBuffer::fillRect en TigerVNC en versiones anteriores a 1.7.1 permite a servidores remotos ejecutar código arbitrario a través de un mensaje RRE con un subrectangulo fuera de los límites del marco del búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "990779CD-71C1-4725-A6AF-C1CE09DDE0DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0630.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/22/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95789",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720ba",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0630.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720ba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5884",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-02-28T18:59:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile."
      }, {
        "lang" : "es",
        "value" : "gtk-vnc en versiones anteriores a 0.7.0 no comprueba adecuadamente los límites de azulejos que contienen sub rectángulo, lo que permite a servidores remotos ejecutar código arbitrario a través de las coordenadas src x, y en un azulejo (1) rre, (2) hextile o (3) copyrect manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-118"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk-vnc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.0",
            "matchCriteriaId" : "2DD352B4-191D-4FB8-A325-D085B29F3810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/03/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/05/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96016",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2258",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778048",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://git.gnome.org/browse/gtk-vnc/commit/?id=ea0386933214c9178aaea9f2f85049ea3fa3e14a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/05/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://git.gnome.org/browse/gtk-vnc/commit/?id=ea0386933214c9178aaea9f2f85049ea3fa3e14a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5885",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-02-28T18:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en las funciones (1) vnc_connection_server_message y (2) vnc_color_map_set en gtk-vnc en versiones anteriores a 0.7.0 permiten a servidores remotos provocar una denegación de servicio (caída) o la posibilidad de ejecutar código arbitrario a través de vectores implicando SetColorMapEntries, lo que desencadena un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk-vnc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.0",
            "matchCriteriaId" : "2DD352B4-191D-4FB8-A325-D085B29F3810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/03/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/05/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96016",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2258",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778050",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/gtk-vnc/commit/?id=c8583fd3783c5b811590fcb7bae4ce6e7344963e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/05/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/gtk-vnc/commit/?id=c8583fd3783c5b811590fcb7bae4ce6e7344963e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-02-28T18:59:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el añadido Chorus2 2.4.2 para Kodi permite a atacantes remotos leer archivos arbitrarios a través de un %2E%2E%252e (punto punto barra codificado) en la ruta de la imagen, según lo demostrado por image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kodi:kodi:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE532A2-ABFA-4CA9-9DAD-560942F62154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41312/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41312/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5682",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-02-28T19:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges."
      }, {
        "lang" : "es",
        "value" : "Intel PSET Application Install wrapper de Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer y Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library y Intel Threading Building Blocks en versiones anteriores a 2017 Update 2 permite a un atacante iniciar un proceso con privilegios escalados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:advisor:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E6F5FC-D325-4C8C-82E9-82B5FFCEB083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91AFB020-6F26-4D0D-A373-5E6341975421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:data_analytics_acceleration_library:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40F7BDC-1317-480B-9B23-1F13758543D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:inspector:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9644872-437C-4AD5-9D7C-811E527CC13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:integrated_performance_primitives:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67785D4-D084-4C3E-81E6-B6C5BD110885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:math_kernel_library:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B94882E-342F-4D87-A0D2-6F0C9282B096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:mpi_library:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B60FA44-7160-4D1A-98AE-744FC2C91B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:parallel_studio_xe:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DFA92D-02DD-4623-A7A5-B7780CE24996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:system_studio:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1314F593-5448-4458-A7FF-A479909C0147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:threading_building_blocks:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096729CA-6729-480D-BEDD-B294DCB3B789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:trace_analyzer_and_collector:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D61D38-EC35-4C15-996C-28484709A42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:vtune_amplifier:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A8F80A-95C3-44A1-BB71-8E1A3581B8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96482",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value."
      }, {
        "lang" : "es",
        "value" : "libjasper/include/jasper/jas_math.h en JasPer 1.900.17 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores que implican desplazamiento a la izquierda de un valor negativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54EFC18-A00F-4D1D-B1EC-6A8F20085795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en libjasper/jpc/jpc_dec.c en JasPer 1.900.17 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54EFC18-A00F-4D1D-B1EC-6A8F20085795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value."
      }, {
        "lang" : "es",
        "value" : "libjasper/jpc/jpc_dec.c en JasPer 1.900.17 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores que implican desplazamiento a la izquierda de un valor negativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54EFC18-A00F-4D1D-B1EC-6A8F20085795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en libjasper/jpc/jpc_tsfb.c en JasPer 1.900.17 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54EFC18-A00F-4D1D-B1EC-6A8F20085795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value."
      }, {
        "lang" : "es",
        "value" : "libjasper/jp2/jp2_dec.c en JasPer 1.900.17 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores que implican desplazamiento a la izquierda de un valor negativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54EFC18-A00F-4D1D-B1EC-6A8F20085795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función dec_clnpass en libjasper/jpc/jpc_t1dec.c en JasPer 1.900.27 permite a atacantes remotos provocar una denegación de servicio (escritura de memoria invalida y caída) o posiblemente tener otro impacto no especificado través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E1FD20-D299-4773-87A6-55BDC91A1B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-write-in-dec_clnpass-jpc_t1dec-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-write-in-dec_clnpass-jpc_t1dec-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función jpc_undo_roi en libjasper/jpc/jpc_dec.c en JasPer 1.900.27 permite a atacantes remotos provocar una denegación de servicio (escritura de memoria invalida y caída) o posiblemente tener otro impacto no especificado través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54EFC18-A00F-4D1D-B1EC-6A8F20085795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-read-in-jpc_undo_roi-jpc_dec-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-read-in-jpc_undo_roi-jpc_dec-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función splt_cue_export_to_file en cue.c en libmp3splt 0.9.2 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero null y caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmp3splt_project:libmp3splt:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B51E61-EB45-4D08-8943-9A7CA31F2056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/29/mp3splt-null-pointer-dereference-in-splt_cue_export_to_file-cue-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/29/mp3splt-null-pointer-dereference-in-splt_cue_export_to_file-cue-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (invalid free and crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función free_options en options_manager.c en mp3splt 2.6.2 permite a atacantes remotos provocar una denegación de servicio (liberación no valida y caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3splt_project:mp3splt:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D60C444-10AE-4E61-BA18-901DFC03BD64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/29/mp3splt-invalid-free-in-free_options-options_manager-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/29/mp3splt-invalid-free-in-free_options-options_manager-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.  NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability."
      }, {
        "lang" : "es",
        "value" : "La función free_options en options_manager.c en mp3splt 2.6.2 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un archivo manipulado. NOTA: esto normalmente no tiene ningún riesgo; este bloqueo de este programa de lineas de comandos no tiene consecuencias adicionales para la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3splt_project:mp3splt:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D60C444-10AE-4E61-BA18-901DFC03BD64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/mp3splt-null-pointer-dereference-in-free_options-options_manager-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/mp3splt-null-pointer-dereference-in-free_options-options_manager-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfPage::GetInheritedKeyFromObject function en base/PdfVariant.cpp en PoDoFo 0.9.4 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-infinite-loop-in-podofopdfpagegetinheritedkeyfromobject-pdfpage-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-infinite-loop-in-podofopdfpagegetinheritedkeyfromobject-pdfpage-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:00.993",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en base/PdfParser.cpp en PoDoFo 0.9.4 permite a atacantes remotos tener un impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-signed-integer-overflow-in-pdfparser-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-signed-integer-overflow-in-pdfparser-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "base/PdfOutputStream.cpp en PoDoFo 0.9.4 permite a atacantes una denegación de servicio (referencia al puntero null y caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-pdfoutputstream-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-pdfoutputstream-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfParser::ReadXRefSubsection en PdfParser.cpp en PoDoFo 0.9.4 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero null) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-podofopdfparserreadxrefsubsection-pdfparser-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-podofopdfparserreadxrefsubsection-pdfparser-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5886",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-01T15:59:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función PoDoFo::PdfTokenizer::GetNextToken en PdfTokenizer.cpp en PoDoFo 0.9.4 permite a atacantes remotos tener un impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/03/podofo-heap-based-buffer-overflow-in-podofopdftokenizergetnexttoken-pdftokenizer-cpp/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/03/podofo-heap-based-buffer-overflow-in-podofopdftokenizergetnexttoken-pdftokenizer-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.117",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función __zzip_get32 en fetch.c en zziplib versiones 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo ZIP manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D4D396-32C4-4801-AC28-B7164A68EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AACFE-3609-40B8-962B-7C11A9F11504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7254FC-BFC6-4383-84F7-A3097E351584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB2A794-A1FB-448C-9664-C1DCE869A7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A2898-F630-481C-8BE9-EBD508E76BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA32F25B-8687-4307-890C-0714EF19ADA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.167",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función __zzip_get64 en fetch.c en zziplib versiones 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 permite atacantes remotos provocar una denegación de servicio (caída) a través de un archivo ZIP manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D4D396-32C4-4801-AC28-B7164A68EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AACFE-3609-40B8-962B-7C11A9F11504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7254FC-BFC6-4383-84F7-A3097E351584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB2A794-A1FB-448C-9664-C1DCE869A7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A2898-F630-481C-8BE9-EBD508E76BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA32F25B-8687-4307-890C-0714EF19ADA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get64-fetch-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get64-fetch-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.197",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función zzip_mem_entry_extra_block en memdisk.c en zziplib versiones 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 permite a atacantes remotos provocar una denegación de servicio (caída) en un archivo ZIP manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D4D396-32C4-4801-AC28-B7164A68EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AACFE-3609-40B8-962B-7C11A9F11504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7254FC-BFC6-4383-84F7-A3097E351584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB2A794-A1FB-448C-9664-C1DCE869A7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A2898-F630-481C-8BE9-EBD508E76BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA32F25B-8687-4307-890C-0714EF19ADA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.227",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "La función zzip_mem_entry_extra_block en memdisk.c en zziplib 0.13.62 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no válida y caída) a través de un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-invalid-memory-read-in-zzip_mem_entry_extra_block-memdisk-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-invalid-memory-read-in-zzip_mem_entry_extra_block-memdisk-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.273",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "La función zzip_mem_entry_new en memdisk.c en zziplib 0.13.62 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída) a través de un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-out-of-bounds-read-in-zzip_mem_entry_new-memdisk-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-out-of-bounds-read-in-zzip_mem_entry_new-memdisk-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.290",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "La función prescan_entry en fseeko.c en zziplib 0.13.62 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-prescan_entry-fseeko-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-prescan_entry-fseeko-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.337",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "La función zzip_mem_entry_new en memdisk.c en zziplib 0.13.62 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-zzip_mem_entry_new-memdisk-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-zzip_mem_entry_new-memdisk-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T15:59:01.353",
      "lastModified" : "2025-07-10T15:44:54.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file."
      }, {
        "lang" : "es",
        "value" : "seeko.c en zziplib 0.13.62 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y caída) a través de un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdraheim:zziplib:0.13.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BAF233-EBA3-47A9-8ABF-8C96A5241675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-assertion-failure-in-seeko-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/zziplib-assertion-failure-in-seeko-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2685",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-03-01T17:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack."
      }, {
        "lang" : "es",
        "value" : "Siemens SenUMERIK entegrate Operate Clients en versiones entre 2.0.3.00.016 (incluida) y 2.0.6 (excluida) y en versiones entre 3.0.4.00.032 (incluida) y 3.0.6 (excluida) contienen una vulnerabilidad que podría permitir a un atacante leer y manipular datos en sesiones TLS cuando interpreta un ataque a man-in-the-middle (MITM)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_integrate_access_mymachine\\/ethernet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD7B773-A606-404F-A7A2-C78650CD2571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_integrate_operate_client:2.0.3.00.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679949AD-5709-4393-8E3C-3370C8450EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_integrate_operate_client:3.0.4.00.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3D02F5-B1DE-457F-9F55-F1B8B8A2A20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_operate:4.5:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BE905B-E687-4CE4-9BF3-89B670D8EE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_operate:4.7:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "80D41351-0B3D-40E3-90C0-B7D30934F47C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96519",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-934525.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-934525.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T20:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La utilidad de administración NetApp ONTAP Select Deploy 2.0 hasta la versión 2.2.1 podrían permitir a atacantes remotos obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DB8A48-C0F7-4190-A016-41AFE6DE6202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7334D06-F741-4776-82C5-9E9C1A473D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843F7429-92B2-48FD-96B7-63D5CCBF36DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EEAE74-626F-407A-92C7-FF1073E023A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96522",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170228-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170228-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T20:59:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls."
      }, {
        "lang" : "es",
        "value" : "El subsistema LLC en el kernel de Linux en versiones anteriores a 4.9.13 no garantiza que exista cierto destructor en las circunstancias requeridas, lo que permite a usuarios locales provocar una denegación de servicio (BUG_ON) o posiblemente tener otro impacto no especificado a través de llamadas al sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.12",
            "matchCriteriaId" : "BDE2E7F2-434A-4283-B0EA-25ACBCF7C4BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b74d439e1697110c5e5c600643e823eb1dd0762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8b74d439e1697110c5e5c600643e823eb1dd0762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b74d439e1697110c5e5c600643e823eb1dd0762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8b74d439e1697110c5e5c600643e823eb1dd0762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T20:59:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en net/packet/af_packet.c en el kernel de Linux en versiones anteriores a 4.9.13 permite a usuarios locales provocar una denegación de servicio (uso después de liberación de memoria) o la posibilidad de tener otro impacto no especificado a través de una aplicación multihilo que realizada llamadas al sistema PACKET_FANOUT setsockopt."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.2.87",
            "matchCriteriaId" : "52076DAA-CEE4-431B-95EC-97F8B00BC606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "3116EF11-56E7-4D40-9FD0-6109280D0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.71",
            "matchCriteriaId" : "714101BC-5F00-4257-A007-F21269AE5AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.42",
            "matchCriteriaId" : "AF664753-05DC-4D55-B3B2-0DABB1E59297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "F778EE12-46E8-450C-B643-B41A1B2A8A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.52",
            "matchCriteriaId" : "87F9D322-C14F-4E7A-BA48-87789CAC2DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.13",
            "matchCriteriaId" : "B5EFB5B2-2EEC-4D04-925A-77FBE0E5E76C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96508",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d199fab63c11998a602205f7ee7ff7c05c97164b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d199fab63c11998a602205f7ee7ff7c05c97164b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T20:59:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission."
      }, {
        "lang" : "es",
        "value" : "La función ip_cmsg_recv_checksum en net/ipv4/ip_sockglue.c en el kernel de Linux en versiones anteriores a 4.10.1 tiene expectativas incorrectas sobre la disposición de datos skb, lo que permite a usuarios locales provocar una denegación de servicio (sobre lectura de búfer) o la posibilidad de tener otro impacto no especificado a través de llamadas al sistema manipulado, como lo demuestra el uso de indicadores MSG_MORE en conjunción con la trasmisión del bucle de retorno UDP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.4.52",
            "matchCriteriaId" : "9B08392D-7EBB-471B-958A-0E2AF5FD9D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.13",
            "matchCriteriaId" : "B5EFB5B2-2EEC-4D04-925A-77FBE0E5E76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "C442A2B0-4C57-4B2D-A025-A36289D8D797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96487",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427984",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T20:59:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices."
      }, {
        "lang" : "es",
        "value" : "La función hashben_delete en net/irda/irqueue.c en el kernel de Linux en versiones anteriores a 4.9.13 administra incorrectamente el soltado del bloqueo, lo que permite a usuarios locales provocar una denegación de servicio (punto muerto) a través de operaciones manipuladas en los dispositivos IrDA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.12",
            "matchCriteriaId" : "BDE2E7F2-434A-4283-B0EA-25ACBCF7C4BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c03b862b12f980456f9de92db6d508a4999b788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4c03b862b12f980456f9de92db6d508a4999b788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c03b862b12f980456f9de92db6d508a4999b788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4c03b862b12f980456f9de92db6d508a4999b788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-01T20:59:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service (invalid unlock and double free) via a multithreaded application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986."
      }, {
        "lang" : "es",
        "value" : "net/sctp/socket.c en el kernel de Linux en versiones hasta 4.10.1 no restringe adecuadamente las operaciones de despegue de la asociación durante varios estados de espera, lo que permite a usuarios locales provocar una denegación de servicio (desbloqueo no válido y liberación doble) a través de una aplicación multihilo. NOTA: esta vulnerabilidad existe debido a una solución incorrecta de CVE-2017-5986."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "2C6A54A5-8237-4993-BE98-3D8F721AB77D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dfcb9f4f99f1e9a49e43398a7bfbf56927544af1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/27/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/dfcb9f4f99f1e9a49e43398a7bfbf56927544af1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dfcb9f4f99f1e9a49e43398a7bfbf56927544af1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/dfcb9f4f99f1e9a49e43398a7bfbf56927544af1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3826",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-01T21:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NGA) with software before 1.1(1a) could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service (DoS) condition. The vulnerability is due to incomplete validation of SCTP packets being monitored on the NGA data ports. An attacker could exploit this vulnerability by sending malformed SCTP packets on a network that is monitored by an NGA data port. SCTP packets addressed to the IP address of the NGA itself will not trigger this vulnerability. An exploit could allow the attacker to cause the appliance to become unresponsive or reload, causing a DoS condition. User interaction could be needed to recover the device using the reboot command from the CLI. The following Cisco NetFlow Generation Appliances are vulnerable: NGA 3140, NGA 3240, NGA 3340. Cisco Bug IDs: CSCvc83320."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el decodificador Stream Control Transmission Protocol (SCTP) de Cisco NetFlow Generation Appliance (NGA) con software anterior a 1.1 (1a) podría permitir a un atacante remoto no autenticado hacer que el dispositivo se bloquee o se vuelva a cargar inesperadamente, provocando una condición de denegación de servicio (DoS). La vulnerabilidad se debe a validación incompleta de los paquetes SCTP que se supervisan en los puertos de datos NGA. Un atacante podría explotar esta vulnerabilidad enviando paquetes SCTP malformados en una red supervisada por un puerto de datos NGA. Los paquetes SCTP dirigidos a la dirección IP de la propia NGA no desencadenarán esta vulnerabilidad. Un exploit podría permitir al atacante hacer que el aparato no respondiera o se volviera a cargar, provocando una condición DoS. La interacción del usuario podría ser necesaria para recuperar el dispositivo utilizando el comando de reinicio de la CLI. Los siguientes Cisco NetFlow Generation Appliances son vulnerables: NGA 3140, NGA 3240, NGA 3340. ID de error de Cisco: CSCvc83320."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:netflow_generation_appliance_software:1.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4284E54-D684-4F20-9194-ACC518ED8DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:netflow_generation_appliance_software:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2DEB44-C42A-458D-A928-E0EDCCAEC2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:netflow_generation_appliance_software:1.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B80540-0E68-40F9-9F5C-72A2EADBAA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:netflow_generation_appliance_software:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F4FE56-E356-4D43-8A86-9B7275E31EB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:netflow_generation_appliance_3140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E638C77E-687D-46CE-8292-21A9DD4A0840"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:netflow_generation_appliance_3240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C943D689-DE63-48CD-9525-6F5ED76D7232"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:netflow_generation_appliance_3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC74CF47-E40B-4AE4-8AEC-C84A06EA452A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96509",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037938",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-nga",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-nga",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T01:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file."
      }, {
        "lang" : "es",
        "value" : "La función dex_parse_debug_item en libr/bin/p/bin_dex.c en radare2 1.2.1 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer y caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un archivo DEX manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2BB74D-D369-43D4-9EDB-3F0DD27091B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/radare/radare2/commit/ad55822430a03fe075221b543efb434567e9e431",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6836",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/radare/radare2/commit/ad55822430a03fe075221b543efb434567e9e431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T01:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file."
      }, {
        "lang" : "es",
        "value" : "La función dex_loadcode en libr/bin/p/bin_dex.c en radare2 1.2.1 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de un archivo DEX manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2BB74D-D369-43D4-9EDB-3F0DD27091B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/radare/radare2/commit/ead645853a63bf83d8386702cad0cf23b31d7eeb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6857",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/radare/radare2/commit/ead645853a63bf83d8386702cad0cf23b31d7eeb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T01:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DEX file."
      }, {
        "lang" : "es",
        "value" : "La función dex_parse_debug_item en libr/bin/p/bin_dex.c en radare2 1.2.1 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de la aplicación) a través de un archivo DEX manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2BB74D-D369-43D4-9EDB-3F0DD27091B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96523",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6872",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radareorg/radare2/commit/68338b71a563b24e62617bb629059adc0c94b230",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radareorg/radare2/commit/68338b71a563b24e62617bb629059adc0c94b230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"OpenID Connect Relying Party and OAuth 2.0 Resource Server\" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an \"OIDCUnAuthAction pass\" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic."
      }, {
        "lang" : "es",
        "value" : "El módulo \"OpenID Connect Relying Party and OAuth 2.0 Resource Server\" (también conocido como mod_auth_openidc) en versiones anteriores a 2.1.5 para el servidor HTTP de Apache no omite cabeceras OIDC_CLAIM_ y OIDCAuthNHeader en una configuración \"OIDCUnAuthAction pass\", lo que permite a atacantes remotos eludir la autenticación a través de tráfico HTTP manipulado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidc:mod_auth_openidc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "43366310-2BC3-4C85-8CF8-85E2AA63C95D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/issues/222",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/issues/222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en la función login_user en saslserv/main.c en saslserv/main.so en Atheme 7.2.7 permite a atacantes remotos no autenticados consumir memoria y provocar una denegación de servicio. Esto se soluciona en la versión 7.2.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atheme:atheme:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B575565-065F-439D-8A41-33F4ECD387E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/atheme/atheme/pull/539",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/atheme/atheme/releases/tag/v7.2.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/atheme/atheme/pull/539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/atheme/atheme/releases/tag/v7.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d. The vulnerability exists due to insufficient filtration of user-supplied data passed to the \"whatanime.ga-master/index.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en whatanime.ga en versiones anteriores a c334dd8499a681587dd4199e90b0aa0eba814c1d. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL \"whatanime.ga-master/index.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soruly:whatanime.ga:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "34c7155c6fd82b7746fe8b56eb89bf278553c421",
            "matchCriteriaId" : "ABABCDB9-4D09-4BD6-8F27-4F300A88FDA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/soruly/whatanime.ga/commit/c334dd8499a681587dd4199e90b0aa0eba814c1d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/soruly/whatanime.ga/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/soruly/whatanime.ga/commit/c334dd8499a681587dd4199e90b0aa0eba814c1d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/soruly/whatanime.ga/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the \"admin_console/web/tools/SimpleJWPlayer.php\" URL, the \"admin_console/web/tools/AkamaiBroadcaster.php\" URL, the \"admin_console/web/tools/bigRedButton.php\" URL, and the \"admin_console/web/tools/bigRedButtonPtsPoc.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el servidor Lynx-12.11.0 de Kaltura. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL \"admin_console/web/tools/SimpleJWPlayer.php\", la URL \"admin_console/web/tools/AkamaiBroadcaster.php\", la URL \"admin_console/web/tools/bigRedButton.php\" y la URL \"admin_console/web/tools/bigRedButtonPtsPoc.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaltura:kaltura_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "lynx-12.11.0",
            "matchCriteriaId" : "9736FE19-44FC-41B0-8C43-290446A87E2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kaltura/server/issues/5300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kaltura/server/issues/5300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the \"server-Lynx-12.11.0/admin_console/web/tools/XmlJWPlayer.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el servidor Lynx-12.11.0 de Kaltura. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL \"server-Lynx-12.11.0/admin_console/web/tools/XmlJWPlayer.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaltura:kaltura_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "lynx-12.11.0",
            "matchCriteriaId" : "9736FE19-44FC-41B0-8C43-290446A87E2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kaltura/server/issues/5303",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kaltura/server/issues/5303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in NagVis 1.9b12. The vulnerability exists due to insufficient filtration of user-supplied data passed to the \"nagvis-master/share/userfiles/gadgets/std_table.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en NagVis 1.9b12. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL \"nagvis-master/share/userfiles/gadgets/std_table.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagvis:nagvis:1.9:b12:*:*:*:*:*:*",
            "matchCriteriaId" : "152DFC44-9BEA-426B-9B5A-C735E9352893"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/NagVis/nagvis/issues/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/NagVis/nagvis/issues/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to the \"openemr-master/gacl/admin/object_search.php\" URL (section_value; src_form). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en OpenEMR 5.0.1-dev. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL \"openemr-master/gacl/admin/object_search.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:5.0.1:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "8368097F-B0B9-4AF6-9D02-E44D6C610AEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96539",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96576",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/openemr/openemr/issues/498",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/openemr/openemr/issues/498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en HashOver 2.0. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL 'hashover/secuencia de comandoss/widget-output.php'. Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashover_project:hashover:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC124C78-5834-4883-B651-406FF118009F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jacobwb/hashover-next/issues/152",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jacobwb/hashover-next/issues/152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the \"webpagetest-master/www/compare-cf.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en WPO-Foundation WebPageTest 3.0. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario pasados a la URL \"webpagetest-master/www/compare-cf.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/820",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several *-sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en FlightAirMap v1.0-beta.10. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario en múltiples parámetros pasados a varias páginas *-sub-menu.php. Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flightairmap:flightairmap:1.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "1D486A54-A2FD-4A88-91FE-0071A0433A4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Ysurac/FlightAirMap/issues/275",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Ysurac/FlightAirMap/issues/275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 7.7.2 y NetBackup Appliance en versiones anteriores a 2.7.2. Puede ocurrir la ejecución remota privilegiada de comandos en NetBackup Server y Client (en el servidor o en un cliente conectado)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:access:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.1",
            "matchCriteriaId" : "6B8C34AB-3048-4751-8D54-3EA11B7BC205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "08683091-39C7-434B-9DD7-1D4EE92A8AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "5E2B28AB-46AF-4AAF-8F64-49FADA1E8211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 7.7.2 y NetBackup Appliance en versiones anteriores a 2.7.2. Puede ocurrir la ejecución privilegiada de comandos en NetBackup Server y Client (en el sistema local)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:access:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.1",
            "matchCriteriaId" : "6B8C34AB-3048-4751-8D54-3EA11B7BC205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "08683091-39C7-434B-9DD7-1D4EE92A8AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "5E2B28AB-46AF-4AAF-8F64-49FADA1E8211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 8.0 y NetBackup Appliance en versiones anteriores a 3.0. Puede ocurrir ejecución local arbitraria de comandos cuando se utiliza bpcd y bpnbat."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup 8.0 y versiones anteriores y NetBackup Appliance 3.0 y versiones anteriores. Puede ocurrir la denegación de servicio que afecte al servidor NetBackup."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 8.0 y NetBackup Appliance en versiones anteriores a 3.0. NetBackup Cloud Storage Service utiliza un nombre de usuario y contraseña codificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue10",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 7.7 y NetBackup Appliance en versiones anteriores a 2.7. Existen archivos de registro de escritura universal, permitiendo la destrucción o suplantación de datos de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1.2",
            "matchCriteriaId" : "3C62C533-7F68-42EB-B10F-7758EEBB4731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1.2",
            "matchCriteriaId" : "09A5F0E3-7DE8-49B2-9836-CF442BBD5E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue9",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup 8.0 y versiones anteriores y NetBackup Appliance 3.0 y versiones anteriores. La seguridad basada en nombre de host está abierta a la suplantación de DNS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue7",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with \"../\" substrings, can occur."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 7.7.2 y NetBackup Appliance en versiones anteriores a 2.7.2. Puede ocurrir la ejecución arbitraria de comandos privilegiados, usando el escape del directorio de lista blanca con subcadenas \"../\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:access:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.1",
            "matchCriteriaId" : "6B8C34AB-3048-4751-8D54-3EA11B7BC205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "08683091-39C7-434B-9DD7-1D4EE92A8AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "5E2B28AB-46AF-4AAF-8F64-49FADA1E8211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:01.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup en versiones anteriores a 7.7.2 y NetBackup Appliance en versiones anteriores a 2.7.2. Puede ocurrir la ejecución remota privilegiada de comandos en NetBackup Server y Client (en el servidor o en un cliente conectado)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "08683091-39C7-434B-9DD7-1D4EE92A8AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "5E2B28AB-46AF-4AAF-8F64-49FADA1E8211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:01.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup 8.0 y versiones anteriores y NetBackup Appliance 3.0 y versiones anteriores. Puede ocurrir una condición de carrera de escalada de privilegios locales en pbx_exchange cuando un usuario local se conecta a un socket antes de que se aseguren los permisos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:01.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Veritas NetBackup 8.0 y versiones anteriores y NetBackup Appliance 3.0 y versiones anteriores. Interfaces CORBA no autenticadas permiten acceso inapropiado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue11",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:01.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file."
      }, {
        "lang" : "es",
        "value" : "kpac/script.cpp en KDE kio en versiones anteriores a 5.32 y kdelibs en versiones anteriores a 4.14.30 llama a la función PAC FindProxyForURL con una URL https completa (incluyendo potencialmente credenciales de autenticación básicas, una cadena de consulta o PATH_INFO), lo que permite a atacantes remotos obtener información sensible a través de un archivo PAC manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdelibs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.29",
            "matchCriteriaId" : "D25FB8B5-DAB7-4E0F-A943-C2527F2CF791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.31",
            "matchCriteriaId" : "E1908C05-D44E-49AB-B7C7-F750D90FB070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kde.org/info/security/advisory-20170228-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kde.org/info/security/advisory-20170228-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-02T06:59:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"OpenID Connect Relying Party and OAuth 2.0 Resource Server\" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an \"AuthType oauth20\" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic."
      }, {
        "lang" : "es",
        "value" : "El módulo \"OpenID Connect Relying Party and OAuth 2.0 Resource Server\" (también conocido como mod_auth_openidc) en versiones anteriores a 2.1.6 para el servidor HTTP de Apache no omite cabeceras OIDC_CLAIM_ y OIDCAuthNHeader en una configuración \"AuthType oauth20\", lo que permite a atacantes remotos eludir autenticación a través de tráfico HTTP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidc:mod_auth_openidc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.5",
            "matchCriteriaId" : "0658E71C-DBA4-445D-A78B-51CC87B4F876"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/commit/21e3728a825c41ab41efa75e664108051bb9665e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/commit/21e3728a825c41ab41efa75e664108051bb9665e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5228",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance."
      }, {
        "lang" : "es",
        "value" : "Todas las ediciones de Rapid7 Metasploit anteriores a la versión 4.13.0-2017020701 contienen una vulnerabilidad de salto de directorio en la función Meterpreter stdapi Dir.download(). Utilizando una construcción de Meterpreter especialmente manipulada, es posible escribir a un directorio arbitrario en la consola Metasploit con los permisos de la instancia Metasploit en ejecución."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.19",
            "matchCriteriaId" : "F0B5DBE6-9BC1-47DD-9F27-AAED6E2E9501"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96954",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5229",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance."
      }, {
        "lang" : "es",
        "value" : "Todas las ediciones de Rapid7 Metasploit anteriores a la versión 4.13.0-2017020701 contienen una vulnerabilidad de salto de directorio en la función Meterpreter extapi Clipboard.parse_dump(). Utilizando una construcción de Meterpreter especialmente manipulada, es posible escribir a un directorio arbitrario en la consola Metasploit con los permisos de la instancia Metasploit en ejecución."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.19",
            "matchCriteriaId" : "F0B5DBE6-9BC1-47DD-9F27-AAED6E2E9501"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96954",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5230",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk."
      }, {
        "lang" : "es",
        "value" : "El almacén de claves de Java en todas las versiones y ediciones de Nexpose anterior a versión 6.4.50 de Rapid7, es cifrado con una contraseña estática de “r@p1d7k3y5t0r3” que no es modificable por el usuario. El almacén de claves provee almacenamiento para las credenciales de análisis guardadas en una lugar de otro modo seguro en el disco."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:nexpose:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.23",
            "matchCriteriaId" : "F0982147-6D64-497D-938C-754B9BEEDC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96956",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://help.rapid7.com/nexpose/en-us/release-notes/#6.4.50",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://help.rapid7.com/nexpose/en-us/release-notes/#6.4.50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5231",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance."
      }, {
        "lang" : "es",
        "value" : "Todas las ediciones de Rapid7 Metasploit anteriores a la versión 4.13.0-2017020701 contienen una vulnerabilidad de salto de directorio en la función Meterpreter stdapi CommandDispatcher.cmd_download(). Utilizando una construcción de Meterpreter especialmente manipulada, es posible escribir a un directorio arbitrario en la consola Metasploit con los permisos de la instancia Metasploit en ejecución."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.19",
            "matchCriteriaId" : "F0B5DBE6-9BC1-47DD-9F27-AAED6E2E9501"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96954",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5232",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer."
      }, {
        "lang" : "es",
        "value" : "Todas las ediciones de los instaladores de Rapid7 Nexpose anteriores a la versión 6.4.24 contienen una vulnerabilidad de precarga de DLL, donde es posible que el instalador cargue una DLL maliciosa ubicada en el directorio de trabajo actual del instalador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:nexpose:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.23",
            "matchCriteriaId" : "F0982147-6D64-497D-938C-754B9BEEDC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96956",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5233",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer."
      }, {
        "lang" : "es",
        "value" : "Instaladores de Rapid7 AppSpider Pro anteriores a la versión 6.14.053 contienen una vulnerabilidad de precarga de DLL, donde es posible que el instalador cargue una DLL maliciosa ubicada en el directorio de trabajo actual del instalador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.14.053",
            "matchCriteriaId" : "6A5B1C6C-9FFB-4782-8FC8-AF1155F894F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96957",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5234",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer."
      }, {
        "lang" : "es",
        "value" : "Instaladores de Rapid7 Insight Collector anteriores a la versión 1.0.16 contienen una vulnerabilidad de precarga de DLL, donde es posible que el instalador cargue una DLL maliciosa ubicada en el directorio de trabajo actual del instalador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insight_collector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.15",
            "matchCriteriaId" : "2400F268-A740-4D95-8EF4-13A7C0CFB3FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96545",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5235",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-02T20:59:00.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer."
      }, {
        "lang" : "es",
        "value" : "Instaladores de Rapid7 Metasploit Pro anteriores a la versión 4.13.0-2017022101 contienen una vulnerabilidad de precarga de DLL, donde es posible que el instalador cargue una DLL maliciosa ubicada en el directorio de trabajo actual del instalador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.0-2017012501",
            "matchCriteriaId" : "F6B8AF9C-AA58-448A-8264-DCC4049B8E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96548",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6102",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-03-02T22:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent XSS in wordpress plugin rockhoist-badges v1.2.2."
      }, {
        "lang" : "es",
        "value" : "XSS persistente en el plugin rockhoist-badges v1.2.2 de wordpress."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockhoist_badges_project:rockhoist_badges_plugin:1.2.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2CCB6E5C-F6E6-42DF-B22F-D20AC15E4FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96533",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=176",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8763",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6103",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-03-02T22:59:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS persistente en el plugin AnyVar v0.1.1 de Wordpress."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anyvar_project:anyvar:0.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2909E2AF-7060-4EBB-AE8C-182DAB8360BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96532",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=177",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6104",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-03-02T22:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida remota de archivos en el plugin Mobile App Native 3.0 de Wordpress."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_mobile_app_native_project:zen_mobile_app_native:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "979D06D2-71BA-466E-9723-FDAE417D5E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96547",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=178",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8743",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2290",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2017-03-03T15:59:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next \"mco puppet\" run. Puppet Enterprise users are not affected. This is resolved in mcollective-puppet-agent 1.12.1."
      }, {
        "lang" : "es",
        "value" : "En instalaciones de Windows del plugin mcollective-puppet-agent, versión 1.12.0, un usuario no administrador puede crear un ejecutable que será ejecutado con privilegios de administrador en la siguiente ejecución \"mco puppet\". Usuarios de Puppet Enterprise no están afectados. Esto está resuelto en mcollective-puppet-agent 1.12.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:mcollective-puppet-agent:1.12.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "4571FE0F-CE25-424E-B871-7342AC6CD9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96583",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2290",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick."
      }, {
        "lang" : "es",
        "value" : "La función nickcmp en Irssi en versiones anteriores a 0.8.21 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un mensaje sin un nick."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.21",
            "matchCriteriaId" : "58A0BEDE-EE65-44C2-A298-0F3B49C6D30E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad después de liberación en Irssi en versiones anteriores a 0.8.21 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un mensaje de nick no válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.21",
            "matchCriteriaId" : "58A0BEDE-EE65-44C2-A298-0F3B49C6D30E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code."
      }, {
        "lang" : "es",
        "value" : "Irssi 0.8.17 en versiones anteriores a 0.8.21 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída) a través de un código de color ANSI x8 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.8.17",
            "versionEndExcluding" : "0.8.21",
            "matchCriteriaId" : "63C5B709-2924-4543-B247-29B64ECA721B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8."
      }, {
        "lang" : "es",
        "value" : "Irssi 0.8.18 en versiones anteriores a 0.8.21 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída) a través de vectores que involucran cadenas que no son UTF8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.8.18",
            "versionEndExcluding" : "0.8.21",
            "matchCriteriaId" : "BD925A2B-A107-4215-AE96-4E43AE7CA219"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5356",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-03T15:59:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (])."
      }, {
        "lang" : "es",
        "value" : "Irssi en versiones anteriores a 0.8.21 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída) a través de una cadena que contiene una secuencia de formato (%[) sin un cierre de paréntesis (])."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.21",
            "matchCriteriaId" : "58A0BEDE-EE65-44C2-A298-0F3B49C6D30E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/8",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/13/2",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96581",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/12/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección abierta en el componente lmadmin en Flexera FlexNet Publisher (también conocido como Flex License Manager) 11.14.1 y versiones anteriores, como se utiliza en Citrix License Server para Windows y el Citrix License Server VPX, permite a atacantes remotos redirigir a usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexerasoftware:flexnet_publisher:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.14.1",
            "matchCriteriaId" : "27B21AC4-B047-470E-BE67-A503B6E935A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96028",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX219885",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX219885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en cgiemail y cgiecho permite a atacantes remotos ejecutar código arbitrario a través de especificadores de cadena de formato en un archivo plantilla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cgiecho:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEF91FA-A18E-4A08-8DF9-4C7ECB67EA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cgiemail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAE56DA-A9BE-496F-8285-5BA41D6F27F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección abierta en cgiemail y cgiecho permite a atacantes remotos redirigir a usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing a través de vectores que involucran el parámetro (1) success o (2) failure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:00.993",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location."
      }, {
        "lang" : "es",
        "value" : "cgiemail y cgiecho permiten a atacantes remotos inyectar cabeceras HTTP a través de un carácter de nueva línea en la ubicación de redireccionamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cgiecho:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEF91FA-A18E-4A08-8DF9-4C7ECB67EA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cgiemail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAE56DA-A9BE-496F-8285-5BA41D6F27F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en cgiemail y cgiecho permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro addendum."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cgiecho:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEF91FA-A18E-4A08-8DF9-4C7ECB67EA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cgiemail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAE56DA-A9BE-496F-8285-5BA41D6F27F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/28/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver en versiones anteriores a 4.0.1 permite a atacantes remotos ejecutar código arbitrario a través de datos serializados en las cookies relacionadas con las secuencias de comandos de entrega."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "A2AFEB95-E6A1-402D-972F-7E8D38B0494C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de reparación de sesión en el mecanismo de contraseña olvidada en Revive Adserver en versiones anteriores a 4.0.1, cuando se establece una nueva contraseña, permite a atacantes remotos secuestrar sesiones web a través de la ID de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "A2AFEB95-E6A1-402D-972F-7E8D38B0494C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Revive Adserver en versiones anteriores a 4.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de la dirección de email del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "A2AFEB95-E6A1-402D-972F-7E8D38B0494C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en la generación de código de invocación para zonas intersticiales en Revive Adserver en versiones anteriores a 4.0.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "A2AFEB95-E6A1-402D-972F-7E8D38B0494C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2017-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función parse_dict_node en bplist.c en libplist permite a atacantes provocar una denegación de servicio (lectura de memoria dinámica fuera de límites y caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A2E6FE-8C00-4F39-953F-2E8ED3FBF332"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/89",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero."
      }, {
        "lang" : "es",
        "value" : "libplist permite a atacantes provocar una denegación de servicio (gran asignación de memoria y caída) a través de vectores que involucran un tamaño de desplazamiento de cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A2E6FE-8C00-4F39-953F-2E8ED3FBF332"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free."
      }, {
        "lang" : "es",
        "value" : "La función plist_free_data en plist.c en libplist permite a atacantes provocar una denegación de servicio (caída) a través de vectores que involucran un nodo de entero que es tratado como una PLIST_KEY y desencadena entonces una liberación no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A2E6FE-8C00-4F39-953F-2E8ED3FBF332"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/86",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de reestablecimiento de contraseña en ownCloud Server en versiones anteriores a 8.1.11, 8.2.x en versiones anteriores a 8.2.9, 9.0.x en versiones anteriores a 9.0.7 y 9.1.x en versiones anteriores a 9.1.3 envía diferentes mensajes de error dependiendo de si el nombre de usuario es válido, lo que permite a atacantes remotos enumerar nombres de usuario a través de un gran número de intentos de reestablecimiento de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1.10",
            "matchCriteriaId" : "4E2EB67F-2620-434E-9AB5-45293C019F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C35E22D-36A5-495B-8611-7C8B70064A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBDBB20-B519-4683-BB16-63A25AE53D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AD973F-F06D-46C9-85EB-3521899A257B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8098FF20-D5EA-4F72-A837-0CE7B9761974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0930807A-BA26-4AFF-9B52-EC2EAF5A456D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81CD71B-7D08-485B-9042-D4CE523FEE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC26723-FE1F-4C1A-AF9C-901A1A7A4DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25185B4F-623B-45F5-97C3-A520C96B6CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F31B84D-7A81-426C-8C91-BF86087ED657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CF3111-74DA-4644-9318-4D5CC6FBD1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52C26E1-C1A1-4834-84C5-C4403E1734D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377EE3A2-8105-4448-AB9E-C703513CA6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF1A811-E3EF-4A4A-8F7A-C3E5DBC24159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEB63FC-724C-4FA5-A998-4549A2460A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E74BD31-5BD3-40FE-93BA-CAE23DA681B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D138CF-6623-4E1E-97DC-6DD96FE62C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578DA4AF-C61B-4796-B5BF-89701D3FB8CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96425",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La característica de autocompletar en el cuadro de diálogo del E-Mail en ownCloud Server en versiones anteriores a 8.1.11, 8.2.x en versiones anteriores a 8.2.9, 9.0.x en versiones anteriores a 9.0.7 y 9.1.x en versiones anteriores a 9.1.3 permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1.10",
            "matchCriteriaId" : "4E2EB67F-2620-434E-9AB5-45293C019F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E9C5BC-A6BA-4919-9934-BFAA915CC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AF5397-3B98-431B-B235-424A3B6BEFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C35E22D-36A5-495B-8611-7C8B70064A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBDBB20-B519-4683-BB16-63A25AE53D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AD973F-F06D-46C9-85EB-3521899A257B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8098FF20-D5EA-4F72-A837-0CE7B9761974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0930807A-BA26-4AFF-9B52-EC2EAF5A456D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81CD71B-7D08-485B-9042-D4CE523FEE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC26723-FE1F-4C1A-AF9C-901A1A7A4DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25185B4F-623B-45F5-97C3-A520C96B6CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F31B84D-7A81-426C-8C91-BF86087ED657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CF3111-74DA-4644-9318-4D5CC6FBD1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52C26E1-C1A1-4834-84C5-C4403E1734D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377EE3A2-8105-4448-AB9E-C703513CA6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF1A811-E3EF-4A4A-8F7A-C3E5DBC24159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEB63FC-724C-4FA5-A998-4549A2460A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E74BD31-5BD3-40FE-93BA-CAE23DA681B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D138CF-6623-4E1E-97DC-6DD96FE62C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578DA4AF-C61B-4796-B5BF-89701D3FB8CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96426",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-03T15:59:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service (server hang and logfile flooding) via a one bit BMP file."
      }, {
        "lang" : "es",
        "value" : "ownCloud Server en versiones anteriores a 8.1.11, 8.2.x en versiones anteriores a 8.2.9, 9.0.x en versiones anteriores a 9.0.7 y 9.1.x en versiones anteriores a 9.1.3 permite a usuarios remotos autenticados provocar una denegación de servicio (cuelgue del servidor e inundación de archivos de registro) a través de un archivo BMP de un bit"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1.10",
            "matchCriteriaId" : "4E2EB67F-2620-434E-9AB5-45293C019F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E9C5BC-A6BA-4919-9934-BFAA915CC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AF5397-3B98-431B-B235-424A3B6BEFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C35E22D-36A5-495B-8611-7C8B70064A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBDBB20-B519-4683-BB16-63A25AE53D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AD973F-F06D-46C9-85EB-3521899A257B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8098FF20-D5EA-4F72-A837-0CE7B9761974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0930807A-BA26-4AFF-9B52-EC2EAF5A456D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81CD71B-7D08-485B-9042-D4CE523FEE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC26723-FE1F-4C1A-AF9C-901A1A7A4DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25185B4F-623B-45F5-97C3-A520C96B6CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F31B84D-7A81-426C-8C91-BF86087ED657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CF3111-74DA-4644-9318-4D5CC6FBD1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52C26E1-C1A1-4834-84C5-C4403E1734D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377EE3A2-8105-4448-AB9E-C703513CA6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF1A811-E3EF-4A4A-8F7A-C3E5DBC24159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEB63FC-724C-4FA5-A998-4549A2460A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E74BD31-5BD3-40FE-93BA-CAE23DA681B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D138CF-6623-4E1E-97DC-6DD96FE62C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578DA4AF-C61B-4796-B5BF-89701D3FB8CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96430",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-003",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito del archivo analizador Netscaler, desencadenado por un archivo de captura malformado. Esto fue abordado en wiretap/netscaler.c cambiando las restricciones en el tamaño de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12083",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=284ad58d288722a8725401967bff0c4455488f0c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=284ad58d288722a8725401967bff0c4455488f0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay una bloqueo del archivo analizador NetScaler, desencadenada por un archivo de captura malformado. Esto fue abordado en wiretap/netscaler.c validando la relación entre páginas y registros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96569",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13430",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9f3bc84b7e7e435c50b8b68f0fc526d0f5676cbf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9f3bc84b7e7e435c50b8b68f0fc526d0f5676cbf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bloqueo del disector LDSS, desencadenado por inyección de paquetes o un archivo de captura malformado. Esto fue abordado en epan/dissectors/packet-ldss.c asegurando que la memoria es asignada para una cierta estructura de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96577",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13346",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f753c127082d5e28abf482d6d175cbfee6661f7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f753c127082d5e28abf482d6d175cbfee6661f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito de IAX2, desencadenado por inyección de paquetes o un archivo de captura malformado. Esto fue abordado en epan/dissectors/packet-iax2.c constriñendo el retraso de paquetes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96563",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13432",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0b89174ef4c531a1917437fff586fe525ee7bf2d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0b89174ef4c531a1917437fff586fe525ee7bf2d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito WSP, desencadenado por inyección de paquetes o un archivo de captura malformado. Esto fue abordado en epan/dissectors/packet-wsp.c validando la longitud de la capacidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96564",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13348",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=62afef41277dfac37f515207ca73d33306e3302b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=62afef41277dfac37f515207ca73d33306e3302b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito del disector RTMPT, desencadenado por inyección de paquetes o un archivo de captura malformado. Esto fue abordado en epan/dissectors/packet-rtmpt.c incrementando adecuadamente un cierto valor de secuencia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96571",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13347",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b3a0909beff8963b390034c594e0b6be6a4e531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b3a0909beff8963b390034c594e0b6be6a4e531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bloqueo del analizador de archivos K12, desencadenado por un archivo de captura malformado. Esto fue abordado en wiretap/k12.c validando las relaciones entre longitudes y desplazamientos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96565",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13431",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7edc761a01cda8e1b37677f673985582330317d2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-09.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7edc761a01cda8e1b37677f673985582330317d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-04T03:59:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito del analizador de archivos NetScaler, desencadenado por un archivo de captura malformado. Esto fue abordado en wiretap/netscaler.c validando tamaños de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "6D169318-8BFB-4888-A742-750659350DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "BD2DA6B4-7778-453F-8E71-0C90B060CFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96566",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13429",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a998c9195f183d85f5b0bbeebba21a2d4d303d47",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a998c9195f183d85f5b0bbeebba21a2d4d303d47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad auto-update de Open Embedded Linux Entertainment Center (OpenELEC) versiones 6.0.3, 7.0.1 y 8.0.4, no utiliza conexiones cifradas ni actualizaciones firmadas. Un atacante de tipo man-in-the-middle podría manipular los paquetes de actualización para conseguir acceso root remotamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openelec:openelec:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858D757D-216F-4E16-80EA-5585AB91D4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openelec:openelec:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDC42C0-57BF-429C-B3A7-2D8FE67F262C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://tech.feedyourhead.at/content/openelec-cve-2017-6445-revisited",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://tech.feedyourhead.at/content/openelec-remote-code-execution-vulnerability-through-man-in-the-middle",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tech.feedyourhead.at/content/openelec-cve-2017-6445-revisited",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tech.feedyourhead.at/content/openelec-remote-code-execution-vulnerability-through-man-in-the-middle",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter)."
      }, {
        "lang" : "es",
        "value" : "paintballrefjosh/MaNGOSWebV4 en versiones anteriores a 4.0.8 es vulnerable a un XSS reflejado en install/index.php (parámetro step)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mangoswebv4_project:mangoswebv4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.8",
            "matchCriteriaId" : "C6931F29-FE51-4E52-9205-9FE8BEA2B011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96584",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter)."
      }, {
        "lang" : "es",
        "value" : "FenixHosting/fenix-open-source en versiones anteriores a 04-03-2017 es vulnerable a un XSS reflejado en forums/search.php (parámetro search-by-topic)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fenix_hosting:fenix-open-source:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-21",
            "matchCriteriaId" : "F3269DF3-E339-41DA-880B-7B2FC848B78F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FenixHosting/fenix-open-source/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FenixHosting/fenix-open-source/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter)."
      }, {
        "lang" : "es",
        "value" : "groovel/cmsgroovel en versiones anteriores a 3.3.7-beta es vulnerable a un XSS reflejado en commons/browser.php (parámetro path)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groovel_project:cmsgroovel:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.6",
            "matchCriteriaId" : "241FE44F-994A-48B9-BD69-3D5CAE1A3AD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/groovel/cmsgroovel/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/groovel/cmsgroovel/releases/tag/3.3.7-beta",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/groovel/cmsgroovel/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/groovel/cmsgroovel/releases/tag/3.3.7-beta",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en phpipam 1.2. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario a varias páginas (instrucciones en app/admin/instructions/preview.php; subnetId en app/admin/powerDNS/refresh-ptr-records.php). Un atacante podría ejecutar código HTML y scrip arbitrario en el navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "8C1A0507-AFF1-40E0-A9EE-8F90BFF51833"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/phpipam/phpipam/issues/992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/phpipam/phpipam/issues/992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.323",
      "lastModified" : "2023-11-07T02:49:56.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-6394.  Reason: This candidate is a duplicate of CVE-2017-6394.  Notes: All CVE users should reference CVE-2017-6394 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (lang_code in themes/*/admin/system_preferences/language_edit.tmpl.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en ATutor 2.2.2. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario a varias páginas (lang_code en themes/*/admen /system_preferences/language_edit.tmpl.php). Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "FF908CFF-8192-462B-8966-C6FA918166F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/atutor/ATutor/issues/129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/atutor/ATutor/issues/129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in INTER-Mediator 5.5. The vulnerabilities exist due to insufficient filtration of user-supplied data (c and cred) passed to the \"INTER-Mediator-master/Auth_Support/PasswordReset/resetpassword.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en TER-Mediator 5.5. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (c y cred) pasados a la URL \"en TER-Mediator-master/Auth_Support/PasswordReset/resetpassword.php\". Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter-mediator:inter-mediator:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "80FFF717-6C28-4B50-AC6D-926FE4C8D3D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/INTER-Mediator/INTER-Mediator/issues/772",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/INTER-Mediator/INTER-Mediator/issues/772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03. The vulnerability exists due to insufficient filtration of user-supplied data (errorMsg) passed to the \"php-calendar-master/error.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Un problema de XSS ha sido descubierto en php-calendar en versiones anteriores a 03-03-2017. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (errosMsg) pasados a la URL \"php-calendar-master/error.php\". Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-calendar:php-calendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2015-12-04",
            "matchCriteriaId" : "4018310C-D630-40FA-9851-EC6A4B85F2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jasonjoh/php-calendar/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jasonjoh/php-calendar/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) issue was discovered in reasoncms before 4.7.1. The vulnerability exists due to insufficient filtration of user-supplied data (nyroModalSel) passed to the \"reasoncms-master/www/nyroModal/demoSent.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Un problema de XSS ha sido descubierto en reasoncms en versiones anteriores a 4.7.1. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (nyroModalSel) pasados a la URL \"reasoncms-master/www/nyroModal/demoSent.php\". Un atacante podría ejecutar código HTML y scrip arbitrario en el navegador en un contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reasoncms:reasoncms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "BC459040-C1E9-40BE-B325-D2C9F88B8311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/reasoncms/reasoncms/issues/264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/reasoncms/reasoncms/releases/tag/v4.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/reasoncms/reasoncms/issues/264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/reasoncms/reasoncms/releases/tag/v4.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (state, element, id, tab, cid) passed to the \"EPESI-master/modules/Utils/RecordBrowser/favorites.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en EPESI 1.8.1.1. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (state, element, id, tab, cid) pasados a la URL \"EPESI-master/modules/Utils/RecordBrowser/favorites.php\". Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:1.8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D90A53-3894-49D2-BBD6-491BF63B9F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96586",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (visible, tab, cid) passed to the EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en EPESI 1.8.1.1. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (visible, tab, cid) pasados a la URL EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php. Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:1.8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D90A53-3894-49D2-BBD6-491BF63B9F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/166",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (element, state, cat, id, cid) passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en EPESI 1.8.1.1. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (element, state, cat, id, cid) pasados a la URL EPESI-master/modules/Utils/Watchdog/subscribe.php. Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:1.8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D90A53-3894-49D2-BBD6-491BF63B9F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/169",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (cid, value, element, mode, tab, form_name, id) passed to the EPESI-master/modules/Utils/RecordBrowser/grid.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en EPESI 1.8.1.1. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (cid, value, element, mode, tab, form_name, id) pasados a la URL EPESI-master/modules/Utils/RecordBrowser/grid.php. Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:1.8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D90A53-3894-49D2-BBD6-491BF63B9F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (tooltip_id, callback, args, cid) passed to the EPESI-master/modules/Utils/Tooltip/req.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de XSS han sido descubiertos en EPESI 1.8.1.1. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (tooltip_id, callback, args, cid) pasados a la URL EPESI-master/modules/Utils/Tooltip/req.php. Un atacante podría ejecutar código HTML y scrip arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:1.8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D90A53-3894-49D2-BBD6-491BF63B9F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/168",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T20:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL ha sido descubierta en adm_program/modules/dates/dates_function.php en Admidio 3.2.5. El parámetro POST dat_cat_id es concatenado en una consulta SQL sin ninguna entrada de validación/desinfección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admidio:admidio:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4AA60-7461-4123-900E-5F4EDE4B8937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/hamkovic/Admidio-3.2.5-SQLi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/hamkovic/Admidio-3.2.5-SQLi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-05T21:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS ha sido descubierta en Dotclear v2.11.2, afectando a admin/blogs.php y admin/users.php con los parámetros de ordenar por y orden."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF8D88-965B-4FC3-95E1-C2C3FA051A03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://dev.dotclear.org/2.0/changeset/1e44804e7c85b45f42245111c8c0de100a2ff6e3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dev.dotclear.org/2.0/changeset/1e44804e7c85b45f42245111c8c0de100a2ff6e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.433",
      "lastModified" : "2025-10-22T00:16:07.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077."
      }, {
        "lang" : "es",
        "value" : "Dnslookup.cgi en dispositivos NETGEAR DGN2200 con firmware hasta la versión 10.0.0.50 permite a usuarios remotos autenticados ejecutar comandos del SO arbitrarios a través de metacaracteres shell en el campo del nombre de host de una solicitud HTTP POST, una vulnerabilidad diferente a CVE-2017-6077."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "The impacted product is end-of-life and should be disconnected if still in use.",
      "cisaVulnerabilityName" : "NETGEAR DGN2200 Devices OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_series_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.0.50",
            "matchCriteriaId" : "6100E877-446F-4F6C-A8D9-2BC545C2D95A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C6E7F8-958F-4131-83CF-4473E0B0EB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BD93FF-D3F5-41D9-BB40-141E02CA3253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9566C3-855E-43B3-AB35-6BBCE8D9AA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE59214-C8A1-4337-A54C-E4E8C149B241"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96463",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41459/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41472/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42257/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41459/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41472/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42257/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6334",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885."
      }, {
        "lang" : "es",
        "value" : "El dispositivo WePresent WiPG-1500 con firmware 1.0.3.7 tiene una cuenta de fabricante que tiene un nombre de usuario / contraseña codificados. Una vez que el dispositivo está configurado en el modo DEBUG, un atacante puede conectarse al dispositivo usando el protocolo telnet e iniciar sesión en el dispositivo con la cuenta de fabricante codificada \"abarco\". Esta cuenta no está documentada, ni tampoco lo está la característica DEBUG o el uso de telnetd en puerto tcp/5885."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wepresent:wipg-1500_firmware:1.0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9667DDE-56BF-4D9D-89B3-BD1A833A66B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wepresent:wipg-1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400D4CC4-30BA-4705-A353-1C48BA1D5E51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96588",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.wepresentwifi.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41480/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.wepresentwifi.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41480/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka \"Service ready\") string."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en SysGauge 1.5.18. Una vulnerabilidad de desbordamiento de búfer en la verificación de la conexión SMTP conduce a ejecución de código arbitrario. El vector de ataque es un demonio SMTP manipulado que envía una larga cadena 220 (también conocida como \"Service ready\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:sysgauge:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB7C5D-BC14-4F5F-B682-F7595BE788BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41479/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo psd especialmente manipulado, podría conducir a una referencia de puntero NULL (por lo tanto, un DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CFF56F-ED8D-4546-AD6C-47F9CC215B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96594",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856882",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7f2dc7a1afc067d0c89f12c82bcdec0445fb1b94",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7f2dc7a1afc067d0c89f12c82bcdec0445fb1b94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en ImageMagick 6.9.7.. Archivos TGA incorrectos podrían desencadenar fallos de aserción, lo que conduciría a DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CFF56F-ED8D-4546-AD6C-47F9CC215B28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3808",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96591",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856878",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/65f75a32a93ae4044c528a987a68366ecd4b46b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/359",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/65f75a32a93ae4044c528a987a68366ecd4b46b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en Magick++ en ImageMagick 6.9.7. Un archivo especialmente manipulado que crea una excepción anidada podría conducir a una pérdida de memoria (en consecuencia, un DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CFF56F-ED8D-4546-AD6C-47F9CC215B28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3808",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96590",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856880",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3358f060fc182551822576b2c0a8850faab5d543",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=23&p=142634",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3358f060fc182551822576b2c0a8850faab5d543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=23&p=142634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo sun especialmente manipulado desencadena una sobre lectura de búfer basada en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CFF56F-ED8D-4546-AD6C-47F9CC215B28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3808",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96592",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856879",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3007531bfd326c5c1e29cd41d2cd80c166de8528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/375",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3007531bfd326c5c1e29cd41d2cd80c166de8528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo cxf especialmente manipulado podría conducir a una referencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CFF56F-ED8D-4546-AD6C-47F9CC215B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96589",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856881",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d31fec57e9dfb0516deead2053a856e3c71e9751",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/856881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d31fec57e9dfb0516deead2053a856e3c71e9751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS)."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo web especialmente manipulado podría conducir a una fuga de descriptor de archivo en libmagickcore (en consecuencia, un DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CFF56F-ED8D-4546-AD6C-47F9CC215B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96763",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/126c7c98ea788241922c30df4a5633ea692cf8df",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/126c7c98ea788241922c30df4a5633ea692cf8df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS."
      }, {
        "lang" : "es",
        "value" : "Interfaz web en qBittorrent en versiones anteriores a 3.3.11 no escapó de muchos valores, lo que podría conducir potencialmente a XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbittorrent:qbittorrent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.10",
            "matchCriteriaId" : "E5FA12FE-8F2A-4725-A5CB-2D6897FE6A61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.qbittorrent.org/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.qbittorrent.org/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T02:59:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking."
      }, {
        "lang" : "es",
        "value" : "Interfaz web en qBittorrent en versiones anteriores a 3.3.11 no estableció el encabezado X-Frame-Options, lo que podría conducir potencialmente a secuestro de clic."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbittorrent:qbittorrent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.10",
            "matchCriteriaId" : "E5FA12FE-8F2A-4725-A5CB-2D6897FE6A61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qbittorrent/qBittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.qbittorrent.org/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/qbittorrent/qBittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.qbittorrent.org/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T06:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element."
      }, {
        "lang" : "es",
        "value" : "Hay una XSS en SilverStripe CMS en versiones anteriores a 3.4.4 y 3.5.x en versiones anteriores a 3.5.2. El vector de ataque es un nombre de página. Un ejemplo de carga útil es un controlador de eventos JavaScript manipulado en un elemento SVG malformado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.3",
            "matchCriteriaId" : "AF444DF6-EA4D-42B9-B295-D307F5F63851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C6FFB1E-4D80-4CB6-AA2E-1C56C86624EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886ED224-9F57-4C6A-B0B9-D6C1FEDC93AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96572",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T06:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de CSRF en el router wireless D-Link DI-524 con firmware 9.01 permiten a atacantes remotos (1) cambiar la contraseña de administrador, (2) reiniciar el dispositivo o (3) posiblemente tener otro impacto no especificado a través de peticiones manipuladas a programas CGI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:di-524_firmware:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F1E5E-479E-4FBF-9EF8-26B6A77AAD18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:di-524:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AA1B80-0CBA-4AFC-8F55-71B3C26CFA88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/70",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96475",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Product", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T06:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not AES) instead of MCRYPT_RIJNDAEL_128 (real AES) could help an attacker to create unknown havoc in the remote system."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en sysPass 2.x en versiones anteriores a 2.1, en el que un algoritmo nunca fue suficientemente revisado por criptógrafos. El hecho de que inc/SP/Core/Crypt.class esté usando la función MCRYPT_RIJNDAEL_256() (la versión de bloque de 256 bits de Rijndael, no AES) en lugar de MCRYPT_RIJNDAEL_128 (real AES) podría ayudar a un atacante a crear estragos desconocidos en el sistema remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syspass:syspass:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B10861-9CA4-4BD0-8B7E-6823ED41205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96562",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017020196",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nuxsmin/sysPass/commit/a0e2c485e53b370a7cc6d833e192c3c5bfd70e1f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nuxsmin/sysPass/releases/tag/2.1.0.17022601",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017020196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nuxsmin/sysPass/commit/a0e2c485e53b370a7cc6d833e192c3c5bfd70e1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nuxsmin/sysPass/releases/tag/2.1.0.17022601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-06T06:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de CSRF en dispositivos D-Link DSL-2730U C1 IN_1.00 permite a atacantes remotos cambiar la configuración del DNS o firewall o cualquier contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dsl-2730u_firmware:in_1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8834750-FB07-42F4-9BF7-73164FF059B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dsl-2730u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EAA6ED-2686-4C92-A438-C58AFF75CC50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41478/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-07T08:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en la función url_parse en url.c en Wget hasta la versión 1.19.1 permite a atacantes remotos inyectar encabezados HTTP arbitrarios a través de secuencias CRLF en el subcomponente del host de una URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.1",
            "matchCriteriaId" : "BB992E4D-6D7A-421F-BC30-123E4ADD2D82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3159",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-03-07T15:59:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws."
      }, {
        "lang" : "es",
        "value" : "El componente camel-snakeyaml de Apache Camel es vulnerable a la vulnerabilidad de la deserialización de objetos Java. La deserialización de datos no confiables puede conducir a a fallos de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.14.4",
            "matchCriteriaId" : "6F420434-9902-458F-9FA2-73B35B8BEC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.17.0",
            "versionEndIncluding" : "2.17.4",
            "matchCriteriaId" : "0A1ADD7D-D527-4E9B-BBF0-28E89C8C98A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.18.0",
            "versionEndIncluding" : "2.18.1",
            "matchCriteriaId" : "6B74904D-64EE-4703-9FA6-EF1A1E4300E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc?version=1&modificationDate=1486565167000&api=v2",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/22/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96321",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0868",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc?version=1&modificationDate=1486565167000&api=v2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/22/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-07T16:59:01.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php (id parameter)."
      }, {
        "lang" : "es",
        "value" : "Smith0r/burgundy-cms en versiones anteriores a 2017-03-06 es vulnerable a XSS reflejado en admin/components/menu/views/menuitems.php (parámetro id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:burgundy-cms_project:burgundy-cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-20",
            "matchCriteriaId" : "E7F57582-EE0B-4D72-AA39-E6A08FE2C35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Smith0r/burgundy-cms/issues/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Smith0r/burgundy-cms/issues/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1124",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-07T17:59:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Asset Management 7.1, 7.5 y 7.6 podría permitir a un atacante local obtener información sensible utilizando inyección de encabezado HTTP. Referencia de IBM #: 1998053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE721CF9-0F75-410B-A0F4-542041E25925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F261A268-7CD0-4328-8FBB-6AC40927DDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537C2C01-302E-48A2-9D50-C98AB6DBC466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C72B48-0C0F-4C90-A34B-528A5C67432C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F919705D-1394-4443-BE46-117F41A38D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59090B6A-09AE-4597-A60A-38C20AEA8F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B7BC68-4BCB-4E02-9F6D-0F99DBE87FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB99EBA-9725-4AB3-B816-5E00ADD7B7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A4B2CD-94F5-4449-8D1F-E69C3BA9929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F077F88-37D3-43FA-8EA6-A7FBD9869AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "741A13F4-DED0-43A2-8761-AAEAA0557B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8945E452-7D50-4C59-B8CE-8F1C756DB01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0632D29-B9B9-48E1-9762-A80B660CEBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41ED069C-0C1B-4D0E-A077-E095897003DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B590C42-21A1-4C62-8293-5A0D7AD628E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01604919-877F-4BDF-A137-C1A54E04BEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4577B9CD-45CA-4D01-B99D-7C39131C9C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB734EA-42EE-4BE0-934E-9E783BCDA31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16981EC3-76AE-441B-92C4-8DD6E6A1EA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36BB996E-17BC-4E35-97A0-142946F6B2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8B991C-2AE4-499D-B173-BF016D7F78F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A2AD3-94FB-4085-AE08-F7120EDDEFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2659CCD-6D04-4479-BA93-B906DC200424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47DB9B3-C8CD-45E9-9F53-617354F3A339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB19E05B-1E03-4230-BE05-21A989695749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B028794E-5FA0-4E3D-AC4D-A2826DD6282C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050D798F-F9CC-447B-94F4-81A893349695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948B518D-129E-42E7-B07F-5E1CA5056DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7038EBF6-E527-492B-A6A5-14F9A2F79BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29858665-FA68-4EDE-A0E7-6C79E8786871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B7CA3C-5F9B-45A3-80AC-F5A4E190CC37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998053",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96536",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1133",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-07T17:59:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar 7.2 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la interfaz web alterando así la funcionalidad intencionada conduciendo potencialmente a divulgación de credenciales en una sesión de confianza. Referencia de IBM #: 1999534."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A08699DC-4308-473C-9C49-8140A6B76708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8638E25-AFF7-4A5F-B3FE-5EEE3FA523A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BF0C5D-1E66-4457-9239-345D507AC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1F734E-4DB1-4349-B7C1-4EB1E10045CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB5CEFD-D54E-4E1E-9905-7022F1B7A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DB890A-9E3E-49BF-ADE8-DC118E504DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAAB1A-76E3-4B95-BD08-225A40B36D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5A4C20-55BB-40C3-BB85-61C74F246A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC674A8-D18C-403A-A01B-9EA1B7221056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C137959-2279-4459-8A10-43AFE09E2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D53329-E729-43C1-8C67-EFA4C3F7BFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4EDCA-DF37-4366-B944-F342FA55EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CA942D-70AD-4E0D-A28E-443FB7140A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8844C7-52E1-45A0-AC51-B6F6F14DE38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5382FD46-85CB-460F-8AA5-163EA26F34B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999534",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97239",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5681",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-03-07T18:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack."
      }, {
        "lang" : "es",
        "value" : "La implementación RSA-CRT en el motor Intel QuickAssist Technology (QAT) para OpenSSL versiones anteriores a 0.5.19 puede permitir a atacantes remotos obtener claves RSA privadas mediante la realización de un ataque de canal lateral Lenstra."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:quickassist_technology_engine:0.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2B9E98-E03D-4940-AFA0-41A8303510B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00071&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00071&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-07T19:59:00.143",
      "lastModified" : "2025-05-05T19:15:51.150",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php."
      }, {
        "lang" : "es",
        "value" : "andrzuk/FineCMS en versiones anteriores a 06-03-2017 es vulnerable a un XSS reflejado en index.php debido a una falta de validación el parámetro action en application/classes/application.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-10",
            "matchCriteriaId" : "8FE716BB-045B-4633-B4FF-D772590A16C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2636",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-07T22:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en drivers/tty/n_hdlc.c en el kernel de Linux hasta la versión 4.10.1 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (liberación doble) ajustando la línea de disciplina HDLC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.31",
            "versionEndExcluding" : "3.2.87",
            "matchCriteriaId" : "ED857DA5-6E36-4284-B8E7-6F7C9E91BA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "3116EF11-56E7-4D40-9FD0-6109280D0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.72",
            "matchCriteriaId" : "64196781-237D-42CA-BF7F-AD55DE12D30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.42",
            "matchCriteriaId" : "AF664753-05DC-4D55-B3B2-0DABB1E59297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.49",
            "matchCriteriaId" : "5AA77834-089F-4556-A00B-CAC1E08444BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "F3C1F309-D954-4BB7-AC02-30FC58BE76F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.54",
            "matchCriteriaId" : "75D08B52-EA80-4C04-A8D5-06E8048DD535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.15",
            "matchCriteriaId" : "4FC9045A-6BA5-46F6-86D8-06B6C1A213F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.3",
            "matchCriteriaId" : "36931271-7D26-46A8-A348-32F5994B508C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/07/6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96732",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0892",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0931",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0932",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1232",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1233",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1428319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/07/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1428319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T00:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en /sanadata/seo/index.asp en SANADATA SanaCMS 7.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro txtFrom."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sanadata:sanacms:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D376EEB4-C8D9-44F2-864B-051177483277"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://daimacn.com/?id=6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://daimacn.com/?id=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0306",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-34132950. References: N-CVE-2017-0306."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-34132950. Referencias: N-CVE-2017-0306."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0307",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33177895. References: N-CVE-2017-0307."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33177895. Referencias: N-CVE-2017-0307."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96809",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0333",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33899363. References: N-CVE-2017-0333."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33899363. Referencias: N-CVE-2017-0333."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0334",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33245849. References: N-CVE-2017-0334."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como High porque puede usarse para acceder a datos sensibles sin permiso explicito del usuario. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33245849. Referencias: N-CVE-2017-0334."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0335",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33043375. References: N-CVE-2017-0335."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33043375. Referencias: N-CVE-2017-0335."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0336",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33042679. References: N-CVE-2017-0336."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como High porque puede usarse para acceder a datos sensibles sin permiso explicito del usuario. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33042679. Referencias: N-CVE-2017-0336."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0337",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-31992762. References: N-CVE-2017-0337."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-31992762. Referencias: N-CVE-2017-0337."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0338",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-03-08T01:59:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33057977. References: N-CVE-2017-0338."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador GPU de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33057977. Referencias: N-CVE-2017-0338."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0452",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32873615. References: QC-CR#1093693."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de cámara de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Low porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-32873615. Referencias: QC-CR#1093693."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96836",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0453",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33979145. References: QC-CR#1105085."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-33979145. Referencias: QC-CR#1105085."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96735",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05af1f34723939f477cb7d25adb320d016d68513",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05af1f34723939f477cb7d25adb320d016d68513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0455",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitrary code within the context of the bootloader. This issue is rated as High because it is a general bypass for a bootloader level defense in depth or exploit mitigation technology. Product: Android. Versions: Kernel-3.18. Android ID: A-32370952. References: QC-CR#1082755."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el gestor de arranque de Qualcomm podría ayudar a una aplicación local maliciosa ejecutar código arbitrario en el contexto del gestor de arranque. Este problema está calificado como High porque es una elusión general para el nivel de defensa de un gestor de arranque de la tecnología depth o exploit migration. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32370952. Referencias: QC-CR#1082755."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96812",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=2c00928b4884fdb0b1661bcc530d7e68c9561a2f",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=2c00928b4884fdb0b1661bcc530d7e68c9561a2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0456",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33106520. References: QC-CR#1099598."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador IPA de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33106520. Referencias: QC-CR#1099598."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96947",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0457",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31695439. References: QC-CR#1086123, QC-CR#1100695."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador ADSPRPC de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-31695439. Referencias: QC-CR#1086123, QC-CR#1100695."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96803",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0458",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32588962. References: QC-CR#1089433."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de cámara de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32588962. Referencias: QC-CR#1089433."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96951",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=eba46cb98431ba1d7a6bd859f26f6ad03f1bf4d4",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=eba46cb98431ba1d7a6bd859f26f6ad03f1bf4d4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0459",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32644895. References: QC-CR#1091939."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32644895. Referencias: QC-CR#1091939."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96743",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?h=rel/msm-3.18&id=ffacf6e2dc41b6063c3564791ed7a2f903e7e3b7",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?h=rel/msm-3.18&id=ffacf6e2dc41b6063c3564791ed7a2f903e7e3b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0460",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31252965. References: QC-CR#1098801."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de redes de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-31252965. Referencias: QC-CR#1098801."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96948",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.codeaurora.org/out-memory-and-out-bounds-vulnerability-while-handling-netlink-messages-cve-2017-0460",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.codeaurora.org/out-memory-and-out-bounds-vulnerability-while-handling-netlink-messages-cve-2017-0460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0461",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32073794. References: QC-CR#1100132."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32073794. Referencias: QC-CR#1100132."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96743",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ce5d6f84420a2e6ca6aad6b866992970dd313a65",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ce5d6f84420a2e6ca6aad6b866992970dd313a65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0463",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:00.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33277611. References: QC-CR#1101792."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de redes de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33277611. Referencias: QC-CR#1101792."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96948",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=955bd7e7ac097bdffbadafab90e5378038fefeb2",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/96948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=955bd7e7ac097bdffbadafab90e5378038fefeb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0464",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32940193. References: QC-CR#1102593."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32940193. Referencias: QC-CR#1102593."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96735",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=051597a4fe19fd1292fb7ea2e627d12d1fd2934f",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=051597a4fe19fd1292fb7ea2e627d12d1fd2934f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0466",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33139050."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33139050."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0467",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33250932."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33250932."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0468",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33351708."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33351708."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0469",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33450635."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33450635."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0470",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33818500."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33818500."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0471",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33816782."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33816782."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0472",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33862021."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33862021."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0473",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33982658."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33982658."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0474",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32589224."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como Critical debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 7.0, 7.1.1. ID de Android: A-32589224."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0475",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31914369."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el verificador de recuperación podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-31914369."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96716",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0476",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33388925."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en AOSP Messaging podría habilitar a un atacante que utiliza un archivo especialmente manipulado a provocar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema está calificado como High debido a la posibilidad de ejecución remota de código en el contexto de un proceso no privilegiado. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33388925."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96756",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0477",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-33621647."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en libgdx podría habilitar a un atacante que utiliza un archivo especialmente manipulado a ejecutar código arbitrario en el contexto de un proceso no privilegiado. Este problema está calificado como High debido a la posibilidad de ejecución remota de código en una aplicación that uses this library. Producto: Android. Versiones: 7.1.1. ID de Android: A-33621647."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96760",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0478",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33718716."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en la librería Framesequence podría habilitar a un atacante que utiliza un archivo especialmente manipulado a ejecutar código arbitrario en el contexto de un proceso no privilegiado. Este problema está calificado como High debido a la posibilidad de ejecución remota de código en una aplicación que utiliza la librería Framesequence. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33718716."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96762",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://github.com/JiounDai/CVE-2017-0478",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/JiounDai/CVE-2017-0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0479",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32707507."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Audioserver podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto de un proceso privilegiado. Este problema está calificado como High porque podría ser utilizado para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32707507."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96958",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0480",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705429."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Audioserver podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto de un proceso privilegiado. Este problema está calificado como High porque podría ser utilizado para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32705429."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96958",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0481",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33434992."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en NFC podría permitir a un atacante inmediato ejecutar código arbitrario en el contexto de un proceso privilegiado. Este problema está calificado como High porque podría ser utilizado para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33434992."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96765",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96953",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0482",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33090864."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33090864."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0483",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33137046."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33137046."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0484",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33298089."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33298089."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0485",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33387820."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33387820."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0486",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33621215."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33621215."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0487",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33751193."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33751193."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0488",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097213."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como severidad High debido a la posibilidad de denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34097213."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0489",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33091107."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Location Manager podría permitir a una aplicación local maliciosa eludir las protecciones del sistema operativo para datos de localización. Este problema está calificado como Moderate porque puede ser usado para generar datos inexactos. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33091107."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96792",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0490",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33178389."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Wi-Fi podría permitir a una aplicación local maliciosa eliminar datos de usuario. Este problema está calificado como Moderate porque es una elusión local de los requisitos de interacción del usuario que normalmente requieren la iniciación del usuario o permiso del usuario. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33178389."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96790",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0491",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling applications or removing permissions from applications. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32553261."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios in Package Manager podría permitir a una aplicación local maliciosa prevenir a usuarios de desinstalar aplicaciones o retirar permisos de aplicaciones. Este problema está calificado como Moderate porque es una elusión local de los requisitos de interacción del usuario. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32553261."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96791",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0492",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 7.1.1. Android ID: A-30150688."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en la interfaz de usuario del sistema podría permitir a una aplicación local maliciosa crear una superposición de interfaz de usuario que cubra toda la pantalla. Este problema está calificado como Moderate porque es una elusión local de los requisitos de interacción del usuario que normalmente requieren la iniciación del usuario o permiso del usuario. Producto: Android. Versiones: 7.1.1. ID de Android: A-30150688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96794",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0494",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32764144."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en AOSP Messaging podría habilitar a un atacante remoto que utiliza una archivo especialmente manipulado acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque puede ser utilizado para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32764144."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96789",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0495",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33552073."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Mediaserver podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque puede ser utilizado para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33552073."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96796",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0496",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:01.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-31554152."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Setup Wizard podría permitir a una aplicación local maliciosa bloquear temporalmente el acceso a un dispositivo afectado. Este problema está calificado como Moderate porque puede requerir un reestablecimiento de fábrica para reparar el dispositivo. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1. ID de Android: A-31554152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96788",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0497",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33300701."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se cuelgue o reinicie. Este problema está calificado como Moderate porque requiere una configuración de dispositivo poco común. Producto: Android. Versiones: 7.0, 7.1.1. ID de Android: A-33300701."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96795",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0498",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-30352311."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Setup Wizard podría permitir a un atacante requerir inicio de sesión en la cuenta de Google tras un reestablecimiento de fábrica. Este problema está calificado como Moderate porque puede requerir un reestablecimiento de fábrica para reparar el dispositivo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-30352311."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96793",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0499",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as Low due to the possibility of a temporary denial of service. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32095713."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Audioserver podría permitir a una aplicación local maliciosa provocar un cuelgue de dispositivo o reinicio. Este problema está calificado como Low debido a la posibilidad de una denegación de servicio temporal. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32095713."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96806",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0500",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28429685. References: M-ALPS02710006."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-28429685. Referencias: M-ALPS02710006."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0501",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430015. References: M-ALPS02708983."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-28430015. Referencias: M-ALPS02708983."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0502",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430164. References: M-ALPS02710027."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-28430164. Referencias: M-ALPS02710027."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0503",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28449045. References: M-ALPS02710075."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-28449045. Referencias: M-ALPS02710075."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0504",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30074628. References: M-ALPS02829371."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-30074628. Referencias: M-ALPS02829371."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0505",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31822282. References: M-ALPS02992041."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-31822282. Referencias: M-ALPS02992041."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0506",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32276718. References: M-ALPS03006904."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en componentes de MediaTek, incluidos el controlador M4U, el controlador de sonido, el controlador de pantalla táctil, el controlador GPU y el controlador Command Queue, podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-32276718. Referencias: M-ALPS03006904."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0507",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31992382."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el subsistema ION del kernel podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-31992382."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96952",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0508",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33940449."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el subsistema ION del kernel podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33940449."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96952",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0509",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32124445. References: B-RB#110688."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-32124445. Referencias: B-RB#110688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/94943",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96797",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/94943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0510",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32402555."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el debugger FIQ del kernel podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como Critical debido a la posibilidad de que el dispositivo sea comprometido localmente de forma permanente, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-32402555."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96800",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://alephsecurity.com/2017/03/08/nexus9-fiq-debugger/",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://alephsecurity.com/2017/03/08/nexus9-fiq-debugger/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0516",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32341680. References: QC-CR#1096301."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador del hardware de entrada de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32341680. Referencias: QC-CR#1096301."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96802",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0517",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32372051. References: M-ALPS02973195."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador del hardware de sensor de MediaTek podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-32372051. Referencias: M-ALPS02973195."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96799",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0518",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32370896. References: QC-CR#1086530."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador del sensor de huellas dactilares de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32370896. Referencias: QC-CR#1086530."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96950",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0519",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32372915. References: QC-CR#1086530."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador del sensor de huellas dactilares de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32372915. Referencias: QC-CR#1086530."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96950",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0520",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31750232. References: QC-CR#1082636."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador del motor de criptografía de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-31750232. Referencias: QC-CR#1082636."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96804",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=eb2aad752c43f57e88ab9b0c3c5ee7b976ee31dd",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=eb2aad752c43f57e88ab9b0c3c5ee7b976ee31dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0521",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32919951. References: QC-CR#1097709."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de cámara de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32919951. Referencias: QC-CR#1097709."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96951",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=dbe4f26f200db10deaf38676b96d8738afcc10c8",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=dbe4f26f200db10deaf38676b96d8738afcc10c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0522",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process. Product: Android. Versions: N/A. Android ID: A-32916158. References: M-ALPS03032516."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en una APK de MediaTek podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto de un proceso privilegiado. Este problema está calificado como High debido a la posibilidad de ejecución de código arbitraria en un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-32916158. Referencias: M-ALPS03032516."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96798",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0523",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32835279. References: QC-CR#1096945."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-32835279. Referencias: QC-CR#1096945."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.18",
            "matchCriteriaId" : "28148BBF-B940-4BAF-ACE1-49ECCC34CE99"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96735",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5bb646471da76d3d5cd02cf3da7a03ce6e3cb582",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5bb646471da76d3d5cd02cf3da7a03ce6e3cb582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0524",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33002026."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de pantalla tactil de Synaptics podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33002026."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96808",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0525",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33139056. References: QC-CR#1097714."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador IPA de Qualcomm podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33139056. Referencias: QC-CR#1097714."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96947",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.codeaurora.org/use-after-free-vulnerability-during-ipa-routing-commit-logic-cve-2017-0525",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.codeaurora.org/use-after-free-vulnerability-during-ipa-routing-commit-logic-cve-2017-0525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0526",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33897738."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el HTC Sensor Hub Driver podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-33897738."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96949",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0527",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33899318."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el HTC Sensor Hub Driver podría permitir a una aplicación local maliciosa ejecutar código arbitrario en el contexto del kernel. Este problema está calificado como High porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33899318."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96949",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0528",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in the context of a privileged process. This issue is rated as High because it is a general bypass for a kernel level defense in depth or exploit mitigation technology. Product: Android. Versions: Kernel-3.18. Android ID: A-33351919."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el subsistema de seguridad del kernel podría permitir a una aplicación local maliciosa ejecutar código en el contexto de un proceso privilegiado. Este problema está calificado como High porque es una elusión general para un nivel de defensa de la tecnología depth o exploit migration. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33351919."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96807",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0529",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-28449427. References: M-ALPS02710042."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de MediaTek podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como High porque puede usarse para acceder a datos sensibles sin permiso explicito del usuario. Producto: Android. Versiones: N/A. ID de Android: A-28449427. Referencias: M-ALPS02710042."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96810",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0531",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32877245. References: QC-CR#1087469."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32877245. Referencias: QC-CR#1087469."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96743",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=530f3a0fd837ed105eddaf99810bc13d97dc4302",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=530f3a0fd837ed105eddaf99810bc13d97dc4302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0532",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:02.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32370398. References: M-ALPS03069985."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de codec de video de MediaTek podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-32370398. Referencias: M-ALPS03069985."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96834",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0533",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:03.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32509422. References: QC-CR#1088206."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de video de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32509422. Referencias: QC-CR#1088206."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96734",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3af5e89426f1c8d4e703d415eff5435b925649f",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3af5e89426f1c8d4e703d415eff5435b925649f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0534",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:03.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32508732. References: QC-CR#1088206."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de video de Qualcomm podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32508732. Referencias: QC-CR#1088206."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96734",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3af5e89426f1c8d4e703d415eff5435b925649f",
        "source" : "security@android.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3af5e89426f1c8d4e703d415eff5435b925649f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0535",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:03.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33547247."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de codec de sonido de HTC podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-33547247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96833",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0536",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:03.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33555878."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de pantalla táctil de Synaptics podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33555878."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96835",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0537",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-03-08T01:59:03.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-31614969."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de gadget USB del kernel podría permitir a una aplicación local maliciosa acceder a datos fuera de sus niveles de permiso. Este problema está calificado como Moderate porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-31614969."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96831",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5178",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-03-08T08:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials after installation, and changing the default credentials in the embedded Tableau Server is not documented. If Tableau Server is used with Windows integrated security (Active Directory), the software is not vulnerable. However, when Tableau Server is used with local authentication mode, the software is vulnerable. The default system account could be used to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Schneider Electric Tableau Server/Desktop Versions 7.0 a 10.1.3 en Wonderware Intelligence Versions 2014R3 y anteriores. Estas versiones contienen una cuenta de sistema que se instala por defecto. La cuenta de sistema por defecto es dificil de configurar sin credenciales por defecto tras la instalacción, y cambiar las credenciales por defecto en el Tableau Server incrustado no está documentado. Si Tableau Server se usa con la seguridad integrada de Windows (Active Directory), el software no es vulnerable. Sin embargo, cuando se utiliza Tableau Server con el modo de autenticación local, el software es vulnerable. La cuenta de sistema por defecto puede ser usada para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:tableau_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2353C750-C7CA-4105-9431-ADBF2679A6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:tableau_desktop:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E68F958-A9A7-458A-B5FD-751F573EB0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:tableau_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0E4513-4229-4E4B-946A-A706AAA7852F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:tableau_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D068243A-F7D5-4577-BD75-A072DE93878F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_intelligence:*:r3:*:*:*:*:*:*",
            "versionEndIncluding" : "2014",
            "matchCriteriaId" : "AFF847C6-9765-45C4-B914-85031B0214C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000119/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96721",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-066-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000119/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-066-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark) passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de XSS en webpagetest 3.0. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (benchmark) pasados a la URL webpagetest-master/www/benchmarks/view.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/833",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de XSS en webpagetest 3.0. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (pssid) pasados a la URL webpagetest-master/www/pss.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/835",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, url) passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples problemas de XSS en webpagetest 3.0. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (benchmark, url) pasados a la URL webpagetest-master/www/benchmarks/trendurl.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (url, pssid) passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples problemas de XSS en webpagetest 3.0. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (url, pssid) pasados a la URL webpagetest-master/www/weblite.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/838",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de XSS en webpagetest 3.0. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (bgcolor) pasados a la URL webpagetest-master/www/video/view.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/837",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de XSS en webpagetest 3.0. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (video) pasados a la URL webpagetest-master/www/speedindex/index.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/836",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples problemas de XSS en webpagetest 3.0. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (benchmark, time) pasados a la URL webpagetest-master/www/benchmarks/delta.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (configs) passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples problemas de XSS en webpagetest 3.0. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (configs) pasados a la URL webpagetest-master/www/benchmarks/compare.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T08:59:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples problemas de XSS en webpagetest 3.0. Las vulnerabilidades existen debido a filtración insuficiente de datos suministrados por el usuario (benchmark, time) pasados a la URL webpagetest-master/www/benchmarks/viewtest.php. Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpagetest_project:webpagetest:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F549C377-BC4B-4050-B3DF-D671A009556A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WPO-Foundation/webpagetest/issues/834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1150",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-08T19:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows (incluye DB2 Connect Server) 10.1, 10.5 y 11.1 podría permitir a un atacante autenticado con acceso especializado a tablas que no se debería permitir ver. Referencia IBM #: 1999515."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "2ECC11D3-7D77-4823-8B34-DD76E131D74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "E1D36687-32AF-43E2-97D9-FDF602F89318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DD80ADF4-35D3-4534-AACD-C00D80870723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8D274B00-C986-4A5D-94B2-79F4A613D951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "67A935CA-7AF6-4DA9-958E-DF4BC8E2B3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "A6B1A4DC-7062-4349-8D1A-3DE4B0E68FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "B3681F43-F23B-413D-B871-A40821F4988B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AE645126-ECD0-40FB-B2BA-5C9EF33EBE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*",
            "matchCriteriaId" : "9AFEA656-426C-4F18-9737-8985531C7A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "09B0333F-0E27-40B3-A0DC-618BEA97CBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC3F2DB-9AE2-4B11-A838-167E857D831D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "56AA8839-8926-40F1-BB9A-AB648DE7F272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "6ABE0FCB-8E32-4AB6-A8D8-79159FCDD889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5D92ADEC-6ED8-4B07-AB75-204AED0BF896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A2E6CBD8-7DD7-44F7-8F5D-D79074561AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "5273074C-9C2F-458C-9333-BD16B59008CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999515",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96597",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037946",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T23:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker to upload a crafted file that could be written to anywhere on the system. This could be used to subsequently gain elevated privileges on the system (e.g., after a reboot). This issue only affects installations on Windows."
      }, {
        "lang" : "es",
        "value" : "Tenable Nessus en versiones anteriores a 6.10.2 (tal como se utiliza sólo o en Tenable Appliance en versiones anteriores a 4.5.0) se encontró que contenía un fallo que permitía a un atacante remoto autenticado cargar un archivo manipulado que podía ser escrito en cualquier parte del sistema. Esto podría ser utilizado para obtener posteriormente privilegios elevados en el sistema (por ejemplo, después de un reinicio). Este problema solo afecta a instalaciones de Windows."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.10.1",
            "matchCriteriaId" : "7E181A92-DCD5-42B1-BA16-9744873AABD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DE9C00-60A6-4D42-8C3A-DED6E9D4EDF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tenable.com/security/tns-2017-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tenable.com/security/tns-2017-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-08T23:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter)."
      }, {
        "lang" : "es",
        "value" : "Gargaj/wuhu hasta la versión 08-03-2017 es vulnerable a un XSS reflejado en wuhu-master/www_admin/users.php (parámetro id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wuhu_project:wuhu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-03-08",
            "matchCriteriaId" : "8704D5E7-2B87-4B9C-9030-A62B5543EC61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Gargaj/wuhu/issues/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Gargaj/wuhu/issues/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488 allows remote attackers to inject arbitrary JavaScript by requesting filenames longer than 50 characters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XSS en httpd en routers ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300 y RT-AC750 con firmware en versiones anteriores a 3.0.0.4.380.7378; routers RT-AC68W con firmware en versiones anteriores a 3.0.0.4.380.7266 y routers RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1 y RT-N12+ Pro con firmware en versiones anteriores a 3.0.0.4.380.9488 permiten a atacantes remotos inyectar JavaScript arbitrario solicitando nombres de archivo de más de 50 caracteres."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac53_firmware:3.0.0.4.380.6038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9F3FC7-EC1A-4B6F-BDDB-F7D9300B7584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09FFA25-CEE0-4529-A4F3-A93D23CB26F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bierbaumer.net/security/asuswrt/#cross-site-scripting-xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41571/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bierbaumer.net/security/asuswrt/#cross-site-scripting-xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41571/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allow remote attackers to execute arbitrary code on the router via a long host or port in crafted multicast messages."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en networkmap en routers ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300 y RT-AC750 con firmware en versiones anteriores a 3.0.0.4.380.7378; routers RT-AC68W con firmware en versiones anteriores a 3.0.0.4.380.7266 y routers RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1 y RT-N12+ Pro con firmware en versiones anteriores a 3.0.0.4.380.9488 y Asuswrt-Merlin firmware en versiones anteriores a 380.65_2 permite a atacantes remotos ejecutar código arbitrario en el router a través de un host o puerto largo en mensajes de multidifusión manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac53_firmware:3.0.0.4.380.6038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9F3FC7-EC1A-4B6F-BDDB-F7D9300B7584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09FFA25-CEE0-4529-A4F3-A93D23CB26F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bierbaumer.net/security/asuswrt/#remote-code-execution",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41573/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bierbaumer.net/security/asuswrt/#remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41573/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allows remote attackers to steal any active admin session by sending cgi_logout and asusrouter-Windows-IFTTT-1.0 in certain HTTP headers."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuestro de sesión en httpd en routers ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300 y RT-AC750 con firmware en versiones anteriores a 3.0.0.4.380.7378; routers RT-AC68W con firmware en versiones anteriores a 3.0.0.4.380.7266 y routers RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1 y RT-N12+ Pro con firmware en versiones anteriores a 3.0.0.4.380.9488 y Asuswrt-Merlin firmware en versiones anteriores a 380.65_2 permite a atacantes remotos robar cualquier sesión de administrador activa enviando cgi_logout y asusrouter-Windows-IFTTT-1.0 en ciertos encabezados HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac53_firmware:3.0.0.4.380.6038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9F3FC7-EC1A-4B6F-BDDB-F7D9300B7584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09FFA25-CEE0-4529-A4F3-A93D23CB26F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bierbaumer.net/security/asuswrt/#session-stealing",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41572/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bierbaumer.net/security/asuswrt/#session-stealing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41572/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for telephone, Internet, and TV services."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 tienen un valor predeterminado insuficientemente grande para el tamaño máximo de la tabla de enrutamiento IPV6: puede ser llenado en minutos. Un atacante puede explotar este problema para hacer que el sistema afectado no responda, resultando en una condición de denegación de servicio para los servicios de teléfono, Internet y TV."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sagemcom:livebox_firmware:5.15.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449D1F92-0C67-48BA-AE29-48F0B4D0CD72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sagemcom:livebox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8578B-AEF6-492C-88FB-00D68C776B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41565/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=ShCs5_8mBlM&t=37s",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41565/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=ShCs5_8mBlM&t=37s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description parameter (aka \"Design Manager > Categories > Category Description\")."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en /admin/moduleinterface.php en CMS Made Simple 2.1.6 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro m1_description (vulnerabilidad también conocida como \"Design Manager > Categories > Category Description\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daimacn.com/?id=7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.daimacn.com/?id=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the \"adminpage > sitesetting > General Settings > globalmetadata\" field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en CMS Made Simple (CMSMS) 2.1.6 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del campo \"adminpage > sitesetting > General Settings > globalmetadata\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daimacn.com/?id=8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.daimacn.com/?id=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file."
      }, {
        "lang" : "es",
        "value" : "Dispositivos iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n son propensos a una vulnerabilidad de elusión de autenticación que permite a atacantes remotos ver y modificar la configuración administrativa del router leyendo el código fuente HTML del archivo password.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iball:ib-wra150n_firmware:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAD4C77-CAA7-4B35-AE3E-F41895D1B5A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iball:ib-wra150n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9AEFCD-95EC-4A36-B1F3-F5D91761F477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=8GZg1IuSfCs",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=8GZg1IuSfCs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Agora-Project 3.2.2 existe con un ataque index.php?disconnect=1&msgNotif[]=[XSS]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agora-project:agora-project:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D284FF-B55D-4FD3-BFFC-8A6CA61F642B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Agora-Project 3.2.2 existe con un ataque index.php?ctrl=misc&action=[XSS]&editObjId=[XSS]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agora-project:agora-project:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D284FF-B55D-4FD3-BFFC-8A6CA61F642B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Agora-Project 3.2.2 existe con un ataque index.php?ctrl=object&action=[XSS]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agora-project:agora-project:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D284FF-B55D-4FD3-BFFC-8A6CA61F642B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Agora-Project 3.2.2 existe con un ataque index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agora-project:agora-project:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D284FF-B55D-4FD3-BFFC-8A6CA61F642B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Parameter: id."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/campaign/view-campaign-list.php con el parámetro GET: id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/campaign/view-campaign.php con el parámetro GET: id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the GET Parameter: filter_list."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/lists/add_member.php con el parámetro GET: filter_list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/lists/edit-list.php con el parámetro GET: id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the GET Parameter: filter_list."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/lists/edit_member.php con el parámetro GET: filter_list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the GET Parameter: member_id."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/lists/edit_member.php con el parámetro GET: member_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/campaign/campaign-delete.php con el parámetro GET: id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the POST Parameter: list_id."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/subscriber_list.php con el parámetro POST: list_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T09:59:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the POST Parameter: subscriber_email."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL es explotable, con acceso admin de WordPress, en el plugin Mail Masta (también conocido como mail-masta) 1.0 para WordPress. Esto afecta a ./inc/subscriber_list.php con el parámetro POST: subscriber_email."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail-masta_project:mail-masta:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0A1D4EFB-901F-4059-AB9B-F47E629F079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T17:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new users, in addition to capture of sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06. El Dahua DVR Protocol, que opera en el puerto TCP 37777, es un protocolo binario sin cifrar. La realización de un ataque Man-in-the-Middle permite tanto la escucha como la inyección de paquetes, lo que permite la creación de nuevos usuarios con privilegios completos, además de capturar la información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr_firmware:3.210.0001.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D785EA-C49B-41F4-8810-EEDEF861F54B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr7216a-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF491B9-DB4C-41D7-ADC7-D5E45CC3724E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/null_ku7/status/839814344351240193",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/null_ku7/status/839814344351240193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T19:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi POST requests)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dnaTools dnaLIMS 4-2015s13. dnaLIMS es vulnerable a ejecución de comandos no autenticados a través de un shell web administrativo protegidode manera inapropiada (solicitudes POST cgi-bin/dna/sysAdmin.cgi)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnatools:dnalims:4-2015s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B352A81-A952-4699-A3ED-A7FDF1014997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T19:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dnaTools dnaLIMS 4-2015s13. dnaLIMS es vulnerable a un ataque de salto de directorio terminado en NUL permitiendo a un atacante no autenticado acceder a los archivos de sistema legibles por el usuario del servidor web (usando el parámetro seqID viewAppletFsa.cgi)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnatools:dnalims:4-2015s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B352A81-A952-4699-A3ED-A7FDF1014997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T19:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna/spool/.pfile file)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dnaTools dnaLIMS 4-2015s13. dnaLIMS está afectada por almacenamiento de contraseñas en texto plano (el archivo /home/dna/spool/.pfile)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnatools:dnalims:4-2015s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B352A81-A952-4699-A3ED-A7FDF1014997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T19:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dnaTools dnaLIMS 4-2015s13. dnaLIMS es vulnerable al secuestro de sesión adivinando el parámetro UID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnatools:dnalims:4-2015s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B352A81-A952-4699-A3ED-A7FDF1014997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41578/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T19:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document."
      }, {
        "lang" : "es",
        "value" : "EpicEditor hasta la versión 0.2.3 tiene una XSS debido a una configuración predeterminada marked.js insegura. Un ejemplo de vector de ataque es un elemento IMG manipulado en un documento HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epiceditor_project:epiceditor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.3",
            "matchCriteriaId" : "B829740D-CF91-46A1-ACC3-5383C3098915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bad.code.blog/2017/03/09/epiceditor-cross-site-scripting/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://bad.code.blog/2017/03/09/epiceditor-cross-site-scripting/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T19:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en network-manager-applet (también conocido como network-manager-gnome) en Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS y 16.10. Un atacante local podría usar este problema en la pantalla de inicio de sesión predeterminada de Ubuntu para acceder a archivos locales y ejecutar comandos arbitrarios como el usuario lightdm. La explotación requiere de acceso físico al ordenador bloqueado y la conexión Wi-Fi debe estar activada. Un punto de acceso que permita utilizar un certificado para iniciar sesión es también necesario, pero es fácil crear uno. Entonces, es posible abrir una ventana de nautilus y explorar directorios. Uno también puede abrir algunas aplicaciones tales como Firefox, que es útil para descargar binarios maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1037977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/1668321",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3217-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Fp2lwRVg0l0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/1668321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3217-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Fp2lwRVg0l0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-09T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de XSS en django-epiceditor 0.2.3 a través de contenido manipulado en un campo de formulario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:django-epiceditor_project:django-epiceditor:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5883967A-3A1E-4EDB-A46D-66A4D3A8AEBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T00:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'action_type' parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de XSS en bug_change_status_page.php en MantisBT en versiones anteriores a 1.3.7 y 2.x en versiones anteriores a 2.2.1 permite a atacantes remotos inyectar JavaScript arbitrario a través del parámetro 'action_type'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.7",
            "matchCriteriaId" : "95C3C8D0-0C1F-45E3-88E0-2EB50F46E3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "A657445A-49B4-46FB-ABF4-5672D4AE6CAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22486",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96818",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037978",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/a2d90ecabf3bcf3aa22ed9dbbecfd3d37902956f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/c272c3f65da9677e505ff692b1f1e476b3afa56e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/a2d90ecabf3bcf3aa22ed9dbbecfd3d37902956f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/c272c3f65da9677e505ff692b1f1e476b3afa56e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4960",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-03-10T01:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Cloud Foundry release v247 hasta la versión v252, UAA stand-alone release v3.9.0 hasta la versión v3.11.0 y UAA Bosh Release v21 hasta la versión v26. Hay un potencial para someter a los clientes UAA OAuth a un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784CA85B-F8C2-4F4C-833E-E1E768A8F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D7A7DE-516D-4C20-8307-BC6B65E379B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509D150A-5BE8-4315-922B-B372F0D46E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CDCE0A-389D-4253-844B-B626E747A87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4263EBF1-3B08-4811-99FE-534A237A5F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry:247.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B937BC1-7B91-4849-A541-FD43A0EB9611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry:248.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A54D99-BAFF-43C9-A56D-ACBAEE7649A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry:249.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7536F7-9B8A-416C-AC98-361023E0D502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry:250.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00DF1F8-F28A-47FE-989E-10E18C2D4E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry:251.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03334DFC-1D5A-44D9-92A8-2DA01CCC0D3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry:252.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFB2CC4-DCB0-448F-BEB8-0ED3FA2C67E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6034E85-5886-490E-9925-FD9EEF457382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B76CE44-5F82-4AAC-9DF3-8F74E19FA53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4024EFF-BE52-4B11-AAE7-A3070744031A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96780",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4960/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4960/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T01:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto la ejecución de código remoto en FTPShell Client 6.53. Por defecto, el cliente envía un comando PWD al servidor FTP al que esta conectado; sin embargo, no comprueba la longitud de la respuesta, dando lugar a una situación de desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftpshell:ftpshell_client:6.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CA0E4E-D96E-41CA-A5FD-BA35BE4260D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141456/FTPShell-Client-6.53-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96570",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41511/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141456/FTPShell-Client-6.53-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41511/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T02:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service (network connectivity disruption) via a client hello with a signature_algorithms extension above those defined in RFC 5246, which triggers a full memory dump."
      }, {
        "lang" : "es",
        "value" : "El módulo de red TCP/IP en sistemas Unisys ClearPath MCP con TCP-IP-SW 57.1 en versiones anteriores a 57.152, 58.1 en versiones anteriores a 58.142 o 59.1 en versiones anteriores a 59.172, cuando ejecuta un servicio TLS 1.2, permite a atacantes remotos provocar una denegación de servicio (disrupción de la conectividad de red) a través de un cliente hello con una extensión signature_algorithms por encima de los definidos en RFC 5246, desencadenando un volcado de memoria completa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:clearpath_mcp:57.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC212B4-D30D-4209-AD2B-970CA225ECFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:clearpath_mcp:58.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64422DF5-D832-4C51-BF88-5DBD1C19445A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:clearpath_mcp:59.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7504A7C0-AB22-4653-9374-241B12E82F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96782",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=42",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T02:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message."
      }, {
        "lang" : "es",
        "value" : "gdk-pixbuf-thumbnailer.c en gdk-pixbuf permite a atacantes dependientes de contexto provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de vectores relacionados con la impresión de un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.8",
            "matchCriteriaId" : "949980CF-6D5B-4949-B6FC-D72DF3034CCB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T02:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero in io-ico.c in gdk-pixbuf permite a atacantes dependientes de contexto provocar una denegación de servicio (fallo de segmentación y caída de aplicación) a través del desplazamiento de entrada de una imagen manipulada en un archivo ICO, lo que desencadena una lectura fuera de límites, relacionado con optimizaciones del compilador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.12",
            "matchCriteriaId" : "09BA8820-9E8B-45F8-A96E-5424D2291D0A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=779012",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=779012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T02:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en la función load_resources en io-icns.c en gdk-pixbuf permite a atacantes dependientes de contexto provocar una denegación de servicio (lectura fuera de límites y caída del programa) a través de una entrada de tamaño de imagen manipulada en un archivo ICO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.12",
            "matchCriteriaId" : "09BA8820-9E8B-45F8-A96E-5424D2291D0A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=779016",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=779016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T02:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file."
      }, {
        "lang" : "es",
        "value" : "La función make_available_at_least en io-tiff.c en gdk-pixbuf permite a atacantes dependientes de contexto provocar una denegación de servicio (bucle infinito) a través de un archivo TIFF grande."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.12",
            "matchCriteriaId" : "09BA8820-9E8B-45F8-A96E-5424D2291D0A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=779020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=779020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T02:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función vrend_create_shader en vrend_renderer.c en virglrenderer en versiones anteriores a 0.6.0 permite permite a usuarios locales del SO invitado provocar una denegación de servicio (caída del proceso) a través de valores pkt_length y offlen manipulados, lo que desencadena un acceso fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "F3D9168B-EE7A-4FA5-BB8D-690DED7C648F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/27/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96460",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/27/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2785",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-03-10T10:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la aplicación psnotifyd del cliente de impresora Pharos PopUp versión 9.0. Un paquete especialmente manipulado puede ser enviado al ordenador de la víctima y puede conducir a un desbordamiento de búfer basado en memoria dinámica resultando en una ejecución remota de código. Este cliente siempre está escuchando, tiene privilegios de root y no requiere la interacción de usuario para explotarla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pharos:popup:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5ADB81-A7B4-4143-B69D-15C8CB24FA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96742",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0280/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0280/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2786",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-03-10T10:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en la aplicación psnotifyd del cliente de impresora Pharos PopUp versión 9.0. Un paquete especialmente manipulado puede ser enviado al ordenador de la víctima y puede conducir a una lectura fuera de límites causando una caída y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pharos:popup:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5ADB81-A7B4-4143-B69D-15C8CB24FA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96736",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0281/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0281/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2787",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-03-10T10:59:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer en la aplicación psnotifyd del cliente de impresora Pharos PopUp versión 9.0. Un paquete especialmente manipulado puede ser enviado al ordenador de la víctima y puede conducir a un desbordamiento de búfer basado en memoria dinámica resultando en la potencial ejecución remota de código. Este cliente siempre está escuchando, tiene privilegios de root y no requiere la interacción de usuario para explotarla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pharos:popup:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5ADB81-A7B4-4143-B69D-15C8CB24FA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96738",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0282/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0282/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2788",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-03-10T10:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer en la aplicación psnotifyd del cliente de impresora Pharos PopUp versión 9.0. Un paquete especialmente manipulado puede ser enviado al ordenador de la víctima y puede conducir a un desbordamiento de búfer basado en memoria dinámica resultando en la potencial ejecución remota de código. Este cliente siempre está escuchando, tiene privilegios de root y no requiere la interacción de usuario para explotarla."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pharos:popup:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5ADB81-A7B4-4143-B69D-15C8CB24FA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96742",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0283/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0283/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and its RSA keys, aka RBN-183."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Cambium Networks cnPilot R200/201 en versiones anteriores a 4.3, hay una vulnerabilidad que implica el certificado del dispositivos y sus claves RSA, vulnerabilidad también conocida como RBN-183."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r200_series_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "40046C11-2C06-40F6-A1DE-B316D1E5F0E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D791FAE-BED7-4AE9-B0A3-3A97DA6802DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D0C7C5-97DB-41D2-96D0-7EDED66B37E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.cambiumnetworks.com/file/3f88842a39f37b0d4ce5d43e5aa21bf1c4f9f1ca",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://support.cambiumnetworks.com/file/3f88842a39f37b0d4ce5d43e5aa21bf1c4f9f1ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodology may include a long message-body in a GET request."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un desbordamiento de búfer en EvoStream Media Server 1.7.1. Una solicitud HTTP manipulada con un encabezado malicioso causara una caída. Una metodología de ejemplo de ataque puede incluir un cuerpo de mensaje largo en una solicitud GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evostream:media_server:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A97C55-8372-4E02-82B8-81E3FEE8DD8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41547/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41547/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka \"Service ready\") string."
      }, {
        "lang" : "es",
        "value" : "En Azure Data Expert Ultimate 2.2.16, la función de verificación SMTP sufre una vulnerabilidad de desbordamiento de búfer, lo que lleva a una ejecución remota de código. El vector de ataque es un demonio SMTP manipulado que envía una cadena 220 larga (también conocida como \"Service ready\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azure_dex:data_expert_ultimate:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E926667D-55FD-4FDA-ADA0-D85872F3A7DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141502/Azure-Data-Expert-Ultimate-2.2.16-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41545/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141502/Azure-Data-Expert-Ultimate-2.2.16-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41545/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of Service attack' in the context of the user running the affected application."
      }, {
        "lang" : "es",
        "value" : "partclone.chkimg en partclone 0.2.89 es propenso a una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica debido a una validación insuficiente del encabezado de imagen de partclone. Un atacante puede lanzar un 'ataque de denegación de servicio' en el contexto del usuario que ejecuta la aplicación afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:partclone_project:partclone:0.2.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C83F8AD-98F1-43BA-90BD-CB092E4DF3F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/insidej/Partclone_HeapOverFlow/blob/master/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/insidej/Partclone_HeapOverFlow/blob/master/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208."
      }, {
        "lang" : "es",
        "value" : "Trend Micro Endpoint Sensor 1.6 en versiones anteriores a b1290 tiene una vulnerabilidad de secuestro de DLL que permite a atacantes remotos ejecutar código arbitrario, vulnerabilidad también conocida como Trend Micro Vulnerability Identifier 2015-0208."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:endpoint_sensor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "7DC5D63B-DCFC-414C-A5CD-323A885E3A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96857",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116827",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'view_type' parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de XSS en view_filters_page.php en MantisBT en versiones anteriores a 2.2.1 permite a atacantes remotos inyectar código JavaScript arbitrario a través del parámetro 'view_type'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "D9031423-4FC3-40C2-BAF3-93D6E49B0563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mantisbt.org/bugs/view.php?id=22497",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96819",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/1677251434b6e8b2be8f1d4376a3e78f7be14d95",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mantisbt.org/bugs/view.php?id=22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/1677251434b6e8b2be8f1d4376a3e78f7be14d95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to MAPIPrint() in libytnef."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ytnef en versiones anteriores a 1.9.2. Un acceso de memoria no válido (sobre lectura de búfer basado en memoria dinámica) puede ocurrir durante el manejo de tipos de datos LONG, relacionados con MAPIPrint() en libytnef."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "B61A10E7-D7FA-4AEE-843B-F37741B83385"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/commit/f98f5d4adc1c4bd4033638f6167c1bb95d642f89",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/commit/f98f5d4adc1c4bd4033638f6167c1bb95d642f89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ytnef en versiones anteriores a 1.9.2. Hay un potencial acceso fuera de límites con con campos de tamaño 0 en TNEFParse() en libytnef."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "B61A10E7-D7FA-4AEE-843B-F37741B83385"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/commit/3cb0f914d6427073f262e1b2b5fd973e3043cdf7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/commit/3cb0f914d6427073f262e1b2b5fd973e3043cdf7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF() in libytnef."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ytnef en versiones anteriores a 1.9.2. Hay una potencial sobre lectura de búfer basado en memoria dinámica en el entrante Compressed RTF Streams, relacionado con DecompressRTF() en libytnef."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "B61A10E7-D7FA-4AEE-843B-F37741B83385"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/commit/22f8346c8d4f0020a40d9f258fdb3bfc097359cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/commit/22f8346c8d4f0020a40d9f258fdb3bfc097359cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-10T10:59:00.610",
      "lastModified" : "2023-11-07T02:49:58.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5638",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-03-11T02:59:00.150",
      "lastModified" : "2025-10-22T00:16:06.887",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico Jakarta Multipart en Apache Struts 2 en versiones 2.3.x anteriores a la 2.3.32 y versiones 2.5.x anteriores a la 2.5.10.1 no maneja correctamente las excepciones y la generación de mensajes de error, lo que permite a atacantes remotos ejecutar comandos arbitrarios a través de una cadena #cmd= en un encabezado HTTP de Content-Type, Content-Disposition o Content-Length manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apache Struts Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.3",
            "versionEndExcluding" : "2.3.32",
            "matchCriteriaId" : "40D3EE72-E37F-4F4C-996D-50E144CF43DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.10.1",
            "matchCriteriaId" : "E2F63D06-B26A-4DB6-8B07-B847554ABCA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v3500_firmware:7.7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB119E1-7736-4C99-AD9C-9E8820769D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v3500_firmware:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A0C06E-B833-4A52-B1F0-FEC9BEF372A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:storwize_v3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7352FACE-C8D0-49A7-A2D7-B755599F0FB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v5000_firmware:7.7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F445D22E-8976-4ADC-81FD-49B351B2802A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v5000_firmware:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9E6724-8796-4DD5-9CE2-8E602DA893F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B69C8D-32A4-449F-9BFC-F1587C7FA8BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v7000_firmware:7.7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D7A801-1861-4479-9367-60F792BF8016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v7000_firmware:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF96E49-9530-4718-B5A9-7366D10CC890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2ED020-4C7B-4303-ABE6-74D46D127556"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:storage_v5030_firmware:7.7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371CD28E-6187-4EB1-8B73-645F7A6BFFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:storage_v5030_firmware:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0AFFAA-F7AE-416C-A40D-24F972EE18BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:storage_v5030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A4179B-51C5-486B-8CFF-D49436D60910"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:server_automation:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112DFE68-A609-4B76-8227-4DE9CAC25F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:server_automation:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951C042F-9C83-4DBB-8070-A926A1B46591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:server_automation:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9404A4-6B73-436E-A8FB-914530D6000A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:server_automation:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFBE84-5394-49A1-844A-ED964A46ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:server_automation:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ABFD4F-8E97-4418-A921-BF9F4D95A4A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "8D1193B0-59C9-4AC0-BBA0-CED6FCC91883"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txt",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.eweek.com/security/apache-struts-vulnerability-under-attack.html",
        "source" : "security@apache.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96729",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037973",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Press/Media Coverage" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-045",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-046",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://exploit-db.com/exploits/41570",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519a",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/mazen160/struts-pwn",
        "source" : "security@apache.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/issues/8064",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_us",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://isc.sans.edu/diary/22169",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170310-0001/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-045.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-046.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/len-14200",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/theog150/status/841146956135124993",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41614/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/834067",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA145",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.eweek.com/security/apache-struts-vulnerability-under-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Press/Media Coverage" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://exploit-db.com/exploits/41570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/mazen160/struts-pwn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/issues/8064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://isc.sans.edu/diary/22169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170310-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/len-14200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/theog150/status/841146956135124993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41614/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/834067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5638",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the SYSTEM account. Note that when Software Updater is configured to install updates automatically, it checks if the downloaded file is digitally signed by default, but does not check the author of the signature. When running in manual mode (default), no signature check is performed."
      }, {
        "lang" : "es",
        "value" : "F-Secure Software Updater 2.20, tal como se distribuye en varios productos F-Secure, descarga paquetes de instalación sobre http simple y no realiza la validación de integridad del archivo después de la descarga. Atacantes man-in-the-middle pueden reemplazar el archivo con su propio ejecutable que se ejecutará bajo la cuenta SYSTEM. Tenga en cuenta que cuando Software Updater está configurado para instalar actualizaciones automáticamente, comprueba si el archivo descargado está firmado digitalmente de forma predeterminada, pero no comprueba el autor de la firma. Cuando se ejecuta en modo manual (predeterminado), no se realiza ninguna comprobación de firma."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:software_updater:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3654B7-6E45-42F1-95F7-4B68D6EDF8DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96784",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL."
      }, {
        "lang" : "es",
        "value" : "El WHMCS Reseller Module V2 2.0.2 en Softaculous Virtualizor en versiones anteriores a 2.9.1.0 no verifica correctamente al usuario, lo que permite a usuarios remotos autenticados controlar otras máquinas virtuales gestionadas a través de Virtualizor accediendo a una URL modificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softaculous:whmcs_reseller_module:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3668E7-57FF-42AC-92FE-1241754A724F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:softaculous:virtualizor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0.6",
            "matchCriteriaId" : "1D384A26-87A2-43B1-AC3D-36E386C385EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.virtualizor.com/blog/?p=1551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.virtualizor.com/blog/?p=1551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parameter)."
      }, {
        "lang" : "es",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 es vulnerable a una XSS reflejada en inc/admin/template_files/admin.faq.php (parámetro id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mangoswebv4_project:mangoswebv4:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DBC16C-672E-48FC-8A8A-67D5E091F91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter)."
      }, {
        "lang" : "es",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 es vulnerable a una XSS reflejada en inc/admin/template_files/admin.donate.php (parámetro id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mangoswebv4_project:mangoswebv4:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DBC16C-672E-48FC-8A8A-67D5E091F91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter)."
      }, {
        "lang" : "es",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 es vulnerable a una XSS reflejada en inc/admin/template_files/admin.fplinks.php (parámetro linkid)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mangoswebv4_project:mangoswebv4:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DBC16C-672E-48FC-8A8A-67D5E091F91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter)."
      }, {
        "lang" : "es",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 es vulnerable a una XSS reflejada en inc/admin/template_files/admin.shop.php (parámetro id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mangoswebv4_project:mangoswebv4:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DBC16C-672E-48FC-8A8A-67D5E091F91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-11T06:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter)."
      }, {
        "lang" : "es",
        "value" : "paintballrefjosh/MaNGOSWebV4 4.0.8 es vulnerable a una XSS reflejada en inc/admin/template_files/admin.vote.php (parámetro id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mangoswebv4_project:mangoswebv4:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DBC16C-672E-48FC-8A8A-67D5E091F91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/paintballrefjosh/MaNGOSWebV4/issues/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T01:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrated by both (1) mishandling of the playlist shortcode in the wp_playlist_shortcode function in wp-includes/media.php and (2) mishandling of meta information in the renderTracks function in wp-includes/js/mediaelement/wp-playlist.js."
      }, {
        "lang" : "es",
        "value" : "En WordPress en versiones anteriores a 4.7.3, hay XSS autenticada a través de Media File Metadata. Esto es demostrado tanto por (1) mal manejo de la playlist shortcode en la función wp_playlist_shortcode en wp-includes/media.php y (2) mal manejo de de meta información en la función renderTracks en wp-includes/js/mediaelement/wp-playlist.js."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "5A557EFF-02E2-499A-AA55-15F43DB9D820"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/03/06/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96601",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8765",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/06/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T01:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation."
      }, {
        "lang" : "es",
        "value" : "En WordPress en versiones anteriores a 4.7.3 (wp-includes/pluggable.php), los caracteres de control pueden trucar la validación de la URL de direccionamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "5A557EFF-02E2-499A-AA55-15F43DB9D820"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96600",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/288cd469396cfe7055972b457eb589cea51ce40e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8766",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/288cd469396cfe7055972b457eb589cea51ce40e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T01:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality."
      }, {
        "lang" : "es",
        "value" : "En WordPress en versiones anteriores a 4.7.3 (wp-admin/plugins.php), los archivos no deseados pueden ser eliminados por los administradores utilizando la funcionalidad del plugin deletion."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "5A557EFF-02E2-499A-AA55-15F43DB9D820"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96598",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/4d80f8b3e1b00a3edcee0774dc9c2f4c78f9e663",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8767",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/4d80f8b3e1b00a3edcee0774dc9c2f4c78f9e663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T01:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds."
      }, {
        "lang" : "es",
        "value" : "En WordPress en versiones anteriores a 4.7.3 (wp-includes/embed.php), hay secuencias de comandos en sitios cruzados (XSS) autenticada en URLs incrustadas de YouTube ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "5A557EFF-02E2-499A-AA55-15F43DB9D820"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96601",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T01:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names."
      }, {
        "lang" : "es",
        "value" : "En WordPress en versiones anteriores a 4.7.3 (wp-admin/js/tags-box.js), hay secuencias de comandos de sitios cruzados (XSS) a través de nombres de términos de taxonomía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "5A557EFF-02E2-499A-AA55-15F43DB9D820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96601",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/9092fd01e1f452f37c313d38b18f9fe6907541f9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8769",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/9092fd01e1f452f37c313d38b18f9fe6907541f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T01:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This."
      }, {
        "lang" : "es",
        "value" : "En WordPress en versiones anteriores a 4.7.3, hay CSRF en Press This (wp-admin/includes/class-wp-press-this.php), lo que conduce a un uso excesivo de recursos del servidor. El CSRF puede desencadenar una solicitud HTTP de salida para un archivo grande que luego se analiza mediante Press This."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "5A557EFF-02E2-499A-AA55-15F43DB9D820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/03/06/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96602",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8770",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/06/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T05:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disable_dm_verity' command. Having dm-verity disabled, the kernel will not verify the system partition (and any other dm-verity protected partition), which may allow for persistent code execution and privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en OxygenOS en versiones anteriores a 4.0.3 para OnePlus 3 y 3T. El atacante puede hacer persistentemente que el gestor de arranque (bloqueado) inicie la plataforma con dm-verity deshabilitado, utilizando el comando 'fastboot oem disable_dm_verity'. Teniendo dm-verity deshabilitado, el kernel no verificará la partición del sistema (y cualquier otra partición protegida por dm-verity), lo que podría permitir ejecución de código persistente y escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "A7FA279E-C889-4021-8A82-B866FADC73E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T05:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data."
      }, {
        "lang" : "es",
        "value" : "OxygenOS en versiones anteriores a versión 4.0.2, en OnePlus 3 y 3T, tiene dos comandos oem ocultos de arranque rápido (4F500301 y 4F500302) que permiten al atacante bloquear/desbloquear el gestor de arranque, ignorando la casilla de verificación 'OEM Unlocking', sin confirmación del usuario y sin un restablecimiento de fábrica. Esto permite la ejecución de código persistente con privilegios altos (kernel/root) con acceso completo a los datos del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.8",
            "matchCriteriaId" : "343FD4D5-58CE-484E-B8E5-F3C2B15EF6F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.4",
            "matchCriteriaId" : "4AB7D4A5-3FB2-4097-98D9-222FF350F10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T05:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation."
      }, {
        "lang" : "es",
        "value" : "El router MikroTik hAP Lite 6.25 no tiene mecanismo de protección para paquetes TCP ACK no solicitados en el caso de una conexión de red rápida. lo que permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) enviando muchos paquetes ACK. Después de que el atacante detenga el exploit, el uso de CPU es 100% y el router requiere un reinicio para un funcionamiento normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782A270F-EFFB-4E37-9951-0F89C845BDCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mikrotik:router_hap_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E72623-EACF-41FC-83DD-D876A387E408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploitalert.com/view-details.html?id=26137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017030029",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141449/Mikrotik-Hap-Lite-6.25-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41601/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploitalert.com/view-details.html?id=26137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017030029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141449/Mikrotik-Hap-Lite-6.25-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41601/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T05:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence within an SVG element."
      }, {
        "lang" : "es",
        "value" : "rcube_utils.php en Roundcube en versiones anteriores a 1.1.8 y 1.2.x en versiones anteriores a 1.2.4 es susceptible a una vulnerabilidad de XSS a través una secuencia de tokens de CSS manipulada dentro de un elemento SVG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7",
            "matchCriteriaId" : "47063171-0D2F-4987-91BA-051FFD0D7B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6556D4DF-FFF9-4EE0-91EA-84314D7CF071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A43C92-1266-47DB-B3D9-A12CFE271EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFDA8E6-5BD6-4A20-8B67-C9597B67DABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB074D9-E258-471F-9FF7-CABE43E763DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/cbd35626f7db7855f3b5e2db00d28ecc1554e9f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/fa2824fdcd44af3f970b2797feb47652482c8305",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.2.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/wiki/Changelog#release-124",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://roundcube.net/news/2017/03/10/updates-1.2.4-and-1.1.8-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/cbd35626f7db7855f3b5e2db00d28ecc1554e9f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/fa2824fdcd44af3f970b2797feb47652482c8305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/wiki/Changelog#release-124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://roundcube.net/news/2017/03/10/updates-1.2.4-and-1.1.8-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-12T05:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS 2.0.6.1 permite a usuarios remotos autenticados obtener privilegios a través de un parámetro de nivel modificado para dapur/ en una acción app=user&act=edit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12F4298-9547-44C9-AD18-5039968D5A01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/03/privilege-escalation-manipulation-of.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41594/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/03/privilege-escalation-manipulation-of.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41594/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Zammad en versiones anteriores a 1.0.4, 1.1.x en versiones anteriores a 1.1.3 y 1.2.x en versiones anteriores a 1.2.1. Atacantes pueden iniciar sesión con la contraseña hash por sí misma (por ejemplo desde el DB) en lugar de con la cadena de contraseña válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "113864CB-718D-4B62-BD84-587A1DE8ED19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349B6BD-C108-4120-BD42-7FD3B39E46DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F1D9BF-4A1B-4C55-89FE-AE174BD9994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D5DB8-7B7E-4BFA-8329-28BEB3BCE6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5511A6-864E-4069-951C-A0E0C38C6655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de XSS en Zammad en versiones anteriores a 1.0.4, 1.1.x en versiones anteriores a 1.1.3 y 1.2.x en versiones anteriores a 1.2.1. Los archivos adjuntos se abren en una nueva pestaña en lugar de descargarse. Esto crea un vector de ataque de código de ejecución en el dominio de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "113864CB-718D-4B62-BD84-587A1DE8ED19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349B6BD-C108-4120-BD42-7FD3B39E46DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F1D9BF-4A1B-4C55-89FE-AE174BD9994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D5DB8-7B7E-4BFA-8329-28BEB3BCE6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5511A6-864E-4069-951C-A0E0C38C6655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat message or the content of a ticket article, when using either the REST API or the WebSocket API."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Zammad en versiones anteriores a 1.0.4, 1.1.x en versiones anteriores a 1.1.3 y 1.2.x en versiones anteriores a 1.2.1. Puede desencadenarse XSS a través de HTML malicioso en un mensaje de chat o en el contenido de un artículo de ticket, cuando se utiliza la API REST o la API WebSocket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "113864CB-718D-4B62-BD84-587A1DE8ED19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349B6BD-C108-4120-BD42-7FD3B39E46DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F1D9BF-4A1B-4C55-89FE-AE174BD9994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D5DB8-7B7E-4BFA-8329-28BEB3BCE6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5511A6-864E-4069-951C-A0E0C38C6655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP (\"GET system.ini HTTP/1.1\\n\\n\" - note the lack of \"/\" in the path field of the request) request that will disclose the configuration file with the login password."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un servidor web GoAhead personalizado que se utiliza en Foscam, Vstarcam y múltiples modelos de cámara IP de marca blanca permite a un atacante crear una solicitud HTTP malformada (\"GET system.ini HTTP/1.1\\n\\n\" - note the lack of \"/\" en el campo de la ruta de la solicitud) que revelará el archivo de configuración con la contraseña de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB4FC40-2D26-4B0D-8F58-4C6AC92F1C96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cybereason.com/cve-ip-cameras/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-cameras-into-iot-botnet-slaves/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybereason.com/cve-ip-cameras/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-cameras-into-iot-botnet-slaves/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will be executed with root privileges."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en una aplicación web en un servidor web GoAhead personalizado que se utiliza en Foscam, Vstarcam y múltiples moldelos de cámara IP de marca blanca. El formulario de envío de correo en la página mail.htm permite a un atacante inyectar un comando en el campo receiver1 en el formulario; se ejecutará con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB4FC40-2D26-4B0D-8F58-4C6AC92F1C96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cybereason.com/cve-ip-cameras/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-cameras-into-iot-botnet-slaves/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybereason.com/cve-ip-cameras/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-cameras-into-iot-botnet-slaves/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components."
      }, {
        "lang" : "es",
        "value" : "QOS.ch Logback en versiones anteriores a 1.2.0 tiene una vulnerabilidad de serialización que afecta a los componentes SocketServer y ServerSocketReceiver."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qos:logback:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "656A63A1-7F99-4F1E-B9E0-810F64EB159B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB283C80-F7AF-4776-8432-655E50D7D65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite_capsule:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461407B5-C167-4DE1-A934-FD5ADFB4AD4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1675",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/18d509024d9aeb07f0e9579066f80bf5d4dcf20467b0c240043890d1%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/a6db61616180d73711d6db25703085940026e2dbc40f153f9d22b203%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/fa4eaaa6ff41ac6f79811e053c152ee89b7c5da8a6ac848ae97df67f%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0bb19330e48d5ad784fa20dacba9e5538d8d60f5cd9142e0f1432b4b%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2a08573ddee4a86dc96d469485a5843a01710ee0dc2078dfca410c79%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2c2d57ca180e8173c90fe313ddf8eabbdcf8e3ae196f8b9f42599790%40%3Ccommits.mnemonic.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r397bf63783240fbb5713389d3f889d287ae0c11509006700ac720037%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4673642893562c58cbee60c151ded6c077e8a2d02296e862224a9161%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r632ec30791b441e2eb5a3129532bf1b689bf181d0ef7daf50bcf0fd6%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r718f27bed898008a8e037d9cc848cfc1df4d18abcbaee0cb0c142cfb%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r967953a14e05016bc4bcae9ef3dd92e770181158b4246976ed8295c9%40%3Cdev.brooklyn.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra007cec726a3927c918ec94c4316d05d1829c49eae8dc3648adc35e2%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbb4dfca2f7e3e8f3570eec21c79832d33a51dfde6762725660b60169%40%3Cdev.mnemonic.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc5f0cc2f3b153bdf15ee7389d78585829abc9c7af4d322ba1085dd3e%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd2227af3c9ada2a72dc72ed05517f5857a34d487580e1f2803922ff9%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re9b787727291786dfe088e3cd078c7d195c0b5781e15d3cd24a3b2fc%40%3Cdev.mnemonic.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://logback.qos.ch/news.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/18d509024d9aeb07f0e9579066f80bf5d4dcf20467b0c240043890d1%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/a6db61616180d73711d6db25703085940026e2dbc40f153f9d22b203%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/fa4eaaa6ff41ac6f79811e053c152ee89b7c5da8a6ac848ae97df67f%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0bb19330e48d5ad784fa20dacba9e5538d8d60f5cd9142e0f1432b4b%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2a08573ddee4a86dc96d469485a5843a01710ee0dc2078dfca410c79%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2c2d57ca180e8173c90fe313ddf8eabbdcf8e3ae196f8b9f42599790%40%3Ccommits.mnemonic.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r397bf63783240fbb5713389d3f889d287ae0c11509006700ac720037%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4673642893562c58cbee60c151ded6c077e8a2d02296e862224a9161%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r632ec30791b441e2eb5a3129532bf1b689bf181d0ef7daf50bcf0fd6%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r718f27bed898008a8e037d9cc848cfc1df4d18abcbaee0cb0c142cfb%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r967953a14e05016bc4bcae9ef3dd92e770181158b4246976ed8295c9%40%3Cdev.brooklyn.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra007cec726a3927c918ec94c4316d05d1829c49eae8dc3648adc35e2%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbb4dfca2f7e3e8f3570eec21c79832d33a51dfde6762725660b60169%40%3Cdev.mnemonic.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc5f0cc2f3b153bdf15ee7389d78585829abc9c7af4d322ba1085dd3e%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd2227af3c9ada2a72dc72ed05517f5857a34d487580e1f2803922ff9%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re9b787727291786dfe088e3cd078c7d195c0b5781e15d3cd24a3b2fc%40%3Cdev.mnemonic.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://logback.qos.ch/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie and receive the result."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Zammad en versiones anteriores a 1.0.4, 1.1.x en versiones anteriores a 1.1.3 y 1.2.x en versiones anteriores a 1.2.1, provocado por la carencia de un mecanismo de protección que implica a cabeceras HTTP Access-Control. Para explotar esta vulnerabilidad, un atacante puede enviar peticiones entre dominios directamente a la API REST para usuarios con una cookie de sesión válida y recibir el resultado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "113864CB-718D-4B62-BD84-587A1DE8ED19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349B6BD-C108-4120-BD42-7FD3B39E46DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F1D9BF-4A1B-4C55-89FE-AE174BD9994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D5DB8-7B7E-4BFA-8329-28BEB3BCE6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5511A6-864E-4069-951C-A0E0C38C6655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de CSRF en Zammad en versiones anteriores a 1.0.4, 1.1.x en versiones anteriores a 1.1.3 y 1.2.x en versiones anteriores a 1.2.1. Para explotar esta vulnerabilidad, un atacante puede enviar peticiones entre dominios directamente a la API REST para usuarios con una cookie de sesión válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "113864CB-718D-4B62-BD84-587A1DE8ED19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349B6BD-C108-4120-BD42-7FD3B39E46DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F1D9BF-4A1B-4C55-89FE-AE174BD9994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D5DB8-7B7E-4BFA-8329-28BEB3BCE6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zammad:zammad:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5511A6-864E-4069-951C-A0E0C38C6655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zammad.com/de/news/security-advisory-zaa-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T06:59:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and the entire set of other pages)."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Keekoon KK002 1.8.12 HD tienen una vulnerabilidad de CSRF que afecta a goform/formChnUserPwd and goform/formUserMng (y el conjunto completo de otras páginas)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:keekoonvision:kk002_ip_camera_firmware:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883706BE-0F9A-4971-B3DF-AAEC814D3F36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:keekoonvision:kk002_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F608B0E-E6ED-4387-BB6C-60592E6F1747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-13T14:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site."
      }, {
        "lang" : "es",
        "value" : "mod_auth_mellon en versiones anteriores a 0.13.1 es vulnerable a un ataque de Transferencia de Sesión en Sitios Cruzados, donde un usuario con acceso a un sitio web ejecutándose en un servidor puede copiar su cookie de sesión a un sitio web diferente en el mismo servidor para obtener acceso a dicho sitio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uninett:mod_auth_mellon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.13.0",
            "matchCriteriaId" : "1628B928-2343-4CE6-8DF8-1DAD5DD7DF8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.13.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sympa.uninett.no/lists/uninett.no/arc/modmellon/2017-03/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sympa.uninett.no/lists/uninett.no/arc/modmellon/2017-03/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T09:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header."
      }, {
        "lang" : "es",
        "value" : "En Cerberus FTP Server 8.0.10.1, una petición HTTP manipulada provoca que el servicio de Windows se caiga. La metodología de ataque involucra una larga cabecera Host y una cabecera Content-Length no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberusftp:ftp_server:8.0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02CD8D9-E143-41AE-BD61-77EB5AE9DAC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41596/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41596/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T09:59:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user (which is root). Besides, the default installation of IMSVA comes with default administrator credentials. The saveCert.imss endpoint takes several user inputs and performs blacklisting. After that, it uses them as arguments to a predefined operating-system command without proper sanitization. However, because of an improper blacklisting rule, it's possible to inject arbitrary commands into it."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. Un usuario autenticado puede ejecutar un comando terminal en el contexto del usuario del servidor web (que es root). Además, la instalación prederteminada de IMSVA viene con credenciales de administrador predeterminadas. El punto final saveCert.imss toma varias entradas de usuario y realiza listas negras. Después de esto, los utiliza como argumentos para un comando predefinido del sistema operativo sin la apropiada desinfección. Sin embargo, debido a una regla de lista negra incorrecta, es posible inyectar comandos arbitrarios en él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.1-1600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75281083-D5B3-4223-8446-011DF492D762"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.rapid7.com/db/modules/exploit/linux/http/trend_micro_imsva_exec",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.rapid7.com/db/modules/exploit/linux/http/trend_micro_imsva_exec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T09:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction between put_ucounts and get_ucounts."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en kernel/ucount.c en el kernel de Linux hasta la versión 4.10.2 permite a usuarios locales provocar una denegación de servicio (uso después de liberación y caída del sistema) o tener otro posible impacto no especificado a través de llamadas al sistema manipuladas que aprovechan cierto decremento de comportamiento que causa una interacción incorrecta entre put_ucounts y get_ucounts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.9.16",
            "matchCriteriaId" : "C850AA48-53FC-4E7B-99E3-1059FFBF846B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.4",
            "matchCriteriaId" : "06EFB965-C649-4542-8209-E54DD89FFA1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=040757f738e13caaa9c5078bca79aa97e11dde88",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/040757f738e13caaa9c5078bca79aa97e11dde88",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=040757f738e13caaa9c5078bca79aa97e11dde88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/040757f738e13caaa9c5078bca79aa97e11dde88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T09:59:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en el manejo de archivos SVG en Lutim 0.7.1 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lutim_project:lutim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7",
            "matchCriteriaId" : "E16D4336-F2AB-4AAE-AE2A-2FE262418B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://framagit.org/luc/lutim/commit/4c0df8f8b10122339b908dcd9b1117348b49dcab",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://framagit.org/luc/lutim/issues/38",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://framagit.org/luc/lutim/commit/4c0df8f8b10122339b908dcd9b1117348b49dcab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://framagit.org/luc/lutim/issues/38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T09:59:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "El plugin ConvertToPDF en Foxit Reader en versiones anteriores a 8.2.1 y PhantomPDF en versiones anteriores a 8.2.1 en Windows, cuando la aplicación gflags está habilitada, permite a atacantes remotos provocar una denegación del servicio (lectura fuera de límites y caída de la aplicación) a través de una imagen TIFF manipulada. La vulnerabilidad podría conducir a divulgación de información; un atacante podría aprovechar esto en conjunción con otras vulnerabilidades para ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2051",
            "matchCriteriaId" : "1EA0997C-DAC3-46EE-9BF2-640E6A93EB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2192",
            "matchCriteriaId" : "1386BBC6-C8D2-4ACD-A5E0-925D48AD7025"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-133/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-133/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T14:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189."
      }, {
        "lang" : "es",
        "value" : "bitlbee-libpurple en versiones anteriores a 3.5.1 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) y posiblemente ejecutar código arbitrario mediante una solicitud de transferencia de archivos para un contacto que no está en la lista de contactos. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2016-10189."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitlbee:bitlbee:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.2",
            "matchCriteriaId" : "79E1B13E-6F21-43C5-AE1B-19F9F698283D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitlbee:bitlbee-libpurple:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "A13DFB9F-3CF0-4DA6-8167-F361B4611C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/30/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.bitlbee.org/ticket/1282",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bitlbee/bitlbee/commit/30d598ce7cd3f136ee9d7097f39fa9818a272441",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/30/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.bitlbee.org/ticket/1282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bitlbee/bitlbee/commit/30d598ce7cd3f136ee9d7097f39fa9818a272441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T14:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the \"nr_cbufs\" argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer basado en pila en la función vrend_decode_set_framebuffer_state en vrend_decode.c en virglrenderer en versiones anteriores a 926b9b3460a48f6454d8bbe9e44313d86a65447f, como se utiliza en Quick Emulator (QEMU), permite a un usuario local invitado provocar una denegación de servicio (caída de la aplicación) a través del argumento \"nr_cbufs\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.0",
            "matchCriteriaId" : "C6E484A8-ADBC-42B4-A634-6665CF382D35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB839110-2CFB-4A4C-96DF-620F5F688361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96215",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421126",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T14:59:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samples per pixel value in a CMYKA TIFF file."
      }, {
        "lang" : "es",
        "value" : "La función QuantumTransferMode en coders/tiff.c en GraphicsMagick 1.3.25 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de un pequeño valor de muestras por píxel en un archivo CMYKA TIFF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.25",
            "matchCriteriaId" : "AF23F625-1F2F-4908-9BBE-DEBF470B3FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96544",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427975",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/code/ci/6156b4c2992d855ece6079653b3b93c3229fc4b8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/code/ci/6156b4c2992d855ece6079653b3b93c3229fc4b8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2983",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege."
      }, {
        "lang" : "es",
        "value" : "Adobe Shockwave versión 12.2.7.197 y versiones anteriores tienen una vulnerabilidad de carga de librería insegura (secuestro de DLL). Una explotación exitosa podría conducir a escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.2.7.197",
            "matchCriteriaId" : "3D35B9AD-40AB-4819-9D86-8FC4FCF6E2A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96863",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037993",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/shockwave/apsb17-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/shockwave/apsb17-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2997",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad de desbordamiento/vaciado de búfer explotable en el Primetime TVSDK que permite personalizar la información del anuncio. Una explotación exitosa puede resultar en ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96860",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2998",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la funcionalidad Primetime TVSDK API relacionada con interacciones de la línea del tiempo. Una explotación exitosa podría resultar en ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96866",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2999",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la funcionalidad Primetime TVSDK relacionada con alojamiento de la superficie de reproducción. Una explotación exitosa podría resultar en ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96866",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3000",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad en el generador de números aleatorios utilizado para el cegamiento constante. Una explotación exitosa podría resultar en divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96862",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3001",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable relacionada con la recolección de basura en la ActionScript 2 VM. Una explotación exitosa puede resultar en ejecución arbitraria de código.."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96861",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3002",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable en el objeto ActionScript2 TextField relacionado con la propiedad variable. Una explotación exitosa puede resultar en ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96861",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3003",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-14T16:59:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versión 24.0.0.221 y versiones anteriores tienen una vulnerabilidad de uso después de liberación de memoria explotable relacionado con una interacción entre la interfaz de privacidad del usuario y el objeto ActionScript 2 Camera. Una explotación exitosa puede resultar en ejecución arbitraria de código.."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "6F017128-1329-4EA4-9E6F-EFC279D1A296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "68A43DA8-9EE3-4423-9E01-7AEE3DD378DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "C5EFFCBC-AB30-47D8-ACC5-91FDB5F733C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.0.0.221",
            "matchCriteriaId" : "B72F98B2-B74E-4F12-9415-F0B94035F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96861",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T17:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check."
      }, {
        "lang" : "es",
        "value" : "lxc-user-nic en Linux Containers (LXC) permite a usuarios locales con una asignación lxc-usernet crear interfaces de red en el host y elegir el nombre de esas interfaces aprovechando la falta de verificación de propiedad de netns."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "CD42973B-545C-4D49-8DDA-CB3A9D6C68F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.6",
            "matchCriteriaId" : "A326DD9B-29E6-4253-8270-B9D85FF0E8AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/09/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96777",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3224-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/09/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3224-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T17:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts of SysInfo require setuid-to-root access in order to access restricted system files and make restricted kernel calls. This access could be exploited by a local attacker to gain a root shell prompt using the right combination of environment variables and command line arguments."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad local de escalada de privilegios en Sysinfo de MagniComp en versiones anteriores a 10-H64 para plataformas Linux y UNIX podría permitir a un atacante local obtener privilegios elevados. Partes de SysInfo requieren acceso setuid-to-root para acceder a archivos restringidos del sistema y hacer llamadas restringidas al kernel. Este acceso podría ser explotado por un atacante local para obtener un indicador de root shell utilizando la combinación correcta de variables de entorno y argumentos de línea de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnicomp:sysinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10-h62",
            "matchCriteriaId" : "57628616-65D7-43FF-9DC0-0A96401C3EA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.magnicomp.com/support/cve/CVE-2017-6516.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44150/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.magnicomp.com/support/cve/CVE-2017-6516.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44150/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de privilegios en el enrutador inalámbrico DIGISOL DG-HR1400 1.00.02 habilita a un atacante escalar desde privilegio de usuario hasta privilegio de administrador simplemente modificando el valor de la cookie de sesión codificada en Base64."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-565"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:digisol:dg-hr1400_router_firmware:1.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CD51C9-080F-4CD0-A24D-1369B245AA80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:digisol:dg-hr1400_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC52C1F0-B25C-4491-87C2-AF2813C11CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/52",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141693/digisol-escalate.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41633/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.indrajithan.com/DIGISOL_router_previlage_escaltion",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/141693/digisol-escalate.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41633/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.indrajithan.com/DIGISOL_router_previlage_escaltion",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T21:59:00.147",
      "lastModified" : "2023-11-07T02:49:59.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3899",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-03-14T22:59:01.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 y versiones anteriores permite a usuarios remotos autenticados obtener información de producto a través de un parámetro de petición HTTP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "A37592DA-95F9-4127-93EB-9EA7DD14DCCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96929",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10189",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-14T22:59:01.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 (aka Quake 3 engine) forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as native code DLLs. A malicious auto-downloaded file can contain configuration defaults that override the user's. Executable bytecode in a malicious auto-downloaded file can set configuration variables to values that will result in unwanted native code DLLs being loaded, resulting in sandbox escape."
      }, {
        "lang" : "es",
        "value" : "En ioquake3 en versiones anteriores a 14-03-2017, la característica de descarga automática tiene insuficientes restricciones de contenido. Esto también afecta a Quake III Arena, OpenArena, OpenJK, iortcw y otras horquillas id Tech 3 (también conocidas como Quake 3 engine). Un archivo malicioso autodescargado puede desencadenar carga de archivos autodescargados manipulados como DLLs de código nativo. Un archivo malicioso autodescargado puede contener configuración predeterminada que anula la del usuario. Bytecode ejecutable en un archivo autodescargado malicioso puede configurar variables de configuración a valores que resultarán en la carga de DLLs de código nativo no deseadas, resultando en sandbox de escape."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ioquake3:ioquake3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-27",
            "matchCriteriaId" : "69AED8AB-60F2-45B1-A9C7-83D6A2AB9E0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857699",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JACoders/OpenJK/commit/8956a35e7b91c4a0dd1fa6db1d28c7f0efbab2d7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/376267d534476a875d8b9228149c4ee18b74a4fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/b173ac05993f634a42be3d3535e1b158de0c3372",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/f61fe5f6a0419ef4a88d46a128052f2e8352e85d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/iortcw/iortcw/commit/11a83410153756ae350a82ed41b08d128ff7f998",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/iortcw/iortcw/commit/b248763e4878ef12d5835ece6600be8334f67da1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/iortcw/iortcw/commit/b6ff2bcb1e4e6976d61e316175c6d7c99860fe20",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://ioquake3.org/2017/03/13/important-security-update-please-update-ioquake3-immediately/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JACoders/OpenJK/commit/8956a35e7b91c4a0dd1fa6db1d28c7f0efbab2d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/376267d534476a875d8b9228149c4ee18b74a4fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/b173ac05993f634a42be3d3535e1b158de0c3372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/f61fe5f6a0419ef4a88d46a128052f2e8352e85d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/iortcw/iortcw/commit/11a83410153756ae350a82ed41b08d128ff7f998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/iortcw/iortcw/commit/b248763e4878ef12d5835ece6600be8334f67da1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/iortcw/iortcw/commit/b6ff2bcb1e4e6976d61e316175c6d7c99860fe20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://ioquake3.org/2017/03/13/important-security-update-please-update-ioquake3-immediately/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T00:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data (disable_choose) passed to the \"concrete5-legacy-master/web/concrete/tools/files/search_dialog.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en concrete5 <= 5.6.3.4. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (disable_choose) pasados a la URL \"concrete5-legacy-master/web/concrete/tools/files/search_dialog.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concrete5:concrete5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.3.4",
            "matchCriteriaId" : "5C3593B0-7408-4C7B-B710-EF2110817B77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96891",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mnkras/concrete5/commit/3eab581ab670982676e9dabddc9ad439391174ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/commit/2b16399ce3e962a8c27fb3ec14bc8e855d65b63a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/issues/1947",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mnkras/concrete5/commit/3eab581ab670982676e9dabddc9ad439391174ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/commit/2b16399ce3e962a8c27fb3ec14bc8e855d65b63a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/issues/1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T00:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SiberianCMS before 4.10.0.  The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the \"SiberianCMS-master/errors/500.php\" URL.  An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SiberianCMS anterior a la versión 4.10.0. La vulnerabilidad existe debido a una filtración insuficiente de los datos (de registro) suministrados por el usuario que se pasan hacia la URL \"SiberianCMS-master/errors/500.php\". Un atacante podría ejecutar código HTML y script arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siberiancms:siberiancms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.2",
            "matchCriteriaId" : "DA9F838E-77FC-430B-ABC3-95C0B4187F7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Xtraball/SiberianCMS/issues/217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Xtraball/SiberianCMS/issues/217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T00:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data (content) passed to the \"Open.GL-master/index.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Open.GL en versiones anteriores a 13-03- 2017. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (content) pasados a la URL \"Open.GL-master/index.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open.gl_project:open.gl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-12",
            "matchCriteriaId" : "ED5DE479-5B96-413E-942B-52985B5E5677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96897",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Overv/Open.GL/issues/56",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Overv/Open.GL/issues/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T00:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data (fID) passed to the \"concrete5-legacy-master/web/concrete/tools/files/selector_data.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en concrete5 <= 5.6.3.4. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (fID) pasados a la URL \"concrete5-legacy-master/web/concrete/tools/files/selector_data.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concrete5:concrete5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.3.3",
            "matchCriteriaId" : "7D6FA92E-3131-47C7-9D41-725ACA502217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96891",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/commit/62046f511fc02ad783ad170404c80db3c69f0408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/issues/1948",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/commit/62046f511fc02ad783ad170404c80db3c69f0408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5-legacy/issues/1948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T00:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Shimmie <= 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the \"shimmie2-master/ext/chatbox/history/index.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Shimmie <= 2.5.1. La vulnerabilidad existe debido a filtración insuficiente de datos suministrados por el usuario (log) pasados a la URL \"shimmie2-master/ext/chatbox/history/index.php\". Un atacante podría ejecutar código HTML y secuencia de comandos arbitrario en un buscador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shishnet:shimmie:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "24AC5C70-C9F5-4FEB-AB17-83B920F71376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96932",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/shish/shimmie2/issues/597",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/shish/shimmie2/issues/597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La Management Web Interface en Palo Alto Networks PAN-OS en versiones anteriores a 6.1.16, 7.0.x en versiones anteriores a 7.0.13 y 7.1.x en versiones anteriores a 7.1.8 permite a usuarios remotos autenticados leer archivos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.15",
            "matchCriteriaId" : "E21D41C6-2ED7-46E1-A75D-62A9D8A671FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1C952B-5334-4AF0-8A8A-62248F592687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037890",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en la Management Web Interface en Palo Alto Networks PAN-OS 5.1, 6.x en versiones anteriores a 6.1.16, 7.0.x en versiones anteriores a 7.0.13 y 7.1.x en versiones anteriores a 7.1.8 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6E18B-8C06-488C-B241-63DBAFDFFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4DB103-A11A-4C38-A167-F0FCB8F6AA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A86F16D-61CA-4681-91CB-F397AC090F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583BC735-6DF1-40CE-880B-F91F233EAE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C43C313-A379-46C2-96B9-F510AA3E40AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55C68C0-1396-4640-8EBB-39E91347E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793347E-7D25-4B5E-B958-03DD0E7D94C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72841E93-FE05-4A92-B75E-300446ECCFC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D17E3A-BD59-42F6-940B-A82138C40317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345A2684-EC82-4A38-BA4D-E30F9F1B26AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1190461B-4815-4BC7-86AD-F3A53247961A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C0BD2C-8FFC-456F-ADA5-FC87BE29E2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40257C-B8F6-4E5A-A4A8-BE7599AE3389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF345A6C-2746-4F9D-9E19-BA94FEFD5EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E2F87A-AAF7-4DAC-836A-6EE632CCD121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505662DA-CE0B-433F-99EE-E6E4B86E8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10729E31-4313-4735-B38E-92C453904AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C621F1-28AC-49DB-BB40-66303CE51376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7CB75C-FAD1-454A-9672-C85C75B1C327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D8805A-016B-42E3-93CE-77A058A3B6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53918AA8-5C07-4A6B-864E-9B32A43F0148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52ACD7F6-A247-4BBB-B755-21BA761B9D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37137854-0AEE-49FC-8E57-F212A1C50C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE453584-23CD-4A5F-95B5-6E9EC6FA72D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B40FE56-106C-4168-964E-E4ACC285A4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C61BB3F-836A-480A-97B8-BFE82C1750E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A93B42-62D2-4D59-8F4F-5960DF3C6C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F331C4C2-EB0F-4CDB-8919-6755E8DE777A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB00F698-95E5-4566-9E11-D36461740B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD209EF2-BC95-40E5-B559-7F6E80DCF40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1C952B-5334-4AF0-8A8A-62248F592687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1037889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the nav_data name."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad tipo cross-site-scripting (XSS) en la función nav_path en el archivo lib/viewvc.py en ViewVC anterior a versión 1.0.14 y 1.1.x anterior a versión 1.1.26, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio del nombre nav_data."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF605E46-ADCE-45B3-BBBA-E593D3CEE2A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.25",
            "matchCriteriaId" : "48F736A6-92CB-475A-9BCB-1FD1A1066E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-02/msg00082.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3784",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96185",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/commit/9dcfc7daa4c940992920d3b2fbd317da20e44aad",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/issues/137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.0.14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.1.26",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-02/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/commit/9dcfc7daa4c940992920d3b2fbd317da20e44aad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/issues/137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.0.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.1.26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función vrend_renderer_init_blit_ctx en vrend_blitter.c en virglrenderer en versiones anteriores a 0.6.0 permite a usuarios locales de SO invitado provocar una denegación de servicio (consumo de memoria del host) a través de un gran número de comandos VIRGL_CCMD_BLIT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96275",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422438",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función vrend_create_vertex_elements_state en vrend_renderer.c en virglrenderer en versiones anteriores a 0.6.0 permite a usuarios locales del SO invitado provocar una denegación de servicio (acceso al array fuera de límites y caída) a través del parámetro num_elements."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96276",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422452",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en jstest_main.c en mujstest en Artifex Software, Inc. MuPDF 1.10a permite a atacantes remotos tener impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03FAE98-D477-4974-B585-4D1D8DE409B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/18/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96266",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/17/mupdf-mujstest-stack-based-buffer-overflow-in-main-jstest_main-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697551",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=06a012a42c9884e3cd653e7826cff1ddec04eb6e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=e089b2e2c1d38c5696c7dfd741e21f8f3ef22b14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/17/mupdf-mujstest-stack-based-buffer-overflow-in-main-jstest_main-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función parse_identifier en tgsi_text.c en el módulo auxiliar TGSI en el controlador Gallium en virglrenderer en versiones anteriores a 0.6.0 permite a usuarios locales del SO invitado provocar una denegación de servicio (acceso al array fuera de límites y caída del proceso QEMU) a través de vectores relacionados con propiedades de análisis."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/23/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96437",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426149",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/23/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero)."
      }, {
        "lang" : "es",
        "value" : "La función vrend_decode_reset en vrend_decode.c en virglrenderer en versiones anteriores a 0.6.0 permite a usuarios locales del SO invitado provocar una denegación de servicio (referencia a puntero NULL y caída del proceso QEMU) destruyendo el contexto 0 (cero)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/23/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96439",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426170",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/23/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función add_shader_program en vrend_renderer.c en virglrenderer en versiones anteriores a 0.6.0 permite a usuarios locales del SO invitado provocar una denegación de servicio (consumo de memoria del host) a través de vectores que implican la variable sprog."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/24/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96450",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426756",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/24/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the host_name parameter to dnslookup.cgi. NOTE: this issue can be combined with CVE-2017-6334 to execute arbitrary code remotely."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de CSRF en routers NETGEAR DGN2200 con firmware 10.0.0.20 hasta la versión 10.0.0.50 permite a atacantes remotos secuestrar la autenticación de usuarios para solicitudes que realizan búsquedas DNS a través del parámetro host_name a dnslookup.cgi. NOTA: este problema se puede combinar con CVE-2017-6334 para ejecutar código arbitrario de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.0.50",
            "matchCriteriaId" : "39F9F8D1-4B1F-4CB6-9A51-4783D986BF5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C6E7F8-958F-4131-83CF-4473E0B0EB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BD93FF-D3F5-41D9-BB40-141E02CA3253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9566C3-855E-43B3-AB35-6BBCE8D9AA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE59214-C8A1-4337-A54C-E4E8C149B241"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41472/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41472/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función vrend_create_vertex_elements_state en vrend_renderer.c en virglrenderer permite a usuarios locales del SO invitado provocar una denegación de servicio (consumo de memoria del host) a través de un gran número de comandos VIRGL_OBJECT_VERTEX_ELEMENTS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "0F935316-F2C2-4476-B086-0512FBB8FEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96506",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427472",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función vcard_apdu_new en card_7816.c en libcacard en versiones anteriores a 2.5.3 permite a usuarios locales del SO invitado provocar una denegación de servicio (consumo de memoria del host) a través de vectores relacionados con la asignación de un nuevo objeto APDU."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcacard_project:libcacard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "343DB6CA-D9DF-4366-82F3-A7665A427133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/01/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96541",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427833",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/01/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1427833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.963",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "La función parse_string_node en bplist.c en libimobiledevice libplist 1.12 permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libplist_project:libplist:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6673CC0-FAB1-4A77-8B0F-0D8103A81437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/fbd8494d5e4e46bf2e90cb6116903e404374fb56",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/93",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/fbd8494d5e4e46bf2e90cb6116903e404374fb56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:00.993",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "La función parse_string_node en bplist.c en libimobiledevice libplist 1.12 permite a usuarios locales provocar una denegación de servicio (error de asignación de memoria) a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libplist_project:libplist:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6673CC0-FAB1-4A77-8B0F-0D8103A81437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/32ee5213fe64f1e10ec76c1ee861ee6f233120dd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/94",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/32ee5213fe64f1e10ec76c1ee861ee6f233120dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "La función base64encode en base64.c libimobiledevice libplist 1.12 permite a usuarios locales provocar una denegación de servicio (lectura fuera de límites) a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libplist_project:libplist:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6673CC0-FAB1-4A77-8B0F-0D8103A81437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/100",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función parse_unicode_node en bplist.c en libimobiledevice libplist 1.12 permite a usuarios locales provocar una denegación de servicio (escritura fuera de límites) y posiblemente ejecución de código a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libplist_project:libplist:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6673CC0-FAB1-4A77-8B0F-0D8103A81437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/98",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función parse_string_node en bplist.c en libimobiledevice libplist 1.12 permite a usuarios locales provocar una denegación de servicio (escritura fuera de límites) a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libplist_project:libplist:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6673CC0-FAB1-4A77-8B0F-0D8103A81437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/32ee5213fe64f1e10ec76c1ee861ee6f233120dd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/95",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/commit/32ee5213fe64f1e10ec76c1ee861ee6f233120dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "La función parse_data_node en bplist.c en libimobiledevice libplist 1.12 permite a usuarios locales provocar una denegación de servicio (error de asignación de memoria) a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libplist_project:libplist:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6673CC0-FAB1-4A77-8B0F-0D8103A81437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/99",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330."
      }, {
        "lang" : "es",
        "value" : "La función ohci_service_ed_list en hw/usb/hcd-ohci.c en QEMU (también conocido como Quick Emulator) en versiones anteriores a la 2.9.0 permite que los usuarios locales del sistema operativo invitado provoquen una denegación de servicio (bucle infinito) mediante vectores que involucran el número de descriptores de la lista de endpoints de enlace. Esta es una vulnerabilidad diferente de CVE-2017-9330."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/06/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96611",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1429432",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/06/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1429432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función MSADPCM::initializeCoefficients en MSADPCM.cpp en audiofile (también conocido como libaudiofile y Audio File Library) 0.3.6 permite a atacantes remotos tener impacto no especificado a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcminitializecoefficients-msadpcm-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcminitializecoefficients-msadpcm-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer basado en memoria dinámica en la función readValue en FileHandle.cpp en audiofile (también conocido como libaudiofile y Audio File Library) 0.3.6 permite a atacantes remotos tener impacto no especificado a través de un archivo WAV manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-readvalue-filehandle-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-readvalue-filehandle-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ColorChanger::GetColorFromStack en colorchanger.cpp en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (lectura no válida) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-invalid-memory-read-in-colorchangergetcolorfromstack-colorchanger-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-invalid-memory-read-in-colorchangergetcolorfromstack-colorchanger-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función GraphicsStack::TGraphicsStackElement::~ TGraphicsStackElement en graphicsstack.h en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementtgraphicsstackelement-graphicsstack-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementtgraphicsstackelement-graphicsstack-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ColorChanger::GetColorFromStack en colorchanger.cpp en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-colorchangergetcolorfromstack-colorchanger-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-colorchangergetcolorfromstack-colorchanger-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función PoDoFo::PdfVariant::DelayedLoad en PdfVariant.h en PoDoFo 0.9.4 permite a atacantes remotos tener un impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-heap-based-buffer-overflow-in-podofopdfvariantdelayedload-pdfvariant-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-heap-based-buffer-overflow-in-podofopdfvariantdelayedload-pdfvariant-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función PoDoFo::PdfParser::ReadXRefSubsection en PdfParser.cpp en PoDoFo 0.9.4 permite a atacantes remotos tener un impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-global-buffer-overflow-in-podofopdfparserreadxrefsubsection-pdfparser-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-global-buffer-overflow-in-podofopdfparserreadxrefsubsection-pdfparser-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfColor::operator en PdfColor.cpp en PoDoFo 0.9.4 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcoloroperator-pdfcolor-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcoloroperator-pdfcolor-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función GraphicsStack::TGFraphicsStackElement::SetNonStrokingColorSpace en graphicsstack.h en PoDoFo 0.9.4 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementsetnonstrokingcolorspace-graphicsstack-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementsetnonstrokingcolorspace-graphicsstack-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfVariant::DelayedLoad en PdfVariant.h en PoDoFo 0.9.4 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfvariantdelayedload-pdfvariant-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfvariantdelayedload-pdfvariant-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfXObject::PdfXObject en PdfXObject.cpp en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfxobjectpdfxobject-pdfxobject-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfxobjectpdfxobject-pdfxobject-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfColorGray::~ PdfColorGray en PdfColor.cpp en PoDoFo 0.9.4 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8708B68A-5EE4-4FDB-B5F5-293AFF028F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcolorgraypdfcolorgray-pdfcolor-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcolorgraypdfcolorgray-pdfcolor-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función jp2_cdef_destroy en jp2_cod.c en JasPer en versiones anteriores a 2.0.13 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B57ADFF8-1D59-4A9D-AF9F-1CEB4B727362"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/01/25/jasper-null-pointer-dereference-in-jp2_cdef_destroy-jp2_cod-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/commit/e96fc4fdd525fa0ede28074a7e2b1caf94b58b0d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/112",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3693-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/25/jasper-null-pointer-dereference-in-jp2_cdef_destroy-jp2_cod-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/commit/e96fc4fdd525fa0ede28074a7e2b1caf94b58b0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3693-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función jas_matrix_bindsub en jas_seq.c en JasPer 2.0.10 permite a atacantes remotos provocar una denegación de servicio (lectura no válida) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.9",
            "matchCriteriaId" : "28BE5325-159D-4D31-9110-C26D6E305DB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/01/25/jasper-invalid-memory-read-in-jas_matrix_bindsub-jas_seq-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/113",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/25/jasper-invalid-memory-read-in-jas_matrix_bindsub-jas_seq-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T14:59:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función jpc_dec_decodepkt en jpc_t2dec.c en JasPer 2.0.10 permite a atacantes remotos tener un impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.9",
            "matchCriteriaId" : "28BE5325-159D-4D31-9110-C26D6E305DB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/01/25/jasper-heap-based-buffer-overflow-in-jpc_dec_decodepkt-jpc_t2dec-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/114",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/25/jasper-heap-based-buffer-overflow-in-jpc_dec_decodepkt-jpc_t2dec-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function."
      }, {
        "lang" : "es",
        "value" : "Desbordamientos de búfer basados en pila en php_Easycom5_3_0.dll en EasyCom para PHP 4.0.0.29 permite a atacantes remotos ejecutar código arbitrario a través del argumento del servidor a la función de la API i5_connect, (2) i5_pconnect o (3) i5_private_connect."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easycom-aura:easycom_for_php:4.0.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49EAED5-218A-40A2-AE2B-94FD3335E450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/EASYCOM-PHP-API-BUFFER-OVERFLOW.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP-API-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/60",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96419",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41425/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/EASYCOM-PHP-API-BUFFER-OVERFLOW.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP-API-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41425/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI."
      }, {
        "lang" : "es",
        "value" : "EasyCom SQL iPlug permite a atacantes remotos provocar una denegación de servicio a través del parámetro D$EVAL a la URl predeterminada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easycom-aura:sql_iplug:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5580AFF8-6A57-4AAF-9D86-2F9BE8E14ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/61",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540218/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96420",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41426/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540218/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41426/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash."
      }, {
        "lang" : "es",
        "value" : "Sawmill Enterprise 8.7.9 permite a atacantes remotos obtener acceso al inicio de sesión aprovechando el conocimiento de un hash de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sawmill:sawmill:8.7.9:*:*:*:*:enterprise:*:*",
            "matchCriteriaId" : "F134D70D-D84A-4BB9-A1CB-E4FF2509AE1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SAWMILL-PASS-THE-HASH-AUTHENTICATION-BYPASS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141177/Sawmill-Enterprise-8.7.9-Authentication-Bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/46",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41395/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SAWMILL-PASS-THE-HASH-AUTHENTICATION-BYPASS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141177/Sawmill-Enterprise-8.7.9-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41395/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5525",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-15T15:59:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en hw/audio/ac97.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (consumo de memoria del host y caída del proceso QEMU) a través de un gran número de operaciones de desenchufado del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=12351a91da97b414eec8cdb09f1d9f41e535a401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/19",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/7",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=12351a91da97b414eec8cdb09f1d9f41e535a401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5526",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-15T15:59:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en hw/audio/es1370.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (consumo de memoria del host y caída del proceso QEMU) a través de un gran número de operaciones de desenchufado del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=069eb7b2b8fc47c7cb52e5a4af23ea98d939e3da",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=069eb7b2b8fc47c7cb52e5a4af23ea98d939e3da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:00.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests."
      }, {
        "lang" : "es",
        "value" : "El formulario de restablecimiento de contraseña en Weblate en versiones anteriores a 2.10.1 proporciona diferentes mensajes de error dependiendo de si la dirección de correo electrónico está asociada con una cuenta, lo que permite a atacantes remotos enumerar cuentas de usuario a través de una serie de solicitudes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10",
            "matchCriteriaId" : "1D99D0EC-932C-429F-A026-FEF01C817081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/issues/1317",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/issues/1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función virgl_resource_attach_backing en hw/display/virtio-gpu-3d.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales de SO invitado provocar una denegación de servicio (consumo de memoria del host) a través de un gran número de comandos VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=33243031dad02d161225ba99d782616da133f689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/20/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=33243031dad02d161225ba99d782616da133f689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/20/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/21/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5578",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-15T15:59:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función virtio_gpu_resource_attach_backing en hw/display/virtio-gpu.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales de SO invitado provocar una denegación de servicio (consumo de memoria del host) a través de un gran número de comandos VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=204f01b30975923c64006f8067f0937b91eea68b",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/23/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=204f01b30975923c64006f8067f0937b91eea68b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/23/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5579",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-15T15:59:00.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función serial_exit_core en hw/char/serial.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (consumo de memoria del host y caída del proceso QEMU) a través de un gran número de operaciones de desenchufado del dispositivo ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D5C1F9-C3B4-4733-8782-0E54AE543C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "286D3DE9-9796-42AE-88E1-F6E04BF8B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B54248FC-FD5C-445E-BD8F-886D9D8736D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "89FB8D92-4A3A-4B52-93B0-6F809D313C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "06A8F83F-3551-4F3B-A0C9-EE6B8BA5436A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=8409dc884a201bf74b30a9d232b6bbdd00cb7e2b",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/24/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=8409dc884a201bf74b30a9d232b6bbdd00cb7e2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/24/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5580",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-15T15:59:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction."
      }, {
        "lang" : "es",
        "value" : "La función parse_instruction en gallium/auxiliar/tgsi/tgsi_text.c en virglrenderer en versiones anteriores a 0.6.0 permite a usuarios locales del SO invitado provocar una denegación de servicio (acceso al array fuera de límites y caída del proceso) a través de una instrucción de textura manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/24/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95782",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894a30a17a84529be102b21118e55d6c9f23fa",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/24/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/25/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894a30a17a84529be102b21118e55d6c9f23fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en Amazon Kindle para PC en versiones anteriores a 1.19 permite a usuarios locales ejecutar código arbitrario y realizar ataques de secuestro de DLL a través de un Troyano DLL en el directorio de trabajo actual del instalador de Kindle Setup."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:kindle_for_pc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17.44183",
            "matchCriteriaId" : "D758ADA6-8BE8-4482-A168-686E63E324F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141366/Amazon-Kindle-DLL-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96476",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141366/Amazon-Kindle-DLL-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la utilidad tcpcapinfo en Tcpreplay en versiones anteriores a 4.2.0 Beta 1 permite a atacantes remotos tener impacto no especificado a través de un archivo pcap con un paquete de gran tamaño."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "691D9AF2-A5A6-48C9-B6E0-14698A455306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540221/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96579",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/commit/d689d14dbcd768c028eab2fb378d849e543dcfe9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-beta1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540221/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/commit/d689d14dbcd768c028eab2fb378d849e543dcfe9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-beta1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter."
      }, {
        "lang" : "es",
        "value" : "La función compile_tree en ef_compiler.c en la utilidad Etterfilter de Ettercap 0.8.2 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de un filtro manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ettercap-project:ettercap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.2",
            "matchCriteriaId" : "65344FA4-AE57-4D1A-A2EF-67FC5C09961A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540223/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96582",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Ettercap/ettercap/issues/782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540223/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Ettercap/ettercap/issues/782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T15:59:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to inject arbitrary web script or HTML via the W_AD1 parameter to Forms/oadmin_1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en EPSON TMNet WebConfig 1.00 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro W_AD1 a Forms/oadmin_1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epson:tmnet_webconfig:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2E7C70-7379-42E8-A0F6-BAD7DFCD9C96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96556",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41502/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41502/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T16:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en MapServer en versiones anteriores a 6.0.6, 6.2.x en versiones anteriores a 6.2.4, 6.4.x en versiones anteriores a 6.4.5 y 7.0.x en versiones anteriores a 7.0.4 permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código arbitrario a través de vectores que implican solicitudes WFS de obtención de función."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "2616104A-15A1-4EE2-B422-F0A0956029B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A7F401-1829-440B-A7D0-08515F73E11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC09B39C-A41A-4024-A5CE-1D8FDFB9C67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E25092AC-76DD-495D-9FB6-A6D76A08464D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C738E019-D602-4E5C-8FB3-64CC5F11EF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD649DB-1FE8-4973-B329-107A89FD6799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6833DE-045A-4458-A067-CCFA3A8CE016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A01342-B989-4134-8692-8BD8A42B93D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52DB9E8-C9B0-4513-B181-05A98404C04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5EA648-9431-45F1-93FE-2D60C08634B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "995FF868-DD52-4625-AD2E-74BB63F4BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA6FB628-5D34-46DF-BF7F-5D277A51F9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC08735-4E07-45F2-AE1B-56F6B9291FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB85B09-03A4-4296-8CDC-40338C7F92EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9D9693-6F02-4F21-AD59-A0AEA73D6374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8EA460-06CF-4175-999C-5C98E9B0DC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3905DE6B-14D9-45E0-9A95-9EE131691658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6DD7AA-AA71-497E-9BCC-7CDD450EA7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251BBE27-A977-4725-AFCA-22CF96CBD965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:7.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1C2F87-63A3-4D2C-AB84-B7C319058572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:7.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "46A22D61-588D-476C-8284-EEE3EDC53EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7043E9-2FE4-441D-AF8E-139AF97387CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131EA02D-E121-4BED-9381-688A2ED16595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53903F5-D572-4CDA-BEC3-EAA5FDBB5A2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-6-0-6.html#changelog-6-0-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-6-2-4.html#changelog-6-2-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-7-0.html#changelog-7-0-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mapserver/mapserver/commit/e52a436c0e1c5e9f7ef13428dba83194a800f4df",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.osgeo.org/pipermail/mapserver-dev/2017-January/015007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-6-0-6.html#changelog-6-0-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-6-2-4.html#changelog-6-2-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.mapserver.org/development/changelog/changelog-7-0.html#changelog-7-0-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mapserver/mapserver/commit/e52a436c0e1c5e9f7ef13428dba83194a800f4df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.osgeo.org/pipermail/mapserver-dev/2017-January/015007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T16:59:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted."
      }, {
        "lang" : "es",
        "value" : "CSRF existe en BigTree CMS 4.1.18 y 4.2.16 con el parámetro id a la página admin/ajax/users/delete/. Se puede borrar un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFA8BE-8264-4255-ABB0-E5B0C19332DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3B28D-4A39-4A77-9C02-7047481DB2A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T16:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page. The Colophon can be changed."
      }, {
        "lang" : "es",
        "value" : "Existe CSRF en BigTree CMS 4.1.18 con el parámetro colophon en la página admin/settings/update/. Se puede cambiar el Colophon."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFA8BE-8264-4255-ABB0-E5B0C19332DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T16:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed."
      }, {
        "lang" : "es",
        "value" : "Existe CSRF en BigTree CMS 4.1.18 con el parámetro nav-social [#] a la página admin/settings/update/. Se puede cambiar la Navigation Social."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFA8BE-8264-4255-ABB0-E5B0C19332DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T16:59:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed."
      }, {
        "lang" : "es",
        "value" : "Existe CSRF en BigTree CMS 4.2.16 con el parámetro value a la página admin/settings/update/. Se puede cambiar el Colofón."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3B28D-4A39-4A77-9C02-7047481DB2A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T16:59:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed."
      }, {
        "lang" : "es",
        "value" : "Existe CSRF en BigTree CMS 4.2.16 con el parámetro valor [#] [*] a la página admin/settings/update/. Se puede cambiar la Navigation Social."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3B28D-4A39-4A77-9C02-7047481DB2A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T19:59:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values."
      }, {
        "lang" : "es",
        "value" : "tiffttopnm en netpbm 10.47.63 no utiliza correctamente la función libtiff TIFFRGBAImageGet, lo que permite a atacantes remotos provocar una denegación de servicio (lectura y escritura fuera de límites) a través de un archivo de imagen tiff manipulado, relacionado con la transposición de los valores de anchura y altura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm_project:netpbm:10.47.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080241F5-5B0A-40CD-8282-490499D26080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2654",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AF42A624FXVY3BYBHMAO6F2X7EJYHQE2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDK3BDMKIQL2NQ3SJZXPBEN2LSOUSSEE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AF42A624FXVY3BYBHMAO6F2X7EJYHQE2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDK3BDMKIQL2NQ3SJZXPBEN2LSOUSSEE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T19:59:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función emulated_apdu_from_guest en usb/dev-smartcard-reader.c en Quick Emulator (Qemu), cuando se construye con el soporte de emulador de dispositivo de CCID Card, permite a usuarios locales provocar una denegación de servicio (caída de aplicación) a través de una unidad Unidad de datos de protocolo (APDU) grande."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:ltss:*:*:*:*:*:*",
            "matchCriteriaId" : "D51045FB-8610-48E3-98AF-604677FCC113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2076747F-A98E-4DD9-9B52-BF1732BCAD3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62909921-8CC8-489E-BFBA-A28B751B182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A633996-2FD7-467C-BAA6-529E16BD06D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1419699",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1419699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5937",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-15T19:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command."
      }, {
        "lang" : "es",
        "value" : "La función util_format_is_pure_uint en vrend_renderer.c en el proyecto Virgil 3d (también conocido como virglrenderer) 0.6.0 y versiones anteriores permite a usuarios locales de SO invitado provocar una denegación de servicio (referencia a puntero NULL) a través de un comando VIRGL_CCMD_CLEAR manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96180",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1420246",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1420246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3819",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-15T20:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The vulnerability is due to missing input validation of parameters passed during SSH or SFTP login. An attacker could exploit this vulnerability by providing crafted user input to the SSH or SFTP command-line interface (CLI) during SSH or SFTP login. An exploit could allow an authenticated attacker to gain root privileges access on the router. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability can be triggered via both IPv4 and IPv6 traffic. An established TCP connection toward port 22, the SSH default port, is needed to perform the attack. The attacker must have valid credentials to login to the system via SSH or SFTP. The following products have been confirmed to be vulnerable: Cisco ASR 5000/5500/5700 Series devices running StarOS after 17.7.0 and prior to 18.7.4, 19.5, and 20.2.3 with SSH configured are vulnerable. Cisco Virtualized Packet Core - Single Instance (VPC-SI) and Distributed Instance (VPC-DI) devices running StarOS prior to N4.2.7 (19.3.v7) and N4.7 (20.2.v0) with SSH configured are vulnerable. Cisco Bug IDs: CSCva65853."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios en el subsistema Secure Shell (SSH) en el sistema operativo StarOS para dispositivos Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series y Cisco Virtualized Packet Core podrían permitir a un atacante remoto autenticado obtener acceso no restringido al shell del root. La vulnerabilidad se debe a falta de validación de entrada de los parámetros pasados ??durante el inicio de sesión de SSH o SFTP. Un atacante podría explotar esta vulnerabilidad proporcionando una entrada de usuario manipulada a la interfaz de línea de comandos (CLI) de SSH o SFTP durante el inicio de sesión de SSH o SFTP. Una explotación podría permitir a un atacante autenticado obtener acceso privilegiado al root en el router. Nota: Sólo se puede utilizar tráfico dirigido al sistema afectado para explotar esta vulnerabilidad. Esta vulnerabilidad puede ser desencadenada a través de tráfico tanto IPv4 como IPv6. Se necesita una conexión TCP establecida hacia el puerto 22, el puerto por defecto SSH, para realizar el ataque. El atacante debe tener credenciales válidas para iniciar sesión en el sistema a través de SSH o SFTP. Se ha confirmado que los siguientes productos son vulnerables: los dispositivos Cisco ASR 5000/5500/5700 que ejecutan StarOS después de 17.7.0 y anteriores a 18.7.4, 19.5 y 20.2.3 con SSH configurados son vulnerables. Los dispositivos Cisco Virtualized Packet Core - Single Instance (VPC-SI) y Distributed Instrance (VPC-DI) que ejecutan StarOS en versiones anteriores a N4.2.7 (19.3.v7) y N4.7 (20.2.v0) con SSH configurado son vulnerables. ID de errores de Cisco: CSCva65853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B57288-1315-4FE2-98EC-3BA853B153FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.0.0.57828:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42B4015-BE1D-4331-94F8-BE09C97C3577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.0.0.59167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDD7437-E7C1-431F-933C-D1D861B22570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.0.0.59211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200B5C31-A417-4E1C-8DEA-BAEBE9ED2385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.0.l0.59219:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C13FB6-82A5-48B1-B88A-34FB9C6E76F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F411E10A-D6D2-4A20-80AD-A274A91BB16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.1.0.59776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF3CC6F-A983-4199-BF06-8D10DB7811AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.1.0.59780:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923253CB-11EF-4081-8748-DEC92E91C7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B5F97D-7AD7-4E62-82CC-685ACC732437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5B5E37-D630-4BE5-A23C-65D5C6C8BBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E83AF5F-D4F3-46EB-ABED-EC6A64CF1C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:18.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A9DF64-3AF6-4DA7-B97C-34D8D502C4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701EB7E5-C0D8-4946-AECD-276131896091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.0.m0.60737:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE570D8B-CFFE-4BCC-B93B-C0E78C44E49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.0.m0.60828:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B759ACB4-0A70-4891-9C28-68300000AAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.0.m0.61045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A457D1F-C1CA-43BA-8623-012BD07E468F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B1F09F-CBAA-4CA6-AE80-F89F02876E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.1.0.61559:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5740B38F-BBD3-499D-A8B6-685EE7D9E146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C994D7-9759-41F7-B672-3EC2FD8C7FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1938A8E-8DAC-43FA-98C8-8BBEC8061701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE327B4-D5D7-48CD-81CE-2729CA9DC7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v18.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272EDB8-CA6A-4AC9-9BD3-7322C4A4115F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v19.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E055E0A-21F4-4036-A985-3EFB1022F9E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v20.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3CA29A-DA96-4C48-8140-A73C5857DBE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96913",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038050",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3831",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-15T20:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A successful exploit could allow the attacker to bypass authentication and perform unauthorized configuration changes or issue control commands to the affected device. This vulnerability affects Cisco Mobility Express 1800 Series Access Points running a software version prior to 8.2.110.0. Cisco Bug IDs: CSCuy68219."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz gráfica de usuario basada en web de los puntos de acceso Cisco Mobility Express serie 1800 podría permitir a un atacante remoto no autenticado eludir la autenticación. El atacante podría tener privilegios completos de administrador. La vulnerabilidad se debe a la implementación incorrecta de la autenticación para acceder a determinadas páginas web a través de la interfaz GUI. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a la interfaz web del sistema afectado. Una explotación exitosa podría permitir al atacante eludir la autenticación y realizar cambios de configuración no autorizados o mandar comandos de control al dispositivo afectado. Esta vulnerabilidad afecta a los puntos de acceso Cisco Mobility Express Serie 1800 que ejecutan una versión de software anterior a 8.2.110.0. ID de errores de Cisco: CSCuy68219."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_software:8.1\\(15.14\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "88453D71-DAF5-4813-9776-5391C31B1006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_software:8.1\\(112.3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A187F61E-D4A4-4DF9-93B4-981C4B86F284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_software:8.1\\(112.4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92A6EC5-E47A-4001-A25C-A1043B346EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_software:8.1\\(131.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE1697B-74D9-4416-AFBA-EAD5C0E5A6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F923CF-D4EB-48F8-821D-8BB3A69ABB62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1810w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D613A17-FFA9-4FF0-9C2A-AF8ACD59B765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207DC80E-499C-4CA3-8A88-F027DBC64CCF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4590D445-B4B6-48E6-BF55-BEA6BA763410"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848CC5CD-1982-4F31-A626-BD567E1C19F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E47788-9B54-42C5-AD83-428B22674575"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A333CD0B-4729-4E64-8B52-A3F5138F5B70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96909",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3846",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-15T20:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted URL to the Client Manager Server. An exploit could allow the attacker to retrieve any file from the Cisco Workload Automation or Cisco Tidal Enterprise Scheduler Client Manager Server. This vulnerability affects the following products: Cisco Tidal Enterprise Scheduler Client Manager Server releases 6.2.1.435 and later, Cisco Workload Automation Client Manager Server releases 6.3.0.116 and later. Cisco Bug IDs: CSCvc90789."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Client Manager Server de Cisco Workload Automation y Cisco Tidal Enterprise Scheduler podría permitir a un atacante remoto no autenticado recuperar cualquier archivo de Client Manager Server. La vulnerabilidad se debe a la insuficiente validación de entradas. Un atacante podría explotar esta vulnerabilidad enviando una URL manipulada a Client Manager Server. Un exploit podría permitir al atacante recuperar cualquier archivo de Cisco Workload Automation o Cisco Tidal Enterprise Scheduler Client Manager Server. Esta vulnerabilidad afecta a los siguientes productos: Cisco Tidal Enterprise Scheduler Client Manager Server versión 6.2.1.435 y versiones posteriores, Cisco Workload Automation Client Manager Server versión 6.3.0.116 y versiones posteriores. ID de errores de Cisco: CSCvc90789."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.2.1.435:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03664F3E-D42C-4437-910A-64D57DFF9664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.2.1.510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AA140E-7F7F-44C2-9241-9ACDF4D75776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB809B62-B1B5-456F-B841-F4052C4F2B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.3.0.116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E15966-76FE-4E00-A509-248D9D6A3048"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96910",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038044",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tes",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3854",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-15T20:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configuration. An attacker could exploit this vulnerability by forcing the target system to disconnect from the correct parent access point and reconnect to a rogue access point owned by the attacker. An exploit could allow the attacker to control the traffic flowing through the impacted access point or take full control of the target system. This vulnerability affects the following products running a vulnerable version of Wireless LAN Controller software and configured for meshed mode: Cisco 8500 Series Wireless Controller, Cisco 5500 Series Wireless Controller, Cisco 2500 Series Wireless Controller, Cisco Flex 7500 Series Wireless Controller, Cisco Virtual Wireless Controller, Wireless Services Module 2 (WiSM2). Note that additional configuration is needed in addition to upgrading to a fixed release. Cisco Bug IDs: CSCuc98992 CSCuu14804."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de malla del software Cisco Wireless LAN Controller (WLC) podría permitir a un atacante remoto no autenticado hacerse pasar por un WLC en una topología en malla. La vulnerabilidad se debe a una autenticación insuficiente del punto de acceso padre en una configuración de malla. Un atacante podría explotar esta vulnerabilidad forzando al sistema de destino a desconectarse del punto de acceso padre correcto y volver a conectarse a un punto de acceso deshonesto propiedad del atacante. Un exploit podría permitir al atacante controlar el tráfico que fluye a través del punto de acceso afectado o tomar el control total del sistema de destino. Esta vulnerabilidad afecta a los siguientes productos que ejecutan una versión vulnerable del software Wireless LAN Controller y están configurados para el modo de malla: Controlador inalámbrico Cisco 8500 Series, Controlador inalámbrico Cisco 5500 Series, Controlador inalámbrico Cisco 2500 Series, Controlador inalámbrico Cisco Flex 7500 Series, Controlador inalámbrico virtual Cisco , Wireless Services Module 2 (WiSM2). Tenga en cuenta que se necesita una configuración adicional además de actualizar a una versión fija. ID de errores de Cisco: CSCuc98992 CSCuu14804."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_firmware:8.0.72.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D442BA-AF11-4758-9894-D832CC3592C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:6.0199.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66BD610-3E55-4C6E-9C63-2D1FDE44AD74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:7.41.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD4FC3F-E63E-44BC-B0D2-CB92AED223DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:7.0220.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E448C65-1694-402C-9F07-0F03CD23A0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:7.0250.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4418591D-4ABF-43E9-A156-CBD431EA653C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:16.088.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FACF156-5132-46F5-B5A6-0A2085052306"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:2500_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A0DE1A-D1A2-4F5A-B237-4F53892775E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:2504_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2B56FF-7F15-4926-A570-472BC675306F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:5500_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA74EC6-0B2D-441A-8DDB-FFB736D0CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:5508_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FD7B8F-475B-4DAD-9873-4732FADA5230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:7500_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51BCAD1-576F-44A7-85CF-DF03363DBFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:7510_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD85056-5B85-4AE2-8BA6-A7E0B5C05EA9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8510_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DD7F84-B295-4F4B-9F06-140C81B6E9B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8540_wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340E1032-ED1A-40D2-BC97-7AAE8EC1AA76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:virtual_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8023AEFE-3489-49F4-90AE-210DCF1E0E6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_service_module_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7918A9DA-D75C-4A39-B3B7-10233DC05619"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96911",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038041",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wlc-mesh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wlc-mesh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T21:59:00.153",
      "lastModified" : "2023-11-07T02:49:55.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T21:59:00.183",
      "lastModified" : "2023-11-07T02:49:55.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T21:59:00.213",
      "lastModified" : "2023-11-07T02:49:55.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T21:59:00.247",
      "lastModified" : "2023-11-07T02:49:55.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-15T21:59:00.277",
      "lastModified" : "2023-11-07T02:49:55.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6023",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-03-16T04:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Fatek Automation PLC Ethernet Module. Las herramientas de configuración del software Ether_cfg afectado en las siguientes versiones de Fatek PLCs: CBEH anteriores a V3.6 Build 170215, CBE versiones anteriores a V3.6 Build 170215, CM55E versiones anteriores a V3.6 Build 170215 y CM25E versiones anteriores a V3.6 Build 170215. Se ha identificado un desbordamiento de búfer basado en pila, lo que podría permitir ejecución remota de código o caída del dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fatek:ethernet_module_configuration_tool_cbe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "B5962575-2692-4BE9-A2ED-0876266FE32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fatek:ethernet_module_configuration_tool_cbeh_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "B0EF5A0F-70CF-45DA-9059-71897B80CA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fatek:ethernet_module_configuration_tool_cm25e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "E315B2C5-B4F7-4E40-BB34-8DF025DA6E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fatek:ethernet_module_configuration_tool_cm55e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "D0F51CA0-E22C-4200-96A5-E726766F9072"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fatek:plc_ethernet_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86322EB5-ED30-4FC3-9810-CC11F38246A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96892",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T04:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en el componente de ayuda de SAP BusinessObjects Financial Consolidation 10.0.0.1933 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una solicitud GET. /finance/help/en/frameset.htm es la URl para este componente. La respuesta del vendedor es SAP Security Note 2368106."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_financial_consolidation:10.0.0.1933:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133BD729-4F60-486E-A05C-1C82A6D59428"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141349/SAP-BusinessObjects-Financial-Consolidation-10.0.0.1933-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/69",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96461",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037910",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141349/SAP-BusinessObjects-Financial-Consolidation-10.0.0.1933-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6377",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2017-03-16T14:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass."
      }, {
        "lang" : "es",
        "value" : "Cuando se añade un archivo privado a través del editor en Drupal 8.2.x en versiones anteriores a 8.2.7, el editor no comprobará correctamente el acceso para el archivo que se adjunta, resultando en una elusión de acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA084D8B-FEFC-41D5-A384-1DCB297CC1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5756FE-158A-4194-9E5E-EA918C4A3D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F344F3CE-C45E-4C3A-9F48-DAA0F2A49137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7BA91-93C2-4615-8A4D-11702FF5A155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "615DED7F-691F-4EF8-BE82-6E51B4971BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "467F335F-6FA1-413F-995F-29136658D969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABC38A1-0034-4CDE-B580-8026D6E0FE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA63C78-B234-4EBA-99A2-070213D1DA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997EF82A-B6C0-403A-BA58-E174FF2D981F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE56E4F-47D3-41F4-951E-3E4BBE74B6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8601673A-8FF8-4430-BB24-038443E1CED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD82372-D143-4AE7-8FE0-40FFD8F3E153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96919",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038058",
        "source" : "mlhess@drupal.org"
      }, {
        "url" : "https://www.drupal.org/SA-2017-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.drupal.org/SA-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6379",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2017-03-16T14:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID."
      }, {
        "lang" : "es",
        "value" : "Algunos caminos administrativos en Drupal 8.2.x en versiones anteriores a 8.2.7 no incluyeron protección para CSRF. Esto permitiría a un atacante deshabilitar algunos bloques en un sitio. Este problema se ve mitigado por el hecho de que los usuarios tendrían que conocer la ID del bloque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA084D8B-FEFC-41D5-A384-1DCB297CC1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5756FE-158A-4194-9E5E-EA918C4A3D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F344F3CE-C45E-4C3A-9F48-DAA0F2A49137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7BA91-93C2-4615-8A4D-11702FF5A155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "615DED7F-691F-4EF8-BE82-6E51B4971BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "467F335F-6FA1-413F-995F-29136658D969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABC38A1-0034-4CDE-B580-8026D6E0FE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA63C78-B234-4EBA-99A2-070213D1DA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997EF82A-B6C0-403A-BA58-E174FF2D981F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE56E4F-47D3-41F4-951E-3E4BBE74B6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8601673A-8FF8-4430-BB24-038443E1CED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD82372-D143-4AE7-8FE0-40FFD8F3E153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96919",
        "source" : "mlhess@drupal.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038058",
        "source" : "mlhess@drupal.org"
      }, {
        "url" : "https://www.drupal.org/SA-2017-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.drupal.org/SA-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6381",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2017-03-16T14:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments"
      }, {
        "lang" : "es",
        "value" : "Una libreria de desarrollo de terceros que incluye las dependencias de desarrollo de Drupal 8 es vulnerable a ejecución remota de código. Esto se mitiga por la protección .htaccess predeterminada contra ejecución de PHP y el hecho de que las dependencias de desarrollo de Composer no están instaladas normalmente. Puede ser vulnerable a ésto si está ejecutando una versión de Drupal en versiones anteriores a 8.2.2. Para asegurarse de que no es vulnerable, puede quitar el directorio /vendor/phpunit de sus implementaciones de producción"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C20DAD7-13A7-40F7-B6E0-965DB4E14508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*",
            "matchCriteriaId" : "144694E6-3287-4F4D-A687-7F495133DBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*",
            "matchCriteriaId" : "581D686B-1061-4271-BEF4-17A429BD666A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E45AA6-5FAF-4C63-91F5-0765CE60191A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5D81CF-AE7B-4A9C-AD8F-9A19D2AC35DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*",
            "matchCriteriaId" : "A27535A5-7C4F-4548-A4B8-5FFBD58361D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*",
            "matchCriteriaId" : "17BC6508-3518-4BB5-B29F-4E6CB6DE9D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBB5620-5847-443F-8356-B66EE93A3779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E81260D-E0D2-4FD2-AAED-99945404EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7D34E6-76E0-4BCB-A4C8-9401C7331EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "201E2EA9-B811-4BB2-867A-6F12DC472911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*",
            "matchCriteriaId" : "C957B189-10C2-4D42-B5B9-03F7DE287C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E21838-CDEC-41B2-AE40-C78DE8984B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*",
            "matchCriteriaId" : "639F0284-85D1-40B0-B337-77632E7A664B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4B611A-3628-41EA-878D-BF9D6C34AA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "856E46E5-1BF3-42F4-AFCB-81275B1EF265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "B351F769-598F-4E3E-99EA-94A5516995A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "220900E6-5859-4CA9-831E-3FF3C128F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55D51E-DE2D-469C-9F9C-F312A02EE921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*",
            "matchCriteriaId" : "259B5FE7-2808-4F61-B98C-73ECC7F9503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "BA263BE6-2088-4E18-914B-96CFAA0093E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "906AED87-8C5C-4214-B5AD-43E5573E357A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "E150FDA8-5271-465C-8DE0-F44E9FC81E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E036D4F-BD94-4F77-883C-165B3F0802C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7068F8-810D-4720-9E0E-06DB1DD366ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "443183F6-9EF5-41AE-8AD0-B304BBF1670A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "58C5EF43-E24F-4BDB-9496-16DE4EEF3E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B494B-736A-47A7-ACF3-81368C033086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F22B-7A46-4107-BE6F-6C4D7EAA46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "63530139-7EF2-4210-9870-B06175ECBC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED085089-51D6-4E5C-96E8-CC5C7C55CC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "36FC67CE-9C45-4842-81AF-EEAE557D70D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6AC83-B248-4491-A320-836C65E64D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434D4D80-44C0-4278-A09B-005A599F4658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43067661-B562-41BC-B272-8A79075291B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9EF375-AE7C-4900-A992-C635228889E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FA0C7F-000A-4CB4-86E3-DEC0C9DCA1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39B2B71-C1B8-4A16-88FE-D691CC3C9BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "535BC461-E9B1-4124-8125-1D9F91CF4F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "06F63C7F-CE02-428D-90CD-05B726C0026D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F18278D5-A30B-4624-AC64-CA39F92EB8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F72CAF-2BCA-454D-B8AC-951EC566A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C7CB5D-CE55-4628-957D-3D2C5EE2353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E1FBB4-D63F-4AA0-ADE3-70527F4D84A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D1BF3-879B-44C5-B3A0-2E91B27BFF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BB7835-2BFD-4182-B112-7E8A9FF2449C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CE2090-A5AF-47B8-BB7D-727FFF093413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B28527E-92CB-4171-8EE3-9187C3F44EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CB85396-4D94-4752-A134-A1644C707777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6802D01-6220-4EBE-B267-10DC14E6D186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD4EC47-7DD8-443B-8821-DFAE03FE2FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA084D8B-FEFC-41D5-A384-1DCB297CC1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5756FE-158A-4194-9E5E-EA918C4A3D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F344F3CE-C45E-4C3A-9F48-DAA0F2A49137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7BA91-93C2-4615-8A4D-11702FF5A155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "615DED7F-691F-4EF8-BE82-6E51B4971BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "467F335F-6FA1-413F-995F-29136658D969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABC38A1-0034-4CDE-B580-8026D6E0FE39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96919",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038058",
        "source" : "mlhess@drupal.org"
      }, {
        "url" : "https://www.drupal.org/SA-2017-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.drupal.org/SA-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T14:59:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory."
      }, {
        "lang" : "es",
        "value" : "Easy File Sharing FTP Server versión 3.6 es vulnerable a una vulnerabilidad de salto de directorio, lo que permite a un atacante listar y descargar cualquier archivo de cualquier carpeta fuera del root FTP Directory."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efssoft:easy_file_sharing_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "3693D720-64D7-460F-862E-45B0FA7497E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.rapid7.com/db/modules/auxiliary/scanner/ftp/easy_file_sharing_ftp",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.rapid7.com/db/modules/auxiliary/scanner/ftp/easy_file_sharing_ftp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T15:59:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función jas_matrix_asl en jas_seq.c en JasPer 1.900.27 permite a atacantes provocar una denegación de servicio (lectura de memoria no válida y caída) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:1.900.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E1FD20-D299-4773-87A6-55BDC91A1B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-read-in-jas_matrix_asl-jas_seq-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-read-in-jas_matrix_asl-jas_seq-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T15:59:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file."
      }, {
        "lang" : "es",
        "value" : "La libreria SVG Salamander (también conocida como svgSalamander), cuando se usa en una aplicación web, permite a atacantes remotos llevar a cabo ataques de SSRF a través de un atributo xlink:href en un archivo SVG."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitfox:svg_salamander:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239E5AD4-476E-4AE2-BCD7-994773E7B78C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3781",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/27/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/29/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/blackears/svgSalamander/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3V7RIIO3HO4RNDBN2PARLIDAL3RPV2OX/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPUOI6NCEB6H6YHKN7M4V3CAQD63NXAU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/27/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/blackears/svgSalamander/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3V7RIIO3HO4RNDBN2PARLIDAL3RPV2OX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPUOI6NCEB6H6YHKN7M4V3CAQD63NXAU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5643",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-03-16T15:59:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE."
      }, {
        "lang" : "es",
        "value" : "Apache Camel's Validation Component es vulnerable contra ataques de SSRF a través de DTDs y XXE remotos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.0",
            "matchCriteriaId" : "4D87B102-960B-420E-A7BE-C5C8D26DD55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057EE83-770C-4448-A020-3ADBA340B01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE7AA4A-DCC5-4074-9509-A24FAB558527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DB9E52-C5B3-469B-8C04-B2DFDF6199D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD84467E-AAC5-4147-A295-75BA169B1318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A427238F-0D26-44AF-90A7-394A14B185FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8EEB54-1119-45C2-87BD-2DEF87E859FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706C1A6D-2C4D-4A8F-BB64-4E36954CB0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C31F3-91A7-4BBF-B5FA-44C2C008A71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE52612C-5EE4-4333-A09A-03403565A480"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97226",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5667",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-16T15:59:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length."
      }, {
        "lang" : "es",
        "value" : "La función sdhci_sdma_transfer_multi_blocks en hw/sd/sdhci.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (acceso de memoria dinámica fuera de límite y caída) o ejecutar código arbitrario en el host de QEMU a través de vectores que involucran la longitud de la transferencia de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/30/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/12/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95885",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1417559",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/30/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/31/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1417559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5856",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-16T15:59:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función megasas_handle_dcmd en hw/scsi/megasas.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (consumo de la memoria del host) a través de comandos MegaRAID Firmware Interface (MFI) con el tamaño de sglist establecido en un valor superior a 2 Gb."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/19",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/14",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95999",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1418342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1418342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5857",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-16T15:59:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand."
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en la función virgl_cmd_resource_unref en hw/display/virtio-gpu-3d.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales del SO invitado provocar una denegación de servicio (consumo de la memoria del host) a través de un número grande de comandos VIRTIO_GPU_CMD_RESOURCE_UNREF enviados sin desvincular el apoyo de almacenamiento de antemano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=5e8e3c4c75c199aa1017db816fca02be2a9f8798",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/21",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95993",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1418382",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=5e8e3c4c75c199aa1017db816fca02be2a9f8798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1418382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T16:59:00.153",
      "lastModified" : "2023-11-07T02:50:57.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was used as an example and was not assigned for a  security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T17:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en CHICKEN Scheme hasta la versión 4.12.0. Cuando se utiliza una extensión CHICKEN-specific no estándar para ubicar un vector SRFI-4 en memoria no administrada, el tamaño del vector se usaría de forma no analizada como un argumento a malloc(). Con un tamaño inesperado, el impacto puede haber sido un segfault o desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:call-cc:chicken:4.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097E61E7-AD53-4A7F-B471-D4FDF8C168B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/chicken-announce/2017-03/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/chicken-announce/2017-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T18:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the \"dead\" type."
      }, {
        "lang" : "es",
        "value" : "La función keyring_search_aux en security/keys/keyring.c en el kernel de Linux hasta la versión 3.14.79 permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y OOPS) a través de una llamada al sistema request_key para el tipo \"muerte\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.14.79",
            "matchCriteriaId" : "8718F269-5FE6-4255-9F5E-4246DA9E20E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96943",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.spinics.net/lists/keyrings/msg01845.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.spinics.net/lists/keyrings/msg01846.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.spinics.net/lists/keyrings/msg01849.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.spinics.net/lists/keyrings/msg01845.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.spinics.net/lists/keyrings/msg01846.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.spinics.net/lists/keyrings/msg01849.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-16T21:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función cs_winkernel_malloc en winkernel_mm.c en Capstone 3.0.4 y versiones anteriores permite a atacantes provocar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica en un controlador del kernel) o tener otro posible impacto no especificado a través de un valor grande."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:capstone-engine:capstone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.4",
            "matchCriteriaId" : "65330FAB-135C-4C19-BB22-C0A44A80DFC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/aquynh/capstone/commit/6fe86eef621b9849f51a5e1e5d73258a93440403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/aquynh/capstone/commit/6fe86eef621b9849f51a5e1e5d73258a93440403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0001",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.167",
      "lastModified" : "2025-10-22T00:15:57.413",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka \"Windows GDI Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047."
      }, {
        "lang" : "es",
        "value" : "La Graphics Device Interface (GDI) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows GDI Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0005, CVE-2017-0025 y CVE-2017-0047."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0408DF07-8A1B-47F1-99B2-F2AA77691528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "13B310CD-2A3A-4B89-AAB4-60622FB8EC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96057",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0001",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0001",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0005",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.197",
      "lastModified" : "2025-10-22T00:15:57.567",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka \"Windows GDI Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047."
      }, {
        "lang" : "es",
        "value" : "La Graphics Device Interface (GDI) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows GDI Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0001, CVE-2017-0025 y CVE-2017-0047."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0408DF07-8A1B-47F1-99B2-F2AA77691528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "13B310CD-2A3A-4B89-AAB4-60622FB8EC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96033",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0005",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0005",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0006",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer y Excel Services on SharePoint Server 2007 SP3 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052 y CVE-2017-0053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "94F5E2F8-0D37-4FCC-B55A-9F09C421272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971EC323-267F-4DAF-BA3B-10A47A9F1ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7AEA5E-C3D7-4E6D-96F0-5F9A175631C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96740",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0006",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0007",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka \"PowerShell Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Device Guard en Microsoft Windows 10 Gold, 1511, 1607 y Windows Server 2016 permite a atacantes remotos modificar secuencias de comandos PowerShell sin invalidar firmas asociadas, vulnerabilidad también conocida como \"PowerShell Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0008",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0009 and CVE-2017-0059."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 9 hasta la versión 11 permiten a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, también conocido como \"Internet Explorer Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0009 y CVE-2017-0059."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96073",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0008",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0009",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Microsoft Browser Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0011, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 9 hasta la versión 11 permiten a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, también conocido como \"Microsoft Browser Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0011, CVE-2017-0017, CVE-2017-0065 y CVE-2017-0068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0009",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0010",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96059",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0010",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0011",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite a atacantes remotos obtener información sensible a través de un sitio web manipulado, también conocido como \"Microsoft Edge Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0009, CVE-2017-0017, CVE-2017-0065 y CVE-2017-0068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96064",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0011",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0012",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka \"Microsoft Browser Spoofing Vulnerability.\" This vulnerability is different from those described in CVE-2017-0033 and CVE-2017-0069."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 11 y Microsoft Edge permiten a atacantes remotos suplantar contenido web a través de un sitio web manipulado, también conocido como \"Microsoft Browser Spoofing Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0033 y CVE-2017-0069."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96085",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0012",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0014",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Windows Graphics Component Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0108."
      }, {
        "lang" : "es",
        "value" : "El Windows Graphics Component en Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, también conocido como \"Windows Graphics Component Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0108."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96013",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0014",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-9/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-9/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0015",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0015",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0016",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka \"SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 Gold, 1511 y 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2 y Windows Server 2016 no maneja adecuadamente ciertas peticiones en paquetes SMBv2 y SMBv3, lo que permite a atacantes remotos ejecutar código arbitrario a través de un paquete SMBv2 o SMBv3 manipulado al servicio del Server, también conocido como \"SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95969",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037767",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0016",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0017",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0065, and CVE-2017-0068."
      }, {
        "lang" : "es",
        "value" : "La clase RegEx en el filtro XSS en Microsoft Edge permite a atacantes remotos llevar a cabo ataques de XSS y obtener información sensible a través de vectores no especificados, también conocido como \"Microsoft Edge Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0009, CVE-2017-0011, CVE-2017-0065 y CVE-2017-0068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96078",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0017",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0018",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0037 and CVE-2017-0149."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 10 y 11 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, también conocido como \"Internet Explorer Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0037 y CVE-2017-0149."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96086",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0018",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0019",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053."
      }, {
        "lang" : "es",
        "value" : "Microsoft Word 2016 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0006, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052 y CVE-2017-0053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96042",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0019",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0020",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1 y Office Web Apps Server 2013 SP1 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0006, CVE-2017-0019, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052 y CVE-2017-0053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96050",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0020",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0021",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka \"Hyper-V System Data Structure Vulnerability.\" This vulnerability is different from that described in CVE-2017-0095."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows 10 1607 y Windows Server 2016 no valida adecuadamente paquetes de datos vSMB, lo que permite a atacantes ejecutar código arbitrario en un SO objetivo, también conocido como \"Hyper-V System Data Structure Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0095."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96020",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0021",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0022",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.680",
      "lastModified" : "2025-10-22T00:15:57.727",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka \"Microsoft XML Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft XML Core Services (MSXML) en Windows 10 Gold, 1511 y 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 y R2 SP1; Windows Server 2012 Gold y R2; Windows Server 2016 y Windows Vista SP2 maneja incorrectamente objetos en la memoria, permitiendo a atacantes probar archivos en disco a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft XML Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft XML Core Services Information Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73052210-0B42-46AA-9F28-AAE3E9B6DE87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0408DF07-8A1B-47F1-99B2-F2AA77691528"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "13B310CD-2A3A-4B89-AAB4-60622FB8EC03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96069",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038014",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0022",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0022",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0023",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted PDF file, aka \"Microsoft PDF Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La libreria PDF en Microsoft Edge; Windows 8.1; Windows Server 2012 y R2; Windows RT 8.1 y Windows 10, 1511 y 1607 permite a atacantes remotos ejecutar código arbitrario a través de un archivo PDF manipulado, vulnerabilidad también conocida como \"Microsoft PDF Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96075",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037989",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0023",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0024",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows 10 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081 y CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0024",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0025",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005, and CVE-2017-0047."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows Vista; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0001, CVE-2017-0005 y CVE-2017-0047."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96626",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0025",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0026",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081 y CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96032",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0026",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0027",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka \"Microsoft Office Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3 y Excel Services en SharePoint Server 2013 SP1 permiten a atacantes remotos obtener información sensible de la memoria de proceso a través de un documento de Office manipulado, vulnerabilidad también conocida como \"Microsoft Office Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "94F5E2F8-0D37-4FCC-B55A-9F09C421272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E01525C-A3AB-4AB7-82F9-B91E4D552FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96043",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0027",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0029",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka \"Microsoft Office Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1 y Word 2016 permiten a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) a través de un documento Office manipulado, vulnerabilidad también conocida como \"Microsoft Office Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96045",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0030",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2 y Word Automation Services en SharePoint Server 2010 SP2 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0031, CVE-2017-0052 y CVE-2017-0053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96051",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0030",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0031",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0052, and CVE-2017-0053."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3 y Word 2010 SP2 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0052 y CVE-2017-0053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96052",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0031",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0032",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:00.963",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0032",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0033",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka \"Microsoft Browser Spoofing Vulnerability.\" This vulnerability is different from those described in CVE-2017-0012 and CVE-2017-0069."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 11 y Microsoft Edge permiten a atacantes remotos suplantar contenido web a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Browser Spoofing Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0012 y CVE-2017-0069."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96087",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0033",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0034",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Microsoft Edge accede incorrectamente a objetos en la memoria. La vulnerabilidad podría corromper la memoria de una manera que permite a un atacante ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual ha iniciado sesión con derechos de administración, un atacante podría tomar el control en un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96786",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0034",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0035",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0035",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0039",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka \"Library Loading Input Validation Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Vista SP2 y Server 2008 SP2 no maneja adecuadamente la carga de biblioteca de enlace dinámico (DLL), lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocido como \"Library Loading Input Validation Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96024",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0039",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0040",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability.\" This vulnerability is different from that described in CVE-2017-0130."
      }, {
        "lang" : "es",
        "value" : "El motor de secuencias de comandos en Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, vulnerabilidad también conocida como \"Scripting Engine Memory Corruption Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.security-assessment.com/files/documents/advisory/reversesegment.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96094",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0040",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-assessment.com/files/documents/advisory/reversesegment.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0042",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka \"Windows Media Player Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows Media Player en Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 y R2 SP1, Windows Server 2016; Windows Vista SP2 y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible a través de un sitio web manipulado, vulnerabilidad también conocida como \"Windows Media Player Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pastebin.com/raw/Eztknq4s",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96098",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038016",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0042",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/Qab/status/842506404950917120",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://pastebin.com/raw/Eztknq4s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/Qab/status/842506404950917120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0043",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, aka \"Microsoft Active Directory Federation Services Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Active Directory Federation Services en Microsoft Windows 10 1607, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 Gold y R2 y Windows Server 2016 permite a usuarios locales obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como \"Microsoft Active Directory Federation Services Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96628",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0043",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0045",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka \"Windows DVD Maker Cross-Site Request Forgery Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows DVD Maker en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1 y Windows Vista SP2 no analiza adecuadamente archivos .msdvd manipulados, lo que permite a atacantes obtener información para comprometer un sistema objetivo, vulnerabilidad también conocida como \"Windows DVD Maker Cross-Site Request Forgery Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96103",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038015",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0045",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41619/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41619/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0047",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka \"Windows GDI Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005 and CVE-2017-0025."
      }, {
        "lang" : "es",
        "value" : "La Graphics Device Interface (GDI) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows GDI Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0001, CVE-2017-0005 y CVE-2017-0025."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96034",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0047",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0049",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Scripting Engine Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0018, and CVE-2017-0037."
      }, {
        "lang" : "es",
        "value" : "El motor VBScript en Microsoft Internet Explorer 11 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Scripting Engine Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0018 y CVE-2017-0037."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96095",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0049",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0050",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka \"Windows Kernel Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La API del kernel en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511 y 1607; Windows RT 8.1; Windows Server 2012 Gold y R2 y Windows Server 2016 no aplica correctamente permisos, lo que permite a usuarios locales suplantar procesos, suplantar comunicación entre procesos o provocar una denegación de servicio a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows Kernel Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B960E10-B1BD-494E-9A52-3FCA90AD2D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96025",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0050",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0051",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka \"Microsoft Hyper-V Network Switch Denial of Service Vulnerability.\" This vulnerability is different from those described in CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, CVE-2017-0098, and CVE-2017-0099."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 1607 y Windows Server 2016 permiten a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) a través de un documento de Office manipulado, vulnerabilidad también conocida como \"Microsoft Hyper-V Network Switch Denial of Service Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, CVE-2017-0098 y CVE-2017-0099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96026",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0051",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0052",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0053."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer y Excel Services on SharePoint Server 2007 SP3 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031 y CVE-2017-0053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "94F5E2F8-0D37-4FCC-B55A-9F09C421272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971EC323-267F-4DAF-BA3B-10A47A9F1ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7AEA5E-C3D7-4E6D-96F0-5F9A175631C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96741",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0052",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0053",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0052."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016 y Word Viewer permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031 y CVE-2017-0052."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1400A-836A-4E48-B2CD-2B0A9A8241BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B6572-E7DF-4CC2-B70B-9B31BE1B6A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96745",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0053",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0055",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, aka \"Microsoft IIS Server XSS Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Information Server (IIS) en Windows Vista SP2; Windows Server 2008 SP2 y R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos realizar XSS y ejecutar secuencias de comandos con privilegios de usuario local a través de una petición manipulada, vulnerabilidad también conocida como \"Microsoft IIS Server XSS Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96622",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0055",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0056",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0026, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96630",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0056",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0057",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process DNS queries, which allows remote attackers to obtain sensitive information via (1) convincing a workstation user to visit an untrusted webpage or (2) tricking a server into sending a DNS query to a malicious DNS server, aka \"Windows DNS Query Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Ciente DNS en Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 no procesa adecuadamente consultas DNS, lo que permite a atacantes remotos obtener información sensible a través de (1) convencer a un usuario de la estación de trabajo de que visite una página web no confiable o (2) engañar a un servidor para que envíe una consulta DNS a un servidor DNS malicioso, vulnerabilidad también conocida como \"Windows DNS Query Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96695",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0057",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0059",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.523",
      "lastModified" : "2025-10-22T00:15:58.060",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 9 hasta la versión 11 permiten a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Internet Explorer Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0008 y CVE-2017-0009."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-28",
      "cisaActionDue" : "2022-04-18",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Internet Explorer Information Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96645",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0059",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41661/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42354/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43125/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41661/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43125/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0059",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0060",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"GDI+ Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062."
      }, {
        "lang" : "es",
        "value" : "The Graphics Device Interface (GDI) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"GDI+ Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0060 y CVE-2017-0062."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB045C-AAC8-42F2-84A9-062630FA14E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83FB32-9775-418B-99A7-EC1FEA345F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:attendee:*:*:*",
            "matchCriteriaId" : "6C3ED4FC-2583-4E51-8931-082875A97034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business_basic:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DB97A-C93C-45BC-B275-E6EBE7DE8788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "6FF85ADB-8F36-424D-9F4A-BD357304CE66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96713",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0060",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41656/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41656/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0061",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka \"Microsoft Color Management Information Disclosure Vulnerability.\" This vulnerability is different from that described in CVE-2017-0063."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de manejo de memoria Color Management Module (ICM32.dll) en Windows Vista SP2, Windows Server 2008 SP2 y R2 y Windows 7 SP1 permite a atacantes remotos eludir ASLR y ejecutar código en combinación con otra vulnerabilidad a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Color Management Information Disclosure Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0063."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96638",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0061",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41657/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41657/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0062",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"GDI+ Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0073."
      }, {
        "lang" : "es",
        "value" : "La Graphics Device Interface (GDI) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"GDI+ Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0060 y CVE-2017-0073."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96715",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0062",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41658/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41658/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0063",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka \"Microsoft Color Management Information Disclosure Vulnerability.\" This vulnerability is different from that described in CVE-2017-0061."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de manejo de memoria Color Management Module (ICM32.dll) en Windows Vista SP2; Windows Server 2008 SP2 y R2 y Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos eludir ASLR y ejecutar código en combinación con otra vulnerabilidad a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Color Management Information Disclosure Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0061."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96643",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0063",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41659/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41659/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0065",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0017, and CVE-2017-0068."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Browser Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0009, CVE-2017-0011, CVE-2017-0017 y CVE-2017-0068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96648",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0065",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0066",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This vulnerability is different from those described in CVE-2017-0135 and CVE-2017-0140."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite a atacantes remotos eludir la Same Origin Policy para elementos HTML en otros navegadores de windows, vulnerabilidad también conocida como \"Microsoft Edge Security Feature Bypass Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0135 y CVE-2017-0140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96655",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0066",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0067",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0067",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0068",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0017, and CVE-2017-0065."
      }, {
        "lang" : "es",
        "value" : "Navegadores en Microsoft Edge permiten a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Edge Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0009, CVE-2017-0011, CVE-2017-0017 y CVE-2017-0065."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96649",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0068",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0069",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka \"Microsoft Edge Spoofing Vulnerability.\" This vulnerability is different from those described in CVE-2017-0012 and CVE-2017-0033."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite a atacantes remotos suplantar contenido web a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Edge Spoofing Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0012 y CVE-2017-0033."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96650",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0069",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0070",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96690",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0070",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41623/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41623/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0071",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96681",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0071",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0072",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089 y CVE-2017-0090."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96599",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0072",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41654/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41654/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0073",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Windows GDI+ Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062."
      }, {
        "lang" : "es",
        "value" : "La Graphics Device Interface (GDI) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Windows GDI+ Information Disclosure Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0060 y CVE-2017-0062."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB045C-AAC8-42F2-84A9-062630FA14E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83FB32-9775-418B-99A7-EC1FEA345F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:attendee:*:*:*",
            "matchCriteriaId" : "6C3ED4FC-2583-4E51-8931-082875A97034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business_basic:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DB97A-C93C-45BC-B275-E6EBE7DE8788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "6FF85ADB-8F36-424D-9F4A-BD357304CE66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96637",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0073",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0074",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka \"Hyper-V Denial of Service Vulnerability.\" This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0076, CVE-2017-0097, and CVE-2017-0099."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 y R2; Windows 10, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado, ejecutándose como máquinas virtuales, provocar una denegación de servicio a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0098, CVE-2017-0076, CVE-2017-0097 y CVE-2017-0099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96641",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0074",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0075",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:01.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka \"Hyper-V Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0109."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios del SO invitado ejecutar código arbitrario en el SO anfitrión a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0109."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96698",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0075",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0076",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka \"Hyper-V Denial of Service Vulnerability.\" This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0097, and CVE-2017-0099."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 y R2; Windows 10, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado, ejecutándose como máquinas virtuales, provocar una denegación de servicio a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0098, CVE-2017-0074, CVE-2017-0097 y CVE-2017-0099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96636",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0076",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0078",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96631",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0078",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0079",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Windows 8.1; Windows Server 2012 R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0080, CVE-2017-0081 y CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96632",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0080",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0081, and CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0081 y CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96633",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0081",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0082."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0082."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96634",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0081",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0082",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, and CVE-2017-0081."
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Microsoft Windows 10 Gold y 1511 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Win32k Elevation of Privilege Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080 y CVE-2017-0081."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96635",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0083",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0072, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089 y CVE-2017-0090."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96608",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0083",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0084",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Windows Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Windows Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0072, CVE-2017-0083, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089 y CVE-2017-0090."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "AB506484-7F0C-46BF-8EA6-4FB5AF454CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96610",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0084",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41648/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41648/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0085",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96652",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0085",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41646/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41646/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0086",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089 y CVE-2017-0090."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96603",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0086",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41649/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41649/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0087",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0088, CVE-2017-0089 y CVE-2017-0090."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96604",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0087",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41650/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0088",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Windows Uniscribe Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Windows Uniscribe Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96605",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0088",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41651/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41651/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0089",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, and CVE-2017-0090."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088 y CVE-2017-0090."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96606",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0089",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41652/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41652/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0090",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Uniscribe Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, and CVE-2017-0089."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088 y CVE-2017-0089."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96607",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0090",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41653/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41653/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0091",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96657",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0091",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0092",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96676",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0092",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0094",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96682",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0095",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka \"Hyper-V vSMB Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0021."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows 10 Gold, 1511 y 1607 y Windows Server 2016 no valida adecuadamente paquetes de datos vSMB, lo que permite a atacantes ejecutar código arbitrario en un SO objetivo, vulnerabilidad también conocida como \"Hyper-V vSMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0021."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96699",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0096",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka \"Hyper-V Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold y R2; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado obtener información sensible de la memoria del SO anfitrión a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96701",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0096",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0097",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka \"Hyper-V Denial of Service Vulnerability.\" This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0076, and CVE-2017-0099."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 y R2; Windows 10, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado, ejecutándose como máquinas virtuales, provocar una denegación de servicio a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0098, CVE-2017-0074, CVE-2017-0076 y CVE-2017-0099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96639",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0097",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0098",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka \"Hyper-V Denial of Service Vulnerability.\" This vulnerability is different from those described in CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, and CVE-2017-0099."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado, ejecutándose como máquinas virtuales, provocar una denegación de servicio a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0074, CVE-2017-0076, CVE-2017-0097 y CVE-2017-0099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96642",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0098",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0099",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka \"Hyper-V Denial of Service Vulnerability.\" This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0076, and CVE-2017-0097."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado, ejecutándose como máquinas virtuales, provocar una denegación de servicio a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0098, CVE-2017-0074, CVE-2017-0076 y CVE-2017-0097."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96640",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0099",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0100",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka \"Windows HelpPane Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un objeto DCOM en Helppane.exe en Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows HelpPane Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96700",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0100",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41607/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41607/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0101",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.743",
      "lastModified" : "2025-10-22T00:15:58.220",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Windows Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Transaction Manager en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-15",
      "cisaActionDue" : "2022-04-05",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Transaction Manager Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96625",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44479/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0101",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0102",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 let attackers with access to targets systems gain privileges when Windows fails to properly validate buffer lengths, aka \"Windows Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permiten a atacantes con acceso a sistemas objetivo obtener privilegios cuando Windows no valida adecuadamente longitudes de búfer, vulnerabilidad también conocida como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96627",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0102",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0103",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 mishandles registry objects in memory, which allows local users to gain privileges via a crafted application, aka \"Windows Registry Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La API del kernel en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1 y Windows Server 2012 no maneja adecuadamente registro de objetos en la memoria, lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows Registry Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96623",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0103",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41645/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41645/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0104",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka \"iSNS Server Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El servicio iSNS Server en Microsoft Windows Server 2008 SP2 y R2, Windows Server 2012 Gold y R2 y Windows Server 2016 permite a atacantes remotos emitir peticiones maliciosas a través de un desbordamiento de entero, vulnerabilidad también conocida como \"iSNS Server Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96697",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0104",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0105",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from out-of-bound memory via a crafted Office document, aka \"Microsoft Office Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services en SharePoint Server 2010 SP2 y Office Web Apps 2010 SP2 permiten a atacantes remotos obtener información sensible de la memoria fuera de límites a través de un documento de Office manipulado, vulnerabilidad también conocida como \"Microsoft Office Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC865581-3650-4DC4-9138-C2F71AA3B850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B429C3AB-B405-4156-B63E-BA2BC6A84894"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96746",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0105",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0107",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka \"Microsoft SharePoint XSS Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Server falla al desinfectar solicitudes web manipuladas, permitiendo a atacantes remotos ejecutar XSS en un contexto local de seguridad, vulnerabilidad también conocida como \"Microsoft SharePoint XSS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96748",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0107",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0108",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Graphics Component Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0014."
      }, {
        "lang" : "es",
        "value" : "El Windows Graphics Component en Microsoft Office 2007 SP3; 2010 SP2 y Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, vulnerabilidad también conocida como \"Graphics Component Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0014."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB045C-AAC8-42F2-84A9-062630FA14E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83FB32-9775-418B-99A7-EC1FEA345F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF9A3D-4EB8-4B2E-B388-04CC0751A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC45CB0-6C84-46D3-B16D-170D46822E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96722",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0108",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41647/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41647/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0109",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.963",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka \"Hyper-V Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0075."
      }, {
        "lang" : "es",
        "value" : "Hyper-V en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a usuarios del SO invitado ejecutar código arbitrario en el SO anfitrión a través de una aplicación manipulada, vulnerabilidad también conocida como \"Hyper-V Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0075."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96644",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0109",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0110",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:02.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka \"Microsoft Exchange Server Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Microsoft Exchange Outlook Web Access (OWA) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un email o chat de cliente manipulado, vulnerabilidad también conocida como \"Microsoft Exchange Server Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "50E65149-EAEC-422F-ACCD-5FBE8512942A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "E559127D-EF3D-463B-ACC9-CD09AB7148A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96621",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038011",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0110",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0111",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96658",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0111",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0112",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96659",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0112",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0113",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96660",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0113",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0114",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0114",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0115",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0115",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0116",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96665",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0116",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0117",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96679",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0117",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0118",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96680",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0118",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0119",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96666",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0119",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0120",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Windows Uniscribe Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Windows Uniscribe Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96667",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0120",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0121",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96678",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0121",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0122",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96668",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0122",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0123",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96669",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0123",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0124",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96670",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0124",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0125",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0126, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96672",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0125",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0126",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0127, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0127 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96673",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0126",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0127",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, and CVE-2017-0128."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126 y CVE-2017-0128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96674",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0127",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0128",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Uniscribe Information Disclosure Vulnerability.\" CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, and CVE-2017-0127."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como \"Uniscribe Information Disclosure Vulnerability\". CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126 y CVE-2017-0127."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96675",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0128",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41655/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0129",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka \"Microsoft Lync for Mac Certificate Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Lync para Mac 2011 no valida adecuadamente certificados, permitiendo a atacantes remotos alterar comunicaciones entre el servidor y el cliente, vulnerabilidad también conocida como \"Microsoft Lync for Mac Certificate Validation Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424E8382-690C-466E-9B4E-6BF3077E32E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96752",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038020",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0129",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0130",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability.\" This vulnerability is different from that described in CVE-2017-0040."
      }, {
        "lang" : "es",
        "value" : "El motor de secuencias de comandos en Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, vulnerabilidad también conocida como \"Scripting Engine Memory Corruption Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0040."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96647",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0130",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0131",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96671",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0131",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0132",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96686",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0132",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0133",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96683",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0133",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0134",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96687",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0134",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0135",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This vulnerability is different from those described in CVE-2017-0066 and CVE-2017-0140."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite a atacantes remotos eludir la Same Origin Policy para elementos HTML en otros navegadores de windows, vulnerabilidad también conocida como \"Microsoft Edge Security Feature Bypass Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0066 y CVE-2017-0140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96656",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://medium.com/bugbountywriteup/bypass-csp-by-abusing-xss-filter-in-edge-43e9106a9754",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0135",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.freebuf.com/articles/web/164871.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://medium.com/bugbountywriteup/bypass-csp-by-abusing-xss-filter-in-edge-43e9106a9754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.freebuf.com/articles/web/164871.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0136",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96688",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0136",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0137",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96689",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0137",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0138",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0141, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96684",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0140",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This vulnerability is different from those described in CVE-2017-0066 and CVE-2017-0135."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite a atacantes remotos eludir la Same Origin Policy para elementos HTML en otros navegadores de windows, vulnerabilidad también conocida como \"Microsoft Edge Security Feature Bypass Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0066 y CVE-2017-0135."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96653",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0140",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0141",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0150, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0150 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172826/Microsoft-ChakaCore-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96685",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0141",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172826/Microsoft-ChakaCore-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0143",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:03.977",
      "lastModified" : "2025-10-22T00:15:58.363",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148."
      }, {
        "lang" : "es",
        "value" : "El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados, vulnerabilidad también conocida como \"Windows SMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0144, CVE-2017-0145, CVE-2017-0146 y CVE-2017-0148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFA22FC-A15A-4EB5-BED7-45F6EAFA8F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0408DF07-8A1B-47F1-99B2-F2AA77691528"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "13B310CD-2A3A-4B89-AAB4-60622FB8EC03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184A3E7A-9716-4594-9293-4ED708EF938F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374B9A63-793D-41A1-A02F-4642031DA5FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0814F7B8-8022-4DCC-BE37-4868EB912881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A45473-9558-4165-949B-D63F1486F28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E3D131-8FDF-424C-9BBA-41FDAE43F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C270FA0-6961-4181-8388-E609DAEADC09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C8A47-9E8F-42E4-BB35-64590853A9C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506F5373-3C3C-4F47-8FC0-D5F04095B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DBCB0C-2C71-4427-ADF8-FCB4920609B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "D4CFBFA2-BDE4-4566-A435-92BFB87C48E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFBC156-20D1-4546-948F-A2118D602137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70575FD4-0A0A-4D11-9069-F808D9F00D10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E644CD-EA9B-45B5-A7C6-5F294D8A6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F38DAB6-39E2-4048-A57D-C3EB8415F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD2983-B780-46F0-A857-CFC614D1B524"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "99A99C16-9C4C-4BFF-B60A-A7BB67D7D397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1753DB4B-1F5A-4193-A50C-C2A576F0884C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE83393-E735-42BC-86E9-5DAF9F403C73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5641B967-9938-4148-90C4-D92C3E757847"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D4D5C-D0F1-403D-8687-3F1491943A65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B7CC4-E89E-4357-A7D6-AF74480F46B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF3913-CD35-49FD-90D8-62228DB1390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96703",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43970/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43970/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0143",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0144",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.010",
      "lastModified" : "2025-10-22T00:15:58.547",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148."
      }, {
        "lang" : "es",
        "value" : "El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511 y 1607; y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados, vulnerabilidad también conocida como \"Windows SMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente a la descrita en CVE-2017-0143, CVE-2017-0145, CVE-2017-0146 y CVE-2017-0148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft SMBv1 Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFA22FC-A15A-4EB5-BED7-45F6EAFA8F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0408DF07-8A1B-47F1-99B2-F2AA77691528"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "13B310CD-2A3A-4B89-AAB4-60622FB8EC03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0814F7B8-8022-4DCC-BE37-4868EB912881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A45473-9558-4165-949B-D63F1486F28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E3D131-8FDF-424C-9BBA-41FDAE43F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C270FA0-6961-4181-8388-E609DAEADC09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C8A47-9E8F-42E4-BB35-64590853A9C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506F5373-3C3C-4F47-8FC0-D5F04095B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DBCB0C-2C71-4427-ADF8-FCB4920609B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "D4CFBFA2-BDE4-4566-A435-92BFB87C48E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFBC156-20D1-4546-948F-A2118D602137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70575FD4-0A0A-4D11-9069-F808D9F00D10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E644CD-EA9B-45B5-A7C6-5F294D8A6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F38DAB6-39E2-4048-A57D-C3EB8415F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD2983-B780-46F0-A857-CFC614D1B524"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "99A99C16-9C4C-4BFF-B60A-A7BB67D7D397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1753DB4B-1F5A-4193-A50C-C2A576F0884C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE83393-E735-42BC-86E9-5DAF9F403C73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5641B967-9938-4148-90C4-D92C3E757847"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D4D5C-D0F1-403D-8687-3F1491943A65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B7CC4-E89E-4357-A7D6-AF74480F46B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF3913-CD35-49FD-90D8-62228DB1390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96704",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0144",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42030/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42031/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42030/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42031/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0144",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0145",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.040",
      "lastModified" : "2025-10-22T00:15:58.740",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148."
      }, {
        "lang" : "es",
        "value" : "El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511 y 1607; y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados, vulnerabilidad también conocida como \"Windows SMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente a la descrita en CVE-2017-0143, CVE-2017-0144, CVE-2017-0146 y CVE-2017-0148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft SMBv1 Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFA22FC-A15A-4EB5-BED7-45F6EAFA8F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0814F7B8-8022-4DCC-BE37-4868EB912881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A45473-9558-4165-949B-D63F1486F28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E3D131-8FDF-424C-9BBA-41FDAE43F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C270FA0-6961-4181-8388-E609DAEADC09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C8A47-9E8F-42E4-BB35-64590853A9C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506F5373-3C3C-4F47-8FC0-D5F04095B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DBCB0C-2C71-4427-ADF8-FCB4920609B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "D4CFBFA2-BDE4-4566-A435-92BFB87C48E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFBC156-20D1-4546-948F-A2118D602137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70575FD4-0A0A-4D11-9069-F808D9F00D10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E644CD-EA9B-45B5-A7C6-5F294D8A6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F38DAB6-39E2-4048-A57D-C3EB8415F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD2983-B780-46F0-A857-CFC614D1B524"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "99A99C16-9C4C-4BFF-B60A-A7BB67D7D397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1753DB4B-1F5A-4193-A50C-C2A576F0884C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE83393-E735-42BC-86E9-5DAF9F403C73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5641B967-9938-4148-90C4-D92C3E757847"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D4D5C-D0F1-403D-8687-3F1491943A65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B7CC4-E89E-4357-A7D6-AF74480F46B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF3913-CD35-49FD-90D8-62228DB1390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96705",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0145",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0145",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0146",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.070",
      "lastModified" : "2025-10-22T00:15:58.920",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148."
      }, {
        "lang" : "es",
        "value" : "El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511 y 1607; y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados, vulnerabilidad también conocida como Windows SMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0143, CVE-2017-0144, CVE-2017-0145 y CVE-2017-0148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows SMB Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFA22FC-A15A-4EB5-BED7-45F6EAFA8F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0814F7B8-8022-4DCC-BE37-4868EB912881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A45473-9558-4165-949B-D63F1486F28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E3D131-8FDF-424C-9BBA-41FDAE43F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C270FA0-6961-4181-8388-E609DAEADC09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C8A47-9E8F-42E4-BB35-64590853A9C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506F5373-3C3C-4F47-8FC0-D5F04095B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DBCB0C-2C71-4427-ADF8-FCB4920609B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0e",
            "matchCriteriaId" : "3D47CA15-3B17-4145-BFD4-BE32841BE692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFBC156-20D1-4546-948F-A2118D602137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70575FD4-0A0A-4D11-9069-F808D9F00D10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E644CD-EA9B-45B5-A7C6-5F294D8A6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F38DAB6-39E2-4048-A57D-C3EB8415F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD2983-B780-46F0-A857-CFC614D1B524"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0e",
            "matchCriteriaId" : "31FE05B1-0B85-424F-9F30-14BFCB2ED15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1753DB4B-1F5A-4193-A50C-C2A576F0884C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE83393-E735-42BC-86E9-5DAF9F403C73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5641B967-9938-4148-90C4-D92C3E757847"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D4D5C-D0F1-403D-8687-3F1491943A65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B7CC4-E89E-4357-A7D6-AF74480F46B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF3913-CD35-49FD-90D8-62228DB1390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96707",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0146",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43970/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43970/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0146",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0147",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.087",
      "lastModified" : "2025-10-22T00:15:59.087",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka \"Windows SMB Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511 y 1607; y Windows Server 2016 permite a atacantes remotos obtener información sensible de la memoria del proceso a través de paquetes manipulados, vulnerabilidad también conocida como \"Windows SMB Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows SMBv1 Information Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0814F7B8-8022-4DCC-BE37-4868EB912881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A45473-9558-4165-949B-D63F1486F28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E3D131-8FDF-424C-9BBA-41FDAE43F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C270FA0-6961-4181-8388-E609DAEADC09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C8A47-9E8F-42E4-BB35-64590853A9C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506F5373-3C3C-4F47-8FC0-D5F04095B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DBCB0C-2C71-4427-ADF8-FCB4920609B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "D4CFBFA2-BDE4-4566-A435-92BFB87C48E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFBC156-20D1-4546-948F-A2118D602137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70575FD4-0A0A-4D11-9069-F808D9F00D10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E644CD-EA9B-45B5-A7C6-5F294D8A6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F38DAB6-39E2-4048-A57D-C3EB8415F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD2983-B780-46F0-A857-CFC614D1B524"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "99A99C16-9C4C-4BFF-B60A-A7BB67D7D397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1753DB4B-1F5A-4193-A50C-C2A576F0884C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE83393-E735-42BC-86E9-5DAF9F403C73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5641B967-9938-4148-90C4-D92C3E757847"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D4D5C-D0F1-403D-8687-3F1491943A65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B7CC4-E89E-4357-A7D6-AF74480F46B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF3913-CD35-49FD-90D8-62228DB1390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96709",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43970/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43970/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0147",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0148",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.150",
      "lastModified" : "2025-10-22T00:15:59.383",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146."
      }, {
        "lang" : "es",
        "value" : "El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511 y 1607; y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados, vulnerabilidad también conocida como \"Windows SMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente a la descrita en CVE-2017-0143, CVE-2017-0144, CVE-2017-0145 y CVE-2017-0146."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-04-06",
      "cisaActionDue" : "2022-04-27",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft SMBv1 Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFA22FC-A15A-4EB5-BED7-45F6EAFA8F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0814F7B8-8022-4DCC-BE37-4868EB912881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A45473-9558-4165-949B-D63F1486F28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E3D131-8FDF-424C-9BBA-41FDAE43F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C270FA0-6961-4181-8388-E609DAEADC09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C8A47-9E8F-42E4-BB35-64590853A9C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506F5373-3C3C-4F47-8FC0-D5F04095B324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DBCB0C-2C71-4427-ADF8-FCB4920609B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0e",
            "matchCriteriaId" : "D4CFBFA2-BDE4-4566-A435-92BFB87C48E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFBC156-20D1-4546-948F-A2118D602137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70575FD4-0A0A-4D11-9069-F808D9F00D10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E644CD-EA9B-45B5-A7C6-5F294D8A6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F38DAB6-39E2-4048-A57D-C3EB8415F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD2983-B780-46F0-A857-CFC614D1B524"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0e",
            "matchCriteriaId" : "31FE05B1-0B85-424F-9F30-14BFCB2ED15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1753DB4B-1F5A-4193-A50C-C2A576F0884C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE83393-E735-42BC-86E9-5DAF9F403C73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5641B967-9938-4148-90C4-D92C3E757847"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D4D5C-D0F1-403D-8687-3F1491943A65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B7CC4-E89E-4357-A7D6-AF74480F46B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF3913-CD35-49FD-90D8-62228DB1390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96706",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0148",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0148",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0149",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.180",
      "lastModified" : "2025-10-22T00:15:59.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 9 hasta la versión 11 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, vulnerabilidad también conocida como \"Internet Explorer Memory Corruption Vulnerability\". Esta vulnerabilidad es diferente a la descrita en CVE-2017-0018 y CVE-2017-0037."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Internet Explorer Memory Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96724",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0149",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0149",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0150",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, and CVE-2017-0151."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en el que los motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141 y CVE-2017-0151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96725",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0150",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0151",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, and CVE-2017-0150."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que motores de secuencias de comandos de Microsoft afectados procesan al manejar objetos en la memoria en navegadores de Microsoft. Estas vulnerabilidades podrían corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual. Si el usuario actual está conectado con derechos administrativos de usuario, un atacante que explotó con éxito la vulnerabilidad podría tomar el control de un sistema afectado. Un atacante podría entonces instalar programas; ver, cambiar o eliminar datos; o crear nuevas cuentas con derechos de usuario completos. Esta vulnerabilidad es distinta de aquellas descritas en CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141 y CVE-2017-0150."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0151",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0154",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-03-17T00:59:04.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, \"Internet Explorer Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 11 en Windows 10, 1511 y 1606 y Windows Server 2016 no impone las políticas entre dominios cruzados, permitiendo a atacantes acceder a información de un dominio e inyectarlo en otro a través de una aplicación manipulada, vulnerabilidad también conocida como \"Internet Explorer Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0154",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions."
      }, {
        "lang" : "es",
        "value" : "readelf en GNU Binutils 2.28 tiene un error de uso después de liberación de memoria (específicamente de lectura después de liberación de memoria) al procesar múltiples secciones reubicadas en un binario MSP430. Esto es provocado por no manejar correctamente un índice de símbolo no válido, y no manejar correctamente el estado a través de invocaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buddypress:buddypress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.2",
            "matchCriteriaId" : "003CABE8-D924-4E27-9B49-000092F339AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/boonebgorges/buddypress-docs/commit/75293ed4e5f31f04e54689bfe2c647e3e3f5e1a9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/buddypress-docs/changelog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/boonebgorges/buddypress-docs/commit/75293ed4e5f31f04e54689bfe2c647e3e3f5e1a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/buddypress-docs/changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able to change the subject and the body of the invitation mail that should be immutable, which facilitates a social engineering attack."
      }, {
        "lang" : "es",
        "value" : "readelf in GNU Binutils 2.28 escribe en direcciones ilegales mientras procesa archivos de entrada corruptos que contienen reubicaciones de diferencia de símbolos, lo que conduce a un desbordamiento de búfer basado en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teleogistic:invite_anyone:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.13",
            "matchCriteriaId" : "0BEFAF66-B057-4550-AC3B-5E45352046F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96965",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/boonebgorges/invite-anyone/compare/2ed5266ad3ae40f8db39adf06f450bbad56e2eac...boonebgorges:6121de08df86c5005b657dd67e48aa02c7982855",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/invite-anyone/changelog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/boonebgorges/invite-anyone/compare/2ed5266ad3ae40f8db39adf06f450bbad56e2eac...boonebgorges:6121de08df86c5005b657dd67e48aa02c7982855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/invite-anyone/changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by crafting any valid parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de XSS en la página de resultados de búsqueda MantisBT Source Integration Plugin (en versiones anteriores a 2.0.2) permite a un atacante inyectar HTML o JavaScript arbitrario (si la configuración CSP de MantisBT lo permite) creando cualquier parámetro válido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:source_integration:*:*:*:*:*:mantisbt:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "2A38F0AE-2E2A-46DA-8493-8F45E3204E51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mantisbt-plugins/source-integration/issues/205",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mantisbt-plugins/source-integration/issues/205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function and the imagesize variable."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en apng2gif 1.7. Hay un desbordamiento de entero que resulta en una sobre lectura de búfer basada en memoria dinámica, relacionada con la función load_apng y la variable imagesize."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng2gif_project:apng2gif:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8455AA84-D1FF-46AD-BDE3-AA42E6C13626"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854367",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00039.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4513-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4513-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the read_chunk function using the pChunk->size value (within the PNG file) to determine the amount of memory to allocate."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en apng2gif 1.7. Hay una desinfección inadecuada de la entrada del usuario provocando enormes asignaciones de memoria, lo que resulta en una caída. Esto está relacionado con la función read_chunk usando el valor pChunk->size (dentro del archivo PNG) para determinar la cantidad de memoria que se va a asignar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng2gif_project:apng2gif:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8455AA84-D1FF-46AD-BDE3-AA42E6C13626"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer overflow. This is related to the read_chunk function making an unchecked addition of 12."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en apng2gif 1.7. Hay un desbordamiento de entero que resulta en un desbordamiento del búfer basado en memoria dinámica. Esto está relacionado con la función read_chunk haciendo una adición no comprobada de 12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng2gif_project:apng2gif:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8455AA84-D1FF-46AD-BDE3-AA42E6C13626"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854447",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en by-email/by-email.php en el plugin Invite Anyone en versiones anteriores a 1.3.15 para WordPress. Un usuario es capaz de cambiar al sujeto y el cuerpo del correo de invitación que debe ser inmutable, lo que facilita un ataque de ingeniería social."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en includes/component.php en el plugin BuddyPress Docs en versiones anteriores a 1.9.3 para WordPress. Es posible que los usuarios autenticados puedan editar documentos de otros usuarios sin los permisos adecuados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass."
      }, {
        "lang" : "es",
        "value" : "Xrdp 0.9.1 llama a la función PAM auth_start_session() en una ubicación incorrecta, lo que conduce a que los módulos de sesión PAM no se inicialicen correctamente, con una potencial consecuencia de configuraciones incorrectas o elevación de privilegios, también conocido como pam_limits.so bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neutrinolabs:xrdp:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C354523C-8737-4E49-9834-65420CE9CB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1672742",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/neutrinolabs/xrdp/issues/350",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/neutrinolabs/xrdp/pull/694",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1672742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/neutrinolabs/xrdp/issues/350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/neutrinolabs/xrdp/pull/694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T09:59:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well."
      }, {
        "lang" : "es",
        "value" : "readelf en GNU Binutils 2.28 es vulnerable a una sobre lectura de búfer basada en memoria dinámica mientras procesa binarios RL78 corruptos. La vulnerabilidad puede desencadenar caídas del programa. También puede conducir a una fuga de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21156",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T17:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields."
      }, {
        "lang" : "es",
        "value" : "TYPO3 7.6.15 envía una solicitud http a un index.php?loginProvider URI en casos con un httpsReferers, lo que permite a atacantes remotos obtener información de texto plano sensible husmeando la red y leyendo los campos userident y username."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83755CA5-630F-43F4-A584-4D4A4A8850E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T17:59:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Cerberus FTP Server 8.0.10.3 permite a atacantes remotos provocar una denegación de servicio (fallo del demonio) o posiblemente tener otro impacto no especificado a través de un comando largo MLST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_ftp_server:8.0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1264AF55-BA8F-4762-9634-14B302F7E2B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41620/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41620/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3811",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XML en Cisco WebEx Meetings Server podría permitir a un atacante remoto autenticado tener acceso de lectura a parte de la información almacenada en el sistema afectado. Más información: CSCvc39165. Lanzamientos afectados conocidos: 2.6. Lanzamientos fijos conocidos: 2.7.1.2054."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3AA626-3B37-434B-A6CB-7CA233B8FC04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96912",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038042",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3815",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de privilegios de API en Cisco TelePresence Server Software podría permitir que un atacante remoto no autenticado emule los puntos finales de Cisco TelePresence Server. Productos afectados: Esta vulnerabilidad afecta a los procesadores Cisco TelePresence Server MSE 8710 que ejecutan una versión de software anterior a Cisco TelePresence Software Release 4.3 y se ejecutan en modo administrado localmente. El API vulnerable estaba obsoleto en Cisco TelePresence Software Release 4.3. Más información: CSCvc37616."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_server_software:4.2\\(4.17\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "691F909F-2B7C-47B7-A998-43AD18B869E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_server_software:4.2\\(4.18\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "017157F9-2588-4EA8-B5B2-A5C585DAB765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_server_software:4.2\\(4.19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "524682D4-B26E-43E6-B74C-ADBE10A35FFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96922",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038035",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3866",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873 CSCvc79882 CSCvc79891. Known Affected Releases: 11.1.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código marco web de Cisco Prime Service Catalog podría permitir que un atacante remoto no autenticado lleve a cabo un ataque XSS (cross-site scripting) contra el usuario de la interfaz web del sistema afectado. Más información: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873 CSCvc79882 CSCvc79891. Lanzamientos afectados conocidos: 11.1.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_service_catalog:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3953F864-1C8F-466D-9E77-AD038DE16384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_service_catalog:11.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B543D7D-C7F7-4F6B-A077-B4EC911E7A1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96917",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038045",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-psc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-psc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3867",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list (ACL) for specific TCP and UDP traffic. More Information: CSCvc68229. Known Affected Releases: 9.6(2). Known Fixed Releases: 99.1(20.1) 99.1(10.2) 98.1(12.7) 98.1(1.49) 97.1(6.58) 97.1(0.134) 96.2(0.109) 9.7(1.1) 9.6(2.99) 9.6(2.8)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de BFD (Border Forwarding Detection) del software Cisco Adaptive Security Appliance (ASA) de Border Gateway Protocol (BGP) podría permitir a un atacante remoto no autenticado omitir la lista de control de acceso (ACL) para tráfico TCP y UDP específico. Más información: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873 CSCvc79882 CSCvc79891. Lanzamientos afectados conocidos: 11.1.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4014494-E1EA-422E-8717-9EECA869F6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5D09C9-4559-4FED-B4B7-EAE5935EBCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074A5E58-A066-470B-840A-1148A8979DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF2C556-48E6-4572-8FD9-4DC8BAD90B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAD792D-70DB-4123-8BCC-B6890A9BCAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7425B1F7-FB7B-4B5B-9713-015D2101C319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FB1712-7D75-43A7-A7BC-30AA73265E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E59B31-CBCB-46BC-A2CE-98754FC8C36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7FDABB-8C67-4E56-A533-233B50047603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96926",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038051",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3868",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Releases: 6.0(0.0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco UCS Director podría permitir que un atacante remoto no autenticado lleve a cabo un ataque XSS contra un usuario de la interfaz de administración basada en web de un dispositivo afectado. Más información: CSCvc44344. Lanzamientos Afectados Conocidos: 6.0 (0.0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_director:6.0\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D531E4E-A48A-4346-975C-5F869C7A763C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96921",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038039",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3869",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases: 3.1(1) 3.1(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de API Credentials Management en las API de Cisco Prime Infrastructure podría permitir a un atacante remoto autenticado acceder a una API que debería estar restringida a un usuario privilegiado. El atacante necesita tener credenciales válidas. Más información: CSCuy36192. Lanzamientos afectados conocidos: 3.1 (1) 3.1 (1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4683305B-932A-4062-A688-C2204E0B6CB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96931",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038048",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3870",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA), both virtual and hardware appliances, that are configured with URL filters for email scanning. More Information: CSCvc69700. Known Affected Releases: 8.5.3-069 9.1.1-074 9.1.2-010."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de filtrado de URL de Cisco AsyncOS Software para Cisco Web Security Appliance (WSA) podría permitir a un atacante remoto no autenticado omitir una regla de filtro de URL configurada. Productos afectados: esta vulnerabilidad afecta a todas las versiones anteriores a la primera versión fija de Cisco AsyncOS Software para Cisco Web Security Appliance (WSA), tanto dispositivos virtuales como de hardware, que están configurados con filtros de URL para el análisis de correo electrónico. Más información: CSCvc69700. Lanzamientos afectados conocidos: 8.5.3-069 9.1.1-074 9.1.2-010."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:8.5.3-069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DFD74F-F90B-43C9-B1E6-B9727E395540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:9.1.1-074:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F4D6C1-3493-400B-AAE8-E2C00AE53BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:9.1.2-010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74AFB73-5414-49C8-8209-9392E5406806"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96907",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038043",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wsa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wsa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3871",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for the device. More Information: CSCvc65257. Known Affected Releases: 10.6(0.1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación secreta de RADIUS en la interfaz de administración de red web de Cisco Prime Optical Communications Manager podría permitir a un atacante remoto autenticado revelar información sensible en la configuración generada para un dispositivo. El atacante debe tener credenciales válidas para el dispositivo. Más información: CSCvc65257. Lanzamientos afectados conocidos: 10,6 (0,1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_optical:10.6\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEACC2B8-15CC-4418-AFB3-5B3FDDF8B6FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96928",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpo",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3872",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases: 10.5(2.14076.1). Known Fixed Releases: 12.0(0.98000.641) 12.0(0.98000.500) 12.0(0.98000.219)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desviación del filtro XSS en la interfaz de administración basada en web de Cisco Unified Communications Manager podría permitir que un atacante remoto no autenticado lleve a cabo ataques XSS contra un usuario de un dispositivo afectado. Más información: CSCvc21620. Lanzamientos afectados conocidos: 10.5 (2.14076.1). Lanzamientos fijos conocidos: 12.0 (0.98.000.641) 12.0 (0.98000.500) 12.0 (0.98000.219)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.14076.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E96831F-40D0-4C7C-97FC-E8D3C063822C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96916",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038036",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3874",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack. More Information: CSCvb70033. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.507) 11.0(1.23900.5) 11.0(1.23900.3) 10.5(2.15900.2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el marco web de Cisco Unified Communications Manager (CallManager) podría permitir que un atacante remoto autenticado realice un ataque XSS. Más información: CSCvb70033. Lanzamientos conocidas afectadas: 11.5 (1.11007.2). Lanzamientos conocidos solucionados: 12.0 (0.98000.507) 11.0 (1.23900.5) 11.0 (1.23900.3) 10.5 (2.15900.2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.11007.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D666F53-ABC2-4DC1-BC03-83B5CDC0DE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96914",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038037",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3875",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list (ACL) on the affected system. More Information: CSCtz59354. Known Affected Releases: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(0)D1(1) 6.2(2) 6.1(5) 8.3(0)KMT(0.24) 8.3(0)CV(0.337) 7.3(1)N1(1) 7.3(0)ZN(0.210) 7.3(0)ZN(0.177) 7.3(0)ZD(0.194) 7.3(0)TSH(0.99) 7.3(0)SC(0.14) 7.3(0)RSP(0.7) 7.3(0)N1(1) 7.3(0)N1(0.193) 7.3(0)IZN(0.13) 7.3(0)IB(0.102) 7.3(0)GLF(0.44) 7.3(0)D1(0.178) 7.1(0)D1(0.14) 7.0(3)ITI2(1.6) 7.0(3)ISH1(2.13) 7.0(3)IFD6(0.78) 7.0(3)IFD6(0) 7.0(3)IDE6(0.12) 7.0(3)IDE6(0) 7.0(3)I2(1) 7.0(3)I2(0.315) 7.0(1)ZD(0.3) 7.0(0)ZD(0.84) 6.2(1.149)S0 6.2(0.285) 6.1(5.32)S0 6.1(4.97)S0 6.1(2.30)S0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en mecanismos de filtrado de control de acceso afecta a ciertos mecanismos de filtrado de control de acceso en los conmutadores Cisco Nexus serie 7000, lo que podría permitir a un atacante remoto no autenticado omitir el tráfico definido configurado en una lista de control de acceso (ACL) del sistema afectado. Más información: CSCtz59354. Liberaciones conocidas conocidas: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(0)D1(1) 6.2(2) 6.1(5) 8.3(0)KMT(0.24) 8.3(0)CV(0.337) 7.3(1)N1(1) 7.3(0)ZN(0.210) 7.3(0)ZN(0.177) 7.3(0)ZD(0.194) 7.3(0)TSH(0.99) 7.3(0)SC(0.14) 7.3(0)RSP(0.7) 7.3(0)N1(1) 7.3(0)N1(0.193) 7.3(0)IZN(0.13) 7.3(0)IB(0.102) 7.3(0)GLF(0.44) 7.3(0)D1(0.178) 7.1(0)D1(0.14) 7.0(3)ITI2(1.6) 7.0(3)ISH1(2.13) 7.0(3)IFD6(0.78) 7.0(3)IFD6(0) 7.0(3)IDE6(0.12) 7.0(3)IDE6(0) 7.0(3)I2(1) 7.0(3)I2(0.315) 7.0(1)ZD(0.3) 7.0(0)ZD(0.84) 6.2(1.149)S0 6.2(0.285) 6.1(5.32)S0 6.1(4.97)S0 6.1(2.30)S0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "356B4143-5184-491B-9D10-19D6536366CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D98CD1-AE44-4863-9B9B-8B16746E122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3357A3F-C304-4D73-8E0A-74DC3B54913D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(1.121\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710C34E7-0FCF-4182-9514-8E05C7273EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18A0045-87F3-4782-81C5-0BF615EA9346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zn\\(0.161\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D32F3A3-C0C6-44FE-8047-C2751BC0124B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)n1\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92EECB-28FD-436C-98E6-488554EDFB18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22B3865-30E9-4B5A-A37D-DC33F1150FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459A7F11-52BF-4AD6-B495-4C4D6C050493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEACA55F-4335-4478-B608-EB92EE1D6C6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700_10-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ABB175-81BE-4C46-BD2D-70016508BE22"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F93299-A715-4E97-87FE-B1E248EA98BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700_2-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D71B228-FFE5-45F7-ADCF-6D359ADA6D31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700_6-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3AD807-5A0F-4DF5-9A7A-748205F409E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96930",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038049",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cns",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3877",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected Releases: 11.5(1.11007.2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el marco web de Cisco Unified Communications Manager (CallManager) podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de falsificación de solicitud entre sitios (CSRF) contra un usuario de la interfaz web del software afectado. Más información: CSCvb70021. Lanzamientos afectados conocidos: 11.5(1.11007.2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.11.007.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2953AE-78A1-42D2-A48E-D228D1514DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96915",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038038",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm2",
        "source" : "psirt@cisco.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3878",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a Telnet process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCux46778. Known Affected Releases: 7.0(3)I3(0.170). Known Fixed Releases: 7.0(3)I3(1) 7.0(3)I3(0.257) 7.0(3)I3(0.255) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en la funcionalidad de inicio de sesión remota de Telnet del software Cisco NX-OS que se ejecuta en Cisco Nexus 9000 Series Switches podría permitir a un atacante remoto no autenticado provocar que un proceso Telnet utilizado para iniciar sesión finalizara inesperadamente y que el intento de inicio de sesión fallara. No hay impacto en el tráfico de usuarios que fluye a través del dispositivo. Productos afectados: Esta vulnerabilidad afecta a los conmutadores Cisco Nexus serie 9000 que ejecutan el software Cisco NX-OS y están configurados para permitir conexiones Telnet remotas al dispositivo. Más información: CSCux46778. Lanzamientos afectados conocidos: 7.0(3)I3(1) 7.0(3)I3(0.257) 7.0(3)I3(0.255) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(0.170\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC5F341-81B9-472D-9AB9-8B04F84EF1B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9147C9-5D8B-40F5-9AAA-66A3495A0AD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA5389A-8AD1-476E-983A-54DF573C30F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B1A8F1-45B1-4E64-A254-7191FA93CB6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FFD26-8255-4351-8594-29D2AEFC06EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E10975-B47E-4F4D-8096-AEC7B7733612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C67B7A6-9BB2-41FC-8FA3-8D0DF67CBC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "182000E0-8204-4D8B-B7DE-B191AFE12E28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC208BC-7E19-48C6-A20E-A79A51B7362C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084D0191-563B-4FF0-B589-F35DA118E1C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968390BC-B430-4903-B614-13104BFAE635"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B90D36-5124-4669-8462-4EAF35B0F53D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAF99B-5406-4722-81FB-A91CBAC2DF41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737C724A-B6CD-4FF7-96E0-EBBF645D660E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7067AEC7-DFC8-4437-9338-C5165D9A8F36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D4CF15-B293-4403-A1A9-96AD3933BAEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCC1515-2DBE-4DF2-8E83-29A869170F36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7282AAFF-ED18-4992-AC12-D953C35EC328"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360409CC-4172-4878-A76B-EA1C1F8C7A79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76FB64F-16F0-4B0B-B304-B46258D434BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96927",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038047",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3879",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en la funcionalidad de inicio de sesión remoto para el software Cisco NX-OS que se ejecuta en Cisco Nexus 9000 Series Switches podría permitir a un atacante remoto no autenticado provocar que un proceso utilizado para iniciar sesión termine inesperadamente y que el intento de inicio de sesión fracase. No hay impacto en el tráfico de usuarios que fluye a través del dispositivo. El atacante podría utilizar un Telnet o un cliente SSH para el intento de inicio de sesión remoto. Productos afectados: Esta vulnerabilidad afecta a los conmutadores Cisco Nexus serie 9000 que ejecutan el software Cisco NX-OS y están configurados para permitir conexiones Telnet remotas al dispositivo. Más información: CSCuy25824. Lanzamientos afectados conocidos: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). . Lotes fijos conocidos: Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(0.170\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC5F341-81B9-472D-9AB9-8B04F84EF1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(0\\)cv\\(0.342\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7304A486-5925-42D3-A5F3-21671BB3FB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(0\\)cv\\(0.345\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FDDA8-B18D-483E-B1D5-5DD76A053D18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9147C9-5D8B-40F5-9AAA-66A3495A0AD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA5389A-8AD1-476E-983A-54DF573C30F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B1A8F1-45B1-4E64-A254-7191FA93CB6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FFD26-8255-4351-8594-29D2AEFC06EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E10975-B47E-4F4D-8096-AEC7B7733612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C67B7A6-9BB2-41FC-8FA3-8D0DF67CBC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "182000E0-8204-4D8B-B7DE-B191AFE12E28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC208BC-7E19-48C6-A20E-A79A51B7362C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084D0191-563B-4FF0-B589-F35DA118E1C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968390BC-B430-4903-B614-13104BFAE635"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B90D36-5124-4669-8462-4EAF35B0F53D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAF99B-5406-4722-81FB-A91CBAC2DF41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737C724A-B6CD-4FF7-96E0-EBBF645D660E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7067AEC7-DFC8-4437-9338-C5165D9A8F36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D4CF15-B293-4403-A1A9-96AD3933BAEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCC1515-2DBE-4DF2-8E83-29A869170F36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7282AAFF-ED18-4992-AC12-D953C35EC328"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360409CC-4172-4878-A76B-EA1C1F8C7A79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76FB64F-16F0-4B0B-B304-B46258D434BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96920",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038046",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3880",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx Meetings Server. More Information: CSCvd50728. Known Affected Releases: 2.6 2.7 2.8 CWMS-2.5MR1 Orion1.1.2.patch T29_orion_merge."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desvío de autenticación en Cisco WebEx Meetings Server podría permitir que un atacante remoto no autenticado acceda a la información limitada de reuniones en el servidor de Cisco WebEx Meetings. Más información: CSCvd50728. Lanzamientos afectados conocidos: 2.6 2.7 2.8 CWMS-2.5MR1 Orion1.1.2.patch T29_orion_merge."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C7BE43-0F81-4550-813E-66D0844E9291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9043AE98-9A13-46F8-8E8A-BEC9E8EE0843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8289371-84B7-4342-9EA6-2844A9C5DCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4AF5A4-1B99-43F8-A659-7C57B033F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F492431-5AE7-439F-81F1-B96EAD773E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC640D5-C840-4ABB-BD22-9B60BBFE8DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8226AF9-F7BA-4B99-86DE-9D8384E9BB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB2094F-B0E1-4129-BFD6-9FE1687B0AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B75EA6-516D-4550-B83D-E0EFDAA25208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2A712-E8FD-460F-9A3C-3760082B8920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A72AC27A-5D0C-45A4-9EDC-C7A4885D76BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6F5080-355B-4A85-8DF4-D75D6A550C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC4CC18-3321-468F-8350-9304D4F7CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "4204B5A3-61FA-4534-95FC-6E18587BAE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch_3:*:*:*:*:*:*",
            "matchCriteriaId" : "C337D2B9-31C7-4CDF-B6DE-E96AEE74284E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch_4:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC30D42-1765-4D7A-A2EF-5EDE2F2C669D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B669D-5A30-49CA-9F35-8F7AA5A2DF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9881CF16-F617-48DA-8CB8-08C3D943CCD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7EAC01-0854-4647-881C-9C707DD00CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFFB01B-1B4F-4072-A68C-98C538DE34ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF1772B-AE24-4647-99A7-BFE69B6377BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309C030-2F02-4E7E-B3E3-035B93DD1E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E62E655-5A35-4CD8-A863-799419D584B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA824C93-C355-4649-8FC9-1A8DDFC6C16E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0048F-B88D-47F6-89D6-B7EDDECBF700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ECA8FE-D587-4692-AA90-9706E44BAC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCD22A8-7E04-4782-AEB2-07878925A2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "462FEEFC-E1FB-4A2F-81D7-B28B14689E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396253A5-EC5F-429B-ABF3-20CB0A56E658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "17E96226-8039-4CBB-A8DC-B7BC349E3D40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96918",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038040",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3881",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-17T22:59:00.640",
      "lastModified" : "2025-10-22T00:16:06.113",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de procesamiento de Cisco Cluster Management Protocol (CMP) en Cisco IOS y Cisco IOS XE Software podría permitir a un atacante remoto no autenticado provocar una recarga de un dispositivo afectado o ejecutar código remotamente con privilegios elevados. El Cluster Management Protocol utiliza internamente Telnet como un protocolo de señalización y comando entre los miembros del clúster. La vulnerabilidad se debe a la combinación de dos factores: (1) la imposibilidad de restringir el uso de las opciones Telnet específicas de CMP sólo a las comunicaciones locales internas entre los miembros del clúster y, en cambio, aceptar y procesar dichas opciones a través de cualquier conexión Telnet con un dispositivo afectado; y (2) el procesamiento incorrecto de las opciones malformadas de Telnet específicas de CMP. Un atacante podría explotar esta vulnerabilidad enviando opciones malformadas de Telnet específicas de CMP mientras establecía una sesión Telnet con un dispositivo Cisco afectado configurado para aceptar conexiones Telnet. Un exploit podría permitir a un atacante ejecutar código arbitrario y obtener el control total del dispositivo o provocar una recarga del dispositivo afectado. Esto afecta a los conmutadores Catalyst, los conmutadores Embedded Service 2020, el módulo de servicio Enhanced Layer 2 EtherSwitch, el módulo de servicio Enhanced Layer 2/3 EtherSwitch, el conmutador Gigabit Ethernet (CGESM) para HP, los conmutadores IE Industrial Ethernet, el conmutador ME 4924-10GE, la pasarela RF 10 , y módulo de servicio EtherSwitch de capa 2/3 SM-X. ID de errores de Cisco: CSCvd48893."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2s",
            "versionEndIncluding" : "15.1\\(3\\)svs",
            "matchCriteriaId" : "9F6546FC-F719-4FC2-ACB1-E558687769EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2sg",
            "versionEndIncluding" : "3.9e",
            "matchCriteriaId" : "3588833B-3B46-4968-8710-C244AB2C7BB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2350-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7301CDF-48BB-4E4B-862A-28B2A742D67B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2350-48td-sd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409044EC-4B25-4C7F-B20F-26CD79EEE49F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2360-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4533989C-CCDC-464A-AB68-29A752FA0759"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2918-24tc-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487A1994-9FF2-4F15-9F38-C5B5218221DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2918-24tt-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DD8AF-D938-4E20-89FE-E34F54EFF2F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2918-48tc-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A546FA79-654C-4CE9-9F6B-8F49255500F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2918-48tt-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E8F619-55BA-45E4-B75E-A64E9452F7AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2928-24tc-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CE5551-B4ED-4554-9012-09A7CF7A5D88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69384D20-0270-4CD5-95D0-7EA93CBDE78E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24lc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07F566D-BCAC-44EC-AB37-6FA870D4AEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24lt-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63946130-E5AB-476A-98AB-3BB49B7EBD1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24pc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9D08FF-DD21-4AAE-ABB5-561CD80D52AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C594EB3-FECD-4E88-8945-B9CD5EF6CA66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E79AB1-9C7D-4E72-8038-60B62D3F771B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784EF30F-54A7-46D8-B9E5-8CA2883563DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-24tt-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6061A1-706D-4129-B99B-318EACB7AB3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-48pst-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3FFD5C-1AC5-4D1D-9A66-9167F72E4C6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-48pst-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8E6604-7F57-4147-A4D9-7A37B415D794"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-48tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28218B4-23E0-4319-BE93-F09FB552F7D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-48tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042A0AA5-FC1B-451E-92A4-1E3C309B0C00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-48tt-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D63435-4DC4-4597-AADE-89BCF470B109"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-48tt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D51A01-A213-4BB1-84C5-7D29D28A81CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-8tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D562C004-24DE-4B9D-A323-C3D2EA32A173"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-8tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D86BAF5-681F-4867-A657-D4724F748707"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_24lc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC92813C-8F6D-4D21-ACC7-1C1B1AE1A8DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_24lc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C2CDD4-F92B-4FCE-BFDC-F3A2BEF08EA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_24pc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "890B8C3F-2E83-4D8C-BF9B-34B50E228822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_24pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE86BD73-E951-44EB-A056-6D7E015B9088"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_24tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC12299-2A7B-493C-9585-560E9A110D15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_24tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EA3F96-D65B-46B6-ACDB-B4A2BDC7DAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_48pst-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D6DC2-D8C6-4183-B95D-28CDEC1612FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_48pst-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1421F9C5-4A7C-476F-91FF-8108718B6E66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_48tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8ACDC1F-60E7-4CA7-B242-25D3F975BECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960-plus_48tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED6EA2F-3479-4145-82CF-B65FF24D8F36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960c-12pc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB4BBD2-EFBE-432C-8B4A-F58FEDA769AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960c-8pc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5720E0D-2B0E-4C44-AE80-9DBE88F57A93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960c-8tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948A3F12-1761-4309-BC97-41F5068AA082"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960c-8tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8FB3BE-77D7-44C7-B41A-4CB4A8766856"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960cg-8tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F2B4A-5488-4AF1-A67F-BC137312ED93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960cpd-8pt-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D0055E-6FC5-42C2-BD7C-C13C54060A35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960cpd-8tt-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EDAEA8-7FAA-4D59-A5B9-62B260E5616D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960cx-8pc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5B6046-6377-471B-9639-D7F635B08190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960cx-8tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCF1E00-1C43-486E-A64E-14F5BEF82362"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960g-24tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD8E261-E81F-4E09-8006-3D878EF61E0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960g-48tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAF5C54-CCFB-48E4-9384-A01867948BA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960g-8tc-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F0CC74-2523-4F85-B54C-C46455613064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-16ps-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923B1623-2A33-497B-9238-3F4699E8E4AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-16ts-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762B1BA4-69FC-4977-A0A8-9323660674A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-24ps-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F249629F-1A5C-4C12-B956-552A2526A836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-24ts-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9AF097-09D6-4388-85EA-5954BD40D6B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-48ps-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "949533D3-6500-49BA-BE55-42E1506D3DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-48ts-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E5B561-02A2-4F79-8E28-E6A2B5C4F09D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-8ps-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBE7411-BD02-47A8-99BC-6B701B60A61B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960l-8ts-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96195B6B-C869-4DEF-AB5D-704B3D2FC76E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960pd-8tt-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9CB655-99FB-42F3-A2BB-2A297B02EC2B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D2C8C2-8D3B-46D0-A1EA-BC0C65CD93F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EECCA51-9F60-4FAC-9291-57411441B090"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261D5183-1A3C-41ED-B196-BB0992FC5BF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F114380-0BB6-414C-9854-77DCEBB6C9BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-24ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C5B9D3-BF37-4146-A12E-193EA90C9BE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48fpd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49073FBC-9DF8-4A5C-8BD5-FBC2B1923D35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48fps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4845C2-9710-4CE8-81C3-D81037B7E66B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48lpd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DAA8FE4-F6BF-46C9-B94D-C423AC27FFCA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48lps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379B1CA9-E800-41BD-B50B-5A4A6924E70F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C95186-A63C-40F6-8FAF-F7907BF04907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F490DCE9-400E-4079-8409-71A17A2F50CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-48ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFD06FB-FDAA-4208-8BF2-27DE6EEA1C39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7C5852-9BF9-47E5-A524-CC13894DF470"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADA2DD-29BD-499E-9E25-C514ABD1AADC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f24ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B25DAE-4E68-404B-9E31-6EAE7C3DC105"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f48fps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83F7F5E-FDDD-4B8F-9814-149B076ABBE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f48lps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BC9B19-8C1E-4DB5-9C4D-E94253E4B753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0387EC8E-3A09-4D8B-8FFE-9EEE52498AD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960s-f48ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB9DEA-7A55-411D-9702-CCD8FDB0C35D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76048CE-58D5-4F67-8679-9C863D41F15E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7DC221-0BA1-4051-8643-1180C9EA682A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-24psq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CEE576-6C55-4BD4-B9F2-33E40483437B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548B1FAF-946A-446B-8248-10BC194496B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3531645A-C4FB-4F6D-BBD2-D2852AA13509"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-24ts-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46984315-BF1E-4146-9960-328AEFA73D54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48fpd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FC6D2F-0B4A-4D12-BF34-8D91C948CD23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48fps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927762E0-6EE5-48C9-A7EE-8824BEBED08A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48lpd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F1CA06-D540-4CDB-BACB-5D528C830753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48lps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53A6E90-DA02-420A-B4A7-BC6D73C4B95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48837AB-F3DB-4246-90E2-6D8CD8BCF658"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B888C8-9E13-4353-A8D8-96900726AE77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960x-48ts-ll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA35A21E-9FB8-4694-B46D-E9381CB3D0C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24pd-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BD40B3-2AD6-42D3-AE79-2E66A4CDF79E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F1600-30A5-4B31-A518-7B84BFE16883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24ps-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03D0B73-B854-4385-9AD2-EAC7B041558D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868B074C-2A14-4242-829A-202095A2CFF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24td-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C990D9F-42F4-4722-AF6E-2933E5872C17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C76EA7-969F-4A5F-B045-995C9445B415"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24ts-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567757A5-74CB-4FB6-9BDA-FA4F51A02998"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7794B87E-C70E-4DA3-9FC8-0170A0898557"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48fpd-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEB1267-B23F-4001-B6E2-49894CF6EC38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48fpd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845DDB35-3BB6-41CB-8304-340F444B6FE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48fps-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAC629E-531F-4B99-9A07-15E113169FCA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48fps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63DC2E4-83AB-487E-80D5-036723D930F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48lpd-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD7CDE-C7E1-466C-A6E3-33AA30F9CDEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48lpd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F543085-A2E2-4D7E-96EC-E9C6B964AED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48lps-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64C85B3-D227-4BE7-BE7B-B05F86FE0583"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48lps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9AD1E-3FE7-42D2-9A8D-F71694EF9BAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48td-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A153EAF3-C3DC-49C5-BBBA-7459850B1F57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2000D5-E0C0-4488-8213-DC3079301050"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48ts-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF0F69-A0E0-4AAC-B96B-1C1B59D76669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2960xr-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179F9893-1C6B-468E-84F3-1CAAAE0A7671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2970g-24t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909A8DAE-5397-4B9B-8CDA-9B00712D6D6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2970g-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5193F631-B2A8-48D2-8DC7-AE2365FA2DEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_2975:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B842CBE4-C180-4C72-AC61-E8FD522C902F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_12g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB74CE-1822-48B4-BB5B-131794A2BC14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_12t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351FBA8D-0CA3-49A9-B703-4CDF1E8DFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_24_dc_smi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19A8A62-4FCF-43D4-B266-CB00A8217449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_24_emi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DC2757-2107-477A-B4D1-C6D2419DFBD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_24_fx_smi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D79CF40-2070-48E3-8135-F9893226D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_24_pwr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E7A2E1-D356-470F-9D04-C743BE70B6E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_24_smi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5237B60-ACF2-473F-B822-27792A07CBC6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_48_emi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C4C143-1CF6-4429-8BA0-7BE782032D30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3550_48_smi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA8BBAA-E651-4626-B31D-39EA4F04D6BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560-12pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACEA494-E9DC-4F74-A252-259CC93E2741"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560-24ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7E87CD-D6B7-4C7C-8627-BADB993A6D72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DC29B-A5DC-4137-A95A-DCC85E9C59B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560-48ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F482285C-D0C6-4BA3-8ACF-8461B91FDF82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560-48ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E02CA96-ED16-410B-B51A-AA29B6E5667E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560-8pc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61467987-235B-4D06-83D2-5DF5A51E4DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560c-12pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29CCFC05-FE79-4804-AEED-00975FA49EE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560c-8pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83DF239-FEFB-4573-8E41-498A5FC5EB16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cg-8pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333FA8D5-CEA5-4380-9D7C-1D72B4C98464"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cg-8tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E1CECF-0621-4004-9F6D-A2690BD18273"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cpd-8pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D867770-2404-4F51-B120-F170927F65BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-12pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABDF97F-B703-40A0-B510-D73859139E87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-12pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6637D9D4-14CE-48D2-90D4-19EF761F4193"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-12tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE430A-2446-4F29-88D8-D452D1022B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-8pc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DF34EC-7BC3-44DC-B7B1-94162245CBBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-8pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06EEDB4F-BD1E-4914-AF79-64D42643683D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-8tc-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BFFB02-7C84-4569-8129-74B84A5E7310"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560cx-8xpd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12A3197-0CE2-44F4-B310-DE8D4A72B00D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-12d-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0E46E6-C885-4184-8EA9-C7323A482A19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-12d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7EA43F-8B3A-4636-B2BF-010E141C5710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-12sd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D8ACB8-850C-4967-9D42-B8F162259FF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-12sd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E14120-1B3E-4A70-B875-4EE5B979711B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188AE176-297C-4EB6-B048-B2743864A454"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A09201-D66C-482D-950C-8B13B6BE69A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-24td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9CFC23-8C33-43F9-B5DE-1FA4D7CB2A0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-24td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DED5868-C623-48B7-8D04-BA5442B772BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-48pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB2C33A-A76D-4600-9A7E-F5E5C93FB71E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-48pd-ef:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF53A7E-9933-4AE8-B5A5-7A4657DF17A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-48pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207E453A-F004-486A-A36A-4B120647E3F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-48pd-sf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5403BF-948F-493C-AB10-4C5239DDA975"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-48td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0EBD95-F0EB-4AE5-8C11-987C3DA5F6AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560e-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE73686A-5BDB-407B-99DB-2FC7107EA2ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560g-24ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15EFDB4-AB6B-4194-A8DA-47EFC5435A9E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560g-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A11434F-D3CD-4F88-888B-82262837B752"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560g-48ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFA401A-8C8C-4DD8-9795-5F38977D2D90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560g-48ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56B4661-3FF4-4610-9DA9-8A2E87C059B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560v2-24dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BB343B-D016-46BB-8520-3F29A639C183"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560v2-24ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDEFF5D-40DC-410A-A781-44981DE9A3CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560v2-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DCABE7A-783A-4E93-A762-520E653E161E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560v2-48ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69F868-A419-48EA-8F99-A62CDEFA483D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560v2-48ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F070996F-B01C-42F3-9CE7-8ACAB89ACD70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1EAFFF-E36A-4BED-99BD-CB16977AF312"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36856-FCCB-4FBA-8728-A628CC4F5F2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134A9D8A-F8AC-4ACF-B558-91A4BF850425"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E344D5-195B-4995-8616-A212A9AE1DBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A94A128-3DDD-44FD-A8DC-1ECBCC38C657"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C639B610-F43A-443D-B956-11BE7D34F41D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA269A5-5E49-461B-9FD3-ADAC8E58FF8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A74304E-855E-48DF-B8B1-4AB17C772115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4D477B-5EB7-4841-90DD-510DD655E288"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63BA8D6-5139-4033-AF52-03E7515A0050"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A029A-D747-42D9-B91E-A57D91182AC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76E9961-7799-4B86-A05E-9BAD9F5E1BC6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48pf-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB035A6-64B4-4612-9CF6-2DB5EB85DF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48pf-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDDFBDC-DCA9-4DD6-BBF3-AB65AD5A7BB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48pf-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3088538-99F0-48EE-95EB-608AAAC4D5C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF3C12-93A6-4539-B3B7-C45B30FC39A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2B3C1C-AC54-455B-969C-FB9D19B1FD5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7622A057-11DD-4BCC-BB3C-E97C5C86C21A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3568327-3C97-4F60-B8CD-BD46A4297D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14E6769-44B6-4258-A8CF-8CDB0FA72F65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3560x-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0936B75B-CE98-4D30-8B95-D16569D7CAB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750-24fs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB109071-3FE4-4610-A9FF-2E7FEEF23E0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750-24ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1821EB-F2F9-4293-A92C-70C4627623D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F123F41-1B78-45F2-98EE-3BF74CBD8112"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750-48ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C6BCE4-6D58-4CA1-810A-4427E4235DB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750-48ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D922479-A8F4-4419-A450-AE1A97C480DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_metro_24-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C15A3C-07C0-4385-BC5E-A7FB3D4B7B4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_metro_24-dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D306E3-6D0A-4B53-BD70-AE3D4CDD6DCC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A4BFC9-BA3D-43FF-8E8B-CBA87D9FED4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC8425C-509A-43BB-865E-EB5DDE007222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-24td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787CB67C-F5C1-4508-9817-CA25A5D12EEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-24td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B55075-2EB6-4511-9ADC-70F2314D7C98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-48pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331FED4B-B014-4B2F-B2F4-A82CB18F60B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-48pd-ef:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098C6C37-0785-4224-92D5-A8E1AB4A24F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-48pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91443C6-40C3-4EB1-93C5-1F25E99C7346"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-48pd-sf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A018451F-D2C4-40C1-A277-4D7A873F31F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-48td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A640842-EC2A-4603-BFC0-3F42EF01D3D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750e-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C71306-AA1F-4CC0-8E36-57F5EE374414"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-12s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5C6319-C780-4C9D-971D-762BE23F3D92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-12s-sd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9609F0A2-E891-46C8-A293-C4EC5093DA2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-16td:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB2A727-4B95-4B2A-9B0F-90259330BFDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-24ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9601405-1541-4C8F-B388-85C73765D75C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-24t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D063818B-56EE-415B-89EF-C6C707637269"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7CF840-3C7B-4765-AFBE-84AA11E91956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-24ts-1u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB69810E-900E-45BC-BD43-B7CA1DE722D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-48ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA05EEE-9039-430F-92DF-B3E4A52A18F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g-48ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3CDFEB-8B08-4912-896A-72F1BAFD47A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750v2-24fs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB18A03-6D49-489B-9F27-DF19D3AC0DAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750v2-24ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A75271-D05C-4C91-A99A-C03BE49C9110"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750v2-24ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45931DC1-552D-44F2-9327-8490A9B45BF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750v2-48ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED46E2B-6398-435C-ABC0-7C6B226FB55D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750v2-48ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5D6BBD-C589-44DD-9C14-12CBCC716610"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17A2728-7627-4550-80D3-4EC228606A7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6540A964-656D-48E2-B7D3-3F4D4B38A785"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BA9762-0C59-4841-820C-4D30EB30E04F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB4DCCA-EEF2-4999-A977-89046D934292"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0859DCB-7572-4E78-A166-766FEF0BDFD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072B2446-904F-4614-B4A6-68396644B9AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E537A35E-F4C1-4A7D-AACF-E80D4E2B3305"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DD7944-66A9-4611-85DE-5F42848ACDB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944895AA-9E92-45B7-8A31-AA148AF9346B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEBB446-A86D-4C06-8054-B6C1C0ED7776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6551B6-85FB-4945-84CA-0E421FE53C3B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E27272-07F1-4424-A8B9-5FDAD67DB68A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC60521F-DC3F-46F9-BBC9-4C108D17E7F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F799EEF-3F87-456D-9152-7D44C08D8938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD11F079-2F52-4611-B75E-33B2738501E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43534D4E-3115-4128-8214-06A52273B69A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48pf-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539BBD1B-3E1E-4CB1-B016-F20C25C46B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48pf-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4947A20-7C21-4071-843B-EB87A77A8DC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48pf-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4884D54A-E24C-4382-825C-958FBD56C060"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A6324C-5812-44E9-AC97-0511349E27B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266C504F-0C75-428A-8F67-863F3AD31368"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E209DEC3-9A4E-40CF-B19C-B71FF76D29E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3595C29-C1B0-49D5-AF3A-52DACDD3C725"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72C5777-7D8D-41E7-BE3A-4DC516BD050B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750x-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FA3259-48DD-41BD-957D-4A98AE99754E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000_supervisor_engine_i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFCA2CC-2F4A-4489-A3D6-3174350EB879"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000_supervisor_engine_iv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EEF9CF-19AE-4A21-88D5-06A45B972651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000_supervisor_engine_v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D817D90-A7BA-4CA8-BA5C-FA82CA31F620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_6-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF8023F-C8D7-4B98-9472-6EC365A19D48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_6l-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B137CB-C12C-47AF-9AF5-05C1B2086351"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_ii-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD2F469-8E06-43D3-B458-0437352D5F47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_ii-plus-ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E711BA-BBF0-4E1A-B84C-2449E4CB8BA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_iv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED3981C-C68B-4697-9AB3-A9BD6249B1E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A7E1F3-AB1E-452C-9FA4-DD24680F65D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_v-10ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD713C-BF36-4BCA-8BC6-55418E038136"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500_supervisor_ii-plus-10ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C402FF8B-6EA1-406B-9DB7-E2D8939CFFFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4500e_supervisor_engine_8-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C30EF3-A63D-4022-A032-77C376AD9DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4900m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A39CB5-8F97-4030-B9CD-D28BF5C811F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4928_10_gigabit_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C36E5D-F471-4002-854B-93DFFFEF471C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4948:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B41FC2-D482-4CF7-ADAC-720CCD4C5648"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4948_10_gigabit_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C98C14-96EB-4AF5-9090-842234BB0855"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4948e-f_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725C592-4ADF-4C06-958D-4BC725A0EA19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4948e_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EC2EE0-F838-497D-92FD-1FD830564811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EBA036-A69E-40FE-B8A2-6D99C0AB9F35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2937EE-0566-465E-9AE7-0BC97D02676E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3032:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0527FC9C-08FB-4AA5-AD59-9EEFBEFF6F53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0799AF-3CBB-4749-9314-9DF3A93C7D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDE0913-7E59-4741-B0D9-EC6C90C5E21C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3120x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808DEBC5-0249-491C-9607-9263F781BCDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_blade_switch_3130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AF91D-A937-4F0B-88F9-B0EDEE7CE9EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_c2928-24lt-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB558C8-826C-486A-B7CF-1E0EC0A7A106"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_c2928-48tc-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC95D92-296F-4671-9191-29CED1C38070"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_switch_module_3012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B334CAF-50A9-4214-AA09-71617C1235A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_switch_module_3110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65AA2DC-C7FC-48F9-B481-920793CCD004"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_switch_module_3110x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6BCA-376D-40DE-88AF-358A23AEB25C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_24tc_con:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6B538-A151-4C6F-AB66-2592335C9412"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_24tc_con_b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FBF6124-87FE-4062-9774-3D7B314852FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_24tc_ncp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172A45CB-9976-4743-B342-460BDF1237E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_24tc_ncp_b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D354D47-434F-48DB-9415-4B6B650485BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_con:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD04B-6601-4F8A-BA6E-3B5769002B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_con_b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230828B3-36C5-4183-824F-A0D2C8811AF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_ncp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5A3F35-0DEE-40D7-AA69-E1CB81291D8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:embedded_service_2020_ncp_b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0961D3-060C-415F-8721-6035BD813EC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:enhanced_layer_2\\/3_etherswitch_service_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9861A7C6-9AC2-4B84-B86E-56BEA7A84774"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:enhanced_layer_2_etherswitch_service_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1526DA59-4077-44CF-A42C-56EC36EFFA76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:gigabit_ethernet_switch_module_\\(cgesm\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B0E5E0-92ED-4AFF-BF81-A48AA6E9DC51"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3010-16s-8pc_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0071F74-A0D3-45FE-8F58-F2F4D64AA0A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3010-24tc_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095B70C4-0551-42BB-88B3-602DA9AE7C18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-16gt4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EC8751-C17A-4F75-B88A-5778E2496462"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-16t4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C52B1C4-A42A-42AC-ABB3-F2B289F47B8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-4gc4gp4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19155C80-7068-4E3A-88EA-9F90C1B14ABC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-4gs8gp4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64234EBB-B47D-4B2A-A46D-2AA234E0ECC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-4s8p4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4975AA-722F-43AB-A762-88D5A00FC7EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-4t4p4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A76C5B3B-03FF-47C0-88B1-A5AB932D02DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-4tc4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA64B716-2D79-4B4E-8007-C4575AA68E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-8gs4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763B3611-7EE1-455F-96C7-0A2E83D22AF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-8gt4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2D391F-27DE-48E6-9AA3-36A8C672A6AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-8gt8gp4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE4E5E0-F7E8-43BC-9AFC-159D6B2B4344"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-8s4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBAC7B1-693D-40F8-90BB-6290E3DCD5A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4000-8t4g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AF8063-E30D-411B-9CEC-25E336E5E4E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4010-16s12p_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A359421-6CD3-43E0-94FC-20C76756C7EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-4010-4s24p_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F9DF32-3E0B-47FA-912A-FCE948BA768E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-5000-12s12p-10g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCB2A84-541D-44A6-ABDA-67A3A6DFC80F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-5000-16s12p_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE187051-5443-44D9-A0F8-2D351D2E4372"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16ptc-g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F63F4C5-7784-4B83-B454-E9731210920B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16t67_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AEB2-8690-4389-A896-10430A690243"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16t67p_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D464787-DC79-474F-84CA-2B4AD209C21F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16tc-g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFC9C43-2BAE-4F4E-B084-F9FB54EEF6D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16tc-g-n_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EAC97A-E3FC-490F-9D02-8CA8FA87D6DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16tc-g-x_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0F4029-9E79-4ADE-A851-72F18635A492"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16tc-g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C224EE6-1436-4F11-94A8-4CC96A5001F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-16tc_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A4E545-9F74-40CC-8212-11798AF8D611"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-24t67_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D817838-BDA5-4ED8-8EC9-6C5F4C3C9C5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-4s-ts-g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842352DA-0E9B-4520-9B32-C766BEA7BF9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-4t-g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66521F18-9C3D-4323-AFC1-5A4ABC476084"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-4t_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E62F6C8-1B96-4093-8E54-05B0086842A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-4ts-g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5D3398-D9AE-4447-8D21-03853B41594E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-4ts_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27364811-6885-49B9-ADE7-55CD69105EC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-8t67_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F72F96-3272-432C-A8B8-781C95D65A5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-8t67p_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036F4AFB-CBAA-4155-AC79-B2DC38E37613"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-8tc-g-e_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9725FF2E-25DB-42EB-B504-B169392D6C31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-8tc-g-n_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683C46D6-6DBD-4C99-A577-4CE624DEDD8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-8tc-g_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA132B36-55CB-492A-8B85-715201E7712F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_2000-8tc_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABD77B1-BF1E-4748-A965-08D19E323D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_3000-4tc_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DA136-4146-439B-A27B-013F353382B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie_3000-8tc_industrial_ethernet_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374CF70-3F34-448D-ABA0-EEF1C79DC4BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:me_4924-10ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D304B8-89EB-45DE-BEA3-564028842BB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rf_gateway_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18233C3F-7F08-4E97-BEC1-30B336E92511"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sm-x_layer_2\\/3_etherswitch_service_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F16053-2839-4A59-B2A7-7E642BD26BE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96960",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97391",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038059",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41872/",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41874/",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41872/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41874/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-3881",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-17T23:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5."
      }, {
        "lang" : "es",
        "value" : "La función de creación de cuenta de usuario en Chef Manage 2.1.0 hasta la versión 2.4.4 permite a atacantes remotos ejecutar código arbitrario. Esto se soluciona en la versión 2.4.5."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A994C1-D41B-41E8-83D1-45A47CE781EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29A1A0-DC8D-43DF-8891-035046C9B15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52ABCD0-4946-4759-AC24-AEE0663E4AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342C0F99-1C39-48C2-9356-9F13981438DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4AEA73-A231-4784-A832-F969E150ADC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9649324B-0BF9-42B3-87F5-F3720ED73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B7CC7-288E-428A-AE4D-AFBD653C8158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9269B3F-E75D-494C-B11E-4E096B015970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28AC33C5-FEF5-43FD-80E8-DA0E23290598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B1FCAC-84DF-4B4D-B647-5420A0D946C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chef_manage_project:chef_manage:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F5534A-C4ED-4973-A327-22C6F07B4161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://discourse.chef.io/t/chef-manage-2-4-5-security-release/10599",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://discourse.chef.io/t/chef-manage-2-4-5-security-release/10599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2656",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-18T04:59:00.170",
      "lastModified" : "2023-11-07T02:43:53.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-6320.  Reason: This candidate is a reservation duplicate of CVE-2016-6320.  Notes: All CVE users should reference CVE-2016-6320 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-18T20:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching."
      }, {
        "lang" : "es",
        "value" : "Suricata en versiones anteriores a 3.2.1 tiene un problema de evasión de desfragmentación IPv4 provocado por la falta de una comprobación para el protocolo IP durante la coincidencia de fragmentos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openinfosecfoundation:suricata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "0544C003-683A-455F-B07A-6374901D983C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/inliniac/suricata/commit/4a04f814b15762eb446a5ead4d69d021512df6f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/2019",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/inliniac/suricata/commit/4a04f814b15762eb446a5ead4d69d021512df6f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/2019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-18T20:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin."
      }, {
        "lang" : "es",
        "value" : "CSRF ha sido descubierto en la interfaz web de usuario en Deluge en versiones anteriores a 1.3.14. La metodología de explotación implica (1) alojamiento de un plugin manipulado que ejecuta un programa arbitrario desde el archivo __init__.py y (2) provocando que la victima descargue, instale y habilite este complemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluge-torrent:deluge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.14",
            "matchCriteriaId" : "DC5143F5-3625-401D-870C-01FD637362EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.14",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=318ab179865e0707d7945edc3a13a464a108d583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.deluge-torrent.org/deluge/commit/?h=develop&id=11e8957deaf0c76fdfbac62d99c8b6c61cfdddf9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97041",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/857903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=318ab179865e0707d7945edc3a13a464a108d583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.deluge-torrent.org/deluge/commit/?h=develop&id=11e8957deaf0c76fdfbac62d99c8b6c61cfdddf9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/857903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-19T18:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52."
      }, {
        "lang" : "es",
        "value" : "La función xfrm_replay_verify_len en net/xfrm/xfrm_user.c en el kernel de Linux hasta la versión 4.10.6 no valida ciertos datos de tamaño después de una actualización XFRM_MSG_NEWAE, lo que permite a usuarios locales obtener privilegios de root o provocar una denegación de servicio (acceso fuera de límites basado en memoria dinámica) aprovechando la capacidad CAP_NET_ADMIN, como se demostró durante una competición Pwn2Own en CanSecWest 2017 para el paquete Ubuntu 16.10 linux-image-* 4.8.0.41.52."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E12A4EF-B3CF-432B-B9FF-AEF80A5C6906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "3116EF11-56E7-4D40-9FD0-6109280D0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.73",
            "matchCriteriaId" : "1656D223-4848-48AD-825C-23B10AE1D8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "50A4478F-EC43-46DF-AE23-9298AE3F8892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.49",
            "matchCriteriaId" : "5AA77834-089F-4556-A00B-CAC1E08444BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "F3C1F309-D954-4BB7-AC02-30FC58BE76F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.59",
            "matchCriteriaId" : "86ECD7D8-40A9-4227-B77D-867268FFDEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.20",
            "matchCriteriaId" : "D092A759-EAC4-4DDC-A3AF-7BECC8D32811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.8",
            "matchCriteriaId" : "BC107011-8D8F-4EC7-B7E4-867BC4E35A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=677e806da4d916052585301785d847c3b3e6186a",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f843ee6dd019bcece3e74e76ad9df0155655d0df",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/29/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.eweek.com/security/ubuntu-linux-falls-on-day-1-of-pwn2own-hacking-competition",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97018",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038166",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4159",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.trendmicro.com/results-pwn2own-2017-day-one/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/677e806da4d916052585301785d847c3b3e6186a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f843ee6dd019bcece3e74e76ad9df0155655d0df",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/thezdi/status/842126074435665920",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=677e806da4d916052585301785d847c3b3e6186a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f843ee6dd019bcece3e74e76ad9df0155655d0df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.eweek.com/security/ubuntu-linux-falls-on-day-1-of-pwn2own-hacking-competition",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.trendmicro.com/results-pwn2own-2017-day-one/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/677e806da4d916052585301785d847c3b3e6186a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f843ee6dd019bcece3e74e76ad9df0155655d0df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/thezdi/status/842126074435665920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-19T20:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' in contradiction to the threat model of Android where the bootloader MUST NOT allow any security-sensitive operation to be run unless the bootloader is unlocked."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en OxygenOS en versiones anteriores a 4.1.0 en dispositivos OnePlus 3 y 3T. El atacante puede cambiar el modo de arranque del dispositivo emitiendo el comando 'bootboom oem boot_mode {rf/wlan/ftm/normal}' en contradicción con el modelo de amenaza de Android donde el gestor de arranque NO DEBE permitir que se ejecute ninguna operación sensible a la seguridad a menos que el gestor de arranque está desbloqueado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3",
            "matchCriteriaId" : "399C6C05-D27E-4257-B97C-B036F3D10298"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T00:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup."
      }, {
        "lang" : "es",
        "value" : "Libpcre1 en PCRE 8.40 y libpcre2 en PCRE2 10.23 permiten a atacantes remotos provocar una denegación de servicio (infracción de segmentación para acceso de lectura y caída de aplicación) al activar una búsqueda de propiedad Unicode no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFAB169-4364-4D71-B0A8-2831D0A4D5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre2:10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80479DA-16D6-47A1-88AF-55B5C821BDEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/14/libpcre-invalid-memory-read-in-match-pcre_exec-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1649&r2=1688&sortby=date",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_internal.h?r1=600&r2=670&sortby=date",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_ucd.c?r1=316&r2=670&sortby=date",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/14/libpcre-invalid-memory-read-in-match-pcre_exec-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1649&r2=1688&sortby=date",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_internal.h?r1=600&r2=670&sortby=date",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_ucd.c?r1=316&r2=670&sortby=date",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T14:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function."
      }, {
        "lang" : "es",
        "value" : "La función sg_ioctl en drivers/scsi/sg.c en el kernel de Linux hasta la versión 4.10.4 permite a usuarios locales provocar una denegación de servicio (desbordamiento de búfer basado en pila) o posiblemente tener otro impacto no especificado a través de un gran tamaño de comando en una llamada SG_NEXT_CMD_LEN ioctl, conduciendo a acceso de escritura fuera de límites en la función sg_write."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.18.50",
            "matchCriteriaId" : "92B94CE5-8FF1-4DE4-A575-9E6ECB20943A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.40",
            "matchCriteriaId" : "70E79011-B658-40F2-B406-D3619DEBFACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.60",
            "matchCriteriaId" : "4F178F12-F139-40FB-97AD-76448CC93C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.21",
            "matchCriteriaId" : "B02C440D-4772-4D81-AABA-5804758AEBC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.9",
            "matchCriteriaId" : "D19E7FEC-D986-444B-8363-0B0FACB6BB36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038086",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/dvyukov/48ad14e84de45b0be92b7f0eda20ff1b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi.git/commit/?h=4.11/scsi-fixes&id=bf33f87dd04c371ea33feb821b60d63d754e3124",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/dvyukov/48ad14e84de45b0be92b7f0eda20ff1b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi.git/commit/?h=4.11/scsi-fixes&id=bf33f87dd04c371ea33feb821b60d63d754e3124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1134",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-20T16:59:01.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459."
      }, {
        "lang" : "es",
        "value" : "IBM Reliable Scalable Cluster Technology podría permitir a un usuario local escalar sus privilegios para obtener acceso de root. Referencia IBM: 1998459."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:power_hardware_management_console:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233C9E2E-6821-40A3-9313-712E2D38B1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:power_hardware_management_console:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D3F193-3D5F-4A15-8CD0-39BD8714010A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998459",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96764",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038389",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1145",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-20T16:59:01.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 8.0.0.6 no termina correctamente los agentes de canal cuando ya no son necesarios, lo que podría permitir a un usuario causar una denegación de servicio por agotamiento de recursos. IBM Reference #: 1999672."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999672",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96759",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038068",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1146",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-20T16:59:01.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999736."
      }, {
        "lang" : "es",
        "value" : "IBM Content Navigator 2.0.3 y 3.0.0 son vulnerables a secuencias de comandos en sitios cruzados. Esta vulnerabilidad permita a usuarios incrustar código JavaScript arbitrario en la Web UI alterando así la funcionalidad potencialmente conduce a la divulgación de credenciales dentro de una sesión de confianza. IBM Reference #: 1999736."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D78A4C4-ABA7-445C-8D4D-F6A9FBC6BDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC6DC-5F0D-46E8-85F9-BC9EA5244D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999736",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96761",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1151",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-20T16:59:02.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 8.0, 8.5, 8.5.5 y 9.0 usando OpenID Connect (OIDC) configurado con un interceptor de asociación de confianza (TAI) podría permitir a un usuario obtener elevados privilegios en el sistema. IBM Reference #: 1999293."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC9BD49-31BF-4D79-BAFE-5107D611FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999293",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96841",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037984",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1155",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-20T16:59:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference #: 1999754."
      }, {
        "lang" : "es",
        "value" : "IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0 y 5.1.0 podría permitir a un usuario obtener acceso a los informes de otro usuario utilizando una solicitud HTTP especialmente manipulada. IBM Reference #: 1999754."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A672407B-4966-4A89-BF1B-2644CEAF172B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:algo_one:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A8F72A-746C-49E9-9FF3-06C31C0B22FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:algo_one:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A5BC2B-44B9-4E5E-8307-4A24258C8639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999754",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96968",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions."
      }, {
        "lang" : "es",
        "value" : "GNU screen en versiones anteriores a 4.5.1 permiten a los usuarios locales modificar archivos arbitrarios y en consecuencia obtener privilegios root al aprovechar la comprobación incorrecta de los permisos de archivos de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.0",
            "matchCriteriaId" : "70390DBA-DD8A-4F14-8CE8-F31BA051CBA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://savannah.gnu.org/bugs/?50142",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/29/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95873",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://savannah.gnu.org/bugs/?50142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5930",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-20T16:59:02.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check."
      }, {
        "lang" : "es",
        "value" : "El componente AliasHandler en PostfixAdmin en versiones anteriores a 3.0.2 permiten a los administradores de dominio autenticados remotos eliminar alias protegidos a través del parámetro delete para delete.php, implicando un cheque de permiso desaparecido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postfixadmin_project:postfixadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "46402CAD-5E29-4C7A-B550-686A98030F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-02/msg00076.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/08/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/postfixadmin/postfixadmin/blob/postfixadmin-3.0.2/CHANGELOG.TXT",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/postfixadmin/postfixadmin/pull/23",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/postfixadmin/mailman/message/35646827/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-02/msg00076.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/postfixadmin/postfixadmin/blob/postfixadmin-3.0.2/CHANGELOG.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/postfixadmin/postfixadmin/pull/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/postfixadmin/mailman/message/35646827/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index."
      }, {
        "lang" : "es",
        "value" : "La función vrend_draw_vbo en virglrenderer en versiones anteriores a 0.6.0 permiten a usuarios invitados locales OS provocar una denegación de servicio (acceso a matriz fuera de límites y QEMU bloqueo de proceso) a través de vectores involucrando vertext_buffer_index."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "747BBA60-A0BE-4899-AC3C-A8A5B0FB3AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer."
      }, {
        "lang" : "es",
        "value" : "La función sdhci_sdma_transfer_multi_blocks en hw/sd/sdhci.c en QEMU (también conocida como Quick Emulator) permiten a usuarios privilegiados invitados locales OS provocar una denegación de servicio (bucle infinito y caída del proceso QEMU) a través de vectores que implican el registro de modo de transferencia durante la transferencia de múltiples bloques."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D5C1F9-C3B4-4733-8782-0E54AE543C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "286D3DE9-9796-42AE-88E1-F6E04BF8B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B54248FC-FD5C-445E-BD8F-886D9D8736D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "89FB8D92-4A3A-4B52-93B0-6F809D313C40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96263",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421995",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/14/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en NetRxPkt::ehdr_buf en hw/net/net_rx_pkt.c en QEMU (también conocido como Quick Emulator) cuando la característica VLANSTRIP está habilitada en el dispositivo vmxnet3, permite a atacantes remotos provocar una denegación de servicio (acceso fuera de límites y caída del proceso QEMU) a través de vectores relacionados con el decapado VLAN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/17/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1423358",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg03527.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/17/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1423358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg03527.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "La función IofCallDriver en USBPcap 1.1.0.0 permite a usuarios locales obtener privilegios a través de una llamada 0x00090028 IOCTL manipulada, lo que desencadena una referencia a puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usbpcap_project:usbpcap:1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1103FD-BB59-474F-8F06-81BD480AB7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141526/USBPcap-1.1.0.0-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97026",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41542/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141526/USBPcap-1.1.0.0-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41542/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet."
      }, {
        "lang" : "es",
        "value" : "saned en sane-backends 1.0.25 permite a atacantes remotos obtener información sensible de la memoria a través de un paquete SANE_NET_CONTROL_OPTION manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sane-backends_project:sane-backends:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A82321-5815-4935-BBB0-704A7A08DCC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035059.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-03/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://alioth.debian.org/tracker/index.php?func=detail&aid=315576",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4470-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-03/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://alioth.debian.org/tracker/index.php?func=detail&aid=315576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4470-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks Terminal Services (también conocido como TS) Agent 6.0, 7.0 y 8.0 en versiones anteriores a 8.0.1 utiliza permisos débiles para recursos no especificados lo que permite a los atacantes obtener información sensible de sesión a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:terminal_services_agent:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867C0010-2021-4180-97A3-72BB4773B123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:terminal_services_agent:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA7D6B0-B08E-4B1D-AE9B-3B405B80488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:terminal_services_agent:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DCF61B-016E-49D1-8D60-C94C6D13F95E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-6356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-6356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Kinsey infor-Lawson (anteriormente ESBUS) permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del (1) parámetro TABLE para esbus/servlet/GetSQLData o (2) parámetro QUERY para KK_LS9Reporten gPortal/GetData."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kinsey:infor-lawson:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A20D105-B878-4A55-979F-C48B54D2F90F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41577/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41577/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de CSRF en la interfaz de la web en Scheduler en SolarWinds (anteriormente Serv-U) FTP Voyager 16.2.0 permite a atacantes remotos secuestrar la autenticación de usuarios para solicitudes que (1) cambian la contraseña de administrador (2) finalizan el scheduler o (3) posiblemente ejecutan comandos arbitrarios a través de solicitudes manipuladas a Admin /XML/Result.xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:ftp_voyager:16.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD0BB3E-AA2D-407B-9BC6-25D23514D486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41574/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41574/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servidor TFTP en MobaXterm Personal Edition 9.4 permite a atacantes remotos leer archivos arbitrarios a través de .. (punto punto) en un comando GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobatek:mobaxterm:9.4:*:*:*:personal:*:*:*",
            "matchCriteriaId" : "A7AC5EB7-F934-41CC-892E-4825ECD53F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141582/MobaXterm-Personal-Edition-9.4-Path-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41592/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141582/MobaXterm-Personal-Edition-9.4-Path-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41592/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función decodeSample en IMA.cpp en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-global-buffer-overflow-in-decodesample-ima-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/25eb00ce913452c2e614548d7df93070bf0d066f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-global-buffer-overflow-in-decodesample-ima-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/25eb00ce913452c2e614548d7df93070bf0d066f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función alaw2len ear_buf en G711.cpp en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento del búfer basado en Heap en la función decodeBlockWAVE en IMA.cpp en Audio File Library (alias audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 y 0.2.7 permite a los atacantes remotos causar una denegación de servicio (crash) a través de un archivo elaborado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5A99FB-F881-4621-A9E2-3D261CC94F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A874AFAB-9FE8-4436-B446-A106E336A4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE480807-B149-4227-BC43-25A140F6D71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2006C1-2EB3-4F4E-8DB0-C99B72700A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F08B96-44AC-4894-B304-642A49E6AAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E21929-705E-4FCC-8E61-9A5972660568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128EEF53-482C-4FC5-9C2E-2D70E9013C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97588",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2017-6831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/a2e9eab8ea87c4ffc494d839ebb4ea145eb9f2e6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2017-6831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/a2e9eab8ea87c4ffc494d839ebb4ea145eb9f2e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el decodeBlock en MSADPCM.cpp en Audio File Library (también conocido como audiofile) versiones 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97589",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcmdecodeblock-msadpcm-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcmdecodeblock-msadpcm-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función runPull en libaudiofile/modules/BlockCodec.cpp en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecrunpull-blockcodec-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/37",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecrunpull-blockcodec-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función ulaw2len ear_buf en G711.cpp en Audio File Library (también conocido como audiofile) versiones 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5A99FB-F881-4621-A9E2-3D261CC94F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A874AFAB-9FE8-4436-B446-A106E336A4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE480807-B149-4227-BC43-25A140F6D71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2006C1-2EB3-4F4E-8DB0-C99B72700A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F08B96-44AC-4894-B304-642A49E6AAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E21929-705E-4FCC-8E61-9A5972660568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128EEF53-482C-4FC5-9C2E-2D70E9013C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-ulaw2linear_buf-g711-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/38",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-ulaw2linear_buf-g711-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función reset1 en libaudiofile/modules/BlockCodec.cpp en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecreset1-blockcodec-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecreset1-blockcodec-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función Expy 3To4Module::run en libaudiofile/modules/SimpleModule.h en Audio File Library (también conocido como audiofile) versiones 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/pull/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:02.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients."
      }, {
        "lang" : "es",
        "value" : "WAVE.cpp en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores relacionados con un gran número de coeficientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:03.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en sfcommy s/sfconvert.c en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/7d65f89defb092b63bcbc5d98349fb222ca73b3c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/7d65f89defb092b63bcbc5d98349fb222ca73b3c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-20T16:59:03.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en modules/MSADPCM.cpp en Audio File Library (también conocido como audiofile) 0.3.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7E74B2-432B-4CCD-873F-AA7E012D8C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/beacc44eb8cdf6d58717ec1a5103c5141f1b37f9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/13/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/antlarr/audiofile/commit/beacc44eb8cdf6d58717ec1a5103c5141f1b37f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mpruett/audiofile/issues/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service."
      }, {
        "lang" : "es",
        "value" : "Un problema SSRF ha sido descubierto en OpenStack Glance en versiones anteriores a Newton. La función 'copy_from' de Image Service API v1 permitió a un atacante realizar exploraciones de puerto de red enmascaradas. Con v1, es posible crear imágenes con una URL como 'http: // localhost: 22'. Esto podría permitir a un atacante enumerar los detalles internos de la red mientras aparezca enmascarado, ya que el análisis parecería originarse del servicio Glance Image."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mitaka",
            "matchCriteriaId" : "BFA0356D-3F1F-4F41-9069-6DAE56268CE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96988",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.launchpad.net/ossn/+bug/1153614",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ossn/+bug/1606495",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.openstack.org/wiki/OSSN/OSSN-0078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.launchpad.net/ossn/+bug/1153614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ossn/+bug/1606495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.openstack.org/wiki/OSSN/OSSN-0078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data (id) passed to the 'slims7_cendana-master/template/default/detail_template.php' and 'slims7_cendana-master/template/default-rtl/detail_template.php' URLs. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades XSS fueron descubiertas en SLiMS 7 Cendana en versiones anteriores a 16/03/2017. Las vulnerabilidades existen debido a la filtración insuficiente de los datos suministrados por el usuario (id) pasados a las URSL 'slims7_cendana-master/template/default/detail_template.php' y 'slims7_cendana-master/template/default-rtl/detail_template.php'. Un atacante podría ejecutar HTML arbitrario y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:slims7_cendana:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "62b8ee8b51be89fc65e0d59b01c3724737f9da20",
            "matchCriteriaId" : "2C8515B5-A68A-4162-B3FA-F8702AB95D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/slims/slims7_cendana/issues/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/slims/slims7_cendana/issues/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data (postLoginQuery) passed to the \"ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un Cross-Site Scripting (XSS) en ZoneMinder en versiones anteriores a la 1.30.2. La vulnerabilidad existe por el filtrado insuficiente de los datos proporcionados por el usuario (postLoginQuery) pasados a la URL \"ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php\". Un atacante podría ejecutar scripts y código HTML arbitrarios en un navegador en el contexto de la página web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:1.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3D4BB7-1104-4415-958F-8D9B21A21922"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ZoneMinder/ZoneMinder/issues/1797",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ZoneMinder/ZoneMinder/issues/1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data (name) passed to the \"imdbphp-master/demo/search.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Un XSS ha sido descubierto en imdbphp 5.1.1. La vulnerabilidad existe debido a una filtración insuficiente de datos suministrados por el usuario (nombre) pasadas a la URL \"imdbphp-master/demo/search.php\". Un atacante podría ejecutar HTML arbitrario y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imdbphp_project:imdbphp:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692D183A-A478-4637-9664-DB9C0FDAF334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/tboothman/imdbphp/issues/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/tboothman/imdbphp/issues/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data (a) passed to the \"GamePanelX-V3-master/ajax/ajax.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Un XSS ha sido descubierto en GamePanelX-V3 3.0.12. La vulnerabilidad existe debido a una filtración insuficiente de datos suministrados por el usuario (a) pasados a la URL \"GamePanelX-V3-master/ajax/ajax.php\" URL. Un atacante podría ejecutar HTML arbitrario y secuencias de comandos en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gamepanelx:gamepanelx-v3:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A63442-4879-4B96-A229-A6915765D63F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/devryan/GamePanelX-V3/issues/161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/devryan/GamePanelX-V3/issues/161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file."
      }, {
        "lang" : "es",
        "value" : "La función ff_h2645_extract_rbsp en libavcodec en libav 9.21 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica) u obtener información sensible de la memoria de proceso y a través de un archivo de video h264 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC929204-B8FE-48AE-8D32-DC6BFCB99DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1002",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document."
      }, {
        "lang" : "es",
        "value" : "La función mem_get_bits_rectangle en Artifex Software, Inc. Ghostscript 9.20 permite a atacantes remotos provocar una denegación de servicio ( referencia puntero NULL) a través de un documento PostScript manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25011EF6-DFBF-4C0E-B3CC-FA9686E2C8A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ghostscript.com/cgi-bin/findgit.cgi?309eca4e0a31ea70dcc844812691439312dad091",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96995",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697676",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ghostscript.com/cgi-bin/findgit.cgi?309eca4e0a31ea70dcc844812691439312dad091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file."
      }, {
        "lang" : "es",
        "value" : "La función decode_residual en libavcodec en libav 9.21permite a atacantes remotos provocar una denegación del servicio (sobre lectura del búfer) u obtener información sensible de los procesos de memoria a través de un archivo de video h264 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC929204-B8FE-48AE-8D32-DC6BFCB99DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1000",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash."
      }, {
        "lang" : "es",
        "value" : "La función dump_section_as_bytes en readelf en GNU Binutils 2.28 accede a un puntero NULL mientras lee el contenido de la sección en un binario corrupto, lo que provoca una caída del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21135",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T06:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash."
      }, {
        "lang" : "es",
        "value" : "objdump en GNU Binutils 2.28 es vulnerable a múltiples sobre lectura de búfer basado en memoria dinámica (de tamaño 1 y tamaño 8) mientras se manejan cadenas de tipo enum STABS corruptas en un archivo de objeto manipulado,lo que provoca un bloqueo del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21157",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3849",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-21T16:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7 through 3.18, and 16) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted autonomic network channel discovery packet to a device that has all the following characteristics: (1) running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature; (2) configured as an autonomic registrar; (3) has a whitelist configured. An exploit could allow the attacker to cause the affected device to reload. Note: Autonomic networking should be configured with a whitelist. Do not remove the whitelist as a workaround. Cisco Bug IDs: CSCvc42717."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la Autonomic Networking Infrastructure (ANI) registrar característica de software Cisco IOS (posiblemente 15.2 en versiones hasta 15.6) y software Cisco IOS XE (posiblemente 3.7 en versiones hasta 3.18 y 16) podría permitir a un atacante no autenticado y adyacente provocar una denegación de servicio (DoS). La vulnerabilidad se debe a la validación incompleta de entrada en ciertos paquetes creados. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete de descubrimiento de canal de red autonómico a un dispositivo que tiene todas las características siguientes: (1) funcionamiento a Cisco IOS Software o software Cisco IOS XE que admita la función ANI; (2) configurado como registrador autonómico; (3) tiene una lista blanca configurada. Un explotación podría permitir al atacante hacer que el dispositivo afectado se volviera a cargar. Nota: Las redes autónomas deben configurarse con una lista blanca. No elimine la lista blanca como solución. Cisco Bug IDs: CSCvc42717."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1ED4F8-3B6C-452D-A3D0-D2F1A24AF994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3836108-E847-4BB6-BFFE-7C81E9D94A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447FAF3B-8E93-4A2C-A8B1-1A2F7D958754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86EA2EC-7FEA-4AE8-8CE0-45CA3C21B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC59C3E-A2A4-4A1A-B561-E411D7DE85E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB5DABC-4DAF-4696-A8AE-D4B6B188B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E903D9F-530D-4597-ABA9-4C1CFB79814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE10B51-53FB-4F30-BAA0-0BD92C3D5C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08C168-48BE-41ED-A3BD-87BAE27A1351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96972",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038064",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-ani",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-ani",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3850",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-21T16:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted IPv6 packet to a device that is running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature. A device must meet two conditions to be affected by this vulnerability: (1) the device must be running a version of Cisco IOS Software or Cisco IOS XE Software that supports ANI (regardless of whether ANI is configured); and (2) the device must have a reachable IPv6 interface. An exploit could allow the attacker to cause the affected device to reload. Cisco Bug IDs: CSCvc42729."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la Autonomic Networking Infrastructure (ANI) característica del Software Cisco IOS (15.4 en versiones hasta 15.6) y software Cisco IOS XE (3.7 en versiones hasta 3.18 y 16) podría permitir a un atacante remoto no autenticado, provocar una denegación de servicio (DoS). La vulnerabilidad se debe a la validación incompleta de los paquetes manipulados. Un atacante podría explotar esta vulnerabilidad enviando paquete IPv6 manipulado a un dispositivo que ejecuta un software Cisco IOS o software Cisco IOS XE que soporta la función ANI. Un dispositivo debe cumplir dos condiciones para ser afectado por esta vulnerabilidad: (1) el dispositivo debe estar ejecutando una versión de software Cisco o software Cisco IOS XE que soporta ANI (Independientemente de si ANI está configurado); Y (2) el dispositivo debe tener una interfaz IPv6 accesible. Un explotación podría permitir al atacante hacer que el dispositivo afectado vuelva a cargar. Cisco Bug IDs: CSCvc42729."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08C168-48BE-41ED-A3BD-87BAE27A1351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96971",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038065",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-aniipv6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-aniipv6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T16:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a \"DoubleAgent\" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código en Trend Micro Maximum Security 11.0 (y versiones anteriores), Internet Security 11.0 (y versiones anteriores) y Antivirus+ Security 11.0 (y versiones anteriores) permite a un atacante local evitar un mecanismo de autoprotección, inyectar código arbitrario y tomar el control total de cualquier proceso de Trend Micro a través de un ataque \"DoubleAgent\". Una perspectiva de este problema es que (1) estos productos no utilizan la característica de procesos protegidos y, por lo tanto, un atacante puede introducir un proveedor verificador de aplicaciones DLL arbitrario bajo opciones de ejecución de archivo de imagen en el registro; (2) el mecanismo de autoprotección está destinado a bloquear todos los procesos locales (independientemente de los privilegios) de modificar las opciones de ejecución de archivos de imagen para estos productos; Y (3) este mecanismo puede ser anulado por un atacante que cambia temporalmente las opciones de ejecución de archivo de imagen durante el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.1005",
            "matchCriteriaId" : "37EDCB72-469D-4FB4-813B-25F0EA3902E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.1005",
            "matchCriteriaId" : "9C36D1DC-4AA0-4EF4-88A5-70DA43210C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.1005",
            "matchCriteriaId" : "D79F87CF-BFFB-4FD3-A4C4-2EBBDFD8E3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.1005",
            "matchCriteriaId" : "EB3AD4CA-3F57-459F-9EAB-45E33E239058"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97031",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://success.trendmicro.com/solution/1116957",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T16:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a \"DoubleAgent\" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código AVG Ultimate 17.1 (y versiones anteriores), AVG Internet Security 17.1 (y versiones anteriores) y AVG AntiVirus FREE 17.1 (y versiones anteriores), permite a atacante local evitar un mecanismo de autoprotección inyectar código arbitrario, y tomar el control total de cualquier proceso AVG a través de un ataque\"DoubleAgent\". Una perspectiva de este problema es que (1) estos productos no utilizan la característica de procesos protegidos y, por lo tanto, un atacante puede introducir un proveedor verificador de aplicaciones DLL arbitrario bajo opciones de ejecución de archivo de imagen en el registro; (2) el mecanismo de autoprotección está destinado a bloquear todos los procesos locales (independientemente de los privilegios) de modificar las opciones de ejecución de archivos de imagen para estos productos; Y (3) este mecanismo puede ser anulado por un atacante que cambia temporalmente las opciones de ejecución de archivo de imagen durante el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:anti-virus:17.1:*:*:*:free:*:*:*",
            "matchCriteriaId" : "E10A47BF-3351-4E89-873D-609915CC2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:internet_security:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D72625-34F8-478F-B5A7-19CD4F2EAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:ultimate:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2813B900-C217-400B-8600-1396C77D4DA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97022",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T16:59:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process via a \"DoubleAgent\" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código en Avast Premier 12.3 ( y versiones anteriores), Internet Security 12.3 (y versiones anteriores), Pro Antivirus 12.3 (y versiones anteriores) y Free Antivirus 12.3 ( y versiones anteriores) permite a atacante local evitar un mecanismo de autoprotección, inyectar código arbitrario, y tomar el control total de cualquier proceso Avast process a través de un ataque \"DoubleAgent\". Una perspectiva de este problema es que (1) estos productos no utilizan la característica de procesos protegidos y, por lo tanto, un atacante puede introducir un proveedor verificador de aplicaciones DLL arbitrario bajo opciones de ejecución de archivo de imagen en el registro; (2) el mecanismo de autoprotección está destinado a bloquear todos los procesos locales (independientemente de los privilegios) de modificar las opciones de ejecución de archivos de imagen para estos productos; Y (3) este mecanismo puede ser anulado por un atacante que cambia temporalmente las opciones de ejecución de archivo de imagen durante el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:free_antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3",
            "matchCriteriaId" : "5D098241-1483-4970-8C99-78D31E88ED8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3",
            "matchCriteriaId" : "7A80C599-028B-4C05-99C9-5D827B3556CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:premier:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3",
            "matchCriteriaId" : "D07AE5DE-A313-4E5E-AE9C-6A248F11CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:pro_antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3",
            "matchCriteriaId" : "447BD447-D7E7-43DB-A56C-4B4AEFFD28FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97017",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T16:59:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a \"DoubleAgent\" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código en Bitdefender Total Security 12.0 (y versiones anteriores), Internet Security 12.0 (y versiones anteriores) y Antivirus Plus 12.0 (y versiones anteriores) permite a un atacante local evitar un mecanismo de autoprotección, inyectar código arbitrario, y tomar el control total de cualquier proceso Bitdefender a través de un ataque \"DoubleAgent\". Una perspectiva de este problema es que (1) estos productos no utilizan la característica de procesos protegidos y, por lo tanto, un atacante puede introducir un proveedor verificador de aplicaciones DLL arbitrario bajo opciones de ejecución de archivo de imagen en el registro; (2) el mecanismo de autoprotección está destinado a bloquear todos los procesos locales (independientemente de los privilegios) de modificar las opciones de ejecución de archivos de imagen para estos productos; y (3) este mecanismo puede ser anulado por un atacante que cambia temporalmente las opciones de ejecución de archivo de imagen durante el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:antivirus_plus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0",
            "matchCriteriaId" : "7BDE15B7-5A6A-41C5-9E3D-CFABA662447D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0",
            "matchCriteriaId" : "A5DE11D1-1E24-4455-A5F2-EC65790A0429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0",
            "matchCriteriaId" : "6BF08C59-FFD5-4A77-89D9-7E7E52EE6DFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T16:59:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier), and Free Security Suite 15.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avira process via a \"DoubleAgent\" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código en Avira Total Security Suite 15.0 (y versiones anteriores), Optimization Suite 15.0 (y versiones anteriores), Internet Security Suite 15.0 (y versiones anteriores), y Free Security Suite 15.0 (y versiones anteriores) permite a atacante local evitar un mecanismo de autoprotección, inyectar código arbitrario, y tomar el control total de cualquier proceso Avira a través de un ataque \"DoubleAgent\".Una perspectiva de este problema es que (1) estos productos no utilizan la característica de procesos protegidos y, por lo tanto, un atacante puede introducir un proveedor verificador de aplicaciones DLL arbitrario bajo opciones de ejecución de archivo de imagen en el registro; (2) el mecanismo de autoprotección está destinado a bloquear todos los procesos locales (independientemente de los privilegios) de modificar las opciones de ejecución de archivos de imagen para estos productos; Y (3) este mecanismo puede ser anulado por un atacante que cambia temporalmente las opciones de ejecución de archivo de imagen durante el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:free_security_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0",
            "matchCriteriaId" : "AE7F57F3-44EC-4A62-961A-96D738C07F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:internet_security_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0",
            "matchCriteriaId" : "3A683F78-042B-4503-9DCC-F770110046ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:optimization_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0",
            "matchCriteriaId" : "3CA1DEA5-7C23-48D5-9DD2-B1725B27B5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:total_security_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0",
            "matchCriteriaId" : "9456309A-CA21-4558-9E71-B2C560DF962C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97021",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://cybellum.com/doubleagent-taking-full-control-antivirus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T18:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens."
      }, {
        "lang" : "es",
        "value" : "Un problema ha sido descubierto en exception_wrapper.py en OpenStack Nova 13.x en versiones hasta 13.1.3, 14.x en versiones hasta 14.0.4 y 15.x en versiones hasta 15.0.1. Los contextos de legado excepción de notificación que aparecen en los registros de nivel de ERROR pueden incluir información confidencial como contraseñas de cuenta y tokens de autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF818F64-06A3-4B6F-84DA-ACA0487D4A87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B647430-A8A7-4ABE-957E-E2B758000948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:13.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61702707-B600-49EF-8393-8144079C1C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:13.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C11ED-9F06-4CEA-9808-36E3FF064E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:13.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC1CEF3-886E-4E6A-84BD-0991CF071173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C9A79A-8C56-4951-B420-D5969E637299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2AE2C0-2B2C-46BA-A013-FC6CAB05A747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:14.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F1818F-AC8D-4E7C-AFB3-1DC93C5D0C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:14.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DAA045-F5D4-4FB7-BAD3-1E390BA0DE91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:14.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D1B42F-2EEB-40AD-8BF4-1C67AF850C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CACA5B-1C6D-4048-B744-D14B00BFEAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4675B0D5-9944-4F0A-9FBC-8C1A3AE6E82B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96998",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/1673569",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/1673569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-21T19:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4.69 allows remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting en algunos elementos de vista en la herramienta de filtro de índice en app/webroot/js/misp2.4.68.js y la página de destino de la organización en app/View/Organisations/ajax/landingpage.ctp de MISP en versiones anteriores a 2.4.69 permite a los atacantes remotos inyectar secuencias de comandos web o HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp_project:misp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.68",
            "matchCriteriaId" : "AFC8147A-761F-422E-B997-9A17D644D642"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fortiguard.com/advisory/FG-VD-17-021",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96997",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/3630a8b1e1cd99862867fe72ffa1ff51e4d9c09f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/599b3638384bfe49fa527bcb060f3f608a296996",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.misp.software/2017/03/10/MISP.2.4.69.released.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.misp.software/Changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguard.com/advisory/FG-VD-17-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/3630a8b1e1cd99862867fe72ffa1ff51e4d9c09f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/599b3638384bfe49fa527bcb060f3f608a296996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.misp.software/2017/03/10/MISP.2.4.69.released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.misp.software/Changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T05:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "CSRF existe en los dispositivos D-Link DIR-600M Rev. Cx en versiones anteriores a v3.05ENB01_beta_20170306. Esto puede ser utilizado para eludir la autenticación e insertar secuencias XSS o posiblemente tener otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-600m_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "C9A7BA04-116A-4507-9BA1-ECAB27381CD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-600m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17C8001-4987-4A70-84C8-5AFF6F196BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T05:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by modifying 'window_title' in the application configuration. This requires privileged access to MantisBT configuration management pages (i.e., administrator access rights) or altering the system configuration file (config_inc.php)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en MantisBT en versiones anteriores a 2.1.1 permite a atacantes remotos inyectar código HTML arbitrario o JavaScript (si los ajustes MantisBT's CSP lo permiten) modificando 'window_title' en la configuración de la aplicación. Esto requiere un acceso privilegiado a las páginas de gestión de configuración de MantisBT (es decir, derechos de acceso de administrador) o alterar el archivo de configuración del sistema (config_inc.php)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "FA2146F9-1E6B-4EA0-AFCD-467312D36F5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/mantisbt/mantisbt/commit/a85b0b96c8ebe3e010d0d016cf88ab3c8bfc196a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://github.com/mantisbt/mantisbt/commit/a85b0b96c8ebe3e010d0d016cf88ab3c8bfc196a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T14:59:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863."
      }, {
        "lang" : "es",
        "value" : "AlienVault USM y OSSIM en versiones anteriores a 5.3.5 y NfSen en versiones anteriores a 1.3.8 permiten a usuarios locales ejecutar comandos arbitrarios en un contexto privilegiado a través de un NfSen socket, también conocido como AlienVault ID ENG-104863. NOTA: la declaración del proveedor de AlienVault de las versiones afectadas es disputada por otra parte."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "8575A1F6-440A-4F4C-9B25-B520FEAF24CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "985A4D08-AB7C-4A58-9308-672333271505"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.7",
            "matchCriteriaId" : "689759A5-360A-4049-8927-C748E418CFB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8325/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42305/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8325/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42305/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T14:59:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862."
      }, {
        "lang" : "es",
        "value" : "AlienVault USM y OSSIM en versiones anteriores a 5.3.5 y NfSen en versiones anteriores a 1.3.8 permite a usuarios remotos autenticados ejecutar comandos arbitrarios en un contexto privilegiado, o lanzar un shell inverso, a través de vectores que involucran la ID de sesión PHP y el código PHP de NfSen, también conocido como AlienVault ID ENG-104862. NOTA: la declaración del proveedor de AlienVault de las versiones afectadas es disputada por otra parte."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "8575A1F6-440A-4F4C-9B25-B520FEAF24CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "985A4D08-AB7C-4A58-9308-672333271505"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.7",
            "matchCriteriaId" : "689759A5-360A-4049-8927-C748E418CFB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8325/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42306/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8325/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T16:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash."
      }, {
        "lang" : "es",
        "value" : "Ensamblador GNU en GNU Binutils 2.28 es vulnerable a un desbordamiento de búfer global (de tamaño 1) mientras intenta descomprimir un carácter EOF de un flujo de entrada, conduciendo potencialmente a una caída del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20898",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T16:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash."
      }, {
        "lang" : "es",
        "value" : "La función find_nearest_line en objdump en GNU Binutils 2.28 es vulnerable a una escritura inválida (de tamaño 1) mientras se desmonta un binario corrupto que contiene un nombre de función vacío, que provoca una caída del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20892",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T16:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash."
      }, {
        "lang" : "es",
        "value" : "La función find_nearest_line en addr2line en GNU Binutils 2.28 no se encarga del caso en el que el nombre del archivo principal y el nombre del directorio están vacíos, desencadenando en una referencia a puntero NULL y una escritura no válida y dirigido a una caída del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20891",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T16:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well."
      }, {
        "lang" : "es",
        "value" : "La función pe_ILF_object_p en la librería del archivo binario descriptorBinary File Descriptor (BFD) (también conocida como libbfd), distribuidos en GNU Binutils 2.28, es vulnerable a una sobre lectura de búfer basado en memoria dinámica de tamaño 4049 porque utiliza la función strlen en lugar de strnlen, Lo que provoca caídas de programa en varias utilidades como addr2line, size y strings. También podría conducir a la divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20905",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T16:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\\0' termination of a name field in ldlex.l."
      }, {
        "lang" : "es",
        "value" : "GNU linker (ld) en GNU Binutils 2.28 es vulnerable a un desbordamiento de búfer basado en memoria dinámica mientras procesa un script de entrada falso, lo que provoca una caída del programa. Esto se relaciona con la falta de terminación '\\ 0' de un campo de nombre en ldlex.l."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20906",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T17:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php, crypsisb3/layouts/message/item/default.php, crypsisb3/layouts/message/item/top/default.php, and crypsisb3/layouts/message/item/bottom/default.php. This is fixed in 5.0.5."
      }, {
        "lang" : "es",
        "value" : "En la extensión Kunena 5.0.2 en versiones hasta 5.0.4 para Joomla!, el tema del mensaje del foro ( también conocido como asunto del tema) acepta JavaScript, llevando a XSS. Seis archivos están afectados: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php, crypsisb3/layouts/message/item/default.php, crypsisb3/layouts/message/item/top/default.php, and crypsisb3/layouts/message/item/bottom/default.php. Esto es fijado en 5.0.5."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kunena:kunena:5.0.2:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "8F671019-9650-4FF2-8259-FD856B22FDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kunena:kunena:5.0.3:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "FE70D299-F706-4F79-A89C-7DF8A635D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kunena:kunena:5.0.4:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "92CCF7DC-1F83-4C60-A671-FF6AF1FBBBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fox.ra.it/technical-articles/kunena-vulnerability-2017-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fox.ra.it/technical-articles/kunena-vulnerability-2017-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T18:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento del búfer en Disk Sorter Enterprise 9.5.12 y versiones anteriores permite a atacantes remotos ejecutar código arbitrario a través de solicitud GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:disksorter:disk_sorter:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "9.5.12",
            "matchCriteriaId" : "3742E6CD-9CD6-42D0-8AD6-A4C6737B199B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41666/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41666/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T18:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process()' function of the 'pngdefry.c' source file."
      }, {
        "lang" : "es",
        "value" : "\"pngdefry en versiones hasta 22/03/2017 es propenso a una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica, debido a que falla en procesar adecuadamente un archivo png especialmente manipulado. Este problema afecta a la función 'process ()' del archivo fuente 'pngdefry.c'. \""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pngdefry_project:pngdefry:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-03-22",
            "matchCriteriaId" : "5D70DD75-7825-4A3D-A104-92ED9EA82193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97037",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Tatsh/pngdefry/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Tatsh/pngdefry/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3851",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted requests to the CAF web interface. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52302."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Directory Traversal en el código de marco de referencia de Cisco application-hosting framework (CAF) del componente del entorno de la aplicación Cisco IOx environment, podría permitir a un atacante remoto no autenticado leer cualquier archivo del CAF en la instancia virtual que se ejecuta en el dispositivo afectado. La vulnerabilidad se debe a la insuficiente validación de entrada. Un atacante podría explotar esta vulnerabilidad enviando solicitudes manipuladas a la interfaz webCAF. El impacto de una explotación exitosa se limitan al ámbito de la instancia virtual y no afectan al router que está acogiendo Cisco IOx. Cisco lanzamientos 1.0.0.0 y 1.1.0.0 son vulnerables. Cisco Bug IDs: CSCuy52302."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:1.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D271A-ADB9-412A-9FA0-55E6514BCBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15635332-6ECB-466E-9450-A68EC077794E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97013",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038106",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038107",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-caf1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-caf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3852",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation of user-supplied application packages. An attacker who can upload a malicious package within Cisco IOx could exploit the vulnerability to modify arbitrary files. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52317."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco application-hosting framework (CAF) del componente del entorno de la aplicación Cisco IOx, podría permitir a un atacante autenticado remoto, escribir o modificar archivos arbitrarios en instancia virtual en el dispositivo afectado. La vulnerabilidad se debe a la insuficiente validación de entrada de los paquetes de aplicaciones suministrados por el usuario. Un atacante que puede cargar un paquete malicioso dentro de Cisco IOx podría explotar la vulnerabilidad para modificar archivos arbitrarios. El impacto de una explotación exitosa se limitan al ámbito de la instancia virtual y no afectan al router que hospeda Cisco IOx. Cisco IOx lanzamientos 1.0.0.0 y 1.1.0.0 son vulnerables. Cisco Bug IDs: CSCuy52317."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:1.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D271A-ADB9-412A-9FA0-55E6514BCBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15635332-6ECB-466E-9450-A68EC077794E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97014",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038108",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038109",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-caf2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-caf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3853",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow remote code execution with root privileges in the virtual instance running on an affected device. The vulnerability is due to insufficient bounds checking in the DMo process. An attacker could exploit this vulnerability by sending crafted packets that are forwarded to the DMo process for evaluation. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. This vulnerability affects the following Cisco 800 Series Industrial Integrated Services Routers: Cisco IR809 and Cisco IR829. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52330."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso Data-in-Motion (DMo) instalado en el entorno de la aplicación Cisco IOx podría permitir a un desautenticado atacante remoto provocar stack overflow que podría permitir la ejecución remota de código con privilegios de root en la instancia virtual que se ejecuta en un dispositivo afectado. La vulnerabilidad se debe a la verificación insuficiente de límites en el proceso DMo. Un atacante podría explotar esta vulnerabilidad enviando paquetes manipulados que se envían al proceso DMo para su evaluación. Los impactos de una explotación exitosa se limitan al ámbito de la instancia virtual y no afectan al enrutador que está alojando Cisco IOx. Esta vulnerabilidad afecta las siguientes series Cisco 800 Series Industrial Integrated Services Routers: Cisco IR809 y Cisco IR829. Cisco IOx Releases 1.0.0.0 y 1.1.0.0 son vulnerables. Cisco Bug IDs: CSCuy52330."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:1.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D271A-ADB9-412A-9FA0-55E6514BCBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15635332-6ECB-466E-9450-A68EC077794E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97011",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038105",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-iox",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-iox",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3856",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. An attacker could exploit this vulnerability by sending a high number of requests to the web user interface of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. To exploit this vulnerability, the attacker must have access to the management interface of the affected software, which is typically connected to a restricted management network. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the web user interface of the software is enabled. By default, the web user interface is not enabled. Cisco Bug IDs: CSCup70353."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interface web del usuario de Cisco IOS XE 3.1 en versiones hasta 3.17 podría permitir a un atacante remoto no autenticado hacer que un dispositivo afectado se recargue. La vulnerabilidad se debe al manejo insuficiente de los recursos por el software afectado cuando la interfaz de usuario web está bajo una carga alta. Un atacante podría explotar esta vulnerabilidad enviando un gran número de solicitudes a la interfaz de usuario web del software afectado. Una explotación exitosa podría permitir al atacante hacer que el dispositivo afectado se vuelva a cargar, dando como resultado una condición de denegación de servicio (DoS). Para aprovechar esta vulnerabilidad, el atacante debe tener acceso a la interfaz de administración del software afectado, que suele estar conectado a una red de administración restringida. Esta vulnerabilidad afecta a los dispositivos Cisco que ejecutan una versión vulnerable del software Cisco IOS XE, si está habilitada la interfaz de usuario web del software. De forma predeterminada, la interfaz de usuario web no está habilitada. ID de bugs de Cisco: CSCup70353."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A13401-2660-483E-89A5-6420B5866BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5F84EF-1C19-4AB3-BD01-A3DE47B2A46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FC74E2-2510-40F5-BB2B-11608B844E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E021FDA-0D92-4A81-8721-EED507426922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C69E845-700C-4250-B528-9482A5362F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE45DBE-1CE2-4CAC-81E6-1BA07F0D90EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389D6E60-F6AB-40B8-B894-CE97BF13AE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9388B3A6-2952-4895-B1C1-2B7F160AB637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A40EA0A-1642-4950-9943-20C1888C18D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDE42DA-9889-4887-A1EE-054F76D0B1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F5B7DD-84B9-4E69-8E17-CF97219A75AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BC2A87-31EC-4E15-86E3-ECBEFA9E479A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFD3A39-9E02-409C-9F9C-9C90D58D3A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C0900A-1354-4A20-B5ED-8C005BCE4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6256C79-DBDA-4ED7-AA3B-DE78B8C387B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F3E17-5C65-4C91-8881-AAEAA00BCD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FE9F-FFEC-400B-8CDF-2888FDCD01A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B811A-AAAD-49C0-8FC2-5C79078BA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E13E8-A609-4635-8427-558FA2359484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E76FF-DE36-463D-B610-A99C90AF7B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD751BA-0987-48BB-89C0-A82F78816423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104D911-5FFC-4605-B234-6FD40A206DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.3se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF46126-B8C2-4C03-BF28-F36BB54A6F01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC787C70-6540-4AF7-9F05-8FD86284091E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.4sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC716D3D-5C37-4E36-8F6B-53801DC7225E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.5sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E289B7-7692-448B-B15E-224AF4F01D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42A8A6F-A732-4441-A94F-FCDFA960EB9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.7sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EC5B2-CAE1-4C8F-8F96-FE006049FF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D2447-BD8A-473C-B26E-06897080DD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.9sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8169591-4C3D-4C32-A24F-EACDBC62B77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.11sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6584D8-AE44-40D0-990C-94C377DBF275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC0307C-7095-4529-995F-FA903BC059E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2982FEB3-34C5-4430-B8BD-A4ECC977F33D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BFDC89-6D9F-4AB1-91D2-B50F8AF16C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD6BE0B-53E4-4A5F-8D3C-A6A5398D2E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF1306A-68AD-4BB7-9199-9740EE56FD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF8A6EC-3C45-4CDB-81B5-4D50CD5C4087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC52EC4-6658-40AB-A357-F9B538F21ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52C1850-27F7-40C8-BA26-660D160AD163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E519217-3180-4C49-863F-0D10E47F1A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930678B3-1527-4967-9D8F-27FC0DA060AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737D7668-872C-4246-9AB9-12FF059E231A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B34E77-D0BD-4501-A125-CDBE9A47031F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC822D-E886-46A9-80E8-06DD753A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312CE6B-F3F5-40B3-8862-3BB1314376E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A34268-7618-48D2-8872-27B5B624543B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CBDA4F-DBB3-4426-8C16-2B2314ACF21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9029376B-E263-4B30-8B97-7101CFF7D39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6893B368-D3C1-416D-A4E8-6484AF91C7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2017A75-CC29-4161-85CB-7A531E5ABB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.3se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD337928-C7D9-4CBC-8785-5C49FCA5B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.4se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E83B0A-33F1-4154-969E-E66E800890DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.5se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E952E-588D-4825-9EB3-03CE16F96E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB355607-BFDC-4937-A906-3211AD473399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E313042-DB7B-44AA-9DF6-3C07FC140680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B56D76E-BEA0-490F-9FB8-9CE7422E9432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4830496-1643-4DD0-8C4F-2778E5E600C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82B087D-59EF-42D4-B875-6230A46C6854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45225F2-C9EB-493D-B845-64BFB8DBB89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252377A3-7F15-45F2-A169-BBC37858D4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C809C7E-738B-461F-9155-BC19AAC8B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D918A4A-7E60-4C8B-86D8-82BCA99B0844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E8F96A-EA9C-4E66-8491-9B2A3A4023F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596A43FC-0DDA-4AF6-A4A4-A488B5740D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85908754-8426-49D3-BCC2-AF174B5D0EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5BA973-D59A-4CB9-BC35-089F88737425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6E83FC-CFAE-45EA-9F20-830FC5E97399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.4sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3C5A2B-85A8-4B75-A067-335D1DFE8C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B3BCAC-8317-41C4-9A60-85B693818044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.5sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85512107-7E38-4C00-96D0-01D9EE7DD903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBC4A31-F564-4F5F-86C9-08964EFB3AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.7sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D28F4F-5E14-48C1-8353-4D6A8C657FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8151EE20-D1CD-42E3-9E1A-FE1CA4CCC4ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1691574B-022B-4B0F-AE62-0DFC002466D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D215A930-707E-4A21-AA8C-204AD69633D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14EB390-BA15-45C9-B971-D66CD98B0EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5872A42F-745E-4EC6-8679-C28F79F6621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF5A7C-202D-44F8-97D3-694F876050D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86947E54-A1B9-4ECE-92A6-417462249612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EA559D-5184-4E19-8A32-ECA41C930AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B82207E-7E19-4E0A-93E6-C631897793D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C910BE7C-517F-4E41-8433-1858F700AA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716D8805-D461-4066-9BFD-1EA895E4B997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7150819E-EFB5-4224-975C-84EDBBB2881D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.4sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81F4068-35A1-4712-9B88-F6E574B2DE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.5sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DDB45D-1B19-4FAB-B985-F8E5D38A3ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4CEAD8-F773-4A8B-B076-4EEB61D7F420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739E564D-A90E-4650-A243-62C025294DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10CF9F5-B4F9-4F12-9C6F-B6DFBC473337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB5A06F-59B5-43A1-8D06-1B6BA08630A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F6C44-DB9D-41FD-AD8D-AF45258772DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9E07C9-4C98-48A3-ACF9-1C6FE834D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A9A46-517E-467B-A702-E6F6DD9FCD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEDC03A-CDD5-450E-9528-1DB9EC490DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59ADC49-F656-4271-9EC8-963D381320E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87687169-312C-41E6-9557-B2536A4CCA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A56292-386C-4FC8-BC54-EF9E465F891B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD3E067-E41B-4C8E-B5B2-C91CF7153E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1156EB7F-677D-4267-9814-C14820B4E18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC8D6F3-9A50-437D-B4BE-36CE4ADBC9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8DB158-9B1C-427E-BC84-A03B39BCFEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FEE2D8-2507-4485-A6D2-82393AB19C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A26079-2C57-41EC-A001-3E2669963967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF55161-75C6-4F79-A261-B99A222EAE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62170294-9984-4C61-AFBC-742C6E7CAB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA33A9E-44A8-4463-9E70-352B5B14DB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45A232A-C23B-4CC8-BD88-928397DAD8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09642959-B02D-45D0-A084-F820D08E1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22028008-F993-42E4-AB16-6FDDFC348864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA253C-33BC-4601-8433-14E2EA19324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BC0EDB-C32A-42EA-9FE9-FF7F39C83211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C61D3C1-3A56-49B3-BF68-6E103C5654AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97007",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038101",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-webui",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-webui",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3857",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of L2TP packets. An attacker could exploit this vulnerability by sending a crafted L2TP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or Cisco IOS XE Software if the L2TP feature is enabled for the device and the device is configured as an L2TP Version 2 (L2TPv2) or L2TP Version 3 (L2TPv3) endpoint. By default, the L2TP feature is not enabled. Cisco Bug IDs: CSCuy82078."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de análisis en Layer 2 Tunneling Protocol (L2TP) de Cisco IOS (12.0 en versiones hasta 12.4 y 15.0 en versiones hasta 15.6) y Cisco IOS XE (3.1 en versiones hasta 3.18) podría permitir a un atacante remoto no autenticado provocar recarga de los dispositivo afectado. La vulnerabilidad se debe a la insuficiente validación de los paquetes L2TP. Una explotación exitosa podría permitir al atacante hacer que el dispositivo afectado se vuelva a cargar, dando como resultado una condición de denegación de servicio (DoS). Esta vulnerabilidad afecta a los dispositivos Cisco que ejecutan una versión vulnerable de Cisco IOS o Cisco IOS XE Software si la característica L2TP está habilitada para el dispositivo y el dispositivo está configurado como punto final L2TP Versión 2 (L2TPv2) o L2TP Versión 3 (L2TPv3). De forma predeterminada, la función L2TP no está habilitada. ID de bugs de Cisco: CSCuy82078."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.18.0",
            "matchCriteriaId" : "5A2C5C45-AFB0-4739-81F6-C56B745DC670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97010",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038100",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-l2tp",
        "source" : "psirt@cisco.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-l2tp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3858",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the affected web page parameter. The user must be authenticated to access the affected parameter. A successful exploit could allow the attacker to execute commands with root privileges. This vulnerability affects Cisco devices running Cisco IOS XE Software Release 16.2.1, if the HTTP Server feature is enabled for the device. The newly redesigned, web-based administration interface was introduced in the Denali 16.2 Release of Cisco IOS XE Software. The web-based administration interface in earlier releases of Cisco IOS XE Software is not affected by this vulnerability. Cisco Bug IDs: CSCuy83069."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework de la web de Cisco IOS XE Software podrá permitir a un atacante remoto no autenticado inyectar comandos arbitrarios que se ejecutan con privilegios de root. La vulnerabilidad se debe a la insuficiente validación de entrada de los parámetros HTTP suministrados por el usuario. Un atacante podría explotar esta vulnerabilidad al autenticarse en el dispositivo y enviar la entrada creada al parámetro de página web afectado. El usuario debe estar autenticado para acceder al parámetro afectado. Una explotación exitosa podría permitir al atacante ejecutar comandos con privilegios de root. Esta vulnerabilidad afecta a los dispositivos Cisco que ejecutan Cisco IOS XE Software versión 16.2.1, si la característica de servidor HTTP está habilitada para el dispositivo. La nueva interfaz rediseñada de administración basada en web fue introducida en la versión 16.2 de Denali del software Cisco IOS XE. La interfaz de administración basada en web en versiones anteriores de Cisco IOS XE Software no se ve afectada por esta vulnerabilidad. ID de bugs de Cisco: CSCuy83069."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C86D01-6B26-4BAB-8B61-598823230DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97009",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038102",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-xeci",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-xeci",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3859",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted DHCP packet for Zero Touch Provisioning. An attacker could exploit this vulnerability by sending a specially crafted DHCP packet to an affected device. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco ASR 920 Series Aggregation Services Routers that are running an affected release of Cisco IOS XE Software (3.13 through 3.18) and are listening on the DHCP server port. By default, the devices do not listen on the DHCP server port. Cisco Bug IDs: CSCuy56385."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código DHCP para la funcionalidad Zero Touch Provisioning de Cisco ASR 920 Series Aggregation Services Routers podría permitir a atacantes remotos no autenticados hacer que un dispositivo afectado vuelva a cargar. La vulnerabilidad es debida a una vulnerabilidad de formato de cadena cuando procesa un paquete DHCP manipulado para Zero Touch Provisioning. Un atacante podría explotar esta vulnerabilidad enviando un paquete DHCP especialmente manipulado a un dispositivo afectado. Una explotacón podría permitir al atacante hacer que el dispositivo se volviera a cargar, dando como resultado una condición de denegación de servicio (DoS). Esta vulnerabilidad afecta a los enrutadores de servicios de agregación de la serie ASR 920 de Cisco que ejecutan una versión afectada del software Cisco IOS XE (3.13 en versiones hasta 3.18) y están escuchando en el puerto del servidor DHCP. De forma predeterminada, los dispositivos no escuchan en el puerto del servidor DHCP. ID de bugs de Cisco: CSCuy56385."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08C168-48BE-41ED-A3BD-87BAE27A1351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B83BED-5A49-4CF0-9827-AA291D01F60E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1E8937-51D9-43E6-876E-5D39AD3D32C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9ECE39-C111-412B-AF56-9B7435D98FE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B25F27-6527-46F8-9C1A-4B4F79F3E6C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE70CCD-6062-45D8-8566-7C9E237E030F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375F9E12-A61B-4FD3-AE07-D4E686EB112A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D724F932-4548-429D-8CAA-E82C3435A194"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCC94C3-9EEF-4600-BE82-8AEDEB0F1446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97008",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038104",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-ztp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-ztp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3864",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-03-22T19:59:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability occurs during the parsing of a crafted DHCP packet. An attacker could exploit this vulnerability by sending crafted DHCP packets to an affected device that is configured as a DHCP client. A successful exploit could allow the attacker to cause a reload of an affected device, resulting in a DoS condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or IOS XE Software and using a specific DHCP client configuration. Cisco Bug IDs: CSCuu43892."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del cliente DHCP de Cisco IOS (12.2, 12.4 y 15.0 hasta la versión 15.6) y Cisco IOS XE (3.3 hasta la versión 3.7) podría permitir a un atacante remoto no autenticado provocar una denegación de servicio (DoS). La vulnerabilidad se produce durante el análisis de un paquete DHCP elaborado. Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes DHCP creados a un dispositivo afectado configurado como un cliente DHCP. Una explotación exitosa podría permitir al atacante hacer que el dispositivo se volviera a cargar, lo que daría lugar a una condición DoS. Esta vulnerabilidad afecta a los dispositivos Cisco que ejecutan una versión vulnerable del software Cisco IOS o IOS XE y que utilizan una configuración de cliente DHCP específica. ID de bugs de Cisco: CSCuu43892."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "AB7DA496-D86E-4662-A8F7-3D3B898A1B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97012",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038103",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-dhcpc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-dhcpc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-22T20:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971."
      }, {
        "lang" : "es",
        "value" : "USM y OSSIM anteriores a versión 5.3.7 y NfSen anteriores a versión 1.3.8 de AlienVault, presentan un error en la eliminación de privilegios y ejecutan innecesariamente el código Perl de NfSen como root, también se conoce como ID de AlienVault ENG-104945, una vulnerabilidad diferente de CVE-2017-6970 y CVE-2017 -6971."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-273"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "8575A1F6-440A-4F4C-9B25-B520FEAF24CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "985A4D08-AB7C-4A58-9308-672333271505"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.7",
            "matchCriteriaId" : "689759A5-360A-4049-8927-C748E418CFB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97016",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42314/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.alienvault.com/forums/discussion/8698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42314/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T04:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en cloudflare-scrape 1.6.6 hasta la versión 1.7.1. Un propietario de un sitio web malicioso podría manipular una página que ejecuta código Python arbitrario contra cualquier usuario cfscrape que roce dicho sitio web. esto está solucionado en la versión 1.8.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare-scrape_project:cloudflare-scrape:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3883650-C4D7-4D11-AB55-C96745A46009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare-scrape_project:cloudflare-scrape:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959998F7-CCCB-4525-9429-DAE85A64297D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare-scrape_project:cloudflare-scrape:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5BF33-BD36-4C36-8736-45DC7CE8E005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare-scrape_project:cloudflare-scrape:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C597C248-36D7-40FE-B121-8724D816F27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare-scrape_project:cloudflare-scrape:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695D4442-8AF0-4EB9-AA72-388AD8E501A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Anorov/cloudflare-scrape/issues/97",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Anorov/cloudflare-scrape/releases/tag/1.8.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Anorov/cloudflare-scrape/issues/97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Anorov/cloudflare-scrape/releases/tag/1.8.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument."
      }, {
        "lang" : "es",
        "value" : "Firejail en versiones anteriores a 0.9.44.4, cuando se ejecuta en un Linux kernel en versiones anteriores a 4.8, permite a atacantes dependientes del contexto evitar un mecanismo seccomp-based de protección de sandbox a través del argumento --allow-debuggers."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.44.4",
            "matchCriteriaId" : "7CEF9414-DBF1-4FFC-BFF7-48E094599AD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8",
            "matchCriteriaId" : "28EB12EC-3BC4-4DCC-9A6A-5F810F17E8FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/07/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97120",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.lizzie.io/linux-containers-in-500-loc.html#fn.51",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/6b8dba29d73257311564ee7f27b9b14758cc693e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/07/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.lizzie.io/linux-containers-in-500-loc.html#fn.51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/6b8dba29d73257311564ee7f27b9b14758cc693e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument."
      }, {
        "lang" : "es",
        "value" : "Firejail en versiones anteriores a 0.9.44.4, Cuando se ejecuta un comando de ancho de banda, permite a los usuarios locales obtener privilegios de root a través del argumento --shell."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.44.4",
            "matchCriteriaId" : "7CEF9414-DBF1-4FFC-BFF7-48E094599AD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/07/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97385",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/5d43fdcd215203868d440ffc42036f5f5ffc89fc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/issues/1023",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/07/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://firejail.wordpress.com/download-2/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/5d43fdcd215203868d440ffc42036f5f5ffc89fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/issues/1023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file."
      }, {
        "lang" : "es",
        "value" : "QNAP QTS en versiones anteriores a 4.2.4 Build 20170313 permite a atacantes obtener información sensible a través de vectores relacionados con un archivo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4",
            "matchCriteriaId" : "9B7F2220-F26C-4224-B53D-6E9FF82499D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97056",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-qnap/qnap.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41745/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-qnap/qnap.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41745/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method."
      }, {
        "lang" : "es",
        "value" : "Plone 4.x en veriones hasta 4.3.11 y 5.x en versiones hasta 5.0.6 permiten atacantes remotos evitar un mecanismo de protección sandbox y obtener información sensible aprovechando el método de formato de cadenas Python."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3306D84-0F5B-46BA-9BCC-DCD0A1CDD604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08F4534-A588-463F-A745-39E559AB1CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64341BA-5722-415E-9771-9837168AB7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2929227-AE19-428D-9AC3-D312A559039B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6DC866-0FEE-475B-855C-A69E004810CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50BF3E8E-152C-4E89-BAA2-A952D10F4611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F88BF6-9058-4CB8-A2D6-5653860CF489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3FA2-15C3-444A-8810-5EF3E0E84D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F3B15A-CD0F-4CC5-A76F-E62637B30E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D913FCA7-4DAE-4E9A-9146-9AFA8472B04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C44B53B-953B-4522-A5B4-11573850D2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8883023-113A-420A-97B6-A4A9B29CF7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF4D113-8D9D-4DA3-A177-64783352F608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F9B699-D1A4-425C-84ED-6A8FD29BE7F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47321B60-67DA-4543-B173-D629A9569B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B36EB2-723F-4E25-8018-EEB2BE806D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7962EF74-6AC1-424C-A202-163AFDADA971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1818BB-E23A-4136-898D-1D0C80C08728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB06627-133A-40D1-8816-E31E0A9BAD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7E448A-2C0C-4DE0-89EA-904718CB6C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E727C5C-9E54-49F7-B92C-2492069AAE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD68465-4CDC-4788-8932-41335B5C4AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B739E0-FB73-401C-AB1A-E3C1434AA2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC8B987-5173-4C61-8DE6-B70C18EE6FD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA31E8-77EC-478B-BC6E-E2F145A8B9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE168A35-1A46-4A6F-8A08-25CDD886066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE0FC06-369B-46CF-9B1E-BAF7AF87E950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56571585-E9A2-4B78-B2B1-5D8EADED522A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDF8A15-401C-453E-8D09-8D4CDD4766DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B0B1CE-C0D9-495C-B4E7-E52A50BD6D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043B3CBE-DEA2-474D-AA57-1830A470B621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A6842B-B479-4D91-928A-1CCE1DCB936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875A368A-F1D6-4795-99CF-A96DBCD1D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5962C24-BC35-4E27-B81B-E2D21F83FB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BCE259-700F-4E39-8565-99E4DFDA6F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0755E5-2001-499F-90EA-6C2133D116D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5893527F-D365-4A39-9104-1B478804F0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C6DFBF-5CC6-49A7-BC83-E8F686815F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF9FB6C-134F-4653-8771-1BF46AB39344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E22BA768-96DE-408F-8979-4CC58B50A09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1672268D-2EFB-4D9E-99D4-AAEFEA659091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74DD4-27BB-4881-B324-B53336EF0648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6962EC-8398-4564-9840-AECB3E3D697D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE89FE6-DBF6-4CDD-BBA3-B34AEEAE6BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D341D6-AB11-444F-88FD-22303D1E3F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8A5BB-2F6A-474F-9DCE-0AF9E8E1D1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58165598-70DB-48AD-BD6E-793B103DC15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "39E8A13F-B8F8-490D-AB5D-E8FF5EA0490B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD34F775-A365-4B65-8F60-F09EDD57B2EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95679",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plone.org/security/hotfix/20170117/sandbox-escape",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/18/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plone.org/security/hotfix/20170117/sandbox-escape",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362."
      }, {
        "lang" : "es",
        "value" : "La función kbase_dispatch en arm/t7xx/r5p0/mali_kbase_core_linux.c en el controlador GPU en dispositivos Samsung con software M(6.0) y N(7.0) y Exynos AP chipsets permiten a atacantes tener impacto no especificado in a través de vectores desconocidos, que desencadenan una lectura fuera de límites, también conocido como SVE-2016-6362"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6EA64-6B65-4487-914F-9EF9CBB78211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4422C-42D0-47CA-A8B7-0DFF0652363E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/19/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/20/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95674",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/19/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access."
      }, {
        "lang" : "es",
        "value" : "La función ip6gre_err en net/ipv6/ip6_gre.c en el kernel de Linux permite a atacantes remotos tener impacto no especificado a través de vectores involucrando indicadores GRE flags en un paquete IPv6, que desencadenan un acceso fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "C8EF918B-AB2D-469D-8297-0A21A8FDACB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.71",
            "matchCriteriaId" : "714101BC-5F00-4257-A007-F21269AE5AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.41",
            "matchCriteriaId" : "F5CF2C65-6A2A-44EE-A67B-5DB1663C2B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.49",
            "matchCriteriaId" : "5AA77834-089F-4556-A00B-CAC1E08444BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.4.50",
            "matchCriteriaId" : "5787A1B6-DFBE-4FCE-AD00-3EB7778D50C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.11",
            "matchCriteriaId" : "B1F06DE7-446F-4366-8C46-40FC2DFA38FA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96037",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=7892032cfe67f4bde6fc2ee967e45a8fbaf33756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=7892032cfe67f4bde6fc2ee967e45a8fbaf33756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en APNGDis 2.8 y en versiones anteriores permite a un atacante remoto ejecutar código arbitrario a través de un nombre de archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng_disassembler_project:apng_disassembler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "791F5052-35FD-4FBA-B26F-CBB351B28A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97053",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41670/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.onvio.nl/nieuws/cve-2017-6191-apngdis-filename-buffer-overflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41670/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.onvio.nl/nieuws/cve-2017-6191-apngdis-filename-buffer-overflow",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "QNAP QTS en versiones anteriores a 4.2.4 revisión 20170313 permite a atacantes remotos obtener privilegios de administrador y ejecutar comandos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4",
            "matchCriteriaId" : "9B7F2220-F26C-4224-B53D-6E9FF82499D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41842/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41842/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "QNAP QTS en versiones anteriores a 4.2.4 revisión 20170313 permite a atacantes obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4",
            "matchCriteriaId" : "9B7F2220-F26C-4224-B53D-6E9FF82499D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41842/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41842/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "QNAP QTS en versiones anteriores a 4.2.4 revisión 20170313 permite a atacantes ejecutar comandos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4",
            "matchCriteriaId" : "9B7F2220-F26C-4224-B53D-6E9FF82499D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41842/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41842/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T16:59:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode. Version 6.10.4 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "Nessus 6.6.2 - 6.10.3 contiene un fallo relacionado con permisos inseguros que pueden permitir a un atacante local remoto aumentar privilegios cuando el software se está ejecutando en Agent Mode. Version 6.10.4 soluciona este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E04EEA5-6FE6-425F-9CA5-8BD6917B5C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7B5202-3EF9-4082-A3BE-E81856651773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344995CB-4E95-42AE-B909-A4148148E40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63616621-2753-4095-B1E6-71289422D099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F128AEB9-6D5F-47C8-B119-7D8061C6F8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250F614B-0BFB-4DBA-B78C-E3DA99DE0240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523F2759-5610-4F03-BA8D-60C20D9FB57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1975C695-0C1C-4585-BEE9-234E0C2BF9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C14B7B-DE1F-4751-A681-B051CC55163E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8AFD34-B980-49A8-AD6B-F92DBD695102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A284F5-758D-4040-9920-9DD72122A4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C69E7-A926-40F1-B546-0436BAEF48B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://aspe1337.blogspot.nl/2017/04/writeup-of-cve-2017-7199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://aspe1337.blogspot.nl/2017/04/writeup-of-cve-2017-7199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T19:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkout_item.php, bibliography/dl_print.php, bibliography/item.php, bibliography/item_barcode_generator.php, bibliography/printed_card.php, circulation/loan_rules.php, master_file/author.php, master_file/coll_type.php, and master_file/doc_language.php and the quickReturnID field to circulation/ajax_action.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples secuencias de comandos en sitios cruzados (XSS) fueron descubiertas en los componentes de admin/modules en SLiMS 7 Cendana hasta 2017-03-23: el parámetro keywords a bibliography/checkout_item.php, bibliography/dl_print.php, bibliography/item.php, bibliography/item_barcode_generator.php, bibliography/printed_card.php, circulation/loan_rules.php, master_file/author.php, master_file/coll_type.php, y master_file/doc_language.php y el campo quickReturnID a circulation/ajax_action.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:slims7_cendana:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-03-23",
            "matchCriteriaId" : "73467DE4-C3C4-4F3E-ADF4-E4EF7ACD354C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daimacn.com/post/10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.daimacn.com/post/10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T20:59:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.The specific flaw exists within the handling of DLL (api-ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process."
      }, {
        "lang" : "es",
        "value" : "Microsoft Skype 7.16.0.102 contiene una vulnerabilidad que podría permitir a un atacante remoto no autenticado ejecutar código arbitrario en el sistema de destino. Esta vulnerabilidad existe debido a la forma en que Skype carga los archivos .dll. Permite a un atacante cargar un .dll de su elección que podría ejecutar código arbitrario sin conocimiento del usuario. La falla específica existe dentro del manejo de carga de DLL (api-ms-win-core-winrt-string-l1-1-0 .dll) por el proceso de Skype.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype:7.16.0.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEE9174-C82B-4235-8E4E-E7E890ED5EF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/44",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96969",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://technet.microsoft.com/security/cc308575.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://twitter.com/tiger_tigerboy/status/755332687141883904",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://twitter.com/vysecurity/status/845013670103003138",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://technet.microsoft.com/security/cc308575.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://twitter.com/tiger_tigerboy/status/755332687141883904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://twitter.com/vysecurity/status/845013670103003138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T20:59:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml."
      }, {
        "lang" : "es",
        "value" : "USB Pratirodh permite a atacantes remotos realizar ataques XML External Entity (XXE) a través de datos XML en usb.xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usb_pratirodh_project:usb_pratirodh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B53421-F746-4742-8916-1996E46260EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141652/USB-Pratirodh-XXE-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96936",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2017/03/15/usb-pratirodh-xml-external-entity-injection-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141652/USB-Pratirodh-XXE-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2017/03/15/usb-pratirodh-xml-external-entity-injection-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T20:59:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack."
      }, {
        "lang" : "es",
        "value" : "USB Pratirodh es propenso a la divulgación de información sensible. Almacena información sensible como nombre de usuario y contraseña en simple usb.xml. Un atacante con acceso físico al sistema puede modificar el archivo de acuerdo a sus propios requisitos que pueden ayudar en otro ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usb_pratirodh_project:usb_pratirodh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B53421-F746-4742-8916-1996E46260EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/43",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96970",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T20:59:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions and execute arbitrary code via a crafted ABAP code, aka SAP Security Note 2407616."
      }, {
        "lang" : "es",
        "value" : "SAP GUI 7.2 hasta la versión 7.5 permite a atacantes remotos eludir las restricciones de política de seguridad previstas y ejecutar código arbitrario a través de un código ABAP manipulado, vulnerabilidad también conocida como SAP Security Note 2407616."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:gui_for_windows:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EA7021-A564-443A-A729-F4D3A5D98385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:gui_for_windows:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF02ECA8-5DDA-4903-9DCE-A62A062893AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:gui_for_windows:7.40_core_sp00-sp011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB558AC-A963-4AA3-A4AF-D581754F2123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:gui_for_windows:7.50_core_sp000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD962FB-BDC3-454E-B1AB-8E129F81CFCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96872",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-011-sap-gui-versions-remote-code-execution-bypass-security-policy/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-011-sap-gui-versions-remote-code-execution-bypass-security-policy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T21:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función _pcre32_xclass en pcre_xclass.c en libpcre1 en PCRE 8.40 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no válida) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFAB169-4364-4D71-B0A8-2831D0A4D5F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97067",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T21:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en la pila en la función pcre32_copy_substring en pcre_get.c en libpcre1 en PCRE 8.40 permite a atacantes remotos provocar una denegación de servicio (WRITE de tamaño 4) o posiblemente tener otro impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFAB169-4364-4D71-B0A8-2831D0A4D5F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97067",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T21:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función pcre32_copy_substring en pcre_get.c en libpcre1 en PCRE 8.40 permite a atacantes remotos provocar una denegación de servicio (WRITE de tamaño 268) o posiblemente tener otro impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFAB169-4364-4D71-B0A8-2831D0A4D5F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97067",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T22:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (torrents, size) passed to the 'Gazelle-master/sections/tools/managers/multiple_freeleech.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples secuencias de comandos en sitios cruzados (XSS) fueron descubiertas en Gazelle en versiones anteriores a 2017-03-19. Las vulnerabilidades existen debido a la filtración insuficiente de los datos suministrados por el usuario (torrents, tamaño) pasados a la URL 'Gazelle-master/sections/tools/managers/multiple_freeleech.php'. Un atacante podría ejecutar HTML arbitrario y código script en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gazelle_project:gazelle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-11-01",
            "matchCriteriaId" : "C00AD718-E39D-44F0-A5AC-ADC3792FB574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/114",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T22:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data (type) passed to the 'Gazelle-master/sections/better/transcode.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Una secuencia de comandos en sitios cruzados XSS fue descubierta en Gazelle en versiones anteriores a 2017-03-19. La vulnerabilidad existe debido a la filtración insuficiente de datos suministrados por el usuario (tipo) pasados a la URL 'Gazelle-master/sections/better/transcode.php'. Un atacante podría ejecutar HTML arbitrario y código script en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gazelle_project:gazelle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-11-01",
            "matchCriteriaId" : "C00AD718-E39D-44F0-A5AC-ADC3792FB574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/111",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T22:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (action, userid) passed to the 'Gazelle-master/sections/tools/data/ocelot_info.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Múltiples secuencias de comandos en sitios cruzados (XSS) fueron descubiertas en Gazelle en versiones anteriores a 2017-03-19. Las vulnerabilidades existen debido a una filtración insuficiente de los datos suministrados por el usuario (acción, identidad de usuario) pasados a la URL 'Gazelle-master/sections/tools/data/ocelot_info.php'. Un atacante podría ejecutar HTML arbitrario y código script en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gazelle_project:gazelle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-11-01",
            "matchCriteriaId" : "C00AD718-E39D-44F0-A5AC-ADC3792FB574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/112",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T22:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data (action) passed to the 'Gazelle-master/sections/tools/finances/bitcoin_balance.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Una secuencia de comandos en sitios cruzados (XSS) fue descubierta en Gazelle en versiones anteriores a 2017-03-19. La vulnerabilidad existe debido a una filtración insuficiente de los datos suministrados por el usuario (acción) pasados a la URL 'Gazelle-master/sections/tools/finances/bitcoin_balance.php'. Un atacante podría ejecutar HTML arbitrario y código script e un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gazelle_project:gazelle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-11-01",
            "matchCriteriaId" : "C00AD718-E39D-44F0-A5AC-ADC3792FB574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/113",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhatCD/Gazelle/issues/113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-23T22:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data (preview) passed to the \"pi-develop/www/script/editor/markitup/preview/markdown.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Una secuencia de comandos en sitios cruzados (XSS) fue descubierta en pi-engine/pi 2.5.0. La vulnerabilidad existe debido a una filtración insuficiente de los datos suministrados por el usuario (vista previa) pasados a la URL \"pi-develop/www/script/editor/markitup/preview/markdown.php\". Un atacante podría ejecutar HTML arbitrario y código script en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piengine:pi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.0",
            "matchCriteriaId" : "CAB3CF37-5F4D-4650-B622-58204457ECFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97061",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pi-engine/pi/issues/1523",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pi-engine/pi/issues/1523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T07:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh."
      }, {
        "lang" : "es",
        "value" : "SolarWinds LEM (también conocido como SIEM) en versiones anteriores a 6.3.1 tiene una configuración sudo incorrecta, lo que permite a usuarios locales obtener acceso root editando /usr/local/contego/scripts/hostname.sh."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:log_and_event_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "E081A2F4-0F33-47C7-A442-1A17AE26E5E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97094",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T07:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl."
      }, {
        "lang" : "es",
        "value" : "La característica editbanner en SolarWinds LEM (también conocido como SIEM) hasta la versión 6.3.1 permite a usuarios remotos autenticados ejecutar código arbitrario editando /usr/local/contego/scripts/mgrconfig.pl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:log_and_event_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1",
            "matchCriteriaId" : "992B444A-17D1-411B-91DD-16C40700B577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T07:59:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic."
      }, {
        "lang" : "es",
        "value" : "Ha sido descubierto un problema en AppArmor en versiones anteriores a 2.12. El manejo incorrecto de perfiles AppArmor desconocidos en secuencias de comandos init de AppArmor, trabajos upstart, y/o archivos de unidad systemd permite a un atacante tener posiblemente superficies de ataques incrementadas de procesos que están destinados a ser confinados por AppArmor. Esto se debe a la lógica común para manejar operaciones 'restart' eliminando perfiles AppArmor que no se encuentran en las ubicaciones típicas del sistema de archivos, como /etc/apparmor.d/. Proyectos de espacio de usuario que gestionan sus propios perfiles AppArmor en directorios atípicos, como hacen LXD y Docker, están afectados por esta falla en la lógica de init script de AppArmor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apparmor:apparmor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11",
            "matchCriteriaId" : "2BFD8316-6A68-4E6A-8498-50A612297817"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_core:15.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DF0C2A-2F5A-4C41-8793-FF132F8072FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_touch:15.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F2578E-045A-4B94-817A-57F4031D7565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3647",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3648",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/apparmor/+bug/1668892",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-6507.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/apparmor/+bug/1668892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-6507.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2577",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-24T10:59:00.177",
      "lastModified" : "2023-11-07T02:43:50.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T10:59:00.207",
      "lastModified" : "2025-10-10T10:24:43.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so."
      }, {
        "lang" : "es",
        "value" : "Verificaciones insuficientes en el subsistema UDF en Firebird 2.5.x en versiones anteriores a 2.5.7 y 3.0.x en versiones anteriores a 3.0.2 permiten a usuarios remotos autenticados ejecutar código utilizando un punto de entrada 'system' desde fbudf.so."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.7",
            "matchCriteriaId" : "3BD5F104-E5B7-497C-A20C-DF2C2556DF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "E584CB24-385B-45ED-808A-C5A5F7D644D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tracker.firebirdsql.org/browse/CORE-5474",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3824",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3929-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://tracker.firebirdsql.org/browse/CORE-5474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3929-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5644",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-03-24T14:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack."
      }, {
        "lang" : "es",
        "value" : "Apache POI en versiones anteriores al lanzamiento 3.15 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de un archivo OOXML especialmente manipulado, vulnerabilidad también conocida como un ataque de XML Entity Expansion (XEE)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:poi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.14",
            "matchCriteriaId" : "40E6BF2C-539C-4F80-A5CE-1B6BB3B08F31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://poi.apache.org/#20+March+2017+-+CVE-2017-5644+-+Possible+DOS+%28Denial+of+Service%29+in+Apache+POI+versions+prior+to+3.15",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96983",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://poi.apache.org/#20+March+2017+-+CVE-2017-5644+-+Possible+DOS+%28Denial+of+Service%29+in+Apache+POI+versions+prior+to+3.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T14:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the X-File-Name header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en la característica de importación de archivo en Nuxeo Platform 6.0, 7.1, 7.2 y 7.3 permite a usuarios remotos autenticados cargar y ejecutar código JSP arbitrario a través de un .. (dot dot) en la cabecera X-File-Name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxeo:nuxeo:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF32E088-DFA2-49F0-89E5-B211267B3220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxeo:nuxeo:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDDB7ED-4D9F-43A8-8078-21D3B1A70F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxeo:nuxeo:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7283BDD-196B-43EA-BB48-4E3281729C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxeo:nuxeo:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25647016-45D5-434F-BDD0-8F3D0E44A840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/23/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sysdream.com/news/lab/2017-03-23-cve-2017-5869-nuxeo-platform-remote-code-execution/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41748/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/23/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sysdream.com/news/lab/2017-03-23-cve-2017-5869-nuxeo-platform-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41748/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T14:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EyesOfNetwork (\"EON\") 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the selected_events[] parameter in the (1) acknowledge, (2) delete, or (3) ownDisown function in module/monitoring_ged/ged_functions.php or the (4) module parameter to module/index.php."
      }, {
        "lang" : "es",
        "value" : "EyesOfNetwork (\"EON\") 5.0 y versiones anteriores permite a usuarios remotos autenticados ejecutar código arbitrario a través de metacaracteres de shell en el parámetro selected_events[] en la función (1) acknowledge, (2) delete o (3) ownDisown en module/monitoring_ged/ged_functions.php o el parámetro (4) module para module/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eonweb_project:eonweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0-0",
            "matchCriteriaId" : "DAF7DE70-DC0F-49D1-88D5-5BFBD9CC9879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/23/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/commit/196729cc045ef93ceeddd1de505a1de8f9cdf74d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-03-14-cve-2017-6087-eon-5-0-remote-code-execution/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41746/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/23/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/commit/196729cc045ef93ceeddd1de505a1de8f9cdf74d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-03-14-cve-2017-6087-eon-5-0-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5334",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de liberación doble en la función gnutls_x509_ext_import_proxy de GnuTLS en versiones anteriores a 3.3.26 y 3.5.x en versiones anteriores a 3.5.8 permite a los atacantes remotos tener un impacto no especificado a través de una información de lenguaje de directivas elaborada en un certificado X.509 con una extensión Proxy Certificate Information."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.25",
            "matchCriteriaId" : "0BCB1A63-F2CF-474F-AAF6-CE225C58B765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434168D-05A8-4300-9069-C55566A5EAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACD6E9A-8CCA-44C3-AE54-BAABEAB5BB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6FA626-AEE9-4E3B-8BE4-3F2D46FF072D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA302AC-1DE9-4D36-94B2-BB4411E9BF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71805931-872A-4F1A-A8B4-82347C2EF90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A489C2-4824-4133-83E0-625AA454E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D38B82-82A7-4943-BE1C-77EC707289D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850A1174-F1E7-47EA-AF71-FEB6C4379EDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95370",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "security@debian.org"
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/c5aaa488a3d6df712dc8dff23a049133cab5ec1b",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-1",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/c5aaa488a3d6df712dc8dff23a049133cab5ec1b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5335",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate."
      }, {
        "lang" : "es",
        "value" : "Las funciones de lectura de flujo en lib/opencdk/read-packet.c en GnuTLS en versiones anteriores a 3.3.26 y 3.5.x en versiones anteriores a 3.5.8 permiten a atacantes remotos provocar una denegación de servicio (fallo de memoria y error) Certificado OpenPGP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.25",
            "matchCriteriaId" : "0BCB1A63-F2CF-474F-AAF6-CE225C58B765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434168D-05A8-4300-9069-C55566A5EAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACD6E9A-8CCA-44C3-AE54-BAABEAB5BB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6FA626-AEE9-4E3B-8BE4-3F2D46FF072D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA302AC-1DE9-4D36-94B2-BB4411E9BF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71805931-872A-4F1A-A8B4-82347C2EF90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A489C2-4824-4133-83E0-625AA454E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D38B82-82A7-4943-BE1C-77EC707289D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850A1174-F1E7-47EA-AF71-FEB6C4379EDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95374",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=337",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/49be4f7b82eba2363bb8d4090950dad976a77a3a",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-2",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/49be4f7b82eba2363bb8d4090950dad976a77a3a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5336",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer basado en la pila en la función cdk_pk_get_keyid en lib/opencdk/pubkey.c en GnuTLS en versiones anteriores a 3.3.26 y 3.5.x en versiones anteriores a 3.5.8 permite a atacantes remotos tener un impacto no especificado a través de un certificado OpenPGP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.25",
            "matchCriteriaId" : "0BCB1A63-F2CF-474F-AAF6-CE225C58B765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434168D-05A8-4300-9069-C55566A5EAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACD6E9A-8CCA-44C3-AE54-BAABEAB5BB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6FA626-AEE9-4E3B-8BE4-3F2D46FF072D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA302AC-1DE9-4D36-94B2-BB4411E9BF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71805931-872A-4F1A-A8B4-82347C2EF90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A489C2-4824-4133-83E0-625AA454E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D38B82-82A7-4943-BE1C-77EC707289D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850A1174-F1E7-47EA-AF71-FEB6C4379EDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95377",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=340",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/5140422e0d7319a8e2fe07f02cbcafc4d6538732",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-2",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/5140422e0d7319a8e2fe07f02cbcafc4d6538732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5337",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en memoria dinámica en la función read_attribute en GnuTLS en versiones anteriores a 3.3.26 y 3.5.x en versiones anteriores a 3.5.8 permiten a los atacantes remotos tener un impacto no especificado a través de un certificado OpenPGP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.25",
            "matchCriteriaId" : "0BCB1A63-F2CF-474F-AAF6-CE225C58B765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434168D-05A8-4300-9069-C55566A5EAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACD6E9A-8CCA-44C3-AE54-BAABEAB5BB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6FA626-AEE9-4E3B-8BE4-3F2D46FF072D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA302AC-1DE9-4D36-94B2-BB4411E9BF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71805931-872A-4F1A-A8B4-82347C2EF90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A489C2-4824-4133-83E0-625AA454E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D38B82-82A7-4943-BE1C-77EC707289D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850A1174-F1E7-47EA-AF71-FEB6C4379EDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95372",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/94fcf1645ea17223237aaf8d19132e004afddc1a",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-2",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/94fcf1645ea17223237aaf8d19132e004afddc1a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gnutls.org/security.html#GNUTLS-SA-2017-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5506",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de liberación doble en magick/profile.c en ImageMagick permite a los atacantes remotos tener un impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6EA542-A222-4E6A-869B-F3805CAFCDD0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95753",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851383",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/9a069e0f2e027ec5138f998023cf9cb62c04889f",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/354",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/9a069e0f2e027ec5138f998023cf9cb62c04889f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5507",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache."
      }, {
        "lang" : "es",
        "value" : "La pérdida de memoria en los coders/mpc.c en ImageMagick en versiones anteriores a 6.9.7-4 y 7.x en versiones anteriores a 7.0.4-4 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de vectores que implican una caché de píxeles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.7-3",
            "matchCriteriaId" : "17C70D1C-A994-459F-AED2-B14049E4043D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95752",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851382",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/6.9.7-4/ChangeLog",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/66e283e0a9c141b19fe6c4c39f4a41c0d3188ba8",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/6.9.7-4/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/66e283e0a9c141b19fe6c4c39f4a41c0d3188ba8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5508",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:01.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer basado en memoria dinámica en la función PushQuantumPixel de ImageMagick en versiones anteriores a 6.9.7-3 y 7.x en versiones anteriores a 7.0.4-3 permite a los atacantes remotos causar una denegación de servicio (caída de la aplicación) a través de un archivo TIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.7-2",
            "matchCriteriaId" : "704D28B6-8EAE-457C-83AA-A0D88DD8D366"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95748",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851381",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/6.9.7-3/ChangeLog",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/7.0.4-3/ChangeLog",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c073a7712d82476b5fbee74856c46b88af9c3175",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "security@debian.org"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31161",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/6.9.7-3/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/blob/7.0.4-3/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c073a7712d82476b5fbee74856c46b88af9c3175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5509",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "Coders/psd.c en ImageMagick permite a los atacantes remotos tener un impacto no especificado a través de un archivo PSD manipulado, lo que desencadena una escritura fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.7-4",
            "matchCriteriaId" : "5656B565-C8B4-43A8-94D4-EA0144FEACE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.4-4",
            "matchCriteriaId" : "800DAD3F-CB8C-40F8-8DE6-A1354E72F75D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95751",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851377",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/37a1710e2dab6ed91128ea648d654a22fbe2a6af",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d4ec73f866a7c42a2e7f301fcd696e5cb7a7d3ab",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/350",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/37a1710e2dab6ed91128ea648d654a22fbe2a6af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d4ec73f866a7c42a2e7f301fcd696e5cb7a7d3ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5510",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:01.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "Coders/psd.c en ImageMagick permite a los atacantes remotos tener un impacto no especificado a través de un archivo PSD manipulado, lo que desencadena una escritura fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.7-4",
            "matchCriteriaId" : "5656B565-C8B4-43A8-94D4-EA0144FEACE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.4-4",
            "matchCriteriaId" : "800DAD3F-CB8C-40F8-8DE6-A1354E72F75D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95755",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851376",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/91cc3f36f2ccbd485a0456bab9aebe63b635da88",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e87af64b1ff1635a32d9b6162f1b0e260fb54ed9",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/348",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/91cc3f36f2ccbd485a0456bab9aebe63b635da88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e87af64b1ff1635a32d9b6162f1b0e260fb54ed9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5511",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-03-24T15:59:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Coders/psd.c en ImageMagick permite a los atacantes remotos tener un impacto no especificado al aprovechar un cast impropio, lo que desencadena un desbordamiento de búfer basado en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.7-3",
            "matchCriteriaId" : "F44C6C44-B85D-4085-9A6C-8D43C402AA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.4-3",
            "matchCriteriaId" : "8559F91A-D037-48EF-93D5-B2F6897565C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95746",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/347",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/17/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T15:59:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Miele Professional PST10 devices. The corresponding embedded webserver \"PST10 WebServer\" typically listens to port 80 and is prone to a directory traversal attack; therefore, an unauthenticated attacker may be able to exploit this issue to access sensitive information to aide in subsequent attacks. A Proof of Concept is GET /../../../../../../../../../../../../etc/shadow HTTP/1.1. This affects PG8527 devices 2.02 before 2.12, PG8527 devices 2.51 before 2.61, PG8527 devices 2.52 before 2.62, PG8527 devices 2.54 before 2.64, PG8528 devices 2.02 before 2.12, PG8528 devices 2.51 before 2.61, PG8528 devices 2.52 before 2.62, PG8528 devices 2.54 before 2.64, PG8535 devices 1.00 before 1.10, PG8535 devices 1.04 before 1.14, PG8536 devices 1.10 before 1.20, and PG8536 devices 1.14 before 1.24."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos PST10 de Miele Professional. El servidor web incorporado correspondiente a  \"PST10 WebServer\" típicamente escucha al puerto 80 y es propenso a un ataque de  salto de directorio; por lo tanto, un atacante no autenticado puede ser capaz de explotar este problema para acceder a información confidencial para facilitar ataques posteriores. Una prueba de concepto es GET /../../../../../../../../../../../../etc/shadow HTTP/1.1. Esto afecta los dispositivos PG8527 versiones 2.02 anteriores a 2.12, los dispositivos PG8527 versiones 2.51 anteriores a 2.61, los dispositivos PG8527 versiones 2.52 anteriores a 2.62, los dispositivos PG8527 versiones 2.54 anteriores a 2.64, los dispositivos PG8528 versiones 2.02 anteriores a 2.12, los dispositivos PG8528 versiones 2.51 anteriores a 2.61, los dispositivos PG8528 versiones 2.52 anteriores a 2.62, los dispositivos PG8528 versiones 2.54 anteriores a 2.64, los dispositivos PG8535 versiones 1.00 anteriores a 1.10, los dispositivos PG8535 versiones 1.04 anteriores a 1.14, los dispositivos PG8536 versiones 1.10 anteriores a 1.20 y los dispositivos PG8536  versiones 1.14 anteriores a 1.24."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:miele_professional:pst10_webserver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF4C155-1C96-47A5-A782-E7BA31459F50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:miele_professional:pg_8528:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99421EF-F5EA-43E4-867D-DCE9A58ECB76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-138-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41718/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.miele.de/en/m/miele-admits-communication-glitch-4072.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-138-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41718/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.miele.de/en/m/miele-admits-communication-glitch-4072.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T15:59:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a \"Change cipher spec\" packet without pre-handshake."
      }, {
        "lang" : "es",
        "value" : "Eclipse tinydtls 0.8.2 para Eclipse IoT permite que atacantes remotos causen una denegación de servicio (caída de pares de DTLS) enviando un paquete \"Cambiar especificación de cifrado\" sin pre-apretón de manos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:tinydtls:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1600715E-7D2B-4B52-B2BD-E80B9EC15D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/k1rh4/25dcb124aef2a8a2a5f4677d64d1998b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k1rh4/CVE/blob/master/tinydtls",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/k1rh4/25dcb124aef2a8a2a5f4677d64d1998b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k1rh4/CVE/blob/master/tinydtls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T15:59:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in the CMS Made Simple (CMSMS) 2.1.6 \"Content-->News-->Add Article\" feature via the m1_title parameter. Someone must login to conduct the attack."
      }, {
        "lang" : "es",
        "value" : "XSS existe en la característica CMS Made Simple (CMSMS) 2.1.6 \"Content-->News-->Add Article\" a través del parámetro m1_title. Alguien debe iniciar sesión para realizar el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.03i0.com/index.php/archives/113/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.03i0.com/index.php/archives/113/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T15:59:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in the CMS Made Simple (CMSMS) 2.1.6 \"Content-->News-->Add Article\" feature via the m1_summary parameter. Someone must login to conduct the attack."
      }, {
        "lang" : "es",
        "value" : "XSS existe en la característica CMS Made Simple (CMSMS) 2.1.6 \"Content-->News-->Add Article\" característica a través del parámetro m1_summary. Alguien debe iniciar sesión para realizar el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.03i0.com/index.php/archives/113/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.03i0.com/index.php/archives/113/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T15:59:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in the CMS Made Simple (CMSMS) 2.1.6 \"Content-->News-->Add Article\" feature via the m1_content parameter. Someone must login to conduct the attack."
      }, {
        "lang" : "es",
        "value" : "XSS existe en la característica CMS Made Simple (CMSMS) 2.1.6 \"Content-->News-->Add Article\" a través del parámetro m1_content. Alguien debe iniciar sesión para realizar el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.03i0.com/index.php/archives/113/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.03i0.com/index.php/archives/113/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-24T21:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device."
      }, {
        "lang" : "es",
        "value" : "La función vmw_surface_define_ioctl en drivers/gpu/drm/vmwgfx/vmwgfx_surface.c en el kernel de Linux hasta la versión 4.10.5 no verifica el valor cero de ciertos niveles de datos, lo que permite a los usuarios locales provocar una denegación de servicio (referencia ZERO_SIZE_PTR y GPF y posiblemente pánico) a través de una llamada ioctl manipulada para un dispositivo /dev/dri/renderD*."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.5",
            "matchCriteriaId" : "66842004-17E8-40A3-AB62-24B49EACE475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?t=149037004200005&r=1&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1435719",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/dri-devel/2017-March/136814.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?t=149037004200005&r=1&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1435719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/dri-devel/2017-March/136814.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-25T00:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite."
      }, {
        "lang" : "es",
        "value" : "El procesador AMD Ryzen con microcódigo AGESA hasta 2017-01-27 permite a los usuarios locales provocar una denegación de servicio (cuelgue del sistema) a través de una aplicación que realiza una larga serie de instrucciones FMA3, como lo demuestra el banco de pruebas Flops."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amd:ryzen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-01-27",
            "matchCriteriaId" : "BED76458-6683-4151-9A9A-B3C6FA4D4BE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.hwbot.org/showpost.php?p=480524",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://forum.hwbot.org/showthread.php?t=167605",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97098",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=13924192",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://forum.hwbot.org/showpost.php?p=480524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://forum.hwbot.org/showthread.php?t=167605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=13924192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-25T01:59:02.253",
      "lastModified" : "2023-11-07T02:50:02.477",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-26T05:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698."
      }, {
        "lang" : "es",
        "value" : "La función bm_readbody_bmp en bitmap_io.c en Potrace 1.14 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basada en memoria dinámica y caída de aplicación) o posiblemente tener otro impacto no especificado a través de una imagen BMP manipulada. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2016-8698."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:potrace_project:potrace:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1161802F-EAB3-4BB2-A6C7-064A3DA0EFB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/03/potrace-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c-incomplete-fix-for-cve-2016-8698/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/03/potrace-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c-incomplete-fix-for-cve-2016-8698/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-26T05:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de liberación en la función fz_subsample_pixmap en fitz/pixmap.c en Artifex Software, Inc. MuPDF 1.10a permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente tener otro impacto no especificado a través de un documento manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03FAE98-D477-4974-B585-4D1D8DE409B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/mupdf-use-after-free-in-fz_subsample_pixmap-pixmap-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/02/09/mupdf-use-after-free-in-fz_subsample_pixmap-pixmap-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-26T05:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the \"next\" parameter which then redirects to any domain irrespective of the Host header."
      }, {
        "lang" : "es",
        "value" : "Netflix Security Monkey en versiones anteriores a 0.8.0 tiene un Open Redirect. La funcionalidad de cierre de sesión aceptó el parámetro \"next\" que entonces redirige a cualquier dominio independientemente del encabezado del Host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netflix:security_monkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0",
            "matchCriteriaId" : "52BCA67D-B627-4797-97BA-B371B3A859F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Netflix/security_monkey/commit/3b4da13efabb05970c80f464a50d3c1c12262466",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security_monkey/pull/482",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security_monkey/releases/tag/v0.8.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Netflix/security_monkey/commit/3b4da13efabb05970c80f464a50d3c1c12262466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security_monkey/pull/482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security_monkey/releases/tag/v0.8.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2641",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-26T18:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 2.x and 3.x, SQL injection can occur via user preferences."
      }, {
        "lang" : "es",
        "value" : "En Moodle 2.x y 3.x, puede ocurrir una inyección de SQL a través de las preferencias de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E051AAC-EB40-491F-AF0E-EE8143C12567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B336EDB1-B691-4341-ABF1-B155B9181603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "91A69F58-0774-4730-A23A-C88452E92F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7E26A6-C043-4AFF-AA57-AC89C89F6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADBE87F-1855-453B-B958-0CB8A7908A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B53A7D2-BDA2-4185-97C3-977A04876A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51DFFA8-DFF0-429C-B697-F82F41621FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FD1565-0DA1-4BA8-A501-86F13D3D29ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB754AF-3DA4-4459-A53B-3BC7B78CE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E8383-C3F3-480C-B9A9-49633DAAEC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645E8B7B-1AE6-4F46-AFA9-7506685CD571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0316A26A-8B51-4226-8D56-4A798A2D798D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD39692F-BC98-4AE3-B31A-4592D3212F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF44C96-301D-4708-99A0-B0751A6980F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B68715-9AC2-43CD-BA74-9013A50588D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B618F19-F7A7-45E1-9DDC-B2BD18849FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A26FCB-0099-4723-917E-8157E59013B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713D9C9-C8A3-47AE-87AE-2D5314DB0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD035D85-A66A-43D0-9049-17134032C593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3989501E-B42A-4CCB-859C-862BE31B80B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF2D22F-577F-4F06-80E0-B107F474CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE87CB-0720-41F8-9B14-9FE670742A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC8BEC8-5A7D-4331-BE6D-68A82049C547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96977",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349419",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41828/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41828/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2643",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-26T18:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.2.x, global search displays user names for unauthenticated users."
      }, {
        "lang" : "es",
        "value" : "En Moodle 3.2.x, la búsqueda global muestra nombres de usuario para usuarios no autenticados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96978",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349420",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2644",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-26T18:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.x, XSS can occur via evidence of prior learning."
      }, {
        "lang" : "es",
        "value" : "En Moodle 3.x, XSS puede ocurrir a través de evidencia de aprendizaje previo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96979",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349421",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2645",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-26T18:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.x, XSS can occur via attachments to evidence of prior learning."
      }, {
        "lang" : "es",
        "value" : "En Moodle 3.x, XSS puede ocurrir a través de adjuntos a la evidencia de aprendizaje previo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=349422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-26T20:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other vulnerabilities and/or exfiltrate sensitive information."
      }, {
        "lang" : "es",
        "value" : "Con OxygenOS en versiones anteriores a 4.0.3, cuando un cargador está conectado a un dispositivo OnePlus 3 o 3T apagado, la plataforma comienza con adbd habilitado. Por tanto, un cargador malicioso o un atacante físico puede abrir, sin autorización, una sesión ADB con el dispositivo, con el fin de seguir explotando otras vulnerabilidades y/o exfiltrar información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "A7FA279E-C889-4021-8A82-B866FADC73E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017004",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body parameter."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS 4.0.5.10 tiene CSRF en admin/blog/add/. El atacante puede añadir cualquier entrada de blog y opcionalmente puede insertar XSS dentro de una entrada a través del parámetro body."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:4.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473ECE41-CA24-4DFF-9A63-631EB0557CA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yiwang6.cn/Subrion.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.yiwang6.cn/Subrion.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields."
      }, {
        "lang" : "es",
        "value" : "dotCMS 3.7.0 tiene XSS accesible desde ext/languages_manager/edit_language en portal/layout a través de los dos campos de formulario inferiores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A30BB71-ACBD-426B-8468-58566A963A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97089",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.yiwang6.cn/dotcms.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.yiwang6.cn/dotcms.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.267",
      "lastModified" : "2023-11-07T02:49:48.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS 4.0.5.10 tiene inyección de SQL en admin/database/ a través del parámetro query."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:4.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473ECE41-CA24-4DFF-9A63-631EB0557CA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97093",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/SubrionSQL.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/SubrionSQL.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS 4.0.5 tiene CSRF en admin/languages/edit/1/. El atacante puede llevar a cabo cualquier acción Edit Language y opcionalmente puede insertar XSS a través del parámetro title."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809F3B4B-2056-41BA-A183-729B5971E2D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97087",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.yiwang6.cn/Subrion-CSRF.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.yiwang6.cn/Subrion-CSRF.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field."
      }, {
        "lang" : "es",
        "value" : "Symphony 2.6.9 tiene XSS en publish/notes/edit/##/saved/ a través del campo de formulario inferior."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsymphony:symphony:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AA0090-87F7-4344-A362-E5B9F4D6E63C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97101",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/Symphony-XSS1.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/Symphony-XSS1.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS 4.0.5 tiene CSRF en admin/blocks/add/. El atacante puede crear cualquier bloque y opcionalmente puede insertar XSS a través del parámetro content."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809F3B4B-2056-41BA-A183-729B5971E2D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/Subrion-CSRF1.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/Subrion-CSRF1.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally insert XSS via the tags parameter."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS 4.0.5 tiene CSRF en admin/blog/add/. El atacante puede añadir cualquier etiqueta y opcionalmente puede insertar XSS a través del parámetro tags."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809F3B4B-2056-41BA-A183-729B5971E2D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97196",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/Subrion-CSRF2.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yiwang6.cn/Subrion-CSRF2.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T02:59:00.453",
      "lastModified" : "2025-10-22T00:16:10.990",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with \"If: <http://\" in a PROPFIND request, as exploited in the wild in July or August 2016."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función ScStoragePathFromUrl en el servicio WebDAV en Internet Information Services (IIS) 6.0 en Microsoft Windows Server 2003 R2 permite a atacantes remotos ejecutar código arbitrario a través de una cabecera larga comenzando con \"If:"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Server Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4DF95D-B4B1-4FB6-9D27-A6D359EEACFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C65B29-89C4-4C05-BD53-27CAD31810A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97127",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038168",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/danigargu/explodingcan",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/edwardz246003/IIS_exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/8162",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41738/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41992/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/danigargu/explodingcan",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/edwardz246003/IIS_exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/8162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41738/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7269",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T14:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE (156)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el firmware en Broadcom Wi-Fi HardMAC SoC chips, cuando el firmware soporta CCKM Fast y Secure Roaming y la funcionalidad está habilitada en RAM, permite a atacantes remotos ejecutar código arbitrario a través de marco de respuesta de reasociación manipulado con un Cisco IE (156)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:bcm4339_soc_firmware:6.37.34.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A591207-A6F4-4B84-9CDF-F725A6D624AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4339_soc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D31639-37A9-4879-A17E-AFC28F9E25F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97054",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1051",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T15:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications."
      }, {
        "lang" : "es",
        "value" : "ark en versiones anteriores a 16.12.1 podrían permitir a atacantes remotos ejecutar código arbitrario a través de un ejecutable en un archivo, relacionado con las aplicaciones asociadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:ark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.12",
            "matchCriteriaId" : "40FF79E6-239C-45D7-83D9-6124A57D3B7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95349",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.kde.org/show_bug.cgi?id=374572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.kde.org/ark.git/commit/?id=82fdfd24d46966a117fa625b68784735a40f9065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NIMZUCG6IQR5S65IVQOXQFQV7TMVSYAT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-69",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/10/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.kde.org/show_bug.cgi?id=374572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.kde.org/ark.git/commit/?id=82fdfd24d46966a117fa625b68784735a40f9065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NIMZUCG6IQR5S65IVQOXQFQV7TMVSYAT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201701-69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T15:59:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header."
      }, {
        "lang" : "es",
        "value" : "httpd en OpenBSD permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de una serie de peticiones para un archivo grande utilizando un encabezado HTTP Range."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A300948-662F-4728-B6C1-69A6A4CF61BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=openbsd-cvs&m=148587359420912&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95997",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037758",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41278/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=openbsd-cvs&m=148587359420912&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/02/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41278/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T15:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el binario del asistente de root setuid en S-nail (posterior S-mailx) en versiones anteriores a 14.8.16 permite a usuarios locales escribir archivos arbitrarios y consecuentemente obtener privilegios de root a través de un .. (punto punto) en el argumento randstr."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s-nail_project:s-nail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.8.5",
            "matchCriteriaId" : "43F4C495-521F-4FA7-AD4F-EAF4F0B1FE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/27/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mail-archive.com/s-nail-users%40lists.sourceforge.net/msg00551.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/27/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/07/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mail-archive.com/s-nail-users%40lists.sourceforge.net/msg00551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5931",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-27T15:59:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en hw/virtio/virtio-crypto.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (caída del proceso QEMU) o posiblemente ejecutar código arbitrario en el host a través de una solicitud virtio-crypto manipulada, lo que desencadena un desbordamiento de búfer basado en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=a08aaff811fb194950f79711d2afe5a892ae03a4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/08/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96141",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1420092",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg01368.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=a08aaff811fb194950f79711d2afe5a892ae03a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1420092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg01368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5932",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-27T15:59:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a \" (double quote) character and a command substitution metacharacter."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de autocompletar de ruta en Bash 4.4 permite usuarios locales obtener privilegios a través de nombre de archivo manipulado empezando con un carácter \"(comillas dobles) y un metacaracter de sustitución de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:bash:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9044AB-025E-4765-BFC2-5ADFD0522131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/bash.git/commit/?id=4f747edc625815f449048579f6e65869914dd715",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/08/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-bash/2017-01/msg00034.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/bash.git/commit/?id=4f747edc625815f449048579f6e65869914dd715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/08/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-bash/2017-01/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T15:59:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence."
      }, {
        "lang" : "es",
        "value" : "La función xhci_kick_epctx en hw/usb/hcd-xhci.c en QEMU (también conocido como Quick Emulator) permite a usuarios locales privilegiados del SO invitado provocar una denegación de servicio (bucle infinito y caída del proceso QEMU) a través de vectores relacionados con la secuencia del descriptor de transferencia de control."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96220",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421626",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1421626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T15:59:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name_2 parameter to admin/column/delete.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en MetInfo 5.3.15 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro name_2 a admin/column/delete.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B93CAA-EAEC-4219-ABD2-29063F412100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141689/MetInfo-5.3.15-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/49",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96974",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141689/MetInfo-5.3.15-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write."
      }, {
        "lang" : "es",
        "value" : "La función mx4200_send en el refclock legado de MX4200 en NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 no maneja correctamente el valor de retorno de la función snprintf, lo que permite a usuarios locales ejecutar código arbitrario a través de vectores no especificados, lo que desencadena una escritura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97058",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el instalador de Windows para NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permite a usuarios locales tener un impacto no especificado a través de una ruta de la aplicación en la línea de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97078",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable."
      }, {
        "lang" : "es",
        "value" : "NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94, cuando se utiliza PPSAPI, permite a usuarios locales obtener privilegios a través de un DLL en la variable de entorno PPSAPI_DLLS"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3384",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en las funciones ctl_put * en NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permiten a usuarios remotos autenticados tener un impacto no especificado a través de una variable larga."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.8",
            "matchCriteriaId" : "CED3C1F7-6FFA-44D1-BC56-2BB1963F3B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.94",
            "matchCriteriaId" : "3505DE7A-B365-4455-A7BC-474019426C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA51D83-5841-4335-AF07-7A43C118CAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "C855BBD2-2B38-4EFF-9DBE-CA61CCACD0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "49ADE0C3-F75C-4EC0-8805-56013F0EB92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FF625A-EFA3-43D1-8698-4A37AE31A07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B99BBD-97FE-4615-905A-A614592226F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A9AD3A-F030-4331-B52A-518BD963AB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "C293B8BE-6691-4944-BCD6-25EB98CABC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA650F8-2576-494A-A861-61572CA319D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED21EE8-7CBF-4BC5-BFC3-185D41296238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "C76A0B44-13DE-4173-8D05-DA54F6A71759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1450241C-2F6D-4122-B33C-D78D065BA403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "721AFD22-91D3-488E-A5E6-DD84C86E412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6ADDB1-2E96-4FF6-AE95-4B06654D38B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "41E44E9F-6383-4E12-AEDC-B653FEA77A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "466D9A37-2658-4695-9429-0C6BF4A631C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "99774181-5F12-446C-AC2C-DB1C52295EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "4427EE6D-3F79-4FF5-B3EC-EE6BD01562CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "99C71C00-7222-483B-AEFB-159337BD3C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "75A9AA28-1B20-44BB-815C-7294A53E910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C213794-111D-41F3-916C-AD97F731D600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "50811A7B-0379-4437-8737-B4C1ACBC9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "F12E4CF5-536C-416B-AD8D-6AE7CBE22C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "c.4.2.8.4.0",
            "matchCriteriaId" : "F1A1FDA7-BE46-4FAB-A3FD-9A40C770C4AB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.8.0",
            "versionEndExcluding" : "10.13",
            "matchCriteriaId" : "64CBADD5-9C10-4D8F-9844-B6FB82695786"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EFD09A-3D77-47B0-93FB-50F6C13A2F9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F488810-73E3-4475-975A-C2FCA037E78B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/62",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3379",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97051",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3349-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bto.bluecoat.com/security-advisory/sa147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4B7BMVXV53EE7XYW2KAVETDHTP452O3Z/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUPPICJXWL3AWQB7I3AWUC74YON7UING/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.f5.com/csp/article/K99254031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-294/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3349-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bto.bluecoat.com/security-advisory/sa147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4B7BMVXV53EE7XYW2KAVETDHTP452O3Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUPPICJXWL3AWQB7I3AWUC74YON7UING/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K99254031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-294/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes."
      }, {
        "lang" : "es",
        "value" : "El instalador de Windows para NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permite a usuarios locales tener un impacto no especificado a través de vectores relacionados con un argumento con múltiples bytes nulos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97076",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función reslist en ntpq en NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permite a servidores remotos tener un impacto no especificado a través de una variable flagstr larga en una respuesta de lista de restricciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3377",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-6460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-6460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el controlador refclock legado Datum Programmable Time Server (DPTS) en NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permite a usuarios locales tener un impacto no especificado a través de un dispositivo /dev/datum manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97045",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3707-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3707-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option."
      }, {
        "lang" : "es",
        "value" : "NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permite a usuarios remotos autenticados provocar una denegación de servicio (caída del demonio) a través de una configuración no válida en al directiva :config, relacionado con la opción unpeer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97049",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3707-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3707-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive."
      }, {
        "lang" : "es",
        "value" : "NTP en versiones anteriores a 4.2.8p10 y 4.3.x en versiones anteriores a 4.3.94 permite a atacantes remotos provocar una denegación de servicio (caída ntpd) a través de una directiva de configuración de modo mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE002C76-406D-4F22-B738-E17BDEA70BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1CCF6F-74C6-42D7-B88B-36ED73BB1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23D9009-DF45-44C1-80DF-CEEC9B9E3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43921601-667E-4415-83BE-E5B39D969BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DD9C02-0C46-4785-8D77-C5465E4ED967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A497BADE-0516-494F-89FA-EAFC6AD17F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4298439A-EAF2-4CAA-990B-4AA37E7A0E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E9C822-C04A-4908-9596-76F9FB561206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBD400-8EC1-4F9C-B600-85B8FF3BDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6CFF4C-2620-4FD6-91A2-C0D0DAA4287D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842963D1-C78C-48B5-A8D2-BC018854E5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121ED6C5-8985-4DEF-9040-2AC63582E596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B4B99-8B4F-4ED8-B2DC-D90EC71ECB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68499DA4-64EF-412F-A434-8E0F78D77CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C5AC9-463F-4703-81B9-7B5484F47A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14811-8F49-4796-BADD-DB7973EC32DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB2830-ADE5-4C87-964E-16748BF88EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0284FD-2933-4160-80D2-53B32CD73287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AB963A-7284-433F-9890-5AE402E4E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDEFF7A-D964-4D9A-93BF-41E9D16EA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C434153-911C-4F07-ADD0-0EAB47F96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183B043-8B96-4A8B-A5C9-544D4F1CED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE349AB-44CB-4263-80CE-59DFD572B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB55DF6-567F-4B6A-81E1-9013914416D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727B0B-AB5E-46CC-9DDF-F319C2D9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0755962-2D5F-41E6-9BDB-C2ECBCCD2818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAADB5-FA32-4CF9-A4B2-51EEA300B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A202FDAD-D757-4850-9D1E-C31B0F3BA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A345D7-DFC0-4E0D-AAAB-8206C35F63D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4069EF5-DC7D-4487-8636-AC2EAB17BAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DF3A5C-F1D9-468E-BD08-5E2578898DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0858AE44-4B0A-4941-B4A8-937B557D1448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C84FF-CB21-4819-B3CA-1A55FDF20BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94709B39-C394-4B44-A362-9429F4CB9D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4526AC-6BCC-43A5-B501-263D0ED0655B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FF6B4-CD1C-4AC1-B286-D6AB705D680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFA0C8-1349-43A4-BDAC-3B5A601B9FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA130B1-DD20-4E98-963F-61E85A09E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAC9B73-5020-47C9-803E-ABB6162AADE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A6B7B5-3AC9-4442-BD91-3783C2B4235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72F5C09-520B-486C-AD9A-9CBBFE6487CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097DED37-D3F3-45C4-B131-1C4294406722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F607-0A9D-4F84-B50D-28C54E6EDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C689CAF-632A-4FF2-8C86-541EEDD574E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0ACF5B-BBA9-4B6C-B19D-B8AEF7212781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C8254-73DC-4AFA-A250-A8192DC917F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344FA12-3C5F-418B-9209-EA8BDD230074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C3A62A-C6F6-4B2E-A254-CDA12BD34DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073A0AFF-C5C6-422E-BD63-2353AA4B58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B5DA29-4139-405D-8AA8-23FAECBBC5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4D15D-6D2A-4730-B7CF-21284E92FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A0C6AB-813F-4417-A98E-33FBB7AAB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815ABF0E-ED94-4426-8889-D3C2AECACC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894612F1-8C51-4F66-AFE7-D8077F63E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FD3D1E-08F8-4C7F-876C-47E88386B83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C068E27-A3DD-4FD2-81FB-2CFEC3C047CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21A12E6-0802-4BDC-AF71-50D7D0433B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EE44A-7D8B-41A5-82A6-04AEE50278CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6862529A-1AE5-4E2D-A4B0-E351D1900C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6B6711-0F75-4FEA-8917-04391FC9D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC0249C-3CFC-4CD3-9481-9F6BE1FC5E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE639D9-0B1E-4DFB-B275-D11665FDA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35E9C41-0F2A-4790-B996-8EC00FA863F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BAB268-3A70-4422-9C6C-49E6453D750D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5960F1-DDA9-4885-952F-450EC00B5C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E725D449-BBC2-40E3-BF53-D9BF7B4F57D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10975CB-56EB-44D0-BDEF-60484B6BD85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE56C0F-0AF4-45CF-ACA2-0E583BBB3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A4A1AC-ED08-4EFE-A826-1BB1B5CAB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D7AD6-6BDB-4519-B9F8-3181E21850FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B061FF9A-0D00-429D-9B2F-14EEA41E7A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CB0260-2A96-41A8-81A0-8E9722B22D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037065-9E33-4A5A-8188-1F086D7BE394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70200031-5902-416D-A140-DC2CDFDAF683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575C5F15-2C16-4B39-A718-1641DDD88F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BFD7E-9B3F-4D63-BEBC-16F22DA6F8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42631437-772B-45E0-A1F3-5D9E2FC77D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9E62EF-E21F-421F-9A57-54A551CEC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E046E-013A-4E10-9457-4D1F407519EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4B06F-AD55-4D61-B966-B38B854C0A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19817731-42C2-4745-88F2-D27258FC7DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77479EEE-F81B-4653-8FAD-0AFBA3C71B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0208619E-9179-46D9-8E47-6CB5B4046DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBAE2A2-B7CB-45F6-A84C-5B9B742A0B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC16904-03FC-42B2-89F0-CA0D59A5FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3980D1-54F1-4C2F-B140-B2F18D8958A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C845718-520A-42CB-9BA7-00723694A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB7BF51-DD1A-41E1-B5E5-02A6BADC30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DA557-0977-43C2-8DEF-127B1BAA9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733C0A5D-3A0A-4449-9DE0-BD06D4942799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E5DAD5-465A-4A53-856A-1F674723EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE37F4-C8E6-42CC-A799-563637F6B85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F9DD05-E521-45D3-994E-0400DA0070BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA733E-A2BB-4F72-BE9A-AF1ADD1881A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E4E2B-7E33-49A0-85E1-EF1755F6BB45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3389",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97050",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/NtpBug3389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "La función ssh_agent_channel_data en PuTTY en versiones anteriores a 0.68 permite a atacantes remotos tener un impacto no especificado a través de un valor de longitud grande en un mensaje de protocolo de agente y aprovechando la capacidad para conectarse al socket de Unix-domain que representa la conexión de agente reenviada, lo que desencadena un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.67",
            "matchCriteriaId" : "8A6D4089-DA56-48A4-8DCB-966EF35CB399"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF605E46-ADCE-45B3-BBBA-E593D3CEE2A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-03/msg00055.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97156",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.tartarus.org/?p=simon/putty.git%3Ba=commitdiff%3Bh=4ff22863d895cb7ebfced4cf923a012a614adaa8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42137/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-03/msg00055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.tartarus.org/?p=simon/putty.git%3Ba=commitdiff%3Bh=4ff22863d895cb7ebfced4cf923a012a614adaa8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42137/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large (1) read or (2) write TFTP protocol message."
      }, {
        "lang" : "es",
        "value" : "El servidor TFTP en ExtraPuTTY 0.30 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de a gran mensaje de protocolo TFTP de (1) lectura o (2) escritura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extraputty:extraputty:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "0.29",
            "matchCriteriaId" : "C28A8E42-BC3D-4643-BF21-36CBBAFD8A82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141705/ExtraPuTTY-029_rc2-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96973",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41639/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/141705/ExtraPuTTY-029_rc2-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41639/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El procesamiento de netjoin en Irssi 1.x en versiones anteriores a 1.0.2 permite a atacantes provocar una denegación de servicio (uso después de liberación de memoria) y posiblemente ejecutar código arbitrario a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "13F6C09B-FD53-426E-AF05-F013B09CE5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97185",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/irssi/irssi/commit/77b2631c78461965bc9a7414aae206b5c514e1b3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_03.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/irssi/irssi/commit/77b2631c78461965bc9a7414aae206b5c514e1b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_03.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Yii Framework en versiones anteriores a 2.0.11, cuando se utiliza el modo de desarrollo, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de datos de solicitud manipulados que no se manejan adecuadamente en la pantalla de excepción del modo de depuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yii_software:yii:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "D5DCD2A8-1911-4C3E-B526-7913DA4BB3D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.yiiframework.com/news/123/yii-2-0-11-is-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/commit/97171a0db7cda0a49931ee0c3b998ef50bd06756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yiisoft/yii2/pull/13401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.yiiframework.com/news/123/yii-2-0-11-is-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/commit/97171a0db7cda0a49931ee0c3b998ef50bd06756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yiisoft/yii2/pull/13401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function."
      }, {
        "lang" : "es",
        "value" : "PHP hasta la versión 7.1.11 podría permitir SSRF en aplicaciones que aceptan un argumento de nombre de host fsockopen o pfsockopen con la expectativa de que el número de puerto esté limitado. Debido a que se reconoce una sintaxis :port, fsockopen empleará el número de puerto especificado en el argumento del nombre de host en lugar del número de puerto en el segundo argumento de la función."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.3",
            "matchCriteriaId" : "731A329A-C7A3-4FCB-8BB8-796D2CA18B50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74216",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=75505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=75505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report."
      }, {
        "lang" : "es",
        "value" : "La función cp_report_fixup en drivers/hid/hid-cypress.c en el kernel de Linux 3.2 y 4.x en versiones anteriores a 4.9.4 permite a atacantes físicamente próximos provocar una denegación de servicio (desbordamiento inferior de entero) o posiblemente tener otro impacto no especificado a través de un reporte HID manipulado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7572A0F-20BA-4206-A3DC-87FF1E0A8999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1303D35A-7D3E-476F-95EC-514BC12A8EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2331B3-45AF-4406-9641-A78F949C85D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FAD591-2AE8-4A14-91D8-79946C9D2244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5411C41-0F80-4633-9778-6BA7A20EED0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A43AA1-FF07-46AA-8A22-B73639876929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7AB076-B553-4E1D-A604-4DFD976FC155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9F02C5-128B-4E30-BA0E-7FD771F8AA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A449E564-051A-4C33-888D-DD84D15C1C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7321A21-F4FC-4C05-8362-47BA25933FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A93BBA-576F-46AC-B09C-BA7CDC6C71C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBA308E-F27E-4915-B7DF-C6DCE56ABA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5398D9C4-9161-4C8E-AE72-A449A8546C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D448D6-CCC0-4FF1-B2EA-7A99C3A467B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE654C62-FB2D-4F0C-858E-DBF15637A5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5C6932-4C99-4271-BBE4-710B7C6984F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809E15BD-4613-4D53-91DE-EE115A7A6D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FBC32B-82C6-4DE2-9E94-3E1765B7234D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB50C500-289B-43CA-9AF5-69564A452213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51F0A1C-1359-4C88-820C-3A721F64A1E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E893E542-F408-42C4-B3BE-F5D45A0CAA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64112FF2-CADE-4A2B-8510-CC169A0CC640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DEF239-FE85-4B68-B42C-A2AA35BAF2C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01EB3380-3648-4595-BA99-49D35518004F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA80751-D14B-43F7-B646-10C99BBEF8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF9E0E4-22DE-4464-9601-42EC87308DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3DC15B-8605-410E-A88F-28AB935062DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD9FDB-40B5-4CDB-BCF4-C6EB76DDC286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B5BA6D-3170-4EC1-BDF7-B285954FC289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8F1C59-37C8-46E7-B314-9A56B38DC626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809B3718-F18A-4396-825A-3BCA8BB6D4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96A4F6D-4245-4638-AFE3-1A6B70D7659A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC8D404-DC9D-423D-85F7-848A16EE2A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F8E8DA-CB24-4F0A-ACA9-52A79E512F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0A8C29-A79E-4418-AD91-D2730F5CBBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65BF8B8-071F-42CB-B710-8E6FFC49B1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C5B538-158C-4F4A-9452-DAD2D0EF5A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC507686-B52C-4ABE-9734-147071FC7C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8954F8-18FC-48DE-8E8E-C68D09EC81BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6FEC0B-2D57-4690-90F5-0F4D581B65A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC59579D-99D7-4A60-AD3F-1ACC89579A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362FD028-8C86-45FD-8051-2F7964B78372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "A729D0E4-EEA8-4497-B6B7-D9C83C4E9F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA9A668-E934-4FB3-9D88-6CA14147AD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AEAC7CF-3964-48B8-8B46-05CE5255E15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F026B34-4748-4550-BB80-F66DEA7A68BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC7892-7F57-4A7A-9AA5-FE7C100A91E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F595A1E-2CDD-4665-895E-7CE0B2E639B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F81F522-54E6-4EBA-B6C1-EB0E5DAA28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "AD811782-D76C-4CC9-9F00-BFE7E258362F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10C7BD3-0FB9-4386-B06A-75CD2E36F6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7573E7DF-E5D8-4E7F-807D-0B6B50118FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86C90E9-FB1C-4466-AD61-D27F0E4CA411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A20133-AACA-46C5-AE38-A3A887A9C788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A5B50B-F65A-43B9-B8BE-C6CB65644F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9113E6CE-7775-43B4-8DBA-2C2ECD9DB350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB8991C-48C3-4E5D-BFB0-507CBFBFCFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8627D965-B873-4DD2-B7ED-9E620CB13ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27839ED-79D7-4E33-B1A0-F6A5E2CFD4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975D6639-AB42-403F-A366-9A4C44DFC149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FD6F60-3836-4F63-826D-FC3CBAE3D338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04EB1200-5662-4AB8-913F-7517471BA12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CBD63C-722B-4D8E-BD73-9DB23831B291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6959AD65-8A87-4B9F-A829-1ED0294FE222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273AF0D4-6C6A-4068-8C40-A4D1F0B30824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8019864-3F8D-461A-A34A-EA0EDA13A763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F69BAE1-5306-4A37-B97A-C0AF1E7E84B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CBBC02-0AA7-4032-A16B-D17CFA8FEFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AD48C5-8D13-49BA-8202-06E6F9AB2E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "74D8F1E1-5953-48EB-A3FB-218ACA871E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C109D0C-7124-4BBE-B7BB-AEDDF00E60BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43363AA-209F-4BFB-AFCE-80F9CB9ACDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4862B1-B581-4D52-8176-795B1628362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D54C1A-4DD3-47D3-A024-D920595C9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4139A8FF-4700-4C25-A527-9584A8B9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCA4A2B-412C-4A22-B784-68BDCBBBE32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273E9BE2-7913-4FA4-9E2E-41AF562FA7B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E28FBEF-2115-430E-A33D-7277B83344D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4E158A-A7D7-4FF2-9875-C7098FA6BA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873D44F2-E5A5-4C6E-9003-EECF0C42D1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55DB3B5-7C4F-4FE7-AB0C-BEA59EEE066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB53773F-E2E1-47BE-B692-E593495B9B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA48FB4-C629-41CC-9314-D38CD2C225B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50FE96C-7A38-486B-8B90-D3D29813A990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E4C538-05B3-47AA-8464-087549C0D8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52A2B03-3177-41EE-8917-04575975845B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83B1C49-7EBF-4535-872D-F5F11ECFCC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E12A4EF-B3CF-432B-B9FF-AEF80A5C6906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BA4997-9F14-4977-A041-6C6CFF014E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4162F4BA-D4CB-4F33-8335-F491F33C2F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FB75CA-DAFB-48DC-8A4E-0EBB06A29F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE207AE1-85FE-4310-A9C4-439EE8B57A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BCB720-B61A-4E58-8066-95BC70C9BE1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E48B85-81BC-4C54-B18A-01879ABCBE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA81E6E4-69A4-4C71-874D-F5E4B90137FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060B2881-DF55-489D-92C9-B4383552DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC6EDF6-7BB3-4E8C-A248-73980DAA5ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173525CD-4915-4B9E-BD81-7C0115F96D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7730B-9C1F-41A6-B357-35057F5B9C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B65550-0D14-4A25-A29E-151746526845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED87791-5FE9-4955-B4BA-F744C7B6085B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B21E8A-2312-4CBB-BE53-8EE660A56678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98CD5F7-9730-4B07-A43D-A7D4C54CCF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCB26E2-5F19-4F9C-9FF3-184EF7262D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B614F17-FC57-4689-B875-33C2915432CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8E178C-5E11-4335-94B5-8FBBF1EA0634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0C1F4E-9C54-4FC2-AD07-0D3B26CC2B6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1ebb71143758f45dc0fa76e2f48429e13b16d110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4faec4a2ef5dd481682cc155cb9ea14ba2534b76",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97190",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1ebb71143758f45dc0fa76e2f48429e13b16d110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1ebb71143758f45dc0fa76e2f48429e13b16d110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4faec4a2ef5dd481682cc155cb9ea14ba2534b76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1ebb71143758f45dc0fa76e2f48429e13b16d110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/191.html\">CWE-191: Integer Underflow (Wrap or Wraparound)</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T17:59:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file."
      }, {
        "lang" : "es",
        "value" : "La función r_pkcs7_parse_cms en libr/util/r_pkcs7.c en radare2 1.3.0 permite a atacantes remotos provocar una denegación de servicio (referencia del puntero NULL y caída de la aplicación) a través de un archivo PE manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA3B8-616C-42E1-A70A-D8ABE8DEF929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97181",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7152",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-27T18:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866."
      }, {
        "lang" : "es",
        "value" : "La función ReadPCXImage en coders/pcx.c en ImageMagick 7.0.4.9 permite a atacantes remotos provocar una denegación de servicio (intento de asignación de memoria grande y caída de la aplicación ) a través de un archivo manipulado. NOTA: Esta vulnerabilidad existe Debido a una solución incompleta para CVE-2016-8862 y CVE-2016-8866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/27/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862-and-cve-2016-8866/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/271",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/27/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862-and-cve-2016-8866/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5237",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-27T21:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, \"RESET!\""
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de autenticación, un usuario no autenticado que conoce el número de teléfono del Eview EV-07S GPS Tracker puede revertir el dispositivo a una configuración predeterminada de fábrica con un comando SMS, \"RESET!\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eviewgps:ev-07s_gps_tracker_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D1D3D8-BE34-48FA-90DF-42F018935B8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:eviewgps:ev-07s_gps_tracker:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C745D1E-0AFF-4778-9D4E-C77A6C91AC43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97186",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5238",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-27T21:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one variable to another, overwriting the data of another field."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de comprobación de límites, varios campos de configuración de entrada para el Eview EV-07S GPS Tracker desbordarán los datos almacenados en una variable a otra, sobre escribiendo los datos de otro campo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eviewgps:ev-07s_gps_tracker_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D1D3D8-BE34-48FA-90DF-42F018935B8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:eviewgps:ev-07s_gps_tracker:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C745D1E-0AFF-4778-9D4E-C77A6C91AC43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97194",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5239",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-03-27T21:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle (MitM) listener."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de cifrado estándar cuando trasmiten información sensible a través de internet a un servicio de monitorización centralizado, el Eview EV-07S GPS Tracker revela infomración de identificación personal, tal como datos GPS y números de IMEI, a cualquier oyente man-in-the-middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eviewgps:ev-07s_gps_tracker_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D1D3D8-BE34-48FA-90DF-42F018935B8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:eviewgps:ev-07s_gps_tracker:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C745D1E-0AFF-4778-9D4E-C77A6C91AC43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97194",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1120",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-27T22:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000152."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal 8.5 y 9.0 es vulnerable a secuencias de comandos de sitios cruzados. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la IU Web alterando así la funcionalidad potencialmente prevista dirigida a la divulgación de credenciales dentro de una sesión de confianza. Referencia IBM #: 2000152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97CDB5F-2EA4-41E8-857B-5D76004C60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC1C53-61B8-41EC-B99D-1100D29F3992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000152",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97075",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038146",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1142",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-27T22:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM Reference #: 1998874."
      }, {
        "lang" : "es",
        "value" : "IBM Kenexa LCMS Premier en Cloud 9.x y 10.0 podrían permitir a un atacanter remoto obtener información sensible, provocado por el fallo para establecer el indicador seguro para la cookie de sesión en modo SSL. Interceptando esta transmisión dentro de una sesión HTTP, un atacante podría explotar esta vulnerabilidad para capturar la cookie y obtener información sensible. Referencia IBM #: 1998874."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5A416C-F511-4016-B04E-1C8030755234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424A977D-F0E8-4A5E-974A-62676F17599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D6409-70BC-4ED0-A9A9-1A83EE61719D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2557BE-4B29-4125-A39A-287F9F9FB6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764D4D62-19BA-4DE7-A2D8-233C45CA26B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3037BB6F-26C8-4F39-9FB5-1EF592E46B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386AA38-B144-43F7-9790-8C79B5FC88E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA364F9B-AE53-402F-8FA9-EFDB45435964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39991639-4A05-4AE8-B793-44A7B60F84F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998874",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97081",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1143",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-27T22:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874."
      }, {
        "lang" : "es",
        "value" : "IBM Kenexa LCMS Premier on Cloud 9.x y 10.0 podrían permitir a un atacanter remoto obtener información sensible, provocado por el fallo para habilitar adecuadamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información sensible utilizando técnicas man in the middle. Referencia IBM #: 1998874."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5A416C-F511-4016-B04E-1C8030755234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424A977D-F0E8-4A5E-974A-62676F17599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D6409-70BC-4ED0-A9A9-1A83EE61719D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2557BE-4B29-4125-A39A-287F9F9FB6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764D4D62-19BA-4DE7-A2D8-233C45CA26B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3037BB6F-26C8-4F39-9FB5-1EF592E46B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386AA38-B144-43F7-9790-8C79B5FC88E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA364F9B-AE53-402F-8FA9-EFDB45435964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:kenexa_lcms_premier:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39991639-4A05-4AE8-B793-44A7B60F84F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998874",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97079",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1153",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-27T22:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference #: 1999563."
      }, {
        "lang" : "es",
        "value" : "IBM TRIRIGA Report Manager 3.2 hasta la versión 3.5 contiene una vulnerabilidad que podrían permitir a un usuario autenticado ejecutar acciones a las que no tienen acceso. Referencia IBM #: 1999563."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999563",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97066",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-28T01:59:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through 2.1.5+deb1+cvs20081104-13.1 on Debian, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1 on Ubuntu 14.04 LTS, and eject before 2.1.5+deb1+cvs20081104-9ubuntu0.1 on Ubuntu 12.04 LTS."
      }, {
        "lang" : "es",
        "value" : "Dispositivo dmcrypt-get_ , como se envía en el paquete de eyección de Debian y Ubuntu, no comprueba el valor devuelto de la (1) setuid o (2) la función setgid, lo que podría provocar que dmcrypt-get-device ejecute el código, que estaba destinado a ejecutarse como usuario no privilegiado, como root. Esto afecta expulsar hasta la versión 2.1.5 + deb1 + cvs20081104-13.1 en Debian, expulsar en versiones anteriores a 2.1.5 + deb1 + cvs20081104-13.1ubuntu0.16.10.1 en Ubuntu 16.10, expulsar en versiones anteriores a 2.1.5 + deb1 + cvs20081104-13.1ubuntu0 .16.04.1 en Ubuntu 16.04 LTS, expulsar en verisones anteriores a 2.1.5 + deb1 + cvs20081104-13.1ubuntu0.14.04.1 en Ubuntu 14.04 LTS, y expulsar en versiones anteriores a 2.1.5 + deb1 + cvs20081104-9ubuntu0.1 en Ubuntu 12.04 LTS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3823",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97154",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1673627",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3246-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3823",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1673627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3246-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0881",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-03-28T02:59:01.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server."
      }, {
        "lang" : "es",
        "value" : "Un error en la implementación de una función de suscripción automática en la ruta check_stream_exists del servidor de aplicaciones de chat en grupo Zulip en versiones anteriores a 1.4.3 permitió a un usuario autenticado suscribirse a un flujo privado que debería haber requerido una invitación de un miembro existente para unirse. El problema afecta a todas las versiones liberadas anteriormente del servidor Zulip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "C798D82E-5E3A-4784-9D67-3977B15FE8D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97159",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0882",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-03-28T02:59:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC."
      }, {
        "lang" : "es",
        "value" : "Multiples versiones de GitLab exponen credenciales de usuario confidenciales al asignar un usuario a una solicitud de emisión o de combinación. Una correción fue incluida en las versiones 8.15.8, 8.16.7 y 8.17.4, que se publicaron el 20 de marzo de 2017 a las 23:59 UTC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6ACB05-8D9C-4ECA-B16B-C921E4FD31DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A9A324-CAAF-44E2-ADC0-E53AE2A7E938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B02581-E578-4E7F-96C9-4F7A96BE7860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D04194-FB0E-453E-B929-D1325DA16A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557FA9F7-F3EC-488C-95F7-C5C46193FAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38D462-28F8-4356-B80D-7BEB45051E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB1E9DA-044D-4C0F-B9D2-7968EEAC1E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "009D7D10-9596-4BDE-8316-7F12C2661DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AADF57A-A54C-4FE9-9DCB-B7FD3C961BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4C899C-79DD-4BF0-A47F-AC7BDCB0E9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193016A1-7935-43C3-99DF-0DA2810DBDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3D7D48-E172-4F2F-8307-F251B52B175F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB84AB58-030E-4D9C-80FC-F95D9A9F89C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA814A1-FD0B-4E47-844A-285E379843F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A269B0E-7DEC-45BA-8F81-26D38DD10272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671B6F4B-DD3F-4E1A-9CE4-A6F9381BC4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C232B818-420C-4ED6-AB7C-FB1605B18984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36543899-741F-4C1D-9E40-653D256F5FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41E3701-D240-4B18-919B-E2B64950FCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7829B6-98E9-4364-9A2E-2DFD61C3265F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAC2DE6-B831-4007-993B-A09174A03287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684B8D23-4FFF-4B51-A2B4-B92B2F2FFD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376C0CB-F443-40CD-92DE-E2A753BBCB7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA526583-A266-41A9-B692-189FB4E04DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9C7F22-2BAC-4598-9802-E00A889A776B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF796E-AC2A-4960-81E6-988FE2F8F889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E538AD7-ED6B-4092-96A5-FC3C60433BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8105E28D-A21C-4C89-8235-0292F3D1DCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E64274-D2C0-4CE2-986C-9DA47D0CF14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C40FEF39-FBD8-49D3-ACB5-DA4CE6275997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD032AA-5160-4446-8256-BF3993C0C6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F7D77B-E9F9-429C-9000-E4EB8D6C6E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B3C6A7-EB60-41DA-AB67-CB5CF93B0A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E47F6A-A7E1-4876-8C05-329959522C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF6FC6C-2489-4798-8143-985C2101CDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126EE901-4DCB-4404-9B63-91692569A9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D830B0CD-050C-43BE-8D5C-896B8EE8CBC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1A1D52-0962-4330-B81D-B85FCA38F5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FF90DE-8982-4F56-8444-11D6C920646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E67A7C-962E-49EE-8B4C-86D764770EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE48CAF-F691-4409-96F9-CBB3903D251D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B07763-013A-48EE-AFB7-3CBB3DFAD60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDE7E4A-12A3-46A6-AE35-075247CF1226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C2EAC-68C0-4444-A366-238A54A96484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C1AA52-622D-4867-AB95-C64DDC185454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572A743D-ACAD-43B4-AD99-6C9DFE48A870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0915C33D-41C1-43EB-BA21-D6037362EE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1965736-D73F-44DC-BA29-D992CCEA9657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E274B52-360B-4F06-B307-89C6D044E444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F132ED-1CC0-4A58-988F-B61D69FEB99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663040-C06C-4C11-9384-6DE1DE64A8C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20B405B-38EB-4F10-AAE3-700EBB5F5E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9BEA77-CE45-4F92-B525-B1544B5B14A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA429762-A81D-4C40-8A66-1EF4E39DCFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C06917C-E634-4C67-8DB9-7C98DA7E3883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7CEF22-F432-4D22-87C2-1E13BEBCDE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FFBA26-4229-4E61-9B0E-A6E5E09FDB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A74068-14F2-4976-86DE-818683A1FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045FF5B3-7AE0-48B0-8266-CB515BC9B20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97157",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/",
        "source" : "support@hackerone.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/commit/43f5a2739dbf8f5c4c16a79f98e2630888f6b5d1",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/commit/a70346fc6530aa28a98e4aa4cf0f40e2c3bcef6b",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/commit/cdf396f456472ef8decd9598daa8dc0097cd30c5",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/29661",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/commit/43f5a2739dbf8f5c4c16a79f98e2630888f6b5d1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/commit/a70346fc6530aa28a98e4aa4cf0f40e2c3bcef6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/commit/cdf396f456472ef8decd9598daa8dc0097cd30c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/29661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-28T06:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensitive information from the kernel's internal socket data structures or cause a denial of service (out-of-bounds read) via crafted system calls, related to net/core/skbuff.c and net/socket.c."
      }, {
        "lang" : "es",
        "value" : "La pila TCP en el kernel de Linux hasta la versión 4.10.6 no maneja adecuadamente la funcionalidad SCM_TIMESTAMPING_OPT_STATS, lo que permite a usuarios locales obtener información sensible de la estructuras internas de datos del socket del kernel o provocar una denegación de servicio (lectura fuera de límites) a través de llamadas al sistema manipuladas, relacionado con net/core/skbuff.c y net/socket.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.6",
            "matchCriteriaId" : "355E978C-AFCC-4B61-A4BC-59CCD6CF35C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ef1b2869447411ad3ef91ad7d4891a83c1a509a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8605330aac5a5785630aec8f64378a54891937cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97141",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4ef1b2869447411ad3ef91ad7d4891a83c1a509a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8605330aac5a5785630aec8f64378a54891937cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/3/15/485",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/740636/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/740639/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ef1b2869447411ad3ef91ad7d4891a83c1a509a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8605330aac5a5785630aec8f64378a54891937cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4ef1b2869447411ad3ef91ad7d4891a83c1a509a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8605330aac5a5785630aec8f64378a54891937cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/3/15/485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/740636/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/740639/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T00:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3."
      }, {
        "lang" : "es",
        "value" : "El servidor rancher en Rancher Labs 1.2.0+ es vulnerable a usuarios autenticados deshabilitando el control de acceso a través de la llamada a una API. Esto está solucionado en las versiones rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3 y rancher/server:v1.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "580D8F0F-A03C-4A69-9C0C-E654ED4C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.5",
            "matchCriteriaId" : "29D5AF98-89DB-4165-853C-52C9F78E0E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "66E61380-F2C3-4B48-A870-7CD66F7194ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "1.5.3",
            "matchCriteriaId" : "3410A7D1-4FD4-47EA-B68B-A7FA2C24548F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97180",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rancher/rancher/issues/8296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rancher/rancher/issues/8296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2686",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-03-29T01:59:01.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information."
      }, {
        "lang" : "es",
        "value" : "Siemens RUGGEDCOM ROX I (todas las versiones) contiene una vulnerabilidad que podría permitir a un usuario autenticado leer archivos arbitrarios hasta interfaz web en el puerto 10000/TCP y acceder a la información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "AE0398E8-031B-4072-A3A5-BF3A2A361AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2687",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-03-29T01:59:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link."
      }, {
        "lang" : "es",
        "value" : "Siemens RUGGEDCOM ROX I (todas las versiones) contiene una vulnerabilidad en el servidor web integrado en el puerto 10000/TCP que es propenso a reflejar ataques de envio de secuencias de comandos en sitios cruzados si un usuario desprevenido es inducido a hacer clic en un enlace malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "AE0398E8-031B-4072-A3A5-BF3A2A361AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2688",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-03-29T01:59:01.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF."
      }, {
        "lang" : "es",
        "value" : "El servidor web integrado en Siemens RUGGEDCOM ROX I (todas las versiones) en el puerto 10000/TCP podría permitir a atacantes remotos realizar acciones con los privilegios de un usuario autenticado, siempre que el usuario objetivo tenga una sesión activa e inducido a hacer clic en un enlace malicioso o visitar un sitio web malicioso, también conocido como CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "AE0398E8-031B-4072-A3A5-BF3A2A361AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2689",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-03-29T01:59:01.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings."
      }, {
        "lang" : "es",
        "value" : "Siemens RUGGEDCOM ROX I (todas las versiones) permiten a un usuario autenticado evitar las restricciones de acceso en la interfaz web en el puerto 10000 / TCP para obtener acceso privilegiado al sistema de archivos o cambiar la configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "AE0398E8-031B-4072-A3A5-BF3A2A361AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6864",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-03-29T01:59:02.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El servidor web integrado en Siemens RUGGEDCOM ROX I (todas las versiones) en el puerto 10000/TCP podría permitir a un usuario autenticado realizar ataques de envío de secuencias de comandos en sitios cruzados almacenados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "AE0398E8-031B-4072-A3A5-BF3A2A361AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T02:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device."
      }, {
        "lang" : "es",
        "value" : "La función vmw_surface_define_ioctl en drivers/gpu/drm/vmwgfx/vmwgfx_surface.c en el kernel de Linux hasta la versión 4.10.6 no valida adicción de ciertos niveles de datos, lo que permite a usuarios locales activar un desbordamiento de entero y lectura de fuera de límites, y provocar una denegación de servicio (bloqueo del sistema o caída) o posiblemente ganar privilegios, a través de una llamada ioctl manipulada para un dispositivo /dev/dri/renderD*."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "1E11112F-E4CD-43B0-B618-3700EEF018D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.107",
            "matchCriteriaId" : "314F9C88-C8E1-46EF-8119-538C824ED137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.74",
            "matchCriteriaId" : "75647580-464B-4AEF-8DE2-F17D1748F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "50A4478F-EC43-46DF-AE23-9298AE3F8892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.50",
            "matchCriteriaId" : "853F13A0-776A-4078-B05B-7C1E20D4973D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.40",
            "matchCriteriaId" : "70E79011-B658-40F2-B406-D3619DEBFACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.61",
            "matchCriteriaId" : "302413F6-0AE4-4B3E-AE52-A18D7B9999BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.22",
            "matchCriteriaId" : "5E89DA2A-0D93-4EFD-9503-5EC79F1F71E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.10",
            "matchCriteriaId" : "A008BD55-0D97-4C7C-B2AD-C7088DD5F584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97177",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1436798",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1436798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/dri-devel/2017-March/137094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2655",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-29T05:59:00.160",
      "lastModified" : "2023-11-07T02:43:53.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T05:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.2.2+, there is XSS in the Course summary filter of the \"Add a new course\" page, as demonstrated by a crafted attribute of an SVG element."
      }, {
        "lang" : "es",
        "value" : "En Moodle 3.2.2+, hay XSS en el filtro de resumen del curso de la página \"agregar un nuevo curso\", como lo demuestra un atributo manipulado de un elemento SVG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daimacn.com/index.php/post/12.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.daimacn.com/post/12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.daimacn.com/index.php/post/12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.daimacn.com/post/12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T14:59:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file."
      }, {
        "lang" : "es",
        "value" : "Impresoras industriales Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43 y PC42 en versiones anteriores a 10.11.013310 y 10.12.x en versiones anteriores a 10.12.013309 tienen /usr/bin/lua setuid instalado en la cuenta itadmin, lo que permite a usuarios locales conducir un ataque BusyBox jailbreak y obtener privilegios de root sobrescribiendo el archivo /etc/shadow."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pc23_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "122F856E-E8E7-4BFB-AA97-E3C50D811E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pc42_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "1A2FDF1F-B7BF-492D-8FFB-8D40B805DC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pc43_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "60E5DE7C-9B42-4125-A019-02B3B5499DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pd43_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "5018410C-9B51-460B-B237-761C4549E314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pm23_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "16D913D8-C155-4F08-B341-72A986D7D29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pm42_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "FF398612-ACC6-4D8E-8DE0-1354FF98F68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:intermec_pm43_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.10.011406",
            "matchCriteriaId" : "278B804E-9E20-40D3-BF11-80FB2CB7DE35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pc23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A76805C2-7081-40D3-8400-CF71AD00F897"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pc42:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65750656-5AF7-4E3B-A0CE-EC1B1C784A4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pc43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BAFBC9-F93C-40FE-94EB-563B75C96942"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pd43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691EEB28-DA89-4CE8-AB35-50AA05662230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pm23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34989BBF-1E3C-4636-90A0-C603DAEE8DE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pm42:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0A4C6C-4858-4856-9599-8A7F980C6E1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:intermec_pm43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD95F008-3D2C-4E2C-978A-C101441CBE91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97236",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41754/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41754/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T14:59:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XSS en el router NetComm NB16WV-02 con el firmware NB16WV_R0.09 permite a los usuarios autenticados remotos inyectar secuencias de comandos web o HTLM arbitrarios a través del parámetro a S801F0334 hdd.htm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netcomm:nb16wv-02_firmware:nb16wv_r0.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9070382-6CDA-453D-8155-47067EA14291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netcomm:nb16wv-02:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DD5422-B987-4C8A-93D0-9DEFC8FA991E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/75",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97161",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T14:59:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en la pila de la red de MikroTik Version 6.38.5 liberada 09-03-2017 podría permitir a un atacante remoto no autenticado agotar toda la CPU disponible a través de una inundación de paquetes TCP RST, evitando que el enrutador afectado acepte nuevas conexiones TCP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.38.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF33501-CBA2-4ED1-9EF9-3FDCF8472BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97266",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017030242",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41752/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017030242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41752/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T15:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), distribuida en GNU Binutils 2.28, tiene una lectura no válida (de tamaño 8) porque el código para emitir relocs (función bfd_elf_final_link en bfd / elflink.c) no comprueba el formato del archivo de entrada en después de intentar leer el encabezado de sección reloc de ELF. La vulnerabilidad provoca una caída del programa GNU linker (ld)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97217",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20908",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T15:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash."
      }, {
        "lang" : "es",
        "value" : "\"La librería Binary File Descriptor (BFD) (también conocida como libbfd), distribuida en GNU Binutils 2.28, tiene una función de aout_link_add_symbols en bfd / aoutx.h que es vulnerable a sobre lectura de búfer basado en memoria dinámica (oof-by-one) debido a una comprobación incompleta de los desplazamientos de cadena no válidos durante la carga de símbolos, lo que lleva a una caída del programa GNU linker (ld). \""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97219",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20909",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T15:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), distribuida en GNU Binutils 2.28, tiene una función aout_link_add_symbols en bfd/aoutx.h que tiene una vulnerabilidad off-by-one porque no comprueba cuidadosamente el desplazamiento de cadena. La vulnerabilidad podría provocar una caída del programa GNU linker (ld)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97218",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20924",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T15:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), distribuida en GNU Binutils 2.28, tiene una función swap_std_reloc_out en bfd/aoutx.h que es vulnerable a una lectura no válida (del tamaño 4) debido a que faltan comprobaciones para relocalizaciones que no pudieron ser reconocidas. Esta vulnerabilidad provoca caída de las utilidades de Binutils como strip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20921",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T15:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), distribuida en GNU Binutils 2.28, es vulnerable a una lectura no válida (de tamaño 4) debido a falta de un cheque (en la función find_link) para los encabezados nulos en versiones anteriores a intentar emparejarlos. Esta vulnerabilidad provoca caída de las utilidades de Binutils como strip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97213",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20922",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T15:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), distribuida en GNU Binutils 2.28, es vulnerable a lecturas inválidas (de tamaño 8) debido a la falta de un cheque (en la función copy_special_section_fields) para el campo sh_link inválido en versiones anteriores a intentarseguirlos. Esta vulnerabilidad provoca caída de las utilidades de Binutils como strip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97215",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20931",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=20931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T20:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox."
      }, {
        "lang" : "es",
        "value" : "\"Al ejecutar un programa a través del sandbox bubblewrap, la sesión nonpriv puede escapar a la sesión padre utilizando el ioctl de TIOCSTI para insertar caracteres en el búfer de entrada del terminal, permitiendo a un atacante escapar del sandbox. \""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectatomic:bubblewrap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.5",
            "matchCriteriaId" : "5521CECD-1BBD-4158-B5D7-3B79004D8E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2020/07/10/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/17/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97260",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1411811",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/projectatomic/bubblewrap/issues/142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/14/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/07/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1411811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/projectatomic/bubblewrap/issues/142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T20:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information or (even more seriously) execute powerful commands on the web server which can lead to a full compromise of the system via Directory Path Traversal, as demonstrated by reading core-emli/Storage. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0."
      }, {
        "lang" : "es",
        "value" : "HTTP Exploit en el portal eMLi en AuroMeera Technometrix Pvt. Ltd. eMLi permite a un atacante ver información restringida o (aún más seriamente) ejecutar comandos poderosos en el servidor web lo que puede llevar a un compromiso total del sistema a través de Path Path Directory, como lo demuestra la lectura core-emli/Storage. Las versiones afectas son eMLi School Management 1.0, eMLi College Campus Management 1.0, y eMLi University Management 1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auromeera:emli:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EEF9FE-FE5D-454A-9B43-A9A2CFEE8722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97255",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sudoat.blogspot.in/2017/03/path-traversal-vulnerability-in-emli.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sudoat.blogspot.in/2017/03/path-traversal-vulnerability-in-emli.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T20:59:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls."
      }, {
        "lang" : "es",
        "value" : "La función packet_set_ring en el archivo net/packet/af_packet.c en el kernel de Linux hasta versión 4.10.6, no comprueba apropiadamente ciertos datos de tamaño de bloque, lo que permite a los usuarios locales causar una denegación de servicio (error de firma de enteros y escritura fuera de límites), y alcanzar privilegios (si se mantiene la capacidad CAP_NET_RAW), por medio de llamadas de sistema diseñadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "D9E99162-FBEA-42EC-ACAE-44EC9FA5D43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.107",
            "matchCriteriaId" : "314F9C88-C8E1-46EF-8119-538C824ED137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.74",
            "matchCriteriaId" : "75647580-464B-4AEF-8DE2-F17D1748F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "50A4478F-EC43-46DF-AE23-9298AE3F8892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.52",
            "matchCriteriaId" : "8104AAC1-9700-4372-8E11-37B09309A76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.66",
            "matchCriteriaId" : "BF5669AA-0250-493C-9D38-F0B563103943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.26",
            "matchCriteriaId" : "92A58CFB-13B7-4E99-8A14-A0308E4F126A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.14",
            "matchCriteriaId" : "90895EF1-9DC7-4E47-A937-405661F7A44B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97234",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1298",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1308",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/744811/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/744812/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/744813/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41994/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44654/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/744811/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/744812/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/744813/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41994/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44654/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4977",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-03-29T21:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior to 1.3.1.52 contain a sensitive information disclosure vulnerability that could potentially be exploited by malicious users to compromise an affected system."
      }, {
        "lang" : "es",
        "value" : "EMC RSA Archer Security Operations Management con RSA Unified Collector Framework versiones anteriores a 1.3.1.52 contienen una vulnerabilidad de divulgación de información confidencial que podría ser explotada potencialmente por usuarios malintencionados para comprometer un sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_security_operations_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1.51",
            "matchCriteriaId" : "981FB56D-504C-4542-83A3-CC9DD874A63C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540339/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97225",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038162",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540339/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4980",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-03-29T21:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected system. Affected versions are 7.1.0 - 7.1.1.10, 7.2.0 - 7.2.1.3, and 8.0.0 - 8.0.0.1."
      }, {
        "lang" : "es",
        "value" : "EMC Isilon OneFS es afectada por una vulnerabilidad de recorrido transversal que potencialmente puede ser explotada por los atacantes para comprometer el sistema afectado. Las versiones afectadas son 7.1.0 - 7.1.1.10, 7.2.0 - 7.2.1.3 y 8.0.0 - 8.0.0.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E706E435-8E45-4ACB-8BBC-5AC458378D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE2D48E-39E8-42E6-8E82-AB9FA0547BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDB97FE-6470-4AFE-A3B0-B664F132A190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A669BE6B-726F-4F34-A009-798E32FF6895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE74624-A44D-4837-AD36-DBF3E93D5ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CBA2E5-6E46-4922-B56B-3F8C578074B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C22C93-9069-406E-9A14-03F20AD34D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD30754-489E-42BA-8B51-1FEB5DC30912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92501AC-0588-4051-9568-52074E8A2D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7407DAA-7740-45B0-BA99-03794C8B1215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E804DB-40F0-4FBF-8A85-A49767DC4022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D645B5EF-4333-48BF-960A-03AA2D624376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302422CE-3C0A-44E6-83ED-51EC65482B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F551F88-3176-4E92-AE7A-FCAB3A220A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26144325-6722-48C1-A0C2-BB78EF9BDE60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87E8EEE-42AA-48B3-ABBE-9CE7FD2C275B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F09B14D-2C84-47F2-8F7F-6F8DAEFFF106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1B998-AEEE-4123-82F3-72D84EF681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0828B061-28B4-4AEE-BBB9-AF287B90713C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064C487D-517E-4F7B-A182-5DF287477652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600B1F-C307-457B-BC84-73339A64DF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB53E775-7A57-41D2-A93D-5F96D72622D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F44A3-8C09-49EE-8545-51C57F36B801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540338/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97222",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540338/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-29T21:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en Import Command en SyncBreeze en versiones anteriores a la 10.6, DiskSorter en versiones anteriores a la 10.6, DiskBoss en versiones anteriores a la 8.9, DiskPulse en versiones anteriores a la 10.6, DiskSavvy en versiones anteriores a la 10.6, DupScout en versiones anteriores a la 10.6 y VX Search en versiones anteriores a la 10.6 permite que atacantes ejecuten código arbitrario mediante un archivo XML que contiene un atributo con nombre largo de un elemento classify."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:diskboss:7.8.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6351E0B1-783F-4CF5-9502-BB9FFA6DAFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:disksorter:9.5.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6389B596-7090-4F49-B0BB-62815AC21C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:9.5.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DC13BC94-05D2-4355-8220-824CB43CE3A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.diskboss.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.diskpulse.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.disksavvy.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.disksorter.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dupscout.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97237",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.syncbreeze.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vxsearch.com/news.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41771/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41772/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41773/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43875/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44157/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.diskboss.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.diskpulse.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.disksavvy.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.disksorter.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dupscout.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.syncbreeze.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vxsearch.com/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41771/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41773/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43875/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44157/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses \"into outfile\" to create a backdoor program."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en XOOPS 2.5.7.2 y otras versiones en versiones anteriores a 2.5.8.1 permite a administradores remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro url para findusers.php. Un ejemplo de ataque utiliza \"into outfile\" para crear un programa de puerta trasera."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D6FAC1-B5FB-4B3C-BD59-E56996090DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4B6BBE-5DB1-474F-A9CC-7717C6F58CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BA9895-4753-4BBF-9D92-7C101FAF369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97230",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/jk1986/3b304ac6b4ae52ae667bba380c2dce19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/jk1986/3b304ac6b4ae52ae667bba380c2dce19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Siklu EtherHaul en versiones anteriores a 7.4.0 son vulnerables a una vulnerabilidad de ejecución remota de comandos (RCE). Esta vulnerabilidad permite a un atacante remoto ejecutar comandos y recuperar información tal como nombres de usuario y contraseñas en texto plano desde los dispositivos sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siklu:etherhaul_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.0",
            "matchCriteriaId" : "C3BC133A-475B-4063-B6B9-13C52667748A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siklu:etherhaul-5500fd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129AECB7-8446-43D4-8D68-6B889DEB9E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siklu:etherhaul_500tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C63B8C-013D-4C6B-9AE0-B93F9B48B7DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siklu:etherhaul_60ghz_v-band_radio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677C7A13-EE9C-4423-A2CB-7A631B03AA32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siklu:etherhaul_70\\/80ghz_gigabit_radio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B64120-E688-4F85-9425-D1F62AE9EB7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siklu:etherhaul_70\\/80ghz_multi-gigabit_e-band_radio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDAA518-3237-47A6-9C2E-DF1506262939"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siklu:etherhaul_70ghz_e-band_radio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3970FA0-7CBD-484D-A580-CD4A74C63075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/155127766533/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97227",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.iancaling.com/post/155127766533/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service (cookie quota exhaustion), or conduct HTTP Response Splitting attacks with resultant XSS, via an invalid parameter value."
      }, {
        "lang" : "es",
        "value" : "setup/controllers/language.php en MODX Revolution 2.5.4-pl y versiones anteriores no restringe adecuadamente el parámetro language, lo que permite a atacantes remotos llevar a cabo ataques de bombardeo de cookies y provocar una denegación de servicio (agotamiento de la cuota de cookie), o llevar a cabo ataques HTTP Response Splitting con XSS resultante, a través de un valor de parámetro no válido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.4",
            "matchCriteriaId" : "8466DBC5-DA7B-4F9E-BA66-45EF4D575BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the config_key parameter to the setup/index.php?action=welcome URI."
      }, {
        "lang" : "es",
        "value" : "setup/controllers/welcome.php en MODX Revolution 2.5.4-pl y versiones anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través del parámetro config_key para la URI setup/index.php?action=welcome."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.4",
            "matchCriteriaId" : "8466DBC5-DA7B-4F9E-BA66-45EF4D575BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "Las funcionalidades (1) update y (2) package-installation features en MODX Revolution 2.5.4-pl y versiones anteriores no verifican certificados X.509 de servidores SSL, lo que permite a atacantes man-in-the-middle falsificar servidores y activar la ejecución de código arbitrario a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.4",
            "matchCriteriaId" : "8466DBC5-DA7B-4F9E-BA66-45EF4D575BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code by leveraging the lack of the HTTPS protection mechanism."
      }, {
        "lang" : "es",
        "value" : "Las funcionalidades (1) update y (2) package-installation en MODX Revolution 2.5.4-pl y versiones anteriores utiliza por defecto http://rest.modx.com, lo que permite a atacantes man-in-the-middle suplantar servidores y desencadenar la ejecución de código arbitrario aprovechando la falta del mecanismo de protección HTTPS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.4",
            "matchCriteriaId" : "8466DBC5-DA7B-4F9E-BA66-45EF4D575BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T07:59:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter."
      }, {
        "lang" : "es",
        "value" : "setup/templates/findcore.php en MODX Revolution 2.5.4-pl y versiones anteriores permite a atacantes remotos ejecutar código arbitrario PHP a través del parámetro core_path."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.4",
            "matchCriteriaId" : "8466DBC5-DA7B-4F9E-BA66-45EF4D575BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5184",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-03-30T17:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration)."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad en NetIQ Sentinel Server 8.0 en versiones anteriores a 8.0.1 que pueden permitir la fuga de información (enumeración de cuentas)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:sentinel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.0.1",
            "matchCriteriaId" : "E5EE87A8-A6EA-43C9-A38B-C0BF9B2294E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97262",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7018753",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-15",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7018753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5185",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-03-30T17:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad en NetIQ Sentinel Server 8.0 en versiones anteriores a 8.0.1 que pueden permitir la denegación remota de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:sentinel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.0.1",
            "matchCriteriaId" : "E5EE87A8-A6EA-43C9-A38B-C0BF9B2294E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97267",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7018753",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-15",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7018753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T17:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304."
      }, {
        "lang" : "es",
        "value" : "En Sophos Web Appliance (SWA) en versiones anteriores a 4.3.1.2, una sección de la interfaz de la máquina responsable de generar informes era vulnerable a la inyección de comandos remotos a través de funciones, vulnerabilidad también conocida como NSWA-1304."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1.1",
            "matchCriteriaId" : "EA5CEDA7-BC64-4628-9361-E93033BAEF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42332/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42332/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T17:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314."
      }, {
        "lang" : "es",
        "value" : "En Sophos Web Appliance (SWA) en versiones anteriores a 4.3.1.2, una sección de las utilidades de configuración de la máquina para agregar (y detectar) servidores Active Directory era vulnerable a inyección de comandos remotos, vulnerabilidad también conocida como NSWA-1314."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1.1",
            "matchCriteriaId" : "EA5CEDA7-BC64-4628-9361-E93033BAEF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T17:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303."
      }, {
        "lang" : "es",
        "value" : "En Sophos Web Appliance (SWA) en versiones anteriores a 4.3.1.2, una sección de la interfaz de la máquina responsable de generar informes era vulnerable a la inyección de comando remoto a través del parámetro token, vulnerabilidad también conocida como NSWA-1303."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1.1",
            "matchCriteriaId" : "EA5CEDA7-BC64-4628-9361-E93033BAEF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T17:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310."
      }, {
        "lang" : "es",
        "value" : "En Sophos Web Appliance (SWA) en versiones anteriores a 4.3.1.2, podría ocurrir la fijación de sesión, vulnerabilidad también conocida como NSWA-1310."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1.1",
            "matchCriteriaId" : "EA5CEDA7-BC64-4628-9361-E93033BAEF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/02/28/qsa-2017-02-28/qsa-2017-02-28.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/02/28/qsa-2017-02-28/qsa-2017-02-28.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T18:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a \"Component error: login challenge!\" message. The second JSON object encountered has a result indicating a successful admin login."
      }, {
        "lang" : "es",
        "value" : "En Sophos Web Appliance (SWA) en versiones anteriores a 4.3.1.2, podría ocurrir la fijación de sesión, vulnerabilidad también conocida como NSWA-1310."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ip_camera_firmware:3.200.0001.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E795BBE9-23C9-4F02-9BEB-B3CA735CFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1DB735-F54C-4E47-BC00-C246E4C5911B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97263",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/anonymous/16aca69b7dea27cb73ddebb0d9033b02",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/anonymous/16aca69b7dea27cb73ddebb0d9033b02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-30T23:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/renderD* device."
      }, {
        "lang" : "es",
        "value" : "La función vmw_gb_surface_define_ioctl en drivers/gpu/drm/vmwgfx/vmwgfx_surface.c en el kernel de Linux hasta la versión4.10.7 no valida ciertos niveles de datos, lo que permite a usuarios locales provocar una denegación de servicio (colgar sistema) a través de una llamada al archivo ioctl manipulado para un dispositivo /dev/dri/renderD*."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.7",
            "matchCriteriaId" : "809E65A8-1DC9-48C1-9DFB-14ADCF1DF50C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=149086968410117&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97257",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1437431",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/dri-devel/2017-March/137429.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=149086968410117&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1437431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/dri-devel/2017-March/137429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2647",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-03-31T04:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c."
      }, {
        "lang" : "es",
        "value" : "El subsistema KEYS en el kernel de Linux en versiones anteriores a 3.18 permite a los usuarios locales obtener privilegios o provocar una denegación de servicio (referencia a puntero NULL y bloqueo del sistema) a través de vectores que implican un valor NULL para un cierto campo de coincidencia, relacionado con la función keyring_search_iterator en keyring.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.17.8",
            "matchCriteriaId" : "D096AE24-5BB5-4ED2-8D2B-DC2AE8012E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97258",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2437",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1428353",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3849-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3849-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1428353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3849-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3849-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS en la página Informe de configuración de MantisBT (adm_config_report.php) permite a atacantes remotos inyectar código arbitrario a través de un parámetro 'acción' creado. Esto se fija en 1.3.8, 2.1.2 y 2.2.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC65E660-1F4A-4040-8C4D-197BD9081E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8D4B34-E00E-4137-8695-6C9C74980DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C8D0CC-FB77-43B5-8A50-7F5C462E9771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B09C56-E71E-4272-A47E-9CC530EEEA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7323557C-F23F-4A83-ADAD-889E3C8B0C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11779871-2959-404C-A8A1-C35DACC3EC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB766F-D8E9-4D1A-A877-2BF75C1E0D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEDA19B-58F9-4416-AF6A-8F1639D665CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A1E879-1D21-418E-A72E-287C7E977714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1519517-765C-4426-8C09-51EBD699EE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B537D8BB-944B-4B92-B48D-0CA5A2D01372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "541BD5B7-9F88-4B6A-A9D5-3BB182661EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD43A80-1179-426B-AF21-AE8B29CA1E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F39D6AB1-ECA5-4CE6-BBB3-570758AA715A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5202AE86-61A0-4146-BB18-5CD4F38A880C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2965D7-794C-4451-9DB7-B5561B5E3254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39492D12-1A13-43CE-84A7-F5CCFB87D612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6AF670-28C3-4D7E-9EB4-E0B366CE818E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021CC8F4-B310-4DBF-9D50-B8A357158E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E7205-12E1-4C57-A120-91C4C0760305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262EC0CC-0716-4AED-9255-13288A297879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2550F1FD-5104-4BAA-80F6-C6202D7326B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDE5FC-B891-4ACA-BCAB-83EB9D49C91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/03/30/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22537",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97252",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/30/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) allows remote attackers to inject arbitrary code through a crafted 'type' parameter, if Content Security Protection (CSP) settings allows it. This is fixed in 1.3.9, 2.1.3, and 2.2.3. Note that this vulnerability is not exploitable if the admin tools directory is removed, as recommended in the \"Post-installation and upgrade tasks\" of the MantisBT Admin Guide. A reminder to do so is also displayed on the login page."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS en la página MantisBT Move Attachments (move_attachments_page.php, parte de las herramientas de administración) permite a atacantes remotos inyectar código arbitrario mediante un parámetro 'type' manipulado si la configuración de CSP lo permite. Esto se fija en 1.3.9, 2.1.3 y 2.2.3. Tenga en cuenta que esta vulnerabilidad no es explotable si se elimina el directorio de herramientas de administración, como se recomienda en las \"Tareas posteriores a la instalación y actualización\" de la guía de administración de MantisBT. También se muestra un recordatorio para hacerlo en la página de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75A6F79-C5D5-4612-9976-B54664A5E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C54ABCB-AD1B-4C34-927A-D9D560EA4C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8FB8B-C009-4BF5-B3C3-142FFD0BD5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2E2E1A-B240-476F-8247-67DFFF38D33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3990CAB4-003A-4B10-8516-303C87779C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D355450F-4354-4E0B-BA86-A6BCF0672E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5171F015-E110-49CB-8A51-28E067C9B85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C1AFA6-D7C3-4A74-BBB8-2B7234BD03FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C22EBC7C-093F-4641-A5DE-E63DD9C0F2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC65E660-1F4A-4040-8C4D-197BD9081E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8D4B34-E00E-4137-8695-6C9C74980DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C8D0CC-FB77-43B5-8A50-7F5C462E9771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B09C56-E71E-4272-A47E-9CC530EEEA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7323557C-F23F-4A83-ADAD-889E3C8B0C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11779871-2959-404C-A8A1-C35DACC3EC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB766F-D8E9-4D1A-A877-2BF75C1E0D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEDA19B-58F9-4416-AF6A-8F1639D665CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A1E879-1D21-418E-A72E-287C7E977714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1519517-765C-4426-8C09-51EBD699EE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B537D8BB-944B-4B92-B48D-0CA5A2D01372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "541BD5B7-9F88-4B6A-A9D5-3BB182661EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD43A80-1179-426B-AF21-AE8B29CA1E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F39D6AB1-ECA5-4CE6-BBB3-570758AA715A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5202AE86-61A0-4146-BB18-5CD4F38A880C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2965D7-794C-4451-9DB7-B5561B5E3254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39492D12-1A13-43CE-84A7-F5CCFB87D612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6AF670-28C3-4D7E-9EB4-E0B366CE818E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021CC8F4-B310-4DBF-9D50-B8A357158E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E7205-12E1-4C57-A120-91C4C0760305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262EC0CC-0716-4AED-9255-13288A297879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2550F1FD-5104-4BAA-80F6-C6202D7326B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDE5FC-B891-4ACA-BCAB-83EB9D49C91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89D994-7F93-4839-8A57-F4CD633576E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2154CE53-2DED-4023-96D5-515468E226B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C79C70-F6BE-485D-952A-44E5E9F16D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/03/30/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/30/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted 'config_option' parameter. This is fixed in 1.3.9, 2.1.3, and 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS en la página informe de configuración de MantisBT (adm_config_report.php) permite a atacantes remotos inyectar código arbitrario (si la configuración de CSP lo permite) mediante un parámetro 'config_option' manipulado. Esto se fija en 1.3.9, 2.1.3 y 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC65E660-1F4A-4040-8C4D-197BD9081E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8D4B34-E00E-4137-8695-6C9C74980DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C8D0CC-FB77-43B5-8A50-7F5C462E9771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B09C56-E71E-4272-A47E-9CC530EEEA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7323557C-F23F-4A83-ADAD-889E3C8B0C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11779871-2959-404C-A8A1-C35DACC3EC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB766F-D8E9-4D1A-A877-2BF75C1E0D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEDA19B-58F9-4416-AF6A-8F1639D665CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A1E879-1D21-418E-A72E-287C7E977714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1519517-765C-4426-8C09-51EBD699EE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B537D8BB-944B-4B92-B48D-0CA5A2D01372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "541BD5B7-9F88-4B6A-A9D5-3BB182661EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD43A80-1179-426B-AF21-AE8B29CA1E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F39D6AB1-ECA5-4CE6-BBB3-570758AA715A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5202AE86-61A0-4146-BB18-5CD4F38A880C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2965D7-794C-4451-9DB7-B5561B5E3254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39492D12-1A13-43CE-84A7-F5CCFB87D612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6AF670-28C3-4D7E-9EB4-E0B366CE818E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021CC8F4-B310-4DBF-9D50-B8A357158E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E7205-12E1-4C57-A120-91C4C0760305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262EC0CC-0716-4AED-9255-13288A297879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2550F1FD-5104-4BAA-80F6-C6202D7326B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDE5FC-B891-4ACA-BCAB-83EB9D49C91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89D994-7F93-4839-8A57-F4CD633576E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/03/30/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22579",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97251",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/03/30/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack."
      }, {
        "lang" : "es",
        "value" : "Pixie 1.0.4 permite un ataque XSS de admin/index.php s=login&m="
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1501C613-E97B-41E5-9BC5-8DB1EB31F0DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97270",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97274",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack."
      }, {
        "lang" : "es",
        "value" : "Pixie 1.0.4 permite un ataque XSS admin/index.php s=settings&x="
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1501C613-E97B-41E5-9BC5-8DB1EB31F0DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97264",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack."
      }, {
        "lang" : "es",
        "value" : "Pixie 1.0.4 permite un ataque XSS admin/index.php s=publish&m=static&x= ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1501C613-E97B-41E5-9BC5-8DB1EB31F0DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97274",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack."
      }, {
        "lang" : "es",
        "value" : "Pixie 1.0.4 permite un ataque XSS admin/index.php s=publish&m=dynamic&x="
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1501C613-E97B-41E5-9BC5-8DB1EB31F0DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97268",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T04:59:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack."
      }, {
        "lang" : "es",
        "value" : "Pixie 1.0.4 permite un ataque XSS admin/index.php s=publish&m=module&x="
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1501C613-E97B-41E5-9BC5-8DB1EB31F0DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97259",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3009",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-31T16:59:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 15.020.20042 y en versiones anteriores a 15.006.30244 y en versiones anteriores a 11.0.18 y versiones anteriores tienen una vulnerabilidad explotable de desbordamiento de búfer en el analizador JPEG2000. Una explotación exitosa podría conducir a la divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "79C92CAE-E238-4450-A9D1-6AD35F006BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "A5543934-84E5-4927-850D-ADEFCE150E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "7D2CC936-AACB-42DA-95F6-C2567E209DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "E23E66EF-B335-473B-8895-9F392B9FA1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "DCE94D04-159C-400F-B2E7-532BBFD1B1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "0755CB59-C529-42FF-8CC3-0595D3B440EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97302",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3010",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-03-31T16:59:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 15.020.20042 y en versiones anteriores, 15.006.30244 y en versiones anteriores a 11.0.18 y versiones anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de renderizado. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "79C92CAE-E238-4450-A9D1-6AD35F006BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "A5543934-84E5-4927-850D-ADEFCE150E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "7D2CC936-AACB-42DA-95F6-C2567E209DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.006.30244",
            "matchCriteriaId" : "E23E66EF-B335-473B-8895-9F392B9FA1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndIncluding" : "15.020.20042",
            "matchCriteriaId" : "DCE94D04-159C-400F-B2E7-532BBFD1B1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "0755CB59-C529-42FF-8CC3-0595D3B440EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97306",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1154",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-31T18:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference #: 1999892."
      }, {
        "lang" : "es",
        "value" : "IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, y 5.1.0 podría permitir a un usuario obtener acceso a archivos en el entorno local que no deberían ser vistos por los usuarios de la aplicación. IBM Reference #: 1999892."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A672407B-4966-4A89-BF1B-2644CEAF172B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:algo_one:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A8F72A-746C-49E9-9FF3-06C31C0B22FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:algo_one:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A5BC2B-44B9-4E5E-8307-4A24258C8639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999892",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97248",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1171",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-03-31T18:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference #: 2001083."
      }, {
        "lang" : "es",
        "value" : "La aplicación IBM TRIRIGA Platform 3.3, 3,4, y 3,5 contienen una vulnerabilidad que podría permitir a un usuario autenticado ejecutar acciones de aplicación a las que no tiene acceso. IBM Reference #: 2001083."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97245",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22001083",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22001083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2775",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-03-31T18:59:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabVIEW before 2015 SP1 f7 Patch and 2016 before f2 Patch. A specially crafted VI file can cause a user controlled value to be used as a loop terminator resulting in internal heap corruption. An attacker controlled VI file can be used to trigger this vulnerability, exploitation could lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria explotable en la funcionalidad LvVariantUnflatten en versiones de LabVIEW de 64 bits anterior a versión 2015 SP1 Parche f7 y versiones 2016 anteriores a Parche f2. Un archivo VI especialmente diseñado puede causar que un valor controlado por el usuario sea usado como un terminador de bucle resultando en una corrupción de pila interna. Se puede usar un archivo VI controlado por un atacante para activar esta vulnerabilidad, la explotación podría conllevar a la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ni:labview:16.0.0.49152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710241F0-A0E9-4296-8CED-EB4FBB674060"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ni.com/product-documentation/53778/en/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97020",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0269/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ni.com/product-documentation/53778/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-03-31T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de liberación de memoria en fs/crypto/ en el kernel de Linux en versiones anteriores a 4.10.7 permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL) o posiblemente obtener privilegios revocando el llavero de claves utilizado para cifrado ext4, f2fs o ubifs, provocando que los objetos de transformación criptográfica sean liberados prematuramente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.59",
            "matchCriteriaId" : "86ECD7D8-40A9-4227-B77D-867268FFDEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.20",
            "matchCriteriaId" : "D092A759-EAC4-4DDC-A3AF-7BECC8D32811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.7",
            "matchCriteriaId" : "7E814839-1040-4BC0-8D84-A0011E6C3B71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97308",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T00:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter)."
      }, {
        "lang" : "es",
        "value" : "citymont/symetrie v.0.9.6 es vulnerable a un XSS reflejado en symetrie-master/app/commands/page.php (parámetro model)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symetrie_project:symetrie:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DD9D1F-9F19-4699-8B3C-64C8F427FA08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/citymont/symetrie/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/citymont/symetrie/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T00:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter)."
      }, {
        "lang" : "es",
        "value" : "TheFirstQuestion/HelpMeWatchWho en versiones anteriores a 2017-03-28 es vulnerable a un XSS reflejado en HelpMeWatchWho-master/unaired.php (parámetro episodeID)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpmewatchwho_project:helpmewatchwho:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-03-23",
            "matchCriteriaId" : "44578BD3-4E84-4E76-8056-FC1C7A1A6556"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TheFirstQuestion/HelpMeWatchWho/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TheFirstQuestion/HelpMeWatchWho/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data (token) passed to the 'wallacepos-master/myaccount/resetpassword.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un XSS en 'wallacepos v1.4.1'. La vulnerabilidad existe debido a la filtración insuficiente de los datos proporcionados por el usuario (token) pasados a la URL 'wallacepos-master/myaccount/resetpassword.php'. Un atacante podría ejecutar HTML y código de secuencias de comandos arbitrarios en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallaceit:wallacepos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "90BCE58A-35DF-45EB-A532-60A08A7BA560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/micwallace/wallacepos/issues/84",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/micwallace/wallacepos/issues/84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meeting_id, user) passed to the 'openeclass-master/modules/tc/webconf/webconf.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples XSS en 'openeclass Release_3.5.4'. Las vulnerabilidades existen debido a la filtración insuficiente de los datos proporcionados por el usuario (meeting_id, user) pasados a la URL 'openeclass-master/modules/tc/webconf/webconf.php'. Un atacante podría ejecutar HTML y código de secuencias de comandos arbitrarios en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openeclass:openeclass:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.4",
            "matchCriteriaId" : "E8695164-A27A-4498-AE87-55BD4F60E191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/gunet/openeclass/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/gunet/openeclass/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/template/pw_forgot.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un XSS en 'SocialNetwork v1.2.1'. La vulnerabilidad existe debido a la filtración insuficiente de los datos proporcionados por el usuario (mail) pasados a la URL 'SocialNetwork-andrea/app/template/pw_forgot.php'. Un atacante podría ejecutar HTML y código de seucuencias de comandos arbitrarios en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialnetwork_project:socialnetwork:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EBAB19-0B4F-4DDE-BEBC-0AF59EB37BA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/andreas83/SocialNetwork/issues/84",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/andreas83/SocialNetwork/issues/84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_gettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un XSS en 'Magmi 0.7.22'. La vulnerabilidad existe debido a la filtración insuficiente de los datos proporcionados por el usuario (prefix) pasados a la URL 'magmi-git-master/magmi/web/ajax_gettime.php'. Un atacante podría ejecutar HTML y código de secuencias de comandos arbitrarios en un navegador en el contexto de un sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magmi_project:magmi:0.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269F4BD-E031-44DA-814D-FD2548CD6AA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/dweeves/magmi-git/issues/522",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dweeves/magmi-git/pull/525",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/dweeves/magmi-git/issues/522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dweeves/magmi-git/pull/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server."
      }, {
        "lang" : "es",
        "value" : "En TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), un cliente no autenticado puede provocar una pequeña fuga de memoria en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E2F74C-00F6-4FA1-9C57-76F27E6A731C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/441",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution."
      }, {
        "lang" : "es",
        "value" : "En TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), un cliente autenticado puede provocar una liberación doble, conduciendo a denegación de servicio o potencialmente ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E2F74C-00F6-4FA1-9C57-76F27E6A731C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/438",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames."
      }, {
        "lang" : "es",
        "value" : "En TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), usuarios no autenticados pueden bloquear el servidor enviando nombres de usuario largos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E2F74C-00F6-4FA1-9C57-76F27E6A731C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/440",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server."
      }, {
        "lang" : "es",
        "value" : "En TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), provocando un desbordamiento de entero, un cliente autenticado puede bloquear el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E2F74C-00F6-4FA1-9C57-76F27E6A731C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-01T02:59:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server."
      }, {
        "lang" : "es",
        "value" : "En TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), un cliente no autenticado puede provocar una fuga pequeña fuga de memoria en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E2F74C-00F6-4FA1-9C57-76F27E6A731C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2367",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41801/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41801/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2376",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"Safari\". Esto permite a atacantes remotos suplantar la barra de direcciones aprovechando la entrada de texto durante la carga de una página."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2377",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit Web Inspector\" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit Web Inspector\". Esto permite a atacantes provocar una denegación de servicio (corrupción de memoria y caída de aplicación) aprovechando una acción de cierre de ventana durante un estado de pausa del depurador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2378",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the \"WebKit\" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during drag-and-drop actions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra la creación de marcadores en el componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o suplantar un marcador aprovechando el manejo incorrecto de enlaces durante las acciones de arrastrar y soltar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2379",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Carbon\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted .dfont file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Carbon\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (desbordamiento del búfer y caída de la aplicación) a través de un archivo .dfont manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2380",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products.  iOS before 10.3 is affected.  The issue involves the Simple Certificate Enrollment Protocol (SCEP) implementation in the \"Profiles\" component.  It allows remote attackers to bypass cryptographic protection mechanisms by leveraging DES support."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a versión 10.3 está afectado. El problema involucra la implementación de Simple Certificate Enrollment Protocol (SCEP) en el componente \"Profiles\". Permite a los atacantes remotos omitir los mecanismos de protección criptográfica mediante el aprovechamiento del soporte DES."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2381",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"sudo\" component. It allows remote authenticated users to gain privileges by leveraging membership in the admin group on a network directory server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"sudo\". Esto permite a usuarios remotos autenticados obtener privilegios aprovechando la pertenencia al grupo admin en un servidor de directorio de red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2382",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the \"Wiki Server\" component. It allows remote attackers to enumerate user accounts via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS Server en versiones anteriores a 5.3 está afectado. El problema involucra al componente \"Wiki Server\". Esto permite a atacantes remotos enumerar cuentas de usuario a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "6CAD2D5E-EA2B-4D07-963F-FF789E624A73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97128",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038144",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207604",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2383",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. The issue involves cleartext client-certificate transmission in the \"APNs Server\" component. It allows man-in-the-middle attackers to track users via correlation with this certificate."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iCloud en versiones anteriores a 6.2 en Windows está afectado. iTunes en versiones anteriores a 12.6 en Windows está afectado. El problema involucra la transmisión de certificado de cliente en texto plano en el componente \"APNs Server\". Esto permite a atacantes man-in-the-middle rastrear usuarios a través de la correlación con este certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "E53A3A06-12DA-4BCB-BEC6-04C55F2C2194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.5.5",
            "matchCriteriaId" : "BD345739-60D9-4B60-ADF6-AD995DD47001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97175",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/835.html\">CWE-319: Cleartext Transmission of Sensitive Information</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2384",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the \"Safari\" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra el manejo incorrecto de eliminación dentro del subsistema SQLite del componente \"Safari\". Esto permite a usuarios locales identificar las visitas del sitio web que ocurrieron en el modo de navegación privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2385",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the \"Safari Login AutoFill\" component. It allows local users to obtain access to locked keychain items via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"Safari Login AutoFill\". Esto permite a usuarios locales obtener acceso a elementos bloqueados del llavero a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97136",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2386",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2388",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"IOFireWireFamily\" component. It allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"IOFireWireFamily\". Esto permite a atacantes provocar una denegación de servicio (referencia a puntero NULL) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2389",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"Safari\". Esto permite a atacantes remotos suplantar una hoja de autenticación HTTP o provocar una denegación de servicio a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2390",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves symlink mishandling in the \"libarchive\" component. It allows local users to change arbitrary directory permissions via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra el manejo incorrecto de enlace simbólico en el componente \"libarchive\". Esto permite a usuarios locales cambiar permisos de directorio arbitrario a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2391",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the \"Export\" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Pages en versiones anteriores a 6.1, Numbers en versiones anteriores a 4.1 y Keynote en versiones anteriores a 7.1 en macOS y Pages en versiones anteriores a 3.1, Numbers en versiones anteriores a 3.1 y Keynote en versiones anteriores a 3.1 en iOS están afectados. El problema involucra al componente \"Export\". Esto permite a usuarios eludir la protección de contraseña iWork PDF aprovechando el uso de 40-bit RC4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:keynote:*:*:*:*:*:mac_os_x:*:*",
            "versionEndIncluding" : "7.0.5",
            "matchCriteriaId" : "273F12FD-AAC9-46B3-82F3-EB35BC2E8D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:numbers:*:*:*:*:*:mac_os_x:*:*",
            "versionEndIncluding" : "4.0.5",
            "matchCriteriaId" : "4812E8C9-77B5-4CF4-B607-0A8F06FB4FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:pages:*:*:*:*:*:mac_os_x:*:*",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "BA958C04-7A2F-4C2F-B4B6-8FA4B23E9C21"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:keynote:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "1BDD2098-B985-4C76-9248-B8CFD4B3ABA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:numbers:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "CB559D00-B617-4F94-9B8D-47959517BBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:pages:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "B1919558-5038-4EA3-88C1-4FD359B1537E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97126",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038134",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038135",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038136",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207595",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2392",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the \"WebKit\" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2393",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Safari Reader\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Safari Reader\". Esto permite a atacantes remotos llevar a cabo ataques UXSS a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2394",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2395",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2396",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2397",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Accounts\" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock screen."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Accounts\". Esto permite a atacantes físicamente próximos descubrir un ID de Apple leyendo un aviso de autenticación iCloud en la pantalla de bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2398",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2399",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Pasteboard\" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only from the hardware UID (rather than that UID in addition to the user passcode)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Pasteboard\". Esto permite a atacantes físicamente próximos leer el cartón aprovechando el uso de una clave de cifrado derivada sólo del UID del hardware (en lugar de ese UID además del código de usuario)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2400",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"SafariViewController\" component. It allows attackers to obtain sensitive information by leveraging the SafariViewController's incorrect synchronization of Safari cache clearing."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"SafariViewController\". Esto permite a atacantes obtener información sensible aprovechando la sincronización incorrecta de SafariViewController de la limpieza de la caché de Safari."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2401",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2402",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the \"MCX Client\" component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra el manejo incorrecto del perfil de acciones de desinstalación en el componente \"MCX Client\" cuando un perfil tiene múltiples cargas útiles. Esto permite a atacantes remotos eludir las restricciones destinadas al acceso aprovechando la confianza del certificado Active Directory que no debería haber permanecido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2403",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Printing\" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Printing\". Una vulnerabilidad de formato cadena permite a atacantes remotos ejecutar código arbitrario a través de una URL ipp: o ipps: manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2404",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Quick Look\" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Quick Look\". Esto permite a atacantes remotos desencadenar llamadas de teléfono a números arbitrarios a través de una URL tel: en un documento PDF, según se ha explotado activamente en octubre de 2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload/",
        "source" : "product-security@apple.com",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2405",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit Web Inspector\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit Web Inspector\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2406",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"FontParser\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"FontParser\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2407",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"FontParser\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"FontParser\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2408",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"IOATAFamily\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"IOATAFamily\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2409",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Menus\" component. It allows attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Menus\". Esto permite a atacantes obtener información sensible o provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2410",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2412",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"iTunes Store\" component. It allows man-in-the-middle attackers to modify the client-server data stream to iTunes sandbox web services by leveraging use of cleartext HTTP."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"iTunes Store\". Esto permite a atacantes man-in-the-middle modificar la secuencia de datos cliente-servidor a los servicios web de aislamiento de iTunes aprovechando la utilización de HTTP en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2413",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"QuickTime\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted media file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"QuickTime\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo multimedia manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2414",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"DataAccess\" component. It allows remote attackers to access Exchange traffic in opportunistic circumstances by leveraging a mistake in typing an e-mail address."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"DataAccess\". Esto permite a atacantes remotos acceder al tráfico de intercambio en circunstancias oportunistas aprovechando un error al escribir una dirección de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2415",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\""
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario aprovechando un \"tipo de confusión\" no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97143",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/843.html\">CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2416",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"ImageIO\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"ImageIO\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de imagen manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://blog.flanker017.me/cve-2017-2416-gif-remote-exec/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.flanker017.me/cve-2017-2416-gif-remote-exec/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2417",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"CoreGraphics\" component. It allows remote attackers to cause a denial of service (infinite recursion) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"CoreGraphics\". Esto permite a atacantes remotos provocar una denegación de servicio (recursión infinita) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2418",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Hypervisor\" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra a componente \"Hypervisor\". Esto permite a usuarios del SO invitados obtener información sensible del registro de control CR8 a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2419",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir un mecanismo de protección Content Security Policy a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2420",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Bluetooth\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2421",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"AppleGraphicsPowerManagement\" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"AppleGraphicsPowerManagement\". Una condición de carrera permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2422",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Multi-Touch\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Multi-Touch\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2423",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the \"Security\" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Security\". Esto permite a atacantes remotos eludir las restricciones destinadas al acceso aprovechando un resultado exitoso de una llamada API SecKeyRawVerify con una firma vacía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2424",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the \"WebKit\" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra el manejo incorrecto de OpenGL shaders en el componente \"WebKit\". Esto permite a atacantes remotos obtener información sensible del proceso de memoria a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-03",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2425",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"SecurityFoundation\" component. A double free vulnerability allows remote attackers to execute arbitrary code via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"SecurityFoundation\". Vulnerabilidad de doble liberación permite a atacantes remotos ejecutar código arbitrario a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2426",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"iBooks\" component. It allows remote attackers to obtain sensitive information from local files via a file: URL in an iBooks file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"iBooks\". Esto permite a atacantes remotos obtener información sensible de archivos locales a través de una URL file: en un archivo iBooks."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://s1gnalcha0s.github.io/ibooks/epub/2017/03/27/This-book-reads-you-using-JavaScript.html",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://s1gnalcha0s.github.io/ibooks/epub/2017/03/27/This-book-reads-you-using-JavaScript.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2427",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Bluetooth\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2428",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the \"HTTPProtocol\" component. It allows remote HTTP/2 servers to have an unspecified impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra nghttp2 en versiones anteriores a 1.17.0 en el componente \"HTTPProtocol\". Esto permite a servidores remotos HTTP/2 tener un impacto no especificado a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97146",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://github.com/nghttp2/nghttp2/releases/tag/v1.17.0",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/nghttp2/nghttp2/releases/tag/v1.17.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2429",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"FinderKit\" component. It allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging unexpected permission changes during an iCloud Sharing Send Link action."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"FinderKit\". Esto permite a atacantes remotos eludir las restricciones destinadas al acceso en circunstancias oportunistas aprovechando cambios de permiso inesperados durante una acción Sharing Send Link de iCloud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2430",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Audio\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Audio\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2431",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"CoreMedia\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .mov file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"CoreMedia\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo .mov manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2432",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"ImageIO\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"ImageIO\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo JPEG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-188/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2433",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:01.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2434",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"HomeKit\" component. It allows attackers to have an unspecified impact by leveraging the presence of Home Control on Control Center."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"HomeKit\". Esto permite a atacantes tener un impacto no especificado aprovechando la presencia de Home Control en el Control Center."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2435",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"CoreText\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2436",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"IOFireWireAVC\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"IOFireWireAVC\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2437",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"IOFireWireAVC\" component. It allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"IOFireWireAVC\". Esto permite a usuarios locales obtener privilegios o provocar una denegación de servicio (corrupción de memoria) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2438",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"AppleRAID\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"AppleRAID\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (uso después de liberación) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2439",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"FontParser\" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"FontParser\". Esto permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2440",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (desbordamiento de entero) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2441",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"libc++abi\" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted C++ app that is mishandled during demangling."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"libc++abi\". Una vulnerabilidad de uso después de liberación de memoria permite a atacantes remotos ejecutar código arbitrario a través de una aplicación C++ manipulada que no se maneja adecuadamente durante el desmantelamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2442",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit JavaScript Bindings\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit JavaScript Bindings\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41800/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41800/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2443",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Intel Graphics Driver\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41790/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41790/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2444",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"CoreGraphics\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"CoreGraphics\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97131",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2445",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted frame objects."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos llevar a cabo ataques UXSS a través de objetos de marco manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41802/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41802/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2446",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado que aprovecha el manejo incorrecto de funciones en modo estricto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1032",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://doar-e.github.io/blog/2018/07/14/cve-2017-2446-or-jscjsglobalobjectishavingabadtime/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41741/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41742/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://doar-e.github.io/blog/2018/07/14/cve-2017-2446-or-jscjsglobalobjectishavingabadtime/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41741/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41742/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2447",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41743/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41743/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2448",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the \"Keychain\" component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging lack of authentication for OTR packets."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"Keychain\". Esto permite a atacantes man-in-the-middle eludir un mecanismo de protección secreto en iCloud Keychain aprovechando la falta de autenticación para paquetes OTR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97134",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2449",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Bluetooth\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (uso después de liberación de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2450",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"CoreText\". Esto permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2451",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Security\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Security\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (desbordamiento del búfer) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2452",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Siri\" component. It allows physically proximate attackers to read text messages on the lock screen via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Siri\". Esto permite a atacantes físicamente próximos leer mensajes de texto en la pantalla de bloqueo a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2453",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"Safari\". Esto permite a atacantes remotos suplantar avisos FaceTime en la interfaz de usuario a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2454",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1080",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41807/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41807/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2455",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1082",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41809/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41809/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2456",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Una condición de carrera permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1083",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41778/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41778/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2457",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41803/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41803/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2458",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Keyboards\" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Keyboards\". Un desbordamiento del búfer permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2459",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1087",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41810/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41810/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2460",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1090",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41811/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41811/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2461",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"CoreText\". Esto permite a atacantes remotos provocar una denegación de servicio (consumo de recursos) a través de un mensaje de texto manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2462",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:02.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Audio\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Audio\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-189/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-189/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2463",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. iCloud en versiones anteriores a 6.2 en Windows está afectado. iTunes en versiones anteriores a 12.6 en Windows está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "5ED07EC9-BC97-415F-BF16-79CA4A399095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6",
            "matchCriteriaId" : "2E38E903-87C8-4FA2-84B7-0B2464933DB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "BE118A00-4F9E-496A-9408-88E2CD12339F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97176",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-241/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-241/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2464",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41931/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41931/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2465",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2466",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1097",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/ifsecure/status/849292853792657413",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41812/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/ifsecure/status/849292853792657413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41812/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2467",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"ImageIO\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"ImageIO\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2468",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41868/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41868/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2469",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41869/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41869/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2470",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41867/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41867/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2471",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the \"WebKit\" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"WebKit\". Una vulnerabilidad de uso después de liberación permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300DD2AC-7126-491C-8B9F-9A218A6B2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6306F624-5FEE-4DF7-B420-B2FEC67E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E0B97F-6D9F-4181-A661-4B0AFE162414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97133",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1105",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41813/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41813/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2472",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (uso después de liberación) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41791/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41791/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2473",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41792/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41792/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2474",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Un error por un paso permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41793/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41793/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2475",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted use of frames on a web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos llevar a cabo ataques UXSS a través del uso de marcos manipulados en un sitio web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "BE118A00-4F9E-496A-9408-88E2CD12339F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2476",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "BE118A00-4F9E-496A-9408-88E2CD12339F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1114",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41814/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41814/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2477",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"libxslt\" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"libxslt\". Esto permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97303",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2478",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Una condición de carrera permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41794/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41794/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2479",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. iCloud en versiones anteriores a 6.2 en Windows está afectado. iTunes en versiones anteriores a 12.6 en Windows está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "BE118A00-4F9E-496A-9408-88E2CD12339F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "5ED07EC9-BC97-415F-BF16-79CA4A399095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6",
            "matchCriteriaId" : "2E38E903-87C8-4FA2-84B7-0B2464933DB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97176",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41866/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41866/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2480",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. iCloud en versiones anteriores a 6.2 en Windows está afectado. iTunes en versiones anteriores a 12.6 en Windows está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "DA01066C-E1DE-451E-9F25-5948D6CC3314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "12.5.5.5",
            "matchCriteriaId" : "725C7781-7AE2-447D-A4C7-D18DDA30F175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97176",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41865/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41865/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2481",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. tvOS en versiones anteriores a 10.2 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-191/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-191/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2482",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Un desbordamiento del búfer permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41796/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41796/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2483",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Un desbordamiento del búfer permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41797/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41797/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2484",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Phone\" component. It allows attackers to trigger telephone calls to arbitrary numbers via a third-party app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. El problema involucra al componente \"Phone\". Esto permite a atacantes desencadenar llamadas telefónicas a números arbitrarios a través de una aplicación de un tercero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2485",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Security\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted X.509 certificate file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Security\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo certificado X.509 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97132",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0296/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2486",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. Safari en versiones anteriores a 10.1 está afectado. El problema involucra al componente \"WebKit\". Esto permite a atacantes remotos suplantar la barra de direcciones a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.3",
            "matchCriteriaId" : "825911CC-F341-4198-B830-E7CF701BB88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2487",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:03.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"FontParser\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"FontParser\". Esto permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2489",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:04.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra al componente \"Intel Graphics Driver\". Esto permite a atacantes obtener información sensible de la memoria del kernel a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97300",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41798/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41798/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2490",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:04.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. iOS en versiones anteriores a 10.3 está afectado. macOS en versiones anteriores a 10.12.4 está afectado. tvOS en versiones anteriores a 10.2 está afectado. watchOS en versiones anteriores a 3.2 está afectado. El problema involucra al componente \"Kernel\". Esto permite a atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.3",
            "matchCriteriaId" : "1684E315-F3D0-4D2B-83D1-41E004FBFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "197AACC5-2587-46F6-8658-1B4824B42580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "395A9BA0-9375-4902-AA7B-6D2A153E7E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97301",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41804/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41804/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6974",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-02T01:59:04.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the \"System Integrity Protection\" component. It allows attackers to modify the contents of a protected disk location via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. macOS en versiones anteriores a 10.12.4 está afectado. El problema involucra el subsistema de instalación del sistema del componente \"System Integrity Protection\". Esto permite a atacantes modificar los contenidos de una ubicación protegida del disco a través de una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFFA2874-DB3D-4784-840E-1D191D8F2F0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1001000",
      "sourceIdentifier" : "46fe6300-5254-4a98-9594-a9567bec8179",
      "published" : "2017-04-03T01:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows remote attackers to modify arbitrary pages via a request for wp-json/wp/v2/posts followed by a numeric value and a non-numeric value, as demonstrated by the wp-json/wp/v2/posts/123?id=123helloworld URI."
      }, {
        "lang" : "es",
        "value" : "La función register_routes en wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php en la API REST en WordPress 4.7.x en versiones anteriores a 4.7.2 no requiere un identificador de número entero, lo que permite a atacantes remotos modificar páginas arbitrarias a través de una solicitud para wp-json/wp/v2/posts seguida por un valor numérico y un valor no numérico, según lo demostrado mediante la URI wp-json/wp/v2/posts/123?id=123helloworld."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABC52C-7C28-4CB7-9432-38540152F3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B095729-5746-4E32-B857-7BC78962561C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8459259A-4895-42B6-A242-D0B5871BE672"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/10/16",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://blogs.akamai.com/2017/02/wordpress-web-api-vulnerability.html",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://gist.github.com/leonjza/2244eb15510a0687ed93160c623762ab",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/e357195ce303017d517aff944644a7a1232926f7",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://make.wordpress.org/core/2017/02/01/disclosure-of-additional-security-fix-in-wordpress-4-7-2/",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/10/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1037731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.akamai.com/2017/02/wordpress-web-api-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/leonjza/2244eb15510a0687ed93160c623762ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/e357195ce303017d517aff944644a7a1232926f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://make.wordpress.org/core/2017/02/01/disclosure-of-additional-security-fix-in-wordpress-4-7-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted rule that is mishandled in the yara_yyparse function."
      }, {
        "lang" : "es",
        "value" : "libyara/grammar.y en YARA 3.5.0 permite a atacantes remotos provocar una denegación de servicio (lectura basada en memoria dinámica - lectura basada fuera de los límites y caída de la aplicación) a través de una regla manipulada que no se maneja correctamente en la función the yara_yyparse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/ab906da53ff2a68c6fd6d1fa73f2b7c7bf0bc636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/ab906da53ff2a68c6fd6d1fa73f2b7c7bf0bc636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that is mishandled in the yr_compiler_destroy function."
      }, {
        "lang" : "es",
        "value" : "libyara/grammar.y en YARA 3.5.0 permite a atacantes remotos provocar una denegación de servicio (uso después de liberación de memoria y caída de la aplicación) a través de una regla manipulada que no se maneja correctamente en la función yr_compiler_destroy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/7f02eca670f29c00a1d2c305e96febae6ce5d37b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/7f02eca670f29c00a1d2c305e96febae6ce5d37b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory locations, related to jit/ThunkGenerators.cpp, llint/LowLevelInterpreter32_64.asm, and llint/LowLevelInterpreter64.asm."
      }, {
        "lang" : "es",
        "value" : "JavaScriptCore en WebKit, as distribuido en Safari Technology Preview Release 22, permite a atacantes remotos provocar una denegación de servicio (escritura basada en memoria dinámica - escritura basada en lectura fuera de los límites y caída de la aplicación) o posiblemente tener otros impactos inespecíficos a través de un código JavaScript manipulado que desencadena acceso a las localizaciones red-zone de la memoria, relacionado con jit/ThunkGenerators.cpp, llint/LowLevelInterpreter32_64.asm, y llint/LowLevelInterpreter64.asm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:22:*:*:*:technology_preview:*:*:*",
            "matchCriteriaId" : "F883F34B-461B-44C4-BEDA-76751B2D7A92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97298",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=167239",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.webkit.org/changeset/211479",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=167239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.webkit.org/changeset/211479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.800",
      "lastModified" : "2025-11-03T22:15:43.977",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file."
      }, {
        "lang" : "es",
        "value" : "La función SingleDocParser::Hy leNode en yaml-cpp (aka LibYaml-C++) 0.5.3 permite a atacantes remotos provocar una denegación de servicio (consumo de pila y caída de la aplicación) a través de un archivo YAML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaml-cpp_project:yaml-cpp:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9100F4E-792D-4064-A842-91F54AB42AA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jbeder/yaml-cpp/issues/459",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Nov/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jbeder/yaml-cpp/issues/459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función mem_get_bits_rectangle en base/gdevmem.c en Artifex Software, Inc. Ghostscript 9.20 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero NULL y caída de la aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25011EF6-DFBF-4C0E-B3CC-FA9686E2C8A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted regular expression."
      }, {
        "lang" : "es",
        "value" : "La función parse_char_class en regparse.c en la Onigmo (también conocida como Oniguruma-mod) libreria de expresión regular,como se utiliza en Ruby 2.4.0, permite a atacantes remotos provocar una denegación de servicio (recursión profunda y caída de la aplicación) a través de una expresión regular manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E99F5A-E693-43E9-8AB3-A3FCB21BCF14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97304",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/issues/13234",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/issues/13234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file."
      }, {
        "lang" : "es",
        "value" : "La función relocs en libr/bin/p/bin_bflt.c en radare2 1.2.1 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica y caída de la aplicación) o posiblemente tener otros impactos inexpecíficos a través de archivos binarios manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2BB74D-D369-43D4-9EDB-3F0DD27091B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97299",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/72794dc3523bbd5bb370de3c5857cb736c387e18",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6829",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/72794dc3523bbd5bb370de3c5857cb736c387e18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of \"declare(ticks=\" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating \"Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El _zval_get_long_func_ex en Zend/zend_operators.c en PHP 7.1.2 permite a atacantes provocar una denegación de servicio (referencia al puntero NULL y caída de la aplicación) a través del uso manipulado de \"declare(ticks=\" en el script PHP. NOTA:El proveedor disputará la clasificación de esto como una vulnerabilidad, declarando: \"Por favor, no solicite CVEs para los errores ordinarios. CVEs son relevantes sólo para problemas de seguridad\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.php.net/bug.php?id=74146",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/php/php-src/pull/2396",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/php/php-src/pull/2396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file."
      }, {
        "lang" : "es",
        "value" : "La función dalvik_disassemble en libr/asm/p/asm_dalvik.c en radare2 1.2.1 permite a atacantes remotos provocar una denegación de servicio (Desbordamiento de buffer basado en pila y caída de la aplicación) o posiblemente tener otros impactos inexpecíficos a través de un archivo DEX manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2BB74D-D369-43D4-9EDB-3F0DD27091B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97313",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6885",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/6885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfPainter::Expy Tabs en PdfPainter.cpp en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica y caída de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-heap-based-buffer-overflow-in-podofopdfpainterexpandtabs-pdfpainter-cpp",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-heap-based-buffer-overflow-in-podofopdfpainterexpandtabs-pdfpainter-cpp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfSimpleEncoding::ConvertToEncoding en PdfEncoding.cpp en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica y caída de la aplicación) a través de documento PDF manipulado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-heap-based-buffer-overflow-in-podofopdfsimpleencodingconverttoencoding-pdfencoding-cpp",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-heap-based-buffer-overflow-in-podofopdfsimpleencodingconverttoencoding-pdfencoding-cpp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "El código doc/PdfPage.cpp:614:20 en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero NULL y caída de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "El código doc/PdfPage.cpp:609:23 en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero NULL y caída de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "El código PdfFontFactory.cpp:200:88 en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero NULL y caída de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T05:59:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "El código PdfFontFactory.cpp:195:62 en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (referencia al puntero NULL y caída de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T14:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping."
      }, {
        "lang" : "es",
        "value" : "OpenStack Horizon 9.x a través de 9.1.1, 10.x en versiones hasta 10.0.2 y 11.0.0 permite a los administradores autenticados remotos realizar ataques XSS a través de una asignación de federación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4F67B5-5856-4D19-87C5-BE69829D44C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "96C77F76-2C3F-4901-9C2F-E701ABB4D3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1AFF40-ED11-4C9E-8C17-78C0569145ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "41ECAF99-BA35-4B46-A307-F9E86A8674A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "76B0BAD7-980F-4F27-BE31-DD2029F83D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EC72C-6608-4F29-B910-2B4C766A1F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583BDBA0-7B0B-4B9B-89B8-DE63C6104D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8DF61B-8B37-444A-9285-6584A99FAA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E64BFC-A3C7-4726-95E1-0287DA436432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B25B3CE-D980-46CE-B322-534E2163F18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "331A89F0-E511-4960-A95A-075A6CB62EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "F7792D86-9841-4069-B6B0-74AA4907F1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "508B31E5-9356-4AF8-9292-02D34F9C46F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0313866-F422-43AB-A279-856E7CEAEC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "460EB309-8D97-45CE-B3B9-C490518A7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B20B5BDA-8B1C-4A1C-95CF-BC9CDFBA6910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BEBDB8-402D-44CA-A9A6-EE360BD0FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD40295F-72D3-42CE-9F1B-FE3FC5CF52AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:horizon:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7187E4A2-1780-48AF-AAE9-2E1B48B2B50C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97324",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/1667086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/1667086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T14:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with \"SecurityLevel None\" and with empty \"AuthFile\" options) via a crafted UDP packet."
      }, {
        "lang" : "es",
        "value" : "La interacción incorrecta de las funciones parse_packet() y parse_part_sign_sha256() en network.c en collectd 5.7.1 y anteriores permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) de una instancia collectd (configurada con opciones \"SecurityLevel None\" y con empty \"AuthFile\") a través de un paquete UDP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collectd:collectd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.1",
            "matchCriteriaId" : "72E66C3B-4720-4B30-8D9D-7FE83166AC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/collectd/collectd/issues/2174",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/collectd/collectd/issues/2174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5642",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-03T16:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs."
      }, {
        "lang" : "es",
        "value" : "Durante la instalación de Ambari 2.4.0 a 2.4.2, los artefactos Ambari Server no se crean con las ACL adecuadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243741C6-FCA5-4E8F-93A6-033144214F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B2179-C5A7-4802-9A3C-580BF8153285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9668FD5A-C08E-403B-8B6F-04FFA3C6296D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T17:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg."
      }, {
        "lang" : "es",
        "value" : "Pixie 1.0.4 permite a los usuarios autenticados remotos cargar y ejecutar código PHP arbitrario a través de los datos POST en una solicitud admin/index.php?s=publish&x=filemanager para un nombre de archivo con una extensión doble, como un archivo .jpg.php con Contenido-Tipo de imagen/jpeg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1501C613-E97B-41E5-9BC5-8DB1EB31F0DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/04/remote-file-upload-vulnerability-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41784/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/04/remote-file-upload-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41784/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T20:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default.  NOTE: the vendor reports \"It has been proved that this vulnerability has no foundation and it is totally fake and based on false assumptions."
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA ** BackBox Linux 4.6 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU ksoftirqd) a través de una inundación de paquetes con direcciones IP de origen Martian (tal como se define en el RFC 1812 sección 5.3.7). Este producto habilita net.ipv4.conf.all.log_martians por defecto. NOTA: el proveedor reporta \"Se ha demostrado que esta vulnerabilidad no tiene fundamento y es totalmente falsa y basada en suposiciones falsas\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:backbox:backbox_linux:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3B80AA-BB59-4520-AB3F-073AF41D1CB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploitalert.com/view-details.html?id=26361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backbox.org/portal/blog/false-cve-backbox-46-unmasked",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017040001",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41781/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploitalert.com/view-details.html?id=26361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backbox.org/portal/blog/false-cve-backbox-46-unmasked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017040001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41781/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T20:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "La función ourWriteOut en tool_writeout.c en curl 7.53.1 podría permitir que los atacantes físicamente próximos obtengan información sensible de la memoria del proceso en circunstancias oportunistas leyendo una pantalla de la estación de trabajo durante el uso de un argumento --write-out que termina en un carácter '%', lo que conduce a desbordamiento de búfer basado en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.53.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641ACFC8-BDE2-42AC-8B3D-EF78695AD750"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5684",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-04-03T21:59:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information."
      }, {
        "lang" : "es",
        "value" : "Los sistemas BIOS en Intel Compute Stick basados en los procesadores 6th Gen Intel Core anteriores a la versión CC047 puede permitir a un atacante con acceso físico al sistema obtener acceso a información personal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:stk2mv64cc_bios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ccsklm5v.86a.0046.2017.0105.1608",
            "matchCriteriaId" : "B78291F6-734D-45E1-A06D-64D7B01AFD54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9497CA1C-A3CA-4CC4-8192-69DF58630575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5685",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-04-03T21:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical access to the system to gain access to personal information."
      }, {
        "lang" : "es",
        "value" : "Los sistemas BIOS en Intel NUC basados en los procesos 6th Gen Intel Core antes de la versión KY0045 puede permitir que un atacante con acceso físico al sistema pueda tener acceso a información personal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc6i7kyk_bios:kyskli70.86a.0042.2016.0929.1933:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2D6871-F873-4614-9A1E-533EA68CCBA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196D3E-062A-4301-BAA8-51FAF153F2EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97408",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5686",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-04-03T21:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to personal information."
      }, {
        "lang" : "es",
        "value" : "Los sistemas BIOS en Intel NUC basados en los procesos 6th Gen Intel Core antes de la versión SY0059 puede permitir a un atacante con acceso físico al sistema obtener acceso a información personal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc6i3syh_bios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "syskli35.86a.0057.2017.0119.1758",
            "matchCriteriaId" : "D5AF6284-D546-4EAF-8F93-8376B1B89839"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFD543E-DD44-403D-A81F-9F7668F9A473"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc6i3syk_bios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "syskli35.86a.0057.2017.0119.1758",
            "matchCriteriaId" : "032D3A6C-21D0-4F5C-B03A-F98F336CB6A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc6i3syk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035B570B-8441-4F84-A441-FFBD1378EE6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-03T22:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) display_name parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en account/signup.php y account/signup2.php en WebsiteBaker 2.10.0 y anteriores permiten a atacantes remotos ejecutar comandos SQL arbitrarios a través del nombre de usuario (1), (2) parámetro nombre_de_exposición."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websitebaker:websitebaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.0",
            "matchCriteriaId" : "ED02749A-7BC5-4F98-9849-577DEF146D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.websitebaker.org/index.php/topic%2C30187.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://project.websitebaker.org/issues/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97495",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038173",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://forum.websitebaker.org/index.php/topic%2C30187.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://project.websitebaker.org/issues/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T00:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands."
      }, {
        "lang" : "es",
        "value" : "NixOS 17.03 en versiones anteriores a 17.03.887 tiene un Docker socket de escritura universal, el cual permite a los usuarios locales obtener privilegios mediante la ejecución de comandos docker."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nixos:nixos:17.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0BC2AD-9EB3-45A3-9DBD-51851C4E08EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.science.uu.nl/pipermail/nix-dev/2017-April/023329.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/commit/6c59d851e2967410cc8fb6ba3f374b1d3efa988e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/commit/fa4fe7110566d8370983fa81f2b04a833339236d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.science.uu.nl/pipermail/nix-dev/2017-April/023329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/commit/6c59d851e2967410cc8fb6ba3f374b1d3efa988e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/commit/fa4fe7110566d8370983fa81f2b04a833339236d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3204",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-04-04T14:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism."
      }, {
        "lang" : "es",
        "value" : "La librería Go SSH (x/crypto/ssh) por defecto no verifica las claves del host, facilitando ataques man-in-the-middle. El comportamiento predeterminado cambió en commit e4e2799 para requerir el registro explícito de un mecanismo de verificación de hostkey."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-03-17",
            "matchCriteriaId" : "4C978A0F-3C80-4898-B1B3-DFF7F97D22DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97481",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bridge.grumpy-troll.org/2017/04/golang-ssh-security/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/issues/19767",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://godoc.org/golang.org/x/crypto/ssh",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bridge.grumpy-troll.org/2017/04/golang-ssh-security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/issues/19767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://godoc.org/golang.org/x/crypto/ssh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5683",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-04-04T14:59:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager before version 6.0.6 allows a local user to gain system level access."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios en el controlador IntelHAXM.sys en el Intel Hardware Accelerated Execution Manager en versiones anteriores a 6.0.6 permite a un usuario local obtener acceso a nivel de sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:hardware_accelerated_execution_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "2B96E5C8-BD16-4612-B64A-930363F89F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00072&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00072&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T14:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays."
      }, {
        "lang" : "es",
        "value" : "Un problema (conocido como XSA-212) ha sido descubierto en Xen, con arreglos disponibles para 4.8.x, 4.7.x, 4.6.x, 4.5.x, y 4.4.x. La anterior corrección XSA-29 introdujo una comprobación insuficiente en la entrada XENMEM_exchange, dando permiso a la persona que llama para conducir accesos de memoria de hipervisor fuera de las matrices de entrada/salida proporcionadas por el huésped."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA1950D-1D9F-4401-AA86-CF3028EFD286"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/04/04/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97375",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-212.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-029-2017.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/04/pandavirtualization-exploiting-xen.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41870/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/04/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-212.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-029-2017.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/04/pandavirtualization-exploiting-xen.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41870/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T14:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or changing the hiddenSSID parameter, SSID parameter, or a security-option password."
      }, {
        "lang" : "es",
        "value" : "D-Link DIR-615 HW: T1 FW:20.09 es vulnerable a la vulnerabilidad Cross-Site Request Forgery (CSRF). Esto permite a un atacante realizar una acción no deseada en un enrutador inalámbrico para el cual el usuario / administrador está actualmente autenticado, como se demuestra cambiando la opción de seguridad de WPA2 a Ninguno o cambiando el parámetro hiddenSSID, el parámetro SSID o una contraseña de opción de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-615_firmware:20.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC29A1B8-F4CB-4A69-8DFB-BB3F89F5656D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E92E959-C211-4979-A233-163BEFCF6F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41821/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41821/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T14:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email address."
      }, {
        "lang" : "es",
        "value" : "En Horde_Crypt en versiones anteriores a 2.7.6, como se utiliza en Horde Groupware Webmail Edition hasta la versión 5.2.17, OS Comand Inyection puede ocurrir si el atacante es un usuario autenticado Horde Webmail, tiene características PGP habilitado en sus preferencias,e intenta cifrar un correo electrónico a una maliciosa dirección de correo electrónico manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:*:*:*:*:webmail:*:*:*",
            "versionEndIncluding" : "5.2.17",
            "matchCriteriaId" : "A5C49058-0038-4215-A7D3-0CAB04D4A95D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.horde.org/archives/horde/Week-of-Mon-20170403/056767.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.horde.org/archives/horde/Week-of-Mon-20170403/056767.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T14:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user's preferences, and has enabled the \"Should PGP signed messages be automatically verified when viewed?\" preference. To exploit this vulnerability, an attacker can send a PGP signed email (that is maliciously crafted) to the Horde user, who then must either view or preview it."
      }, {
        "lang" : "es",
        "value" : "En Horde_Crypt en versiones anteriores a 2.7.6, como se utiliza en Horde Groupware Webmail Edition 5.x hasta la versión 5.2.17, OS puede ocurrir si el usuario tiene activadas las características de PGP en las preferencias del usuario y ha activado la preferencia \"¿Deberían verificarse automáticamente los mensajes firmados de PGP cuando se visualizan?\". Para aprovechar esta vulnerabilidad, un atacante puede enviar un correo electrónico firmado por PGP (que se ha creado de manera malintencionada) al usuario de la Horda, que debe verlo o visualizarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.0:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "74C2C13C-0014-4E45-B459-50B7005C828D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.0:rc1:*:*:webmail:*:*:*",
            "matchCriteriaId" : "3C63CC65-6B19-4B8D-A4DC-3B0C3055E8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.1:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "A09D1D89-A623-442E-9261-F58031BB517D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.2:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "6C36F237-9CBF-4E9E-A1DF-ABCB0187E725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.3:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "9103D5DE-E24A-476F-AEE9-68E3736E1C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.4:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "2F5106E5-050E-443C-9A67-0210AA01FE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.0.5:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "0ABE42CD-F4E3-4255-985D-6AC712231134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.0:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "693E0F58-A378-4A85-94B1-66709A557623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.0:rc1:*:*:webmail:*:*:*",
            "matchCriteriaId" : "FB8CD370-1B28-4E95-A357-C0476458A0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.1:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "D3203790-5230-4F8F-AE5E-F2D48B0B1767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.2:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "36EBEA90-C1D6-4AFE-B04D-F085986F8B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.3:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "3E2F5341-D61A-4FDB-99DE-4B65B6F333C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.4:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "4ADEB382-91FB-4664-9569-BFBBFD0577D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.1.5:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "A74B6B18-FFD3-4B38-B828-84178B0BEA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.0:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "2D8D3E4C-4AE6-4168-9865-8D3D19746B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.0:rc1:*:*:webmail:*:*:*",
            "matchCriteriaId" : "427CB5A7-2344-4BF2-A741-1E0A6A4972AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.1:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "E6A8F086-D6B2-4CFB-8493-C40707E8E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.2:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "C08B8F45-34B5-46C7-B333-20413E8B4AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.3:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "7D963CE7-E4DD-4FFE-83A0-39D465B9B59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.4:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "D12CBE60-F694-44C2-91E5-4676D7F80168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.5:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "601DED27-8DD8-4B8E-89A9-1A883594D237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.6:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "E47C6EF6-5006-40D6-BEFD-AEAE61200711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.7:*:*:*:webmail:*:*:*",
            "matchCriteriaId" : "E6670DC6-A5F2-4C70-A13F-012125B71012"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.horde.org/archives/horde/Week-of-Mon-20170403/056767.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.horde.org/archives/horde/Week-of-Mon-20170403/056767.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T16:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks."
      }, {
        "lang" : "es",
        "value" : "Riverbed RiOS hasta la versión 9.6.0 elimina la bóveda segura con el programa rm (no shred o srm), lo que facilita a los atacantes físicamente cercanos obtener información sensible leyendo bloques de disco en bruto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riverbed:rios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.0",
            "matchCriteriaId" : "E8FF29F5-75EA-450E-83ED-4ABC19B7AC6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96175",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T16:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for a bootloader password; however, this password is optional to meet different customers' needs"
      }, {
        "lang" : "es",
        "value" : "** DISPUTED ** Riverbed RiOS hasta la versión 9.6.0 no requiere una contraseña de cargador de arranque, lo que hace más fácil para los atacantes físicamente cercanos derrotar el mecanismo de protección de la bóveda segura a través de un boot manipulado. NOTA: el proveedor cree que esto no cumple con la definición de una vulnerabilidad. El producto contiene la lógica computacional correcta para una contraseña de cargador de arranque; Sin embargo, esta contraseña es opcional para satisfacer las necesidades de diferentes clientes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riverbed:rios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.0",
            "matchCriteriaId" : "E8FF29F5-75EA-450E-83ED-4ABC19B7AC6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T16:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for supporting arbitrary password changes by customers; however, a password change is optional to meet different customers' needs"
      }, {
        "lang" : "es",
        "value" : "** DISPUTED ** Riverbed RiOS hasta la versión 9.6.0 tiene una contraseña por defecto débil para la bóveda segura, lo que hace más fácil para los atacantes fisicamente cercanos derrotar el mecanismo de protección de la bóveda segura aprovechando el conocimiento del algoritmo de contraseña y el número de serie del dispositivo. NOTA: el proveedor cree que esto no cumple con la definición de una vulnerabilidad. El producto contiene lógica computacional correcta para soportar cambios de contraseña arbitrarios por parte de los clientes; Sin embargo, un cambio de contraseña es opcional para satisfacer las necesidades de diferentes clientes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riverbed:rios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.0",
            "matchCriteriaId" : "E8FF29F5-75EA-450E-83ED-4ABC19B7AC6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T16:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file."
      }, {
        "lang" : "es",
        "value" : "Riverbed RiOS en versiones anteriores a 9.0.1 no restringe adecuadamente el acceso shell en modo de usuario único, lo que facilita a los atacantes físicamente cercanos obtener privilegios de root y acceder a los datos descifrados mediante la sustitución del archivo /opt/tms/bin/cli."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riverbed:rios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.0b",
            "matchCriteriaId" : "536EACB5-B4B7-4F1B-9873-EA1EE8649695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportkb.riverbed.com/support/index?page=content&id=S30065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0360",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-04-04T17:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a \"same root name but with a suffix\" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242."
      }, {
        "lang" : "es",
        "value" : "Archivo abierto en Tryton 3.x y 4.x hasta la versión 4.2.2 permite a los usuarios autenticados remotos con ciertos permisos leer archivos arbitrarios mediante un ataque de \"mismo nombre de raíz pero con sufijo\". NOTA: Esta vulnerabilidad existe debido a una corrección incompleta para CVE-2016-1242."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3BE0CB-5798-440A-99EA-84CFC4C26051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24879289-85DC-47F3-B102-F5242F2F98D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C9AA44-EEE7-4FFB-818E-516FAF3BB935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFD995D-50CE-444D-BFD9-1FEDF8A337DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587F99E7-1BB0-4D34-9CF4-2CD7CFAD9459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16539C74-95DC-417A-83AF-D9C2CB468D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BE0FAF-878E-4413-9D4F-1D11E46E3FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F213038-286C-4138-9E6A-2256D98FFE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA5BB77-15D2-4DB3-B612-D2BA2F6B37A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0409E1A5-D0B1-44D5-B997-6AEBE324B26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4069DF96-E8A8-4BE1-87CA-BB018511BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494F67A7-92EE-4E37-878B-F7B248B47FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5CBC4-6BBF-4D40-95D3-079685D5CD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F40C4-7FC8-452F-8C8F-7423D2BC1425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B2D6AD-A9C5-4550-924D-421CA8C5661C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D3A96B-C26E-462A-ADB7-7E034EE49E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AC5C00-C930-43EF-985A-573DF58BC0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CD69E0-EED5-44A7-93B5-FD0606405099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66CA992-A721-43C1-975E-13408D0BCC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9FEF0C-1832-48AE-8DA6-13B9DD5D0714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C335C4A2-410B-4BCD-9885-E50FC97074DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F4A664-E6F7-406E-95B3-2DCB3C634DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20AC1330-FD90-41E2-B8D4-C1FB3440ABC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FCDE6E-9B0D-4FAA-AA5F-B5DC55E83324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CF2DAD-2DC2-4F7B-B9C2-55D0ECEC89CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A8D4B9-3AEC-41B5-ACB7-F7BE58520174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B618440C-15B0-4578-A590-9E72371B7C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5960FA55-5FAC-4E12-AC6C-01A62815B992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DF0ACF-E916-439C-B818-CD6F756DBBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D73CD6B-6C41-417C-ABE9-FDFEB7F9E7C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901AB7CF-610F-43C9-A0D9-6F17D2F2EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD395ED-F4B4-4413-B906-888532100F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5A6EA0-898D-41A3-B2E9-A3E27C9130D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F93FFA0-1DE6-46AB-8FE3-200DC05DC53A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090FF1F7-66F6-47B0-BB3C-98CED35A63B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E073DC5B-C6EC-42DD-BFE0-CF166881B6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBACDA2-4A24-4E94-A97D-CE35BD2260DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F4CB60-AC83-4B8C-9378-DD3A0B073A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "820DCFC1-B82D-4F9F-A9C2-00693BB4A0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C780E6-F84E-4AF9-977E-A2355773C0AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D1D2EF-BDA5-45F8-AA65-829E388D60BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C31E9-5A60-4CEE-BF09-DF1980BFFDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983F41DE-2696-480C-89BE-C8F9DC8F9DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9BB6FB-98FE-4065-AE4F-49DE1FA82EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C82B8CF-F5A9-47CA-B142-BF5615744F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38032178-B351-488D-8AFE-44B367331613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F5A3E2-12F3-42AF-80B3-41AF54D4D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6D2C93-E66F-4A62-94C2-8A44C83FA3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEABCB83-257F-4791-95C1-07B28C07E07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6331C335-1E73-4A58-B4D8-DD32E707DA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17112766-1580-4705-8CFD-25612431EDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66770DDE-3B3D-4B05-B36C-C1CE88673736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB9529D-CDD9-46DC-80D5-52CA49B22B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20199A2F-13DE-4AA7-8469-2A817160038D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2E5ED5-1490-49C4-B484-97020B90E611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C55F574-5734-4131-B7FA-7C3B72A34366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785A1D6A-52BD-4EA0-9FEA-805F4CF8F347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982F55FA-230E-486D-857D-A47C5580A98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3868F007-E794-47BA-A6C2-4D5572F607D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5569A138-B8A1-4782-9E21-8189C614A8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B70AD-3197-4BF3-A650-FE7932380FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CED877-4F45-4485-9890-00B65593223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A47C56-D2BA-460A-B3AD-91BD830E31C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1651341-2B35-48B5-8B51-9935260EFFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E60BF36-AD7B-4198-AF3E-72B62572D194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB2741E-31D0-4FE0-90FC-F9AFCDA60FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1B86C-6A53-444E-96A2-4AF29CE20C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA91581-4170-41C4-A55F-A5F93538A146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7338242-710D-4AC3-8621-01CDC7CDD420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D72CDA5-8581-4221-9B28-9AB040D5AF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B7C654-09B0-49E1-B9F1-A4677706EA79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618FF838-56E3-4087-AD2D-FE8677740400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90168D0-DADF-4AD2-81F6-10F5FC4BAB88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78EB89CB-07F2-44AE-B99F-DAAC81FE7D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98756804-6B53-4BD0-89D0-573905D83B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82011DD-1E22-4969-BCFA-95FD9C995CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75573741-4CF9-4465-BED6-6C296754FB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C02E22AF-5768-41CC-AF93-A4A1FCB22C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B471B78-0232-40A1-AD89-55FF000297FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E73FB76-3704-4D60-A9ED-DD412E4294BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468B866F-AE51-42B0-906F-FDD5F7533141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664D1CA5-7169-4E6D-AC41-DC867EDBA91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB720FD3-6527-4081-8959-AAA85E275264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E8E5EE-657A-415D-AE1C-DE725344E325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1138CC-3C59-45FB-BADF-A329B082ED22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:3.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8612F05-E1EF-4B5F-8E37-09506E84BAA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6730B739-B7EF-495D-8256-F552FAAAB588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95728E5-B5C5-4C9D-807E-535726C9886B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C9A34B-FAC8-454C-8C87-908B3A5B54D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5A0CD6-9D95-4C6F-B566-5347391E87AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81B3FD5-97E1-4621-A832-2E9AD79FE0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD46BD3-D489-43F1-ACDF-019533F1EFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC409228-5D3C-4612-B757-0440AA8AE4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64772E1F-9F56-4F13-BFBC-E21BB015DC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE692AA6-C1BB-48A7-91EB-97B283306B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75737945-8A14-45E2-936E-CAF3ABA5F674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A8D4C7-CDFF-437C-914A-69F05B5D1AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C95F366-D7C0-4526-9F97-AC2A86E93BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tryton:tryton:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258679B3-C370-4BF2-BA7F-E91285FE7988"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3826",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97489",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00084.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T17:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an \"on success\" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs \"safe\" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack."
      }, {
        "lang" : "es",
        "value" : "Django 1.10 en versiones anteriores a 1.10.7, 1.9 en versiones anteriores a 1.9.13, y 1.8 en versiones anteriores a 1.8.18 se basa en la entrada del usuario en algunos casos para redirigir al usuario a una URL de \"éxito\". La comprobación de seguridad de estos redireccionamientos (a saber, `` django.utils.http.is_safe_url()``) considera que algunas URL numéricas son \"seguras\" cuando no deberían serlo, también conocida como una vulnerabilidad de redirección abierta. Además, si un desarrollador confía en `` is_safe_url() `` para proporcionar destinos de redirección seguros y pone esa URL en un enlace, podría sufrir un ataque XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D3C0FF-C342-40F1-A187-CD212C16FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED1834-500C-4E37-BD51-E42DB28F3B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3323E-6AC0-4703-A3A4-A429946B0839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB300FB-2A7D-498E-891D-E75DCA9ED7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:c1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC1822A-A7FE-4F38-BD5A-74388A5405D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2510BAD7-1FB6-4F6F-A2CC-9DE9AD39B4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B388C7-ED4E-4416-969F-32263E7D7AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D36984-4C8E-4CDB-8D15-445705FCECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B324AE6-ADD8-41B9-B250-A6577ACBB364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6487058-6768-4AD3-BE27-A0B3D1ACFC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFF0538-B111-44A8-ADC2-87E280186257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3343FF8-53EC-459D-B31C-CD363D04FF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B637E9-067A-4473-9B50-433CCC177982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A5BF6D-631B-4C8E-9868-579BD79100C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280B9958-9163-4126-910A-2EF4B408DFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A40373B-301E-4B81-8FA5-28D916142F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BB3174-7859-4195-B7B3-BCAA280A6F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EF41AF-B2FA-468A-B161-D9FE29CE53EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DF0100-F98E-4997-A8F7-DC07FA4A06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDC5647-8EA7-4595-88C2-541BC489ED2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB571E66-C1B2-4FFD-8265-FB381CF4ACE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49F25DA-CD52-49A9-B5BE-63FD399A9813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C40BAC-6DF3-4EA2-A65A-86462DDD8723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4797F9-82E9-4BA8-868D-C6F18BA01DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "E885D945-FB55-47F4-AA6B-462AFBDAD750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "48BD4296-E83B-4563-9A39-70C95EEAA337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F63D8C0A-D93E-4A1F-A8F8-D22314771AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B754401-8503-4553-853F-4F6BCD2D2FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019C26C7-EF1F-45BB-934E-521E2E64452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18691A7-E4D0-48A4-81A7-89846E991AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C06EBD9-381E-4018-BFDC-E23EA18097B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D134048-B64F-45AE-B4A2-26E516CCF37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39B83A-C10B-4B88-9491-2FB8B07D6EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A4030E-F51F-4944-BCE7-E27CD32EC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC1F046-DAF7-4734-9F80-A3C57857AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EE8536-0E8D-477A-B8EA-817CE21D516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483D0F44-15C8-43A2-B3AE-331F40DA1A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD33E383-2772-4F79-A2C9-4F9EB8FBC8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D82BAD-B2AE-49FB-AF71-393631D2B29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2541CE-0462-46DF-BDD8-C19D6E45140B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "1763E8EB-F943-4A9A-8E19-E6BE9F847DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "48E20213-67BB-4A16-B961-502BA4E54A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C71C2E3-C134-45B0-BDDC-FFE7612AB1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE31960-7C68-42F3-B215-B30A87DB67CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3838B8E-8F0E-4F7A-88E6-FFF2590E5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6C6214-7946-4025-84E6-59448CFE75B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58182835-CB1F-4490-AE65-90601DBFD0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AE04CD-E923-4630-9BAA-5A4D5A5D0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2517FB1C-B732-432B-9F27-EE60F6556433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97406",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T17:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una URL maliciosa manipulada a una sitio Django (1.10 en versiones anteriores a 1.10.7, 1.9 en versiones anteriores a 1.9.13, y 1.8 en versiones anteriores a 1.8.18) que usa la vista ``django.views.static.serve()`` podría redirigir a cualquier otro dominio, también conocido como una vulnerabilidad de redirección abierta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D3C0FF-C342-40F1-A187-CD212C16FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED1834-500C-4E37-BD51-E42DB28F3B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3323E-6AC0-4703-A3A4-A429946B0839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB300FB-2A7D-498E-891D-E75DCA9ED7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.0:c1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC1822A-A7FE-4F38-BD5A-74388A5405D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2510BAD7-1FB6-4F6F-A2CC-9DE9AD39B4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B388C7-ED4E-4416-969F-32263E7D7AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D36984-4C8E-4CDB-8D15-445705FCECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B324AE6-ADD8-41B9-B250-A6577ACBB364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6487058-6768-4AD3-BE27-A0B3D1ACFC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFF0538-B111-44A8-ADC2-87E280186257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3343FF8-53EC-459D-B31C-CD363D04FF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B637E9-067A-4473-9B50-433CCC177982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A5BF6D-631B-4C8E-9868-579BD79100C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280B9958-9163-4126-910A-2EF4B408DFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A40373B-301E-4B81-8FA5-28D916142F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BB3174-7859-4195-B7B3-BCAA280A6F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EF41AF-B2FA-468A-B161-D9FE29CE53EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DF0100-F98E-4997-A8F7-DC07FA4A06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDC5647-8EA7-4595-88C2-541BC489ED2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB571E66-C1B2-4FFD-8265-FB381CF4ACE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49F25DA-CD52-49A9-B5BE-63FD399A9813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C40BAC-6DF3-4EA2-A65A-86462DDD8723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4797F9-82E9-4BA8-868D-C6F18BA01DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "E885D945-FB55-47F4-AA6B-462AFBDAD750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "48BD4296-E83B-4563-9A39-70C95EEAA337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F63D8C0A-D93E-4A1F-A8F8-D22314771AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B754401-8503-4553-853F-4F6BCD2D2FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019C26C7-EF1F-45BB-934E-521E2E64452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18691A7-E4D0-48A4-81A7-89846E991AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C06EBD9-381E-4018-BFDC-E23EA18097B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D134048-B64F-45AE-B4A2-26E516CCF37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39B83A-C10B-4B88-9491-2FB8B07D6EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A4030E-F51F-4944-BCE7-E27CD32EC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC1F046-DAF7-4734-9F80-A3C57857AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EE8536-0E8D-477A-B8EA-817CE21D516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483D0F44-15C8-43A2-B3AE-331F40DA1A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD33E383-2772-4F79-A2C9-4F9EB8FBC8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D82BAD-B2AE-49FB-AF71-393631D2B29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2541CE-0462-46DF-BDD8-C19D6E45140B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "1763E8EB-F943-4A9A-8E19-E6BE9F847DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "48E20213-67BB-4A16-B961-502BA4E54A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C71C2E3-C134-45B0-BDDC-FFE7612AB1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE31960-7C68-42F3-B215-B30A87DB67CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3838B8E-8F0E-4F7A-88E6-FFF2590E5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6C6214-7946-4025-84E6-59448CFE75B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58182835-CB1F-4490-AE65-90601DBFD0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AE04CD-E923-4630-9BAA-5A4D5A5D0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2517FB1C-B732-432B-9F27-EE60F6556433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97401",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-04T17:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user."
      }, {
        "lang" : "es",
        "value" : "ProFTPD en versiones anteriores a 1.3.5e y 1.3.6 en versiones anteriores a 1.3.6rc5 controlan si el directorio de inicio de un usuario puede contener un enlace simbólico hasta la versión de la opción de configuración AllowChrootSymlinks, pero comprueba sólo el último componente de ruta al aplicar AllowChrootSymlinks. Los atacantes con acceso local pueden omitir el control AllowChrootSymlinks reemplazando un componente de ruta (que no sea el último) con un enlace simbólico. El modelo de amenaza incluye un atacante al que no se concede acceso completo al sistema de archivos por parte de un proveedor de alojamiento, pero puede reconfigurar el directorio de inicio de un usuario FTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:*:d:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "17E56F7D-3F37-44E2-9ADB-24F06125A5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A2C657-27EB-475E-9591-99E03DBDA12B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6475817-8CC7-4C0C-A9A6-E58189852DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "84CB8C28-C432-4FD4-9B76-CA6C2C8824D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21D053B1-AFDE-4859-ACFB-C51DC28EAA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.6:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9A0785-FF92-4AB0-8F42-9060FB24120E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=4295",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97409",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/proftpd/proftpd/commit/ecff21e0d0e84f35c299ef91d7fda088e516d4ed",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/proftpd/proftpd/commit/f59593e6ff730b832dbe8754916cb5c821db579f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/proftpd/proftpd/pull/444/commits/349addc3be4fcdad9bd4ec01ad1ccd916c898ed8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=4295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/proftpd/proftpd/commit/ecff21e0d0e84f35c299ef91d7fda088e516d4ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/proftpd/proftpd/commit/f59593e6ff730b832dbe8754916cb5c821db579f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/proftpd/proftpd/pull/444/commits/349addc3be4fcdad9bd4ec01ad1ccd916c898ed8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5649",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-04T18:59:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the cluster."
      }, {
        "lang" : "es",
        "value" : "Apache Geode en versiones anteriores a 1.1.1, cuando un clúster ha habilitado seguridad al establecer la propiedad security-manager, permite a los usuarios autenticados remotos con CLUSTER:READ pero no con el permiso DATA:READ acceder a la página del explorador de datos en Pulse y consecuentemente ejecutar una consulta OQL que expone los datos almacenados en el clúster."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "336CBF51-1C6B-46C8-81E0-2A122E3DD4D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/geode-user/201704.mbox/%3cCAEwge-E4y=EVfhwpfRwsbnBH_hBS3Q-BJS+1BX5omYGW4dnR1w%40mail.gmail.com%3e",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97378",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/geode-user/201704.mbox/%3cCAEwge-E4y=EVfhwpfRwsbnBH_hBS3Q-BJS+1BX5omYGW4dnR1w%40mail.gmail.com%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2671",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-04-05T06:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call."
      }, {
        "lang" : "es",
        "value" : "En LightDM en versiones hasta 1.22.0, un problema de directorio transversal en debian/guest-account.sh permite a atacantes locales allows local attackers poseer ubicaciones de ruta de directorio arbitrarias y escalar privilegios a raíz cuando el usuario invitado se cierra."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.8",
            "matchCriteriaId" : "FE1D9544-19D3-4032-AA78-58C09C9260E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/04/04/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/net/ipv4/ping.c?id=43a6684519ab0a6c52024b5e25322476cabad893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/danieljiang0415/android_kernel_crash_poc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/43a6684519ab0a6c52024b5e25322476cabad893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/danieljiang0415/status/845116665184497664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42135/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/04/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/net/ipv4/ping.c?id=43a6684519ab0a6c52024b5e25322476cabad893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/danieljiang0415/android_kernel_crash_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/43a6684519ab0a6c52024b5e25322476cabad893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/danieljiang0415/status/845116665184497664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42135/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T06:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out."
      }, {
        "lang" : "es",
        "value" : "La función ping_unhash en net/ipv4/ping.c en el kernel de Linux en versiones hasta 4.10.8 es demasiado tarde para obtener un determinado bloqueo y por lo tanto, no puede garantizar que las llamadas de función de desconexión son seguras, lo que permite a los usuarios locales causar una denegación de servicio (pánico) aprovechando el acceso al valor de protocolo de IPPROTO_ICMP en una llamada de sistema de socket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightdm_project:lightdm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22.0",
            "matchCriteriaId" : "7CAC5354-FCCB-416A-A00F-7C337EF9099F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97486",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1677924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41923/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3255-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1677924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41923/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3255-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0325",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10 and Kernel 3.18. Android ID: A-33040280. References: N-CVE-2017-0325."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el HID driver de NVIDIA I2C podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.10 y Kernel 3.18. ID de Android: A-33040280. Referencias bibliográficas: N-CVE-2017-0325."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97350",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0327",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33893669. References: N-CVE-2017-0327."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en NVIDIA crypto driver podría permitir que una aplicación malintencionada local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.10. ID de Android: A-33893669. Referencias: N-CVE-2017-0327."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97333",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0328",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33898322. References: N-CVE-2017-0328."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en NVIDIA crypto driver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permisos. Este problema se califica como moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.10. ID de Android: A-33898322. Referencias: N-CVE-2017-0328."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97347",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0329",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Android ID:A-34115304. References: N-CVE-2017-0329."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de procesador de arranque y administración de energía de NVIDIA podría permitir que una aplicación malintencionada local ejecute código arbitrario dentro del contexto del procesador de arranque y administración de energía. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.18. ID de Android: A-34115304. Referencias: N-CVE-2017-0329."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97353",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0330",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33899858. References: N-CVE-2017-0330."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en NVIDIA crypto driver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permisos. Este problema se califica como moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.10. ID de Android: A-33899858. Referencias bibliográficas: N-CVE-2017-0330."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97347",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0332",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33812508. References: N-CVE-2017-0332."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de cifrado de NVIDIA podría permitir que una aplicación malintencionada local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.10. ID de Android: A-33812508. Referencias: N-CVE-2017-0332."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97333",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0339",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-05T14:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-27930566. References: N-CVE-2017-0339."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de cifrado de NVIDIA podría permitir que una aplicación malintencionada local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel 3.10. ID de Android: A-27930566. Referencias: N-CVE-2017-0339."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97333",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T14:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to remote code execution via a crafted access point that sends a long R0KH-ID field in a Fast BSS Transition Information Element (FT-IE)."
      }, {
        "lang" : "es",
        "value" : "En el Broadcom Wi-Fi HardMAC SoC con firmware fbt, se produce un desbordamiento del búfer de la pila al manejar una respuesta de autenticación 802.11r (FT), que conduce a la ejecución remota de código a través de un punto de acceso manipulado que envía un archivo largo R0KH-ID en un Fast BSS Transition Information Element (FT-IE)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:hardmac_wi-fi_soc_firmware:6.37.34.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467F19C2-A9D7-4B20-8C43-D047F24A30BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:hardmac_wi-fi_soc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08FDB5-39D6-460C-B430-E51E84BF117E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6975",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-05T14:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point.  NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE ID for the operating-system behavior."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi en Apple iOS en versiones anteriores a 10.3.1 no evita la explotación de desbordamiento de búfer de pila de la CVE-2017-6956 a través de un punto de acceso manipulado. NOTA: dado que un sistema operativo podría potencialmente aislarse de la explotación de CVE-2017-6956 sin parches de funciones de firmware de Broadcom, hay un CVE ID independiente para el comportamiento del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3",
            "matchCriteriaId" : "273DCDA3-AF93-4817-A762-83E3273EDDE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2019/May/24",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97328",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038172",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/May/30",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207688",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT210121",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://twitter.com/4Dgifts/status/849268365457850370",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/May/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/May/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT210121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://twitter.com/4Dgifts/status/849268365457850370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T16:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key."
      }, {
        "lang" : "es",
        "value" : "Múltiples problemas de control de acceso en Trend Micro InterScan Web Security Virtual Appliance 6.5 en versiones anteriores a CP 1746 permiten a un usuario remoto autenticado con privilegios bajos como 'Reports Only' o 'Auditor' cambiar la configuración del control de acceso FTP, crear o modificar informes o cargar un certificado de descifrado HTTPS y clave privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "13E40CEF-289B-4946-AFAD-D247C5EEE20C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97482",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116960",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T16:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data. Per IWSVA documentation, by default, IWSVA acts as a private Certificate Authority (CA) and dynamically generates digital certificates that are sent to client browsers to complete a secure passage for HTTPS connections. It also allows administrators to upload their own certificates signed by a root CA. An attacker with low privileges can download the current CA certificate and Private Key (either the default ones or ones uploaded by administrators) and use those to decrypt HTTPS traffic, thus compromising confidentiality. Also, the default Private Key on this appliance is encrypted with a very weak passphrase. If an appliance uses the default Certificate and Private Key provided by Trend Micro, an attacker can simply download these and decrypt the Private Key using the default/weak passphrase."
      }, {
        "lang" : "es",
        "value" : "El dispositivo virtual de InterScan Web Security de Trend Micro (IWSVA) 6.5 en versiones anteriores a CP 1746 maneja mal ciertos datos de clave y certificado. Por IWSVA, por defecto, IWSVA actúa como una entidad de certificación privada (CA) y genera dinámicamente certificados digitales que se envían a los navegadores de cliente para completar un paso seguro para conexiones HTTPS. También permite a los administradores cargar sus propios certificados firmados por una root CA. Un atacante con privilegios bajos puede descargar el certificado actual de la CA y la clave privada (ya sea los predeterminados o los subidos por los administradores) y utilizarlos para descifrar el tráfico HTTPS, comprometiendo así la confidencialidad. Además, la clave privada predeterminada de este dispositivo se cifra con una contraseña muy débil. Si un dispositivo utiliza el certificado predeterminado y la clave privada proporcionada por Trend Micro, un atacante puede simplemente descargarlos y descifrar la clave privada usando la contraseña predeterminada/débil."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "13E40CEF-289B-4946-AFAD-D247C5EEE20C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97492",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116960",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T16:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user to inject malicious JavaScript while creating a new report. Additionally, IWSVA implements incorrect access control that allows any authenticated, remote user (even with low privileges like 'Auditor') to create or modify reports, and consequently take advantage of this XSS vulnerability. The JavaScript is executed when victims visit reports or auditlog pages."
      }, {
        "lang" : "es",
        "value" : "Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 en versiones anteriores a CP 1746 no sanea un nombre de archivo rest/commonlog/report/template, que permite que un usuario de 'Reports Only' inyecte JavaScript malintencionado mientras crea un nuevo informe. Además, IWSVA implementa un control de acceso incorrecto que permite a cualquier usuario remoto autenticado (incluso con privilegios bajos como \"Auditor\") crear o modificar informes y, en consecuencia, aprovechar esta vulnerabilidad XSS. El JavaScript se ejecuta cuando las víctimas visitan los informes o las páginas de auditlog."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "13E40CEF-289B-4946-AFAD-D247C5EEE20C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97487",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116960",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1180",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-05T18:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084."
      }, {
        "lang" : "es",
        "value" : "The IBM TRIRIGA Document Manager contiene una vulnerabilidad que podría permitir a un usuario no autenticado ejecutar acciones a las que no tenían acceso. IBM Reference #: 2001084."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08907B-6794-4F16-85F2-4834FF478639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001084",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97273",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123432?cm_mc_uid=06394756914614889387221&cm_mc_sid_50200000=1491939602",
        "source" : "nvd@nist.gov"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0883",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-04-05T20:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a 9.0.55 y 10.0.2 sufre un aumento de permiso al volver a compartir a través del problema de la API de OCS compartiendo API permitió a un adversario autenticado compartir archivos compartidos con un conjunto de permisos creciente. Esto puede permitir que un atacante edite archivos en un recurso compartido a pesar de tener sólo un conjunto de permisos 'leído'. Tenga en cuenta que esto sólo afecta a carpetas y archivos que el adversario tiene al menos permisos de sólo lectura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.54",
            "matchCriteriaId" : "49A0184E-41CF-4966-9042-DD20F5F6492B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0199F0-45EC-4745-BF5A-001A54029781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/169680",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-001",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/169680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0884",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-04-05T20:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a 9.0.55 y 10.0.2 sufre de una creación de carpetas en carpetas de sólo lectura a pesar del problema de permisos que faltan. Debido a un error lógico en la capa de caché de archivos, un adversario autenticado puede crear carpetas vacías dentro de una carpeta compartida. Tenga en cuenta que esto sólo afecta a carpetas y archivos que el adversario tiene al menos permisos de sólo lectura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.55",
            "matchCriteriaId" : "07CE12C8-1079-4C0F-98CA-9F00E9EDE6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "0B548573-E880-48B6-8189-9901FB63F70F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/169680",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-002",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/169680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0885",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-04-05T20:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a 9.0.55 y 10.0.2 sufre de un mensaje de error que revela la existencia de archivo en el recurso de sólo escritura. Debido a un error en la lógica de la aplicación, un adversario con acceso a un recurso compartido de sólo escritura puede enumerar los nombres de los archivos y subcarpetas existentes comparando los mensajes de excepción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.55",
            "matchCriteriaId" : "07CE12C8-1079-4C0F-98CA-9F00E9EDE6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "0B548573-E880-48B6-8189-9901FB63F70F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/174524",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-003",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/174524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0886",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-04-05T20:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a 9.0.55 y 10.0.2 sufre de un ataque de denegación de servicio. Debido a un error en la lógica de la aplicación, un adversario autenticado puede desencadenar una recursión interminable en la aplicación que conduce a una posible denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.55",
            "matchCriteriaId" : "07CE12C8-1079-4C0F-98CA-9F00E9EDE6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "0B548573-E880-48B6-8189-9901FB63F70F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/174524",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-004",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/174524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0887",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-04-05T20:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a 9.0.55 y 10.0.2 Sufre una evasión en la limitación de cuota. Debido a que no se desinfectan correctamente los valores proporcionados por la cabecera \"OC-Total-Length\" HTTP, un adversario autenticado puede superar su cuota de usuario configurada. Así, utilizando más espacio que el permitido por el administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.55",
            "matchCriteriaId" : "07CE12C8-1079-4C0F-98CA-9F00E9EDE6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "0B548573-E880-48B6-8189-9901FB63F70F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/173622",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-005",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/173622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0888",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-04-05T20:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the \"files\" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a 9.0.55 y 10.0.2 sufre una vulnerabilidad de Content-Spoofing en la aplicación \"files\". La barra de navegación superior mostrada en la lista de archivos contenía entradas parcialmente controlables por el usuario que conducían a una posible representación errónea de la información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.54",
            "matchCriteriaId" : "0DC188AD-8F3A-43BE-B95C-51AC3CB38D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0199F0-45EC-4745-BF5A-001A54029781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97491",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/179073",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-006",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/179073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T20:59:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression."
      }, {
        "lang" : "es",
        "value" : "apt-cacher en versiones anteriores a 1.7.15 y apt-cacher-ng en versiones anteriores a 3.4 permiten división de respuestas HTTP a través de caracteres de nueva línea codificados, relacionados con la falta de bloqueo para la expresión regular de%0[ad]"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt-cacher-ng_project:apt-cacher-ng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "9F58C1F6-AA0C-46EC-81CC-14F62DDD1D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt-cacher_project:apt-cacher:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.13",
            "matchCriteriaId" : "68F8C278-E063-41DF-8773-F644AE670E6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858739",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T20:59:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed."
      }, {
        "lang" : "es",
        "value" : "En Veritas System Recovery en versiones anteriores a 16 SP1, existe una vulnerabilidad de secuestro de DLL en el instalador de revisión si un atacante tiene acceso de escritura al directorio desde el que se ejecuta el producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:system_recovery:16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3711B8A8-A99D-4F62-BAB7-C31CE00ADF41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97483",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-001.html#Issue1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-001.html#Issue1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T22:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges."
      }, {
        "lang" : "es",
        "value" : "HelpDEZk 1.1.1 tiene CSRF en admin/hom #/person/ con un impacto de obtener privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdezk:helpdezk:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8CA732-4397-4B0A-8EAE-533D3783AE32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97484",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/albandes/helpdezk/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41824/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/albandes/helpdezk/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41824/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T22:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code."
      }, {
        "lang" : "es",
        "value" : "HelpDEZk 1.1.1 tiene CSRF en admin/home#/logos/ con un impacto de ejecución remota de código PHP arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdezk:helpdezk:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8CA732-4397-4B0A-8EAE-533D3783AE32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/albandes/helpdezk/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41824/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/albandes/helpdezk/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41824/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T23:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed JPEG image."
      }, {
        "lang" : "es",
        "value" : "La función allocate_channel_framebuffer en uncompressed_components.hh en Dropbox Lepton 1.2.1 permite atacantes remotos provocar una denegación de servicio (error de división y caída de la aplicación) a través de una imagen JPEG mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbox:lepton:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCDBF54-A4B3-4D67-A014-6ECC38D58621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/dropbox/lepton/commit/7789d99ac156adfd7bbf66e7824bd3e948a74cf7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dropbox/lepton/issues/86",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/dropbox/lepton/commit/7789d99ac156adfd7bbf66e7824bd3e948a74cf7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dropbox/lepton/issues/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-05T23:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time."
      }, {
        "lang" : "es",
        "value" : "AIRTAME HDMI dongle con firmware en versiones anteriores a 2.2.0 permite el acceso no autenticado a una gran parte de la interfaz de administración. Es posible extraer toda la información incluida la contraseña Wi-Fi, reiniciar o forzar una actualización de software en un tiempo arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:airtame:hdmi_dongle_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "08A67CB0-A8F6-4C3A-B0CE-903CD463C7E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:airtame:hdmi_dongle:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A851C9-901E-4CFC-B0F9-4AA668AD8DDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cweiske.de/tagebuch/airtame-security.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cweiske.de/tagebuch/airtame-security.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T00:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iwbmp_read_info_header en imagew-bmp.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos provocar una denegación de servicio (referencia de puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T00:59:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iwgif_record_pixel en imagew-gif.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos provocar denegación de servicio (referencia de puntero NULL) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T00:59:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iwgif_record_pixel function en imagew-gif.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0305",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-04-06T14:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic."
      }, {
        "lang" : "es",
        "value" : "F5 SSL Intercept iApp versión 1.5.0 - 1.5.7 es vulnerable a un ataque remoto no autenticado, que pueden permitir la modificación de la configuración del sistema BIG-IP, extracción de archivos de sistema sensibles y la posible ejecución de comandos remotos en el sistema cuando se despliega utilizando la funcionalidad Explicit Proxy más la opción SNAT Auto Map para el tráfico de salida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_intercept_iapp:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3046BEE-F484-479B-BD85-F620A5F26914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_intercept_iapp:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55DA561-A1EC-44C4-9C26-B5278A20FD1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K53244431",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K53244431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T14:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur in the initStreamsWithData function)."
      }, {
        "lang" : "es",
        "value" : "WebSocket.swift en Starscream en versiones anteriores a 2.0.4 permite eludir un SSL Pinning porque el pinning se produce en la función de flujo (esto es demasiado tarde; pinning debe ocurrir en la función initStreamsWithData)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starscream_project:starscream:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "8EEDEE82-D0E9-4596-90BB-EB94351DB59D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Apr/67",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/daltoniam/Starscream/releases/tag/2.0.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Apr/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/daltoniam/Starscream/releases/tag/2.0.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6130",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-04-06T14:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic."
      }, {
        "lang" : "es",
        "value" : "F5 SSL Intercept iApp 1.5.0 - 1.5.7 y SSL Orchestrator 2.0 es vulnerable a un ataque SSRF cuando se despliega utilizando la funcionalidad Dynamic Domain Bypass (DDB) más la opción SNAT Auto Map para el tráfico de salida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_intercept_iapp:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3046BEE-F484-479B-BD85-F620A5F26914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_intercept_iapp:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55DA561-A1EC-44C4-9C26-B5278A20FD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32AF0A1-1AA6-4CCF-AF21-427FAAF65904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K23001529",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K23001529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T14:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03."
      }, {
        "lang" : "es",
        "value" : "GMV Checker ATM Security anterior a la versión 5.0.18 permite a usuarios remotos autenticados ejecutar código arbitrario a través de vectores no especificados, vulnerabilidad también conocida como PT-2017-03."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmv:checker_atm_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B028D9-6CF0-4E70-B082-3E648910BC51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T14:59:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false)."
      }, {
        "lang" : "es",
        "value" : "WebSocket.swift en Starscream en versiones anteriores a 2.0.4 permite eludir un SSL Pinning debido a una gestión incorrecta de la variable certValidated (se puede establecer en true pero no se puede establecer en false)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starscream_project:starscream:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "8EEDEE82-D0E9-4596-90BB-EB94351DB59D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Apr/66",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/daltoniam/Starscream/releases/tag/2.0.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Apr/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/daltoniam/Starscream/releases/tag/2.0.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2675",
      "sourceIdentifier" : "office@obdev.at",
      "published" : "2017-04-06T15:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file \"at.obdev.littlesnitchd.plist\" which gets installed to /Library/LaunchDaemons."
      }, {
        "lang" : "es",
        "value" : "Little Snitch versión 3.0 hasta la versión 3.7.3 sufre de una vulnerabilidad de escalamiento de privilegios locales en la parte del instalador. La vulnerabilidad está relacionada con la instalación del archivo de configuración \"at.obdev.littlesnitchd.plist\" que se instala en /Library/LaunchDaemons."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3104B3C-7FB4-45D8-8B94-38C64DB5358E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C15999-BD32-4576-976A-2B516A159BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B790676-4683-4C37-8D6C-A7422F29D5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA526073-1289-4A26-8D06-2F33318AD940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AAF8D9-02A7-4AE4-A386-6DDC0F813163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D210C3B-3A48-4ACF-A957-253F15962EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35027020-5BFD-45EA-9371-7342B3CA9AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCCA6D8-420C-438A-806D-E3B909B12701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B0447E-6A54-42ED-81A9-B4B16EF2C05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08087DF0-3980-4F59-A759-DD5D710CB5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91998865-31C0-4F6F-A4E9-14F3C4727C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76108E38-65E9-4918-BB90-DCD6063E64F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F625187-402F-461E-A760-EB967DA79E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A00C225-33C2-4F4A-AAF8-131A6FC8CC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918A02B3-1F03-478E-990B-EDE245F69495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F518B2CE-C946-47EF-81BF-C3DF3A2CF9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8D953E-4FC7-4F31-8DB5-DC2C5115CC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A22CFD-D6A7-4EAE-A459-69453ADEB703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239823E3-A508-4B67-8A5F-7DCFCCBD1C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BACEFA0-52CD-45C7-B0A0-A9B4A1EA9B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obdev:little_snitch:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CA536C-001F-438F-8078-C6A4F51A6C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1319946-6002-450D-993E-B9EB28C810E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028AC949-F4BB-40B9-B5E0-B8863198DFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D943AE-E2B0-4E8B-B2BE-66503014A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC35634E-0523-4393-99C4-BDD1EC9BDD32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB09E064-8BFF-4013-AE23-8F9EC75BB8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789BC777-8B55-4E10-A50D-8D14F3D4D132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:little_snitch:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679E0A62-E425-4FFC-9C2F-38590D71FC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://twitter.com/patrickwardle/status/849076615170711552",
        "source" : "office@obdev.at"
      }, {
        "url" : "https://www.obdev.at/products/littlesnitch/releasenotes.html",
        "source" : "office@obdev.at"
      }, {
        "url" : "https://twitter.com/patrickwardle/status/849076615170711552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.obdev.at/products/littlesnitch/releasenotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T15:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ (aka Write request) operation for a configuration file or an executable file."
      }, {
        "lang" : "es",
        "value" : "El servidor Spiceworks TFTP, tal y como se distribuye con Spiceworks Inventory 7.5, permite a atacantes remotos acceder al directorio de Spiceworks data\\configurations aprovechando la naturaleza no autenticada del servicio TFTP para todos los clientes que pueden llegar al puerto UDP 69, como lo demuestra una operación WRQ (también conocido como solicitud de escritura) para un archivo de configuración o un archivo ejecutable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiceworks:spiceworks:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D94E068-7C8E-4CA8-B785-539709CB03E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.spiceworks.com/support/inventory/docs/network-config#security",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41825/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.spiceworks.com/support/inventory/docs/network-config#security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41825/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T15:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041."
      }, {
        "lang" : "es",
        "value" : "La aplicación Splunk Hadoop Connect tiene una vulnerabilidad de recorrido transversal que permite a usuarios remotos autenticados ejecutar código arbitrario, también conocido como ERP-2041."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:hadoop_connect:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD6FFF1-3387-440D-8E06-E665BDAC37E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.splunk.com/view/SP-CAAAP2F",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAP2F",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T16:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism."
      }, {
        "lang" : "es",
        "value" : "MyBB en versiones anteriores a 1.8.11 permite a atacantes remotos evitar un mecanismo de protección SSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.10",
            "matchCriteriaId" : "EA5913D3-77D8-4093-9225-0B1BDE2A9B5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97480",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/commit/f5de8fc2aad11e0d2583f585535ccfa2b46325db#diff-7fe6e55397c77ab9a0f5d57bc4cbe5b9R6781",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170407-0_MyBB_SSRF_vulnerability_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/commit/f5de8fc2aad11e0d2583f585535ccfa2b46325db#diff-7fe6e55397c77ab9a0f5d57bc4cbe5b9R6781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170407-0_MyBB_SSRF_vulnerability_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T17:59:00.163",
      "lastModified" : "2025-10-22T00:16:10.770",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de inyección de comandos en el router doméstico Zyxel EMG2926 con el firmware V1.00(AAQT.4)b8. La vulnerabilidad se encuentra en las herramientas de diagnóstico, específicamente la función nslookup. Un usuario malintencionado puede explotar numerosos vectores para ejecutar comandos arbitrarios en el router, como el parámetro ping_ip al expert/maintenance/diagnostic/nslookup URI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-09-18",
      "cisaActionDue" : "2023-10-09",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Zyxel EMG2926 Routers Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:emg2926_firmware:v1.00\\(aaqt.4\\)b8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8E6A9C-1DB3-4533-BBB0-DC863CD9BFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:emg2926:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2FB079-1401-4FB8-89D1-25EDEAE435A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41782/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41782/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6884",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T17:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037."
      }, {
        "lang" : "es",
        "value" : "En vBulletin en versiones anteriores a 5.3.0, atacantes remotos pueden pasar por alto el parche CVE-2016-6483 y realizar ataques SSRF aprovechando el comportamiento de la función parse_url de PHP, también conocido como VBV-17037."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.6",
            "matchCriteriaId" : "216C2C3F-83BF-409C-96E5-1F2880B5DD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4367744-vbulletin-5-3-0-connect-is-now-available",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4367744-vbulletin-5-3-0-connect-is-now-available",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T17:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges."
      }, {
        "lang" : "es",
        "value" : "public/rolechangeadmin en Faveo 1.9.3 permite CSRF. El impacto es la obtención de privilegios del administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ladybirdweb:faveo_helpdesk:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3E2527-61E6-4BC7-9295-05312F40578C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rungga.blogspot.co.id/2017/04/csrf-privilege-escalation-manipulation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97493",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ladybirdweb/faveo-helpdesk/issues/446",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41830/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rungga.blogspot.co.id/2017/04/csrf-privilege-escalation-manipulation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ladybirdweb/faveo-helpdesk/issues/446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41830/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3832",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-06T18:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in a DoS condition. This vulnerability affects only the Cisco Wireless LAN Controller 8.3.102.0 release. Cisco Bug IDs: CSCvb48198."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración web del software Cisco Wireless LAN Controller (WLC) podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad se debe a que falta un controlador interno para la solicitud específica. Un atacante podría explotar esta vulnerabilidad accediendo a una URL oculta específica en la interfaz de administración web de la GUI. Una explotación exitosa podría permitir al atacante provocar una recarga del dispositivo, resultando en una condición DoS. Esta vulnerabilidad sólo afecta a la versión de Cisco Wireless LAN Controller 8.3.102.0. Cisco Bug IDs: CSCvb48198."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_firmware:8.3.102.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BDEF67-9AE2-4364-B088-CB22B47CC9FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6C4735-49D1-46CB-AED8-4DDFC5014FB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97421",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038184",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3834",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-06T18:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete control of an affected device. The vulnerability is due to the existence of default credentials for an affected device that is running Cisco Mobility Express Software, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker who has layer 3 connectivity to an affected device could use Secure Shell (SSH) to log in to the device with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points that are running an 8.2.x release of Cisco Mobility Express Software prior to Release 8.2.111.0, regardless of whether the device is configured as a master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software for next generation Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Aironet 1830 Series y Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software podría permitir a un atacante remoto no autenticado tomar el control completo de un dispositivo afectado. La vulnerabilidad se debe a la existencia de credenciales predeterminadas para un dispositivo afectado que ejecuta el software Cisco Mobility Express, independientemente de si el dispositivo está configurado como punto de acceso maestro, subordinado o independiente. Un atacante que tenga una conectividad de capa 3 con un dispositivo afectado podría usar Secure Shell (SSH) para iniciar sesión en el dispositivo con privilegios elevados. Una explotación exitosa podría permitir al atacante tomar el control completo del dispositivo. Esta vulnerabilidad afecta a Cisco Aironet 1830 Series y Cisco Aironet 1850 Series Access Points que están ejecutando un lanzamiento de 8.2.x Cisco Mobility Express Software anterior a la versión lanzamiento 8.2.111.0, independientemente de si el dispositivo está configurado como un punto de acceso maestro, subordinado o independiente. El lanzamiento 8.2 fue el primer lanzamiento de Cisco Mobility Express Software para la proxima generación Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.100.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6084120A-BC10-456C-A273-DB79F18353BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.102.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6D3512-3832-449C-96D7-6D7A77FB7A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.102.139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F77138D-32E1-4329-9475-0E17EB9B7F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.111.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7B23A8-EFFC-4B09-85A0-C55F94C7305D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.121.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C38E9BB-76F6-4AA2-8261-87EF0C658BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.130.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EDCFD5-D028-4467-B2CA-9205665A1A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:90.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD48838B-58A8-4D3F-8B7B-DAD50C46726E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:102.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2526CE-DAD1-4B1F-835C-FEBBE538F835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830i_access_point:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D15AA6-C1C1-48E9-9BCA-E49EE672F3D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850e_access_point:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF5568A-AC92-4617-9AFD-27ACB8AFFCC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850i_access_point:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDA73CE-6025-43A8-8801-8A2372E852F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97422",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038181",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ame",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ame",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T18:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/<pid>/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester."
      }, {
        "lang" : "es",
        "value" : "La función _checkPolkitPrivilege en serviceHelper.py en Back In Time (también conocido como backintime) 1.1.18 y versiones anteriores utiliza un método de autorización polkit obsoleto (unix-process) que está sujeto a una condición de carrera (hora del cheque, tiempo de uso). Con este método de autorización, el propietario de un proceso que solicita una operación polkit es verificado por polkitd a través de /proc//status, momento en el cual el proceso solicitante puede haber sido reemplazado por un proceso diferente con el mismo PID que tiene privilegios diferentes que el solicitante original."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backintime_project:backintime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.18",
            "matchCriteriaId" : "F27244E7-76AC-4A73-B01D-F76B0A27DAF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bit-team/backintime/commit/7f208dc547f569b689c888103e3b593a48cd1869",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bit-team/backintime/commit/7f208dc547f569b689c888103e3b593a48cd1869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4964",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-04-06T19:59:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a \"CPI code injection vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Cloud Foundry Foundation El BOSH Azure CPI v22 podría potencialmente permitir que una célula madre manipulada maliciosamente ejecute código arbitrario en máquinas virtuales creadas por el director, también conocido como \"vulnerabilidad de inyección de código CPI\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:bosh_azure_cpi:22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B646F9B-13CC-48A9-93D5-204E52CBC4CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4964/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T21:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML file is AES-CBC encrypted; however, the key used for encryption (SoMachineBasicSoMachineBasicSoMa) cannot be changed. After decrypting the XML file with this key, the user password can be found in the decrypted data. After reading the user password, the project can be opened and modified with the Schneider product."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Schneider Electric SoMachine Basic 1.4 SP1 y Schneider Electric Modicon TM221CE16R 1.3.3.3 tienen una vulnerabilidad de clave codificada. La función Protección de proyectos se utiliza para evitar que usuarios no autorizados abran un archivo de proyecto protegido XML, solicitando al usuario una contraseña. Este archivo XML es AES-CBC cifrado; Sin embargo, no se puede cambiar la clave utilizada para el cifrado (SoMachineBasicSoMachineBasicSoMa). Después de descifrar el archivo XML con esta clave, la contraseña de usuario se puede encontrar en los datos descifrados. Después de leer la contraseña de usuario, el proyecto se puede abrir y modificar con el producto Schneider."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_tm221ce16r_firmware:1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C40BAF-2C91-4069-A62E-1B1E60BA1619"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_tm221ce16r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00715571-AC4B-4B1F-8E65-385B56F2004C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:somachine:1.4:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85698ADE-078B-4461-BA24-C88BB16C6E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-097-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97518",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://os-s.net/advisories/OSS-2017-02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-097-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://os-s.net/advisories/OSS-2017-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T21:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \\x00\\x01\\x00\\x00\\x00\\x05\\x01\\x5a\\x00\\x03\\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Schneider Electric Modicon TM221CE16R 1.3.3.3 permiten a atacantes remotos descubrir la contraseña de protección de la aplicación a través de una solicitud \\x00\\x01\\x00\\x00\\x00\\x05\\x01\\x5a\\x00\\x03\\x00 al puerto Modbus (502/tcp). Posteriormente la aplicación puede descargarse, modificarse y cargarse arbitrariamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_tm221ce16r_firmware:1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C40BAF-2C91-4069-A62E-1B1E60BA1619"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_tm221ce16r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00715571-AC4B-4B1F-8E65-385B56F2004C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-097-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97523",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://os-s.net/advisories/OSS-2017-01.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-097-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://os-s.net/advisories/OSS-2017-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-06T22:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8."
      }, {
        "lang" : "es",
        "value" : "Las radios inalámbricas de DragonWave Horizon 1.01.03 tienen credenciales de inicio de sesión (como el nombre de usuario de enérgico y la contraseña de conexión inalámbrica) con el fin de permitir que el proveedor acceda a los dispositivos. Estas credenciales se pueden utilizar en la interfaz web o mediante la conexión al dispositivo a través de TELNET. Esto se arregla en versiones recientes incluyendo 1.4.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dragonwavex:horizon_wireless_radio_firmware:1.01.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197DA04A-FA5E-4156-A43F-7ABAE9130283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dragonwavex:horizon_wireless_radio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909D714B-9084-47B1-88D6-5D19B6B32212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/159276197313/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/159276197313/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T04:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension."
      }, {
        "lang" : "es",
        "value" : "PivotX 2.3.11 permite a usuarios remotos Advanced autenticados ejecutar código PHP arbitrario realizando una carga con una extensión de archivo segura (tal como .jpg) y luego invocando la función duplicada para cambiar a la extensión .php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotx:pivotx:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3B3253-5D04-41EF-9ABF-2CE3551AF86D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/X1nda/749b6aac6e080624d9f8ec81321335df",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/X1nda/749b6aac6e080624d9f8ec81321335df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T04:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
      }, {
        "lang" : "es",
        "value" : "XiongMai uc-httpd tiene un salto de directorio que permite la lectura de archivos arbitrarios a través de una petición HTTP \"GET ../\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiongmaitech:uc-httpd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A3801B-A69B-4515-9046-CD7E780777D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T04:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en memoria dinámica en parser.c en libming 0.4.7 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación listswf) o posiblemente tener otro impacto no especificado a través de un archivo SWF manipulado. NOTA: Este problema existe debido a una corrección incompleta para CVE-2016-9831."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:libming:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B4A4AA-DE48-45A4-AE25-1C83C1CDC743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libming/libming/issues/68",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2387",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-04-07T11:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Apple Music (también conocida como com.apple.android.music) en versiones anteriores a 2.0 para Android no verifica los certificados X.509 de los servidores SSL, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:apple_music:1.2.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "C91A88A8-A763-466B-819A-506AC0313496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.info-sec.ca/advisories/Apple-Music.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97390",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.info-sec.ca/advisories/Apple-Music.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T16:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field."
      }, {
        "lang" : "es",
        "value" : "inc/PMF/Faq.php en phpMyFAQ en versiones anteriores a 2.9.7 tiene XSS en el campo de pregunta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.6",
            "matchCriteriaId" : "58FC492F-0DFF-4AD4-9ED1-0587EBECA814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-04-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/a69f32175c28af1b34e5df83000f830e60f6bce9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-04-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/a69f32175c28af1b34e5df83000f830e60f6bce9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3817",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.5(0.1) 6.0(0.0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de comprobación de recursos basada en roles del Director del Unified Computing System (UCS) de Cisco podría permitir a un atacante remoto autenticado ver información no autorizada para cualquier máquina virtual en un dominio UCS. Más información: CSCvc32434. Lanzamientos afectados conocidos: 5,5 (0,1) 6,0 (0,0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_director:5.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C9601F-23EB-497F-94C9-88A34CF0F4B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_director:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCB4D63-DC55-4A29-9A4B-E08A7EBD87CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97430",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038194",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-director",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-director",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3848",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected Releases: 2.2(2). Known Fixed Releases: 3.1(0.0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web HTTP de Cisco Prime Infrastructure podría permitir que un atacante remoto no autenticado lleve a cabo un ataque XSS contra un usuario de la interfaz web del sistema afectado. Más información: CSCuw63001 CSCuw63003. Lanzamientos afectados conocidos: 2.2(2). Lanzamientos fijos conocidos: 3.1(0.0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7830BF63-55ED-4D8B-B380-1E78E338EA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F3C5A5-6C84-408D-B59A-265F8775C943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96505",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037947",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-cpi",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-cpi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3884",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to access sensitive data. The attacker does not need administrator credentials and could use this information to conduct additional reconnaissance attacks. More Information: CSCvc60031 (Fixed) CSCvc60041 (Fixed) CSCvc60095 (Open) CSCvc60102 (Open). Known Affected Releases: 2.2 2.2(3) 3.0 3.1(0.0) 3.1(0.128) 3.1(4.0) 3.1(5.0) 3.2(0.0) 2.0(4.0.45D)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Prime Infrastructure y del administrador Evolved Programmable Network de Cisco (EPN) podría permitir a un atacante remoto autenticado acceder a datos confidenciales. El atacante no necesita credenciales de administrador y podría usar esta información para realizar ataques de reconocimiento adicionales. Más información: CSCvc60031 (fijo) CSCvc60041 (fijo) CSCvc60095 (abierto) CSCvc60102 (abierto). Liberaciones conocidas: 2,2 2,2(3) 3,0 3,1(0,0) 3,1(0,128) 3,1(4,0) 3,1(5,0) 3,2(0,0) 2,0(4,0,45D)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0\\(4.0.45d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "408D3C56-EB92-4013-860B-C60AF0D03D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56394A07-6D74-4588-8C05-DE04959F7FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BCDE33-49E9-4B46-AE31-563F3B6434F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F3C5A5-6C84-408D-B59A-265F8775C943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F4F1D6-82DA-4675-B734-D9C5371E6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(0.128\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9CC0D0-08A5-45A0-BF1C-2D3E32D49B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(4.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7500DF7B-FD3C-49B3-81C7-55E78B83A1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(5.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A66318-C59B-4D2C-B63E-5B1E3A61E63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "146E4ECF-B903-488C-8644-932FC57F072C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97470",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038189",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cpi",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cpi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3885",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process consumes a high level of CPU resources. Affected Products: This vulnerability affects Cisco Firepower System Software running software releases 6.0.0, 6.1.0, 6.2.0, or 6.2.1 when the device is configured with an SSL policy that has at least one rule specifying traffic decryption. More Information: CSCvc58563. Known Affected Releases: 6.0.0 6.1.0 6.2.0 6.2.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el ensamblaje del motor de detección de los paquetes Secure Sockets Layer (SSL) para el software Cisco Firepower System podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio (DoS) porque el proceso Snort consume un alto nivel de recursos de la CPU. Productos afectados: Esta vulnerabilidad afecta al software Cisco Firepower System que ejecuta las versiones de software 6.0.0, 6.1.0, 6.2.0 o 6.2.1 cuando el dispositivo está configurado con una directiva SSL que tiene al menos una regla que especifica el descifrado del tráfico. Más información: CSCvc58563. Lanzamientos afectados conocidos: 6.0.0 6.1.0 6.2.0 6.2.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E4035-E8E2-4964-A6F4-7292E1804E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6614ED6C-E77E-4C0D-AA96-0BEE84BE2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEB9A40-0062-406D-B56D-3163CBBE08D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4A52EA-D464-4855-ABEC-FD98E0F3BD97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97451",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3886",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL database queries. More Information: CSCvc74291. Known Affected Releases: 1.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 12.0(0.98000.619) 12.0(0.98000.485) 12.0(0.98000.212) 11.5(1.13035.1) 11.0(1.23900.5) 11.0(1.23900.2) 11.0(1.23067.1) 10.5(2.15900.2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Unified Communications Manager podría permitir a un atacante autenticado y remoto afectar la confidencialidad del sistema ejecutando consultas SQL arbitrarias, también conocida como inyección de SQL. El atacante debe ser autenticado como usuario administrativo para ejecutar consultas de base de datos SQL. Más información: CSCvc74291. Lanzamientos afectados conocidos: 1.0(1.10000.10) 11.5(1.10000.6). Lanzamientos fijos conocidos: 12.0(0.98000.619) 12.0(0.98000.485) 12.0(0.98000.212) 11.5(1.13035.1) 11.0(1.23900.5) 11.0(1.23900.2) 11.0(1.23067.1) 10.5(2.15900.2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97432",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038192",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3887",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco Firepower System Software prior to the first fixed release when it is configured with an SSL Decrypt-Resign policy. More Information: CSCvb62292. Known Affected Releases: 6.0.1 6.1.0 6.2.0. Known Fixed Releases: 6.2.0 6.1.0.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el motor de detección que maneja los paquetes de Secure Sockets Layer (SSL) para el software Cisco Firepower System podría permitir que un atacante remoto no autenticado provoque una condición de denegación de servicio porque el proceso de Snort se reinicia inesperadamente. Esta vulnerabilidad afecta al software Cisco Firepower System antes de la primera versión fija cuando está configurada con una directiva Decrypt-Resign de SSL. Más información: CSCvb62292. Lanzamientos afectados conocidos: 6.0.1 6.1.0 6.2.0. Lanzamientos fijos conocidos: 6.2.0 6.1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "995667FD-35F1-49E5-96DB-2FDFF5E0B523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FB47CF-2A6A-4121-BFF7-5862E163B8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC52A8B-7DF4-47B2-9F49-627F59656E5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97453",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3888",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability affects Cisco Unified Communications Manager with a default configuration running an affected software release with the attacker authenticated as the administrative user. More Information: CSCvc83712. Known Affected Releases: 12.0(0.98000.452). Known Fixed Releases: 12.0(0.98000.750) 12.0(0.98000.708) 12.0(0.98000.707) 12.0(0.98000.704) 12.0(0.98000.554) 12.0(0.98000.546) 12.0(0.98000.543) 12.0(0.98000.248) 12.0(0.98000.244) 12.0(0.98000.242)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco Unified Communications Manager podría permitir a un atacante remoto autenticado llevar a cabo un ataque XSS contra un usuario de la interfaz de administración basada en web de un dispositivo afectado. Esta vulnerabilidad afecta a Cisco Unified Communications Manager con una configuración predeterminada que ejecuta una versión de software afectada con el atacante autenticado como usuario administrativo. Más información: CSCvc83712. Lanzamientos afectados conocidos: 12.0(0.98000.452). Lanzamientos fijos conocidos: 12,0(0,98000,750) 12,0(0,98000, 708) 12,0(0,98000, 574) 12,0(0,98000,543) 12,0(0,98000,543) 12,0(0,98000, 704) 248) 12,0(0,98000,244) 12,0(0,98000,242)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0\\(0.98000.452\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CD4D05-AE30-4224-A7AE-4B8539376412"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97431",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038193",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3889",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More Information: CSCvc60123. Known Affected Releases: 5.1.0-015."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Registered Envelope Service podría permitir a un atacante remoto no autenticado redirigir a un usuario a una página web no deseada, también conocida como Open Redirect. Esta vulnerabilidad afecta al servicio basado en la nube de Cisco Registered Envelope. Más información: CSCvc60123. Lanzamientos afectados conocidos: 5.1.0-015."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:registered_envelope_service:5.1.0-015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A736F2A-3E14-4C2A-8E21-0A3B9F6C3A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97433",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6597",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61394 CSCvb86816. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1658) 2.0(1.115)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el comando local-mgmt de la CLI del Administrador del Unified Computing System de Cisco (UCS), el cortafuegos de próxima generación Cisco Firepower 4100 (NGFW) y el dispositivo de seguridad Cisco Firepower 9300 podrían permitir a un atacante local autenticado realizar una inyección de comandos ataque. Más información: CSCvb61394 CSCvb86816. Lanzamientos afectados conocidos: 2.0(1.68) 3.1(1k)A. Lanzamientos fijos conocidos: 92,2(1,101) 92,1(1,1658) 2,0(1,115)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.1\\(1k\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA364D7-42A2-4554-B817-E2CED4AF7D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:2.0\\(1.68\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BF402B-B8F0-4F91-A2C2-E92470B19FA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97476",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038195",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6598",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege Escalation. More Information: CSCvb86725 CSCvb86797. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.105) 92.1(1.1733) 2.1(1.69)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de complemento de depuración del Unified Computing System de Cisco (UCS), Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), y dispositivo de seguridad Cisco Firepower 9300 podría permitir a un atacante local autenticado ejecutar comandos arbitrarios, También conocido como Privilege Escalation. Más información: CSCvb86725 CSCvb86797. Lanzamientos afectados conocidos: 2.0(1.68) 3.1(1k)A. Lanzamientos fijos conocidos: 92,2(1,105) 92,1(1,1733) 2,1(1,69)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_extensible_operating_system:2.0\\(1.68\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B683224-C7BD-4893-9441-9BA3E4B8E162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.1\\(1k\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA364D7-42A2-4554-B817-E2CED4AF7D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97429",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038198",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6599",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash due to a system memory leak, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco IOS XR Software with gRPC enabled. More Information: CSCvb14433. Known Affected Releases: 6.1.1.BASE 6.2.1.BASE. Known Fixed Releases: 6.2.1.22i.MGBL 6.1.22.9i.MGBL 6.1.21.12i.MGBL 6.1.2.13i.MGBL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo de llamadas de procedimiento remoto definidas por Google (gRPC) en el software Cisco IOS XR podría permitir que un atacante remoto no autenticado provocara que el Event Management Service daemond (emsd) se bloqueara debido a una pérdida de memoria del sistema, dando como resultado una denegación de servicio (DoS). Esta vulnerabilidad afecta al software Cisco IOS XR con gRPC habilitado. Más información: CSCvb14433. Lanzamientos afectados conocidos: 6.1.1.BASE 6.2.1.BASE. Lanzamientos fijos conocidos: 6.2.1.22i.MGBL 6.1.22.9i.MGBL 6.1.21.12i.MGBL 6.1.2.13i.MGBL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CC4093-80C1-4B0C-82D2-647C625FF42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A732BF-A723-48EA-AC0F-813CA5A2DB0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97464",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038191",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ios",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ios",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6600",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351 CSCvb61637. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1645) 2.0(1.82) 1.1(4.136."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el CLI del Unified Computing System (UCS) de Cisco, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), y dispositivo de seguridad Cisco Firepower 9300 podría permitir a un atacante autenticado y local realizar un ataque de inyección de comandos. Más información: CSCvb61351 CSCvb61637. Lanzamientos afectados conocidos: 2.0(1.68) 3.1(1k)A. Lanzamientos fijos conocidos: 92.2(1.101) 92.1(1.1645) 2.0(1.82) 1.1(4.136."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_extensible_operating_system:2.0\\(1.68\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B683224-C7BD-4893-9441-9BA3E4B8E162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.1\\(1k\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA364D7-42A2-4554-B817-E2CED4AF7D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97439",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038199",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6601",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384 CSCvb86764. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1647)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el CLI del Unified Computing System (UCS) de Cisco, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), y dispositivo de seguridad Cisco Firepower 9300 podría permitir a un atacante autenticado y local realizar un ataque de inyección de comandos. Más información: CSCvb61384 CSCvb86764. Lanzamientos afectados conocidos: 2.0(1.68) 3.1(1k)A. Lanzamientos fijos conocidos: 92.2(1.101) 92.1(1.1647)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_extensible_operating_system:2.0\\(1.68\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B683224-C7BD-4893-9441-9BA3E4B8E162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.1\\(1k\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA364D7-42A2-4554-B817-E2CED4AF7D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97477",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038196",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6602",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189 CSCvb86775. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1742) 92.1(1.1658) 2.1(1.38) 2.0(1.107) 2.0(1.87) 1.1(4.148) 1.1(4.138)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el CLI del Unified Computing System (UCS) de Cisco, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), y dispositivo de seguridad Cisco Firepower 9300 podría permiti a un atacante autenticado y local realizar un ataque de inyección de comandos. Más información: CSCvb66189 CSCvb86775. Lanzamientos afectados conocidos 2.0(1.68) 3.1(1k)A. Lanzamientos fijos conocidos 92.2(1.101) 92.1(1.1742) 92.1(1.1658) 2.1(1.38) 2.0(1.107) 2.0(1.87) 1.1(4.148) 1.1(4.138)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_extensible_operating_system:2.0\\(1.68\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B683224-C7BD-4893-9441-9BA3E4B8E162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.1\\(1k\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA364D7-42A2-4554-B817-E2CED4AF7D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97472",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038197",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6603",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases: 15.4(3)S3.15. Known Fixed Releases: 15.6(2)SP 15.6(1.31)SP."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los dispositivos Cisco ASR 903 o ASR 920 que funcionan con una tarjeta RSP2 podría permitir a un atacante no autenticado y adyacente provocar una denegación de servicio (DoS) en un sistema de destino debido a un procesamiento incorrecto de paquetes IPv6. Más información: CSCuy94366. Lanzamientos afectados conocidos: 15.4 (3) S3.15. Lanzamientos fijos conocidos: 15.6(2)SP 15.6(1.31)SP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asr_900_series_firmware:15.4\\(3\\)s3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5622AD5D-BF0F-465A-AF5E-EBBAD8F173FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B83BED-5A49-4CF0-9827-AA291D01F60E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1E8937-51D9-43E6-876E-5D39AD3D32C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9ECE39-C111-412B-AF56-9B7435D98FE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B25F27-6527-46F8-9C1A-4B4F79F3E6C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE70CCD-6062-45D8-8566-7C9E237E030F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375F9E12-A61B-4FD3-AE07-D4E686EB112A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D724F932-4548-429D-8CAA-E82C3435A194"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCC94C3-9EEF-4600-BE82-8AEDEB0F1446"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51938C0A-AFDB-4B12-BB64-9C67FC0C738F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97450",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038185",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-asr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-asr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6604",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System (UCS) B-Series M3 and M4 Blade Servers, Unified Computing System (UCS) C-Series M3 and M4 Rack Servers. More Information: CSCvc37931. Known Affected Releases: 3.1(2c)B."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web del software Cisco Integrated Management Controller (IMC) podría permitir a un atacante remoto no autenticado redirigir a un usuario a una página web malintencionada. Esta vulnerabilidad afecta a los siguientes productos de Cisco que ejecutan el software IMC de Cisco: Unified Computing System (UCS) servidores B-Series M3 y M4 Blade, Unified Computing System (UCS) Servidores en rack C-Series M3 y M4. Más información: CSCvc37931. Lanzamientos fijos conocidos: 3.1(2c)B."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:2.2\\(8b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F41C403-6B27-48FC-8558-4648DEB5F59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C8D0C-B97C-4F92-A15E-52E312CB7837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2c\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192449A4-B643-4E06-8F41-021EBB5D66F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97457",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038186",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6606",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-07T17:59:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSCuz42122. Known Affected Releases: 15.6(1.1)S 16.1.2 16.2.0 15.2(1)E. Known Fixed Releases: Denali-16.1.3 16.2(1.8) 16.1(2.61) 15.6(2)SP 15.6(2)S1 15.6(1)S2 15.5(3)S3a 15.5(3)S3 15.5(2)S4 15.5(1)S4 15.4(3)S6a 15.4(3)S6 15.3(3)S8a 15.3(3)S8 15.2(5)E 15.2(4)E3 15.2(3)E5 15.0(2)SQD3 15.0(1.9.2)SQD3 3.9(0)E."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en una secuencia de comandos de inicio del software Cisco IOS XE podría permitir a un atacante no autenticado con acceso físico al sistema de destino ejecutar comandos arbitrarios en el sistema operativo subyacente con los privilegios del usuario root. Más información: CSCuz06639 CSCuz42122. Lanzamientos afectados conocidos: 15.6(1.1)S 16.1.2 16.2.0 15.2(1)E. Lanzamientos fijos conocidos: Denali-16.1.3 16.2(1.8) 16.1(2.61) 15.6(2)SP 15.6(2)S1 15.6(1)S2 15.5(3)S3a 15.5(3)S3 15.5(2)S4 15.5(1)S4 15.4(3)S6a 15.4(3)S6 15.3(3)S8a 15.3(3)S8 15.2(5)E 15.2(4)E3 15.2(3)E5 15.0(2)SQD3 15.0(1.9.2)SQD3 3.9(0)E."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A13401-2660-483E-89A5-6420B5866BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5F84EF-1C19-4AB3-BD01-A3DE47B2A46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FC74E2-2510-40F5-BB2B-11608B844E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E021FDA-0D92-4A81-8721-EED507426922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C69E845-700C-4250-B528-9482A5362F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389D6E60-F6AB-40B8-B894-CE97BF13AE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9388B3A6-2952-4895-B1C1-2B7F160AB637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A40EA0A-1642-4950-9943-20C1888C18D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFD3A39-9E02-409C-9F9C-9C90D58D3A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C0900A-1354-4A20-B5ED-8C005BCE4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6256C79-DBDA-4ED7-AA3B-DE78B8C387B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F3E17-5C65-4C91-8881-AAEAA00BCD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0FE9F-FFEC-400B-8CDF-2888FDCD01A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B811A-AAAD-49C0-8FC2-5C79078BA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E13E8-A609-4635-8427-558FA2359484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E76FF-DE36-463D-B610-A99C90AF7B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD751BA-0987-48BB-89C0-A82F78816423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104D911-5FFC-4605-B234-6FD40A206DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.3se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF46126-B8C2-4C03-BF28-F36BB54A6F01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC787C70-6540-4AF7-9F05-8FD86284091E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.4sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC716D3D-5C37-4E36-8F6B-53801DC7225E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.5sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E289B7-7692-448B-B15E-224AF4F01D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42A8A6F-A732-4441-A94F-FCDFA960EB9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.7sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EC5B2-CAE1-4C8F-8F96-FE006049FF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D2447-BD8A-473C-B26E-06897080DD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.9sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8169591-4C3D-4C32-A24F-EACDBC62B77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.10sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5944EA5-29A2-438A-AA5E-ABC45E298419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.11sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6584D8-AE44-40D0-990C-94C377DBF275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF8A6EC-3C45-4CDB-81B5-4D50CD5C4087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC52EC4-6658-40AB-A357-F9B538F21ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52C1850-27F7-40C8-BA26-660D160AD163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E519217-3180-4C49-863F-0D10E47F1A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930678B3-1527-4967-9D8F-27FC0DA060AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737D7668-872C-4246-9AB9-12FF059E231A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B34E77-D0BD-4501-A125-CDBE9A47031F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC822D-E886-46A9-80E8-06DD753A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312CE6B-F3F5-40B3-8862-3BB1314376E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A34268-7618-48D2-8872-27B5B624543B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CBDA4F-DBB3-4426-8C16-2B2314ACF21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9029376B-E263-4B30-8B97-7101CFF7D39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6893B368-D3C1-416D-A4E8-6484AF91C7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2017A75-CC29-4161-85CB-7A531E5ABB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.3se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD337928-C7D9-4CBC-8785-5C49FCA5B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.4se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E83B0A-33F1-4154-969E-E66E800890DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.5se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E952E-588D-4825-9EB3-03CE16F96E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45225F2-C9EB-493D-B845-64BFB8DBB89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252377A3-7F15-45F2-A169-BBC37858D4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C809C7E-738B-461F-9155-BC19AAC8B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D918A4A-7E60-4C8B-86D8-82BCA99B0844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E8F96A-EA9C-4E66-8491-9B2A3A4023F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596A43FC-0DDA-4AF6-A4A4-A488B5740D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85908754-8426-49D3-BCC2-AF174B5D0EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5BA973-D59A-4CB9-BC35-089F88737425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6E83FC-CFAE-45EA-9F20-830FC5E97399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.4sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3C5A2B-85A8-4B75-A067-335D1DFE8C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B3BCAC-8317-41C4-9A60-85B693818044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.5sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85512107-7E38-4C00-96D0-01D9EE7DD903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBC4A31-F564-4F5F-86C9-08964EFB3AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.7sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D28F4F-5E14-48C1-8353-4D6A8C657FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14EB390-BA15-45C9-B971-D66CD98B0EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5872A42F-745E-4EC6-8679-C28F79F6621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF5A7C-202D-44F8-97D3-694F876050D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86947E54-A1B9-4ECE-92A6-417462249612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EA559D-5184-4E19-8A32-ECA41C930AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B82207E-7E19-4E0A-93E6-C631897793D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C910BE7C-517F-4E41-8433-1858F700AA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716D8805-D461-4066-9BFD-1EA895E4B997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB5A06F-59B5-43A1-8D06-1B6BA08630A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F6C44-DB9D-41FD-AD8D-AF45258772DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9E07C9-4C98-48A3-ACF9-1C6FE834D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A9A46-517E-467B-A702-E6F6DD9FCD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671F6847-6855-41BF-A148-944AEEB32A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120DA9BF-1153-41C8-B80D-3F99E0E28A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87687169-312C-41E6-9557-B2536A4CCA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A56292-386C-4FC8-BC54-EF9E465F891B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97434",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038190",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-iosxe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-iosxe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T19:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en NewsController.php en el módulo Noticias 5.3.2 y versiones anteriores para TYPO3 permite a usuarios no autenticados ejecutar comandos SQL arbitrarios a través de vectores que implican overwriteDemand para OrderByAllowed."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:news_system_project:news_system:*:*:*:*:*:typo3:*:*",
            "versionEndIncluding" : "5.3.2",
            "matchCriteriaId" : "104C2B76-F638-48AF-9FEF-E4553CE06E6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ambionics.io/blog/typo3-news-module-sqli",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ambionics.io/blog/typo3-news-module-sqli",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T19:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ILIAS before 5.2.3 has XSS via SVG documents."
      }, {
        "lang" : "es",
        "value" : "ILIAS en versiones anteriores a 5.2.3 tiene XSS a través de documentos SVG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.2",
            "matchCriteriaId" : "D78E29EC-F9DB-4CAC-8DEF-0422F4484386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.ilias.de/pipermail/ilias-admins/2017-April/000024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98733",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ILIAS-eLearning/ILIAS/commit/ac223e9a91ffbdf07358afc4c7713d95732a9979",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ILIAS-eLearning/ILIAS/releases/tag/v5.2.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.ilias.de/pipermail/ilias-admins/2017-April/000024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ILIAS-eLearning/ILIAS/commit/ac223e9a91ffbdf07358afc4c7713d95732a9979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ILIAS-eLearning/ILIAS/releases/tag/v5.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T20:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a victim opens a specially crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de corrupción de memoria en Foxit PDF Toolkit en versiones anteriores a 2.1 permite a un atacante provocar una denegación de servicio y la ejecución remota de código cuando una víctima abre un archivo PDF especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_pdf_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "8EEC37A1-A67C-4D83-B668-D762B13EB7A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T20:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile before 1.0.28, an error in the \"flac_buffer_copy()\" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file."
      }, {
        "lang" : "es",
        "value" : "En libsndfile en versiones anteriores a 1.0.28, un error en la función \"flac_buffer_copy()\" (flac.c) puede ser explotada para provocar un desbordamiento de búfer basado en pila a través de un archivo FLAC especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.27",
            "matchCriteriaId" : "59548F6B-A7DD-4844-8347-79E7FEBF8280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mega-nerd.com/libsndfile/#History",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/NEWS",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/#History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-07T20:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile before 1.0.28, an error in the \"header_read()\" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file."
      }, {
        "lang" : "es",
        "value" : "En libsndfile en versiones anteriores a 1.0.28, un error en la función \"header_read()\" (common.c) cuando se manejan etiquetas ID3 pueden ser explotados para provocar un desbordamiento de búfer basado en pila a través de un archivo FLAC especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.27",
            "matchCriteriaId" : "59548F6B-A7DD-4844-8347-79E7FEBF8280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mega-nerd.com/libsndfile/#History",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/NEWS",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/708e996c87c5fae77b104ccfeb8f6db784c32074",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/f457b7b5ecfe91697ed01cfc825772c4d8de1236",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/#History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/708e996c87c5fae77b104ccfeb8f6db784c32074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/f457b7b5ecfe91697ed01cfc825772c4d8de1236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0454",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33353700. References: QC-CR#1104067."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de audio Qualcomm podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del núcleo. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33353700. Referencias: QC-CR#1104067."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97399",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0462",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33353601. References: QC-CR#1102288."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Qualcomm Seemp podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33353601. Referencias: QC-CR#1102288."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0538",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33641588."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en libavc en Mediaserver podría permitir a un atacante usar un archivo especialmente manipulado provocar daños en la memoria durante el procesamiento de archivos multimedia y datos. Este problema se considera crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33641588."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0539",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33864300."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en libhevc en Mediaserver podría permitir a un atacante usar un archivo especialmente manipulado provocar daños en la memoria durante el procesamiento de archivos multimedia y datos. Este problema se considera crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33864300."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/1ab5ce7e42feccd49e49752e6f58f9097ac5d254",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/1ab5ce7e42feccd49e49752e6f58f9097ac5d254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0540",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33966031."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en libhevc en Mediaserver podría permitir a un atacante usando un archivo especialmente manipulado provocar daños en la memoria durante el procesamiento de archivos multimedia y datos. Este problema se considera crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33966031."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/01ca88bb6c5bdd44e071f8effebe12f1d7da9853",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/01ca88bb6c5bdd44e071f8effebe12f1d7da9853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0541",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34031018."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en sonivox en Mediaserver podría permitir a un atacante usando un archivo especialmente manipulado provocar daños en la memoria durante el procesamiento de archivos multimedia y datos. Este problema se considera crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34031018."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/sonivox/+/56d153259cc3e16a6a0014199a2317dde333c978",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JiounDai/CVE-2017-0541",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/sonivox/+/56d153259cc3e16a6a0014199a2317dde333c978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JiounDai/CVE-2017-0541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0542",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33934721."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en libavc en Mediaserver podría permitir a un atacante usando un archivo especialmente manipulado provocar daños en la memoria durante el procesamiento de archivos multimedia y datos. Este problema se considera crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34097866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/33ef7de9ddc8ea7eb9cbc440d1cf89957a0c267b",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/33ef7de9ddc8ea7eb9cbc440d1cf89957a0c267b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0543",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097866."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en libavc en Mediaserver podría permitir a un atacante usando un archivo especialmente manipulado provocar daños en la memoria durante el procesamiento de archivos multimedia y datos. Este problema se considera crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34097866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/f634481e940421020e52f511c1fb34aac1db4b2f",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/f634481e940421020e52f511c1fb34aac1db4b2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0544",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as High because it is a local arbitrary code execution in a privileged process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31992879."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en CameraBase podría permitir que una aplicación maliciosa local ejecute código arbitrario. Este problema se califica como alto porque es una ejecución de código arbitrario local en un proceso privilegiado. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-31992879."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-672"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97337",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0545",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32591350."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en Audioserver podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto de un proceso privilegiado. Este problema se califica como alto porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32591350."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97346",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0546",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32628763."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en SurfaceFlinger podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto de un proceso privilegiado. Este problema se califica como alto porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32628763."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97341",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0547",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33861560."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en libmedia en Mediaserver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se clasifica como alto porque es una evasión general para las protecciones del sistema operativo que aíslan los datos de aplicación de otras aplicaciones. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33861560."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97338",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/9667e3eff2d34c3797c3b529370de47b2c1f1bf6",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/9667e3eff2d34c3797c3b529370de47b2c1f1bf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0548",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33251605."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad remota de denegación de servicio en libskia podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se bloquee o reinicie. Este problema está clasificado como de alta severidad debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 7.0, 7.1.1. ID de Android: A-33251605."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97398",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0549",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33818508."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad remota de denegación de servicio en libavc en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se bloquee o reinicie. Este problema está clasificado como de alta severidad debido a la posibilidad de denegación remota de denegación de servicio. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33818508."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/37345554fea84afd446d6d8fbb87feea5a0dde3f",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/37345554fea84afd446d6d8fbb87feea5a0dde3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0550",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33933140."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad remota de denegación de servicio en libavc en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se bloquee o reinicie. Este problema está clasificado como de alta severidad debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33933140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/7950bf47b6944546a0aff11a7184947de9591b51",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/7950bf47b6944546a0aff11a7184947de9591b51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0551",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097231."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad remota de denegación de servicio en libavc en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se bloquee o reinicie. Este problema está clasificado como de alta severidad debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34097231."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/8b5fd8f24eba5dd19ab2f80ea11a9125aa882ae2",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/8b5fd8f24eba5dd19ab2f80ea11a9125aa882ae2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0552",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097915."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad remota de denegación de servicio en libavc en Mediaserver podría permitir a un atacante utilizar un archivo especialmente manipulado para provocar que un dispositivo se bloquee o reinicie. Este problema está clasificado como de alta severidad debido a la posibilidad de denegación remota de servicio. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34097915."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/9a00f562a612d56e7b2b989d168647db900ba6cf",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/9a00f562a612d56e7b2b989d168647db900ba6cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0553",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32342065. NOTE: this issue also exists in the upstream libnl before 3.3.0 library."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en libnl podría permitir a una aplicación maliciosa local ejecutar código arbitrario en el contexto del servicio Wi-Fi. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado y es mitigado con las configuraciones actuales de la plataforma. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32342065. NOTA: este problema también se presenta aguas arriba de libnl anterior a la biblioteca versión 3.3.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.infradead.org/users/tgr/libnl.git/commit/3e18948f17148e6a3c4255bdeaaf01ef6081ceeb",
        "source" : "security@android.com"
      }, {
        "url" : "http://lists.infradead.org/pipermail/libnl/2017-May/002313.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97340",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3311-2",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2299",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VCF5KS6HOJZLFIY2ZSXSVSDQX65A2PU/",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KIHASXRQO2YTQPKVP4VGIB2XHPANG6YX/",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3311-1/",
        "source" : "security@android.com"
      }, {
        "url" : "http://git.infradead.org/users/tgr/libnl.git/commit/3e18948f17148e6a3c4255bdeaaf01ef6081ceeb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.infradead.org/pipermail/libnl/2017-May/002313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3311-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VCF5KS6HOJZLFIY2ZSXSVSDQX65A2PU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KIHASXRQO2YTQPKVP4VGIB2XHPANG6YX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3311-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0554",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el componente Telephony podría permitir que una aplicación maliciosa local accediera a capacidades fuera de sus niveles de permisos. Este problema está clasificado como moderado porque podría utilizarse para obtener acceso a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33815946."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97343",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0555",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33551775."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en libavc en Mediaserver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se califica como moderado porque podría utilizarse para acceder a los datos sin permiso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33551775."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/0b23c81c3dd9ec38f7e6806a3955fed1925541a0",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/0b23c81c3dd9ec38f7e6806a3955fed1925541a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0556",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34093952."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en libmpeg2 en Mediaserver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se califica como moderado porque podría utilizarse para acceder a los datos sin permiso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34093952."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/f301cff2c1ddd880d9a2c77b22602a137519867b",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/f301cff2c1ddd880d9a2c77b22602a137519867b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0557",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34093073."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en libmpeg2 en Mediaserver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se califica como moderado porque podría utilizarse para acceder a los datos sin permiso. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34093073."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/227c1f829127405e21dab1664393050c652ef71e",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/227c1f829127405e21dab1664393050c652ef71e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0558",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34056274."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en Mediaserver podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se califica como moderado porque podría utilizarse para acceder a los datos sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34056274."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/50358a80b1724f6cf1bcdf003e1abf9cc141b122",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/50358a80b1724f6cf1bcdf003e1abf9cc141b122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0559",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33897722."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en libskia podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se califica como moderado porque podría utilizarse para acceder a los datos sin permiso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-33897722."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97352",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0560",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue is rated as Moderate due to the possibility of bypassing device protection. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-30681079."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el proceso de restablecimiento de fábrica podría permitir a un atacante malicioso local acceder a los datos del propietario anterior. Este problema está clasificado como moderado debido a la posibilidad de evitar la protección del dispositivo. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-30681079."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97360",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0561",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en el firmware de Broadcom Wi-Fi podría permitir a un atacante remoto ejecutar código arbitrario dentro del contexto del SoC Wi-Fi. Este problema está clasificado como crítico debido a la posibilidad de ejecución remota de código en el contexto del Wi-Fi SoC. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34199105. Referencias: B-RB#110814."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97367",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41805/",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41806/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41805/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41806/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0562",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202425. References: M-ALPS02898189."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de pantalla táctil de MediaTek podría permitir que una aplicación malintencionada local ejecute código arbitrario dentro del contexto del kernel. Este problema está clasificado como crítico debido a la posibilidad de un compromiso de dispositivo permanente local, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-30202425. Referencias bibliográficas: M-ALPS02898189."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97345",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0563",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32089409."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de pantalla táctil de HTC podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del núcleo. Este problema está clasificado como crítico debido a la posibilidad de un compromiso de dispositivo permanente local, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-32089409."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/May/19",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97342",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017009",
        "source" : "security@android.com"
      }, {
        "url" : "https://github.com/alephsecurity/PoCs/tree/master/CVE-2017-0563",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/alephsecurity/PoCs/tree/master/CVE-2017-0563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0564",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34276203."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el subsistema ION del kernel podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema está clasificado como crítico debido a la posibilidad de un compromiso de dispositivo permanente local, que puede requerir reflashing del sistema operativo para reparar el dispositivo. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34276203."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97344",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0565",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175904. References: M-ALPS02696516."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador térmico de MediaTek podría permitir a una aplicación maliciosa local ejecutar código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-28175904. Referencias bibliográficas: M-ALPS02696516."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97349",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0566",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28470975. References: M-ALPS02696367."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de la cámara MediaTek podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-28470975. Referencias bibliográficas: M-ALPS026963."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97351",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0567",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32125310. References: B-RB#112575."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32125310. Referencias: B-RB#112575."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0568",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34197514. References: B-RB#112600."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34197514. Referencias: B-RB#112600."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0569",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34198729. References: B-RB#110666."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34198729. Referencias: B-RB#110666."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41808/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41808/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0570",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199963. References: B-RB#110688."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34199963. Referencias: B-RB#110688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0571",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34203305. References: B-RB#111541."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34203305. Referencias: B-RB#111541."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0572",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34198931. References: B-RB#112597."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-34198931. Referencias: B-RB#112597."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0573",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34469904. References: B-RB#91539."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34469904. Referencias: B-RB#91539."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0574",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34624457. References: B-RB#113189."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34624457. Referencias: B-RB#113189."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0575",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32658595. References: QC-CR#1103099."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Wi-Fi de Qualcomm podría permitir a una aplicación malintencionada local ejecutar código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32658595. Referencias: QC-CR # 1103099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97403",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0576",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33544431. References: QC-CR#1103089."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de motor de cifrado de Qualcomm podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33544431. Referencias: QC-CR#1103089."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97395",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://github.com/derrekr/android_security/commit/0dd1a733e60cf5239c0a185d4219ba2ef1118a8b",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/derrekr/android_security/commit/0dd1a733e60cf5239c0a185d4219ba2ef1118a8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0577",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33842951."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de pantalla táctil de HTC podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del núcleo. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-33842951."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97348",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0578",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33964406."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de sonido DTS podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-33964406."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97358",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0579",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34125463. References: QC-CR#1115406."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de vídeo Qualcomm podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34125463. Referencias: QC-CR#1115406."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97339",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0580",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34325986."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Synaptics Touchscreen podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-34325986."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97335",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0581",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34614485."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador Synaptics Touchscreen podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-34614485."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97335",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0582",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities. Product: Android. Versions: Kernel-3.10. Android ID: A-33178836."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el comando HTC OEM fastboot podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del concentrador de sensores. Este problema se califica como moderado porque primero requiere la explotación de vulnerabilidades separadas. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-33178836."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97356",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0583",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability specific details which limit the impact of the issue. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32068683. References: QC-CR#1103788."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador de acceso de Qualcomm CP podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como moderado porque primero requiere comprometer un proceso privilegiado y debido a detalles específicos de vulnerabilidad que limitan el impacto del problema. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32068683. Referencias: QC-CR#1103788."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97368",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0584",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32074353. References: QC-CR#1104731."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador Wi-Fi de Qualcomm podría permitir que una aplicación malintencionada local accediera a datos fuera de sus niveles de permisos. Este problema se califica como moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32074353. Referencias: QC-CR#1104731."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97363",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0585",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32475556. References: B-RB#112953."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador Wi-Fi de Broadcom podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permiso. Este problema se califica como moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-32475556. Referencias: B-RB#112953."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97366",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0586",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-04-07T22:59:01.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33649808. References: QC-CR#1097569."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador de sonido de Qualcomm podría permitir que una aplicación maliciosa local accediera a datos fuera de sus niveles de permisos. Este problema se califica como moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33649808. Referencias: QC-CR#1097569."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97357",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6019",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-07T22:59:01.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the device may cause it to reboot."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Schneider Electric Conext ComBox, modelo 865-1058, todas las versiones de firmware anteriores a V3.03 BN 830. Una serie de solicitudes rápidas al dispositivo puede hacer que reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:conext_combox_865-1058_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.03",
            "matchCriteriaId" : "BDAB5C65-3978-47CC-80DE-1368764F90B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:conext_combox_865-1058:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209ADC1B-DFA8-422E-8F98-EB7397CB853A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96543",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-061-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41537/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-061-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41537/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6033",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-07T22:59:01.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de secuestro de DLL en el software Schneider Electric Interactive Graphical SCADA System (IGSS), versión 12 y versiones anteriores. El software ejecutará un archivo malicioso si se le asigna el mismo nombre que un archivo legítimo y se coloca en una ubicación anterior a la ruta de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0",
            "matchCriteriaId" : "DA1E8EFC-6060-4BA0-95E5-81BBC3AF1353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97389",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T01:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the \"anonymous\" user, as demonstrated by responses with a 200 HTTP status code and a JSON object containing IP address strings. This is related to a missing access-control check in bin/defaults/script/info/login.js."
      }, {
        "lang" : "es",
        "value" : "En OpenIDM hasta la versión 4.0.0 en versiones anteriores a 4.5.0, el punto final de información puede perder información sensible sobre una petición del usuario \"anonymous\", según lo demostrado por las respuestas con un código de estado HTTP 200 y un objeto JSON que contiene cadena de direcciones IP. Esto está relacionado con una perdida de comprobación de control de acceso en bin/defaults/script/info/login.js"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidm_project:openidm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "9452F334-D23F-4C34-A0D0-87F403361439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidm_project:openidm:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32394170-5250-438C-9BAB-D41DE808E689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.rootlabs.com.br/information-disclosure-forgerock-openidm-4-0-0-and-4-5-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a92936505",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rootlabs.com.br/information-disclosure-forgerock-openidm-4-0-0-and-4-5-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a92936505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T01:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a crafted Managed Object Name."
      }, {
        "lang" : "es",
        "value" : "OpenIDM hasta la versión 4.0.0 y 4.5.0 es vulnerable a ataques persistentes de XSS dentro de la IU de Admin, según lo demostrado mediante un nombre de objeto de gestión manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidm_project:openidm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "9452F334-D23F-4C34-A0D0-87F403361439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidm_project:openidm:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32394170-5250-438C-9BAB-D41DE808E689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.rootlabs.com.br/forgerock-persistent-and-reflected-cross-site-scripting-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a92936505",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rootlabs.com.br/forgerock-persistent-and-reflected-cross-site-scripting-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a92936505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T01:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the _sortKeys parameter to the authzRoles script under managed/user/."
      }, {
        "lang" : "es",
        "value" : "OpenIDM hasta la versión 4.0.0 y 4.5.0 es vulnerable a ataques XSS reflejados dentro de la IU de Admin, según lo demostrado mediante el parámetro _sortKeys en la secuencia de comandos authzRoles sometido a managed/user/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidm_project:openidm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "9452F334-D23F-4C34-A0D0-87F403361439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidm_project:openidm:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32394170-5250-438C-9BAB-D41DE808E689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.rootlabs.com.br/forgerock-persistent-and-reflected-cross-site-scripting-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a92936505",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.rootlabs.com.br/forgerock-persistent-and-reflected-cross-site-scripting-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a92936505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función putagreytile en tif_getimage.c en LibTIFF 4.0.7 tiene un problema de comportamiento de desplazamiento a la izquierda no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2658",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97510",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image."
      }, {
        "lang" : "es",
        "value" : "tif_read.c en LibTIFF 4.0.7 no asegura que tif_rawdata se inicialice adecuadamente, lo que podrían permitir a atacantes remotos obtener información sensible de la memoria del proceso a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2651",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97502",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función OJPEGReadHeaderInfoSecTablesDcTable en tif_ojpeg.c en LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (fuga de memoria) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2659",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97503",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función JPEGSetupEncode en tiff_jpeg.c en LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de la aplicación) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "LibTIFF 4.0.7 tiene un problema de comportamiento \"fuera de rango de valores representables del tipo flotante\" no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97506",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tif_dirread.c in LibTIFF 4.0.7 has an \"outside the range of representable values of type float\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "tif_dirread.c en LibTIFF 4.0.7 tiene un problema de comportamiento \"fuera de rango de valores representables del tipo flotante\" no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97504",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "tif_dirread.c en LibTIFF 4.0.7 podrían permitir a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de la aplicación) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97499",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.7 has an \"outside the range of representable values of type short\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "LibTIFF 4.0.7 tiene un problema de comportamiento \"fuera de rango de valores representables de tipo corto\" no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97505",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97508",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.7 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "LibTIFF 4.0.7 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.7 has a \"shift exponent too large for 64-bit type long\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "LibTIFF 4.0.7 tiene un problema de comportamiento de \"exponente de cambio excesivamente grande para el tipo long de 64 bits\" no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97511",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "LibTIFF 4.0.7 tiene un desbordamiento de enteros con signo, lo que podría permitir a atacantes remotos provocar una denegación de servicio (fallo de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97500",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "au_channel.h en HE-AAC+ Codec (también conocido como libaacplus) 2.0.2 tiene un desbordamiento de entero con signo, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libaacplus_project:libaacplus:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DAC9DA-5185-4DC9-ACB4-6756166C9710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "au_channel.h en HE-AAC+ Codec (también conocido como libaacplus) 2.0.2 tiene un problema de comportamiento de desplazamiento a la izquierda no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libaacplus_project:libaacplus:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DAC9DA-5185-4DC9-ACB4-6756166C9710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "aacplusenc.c en HE-AAC+ Codec (también conocido como libaacplus) 2.0.2 tiene un fallo de aserción, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libaacplus_project:libaacplus:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DAC9DA-5185-4DC9-ACB4-6756166C9710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/rle.c in ImageMagick 7.0.5-4 has an \"outside the range of representable values of type unsigned char\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "coders/rle.c en ImageMagick 7.0.5-4 tiene un problema de comportamiento \"fuera de rango de valores representables de caracter sin signo\" no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/02/imagemagick-undefined-behavior-in-codersrle-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/02/imagemagick-undefined-behavior-in-codersrle-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función handle_gnu_hash en readelf.c en elfutils 0.168 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica y caída de la aplicación) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-handle_gnu_hash-readelf-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-handle_gnu_hash-readelf-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función ebl_object_note_type_name en eblobjnotetypename.c en elfutils 0.168 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica y caída de la aplicación) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98609",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-ebl_object_note_type_name-eblobjnotetypename-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-ebl_object_note_type_name-eblobjnotetypename-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "elf_compress.c en elfutils 0.168 no valida el factor de compresión zlib, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-memory-allocation-failure-in-__libelf_decompress-elf_compress-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-memory-allocation-failure-in-__libelf_decompress-elf_compress-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función check_group en elflint.c en elfutils 0.168 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica y caída de la aplicación) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_group-elflint-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_group-elflint-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función check_symtab_shndx en elflint.c en elfutils 0.168 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica y caída de la aplicación) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_symtab_shndx-elflint-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_symtab_shndx-elflint-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función check_sysv_hash en elflint.c en elfutils 0.168 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica y caída de la aplicación) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_sysv_hash-elflint-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_sysv_hash-elflint-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "elflint.c en elfutils 0.168 no valida el número de secciones y el número de segmentos, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B68C2-14A9-4330-8625-DDEBB356CBA5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-memory-allocation-failure-in-xcalloc-xmalloc-c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/03/elfutils-memory-allocation-failure-in-xcalloc-xmalloc-c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3670-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-09T14:59:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a \"member access within null pointer\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an \"int main() {return 0;}\" program."
      }, {
        "lang" : "es",
        "value" : "elflink.c en la librería Binary File Descriptor (BFD) (también conocido como libbfd), tal como se distribuye en GNU Binutils 2.28, tiene un problema de comportamiento \"acceso de miembros dentro de un puntero nulo\" no definido, lo que podrían permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un programa \"int main() {return 0;}\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T11:59:00.170",
      "lastModified" : "2023-11-07T02:50:02.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T11:59:00.233",
      "lastModified" : "2023-11-07T02:50:03.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T14:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbitrary files via a .. (dot dot) in a \"GET /uir/\" request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de directorios en la interfaz web del dispositivo DW-116 con firmware en versiones anteriores a V1.05b09 permite a los atacantes remotos leer archivos arbitrarios a través de un punto en una solicitud \"GET/uir/\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-116_firmware:v1.00\\(cp\\)b10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9918BA28-87A2-4E0B-934B-C71304F80E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-116_firmware:v1.01\\(eu\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "30FDCA01-94F1-4A75-AFF6-7B599A40EE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-116_firmware:v1.05\\(au\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA655C3-0ED5-4558-A057-58C43A8F3946"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-116:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B307E277-9C31-4D69-B4E2-4FE28B2E2AE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-116a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF10AB91-F202-4587-B8DE-27F5C3A1F06F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/blad/WLB-2017040033",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41840/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cxsecurity.com/blad/WLB-2017040033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41840/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T14:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation."
      }, {
        "lang" : "es",
        "value" : "El manejo incorrecto de los errores en las syscalls set_mempolicy y mbind compat en mm/mempolicy.c en el kernel de Linux hasta la versión 4.10.9 permite a los usuarios locales obtener información confidencial de datos de pila no inicializados al activar el fallo de una determinada operación de mapa de bits."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.9",
            "matchCriteriaId" : "526CF197-BAE6-4F03-9D2F-07A864CD9185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf01fb9985e8deb25ccf0ea54d916b8871ae0e62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/cf01fb9985e8deb25ccf0ea54d916b8871ae0e62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf01fb9985e8deb25ccf0ea54d916b8871ae0e62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/cf01fb9985e8deb25ccf0ea54d916b8871ae0e62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T14:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action."
      }, {
        "lang" : "es",
        "value" : "La ejecución remota de código puede ocurrir en Asterisk Open Source 13.x en versiones anteriores a 13.14.1 y 14.x en versiones anteriores a 14.3.1 y Asterisk certificado 13.13 en versiones anteriores a 13.13-cert3 debido a un desbordamiento de búfer en un campo de usuario de CDR, relacionado con X-ClientCode en chan_sip , La función de dialplan CDR y la acción Monitor AMI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E7D1238A-A8D2-485E-81FD-46038A883EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E93A7967-9A04-424A-BDDB-A2B8289B9AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F75C9FF-6F95-4F6A-B683-FE2BEDE3AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "68226156-42ED-4F0E-93E1-02DD57E582B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EB385E-28B5-4259-9431-99E1F32D61B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C0FF1B-6188-4181-A139-1806328762BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "890EBB8C-989B-4344-AC03-62B399076008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121EACD3-D5E3-4691-8024-95996865BB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136D6508-660E-410D-829A-7DD452BF8819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B23D17-7356-4D37-8C73-E87896D1335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8A6CB-D236-4AB3-8476-C2D34DB7EF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599833A2-CBE9-479B-8A6E-AF79C5EED1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B55719B3-7325-47E1-8D16-3F34B1F44385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B870B3B7-E8DC-45A2-8FA4-657D005D00E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C91E9A3B-54EB-4819-94DD-30F7D0C90047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47189DF9-8E57-4BA6-9F52-B7A8229AE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84AAFA3C-3CCD-4615-9725-169C303CF18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C39FA-EF1A-4F2B-87A0-A00BAE73C6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D1211-0B07-47B9-AB7A-E820E2B29561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84202BAF-29E1-472B-B11F-B73F6A8891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7120D-E6A0-4801-A1CC-3E143896EE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF2A83D-D9AE-441D-8D4E-335BF9D28A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5C1479-A540-4B7D-B00C-BD35EEC83BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC12556C-5E82-47D7-87E5-FBDC01A920DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461C1D2D-C4C1-4FF8-8231-38A2505F3523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66595711-8573-4A9B-A8FE-4943E3097AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FE3D4-A0B9-475A-9B89-B0222283A6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9670B5AC-CBD1-484C-90F8-69B1A60B6054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5794B6-246C-415E-8E20-56447F152488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726CA39-A763-4422-B59E-E9E12518EA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96EB57-835A-45B4-82F5-31F925A85629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206F1DC9-9E8F-4497-A354-4A14711993DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D428364-E2AD-4BC6-9329-71793BC0EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08963910-E0BD-4487-B669-60E0BFA79863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B16D04-3808-4380-8F64-0C36B185C1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BD16A9-24BC-4FC1-81BA-A6D1FEF38D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC383B3-27EF-4C37-94BE-F0D41B34CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C949D5F5-6C0B-4B17-85B6-3A77D08CF967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D413741-BDB7-496D-A01B-75E2A98FDB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "29130F7F-DE00-43E1-A4A6-8F1F95D5CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E94EC0-F577-4B2B-8B11-DC76278CDD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "101AD474-9B89-483D-84E8-08012677C55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57E41F6-C2CF-4183-A78A-9531A88FB65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F9BB8-F951-427E-B770-69C2ACEBDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4CE405-E923-4C9C-849A-D1031C4DB493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C039C0CE-9C9C-4D85-8D7C-574DCF9D920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B2F2CC-18C3-46E7-8E7F-970622A710C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04ECDFF1-9718-4FAE-B45B-4F8CCA82829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C4DA60-5701-4BD0-B2F9-D93B9E64111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B12834D-2AF1-4AD1-AB23-859CAA5D3210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89036D04-EA04-4041-9694-6768478D35F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19070D3-9F03-43C7-9F31-9A54BD5F2441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BAA74-50A8-4087-8FF8-7C5922121319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D29C253-B403-4B00-A626-3E3A920DC018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9D8FA2-21EA-4384-8001-118DA7C959F0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.13-cert2",
            "matchCriteriaId" : "8C30F0A0-EE30-496A-ACF0-A9B1BCA46D73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97377",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/859910",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/859910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T14:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue."
      }, {
        "lang" : "es",
        "value" : "crypto/ahash.c en el kernel de Linux hasta 4.10.9 permite a los atacantes causar una denegación de servicio (operación de API llamando a su propia devolución de llamada, y recursión infinita) activando EBUSY en una cola completa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.15",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "4915B333-C203-4744-8B3A-C46365415C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.50",
            "matchCriteriaId" : "853F13A0-776A-4078-B05B-7C1E20D4973D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.40",
            "matchCriteriaId" : "70E79011-B658-40F2-B406-D3619DEBFACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.63",
            "matchCriteriaId" : "16332D79-B98D-4D8D-BEA8-C1815D93CA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.24",
            "matchCriteriaId" : "9035A20D-ECBA-4959-8F7F-EF1BFE41A7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.12",
            "matchCriteriaId" : "59CCD4BB-9F0D-405F-B1DD-ACEDF5BB2EDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-crypto-vger&m=149181655623850&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97534",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-crypto-vger&m=149181655623850&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorComment" : "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T14:59:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.4-9, un bucle infinito puede ocurrir debido a un error de redondeo de punto flotante en algunos de los algoritmos de color. Esto afecta a ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab y ModulateLCHuv."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/835.html\">CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to obtain sensitive logged-in username and version-related information via a crafted webpage."
      }, {
        "lang" : "es",
        "value" : "Splunk Enterprise 5.0.x en versiones anteriores a 5.0.18, 6.0.x en versiones anteriores a 6.0.14, 6.1.x en versiones anteriores a 6.1.13, 6.2.x en versiones anteriores a 6.2.13.1, 6.3.x en versiones anteriores a 6.3.10, 6.4.x en versiones anteriores a 6.4.6, Y 6.5.x en versiones anteriores a 6.5.3 y Splunk Light en versiones anteriores a 6.5.2 asigna la propiedad $C JS al espacio de nombres global de Window, lo que podría permitir a los atacantes remotos obtener información sensible relacionada con el nombre de usuario y la versión a través de una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:light:*:*:*",
            "versionEndIncluding" : "6.5.1",
            "matchCriteriaId" : "19EBA2BD-619F-483D-A700-808310231B4A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.18",
            "matchCriteriaId" : "D5754FB3-CEBA-48F7-BBE6-165A2D10A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.14",
            "matchCriteriaId" : "714A3778-5FDD-4082-BB59-6C91308A3710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.13",
            "matchCriteriaId" : "834584D3-1FA7-40A6-B281-334E1C49E2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.13.1",
            "matchCriteriaId" : "0C91EEF3-D813-48C6-B63C-5E0C98B33024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.10",
            "matchCriteriaId" : "202FABCF-8755-45B0-A028-41C70F133F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.6",
            "matchCriteriaId" : "F8E688A6-4818-4D3C-8DE1-6C73BC48CE37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.5.3",
            "matchCriteriaId" : "9DBD04AF-CB9D-4E1A-9A9B-83178805D585"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/89",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540346/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97265",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97286",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41779/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAPZ3#InformationLeakageviaJavaScriptCVE20175607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540346/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41779/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAPZ3#InformationLeakageviaJavaScriptCVE20175607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object."
      }, {
        "lang" : "es",
        "value" : "El complemento de JIRA Workflow Designer en Atlassian JIRA Server en versiones anteriores a 6.3.0 utiliza incorrectamente un analizador y deserializador XML, que permite a atacantes remotos ejecutar código arbitrario, leer archivos arbitrarios o provocar una denegación de servicio a través de un objeto Java serializado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72FD8F4-B47B-4D45-81BC-281C7C88BF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6392A0B-252B-4BE9-8381-882364CAF93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5022C4F9-48A7-4995-994A-455F545CDB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8EC6B1-A57B-4277-B904-CFFC2B1B8630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F805A3-631D-4667-BF72-62A3DDDCDB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDB91B1-7D20-4BCC-A512-6F75EF70BE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B02481E-5E51-423E-A5E7-630EB3DA5F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ED291F-4F1F-48BA-832C-A70B639BBDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C402D0FF-E479-480A-BB01-7932CF2BF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395E3ED3-3DA5-40A6-B932-36F9BF13FD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F1DD46-4FBD-40BC-B276-51C2B239BC4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FC7263-D0E3-490A-9DF6-ED89051354A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB09662-5926-4AE5-BF22-B082ED223A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83D3C97-BA63-44FB-8449-220AA6B31CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7ED8C91-7225-439E-BEC6-BC8E23D86041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F181716D-3B1E-493C-A92D-D02E90922EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B86AA59-2C88-4113-85B1-0F8404155ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DAF540-7BB4-4325-9438-74F9F738519B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9E7034-3F9E-4CE3-81D0-6EB2E62F0437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3046E68-3839-4B96-83B1-4F14AFFD8DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CB7DB0-F3CA-4037-A5FF-5D7F6678B314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A58D60-1085-4E64-8706-8EC8686D4904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00339DCD-824D-46FA-9EFD-E4835BC7F52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C6417-0212-489D-9324-2C653E32566A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C61E4B1-69D4-4278-B404-39293751033F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8790F9F-C124-410A-BEE5-241341C5CA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60F705C-ECF9-4F48-BE4C-CCB9E88E018B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F008971D-88E6-4D60-8755-294FD157FBF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A224603-11AA-491D-9A06-8D573FEDDC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5117735-A248-44DD-B2B5-0A1D5CFB4977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA863005-6CD1-4FEC-8A1A-6E62FC76952D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417098AA-30D0-4915-ACF8-135F59EB1493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693A0FEF-0803-419C-A718-DE80B984BA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C401B65-113B-4046-8D36-7F139D05A4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AFE657-35A1-4F22-839C-4E2D89C78DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7605C1DD-D26E-4ACF-8915-A2717079198C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9720C8C4-36A4-4C8B-BB4B-1D1765C76728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B79812D-7367-4D71-8B74-77785FAC9874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A45A0EB-99CB-4EE9-BFBB-664D0AE91981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:5.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D006394-43B4-4250-87F5-38A2511BC0AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83446EB-1A2B-4803-9D2A-DBF37A99C96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5989726-B934-4FF1-AB54-7DC77AC2C6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D910A750-B5AB-48F1-9A33-0895901E0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBB6BD7-5A95-4A8C-9965-F07A29C85AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B482A552-EF34-4089-8A64-797D8C9BBE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8F311F-B327-4541-BA23-C8CF578861B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E729C6C-799F-4574-B560-51DB7F58C3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8717780D-1A19-4EE4-A526-6216EA360596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC850FE-63C9-4E6D-8B14-C8A2224E3FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E129240D-BCC6-4EEF-820A-CF8EF835FE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD25985-0587-4DD8-A6BD-DE610CB01175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2A1992-5247-4978-856A-4BAF064651F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8003B5E4-597A-4914-96D5-14C8DEAE9ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BAE2AA2-A436-4F86-B775-DD358FA82FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C182FE8-BA50-4782-8D04-825F57DDC5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243F34D7-287A-419C-B709-74869E55402C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4DE2F6-B3E1-45CA-A1F7-08691FD13FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AED81FE-B027-4114-9A76-7F6B8A06A6BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807D2B66-FE4F-4C83-A8C9-76F874C746BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21E5768-4A73-431D-9720-55C120BA0C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4715D04C-DC1D-42EA-AEB4-29E935DF34D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352372E1-FA78-4D5F-B6B3-CA7F547BD7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254BC1E2-0E41-46EB-9E13-9BEF69B1D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6E7BAD-1781-44FF-A347-64498630A26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B61076B-547D-4878-BDA0-C028820DA37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8617A24-1894-48C7-8B05-0403183179E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97379",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/jira063/jira-security-advisory-2017-03-09-875604401.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-64077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/jira063/jira-security-advisory-2017-03-09-875604401.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-64077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "NetApp Clustered Data ONTAP 8.1 hasta la versión 9.1P1, cuando NFS o SMB está habilitado, permite a los atacantes remotos causar una denegación de servicio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9093E6A5-D94B-47BA-BC8B-87716B573C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06A1AF0-7B4B-4061-9804-3C863BD4D346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B557547A-31A7-453D-9B68-4DAEDACB7CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E5F923-8C3C-4977-BF1F-D47A47453EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3202EA-4844-4FFC-B358-B1C4AEAD6E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BA7A03-5294-4493-B9BC-8DD53C7C54FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3679B2D6-4156-44B8-A89D-89038927C522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAB4491-0D85-4B5D-ACE8-F70483FC99F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7236245C-5ADC-4D27-B8E5-3216AEC899C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29CF9B50-D386-45F7-95DA-BDBB8D04EB8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A0EA35-0A5A-4610-958E-4CE41DDA0DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD92543B-9A32-4285-85D1-1925C3F4DEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104D9174-045F-457A-8C35-84B62ABD11DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B366386A-9899-47EB-9494-25ECFD065CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D98E5E-B192-4BE4-A97E-867236ED1019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170331-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170331-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad use-after-free en la función mg_http_multipart_wait_for_boundary en mongoose.c en Cesanta Mongoose Embedded Web Server Library 6.7 y anteriores y Mongoose OS 1.2 y anteriores permite a los atacantes remotos provocar una denegación de servicio (caída) a través de un multipart/form-data POST solicitud sin una cadena de límite MIME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "C372E1D0-CC94-4C7F-8EDE-A25656D73A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cesanta:mongoose_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "39C742BC-F245-41E6-8332-9915E2EB0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540355/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose-os/commit/042eb437973a202d00589b13d628181c6de5cf5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose/commit/b8402ed0733e3f244588b61ad5fedd093e3cf9cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CVE-2017-7185_mongoose_os_use_after_free.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41826/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540355/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose-os/commit/042eb437973a202d00589b13d628181c6de5cf5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose/commit/b8402ed0733e3f244588b61ad5fedd093e3cf9cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CVE-2017-7185_mongoose_os_use_after_free.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41826/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (process hang) via a crafted filename."
      }, {
        "lang" : "es",
        "value" : "Ninka en versiones anteriores a 1.3.2 podría permitir a atacantes remotos obtener información confidencial, manipular resultados de análisis de cumplimiento de licencias o provocar una denegación de servicio (bloqueo de proceso) a través de un nombre de archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninka_project:ninka:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "F5CE98CB-A5E0-4B9C-A7FD-EEA504F2106B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/03/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97325",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dmgerman/ninka/commit/81f185261c8863c5b84344ee31192870be939faf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/dmgerman/ninka/commit/81f185261c8863c5b84344ee31192870be939faf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "NetApp OnCommand Performance Manager y OnCommand Unified Manager para datos en clúster ONTAP en versiones anteriores a 7.1P1 vincula incorrectamente el servicio de Java Management Extension Remote Method Invocation (también conocido como JMX RMI) a la red, lo que permite a atacantes remotos obtener información confidencial a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "508751AE-E41C-47C6-9309-C07FA1A69287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97537",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170331-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170331-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T15:59:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid."
      }, {
        "lang" : "es",
        "value" : "Las funciones de (1) v9fs_create y (2) v9fs_lcreate en hw/9pfs/9p.c en QEMU (también conocido como Quick Emulator) permiten a los usuarios privilegiados de usuarios locales huésped causar una denegación de servicio (descriptor de archivo o consumo de memoria) a través de vectores relacionados con un fid ya en uso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "26E56B0F-531A-4803-9664-9511BCC320D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D5C1F9-C3B4-4733-8782-0E54AE543C16"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/03/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97319",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1437871",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/03/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1437871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T17:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege escalation, by calling DoWriteGrubSettings() provided by dde-daemon."
      }, {
        "lang" : "es",
        "value" : "dde-daemon, el proceso daemon de DDE (Deepin Desktop Environment) 15.0 hasta la versión 15.3, se ejecuta con privilegios de root y apenas hace nada para identificar al usuario que llama a la función a través de D-Bus. Cualquiera puede cambiar la configuración de grub, incluso para añadir algunos argumentos para realizar una escalada de puerta trasera o de privilegios, llamando a DoWriteGrubSettings() proporcionado por dde-daem"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepin:deepin_desktop_environment:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B508C45-04AD-48A2-BD2C-53CA15E7134D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepin:deepin_desktop_environment:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA74C4CF-D255-4465-ABB3-84D9589E8AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepin:deepin_desktop_environment:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758B9CA4-748D-49B1-B325-FAFF38EEC898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepin:deepin_desktop_environment:15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0C5AD3-A9FF-40E8-9756-5977217AE86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kings-way/deepinhack/blob/master/dde_daemon_poc.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kings-way/deepinhack/blob/master/dde_daemon_poc.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T17:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iwmiffr_convert_row32 en imagew-miff.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos provocar una denegación de servicio (sobre lectura basada en búfer de memoria dinámica) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97577",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T17:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iw_read_bmp_file en imagew-bmp.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos consumir una cantidad de memoria disponible a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97575",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T17:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to \"/dapur/apps/app_theme/libs/save_file.php\" and then execute code."
      }, {
        "lang" : "es",
        "value" : "En Fiyo CMS 2.x hasta la versión 2.0.7, los atacantes pueden subir una webshell a través del parámetro de contenido a \"/dapur/apps/app_theme/libs/save_file.php\" y luego ejecutar código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67277B12-068D-4C34-8460-AC3804F1F88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BA999B-978F-4D8E-81F4-78D4BF65AAE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C16940-732F-4389-81D3-AA643B00B649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2E8960-DADD-4C90-A1C2-45C37AA6DF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E533504D-1498-4052-A913-FB0828173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97571",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Xyntax/POC-T/blob/2.0/script/fiyo2.0.7-getshell.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Xyntax/POC-T/blob/2.0/script/fiyo2.0.7-getshell.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T19:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within."
      }, {
        "lang" : "es",
        "value" : "SolarWinds Log & Event Manager (LEM) en versiones anteriores a 6.3.1 Hotfix 4 permite a un usuario autenticado explorar el sistema de archivos del servidor y leer el contenido de los archivos arbitrarios contenidos en él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:log_\\&_event_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1",
            "matchCriteriaId" : "E115E5D0-BAEE-41E2-8A3B-9F05EB2CE209"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thwack.solarwinds.com/thread/111223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://thwack.solarwinds.com/thread/111223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T19:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "SolarWinds Log & Event Manager (LEM) en versiones anteriores a 6.3.1 Hotfix 4 permite a un usuario autenticado ejecutar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:log_\\&_event_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1",
            "matchCriteriaId" : "E115E5D0-BAEE-41E2-8A3B-9F05EB2CE209"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thwack.solarwinds.com/thread/111223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://thwack.solarwinds.com/thread/111223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-10T19:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos en red de Foscam usan la misma clave privada SSL codificada en las diferentes instalaciones de los clientes, lo que permite a los atacantes remotos derrotar los mecanismos de protección criptográfica aprovechando el conocimiento de esta clave desde otra instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:c1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7389DE9-CA20-4C78-8995-283B62F1EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:c1_lite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E397A2B-A359-47F7-8511-46C9A4AB6138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:c2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD4E331-F8EC-4101-9CC2-024F45091F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9800xe:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61FCA92-292C-4727-8202-CC9C8CD81135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9826p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F594F134-C17D-4F36-8CA3-989BA1B593AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9828p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43490AF6-018A-4ADA-854E-BF39DD88E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9851p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B496E3-56E0-4231-B4EB-5EB515637C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9853ep:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DABEEE8-9E5C-49A9-A2EC-D9E2968161B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9901ep:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1DF418-B1A9-46B6-91DD-C2C440016573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9903p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBE30F1-F107-46D8-8B60-AE8A515CD566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:fi9928p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF0BB89-28F3-404B-BFBC-5DBAF4043721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:foscam:r2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329EDF7D-0031-430B-9B86-2092CAAAA0B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540388/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540388/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T10:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/student_portal/home.php. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en core-eMLi en AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 permite a un atacante enviar código malicioso, generalmente en la forma de una secuencia de comandos del navegador a un usuario final diferente a través del parámetro de página code/student_portal/home.php. Las versiones afectadas son eMLi School Management 1.0, eMLi College Campus Management 1.0 y eMLi University Management 1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auromeera:emli:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EEF9FE-FE5D-454A-9B43-A9A2CFEE8722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sudoat.blogspot.in/2017/04/xss-vulnerability-in-multiple-emli.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sudoat.blogspot.in/2017/04/xss-vulnerability-in-multiple-emli.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T15:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kony Enterprise Mobile Management (EMM) before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request."
      }, {
        "lang" : "es",
        "value" : "Kony Enterprise Mobile Management (EMM) en versiones anteriores a 4.2.5.2 tiene la vulnerabilidad de divulgar la clave privada en texto plano cuando se cambian los parámetros de la solicitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kony:enterprise_mobile_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "CBF79EEF-071A-4C58-9E04-9158142F388D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142012/Kony-EMM-4.2.0-Private-Key-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142012/Kony-EMM-4.2.0-Private-Key-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T15:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda de Windows no citada en el servicio al cliente en Unisys s-Par en versiones anteriores a 4.4.20 permite a usuarios locales obtener privilegios a través de un archivo troyano ejecutable en el directorio %SYSTEMDRIVE%, como se demuestra por program.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:secure_partitioning:4.3.403:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2618655-3AC7-4745-B2EE-46C8EDB9C7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:secure_partitioning:4.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BDD70C-FF92-4885-B943-952024E6C8D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T15:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path sanitization."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el sitio de gestión basado en web en la Intellinet NFC-30ir IP Camera con firmware LM.1.6.16.05 permite a atacantes remotos leer archivos arbitrarios a través de una solicitud a una secuencia de comandos CGI proporcionada por el proveedor que es utilizada para leer archivo de texto, pero que no realiza ninguna desinfección de URI/path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intellinet-network:nfc-30ir_firmware:lm.1.6.16.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39140A89-2552-4D3E-959D-4A9C3877E862"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intellinet-network:nfc-30ir:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C770A3-2683-4303-81D1-041F5125A915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41829/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41829/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T15:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory."
      }, {
        "lang" : "es",
        "value" : "Intellinet NFC-30ir IP Camera tiene una puerta trasera del vendedor que puede permitir a un atacante remoto acceder a una secuencia de comandos CGI proporcionada por el proveedor en el directorio web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intellinet-network:nfc-30ir_firmware:lm.1.6.16.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39140A89-2552-4D3E-959D-4A9C3877E862"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intellinet-network:nfc-30ir:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C770A3-2683-4303-81D1-041F5125A915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41829/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41829/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5338",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-04-11T16:59:00.267",
      "lastModified" : "2023-11-07T02:49:23.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5339",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-04-11T16:59:00.313",
      "lastModified" : "2023-11-07T02:49:23.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T16:59:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states \"I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."
      }, {
        "lang" : "es",
        "value" : "** DISPUTADO ** libxml2 2.9.4, cuando se utiliza en el modo de recuperación, permite a los atacantes remotos provocar una denegación de servicio (referencia de puntero NULL) por medio de un documento XML manipulado. NOTA: El mantenedor declara que \"no estaría de acuerdo con un CVE con la opción de análisis de recuperación que sólo debería utilizarse para la recuperación manual al menos para el analizador de XML\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C1FDF-1239-4FF2-B5A4-8CED209B8036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2016/11/05/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96188",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778519",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2016/11/05/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=778519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T18:59:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2) display, (3) search, or (4) equipment parameter to module/monitoring_ged/ged_functions.php or the (5) type parameter to monitoring_ged/ajax.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en EyesOfNetwork (también conocido como EON) versión 5.0 y anteriores permiten a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio de (1) bp_name, (2) display, (3) search, o (4) parámetro equipment hacia el archivo module/monitoring_ged/ged_functions.php o el (5) parámetro type hacia el archivo monitoring_ged/ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "8C9FFE9E-BE84-4349-8639-1257D3CA2575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/23/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41747/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/23/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41747/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7469",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-04-11T20:59:00.177",
      "lastModified" : "2023-11-07T02:50:09.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7466.  Reason:  This candidate is a reservation duplicate of CVE-2017-7466.  Notes: All CVE users should reference CVE-2017-7466 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T21:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Command Injection en Schneider Electric. El controlador HOMELYnk existe en todas las versiones anteriores a 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:homelynk_controller_lss100100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "8706AB89-FEA6-43DC-8749-F2DA679FCF02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:homelynk_controller_lss100100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F69759-DDB2-4831-8E88-0D40BD9E7AE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01A",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T21:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de código en SAP TREX / Business Warehouse Accelerator (BWA). La respuesta del proveedor es SAP Security Note 2419592."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:trex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A835C826-B2FE-4018-A8C7-B61C35272EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97567",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/04/11/sap-security-patch-day-april-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/04/11/sap-security-patch-day-april-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T23:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en symphony/content/content.blueprintsdatasources.php en Symphony CMS hasta la versión 2.6.11 permite a atacantes remotos ejecutar código y obtener una webshell desde el back-end. El atacante debe estar autenticado e ingresar código PHP en el editor de datasource o editor de eventos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsymphony:symphony:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.11",
            "matchCriteriaId" : "DAFE4994-A060-4853-8E49-2E8F20A5EF41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.math1as.com/symphonycms_2.7_exec.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97594",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/commit/e30a18f8f09dca836e141bf126a26e565c9a2bc7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/issues/2655",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.math1as.com/symphonycms_2.7_exec.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/commit/e30a18f8f09dca836e141bf126a26e565c9a2bc7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/symphonycms/symphony-2/issues/2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T23:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any code."
      }, {
        "lang" : "es",
        "value" : "Carga de archivos no restringida existe en BigTree CMS en versiones anteriores a 4.2.17: si un atacante carga un archivo 'xxx.php [espacio]', podrían pasar por alto una comprobación de seguridad y ejecutar cualquier código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.16",
            "matchCriteriaId" : "D362609F-A022-495D-966B-96CE91A84B73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.math1as.com/bigtree_upload.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/8cf4212ea40e1b843e1aecf4b24681b0964ec04c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/276",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.math1as.com/bigtree_upload.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/8cf4212ea40e1b843e1aecf4b24681b0964ec04c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-11T23:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "En libsamplerate en versiones anteriores a 1.0.9, se produce una sobre-lectura de búfer en la función calc_output_single en src_sinc.c a través de un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsamplerate_project:libsamplerate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.8",
            "matchCriteriaId" : "174F5898-4C04-4266-932B-212BD7A582B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97587",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/erikd/libsamplerate/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/erikd/libsamplerate/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T10:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W."
      }, {
        "lang" : "es",
        "value" : "En ciertos dispositivos Brother, autorización es mal manejada incluyendo una cookie válida AuthCookie en la respuesta HTTP para un intento fallido de inicio de sesión. Modelos afectados son: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:mfc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E75786C-418A-4C7D-9516-5328931391B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-8710dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063EFDCB-ACA5-48CC-8ACB-B4C35AE82DE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-9130cw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620943CE-02CE-490D-9D92-6A46F591A002"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-9330cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F94C339-B174-4F36-AAC4-6F7B676E0A54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-9340cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8096B8B-E830-4008-B970-11F7F86531DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E30AFC7-51C8-4C89-81BD-5BE8E10FB789"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j4420dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB4E3BE-698A-47D6-A4F4-B9CAA371ADCF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j4620dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4FF760-1267-4281-B1D0-80BBAFED9CDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j5620dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F34C514-2738-4206-8B23-2AC7EB0E900B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j5910dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB8BFDB-0796-455F-8F0A-42A5885C1404"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j6520dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A349B90-B721-42FE-B136-726093F8FCD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j6720dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0358966-552E-47B8-AAA9-8922609625E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j6920dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C3D9CC-7C78-4171-95D7-7FD4CD6F0387"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j6973cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA24CE5-445C-4980-B46A-B7715810BC7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-l2700dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36099941-3EBD-44B5-8452-093EF433642E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-l2720dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B00252-5D1C-4922-A223-92958F945DB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-l2740dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6079C730-2332-429C-9833-BEB7081D2C92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-l8600cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD70CBD-FF0C-4987-90B3-357F1F6D60A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-l8850cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCBA36B-4BE4-4C0D-ABDE-76A2A7B8E9FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-l9550cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39596AFD-DA7E-4DED-B132-888CD804F44F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:dcp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B17165B-7D42-4DF0-9C26-638C37904476"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:dcp-l2520dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0445551D-01CA-435B-B4F4-79022C18237F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:dcp-l2540dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207F0E9F-29B1-4AEC-B0F1-14424060D61D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:ads_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D9D4CB-E9E8-47C3-9826-1D2F976F864F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:ads-1000w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2240DC-9A63-49EA-9BC6-C12111839753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:ads-1500w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064DB43-1CD0-4149-85EC-AFD7B1CD062B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:ads-2500w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD13640-29B4-4784-9A61-3922ECB6E0FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:hl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B89B169-2D03-499C-9022-656124B5E8D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:hl-3140cw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A36ADEE6-20CB-42AA-9E2F-F349DACAD75A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:hl-3170cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD6C1B8-1FAF-4A20-BDEA-B0377295DDDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:hl-3180cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5A15D7-1C22-4C7C-927D-58A5451F6511"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:hl-l2380dw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF710C62-026C-4DA1-AD1E-AB95EC2BA9B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:hl-l8350cdw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024B4793-D380-4C28-8C83-0F37F3F5A0D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/blad/WLB-2017040064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41863/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/blad/WLB-2017040064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41863/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0058",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka \"Win32k Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información de Win32k en Microsoft Windows cuando el componente win32k proporciona información del kernel incorrectamente. Un atacante que explotó con éxito la vulnerabilidad podría obtener información para comprometer aún más el sistema del usuario, vulnerabilidad también conocida como \"Win32k Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97462",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0058",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41879/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41879/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0093",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0201."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que el Scripting Engine procesa al manejar objetos en memoria en los navegadores de Microsoft. La vulnerabilidad podría dañar la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual, vulnerabilidad también conocida como \"Scripting Engine Memory Corruption Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0201."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97419",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0106",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP1, Microsoft Outlook 2013 SP1 y Microsoft Outlook 2016 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97413",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038227",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0106",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0155",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka \"Windows Graphics Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente Graphics en el kernel en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; y Windows 7 SP1 permite a usuarios locales obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Vulnerabilidad de elevación de privilegios de gráficos de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97471",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038237",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0155",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0156",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka \"Windows Graphics Component Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 y Windows Server 2016 cuando el componente gráfico de Microsoft falla al manejar correctamente los objetos en la memoria, vulnerabilidad también conocida como \"Windows Graphics Component Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97507",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038237",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0156",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0158",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios cuando Microsoft Windows, que se ejecuta en Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1 y Windows Server 2012 R2, no desinfecta adecuadamente los identificadores de memoria, vulnerabilidad también conocida como \"Scripting Engine Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97455",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0158",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0159",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka \"ADFS Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elusión de características de seguridad en Windows 10 1607, Windows Server 2012 R2 y Windows 2016 cuando ADFS trata incorrectamente solicitudes procedentes de clientes de Extranet como solicitudes de Intranet, vulnerabilidad también conocida como \"ADFS Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97449",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038243",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0159",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0160",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka \".NET Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 y 4.7 permite a un atacante con acceso al sistema local ejecutar código malicioso, vulnerabilidad también conocida como \".NET Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC4407-7E92-4E60-82F0-0C87D1860D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B3A045-B08A-44E0-91BE-726753F6A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0B660D-1F30-4D45-B98B-726EDB8CB90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97447",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038236",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41903/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41903/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0162",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Remote Code Execution Vulnerability.\" This CVE ID is unique from CVE-2017-0163, CVE-2017-0180, and CVE-2017-0181."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Windows Hyper-V Network Switch que se ejecuta en un servidor anfitrión de Windows 10, Windows 8.1, Windows Server 2012 R2 o Windows Server 2016 no valida adecuadamente la entrada de un usuario autenticado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Remote Code Execution Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0163, CVE-2017-0180 y CVE-2017-0181."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97461",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0162",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0163",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Remote Code Execution Vulnerability.\" This CVE ID is unique from CVE-2017-0162, CVE-2017-0180, and CVE-2017-0181."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Windows Hyper-V Network Switch que se ejecuta en un servidor anfitrión, falla al validar correctamente la entrada de un usuario autenticado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Remote Code Execution Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0162, CVE-2017-0180 y CVE-2017-0181."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97465",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0163",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0164",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka \"Active Directory Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en Windows 10 1607 y Windows Server 2016 Active Directory cuando un atacante autenticado envía consultas de búsqueda maliciosas, vulnerabilidad también conocida como \"Active Directory Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97448",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038235",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0165",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka \"Windows Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios cuando Microsoft Windows que se ejecuta en Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1 y Windows Server 2012 R2, no desinfecta adecuadamente los identificadores de memoria, vulnerabilidad también conocida como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97467",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41901/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41901/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0166",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka \"LDAP Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en Windows cuando se calculan incorrectamente las longitudes del búfer de solicitud LDAP. En un escenario de ataque remoto, un atacante podría explotar esta vulnerabilidad ejecutando una aplicación especialmente manipulada para enviar tráfico malintencionado a un controlador de dominio, vulnerabilidad también conocida como \"LDAP Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "F282E5E8-A5C9-4092-B0BF-07A5A2CAA6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*",
            "matchCriteriaId" : "D16A8D29-57BF-4B74-85F2-24DBD8B52BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97446",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038245",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0166",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0167",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system, a.k.a. \"Windows Kernel Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en Windows 8.1, Windows 8.1, Windows Server 2012 R2, Windows 10 y Windows Server 2016 cuando el kernel de Windows maneja objetos en la memoria incorrectamente. Un atacante que explote esta vulnerabilidad con éxito podría obtener información para comprometer aún más el sistema del usuario, vulnerabilidad también conocido como \"Windows Kernel Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97473",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0167",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41880/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41880/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0168",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Information Disclosure Vulnerability.\" This CVE ID is unique from CVE-2017-0169."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información cuando el Windows Hyper-V Network Switch que se ejecuta en un sistema operativo anfitrión Windows 8.1, Windows Server 2008, Windows Server 2008 R2 o Windows Server 2012 R2, no valida adecuadamente la entrada de un usuario autenticado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Information Disclosure Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0169."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97418",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038232",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0168",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0169",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012. or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Information Disclosure Vulnerability.\" This CVE ID is unique from CVE-2017-0168."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información cuando Windows Hyper-V que se ejecuta en un sistema operativo anfitrión de Windows 8.1, Windows Server 2012 o Windows Server 2012 R2, no valida adecuadamente la entrada de un usuario autenticado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Information Disclosure Vulnerabilidad\". Este CVE ID es exclusivo de CVE-2017-0168."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97459",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038232",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0169",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0178",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando Microsoft Hyper-V que se ejecuta en el servidor anfitrión de Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2 y Windows Server 2016, no valida adecuadamente la entrada de un usuario privilegiado en un sistema operativo huésped, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este CVE ID es único de CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185 y CVE-2017-0186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97416",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0178",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0179",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0178, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando Microsoft Hyper-V que se ejecuta en un servidor anfitrión de Windows 10, Windows 8.1, Windows Server 2012 R2 o Windows Server 2016, no valida adecuadamente la entrada de un usuario privilegiado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este CVE ID es único de CVE-2017-0178, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185 y CVE-2017-0186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97426",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0179",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0180",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Remote Code Execution Vulnerability.\" This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0181."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Windows Hyper-V Network Switch que se ejecuta en un servidor anfitrión no valida adecuadamente la entrada de un usuario autenticado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Remote Code Execution Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0162, CVE-2017-0163 y CVE-2017-0181."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97444",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0180",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0181",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Remote Code Execution Vulnerability.\" This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0180."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando el Windows Hyper-V Network Switch se ejecuta en un servidor anfitrión de Windows 10 o Windows Server 2016 no valida adecuadamente la entrada de un usuario autenticado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Remote Code Execution Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0162, CVE-2017-0163 y CVE-2017-0180."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97445",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0181",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0182",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando el Windows Hyper-V Network Switch que se ejecuta en un servidor anfitrión de Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2 o Windows Server 2016, no valida adecuadamente la entrada de un usuario privilegiado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0178, CVE-2017-0179, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185 y CVE-2017-0186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97427",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0182",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0183",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando el Windows Hyper-V Network Switch que se ejecuta en un servidor anfitrión de Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2 o Windows Server 2016, no valida adecuadamente la entrada de un usuario privilegiado en un invitado Sistema operativo, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0184, CVE-2017-0185 y CVE-2017-0186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0183",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0184",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0185, and CVE-2017-0186."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando Microsoft Hyper-V, que se ejecuta en un servidor anfitrión, no valida adecuadamente la entrada de un usuario privilegiado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0185 y CVE-2017-0186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97435",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0184",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0185",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, and CVE-2017-0186."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando el Windows Hyper-V Network Switch, que se ejecuta en un servidor anfitrión de Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2 o Windows Server 2016, no valida adecuadamente la entrada de un usuario privilegiado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este CVE ID es único de CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184 y CVE-2017-0186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97437",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038230",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0185",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0186",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability.\" This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, and CVE-2017-0185."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio cuando el Windows Hyper-V Network Switch, que se ejecuta en un servidor anfitrión de Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2 o Windows Server 2016, no valida adecuadamente la entrada de un usuario privilegiado en un sistema operativo invitado, vulnerabilidad también conocida como \"Hyper-V Denial of Service Vulnerability\". Este ID CVE es único de CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184 y CVE-2017-0185."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97438",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0186",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0188",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka \"Win32k Information Disclosure Vulnerability.\" This CVE ID is unique from CVE-2017-0189."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información de Win32k en Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 y Windows Server 2016 cuando el componente win32k proporciona información del kernel incorrectamente. Un atacante que explotara con éxito la vulnerabilidad podría obtener información para comprometer aún más el sistema del usuario, vulnerabilidad también conocida como \"Win32k Information Disclosure Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0189."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97475",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0188",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0189",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:00.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka \"Win32k Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0188."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en Windows 10 cuando el controlador en modo kernel de Windows no maneja adecuadamente objetos en la memoria. Un atacante que explotara con éxito esta vulnerabilidad podría ejecutar código arbitrario en modo kernel, vulnerabilidad también conocida como \"Vulnerabilidad de elevación de privilegios de Win32k\". Este CVE ID es exclusivo de CVE-2017-0188."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97420",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0189",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0191",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding, aka \"Windows Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en la forma en que Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 y Windows Server 2016 gestionan objetos en la memoria. Un atacante que explotara con éxito la vulnerabilidad podría hacer que un sistema de destino dejara de responder, vulnerabilidad también conocido como \"Vulnerabilidad de denegación de servicio de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97466",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0191",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0192",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka \"ATMFD.dll Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Type Manager Font Driver (ATMFD.dll) en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511, 1607 y 1703 permite a un atacante obtener información sensible a través de un documento especialmente manipulado o un sitio web no confiable, vulnerabilidad también conocida como \"Vulnerabilidad de divulgación de información ATMFD.dll\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97452",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038231",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0192",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0194",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka \"Microsoft Office Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2 y Office Compatibility Pack SP2 permiten a atacantes remotos obtener información sensible de la memoria de proceso a través de un documento Office manipulado, vulnerabilidad también conocida como \"Vulnerabilidad de divulgación de información de Microsoft Office\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "94F5E2F8-0D37-4FCC-B55A-9F09C421272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AED6C159-CD2C-436B-99BC-00E79A685D44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97436",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038244",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0194",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0195",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, aka \"Microsoft Office XSS Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel Services en Microsoft SharePoint Server 2010 SP1 y SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 y Office Online Server permiten a atacantes remotos llevar a cabo XXS y ejecutar secuencias de comandos con privilegios de usuario local a través de una solicitud manipulada, vulnerabilidad también conocida como \"Microsoft Office XSS Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_web_app:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C35FE520-68CD-4EE8-A5D6-3D2E351AE0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6404DAF-34CC-47A0-B711-87EAC662FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA65D4A-00C8-47E2-AF9F-6B420017CD29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97417",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0195",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0197",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office DLL Loading Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft OneNote 2007 SP3 y Microsoft OneNote 2010 SP2 permiten a los atacantes remotos ejecutar código arbitrario a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office DLL Loading Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onenote:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "83434795-4772-48E2-B604-9AAC6ECDE0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onenote:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "18AE1481-1E92-42F9-9E2E-C9C19353E580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97411",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038241",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0197",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/buffaloverflow/status/852937040480149505",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/buffaloverflow/status/852937040480149505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0199",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.157",
      "lastModified" : "2025-10-22T00:15:59.773",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1 y Windows 8.1 permiten a atacantes remotos ejecutar código arbitrario a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office DLL Loading Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office and WordPad Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F740BB-49FA-48E0-BBBA-7685C0DA09BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184A3E7A-9716-4594-9293-4ED708EF938F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374B9A63-793D-41A1-A02F-4642031DA5FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97498",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038224",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41894/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41934/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42995/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41894/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41934/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42995/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0199",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0200",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user, aka \"Microsoft Edge Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Microsoft Edge accede inadecuadamente a objetos en la memoria. La vulnerabilidad podría dañar la memoria de tal manera que habilita a un atacante para ejecutar código arbitrario en el contexto del usuario actual, vulnerabilidad también conocida como \"Microsoft Edge Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97456",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0200",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0201",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0093."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Internet Explorer en la forma en que procesan los motores JScript y VBScript al manipular objetos en la memoria. La vulnerabilidad podría dañar la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual, vulnerabilidad también conocida como \"Scripting Engine Memory Corruption Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0093."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97454",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0201",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0202",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. \"Internet Explorer Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Internet Explorer accede inadecuadamente a objetos en la memoria. La vulnerabilidad podría dañar la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual, vulnerabilidad también conocida como \"Internet Explorer Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97441",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41941/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41941/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0203",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could trick a user into loading a web page with malicious content, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en Microsoft Edge cuando la Edge Content Security Policy (CSP) no valida adecuadamente ciertos documentos especialmente manipulados. Un atacante podría engañar a un usuario para que cargue una página web con contenido malintencionado, vulnerabilidad también conocida como \"Microsoft Edge Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97443",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0203",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0204",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka \"Microsoft Office Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP1 y Microsoft Outlook 2016 permiten a los atacantes remotos eludir Office Protected View a través de un documento especialmente manipulado, vulnerabilidad también conocida como \"Microsoft Office Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97458",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038227",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0204",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0205",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user, aka \"Microsoft Edge Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Microsoft Edge accede inadecuadamente a objetos en la memoria. La vulnerabilidad podría dañar la memoria de tal manera que permite a un atacante ejecutar código arbitrario en el contexto del usuario actual, vulnerabilidad también conocida como \"Microsoft Office Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97442",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0205",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0207",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka \"Microsoft Browser Spoofing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook para Mac 2011 permite a atacantes remotos suplantar contenido web a través de un correo electrónico manipulado con etiquetas HTML específicas, vulnerabilidad también conocido como \"Microsoft Browser Spoofing Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2011:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "2307F3E3-6763-46F8-8536-BB1BFA698462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97463",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038242",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0208",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. \"Scripting Engine Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en Microsoft Edge cuando el motor de secuencias de comandos Chakra no maneja adecuadamente los objetos en la memoria. Un atacante que explotara con éxito la vulnerabilidad podría obtener información para comprometer aún más el sistema del usuario, vulnerabilidad también conocida como \"Scripting Engine Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0210",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.420",
      "lastModified" : "2025-10-22T00:15:59.940",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka \"Internet Explorer Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios cuando Internet Explorer no aplica adecuadamente las directivas entre dominios, lo que podría permitir a un atacante acceder a información de un dominio e inyectarla en otro dominio, vulnerabilidad también conocido como \"Internet Explorer Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Internet Explorer Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97512",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0210",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0211",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-04-12T14:59:01.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka \"Windows OLE Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en versiones Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2 y Windows Server 2016 de Microsoft Windows OLE cuando falla una verificación de nivel de integridad, vulnerabilidad también conocida como \"Windows OLE Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97514",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038240",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0211",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41902/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41902/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2989",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database."
      }, {
        "lang" : "es",
        "value" : "Adobe Campaign versiones Build 8770 y anteriores tienen un bypass de validación de entrada que podría explotarse para leer, escribir o eliminar datos de la base de datos de Campaign."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.11",
            "matchCriteriaId" : "F1FEDAEA-DAF3-4EDC-849E-165BA7A05985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97552",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb17-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3004",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones CC 2017 (18.0.1) y anteriores, CC 2015.5.1 (17.0.1) y anteriores tienen una vulnerabilidad de corrupción de memoria al analizar archivos PCX maliciosos. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.0.1",
            "matchCriteriaId" : "FF086338-3153-4748-925C-4946595C5201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndIncluding" : "18.0.1",
            "matchCriteriaId" : "BE2383B2-24F7-4C2B-B493-56378C44EC35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97559",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038229",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-12.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3005",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones CC 2017 (18.0.1) y anteriores, CC 2015.5.1 (17.0.1) y anteriores tienen una vulnerabilidad de ruta de búsqueda no citada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.0.1",
            "matchCriteriaId" : "FF086338-3153-4748-925C-4946595C5201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndIncluding" : "18.0.1",
            "matchCriteriaId" : "BE2383B2-24F7-4C2B-B493-56378C44EC35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97553",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038229",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-12.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3006",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Thor 3.9.5.353 y anteriores tienen una vulnerabilidad relacionada con el uso de permisos de recursos inadecuados durante la instalación de las aplicaciones de escritorio de Creative Cloud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.5.353",
            "matchCriteriaId" : "FAADA07C-AE45-4915-9D16-06EE0B16CDFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97555",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41878/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41878/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3007",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Thor 3.9.5.353 y anteriores tienen una vulnerabilidad en la ruta de búsqueda de directorio utilizada para encontrar recursos relacionados con las aplicaciones de escritorio de Creative Cloud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.5.353",
            "matchCriteriaId" : "FAADA07C-AE45-4915-9D16-06EE0B16CDFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97558",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3011",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de desbordamiento entero explotable en el filtro CCITT fax PDF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97548",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3012",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de carga de la biblioteca insegura (secuestro de DLL) en el complemento de OCR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97547",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3013",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de carga de la biblioteca insegura (secuestro DLL) en un DLL relacionado con el registro remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97547",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3014",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in XML Forms Architecture (XFA) related to reset form functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen un uso después de liberación explotable después de la vulnerabilidad XML Forms Architecture (XFA) relacionada con la funcionalidad del formulario de restablecimiento. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3015",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 parsing functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la funcionalidad de análisis de JBIG2. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3017",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when handling a malformed PDF file. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable al manejar un archivo PDF con formato incorrecto. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3018",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the renderer functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la funcionalidad de representación. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3019",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el analizador de formato de representación de producto (PRC). Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3020",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the weblink module."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el módulo weblink."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-250/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3021",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser engine."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el motor del analizador JPEG 2000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3022",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when parsing the header of a JPEG 2000 file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria al analizar el encabezado de un archivo JPEG 2000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-257/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3023",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 code-stream tile functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la funcionalidad de mosaico de flujo de código JPEG 2000. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-253/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3024",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:01.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when manipulating PDF annotations. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable al manipular anotaciones en PDF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3025",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability related to internal object representation manipulation. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable relacionada con la manipulación de representación de objetos internos. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3026",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability when manipulating an internal data structure. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita al manipular una estructura de datos interna. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3027",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the XFA module, related to the choiceList element. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en el módulo XFA, relacionado con el elemento choiceList. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3028",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion module, related to processing of TIFF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el módulo de conversión de imágenes, relacionada con el procesamiento de archivos TIFF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-254/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3029",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000 code-stream."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria al manejar un flujo de código JPEG 2000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-255/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3030",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the AES module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el módulo AES. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3031",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de direcciones de memoria en el motor XSLT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-259/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3032",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 code-stream parser."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el analizador de flujo de código JPEG 2000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-257/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3033",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream tile data."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria cuando se manipulan datos de mosaico de flujo de código JPEG 2000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-258/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3034",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the XML Forms Architecture (XFA) engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de desbordamiento de enteros explotable en el motor XFA (XML Forms Architecture), relacionado con la funcionalidad de diseño. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97548",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-260/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3035",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the XML Forms Architecture (XFA) engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en el motor XFA (XML Forms Architecture). Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-261/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3036",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in image conversion related to processing of the PCX (picture exchange) file format. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la conversión de imágenes relacionada con el procesamiento del formato de archivo PCX (intercambio de imágenes). Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-262/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3037",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de JavaScript. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3038",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing TTF (TrueType font format) stream data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable al analizar datos de flujo TTF (formato de fuente TrueType). Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3039",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the PPKLite security handler. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el controlador de seguridad PPKLite. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3040",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el módulo de compresión de imágenes JBIG2. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3041",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable al analizar datos de fuentes en el complemento MakeAccessible. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3042",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in image conversion, related to parsing offsets in TIFF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad explotable de desbordamiento de memoria dinámica en la conversión de imágenes, relacionada con el análisis de desplazamientos en archivos TIFF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-265/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3043",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en la funcionalidad de colaboración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-263/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3044",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 engine, related to image scaling. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor JPEG 2000, relacionada con la ampliación de la imagen. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-267/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3045",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to the palette box."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el analizador JPEG 2000, relacionada con el cuadro de la paleta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-268/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3046",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to contiguous code-stream parsing."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el analizador JPEG 2000, relacionada con el análisis de flujo de código contiguo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-270/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3047",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript engine's annotation-related API. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en la API de anotación del motor de JavaScript. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-271/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3048",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to internal scan line representation in TIFF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad explotable de desbordamiento de montón en el motor de conversión de imágenes, relacionado con la representación de línea de exploración interna en archivos TIFF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-272/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3049",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to internal tile manipulation in TIFF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad explotable de desbordamiento de montón en el motor de conversión de imágenes, relacionado con la manipulación interna de mosaicos en archivos TIFF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-273/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3050",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of GIF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionado con el análisis de archivos GIF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-274/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3051",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of JPEG files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionada con el análisis de archivos JPEG. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-275/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3052",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el motor de conversión de imágenes, relacionado con el análisis del formato de archivo de meta-archivo mejorado EMF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-276/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3053",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of the APP13 segment in JPEG files."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de fuga de dirección de memoria en el motor de conversión de imágenes, relacionado con el análisis del segmento APP13 en archivos JPEG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-277/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3054",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to manipulation of EMF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de conversión de imágenes, relacionada con la manipulación de archivos EMF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3055",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in JPEG 2000 parsing of the fragment list tag. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad explotable de desbordamiento de memoria dinámica en JPEG 2000 que analiza la etiqueta de lista de fragmentos. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-280/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3056",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:02.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine, related to string manipulation. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el motor de JavaScript, relacionada con la manipulación de cadenas. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3057",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en la API de JavaScript relacionada con la funcionalidad de colaboración. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-282/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3058",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en la clase de sonido. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-245/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3059",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en el objeto de secuencia de comandos interno. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-246/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3060",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el analizador de código ActionScript2. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97557",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-247/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3061",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el analizador SWF. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97557",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42018/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42018/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3062",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en ActionScript2 al crear una propiedad getter/setter. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-278/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3063",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen un uso explotable después de la vulnerabilidad gratuita en la clase ActionScript2 NetStream. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-279/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3064",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.127 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable al analizar un contorno de forma. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "F332F137-E7E7-4C56-A4D6-7EC184403D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "DE151764-159F-4C1B-9570-687ABB6FB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "AFF85D3D-7D1C-4F75-98D9-406B7C1823BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.127",
            "matchCriteriaId" : "3BF9D915-8929-4468-BB80-D08EDD28B822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97557",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42019/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42019/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3065",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-12T14:59:03.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the font manipulation functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 11.0.19 y anteriores, 15.006.30280 y anteriores, 15.023.20070 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en la funcionalidad de manipulación de fuentes. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "920C2C98-5D86-4436-BEFF-54D9A41D43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "E065F497-3396-4F95-B19F-35628C8AA570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "FAC7EE17-469A-45D6-94B1-7C84E8727A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionEndIncluding" : "15.006.30280",
            "matchCriteriaId" : "EF2B91EA-41D3-4054-958C-5F174D2ADDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "15.023.20070",
            "matchCriteriaId" : "2E18E48C-BDDD-4A01-91F1-C233D53C0978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.19",
            "matchCriteriaId" : "E65E415E-1C3C-472E-9750-3295B65CC6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3125",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-04-12T15:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS no autenticada con FortiMail 5.0.0 - 5.2.9 y 5.3.0 - 5.3.8 podría permitir a un atacante ejecutar secuencias de comandos arbitrarias en el contexto de seguridad del navegador de una víctima registrada en FortiMail, asumiendo que la víctima ha sido manipulada mediante ingeniería social para hacer clic en una URL manipulada por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA17336-50C1-404F-92E4-8107CFAB4D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6386E32B-365F-4DC8-AA77-14579BB84CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7FD9C8-F970-4949-B497-01FB3C1A2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90956836-650E-45B3-8BFE-46AD5FBC484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B901768-B13B-456F-9909-E19103A5CAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D819B2A1-0A5C-45E7-A4B6-395670EFE0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9DB8EF-E990-429A-839C-9E178DA92A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5B9F82-F87C-47E1-AA75-1B7F001CC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863EAA3C-B10D-4211-BAD9-1CFA91F820AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F47A35-CC2A-4908-B678-FACD619EDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82039A31-FE0C-4460-B669-9FE766B47D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549EE473-3B98-4458-BCA2-D0B14BFFDE37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F946FB0-E890-41C3-BFDC-D7734CE3DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2C95E3-0E29-49D9-A9ED-657BC2B05CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CF2645-2997-4939-B9C0-D7A42ECAFEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4D9FF8-64D0-4EF3-A165-C86A68B36BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6699A9-6EBD-42B9-87E8-AF4D3A124679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5984C-2DD3-486F-96F3-B248B4ED0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED77E9D-0865-4BCE-B28B-222971AD198A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A21B130-63A1-459B-A726-B47643A02AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F85C06C-2EFE-404B-9DB0-A9FC3B307BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3885FE-A0FE-4204-A7C3-2E339B430D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E004F2-4B2D-4BB7-9B37-CB4E00B7EA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B586E3F-520C-4842-A18C-C2F44E747569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD12406-E31F-416E-B65A-1486B5E9F86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EF9338-DEB2-4F15-B26B-48B3D7D08659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5421E516-3C05-409F-B6D8-6215223EBB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39660F44-9613-496D-BA2B-1FFAB528B6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6909D1FB-6E23-4CE6-BA70-F2109ACACCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A724687-46DC-4CE3-A11E-45D504C97907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A7E80F-DA0D-4A6B-937E-292E02611FE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fortiguard.com/psirt/FG-IR-17-011",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97474",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://fortiguard.com/psirt/FG-IR-17-011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T15:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file."
      }, {
        "lang" : "es",
        "value" : "La función read_u32_leb128 en libr/util/uleb128.c en radare2 1.3.0 permite a los atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basada en memoria dinámica y bloqueo de aplicación) a través de un archivo de Web Assembly."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA3B8-616C-42E1-A70A-D8ABE8DEF929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/issues/7260",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T15:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_functions.php, related to front_end/frontend_functions.php."
      }, {
        "lang" : "es",
        "value" : "La función read_u32_leb128 en libr/util/uleb128.c en radare2 1.3.0 permite a los atacantes remotos provocar una denegación de servicio (sobrecarga de búfer basada en heap y bloqueo de aplicación) a través de un archivo de ensamblaje Web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-dorado:spider_event_calendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.51",
            "matchCriteriaId" : "2A5AFCE9-8CC1-46D6-94BD-A4C73C834809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.openwall.net/full-disclosure/2017/04/09/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97656",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.openwall.net/full-disclosure/2017/04/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T16:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with \"cmc\" and \"password\" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell."
      }, {
        "lang" : "es",
        "value" : "En SolarWinds Log & Event Manager (LEM) en versiones anteriores a 6.3.1 Hotfix 4, se encuentra un sistema de menús cuando se accede al servicio SSH con \"cmc\" y \"password\" (nombre de usuario y contraseña predeterminados). Al explotar una vulnerabilidad en la función restrictssh de la secuencia de comandos de menú, un atacante puede escapar del shell restringido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:log_\\&_event_manager:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C3E9DB-229B-446D-841D-E4FA1AD14C9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-solarwinds-log-event-manager-siem-product/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://thwack.solarwinds.com/thread/111223",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-solarwinds-log-event-manager-siem-product/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://thwack.solarwinds.com/thread/111223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T18:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile before 1.0.28, an error in the \"flac_buffer_copy()\" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585."
      }, {
        "lang" : "es",
        "value" : "En libsndfile en versiones anteriores a 1.0.28, se puede explotar un error en la función \"flac_buffer_copy()\" function (flac.c) para provocar una violación de segmentación (con acceso a memoria de escritura) a través de un archivo FLAC especialmente manipulado durante un intento de remuestreo, un problema similar A la CVE-2017-7585."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.27",
            "matchCriteriaId" : "59548F6B-A7DD-4844-8347-79E7FEBF8280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T18:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile before 1.0.28, an error in the \"flac_buffer_copy()\" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585."
      }, {
        "lang" : "es",
        "value" : "En libsndfile en versiones anteriores a 1.0.28, se puede explotar un error en la función \"flac_buffer_copy()\" (flac.c) para provocar una violación de segmentación (con acceso a memoria leída) a través de un archivo FLAC especialmente manipulado durante un intento de remuestreo, un problema similar a CVE-2017-7585."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.27",
            "matchCriteriaId" : "59548F6B-A7DD-4844-8347-79E7FEBF8280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T20:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote attackers to spoof page content via a malicious URL provided to the user, which triggers an invalid request."
      }, {
        "lang" : "es",
        "value" : "Mod_auth_openidc.c en el módulo de autenticación Ping Identity OpenID Connect para Apache (también conocido como mod_auth_openidc) en versiones anteriores a 2.14 permite a los atacantes remotos falsificar el contenido de la página a través de una URL malintencionada proporcionada al usuario, lo que desencadena una solicitud no válida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidc:mod_auth_openidc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.4",
            "matchCriteriaId" : "1296F955-6E42-43B5-846A-E8AAA7348301"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/17/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96299",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/commit/612e309bfffd6f9b8ad7cdccda3019fc0865f3b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/issues/212",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/17/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/commit/612e309bfffd6f9b8ad7cdccda3019fc0865f3b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/issues/212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T22:59:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions."
      }, {
        "lang" : "es",
        "value" : "OpenStack Nova-LXD en versiones anteriores a 13.1.1 usa el nombre incorrecto en los pares veth cuando se aplican las reglas del grupo de seguridad Neutron por instancias, lo que permite a atacantes remotos eludir las restricciones de seguridad previstas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova-lxd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.1.0",
            "matchCriteriaId" : "1EC9109B-4DD9-4530-A5C5-A108F7732554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96182",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3195-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/nova-lxd/+bug/1656847",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openstack/nova-lxd/commit/1b76cefb92081efa1e88cd8f330253f857028bd2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/09/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3195-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/nova-lxd/+bug/1656847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openstack/nova-lxd/commit/1b76cefb92081efa1e88cd8f330253f857028bd2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T22:59:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the \"token\" cookie issued at login."
      }, {
        "lang" : "es",
        "value" : "Un usuario no privilegiado del Unitrends Enterprise Backup en versiones anteriores a 9.0.0 servidor de web puede escalar privilegios root modificando la cookie \"token\" emitida al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-565"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unitrends:enterprise_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0-8",
            "matchCriteriaId" : "883FD6F8-6B27-464B-94BA-0DA453073DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T22:59:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable."
      }, {
        "lang" : "es",
        "value" : "Un problema ha sido descubierto en api/includes/systems.php en Unitrends Enterprise Backup en versiones anteriores a 9.0.0. La entrada de usuario no filtrada correctamente antes de ser enviada a una función popen. Esto permite un código de ejecución remoto enviando una variable de usuario especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unitrends:enterprise_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0-8",
            "matchCriteriaId" : "883FD6F8-6B27-464B-94BA-0DA453073DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T22:59:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension, contents, and path, leading to remote code execution, aka Unrestricted File Upload."
      }, {
        "lang" : "es",
        "value" : "Un problema ha sido descubierto en Unitrends Enterprise Backup en versiones anteriores a 9.1.2. Una falta de sanitización de la entrada de usuario en el createReportName y funciones saveReport en recoveryconsole/bpl/reports.php permite a un usuario autenticado a crear un archivo denominado aleatoriamente en disco con una extensión, un contenido y una ruta controlados por el usuario, conduciendo a la ejecución remota de código, también conocido como Unrestricted File Upload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unitrends:enterprise_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.1",
            "matchCriteriaId" : "AADD9D64-5952-4CF1-ABA4-CD8FA1C03574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T22:59:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change the password of the logged in account without knowing the current password. This allows for an account takeover."
      }, {
        "lang" : "es",
        "value" : "Un atacante que ha secuestrado un Unitrends Enterprise Backup (en versiones anteriores a 9.1.2) sesión de servidor web puede aprovechar api/includes/users.php para cambiar la contraseña de la cuenta registrada sin conocer la contraseña actual. Esto permite una toma de control de la cuenta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unitrends:enterprise_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.1",
            "matchCriteriaId" : "AADD9D64-5952-4CF1-ABA4-CD8FA1C03574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el analizador de archivos NetScaler podría entrar en un bucle infinito, desencadenado por un archivo de captura malformado. Esto se trató en wiretap/netscaler.c asegurando un tamaño de registro distinto a cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.11",
            "matchCriteriaId" : "34C9C7DF-BF75-489C-9F2E-4A2624CF8686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.5",
            "matchCriteriaId" : "A17281EB-80A9-47D0-8F64-5B6151B4C475"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97631",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector BGP podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-bgp.c mediante el uso de un tipo de datos íntegros diferente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97632",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=fa31f69b407436d0946f84baa0acdcc50962bf7a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-16.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=fa31f69b407436d0946f84baa0acdcc50962bf7a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector WBXML podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-wbxml.c agregando validación de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97633",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2f322f66cbcca2fefdaa630494f9d6c97eb659b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector IMAP podría caer, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-imap.c calculando el final de una línea correctamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97636",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=671e32820ab29d41d712cc8a472eab9b672684d9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=671e32820ab29d41d712cc8a472eab9b672684d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5, el disector DOF podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-dof.c mediante el uso de un tipo de datos íntegros diferentes y ajustando un valor devuelto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97634",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab77e03e20765f95fbd21b19e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=da53a90b6895e47e03c5de05edf84bd99d535fd8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6032b0fe5fc1176ab77e03e20765f95fbd21b19e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=da53a90b6895e47e03c5de05edf84bd99d535fd8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector RPC sobre RDMA podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-rpcrdma.c comprobando correctamente si va más allá del desplazamiento máximo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97630",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector SIGCOMP podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-sigcomp.c mediante la corrección de una comprobación del tamaño de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97627",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-20.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector SLSK podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-slsk.c añadiendo controles para la longitud restante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97635",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-19.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector PacketBB podría caer, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-packetbb.c restringiendo las adiciones al árbol de protocolo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97638",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-18.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-12T23:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el disector WSP podría entrar en un bucle infinito, desencadenado por un paquete de inyección o un archivo de captura mal formado. Esto se trató en epan/dissectors/packet-wsp.c añadiendo un control de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97628",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-21.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T03:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Smart related articles\" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method)."
      }, {
        "lang" : "es",
        "value" : "La extensión \"Smart related articles\" 1.1 de Joomla! tiene XSS en dialog.php (n_art,type in GET Method)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smart_related_articles_project:smart_related_articles:1.1:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "A539A70A-015A-4F61-95CE-23F526E21462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extensions.joomla.org/extension/smart-related-articles/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://extensions.joomla.org/extension/smart-related-articles/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T03:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Smart related articles\" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check)."
      }, {
        "lang" : "es",
        "value" : "La extensión \"Smart related articles\" 1.1 de Joomla! no impide las solicitudes directas a dialog.php (falta una comprobación _JEXEC)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smart_related_articles_project:smart_related_articles:1.1:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "A539A70A-015A-4F61-95CE-23F526E21462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extensions.joomla.org/extension/smart-related-articles/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://extensions.joomla.org/extension/smart-related-articles/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T03:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Smart related articles\" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability)."
      }, {
        "lang" : "es",
        "value" : "La extensión \"Smart related articles\" 1.1 for Joomla! tiene una inyección SQL en dialog.php (el atacante debe usar la variable search_cats en método POST para explotar esta vulnerabilidad)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smart_related_articles_project:smart_related_articles:1.1:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "A539A70A-015A-4F61-95CE-23F526E21462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extensions.joomla.org/extension/smart-related-articles/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://extensions.joomla.org/extension/smart-related-articles/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T14:59:01.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de montón en las versiones Citrix NetScaler Gateway 10.1 en versiones anteriores a 135.8/135.12, 10.5 en versiones anteriores a 65.11, 11.0 en versiones anteriores a 70.12 y 11.1 en versiones anteriores a 52.13 permite a un atacante remoto autenticado ejecutar comandos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A254925E-AD47-4722-AAB2-43A6FEA900AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBB9B6A-1CAD-4D82-9B1E-939921986053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97626",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX222657",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX222657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T16:59:01.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS."
      }, {
        "lang" : "es",
        "value" : "En libosip2 en GNU oSIP versiones 4.1.0 y 5.0.0, un mensaje SIP malformado puede conllevar a un desbordamiento del búfer de la pila en la función msg_osip_body_parse() definida en el archivo osipparser2/osip_message_parse.c, resultando en una DoS remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:osip:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6CA71F-DE73-4D95-8574-D1CBABE3EAAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97644",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://savannah.gnu.org/support/index.php?109265",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://savannah.gnu.org/support/index.php?109265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T16:59:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file."
      }, {
        "lang" : "es",
        "value" : "La función consume_init_expr de wasm.c en radare2 1.3.0 permite a los atacantes remotos provocar una denegación de servicio (sobre-lectura de búfer basada en memoria dinámica y caída de aplicación) a través de un archivo Web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA3B8-616C-42E1-A70A-D8ABE8DEF929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97648",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/d2632f6483a3ceb5d8e0a5fb11142c51c43978b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7265",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/d2632f6483a3ceb5d8e0a5fb11142c51c43978b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-13T17:59:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a \"canonical\" URL on installation of concrete5 using the \"Advanced Options\" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector."
      }, {
        "lang" : "es",
        "value" : "Concrete5 8.1.0 pone una confianza incorrecta en el encabezado HTTP Host durante el almacenamiento en caché, si el administrador no definió una URL \"canonical\" en la instalación de concrete5 mediante la configuración de \"Advanced Options\". Los atacantes remotos pueden hacer una solicitud GET con cualquier nombre de dominio en el encabezado Host; Esto se almacena y permite que se establezcan dominios arbitrarios para ciertos enlaces mostrados a visitantes posteriores, potencialmente un vector XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E2F1D5-F0C9-41EF-ADB9-52B52F88E01B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CONCRETE5-v8.1.0-HOST-HEADER-INJECTION.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97649",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/148300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142145/concrete5-8.1.0-Host-Header-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41885/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CONCRETE5-v8.1.0-HOST-HEADER-INJECTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/148300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142145/concrete5-8.1.0-Host-Header-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41885/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx."
      }, {
        "lang" : "es",
        "value" : "LibreOffice en versiones anteriores a 11-03-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en la función SVMConverter::ImplConvertFromSVM1 en vcl/source/gdi/svmconverter.cxx"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.6.1",
            "matchCriteriaId" : "064A809A-AF00-4197-82E3-0B749A78EFCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.libreoffice.org/about-us/security/advisories/cve-2017-7856/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97667",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=817",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/28e61b634353110445e334ccaa415d7fb6629d62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.libreoffice.org/about-us/security/advisories/cve-2017-7856/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/28e61b634353110445e334ccaa415d7fb6629d62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c."
      }, {
        "lang" : "es",
        "value" : "FreeType 2 en versiones anteriores a 2017-03-08 tiene una escritura fuera de límites provocada por un desbordamiento de búfer basado en memoria dinámica relacionado con la función TT_Get_MM_Var en truetype/ttgxvar.c y la función sfnt_init_face en sfnt/sfobjs.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7",
            "versionEndExcluding" : "2.8",
            "matchCriteriaId" : "F2A965F0-BC5A-4267-9A1A-4FA55A76D390"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7bbb91fbf47fc0775cc9705673caf0c47a81f94b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97680",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7bbb91fbf47fc0775cc9705673caf0c47a81f94b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c."
      }, {
        "lang" : "es",
        "value" : "FreeType 2 en versiones anteriores a 07-03-2017 tiene una escritura fuera de límites en relación con la función TT_Get_MM_Var en truetype/ttgxvar.c y en la función sfnt_init_face en sfnt/sfobjs.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "AEEA3966-EA75-48BB-8D9C-3C834BA9CC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=779309744222a736eba0f1731e8162fce6288d4e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97682",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=738",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=779309744222a736eba0f1731e8162fce6288d4e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en versiones anteriores a 05-03-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con the ff_h264_slice_context_init function in libavcodec/h264dec.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.4",
            "matchCriteriaId" : "ABD7C0F2-4138-490D-898F-DDA4E055963A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97663",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/parse_address.c."
      }, {
        "lang" : "es",
        "value" : "Google gRPC en versiones anteriores a 22-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función parse_unix function en core/ext/client_chennel/parse_address.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "FB8958F9-2A01-4189-9785-1C3F09E812E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97695",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=661",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/9833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/9833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c."
      }, {
        "lang" : "es",
        "value" : "Google gRPC en versiones anteriores a 22-02-2017 tiene una escritura fuera de límites en relación con la función gpr_free en core/lib/support/alloc.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "FB8958F9-2A01-4189-9785-1C3F09E812E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97694",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=655",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/9833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/9833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en versiones anteriores a 07-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función decode_frame en libavcodec/pictordec.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.10",
            "matchCriteriaId" : "E0E1F413-9BBA-4CDD-8162-0E550316B36A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=559",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/8c2ea3030af7b40a3c4275696fb5c76cdb80950a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/8c2ea3030af7b40a3c4275696fb5c76cdb80950a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en versiones anteriores a 04-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función decode_frame_common en libavcodec/pngdec.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.10",
            "matchCriteriaId" : "E0E1F413-9BBA-4CDD-8162-0E550316B36A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97675",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/e477f09d0b3619f3d29173b2cd593e17e2d1978e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/e477f09d0b3619f3d29173b2cd593e17e2d1978e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c."
      }, {
        "lang" : "es",
        "value" : "FreeType 2 en versiones anteriores a 02-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función tt_size_reset en truetype/ttobjs.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "AEEA3966-EA75-48BB-8D9C-3C834BA9CC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=e6699596af5c5d6f0ae0ea06e19df87dce088df8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97673",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=e6699596af5c5d6f0ae0ea06e19df87dce088df8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en versiones anteriores a 24-01-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función ipvideo_decode_block_opcode_0xA en libavcodec/interplayvideo.c unad la función avcodec_align_dimensions2 en libavcodec/utils.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.9",
            "matchCriteriaId" : "BB8F94CB-75BE-4D48-A4A6-4CE03A3D60B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97685",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/2080bc33717955a0e4268e738acf8c1eeddbf8cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/2080bc33717955a0e4268e738acf8c1eeddbf8cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c."
      }, {
        "lang" : "es",
        "value" : "FFmpeg en versiones anteriores a 23-01-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en pila en relación con la función decode_zbuf en libavcodec/pngdec.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.9",
            "matchCriteriaId" : "BB8F94CB-75BE-4D48-A4A6-4CE03A3D60B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97664",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/e371f031b942d73e02c090170975561fabd5c264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/e371f031b942d73e02c090170975561fabd5c264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function."
      }, {
        "lang" : "es",
        "value" : "International Components para Unicode (ICU) para C/C++ en versiones anteriores a 13-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función utf8TextAccess en la función common/utext.cpp y la función utext_setNativeIndex*."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*",
            "versionEndIncluding" : "58.2",
            "matchCriteriaId" : "B9232228-9496-46F1-8856-9D14F644CB78"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.icu-project.org/trac/changeset/39671",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3830",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97672",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=213",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.icu-project.org/trac/changeset/39671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function."
      }, {
        "lang" : "es",
        "value" : "International Components para Unicode (ICU) para C/C++ en versiones anteriores a 13-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función utf8TextAccess en common/utext.cpp y la función unad the utext_moveIndex32*."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*",
            "versionEndIncluding" : "58.2",
            "matchCriteriaId" : "B9232228-9496-46F1-8856-9D14F644CB78"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.icu-project.org/trac/changeset/39671",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3830",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97674",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.icu-project.org/trac/changeset/39671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10."
      }, {
        "lang" : "es",
        "value" : "GnuTLS en versiones anteriores a 20-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de entero y desbordamiento de búfer basado en memoria dinámica en relación con la función cdk_pkt_read en opencdk/read-packet.c. Este problema (que es un subconjunto del informe GNUTLS-SA-2017-3 del proveedor) se fija en 3.5.10."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.9",
            "matchCriteriaId" : "10ED3317-8157-49E1-9831-CFA9335397CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/51464af713d71802e3c6d5ac15f1a95132a354fe",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.gnutls.org/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/commit/51464af713d71802e3c6d5ac15f1a95132a354fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.gnutls.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T04:59:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx."
      }, {
        "lang" : "es",
        "value" : "LibreOffice en versiones anteriores a 02-01-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función tools::Polygon::Insert en tools/source/generic/poly.cxx"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:beta2:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.0",
            "matchCriteriaId" : "570C0612-FE5E-4003-8EB0-D156278EE2E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.libreoffice.org/about-us/security/advisories/cve-2017-7870/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97671",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/62a97e6a561ce65e88d4c537a1b82c336f012722",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-28",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.libreoffice.org/about-us/security/advisories/cve-2017-7870/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/62a97e6a561ce65e88d4c537a1b82c336f012722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de gestión de Palo Alto Networks PAN-OS en versiones anteriores a 7.0.14 y 7.1.x en versiones anteriores a 7.1.9 permite a los atacantes remotos escribir para exportar archivos a través de parámetros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.13",
            "matchCriteriaId" : "473E2EBD-2881-4EC4-B107-8E736D3EC0DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97598",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters."
      }, {
        "lang" : "es",
        "value" : "La Management Web Interface en Palo Alto Networks PAN-OS en versiones anteriores a 7.1.9 permite a los usuarios autenticados remotos obtener privilegios mediante parámetros de petición no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.8",
            "matchCriteriaId" : "A6E19793-C7FB-41A6-BED6-353AE6FFA163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97592",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper validation of requests to revoke a Traps agent license."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks Traps ESM Console en versiones anteriores a 3.4.4 permite a los atacantes provocar una denegación de servicio aprovechando la validación incorrecta de las solicitudes para revocar una licencia de agente Traps."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:traps:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.3",
            "matchCriteriaId" : "FEA9645F-DF74-497F-848E-32ACDFB7F102"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97533",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.paloaltonetworks.com/documentation/34/endpoint/traps-release-notes/traps-3-4-4-addressed-issues.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.paloaltonetworks.com/documentation/34/endpoint/traps-release-notes/traps-3-4-4-addressed-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control."
      }, {
        "lang" : "es",
        "value" : "Moxa MXView 2.8 permite a atacantes remotos leer el archivo de clave privada del servidor web, sin control de acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxa:mxview:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228E1E8B-6B20-42C9-8D53-48734B202C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142074/Moxa-MXview-2.8-Private-Key-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/49",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41850/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142074/Moxa-MXview-2.8-Private-Key-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials."
      }, {
        "lang" : "es",
        "value" : "Moxa MXView 2.8 permite a los atacantes remotos provocar una denegación de servicio mediante el envío excesivo de carga útil basura para las credenciales de inicio de sesión del cliente MXView."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxa:mxview:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228E1E8B-6B20-42C9-8D53-48734B202C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-DENIAL-OF-SERVICE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41851/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-DENIAL-OF-SERVICE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41851/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML External Entity via \".AOP\" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure."
      }, {
        "lang" : "es",
        "value" : "XML External Entity a través de los archivos \".AOP\" utilizados por Moxa MX-AOPC Server 1.5 resultan en la divulgación remota de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxa:mx-aopc_server:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE63362-39A4-4EF0-9EA9-A0D8EA586387"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/51",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41852/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41852/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T14:59:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid program."
      }, {
        "lang" : "es",
        "value" : "Proxifier para Mac en versiones anteriores a 2.19 permite a los usuarios locales obtener privilegios a través del primer parámetro al programa setuid de KLoader."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proxifier:proxifier:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "2.19",
            "matchCriteriaId" : "B22FD161-D5D0-4BF4-B40A-3BFD747037F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/54",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve20177643-local-root-privesc-in-proxifier-for-mac--218.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41854/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve20177643-local-root-privesc-in-proxifier-for-mac--218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41854/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1152",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-14T16:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293."
      }, {
        "lang" : "es",
        "value" : "IBM Financial Transaction Manager 3.0.1 y 3.0.2 no actualiza correctamente el SESSIONID con cada solicitud, lo que podría permitir a un usuario obtener el ID en nuevos ataques contra el sistema. IBM X-Force ID: 122293."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "A54ECEEB-089D-440D-81B2-83B618CEBB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "8CCFD9FE-1FD8-4A2C-B4F9-60F701FA1BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "84CBA4CA-B6A0-46A0-90A1-31ACB24DEA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "42617C4F-7BF4-41D2-AB91-B3A6E2188024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001551",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99237",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1205",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-14T16:59:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741."
      }, {
        "lang" : "es",
        "value" : "IBM Platform LSF 10.1 contiene una vulnerabilidad no especificada que podría permitir a un usuario local escalar sus privilegios y obtener acceso root. IBM X-Force ID: 123741."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_lsf:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6D8260-4F87-47E3-BE07-8F4EECAFC153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_lsf:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682FDB61-F37C-44BD-AFB9-D318AB422D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_lsf:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46CFC83-A3EC-4177-839D-65C8584D4E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_lsf:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF81DE67-76B1-412A-8674-CC4193ECF9FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_lsf:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621D6FF5-CBB8-444D-AA77-81FBEB7AA9E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg3T1025091",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97528",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg3T1025091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3447",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-14T18:59:00.923",
      "lastModified" : "2023-11-07T02:44:10.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was associated with multiple vulnerabilities without being assigned by a CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action."
      }, {
        "lang" : "es",
        "value" : "pmmasterd en Quest Privilege Manager anterior a la versión 6.0.0.061, cuando es configurado como un servidor de políticas, permite a los atacantes remotos escribir en archivos arbitrarios y, en consecuencia, ejecutar código arbitrario con privilegios root por medio de una acción ACT_NEWFILESENT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:privilege_manager:6.0.0-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31845E26-1E04-4057-B468-95A9B3A68649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:privilege_manager:6.0.0-50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CABB9CB-3024-4A67-9D19-CD64C4ECE2FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142095/Quest-Privilege-Manager-6.0.0-Arbitrary-File-Write.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97686",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41861/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142095/Quest-Privilege-Manager-6.0.0-Arbitrary-File-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41861/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse."
      }, {
        "lang" : "es",
        "value" : "Zurmo 3.1.1 Stable permite un ataque (XSS) con un elemento SCRIPT codificado en base64 dentro de un data: URL en el parámetro returnUrl a default/toggleCollapse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zurmo:zurmo_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.1",
            "matchCriteriaId" : "A3B36A0D-898A-4BAF-92D5-AF43BC4D7CB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97681",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/426/to-report-a-xss-security-vulnerability-in",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faizzaidi/Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/426/to-report-a-xss-security-vulnerability-in",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faizzaidi/Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file."
      }, {
        "lang" : "es",
        "value" : "Hipchat Server en versiones anteriores a 2.2.3 permite a usuarios autenticados remotos con privilegios de nivel Server Administrator ejecutar código arbitrario al importar un archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:hipchat_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "DBF33D28-F734-45D6-8023-6DDEA1F45718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540410/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97621",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-12-887732597.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-2903",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540410/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-12-887732597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-2903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program."
      }, {
        "lang" : "es",
        "value" : "Proxifier para Mac en versiones anteriores a 2.19.2, cuando se ejecuta por primera vez, permite a los usuarios locales obtener privilegios al sustituir el binario KLoader por un programa de Troyano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proxifier:proxifier:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "2.19.2",
            "matchCriteriaId" : "4A84AE8F-29E3-4A9C-8ED5-54BC6C08F53B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve20177690-local-root-privesc-in-proxifier-for-mac-219.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43225/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve20177690-local-root-privesc-in-proxifier-for-mac-219.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width and height parameters to otp_logon_ui_resources/qr, aka SAP Security Note 2389042."
      }, {
        "lang" : "es",
        "value" : "SAP AS JAVA SSO Authentication Library 2.0 hasta la versión 3.0 permite a los atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de valores grandes en los parámetros de anchura y altura a otp_logon_ui_resources/qr, también conocido como SAP Security Note 2389042."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sso_authentication_library:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DEF01D-5404-43D4-BC66-614CA5B1851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sso_authentication_library:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDC60E2-CCD0-4B14-9049-147F7B4CAA3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://erpscan.io/advisories/erpscan-17-001-sap-java-dos-bc-iam-sso-otp-package-use-qr-servlet/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-001-sap-java-dos-bc-iam-sso-otp-package-use-qr-servlet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2356504."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el método getUserUddiElements en el componente ES UDDI en SAP NetWeaver AS Java 7.4 permite a usuarios autenticados remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados, también conocido como SAP Security Note 2356504."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5308FCE-8B2C-4B4D-BEE7-3CF544570B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100168",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-003-sap-netweaver-7-4-getuseruddielements-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-003-sap-netweaver-7-4-getuseruddielements-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter)."
      }, {
        "lang" : "es",
        "value" : "trollepierre/tdm en versiones anteriores a 2017-04-13 es vulnerable a un XSS reflejado en tdm-master/webhook.php (parámetro de desafío)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tdm_project:tdm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-04-12",
            "matchCriteriaId" : "A897E17E-9C40-4184-A031-796C15089C07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trollepierre/tdm/commit/2e89019d6a491f0a5ac3db8732181f6eb1d219aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/trollepierre/tdm/issues/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/trollepierre/tdm/commit/2e89019d6a491f0a5ac3db8732181f6eb1d219aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/trollepierre/tdm/issues/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free."
      }, {
        "lang" : "es",
        "value" : "En wallpaper.c en feh en versiones anteriores a v2.18.3, si un cliente malintencionado pretende ser el gestor de ventanas E17, es posible desencadenar una escritura memoria dinámica fuera de límite mientras recibe un mensaje IPC. Un desbordamiento de número entero conduce a un desbordamiento del búfer y/o un doble libre."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feh_project:feh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.18.2",
            "matchCriteriaId" : "27B005AA-B8B8-4CD8-8F04-BF2348556CD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97689",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://feh.finalrewind.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://github.com/derf/feh/commit/f7a547b7ef8fc8ebdeaa4c28515c9d72e592fb6d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://feh.finalrewind.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://github.com/derf/feh/commit/f7a547b7ef8fc8ebdeaa4c28515c9d72e592fb6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de CSRF en FlatCore versión 1.4.6 permite a los atacantes remotos modificar las configuraciones de CMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore-cms:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C6CFF9-BA31-4972-8D36-CDF6CD4FBDC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97709",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de SQL Injection en flatCore versión 1.4.6 permite a un atacante leer y escribir en la base de datos de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore-cms:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C6CFF9-BA31-4972-8D36-CDF6CD4FBDC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-14T18:59:01.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de SQL Injection en flatCore versión 1.4.6 permite a un atacante leer la base de datos de contenido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore-cms:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C6CFF9-BA31-4972-8D36-CDF6CD4FBDC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-15T16:59:00.237",
      "lastModified" : "2023-11-07T02:50:17.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-15T16:59:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/_header.php and patched in core/inc/bigtree/admin.php on 2017-04-14."
      }, {
        "lang" : "es",
        "value" : "BigTree CMS hasta la versión 4.2.17 se basa en una verificación de subcadena para la protección CSRF, lo que permite a atacantes remotos eludir esta verificación colocando la requerida admin/developer/ URI dentro de una cadena de consulta en un encabezado HTTP Referer. Esto se encontró en core/admin/modules/developer/_header.php y fue parcheado en core/inc/bigtree/admin.php en 14-04-2017."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.17",
            "matchCriteriaId" : "FD019C44-4636-45A9-A2A0-C87CB9475776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/7761481ac40d83ac29fef42bc6b3c07c86694b56",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cdxy.me/?p=765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/7761481ac40d83ac29fef42bc6b3c07c86694b56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cdxy.me/?p=765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-15T16:59:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx."
      }, {
        "lang" : "es",
        "value" : "LibreOffice en versiones anteriores a 14-03-2017 tiene una escritura fuera de límites relacionada con la función HWPFile::TagsRead en hwpfilter/source/hwpfile.cxx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.6",
            "matchCriteriaId" : "DD6FB845-4F3E-48DD-B9BB-9986BD4F48FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.libreoffice.org/about-us/security/advisories/cve-2017-7882/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97684",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=860",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/65dcd1d8195069c8c8acb3a188b8e5616c51029c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.libreoffice.org/about-us/security/advisories/cve-2017-7882/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/65dcd1d8195069c8c8acb3a188b8e5616c51029c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-16T14:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php."
      }, {
        "lang" : "es",
        "value" : "MantisBT hasta la versión 2.3.0 permite reinicio de contraseña arbitrario y acceso de administrador no autenticado a través de un valor confirm_hash vacío para verify.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "37C4C701-6BDB-4711-9DB9-9A6194455DC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97707",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22690",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41890/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41890/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-17T00:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file."
      }, {
        "lang" : "es",
        "value" : "Artifex jbig2dec 0.13 tiene una sobre lectura de búfer basada en memoria dinámica dando lugar a denegación de servicio (caída de aplicación) o divulgación de información sensible desde la memoria de proceso, debido a un desbordamiento de entero en la función jbig2_decode_symbol_dict en jbig2_symbol_dict.c en libjbig2dec.a durante una operación en un archivo .jb2 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:jbig2dec:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C234C01-080C-41D8-BC58-E814C7F260F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697703",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-17T00:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c."
      }, {
        "lang" : "es",
        "value" : "El subsistema mm en el kernel de Linux hasta la versión 3.2 no aplica adecuadamente el mecanismo de protección CONFIG_STRICT_DEVMEM, lo que permite a usuarios locales leer o escribir en ubicaciones de la memoria del kernel en el primer megabyte (y eludir restricciones de acceso de asignación de slab) a través de una aplicación que abre el archivo /dev/mem, relacionado con arch/x86/mm/init.c y drivers/char/mem.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.91",
            "matchCriteriaId" : "67FEA8F8-276F-454D-AD5C-E76D8B3A95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.107",
            "matchCriteriaId" : "314F9C88-C8E1-46EF-8119-538C824ED137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.74",
            "matchCriteriaId" : "75647580-464B-4AEF-8DE2-F17D1748F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.46",
            "matchCriteriaId" : "C21D8DE7-A83C-4010-8DC6-FAAECB47D229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.50",
            "matchCriteriaId" : "853F13A0-776A-4078-B05B-7C1E20D4973D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.63",
            "matchCriteriaId" : "16332D79-B98D-4D8D-BEA8-C1815D93CA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.24",
            "matchCriteriaId" : "9035A20D-ECBA-4959-8F7F-EF1BFE41A7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.12",
            "matchCriteriaId" : "59CCD4BB-9F0D-405F-B1DD-ACEDF5BB2EDD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a4866aa812518ed1a37d8ea0c881dc946409de94",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97690",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b8f254aa17f720053054c4ecff3920973a83b9d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a4866aa812518ed1a37d8ea0c881dc946409de94",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a4866aa812518ed1a37d8ea0c881dc946409de94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b8f254aa17f720053054c4ecff3920973a83b9d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a4866aa812518ed1a37d8ea0c881dc946409de94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-17T14:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter."
      }, {
        "lang" : "es",
        "value" : "sourcebans-pp (SourceBans++) 1.5.4.7 tiene XSS en admin.comms.php a través del parámetro rebanid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcebans-pp_project:sourcebans-pp:1.5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A924A-8029-4F3F-9153-3170A154504E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97710",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/sbpp/sourcebans-pp/issues/253",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/sbpp/sourcebans-pp/issues/253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5647",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-17T16:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C."
      }, {
        "lang" : "es",
        "value" : "Un fallo en el manejo de las peticiones pipelinadas en Apache Tomcat 9.0.0.M1 a 9.0.0.M18, 8.5.0 a 8.5.12, 8.0.0.RC1 a 8.0.42, 7.0.0 a 7.0.76, Y 6.0.0 a 6.0.52, cuando se utilizó el archivo de envío, se pierde la solicitud de pipeline cuando se procesa el archivo de envío de la solicitud anterior completada. Esto podría resultar en respuestas que parecen ser enviadas para la solicitud incorrecta. Por ejemplo, un agente de usuario que envió solicitudes A, B y C pudo ver la respuesta correcta para la solicitud A, la respuesta para la solicitud C para la solicitud B y no para la solicitud C."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E3C039-A949-4F1B-892A-57147EECB249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F28C7801-41B9-4552-BA1E-577967BCBBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B21085-7259-4685-9D1F-FF98E6489E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635EE321-2A1F-4FF8-95BE-0C26591969D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C95ADA4-66F5-45C4-A677-ACE22367A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11951A10-39A2-4FF5-8C43-DF94730FB794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351E5BCF-A56B-4D91-BA3C-21A4B77D529A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC2BBB4-171E-4EFF-A575-A5B7FF031755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6B0504-27C1-4824-A928-A878CBBAB32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D903956B-14F5-4177-AF12-0A5F1846D3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F847DC-A2F5-456C-9038-16A0E85F4C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B93A3A-D487-4CA1-8257-26F8FE287B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8802B2-57E0-4AA6-BC8E-00DE60468569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461DF95-18DC-4BF5-A703-7F19DA88DC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0682A754-5E5E-48D4-836A-16841FD59445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8F2DFC-6A74-43AB-A813-957A1F7097A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277332E0-60D9-4318-A068-901F3B037FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2823789C-2CB6-4300-94DB-BDBE83ABA8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759588B8-DD36-474E-978B-75638962E743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5416C76-46ED-4CB1-A7F8-F24EA16DE7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61429EE-4331-430C-9830-58DCCBCBCB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B3593F-CEDF-423C-90F8-F88EED87DC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7862B2-E1FA-4E16-92CD-8918AB461D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E03BE3-60CC-4415-B993-D0BB00F87A30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE92E59A-FF0D-4D1A-8B12-CC41A7E1FD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E5E8C3-21AD-4230-B945-AB7DE66307B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2949EC36-0056-43F0-93EC-681EAC22B112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4945C8C1-C71B-448B-9075-07C6C92599CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4730B0-2E09-408B-AFD4-FE00F73700FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DE8A8A-7643-4292-BCC1-758AE0940207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CB6826E-FEBF-4DD7-BED5-1942DFA73BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B54FCD-CF7C-47E2-8513-40419E47AF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9AC2B8-D1AC-48E2-B88E-C7837D4F8A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87EFB6D-B626-469F-907C-40C771A55833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA4B34-1759-4FC5-82E9-B2223905B9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6330B97B-8FC5-4D7E-A960-5D94EDD0C378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0B2FA4-772E-4B23-8B3F-CC86515E4226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE27868-CBD2-4EB9-8732-DD4C0E10D6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1F7611-C424-4B5E-94B3-3B69EABF342E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C132EED-8FCA-4FDA-9FF6-C5FA44E8DA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46481E7E-D9D5-4C4D-AC83-DD7B6EAE19DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B30850-6168-45CA-9766-1DA4AF019178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4209CB-A607-4258-BCEA-287D8BD385FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AF1795-3D24-463F-B632-298E5CA4380D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF4F31C-F376-47A8-8986-BD4E6C606990"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8C62EF-1B67-456A-9C66-755439CF8556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819E245-D641-4F19-9139-6C940504F6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C381275-10C5-4939-BCE3-0D1F3B3CB2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7205475A-6D04-4042-B24E-1DA5A57029B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08022987-B36B-4F63-88A5-A8F59195DF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4B7557-EF35-451E-B55D-3296966695AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8980E61E-27BE-4858-82B3-C0E8128AF521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8756BF9B-3E24-4677-87AE-31CE776541F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE057E-2092-4C98-8D0C-75CF439D0A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F194580-EE6D-4E38-87F3-F0661262256B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9731BAA-4C6C-4259-B786-F577D8A90FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F74A421-D019-4248-84B8-C70D4D9A8A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05346F5A-FB52-4376-AAC7-9A5308216545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305688F2-50A6-41FB-8614-BC589DB9A789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24AA431-C436-4AA5-85DF-B9AAFF2548FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25966344-15D5-4101-9346-B06BFD2DFFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F4CBAC-27B1-4EFF-955A-A63B457D0578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD55B338-9DBE-4643-ABED-A08964D3AF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4F710E-06EA-48F4-AC6A-6F143950F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4936C2-0B2D-4C44-98C3-443090965F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48453405-2319-4327-9F4C-6F70B49452C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD9544-6424-41A6-AEC0-EC19B8A10E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4670E65-2E11-49A4-B661-57C2F60D411F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8FF71D-4710-4FBB-9925-A6A26C450F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31002A23-4788-4BC7-AE11-A3C2AA31716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7144EDDF-8265-4642-8EEB-ED52527E0A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF06B5C1-B9DD-4673-A101-56E1E593ACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D731065-626B-4425-8E49-F708DD457824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D850EA-E537-42C8-93B9-96E15CB26747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E037DA05-2BEF-4F64-B8BB-307247B6A05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAF1EB5-FB34-40FC-96ED-9D073890D8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D395D95B-1F4A-420E-A0F6-609360AF7B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD221BA-0AB6-4972-8AD9-5D37AC07762F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55B6565-96CB-4F6A-9A80-C3FB82F30546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3300AFE-49A4-4904-B9A0-5679F09FA01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5125CC-05F9-4678-90DB-A5C7CD24AE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B904C74-B92E-4EAE-AE6C-78E2B844C3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8A7333-B4C3-4876-AE01-62F2FD315504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92993E23-D805-407B-8B87-11CEEE8B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A11BD74-305C-41E2-95B1-5008EEF5FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595442D0-9DB7-475A-AE30-8535B70E122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0BA92A-0BD3-4CE4-9465-95E949104BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C947E549-2459-4AFB-84A7-36BDA30B5F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A0EA46-5AEA-4D0A-B89E-6560FA10EC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D55DF79-F9BE-4907-A4D8-96C4B11189ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14AB5787-82D7-4F78-BE93-4556AB7A7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9453E-BC9B-4F77-85FA-BA15AC55C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF0518-73F9-47DB-8946-A8334936BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AA8778-7833-4572-A71B-5FD89938CE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242E47CE-EF69-4F8F-AB40-5AF2811674CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A225D4F7-174E-47C3-8390-C6FA28DB5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1555C-E55A-4E14-B786-BFEE3F09220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAC42AE-B82A-4ABF-9519-B2D97D925707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8075E9A-DA7F-4A0B-8B4D-0CD951369111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335A5320-6086-4B45-9903-82F6F92A584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B33408-C2E2-4E7C-9334-6AB98F13468C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F036676-9EFB-4A92-828E-A38905D594E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9728EE8-6029-4DF3-942E-E4ACC09111A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DBB843-288C-4060-8777-6CDCF1860D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B87EB5-4902-4C2A-878A-45185F7D0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0596E6C-9ACE-4106-A2FF-BED7967C323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7158DC-966B-4508-8600-40E3E9D3D0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190FE0D-86C1-49EE-BDAE-5879C32BDC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20F45F-01A2-43DD-9731-DFF54E31719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7A728B-59DB-4EDE-8929-C91F4C410902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26889291-3280-4524-8F4A-9B22FF4600C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4CAEBD-0F38-4892-9D0B-9D7392E0BCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C4DA00-E47C-47BE-856C-7E0D4B0F9DAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E42327-8AEA-4B92-BA5F-AF94430B3BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4752862B-7D26-4285-B8A0-CF082C758353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4DB619-F6B0-4896-9AE2-7E7D92105577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF96F96-34DB-4EB3-BF59-11220673FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44883383-6360-4BE6-9B48-1308F85E5797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3E379-47D2-4C86-8C6D-8B3C25A0E1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82391BD-10FF-4E7F-91DC-35AA11325530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C22F12-C072-4A12-A4A9-CBF589A36FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E008F8-2F01-4DD8-853A-337B4B4163C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A776B25-6AF1-421B-8E47-2A7499F6B4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A332FDE-42AE-4F48-9553-5AE953CD6D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701424A2-BB06-44B5-B468-7164E4F95529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63FA521-9D20-49B9-A9A4-0DF891B4E4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9A5B7E-33A9-4651-9BE1-371A0064B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99252E8-A59C-48E1-B251-718D7FB3E399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D05293B-B9D8-42F1-9367-9D2E058EFAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B38892-9C00-4510-B7BA-F2A8F2CACCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C913AA6-2260-4249-BE1D-7139F45735D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7409B064-D43E-489E-AEC6-0A767FB21737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019268F-80C4-48FE-8164-E9DA0A3BAFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFBD214-FCFE-4F04-A903-66EFDA764B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425D86B3-6BB9-410D-8125-F7CF87290AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE3BB0D-1002-41E4-9BE8-875D97330057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D0E80B-EDDA-4876-912D-44BFE6211EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6622472B-8644-4D45-A54B-A215C3D64B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B338F95B-2924-435B-827F-E64420A93244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209D1349-7740-4DBE-80A5-E6343C62BAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E77C24-C265-403D-A193-B3739713F6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28616FA3-9A98-4AAE-9F94-3E77A14156EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335925DA-11C0-4222-B6B7-82602B361751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603A14BF-72BB-4A3D-8CBC-932DC45CEC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2E1C55-3C89-4F26-A981-1195BCC9BB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC242407-A447-4ABD-8E19-EB6DB1F35121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BB906B-812F-462C-9AEE-147C1418D865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B701E17-D231-44ED-A46E-C67749A725B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CAF2F7-D227-4F06-B0E6-533C5EDB105B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305B73CE-0224-4E73-8EB2-FC41A62FBA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DBF476-D7BB-4FC8-89FE-FF0CD135E9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC866C53-0C6B-4D0B-A168-D3985B1CF0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290B0787-49F1-41FB-9AFD-36646FB16CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B741F4F-E52B-43CD-A9CC-6AC46B2DE111"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3842",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3843",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038218",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2493",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2494",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "security@apache.org"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03730en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5796678c5a773c6f3ff57c178ac247d85ceca0dee9190ba48171451a%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5796678c5a773c6f3ff57c178ac247d85ceca0dee9190ba48171451a%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5648",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-17T16:59:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application."
      }, {
        "lang" : "es",
        "value" : "Cuando se investigaba el error 60718, se observó que algunas llamadas a los oyentes de aplicaciones en Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 a 8.5.11, 8.0.0.RC1 a 8.0.41 y 7.0. 0 a 7,0.75 no utilizó el objeto de fachada adecuado. Cuando se ejecutaba una aplicación no confiable bajo un SecurityManager, era posible, por tanto, que esa aplicación no fiable retuviese una referencia al objeto de solicitud o respuesta y, por lo tanto, acceder y / o modificar la información asociada con otra aplicación web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8C62EF-1B67-456A-9C66-755439CF8556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819E245-D641-4F19-9139-6C940504F6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C381275-10C5-4939-BCE3-0D1F3B3CB2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7205475A-6D04-4042-B24E-1DA5A57029B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08022987-B36B-4F63-88A5-A8F59195DF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4B7557-EF35-451E-B55D-3296966695AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8980E61E-27BE-4858-82B3-C0E8128AF521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8756BF9B-3E24-4677-87AE-31CE776541F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE057E-2092-4C98-8D0C-75CF439D0A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F194580-EE6D-4E38-87F3-F0661262256B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9731BAA-4C6C-4259-B786-F577D8A90FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F74A421-D019-4248-84B8-C70D4D9A8A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05346F5A-FB52-4376-AAC7-9A5308216545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305688F2-50A6-41FB-8614-BC589DB9A789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24AA431-C436-4AA5-85DF-B9AAFF2548FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25966344-15D5-4101-9346-B06BFD2DFFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F4CBAC-27B1-4EFF-955A-A63B457D0578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD55B338-9DBE-4643-ABED-A08964D3AF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4F710E-06EA-48F4-AC6A-6F143950F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4936C2-0B2D-4C44-98C3-443090965F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48453405-2319-4327-9F4C-6F70B49452C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD9544-6424-41A6-AEC0-EC19B8A10E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4670E65-2E11-49A4-B661-57C2F60D411F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8FF71D-4710-4FBB-9925-A6A26C450F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31002A23-4788-4BC7-AE11-A3C2AA31716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7144EDDF-8265-4642-8EEB-ED52527E0A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF06B5C1-B9DD-4673-A101-56E1E593ACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D731065-626B-4425-8E49-F708DD457824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D850EA-E537-42C8-93B9-96E15CB26747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E037DA05-2BEF-4F64-B8BB-307247B6A05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAF1EB5-FB34-40FC-96ED-9D073890D8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D395D95B-1F4A-420E-A0F6-609360AF7B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD221BA-0AB6-4972-8AD9-5D37AC07762F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55B6565-96CB-4F6A-9A80-C3FB82F30546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3300AFE-49A4-4904-B9A0-5679F09FA01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5125CC-05F9-4678-90DB-A5C7CD24AE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B904C74-B92E-4EAE-AE6C-78E2B844C3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8A7333-B4C3-4876-AE01-62F2FD315504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92993E23-D805-407B-8B87-11CEEE8B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A11BD74-305C-41E2-95B1-5008EEF5FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595442D0-9DB7-475A-AE30-8535B70E122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0BA92A-0BD3-4CE4-9465-95E949104BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C947E549-2459-4AFB-84A7-36BDA30B5F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A0EA46-5AEA-4D0A-B89E-6560FA10EC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D55DF79-F9BE-4907-A4D8-96C4B11189ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14AB5787-82D7-4F78-BE93-4556AB7A7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9453E-BC9B-4F77-85FA-BA15AC55C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF0518-73F9-47DB-8946-A8334936BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AA8778-7833-4572-A71B-5FD89938CE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242E47CE-EF69-4F8F-AB40-5AF2811674CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A225D4F7-174E-47C3-8390-C6FA28DB5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1555C-E55A-4E14-B786-BFEE3F09220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAC42AE-B82A-4ABF-9519-B2D97D925707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8075E9A-DA7F-4A0B-8B4D-0CD951369111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335A5320-6086-4B45-9903-82F6F92A584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B33408-C2E2-4E7C-9334-6AB98F13468C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F036676-9EFB-4A92-828E-A38905D594E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9728EE8-6029-4DF3-942E-E4ACC09111A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DBB843-288C-4060-8777-6CDCF1860D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B87EB5-4902-4C2A-878A-45185F7D0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0596E6C-9ACE-4106-A2FF-BED7967C323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7158DC-966B-4508-8600-40E3E9D3D0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190FE0D-86C1-49EE-BDAE-5879C32BDC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20F45F-01A2-43DD-9731-DFF54E31719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7A728B-59DB-4EDE-8929-C91F4C410902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26889291-3280-4524-8F4A-9B22FF4600C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4CAEBD-0F38-4892-9D0B-9D7392E0BCC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E42327-8AEA-4B92-BA5F-AF94430B3BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4752862B-7D26-4285-B8A0-CF082C758353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4DB619-F6B0-4896-9AE2-7E7D92105577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF96F96-34DB-4EB3-BF59-11220673FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44883383-6360-4BE6-9B48-1308F85E5797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3E379-47D2-4C86-8C6D-8B3C25A0E1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82391BD-10FF-4E7F-91DC-35AA11325530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C22F12-C072-4A12-A4A9-CBF589A36FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E008F8-2F01-4DD8-853A-337B4B4163C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A776B25-6AF1-421B-8E47-2A7499F6B4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A332FDE-42AE-4F48-9553-5AE953CD6D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701424A2-BB06-44B5-B468-7164E4F95529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63FA521-9D20-49B9-A9A4-0DF891B4E4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9A5B7E-33A9-4651-9BE1-371A0064B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99252E8-A59C-48E1-B251-718D7FB3E399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D05293B-B9D8-42F1-9367-9D2E058EFAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B38892-9C00-4510-B7BA-F2A8F2CACCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C913AA6-2260-4249-BE1D-7139F45735D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7409B064-D43E-489E-AEC6-0A767FB21737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019268F-80C4-48FE-8164-E9DA0A3BAFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFBD214-FCFE-4F04-A903-66EFDA764B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425D86B3-6BB9-410D-8125-F7CF87290AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE3BB0D-1002-41E4-9BE8-875D97330057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D0E80B-EDDA-4876-912D-44BFE6211EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6622472B-8644-4D45-A54B-A215C3D64B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B338F95B-2924-435B-827F-E64420A93244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209D1349-7740-4DBE-80A5-E6343C62BAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E77C24-C265-403D-A193-B3739713F6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28616FA3-9A98-4AAE-9F94-3E77A14156EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335925DA-11C0-4222-B6B7-82602B361751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603A14BF-72BB-4A3D-8CBC-932DC45CEC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2E1C55-3C89-4F26-A981-1195BCC9BB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC242407-A447-4ABD-8E19-EB6DB1F35121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BB906B-812F-462C-9AEE-147C1418D865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B701E17-D231-44ED-A46E-C67749A725B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CAF2F7-D227-4F06-B0E6-533C5EDB105B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305B73CE-0224-4E73-8EB2-FC41A62FBA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DBF476-D7BB-4FC8-89FE-FF0CD135E9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC866C53-0C6B-4D0B-A168-D3985B1CF0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290B0787-49F1-41FB-9AFD-36646FB16CA9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3842",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3843",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/07/20/8",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97530",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038220",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1809",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/07/20/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5650",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-17T16:59:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOW_UPDATE before allowing the application to write more data. These waiting streams each consumed a thread. A malicious client could therefore construct a series of HTTP/2 requests that would consume all available processing threads."
      }, {
        "lang" : "es",
        "value" : "En Apache Tomcat 9.0.0.M1 a 9.0.0.M18 y 8.5.0 a 8.5.12, el tratamiento de un marco HTTP/2 GOAWAY para una conexión que no cerró los flujos asociados con esa conexión que estaban esperando actualmente un WINDOW_UPDATE antes de permitir que la aplicación escriba más datos. Estos flujos de espera cada uno consumió un hilo. Un cliente malicioso podría construir una serie de peticiones HTTP/2 que consumirían todos los subprocesos de procesamiento disponibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97531",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038217",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/d24303fb095db072740d8154b0f0db3f2b8f67bc91a0562dbe89c738%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/d24303fb095db072740d8154b0f0db3f2b8f67bc91a0562dbe89c738%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5651",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-17T16:59:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in the same Processor being used for multiple requests which in turn could lead to unexpected errors and/or response mix-up."
      }, {
        "lang" : "es",
        "value" : "En Apache Tomcat 9.0.0.M1 a 9.0.0.M18 y 8.5.0 a 8.5.12, la refactorización de los conectores HTTP introdujo una regresión en el procesamiento de archivos de envío. Si el procesamiento de archivos enviados se completó rápidamente, es posible que el Procesador se agregue a la caché del procesador dos veces. Esto podría resultar en el mismo procesador que se utiliza para múltiples solicitudes que a su vez podría dar lugar a errores inesperados y / o mezcla de respuesta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97544",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038219",
        "source" : "security@apache.org"
      }, {
        "url" : "https://bz.apache.org/bugzilla/show_bug.cgi?id=60918",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6694538826b87522fb723d2dcedd537e14ebe0a381d92e5525a531d8%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bz.apache.org/bugzilla/show_bug.cgi?id=60918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6694538826b87522fb723d2dcedd537e14ebe0a381d92e5525a531d8%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5659",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-17T18:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding."
      }, {
        "lang" : "es",
        "value" : "Apache Traffic Server en versiones anteriores a 6.2.1 genera un volcado de memoria cuando hay una falta de coincidencia entre la longitud del contenido y la codificación en fragmentos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "CE6129F1-1EAD-4000-A691-A062409DEA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97949",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038275",
        "source" : "security@apache.org"
      }, {
        "url" : "https://issues.apache.org/jira/browse/TS-4819",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/jira/browse/TS-4819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1160",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-17T21:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892."
      }, {
        "lang" : "es",
        "value" : "IBM Financial Transaction Manager para ACH Services para Multi-Platform 3.0.0.x es vulnerable a las secuencias de comandos entre sitios. Esta vulnerabilidad permite a los usuarios integrar código JavaScript arbitrario en la interfaz de usuario Web, alterando así la funcionalidad prevista que potencialmente conduce a la divulgación de credenciales dentro de una sesión de confianza. IBM X-Force ID: 122892."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "26CDAAB7-BB25-46A4-8461-F1C38D06BEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "DB4BBD67-40E3-4C72-AC18-18367B6EBB9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "D9879971-7293-48E5-949F-41F6662E4FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "732296A1-EC45-4463-A9AA-785C1DBAFB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "07FED46E-BDF6-4276-9D0F-D2DC355FFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "663CF79F-5BB3-4DED-8FFA-B061C1759E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "C995D268-E461-4DFA-ABA7-CF92F5E21B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "F9A94033-3A68-434A-BE0B-4C39AFE36815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.8:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "A3FDF1FF-4170-4C49-9452-409BD60E27E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.9:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "DFCD696D-9AA6-4EB0-A063-0EB88911BA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.10:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "0C219381-6EB4-4185-ACFD-5AFC1EE9C904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.11:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "909E2A77-C98F-4A9E-A545-53FB6EEFC2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.12:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "36CD6331-8B39-4867-A1FA-D4F0C661B328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.13:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "12C336AD-2D70-4572-BE4B-26BA1E16ADA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.14:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "A226640E-53DD-4BF7-AC52-15FA2155871B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.15:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "F9AF75D2-8C8D-444C-8FB9-9463B441CC66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "24A1AB2E-11A8-4AC0-B564-D5CED110E4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "E674013B-5615-48DA-9970-66943707DFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "99848055-53C5-48DF-9356-2C446702917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "5DD5DB60-82C0-429C-9AA7-E29BD406CE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "27CF5D42-D567-4969-A314-39CA7008B4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "E36B582D-B6F4-474E-88DF-AF661A42C29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "8B4B266B-5D90-41D4-8392-E35D890BED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "D40478F6-AAC5-4E09-AEBE-B5899D847EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.8:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "54ADD20D-5702-46A2-9FF8-37617BEACEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.9:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "0E0738E7-87E8-4161-8BCB-F282DC3640E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.10:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "0C49A3B1-EB10-41FF-9EF5-FCAAC7BC130E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.11:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "C2FB6109-46B3-4E8F-AA8F-4878A9C39D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.12:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "98C99D64-6746-4FE9-9458-48A00216EA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.13:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "B6E607C5-C403-48C2-938E-DCEB0C4FFFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.14:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "4D3DA2C9-472A-4966-B577-E449DBBB6011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.15:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "1620CCEB-2C9C-4FE3-A259-8994F990EF7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "BFE21BBF-0E20-4AFD-906E-540D59085272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "218C7941-5410-4D6E-8993-B84B8F280B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "2DC81C13-65ED-461E-8456-E263A6A9932C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "D33ADBBE-B37D-4A93-AA34-6F54D4C0D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "9EC6EE69-6BDA-40C1-9C06-644280880CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "66D61600-0A87-45CC-8058-8200CF1647A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "7E558E06-8248-4268-AB97-5E22EF9468C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "4C3F3899-485A-4C41-BBFE-3B503D97E5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.8:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "CD961902-1422-411B-A7D2-7438B7E5F116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.9:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "61F256B7-A3F2-408B-BF91-578828790788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.10:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "3B711386-2A5A-4CA4-8A58-C06481C10EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.11:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "D0C77B57-ED51-4DE3-B343-A7D72FC15EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.12:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "AB1B52C7-ABFC-4FA3-95CE-CECBFA9EBBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.13:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "73CC6E49-C8C4-4C84-9E9C-98252B7E90F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.14:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "20978BBB-7F70-4C51-B05A-39DA559B0FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.15:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "2980FA84-65AC-4C6C-A6AF-2CB1826A1F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001574",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97666",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1161",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-17T21:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect 5.0.6.0 podría permitir a un atacante remoto ejecutar comandos arbitrarios en el sistema, causados por una validación incorrecta de las URL del Developer Portal. Al crear URLs malintencionadas, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema con los privilegios del usuario de datos www-data user. IBM X-Force ID: 122956."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000316",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97665",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5645",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-17T21:59:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "En Apache Log4j 2.x en versiones anteriores a 2.8.2, cuando se utiliza el servidor de socket TCP o el servidor de socket UDP para recibir sucesos de registro serializados de otra aplicación, puede enviarse una carga binaria especialmente diseñada que, cuando se deserializa, puede ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.8.2",
            "matchCriteriaId" : "A364B542-9D74-48AD-9616-8F16107B3F9C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC98B22-FFAA-4B59-8E63-EBAA4336AD13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081652A-D28B-494E-94EF-CA88117F23EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077732DB-F5F3-4E9C-9AC0-8142AB85B32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FF61DF-D634-4FB5-8DF1-01F631BE1A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99A2411-7F6A-457F-A7BF-EB13C630F902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041F9200-4C01-4187-AE34-240E8277B54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB48767-F095-444F-9E05-D9AC345AB803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6FA12B-504C-4DBF-A32E-0548557AA2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5553591-073B-45E3-999F-21B8BA2EEE22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A125E817-F974-4509-872C-B71933F42AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAA9FFE-8F55-4E81-B62F-A5500468AD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41B952C-B6FD-4244-BEEE-A1EB73503594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8972497F-6E24-45A9-9A18-EB0E842CB1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400509A8-D6F2-432C-A2F1-AD5B8778D0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132CE62A-FBFC-4001-81EC-35D81F73AF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8D08B8-CE61-45A3-BAC2-6D0E7D567B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83DA9A0-2EBC-4298-8412-1A7C4DC88C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC56004-4497-4CDD-AE76-5E3DFAE170F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274A0CF5-41E8-42E0-9931-F7372A65B9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DCCCD9-2170-4675-A447-FB679BC28A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD945A04-174C-46A2-935D-4F92631D1018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "9D5F8F04-7DFB-4B44-90CF-F1372DB8313C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_messaging_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "A53B6FD8-8367-4915-B4D0-23572F31C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_network_integrity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.2",
            "versionEndIncluding" : "7.3.6",
            "matchCriteriaId" : "ABD748C9-24F6-4739-9772-208B98616EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_online_mediation_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15817206-C2AD-47B7-B40F-85BB36DB4E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C9F582-6C82-4994-9724-22E9575E48B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BB6E9C-B630-4BDC-AEC1-7F031F612D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_service_broker:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373C4024-679F-4C37-B408-0FB0D7FD845F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "77120A3C-9A48-45FC-A620-5072AF325ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configuration_manager:12.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76F09D-AF43-426B-A04F-79E1CAC51D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configuration_manager:12.1.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B5E83F-D4FD-4ABB-9B8E-97C0E7571AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D03A8C9-35A5-4B75-9711-7A4A60457307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CF85A9-2C29-46E7-961E-8ADD0B5822CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E39918-B2D6-43F0-A607-8FD8BFF6F340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FEB8446-7EAC-4A8D-B6EE-3AAC2294C324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:12.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14480702-4398-4C28-82A6-E7329FB3B650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:13.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4E0F9A-D925-43FB-A1B7-452EEAE6BE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_mysql_database:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.2.2.0.0",
            "matchCriteriaId" : "C2239009-34CE-4E54-992B-835649C9D96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:12.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41650E24-8BFD-42F0-A3E2-545118602690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:13.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AFC807-4873-42B3-AEDE-8633A9BDDEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E3D0D69-6AFF-49DD-9BB4-5C0C6905D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532955A8-7292-4662-9324-C961587C8657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.3.0.0",
            "versionEndIncluding" : "7.3.3.0.2",
            "matchCriteriaId" : "6E3469D7-69E4-4242-B45A-C0CD9E691C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0.0",
            "versionEndIncluding" : "8.0.7.0.0",
            "matchCriteriaId" : "1D94C05C-7403-47D3-98D8-2DA8373FEE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_behavior_detection_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0.0",
            "versionEndIncluding" : "8.0.4.0.0",
            "matchCriteriaId" : "46E31100-478A-480C-9518-A6D8FBB94B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_behavior_detection_platform:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D8CC72-A67A-4CB0-948D-53488ACC7826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DECBF5C-6C87-424F-A116-DD534EC5946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3469C84E-50F3-4461-864C-E59174DDC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_lending_and_leasing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndIncluding" : "14.8.0",
            "matchCriteriaId" : "2959030B-A9B7-4423-A2E8-9352FC83C4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_lending_and_leasing:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317CA916-61F3-4E24-B42F-610A1C88A5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7791EF-A99D-4D52-AFC7-157372E88E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265B796B-2DDA-43A6-A3A9-1A79676F25C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0.0",
            "versionEndIncluding" : "8.0.7.0.0",
            "matchCriteriaId" : "D4279644-04B8-4E58-A38D-CD1E4FB1C39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_profitability_management:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43422E17-1D41-497E-A60B-31B1B4D6D563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_regulatory_reporting_with_agilereporter:8.0.9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C146BA-6F4F-4A6F-8E53-8A4F5B8E15D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A34DF8-72CC-4A8E-84F2-C2DF4A0B9FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE77B2-6368-470E-B9E6-21664D9A818A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3250073F-325A-4AFC-892F-F2005E3854A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDDC9C2-33D6-4123-9ABC-C9B809A6E88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991A279B-9D7C-4E39-8827-BC21C2C03B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D151B58F-5583-4F19-B225-80075B45441B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D665C9-408A-4039-A2D4-9EE565BC4656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:goldengate:12.3.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B765DA-560B-4367-B9B0-B7369BC4D3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECECC34-8112-4328-BA49-39F30BE7874A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_analytics:11.1.1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4855252-D6CA-461D-B196-30AFA7482868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_management_suite:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A79A489-F37C-420A-83B1-4482A8DFF9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1489DDA7-EDBE-404C-B48D-F0B52B741708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager_connector:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BD581B-1CC0-4236-836A-204BBCBBBF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:in-memory_performance-driven_planning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BBC649-7AA8-4B8E-9A3F-CC62948F0102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:in-memory_performance-driven_planning:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289702F6-1CC4-4D88-9745-EB0FA68A732B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndIncluding" : "17.3",
            "matchCriteriaId" : "9A74FD5F-4FEA-4A74-8B92-72DFDE6BA464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE4B2F0-1AAB-4A1F-AE86-A568D43891B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79B50C2-27C2-4A9C-ACEE-B70015283F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED4F724-C92F-4B4F-B631-81A4EA706DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900450EB-A71D-4A8E-B8C4-AFD36F9A36B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68017B52-6597-4E32-A38F-634B5635568C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19D11A6-BA1D-4121-8686-C177C450777F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6321F8-7A0A-4DB8-9889-3527023C652A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F8E604-8180-4728-AD2D-7FF034E3E65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02867DC7-E669-43C0-ACC4-E1CAA8B9994C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAFA631-C92B-4FF7-8E65-07C67789EBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9652104A-119D-4327-A937-8BED23C23861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A055CAA6-F789-4E63-A212-84DBAC4BF044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7506589-9B3B-49BA-B826-774BFDCC45B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042C243F-EDFE-4A04-AB0B-26E73CC34837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228DA523-4D6D-48C5-BDB0-DB1A60F23F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0.0",
            "versionEndIncluding" : "3.4.7.4297",
            "matchCriteriaId" : "48D04F3B-A385-4D8C-BD05-53006452346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0.0",
            "versionEndIncluding" : "4.0.4.5235",
            "matchCriteriaId" : "4424C7C9-508B-4824-91A7-AFA1D8C8C698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0.0",
            "versionEndIncluding" : "8.0.0.8131",
            "matchCriteriaId" : "BFFFF50D-D301-4752-B720-4340C69E2A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_install:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21E71BD-DD38-4634-BF9F-092D55000DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8B3B57-73D6-4402-987F-8AE723D52F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BF043E-BCB9-433D-BA09-7357853EE127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26FB80-F541-4B59-AC3C-633F49388B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB8080-B6DE-47F4-B978-F56AEF7294BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE52320-14DB-4BD5-A1E5-6BBE4829923A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0B5E4B-BA35-4949-B7EC-70C5F5E44FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165E98B6-9ADA-46A7-92C0-E3624D6D89C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9E61-8A0A-4348-A423-A9312D7D330F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01949739-F799-47FE-9118-617F84903F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FAA06A-F092-452A-B35C-BC133834DA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A9A0D5-95B9-47BB-8303-03D40DE46678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F071925B-7B0A-4250-9A25-1221711453FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CF9B92-309E-4356-B8C1-CB161A712479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation:12.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBCA717-6B8B-4CAF-8E9C-57335925CE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB5E2C7-9C68-4D3B-95AD-9CBF65DE1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFEC4A8-E000-4921-8563-5BC3B0DC6C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB7DE72-2E0D-427D-AF1E-2BC068D0756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C64A19B-BC3D-4C84-AE38-75EEAE3B5BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5825956B-B0DD-4083-8E50-B8148F9F438E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691A45D3-A594-4E95-9894-87B9FD6BE833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F36C640-592C-4081-8B97-2432BF7DD1F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C477753B-2716-4266-815B-5BABDDFE1FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F94F4C7-8E3E-4D0E-A5E7-E8D4E2D21D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCF09A6-8A57-40F4-9EB3-48F4806B4803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBE93A9-5628-4176-866E-88DE10B9778D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB71361-D75B-4937-A48E-C2C0064E09FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB68145-0577-472D-B310-A7BF065ADA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56961578-6FCB-489C-8431-22F9D263DFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EA52BF-E710-4309-9272-8F81D5751ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.2.0",
            "versionEndIncluding" : "16.2.11",
            "matchCriteriaId" : "06CF27F6-ADC1-480C-9D2E-2BD1E7330C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.12.0",
            "versionEndIncluding" : "17.12.7",
            "matchCriteriaId" : "E4AA3854-C9FD-4287-85A0-EE7907D1E1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rapid_planning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A0F1AF-F2E6-44E7-8E2D-190E103B72D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rapid_planning:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D53690D-3390-4A27-988A-709CD89DD05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25285DC-9E51-44F8-818A-86A79B3565DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517E0654-F1DE-43C4-90B5-FB90CA31734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_clearance_optimization_engine:14.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE91D517-D85D-4A8D-90DC-4561BBF8670E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_extract_transform_and_load:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202DE5CB-B3D4-4289-9AA2-24E9CE266EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_extract_transform_and_load:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7D07CB-15D2-424D-8E25-7AC59ACFFD05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE02A69E-F820-4261-8D7E-9B1021E5A9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_extract_transform_and_load:19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E306B67-E1BD-4A67-A77D-A7DC72D5B957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5F56EC-8415-4BA1-9D8A-C77F4BB1AF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BCB93-2DED-41FD-972E-FF5958691A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42064F46-3012-4FB1-89BA-F13C2E4CBB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73E2EFA-0F43-4D92-8C7D-9E66811B76D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07630491-0624-4C5C-A858-C5D3CDCD1B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9CA11F-F718-43E5-ADB9-6C348C75E37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBAAD32-1E9D-47F1-9F47-76FEA47EF54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A3C819-5151-4543-A5C6-998C9387C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378A6656-252B-4929-83EA-BC107FDFD357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363395FA-C296-4B2B-9D6F-BCB8DBE6FACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62A2144-5EF8-4319-B8C2-D7975F51E5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBAE649F-0389-4875-A995-E73E287AB342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5EC241-7D11-47F4-8B41-D362651A5E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:18.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCB6791-EBFA-4620-ABD4-D55CDCF3EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:soa_suite:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4C318C-5D1E-479B-9597-9FAD9E186111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:soa_suite:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65994DC4-C9C0-48B0-88AB-E2958B4EB9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:soa_suite:12.2.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4580A7AB-54A9-4784-9087-A3F107258593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tape_library_acsls:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D4467D-6968-4557-AF61-AFD42B2B48D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:timesten_in-memory_database:11.2.2.8.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EB3DE5-142C-43A5-9735-CB73C54D42E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_advanced_spatial_and_operational_analytics:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD0EC40-B96B-4E9C-9A81-4E65C4B9512E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_work_and_asset_management:1.9.1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1011D4-E5EE-4722-B644-D522EFC6337A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2019/12/19/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97702",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040200",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041294",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1417",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2423",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2633",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2635",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2636",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2637",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2638",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2808",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2809",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2810",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2811",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2888",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2889",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3244",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3399",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3400",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1545",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/LOG4J2-1863",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/0dcca05274d20ef2d72584edcf8c917bbb13dbbd7eb35cae909d02e9%40%3Cdev.logging.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/277b4b5c2b0e06a825ccec565fa65bd671f35a4d58e3e2ec5d0618e1%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/44491fb9cc19acc901f7cff34acb7376619f15638439416e3e14761c%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/479471e6debd608c837b9815b76eab24676657d4444fcfd5ef96d6e6%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6114ce566200d76e3cc45c521a62c2c5a4eac15738248f58a99f622c%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84cc4266238e057b95eb95dfd8b29d46a2592e7672c12c92f68b2917%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8ab32b4c9f1826f20add7c40be08909de9f58a89dc1de9c09953f5ac%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e8fb7d76a244ee997ba4b217d6171227f7c2521af8c7c5b16cba27bc%40%3Cdev.logging.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eea03d504b36e8f870e8321d908e1def1addda16adda04327fe7c125%40%3Cdev.logging.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0831e2e52a390758ce39a6193f82c11c295175adce6e6307de28c287%40%3Cissues.beam.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r18f1c010b554a3a2d761e8ffffd8674fd4747bcbcf16c643d708318c%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r23369fd603eb6d62d3b883a0a28d12052dcbd1d6d531137124cd7f83%40%3Cgithub.beam.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ce8d26154bea939536e6cf27ed02d3192bf5c5d04df885a80fe89b3%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ff63f210842a3c5e42f03a35d8f3a345134d073c80a04077341c211%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3784834e80df2f284577a5596340fb84346c91a2dea6a073e65e3397%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3a85514a518f3080ab1fc2652cfe122c2ccf67cfb32356acb1b08fe8%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3d666e4e8905157f3c046d31398b04f2bfd4519e31f266de108c6919%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b25538be50126194cc646836c718b1a4d8f71bd9c912af5b59134ad%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r61590890edcc64140e0c606954b29a063c3d08a2b41d447256d51a78%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r681b4432d0605f327b68b9f8a42662993e699d04614de4851c35ffd1%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r746fbc3fc13aee292ae6851f7a5080f592fa3a67b983c6887cdb1fc5%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bcdc710857725c311b856c0b82cee6207178af5dcde1bd43d289826%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r94b5aae09c4bcff5d06cf641be17b00bd83ba7e10cad737bf16a1b8f%40%3Cgithub.beam.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9d5c1b558a15d374bd5abd2d3ae3ca7e50e796a0efdcf91e9c5b4cdd%40%3Cgithub.beam.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra38785cfc0e7f17f8e24bebf775dd032c033fadcaea29e5bc9fffc60%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra9a682bc0a8dff1c5cefdef31c7c25f096d9121207cf2d74e2fc563d%40%3Ccommits.logging.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raedd12dc24412b3780432bf202a2618a21a727788543e5337a458ead%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb1b29aee737e1c37fe1d48528cb0febac4f5deed51f5412e6fdfe2bf%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbfa7a0742be4981a3f9356a23d0e1a5f2e1eabde32a1a3d8e41420f8%40%3Cgithub.beam.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc1eaed7f7d774d5d02f66e49baced31e04827a1293d61a70bd003ca7%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca24a281000fb681d7e26e5c031a21eb4b0593a7735f781b53dae4e2%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcbb79023a7c8494cb389cd3d95420fa9e0d531ece0b780b8c1f99422%40%3Ccommits.doris.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd5dbeee4808c0f2b9b51479b50de3cc6adb1072c332a200d9107f13e%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdbd579dc223f06af826d7de340218ee2f80d8b43fa7e4decb2a63f44%40%3Cgithub.beam.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdec0d8ac1f03e6905b0de2df1d5fcdb98b94556e4f6cccf7519fdb26%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re8c21ed9dd218c217d242ffa90778428e446b082b5e1c29f567e8374%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf2567488cfc9212b42e34c6393cfa1c14e30e4838b98dda84d71041f%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180726-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181107-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/12/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/LOG4J2-1863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/0dcca05274d20ef2d72584edcf8c917bbb13dbbd7eb35cae909d02e9%40%3Cdev.logging.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/277b4b5c2b0e06a825ccec565fa65bd671f35a4d58e3e2ec5d0618e1%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/44491fb9cc19acc901f7cff34acb7376619f15638439416e3e14761c%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/479471e6debd608c837b9815b76eab24676657d4444fcfd5ef96d6e6%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6114ce566200d76e3cc45c521a62c2c5a4eac15738248f58a99f622c%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84cc4266238e057b95eb95dfd8b29d46a2592e7672c12c92f68b2917%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8ab32b4c9f1826f20add7c40be08909de9f58a89dc1de9c09953f5ac%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e8fb7d76a244ee997ba4b217d6171227f7c2521af8c7c5b16cba27bc%40%3Cdev.logging.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eea03d504b36e8f870e8321d908e1def1addda16adda04327fe7c125%40%3Cdev.logging.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0831e2e52a390758ce39a6193f82c11c295175adce6e6307de28c287%40%3Cissues.beam.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r18f1c010b554a3a2d761e8ffffd8674fd4747bcbcf16c643d708318c%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r23369fd603eb6d62d3b883a0a28d12052dcbd1d6d531137124cd7f83%40%3Cgithub.beam.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ce8d26154bea939536e6cf27ed02d3192bf5c5d04df885a80fe89b3%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ff63f210842a3c5e42f03a35d8f3a345134d073c80a04077341c211%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3784834e80df2f284577a5596340fb84346c91a2dea6a073e65e3397%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3a85514a518f3080ab1fc2652cfe122c2ccf67cfb32356acb1b08fe8%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3d666e4e8905157f3c046d31398b04f2bfd4519e31f266de108c6919%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b25538be50126194cc646836c718b1a4d8f71bd9c912af5b59134ad%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r61590890edcc64140e0c606954b29a063c3d08a2b41d447256d51a78%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r681b4432d0605f327b68b9f8a42662993e699d04614de4851c35ffd1%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r746fbc3fc13aee292ae6851f7a5080f592fa3a67b983c6887cdb1fc5%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bcdc710857725c311b856c0b82cee6207178af5dcde1bd43d289826%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r94b5aae09c4bcff5d06cf641be17b00bd83ba7e10cad737bf16a1b8f%40%3Cgithub.beam.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9d5c1b558a15d374bd5abd2d3ae3ca7e50e796a0efdcf91e9c5b4cdd%40%3Cgithub.beam.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra38785cfc0e7f17f8e24bebf775dd032c033fadcaea29e5bc9fffc60%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra9a682bc0a8dff1c5cefdef31c7c25f096d9121207cf2d74e2fc563d%40%3Ccommits.logging.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raedd12dc24412b3780432bf202a2618a21a727788543e5337a458ead%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb1b29aee737e1c37fe1d48528cb0febac4f5deed51f5412e6fdfe2bf%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbfa7a0742be4981a3f9356a23d0e1a5f2e1eabde32a1a3d8e41420f8%40%3Cgithub.beam.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc1eaed7f7d774d5d02f66e49baced31e04827a1293d61a70bd003ca7%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca24a281000fb681d7e26e5c031a21eb4b0593a7735f781b53dae4e2%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcbb79023a7c8494cb389cd3d95420fa9e0d531ece0b780b8c1f99422%40%3Ccommits.doris.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd5dbeee4808c0f2b9b51479b50de3cc6adb1072c332a200d9107f13e%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdbd579dc223f06af826d7de340218ee2f80d8b43fa7e4decb2a63f44%40%3Cgithub.beam.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdec0d8ac1f03e6905b0de2df1d5fcdb98b94556e4f6cccf7519fdb26%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re8c21ed9dd218c217d242ffa90778428e446b082b5e1c29f567e8374%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf2567488cfc9212b42e34c6393cfa1c14e30e4838b98dda84d71041f%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180726-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181107-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-17T21:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a bounds check in such calculations is Apple LLVM version 8.1.0 (clang-802.0.41). The attack vector is a crafted far pointer within a message."
      }, {
        "lang" : "es",
        "value" : "Sandstorm Cap'n Proto en versiones anteriores a 0.5.3.1 permite bloqueos a distancia relacionados con una optimización del compilador. Un atacante remoto puede desencadernar un segfault en una aplicación libcapnp de 32 bits porque Cap'n Proto se basa en cálculos aritméticos de puntero que se desbordan. Un compilador de ejemplo con optimización que elide una comprobación de límites en tales cálculos es Apple LLVM versión 8.1.0 (clang-802.0.41). El vector de ataque es un puntero lejano elaborado dentro de una mensaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:capnproto:capnproto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.3",
            "matchCriteriaId" : "CD3046D3-7D44-4255-9649-AD15D53B6303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5661",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-18T14:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack."
      }, {
        "lang" : "es",
        "value" : "En Apache FOP en versiones anteriores a 2.2, los archivos que se basan en el sistema de archivos del servidor que utiliza FOP pueden ser revelados a usuarios arbitrarios que mandasen archivos SVG formados maliciosamente. Los tipos de archivo que se pueden mostrar dependen del contexto de usuario en el que la aplicación explotada se está ejecutando. Si el usuario es root, un comprometimiento completo del servidor - incluyendo los archivos sensibles y confidenciales - sería posible. XXE también puede ser utilizado para atacar la disponibilidad del servidor a través de una denegación del servicio, ya que las referencias dentro de un documento xml pueden desencadenar trivialmente un ataque de amplificación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:C",
            "baseScore" : 7.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:formatting_objects_processor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "CC727867-D12D-4F25-864B-68023C2845C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3864",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97947",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-14",
        "source" : "security@apache.org"
      }, {
        "url" : "https://xmlgraphics.apache.org/security.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xmlgraphics.apache.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5662",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-18T14:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack."
      }, {
        "lang" : "es",
        "value" : "En Apache Batik en versiones anteriores a 1.9, los archivos que se basan en el sistema de archivos del servidor que utiliza batik pueden ser revelados a usuarios arbitrarios los cuales mandan archivos SVG formados maliciosamente. Los tipos de archivo que se pueden mostrar dependen del contexto del usuario en el que la aplicación explotada se está ejecutando. Si el usuario es root, el comprometimiento completo del servidor - incluyendo los archivos sensibles y confidenciales - sería posible. XXE también puede ser utilizado para atacar la disponibilidad del servidor a través de una denegación del servicio, ya que las referencias dentro de un documento xml pueden desencadenar trivialmente un ataque de amplificación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:C",
            "baseScore" : 7.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:batik:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "083B1B72-6E28-42DB-9603-E19589DC7C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97948",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038334",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2546",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2547",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4215",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://xmlgraphics.apache.org/security.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xmlgraphics.apache.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T14:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c."
      }, {
        "lang" : "es",
        "value" : "El servidor NFSv2/NFSv3 en el subsistema nfsd en el Kernel de Linux hasta la versión 4.10.11 permite a atacantes remotos provocar una denegación de servicio (caída de sistema) a través de una respuesta RPC larga, relacionada con net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c y fs/nfsd/nfsxdr.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.107",
            "matchCriteriaId" : "314F9C88-C8E1-46EF-8119-538C824ED137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.74",
            "matchCriteriaId" : "75647580-464B-4AEF-8DE2-F17D1748F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "50A4478F-EC43-46DF-AE23-9298AE3F8892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.52",
            "matchCriteriaId" : "8104AAC1-9700-4372-8E11-37B09309A76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.40",
            "matchCriteriaId" : "70E79011-B658-40F2-B406-D3619DEBFACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.66",
            "matchCriteriaId" : "BF5669AA-0250-493C-9D38-F0B563103943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.26",
            "matchCriteriaId" : "92A58CFB-13B7-4E99-8A14-A0308E4F126A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.14",
            "matchCriteriaId" : "90895EF1-9DC7-4E47-A937-405661F7A44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97950",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e6838a29ecb484c97e4efef9429643b9851fba6e",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/e6838a29ecb484c97e4efef9429643b9851fba6e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-nfs&m=149218228327497&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-nfs&m=149247516212924&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e6838a29ecb484c97e4efef9429643b9851fba6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/e6838a29ecb484c97e4efef9429643b9851fba6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-nfs&m=149218228327497&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-nfs&m=149247516212924&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T15:59:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS."
      }, {
        "lang" : "es",
        "value" : "Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 en versiones anteriores a CP 1644 tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "B200642A-40B5-46AD-815B-C844CBFF5EC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97938",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116821-security-bulletin-trend-micro-interscan-messaging-security-virtual-appliance-imsva-9-1-multiple-v",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116821-security-bulletin-trend-micro-interscan-messaging-security-virtual-appliance-imsva-9-1-multiple-v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5653",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-18T16:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers."
      }, {
        "lang" : "es",
        "value" : "Clientes streaming de JAX-RS XML Security en Apache CXF en versiones anteriores a 3.1.11 y 3.0.13 no validan que la respuesta de servicio fue firmada o encriptada, lo que permite a atacantes suplantar servidores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "322BB668-BF52-4C54-BC52-88AF61CEAB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.11",
            "matchCriteriaId" : "E51BA25B-5797-4C07-9B8D-C5AA15B919F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-5653.txt.asc?version=1&modificationDate=1492515074710&api=v2",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97968",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038279",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-5653.txt.asc?version=1&modificationDate=1492515074710&api=v2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5656",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-18T16:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user."
      }, {
        "lang" : "es",
        "value" : "Apache CXF's STSClient en versiones anteriores a 3.1.11 y 3.0.13 utiliza un modo defectuoso de los tokens de caché que están asociados al los tokens de delegación, lo que significa que el atacante puede modificar el token el cual puede devolver el identificador correspondiente al token de cacheo a otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "B6CFCEBB-523C-4B09-BCAE-B599B4A76CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "BFF69A48-16BE-48B6-A19A-8904850911D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-5656.txt.asc?version=1&modificationDate=1492515113282&api=v2",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97971",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038282",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1694",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-5656.txt.asc?version=1&modificationDate=1492515113282&api=v2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T17:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS en el MantisBT (2.3.x en versiones anteriores a 2.3.2) Timeline incluye página, utilizada en My View (my_view_page.php) y páginas User Information (view_user_page.php), permite a atacantes remotos inyectar código arbitrario (si los ajustes CSP lo permiten) a través de PATH_INFO manipulado en una URL, debido al uso de $_SERVER['PHP_SELF'] no desinfectado para generar URLs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C79C70-F6BE-485D-952A-44E5E9F16D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5AE145-E1B4-40EF-A3B8-A13C114D3D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/a1c719313d61b07bbe8700005807b8195fdc32f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/pull/1094",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mantisbt.org/bugs/view.php?id=22742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/a1c719313d61b07bbe8700005807b8195fdc32f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/pull/1094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T19:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función read_next_pam_token en imagew-pnm.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos a provocar una denegación de servicio (sobre lectura de búfer basado en pila) a través de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsummers/imageworsener/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T19:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iw_read_gif_file en imagew-gif.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos consumir una cantidad de memoria disponible a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsummers/imageworsener/issues/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T19:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadSGIImage en sgi.c en ImageMagick 7.0.5-4 permite a atacantes remotos consumir una cantidad de memoria disponible a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97944",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/428",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T19:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadAVSImage en avs.c en ImageMagick 7.0.5-4 permite a atacantes remotos consumir una cantidad de memoria disponible a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97946",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/429",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T19:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadSVGImage en svg.c en ImageMagick 7.0.5-4 permite a atacantes remotos consumir una cantidad de memoria disponible a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97956",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/427",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-18T20:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file."
      }, {
        "lang" : "es",
        "value" : "La función get_relocs_64 en libr/bin/format/mach0/mach0.c en radare2 1.3.0 permite a atacantes remotos provocar una denegación de servicio (uso después de liberación y caída de aplicación) a través de un archivo Mach0 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA3B8-616C-42E1-A70A-D8ABE8DEF929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/d1e8ac62c6d978d4662f69116e30230d43033c92",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7301",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/d1e8ac62c6d978d4662f69116e30230d43033c92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T14:59:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode."
      }, {
        "lang" : "es",
        "value" : "Se encontró que Nessus 6.10.x en versiones anteriores a 6.10.5 era vulnerable a una condición local de denegación de servicio debido a permisos inseguros al ejecutarse en Agent Mode."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C14B7B-DE1F-4751-A681-B051CC55163E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8AFD34-B980-49A8-AD6B-F92DBD695102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A284F5-758D-4040-9920-9DD72122A4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C69E7-A926-40F1-B546-0436BAEF48B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB1B932-1EAF-4C8E-BC5C-46F5F144D9B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97951",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T14:59:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode."
      }, {
        "lang" : "es",
        "value" : "Se encontró que Nessus 6.10.x en versiones anteriores a 6.10.5 era vulnerable a un problema de escalada de privilegios locales debido a permisos inseguros al ejecutar en Agent Mode."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C14B7B-DE1F-4751-A681-B051CC55163E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8AFD34-B980-49A8-AD6B-F92DBD695102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A284F5-758D-4040-9920-9DD72122A4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C69E7-A926-40F1-B546-0436BAEF48B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB1B932-1EAF-4C8E-BC5C-46F5F144D9B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97952",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T14:59:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función mark_curve en Artifex Ghostscript 9.21 permite a atacantes remotos provocar una denegación de servicio (escritura fuera de límites y caída de aplicación) o posiblemente tener otro impacto no especificado a través de un documento PostScript manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC5891C-6572-4B5F-9249-DADE456F6510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8210a2864372723b49c526e2b102fdc00c9c4699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697762",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8210a2864372723b49c526e2b102fdc00c9c4699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T15:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file."
      }, {
        "lang" : "es",
        "value" : "La función cr_input_new_from_uri en cr-input.c en libcroco 0.6.11 y 0.6.12 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basado en memoria dinámica) a través de un archivo CSS manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libcroco:0.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9FAE55-99C3-495F-9A6E-E80D231174D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libcroco:0.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F691866-18B7-42B3-9AE5-E45CA9E800C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libcroco/commit/?id=898e3a8c8c0314d2e6b106809a8e3e93cf9d4394",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libcroco/commit/?id=898e3a8c8c0314d2e6b106809a8e3e93cf9d4394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T15:59:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an \"outside the range of representable values of type long\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports \"This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La función cr_tknzr_parse_rgb en cr-tknzr.c en libcroco 0.6.11 y 0.6.12 tiene un problema de comportamiento no definido de \"fuera de rango de valores representables de tipo largo\", que podría permitir a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente tener otro impacto no especificado a través de un archivo CSS manipulado. NOTA: según análisis de terceros \"Esto no es un problema de seguridad según mi visión. La conversión seguramente está truncando el valor doble en un valor largo, pero no hay impacto ya que el valor es uno de los componentes RGB\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libcroco:0.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9FAE55-99C3-495F-9A6E-E80D231174D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libcroco:0.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F691866-18B7-42B3-9AE5-E45CA9E800C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/24/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1034482",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libcroco/commit/?id=9ad72875e9f08e4c519ef63d44cdbd94aa9504f7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1034482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libcroco/commit/?id=9ad72875e9f08e4c519ef63d44cdbd94aa9504f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T15:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iwgif_read_image en imagew-gif.c en libimageworsener.a en ImageWorsener 1.3.0 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885E7F5-9F67-4322-B157-0C25804EBC71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/17/imageworsener-divide-by-zero-in-iwgif_record_pixel-imagew-gif-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/ca3356eb49fee03e2eaf6b6aff826988c1122d93",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/17/imageworsener-divide-by-zero-in-iwgif_record_pixel-imagew-gif-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/ca3356eb49fee03e2eaf6b6aff826988c1122d93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T15:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating \"There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior."
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA ** Las interfaces GNU Multiple Precision Arithmetic Library (GMP) para PHP hasta la versión 7.1.4 permiten a atacantes provocar una denegación de servicio (consumo de memoria y caída de aplicación) a través de operaciones en cadenas largas. NOTA: el proveedor se opone a esto, declarando: \"No hay ningún problema de seguridad aquí, porque GMP aborta de forma segura en caso de una condición de OOM. El único vector de ataque aquí es la denegación de servicio. Sin embargo, si permite asignaciones no limitadas controladas por el atacante, tiene un vector DoS independientemente del comportamiento OOM de GMP\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.4",
            "matchCriteriaId" : "C695FB97-098F-48B5-90E9-79D3A626263A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.php.net/bug.php?id=74308",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T16:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Zyxel WRE6505 tienen una contraseña TELNET por defecto de 1234 para las cuentas root y admin, lo que hace más fácil a atacantes remotos llevar a cabo ataques de secuestro de DNS reconfigurando el proceso dnshijacker incorporado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wre6505_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v1.00\\(aaqb.3\\)c0",
            "matchCriteriaId" : "79B57D94-98A1-4310-946F-15CCBD12EB9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oxy-gen.mobi/blog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oxy-gen.mobi/blog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T16:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Artifex jbig2dec 0.13, como se utiliza en Ghostscript, permite escrituras fuera de límites debido a un desbordamiento de entero en la función jbig2_build_huffman_table en jbig2_huffman.c durante operaciones en un archivo JBIG2 manipulado, dando lugar a una denegacón de servicio (caída de aplicación) o posiblemente ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:jbig2dec:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C234C01-080C-41D8-BC58-E814C7F260F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697693",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T17:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory."
      }, {
        "lang" : "es",
        "value" : "Artifex jbig2dec 0.13 permite escrituras y lecturas fuera de límites debido a un desbordamiento de entero en la función jbig2_image_compose en jbig2_image.c durante operaciones en un archivo .jb2 manipulado, dando lugar a una denegación de servicio (caída de aplicación) o divulgación de información sensible de la memoria de proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:jbig2dec:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C234C01-080C-41D8-BC58-E814C7F260F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697683",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T22:59:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Android de Samsung con software L(5.0/5.1), M(6.0) y N(7.x) permiten a atacantes obtener información sensible leyendo un archivo de registro legible mundialmente tras un reinicio inesperado. La ID de Samsung es SVE-2017-8290."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13E2E2D-41E2-4CF7-A019-6B462A614271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99CD57-C55D-4812-8F9C-5ACE7555C086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6EA64-6B65-4487-914F-9EF9CBB78211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4422C-42D0-47CA-A8B7-0DFF0652363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088A46CD-DA84-4DFA-ABCB-95E6D82DCE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F08AFFF-8310-4CCE-97A1-872CAA97E26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC76BE55-8569-4C11-BDF7-DB9AD2783313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-APR-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.samsungmobile.com/smrupdate.html#SMR-APR-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-19T23:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org."
      }, {
        "lang" : "es",
        "value" : "La característica cookie en la implementación del paquete de acción API en net/sched/act_api.c en el kernel de Linux 4.11.x hasta la versión 4.11-rc7 no maneja adecuadamente el array tb nlattr, lo que permite a usuarios locales provocar una denegación de servicio (acceso a memoria no inicializado y desbordamiento inferior de conteo de referencias y cuelgue o caída de sistema) o posiblemente tener otro impacto no especificado a través de comandos \"tc filter add\" en ciertos contextos. NOTA: esto no afecta a kernels estables, como 4.10.x, de kernel.org."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45227BEA-300E-4694-8ADE-D0FA7C560C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F27DB1B-125C-416A-8DF1-80EE75E4F972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "64F78CCF-F54B-4D1C-AFA6-DE4076C3A263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A659506C-868E-4E87-B0D8-E901BC2E9BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE2C8C3-F2AA-4A39-9D81-B0F8BB82B834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D67BFFD0-1A52-4F5D-98DB-D94B58FD8D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.11:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "7D996F38-22AC-4059-84FC-F7D69CE0CB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-netdev&m=149200742616349",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149200746116365",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149200746116366",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149251041420194",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149251041420195",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1682368",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.proxmox.com/show_bug.cgi?id=1351",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149200742616349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149200746116365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149200746116366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149251041420194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=149251041420195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1682368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.proxmox.com/show_bug.cgi?id=1351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6919",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2017-04-20T02:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests."
      }, {
        "lang" : "es",
        "value" : "Drupal 8 en versiones anteriores a 8.2.8 y 8.3 en versiones anteriores a 8.3.1 permite elusión de acceso crítica por usuarios autenticados si el módulo RESTful Web Services (resto) está habilitado y el sitio permite solicitudes PATCH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C20DAD7-13A7-40F7-B6E0-965DB4E14508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*",
            "matchCriteriaId" : "144694E6-3287-4F4D-A687-7F495133DBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*",
            "matchCriteriaId" : "581D686B-1061-4271-BEF4-17A429BD666A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E45AA6-5FAF-4C63-91F5-0765CE60191A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5D81CF-AE7B-4A9C-AD8F-9A19D2AC35DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*",
            "matchCriteriaId" : "A27535A5-7C4F-4548-A4B8-5FFBD58361D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*",
            "matchCriteriaId" : "17BC6508-3518-4BB5-B29F-4E6CB6DE9D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBB5620-5847-443F-8356-B66EE93A3779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E81260D-E0D2-4FD2-AAED-99945404EB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7D34E6-76E0-4BCB-A4C8-9401C7331EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "201E2EA9-B811-4BB2-867A-6F12DC472911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*",
            "matchCriteriaId" : "C957B189-10C2-4D42-B5B9-03F7DE287C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E21838-CDEC-41B2-AE40-C78DE8984B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*",
            "matchCriteriaId" : "639F0284-85D1-40B0-B337-77632E7A664B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4B611A-3628-41EA-878D-BF9D6C34AA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "856E46E5-1BF3-42F4-AFCB-81275B1EF265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "B351F769-598F-4E3E-99EA-94A5516995A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "220900E6-5859-4CA9-831E-3FF3C128F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55D51E-DE2D-469C-9F9C-F312A02EE921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*",
            "matchCriteriaId" : "259B5FE7-2808-4F61-B98C-73ECC7F9503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "BA263BE6-2088-4E18-914B-96CFAA0093E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "906AED87-8C5C-4214-B5AD-43E5573E357A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "E150FDA8-5271-465C-8DE0-F44E9FC81E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E036D4F-BD94-4F77-883C-165B3F0802C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7068F8-810D-4720-9E0E-06DB1DD366ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "443183F6-9EF5-41AE-8AD0-B304BBF1670A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "58C5EF43-E24F-4BDB-9496-16DE4EEF3E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B494B-736A-47A7-ACF3-81368C033086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F22B-7A46-4107-BE6F-6C4D7EAA46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "63530139-7EF2-4210-9870-B06175ECBC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED085089-51D6-4E5C-96E8-CC5C7C55CC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "36FC67CE-9C45-4842-81AF-EEAE557D70D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6AC83-B248-4491-A320-836C65E64D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434D4D80-44C0-4278-A09B-005A599F4658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43067661-B562-41BC-B272-8A79075291B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9EF375-AE7C-4900-A992-C635228889E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FA0C7F-000A-4CB4-86E3-DEC0C9DCA1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39B2B71-C1B8-4A16-88FE-D691CC3C9BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "535BC461-E9B1-4124-8125-1D9F91CF4F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "06F63C7F-CE02-428D-90CD-05B726C0026D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F18278D5-A30B-4624-AC64-CA39F92EB8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F72CAF-2BCA-454D-B8AC-951EC566A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C7CB5D-CE55-4628-957D-3D2C5EE2353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E1FBB4-D63F-4AA0-ADE3-70527F4D84A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D1BF3-879B-44C5-B3A0-2E91B27BFF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BB7835-2BFD-4182-B112-7E8A9FF2449C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CE2090-A5AF-47B8-BB7D-727FFF093413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B28527E-92CB-4171-8EE3-9187C3F44EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CB85396-4D94-4752-A134-A1644C707777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6802D01-6220-4EBE-B267-10DC14E6D186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD4EC47-7DD8-443B-8821-DFAE03FE2FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA084D8B-FEFC-41D5-A384-1DCB297CC1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5756FE-158A-4194-9E5E-EA918C4A3D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F344F3CE-C45E-4C3A-9F48-DAA0F2A49137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7BA91-93C2-4615-8A4D-11702FF5A155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "615DED7F-691F-4EF8-BE82-6E51B4971BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "467F335F-6FA1-413F-995F-29136658D969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABC38A1-0034-4CDE-B580-8026D6E0FE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA63C78-B234-4EBA-99A2-070213D1DA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997EF82A-B6C0-403A-BA58-E174FF2D981F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE56E4F-47D3-41F4-951E-3E4BBE74B6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8601673A-8FF8-4430-BB24-038443E1CED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD82372-D143-4AE7-8FE0-40FFD8F3E153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA00E55-32EB-41D7-B6FB-756738E4F9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE90095-47A7-425E-8D9E-20D974647813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.3.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "75FFBFC9-8D65-40E5-B6D5-53A945247518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1A0582-A538-4FB7-A358-52C79266B383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B740914-9270-4FF5-93F6-99A51FF9C012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:8.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1FDCC9-ABC7-442D-8D84-82BEFD4D380D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97941",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038371",
        "source" : "mlhess@drupal.org"
      }, {
        "url" : "https://www.drupal.org/SA-CORE-2017-002",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.drupal.org/SA-CORE-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T02:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access to, aka Local File Inclusion (LFI)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Unitrends Enterprise Backup en versiones anteriores a 9.1.1. La función downloadFile en api/includes/restore.php acepta ciegamente cualquier nombre de archivo pasado a /api/restore/download como válido. Esto permite a un atacante autenticado leer cualquier archivo en el sistema de archivo al que el servidor web tenga acceso, también conocido como Local File Inclusion (LFI)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unitrends:enterprise_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "210DFCC5-C202-4641-8E67-F3922E30ED19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWGAA0/000005558?r=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWGAA0/000005558?r=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T02:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php."
      }, {
        "lang" : "es",
        "value" : "Un usuario autenticado de Unitrends Enterprise Backup en versiones anteriores a 9.1.2 puede ejecutar comandos de SO arbitrarios enviando un nombre de archivo especialmente manipulado al punto final /api/restore/download-files, relacionado con la función downloadFiles en api/includes/restore.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unitrends:enterprise_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.1",
            "matchCriteriaId" : "AADD9D64-5952-4CF1-ABA4-CD8FA1C03574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWBAA0/000005557?r=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWBAA0/000005557?r=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T14:59:00.143",
      "lastModified" : "2023-11-07T02:49:19.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7692. Reason: This candidate is a reservation duplicate of CVE-2017-7692. Notes: All CVE users should reference CVE-2017-7692 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T14:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injection of arbitrary command parameters. The problem is in -f$envelopefrom within the sendmail command line. Hence, if the target server uses sendmail and SquirrelMail is configured to use it as a command-line program, it's possible to trick sendmail into using an attacker-provided configuration file that triggers the execution of an arbitrary command. For exploitation, the attacker must upload a sendmail.cf file as an email attachment, and inject the sendmail.cf filename with the -C option within the \"Options > Personal Informations > Email Address\" setting."
      }, {
        "lang" : "es",
        "value" : "SquirrelMail versión 1.4.22 (y otras versiones anteriores a 20170427_0200-SVN), permite la ejecución de código remota de autenticación posterior por medio de un archivo sendmail.cf que es manejado inapropiadamente en una llamada emergente. Es posible explotar esta vulnerabilidad para ejecutar comandos de shell arbitrarios en el servidor remoto. El problema está en el archivo Deliver_SendMail.class.php con la función initStream que usa escapeshellcmd() para sanear el comando sendmail antes de ejecutarlo. El uso de escapeshellcmd() no es correcto en este caso, ya que no escapa de espacios en blanco, lo que permite la inyección de parámetros de comando arbitrario. El problema está en -f$envelopefrom dentro de la línea de comando de sendmail. Por lo tanto, si el servidor de destino usa sendmail y SquirrelMail está configurado para usarlo como un programa de línea de comandos, es posible engañar a sendmail para que use un archivo de configuración proporcionado por un atacante que activa la ejecución de un comando arbitrario. Para su explotación, el atacante debe cargar un archivo sendmail.cf como un archivo adjunto de correo electrónico e inyectar el nombre de archivo sendmail.cf con la opción -C dentro de la configuración \"Options ) Personal Information ) Email Address\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C38706-0DAB-45C2-8D50-9EE10930A7D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/04/19/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/27/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://legalhackers.com/advisories/SquirrelMail-Exploit-Remote-Code-Exec-CVE-2017-7692-Vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41910/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/19/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://legalhackers.com/advisories/SquirrelMail-Exploit-Remote-Code-Exec-CVE-2017-7692-Vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41910/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T14:59:00.223",
      "lastModified" : "2025-11-03T22:15:44.180",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer basado en pila en DMitry (Deepmagic Information Gathering Tool) versión 1.3a (Unix) permite a atacantes provocar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un argumento largo. Un ejemplo de modelo de amenaza es la ejecución automatizada de DMitry con cadenas de nombres de host encontradas en archivos de registro locales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mor-pah.net:dmitry_deepmagic_information_gathering_tool:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF56C8B-9352-44CC-8A1B-5097072BA2E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2017040113",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jaygreig86/dmitry/pull/12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/142210/Dmitry-1.3a-Local-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41898/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017040113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jaygreig86/dmitry/pull/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://packetstormsecurity.com/files/142210/Dmitry-1.3a-Local-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41898/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T14:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función plist_from_bin en bplist.c en libimobiledevice/libplist en versiones anteriores a 2017-04-19 permiten a atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica y caída de aplicación) a través de un archivo plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "4201391B-6535-4AE4-87AD-4112C3F2B48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libimobiledevice/libplist/issues/103",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libimobiledevice/libplist/issues/103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5190",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-04-20T15:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile."
      }, {
        "lang" : "es",
        "value" : "NetIQ Access Manager 4.2 en versiones anteriores a SP3 HF1 y 4.3 en versiones anteriores a SP1 HF1 cuando está configurado como un SAML 2.0 Identity Server con Virtual Attributes, tiene un problema de concurrencia causando la fuga de información, relacionado con un perfil obsoleto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:sp3:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "91FB806C-6B3A-4FE3-924F-2F016B34314B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3",
            "matchCriteriaId" : "11A7ED20-D0BC-4FE9-B1AF-8FE9C53CA631"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97965",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038338",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018792",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-20T17:59:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions."
      }, {
        "lang" : "es",
        "value" : "En el archivo hw/display/cirrus_vga_rop.h en QEMU (también se conoce como Quick Emulator), permite a los usuarios privilegiados del sistema operativo invitado local causar una denegación de servicio (lectura fuera de límites y bloqueo del proceso QEMU) por medio de vectores relacionados con el copiado de datos VGA mediante las funciones cirrus_bitblt_rop_fwd_transp_ y cirrus_bitblt__."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/19/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97957",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0983",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0988",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1205",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1430",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1431",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1441",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1443441",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/19/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1443441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2784",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-04-20T18:59:01.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable libre de un apuntador de pila en el código de análisis de certificado x509 de ARM mbed TLS en versiones anteriores a 1.3.19, 2.x en versiones anteriores a 2.1.7 y 2.4.x en versiones anteriores a 2.4.2. Un certificado x509 especialmente manipulado, cuando se analiza por la biblioteca TLS mbed, puede provocar un inválido libre de un puntero de pila que conduce a una posible ejecución de código remoto. Para aprovechar esta vulnerabilidad, un atacante puede actuar como un cliente o un servidor en una red para entregar certificados maliciosos x509 a aplicaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.18",
            "matchCriteriaId" : "D05A56CA-13ED-4619-82DE-B8727B0DD300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B395D81-876F-43FC-8DB9-44377647A37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92622F1-82DA-4819-8275-06DC9DBE1BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5871FDE9-02D0-466C-BDB7-90A14C4F637E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B4875-3FC3-499F-A76B-2D04982F743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B67842-5AFA-459F-9CCF-772B9DC7139F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0500EE-52C0-4896-B3D8-5BE731D66039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015739E9-C0E3-4A62-BB9D-FA836BFD4351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842B0D15-6A3D-4CEE-AD02-49B0436E78E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525190A3-2194-4E4E-9D34-0048583B9C42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0274/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-18",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0274/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2806",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-04-20T18:59:01.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400"
      }, {
        "lang" : "es",
        "value" : "Existe una lectura arbitraria explotable en el análisis XLS de la funcionalidad Lexmark Perspective Document Filters. Un documento XLS manipulado puede conducir a una lectura arbitraria resultante en la revelación de la memoria. La vulnerabilidad se confirmó en las versiones 11.3.0.2228 y 11.3.0.2400"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:perceptive_document_filters:11.3.0.2228:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0C63D2-2AAE-454A-B7DF-E65FABD1E42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:perceptive_document_filters:11.3.0.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D405F9-B492-4CB2-863E-B02E79887539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0302/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0302/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5183",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-04-20T18:59:01.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document."
      }, {
        "lang" : "es",
        "value" : "NetIQ Access Manager 4.2.2 y 4.3.x en versiones anteriores a 4.3.1+, cuando está configurado como Identity Server, tiene XSS en el campo AssertionConsumerServiceURL de un AuthnRequest firmado en un documento samlp: AuthnRequest."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47016E1D-FF4D-4AC5-9F64-F77D63D15D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51430A7A-F79D-445D-ABF8-A8B4ADE98FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44700070-30F6-4162-8F4D-AF7B5ACB7BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018509",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5156",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-20T20:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user."
      }, {
        "lang" : "es",
        "value" : "Un problema CSRF fue descubierto en Schneider Electric Wonderware InTouch Access Anywhere, versión 11.5.2 y en versiones anteriores. La solicitud del cliente puede falsificarse desde un sitio diferente. Esto permitirá que un sitio externo tenga acceso a los sistemas RDP internos en nombre del usuario actualmente conectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:wonderware_intouch_access_anywhere:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.2",
            "matchCriteriaId" : "5AAD0ADB-82DF-42F2-BBE1-07C74BCEF971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97256",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5158",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-20T20:59:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de exposición de la información en Schneider Electric Wonderware InTouch Access Anywhere, versión 11.5.2 y en versiones anteriores. Las credenciales pueden estar expuestas a sistemas externos a través de parámetros específicos de URL, se pueden especificar direcciones de destino arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:wonderware_intouch_access_anywhere:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.2",
            "matchCriteriaId" : "5AAD0ADB-82DF-42F2-BBE1-07C74BCEF971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97256",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5160",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-20T20:59:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema Inadequate Encryption Strength en Schneider Electric Wonderware InTouch Access Anywhere, versión 11.5.2 y en versiones anteriores. El software se conectará a través de Transport Layer Security sin verificar correctamente el certificado SSL de los pares."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:wonderware_intouch_access_anywhere:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.2",
            "matchCriteriaId" : "5AAD0ADB-82DF-42F2-BBE1-07C74BCEF971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97256",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1122",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-20T21:59:01.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 8.2, 9.0 y 10.0 contiene una vulnerabilidad que podría permitir a un atacante local con acceso a CLI inyectar comandos arbitrarios que se ejecutarían como root. IBM X-Force ID: 121174."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57130C1B-80A6-4A33-8AD3-5C6F4669F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C62744-22BD-4038-8257-822ADDAC370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EA5CC2-F4BE-4F22-AC85-1956EFA88B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37342DD2-055B-429C-9231-2D9FE70B5AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997868",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97995",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038347",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3793",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 through 9.6) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all interfaces, resulting in a denial of service (DoS) condition. The vulnerability is due to improper limitation of the global out-of-order TCP queue for specific block sizes. An attacker could exploit this vulnerability by sending a large number of unique permitted TCP connections with out-of-order segments. An exploit could allow the attacker to exhaust available blocks in the global out-of-order TCP queue, causing the dropping of any further incoming traffic on all interfaces and resulting in a DoS condition. Cisco Bug IDs: CSCvb46321."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el normalizador TCP del Cisco Adaptive Security Appliance (ASA) Software (8.0 en versiones hasta 8.7 y 9.0 en versiones hasta 9.6) y del Cisco Firepower Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado provocar que Cisco ASA y FTD dejen caer cualquier tráfico entrante adicional en todas las interfaces, dando como resultado una condición de denegación de servicio (DoS). La vulnerabilidad se debe a una limitación impropia de la cola TCP global fuera de orden para tamaños de bloque específicos. Un atacante podría explotar esta vulnerabilidad enviando un gran número de conexiones TCP únicas permitidas con segmentos fuera de orden. Un exploit podría permitir al atacante agotar los bloques disponibles en la cola TCP global fuera de orden, provocando la caída de cualquier tráfico entrante adicional en todas las interfaces y resultando en una condición DoS. Cisco Bug IDs: CSCvb46321."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730F28DB-DFAC-4D9D-AB4A-42C158F3D88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656D49C2-4F2E-4369-8933-FF74A3CD51EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D2A272-5B6A-426C-B95C-03F1CF92A556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AD5614-6AA5-4607-9B4D-7F40E174B51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68E73D6-A207-4276-A972-52B859CD958A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743B9EEB-8A00-4EDD-A10D-4FC0A8C2E6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA384B7-938A-48F7-8154-442E46FB1400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250AEA5-7613-4F64-B90D-D600745F2403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44B4A87-D033-4C3F-B1F8-BC40E2CCDC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C93F75-E046-4E09-A269-49A55EFF2978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CFD97E-113C-4F56-9BF1-D57C81BCA589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880058C4-556B-42FF-98AF-4428CB8CB94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D6D5C-1DA2-407A-BE75-2189E04BC9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D61007E-55D6-4E10-A9CF-B4B5227AC909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A862D259-40EE-45AE-B896-7F68AC06272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D33210F-0FA8-4089-AA05-C7AA80C12460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2D6C8E-2E0F-4328-8BE5-8E6845B75513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313EF49F-4F50-4205-93D8-38B0B18EB7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E406214-2776-42C2-B777-92E6420FBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837D743B-CCCB-4D30-9B2E-24CBC4F9F9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B44024A-4500-4ACD-9C92-8EA996188B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C2A72E-C42C-456B-B712-D04860CE1A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC7F030-18CA-4F56-8F97-69E038319E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911DC415-971F-46C1-B804-F8E87A0FD60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756BFBA7-D2D1-45D7-B225-A12B4FB82949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.0.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200F740F-9D7D-4A64-AE1F-276CF58241C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B9D86-8EEB-4A5E-824C-4D7EBD64877A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD242CAB-9DB6-42F3-B649-A963C386C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9251926E-96A3-4160-BADB-2DF5CB662B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2B9487-9749-4271-8112-C4FA21611312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E478D1ED-C5AF-46C2-B49B-515A62B653B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAB258C-5D97-489B-8B4E-0511B00BE506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CF28B6-627D-4E25-BB61-32956239963D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E91C88B-7DF8-4ED5-B4BD-8C252C6EF0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519C99B8-E222-4FA3-8C8F-0DA6019CD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E26DFA-B023-44B9-80D1-A5E391B571AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F07BA4-A069-4CD5-B0D9-156320CBB5AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CDDEAF-C62D-4364-ACA8-14F14BBFB150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D140D4-1AE3-4D46-9B13-3EC78EBC4FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70158003-F6CA-4A5C-893C-BF885A388D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2C8AFA-A4B6-44A2-B00C-1950997493C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6297451E-196E-4C6D-9186-451BB42CAE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465313C5-BFB9-458A-8150-8F7BA1F8C386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF399187-270F-4560-9C09-DF18132FA427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7A928A-2CBA-43BC-B312-975EE9E24830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF721BA-25FF-485E-9102-5741AC9BC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F34D78E-68C9-4372-85F2-E74A1C8C06F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05748A45-8423-42F4-8F95-7BA83548C4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C15D1F6-997D-47FD-A654-AEF3332E6105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3E5F50-CBD1-4516-BC97-3AF59DB39A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B54134-5AC7-4D7E-A7F1-D4C2057FF146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFE499E-09BB-4C86-AC74-7568B2D3CA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5BF7-18FB-4066-947E-7352B9951AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42DD43A-B6BD-4C2B-BA57-928501C62388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE65B75-4987-4E77-8814-F7BC9875924A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C890603E-6634-46E2-AFA9-ADE8ED1B9E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBAB79E-83BF-4AD1-875B-D015A18ECB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA41C5E-F854-4729-9498-C54FA5C00664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B08E743-488A-4F99-ABA6-98AD534B603B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978A0B9D-1B1D-4E22-893C-52DE75247BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD17927A-7AFA-4177-A34E-5FEB7A9400AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4B884F-EDE6-4055-83D8-609D2D1E518F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8570FBED-D38F-49ED-8C6A-E241BF7E1274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2889989-8D9C-4E06-8477-8BCF6DC7D84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E9724F-AD95-4572-BD8F-27B71F8EBC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA7A0DD-9826-4AD8-B7C8-AD750BD87E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990B883-0B5A-44F0-B4DC-8031ED0F2026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA74460-D26D-4C0A-B697-DF9003096065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BEB7A8-B2DB-46EB-9265-AB88476B1002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF80D39-35D2-447C-A809-E4C819FEEF25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F417BC-5835-4F29-8DB6-03A62B7B2364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90599A3-F885-414E-94F9-B4AECEB34D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0185F882-E031-4B16-8DB3-62F76FBB78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092FB46B-A4A4-40E5-B474-4FC36ADC427C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB27EFB-BF82-493D-ADF2-7395B4E2A55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD84D98-1B98-454C-AF63-DE5E76E17C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D975A3B-0B3C-44E6-BE9C-AA73CF97AF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAF32AF-EF06-4663-BFBE-1334D491A212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB85D8-B247-4921-AE49-C2A1C2FDEB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BA59C8-F3D0-4B94-824B-F3CDAB465D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF3C75D-751C-444F-A4AF-303409B22B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CD6FE3-1B32-461E-9215-0F016798B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22552CF4-01F8-46A8-ADD4-7BABFA574330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1C5485-EAF4-4F4D-AFA1-E105F433665E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989F9AC4-C2D1-49A0-95C3-79A4EB827E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE2E079-D7AC-4FE9-8938-A75C12AF5CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B442C852-2465-4EA8-A977-1F10A4CE23AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB6ED4-3095-46C1-9CB6-2975A7B05303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE68CD8E-B9CF-4519-8B0E-4C4488B34887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D762C9A7-005C-44FD-9BB2-7A1DD4EBE90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0B1212-87F3-46E5-B14A-C0C6BBAAAC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4826-06B0-4DDC-B082-A536418FD292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E343DE08-58FA-4C39-99F9-8CB5F57D0CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76363698-DB62-4D92-8EE4-069891A9F92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6159BEE3-D097-4E07-9962-06DB740E2AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD606591-F69A-47AD-9256-20B98CA16135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EF3895-F372-45D3-9C7D-15F5C4712D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC5960D-B917-4ABA-850F-A710676ACB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B746A138-6650-49A3-87C8-3728FE5CF215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50C2A13-5A8B-4FA5-ABB8-1157E560503B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F9D55-9276-4CF1-BC63-7CEEF8F25C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F383D276-D5EC-4335-AC09-9D30F6443AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C2A7FF-6AC3-42B5-954A-9AA5950C523A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7F36A8-C291-423D-AF28-56AAD8D0F712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2009F4-F832-49D6-8346-54A7328BD93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9221DD4-498A-4867-B647-47E42299CE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B839A425-E08C-41B1-9270-E177E40B1E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4DDF53-0995-4971-A980-30FD15A40C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3BD921-A58A-47EB-B90D-21C3A5D02D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800FE449-350D-4C4C-A8C2-D4C5A3B59F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49BF8F7-5ACE-4D90-8F17-1AA9D3A2FD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE6D050-F186-492C-9813-895433B2612A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6157AA5C-8297-4A32-B0A8-1E7E801E9CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A13091-02C6-4D98-90C9-ED4C43BDAFAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C3E0E1-C3F3-4D53-8116-7D1AF3CD53CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F3DB48-E1EE-44E9-85DE-9FD7D5C59B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E064BD-CBC0-4556-9BCF-87D808809237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D5DC14-187B-4808-8377-5FF44A11AA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64079FC4-53D8-4DBF-A2D5-2CED256F4939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF969BE-46BB-4AD7-85AB-8384426E9551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EEA7A5-67FD-4CA4-8FF8-4B17A9C47B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E618B3-DD03-4ECD-AB9B-97F1EDF95E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0DFE19-1C68-40E6-B8CD-9CC03F8B4281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20424324-881A-496B-BC55-62AA75994249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67012F3-5153-400E-BD6F-EB0949875F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40E9AB5-26E0-4BA2-9AFA-496BAA0EAC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BA4B2D-187A-47EC-8BE1-7EA178549476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF52FB9-4EA9-41A7-AD29-E963C09FC98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C8C6E9-D5C3-42DC-B431-9097B2FCCB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B5CF41-7F01-4AE9-B54B-8DB6909504B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BDD9D1-0DE3-4FA7-BDC1-2A724162CEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C80EAFF-E577-414A-9DDE-D27A41CB3DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CC07CC-0C79-48ED-BEB6-4B576A0DBD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FA6817-C5B7-410F-9CF7-801CC958C12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1576FC7F-B7DD-41DD-A95E-23B1F86E4B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3768E4B0-E457-47AB-99B0-7C1A0E0CBE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D142088-0265-4987-8F5C-029F3DD06A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EDEE39-865D-4DA3-B1C9-033F2FF1A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F0A66-A71E-4B64-A66F-EA7B9C0D9151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33B43A-1836-4402-AEAC-59CA8F44E3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B7B477-15FD-4198-B0D9-0F9A8A2E4C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6887033-E697-47D0-B6E0-61B64E9D3AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C1AB6D-F2C5-4726-8792-581E8DCB9EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1216C-903C-469D-8615-ECFB3AA29BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0707169B-34B9-4666-8EBD-F5967059D6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D03293-9765-46DB-B53D-1B23D5C14373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0286DAF0-FACA-4F94-82E9-EAED8750DB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E77826-1208-4582-A94C-242B601BD456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD617A59-2A4C-4264-BB5D-0126EF292079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B9FC85-13B8-488C-80C4-C29C0E244601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7582A-835E-4A84-B197-EB40EE7985C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE55AB-8170-4E3A-AF89-A8F79599901A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10653A-0E7C-4014-825D-76B5B438D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77642A96-EF7F-4138-97BC-B3793EE0FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE9F46B-DD74-4295-BB6A-9239E29F4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE2EE9B-D44E-430D-8469-1DF0ADC322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6B45EB-97BB-4683-9092-95E560B2585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3AA854-0F4D-4B08-A249-B3C19C056D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E55E46-01F5-4C0D-8A69-1BBC590188BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BCCA3-958D-41C4-98CE-1A333F9667A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245E680B-7A2D-4F98-9D59-6ECF70FE882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C78E5C3-4D0D-4DFD-AA91-93DD58B195F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F831FD5A-1D54-4DFA-9AED-C3F2CBCE4069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EFD6D-A657-4102-982D-7634AC25E75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59593836-990A-4CF1-AFBC-516C4A318641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479676D-6B3F-4154-B0D4-D2C81E6C941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F062A64B-7184-49C6-BDF5-8A413B0A85F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B574E7C0-95AA-4A24-9470-FA282192D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF8738F-8D49-47D3-B60D-3145218C9C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D146E0E-59DD-48BD-9A74-4E4823590E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863F213-2EDF-4874-AFB3-E70B4B356BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2780DD07-79B8-4096-A435-DB8FD6301E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2D8411-7317-4865-ADF9-279648210E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA7A9-F4DB-4BC1-9233-F72B66191F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D8C893-BA42-4EE5-A790-13614A6B436F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5D09C9-4559-4FED-B4B7-EAE5935EBCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074A5E58-A066-470B-840A-1148A8979DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF2C556-48E6-4572-8FD9-4DC8BAD90B90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97923",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038329",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-norm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-norm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3808",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager (Cisco Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate limiting protection. An attacker could exploit this vulnerability by sending the affected device a high rate of SIP messages. An exploit could allow the attacker to cause the device to reload unexpectedly. The device and services will restart automatically. This vulnerability affects Cisco Unified Communications Manager (CallManager) releases prior to the first fixed release; the following list indicates the first minor release that includes the fix for this vulnerability: 10.5.2.14900-16 11.0.1.23900-5 11.5.1.12900-2. Cisco Bug IDs: CSCuz72455."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de limitación del Session Initiation Protocol (SIP) UDP de Cisco Unified Communications Manager (Cisco Unified CM) podría permitir a un atacante remoto no autenticado provocar una denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad se debe a una protección insuficiente de la tasa de limitación. Un atacante podría explotar esta vulnerabilidad enviando al dispositivo afectado una alta tasa de mensajes SIP. Un exploit podría permitir al atacante hacer que el dispositivo se recargue inesperadamente. El dispositivo y los servicios se reiniciarán automáticamente. Esta vulnerabilidad afecta a las versiones de Cisco Unified Communications Manager (CallManager) This vulnerability affects Cisco Unified Communications Manager (CallManager) anteriores a la primera versión fija; la siguiente lista indica la primera versión secundaria que incluye la corrección para esta vulnerabilidad: 10.5.2.14900-16 11.0.1.23900-5 11.5.1.12900-2. Cisco Bug IDs: CSCuz72455."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.0\\(1.10000.12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EF306-D944-4D2D-9378-C3E993E58592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7313BFB4-34EF-4444-A6BC-A7BDB600C149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(0.98000.88\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E944B20-B158-420D-9176-30F5B6C03D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(1.98991.13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC63143-A977-4C92-8B03-A7AD152494A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(1.99995.9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C62F7D1-CE41-4AA3-A4C9-6A77C4D45F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.12901.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9524FB85-EA15-4837-9966-9DDBB527C4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.13900.9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75B536F-094C-4997-B545-6AC2F49C2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(3.10000.9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52EECB0-65B5-46DF-800F-63AD2A784A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6074A7B6-6640-4E74-9946-CC8D212F7740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(0.98000.225\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF56F1D-43C0-4921-A217-3F2A8E5758D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(0.98000.480\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "250B8894-9EE0-4F18-81BF-FEB317CE05DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(0.98000.486\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C21111-3D26-4AC1-BBDA-4E004DEE5C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(0.99838.4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D8D2E4-8536-4708-94A9-DE0031EAF62E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1ECEEC7-52A0-41EE-B1CB-C4B09D6E6940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.11007.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D666F53-ABC2-4DC1-BC03-83B5CDC0DE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.12000.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A590BFE0-536A-4E8A-AB30-F85A9FB3397D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711B5CE0-3BA8-4DA6-A18C-D561ECC17A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97922",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038318",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3860",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCur29331."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el modulo EnergyWise de Cisco IOS (12.2 y 15.0 en versiones hasta 15.6) y Cisco IOS XE (3.2 en versiones hasta 3.18) podría permitir a un atacante remoto no autenticado provocar una condición del desbordamiento de búfer o una recarga de un dispositivo afectado, dando lugar a una condición de denegación de servicio (DoS). Estas vulnerabilidades se deben a un análisis incorrecto de los paquetes manipulados de EnergyWise destinados a un dispositivo afectado. Un atacante podría explotar estas vulnerabilidades enviando paquetes de EnergyWise manipulados para ser procesados por un dispositivo afectado. Un exploit podría permitir al atacante causar una condición de desbordamiento de búfer o una recarga del dispositivo afectado, lo que conduciría a una condición DoS. El Cisco IOS Software y el Cisco IOS XE Software admiten EnergyWise para la comunicación IPv4. Sólo los paquetes IPv4 destinados a un dispositivo configurado como miembro del dominio de EnergyWise pueden desencadenar estas vulnerabilidades. Los paquetes IPv6 no pueden ser utilizadas para activar estas vulnerabilidades. Cisco Bug ID CSCur29331."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8940ECBB-CA08-4292-AA5C-55AB95D98580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C29F00F-1779-46BB-9964-8692AB4AD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950F3BA6-DEEB-4EA5-96E3-88B33B0331D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48E7E3A-61B2-4188-831C-26EB583ECD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C54AA9-EFDB-43A5-AD00-4E9965881927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7497ED9-109E-4B44-8C16-D43F7FA1A326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9F3020-E327-4DA0-BD2A-22677BEA0629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B34634-EAEA-4FAC-98DD-E50EB7FE9286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875897DB-094B-41BD-9205-9D4564B52998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B119CD4-DA82-4F35-B5CD-71E2434C23B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D581EB8-FBAC-4F48-82B5-6F8BEE2D8CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3855C5-86C9-4408-B644-78E0B17F6F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B47AFB-BFB5-4DF1-9F05-695BBDC21CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB7463C-01C6-4483-8EF1-1E1257738CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFE2CEF-595A-4D4D-A741-4562CD03B67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EC6DC5-E871-43E3-991E-0EE4B310CA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102395E9-4110-4C7C-B152-5C60EB17D1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4200124-000B-49C0-B380-A478C1CF4A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40BAA65-D2A7-42BB-BAD7-C9F7FCE7B123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B9DB1-8AB9-45A7-8DC4-FD6CED335D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F17158D-9CCD-4186-B97D-51242AB92547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E920061-80A8-41E0-BA64-A20264020C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB5FB44-0CD9-40E1-80EC-C8CFBA023FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3509F6-5475-4924-9E5C-4E2E03D65F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0BE6E0-3D82-4B2A-9B4B-C50021F0687A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD063290-8E11-43E3-B55E-411551074C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A6E72-A63C-487C-BD50-3902D328C011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D964C2-D315-45AA-BA20-F3723EDCF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A8CD5-93F3-4A40-A533-98DFE63FB699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43938EBD-70E9-415E-83C0-8CED61EB84DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FC422E-1DCC-48BF-84BC-9082F559644B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB3C3CD-1E42-4E59-AA9C-4AB91DAE917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF9F501-FC58-489F-9662-4DD30DEBDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FB6BD4-CFCA-4BE6-8C82-9F83A3F41C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B01C-956E-4C74-AA03-F028C25C2DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE2AE1-346A-462F-AF0A-3022EB2ED66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DADD4F-B761-406B-8BF1-A7AF0C6896D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600F1FE-17F6-4F6D-886A-ED95FEA9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17356A3C-0C05-46A7-89EF-A2C48DDEC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5C5C5D-B40A-4DD6-A10C-C8713CCF2E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE68EAC3-05F4-46C5-8A48-4ECFF1844BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83184158-7C5F-4294-895E-7CF5B76A0F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A081B105-AD3F-4529-B3E7-D8B0851C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3142DA6-0FA9-4CEC-95FC-938AFD944BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)wo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1644E8D2-E3F2-4ACB-A0D0-F374B565D121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC24BF9-DCD1-4974-A2C7-654E9B469C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F8F86-8C63-4A29-A384-62A849848EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D89B24-5DE1-4E15-B539-EC3FF6BA0658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87760068-4255-4D18-A62D-FDC156F7A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF551C-1482-489C-AC4B-DF3E9BBB0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904C4D5C-F603-42CE-9CAD-28B01223452B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D0BBED-E68E-43B7-93F5-FC5DEE7BEB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F2951-FF09-45FC-81BD-7C8C6C7CD1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C5C43F-67A3-4000-845E-FDA620AD1B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565F3777-89E2-4159-9D8E-629EB7A56837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C3DF8-2B59-41EB-A151-15E46348DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700DDE2E-922C-426F-8751-BADD15055AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CA171-4BE2-4204-BDAB-EA19BCD4842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84766AF1-DC74-4D64-A4E1-56B377D6CE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A0517-EF86-4655-B4B4-246ED3A84803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E3912E-11F7-421B-A5C4-35568A6E386B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360F3E49-D75A-4ACE-B775-14055272C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362C676-5002-4ABC-9C60-97D4B65A399D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14EB41-CD6A-483A-8F68-9072E436807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61323E0-9CBA-4629-87C8-9F8B59ABD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A859E-3B77-4CAE-A38D-C1CF3FFB6DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CCEA43-40D6-4A6A-A235-2301DE7C4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D38633-31AE-42E9-8FFA-77C8EFA9AABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6D9CC-70F0-475C-8AB0-48980596BE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECEF97-EC6A-43C8-A7AB-5C48948183FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AB39F8-5D39-4E8A-A8A5-B91718D37A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63328822-DC2E-41A3-9E12-F5F824847AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350D9AFE-66AD-486B-B42D-E6A3CE62640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D67BDA-AEA7-4ED2-AFA4-20283B446602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D593974-6D7B-4AF8-85B2-A77D8BE5CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B4BFC4-F2C9-4D5E-AD22-3AAF36CFB12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2E6D25-7528-4433-9BB3-4F45DB0FE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E1ADA5-C782-4F8A-A77C-A895B402A792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C897E-CE32-4350-9315-DEE4EA5FF02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7FF79-0AFF-4DB5-BDCA-797B8FAB7F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A801C7F1-7E15-4B40-A2F0-DD181F13DB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A735690-4813-486E-929A-2F97F51FDEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB6662-6683-4EA7-B2E2-984FB68977AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8720B1-11DF-47E6-90C3-F0D3F77E69D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FA81AE-B37E-4F38-ABAD-44EF200FA5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3083C5E7-A17A-4744-A700-697FF50B5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E760F98-3A9B-48BE-83AD-22672B15C619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049F7107-B407-4F99-8688-738AF3AF4CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EC3675-6213-4AA2-9C91-73A89AD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971AAF00-63AA-4B3F-8E0F-B8FBD011C071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A0087-5926-46AF-B1DA-3AA18FAB87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A2402-F662-4900-8137-B14EB2537173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5757C194-AF18-434C-9F19-2FC775720556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5B2E97-12F4-4B3B-90C6-106667787472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BFDF59-CDED-4A52-9E24-673E86B00C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331D55CC-055A-47E9-9019-B6AEAE0F8576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE53F4B-83D6-4E40-8117-D1983E798CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21941E6C-4DE9-45EA-8B14-CCEF208C458F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8D765-D1F3-43E9-BCBA-DBC4FA7BAB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C06387D-C32E-4C3A-9A02-C0748DB88D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D754113E-26FE-4E2E-AFF0-680866C32CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0489630E-150D-4C80-8E93-045B89A83631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39832F23-3841-44CA-B1C0-321CA9B59627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD804E72-BAB3-4471-9EB2-11D607895357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28722F17-AF23-4435-AF9B-996798ACF2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587450DF-77E4-4320-9191-383EBE5A6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD560277-FD93-413C-B1ED-9B7DA6658753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D3C419-D1FF-45E8-A5B1-AFFC59567478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59065FF7-E644-4927-9A3D-21431A5D91D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E5F13-3F15-418B-A0AF-038BEABF8445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694AA98F-2705-477E-B2EE-75D2CEDB263B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7760B1FF-BC56-49F4-8020-439EA2F53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABF12A-78BD-459D-BF53-065A56C385AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D15A929-0C2B-4C3D-99E4-0E7D46217216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A9B13E-8CF7-4879-8C33-8E690291335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EAC82-48B1-47A2-80D7-8CEE806E4B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B4687-CC90-45D8-989D-8DF38940C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F755B9BE-3DF6-49AE-847E-F74B696A49A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF429A0-4A54-48FA-B69B-D34898E987EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A867AA1-E46F-4027-A41B-6AE1A27EB2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF4082D-8F3E-4274-83DD-431E99C395B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230ACE85-877C-45D7-A2A9-0085C421292A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37BA5F4-9D5C-4D92-A6D3-055B79049719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9108D-B313-4C07-A9E3-5C2591304919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A89C06-8384-4B23-8D3A-293C9035FC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B7F513-E991-47A4-A96B-2EB90B15D197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD483E0-66F9-4DD1-85FA-C125C9617E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115E901C-94B4-4EC7-AA85-03A20CFA90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14181F4B-9A5C-40B4-BD15-FED694E9AE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E402E-5D8B-4261-906C-C5668B4A12BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85017D3F-5CEF-48BA-847E-7DCB39AC7636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4DD419-4BA3-4E3F-935C-2A6C9C71BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277D20C6-DAD1-455F-91E8-E5E091C1E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B33D730-0E80-46AF-8B53-FCEFF457EBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D383F-F5A1-4BF6-9334-356E3CEEE897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE0230-D1A0-4A9E-A0A3-037C7977D450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF70487-4E51-4570-927B-1B74D73E9D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242A4DC2-C9C7-4ACB-99F0-317959B0CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF5C-1B91-4B54-BAB4-2DF17A1BBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCF559-9324-4CE1-A986-EF4A174DCEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D14775C-95F5-4507-9837-CA818489CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9895119-8DE1-4D27-A5B6-5FFA46A9B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CDBE37-FFAF-4EB1-834B-6972D16FA222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC3E04D-52F8-4C36-9B6C-086FD3BFFD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FE3400-AF89-4A5F-AFF5-3521B1CC1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014EEE0B-4158-49F1-B2B1-692FF481991F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3D239A-CB65-46BA-8048-73439B8DA3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A3D04B-CA03-4CAF-8AE6-44B89DDAA104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855B1020-7FB6-46D1-ABAF-5618590CF329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDD05CF-2C4D-484D-AEB0-C5C28F432A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485923CB-D5BD-400D-8324-3FA94D11C4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DA1B7-18E9-43CF-BD77-050B971D75FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75634752-042C-4E27-972E-E0D5DCD38BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD00484-39D2-4CD5-ABEA-3C5AD9977BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD9B95-0D54-49CA-824D-68175D6B4A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082C941-CE02-440F-8DD7-87873504B964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBAA67-9C88-48CE-88F7-4B5463B87B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71E784-53C0-46AE-AB6E-9B4CB5FAFFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC09-8BA9-4595-89C2-1EAD0310B78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4334D40-9B30-483E-9154-E0956D8849A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14897FA-0E55-425C-9048-5987A0A6CE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4BCB9-8FE1-4B69-8245-F0F2955CAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112C4EA9-2FB4-4C2F-B550-036FCC289DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B770E747-517E-42FE-9197-8E654F294B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59D6811-BF02-436B-808A-DF21682561CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE752C6-250E-47CE-93EA-536958874386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3103F-9381-40A5-A7BD-D1251B3EA5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B990E413-C863-4613-803F-1E492982C70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EB6A3F-DDAB-4FC6-A857-6E106E815505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741D6E0-2507-44D9-8476-AE11DADEC611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318BB57-8001-4F2A-954C-AD8DB2A94356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D1F5C8-F388-4999-BE87-33BE68976EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D05A1-996F-408D-AC4D-F6B0538E8956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4EEC19-209E-4CED-8348-60E34F7EE419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F7E13A-AAFD-428C-9C4D-395460EFB8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE036B-F8F4-47A0-B192-807899B87885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6C6D6-ED67-4ECA-8FD1-9C3890C061DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B811A-AAAD-49C0-8FC2-5C79078BA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D2447-BD8A-473C-B26E-06897080DD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC822D-E886-46A9-80E8-06DD753A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312CE6B-F3F5-40B3-8862-3BB1314376E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3861",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut47751."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el modulo EnergyWise de Cisco IOS (12.2 y 15.0 en versiones hasta 15.6) y Cisco IOS XE (3.2 en versiones hasta 3.18) podría permitir a un atacante remoto no autenticado provocar un desbordamiento de búfer o una recarga de un dispositivo afectado, dando lugar a una condición de denegación de servicio (DoS). Estas vulnerabilidades se deben a un análisis incorrecto de los paquetes manipulados de EnergyWise destinados a un dispositivo afectado. Un atacante podría explotar estas vulnerabilidades enviando paquetes de EnergyWise manipulados para ser procesados por un dispositivo afectado. Un exploit podría permitir al atacante provocar un desbordamiento de búfer o una recarga del dispositivo afectado, lo que conduciría a una condición DoS. El Cisco IOS Software y el Cisco IOS XE Software admiten EnergyWise para la comunicación IPv4. Sólo los paquetes IPv4 destinados a un dispositivo configurado como miembro del dominio de EnergyWise pueden desencadenar estas vulnerabilidades. Los paquetes IPv6 no pueden ser utilizadas para activar estas vulnerabilidades. Cisco Bug ID CSCut47751."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8940ECBB-CA08-4292-AA5C-55AB95D98580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C29F00F-1779-46BB-9964-8692AB4AD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950F3BA6-DEEB-4EA5-96E3-88B33B0331D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48E7E3A-61B2-4188-831C-26EB583ECD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C54AA9-EFDB-43A5-AD00-4E9965881927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7497ED9-109E-4B44-8C16-D43F7FA1A326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9F3020-E327-4DA0-BD2A-22677BEA0629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B34634-EAEA-4FAC-98DD-E50EB7FE9286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875897DB-094B-41BD-9205-9D4564B52998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B119CD4-DA82-4F35-B5CD-71E2434C23B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D581EB8-FBAC-4F48-82B5-6F8BEE2D8CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3855C5-86C9-4408-B644-78E0B17F6F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B47AFB-BFB5-4DF1-9F05-695BBDC21CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB7463C-01C6-4483-8EF1-1E1257738CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFE2CEF-595A-4D4D-A741-4562CD03B67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EC6DC5-E871-43E3-991E-0EE4B310CA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102395E9-4110-4C7C-B152-5C60EB17D1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4200124-000B-49C0-B380-A478C1CF4A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40BAA65-D2A7-42BB-BAD7-C9F7FCE7B123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B9DB1-8AB9-45A7-8DC4-FD6CED335D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F17158D-9CCD-4186-B97D-51242AB92547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E920061-80A8-41E0-BA64-A20264020C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB5FB44-0CD9-40E1-80EC-C8CFBA023FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3509F6-5475-4924-9E5C-4E2E03D65F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0BE6E0-3D82-4B2A-9B4B-C50021F0687A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD063290-8E11-43E3-B55E-411551074C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A6E72-A63C-487C-BD50-3902D328C011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D964C2-D315-45AA-BA20-F3723EDCF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A8CD5-93F3-4A40-A533-98DFE63FB699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43938EBD-70E9-415E-83C0-8CED61EB84DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FC422E-1DCC-48BF-84BC-9082F559644B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB3C3CD-1E42-4E59-AA9C-4AB91DAE917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF9F501-FC58-489F-9662-4DD30DEBDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FB6BD4-CFCA-4BE6-8C82-9F83A3F41C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B01C-956E-4C74-AA03-F028C25C2DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE2AE1-346A-462F-AF0A-3022EB2ED66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DADD4F-B761-406B-8BF1-A7AF0C6896D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600F1FE-17F6-4F6D-886A-ED95FEA9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17356A3C-0C05-46A7-89EF-A2C48DDEC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5C5C5D-B40A-4DD6-A10C-C8713CCF2E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE68EAC3-05F4-46C5-8A48-4ECFF1844BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83184158-7C5F-4294-895E-7CF5B76A0F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A081B105-AD3F-4529-B3E7-D8B0851C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3142DA6-0FA9-4CEC-95FC-938AFD944BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)wo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1644E8D2-E3F2-4ACB-A0D0-F374B565D121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC24BF9-DCD1-4974-A2C7-654E9B469C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F8F86-8C63-4A29-A384-62A849848EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D89B24-5DE1-4E15-B539-EC3FF6BA0658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87760068-4255-4D18-A62D-FDC156F7A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF551C-1482-489C-AC4B-DF3E9BBB0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904C4D5C-F603-42CE-9CAD-28B01223452B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D0BBED-E68E-43B7-93F5-FC5DEE7BEB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F2951-FF09-45FC-81BD-7C8C6C7CD1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C5C43F-67A3-4000-845E-FDA620AD1B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565F3777-89E2-4159-9D8E-629EB7A56837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C3DF8-2B59-41EB-A151-15E46348DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700DDE2E-922C-426F-8751-BADD15055AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CA171-4BE2-4204-BDAB-EA19BCD4842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84766AF1-DC74-4D64-A4E1-56B377D6CE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A0517-EF86-4655-B4B4-246ED3A84803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E3912E-11F7-421B-A5C4-35568A6E386B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360F3E49-D75A-4ACE-B775-14055272C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362C676-5002-4ABC-9C60-97D4B65A399D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14EB41-CD6A-483A-8F68-9072E436807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61323E0-9CBA-4629-87C8-9F8B59ABD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A859E-3B77-4CAE-A38D-C1CF3FFB6DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CCEA43-40D6-4A6A-A235-2301DE7C4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D38633-31AE-42E9-8FFA-77C8EFA9AABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6D9CC-70F0-475C-8AB0-48980596BE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECEF97-EC6A-43C8-A7AB-5C48948183FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AB39F8-5D39-4E8A-A8A5-B91718D37A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63328822-DC2E-41A3-9E12-F5F824847AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350D9AFE-66AD-486B-B42D-E6A3CE62640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D67BDA-AEA7-4ED2-AFA4-20283B446602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D593974-6D7B-4AF8-85B2-A77D8BE5CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B4BFC4-F2C9-4D5E-AD22-3AAF36CFB12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2E6D25-7528-4433-9BB3-4F45DB0FE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E1ADA5-C782-4F8A-A77C-A895B402A792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C897E-CE32-4350-9315-DEE4EA5FF02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7FF79-0AFF-4DB5-BDCA-797B8FAB7F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A801C7F1-7E15-4B40-A2F0-DD181F13DB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A735690-4813-486E-929A-2F97F51FDEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB6662-6683-4EA7-B2E2-984FB68977AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8720B1-11DF-47E6-90C3-F0D3F77E69D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FA81AE-B37E-4F38-ABAD-44EF200FA5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3083C5E7-A17A-4744-A700-697FF50B5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E760F98-3A9B-48BE-83AD-22672B15C619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049F7107-B407-4F99-8688-738AF3AF4CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EC3675-6213-4AA2-9C91-73A89AD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971AAF00-63AA-4B3F-8E0F-B8FBD011C071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A0087-5926-46AF-B1DA-3AA18FAB87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A2402-F662-4900-8137-B14EB2537173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5757C194-AF18-434C-9F19-2FC775720556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5B2E97-12F4-4B3B-90C6-106667787472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BFDF59-CDED-4A52-9E24-673E86B00C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331D55CC-055A-47E9-9019-B6AEAE0F8576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE53F4B-83D6-4E40-8117-D1983E798CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21941E6C-4DE9-45EA-8B14-CCEF208C458F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8D765-D1F3-43E9-BCBA-DBC4FA7BAB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C06387D-C32E-4C3A-9A02-C0748DB88D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D754113E-26FE-4E2E-AFF0-680866C32CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0489630E-150D-4C80-8E93-045B89A83631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39832F23-3841-44CA-B1C0-321CA9B59627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD804E72-BAB3-4471-9EB2-11D607895357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28722F17-AF23-4435-AF9B-996798ACF2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587450DF-77E4-4320-9191-383EBE5A6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD560277-FD93-413C-B1ED-9B7DA6658753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D3C419-D1FF-45E8-A5B1-AFFC59567478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59065FF7-E644-4927-9A3D-21431A5D91D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E5F13-3F15-418B-A0AF-038BEABF8445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694AA98F-2705-477E-B2EE-75D2CEDB263B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7760B1FF-BC56-49F4-8020-439EA2F53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABF12A-78BD-459D-BF53-065A56C385AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D15A929-0C2B-4C3D-99E4-0E7D46217216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A9B13E-8CF7-4879-8C33-8E690291335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EAC82-48B1-47A2-80D7-8CEE806E4B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B4687-CC90-45D8-989D-8DF38940C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F755B9BE-3DF6-49AE-847E-F74B696A49A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF429A0-4A54-48FA-B69B-D34898E987EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A867AA1-E46F-4027-A41B-6AE1A27EB2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF4082D-8F3E-4274-83DD-431E99C395B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230ACE85-877C-45D7-A2A9-0085C421292A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37BA5F4-9D5C-4D92-A6D3-055B79049719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9108D-B313-4C07-A9E3-5C2591304919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A89C06-8384-4B23-8D3A-293C9035FC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B7F513-E991-47A4-A96B-2EB90B15D197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD483E0-66F9-4DD1-85FA-C125C9617E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115E901C-94B4-4EC7-AA85-03A20CFA90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14181F4B-9A5C-40B4-BD15-FED694E9AE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E402E-5D8B-4261-906C-C5668B4A12BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85017D3F-5CEF-48BA-847E-7DCB39AC7636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4DD419-4BA3-4E3F-935C-2A6C9C71BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277D20C6-DAD1-455F-91E8-E5E091C1E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B33D730-0E80-46AF-8B53-FCEFF457EBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D383F-F5A1-4BF6-9334-356E3CEEE897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE0230-D1A0-4A9E-A0A3-037C7977D450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF70487-4E51-4570-927B-1B74D73E9D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242A4DC2-C9C7-4ACB-99F0-317959B0CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF5C-1B91-4B54-BAB4-2DF17A1BBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCF559-9324-4CE1-A986-EF4A174DCEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D14775C-95F5-4507-9837-CA818489CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9895119-8DE1-4D27-A5B6-5FFA46A9B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CDBE37-FFAF-4EB1-834B-6972D16FA222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC3E04D-52F8-4C36-9B6C-086FD3BFFD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FE3400-AF89-4A5F-AFF5-3521B1CC1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014EEE0B-4158-49F1-B2B1-692FF481991F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3D239A-CB65-46BA-8048-73439B8DA3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A3D04B-CA03-4CAF-8AE6-44B89DDAA104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855B1020-7FB6-46D1-ABAF-5618590CF329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDD05CF-2C4D-484D-AEB0-C5C28F432A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485923CB-D5BD-400D-8324-3FA94D11C4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DA1B7-18E9-43CF-BD77-050B971D75FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75634752-042C-4E27-972E-E0D5DCD38BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD00484-39D2-4CD5-ABEA-3C5AD9977BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD9B95-0D54-49CA-824D-68175D6B4A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082C941-CE02-440F-8DD7-87873504B964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBAA67-9C88-48CE-88F7-4B5463B87B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71E784-53C0-46AE-AB6E-9B4CB5FAFFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC09-8BA9-4595-89C2-1EAD0310B78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4334D40-9B30-483E-9154-E0956D8849A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14897FA-0E55-425C-9048-5987A0A6CE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4BCB9-8FE1-4B69-8245-F0F2955CAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112C4EA9-2FB4-4C2F-B550-036FCC289DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B770E747-517E-42FE-9197-8E654F294B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59D6811-BF02-436B-808A-DF21682561CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE752C6-250E-47CE-93EA-536958874386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3103F-9381-40A5-A7BD-D1251B3EA5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B990E413-C863-4613-803F-1E492982C70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EB6A3F-DDAB-4FC6-A857-6E106E815505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741D6E0-2507-44D9-8476-AE11DADEC611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318BB57-8001-4F2A-954C-AD8DB2A94356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D1F5C8-F388-4999-BE87-33BE68976EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D05A1-996F-408D-AC4D-F6B0538E8956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4EEC19-209E-4CED-8348-60E34F7EE419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F7E13A-AAFD-428C-9C4D-395460EFB8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE036B-F8F4-47A0-B192-807899B87885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6C6D6-ED67-4ECA-8FD1-9C3890C061DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B811A-AAAD-49C0-8FC2-5C79078BA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D2447-BD8A-473C-B26E-06897080DD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC822D-E886-46A9-80E8-06DD753A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312CE6B-F3F5-40B3-8862-3BB1314376E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3862",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCuu76493."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el modulo EnergyWise de Cisco IOS (12.2 y 15.0 en versiones hasta 15.6) y Cisco IOS XE (3.2 en versiones hasta 3.18) podría permitir a un atacante remoto no autenticado provocar un desbordamiento de búfer o una recarga de un dispositivo afectado, dando lugar a una denegación de servicio (DoS). Estas vulnerabilidades se deben a un análisis incorrecto de los paquetes manipulados de EnergyWise destinados a un dispositivo afectado. Un atacante podría explotar estas vulnerabilidades enviando paquetes de EnergyWise manipulados para ser procesados por un dispositivo afectado. Un exploit podría permitir al atacante causar una condición de desbordamiento de búfer o una recarga del dispositivo afectado, lo que conduciría a una condición DoS. El Cisco IOS Software y el Cisco IOS XE Software admiten EnergyWise para la comunicación IPv4. Sólo los paquetes IPv4 destinados a un dispositivo configurado como miembro del dominio de EnergyWise pueden desencadenar estas vulnerabilidades. Los paquetes IPv6 no pueden ser utilizadas para activar estas vulnerabilidades. Cisco Bug ID CSCuu76493."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8940ECBB-CA08-4292-AA5C-55AB95D98580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C29F00F-1779-46BB-9964-8692AB4AD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950F3BA6-DEEB-4EA5-96E3-88B33B0331D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48E7E3A-61B2-4188-831C-26EB583ECD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C54AA9-EFDB-43A5-AD00-4E9965881927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7497ED9-109E-4B44-8C16-D43F7FA1A326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9F3020-E327-4DA0-BD2A-22677BEA0629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B34634-EAEA-4FAC-98DD-E50EB7FE9286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875897DB-094B-41BD-9205-9D4564B52998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B119CD4-DA82-4F35-B5CD-71E2434C23B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D581EB8-FBAC-4F48-82B5-6F8BEE2D8CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3855C5-86C9-4408-B644-78E0B17F6F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B47AFB-BFB5-4DF1-9F05-695BBDC21CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB7463C-01C6-4483-8EF1-1E1257738CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFE2CEF-595A-4D4D-A741-4562CD03B67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EC6DC5-E871-43E3-991E-0EE4B310CA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102395E9-4110-4C7C-B152-5C60EB17D1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4200124-000B-49C0-B380-A478C1CF4A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40BAA65-D2A7-42BB-BAD7-C9F7FCE7B123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B9DB1-8AB9-45A7-8DC4-FD6CED335D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F17158D-9CCD-4186-B97D-51242AB92547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E920061-80A8-41E0-BA64-A20264020C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB5FB44-0CD9-40E1-80EC-C8CFBA023FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3509F6-5475-4924-9E5C-4E2E03D65F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0BE6E0-3D82-4B2A-9B4B-C50021F0687A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD063290-8E11-43E3-B55E-411551074C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A6E72-A63C-487C-BD50-3902D328C011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D964C2-D315-45AA-BA20-F3723EDCF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A8CD5-93F3-4A40-A533-98DFE63FB699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43938EBD-70E9-415E-83C0-8CED61EB84DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FC422E-1DCC-48BF-84BC-9082F559644B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB3C3CD-1E42-4E59-AA9C-4AB91DAE917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF9F501-FC58-489F-9662-4DD30DEBDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FB6BD4-CFCA-4BE6-8C82-9F83A3F41C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B01C-956E-4C74-AA03-F028C25C2DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE2AE1-346A-462F-AF0A-3022EB2ED66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DADD4F-B761-406B-8BF1-A7AF0C6896D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600F1FE-17F6-4F6D-886A-ED95FEA9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17356A3C-0C05-46A7-89EF-A2C48DDEC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5C5C5D-B40A-4DD6-A10C-C8713CCF2E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE68EAC3-05F4-46C5-8A48-4ECFF1844BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83184158-7C5F-4294-895E-7CF5B76A0F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A081B105-AD3F-4529-B3E7-D8B0851C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3142DA6-0FA9-4CEC-95FC-938AFD944BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)wo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1644E8D2-E3F2-4ACB-A0D0-F374B565D121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC24BF9-DCD1-4974-A2C7-654E9B469C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F8F86-8C63-4A29-A384-62A849848EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D89B24-5DE1-4E15-B539-EC3FF6BA0658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87760068-4255-4D18-A62D-FDC156F7A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF551C-1482-489C-AC4B-DF3E9BBB0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904C4D5C-F603-42CE-9CAD-28B01223452B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D0BBED-E68E-43B7-93F5-FC5DEE7BEB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F2951-FF09-45FC-81BD-7C8C6C7CD1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C5C43F-67A3-4000-845E-FDA620AD1B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565F3777-89E2-4159-9D8E-629EB7A56837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C3DF8-2B59-41EB-A151-15E46348DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700DDE2E-922C-426F-8751-BADD15055AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CA171-4BE2-4204-BDAB-EA19BCD4842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84766AF1-DC74-4D64-A4E1-56B377D6CE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A0517-EF86-4655-B4B4-246ED3A84803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E3912E-11F7-421B-A5C4-35568A6E386B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360F3E49-D75A-4ACE-B775-14055272C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362C676-5002-4ABC-9C60-97D4B65A399D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14EB41-CD6A-483A-8F68-9072E436807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61323E0-9CBA-4629-87C8-9F8B59ABD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A859E-3B77-4CAE-A38D-C1CF3FFB6DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CCEA43-40D6-4A6A-A235-2301DE7C4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D38633-31AE-42E9-8FFA-77C8EFA9AABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6D9CC-70F0-475C-8AB0-48980596BE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECEF97-EC6A-43C8-A7AB-5C48948183FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AB39F8-5D39-4E8A-A8A5-B91718D37A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63328822-DC2E-41A3-9E12-F5F824847AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350D9AFE-66AD-486B-B42D-E6A3CE62640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D67BDA-AEA7-4ED2-AFA4-20283B446602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D593974-6D7B-4AF8-85B2-A77D8BE5CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B4BFC4-F2C9-4D5E-AD22-3AAF36CFB12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2E6D25-7528-4433-9BB3-4F45DB0FE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E1ADA5-C782-4F8A-A77C-A895B402A792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C897E-CE32-4350-9315-DEE4EA5FF02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7FF79-0AFF-4DB5-BDCA-797B8FAB7F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A801C7F1-7E15-4B40-A2F0-DD181F13DB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A735690-4813-486E-929A-2F97F51FDEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB6662-6683-4EA7-B2E2-984FB68977AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8720B1-11DF-47E6-90C3-F0D3F77E69D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FA81AE-B37E-4F38-ABAD-44EF200FA5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3083C5E7-A17A-4744-A700-697FF50B5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E760F98-3A9B-48BE-83AD-22672B15C619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049F7107-B407-4F99-8688-738AF3AF4CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EC3675-6213-4AA2-9C91-73A89AD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971AAF00-63AA-4B3F-8E0F-B8FBD011C071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A0087-5926-46AF-B1DA-3AA18FAB87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A2402-F662-4900-8137-B14EB2537173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5757C194-AF18-434C-9F19-2FC775720556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5B2E97-12F4-4B3B-90C6-106667787472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BFDF59-CDED-4A52-9E24-673E86B00C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331D55CC-055A-47E9-9019-B6AEAE0F8576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE53F4B-83D6-4E40-8117-D1983E798CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21941E6C-4DE9-45EA-8B14-CCEF208C458F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8D765-D1F3-43E9-BCBA-DBC4FA7BAB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C06387D-C32E-4C3A-9A02-C0748DB88D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D754113E-26FE-4E2E-AFF0-680866C32CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0489630E-150D-4C80-8E93-045B89A83631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39832F23-3841-44CA-B1C0-321CA9B59627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD804E72-BAB3-4471-9EB2-11D607895357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28722F17-AF23-4435-AF9B-996798ACF2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587450DF-77E4-4320-9191-383EBE5A6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD560277-FD93-413C-B1ED-9B7DA6658753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D3C419-D1FF-45E8-A5B1-AFFC59567478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59065FF7-E644-4927-9A3D-21431A5D91D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E5F13-3F15-418B-A0AF-038BEABF8445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694AA98F-2705-477E-B2EE-75D2CEDB263B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7760B1FF-BC56-49F4-8020-439EA2F53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABF12A-78BD-459D-BF53-065A56C385AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D15A929-0C2B-4C3D-99E4-0E7D46217216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A9B13E-8CF7-4879-8C33-8E690291335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EAC82-48B1-47A2-80D7-8CEE806E4B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B4687-CC90-45D8-989D-8DF38940C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F755B9BE-3DF6-49AE-847E-F74B696A49A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF429A0-4A54-48FA-B69B-D34898E987EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A867AA1-E46F-4027-A41B-6AE1A27EB2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF4082D-8F3E-4274-83DD-431E99C395B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230ACE85-877C-45D7-A2A9-0085C421292A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37BA5F4-9D5C-4D92-A6D3-055B79049719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9108D-B313-4C07-A9E3-5C2591304919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A89C06-8384-4B23-8D3A-293C9035FC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B7F513-E991-47A4-A96B-2EB90B15D197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD483E0-66F9-4DD1-85FA-C125C9617E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115E901C-94B4-4EC7-AA85-03A20CFA90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14181F4B-9A5C-40B4-BD15-FED694E9AE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E402E-5D8B-4261-906C-C5668B4A12BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85017D3F-5CEF-48BA-847E-7DCB39AC7636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4DD419-4BA3-4E3F-935C-2A6C9C71BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277D20C6-DAD1-455F-91E8-E5E091C1E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B33D730-0E80-46AF-8B53-FCEFF457EBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D383F-F5A1-4BF6-9334-356E3CEEE897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE0230-D1A0-4A9E-A0A3-037C7977D450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF70487-4E51-4570-927B-1B74D73E9D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242A4DC2-C9C7-4ACB-99F0-317959B0CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF5C-1B91-4B54-BAB4-2DF17A1BBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCF559-9324-4CE1-A986-EF4A174DCEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D14775C-95F5-4507-9837-CA818489CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9895119-8DE1-4D27-A5B6-5FFA46A9B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CDBE37-FFAF-4EB1-834B-6972D16FA222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC3E04D-52F8-4C36-9B6C-086FD3BFFD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FE3400-AF89-4A5F-AFF5-3521B1CC1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014EEE0B-4158-49F1-B2B1-692FF481991F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3D239A-CB65-46BA-8048-73439B8DA3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A3D04B-CA03-4CAF-8AE6-44B89DDAA104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855B1020-7FB6-46D1-ABAF-5618590CF329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDD05CF-2C4D-484D-AEB0-C5C28F432A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485923CB-D5BD-400D-8324-3FA94D11C4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DA1B7-18E9-43CF-BD77-050B971D75FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75634752-042C-4E27-972E-E0D5DCD38BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD00484-39D2-4CD5-ABEA-3C5AD9977BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD9B95-0D54-49CA-824D-68175D6B4A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082C941-CE02-440F-8DD7-87873504B964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBAA67-9C88-48CE-88F7-4B5463B87B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71E784-53C0-46AE-AB6E-9B4CB5FAFFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC09-8BA9-4595-89C2-1EAD0310B78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4334D40-9B30-483E-9154-E0956D8849A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14897FA-0E55-425C-9048-5987A0A6CE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4BCB9-8FE1-4B69-8245-F0F2955CAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112C4EA9-2FB4-4C2F-B550-036FCC289DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B770E747-517E-42FE-9197-8E654F294B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59D6811-BF02-436B-808A-DF21682561CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE752C6-250E-47CE-93EA-536958874386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3103F-9381-40A5-A7BD-D1251B3EA5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B990E413-C863-4613-803F-1E492982C70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EB6A3F-DDAB-4FC6-A857-6E106E815505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741D6E0-2507-44D9-8476-AE11DADEC611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318BB57-8001-4F2A-954C-AD8DB2A94356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D1F5C8-F388-4999-BE87-33BE68976EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D05A1-996F-408D-AC4D-F6B0538E8956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4EEC19-209E-4CED-8348-60E34F7EE419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F7E13A-AAFD-428C-9C4D-395460EFB8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE036B-F8F4-47A0-B192-807899B87885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6C6D6-ED67-4ECA-8FD1-9C3890C061DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B811A-AAAD-49C0-8FC2-5C79078BA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D2447-BD8A-473C-B26E-06897080DD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC822D-E886-46A9-80E8-06DD753A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312CE6B-F3F5-40B3-8862-3BB1314376E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3863",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut50727."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el modulo EnergyWise de Cisco IOS (12.2 y 15.0 en versiones hasta 15.6) y Cisco IOS XE (3.2 en versiones hasta 3.18) podría permitir a un atacante remoto no autenticado provocar una condición del desbordamiento de búfer o una recarga de un dispositivo afectado, dando lugar a una denegación de servicio (DoS). Estas vulnerabilidades se deben a un análisis incorrecto de los paquetes manipulados de EnergyWise destinados a un dispositivo afectado. Un atacante podría explotar estas vulnerabilidades enviando paquetes de EnergyWise manipulados para ser procesados por un dispositivo afectado. Un exploit podría permitir al atacante provocar una condición de desbordamiento de búfer o una recarga del dispositivo afectado, lo que conduciría a una condición DoS. El Cisco IOS Software y el Cisco IOS XE Software admiten EnergyWise para la comunicación IPv4. Sólo los paquetes IPv4 destinados a un dispositivo configurado como miembro del dominio de EnergyWise pueden desencadenar estas vulnerabilidades. Los paquetes IPv6 no pueden ser utilizadas para activar estas vulnerabilidades. Cisco Bug ID CSCut50727."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8940ECBB-CA08-4292-AA5C-55AB95D98580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C29F00F-1779-46BB-9964-8692AB4AD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950F3BA6-DEEB-4EA5-96E3-88B33B0331D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48E7E3A-61B2-4188-831C-26EB583ECD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C54AA9-EFDB-43A5-AD00-4E9965881927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7497ED9-109E-4B44-8C16-D43F7FA1A326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9F3020-E327-4DA0-BD2A-22677BEA0629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B34634-EAEA-4FAC-98DD-E50EB7FE9286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875897DB-094B-41BD-9205-9D4564B52998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B119CD4-DA82-4F35-B5CD-71E2434C23B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D581EB8-FBAC-4F48-82B5-6F8BEE2D8CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3855C5-86C9-4408-B644-78E0B17F6F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B47AFB-BFB5-4DF1-9F05-695BBDC21CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB7463C-01C6-4483-8EF1-1E1257738CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFE2CEF-595A-4D4D-A741-4562CD03B67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EC6DC5-E871-43E3-991E-0EE4B310CA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102395E9-4110-4C7C-B152-5C60EB17D1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4200124-000B-49C0-B380-A478C1CF4A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40BAA65-D2A7-42BB-BAD7-C9F7FCE7B123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B9DB1-8AB9-45A7-8DC4-FD6CED335D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F17158D-9CCD-4186-B97D-51242AB92547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E920061-80A8-41E0-BA64-A20264020C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB5FB44-0CD9-40E1-80EC-C8CFBA023FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3509F6-5475-4924-9E5C-4E2E03D65F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0BE6E0-3D82-4B2A-9B4B-C50021F0687A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD063290-8E11-43E3-B55E-411551074C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A6E72-A63C-487C-BD50-3902D328C011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D964C2-D315-45AA-BA20-F3723EDCF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A8CD5-93F3-4A40-A533-98DFE63FB699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43938EBD-70E9-415E-83C0-8CED61EB84DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FC422E-1DCC-48BF-84BC-9082F559644B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB3C3CD-1E42-4E59-AA9C-4AB91DAE917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF9F501-FC58-489F-9662-4DD30DEBDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FB6BD4-CFCA-4BE6-8C82-9F83A3F41C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B01C-956E-4C74-AA03-F028C25C2DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE2AE1-346A-462F-AF0A-3022EB2ED66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DADD4F-B761-406B-8BF1-A7AF0C6896D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600F1FE-17F6-4F6D-886A-ED95FEA9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17356A3C-0C05-46A7-89EF-A2C48DDEC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5C5C5D-B40A-4DD6-A10C-C8713CCF2E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE68EAC3-05F4-46C5-8A48-4ECFF1844BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83184158-7C5F-4294-895E-7CF5B76A0F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A081B105-AD3F-4529-B3E7-D8B0851C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3142DA6-0FA9-4CEC-95FC-938AFD944BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)wo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1644E8D2-E3F2-4ACB-A0D0-F374B565D121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC24BF9-DCD1-4974-A2C7-654E9B469C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F8F86-8C63-4A29-A384-62A849848EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D89B24-5DE1-4E15-B539-EC3FF6BA0658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87760068-4255-4D18-A62D-FDC156F7A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF551C-1482-489C-AC4B-DF3E9BBB0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904C4D5C-F603-42CE-9CAD-28B01223452B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D0BBED-E68E-43B7-93F5-FC5DEE7BEB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F2951-FF09-45FC-81BD-7C8C6C7CD1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C5C43F-67A3-4000-845E-FDA620AD1B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565F3777-89E2-4159-9D8E-629EB7A56837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C3DF8-2B59-41EB-A151-15E46348DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700DDE2E-922C-426F-8751-BADD15055AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CA171-4BE2-4204-BDAB-EA19BCD4842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84766AF1-DC74-4D64-A4E1-56B377D6CE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A0517-EF86-4655-B4B4-246ED3A84803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E3912E-11F7-421B-A5C4-35568A6E386B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360F3E49-D75A-4ACE-B775-14055272C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362C676-5002-4ABC-9C60-97D4B65A399D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14EB41-CD6A-483A-8F68-9072E436807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61323E0-9CBA-4629-87C8-9F8B59ABD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A859E-3B77-4CAE-A38D-C1CF3FFB6DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CCEA43-40D6-4A6A-A235-2301DE7C4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D38633-31AE-42E9-8FFA-77C8EFA9AABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6D9CC-70F0-475C-8AB0-48980596BE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECEF97-EC6A-43C8-A7AB-5C48948183FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AB39F8-5D39-4E8A-A8A5-B91718D37A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63328822-DC2E-41A3-9E12-F5F824847AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350D9AFE-66AD-486B-B42D-E6A3CE62640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D67BDA-AEA7-4ED2-AFA4-20283B446602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D593974-6D7B-4AF8-85B2-A77D8BE5CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B4BFC4-F2C9-4D5E-AD22-3AAF36CFB12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2E6D25-7528-4433-9BB3-4F45DB0FE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E1ADA5-C782-4F8A-A77C-A895B402A792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C897E-CE32-4350-9315-DEE4EA5FF02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7FF79-0AFF-4DB5-BDCA-797B8FAB7F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A801C7F1-7E15-4B40-A2F0-DD181F13DB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A735690-4813-486E-929A-2F97F51FDEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB6662-6683-4EA7-B2E2-984FB68977AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8720B1-11DF-47E6-90C3-F0D3F77E69D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FA81AE-B37E-4F38-ABAD-44EF200FA5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3083C5E7-A17A-4744-A700-697FF50B5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E760F98-3A9B-48BE-83AD-22672B15C619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049F7107-B407-4F99-8688-738AF3AF4CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EC3675-6213-4AA2-9C91-73A89AD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971AAF00-63AA-4B3F-8E0F-B8FBD011C071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A0087-5926-46AF-B1DA-3AA18FAB87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A2402-F662-4900-8137-B14EB2537173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5757C194-AF18-434C-9F19-2FC775720556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5B2E97-12F4-4B3B-90C6-106667787472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BFDF59-CDED-4A52-9E24-673E86B00C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331D55CC-055A-47E9-9019-B6AEAE0F8576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE53F4B-83D6-4E40-8117-D1983E798CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21941E6C-4DE9-45EA-8B14-CCEF208C458F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8D765-D1F3-43E9-BCBA-DBC4FA7BAB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C06387D-C32E-4C3A-9A02-C0748DB88D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D754113E-26FE-4E2E-AFF0-680866C32CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0489630E-150D-4C80-8E93-045B89A83631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39832F23-3841-44CA-B1C0-321CA9B59627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD804E72-BAB3-4471-9EB2-11D607895357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28722F17-AF23-4435-AF9B-996798ACF2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587450DF-77E4-4320-9191-383EBE5A6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD560277-FD93-413C-B1ED-9B7DA6658753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D3C419-D1FF-45E8-A5B1-AFFC59567478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59065FF7-E644-4927-9A3D-21431A5D91D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E5F13-3F15-418B-A0AF-038BEABF8445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694AA98F-2705-477E-B2EE-75D2CEDB263B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7760B1FF-BC56-49F4-8020-439EA2F53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABF12A-78BD-459D-BF53-065A56C385AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D15A929-0C2B-4C3D-99E4-0E7D46217216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A9B13E-8CF7-4879-8C33-8E690291335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EAC82-48B1-47A2-80D7-8CEE806E4B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B4687-CC90-45D8-989D-8DF38940C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F755B9BE-3DF6-49AE-847E-F74B696A49A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF429A0-4A54-48FA-B69B-D34898E987EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A867AA1-E46F-4027-A41B-6AE1A27EB2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF4082D-8F3E-4274-83DD-431E99C395B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230ACE85-877C-45D7-A2A9-0085C421292A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37BA5F4-9D5C-4D92-A6D3-055B79049719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9108D-B313-4C07-A9E3-5C2591304919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A89C06-8384-4B23-8D3A-293C9035FC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B7F513-E991-47A4-A96B-2EB90B15D197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD483E0-66F9-4DD1-85FA-C125C9617E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115E901C-94B4-4EC7-AA85-03A20CFA90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14181F4B-9A5C-40B4-BD15-FED694E9AE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E402E-5D8B-4261-906C-C5668B4A12BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85017D3F-5CEF-48BA-847E-7DCB39AC7636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4DD419-4BA3-4E3F-935C-2A6C9C71BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277D20C6-DAD1-455F-91E8-E5E091C1E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B33D730-0E80-46AF-8B53-FCEFF457EBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D383F-F5A1-4BF6-9334-356E3CEEE897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE0230-D1A0-4A9E-A0A3-037C7977D450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF70487-4E51-4570-927B-1B74D73E9D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242A4DC2-C9C7-4ACB-99F0-317959B0CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF5C-1B91-4B54-BAB4-2DF17A1BBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCF559-9324-4CE1-A986-EF4A174DCEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D14775C-95F5-4507-9837-CA818489CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9895119-8DE1-4D27-A5B6-5FFA46A9B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CDBE37-FFAF-4EB1-834B-6972D16FA222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC3E04D-52F8-4C36-9B6C-086FD3BFFD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FE3400-AF89-4A5F-AFF5-3521B1CC1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014EEE0B-4158-49F1-B2B1-692FF481991F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3D239A-CB65-46BA-8048-73439B8DA3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A3D04B-CA03-4CAF-8AE6-44B89DDAA104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855B1020-7FB6-46D1-ABAF-5618590CF329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDD05CF-2C4D-484D-AEB0-C5C28F432A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485923CB-D5BD-400D-8324-3FA94D11C4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DA1B7-18E9-43CF-BD77-050B971D75FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75634752-042C-4E27-972E-E0D5DCD38BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD00484-39D2-4CD5-ABEA-3C5AD9977BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD9B95-0D54-49CA-824D-68175D6B4A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082C941-CE02-440F-8DD7-87873504B964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBAA67-9C88-48CE-88F7-4B5463B87B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71E784-53C0-46AE-AB6E-9B4CB5FAFFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC09-8BA9-4595-89C2-1EAD0310B78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4334D40-9B30-483E-9154-E0956D8849A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14897FA-0E55-425C-9048-5987A0A6CE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4BCB9-8FE1-4B69-8245-F0F2955CAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112C4EA9-2FB4-4C2F-B550-036FCC289DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B770E747-517E-42FE-9197-8E654F294B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59D6811-BF02-436B-808A-DF21682561CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE752C6-250E-47CE-93EA-536958874386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3103F-9381-40A5-A7BD-D1251B3EA5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B990E413-C863-4613-803F-1E492982C70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EB6A3F-DDAB-4FC6-A857-6E106E815505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741D6E0-2507-44D9-8476-AE11DADEC611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318BB57-8001-4F2A-954C-AD8DB2A94356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D1F5C8-F388-4999-BE87-33BE68976EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D05A1-996F-408D-AC4D-F6B0538E8956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4EEC19-209E-4CED-8348-60E34F7EE419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F7E13A-AAFD-428C-9C4D-395460EFB8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE036B-F8F4-47A0-B192-807899B87885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6C6D6-ED67-4ECA-8FD1-9C3890C061DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5B811A-AAAD-49C0-8FC2-5C79078BA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D2447-BD8A-473C-B26E-06897080DD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC822D-E886-46A9-80E8-06DD753A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312CE6B-F3F5-40B3-8862-3BB1314376E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4969",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-04-20T22:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for tasks."
      }, {
        "lang" : "es",
        "value" : "El Cloud Controller en Cloud Foundry cf-release en versiones anteriores a v255 permiten a los usuarios de desarrolladores autenticados superar las cuotas de memoria y disco para las tareas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "254",
            "matchCriteriaId" : "E805734A-AACB-4AC1-B06F-D28D5FED2663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4969/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4969/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6607",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload or corrupt the information present in the device's local DNS cache. The vulnerability is due to a flaw in handling crafted DNS response messages. An attacker could exploit this vulnerability by triggering a DNS request from the Cisco ASA Software and replying with a crafted response. A successful exploit could cause the device to reload, resulting in a denial of service (DoS) condition or corruption of the local DNS cache information. Note: Only traffic directed to the affected device can be used to exploit this vulnerability. This vulnerability affects Cisco ASA Software configured in routed or transparent firewall mode and single or multiple context mode. This vulnerability can be triggered by IPv4 and IPv6 traffic. This vulnerability affects Cisco ASA Software running on the following products: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Fixed versions: 9.1(7.12) 9.2(4.18) 9.4(3.12) 9.5(3.2) 9.6(2.2). Cisco Bug IDs: CSCvb40898."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código DNS de Cisco ASA Software podría permitir a un atacante remoto no autenticado hacer que un dispositivo afectado recargue o corrompa la información presente en la caché DNS local del dispositivo. La vulnerabilidad se debe a una falla en el manejo de los mensajes de respuesta DNS. Un atacante podría explotar esta vulnerabilidad al activar una solicitud DNS desde el software Cisco ASA y responder con una respuesta diseñada. Una explotación exitosa podría provocar que el dispositivo se volviera a cargar, dando como resultado una denegación de servicio (DoS) o corrupción de la información de caché DNS local. Nota: Sólo se puede utilizar el tráfico dirigido al dispositivo afectado para explotar esta vulnerabilidad. Esta vulnerabilidad afecta al software Cisco ASA configurado en modo de firewall enrutado o transparente y en modo de contexto único o múltiple. Esta vulnerabilidad puede ser provocada por el tráfico IPv4 e IPv6. Esta vulnerabilidad afecta al Cisco ASA Software que se ejecuta en los siguientes productos: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Versiones fijas: 9.1(7.12) 9.2(4.18) 9.4(3.12) 9.5(3.2) 9.6(2.2). Cisco Bug IDs: CSCvb40898."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F0A66-A71E-4B64-A66F-EA7B9C0D9151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33B43A-1836-4402-AEAC-59CA8F44E3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B7B477-15FD-4198-B0D9-0F9A8A2E4C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6887033-E697-47D0-B6E0-61B64E9D3AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C1AB6D-F2C5-4726-8792-581E8DCB9EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1216C-903C-469D-8615-ECFB3AA29BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D03293-9765-46DB-B53D-1B23D5C14373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0286DAF0-FACA-4F94-82E9-EAED8750DB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E77826-1208-4582-A94C-242B601BD456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD617A59-2A4C-4264-BB5D-0126EF292079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B9FC85-13B8-488C-80C4-C29C0E244601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7582A-835E-4A84-B197-EB40EE7985C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE55AB-8170-4E3A-AF89-A8F79599901A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10653A-0E7C-4014-825D-76B5B438D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77642A96-EF7F-4138-97BC-B3793EE0FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE9F46B-DD74-4295-BB6A-9239E29F4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE2EE9B-D44E-430D-8469-1DF0ADC322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6B45EB-97BB-4683-9092-95E560B2585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3AA854-0F4D-4B08-A249-B3C19C056D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E55E46-01F5-4C0D-8A69-1BBC590188BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BCCA3-958D-41C4-98CE-1A333F9667A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245E680B-7A2D-4F98-9D59-6ECF70FE882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EFD6D-A657-4102-982D-7634AC25E75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59593836-990A-4CF1-AFBC-516C4A318641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479676D-6B3F-4154-B0D4-D2C81E6C941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F062A64B-7184-49C6-BDF5-8A413B0A85F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B574E7C0-95AA-4A24-9470-FA282192D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5B88C0-F809-4A58-9708-60C56129142C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863F213-2EDF-4874-AFB3-E70B4B356BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2780DD07-79B8-4096-A435-DB8FD6301E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2D8411-7317-4865-ADF9-279648210E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA7A9-F4DB-4BC1-9233-F72B66191F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D8C893-BA42-4EE5-A790-13614A6B436F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5D09C9-4559-4FED-B4B7-EAE5935EBCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97933",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038319",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-dns",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-dns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6608",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packets. An attacker could exploit this vulnerability by sending a crafted packet to the affected system. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode. This vulnerability can be triggered by IPv4 and IPv6 traffic. A valid SSL or TLS session is needed to exploit this vulnerability. This vulnerability affects Cisco ASA Software running on the following products: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Fixed versions: 8.4(7.31) 9.0(4.39) 9.1(7) 9.2(4.6) 9.3(3.8) 9.4(2) 9.5(2). Cisco Bug IDs: CSCuv48243."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los códigos Secure Sockets Layer (SSL) y Transport Layer Security (TLS) de Cisco ASA Software podría permitir a un atacante remoto no autenticado provocar una recarga del sistema afectado. La vulnerabilidad se debe a un análisis incorrecto de los paquetes SSL o TLS manipulados. Un atacante podría explotar esta vulnerabilidad enviando un paquete manipulado al sistema afectado. Nota: Sólo se puede utilizar el tráfico dirigido al sistema afectado para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a los sistemas configurados en modo de firewall enrutado y transparente y en modo de contexto único o múltiple. Esta vulnerabilidad puede ser provocada por el tráfico IPv4 e IPv6. Se necesita una sesión SSL o TLS válida para aprovechar esta vulnerabilidad. Esta vulnerabilidad afecta al Cisco ASA Software que se ejecuta en los siguientes productos: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Versiones fijadas: 8.4(7.31) 9.0(4.39) 9.1(7) 9.2(4.6) 9.3(3.8) 9.4(2) 9.5(2). Cisco Bug IDs: CSCuv48243."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97937",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038315",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6609",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets to the affected system. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed firewall mode only and in single or multiple context mode. This vulnerability can be triggered by IPv4 and IPv6 traffic. An attacker needs to establish a valid IPsec tunnel before exploiting this vulnerability. This vulnerability affects Cisco ASA Software running on the following products: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Fixed versions: 9.1(7.8) 9.2(4.15) 9.4(4) 9.5(3.2) 9.6(2). Cisco Bug IDs: CSCun16158."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código IPsec de Cisco ASA Software podría permitir a un atacante remoto autenticado provocar una recarga del sistema afectado. La vulnerabilidad se debe al análisis incorrecto de paquetes IPsec malformados. Un atacante podría explotar esta vulnerabilidad enviando paquetes IPsec malformados al sistema afectado. Nota: Sólo se puede utilizar el tráfico dirigido al sistema afectado para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a los sistemas configurados sólo en el modo enrutado de firewall y en modo de contexto único o múltiple. Esta vulnerabilidad puede ser provocada por el tráfico IPv4 e IPv6. Un atacante necesita establecer un túnel IPsec válido antes de explotar esta vulnerabilidad. Esta vulnerabilidad afecta al software Cisco ASA que se ejecuta en los siguientes productos: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Versiones fijadas: 9.1(7.8) 9.2(4.15) 9.4(4) 9.5(3.2) 9.6(2). Cisco Bug IDs: CSCun16158."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F0A66-A71E-4B64-A66F-EA7B9C0D9151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33B43A-1836-4402-AEAC-59CA8F44E3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B7B477-15FD-4198-B0D9-0F9A8A2E4C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6887033-E697-47D0-B6E0-61B64E9D3AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D03293-9765-46DB-B53D-1B23D5C14373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0286DAF0-FACA-4F94-82E9-EAED8750DB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E77826-1208-4582-A94C-242B601BD456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD617A59-2A4C-4264-BB5D-0126EF292079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE55AB-8170-4E3A-AF89-A8F79599901A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10653A-0E7C-4014-825D-76B5B438D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77642A96-EF7F-4138-97BC-B3793EE0FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE9F46B-DD74-4295-BB6A-9239E29F4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE2EE9B-D44E-430D-8469-1DF0ADC322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6B45EB-97BB-4683-9092-95E560B2585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3AA854-0F4D-4B08-A249-B3C19C056D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E55E46-01F5-4C0D-8A69-1BBC590188BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BCCA3-958D-41C4-98CE-1A333F9667A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245E680B-7A2D-4F98-9D59-6ECF70FE882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C78E5C3-4D0D-4DFD-AA91-93DD58B195F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F831FD5A-1D54-4DFA-9AED-C3F2CBCE4069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EFD6D-A657-4102-982D-7634AC25E75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59593836-990A-4CF1-AFBC-516C4A318641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479676D-6B3F-4154-B0D4-D2C81E6C941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F062A64B-7184-49C6-BDF5-8A413B0A85F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B574E7C0-95AA-4A24-9470-FA282192D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5B88C0-F809-4A58-9708-60C56129142C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863F213-2EDF-4874-AFB3-E70B4B356BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2780DD07-79B8-4096-A435-DB8FD6301E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2D8411-7317-4865-ADF9-279648210E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA7A9-F4DB-4BC1-9233-F72B66191F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D8C893-BA42-4EE5-A790-13614A6B436F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97936",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038316",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-ipsec",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-ipsec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6610",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to insufficient validation of the IKEv1 XAUTH parameters passed during an IKEv1 negotiation. An attacker could exploit this vulnerability by sending crafted parameters. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability only affects systems configured in routed firewall mode and in single or multiple context mode. This vulnerability can be triggered by IPv4 or IPv6 traffic. A valid IKEv1 Phase 1 needs to be established to exploit this vulnerability, which means that an attacker would need to have knowledge of a pre-shared key or have a valid certificate for phase 1 authentication. This vulnerability affects Cisco ASA Software running on the following products: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA for Firepower 9300 Series, Cisco ISA 3000 Industrial Security Appliance. Fixed versions: 9.1(7.7) 9.2(4.11) 9.4(4) 9.5(3) 9.6(1.5). Cisco Bug IDs: CSCuz11685."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de Internet Key Exchange Version 1 (IKEv1) XAUTH de Cisco ASA Software podría permitir a un atacante remoto autenticado provocar una recarga de un sistema afectado. La vulnerabilidad se debe a una validación insuficiente de los parámetros IKEv1 XAUTH aprobados durante una negociación IKEv1. Un atacante podría explotar esta vulnerabilidad enviando parámetros manipulados. Nota: Sólo se puede utilizar el tráfico dirigido al sistema afectado para explotar esta vulnerabilidad. Esta vulnerabilidad sólo afecta a los sistemas configurados en el modo de firewall enrutado y en modo de contexto único o múltiple. Esta vulnerabilidad puede ser desencadenada por el tráfico IPv4 o IPv6. Se necesita establecer una IKEv1 Phase 1 válida para explotar esta vulnerabilidad, lo que significa que un atacante necesitaría tener conocimiento de una clave precompartida o tener un certificado válido para la autenticación de fase 1. Esta vulnerabilidad afecta al software Cisco ASA que se ejecuta en los siguientes productos: Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA for Firepower 9300 Series, Cisco ISA 3000 Industrial Security Appliance. Versiones fijas: 9.1(7.7) 9.2(4.11) 9.4(4) 9.5(3) 9.6(1.5). Cisco Bug IDs: CSCuz11685."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F0A66-A71E-4B64-A66F-EA7B9C0D9151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33B43A-1836-4402-AEAC-59CA8F44E3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B7B477-15FD-4198-B0D9-0F9A8A2E4C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6887033-E697-47D0-B6E0-61B64E9D3AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D03293-9765-46DB-B53D-1B23D5C14373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0286DAF0-FACA-4F94-82E9-EAED8750DB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE55AB-8170-4E3A-AF89-A8F79599901A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10653A-0E7C-4014-825D-76B5B438D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77642A96-EF7F-4138-97BC-B3793EE0FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE2EE9B-D44E-430D-8469-1DF0ADC322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6B45EB-97BB-4683-9092-95E560B2585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3AA854-0F4D-4B08-A249-B3C19C056D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E55E46-01F5-4C0D-8A69-1BBC590188BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BCCA3-958D-41C4-98CE-1A333F9667A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245E680B-7A2D-4F98-9D59-6ECF70FE882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C78E5C3-4D0D-4DFD-AA91-93DD58B195F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EFD6D-A657-4102-982D-7634AC25E75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59593836-990A-4CF1-AFBC-516C4A318641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479676D-6B3F-4154-B0D4-D2C81E6C941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F062A64B-7184-49C6-BDF5-8A413B0A85F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863F213-2EDF-4874-AFB3-E70B4B356BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2780DD07-79B8-4096-A435-DB8FD6301E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2D8411-7317-4865-ADF9-279648210E0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97934",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038314",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-xauth",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-xauth",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6611",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCuw65830."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de framework web de Cisco Prime Infrastructure 2.2 (2) podría permitir que un atacante remoto no autenticado lleve a cabo un ataque XSS contra el usuario de la interfaz web del sistema afectado. La vulnerabilidad se debe a la insuficiente validación de entrada de algunos parámetros pasados al servidor web. Un atacante podría explotar esta vulnerabilidad convenciendo al usuario para que acceda a un enlace malicioso o intercepte la solicitud del usuario e inyecte el código malicioso. Un exploit podría permitir al atacante ejecutar código de secuencias de comando arbitrario en el contexto del sitio afectado o permitir al atacante acceder a información sensible basada en navegador. Cisco Bug IDs: CSCuw65830."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7830BF63-55ED-4D8B-B380-1E78E338EA2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97931",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038330",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cpi",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cpi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6613",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete DNS packet header validation when the packet is received by the application. An attacker could exploit this vulnerability by sending a malformed DNS packet to the application. An exploit could allow the attacker to cause the DNS process to restart, which could lead to a DoS condition. This vulnerability affects Cisco Prime Network Registrar on all software versions prior to 8.3.5. Cisco Bug IDs: CSCvb55412."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesador de paquetes de entrada de DNS para Cisco Prime Network Registrar podría permitir que un atacante remoto no autenticado haga que el proceso DNS se reinicie momentáneamente, lo que podría provocar una denegación parcial de servicio en el sistema afectado. La vulnerabilidad se debe a la validación incompleta del encabezado del paquete DNS cuando el paquete es recibido por la aplicación. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete DNS malformado a la aplicación. Un exploit podría permitir al atacante provocar el reinicio del proceso DNS, lo que podría llevar a una condición DoS. Esta vulnerabilidad afecta a Cisco Prime Network Registrar en todas las versiones de software anteriores a 8.3.5. Cisco Bug IDs: CSCvb55412."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network_registrar:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E60599-839A-460F-B8DE-E6F22C8ECF6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network_registrar:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCB950B-9A49-4395-98E8-E0A5F425CDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network_registrar:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6249E955-68F8-486C-9C40-7D4DF5F2F456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network_registrar:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4627E4D9-78CD-4915-8F1E-4F8B7DF8D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network_registrar:8.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBC6C28-8D99-4920-B3CA-3E83E8F9B78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97924",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038331",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-prime-dns",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-prime-dns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6614",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access control (RBAC) for file-download requests that are sent to the affected software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to download and view any system file by using the affected software. Cisco Bug IDs: CSCvd11628."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de descarga de archivos de la interfaz de usuario web de Cisco FindIT Network Probe Software 1.0.0 podría permitir a un atacante remoto autenticado descargar y ver cualquier archivo del sistema utilizando el software afectado. La vulnerabilidad se debe a la ausencia de control de acceso basado en roles (RBAC) para las solicitudes de descarga de archivos que se envían al software afectado. Un atacante podría explotar esta vulnerabilidad enviando una solicitud HTTP manipulada al software afectado. Una explotación exitosa podría permitir al atacante descargar y ver cualquier archivo del sistema utilizando el software afectado. Cisco Bug IDs: CSCvd11628."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:findit_network_probe:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A513E3-2514-4CE3-BA84-C9ABDEE02D99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97926",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-findit",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-findit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6615",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read request that contains certain criteria for a specific object ID (OID) and an active crypto session is disconnected on an affected device. An attacker who can authenticate to an affected device could trigger this vulnerability by issuing an SNMP request for a specific OID on the device. A successful exploit will cause the device to restart due to an attempt to access an invalid memory region. The attacker does not control how or when crypto sessions are disconnected on the device. Cisco Bug IDs: CSCvb94392."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de Simple Network Management Protocol (SNMP) de Cisco IOS XE 3.16 podría permitir a un atacante remoto autenticado provocar denegación de servicio (DoS). La vulnerabilidad se debe a una condición de competencia que podría ocurrir cuando el software afectado procesa una petición de lectura SNMP que contiene ciertos criterios para un ID de objeto específico (OID) y una sesión de cifrado activa se desconecta en un dispositivo afectado. Un atacante que pueda autenticarse en un dispositivo afectado podría activar esta vulnerabilidad emitiendo una solicitud SNMP para un OID específico en el dispositivo. Una explotación exitosa hará que el dispositivo se reinicie debido a un intento de acceso a una región de memoria no válida. El atacante no controla cómo o cuándo se desconectan las sesiones de cifrado en el dispositivo. Cisco Bug IDs: CSCvb94392."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97930",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038328",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ios-xe-snmp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ios-xe-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6616",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize specific values that are received as part of a user-supplied HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the user on the affected system. Cisco Bug IDs: CSCvd14578."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la GUI basada en web de Cisco Integrated Management Controller (IMC) 3.0 (1c) podría permitir a un atacante remoto autenticado ejecutar código arbitrario en un sistema afectado. La vulnerabilidad existe porque el software afectado no desinfecta suficientemente los valores específicos que se reciben como parte de una solicitud HTTP proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad enviando una solicitud HTTP manipulada al software afectado. Una explotación exitosa podría permitir al atacante ejecutar código arbitrario con los privilegios del usuario en el sistema afectado. ID de errores de Cisco: CSCvd14578."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:integrated_management_controller_supervisor:3.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "674BE7E5-FC1C-4083-B4D3-8C816239D0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97928",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6617",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected software does not assign a new session identifier to a user session when a user authenticates to the web-based GUI. An attacker could exploit this vulnerability by using a hijacked session identifier to connect to the software through the web-based GUI. A successful exploit could allow the attacker to hijack an authenticated user's browser session on the affected system. Cisco Bug IDs: CSCvd14583."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de administración de identificación de sesión de la GUI basada en web de Cisco Integrated Management Controller (IMC) 3.0 (1c) podría permitir a un atacante remoto no autenticado secuestrar una sesión de usuario válida en un sistema afectado. La vulnerabilidad existe porque el software afectado no asigna un nuevo identificador de sesión a una sesión de usuario cuando un usuario se autentica en la GUI basada en web. Un atacante podría explotar esta vulnerabilidad usando un identificador de sesión secuestrado para conectarse al software a través de la GUI basada en web. Una explotación exitosa podría permitir al atacante secuestrar la sesión del navegador de un usuario autenticado en el sistema afectado. Cisco Bug IDs: CSCvd14583."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:integrated_management_controller_supervisor:3.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "674BE7E5-FC1C-4083-B4D3-8C816239D0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97929",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6618",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by persuading an authenticated user of the web-based GUI on an affected system to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the web-based GUI on the affected system. Cisco Bug IDs: CSCvd14587."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la GUI basada en web de Cisco Integrated Management Controller (IMC) 3.0 (1c) podría permitir a un atacante remoto autenticado realizar un ataque XSS. La vulnerabilidad se debe a una validación insuficiente de la entrada suministrada por el usuario por el software afectado. Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario autenticado de la GUI basada en web en un sistema afectado a seguir un enlace malicioso. Una explotación exitosa podría permitir al atacante ejecutar código arbitrario en el contexto de la GUI basada en web del sistema afectado. Cisco Bug IDs: CSCvd14587."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:integrated_management_controller_supervisor:3.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "674BE7E5-FC1C-4083-B4D3-8C816239D0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97927",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6619",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-04-20T22:59:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize user-supplied HTTP input. An attacker could exploit this vulnerability by sending an HTTP POST request that contains crafted, deserialized user data to the affected software. A successful exploit could allow the attacker to execute arbitrary commands with root-level privileges on the affected system, which the attacker could use to conduct further attacks. Cisco Bug IDs: CSCvd14591."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la GUI basada en web de Cisco Integrated Management Controller (IMC) 3.0 (1c) podría permitir a un atacante remoto autenticado ejecutar comandos arbitrarios en un sistema afectado. La vulnerabilidad existe porque el software afectado no desinfecta suficientemente la entrada HTTP proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad a través del envío de una solicitud HTTP POST que contenga datos de usuario deserializados y manipulados para el software afectado. Una explotación exitosa podría permitir al atacante ejecutar comandos arbitrarios con privilegios de nivel root en el sistema afectado, que el atacante podría usar para realizar nuevos ataques. Cisco Bug IDs: CSCvd14591."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:integrated_management_controller_supervisor:3.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "674BE7E5-FC1C-4083-B4D3-8C816239D0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97925",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T00:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp."
      }, {
        "lang" : "es",
        "value" : "El Reporting Module 1.12.0 para OpenMRS permite ataques CSRF con XSS resultante, en la cual la autenticación administrativa es secuestrada para insertar JavaScript en un campo de nombre en webapp/reports/manageReports.jsp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmrs:openmrs_module_reporting:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB43767A-B773-4C30-9A95-93F97353394E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openmrs/openmrs-module-reporting/pull/141/commits/0023a659288538d2763835847d3414ecb18b931a#diff-50e25eddc5909110fa3d31090877c2fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=pfrIaNvIuFY",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openmrs/openmrs-module-reporting/pull/141/commits/0023a659288538d2763835847d3414ecb18b931a#diff-50e25eddc5909110fa3d31090877c2fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=pfrIaNvIuFY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T02:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized \"UPDATE dm_dbo.dm_user_s SET user_privileges=16\" command, aka an \"RPC save-commands\" attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4532."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server permite el acceso de superusuario a través de sys_obj_save o guardar un objeto manipulado, seguido de un comando \"UPDATE dm_dbo.dm_user_s SET user_privileges=16\" no autorizado, vulnerabilidad también conocida como un ataque \"RPC save-commands\". NOTA: esta vulnerabilidad existe debido a una corrección incompleta para CVE-2015-4532."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA174108-AB36-4FE9-9178-B2EEBC4DD719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Apr/61",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/andreybpanfilov/d8792484e13971982c0719ae59ab8c7c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/andreybpanfilov/e0e60ae9d525a34cca04eb4c89a21e04",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Apr/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/andreybpanfilov/d8792484e13971982c0719ae59ab8c7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/andreybpanfilov/e0e60ae9d525a34cca04eb4c89a21e04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T02:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters, aka PAN-SA-2017-0011 and PAN-70674."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks PAN-OS en la versiones anteriores a 7.0.15 tiene XSS en la interfaz externa de GlobalProtect a través de parámetros de solicitud manipulada, vulnerabilidad también conocida como PAN-SA-2017-0011 y PAN-70674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.14",
            "matchCriteriaId" : "2E25876B-ADEA-43BD-83E0-6F336CB193B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97953",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T02:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context."
      }, {
        "lang" : "es",
        "value" : "WonderCMS en versiones anteriores a 2.0.3 tiene CSRF debido a la falta de un token en un contexto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondercms:wondercms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "DEB931E1-EE9A-4E61-A8A3-AE66DBE683D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/robiso/wondercms/releases/tag/2.0.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wondercms.com/forum/viewtopic.php?f=8&p=1684",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/robiso/wondercms/releases/tag/2.0.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wondercms.com/forum/viewtopic.php?f=8&p=1684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T14:59:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples/consumer-authentication/cruise.php via the URI, as demonstrated by the cavv parameter."
      }, {
        "lang" : "es",
        "value" : "Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 es vulnerable a un XSS reflejado enexamples/consumer-authentication/cruise.php a trevés del URL, tal como lo demuestra el parámetro cavv."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heartland_payment_systems:heartland-php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.17",
            "matchCriteriaId" : "D62ADD93-CD82-4F9D-9808-2F977B486F2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hps/heartland-php/issues/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hps/heartland-php/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T16:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "La función TextExtractor::ExtractText en TextExtractor.cpp:77 en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación del servicio (referencia a puntero NULL y caida de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/icepng/PoC/tree/master/PoC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://icepng.github.io/2017/04/21/PoDoFo-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/icepng/PoC/tree/master/PoC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://icepng.github.io/2017/04/21/PoDoFo-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T18:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation of the admin password."
      }, {
        "lang" : "es",
        "value" : "Tenable Appliance 4.4.0, , y, posiblemente, versiones anteriores, contiene un fallo en la Web UI que permite la manipulación no autorizada de la contraseña del admin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "40B4557E-A172-46A3-833A-89CC72205122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tenable.com/security/tns-2017-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vulndb.cyberriskanalytics.com/153134",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.tenable.com/security/tns-2017-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vulndb.cyberriskanalytics.com/153134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-21T18:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tns_appliance_session_user parameter, a remote attacker can inject arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Tenable Appliance 3.5 - 4.4.0, y, posiblemente, versiones anteriores, contiene un fallo en la secuencia de comandos simpleupload.py en la Web UI. Mediante la manipulación del parámetro tns_appliance_session_user, un atacante remoto puede inyectar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088E231D-5992-4ADD-BA36-1ED9F9A474B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD287989-729F-4620-AF79-30ADB6A092A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577B30FC-4CB0-48B7-BC02-D63E896BFF67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:3.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9FADBB-32BD-4554-825E-77187F966FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:3.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF337FD4-177B-4C13-A94A-89E745792CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F821B1-C5A7-4AA3-8E9D-384C23848B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38918B9-AFB5-45AB-A00B-4074771AF649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0B18A3-FBAD-4343-9253-479214175FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807211FA-BE46-433F-8D6F-66CFA2868890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1140F38C-83AF-4571-8C0F-4BB493A0028E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:appliance:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DE9C00-60A6-4D42-8C3A-DED6E9D4EDF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tenable.com/security/tns-2017-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vulndb.cyberriskanalytics.com/153135",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41892/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tenable.com/security/tns-2017-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vulndb.cyberriskanalytics.com/153135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41892/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-22T01:59:02.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php."
      }, {
        "lang" : "es",
        "value" : "Exponent CMS 2.4.1 y anteriores tiene inyección SQL a través de una clave serial API de base64 (el parámetro apikey) en la función api de framework/modules/eaas/controllers/eaasController.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "C584D529-5D81-43BA-AE73-753AF04DDE7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/78",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/404notf0und/ab59234d71fbf35b4926ffd646324f29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/commit/67a9c2f0229de120431f3eecb0f5017075517105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/142258/Exponent-CMS-2.4.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/404notf0und/ab59234d71fbf35b4926ffd646324f29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/commit/67a9c2f0229de120431f3eecb0f5017075517105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://packetstormsecurity.com/files/142258/Exponent-CMS-2.4.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-22T01:59:02.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft CMS before 2.6.2974 allows XSS attacks."
      }, {
        "lang" : "es",
        "value" : "CMS manipulado en versiones anteriores a 2.6.2974 permite ataques XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2973",
            "matchCriteriaId" : "2677E65C-E523-4599-9CE3-482441B7DC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://craftcms.com/changelog#2-6-2974",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/855535309878112256",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://craftcms.com/changelog#2-6-2974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/855535309878112256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-22T21:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp)."
      }, {
        "lang" : "es",
        "value" : "PoDoFo 0.9.5 permite una denegación de servicio (recursión infinita y consumo de pila) a través de un archivo PDF manipulado en PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/04/22/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-22T22:59:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "La función PdfPagesTree::GetPageNodeFromArray en PdfPageTree.cpp:464 en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (recursión infinita y caída de la aplicación) a través de un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://qwertwwwe.github.io/2017/04/22/PoDoFo-0-9-5-allows-remote-attackers-to-cause-a-denial-of-service-infinit-loop/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://qwertwwwe.github.io/2017/04/22/PoDoFo-0-9-5-allows-remote-attackers-to-cause-a-denial-of-service-infinit-loop/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-22T22:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox."
      }, {
        "lang" : "es",
        "value" : "WatchGuard Fireware permite la enumeración de usuarios, por ejemplo, en el controlador de inicio de sesión Firebox XML-RPC. Una solicitud de inicio de sesión que contiene una contraseña en blanco enviada al agente XML-RPC en Fireware v11.12.1 y versiones anteriores devuelve respuestas diferentes para nombres de usuario válidos e inválidos. Un atacante podría explotar esta vulnerabilidad para enumerar nombres de usuario válidos en un Firebox afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.2.1",
            "matchCriteriaId" : "340A6304-A2C7-4FFC-8CA7-FDFB78948EDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlGSAU",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlGSAU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-22T22:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox."
      }, {
        "lang" : "es",
        "value" : "WatchGuard Fireware v11.12.1 y solicitudes anteriores de manipulación incorrecta que se refieren a XXE, en el agente XML-RPC. Esto hace que el proceso wgagent de Firebox se bloquee. Este bloqueo de proceso termina todas las sesiones autenticadas en el Firebox, incluidas las conexiones de administración, e impide que se realicen nuevas sesiones autenticadas hasta que el proceso se haya recuperado. El Firebox también puede experimentar una degradación general en el rendimiento mientras se recupera el proceso wgagent. Un atacante podría enviar continuamente solicitudes XML-RPC que contengan referencias a entidades externas para realizar un ataque de Negación de Servicio (DoS) limitado contra un Firebox afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.2.1",
            "matchCriteriaId" : "340A6304-A2C7-4FFC-8CA7-FDFB78948EDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlBSAU",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlBSAU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/media/usb/dvb-usb/dvb-usb-firmware.c en el kernel de Linux 4.9.x y 4.10.x en versiones anteriores a 4.10.7 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D249C5D2-9186-498C-9AF7-100162D856EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F5C9D-D179-4194-965E-F9A153EAE3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EC10DA-54C8-405F-B0AC-A0E8130B5AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD95130-C8F6-4372-BB45-15C664D4E941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB9620C-F4B3-47D1-951F-33E8CD39D516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E1E52C-8A19-4D3D-B890-8A7DE0745E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341DB6BF-E05C-478B-86E7-4466B9A64745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B28AFB-C8D8-401F-A7A1-F47A66B74CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70525107-9C8E-4694-B7F3-98E0FA401C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41C688F-5EE3-4C71-9A76-3A7E12769335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B8B635-4125-4BB7-92FE-E5AEBBB3730A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCB26E2-5F19-4F9C-9FF3-184EF7262D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B614F17-FC57-4689-B875-33C2915432CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8E178C-5E11-4335-94B5-8FBBF1EA0634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0C1F4E-9C54-4FC2-AD07-0D3B26CC2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386C15E-74D2-47C7-802D-87B67D9EE1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59169334-1EA3-4E94-BBDD-49DAC1EC2CC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97972",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67b0503db9c29b04eadfeede6bebbfe5ddad94ef",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/67b0503db9c29b04eadfeede6bebbfe5ddad94ef",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67b0503db9c29b04eadfeede6bebbfe5ddad94ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/67b0503db9c29b04eadfeede6bebbfe5ddad94ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/media/usb/dvb-usb/dw2102.c en el kernel de Linux 4.9.x y 4.10.x en versiones anteriores a 4.10.4 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.9.16",
            "matchCriteriaId" : "C850AA48-53FC-4E7B-99E3-1059FFBF846B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.4",
            "matchCriteriaId" : "06EFB965-C649-4542-8209-E54DD89FFA1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97973",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=606142af57dad981b78707234cfbd15f9f7b7125",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/606142af57dad981b78707234cfbd15f9f7b7125",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=606142af57dad981b78707234cfbd15f9f7b7125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/606142af57dad981b78707234cfbd15f9f7b7125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/media/usb/dvb-usb/cxusb.c en el kernel de Linux 4.9.x y 4.10.x en versiones anteriores a 4.10.12 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.9.24",
            "matchCriteriaId" : "D917D25C-3EFB-4A83-9688-05DF094BFF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.12",
            "matchCriteriaId" : "59CCD4BB-9F0D-405F-B1DD-ACEDF5BB2EDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97974",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3f190e3aec212fc8c61e202c51400afa7384d4bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3f190e3aec212fc8c61e202c51400afa7384d4bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3f190e3aec212fc8c61e202c51400afa7384d4bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3f190e3aec212fc8c61e202c51400afa7384d4bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/media/usb/dvb-usb-v2/dvb_usb_core.cen el kernel de Linux 4.9.x y 4.10.x en versiones anteriores a 4.10.12 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.9.24",
            "matchCriteriaId" : "D917D25C-3EFB-4A83-9688-05DF094BFF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.12",
            "matchCriteriaId" : "59CCD4BB-9F0D-405F-B1DD-ACEDF5BB2EDD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97975",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=005145378c9ad7575a01b6ce1ba118fb427f583a",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/005145378c9ad7575a01b6ce1ba118fb427f583a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=005145378c9ad7575a01b6ce1ba118fb427f583a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/005145378c9ad7575a01b6ce1ba118fb427f583a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "crypto/ccm.c en el kernel de Linux 4.9.x y 4.10.x hasta la versión 4.10.12 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D249C5D2-9186-498C-9AF7-100162D856EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F5C9D-D179-4194-965E-F9A153EAE3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EC10DA-54C8-405F-B0AC-A0E8130B5AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD95130-C8F6-4372-BB45-15C664D4E941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB9620C-F4B3-47D1-951F-33E8CD39D516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E1E52C-8A19-4D3D-B890-8A7DE0745E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341DB6BF-E05C-478B-86E7-4466B9A64745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B28AFB-C8D8-401F-A7A1-F47A66B74CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70525107-9C8E-4694-B7F3-98E0FA401C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41C688F-5EE3-4C71-9A76-3A7E12769335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B8B635-4125-4BB7-92FE-E5AEBBB3730A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCB26E2-5F19-4F9C-9FF3-184EF7262D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B614F17-FC57-4689-B875-33C2915432CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8E178C-5E11-4335-94B5-8FBBF1EA0634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E171DDAB-2D18-4318-AA0A-CC23DEC41561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0C1F4E-9C54-4FC2-AD07-0D3B26CC2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386C15E-74D2-47C7-802D-87B67D9EE1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59169334-1EA3-4E94-BBDD-49DAC1EC2CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5D1AA-B343-49EE-AA1D-6B1C24E7DA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA196D2-A89F-4134-9B68-9A953F25FA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2176CA12-5033-49DB-AE06-B2E811C3D9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7219DEF7-93BC-49E8-A2AB-F8B2DE8262CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44EC694-C56F-4593-81A0-F373A1F9B65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DC765D-24D0-4866-AE56-98C53FF75660"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97994",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b30460c5b0ed762be75a004e924ec3f8711e032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3b30460c5b0ed762be75a004e924ec3f8711e032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b30460c5b0ed762be75a004e924ec3f8711e032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3b30460c5b0ed762be75a004e924ec3f8711e032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/net/can/usb/gs_usb.c en el kernel de Linux 4.9.x y 4.10.x en versiones anteriores a 4.10.2 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D249C5D2-9186-498C-9AF7-100162D856EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F5C9D-D179-4194-965E-F9A153EAE3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EC10DA-54C8-405F-B0AC-A0E8130B5AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD95130-C8F6-4372-BB45-15C664D4E941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB9620C-F4B3-47D1-951F-33E8CD39D516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E1E52C-8A19-4D3D-B890-8A7DE0745E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341DB6BF-E05C-478B-86E7-4466B9A64745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B28AFB-C8D8-401F-A7A1-F47A66B74CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70525107-9C8E-4694-B7F3-98E0FA401C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41C688F-5EE3-4C71-9A76-3A7E12769335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B8B635-4125-4BB7-92FE-E5AEBBB3730A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCB26E2-5F19-4F9C-9FF3-184EF7262D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B614F17-FC57-4689-B875-33C2915432CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97992",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c919a3069c775c1c876bec55e00b2305d5125caa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c919a3069c775c1c876bec55e00b2305d5125caa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c919a3069c775c1c876bec55e00b2305d5125caa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c919a3069c775c1c876bec55e00b2305d5125caa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/char/virtio_console.c en el kernel de Linux 4.9.x y 4.10.x en versiones anteriores a 4.10.12 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.9.24",
            "matchCriteriaId" : "D917D25C-3EFB-4A83-9688-05DF094BFF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.12",
            "matchCriteriaId" : "59CCD4BB-9F0D-405F-B1DD-ACEDF5BB2EDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97997",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c4baad50297d84bde1a7ad45e50c73adae4a2192",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c4baad50297d84bde1a7ad45e50c73adae4a2192",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c4baad50297d84bde1a7ad45e50c73adae4a2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c4baad50297d84bde1a7ad45e50c73adae4a2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/net/usb/pegasus.c en el kernel de Linux 4.9.x en versiones anteriores a 4.9.11 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D249C5D2-9186-498C-9AF7-100162D856EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F5C9D-D179-4194-965E-F9A153EAE3B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98000",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98008",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5593523f968bc86d42a035c6df47d5e0979b5ace",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5593523f968bc86d42a035c6df47d5e0979b5ace",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5593523f968bc86d42a035c6df47d5e0979b5ace",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5593523f968bc86d42a035c6df47d5e0979b5ace",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/net/usb/rtl8150.c en el kernel de Linux 4.9.x en versiones anteriores a 4.9.11 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D249C5D2-9186-498C-9AF7-100162D856EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F5C9D-D179-4194-965E-F9A153EAE3B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7926aff5c57b577ab0f43364ff0c59d968f6a414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/7926aff5c57b577ab0f43364ff0c59d968f6a414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7926aff5c57b577ab0f43364ff0c59d968f6a414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/7926aff5c57b577ab0f43364ff0c59d968f6a414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist."
      }, {
        "lang" : "es",
        "value" : "drivers/net/usb/catc.c en el kernel de Linux 4.9.x en versiones anteriores a 4.9.11 interactúa incorrectamente con la opción CONFIG_VMAP_STACK, que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema o corrupción de memoria) o posiblemente tiene otro impacto no especificado aprovechando el uso de más de una página virtual para la lista de dispersión DMA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D249C5D2-9186-498C-9AF7-100162D856EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783F5C9D-D179-4194-965E-F9A153EAE3B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "drivers/hid/hid-cp2112.c en el kernel de Linux 4.9.x en versiones anteriores a 4.9.9 utiliza un spinlock sin considerar que es posible el sleeping en una solicitud de devolución de llamada en HID USB, lo que permite a los usuarios locales provocar una denegación de servicio (punto muerto) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7a7b5df84b6b4e5d599c7289526eed96541a0654",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/7a7b5df84b6b4e5d599c7289526eed96541a0654",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7a7b5df84b6b4e5d599c7289526eed96541a0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/7a7b5df84b6b4e5d599c7289526eed96541a0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T05:59:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "La función cp2112_gpio_direction_input en drivers/hid/hid-cp2112.c en el kernel de Linux 4.9.x en versiones anteriores a 4.9.9 no tiene el estado de error EIO esperado para un informe de longitud cero, lo que permite a los usuarios locales tener un impacto no especificado a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686DF390-3DCA-4D64-9858-FF699FA21D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24EF446-2120-4F2F-9D84-F782BF1D85CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA879AFB-E995-458B-ABD2-87477376A70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719F2C9D-1897-480A-93CE-C2AC987B80AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1516D1D-261D-421C-83FF-05DD90DAEB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A944C6C-C1BF-472D-8BC2-B112EEDF3BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4F9E6-4EE0-43C4-9B72-03D773AF5719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98010",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8e9faa15469ed7c7467423db4c62aeed3ff4cae3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8e9faa15469ed7c7467423db4c62aeed3ff4cae3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T15:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "WeeChat en versiones anteriores a 1.7.1 permite una caída remota a través del envio de un nombre de archivo a través de DCC al plugin IRC. Esto ocurre en la función irc_ctcp_dcc_filename_without_quotes durante la eliminación de cotizaciones, con un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weechat:weechat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "34C2B09C-F044-4A5B-9512-B370B5C1E8FB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3836",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97987",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/weechat/weechat/commit/2fb346f25f79e412cf0ed314fdf791763c19b70b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ASRTCQFFDAAK347URWNDH6NSED2BGNY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER23GT23US5JXDLUZAMGMWXKZ74MI4S2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3LAJTLI3LWZRNCFYJ7PCBBTHUMCCBHH/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://weechat.org/download/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://weechat.org/news/95/20170422-Version-1.7.1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/weechat/weechat/commit/2fb346f25f79e412cf0ed314fdf791763c19b70b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ASRTCQFFDAAK347URWNDH6NSED2BGNY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER23GT23US5JXDLUZAMGMWXKZ74MI4S2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3LAJTLI3LWZRNCFYJ7PCBBTHUMCCBHH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://weechat.org/download/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://weechat.org/news/95/20170422-Version-1.7.1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T16:59:00.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from \"SEND data\" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware."
      }, {
        "lang" : "es",
        "value" : "On TP-Link TL-SG108E 1.0, un atacante remoto podría recuperar las credenciales de las líneas de registro de \"SEND data\" donde las contraseñas están codificadas en hexadecimal. Esto afecta al firmware 1.1.2 Build 20141017 Rel.50749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072964A1-9F2B-4FE8-954E-6059728663EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537907B5-7EAE-453A-81C6-8CF10498E7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T16:59:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from \"Switch Info\" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware."
      }, {
        "lang" : "es",
        "value" : "En el TP-Link TL-SG108E 1.0, un atacante remoto podría recuperar las credenciales de las líneas de registro de \"Switch Info\" donde las contraseñas están en texto sin cifrar. Esto afecta al firmware 1.1.2 Build 20141017 Rel.50749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072964A1-9F2B-4FE8-954E-6059728663EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537907B5-7EAE-453A-81C6-8CF10498E7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97983",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T16:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware."
      }, {
        "lang" : "es",
        "value" : "En TP-Link TL-SG108E 1.0, las comunicaciones de red de administración están codificadas en RC4, aunque RC4 está obsoleto. Esto afecta al firmware 1.1.2 Build 20141017 Rel.50749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072964A1-9F2B-4FE8-954E-6059728663EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537907B5-7EAE-453A-81C6-8CF10498E7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T16:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware."
      }, {
        "lang" : "es",
        "value" : "En TP-Link TL-SG108E 1.0, hay una clave de cifrado codificada (una cadena larga que comienza con Ei2HNryt). Esto afecta al firmware 1.1.2 Build 20141017 Rel.50749"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072964A1-9F2B-4FE8-954E-6059728663EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537907B5-7EAE-453A-81C6-8CF10498E7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-23T16:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware."
      }, {
        "lang" : "es",
        "value" : "En TP-Link TL-SG108E versión 1.0, el proceso de actualización se puede solicitar de forma remota sin autenticación (httpupg.cgi con un parámetro llamado cmd). Esto afecta al firmware 1.1.2 Build 20141017 Rel.50749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072964A1-9F2B-4FE8-954E-6059728663EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537907B5-7EAE-453A-81C6-8CF10498E7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97985",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T06:59:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin into viewing a malicious page involving the /tools/required/files/importers/imageeditor?fID=1&imgData= URI. This results in a site-wide denial of service making the site not accessible to any users or any administrators."
      }, {
        "lang" : "es",
        "value" : "concrete5 8.1.0 tiene CSRF en el Thumbnail Editor en el File Manager, que permite a atacantes remotos desactivar toda la instalación simplemente engañando a un administrador para que vea una página malintencionada que involucre a /tools/required/files/importers/imageeditor?fID=1&imgData= URI. Esto da lugar a una denegación de servicio en todo el sitio que hace que el sitio no sea accesible a ningún usuario ni a ningún administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E2F1D5-F0C9-41EF-ADB9-52B52F88E01B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zeroday.insecurity.zone/exploits/concrete5_csrf_dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B3vXUYdNMECWZTd3SFRnUjllWk0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/856066923146215425",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://zeroday.insecurity.zone/exploits/concrete5_csrf_dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B3vXUYdNMECWZTd3SFRnUjllWk0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/856066923146215425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T10:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to *, thus accepting requests from any domain. If a victim logged into the camera's web console visits a malicious site hosting a malicious Flash file from another Browser tab, the malicious Flash file then can send requests to the victim's DCS series Camera without knowing the credentials. An attacker can host a malicious Flash file that can retrieve Live Feeds or information from the victim's DCS series Camera, add new admin users, or make other changes to the device. Known affected devices are DCS-933L with firmware before 1.13.05, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, and DCS-932LB1."
      }, {
        "lang" : "es",
        "value" : "Las cámaras DCS de D-Link tienen un archivo CrossDomain.XML débil/inseguro que permite a los sitios que alojan objetos Flash maliciosos acceder y/o cambiar la configuración del dispositivo a través de un ataque CSRF. Esto se debe a que el elemento secundario 'allow-access-from domain' se establece en *, aceptando así peticiones de cualquier dominio. Si una víctima conectada a la consola web de la cámara visita un sitio malicioso que aloja un archivo Flash malicioso desde otra pestaña Navegador, el archivo Flash malicioso puede enviar solicitudes a la Camera de la serie DCS de la víctima sin conocer las credenciales. Un atacante puede alojar un archivo Flash malicioso que puede recuperar Live Feeds o información de la Camera de la serie DCS de la víctima, añadir nuevos usuarios de administración o realizar otros cambios en el dispositivo. Los dispositivos afectados conocidos son DCS-933L con firmware en versiones anteriores a 1.13.05, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L y DCS-932LB1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2230l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03.01",
            "matchCriteriaId" : "DF503030-B07A-432F-9DBC-2003DBDEFC39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2230l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734A019E-883B-4BE7-AB10-9D50C5C8A8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2310l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08.01",
            "matchCriteriaId" : "D489F126-1717-44B2-AB54-BE7E6E4FD78F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2310l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1DE1F9-002A-4EC9-A482-881A91A121AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2332l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08.01",
            "matchCriteriaId" : "7DCC13A1-D70D-4426-B847-99226E670946"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2332l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D3B4CD-44F9-46D1-870E-5429D73ECCEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-6010l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.01",
            "matchCriteriaId" : "AF861B2D-7E7A-4056-A0B9-3F739A4485B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-6010l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C9F4DA-5433-42A8-B321-C2B6CD88822C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-7010l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08.01",
            "matchCriteriaId" : "98BE2B94-BAE6-4F60-8347-D065DD2A3F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-7010l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88405D4-6FB3-4E30-B6E8-48F6039FDECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2530l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00.21",
            "matchCriteriaId" : "3691A9F1-647D-40D8-80C8-399EF01A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2530l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A05FF4-4847-41C2-946A-F8043481E11F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-930l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.04",
            "matchCriteriaId" : "21C37B4A-C985-4449-AF18-57948CDBE39C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24CD425-B7C1-4828-AC1A-1A72A3559746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-930l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.13.15",
            "matchCriteriaId" : "8D370AB5-388C-4368-B679-51CFBA8D5294"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24CD425-B7C1-4828-AC1A-1A72A3559746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-932l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.04",
            "matchCriteriaId" : "38BC9948-BF0A-4A1C-9562-4B36E53CC97A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34775D9A-F16B-43C5-A8F4-88C0F9760364"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-932l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.13.15",
            "matchCriteriaId" : "D9787F3F-4454-4B37-BADE-D700D14C63B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34775D9A-F16B-43C5-A8F4-88C0F9760364"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-934l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.15",
            "matchCriteriaId" : "E3D6B86A-5F52-44C1-A7C7-2B970CDFF6E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-934l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24CC28E-1446-48A3-83FD-ED135D5C8C6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-942l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27",
            "matchCriteriaId" : "74070833-5E71-47CF-8F02-6D97FCCB55FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-942l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D04A473-87F2-4B8C-8FBF-BC02CF0DA8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-942l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.03",
            "matchCriteriaId" : "804D8789-BE83-46F2-8EFB-50C7D2C14823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-942l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D04A473-87F2-4B8C-8FBF-BC02CF0DA8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-931l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.05",
            "matchCriteriaId" : "117AF393-E45E-4A89-B308-7BEF5979D006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-931l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1F2866-F7C1-4EC5-8C46-3DE78CD04AFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-933l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.05",
            "matchCriteriaId" : "486B9DE3-4CB3-48BA-9F3A-A486179FC782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-933l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414352B6-6760-4D78-91FC-5198F62981E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5009l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.07.05",
            "matchCriteriaId" : "59E19806-A378-456E-9F3E-54CE6B519E1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5009l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B932DF47-F157-445E-8C52-0AAF1377E5C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5010l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.05",
            "matchCriteriaId" : "EECBA0D6-CBEA-46C2-8ED9-571531F22408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5010l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57DC437-96C8-41BD-8120-1949BFD3A8EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5020l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.05",
            "matchCriteriaId" : "9150CEBC-2762-4376-BBBE-A13A4BFF17FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5020l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00912CC-6F2F-4F13-BED1-0DCD4DF965DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5000l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02.02",
            "matchCriteriaId" : "E927400D-887A-4F12-B671-672D0FEC4DB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5000l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397F0BCA-7A8B-43A1-939D-27127384228D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5025l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02.10",
            "matchCriteriaId" : "6D407D08-9881-47BA-9C84-32581E84D38B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5025l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B9D7B6-8185-4A44-88B6-2DE8937539A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5030l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01.06",
            "matchCriteriaId" : "174E05E4-DE3D-4A2C-BEC7-C171E0BE28AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5030l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9A416-A780-4532-8221-5674A7911198"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2210l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03.01",
            "matchCriteriaId" : "1FC05AE2-089F-4FA5-A7E7-31B6AA9D5F7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2210l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4773DB8-F8ED-4841-8861-570D9A49E08F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2136l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.01",
            "matchCriteriaId" : "64DF2031-114C-4A20-A45A-F2A89B422064"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2136l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12486E64-E79B-4A3A-B1C6-2E3C33D8B299"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2132l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08.01",
            "matchCriteriaId" : "AB304076-7631-48EA-ABF0-F541C341ECBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2132l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5F1984-B87D-400C-A9FE-8543C40986B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-7000l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.00",
            "matchCriteriaId" : "E305FA72-FC97-4AA0-9508-D8B8961A511C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-7000l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A989B0-848F-48C4-A14A-098FD6007DF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-6212l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00.12",
            "matchCriteriaId" : "706DA20A-8EF6-4B64-B486-07CDC9F25DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-6212l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B662B4-2A1D-4ECB-9B71-BC6B6524625C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5029l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.00",
            "matchCriteriaId" : "AECC1DA1-433C-4A40-A00E-5CBADA21D2FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5029l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E1F0F-71E7-4108-A3E9-34A70351DC05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2310l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.03.00",
            "matchCriteriaId" : "19717483-8BBE-4313-AC13-5D56EEB6084D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2310l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1DE1F9-002A-4EC9-A482-881A91A121AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2330l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.00",
            "matchCriteriaId" : "B6AB59BB-3D79-45BF-9AA3-62C44A7F25E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2330l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9A8D3B-14B8-4CF7-8339-6504A21B7E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-2132l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.12.00",
            "matchCriteriaId" : "10E216B5-995F-4AA0-83EC-99AD9B87F582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-2132l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5F1984-B87D-400C-A9FE-8543C40986B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5222l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.12.00",
            "matchCriteriaId" : "AED5E89C-1745-4C93-A891-F6C819C9E7B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5222l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C4B9CD-6029-4B92-8785-1349292EDD69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualys.com/2017/02/22/qsa-2017-02-22/qsa-2017-02-22.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/02/22/qsa-2017-02-22/qsa-2017-02-22.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T10:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php."
      }, {
        "lang" : "es",
        "value" : "XOOPS Core 2.5.8.1 tiene XSS debido a una salida HTML sin escape de un mensaje de error de Install DB en page_dbsettings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BA9895-4753-4BBF-9D92-7C101FAF369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97978",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tsublogs.wordpress.com/2017/04/24/xoops-core-2-5-8-1-install-db-cross-site-scripting/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tsublogs.wordpress.com/2017/04/24/xoops-core-2-5-8-1-install-db-cross-site-scripting/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T14:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php."
      }, {
        "lang" : "es",
        "value" : "En Exponent CMS en versiones anteriores a 2.4.1 Patch #5, XSS en elFinder es posible en framework/modules/file/connector/elfinder.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:*:p4:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "BFC75474-A888-413E-B7EF-E76FE79504B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exponentcms.org/news/patch-5-released-for-v2-4-1-to-fix-a-few-critical-issues",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/commit/0b2241ff1c7d86376fa260c5d4c1714f6cef9c0f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exponentcms.org/news/patch-5-released-for-v2-4-1-to-fix-a-few-critical-issues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/commit/0b2241ff1c7d86376fa260c5d4c1714f6cef9c0f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2312",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE (Routing Engine) will consume a small amount of the memory allocated for the rpd (routing protocol daemon) process. Over time, repeatedly receiving this type of LDP packet(s) will cause the memory to exhaust and the rpd process to crash and restart. It is not possible to free up the memory that has been consumed without restarting the rpd process. This issue affects Junos OS based devices with either IPv4 or IPv6 LDP enabled via the [protocols ldp] configuration (the native IPv6 support for LDP is available in Junos OS 16.1 and higher). The interface on which the packet arrives needs to have LDP enabled. The affected Junos versions are: 13.3 prior to 13.3R10; 14.1 prior to 14.1R8; 14.2 prior to 14.2R7-S6 or 14.2R8; 15.1 prior to 15.1F2-S14, 15.1F6-S4, 15.1F7, 15.1R4-S7, 15.1R5; 15.1X49 before 15.1X49-D70; 15.1X53 before 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 before 16.1R2. 16.2R1 and all subsequent releases have a resolution for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Juniper Networks que ejecutan versiones afectadas de Junos OS y con LDP habilitado, un paquete LDP específico destinado al RE (Routing Engine) consumirá una pequeña cantidad de la memoria asignada al proceso rpd (enrutamiento del daemon del protocolo). Con el tiempo, recibir repetidamente este tipo de paquete(s) LDP provocará que la memoria se escape y el proceso rpd se bloquee y reinicie. No es posible liberar la memoria que se ha consumido sin reiniciar el proceso rpd. Este problema afecta a los dispositivos basados en Junos OS con IPv4 o IPv6 LDP habilitado a través de la configuración [protocols ldp] (el soporte IPv6 nativo para LDP está disponible en Junos OS 16.1 y superior). La interfaz en la que llega el paquete necesita tener habilitado LDP. Las versiones afectadas de Junos son: 13.3 en versiones anteriores a 13.3R10; 14,1 en versiones anteriores a 14.1R8; 14.2 en versiones anteriores a14.2R7-S6 o 14.2R8; 15,1 en versiones anteriores a 15,1F2 - S14, 15,1F6 - S4, 15,1F7, 15,1R4 - S7, 15,1R5; 15,1X49 en versiones anteriores a 15,1X49 - D70; 15,1X53 en versiones anteriores a 15,1X53 - D230, 15,1X53 - D63, 15,1X53 - D70; 16,1 en versiones anteriores a 16.1R2. 16.2R1 y todos los releases posteriores tienen una resolución para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97611",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038252",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA10777",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.juniper.net/JSA10777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2313",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS versions are: 15.1 prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D78, 15.1X49-D80; 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4; 16.2 prior to 16.2R1-S3, 16.2R2; Releases prior to Junos OS 15.1 are unaffected by this vulnerability. 17.1R1, 17.2R1, and all subsequent releases have a resolution for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Dispositivos de Juniper Networks que ejecutan las versiones afectadas Junos OS pueden verse afectados por el recibo de una BGP UPDATE manipulada que puede conducir a un fallo y un reinicio del rpd (enrutamiento del daemon del proceso). Los repetidos bloqueos del daemon rpd pueden resultar en una condición extendida de denegación de servicio. Las versiones del sistema operativo Junos afectadas son: 15.1 antes de 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6; 15.1X49 antes de 15.1X49-D78, 15.1X49-D80; 15.1X53 antes de 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 antes de 16.1R3-S3, 16.1R4; 16.2 antes de 16.2R1-S3, 16.2R2; Releases antes de Junos OS 15.1 no se ven afectados por esta vulnerabilidad. 17.1R1, 17.2R1, y todos los releases posteriores tienen una resolución para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97606",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038257",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA10778",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.juniper.net/JSA10778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2315",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery (ND) packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious network-based packet flood of these crafted IPv6 NDP packets may eventually lead to resource exhaustion and a denial of service. The affected Junos OS versions are: 12.3 prior to 12.3R12-S4, 12.3R13; 13.3 prior to 13.3R10; 14.1 prior to 14.1R8-S3, 14.1R9; 14.1X53 prior ro 14.1X53-D12, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R6-S4, 14.2R7-S6, 14.2R8; 15.1 prior to 15.1R5; 16.1 before 16.1R3; 16.2 before 16.2R1-S3, 16.2R2. 17.1R1 and all subsequent releases have a resolution for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En Switches EX Series Ethernet de Juniper Networks ejecutando las versiones afectadas del Junos OS, se detectó una vulnerabilidad en el procesamiento IPv6 que puede permitir que un paquete Neighbor Discovery (ND) de IPv6 especialmente diseñado destinado hacia un Switch EX Series Ethernet cause una pérdida de memoria lenta. Una inundación de paquetes maliciosos sobre la red de estos paquetes NDP de IPv6 diseñados puede eventualmente conllevar al agotamiento de recursos y a una denegación de servicio. Las versiones afectadas de Junos OS son: versiones 12.3 anteriores a 12.3R12-S4,12.3R13; versiones 13.3 anteriores a 13.3R10; versiones 14.1 anteriores a 14.1R8-S3, 14.1R9; versiones 14.1X53 anteriores a 14.1X53-D12, 14.1X53-D40; versiones 14.1X55 anteriores a 14.1X55-D35; versiones 14.2 anteriores a 14.2R6-S4, 14.2R7-S6, 14.2R8; versiones 15.1 anteriores a 15.1R5; versiones 16.1 anteriores a 16.1R3; versiones 16.2 anteriores a 16.2R1-S3, 16.2R2. La versión 17.1R1 y todas las versiones posteriores tienen una resolución para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "E69DD769-0C8F-4DCE-9F65-411A8CB85322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "960059B5-0701-4B75-AB51-0A430247D9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "05E187F6-BACD-4DD5-B393-B2FE4349053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "3C240840-A6BC-4E3D-A60D-22F08E67E2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC90563F-6BCB-4D77-8FD4-584E3A6C7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD03BA7-D9EC-420F-97C4-383F79D6873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "84F7C44C-E9ED-4DC4-8AFF-87FAB53EBF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97615",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038253",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA10781",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.juniper.net/JSA10781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2316",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un usuario malicioso autenticado provocar un desbordamiento de búfer conduciendo a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97601",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2317",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure, modification of system states, and partial to full denial of services relying upon data modified by an attacker."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir que un atacante no autenticado, sin privilegios y basado en la red, provoque denegaciones de servicio a las tablas de bases de datos subyacentes conduciendo a la divulgación potencial de información, modificación de estados del sistema y una denegación de parcial a completa de los servicios basados en los datos modificados por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97652",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2318",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir que un usuario malicioso autenticado lea archivos de registro lo que comprometerá la integridad del sistema o proporcionará elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97660",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2319",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authentic end users and systems as a result."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso comprometer los sistemas de confidencialidad o integridad sin autenticación, conduciendo a que los sistemas gestionados se vean comprometidos o que se denieguen servicios a usuarios finales auténticos y sistemas como resultado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97659",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2320",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the NorthStar system, including managed systems, and full denial of services to any systems under management which NorthStar interacts with using read-only or read-write credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir que un atacante no autenticado, sin privilegios y basado en la red, provoque varias denegaciones de servicio conduciendo a la divulgación de información específica, modificación de cualquier componente del sistema NorthStar, incluyendo los sistemas gestionados y la denegación de servicio total de cualquier sistema bajo gestión con el que NorthStar interactúe utilizando credenciales de solo lectura o de lectura y escritura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97687",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2321",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potential disclosure of sensitive information which may assist the attacker in further attacks on the system through the use of multiple attack vectors, including man-in-the-middle attacks, file injections, and malicious execution of commands causing out of bound memory conditions leading to other attacks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante no autenticado, sin privilegios y basado en la red, provocar varias denegaciones de servicio parciales o totales de los servicios del sistema, modificación de estados y archivos del sistema y divulgación potencial de información sensible que puede ayudar al atacante en ataques adicionales al sistema mediante el uso de múltiples vectores de ataque, incluyendo ataques man-in-the-middle, inyecciones de archivos y ejecución maliciosa de comandos que provocan condiciones de memoria fuera de límites conduciendo a otros ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97693",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2323",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso manipular paquetes destinados al dispositivo para provocar una denegación de servicio persistente al servicio de servidor de cálculo de ruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97600",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2324",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso basado en la red, provocar una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97604",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2325",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un usuario malicioso autenticado provocar un desbordamiento de búfer conduciendo a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97602",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2326",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future analysis."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante no privilegiado, autenticado y basado en la red, reproducir la VM subyacente del SO Junos y todos los datos que mantiene en su sistema local para análisis futuro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97691",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2327",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading to a cascading denial of services."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un usuario malicioso autenticado consumir grandes cantidades de recursos del sistema conduciendo a una denegación de servicios en cascada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97609",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2328",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fuga de información en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un usuario autenticado, no privilegiado, elevar sus permisos a través de la lectura de información no privilegiada almacenada en el controlador NorthStar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97617",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2329",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación insuficiente en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un usuario autenticado, no privilegiado, ejecutar determinados archivos específicos del sistema no privilegiados capaces de provocar denegaciones generalizadas de los servicios del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97614",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2330",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves, until all resources are consumed on the system, leading to a denial of service to the entire system until it is restarted. Continued attacks by an unauthenticated, local user, can lead to persistent denials of services."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un usuario local, no autenticado, crear un escenario de bomba fork, también conocido como virus de conejo, o wabbir, lo que creará procesos que se replican ellos mismos, hasta que todos los recursos se consuman en el sistema, conduciendo a una denegación de servicio a todo el sistema hasta que se reinicie. Los ataques continuos de un usuario local no autenticado pueden llevar a denegaciones de servicios persistentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97618",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2331",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and denials of service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elusión de cortafuegos en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso basado en red, eludir las políticas de firewall, conduciendo a métodos de elusión de autenticación, divulgación de información, modificación de archivos del sistema y denegaciones de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97619",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2332",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación insuficiente en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso, no autenticado basado en red, realizar acciones privilegiadas para obtener un control total sobre el entorno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97624",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2333",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain specific URLs on the server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio persistente en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso, no autenticado basado en red, consumir suficientes recursos del sistema para provocar una denegación de servicio persistente visitando determinadas URLs específicas en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97608",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2334",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fuga de información en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1 puede permitir a un atacante malicioso basado en red realizar un ataque man-in-the-middle, robando credenciales auténticas de rutas cifradas que son fácilmente descifrables y posteriormente obtener el control completo del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97616",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2340",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T15:59:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash."
      }, {
        "lang" : "es",
        "value" : "En Juniper Networks Junos OS 15.1 en versiones desde la 15.1R3 a la 15.1R4, 16.1 anterior a 16.1R3, en plataformas M/MX donde se configura Enhanced Subscriber Management para suscriptores DHCPv6, una vulnerabilidad en el procesamiento de paquetes IPv6 ND originados de suscriptores y destinados a los enrutadores de las series M/MX puede ocasionar un cuelgue o una caída de PFE (Packet Forwarding Engine)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97607",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038254",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA10786",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.juniper.net/JSA10786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T16:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), and 4.4 (Beryllium-SR4) are affected by this flaw. Java version is openjdk version 1.8.0_91."
      }, {
        "lang" : "es",
        "value" : "Un ataque de Denegación de Servicio cuando el switch rechaza recibir paquetes desde el controlador. Componente: esta vulnerabilidad afecta a odl-l2switch-switch de OpenDaylight, que es la funcionalidad responsable de la comunicación OpenFlow. Versión: OpenDaylight versiones 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), y 4.4 (Beryllium-SR4) están afectadas por este fallo. La versión de Java es openjdk versión 1.8.0_91."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FD8348-24EC-475F-BD62-3016974CC7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A55DD45-1D93-4EFC-9574-055E3BC8A4E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T16:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains this flaw. Version: OpenDaylight 4.0 is affected by this flaw."
      }, {
        "lang" : "es",
        "value" : "El controlador lanza una excepción y no permite al usuario agregar flujo posterior para un switch en particular. Componente: La característica OpenDaylight odl-restconf contiene este fallo. Versión: OpenDaylight 4.0 se ve afectada por este fallo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A55DD45-1D93-4EFC-9574-055E3BC8A4E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T16:59:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0."
      }, {
        "lang" : "es",
        "value" : "Error de falta de memoria en Java y aumento significativo en el consumo de recursos. Componente: OpenDaylight odl-mdsal-xsql es vulnerable a este fallo. Versión: Las versiones probadas son OpenDaylight 3.3 y 4.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FD8348-24EC-475F-BD62-3016974CC7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A55DD45-1D93-4EFC-9574-055E3BC8A4E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T16:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0."
      }, {
        "lang" : "es",
        "value" : "StreamCorruptedException y NullPointerException en OpenDaylight odl-mdsal-xsql. El controlador inicia excepciones en la consola. Componente: OpenDaylight odl-mdsal-xsql es vulnerable a este fallo. Versión: las versiones probadas son OpenDaylight 3.3 y 4.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FD8348-24EC-475F-BD62-3016974CC7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A55DD45-1D93-4EFC-9574-055E3BC8A4E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T16:59:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0."
      }, {
        "lang" : "es",
        "value" : "DOMRpcImplementationNotAvailableException al enviar paquetes Port-Status a OpenDaylight. El controlador inicia excepciones y consume más recursos de la CPU. Componente: OpenDaylight es vulnerable a este fallo. Versión: las versiones probadas son OpenDaylight 3.3 y 4.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FD8348-24EC-475F-BD62-3016974CC7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A55DD45-1D93-4EFC-9574-055E3BC8A4E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2322",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-04-24T18:59:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system services."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Juniper Networks NorthStar Controller Application anterior a la versión 2.1.0 Service Pack 1, puede permitir que un usuario autenticado provoque denegaciones de servicio generalizadas a los servicios del sistema consumiendo puertos TCP y UDP que normalmente están reservados para otros servicios del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "BBCC1859-771C-44AC-A4C1-AAA6A5E6C1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97613",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5191",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-04-24T18:59:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de XSS en el URI /NAGErrors en NetIQ Access Manager 4.2 y 4.3 porque las páginas de Access Gateway Error no validan el encabezado HTTP Referer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20239843-9281-4AEA-A8DE-E0FECFAE7BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51430A7A-F79D-445D-ABF8-A8B4ADE98FC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98093",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018793",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7018793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body."
      }, {
        "lang" : "es",
        "value" : "Existe XSS en Easy WP SMTP (en versiones anteriores a 1.2.5), un Plugin de WordPress, a través del asunto o cuerpo del correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-ecommerce:easy_wp_smtp:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.4",
            "matchCriteriaId" : "490D8F85-5593-4018-8147-3E96767ECDB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/easy-wp-smtp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-wp-smtp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker."
      }, {
        "lang" : "es",
        "value" : "e107 2.1.4 es vulnerable a CSRF en la instalación de plugins, el meta cambio y el cambio de configuración. Una página web maliciosa puede utilizar solicitudes falsificadas para hacer una descarga e107 e instalar un plug-in proporcionado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787202B4-C2E4-492E-8FFA-0A567F2E3734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/e107inc/e107/commit/7a3e3d9fc7e05ce6941b9af1c14010bf2141f1a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/e107inc/e107/commit/7a3e3d9fc7e05ce6941b9af1c14010bf2141f1a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request."
      }, {
        "lang" : "es",
        "value" : "Hay CSRF en el plugin WHIZZ en versiones anteriores a 1.1.1 para WordPress, permitiendo a los atacantes eliminar cualquier usuario de WordPress y cambiar el estado del plugin a través de una solicitud GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:browserweb_inc:whizz:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "09A741A9-9F9A-4F4B-8E85-B4A712181E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/whizz/trunk/change_log.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/whizz/trunk/change_log.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings."
      }, {
        "lang" : "es",
        "value" : "Hay CSRF en el plugin CopySafe Web Protection en versiones anteriores a 2.6 para WordPress, permitiendo a los atacantes cambiar la configuración del plugin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artistscope:copysafe_web_protection:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "73400596-7587-4868-BCAB-B511AF676AED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wordpress.org/plugins/wp-copysafe-web/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wordpress.org/plugins/wp-copysafe-web/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request."
      }, {
        "lang" : "es",
        "value" : "Hay CSRF en Serendipity 2.0.5, permitiendo a atacantes instalar cualquier tema a través de una solicitud GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62698057-2D97-42F0-913C-76CB939804FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/452",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipity_event_xsstrust plugin and a set_config error in that plugin."
      }, {
        "lang" : "es",
        "value" : "XSS almacenado en Serendipity v2.1-rc1 permite a un atacante robar una cookie de un administrador y otra información componiendo una nueva entrada como un usuario editor. Esto está relacionado con la falta del plugin serendipity_event_xsstrust plugin y un error set_config en ese plugin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3A96D8-7D15-4365-A30D-FD4A72D3141B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/44",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/456",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s9y/Serendipity/issues/456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event."
      }, {
        "lang" : "es",
        "value" : "En MyBB en versiones anteriores a 1.8.11, el componente Email MyCode permite XSS, como lo demuestra un evento onmouseover."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.10",
            "matchCriteriaId" : "EA5913D3-77D8-4093-9225-0B1BDE2A9B5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/53",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter."
      }, {
        "lang" : "es",
        "value" : "En MyBB en versiones anteriores a 1.8.11, el módulo smilie permite Salto de Directorio a través del parámetro pathfolder."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.10",
            "matchCriteriaId" : "EA5913D3-77D8-4093-9225-0B1BDE2A9B5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/55",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98045",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T18:59:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c."
      }, {
        "lang" : "es",
        "value" : "FreeType 2 en versiones anteriores a 24-03-2017 tiene una escritura fuera de limites provocada por un desbordamiento de búfer relacionado con la función t1_decoder_parse_charstrengs en psaux/t1decode.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "00F6519F-A001-4D60-BB62-96C226DD828A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f958c48ee431bef8d4d466b40c9cb2d4dbcb7791",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3839",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99093",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=935",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f958c48ee431bef8d4d466b40c9cb2d4dbcb7791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3230",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 11.1.1.9, 12.2.1.1 and 12.2.1.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Fusion Middleware MapViewer accessible data as well as unauthorized read access to a subset of Oracle Fusion Middleware MapViewer accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Fusion Middleware MapViewer. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Oracle Fusion Middleware MapViewer componente de Oracle Fusion Middleware (subcomponent: Map Builder). Versiones compatibles que son afectadas son 11.1.1.9, 12.2.1.1 y 12.2.1.2. Vulnerabilidad fácilmente explotable permite a un atacante sin acceso con acceso a la red a través de HTTP comprometer Oracle Fusion Middleware MapViewer. Los ataques con éxito de esta vulnerabilidad pueden dar lugar a la creación, eliminación o modificación no autorizadas de acceso a datos críticos a todos los datos accesibles de Oracle Fusion Middleware MapViewer, así como al acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Fusion Middleware MapViewer y capacidad no autorizada para causar una denegación parcial De servicio (DOS parcial) de Oracle Fusion Middleware MapViewer. CVSS 3.0 Base Score 8.6 (Confidencialidad, Integridad y Disponibilidad Impactos). Vector CVSS: (CVSS: 3.0/AV: N/AC: L/PR: N/UI: N/S: U/C: L/I: H/A: L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:C/A:P",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fusion_middleware_mapviewer:11.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AD9DBE-3963-4DD1-AE27-41EBA76F7F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92365CC5-7119-4814-B9D9-1FFA9544CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D151B58F-5583-4F19-B225-80075B45441B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97746",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3232",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Automatic Service Request (ASR) accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Automatic Service Request (ASR) componente de Oracle Support Tools (subcomponent: ASR Manager). la versión soportada que está afectada es anterior a 5.7.La vulnerabilidad fácilmente \"explotable\" permite a atacantes poco privilegiados con login a la infraestructura en Automatic Service Request (ASR) ejecutar compromiso Automatic Service Request (ASR). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de ASR (Automatic Service Request) CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97806",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3233",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Automatic Service Request (ASR) accessible data. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Automatic Service Request (ASR) componente de Oracle Support Tools (subcomponent: ASR Manager). la versión soportada que está afectada es anterior a 5.7.La vulnerabilidad fácilmente explotable permite a un atacante sin acceso con acceso a la red a través de HTTP comprometer Automatic Service Request (ASR). Ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación de datos accesibles Automatic Service Request (ASR). CVSS 3.0 Base Score 7.5 (impactos de integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97799",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3234",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Automatic Service Request (ASR) componente de Oracle Support Tools (subcomponente: ASR Manager). La versión soportada que está afectada es anterior a 5.7. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de SFT comprometer Automatic Service Request (ASR). Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Automatic Service Request (ASR). CVSS 3.0 Base Score 9.8 (Confidencialidad, Integridad y Disponibilidad impactos). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97794",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3237",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Automatic Service Request (ASR) de Oracle Support Tools (subcomponente: ASR Manager). La versión soportada que está afectada es anterior a 5.7. La vulnerabilidad fácilmente \"explotable\" permite a un atacante poco privilegiado con login a la infraestructura donde Automatic Service Request (ASR) ejecuta para comprometer Automatic Service Request (ASR). Los ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de la solicitud automática de servicio (ASR). CVSS 3.0 Base Score 7.8 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3254",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 12.0 and 13.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Invoice Matching. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Invoice Matching accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Invoice Matching accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Invoice Matching. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Invoice Matching de Oracle Retail Applications (subcomponente: Security). Las versiones compatibles que son afectadas son 12.0 y 13.0. La vulnerabilidad fácilmente \"explotable\" permite a un atacante no autenticado con acceso a la red comprometer Oracle Retail Invoice Matching a través de HTTP. Los ataques exitosos requieren interacción humana de una persona diferente al atacante. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a un acceso no autorizado a datos críticos o a un acceso completo a todos los datos accesibles de Oracle Retail Invoice Matching, así como a actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle Retail Invoice Matching y capacidad no autorizada para causar un error parcial. Denegación de servicio (DOS parcial) de Oracle Retail Invoice Matching. CVSS 3.0 Base Score 7.6 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:P/A:P",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D1FAEE-65FD-47EB-9F4D-505C72000F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C45FF05-FB76-4782-891E-F4A8A4871A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97756",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3288",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Investor Serviceng de Oracle Financial Services Applications (subcomponente: Unit Trust). Las versiones compatibles que son afectadas son 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 y 12.3.0.La vulnerabilidad fácilmente \"explotable\" permite a un atacante poco privilegiado con acceso a la red comprometer Oracle FLEXCUBE Investor Servicing a través de HTTP. Los ataques exitosos de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertsar o eliminar el acceso a algunos de los datos accesibles de Oracle FLEXCUBE Investor Servicing, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Investor Serviceng. CVSS 3.0 Base Score 5.4 (Impactos de Confidencialidad e Integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E280A03-DE42-415B-8B0C-3C16941FF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9058C7C8-54CE-42C5-8D41-BD0074BA0F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ECA56F-B305-4CEF-8DF0-4D757DC956F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A34DF8-72CC-4A8E-84F2-C2DF4A0B9FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE77B2-6368-470E-B9E6-21664D9A818A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1000A73E-BFB4-47BB-BCA7-4CF0C2C76B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3250073F-325A-4AFC-892F-F2005E3854A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97795",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3304",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Cluster de Oracle MySQL (subcomponente: Cluster: DD). Las versiones compatibles que son afectadas son 7.2.27 y versiones anteriores, 7.3.16 y versiones anteriores, 7.4.14 y versiones anteriores y 7.5.5 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante poco privilegiados con acceso a la red comprometer MySQL Cluster a través de multiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en una actualización no autorizada, insetar o eliminar el acceso a algunos de los datos accesibles de MySQL Cluster y la capacidad no autorizada para causar una denegación parcial de servicio (DOS parcial) de MySQL Cluster.CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.27",
            "matchCriteriaId" : "A7A69FF8-2F17-414F-9CF6-B14CA474143D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.16",
            "matchCriteriaId" : "345146D4-C617-4739-AA4A-B69831666C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.14",
            "matchCriteriaId" : "E034824F-8576-4069-950F-7EC7E6491B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "09790BEE-1DC1-4156-A788-49910FB7D9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97815",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3305",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, \"The Riddle\"."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Servidor: C API). Las versiones compatibles que se ven afectadas son versión 5.5.55 y anteriores y versión 5.6.35 y anteriores. Una vulnerabilidad difícil de explotar permite que un atacante con pocos privilegios con acceso a la red por medio de múltiples protocolos ponga en peligro el servidor MySQL. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o acceso completo a todos los datos disponibles del Servidor MySQL. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTA: la información anterior es de la CPU de abril de 2017. Oracle no ha comentado sobre las afirmaciones de terceros de que este problema permite a los atacantes de tipo man-in-the-middle secuestrar la autenticación de los usuarios aprovechando el pedido incorrecto de la comprobación de los parámetros de seguridad en un cliente, también conocido como \"The Riddle\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.55",
            "matchCriteriaId" : "27D45A43-30B5-47DA-89EB-FD60686A050D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://riddle.link/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/17/3",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97023",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://riddle.link/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3306",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Enterprise Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Enterprise Monitor accessible data as well as unauthorized access to critical data or complete access to all MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Enterprise Monitor de Oracle MySQL (subcomponente: Monitoreng: Server). Las versiones compatibles que están afectadas son 3.1.6.8003 y versiones anteriores, 3.2.1182 y versiones anteriores y 3.3.2.1162 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante altamente privilegiado con acceso a la red comprometer MySQL Enterprise Monitor a través de múltiples protocolos. Los ataques exitosos requieren interacción humana de una persona diferente al atacante y mientras la vulnerabilidad esté en MySQL Enterprise Monitor, los ataques pueden impactar significativamente productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en creación, borrado o modificación de acceso no autorizado a datos críticos o a todos los datos accesibles de MySQL Enterprise Monitor así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de MySQL Enterprise Monitor y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.3 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:P",
            "baseScore" : 8.2,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 9.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.6.8003",
            "matchCriteriaId" : "89091B98-A6F4-4ACA-9C72-340B38F88C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.1182",
            "matchCriteriaId" : "06F296B9-BD05-4A25-8F60-18752ACE7B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.2.1162",
            "matchCriteriaId" : "2C0E67D9-A588-4BE4-8B47-643B622877EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97724",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3307",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. CVSS 3.0 Base Score 3.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Enterprise Monitor de Oracle MySQL (subcomponente: Monitoring: Server). Las versiones compatibles que están afectadas son 3.1.6.8003 y versiones anteriores, 3.2.1182 y versiones anteriores y 3.3.2.1162 y versiones anteriores. La vulnerabilidad difícil de explotar permite a un atacante altamente privilegiado con acceso de red comprometer MySQL Enterprise Monitor a través de múltiples protocolos. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, inserción o borrado de acceso de algunos datos accesibles de MySQL Enterprise Monitor y capacidad no autorizada para provocar una denegación parcia de servicio (DOS parcial) de MySQL Enterprise Monitor. CVSS 3.0 Base Score 3.1 (Impactos de Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.6.8003",
            "matchCriteriaId" : "89091B98-A6F4-4ACA-9C72-340B38F88C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.1182",
            "matchCriteriaId" : "06F296B9-BD05-4A25-8F60-18752ACE7B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.2.1162",
            "matchCriteriaId" : "2C0E67D9-A588-4BE4-8B47-643B622877EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97844",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3308",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que están afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante poco privilegiado con acceso de red comprometer MySQL Server a través de múltiples protocolos. Mientras la vulnerabilidad esté en MySQL Server, los ataques podrían afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 7.7 (Impactos de disponibilidad). Vector CVSS (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.55",
            "matchCriteriaId" : "88990BBC-2BEC-41C1-8628-5B78AEAAEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.31",
            "matchCriteriaId" : "26EA39AC-30B8-4B6D-8102-7FB6DFB039DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.23",
            "matchCriteriaId" : "74FFC133-599E-4C49-9960-C6C98A152AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "0C9E5349-AF9A-4C01-B935-A325E50E529B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97725",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3309",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores and 5.7.17 y versiones anteriores.La vulnerabilidad fácilmente \"explotable\" permite a atacantes poco privilegiados con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Mientras la vulnerabilidad esté en MySQL Server, los ataques podrían afectar significativamente a productos adicionales. Ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 7.7 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.55",
            "matchCriteriaId" : "88990BBC-2BEC-41C1-8628-5B78AEAAEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.31",
            "matchCriteriaId" : "26EA39AC-30B8-4B6D-8102-7FB6DFB039DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.23",
            "matchCriteriaId" : "74FFC133-599E-4C49-9960-C6C98A152AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "0C9E5349-AF9A-4C01-B935-A325E50E529B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97742",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3329",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Thread Pooleng). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores and 5.7.17 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante no autenticado con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o un bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 7.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97763",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3331",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DML). La versión soportada que es afectada es 5.7.11 a 5.7.17.La vulnerabilidad fácilmente \"explotable\" permite a un atacante poco privilegiado con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A107-9B65-43C0-9EBA-69D83987F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304EA995-F08B-4401-8736-515583E1027C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B3F4DB-9290-448F-A41F-4ACE1802EB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA58E346-4DEE-4429-9B57-41C05EE258F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62601284-98D9-403F-8270-300AE1AB8A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B210C1E-8220-40DA-9976-2BFE209DD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69905126-C49A-4C38-8C31-6E34CA4E8322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97772",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3337",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: User Interface). Las versiones compatibles que están afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente \"exploitable\" permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Marketing. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Marketing, los ataques pueden impactar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Marketing, así como también en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Marketing. CVSS 3.0 Puntuación Base 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3393",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Interaction History). Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: Interaction History). Las versiones compatibles que están afectadas son 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente \"exploitable\" permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Advanced Outbound Telephony. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Advanced Outbound Telephony, los ataques pueden impactar significativamente otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony, así como también en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Advanced Outbound Telephony. CVSS 3.0 Puntuación Base 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97761",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3432",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: Audience workbench). Las versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Una vulnerabilidad fácilmente \"exploitable\" permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer el Oracle One-to-One Fulfillment. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle One-to-One Fulfillment, los ataques pueden impactar significativamente los productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment, así como también en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle One-to-Fulfillment de Oracle. CVSS 3.0 Puntuación Base 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3450",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Memcached). Las versiones compatibles que son afectadas son 5.6.35 y versiones anteriores, 5.7.17 y veriones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante no autenticado con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o un bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 7.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97747",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3451",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Open Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Open Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Open Commerce Platform de Oracle Retail Applications (subcomponent: Web). Las versiones compatibles que son afectadas son 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 y 16.0. La vulnerabilidad fácilmente \"explotable\" permite a un atacante de bajo privilegio con acceso a la red comprometer Oracle Retail Open Commerce Platform a través de HTTP. Los ataques exitosos requieren interacción humana de una persona distinta al atacante y mientras que la vulnerabilidad esté en Oracle Retail Open Commerce Platform, los ataques pueden impactar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizado a algunos de los datos acesibles de Oracle Retail Open Commerce Platform, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Retail Open Commerce Platform. CVSS 3.0 Base Score 5.4 (Impactos de conficdencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042100EF-3D10-4893-A185-ABDF8AD5764A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB0E2F7-2697-484B-BD35-23B1022D819D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48C408E-A113-461C-AED4-484006FAE8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8603FF9-0CBF-4D32-BD99-D6A991DA2484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E8EAD1-68CF-45CC-B188-8ADAF98E6357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B78698-DE10-469A-8B55-9E1123762E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A349926F-1CF0-434F-88BC-710CC71BC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F064EB1-E38F-4561-ADD0-D349F7B28A14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97741",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3452",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponent: Server: Optimizer). Las versiones compatibles que son afectadas son 5.6.35 and versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante de bajo privilegio con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un cuelgue o un bloqueo frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (Impactos de disponibilidad).Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "4558EEAE-8014-4623-95DC-727A89CDCA5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97779",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3453",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante de bajo privilegio con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para causar un cuelgue o un bloque repetible (DOS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.55",
            "matchCriteriaId" : "88990BBC-2BEC-41C1-8628-5B78AEAAEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.31",
            "matchCriteriaId" : "26EA39AC-30B8-4B6D-8102-7FB6DFB039DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.23",
            "matchCriteriaId" : "74FFC133-599E-4C49-9960-C6C98A152AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "0C9E5349-AF9A-4C01-B935-A325E50E529B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97776",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3454",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: InnoDB). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante de alto privilegio con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para causar un cuelgue o un bloque repetible ( DOS completo) de MySQL Server así como actualización no autorizada,insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server. CVSS 3.0 Base Score 5.5 (Impactos de Integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3455",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Privileges). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores. La vulnerabilidad fácilmente \"explotable\" permite a un atacante de bajo privilegio con acceso a la red comprometer MySQL Server a través de múltiples protocolos. Los ataques exitosos de esta vulnerabilidad pueden resultar en actualizacion no autorizada insertar o eliminar acceso a algunos de los datos accesibles de MySQL Server, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97820",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3456",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores.Vulnerabilidad facilmentemente \"explotable\" permite al atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.55",
            "matchCriteriaId" : "88990BBC-2BEC-41C1-8628-5B78AEAAEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.31",
            "matchCriteriaId" : "26EA39AC-30B8-4B6D-8102-7FB6DFB039DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.23",
            "matchCriteriaId" : "74FFC133-599E-4C49-9960-C6C98A152AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "0C9E5349-AF9A-4C01-B935-A325E50E529B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97831",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3457",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97845",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3458",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97837",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3459",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97847",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3460",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Audit Plug-in). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97826",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3461",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Privileges). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97812",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3462",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Privileges). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97851",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3463",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Privileges). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en habilidad no autorizada para provocar un bloqueo o repetible caída de frecuencia (complete DOS) de MySQL Server. CVSS 3.0 Base Score 4.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97849",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3464",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: DDL). Las versiones compatibles que son afectadas son 5.5.54 y versiones anteriores, 5.6.35 y versiones anteriores y 5.7.17 y versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacante de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server. do. CVSS 3.0 Base Score 4.3 (Impactos de Integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.55",
            "matchCriteriaId" : "88990BBC-2BEC-41C1-8628-5B78AEAAEC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.31",
            "matchCriteriaId" : "26EA39AC-30B8-4B6D-8102-7FB6DFB039DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.23",
            "matchCriteriaId" : "74FFC133-599E-4C49-9960-C6C98A152AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "0C9E5349-AF9A-4C01-B935-A325E50E529B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97818",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3465",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Privileges). Las versiones compatibles que son afectadas son 5.7.17 and versiones anteriores. Vulnerabilidad fácilmente explotable permite a atacante de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server. do. CVSS 3.0 Base Score 4.3 (Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97822",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3467",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: C API). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores.Vulnerabilidad dificil de explotar permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos para MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server. CVSS 3.0 Base Score 3.7 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97825",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3468",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Security: Encryption). Las versiones compatibles que son afectadas son 5.7.17 y versiones anteriores.Vulnerabilidad dificil de explotar permite a atacante de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server.. CVSS 3.0 Base Score 3.1 (Impactos de intregridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "6E11E000-1537-4DE2-9F20-C135557AA98B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97848",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3469",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption). Supported versions that are affected are 6.3.8 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Workbench accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Workbench de Oracle MySQL (subcomponente: Workbench: Security : Encryption). Las versiones compatibles que son afectadas son 6.3.8 y versiones anteriores. Vulnerabilidad dificil de explotar permite a un atacante no autenticado con acceso a la red a través de multiples protocolos explotar MySQL Workbench. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Workbench. CVSS 3.0 Base Score 3.7 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.8",
            "matchCriteriaId" : "CB907FB6-441B-4E9D-B6B3-81AB6515B7B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97833",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3470",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications (subcomponent: Network). The supported version that is affected is 3.0.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via ICMP Ping to compromise Oracle Communications Security Gateway. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Security Gateway. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente de Oracle Communications Security Gateway componente de Oracle Communications Applications (subcomponente: Network). La versión compatible que es afectada es 3.0.0. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de ICMP Ping comprometer Oracle Communications Security Gateway. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar una denegación parcial de servicio (partial DOS) de Oracle Communications Security Gateway. CVSS 3.0 Base Score 5.3 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_security_gateway:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F0491E-CBEF-47BB-A09D-4F7B5F7952EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3471",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 12.0.0 and 12.1.0. Vulnerabilidad fácilmente explotables permite a atacante no autenticado con acceso a la red vía HTTP comprometer Oracle FLEXCUBE Private Banking. Ataques exitosos requieren la interacción humana de una persona que no sea el atacante y mientras la vulnerabilidad está en Oracle FLEXCUBE Private Banking, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 4.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6762F207-93C7-4363-B2F9-7A7C6F8AF993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B74B912-152D-4F38-9FC1-741D6D0B27FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97828",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3472",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio Management). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Private Banking accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Portfolio Management). Versiones compatibles que son afectadas son 2.0.0, 2.0.1, 2.2.0.1 y 12.0.1. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden provocar creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle FLEXCUBE Private Banking, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:N",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5104F0A-CD23-4A6E-AD59-B6F5A949B006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97734",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3473",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 2.0.0, 2.0.1, 2.2.0.1 y 12.0.1. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking.CVSS 3.0 Base Score 4.3 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5104F0A-CD23-4A6E-AD59-B6F5A949B006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97850",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3474",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Solaris componente de Oracle Sun Systems Products Suite (subcomponente: Zone). La versión soportada que es afectada es 11.3. Vulnerabilidad fácilmente explotable permite a atacante de bajo privilegio con conexión a la infraestructura donde Solaris ejecuta comprometer Solaris. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Solaris.. CVSS 3.0 Base Score 3.3 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3475",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:01.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. While the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 2.0.0, 2.0.1, 2.2.0.1 y 12.0.1. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Private Banking. Aunque la vulnerabilidad se encuentra en Oracle FLEXCUBE Private Banking, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en capacidad no autorizada para causar una denegación parcial de servicio ( partial DOS) de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.0 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5104F0A-CD23-4A6E-AD59-B6F5A949B006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97816",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3476",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 2.0.0, 2.0.1, 2.2.0.1 y 12.0.1. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Private Banking, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 7.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:P/A:N",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5104F0A-CD23-4A6E-AD59-B6F5A949B006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97738",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3477",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6762F207-93C7-4363-B2F9-7A7C6F8AF993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B74B912-152D-4F38-9FC1-741D6D0B27FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97867",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3478",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Private Banking, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6762F207-93C7-4363-B2F9-7A7C6F8AF993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B74B912-152D-4F38-9FC1-741D6D0B27FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97800",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3479",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Versiones compatibles que son afectadas son 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Private Banking y la capacidad no autorizada de causar una denegación parcial del servicio (partial DOS) de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.4 (Integridad e impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5104F0A-CD23-4A6E-AD59-B6F5A949B006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97805",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3480",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 11.3.0, 11.4.0 y 12.0.1. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en Oracle FLEXCUBE Universal Banking, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.7 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97832",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3481",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 11.3.0, 11.4.0 y 12.0.1. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar una denegación parcial de servicio (partial DOS) de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.3 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97852",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3482",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y 12.3.0. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en Oracle FLEXCUBE Universal Banking, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking.CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9582BE-825E-4427-A3D9-39857AAC9D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97808",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3483",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle FLEXCUBE Enterprise Limits and Collateral Management executes to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits y Collateral Management de Oracle Financial Services Applications (subcomponente: Limits y Collateral). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad fácilmente explotable permite a atacante de alto privilegio con el inicio de sesión a la infraestructura en la que Oracle FLEXCUBE Enterprise Limits y Collateral Management se ejecuta para comprometer Oracle FLEXCUBE Enterprise Limits y Collateral Management. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Managemen.. CVSS 3.0 Base Score 4.4 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4EDFC7-C093-430B-AF1F-2746D427E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97846",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3484",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits y Collateral Management componente de Oracle Financial Services Applications (subcomponente: Limits y Collateral). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los límites de Oracle FLEXCUBE y la gestión de garantías. Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management. CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4EDFC7-C093-430B-AF1F-2746D427E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97786",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3485",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 y 12.2.0. Vulnerabilidad dificil de explotar permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle FLEXCUBE Universal Banking y capacidad no autorizada para causar un bloqueo o repetición frecuente de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.8 (Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9582BE-825E-4427-A3D9-39857AAC9D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97743",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3486",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the SQL*Plus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQL*Plus executes to compromise SQL*Plus. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in SQL*Plus, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of SQL*Plus. Note: This score is for Windows platform version 11.2.0.4 of Database. For Windows platform version 12.1.0.2 and Linux, the score is 6.3 with scope Unchanged. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente SQL*Plus de Oracle Database Server. Versiones compatibles que son afectadas son 11.2.0.4 y 12.1.0.2. Vulnerabilidad dificil de explotar permite que atacante con privilegios altos tenga privilegios de inicio de sesión local con el inicio de sesión en la infraestructura donde SQL*Plus se ejecuta para comprometer SQL*Plus. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en SQL Plus, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de SQL*Plus. Nota: Esta puntuación es para la plataforma de Windows versión 11.2.0.4 de la base de datos. Para la versión de plataforma de Windows 12.1.0.2 y Linux, la puntuación de el es 6.3 con el ámbito Sin cambios. CVSS 3.0 Base Score 7.2 (Confidencialidad, Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sql_plus:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFAC8A-118C-42CB-A983-29C82A369FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sql_plus:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42C2210-4C94-4341-A6E7-53A1D2CE758A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97870",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038284",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3487",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Investor Servicing de Oracle Financial Services Applications (subcomponente: Unit Trust). Versiones compatibles que son afectadas son 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E280A03-DE42-415B-8B0C-3C16941FF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9058C7C8-54CE-42C5-8D41-BD0074BA0F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ECA56F-B305-4CEF-8DF0-4D757DC956F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A34DF8-72CC-4A8E-84F2-C2DF4A0B9FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE77B2-6368-470E-B9E6-21664D9A818A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1000A73E-BFB4-47BB-BCA7-4CF0C2C76B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3250073F-325A-4AFC-892F-F2005E3854A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97871",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3488",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Investor Servicing de Oracle Financial Services Applications (subcomponente: Unit Trust). Versiones compatibles que son afectadas son 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 y 12.3.0. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer el servicio de inversionistas Oracle FLEXCUBE. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos o a todos los datos accesibles de Oracle FLEXCUBE Investor Servicing. CVSS 3.0 Base Score 6.5 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E280A03-DE42-415B-8B0C-3C16941FF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9058C7C8-54CE-42C5-8D41-BD0074BA0F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ECA56F-B305-4CEF-8DF0-4D757DC956F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A34DF8-72CC-4A8E-84F2-C2DF4A0B9FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE77B2-6368-470E-B9E6-21664D9A818A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1000A73E-BFB4-47BB-BCA7-4CF0C2C76B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3250073F-325A-4AFC-892F-F2005E3854A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97758",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3489",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Investor Servicing de Oracle Financial Services Applications (subcomponente: Security Management System). Versiones compatibles que son afectadas son 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 y 12.3.0. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer el servicio de inversionistas Oracle FLEXCUBE. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Investor Servicing, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Investor Servicing. CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E280A03-DE42-415B-8B0C-3C16941FF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9058C7C8-54CE-42C5-8D41-BD0074BA0F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ECA56F-B305-4CEF-8DF0-4D757DC956F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A34DF8-72CC-4A8E-84F2-C2DF4A0B9FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE77B2-6368-470E-B9E6-21664D9A818A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1000A73E-BFB4-47BB-BCA7-4CF0C2C76B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3250073F-325A-4AFC-892F-F2005E3854A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3490",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits y Collateral Management de Oracle Financial Services Applications (subcomponente: Limites y Colateral). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad dificil de explotar permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los límites corporativos y la gestión de garantías de Oracle FLEXCUBE. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management. CVSS 3.0 Base Score 3.1 (Impactos de Confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4EDFC7-C093-430B-AF1F-2746D427E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97869",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3491",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.1 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits y Collateral Management de Oracle Financial Services Applications (subcomponente: Limits and Collateral). Versiones compatibles que son afectadas son 12.0.1 y 12.1.0. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los límites de Oracle FLEXCUBE y la gestión de garantías. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B9B8C1-B698-4674-B87F-D932AB4528F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97751",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3492",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits and Collateral Management de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los límites de Oracle FLEXCUBE y la gestión de garantías. Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management. CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4EDFC7-C093-430B-AF1F-2746D427E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97775",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3493",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. While the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Enterprise Limits and Collateral Management. CVSS 3.0 Base Score 8.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits and Collateral Management de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad fácilmente explotable permite a atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los límites de Oracle FLEXCUBE y la gestión de garantías. Aunque la vulnerabilidad está en Oracle FLEXCUBE Enterprise Limits y Collateral Management, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management y capacidad no autorizada para provocar una denegación parcial de servicio de Oracle FLEXCUBE Enterprise Limits y Collateral Management. CVSS 3.0 Base Score 8.5 (Confidencialidad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4EDFC7-C093-430B-AF1F-2746D427E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97726",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3494",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Retail Teller). Versiones compatibles que son afectadas son 11.3.0, 11.4.0, 12.0.1, 12.0.2 y 12.0.3. Vulnerabilidad fácilmente explotable permite a atacante inaudtenticado a la red a través de HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en Oracle FLEXCUBE Universal Banking, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Puntaje base 4.7 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97843",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3495",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Direct Banking de Oracle Financial Services Applications (subcomponente: Pre-Login). Versiones compatibles que son afectadas son 12.0.2 y 12.0.3. Vulnerabilidad fácilmente explotablePermite a atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Direct Banking. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras que la vulnerabilidad está en Oracle FLEXCUBE Direct Banking, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Direct Banking. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC13CF11-2880-41FA-9534-7874904FDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA84D97F-A400-4D39-B60A-63F3407E2B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97824",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3496",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Enterprise Limits y Collateral Management component of Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 12.0.0 y 12.1.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer los límites corporativos y la gestión de garantías de Oracle FLEXCUBE. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en los límites corporativos y la gestión de garantías de Oracle FLEXCUBE, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Enterprise Limits y Collateral Management.Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4EDFC7-C093-430B-AF1F-2746D427E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC88844B-B052-4915-846D-3B6DFDE47936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97766",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3497",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Remote Administration Daemon). La versión admitida afectada es 11.3. Vulnerabilidad fácil explotable permite autenticado atacante con acceso a la red a través de múltiples protocolos para comprometer Solaris. Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Solaris, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Solaris y la capacidad no autorizada de causar una denegación parcial de servicio (partial DOS) de Solaris. CVSS 3.0 Base Score 7.3 (Confidencialidad, integridad e impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97788",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3498",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). La versión soportada afectada es 11.3. Vulnerabilidad fácil explotable permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura donde Solaris ejecute comprometer Solaris. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Solaris. CVSS 3.0 Base Score 3.3 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97827",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3499",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware (subcomponent: Android Client). The supported version that is affected is prior to 11.1.12.0.0 (17019101). Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Social Network. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Social Network accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Social Network de Oracle Fusion Middleware (subcomponente: Android Client). La versión soportada afectada es anterior a 11.1.12.0.0 (17019101). Vulnerabilidad fácil explotable permite al atacante autenticado con acceso a la red a través de HTTPS comprometer Oracle Social Network. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Social Network.CVSS 3.0 Base Score 7.5 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:social_network:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596A53C-B813-4FA8-BDB8-F366090AB8DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97878",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3500",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Gateway. While the vulnerability is in Primavera Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Gateway accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Primavera Gateway. CVSS 3.0 Base Score 8.7 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera Gateway de Oracle Primavera Products Suite (subcomponente: Primavera Desktop Integration). Versiones compatibles que son afectadas son 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 y 16.2. Permite a atacante de alto privilegio con acceso a la red a través de HTTP comprometer Primavera Gateway. Aunque la vulnerabilidad está en Primavera Gateway, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Primavera Gateway y capacidad no autorizada para causar un bloqueo o repetición frecuente (Complete DOS) de Primavera Gateway.CVSS 3.0 Base Score 8.7 (Confidentiality and Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0AA1E5-EC73-4079-8F75-5EE4FAE245B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23ACA587-EC3D-4B4F-B738-343CB2D0CCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8949EA-F3BB-4B47-BAF8-1AB5143ECB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB53303-0265-4095-BE38-D9E6918EDDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBFA960-D242-43ED-8D4C-A60F01B70740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADAD14D-4836-4C74-A474-B8A044EED2EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0513B305-97EF-4609-A82E-D0CDFF9925BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97881",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3501",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera Unifier de Oracle Primavera Products Suite (subcomponente: Platform). Versiones compatibles que son afectadas son 9.13, 9.14, 10.0, 10.1, 15.1 y 15.2. Vulnerabilidad fácilmente explotable permite a atacante sin acceso a la red vía HTTP para comprometer Primavera Unifier. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en Primavera Unifier, los ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Primavera Unifier, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Primavera Unifier. CVSS 3.0 Base Score 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63BF9ED-CA82-4533-9217-4215D5F0C1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2889BC-5CA8-454B-A164-316B6A3076DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C10D6E-A155-465F-839B-6586816ED0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DDDDD-DF1F-40FA-8712-74415AA8027B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8A0650-C1A5-4C5A-8F01-9243531F678F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F274A413-4666-4B62-A152-C7452C474B90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97895",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3502",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products (subcomponent: Receivables). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Receivables. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Receivables accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FIN Receivables de Oracle PeopleSoft Products (subcomponente: Receivables). La versión soportada afectada es 9.2. Vulnerabilidad fácil explotable permite a un atacante autenticado con acceso a la red a través de HTTP comprometer a PeopleSoft Enterprise FIN Receivables. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de PeopleSoft Enterprise FIN Receivables. CVSS 3.0 Base Score 5.3 (Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_receivables:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D16F65-CAFD-4672-B8EE-12B710740771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97897",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3503",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access (Apache Commons BeanUtils). Versiones compatibles que son afectadas son 8.3, 8.4, 15.1, 15.2, 16.1 y 16.2. Vulnerabilidad fácilmente explotable permite que un atacante de bajo privilegio con acceso a la red a través de HTTP compromete a Primavera P6 Enterprise Project Portfolio Management. Aunque la vulnerabilidad está en la Gestión de Portafolio de Proyectos Primavera P6, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Primavera P6 Enterprise Project Portfolio Management CVSS 3.0 Base Score 9.9 (Confidencialidad, integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97891",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3504",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows unauthenticated attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Automatic Service Request (ASR) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Automatic Service Request (ASR). CVSS 3.0 Base Score 5.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Automatic Service Request (ASR) de Oracle Support Tools (subcomponente: ASR Manager). La versión soportada que es afectada es anterior a 5.7. Vulnerabilidad fácilmente explotable permite autenticado atacante con el inicio de sesión a la infraestructura donde se ejecuta ASR (Automatic Service Request) para comprometer la ASR (Automatic Service Request). Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles ASR (Automatic Service Request) y la capacidad no autorizada de causar una denegación parcial de servicio (DOS parcial) de ASR. CVSS 3.0 Base Score 5.1 (Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97797",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3505",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:02.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows unauthenticated attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Automatic Service Request (ASR) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Automatic Service Request (ASR). CVSS 3.0 Base Score 5.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Automatic Service Request (ASR) de Oracle Support Tools (subcomponente: ASR Manager). La versión soportada afectada es Antes de 5.7. Vulnerabilidad fácilmente explotable permite autenticado atacante con el inicio de sesión a la infraestructura donde se ejecuta ASR (Automatic Service Request) para comprometer la ASR (Automatic Service Request). Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles ASR (Automatic Service Request) y la capacidad no autorizada de causar una denegación parcial de servicio (partial DOS) de ASR. Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97814",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3506",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.037",
      "lastModified" : "2025-10-22T00:16:05.937",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Services). Versiones compatibles que son afectadas son 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 y 12.2.1.2. Vulnerabilidad dificil de explotar permite a atacante autenticado con acceso a la red a través de HTTP comprometer Oracle WebLogic Server. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle WebLogic Server, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 7.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2024-06-03",
      "cisaActionDue" : "2024-06-24",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Oracle WebLogic Server OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F57085F-A922-421B-BD10-ECC4F3CB34C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97884",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038296",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-3506",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3507",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design). Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Service Bus accessible data as well as unauthorized read access to a subset of Oracle Service Bus accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Service Bus. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Service Bus de Oracle Fusion Middleware (subcomponente: Web Console Design). Versiones compatibles que son afectadas son 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite que un atacante autenticado con acceso a la red a través de HTTP comprometa a Oracle Service Bus. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle Service Bus, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Service Bus y capacidad no autorizada para causar una denegación parcial de servicio (partial DOS) de Oracle Service Bus. CVSS 3.0 Base Score 7.3 (Confidencialidad, integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BEF219-45EC-4A53-A815-42FBE20FC300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_bus:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6853C119-CDD9-42FA-B1AA-90E3F9CDC1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_bus:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A7754F-900C-403D-B92A-CDFD7A62C115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_bus:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87334299-2D64-4F4B-893D-EB338B3E7D0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97888",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3508",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Gateway. While the vulnerability is in Primavera Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Primavera Gateway. CVSS 3.0 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera Gateway de Oracle Primavera Products Suite (subcomponente: Primavera Desktop Integration). Versiones compatibles que son afectadas son 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 y 16.2. Vulnerabilidad fácilmente explotable permite a atacante de alto privilegio con acceso a la red a través de HTTP comprometer Primavera Gateway. Aunque la vulnerabilidad está en Primavera Gateway, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Primavera Gateway. Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0AA1E5-EC73-4079-8F75-5EE4FAE245B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23ACA587-EC3D-4B4F-B738-343CB2D0CCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8949EA-F3BB-4B47-BAF8-1AB5143ECB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB53303-0265-4095-BE38-D9E6918EDDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBFA960-D242-43ED-8D4C-A60F01B70740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADAD14D-4836-4C74-A474-B8A044EED2EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0513B305-97EF-4609-A82E-D0CDFF9925BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97883",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97889",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3509",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded de Oracle Java SE (subcomponente: Networking). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 y 8u121; Java SE Embedded: 8u121. Vulnerabilidad dificil de explotar permite a atacante autenticado con acceso a la red a través de múltiples protocolos para comprometer Java SE, Java SE Embedded. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques con éxito de esta vulnerabilidad pueden resultar en la actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Java SE, Java SE Embedded y acceso de lectura no autorizado a un subconjunto de datos accesibles Java SE, Java SE Embedded. Nota: Esta vulnerabilidad se aplica a las implementaciones de Java, normalmente en clientes que ejecutan aplicaciones de Java Web Start en modo sandbox o en applets de Java protegidos, que cargan y ejecutan código no confiable (por ejemplo, código que proviene del Internet) y confían en el sandbox Java para seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 4.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "D344C52B-BE53-4CA0-A34F-7605F1291FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "86A7546D-3372-41CA-9E12-03F93259934A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "265E9C6F-F7FD-4F11-A775-D4DFE449DEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "0E710C31-C9F4-46BD-9377-19745C1B6F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAB36DB-1322-4979-9F93-C02122E8639C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "B40DE6E4-6F3B-4BF8-863A-5D8C4AE07E59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97737",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3510",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data. CVSS 3.0 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris component de Oracle Sun Systems Products Suite (subcomponente: Kernel Zones virtualized NIC driver). La versión soportada afectada es 11.3. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer Solaris. Aunque la vulnerabilidad está en Solaris, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos oa todos los datos accesibles de Solaris. CVSS 3.0 Base Score 7.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97813",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3511",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (subcomponente: JCE). Versiones compatibles que son afectadas son Java SE: 7u131 y 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13.Vulnerabilidad dificil de explotar permite a atacante autenticado con conexión a la infraestructura donde Java SE, Java SE Embedded, JRockit ejecuta comprometer Java SE, Java SE Embedded, JRockit. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en los ataques de Java SE, Java SE Embedded, JRockit, pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Java SE, Java SE Embedded, JRockit. Nota: Se aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones de Java Web Start y de Java. También se puede explotar mediante el suministro de datos a las API en el Componente especificado sin utilizar aplicaciones de Java Web Start en modo recinto de seguridad o complementos de Java protegidos, como a través de un servicio web.. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "D344C52B-BE53-4CA0-A34F-7605F1291FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "86A7546D-3372-41CA-9E12-03F93259934A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "265E9C6F-F7FD-4F11-A775-D4DFE449DEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "0E710C31-C9F4-46BD-9377-19745C1B6F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAB36DB-1322-4979-9F93-C02122E8639C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "B40DE6E4-6F3B-4BF8-863A-5D8C4AE07E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA90A3B9-9749-44F5-BAFC-40BA2BD37B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97731",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3512",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: AWT). Versiones compatibles que son afectadas son Java SE: 7u131 y 8u121. Vulnerabilidad dificil de explotar permite autenticado atacante con acceso a la red a través de múltiples protocolos para comprometer Java SE. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en Java SE, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en la adquisición de Java SE. Nota: Esta vulnerabilidad se aplica a las implementaciones de Java, normalmente en clientes que ejecutan aplicaciones de Java Web Start en modo sandbox o en applets de Java protegidos, que cargan y ejecutan código no confiable (por ejemplo, código que proviene del Internet) y confían en el sandbox Java para seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 8.3 (Confidencialidad, Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBA8749-EFC2-4055-A8AB-56D660C0BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "34D1F91C-50D2-4D6A-BF4B-1B86F6909565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4946FF-E16B-4188-8BEA-1D5ABFBD54DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "E463AEAC-F5DB-47E4-B863-E5D636895C51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "B92D4C9E-8707-4E05-B12D-28C1AFCE2637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97727",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3513",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a 5.0.38 y anteriores a 5.1.20. Vulnerabilidad dificil de explotar permite atacante de alto privilegio con el inicio de sesión a la infraestructura donde Oracle VM VirtualBox se ejecuta para comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VirtualBox.CVSS 3.0 Base Score 2.5 (Impactos ed confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.36",
            "matchCriteriaId" : "2574019C-A567-4A0C-BD19-56AE8B54E514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.1.18",
            "matchCriteriaId" : "76907A05-2665-4361-93B7-11DF5DCD901E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97736",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3514",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: AWT). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 y 8u121.Vulnerabilidad dificil de explotar permite a atacante autenticado con acceso a la red a través de múltiples protocolos para comprometer Java SE. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en Java SE, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en la adquisición de Java SE. Nota: Esta vulnerabilidad se aplica a las implementaciones de Java, normalmente en clientes que ejecutan aplicaciones de Java Web Start en modo sandbox o en applets de Java protegidos, que cargan y ejecutan código no confiable (por ejemplo, código que proviene del Internet) y confían en el sandbox Java para seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 8.3 (Confidencialidad e integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "D344C52B-BE53-4CA0-A34F-7605F1291FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "86A7546D-3372-41CA-9E12-03F93259934A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "265E9C6F-F7FD-4F11-A775-D4DFE449DEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "0E710C31-C9F4-46BD-9377-19745C1B6F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAB36DB-1322-4979-9F93-C02122E8639C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "B40DE6E4-6F3B-4BF8-863A-5D8C4AE07E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA90A3B9-9749-44F5-BAFC-40BA2BD37B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3515",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle User Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle User Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle User Management accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle User Management de Oracle E-Business Suite (subcomponente: User Name/Password Management). Las versiones compatibles que están afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente \"exploitable\" permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle User Management. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle User Management, los ataques pueden impactar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle User Management. CVSS 3.0 Puntuación Base 4.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/ I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E42C3CE-CA98-4C13-B41E-DF7A3FEC560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D2B444-B8D8-4A3D-BCCA-3B5280F05A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FDD0B52-77F6-4607-84F8-1BCF99DB1B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20ACF759-62E7-49D8-8F12-BE17B9CDCED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE8E3DE-52F5-4A15-BD38-683931DCD6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97783",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3516",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel Zones virtualized NIC driver). La versión soportada afectada es 11.3. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer Solaris. Aunque la vulnerabilidad está en Solaris, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para causar un bloqueo o un bloqueo de caída repetible (complete DOS) de Solaris. CVSS 3.0 Base Score 7.7 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97793",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3517",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente JD Edwards EnterpriseOne Tools de Oracle JD Edwards Products (subcomponente: Web Runtime SEC). La versión soportada afectada es 9.2. Vulnerabilidad fácil explotable permite autenticado atacante con acceso a la red a través de HTTP para comprometer JD Edwards EnterpriseOne Tools. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de JD Edwards EnterpriseOne Tools y capacidad no autorizada para causar una denegación parcial de servicio (partial DOS) de JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 6.5 (Confidencialidad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97722",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3518",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Enterprise Manager Base Platform de Oracle Enterprise Manager Grid Control (subcomponente: Discovery Framework). Versiones compatibles que son afectadas son 12.1.0, 13.1.0 y 13.2.0. Vulnerabilidad fácilmente explotable permite a un atacante autenticado con acceso a la red a través de HTTPS comprometer Enterprise Manager Base Platform. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un bloqueo o un bloqueo de caída repetible (complete DOS) de Enterprise Manager Base Platform. CVSS 3.0 Base Score 7.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6511F08F-4F2A-47DD-867D-687607EBC5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EED735-EC5C-470F-A14C-F566D4DCCEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9325CD6E-DB11-432D-A13D-3E353D52C66E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97720",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038297",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3519",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponente: Security). Versiones compatibles que son afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.5 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97885",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3520",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Fluid Core). Versiones compatibles que son afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos oa todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (Impactos de Integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97908",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3521",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM Purchasing accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM Purchasing de Oracle PeopleSoft Products (subcomponente: Supplier Registration). La versión soportada afectada es 9.2. Vulnerabilidad fácilmente explotable permite que un atacante de alto privilegio con acceso a la red a través de HTTP comprometa PeopleSoft Enterprise SCM Purchasing. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de PeopleSoft Enterprise SCM Purchasing, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise SCM Purchasing. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_purchasing:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD1EE51-F556-49EE-BDF9-5C189D13F2CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97877",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3522",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products (subcomponent: Vendor). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eSupplier Connection. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM eSupplier Connection accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM eSupplier Connection accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM eSupplier Connection component de Oracle PeopleSoft Products (subcomponente: Vendor). La versión soportada afectada es 9.2. Vulnerabilidad fácilmente explotable permite que un atacante de alto privilegio con acceso a la red a través de HTTP comprometa a PeopleSoft Enterprise SCM eSupplier Connection. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos o todos los datos accesibles de PeopleSoft Enterprise SCM eSupplier Connection, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise SCM eSupplier Connection. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_esupplier_connection:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453CEB9F-A9E5-4A6F-B7AB-758C839EB650"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97890",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3523",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Connectors de Oracle MySQL (subcomponente: Connector/J). Versiones compatibles que son afectadas son 5.1.40 y anteriores. Vulnerabilidad dificil de explotar permite a los atacantes de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer a MySQL Connectors. Aunque la vulnerabilidad está en MySQL Connectors, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de MySQL Connectors. CVSS 3.0 Base Score 8.5 (Confidencialidad, integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:connector\\/j:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.40",
            "matchCriteriaId" : "C6664D63-8C98-4753-B466-D497B2E63A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3840",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97982",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3524",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder Registration). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM Strategic Sourcing accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Strategic Sourcing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM Strategic Sourcing de Oracle PeopleSoft Products (subcomponente: Bidder Registration). La versión soportada afectada es 9.2. Vulnerabilidad fácil explotable permite a los atacantes de alto privilegio con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise SCM Strategic Sourcing. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos o todos los datos accesibles de PeopleSoft Enterprise SCM Strategic Sourcing, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise SCM Strategic Sourcing. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_strategic_sourcing:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B732E320-417F-40CE-9458-F80C9AE6AE1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97902",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3525",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products (subcomponent: Usability). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Service Procurement. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM Service Procurement accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Service Procurement accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM Service Procurement de Oracle PeopleSoft Products (subcomponente: Usability). La versión soportada afectada es 9.2. Vulnerabilidad fácilmente explotable permite que un atacante de alto privilegio con acceso a la red a través de HTTP comprometa a PeopleSoft Enterprise SCM Service Procurement. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos o todos los datos accesibles de PeopleSoft Enterprise SCM Service Procurement, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise SCM Service Procurement.. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_services_procurement:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F84A91-6917-42C8-BF3C-8572F1A9F1D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97882",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3526",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (subcomponente: JAXP). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 y 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Vulnerabilidad dificil de explotar permite autenticado atacante con acceso a la red a través de múltiples protocolos para comprometer Java SE, Java SE Embedded, JRockit. Los ataques exitosos de esta vulnerabilidad pueden resultar en una habilidad no autorizada para causar un bloqueo o un bloqueo repetible con frecuencia (DOS completo) de Java SE, Java SE Embedded, JRockit. Nota: Se aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones de Java Web Start y de Java. También se puede explotar mediante el suministro de datos a las API en el Componente especificado sin utilizar aplicaciones de Java Web Start en modo recinto de seguridad o complementos de Java protegidos, como a través de un servicio web.. CVSS 3.0 Base Score 5.9 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "D344C52B-BE53-4CA0-A34F-7605F1291FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "86A7546D-3372-41CA-9E12-03F93259934A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "265E9C6F-F7FD-4F11-A775-D4DFE449DEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6:update_141:*:*:*:*:*:*",
            "matchCriteriaId" : "0E710C31-C9F4-46BD-9377-19745C1B6F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAB36DB-1322-4979-9F93-C02122E8639C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "B40DE6E4-6F3B-4BF8-863A-5D8C4AE07E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA90A3B9-9749-44F5-BAFC-40BA2BD37B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97733",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3527",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Fluid Core). Versiones compatibles que son afectadas son 8.54 and 8.55. Vulnerabilidad fácilmente explotable permite a atacante autenticado con acceso a la red a través de HTTP para comprometer PeopleSoft Enterprise PeopleTools. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97874",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3528",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Applications Framework de Oracle E-Business Suite (subcomponente: Popup windows (lists of values, datepicker, etc.)). Las versiones compatibles que están afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente \"exploitable\" permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Applications Framework. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y aunque la vulnerabilidad está en Oracle Applications Framework, los ataques pueden impactar significativamente los productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Applications Framework. CVSS 3.0 Puntuación Base 4.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_framework:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3A05B2-9A0D-46D2-9D07-B576EAEC19A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_framework:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C0602B-8482-4F3A-9BCD-2FB74F88F5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_framework:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C58A2C-A537-4D69-AA81-222EF2D15875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_framework:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B258BE7-3065-4223-84CD-D56F88292956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_framework:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E475175-62A2-49F9-A23B-410A1F2D8A6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97780",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43592/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43592/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3530",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0, 6.4.1 and 6.4.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Transportation Manager accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications Framework de Oracle E-Business Suite (subcomponente: Popup windows (listas de valores, datepicker, etc.). Versiones compatibles que son afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite que un atacante autenticado con acceso a la red vía HTTP compromete Oracle Applications Framework. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle Applications Framework, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Applications Framework. CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS:"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:N",
            "baseScore" : 7.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0216F26-3BA1-48A2-9BE2-31EA3F0239F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231DDD84-5AF3-4F0D-81D8-DA0F942E78F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A714FB-050A-4040-BC57-C22FA4DD58D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A775321B-6DFB-4770-8F6D-D34D655438AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835BB7D9-633C-4CB3-8E8F-CA6FD62E587A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FE41BA-1E3C-4626-930F-3F8FEE124A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F284EF-05CF-4CF5-B7CA-F58AE01DA3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09892E8-D580-488A-A80E-B358D682A25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58642E0-CA59-4DE6-A83C-F551FC621C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053492A-2648-4FF4-BC04-26EE0066A462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6C3331-91FB-4D74-91DA-1B6EEB3D67D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191FA9F9-A97A-470F-B92B-A4EB2BC3CB27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97723",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038303",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3531",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). Supported versions that are affected are 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services component de Oracle Hospitality Applications (subcomponente: OPERA Printing). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x y 5.5.1.x. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP para comprometer a Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en los Servicios de Propiedad de Oracle Hospitality OPERA 5, los ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle Hospitality OPERA 5 Property Services así como al acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F57085F-A922-421B-BD10-ECC4F3CB34C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97894",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038296",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-16",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3532",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 14.0 and 15.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Warehouse Management System. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Warehouse Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Warehouse Management System accessible data as well as unauthorized read access to a subset of Oracle Retail Warehouse Management System accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Warehouse Management System de Oracle Retail Applications (subcomponente: Security). Versiones compatibles que son afectadas son 13.2, 14.0 y 15.0. Vulnerabilidad fácilmente explotable permite a atacante autenticado con acceso a la red a través de HTTP comprometer Oracle Retail Warehouse Management System. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en el sistema de administración de almacenes minoristas de Oracle, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle Retail Warehouse Management System así como al acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Retail Warehouse Management System.. CVSS 3.0 Base Score 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_warehouse_management_system:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1705E2F8-83EC-4523-8560-C82856DB8CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_warehouse_management_system:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82839D03-B92A-4065-B899-5B8E5B9FC455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_warehouse_management_system:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C96B772-094A-41DA-8000-C2B83BBB344C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97749",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3533",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (subcomponente: Networking). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 y 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Vulnerabilidad dificil de explotar permite a atacante autenticado con acceso a la red a través de FTP para comprometer Java SE, Java SE Embedded, JRockit. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Se aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones de Java Web Start y de Java. También se puede explotar mediante el suministro de datos a las API en el Componente especificado sin utilizar aplicaciones de Java Web Start en modo recinto de seguridad o complementos de Java protegidos, como a través de un servicio web.CVSS 3.0 Base Score 3.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD0F2F0-F307-4F3A-B719-D658467D6B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBA8749-EFC2-4055-A8AB-56D660C0BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "34D1F91C-50D2-4D6A-BF4B-1B86F6909565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "2A34F55B-3945-412E-80BD-23F39B3D68D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4946FF-E16B-4188-8BEA-1D5ABFBD54DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "E463AEAC-F5DB-47E4-B863-E5D636895C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA90A3B9-9749-44F5-BAFC-40BA2BD37B43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "B92D4C9E-8707-4E05-B12D-28C1AFCE2637"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97740",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3534",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y 12.3.0. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.5 (Impacto de confidencialidad). Vector CVSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97762",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3535",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Versiones compatibles que son afectadas son 11.3.0, 11.4.0, 12.0.1, 12.0.2 y 12.0.3. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP para comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en Oracle FLEXCUBE Universal Banking, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.7 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97839",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3536",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:03.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Security). Versiones compatibles que son afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.6 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97898",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3537",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform). Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Real-Time Scheduler. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Real-Time Scheduler, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Real-Time Scheduler accessible data as well as unauthorized read access to a subset of Oracle Real-Time Scheduler accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Real-Time Scheduler de Oracle Utilities Applications (subcomponente: Mobile Communications Platform). Versiones compatibles que son afectadas son 2.2.0.3.13, 2.3.0.0 y 2.3.0.1. Vulnerabilidad fácilmente explotable permite a atacante autenticado con acceso a la red a través de HTTP comprometer Oracle Real-Time Scheduler. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en Oracle Real-Time Scheduler, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle Real-Time Scheduler así como al acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Real-Time Scheduler. CVSS 3.0 Puntuación Base 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:real-time_scheduler:2.2.0.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37914442-CF6E-4BC4-8609-7041B82E193C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:real-time_scheduler:2.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A47C81-C181-4421-B3C7-9C75C0F4D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:real-time_scheduler:2.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9405BA11-8F48-414E-972D-132965133490"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97876",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3538",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Shared Folder). Versiones compatibles que son afectadas son anteriores a 5.0.34 y anteriores a 5.1.16. Vulnerabilidad difici de explotar permite que el atacante de bajo privilegio con el inicio de sesión a la infraestructura donde Oracle VirtualBox VM ejecuta comprometer Oracle VirtualBox VM. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos o todos los datos accesibles de Oracle VirtualBox, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle VirtualBox. CVSS 3.0 Base Score 7.5 (Impactos de confidencialidad e integridad). Vector CVSS:"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:N",
            "baseScore" : 6.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.32",
            "matchCriteriaId" : "D1104DF4-94D3-4246-9C14-CB9E73D518B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556DF6FA-321E-40FE-BC74-44B192012B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9302DA-3BFB-44DF-81E6-6AD796C96A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297D4203-CE68-40FF-AF64-ABD1E7C16861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0896B11F-DC77-4FD0-A9FE-E9D041A30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519F2276-5E13-4948-BCFC-BA90E30462A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D191EF-84DC-47ED-9C44-A400C33928CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8899F709-B14F-4889-958D-F9782EE3B9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB38DB8-E7A6-4DE6-BCCF-FEC0E510FE02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97698",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3539",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded de Oracle Java SE (subcomponente: Security). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Vulnerabilidad no permite autenticado atacante con acceso a la red a través de múltiples protocolos para comprometer Java SE, Java SE Embedded. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad se aplica a las implementaciones de Java, normalmente en clientes que ejecutan aplicaciones de Java Web Start en modo sandbox o en applets de Java protegidos, que cargan y ejecutan código no confiable (por ejemplo, código que proviene del Internet) y confían en el sandbox Java para seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 3.1 (Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD0F2F0-F307-4F3A-B719-D658467D6B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBA8749-EFC2-4055-A8AB-56D660C0BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "34D1F91C-50D2-4D6A-BF4B-1B86F6909565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "2A34F55B-3945-412E-80BD-23F39B3D68D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4946FF-E16B-4188-8BEA-1D5ABFBD54DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "E463AEAC-F5DB-47E4-B863-E5D636895C51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "B92D4C9E-8707-4E05-B12D-28C1AFCE2637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97752",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3540",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebCenter Sites as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Server). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometa Sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden resultar en una habilidad no autorizada para causar un bloqueo o repetición repetible (DOS completo) de sitios Web de Oracle WebCenter, así como una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites y acceso de lectura no autorizado a una De los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 8.6 (Confidencialidad, integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97753",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3541",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Server). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometa Sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97809",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3542",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Server). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometa Sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites y capacidad no autorizada para causar una negación parcial de (partial DOS) de los sitios Web de Oracle WebCenter. CVSS 3.0 Base Score 8.6 (Confidencialidad, Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:P/A:P",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97760",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3543",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Server). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable Permite a atacante no autenticado con acceso a la red a través de HTTP comprometa Sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites y capacidad no autorizada para causar una negación parcial de (partial DOS) de los sitios Web de Oracle WebCenter. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:P/A:P",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97768",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3544",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (subcomponente: Networking). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 y 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Vulnerabilidad dificil de explotar no permite autenticado atacante con acceso a la red a través de SMTP para comprometer Java SE, Java SE Embedded, JRockit. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Se aplica a la implementación de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a través de aplicaciones de Java Web Start y de Java. También se puede explotar mediante el suministro de datos a las API en el Componente especificado sin utilizar aplicaciones de Java Web Start en modo recinto de seguridad o complementos de Java protegidos, como a través de un servicio web.CVSS 3.0 Base Score 3.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD0F2F0-F307-4F3A-B719-D658467D6B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBA8749-EFC2-4055-A8AB-56D660C0BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "34D1F91C-50D2-4D6A-BF4B-1B86F6909565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "2A34F55B-3945-412E-80BD-23F39B3D68D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update_131:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4946FF-E16B-4188-8BEA-1D5ABFBD54DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update_121:*:*:*:*:*:*",
            "matchCriteriaId" : "E463AEAC-F5DB-47E4-B863-E5D636895C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA90A3B9-9749-44F5-BAFC-40BA2BD37B43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "B92D4C9E-8707-4E05-B12D-28C1AFCE2637"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97745",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3545",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Blob Server). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante autenticado con acceso a la red a través de HTTP para comprometer sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos oa todos los datos accesibles de Oracle WebCenter Sites, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:C/A:N",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97804",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3546",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: MultiChannel Framework). Versiones compatibles que son afectadas son 8.54 and 8.55. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos de esta vulnerabilidad pueden provocar la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97872",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-022-ssrf-peoplesoft-imservlet/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42034/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-022-ssrf-peoplesoft-imservlet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3547",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: MultiChannel Framework). Versiones compatibles que son afectadas son 8.54 and 8.55. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP para comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en PeopleSoft Enterprise PeopleTools, los ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos oa todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.4 (Integrity impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97892",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-023-crlf-injection-peoplesoft-imservlet/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-023-crlf-injection-peoplesoft-imservlet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3548",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Integration Broker). Versiones compatibles que son afectadas son 8.54 and 8.55. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools y capacidad no autorizada para causar una denegación parcial de servicio (DOS parcial) de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (Confidencialidad e Impactos de disponibilidad). CVSS 3.0 Base Score 6.5 (Confidentiality and Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97880",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-020-xxe-via-doctype-peoplesoft/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41925/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-020-xxe-via-doctype-peoplesoft/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41925/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3549",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Scripting accessible data as well as unauthorized access to critical data or complete access to all Oracle Scripting accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Scripting de Oracle E-Business Suite (subcomponente: Scripting Administration). Versiones compatibles que son afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red vía HTTP para comprometer Oracle Scripting. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle Scripting, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Scripting. CVSS 3.0 Base Score 9.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E850C1A2-0A6A-434B-A48D-62895562B3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BD060E-D888-48D9-8FA0-D3C82DDA6392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F5A4DE-F475-4C02-A800-DE7694650A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C548A40-EB3A-4D7B-A6F6-9FC459CD6DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54AAB93-CB08-4947-8CA1-40EA2A3E45F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E4C1B3-7560-4E61-B3E9-1DF7D455337F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2613CE-42AE-429F-AE5F-AC03230E7E00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97748",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-021-sql-injection-e-business-suite-iesfootprint/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41926/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-021-sql-injection-e-business-suite-iesfootprint/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41926/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3550",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Admin Console). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Customer Interaction History de Oracle E-Business Suite (subcomponente: Admin Console). Las versiones compatibles que están afectadas son 12.1.1, 12.1.2 y 12.1.3. Una vulnerabilidad fácilmente \"exploitable\" permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Client Interaction History. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Customer Interaction History, los ataques pueden impactar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles del Oracle Client Interaction History, así como también en actualizaciones no autorizadas, y en insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Customer Interaction History. CVSS 3.0 Puntuación Base 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F642BBD2-94B6-4250-AFDB-A6EFF0AFDA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75019879-7091-46AB-ACDA-34EC3C8BB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B71AAA0-2FA5-4803-997D-14D6FBDB3DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97764",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3551",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Smartcard Libraries). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris as well as unauthorized update, insert or delete access to some of Solaris accessible data and unauthorized read access to a subset of Solaris accessible data. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Smartcard Libraries). La versión soportada afectada es 11.3. Vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura donde Solaris ejecute comprometer Solaris. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar un bloqueo o repetición repetible (complete DOS) de Solaris, así como una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Solaris y acceso de lectura no autorizado a un subconjunto de Solaris accesible. datos. CVSS 3.0 Base Score 6.6 (Confidencialidad, Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97821",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3552",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Room Image/Picture Setup). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (subcomponente: OPERA Room Image/Picture Setup). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con acceso a la red a través de HTTP comprometa a Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 4.3 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9068C68D-B69D-4B6F-8382-A972135C9959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97838",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3553",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Rules Engine). The supported version that is affected is 11.1.2.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Identity Manager de Oracle Fusion Middleware (subcomponente: Rules Engine). La versión soportada afectada es 11.1.2.3.0. Vulnerabilidad fácil explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer a Oracle Identity Manager. Aunque la vulnerabilidad está en Oracle Identity Manager, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en la adquisición de Oracle Identity Manager.CVSS 3.0 Base Score 9.9 (Confidencialidad, integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142CD3F8-6523-49C9-BCC1-B01F55DBBE39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97728",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3554",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Catalog Mover). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite que un atacante de bajo privilegio con acceso a la red a través de HTTP pueda comprometer los sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos oa todos los datos accesibles de Oracle WebCenter Sites, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Puntuación Base 8.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97842",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3555",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle iReceivables. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Oracle iReceivables component of Oracle E-Business Suite (subcomponente: Self Registration). Versiones compatibles que son afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red vía HTTP para comprometer Oracle iReceivables. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para causar un bloqueo o una caída repetible de frecuencia (complete DOS) de Oracle iReceivables. CVSS 3.0 Base Score 7.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA5DA47-8106-4480-89F8-CD6A1795688E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D89765-DE4B-4DD2-8B01-98FE03AE1BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A02E657-C4F5-4057-9BD7-BA878E531427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9BE281-8439-4764-A6BB-757DA40C4FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B5945A-90FE-45FA-81FC-AEADAEAFA45D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88A69CC-331F-45CB-B3D9-F8FFED25BEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316B1830-5C0D-4444-AB79-85AC9AA19ACF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97757",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-024-dos-oracle-e-business-suite-anonymouslogin/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-024-dos-oracle-e-business-suite-anonymouslogin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3556",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: File Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Application Object Library de Oracle E-Business Suite (subcomponente: administración de archivos). Las versiones compatibles que se ven afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. La vulnerabilidad de difícil explotación permite al atacante sin autenticar con acceso a la red por medio de HTTP comprometer a Application Object Library de Oracle. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Application Object Library de Oracle. CVSS 3.0 puntuación base 3.7 (impactos de confidencialidad). Vector CVSS:(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BD1423-F7EE-4B53-AE4B-DFA784F685C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95FED83-21C8-4035-BB1B-3C8A93D4645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411C3C4C-5513-4F7D-8D58-A39F21F43637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97785",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-025-auth-bypass-file-downloading-oracle-e-business-suite/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-025-auth-bypass-file-downloading-oracle-e-business-suite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3557",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: Print Server). Las versiones compatibles que se ven afectadas son 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. La vulnerabilidad fácilmente \"explotable\" permite al atacante sin autenticar con acceso a la red por medio de HTTP comprometer a One-to-One Fulfillment de Oracle. Los ataques con éxito requieren la interacción humana de una persona distinta al atacante y mientras que la vulnerabilidad está en One-to-One Fulfillment de Oracle, los ataques pueden afectar significativamente a los productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de One-to-One Fulfillment, así como a la actualización no autorizada, inserción o eliminación de acceso a algunos datos accesibles de Oracle One-to-One Fulfillment. CVSS 3.0 puntuación base 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362431D-4809-4720-A1EF-A64D2FEC6C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9463EF3E-D207-4F96-8018-C67744D9BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D304C78-1EDC-4429-824F-00AB05018147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97773",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-026-xss-oracle-e-business-suite-jtffmprintserver/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-026-xss-oracle-e-business-suite-jtffmprintserver/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3558",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox component de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a 5.0.38 y anterior a 5.1.20. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la infraestructura donde Oracle VM VirtualBox se ejecuta para comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o repetición repetible ( complete DOS) de Oracle VM VirtualBox, así como una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Oracle VM VirtualBox y acceso de lectura no autorizado a un subset de datos accesibles de Oracle VirtualBox.CVSS 3.0 Base Score 8.5 (Confidencialidad Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97744",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41904/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41904/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3559",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a 5.0.38 y anteriores a 5.1.20. Vulnerabilidad fácilmente explotable permite a a atacante de bajo privilegio con el inicio de sesión a la infraestructura donde Oracle VirtualBox de VMW ejecuta comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar un bloqueo o repetición repetible (DOS completo) de Oracle VM VirtualBox, así como una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Oracle VM VirtualBox y acceso de lectura no autorizado a un De datos accesibles de Oracle VirtualBox.CVSS 3.0 Base Score 7.9 (Confidencialidad, Integridad e impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97739",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3560",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OXI Interface). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services component de Oracle Hospitality Applications (subcomponente: OXI Interface). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x y 5.5.1.x. Vulnerabilidad fácil explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los servicios de propiedad de Oracle Hospitality OPERA 5. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Hospitality OPERA 5 Property Services.CVSS 3.0 Base Score 4.3 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9068C68D-B69D-4B6F-8382-A972135C9959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97829",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3561",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a5.0.38 y anteriores a 5.1.20. Vulnerabilidad fácilmente explotable permite al atacante de bajo privilegio con el inicio de sesión a la infraestructura donde Oracle VirtualBox de VMW ejecuta comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidencialidad, Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97730",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41905/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41905/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3563",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a5.0.38 y anteriores a 5.1.20. Vulnerabilidad fácilmente explotable permite a atacante de bajo privilegio con el inicio de sesión a la infraestructura donde Oracle VirtualBox VM ejecuta comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidencialidad, integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97732",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41908/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41908/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3564",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: RBAC).La versión soportada afectada es 11.3. Vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura donde Solaris ejecute comprometer Solaris. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en Solaris, los ataques pueden afectar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en la adquisición de Solaris.. CVSS 3.0 Base Score 8.2 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97807",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3565",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). The supported version that is affected is 11.3. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data as well as unauthorized access to critical data or complete access to all Solaris accessible data. CVSS 3.0 Base Score 7.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: RBAC). La versión soportada afectada es 11.3. Vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura donde Solaris ejecute comprometer Solaris. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en Solaris, los ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos o todos los datos accesibles de Solaris, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Solaris. CVSS 3.0 Base Score 7.9 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.7,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97782",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3567",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of OJVM. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente OJVM de Oracle Database Server. Versiones compatibles que son afectadas son 11.2.0.4 y 12.1.0.2. Difícil de explotar la vulnerabilidad permite que el atacante de bajo privilegio tenga privilegios Crear Sesión, Crear Procedimiento con acceso a la red a través de múltiples protocolos para comprometer OJVM. Los ataques exitosos de esta vulnerabilidad pueden resultar en capacidad no autorizada para provocar un bloqueo o frecuencia de caída repetible (complete DOS) de OJVM. CVSS 3.0 Base Score 5.3 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97873",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038284",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3568",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:04.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing and Login). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality OPERA 5 Property Services executes to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (subcomponente: OPERA Printing y Login). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x y 5.5.1.x. Vulnerabilidad dificil de explotar permite un atacante no autenticado con el inicio de sesión a la infraestructura donde Oracle Hospitality OPERA 5 Property Services ejecuta comprometer Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques con éxito de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de datos críticos o todos los datos accesibles de Oracle Hospitality OPERA 5 Property Services, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Hospitality OPERA 5 Property Services. Habilidad no autorizada para provocar una denegación parcial de servicio (DOS parcial) de Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 6.5 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9068C68D-B69D-4B6F-8382-A972135C9959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97835",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3569",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Business Events). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (subcomponente: OPERA Business Events). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x y 5.5.1.x. Vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con acceso a la red a través de HTTP comprometa a Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle Hospitality OPERA 5 Property Services así como al acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Hospitality OPERA 5 Property Services.. CVSS 3.0 Base Score 5.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9068C68D-B69D-4B6F-8382-A972135C9959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97841",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3570",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eSettlements). The supported version that is affected is 9.1. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise FSCM accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM eBill Payment component de Oracle PeopleSoft Products (subcomponente: Security). La versión soportada afectada es 9.2. Vulnerabilidad fácil explotable permite al atacante de alto privilegio con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise SCM eBill Payment. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de datos críticos o todos los datos accesibles de PeopleSoft Enterprise SCM eBill Payment, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de PeopleSoft Enterprise SCM eBill Payment. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_esettlements:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C99EE55-26A3-4FFB-83F7-9A572B8E8DA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97906",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3571",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eBill Payment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM eBill Payment accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM eBill Payment accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM eBill Payment component de Oracle PeopleSoft Products (subcomponente: Security). La versión soportada afectada es 9.2. Vulnerabilidad fácil explotable permite al atacante de alto privilegio con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise SCM eBill Payment. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de datos críticos o todos los datos accesibles de PeopleSoft Enterprise SCM eBill Payment, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de PeopleSoft Enterprise SCM eBill Payment. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_ebill_payment:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC5415D-32EE-4BB3-9A4A-7FC515830FE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97909",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3572",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce (subcomponent: MDEX). Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Commerce Guided Search / Oracle Commerce Experience Manager de Oracle Commerce (subcomponente: MDEX). Versiones compatibles que son afectadas son 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 y 6.5.2. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP para comprometer Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar un bloqueo o un bloqueo repetible con frecuencia (DOS completo) de Oracle Commerce Guided Search / Oracle Commerce Experience Manager.. CVSS 3.0 Base Score 7.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D655A9F6-39E2-422A-97F3-7152D17D814F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FC16A1-26A8-4F73-AE9B-B6ED43BF8F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce:6.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0F7DCB-A085-4901-AD02-FB9ED2F417F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6529ED2B-E048-473F-971B-EE655FAA766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B179CFC-5D90-405C-810F-01C29B0AFCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A561737-DECC-43C5-9D89-8C2D2E22EAA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97721",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3573",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services component de Oracle Hospitality Applications (subcomponente: OPERA Printing). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x y 5.5.1.x. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP para comprometer a Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en los Servicios de Propiedad de Oracle Hospitality OPERA 5, los ataques pueden afectar significativamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Oracle Hospitality OPERA 5 Property Services así como al acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9068C68D-B69D-4B6F-8382-A972135C9959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97868",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3574",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License code configuration). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (subcomponente: configuración del codigo OPERA License). Versiones compatibles que son afectadas son 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x y 5.5.1.x. Vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con acceso a la red a través de HTTP comprometa a Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Hospitality OPERA 5 Property Services así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle Hospitality OPERA 5 Property Services.CVSS 3.0 Base Score 7.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9068C68D-B69D-4B6F-8382-A972135C9959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97866",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3575",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a 5.0.38 y anteriores a 5.1.20. Vulnerabilidad fácilmente explotable permite al atacante de alto privilegio con el inicio de sesión a la infraestructura donde Oracle VM VirtualBox se ejecuta para comprometer a Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle VirtualBox y la capacidad no autorizada para provocar un bloqueo o caída de frecuencia repetible (complete DOS) de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.9 (Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97755",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41906/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41906/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3576",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Virtual VM de Oracle de Oracle Virtualization (subcomponente: Core). Versiones compatibles que son afectadas son anteriores a 5.0.38 y anteriores a 5.1.20. La vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura donde Oracle VirtualBox se ejecute para comprometer a Oracle VM VirtualBox. Aunque la vulnerabilidad se encuentra en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidencialidad, Integridad y Disponibilidad impactos). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97759",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41907/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41907/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3577",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise CS Campus Community de Oracle PeopleSoft Products (subcomponente: Frameworks). La versión soportada afectada es 9.2. Vulnerabilidad fácil explotable permite a los atacantes de alto privilegio con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise CS Campus Community. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de datos críticos o todos los datos accesibles de PeopleSoft Enterprise CS Campus Community, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise CS Campus Community. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_cs_campus_community:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD83677-632A-4DB2-8363-62DBFFDCECE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97903",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3578",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). The supported version that is affected is AK 2013. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit (AK) executes to compromise Sun ZFS Storage Appliance Kit (AK). While the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: RAS subsystems). La versión soportada afectada es AK 2013. Vulnerabilidad fácil explotable permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura en la que Sun ZFS Storage Appliance Kit (AK) ejecute el compromiso de Sun ZFS Storage Appliance Kit (AK). Aunque la vulnerabilidad se encuentra en el Kit de dispositivos de almacenamiento de Sun ZFS, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Puntuación Base 8.8 (Confidencialidad, Integridad e Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit_software:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06E5C2E-66BF-434F-9137-B256450C00EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97810",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3579",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Versiones compatibles que son afectadas son 8.3, 8.4, 15.1, 15.2, 16.1 y 16.2. Vulnerabilidad fácilmente explotable permite a atacante no autenticado Con acceso a la red a través de HTTP para comprometer la gestión de la cartera de proyectos empresariales Primavera P6. Los ataques exitosos requieren la interacción humana de una persona más que un atacante y mientras la vulnerabilidad está en la Gestión de Portafolio de Proyectos de Primavera P6, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Primavera P6 Enterprise Project Portfolio Management así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Puntuación Base 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3580",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: RAS subsystems). La versión soportada que se ve afectada es AK 2013. Difícil de explotar la vulnerabilidad permite un atacante no autenticado con acceso a la red a través de múltiples protocolos para comprometer Sun ZFS Storage Appliance Kit (AK). Los ataques exitosos requieren una interacción humana de una persona más que un atacante y aunque la vulnerabilidad está en el Kit de Dispositivos de Almacenamiento Sun ZFS, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 8.3 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:ak_2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B7B268-6120-4030-9EC6-39608F403352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97830",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3581",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Automatic Service Request (ASR) de Oracle Support Tools (subcomponente: ASR Manager). La versión soportada afectada es Antes de 5.7. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con el inicio de sesión a la infraestructura donde se ejecuta ASR (Automatic Service Request) para comprometer la ASR (Automatic Service Request). Los ataques con éxito de esta vulnerabilidad pueden resultar en la adquisición de ASR (Automatic Service Request). CVSS 3.0 Base Score 7.8 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97802",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3582",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite (subcomponent: Backup/Restore Utility). Supported versions that are affected are 2.3.8 and 2.3.13. Easily \"exploitable\" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle SuperCluster Specific Software executes to compromise Oracle SuperCluster Specific Software. Successful attacks of this vulnerability can result in takeover of Oracle SuperCluster Specific Software. CVSS 3.0 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle SuperCluster Specific Software de Oracle Sun Systems Products Suite (subcomponente: Backup/Restore Utility). Versiones compatibles que son afectadas son 2.3.8 y 2.3.13. Vulnerabilidad fácilmente explotable permite a atacante no autenticado login en la infrastructure donde Oracle SuperCluster Specific Software ejecuta para comprometer el software específico de Oracle SuperCluster. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición del software específico de Oracle SuperCluster.. CVSS 3.0 Base Score 8.4 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:supercluster_specific_software:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B9E712-3BC6-4C9A-91B2-A0611B600E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:supercluster_specific_software:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DBBE90-19EE-4754-A43F-5AEDB906F986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97796",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3583",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Versiones compatibles que son afectadas son 8.3, 8.4, 15.1, 15.2, 16.1 y 16.2. Vulnerabilidad fácilmente explotable permite a atacante no autenticado Con acceso a la red a través de HTTP para comprometer la gestión de la cartera de proyectos empresariales Primavera P6. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso no autorizado a la creación, eliminación o modificación de datos críticos o todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Puntuación Base 8.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97893",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3584",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit (AK) executes to compromise Sun ZFS Storage Appliance Kit (AK). While the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: RAS subsystems). La versión soportada que está afectada es AK 2013. Difícil de explotar la vulnerabilidad permite que un atacante con privilegios bajos con inicio de sesión en la infraestructura donde Sun ZFS Storage Appliance Kit (AK) ejecute el compromiso de Sun ZFS Storage Appliance Kit (AK). Aunque la vulnerabilidad se encuentra en el Kit de dispositivos de almacenamiento de Sun ZFS, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Puntuación Base 7.8 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:ak_2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B7B268-6120-4030-9EC6-39608F403352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97781",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3585",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface subsystem). The supported version that is affected is AK 2013. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: User Interface subsystem). La versión soportada que se ve afectada es AK 2013. Vulnerabilidad fácilmente explotable permite un atacante no autenticado con acceso a la red a través de HTTP para comprometer Sun ZFS Storage Appliance Kit (AK). Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 5.3 (Impactos de Integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:ak_2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B7B268-6120-4030-9EC6-39608F403352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3586",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Connectors de Oracle MySQL (subcomponente: Connector/J). Versiones compatibles que son afectadas son 5.1.41 y anteriores Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de múltiples protocolos comprometer los conectores de MySQL. Aunque la vulnerabilidad está en MySQL Connectors, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizados a algunos de los datos accesibles de MySQL Connectors, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Connectors. CVSS 3.0 Puntuación Base 6.4 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.41",
            "matchCriteriaId" : "70700BF1-6C93-461A-A0D4-9F0D68DCF8F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3857",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97784",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97982",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3587",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Shared Folder). Versiones compatibles que son afectadas son anteriores a 5.0.38 y anteriores a 5.1.20. Vulnerabilidad fácilmente explotablePermite al atacante de bajo privilegio con el inicio de sesión a la infraestructura donde Oracle VirtualBox de VMW ejecuta comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VirtualBox, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle VirtualBox y la capacidad no autorizada para causar un bloqueo o repetición repetible (DOS completo) de Oracle VM VirtualBox.. CVSS 3.0 Base Score 8.4 (Integrity and Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.38",
            "matchCriteriaId" : "B2B76D2F-B943-4A04-8666-1C1A921CD7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.20",
            "matchCriteriaId" : "CDFBB548-7BBC-4EAA-BA5E-23E670449C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97750",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41932/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41932/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3589",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Catalog Mover). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado Con acceso a la red a través de HTTP para comprometer los sitios web de Oracle WebCenter. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos oa todos los datos accesibles de Oracle WebCenter Sites, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 7.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:connector\\/j:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.41",
            "matchCriteriaId" : "6014AF6E-6CA8-4349-97B8-EFB011B7791A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3857",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97836",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3590",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 2.1.5 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente MySQL Connectors de Oracle MySQL (subcomponente Connector/Python) 2.1.5 y anteriores permite a un atacante con login de bajos privilegios en la infraestructura donde se ejecuta MySQL Connectors realizar actualizaciones, inserciones o borrados no autorizados a los datos accesibles por MySQL Connectors."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:connector\\/python:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.5",
            "matchCriteriaId" : "FEBF7ECB-B546-49C1-BEF0-17ACE4E21780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97840",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3591",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Catalog Mover). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado Con acceso a la red a través de HTTP para comprometer los sitios web de Oracle WebCenter. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizadas de acceso a datos críticos oa todos los datos accesibles de Oracle WebCenter Sites, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 7.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97899",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3592",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payables. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payables accessible data as well as unauthorized access to critical data or complete access to all Oracle Payables accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Payables de Oracle E-Business Suite (subcomponente: Self Service Manager). Versiones compatibles que son afectadas son 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Vulnerabilidad fácilmente explotable permite a atacante de alto privilegio con acceso a la red a través de HTTP comprometer Oracle Payables. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle Payables, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Payables. CVSS 3.0 Base Score 6.5 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:N",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83D51ED-C2BE-4912-BA28-F9D7577281F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7A1D86-5E6D-43CA-B8B9-99D82C5C0731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6199AAD9-CFE9-4C6B-90CF-FDD309B46E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BC111F-F328-4A69-9D5E-6CA9DCA95717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F64847-D540-4221-ACBA-0D69484FB205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E08B105-0587-4F9C-8F5F-74E3F8AA64D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payroll:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600A02D0-B35B-4C8A-93C5-0F2C2178D845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97777",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3593",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a atacante no autenticado con acceso a la red a través de HTTP para comprometer los sitios web de Oracle WebCenter. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 7.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:P/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97879",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3594",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Difícil de explotar la vulnerabilidad permite que un atacante con privilegios bajos con acceso a la red vía HTTP pueda comprometer los sitios Web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 5.9 (Impactos de confidencialidad e integridad) Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:P/A:N",
            "baseScore" : 7.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97901",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97905",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3595",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los sitios web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Puntuación Base 7.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:P/A:N",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97887",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3596",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los sitios web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Sites y capacidad no autorizada para causar una negación parcial de (partial DOS) de los sitios Web de Oracle WebCenter. CVSS 3.0 Puntuación Base 7.6 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97875",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3597",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable Permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los sitios web de Oracle WebCenter. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 5.7 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97904",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3598",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Difícil de explotar la vulnerabilidad permite que un atacante con privilegios bajos con acceso a la red vía HTTP pueda comprometer los sitios Web de Oracle WebCenter. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 3.1 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97905",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3599",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:05.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Server: Pluggable Auth). Las versiones compatibles que se ven afectadas son versión 5.6.35 y anteriores y versión 5.7.17 y anteriores. La vulnerabilidad fácilmente \"explotable\" permite que un atacante no autenticado con acceso a la red por medio de múltiples protocolos ponga en peligro el servidor MySQL. Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para generar una suspensión o un bloqueo repetible con frecuencia (DoS completo) de MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. NOTA: la información anterior es de la CPU de abril de 2017. Oracle no ha comentado sobre las afirmaciones de terceros de que este problema es un desbordamiento de enteros en sql/auth/sql_authentication.cc que permite a los atacantes remotos generar una Denegación de Servicio (DoS) por medio de un paquete de autenticación creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97754",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41954/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41954/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3600",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server de Oracle MySQL (subcomponente: Client mysqldump). Versiones compatibles que son afectadas son 5.5.54y anteriores 5.6.35 y anteriores a 5.7.17 y anteriores. Vulnerabilidad dificil de explotar permite a un atacante de alto privilegio con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de MySQL Server Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.54",
            "matchCriteriaId" : "C750C0CD-FAD6-4710-A099-1AEE2B7D7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.35",
            "matchCriteriaId" : "88D2257A-06C9-4B74-9E93-DB95A9A44955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.17",
            "matchCriteriaId" : "224A4538-AA42-44D7-870F-B6F354DC725D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.53",
            "matchCriteriaId" : "06A4DF4B-A863-4091-8FE1-3DB55B99B7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.28",
            "matchCriteriaId" : "B4C9A810-E03B-40D5-9B47-EFD7891283AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.19",
            "matchCriteriaId" : "71A20CCF-309C-474B-B717-DB924D8AA0D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2927.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2928.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97765",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2927.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2928.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3601",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware (subcomponent: Oracle API Gateway). The supported version that is affected is 11.1.2.4.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle API Gateway. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle API Gateway accessible data as well as unauthorized access to critical data or complete access to all Oracle API Gateway accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle API Gateway de Oracle Fusion Middleware (subcomponente: Oracle API Gateway).La versión soportada afectada es 11.1.2.4.0. Vulnerabilidad fácilmente explotable permite un atacante no autenticado con acceso a la red vía HTTP para comprometer Oracle API Gateway. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles de Oracle API Gateway, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle API Gateway. CVSS 3.0 Base Score 8.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:N",
            "baseScore" : 8.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5553591-073B-45E3-999F-21B8BA2EEE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97817",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3602",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a los atacantes de bajo privilegio con acceso a la red a través de HTTP comprometer los sitios web de Oracle WebCenter. Los ataques exitosos de esta vulnerabilidad pueden provocar la creación, eliminación o modificación no autorizada de acceso a datos críticos oa todos los datos accesibles de Oracle WebCenter Sites, así como el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle WebCenter Sites. CVSS 3.0 Base Score 8.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:N",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97823",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3603",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Advanced UI). Versiones compatibles que son afectadas son 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 y 12.2.1.2.0. Difícil de explotar la vulnerabilidad permite que un atacante con privilegios bajos con acceso a la red vía HTTP pueda comprometer los sitios Web de Oracle WebCenter. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebCenter Sites.CVSS 3.0 Base Score 3.1 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292AB9AA-15E1-4E78-B46F-CBC4EB6F95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9B825-D311-42C5-AF28-C589BACD32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97907",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3604",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store component de Oracle Berkeley DB. La versión soportada afectada es anterior a 6.2.32. Vulnerabilidad dificil de explotar permite un atacante no autenticado con el inicio de sesión a la infraestructura en la que Data Store se ejecuta para comprometer Data Store. Los ataques exitosos requieren la interacción humana de una persona más que un atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en la adquisición de Data Store. CVSS 3.0 Base Score 7.0 (Confidencialidad, Integridad y Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97798",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3605",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. La versión compatible que es afectadas es Prior a 6.2.32. La vulnerabilidad difícil de explotar permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se almacena Data Store a comprometer Data Store. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitoso de esta vulnerabilidad pueden resultar en la adquisición de Data Store. CVSS 3.0 Base Score 7.0 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97853",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3606",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. La versión compatible que es afectadas es Prior a 6.2.32. La vulnerabilidad difícil de explotar permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se almacena Data Store a comprometer Data Store. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitoso de esta vulnerabilidad pueden resultar en la adquisición de Data Store. CVSS 3.0 Base Score 7.0 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97854",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3607",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. La versión compatible que es afectadas es Prior a 6.2.32. La vulnerabilidad difícil de explotar permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se almacena Data Store a comprometer Data Store. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitoso de esta vulnerabilidad pueden resultar en la adquisición de Data Store. CVSS 3.0 Base Score 7.0 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97855",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3608",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. La versión compatible que es afectadas es Prior a 6.2.32. La vulnerabilidad difícil de explotar permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se almacena Data Store a comprometer Data Store. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitoso de esta vulnerabilidad pueden resultar en la adquisición de Data Store. CVSS 3.0 Base Score 7.0 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97856",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3609",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. La versión compatible que es afectadas es Prior a 6.2.32. La vulnerabilidad difícil de explotar permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se almacena Data Store a comprometer Data Store. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitoso de esta vulnerabilidad pueden resultar en la adquisición de Data Store. CVSS 3.0 Base Score 7.0 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97857",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3610",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. La versión compatible que se ve afectada es anterior a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97858",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3611",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97859",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3612",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97860",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3613",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97861",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3614",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97862",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3615",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97863",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3616",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97864",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3617",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Data Store de Oracle Berkeley DB. Versiones afectadas anteriores a 6.2.32. Difícil de explotar, la vulnerabilidad permite a un atacante no autenticado con inicio de sesión a la infraestructura donde se almacena el Data Store comprometerlo. El ataque requiere interacción humana de una persona diferente y si tiene éxito se obtiene el control de la Data Store. CVSS 3.0 Base Score 7.0 (Impacto en Confidencialidad, Integridad y Disponibilidad ). Vector CVSS: (CVSS: 3.0/AV: L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.32",
            "matchCriteriaId" : "9025531B-7D17-4B97-9F2B-3165910D32FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97865",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3618",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Automatic Service Request (ASR) accessible data as well as unauthorized access to critical data or complete access to all Automatic Service Request (ASR) accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Versiones afectadas anteriores a la 5.7. La vulnerabilidad permite que un atacante con pocos privilegios e inicio de sesión en la infraestructura donde se ejecute el ASR (Automatic Service Request) le comprometa. Un ataque exitoso puede resultar en la creación, eliminación o modificación no autorizada de acceso a datos críticos o todos los datos accesibles por el ASR, así como el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de ASR. CVSS 3.0 Base Score 7.1 (Impacto en confidencialidad e integridad). CVSS Vector: (CVSS: 3.0 / AV: L / AC: L / PR: L / UI: N / S: U / C: H / I: H / A: N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97819",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3619",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Automatic Service Request (ASR) accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Versiones afectadas anteriores a la 5.7. La vulnerabilidad permite que un atacante con pocos privilegios e inicio de sesión en la infraestructura donde se ejecute el ASR (Automatic Service Request) le comprometa. Un ataque exitoso pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de ASR (Automatic Service Request). CVSS 3.0 Puntaje 5.5 (Incidencia en confidencialidad). Vector CVSS: (CVSS: 3.0 / AV: L / AC: L / PR: L / UI: N / S: U / C: H / I: N / A: N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97771",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3620",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Automatic Service Request (ASR) versiones hasta 5.7 permite a un atacante con login de bajos privilegios en la infraestructura donde ASR se ejecuta tomar el control del componente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:automatic_service_request:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "9F616945-AC9D-4430-96D8-538F88188ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97811",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3621",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks). The supported version that is affected is AK 2013. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "La versión afectada es la AK 2013. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometer Sun ZFS Storage Appliance Kit (AK). Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada para causar un bloqueo o caída abrupta del servicio repetible (DoS completo) del Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.5 (Impacto en la disponibilidad). Vector CVSS: (CVSS: 3.0 / AV: N / AC: L / PR: N / UI: N / S: U / C: N / I: N / A: H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:ak_2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B7B268-6120-4030-9EC6-39608F403352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97801",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3622",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)). The supported version that is affected is 10. Easily \"exploitable\" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3622 is assigned for the \"Extremeparr\". CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "La versión afectada es la 10. La vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y con inicio de sesión en la infraestructura donde Solaris se ejecute, comprometerla. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Solaris. Nota: CVE-2017-3622 está asignado para el \"Extremeparr\". CVSS 3.0 Base Score 7.8 (Impacto en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS: 3.0 / AV: L / AC: L / PR: L / UI: N / S: U / C: H / I: H / A: H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97774",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45479/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3623",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported versions that are affected see note. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3623 is assigned for \"Ebbisland\". Solaris 10 systems which have had any Kernel patch installed after, or updated via patching tools since 2012-01-26 are not impacted. Also, any Solaris 10 system installed with Solaris 10 1/13 (Solaris 10 Update 11) are not vulnerable. Solaris 11 is not impacted by this issue. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Para las versiones afectadas, consulte la nota. La vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de múltiples protocolos la comprometa. Si bien la vulnerabilidad está en Solaris, los ataques pueden afectar de forma significativa a otros productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Solaris. Nota: CVE-2017-3623 está asignado para \"Ebbisland\". Los sistemas Solaris 10 que han instalado algún parche del kernel después o actualizado a través de herramientas de revisión desde 2012-01-26 no se ven afectados. Además, ningún sistema Solaris 10 instalado con Solaris 10 1/13 (Solaris 10 Update 11) es vulnerable. Solaris 11 no se ve afectado por este problema. CVSS 3.0 Base Score 10.0 (Impacto en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS: 3,0 / AV: N / AC: L / PR: N / UI: N / S: C / C: H / I: H / A: H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05924C67-F9A0-450E-A5B8-059651DD32E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/155876/EBBISLAND-EBBSHAVE-6100-09-04-1441-Remote-Buffer-Overflow.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97778",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/155876/EBBISLAND-EBBSHAVE-6100-09-04-1441-Remote-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3625",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Las versiones afectadas son 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1 y 12.2.1.2. La vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red vía HTTP pueda comprometer el contenido de Oracle WebCenter. Los ataques exitosos requieren la interacción humana de una persona diferente y mientras la vulnerabilidad está en el Contenido de Oracle WebCenter, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden provocar acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle WebCenter Content, así como actualizaciones no autorizadas, insertar o eliminar acceso a algunos de los datos accesibles de Oracle WebCenter Content. CVSS 3.0 Score 8.2 (Impacto enconfidencialidad e integridad). Vector CVSS: (CVSS: 3.0 / AV: N / AC: L / PR: N / UI: R / S: C / C: H / I: L / A: N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:P/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:11.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE12383-14AB-4DB1-B17E-0C1B316D43E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:11.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0686C029-51C1-47F7-A66C-1465E7B7FDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D706EC-DA9A-48F1-80CC-83ED6401A881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7434DB17-05FA-48D4-8787-F9C504C8CAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C2318C-2E15-48A1-929D-8C9119FB8FD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97769",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3626",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-24T19:59:06.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Oracle GlassFish Server 3.1.2 permite a un atacante no autenticado con acceso a la red a traves de múltiples protocolos comprometer Oracle GlassFish Server. Es necesaria interacción por parte de un usuario, y puede resultar en un acceso de lectura no autorizado a un subgrupo de los datos accesibles por Oracle GlassFish Server."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97896",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038293",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5029",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La función xsltAddTextString en transform.c en libxslt 1.1.29, tal como se utiliza en Blink en Google Chrome anteriores a 57.0.2987.98 para Mac, Windows y Linux y 57.0.2987.108 para Android, carecía de una comprobación de desbordamiento de entero durante un cálculo de tamaño, lo que permite a un atacante remoto realizar una escritura de memoria fuera de límites a través de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxslt:1.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D4ECDC-5CA4-48D6-B41E-DAB606A5C403"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/676623",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae5",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/676623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5030",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.190",
      "lastModified" : "2025-10-22T00:16:06.260",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El manejo incorrecto de especies complejas en V8 de Google Chrome anteriores a 57.0.2987.98 para Linux, Windows y Mac y 57.0.2987.108 para Android permitió a un atacante remoto ejecutar código arbitrario a través de una página HTML especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium V8 Memory Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.98",
            "matchCriteriaId" : "26404A89-BDA8-427F-8BCC-27EC3835FC7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.108",
            "matchCriteriaId" : "A9D345E8-DAFB-4366-B68F-311C3B39AAF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/682194",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-126/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/682194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-126/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5030",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5031",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso después de su liberación de ANGLE en Google Chrome anteriores a 57.0.2987.98 para Windows permitió a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML diseñada especialmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98326",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328762",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/682020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-14/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/682020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-14/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5032",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "PDFium en Google Chrome anteriores a 57.0.2987.98 para Windows podría incrementar del final de un búfer, lo que permite a un atacante remoto realizar corrupción de pila heap a través de un archivo PDF especialmente elaborado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/668724",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/668724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5033",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome, en versiones anteriores a la 57.0.2987.98 para Mac, Windows y Linux y 57.0.2987.108 para Android, no propagaba correctamente las restricciones CSP a las páginas de temas locales, lo que permitía que un atacante remoto omitiese la política de seguridad de contenido (CSP) mediante una página HTML manipulada. Esto está relacionado con la palabra clave de unsafe-inline."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/669086",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://twitter.com/Ma7h1as/status/907641276434063361",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/669086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://twitter.com/Ma7h1as/status/907641276434063361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5034",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un uso después de liberación en PDFium de Google Chrome versiones anteriores a 57.0.2987.98 para Linux y Windows, permitiría a un usuario remoto leer la memoria fuera de límites a través de un fichero PDF especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/678461",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/678461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5035",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site."
      }, {
        "lang" : "es",
        "value" : "En Google Chrome versiones anteriores a 57.0.2987.98 para Windows y Mac, se ocasiona una condición de carrera que podría causar que Chrome muestre información de certificado incorrecta de un sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/688425",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/688425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5036",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un uso después de liberación en PDFium de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android, permitiría a un usuario remoto provocar un impacto indefinido a través de un archivo PDF especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/691371",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/691371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5037",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en FFmpeg de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows, y Linux y versión 57.0.2987.108 para Android permitiría a un atacante remoto escribir fuera de los límites de memoria a través de un archivo de vídeo especialmente diseñado. Relacionado con ChunkDemuxer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679640",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5038",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension."
      }, {
        "lang" : "es",
        "value" : "Chrome Apps de Google Chrome versiones anteriores a 57.0.2987.98 para Linux, Windows y Mac, debido a un fallo de uso después de liberación en GuestView, permitiría a un atacante remoto leer la memoria fuera de los límites a través de una extensión de Chrome especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/695476",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/695476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5039",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un uso después de liberación en PDFium de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android permitiría a un usuario remoto provocar una corrupción de memoria dinámica (heap) a través de una archivo PDF especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679649",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5040",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "V8 de Google Chrome en versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android no realiza un chequeo que podría permitir a un atacante remoto leer valores en memoria a través de una página HTML especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/691323",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/691323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5041",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Google Chrome versiones anteriores a 57.0.2987.100 gestiona incorrectamente las acciones ir adelante/atrás en la navegación lo que permitiría a un atacante remoto mostrar información incorrecta de un sitio a través de una página HTML especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.98",
            "matchCriteriaId" : "2C2726A3-69F9-42F1-9006-C0AB35F7B182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/642490",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/642490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5042",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent."
      }, {
        "lang" : "es",
        "value" : "Cast en Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android envía cookies a sitios descubiertos a través de SSDP, hecho que permitiría a un atacante en el segmento de red local iniciar conexiones a URLs arbitrarias pudiendo observar en texto plano cualquier cookie enviada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/671932",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/671932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5043",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension."
      }, {
        "lang" : "es",
        "value" : "Chrome Apps de Google Chrome versiones anteriores a 57.0.2987.98 para Linux, Windows y Mac, debido a un fallo de uso después de liberación en GuestView, permitiría a un atacante remoto leer la memoria fuera de los límites a través de una extensión de Chrome especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/683523",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/683523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5044",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer de memoria dinámica (heap) en el proceso de filtrado en Skia de Google Chrome en versiones anteriores 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android, permitirían a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/688987",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/688987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5045",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "XSS Auditor de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android permiten la detección de la carga de un iframe bloqueado lo que permitiría a un atacante remoto conocer los nombre de variable de JavaScript mediante un ataque de fuerza bruta usando una página HTML especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/667079",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/667079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5046",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-24T23:59:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure."
      }, {
        "lang" : "es",
        "value" : "V8 de Google Chrome en versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android tiene una aplicación de política insuficiente lo que permitiría a un atacante remoto falsear el objeto de ubicación a través de una página HTML especialmente diseñada. Relacionada con la revelación de información de Blink."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/680409",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/680409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-24T23:59:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer."
      }, {
        "lang" : "es",
        "value" : "La función handle_invept de arch/x86/kvm/vmx.c del Kernel de Linux, versiones 3.12 a 3.15, permite a los usuarios privilegiados del sistema operativo huésped de KVM causar una denegación de servicio (referencia a puntero nulo y caída del sistema operativo anfitrión) a través de una instrucción single-context INVEPT con puntero EPT nulo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B291154A-4B91-4A0E-AAAE-716A8BB7BF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835FBA1-49DE-4184-BEC8-7ED2B3F7B0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080BD3C9-0606-4D9A-B7AE-3DF9F75B8FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDF0F11-3DB4-41F6-B6D3-383857884258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB1772A-F4AA-4AB8-9FC9-10993A6A5B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB5B4D7-C79C-448E-B0D4-A6A9C440F49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A32A2-C1EC-4463-B21F-79E6592C5339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8683B9-63EF-43D0-8E4F-2909429B47E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F6A187-E8B1-47CF-B375-FB453F8000F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A4332E-E1D4-4B6E-B9FE-B33CCF083402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1949D7D6-7DD2-458B-89D3-B0090C8E9984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA23201B-8DC1-4694-8DD9-661BC78F152A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDB83D1-8A25-495E-BC27-0E2059255DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF8D075-08F5-4CF4-8416-9963CA6B04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4ED579-E7D9-434A-A357-3D9056784227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E9D537-1F1A-462B-A6D6-2DC4FF07A843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2AEF20-1F50-497D-AD1E-AC0ED7699DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A7B9D2-EF81-4952-AD6F-C5870331F17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BACD07E-51D7-4081-89E0-276FE3ADCEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46AEA84-FDC3-41A3-9F63-D38290C9862F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C401E0-6258-4F25-82CF-B81B7624C509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0810E4B6-1510-46A6-9519-127E226BDE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BA4A7A-FF32-4763-8278-08C2DEBAA05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E44C3-41FC-41A1-9ACF-1DD00DE06CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860169C6-3AF9-4F00-869C-DE0DE289DF91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51398597-A993-496F-84E4-993B74AC0508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9879AED-F53E-47D7-ACA1-E61EBF3133EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048698BF-3B0C-449C-9D2A-81B5CAB4A27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EED7A3-B40C-4C02-80B7-1836A3C4C2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B72AFA7-C594-4BCF-BB79-F3EE675766A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195ED19-4482-435C-9224-20B0EDF6F114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AC043B-EACB-406C-B4D0-7B22CF8B0EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA5C700-05F9-4077-ACE6-8A7EE033B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE74D9A2-DCD6-4E14-B061-972EB7CF1EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50006B4-3AB0-4FF2-9111-F0E1191D243C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B654475F-4C5F-485E-BB77-CFEF6D214C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4304FA-0868-4A81-B6E4-FBDF84B153AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2100C16C-437E-4EEC-BD04-D75CF3D02333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF474B9-2740-498C-909B-DBFD3FDC23CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F0A015-6CF7-4528-9CF9-E0E76CB3E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09723483-B241-4D82-862C-AA0098F680CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084853B-91CB-4964-A498-9B4208152138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19BA782-DCFB-48B6-973C-3AD050ED51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87E856E-AD83-4EBF-BD06-4736B9116083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D914E1-7229-4642-BDC9-5A8261E03538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDC2E5D-EF73-4DED-8E4C-8309BA53A092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9406CC5F-6D28-4836-BDD4-A50674F1333D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124ADC63-CDA6-4A27-A844-4F33DB6A4031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FD9974-27BC-4DE4-9CB0-FC2D0CAA1D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72559629-4BB1-4651-BEF7-B6E74683C401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8648EF03-5B27-40BD-90A0-59DC8120440B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C26111E-EF43-4CFA-977E-6658A7B62C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A8E46E-7CAB-49E2-A1DD-F146FBBBA19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7799F2BF-9C85-444A-970A-6F245463425F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91854A06-32BC-4C9F-AA63-BA32F2B385DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33509600-67E3-4C78-B0C4-4D62D70FCD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10237625-21BB-43A0-A7A2-EE662703391E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E6E8FD-CAA5-4A93-ABD5-815B51D7DE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3B5CB0-C094-471A-A6D5-2FBC91384FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.12.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FCA1E-99B4-4D10-9A59-65FE265C9DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50513044-C297-4D5E-BD45-6FD603A29F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.14.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CB47E3-1DF7-4FB1-A436-F7648C8F0EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.14.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48C8632-E8C5-4907-AEDC-1B33D8A5AF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5827B65-9941-4927-8D47-57229EEA290F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=195167",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://launchpad.net/bugs/1678676",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=195167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://launchpad.net/bugs/1678676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5047",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-25T03:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en FFmpeg de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android, permitiría a un atacante remoto escribir fuera de los límites de memoria a través de un archivo de vídeo especialmente diseñado. Relacionado con ChunkDemuxer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679653",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5048",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-25T03:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en FFmpeg de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows y Linux y versión 57.0.2987.108 para Android, permitiría a un atacante remoto escribir fuera de los límites de memoria a través de un archivo de vídeo especialmente diseñado. Relacionado con ChunkDemuxer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679647",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5049",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-25T03:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en FFmpeg de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows, y Linux y versión 57.0.2987.108 para Android permitiría a un atacante remoto escribir fuera de los límites de memoria a través de un archivo de vídeo especialmente diseñado. Relacionado con ChunkDemuxer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679646",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5050",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-25T03:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en FFmpeg de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows, y Linux y versión 57.0.2987.108 para Android permitiría a un atacante remoto escribir fuera de los límites de memoria a través de un archivo de vídeo especialmente diseñado. Relacionado con ChunkDemuxer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679645",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5051",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-04-25T03:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en FFmpeg de Google Chrome versiones anteriores a 57.0.2987.98 para Mac, Windows, y Linux y versión 57.0.2987.108 para Android permitiría a un atacante remoto escribir fuera de los límites de memoria a través de un archivo de vídeo especialmente diseñado. Relacionado con ChunkDemuxer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.75",
            "matchCriteriaId" : "2B9559EF-FA8D-4452-BD04-243F0BD5389D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "57.0.2987.100",
            "matchCriteriaId" : "78D4802A-D418-48B0-AB99-B9F28C66F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679641",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T14:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dm_bp_transition docbase method with a user-created dm_procedure object, as demonstrated by use of a backspace character in an injected string. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server tiene un inadecuado mecanismo de protección contra inyección SQL, lo que permitiría a usuarios remotos autenticados ejecutar código arbitrario con privilegios de superusuario aprovechando la disponibilidad del método docbase dm_bp_transition con un objeto dm_procedure creado por el usuario, como se demuestra mediante el uso de un carácter de retroceso en una cadena inyectada. NOTA: esta vulnerabilidad existe debido a una corrección incompleta para la CVE-2014-2513."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA174108-AB36-4FE9-9178-B2EEBC4DD719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/97",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98038",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41928/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Apr/97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41928/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7477",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-04-25T14:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de buffer basado en memoria dinámica en drivers/net/macsec.c del módulo MACsec en el kernel del Linux hasta la versión 4.10.12, permitiría a los atacantes causar una denegación de servicio u otro tipo de impacto no especificado al aprovechar el uso de la propiedad MAX_SKB_FRAGS+1 junto con la propiedad NETIF_F_FRAGLIST, provocando un error en la función skb_to_sgvec."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.9.28",
            "matchCriteriaId" : "EC478002-2426-4D69-8E9E-180A2311371D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.16",
            "matchCriteriaId" : "8120FC70-5A9E-433F-AEE0-85DED2CE0B9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98014",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5294b83086cc1c35b4efeca03644cf9d12282e5b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5294b83086cc1c35b4efeca03644cf9d12282e5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T16:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en OxygenOS en versiones anteriores a la 4.0.3, en OnePlus 3 y 3T, a través de la cual un atacante podría bloquear el gestor de arranque para descargar parcialmente el contenido de cifrado de una partición arbitraria (a excepción de ‘keystore’) a través del comando fastboot 'fastboot oem dump '."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "A7FA279E-C889-4021-8A82-B866FADC73E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://alephsecurity.com/vulns/aleph-2017006",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T17:59:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients)."
      }, {
        "lang" : "es",
        "value" : "En las versiones anteriores a la 2016.11.4 de Salt 2016.11 el código salt-ssh esta copiado sobre la configuración de Salt Master sin ajustar convenientemente los permisos, lo que permitiría filtrar credenciales a atacantes locales en minions (clientes) configurados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689B37E8-7274-4B5A-9419-538A9AB7B99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B7EDF4-414F-429A-BD20-0B967737598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D927A3-0450-4C66-9952-0DFD1C8E43F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D526346-8F23-4016-9D89-7BD4182370A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594339CF-8192-425D-9C8C-AA51342D9477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54FADCE-5311-4C8A-9527-1623F9AAC69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E904BB7-706A-43E0-96CE-2A9E671E4FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98095",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1035912",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/issues/40075",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/pull/40609",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/pull/40609/commits/6e34c2b5e5e849302af7ccd00509929c3809c658",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1035912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/issues/40075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/pull/40609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/pull/40609/commits/6e34c2b5e5e849302af7ccd00509929c3809c658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T17:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de tipo XML External Entity (XXE) encontrada en api/it-recht-kanzlei/api-it-recht-kanzlei.php en eCommerce Shopsoftware modificado 2.0.2.2 revisión 10690."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modified-shop:modified_ecommerce_shopsoftware:2.0.2.2:revision10690:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD57CB3-847C-4903-9708-B33DD50D764E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jgj212.blogspot.hk/2017/04/modified-ecommerce-shopsoftware-2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jgj212.blogspot.hk/2017/04/modified-ecommerce-shopsoftware-2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1149",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-25T18:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202."
      }, {
        "lang" : "es",
        "value" : "IBM UrbanCode Deploy (UCD) 6.0, 6.1, y 6.2 es vulnerable a una denegación de servicio, provocada por un error XML External Entity Injection (XXE) cuando procesa datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente sensible o consumir todos los recursos de memoria disponibles. IBM X-Force ID: 122202."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D22F1E-6827-4343-BD5E-376710FF9A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3347-EE12-4E84-92D9-533DA7F1581E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C10FFF-250A-4530-B631-1B1DAA3B4BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE176DE5-BB60-4999-A2B4-D93C8AB776DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751113D0-7085-4AE7-8F39-292293F297FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31217ED6-C154-49CF-BD65-C272D630F58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F69D247-B168-40EC-BA4B-1C50879B64BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C822B4AB-4032-4BEB-A413-A80398A28EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF310F06-6674-470E-B258-4DF042B1FA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF92016-8494-4EBE-A32F-A123C1517F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "744A36AB-5BC8-4FE1-BB91-9BC3019EBB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4535B6A-0791-4855-BED4-01A8279F4930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C108D461-F391-491B-B1B4-AEB3155C2196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF8BEEC-5F93-424B-94F6-622B9BA84CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59AC6D5-1F06-4EC4-BD36-6FA5221AE611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7ED1843-E659-4931-8E08-8867D4286A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BA86C9-0A31-4EBB-B73E-346D6C425988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E082B0-B404-4E5E-9FC7-2B0B6F363A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054A3ED4-290A-484D-9F51-93A71968CAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5B4753-3685-4088-A4B1-C4AE58C11F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32732445-6761-40F0-836B-E7EAC9B9239B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8034DC-C20D-4972-AFBA-D3EBF8664164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5409F075-5268-476E-BEFE-2B93C8BB2870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43800F6-328E-4481-B6AE-44A50F368314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3BCD23-4033-443D-B2D5-CAF69FCD22D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A72039-925C-48AE-8012-BA6AEE659D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A488B1-1221-46C4-B97D-B895368E3A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD390D-531E-4BC7-B9D4-74208E153F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93406315-DD19-45E5-84EE-B5D8F0A903D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC97896-4190-4290-8176-00437F1E8864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C970147-39E9-4CCC-9FDE-B70546941323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F991AF-CD34-4307-85B0-58107E4CE1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000289",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98026",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1274",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-25T18:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary code by specifying a large mailbox name. IBM X-Force ID: 124749."
      }, {
        "lang" : "es",
        "value" : "IBM Domino versiones 8.5.3 y 9.0 es vulnerable a desbordamiento basado en pila en el servicio IMAP lo que podría permitir a un atacante autenticado ejecutar código arbitrario especificando un nombre largo de buzón. IBM X-Force ID: 124749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091D9954-232A-4158-A516-35A735343121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:domino:8.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAD0259-8096-41CD-BA06-58E26F2821C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:domino:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28326C23-64DA-4FA0-9F3D-7660FC17C2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:domino:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373527AD-D128-41CC-BEBA-6581F22D8AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:domino:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9196D34D-14FF-4E78-B9EE-36B59D133A98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/152786/Lotus-Domino-8.5.3-EXAMINE-Stack-Buffer-Overflow.html",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002280",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97910",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98019",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038358",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/676632",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/152786/Lotus-Domino-8.5.3-EXAMINE-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/676632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used PHPMailer version in the mail headers."
      }, {
        "lang" : "es",
        "value" : "Al enviar un email utilizando JMail API, en Joomla! 1.5.0 hasta 3.6.5, se divulga en la cabecera del email la versión de PHPMailer utilizada. El fallo ha sido corregido en la versión 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65184BFE-A070-4099-B672-3A238E9F83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920129E4-F979-49B5-9B96-62BCBC3954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A8900-E441-46C4-A725-BA312358760E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E276C-C62D-4828-89CB-80F526FEAEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E48636-9EDB-49BB-ABC8-D79864BFCB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E5E84-4C69-49F2-83DA-FC86202DB7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB968DF7-4A0B-474C-8639-06976837E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6BE010-649F-4E48-97DC-DDF7511406D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C4094-D028-4A55-B523-C90F5A4C9D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA6550-2135-4D41-B592-433FFFDEE180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73D78E0-BF24-433B-9F1B-03FD956C5779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BAC75B-DAC1-47E1-B9C9-48CF19489143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA97C8A-809D-44FC-95D2-5F269B6BF77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F607CF-AC49-4B13-96E5-B44191108CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B39FD1-44E2-43EC-B393-99E6208622B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77BABA-7768-4F92-84C7-D247E4772749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487204D9-7A9F-4A44-B625-FDBE2807444A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C8747-BF6A-4436-BC3A-A4B808AFF889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F137D-4572-472E-B1E0-EF7A0A3ED443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51BDBB-270D-4D4D-91D6-30114927667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861627F-EB9F-4B19-9E48-E3E9967EEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15F42BC-7826-493B-8C5A-D70A7263DCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC6CF00-2D88-4B97-A496-DCBE1B4E9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25771A2-206B-4366-B9DE-34D8CE12AE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F920ED-9578-4913-B851-3205BE13A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5F713F-F7EF-4E9B-BEB1-DDFDA0838D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9774D211-08D9-4339-B2AE-42434DBAF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C03B8F0-9A63-4896-A8CA-8CE829DE6B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086B989-8ED6-4DF2-92D6-2572315BEF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFFED66-B44C-47BC-A6FC-560DC9540001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552C590-F5AB-4B9C-9E18-ECE9E2753377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98016",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/683-20170401-core-information-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/683-20170401-core-information-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the template manager component."
      }, {
        "lang" : "es",
        "value" : "Un inadecuado sistema de filtrado en Joomla! 3.2.0 hasta 3.6.5 permite realizar un ataque de cross-site scripting en el componente template manager."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98018",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/684-20170402-core-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/684-20170402-core-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters leads to XSS vulnerabilities in various components."
      }, {
        "lang" : "es",
        "value" : "El filtrado inadecuado de caracteres multibyte, en Joomla 1.5.0 hasta 3.6.5, puede derivar en vulnerabilidades XSS en varios componentes. El fallo se ha corregido en la versión 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndIncluding" : "3.6.5",
            "matchCriteriaId" : "0CD26A61-1228-43AC-AEAF-20BF83345F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038817",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/685-20170403-core-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-107",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-108",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-109",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/685-20170403-core-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components."
      }, {
        "lang" : "es",
        "value" : "Un unadecuado sistema de filtrado de atributos HTML en Joomla! 1.5.0 hasta 3.6.5 permite realizar un ataque de cross-site scripting en varios componentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65184BFE-A070-4099-B672-3A238E9F83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920129E4-F979-49B5-9B96-62BCBC3954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A8900-E441-46C4-A725-BA312358760E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E276C-C62D-4828-89CB-80F526FEAEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E48636-9EDB-49BB-ABC8-D79864BFCB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E5E84-4C69-49F2-83DA-FC86202DB7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB968DF7-4A0B-474C-8639-06976837E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6BE010-649F-4E48-97DC-DDF7511406D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C4094-D028-4A55-B523-C90F5A4C9D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA6550-2135-4D41-B592-433FFFDEE180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73D78E0-BF24-433B-9F1B-03FD956C5779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BAC75B-DAC1-47E1-B9C9-48CF19489143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA97C8A-809D-44FC-95D2-5F269B6BF77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F607CF-AC49-4B13-96E5-B44191108CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B39FD1-44E2-43EC-B393-99E6208622B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77BABA-7768-4F92-84C7-D247E4772749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487204D9-7A9F-4A44-B625-FDBE2807444A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C8747-BF6A-4436-BC3A-A4B808AFF889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F137D-4572-472E-B1E0-EF7A0A3ED443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51BDBB-270D-4D4D-91D6-30114927667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861627F-EB9F-4B19-9E48-E3E9967EEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15F42BC-7826-493B-8C5A-D70A7263DCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC6CF00-2D88-4B97-A496-DCBE1B4E9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25771A2-206B-4366-B9DE-34D8CE12AE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F920ED-9578-4913-B851-3205BE13A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5F713F-F7EF-4E9B-BEB1-DDFDA0838D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9774D211-08D9-4339-B2AE-42434DBAF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C03B8F0-9A63-4896-A8CA-8CE829DE6B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086B989-8ED6-4DF2-92D6-2572315BEF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFFED66-B44C-47BC-A6FC-560DC9540001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552C590-F5AB-4B9C-9E18-ECE9E2753377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/686-20170404-core-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/686-20170404-core-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component."
      }, {
        "lang" : "es",
        "value" : "El escapado inadecuado de nombres de ficheros y directorios en Joomla! 3.2.0 hasta 3.6.5 deriva en vulnerabilidades XSS en el gestor de plantillas. El fallo se ha corregido en la versión 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98021",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/687-20170405-core-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/687-20170405-core-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article."
      }, {
        "lang" : "es",
        "value" : "El filtrado inadecuado del contenido de los formularios en Joomla! 1.6.0 hasta 3.6.5 permite la sobreescritura del autor de un artículo. El fallo se ha corregido en la versión 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B39FD1-44E2-43EC-B393-99E6208622B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77BABA-7768-4F92-84C7-D247E4772749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487204D9-7A9F-4A44-B625-FDBE2807444A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C8747-BF6A-4436-BC3A-A4B808AFF889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F137D-4572-472E-B1E0-EF7A0A3ED443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51BDBB-270D-4D4D-91D6-30114927667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861627F-EB9F-4B19-9E48-E3E9967EEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15F42BC-7826-493B-8C5A-D70A7263DCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC6CF00-2D88-4B97-A496-DCBE1B4E9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25771A2-206B-4366-B9DE-34D8CE12AE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F920ED-9578-4913-B851-3205BE13A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5F713F-F7EF-4E9B-BEB1-DDFDA0838D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9774D211-08D9-4339-B2AE-42434DBAF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C03B8F0-9A63-4896-A8CA-8CE829DE6B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086B989-8ED6-4DF2-92D6-2572315BEF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFFED66-B44C-47BC-A6FC-560DC9540001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552C590-F5AB-4B9C-9E18-ECE9E2753377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98022",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/688-20170406-core-acl-violations",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/688-20170406-core-acl-violations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden."
      }, {
        "lang" : "es",
        "value" : "Una inadecuada comprobación de tipos MIME en Joomla! 3.2.0 hasta 3.6.5 permite a usuarios con pocos privilegios cargar archivos swf aunque estén explícitamente prohibidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98029",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/689-20170407-core-acl-violations",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/689-20170407-core-acl-violations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T18:59:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on systems with enabled error reporting."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Fluid Core). Versiones compatibles que son afectadas son 8.54 y 8.55. Vulnerabilidad fácilmente explotable permite a atacante autenticado con acceso a la red a través de HTTP para comprometer PeopleSoft Enterprise PeopleTools. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98028",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/690-20170408-core-information-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/690-20170408-core-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3342",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-25T19:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: interfaz de usuario). Las versiones afectadas son: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. La vulnerabilidad, fácilmente explotable, permite a atacantes no autenticados que tengan acceso a la red a través de tráfico HTTP comprometer dicho componente. Para que el ataque tenga éxito es necesaria la interacción de otra persona además del atacante. La explotación del fallo puede derivar en la creación, eliminación o modificación de información sensible o el acceso a toda la información de Oracle Marketing, así como la lectura de cierta información a la que tiene acceso el propio componente. CVSS 3.0 Base Score 7.1 (impacto en la confidencialidad y en la integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98061",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3345",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-25T19:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: interfaz de usuario). Las versiones afectadas son: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. La vulnerabilidad, fácilmente explotable, permite a atacantes no autenticados que tengan acceso a la red a través de tráfico HTTP comprometer dicho componente. Para que el ataque tenga éxito es necesaria la interacción de otra persona además del atacante. La explotación del fallo puede derivar en la creación, eliminación o modificación de información sensible o el acceso a toda la información de Oracle Marketing, así como la lectura de cierta información a la que tiene acceso el propio componente. CVSS 3.0 Base Score 7.1 (impacto en la confidencialidad y en la integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3347",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-25T19:59:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: interfaz de usuario). Las versiones afectadas son: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. La vulnerabilidad, fácilmente explotable, permite a atacantes no autenticados que tengan acceso a la red a través de tráfico HTTP comprometer dicho componente. Para que el ataque tenga éxito es necesaria la interacción de otra persona además del atacante. La explotación del fallo puede derivar en la creación, eliminación o modificación de información sensible o el acceso a toda la información de Oracle Marketing, así como la lectura de cierta información a la que tiene acceso el propio componente. CVSS 3.0 Base Score 7.1 (impacto en la confidencialidad y en la integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98060",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3355",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-25T19:59:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: interfaz de usuario). Las versiones afectadas son: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. La vulnerabilidad, fácilmente explotable, permite a atacantes no autenticados que tengan acceso a la red a través de tráfico HTTP comprometer dicho componente. Para que el ataque tenga éxito es necesaria la interacción de otra persona además del atacante. La explotación del fallo puede derivar en la creación, eliminación o modificación de información sensible o el acceso a toda la información de Oracle Marketing, así como la lectura de cierta información a la que tiene acceso el propio componente. CVSS 3.0 Base Score 7.1 (impacto en la confidencialidad y en la integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98059",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3356",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-25T19:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: interfaz de usuario). Las versiones afectadas son: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. La vulnerabilidad, fácilmente explotable, permite a atacantes no autenticados que tengan acceso a la red a través de tráfico HTTP comprometer dicho componente. Para que el ataque tenga éxito es necesaria la interacción de otra persona además del atacante. La explotación del fallo puede derivar en la creación, eliminación o modificación de información sensible o el acceso a toda la información de Oracle Marketing, así como la lectura de cierta información a la que tiene acceso el propio componente. CVSS 3.0 Base Score 7.1 (impacto en la confidencialidad y en la integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98058",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3434",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-04-25T19:59:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized read access to a subset of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle One-to-One Fulfillment de Oracle E-Business Suite (subcomponente: Audience workbench). Las versiones afectadas son: 12.1.1, 12.1.2 y 12.1.3. La vulnerabilidad, fácilmente explotable, permite a atacantes no autenticados que tengan acceso a la red a través de tráfico HTTP comprometer dicho componente. Para que el ataque tenga éxito es necesaria la interacción de otra persona además del atacante. La explotación del fallo puede derivar en la creación, eliminación o modificación de información sensible o el acceso a toda la información de Oracle One-to-One Fulfillment, así como la lectura de cierta información a la que tiene acceso el propio componente. CVSS 3.0 Base Score 7.1 (impacto en la confidencialidad y en la integridad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818AA91A-F9EC-42D3-8BF2-40AE61D214C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B4D6A-7136-49B1-B537-DE573BFEBCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6374C8-AD2E-4997-AE75-D91F1AF90206"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98054",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T19:59:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en setup/processors/url_search.php en MODX Revolution versión 2.5.7, que permitiría a atacantes remotos obtener información del directorio del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E69041C-F126-4D58-9735-BA111D7A374F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modxcms/revolution/issues/13432",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13433",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/issues/13432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link C2 y C20i a través del firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n tienen reglas iptables demasiado permisivas, por ejemplo, SNMP no está bloqueado en ninguna interfaz."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c2_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "C2AC82F9-C75E-4E82-A23D-03C63F0B03D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6025AAC-BA1E-4FE7-A577-EB3F5C3F8933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c20i_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "792348D1-7A1A-4B56-B0D3-A5887E5FDE7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c20i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7309B81-2E51-4CE8-8DAB-AA640C6A7F89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password."
      }, {
        "lang" : "es",
        "value" : "Vsftpd en los dispositivos TP-Link C2 y C20i a través del firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n tiene una cuenta de administrador de puerta trasera con la contraseña 1234, una cuenta de invitado de puerta trasera con la contraseña de invitado y una cuenta de prueba de puerta trasera con contraseña de prueba."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c2_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "C2AC82F9-C75E-4E82-A23D-03C63F0B03D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6025AAC-BA1E-4FE7-A577-EB3F5C3F8933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c20i_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "792348D1-7A1A-4B56-B0D3-A5887E5FDE7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c20i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7309B81-2E51-4CE8-8DAB-AA640C6A7F89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link C2 y C20i a través del firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n permiten hacer DoSing vía servidor HTTP a través de una Cookie de cabecera para /cgi /ansi URI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c2_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "C2AC82F9-C75E-4E82-A23D-03C63F0B03D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6025AAC-BA1E-4FE7-A577-EB3F5C3F8933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c20i_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "792348D1-7A1A-4B56-B0D3-A5887E5FDE7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c20i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7309B81-2E51-4CE8-8DAB-AA640C6A7F89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a \"host=\" line within HTTP POST data."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link C2 y C20i a través del firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n permiten la ejecución remota de código con una sola petición HTTP colocando comandos shell en una línea \"host =\" dentro de los datos HTTP POST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c2_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "C2AC82F9-C75E-4E82-A23D-03C63F0B03D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6025AAC-BA1E-4FE7-A577-EB3F5C3F8933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:c20i_firmware:*:rel.37961n:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1_4.2_v0032.0_build_160706",
            "matchCriteriaId" : "792348D1-7A1A-4B56-B0D3-A5887E5FDE7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:c20i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7309B81-2E51-4CE8-8DAB-AA640C6A7F89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Wireless IP Camera (P2P) WIFICAM se basan en un protocolo de túnel UDP en texto claro (también conocido como la función Cloud) para la comunicación entre una aplicación Android y un dispositivo cámara, lo que permite a los atacantes remotos obtener información sensible escuchando la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wificam:wireless_ip_camera_\\(p2p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08E453A-E40A-48E7-9FC0-2CCEB7052644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wificam:wireless_ip_camera_\\(p2p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407AAB84-DC42-4CC9-A33F-4EBDE16C97E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#cloud",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#cloud",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wireless IP Camera (P2P) WIFICAM devices have an \"Apple Production IOS Push Services\" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Wireless IP Camera (P2P) WIFICAM tienen una clave y un certificado RSA \"Apple Production IOS Push Services\" almacenados en /system/www/pem/ck.pem dentro del firmware, lo que permite a los atacantes obtener información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wificam:wireless_ip_camera_\\(p2p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08E453A-E40A-48E7-9FC0-2CCEB7052644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wificam:wireless_ip_camera_\\(p2p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407AAB84-DC42-4CC9-A33F-4EBDE16C97E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#rsa-lulz",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#rsa-lulz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av0_1 or tcp/av0_0."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Wireless IP Camera (P2P) WIFICAM, un atacante puede utilizar el servidor RTSP en el puerto 10554/tcp para ver la transmisión sin autenticación a través de tcp/av0_1 o tcp/av0_0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wificam:wireless_ip_camera_\\(p2p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08E453A-E40A-48E7-9FC0-2CCEB7052644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wificam:wireless_ip_camera_\\(p2p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407AAB84-DC42-4CC9-A33F-4EBDE16C97E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Wireless IP Camera (P2P) WIFICAM tienen una puerta trasera con permisos de administración a la que se puede acceder con TELNET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wificam:wireless_ip_camera_\\(p2p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08E453A-E40A-48E7-9FC0-2CCEB7052644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wificam:wireless_ip_camera_\\(p2p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407AAB84-DC42-4CC9-A33F-4EBDE16C97E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#backdoor-account",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#backdoor-account",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-25T20:59:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Wireless IP Camera (P2P) WIFICAM, no se comprueba correctamente el acceso a archivos .ini (que contienen credenciales). Un atacante puede omitir la autenticación proporcionando un parámetro loginuse vació y un parámetro loginpas vacío en el URI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wificam:wireless_ip_camera_\\(p2p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08E453A-E40A-48E7-9FC0-2CCEB7052644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wificam:wireless_ip_camera_\\(p2p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407AAB84-DC42-4CC9-A33F-4EBDE16C97E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5437",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2017-04-25T21:59:00.187",
      "lastModified" : "2023-11-07T02:49:25.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197.  Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197.  Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-26T05:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to get arbitrary system privileges, because these services have .NET code for DCOM. This affects Dolby Audio X2 (DAX2) 1.0, 1.0.1, 1.1, 1.1.1, 1.2, 1.3, 1.3.1, 1.3.2, 1.4, 1.4.1, 1.4.2, 1.4.3, and 1.4.4 and Dolby Audio X3 (DAX3) 1.0 and 1.1. An example affected driver is Realtek Audio Driver 6.0.1.7898 on a Lenovo P50."
      }, {
        "lang" : "es",
        "value" : "Los servicios de la API DAX2 y DAX3 de Dolby presentan una vulnerabilidad de escalada de privilegios que permite a un usuario normal obtener privilegios de sistema arbitrarios, ya que estos servicios tienen código .NET para DCOM. Esto afecta a Dolby Audio X2 (DAX2) en las versiones 1.0, 1.0.1, 1.1, 1.1.1, 1.2, 1.3, 1.3.1, 1.3.2, 1.4, 1.4.1, 1.4.2, 1.4.3 y 1.4.4., y Dolby Audio X3 (DAX3) en las versiones 1.0 y 1.1. Un ejemplo de controlador afectado es el Realtek Audio Driver 6.0.1.7898 en un Lenovo P50."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A24F2-FE9F-4C27-AC52-CC0476E80ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0084800-A70F-41CD-93FC-F9E78FFF949C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF68265-CD2A-4BBA-9C44-4DAA4FDD9CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A5F2F8-04B1-46B0-B2CA-8E7AB9372093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BDE747-FE1E-44F1-87F9-FA44211DBE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248E7718-E8E5-437C-93EC-5C6F0BBF0D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A905366A-9BBE-4BD9-8C25-10464A71F530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2C8BDC-48BE-4346-A119-2F2B30BAD4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F704ED6A-4AE9-4DAC-83CF-09C2BA640974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D018F50-F7C4-487F-A948-AF94C145F449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3108866-EF40-4309-AF5F-D82AD0C2FBA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B58657C-DA03-44F4-A15A-D333D22AC27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x2:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DE5525-6AAC-4BD0-9641-A053137D03AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x3:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3190239-B092-4FF1-8F70-DD28215ED0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:dolby_audio_x3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "774E49E1-3781-4D5D-81F2-E7B0CCC5E170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1075",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41933/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41933/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-26T05:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD."
      }, {
        "lang" : "es",
        "value" : "Dpkg-source en dpkg en las versiones comprendidas entre la 1.3.0 y la 1.18.23 es capaz de usar un programa de parches non-GNU que no ofrece un mecanismo de protección para diff hunks identadas en blanco, lo que permite a atacantes remotos realizar ataques de salto de directorio a través de un paquete fuente Debian, como se demuestra mediante el uso de dpkg-source en NetBSD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE11BC65-A189-4C41-8FC0-E61DAC0BC912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DC4D18-98DE-4070-A464-ADE5A2915F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7044A915-723A-49C4-ACED-677F5D242443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2697BDD6-7532-40A8-854B-92DA1D872A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324215DB-D8E0-4290-B7BB-349AC53AEAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A86A15-A67B-4790-A758-E36676F4C727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1B8B87-F93A-4D14-9FE0-FA7DC4D19075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A937129A-2A40-4F7B-B736-07F5ACE9E4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA31C830-8DB8-44FB-A4C3-A4EF7433DED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68236014-79C9-499E-9CFD-EB7904AB221A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A7BEC4-AAF5-4F05-BC76-A4F4E07EEDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138E37BD-3ABA-40E8-9E07-A532C5C50EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "181FA945-F628-48A8-8D6B-C5F96781D963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EC8CFD-776B-4D9C-A8A3-7703CAB8013A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81DC4D1-0152-4978-8D88-7ED93880BA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7EBAB5E-9DF2-4A5E-9949-67532BAA5ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0642122-603B-45FA-8810-0CD731C10F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ABE396-C0C0-4313-B24C-F4F6C6F89670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04EBEA93-015A-4D84-9F79-DDCD235B20FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C3B2B6-63AB-464A-BE1E-124FE06EE6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A761620C-2D70-4A6F-9155-D041632D5E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100C956D-67F8-4C5F-98AC-6F541E86793E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099A34A5-1278-43B1-852E-4BD7EAB10A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26A8E94-C4CD-4FBD-8ECD-9625988AC8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD99470-344B-4D1C-AF50-A32443855759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA71EE5-C358-4F87-B360-1D840AFF7BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0967EE-F3F9-4FD9-88EC-2D4EED35331A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868D8CB7-4487-4D74-A853-5D4932ECD929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E02286-E1D4-4BD6-BEEC-0974F9ACBAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B3A1FD-5891-4DDB-9146-8C86054576AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13987CAD-5EB3-4CAE-ABD8-20F69D2679B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE17C2D-4766-491C-8A5E-1BEFD4FC25D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE35F47B-5462-487B-B03C-02B0D34155B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F98EC0C-9AD2-423C-A291-6E259BF04D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDBAD0-62A5-4EB6-A108-94E19B79C018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48338A48-6473-40E8-9A00-68928AE51879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5F2DE5-06D0-444F-9E36-4FF092903661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777625A3-EFF9-40D8-B7B2-F6CF6E6FE5BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529BB8C9-ECB8-45F0-A23D-68F85E9A27E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12C1D56-8207-47FF-8435-8400FB20850A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EDD80-B829-4702-BECB-B4BA962B6C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35662456-5125-4440-BD90-25E83B1651F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161CA3A5-D104-4C36-8B85-A89A068AAF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A462F063-2035-4F94-B011-40D59CFCC75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.26.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958F0B43-45B3-43FD-B409-73B35D91CFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CD70A2-6BB5-45E9-B9B4-49E58C8A352E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50B78E7-4A34-4F70-8D7C-8C1927D14AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CD5315-03F3-4015-9332-57DB0444EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC915218-392A-475C-9BFA-801C1570FD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE984DA-F633-4F9B-8D2A-922B37CA0FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAE05C0-AB65-41B4-A2ED-DAD871FC41D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC8CFDB-1463-486D-9EC8-5587E88330DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AE6599-8498-4C4E-BA5E-D2F9544B9DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D99C20-B149-4565-9EC5-3967EDBB3F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11194B64-27CD-42EC-9AA3-98FA8CF4BB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8451829D-9F66-4AF0-8CB8-16E8DF84C563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AA8CEF-9923-43FE-A02C-A8E69F30BC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337585EE-9077-4372-AAA8-614E36A3E0AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFC93C5-A026-4FA7-8959-1D09F2D96BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91024A66-9F52-4287-910C-B0389D36414F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC869D5-48AF-4720-BD94-B2EF02F09897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B78931C-2A76-4912-8C54-FB2C63A5ADA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD0F5D2-D941-40EC-B5D9-421A31456962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2DEBDF-8C8E-4930-B840-0B88F4AD225A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F196354-0D0A-4747-9BB0-05A60461B588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829A54D4-323E-4A55-9764-A0D27F83EDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D74CDF5-FF8F-4F2A-8F7B-E37002C14B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4112289F-89FD-422E-B512-2EDC6A2C4209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488FAE8-3810-44A3-A40F-C5D67FB5E4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAD4103-0212-4B5C-9ABE-FA3BCA78B0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98E7AB6-C833-4A4D-82F8-BE64DFD975B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1533A379-1905-49E4-B920-8DC0D4232418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33318FE-17A8-4631-B4A2-D810D4A7D185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CFC592-35CA-47CF-8FA4-E1B5CDCFE7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C6CA47-2E53-4329-AF72-A16A389A5C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6208F6F5-C2E7-4CA1-8F8B-092E926520C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B07AE2C-E0C7-4FDA-B8E6-29A3A1F2B4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FB6751-80FB-43F1-90BD-7E2BAA65A34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCC88E4-5CF3-427B-9A3D-ADC903FCF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA442560-01D1-44C5-828A-64E2607DB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9195F43-E46B-44BE-9F5C-8EC80E566D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C32C965-770A-4B24-A2F4-6AC80CE02375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B74618-8C89-4D0D-8E41-C4E2CB4FB24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.12.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5C39F9-5EA2-4DFB-A9EE-55CED73D01BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2444778F-500F-44CB-8173-3B17E49128E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3321CE7C-9944-402C-AD82-36256995F7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAE63D0-EAAC-47DF-B683-D60B3668E810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4A761C-7ED6-4FB8-9B9B-FFC1C5FB1C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C88010-BE41-4666-8BF1-E9DE3FA118DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84094BA-DEF2-4918-B761-CA944C4F484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322254FF-7E4B-4265-B21B-015E62FA791B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E39F6F5-ABE2-4F40-94BA-62FB458F55BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7919A700-73F9-4502-99C9-4A6A1E9FC6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6B733D-FAAE-490E-8C00-A8816A96FD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C105425C-62F9-4F70-803F-E74D7209DE33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BE886D-9100-4CE0-AA31-68D3203740C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490C3F9-1DF6-423E-93A8-5F51E2639637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D016FED-8F0B-4104-9CCC-48CD4563F787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E931BD2-852E-4CD1-8C26-957EE1DB9BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A89C655-FDB6-4F69-8ACE-FA076A61E048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37D54B2A-8250-412C-B164-090C90A6444C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB05EF4-B0B1-4C92-B09F-1B9911A2F10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6871FD79-6B00-4015-8EB1-728CA5623DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A74291-78A4-43C5-B284-B38A22AD5870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F521CAF4-792C-4B16-BC22-21E82D583EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B856A-F05B-4175-A6E4-40A97B4ADE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF00B7B-839C-4728-A3C2-44177C0CFB0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E925582-F14E-4EE1-9952-2B448C22E069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA55BD3-8CB9-4193-97F3-52DDD7516F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3ABA00-605D-4F4B-B5B2-D474C76C257C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DD7FEA-4855-462F-B293-61B637F26420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C682EF47-BF0A-4B48-A1D1-A55A9ECA7F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F6453-69FA-426C-9346-CD7BEDE9C60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3122762-BEF0-4988-BED9-4D8592C24CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E2515-E79D-4237-97E9-D5BA35A5F4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9562A87-9464-4203-8360-58E9A7E495FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4989628B-306C-4E03-A64E-718C4FF2778F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB0B1D3-632D-442B-8B83-92591CD80A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFADCC1-6162-482F-971A-04041715E562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52270405-2AC2-41B7-B07A-42763993D587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4C5026-D1BD-490A-9C3B-526BDBD9F2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63A530D-1DB8-4AB4-A62D-BB73BDA6A96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE83D2A-D1F7-460F-AFFA-45D635D23B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA52B75-0BE4-4647-A02E-6C01FF15DD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7306A247-0AAE-43E7-A9E0-CE224A1B239B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8347AB5F-5194-4B96-A8E7-9EE51B82C8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48A99CC-0F6E-49F4-99C5-8647A66A5B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C844AC14-2ECA-45AB-B9A1-44CF626143BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466B21B4-DF59-4B55-8778-BD674A137F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C69AA54-AC53-4A10-8ED4-C426F4C37305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC00A088-B0AC-4CCD-8EAE-31D4DB6372B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C34F7E-91AD-4009-A86B-E3C42533C67D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840FA75D-5AFC-4011-AA2C-A851763A8E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDF073B-7437-4700-A5BD-B47CF1163302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D44007-FEEB-4A1E-BBEA-A8F9337ABE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756ED650-7FBF-47D5-800D-B7CDCE98DB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4047BBD-BC04-4CB1-A499-D2B8D3FE6B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E88290-55F4-4177-85F1-7ACBADEB6D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17561362-F579-4C4A-B706-E7BFD4B4D005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3A554-49D3-4AA0-AF85-A503288EDA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DABD98F8-3512-4F83-BEA8-29787378990B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33AE89EC-30B6-4B2C-BB7D-105C7BA31673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675635B9-B25D-4A6A-B990-F3347D76AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.10.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5591746-1BF7-41C2-8078-0CA13BA4FDE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EDAF7A-A7EF-4FA2-AB0F-1B617311F6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6B0569-44FC-420E-BAF5-08149463D994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE641CD-FD8B-4B09-A738-46795F9CB9AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE98EF7-E1D0-460D-971D-F460494BB271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B55AEF9-3375-4E2D-9A5C-BC88626A4977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9734B69-76A9-43A9-96F5-7551DFE691E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38087DB8-ABB3-49F8-98B8-1C36BC588D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48585882-3F63-4CBE-9C82-8E33F52F86C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA224D00-B0BE-4CCC-A221-9BE93AE5F453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87362BEE-E7B5-4390-9226-6C97F4C82E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588BCD31-3824-40F9-8BE2-C63F6A40E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583BE1D2-6A50-4477-AD01-EA471B339F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D64BC1C-4281-46E8-B6DD-20D09EB5DC59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8252FED-9D03-4224-ABB2-6E86E1278ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D013303-0BEA-44AE-A395-343EF27D207E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FF0360-F1FE-4C59-829E-544D9CCE6673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BE27E1-F670-41B8-A5C5-4C28C94D3826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB637-6349-4452-B619-7080843E1A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698F4BA9-A8AD-4487-8989-5E41D80A162B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B458153-71BE-4EDF-950D-055D9A3D1E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4DC29D-F36D-4B02-BDA8-F0316948BBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D46650E-EDE7-48B0-841D-CC0D45B92FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9D843A-4EA7-4B6D-BA62-A8C1C300F47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5635A041-FBFB-411B-95F4-1A11248D4FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090CD311-7B97-4E69-B2CA-6ED9FCBEDFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C17AEE-408E-4D57-B5A8-027FEC9AD144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.13.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0431871F-39C5-4707-BE53-FAC9E9882170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838E9A96-BA10-4A4A-AA41-EC025CCD07E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EAFE0A-0A9D-4F9D-BB7F-F4C10797F463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4FDA2-5729-4964-B48F-01DBC26DAEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D08D336-460B-4153-B747-B1F116065DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68401F3-1AF2-4FB5-916E-F40FB6E0DD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DC7349-C57C-47EB-BE92-3BE4719A32F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED090E5E-772F-44B5-86F6-D2388D431055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526B3511-D083-4153-9DB8-6B8C62426876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB46B910-10AC-4B06-AC90-5E281AFF445E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3A73DC-EE37-41DF-A939-4631A3D1F401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E37212-1BC4-44F5-AFEE-BF706FF9F771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A1EF6-2E3C-4786-82BD-687EB44B5541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8096535-AF94-44E3-8266-006FDB84092B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F65E09-7A40-45E2-BEB1-E11B694E7957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FFCFA9-67A9-4502-AD48-2A1CFB6D12D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C610809C-7C63-427B-9910-F6F0090B34A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5A449F-B9B6-41DB-91B6-E75ABADFB835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6848180-B565-4DC0-87AB-84DF4BF51F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3070BF5-18C4-4ECD-8795-C569254F4E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355873B5-FEB9-4FAB-BE8B-8D56C9990F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0355952-8254-477D-BE82-37ED064F5A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AA3EC2-4936-4F29-8885-377906DA346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4503AF-3941-4318-AAE9-38EF578361EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958C20C5-3502-417B-8AF4-3E7E43919672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9F52F6-DCF1-466E-8F28-77061513DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126BF92A-9767-4A6C-985B-DB6C99E090B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69991FEF-82C9-4760-8623-B1A47348DD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF95E1AA-1A05-4F97-8AAA-C815EE3994BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6200AF-7734-422C-9059-652A4530EFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5073553-FB4D-4BF1-B3BA-B5CC2B3F45E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26FA5D0-F06B-414F-9F65-D5821365DA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.14.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61614F0-B814-4367-A12B-22806A65E8A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D266110F-6EDD-4570-8B5C-BB6A620D7510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5489857D-D325-41D1-991C-1664EB63CF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF34E4C1-9160-4052-951A-D08835024AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E46BF1-5BC3-429B-9A16-2F95620A8FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B3327F-8A47-4D13-A48A-3157B6318F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90246AB1-F0C4-432B-AA2D-A644084C0C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EAC604-FF3B-470A-9413-EBAC32DC1322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E9FBA6-6418-448F-800E-970C9D08877F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98521A64-4E54-472F-AC7C-73005551CEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421D9F1E-EF92-47E3-98D6-8C824862F7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D85C04B-FC70-41BD-8994-B7C1AF6048BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFD7DD4-555B-4757-B459-01B9D915A9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C7B906-87E1-44F3-AF35-5BFEF574F180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0984921F-8EAB-4740-B2CC-4269C4CF6C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48CB557-229E-4BA5-84C6-DBEA06552D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F27F9EA-226F-450F-A181-F100E49A90B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9E199F-1994-4C5C-B8DB-D6002FD95AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419D7AA6-745E-4254-9743-6AC136DB1893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1F3BE1-30BA-4780-9924-D5B0E4F50EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFBE00A-3FB7-4D10-807C-67CA59B91044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E486ABD-DD1D-43A9-9783-894694E0F14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEA4E0-8BF1-4558-88F3-D3F3D8161287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1405C137-D923-436C-A006-F232961BAB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD929336-FAFB-480C-8CD1-3264C3BE529B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2B117A-2746-458B-AB77-37EB40646482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8A1B4A-59D3-4D0F-80CC-7D8F94B5699E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12559EE-7FAC-4C21-99CC-D076E98CA137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B7B48B-B915-43D7-9AE4-EA1322925EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7AE1019-67C2-4334-83DC-75754C997079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.15.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AC0E03-C115-4B5C-9D1B-CD86B749B8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B76474-A71E-4BEA-880B-88A8F0E9E79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5918D066-8950-44D5-9F14-72C499F9F40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF341-D9EC-43DF-BA62-D45FDC1FE4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6692AB-7927-4D4B-8E11-EA9B7B93836C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EE875E-DEC4-443C-8921-B4658CA2B2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD2CFE-61E4-436E-9D49-7F1977904EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DB535B-9C12-4B13-8B6E-AB4EEC1CFF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6675F9A6-FA20-4AF7-B57F-85595103AA61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3322B7E4-D815-40B6-836A-2D070F9D0528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67143CC-3137-49B3-955C-43C405DB847B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CA956E-51BC-428E-9730-31797A34BE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFC055D-9B64-428C-9D85-CFC2F27EB906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6E62F-B11F-4060-8AAF-A9FA73749422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B05CB56-6994-4F75-8015-03F554CD7D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CF35EC-CCBF-4096-BCAF-98A15DE6D78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C819CC-48E9-4E85-A564-456A27481852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7B2152-3086-4094-8AE2-6E1AF9D35BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5B9CC6-C288-4E8C-AC99-D4717DBE63FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CD971C-EB83-4456-A368-F57B9391599A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2B08-C8DD-475D-8E7D-F39E8C24723B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA424995-B5E0-4C8A-862B-5290506DF94E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F974E2-41AF-42B2-8EE7-02724FD37673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD1F763-34E3-4B39-9184-6CCCD75733A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8ADF13-CEF9-400B-BACA-F64AFDEEED7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2595A0-024B-4C82-8626-9471A3FB96D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81B04E7-FBA1-45D3-B458-3B57DF331796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A9FC7-1B44-4A70-83B6-21783C5BB9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66344A0-A556-4E72-9954-CBC0FF9B900F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E72C4D-373A-4E74-A038-AD79EA0845D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D89B07-FB9C-4D88-91A1-431FB91605DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067D13A0-0DBA-4749-9E5C-428338758C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955DA593-FD4C-4BC8-8B64-CA193892C1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E35346F-2FCD-42D3-ADE2-D25DCBF11D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681BF89B-6501-4992-A953-578908C68ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9DD402-ADC7-4000-A6C8-D62DA2BD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26692A1-6DE7-4295-99BD-EFF9B0C20162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B65F0D-1708-4B73-B9C3-033E8150348D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A257BEDB-0148-4EE6-B7EA-0DE39752F897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A046309-41A1-420C-ABF3-090AD11C9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C70C8-EB31-4E54-A690-727518FBCD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130E8C0F-0649-4F32-921F-A51EEA4981DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF133CE-B3D1-48C2-8AC1-938E70820CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.17.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C6ED10-12DC-4896-9B8A-E05BAB5B5DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70450EA-AACD-465A-A69B-0F08EE3BC872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A59D8B-0F6F-4DD1-B7C4-DE78328CA860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1C9E9F-7A94-4CBE-AE40-59B2ED00D33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205EDA2E-9169-4FD3-91D0-D951AD7C46D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABA3373-F329-4B25-B0A4-E90F6BB9C9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C013DEB2-D37A-4AF6-B7C7-9D86A86B67AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B7D843-E7A3-4DC7-BA1B-2DE736EECACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F9F980-1824-46D1-894E-7DE85F79E0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D4CF19-06AB-4D3A-A359-E09DC79EA4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E61A26-5ABC-4A8F-B6F0-2445180C3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066D3291-A27E-4153-9EA2-7A003B228B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745F3B54-C363-4D95-8384-1DD3398BDC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1177CE36-95A5-4B66-9B62-82785A8B3032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F11DA2F2-9021-458A-92D6-C283B17F713F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA01874-AD45-4C43-9F7B-4CA493910489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC924C0-EE2E-4C5A-BB30-F13365F3A11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E0AEA0-AE21-478F-BA93-6072E7088370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F0DDDD-2D1F-4552-BF03-03E2918CFC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C63D07C-9D18-4738-BD60-882D500A02EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF34992-59E9-45BE-BB39-688E47497A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E25F1ED-B563-4031-8A22-18F03BD3294B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1377A9-57F5-4334-BAE6-0B45A1423AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB03C737-C7E9-45F1-81A0-16CCE49C12B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:dpkg:1.18.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23475849-52AE-4030-B627-8D1B48CA893E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/20/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98064",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6052",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-26T14:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified, which may allow a remote attacker to access or influence communications between the identified endpoints."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de tipo man-in-the-middle descubierta en las versiones 3.9.5 y 3.9.4 de Blue Link de Hyundai Motor America. La vulnerabilidad se basa en que los extremos del canal de comunicación no están autenticados, lo que permitiría a un atacante remoto interceptar o influir en las comunicaciones entre ambos extremos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyundaiusa:blue_link:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311E002C-207A-428E-984A-EF4D30E30654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyundaiusa:blue_link:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638386D0-BB98-4B19-9969-4D5E74C4FAE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98033",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixed",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6054",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-26T14:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. The application uses a hard-coded decryption password to protect sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto el uso de una clave criptográfica embebida en las versions 3.9.5 y 3.9.4 de America Blue Link de Hyundai Motor America. La aplicación contendría una clave de descifrado embebida utilizada para proteger información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyundaiusa:blue_link:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311E002C-207A-428E-984A-EF4D30E30654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyundaiusa:blue_link:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638386D0-BB98-4B19-9969-4D5E74C4FAE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98033",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixed",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-26T14:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de buffer en PrivateTunnel 2.7 y 2.8 permite a un atacante local causar una denegación de servicio (sobreescritura de SEH) a través de una contraseña larga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privatetunnel:privatetunnel:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA31177F-EEEE-4886-A4C1-83AA80C921F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privatetunnel:privatetunnel:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67325F37-5868-4F99-863A-2C7D81AB8B52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41916/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41916/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-26T14:59:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The disas_insn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size, which allows local users to gain privileges by creating a modified basic block that injects code into a setuid program, as demonstrated by procmail. NOTE: the vendor has stated \"this bug does not violate any security guarantees QEMU makes."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La función disas_insn en target / i386 / translate.c en QEMU para las versiones anteriores a la 2.9.0, cuando se utiliza el modo TCG sin aceleración de hardware, no limita el tamaño de instrucción, lo que permite a los usuarios locales obtener privilegios creando un bloque básico modificado que inyecta código en un programa setuid, como lo demuestra procmail. NOTA: el proveedor ha declarado que \"este error no viola las garantías de seguridad de QEMU.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1122",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qemu/qemu/commit/30663fd26c0307e414622c7a8607fbc04f92ec14",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qemu/qemu/commit/30663fd26c0307e414622c7a8607fbc04f92ec14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1170",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-26T17:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en IBM WebSphere Commerce Enterprise, Professional, Express y Developer 8.0 podría permitir a un atacante local secuestrar la sesión de un usuario. IBM X-Force ID: 123230."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2E7243-19A2-47B2-905E-47219F08F4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C534568E-A611-472C-9399-15FC66D875C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF3D419-A12C-4A21-9796-DBB73D638E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87504CD1-92DA-4847-BDA7-013622CA7AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625E1896-9035-46F3-957B-83FB128F90F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3AC68C-CCA2-495D-AE21-04C937CD5340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56CE80F-A7E1-4BE0-9679-BB4F94362B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3C8F33-D613-4183-ABE1-5A3A08C16BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5F593-BE92-4E37-9EE9-42C05FA87DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D19E4D-A256-44D5-A8D8-7C9F3A64B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12961C31-63AD-4AA8-8267-E003F985CE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9D8DAA-285C-4ED1-A602-412725FD79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75B5188-E337-4240-9834-92C11DCE9DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2E3F22-60F9-4B70-9485-6DDAC7FE4496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8902699B-AE6A-44A4-838A-28F3EB62881B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50A02C-E75F-4602-BDAA-FA4CBEE9CB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC536A-498B-439F-927E-B72314F8B0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0A8CAD-D5DD-45DE-900F-046673002D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1895E-384D-4EF3-A395-7AFFC22E46CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438E93D2-502F-4569-AB8A-EFECA403798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64287718-D7AD-425B-B7B7-A6442BFD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1523569-2A23-4689-BE59-F74E678A8B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F4B2FD-14BA-46D9-B09F-1DABBA88FF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B22C48-3347-422C-9730-0A9442645D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDA8ACF-4134-434E-A5FD-39A587DE27FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFB25F3-6FD7-45C9-AFCF-FAB034107E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BCC81A-B7DA-40B9-B883-A00DF9CE585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8C98FD-E4AB-4BC8-9729-652294B1DF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A754F0-1328-48EF-B3C6-8435EC11D680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3DF211-CE2D-47AE-BADA-A75F28B6961C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DB29B-5FC7-496A-B20E-99A644D8A073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D04C7-A19F-4EB6-91AE-A8890F8FFEA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001225",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98027",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038359",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3161",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-26T20:59:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter."
      }, {
        "lang" : "es",
        "value" : "El interface web HDFS de Apache Hadoop anterior a 2.7.0 es vulnerable a un ataque cross-site scripting a través de un parámetro mal filtrado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.5",
            "matchCriteriaId" : "8FD2F650-257B-49ED-80EE-DCF20088D3EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98025",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://s.apache.org/4MQm",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://s.apache.org/4MQm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3162",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-04-26T20:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en HDFS de Hadoop en versiones anteriores a la 2.7.0, a través de la cual clientes de HDFS podrían interactuar con un servlet en el DataNode para poder explorar el espacio de nombres HDFS. El NameNode se proporcionaría como un parámetro de consulta que no estaría validado en las versiones mencionadas de Apache Hadoop."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.5",
            "matchCriteriaId" : "8FD2F650-257B-49ED-80EE-DCF20088D3EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98017",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://s.apache.org/k2ss",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://s.apache.org/k2ss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6035",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-27T00:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when a malicious project file is run on the system."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de buffer basado en pila descubierta en LEVI Studio HMI Editor de Wecon Technologies, en versiones anteriores a la 1.8.1. Esta vulnerabilidad podría causar un desbordamiento de buffer, que podría dar lugar a una denegación de servicio a través de la ejecución en el sistema de un archivo de proyecto malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:we-con:levi_studio_hmi_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "70F2E813-0BF4-4C75-B67A-FAC3ADB6CB56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97639",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-103-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6037",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-04-27T00:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow when a maliciously crafted project file is run by the system."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de buffer basado en memoria dinámica descubierta en LEVI Studio HMI Editor de Wecon Technologies, en versiones anteriores a la 1.8.1. Esta vulnerabilidad podría causar un desbordamiento de buffer a través de la ejecución en el sistema de un archivo de proyecto manipulado con fines maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:we-con:levi_studio_hmi_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "70F2E813-0BF4-4C75-B67A-FAC3ADB6CB56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97639",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-103-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T00:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c."
      }, {
        "lang" : "es",
        "value" : "FreeType 2 antes de 2017-03-26 tiene una escritura fuera de límites causada por un desbordamiento de búfer basado en heap relacionado con la función t1_builder_close_contour en psaux / psobjs.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "AEEA3966-EA75-48BB-8D9C-3C834BA9CC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3774fc08b502c3e685afca098b6e8a195aded6a0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=941",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3774fc08b502c3e685afca098b6e8a195aded6a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T00:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications (but not interact with them), see information from the extensions (e.g., what applications you have opened or what music you were playing), or even execute arbitrary commands. It all depends on what extensions a user has enabled. The problem is caused by lack of exception handling in js/ui/extensionSystem.js."
      }, {
        "lang" : "es",
        "value" : "Gnome-shell en las versiones 3.22 a la 3.24.1, no gestiona correctamente extensiones que fallan en la recarga, lo que puede llevar a dejar extensiones habilitadas en la pantalla de bloqueo. Con estas extensiones, un usuario puede iniciar aplicaciones (pero no interactuar con ellas). Ver información de las extensiones (por ejemplo, qué aplicaciones se han abierto o qué música se está reproduciendo) o incluso ejecutar comandos arbitrarios. Todo depende de las extensiones habiliadas por el usuario. El problema se debe a la falta de gestión de excepciones en js/ui/extensionSystem.js."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198E17C-7E84-4C2C-BAF3-EC23C3AE06A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175A072B-5C22-4E7B-B424-D39EC494D2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD7DE8C-2562-4869-9B71-CF589B657416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A9701D-8279-43A5-9C17-95F0E7AE393B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9F5C5E-A869-43C4-964A-53B5F86A1535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B578F8-126F-462C-ACA2-050DBA507D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28263BD0-7BD0-43FB-9B0C-E5EC76B26D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.23.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7631BF2-04D3-43A9-A3CE-78A0BA6267D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.23.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADB6B52-E0FB-4C7E-A713-8911363DF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.23.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAC1907-E75B-4063-B437-2809769D8CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FEAFD5-762D-4AD8-B4D9-0EDAE4789D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-shell:3.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963F3846-793E-4156-9CF8-DB7595BAB904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.kali.org/view.php?id=2513",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=781728",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/EasyScreenCast/EasyScreenCast/issues/46",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/gnome-shell/commit/ff425d1db7082e2755d2a405af53861552acf2a1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.kali.org/view.php?id=2513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=781728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/EasyScreenCast/EasyScreenCast/issues/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/gnome-shell/commit/ff425d1db7082e2755d2a405af53861552acf2a1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T01:59:02.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ipv6_addr_from_str function in sys/net/network_layer/ipv6/addr/ipv6_addr_from_str.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer basado en pila en la función ipv6_addr_from_str en sys /net/network_layer/ipv6/addr/ipv6_addr_from_str.c en RIOT anterior al 25-04-2017 permite a atacantes locales y a atacantes potencialmente remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de una dirección IPv6 mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riot_project:riot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017.01",
            "matchCriteriaId" : "3CB97156-6EB1-452B-A96D-BE6BF2592E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/6840",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/6961",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/6962",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/6840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/6961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/6962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T01:59:02.057",
      "lastModified" : "2025-10-22T00:16:11.393",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"/OutputFile (%pipe%\" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017."
      }, {
        "lang" : "es",
        "value" : "Artifex Ghostscript permite sobrepasar -dSAFER y la ejecución de comandos remotos a través de una vulnerabilidad de type confusion en .rsdparams con una subcadena \"/ OutputFile (% pipe%\" en un documento .eps que se utilice como entrada al gs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Artifex Ghostscript Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.21",
            "matchCriteriaId" : "88CC361C-4956-4459-80D6-6ABD1E29CD31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/04/28/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3838",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98476",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1230",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697808",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1446063",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1036453",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=04b37bbce174eed24edec7ad5b920eb93db4d47d",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41955/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1446063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1036453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=04b37bbce174eed24edec7ad5b920eb93db4d47d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41955/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8291",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T10:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource."
      }, {
        "lang" : "es",
        "value" : "Atlassian Confluence 6.x antes de 6.0.7 permite a los atacantes remotos eludir la autenticación y leer cualquier blog o página a través del recurso drafts diff REST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7072C943-2D2F-4705-B466-805F85B6C9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7622CDD-9887-4DBE-976B-1A5A10B3CC60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4B2170-60A0-40FC-82DC-F11E7A53A1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E49DAA2-5CA3-4E60-A0C3-4423F875B171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7279C1F-98AC-4523-BA0E-C26425BFE377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A1B3E9-743C-425E-9FE2-06B974D8EAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB92B6D7-BB3B-4E10-8797-540A90297DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97961",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-52222",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142330/Confluence-6.0.x-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-52222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142330/Confluence-6.0.x-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3008",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-27T14:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scripting vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion 2016 Update 3 y anteriores, ColdFusion 11 update 11 y anteriores, ColdFusion 10 Update 22 y versiones anteriores tienen una vulnerabilidad de cross-site scripting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4E08F7-C133-4083-906A-335B9880BA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4D259E-56B1-4D53-80A9-52D0687779C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "191E8CC6-8AD5-40DE-8B5D-1A8BCAEE855D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAC841B-3FE8-46F6-84B4-650D939225F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "AC034BEB-0ADB-4340-8AFB-30EF67E72815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F1ABAB-C4FF-45FD-8C64-23E79F40C043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "F56CFA71-3D5E-4A0B-BA4C-9756D0727F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB7821D-F4A7-4772-A25B-D925C90478CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB6DF8F-4CA1-448E-8E48-7C2165EC3AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "304F3518-82F3-4566-A44D-3FA8D1FEEBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F8C00C-60CA-4A53-92DF-FB2BF09CF9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "9B048A36-1E2F-4D0C-AF07-B3D255F170CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "09F8F645-DD28-4159-877E-40B4C8CDA4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "79885D33-9360-41D5-9B37-4DC45BDD2439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD246BE-C263-46C5-BF2C-E7C4B5C7DD95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update22:*:*:*:*:*:*",
            "matchCriteriaId" : "75F104AF-2A38-447B-AB59-09B8F769E787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "1B83D6CF-4C45-4B7A-9AFC-9961E1FE0686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F54FF25A-EF5B-4DE0-802C-C9B00A963C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "705E7F38-9407-4148-835E-5AB994C05F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A193C-6CE4-4B80-9897-934BC915627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "71302041-9BB6-406E-9E77-99AD1594C5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "34472770-FFCE-4088-8658-FA0A552BEAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "61BC9D5B-1208-4613-BD23-FEA9C404A503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E217CE63-07DC-4A88-8877-181F33A21C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4BD25E-6856-40EC-98A8-ACB540992487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE18FEA-271A-42FE-8C24-19731DEB5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "82F81CF8-1482-4731-AD34-677B8D6B930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "827CB550-5078-4FD5-8B1F-616C06912AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "31F22450-F26C-4797-9292-66CA444C0D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "72450205-B4F4-4B44-9991-F4876D829BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98002",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038364",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3066",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-04-27T14:59:00.233",
      "lastModified" : "2025-10-22T00:16:05.773",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion 2016 Update 3 y anteriores, ColdFusion 11 update 11 y anteriores, ColdFusion 10 Update 22 y anteriores tienen una vulnerabilidad de deserialización de Java en la librería Apache BlazeDS. Una explotación exitosa podría conducir a la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2025-02-24",
      "cisaActionDue" : "2025-03-17",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Adobe ColdFusion Deserialization Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4E08F7-C133-4083-906A-335B9880BA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4D259E-56B1-4D53-80A9-52D0687779C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "191E8CC6-8AD5-40DE-8B5D-1A8BCAEE855D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAC841B-3FE8-46F6-84B4-650D939225F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "AC034BEB-0ADB-4340-8AFB-30EF67E72815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F1ABAB-C4FF-45FD-8C64-23E79F40C043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "F56CFA71-3D5E-4A0B-BA4C-9756D0727F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB7821D-F4A7-4772-A25B-D925C90478CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB6DF8F-4CA1-448E-8E48-7C2165EC3AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "304F3518-82F3-4566-A44D-3FA8D1FEEBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F8C00C-60CA-4A53-92DF-FB2BF09CF9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "9B048A36-1E2F-4D0C-AF07-B3D255F170CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "09F8F645-DD28-4159-877E-40B4C8CDA4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "79885D33-9360-41D5-9B37-4DC45BDD2439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD246BE-C263-46C5-BF2C-E7C4B5C7DD95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update22:*:*:*:*:*:*",
            "matchCriteriaId" : "75F104AF-2A38-447B-AB59-09B8F769E787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "1B83D6CF-4C45-4B7A-9AFC-9961E1FE0686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F54FF25A-EF5B-4DE0-802C-C9B00A963C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "705E7F38-9407-4148-835E-5AB994C05F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A193C-6CE4-4B80-9897-934BC915627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "71302041-9BB6-406E-9E77-99AD1594C5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "34472770-FFCE-4088-8658-FA0A552BEAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "61BC9D5B-1208-4613-BD23-FEA9C404A503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E217CE63-07DC-4A88-8877-181F33A21C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4BD25E-6856-40EC-98A8-ACB540992487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE18FEA-271A-42FE-8C24-19731DEB5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "82F81CF8-1482-4731-AD34-677B8D6B930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "827CB550-5078-4FD5-8B1F-616C06912AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "31F22450-F26C-4797-9292-66CA444C0D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "72450205-B4F4-4B44-9991-F4876D829BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98003",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038364",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43993/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43993/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-3066",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5186",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-04-27T14:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate."
      }, {
        "lang" : "es",
        "value" : "Novell iManager versión 2.7 anterior a SP7 Patch 9, Novell eDirectory 8.8.x anterior a 8.8 SP8 Patch 9 Hotfix 2, NetIQ eDirectory 9.x anterior a 9.0.2 Hotfix 2 (9.0.2.2) y NetIQ iManager 3.x anterior a 3.0.2.1 usan el algoritmo de hashing MD5 en un certificado para comunicaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1822596B-5F37-4788-A596-32C994A4F39F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4F31E6-C304-43F0-997A-1DE23CD043CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B970239-2775-4377-AB77-6575F4EA6C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7F7B-CF13-4729-BDC8-FA7C25EB0856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B44FED3-A5D0-4F0D-AD4F-329152057627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A555C67-FE51-414D-B93A-42DEC732EAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:*:sp8_patch9:*:*:*:*:*:*",
            "versionEndIncluding" : "8.8",
            "matchCriteriaId" : "445EEDC7-BA29-44DF-88D6-205F16D3D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:*:sp7_patch8:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "9E43BD48-BFE5-49E4-AFD4-0B15A2FEA59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1019041",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1019789",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=988749",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=3426981",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1019041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1019789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=988749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=3426981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T14:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted rule that is mishandled in the yr_re_exec function."
      }, {
        "lang" : "es",
        "value" : "libyara/re.c en el componente regex de YARA 3.5.0 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de la aplicación) a través de una regla manipulada que es mal gestionada en yr_re_exec function."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98072",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/83d799804648c2a0895d40a19835d9b757c6fa4e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/646",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/83d799804648c2a0895d40a19835d9b757c6fa4e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T15:59:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor (formerly Cisco) DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can write in the MIB because it provides write properties, aka Stringbleed. NOTE: the string-bleed/StringBleed-CVE-2017-5135 GitHub repository is not a valid reference as of 2017-04-27; it contains Trojan horse code purported to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Ciertos dispositivos Technicolor omiten un control de acceso por SNMP, debido posiblemente a una configuración personalizada por parte del proveedor de acceso a Internet (ISP) en algunos casos. El Technicolor (antiguamente Cisco) DPC3928SL con firmware D3928SL-P15-13-A386-c3420r55105-160127a podría ser alcanzado por cualquier cadena de comunidad SNMP desde Internet; además, es posible la escritura en el MIB porque proporciona capacidades de escritura, conocido también como Stringbleed. NOTA: el repositorio GitHub string-bleed/StringBleed-CVE-2017-5135 no es una referencia válida a partir de 27-04-2017; contiene el código del caballo de Troya supuesto para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:technicolor:dpc3928sl_firmware:d3928sl-p15-13-a386-c3420r55105-160127a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEC2544-C3D6-4C13-BA09-7A6F7AADD1A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:technicolor:dpc3928sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C8F0A8-EA1A-415F-8A57-FD2BA83321DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98092",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://stringbleed.github.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/netsec/comments/67qt6u/cve_20175135_snmp_authentication_bypass/",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://stringbleed.github.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/netsec/comments/67qt6u/cve_20175135_snmp_authentication_bypass/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T15:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kedpm 0.5 and 1.0 creates a history file in ~/.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the \"password\" command is used with an argument. The names of the password entries created and consulted are also accessible in cleartext."
      }, {
        "lang" : "es",
        "value" : "kedpm en las versiones desde la 0.5 hasta la 1.0 crea un archivo histórico en ~/.kedpm/history que está escrito en texto claro. Todos los comandos ejecutados en el gestor de contraseñas se escriben en este archivo. Esto puede conducir a la divulgación de la contraseña maestra si el comando \"contraseña\" se utiliza con un argumento. Los nombres de las entradas de contraseña creadas y consultadas también son accesibles en texto claro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ked_password_manager_project:ked_password_manager:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA192A78-6552-4738-A889-9FD7830F47C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ked_password_manager_project:ked_password_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31211E9C-D923-4CC8-8283-98C01C60127A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/04/26/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860817",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/kedpm/bugs/6/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/04/26/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/kedpm/bugs/6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T15:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole \"Simple PHP File Manager\" component)."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de salto de directorio en el gestor de archivos Simple PHP File Manager anterior al 26-04-2017, que afecta a index.php (el único componente de \"Simple PHP File Manager\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple-file-manager_project:simple-file-manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-04-19",
            "matchCriteriaId" : "F7540D42-4A20-47F5-91D2-549D6F5FD6E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jcampbell1/simple-file-manager/commit/de52e7ee61a842d8fdf791f2a5b7c91b6c5cdb56",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jcampbell1/simple-file-manager/commit/de52e7ee61a842d8fdf791f2a5b7c91b6c5cdb56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T16:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a \"Posts > Add New\" action, and during creation of new tags and users."
      }, {
        "lang" : "es",
        "value" : "cnvs.io Canvas 3.3.0 tiene una vulnerabilidad XSS en los campos del título y del contenido al realizar la acción \"Posts > Add New\", y al crear nuevas etiquetas y usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cnvs:canvas:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC42D35-CAF2-410B-9576-685DC31F5FAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cnvs/canvas/issues/331",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cnvs/canvas/issues/331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T17:59:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of a verification result, in a use case where a user-provided verification callback returns 1, as demonstrated by acceptance of invalid certificates by nginx."
      }, {
        "lang" : "es",
        "value" : "LibreSSL en las versiones 2.5.1 hasta la 2.5.3 carece de verificación de certificados TLS si se invoca SSL_get_verify_result para una comprobación posterior de un resultado de verificación, en un caso de uso en el que una devolución de llamada de verificación proporcionada por el usuario devuelve 1, como lo demuestra la aceptación de certificados no válidos por nginx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:libressl:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846323F0-F08C-4049-991A-CE30AF85285C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:libressl:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14FC63B-731F-4681-AD3F-C1BAE56F97EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:libressl:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8664FE1D-C187-44D1-86F9-C86A929B4859"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/145",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98076",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libressl-portable/portable/issues/307",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.nginx.org/nginx/ticket/1257",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libressl-portable/portable/issues/307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.nginx.org/nginx/ticket/1257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T19:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/views/cusers/inc/dsp_search_form.cfm, admin/core/views/cusers/inc/dsp_users_list.cfm, admin/core/views/cusers/list.cfm, and admin/core/views/cusers/listusers.cfm."
      }, {
        "lang" : "es",
        "value" : "Permite ataques de XSS a admin/?muraAction= relacionados con admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/views/cusers/inc/dsp_search_form.cfm, admin/core/views/cusers/inc/dsp_users_list.cfm, admin/core/views/cusers/list.cfm, y admin/core/views/cusers/listusers.cfm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blueriver:muracms:7.0.6967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF08684-A4EF-4238-A953-C26B42BD59CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blueriver/MuraCMS/commit/0e387c9454b3c085fe5e7cd876ed746ca16d5308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueriver/MuraCMS/issues/2577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueriver/MuraCMS/commit/0e387c9454b3c085fe5e7cd876ed746ca16d5308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueriver/MuraCMS/issues/2577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled. It is also exploitable in conjunction with CVE-2017-8308 when Avast Self-Defense is enabled. The vulnerability allows for Denial of Service attacks and hiding traces of a possible attack."
      }, {
        "lang" : "es",
        "value" : "En Avast Antivirus versiones anteriores a v17, utilizando el API de interfaz LPC expuesto por el servicio AvastSVC.exe de Windows, es posible iniciar binarios predefinidos o reemplazar o eliminar archivos arbitrarios. Esta vulnerabilidad es explotable por cualquier usuario no privilegiado cuando Avast Self Defense está deshabilitada. También puede explotarse junto con CVE-2017-8308 cuando Avast Self Defense está habilitada. La vulnerabilidad permite ataques de denegación de servicio y ocultar rastros de un posible ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3.2279",
            "matchCriteriaId" : "54ED80B2-E917-49FA-9FD8-C6010E8CBA5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98086",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Avast-Antivirus/?fid=9201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Avast-Antivirus/?fid=9201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T20:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components."
      }, {
        "lang" : "es",
        "value" : "En Avast Antivirus anteriores a v17, un usuario no privilegiado puede marcar un proceso arbitrario como Trusted desde la perspectiva del producto Avast. Esto evita la característica de Self-Defense del producto, abriendo una puerta a un ataque posterior en muchos de sus componentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3.2279",
            "matchCriteriaId" : "54ED80B2-E917-49FA-9FD8-C6010E8CBA5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Avast-Antivirus/?fid=9201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Avast-Antivirus/?fid=9201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-27T21:59:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UDFclient (before 0.8.8) custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library (e.g., glibc) that lacks its own strlcpy."
      }, {
        "lang" : "es",
        "value" : "La implementación de strlcpy personalizada de UDFclient (anterior al 0.8.8) tiene un desbordamiento de búfer. El strlcpy de UDFclient se utiliza solamente en sistemas con una biblioteca C (por ejemplo, glibc) que carece de su propia strlcpy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:13thmonkey:udfclient:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.7",
            "matchCriteriaId" : "EC2AAA12-72D1-4F17-B024-10F35780EE89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861347",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.13thmonkey.org/udfclient/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.13thmonkey.org/udfclient/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-28T10:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c."
      }, {
        "lang" : "es",
        "value" : "Las implementaciones de los servidores NFSv2 y NFSv3 en versiones del kernel de Linux 4.10.13 y anteriores, no realizan ciertas comprobaciones de la parte final de un búfer lo que permitiría a atacantes remotos desencadenar errores de aritmética de punteros o provocar otro impacto inespecífico a través de peticiones especialmente diseñadas. Relacionado con fs/nfsd/nfs3xdr.c y fs/nfsd/nfsxdr.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "8C1901E2-6C4D-488B-A7CE-F7E14A38418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17.0",
            "versionEndExcluding" : "4.1.40",
            "matchCriteriaId" : "CBDB1D3B-CDD5-48F2-83E3-33F072B455B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.67",
            "matchCriteriaId" : "168D3A9F-B199-4E02-B791-291B29317EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.9.26",
            "matchCriteriaId" : "8244943C-198B-43B2-B79C-C832E4572949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.14",
            "matchCriteriaId" : "90895EF1-9DC7-4E47-A937-405661F7A44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1715",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1723",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2412",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2428",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2429",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2732",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2090",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en CubeCart en versiones anteriores a 6.1.4 permite a los atacantes autenticados remotos leer archivos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.3",
            "matchCriteriaId" : "42ECBD31-FDF0-42D8-9C29-C05D0836DE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9499",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2091",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cybozu Garoon 3.0.0 hasta 4.2.3 permiten a un atacante remoto autenticado sortear la restricción de acceso en la función Phone Messages para alterar el estado de los mensajes del teléfono a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CC4428-0CB4-497F-8274-52E6CC273D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9570",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2092",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting en Cybozu Garoon 3.0.0 hasta 4.2.3 permite a un atacante remoto autenticado inyectar script web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CC4428-0CB4-497F-8274-52E6CC273D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9555",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2093",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cybozu Garoon 3.0.0 hasta 4.2.3 permite a un atacante remoto obtener tokens utilizados por la protección CSRF a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CC4428-0CB4-497F-8274-52E6CC273D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9647",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2094",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the \"MultiReport\" function to alter or delete information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cybozu Garoon 3.0.0 hasta 4.2.3 permite a un atacante remoto autenticado sortear la restricción de acceso en Workflow y la función \"MultiRepor\" para alterar o borrar información a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CC4428-0CB4-497F-8274-52E6CC273D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9655",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2095",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cybozu Garoon 3.0.0 hasta 4.2.3 permiten a un atacante remoto autenticado sortear la restricción de acceso en la función mail, consiguiendo una alteración del orden de las carpetas de correo a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CC4428-0CB4-497F-8274-52E6CC273D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9660",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73182875/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2096",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Smalruby-editor v0.4.0 y anteriores permite a atacantes remotos ejecutar comandos del Sistema Operativo a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smalruby:smalruby-editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "9436E41B-CBFE-428A-898F-6C2F215AAB6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN50197114/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://smalruby.jp/blog/2017/01/14/smalruby-editor-0-4-1-has-been-released-english.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95775",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN50197114/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://smalruby.jp/blog/2017/01/14/smalruby-editor-0-4-1-has-been-released-english.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2097",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Knowledge versiones anteriores a v1.7.0 permite a atacantes remotos secuestrar la autenticación de administradores a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "BEC7F9E8-B385-4A21-9B6A-8011289815CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2C153A-43A9-4A40-88E3-118BB61FFAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.5.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0546EB-C968-4F59-B929-76A3E76F0EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4275BCDB-0E9C-4EB7-A821-0AFBB5D41C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.6.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DACD55B-9F2E-4F4C-B94F-A7304ED3633D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.6.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "B5392E32-B41C-4A44-B889-FAEE16FAD349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.6.0:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D18F3AD-03B4-482D-B445-DA2719D3E9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:support-project:knowledge:1.6.0:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD07C49-822D-4B3F-B468-D6E187B0CA3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN09460804/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95779",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN09460804/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2098",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en CubeCart en versiones anteriores a 6.1.4 permite a los atacantes autenticados remotos leer archivos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.3",
            "matchCriteriaId" : "42ECBD31-FDF0-42D8-9C29-C05D0836DE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN81618356/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95866",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forums.cubecart.com/topic/52088-cubecart-614-released/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN81618356/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forums.cubecart.com/topic/52088-cubecart-614-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2099",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.0 and earlier allows remote code execution via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Aplication V3.0.0 y anteriores permite la ejecución remota de código a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "1BD24077-5A1D-45BD-9187-B44946D91A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN71666779/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96226",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN71666779/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2100",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.1 and earlier allows remote attackers to conduct DNS rebinding attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Aplication V3.0.1 y anteriores permite a los atacantes remotos realizar ataques de repetición de DNS a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "8485742D-F0F1-405D-BF1C-0554FE7F3F8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN87662835/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96229",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN87662835/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2101",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.0 and earlier allows remote attackers to bypass authentication to perform arbitrary operations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Aplication V3.0.0 y anteriores permite a los atacantes remotos anular la autenticación para realizar operaciones arbitrarias a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "1BD24077-5A1D-45BD-9187-B44946D91A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN88176589/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96261",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN88176589/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2102",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Aplication V3.0.0 y anteriores permite a atacantes remotos secuestrar la autenticación de los administradores a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "1BD24077-5A1D-45BD-9187-B44946D91A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN39008927/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96260",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN39008927/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2103",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación LaLa Call para Android 2.4.7 y versiones anteriores no verifica certificados X.509 de servidores SSL, lo que permite a los atacantes intermedios falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-opticom_corporation:lala_call:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "2.4.7",
            "matchCriteriaId" : "22BD912A-496D-4EB8-B0F6-0B3C1B89D674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN01014759/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96004",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN01014759/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2104",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business LaLa Call App for Android 1.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicaciónLaLa Call para empresas para Android 1.4.7 y versiones anteriores no verifica los certificados X.509 de servidores SSL, lo que permite a atacantes de man in the middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-opticom_corporation:business_lala_call:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.4.7",
            "matchCriteriaId" : "85E2AAF3-D80F-4F83-8FB3-C865D82D389B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN21114208/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96005",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN21114208/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2105",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación TVer para Android 3.2.7 y versiones anteriores no verifica certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:presentcast_inc:tver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.7",
            "matchCriteriaId" : "B4403EC9-3E1E-4E9A-B574-D71E0985616A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN53880182/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96232",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN53880182/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2106",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de secuencias de comandos entre sitios en Webmin versiones anteriores a 1.830 permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.820",
            "matchCriteriaId" : "137D2A3A-5ED0-4BE5-8E6B-73531C4100B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN34207650/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96227",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/475cc4fbdf51c865b291d252d81a58bad05de0c7",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN34207650/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/475cc4fbdf51c865b291d252d81a58bad05de0c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2107",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en archivos de extracción automática creados por 7-ZIP32.DLL 9.22.00.01 y versiones anteriores, permite a atacantes remotos obtener privilegios a través de un Troyano DLL en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akky:7-zip32.dll:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.22.00.01",
            "matchCriteriaId" : "A031588B-B726-413B-92F8-C25D1551FE92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://akky.xrea.jp/security/7-zip4.txt",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN86200862/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96431",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://akky.xrea.jp/security/7-zip4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN86200862/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2108",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en PrimeDrive Desktop Application 1.4.3 y versiones anteriores, que permite a atacantes remotos obtener privilegios a través de una libreria troyanizada en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbank:primedrive_desktop_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.3",
            "matchCriteriaId" : "BEC069A1-AAC4-43EB-98F6-A111FEF7E9DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN88713190/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96619",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.softbank.jp/biz/news/cloud/170215/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN88713190/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.softbank.jp/biz/news/cloud/170215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2109",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application."
      }, {
        "lang" : "es",
        "value" : "Cybozu KUNAI para Android desde la versión 3.0.4 hasta la 3.0.5.1, permite a atacantes remotos obtener información del registro a través de una aplicación Android malintencionada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A568C416-2533-4EC6-B1F6-CB099EAC0AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.5:*:*:*:*:android:*:*",
            "matchCriteriaId" : "231CA1DB-E4EA-47CE-B8DF-ACA4C54824BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.5.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "50B00EED-5292-4834-B823-23CF3AC0854D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN88745657/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96844",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9836",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN88745657/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2110",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Access CX, para Android versiones anteriores a la 2.0.0.1 y para iOS versiones anteriores a la 2.0.2, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nissan_securities:access_cx:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "2.0.0.0",
            "matchCriteriaId" : "B426B773-0FBF-413F-9883-7697EE67DF26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nissan_securities:access_cx:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "1C812A3F-52A7-4709-BAC6-F80E506B4A3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN82619692/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96615",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN82619692/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2111",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier may allow a remote attackers to display false information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección en cabecera HTTP en los firmwares de TS-WPTCAM versiones 1.18 y anteriores, de TS-WPTCAM2 versión 1.00, de TS-WLCE versiones 1.18 y anteriores, de TS-WLC2 versiones 1.18 y anteriores, de TS-WRLC versiones 1.17 y anteriores, de TS-PTCAM versiones 1.18 y anteriores y de TS-PTCAM/POE versiones 1.18 y anteriores, pueden permitir a atacantes remotos mostrar información falsa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam\\/poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "696730C5-10E5-4436-B205-1629A8BD13FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam\\/poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4F165B-E109-4ADB-846B-7C874F7D6B04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "43E8CD31-1383-458B-93BA-481CDCB315C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68F852B-1DCA-4224-9B3D-06DCC4340223"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wrlc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "96F7D7E6-B798-407D-8FBA-E71B4134567C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wrlc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720F530-EA4B-4686-8724-64AAD3B15BEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlc2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "3B1E387F-5413-41C2-A81C-AE75A1A596CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FE4F7C-0AE3-46E3-AC6E-321316E96707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlce_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "0B9911C3-A738-4631-89C0-F5DE9F656A42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621C2B49-73FE-4BA5-96DB-E0583547C71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam2_firmware:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511FD46-66D7-435F-9B99-289D5ECB372C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBCAD37-39CB-411B-BADC-3DB54D500CB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "4F6422BF-A5CD-4119-B00A-6EFF66CC7FDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBBA345-FEDB-46C0-B386-5F8537CF57D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN46830433/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201702/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96620",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN46830433/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201702/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2112",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los firmwares de TS-WPTCAM versión 1.18 y versiones anteriores, de TS-WLC2 versión 1.18 y anteriores, de TS-WLC2 versión 1.18 y anteriores, de TS-WRLC versión 1.17 y anteriores, de TS-PTCAM versión1.18 y anteriores, de TS-PTCAM/POE versión 1.18 y anteriores, permiten a atacantes remotos ejecutar comandos de S.O. arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam\\/poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "696730C5-10E5-4436-B205-1629A8BD13FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam\\/poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4F165B-E109-4ADB-846B-7C874F7D6B04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "43E8CD31-1383-458B-93BA-481CDCB315C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68F852B-1DCA-4224-9B3D-06DCC4340223"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wrlc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "96F7D7E6-B798-407D-8FBA-E71B4134567C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wrlc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720F530-EA4B-4686-8724-64AAD3B15BEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlc2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "3B1E387F-5413-41C2-A81C-AE75A1A596CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FE4F7C-0AE3-46E3-AC6E-321316E96707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlce_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "0B9911C3-A738-4631-89C0-F5DE9F656A42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621C2B49-73FE-4BA5-96DB-E0583547C71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam2_firmware:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511FD46-66D7-435F-9B99-289D5ECB372C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBCAD37-39CB-411B-BADC-3DB54D500CB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "4F6422BF-A5CD-4119-B00A-6EFF66CC7FDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBBA345-FEDB-46C0-B386-5F8537CF57D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN46830433/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201702/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96620",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN46830433/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201702/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2113",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el firmaware TS-WPTCAM versión 1.18 y anteriores, TS-WPTCAM2 versión 1.00, TS-WLCE version 1.18 y anteriores, TS-WLC2 versión 1.18 y anteriores, TS-WRLC versión 1.17 y anteriores, TS-PTCAM versión 1.18 y anteriores, TS-PTCAM/POE versión 1.18 y anteriores, que permite a atacantes remotos ejecutar comandos del sistema operativo arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam\\/poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "696730C5-10E5-4436-B205-1629A8BD13FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam\\/poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4F165B-E109-4ADB-846B-7C874F7D6B04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "43E8CD31-1383-458B-93BA-481CDCB315C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68F852B-1DCA-4224-9B3D-06DCC4340223"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wrlc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "96F7D7E6-B798-407D-8FBA-E71B4134567C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wrlc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B720F530-EA4B-4686-8724-64AAD3B15BEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlc2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "3B1E387F-5413-41C2-A81C-AE75A1A596CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FE4F7C-0AE3-46E3-AC6E-321316E96707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlce_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "0B9911C3-A738-4631-89C0-F5DE9F656A42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621C2B49-73FE-4BA5-96DB-E0583547C71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam2_firmware:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511FD46-66D7-435F-9B99-289D5ECB372C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBCAD37-39CB-411B-BADC-3DB54D500CB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "4F6422BF-A5CD-4119-B00A-6EFF66CC7FDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBBA345-FEDB-46C0-B386-5F8537CF57D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN46830433/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201702/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96620",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN46830433/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201702/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2114",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting en Cybozu Office 10.0.0 hasta 10.5.0 permite a un atacante remoto autenticado inyectar script web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86DD19B-9DD2-412D-B259-9D2677C9CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664B383F-3C96-406C-B0B9-041F26F1F5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA465B8-3852-4630-B16C-120F77DB1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178094DD-30C6-49BF-A42A-4264FA5A61D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN17535578/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97717",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9738",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN17535578/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2115",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain \"customapp\" information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cybozu Office desde 10.0.0 a 10.5.0 permite a un atacante remoto autenticado sortear las restricciones de acceso para obtener información \"customapp\" a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02CF334-548D-4B9B-8732-A85D97E003C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A968E493-5C74-45FB-BA4E-C21D66613480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D06E58-28D5-43E9-87CD-9534DF3CA6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86DD19B-9DD2-412D-B259-9D2677C9CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664B383F-3C96-406C-B0B9-041F26F1F5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA465B8-3852-4630-B16C-120F77DB1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178094DD-30C6-49BF-A42A-4264FA5A61D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN17535578/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97717",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9737",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN17535578/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2116",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete \"customapp\" templates via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cybozu Office 10.0.0 hasta 10.5.0 permite a un atacante remoto autenticado sortear la restricción de acceso para borrar plantillas \"customapp\" a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02CF334-548D-4B9B-8732-A85D97E003C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A968E493-5C74-45FB-BA4E-C21D66613480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D06E58-28D5-43E9-87CD-9534DF3CA6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86DD19B-9DD2-412D-B259-9D2677C9CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664B383F-3C96-406C-B0B9-041F26F1F5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA465B8-3852-4630-B16C-120F77DB1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178094DD-30C6-49BF-A42A-4264FA5A61D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN17535578/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97717",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9736",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN17535578/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2117",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en CubeCart en versiones anteriores a 6.1.5 permite al atacante con derechos de administrador leer archivos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.4",
            "matchCriteriaId" : "8E0C4767-2B2A-4F13-B89E-99B41F71090E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN63474730/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96466",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forums.cubecart.com/topic/52188-cubecart-615-released/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN63474730/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forums.cubecart.com/topic/52188-cubecart-615-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2118",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting en WBCE CMS 1.1.10 y anteriores permite a un atacante remoto inyectar web script o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wbce:wbce_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.10",
            "matchCriteriaId" : "A93423A6-1907-4B2E-9C5E-3B5352D85798"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73083905/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96467",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.wbce.org/viewtopic.php?id=977",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73083905/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.wbce.org/viewtopic.php?id=977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2119",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de recorrido de directorios en WBCE CMS 1.1.10 y anteriores permite a un atacante remoto leer archivos de forma arbitraria a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wbce:wbce_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.10",
            "matchCriteriaId" : "A93423A6-1907-4B2E-9C5E-3B5352D85798"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73083905/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96467",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.wbce.org/viewtopic.php?id=977",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73083905/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.wbce.org/viewtopic.php?id=977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2120",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en WBCE CMS 1.1.10 y anteriores permite a un atacante con privilegios de administrador ejecutar comandos SQL a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wbce:wbce_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.10",
            "matchCriteriaId" : "A93423A6-1907-4B2E-9C5E-3B5352D85798"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN73083905/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96467",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.wbce.org/viewtopic.php?id=977",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73083905/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.wbce.org/viewtopic.php?id=977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2123",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting en Heaven's Door v1.73 y anteriores para OneThird CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de language.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onethird:onethird_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.3",
            "matchCriteriaId" : "CCB63F92-2468-4162-A125-C44E5AE1F017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN49408248/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96613",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://onethird.net/en/p1277.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN49408248/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://onethird.net/en/p1277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2124",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting en Heaven's Door v1.73 y anteriores para OneThird CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de contact.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onethird:onethird_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.3",
            "matchCriteriaId" : "CCB63F92-2468-4162-A125-C44E5AE1F017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN13003724/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98604",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://onethird.net/en/p1277.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN13003724/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://onethird.net/en/p1277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2125",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation vulnerability in CentreCOM AR260S V2 remote authenticated attackers to gain privileges via the guest account."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de privilegios en el router CentreCOM AR260S V2, que permite a atacantes remotos autenticados obtener privilegios a través de la cuenta de invitado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:allied_telesis_k.k.:centrecom_ar260s_v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38039C55-5F9E-4930-898E-AB4CD880E315"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:allied_telesis_k.k.:centrecom_ar260s_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6FD335-3593-4855-8DD1-3B78B574441E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN55121369/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.allied-telesis.co.jp/support/list/faq/vuls/20170330aen.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97249",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN55121369/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.allied-telesis.co.jp/support/list/faq/vuls/20170330aen.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2127",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting en YOP Poll versiones anteriores a 5.8.1 permite a los atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yop-poll:yop_poll:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "5.8",
            "matchCriteriaId" : "E274C90C-D1CF-4687-9020-D66AA34C3562"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN55294532/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97118",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN55294532/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2128",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data."
      }, {
        "lang" : "es",
        "value" : "Security guide para operadores de sitios web permite a atacantes remotos ejecutar comandos de sistema operativo arbitrarios a través de datos guardados especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:information-technology_promotion_agency:introduction_to_safe_website_operation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86A318D-EC25-49C7-AB55-E2AB7421051E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN11448789/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96923",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN11448789/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2130",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el instalador de PhishWall Client Internet Explorer versión Ver 3.7.13 y anteriores permite a atacantes remotos obtener privilegios a través de un caballo de Trolla en una DLL en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:securebrain:phishwall_client:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "3.7.13",
            "matchCriteriaId" : "830B8F1C-F1A5-4D4D-9274-6A3618004472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN93699304/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securebrain.co.jp/about/news/2017/03/170316.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97113",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN93699304/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securebrain.co.jp/about/news/2017/03/170316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2134",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting en ASSETBASE 8.0 y anteriores permite a los atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uchida:assetbase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "CDD1C9D4-157D-4BB5-8F90-BF56D446B8AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN82019695/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97708",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN82019695/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2135",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting en WP Statistics versión 12.0.1 y anteriores permite a los atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-statistics:wp_statistics:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "12.0.1",
            "matchCriteriaId" : "37C5AF96-68BA-4CBE-8423-148FC30D629B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN17633442/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98610",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wp-statistics.com/change-log/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN17633442/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wp-statistics.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2136",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting en WP Statistics versión 12.0.1 y anteriores permite a los atacantes remotos inyectar secuencias de comandos web o HTML a través de encabezados HTTP Referer especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_statistics:wp_statistics:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "12.0.4",
            "matchCriteriaId" : "A3038EF2-263B-4593-86C5-7B6300FBC8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN62392065/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97289",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wp-statistics.com/change-log/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN62392065/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wp-statistics.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2137",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests."
      }, {
        "lang" : "es",
        "value" : "ProSAFE Plus Configuration Utility anterior a 2.3.29 permite a los atacantes remotos evitar la restricción de acceso y cambiar las configuraciones del conmutador a través de peticiones SOAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:prosafe_plus_configuration_utility:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.28",
            "matchCriteriaId" : "52F7CFC8-0FA8-40D4-A3F4-61FA92EB17A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN08740778/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN08740778/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2139",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php."
      }, {
        "lang" : "es",
        "value" : "CS-Cart Edición japonesa v4.3.10 y versiones anteriores (excluyendo v2 y v3) y CS-Cart Multivendor Edición japonesa v4.3.10 y versiones anteriores (excluyendo v2 y v3) permite a atacantes remotos evitar la restricción de acceso para obtener información del cliente a través de orders.pre.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frogman_office_inc:cs-cart:*:*:*:*:japanese_edition:*:*:*",
            "versionEndIncluding" : "4.3.10",
            "matchCriteriaId" : "722CCC6A-4458-4C39-BC9D-3478EE47568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frogman_office_inc:cs-cart:*:*:*:*:multivendor_japanese_edition:*:*:*",
            "versionEndIncluding" : "4.3.10",
            "matchCriteriaId" : "3939DEF3-BA68-4C33-B12F-1148C9ABCA54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN14396697/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tips.cs-cart.jp/fix-jvn-14396697.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN14396697/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tips.cs-cart.jp/fix-jvn-14396697.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2140",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be executed in the context of the application due to specially crafted directory."
      }, {
        "lang" : "es",
        "value" : "Tablacus Explorer versión 17.3.30 y anteriores permite ejecutar scripts arbitrarios en el contexto de la aplicación a través de un directorio creado especialmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gaku:tablacus_explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.3.30",
            "matchCriteriaId" : "473451BB-1C54-482E-943C-E2C530686752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN64451600/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tablacus.hatenablog.com/entry/2017/04/05/200424",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN64451600/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tablacus.hatenablog.com/entry/2017/04/05/200424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2141",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "WN-G300R3 firmware versión 1.03 y anteriores permite a los atacantes con derechos de administrador ejecutar comandos de sistema operativo arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-g300r3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03",
            "matchCriteriaId" : "7D332EA3-A225-4D1F-BE90-89F3955FBD08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-g300r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185631B5-C854-4476-9061-539C67A63E58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN81024552/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-g300r3/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN81024552/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-g300r3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2142",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en firmware WN-G300R3, que afecta a las versiones 1.03 y anteriores y que permitiría a un atacante remoto ejecutar comandos del SO arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-g300r3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03",
            "matchCriteriaId" : "7D332EA3-A225-4D1F-BE90-89F3955FBD08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-g300r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185631B5-C854-4476-9061-539C67A63E58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN81024552/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-g300r3/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN81024552/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-g300r3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2143",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php."
      }, {
        "lang" : "es",
        "value" : "CS-Cart edición japonesa v4.3.10-jp-1 y versiones anteriores y CS-Cart Multivendor edición japonesa v4.3.10-jp-1 y versiones anteriores permiten a atacantes remotos saltarse la restricción de acceso para crear una solicitud para devolver un artículo comprado al cliente a través de rma.post.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frogman_office_inc:cs-cart_japanese_edition:4.3.10-jp-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36444AA-0535-453F-ACE6-D4CF9A42668C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frogman_office_inc:cs-cart_multivendor_japanese_edition:4.3.10-jp-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7019B6B-0F95-4992-8A02-421A2CF8CE4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN25598952/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tips.cs-cart.jp/fix-jvn-25598952.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN25598952/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tips.cs-cart.jp/fix-jvn-25598952.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2147",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en WP Statistics version 12.0.4 y anteriores, que permitiría a un atacante remoto inyectar secuencia de comandos web o HTML arbitrarios a través de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-statistics:wp_statistics:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "12.0.4",
            "matchCriteriaId" : "6BEED18E-0FCF-41DB-86D3-BFA24FBCE041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN77253951/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97711",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wp-statistics.com/change-log/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN77253951/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wp-statistics.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2148",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en firmware WN-AC1167GR version 1.0.4 y anteriores, que permitiría a un atacante remoto autenticado inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-ac1167gr_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04",
            "matchCriteriaId" : "2274EF86-7D08-48F8-9A25-02D897B1CD1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-ac1167gr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6100A784-C133-49E4-9ED1-65177C03AD55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN01537659/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ac1167gr/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97714",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN01537659/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ac1167gr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2149",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series<W-03>) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series<W-02>) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en los instaladores de software: Software Update Tool V1.00.03 y versiones anteriores para tarjetas de memoria SDHC/SDXC con funcionalidad NFC integrada, FlashAir Configuration Software V3.0.2 y versiones anteriores para tarjetas de memoria SDHC con funcionalidad LAN inalámbrica integrada, FlashAir Software Update tool (SD-WE series) V3.00.01 para tarjetas de memoria SDHC con funcionalidad LAN inalámbrica integrada, FlashAir Software Update tool (SD-WD/WC series) V2.00.03 y versiones anteriores para tarjetas de memoria SDHC con funcionalidad LAN inalámbrica integrada, FlashAir Software Update tool (SD-WB/WL series) V1.00.04 y versiones anteriores para tarjetas de memoria SDHC con funcionalidad LAN inalámbrica integrada, Configuration Software V1.02 y versiones anteriores para tarjetas de memoria SDHC con funcionalidad TransferJet integrada, Software Update tool V1.00.06 y versiones anteriores para tarjetas de memoria SDHC con funcionalidad TransferJet integrada, permite a atacantes remotos obtener privilegios a través de una DLL troyanizada en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00.03",
            "matchCriteriaId" : "CBA7647D-DB43-4DD7-89B4-02CD310B8F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00.04",
            "matchCriteriaId" : "A3E68A5E-C899-484D-87EA-F52414B66968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00.06",
            "matchCriteriaId" : "8288D17C-1CE9-4B38-81C4-9C702E5800D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "C0CE8592-61C3-4F18-9398-3F9C2F5531A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.03",
            "matchCriteriaId" : "E7DB5458-E52B-497D-8B09-040FCDB13B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.00.01",
            "matchCriteriaId" : "48762E2F-044E-43C6-8221-FBFBA9C8E7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "C182FF61-0D00-4AE6-94CD-38BBB47050D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN05340816/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97697",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.toshiba-personalstorage.net/news/20170414.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN05340816/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.toshiba-personalstorage.net/news/20170414.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2150",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Booking Calendar versioes 7.0 y anteriores, que permitiría a un atacante remoto leer ficheros arbitrarios a través de un parámetro captcha_chalange especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booking_calendar_project:booking_calendar:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "DD7AA42D-C128-412F-B387-15ED3485BE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN18739672/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wpbookingcalendar.com/changelog/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN18739672/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wpbookingcalendar.com/changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2151",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:01.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Booking Calendar versiones 7.1 y anteriores, que permitiría a un atacante remoto inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booking_calendar_project:booking_calendar:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "39A79694-53C9-4DCF-88FB-D66A316A45DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN54762089/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wpbookingcalendar.com/changelog/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN54762089/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wpbookingcalendar.com/changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2152",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:02.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en firmware WNC01WH versiones 1.0.0.9 y anteriores, que permitiría a atacantes autenticados ejecutar comandos del SO arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo_inc:wnc01wh_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.9",
            "matchCriteriaId" : "962C5F40-0790-4737-A1AC-06AD56382877"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo_inc:wnc01wh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18EC1EB-FF51-4104-9919-687EB722B7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN48790793/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48790793/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2153",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:02.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets."
      }, {
        "lang" : "es",
        "value" : "SEIL/x86 Fuji 1.70 a 5.62, SEIL/BPV4 5.00 a 5.62, SEIL/X1 1.30 a 5.62, SEIL/X2 1.30 a 5.62 y SEIL/B1 1.00 a 5.62 permiten a los atacantes remotos causar una denegación de servicio a través de paquetes UDP IPv4 especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x86_fuji_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E503A14-51A8-47E9-B721-D50B738E228C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:x86_fuji:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0B7F96-4A3D-4240-96B0-62CC4148CFCF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:bpv_4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BD6EF0-AF25-4D81-BAEA-6F587CCCD6CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:bpv_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB68F73D-A80D-4B4A-A865-F20C23B419B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712036F3-5CDA-452B-A38A-253C69CF3E3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:x1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40A80E-6BB7-401B-874B-FFF01B4114AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A51475-9031-4010-AB40-F187FE23B295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:x2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AE9731-348F-41B3-A347-F6C4B63300CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:b1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "744B18F3-5534-423D-A4A6-D8CFF4339BF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E9D891-10A8-4A16-9CB6-BE031C713EE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN86171513/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.seil.jp/support/security/a01783.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN86171513/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.seil.jp/support/security/a01783.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2154",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:02.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Estándar], Just Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 versión de prueba, permite a los atacantes remotos alcanzar privilegios por medio de un archivo DLL de tipo caballo de troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:hanako:2015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7048C6C-0CE8-4642-A5C4-2D27E8B9CEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:hanako:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3FF218-7C81-44D2-9A17-D83205685973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:hanako:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776ED90F-323C-4A61-888A-43A9C562C64A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:hanako:2017:*:*:*:trial_version:*:*:*",
            "matchCriteriaId" : "57895402-E3E8-49A2-8FA6-8A1D15E8E1C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:hanako_police:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D8562-98D0-41B2-B558-596C89C9D522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:hanako_pro:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16485AD9-56B0-4BFB-993C-7B94F325412D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_frontier:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99D14B3-56D2-470A-A9B3-B7503EBDC0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_government:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20409BA-5D02-423B-B9D4-B912D9148E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_jump_class:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FE275B-F4CD-48E1-9063-A70BBD02327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_office:3:*:*:*:eco_print_pack:*:*:*",
            "matchCriteriaId" : "0CF5451A-6B63-4057-BCC4-9AB43ED32384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_office:3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "BCE3335A-F74F-46AC-8376-3E5E2D4A90FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_office:3:*:*:*:tri-de_dataprotect_pack:*:*:*",
            "matchCriteriaId" : "B0B3FDCA-63D0-47BA-8B99-6565857123E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_police:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F17734-FC13-4E08-B350-C6C0CDCD17D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_school:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874BEA7-E29B-42AD-B111-9EBAEBCAB39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:just_school:6:*:*:*:premium:*:*:*",
            "matchCriteriaId" : "7434D5C9-DC0B-4E76-A9DC-D8AA1F50A4F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN54268888/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.justsystems.com/jp/info/js17002.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54268888/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.justsystems.com/jp/info/js17002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2155",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:02.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier, 5.1.2.13 and earlier, and 6.0.3.09 and earlier allows remote attackers to execute arbitrary code via specially crafted webpage."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en Hoozin Viewer versiones 2, 3, 4.1.5.15 y anteriores, 5.1.2.13 y anteriores y 6.0.3.09 y anteriores, que permitiría a atacantes remotos ejecutar código arbitrario a través de páginas web especialmente manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i.con_corporation:hoozin_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.5.15",
            "matchCriteriaId" : "5A3A7338-338A-4C08-AA06-1663A0CD7C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i.con_corporation:hoozin_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.2.13",
            "matchCriteriaId" : "3F4C02F0-21D4-46D7-A6B9-35CE6680D0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i.con_corporation:hoozin_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.3.09",
            "matchCriteriaId" : "8D78A722-71AF-4992-A6A0-9CB70A6056B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i.con_corporation:hoozin_viewer:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DD8A38-CA5F-447A-8A7D-1B759F82AF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i.con_corporation:hoozin_viewer:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629988EA-58D0-447E-9816-ECE49D121CCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN93931029/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.icon-co.jp/news/20170420/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN93931029/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.icon-co.jp/news/20170420/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2156",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-04-28T16:59:02.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el instalador de Vivaldi para Windows anterior a la versión 1.7.735.48 permite a un atacante ejecutar código arbitrario a través de un archivo ejecutable especialmente diseñado en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivaldi:vivaldi_installer_for_windows:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.735.46",
            "matchCriteriaId" : "A35B993C-F3E2-4AAC-9B87-B97995B85426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98040",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN71572107/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vivaldi.com/security/vulnerability-disclosure-vivaldi-installer-for-windows-could-run-arbitrary-downloaded-code-jvn71572107/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN71572107/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vivaldi.com/security/vulnerability-disclosure-vivaldi-installer-for-windows-could-run-arbitrary-downloaded-code-jvn71572107/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1141",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-28T17:59:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information from error messages. IBM X-Force ID: 121907."
      }, {
        "lang" : "es",
        "value" : "Insights Foundation for Energy versiones 1.0, 1.5 y 1.6 de IBM podría permitir a un usuario autenticado obtener información confidencial de mensajes de error. IBM X-Force ID: 121907."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:insights_foundation_for_energy:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D78017A-0379-49ED-91D3-3570E2099C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:insights_foundation_for_energy:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA86F66F-6D1F-43EB-B224-4FC4DBCBAD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:insights_foundation_for_energy:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78E1879-982B-47C8-9624-B1EA838A0C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002620",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98161",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1194",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-28T17:59:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0 son vulnerables a falsificación de petición en sitios cruzados (CSRF) lo que podría permitir a un atacante ejecutar acciones malintencionadas y no autorizadas transmitidas a través de un usuario que confía en el sitio web. IBM X-Force ID: 123669."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001226",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98142",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038378",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1298",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-04-28T17:59:00.240",
      "lastModified" : "2023-11-07T02:42:21.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-8106.  Reason: This candidate is a reservation duplicate of CVE-2016-8106.  Notes: All CVE users should reference CVE-2016-8106 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6250",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-04-28T21:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GeForce Experience contiene una vulnerabilidad en NVIDIA Web Helper.exe, donde la ejecución de un script no confiable puede llevar a la violación de la política de ejecución de aplicaciones y a la ejecución de código local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gfe_3.6.0.74",
            "matchCriteriaId" : "F63050F7-B1D4-4645-A3A8-7CC776FC978D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4459",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98393",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T00:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging incorrect permission validation, aka PAN-SA-2017-0013 and PAN-70541."
      }, {
        "lang" : "es",
        "value" : "La interfaz de gestión web en PAN-OS de Palo Alto Networks versiones anteriores a 6.1.17, versiones 7.x anteriores a 7.1.9 y versiones 7.1.x anteriores a 7.1.9 permite a usuarios autenticados remotos la obtención de información sensible aprovechando una validación incorrecta de permisos. Referenciada también como PAN-SA-2017-0013 y PAN-70541."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.15",
            "matchCriteriaId" : "E21D41C6-2ED7-46E1-A75D-62A9D8A671FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F100E-2163-4B32-8F9A-02CB98A54F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB55A087-CFA7-45F3-8FEF-9A37804073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAF08A-5478-4942-8CC0-0F267F464684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033CDBB8-59A7-44BA-B28C-57A91CCD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3E4BA-6127-4864-BFD8-6A14BA99BD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T00:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests, aka PAN-SA-2017-0014 and PAN-72769."
      }, {
        "lang" : "es",
        "value" : "La interfaz externa de GlobalProtect en PAN-OS de Palo Alto Networks en versiones anteriores a 6.1.17, en versiones 7.x, anteriores a 7.0.15, en versiones 7.1.x anteriores a 7.1.9, y versiones 8.x anteriores a 8.0.2 proporciona diferentes mensajes de error para los intentos fallidos de inicio de sesión dependiendo de si el nombre de usuario existe, lo que permite a los atacantes remotos enumerar nombres de cuentas y realizar ataques de fuerza bruta a través de una serie de solicitudes. Esta vulnerabilidad también es conocida como PAN-SA-2017-0014 y PAN-72769."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.15",
            "matchCriteriaId" : "E21D41C6-2ED7-46E1-A75D-62A9D8A671FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F100E-2163-4B32-8F9A-02CB98A54F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB55A087-CFA7-45F3-8FEF-9A37804073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAF08A-5478-4942-8CC0-0F267F464684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033CDBB8-59A7-44BA-B28C-57A91CCD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3E4BA-6127-4864-BFD8-6A14BA99BD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T16:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en One Identity de Quest para Unix versión anterior a 6.0.0.061 permite a atacantes remotos obtener acceso total al servidor de políticas a través de una petición ACT_ALERT_EVENT que causa corrupción de memoria en el demonio pmmastererd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:privilege_manager_for_unix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0-50",
            "matchCriteriaId" : "92B60A04-1B1E-4C80-91C5-CF8FC654A861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42010/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T16:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project Wiki component because the proc_open PHP function is used within PhpWiki before 1.5.5 with a syntax value in its first argument, and an authenticated Tuleap user can control this value, even with shell metacharacters, as demonstrated by a '<?plugin SyntaxHighlighter syntax=\"c;id\"' line to execute the id command."
      }, {
        "lang" : "es",
        "value" : "Tuleap en versiones anteriores a 9.7 permite la inyección de comandos a través del plugin PhpWiki 1.3.10 SyntaxHighlighter. Esto ocurre en el componente Project Wiki porque la función PHP de proc_open se usa dentro de PhpWiki antes de la version 1.5.5 con un valor de sintaxis en su primer argumento y un usuario Tuleap autenticado puede controlar este valor, incluso con los metacaracteres de shell, como lo demuestra una línea '"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.7",
            "matchCriteriaId" : "F58AF6C5-B9F9-42B3-802C-9230354D84FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwiki_project:phpwiki:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F33E92C-2E8D-44E1-AE74-11DE029B30FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xdrr/vulnerability-research/blob/master/webapp/tuleap/2017.04.tuleap-auth-ci.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tuleap.net/file/shownotes.php?release_id=137#/linked-artifacts",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=10159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41953/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/xdrr/vulnerability-research/blob/master/webapp/tuleap/2017.04.tuleap-auth-ci.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tuleap.net/file/shownotes.php?release_id=137#/linked-artifacts",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=10159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41953/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T19:59:00.167",
      "lastModified" : "2025-05-23T17:54:30.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(\"<void/>\") call."
      }, {
        "lang" : "es",
        "value" : "XStream a través de 1.4.9, cuando no se utiliza una solución de denyTypes, mishandles intenta crear una instancia del tipo primitivo 'void' durante unmarshalling, dando lugar a un fallo de aplicación remota, como lo demuestra una llamda a xstream.fromXML (\" > \")."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077732DB-F5F3-4E9C-9AC0-8142AB85B32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_middleware:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4A0F87-524E-4935-9B07-93793D8143FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.9",
            "matchCriteriaId" : "DA6D4603-8BAA-4199-AD78-55CD7817CD89"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3841",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100687",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039499",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Broken Link" ]
      }, {
        "url" : "http://x-stream.github.io/CVE-2017-7957.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125800",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Broken Link" ]
      }, {
        "url" : "http://x-stream.github.io/CVE-2017-7957.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T19:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin."
      }, {
        "lang" : "es",
        "value" : "Roundcube Webmail permite reinicios de contraseña arbitrarios por usuarios autenticados. Esto afecta a las versiones anteriores a la 1.0.11, entre la 1.1.x y la 1.1.9 y entre la 1.2.x y la 1.2.5. El problema es causado por una llamada exec incorrectamente restringida en los controladores virtualmin y sasl del plugin de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "C97476E5-142E-447C-8C81-16BB6073E8D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.1.9",
            "matchCriteriaId" : "2F8B912A-5567-48A4-A9FA-D1333BC1969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.5",
            "matchCriteriaId" : "701E49A8-499B-4092-927A-D4B9276ACEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ilsani/rd/tree/master/security-advisories/web/roundcube/cve-2017-8114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://roundcube.net/news/2017/04/28/security-updates-1.2.5-1.1.9-and-1.0.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ilsani/rd/tree/master/security-advisories/web/roundcube/cve-2017-8114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://roundcube.net/news/2017/04/28/security-updates-1.2.5-1.1.9-and-1.0.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_process_cols_to_intermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función iw_process_cols_to_intermediate en imagew-main.c en libimageworsener.a en ImageWorsener anterior a la versión 1.3.1, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en memoria dinámica y bloqueo de la aplicación) u otro posible impacto no especificado a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "B644C2C7-E253-4476-80BE-232705D0A145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/27/imageworsener-heap-based-buffer-overflow-in-iw_process_cols_to_intermediate-imagew-main-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/86564051db45b466e5f667111ce00b5eeedc8fb6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/27/imageworsener-heap-based-buffer-overflow-in-iw_process_cols_to_intermediate-imagew-main-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/86564051db45b466e5f667111ce00b5eeedc8fb6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T20:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libimageworsener.a in ImageWorsener before 1.3.1 has \"left shift cannot be represented in type int\" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c."
      }, {
        "lang" : "es",
        "value" : "libimageworsener.a en ImageWorsener anterior a la versión 1.3.1 presenta \"desplazamiento a la izquierda no puede representarse con el tipo entero\", problemas de comportamiento no definidos, lo que podría permitir a atacantes remotos causar una denegación de servicio (caída de la aplicación) o posiblemente tener otro impacto no especificado a través de una imagen manipulada, relacionado con imagew-bmp.c y imagew-util.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7DBC0041-62D4-4318-BA84-2B941F8D93F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-29T20:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bmpr_read_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función bmpr_read_uncompressed en imagew-bmp.c en libimageworsener.a en ImageWorsener anterior a la versión 1.3.1, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7DBC0041-62D4-4318-BA84-2B941F8D93F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/27/imageworsener-memory-allocation-failure-in-my_mallocfn-imagew-cmd-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/86564051db45b466e5f667111ce00b5eeedc8fb6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/27/imageworsener-memory-allocation-failure-in-my_mallocfn-imagew-cmd-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/86564051db45b466e5f667111ce00b5eeedc8fb6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T15:59:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method."
      }, {
        "lang" : "es",
        "value" : "Radicale anterior a 1.1.2 y 2.x anterior a 2.0.0rc2 es propenso a ataques basados en tiempo y ataques simples de fuerza bruta cuando se utiliza el método de autenticación htpasswd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radicale:radicale:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "8ECE0BB4-F1C0-4B17-9036-2A304CCF6739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radicale:radicale:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16EAED4B-E061-4C6C-807B-8048E2AF0AB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/861514",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Kozea/Radicale/blob/1.1.2/NEWS.rst",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/Radicale/commit/059ba8dec1f22ccbeab837e288b3833a099cee2d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/Radicale/commit/190b1dd795f0c552a4992445a231da760211183b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/861514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Kozea/Radicale/blob/1.1.2/NEWS.rst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/Radicale/commit/059ba8dec1f22ccbeab837e288b3833a099cee2d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/Radicale/commit/190b1dd795f0c552a4992445a231da760211183b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file."
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (32bit) junto con el plugin FPX versión anterior a 4.45, al procesar un fichero FlashPix (.FPX), desencadena una violación de acceso y fallo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.44",
            "matchCriteriaId" : "6D6DA44F-D981-40AB-AC58-8EDC51B0827D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7721",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service (BSoD) via a crafted DeviceIoControl request to \\\\.\\PSMEMDriver."
      }, {
        "lang" : "es",
        "value" : "PSKMAD.sys en Panda Free Antivirus 18.0 permite a los usuarios locales causar una denegación de servicio (BSoD) a través de una solicitud manipulada de DeviceIoControl a \\\\.\\PSMEMDriver."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchguard:panda_antivirus:18.0:*:*:*:free:*:*:*",
            "matchCriteriaId" : "65AF14B9-3D8B-4197-8756-E4565C359D0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://saptech-erp.com.au/resources/panda_bsod.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98367",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41945/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98367/info",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://saptech-erp.com.au/resources/panda_bsod.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41945/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadAAIImage en aai.c permite a los atacantes causar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98132",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/444",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadPCXImage en pcx.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98136",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/446",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadMNGImage en png.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/442",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadDCMImage en dcm.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98346",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/440",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadEXRImage en exr.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98363",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/441",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadMATImage en mat.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/445",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadSFWImage en sfw.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/443",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadJNGImage en png.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98373",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/447",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadPCDImage en pcd.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98371",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/448",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadXWDImage en xwd.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98372",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/452",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadPICTImage en pict.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98377",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/454",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadBMPImage en bmp.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98374",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/451",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadMTVImage en mtv.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98380",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/450",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadSUNImage en sun.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98378",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/449",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadEPTImage en ept.c permite a atacantes provocar una denegación de servicio (pérdida de memoria) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98388",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/453",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx."
      }, {
        "lang" : "es",
        "value" : "LibreOffice anterior al 17-03-2017 tiene una escritura fuera de rango causada por un desbordamiento de búfer basado en memoria dinámica, relacionado con la función ReadJPEG en vcl/source/filter/jpeg/jpegc.cxx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.6",
            "matchCriteriaId" : "DD6FB845-4F3E-48DD-B9BB-9986BD4F48FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=889",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/6e6e54f944a5ebb49e9110bdeff844d00a96c56c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/commit/6e6e54f944a5ebb49e9110bdeff844d00a96c56c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T17:59:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c."
      }, {
        "lang" : "es",
        "value" : "Google gRPC anterior a 2017-03-29 tiene una escritura fuera de límites causada por un uso después de liberación en el heap y relacionado con la función grpc_call_destroy en core/lib/surface/call.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "0A050507-A001-4E7B-A9B9-6D2CF8261BD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98280",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=726",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/10353",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/10353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via calculation of a session cookie or CSRF nonce."
      }, {
        "lang" : "es",
        "value" : "Una mala inicialización criptográfica del salt en admin/inc/template_functions.php en GetSimple CMS versión 3.3.13 permite a un atacante de red escalar privilegios a un usuario arbitrario o producir ataques CSRF mediante el cálculo de una cookie de sesión o un CSRF de un solo uso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cagintranetworks:getsimple_cms:3.3.13_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FCDD8-A3EB-4857-BEBF-1AD70DC995D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1224",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función flac_buffer_copy de flac.c en libsndfile 1.0.28 permite a los atacantes remotos provocar una denegación de servicio (desbordamiento de búfer y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado, mediante un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-flac_buffer_copy-flac-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-flac_buffer_copy-flac-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función flac_buffer_copy de flac.c en libsndfile 1.0.28 permite a los atacantes remotos provocar una denegación de servicio (lectura no válida y bloqueo de la aplicación) a través de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-invalid-memory-read-in-flac_buffer_copy-flac-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-invalid-memory-read-in-flac_buffer_copy-flac-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función flac_buffer_copy de flac.c en libsndfile 1.0.28 permite a los atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica y caída de aplicación) a través de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-heap-based-buffer-overflow-in-flac_buffer_copy-flac-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-heap-based-buffer-overflow-in-flac_buffer_copy-flac-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_buf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función read_buf en stream.c en rzip 2.1 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer de memoria dinámica -heap- y fallo de la aplicación) o posiblemente tener otro impacto no especificado a través de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rzip_project:rzip:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B96F51E2-EC00-46C3-838C-41D3E372F520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/rzip-heap-based-buffer-overflow-in-read_buf-stream-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/rzip-heap-based-buffer-overflow-in-read_buf-stream-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función i2les_array en pcm.c en libsndfile 1.0.28 permite a los atacantes remotos provocar una denegación de servicio (sobre-lectura del búfer y caida de aplicación) a través de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-i2les_array-pcm-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-i2les_array-pcm-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The strescape function in ec_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter."
      }, {
        "lang" : "es",
        "value" : "La función strescape en ec_strings.c en Ettercap 0.8.2 permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer de memoria dinámica -heap- y fallo de aplicación) o posiblemente tener otro impacto no especificado a través de un filtro especialmente diseñado que es incorrectamente manejado por etterfilter."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ettercap_project:ettercap:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21454AAA-F138-4B56-BA44-8BD08F58626F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/ettercap-etterfilter-heap-based-buffer-overflow-write/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/ettercap-etterfilter-heap-based-buffer-overflow-write/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T19:59:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/MP4/PSP/3GP Converter allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long username."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en los programas Easy MOV Converter versión 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter , Easy Video to MP4 Converter, y Easy Video to iPod/MP4/PSP/3GP Converter, todos de Ether Software, permite a los atacantes locales causar una denegación de servicio (sobreescritura de SEH) o posiblemente tener otro impacto no especificado por medio de un nombre de usuario largo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_avi\\/divx\\/xvid_to_dvd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535E340B-C1D1-4D67-ACD3-1C1816FF1193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_avi_divx_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1302AB11-67A8-4A26-A545-13EA056FB732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_cd_dvd_copy:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268ED0A6-9534-47BF-B63E-B7ED6389A4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_dvd_creator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DF8348-2A9C-4CAD-A28F-67D64682E154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_mov_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E74E45C-F6A3-48BD-811E-0386C17B7BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_mov_converter:1.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6A23F7-C0A7-47E2-9B3F-4DEC1E9FB57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_mpeg\\/avi\\/divx\\/wmv\\/rm_to_dvd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0C097A-12CC-48EB-8E82-A92C2A0E0FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_mpeg_to_dvd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8896B691-255D-4731-A664-8749B002F7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_rm_rmvb_to_dvd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "995FACB6-C433-48FA-B4D9-B64F52EFE333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_video_to_3gp_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9E0385-D937-4F77-A9F2-5CCF39B7ACB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_video_to_ipod\\/mp4\\/psp\\/3gp_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6615D05-7B6A-4263-8E2A-3E3BB61EE526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_video_to_ipod_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0ABE60-1A2F-4A2E-999F-A85862E9BF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_video_to_mp4_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7276654F-FD95-4229-8D62-D009C3E64A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_video_to_psp_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09700434-BDE6-4741-91D5-1565B087F5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:easy_wmv\\/asf\\/asx_to_dvd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DCE16A-ED90-4B7B-BFD0-A17FDA96DF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:mp3\\/avi\\/mpeg\\/wmv\\/rm_to_audio_cd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121AC563-56CF-4FD1-99A3-96A3BFC8FF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:mp3\\/wav\\/ogg\\/wma\\/ac3_to_cd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BC703C-9AD4-4C9D-83D7-BDCA5303DACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:mp3_wav_to_cd_burner:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976C27A5-7483-4EC4-8101-3F14E4F7DEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ether_software:my_video_converter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B771580F-1778-47A6-84F2-638C5D4FE8B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/offensive-security/exploit-database/blob/master/platforms/windows/dos/41911.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41911/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/offensive-security/exploit-database/blob/master/platforms/windows/dos/41911.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41911/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-04-30T20:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Schneider Electric StruxureWare Data Center Expert anterior a 7.4.0 utiliza el almacenamiento en memoria RAM de texto claro para contraseñas, lo que podría permitir a los atacantes remotos obtener información confidencial a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.1",
            "matchCriteriaId" : "4DAF6EE3-6DFF-4A1F-AAF1-BB0F58EC9EF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-343-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-343-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T01:59:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive  information from the responding device via port-5353 UDP packets.  NOTE: this may overlap CVE-2015-2809."
      }, {
        "lang" : "es",
        "value" : "avahi-daemon en Avahi, hasta las versiones 0.6.32 y 0.7, responde a consultas IPv6 unicast arbitrarias de manera inadvertida con direcciones de origen que no se pueden resolver localmente, lo que permite a los atacantes remotos provocar una denegación de servicio (amplificación de tráfico) y puede conducir a una fuga de información, obteniendo información potencialmente sensible del dispositivo de respuesta mediante paquetes UDP del puerto 5353. NOTA: podría solaparse con CVE-2015-2809."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.32",
            "matchCriteriaId" : "5C7152B8-3651-4A7B-BE5F-07C661A2796A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B317E42-92DE-46B5-9120-A3C29FD35D39"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426712",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lathiat/avahi/issues/203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lathiat/avahi/issues/203#issuecomment-449536790",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3876-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3876-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.secfu.net/advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1426712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lathiat/avahi/issues/203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lathiat/avahi/issues/203#issuecomment-449536790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3876-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3876-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.secfu.net/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T01:59:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets."
      }, {
        "lang" : "es",
        "value" : "El contestador (responder) Multicast DNS (mDNS) utilizado en BOSE Soundtouch 30 responde inadvertidamente a las consultas unicast IPv4 con direcciones de origen que no son enlace local (link-local), lo que permite a atacantes remotos provocar una denegación de servicio (amplificación del tráfico) u obtener información potencialmente sensible a través de paquetes por el puerto UDP-5353."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bose:soundtouch_30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28478677-4529-409B-88D1-14B184FCC2D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.secfu.net/advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.secfu.net/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T01:59:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función mad_layer_III de layer3.c en Underbit MAD libmad 0.15.1b, cuando NDEBUG esta omitido, permite a atacantes remotos causar una denegación de servicio (fallo de aserción o salida de aplicación) a través de un fichero de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underbit:mad_libmad:0.15.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077DFA99-A61D-4FDA-BAB2-BE680A798DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/30/libmad-assertion-failure-in-layer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/30/libmad-assertion-failure-in-layer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T01:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función mad_layer_III de layer3.c en Underbit MAD libmad 0.15.1b, permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o caída en la aplicación) u otros impactos no especificados a través de un fichero de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underbit:mad_libmad:0.15.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077DFA99-A61D-4FDA-BAB2-BE680A798DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/30/libmad-heap-based-buffer-overflow-in-mad_layer_iii-layer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/30/libmad-heap-based-buffer-overflow-in-mad_layer_iii-layer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T01:59:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función mad_bit_skip de bit.c en Underbit MAD libmad 0.15.1b permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o caída de la aplicación) a través de un fichero de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underbit:mad_libmad:0.15.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077DFA99-A61D-4FDA-BAB2-BE680A798DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/30/libmad-heap-based-buffer-overflow-in-mad_bit_skip-bit-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/30/libmad-heap-based-buffer-overflow-in-mad_bit_skip-bit-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T01:59:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de memoria dinámica (heap) en la función PdfParser::ReadObjects en base/PdfParser.cpp en PoDoFo 0.9.5 permite a atacantes remotos provocar una denegación de servicio (fallo de la aplicación) o posiblemente tener otro impacto no especificado a través de vectores relacionados con m_offsets.size."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiangxiaobo/poc_and_report/tree/master/podofo_heapoverflow_PdfParser.ReadObjects",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiangxiaobo/poc_and_report/tree/master/podofo_heapoverflow_PdfParser.ReadObjects",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T06:59:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder."
      }, {
        "lang" : "es",
        "value" : "Craft CMS en versiones anteriores a la 2.6.2976, no restringe de forma apropiada la visualización de los contenidos de los ficheros situados en el directorio craft/app/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2974",
            "matchCriteriaId" : "21EDD025-3340-4014-9683-9D13EC90E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://craftcms.com/changelog#2-6-2976",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/857743080224473088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://craftcms.com/changelog#2-6-2976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/857743080224473088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T06:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft CMS before 2.6.2976 allows XSS attacks because an array returned by HttpRequestService::getSegments() and getActionSegments() need not be zero-based. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-8052."
      }, {
        "lang" : "es",
        "value" : "Craft CMS en versiones anteriores a la 2.6.2976 permite un ataque de tipo XSS, debido a que una matriz devuelta por HttpRequestService::getSegments() y getActionSegments() necesita no ser zero-based. Esta vulnerabilidad existe debido a una incompleta corrección de la vulnerabilidad CVE-2017-8052."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2974",
            "matchCriteriaId" : "21EDD025-3340-4014-9683-9D13EC90E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://craftcms.com/changelog#2-6-2976",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/857743080224473088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://craftcms.com/changelog#2-6-2976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/857743080224473088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T06:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message."
      }, {
        "lang" : "es",
        "value" : "Craft CMS en versiones anteriores a la 2.6.2976 no impide la modificación de la URL en un email de tipo forgot-password."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2974",
            "matchCriteriaId" : "21EDD025-3340-4014-9683-9D13EC90E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://craftcms.com/changelog#2-6-2976",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/857743080224473088",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://craftcms.com/changelog#2-6-2976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/857743080224473088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T14:59:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., \"usr\") that is transmitted in the login.php query string."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en KMCIS CaseAware. XSS reflectada está presente en el parámetro de usuario (\"usr\") que se transmite en la cadena login.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmc_information_systems:caseaware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27309FA0-9AF9-4A4E-BF76-E305B293E168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42042/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openbugbounty.org/incidents/228262/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42042/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openbugbounty.org/incidents/228262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6128",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-05-01T15:59:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede ser capaz de causar un ataque de denegación de servicio (DoS) contra el componente sshd en F5 BIG-IP, Enterprise Manager, BIG-IQ e iWorkflow"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C1525D-46DE-4362-BBAD-095BBF718990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259C05BB-6349-4005-9372-21623DC5002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F86EB5-D581-4103-A802-44D968BA8D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06224D59-35F8-4168-80C5-CF5B17E99050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974C5213-99F7-4E8A-AC6A-8759697F19C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E288D50B-7EFA-4FC8-938B-EE3765FFA24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0141FA-44E9-460E-B175-29A7FA251301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD27EF7-3329-4009-959F-D2E4D5935E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3755740D-F1DC-4910-ADDD-9D491515201C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA244A7D-F65D-4114-81C8-CE811959EA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA9F72C-8344-4370-B511-31BEC8BA63E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CF015E-C74B-4215-9103-8087BC1D12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4DB00-433D-414A-A1CE-E507B9BB809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867B2CA9-DAE5-4070-B8E6-F624C59F5054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1850CE-D20D-4677-8CF2-1DB3A4EB33F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A70B1E2-0B3D-4DE9-8ED9-777F73D0B750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D226F1-6513-4233-BE20-58D7AB24978F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B2082-E040-4799-A260-BA687ED8614E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85766A4-2181-4719-ADCF-4FEA0031DB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E93EE3-DB73-468E-87CA-4D277F283648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB01A61-1924-417F-8A75-9FDF8F14F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70D2BD5-8E3F-4B57-84EF-3AF40F6378F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A065BC0-56BD-4665-A860-EBA37F1A4D8C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F9107-549C-40EF-B355-C7E93A979CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A1C200-30B2-4B38-BC74-D11E54530A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0312FC-8178-46DE-B4EE-00F2895073BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E574F6-34B6-45A6-911D-E5347DA22F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF94129-8779-4D68-8DD4-B828CA633746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2E88AA-0523-48D0-8664-6AFDBCB6C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270EEBF6-46FA-48FC-BEC9-9C0838A86BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93310708-E1FE-445A-BB1F-7D1F553AEC65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD2C1D2-103E-4B0F-84AA-999F01E695F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855E91A4-0A0C-4E5C-8019-FB513A793803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC2092-E109-4FF6-9B85-6C9434269851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923BB93-96C1-417B-9172-4A81E731EBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E34BF-82A5-4D9E-BC72-202193A47A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84452450-77FA-4708-9C86-5464D541C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4CC3E0-F9B8-433F-A2B0-2306144F9B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8993275-E17E-4A69-8D95-A8229E0E88D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0594DBC5-8470-416C-A5EA-E04F5AB2C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3BA6-6F60-45CA-8F52-687B671B077A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B6870-718C-4F8D-9BAB-7ED6385BF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6A3691-ADC4-44BC-8A11-D855B13EF128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D7863D-B064-4D7A-A66B-C3D3523425FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BB6DB-B2D1-4855-A65C-F0799E034358"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF646EF0-56C8-492E-A78D-B00ECAA8D851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D42B922-A5F7-41FC-A361-BA0E065B5B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB017D7A-3290-4EF5-9647-B488771A5F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F316C54-FAE4-48D8-9E40-ED358C30BF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAC4C7-AB42-4BBD-98B5-0AE8B032CCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AA5127-5314-4026-905D-937B7B62473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E42DAA-700D-487C-9238-F7F3D75A8C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584853F9-644F-40B2-A28F-1CE9B51F84F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE665CF-A633-474E-9519-D20E3D3958CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228D5DA1-C78A-4E05-997A-50F6C1B59593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452C59B8-230D-4FC0-B76D-FA6E381E3713"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F5FEE7-059A-4A9B-BCCD-18F0AA435040"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF93E82F-D38C-4D4D-99EB-E334EE163C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3471D34-A76C-498A-8C45-1553A579A88B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E5F378-E93E-45F6-A445-F2DAB5C423F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9538F63-3DC9-42CC-87D5-3CA048AE52A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0003813A-C1A8-4ED1-A04C-7AE961E7FA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC1A702-0CCB-48F9-A42E-D8C756DD9D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "222B4DE7-1D3D-40DF-A9EB-EFABDA8FAEA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AEF0B2-7C8C-432C-A840-C2441A70343F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21D6206-4716-47FE-A733-F18343656E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:f5_iworkflow:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC5A3C6-E7E1-4C67-B868-0BFA0CCC5956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038362",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038363",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "https://support.f5.com/csp/article/K92140924",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K92140924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T16:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS 1.0.2 tiene un XSS activado por un comentario autenticado que es manejado incorrectamente durante una operación de ratón hecha por un administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A8E0CB-C324-4898-8248-572AABB98B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/72",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T16:59:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS 1.0.2 tiene inyección SQL en inc / lib / Control / Backend / menus.control.php a través del parámetro menuid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A8E0CB-C324-4898-8248-572AABB98B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/72",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T16:59:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection mechanism via a register.php?act=edit&id=1 request."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS versión 1.0.2 permite a atacantes remotos eludir el mecanismo de protección alertDanger MSG_USER_EMAIL_EXIST a través de una solicitud register.php?act=edit&id=1 request."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A8E0CB-C324-4898-8248-572AABB98B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/72",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash."
      }, {
        "lang" : "es",
        "value" : "La biblioteca Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, es vulnerable a una lectura no válida de tamaño 8 debido a que falta una comprobación que determine si los símbolos son NULL en la función _bfd_dwarf2_find_nearest_line. Esta vulnerabilidad hace que se bloquen los programas que realizan un análisis de los programas binarios utilizando la biblioteca libbfd, tal como objdump."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21409",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash."
      }, {
        "lang" : "es",
        "value" : "La biblioteca Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, es vulnerable a una sobre lectura del búfer global, debido a una suposición hecha por código que se ejecuta para objcopy y strip, basada en que las secciones SHT_REL/SHR_RELA son siempre nombradas comenzando por el prefijo .rel/.rela. Esta vulnerabilidad hace que los programas que realizan un análisis de los programas binarios utilizando la biblioteca libbfd, tal como objcopy y strip, se bloquen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21412",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash."
      }, {
        "lang" : "es",
        "value" : "La biblioteca Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, es vulnerable a una lectura no válida de tamaño 4 referenciando a un puntero NULL de _bfd_elf_large_com_section. Esta vulnerabilidad hace que los programas que realizan un análisis de los programas binarios utilizando la biblioteca libbfd, como objcopy, se bloqueen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21414",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, es vulnerable a una escritura no válida de tamaño 8 provocada porque no se devuelve un valor que confirme la reserva de memoria en el caso de que la memoria se haya asignado en la función _bfd_generic_get_section_contents. Esta vulnerabilidad provoca la caída del servicio en programas que analizan binarios utilizando la librería libbfd, como objcopy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21431",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, es vulnerable a una lectura no válida de tamaño 1 provocada porque los tests reloc offset range no recogen pequeños offsets negativos con tamaño inferior al campo reubicado. Esta vulnerabilidad provoca la caída del servicio en programas que analizan binarios utilizando la librería libbfd, como objcopy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21432",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash."
      }, {
        "lang" : "es",
        "value" : "La librería Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, es vulnerable a una lectura o escritura no válida de tamaño 1 provocada durante el procesamiento de un binario corrupto que contenga reloc(s) con direcciones negativas. Esta vulnerabilidad provoca la caída del servicio en programas que analizan binarios utilizando la librería libbfd, como objcopy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21434",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash."
      }, {
        "lang" : "es",
        "value" : "dwarf.c en GNU Binutils 2.28 es vulnerable a una lectura no válida de tamaño 1 durante el volcado de información de debug de un binario corrupto. Esta vulnerabilidad provoca la caída del servicio en programas que analizan binarios, como objcopy y readelf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21438",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T18:59:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a \"pattern with very many captures.\""
      }, {
        "lang" : "es",
        "value" : "PCRE2 en versiones anteriores a la 10.30 tiene una escritura fuera de límites provocada por un desbordamiento de búfer basado en pila en pcre2_match.c. Esto está relacionado con un \"pattern with very many captures\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.30",
            "matchCriteriaId" : "66F1DE98-34B3-4DFB-BFE5-5581C3B2B12F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98315",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2/code/tags/pcre2-10.30/ChangeLog?revision=854&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://vcs.pcre.org/pcre2?view=revision&revision=674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2/code/tags/pcre2-10.30/ChangeLog?revision=854&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vcs.pcre.org/pcre2?view=revision&revision=674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T19:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Franklin Fueling Systems TS-550 evo 2.3.0.7332, el usuario invitado, que posee los privilegios más bajos, puede publicar el parámetro idSourceFileName situado en el directorio /download. Esta capacidad permite a un atacante descargar archivos sensibles del sistema de la máquina host, tales como bases de datos, que contienen información que podría ser de ayuda para nuevos ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:franklinfueling:ts-550_evo_firmware:2.3.0.7332:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60F50B7-8706-4CB1-A4AA-A08DE9D17742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:franklinfueling:ts-550_evo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42AF9F76-7481-4621-B002-510053E61A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T19:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Franklin Fueling Systems TS-550 evo 2.3.0.7332, el usuario roleDiag, que puede obtenerse explotando la vulnerabilidad CVE-2013-7247, tiene la capacidad de cargar archivos en el servidor que aloja el servicio web. Al no existir los correspondientes controles, un atacante puede cargar un payload con contenido malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:franklinfueling:ts-550_evo_firmware:2.3.0.7332:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60F50B7-8706-4CB1-A4AA-A08DE9D17742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:franklinfueling:ts-550_evo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42AF9F76-7481-4621-B002-510053E61A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T19:59:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "En SWFTools versión 0.9.2, puede existir una escritura fuera de los límites del montículo en la función png_load() en lib/png.c:755. Este problema puede ser desencadenado por un fichero PNG mal formado que es tratado incorrectamente por png2swf. Los atacantes podrían explotar esta vulnerabilidad para ocasionar una denegación de servicio; Podría causar la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "48A0FCC4-41FD-449A-976D-97783161F186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T19:59:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS."
      }, {
        "lang" : "es",
        "value" : "En SWFTools versión 0.9.2, puede existir una escritura fuera de los límites del montículo en la función png_load() en lib/png.c:724. Este problema puede ser desencadenado por un fichero PNG mal formado que es tratado incorrectamente por png2swf. Los atacantes podrían explotar esta vulnerabilidad para ocasionar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "48A0FCC4-41FD-449A-976D-97783161F186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-01T20:59:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application, or the BlueZ gatttool program."
      }, {
        "lang" : "es",
        "value" : "Las cámaras 360fly 4K permiten cambios de contraseña Wi-Fi sin autenticación y acceso completo usando REST en el procedimiento de emparejamiento de Bluetooth Low Energy, que está disponible en cualquier momento y no requiere contraseña. Esto afecta al firmware 2.1.4. La explotación puede utilizar la aplicación de Android o iOS de 360fly, o el programa BlueZ gatttool."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:360fly:4k_camera_firmware:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A678F3B-FDB5-498B-8880-D6C821830BE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:360fly:4k_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF12778D-88C6-462F-9DDA-271ED5F2FAEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.slideshare.net/fuguet/bluediot-when-a-mature-and-immature-technology-mixes-becomes-an-idiot-situation-75529672",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.slideshare.net/fuguet/bluediot-when-a-mature-and-immature-technology-mixes-becomes-an-idiot-situation-75529672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5689",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-02T14:59:00.520",
      "lastModified" : "2025-10-22T00:16:07.117",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT)."
      }, {
        "lang" : "es",
        "value" : "Un atacante de red sin privilegios podría alcanzar privilegios del sistema para aprovisionar SKUs de administrabilidad Intel: Intel Active Management Technology (AMT) e Intel Standard Manageability (ISM). Un atacante local sin privilegios podría aprovisionar características de administrabilidad alcanzando privilegios de red o sistema local no privilegiados en SKUs de administrabilidad de Intel: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM) e Intel Small Business Technology (SBT)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-28",
      "cisaActionDue" : "2022-07-28",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:proliant_ml10_gen9_server_firmware:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABEA07C-9E91-4937-9F6C-A687B2F946A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml10_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDAC0B-39A9-41FF-99AA-66A4422EFE53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "F7D6FF34-5C5C-485B-AC78-DE20BA01DAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187C6D51-5B86-484D-AE0F-26D1C9465580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "E4EAE137-9336-43D6-AF8A-9161F236BD14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F37D88-E086-4060-8420-BD0F8D8FF580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "B5C3B3FD-7CF7-4172-87EC-11C129D5508A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687E1212-EC5A-47BA-ACAB-74F6C98B7C34"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "6C37BC27-C5B9-4740-BDFE-9439FB248CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc827d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D87239-40C1-4038-B734-D77AC4DDD571"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "3C5DA136-7541-44E4-B8DF-065CEE065A99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc827c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFD2D72-5464-4B86-BACB-61F55A081C3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "4F0583DE-EBB9-41C7-92C9-4E4E259F28B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057D9947-CE4A-4B4C-B721-4B29FB71350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "EC70C5D2-748E-4D6C-ADC9-ED098541C8F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74F55B7-DE3D-4D74-A7E7-9BCB8F7B114A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "A9EE1C2A-FCDB-42AF-8B3E-A805F12A74C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EF28FB-BAB3-4710-9D25-25F67ACADC60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "6E9D150F-BCE4-4FB6-BBDE-4A55F12DBC37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E752006C-6D94-4B14-B3A5-C9BB94141BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "042B60E7-0614-4EB3-8B47-07DEE5B5E274"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AD120-3465-4C00-AAB3-B6F6ED708B51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "BBC1791E-E3B5-4B75-B816-9EE20F44D9D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1A57A9-F6E5-4672-BD22-09EF5522CA10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.26.3000",
            "matchCriteriaId" : "124ED9B8-BA17-4204-BD5B-3F94558A6531"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB339B5-602F-4AB5-9998-465FDC6ABD6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "2CD389CE-AA26-445D-8D2B-27D3D06C3B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DD4A97-1648-4C7F-A5A0-6899BD13A617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.91.3272",
            "matchCriteriaId" : "42E364B9-1FC7-418A-860D-DD0E73DD930E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCF5972-C72D-4DE9-8B73-3C497D54596B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.05",
            "matchCriteriaId" : "7E311214-74E6-449F-A446-B14A498D85E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF9D4C3-1892-48FA-95B4-835B636A4005"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:-:*:*:*",
            "matchCriteriaId" : "BCC01671-A79A-423E-BD61-9056AE5CD240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "4B4A9C1C-6105-455B-9639-7EE02AF05B60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A6744-5194-4A99-BD3B-944A8707C80F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "A15E9E54-0414-4C67-9DCD-181FCF2EE838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6127C45-E91E-46B7-A806-FC0068575DB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.01.06",
            "matchCriteriaId" : "A4487A96-6AF1-4F41-9FF7-ED711FB89FA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADAD919-32C1-49D2-A419-C9A803DB6250"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.01.03",
            "matchCriteriaId" : "8319D59A-6F4A-488D-B13F-90D70B448706"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506DEE00-30D2-4E29-9645-757EB8778C0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "042B60E7-0614-4EB3-8B47-07DEE5B5E274"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AD120-3465-4C00-AAB3-B6F6ED708B51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "4F0583DE-EBB9-41C7-92C9-4E4E259F28B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057D9947-CE4A-4B4C-B721-4B29FB71350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.04",
            "matchCriteriaId" : "190CD7FB-3FBA-4988-9759-7815BD1F5737"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEBBF4-221A-429E-8BE8-24899FFE6D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc547d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.91.3272",
            "matchCriteriaId" : "0CA84993-2A1C-4CDF-8AA3-BE5C95E7DFF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc547d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D8654-08B0-4FF8-907B-F081A8048C85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc547e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "8DB5E7FE-2FA2-429F-8A6C-5C3410562224"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc547e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FBB1974-66F4-4F6B-85AB-7FE4B1BEC2E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.26.3000",
            "matchCriteriaId" : "4F9839B0-C214-4D84-AFD8-C5F9C14BEB4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBE04AF-9130-43DE-A1CC-2AC66F2209DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc627c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "6DD13F29-4E0E-4AB4-AB37-130D4104AD8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc627c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5275FF-588F-4337-97EF-A37522F07548"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc677c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "F6BDFA2C-7D39-4179-A00D-92552F269158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc677c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300E56DA-BB24-4877-8CF2-A049A979E31B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc647c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "BBA440D3-93A9-4681-AF0E-8667DCF24E4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc647c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE60199-D133-48EE-8124-6C798981E4A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc647d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "9BC56331-2124-4446-94BD-EA6D551F193D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc647d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75EE385-B1E7-4EC1-9383-73E1FA6F4AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc847c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "7EEB6E29-CAA0-4EDB-9042-12B0C4D27558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc847c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D39EF6-86A9-49F4-899A-F21D8619F24D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc847d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "FB168E2D-A808-47D6-8B11-0308DAC118E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc847d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC2AE90-7015-483A-805C-5BB6E84CAF29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791C710D-472C-492C-AB83-87EFDE57E557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEBBF4-221A-429E-8BE8-24899FFE6D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.26.3000",
            "matchCriteriaId" : "4F9839B0-C214-4D84-AFD8-C5F9C14BEB4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBE04AF-9130-43DE-A1CC-2AC66F2209DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_ipc477d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56443C42-C990-4316-871F-8E2DA650C06E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_ipc477d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F79553-5769-4814-B602-714F2E68A96A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87041DE-EA8D-4DC1-BD7C-03C42C6EE7FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc427d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CC8AFE-ED6C-4A50-AC80-D2309E03FAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.05",
            "matchCriteriaId" : "60A4F35F-96D5-4750-8597-5C4E74C690DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40D0CDB-7BE6-491F-B730-3B4E10CA159A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_p320-4_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.02.06.83.1",
            "matchCriteriaId" : "310CC52F-1AE2-4319-93F5-185F492F2ABA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion_p320-4_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4849FE93-67D0-496F-B47D-5035FF902540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "578D9CB9-6831-41C5-99C3-E1940562F118"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_pcu_50.5-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04BB605-3CD3-41FE-8CC6-F5D8B8650955"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4D2787-FA10-4B06-BC00-B869FB16A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11D072B-B549-4352-B0E5-2E7C1923161E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED42746-4191-4188-8BAD-4A23B4D6B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52652BE3-F695-42FB-A6FF-4A51DBA6789B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD06FA87-E538-4492-9031-068CA05E63CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFABA0B-46E6-4F2B-BA13-A48BF2587F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4290CDD9-8D27-46AD-BEFC-36827FA4A348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09936A93-41E2-4293-B88B-4B7ED4E6FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8855E63-AE6C-44A7-A2FE-7E4791C69BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E92AF85-322D-4587-B393-62172EA51D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF833CF3-0170-491D-AEDB-33003B35B47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C27CD90-E986-4A89-B63E-1E3D2C62FBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71755C-4B29-4947-A436-1658097CD3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86388428-3285-4BC8-B0F2-2049B07711F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98269",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038385",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170509-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.embedi.com/news/mythbusters-cve-2017-5689",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability",
        "source" : "secure@intel.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170509-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.embedi.com/news/mythbusters-cve-2017-5689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T14:59:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes."
      }, {
        "lang" : "es",
        "value" : "Pexip Infinity anterior a 14.2 Permite a los atacantes remotos causar una denegación de servicio (reinicio del servicio) o ejecutar código arbitrario a través de vectores relacionados con Conferencing Nodes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.1",
            "matchCriteriaId" : "E904F96B-E387-44B1-8897-C0067F6A9274"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97954",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2017-04-10.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2017-04-10.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T14:59:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message."
      }, {
        "lang" : "es",
        "value" : "Kerio Connect 8.0.0 a 9.2.2 y la aplicación de escritorio Kerio Connect Client para Windows y Mac 9.2.0 a 9.2.2, cuando la vista previa de correo electrónico está habilitada, permite a atacantes remotos realizar ataques de clickjacking a través de un mensaje de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:kerio_connect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "9.2.2",
            "matchCriteriaId" : "5BFC58FB-50AB-4B0F-B1F6-EBBF519AA5C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:kerio_connect_client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndIncluding" : "9.2.2",
            "matchCriteriaId" : "B399F54F-2B6D-443B-B2E9-3EAD802E11A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gfi.com/support/products/Clickjacking-vulnerability-in-Kerio-Connect-8-and-9-CVE-2017-7440",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gfi.com/support/products/Clickjacking-vulnerability-in-Kerio-Connect-8-and-9-CVE-2017-7440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7483",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-02T14:59:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read."
      }, {
        "lang" : "es",
        "value" : "Rxvt v2.7.10 es vulnerable a un ataque de denegación de servicio al pasar el valor -2^31 dentro de un código de escape de terminal, lo que resulta en un entero no invertible que eventualmente produce un segfault debido a una lectura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rxvt_project:rxvt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315683F4-D53F-42C7-8762-4C53D5A41D1F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/01/15",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/01/18",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/01/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/01/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T14:59:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en la función v9fs_list_xattr en hw/9pfs/9p-xattr.c en QEMU (también conocido como Quick Emulator) permite a los usuarios locales privilegiados de los sistemas operativos invitados causar una denegación de servicio (por consumo de memoria) a través de vectores que implican la variable orig_value"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "26E56B0F-531A-4803-9664-9511BCC320D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D5C1F9-C3B4-4733-8782-0E54AE543C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "286D3DE9-9796-42AE-88E1-F6E04BF8B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B54248FC-FD5C-445E-BD8F-886D9D8736D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ffcdef4277a91af15a3c09f7d16af072c29f3f2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/25/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98012",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1444781",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ffcdef4277a91af15a3c09f7d16af072c29f3f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/25/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1444781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T14:59:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count."
      }, {
        "lang" : "es",
        "value" : "hw/scsi/vmw_pvscsi.c en QEMU (también conocido como Quick Emulator) permite a los usuarios locales privilegiados de los sistemas operativos invitados causar una denegación de servicio (bucle infinito y consumo de CPU) a través de mensajes ring en la pagina de recuento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/26/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98015",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445621",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/26/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T14:59:00.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users."
      }, {
        "lang" : "es",
        "value" : "RuboCop version 0.48.1 y anteriores no usan /tmp en modo seguro, permitiendo a usuarios locales explotar esta vulnerabilidad para manipular archivos en caché pertenecientes a otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubocop_project:rubocop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.48.1",
            "matchCriteriaId" : "01E079DD-9617-44A9-AA53-141A26DC0F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/01/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bbatsov/rubocop/issues/4336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/01/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bbatsov/rubocop/issues/4336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T14:59:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels."
      }, {
        "lang" : "es",
        "value" : "LAME hasta la versión 3.99.5 se basa en el tipo de datos enteros con signo para los valores en un encabezado WAV o AIFF, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer basado en pila -stack- o desbordamiento de búfer basado en memoria dinámica -heap-) o posiblemente causar otro impacto no especificado a través de un fichero especialmente diseñado, como lo demuestra el manejo incorrecto de num_channels."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.99.5",
            "matchCriteriaId" : "48D01D74-208F-4A33-AAB3-0DC4FFE278CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/lame/bugs/458/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/458/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T15:59:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters."
      }, {
        "lang" : "es",
        "value" : "La interfaz de gestión web de Palo Alto Networks PAN-OS en versiones anteriores a la 7.1.9 permite a los usuarios remotos autenticados obtener información confidencial a través de parámetros de solicitud no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.8",
            "matchCriteriaId" : "A6E19793-C7FB-41A6-BED6-353AE6FFA163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97590",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-7216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7476",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-02T17:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c."
      }, {
        "lang" : "es",
        "value" : "Gnulib antes del 26-04-2017 tiene un desbordamiento de búfer basado en heap con la variable de entorno TZ. El error está en la función save_abbr en time_rz.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnulib:gnulib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-04-25",
            "matchCriteriaId" : "DD908BB1-EF26-4549-937C-435D784AE850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e01571507835ff59dd8ce2a0b56a4b566965a4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98098",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1444774",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-7476",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e01571507835ff59dd8ce2a0b56a4b566965a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1444774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-7476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-02T17:59:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this."
      }, {
        "lang" : "es",
        "value" : "La función coff_set_alignment_hook de coffcode.h en la biblioteca Binary File Descriptor (BFD) (también conocida como libbfd), tal como se distribuye en GNU Binutils 2.28, presenta una vulnerabilidad de tipo \"fuga de memoria\" que puede ocasionar un agotamiento de la memoria en objdump a través de un archivo PE manipulado. Una validación adicional en dump_relocs_in_section en objdump.c puede resolver esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21440",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0331",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-02T21:59:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel 3.10. Android ID: A-34113000. References: N-CVE-2017-0331."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de video de NVIDIA podría permitir a una aplicación local maliciosa ejecutar código en el contexto del nùcleo. Este problema es clasificado por crítico por la posibilidad de comprometer permanentemente el dispositivo, lo que podría requerir restaurar el sistema operativo para solucionarlo. Producto: Android. Versiones: Kernel 3.10. Android ID: A-34113000. Referencias: N-CVE-2017-0331."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98150",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7428",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-05-03T05:59:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat."
      }, {
        "lang" : "es",
        "value" : "NetIQ iManager 3.x antes de 3.0.3.1 tiene un problema en la renegociación de los parámetros de conexión con Tomcat."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7F7B-CF13-4729-BDC8-FA7C25EB0856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B44FED3-A5D0-4F0D-AD4F-329152057627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A555C67-FE51-414D-B93A-42DEC732EAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F06556-00E1-40B1-97B9-E0574DC4B597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2482872E-C1FE-4E4E-833A-A426CC4E1230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDB7A9D-A03D-458D-87CA-EF9440ABA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1029431",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1029431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7430",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-05-03T05:59:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework."
      }, {
        "lang" : "es",
        "value" : "Novell iManager en versiones 2.7.x anteriores a la 2.7 SP7 Patch 10 HF1 y NetIQ iManager versiones 3.x anteriores a la 3.0.3.1 presentan una vulnerabilidad de XSS persistente en el Framework."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B982AA70-B5BA-4E56-8DBE-15EEC0A70DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D39CE17-0383-4078-8600-C07F9E943699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8877DA-0E30-40C7-9506-8B07A42C76A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "584A6436-0480-4EC8-8129-DFD3CFFF10A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "C62EA146-9EFC-4CDC-96A7-E44CC0744B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "155397A8-932C-40EC-B763-AC39D5B8B736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBD982A-EF73-403E-B486-BBECBCE606BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "096ADACF-B48F-4636-B141-4D680F498A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "724BD98B-2407-4B8D-8892-A39B965249BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0B8EAE-210E-4AB8-9373-B8FC1216C056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "F265DEB1-0DA8-41B4-8F83-617C64C42BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "10A72CB5-EC86-431F-9DE6-861FB314434A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F62A4826-99FB-4255-960E-74FC427A92B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_10:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD11B88-EB75-48DE-BB17-7B57ABE85973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "86B6883E-4A18-4AFD-9B3A-F994F7EB6DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_3:*:*:*:*:*:*",
            "matchCriteriaId" : "141E6087-B64F-46E1-A2AF-D7E78D55D3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_4:*:*:*:*:*:*",
            "matchCriteriaId" : "274A55F9-1143-43C4-9A9A-346FFDF37910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_5:*:*:*:*:*:*",
            "matchCriteriaId" : "0024EE9F-22EB-4506-B31C-5A96EF3856F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_6:*:*:*:*:*:*",
            "matchCriteriaId" : "539F5CF0-CE59-4771-8A22-A8CC8374ECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_7:*:*:*:*:*:*",
            "matchCriteriaId" : "33EA7239-B6FF-494D-8F93-2612A15C1DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_8:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4392D2-CE7F-4788-90F9-9AD636FC49E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_9:*:*:*:*:*:*",
            "matchCriteriaId" : "E641A85F-2B46-420B-AF9E-AD22D8BD348B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7F7B-CF13-4729-BDC8-FA7C25EB0856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B44FED3-A5D0-4F0D-AD4F-329152057627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A555C67-FE51-414D-B93A-42DEC732EAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F06556-00E1-40B1-97B9-E0574DC4B597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2482872E-C1FE-4E4E-833A-A426CC4E1230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDB7A9D-A03D-458D-87CA-EF9440ABA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1024959",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1030691",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=24FxpmqdThE~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1024959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1030691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=24FxpmqdThE~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7431",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-05-03T05:59:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management."
      }, {
        "lang" : "es",
        "value" : "Novell iManager 2.7.x antes 2.7 SP7 Patch 10 HF1 y NetIQ iManager 3.x antes 3.0.3.1 tienen un CSRF persistente en la gestión de objetos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B982AA70-B5BA-4E56-8DBE-15EEC0A70DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D39CE17-0383-4078-8600-C07F9E943699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8877DA-0E30-40C7-9506-8B07A42C76A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "584A6436-0480-4EC8-8129-DFD3CFFF10A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "C62EA146-9EFC-4CDC-96A7-E44CC0744B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "155397A8-932C-40EC-B763-AC39D5B8B736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBD982A-EF73-403E-B486-BBECBCE606BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "096ADACF-B48F-4636-B141-4D680F498A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "724BD98B-2407-4B8D-8892-A39B965249BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0B8EAE-210E-4AB8-9373-B8FC1216C056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "F265DEB1-0DA8-41B4-8F83-617C64C42BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "10A72CB5-EC86-431F-9DE6-861FB314434A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F62A4826-99FB-4255-960E-74FC427A92B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_10:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD11B88-EB75-48DE-BB17-7B57ABE85973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "86B6883E-4A18-4AFD-9B3A-F994F7EB6DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_3:*:*:*:*:*:*",
            "matchCriteriaId" : "141E6087-B64F-46E1-A2AF-D7E78D55D3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_4:*:*:*:*:*:*",
            "matchCriteriaId" : "274A55F9-1143-43C4-9A9A-346FFDF37910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_5:*:*:*:*:*:*",
            "matchCriteriaId" : "0024EE9F-22EB-4506-B31C-5A96EF3856F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_6:*:*:*:*:*:*",
            "matchCriteriaId" : "539F5CF0-CE59-4771-8A22-A8CC8374ECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_7:*:*:*:*:*:*",
            "matchCriteriaId" : "33EA7239-B6FF-494D-8F93-2612A15C1DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_8:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4392D2-CE7F-4788-90F9-9AD636FC49E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_9:*:*:*:*:*:*",
            "matchCriteriaId" : "E641A85F-2B46-420B-AF9E-AD22D8BD348B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7F7B-CF13-4729-BDC8-FA7C25EB0856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B44FED3-A5D0-4F0D-AD4F-329152057627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A555C67-FE51-414D-B93A-42DEC732EAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F06556-00E1-40B1-97B9-E0574DC4B597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2482872E-C1FE-4E4E-833A-A426CC4E1230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDB7A9D-A03D-458D-87CA-EF9440ABA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1024963",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1030692",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=24FxpmqdThE~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1024963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1030692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=24FxpmqdThE~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7432",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-05-03T05:59:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability."
      }, {
        "lang" : "es",
        "value" : "Novell iManager 2.7.x antes 2.7 SP7 Patch 10 HF1 y NetIQ iManager 3.x antes 3.0.3.1 tienen una vulnerabilidad de carga de webshell."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B982AA70-B5BA-4E56-8DBE-15EEC0A70DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D39CE17-0383-4078-8600-C07F9E943699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8877DA-0E30-40C7-9506-8B07A42C76A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "584A6436-0480-4EC8-8129-DFD3CFFF10A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "C62EA146-9EFC-4CDC-96A7-E44CC0744B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "155397A8-932C-40EC-B763-AC39D5B8B736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBD982A-EF73-403E-B486-BBECBCE606BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "096ADACF-B48F-4636-B141-4D680F498A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp4_patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "724BD98B-2407-4B8D-8892-A39B965249BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0B8EAE-210E-4AB8-9373-B8FC1216C056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "F265DEB1-0DA8-41B4-8F83-617C64C42BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "10A72CB5-EC86-431F-9DE6-861FB314434A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F62A4826-99FB-4255-960E-74FC427A92B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_10:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD11B88-EB75-48DE-BB17-7B57ABE85973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "86B6883E-4A18-4AFD-9B3A-F994F7EB6DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_3:*:*:*:*:*:*",
            "matchCriteriaId" : "141E6087-B64F-46E1-A2AF-D7E78D55D3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_4:*:*:*:*:*:*",
            "matchCriteriaId" : "274A55F9-1143-43C4-9A9A-346FFDF37910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_5:*:*:*:*:*:*",
            "matchCriteriaId" : "0024EE9F-22EB-4506-B31C-5A96EF3856F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_6:*:*:*:*:*:*",
            "matchCriteriaId" : "539F5CF0-CE59-4771-8A22-A8CC8374ECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_7:*:*:*:*:*:*",
            "matchCriteriaId" : "33EA7239-B6FF-494D-8F93-2612A15C1DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_8:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4392D2-CE7F-4788-90F9-9AD636FC49E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.7:sp7_patch_9:*:*:*:*:*:*",
            "matchCriteriaId" : "E641A85F-2B46-420B-AF9E-AD22D8BD348B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7F7B-CF13-4729-BDC8-FA7C25EB0856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B44FED3-A5D0-4F0D-AD4F-329152057627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A555C67-FE51-414D-B93A-42DEC732EAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F06556-00E1-40B1-97B9-E0574DC4B597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2482872E-C1FE-4E4E-833A-A426CC4E1230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDB7A9D-A03D-458D-87CA-EF9440ABA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1027619",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=24FxpmqdThE~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1027619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=24FxpmqdThE~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7010166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T05:59:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader en versiones anteriores a la 8.2.1 y PhantomPDF en versiones anteriores a la 8.2.1, presentan una vulnerabilidad de lectura fuera de límites que permite a atacantes remotos obtener información sensible o ejecutar código arbitrario a través de una fuente manipulada en un documento PDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2051",
            "matchCriteriaId" : "1EA0997C-DAC3-46EE-9BF2-640E6A93EB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2192",
            "matchCriteriaId" : "1386BBC6-C8D2-4ACD-A5E0-925D48AD7025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98317",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-134/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-134/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T05:59:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader en versiones anteriores a la 8.2.1 y PhantomPDF en versiones anteriores a la 8.2.1, presentan una vulnerabilidad de lectura fuera de límites que permite a atacantes remotos obtener información sensible o ejecutar código arbitrario a través de una fuente manipulada en un documento PDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2051",
            "matchCriteriaId" : "1EA0997C-DAC3-46EE-9BF2-640E6A93EB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2192",
            "matchCriteriaId" : "1386BBC6-C8D2-4ACD-A5E0-925D48AD7025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98320",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-135/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-135/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T05:59:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader anterior a 8.2.1 y PhantomPDF anterior a 8.2.1 están afectados por una lectura fuera de límites que permite a un atacante remoto obtener información sensible o ejecutar código de forma arbitraria utilizando una fuente manipulada en un documento PDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2051",
            "matchCriteriaId" : "1EA0997C-DAC3-46EE-9BF2-640E6A93EB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.0.2192",
            "matchCriteriaId" : "1386BBC6-C8D2-4ACD-A5E0-925D48AD7025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98319",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-140/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T14:59:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site."
      }, {
        "lang" : "es",
        "value" : "Brave Browser versión 0.12.4 tiene un problema de ofuscación URI en el que una cadena como https://safe.example.com@unsafe.example.com/ es mostrada sin una clara indicación a través de la interfaz de usuario de que no es un recurso del sitio web safe.example."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brave:brave:0.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD636F57-0386-4B03-8E76-7C1D145DD7E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/brave/browser-laptop/issues/4748",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/175529",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/brave/browser-laptop/issues/4748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/175529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T14:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) the display of web-search results"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Brave Browser 0.12.4 tiene un problema de ofuscación de barra de estado en el que un destino de redirección es mostrado posiblemente de una manera inesperada. NOTA: terceras partes están debatiendo sobre este problema, ya que es un comportamiento que puede tener aplicaciones legítimas, como por ejemplo la visualización de resultados de búsqueda web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brave:brave:0.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD636F57-0386-4B03-8E76-7C1D145DD7E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/175701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/175701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5236",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-05-03T16:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer."
      }, {
        "lang" : "es",
        "value" : "Las ediciones de los instaladores de Rapid7 AppSpider Pro anteriores a la versión 6.14.060 contienen una vulnerabilidad de precarga de DLL, en la que es posible que el instalador cargue una DLL malintencionada ubicada en el directorio de trabajo actual del instalador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.14.059",
            "matchCriteriaId" : "C33EEBA9-00DD-4297-8814-CCA32F374DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.rapid7.com/docs/DOC-3631",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.rapid7.com/docs/DOC-3631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5240",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-05-03T16:59:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash."
      }, {
        "lang" : "es",
        "value" : "Las ediciones de Rapid7 AppSpider Pro anteriores a la versión 6.14.060 contienen un desbordamiento de buffer basado en memoria dinámica en el componente FLAnalyzer.exe. Un archivo de código fuente Flash malicioso o mal formado puede causar una condición de denegación de servicio cuando se analiza por este componente, provocando que la aplicación se bloquee."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.14.059",
            "matchCriteriaId" : "C33EEBA9-00DD-4297-8814-CCA32F374DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.rapid7.com/docs/DOC-3631",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.rapid7.com/docs/DOC-3631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T19:59:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL."
      }, {
        "lang" : "es",
        "value" : "Xen PV guest anterior a Xen 4.3 chequea los permisos de acceso a los rangos MMIO sólo después de acceder a ellos, lo que permite leer en un dispositivo de memoria PCI, dando lugar a la divulgación de información. Se trata de un error en la función get_user. NOTA: el upstream Xen Project considera versiones anteriores a 4.5.x para ser EOL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.5",
            "matchCriteriaId" : "9213743B-275F-4056-81E8-E44E18A81FCA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4EEF7C-CC33-4494-8531-7C0CC28A8823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBED083-B935-4C47-BBDA-F39D8EA277ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6136E8-74DE-48AF-A8AB-B0E93D34870C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux_enterprise_point_of_sale:11.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "51E07D0D-67A6-4DDE-BE4E-959DE0A3314F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:*",
            "matchCriteriaId" : "3F8CE3BD-993B-407F-BAEC-A070F6B46E6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98314",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1033948",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1033948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T20:59:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation."
      }, {
        "lang" : "es",
        "value" : "Trend Micro OfficeScan 11.0 en la versión anterior a SP1 CP 6325 y XG y la versión anterior a CP 1352, permite a los usuarios remotos autenticados obtener privilegios aprovechando una fuga de una contraseña cifrada durante una operación de consola web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB164BF-12B5-450F-9DDB-9A3FBD544F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98007",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117204",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T20:59:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol=\"application/pgp-encrypted\"; boundary=\"abc123abc123\"' to 'Content-Type: text/plain' - this results in the encrypted message being structured in such a way that most PGP/MIME-capable mail user agents are unable to decrypt it cleanly. The outcome is that encrypted mail passing through this device does not work (Denial of Service), and a common real-world consequence is a request to resend the mail in the clear (Information Disclosure)."
      }, {
        "lang" : "es",
        "value" : "Los mensajes encriptados PGP/MIME inyectados en un frontend Vaultive Office 365 (anterior a 4.5.21) a través de IMAP o SMTP modifican su Content-Type de 'Content-Type: multipart/encrypted; protocol=\"application/pgp-encrypted\"; boundary=\"abc123abc123\" to 'Content-Type: text/plain' Esto hace que el mensaje encriptado esté estructurado de tal manera que la mayoría de los agentes de correo PGP/MIME no pueden descifrarlo de forma limpia. El resultado es que el correo cifrado que pasa a través de este dispositivo no funciona (denegación de servicio), y una consecuencia común en el mundo real es que se produce una solicitud para volver a enviar el correo en claro (divulgación de información)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaultive:office_365_security:4.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1EAB9F-B812-4C85-91BB-B4380560BF61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/dkg/a1998c861bf2430e0d01d586905b11cb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/dkg/a1998c861bf2430e0d01d586905b11cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6620",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-03T21:59:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress connection request to the remote management interface. An attacker could exploit this vulnerability by sending a connection to the management IP address or domain name of the targeted device. A successful exploit could allow the attacker to bypass the configured remote management ACL. This can occur when the Remote Management configuration parameter is set to Disabled. This vulnerability affects Cisco CVR100W Wireless-N VPN Routers running a firmware image prior to 1.0.1.24. Cisco Bug IDs: CSCvc14457."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de lista de control de acceso de administración remota (ACL) del enrutador VPN Cisco N CVR100W Wireless-N podría permitir a un atacante remoto no autenticado omitir la ACL de administración remota. La vulnerabilidad se debe a una implementación incorrecta de la decisión de ACL tomada durante la solicitud de conexión de ingreso a la interfaz de administración remota. Un atacante podría explotar esta vulnerabilidad enviando una conexión a la dirección IP de administración o al nombre de dominio del dispositivo de destino. Una explotación exitosa podría permitir al atacante pasar por alto la ACL de administración remota. Esto puede ocurrir cuando el parámetro de configuración de Gestión remota está establecido en Desactivado. Esta vulnerabilidad afecta a los enrutadores VPN de Cisco CVR100W Wireless-N que ejecutan una imagen de firmware anterior a 1.0.1.24. ID de errores de Cisco: CSCvc14457."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv_series_router_firmware:1.0.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B66443C-7672-4BC9-858F-13DB2AC423C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_rv_series_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D7AB59-B443-41D0-8A72-FD3D2371B889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98289",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038395",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cvr100w2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cvr100w2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6624",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-03T21:59:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker could exploit this vulnerability to place unauthorized, long-distance phone calls by using an affected system. Cisco Bug IDs: CSCuy40939."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco IOS 15.5 (3) M Software de Cisco CallManager Express (CME) podría permitir que un atacante remoto no autenticado realice llamadas telefónicas no autorizadas. La vulnerabilidad se debe a una restricción de configuración en el componente de protección toll-fraud del software afectado. Un atacante podría explotar esta vulnerabilidad para realizar llamadas telefónicas no autorizadas de larga distancia utilizando un sistema afectado. ID de errores de Cisco: CSCuy40939."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716EC9AA-0569-4FA7-A244-1A14FA15C5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98283",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038398",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6625",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-03T21:59:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service\" vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticated, remote attacker to cause an affected system to stop inspecting and processing packets, resulting in a denial of service (DoS) condition. The vulnerability is due to improper SSL policy handling by the affected software when packets are passed through the sensing interfaces of an affected system. An attacker could exploit this vulnerability by sending crafted packets through a targeted system. This vulnerability affects Cisco Firepower System Software that is configured with the SSL policy feature. Cisco Bug IDs: CSCvc84361."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de \"Cisco Firepower Threat Defense versión 6.0.0 hasta 6.2.2 y Cisco ASA with FirePOWER Module Denial of Service\" en la política de control de acceso de Cisco Firepower System Software podría permitir que un atacante remoto identificado provoque que un sistema afectado deje de inspeccionar y procesar paquetes, lo que resulta en una condición de denegación de servicio (DoS). La vulnerabilidad se debe a un manejo inapropiado de la política SSL por parte del software afectado cuando los paquetes pasan por medio  de las interfaces de detección de un sistema afectado. Un atacante podría aprovechar esta vulnerabilidad enviando paquetes creados por medio  de un sistema específico. Esta vulnerabilidad afecta al software del sistema Cisco Firepower que está configurado con la función de política SSL. Identificación de errores de Cisco  Bug IDs: CSCvc84361"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AC6A67-82EF-4D31-AFCB-499A0C6EC0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "995667FD-35F1-49E5-96DB-2FDFF5E0B523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FB47CF-2A6A-4121-BFF7-5862E163B8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9873ABAC-9A3D-40E1-B7FF-F2AB74F82C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC52A8B-7DF4-47B2-9F49-627F59656E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD48BE40-C647-429A-81B6-59E125BBE415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42496A5B-1644-4088-BBCF-2ED810A5694B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98292",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038397",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ftd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ftd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6626",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-03T21:59:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the existence of a user account that has an undocumented, hard-coded password. An attacker could exploit this vulnerability by using the hard-coded credentials to subscribe to the Finesse Notification Service, which would allow the attacker to receive notifications when an agent signs in or out of the Finesse Desktop, when information about an agent changes, or when an agent's state changes. Cisco Bug IDs: CSCvc08314."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio de notificación de Cisco Finesse de Cisco Unified Contact Center Enterprise (UCCE) 11.5 (1) y 11.6 (1) podría permitir a un atacante remoto no autenticado recuperar información de los agentes que utilizan Finesse Desktop. La vulnerabilidad se debe a la existencia de una cuenta de usuario que tiene una contraseña indocumentada y codificada. Un atacante podría explotar esta vulnerabilidad usando las credenciales codificadas para suscribirse al servicio de notificación Finesse, lo que permitiría al atacante recibir notificaciones cuando un agente inicie o salga del escritorio de Finesse, cuando la información sobre un agente cambie o cuando el estado de un agente cambia. ID de errores de Cisco: CSCvc08314."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "748BB300-C765-4BB2-A1E8-7F0133C7C4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:11.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6CC923-CF25-4B15-8FFD-73FBD71547F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98291",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038396",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-finesse-ucce",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-finesse-ucce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6628",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-03T21:59:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition where the WAN optimization could stop functioning while the process restarts. The vulnerability is due to a Secure Sockets Layer/Transport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacker could exploit this vulnerability by establishing a SMART-SSL connection through the targeted device. The attacker would then send a crafted stream of SSL/TLS traffic. An exploit could allow the attacker to cause a DoS condition where WAN optimization could stop processing traffic for a short period of time. Cisco Bug IDs: CSCvb71133."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de SMART-SSL Accelerator de Cisco Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a y 6.2.3a podría permitir a un atacante remoto no autenticado causar una denegación de servicio (DoS) provocando que la WAN deje de funcionar mientras el proceso se reinicia. La vulnerabilidad se debe a que una alerta de Secure Sockets Layer/Transport Layer Security (SSL/TLS) manejada incorrectamente cuando se encuentra en un estado de conexión SSL / TLS específica. Un atacante podría explotar esta vulnerabilidad al establecer una conexión SMART-SSL a través del dispositivo de destino. El atacante entonces enviaría una secuencia de tráfico SSL / TLS. Un exploit podría permitir al atacante causar un DoS en la que la WAN que podría detener el procesamiento del tráfico durante un corto período de tiempo. ID de errores de Cisco: CSCvb71133."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824B8C4F-EE4C-4654-BA85-B9AB68BF4491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29DEA22-F270-44C9-8A6D-F7563A4AE6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2637FD-48D3-48F5-819E-91D049C62F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98294",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038399",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-waas",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-waas",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6629",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-03T21:59:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. Cisco Bug IDs: CSCvd90118."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el parámetro ImageID de Cisco Unity Connection 10.5 (2) podría permitir a un atacante remoto no autenticado acceder a archivos en ubicaciones arbitrarias en el sistema de archivos de un dispositivo afectado. El problema se debe a una desinfección inadecuada de la entrada suministrada por el usuario en los parámetros HTTP POST que describen los nombres de archivo. Un atacante podría explotar esta vulnerabilidad utilizando técnicas de salto de directorios para enviar una ruta a la ubicación del archivo deseada. ID de errores de Cisco: CSCvd90118."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:10.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F5AF19-C869-4A55-B4D7-38C0FFABCC6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98286",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038400",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cuc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cuc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-03T22:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS versión 1.0.2 presenta una vulnerabilidad XSS que se activa por un usuario autenticado que envía una página, como se demuestra a través de un atributo oncut manipulado en un elemento B."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A8E0CB-C324-4898-8248-572AABB98B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/73",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T04:59:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XSS en módulos / Base / Box / check_for_new_version.php en EPESI en Telaxus / EPESI 1.8.2 y versiones anteriores permite a atacantes remotos inyectar scripts web o HTML a través de un URI que carece del parámetro cid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "D68D395C-AB6A-4EA9-ABF2-F88229D02FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/issues/182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T04:59:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function named ReadICONImage in coders\\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file."
      }, {
        "lang" : "es",
        "value" : "La función ReadICONImage en coders\\icon.c en ImageMagick versión 7.0.5-5, presenta una vulnerabilidad de fuga de memoria que puede ocasionar un agotamiento de memoria a través de un fichero ICON."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/466",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T04:59:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation."
      }, {
        "lang" : "es",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316 y Quick Heal AntiVirus Pro 10.1.0.316 son vulnerables a una escritura fuera de límites en el búfer de memoria dinámica (heap) debido a una validación incorrecta de dwCompressionSize de Microsoft WIM Header WIMHEADER_V1_PACKED. Esta vulnerabilidad puede explotarse para obtener la ejecución remota de código, así como para escalar de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7CD45E1D-9336-41B1-8D24-9946FCAEB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "F551FB1D-0142-41AD-8404-744F8DDF4E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7627A0E4-682B-4918-9A2B-F35269620A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://payatu.com/oob-write-heap-buffer-dwcompressionsize-ms-wim/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://payatu.com/oob-write-heap-buffer-dwcompressionsize-ms-wim/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T04:59:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316 y Quick Heal AntiVirus Pro 10.1.0.316 son vulnerables a una corrupción de memoria al analizar archivos Mach-O malformados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7CD45E1D-9336-41B1-8D24-9946FCAEB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "F551FB1D-0142-41AD-8404-744F8DDF4E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7627A0E4-682B-4918-9A2B-F35269620A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T04:59:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, y Quick Heal AntiVirus Pro 10.1.0.316 son vulnerables a una corrupción de memoria al analizar archivos Mach-O malformados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7CD45E1D-9336-41B1-8D24-9946FCAEB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "F551FB1D-0142-41AD-8404-744F8DDF4E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7627A0E4-682B-4918-9A2B-F35269620A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T04:59:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product."
      }, {
        "lang" : "es",
        "value" : "Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, y Quick Heal AntiVirus Pro 10.1.0.316 tienen unos 165 archivos PE en la instalación por defecto que no utilizan protección ASLR/DEP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7CD45E1D-9336-41B1-8D24-9946FCAEB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "F551FB1D-0142-41AD-8404-744F8DDF4E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.316",
            "matchCriteriaId" : "7627A0E4-682B-4918-9A2B-F35269620A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://payatu.com/quick-heal-antivirus-protection-mechanism-failure-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://payatu.com/quick-heal-antivirus-protection-mechanism-failure-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4983",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-05-04T14:29:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "El sistema operativo EMC Data Domain entre las versiónes 5.2 y 5.7 y las anteriores a la 5.7.3.0,y entre la versión 6.0 y la 6.0.1.0, se ve afectado por una vulnerabilidad de escalamiento de privilegios que puede ser explotada por los atacantes para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2164BB5-BB03-40AC-8516-D6B1F391A14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1B32F0-314B-4461-A25C-B44D05A58A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04030715-63F7-4DD1-9513-2E131BD9B13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846D0C1D-F93E-4685-9DFA-90FCD360F41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E70A9F7-A09A-4E69-ABE7-A624CC00D1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22581424-17D9-4520-BB2D-BD083DE6B964"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540517/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98047",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038404",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540517/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T14:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be resent, leading to transmission of the reset key to a mailbox on an attacker-controlled SMTP server. This is related to problematic use of the SERVER_NAME variable in wp-includes/pluggable.php in conjunction with the PHP mail function. Exploitation is not achievable in all cases because it requires at least one of the following: (1) the attacker can prevent the victim from receiving any e-mail messages for an extended period of time (such as 5 days), (2) the victim's e-mail system sends an autoresponse containing the original message, or (3) the victim manually composes a reply containing the original message."
      }, {
        "lang" : "es",
        "value" : "WordPress hasta la versión 4.7.4 se basa en el encabezado HOST de HTTP para un mensaje de correo electrónico de restablecimiento de contraseña, lo que hace más fácil para los atacantes remotos restablecer contraseñas arbitrarias mediante una solicitud wp-login.php?action=lostpassword especialmente diseñada y después hacer lo necesario para que dicho mensaje se devuelva o sea reenviado, dando lugar a la transmisión de la clave de restablecimiento a un buzón en un servidor SMTP controlado por el atacante. Esto está relacionado con el uso problemático de la variable SERVER_NAME en wp-includes/pluggable.php junto con la función de correo de PHP. La explotación no es posible en todos los casos porque requiere al menos uno de los siguientes: (1) el atacante puede evitar que la víctima reciba mensajes de correo electrónico durante un período de tiempo prolongado (como 5 días), (2) el sistema de correo electrónico de la víctima envía una respuesta automática que contiene el mensaje original, o (3) la víctima compone manualmente una respuesta que contiene el mensaje original."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98295",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exploitbox.io/vuln/WordPress-Exploit-4-7-Unauth-Password-Reset-0day-CVE-2017-8295.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41963/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exploitbox.io/vuln/WordPress-Exploit-4-7-Unauth-Password-Reset-0day-CVE-2017-8295.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41963/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T14:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb."
      }, {
        "lang" : "es",
        "value" : "Rpcbind versión 0.2.4, LIBTIRPC versión 1.0.1 y versiones 1.0.2-rc a 1.0.2-rc3, y NTIRPC versión 1.4.3, no consideran el tamaño máximo de datos RPC durante la asignación de memoria para cadenas XDR, lo que permite a atacantes remotos causar una denegación de servicio (consumo de memoria sin liberación) a través de un paquete UDP manipulado enviado al puerto 111, también conocido como rpcbomb."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpcbind_project:rpcbind:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.4",
            "matchCriteriaId" : "31D3864F-CD5A-4C90-BEC7-49A1D2250349"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtirpc_project:libtirpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "C1FF7336-78CD-4C57-8149-8C31AF870ACB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntirpc_project:ntirpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.3",
            "matchCriteriaId" : "1DD4200B-DA67-4F7D-AA8C-32D7724AD3FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/05/03/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/04/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98325",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2017:1497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/drbothen/GO-RPCBOMB",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/guidovranken/rpcbomb/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180109-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3759-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3759-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41974/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/03/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2017:1497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/drbothen/GO-RPCBOMB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/guidovranken/rpcbomb/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180109-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3759-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3759-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41974/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS 1.0.2 tiene XSS que se activa por un comentario que no es correctamente gestionado durante una operación de publicación por un administrador, como lo demuestra un elemento P mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A8E0CB-C324-4898-8248-572AABB98B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T15:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document."
      }, {
        "lang" : "es",
        "value" : "GitLab anteriores a 8.14.9, 8.15.x anteriores a 8.15.6 y 8.16.x anteriores a 8.16.5 tienen XSS a través de un elemento SCRIPT en un archivo adjunto o un avatar que es un documento SVG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.14.9",
            "matchCriteriaId" : "889A91B5-A5DF-4D15-80DD-8BC66A9AF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E67A7C-962E-49EE-8B4C-86D764770EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE48CAF-F691-4409-96F9-CBB3903D251D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B07763-013A-48EE-AFB7-3CBB3DFAD60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDE7E4A-12A3-46A6-AE35-075247CF1226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C2EAC-68C0-4444-A366-238A54A96484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C1AA52-622D-4867-AB95-C64DDC185454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1965736-D73F-44DC-BA29-D992CCEA9657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E274B52-360B-4F06-B307-89C6D044E444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F132ED-1CC0-4A58-988F-B61D69FEB99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663040-C06C-4C11-9384-6DE1DE64A8C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20B405B-38EB-4F10-AAE3-700EBB5F5E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2017/02/15/gitlab-8-dot-16-dot-5-security-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/27471",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2017/02/15/gitlab-8-dot-16-dot-5-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/27471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3730",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-05-04T19:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack."
      }, {
        "lang" : "es",
        "value" : "En OpenSSL versión 1.1.0 anterior a 1.1.0d, si un servidor malicioso suministra parámetros incorrectos para un intercambio de claves DHE o ECDHE, entonces esto puede resultar en que el cliente intente desreferenciar un puntero NULL que conduce a un bloqueo del cliente. Esto podría ser explotado en un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73104834-5810-48DD-9B97-549D223853F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC70262-0DCD-4B46-9C96-FD18D0207511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E07A34-08A0-4765-AF81-46A3BDC5648A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_engineering_data_management:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C5D278-11E5-4A2F-9860-6FFA579398CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B21D189-0E7D-4878-91A0-BE38A4ABA1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_application_session_controller:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC967A48-D834-4E9B-8CEC-057E7D5B8174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_application_session_controller:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F920CDE4-DF29-4611-93E9-A386C89EDB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D195BC4C-DAC2-4C71-B83B-4149E86B5F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996861FC-0089-4BED-8E46-F2B76037EA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37764AF5-E42E-461E-AA43-763D21B3DCE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52F557F-D0A0-43D3-85F1-F10B6EBFAEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3517A27-E6EE-497C-9996-F78171BBE90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ECA28E-E810-4D35-9151-FDBBBE069A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA144657-7598-46E2-AB0A-FD332EDECEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83800E2F-804C-485D-A8FA-F4B32CDB4548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CAD50-749F-4ADB-A046-BF3585677A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95812",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037717",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/efbe126e3ebb9123ac9d058aa2bb044261342aaa",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-07",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41192/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170126.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/efbe126e3ebb9123ac9d058aa2bb044261342aaa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41192/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170126.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3731",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-05-04T19:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k."
      }, {
        "lang" : "es",
        "value" : "Si un servidor o cliente SSL/TLS se ejecuta en un host de 32 bits y se utiliza un cifrador específico, un paquete truncado puede dar lugar a que el servidor o el cliente realicen una lectura fuera de límites que, normalmente, provoca un cierre inesperado En OpenSSL 1.1.0, el cierre inesperado se puede desencadenar cuando se usa CHACHA20/POLY1305"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC70262-0DCD-4B46-9C96-FD18D0207511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E07A34-08A0-4765-AF81-46A3BDC5648A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "18797BEE-417D-4959-9AAD-C5A7C051B524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAA3C31-BD9D-45A9-A502-837FECA6D479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "6455A421-9956-4846-AC7C-3431E0D37D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F946FD-F564-49DA-B043-5943308BA9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B89180B-FB68-4DD8-B076-16E51CC7FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C986592-4086-4A39-9767-EF34DBAA6A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B23181C-03DB-4E92-B3F6-6B585B5231B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D9EC1C-4843-4026-9B05-E060E9391734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036FB24F-7D86-4730-8BC9-722875BEC807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF148A3-1AA7-4F27-85AB-414C609C626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15B749E-6808-4788-AE42-7A1587D8697E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "A47FC4F7-1F77-4314-B4B3-3C5D8E335379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.7.3",
            "matchCriteriaId" : "934083EB-2961-49FF-B8D7-B870D1FA3CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.12.0",
            "matchCriteriaId" : "121E5D5D-B4D9-43F3-B5C9-74590192FAF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.8.1",
            "matchCriteriaId" : "D107EC29-67E7-40C3-8E5A-324C9105C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "14346EBC-1890-472B-B236-06FE381229EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.5.0",
            "matchCriteriaId" : "2EE58CC5-2E12-4DA9-8AF2-9739CE393008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0286.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3773",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95813",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037717",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/00d965474b22b54e4275232bc71ee0c699c5cd21",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-07",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-3731",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170126.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-04",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0286.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/00d965474b22b54e4275232bc71ee0c699c5cd21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-3731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170126.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3732",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-05-04T19:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem."
      }, {
        "lang" : "es",
        "value" : "Hay un error de propagación de dígito (carry propagation) en el procedimiento de elevación al cuadrado de Montgomery x86_64 en OpenSSL versiones 1.0.2 anteriores a la 1.0.2k y versiones 1.1.0 anteriores a la 1.1.0d. Ningún algoritmo de curva elíptica (EC) se ve afectado. El análisis sugiere que los ataques contra RSA y DSA que se realizan como resultado de este defecto serían muy difíciles de realizar y no muy probables. Los ataques contra DH se consideran factibles (aunque muy difíciles) ya que la mayoría del trabajo necesario para deducir información sobre una clave privada se puede realizar sin conexión La cantidad de recursos requeridos para este tipo de ataque sería muy significativa y, probablemente, solo estaría accesible para un número limitado de atacantes. Un atacante podría necesitar, además, acceso a un sistema sin parches que utilice la clave privada del objetivo en un escenario con parámetros DH persistentes y una clave privada que se comparte entre múltiples clientes. Por ejemplo, esto puede ocurrir por defecto en las suites de cifrado SSL/TLS basadas en DHE de OpenSSL. Nota: Este problema es muy similar a CVE-2015-3193, pero debe tratarse como un problema separado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "18797BEE-417D-4959-9AAD-C5A7C051B524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAA3C31-BD9D-45A9-A502-837FECA6D479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "6455A421-9956-4846-AC7C-3431E0D37D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F946FD-F564-49DA-B043-5943308BA9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B89180B-FB68-4DD8-B076-16E51CC7FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C986592-4086-4A39-9767-EF34DBAA6A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B23181C-03DB-4E92-B3F6-6B585B5231B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D9EC1C-4843-4026-9B05-E060E9391734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036FB24F-7D86-4730-8BC9-722875BEC807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF148A3-1AA7-4F27-85AB-414C609C626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC70262-0DCD-4B46-9C96-FD18D0207511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E07A34-08A0-4765-AF81-46A3BDC5648A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "A47FC4F7-1F77-4314-B4B3-3C5D8E335379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.7.3",
            "matchCriteriaId" : "934083EB-2961-49FF-B8D7-B870D1FA3CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.12.0",
            "matchCriteriaId" : "121E5D5D-B4D9-43F3-B5C9-74590192FAF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.8.1",
            "matchCriteriaId" : "D107EC29-67E7-40C3-8E5A-324C9105C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "14346EBC-1890-472B-B236-06FE381229EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.5.0",
            "matchCriteriaId" : "2EE58CC5-2E12-4DA9-8AF2-9739CE393008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95814",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037717",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2568",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2575",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2713",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/a59b90bf491410f1f2bc4540cc21f1980fd14c5b",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-07",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170126.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-04",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/a59b90bf491410f1f2bc4540cc21f1980fd14c5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170126.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3733",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-05-04T19:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected."
      }, {
        "lang" : "es",
        "value" : "Durante un protocolo de enlace de renegociación, si la extensión Encrypt-Then-Mac es negociada cuando no estaba en el protocolo de enlace original (o viceversa), se podría provocar el cierre inesperado de OpenSSL (dependiente de una suite de cifrado) en versiones 1.1.0 anteriores a la 1.1.0e. Tanto los clientes como los servidores se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73104834-5810-48DD-9B97-549D223853F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC70262-0DCD-4B46-9C96-FD18D0207511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E07A34-08A0-4765-AF81-46A3BDC5648A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B0A3D8-60C7-4F42-9DD6-C535F983D98B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:operations_agent:11.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739CE0EF-9D08-4A26-A82A-A117DBBF0717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:operations_agent:11.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3429CA31-3B98-4227-8FB5-A56CAFFD641E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96269",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037846",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://github.com/openssl/openssl/commit/4ad93618d26a3ea23d36ad5498ff4f59eff3a4d2",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170216.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openssl/openssl/commit/4ad93618d26a3ea23d36ad5498ff4f59eff3a4d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170216.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-04T22:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command. The Atlassian ID number is SRCTREE-4632."
      }, {
        "lang" : "es",
        "value" : "Atlassian SourceTree v2.5c y versiones anteriores se ven afectados por una inyección de comandos en el árbol de directorios :// scheme. Esto conducirá a una ejecución arbitraria de comandos de SO en el árbol de directorios de una subcadena URL ://cloneRepo/ext:: o ://checkoutRef/ext:: seguido por el comando. El número de identificación de Atlassian es SRCTREE-4632."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5c",
            "matchCriteriaId" : "74AE000A-12B4-49C4-B1CB-C0361C4292CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/05/03/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98329",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=SQ1_Ht-0Bdo",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=SQ1_Ht-0Bdo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T00:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression."
      }, {
        "lang" : "es",
        "value" : "Pcre2test.c en PCRE2 10.23 permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer basado en heap) o posiblemente otro impacto no especificado a través de una expresión regular manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre2:10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80479DA-16D6-47A1-88AF-55B5C821BDEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://vcs.pcre.org/pcre2?view=revision&revision=696",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2?view=revision&revision=697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vcs.pcre.org/pcre2?view=revision&revision=696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vcs.pcre.org/pcre2?view=revision&revision=697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3212",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-05T07:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Space Coast Credit Union Mobile versión 2.2 para iOS y 2.1.0.1104 para Android, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sccu:space_coast_credit_union:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "2.1.0.1104",
            "matchCriteriaId" : "F747F1D7-908E-4261-829F-71C106CF5BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sccu:space_coast_credit_union:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "C82B4FD9-6926-40C5-BD1B-BD18F219CF56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/556600",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98307",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/556600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3213",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-05-05T07:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación bancaria Think Mutual Bank Mobile versión 3.1.5 para iOS, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:think_mutual_bank:think_mutual_bank_mobile_banking_app:3.1.5:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "A3CF72C4-E1E5-48CA-8781-DC3795E1B23C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/276408",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98308",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/276408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación para el banco estatal de la India, State Bank Anywhere versión 5.1.0 para iOS no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:state_bank_of_india:state_bank_anywhere:5.1.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "464A4DA1-E5FE-4E31-A316-7B2871D66E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación PayQuicker versión 1.0.0 para iOS, no verifica los certificados X.509 de los servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payquicker:mypayquicker:1.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "951E7F82-2F78-4141-A871-D53269455964"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Dollar Bank Mobile versión 2.6.3 para iOS, no verifica los certificados X.509 de los servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dollar_bank:dollar_bank_mobile:2.6.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "2BAD1D8D-3D66-463B-8028-464B87EA00CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación para diabéticos, Diabetes in Check: Blood Glucose & Carb Tracker versión 3.4.2 para iOS, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:everyday_health_inc:diabetes_in_check\\:_blood_glucose_\\&_carb_tracker:3.4.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B07E7818-6950-4C5F-861C-A9CE84275E0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Great Southern Bank Great Southern Mobile Banking app before 4.0.4 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Great Southern Mobile Banking anterior a la versión 4.0.4 para iOS, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:great_southern_bank:great_southern_mobile_banking:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "4792BEDA-A560-4657-B2B7-104392F82851"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.467",
      "lastModified" : "2023-11-07T02:49:46.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-3212.  Reason:  This candidate is a reservation duplicate of CVE-2017-3212.  Notes: All CVE users should reference CVE-2017-3212 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Electronic Funds Source (EFS) Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Mobile Driver Source versión 2.5 de Electronic Funds Source (EFS) para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electronic_funds_source_llc:efs_mobile_driver_source:2.5:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "81164508-471B-477D-84FF-F0967E14DA09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Supermovil versiones 3.5 hasta 3.7 de Banco Santander México SA para iOS, no comprueba los certificados X.509 de servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banco_santander_mexico_sa:supermovil:3.5:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "12CC60E1-C7C8-4F56-9790-7A4F2F92C466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banco_santander_mexico_sa:supermovil:3.6:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "265BE712-A3C6-4A5F-B8AE-8A84CFB0CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banco_santander_mexico_sa:supermovil:3.7:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "DD932C4C-8B4E-4C6E-B22A-6217A20D1DB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación FOREX.com FOREXTrader para iPhone entre la versión 2.9.12 y la 2.9.14 para iOS, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forex:forextrader:2.9.12:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "09C7D9C6-76B4-42FE-B7AB-93C79CB0B31C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forex:forextrader:2.9.13:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "80620D47-8C9A-4F7F-BCFA-9C6DFB0D394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forex:forextrader:2.9.14:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "93682A7E-721D-49FC-A597-5B8E0051A207"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación TradeKing Forex Versión 1.2.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forex:tradeking_forex:1.2.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B3DD5145-E5AE-4FAF-A5ED-64ABD6D230AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Banque Zitouna de DOT IT versión 2.1 para iOS, no verifica los certificados X.509 de los servidores SSL, lo que permite a los atacantes del tipo man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotit-corp:banque_zitouna:2.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "263C8028-60EC-4DAD-A0A0-A24E0DF04604"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 (UAE) and 2.0.1 through 2.1.0 (KSA) for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Emirates NBD KSA versiones 3.10.0 hasta 3.10.4 (EAU) y versiones 2.0.1 hasta 2.1.0 (KSA) de Emirates NBD Bank P.J.S.C  para iOS, no comprueba los certificados X.509 de servidores SSL, que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd:3.10.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "6C000968-1D06-4855-A2E2-3AE05A41B25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd:3.10.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "4E769E56-C48B-4753-A9B1-7731DF8F7E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd:3.10.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "38329009-9B4A-4599-9E7A-82904300C583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd:3.10.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "BC46E6CA-DCF8-46FC-9C40-DB24A5965FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd:3.10.4:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E6C13E1C-AE6C-4634-BB64-76C605AB221B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd_ksa:2.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D8655E7D-49C0-47C8-9611-237FBDBB3EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd_ksa:2.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "72E64F97-C55F-44E5-A46E-1B2A9C9FB305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emirates_nbd_bank_p.j.s.c:emirates_nbd_ksa:2.1.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D7CF08A5-E592-4BFF-882D-389723ABE3C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The America's First Federal Credit Union (FCU) Mobile Banking app 3.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación para iOS de America's First Federal Credit Union (FCU) versión 3.1.0, no verifica los certificados X.509 de los servidores SSL, lo que permite a los atacantes que usen un ataque man-in-the-middle, falsificar servidores y obtener información sensible a través de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:america\\'s_first_federal_credit_union:america\\'s_first_fcu_mobile_banking:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "7D8EE96E-6B5D-48DE-8A09-0AF4BD4DF382"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:00.933",
      "lastModified" : "2023-11-07T02:49:47.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-3213.  Reason:  This candidate is a reservation duplicate of CVE-2017-3213.  Notes: All CVE users should reference CVE-2017-3213 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación BCR Movil del Banco de Costa Rica versión 3.7 para iOS, no comprueba los certificados X.509 de servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banco_de_costa_rica:bcr_movil:3.7:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "6FA2157B-5184-4B49-B6A5-0708647060CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación de 21st Century Insurance 10.0.0 para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite a los atacantes que usen un ataque man-in-the-middle, falsificar servidores y obtener información sensible a través de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:21st_century_insurance:21st_century_insurance:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "10.0.0",
            "matchCriteriaId" : "6B3D64D1-64D4-41EC-89D0-45B7C484E6F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call."
      }, {
        "lang" : "es",
        "value" : "La aceptación de certificados TLS no válidos/auto-firmados en Atlassian HipChat versiones anteriores de 3.16.2 para iOS permite a un atacante mediante ataque man-in-the-middle y/o que se encuentre físicamente cercano, interceptar de forma silenciosa la información enviada durante la llamada a la API de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:hipchat:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.16.1",
            "matchCriteriaId" : "2A0460B6-38DB-465E-B1AF-A6662FD02475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98318",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:01.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acceptance of invalid/self-signed TLS certificates in \"Foxit PDF - PDF reader, editor, form, signature\" before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept login information (username/password), in addition to the static authentication token if the user is already logged in."
      }, {
        "lang" : "es",
        "value" : "La aceptación de certificados TLS inválidos y autofirmados en \"Foxit PDF - PDF reader, editor, form, signature\" anterior a versión 5.4 para iOS, permite a un atacante tipo man-in-the-middle y/o físicamente cercano interceptar silenciosamente  información del inicio de sesión (nombre de usuario y contraseña), además del token de autenticación estática si el usuario ya ha iniciado sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_pdf:5.2.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "BDF35C87-2765-4921-82C2-3FE05193E1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_pdf:5.3.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "9E457088-8FD5-4FCC-B21A-BB71D53297AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acceptance of invalid/self-signed TLS certificates in \"Panda Mobile Security\" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call."
      }, {
        "lang" : "es",
        "value" : "La aceptación de certificados TLS no válidos/autofirmados en \"Panda Mobile Security\" 1.1 para iOS permite a un atacante mediante ataque man-in-the-middle y/o que se encuentre físicamente cercano, interceptar de forma silenciosa la información enviada durante la llamada a la API de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchguard:panda_mobile_security:1.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "5BE5F144-5C23-4A24-8A84-73240AAFBA5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98327",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T07:29:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "La función PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry en base/PdfXRefStreamParserObject.cpp:224 en PoDoFo versión 0.9.5 permite a atacantes remotos provocar una denegación de servicio (sobre-lectura del buffer de memoria dinámica) o posiblemente tener otro impacto no especificado a través de un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97220206-1753-49AE-840C-10B84047A0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861738",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T10:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ArrayOS en versiones anteriores a la AG 9.4.0.135 cuando la función portal bookmark se habilita permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xirrus:arrayos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C643C6-A974-4E70-986E-16AE8305D501"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/amaciasf/array/blob/master/ArrayOS_AG_9_4_0_135_Release_Note.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/amaciasf/array/blob/master/ArrayOS_AG_9_4_0_135_Release_Note.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T14:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image uploads."
      }, {
        "lang" : "es",
        "value" : "Atlassian Hipchat Server en versiones anteriores a la 2.2.4 permite a usuarios autenticados remotos con privilegios a nivel de usuario ejecutar código arbitrario mediante vectores que involucran la subida de imágenes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:hipchat_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "77D71BD3-B684-4414-BD68-D474C8EF08C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-24-894234898.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-2980",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-24-894234898.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-2980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. seos/1000/find.api allows Remote Code Execution with shell metacharacters in the method parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo en los dispositivos Accellion FTA en versiones anteriores a la FTA_9_12_180. seos/1000/find.api permite la ejecución remota de código en metacaracteres shell en el parámetro method."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9_12_180",
            "matchCriteriaId" : "C4E13026-E048-4018-B6C3-4D3019492C2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo en los dispositivos Accellion FTA en versiones anteriores a la FTA_9_12_180. courier/1000@/oauth/playground/callback.html permite Cross-Site Scripting (XSS) con un URI manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FTA anterior a versión FTA_9_12_180 de Accellion. Se presenta un problema de tipo XSS en el archivo courier/1000@/index.html con el parámetro auth_params. El dispositivo intenta utilizar filtros WAF internos para detener vulnerabilidades XSS específicas. Sin embargo, estos se pueden omitir mediante el uso de algunas modificaciones en las cargas útiles, por ejemplo, la codificación de URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a CRLF vulnerability in settings_global_text_edit.php allowing ?display=x%0Dnewline attacks."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a FTA_9_12_180. Hay una vulnerabilidad de CRLF en settings_global_text_edit.php permitiendo ataques ?display=x%0Dnewline."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. A report_error.php?year='payload SQL injection vector exists."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos FTA anteriores a FTA_9_12_180. Existe un vector de inyección SQL report_error.php?year='payload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter \"filter\" can be used for LDAP Injection."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a la versión FTA_9_12_180. El parámetro \"filter\" POST home/seos/courier/ldaptest.html puede utilizarse para inyección LDAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a home/seos/courier/login.html auth_params CRLF attack vector."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a la versión FTA_9_12_180. Existe un vector de ataque CRLF home/seos/courier/login.html auth_params ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/user_add.html with the param parameter."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a FTA_9_12_180. Existe un XSS home/seos/courier/user_add.html con el parámetro param."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a FTA_9_12_180. Al enviar una solicitud POST a home/seos/courier/web/wmProgressstat.html.php con un dominio atacante en el parámetro acallow, el dispositivo responderá con un encabezado Access-Control-Allow-Origin que permite al atacante tener acceso al sitio eludiendo la Same Origin Policy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local https URLs) lacks an initial ^ character, courier/web/1000@/wmProgressval.html allows SSRF attacks with a file:///etc/passwd#https:// URL pattern."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a FTA_9_12_180. Debido a una expresión regular (destinada a coincidir con las URL https locales) carece de un carácter ^ inicial, courier/web/1000@/wmProgressval.html, que permite ataques SSRF con un archivo: ///etc/passwd#https:// patrón de URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/smtpg_add.html with the param parameter."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a FTA_9_12_180. existe una vulnerabilidad de tipo XSS en home/seos/courier/smtpg_add.html con el parámetro param."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because mysql_real_escape_string is misused, seos/courier/communication_p2p.php allows SQL injection with the app_id parameter."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Accellion FTA anteriores a FTA_9_12_180. Debido a que mysql_real_escape_string es utilizado erróneamente, seos/courier/communication_p2p.php permite inyección SQL con el parámetro app_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_40",
            "matchCriteriaId" : "D99C5134-1070-4615-A3C2-ED5F24D98D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T18:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other iRODS users (potentially anonymous) to execute remote shell commands via iRODS virtual pathnames. To exploit this vulnerability, a virtual iRODS pathname that includes a semicolon would be retrieved via igetwild. Because igetwild is a Bash script, the part of the pathname following the semicolon would be executed in the user's shell."
      }, {
        "lang" : "es",
        "value" : "Una ejecución de entrada no confiable a través de igetwild en todas las versiones de iRODS anteriores a 4.1.11 y 4.2.1 permite a otros usuarios de iRODS (potencialmente anónimos) ejecutar comandos de shell remotos a través de rutas virtuales de iRODS. Para explotar esta vulnerabilidad, una ruta virtual de iRODS que incluye un punto y coma sería recuperada a través de igetwild. Debido a que igetwild es un Bash script, la parte del nombre de ruta que sigue al punto y coma sería ejecutada en el shell del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irods:irods:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.10",
            "matchCriteriaId" : "751FFDCB-E29E-4CB9-9056-73DE558B26BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irods:irods:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128CDF56-B194-4157-BDB5-DC2294853D62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/irods/irods/issues/3452",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/irods/irods/issues/3452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1156",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-05T19:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force. ID: 122592"
      }, {
        "lang" : "es",
        "value" : "WebSphere Portal de IBM versiones 8.5 y 9.0, podría permitir a un atacante remoto conducir ataques de phishing, utilizando un ataque de redireccionamiento abierto. Mediante la persuasión a una víctima para visitar un sitio Web especialmente diseñado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL que se muestra para redireccionar a un usuario a un sitio web malicioso que parece ser de confianza. Esto podría permitir al atacante obtener información altamente confidencial o conducir más ataques contra la víctima. IBM X-Force. ID: 122592."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97CDB5F-2EA4-41E8-857B-5D76004C60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC1C53-61B8-41EC-B99D-1100D29F3992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000153",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98340",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038390",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-05T19:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website."
      }, {
        "lang" : "es",
        "value" : "Trend Micro OfficeScan 11.0 antes de SP1 CP 6325 (cin Agent Module Build anterior a 6152) y XG anterior a CP 1352 están afectados por un XSS a traves de una URI utilizando un sitio bloqueado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB164BF-12B5-450F-9DDB-9A3FBD544F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.trendmicro.com/products/officescan/11.0_SP1/readme/osce-11-sp1-patch1-win-all-criticalpatch-6325_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117204-security-bulletin-trend-micro-officescan-11-xg-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://files.trendmicro.com/products/officescan/11.0_SP1/readme/osce-11-sp1-patch1-win-all-criticalpatch-6325_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117204-security-bulletin-trend-micro-officescan-11-xg-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6024",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de agotamiento de recursos en Rockwell Automation ControlLogix 5580 en los controladores V28.011, V28.012 y V28.013."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v28.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEA0815-1269-4B24-B7D5-5B5BE06B8E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v29.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771314D1-C8A2-4A9F-A4AB-24C767BB48DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD040ED-B44C-47D0-B4D4-729C378C4F68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489DD270-EBC9-4848-BE4C-4FB2D1786521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAFDB5D-4B06-47D4-96D6-BF24FEEA0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8BC8FB-B3E9-43CB-B8C6-807DCBC0204C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v29.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D073C02-AE97-4D14-9682-84B42D0FBDA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB883B-B863-4D57-B1C0-FC7B3EBD1EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98309",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6029",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Un problema de Cross-Site Scripting fue descubierto en atvise scada de Certec EDV GmbH versiones anteriores a 3.0. Esto puede permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:certec_edv_gmbh:atvise_scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.10",
            "matchCriteriaId" : "DA219674-D7DB-4A16-BF18-F23C1F7E1D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97479",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6031",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An \"improper neutralization of HTTP headers for scripting syntax\" issue has been identified, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Inyección de Encabezado en atvise scada anterior a versión 3.0 de Certec EDV GmbH. Se ha identificado un problema de \"improper neutralization of HTTP headers for scripting syntax\", que puede permitir la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-644"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:certec_edv_gmbh:atvise_scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.10",
            "matchCriteriaId" : "DA219674-D7DB-4A16-BF18-F23C1F7E1D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97479",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7909",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages."
      }, {
        "lang" : "es",
        "value" : "Un problema de uso de autenticación del lado del cliente se detectó en B+B SmartWorx MESR901 versiones de firmwares 1.5.2 y anteriores de Advantech. La interfaz web utiliza JavaScript para comprobar la autenticación de cliente y redireccionar a los usuarios no autorizados. Los atacantes pueden interceptar peticiones y omitir la autenticación para acceder a páginas web restringidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-603"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:advantech_b\\+b_smartworx:mesr901_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "6AB9FB4D-4FDB-40AB-A58C-6AD9DAACC686"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:advantech_b\\+b_smartworx:mesr901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC538C97-26F5-4DCE-BB28-20F1FD470FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98257",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-122-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-122-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7911",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de inyección de código en la versión 0.7.4 de CyberVision Kaa IoT Platform. Se ha identificado una vulnerabilidad de encapsulamiento insuficiente que podría permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-485"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybervision:kaa_iot_platform:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE40CE03-2C5F-4448-AFE3-DF6CB8344C07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98256",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-122-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-19",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/98256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-122-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7921",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de autenticación inapropiada en dispositivos DS-2CD2xx2F-I Series versiones V5.2.0 build 140721 hasta V5.4.0 build 160530, DS-2CD2xx0F-I Series versiones V5.2.0 build 140721 hasta V5.4.0 build 160530, DS-2CD2xx0F-I Series versiones V5.2.0 build 140721 hasta V5.4.0 build 160530, DS-2CD2xx0F-I Series versiones V5.2.0 build 140721 hasta V5.4.0 Build 160401, DS-2CD2xx2FWD Series versiones V5.3.1 build 150410 hasta V5.4.4 Build 161125, DS-2CD4x2xFWD Series versiones 5.2.0 build 140721 hasta V5.4.0 Build 160414, DS-2CD4xx5 Series versiones 5.2.0 build 140721 hasta V5.4.0 Build 160421, DS-2DFx Series versiones 5.2.0 build 140805 hasta V5.4.5 Build 160928 y Serie DS-2CD63xx versión 5.0.9 build 140305 hasta versión V5.3.5 Build 160106 de Hikvision. La vulnerabilidad de autenticación inapropiada ocurre cuando una aplicación no autentica adecuada o apropiadamente a los usuarios. Esto puede permitir a un usuario malicioso escalar sus privilegios en el sistema y conseguir acceso a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2032-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F14B55-3F24-4C2F-9CBD-8495F1640E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2112-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EFB5D7-C047-4B2F-A9F8-DDF2943A9355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2132-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAC7FBC-CB10-4A93-94E7-28770C95C0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2212-i5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCA1960-8910-474F-A030-8D16ABF983F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2232-i5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A0DE65-CFBA-4A93-BDFF-67EA07E18797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2312-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031D3A40-218C-4E40-BB08-55D59B299D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2332-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5030CE6D-C9FD-4B51-8FDC-D114E4A495FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2412f-i\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506744C5-C9C0-43E9-84E3-D028EBA4812E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2432f-i\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AAE72-240C-4C6C-9B64-8724BB14179E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2512f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F2930-FA07-4646-A566-50BF5772B56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2532f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A51D79A-F96A-4B94-A1E2-29C5269ACC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2612f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A05C12A-BD0E-426C-8C6B-BE8D79265C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2632f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2DCFAB-6786-46C6-BB96-94DCAC21DEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2712f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F59EBD-EED0-4AA6-A932-CE2A69A00F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2732f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A40C87A-D15E-43F8-B1A7-F8781FD7E648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2t32-i3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3156D3-49BD-48E8-A3D6-9755DC76424A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2t32-i5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367B2539-33D9-493C-881E-A87B308EE7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2t32-i8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEB0AB7-5508-4934-9689-B366C82A2555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012f-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971300D6-7689-4AEE-A5FA-41B4FC9DE661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012f-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682B9E12-DAE6-4E9C-B298-A089B3B06AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012f-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CF62B8-0F56-4FF1-9F2C-EF08B9486046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012fwd-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AAA544-EA97-4428-BBDF-F4EB3E7C06C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012fwd-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D5C288-D578-4C2D-9C81-05DCDF3128AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012fwd-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E472B6-C7BF-45C4-806E-DD792179B344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4024f-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7465C-A767-4C89-A503-D17A6D99594C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4024f-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D695E95-B05A-433A-8267-ED5E508E2611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4024f-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A566A5DD-3835-45EE-8B0D-23976F1A6ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4032fwd-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026E59E0-4EA1-4BEC-8256-29500202A45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4032fwd-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEAE9D6-F808-407D-A4ED-190D3EB76922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4032fwd-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89FB18C-0FCB-45C6-BD46-B49E05F84A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4112f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C06838-5D0D-4EA5-AF30-D416ED2CA72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4112fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF568306-8596-4C98-B802-A867135DE168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4124f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28421C3-3635-492B-93B0-EB2C7D2FE319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4132fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2922DD79-113F-4DBA-B66B-F301CD852AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D02A599-7269-4C8C-9B0B-EB031CEB3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD5B437-09AB-4185-BED1-418F24FA12BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8389E4-286F-44E8-B734-A56C61381B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212fwd-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495D790B-D5EC-47FE-9831-D9EC5FF0E370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212fwd-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC36C0A-F90F-4FCB-973C-A1522BA050BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0CACC7-C115-42C7-A6A5-87682EDD1F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4224f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878155AC-BA46-470C-81F9-8735683B0099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4224f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04CAE37-D7CA-47E0-83E6-1DA546A96A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4224f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59474C9-BD7E-4B6D-AECE-2E6AF0E1AAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4232fwd-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3ACA746-787F-4356-B3B0-6C994C862215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4232fwd-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28B3AFC-EEE1-4591-8AB4-3D702691CB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4232fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AB3880-355D-4E59-A3C1-907A0F1FB190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4312f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE31A803-0305-43DA-B14C-D32ECDA8C8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4312f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6588501E-A1EB-44CF-AB20-8B0041611F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4312f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30F5534-18CA-41B2-80D5-B4957652D7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4324f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED0E4DE-4365-47A5-B622-097E9B772273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4324f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1924B-EFE8-41B3-9BCC-D3EDA17DEBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4324f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A1866F-ED55-4F52-8495-E9DEAEDFB818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4332fwd-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED00F753-1F27-4242-BCA8-E9ECEB55ABA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4332fwd-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8153FD2-CB04-4B1D-99B5-E0FA95143651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4332fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6451D9-F339-469F-BDB7-6B6ED2B23B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd6412fwd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6A93A8-2433-4F8F-95AC-1C851373E8B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2032-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440EC1B2-A353-4198-ADAA-0D1900C66334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2112-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A3B528-F3FC-4509-B27C-6DFFB88E2812"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2132-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2474C609-FCEF-4552-8FFB-8E1134ABBE05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2212-i5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A26C5-46EF-471D-9E6B-08B567FA418D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2232-i5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479518FE-D18C-4E0E-8FBF-3C16EA9C09EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2312-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54096AF6-18EE-4E6D-AC4A-EAAC9DA0CFBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2332-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19E6984-C1F2-4852-AA9C-83B8D51E8377"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2412f-i\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FEC246-85D6-42D0-98CD-894ACB716DA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2432f-i\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EFA20F-20D5-4397-AB57-3CF8D47C9DE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2512f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1977B7E0-2770-45E8-9DB9-92DDD562F9E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2532f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1748AC1-D576-481E-A1C1-6CC1B66CC662"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2612f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B63F4F-A734-419C-B463-037307C7D0B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2632f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9400E06-3563-49B9-A842-21849B4575B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2712f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14B25FD-DE45-4D2F-94FF-36440B590730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2732f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91752D15-CE11-4AB9-A277-3994C2392A9E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2t32-i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D47AE1D-7857-404A-B5E5-E630C5C5FB19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2t32-i5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DBD6D3-0CC7-45AB-80EC-04A81F1D867D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2t32-i8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE3401A-62EC-4FE5-B572-86BAC673E6FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012f-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3ED1E98-001D-4094-9EDE-8EC63F48AC03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012f-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721FD35-5D0A-4B13-92E3-F1865809EB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012f-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FEE9A8-5F9F-4B77-9CFF-264C8120397D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012fwd-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8163EE38-3951-4372-AF98-9B1ECFD75F6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012fwd-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37A894E-8797-4233-B5E3-B69544081995"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012fwd-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB077885-F3F0-4374-8CBD-518465281E72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4024f-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44BC3CE-B84A-4677-93A2-FAF1243F7B4A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4024f-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A50BB0F-EBE6-4059-B281-21FB6AE895CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4024f-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CADD4-D0F1-46B6-9872-0FBC30AB583B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4032fwd-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315803F3-D65C-43FA-BD9C-F542CF595BE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4032fwd-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFAE869-B4A3-4649-B7C1-270F3DDA7541"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4032fwd-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682A97CE-52A7-4828-8712-1C553A3643CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4112f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF50EB52-8C52-460C-B910-3B01C59B5A44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4112fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8190727-5AD8-4698-98DC-8FD8CD6A3F5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4124f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B565D09-2E78-49A9-BD20-0C14E9AF992A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4132fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C3BDBE-8E7D-4340-8079-19CDF52BF4A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751E7398-4A35-400F-B796-3AECE33C33F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54C780D-A2A5-4B12-81B3-C2ACA8F04765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "227D1047-CA29-4A1D-9DC3-9F2711A07665"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212fwd-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07ED71B-6878-4411-BB0F-75A55BE9CDA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212fwd-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A51D501-8703-4091-968D-397AC6042172"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7DE24C-1AB2-4B8A-A123-98F9B16470F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4224f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD6E358-832E-4D6E-A7FF-2E2402FB8042"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4224f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FCB7FD-F5F7-430A-8EEC-796A09ABAF1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4224f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376A793E-B715-40DB-A452-B8A7665C852C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4232fwd-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA73C7D-A6CE-4899-BF22-EE8A01124E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4232fwd-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59BFCC5-2248-496D-BEF3-5BBF06298C56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4232fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1F8F-2E03-49D2-97B2-C9802D227458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4312f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6EA131-5852-4FBD-BDDB-777CA21C4E66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4312f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB8C4E7-5FEB-4234-975B-F40C068EAC1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4312f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F90C69B-E195-4A94-B596-46B7B0DB7A25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4324f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7663F94-4C81-45DA-A560-9DE21A23462C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4324f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F51E2E-B441-49CB-86E1-C009C5E5353E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4324f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39824D3-EFD5-49A8-8B3C-3130F83513FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4332fwd-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7453F60-107B-4244-A14E-F85F05E483EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4332fwd-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A359284-1983-4311-B5BC-EC7FA51F842C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4332fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69936A56-CE23-4C9C-A4E7-AF27BD2ED2FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd6412fwd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631E8D1-3080-4E5F-9199-03224E01D6CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2dfx_series_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D40D18-52D0-4227-9510-8CB90AE922CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2dfx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC3C1BE-7E94-46C1-9338-96E1F0129121"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd63xx_series_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422A46B-C773-4483-9446-5253C44C4AAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd63xx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C00A09-4C10-47E8-BD18-592C454EB8DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hikvision.com/us/about_10805.html",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98313",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ghostbin.com/paste/q2vq2",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.hikvision.com/us/about_10805.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ghostbin.com/paste/q2vq2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7923",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Contraseña en el Archivo de Configuración en dispositivos DS-2CD2xx2F-I Series versiones V5.2.0 build 140721 hasta V5.4.0 build 160530, DS-2CD2xx0F-I Series versiones V5.2.0 build 140721 hasta 5.4.0 Build 160401, Serie DS-2CD2xx2FWD versiones V5.3.1 build 150410 hasta 5.4.4 Build 161125, Serie DS-2CD4x2xFWD versiones 5.2.0 build 140721 hasta 5.4.0 Build 160414, Serie DS-2CD4xx5 versiones 5.2.0 build 140721 hasta 5.4.0 Build 160421, Serie DS-2DFx versiones 5.2.0 build 140805 hasta versión 5.4.5 Build 160928 y Serie DS-2CD63xx versiones 5.0.9 build 140305 hasta 5.3.5 Build 160106 de Hikvision. La vulnerabilidad de contraseña en el archivo de configuración podría permitir a un usuario malicioso escalar privilegios o asumir la identidad de otro usuario y acceder a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-260"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2032-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F14B55-3F24-4C2F-9CBD-8495F1640E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2112-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EFB5D7-C047-4B2F-A9F8-DDF2943A9355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2132-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAC7FBC-CB10-4A93-94E7-28770C95C0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2212-i5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCA1960-8910-474F-A030-8D16ABF983F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2232-i5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A0DE65-CFBA-4A93-BDFF-67EA07E18797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2312-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031D3A40-218C-4E40-BB08-55D59B299D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2332-i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5030CE6D-C9FD-4B51-8FDC-D114E4A495FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2412f-i\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506744C5-C9C0-43E9-84E3-D028EBA4812E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2432f-i\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AAE72-240C-4C6C-9B64-8724BB14179E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2512f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F2930-FA07-4646-A566-50BF5772B56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2532f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A51D79A-F96A-4B94-A1E2-29C5269ACC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2612f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A05C12A-BD0E-426C-8C6B-BE8D79265C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2632f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2DCFAB-6786-46C6-BB96-94DCAC21DEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2712f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F59EBD-EED0-4AA6-A932-CE2A69A00F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2732f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A40C87A-D15E-43F8-B1A7-F8781FD7E648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2t32-i3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3156D3-49BD-48E8-A3D6-9755DC76424A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2t32-i5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367B2539-33D9-493C-881E-A87B308EE7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2t32-i8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEB0AB7-5508-4934-9689-B366C82A2555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012f-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971300D6-7689-4AEE-A5FA-41B4FC9DE661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012f-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682B9E12-DAE6-4E9C-B298-A089B3B06AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012f-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CF62B8-0F56-4FF1-9F2C-EF08B9486046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012fwd-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AAA544-EA97-4428-BBDF-F4EB3E7C06C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012fwd-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D5C288-D578-4C2D-9C81-05DCDF3128AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4012fwd-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E472B6-C7BF-45C4-806E-DD792179B344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4024f-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7465C-A767-4C89-A503-D17A6D99594C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4024f-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D695E95-B05A-433A-8267-ED5E508E2611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4024f-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A566A5DD-3835-45EE-8B0D-23976F1A6ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4032fwd-\\(a\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026E59E0-4EA1-4BEC-8256-29500202A45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4032fwd-\\(p\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEAE9D6-F808-407D-A4ED-190D3EB76922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4032fwd-\\(w\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89FB18C-0FCB-45C6-BD46-B49E05F84A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4112f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C06838-5D0D-4EA5-AF30-D416ED2CA72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4112fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF568306-8596-4C98-B802-A867135DE168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4124f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28421C3-3635-492B-93B0-EB2C7D2FE319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4132fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2922DD79-113F-4DBA-B66B-F301CD852AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D02A599-7269-4C8C-9B0B-EB031CEB3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD5B437-09AB-4185-BED1-418F24FA12BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8389E4-286F-44E8-B734-A56C61381B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212fwd-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495D790B-D5EC-47FE-9831-D9EC5FF0E370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212fwd-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC36C0A-F90F-4FCB-973C-A1522BA050BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4212fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0CACC7-C115-42C7-A6A5-87682EDD1F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4224f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878155AC-BA46-470C-81F9-8735683B0099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4224f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04CAE37-D7CA-47E0-83E6-1DA546A96A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4224f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59474C9-BD7E-4B6D-AECE-2E6AF0E1AAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4232fwd-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3ACA746-787F-4356-B3B0-6C994C862215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4232fwd-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28B3AFC-EEE1-4591-8AB4-3D702691CB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4232fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AB3880-355D-4E59-A3C1-907A0F1FB190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4312f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE31A803-0305-43DA-B14C-D32ECDA8C8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4312f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6588501E-A1EB-44CF-AB20-8B0041611F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4312f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30F5534-18CA-41B2-80D5-B4957652D7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4324f-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED0E4DE-4365-47A5-B622-097E9B772273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4324f-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1924B-EFE8-41B3-9BCC-D3EDA17DEBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4324f-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A1866F-ED55-4F52-8495-E9DEAEDFB818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4332fwd-i\\(h\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED00F753-1F27-4242-BCA8-E9ECEB55ABA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4332fwd-i\\(s\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8153FD2-CB04-4B1D-99B5-E0FA95143651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd4332fwd-i\\(z\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6451D9-F339-469F-BDB7-6B6ED2B23B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd6412fwd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6A93A8-2433-4F8F-95AC-1C851373E8B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2032-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440EC1B2-A353-4198-ADAA-0D1900C66334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2112-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A3B528-F3FC-4509-B27C-6DFFB88E2812"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2132-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2474C609-FCEF-4552-8FFB-8E1134ABBE05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2212-i5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A26C5-46EF-471D-9E6B-08B567FA418D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2232-i5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479518FE-D18C-4E0E-8FBF-3C16EA9C09EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2312-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54096AF6-18EE-4E6D-AC4A-EAAC9DA0CFBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2332-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19E6984-C1F2-4852-AA9C-83B8D51E8377"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2412f-i\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FEC246-85D6-42D0-98CD-894ACB716DA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2432f-i\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EFA20F-20D5-4397-AB57-3CF8D47C9DE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2512f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1977B7E0-2770-45E8-9DB9-92DDD562F9E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2532f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1748AC1-D576-481E-A1C1-6CC1B66CC662"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2612f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B63F4F-A734-419C-B463-037307C7D0B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2632f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9400E06-3563-49B9-A842-21849B4575B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2712f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14B25FD-DE45-4D2F-94FF-36440B590730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2732f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91752D15-CE11-4AB9-A277-3994C2392A9E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2t32-i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D47AE1D-7857-404A-B5E5-E630C5C5FB19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2t32-i5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DBD6D3-0CC7-45AB-80EC-04A81F1D867D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2t32-i8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE3401A-62EC-4FE5-B572-86BAC673E6FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012f-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3ED1E98-001D-4094-9EDE-8EC63F48AC03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012f-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721FD35-5D0A-4B13-92E3-F1865809EB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012f-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FEE9A8-5F9F-4B77-9CFF-264C8120397D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012fwd-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8163EE38-3951-4372-AF98-9B1ECFD75F6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012fwd-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37A894E-8797-4233-B5E3-B69544081995"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4012fwd-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB077885-F3F0-4374-8CBD-518465281E72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4024f-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44BC3CE-B84A-4677-93A2-FAF1243F7B4A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4024f-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A50BB0F-EBE6-4059-B281-21FB6AE895CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4024f-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CADD4-D0F1-46B6-9872-0FBC30AB583B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4032fwd-\\(a\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315803F3-D65C-43FA-BD9C-F542CF595BE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4032fwd-\\(p\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFAE869-B4A3-4649-B7C1-270F3DDA7541"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4032fwd-\\(w\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682A97CE-52A7-4828-8712-1C553A3643CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4112f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF50EB52-8C52-460C-B910-3B01C59B5A44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4112fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8190727-5AD8-4698-98DC-8FD8CD6A3F5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4124f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B565D09-2E78-49A9-BD20-0C14E9AF992A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4132fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C3BDBE-8E7D-4340-8079-19CDF52BF4A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751E7398-4A35-400F-B796-3AECE33C33F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54C780D-A2A5-4B12-81B3-C2ACA8F04765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "227D1047-CA29-4A1D-9DC3-9F2711A07665"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212fwd-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07ED71B-6878-4411-BB0F-75A55BE9CDA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212fwd-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A51D501-8703-4091-968D-397AC6042172"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4212fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7DE24C-1AB2-4B8A-A123-98F9B16470F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4224f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD6E358-832E-4D6E-A7FF-2E2402FB8042"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4224f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FCB7FD-F5F7-430A-8EEC-796A09ABAF1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4224f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376A793E-B715-40DB-A452-B8A7665C852C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4232fwd-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA73C7D-A6CE-4899-BF22-EE8A01124E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4232fwd-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59BFCC5-2248-496D-BEF3-5BBF06298C56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4232fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1F8F-2E03-49D2-97B2-C9802D227458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4312f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6EA131-5852-4FBD-BDDB-777CA21C4E66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4312f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB8C4E7-5FEB-4234-975B-F40C068EAC1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4312f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F90C69B-E195-4A94-B596-46B7B0DB7A25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4324f-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7663F94-4C81-45DA-A560-9DE21A23462C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4324f-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F51E2E-B441-49CB-86E1-C009C5E5353E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4324f-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39824D3-EFD5-49A8-8B3C-3130F83513FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4332fwd-i\\(h\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7453F60-107B-4244-A14E-F85F05E483EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4332fwd-i\\(s\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A359284-1983-4311-B5BC-EC7FA51F842C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd4332fwd-i\\(z\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69936A56-CE23-4C9C-A4E7-AF27BD2ED2FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd6412fwd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631E8D1-3080-4E5F-9199-03224E01D6CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2dfx_series_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D40D18-52D0-4227-9510-8CB90AE922CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2dfx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC3C1BE-7E94-46C1-9338-96E1F0129121"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd63xx_series_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422A46B-C773-4483-9446-5253C44C4AAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd63xx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C00A09-4C10-47E8-BD18-592C454EB8DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hikvision.com/us/about_10807.html",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98313",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ghostbin.com/paste/q2vq2",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.hikvision.com/us/about_10807.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ghostbin.com/paste/q2vq2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7925",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Contraseña en el Archivo de Configuración en cámaras DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3 y DHI-HCVR58A32S-S2, de Dahua . Se identificó una vulnerabilidad de contraseña en el archivo de configuración, lo que podría conllevar a un usuario malicioso a asumir la identidad de un usuario con privilegios y conseguir acceso a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-260"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdbw23a0rn-zs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0424BCE7-4A55-4D30-97CB-37AFCDD5688D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdbw23a0rn-zs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726BD6A-A7FA-45AC-867B-6BD0EC59A3A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdbw13a0sn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC38F14-5327-4B0B-B1C6-9E4209CD6B1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdbw13a0sn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702164AC-DF8D-4929-AB36-9B57F26FFAA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CCBCC8-CFCC-4A58-A696-34CADA02CD54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E0A454-1155-4AEE-AC50-D786D1381248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD0D587-30A2-4EAA-8A54-13D59A7521B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D5FE44-6E68-4EFE-A5EA-41CB6F89260F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E4FEB2-C460-478D-B716-7DD28B2237DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D258A3-BE73-4F6C-8056-06D728466D37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hfw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73CD7AB-3473-4F31-A16A-B2ACC1E5115A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hfw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D8AD60-2A49-4A41-A450-8E605DCAB937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hfw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C9A4E4-8637-4B38-81FC-2A9B5BB694FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hfw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF98B8DF-C3FA-4AC4-94B0-F25F2259EE77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hfw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E439A7FB-1880-449A-8163-354B1919F5F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hfw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CB4C66-9F55-42FE-A7CC-6B07D190BD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-sd6cxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E29C82-D1B0-49BA-8BF3-BEFA1F1CE565"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-sd6cxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4835E073-E3BE-4400-964F-DCAD78CCBF57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-nvr1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C5DE2D-C012-4654-9D52-C2221CA0B1A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-nvr1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA0D45E-E01F-469F-A50C-49497AD060C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-hcvr4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D801AC9C-5EB2-415F-915F-1633E0679F40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ddh-hcvr4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30960189-9488-4047-A5EA-427C54E462FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-hcvr5xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC32657-CFB0-4500-858C-7A32E59C555F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-hcvr5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89DF4CA-78CA-404E-8B8D-042CAC45C0C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dhi-hcvr51a04he-s3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAA72C3-5743-48EE-9CB1-0D4E9BAF1722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr51a04he-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF321A00-A2B6-4D5F-99D7-C654B3247F81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dhi-hcvr51a08he-s3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C059F7B-6951-44FE-B970-C629556FB114"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr51a08he-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A37D238-2574-4277-8135-06D5C46D4517"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dhi-hcvr58a32s-s2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B958A3-8CA0-44F9-ACA6-941513AEA6AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr58a32s-s2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0AB530-EDF8-4711-BE0F-A61D4FC19212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98312",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7927",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password."
      }, {
        "lang" : "es",
        "value" : "Un problema de Uso del Hash de Contraseña en Lugar de Contraseña para Autenticación se detectó en cámaras DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3 y DHI-HCVR58A32S-S2, de Dahua. Se identificó el uso de hash de contraseña en lugar de la contraseña para la vulnerabilidad de autenticación, lo que podría permitir a un usuario malicioso omitir la autenticación sin obtener la contraseña actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-836"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdbw23a0rn-zs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0424BCE7-4A55-4D30-97CB-37AFCDD5688D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdbw23a0rn-zs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726BD6A-A7FA-45AC-867B-6BD0EC59A3A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdbw13a0sn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC38F14-5327-4B0B-B1C6-9E4209CD6B1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdbw13a0sn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702164AC-DF8D-4929-AB36-9B57F26FFAA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CCBCC8-CFCC-4A58-A696-34CADA02CD54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E0A454-1155-4AEE-AC50-D786D1381248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD0D587-30A2-4EAA-8A54-13D59A7521B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D5FE44-6E68-4EFE-A5EA-41CB6F89260F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hdw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E4FEB2-C460-478D-B716-7DD28B2237DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hdw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D258A3-BE73-4F6C-8056-06D728466D37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hfw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73CD7AB-3473-4F31-A16A-B2ACC1E5115A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hfw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D8AD60-2A49-4A41-A450-8E605DCAB937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hfw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C9A4E4-8637-4B38-81FC-2A9B5BB694FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hfw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF98B8DF-C3FA-4AC4-94B0-F25F2259EE77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-ipc-hfw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E439A7FB-1880-449A-8163-354B1919F5F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-ipc-hfw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CB4C66-9F55-42FE-A7CC-6B07D190BD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-sd6cxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E29C82-D1B0-49BA-8BF3-BEFA1F1CE565"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-sd6cxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4835E073-E3BE-4400-964F-DCAD78CCBF57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-nvr1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C5DE2D-C012-4654-9D52-C2221CA0B1A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-nvr1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA0D45E-E01F-469F-A50C-49497AD060C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-hcvr4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D801AC9C-5EB2-415F-915F-1633E0679F40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ddh-hcvr4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30960189-9488-4047-A5EA-427C54E462FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-hcvr5xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC32657-CFB0-4500-858C-7A32E59C555F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-hcvr5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89DF4CA-78CA-404E-8B8D-042CAC45C0C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dhi-hcvr51a04he-s3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAA72C3-5743-48EE-9CB1-0D4E9BAF1722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr51a04he-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF321A00-A2B6-4D5F-99D7-C654B3247F81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dhi-hcvr51a08he-s3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C059F7B-6951-44FE-B970-C629556FB114"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr51a08he-s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A37D238-2574-4277-8135-06D5C46D4517"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dhi-hcvr58a32s-s2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B958A3-8CA0-44F9-ACA6-941513AEA6AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dhi-hcvr58a32s-s2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0AB530-EDF8-4711-BE0F-A61D4FC19212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98312",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7929",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-06T00:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files or directories."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Salto de Ruta (Path) Absoluto en WebAccess Versión 8.1 y anteriores. Se ha identificado la vulnerabilidad de salto de ruta (path) absoluta, que puede permitir a un atacante atravesar el sistema de archivos para acceder a archivos o directorios restringidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "715345BC-B19A-4605-AB4E-C26AB4F4D65C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98311",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-06T00:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system installation, which allows local users to obtain sensitive information by reading this file after operating system installation."
      }, {
        "lang" : "es",
        "value" : "El componente de Administración de Instalación del Sistema Operativo en CA Client Automation versiones r12.9, r14.0 y r14.0 SP1, coloca una contraseña cifrada en un archivo local legible durante la instalación del sistema operativo, lo que permite a usuarios locales obtener información confidencial por la lectura de este archivo después de la instalación del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:client_automation:r12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5FAE9D-2ECB-41A0-8044-BD4B6A049941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:client_automation:r14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822846C6-B04D-430B-B831-321E0A854771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:client_automation:r14.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "81A0389B-F9B6-4A12-9D22-20FC662E5492"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98344",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170504-01-security-notice-for-ca-client-automation-os-installation-mgmt.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170504-01-security-notice-for-ca-client-automation-os-installation-mgmt.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-07T17:29:00.173",
      "lastModified" : "2023-11-07T02:50:27.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7263.  Reason: This candidate is a reservation duplicate of CVE-2017-7263.  Notes: All CVE users should reference CVE-2017-7263 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-07T18:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** Las funciones xdr_bytes y xdr_string en la librería GNU C (conocida como glibc o libc6) 2.25 no maneja adecuadamente los fallos de deserialización de buffer, lo que permite a atacantes remotos causar una denegación de servicio a través de paquetes UDP manipulados en el puerto 111, un problema relacionado con CVE-2017-8779. NOTA: [Información suministrada por el usuario y referencias]"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AD162E-4C9C-48A5-B2BF-9C0B4BDD5822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/05/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98339",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2017/q2/228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21461",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00128.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2017/q2/228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-07T20:29:00.200",
      "lastModified" : "2023-11-07T02:37:53.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-5938.  Reason: This candidate is a reservation duplicate of CVE-2017-5938.  Notes: All CVE users should reference CVE-2017-5938 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-07T20:29:00.230",
      "lastModified" : "2023-11-07T02:37:53.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7853.  Reason: This candidate is a reservation duplicate of CVE-2017-7853.  Notes: All CVE users should reference CVE-2017-7853 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-07T20:29:00.263",
      "lastModified" : "2023-11-07T02:37:53.503",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7271.  Reason: This candidate is a reservation duplicate of CVE-2017-7271.  Notes: All CVE users should reference CVE-2017-7271 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T06:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests."
      }, {
        "lang" : "es",
        "value" : "forgotpassword.php en GeniXCMS 1.0.2 no tiene un limite de intentos, lo que podría permitir a un atacante causar una denegación de servicio o realizar ataques de reseteo de contraseñas a través de una serie de peticiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A8E0CB-C324-4898-8248-572AABB98B28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/75",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T06:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source package with a crafted YAML file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de deserialización en lintian hasta 2.5.50.3 permite a un atacante realizar una ejecución de código solicitando un paquete de fuentes con un archivo YAML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:lintian:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.50.3",
            "matchCriteriaId" : "8CC56662-8689-4252-B225-CDD7DE093D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/861958",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/861958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T06:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-6, la función ReadBMPImage en bmp.c:1379 permite a los atacantes causar una denegación de servicio (pérdida de memoria) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/467",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T06:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a \"double fetch\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "La función saa7164_bus_get en el archivo drivers/media/pci/saa7164/saa7164-bus.c en el kernel de Linux hasta versión 4.11.5, permite a los usuarios locales causar una denegación de servicio (acceso de matriz fuera de límites) o posiblemente tener otro impacto no especificado por el cambio de un  valor predeterminado de número de secuencia, también se conoce como una vulnerabilidad de \"double fetch\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.5",
            "matchCriteriaId" : "16B5D5A3-9169-4BA1-8193-51B6C8E04851"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540770/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99619",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=195559",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/stoth68000/media-tree/commit/354dd3924a2e43806774953de536257548b5002c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540770/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=195559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/stoth68000/media-tree/commit/354dd3924a2e43806774953de536257548b5002c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T06:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Allen Disk 1.6 has XSS in the id parameter to downfile.php."
      }, {
        "lang" : "es",
        "value" : "Allen Disk 1.6 tiene un XSS en el parámetro id de downfile.php"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58574971-6FAE-43CC-871E-13F36772BD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3131212/allendisk/commit/37b6a63b85d5ab3ed81141cadc47489d7571664b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/commit/37b6a63b85d5ab3ed81141cadc47489d7571664b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T06:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of \"Download latest in-development version from github.\""
      }, {
        "lang" : "es",
        "value" : "Zen Cart 1.6.0 tiene una vulnerabilidad de tipo XSS en el parámetro main_page a index.php. NOTA: 1.6.0 no es una versión oficial, pero el archivo README.md del proveedor ofrece un enlace a v160.zip con una descripción de \"Descargar la última versión en desarrollo de github\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A476EF-01B0-4A75-BAFE-944B37B48F9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zencart/zencart/issues/1431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zencart/zencart/issues/1431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T14:29:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función bufRead::get() en libzpaq/libzpaq.h en liblrzip.so del software lrzip 0.631 permite a los atacantes remotos causar una denegación de servicio (error de división por cero y caída de la aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-divide-by-zero-in-bufreadget-libzpaq-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/66",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-divide-by-zero-in-bufreadget-libzpaq-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T14:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función join_pthread en stream.c en liblrzip.so de lrzip 0.631 permite que atacantes remotos causen una denegación de servicio (desreferencia de puntero NULL y caída de aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-null-pointer-dereference-in-join_pthread-stream-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/69",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-null-pointer-dereference-in-join_pthread-stream-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T14:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función read_1g en stream.c en liblrzip.so de lrzip 0.631 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer basado en montículo y caída de aplicación) u otro impacto no especificado a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-heap-based-buffer-overflow-write-in-read_1g-stream-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/70",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-heap-based-buffer-overflow-write-in-read_1g-stream-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función lzo1x_decompress en lzo1x_d.ch en LZO 2.08, utilizada en lrzip 0.631, permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-invalid-memory-read-in-lzo_decompress_buf-stream-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/68",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-invalid-memory-read-in-lzo_decompress_buf-stream-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T14:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función read_stream en stream.c en liblrzip.so en lrzip 0.631 permite a los atacantes remotos provocar una denegación de servicio (uso posterior al fallo de la aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-use-after-free-in-read_stream-stream-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-use-after-free-in-read_stream-stream-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T14:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive."
      }, {
        "lang" : "es",
        "value" : "La función bufRead::get() en libzpaq/libzpaq.h en liblrzip.so en lrzip 0.631 permite a atacantes remotos provocar una denegación de servicio (desreferencia de puntero NULL y caída de la aplicación) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-null-pointer-dereference-in-bufreadget-libzpaq-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/07/lrzip-null-pointer-dereference-in-bufreadget-libzpaq-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T16:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desreferencia nula en el componente MIME de LibEtPan en versiones anteriores a la 1.8, como las utilizadas en MailCore y MailCore 2. Puede ocurrir un fallo en low-level/imf/mailimf.c durante una análisis fallido de una cabecera Cc que contiene múltiples direcciones de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libetpan_project:libetpan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "D7D0B05F-8691-4D8A-97C7-BF3246B5D749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dinhviethoa/libetpan/commit/1fe8fbc032ccda1db9af66d93016b49c16c1f22d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dinhviethoa/libetpan/issues/274",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dinhviethoa/libetpan/releases/tag/1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dinhviethoa/libetpan/commit/1fe8fbc032ccda1db9af66d93016b49c16c1f22d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dinhviethoa/libetpan/issues/274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dinhviethoa/libetpan/releases/tag/1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6051",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-08T17:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Un problema de Elemento de Ruta (path) de Búsqueda no Controlada se detectó en VisualView HMI versión 9.9.14.0 y anteriores de BLF-Tech LLC. Se ha identificado la vulnerabilidad de elemento de ruta (path) de búsqueda no controlada, lo que puede permitir a un atacante ejecutar un archivo DLL malicioso dentro de la ruta de (path) búsqueda, resultando en una ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blftech:visualview_hmi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.9.14.0",
            "matchCriteriaId" : "E5BF7806-1756-44BF-8A4A-D3EA97017679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98031",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T17:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long \"Register a new card\" input fields. There may be a risk of local code execution with untrusted input to SmartDiag.exe or SymDiag.exe."
      }, {
        "lang" : "es",
        "value" : "SmartDiag Diagnosis Tool versión 2.5 de Gemalto, presenta un Desbordamiento de Búfer en la región stack de la memoria con Sobreescritura SEH por medio de campos de entrada \"Register a new card\"  largos. Puede haber un riesgo de ejecución de código local con entrada no confiable para los archivos SmartDiag.exe o SymDiag.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:smartdiag_diagnosis_tool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "3D272638-A35C-4787-BA78-096C64DE6C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41972/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41972/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T17:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password."
      }, {
        "lang" : "es",
        "value" : "Allen Disk 1.6 tiene un CSRF en setpass.php con impacto en el cambio de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58574971-6FAE-43CC-871E-13F36772BD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3131212/allendisk/issues/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/issues/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0890",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-05-08T20:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server anterior a 11.0.3 es vulnerable a un escape inadecuado lo que produce una vulnerabilidad XSS en el módulo de búsqueda. Para ser explotable un usuario tiene que escribir o pegar contenido malicioso en el diálogo de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.3",
            "matchCriteriaId" : "A0E61C00-FED3-48F0-BE50-A3F778590049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/213227",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-007",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/213227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0891",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-05-08T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server anterior a 9.0.58 a 10.0.5 y a 11.0.3 son vulnerables a un escape inadecuado de mensajes de error que conducen a vulnerabilidades XSS en múltiples componentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.58",
            "matchCriteriaId" : "82F188D7-E7F0-4B6D-8D84-DA426C5F9396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.5",
            "matchCriteriaId" : "1DE9CFD6-C515-41E6-8D84-6DA535597B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.3",
            "matchCriteriaId" : "9EC05192-AF3E-49D8-9356-3BA952A207DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/216812",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-008",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/216812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0892",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-05-08T20:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server anterior a 11.0.3 es vulnerable a una manipulación incorrecta de la sesión, lo que permite especificar una contraseña a la aplicación sin permiso de acceso a ficheros o al fichero de usuarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.3",
            "matchCriteriaId" : "A0E61C00-FED3-48F0-BE50-A3F778590049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/191979",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-009",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/191979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0893",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-05-08T20:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which suffered from a XSS vulnerability caused by a behaviour change in Safari 10.1 and 10.2. Note that Nextcloud employs a strict Content-Security-Policy preventing exploitation of this XSS issue on modern web browsers."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server anterior a 9.0.58, a 10.0.5, y a 11.0.3 utiliza una biblioteca de JavaScript vulnerable para desinfectar la entrada de usuario no confiable que sufrió una vulnerabilidad XSS causada por un cambio de comportamiento en Safari 10.1 y 10.2. Tenga en cuenta que Nextcloud emplea una estricta política de seguridad de contenido que impide la explotación de este problema XSS en los navegadores web modernos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.58",
            "matchCriteriaId" : "82F188D7-E7F0-4B6D-8D84-DA426C5F9396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.5",
            "matchCriteriaId" : "1DE9CFD6-C515-41E6-8D84-6DA535597B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.3",
            "matchCriteriaId" : "9EC05192-AF3E-49D8-9356-3BA952A207DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/222838",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-010",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/222838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0894",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-05-08T20:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server anterior a 11.0.3 es vulnerable a una divulgación de tokens de acciones válidos para los calendarios públicos debido a un error lógico. Por lo tanto, esto permite a un potencial atacante el acceso a calendarios compartidos públicamente sin conocer el token compartido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.3",
            "matchCriteriaId" : "A0E61C00-FED3-48F0-BE50-A3F778590049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/218876",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-011",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/218876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0895",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-05-08T20:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server anterior a 10.0.4 y 11.0.2 son vulnerables a la divulgación de los nombres de calendario y de libreta de direcciones a otros usuarios registrados. Tenga en cuenta que no se ha revelado ningún contenido real del calendario y de la libreta de direcciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.4",
            "matchCriteriaId" : "A7CD0831-E502-4F11-B8C0-BDED9E9C5970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "9B2C6A9E-0988-4C9E-BCDD-087BC03C561F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/203594",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-012",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/203594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2017-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4982",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-05-08T21:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "Mainframe Enablers ResourcePak Base versiones 7.6.0, 8.0.0 y 8.1.0 de EMC, contiene una corrección para una vulnerabilidad de administración de privilegios que potencialmente podrían ser explotadas por usuarios maliciosos para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:mainframe_enablers_resourcepak_base:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69A4016-FDAA-453B-BE64-72C4174F1D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:mainframe_enablers_resourcepak_base:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7733557-9911-461F-95FA-18494DE27303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:mainframe_enablers_resourcepak_base:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F9649D-9D4F-4883-B95B-67CD387EA509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540531/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98049",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/cve/CVE-2017-4982",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540531/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-08T21:29:00.193",
      "lastModified" : "2023-11-07T02:50:27.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-5526.  Reason: This candidate is a reservation duplicate of CVE-2017-5526.  Notes: All CVE users should reference CVE-2017-5526 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0290",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-09T06:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El motor de protección de malware de Microsoft que se ejecuta en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 , y Windows Server 2016 no analiza correctamente un archivo especialmente diseñado que provoca daños en la memoria, también conocido como \"Vulnerabilidad de ejecución remota de código de Microsoft Malware Protection Engine\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F1182-AC87-4A8E-841D-25C94DD7116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13701.0",
            "matchCriteriaId" : "091594BF-2DDF-410D-BBF5-DCA72229B941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "AB506484-7F0C-46BF-8EA6-4FB5AF454CED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98330",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038419",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038420",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1252",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://technet.microsoft.com/library/security/4022344",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/natashenka/status/861748397409058816",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41975/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://technet.microsoft.com/library/security/4022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/natashenka/status/861748397409058816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41975/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0302",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-05-09T15:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP APM versiones 12.0.0 hasta la 12.1.2 y versión 13.0.0, un usuario autenticado con una sesión establecida de acceso al sistema BIG-IP APM podría causar una interrupción del tráfico si la longitud de la solicitud URL es menor de 16 caracteres."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-118"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038408",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "https://support.f5.com/csp/article/K87141725",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K87141725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6137",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-05-09T15:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel (TMM) on specific platforms and configurations."
      }, {
        "lang" : "es",
        "value" : "En LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator y WebSafe versiones 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4 y versiones 12.1.0 hasta 12.1.2 de F5 BIG-IP, Los patrones de tráfico no divulgados recibidos mientras la protección de cookies SYN del software es activada  pueden causar una interrupción del servicio al Microkernel de Administración de Tráfico (TMM) en plataformas y configuraciones específicas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A065BC0-56BD-4665-A860-EBA37F1A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EDB8E9-E6FB-406E-B1D3-C620F114804C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77192AFB-B612-4BAA-916C-3DF8E851CC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE295AF6-2B35-467F-8501-B5753CDDE16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C03B68-914F-4DB0-A832-B626B8746524"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524B2D05-508C-47FF-94A0-6CC42060E638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD7394-BD0A-42FD-A367-827F35397A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98509F74-301A-4D1F-A2B4-B01B80CEFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BB6DB-B2D1-4855-A65C-F0799E034358"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452C59B8-230D-4FC0-B76D-FA6E381E3713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE1EEA6-1E25-4A90-91A1-386D19808557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A05340-0AE2-49CA-903F-44383421577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038409",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "https://support.f5.com/csp/article/K82851041",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K82851041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3067",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms."
      }, {
        "lang" : "es",
        "value" : "Adobe Experience Manager Forms versiones 6.2, 6.1, 6.0, presenta una vulnerabilidad de divulgación de información resultante de la violación del servicio pre-population en formularios AEM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_forms:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD1EE8-A885-4B11-9F3E-B3F39CB9979F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_forms:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C477CF4E-81D9-437F-AE92-43FCEC6969AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_forms:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FB0F12-34E1-41AA-A930-4239902F0A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98348",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038428",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/aem-forms/apsb17-16.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/aem-forms/apsb17-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3068",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de corrupción de memoria explotable en el motor de Codificación de Vídeo Avanzada. La explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42017/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3069",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de corrupción de memoria explotable en la clase BlendMode. Una explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3070",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de corrupción de memoria explotable en la clase ConvolutionFilter. Una explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3071",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de uso de la memoria previamente liberada explotable cuando se enmascaran objetos de visualización. Una explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98347",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3072",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de corrupción de memoria explotable en la clase BitmapData. Una explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3073",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de uso de la memoria previamente liberada explotable al manejar varias propiedades de máscara de objetos de visualización, también se conoce como corrupción de memoria. Una explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3074",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-05-09T16:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Flash Player versiones 25.0.0.148 y anteriores de Adobe, presenta una vulnerabilidad de corrupción de memoria explotable en la clase Graphics. Una explotación con éxito podría conllevar a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.163",
            "matchCriteriaId" : "468D7461-525B-4955-86D3-634AD5F67D8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "F993D3FB-20C2-45F9-B12A-C3B43626BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "E1797469-2189-46B4-B989-65C723FB94DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "5911F9A3-8BF4-41EC-A676-0B82E2BB955D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.148",
            "matchCriteriaId" : "388C1F56-BCBB-486E-8782-322283207C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T16:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory traversal in the file parameter during an act=db action."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS v2.0.7 tiene una vulnerabilidad de eliminación de archivos arbitraria en dapur/apps/app_config/controller/backuper.php mediante directorio transversal en el parámetro file durante una acción act = db."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7967",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-05-09T17:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs when fill settings are intentionally malformed and is opened in a standalone state, without connection to a protection relay. This attack is not considered to be remotely exploitable. This vulnerability has no effect on the operation of the protection relay to which VAMPSET is connected. As Windows operating system remains operational and VAMPSET responds, it is able to be shut down through its normal closing protocol."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del software VAMPSET producido por Schneider Electric, anteriores a versión 2.2.189, son susceptibles a una vulnerabilidad de corrupción de memoria cuando se utiliza un archivo vf2 corrupto. Esta vulnerabilidad causa que el software se detenga o no se inicie al intentar abrir el archivo corrupto. Esta vulnerabilidad se produce cuando la configuración de llenado está malformada intencionalmente y se abre en un estado independiente, sin conexión a un relé de protección. Este ataque no se considera que sea explotable remotamente. Esta vulnerabilidad no tiene ningún efecto en la operación del relé de protección al que está conectado VAMPSET. A medida que el sistema operativo Windows se mantiene trabajando y VAMPSET responde, es capaz de apagarse por medio de su protocolo de cierre normal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:vampset:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.185",
            "matchCriteriaId" : "D951553D-F5C3-4853-AE08-155B5EE0AC99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-061-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97124",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-061-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5527",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-05-09T20:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks."
      }, {
        "lang" : "es",
        "value" : "Spotfire Server versiones 7.0.X y anteriores a 7.0.2, versiones 7.5.x y anteriores a 7.5.1, versiones 7.6.x y anteriores a 7.6.1, versiones 7.7.x y anteriores a 7.7.1, y las versiones 7.8.x y anteriores a 7.8.1, y Spotfire Analytics Platform  versión 7.8.0 y anteriores, de TIBCO para AWS Marketplace, contienen varias vulnerabilidades que pueden permitir a los usuarios autorizados realizar ataques de inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.0",
            "matchCriteriaId" : "1614C09A-D958-4F03-AAC7-C84D4D783688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC1E4C-EA97-4892-BD26-23690194F693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C801DEF3-64D4-4FE0-A990-C59B2B1F1CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC043E53-0A6D-4CB9-A54F-459561A3ADCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFD4F32-E3FA-46BC-B927-C0333C27B6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FABB2EC-0B87-4C03-812D-CCF5DFD29CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DEA557-475A-451E-B958-A15B6E7A5E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98398",
        "source" : "security@tibco.com"
      }, {
        "url" : "http://www.tibco.com/support/advisories/2017/05/tibco-security-advisory-may-9-2017-tibco-spotfire-server",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tibco.com/support/advisories/2017/05/tibco-security-advisory-may-9-2017-tibco-spotfire-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T20:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file."
      }, {
        "lang" : "es",
        "value" : "WolfSSL anteriores a 3.10.2 tienen un acceso de memoria fuera de límites con la carga de los parámetros DH manipulados, también conocido como desbordamiento de búfer causado por un archivo temporal mal formado DH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.10.0a",
            "matchCriteriaId" : "1EFE3E77-B739-4E79-A5D6-DF79E34D6E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T20:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key."
      }, {
        "lang" : "es",
        "value" : "WolfSSL anteriores a la versión 3.11.0 no protege a wc_DhAgree de aceptar una clave DH mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.10.4",
            "matchCriteriaId" : "D005843D-809D-49D4-8A82-2B70BD5D770E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wolfSSL/wolfssl/releases/tag/v3.11.0-stable",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/releases/tag/v3.11.0-stable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0341",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input can trigger an access to a pointer that has not been initialized which may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgDdiEscape, donde una entrada proporcionada por el usuario puede disparar un acceso a un puntero que no ha sido inicializado, lo que podría ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0342",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrect calculation may cause an invalid address access leading to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver presentan una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) donde un cálculo incorrecto puede causar un acceso a dirección inválido, originando una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0343",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can trigger a race condition due to lack of synchronization in two functions leading to a denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en la capa de modo kernel (nvlddmkm.sys) donde un usuario puede desencadenar una condición de carrera debido a la falta de sincronización en dos funciones, lo que puede ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0344",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape may allow users to gain access to arbitrary physical memory, leading to escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgDdiEscape, que permitiría a usuarios obtener acceso memoria física arbitraria, dando lugar a una escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0345",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input used as an array size is not correctly validated allows out of bound access in kernel memory and may lead to denial of service or potential escalation of privileges"
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgDdiEscape, donde una entrada suministrada por el usuario utilizada como un tamaño de matriz que no esté correctamente validada permitiría un acceso fuera de los límites de la memoria del kernel, dando lugar a una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0346",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde el tamaño de un buffer de entrada no validado daría lugar a una denegación de servicio o a una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98503",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0347",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde un valor no validado correctamente pasado por el usuario al controladora y utilizado como índice a un array, podría ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0348",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys), donde una referencia a puntero nulo podría ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0349",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel (nvlddmkm.sys) para for DxgkDdiEscape, donde un puntero pasado por el usuario al controlador que no es validado correctamente antes de ser desreferenciado en una operación de escritura, puede ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98513",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0350",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel, donde un valor validado incorrectamente pasado por el usuario al controlador y es utilizado para un calculo de desplazamiento, puede ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98490",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0351",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel, donde una referencia a puntero nulo causada por una incorrecta entrada de usuario, puede ocasionar una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98497",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0352",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges"
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el firmware GPU, donde un incorrecto control de acceso podría permitir a la CPU acceder registros de control sensibles de la GPU, permitiendo una escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98517",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0353",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service"
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel para DxgDdiEscape, donde un bloqueo incorrecto en ciertas condiciones puede dar lugar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0354",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador de la capa del modo kernel para DxgkDdiEscape, donde una llamada a una determinada función que requiere un IRQL inferior puede ser ejecutada bajo un IRQL elevado, lo que puede conducir a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0355",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-05-09T21:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock, leading to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de NVIDIA Windows GPU Display Driver contienen una vulnerabilidad en el controlador en el modo kernel para DxgkDdiEscape, donde se puede acceder a la memoria paginada mientras mantiene un spinlock, lo que lleva a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98516",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T21:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process."
      }, {
        "lang" : "es",
        "value" : "En Veritas NetBackup 8.0 y versiones anteriores y NetBackup Appliance 3.0 y versiones anteriores, hay una ejecución de comandos remotos arbitrarios no autenticados utilizando el proceso 'bprd'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98379",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T21:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process."
      }, {
        "lang" : "es",
        "value" : "Veritas NetBackup 8.0 y anteriores y NetBackup Appliance 3.0 y anteriores están afectadas por una copia de archivos sin autenticación y ejecución de comandos de forma arbitraria a través del proceso 'bprd'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98384",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T21:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process."
      }, {
        "lang" : "es",
        "value" : "En Veritas NetBackup 8.0 y versiones anteriores y NetBackup Appliance 3.0 y anteriores, existe una escritura con privilegios remota de archivos no autenticada utilizando el proceso 'bprd'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "22ACFAB5-377D-43E5-9991-5587B7829263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "5FDFE32C-CF39-4F6F-94E8-F7AF299A0ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98381",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-09T21:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root."
      }, {
        "lang" : "es",
        "value" : "En Veritas NetBackup Appliance 3.0 y anteriores, los usuarios no autenticados pueden ejecutar comandos arbitrarios como root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.2",
            "matchCriteriaId" : "CD3168C4-243B-459F-AA39-CEA541794568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0E6D10-050E-4626-8E3B-AB15E8FA11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_appliance:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A6E8A-0836-442A-B90E-98DF559E34FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98383",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-005.html#Issue1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-005.html#Issue1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ASUS RT-AC * y RT-N * con firmware anterior a la versión 3.0.0.4.380.7378 tienen una vulneravilidad tipo CSRF en la página de incicio de sesión y de guardado de la configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4B1CF7-28CF-4DF7-BC60-2594E9F82CC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59001E8D-E835-464A-915A-AAF59F2F397F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/support/Download/11/2/0/161/45/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/support/Download/11/2/0/161/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ASUS RT-AC* y RT-N* con firmware anterior a la versión 3.0.0.4.380.7378, permiten la divulgación de información JSONP, como un mapa de red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4B1CF7-28CF-4DF7-BC60-2594E9F82CC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59001E8D-E835-464A-915A-AAF59F2F397F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/support/Download/11/2/0/161/45/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/support/Download/11/2/0/161/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF."
      }, {
        "lang" : "es",
        "value" : "Acp/core/files.browser.php en flatCore 1.4.7 permite la eliminación de archivos a través de directorio traversal en el parámetro delete a acp/acp.php. El riesgo podría estar limitado a las solicitudes enviadas a través de CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore-cms:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AD02CA-6422-471F-9A31-FD772048E303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure."
      }, {
        "lang" : "es",
        "value" : "La función htmlParseTryOrFinish en HTMLparser.c en libxml2 2.9.4 permite a los atacantes causar una denegación de servicio (sobrelectura de búfer) o divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C1FDF-1239-4FF2-B5A4-8CED209B8036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=775200",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=775200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de CSRF en Mautic 1.4.1 permiten a atacantes remotos secuestrar la autenticación de usuarios para solicitudes que o bien eliminan campañas de correo electrónico o eliminan contactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A252C2D-156A-4ED7-B0D3-4FC66BC10916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/issues/3486",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mautic/mautic/issues/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL."
      }, {
        "lang" : "es",
        "value" : "CSRF, en el plugin Clean Login en versiones anteriores a la 1.8 para WordPress, permite a los atacantes remotos cambiar la URL de redirección de inicio o cierre de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codection:clean_login:1.7.12:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2E28F773-06D5-4FEA-AF09-C60351108ADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/May/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/clean-login/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/clean-login/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php."
      }, {
        "lang" : "es",
        "value" : "Symphony 2 2.6.11 tiene XSS en el parámetro meta [navigation_group] a content/content.blueprintssections.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsymphony:symphony:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A66A3F-7AE2-4C5C-A94F-80F056835B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DeuxHuitHuit/symphony-2/commit/cd69a2a516e6503c1a1c7e097ee90d255ec3d6b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DeuxHuitHuit/symphony-2/commit/cd69a2a516e6503c1a1c7e097ee90d255ec3d6b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID."
      }, {
        "lang" : "es",
        "value" : "Dispositivos ASUS RT-AC* y RT-N* con firmware 3.0.0.4.380.7378 y anteriores permiten obtener información JSONP como el SSID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4B1CF7-28CF-4DF7-BC60-2594E9F82CC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59001E8D-E835-464A-915A-AAF59F2F397F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T05:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPS_info.xml."
      }, {
        "lang" : "es",
        "value" : "Dispositivos ASUS RT-AC* y RT-N* con firmwares anteriores a 3.0.0.4.380.7378 permiten a usuarios remotos no autenticados descubrir la contraseña de WIFI a través de WPS_info.xml"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4B1CF7-28CF-4DF7-BC60-2594E9F82CC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59001E8D-E835-464A-915A-AAF59F2F397F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1103",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-10T14:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 120665."
      }, {
        "lang" : "es",
        "value" : "IBM Team Concert (RTC) es vulnerable a una denegación de servicio, causada por un error XML Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente sensible o consumir todos los recursos de memoria disponibles. IBM X-Force ID: 120665."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2500F56F-C615-4836-9F6E-44985F898E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDFE57E-7905-4DC8-93FC-CAE5BC070790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBEB328-08B8-41ED-8D80-748948CB2BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC4C9D2-6799-44B5-AEF4-47DD3CC012FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002429",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1137",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-10T14:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versión 8.0 y versión 8.5.5 podría proporcionar una seguridad más débil de lo esperado. Un atacante remoto podría explotar esta debilidad para obtener información confidencial y obtener acceso no autorizado a la consola de administración. IBM X-Force ID: 121549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC9BD49-31BF-4D79-BAFE-5107D611FF61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998469",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038464",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21998469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4895",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-05-10T14:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploitation of this issue may result in an enrolled device having unrestricted access over local Airwatch security controls and data."
      }, {
        "lang" : "es",
        "value" : "Airwatch Agent para Android contiene una vulnerabilidad que puede permitir a un dispositivo omitir la detección de root. La explotación con éxito de este problema puede resultar en que un dispositivo registrado tenga acceso sin restricciones a los datos y controles de seguridad locales de Airwatch."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch_agent:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "D0212914-AA83-44A2-B521-F7F4A6D9522D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch_inbox:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0018380C-249A-423E-9322-8B703395F9BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95892",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037738",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/us/security/advisories/VMSA-2017-0001.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/us/security/advisories/VMSA-2017-0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4896",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-05-10T14:29:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data."
      }, {
        "lang" : "es",
        "value" : "Airwatch Inbox para Android contiene una vulnerabilidad que puede permitir a un dispositivo rooteado descifre los datos locales usados por la aplicación. La explotación con éxito de este problema puede resultar en una divulgación no autorizada de datos confidenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch_agent:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "D0212914-AA83-44A2-B521-F7F4A6D9522D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch_inbox:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0018380C-249A-423E-9322-8B703395F9BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95889",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037738",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/us/security/advisories/VMSA-2017-0001.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/us/security/advisories/VMSA-2017-0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T14:29:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en la parte pdf2swf de swftools versiones 0.9.2 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un documento PDF malformado, posiblemente como consecuencia de un error en el archivo Gfx.cc en Xpdf versión 3.02."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "48A0FCC4-41FD-449A-976D-97783161F186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/pull/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/pull/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T14:29:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP / CRM 4.0.4 tiene un SQL Injection en doli / theme / eldy / style.css.php a través del parámetro lang."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DE573C-957C-46C0-BF46-45B5587FD149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T14:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP / CRM 4.0.4 tiene un XSS en doli / societe / list.php a través del parámetro sall"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DE573C-957C-46C0-BF46-45B5587FD149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T14:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP / CRM 4.0.4 almacena contraseñas con el algoritmo MD5, lo que facilita los ataques de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DE573C-957C-46C0-BF46-45B5587FD149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T14:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM 4.0.4 permite cambios de contraseña sin proporcionar la contraseña actual, lo que facilita a los atacantes físicamente cerca obtener acceso a través de una estación de trabajo desatendida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DE573C-957C-46C0-BF46-45B5587FD149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxmole.com/advisories/foxmole-2017-02-23.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T15:29:00.173",
      "lastModified" : "2023-11-07T02:50:00.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3894",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-05-10T16:29:00.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting almacenado en la  Consola de Administración de BlackBerry Unified Endpoint Manager versión 12.6.1 y anteriores, y todas las versiones de BES12, permite a los atacantes ejecutar acciones en el contexto de un administrador de la Consola de Administración mediante la carga de un script malicioso y luego persuadiendo a un administrador destino para visualizar la ubicación específica del script malicioso dentro de la Consola de Administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D736AE-2679-43E6-A281-F4F5D3A45B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED84DDD-A736-4990-AF43-B94974B04BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F470B0-5E8E-43EE-9DE8-59EFF2466F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E309B5-5F9E-4D8D-8A0A-49F3EB2B31A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD293D26-C7BB-4F89-8B8B-18F96BCDABF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0633AD14-B5CC-46EA-88EB-B39B1A32FB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6247B841-45B7-4CCE-A189-3EBFC8AB2003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE5722D-E406-4EE1-B55A-15B6B36FCFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F4B47B-A4AB-42E1-BDB6-A027B79CB3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42160112-F133-4377-9CBA-56B71AAF5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0CC41-33D3-4102-84E8-22E2C70AD604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F8998A-C7B7-41A0-8B1B-2C72132D49EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DFB57A-A2BF-4DE5-A25B-91D91159189F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:enterprise_service:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9576124A-433E-4CBC-944B-9C06D794F937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:unified_endpoint_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "F99555CB-D274-4236-B47C-E60DD334F872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000044565",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98552",
        "source" : "secure@blackberry.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038465",
        "source" : "secure@blackberry.com"
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000044565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T16:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call."
      }, {
        "lang" : "es",
        "value" : "La función inet_csk_clone_lock en net / ipv4 / inet_connection_sock.c en el kernel de Linux hasta la versión 4.10.15 permite a los atacantes causar una denegación de servicio (double free) u otro impacto no especificado al aprovechar el uso de la llamada al sistema accept."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "3116EF11-56E7-4D40-9FD0-6109280D0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "38DDEB69-B6EE-41DF-9DE5-F91F21C8592F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.56",
            "matchCriteriaId" : "5837A5CA-266C-4BC5-B95F-1344AE42D24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.42",
            "matchCriteriaId" : "5EDD29F4-10F1-415A-877F-5586A004E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.71",
            "matchCriteriaId" : "CF0C6096-CC39-4352-AFAF-5D7A7C5C2838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.31",
            "matchCriteriaId" : "001F55C3-810A-444F-AE18-F067A84F6B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "1A25FD29-5617-4236-AC9A-6D68DC220925"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=657831ffc38e30092a2d5f03d385d710eb88b09a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98562",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/657831ffc38e30092a2d5f03d385d710eb88b09a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=657831ffc38e30092a2d5f03d385d710eb88b09a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/657831ffc38e30092a2d5f03d385d710eb88b09a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T16:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads."
      }, {
        "lang" : "es",
        "value" : "Dropbox Lepton 1.2.1 permite DoS (SEGV y parada abrupta de aplicación) a través de un archivo lepton malformado porque el código no asegura la configuración de un número correcto de hilos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1187"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbox:lepton:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCDBF54-A4B3-4D67-A014-6ECC38D58621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/05/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dropbox/lepton/commit/82167c144a322cc956da45407f6dce8d4303d346",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dropbox/lepton/issues/87",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dropbox/lepton/commit/82167c144a322cc956da45407f6dce8d4303d346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dropbox/lepton/issues/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T17:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note 2441560."
      }, {
        "lang" : "es",
        "value" : "SAP SAPCAR 721.510 tiene una vulnerabilidad de desbordamiento de búfer basada en memoria dinámica. Podría ser explotada con un archivo CAR manipulado recibido de una fuente remota no confiable. El problema es que la longitud de los datos escritos es un número arbitrario encontrado dentro del archivo. La respuesta del proveedor es SAP Security Note 2441560."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sapcar:721.510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C0637C-B143-474C-9622-E1BF185BF5AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98350",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41991/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T17:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name of an uploaded image."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XSS en OpenText Tempo Box 10.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML persistentes a través del nombre de una imagen cargada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:tempo_box:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9603313-4F14-4DB5-B4DF-E7A16568C72E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/blog/vulnerabilidades-en-tempobox/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/blog/vulnerabilidades-en-tempobox/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-10T21:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on."
      }, {
        "lang" : "es",
        "value" : "En Veritas Backup Exec 2014 anteriores a la compilación 14.1.1187.1126, 15 anteriores a la compilación 14.2.1180.3160, y 16 anteriores a FP1, hay una vulnerabilidad de uso después de la liberación en varios agentes que puede dar lugar a una denegación de servicio o ejecución remota de código. Un atacante autenticado puede utilizar esta vulnerabilidad para terminar abruptamente el agente o potencialmente tomar el control del proceso del agente y posteriormente del sistema en el que se está ejecutando"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1.1786.1126",
            "matchCriteriaId" : "17C333C0-5AFC-4B5B-A37B-5EC1B02C998E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.1180.3160",
            "matchCriteriaId" : "61172FEA-408A-4A50-B503-5A43F060B1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.1142.1327",
            "matchCriteriaId" : "AEA48F28-145F-4DB5-86C1-70FE2C074390"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98386",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42282/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42282/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2680",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-05-11T01:29:05.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected."
      }, {
        "lang" : "es",
        "value" : "Los paquetes de difusión PROFINET DCP especialmente elaborados podrían causar una condición de denegación de servicio de los productos afectados en un segmento Ethernet local (capa 2). Se requiere la interacción humana para recuperar los sistemas. Las interfaces PROFIBUS no están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "CFF143FA-311E-4081-805F-BBDB72003556"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C351559-6D8D-4EA8-87D6-83003844BD97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "47A5C59B-DAB3-4B05-B9FA-B75685F4AE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2A18E2-F88F-4DC1-81E9-AC836C85A248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0622A2-C918-4062-938A-8736469F8286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438184C5-3A2C-4DEE-8FF2-0EFBAA1BA37A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17",
            "matchCriteriaId" : "BB8BECDB-D55A-4B74-ADEC-CDDBAC4E3481"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8C873A-25EB-4787-9F25-DC5852337093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17",
            "matchCriteriaId" : "58E4035F-02AB-4B6D-A9AF-556DBE021C30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75013961-5B00-42E9-9061-CF2E9A4FC090"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DC8BB2-9BC6-4CC2-9CF0-28DF8AEC595A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977E97C8-959F-4146-8BFD-0FCF014B1534"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "EBE1A019-4BC4-4352-BA16-05629A20F89F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9BB25C-D5E3-43DE-8C73-06BDC43CA960"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "6BE0A3E5-0069-4AD5-B287-88BE5D0291F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB3A00F-252F-4E41-8254-6E8BBD40C4FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "18B597C8-0401-458F-8DF9-062B5E833115"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C868560-8BAE-462D-AED0-3C52EA9B6DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "A6AF0B55-84D1-46FA-B3A1-81EB2E2FED18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E362CEA5-F47B-4294-8F2D-A0A7AC6FF390"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "CA3E3782-7F36-4BC3-8D00-E1961E3105E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843A8686-5172-4782-BB97-B5D3C6FB27A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "807D97E1-7680-4B8F-85AD-F56F039669D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDE92FB-38C7-46E8-9208-BBD7872219D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf650r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "37B4E3A9-FE27-4A31-A213-92B461A5C846"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82C2C69-D983-4317-968B-D1855DF8AE43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf680r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "177A6E55-8D64-4CB8-B366-AE272E715932"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "450DE127-DFED-4799-B8EA-0F95028E4BC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf685r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "72D14DB5-6132-4442-8AB2-3ECE89B1D47C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F70060-0090-4BD7-8BF6-769989879ACD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "4FDC53A8-3F99-481E-9B0A-F5AF296B5BD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA074FBE-1C3E-4441-8C51-52B555B85D9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "0424AECD-68D5-45F1-9F55-B72CB4DFE39C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6304FA24-F194-4EE2-95F5-35D086F82C01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_dk-1616_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "39663B8F-F349-49B3-A0CB-004F11D01E34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_dk-1616_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F515DF-36AC-49C1-B013-E87529775AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.2",
            "matchCriteriaId" : "45008AE8-8386-4CBA-8C38-10C1A60150C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59C91EA-5D1B-4970-8C36-BD76BA420B12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.0",
            "matchCriteriaId" : "7F61995A-2018-4DAA-9529-BADC145B267F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF3DA7A-6B80-4F20-835F-BF071197D1B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "CC97A506-7E63-43A3-ACB0-DDAF3C5369C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F6299B-D7E3-4750-B016-7DCBC83C2287"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "B8A4CF89-9DDA-4974-A886-CC0A912017F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F713E4-4B75-476E-BC21-92CA10198AE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "2CA7C987-779A-4B64-BFAC-73D54618AF04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4C1BEF-D6B4-4260-9AC5-6F903EF6F4B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "F6EB11E9-4036-4A93-91DC-4D987B5FE2BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC408A8-903F-43A2-9D05-65AD4482FDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "4B9AF696-211F-4CAD-8A0E-402487E8DC50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080E722F-FCD4-4967-86EE-151ADC5702E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "D8763BB9-5DDA-4817-BDA6-63983CD4BC67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3033B1E-57A6-4AE3-A861-7047CF8EAD79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.03",
            "matchCriteriaId" : "B74BBB98-0146-467E-B77B-E2FA1ABF2ED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB9921A-5204-40A3-88AB-B7755F5C6875"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.03",
            "matchCriteriaId" : "B2345F75-2CD1-4014-8F90-36A4FB4CC3BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E917CBBB-EF41-4113-B0CA-EB91889235E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:softnet_profinet_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "9831567D-6528-4ACA-99F9-1EC42CB4A90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:softnet_profinet_io_firmware:14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC04E4-8C6F-4A66-86C4-A8F793A10BDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E348069A-B809-4DF6-81E9-DC52C6E2C268"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ie\\/pb-link_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "8ED91175-0AF3-424A-8C49-43587BB95EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ie\\/pb-link:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D43C16C-0719-4648-903F-6CC0FFF1835A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ie\\/as-i_link_pn_io_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E909C1E-9329-4459-ACE3-AD906CD4A968"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ie\\/as-i_link_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317863B6-0B71-4D03-83FE-FC59EBB5307C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_standard_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C887573-8BE8-42CF-B35A-22F9311AC627"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_standard:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5A3F7E-D039-430F-89B0-6AB4FD2428D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D166A8-1EEC-42F4-8EAB-1747247A7A05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA520B6-5177-43E4-87C0-C215F79FE9B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E76BDE-C7E9-4D6B-B5D9-A456516CD016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF513598-C3FA-4555-8133-A7276DDAFAC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "5468C9FA-ADD9-4FD3-89FE-C3621F5CB0EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55058209-8AE5-42AF-80D4-5A7A44307266"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ups1600_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "54B85DBA-24CA-4F95-89A5-D53D5AC69B0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC84D6F-F5E0-47CF-B11E-1C43F866D972"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "0C9D0595-53CD-48C0-82E3-DB0B2EC17721"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C17B00-34B5-4A15-9333-252BE2975F37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0B998-E408-408F-8F78-5E90F74E9C9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0259EAE9-0CA0-49A5-A573-8339604A181B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "55BE63B0-F44E-4FCD-B00C-77595BACC62E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA8715-D671-4D8F-A870-E61960A5AFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D054139B-BE36-4B34-88AE-BC487DCB1DCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0CE2EC-9A73-4576-A389-A19893D47B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB063929-AAB0-4FF8-BCA3-71BA80517B1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1EC40E7-F004-446C-B5C9-0AB9911105E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200sp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "E6BACBC9-7C60-4A41-B8C6-A5E46B568029"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691CA334-4394-4ED6-B417-F67FC92228AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:pn\\/pn_coupler_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "32BD232D-A6BB-4D7B-BD00-1085D08D8A77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:pn\\/pn_coupler:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2846BD-9DAB-44A2-87C9-39E3ACFE03FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "0FE40195-DE5A-4B9C-9455-FAF92FF090D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339839-3D74-4E13-9EB6-24CA46F991A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "E9329BF4-D00A-4138-AA4C-93022002C0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7863DDDC-D5CE-44FE-89C4-0E8A702A91A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62802E3-AFA3-4023-9671-95C220397956"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "8C46E084-9732-4920-86C2-3A91830CBCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "18C8B2FB-87C3-4DBB-9960-53FA545F26CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D3FAF4-9B78-4EEF-8D80-17E9B98228D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3",
            "matchCriteriaId" : "251EE4B2-F1C7-4ACF-B90D-4C0FE3D181E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598EEFC9-5240-4011-9017-A9557585AA19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C096137-C1E3-4D19-87A9-BEB7A081DD1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD4E99-5C66-443F-8B6F-FA01C895DE78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.6",
            "matchCriteriaId" : "2570E321-C28E-46FA-8693-1230B3B5FD1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F97B67B-4516-4AD9-B33C-7F480EE0DB4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "582B49BD-4565-4D19-BBE6-A193BDFCE8B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC545350-FD53-4B2E-886F-E20F12260C9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "9D24953B-B3DF-4150-810C-64A94A55E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DDEA9B-E1BF-4572-8E12-D13C54603E77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1500_software_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "E696D071-8601-40AA-BAF5-1452940E1D6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1500_software_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4D4D21-9868-4FA3-89A8-1EEC473383EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2010",
            "matchCriteriaId" : "80BDBB38-20D2-48C3-8B58-62C2D8CC00B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EA59D713-F342-4CDA-BDC8-108352D385DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5ADAB0-3985-4933-8CDD-D1546D8271CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_act_3su1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "4E36412A-1AAB-42D1-B0B4-7A7BBF3CB317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8582A3E8-C05E-4D0B-851D-8C3181ED61CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84A65E6-4672-4B62-826E-6FAAE0B4A89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB058FA-3E70-4489-AAB1-0CB7EF16A2E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D42184E-8998-4C40-9612-5C9DE193CC06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CB62E-04B7-4DD3-AA06-EB4A4FA58E54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "98FDB53A-8F5D-46AA-9366-F6480B12D744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352651A0-F7CE-4689-8597-15F3764707A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "FD2943F3-C46C-462E-9062-EE7B3E56CF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "975EFBBB-33E1-4D04-9E06-93553D45539C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "99A0D811-2751-420E-AD85-B6EC777C8CAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A43D34-ECA3-4330-B85F-02BDD1D22149"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2",
            "matchCriteriaId" : "5D7A7140-62A2-434F-AB79-1D47C918F1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcp_firmware:1.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B61A79-C2B0-4C3D-A63C-B20FF78B2981"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "775C90BB-C026-435C-889A-517EF85656C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA92AC6-7DA0-418D-A13F-69268DFD7966"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D3E9C-1346-4354-BCD9-B02F67500C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g120\\(c\\/p\\/d\\)_w._pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "413AA7BE-CFE1-49DB-965F-1BD50D61F82F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g120\\(c\\/p\\/d\\)_w._pn_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4BE4B-3AE5-4039-B18D-A5DE3F1DDEF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g120\\(c\\/p\\/d\\)_w._pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE820D5-16B2-4565-9D83-AF018C08B5E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "4B3B0706-47CD-43FB-8E3A-7EEEF020AFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1D36CF8D-6DA4-49ED-9EF1-F96292F671EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373DBE44-AC28-4D04-93BB-35CD8C60E899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "AC731378-CB83-4C15-BC6A-5A86DF9B62F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g150_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "51A78A0B-5D75-418A-98AC-6EBF50D89A8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2296CA65-0E89-4BCB-8003-E7212BF1F585"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics__s110_pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "7143613F-4627-4F62-8F1B-E64CCB20F3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics__s110_pn_firmware:4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B428560B-2CAC-4A63-B677-724D95E12023"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:_s110_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B97849-01A7-4A8F-84DD-D25CF84D010B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "77A0BE57-1A9A-4564-9C53-CF47DEEF7991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "376556D0-1AE2-4F80-B3CE-C0251E35C326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A824BD-935F-4E53-8313-C5544B0489C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "772FF972-2193-4639-B454-F92762E49C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s150_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2B31F0-D45F-4B42-95D2-540C68C5F3DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D48682C-A39D-4A09-B904-50FA64A9D2A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_v90_pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01",
            "matchCriteriaId" : "8EE54303-4FDA-42C7-B33B-BA884CD31339"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_v90_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D870F289-F2BC-4105-A8F0-30E47CDE9FEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "92A7198A-D6C5-4FBF-8860-5C8EA864718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_firmware:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA6BF7-ECB8-47F1-A791-E65CFF89A608"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879CF09E-4735-4A73-8E7B-215F2701F7E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "71CD07D8-ECED-47EF-B2BC-0585F9BB00C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB948AA-7BD7-4A0F-B86E-38ECD722C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D97047C-9772-4AEB-B993-131EBBAE33BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "28E3AB24-86B4-485D-8D3A-131E5C7F0108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC387B-B799-4A34-8C9E-73D05B86801D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765286DF-07EC-4C7A-AB8C-09559CD977EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "CE53BC8E-CDA7-476A-87CA-532F365C79A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFE761-35C9-43EF-85BC-E8083B9F75CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "A1150AED-CDBE-492C-95FF-3E02B3B447F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAE6A83-737B-47A9-86BB-652C7F6A8013"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "42E8D21B-9CF4-4C2E-B33C-212BA29C7124"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E03180-BE77-4A22-A6C1-FE90B9760570"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_irc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "02610368-4B97-4B3F-8592-64CF8F65D8AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E7964A-E7A4-4CDE-B376-5BBEC5F00A73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5003DA-5488-47C1-B442-9137E849FDD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE96226-A2DF-4A9E-8CBB-8D7CF328E404"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFBFB96-1A35-4724-831B-68E3A9C32921"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_dk-1604_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "65EDC583-1BCE-4787-820F-39DBD280DADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_dk-1604_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568ED124-AEE8-4BDC-BB89-0F8F83BA7537"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "D87643C3-6525-4CBD-BC0C-6B4DC30C8642"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6AB995-D67B-43E5-B8FF-97C38D20CB10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.8",
            "matchCriteriaId" : "5C936A7A-1AF9-44E4-9CEC-0694A424616B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA1E7C4-6352-41A4-8A94-C24DDB456572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "D3F052D2-B537-4BF9-AF05-60107FDE0BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_gh150_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "96C7E194-617D-4593-B544-10AEFF59CCA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF977545-395A-4C34-BB22-A1047B5B6E85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8",
            "matchCriteriaId" : "3653DA37-DB23-41E0-8CE8-838E384AA40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86A334-10F9-4DFB-A421-CBCAFD86C8C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED7F33B-D475-4232-8683-48554A6729F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "1BF93390-E65B-434E-9891-271DF7D11F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_gm150_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "55F6B737-7237-4D38-A0F0-9EFCE76DC9C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD76CFB0-B5D7-40DC-8D14-FC9C9BACF3CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8",
            "matchCriteriaId" : "FD67D30A-8681-41AE-B248-7E50BA1B9FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_sl150_firmware:4.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC0EE8B-1088-46B6-992A-B8E12A7B7DC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6619B0F-7CDC-40A6-89B2-C6067AF45214"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8",
            "matchCriteriaId" : "31393A1B-4DBC-476D-875E-463B4B887E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_sm120_firmware:4.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0206F9F2-27C7-4D2F-817B-13F8FA31E547"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444DD77F-DB65-4766-A89D-7A679B4CA1E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:extension_unit_12_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "01.01.01",
            "matchCriteriaId" : "E789146F-1FA4-42E4-B867-FD0F5A7316CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:extension_unit_12_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0B32CC-8268-4B38-BBC7-51154882EC82"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:extension_unit_15_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "01.01.01",
            "matchCriteriaId" : "05B55989-A3E9-4AA1-A619-C75FEAA0B5DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:extension_unit_15_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA05435D-9A52-4D43-BE74-7D4C6C156AC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:extension_unit_19_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "01.01.01",
            "matchCriteriaId" : "52156691-1368-4C77-98A7-EA63089091C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:extension_unit_19_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE8B9B8-3C49-4296-9BC0-7E030878D479"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:extension_unit_22_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "01.01.01",
            "matchCriteriaId" : "EC052323-2E00-415D-847A-66F77AD5C3FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:extension_unit_22_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F884CAF-D152-4318-B49B-0D68936D2BD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "F4E035CB-0F76-47C0-B2C7-93AFA8A7B38B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1242-7_gprs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AEC7D6-7E5E-4CFF-99C8-7FBADA2479D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-7_lte\\/us_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "E4CEE93A-9641-424B-AF55-2C550CA568F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-7_lte\\/us:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DDA679-D761-4986-A0A0-4C00178DF0B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "7D21A891-321B-42A3-8173-8E0743AEDD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0116F3-67FA-4129-B1FF-023774D179AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1626_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1",
            "matchCriteriaId" : "71BAF32C-35EA-4704-B75D-9EED01F8264B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1626:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581EA284-EDD6-4EA5-96B2-67904D1D9DC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98369",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038463",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-284673.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-293562.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-546832.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-284673.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-293562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-546832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5461",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2017-05-11T01:29:05.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations."
      }, {
        "lang" : "es",
        "value" : "Los servicios de Seguridad de Red de Mozilla (Network Security Services o NSS) en versiones anteriores a la 3.21.4, versiones de las 3.22.x a las 3.28.x anteriores a la 3.28.4, versiones 3.29.x anteriores a la 3.29.5 y versiones 3.30.x anteriores a la 3.30.1 permiten que atacantes remotos provoquen una denegación de servicio (escritura fuera de límites) o que, probablemente, causen otro impacto no especificado aprovechando operaciones en base64 incorrectas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.4",
            "matchCriteriaId" : "10B03F76-10F8-436D-93FC-E031766157B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.22",
            "versionEndExcluding" : "3.28.4",
            "matchCriteriaId" : "35AB5F66-C087-4C44-81C9-C153C69C57E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.29",
            "versionEndExcluding" : "3.29.5",
            "matchCriteriaId" : "7CBCF5DE-F055-463F-BB92-7ECD14E18BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.30",
            "versionEndExcluding" : "3.30.1",
            "matchCriteriaId" : "D5514E06-CE37-41E6-AD9E-19396DBB9702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3872",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98050",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1100",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1101",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1102",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1103",
        "source" : "security@mozilla.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344380",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.4_release_notes",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.4_release_notes",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.5_release_notes",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-04",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5461",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5461",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/#CVE-2017-5461",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/#CVE-2017-5461",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@mozilla.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.4_release_notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.4_release_notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.5_release_notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/#CVE-2017-5461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/#CVE-2017-5461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T01:29:06.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Error de entero sin signo en MiniUPnP MiniUPnPc versiónes desde la 1.4.20101221 hasta la 2.0 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3417E9-831D-4A19-AB87-C6F28803EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1C7567-5005-41BC-9D8B-D09E61D8008C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AA2410-3507-4918-B16F-E95D2B361385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BC4FB8-F7FF-4750-A179-1615CE983F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA9F0DE-35C0-40FE-BAF0-63FB539E777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE59F834-42D7-44BB-B6C0-BE605773D1EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-2.0.20170509.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-2.0.20170509.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2681",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-05-11T10:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected."
      }, {
        "lang" : "es",
        "value" : "Los paquetes PROFINET DCP especialmente diseñados que se envían en un segmento Ethernet local (capa 2) a un producto afectado podrían causar una condición de denegación de servicio de ese producto. Se requiere la interacción humana para recuperar el sistema. Las interfaces PROFIBUS no están afectadas. Esta vulnerabilidad sólo afecta a los SIMATIC HMI Multi Panels y HMI Mobile Panels, y a los dispositivos S7-300/S7-400"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "CFF143FA-311E-4081-805F-BBDB72003556"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C351559-6D8D-4EA8-87D6-83003844BD97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "47A5C59B-DAB3-4B05-B9FA-B75685F4AE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2A18E2-F88F-4DC1-81E9-AC836C85A248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0622A2-C918-4062-938A-8736469F8286"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438184C5-3A2C-4DEE-8FF2-0EFBAA1BA37A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17",
            "matchCriteriaId" : "BB8BECDB-D55A-4B74-ADEC-CDDBAC4E3481"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8C873A-25EB-4787-9F25-DC5852337093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17",
            "matchCriteriaId" : "58E4035F-02AB-4B6D-A9AF-556DBE021C30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75013961-5B00-42E9-9061-CF2E9A4FC090"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DC8BB2-9BC6-4CC2-9CF0-28DF8AEC595A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977E97C8-959F-4146-8BFD-0FCF014B1534"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "EBE1A019-4BC4-4352-BA16-05629A20F89F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9BB25C-D5E3-43DE-8C73-06BDC43CA960"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "6BE0A3E5-0069-4AD5-B287-88BE5D0291F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB3A00F-252F-4E41-8254-6E8BBD40C4FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "CA3E3782-7F36-4BC3-8D00-E1961E3105E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C868560-8BAE-462D-AED0-3C52EA9B6DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "A6AF0B55-84D1-46FA-B3A1-81EB2E2FED18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E362CEA5-F47B-4294-8F2D-A0A7AC6FF390"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "496E9B17-BD29-4DE9-96B3-B23E3599C766"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843A8686-5172-4782-BB97-B5D3C6FB27A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "12F7A42E-4D63-4A2A-ABF6-CA08BB6C6234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDE92FB-38C7-46E8-9208-BBD7872219D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf650r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "37B4E3A9-FE27-4A31-A213-92B461A5C846"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82C2C69-D983-4317-968B-D1855DF8AE43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf680r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "177A6E55-8D64-4CB8-B366-AE272E715932"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "450DE127-DFED-4799-B8EA-0F95028E4BC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf685r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "72D14DB5-6132-4442-8AB2-3ECE89B1D47C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F70060-0090-4BD7-8BF6-769989879ACD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "4FDC53A8-3F99-481E-9B0A-F5AF296B5BD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA074FBE-1C3E-4441-8C51-52B555B85D9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "0424AECD-68D5-45F1-9F55-B72CB4DFE39C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6304FA24-F194-4EE2-95F5-35D086F82C01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_dk-16xx_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "26113F2F-8C5E-471B-9E12-AA3B3860B5CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_dk-16xx_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D867D-737F-4CEC-BAEA-9ADE0BA2303E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.2",
            "matchCriteriaId" : "45008AE8-8386-4CBA-8C38-10C1A60150C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59C91EA-5D1B-4970-8C36-BD76BA420B12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.0",
            "matchCriteriaId" : "7F61995A-2018-4DAA-9529-BADC145B267F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF3DA7A-6B80-4F20-835F-BF071197D1B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "CC97A506-7E63-43A3-ACB0-DDAF3C5369C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F6299B-D7E3-4750-B016-7DCBC83C2287"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "B8A4CF89-9DDA-4974-A886-CC0A912017F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F713E4-4B75-476E-BC21-92CA10198AE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "2CA7C987-779A-4B64-BFAC-73D54618AF04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4C1BEF-D6B4-4260-9AC5-6F903EF6F4B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "F6EB11E9-4036-4A93-91DC-4D987B5FE2BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC408A8-903F-43A2-9D05-65AD4482FDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "4B9AF696-211F-4CAD-8A0E-402487E8DC50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080E722F-FCD4-4967-86EE-151ADC5702E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "D8763BB9-5DDA-4817-BDA6-63983CD4BC67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3033B1E-57A6-4AE3-A861-7047CF8EAD79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.03",
            "matchCriteriaId" : "B74BBB98-0146-467E-B77B-E2FA1ABF2ED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB9921A-5204-40A3-88AB-B7755F5C6875"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.03",
            "matchCriteriaId" : "B2345F75-2CD1-4014-8F90-36A4FB4CC3BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E917CBBB-EF41-4113-B0CA-EB91889235E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:softnet_profinet_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "9831567D-6528-4ACA-99F9-1EC42CB4A90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:softnet_profinet_io_firmware:14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC04E4-8C6F-4A66-86C4-A8F793A10BDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E348069A-B809-4DF6-81E9-DC52C6E2C268"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ie\\/pb-link_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "8ED91175-0AF3-424A-8C49-43587BB95EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ie\\/pb-link:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D43C16C-0719-4648-903F-6CC0FFF1835A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ie\\/as-i_link_pn_io_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E909C1E-9329-4459-ACE3-AD906CD4A968"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ie\\/as-i_link_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317863B6-0B71-4D03-83FE-FC59EBB5307C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_teleservice_adapter_standard_modem_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F37323-B072-470B-B770-9735B84CACFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_teleservice_adapter_standard_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610DF0CA-D0FA-4CBE-8383-6F038E7AC4C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_modem_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B366E4A-4223-4A42-9A05-52EB23BCF209"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FB86B6-DB8A-42EF-BA60-68D96B6FE8B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_modem_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD7CAEE-9C1A-4520-8F85-FD9BFB0A57D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF513598-C3FA-4555-8133-A7276DDAFAC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "5468C9FA-ADD9-4FD3-89FE-C3621F5CB0EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55058209-8AE5-42AF-80D4-5A7A44307266"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ups1600_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "54B85DBA-24CA-4F95-89A5-D53D5AC69B0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC84D6F-F5E0-47CF-B11E-1C43F866D972"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "0C9D0595-53CD-48C0-82E3-DB0B2EC17721"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C17B00-34B5-4A15-9333-252BE2975F37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0B998-E408-408F-8F78-5E90F74E9C9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0259EAE9-0CA0-49A5-A573-8339604A181B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "55BE63B0-F44E-4FCD-B00C-77595BACC62E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA8715-D671-4D8F-A870-E61960A5AFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D054139B-BE36-4B34-88AE-BC487DCB1DCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0CE2EC-9A73-4576-A389-A19893D47B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB063929-AAB0-4FF8-BCA3-71BA80517B1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1EC40E7-F004-446C-B5C9-0AB9911105E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200sp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0",
            "matchCriteriaId" : "3237684A-3BEA-462F-A91D-ABC94C90D15A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691CA334-4394-4ED6-B417-F67FC92228AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:pn\\/pn_coupler_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "32BD232D-A6BB-4D7B-BD00-1085D08D8A77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:pn\\/pn_coupler:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2846BD-9DAB-44A2-87C9-39E3ACFE03FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "0FE40195-DE5A-4B9C-9455-FAF92FF090D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339839-3D74-4E13-9EB6-24CA46F991A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "E9329BF4-D00A-4138-AA4C-93022002C0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7863DDDC-D5CE-44FE-89C4-0E8A702A91A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62802E3-AFA3-4023-9671-95C220397956"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "8C46E084-9732-4920-86C2-3A91830CBCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "18C8B2FB-87C3-4DBB-9960-53FA545F26CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D3FAF4-9B78-4EEF-8D80-17E9B98228D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3",
            "matchCriteriaId" : "251EE4B2-F1C7-4ACF-B90D-4C0FE3D181E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598EEFC9-5240-4011-9017-A9557585AA19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.17",
            "matchCriteriaId" : "9461CADE-1624-4D1B-8CF2-CF65F75071C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD4E99-5C66-443F-8B6F-FA01C895DE78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.6",
            "matchCriteriaId" : "2570E321-C28E-46FA-8693-1230B3B5FD1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F97B67B-4516-4AD9-B33C-7F480EE0DB4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "582B49BD-4565-4D19-BBE6-A193BDFCE8B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC545350-FD53-4B2E-886F-E20F12260C9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "9D24953B-B3DF-4150-810C-64A94A55E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DDEA9B-E1BF-4572-8E12-D13C54603E77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2010",
            "matchCriteriaId" : "80BDBB38-20D2-48C3-8B58-62C2D8CC00B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EA59D713-F342-4CDA-BDC8-108352D385DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5ADAB0-3985-4933-8CDD-D1546D8271CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_act_3su1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "4E36412A-1AAB-42D1-B0B4-7A7BBF3CB317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8582A3E8-C05E-4D0B-851D-8C3181ED61CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84A65E6-4672-4B62-826E-6FAAE0B4A89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB058FA-3E70-4489-AAB1-0CB7EF16A2E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D42184E-8998-4C40-9612-5C9DE193CC06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CB62E-04B7-4DD3-AA06-EB4A4FA58E54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "98FDB53A-8F5D-46AA-9366-F6480B12D744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352651A0-F7CE-4689-8597-15F3764707A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "FD2943F3-C46C-462E-9062-EE7B3E56CF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "975EFBBB-33E1-4D04-9E06-93553D45539C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A43D34-ECA3-4330-B85F-02BDD1D22149"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2",
            "matchCriteriaId" : "5D7A7140-62A2-434F-AB79-1D47C918F1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcp_firmware:1.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B61A79-C2B0-4C3D-A63C-B20FF78B2981"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "775C90BB-C026-435C-889A-517EF85656C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA92AC6-7DA0-418D-A13F-69268DFD7966"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D3E9C-1346-4354-BCD9-B02F67500C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g120\\(c\\/p\\/d\\)_pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "21ED7835-5D9B-4AF0-8E71-A4E7377FAD9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g120\\(c\\/p\\/d\\)_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E77B7F-3E48-4C2C-9E2E-4AAEA6BCA71A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "4B3B0706-47CD-43FB-8E3A-7EEEF020AFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1D36CF8D-6DA4-49ED-9EF1-F96292F671EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373DBE44-AC28-4D04-93BB-35CD8C60E899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "AC731378-CB83-4C15-BC6A-5A86DF9B62F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g150_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "51A78A0B-5D75-418A-98AC-6EBF50D89A8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2296CA65-0E89-4BCB-8003-E7212BF1F585"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s110_pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "35B36BC1-EE75-48D5-B511-C79891DA0F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s110_pn_firmware:4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8C21EF20-693C-425F-A370-E84722856212"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s110_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D7197E-C921-42CA-BE43-C96A4223F443"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "77A0BE57-1A9A-4564-9C53-CF47DEEF7991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "376556D0-1AE2-4F80-B3CE-C0251E35C326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A824BD-935F-4E53-8313-C5544B0489C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "772FF972-2193-4639-B454-F92762E49C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s150_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2B31F0-D45F-4B42-95D2-540C68C5F3DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D48682C-A39D-4A09-B904-50FA64A9D2A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_v90_pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01",
            "matchCriteriaId" : "8EE54303-4FDA-42C7-B33B-BA884CD31339"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_v90_pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D870F289-F2BC-4105-A8F0-30E47CDE9FEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "92A7198A-D6C5-4FBF-8860-5C8EA864718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_firmware:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA6BF7-ECB8-47F1-A791-E65CFF89A608"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879CF09E-4735-4A73-8E7B-215F2701F7E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "71CD07D8-ECED-47EF-B2BC-0585F9BB00C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB948AA-7BD7-4A0F-B86E-38ECD722C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D97047C-9772-4AEB-B993-131EBBAE33BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "28E3AB24-86B4-485D-8D3A-131E5C7F0108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC387B-B799-4A34-8C9E-73D05B86801D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765286DF-07EC-4C7A-AB8C-09559CD977EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "CE53BC8E-CDA7-476A-87CA-532F365C79A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFE761-35C9-43EF-85BC-E8083B9F75CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "A1150AED-CDBE-492C-95FF-3E02B3B447F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAE6A83-737B-47A9-86BB-652C7F6A8013"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "42E8D21B-9CF4-4C2E-B33C-212BA29C7124"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E03180-BE77-4A22-A6C1-FE90B9760570"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_irc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.82",
            "matchCriteriaId" : "02610368-4B97-4B3F-8592-64CF8F65D8AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E7964A-E7A4-4CDE-B376-5BBEC5F00A73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5003DA-5488-47C1-B442-9137E849FDD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE96226-A2DF-4A9E-8CBB-8D7CF328E404"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFBFB96-1A35-4724-831B-68E3A9C32921"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cm_1542sp-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.15",
            "matchCriteriaId" : "8BF91884-7532-4E15-A754-EBC430FD0E9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cm_1542sp-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921D7568-9FE9-4491-B099-A922984351DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "64D5B21D-0DC1-479B-810B-21E78F34A80A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "45B42950-8BD9-4933-9615-27FCC67C03A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_828d_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "86ADBE36-CC1F-4F3C-81CA-ABA0F40AC212"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D97047C-9772-4AEB-B993-131EBBAE33BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "6377EA6B-8EE3-4208-8FB0-175684A77B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AE6E9A-02B9-4A69-ACC4-EFBE1767E51E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765286DF-07EC-4C7A-AB8C-09559CD977EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "D87643C3-6525-4CBD-BC0C-6B4DC30C8642"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6AB995-D67B-43E5-B8FF-97C38D20CB10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.8",
            "matchCriteriaId" : "5C936A7A-1AF9-44E4-9CEC-0694A424616B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA1E7C4-6352-41A4-8A94-C24DDB456572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98369",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038463",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-293562.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-293562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6865",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-05-11T10:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1), SIMATIC STEP 7 V5.X (All versions < V5.6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1), SIMATIC WinCC V7.2 and prior (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Update 15), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (All versions < flexible 2008 SP5), SINAUT ST7CC (All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15), SINEMA Server (All versions < V14), SINUMERIK 808D Programming Tool (All versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Security Configuration Tool (SCT) (All versions < V5.0). Specially crafted PROFINET DCP broadcast packets sent to the affected products on a local Ethernet segment (Layer 2) could cause a Denial-of-Service condition of some services. The services require manual restart to recover."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Primary Setup Tool (PST) (todas las versiones 4.2 HF1), SIMATIC Automation Tool (todas las versiones 3.0), SIMATIC NET PC-software (todas las versiones 14 SP1), SIMATIC PCS 7 Versión 8.1 (todas las versiones), SIMATIC PCS 7 Versión 8.2 (todas las versiones 8.2 SP1), SIMATIC STEP Versión 7 (TIA Portal) Versión 13 (todas las versiones 13 SP2), SIMATIC STEP Versión 7 (TIA Portal) Versión 14 (todas las versiones 14 SP1), SIMATIC STEP 7 Versión 5.x (todas las versiones 5.6), SIMATIC WinAC RTX 2010 SP2 (todas las versiones), SIMATIC WinAC RTX F 2010 SP2 (todas versiones), SIMATIC WinCC (TIA Portal) Versión 13 (todas las versiones 13 SP2), SIMATIC WinCC (TIA Portal) Versión 14 (todas las versiones 14 SP1), SIMATIC WinCC Versión 7.2 y anteriores (todos versiones), SIMATIC WinCC Versión 7.3 (todas las versiones 7.3 actualización 15), SIMATIC WinCC Versión 7.4 (todas las versiones 7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (todas las versiones anteriores a flexible 2008 SP5), SINAUT ST7CC (todas las versiones instaladas en conjunto con SIMATIC WinCC Versión 7.3 actualización 15), SINEMA Server (todas las versiones 14), SINUMERIK 808D Programming Tool (todas las versiones 4.7 SP4 HF2), SMART PC Access (todas las versiones  2.3), STEP 7 - Micro/WIN SMART (todas las versiones 2.3), Security Configuration Tool (SCT) (todas las versiones 5.0). Los paquetes de difusión PROFINET DCP especialmente creados enviados a los productos afectados en un segmento Ethernet local (Layer 2) podrían causar una condición de denegación de servicio de algunos servicios. Los servicios requieren el reinicio manual para recuperarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:pcs_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B0B7B-17F7-463C-A124-5DE77337E212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:primary_setup_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8046A64D-4C80-4199-B1A7-F77D02428ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:security_configuration_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33765E4-619E-4566-BF96-4A7C8776A0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_automation_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306C1B1-5944-49F1-8BEC-5F811C891BED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_net_pc-software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE3E184-1158-488C-A689-34C70C6861F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_step_7_\\(tia_portal\\):5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F096B1D-366B-4E2E-A03F-607559623FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_step_7_\\(tia_portal\\):13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A02189-0785-4A64-BC00-830733F21792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_step_7_\\(tia_portal\\):14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D57BAA-A31B-4369-837D-90796779C487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_step_7_micro\\/win_smart:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CA4054-615D-4821-909A-411E4BCD3D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_winac_rtx_2010:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D74E76A-5EE5-41AE-9C56-742EC9AD1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_winac_rtx_f_2010:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB81FD88-3D70-4413-B035-93A3D5389170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7BB505-A6B6-4200-9602-E4D348E407AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_\\(tia_portal\\):13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D1A823-CE50-441F-B060-DA678DFE24FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_\\(tia_portal\\):14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A1BA01-7A92-4368-8A73-8FA47A08BC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_flexible_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2429ABE-55D8-4E6D-89EB-CE016B9336ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinaut_st7cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCB1BDC-91E7-48DC-85BA-45A2B5B840B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinema_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC74BDB-87BD-40E1-8426-0353266F194E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_808d_programming_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82B7F7E-C9D4-4B31-9482-41BF35C8F470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:smart_pc_access:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54273D3-5C43-4343-B71F-FAD16A5CEF50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-275839.pdf",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.securityfocus.com/bid/98366",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-275839.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.securityfocus.com/bid/98366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6867",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-05-11T10:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the \"administrators\" group to crash services by sending specially crafted messages to the DCOM interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en SIMATIC WinCC (versión V7.3 anterior a Upd 11 y versión V7.4 anterior a SP1), SIMATIC WinCC Runtime Professional (versión V13 anterior a SP2 y versión V14 anterior a SP1), SIMATIC WinCC (TIA Portal) Professional (versión V13 anterior a SP2 y versión V14 anterior a SP1) de Siemens, eso podría permitir a un atacante remoto autenticado, quien es miembro del grupo de los \"administrators\" bloquear los servicios enviando mensajes especialmente diseñados a la interfaz DCOM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6229A2-9B8E-4F76-8425-589D2CE58B16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64B795A-7E66-49AE-BE40-E8EEAC12D280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_\\(tia_portal\\):13:sp1:*:*:professional:*:*:*",
            "matchCriteriaId" : "F8FA6B17-FA61-44FC-BAA7-AAC63ECBD996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_\\(tia_portal\\):14:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "B0E21465-76ED-4803-A40A-539500B993F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_runtime:13:sp1:*:*:professional:*:*:*",
            "matchCriteriaId" : "57CE0216-AA81-416B-88D2-3321D2A2A16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_runtime:14:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "D8893E54-CF26-448A-9C32-90E5F8D8CC84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98368",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-523365.pdf",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-523365.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T17:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision Power Board user who views the announcement."
      }, {
        "lang" : "es",
        "value" : "Invision Power Services (IPS) Community Suite 4.1.19.2 y anteriores tiene XSS reflejado previo a la autenticación en el IPS UTF8 Converter v1.1.18: El vector de ataque es admin/convertutf8/index.php?Controller=. Esta vulnerabilidad del UTF8 Converter puede usarse fácilmente para hacer un anuncio malicioso que afecte a cualquier usuario de Invision Power Board que vea el anuncio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisioncommunity:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.19.2",
            "matchCriteriaId" : "D7A015E6-3AFD-4A33-AA69-172D6161DCD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zeroday.insecurity.zone/exploits/ipb_owned.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/862154908895780864",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/862284967715381248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://zeroday.insecurity.zone/exploits/ipb_owned.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/862154908895780864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/862284967715381248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announce_content parameter in an index.php?/modcp/announcements/&action=create request. This is related to the \"<> Source\" option."
      }, {
        "lang" : "es",
        "value" : "Invision Power Services (IPS) Community Suite 4.1.19.2 y anteriores tienen un XSS almacenado en Announcements, permitiendo escalada de privilegios desde un moderador Invision Power Board hasta admin. El ataque utiliza el parámetro announce_content en una petición index.php?/modcp/announcements/&action=create."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisioncommunity:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.19.2",
            "matchCriteriaId" : "D7A015E6-3AFD-4A33-AA69-172D6161DCD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zeroday.insecurity.zone/exploits/ipb_owned.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/862154908895780864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/862284967715381248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://zeroday.insecurity.zone/exploits/ipb_owned.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/862154908895780864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/862284967715381248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T17:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The primary cause is the ability to upload an SVG document with a crafted attribute such an onload; however, full path disclosure is required for exploitation."
      }, {
        "lang" : "es",
        "value" : "Invision Power Services (IPS) Community Suite 4.1.19.2 y anteriores tienen un XSS almacenado y un problema de fuga de información en la funcionalidad de adjuntos en User CP. Puede ser utilizada por cualquier usuario Invision Power Board para ganar acceso a cuentas moderador/admin. La causa principal de este problema es la posibilidad de cargar documentos SVG con un atributo manipulado, como onload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisioncommunity:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.19.2",
            "matchCriteriaId" : "D7A015E6-3AFD-4A33-AA69-172D6161DCD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zeroday.insecurity.zone/exploits/ipb_owned.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/862154908895780864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/862284967715381248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://zeroday.insecurity.zone/exploits/ipb_owned.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/insecurity/status/862154908895780864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/862284967715381248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T18:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater-script' in OTAs that does not check that the current version is lower than or equal to the given image's. Downgrades can occur even on locked bootloaders and without triggering a factory reset, allowing for exploitation of now-patched vulnerabilities with access to user data. This vulnerability can be exploited by a Man-in-the-Middle (MiTM) attacker targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition, a physical attacker can reboot the phone into recovery, and then use 'adb sideload' to push the OTA (on OnePlus 3/3T 'Secure Start-up' must be off)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos OnePlus versiones One, X, 2, 3 y 3T. OxygenOS e HydrogenOS son vulnerables a ataques de degradación. Esto se debe a un \"updater-script\" indulgente en OTAs que no comprueba que la versión actual sea inferior o igual a la de la imagen en cuestión. Las degradaciones pueden ocurrir incluso en cargadores de arranque bloqueados y sin activar un restablecimiento de fábrica, permitiendo la explotación de las vulnerabilidades ahora parcheadas con acceso a los datos del usuario. Esta vulnerabilidad puede ser explotada por un atacante de tipo Man-in-the-Middle (MiTM) que se dirija al proceso de actualización. Esto es posible porque la transacción de actualización no se realiza por medio de TLS (CVE-2016-10370). Adicionalmente, un atacante físico puede reiniciar el teléfono en la recuperación y luego usar \"adb sideload\" para empujar la OTA (en OnePlus 3/3T \"Secure Start-up\" debe estar desactivado)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8189780A-EA20-4B96-A625-48D12948B3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B048C-6522-41A7-9DAB-834FBFCA3C00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8AD37A-7539-4F16-8AC2-2556035B0DE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A390FA-9B56-4645-991D-5E9CB16966B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://alephsecurity.com/vulns/aleph-2017008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T18:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA images, and the fact that both ROMs use the same OTA verification keys, attackers can install HydrogenOS over OxygenOS and vice versa, even on locked bootloaders, which allows for exploitation of vulnerabilities patched on one image but not on the other, in addition to expansion of the attack surface. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition, physical attackers can reboot the phone into recovery, and then use 'adb sideload' to push the OTA (on OnePlus 3/3T 'Secure Start-up' must be off)."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos OnePlus One, X, 2, 3 y 3T. Debido a un script de actualización en las imágenes OTA de OnePlus, y el hecho de que ambas ROM utilicen las mismas claves de verificación OTA. Los atacantes pueden instalar HydrogenOS sobre OxygenOS y viceversa, incluso en cargadores de arranque bloqueados, lo que permite la explotación de vulnerabilidades parcheadas en una imagen pero no en la otra, además de la expansión de la superficie de ataque. Esta vulnerabilidad puede ser explotada por atacantes Man-in-the-Middle (MiTM) que apuntan al proceso de actualización. Esto es posible porque la transacción de actualización no se produce sobre TLS (CVE-2016-10370). Además, los atacantes físicos pueden reiniciar el teléfono en la recuperación y, a continuación, utilizar 'sbdb sideload' en la OTA (en OnePlus 3/3T 'Secure Start-up' debe estar apagado)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8189780A-EA20-4B96-A625-48D12948B3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B048C-6522-41A7-9DAB-834FBFCA3C00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8AD37A-7539-4F16-8AC2-2556035B0DE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A390FA-9B56-4645-991D-5E9CB16966B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://alephsecurity.com/vulns/aleph-2017020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T18:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images, the fact that both products use the same OTA verification keys, and the fact that both products share the same 'ro.build.product' system property, attackers can install OTAs of one product over the other, even on locked bootloaders. That could theoretically allow for exploitation of vulnerabilities patched on one image but not on the other, in addition to expansion of the attack surface. Moreover, the vulnerability may result in having the device unusable until a Factory Reset is performed. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition, physical attackers can reboot the phone into recovery, and then use 'adb sideload' to push the OTA."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos OnePlus One y X. Debido a un script de actualización en las imágenes OTA de OnePlus One y X. El hecho de que ambos productos usen las mismas claves de verificación OTA y el hecho de que ambos productos comparten la misma propiedad del sistema 'ro.build.product', los atacantes pueden instalar OTAs de un producto sobre el otro, incluso en cargadores de arranque bloqueados. Eso teóricamente podría permitir la explotación de vulnerabilidades parcheadas en una imagen pero no en la otra, además de la expansión de la superficie de ataque. Además, la vulnerabilidad puede causar que el dispositivo sea inutilizable hasta que se realice un restablecimiento de fábrica. Esta vulnerabilidad puede ser explotada por atacantes Man-in-the-Middle (MiTM) que apuntan al proceso de actualización. Esto es posible porque la transacción de actualización no se produce sobre TLS (CVE-2016-10370). Además, los atacantes físicos pueden reiniciar el teléfono en recuperación y, a continuación, utilizar 'sideload' para forzar la OTA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8189780A-EA20-4B96-A625-48D12948B3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8AD37A-7539-4F16-8AC2-2556035B0DE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A390FA-9B56-4645-991D-5E9CB16966B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://alephsecurity.com/vulns/aleph-2017021",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7472",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-11T19:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls."
      }, {
        "lang" : "es",
        "value" : "El subsistema KEYS en el kernel de Linux anterior a 4.10.13 permite a los usuarios locales causar una denegación de servicio (consumo de memoria) a través de una serie de llamadas KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.12",
            "matchCriteriaId" : "A1467C00-A66E-4711-9C37-A5FE885B7BA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9f838d104fed6f2f61d68164712e3204bf5271b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/11/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98422",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1034862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1442086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/1/235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/3/724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42136/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.13",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9f838d104fed6f2f61d68164712e3204bf5271b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/05/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1034862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1442086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/1/235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/3/724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42136/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213."
      }, {
        "lang" : "es",
        "value" : "Xen hasta la versión 4.8.x en plataformas de 64 bits no maneja adecuadamente las tablas de páginas después de una hiperllamada IRET, lo que podría permitir que los usuarios de PV del SO huésped ejecutar código arbitrario en el sistema operativo anfitrión, también conocido como XSA-213."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-213.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T19:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x mishandles the \"contains segment descriptors\" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214."
      }, {
        "lang" : "es",
        "value" : "Xen hasta la versión 4.8.x manipula incorrectamente la propiedad \"contains segment descriptors\" durante las operaciones GNTTABOP_transfer (también conocida como transferencia de huéspedes), lo que podría permitir a los usuarios del sistema operativo huésped PV ejecutar código arbitrario en el sistema anfitrión, también conocido como XSA-214."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-214.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-214.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T19:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215."
      }, {
        "lang" : "es",
        "value" : "Xen hasta la versión 4.6.x para plataformas de 64 bits maneja una llamada de seguridad, lo que podría permitir a los usuarios del sistema operativo huésped PV ejecutar código arbitrario en el sistema anfitrión, también conocido como XSA-215."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE1F484-23B4-4CCC-AD23-6F8BDC312CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14442705-D243-4250-A486-E70989946D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-215.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-11T20:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de entero en pixel-a.asm, el código de ensamblado x86 para planeClipAndMax() en MulticoreWare x265 hasta la versión 2.4, tal y como se utiliza en la dependencia x265_encoder_encode en libbpg y otros productos. Una imagen pequeña puede causar un desbordamiento de número entero, lo que conduce a una denegación de servicio en el proceso de codificación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265_high_efficiency_video_coding:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "7E8F24FC-1993-41D5-899A-056849391050"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/multicoreware/x265/issues/345/integer-underflow-in-x265-source-common",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/multicoreware/x265/issues/345/integer-underflow-in-x265-source-common",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T07:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\\Users\\Public\\MicTray.log by any process."
      }, {
        "lang" : "es",
        "value" : "La tarea mictray64 de Conexant Systems, tal como es usada en los sistemas HP Elite, EliteBook, ProBook y ZBook, filtra datos confidenciales (keystrokes) a cualquier proceso. En mictray64.exe (mic tray icon) versión 1.0.0.46, un hook de Windows en LowLevelKeyboardProc es usado para capturar las pulsaciones de teclas (keystrokes). Estos datos se filtran por medio de canales no deseados: mensajes de depuración accesibles a cualquier proceso que se estén ejecutando en la sesión de usuario actual y acceso al sistema de archivos en C:\\Users\\Public\\MicTray.log mediante cualquier proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexant:mictray64:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.46",
            "matchCriteriaId" : "C5B82B26-35F7-4580-83C3-8961F3267232"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elite_x2_1012_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0160130B-8BCB-41A6-A7A5-B03A5083EF11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_1030_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A39EC7-86EE-458D-8743-7E139E28C18A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_725_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBD4012-6ABA-4EC5-8CE5-4BA947D660FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_745_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056188C4-E214-4C71-8D84-5B7FF34146D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_755_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A69E93D-B289-4777-BDD0-B4AAA62441DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_820_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD06E7E-045C-4A57-9197-1B12F686514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_828_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAA1D9A-0191-4113-9A64-F7859E95870D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_840_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67B506C-A2CD-4B4B-81C9-AB03B9164EFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_848_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFE7CE8-7270-4E92-A659-D2B842604E83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_850_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B61731-7ADD-4CB5-AE0D-0DA1D6C9C000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_folio_1040_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB7C8C9-7CF2-4EE3-8BD3-0A9573DDFB61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:elitebook_folio_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A855CCBF-BA02-426E-A645-B8B43F34F26D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_430_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1197F876-9F8E-4311-9D55-683BCDFA1BAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_440_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC8772B-7770-40FF-A45E-65D55EF53335"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_446_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772EA71F-0A1F-4D96-A3CE-72F685FEDA0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_450_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "887F7997-005D-4BCB-B607-AC0295B4A3D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_455_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4463B3F-3B8E-40E0-94E1-9CB1F2D342C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_470_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "569E785F-531A-47E8-ABD9-C5B6325E5AB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_640_g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C10BE5-F877-4E67-A05A-975D3127303D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_645_g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D94E4D-69E9-4B7A-8AD5-D84E0D88783F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_650_g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916C65AC-F54E-4C1D-8BC1-357E6C066186"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:probook_655_g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCCF83E-D3BA-44EC-AF21-80D92BA84DAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:zbook_15_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8577621-8CE8-4C94-9E37-A0A1AD76567C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:zbook_15u_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87151407-3BCE-4716-BEF9-3482F858D8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:zbook_17_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3D4433-E6DC-403B-B0B1-878121AA0EFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:zbook_studio_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81015892-0FAB-4A12-8B58-2ABBAB369506"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T07:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session."
      }, {
        "lang" : "es",
        "value" : "LightDM hasta la versión 1.22.0, cuando es usado systemd en Ubuntu versión 16.10 y versiones 17.x, permite a los atacantes físicamente cercanos omitir las restricciones previstas de AppArmor y visitar los directorios principales de usuarios arbitrarios mediante el establecimiento de una sesión de invitado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightdm_project:lightdm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22.0",
            "matchCriteriaId" : "7CAC5354-FCCB-416A-A00F-7C337EF9099F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98554",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1663157",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3285-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1663157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ubuntu.com/usn/usn-3285-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T07:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document."
      }, {
        "lang" : "es",
        "value" : "La función mark_line_tr en gxscanc.c de Artifex Ghostscript 9.21 permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) a través de un documento PostScript manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC5891C-6572-4B5F-9249-DADE456F6510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697810",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T07:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado un desbordamiento inferior de entero en la función unicode_to_utf8 () en tnef 1.4.14. Esta vulnerabilidad podría permitir operaciones de escritura no válidas, controladas por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tnef_project:tnef:1.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BF5A92-ACCF-4276-A26A-6E79077543B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/verdammelt/tnef/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/verdammelt/tnef/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T07:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTag functions. NOTE: the vendor reportedly has stated this is \"a feature, not a bug."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA** CMS Made Simple (CMSMS) 2.1.6 permite a los administradores autenticados remotos ejecutar código PHP arbitrario a través del parámetro de código admin/editusertag.php, relativo a las funciones CreateTagFunction y CallUserTag. NOTA: el vendedor ha declarado que esto es \"una característica, no un error\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://osandamalith.com/2017/05/11/cmsms-2-1-6-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41997/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://osandamalith.com/2017/05/11/cmsms-2-1-6-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41997/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0064",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mixed Content warnings, aka \"Internet Explorer Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elusión de características de seguridad en Internet Explorer que permite ignorar las advertencias de contenido mixto, también conocida como \"Internet Explorer Security Feature Bypass Vulnerability.\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98121",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038447",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0064",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0077",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow a local authenticated attacker to execute a specially crafted application to obtain information, or in Windows 7 and later, cause denial of service, aka \"Win32k Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016, permiten a un atacante local autenticado ejecutar una aplicación especialmente diseñada para obtener información, o en Windows 7 y posterior, causar denegación de servicio, también conocida como \"Win32k Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98114",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038454",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0171",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016 are configured to answer version queries, aka \"Windows DNS Server Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows DNS Server permite una vulnerabilidad de denegación de servicio cuando Microsoft Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 Gold y R2 y Windows Server 2016 están configurados para responder a consultas de versiones, también conocido como \"Windows DNS Server Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98097",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0171",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0175",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-0220, CVE-2017-0258, and CVE-2017-0259."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows Server 2008 SP2 y R2 SP1 y Windows 7 SP1 permite a los atacantes autenticados obtener información confidencial a través de un documento especialmente diseñado, también conocido como \"Windows Kernel Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2017-0220, CVE- 2017-0258, y CVE-2017-0259."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98110",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038452",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0175",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42009/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0190",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"GDI Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente GDI en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y Windows Server 2016, permite a los atacantes remotos obtener información confidencial desde la memoria de proceso a través de un sitio web manipulado, también conocido como \"GDI Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98298",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038451",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0190",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0212",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly validate vSMB packet data, aka \"Windows Hyper-V vSMB Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Hyper-V permite una vulnerabilidad de elevación de privilegios cuando Microsoft Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 no validan correctamente los datos de paquetes vSMB, también conocido como \"Windows Hyper-V vSMB Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98099",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0212",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0213",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.393",
      "lastModified" : "2025-10-22T00:16:00.077",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214."
      }, {
        "lang" : "es",
        "value" : "Windows COM Aggregate Marshaler en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016, permite una elevación de privilegios cuando un atacante ejecuta una aplicación especialmente modificada, también conocida como \"Windows COM Elevation of Privilege Vulnerability\". Este CVE ID es único para CVE-2017-0214."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-28",
      "cisaActionDue" : "2022-04-18",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98102",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038457",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42020/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0214",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when Windows fails to properly validate input before loading type libraries, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0213."
      }, {
        "lang" : "es",
        "value" : "Windows COM en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016, presenta una vulnerabilidad de elevación de privilegios cuando Windows no puede validar correctamente la entrada antes de cargar las bibliotecas de tipos, también conocida como \"Windows COM Elevation of Privilege Vulnerability\". Este CVE ID es exclusivo para CVE-2017-0213."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98103",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0214",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42021/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42021/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0220",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:01.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticated attackers to obtain sensitive information via a specially crafted document, aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-0175, CVE-2017-0258, and CVE-2017-0259."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1 y Windows Server 2012 Gold permite a los atacantes autenticados obtener información confidencial a través de un documento especialmente modificado, también conocido como \"Windows Kernel Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2017 -0175, CVE-2017-0258 y CVE-2017-0259."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98111",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038445",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0220",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42009/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0221",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0227 and CVE-2017-0240."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad cuando Microsoft Edge accede incorrectamente a objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria de borde de Microsoft\". Este CVE ID es exclusivo de CVE-2017-0227 y CVE-2017-0240."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98147",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0221",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0222",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.143",
      "lastModified" : "2025-10-22T00:16:00.223",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0226."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Internet Explorer accede incorrectamente a objetos en memoria, también conocido como \"Internet Explorer Memory Corruption Vulnerability\". Este CVE ID es exclusivo para CVE-2017-0226."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-02-25",
      "cisaActionDue" : "2022-08-25",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Internet Explorer Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98127",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038423",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0222",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0224",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la forma en que se procesan los motores JavaScript cuando se manejan objetos en la memoria en Microsoft Edge, también conocido como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Este CVE ID es exclusivo de CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98214",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0224",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0226",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0222."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código cuando Internet Explorer accede incorrectamente a objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria de Internet Explorer\". Este CVE ID es exclusivo de CVE-2017-0222."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98139",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0226",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0227",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0221 and CVE-2017-0240."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que los motores de scripting de Microsoft afectados se procesan al acceder a objetos en memoria, también conocido como \"Microsoft Edge Memory Corruption Vulnerability\". Este CVE ID es exclusivo para CVE-2017-0221 y CVE-2017-0240."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98281",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038424",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0227",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0228",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en los navegadores de Microsoft en la forma en que los motores de JavaScript se procesan al manipular objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Este CVE ID es exclusivo de CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98164",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038425",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038426",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0228",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0229",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que se procesan los motores JavaScript cuando se manipulan objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Este CVE ID es exclusivo de CVE-2017-0224, CVE-2017-0228, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98217",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0229",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0230",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que se procesan los motores JavaScript cuando se manipulan objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Este CVE ID es exclusivo de CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0230",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0231",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka \"Microsoft Browser Spoofing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de falsificación cuando los navegadores de Microsoft producen el Filtro SmartScreen, también conocido como \"Vulnerabilidad de falsificación de buscador de Microsoft\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98173",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038455",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038456",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0231",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0233",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0241."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en Microsoft Edge que podría permitir a un atacante escapar de la caja de seguridad de AppContainer en el navegador, también conocida como \"Vulnerabilidad de elevación de privilegios de borde de Microsoft\". Este CVE ID es exclusivo de CVE-2017-0241."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98179",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0233",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0234",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que el motor de JavaScript de Chakra procesa cuando se accede a objetos en memoria, también conocido como \"Scripting Engine Memory Corruption Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0235, CVE-2017-0236 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98229",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038431",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0234",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0235",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0236, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que el motor de JavaScript de Chakra se procesa cuando se manejan objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Este CVE ID es exclusivo de CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0236 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98230",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0235",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0236",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:02.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, and CVE-2017-0238."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Edge en la forma en que el motor de JavaScript de Chakra se procesa cuando se manejan objetos en la memoria, también conocido como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Este ID CVE es exclusivo de CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235 y CVE-2017-0238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98234",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038431",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0236",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0238",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, and CVE-2017-0236."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en los navegadores de Microsoft en la manera que los motores de scripting de JavaScript maneja los objetos en la memoria, también se conoce como  \"Scripting Engine Memory Corruption Vulnerability.\" El ID de este CVE es diferente de CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235 y CVE-2017-0236."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98237",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0240",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0221 and CVE-2017-0227."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Edge en la manera en que los motores de scripting de Microsoft afectados renderizan cuando se manejan objetos en la memoria, también se conoce como \"Microsoft Edge Memory Corruption Vulnerability.\" El ID de este CVE es diferente de CVE-2017-0221 y CVE-2017-0227"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98203",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038424",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0240",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0241",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of the Internet Zone, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0233."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de elevación de privilegios cuando Microsoft Edge renderiza una página sin dominio en la URL, lo que podría permitirle a Microsoft Edge realizar acciones en el contexto de la Zona Intranet y acceder a una funcionalidad que no está típicamente disponible para el navegador cuando se está navegando en el contexto de la Zona de Internet, también se conoce como \"Microsoft Edge Elevation of Privilege Vulnerability.\"  El ID de este CVE es diferente de CVE-2017-0233."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:C/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98208",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0241",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0242",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka \"Microsoft ActiveX Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información cuando se instancian determinados objetos ActiveX, también conocida como \\\"Microsoft ActiveX Information Disclosure Vulnerability.\\\"\". }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98275",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0242",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0244",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in Windows 7 for x64-based systems, cause denial of service, aka \"Windows Kernel Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Windows Server 2008 SP2 y R2 SP1, y Windows 7 SP1, permite que los atacantes autenticados localmente alcancen privilegios por medio de una aplicación diseñada, o en Windows 7 para sistemas basados ??en x64, causar una denegación de servicio, también se conoce como  \"Windows Kernel Elevation of Privilege Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98109",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038453",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0244",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0245",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attacker to execute a specially crafted application to obtain kernel information, aka \"Win32k Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1 y Windows Server 2012 Gold permiten a un atacante local autenticado ejecutar una aplicación especialmente diseñada para obtener información del kernel, también conocida como \"Win32k Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98115",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0245",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42008/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0246",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application or in Windows 7 for x64-based Systems and later, cause denial of service, aka \"Win32k Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente gráfico de los controladores del modo kernel en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511 y 1607 y Windows Server 2016, permite a los usuarios locales obtener privilegios a través de una aplicación manipulada, o en Windows 7 para sistemas basados ??en x64 y posteriores, causar denegación de servicio, también conocida como \"Win32k Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98108",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038449",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0246",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0247",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de denegación de servicio cuando el Core de ASP.NET no puede comprobar apropiadamente las peticiones web. NOTA: Microsoft no ha comentado en reclamos de terceros de que el problema es que la función TextEncoder.EncodeCore en el paquete System.Text.Encodings.Web en ASP.NET Core Mvc versiones anteriores a 1.0.4 y versiones 1.1.x anteriores a  1.1.3 permite a los atacantes remotos causar una denegación de servicio aprovechando un fallo en calcular apropiadamente la longitud de los caracteres de 4 bytes en el rango sin carácter Unicode."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D49ACA-0755-425C-9162-8D40D7AADDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB52597-3458-4816-8432-7948CA21B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEB20C7-882C-44DB-86BF-FC56D4B5CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86207D1B-AE1B-4826-B07A-75815A5ED06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96E6585-EA7C-47A7-B6EF-9926758E90DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292C4DAD-1CBB-41DF-9E45-F8D594C03097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5B65AF-6AE0-4CB0-9877-E8EF1C1A1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E7A0531D-F1A2-46D8-B8A4-AE53BC691C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BC76DD26-1A09-419D-9156-16042FF7D508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2A701C76-6AC7-4230-B0C5-9CD91010349C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "6E801676-656E-43F6-8C4E-EE0BD5EAF23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "69E0C257-E39A-4404-AFE5-4D15BFA2DD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DE818227-C9F3-49BA-80D1-FA49FA46B8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B7E8D173-9F85-4796-8A97-A77A531A3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "893BD886-23DC-41E9-9DD1-C367F1638CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BA58DBE2-9E83-4D69-A8DD-AB4E0CBD17D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2F9CCC49-348F-44A3-8412-17B689B0B0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "40ACE580-63FC-44A6-A1A3-19113BCF96B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "88D4AEE2-23B8-4FE6-A118-66735EF8BA5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3A31726B-E001-4568-9538-150C438D4D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "22473819-A864-4568-BB4F-B1B61D6BE768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "25F6E532-9282-4444-BE83-1D4254B78E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3D3B725F-E01E-4B44-B6FE-D384CB081880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "CD9CA7E6-4622-48CE-87DD-43850E6A3D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9F0BE208-E908-4D55-ABC0-01899A7BCF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BEB9143D-39A5-4A1A-8CF6-50A234476914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "784D8767-E542-4BEA-AC04-190EB86ACE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B051C0F9-2D90-4F21-A4A3-49E52E4580F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "24849B2C-4475-4F63-99F8-D63AC7455AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E53251EE-7C63-4597-817D-E0E046D45E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C4B607A3-3637-4785-A7FA-074B370B57A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "10769FE6-90C1-41EF-B59C-2DF602798AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BEE6B70C-4E71-4EA2-9B3A-1B118CEE8461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9F2FF0F8-0447-442F-99C7-AAE364942263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "82A352B2-00B5-40EB-A053-3871999FF549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "1CBD8554-F155-4265-9ABA-27F2CFDB6645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "1D0612F5-8621-4FEB-B84D-6116CD92C671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "D917236C-B53D-454C-9FCD-4D0F48849C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B337AA31-B98C-47BD-B5C3-F2699FD0F3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "32B849F2-CD4B-45DB-86DD-77248ED82C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3FAB9E0E-D0D9-45F6-88CA-F16F859C33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "5A08EDE3-035D-4A4F-AF2A-FDFC02264841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "28A15818-8AB8-4253-9D82-D968B05D4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C59BDECB-3184-4BE3-91B5-4703170D6E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F861A072-D917-4BF5-99D3-3C9AD99A70EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "79F08C0E-5A28-4A8D-9987-CC273A38CDB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F8A9187E-AAF3-4186-9014-13D304463F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "19022A88-C140-4C64-8BAD-43CE0E448D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "36170C72-162C-44F1-8291-DCF12AAC3D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "97E0DE96-A8CA-4395-8955-3223754A7678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "95D892B0-08CD-479B-8DBA-2E296A2139EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "18B1353C-D7FF-4B05-A0E0-17E06BB0BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "16E5978D-49B7-4948-A57F-D0903CC2726B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "D9FA1BA0-6E3F-46FD-BBEC-0546A3B973B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "175E800A-6295-4EDD-AD76-AED50C4ED29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DD429092-758C-40E2-9B62-552062DE5C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4B124905-C4EB-4943-BF9D-97DD9C63C773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F1382D94-3442-4770-99BC-A803DB7D99CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "CCF8ED4C-E275-4CCD-8D37-EFBB858731FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "72682900-3DEA-43E8-9E60-04D8AA575353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2614708B-D88A-45D1-989A-EC1F18B2ECF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "744B9E1F-ADB9-4B4B-AFAD-EAD5C91EEBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "A43E17E5-B98E-4ED2-8745-DCEEBF7D122D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "48101840-E58F-4E2D-BA2D-8D07F76E1EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "20669ACD-4EA1-4B4A-A26B-E4F702B7FB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7FC1D9F9-FFC7-46DD-B5BD-518198BD6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "56285B40-74FB-4AE4-9998-09D3CC2FA76B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4322AC03-A133-4778-A2F1-AD509764BB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E4779EAE-28C3-454F-853C-45D7A4B264BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "34EB1A01-873A-4395-84D9-B048E2E12A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "389FB05C-C41F-4162-B868-472A6FEE18BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "EBE430A8-4D97-4BAC-ABCE-4FE10766B8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4A657B85-FF9B-4ED8-BAEE-1BABC7CA2955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "944C87F4-591A-46A3-A6BE-68CF070D2557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "83FB8E69-0103-4FAA-94D8-DA1FDF0532BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "6A5CA6EF-184A-4D35-A430-8D708041C139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7264CABF-8603-445F-8728-A53575239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "776B722D-0DA6-4994-9323-06165E562489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "77A16675-CD3A-427B-888E-B1D8A51189AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B28A24AD-C225-45B3-8156-5A8107A7073C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DF9D2BE0-A57B-40B8-821F-65C29D9E6CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "22B75008-7F05-4923-88D9-0D6619568C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C4A5D3CC-282D-484F-99E3-5D087F759C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "8799CB21-5F98-4368-A1BC-2746438757CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7A2D0F4D-432E-4E3F-AFC4-5FE00BBA309E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B4315F2E-5272-4D09-80AF-A65AE52E37CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9CCD4355-CE24-4F14-A348-BB76470E4DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "FF31C77E-67CA-481E-B4E2-2AE2941A4CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "79D7994A-ABDF-4F02-841D-B082917CA9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7B33EFE6-68BB-46FD-834D-B767641E1AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "71FFFD6C-1243-480F-874E-3548EED2D471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http:4.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "76906A3F-9A22-453F-BCCF-35C248E6788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http:4.3.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E7A176BB-A188-44A9-9E52-D385B13D328F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http.winhttphandler:4.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DF881FCD-8E4C-47AC-ABED-05F805D3DED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http.winhttphandler:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "06C3E2C7-C113-4224-8F4F-3BDD3B800B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.security:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "EE31A209-11BA-45CB-8DC7-8E6CCBCEEC36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.security:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F376D1B3-5801-4BC3-B060-39DC928A9838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.websockets.client:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2EBDCB70-2C4C-4EDC-8DF9-6CA99732F404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.websockets.client:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "0ACC7FBF-34A3-4A95-A7B0-396AB194976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.text.encodings.web:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "AA8408AC-5380-4C77-BA49-C236F0CBB51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.text.encodings.web:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E73FEB32-4CCB-460F-BC5B-E9BBFB8A6F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aspnet/Announcements/issues/239",
        "source" : "secure@microsoft.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://technet.microsoft.com/en-us/library/security/4021279.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/05/18/ASPNET-Core-Unicode-Non-Char-Encoding-DoS",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aspnet/Announcements/issues/239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://technet.microsoft.com/en-us/library/security/4021279.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/05/18/ASPNET-Core-Unicode-Non-Char-Encoding-DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0248",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:03.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka \".NET Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET Framework versiones 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 y 4.7, permiten a un atacante omitir las etiquetas de Enhanced Security Usage cuando presentan un certificado que no es válido para un uso específico, también se conoce como \".NET Security Feature Bypass Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC4407-7E92-4E60-82F0-0C87D1860D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B3A045-B08A-44E0-91BE-726753F6A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0B660D-1F30-4D45-B98B-726EDB8CB90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98117",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038458",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0249",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios cuando el ASP.NET Core falla al desinfectar adecuadamente las solicitudes web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D49ACA-0755-425C-9162-8D40D7AADDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB52597-3458-4816-8432-7948CA21B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEB20C7-882C-44DB-86BF-FC56D4B5CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86207D1B-AE1B-4826-B07A-75815A5ED06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96E6585-EA7C-47A7-B6EF-9926758E90DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292C4DAD-1CBB-41DF-9E45-F8D594C03097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5B65AF-6AE0-4CB0-9877-E8EF1C1A1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E7A0531D-F1A2-46D8-B8A4-AE53BC691C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BC76DD26-1A09-419D-9156-16042FF7D508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2A701C76-6AC7-4230-B0C5-9CD91010349C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "6E801676-656E-43F6-8C4E-EE0BD5EAF23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "69E0C257-E39A-4404-AFE5-4D15BFA2DD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DE818227-C9F3-49BA-80D1-FA49FA46B8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B7E8D173-9F85-4796-8A97-A77A531A3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "893BD886-23DC-41E9-9DD1-C367F1638CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BA58DBE2-9E83-4D69-A8DD-AB4E0CBD17D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2F9CCC49-348F-44A3-8412-17B689B0B0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "40ACE580-63FC-44A6-A1A3-19113BCF96B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "88D4AEE2-23B8-4FE6-A118-66735EF8BA5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3A31726B-E001-4568-9538-150C438D4D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "22473819-A864-4568-BB4F-B1B61D6BE768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "25F6E532-9282-4444-BE83-1D4254B78E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3D3B725F-E01E-4B44-B6FE-D384CB081880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "CD9CA7E6-4622-48CE-87DD-43850E6A3D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9F0BE208-E908-4D55-ABC0-01899A7BCF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BEB9143D-39A5-4A1A-8CF6-50A234476914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "784D8767-E542-4BEA-AC04-190EB86ACE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B051C0F9-2D90-4F21-A4A3-49E52E4580F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "24849B2C-4475-4F63-99F8-D63AC7455AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E53251EE-7C63-4597-817D-E0E046D45E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C4B607A3-3637-4785-A7FA-074B370B57A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "10769FE6-90C1-41EF-B59C-2DF602798AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BEE6B70C-4E71-4EA2-9B3A-1B118CEE8461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9F2FF0F8-0447-442F-99C7-AAE364942263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "82A352B2-00B5-40EB-A053-3871999FF549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "1CBD8554-F155-4265-9ABA-27F2CFDB6645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "1D0612F5-8621-4FEB-B84D-6116CD92C671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "D917236C-B53D-454C-9FCD-4D0F48849C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B337AA31-B98C-47BD-B5C3-F2699FD0F3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "32B849F2-CD4B-45DB-86DD-77248ED82C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3FAB9E0E-D0D9-45F6-88CA-F16F859C33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "5A08EDE3-035D-4A4F-AF2A-FDFC02264841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "28A15818-8AB8-4253-9D82-D968B05D4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C59BDECB-3184-4BE3-91B5-4703170D6E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F861A072-D917-4BF5-99D3-3C9AD99A70EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "79F08C0E-5A28-4A8D-9987-CC273A38CDB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F8A9187E-AAF3-4186-9014-13D304463F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "19022A88-C140-4C64-8BAD-43CE0E448D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "36170C72-162C-44F1-8291-DCF12AAC3D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "97E0DE96-A8CA-4395-8955-3223754A7678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "95D892B0-08CD-479B-8DBA-2E296A2139EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "18B1353C-D7FF-4B05-A0E0-17E06BB0BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "16E5978D-49B7-4948-A57F-D0903CC2726B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "D9FA1BA0-6E3F-46FD-BBEC-0546A3B973B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "175E800A-6295-4EDD-AD76-AED50C4ED29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DD429092-758C-40E2-9B62-552062DE5C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4B124905-C4EB-4943-BF9D-97DD9C63C773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F1382D94-3442-4770-99BC-A803DB7D99CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "CCF8ED4C-E275-4CCD-8D37-EFBB858731FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "72682900-3DEA-43E8-9E60-04D8AA575353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2614708B-D88A-45D1-989A-EC1F18B2ECF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "744B9E1F-ADB9-4B4B-AFAD-EAD5C91EEBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "A43E17E5-B98E-4ED2-8745-DCEEBF7D122D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "48101840-E58F-4E2D-BA2D-8D07F76E1EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "20669ACD-4EA1-4B4A-A26B-E4F702B7FB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7FC1D9F9-FFC7-46DD-B5BD-518198BD6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "56285B40-74FB-4AE4-9998-09D3CC2FA76B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4322AC03-A133-4778-A2F1-AD509764BB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E4779EAE-28C3-454F-853C-45D7A4B264BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "34EB1A01-873A-4395-84D9-B048E2E12A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "389FB05C-C41F-4162-B868-472A6FEE18BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "EBE430A8-4D97-4BAC-ABCE-4FE10766B8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4A657B85-FF9B-4ED8-BAEE-1BABC7CA2955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "944C87F4-591A-46A3-A6BE-68CF070D2557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "83FB8E69-0103-4FAA-94D8-DA1FDF0532BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "6A5CA6EF-184A-4D35-A430-8D708041C139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7264CABF-8603-445F-8728-A53575239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "776B722D-0DA6-4994-9323-06165E562489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "77A16675-CD3A-427B-888E-B1D8A51189AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B28A24AD-C225-45B3-8156-5A8107A7073C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DF9D2BE0-A57B-40B8-821F-65C29D9E6CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "22B75008-7F05-4923-88D9-0D6619568C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C4A5D3CC-282D-484F-99E3-5D087F759C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "8799CB21-5F98-4368-A1BC-2746438757CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7A2D0F4D-432E-4E3F-AFC4-5FE00BBA309E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B4315F2E-5272-4D09-80AF-A65AE52E37CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9CCD4355-CE24-4F14-A348-BB76470E4DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "FF31C77E-67CA-481E-B4E2-2AE2941A4CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "79D7994A-ABDF-4F02-841D-B082917CA9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7B33EFE6-68BB-46FD-834D-B767641E1AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "71FFFD6C-1243-480F-874E-3548EED2D471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http:4.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "76906A3F-9A22-453F-BCCF-35C248E6788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http:4.3.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E7A176BB-A188-44A9-9E52-D385B13D328F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http.winhttphandler:4.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DF881FCD-8E4C-47AC-ABED-05F805D3DED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http.winhttphandler:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "06C3E2C7-C113-4224-8F4F-3BDD3B800B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.security:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "EE31A209-11BA-45CB-8DC7-8E6CCBCEEC36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.security:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F376D1B3-5801-4BC3-B060-39DC928A9838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.websockets.client:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2EBDCB70-2C4C-4EDC-8DF9-6CA99732F404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.websockets.client:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "0ACC7FBF-34A3-4A95-A7B0-396AB194976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.text.encodings.web:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "AA8408AC-5380-4C77-BA49-C236F0CBB51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.text.encodings.web:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E73FEB32-4CCB-460F-BC5B-E9BBFB8A6F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aspnet/Announcements/issues/239",
        "source" : "secure@microsoft.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aspnet/Announcements/issues/239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0254",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services on Microsoft SharePoint Server 2013 SP1, Office Word Viewer, SharePoint Enterprise Server 2016, and Word 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-0264 and CVE-2017-0265."
      }, {
        "lang" : "es",
        "value" : "Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office para Mac 2011, Office para Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services en Microsoft SharePoint Server 2013 SP1, Office Word Viewer, SharePoint Enterprise Server 2016 y Word 2016, permiten una vulnerabilidad de ejecución de código remota cuando el programa no puede manejar inapropiadamente los objetos en la memoria, también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-0264 y CVE-2017-0265."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "0D84FC39-29AA-4EF2-ACE7-E72635126F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "447CCA6E-9955-4771-82DD-925380F3C439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B12493-4287-4AAD-9A18-D3FC3FCBE172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1400A-836A-4E48-B2CD-2B0A9A8241BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_rt:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "558B8B5E-125A-4370-A6E9-3CB75808D7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B6572-E7DF-4CC2-B70B-9B31BE1B6A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038443",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0254",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0255",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka \"Microsoft SharePoint XSS Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Foundation 2013 SP1 presenta una vulnerabilidad de elevación de privilegios cuando no desinfecta adecuadamente una solicitud web especialmente modificada, también conocida como \"Microsoft SharePoint XSS Vulnerability\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98107",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0255",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0256",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de suplantación de identidad cuando el Core de ASP.NET no puede sanear apropiadamente las peticiones web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D49ACA-0755-425C-9162-8D40D7AADDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB52597-3458-4816-8432-7948CA21B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEB20C7-882C-44DB-86BF-FC56D4B5CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86207D1B-AE1B-4826-B07A-75815A5ED06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96E6585-EA7C-47A7-B6EF-9926758E90DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292C4DAD-1CBB-41DF-9E45-F8D594C03097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_model_view_controller:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5B65AF-6AE0-4CB0-9877-E8EF1C1A1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E7A0531D-F1A2-46D8-B8A4-AE53BC691C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BC76DD26-1A09-419D-9156-16042FF7D508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2A701C76-6AC7-4230-B0C5-9CD91010349C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "6E801676-656E-43F6-8C4E-EE0BD5EAF23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "69E0C257-E39A-4404-AFE5-4D15BFA2DD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DE818227-C9F3-49BA-80D1-FA49FA46B8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.abstractions:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B7E8D173-9F85-4796-8A97-A77A531A3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "893BD886-23DC-41E9-9DD1-C367F1638CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BA58DBE2-9E83-4D69-A8DD-AB4E0CBD17D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2F9CCC49-348F-44A3-8412-17B689B0B0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "40ACE580-63FC-44A6-A1A3-19113BCF96B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "88D4AEE2-23B8-4FE6-A118-66735EF8BA5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3A31726B-E001-4568-9538-150C438D4D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.apiexplorer:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "22473819-A864-4568-BB4F-B1B61D6BE768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "25F6E532-9282-4444-BE83-1D4254B78E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3D3B725F-E01E-4B44-B6FE-D384CB081880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "CD9CA7E6-4622-48CE-87DD-43850E6A3D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9F0BE208-E908-4D55-ABC0-01899A7BCF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BEB9143D-39A5-4A1A-8CF6-50A234476914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "784D8767-E542-4BEA-AC04-190EB86ACE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.cors:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B051C0F9-2D90-4F21-A4A3-49E52E4580F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "24849B2C-4475-4F63-99F8-D63AC7455AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E53251EE-7C63-4597-817D-E0E046D45E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C4B607A3-3637-4785-A7FA-074B370B57A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "10769FE6-90C1-41EF-B59C-2DF602798AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "BEE6B70C-4E71-4EA2-9B3A-1B118CEE8461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9F2FF0F8-0447-442F-99C7-AAE364942263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.dataannotations:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "82A352B2-00B5-40EB-A053-3871999FF549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "1CBD8554-F155-4265-9ABA-27F2CFDB6645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "1D0612F5-8621-4FEB-B84D-6116CD92C671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "D917236C-B53D-454C-9FCD-4D0F48849C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B337AA31-B98C-47BD-B5C3-F2699FD0F3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "32B849F2-CD4B-45DB-86DD-77248ED82C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "3FAB9E0E-D0D9-45F6-88CA-F16F859C33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.json:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "5A08EDE3-035D-4A4F-AF2A-FDFC02264841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "28A15818-8AB8-4253-9D82-D968B05D4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C59BDECB-3184-4BE3-91B5-4703170D6E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F861A072-D917-4BF5-99D3-3C9AD99A70EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "79F08C0E-5A28-4A8D-9987-CC273A38CDB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F8A9187E-AAF3-4186-9014-13D304463F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "19022A88-C140-4C64-8BAD-43CE0E448D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.formatters.xml:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "36170C72-162C-44F1-8291-DCF12AAC3D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "97E0DE96-A8CA-4395-8955-3223754A7678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "95D892B0-08CD-479B-8DBA-2E296A2139EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "18B1353C-D7FF-4B05-A0E0-17E06BB0BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "16E5978D-49B7-4948-A57F-D0903CC2726B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "D9FA1BA0-6E3F-46FD-BBEC-0546A3B973B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "175E800A-6295-4EDD-AD76-AED50C4ED29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.localization:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DD429092-758C-40E2-9B62-552062DE5C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4B124905-C4EB-4943-BF9D-97DD9C63C773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F1382D94-3442-4770-99BC-A803DB7D99CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "CCF8ED4C-E275-4CCD-8D37-EFBB858731FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "72682900-3DEA-43E8-9E60-04D8AA575353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2614708B-D88A-45D1-989A-EC1F18B2ECF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "744B9E1F-ADB9-4B4B-AFAD-EAD5C91EEBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "A43E17E5-B98E-4ED2-8745-DCEEBF7D122D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "48101840-E58F-4E2D-BA2D-8D07F76E1EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "20669ACD-4EA1-4B4A-A26B-E4F702B7FB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7FC1D9F9-FFC7-46DD-B5BD-518198BD6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "56285B40-74FB-4AE4-9998-09D3CC2FA76B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4322AC03-A133-4778-A2F1-AD509764BB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E4779EAE-28C3-454F-853C-45D7A4B264BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.razor.host:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "34EB1A01-873A-4395-84D9-B048E2E12A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "389FB05C-C41F-4162-B868-472A6FEE18BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "EBE430A8-4D97-4BAC-ABCE-4FE10766B8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "4A657B85-FF9B-4ED8-BAEE-1BABC7CA2955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "944C87F4-591A-46A3-A6BE-68CF070D2557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "83FB8E69-0103-4FAA-94D8-DA1FDF0532BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "6A5CA6EF-184A-4D35-A430-8D708041C139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.taghelpers:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7264CABF-8603-445F-8728-A53575239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "776B722D-0DA6-4994-9323-06165E562489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "77A16675-CD3A-427B-888E-B1D8A51189AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B28A24AD-C225-45B3-8156-5A8107A7073C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DF9D2BE0-A57B-40B8-821F-65C29D9E6CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "22B75008-7F05-4923-88D9-0D6619568C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "C4A5D3CC-282D-484F-99E3-5D087F759C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.viewfeatures:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "8799CB21-5F98-4368-A1BC-2746438757CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7A2D0F4D-432E-4E3F-AFC4-5FE00BBA309E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "B4315F2E-5272-4D09-80AF-A65AE52E37CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "9CCD4355-CE24-4F14-A348-BB76470E4DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.0.3:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "FF31C77E-67CA-481E-B4E2-2AE2941A4CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "79D7994A-ABDF-4F02-841D-B082917CA9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "7B33EFE6-68BB-46FD-834D-B767641E1AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:microsoft.aspnetcore.mvc.webapicompatshim:1.1.2:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "71FFFD6C-1243-480F-874E-3548EED2D471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http:4.1.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "76906A3F-9A22-453F-BCCF-35C248E6788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http:4.3.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E7A176BB-A188-44A9-9E52-D385B13D328F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http.winhttphandler:4.0.1:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "DF881FCD-8E4C-47AC-ABED-05F805D3DED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.http.winhttphandler:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "06C3E2C7-C113-4224-8F4F-3BDD3B800B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.security:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "EE31A209-11BA-45CB-8DC7-8E6CCBCEEC36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.security:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "F376D1B3-5801-4BC3-B060-39DC928A9838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.websockets.client:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "2EBDCB70-2C4C-4EDC-8DF9-6CA99732F404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.net.websockets.client:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "0ACC7FBF-34A3-4A95-A7B0-396AB194976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.text.encodings.web:4.0.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "AA8408AC-5380-4C77-BA49-C236F0CBB51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system.text.encodings.web:4.3.0:*:*:*:*:asp.net:*:*",
            "matchCriteriaId" : "E73FEB32-4CCB-460F-BC5B-E9BBFB8A6F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aspnet/Announcements/issues/239",
        "source" : "secure@microsoft.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aspnet/Announcements/issues/239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0258",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0259."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607, 1703 y Windows Server 2016 de Microsoft, permite a los atacantes autenticados obtener información confidencial por medio de un documento especialmente diseñado, también se conoce como \"Windows Kernel Information Disclosure Vulnerability\", una vulnerabilidad diferente de los CVE-2017-0175, CVE-2017-0220 y CVE-2017-0259."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98112",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038446",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0258",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42006/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0259",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0258."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows versión 8.1, Windows Server 2012 R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607, 1703 y Windows Server 2016 de Microsoft, permite a los atacantes autenticados obtener información confidencial por medio de un documento especialmente diseñado, también se conoce como \"Windows Kernel Information Disclosure Vulnerability\", una vulnerabilidad diferente de los CVE-2017-0175, CVE-2017-0220 y CVE-2017-0258."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98113",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0259",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42007/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0261",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:04.987",
      "lastModified" : "2025-10-22T00:16:00.377",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281."
      }, {
        "lang" : "es",
        "value" : "Office 2010 SP2, Office 2013 SP1 y Office 2016 de Microsoft, permiten una vulnerabilidad de ejecución de código remota cuando el software no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0262 y CVE-2017-0281."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98104",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038444",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0261",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0262",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.037",
      "lastModified" : "2025-10-22T00:16:00.523",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281."
      }, {
        "lang" : "es",
        "value" : "Office 2010 SP2, Office 2013 SP1 y Office 2016 de Microsoft, permiten una vulnerabilidad de ejecución de código remota cuando el software no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0261 y CVE-2017-0281."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98279",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0262",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0263",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.097",
      "lastModified" : "2025-10-22T00:16:00.663",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Los controladores del modo kernel en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607, 1703 y Windows Server 2016 de Microsoft, permiten a los usuarios locales alcanzar privilegios por medio de una aplicación diseñada, también se conoce como \"Win32k Elevation of Privilege Vulnerability\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Win32k Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98258",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038449",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0263",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44478/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xiaodaozhi.com/exploit/117.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xiaodaozhi.com/exploit/117.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0263",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0264",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0265."
      }, {
        "lang" : "es",
        "value" : "Microsoft PowerPoint 2011 para Mac, permite una vulnerabilidad de ejecución de código remota cuando el software no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-0254 y CVE-2017-0265."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD8FD65-5B71-4EDB-938E-C721497D1516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98282",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0264",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0265",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0264."
      }, {
        "lang" : "es",
        "value" : "Microsoft PowerPoint 2011 para Mac, permite una vulnerabilidad de ejecución de código remota cuando el software no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-0254 y CVE-2017-0264."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD8FD65-5B71-4EDB-938E-C721497D1516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98285",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038448",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0265",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0266",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka \"Microsoft Edge Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Edge en la manera en que los motores de scripting de Microsoft afectados renderizan al manejar objetos en memoria, también se conoce como \"Microsoft Edge Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98276",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0266",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0267",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block versión 1.0 (SMBv1), permite una vulnerabilidad de divulgación de información en la manera en que Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, manejan determinadas peticiones, también se conocen como \"Windows SMB Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275 y CVE-2017-0276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98259",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038432",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0267",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0268",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0267, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block versión 1.0 (SMBv1), permite una vulnerabilidad de divulgación de información en la manera en que Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, manejan determinadas peticiones, también se conocen como \"Windows SMB Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0267, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275 y CVE-2017-0276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98261",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0268",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0269",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka \"Windows SMB Denial of Service Vulnerability\". This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280."
      }, {
        "lang" : "es",
        "value" : "El protocolo Server Message Block versión 1.0 (SMBv1) de Microsoft, permite la denegación de servicio cuando un atacante envía peticiones especialmente diseñadas al servidor, también se conoce como \"Windows SMB Denial of Service Vulnerability\". El ID de este CVE es diferente de CVE-2017-0273 y CVE-2017-0280."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98263",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038433",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0269",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0270",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block versión 1.0 (SMBv1), permite una vulnerabilidad de divulgación de información en la manera en que Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, manejan determinadas peticiones, también se conocen como \"Windows SMB Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0267, CVE-2017-0268, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275 y CVE-2017-0276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98264",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0270",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0271",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block versión 1.0 (SMBv1), permite una vulnerabilidad de divulgación de información en la manera en que Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, manejan determinadas peticiones, también se conocen como \"Windows SMB Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0274, CVE-2017-0275 y CVE-2017-0276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98265",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038432",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0271",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0272",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka \"Windows SMB Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0277, CVE-2017-0278, and CVE-2017-0279."
      }, {
        "lang" : "es",
        "value" : "El servidor de Microsoft Server Message Block versión 1.0 (SMBv1) en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, permite a un atacante ejecutar código remoto por la manera en que maneja determinadas peticiones, también se conoce como \"Windows SMB Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0277, CVE-2017-0278 y CVE-2017-0279."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98260",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0272",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0273",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:05.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka \"Windows SMB Denial of Service Vulnerability\". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280."
      }, {
        "lang" : "es",
        "value" : "El Server Message Block 1.0 de Microsoft (SMBv1) permite la denegación de servicio cuando un atacante envía solicitudes especialmente diseñadas al servidor, también conocida como \"Vulnerabilidad de denegación de servicio de Windows SMB\". Este CVE ID es exclusivo de CVE-2017-0269 y CVE-2017-0280."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98274",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038433",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0273",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0274",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0275, and CVE-2017-0276."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block versión 1.0 (SMBv1), permite una vulnerabilidad de divulgación de información en la manera en que Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, manejan determinadas peticiones, también se conocen como \"Windows SMB Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0275 y CVE-2017-0276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98266",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0274",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0275",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, and CVE-2017-0276."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) permite una vulnerabilidad de divulgación de información en la forma en que Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 gestionan determinadas solicitudes, también conocida como \"Vulnerabilidad de divulgación de información de Windows SMB\". Este ID CVE es exclusivo de CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274 y CVE-2017-0276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98267",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038432",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0275",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0276",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, and CVE-2017-0275."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Message Block versión 1.0 (SMBv1), permite una vulnerabilidad de divulgación de información en la manera en que Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versión Gold, 1511, 1607 y 1703, y Windows Server 2016 de Microsoft, manejan determinadas peticiones, también se conocen como \"Windows SMB Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274 y CVE-2017-0275."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98268",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0276",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0277",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka \"Windows SMB Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0272, CVE-2017-0278, and CVE-2017-0279."
      }, {
        "lang" : "es",
        "value" : "El servidor Microsoft Server Message Block 1.0 (SMBv1) en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite a un atacante ejecutar código remoto por la forma en que se manejan ciertas solicitudes, también conocida como \"Vulnerabilidad de ejecución remota de código de Windows SMB\". Este CVE ID es exclusivo de CVE-2017-0272, CVE-2017-0278 y CVE-2017-0279."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98270",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038430",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0277",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0278",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka \"Windows SMB Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0272, CVE-2017-0277, and CVE-2017-0279."
      }, {
        "lang" : "es",
        "value" : "El servidor Microsoft Server Message Block 1.0 (SMBv1) en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite a un atacante ejecutar código remoto por la forma en que se manejan ciertas solicitudes, también conocida como \"Vulnerabilidad de ejecución remota de código de Windows SMB\". Este CVE ID es exclusivo de CVE-2017-0272, CVE-2017-0277 y CVE-2017-0279"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98271",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038430",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0278",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0279",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka \"Windows SMB Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0272, CVE-2017-0277, and CVE-2017-0278."
      }, {
        "lang" : "es",
        "value" : "El servidor Microsoft Server Message Block 1.0 (SMBv1) en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite a un atacante ejecutar código remoto por la forma en que se manejan ciertas solicitudes, también conocida como \"Vulnerabilidad de ejecución remota de código de Windows SMB\". Este CVE ID es exclusivo de CVE-2017-0272, CVE-2017-0277 y CVE-2017-0279."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98272",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038430",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0279",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0280",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka \"Windows SMB Denial of Service Vulnerability\". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273."
      }, {
        "lang" : "es",
        "value" : "El protocolo Server Message Block versión 1.0 (SMBv1) de Microsoft, permite la denegación de servicio cuando un atacante envía peticiones especialmente diseñadas al servidor, también se conoce como \"Windows SMB Denial of Service Vulnerability\". El ID de este CVE es diferente de CVE-2017-0269 y CVE-2017-0273."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98273",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0281",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-12T14:29:06.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0262."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2, Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016 y Skype for Business 2016, permiten una vulnerabilidad de ejecución de código remota cuando el software no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0261 y CVE-2017-0262."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C0BD17-4324-4DFF-9804-1825C4C182A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "597153BC-B8A7-45E5-AE3F-D897FAE4C7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98297",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0281",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0465",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34112914. References: QC-CR#1110747."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador ADSPRPC de Qualcomm, podría permitir a una aplicación maliciosa local ejecutar código arbitrario en el contexto del kernel. Este problema se clasifica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34112914. Referencias: QC-CR-1110747."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "0F11609D-D1B4-4DD6-8CC7-A224344E1E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98184",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0493",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protections for the lock screen. This issue is rated as Moderate due to the possibility of bypassing the lock screen. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32793550."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el Cifrado Basado en Archivos, podría permitir a un atacante malicioso local omitir las protecciones del sistema operativo para la pantalla de bloqueo. Este problema está clasificado como moderado debido a la posibilidad de omitir la pantalla de bloqueo. Producto: Android. Versiones: 7.0, 7.1.1. ID de Android: A-32793550."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98140",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0587",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35219737."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en libmpeg2 en Mediaserver, podría habilitar a un atacante usando un archivo especialmente diseñado para causar una corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema se clasifica como crítico debido a la posibilidad de ejecución de código remota en el contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35219737."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98119",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/a86eb798d077b9b25c8f8c77e3c02c2f287c1ce7",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/a86eb798d077b9b25c8f8c77e3c02c2f287c1ce7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0588",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34618607."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en el archivo id3/ID3.cpp en libstagefright en Mediaserver, podría habilitar a un atacante usando un archivo especialmente diseñado para causar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema se clasifica como crítico debido a la posibilidad de ejecución de código remota en el contexto del proceso Mediaserver. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34618607."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98120",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/6f1d990ce0f116a205f467d9eb2082795e33872b",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/6f1d990ce0f116a205f467d9eb2082795e33872b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0589",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34897036."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en libhevc en Mediaserver, podría habilitar a un atacante usando un archivo especialmente diseñado para causar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema se clasifica como crítico debido a la posibilidad de ejecución de código remota en el contexto del proceso Mediaserver. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34897036."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98122",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/bcfc7124f6ef9f1ec128fb2e90de774a5b33d199",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/bcfc7124f6ef9f1ec128fb2e90de774a5b33d199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0590",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35039946."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en libhevc en Mediaserver, podría habilitar a un atacante usando un archivo especialmente diseñado para causar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema se clasifica como crítico debido a la posibilidad de ejecución de código remota en el contexto del proceso Mediaserver. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35039946."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98123",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/45c97f878bee15cd97262fe7f57ecea71990fed7",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/45c97f878bee15cd97262fe7f57ecea71990fed7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0591",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34097672."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en libavc en Mediaserver, podría habilitar a un atacante usando un archivo especialmente diseñado para causar corrupción de memoria durante el procesamiento de archivos y datos multimedia. Este problema se clasifica como crítico debido a la posibilidad de ejecución de código remota en el contexto del proceso Mediaserver. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34097672."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98124",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/5c3fd5d93a268abb20ff22f26009535b40db3c7d",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/5c3fd5d93a268abb20ff22f26009535b40db3c7d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0592",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34970788."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en el archivo FLACExtractor.cpp en libstagefright en Mediaserver podría habilitar a un atacante que utiliza un archivo especialmente diseñado para causar una corrupción de la memoria durante el procesamiento de datos y archivos multimedia. Este problema es valorado como Crítico debido a la posibilidad de ejecución de código remota dentro del contexto del proceso Mediaserver. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34970788."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98125",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/acc192347665943ca674acf117e4f74a88436922",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/acc192347665943ca674acf117e4f74a88436922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0593",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114230."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en las API del Framework podría habilitar a una aplicación maliciosa local para obtener acceso a permisos personalizados. Este problema es valorado como Alto porque es un desvío general para las protecciones del sistema operativo que aíslan los datos de aplicación de otras aplicaciones. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34114230."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0594",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34617444."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el archivo codecs/aacenc/SoftAACEncoder2.cpp en libstagefright en Mediaserver podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema es valorado como Alto debido a que podría ser usado para conseguir acceso local a capacidades elevadas, que normalmente no son accesibles para una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34617444."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98128",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/594bf934384920618d2b6ce0bcda1f60144cb3eb",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/594bf934384920618d2b6ce0bcda1f60144cb3eb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0595",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34705519."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en libstagefright en Mediaserver podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema es valorado como Alto debido a que podría ser usado para conseguir acceso local a capacidades elevadas, que normalmente no son accesibles para una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34705519."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98129",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/5443b57cc54f2e46b35246637be26a69e9f493e1",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/5443b57cc54f2e46b35246637be26a69e9f493e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0596",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34749392."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en libstagefright en Mediaserver podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema es valorado como Alto debido a que podría ser usado para conseguir acceso local a capacidades elevadas, que normalmente no son accesibles para una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-34749392."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98130",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/5443b57cc54f2e46b35246637be26a69e9f493e1",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/5443b57cc54f2e46b35246637be26a69e9f493e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0597",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34749571."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Audioserver podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto de un proceso privilegiado. Este problema es valorado como Alto debido a que podría ser usado para conseguir acceso local a capacidades elevadas, que normalmente no son accesibles para una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34749571."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98131",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0598",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34128677."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en las API del Framework podría habilitar a una aplicación maliciosa local para omitir las protecciones del sistema operativo que aíslan los datos de aplicación de otras aplicaciones. Este problema es valorado como Alto debido a que podría ser usado para conseguir acceso a datos a los que la aplicación no tiene acceso. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34128677."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98133",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0599",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34672748."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio remota en libhevc en Mediaserver podría habilitar a un atacante a que utilice un archivo especialmente diseñado para causar la suspensión o reinicio de un dispositivo. Este problema es valorado de Alta severidad debido a la posibilidad de una denegación de servicio remota. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34672748."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98134",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/a1424724a00d62ac5efa0e27953eed66850d662f",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/a1424724a00d62ac5efa0e27953eed66850d662f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0600",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35269635."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio remota en libstagefright en Mediaserver podría habilitar a un atacante a que utilice un archivo especialmente diseñado para causar la suspensión o reinicio de un dispositivo. Este problema es valorado de Alta severidad debido a la posibilidad de una denegación de servicio remota. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35269635."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/961e5ac5788b52304e64b9a509781beaf5201fb0",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/961e5ac5788b52304e64b9a509781beaf5201fb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0601",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction requirements. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35258579."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios en Bluetooth podría habilitar potencialmente a una aplicación maliciosa local para aceptar archivos dañinos compartidos por medio de bluetooth sin permiso de usuario. Este problema es valorado como Moderado debido a la omisión local de los requisitos de interacción de usuario. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-35258579."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98137",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0602",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate due to details specific to the vulnerability. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34946955."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Bluetooth podría habilitar a una aplicación maliciosa local para omitir las protecciones del sistema operativo que aíslan los datos de aplicación de otras aplicaciones. Este problema es valorado como Moderado debido a los detalles específicos de la vulnerabilidad. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34946955."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98141",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0603",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35763994."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en libstagefright en Mediaserver podría habilitar a un atacante a que utilice un archivo especialmente diseñado para causar la suspensión o reinicio de un dispositivo. Este problema es valorado como Moderado porque requiere una configuración de dispositivo poco común. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35763994."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98143",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/36b04932bb93cc3269279282686b439a17a89920",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/36b04932bb93cc3269279282686b439a17a89920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0604",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-35392981. References: QC-CR#826589."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de potencia de Qualcomm del kernel podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Crítico debido a la posibilidad de un compromiso local permanente del dispositivo, que puede requerir actualizar de nuevo el sistema operativo para reparar el dispositivo. Producto: Android. Versiones: N/A. ID de Android: A-35392981. Referencias: QC-CR#826589."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98151",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0605",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.720",
      "lastModified" : "2023-11-07T02:37:45.647",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0606",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34088848. References: QC-CR#1116015."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34088848. Referencias: QC-CR#1116015."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98168",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0607",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400551. References: QC-CR#1085928."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-35400551. Referencias: QC-CR#1085928."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98171",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0608",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35400458. References: QC-CR#1098363."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35400458. Referencias: QC-CR#1098363."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98172",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0609",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399801. References: QC-CR#1090482."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35399801. Referencias: QC-CR#1090482."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98174",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0610",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399404. References: QC-CR#1094852."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35399404. Referencias: QC-CR#1094852."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0611",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393841. References: QC-CR#1084210."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35393841. Referencias: QC-CR#1084210."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98177",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0612",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:01.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34389303. References: QC-CR#1061845."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Secure Execution Environment Communicator de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-34389303. Referencias: QC-CR#1061845."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98231",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0613",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35400457. References: QC-CR#1086140."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Secure Execution Environment Communicator de  Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35400457. Referencias: QC-CR#1086140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98186",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0614",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399405. References: QC-CR#1080290."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de Qualcomm Secure Execution Environment Communicator podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35399405. Referencias: QC-CR#1080290."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98187",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0615",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34259126. References: M-ALPS03150278."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de potencia de MediaTek podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-34259126. Referencias: M-ALPS03150278."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98188",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0616",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34470286. References: M-ALPS03149160."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de interrupción de administración del sistema de MediaTek podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-34470286. Referencias: M-ALPS03149160."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98189",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0617",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34471002. References: M-ALPS03149173."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de video de MediaTek podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-34471002. Referencias: M-ALPS03149173."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98190",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0618",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35100728. References: M-ALPS03161536."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de la cola de comandos de MediaTek podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. ID de Android: A-35100728. Referencias: M-ALPS03161536."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98191",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0619",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35401152. References: QC-CR#826566."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador del controlador pin de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-35401152. Referencias: QC-CR#826566."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98192",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0620",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35401052. References: QC-CR#1081711."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador Secure Channel Manager de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35401052. Referencias: QC-CR#1081711."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98193",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0621",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35399703. References: QC-CR#831322."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de cámara de Qualcomm podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-35399703. Referencias: QC-CR#831322."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98196",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0622",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Goodix touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32749036. References: QC-CR#1098602."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de pantalla táctil de Goodix podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del kernel. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-32749036. Referencias: QC-CR#1098602."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98198",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0623",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32512358."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el cargador de arranque de HTC podría habilitar a una aplicación maliciosa local para ejecutar código arbitrario dentro del contexto del cargador de arranque. Este problema es valorado como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32512358."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98199",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0624",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34327795. References: QC-CR#2005832."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador Wi-Fi de Qualcomm podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Alto porque podría ser usado para acceder a datos confidenciales sin un permiso explícito del usuario. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34327795. Referencias: QC-CR#2005832."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98200",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0625",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. References: M-ALPS03161531."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de la cola de comandos de MediaTek podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Alto porque podría ser usado para acceder a datos confidenciales sin un permiso explícito del usuario. Producto: Android. Versiones: N/A. ID de Android: A-35142799. Referencias: M-ALPS03161531."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98201",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0626",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393124. References: QC-CR#1088050."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador del motor criptográfico de Qualcomm podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Alto porque podría ser usado para acceder a datos confidenciales sin un permiso explícito del usuario. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35393124. Referencias: QC-CR#1088050."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98202",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0627",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33300353."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador UVC del kernel podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-33300353."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98205",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3674-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3674-2/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3674-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3674-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0628",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34230377. References: QC-CR#1086833."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de cámara de Qualcomm podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34230377. Referencias: QC-CR#1086833."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98211",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0629",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35214296. References: QC-CR#1086833."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de cámara de Qualcomm podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35214296. Referencias: QC-CR#1086833."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98212",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0630",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el subsistema de rastreo del kernel podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-34277115."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98213",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0631",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399756. References: QC-CR#1093232."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de cámara de Qualcomm podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-35399756. Referencias: QC-CR#1093232."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98216",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0632",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35392586. References: QC-CR#832915."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de códec de sonido de Qualcomm podría habilitar a una aplicación maliciosa local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-35392586. Referencias: QC-CR#832915."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98221",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0633",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-36000515. References: B-RB#117131."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador Wi-Fi de Broadcom podría habilitar a un componente malicioso local para acceder a los datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. ID de Android: A-36000515. Referencias: B-RB # 117131."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98223",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0634",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32511682."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de pantalla táctil de Synaptics podría habilitar a una aplicación maliciosa local para acceder a datos fuera de sus niveles de permiso. Este problema es valorado como Moderado porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-32511682."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98224",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0635",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-05-12T15:29:02.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio remota en el archivo HevcUtils.cpp en libstagefright en Mediaserver podría habilitar a un atacante a que use un archivo especialmente diseñado para causar una suspensión o reinicio del dispositivo. Este problema es valorado como Bajo debido a los detalles específicos de la vulnerabilidad. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-35467107."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/523f6b49c1a2289161f40cf9fe80b92e592e9441",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/523f6b49c1a2289161f40cf9fe80b92e592e9441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2122",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-12T18:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en Nessus, en las versiones 6.8.0, 6.8.1, 6.9.1 y 6.9.2 permite a los atacantes remotos autenticados inyectar scripts web o HTML arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344995CB-4E95-42AE-B909-A4148148E40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63616621-2753-4095-B1E6-71289422D099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F128AEB9-6D5F-47C8-B119-7D8061C6F8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250F614B-0BFB-4DBA-B78C-E3DA99DE0240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523F2759-5610-4F03-BA8D-60C20D9FB57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN87760109/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-01",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN87760109/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2157",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-12T18:29:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in installers for The Public Certification Service for Individuals \"The JPKI user's software (for Windows 7 and later)\" Ver3.1 and earlier, The Public Certification Service for Individuals \"The JPKI user's software (for Windows Vista)\", The Public Certification Service for Individuals \"The JPKI user's software\" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en los instaladores para El Servicio de Certificación Público para \"The JPKI user's software (for Windows 7 and later)\" individuales Versión 3.1 y anteriores,  El Servicio de Certificación Público para \"The JPKI user's software (para Windows Vista)\" individuales, El Servicio de Certificación Público para \"The JPKI user's software\" individuales Versión 2.6 y anteriores que estuvieron disponibles hasta el 27 de abril de 2017 permite a los atacantes remotos alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jpki:the_public_certification_service_for_individuals:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "FAF6DA38-9883-45BF-80DE-68FD8269209A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jpki:the_public_certification_service_for_individuals:*:*:*:*:windows_7:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "302CAB38-93BF-413E-86D9-DCE51394560D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jpki:the_public_certification_service_for_individuals:-:*:*:*:windows_vista:*:*:*",
            "matchCriteriaId" : "5438913B-AB0E-48C0-8BFC-4EC83A35ABBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN39605485/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.jpki.go.jp/download/win.html#dl",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN39605485/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.jpki.go.jp/download/win.html#dl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2163",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-12T18:29:00.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en SOY CMS en versiones 1.8.1 a 1.8.12 permite a atacantes autenticados leer archivos arbitrarios mediante shop_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D060DF-DF3C-4CE9-BC3B-9CC1408A04EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116BC2BF-44A6-409C-A22F-9361386D60F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28692E0A-F41B-41E6-8339-566B2BA944E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E1A3CF-2671-4E1A-9331-574B923D2DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E250C-5FD5-45C8-A527-2C22BA748ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892384B-4AE4-43E7-BDCC-00F96362A1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9AD215-0223-4452-B859-0F79F1A55D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF504454-B3E8-494A-86D8-AB68A58E0BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7E980B-9B25-430C-A8FD-EFC59DEE1E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB22671-D08D-49AF-9D97-EE1435DA9F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E627BF-C070-4076-8582-D3A7E2B9DABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F72D69-24C8-42CF-851E-7BAF5B2612AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN51819749/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51819749/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2164",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-12T18:29:00.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en SOY CMS con el instalador 1.8.12 y en versiones anteriores, permite a los atacantes inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n-i-agroinformatics:soy_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.12",
            "matchCriteriaId" : "2A7E042D-552E-42B6-8974-0B6900076FE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN51978169/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51978169/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2167",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-12T18:29:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de PrimeDrive Desktop Application versión 1.4.4 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo ejecutable especialmente diseñado en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbank:primedrive_desktop_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.4",
            "matchCriteriaId" : "76A7C0FB-4D3A-4465-BEE3-376FF25918A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.softbank.jp/biz/news/cloud/170426/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN16248227/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.softbank.jp/biz/news/cloud/170426/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN16248227/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7474",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-12T19:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly.  An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks."
      }, {
        "lang" : "es",
        "value" : "Se encontró que el adaptador de Keycloak Node.js 2.5 - 3.0 no controló correctamente los símbolos no válidos. Un atacante podría utilizar esta falla para omitir la autenticación y obtener acceso a información restringida, o posiblemente llevar a cabo otros ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-253"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293C81B0-D88C-4219-AB11-CD85144E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.0:cr1:*:*:*:*:*:*",
            "matchCriteriaId" : "A926EAEF-798A-4CE0-862F-3D9B5BDC0613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9EC356-A999-4CFB-8091-AEA76FAB0CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A48D798-909D-457F-8D0D-74CD686679E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0DBE63-7B46-4841-BE10-F0EDE7B2F8A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA4E71-08F5-4CCB-B0C8-3D140704BF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD34084-6B9F-43A8-B0EC-B5ABCED7862B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1366536F-BA86-49CB-98FB-6C0AA80B4B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6904521-34F0-4481-8914-5EEF385D2249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BA3E71-4CC7-4E35-AA9F-AFB41C66AD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak-nodejs-auth-utils:3.0.0:cr1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC11E39C-767D-4385-9371-DC03A8DD1E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1203.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1445271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7484",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-12T19:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que algunas funciones de estimación de selectividad en PostgreSQL, en versiones anteriores a la 9.2.21, versiones 9.3.x anteriores a la 9.3.17, versiones 9.4.x anteriores a la 9.4.12, versiones 9.5.x anteriores a la 9.5.7 y versiones 9.6.x anteriores a la 9.6.3, no verificaban los privilegios de usuario antes de ofrecer información de pg_statistic, lo que probablemente implique un filtrado de información. Un atacante sin privilegios podría utilizar este fallo para robar información de tablas a las que, de otra forma, no tendría acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.20",
            "matchCriteriaId" : "20D48E22-78D1-461D-ABE1-C8F578A17CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3851",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98459",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1678",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.postgresql.org/about/news/1746/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.postgresql.org/about/news/1746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7485",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-12T19:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server."
      }, {
        "lang" : "es",
        "value" : "En PostgreSQL, en versiones 9.3.x anteriores a la 9.3.17, versiones 9.4.x anteriores a la 9.4.12, versiones 9.5.x anteriores a la 9.5.7, y versiones 9.6.x anteriores a la 9.6.3, se ha descubierto que la variable de entorno PGREQUIRESSL ya no requería una conexión SSL/TLS a un servidor PostgreSQL. Un atacante Man-in-the-Middle (MitM) activo podría utilizar este fallo para eliminar la protección SSL/TLS de una conexión entre un cliente y un servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-390"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3851",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1678",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.postgresql.org/about/news/1746/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.postgresql.org/about/news/1746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7486",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-12T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server."
      }, {
        "lang" : "es",
        "value" : "Las versiones 8.4 a 9.6 de PostgreSQL son vulnerables a un filtrado de información en la vista pg_user_mappings que revela contraseñas de servidores extranjeros a cualquier usuario que tenga privilegio USAGE en el servidor extranjero asociado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F30CA60-0A82-45CD-8044-CE245393593D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C991F71-1E27-47A6-97DC-424FC3EF6011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5740C7AA-1772-41D8-9851-3E3669CD8521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970338CD-A680-4DD0-BD27-459B0DDA4002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99C579D-44C0-40A4-A4EB-CBCF40D0C2FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9E57FA-5EAE-4698-992D-146C6310E0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66CDEC1-FB2E-49B7-A8BE-38E43C8ED652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DF2937-9C51-4768-BAB1-901BCA636ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515C0ECD-2D95-4B6E-8E2F-DAF94E4A310F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0EB754-7A71-40FA-9EAD-44914EB758C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1089D316-D5A3-4F2D-9E52-57FD626A1D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17D9158-E85A-4436-9180-E8546CF8F290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CBBE6E-8FDA-46AD-96A9-8C6CFFE97ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0D13E-6B06-42E9-BEB9-C8FCC3A4E2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB79FB06-4712-4DE8-8C0B-5CEE8530828D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7054A3D4-8C52-4636-B135-1078B8DF1D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6763B2A-00C4-4AAB-8769-9AAEE4BAA603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5618200C-91E9-4501-8585-039A4629E072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD7B25B-F29A-4B73-B63B-F00DD9E9BC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEF48E4-FB94-497F-8A33-19217A0F092E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19496ADE-E995-4D22-8635-A7C94EBD8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D38EDA4-67CA-449A-B7FC-33CCD63698AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC8A4B8-BDFE-46AE-BF7D-7B3FA7FE63F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD4DE67-9E3C-4F79-8AAB-344C1C46C618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB718D2-97AA-4D61-AA4B-2216EEF55F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605C06BF-54A0-40F8-A01E-8641B4A83035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1F5B75-78D5-408E-8148-CA23DCED9CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DE8C27-0E0A-4428-B25D-054D4FC6FEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F609DDE4-0858-4F83-B8E6-7870196E21CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349F02AF-013E-4264-9717-010293A3D6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047926F2-846A-4870-9640-9A4F2804D71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0165D8-0BFA-4D46-95A3-45A03DC086FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6CF6A0-43DC-4C64-A3C4-01EB36F6672B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8251C0-9CAE-4608-BC11-75646A601408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC024E5D-122D-4E3D-AD24-759AB5940F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723336B5-405A-4236-A507-2C26E591CF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9E11A8-2B28-4A6B-BC04-4C556CFA2B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EF44F0-183E-4375-849A-2E6CD65D395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380657D1-F847-4D71-B0C7-D055117E49E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B12EFB2-9856-41CC-9BD6-A93E4ED115BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48139AE4-24AC-4FE6-B26E-D39C0331CC00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FF4A48-2D26-41FA-9187-ABA7EF2B0B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D7F267-4B3C-4E3D-B1D5-52C15BED1873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8340B6-D85C-4928-BC74-217F5BBEC57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6F564A-3496-4165-9648-9701FDA6A617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087FBDA0-0970-43A4-A621-DB733C62BE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F134BFAA-DAE2-4888-AE58-6362BAE57EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4796DBEC-FF4F-4749-90D5-AD83D8B5E086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79108278-D644-4506-BD9C-F464C6E817B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CF0AA0-41CD-4D50-BA7A-BF8846115C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965E1A9D-BB23-4C0B-A9CA-54A1855055B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F37C66-0AFE-4D59-8867-BDBCE656774E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE53AE6-232C-4068-98D1-7749007C3CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD38139-FD17-41E7-8D10-7731D8203CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC0B41F-38FF-4D41-9E31-D666A84BB2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591CB08-5CEB-45EB-876F-417DCD60AF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B79735-4CF5-4038-9FC4-12A58790B15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A74DAF9-516D-44BC-B09A-73395EF72873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58318BE-FB71-4183-A1F4-5FD207885A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D931436-34EB-4C42-8F2B-713662DF6627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2289C7-7E77-41E7-94A6-44B1F9F17CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DDEEEC-492D-4F45-B009-3642887843BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F676407-46E1-4737-9162-0E6AB1D3E8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F203450-E642-4B22-987E-4F128D8882B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A693598-9233-402C-8C14-6A7AD5CE71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30385E70-95EB-4040-A45C-118D142067E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD7471D-E6D7-41F6-8754-78ABFC72074E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2333E8E4-C769-42B3-8F04-A5FA61515C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D8D008-C4D9-4D24-9524-83BE68192C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD3341-4D4F-4B66-885F-A8723D1E1F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE48BA12-4BF9-4558-996F-20D401FF09D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39D4A7C-C801-44CD-8E47-E02F8E62AF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD27648F-E2FF-4779-97F9-2632DCC6B16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFB4916-8B59-4534-804C-CF9DA1B18508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3413A3AB-45A3-48E1-9B30-1194C4E7D49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5760CE83-4802-42A0-9338-E1E634882450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41009E-4028-4D82-B8D0-8B949EDC0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832F3EBE-A92C-4FB3-BF3C-0E7B750F966B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1571EE80-55A6-4F91-909B-C46BA19EC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848E3BC-293A-4A75-BEB7-C2F1637AD3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC9133E-94FC-4199-BD69-BBB46CF3799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200172CE-40AB-49E3-93D1-9947E3CBFFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90B21A9-19A7-4DCB-A2FE-C558CCB6BBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924D1F84-EC50-44C3-A156-DC8E3A5E3909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5EAF3B-B148-4B57-8E4E-0B5365003DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CE8DB4-CD97-4F60-9080-9FB093BD60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5AA780-4378-4959-9256-510C65E6E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C9EB31-5D8E-4583-BC95-700F53854964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700FF66-108C-47C2-B4C2-1CB0B5575EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239F26B4-CFB2-4D7A-939E-0215A336A490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C32070D-D751-4D3E-9457-5B1D1C551E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADABD34-25A1-46D3-AEFB-249E912A723A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53E81C9-5693-4929-BC19-DEBAEF686E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B92B02-44DD-40D4-94F7-A3EE4621D854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB6018C-3FC5-4D4E-BA7C-07C0A3B47976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ED9A2E-8169-4470-AE61-54829B11BDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9671475-BC67-436F-B2B1-5128347B3C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3851",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1678",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.postgresql.org/about/news/1746/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.postgresql.org/about/news/1746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T19:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML). A resource such as a malicious third-party aircraft could exploit this to damage files belonging to the user. Both this issue and CVE-2016-9956 are directory traversal vulnerabilities in Autopilot/route_mgr.cxx - this one exists because of an incomplete fix for CVE-2016-9956."
      }, {
        "lang" : "es",
        "value" : "En FlightGear anterior a versión 2017.2.1, la interfaz FGCommand permite sobrescribir cualquier archivo al que el usuario tenga acceso de escritura, pero no con datos arbitrarios: solo con el contenido de un flightplan (XML) de FlightGear. Un recurso como un aeronave maliciosa de terceros podría explotar esto para dañar los archivos que pertenecen al usuario. Tanto este problema y el CVE-2016-9956 son vulnerabilidades de salto de directorio en el archivo Autopilot/route_mgr.cxx; este se presenta debido a una solución incompleta para el CVE-2016-9956."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flightgear:flightgear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017.2",
            "matchCriteriaId" : "82D731B1-5535-44CE-B59D-6D21D6A99E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/flightgear/flightgear/ci/faf872e7f71ca14c567ac7080561fc785d8d2fd0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/flightgear/flightgear/ci/faf872e7f71ca14c567ac7080561fc785d8d2fd0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8244",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-05-12T20:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable \"dbg_buf\", \"dbg_buf->curr\" and \"dbg_buf->filled_size\" could be modified by different threads at the same time, but they are not protected with mutex or locks. Buffer overflow is possible on race conditions. \"buffer->curr\" itself could also be overwritten, which means that it may point to anywhere of kernel memory (for write)."
      }, {
        "lang" : "es",
        "value" : "En la función core_info_read e inst_info_read en todas las versiones de Android de CAF usando el kernel de Linux, las variables \"dbg_buf\", \"dbg_buf-)curr\" y \"dbg_buf-)filled_size\" pueden ser modificadas por diferentes hilos al mismo tiempo, pero no están protegidos con mutex o locks. Un desbordamiento de búfer es posible sobre condiciones de carrera. \"buffer-)curr\" en sí también podría ser sobrescrita, lo que quiere decir que puede apuntar a cualquier parte de la memoria del kernel (para escritura)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98547",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/buffer-overflow-msmvidc-debugfs-driver-coreinforead-and-instinforead-cve-2017-8244",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/buffer-overflow-msmvidc-debugfs-driver-coreinforead-and-instinforead-cve-2017-8244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8245",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-05-12T20:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bounds memory copy occurs."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, mientras se procesa una petición SVC de voz que no es estándar especificando un tamaño de carga útil que desbordará su propio tamaño declarado, provoca una copia de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98543",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.codeaurora.org/out-bounds-read-when-processing-voice-svc-request-cve-2017-8245",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.codeaurora.org/out-bounds-read-when-processing-voice-svc-request-cve-2017-8245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8246",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-05-12T20:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check, such as msm_pcm_volume_ctl_put(), which means this freed memory could be used."
      }, {
        "lang" : "es",
        "value" : "En la función msm_pcm_playback_close() en todas las versiones de Android de CAF usando el kernel de Linux, prtd es asignado a substream-)runtime-)private_data. Más tarde, prtd es liberado. Sin embargo, prtd no está saneado y se ajusta a NULL, resultando en un puntero colgante. Hay otras funciones que acceden a la misma memoria (substream-)runtime-)private_data) con una comprobación NULL, tal y como en la función msm_pcm_volume_ctl_put(), lo que significa que se puede usar esta memoria liberada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/use-after-free-alsa-pcm-playback-kernel-module-cve-2017-8246",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/use-after-free-alsa-pcm-playback-kernel-module-cve-2017-8246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T20:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string."
      }, {
        "lang" : "es",
        "value" : "La función zend_string_extend en el archivo Zend/zend_string.h en PHP hasta de la versión 7.1.5 no impide cambios en los objetos de cadena que resultan en una longitud negativa, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o posiblemente tener otro impacto no especificado  explotando el uso de scripts .= con una cadena larga."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.24",
            "matchCriteriaId" : "4491E273-5CD7-4133-89BF-182ED8C3E7D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.11",
            "matchCriteriaId" : "35A8B10D-C9FF-474F-BEC1-196F6DDC4948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98518",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241227-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5654",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-05-12T21:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes."
      }, {
        "lang" : "es",
        "value" : "En Ambari 2.4.x en versiones anteriores a la 2.4.3 y en la versión 2.5.0 de Ambari, un usuario autorizado de Ambari Hive View podría ganar acceso de lectura no autorizado a archivos almacenados en el host en el que el servidor Ambari ejecuta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243741C6-FCA5-4E8F-93A6-033144214F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B2179-C5A7-4802-9A3C-580BF8153285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C282AEEA-8E12-4B62-8535-B23EFFA0D188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow."
      }, {
        "lang" : "es",
        "value" : "La función edge_bulk_in_callback en drivers/usb/serial/io_ti.c en el kernel de Linux anterior a 4.10.4 permite a los usuarios locales obtener información sensible (en el dmesg ringbuffer y syslog) de la memoria del kernel no inicializada usando un dispositivo USB manipulado (aparentando ser un io_ti USB serie) para activar un desbordamiento inferior de enteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.3",
            "matchCriteriaId" : "6ED8EA80-4953-4664-BF7B-1F35D965EA2A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=654b404f2a222f918af9b0cd18ad469d0c941a8e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98451",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/654b404f2a222f918af9b0cd18ad469d0c941a8e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=654b404f2a222f918af9b0cd18ad469d0c941a8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/654b404f2a222f918af9b0cd18ad469d0c941a8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-12T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling."
      }, {
        "lang" : "es",
        "value" : "La función omninet_open en drivers/usb/serial/omninet.c en kernel de Linux anterior a 4.10.4 permite a los usuarios locales causar una denegación de servicio (agotamiento de tty) aprovechando el manejo incorrecto del contador de referencia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.3",
            "matchCriteriaId" : "6ED8EA80-4953-4664-BF7B-1F35D965EA2A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30572418b445d85fcfe6c8fe84c947d2606767d8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98462",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/30572418b445d85fcfe6c8fe84c947d2606767d8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30572418b445d85fcfe6c8fe84c947d2606767d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/30572418b445d85fcfe6c8fe84c947d2606767d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7487",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-14T22:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface."
      }, {
        "lang" : "es",
        "value" : "La función ipxitf_ioctl en el archivo net/ipx/af_ipx.c en el kernel de Linux hasta la versión 4.11.1, maneja inapropiadamente conteos de referencias, lo que permite a los usuarios locales causar una denegación de servicio (uso de memoria previamente liberada) o posiblemente tener otro impacto no especificado por medio de una llamada ioctl SIOCGIFADDR fallida para una interfaz de IPX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "8C1901E2-6C4D-488B-A7CE-F7E14A38418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.55",
            "matchCriteriaId" : "92A95C1A-1941-4789-B2F3-687F85106E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.70",
            "matchCriteriaId" : "6B6B892D-2153-4B26-A53A-2757488ABBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.30",
            "matchCriteriaId" : "05FA3C9C-F982-4407-89BC-F8936979C1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.3",
            "matchCriteriaId" : "24D5182D-708B-4C85-9FFA-591A649330A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee0d8d8482345ff97a75a7d747efc309f13b0d80",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1447734",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ee0d8d8482345ff97a75a7d747efc309f13b0d80",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/757549/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee0d8d8482345ff97a75a7d747efc309f13b0d80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1447734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ee0d8d8482345ff97a75a7d747efc309f13b0d80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/757549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-14T22:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mailcow 0.14, as used in \"mailcow: dockerized\" and other products, has CSRF."
      }, {
        "lang" : "es",
        "value" : "mailcow 0.14, se usa en \"mailcow: dockerized\" y otros productos, tiene CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailcow:mailcow\\:_dockerized:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C783D13-652B-4576-B61D-B1C56AA50F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mailcow/mailcow-dockerized/pull/268/commits/3c937f75ba5853ada175542d5c4849fb95eb64cd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mailcow/mailcow-dockerized/pull/268/commits/3c937f75ba5853ada175542d5c4849fb95eb64cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-14T22:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule."
      }, {
        "lang" : "es",
        "value" : "La función sized_string_cmp en YARA 3.5.0 permite a los atacantes remotos provocar una denegación de servicio (uso de memoria previamente liberada y cierre inesperado de la aplicación) mediante una regla manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VirusTotal/yara/commit/053e67e3ec81cc9268ce30eaf0d6663d8639ed1e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/658",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/053e67e3ec81cc9268ce30eaf0d6663d8639ed1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-14T22:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can (1) create new administrator user accounts and take over the entire application, (2) create regular user accounts, or (3) change configuration parameters such as tax rates and the enable/disable status of PayPal payment modules."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en Simple Invoices versión 2013.1.beta.8, permiten a atacantes remotos secuestrar la autenticación de administradores para peticiones que pueden (1) crear nuevas cuentas de usuario de administrador y tomar control de toda la aplicación, (2) crear cuentas de usuario normales, o (3) cambiar los parámetros de configuración, tales como tax rates y el estado de habilitación y inhabilitación de los módulos de pago de PayPal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpleinvoices:simple_invoices:2013.1:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "D66ABC94-E4AD-4E4D-9F6D-82BD15F5C5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/simpleinvoices/simpleinvoices/issues/270",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/simpleinvoices/simpleinvoices/issues/270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T10:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Desktop Central antes de la build 100082 permite a los atacantes remotos obtener el control sobre los escritorios activos conectados mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_desktop_central:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E41A83-931E-4F6C-AFEB-6B03E26D411C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com/products/desktop-central/cve-2017-7213-remote-control-privilege-violation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/desktop-central/cve-2017-7213-remote-control-privilege-violation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5655",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-05-15T14:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host."
      }, {
        "lang" : "es",
        "value" : "En Ambari desde la versión 2.2.2 hasta la 2.4.2 y en la 2.5.0, puede darse el caso de que haya datos sensibles almacenados en archivos temporales en el host del servidor de Ambari. Cualquier usuario autenticado en el host puede leer los archivos temporales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40ED1582-73DA-4CFE-9B2A-765A464FB205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.2.2:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EA965D-7D10-4C4E-A4A7-762538BDFEB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "37DCE19A-294D-4384-92CB-42B36F759F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243741C6-FCA5-4E8F-93A6-033144214F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "8185C0EB-4BF3-41EF-AD85-3A7AFFFAD9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B2179-C5A7-4802-9A3C-580BF8153285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9046DB2D-E7DF-434C-BE67-759BD85E0B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECC970E-2645-4B03-9E28-16359C5022BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9668FD5A-C08E-403B-8B6F-04FFA3C6296D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.2:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "699F0806-D841-4955-A101-448E3DC62E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C40CB9-5E15-481F-9519-01820C348039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C282AEEA-8E12-4B62-8535-B23EFFA0D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.5.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA49EF4-F633-401D-AE87-569E85ABC0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBBC4A8-AD6B-4B9D-ADAB-2DD436993260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ambari:2.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBCECF-6079-4330-8BB2-CAD56B938997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7489",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T14:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link."
      }, {
        "lang" : "es",
        "value" : "En Moodle 2.x y 3.x, usuarios autenticados remotos pueden hacerse dueños de blogs arbitrarios mediante la edición de un enlace de blog externo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E051AAC-EB40-491F-AF0E-EE8143C12567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B336EDB1-B691-4341-ABF1-B155B9181603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "91A69F58-0774-4730-A23A-C88452E92F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7E26A6-C043-4AFF-AA57-AC89C89F6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADBE87F-1855-453B-B958-0CB8A7908A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B53A7D2-BDA2-4185-97C3-977A04876A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51DFFA8-DFF0-429C-B697-F82F41621FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FD1565-0DA1-4BA8-A501-86F13D3D29ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB754AF-3DA4-4459-A53B-3BC7B78CE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E8383-C3F3-480C-B9A9-49633DAAEC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645E8B7B-1AE6-4F46-AFA9-7506685CD571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0316A26A-8B51-4226-8D56-4A798A2D798D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD39692F-BC98-4AE3-B31A-4592D3212F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF44C96-301D-4708-99A0-B0751A6980F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B68715-9AC2-43CD-BA74-9013A50588D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B618F19-F7A7-45E1-9DDC-B2BD18849FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A26FCB-0099-4723-917E-8157E59013B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713D9C9-C8A3-47AE-87AE-2D5314DB0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD035D85-A66A-43D0-9049-17134032C593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3989501E-B42A-4CCB-859C-862BE31B80B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF2D22F-577F-4F06-80E0-B107F474CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE87CB-0720-41F8-9B14-9FE670742A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC8BEC8-5A7D-4331-BE6D-68A82049C547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=352353",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=352353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7490",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T14:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing."
      }, {
        "lang" : "es",
        "value" : "En Moodle 2.x y 3.x, la búsqueda de blogs arbitrarios es posible debido a la falta de una comprobación de capacidades."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E051AAC-EB40-491F-AF0E-EE8143C12567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B336EDB1-B691-4341-ABF1-B155B9181603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "91A69F58-0774-4730-A23A-C88452E92F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7E26A6-C043-4AFF-AA57-AC89C89F6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADBE87F-1855-453B-B958-0CB8A7908A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B53A7D2-BDA2-4185-97C3-977A04876A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51DFFA8-DFF0-429C-B697-F82F41621FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FD1565-0DA1-4BA8-A501-86F13D3D29ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB754AF-3DA4-4459-A53B-3BC7B78CE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E8383-C3F3-480C-B9A9-49633DAAEC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645E8B7B-1AE6-4F46-AFA9-7506685CD571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0316A26A-8B51-4226-8D56-4A798A2D798D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD39692F-BC98-4AE3-B31A-4592D3212F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF44C96-301D-4708-99A0-B0751A6980F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B68715-9AC2-43CD-BA74-9013A50588D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B618F19-F7A7-45E1-9DDC-B2BD18849FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A26FCB-0099-4723-917E-8157E59013B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713D9C9-C8A3-47AE-87AE-2D5314DB0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD035D85-A66A-43D0-9049-17134032C593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3989501E-B42A-4CCB-859C-862BE31B80B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF2D22F-577F-4F06-80E0-B107F474CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE87CB-0720-41F8-9B14-9FE670742A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC8BEC8-5A7D-4331-BE6D-68A82049C547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=352354",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=352354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7491",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T14:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the \"number of courses displayed in the course overview block\" configuration setting."
      }, {
        "lang" : "es",
        "value" : "En Moodle 2.x y 3.x, existe la posibilidad de que se produzca un ataque CSRF que permite a los atacantes cambiar el ajuste de configuración \\\"number of courses displayed in the course overview block\\\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E051AAC-EB40-491F-AF0E-EE8143C12567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B336EDB1-B691-4341-ABF1-B155B9181603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "91A69F58-0774-4730-A23A-C88452E92F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7E26A6-C043-4AFF-AA57-AC89C89F6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADBE87F-1855-453B-B958-0CB8A7908A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B53A7D2-BDA2-4185-97C3-977A04876A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51DFFA8-DFF0-429C-B697-F82F41621FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FD1565-0DA1-4BA8-A501-86F13D3D29ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB754AF-3DA4-4459-A53B-3BC7B78CE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E8383-C3F3-480C-B9A9-49633DAAEC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645E8B7B-1AE6-4F46-AFA9-7506685CD571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0316A26A-8B51-4226-8D56-4A798A2D798D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD39692F-BC98-4AE3-B31A-4592D3212F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF44C96-301D-4708-99A0-B0751A6980F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B68715-9AC2-43CD-BA74-9013A50588D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B618F19-F7A7-45E1-9DDC-B2BD18849FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A26FCB-0099-4723-917E-8157E59013B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713D9C9-C8A3-47AE-87AE-2D5314DB0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:2.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD035D85-A66A-43D0-9049-17134032C593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3989501E-B42A-4CCB-859C-862BE31B80B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF2D22F-577F-4F06-80E0-B107F474CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE87CB-0720-41F8-9B14-9FE670742A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC8BEC8-5A7D-4331-BE6D-68A82049C547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=352355",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=352355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T14:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability)."
      }, {
        "lang" : "es",
        "value" : "Libmenu-cache 1.0.2 utiliza /tmp de manera insegura para un archivo socket, permitiendo a usuarios locales provocar un ataque de denegación de servicio (indisponibilidad del menú)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmenu-cache_project:libmenu-cache:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A2D9E7-C7A4-449B-A335-E3D38BCEC90F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/862570",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.lxde.org/gitweb/?p=lxde/menu-cache.git%3Ba=commit%3Bh=56f66684592abf257c4004e6e1fff041c64a12ce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/862570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.lxde.org/gitweb/?p=lxde/menu-cache.git%3Ba=commit%3Bh=56f66684592abf257c4004e6e1fff041c64a12ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T14:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability)."
      }, {
        "lang" : "es",
        "value" : "PCManFM  1.2.5 utiliza /tmp de manera insegura para un archivo socket, permitiendo a usuarios locales provocar un ataque de denegación de servicio (indisponibilidad del menú)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcmanfm_project:pcmanfm:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419453FB-0EE9-4911-94C2-C0AAB9D51213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/862571",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.lxde.org/gitweb/?p=lxde/pcmanfm.git%3Ba=commit%3Bh=bc8c3d871e9ecc67c47ff002b68cf049793faf08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/862571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.lxde.org/gitweb/?p=lxde/pcmanfm.git%3Ba=commit%3Bh=bc8c3d871e9ecc67c47ff002b68cf049793faf08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0223",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-15T17:29:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka \"Scripting Engine Memory Corruption Vulnerability\". This vulnerability is unique from CVE-2017-0252."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Chakra Core en la forma en que se procesan los motores JavaScript cuando se manipulan objetos en la memoria. También conocida como \"Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos\". Esta vulnerabilidad es exclusiva de CVE-2017-0252."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038425",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://github.com/Microsoft/ChakraCore/pull/2959",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Microsoft/ChakraCore/pull/2959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0252",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-15T17:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka \"Scripting Engine Memory Corruption Vulnerability\". This vulnerability is unique from CVE-2017-0223."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución de código remota en Microsoft Chakra Core en la manera en que los motores de JavaScript renderizan cuando manejan objetos en la memoria. También se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Esta vulnerabilidad es diferente de CVE-2017-0223."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Microsoft/ChakraCore/pull/2959",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Microsoft/ChakraCore/pull/2959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6889",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-05-15T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow error within the \"foveon_load_camf()\" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros dentro de la función  foveon_load_camf() (dcraw_foveon.c) en LibRaw-demosaic-pack-GPL2 en versiones anteriores a la 0.18.2 puede explotarse para provocar una sobrelectura de búfer basada dinámica o heap."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw-demosaic-pack-gpl2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.1",
            "matchCriteriaId" : "E5F84F5C-43B5-416C-9F3E-065187FC602D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibRaw/LibRaw-demosaic-pack-GPL2/commit/194f592e205990ea8fce72b6c571c14350aca716",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75000/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw-demosaic-pack-GPL2/commit/194f592e205990ea8fce72b6c571c14350aca716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6890",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-05-15T18:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A boundary error within the \"foveon_load_camf()\" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un error de límite dentro de la función \"foveon_load_camf ()\" (dcraw_foveon.c) al inicializar una tabla huffman en LibRaw-demosaic-pack-GPL2 anterior a versión 0.18.2 puede ser explotado para causar un desbordamiento de búfer en la región stack de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw-demosaic-pack-gpl2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.1",
            "matchCriteriaId" : "E5F84F5C-43B5-416C-9F3E-065187FC602D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibRaw/LibRaw-demosaic-pack-GPL2/commit/194f592e205990ea8fce72b6c571c14350aca716",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75000/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw-demosaic-pack-GPL2/commit/194f592e205990ea8fce72b6c571c14350aca716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7478",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T18:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2."
      }, {
        "lang" : "es",
        "value" : "OpenVPN versión 2.3.12 y más recientes, son vulnerables a la Denegación de Servicio no autenticada del servidor por medio de un paquete de control grande recibido. Tenga en cuenta que este problema se corrige en versiones 2.3.15 y 2.4.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288EE3C5-C915-4273-B1F1-D53BC028C990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21C5FE2-2FF7-481F-B128-976EBA563208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF068FA2-03A0-4C7F-97B1-9CB5A49E9E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5C67A-34A4-4C7E-BCA9-AF3E5FC70AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "A857CA88-60B0-4D34-87B6-770B67981501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42297EE-B347-4BD8-A657-BDF0AA010C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A56E8-09C8-4DB2-9244-9E5E2BEC1821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "41ACD637-EF6B-40E4-BDE6-0EE7D6AEBAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4150AD-3F46-487D-BCF8-79D0AE2A092D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7663E-3EB5-44F4-B7DE-294A549A12BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038473",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41993/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41993/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7479",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T18:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker."
      }, {
        "lang" : "es",
        "value" : "OpenVPN versiones anteriores a 2.3.15 y anteriores a 2.4.2, son vulnerables a una aserción alcanzable cuando el contador del identificador de paquete se devuelve como resultado de una denegación de servicio del servidor por parte de un atacante autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.14",
            "matchCriteriaId" : "2B92389B-7815-40EC-AA21-14154621BFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5C67A-34A4-4C7E-BCA9-AF3E5FC70AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "A857CA88-60B0-4D34-87B6-770B67981501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42297EE-B347-4BD8-A657-BDF0AA010C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A56E8-09C8-4DB2-9244-9E5E2BEC1821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "41ACD637-EF6B-40E4-BDE6-0EE7D6AEBAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4150AD-3F46-487D-BCF8-79D0AE2A092D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7663E-3EB5-44F4-B7DE-294A549A12BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98443",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038473",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7495",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T18:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, which allows local users to obtain sensitive information from other users' files in opportunistic circumstances by waiting for a hardware reset, creating a new file, making write system calls, and reading this file."
      }, {
        "lang" : "es",
        "value" : "En el archivo fs/ext4/inode.c en el kernel de Linux anterior a versión 4.6.2, cuando es usado el modo data=ordered de ext4, maneja inapropiadamente una lista de necesidades de descarga antes de confirmar, lo que permite a los usuarios locales obtener información confidencial de los archivos de otros usuarios en circunstancias oportunistas al esperar un reinicio del hardware, crear un archivo nuevo, hacer llamadas al sistema de escritura y leer este archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.1",
            "matchCriteriaId" : "795D2A87-E785-47CB-80E2-388CCD1F5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06bd3c36a733ac27962fea7d6f47168841376824",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98491",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1450261",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/06bd3c36a733ac27962fea7d6f47168841376824",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06bd3c36a733ac27962fea7d6f47168841376824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1450261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/06bd3c36a733ac27962fea7d6f47168841376824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7498",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T18:29:00.433",
      "lastModified" : "2023-11-07T02:50:10.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-8934.  Reason: This candidate is a reservation duplicate of CVE-2017-8934.  Notes: All CVE users should reference CVE-2017-8934 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7499",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-15T18:29:00.467",
      "lastModified" : "2023-11-07T02:50:10.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-8933.  Reason: This candidate is a reservation duplicate of CVE-2017-8933.  Notes: All CVE users should reference CVE-2017-8933 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en Halliburton LogView Pro 10.0.1 permite que atacantes remotos provoquen una denegación de servicio o, posiblemente, cualquier otro tipo de problema mediante un archivo .tif manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:halliburton:logview_pro:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF503A6-717E-43E7-832A-C1DCD40E390B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en Larson VizEx Reader 9.7.5 permite a los atacantes provocar una denegación de servicio (DoS) o posiblemente causar otro impacto mediante un archivo .tif manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgmlarson:vizex_reader:9.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB078780-F4C6-4640-A22B-E4928D40E4A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Quest Information Systems Indiana Voters versión 1.1.24 para Android no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo  man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gocivix:indiana_voters:1.1.24:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "3BC71AA4-8C97-4729-AFCA-B0F017A8559A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Fast Private Internet Search versiones 9.23.0 hasta 9.23.2 de MoboTap Dolphin Web Browser para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changyou:dolphin_web_browser:9.23.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "DE7CBF77-89B0-4EF5-95A3-F74DAC79DD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changyou:dolphin_web_browser:9.23.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B3633A4B-A2DF-4480-8772-6661DAAEEE95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Life Before Us Yo versión 2.5.8 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:life_before_us:yo.:2.5.8:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "1452E75F-322C-4E6F-8721-12D472AD581A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación de Radio Javan versiones 9.3.4 hasta 9.6.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.3.4:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E0A30CB6-B284-4F52-B34B-5E9C115B7FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.4:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "6927A6A0-38BC-4421-ADEA-0A664A7F567A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.4.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "70117B14-3EE6-4F18-81C0-9F918D829D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.4.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "94DE9E07-BBCC-4139-B7B5-7989FAB3426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.4.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E584A764-C172-4E15-9FC8-B3942A1DDA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.4.4:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "00A84E90-B596-4007-A92F-9723A8EB379D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.4.5:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "3F8F8E3A-B8DB-4E94-9CC4-55DA0CEB9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.5:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "12ABB616-F31F-4FEC-B15C-03AFF15EF49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.5.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "F373AEA6-E1A6-42D6-B7F1-56461B0EC3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.6:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "49B64EE1-D3BC-4B78-82AB-38D8C292BD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiojavan:radio_javan:9.6.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "37CE70A5-5335-40AA-B128-F42FA48E071D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Warner Bros. ellentube versiones 3.1.1 hasta 3.1.3 para iOS no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warnerbros:ellentube:3.1.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "DDFB620D-2E22-4544-9DDE-ECCEBEFCFE96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warnerbros:ellentube:3.1.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E0B26B50-9E9D-4DF3-A634-2DAD979FCFC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warnerbros:ellentube:3.1.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "F5F9CECD-DE1A-4EA7-B2A6-FCAB8F9A4E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Healthy Recipes and Grocery Deals versión 6.3 de Zipongo para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipongo_inc.:healthy_recipes_and_grocery_deals:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "B04675A2-183A-4BD6-ADA9-95654AD9F51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Interval International versiones 3.3 hasta 3.5.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interval_international:interval_international:3.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D8760B8E-EFA5-4A04-9A20-8BDF00285258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interval_international:interval_international:3.4:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "2B9B7308-DB5C-4245-BCDC-4CD526627E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interval_international:interval_international:3.5:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "77CB0405-AD6F-4854-A6B7-95BC8BE6AD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interval_international:interval_international:3.5.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "5E00ED12-C46A-4626-9324-D060D6F4D852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Healthy Diet & Grocery Food Scanner versiones 5.3.7 hasta 5.4.2 de YottaMark ShopWell para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottamark_inc.:shopwell_-_healthy_diet_\\&_grocery_food_scanner:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512AEED5-F182-4F27-802D-960D504D253D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottamark_inc.:shopwell_-_healthy_diet_\\&_grocery_food_scanner:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7013419C-903C-46B8-87E2-F0F7249F9AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottamark_inc.:shopwell_-_healthy_diet_\\&_grocery_food_scanner:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EB4590-7DD0-469F-8EE5-8253C7C0F9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottamark_inc.:shopwell_-_healthy_diet_\\&_grocery_food_scanner:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CD373F-8DD2-40C1-B565-CB0C4C3FE6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottamark_inc.:shopwell_-_healthy_diet_\\&_grocery_food_scanner:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AF85E-01C2-4AB5-9350-8C762A188BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottamark_inc.:shopwell_-_healthy_diet_\\&_grocery_food_scanner:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E5F9B-C0D7-4827-A190-88711144B9C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-15T18:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación PUMA PUMATRAC en versiones 3.0.2 para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que los atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puma:pumatrac:3.0.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "43F7AF9C-AB8A-41CF-A098-7BBA0982EE8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-16T10:29:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter."
      }, {
        "lang" : "es",
        "value" : "EAM versión V11.0 Build 201410 de INFOR, presenta inyección SQL por medio de los campos de búsqueda, relacionados con el parámetro filtervalue."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infor:enterprise_asset_management:11.0_build_201410:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2389EB51-C924-4795-95EB-65A5D19DA583"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/May/55",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42028/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42028/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-16T10:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "INFOR EAM V11.0 Build 201410 has XSS via comment fields."
      }, {
        "lang" : "es",
        "value" : "EAM V11.0 Build 201410 de INFOR, presenta un problema de tipo XSS por medio de los campos de comentarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infor:enterprise_asset_management:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14F1C8E-99F1-4824-9ACB-574D240FEDF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/May/54",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42029/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42029/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-16T10:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts."
      }, {
        "lang" : "es",
        "value" : "Admidio 3.2.8 tiene CSRF en adm_program/modules/members/members_function.php con un impacto de eliminar cuentas de usuario arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admidio:admidio:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE51C33A-C9BF-4299-AA27-5C19839588C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.0day.today/exploit/27771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Admidio/admidio/issues/612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://en.0day.today/exploit/27771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Admidio/admidio/issues/612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6885",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-05-16T16:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Un error al manejar ciertos comandos y servicios externos relacionados con el Inventory Agent y Beacon de FlexNet del Flexera Software FlexNet Manager Suite versiones 2017 anterior a 2017 R1 y versiones 2014 R3 hasta 2016 R1 SP1, pueden ser explotados para alcanzar privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1893249B-393C-4138-A83E-94DBA1CAAF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F8EB93-DA69-42A1-93E1-DE97D58301E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A77E6F8-A668-41B4-B12F-40F297EEDBBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C52C7-6546-4272-926B-CADBED1E1AC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76223/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76223/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6886",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-05-16T16:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error within the \"parse_tiff_ifd()\" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory."
      }, {
        "lang" : "es",
        "value" : "Un fallo dentro de la función \\\"parse_tiff_ifd()\\\" (internal/dcraw_common.cpp) en las versiones de LibRaw anteriores a la 0.18.2 podría explotarse para corromper la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.1",
            "matchCriteriaId" : "54CB3A8F-1F07-49F4-AC34-9199D0EA24AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3950",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98605",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75737/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75737/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6887",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-05-16T16:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A boundary error within the \"parse_tiff_ifd()\" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to \"DSLR-A100\" and containing multiple sequences of 0x100 and 0x14A TAGs."
      }, {
        "lang" : "es",
        "value" : "Un error de límites dentro de la función \"parse_tiff_ifd()\" (en el archivo internal/dcraw_common.cpp) en LibRaw versiones anteriores a 0.18.2, puede ser explotado para causar un corrupción de memoria por medio de, por ejemplo, un archivo KDC especialmente diseñado con el modelo establecido en \"DSLR-A100\" y que contenga múltiples secuencias de TAGs 0x100 y 0x14A."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.1",
            "matchCriteriaId" : "54CB3A8F-1F07-49F4-AC34-9199D0EA24AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3950",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98592",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75737/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-6/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/75737/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3825",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation for the size of a received ICMP packet. An attacker could exploit this vulnerability by sending a crafted ICMP packet to the local IP address of the targeted endpoint. A successful exploit could allow the attacker to cause a DoS of the TelePresence endpoint, during which time calls could be dropped. This vulnerability would affect either IPv4 or IPv6 ICMP traffic. This vulnerability affects the following Cisco TelePresence products when running software release CE8.1.1, CE8.2.0, CE8.2.1, CE8.2.2, CE 8.3.0, or CE8.3.1: Spark Room OS, TelePresence DX Series, TelePresence MX Series, TelePresence SX Quick Set Series, TelePresence SX Series. Cisco Bug IDs: CSCvb95396."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de paquetes de ingreso ICMP del software TelePresence Collaboration Endpoint (CE) de Cisco , podría permitir a un atacante remoto no autenticado causar que el endpoint TelePresence se recargue inesperadamente, resultando en una condición de negación de servicio (DoS). La vulnerabilidad es debido a una comprobación de entrada incompleta para el tamaño de un paquete ICMP recibido. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete ICMP diseñado hacia la dirección IP local del endpoint. Una explotación con éxito podría permitir que el atacante causar una DoS del endpoint TelePresence, durante el cual las llamadas del tiempo pudieron ser perdidas. Esta vulnerabilidad afectaría al tráfico ICMP de IPv4 o IPv6. Esta vulnerabilidad afecta a los siguientes productos TelePresence de Cisco cuando se ejecuta la versión de software CE8.1.1, CE8.2.0, CE8.2.1, CE8.2.2, CE 8.3.0, o CE8.3.1: Spark Room OS, TelePresence DX Series, TelePresence MX Series, TelePresence SX Serie Quick Set, TelePresence SX Series. ID de bug de Cisco: CSCvb95396."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_ce:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA23C42-4078-4C0F-9E5D-1EEE1C00F1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_ce:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F6385C-9C5D-4DE9-BCC7-F906AC70CA5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_ce:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB604DB-F42B-4503-89EB-8973D238B5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3EA16B-A4D0-4D04-9BA6-B22BFDF0F07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A5398C-0E8D-4E88-8158-C477E0D783C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EA4A25-FD65-4426-A1D8-F443A26C6629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F974368A-E789-45C6-ACAF-3568B6654DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE7EFB5-A298-496F-9453-B5D6E9D8ECC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30CD095-C26C-4F37-8250-ADA28033912C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0F6315-A9E3-436F-A307-C0837C289C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E26D49F-1625-4316-8642-C19AA7E0F7BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A22321-5104-4A7E-800A-893A6D4084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C14AD1-1551-45F4-AE1B-A6E53A712B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA36D2C-D23E-4042-AF27-EE9BA05DED7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D77931B-65B6-4CD5-B59B-5E2A3DD9B94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0D1FB3-94F1-45D6-9F83-36956DD11397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9693373F-39EF-4EFC-9D0F-D67D601495B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B322FAE-BFD5-46EB-9964-BA40BB2802B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30C4B86-7A76-45EC-808E-86E90D8BF4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F01B38D-CCEF-457F-BB2D-8A4E054B38A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED08A5E-9067-4337-81F7-ED1BBC983F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B2019C-1603-4080-9AE9-91EC0031BAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3FBAFD-8290-4A2E-B030-BE003BC9842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E7D084-F536-4C9B-809D-05AF57359463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692F9C-D9C1-412A-8CA0-04DA37509819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BF2C9-F26F-471C-A566-8EE06FECBB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98293",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038392",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ctp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ctp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3873",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is due to insufficient validation of PnP server responses. The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a factory reset has been issued. An attacker with the ability to respond to PnP configuration requests from the affected device can exploit the vulnerability by returning malicious PnP responses. If a Cisco Application Policy Infrastructure Controller - Enterprise Module (APIC-EM) is available on the network, the attacker would need to exploit the issue in the short window before a valid PnP response was received. If successful, the attacker could gain the ability to execute arbitrary code with root privileges on the underlying operating system of the device. Cisco has confirmed that the only vulnerable software version is 8.3.102.0. Cisco Bug IDs: CSCvb42386."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema Plug-and-Play (PnP) de los Puntos de Acceso Aironet 1800, 2800, y 3800 Series de Cisco que ejecutan una imagen de Lightweight Access Point (AP) o Mobility Express, podría permitir que un atacante adyacente no autenticado ejecute código arbitrario con privilegios root. La vulnerabilidad es debido a la comprobación insuficiente de las respuestas del servidor PnP. La funcionalidad PnP solo está activa mientras que el dispositivo no contenga una configuración, como un arranque por primera vez o después de que se haya emitido un restablecimiento de fábrica. Un atacante con la capacidad de responder a las peticiones de configuración PnP desde el dispositivo afectado puede explotar la vulnerabilidad mediante la devolución de respuestas PnP maliciosas. Si un Application Policy Infrastructure Controller - Enterprise Module (APIC-EM) de Cisco está disponible en la red, el atacante necesitaría explotar el problema en la ventana corta antes de que se recibiera una respuesta válida PnP. Si tiene éxito,  el atacante podría conseguir la capacidad de ejecutar código arbitrario con privilegios root en el sistema operativo subyacente del dispositivo. Cisco ha confirmado que la única versión de software vulnerable es 8.3.102.0. ID de bug de Cisco: CSCvb42386."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_access_point_firmware:8.3_102.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314B7D2D-41BB-4041-8131-4F931FD9C8D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4590D445-B4B6-48E6-BF55-BEA6BA763410"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848CC5CD-1982-4F31-A626-BD567E1C19F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E47788-9B54-42C5-AD83-428B22674575"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A333CD0B-4729-4E64-8B52-A3F5138F5B70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098A82FF-95F7-416A-BADD-C57CE81ACD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D5813-9223-4B3F-9DE2-F3EF854FC927"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98296",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038394",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3876",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this vulnerability by repeatedly sending unauthenticated gRPC requests to the affected device. A successful exploit could allow the attacker to crash the device in such a manner that manual intervention is required to recover. This vulnerability affects all Cisco IOS XR platforms that are running release 6.1.1 of Cisco IOS XR Software when the gRPC service is enabled on the device. The gRPC service is not enabled by default. Cisco Bug IDs: CSCvb14441."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el demonio Event Management Service (emsd) de los routers IOS XR de Cisco, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en el dispositivo afectado. La vulnerabilidad es debido a un manejo inapropiado de las peticiones gRPC. Un atacante podría explotar esta vulnerabilidad mediante el envío repetitivo de peticiones gRPC no autenticadas hacia el dispositivo afectado. Una explotación con éxito podría permitir al atacante bloquear el dispositivo de tal manera que se requiera la intervención manual para recuperarse. Esta vulnerabilidad afecta a todas las Plataformas de IOS XR de Cisco que están ejecutando la versión 6.1.1 del software IOS XR de Cisco  cuando el servicio gRPC esta habilitado en el dispositivo. El servicio gRPC no está habilitado por defecto. ID de bug de Cisco: CSCvb14441."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C48F47-B3A9-42D5-8C87-111AEA5BD408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CC4093-80C1-4B0C-82D2-647C625FF42D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98284",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038393",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ios-xr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ios-xr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3882",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service (DoS) condition. The remote code execution could occur with root privileges. The vulnerability is due to incomplete range checks of the UPnP input data, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a malicious request to the UPnP listening port of the targeted device. An exploit could allow the attacker to cause the device to reload or potentially execute arbitrary code with root privileges. This vulnerability affects all firmware releases of the Cisco CVR100W Wireless-N VPN Router prior to Firmware Release 1.0.1.22. Cisco Bug IDs: CSCuz72642."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de Universal plug-and-play (UPnP) en el router CVR100W Wireless-N VPN de Cisco, podría permitir a un atacante de capa 2 no autenticado, ejecutar código arbitrario o causar una condición de denegación de servicio (DoS). La ejecución de código remota podría producirse con privilegios root. La vulnerabilidad es debido a comprobaciones de rango incompletas de los datos de entrada UPnP, lo que podría dar como resultado a un desbordamiento de búfer. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición maliciosa hacia el puerto de escucha UPnP del dispositivo de destino. Una explotación podría permitir al atacante causar que el dispositivo se recargue o potencialmente ejecutar código arbitrario con privilegios root. Esta vulnerabilidad afecta a todas las versiones de firmware del enrutador CVR100W Wireless-N VPN de Cisco anterior a Versión de Firmware 1.0.1.22. ID de bug de Cisco: CSCuz72642."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D1AED9-624A-454E-9B73-853957947CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B18FD1-7AE6-4CFE-BABC-901530497D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72287189-EB01-44DC-B081-47286D576544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EAE238-2BB0-4B9B-AA93-B7D9D809E076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCC4E59-8D34-44F8-8964-B370962EEABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9B6CA4-0743-4438-8EA7-9665C6816DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C42F8-447D-4E27-BC0E-0097E9150460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FAC7D9-086A-4411-B7F2-211DF1652C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.5.4\\(gd\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E16DCB-C702-4BFE-9161-C3EE5FDF721A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E70A0FD-4551-419F-BAC8-1A0D1D4C1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D70C676-B906-4210-B002-24BB392A61A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155C482F-8BF4-46C9-BA1E-E636CE8269CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4B09BD-1992-4808-89D0-2A8DB2A0DE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57157941-8EE8-4A54-957A-56E3FC269124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:small_business_rv_router_firmware_1.0:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252E2C0F-2615-4415-955E-4E2E43DD80F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_wf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8287635D-78E7-4A1C-A1C3-C7C1C8BCDB37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w_wf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACB3BD3-FABD-49BA-A66D-AD394D95AB15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511C48D-9EA6-4521-988C-61E1035BEFA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39710CC4-1891-4E4B-AF65-AC2577CC8FFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_wf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55927BA3-5301-4F58-9E1C-A6811502D26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_wf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07841064-DF45-4636-9B7F-303CD6D4DF42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98287",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038391",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cvr100w1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cvr100w1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-16T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006."
      }, {
        "lang" : "es",
        "value" : "La aplicación de administración web HTTP en dispositivos Edgewater Networks Edgemarc, tiene una página oculta que permite establecer comandos definidos por el usuario, como rutas iptables específicas, etc.. Pueden utilizar esta página como un shell web esencialmente para ejecutar comandos, aunque no consigan retroalimentación del lado del cliente de la aplicación web: si el comando es válido, se ejecuta. Un ejemplo es el comando wget. La página que permite esto se ha confirmado en un firmware tan antiguo como el 2006."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ribboncommunications:edgemarc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C4112D-48DA-4829-9B4B-E5FF8B9491A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E720E7F6-0BDA-4C02-B69A-854C178C94A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D25CA9B-8D0D-45A2-8D00-03E0F7E40519"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4601:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F142C5-A17E-4AB8-BFC3-5AE338E53D13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C35E8B-21D7-4D84-9CE8-6E97FC0B5288"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5132F55-CC24-4D3B-80B8-B52551AF0DBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512891B5-D948-48E2-9C0F-1A77C71B8426"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4806:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD19254-9B77-453C-80EA-1A259D7BD036"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_4808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11ECF931-E24D-4562-8186-1482C3A5A4D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_7301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71932337-DE5A-4773-ACDB-A1A4766B2886"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ribboncommunications:edgemarc_7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F81DF2A-8C5F-4FE2-82B3-D4809FACC4E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6651",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occurs when the Short URL functionality is not activated. All releases of Cisco WebEx Meetings Server later than release 2.5MR4 provide this functionality. An attacker could exploit this vulnerability via an exposed parameter to search for indexed meeting information. A successful exploit could allow the attacker to obtain scheduled meeting information and potentially allow the attacker to attend scheduled, customer meetings. This vulnerability affects the following releases of Cisco WebEx Meetings Server: 2.5, 2.6, 2.7, 2.8. Cisco Bug IDs: CSCve25950."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en WebEx Meetings Server de Cisco, podría permitir que los atacantes remotos no autenticados consigan información que podría permitirles acceder a las reuniones programadas del cliente. La vulnerabilidad es debido a una configuración incompleta del archivo robots.txt en las soluciones WebEx alojadas por el cliente y se produce cuando la funcionalidad Short URL no está activada. Todas las versiones de WebEx Meetings Server de Cisco posteriores a versión 2.5MR4 proporcionan esta funcionalidad. Un atacante podría explotar esta vulnerabilidad por medio de un parámetro expuesto para buscar información de reunión indexada. Una explotación con éxito podría permitir al atacante obtener información programada de la reunión y potencialmente permitir que el atacante asista a las reuniones programadas de los clientes. Esta vulnerabilidad afecta a las siguientes versiones de WebEx Meetings Server de Cisco: 2.5, 2.6, 2.7, 2.8. ID de bug de Cisco: CSCve25950."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C7BE43-0F81-4550-813E-66D0844E9291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9043AE98-9A13-46F8-8E8A-BEC9E8EE0843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8289371-84B7-4342-9EA6-2844A9C5DCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4AF5A4-1B99-43F8-A659-7C57B033F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F492431-5AE7-439F-81F1-B96EAD773E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC640D5-C840-4ABB-BD22-9B60BBFE8DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9AC0A6-754F-4E20-A1E5-FBEC975D6B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB2094F-B0E1-4129-BFD6-9FE1687B0AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B75EA6-516D-4550-B83D-E0EFDAA25208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2A712-E8FD-460F-9A3C-3760082B8920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "932F97E6-5C33-45E4-A425-C511A4D875EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6F5080-355B-4A85-8DF4-D75D6A550C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC4CC18-3321-468F-8350-9304D4F7CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E30AA8C-23DB-4190-A82F-EC35C2D0A7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE8D8DD-7496-4F19-AC41-C3EE6B1771A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "E72E0470-E136-4053-9CFB-10F1593BBA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B669D-5A30-49CA-9F35-8F7AA5A2DF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9881CF16-F617-48DA-8CB8-08C3D943CCD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "368C0D98-DFFA-434E-8416-49F5862D20B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFFB01B-1B4F-4072-A68C-98C538DE34ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3F8E05-F2F7-4477-8237-4561A3BE4D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309C030-2F02-4E7E-B3E3-035B93DD1E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8309806-58A6-442D-AAA2-C368A28855DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A53388-C0C8-41FE-A7D1-670B9B17C02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0048F-B88D-47F6-89D6-B7EDDECBF700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ECA8FE-D587-4692-AA90-9706E44BAC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCD22A8-7E04-4782-AEB2-07878925A2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "42642F32-7B85-4CDE-A40E-A309FC98D35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396253A5-EC5F-429B-ABF3-20CB0A56E658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "E669D6E2-300B-4A4D-8A71-4B4FA447185E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.8_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04698E83-4906-4FD9-81C1-955A6D770898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98387",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038459",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6657",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol numbers do not overlap, Snort++ stores all protocol decoders in a single array. That makes it possible to craft packets that have IP protocol numbers in the ether type field which will confuse the Snort++ decoder. For example, an eth:llc:snap:icmp6 packet will cause a crash because there is no ip6 header with which to calculate the icmp6 checksum. Affected decoders include gre, llc, trans_bridge, ciscometadata, linux_sll, and token_ring. The fix adds a check in the packet manager to validate the ether type before indexing the decoder array. An out of range ether type will raise 116:473."
      }, {
        "lang" : "es",
        "value" : "Sourcefire Snort de Cisco versión 3.0 anterior a build 233, maneja inapropiadamente la comprobación de Ether Type. A partir de un tipo ether válido y números de protocolo IP no superpuestos, Snort++ almacena todos los decodificadores de protocolo en una sola matriz. Eso hace posible diseñar paquetes que tengan números de protocolo IP en el campo ether type que confundirá al decodificador Snort++. Por ejemplo, un paquete eth:llc:snap:icmp6 causará un bloqueo porque no existe encabezado ip6 con que calcular la suma de comprobación icmp6. Los decodificadores afectados incluyen gre, llc, trans_bridge, ciscometadata, linux_sll y token_ring. La corrección agrega una verificación en el administrador de paquetes para comprobar el tipo ether antes de indexar la matriz de decodificador. Un tipo ether fuera de rango elevará a 116:473."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:snort\\+\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF1C707-351E-4432-A14F-C5A73D528290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.snort.org/2017/05/snort-vulnerabilities-found.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038483",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170515-snort",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.snort.org/2017/05/snort-vulnerabilities-found.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6658",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-16T17:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem."
      }, {
        "lang" : "es",
        "value" : "Sourcefire Snort de Cisco versión 3.0 anterior a build 233, presenta una Lectura Excesiva de Búfer relacionada con el uso de una matriz del decodificador. El tamaño estaba cerca de uno haciendo posible leer más allá del final de la matriz con un tipo de ether de 0xFFFF. Al aumentar el tamaño de la matriz, se resuelve este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sourcefire_snort:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4724070C-D993-45C6-9647-DE420F600D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.snort.org/2017/05/snort-vulnerabilities-found.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038483",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170515-snort",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.snort.org/2017/05/snort-vulnerabilities-found.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7661",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-05-16T17:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz prior to 1.4.0, 1.3.2 and 1.2.4."
      }, {
        "lang" : "es",
        "value" : "Apache CXF Fediz, se envía con una serie de plugins específicos de contenedores para habilitar WS-Federation para aplicaciones. Una vulnerabilidad de estilo CSRF (Cross Style Request Forgery) se ha detectado en los plugins Spring 2, Spring 3, Jetty 8 y Jetty 9 en Apache CXF Fediz anteriores a versiones 1.4.0, 1.3.2 y 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "D2C87621-7F53-4C8C-AB12-E8ECC8341FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C058A-EDF4-4F3D-B72D-1DC2ABAE9E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A46C70E-D1D4-48B4-916B-7C3F106B0659"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-7661.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038497",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-7661.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7662",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-05-16T17:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active."
      }, {
        "lang" : "es",
        "value" : "Apache CXF Fediz, se envía con un servicio OpenId Connect (OIDC) que presenta un servicio de registro de clientes, que es una aplicación web sencilla que permite a los clientes ser creados, eliminados, etc. Una vulnerabilidad de estilo CSRF (Cross Style Request Forgery) se ha detectado en esta aplicación web en Apache CXF Fediz anterior a versiones 1.4.0 y 1.3.2, quiere decir que una aplicación web maliciosa podría crear nuevos clientes, o restablecer secretos, etc., después de que el usuario administrador haya iniciado sesión en el servicio de registro de cliente y la sesión este todavía activa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "01E19E46-27DB-46BE-BDA8-2DF69597EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEC56EB-6EFF-4AEA-8299-2A941D313C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-7662.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038498",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-7662.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7488",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-16T18:29:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames."
      }, {
        "lang" : "es",
        "value" : "La versión 6.2.8 de Authconfig es vulnerable a una exposición de información cuando utiliza SSSD para autenticarse contra servidores remotos dando lugar a una fuga de información sobre nombres de usuario existentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:authconfig_project:authconfig:6.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D1FEF4-323A-4A44-AB08-11E73C1C40E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101784",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2285",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1441604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pagure.io/authconfig/c/0972f61ad4b5657ed89cf953e8f58f6513096224?branch=master",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1441604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pagure.io/authconfig/c/0972f61ad4b5657ed89cf953e8f58f6513096224?branch=master",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T10:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en vshttpd (también se conoce como ioos) en HooToo Trip Mate 6 (TM6) versión de firmware 2.000.030 y anteriores, permite a los atacantes remotos no autenticados controlar el contador del programa por medio de un encabezado Cookie HTTP especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hootoo:trip_mate_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.000.030",
            "matchCriteriaId" : "4CC46014-0F38-40EE-A29B-4A332E8434AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hootoo:trip_mate_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811E9D9D-117B-49F0-A02B-F14CFD5096DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://debugtrap.com/2017/05/09/tm06-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://debugtrap.com/2017/05/09/tm06-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T10:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en vshttpd (también se conoce como ioos) en HooToo Trip Mate 6 (TM6) versión de firmware 2.000.030 y anteriores, permite a los atacantes remotos no autenticados controlar el contador del programa por medio de un parámetro fname  especialmente diseñado de una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hootoo:trip_mate_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.000.030",
            "matchCriteriaId" : "4CC46014-0F38-40EE-A29B-4A332E8434AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hootoo:trip_mate_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811E9D9D-117B-49F0-A02B-F14CFD5096DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://debugtrap.com/2017/05/09/tm06-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://debugtrap.com/2017/05/09/tm06-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T14:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files."
      }, {
        "lang" : "es",
        "value" : "La extensión de Codextrous B2J Contact (también se conoce como b2j_contact) anterior a versión 2.1.13 para Joomla!, permite un ataque de salto de directorio que omite un mecanismo de protección uniqid, esto facilita la lectura de archivos cargados arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-335"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codextrous:b2j_contact:*:*:*:*:*:joomla\\!:*:*",
            "versionEndIncluding" : "2.1.12",
            "matchCriteriaId" : "719D9203-ADB4-40D9-B57D-A8D9D71554FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T14:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a \"safe file extension\" protection mechanism, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "La extensión Codextrous B2J Contact, también conocida como b2j_contact en las versiones de Joomla! anteriores a la 2.1.13 permite que se realicen ataques de renombramiento que omiten un mecanismo de protección |\"safe file extension\\\", lo que provoca a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codextrous:b2j_contact:*:*:*:*:*:joomla\\!:*:*",
            "versionEndIncluding" : "2.1.12",
            "matchCriteriaId" : "719D9203-ADB4-40D9-B57D-A8D9D71554FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T14:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app."
      }, {
        "lang" : "es",
        "value" : "KDelibs de KDE antes de 4.14.32 y KAuth antes de 5.34 permiten que los usuarios locales obtengan privilegios de root por spoofing de un callerID y aprovechando una aplicación de ayuda privilegiada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kauth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.33",
            "matchCriteriaId" : "613FFB8B-CF03-4E1C-9D6D-C186A19B9F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdelibs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.31",
            "matchCriteriaId" : "08C24977-D991-43E7-AF7E-BA489EC00903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/10/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98412",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1449647",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.kde.org/kauth.git/commit/?id=df875f725293af53399f5146362eb158b4f9216a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cgit.kde.org/kdelibs.git/commit/?id=264e97625abe2e0334f97de17f6ffb52582888ab",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42053/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kde.org/info/security/advisory-20170510-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/10/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1449647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.kde.org/kauth.git/commit/?id=df875f725293af53399f5146362eb158b4f9216a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cgit.kde.org/kdelibs.git/commit/?id=264e97625abe2e0334f97de17f6ffb52582888ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kde.org/info/security/advisory-20170510-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T14:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service."
      }, {
        "lang" : "es",
        "value" : "smb4k anterior a versión 2.0.1, permite a los usuarios locales conseguir privilegios root mediante la explotación del fallo de comprobación de argumentos en el servicio auxiliar de montaje DBUS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smb4k_project:smb4k:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "1FC9ECA3-0663-40F8-99C5-0374B6986DA3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3951",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/10/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98690",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98737",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1449656",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.kde.org/smb4k.git/commit/?id=a90289b0962663bc1d247bbbd31b9e65b2ca000e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42053/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kde.org/info/security/advisory-20170510-2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/10/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1449656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.kde.org/smb4k.git/commit/?id=a90289b0962663bc1d247bbbd31b9e65b2ca000e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kde.org/info/security/advisory-20170510-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T14:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files."
      }, {
        "lang" : "es",
        "value" : "La extensión de Codextrous B2J Contact (también se conoce como b2j_contact) anterior a versión 2.1.13 para Joomla!, permite un ataque de salto de directorio que omite un mecanismo de protección uniqid y facilita la lectura de archivos cargados arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codextrous:b2j_contact:*:*:*:*:*:joomla\\!:*:*",
            "versionEndIncluding" : "2.1.12",
            "matchCriteriaId" : "719D9203-ADB4-40D9-B57D-A8D9D71554FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7493",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-17T15:29:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest."
      }, {
        "lang" : "es",
        "value" : "Quick Emulator (Qemu) integrado con VirtFS, con soporte para la compartición de directorios de host mediante Plan 9 File System(9pfs), es vulnerable a un problema de control de acceso incorrecto. Podría ocurrir mientras se accede a archivos de metadatos de virtfs en modo de seguridad mapped-file. Un usuario invitado podría emplear este error para escalar sus privilegios en el invitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/278",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98574",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451709",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T19:29:00.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file."
      }, {
        "lang" : "es",
        "value" : "El componente WebUI de Deluge anterior a versión 1.3.15, contiene una vulnerabilidad de salto de directorio que implica una petición en la que el nombre del archivo de renderizado no está asociado a ningún archivo de plantilla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluge-torrent:deluge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.14",
            "matchCriteriaId" : "45F401D7-78C0-4456-99A2-1BDDF8D62D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.15",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=41acade01ae88f7b7bbdba308a0886771aa582fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/862611",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=41acade01ae88f7b7bbdba308a0886771aa582fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/862611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4011",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request."
      }, {
        "lang" : "es",
        "value" : "Una incorporación de script (XSS) en vulnerabilidad de encabezados HTTP en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los atacantes remotos obtener información de sesión y cookie por medio de modificaciones de la petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4012",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via modification of the HTTP request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalamiento de privilegios en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los usuarios autenticados remotos visualizar información confidencial mediante la modificación de la petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4013",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header."
      }, {
        "lang" : "es",
        "value" : "Una Divulgación de Banner en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los atacantes remotos obtener información del producto por medio del encabezado de respuesta HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4014",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Session Side jacking en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los usuarios autenticados remotos visualizar, agregar y eliminar usuarios mediante la modificación de la petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4015",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Secuestro de Cliqueo en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los usuarios autenticados remotos inyectar script web o HTML arbitrario por medio del encabezado de respuesta HTTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4016",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header."
      }, {
        "lang" : "es",
        "value" : "Una divulgación del método del servidor web en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los atacantes remotos explotar y detectar otro agujero por medio del encabezado de respuesta HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4017",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-17T21:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface."
      }, {
        "lang" : "es",
        "value" : "Una divulgación de nombres de usuario en el servidor de McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los atacantes remotos visualizar la información del usuario por medio de la interfaz web del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-17T23:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Joomla! 3.7.x versiones anteriores a 3.7.1 permite a los atacantes ejecutar comandos SQL arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98515",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038522",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/692-20170501-core-sql-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42033/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44358/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/692-20170501-core-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42033/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44358/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:01.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets."
      }, {
        "lang" : "es",
        "value" : "GNU Binutils 2.28 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) mediante un archivo ELF manipulado. Esto está relacionado con la función byte_get_little_endian en elfcomm.c, la función get_unwind_section_word en readelf.c y con información de desenredado de ARM que contiene desplazamientos de palabras no válidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=f32ba72991d2406b21ab17edc234a2f3fa7fb23d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=f32ba72991d2406b21ab17edc234a2f3fa7fb23d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:01.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c."
      }, {
        "lang" : "es",
        "value" : "GNU Binutils 2.28 permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un archivo ELF manipulado con múltiples cabeceras de programa. Esto está relacionado con la función get_program_headers en readelf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=82156ab704b08b124d319c0decdbd48b3ca2dac5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=82156ab704b08b124d319c0decdbd48b3ca2dac5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:01.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt."
      }, {
        "lang" : "es",
        "value" : "GNU Binutils 2017-04-03 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación). Esto está relacionado con la función process_mips_specific en readelf.c, mediante un archivo ELF manipulado que da lugar a un intento de asignación de memoria de gran tamaño."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:01.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c."
      }, {
        "lang" : "es",
        "value" : "GNU Binutils 2.28 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de la aplicación) mediante un archivo ELF manipulado. Esto está relacionado con la gestión incorrecta de MIPS GOT en la función process_mips_specific en readelf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=75ec1fdbb797a389e4fe4aaf2e15358a070dcc19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c4ab9505b53cdc899506ed421fddb7e1f8faf7a3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=75ec1fdbb797a389e4fe4aaf2e15358a070dcc19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c4ab9505b53cdc899506ed421fddb7e1f8faf7a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:02.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "readelf.c in GNU Binutils 2017-04-12 has a \"cannot be represented in type long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "readelf.c en GNU Binutils 2017-04-12 tiene un problema de tipo \"cannot be represented in type long\" (no puede ser representado en type long), lo que puede permitir que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, probablemente, causen otro impacto no especificado mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:02.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "readelf.c in GNU Binutils 2017-04-12 has a \"shift exponent too large for type unsigned long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad en el archivo readelf.c en GNU Binutils el 12-04-2017, presenta un problema de \"shift exponent too large for type unsigned long\", que podría permitir a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo  ELF diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=ddef72cdc10d82ba011a7ff81cafbbd3466acf54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=ddef72cdc10d82ba011a7ff81cafbbd3466acf54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T01:29:02.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función print_symbol_for_build_attribute en readelf.c en GNU Binutils 2017-04-12 permite a los atacantes remotos provocar una denegación de servicio (lectura inválida y SEGV) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20."
      }, {
        "lang" : "es",
        "value" : "Ipswitch MOVEit Transfer (anteriormente conocido como DMZ) permite inyección SQL ciega de preautenticación. Las versiones solucionadas son MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30 y MOVEit DMZ 8.2.0.20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:moveit_dmz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "C8C09B13-29FD-4A22-A77F-83B9434DBE33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:moveit_dmz:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517F2B03-DE60-46C9-97C5-519674DE06CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:moveit_dmz:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED1AB9F-7CB4-4FEB-8500-14BF04BD7EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:moveit_transfer_2017:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3FE905-F481-45AF-B1B3-A85A5F638C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.siberas.de/assets/papers/ssa-1705_IPSWITCH_SQLinjection.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.siberas.de/assets/papers/ssa-1705_IPSWITCH_SQLinjection.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over IPsec), preventing the affected router from accepting new connections; all devices will be disconnected from the router and all logs removed automatically."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en MikroTik versión 6.38.5 podría permitir a un atacante remoto no autenticado agotar toda la CPU disponible mediante una inundación de paquetes UDP en el puerto 500 (utilizado para L2TP a través de IPsec), evitando que el enrutador afectado acepte nuevas conexiones; Todos los dispositivos se desconectarán del enrutador y todos los registros se eliminarán automáticamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.38.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF33501-CBA2-4ED1-9EF9-3FDCF8472BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/May/59",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017050062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142538/MikroTik-RouterBoard-6.38.5-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2064",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017050062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142538/MikroTik-RouterBoard-6.38.5-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, and Voice Notes) associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect encryption (consistent with the application's use of an encrypted database to store chat text). NOTE: the vendor reportedly indicates that they do not \"consider these to be security issues\" because a user may legitimately want to preserve any file for use \"in other apps like the Google Photos gallery\" regardless of whether its associated chat is deleted"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Facebook WhatsApp Messenger 2.17.146 para Android utiliza la tarjeta SD para el almacenamiento en archivos en texto claro (audio, documentos, imágenes, vídeos y notas de voz) asociados a una conversación incluso si se elimina dicha conversación. Puede haber usuarios que esperen que se realice el borrado de estos archivos una vez que se elimina la conversación o usuarios que esperen que estos archivos estén cifrados (de acuerdo al uso por parte de la aplicación de una base de datos cifrada para almacenar los textos de conversaciones). NOTA: el fabricante indica que no \\\"considera que esto se trate de problemas de seguridad\\\" debido a que un usuario, de forma legítima, puede querer preservar cualquier archivo para su uso \\\"en otras apps como la galería de Google Photos\\\", independientemente de si la conversación asociada se ha eliminado o no."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.16.323",
            "matchCriteriaId" : "AB847AD9-8EE1-46FC-A7BB-24A90561101E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100906",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-whatsapp-for-android-privacy-issues-with-handling-of-media-files-cve-2017-8769/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-whatsapp-for-android-privacy-issues-with-handling-of-media-files-cve-2017-8769/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocks_v4.json file."
      }, {
        "lang" : "es",
        "value" : "La aplicación Google I/O 2017 anterior a versión 5.1.4 para Android, descarga múltiples archivos .json desde http://storage.googleapis.com sin SSL, lo que facilita la tarea de los atacantes de tipo \"man-in-the-middle\" para falsificar datos de Fuente y Calendario mediante la creación de un archivo blocks_v4.json modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:google_i\\/o_2017:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.3",
            "matchCriteriaId" : "43164C5D-B97B-4EB0-A499-C6332BBC5FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98549",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-google-io-2017-android-app/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-google-io-2017-android-app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash."
      }, {
        "lang" : "es",
        "value" : "Se detectó un desbordamiento de búfer en libxml2 versión 20904-GITv2.9.4-16-g0741801. La función xmlSnprintfElementContent en el archivo valid.c debe volcar recursivamente la definición del contenido del elemento en un búfer de caracteres 'buf' de tamaño \"size\". La variable len es asignada strlen (buf). Si el content-)type es XML_ELEMENT_CONTENT_ELEMENT, entonces (i) content-)prefix se agrega a buf (si realmente encaja) con lo cual (ii) content-)name se escribe en el búfer. Sin embargo, la comprobación de si el content-)name realmente se ajusta también usa 'len' en lugar de la longitud de búfer actualizada (buf). Esto nos permite escribir sobre \"size\" muchos bytes más allá de la memoria asignada. Esta vulnerabilidad causa que los programas que usan libxml2, como PHP, se bloqueen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C1FDF-1239-4FF2-B5A4-8CED209B8036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98599",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash."
      }, {
        "lang" : "es",
        "value" : "En libxml2 versión 20904-GITv2.9.4-16-g0741801 es vulnerable a un desbordamiento de búfer en la región stack de la memoria. La función xmlSnprintfElementContent en el archivo valid.c debe volcar recursivamente la definición del contenido del elemento en un búfer de caracteres 'buf' de tamaño 'tamaño'. Al final de la rutina, la función puede representar dos caracteres más sin comprobar si el actual strlen(buf) + 2 es menor que size. Esta vulnerabilidad causa que los programas que usan libxml2, como PHP, se bloqueen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C1FDF-1239-4FF2-B5A4-8CED209B8036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98556",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398."
      }, {
        "lang" : "es",
        "value" : "libxml2 20904-GIT versión 2.9.4-16-g0741801, es vulnerable a una lectura excesiva de búfer en la región heap de la memoria en la función xmlDictComputeFastKey en el archivo dict.c. Esta vulnerabilidad causa que los programas que utilizan libxml2, como PHP, se bloqueen. Esta vulnerabilidad se presenta debido a una corrección incompleta para libxml2 Bug 759398."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C1FDF-1239-4FF2-B5A4-8CED209B8036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98601",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839."
      }, {
        "lang" : "es",
        "value" : "libxml2 20904-GIT versión 2.9.4-16-g0741801, es vulnerable a una lectura excesiva de búfer en la región heap de la memoria en la función xmlDictAddString en el archivo dict.c. Esta vulnerabilidad causa que los programas que utilizan libxml2, como PHP, se bloqueen. Esta vulnerabilidad se presenta debido a una corrección incompleta para CVE-2016-1839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C1FDF-1239-4FF2-B5A4-8CED209B8036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c."
      }, {
        "lang" : "es",
        "value" : "libav en versiones anteriores a la 12.1 es vulnerable a una lectura inválida de tamaño 1 debido a una desreferencia de puntero NULL en la función nsv_read_chunk en libavformat/nsvdec.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0",
            "matchCriteriaId" : "04543676-A771-4E9A-95A9-7C4D4F88B055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1039",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/libav/libav/commit/fe6eea99efac66839052af547426518efd970b24",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/libav/libav/commit/fe6eea99efac66839052af547426518efd970b24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a pointer for being in bounds (in a few places in this function) and a failure in a check in dwarf_attr_list()."
      }, {
        "lang" : "es",
        "value" : "Un problema, que también se conoce como DW201703-006, se detectó en libdwarf el 21-03-2017. Una lectura excesiva de búfer en la región heap de la memoria en la función dwarf_formsdata() debido a un fallo al comprobar que un puntero este dentro de límites (en algunos lugares de esta función) y a un fallo en una comprobación en la función dwarf_attr_list()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libdwarf_project:libdwarf:2017-03-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705E27F0-3D25-400A-995C-66CD08BC7D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98553",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function)."
      }, {
        "lang" : "es",
        "value" : "Un problema, que también se conoce como DW201703-005, se detectó en libdwarf el 21-03-2017. Una lectura excesiva de búfer en la región heap de la memoria en la función _dwarf_read_loc_expr_op() debido a un fallo al comprobar que un puntero este dentro de límites (en algunos lugares de esta función)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libdwarf_project:libdwarf:2017-03-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705E27F0-3D25-400A-995C-66CD08BC7D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "Un problema, que también se conoce como DW201703-002, se detectó en libdwarf el  21-03-2017. En la función _dwarf_decode_s_leb128_chk() un puntero byte fue desreferenciado  justo antes de comprobar que estuviera dentro de límites, lo que conlleva a una lectura excesiva de búfer en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libdwarf_project:libdwarf:2017-03-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705E27F0-3D25-400A-995C-66CD08BC7D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leading to a heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo, también conocido como DW201703-001, en libdwarf el 2017-03-21. En dwarf_formsdata() para algunos tipos de datos no se comprobaba que estuvieran dentro de los límites, lo que provocó una sobrelectura de búfer basada en memoria dinámica o heap."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libdwarf_project:libdwarf:2017-03-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705E27F0-3D25-400A-995C-66CD08BC7D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.prevanders.net/dwarfbug.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c."
      }, {
        "lang" : "es",
        "value" : "En libytnef en ytnef hasta la versión 1.9.2 hay una sobrelectura de búfer basado en memoria dinámica (heap) debido a una comprobación de límites en la macro SIZECHECK en lib/ytnef.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.2",
            "matchCriteriaId" : "334A8EE7-0AAC-4103-B523-5669F708816F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T06:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service (resource consumption) by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a \"module reference and kernel daemon\" leak."
      }, {
        "lang" : "es",
        "value" : "La implementación NFSv4 en el kernel de Linux hasta versión 4.11.1, permite a los usuarios locales causar una denegación de servicio (consumo de recursos) para aprovechar el apagado inapropiado de la devolución de llamada de canal al desmontar un sistema de archivos NFSv4, también se conoce como una perdida del \"module reference and kernel daemon\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.1",
            "matchCriteriaId" : "41FE3927-B113-4AAB-AC33-5DA02D19F524"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c70422f760c120480fee4de6c38804c72aa26bc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451386",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c70422f760c120480fee4de6c38804c72aa26bc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/linux-nfs/msg63334.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c70422f760c120480fee4de6c38804c72aa26bc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c70422f760c120480fee4de6c38804c72aa26bc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/linux-nfs/msg63334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7433",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-05-18T14:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication if Guest access is enabled (Guest access is disabled by default)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio (CWE-36) en Micro Focus Vibe 4.0.2 y versiones anteriores permite a un atacante remoto autenticado descargar archivos arbitrarios del servidor mediante el envío de una solicitud especialmente creada al endpoint viewFile. Tenga en cuenta que el ataque se puede realizar sin autenticación si el acceso de invitado está activado (acceso de invitado está desactivado de forma predeterminada)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micro_focus:vibe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "7D74E1B6-E6B5-4C39-8389-553690DCDD28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7019005",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7019005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T14:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename."
      }, {
        "lang" : "es",
        "value" : "En WordPress anteriores a 4.7.5, existe una vulnerabilidad XSS (cross-site scripting) al intentar cargar archivos muy grandes, porque el mensaje de error no restringe adecuadamente la presentación del nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/8c7ea71edbbffca5d9766b7bea7c7f3722ffafa6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/8c7ea71edbbffca5d9766b7bea7c7f3722ffafa6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T14:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API."
      }, {
        "lang" : "es",
        "value" : "En WordPress anteriores a 4.7.5, existe una manipulación incorrecta de los valores meta-datos al hacer el post en la API XML-RPC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/3d95e3ae816f4d7c638f40d3e936a4be19724381",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8816",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/3d95e3ae816f4d7c638f40d3e936a4be19724381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T14:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session."
      }, {
        "lang" : "es",
        "value" : "En WordPress anteriores a 4.7.5, existe una vulnerabilidad de XSS (cross-site scripting) relacionada con la salida del personalizador, en una sesión de personalización no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T14:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials."
      }, {
        "lang" : "es",
        "value" : "En WordPress antes de 4.7.5, existe una vulnerabilidad de Cross Site Request Forgery (CSRF) en el diálogo de credenciales del sistema de archivos porque no se requiere un nonce para actualizar las credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/38347d7c580be4cdd8476e4bbc653d5c79ed9b67",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/38347d7c580be4cdd8476e4bbc653d5c79ed9b67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T14:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API."
      }, {
        "lang" : "es",
        "value" : "En WordPress anteriores a 4.7.5, hay una falta de verificaciones de capacidad para el envío de metadatos en la API XML-RPC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/e88a48a066ab2200ce3091b131d43e2fab2460a4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8817",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/e88a48a066ab2200ce3091b131d43e2fab2460a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T14:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF."
      }, {
        "lang" : "es",
        "value" : "En WordPress anterior a versión 4.7.5, no hay suficiente validación de redireccionamiento en la clase de HTTP, lo que conlleva a una vulnerabilidad de tipo SSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.4",
            "matchCriteriaId" : "0F07CF70-A29C-490E-8728-C51AED224D76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/76d77e927bb4d0f87c7262a50e28d84e01fd2b11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://twitter.com/skansing/status/865362551097393153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8815",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/76d77e927bb4d0f87c7262a50e28d84e01fd2b11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://twitter.com/skansing/status/865362551097393153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/05/wordpress-4-7-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7503",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-18T15:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed."
      }, {
        "lang" : "es",
        "value" : "Se encontró que la implementación de la función javax.xml.transform.TransformerFactory en EAP versión 7.0.5 de Red Hat JBoss, es vulnerable a un ataque de tipo XXE. Un atacante podría usar esta fallo para activar ataques de tipo DoS o SSRF, o leer archivos del servidor donde se implementa EAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9E9FC7-E7CF-450F-8129-98048C32254D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98546",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451960",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T16:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal."
      }, {
        "lang" : "es",
        "value" : "En MODX Revolution anterior a versión 2.5.7, cuando se utiliza PHP versión 5.3.3, un atacante es capaz de incluir y ejecutar archivos arbitrarios en el servidor web debido a la comprobación insuficiente del parámetro action en el archivo setup/index.php, también se conoce como salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F55854-0593-47D3-B84B-810C2D41A37F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F40E4A-E125-4099-A8B3-D42614AA9312"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13422",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13428",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T16:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter."
      }, {
        "lang" : "es",
        "value" : "En MODX Revolution en versiones anteriores a la 2.5.7, un atacante puede provocar Cross-Site Scripting (XSS) reflejado inyectando cargas útiles en varios campos en la página de configuración, tal y como se demuestra con el parámetro database_type."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "0FF6AE40-778B-4441-8D9E-A5F7D059A9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T16:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess."
      }, {
        "lang" : "es",
        "value" : "En MODX Revolution en versiones anteriores a la 2.5.7, usuarios con permisos para subir archivos pueden ejecutar código arbitrarios mediante la subida de un archivo denominado .htaccess."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "0FF6AE40-778B-4441-8D9E-A5F7D059A9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13423",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php."
      }, {
        "lang" : "es",
        "value" : "En MODX Revolution, en versiones anteriores a la 2.5.7, un usuario con permisos para editar recursos puede inyectar una carga útil XSS en el título de cualquier publicación mediante el parámetro pagetitle en connectors/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "0FF6AE40-778B-4441-8D9E-A5F7D059A9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such as Cache Poisoning."
      }, {
        "lang" : "es",
        "value" : "En MODX Revolution anterior a versión 2.5.7, un atacante podría ser capaz de desencadenar un problema de XSS mediante la inyección de una carga útil en el encabezado Host HTTP de una petición. Esto es explotable solo en conjunto con otros problemas como el envenenamiento de la caché."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "0FF6AE40-778B-4441-8D9E-A5F7D059A9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13426",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://citadelo.com/en/2017/04/modx-revolution-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/pull/13426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T17:29:00.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in iflateng.htm and nflateng.htm. CalendarXP PopCalendarXP through 9.8.308 has XSS in ipopeng.htm and npopeng.htm."
      }, {
        "lang" : "es",
        "value" : "Dos productos CalendarXP presentan un problema de tipo XSS en partes comunes de archivos HTML. CalendarXP FlatCalendarXP hasta versión 9.9.290, presenta un XSS en los archivos iflateng.htm y nflateng.htm. CalendarXP PopCalendarXP hasta versión 9.8.308, presenta un XSS en los archivos ipopeng.htm y npopeng.htm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarxp:flatcalendarxp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.9.290",
            "matchCriteriaId" : "D25067B4-08DC-4113-89D8-42891466C508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarxp:popcalendarxp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.8.308",
            "matchCriteriaId" : "762D9C64-6108-41BC-A2A7-73DAC50809CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/victorwon/calendarxp/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/victorwon/calendarxp/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3980",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-18T19:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en la Extensión ePO en McAfee ePolicy Orchestrator (ePO) versiones 5.9.0, 5.3.2 y 5.1.3 y anteriores permite a los usuarios autenticados remotos ejecutar un comando de su elección por medio de una sesión de ePO autenticada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.3",
            "matchCriteriaId" : "8521C554-20D2-435D-8F98-70B1F1C7118D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndIncluding" : "5.3.3",
            "matchCriteriaId" : "67C862E3-3649-4541-925B-327AA963B3A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.9.0",
            "versionEndIncluding" : "5.9.1",
            "matchCriteriaId" : "9FFF09A2-3F56-4719-9833-FB77BC958279"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98559",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10196",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6621",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-18T19:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insufficient protection of sensitive data when responding to an HTTP request on the web interface. An attacker could exploit the vulnerability by sending a crafted HTTP request to the application to access specific system files. An exploit could allow the attacker to obtain sensitive information about the application which could include user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases 10.6 through 11.5. Cisco Bug IDs: CSCvc99626."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Prime Collaboration Provisioning de Cisco podría permitir a un atacante no autenticado remoto acceder a datos confidenciales. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. La vulnerabilidad es debido a una protección insuficiente de los datos confidenciales cuando se responde a una petición HTTP en la interfaz web. Un atacante podría explotar la vulnerabilidad mediante el envío de una petición HTTP diseñada a la aplicación para acceder a archivos específicos del sistema. Una vulnerabilidad podría permitirle al atacante obtener información confidencial sobre la aplicación que podría incluir las credenciales del usuario. Esta vulnerabilidad afecta a Prime Collaboration Provisioning versiones de software desde 10.6 hasta 11.5 de Cisco. IDs de Bug de Cisco: CSCvc99626."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FBBA67-3E61-4C29-AE29-DA9AC85B130E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD5C349-0CCD-4182-8B41-CB199868A318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B93578-B8CF-4977-B2D6-3F2420391008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D10D0F-159A-4C2A-9ECE-4C55ADE37298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B13F1-A983-446D-8698-B562801B320B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D29AB4-BF27-4366-9CC1-060B8C97067A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F423A-8552-4406-8E42-3C417AEB4A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F7FBB-870A-4978-9F6F-E896472E53AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF611EA-218D-4231-A7AA-1F795132F90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DC57C2-8870-4663-830F-C6209F47DF06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98522",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038508",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp2",
        "source" : "psirt@cisco.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6622",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-18T19:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain HTTP request methods, which could allow access to files via the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the targeted application. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.1. Cisco Bug IDs: CSCvc98724."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Prime Collaboration Provisioning podría permitir que un atacante remoto no autenticado omita la autenticación y realice una inyección de comandos con privilegios root. La vulnerabilidad se debe a la falta de restricciones de seguridad en ciertos métodos de peticiones HTTP, lo que podría permitir el acceso a archivos mediante la interfaz web. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP manipulada a la aplicación objetivo. Esta vulnerabilidad afecta a las distribuciones del software Cisco Prime Collaboration Provisioning anteriores a la 12.1. Cisco Bug IDs: CSCvc98724."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FBBA67-3E61-4C29-AE29-DA9AC85B130E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD5C349-0CCD-4182-8B41-CB199868A318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B93578-B8CF-4977-B2D6-3F2420391008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D10D0F-159A-4C2A-9ECE-4C55ADE37298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B13F1-A983-446D-8698-B562801B320B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D29AB4-BF27-4366-9CC1-060B8C97067A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F423A-8552-4406-8E42-3C417AEB4A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F7FBB-870A-4978-9F6F-E896472E53AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF611EA-218D-4231-A7AA-1F795132F90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DC57C2-8870-4663-830F-C6209F47DF06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98520",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038507",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42888/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42888/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6623",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-18T19:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the CPS appliance could allow an authenticated, local attacker to escalate their privilege level to root. The vulnerability is due to incorrect sudoers permissions on the script file. An attacker could exploit this vulnerability by authenticating to the device and providing crafted user input at the CLI, using this script file to escalate their privilege level and execute commands as root. A successful exploit could allow the attacker to acquire root-level privileges and take full control of the appliance. The user has to be logged-in to the device with valid credentials for a specific set of users. The Cisco Policy Suite application is vulnerable when running software versions 10.0.0, 10.1.0, or 11.0.0. Cisco Bug IDs: CSCvc07366."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un archivo de script que es instalado como parte de la distribución del Software Cisco Policy Suite (CPS) para el dispositivo CPS podría permitir que un atacante local autenticado aumente su nivel de privilegio a root. La vulnerabilidad es debido a permisos de sudoers incorrectos en el archivo de script. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo y proporcionando información de usuario diseñada en la CLI, usando este archivo de script para escalar su nivel de privilegio y ejecutar comandos como root. Una explotación con éxito podría permitir al atacante adquirir privilegios de nivel root y tomar el control total del dispositivo. El usuario debe iniciar sesión en el dispositivo con credenciales válidas para un conjunto específico de usuarios. La aplicación Cisco Policy Suite es vulnerable cuando se ejecutan las versiones de software 10.0.0, 10.1.0 u 11.0.0. IDs de Bug de Cisco: CSCvc07366."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A538DC-454D-4138-B59B-5BDB5CAA9D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B574E08E-90EA-4698-A232-B4DBEB03BBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E134B57-BB82-436E-BF85-BE1A89743951"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98521",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-cps",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-cps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6652",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-18T19:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using directory traversal techniques to read files within the Cisco TelePresence IX5000 Series filesystem. This vulnerability affects Cisco TelePresence IX5000 Series devices running software version 8.2.0. Cisco Bug IDs: CSCvc52325."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de la serie TelePresence IX5000 de Cisco podría permitir a un atacante remoto no autenticado acceder a archivos arbitrarios en un dispositivo afectado. La vulnerabilidad es debido a la insuficiente comprobación de entrada. Un atacante podría explotar esta vulnerabilidad mediante el uso de técnicas de salto de directorio para leer archivos dentro del sistema de archivos de la serie TelePresence IX5000 de Cisco. Esta vulnerabilidad afecta a los dispositivos de la serie TelePresence IX5000  de Cisco que ejecutan la versión de software 8.2.0. IDs de Bug de Cisco: CSCvc52325."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_ix5000:8.2.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AFDADA-06E4-4CA7-BD09-95DED4AF55E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98519",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038509",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-telepresence-ix5000",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-telepresence-ix5000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-18T21:29:00.187",
      "lastModified" : "2023-11-07T02:50:36.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-0176.  Reason: This candidate is a reservation duplicate of CVE-2017-0176.  Notes: All CVE users should reference CVE-2017-0176 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5173",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Neutralización Inapropiada de Elementos Especiales (en un comando del sistema operativo) en Camera IP G-Cam/EFD-2250 versión 1.11.0.12 de Geutebruck . Se ha identificado una neutralización inapropiada de la vulnerabilidad de elementos especiales. Si los elementos especiales no son neutralizados apropiadamente, un atacante puede llamar a múltiples parámetros que pueden permitir el acceso al sistema operativo de nivel root, lo que permitiría la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:geutebrueck:ip_camera_g-cam_efd-2250_firmware:1.11.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C819335E-155F-48FB-AF1F-08409FB61116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:geutebrueck:ip_camera_g-cam_efd-2250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1D0562-45CA-421F-9167-567878182D82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96209",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41360/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41360/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5174",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Omisión de Autenticación en la cámara IP G-Cam/EFD-2250 versión 1.11.0.12 de Geutebruck. Se ha identificado una vulnerabilidad de omisión de autenticación. La arquitectura del sistema de archivos existente podría permitir a los atacantes omitir el control de acceso que puede permitir la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:geutebruck:ip_camera_g-cam_efd-2250_firmware:1.11.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC60E66-0E77-4184-91F6-998F734263C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:geutebruck:ip_camera_g-cam_efd-2250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B888B6-5D16-428D-BABB-5384EEDB9542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96209",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41360/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/96209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41360/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5176",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVESE, and 9328-CCWDEVPTE; and Connected Components Workbench - Free Standard Edition (All Supported Languages), v9.01.00 and earlier. Certain DLLs included with versions of CCW software can be potentially hijacked to allow an attacker to gain rights to a victim's affected personal computer. Such access rights can be at the same or potentially higher level of privileges as the compromised user account, including and up to computer administrator privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de secuestro de DLL en Connected Components Workbench (CCW) de Rockwell Automation. Están afectadas las siguientes versiones: Connected Components Workbench - Developer Edition, versión v9.01.00 y anteriores a: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CC y Connected Components Workbench - Edición Estándar Gratuita (todos los idiomas compatibles), versión v9.01.00 y anteriores. Ciertos bibliotecas DLL incluidas con las versiones de software de CCW pueden ser secuestradas para permitir a un atacante alcanzar derechos sobre la computadora personal afectada de la víctima. Dichos derechos de acceso pueden estar en el mismo nivel de privilegios o potencialmente en un nivel más alto al de la cuenta de usuario comprometida, incluyendo los privilegios de administrador de computadora."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:developer:*:*:*",
            "versionEndIncluding" : "9.01.00",
            "matchCriteriaId" : "D30E0FF5-DFC8-4A9E-AC5E-A989607E2419"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevdee:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669BA851-4DD0-498B-8775-4C9529CAF06C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevene:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589025A2-B3B1-4FFC-A6F2-9D6E3A976E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevese:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49295F0C-B90A-46BF-AC22-723743237A3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevfre:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B41A881-8DAA-43E3-934E-4500C8815666"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2366F9-803F-433A-8712-1E328D03FFAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevpte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B1539D-19C2-4048-8904-C0B6D60E34D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:9328-ccwdevzhe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5654863-5B85-4EE3-96A2-8624407BD9FC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:free_standard:*:*:*",
            "versionEndIncluding" : "9.01.00",
            "matchCriteriaId" : "5AE5B4DF-E10A-42DB-B9F3-E9D292281235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97000",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-047-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-047-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5177",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de desbordamiento del búfer de la pila en WinPLC7 versión 5.0.45.5921 y anteriores de VIPA Controls. Se ha identificado una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria, donde un atacante con un paquete especialmente diseñado podría desbordar el búfer de longitud fija. Esto podría permitir la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vipa_controls:winplc7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.45.5921",
            "matchCriteriaId" : "19CD1A10-927E-4F03-9637-86F6D6790660"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vipa_controls:winplc7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E608866-0BA6-41C9-A0F7-8F73E89BF4D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96413",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42693/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/96413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42693/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6016",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which may allow an authenticated user to modify application files to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Control de Acceso Inapropiado en LAquis SCADA  de LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME. Las siguientes versiones están afectadas: Versiones 4.1 y versiones anteriores publicadas antes del 20 de enero de 2017. Se identificó una vulnerabilidad de Control de Acceso Inapropiado, lo que puede permitir que un usuario autenticado modifique los archivos de la aplicación para escalar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leao_consultoria_e_desenvolvimento_de_sistemas:ltda_me_laquis_scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "467326FE-BE40-4667-B78A-5C9A122DBB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96942",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-075-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-075-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6025",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overflow the stack buffer by providing overly long strings to functions that handle the XML. Because the function does not verify string size before copying to memory, the attacker may then be able to crash the application or run arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de desbordamiento del búfer de pila en el Servidor Web de 3S-Smart Software Solutions GmbH CODESYS. Las siguientes versiones del Servidor Web de CODESYS, parte del software de visualización del navegador web WebVisu de CODESYS, están afectadas: el Servidor Web de CODESYS versiones 2.3 y anteriores. Un usuario malicioso podría desbordar el búfer de pila al proporcionar cadenas demasiado largas en las funciones que manejan el XML. Por que la función no comprueba el tamaño de la cadena antes de copiar en la memoria, el atacante puede bloquear la aplicación o ejecutar un código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:web_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "EEC6A882-06F9-4AD6-B2B9-D6C1A14301F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97174",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6027",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web server request may allow the upload of arbitrary files (with a dangerous type) to the CODESYS Web Server without authorization which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de carga arbitraria de archivos en el Servidor Web de 3S-Smart Software Solutions GmbH CODESYS. Las siguientes versiones del Servidor Web de CODESYS, parte del programa de visualización del navegador web WebVisu de CODESYS, están afectadas: el Servidor Web de CODESYS versiones 2.3 y anteriores. Una petición de servidor web especialmente diseñada puede permitir la carga de archivos arbitrarios (con un tipo dangerous) hacia el Servidor Web de CODESYS sin autorización, lo que puede permitir la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:web_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "EEC6A882-06F9-4AD6-B2B9-D6C1A14301F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97174",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6048",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de inyección de comando en Concentradores de Medida y Medidores Eléctricos de Satel Iberia SenNet: SenNet Optimal DataLogger versiones V5.37c-1.43c y anteriores, SenNet Solar Datalogger versiones V5.03-1.56a y anteriores, y SenNet Multitask Meter versiones V5.21a-1.18b y anteriores. La explotación con éxito de esta vulnerabilidad podría resultar en que el atacante salga del shell enjaulado y alcance acceso completo al sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:satel-iberia:sennet_multitask_meter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21a-1.18b",
            "matchCriteriaId" : "0CDC29E1-279D-4B5F-BB14-9844C4F7735F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:satel-iberia:sennet_optimal_datalogger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.37c-1.43c",
            "matchCriteriaId" : "D80453AB-DFA7-4BD9-8A43-DAFAD72480F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:satel-iberia:sennet_solar_datalogger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.03-1.56a",
            "matchCriteriaId" : "C29D8235-23DA-4451-9EC2-FE0D04453AFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7907",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XML external entity reference, or XXE) may allow an attacker to enter malicious input through the application which could cause a denial of service or disclose file contents from a server or connected network."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema de configuración del analizador XML incorrecto en el historial de clientes de Schneider Electric Wonderware Historian Client 2014 R2 SP1 y anterior. Un analizador XML incorrectamente restringido (con una restricción incorrecta de referencia de entidad externa XML o XXE) puede permitir que un intruso ingrese una entrada malintencionada a través de la aplicación que podría causar una denegación de servicio o revelar el contenido de un servidor o de una red conectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_historian_client:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "2014_r2",
            "matchCriteriaId" : "CDC90F0C-4ECA-48E4-B5A2-0DD5E7703DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000120/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98254",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038542",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-122-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000120/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7935",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de agotamiento de recursos en Phoenix Contact GmbH mGuard desde la versión 8.3.0 hasta la 8.4.2. Un atacante podría comprometer la disponibilidad del dispositivo mediante múltiples peticiones iniciales de VPN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116FA86C-7A05-4B2C-8148-6FE371E60D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236DEF3C-0F0F-467B-9EEB-276092938DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A1E205-BB61-47BE-A903-0F122D2D732A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB742B0-8E3E-4110-87A9-D40360743A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582782AB-3CBC-4EB6-B271-4AA270F87CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3625B7F5-0170-4269-97A3-F3ABF147F803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenix_contact_gmbh:mguard:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418AA18B-BB7E-4C77-BF5C-F1CB320B643B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7937",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-19T03:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de autenticación inapropiada en Phoenix Contact GmbH versiones de firmware 8.3.0 hasta 8.4.2. Un atacante puede alcanzar acceso no autorizado al firewall del usuario cuando no se puede acceder a los servidores RADIUS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116FA86C-7A05-4B2C-8148-6FE371E60D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236DEF3C-0F0F-467B-9EEB-276092938DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A1E205-BB61-47BE-A903-0F122D2D732A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB742B0-8E3E-4110-87A9-D40360743A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582782AB-3CBC-4EB6-B271-4AA270F87CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenix_contact_gmbh:mguard_firmware:8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3625B7F5-0170-4269-97A3-F3ABF147F803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenix_contact_gmbh:mguard:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418AA18B-BB7E-4C77-BF5C-F1CB320B643B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T07:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls."
      }, {
        "lang" : "es",
        "value" : "La implementación IPv6 Fragmentation en el kernel de Linux hasta la versión 4.11.1 no considera que el campo nexthdr puede estar asociado a una opción no válida, lo que permite a los usuarios locales causar una denegación de servicio (lectura fuera de límites y BUG) o posiblemente tener otro impacto no especificado por medio de un socket creado y enviar llamadas del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "8C1901E2-6C4D-488B-A7CE-F7E14A38418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.56",
            "matchCriteriaId" : "5837A5CA-266C-4BC5-B95F-1344AE42D24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.42",
            "matchCriteriaId" : "5EDD29F4-10F1-415A-877F-5586A004E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.71",
            "matchCriteriaId" : "CF0C6096-CC39-4352-AFAF-5D7A7C5C2838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.31",
            "matchCriteriaId" : "001F55C3-810A-444F-AE18-F067A84F6B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "1A25FD29-5617-4236-AC9A-6D68DC220925"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2423496af35d94a87156b063ea5cedffc10a70a1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98577",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0169",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/763117/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2423496af35d94a87156b063ea5cedffc10a70a1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2423496af35d94a87156b063ea5cedffc10a70a1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/763117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T07:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890."
      }, {
        "lang" : "es",
        "value" : "La función sctp_v6_create_accept_sk en net/sctp/ipv6.c en el kernel de Linux hasta la versión 4.11.1 gestiona de manera incorrecta la herencia, lo que permite que usuarios locales provoquen una denegación de servicio (DoS) o, probablemente, causen otro impacto no especificado mediante llamadas de sistema manipuladas. Este problema está relacionado con CVE-2017-8890."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "8C1901E2-6C4D-488B-A7CE-F7E14A38418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.56",
            "matchCriteriaId" : "5837A5CA-266C-4BC5-B95F-1344AE42D24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.42",
            "matchCriteriaId" : "5EDD29F4-10F1-415A-877F-5586A004E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.71",
            "matchCriteriaId" : "CF0C6096-CC39-4352-AFAF-5D7A7C5C2838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.31",
            "matchCriteriaId" : "001F55C3-810A-444F-AE18-F067A84F6B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "1A25FD29-5617-4236-AC9A-6D68DC220925"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98597",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/763569/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/763569/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T07:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890."
      }, {
        "lang" : "es",
        "value" : "La función dccp_v6_request_recv_sock en el archivo net/dccp/ipv6.c en el kernel de Linux  hasta versión 4.11.1, el manejo inapropiado de la herencia, permite a los usuarios locales causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de llamadas de sistema diseñadas, un problema relacionado con CVE-2017 -8890."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "8C1901E2-6C4D-488B-A7CE-F7E14A38418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.84",
            "matchCriteriaId" : "DB67DFF9-D1AD-49F9-AC6A-2BBFE1619CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.4.71",
            "matchCriteriaId" : "A4AF9D2F-2101-41EE-9E8C-95EE62CB1186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.31",
            "matchCriteriaId" : "001F55C3-810A-444F-AE18-F067A84F6B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "1A25FD29-5617-4236-AC9A-6D68DC220925"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98586",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/760370/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/760370/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T14:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890."
      }, {
        "lang" : "es",
        "value" : "La función tcp_v6_syn_recv_sock en el archivo  net/ipv6/tcp_ipv6.c en el kernel de Linux hasta versión 4.11.1, el manejo inapropiado de la herencia, permite a los usuarios locales causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de llamadas del sistema, un problema relacionado con CVE-2017 -8890."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.89",
            "matchCriteriaId" : "9A5C1F01-214B-4477-A3A1-F6DF10181D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.44",
            "matchCriteriaId" : "8C1901E2-6C4D-488B-A7CE-F7E14A38418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.84",
            "matchCriteriaId" : "DB67DFF9-D1AD-49F9-AC6A-2BBFE1619CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.4.71",
            "matchCriteriaId" : "A4AF9D2F-2101-41EE-9E8C-95EE62CB1186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.31",
            "matchCriteriaId" : "001F55C3-810A-444F-AE18-F067A84F6B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "1A25FD29-5617-4236-AC9A-6D68DC220925"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98583",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/760370/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/760370/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T14:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled."
      }, {
        "lang" : "es",
        "value" : "El servidor en Dropbear anteriores a 2017.75 podría permitir la post-autenticación de ejecución de código remoto con privilegios de root debido a una doble liberación en la limpieza de los TCP listeners cuando la opción -a está habilitada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.75",
            "matchCriteriaId" : "1EA089DE-64AB-47E7-9643-6688DA0B0BED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3859",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20191004-0006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20191004-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T14:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed."
      }, {
        "lang" : "es",
        "value" : "Dropbear anteriores a 2017.75 podría permitir a usuarios locales leer ciertos archivos como usuario root, si el archivo tiene el formato de archivo authorized_keys con un comando=opción. Esto ocurre porque ~ /.ssh/authorized_keys se lee con privilegios de root y se siguen los enlaces simbólicos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.75",
            "matchCriteriaId" : "1EA089DE-64AB-47E7-9643-6688DA0B0BED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3859",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20191004-0006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20191004-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4978",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-05-19T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "RSA Adaptive Authentication (On-Premise) versiones anteriores a 7.3 P2 (exclusivo) de EMC, contienen una solución para una vulnerabilidad de tipo cross-site scripting que podría ser potencialmente explotada por usuarios maliciosos para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:adaptive_authentication_\\(on_premise\\):*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "B2801027-136D-4B04-9BAE-E01C9005714A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540552/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98392",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038469",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540552/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4979",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-05-19T15:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports."
      }, {
        "lang" : "es",
        "value" : "Isilon OneFS versión 8.0.1.0, OneFS versiones 8.0.0.0 - 8.0.0.2, OneFS versiones 7.2.1.0 - 7.2.1.3 y OneFS versiones 7.2.0.x de EMC, están afectadas por una vulnerabilidad de exportación de NFS. Bajo ciertas condiciones, después de actualizar un clúster desde OneFS versión 7.1.1.x o anteriores, los usuarios pueden tener niveles inesperados de acceso a algunas exportaciones de NFS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F551F88-3176-4E92-AE7A-FCAB3A220A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26144325-6722-48C1-A0C2-BB78EF9BDE60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1B998-AEEE-4123-82F3-72D84EF681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0828B061-28B4-4AEE-BBB9-AF287B90713C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064C487D-517E-4F7B-A182-5DF287477652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600B1F-C307-457B-BC84-73339A64DF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB53E775-7A57-41D2-A93D-5F96D72622D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F44A3-8C09-49EE-8545-51C57F36B801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540551/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540551/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7968",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-05-19T15:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators. This could allow an authenticated user to escalate his or her privileges."
      }, {
        "lang" : "es",
        "value" : "Un problema de permisos predeterminado incorrecto se descubrió en Schneider Electric Wonderware InduSoft Web Studio v8.0 revisión 3 y versiones anteriores. Después de la instalación, Wonderware InduSoft Web Studio crea un nuevo directorio y dos archivos, que se colocan en la ruta del sistema y pueden ser manipulados por no administradores. Esto podría permitir a un usuario autenticado escalar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_indusoft_web_studio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "93923A2F-FFAB-4418-8F1E-603DF4C1DEB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-02",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98544",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-138-02",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-138-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T15:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection."
      }, {
        "lang" : "es",
        "value" : "PlaySMS permite la ejecución remota de código debido a que el nombre de un archivo .php se ejecuta. sendfromfile.php tiene una combinación de subida de archivos sin restricciones e inyección de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playsms:playsms:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3614E29-15E6-4AEB-8D0E-CF0BA2A0D098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://touhidshaikh.com/blog/poc/playsms-v1-4-rce/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44599/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://touhidshaikh.com/blog/poc/playsms-v1-4-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44599/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T16:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file."
      }, {
        "lang" : "es",
        "value" : "En poppler versión  0.54.0, como es usado en Evince y otros productos, presenta una desreferencia de puntero NULL en la función JPXStream::readUByte en el archivo JPXStream.cc. Por ejemplo, la utilidad perf_test se bloqueará (por fallo de segmentación) al analizar un archivo PDF inválido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740347EF-5003-40B2-863C-D86A246DD21B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T18:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha']."
      }, {
        "lang" : "es",
        "value" : "Reg.php en Allen Disk 1.6 no comprueba si isset ($ _ SESSION ['captcha'] ['code']) == 1, lo que hace posible pasar por alto el CAPTCHA a través del envío de $ _POST ['captcha'] vacío."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58574971-6FAE-43CC-871E-13F36772BD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3131212/allendisk/issues/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/issues/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha']."
      }, {
        "lang" : "es",
        "value" : "/admin/login.php en Allen Disk 1.6 no comprueba si isset($ _ SESSION ['captcha'] ['code']) == 1, lo que conduce a evitar el CAPTCHA vaciando $ _POST ['captcha']."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58574971-6FAE-43CC-871E-13F36772BD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3131212/allendisk/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función my_skip_input_data_fn en imagew-jpeg.c en libimageworsener.a en ImageWorsener 1.3.1 permite a los atacantes remotos causar una denegación de servicio (por bucle infinito) a través de una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7DBC0041-62D4-4318-BA84-2B941F8D93F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsummers/imageworsener/issues/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T19:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "La función lzw_add_to_dict en imagew-gif.c en libimageworsener.a en ImageWorsener 1.3.1 permite a atacantes remotos causar una denegación de servicio (a través de un bucle infinito) utilizando una imagen especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7DBC0041-62D4-4318-BA84-2B941F8D93F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-19T19:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick anterior a versión 7.0.5-2 y GraphicsMagick anterior a versión 1.3.24 usan memoria no inicializada en el decodificador RLE, lo que permite que un atacante filtrar información confidencial del espacio de memoria de proceso, como lo demuestran los ataques remotos contra el código de ImageMagick en un proceso de servidor de larga duración que convierte los datos de imagen en favor de múltiples usuarios. Esto es causado por una falta de pasos de inicialización en la función ReadRLEImage en el archivo coders/rle.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.8-1",
            "matchCriteriaId" : "ADDDFE18-5D1B-481E-908C-C5D97B984664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.5-2",
            "matchCriteriaId" : "3C10E452-1F99-4E84-BD93-FEA67CF1F075"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.24",
            "matchCriteriaId" : "DD436E92-291F-47C3-8E5B-9CBA7743D678"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/diff/0a5b75e019b6/coders/rle.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98593",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/diff/0a5b75e019b6/coders/rle.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7475",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-19T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash."
      }, {
        "lang" : "es",
        "value" : "La versión 1.15.4 de Cairo es vulnerable a una desreferencia de puntero NULL relacionada con FT_Load_Glyph y FT_Render_Glyph, lo que resulta en un bloqueo de aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cairographics:cairo:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E63466-B03F-4094-BD7D-7D964ACDA3DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/151",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100763",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7504",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-19T20:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server <= Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized data."
      }, {
        "lang" : "es",
        "value" : "En el archivo HTTPServerILServlet.java en la capa de invocación JMS sobre HTTP de la implementación de JbossMQ, que está habilitada por defecto en Red Hat Jboss Application Server versiones anteriores a Jboss 4.X e incluida, no restringe las clases para las cuales realiza la deserialización, lo que permite a atacantes remotos ejecutar código arbitrario por medio de datos serializados diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "F14974B6-3712-4AC9-B95C-2CAEDA1BAA72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98595",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451441",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1451441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T04:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt."
      }, {
        "lang" : "es",
        "value" : "login.cgi en dispositivos D-Link DIR-600M con la versión de firmware 3.04 permite a los atacantes remotos omitir la autenticación mediante la introducción de más de 20 espacios en blanco en el campo de contraseña durante un intento de inicio de sesión con permisos de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-600m_firmware:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7D2E32-92FB-4F68-94A3-FA129A51604C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-600m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17C8001-4987-4A70-84C8-5AFF6F196BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://touhidshaikh.com/blog/poc/d-link-dir600-auth-bypass/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42039/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=waIJKWCpyNQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://touhidshaikh.com/blog/poc/d-link-dir600-auth-bypass/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42039/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=waIJKWCpyNQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T14:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \\/ substring as introducing either a local pathname or a remote hostname, which leads to (1) arbitrary Permalink Injection via CSRF attacks on a permalink_page.php?url= URI and (2) an open redirect via a login_page.php?return= URI."
      }, {
        "lang" : "es",
        "value" : "MantisBT antes de v1.3.11, 2.x antes de v2.3.3 y 2.4.x antes de v2.4.1 omite una verificación de barra invertida en string_api.php y, en consecuencia, tiene interpretaciones conflictivas de una subcadena inicial \\/ como introducción de una ruta de acceso local o un host remoto, que conduce a (1) una inyección arbitraria de HTTP a través de ataques CSRF en un URI permalink_page.php?url= y (2) una redirección abierta a través de un URI login_page.php?return=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.10",
            "matchCriteriaId" : "B0A45AF0-9B5E-4445-BF5F-7FDE0DECB951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B537D8BB-944B-4B92-B48D-0CA5A2D01372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39492D12-1A13-43CE-84A7-F5CCFB87D612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6AF670-28C3-4D7E-9EB4-E0B366CE818E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021CC8F4-B310-4DBF-9D50-B8A357158E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E7205-12E1-4C57-A120-91C4C0760305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2550F1FD-5104-4BAA-80F6-C6202D7326B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89D994-7F93-4839-8A57-F4CD633576E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2154CE53-2DED-4023-96D5-515468E226B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF4779C-8E14-4CB1-BCB4-80F4C5020629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9258FCA1-6948-4DFE-BE50-5A39B5A64120"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-CSRF-PERMALINK-INJECTION.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22702",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22816",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42043/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-CSRF-PERMALINK-INJECTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=22816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42043/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T14:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname."
      }, {
        "lang" : "es",
        "value" : "Secure Bytes Cisco Configuration Manager, tal como se incorpora en la versión 3.0 de Secure Cisco Auditor (SCA) de Secure Bytes, tiene un problema de salto de directorio en su servidor TFTP, permitiendo a los atacantes leer los archivos arbitrarios por medio de secuencias ../ en un parámetro pathname."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure-bytes:secure_cisco_auditor:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE071175-0D01-4DB4-AAB3-D2E6020CCCF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42041/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42041/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T14:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers the attack."
      }, {
        "lang" : "es",
        "value" : "El archivo winpm-32.exe en Pegasus Mail (también se conoce como Pmail) versión 4.72 build 572, permite la ejecución de código por medio de un archivo ssgp.dll diseñado que debe instalarse localmente. Por ejemplo, si la biblioteca ssgp.dll está en el escritorio y ejecuta código arbitrario en la función DllMain, al hacer clic en un vínculo mailto: en una página web remota se desencadena el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmail:pegasus:4.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB4AAA4-F496-4B2C-A8DD-5503E315EC17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/142606/Pegasus-4.72-Build-572-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142606/Pegasus-4.72-Build-572-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file."
      }, {
        "lang" : "es",
        "value" : "import.php (también conocido como Phonebook import feature) en PlaySMS 1.4 permite la ejecución remota de código mediante vectores relacionados con la cabecera HTTP User-Agent y código PHP en el nombre de un archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playsms:playsms:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3614E29-15E6-4AEB-8D0E-CF0BA2A0D098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42044/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44598/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44598/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash."
      }, {
        "lang" : "es",
        "value" : "En OpenEXR una lectura invalida de tamaño 2 en la función hufDecode en ImfHuf.cpp podría provocar el cierre inesperado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "En OpenEXR 2.2.0 una escritura inválida de tamaño 8 en la función storeSSE en ImfOptimizedPixelReading.h podría provocar el cierre inesperado de una aplicación o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4339-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4339-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash."
      }, {
        "lang" : "es",
        "value" : "En OpenEXR, una lectura inválida de tamaño 1 en la función getBits podría provocar el cierre inesperado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "En OpenEXR 2.2.0 una escritura inválida de tamaño 1 en la función bufferedReadPixels en el archivo ImfInputFile.cpp podría provocar el cierre inesperado de una aplicación o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4339-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4339-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash."
      }, {
        "lang" : "es",
        "value" : "En la versión 2.2.0 de OpenEXR, una lectura inválida de tamaño 1 en la función refill en ImfFastHuf.cpp podría provocar el cierre inesperado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "En la versión 2.2.0 de OpenEXR, una lectura inválida de tamaño 2 en la función = operator podría provocar el cierre inesperado de la aplicación o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4339-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4339-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T18:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash."
      }, {
        "lang" : "es",
        "value" : "En la versión 2.2.0 de OpenEXR, una lectura inválida de tamaño 1 en la función uncompress en ImfZip.cpp podría provocar el cierre inesperado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/pull/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T19:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release)."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.7, el programa procesa imágenes BMP sin verificar que biWidth y biHeight en la cabecera de información del bitmap coinciden con la entrada real, lo que lleva a una sobrelectura del búfer basado en heap en bmp2tiff."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98581",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/89",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T19:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures."
      }, {
        "lang" : "es",
        "value" : "La función i_zval_ptr_dtor en el archivo Zend/zend_variables.h en PHP versión 7.1.5 permite a los atacantes causar una denegación de servicio (consumo de memoria y bloqueo de aplicación) o posiblemente tener otro impacto sin especificar al desencadenar operaciones creadas en la estructuras de datos de matriz."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98596",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. By connecting to the Mosquitto broker on an access point and one of its clients, an attacker can gather enough information to craft a command that reboots the client remotely when sent to the client's Mosquitto broker, aka \"unauthenticated remote command execution.\" This command can be re-sent endlessly to act as a DoS attack on the client."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto  en Mimosa Client Radios anterior a versión 2.2.3 y Mimosa Backhaul Radios anterior a versión 2.2.3. Mediante la conexión al broker Mosquitto sobre un punto de acceso y uno de sus clientes, un atacante puede recopilar suficiente información para diseñar un comando que reinicia el cliente remotamente cuando se envía al broker mosquitto del cliente, también se conoce como \"unauthenticated remote command execution\". Este comando se puede volver a enviar indefinidamente para actuar como un ataque de DoS en el cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:backhaul_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "F469E35D-A0BC-4E8D-8CD6-F5BF223F7823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:client_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "30E63E47-17AF-470D-8C30-19FAE29B1828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A hard-coded credentials issue was discovered on Mimosa Client Radios before 2.2.3, Mimosa Backhaul Radios before 2.2.3, and Mimosa Access Points before 2.2.3. These devices run Mosquitto, a lightweight message broker, to send information between devices. By using the vendor's hard-coded credentials to connect to the broker on any device (whether it be an AP, Client, or Backhaul model), an attacker can view all the messages being sent between the devices. If an attacker connects to an AP, the AP will leak information about any clients connected to it, including the serial numbers, which can be used to remotely factory reset the clients via a page in their web interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de credenciales embebidas en Mimosa Client Radios anterior a versión 2.2.3, Mimosa Backhaul Radios anterior a versión 2.2.3, y Mimosa Access Points anterior a versión 2.2.3. Estos dispositivos ejecutan Mosquitto, un broker de mensajes de poco peso, para enviar información entre dispositivos. mediante el uso de las credenciales embebidas del proveedor para conectarse al broker en cualquier dispositivo (ya sea un modelo AP, Cliente o Backhaul), un atacante puede visualizar todos los mensajes que se envían entre los dispositivos. Si un atacante conecta con un AP, el AP filtrará la información sobre cualquier cliente conectado con él, incluyendo los números de serial, que puede ser usado para resetear de fábrica remotamente a los clientes por medio de una página en su interfaz Web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:backhaul_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "F469E35D-A0BC-4E8D-8CD6-F5BF223F7823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:client_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "30E63E47-17AF-470D-8C30-19FAE29B1828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which host to ping, but this variable is not sanitized server-side, which allows an attacker to pass a specially crafted string to execute shell commands as the root user."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mimosa Client Radios anterior a versión 2.2.3 y Mimosa Backhaul Radios anterior a versión 2.2.3. En la interfaz web del dispositivo, después de iniciar sesión, existe una página que permite hacer ping a otros hosts desde el dispositivo y visualizar los resultados. El usuario puede especificar a qué host hacer ping, pero esta variable no está saneada del lado del servidor, lo que permite a un atacante pasar una cadena especialmente diseñada para ejecutar comandos de shell como usuario root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:backhaul_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "F469E35D-A0BC-4E8D-8CD6-F5BF223F7823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:client_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "30E63E47-17AF-470D-8C30-19FAE29B1828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de filtrado de información en Mimosa Client Radios anterior a versión 2.2.3 y Mimosa Backhaul Radios anterior a versión 2.2.3. Existe una página en la interfaz web que le mostrará el número de serial del dispositivo, independientemente de si ha iniciado sesión o no. Este problema de filtrado de información es relevante porque hay otra página (accesible sin ninguna autenticación) que le permite restablecer remotamente el dispositivo de fábrica simplemente mediante el ingreso del número de serie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:backhaul_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "F469E35D-A0BC-4E8D-8CD6-F5BF223F7823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:client_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "30E63E47-17AF-470D-8C30-19FAE29B1828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST request with a program like cURL. There is one test accessible via cURL that does not properly sanitize user input, allowing an attacker to execute shell commands as the root user."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Mimosa Client Radios anterior a versión 2.2.4 y Mimosa backhaul Radios anterior a versión 2.2.4. En el backend de la interfaz web del dispositivo, existen algunas pruebas de diagnóstico disponibles que no se muestran en la página web; solo pueden ser accesibles mediante el diseño de una petición POST con un programa como cURL. Hay una prueba accesible por medio de cURL que no sanea apropiadamente la entrada del usuario, lo que permite a un atacante ejecutar comandos de shell como usuario root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:backhaul_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "D9CDC98A-8138-492B-A781-B592A362EFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:client_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "37609F06-F95C-43CB-8581-B9C0C197EA2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device's filesystem. This can be used to view unsalted, MD5-hashed administrator passwords, which can then be cracked, giving the attacker full admin access to the device's web interface. This vulnerability can also be used to view the plaintext pre-shared key (PSK) for encrypted wireless connections, or to view the device's serial number (which allows an attacker to factory reset the device)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mimosa Client Radios anterior a la versión 2.2.3. En la interfaz web del dispositivo, existe una página que le permite a un atacante usar un parámetro GET no autorizado para descargar archivos del dispositivo como usuario root. El atacante puede descargar cualquier archivo desde el sistema de archivos del dispositivo. Esto puede ser usado para visualizar contraseñas de administrador con hash MD5 sin sal, que luego puede ser crackeadas, otorgando al atacante acceso total de administrador a la interfaz web del dispositivo. Esta vulnerabilidad también puede ser usada para visualizar la clave precompartida (PSK) de texto plano para las conexiones inalámbricas cifradas, o para visualizar el número de serial del dispositivo (que permite a un atacante restablecer el dispositivo de fábrica)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:backhaul_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "F469E35D-A0BC-4E8D-8CD6-F5BF223F7823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mimosa:client_radios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "30E63E47-17AF-470D-8C30-19FAE29B1828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160596244178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T21:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account established by the vendor). This account can be accessed via both the web interface and SSH. In the web interface, this simply grants an attacker read-only access to the device's settings. However, when using SSH, this gives an attacker access to a Linux shell. NOTE: the vendor has commented \"The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are instructed to change the mateidu user password. Changing the user password fully solves the vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Las radios inalámbricas Ceragon FibeAir IP-10 hasta la versión 7.2.0, presentan una contraseña por defecto mateidu para la cuenta mateidu (una cuenta de usuario oculta establecida por el proveedor). Esta cuenta puede ser accedida por medio de la interfaz web y SSH. En la interfaz web, esto simplemente otorga a un atacante acceso de solo lectura a la configuración del dispositivo. Sin embargo, cuando se usa SSH, esto le da a un atacante acceso a un shell de Linux. NOTA: el proveedor ha comentado \"El usuario de mateidu es un usuario conocido, que es mencionado en la Guía de Usuario de FibeAir IP-10. Los usuarios están instruidos a cambiar la contraseña de usuario de mateidu. Cambiando la contraseña de usuario se resuelve completamente la vulnerabilidad\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ceragon:fiberair_ip-10_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.0",
            "matchCriteriaId" : "3C6BB3E2-8AF2-445F-AA41-42B86ADC2B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.iancaling.com/post/160817658078",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.iancaling.com/post/160817658078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T22:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password."
      }, {
        "lang" : "es",
        "value" : "Hay  una vulnerabilidad de la interfaz de depuración en algunos routers Tenda (FH1202/F1202/F1200: versiones anteriores a 1.2.0.20). Después de conectarse localmente a un router de una manera cableada o inalámbrica, uno puede omitir las restricciones de acceso previstas mediante el envío de comandos de shell directamente y leyendo sus resultados, o por el ingreso de comandos de shell que cambian el nombre de usuario y contraseña de este router."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:f1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.19",
            "matchCriteriaId" : "C49E0BF5-553E-4122-A5C6-055CA6B78B7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:f1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E86EC1-7A0F-41C4-A098-DF76BD1E7B9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:fh1202_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.19",
            "matchCriteriaId" : "548E58FC-1379-41D9-9400-D80707CBEE42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E9CF2B-939C-4E9E-914A-C403A6E45DA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:f1202_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.19",
            "matchCriteriaId" : "D7728F67-89DB-494C-A535-7A24EC414366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:f1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C28522-BB92-4EFD-ABC9-4B5893097AE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tendacn.com/en/2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tendacn.com/en/2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-21T22:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds."
      }, {
        "lang" : "es",
        "value" : "Hay desbordamiento de búfer en la región stack de la memoria en algunos routers Tenda (FH1202/F1202/F1200: versiones anteriores a 1.2.0.20). Las peticiones POST diseñadas a una dirección URL no especificada dan como resultado una DoS, interrumpiendo el servicio HTTP (utilizado para iniciar sesión en la interfaz de usuario web de un enrutador) durante 1 a 2 segundos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:f1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.19",
            "matchCriteriaId" : "C49E0BF5-553E-4122-A5C6-055CA6B78B7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:f1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E86EC1-7A0F-41C4-A098-DF76BD1E7B9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:fh1202_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.19",
            "matchCriteriaId" : "548E58FC-1379-41D9-9400-D80707CBEE42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E9CF2B-939C-4E9E-914A-C403A6E45DA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:f1202_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.19",
            "matchCriteriaId" : "D7728F67-89DB-494C-A535-7A24EC414366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:f1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C28522-BB92-4EFD-ABC9-4B5893097AE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tendacn.com/en/2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tendacn.com/en/2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6630",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by manipulating the CANCEL packet. An exploit could allow the attacker to cause a disruption of service to the phone. Cisco Bug IDs: CSCvc34795."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en la implementación del Protocolo de inicio de sesión (SIP) de Cisco IP Phone 8851 versión 11.0 (0.1) podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS). La vulnerabilidad se debe a un mensaje SIP anormal. Un atacante podría explotar esta vulnerabilidad manipulando el paquete CANCEL. Un exploit podría permitir al atacante causar una interrupción del servicio al teléfono. ID de errores de Cisco: CSCvc34795"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8800_series_firmware:11.0\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3EA97A-DBC1-487B-919F-4F4E69607A43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF6DC5E-F582-445E-BF05-2D55A0954663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98533",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038511",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-sip",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-sip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6632",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources. The vulnerability is due to the logging of certain TCP packets by the affected software. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to cause a DoS condition. The success of an exploit is dependent on how an administrator has configured logging for SSL policies for a device. This vulnerability affects Cisco FirePOWER System Software that is configured to log connections by using SSL policy default actions. Cisco Bug IDs: CSCvd07072."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la configuración del registro de las políticas de Secure Sockets Layer  (SSL) para FirePOWER System Software versiones 5.3.0 hasta 6.2.2 de Cisco, podría permitir a un atacante no autenticado remoto causar una denegación de servicio (DoS) debido al alto consumo de recursos del sistema . La vulnerabilidad es debido al registro de ciertos paquetes TCP por parte del programa afectado. Un atacante podría explotar esta vulnerabilidad mediante el envió de una avalancha de paquetes TCP diseñados hacia un dispositivo afectado. Una explotación con éxito podría permitir al atacante causar una condición DoS. El éxito de una explotación depende de cómo un administrador ha configurado el registro para las políticas SSL para un dispositivo. Esta vulnerabilidad afecta a FirePOWER System Software de Cisco que está configurado para registrar conexiones mediante el uso de acciones por defecto de la política SSL. IDs de Bug de Cisco: CSCvd07072."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB13378-A7CB-4EBB-B3FD-57F7F37965ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D850EEF9-1967-4CE5-A30C-50180849BCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AC6A67-82EF-4D31-AFCB-499A0C6EC0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "995667FD-35F1-49E5-96DB-2FDFF5E0B523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC18DB34-8F0D-466A-BDEF-362760804A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FB47CF-2A6A-4121-BFF7-5862E163B8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9873ABAC-9A3D-40E1-B7FF-F2AB74F82C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC52A8B-7DF4-47B2-9F49-627F59656E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD48BE40-C647-429A-81B6-59E125BBE415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42496A5B-1644-4088-BBCF-2ED810A5694B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95056402-3BC3-4B4C-9A85-BEF53014181D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98523",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-fpwr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-fpwr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6633",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP SYN packets to a specific TCP listening port on an affected device. An exploit could allow the attacker to cause a specific TCP listening port to stop accepting new connections, resulting in a DoS condition. Cisco Bug IDs: CSCva65544."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el proceso de limitación de TCP de Cisco UCS C-Series Rack Servers 3.0 (0.234) podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad se debe a la insuficiencia de la limitación de la protección. Un atacante podría explotar esta vulnerabilidad enviando una alta tasa de paquetes TCP SYN a un puerto de escucha TCP específico en un dispositivo afectado. Un exploit podría permitir al atacante hacer que un puerto de escucha específico de TCP dejara de aceptar nuevas conexiones, resultando en una condición DoS. ID de errores de Cisco: CSCva65544."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:3.0\\(0.234\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07F70AD-B096-421F-9E67-2B047023B1A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_c220_m4_rack_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44380FC-71DA-46ED-B143-339EA81F5325"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_c240_m4_rack_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE28E4-C9BD-4710-A6CA-AC171804AFC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_c3160_rack_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B6516F-D8A5-4A5A-B7EB-EBA2856F2334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_c460_m4_rack_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7939EC-521A-434C-B990-7DA4D227140C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98525",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038513",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ucsc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ucsc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6634",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Device Manager web interface of Cisco Industrial Ethernet 1000 Series Switches 1.3 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected system. The vulnerability is due to insufficient CSRF protection by the Device Manager web interface. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link or visit an attacker-controlled website. A successful exploit could allow the attacker to submit arbitrary requests to an affected device via the Device Manager web interface and with the privileges of the user. Cisco Bug IDs: CSCvc88811."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en la interfaz web de Device Manager de Cisco Industrial Ethernet 1000 Series Switches 1.3 podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de falsificación de solicitud entre sitios (CSRF) contra un usuario de un sistema afectado. La vulnerabilidad se debe a la insuficiente protección de CSRF en la interfaz web del Administrador de dispositivos. Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario de la interfaz para que siga un enlace malicioso o visite un sitio web controlado por un atacante. Una explotación exitosa podría permitir al atacante enviar solicitudes arbitrarias a un dispositivo afectado a través de la interfaz web del Administrador de dispositivos y con los privilegios del usuario. ID de errores de Cisco: CSCvc88811."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:industrial_ethernet_1000_series_firmware:1.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0025A86-AE05-437E-9E25-1ED9771D74EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-1000-4p2s-lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676D7094-78C0-48AE-AAE7-3C6F9FB064EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-1000-4t1t-lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A2ED0-3DF1-484F-A496-8F6611391DAE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-1000-6t2t-lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4822DF3D-09F0-4717-B495-47C25771773F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-1000-8p2s-lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677A328-AC3E-4955-B685-EF457A8CF4CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98524",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038517",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ie1000csrf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ie1000csrf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6635",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and fails to apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traversal techniques to submit a path to a desired file location on an affected system. A successful exploit could allow the attacker to delete any file from the system. Cisco Bug IDs: CSCvc99597."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Prime Collaboration Provisioning Software de Cisco (versiones anteriores a 12.1) podría permitir a un atacante autenticado remoto eliminar cualquier archivo de un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no realiza la comprobación de entrada apropiada de las peticiones HTTP y no aplica los controles de acceso basados en roles (RBAC) a las URL HTTP pedidas. Un atacante podría explotar esta vulnerabilidad mediante el envió de una petición HTTP diseñada que usa técnicas de salto de directorio para enviar una ruta (path) a la ubicación de archivo deseada en un sistema afectado. Una explotación con éxito podría permitir al atacante eliminar cualquier archivo del sistema. IDs de Bug de Cisco: CSCvc99597."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FBBA67-3E61-4C29-AE29-DA9AC85B130E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD5C349-0CCD-4182-8B41-CB199868A318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B93578-B8CF-4977-B2D6-3F2420391008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D10D0F-159A-4C2A-9ECE-4C55ADE37298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B13F1-A983-446D-8698-B562801B320B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D29AB4-BF27-4366-9CC1-060B8C97067A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F423A-8552-4406-8E42-3C417AEB4A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F7FBB-870A-4978-9F6F-E896472E53AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF611EA-218D-4231-A7AA-1F795132F90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DC57C2-8870-4663-830F-C6209F47DF06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98535",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038514",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6636",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and fails to apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traversal techniques to submit a path to a desired file location on an affected system. A successful exploit could allow the attacker to view any file on the system. Cisco Bug IDs: CSCvc99604."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Prime Collaboration Provisioning Software de Cisco (versiones anteriores a 11.1) podría permitir a un atacante autenticado remoto visualizar cualquier archivo en un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no realiza la comprobación de entrada apropiada de las peticiones HTTP y no  aplica los controles de acceso basados en roles (RBAC) a las URL HTTP pedidas. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada que utiliza técnicas de salto de directorio para enviar una ruta (path) a la ubicación de archivo deseada en un sistema afectado. Una explotación con éxito podría permitir al atacante visualizar cualquier archivo en el sistema. IDs de Bug de Cisco: CSCvc99604."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FBBA67-3E61-4C29-AE29-DA9AC85B130E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD5C349-0CCD-4182-8B41-CB199868A318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B93578-B8CF-4977-B2D6-3F2420391008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D10D0F-159A-4C2A-9ECE-4C55ADE37298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B13F1-A983-446D-8698-B562801B320B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D29AB4-BF27-4366-9CC1-060B8C97067A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F423A-8552-4406-8E42-3C417AEB4A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F7FBB-870A-4978-9F6F-E896472E53AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98526",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038515",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6637",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and fails to apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request that uses directory traversal techniques to submit a path to a desired file location on an affected system. A successful exploit could allow the attacker to delete any file from the system. Cisco Bug IDs: CSCvc99618."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Prime Collaboration Provisioning Software de Cisco (versiones anteriores a 11.1) podría permitir a un atacante remoto autenticado eliminar cualquier archivo de un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no realiza la comprobación de entrada apropiada de las peticiones HTTP y  no aplica los controles de acceso basados en roles (RBAC) a las URL HTTP pedidas. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada que utiliza técnicas de salto de directorio para enviar una ruta (path) a la ubicación de archivo deseada en un sistema afectado. Una explotación con éxito podría permitir al atacante eliminar cualquier archivo del sistema. IDs de Bug de Cisco: CSCvc99618."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FBBA67-3E61-4C29-AE29-DA9AC85B130E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD5C349-0CCD-4182-8B41-CB199868A318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B93578-B8CF-4977-B2D6-3F2420391008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D10D0F-159A-4C2A-9ECE-4C55ADE37298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B13F1-A983-446D-8698-B562801B320B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D29AB4-BF27-4366-9CC1-060B8C97067A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F423A-8552-4406-8E42-3C417AEB4A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F7FBB-870A-4978-9F6F-E896472E53AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98530",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038515",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6641",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to a lack of rate-limiting functionality in the TCP Listen application of the affected software. An attacker could exploit this vulnerability by sending a crafted TCP traffic stream in which specific types of TCP packets are flooded to an affected device, for example a TCP packet stream in which the TCP FIN bit is set in all the TCP packets. A successful exploit could allow the attacker to cause certain TCP listening ports on the affected system to stop accepting incoming connections for a period of time or until the affected device is restarted, resulting in a DoS condition. In addition, system resources, such as CPU and memory, could be exhausted during the attack. Cisco Bug IDs: CSCva29806."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de manejo de la conexión TCP de Remote Expert Manager Software versión 11.0.0 de Cisco, podría permitir a un atacante no autenticado remoto deshabilitar los puertos TCP y causar una condición de denegación de servicio (DoS) en un sistema afectado. La vulnerabilidad es debido a la falta de la funcionalidad de limitación de velocidad en la aplicación TCP Listen del programa afectado. Un atacante podría explotar esta vulnerabilidad mediante el envío de un flujo de tráfico TCP en el que se inundan tipos específicos de paquetes TCP a un dispositivo afectado, por ejemplo, un flujo de paquetes TCP en el que el bit FIN de TCP se establece en todos los paquetes TCP. Una explotación con éxito podría permitir al atacante hacer que ciertos puertos de escucha de TCP en el sistema afectado dejen de aceptar conexiones entrantes durante un período de tiempo o hasta que se reinicie el dispositivo afectado, resultando en una condición DoS. Además, los recursos del sistema, como la CPU y la memoria, podrían agotarse durante el ataque. IDs de Bug de Cisco: CSCva29806."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98532",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6642",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52856."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Remote Expert Manager Software versión 11.0.0 de Cisco, podría permitir a un atacante no autenticado remoto acceder a información confidencial de un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no protege suficientemente los datos confidenciales cuando responde a peticiones HTTP que se envían hacia la interfaz web del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia la interfaz web del programa en un sistema afectado. Una explotación con éxito podría permitirle al atacante acceder a información confidencial sobre el programa. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. IDs de Bug de Cisco: CSCvc52856."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98534",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6643",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52858."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Remote Expert Manager Software versión 11.0.0 de Cisco, podría permitir a un atacante no autenticado remoto acceder a información confidencial del Directorio Virtual en un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no protege suficientemente los datos confidenciales cuando responde a peticiones HTTP que se envían hacia la interfaz web del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia la interfaz web del programa en un sistema afectado. Una explotación con éxito podría permitirle al atacante acceder a información confidencial sobre el programa. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. IDs de Bug de Cisco: CSCvc52858."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98542",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6644",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52860."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Remote Expert Manager Software versión 11.0.0 de Cisco, podría permitir a un atacante no autenticado remoto acceder a información confidencial de un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no protege suficientemente los datos confidenciales cuando responde a peticiones HTTP que se envían hacia la interfaz web del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia la interfaz web del programa en un sistema afectado. Una explotación con éxito podría permitirle al atacante acceder a información confidencial sobre el programa. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. IDs de Bug de Cisco: CSCvc52860."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98539",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6645",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Temporary Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52861."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Remote Expert Manager Software de Cisco versión 11.0.0 podría permitir a un atacante no autenticado remoto acceder a información confidencial del Directorio Temporal Virtual en un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no protege suficientemente los datos confidenciales cuando responde a peticiones HTTP que se envían hacia la interfaz web del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia la interfaz web del programa en un sistema afectado. Una explotación con éxito podría permitirle al atacante acceder a información confidencial sobre el programa. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. IDs de Bug de Cisco: CSCvc52861."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98537",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6646",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Order information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52866 CSCvc52868."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Remote Expert Manager Software de Cisco versión 11.0.0, podría permitir a un atacante no autenticado remoto acceder a información confidencial de Pedidos en un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no protege suficientemente los datos confidenciales cuando responde a peticiones HTTP que se envían hacia la interfaz web del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia la interfaz web del programa en un sistema afectado. Una explotación con éxito podría permitirle al atacante acceder a información confidencial sobre el programa. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. IDs de Bug de Cisco: CSCvc52866 CSCvc52868."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98529",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6647",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Temporary File information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52875."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Remote Expert Manager Software de Cisco versión 11.0.0, podría permitir a un atacante no autenticado remoto acceder a información confidencial de archivos temporales en un sistema afectado. La vulnerabilidad se presenta porque el programa afectado no protege suficientemente los datos confidenciales cuando responde a peticiones HTTP que se envían hacia la interfaz web del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia la interfaz web del programa en un sistema afectado. Una explotación con éxito podría permitirle al atacante acceder a información confidencial sobre el programa. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. IDs de Bug de Cisco: CSCvc52875."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:remote_expert_manager:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FBE8C1-28EE-41E6-AFCB-719EAC7A0685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98538",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem7",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6649",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86787, CSCve60516, CSCve60555."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la línea de comando de Cisco-OS System Software 7.1 hasta la 7.3 ejecutándose en Cisco Nexus Series Switches puede permitir a un usuario local autenticado que realice un ataque de inyección de comandos. Esta vulnerabilidad es debida a la falta de validación de la entrada de los argumentos del comando. Un atacante podría explotar esta vulnerabilidad mediante la inyección de los argumentos del comando manipulados en la línea de comandos vulnerable. Un exploit podría permitir al atacante leer o escribir archivos aleatorios con privilegios de usuario fuera de la ruta del usuario. Bug IDs: CSCvb86787, CSCve60516, CSCve60555."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A20D72B-E2C6-47B6-A54D-FA435F29D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D9EEFA-D652-45D2-8AF5-8A72825E7ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEB91EC-E548-4C53-920F-C4871BC464B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0282F963-2C1F-44F7-A0D0-4929685051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97083C8-89AE-4D0D-A039-1B798D60B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3.12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "768151A3-CCF6-4F37-877F-4F1F2CD60791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9103A92E-C9F3-401B-AE30-66466210ADED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)d1\\(0.437\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B917BAB-61B4-4596-B409-E9D8CBB3A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E485E99D-F421-487D-86E7-A2D119623D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)zz\\(99.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6964-B258-42D4-8181-BB4765B58AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AA886F-7BD1-4699-B1D3-E495EFCA2812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "569B3CE7-CA06-4636-8043-7ED7635195A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98531",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038518",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6650",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into the Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86771."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el comando Telnet CLI de Cisco NX-OS System Software 7.1 hasta la 7.3 ejecutándose en el Cisco Nexus Series Switches permite a un usuario local autenticado realizar un ataque de inyección de comando. Esta vulnerabilidad es debida a la insuficiente validación de los argumento del comando de entrada. Un atacante puede aprovechar esta vulnerabilidad mediante la inyección de los argumentos del comando manipulados del comando Telnet. Un exploit puede permitir al atacante leer o escribir archivos aleatorios con los privilegios de usuario fuera de la ruta del usuario. Cisco Bug IDs: CSCvb86771."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A20D72B-E2C6-47B6-A54D-FA435F29D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D9EEFA-D652-45D2-8AF5-8A72825E7ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEB91EC-E548-4C53-920F-C4871BC464B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0282F963-2C1F-44F7-A0D0-4929685051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97083C8-89AE-4D0D-A039-1B798D60B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3.12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "768151A3-CCF6-4F37-877F-4F1F2CD60791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9103A92E-C9F3-401B-AE30-66466210ADED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)d1\\(0.437\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B917BAB-61B4-4596-B409-E9D8CBB3A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E485E99D-F421-487D-86E7-A2D119623D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)zz\\(99.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6964-B258-42D4-8181-BB4765B58AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AA886F-7BD1-4699-B1D3-E495EFCA2812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "569B3CE7-CA06-4636-8043-7ED7635195A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98528",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038518",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-nss1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6653",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device where the ISE GUI may fail to respond to new or established connection requests. The vulnerability is due to insufficient TCP rate limiting protection on the GUI. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP connections to the GUI. An exploit could allow the attacker to cause the GUI to stop responding while the high rate of connections is in progress. Cisco Bug IDs: CSCvc81803."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de limitación de TCP para la GUI de Identity Services Engine (ISE) versión 2.1(0.474) de Cisco, podría permitir a un atacante no autenticado remoto causar una condición de denegación de servicio (DoS) en un dispositivo afectado en el que la GUI de ISE puede cometer fallos para responder a peticiones de conexión nuevas o establecidas. La vulnerabilidad es debido a una protección de limitación de velocidad de TCP insuficiente en la GUI. Un atacante podría explotar esta vulnerabilidad mediante el envío del dispositivo afectado de una alta tasa de conexiones TCP hacia la GUI. Una explotación podría permitir al atacante hacer que la GUI deje de responder mientras la alta tasa de conexiones está en progreso. IDs de Bug de Cisco: CSCvc81803."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(0.474\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E53B93-2A49-4B3F-8487-E45D8F70F64C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98536",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038516",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6654",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-05-22T01:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvc06608."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Unified Communications Manager de Cisco versiones 10.5 hasta 11.5, podría permitir a un atacante remoto no autenticado conducir un ataque de tipo Cross-Site Scripting (XSS) contra un usuario de la interfaz de administración basada en web de un dispositivo afectado. La vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por el usuario para la interfaz de administración basada en web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario de la interfaz para que haga clic en un enlace diseñado. Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o permitirle acceder a información confidencial sobre el navegador. IDs de Bug de Cisco: CSCvc06608."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98527",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038512",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2494",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. macOS  anterior a versión 10.12.5 está afectado. El problema implica el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto con privilegios o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2495",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to cause a denial of service (application crash) via a crafted web site that improperly interacts with the history menu."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema implica el componente \"Safari\". Permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un sitio web especialmente diseñado que interactúa inapropiadamente con el menú del historial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "02628859-E667-4FA3-81DE-1BDFD866E8CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2496",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema implica el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "02628859-E667-4FA3-81DE-1BDFD866E8CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2497",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"iBooks\" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. macOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"iBooks\". Permite a los atacantes remotos desencadenar visitas a direcciones URL arbitrarias por medio de un libro especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2498",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the \"Security\" component. It allows attackers to bypass intended access restrictions via an untrusted certificate."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. El problema implica el componente \"Security\". Permite a los atacantes omitir las restricciones de acceso previstas por medio de un certificado no seguro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98479",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038485",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2499",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit Web Inspector\" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari  versión anterior a 10.1.1 se ve afectado. TVOS  versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit Web Inspector\". Permite a los atacantes ejecutar código sin firma arbitrario o provocar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "E41B300D-8147-46F8-A0F7-EDFD2B0D8613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2500",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. Safari anterior a versión 10.1.1 está afectado. El problema implica el componente \"Safari\". Permite a los atacantes remotos suplantar la barra de direcciones por medio de un sitio web especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "02628859-E667-4FA3-81DE-1BDFD866E8CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2501",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"Kernel\" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS  versión anterior a 10.3.2 se ve afectado. MacOS  versión anterior a 10.12.5 se ve afectado. TVOS  versión anterior a 10.2.1 se ve afectado. WatchOS  versión anterior a  3.2.2 se ve afectado. El tema involucra el componente \"Kernel\". Una condición de carrera permite a los atacantes ejecutar código arbitrario en un contexto privilegiado por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42054/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42054/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2502",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"CoreAudio\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS  versión anterior a 10.3.2 se ve afectado. MacOS  versión anterior a10.12.5 se ve afectado. TVOS  versión anterior a 10.2.1 se ve afectado. WatchOS  versión anterior a 3.2.2 se ve afectado. El tema involucra el componente \"CoreAudio\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2503",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. macOS  anterior a versión 10.12.5 está afectado. El problema implica el componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto con privilegios o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2504",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with WebKit Editor commands."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS  versión anterior a 10.3.2 se ve afectado. Safari  versión anterior a 10.1.1 se ve afectado. TVOS  versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Esto permite a los atacantes remotos conducir ataques de tipo Universal Cross-Site Scripting (XSS) por medio de un sitio web creado que interactúa inapropiadamente con los comandos Editor de WebKit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "E41B300D-8147-46F8-A0F7-EDFD2B0D8613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42064/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42064/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2505",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. Safari anterior a la versión 10.1.1 se ve afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "E41B300D-8147-46F8-A0F7-EDFD2B0D8613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2506",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema implica el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web  especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2507",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se ve afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2508",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with container nodes."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema implica el componente \"WebKit\". Permite a los atacantes remotos conducir ataques XSS universales (UXSS) por medio de un sitio web especialmente diseñado que interactúa inapropiadamente con nodos de contenedor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42066/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42066/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2509",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. macOS  anterior a versión 10.12.5 está afectado. El problema implica el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42046/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2510",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with pageshow events."
      }, {
        "lang" : "es",
        "value" : "Descubierto un problema en ciertos productos de Apple. IOS anterior a 10.3.2 está afectado y Safari anterior a 10.1.1 está afectado. El problema involucra el componente \"WebKit\" y permite a los atacantes remotos realizar ataques Universal XSS (UXSS) a través de un sitio web creado que interactúa de manera inapropiada con los eventos pageshow."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42067/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42067/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2511",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. Safari anterior a versión 10.1.1 está afectado. El problema involucra al componente \"Safari\". Permite a los atacantes remotos falsificar la barra de direcciones por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2512",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Sandbox\" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"Sandbox\". Permite a los atacantes conducir ataques de escape del sandbox o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2513",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"SQLite\" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SQL statement."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. MacOS versión anterior a 10.12.5 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"SQLite\". Una vulnerabilidad de uso de memoria previamente liberada permite a los atacantes remotos ejecutar un código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una declaración SQL creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2514",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "02628859-E667-4FA3-81DE-1BDFD866E8CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42063/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2515",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Un problema fue encontrado en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar un código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "02628859-E667-4FA3-81DE-1BDFD866E8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42068/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42068/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2516",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42047/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42047/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2518",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se vea afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"SQLite\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (desbordamiento de búfer y bloqueo de la aplicación) por medio de una instrucción SQL creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://usn.ubuntu.com/4019-2/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4019-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2519",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SQL statement."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se vea afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"SQLite\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y bloqueo de la aplicación) por medio de una instrucción SQL creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2520",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se vea afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"SQLite\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (desbordamiento de búfer y bloqueo de la aplicación) por medio de una instrucción SQL creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2521",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. Safari anterior a la versión 10.1.1 se ve afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98456",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42103/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42103/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2522",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"CoreFoundation\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se vea afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"CoreFoundation\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y bloqueo de la aplicación) por medio de datos creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98588",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42049/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42049/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2523",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"Foundation\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se vea afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente “Foundation”. Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y bloqueo de la aplicación) por medio de datos creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98584",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42050/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42050/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2524",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"TextInput\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10.12.5 se vea afectado. tvOS anterior a la versión la 10.2.1 se ve afectado. watchOS anterior a la versión 3.2.2 se ve afectado. El problema involucra el componente \"TextInput\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y bloqueo de la aplicación) por medio de datos creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42051/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42051/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2525",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar un código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2526",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2527",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"CoreAnimation\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via crafted data."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"CoreAnimation\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (consumo de memoria y bloqueo de aplicación) por medio de datos diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42052/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2528",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with cached frames."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos conducir ataques de  tipo XSS Universal (UXSS) por medio de un sitio web diseñado que interactúa inapropiadamente con las tramas almacenadas en caché."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42105/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42105/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2530",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. iCloud versión anterior a 6.2.1 en Windows se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar un código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "DF4256D8-E61B-48F3-818F-D8E48EB1F508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98455",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207803",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2531",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar un código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42104/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42104/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2533",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"DiskArbitration\" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"DiskArbitration\". Una condición de carrera permite a los atacantes ejecutar código arbitrario en un contexto privilegiado por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-357/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://phoenhex.re/2017-06-09/pwn2own-diskarbitrationd-privesc",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42146/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-357/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phoenhex.re/2017-06-09/pwn2own-diskarbitrationd-privesc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42146/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2534",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Speech Framework\" component. It allows attackers to conduct sandbox-escape attacks via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"Speech Framework\". Permite a los atacantes conducir ataques de escape del sandbox por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2535",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:01.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Security\" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (resource consumption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"Security\". Permite a los atacantes conducir ataques de escape del sandbox o causar una denegación de servicio (consumo de recursos) por medio de una aplicación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2536",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42125/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42125/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2537",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"WindowServer\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"WindowServer\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2538",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos de Apple. Las versiones anteriores a la 10.3.2 de iOS se han visto afectadas, así como las versiones anteriores a la 10.1.1 de Safari. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-03",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2539",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2540",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"WindowServer\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"WindowServer\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2541",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"WindowServer\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"WindowServer\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2542",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Multi-Touch\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"Multi-Touch\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2543",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Multi-Touch\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"Multi-Touch\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2544",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. Safari anterior a versión 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2545",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"IOGraphics\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS versiones anteriores a 10.12.5 está afectado. El problema involucra al componente \"IOGraphics\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio  de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2546",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "se descubrió un problema en ciertos productos de Apple. MacOS versiones anteriores a 10.12.5 está afectado. El problema involucra al componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio  de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2547",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS versiones anteriores a 10.3.2 está afectado. Safari versiones anteriores a 10.1.1 está afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio  de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42190/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42190/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2548",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"WindowServer\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a 10.12.5 está afectado. El problema involucra al componente \"WindowServer\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio  de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2549",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with frame loading."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos conducir ataques de tipo Universal XSS (UXSS) por medio de un sitio web creado que interactúa inapropiadamente con la carga de tramas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6977",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Speech Framework\" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS versiones anteriores a 10.12.5 está afectado. El problema involucra al componente \"Speech Framework\". Permite a los atacantes conducir ataques de escape del sandbox o causar una denegación de servicio (corrupción de memoria) por medio  de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6978",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"Accessibility Framework\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"Accessibility Framework\". Permite a los atacantes ejecutar código arbitrario en un contexto con privilegios o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42056/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42056/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6979",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"IOSurface\" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. MacOS versión anterior a 10.12.5 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"IOSurface\". Una condición de carrera permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6980",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42189/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42189/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6981",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"iBooks\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. macOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"iBooks\". Permite a los atacantes ejecutar código arbitrario en un contexto con privilegios por medio de una aplicación diseñada que utiliza symlinks."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6982",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the \"Notifications\" component. It allows attackers to cause a denial of service via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. El problema involucra el componente \"Notifications\". Permite a los atacantes causar una denegación de servicio por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98479",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038485",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42014/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42014/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6983",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. macOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"SQLite\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6984",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. Safari versión anterior a 10.1.1 se ve afectado. iTunes versión anterior a 12.6.1 en Windows se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.3",
            "matchCriteriaId" : "FA364FEA-190C-4C19-BEFF-6171CDBDEFB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98454",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207805",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42191/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42191/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6985",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:02.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"NVIDIA Graphics Drivers\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"NVIDIA Graphics Drivers\". Permite a los atacantes ejecutar código arbitrario en un contexto con privilegios o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6986",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"iBooks\" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"iBooks\". Permite a los atacantes conducir ataques de escape de espacio aislado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6987",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. MacOS versión anterior a 10.12.5 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El tema involucra el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6988",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"802.1X\" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certificate validation mishandles certificate changes."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"802.1X\". Permite a los atacantes remotos detectar las credenciales de red de los usuarios arbitrarios mediante el uso de una red diseñada que requiere autenticación 802.1X, porque la comprobación de certificados EAP-TLS maneja inapropiadamente los cambios de certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6989",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038485",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6990",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \"HFS\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ciertos productos de Apple. MacOS anterior a versión 10.12.5 está afectado. El problema involucra al componente \"HFS\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6991",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se descubrió  un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. macOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"SQLite\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un sitio web diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "7D3C1AE1-D2BB-4964-8B15-E6573216DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6994",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6995",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS  versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6996",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6997",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6998",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6999",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-05-22T05:29:03.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"AVEVideoEncoder\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema en ciertos productos de Apple. iOS  versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. WatchOS versión anterior a 3.2.2 se ve afectado. El problema involucra el componente \"AVEVideoEncoder\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.1",
            "matchCriteriaId" : "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "3C4D06EB-E1E6-41F9-9C22-3E362A8DAC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "BF9FD6E9-F7CC-497D-ADE4-3E39FFEE0077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42555/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T05:29:03.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 (11.0.17.406) allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una  vulnerabilidad de tipo Cross-Site Scripting  (XSS) en el archivo Telerik.ReportViewer.WebForms.dll en Telerik Reporting para el control Report Viewer de ASP.NET WebForms anterior a R1 2017 SP2 versión (11.0.17.406) permite a los atacantes remotos inyectar un script web o HTML arbitrario por medio del parámetro bgColor hacia Telerik.ReportViewer.axd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.17.406",
            "matchCriteriaId" : "82491A67-B7A3-4D5A-82CA-21C218EB4CAD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "4CC89273-29EF-431B-B7BD-62DD3E952FAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.telerik.com/support/whats-new/reporting/release-history/telerik-reporting-r1-2017-sp2-%28version-11-0-17-406%29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://knowledgebase.progress.com/articles/Article/Security-Advisory-for-Resolving-Security-vulnerabilities-September-2018",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.veracode.com/blog/research/anatomy-cross-site-scripting-flaw-telerik-reporting-module",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.telerik.com/support/whats-new/reporting/release-history/telerik-reporting-r1-2017-sp2-%28version-11-0-17-406%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://knowledgebase.progress.com/articles/Article/Security-Advisory-for-Resolving-Security-vulnerabilities-September-2018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.veracode.com/blog/research/anatomy-cross-site-scripting-flaw-telerik-reporting-module",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4915",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-05-22T14:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine."
      }, {
        "lang" : "es",
        "value" : "Workstation Pro/Player de VMware, contiene una vulnerabilidad de carga de biblioteca no segura por medio de los archivos de configuración del controlador de sonido ALSA. La explotación con éxito de este problema puede permitir a los usuarios del host sin privilegios escalar sus privilegios a root en una máquina host de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE47D4-506C-4132-829B-19A61ED35F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8337D-BC36-4910-A998-309D277D008C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98566",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038525",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42045/",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0009.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42045/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4916",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-05-22T14:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine."
      }, {
        "lang" : "es",
        "value" : "Workstation Pro/Player de VMware, contiene una vulnerabilidad de desreferencia de un puntero NULL que se presenta en el controlador vstor2. La explotación con éxito de este problema puede permitir a los usuarios del host con privilegios de usuario normal desencadenar una denegación de servicio en una máquina host de Windows."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE47D4-506C-4132-829B-19A61ED35F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8337D-BC36-4910-A998-309D277D008C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98560",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038526",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42140/",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0009.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T14:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.5-7 Q16, un archivo diseñado podría activar un fallo de aserción en la función ResetImageProfileIterator en el archivo MagickCore/profile.c debido a la falta de comprobaciones en la función ReadDDSImage en el archivo coders/dds.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98606",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/0c5b1e430a83ef793a7334bbbee408cf3c628699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/489",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/0c5b1e430a83ef793a7334bbbee408cf3c628699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T14:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "En la versión 7.0.5-7 Q16 de ImageMagick, un archivo manipulado podría provocar un fallo de aserción en la función WriteBlob en MagickCore/blob.c debido a la falta de comprobaciones en la función ReadOneJNGImage en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98683",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f0232a2a45dfd003c1faf6079497895df3ab0ee1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/490",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f0232a2a45dfd003c1faf6079497895df3ab0ee1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T14:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadMPCImage en coders/art.c permite a los atacantes provocar un ataque de denegación de servicio (filtrado de memoria) mediante un archivo .art manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98682",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3b0fe05cddd8910f84e51b4d50099702ea45ba4a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/456",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3b0fe05cddd8910f84e51b4d50099702ea45ba4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T14:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5 una imagen RLE especialmente manipulada puede provocar un cierre inesperado debido a la gestión incorrecta de EQF en coders/rle.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98603",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f6240ee77847787f6d7618b669d3a2040a2d6d40",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f6240ee77847787f6d7618b669d3a2040a2d6d40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7492",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-22T15:29:00.187",
      "lastModified" : "2023-11-07T02:50:10.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2161",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Tarjeta de memoria SDHC de FlashAirTM (Serie SD-WE (W-03)) versión 3.00.02 y anteriores y tarjeta de memoria SDHC de FlashAirTM (Serie SD-WD/WC (W-02)) versión 2.00.04 y anteriores, permite a los atacantes autenticados omitir las restricciones de acceso para obtener datos de imagen no autorizados por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.04",
            "matchCriteriaId" : "81FE3A57-D37B-4A63-B644-9296BEB763B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.00.02",
            "matchCriteriaId" : "81955C91-8DC4-4626-A84E-556E6E5E8B3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.toshiba-personalstorage.net/news/20170516a.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN46372675/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.toshiba-personalstorage.net/news/20170516a.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN46372675/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2162",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser."
      }, {
        "lang" : "es",
        "value" : "Tarjeta de memoria SDHC de FlashAirTM (Serie SD-WE (W-03)) versión 3.00.02 y anteriores y tarjeta de memoria SDHC de FlashAirTM (Serie SD-WD/WC (W-02)) versión 2.00.04 y anteriores, permite establecer credenciales por defecto para conexiones LAN inalámbricas al producto al activar la función PhotoShare por medio de un navegador web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.04",
            "matchCriteriaId" : "81FE3A57-D37B-4A63-B644-9296BEB763B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.00.02",
            "matchCriteriaId" : "81955C91-8DC4-4626-A84E-556E6E5E8B3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000091",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.toshiba-personalstorage.net/news/20170516a.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN81820501/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.toshiba-personalstorage.net/news/20170516a.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN81820501/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2168",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting en WP Booking System Free versión anterior a 1.4 y WP Booking System Premium versión anterior a 3.7, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpbookingsystem:wp_booking_system:*:*:*:*:free:wordpress:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "1D579035-AF96-48AC-907E-DA4060210F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpbookingsystem:wp_booking_system:*:*:*:*:premium:wordpress:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "B166A6F9-544B-4CDB-9DF1-E3957432793C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000092",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96165722/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-booking-system/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8830",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96165722/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-booking-system/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2169",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en versiones anteriores a la 6.19 de MaxButtons y hasta la 6.19 de MaxButtons Pro permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxbuttons_project:maxbuttons:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "6.18",
            "matchCriteriaId" : "C1811FCD-1278-4FD1-A6F9-B930E3BB81AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxbuttons_project:maxbuttons:*:*:*:*:pro:wordpress:*:*",
            "versionEndIncluding" : "6.18",
            "matchCriteriaId" : "286CFE84-36CA-4917-AF14-80B3FF798B1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN70411623/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/maxbuttons/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN70411623/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/maxbuttons/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2171",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2, Custom Search prior to version 1.36, Donate prior to version 2.1.1, Email Queue prior to version 1.1.2, Error Log Viewer prior to version 1.0.6, Facebook Button prior to version 2.54, Featured Posts prior to version 1.0.1, Gallery Categories prior to version 1.0.9, Gallery prior to version 4.5.0, Google +1 prior to version 1.3.4, Google AdSense prior to version 1.44, Google Analytics prior to version 1.7.1, Google Captcha (reCAPTCHA) prior to version 1.28, Google Maps prior to version 1.3.6, Google Shortlink prior to version 1.5.3, Google Sitemap prior to version 3.0.8, Htaccess prior to version 1.7.6, Job Board prior to version 1.1.3, Latest Posts prior to version 0.3, Limit Attempts prior to version 1.1.8, LinkedIn prior to version 1.0.5, Multilanguage prior to version 1.2.2, PDF & Print prior to version 1.9.4, Pagination prior to version 1.0.7, Pinterest prior to version 1.0.5, Popular Posts prior to version 1.0.5, Portfolio prior to version 2.4, Post to CSV prior to version 1.3.1, Profile Extra prior to version 1.0.7. PromoBar prior to version 1.1.1, Quotes and Tips prior to version 1.32, Re-attacher prior to version 1.0.9, Realty prior to version 1.1.0, Relevant - Related Posts prior to version 1.2.0, Sender prior to version 1.2.1, SMTP prior to version 1.1.0, Social Buttons Pack prior to version 1.1.1, Subscriber prior to version 1.3.5, Testimonials prior to version 0.1.9, Timesheet prior to version 0.1.5, Twitter Button prior to version 2.55, User Role prior to version 1.5.6, Updater prior to version 1.35, Visitors Online prior to version 1.0.0, and Zendesk Help Center prior to version 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the function to display the BestWebSoft menu."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de tipo cross-site-scripting en Captcha anterior a versión 4.3.0, Car Rental anterior a versión 1.0.5, Contact Form Multi anterior a versión 1.2.1, Contact Form anterior a versión 4.0.6, Contact Form to DB anterior a versión 1.5.7, Custom Admin Page anterior a versión 0.1.2, Custom Fields Search anterior a versión 1.3.2, Custom Search anterior a versión 1.36, Donate anterior a versión 2.1.1, Email Queue anterior a versión 1.1.2, Error Log Viewer anterior a versión 1.0.6, Facebook Button anterior a versión 2.54, Featured Posts anterior a versión 1.0.1, Gallery Categories anterior a versión 1.0.9, Gallery anterior a versión 4.5.0, Google +1 anterior a versión 1.3.4, Google AdSense anterior a versión 1.44, Google Analytics anterior a versión 1.7.1, Google Captcha (reCAPTCHA) anterior a versión 1.28, Google Maps anterior a versión 1.3.6, Google Shortlink anterior a versión 1.5.3, Google Sitemap anterior a versión 3.0.8, Htaccess anterior a versión 1.7.6, Job Board anterior a versión 1.1.3, Latest Posts anterior a versión 0.3, Limit Attempts anterior a versión 1.1.8, LinkedIn anterior a versión 1.0.5, Multilanguage anterior a versión 1.2.2, PDF & Print anterior a versión 1.9.4, Pagination anterior a versión 1.0.7, Pinterest anterior a versión 1.0.5, Popular Posts anteriores a versión 1.0.5, Portfolio anterior a la versión 2.4, Post to CSV anterior a versión 1.3.1, Profile Extra anterior a versión 1.0.7. PromoBar anterior a versión 1.1.1, Quotes and Tips anterior a versión 1.32, Re-attacher anterior a versión 1.0.9, Realty anterior a versión 1.1.0, Relevant - Related Posts anterior a versión 1.2.0, Sender anterior a versión 1.2.1, SMTP anterior a versión 1.1.0, Social Buttons Pack anterior a versión 1.1.1, Subscriber anterior a versión 1.3.5, Testimonials anteriores a versión 0.1.9, Timesheet anterior a versión 0.1.5, Twitter Button anterior a versión 2.55, User Role anterior a versión 1.5.6, Updater anterior a versión 1.35, Visitors Online anterior a versión 1.0.0, y Zendesk Help Center anterior a versión 1.0.5, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de la función para mostrar el menú BestWebSoft."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:captcha:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.2.9",
            "matchCriteriaId" : "90F44502-FB47-4A8C-85E0-1D2F7CEB4F8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:car_rental:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "7FD9118E-F65C-4F96-A03D-87EF15FE4DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.0.5",
            "matchCriteriaId" : "AA683363-7D2C-40FC-AFC1-8BB0D7E3AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form_multi:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "2C300FBE-4C10-402E-9DFD-9C2A0E241684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form_to_db:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.6",
            "matchCriteriaId" : "E74A735C-9771-42FE-91CF-2EE118BE5754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:custom_admin_page:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "567A9DFD-5848-4A84-8787-CC21DEDF3A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:custom_fields_search:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "A2B55BB7-BAA3-4A64-86B0-D0B1B0AE1790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:custom_search:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.35",
            "matchCriteriaId" : "417CA792-0359-484F-873D-CC1B1367EA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:donate:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "DFD8E82F-C24A-4038-9B08-CEEF5CBBC42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:email_queue:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "89F8B416-6BFD-48D7-B93E-CAB63DE9186B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:error_log_viewer:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.5",
            "matchCriteriaId" : "2A209B67-5AF3-43B3-882A-EB19FACDF92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:facebook_button:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "654AE23F-C9D4-4C7E-B224-7F3C6928BA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:featured_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "988E8170-1CBF-4ADC-996C-AABFB01BA651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.4.9",
            "matchCriteriaId" : "2B96D453-8969-450C-9C65-AB3F7AEEBB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:gallery_categories:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "22A425FD-B64C-4838-B444-E360EC3CC165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_\\+1:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "7254F701-8040-4333-9176-485C933B91C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_adsense:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.43",
            "matchCriteriaId" : "C2E35767-7306-4629-8D52-25473261C6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_analytics:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.0",
            "matchCriteriaId" : "8EB86D06-FE0E-4F27-BD0C-DF8F14683C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_captcha_\\(recaptcha\\):*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.27",
            "matchCriteriaId" : "41305158-20F3-4981-A225-DA6098D29787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "8D441016-C8FA-46EE-A5C9-1BC59C0300BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_shortlink:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "E9D74A48-AA12-4144-9E58-629B0453F2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_sitemap:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "76055B18-196C-40E7-9ED0-08757BF02294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:htaccess:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "9AD12F58-D0AE-4C81-A462-77B773AC6C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:job_board:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "1E7291C6-8894-445E-8D1F-F7E0B81B7413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:latest_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "2E923F7E-6E06-4D71-A6BD-DD3F5C9ACE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:limit_attempts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.7",
            "matchCriteriaId" : "4523ADEB-335E-4F85-BB9C-F9067FE7704E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:linkedin:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "7C68F2B6-7703-4D1A-9F65-84AFA2A1399C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:multilanguage:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "C18F489C-D0D5-4E52-8676-A9AA54E0F4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:pagination:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "9ACAF0C2-2F33-428A-82C3-033008BA53E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:pdf_\\&_print:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "15CACB57-172A-4D72-945B-2E558C4306A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:pinterest:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "128A8B29-44E3-48E2-9B35-647CFDB4B2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:popular_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "E5142C57-41B0-4C34-8D67-1B0E74E85823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:portfolio:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "4BB616C1-FB02-4C36-8404-2B51174E0643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:post_to_csv:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "C7BD7BC4-26C8-44CC-BA11-FBD08C60BDDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:profile_extra:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "A9B6AF6B-7C61-4710-8E20-5260B8BB8587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:promobar:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "66EBAC9C-9BDF-4CE0-A6DF-F86B60749EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:quotes_and_tips:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.31",
            "matchCriteriaId" : "A155BC6E-80DC-4B1F-91BC-91F46EFDB7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:re-attacher:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "D5244EC0-B74E-4621-8A35-1303A66FBB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:realty:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "7B3D5561-7C8A-4F10-A94C-3B107E859C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:relevant_-_related_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "13C5ADFE-9E5F-4B6D-868C-1E5561BCA735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:sender:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E2FEB44F-6295-47DA-A8E1-A98C91D7B3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:smtp:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "C31637E1-2B26-41D3-9C48-30909192C4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:social_buttons_pack:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "3F00CBC2-5171-47ED-8E4D-B5F5AE6F2D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:subscriber:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "7780A47F-094A-4F9C-AF4E-9C77CDF0ABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:testimonials:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.1.8",
            "matchCriteriaId" : "9936ACD0-1E2E-4E14-B83E-E4967DA9E546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:timesheet:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.1.4",
            "matchCriteriaId" : "7AF2B2E4-0563-4FB3-83AA-4A219EB41036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:twitter_button:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.54",
            "matchCriteriaId" : "F0CF502E-87F7-4B64-B123-EF610ABAC15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:updater:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.34",
            "matchCriteriaId" : "1E817AF1-87E3-43A6-86F6-69C585790F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:user_role:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.5",
            "matchCriteriaId" : "97AD540F-5775-4F84-AAA5-175C947BB34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:visitors_online:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.9",
            "matchCriteriaId" : "61A05396-59CD-475A-A4D5-009B591C6BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:zendesk_help_center:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "6F4D196B-0578-44BA-A2C3-10F1C4D395F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000094",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN24834813/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN24834813/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2173",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en Empirical Project Monitor - eXtended en todas sus versiones permite a los atacantes inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:empirical_project_monitor_-_extended:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82DA0B8-F39D-4171-94E9-3F42D4E0B162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000096",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN85512750/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/sec/info/20170519.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN85512750/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/sec/info/20170519.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2174",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en Empirical Project Monitor - eXtended en todas sus versiones permite a los atacantes inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:empirical_project_monitor_-_extended:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82DA0B8-F39D-4171-94E9-3F42D4E0B162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000097",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11326581/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/sec/info/20170519.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11326581/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/sec/info/20170519.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2175",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-05-22T16:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Empirical Project Monitor - eXtended en todas sus versiones permite a los atacantes conseguir privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:empirical_project_monitor_-_extended:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82DA0B8-F39D-4171-94E9-3F42D4E0B162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000098",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN12493656/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/sec/info/20170519.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN12493656/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/sec/info/20170519.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5657",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-05-22T18:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights)."
      }, {
        "lang" : "es",
        "value" : "Varios endpoints de servicio REST de Apache Archiva no están protegidos contra ataques de tipo Cross Site Request Forgery (CSRF). Un sitio malicioso abierto en el mismo navegador que el sitio archiva puede enviar una respuesta HTML que ejecuta acciones arbitrarias en los servicios de archiva, con los mismos derechos que la sesión de archiva activa (por ejemplo, derechos de administrador)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "1EFE650A-FEA8-4182-AC36-C9EB41C39EC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archiva.apache.org/security.html#CVE-2017-5657",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98570",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038528",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://archiva.apache.org/security.html#CVE-2017-5657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T18:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted tnef file."
      }, {
        "lang" : "es",
        "value" : "La función TNEFFillMapi en lib / ytnef.c en libytnef in ytnef hasta 1.9.2 no garantiza un valor de conteo distinto de cero antes de una cierta asignación de memoria, lo que permite a los atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en saturación y bloqueo de la aplicación) o posiblemente tenga otro impacto no especificado a través de un archivo tnef diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.2",
            "matchCriteriaId" : "334A8EE7-0AAC-4103-B523-5669F708816F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862707",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T18:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file."
      }, {
        "lang" : "es",
        "value" : "LibTIFF 4.0.7 tiene una lectura no válida en la función _TIFFVGetField en tif_dir.c, lo que podría permitir a atacantes remotos causar una denegación de servicio (bloqueo) a través de un archivo TIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2693",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42301/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42301/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6891",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-05-22T19:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility."
      }, {
        "lang" : "es",
        "value" : "Se pueden explotar dos errores en la función \\\"asn1_find_node()\\\" (lib/parser_aux.c) en GnuTLS libtasn1 versión 4.10 para provocar un desbordamiento de búfer basado en pila engañando a un usuario para que procese un archivo de asignaciones especialmente manipulado mediante la utilidad de ejemplo asn1Coding."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libtasn1:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17277D17-DF6A-4594-B9FA-8D91EFF3ADBC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:bookkeeper:4.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB293558-0DB0-4EEB-A91C-7B00A9FA634E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=5520704d075802df25ce4ffccc010ba1641bd484",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3861",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98641",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038619",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76125/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-11",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=5520704d075802df25ce4ffccc010ba1641bd484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76125/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T19:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform \"Clean metadata\" actions upon invocation from the Nautilus contextual menu, which allows context-dependent attackers to obtain sensitive information by reading a file for which cleaning had been attempted."
      }, {
        "lang" : "es",
        "value" : "Metadata Anonymisation Toolkit (MAT) versiones 0.6 y 0.6.1, silenciosamente no puede realizar acciones de \"Clean metadata\" a partir de la invocación desde el menú contextual de Nautilus, que permite a los atacantes dependiendo del contexto obtener información confidencial mediante la lectura de un archivo para el que se había intentado la limpieza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadata_anonymisation_toolkit_project:metadata_anonymisation_toolkit:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B1586-B7DD-4EB5-B2CD-88F0371E01D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadata_anonymisation_toolkit_project:metadata_anonymisation_toolkit:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFAF3F7-D5A4-4534-A6F7-3D237CBCCF31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://0xacab.org/mat/mat/commit/8f6303a1f26fe8dad83ba96ab8328dbdfa3af59a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://0xacab.org/mat/mat/commit/94ca62a429bb6a3a5f293de26053e54bbfeea9f9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://0xacab.org/mat/mat/issues/11527",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugs.debian.org/858058",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://0xacab.org/mat/mat/commit/8f6303a1f26fe8dad83ba96ab8328dbdfa3af59a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://0xacab.org/mat/mat/commit/94ca62a429bb6a3a5f293de26053e54bbfeea9f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://0xacab.org/mat/mat/issues/11527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugs.debian.org/858058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1092",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-22T20:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390."
      }, {
        "lang" : "es",
        "value" : "Informix Open Admin Tool versiones 11.5, 11.7 y 12.1 de IBM, podría permitir que un usuario no autorizado ejecute código arbitrario como administrador del sistema en servidores Windows. ID de IBM X-Force: 120390."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_open_admin_tool:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CA98AE-782A-46D5-855D-E655E9066472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_open_admin_tool:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A756976B-93AF-4A1C-84FA-43D97090520E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_open_admin_tool:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D57EB2-B98E-4691-B126-FC8E11C37768"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002897",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42091/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42541/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42091/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42541/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1159",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-22T20:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 122891."
      }, {
        "lang" : "es",
        "value" : "Business Process Manager versiones 8.0 y 8.5 de IBM, podría permitir que un atacante remoto condujera  ataques de phishing, utilizando un ataque de redireccionamiento abierto. Mediante la persuasión a una víctima para visitar un sitio Web especialmente diseñado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL que se muestra para redireccionar a un usuario a un sitio web malicioso que parece ser de confianza. Esto podría permitir al atacante obtener información altamente sensible o dirigir más ataques contra la víctima. ID de IBM X-Force: 122891."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC02B89-813E-4B3D-B518-6565BE06C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFA125-9D52-4C16-9946-DB8D43700415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613CC0CD-083E-439A-9A53-777E69CDE2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*",
            "matchCriteriaId" : "6131DC1F-CBA6-4025-B5A5-98307274FA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*",
            "matchCriteriaId" : "439A4F14-76E6-4A21-A23C-D3DA243585A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2016.12:*:*:*:*:*:*",
            "matchCriteriaId" : "79A27F7F-9EAE-4E2B-B5E8-2C82380D9C70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000253",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98561",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22000253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1282",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-22T20:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760."
      }, {
        "lang" : "es",
        "value" : "Content Navigator & CMIS versiones 2.0 y 3.0 de IBM, es vulnerable a un problema de tipo cross-site-scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, lo que altera la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 124760."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49CC892-16E8-43C7-9DA4-889C6DE83FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BE9068-FF24-470D-B852-7338D8990285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44863E7C-4A2B-471A-8411-1CD7A38E7300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA906C7B-FD7E-4F7B-AFB8-645EBCB3AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC6DC-5F0D-46E8-85F9-BC9EA5244D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002356",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98563",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1289",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-22T20:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150."
      }, {
        "lang" : "es",
        "value" : "SDK de IBM, Java Technology Edition es vulnerable a un error de inyección XML External Entity (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente confidencial o consumir recursos de memoria. ID de IBM X-Force: 125150."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sdk:*:service_refresh_16_fp41:*:*:java_technology_edition:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "CD06C8C9-F372-447B-BACF-FFF285FA752B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sdk:*:service_refresh_8_fp41:*:*:java_technology_edition:*:*:*",
            "versionEndIncluding" : "6r1",
            "matchCriteriaId" : "433DD25E-7F4E-4A13-B1C2-6D42E9C6F543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sdk:*:service_refresh_10_fp1:*:*:java_technology_edition:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "A5A902B3-8747-4185-BA40-F2F6E93340B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sdk:*:service_refresh_4_fp1:*:*:java_technology_edition:*:*:*",
            "versionEndIncluding" : "7r1",
            "matchCriteriaId" : "7E1CBA89-77F9-4E73-B22C-D9B7566B0335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sdk:*:service_refresh_4_fp2:*:*:java_technology_edition:*:*:*",
            "versionEndIncluding" : "8",
            "matchCriteriaId" : "DA657C59-DF17-496C-B7CB-16F8A594430A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98401",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22002169",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22002169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1320",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-22T20:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125732."
      }, {
        "lang" : "es",
        "value" : "Tivoli Federated Identity Manager versión 6.2 de IMB, es vulnerable a un problema de tipo cross-site-scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, lo que altera la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 125732."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E508843E-DEA8-433D-AFD5-2730D2745E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B08471C-D834-4247-87A6-6F9D6777375B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2E0940-AAAF-43CA-A34B-7D7F69D98C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFC5237-6ECD-4B6D-AC3D-D32886302CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E654796-0374-42DC-8635-8F8AE969B60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2AB53-1012-4E7F-BA36-37B61925D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1562CAEC-EDC3-4E2D-8D3A-65D8E27AAB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F93FFD7-7590-4903-A297-7CB243156CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A52678-4E86-47B7-9908-2F3B81A002E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B13FF6-530E-4007-8838-39B296000E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E074A49F-7B1C-4474-A419-26CDDAC71A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615EBF83-FE78-4C9E-A9FE-2B6AFD9790F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E4337-BE00-4248-9C42-D3A204721CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB97FC3C-8AA5-489D-855C-A416AD8CD4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F674F64E-F51F-4F5E-AFCD-952958E66FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F50532-F35A-4D58-A5E6-6CF76C1B9B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B81FC-673F-44B0-B50E-B323FB7C2F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DF5827-6D81-46ED-A3AF-9A79DEC63DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA594780-B9F8-4470-8FCE-F6DA30BBB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203852B1-9CA0-4E9D-B0BC-DC286F63AD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFC22AC-7341-4A46-A8F7-11FD7B68FA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2407D9B-5FF1-445D-8A76-8B6A9E237B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D17C99C-64DF-42C8-9BDA-436DA045C5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4D6784-84D6-47AC-8714-6CFF083C1DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F48368-9617-4EE6-BF7A-6873229C0D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC99FA25-B699-49B9-8379-C53CA6893F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B34BD77-F6D6-43C9-9441-54F7B4932B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB51985-2D33-492D-96B5-0241B497FA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867F878F-C18A-444C-A39B-FE0BA6558AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C87711B-A780-4896-B45A-3EC123CD1660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2DBD22-0427-46E9-893A-13F00E49E516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69479E7A-6414-41EE-9CA5-4E4A66F6EB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC955321-DE55-49DA-A0A7-A831BB213975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB10B39-D474-4B8A-BB3E-C62A33790F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F727E9A7-271E-46CF-A613-D47CB2BE7F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FD4F89-60A4-4B6F-8915-3BBB070C421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9359AEC3-1C78-40D7-9994-7D021C1CCF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A51FCB-70B0-4176-810C-62CBA3B2E9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C42407-324F-43BD-8D10-3D8C4A207414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD78A37-1D10-4FE4-A468-D6472F488C33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002877",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038505",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-22T22:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value available for restricting the output of the print_bpf_insn function, which allows local users to obtain sensitive address information via crafted bpf system calls."
      }, {
        "lang" : "es",
        "value" : "La función do_check en el archivo kernel/bpf/verifier.c en el kernel de Linux anterior a versión 4.11.1, no hace que el valor de allow_ptr_leaks esté disponible para restringir la salida de la función print_bpf_insn, que permite a los usuarios locales obtener información de una dirección confidencial  por medio de llamadas del sistema bpf especialmente diseñadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.9",
            "matchCriteriaId" : "526CF197-BAE6-4F03-9D2F-07A864CD9185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0e57697f162da4aa218b5feafe614fb666db07",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1251",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0d0e57697f162da4aa218b5feafe614fb666db07",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42048/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0e57697f162da4aa218b5feafe614fb666db07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0d0e57697f162da4aa218b5feafe614fb666db07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42048/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:01.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the (3) name parameter to mailbox/add/did/<domain id>; the (4) goto parameter to alias/add/did/<domain id>; or the (5) captchatext parameter to auth/lost-password."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) en ViMbAdmin 3.0.15, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios mediante los parámetros (1) domain o (2) transport en domain/add."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vimbadmin:vimbadmin:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E264D9F-A7D6-4DCA-AE55-AFB9CD71B3EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/03/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/03/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested operations."
      }, {
        "lang" : "es",
        "value" : "Un servicio prestado por Zimbra Collaboration Suite (ZCS) en versiones anteriores a la 8.7.6 no solicita los privilegios necesarios antes de realizar determinadas operaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.5",
            "matchCriteriaId" : "A3DF492D-11DB-4AB6-BACA-4ABADA9FC2EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98087",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Security_Center",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Security_Center",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en Zimbra Collaboration Suite (también conocido como ZCS) en versiones anteriores a la 8.7.6 permite a los atacantes provocar un impacto no especificado mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.5",
            "matchCriteriaId" : "A3DF492D-11DB-4AB6-BACA-4ABADA9FC2EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Security_Center",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Security_Center",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en versiones anteriores a la 8.7.1 de Zimbra Collaboration Suite (ZCS) permite a los atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.0",
            "matchCriteriaId" : "D16A5761-8035-4379-A396-62F362FED071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98081",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture."
      }, {
        "lang" : "es",
        "value" : "La pérdida de memoria en el audio/audio.c en QEMU (también conocido como Quick Emulator) permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) al iniciar y detener repetidamente la captura de audio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98302",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events."
      }, {
        "lang" : "es",
        "value" : "La pérdida de memoria en el soporte de controladores de eventos de entrada de teclado en QEMU (también conocido como Quick Emulator) permite a los usuarios privilegiados locales de SO invitados causar una denegación de servicio (consumo de memoria del host) al generar rápidamente eventos de teclado grandes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/03/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/03/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873."
      }, {
        "lang" : "es",
        "value" : "El componente  VC70RUNTIME de Visual Composer en SAP NetWeaver AS JAVA versión 7.5 permite a los usuarios autenticados remotos conducir ataques de tipo XML External Entity (XXE) por medio de un documento XML creado en una petición a irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit .default, también se conoce como Nota de Seguridad de SAP 2386873."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://erpscan.io/advisories/erpscan-17-007-sap-netweaver-java-7-5-xxe-visual-composer-vc70runtime/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-007-sap-netweaver-java-7-5-xxe-visual-composer-vc70runtime/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694."
      }, {
        "lang" : "es",
        "value" : "Sinopia, como es usado en SAP HANA XS versión 1.00 y versión 2.00, permite a los atacantes remotos secuestrar paquetes npm o alojar archivos arbitrarios al explotar una política de creación de usuarios no segura, también se conoce como Nota de Seguridad de SAP 2407694."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_xs:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED07F990-5A46-4B07-BAF6-B4B8442F1FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_xs:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA84FF-06CF-4A08-8417-8DFC77CF6F38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-009-sap-hana-sinopia-default-user-creation-policy-insecure/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-009-sap-hana-sinopia-default-user-creation-policy-insecure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package with a filename containing a $ (dollar sign) or % (percent) character, aka SAP Security Note 2407694."
      }, {
        "lang" : "es",
        "value" : "Sinopia, como se usa en SAP HANA XS versión 1.00 y versión 2.00, permite a los atacantes remotos causar una denegación de servicio (fallo de afirmación y fallo del servicio) al empujar un paquete con un nombre de archivo que contiene un carácter $ (signo de dólar) o % (porcentaje), también se conoce como Nota de Seguridad de SAP 2407694."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_xs:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED07F990-5A46-4B07-BAF6-B4B8442F1FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_xs:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA84FF-06CF-4A08-8417-8DFC77CF6F38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-008-sap-hana-xs-sinopia-dos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-008-sap-hana-xs-sinopia-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii function in input-pnm.c:303:12."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función pnm_load_ascii en input-bmp.c:303:12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene una sobrelectura de búfer basado en memoria dinámica (heap) en la función pnm_load_raw en input-bmp.c:346:41."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c:391:13."
      }, {
        "lang" : "es",
        "value" : "En el archivo libautotrace.a en AutoTrace versión 0.31.1 presenta un desbordamiento de búfer en a región heap de la memoria en la función pnm_load_rawpbm en el archivo input-pnm.c:39:13."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:16:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (lectura invalida y SEGV). Esta vulnerabilidad está relacionada con la función GET_COLOR en color.c:16:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the input_pnm_reader function in input-pnm.c:243:3."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (lectura invalida y SEGV) relacionada con la función  input_pnm_reader function en input-bmp.c:243:3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:303:12."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función pnm_load_ascii en input-bmp.c:303:12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:306:14."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función pnm_load_ascii en input-bmp.c:306:14."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_raw function in input-pnm.c:336:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función pnm_load_raw en input-bmp.c:336:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_rawpbm function in input-pnm.c:391:15."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función pnm_load_rawpbm en input-bmp.c:391:15."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken function in input-pnm.c:458:12."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en pila en la función pnmscanner_gettoken en input-pnm.c:458:12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in autotrace.c:188:23."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en autotrace.c:188:23."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in autotrace.c:191:2."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en autotrace.c:191:2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in pxl-outline.c:106:54."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en pxl-outline.c:106:54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:16:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 tiene una sobrelectura de búfer en la función GET_COLOR en color.c:16:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:02.963",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:17:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 tiene una sobrelectura de búfer en la función GET_COLOR en color.c:17:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 tiene una sobrelectura de búfer en la función GET_COLOR en color.c:18:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:337:25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:353:25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:355:25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:370:25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene una sobrelectura de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:492:24."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:496:29."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-bmp.c:497:29."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:21:23."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (lectura inválida y SEGV). Esta vulnerabilidad está relacionada con la función GET_COLOR en color.c:21:23."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:353:25."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (DoS) (escritura inválida y SEGV) relacionada con la función ReadImage en input-bmp.c:353:25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:370:25."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función ReadImage en input-bmp.c:370:25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:390:12."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (lectura inválida y SEGV) relacionada con la función ReadImage en input-bmp.c:390:12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:421:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función ReadImage en input-bmp.c:421:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (DoS) (lectura inválida y SEGV) relacionada con la función ReadImage en input-bmp.c:425:14."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (DoS) (lectura invalida y SEGV) relacionada con la función ReadImage en input-bmp.c:440:14."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98679",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (escritura inválida y SEGV) relacionada con la función ReadImage en input-bmp.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (uso de memoria previamente liberada y lectura de memoria dinámica o heap no válida) relacionada con la función GET_COLOR en color.c:16:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98678",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-bmp.c:309:7."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en input-bmp.c:309:7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-bmp.c:314:7."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en input-bmp.c:314:7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-bmp.c:319:7."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en input-bmp.c:319:7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-bmp.c:326:17."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en input-bmp.c:326:17."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-bmp.c:486:7."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de AutoTrace tiene un fallo \\\"cannot be represented in type int\\\" en input-bmp.c:486:7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"left shift ... cannot be represented in type int\" issue in input-bmp.c:516:63."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en la versión 0.31.1 de Autotrace tiene un problema \\\"left shift ... cannot be represented in type int\\\" en input-bmp.c:516:63."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c:16:11."
      }, {
        "lang" : "es",
        "value" : "libautotrace.a en AutoTrace 0.31.1 permite a los atacantes remotos provocar una denegación de servicio (lectura invalida y cierre inesperado) relacionada con la función GET_COLOR en color.c:16:11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 permite a atacantes remotos causar una denegación de servicio (liberación no válida), relacionada con la función free_bitmap en bitmap.c:24:5."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:03.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función rle_fread en input-tga.c:252:15."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-tga.c:528:7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función ReadImage en input-tga.c:538:33."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene una sobrelectura de búfer basado en memoria dinámica (heap) en la función ReadImage en input-tga.c:559:29."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene una sobrelectura de búfer basado en memoria dinámica (heap) en la función ReadImage en input-tga.c:620:27."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"negative-size-param\" issue in the ReadImage function in input-tga.c:528:7."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un problema de parámetro de tamaño negativo (negative-size-param) en la función ReadImage en input-tga.c:528:7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-tga.c:498:55."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un problema: \"no se puede representar mediante tipo entero (int)\" en input-tga.c:498:55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-tga.c:508:18."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un problema \"no se puede representar en tipo entero (int)\" en input-tga.c:498:55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-tga.c:192:19."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un problema \"no se puede representar en tipo entero (int)\" en input-tga.c:192:19."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libautotrace.a in AutoTrace 0.31.1 has a \"cannot be represented in type int\" issue in input-tga.c:528:63."
      }, {
        "lang" : "es",
        "value" : "Libautotrace.a en AutoTrace 0.31.1 tiene un problema \"no se puede representar en tipo entero (int)\" en input-tga.c:528:63."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD756666-3B3A-4CAB-A59C-4BA85C23233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c."
      }, {
        "lang" : "es",
        "value" : "Imagew-cmd.c:850:46 en libimageworsener.a en ImageWorsener 1.3.1 permite a atacantes remotos causar una denegación de servicio (error de división por cero) a través de una imagen especialmente diseñada, relacionada con imagew-api.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c."
      }, {
        "lang" : "es",
        "value" : "Imagew-cmd.c:854:45 en libimageworsener.a en ImageWorsener 1.3.1 permite a atacantes remotos causar una denegación de servicio (error de división por cero) a través de una imagen especialmente diseñada, relacionada con imagew-api.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) via a crafted image, related to imagew-bmp.c."
      }, {
        "lang" : "es",
        "value" : "Imagew-main.c:960:12 en libimageworsener.a en ImageWorsener 1.3.1 permite a atacantes remotos causar una denegación de servicio (desbordamiento inferior de búfer) a través de una imagen especialmente diseñada, relacionada con imagew-bmp.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/a4f247707f08e322f0b41e82c3e06e224240a654",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/a4f247707f08e322f0b41e82c3e06e224240a654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c."
      }, {
        "lang" : "es",
        "value" : "La función iw_get_ui16le en imagew-util.c:405:23 en libimageworsener.a en ImageWorsener 1.3.1 permite a atacantes remotos causar una denegación de servicio (lectura no válida y SEGV) a través de una imagen especialmente diseñada, relacionada con imagew-jpeg.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c."
      }, {
        "lang" : "es",
        "value" : "La función iw_get_ui16le en imagew-util.c:422:24 en libimageworsener.a en ImageWorsener 1.3.1 permite a atacantes remotos causar una denegación de servicio (lectura no válida y SEGV) a través de una imagen especialmente diseñada, relacionada con imagew-jpeg.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c."
      }, {
        "lang" : "es",
        "value" : "La función iw_get_ui16le en imagew-util.c:405:23 en libimageworsener.a en ImageWorsener 1.3.1 permite a los atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basado en memoria dinámica -heap-) a través de una imagen especialmente diseñada, relacionada con imagew-jpeg.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c."
      }, {
        "lang" : "es",
        "value" : "La función iw_get_ui16be en imagew-util.c:422:24 en libimageworsener.a en ImageWorsener 1.3.1 permite a los atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basado en memoria dinámica -heap-) a través de una imagen especialmente diseñada, relacionada con imagew-jpeg.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60307047-29E3-470F-9482-7FA546DE3196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1."
      }, {
        "lang" : "es",
        "value" : "Libqpdf.a en QPDF 6.0.0 permite a atacantes remotos causar una denegación de servicio (recursión infinita y consumo de pila) a través de un documento PDF especialmente diseñado, relacionado con las funciones releaseResolved, también conocido como qpdf-infiniteloop1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2."
      }, {
        "lang" : "es",
        "value" : "En el archivo libqpdf.a en QPDF versión 6.0.0 permite a los atacantes remotos causar una denegación de servicio (recursión infinita y consumo de pila) por medio de un documento PDF creado, relacionado con la función QPDFObjectHandle::parseInternal, también se conoce como qpdf-infiniteloop2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T04:29:04.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to unparse functions, aka qpdf-infiniteloop3."
      }, {
        "lang" : "es",
        "value" : "Libqpdf.a en QPDF 6.0.0 permite a atacantes remotos causar una denegación de servicio (recursión infinita y consumo de pila) a través de un documento PDF especialmente diseñado, relacionado con funciones no parseadas, también conocido como qpdf-infiniteloop3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T05:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload this archive and extract its contents, and visiting a URI under sitecore/ to execute the .asp file."
      }, {
        "lang" : "es",
        "value" : "El administrador de paquetes de CRM versión 8.1 Rev 151207 de Sitecore, permite a los administradores autenticados remotos ejecutar código ASP arbitrario mediante la creación de un archivo ZIP en el que un archivo .asp tiene un ..\\  en su nombre de ruta (path), visitando el archivo sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx para cargar este archivo y extraer su contenido, y visitando un URI en sitecore/ para ejecutar el archivo .asp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:crm:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53A15A-75BC-4F6C-A362-A85A51665B19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T05:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter."
      }, {
        "lang" : "es",
        "value" : "CRM versión 8.1 Rev 151207 de Sitecore, permite a los administradores autenticados remotos leer archivos arbitrarios por medio de un ataque de salto de ruta (path) absoluta en el archivo sitecore/shell/download.aspx con el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:crm:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53A15A-75BC-4F6C-A362-A85A51665B19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T05:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application."
      }, {
        "lang" : "es",
        "value" : "La función crypto_skcipher_init_tfm en el archivo crypto/skcipher.c en el kernel de Linux hasta versión 4.11.2, se basa en una función setkey que carece de una comprobación de tamaño de clave, que permite a los usuarios locales causar una denegación de servicio (desreferencia de puntero NULL) por medio de una aplicación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.2",
            "matchCriteriaId" : "14A37919-F5C8-4F53-895A-69FD63F4FD5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9933e113c2e87a9f46a40fde8dafbf801dca1ab9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/9933e113c2e87a9f46a40fde8dafbf801dca1ab9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9718933/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9933e113c2e87a9f46a40fde8dafbf801dca1ab9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/9933e113c2e87a9f46a40fde8dafbf801dca1ab9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9718933/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T14:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name."
      }, {
        "lang" : "es",
        "value" : "La pila Bluetooth en el BMW 330i 2011 permite un cierre inesperado del software CD/Multimedia mediante especificadores de cadenas de formato %x o %c en el nombre de un dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bavarian_motor_works:bluetooth_stack:-:*:*:*:*:*:2011_bmw_330i:*",
            "matchCriteriaId" : "9130488C-4B52-4D13-AC45-1C258387F5D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://twitter.com/__Obzy__/status/864704956116254720",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/__Obzy__/status/864704956116254720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6131",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-05-23T15:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH."
      }, {
        "lang" : "es",
        "value" : "En algunas circunstancias, una instancia de nube de Azure de F5 BIG-IP versiones 12.0.0 hasta 12.1.2 y versión 13.0.0, puede contener una contraseña administrativa por defecto que podría usarse para iniciar sesión de manera remota en el sistema BIG-IP. La cuenta administrativa afectada es el usuario administrativo de instancia Azure que se creó en la implementación. Las cuentas root y administrador no son vulnerables. Un atacante puede acceder de remotamente al host BIG-IP por medio de SSH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524B2D05-508C-47FF-94A0-6CC42060E638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD7394-BD0A-42FD-A367-827F35397A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98509F74-301A-4D1F-A2B4-B01B80CEFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F72B2-84F2-4FA2-9B53-E98344235EB6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE1EEA6-1E25-4A90-91A1-386D19808557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A05340-0AE2-49CA-903F-44383421577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038569",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "https://support.f5.com/csp/article/K61757346",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K61757346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2783",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-23T16:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious xls file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de heap explotable en la funcionalidad FillRowFormat de Antenna House DMC HTMLFilter que es enviada con MarkLogic versión 8.0-6. Un archivo xls especialmente diseñado puede causar una corrupción de heap, resultando en la ejecución de código arbitraria. Un atacante puede enviar y proporcionar un archivo xls malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0279/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0279/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2793",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-23T16:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción del heap explotable en la funcionalidad UnCompressUnicode de Antenna House DMC HTMLFilter utilizado por MarkLogic versión 8.0-6. Un archivo xls especialmente diseñado puede causar una corrupción del heap, resultando en la ejecución de código arbitraria. Un atacante puede enviar y proporcionar archivos XLS maliciosos para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0285/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.talosintelligence.com/reports/TALOS-2017-0285/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2794",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-23T16:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide malicious PPT file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria explotable en la funcionalidad DHFSummary de AntennaHouse DMC HTMLFilter utilizado por MarkLogic versión 8.0-6. Un archivo PPT especialmente diseñado puede causar una corrupción de pila resultando en la ejecución de código arbitraria. Un atacante puede enviar y proporcionar un archivo PPT malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0286",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2797",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-23T16:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de la memoria dinámica (heap) en la funcionalidad ParseEnvironment de AntennaHouse DMC HTMLFilter que podría ser empleado por MarkLogic 8.0-6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0290",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3128",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-23T17:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad tipo XSS (Cross-Site-Scripting) almacenado en FortiOS de Fortinet, permite a los atacantes ejecutar código o comandos no autorizados por medio del parámetro policy global-label."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E542BE2-14FC-4BA8-890C-7DA81F33F032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8A5EC4-CE2C-4174-9F09-361B8D153AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C172379-F6BA-4343-831A-62004E742C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516597D9-086E-4668-A40B-473F38125F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62F480B-D8CA-4F5C-8034-C0AE73F26B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F435F408-EC5B-42A0-9E3C-4DE5D702ACAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823C8357-E638-4EAE-B231-3B60263FFE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6615C7-C6F8-4E42-BA09-5A29A0B68E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B24C5917-BBC0-4924-9FB0-49E141DC9D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513A1CAA-9B87-4CF5-9513-396E2E686CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CD94B3-C430-4672-BBEA-B8A542944F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91AA2061-5D28-4DCF-9126-8D5CE57D96F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1FA9832-A573-489B-A26E-7A7DFC1E0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC836E7-DAA2-4FDB-9919-D5FF35E67C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E627C59-7C16-44F0-800D-A2E8A766B26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233236FA-BB13-4261-BE2E-3E617406DC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27844CC9-498B-4A65-91AC-AC130222EE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B4C672-7ED5-4113-87AE-5774D1263C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CB7A90-91BC-49AF-9B5C-EBD212484C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D3221-177B-43CE-BD7D-CB14A110268E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C186D6-6AC5-49EB-A701-C91358B4A25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC9F6C4-F887-4F25-87BD-383F6CF39806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8558962-7A19-4F4A-BED0-9CB5D4CFC422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC63D521-EC88-4B13-BC73-3284F3FCF3A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98514",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038541",
        "source" : "psirt@fortinet.com"
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-057",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-23T17:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`."
      }, {
        "lang" : "es",
        "value" : "En Open vSwitch (OvS) versión 2.7.0, mientras analiza un mensaje OFPT_QUEUE_GET_CONFIG_REPLY tipo OFP versión 1.0, se presenta una lectura excesiva búfer causada por un desbordamiento de enteros sin signo en la función “ofputil_pull_queue_get_config_reply10” en la biblioteca “lib/ofp-util.c”."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C92CDE-F125-490D-9B70-AEAAA6947352"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB0F63-DB24-4240-BC44-C92BAE7EAF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF786B57-02C3-48B7-B902-318356B3A3B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2553",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2665",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2692",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2698",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0373",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-23T18:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous \"use lib\" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file."
      }, {
        "lang" : "es",
        "value" : "La implementación gen_class_pod en lib/Config/Model/Utils/GenClassPod.pm en Config-Model (conocido como libconfig-model-perl) anterior a la versión 2.102 tiene una peligrosa línea \"use lib\", que permite a atacantes remotos tener un impacto no especificado a través de un archivo de paquete Debian manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:config-model_project:config-model:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.101",
            "matchCriteriaId" : "6450645A-83EF-46B9-A553-380487E6EBC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0373",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0374",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-05-23T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array."
      }, {
        "lang" : "es",
        "value" : "lib/Config/Model.pm en Config-Model (conocido como libconfig-model-perl) anterior a la versión 2.102 permite a los usuarios locales obtener privilegios a través de un modelo creado en el directorio de trabajo actual, relacionado con el uso de \".\" con el array INC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:config-model_project:config-model:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.101",
            "matchCriteriaId" : "6450645A-83EF-46B9-A553-380487E6EBC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=0de8471e5a8958ad37446dfcd0362a269e3ec573",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0374",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=0de8471e5a8958ad37446dfcd0362a269e3ec573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8310",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2017-05-23T21:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file."
      }, {
        "lang" : "es",
        "value" : "Lectura de fuera de límites del heap en la función CreateHtmlSubtitle en VLC versiones 2.2.x de VideoLAN, debido a la falta de comprobación de terminación de cadena permite a los atacantes leer datos más allá de la memoria asignada y potencialmente bloquear el proceso (causando una denegación de servicio) por medio de un archivo de subtítulos especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBAF91B-1BC9-4029-ADFC-506FAA3F6C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0E28DE-2CAC-42CD-A8DF-2659AA135772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F39D96-FC35-4063-BB22-2A4CA6C788D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF54451-B67D-4003-991F-8D306C5ED782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38860D21-A9DB-49CD-A8CD-3323F98D111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EC0BA2-715C-4DAD-974D-EFBD3BA51944"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=blobdiff%3Bf=modules/codec/subsdec.c%3Bh=addd8c71f30d53558fffd19059b374be45cf0f8e%3Bhp=1b4276e299a2a6668047231d29ac705ae93076ba%3Bhb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328%3Bhpb=3477dba3d506de8d95bccef2c6b67861188f6c29",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98638",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=blobdiff%3Bf=modules/codec/subsdec.c%3Bh=addd8c71f30d53558fffd19059b374be45cf0f8e%3Bhp=1b4276e299a2a6668047231d29ac705ae93076ba%3Bhb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328%3Bhpb=3477dba3d506de8d95bccef2c6b67861188f6c29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8311",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2017-05-23T21:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file."
      }, {
        "lang" : "es",
        "value" : "Potencial desbordamiento de búfer en la región heap de la memoria en ParseJSS en VLC anterior a versión 2.2.5 de  VideoLAN, debido a una omisión del terminador NULL en una cadena de entrada permite a los atacantes ejecutar código arbitrario por medio de un archivo de subtítulos especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "60281829-AD27-4A95-B1A4-3D6008627406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=775de716add17322f24b476439f903a829446eb6",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98634",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44514/",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=775de716add17322f24b476439f903a829446eb6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44514/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8312",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2017-05-23T21:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file."
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera del límite de la pila en ParseJSS en VideoLAN VLC debido a la falta de comprobación de longitud de la cadena permite a los atacantes leer datos no inicializados de la pila por medio de un archivo de subtítulos creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.6",
            "matchCriteriaId" : "2B2A32BA-56BB-429E-BD82-53DE10720894"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=vlc.git%3Ba=blobdiff%3Bf=modules/demux/subtitle.c%3Bh=5e4fcdb7f25b2819f5441156c7c0ea2a7d112ca3%3Bhp=2a75fbfb7c3f56b24b2e4498bbb8fe0aa2575974%3Bhb=611398fc8d32f3fe4331f60b220c52ba3557beaa%3Bhpb=075bc7169b05b004fa0250e4a4ce5516b05487a9",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98631",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.videolan.org/?p=vlc.git%3Ba=blobdiff%3Bf=modules/demux/subtitle.c%3Bh=5e4fcdb7f25b2819f5441156c7c0ea2a7d112ca3%3Bhp=2a75fbfb7c3f56b24b2e4498bbb8fe0aa2575974%3Bhb=611398fc8d32f3fe4331f60b220c52ba3557beaa%3Bhpb=075bc7169b05b004fa0250e4a4ce5516b05487a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8313",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2017-05-23T21:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites del heap en ParseJSS en VLC anterior a versión 2.2.5 de VideoLAN, debido a la falta de comprobación de terminación de cadena permite a los atacantes leer datos más allá de la memoria asignada y potencialmente bloquear el proceso por medio de un archivo de subtítulos especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "60281829-AD27-4A95-B1A4-3D6008627406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=commitdiff%3Bh=05b653355ce303ada3b5e0e645ae717fea39186c",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98633",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=commitdiff%3Bh=05b653355ce303ada3b5e0e645ae717fea39186c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8314",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2017-05-23T21:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles."
      }, {
        "lang" : "es",
        "value" : "Directorio Traversal en la función integrada de extracción de Zip en Kodi 17.1 y versiones anteriores permite escritura arbitraria de archivos en disco a través de un archivo Zip como subtítulos"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kodi:kodi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.1",
            "matchCriteriaId" : "CE294B68-9D5E-4F93-84CD-E07BDAA6DACB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98668",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/12024",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00019.html",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-17",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/12024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file."
      }, {
        "lang" : "es",
        "value" : "El archivo libjbig2dec.a en Artifex jbig2dec versión 0.13, tal como es usado en MuPDF y Ghostscript, presenta una desreferencia de un puntero NULL en la función jbig2_huffman_get en el archivo jbig2_huffman.c. Por ejemplo, la utilidad jbig2dec se bloqueará (fallo de segmentación) al analizar un archivo no válido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:jbig2dec:0.13:*:*:*:*:gpl_ghostscript:*:*",
            "matchCriteriaId" : "FF4BC294-2EAB-4284-965E-E1E6EEB477F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:jbig2dec:0.13:*:*:*:*:mupdf:*:*",
            "matchCriteriaId" : "ADF61410-AAFE-416F-B0DB-56CE77B7110B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98680",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697934",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ebffb1d96ba0cacec23016eccb4047dab365853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T05:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section."
      }, {
        "lang" : "es",
        "value" : "systemd-resolved hasta la versión 223 permite a los atacantes remotos provocar una denegación de servicio (daemon crash) mediante una respuesta DNS manipulada con un sección de preguntas vacía."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "233",
            "matchCriteriaId" : "E819026E-9D55-416F-8781-3B8C9C6A1776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98677",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/pull/5998",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1621396",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/pull/5998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1621396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241213-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2798",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de corrupción de pila explotable en la funcionalidad GetIndexArray de Antenna House DMC HTMLFilter, tal como es usado por MarkLogic versión 8.0-6. Un archivo XLS especialmente diseñado puede causar una corrupción de pila resultando en la ejecución de código arbitrario. Un atacante puede enviar o proporcionar un archivo XLS malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0291",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2799",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de heap explotable en la funcionalidad AddSst de Antenna House DMC HTMLFilter, tal como es usado por MarkLogic versión 8.0-6. Un archivo XLS especialmente diseñado puede causar una corrupción de heap que resulta en la ejecución de código arbitrario. Un atacante puede enviar o proporcionar un archivo XLS malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0292",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2800",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply a malicious x509 certificate to either a server or a client application using this library."
      }, {
        "lang" : "es",
        "value" : "Un certificado x509 especialmente diseñado puede causar una sobreescritura de bytes fuera de los límites única en wolfSSL hasta la versión 3.10.2, resultando en  vulnerabilidades potenciales de comprobación de certificados, denegación de servicio y posible ejecución de código remota. Para desencadenar esta vulnerabilidad, el atacante necesita proporcionar un certificado x509 malicioso a un servidor o una aplicación cliente usando esta biblioteca."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.10.2",
            "matchCriteriaId" : "2D8557EB-532C-4D8B-82FC-FA9AC27FCDA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0293",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41984/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41984/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2801",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un error de programación en una manera en que la biblioteca criptográfica Randombit Botan versión 2.0.1, implementa comparaciones de cadenas x500 que podrían conllevar problemas de comprobación de certificados y violarlos. Un certificado X509 especialmente diseñado debería entregarse al cliente o a la aplicación del servidor para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9287361E-DC3A-4E80-BBA3-30D0419ACBC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3939",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98106",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2817",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific ISO file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer de pila en la funcionalidad de análisis ISO de PowerISO versión 6.8 de Power Software Ltd. Un archivo ISO especialmente diseñado puede causar una vulnerabilidad resultando en una posible ejecución de código. Un atacante puede enviar un archivo ISO específico para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poweriso:poweriso:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38916996-AB1D-448A-8300-B479691AE811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0318",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2819",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the context of the application. An attacker can entice a user to open up a document in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer en la región heap de la memoria explotable en el componente Hangul Word Processor (versión 9.6.1.4350) de Hancom Thinkfree Office NEO versión  9.6.1.4902. Un flujo de documentos especialmente diseñados puede causar un flujo de enteros resultando en  un subdesbordamiento de búfer que puede conllevar a la ejecución de código bajo el contexto de la aplicación. Un atacante puede incitar a un usuario a abrir un documento para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hancom:hangul_word_processor:9.6.1.4350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB89A5D-7888-4644-B37C-635DD1712380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hancom:thinkfree_office_neo:9.6.1.4902:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C040CBA2-979F-4C39-BFD6-B2A4E6240B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0320",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2823",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de uso de la memoria previamente liberada en la funcionalidad de análisis .ISO de PowerISO versión  6.8. Un archivo .ISO especialmente diseñado puede causar una vulnerabilidad resultando en una posible ejecución de código. Un atacante puede enviar un archivo .ISO específico para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poweriso:poweriso:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38916996-AB1D-448A-8300-B479691AE811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2824",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-05-24T14:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código explotable en la funcionalidad trapper command de Zabbix Server versiones 2.4.X. Un conjunto de paquetes especialmente diseñado puede causar una inyección de comando resultando en la ejecución de código remota. Un atacante puede realizar peticiones desde un Proxy Zabbix activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B847CEDA-6C3E-44DC-952B-9F92EF2E060A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "379C720C-1F28-487D-8AF8-873E916B18DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "10D1EA2C-35CC-4E35-BA5C-B0BC9D3BEEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1A799E7F-C2FB-4F2C-A8C0-6254DAF8C625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E036381E-C3B3-4E13-9FB3-1CAF15D900DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "66CF407E-71E0-4163-B4E7-346BF6164183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B81CDC64-CB3F-4939-BAC1-591F92D69D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9080E8A-E1E6-46CB-B766-D8E4B68C4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "074D6347-699F-4FEB-969C-CC02751B17D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32BD321-01C3-4910-9058-A5582A27A6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA0EC11-C95B-42E5-B5D0-6D938D7F909B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ACEED4-E5FD-42D2-BDF3-96B46EE2B9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7D63B5-8660-4B23-89EA-009EF560F95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B67B9-7184-4E7E-AA3D-52CD8A7A0CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A84A1-06C7-4300-BEA6-39C4E7468665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B2EB47-2255-4B56-85A5-2B6261EA93AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "55C1F15D-DF51-447D-87AD-C2DA4F118E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8C066D-3290-4073-AF74-C13ED3C733DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A610E4AB-BA66-4059-B9C4-D13C4B54804A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D7778B-738C-42B4-81D7-DFB5456D8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8623D3-5A16-45E7-8F26-6F1B7DAC51A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E5EA48-E8E3-4214-9D23-25AB677FE96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "556EE336-9968-48A6-9B1B-064ABF39D95A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3937",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98083",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T15:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer."
      }, {
        "lang" : "es",
        "value" : "Un problema fue encontrado en Oniguruma versión 6.2.0, tal y como es usado en Oniguruma-mod en Ruby hasta la versión 2.4.1 y mbstring en PHP hasta la versión 7.1.5. Una lectura fuera de límites de la pila ocurre en la función match_at() durante la búsqueda de expresión regular. Un error lógico que implique el orden de validación y el acceso en match_at() podría dar lugar a una lectura fuera de límites desde un búfer de pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9EC32-B30C-40DF-9937-654BC977DCC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.31",
            "matchCriteriaId" : "86CB20B2-9B73-47BA-B1B9-767961453F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.21",
            "matchCriteriaId" : "ABE3BCB8-C2C7-4E44-A4D2-AA1DAE9555DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.7",
            "matchCriteriaId" : "5799FA9F-8C0B-4B86-9D2C-558DFF64AA6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101244",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T15:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds write in onigenc_unicode_get_case_fold_codes_by_str() occurs during regular expression compilation. Code point 0xFFFFFFFF is not properly handled in unicode_unfold_key(). A malformed regular expression could result in 4 bytes being written off the end of a stack buffer of expand_case_fold_string() during the call to onigenc_unicode_get_case_fold_codes_by_str(), a typical stack buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Oniguruma versión 6.2.0, tal como es usado en Oniguruma-mod en Ruby hasta la versión  2.4.1 y mbstring en PHP hasta la versión 7.1.5. Una escritura fuera de los límites de la pila en la función onigenc_unicode_get_case_fold_codes_by_str() ocurre durante la compilación de expresiones regulares. El punto de código 0xFFFFFFFF no se maneja apropiadamente en unicode_unfold_key(). Una expresión regular malformada podría dar como resultado que se escriban 4 bytes al final de un búfer de pila de expand_case_fold_string() durante la llamada a onigenc_unicode_get_case_fold_codes_by_str(), un desbordamiento de búfer de pila típico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9EC32-B30C-40DF-9937-654BC977DCC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:oniguruma-mod:*:*",
            "versionEndIncluding" : "7.1.5",
            "matchCriteriaId" : "0F46CC6A-6949-4C1A-A615-EF23267A640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:oniguruma-mod:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "7843E796-2E53-442D-B27E-3F9718F9BD2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kkos/oniguruma/commit/166a6c3999bf06b4de0ab4ce6b088a468cc4029f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/56",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/166a6c3999bf06b4de0ab4ce6b088a468cc4029f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T15:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetch_token() and fetch_token_in_cc(). A malformed regular expression containing an octal number in the form of '\\700' would produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory corruption."
      }, {
        "lang" : "es",
        "value" : "Un problema fue encontrado en Oniguruma versión 6.2.0, tal y como es usado en Oniguruma-mod en Ruby hasta la versión 2.4.1 y mbstring en PHP hasta la versión 7.1.5. Un vulnerabilidad de lectura o escritura fuera de límites de la pila ocurre en la función next_state_val() durante la compilación de expresión regular. Los números octales mayores que 0xff no se manejan apropiadamente en fetch_token() y fetch_token_in_cc(). Una expresión regular malformada que contenga un número octal en forma de “\\700” produciría un valor de punto de código no válido mayor que 0xff en next_state_val(), lo que daría como resultado una corrupción de memoria de escritura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9EC32-B30C-40DF-9937-654BC977DCC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.31",
            "matchCriteriaId" : "86CB20B2-9B73-47BA-B1B9-767961453F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.21",
            "matchCriteriaId" : "ABE3BCB8-C2C7-4E44-A4D2-AA1DAE9555DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.7",
            "matchCriteriaId" : "5799FA9F-8C0B-4B86-9D2C-558DFF64AA6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101244",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/b4bf968ad52afe14e60a2dc8a95d3555c543353a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/f015fbdd95f76438cd86366467bb2b39870dd7c6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/55",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/b4bf968ad52afe14e60a2dc8a95d3555c543353a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/f015fbdd95f76438cd86366467bb2b39870dd7c6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T15:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. Invalid handling of reg->dmin in forward_search_range() could result in an invalid pointer dereference, as an out-of-bounds read from a stack buffer."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Oniguruma 6.2.0, como se empleaba en Oniguruma-mod en Ruby hasta la versión 2.4.1 y en mbstring en PHP hasta la versión 7.1.5. Una lectura de pila fuera de límites tiene lugar en mbc_enc_len() durante una búsqueda de expresión regular. El manejo incorrecto de reg->dmin en forward_search_range() podría dar lugar a una desreferencia de puntero no válida, como una lectura fuera de límites desde un búfer de pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9EC32-B30C-40DF-9937-654BC977DCC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.6.31",
            "matchCriteriaId" : "00E9E5A8-4C71-471D-97E9-FDE368D1EB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.21",
            "matchCriteriaId" : "ABE3BCB8-C2C7-4E44-A4D2-AA1DAE9555DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.7",
            "matchCriteriaId" : "5799FA9F-8C0B-4B86-9D2C-558DFF64AA6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100538",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/9690d3ab1f9bcd2db8cbe1fe3ee4a5da606b8814",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/58",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/9690d3ab1f9bcd2db8cbe1fe3ee4a5da606b8814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T15:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Oniguruma versión 6.2.0, tal como es usado en Oniguruma-mod en Ruby hasta la versión  2.4.1 y mbstring en PHP hasta la versión 7.1.5. Se produce una escritura fuera del límite de la pila en bitset_set_range() durante la compilación de expresiones regulares debido a una variable no inicializada de una transición de estado incorrecta. Una transición de estado incorrecta en parse_char_class() podría diseñar una ruta (path) de ejecución que deje una variable local crítica sin inicializar hasta que se utilice como un índice, resultando en una corrupción de memoria de escritura fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9EC32-B30C-40DF-9937-654BC977DCC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.6.31",
            "matchCriteriaId" : "00E9E5A8-4C71-471D-97E9-FDE368D1EB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.21",
            "matchCriteriaId" : "ABE3BCB8-C2C7-4E44-A4D2-AA1DAE9555DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.7",
            "matchCriteriaId" : "5799FA9F-8C0B-4B86-9D2C-558DFF64AA6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/3b63d12038c8d8fc278e81c942fa9bec7c704c8b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/60",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/3b63d12038c8d8fc278e81c942fa9bec7c704c8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T15:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg->dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Oniguruma versión 6.2.0, como es usado en Oniguruma-mod en Ruby hasta versión 2.4.1 y mbstring en PHP hasta versión 7.1.5. Un SIGSEGV se produce en la función left_adjust_char_head() durante la compilación de expresiones regulares. El manejo no válido de reg-)dmax en forward_search_range()  podría resultar en una desreferencia de puntero no válida, normalmente como una condición de denegación de servicio inmediata."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oniguruma_project:oniguruma:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9EC32-B30C-40DF-9937-654BC977DCC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:oniguruma-mod:*:*",
            "versionEndIncluding" : "7.1.5",
            "matchCriteriaId" : "0F46CC6A-6949-4C1A-A615-EF23267A640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:oniguruma-mod:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "7843E796-2E53-442D-B27E-3F9718F9BD2D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.6.31",
            "matchCriteriaId" : "00E9E5A8-4C71-471D-97E9-FDE368D1EB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.21",
            "matchCriteriaId" : "ABE3BCB8-C2C7-4E44-A4D2-AA1DAE9555DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.7",
            "matchCriteriaId" : "5799FA9F-8C0B-4B86-9D2C-558DFF64AA6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/b690371bbf97794b4a1d3f295d4fb9a8b05d402d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/59",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/commit/b690371bbf97794b4a1d3f295d4fb9a8b05d402d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kkos/oniguruma/issues/59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-24T16:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. This violates the security assumptions of (1) the choice of input, outside of the dedicated nonce area, fed into the Proof-of-Work function should not change its difficulty to evaluate and (2) every Proof-of-Work function execution should be independent. NOTE: a number of persons feel that this methodology is a benign mining optimization, not a vulnerability"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El algoritmo de Prueba de trabajo de Bitcoin no considera una determinada metodología de ataque relacionada con encabezados de bloque de 80 bytes con una variedad de fragmentos iniciales de 64 bytes seguidos por el mismo fragmento de 16 bytes, terminando múltiples valores de raíz de candidato con los mismos 4 bytes y cálculos con números sqrt. Esto viola los supuestos de seguridad de (1) la elección de la entrada, fuera del área específica de nonce, alimentada a la función Prueba de trabajo no debería cambiar su dificultad para evaluar y (2) cada ejecución de la función Prueba de trabajo debería Se independiente. NOTA: varias personas sienten que esta metodología es una optimización minera benigna, no una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitcoin:bitcoin:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03CE589-44AF-46D4-971C-E780C84F91BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mit.edu/~jlrubin//public/pdfs/Asicboost.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98657",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arxiv.org/ftp/arxiv/papers/1604/1604.00575.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-April/013996.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014349.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014351.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014352.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mit.edu/~jlrubin//public/pdfs/Asicboost.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arxiv.org/ftp/arxiv/papers/1604/1604.00575.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-April/013996.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014351.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014352.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via \"%0A\" characters in the PATH_INFO to __session_start__/."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección CRLF en la interfaz web en OpenVPN Access Server versión 2.1.4, permite a los atacantes remotos inyectar encabezados HTTP arbitrarios y, en consecuencia, conducir ataques de fijación de sesión y posiblemente ataques de división de respuesta HTTP por medio de caracteres \"%0A\" en la variable PATH_INFO en la función __session_start __ /."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DD791-4429-4E6E-B43C-4E7EFB7C6B62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/23/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038547",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injection-with-session-fixation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/23/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injection-with-session-fixation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en NetApp OnCommand Unified Manager Core Package 5x y en versiones anteriores a la 5.2.2P1 que permite a los atacantes remotos ejecutar comandos SQL arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554CDDED-9B67-4FAA-9051-83BCBB5B5664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C623E-8DD4-43F6-88DC-E1057633D021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21256028-CAF3-44FD-A83D-D34F80162791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63A67B3-A230-4A39-BCE6-6B1CF4CD78B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDD7FB0-A7D4-4C78-91C3-5669E0025888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB43FC4-AF59-465A-969F-B5FD9A433A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9D7DDB-341E-4A71-86A9-9120E72561B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170517-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170517-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via vectors involving error messages."
      }, {
        "lang" : "es",
        "value" : "NetApp OnCommand Unified Manager Core Package 5.x antes de 5.2.2P1 podría permitir a atacantes remotos obtener información confidencial a través de vectores que implican mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554CDDED-9B67-4FAA-9051-83BCBB5B5664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C623E-8DD4-43F6-88DC-E1057633D021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21256028-CAF3-44FD-A83D-D34F80162791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63A67B3-A230-4A39-BCE6-6B1CF4CD78B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDD7FB0-A7D4-4C78-91C3-5669E0025888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB43FC4-AF59-465A-969F-B5FD9A433A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9D7DDB-341E-4A71-86A9-9120E72561B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170517-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170517-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) T1 or (2) tmLastConfigFileModifiedDate parameter to log_management.cgi."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en ServerProtect de Trend Micro para Linux versión 3.0 anterior a CP 1531, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro (1) T1 o (2) tmLastConfigFileModifiedDate en el archivo log_management.cgi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update from an arbitrary source via a crafted request to SProtectLinux/scanoption_set.cgi, related to the lack of anti-CSRF tokens."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en ServerProtect de Trend Micro para Linux versión 3.0 anterior a CP 1531, permite a los atacantes remotos secuestrar la autenticación de los usuarios para solicitudes de inicio de una actualización desde una fuente arbitraria por medio de una petición diseñada para el archivo SProtectLinux/scanoption_set.cgi, relacionada a la falta de tokens anti-CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates."
      }, {
        "lang" : "es",
        "value" : "ServerProtect de Trend Micro para Linux versión 3.0 anterior a CP 1531 permite a los atacantes escribir en archivos arbitrarios y en consecuencia, ejecutar código arbitrario con privilegios de root mediante el aprovechamiento del fallo para comprobar las actualizaciones del programa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers."
      }, {
        "lang" : "es",
        "value" : "Trend Micro ServerProtect para Linux 3.0 en versiones anteriores a la CP 1531 permite a los atacantes escuchar y manipular actualizaciones, aprovechando comunicaciones sin cifrar con servidores de actualización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:01.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory."
      }, {
        "lang" : "es",
        "value" : "Trend Micro ServerProtect para Linux 3.0 en versiones anteriores a la CP 1531, permite a los usuarios locales obtener privilegios manipulando un directorio de cuarentena no restringido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T01:29:01.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) S44, (2) S5, (3) S_action_fail, (4) S_ptn_update, (5) T113, (6) T114, (7) T115, (8) T117117, (9) T118, (10) T_action_fail, (11) T_ptn_update, (12) textarea, (13) textfield5, or (14) tmLastConfigFileModifiedDate parameter to notification.cgi."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en ServerProtect de Trend Micro para Linux versión 3.0 anterior a CP 1531, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro (1) S44, (2) S5, (3) S_action_fail, (4) S_ptn_update , (5) T113, (6) T114, (7) T115, (8) T117117, (9) T118, (10) T_action_fail, (11) T_ptn_update, (12) textarea, (13) textfield5, o (14) tmLastConfigFileModifiedDate en el archivo notification.cgi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T10:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en Exiv2 versión 0.26. Cuando la estructura de datos de la estructura ifd es inapropiada, el programa asigna pValue_ a 0X0, y el valor de pValue() es 0X0. TiffImageEntry::doWriteImage utilizará el valor de pValue() para provocar un error de segmentación. Para lograr la explotación a esta vulnerabilidad, alguien debe abrir un archivo TIFF creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.exiv2.org/issues/1295",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98720",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://dev.exiv2.org/issues/1295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1291",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-26T16:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 125152."
      }, {
        "lang" : "es",
        "value" : "Maximo Asset Management versiones 7.5 y 7.6 de IBM, es vulnerable a ataques de división de respuestas HTTP. Un atacante remoto podría explotar esta vulnerabilidad usando una URL especialmente diseñada para causar que el servidor devuelva una respuesta dividida, una vez que se haga clic en la URL. Esto permitiría al atacante realizar nuevos ataques, como envenenamiento de caché web, cross-Site scripting y, posiblemente, obtener información confidencial. ID de IBM X-Force: 125152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598EAB6C-7D41-46FE-BB32-D31014CA01D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003413",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125152",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1292",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-26T16:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.5 y 7.6 de IBM Maximo Asset Management generan mensajes de error que podrían revelar información sensible para futuros ataques contra el sistema. IBM X-Force ID: 125153."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598EAB6C-7D41-46FE-BB32-D31014CA01D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003414",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125153",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1325",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-05-26T16:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125976."
      }, {
        "lang" : "es",
        "value" : "iNotes versiones 8.5 y 9.0 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, y por lo tanto, alterar la funcionalidad prevista que podría conllevar a la revelación de credenciales dentro de una sesión confiable. ID de IBM X-Force: 125976."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE6AAC-7B25-40EA-9D25-128D743F18A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726DB55-DE85-4A10-8912-59FFF5D0A87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E3BD0F-DC7F-47C1-A86A-9B1627FBE941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68862417-67DC-462A-8557-E1E371926FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E251CBF-CA6A-4675-B7FA-B68EC44ADA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B097CA3C-2ABA-489E-86C1-EEF891AF7094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8270B1C-31E1-47F6-B641-8A4291EBEF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B62FD4B-A8B0-4215-A22C-241EE84A4C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A913396-D7C3-4088-A4E8-93BF3ADB9C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FAF950-ECA1-4DC1-ABC7-18C073209ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40437DB7-17EB-4C53-9D71-624D01068D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DDC3B-3B08-407F-8543-7A78B38B4F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975E8316-D4C3-40B7-8E57-E871D0327271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B74523E-57BE-4B0B-B639-32927336C862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521E7EBE-CEA6-4FF8-954A-2A43617FB1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30460A5C-2D97-42B5-A190-5E0862E87EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31391143-EE89-4521-81F4-43455AAF7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5344290B-F139-4367-B976-C2E8007487F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664379F7-CE42-4717-A887-F79E6AF8014E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003497",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038600",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125976",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7505",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-26T16:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords."
      }, {
        "lang" : "es",
        "value" : "Foreman desde la versión 1.5, es vulnerable a una comprobación de autorización incorrecta debido a que los usuarios con permiso de administración de usuario que están asignados a alguna organización(es) pueden realizar todas las operaciones otorgadas por estos permisos sobre todos los objetos del usuario administrador fuera de su alcance, tal como la edición de cuentas de administrador global incluyendo el cambio de sus contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0142030F-4787-49ED-BD28-DCF6B08B2B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8B4DBA-EDFE-40FD-BB2E-0011F3565EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DAAE3F92-1D5B-43FF-975E-4AB61D9E03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095371A7-99D9-4165-A60B-11697E16BCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A494EF29-52AF-4DCD-8C19-EA2E6B674EF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94BEAD3-0DAB-48CA-90E0-256ACC920A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C72AF96B-8209-4724-9239-C9C68EC51FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463E6B9-766C-40A4-BD89-EFFEE36DE39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "242CDCE9-951F-4C5A-8FA0-45725D5D8B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E36451D-B29C-4304-8C88-8F5B59BA49B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DB2E8F-139E-448C-A6CD-9AD542B6BCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FAFD54-8610-46F8-85D8-AD82F8A929FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CF62B37D-BD94-4F0A-A9AF-A6C2023540E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6607D8-EE55-46D0-B803-988B0F1F0BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AA8EEB-05AB-44EC-B947-73D8C1052AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBD2729-EC33-4F56-8D48-AD69CC39C978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BE9D11-66DC-4B8D-B9DE-4DAB658934FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22AE5BB-A419-4941-A257-1BDD2A4A3AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6402D30-B166-4B9F-82FC-FDCA58C495E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FE5FF-A2FC-409E-B620-AA1408B78C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "178D4DDE-4750-4771-92AF-1D7F7B061863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56B0CDE2-E4C4-4C85-85EE-0A7228CBF0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04B05B-A06C-4DBA-B2DF-9FE0401D8C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63021136-C5BE-41A0-8609-E7296BFD55AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDBB357-E0E2-4B94-B7D5-A41CB86BBCE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1992798-5AB8-413B-BB0E-345CE55A93CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3D9A7A-E39F-4C15-AF2E-9787AB1FF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1825F24-09E5-4AC4-845B-C9D113372B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3DB65EE-A614-4B86-80C3-271192061B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "36C7DDE4-7088-4478-8B95-D77DDFF79569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2F236DCB-E141-49F0-8C6C-B852EA116318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB3CEC2-1DD0-4089-929D-83936465AB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941656AB-D39F-4E6E-9822-E058CDBA5372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F32734-F208-44F3-AF08-C43CF54ABAEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4222A4-6382-475E-9B40-F5C9DDCE0F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "948AE10B-3E2A-45C0-AC96-BF150A58CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D90380B-010E-4751-AEE3-2C4C854D40E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "64506529-3D8D-461A-A2AC-311FE16C51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA36878F-C8D1-4353-805D-889664CDA234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C6D17A-7933-43F6-8C5E-0187B3282A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F469D8A8-C09F-471B-AB46-05EB78D23CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976E418A-EE2D-45A1-AAA8-FCE6212CAEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4197DE0-AEB1-41CA-9264-22C29CCD7102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E058208D-14B4-4D86-9B5D-57383FC5D5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "564712BC-DB56-4B47-936B-C0E326EB38B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1138BC97-DAB7-40C6-91C3-3E237FFAEBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87836834-0E63-4756-B67D-1C37EC5BCDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EFF327-302C-41FF-B67B-6685819DC8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4845E7-AAAC-4FFF-AC30-3E1900149033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEA0EE7-5EC4-4460-B829-D76254D67483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D1166A-4EAE-40B2-8F85-1FA23C3949E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A29F6C0-4899-4B9D-8851-75798C801E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AC50C954-4292-4A6C-969A-A8F3D12BA453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E2DF31-62BF-4FFB-90E4-8BB6199888E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4B323B-0D2E-4E0F-A14F-6AE4D3065A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E1534E-60A5-4EC3-A51E-573BB500EC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF6B691-61CA-4443-B696-810D2C3EE18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486F116B-3F43-4886-9337-0F34306A7B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B486F7D7-FFF5-4F91-AC33-860B416771D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A88587F5-5341-484B-AF33-455DE0C898B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "86E04C79-B153-4AA7-84C2-568121D90252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEC53BC-3EC2-4412-9FF9-AB178F991CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7F90D-59CB-455B-8BD6-20645FA638B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD9E872-083C-46F6-9670-1F50A1B6826D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C7E93A-5D51-4EE8-A072-7640E915922B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38E33F5-E8AA-4BD4-A318-3CF2718FCA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F109A88-D58B-451F-8FF2-BB5C69B26820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "114B1CA1-C8DE-4912-A671-5082CBFC235C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D73A8F01-CCC9-4350-8A72-2DA9FD0661F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A78F36-82DE-499D-AD82-A25DFC90CDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73C5558-A26C-4D85-AFAB-38180B470069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D71DC4B-5C4C-48BE-ADC0-A6B578C8DAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB73CC6-0667-480C-920D-98BCBA910C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46BFD4D5-A6B9-4BD0-9C42-347E412F86D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:1.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "69379E8F-50F7-4776-A37E-955B73785CE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.theforeman.org/issues/19612",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98607",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/theforeman/foreman/pull/4545",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://projects.theforeman.org/issues/19612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/theforeman/foreman/pull/4545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6862",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2017-05-26T20:29:00.177",
      "lastModified" : "2025-10-22T00:16:10.497",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261."
      }, {
        "lang" : "es",
        "value" : "Dispositivos NETGEAR WNR2000v3 anteriores a 1.1.2.14, WNR2000v4 anteriores a 1.0.0.42 permite rodear la autentificación y ejecutar código remoto mediante un buffer overflow que usa un parámetro en la administración de la aplicación. El ID del NETGEAR es PSV-2016-0261."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "NETGEAR Multiple Devices Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000v5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.42",
            "matchCriteriaId" : "9E2C503D-A603-4C93-9125-E72CE6D98219"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671EC923-DC84-47D6-B943-0F7DA8168334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000v4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "598F1EB8-757F-4E3B-B1FD-C50C94B1632B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AE1DD1-5DB7-403A-805B-EDB364EF28D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.2.14",
            "matchCriteriaId" : "61B034B2-3B15-4C7B-A47E-04DDF36992AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBF3EA-0F98-4A99-8312-30E1E47AC4C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98740",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6862",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8535",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", a different vulnerability than CVE-2017-8536, CVE-2017-8537, CVE-2017-8539, and CVE-2017-8542."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft se ejecuta en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente creado que conlleva a la denegación de servicio. También se conoce como \"Microsoft Malware Protection Engine Denial of Service Vulnerability\",  una vulnerabilidad diferente de los CVE-2017-8536, CVE-2017-8537, CVE-2017-8539 y CVE-2017-8542."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC297F51-9742-43A2-8783-53B7E4D5E435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF8DB7-D5A0-47A8-9F69-7D0259490D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9503E8-6282-4F3A-A6DA-0FA8A9BD941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55E0DDF-4D05-4E5F-BC54-790A722E87A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194DE421-9536-4001-9A27-6C88805421EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_intune_endpoint_protection:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46404B0-83D5-4E54-8944-C8734645B80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98702",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8535",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8536",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", a different vulnerability than CVE-2017-8535, CVE-2017-8537, CVE-2017-8539, and CVE-2017-8542."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutándose en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente creado que conlleva a la denegación de servicio. También se conoce como \"Microsoft Malware Protection Engine Denial of Service Vulnerability\",  una vulnerabilidad diferente de los CVE-2017-8535, CVE-2017-8537, CVE-2017-8539 y CVE-2017-8542."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC297F51-9742-43A2-8783-53B7E4D5E435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF8DB7-D5A0-47A8-9F69-7D0259490D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9503E8-6282-4F3A-A6DA-0FA8A9BD941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55E0DDF-4D05-4E5F-BC54-790A722E87A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194DE421-9536-4001-9A27-6C88805421EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_intune_endpoint_protection:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46404B0-83D5-4E54-8944-C8734645B80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98708",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8537",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8539, and CVE-2017-8542."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutándose en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente creado que conlleva a la denegación de servicio. También se conoce como \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", una vulnerabilidad diferente de los CVE-2017-8535, CVE-2017-8536, CVE-2017-8539 y CVE-2017-8542."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC297F51-9742-43A2-8783-53B7E4D5E435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF8DB7-D5A0-47A8-9F69-7D0259490D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9503E8-6282-4F3A-A6DA-0FA8A9BD941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55E0DDF-4D05-4E5F-BC54-790A722E87A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194DE421-9536-4001-9A27-6C88805421EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_intune_endpoint_protection:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46404B0-83D5-4E54-8944-C8734645B80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98705",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8537",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8538",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", a different vulnerability than CVE-2017-8540 and CVE-2017-8541."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutado en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente diseñado conllevando a una corrupción de memoria. también  se conoce como \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", una vulnerabilidad diferente de CVE-2017-8540 y CVE-2017-8541."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F1182-AC87-4A8E-841D-25C94DD7116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13704.0",
            "matchCriteriaId" : "EAEB9885-D7CE-49E4-8780-0BDF2B975BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16F88D-63BC-4EAA-8CA7-8B5DC54235E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7B17EA-856C-492A-861F-6932A1BDF9BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98706",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42081/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8539",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8542."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutado en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente diseñado conllevando a una denegación de servicio. también se conoce como \"Microsoft Malware Protection Engine denial of Service Vulnerability\", una vulnerabilidad diferente de CVE-2017-8535, CVE-2017-8536, CVE-2017-8537 y CVE-2017-8542."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F1182-AC87-4A8E-841D-25C94DD7116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13704.0",
            "matchCriteriaId" : "EAEB9885-D7CE-49E4-8780-0BDF2B975BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16F88D-63BC-4EAA-8CA7-8B5DC54235E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7B17EA-856C-492A-861F-6932A1BDF9BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98704",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8539",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8540",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.427",
      "lastModified" : "2025-10-22T00:16:11.893",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", a different vulnerability than CVE-2017-8538 and CVE-2017-8541."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutado en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente diseñado conllevando a una corrupción de memoria. también se conoce como \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", una vulnerabilidad diferente de CVE-2017-8538 y CVE-2017-8541."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.13701.0",
            "versionEndExcluding" : "1.1.13704.0",
            "matchCriteriaId" : "232A1DC9-D943-407F-B82C-3D7522E19A18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC297F51-9742-43A2-8783-53B7E4D5E435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF8DB7-D5A0-47A8-9F69-7D0259490D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9503E8-6282-4F3A-A6DA-0FA8A9BD941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55E0DDF-4D05-4E5F-BC54-790A722E87A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F1182-AC87-4A8E-841D-25C94DD7116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:intune_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC8E84F-EEC0-4803-9779-8A49658F2180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194DE421-9536-4001-9A27-6C88805421EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98703",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8540",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42088/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42088/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8540",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8541",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", a different vulnerability than CVE-2017-8538 and CVE-2017-8540."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutado en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente diseñado conllevando a una corrupción de memoria. también se conoce como  \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", una vulnerabilidad diferente de CVE-2017-8538 y CVE-2017-8540."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F1182-AC87-4A8E-841D-25C94DD7116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13704.0",
            "matchCriteriaId" : "EAEB9885-D7CE-49E4-8780-0BDF2B975BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16F88D-63BC-4EAA-8CA7-8B5DC54235E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7B17EA-856C-492A-861F-6932A1BDF9BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98710",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8541",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42092/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42092/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8542",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-05-26T20:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8539."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft ejecutado en Microsoft Forefront y Microsoft Defender en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703 y Windows Server 2016, Microsoft Exchange Server 2013 y 2016, no analiza apropiadamente un archivo especialmente diseñado conllevando a una denegación de servicio. También se conoce como \"Microsoft Malware Protection Engine Denial of Service Vulnerability\", una vulnerabilidad diferente de CVE-2017-8535, CVE-2017-8536, CVE-2017-8537 y CVE-2017-8539."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F1182-AC87-4A8E-841D-25C94DD7116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13704.0",
            "matchCriteriaId" : "EAEB9885-D7CE-49E4-8780-0BDF2B975BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16F88D-63BC-4EAA-8CA7-8B5DC54235E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7B17EA-856C-492A-861F-6932A1BDF9BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98707",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8542",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-26T20:29:00.537",
      "lastModified" : "2023-11-07T02:50:35.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-5937.  Reason: This candidate is a reservation duplicate of CVE-2017-5937.  Notes: All CVE users should reference CVE-2017-5937 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5646",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-05-26T21:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be easily associated with the authenticated user, this is still a serious security issue. All users are recommended to upgrade to the Apache Knox 0.12.0 release."
      }, {
        "lang" : "es",
        "value" : "Para versiones de Apache Knox desde 0.2.0 hasta 0.11.0, un usuario autenticado puede usar una URL especialmente diseñada para suplantar a otro usuario mientras accede a WebHDFS por medio de Apache Knox. Esto puede resultar en privilegios escalados y acceso a datos no autorizados. Mientras esta actividad está registrada como auditoría y puede ser asociada fácilmente con el usuario autenticado, esto sigue siendo un problema de seguridad serio. Se recomienda a todos los usuarios actualizar a la versión Apache Knox versión 0.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB08A82-F503-42F1-82DD-1C9DD9D1B329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A0A928-87F2-48C1-9E28-0DD081C3B659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8495A7-CC0D-4C55-851E-9D36BAAAE96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E962CBAB-A1FD-47D0-8C06-8DC9C5EC2685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FF2592-88E3-4244-99E9-DDE78BAEE708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8366021-F490-4168-95A9-9A850C4D4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECD700-6EA2-4F3C-81F1-080DE8E344CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2488F651-8097-4B35-B154-51BFE2B739E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3667D057-A631-4FAA-8850-A6741BD5DF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:knox:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E2E1E1-3BA3-4AC1-A57B-46B8D52DC097"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/knox-user/201705.mbox/%3CCACRbFyjtT7QQGHUzTRdbJoySbJb7tt4BDk5-r-VRn0GB0Kgvag%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98739",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd6bcbcc08840d4e4bea661efe9a5ef8f6126ebbbc5bc266701d8f48%40%3Cdev.logging.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/knox-user/201705.mbox/%3CCACRbFyjtT7QQGHUzTRdbJoySbJb7tt4BDk5-r-VRn0GB0Kgvag%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd6bcbcc08840d4e4bea661efe9a5ef8f6126ebbbc5bc266701d8f48%40%3Cdev.logging.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3126",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Redireccionamiento Abierto en FortiAnalyzer versiones desde 5.4.0 hasta 5.4.2 y FortiManager versiones desde 5.4.0 hasta 5.4.2 de Fortinet, permite a un atacante ejecutar código o comandos no autorizados por medio del parámetro next."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC123643-C9EE-40BF-B6F5-CE942F0A474E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBCBC4B-ECCB-467D-8CB1-D017C5DCB3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CD11DF-36F4-4761-92AC-5F01F965B02A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortimanager_firmware:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C235585-4228-43B3-B2BB-06563B67F9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortimanager_firmware:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B760F3B0-C81A-4B53-8D1E-384834D4A594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortimanager_firmware:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BF2F41-32BB-4C64-A9A2-62FB61B7D318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98557",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038539",
        "source" : "psirt@fortinet.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038540",
        "source" : "psirt@fortinet.com"
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-014",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3129",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en FortiWeb, versiones 5.7.1 y anteriores de Fortinet, permite a un atacante ejecutar código o comandos no autorizados por medio de un parámetro POST saneado inapropiadamente en la funcionalidad FortiWeb Site Publisher."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.1",
            "matchCriteriaId" : "17A29045-7C4B-4006-8855-38310732DB8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98382",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-076",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3134",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'."
      }, {
        "lang" : "es",
        "value" : "\"Una vulnerabilidad de escalada de privilegios en FortiWLC-SD versiones 8.2.4 y anteriores de Fortinet, permite al atacante conseguir acceso de root por medio del comando de la CLI 'copy running-config'.\n\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortiwlc-sd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "317DB3E9-64A6-4E40-B7B5-230C6A3B8CCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97603",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-097",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7337",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Control de Acceso inapropiada en FortiPortal versiones 4.0.0 y anteriores de Fortinet, permite a un atacante interactuar con VDOMs no autorizados o enumerar otros ADOM por medio de una sesión robada de otro usuario y tokens CSRF o el parámetro adomName en la petición /fpc/sec/customer/policy/getAdomVersion."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7338",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el manejo de contraseñas en Fortinet FortiPortal en versiones anteriores a la 4.0.0 que permite a los atacantes divulgar información mediante FortiAnalyzer Management View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7339",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en FortiPortal versiones 4.0.0 y anteriores de Fortinet, permite a un atacante ejecutar código o comandos no autorizados por medio de las entradas \"Name\" y \"Description\" en la funcionalidad \"Add Revision Backup\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7343",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redirección abierta en Fortigate FortiPortal 4.0.0 y posterior permite al atacante ejecutar código no autorizado o comandos a través del parámetro url."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7731",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-05-27T00:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de recuperación de contraseña débil en Fortigate FortiPortal versiones 4.0.0 y siguientes permite al atacante llevar a cabo la divulgación de información a través de la función de contraseña olvidada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-27T01:29:02.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls."
      }, {
        "lang" : "es",
        "value" : "La función __ip6_append_data en el archivo net/ipv6/ip6_output.c en el kernel de Linux hasta versión 4.11.3, es demasiado tardía para comprobar si se puede sobrescribir una estructura de datos skb, lo que permite a los usuarios locales causar una denegación de servicio (bloqueo del sistema) por medio de unas llamadas de sistema diseñadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.3",
            "matchCriteriaId" : "366CA732-03B0-4C72-8880-BA229C7B2DF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=232cd35d0804cc241eb887bb8d4d9b3b9881c64a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98731",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/232cd35d0804cc241eb887bb8d4d9b3b9881c64a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/764880/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=232cd35d0804cc241eb887bb8d4d9b3b9881c64a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/232cd35d0804cc241eb887bb8d4d9b3b9881c64a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/764880/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T00:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Contiki Operating System 3.0. A use-after-free vulnerability exists in httpd-simple.c in cc26xx-web-demo httpd, where upon a connection close event, the http_state structure was not deallocated properly, resulting in a NULL pointer dereference in the output processing function. This resulted in a board crash, which can be used to perform denial of service."
      }, {
        "lang" : "es",
        "value" : "Fue detectado un problema en el Contiki Operating System versión 3.0. Se presenta una vulnerabilidad de uso de la memoria previamente liberada en el archivo httpd-simple.c en httpd cc26xx-web-demo, donde en un evento de cierre de conexión, la estructura http_state no se desasigna apropiadamente, resultando en una desreferencia de puntero NULL en la función de procesamiento de salida. Esto resulta en un bloqueo de tarjeta, que se puede utilizar para realizar la denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contiki-os:contiki:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF3DB31-D1C3-4110-8919-13452E797D81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T00:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Contiki Operating System 3.0. A Persistent XSS vulnerability is present in the MQTT/IBM Cloud Config page (aka mqtt.html) of cc26xx-web-demo. The cc26xx-web-demo features a webserver that runs on a constrained device. That particular page allows a user to remotely configure that device's operation by sending HTTP POST requests. The vulnerability consists of improper input sanitisation of the text fields on the MQTT/IBM Cloud config page, allowing for JavaScript code injection."
      }, {
        "lang" : "es",
        "value" : "Fue descubierto un problema en el Contiki Operating System versión 3.0. Una vulnerabilidad de tipo XSS persistente está presente en la página de Configuración MQTT/IBM Cloud (también se conoce como mqtt.html) de cc26xx-web-demo. El cc26xx-web-demo cuenta con un servidor web que se ejecuta en un dispositivo restringido. Esa página en particular permite a un usuario configurar remotamente el funcionamiento de ese dispositivo mediante el envío de peticiones HTTP POST. La vulnerabilidad consiste en un saneamiento de entrada inapropiada de los campos de texto en la página de configuración de MQTT/IBM Cloud, lo que permite la inyección de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contiki-os:contiki:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF3DB31-D1C3-4110-8919-13452E797D81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98790",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T00:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root."
      }, {
        "lang" : "es",
        "value" : "Juju anterior a versión 1.25.12, versiones 2.0.x anteriores a 2.0.4 y versiones 2.1.x anteriores a 2.1.3, utiliza un socket de dominio UNIX sin establecer los permisos apropiados, lo que permite la escalada de privilegios a root por parte de los usuarios del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.25.12",
            "matchCriteriaId" : "0C5BE220-6F58-4812-AFE3-8D9793A028C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A30AAA0-79D7-43EE-9000-E29D239C1423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3613737-D975-4218-8D2D-9C5F30A095D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "68BF4E5A-F8D9-4597-8920-5D8DB5C72DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0496CF96-517D-4A42-9393-09D926225CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0DAA36-CE44-4615-AAF5-3DAF3C032C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "9B63B060-8DBF-4FC8-86C4-E2B92F83EEC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "F0CCD5D2-9A6C-47D0-A6CA-33CE5A8130DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta13:*:*:*:*:*:*",
            "matchCriteriaId" : "C66EE5F7-A693-4F40-8CE5-319F107F9D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "8B840808-BB6D-4BD9-9C05-553CC2222529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "55F73215-B61E-46C0-A599-6BA11D047F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "E7078C20-1D6C-4DE9-A87F-16724AD9D22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta17:*:*:*:*:*:*",
            "matchCriteriaId" : "4491F701-66AC-40FC-9F6D-7F0DD91F298E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta18:*:*:*:*:*:*",
            "matchCriteriaId" : "702884F5-D423-4858-AFED-DB3D039FEAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "4C983D9C-0513-426C-B229-2436C5F59608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C76E9506-8AD7-4ED3-9BEF-7161F4A4E552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "2763A2A8-8513-4DF1-B8BA-067E108F4C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "B397B007-DB41-4A83-BDF1-5B8B9C4CB3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5363F3FA-92F7-4338-ACA4-F618009B64ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "E321CBD7-2A89-4AC2-929E-3E998C5C2750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "21765F6B-9EA8-4829-A055-8116E66CF05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA1FDE5-1774-43F3-822D-D7103108C6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "647A7889-D988-44F2-8ECD-8D33D7EEAE9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "11D7D143-38AA-4E15-9713-0D7964331E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D17D297F-6B0D-463A-ABB9-4AF1A9E35C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF58D367-DC9A-4F83-AF4E-9127BF59833A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B341AD-40F8-438B-94E2-638E9AED6759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F7445-CCEE-4839-BDBB-B65942485DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A801D43-DF2A-4708-8F62-05BF8D6E6E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B28B60-ECE2-4580-91C3-A45C01E6826D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C90BD36D-F23C-4A6A-A6BE-70C662462F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB9B0F1-9164-4256-96FB-23226A97F03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "472C690A-FD1E-4799-BCA5-844FD48D40C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "161DE2C5-FB64-4761-AEC5-2AAE3330497F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BB6B17-6554-42CF-9D8A-DCAD0DB8E932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CBB12D-4222-464B-AB93-1EE721A4A08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D6E57E-7903-41C1-B492-E496C6E269DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:juju:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416EFEF-81D6-4851-B297-6C8DACDBA60C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98737",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.launchpad.net/juju/+bug/1682411",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44023/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.launchpad.net/juju/+bug/1682411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44023/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point."
      }, {
        "lang" : "es",
        "value" : "Aries QWR-1104 Wireless-N Router con la versión de Firmware WRC.253.2.0913 tiene Cross-Site Scripting (XSS) en la página Wireless Site Survey que se puede explotar con el nombre de un punto de acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aries_networks:qwr-1104_wireless-n_router_firmware:wrc.253.2.0913:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B0134D-AFF4-42B9-8B84-CEC9DECAA3A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aries_networks:qwr-1104_wireless-n_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D5D627-A394-4675-B778-F1BB9F483504"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42075/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42075/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T20:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATH_INFO to readfile.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en Allen Disk versión 1.6, permite a los usuarios autenticados remotos inyectar script web o HTML arbitrario persistentemente mediante la carga de un archivo HTML especialmente diseñado. El vector de ataque es el contenido de este archivo, y el nombre de archivo debe ser especificado en PATH_INFO en archivo readfile.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58574971-6FAE-43CC-871E-13F36772BD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98743",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/issues/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/issues/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T20:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function."
      }, {
        "lang" : "es",
        "value" : "La función lexer_process_char_literal en el archivo jerry-core/parser/js/js-lexer.c en JerryScript versión 1.0, no omite la asignación de memoria para cadenas vacías, lo que permite a los atacantes remotos causar una denegación de servicio (desreferencia del puntero NULL y bloqueo de aplicación) por medio de código fuente JavaScript malformado, relacionado con la función jmem_heap_free_block."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "69D3C064-1AA5-4022-B314-62639FDE8BF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038413",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/commit/e58f2880df608652aff7fd35c45b242467ec0e79",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/1821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zherczeg/jerryscript/commit/03a8c630f015f63268639d3ed3bf82cff6fa77d8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/commit/e58f2880df608652aff7fd35c45b242467ec0e79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zherczeg/jerryscript/commit/03a8c630f015f63268639d3ed3bf82cff6fa77d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T20:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php."
      }, {
        "lang" : "es",
        "value" : "andrzuk/FineCMS hasta el 28-05-2017, es vulnerable a un problema de tipo XSS reflejada en el parámetro sitename en el archivo admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sebao.me/index.php/post/13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://sebao.me/index.php/post/13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-28T20:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action."
      }, {
        "lang" : "es",
        "value" : "andrzuk/FineCMS hasta el 28-05-2017, es vulnerable a un problema de tipo XSS reflejado en la página de búsqueda por medio del parámetro text-search en el archivo index.php en una acción route=search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sebao.me/index.php/post/14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.sebao.me/index.php/post/14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T04:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En la versión 7.0.5-6 Q16 de ImageMagick, la función ReadMPGImage en coders/png.c permite a los atacantes provocar un ataque de denegación de servicio (filtrado de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98730",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/476",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T04:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En la versión 7.0.5-6 Q16 de ImageMagick, la función ReadJNGImage en coders/png.c permite a los atacantes provocar un ataque de denegación de servicio (filtrado de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98735",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/475",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T04:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
      }, {
        "lang" : "es",
        "value" : "En Open vSwitch (OvS) versión 2.7.0, mientras se analiza un mensaje de estado de rol de OpenFlow, se llama a la función abort() por motivos de estado de rol indefinido en la función “ofp_print_role_status_message” en la biblioteca “lib/ofp-print.c” que puede ser aprovechada para un ataque de DoS remota mediante una interrupción maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C92CDE-F125-490D-9B70-AEAAA6947352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T04:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca lib/conntrack.c en la implementación del firewall en Open vSwitch (OvS) versión 2.6.1, se presenta una lectura excesiva del búfer mientras se analizan los paquetes TCP, UDP e IPv6 malformados en las funciones “extract_l3_ipv6”, “extract_l4_tcp” y “extract_l4_udp” que pueden ser activadas remotamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvswitch:openvswitch:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6701F4D-8561-496B-8AEC-B23A149EC675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T04:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`."
      }, {
        "lang" : "es",
        "value" : "En Open vSwitch (OvS) versión 2.7.0, se presenta una lectura excesiva del búfer mientras se analiza el mensaje group mod OpenFlow enviado desde el controlador en la biblioteca “lib/ofp-util.c” en la función “ofputil_pull_ofp15_group_mod”."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C92CDE-F125-490D-9B70-AEAAA6947352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7913",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-29T16:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext."
      }, {
        "lang" : "es",
        "value" : "Fue descubierto un problema de Almacenamiento de Contraseña en Texto Plano en OnCell G3110-HSPA Versión 1.3 build 15082117 y anteriores, OnCell G3110-HSDPA Versión 1.2 Build 09123015 y anteriores, OnCell G3110-HSDPA Versión 1.2 Build 09123015 y anteriores, OnCell G3150-HSDPA Versión 1.4 Build 11051315 y anteriores s, OnCell 5104-HSDPA, OnCell 5104-HSPA y OnCell 5004-HSPA de Moxa. El archivo de configuración de la aplicación contiene parámetros que representan contraseña en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3110-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "5CFA5909-E3E7-4BDC-9235-B384FD23D17D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3110-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B1828B-E962-4D9B-A6F0-2CAD46ED9A4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3110-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "9D20F3CE-5D91-4721-BE5E-92DFE609C27D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3110-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8C9C07-2B12-4222-A41D-2606CF556316"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3150-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "C218E098-97B2-4551-9176-71310BD78048"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3150-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0051BC60-664B-4AF3-862B-D4E61488DF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5104-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "6647DC3F-1F80-45FF-86E6-08946C12C261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5104-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE37944-87F9-46EF-B819-C911A04F9E16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5104-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "FED2A2C5-82CD-46FC-A806-39273772640A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5104-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEADDBA3-E09D-4681-AD66-9026D66EE00D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5004-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "6A479DB2-58FC-469D-AC96-71324B7E666C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5004-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83D3184-78F8-42FB-9BF8-A4DFDB34F281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7915",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-29T16:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "Fue detectado un problema de Restricción Inapropiada de Intentos de Autenticación Excesivos en OnCell G3110-HSPA Versión 1.3 build 15082117 y anteriores, OnCell G3110-HSDPA Versión 1.2 Build 09123015 y anteriores, OnCell G3150-HSDPA Versión 1.4 Build 11051315 y anteriores, OnCell 5104-HSDPA, OnCell 5104-HSPA y OnCell 5004-HSPA de Moxa. Un atacante puede usar libremente fuerza bruta para determinar los parámetros necesarios para omitir la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3110-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "5CFA5909-E3E7-4BDC-9235-B384FD23D17D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3110-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B1828B-E962-4D9B-A6F0-2CAD46ED9A4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3110-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "9D20F3CE-5D91-4721-BE5E-92DFE609C27D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3110-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8C9C07-2B12-4222-A41D-2606CF556316"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3150-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "C218E098-97B2-4551-9176-71310BD78048"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3150-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0051BC60-664B-4AF3-862B-D4E61488DF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5104-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "6647DC3F-1F80-45FF-86E6-08946C12C261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5104-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE37944-87F9-46EF-B819-C911A04F9E16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5104-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "FED2A2C5-82CD-46FC-A806-39273772640A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5104-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEADDBA3-E09D-4681-AD66-9026D66EE00D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5004-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "6A479DB2-58FC-469D-AC96-71324B7E666C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5004-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83D3184-78F8-42FB-9BF8-A4DFDB34F281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7917",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-05-29T16:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device."
      }, {
        "lang" : "es",
        "value" : "Fue detectado un problema de tipo cross-site request forgery en OnCell G3110-HSPA Versión 1.3 build 15082117 y anteriores, OnCell G3110-HSDPA Versión 1.2 Build 09123015 y anteriores, OnCell G3150-HSDPA Versión 1.4 Build 11051315 y anteriores, OnCell 5104-HSDPA, OnCell 5104-HSPA y OnCell 5004-HSPA de  Moxa. La aplicación no comprueba suficientemente si una petición fue proporcionada intencionalmente por el usuario que envió la petición, lo que podría permitir a un atacante modificar la configuración del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3110-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "5CFA5909-E3E7-4BDC-9235-B384FD23D17D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3110-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B1828B-E962-4D9B-A6F0-2CAD46ED9A4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3110-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "9D20F3CE-5D91-4721-BE5E-92DFE609C27D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3110-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8C9C07-2B12-4222-A41D-2606CF556316"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_g3150-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "C218E098-97B2-4551-9176-71310BD78048"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_g3150-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0051BC60-664B-4AF3-862B-D4E61488DF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5104-hsdpa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "6647DC3F-1F80-45FF-86E6-08946C12C261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5104-hsdpa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE37944-87F9-46EF-B819-C911A04F9E16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5104-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "FED2A2C5-82CD-46FC-A806-39273772640A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5104-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEADDBA3-E09D-4681-AD66-9026D66EE00D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:oncell_5004-hspa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "6A479DB2-58FC-469D-AC96-71324B7E666C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:oncell_5004-hspa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83D3184-78F8-42FB-9BF8-A4DFDB34F281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T16:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0."
      }, {
        "lang" : "es",
        "value" : "servers/slapd/back-mdb/search.c en OpenLDAP hasta la versión 2.4.44 es propenso a una doble vulnerabilidad de liberación de memoria. Un usuario con acceso para buscar en el directorio puede hacer que slapd deje de funcionar al emitir una búsqueda que incluya el control Paged Results con un tamaño de página de 0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.44",
            "matchCriteriaId" : "9E460604-92F0-4116-96C0-2E2D7B2E14CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:policy_auditor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.1",
            "matchCriteriaId" : "CB739B3A-20BB-4118-82DD-7ACFE5881FE2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.2",
            "matchCriteriaId" : "D0DBC938-A782-433F-8BF1-CA250C332AA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3868",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/?findid=8655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98736",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038591",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/863563",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/?findid=8655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/863563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T16:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter)."
      }, {
        "lang" : "es",
        "value" : "El plugin de Raygun4WP 1.8.0 para WordPress es vulnerable a un XSS reflejado en sendtesterror.php (parámetro backurl)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raygun:raygun4wp:1.8.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CFD40330-B103-4FAF-A554-AC5CD5D6F5B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jgj212.blogspot.kr/2017/05/a-reflected-xss-vulnerability-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MindscapeHQ/raygun4wordpress/issues/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MindscapeHQ/raygun4wordpress/pull/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jgj212.blogspot.kr/2017/05/a-reflected-xss-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MindscapeHQ/raygun4wordpress/issues/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MindscapeHQ/raygun4wordpress/pull/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T17:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS."
      }, {
        "lang" : "es",
        "value" : "La caché de una sesión TLS en FreeRADIUS versiones 2.1.1 hasta 2.1.7, versiones 3.0.x anteriores a 3.0.14, versiones 3.1.x antes de 04-02-2017, y versiones 4.0.x antes de 04-02-2017, no puede impedir de manera fiable la reanudación de una sesión no autenticada, que permite a los atacantes remotos (como requirentes maliciosos 802.1X) para omitir la autenticación por medio de PEAP o TTLS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAEB64-0676-4C18-8255-DACDA612188E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7A434-49DC-4005-9161-F2B49559621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A54D59A-B832-4EE3-A8D6-A85EC17C268A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D494932F-F639-44BE-B15C-7F07A67B0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D45784-C53B-4A11-B1B3-BC68B514002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969979B-2852-453D-AF48-A462448D4C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D7673-6BA7-4113-86E1-00F9A60C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B5D50-C251-4569-9D2C-49FB64702646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D867F-7147-4C97-927B-C10404CC2985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C129A8-59C9-4780-8454-4EB112DF0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C228DD-0EB3-4348-8D7A-D17A59E92013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2400422C-8E52-4946-BE83-AA7167F0F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78140938-FD3B-442E-B906-7705CDFF853D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354381FC-52F3-4377-8DE0-75FC0D2D7FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D829A428-71E8-4EB4-A8D7-BD5B673AA51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F800631-5190-410F-B11D-02CF956D5B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA8D994-16CB-44F0-95FE-7AFECB56C949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/422",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98734",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T17:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\\ui\\editor.php (edit parameter)."
      }, {
        "lang" : "es",
        "value" : "Note de Bram Korsten hasta la versión 1.2.0 es vulnerable a un ataque XSS reflejado en note-source\\ui\\editor.php (editar parámetro)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:note_project:note:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "D62FF37B-19C0-4C24-9F90-B03A1B40C561"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bramkorsten/Note/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bramkorsten/Note/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782."
      }, {
        "lang" : "es",
        "value" : "Lansweeper versiones anteriores a 6.0.0.65 es vulnerable a un XSS en una recuperación de imágenes URI, también conocido como Bug 542782."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lansweeper:lansweeper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0.64",
            "matchCriteriaId" : "7D6632DF-2178-49E8-83DA-38A020D6EAC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backbox.org/membership/lansweeper-v6-0-0-63-xss-vulnerability/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.lansweeper.com/changelog.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://backbox.org/membership/lansweeper-v6-0-0-63-xss-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.lansweeper.com/changelog.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T18:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad RMI en Hitachi Device Manager anterior a 8.5.2-01 permite a atacantes remotos ejecutar comandos internos sin autenticación a través de puertos RMI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.2",
            "matchCriteriaId" : "EE4D27D2-0A7B-4010-A3D9-09413291414D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98765",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Un vulnerabilidad XXE en Hitachi Device Manager anterior a 8.5.2-01 y en Hitachi Replication Manager anterior a 8.5.2-00 permite a los usuarios remotos autenticados leer archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.2",
            "matchCriteriaId" : "EE4D27D2-0A7B-4010-A3D9-09413291414D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98761",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T18:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Open Redirect en Hitachi Device Manager anterior a 8.5.2-01 y en Hitachi Tuning Manager anterior a 8.5.2-00, permite a atacantes remotos redireccionar usuarios autenticados a sitios web arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.2",
            "matchCriteriaId" : "EE4D27D2-0A7B-4010-A3D9-09413291414D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98774",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T18:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Open Redirect en Hitachi Device Manager anterior a 8.5.2-01 permitiría a un atacante remoto, redirigir a los usuarios a sitios web arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.2",
            "matchCriteriaId" : "EE4D27D2-0A7B-4010-A3D9-09413291414D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T18:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuencias de comandos entre sitios (XSS) en Hitachi Device Manager anterior a 8.5.2-01 y en Hitachi Replication Manager anterior a 8.5.2-00 permitiría a usuarios remotos autenticados ejecutar código JavaScript arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.2",
            "matchCriteriaId" : "EE4D27D2-0A7B-4010-A3D9-09413291414D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T19:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks. NOTE: this CVE may have limited relevance because it represents a 2017 discovery of an issue in software from 2014. The 3.3.20 release, for example, is not affected."
      }, {
        "lang" : "es",
        "value" : "Open Ticket Request System (OTRS) 3.3.9 tiene XSS en las peticiones index.pl?Action=AgentStats, tal y como demuestran los ataques OrderBy=[XSS] y Direction=[XSS]. NOTA: este CVE podría tener una relevancia limitada, ya que representa un descubrimiento del 2017 de un problema en el software del 2014. La versión 3.3.20, por ejemplo, no se ha visto afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454607A9-6CAA-49F1-81D6-A2D1CC468C4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T19:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "plugins\\codec\\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file."
      }, {
        "lang" : "es",
        "value" : "Plugins/codec/libflac_plugin.dll en VideoLAN VLC media player 2.2.4 permitiría un atacante remoto causar una denegación de servicio (corrupción de memoria dinámica -heap- y fallo de aplicación) o posiblemente tener otro impacto no especificado a través de un archivo FLAC especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "60281829-AD27-4A95-B1A4-3D6008627406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98747",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T19:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "plugins\\audio_filter\\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "plugins/audio_filter/libmpgatofixed32_plugin.dll en VideoLAN VLC media player 2.2.4 permite a un atacante remoto causar una denegación de servicio (lectura invalida y fallo de aplicación) o posiblemente tener otro impacto no especificado a través de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "60281829-AD27-4A95-B1A4-3D6008627406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98746",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T19:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "RealPlayer 16.0.2.32 permitiría a una atacante remoto causar una denegación de servicio (error de división por cero y fallo de la aplicación) a través de un archivo mp4 especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:16.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5620A0-8DAF-4FE6-8955-FA4B96ACF955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/05/divided-realplayer-160232.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98754",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/05/divided-realplayer-160232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-29T22:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host."
      }, {
        "lang" : "es",
        "value" : "Laravel 5.4.x anterior a 5.4.22 no restringe adecuadamente la parte del host de una URL de restablecimiento de contraseña, lo que facilitaría a un atacante remoto realizar ataques de phishing especificando un host controlado por dicho atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:laravel:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807CB2AC-5C2F-4495-BFF3-1ECA404845F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98776",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://laravel-news.com/laravel-5-4-22-is-now-released-and-includes-a-security-fix",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://laravel-news.com/laravel-5-4-22-is-now-released-and-includes-a-security-fix",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2300",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a multicast session created via crafted multicast packets."
      }, {
        "lang" : "es",
        "value" : "En los clústeres de tipo chassis de dispositivos Juniper Networks SRX Series Services Gateways que ejecutan el sistema operativo versiones: Junos 12.1X46 anterior a 12.1X46-D65, 12.3X48 anterior a 12.3X48-D40 y12.3X48 anterior a 12.3X48-D60, el demonio flowd en el nodo principal del clúster, puede bloquearse y reiniciarse al intentar sincronizar una sesión multicast creada mediante paquetes multicast especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:d60:*:*:*:*:*:*",
            "versionEndIncluding" : "12.1x46",
            "matchCriteriaId" : "754DF870-327A-496A-898C-A7AC31333529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:d35:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3x48",
            "matchCriteriaId" : "586D4B84-7894-4A7A-87E7-E2D79C16896D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:d50:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3x48",
            "matchCriteriaId" : "FDDE6EEE-DCD2-4B64-BEF9-3A602D50546F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95400",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037597",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA10768",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.juniper.net/JSA10768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2301",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R13, 12.3X48 prior to 12.3X48-D40, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D12 or 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R7, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D60, 15.1X53 prior to 15.1X53-D30 and DHCPv6 enabled, when a crafted DHCPv6 packet is received from a subscriber, jdhcpd daemon crashes and restarts. Repeated crashes of the jdhcpd process may constitute an extended denial of service condition for subscribers attempting to obtain IPv6 addresses."
      }, {
        "lang" : "es",
        "value" : "En los productos o plataformas Juniper Networks que ejecutan Junos OS versiones 11.4 anteriores a 11.4R13-S3, 12.1X46 anteriores a 12.1X46-D60, 12.3 anteriores a 12.3R12-S2 o 12.3R13, 12.3X48 anteriores a 12.3X48-D40, 13.2X51 anteriores a 13.2X51-D40, 13.3 anteriores a 13.3R10, 14.1 anteriores a 14.1R8, 14.1X53 anteriores a 14.1X53-D12 o 14.1X53-D35, 14.1X55 anteriores a 14.1X55-D35, 14.2 anteriores a 14.2R7, 15.1 anteriores a 15.1F6 o 15.1R3, 15.1X49 anteriores a 15.1X49-D60, 15.1X53 anteriores a 15.1X53-D30 y además tiene habilitado DHCPv6, cuando un paquete DHCPv6 especialmente diseñado es recibido desde un suscriptor, el demonio jdhcpd se bloquea y se reinicia. Los bloqueos repetidos del proceso jdhcpd pueden constituir una condición extendida de denegación de servicio para los suscriptores que intentan obtener direcciones IPv6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5C947EA2-329F-4AC7-A1F4-64164C20CC4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "926EDB84-E8C5-4030-8B69-CDA9BF1A9D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAECB8C-6B4D-440C-B031-2CF3061393DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3FC6EB-D5A5-43EC-B5EB-E1BE009EF5AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "5E95BB69-967B-4DB7-9655-01ADA258F11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD7336D-EAAC-4817-9D3A-5664B0AAE6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "BC336F14-5D8D-4B28-8F47-2A5EFFC7800C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F92DD-59C4-4C86-9360-86E840243123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "DE6B95FB-F936-430A-B715-7430327E1872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A8F07B-110F-4FE4-BA09-F23A4D1DCA5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "78A3616E-9666-4D09-9ED7-EFD796E6E08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACF87F1-B5DD-469A-87D6-94AD8D0758F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:11.4:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4F8B25-B632-4C4B-9E90-3DF9FC98207B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*",
            "matchCriteriaId" : "92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "960059B5-0701-4B75-AB51-0A430247D9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "3C240840-A6BC-4E3D-A60D-22F08E67E2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC90563F-6BCB-4D77-8FD4-584E3A6C7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD03BA7-D9EC-420F-97C4-383F79D6873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FED64-8725-4978-9EBF-E3CD8EF338E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2977373F-A77A-4726-8134-D0817F393F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "3947A516-2054-48B3-ADFD-3CF88EC2288D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "D0951235-4A0A-4200-A7B1-9FF4540A3755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3A9AB1-202A-4480-8FFD-872C79325854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "7478F581-8A89-49D7-B9F9-E0E90BEEAEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "28B80348-B130-4178-BFD9-4AE390E139D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "D1EE6518-C224-4019-8393-85893AC29898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "718A304D-1DBD-4BC1-B038-2BD4755E8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2FBBA2-6185-463F-96D3-9AB2C778B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "09571E75-0EA2-4775-B1AB-CB0A0998F6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA19A66-738D-4D5E-A2DC-7A6A47F74718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "05455AB6-1BF8-4B2A-8A62-803AC65E92A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "0D851A45-618F-4B5D-9AB4-F7C2D38C948A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "C136BCB1-10A3-434E-8125-AEAC5B5F18C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "641131E9-6F1E-4EF4-A33E-EDCCCC3459C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7887DC05-BEBE-4D7C-8F7A-C1A70237EE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C9511DD0-D910-4C29-B0E3-8F9D0531F09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95396",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037596",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10769",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2302",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R6, 15.1 prior to 15.1F2 or 15.1R1, 15.1X49 prior to 15.1X49-D20 where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options, a network based attacker can cause the Junos OS rpd daemon to crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition."
      }, {
        "lang" : "es",
        "value" : "En productos o plataformas Juniper Networks que ejecutan Junos OS 12.1X46 anteriores a 12.1X46-D55, 12.1X47 anteriores a 12.1X47-D45, 12.3R13 anteriores a 12.3R13, 12.3X48 anteriores a 12.3X48-D35, 13.3 anteriores a 13.3R10, 14.1 anteriores a 14.1R8, 14.1X53 anteriores a 14.1X53-D40, 14.1X55 anteriores a 14.1X55-D35, 14.2 anteriores a 14.2R6, 15.1 anteriores a 15.1F2 oO 15.1R1, 15.1X49 anteriores a 15.1X49-D20, donde la funcionalidad BGP add-path está habilitada con la opción 'send' o con las opciones 'enviar' y 'recibir', un atacante en la red puede causar que el demonio rpd de Junos OS se bloquee y se reinicie. Los repetidos bloqueos del demonio rpd pueden resultar en una condición extendida de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*",
            "matchCriteriaId" : "92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBEDB3F-5FD1-4290-A80A-7EAD9B9C38C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "181C0D30-4476-48EE-A4A4-3B2461F4AC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "63F559A2-2744-4771-9420-C70AA87496A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "040A6307-236E-4FAA-9A74-676F1DB0CF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "350A0F1E-1057-4A8E-AB0B-7615B3877858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "898DF03B-0E72-4E9A-8C93-926FC01A87DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE85C83-E6FC-42DE-9857-A1FFA3A1B82A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE6764A-4FA0-4905-A281-C0386C0599C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "960059B5-0701-4B75-AB51-0A430247D9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "05E187F6-BACD-4DD5-B393-B2FE4349053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "3C240840-A6BC-4E3D-A60D-22F08E67E2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC90563F-6BCB-4D77-8FD4-584E3A6C7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD03BA7-D9EC-420F-97C4-383F79D6873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FED64-8725-4978-9EBF-E3CD8EF338E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2FBBA2-6185-463F-96D3-9AB2C778B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "09571E75-0EA2-4775-B1AB-CB0A0998F6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA19A66-738D-4D5E-A2DC-7A6A47F74718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "05455AB6-1BF8-4B2A-8A62-803AC65E92A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "0D851A45-618F-4B5D-9AB4-F7C2D38C948A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "C136BCB1-10A3-434E-8125-AEAC5B5F18C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "641131E9-6F1E-4EF4-A33E-EDCCCC3459C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95394",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037595",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10771",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2303",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R5, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D30 or 15.1X49-D40, 15.1X53 prior to 15.1X53-D35, and where RIP is enabled, certain RIP advertisements received by the router may cause the RPD daemon to crash resulting in a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "En productos o plataformas Juniper Networks que ejecutan Junos OS 12.1X46 anteriores a 12.1X46-D50, 12.1X47 anteriores a 12.1X47-D40, 12.3 anteriores a 12.3R13, 12.3X48 anteriores a 12.3X48-D30, 13.2X51 anteriores a 13.2X51-D40, 13.3 anteriores a 13.3R10, 14.1 anteriores a 14.1R8, 14.1X53 anteriores a 14.1X53-D35, 14.1X55 anteriores a 14.1X55-D35, 14.2 anteriores a 14.2R5, 15.1 anteriores a 15.1F6 o 15.1R3, 15.1X49 anteriores a 15.1X49-D30 o 15.1X49-D40, 15.1X53 anteriores a 15.1X53-D35, y donde RIP está habilitado, ciertos anuncios RIP recibidos por el router pueden causar que el demonio de RPD se bloquee resultando en una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*",
            "matchCriteriaId" : "92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBEDB3F-5FD1-4290-A80A-7EAD9B9C38C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "181C0D30-4476-48EE-A4A4-3B2461F4AC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "63F559A2-2744-4771-9420-C70AA87496A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "040A6307-236E-4FAA-9A74-676F1DB0CF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "350A0F1E-1057-4A8E-AB0B-7615B3877858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "898DF03B-0E72-4E9A-8C93-926FC01A87DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE85C83-E6FC-42DE-9857-A1FFA3A1B82A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "960059B5-0701-4B75-AB51-0A430247D9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "05E187F6-BACD-4DD5-B393-B2FE4349053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "3C240840-A6BC-4E3D-A60D-22F08E67E2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC90563F-6BCB-4D77-8FD4-584E3A6C7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD03BA7-D9EC-420F-97C4-383F79D6873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FED64-8725-4978-9EBF-E3CD8EF338E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2977373F-A77A-4726-8134-D0817F393F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "3947A516-2054-48B3-ADFD-3CF88EC2288D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "D0951235-4A0A-4200-A7B1-9FF4540A3755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3A9AB1-202A-4480-8FFD-872C79325854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "7478F581-8A89-49D7-B9F9-E0E90BEEAEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "28B80348-B130-4178-BFD9-4AE390E139D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "D1EE6518-C224-4019-8393-85893AC29898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "718A304D-1DBD-4BC1-B038-2BD4755E8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2FBBA2-6185-463F-96D3-9AB2C778B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "09571E75-0EA2-4775-B1AB-CB0A0998F6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA19A66-738D-4D5E-A2DC-7A6A47F74718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "05455AB6-1BF8-4B2A-8A62-803AC65E92A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "0D851A45-618F-4B5D-9AB4-F7C2D38C948A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "C136BCB1-10A3-434E-8125-AEAC5B5F18C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "641131E9-6F1E-4EF4-A33E-EDCCCC3459C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7887DC05-BEBE-4D7C-8F7A-C1A70237EE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C9511DD0-D910-4C29-B0E3-8F9D0531F09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95408",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037594",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10772",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2304",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'"
      }, {
        "lang" : "es",
        "value" : "Los dispositivos QFX3500, QFX3600, QFX5100, QFX5200, EX4300 y EX4600 de Juniper Networks que ejecutan Junos OS 14.1X53 anteriores a 14.1X53-D40, 15.1X53 anteriores a 15.1X53-D40 y 15.1 anteriores a 15.1R2, no rellenan paquetes Ethernet con ceros por lo que algunos paquetes pueden contener fragmentos de memoria del sistema o datos de paquetes anteriores. Este problema también es conocido como \"Etherleak\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C9511DD0-D910-4C29-B0E3-8F9D0531F09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4D44B0-E6CE-4380-8712-AC832DBCB424"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95403",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037593",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10773",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2305",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation."
      }, {
        "lang" : "es",
        "value" : "En versiones de Juniper Networks Junos Space anteriores a 16.1R1, debido a una insuficiente verificación de autorización, los usuarios de sólo lectura en la interfaz web de gestión de Junos Space, pueden crear usuarios privilegiados, lo que permite la escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1",
            "matchCriteriaId" : "A4B7AAA8-3D94-452C-A72E-E2A2F4840C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98759",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2306",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device."
      }, {
        "lang" : "es",
        "value" : "En versiones de Juniper Networks Junos Space anteriores a 16.1R1, debido a una insuficiente verificación de autorización, los usuarios de sólo lectura de la interfaz web de gestión de Junos Space, pueden ejecutar código en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1",
            "matchCriteriaId" : "A4B7AAA8-3D94-452C-A72E-E2A2F4840C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98772",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2307",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS de tipo reflejado en la interfaz de administración de Junos Space de Juniper Networks en versiones anteriores a 16.1R1, puede permitir a atacantes remotos robar información confidencial o realizar ciertas acciones administrativas en Junos Space."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:*:r2:*:*:*:*:*:*",
            "versionEndIncluding" : "15.2",
            "matchCriteriaId" : "A7488EE2-FC9D-46AF-89E7-D2942EA697C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98749",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2308",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de tipo XML External Entity en Junos Space anterior a versión 16.1R1 de Juniper Networks, puede permitir a un usuario autenticado leer archivos arbitrarios en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1",
            "matchCriteriaId" : "A4B7AAA8-3D94-452C-A72E-E2A2F4840C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98755",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2309",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk."
      }, {
        "lang" : "es",
        "value" : "En Junos Space anterior a versión 16.1R1 de Juniper Networks, cuando la autenticación basada en certificados está habilitada para el clúster de Junos Space, algunos servicios web restringidos son accesibles por medio de la red. Esto representa un riesgo de filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1",
            "matchCriteriaId" : "A4B7AAA8-3D94-452C-A72E-E2A2F4840C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98750",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2310",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de firewall en el firewall basado en el host Junos Space anterior a versión 16.1R1 de Juniper Networks, puede permitir ciertos paquetes especialmente diseñados, lo que representa un riesgo de integridad de la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:*:r2:*:*:*:*:*:*",
            "versionEndIncluding" : "15.2",
            "matchCriteriaId" : "A7488EE2-FC9D-46AF-89E7-D2942EA697C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98751",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2311",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-05-30T14:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "En Junos Space anterior a versión 16.1R1 de Juniper Networks, un atacante remoto no autenticado con acceso de red al dispositivo Junos Space puede crear fácilmente una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1",
            "matchCriteriaId" : "A4B7AAA8-3D94-452C-A72E-E2A2F4840C95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98748",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7494",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-30T18:29:00.190",
      "lastModified" : "2025-10-22T00:16:11.210",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it."
      }, {
        "lang" : "es",
        "value" : "Samba desde la versión 3.5.0 y anteriores a 4.6.4, versiones 4.5.10 y 4.4.14, son vulnerables a la ejecución de código remota, lo que permite que un cliente malicioso cargar una biblioteca compartida en un recurso compartido editable, y luego causar que el servidor lo cargue y ejecute."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-03-30",
      "cisaActionDue" : "2023-04-20",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Samba Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "BF2ABA66-D242-45C8-A05C-B3C828692F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.14",
            "matchCriteriaId" : "60CD8A70-8E75-44BD-8922-C3C92E02CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.10",
            "matchCriteriaId" : "2A15B468-4997-4E21-9975-9A8F5F87F5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "011C42DE-43E0-4EF0-B580-C0F121358D6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3860",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98636",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038552",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1272",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1273",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1390",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2018-095-01+Security+Notification+Umotion+V1.1.pdf&p_Doc_Ref=SEVD-2018-095-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03759en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-07",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170524-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42060/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42084/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-7494.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2018-095-01+Security+Notification+Umotion+V1.1.pdf&p_Doc_Ref=SEVD-2018-095-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03759en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170524-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42060/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42084/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-7494.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7494",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7502",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-30T18:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en NSS desde la versión 3.24.0 en la que el servidor recibe mensajes SSLv2 vacíos, lo que da lugar a una denegación de servicio (DoS) por parte de atacantes remotos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630172B3-35C0-4F6F-9314-B373479B5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B57208D-8174-44B9-853C-4F7F2421AF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A628134E-1542-4A48-8615-7A0162598720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D03667-90A8-4277-8C5E-E2601EF6DAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15238C6-62BA-40F8-9362-F0B7FAF38915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDD2D7F-CB2A-47EF-886C-BA243E332C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F1B087-FE60-4B95-9BCF-F5BAA8CEE3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5404F24C-F227-4F93-9036-D809CF29B6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199BCC71-C530-4BB7-9E25-C1119A6E5F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF88310-4B46-497F-9519-A1FFFF31D6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1133B63-F6A0-4A56-B544-828B751D728A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92CFFB1-A4E0-49C2-84F4-784E10E5EBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A539983F-E03E-44F7-92FE-5D18ACEB9872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2C10A9-B0C5-41CF-98A2-C127E98F8CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB24400-3E42-45B3-AC58-62638E419141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E14F84-F751-455E-ADE8-BDABD146B31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69F1814-1D94-47AB-AD50-2B1F042DCA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175E697B-FC1D-483B-9235-9162534FB093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3872",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98744",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038579",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1364",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1567",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://hg.mozilla.org/projects/nss/rev/55ea60effd0d",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hg.mozilla.org/projects/nss/rev/55ea60effd0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7511",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-05-30T18:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents."
      }, {
        "lang" : "es",
        "value" : "poppler desde versión 0.17.3, ha sido vulnerable a una desreferencia del puntero NULL en pdfunite desencadenada por documentos especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B464004-B108-400A-8EF1-66C9BDDD0431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E179689-E881-4528-BB29-F0BD41B2611C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAEB0E8-B097-44EE-B3C2-674B2E0D880E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED35025A-5A38-4114-BE98-90665BE328A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8269E19-8D3D-4D46-BA38-5B4259279927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBACC6D-F45C-4E7F-AF57-5F2636BFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CC490B-2653-45B2-B76E-27C58F804807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1620ED7-17B5-42B3-A331-EA0DB4F3A73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA33265-F8EB-4D5F-AFCE-2DBFB6BFED62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA407987-21C8-4930-9D03-B74210490E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8192A381-A80E-4800-A85C-B799AACFE897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23516598-8E84-4092-BA33-695E7A352175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F90CD7B-E988-4ADA-8809-9220F8309C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A2B51-945A-4007-8F6A-8C198B19BC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8B83EE-113B-49CC-A168-ED373B8E9F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBF9CF8-AE84-4609-9347-173D1E1D5F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527709DC-A1FC-47C0-AC6B-2833EF0CC277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A1B4BE-12A6-43DF-959C-965E75F04875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDFC91E-9123-4729-916F-24E62742B149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0090ED0-AF62-4A40-85E1-5502C0E5B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BEACB5-13A1-48DF-BC2A-0AF71B6671BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154F4DAA-76BF-4948-8258-C42A0B595012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD61DCAA-F9D3-4FD2-9712-8BA7A9A85241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9240BEED-D541-463F-9398-94ED5D4BDE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E33A6A0-1B2D-431F-81E1-A5262BCC74E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC71349-603D-41CA-B3EA-B87D85655BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF51EEB-10F6-41A9-A1EF-AF1D451B102E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8216A541-D100-4483-9465-85A5A8F44732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85615D2-85A2-4FD0-835B-D4920E89966C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3FD3F9-923B-4FCA-AC67-E79412671842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F49AC59-9B97-409A-8C78-5D5738AB361C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FBA6A3-E6A7-431C-8A64-577E971A144D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795D282A-9BD3-409B-8153-1AF98FCD6EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9416A79E-C8A7-4027-B2D5-70C2523EDDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226369BB-7875-4F49-AF96-B6B358ED5EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2448981A-3CEE-432B-87C4-646E3D782F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C88AC80-9F18-4E16-B5FD-C17CB71EF645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EAD55A-8FB3-45A3-9A1B-B122FB43B85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77F65E7-EB4E-47DA-ABBE-F567E640A130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DE4C6F-0A10-4646-98A0-CC3EC354106E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115B8110-637D-4537-B55F-BBF17FD5CA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188DA744-4043-48E6-9654-5AA544B71C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E56212-1ED1-4501-907D-AD89EBF5CA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E766F143-B220-4BA2-B919-D93010389156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88AF71B-0B40-48A3-BA28-7EF4F770D931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E9C28-1F08-457E-8E9C-7906461FFFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4831F246-6BBA-439A-B531-A7ACAF3A0F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7651591C-8581-47CB-BB73-F8ABFA12FF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067C6A60-EB47-4C64-A425-5849461975D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79049531-300B-406B-BA61-C061F623A234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456B9F7A-3477-4C52-AA98-4048472D8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C3FF6D-64AA-4C0E-B8C5-F6A5DB55123D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44169D4B-E7F4-4EBA-8194-44B40FD23E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D882F4-0E9F-4706-B2D9-9E673361B019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A2A6BD-4AFF-4FEB-BAD5-AC2CBF43955F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269376B9-48D9-4635-9319-428359EDD878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD8F8D2-450F-4444-A06D-CAAAE4FC8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8C81C3-1CD1-4468-91AF-C42C7CC96ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829E041C-D50E-47E4-AE79-F83359610EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB75D4B-C71F-4FFD-9EB6-CB4B1EEFAC60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EE5D3F-1CF1-438B-BC64-E71209CFB143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.38.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F533478-2BB4-4FB7-8624-C69AE2E33B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BD6DA0-031A-402D-8FA8-5BDEDBF06CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2549859C-C034-4D65-90CE-9345956956CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.41.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A56532E-9E1A-48B9-BF63-BE780E57C346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.42.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179270EF-94DD-49B8-A51C-DAA743A9F34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.43.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F76112-FB22-4747-8BA1-A3DA5697B4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.44.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505309BB-8F47-42A0-A54F-4A8DD5B76332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3021150D-E502-499F-BD1A-8C257FE05CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.46.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE940DE8-E301-4FEC-9EF3-49DAA2D74B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8EF57B4-D092-421D-825F-BA3E61E2982F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C58C87-0646-4B38-8D9D-B3A6223E7D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6137D912-BE3A-4859-8839-78E7531552E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC76599A-3943-4247-8675-44554C7DE07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.51.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF10096F-19F7-47EA-9C04-DC40F41E6562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BD66B6-F645-4830-9F37-104A75FCB838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00C454-6F80-4468-8FD3-DCBDFDF1438B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740347EF-5003-40B2-863C-D86A246DD21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.55.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD5175D-E501-4679-8B24-5FBABD6FF1CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cgit.freedesktop.org/poppler/poppler/commit/?id=5c9b08a875b07853be6c44e43ff5f7f059df666a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://cgit.freedesktop.org/poppler/poppler/commit/?id=5c9b08a875b07853be6c44e43ff5f7f059df666a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-31T04:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file."
      }, {
        "lang" : "es",
        "value" : "PivotX versión 2.3.11, permite a los usuarios autenticados remotos ejecutar código PHP arbitrario por medio de vectores que implican una carga de un archivo .htaccess."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotx:pivotx:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3B3253-5D04-41EF-9ABF-2CE3551AF86D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/pivot-weblog/code/4489/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://sourceforge.net/p/pivot-weblog/code/4489/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-31T04:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error."
      }, {
        "lang" : "es",
        "value" : "La función readString en los archivos util/read.c and util/old/read.c, en libming versión 0.4.8, permite a los atacantes remotos causar una denegación de servicio por medio de un archivo grande que es manejado inapropiadamente por listswf, listaction, etc. Esto ocurre debido a un desbordamiento de enteros que conlleva a un error de asignación de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:libming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92BC79-2548-4C6F-9BDD-26C12BDF68AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/May/106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98793",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/May/106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-31T04:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function."
      }, {
        "lang" : "es",
        "value" : "Libyara/re.c en el módulo regexp de YARA 3.5.0 permitiría a un atacante remoto provocar una denegación de servicio (consumo de pila) a través de una regla hecha a mano que se maneja incorrectamente en la función _yr_re_emit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VirusTotal/yara/commit/925bcf3c3b0a28b5b78e25d9efda5c0bf27ae699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/674",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/925bcf3c3b0a28b5b78e25d9efda5c0bf27ae699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-31T04:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characters, as demonstrated by an attack on tiki-batch_send_newsletter.php."
      }, {
        "lang" : "es",
        "value" : "lib/core /TikiFilter/PreventXss.php en Tiki Wiki CMS Groupware 16.2 permitiría a un atacante remoto pasar por alto el filtro XSS a través de caracteres de relleno cero, como lo demuestra un ataque a tiki-batch_send_newsletter.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FAA7AE-B0A7-4D61-AF86-0A09A3A20152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tikiorg/tiki/commit/6c016e8f066d2f404b18eaa1af7fa0c7a9651ccd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cdxy.me/?p=763",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tikiorg/tiki/commit/6c016e8f066d2f404b18eaa1af7fa0c7a9651ccd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cdxy.me/?p=763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-31T04:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an \"<svg/onload=\" substring instead of an \"<svg onload=\" substring."
      }, {
        "lang" : "es",
        "value" : "Inc/SP/Html/Html.class.php en sysPass 2.1.9 permitiría que un atacante remoto pasara por alto el filtro XSS, como lo demuestra el uso de una subcadena \""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syspass:syspass:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76F62F9-1D96-4300-B2DF-CE9949390ED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cdxy.me/?p=763",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cdxy.me/?p=763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-05-31T04:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad SSRF en remotedownload.php en Allen Disk 1.6 permitiría a un usuario remoto autenticado realizar exploraciones de puertos y acceder a servidores de intranet a través de un parámetro de archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58574971-6FAE-43CC-871E-13F36772BD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3131212/allendisk/issues/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3131212/allendisk/issues/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4897",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-05-31T14:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link."
      }, {
        "lang" : "es",
        "value" : "Horizon DaaS anterior a versión 7.0.0 de VMware, contiene una vulnerabilidad que se presenta debido a la comprobación insuficiente de datos. Un atacante puede explotar este problema mediante el engaño a los usuarios del cliente DaaS para que se conecten a un servidor malicioso y compartan todas sus unidades y dispositivos. La explotación con éxito de esta vulnerabilidad requiere de una víctima para descargar un archivo RDP especialmente diseñado por medio del cliente DaaS para hacer clic en un enlace malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_daas:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.6",
            "matchCriteriaId" : "F5AEB561-94D1-4AB9-862F-D3029DADB45B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96559",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037951",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0002.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5688",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-05-31T14:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de escalada de privilegios en Solid State Drive Toolbox anterior a versión 3.4.5 de Intel, que permite a un atacante administrativo local cargar y ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:solid_state_drive_toolbox:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E11A45F-E507-482E-BEC4-937EFF3E6E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98771",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00074&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00074&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T05:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter."
      }, {
        "lang" : "es",
        "value" : "El componente Agenda de Telaxus EPESI 1.8.2 y versiones anteriores tiene una vulnerabilidad XSS (Cross-site Scripting) en modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un parámetro de descripción de reunión especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "9A6D23F8-17A2-4626-B367-D69DFB6D2433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/commit/dda3e5f3843e80fe9ed36115f4fe72c06a3a41bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/193",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/commit/dda3e5f3843e80fe9ed36115f4fe72c06a3a41bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T05:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect \"pair?\" check in the Scheme \"length\" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by passing an improper list to an application that calls \"length\" on it."
      }, {
        "lang" : "es",
        "value" : "Un chequeo de \"pair\" incorrecto en el procedimiento \"lenght\" de Scheme resulta en una desreferencia de puntero insegura en todas las versiones de CHICKEN Scheme anteriores a 4.13, lo que permite a un atacante causar una denegación de servicio pasando una lista incorrecta a una aplicación que llama a \"length\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:call-cc:chicken:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.0",
            "matchCriteriaId" : "A2B09DD8-3AF5-4A49-89E5-8513C3061955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.nongnu.org/archive/html/chicken-announce/2017-05/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.nongnu.org/archive/html/chicken-hackers/2017-05/msg00099.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.nongnu.org/archive/html/chicken-announce/2017-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.nongnu.org/archive/html/chicken-hackers/2017-05/msg00099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T05:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Editor.MD versión 1.6 para WordPress, tiene una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en el contenido de un mensaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_editor.md_project:wp_editor.md:1.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E1B2269E-1C7C-4362-8D2F-71D29B68B545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lncken.cn/?p=258",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lncken.cn/?p=258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T05:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post."
      }, {
        "lang" : "es",
        "value" : "El plugin Markdown on Save Improved versión 2.5 para WordPress, presenta una vulnerabilidad de tipo XSS almacenada en el contenido de una publicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markdown_on_save_improved_project:markdown_on_save_improved:2.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FE3E4AC6-74CC-44C1-B6BC-AF93B117C09E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lncken.cn/?p=279",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lncken.cn/?p=279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3127",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-06-01T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting en FortiGate versiones 5.2.0 a 5.2.10 de Fortinet, permite al atacante ejecutar código o comandos no autorizados por medio del parámetro srcintf durante la Creación de Políticas de Firewall."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E627C59-7C16-44F0-800D-A2E8A766B26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233236FA-BB13-4261-BE2E-3E617406DC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27844CC9-498B-4A65-91AC-AC130222EE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B4C672-7ED5-4113-87AE-5774D1263C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CB7A90-91BC-49AF-9B5C-EBD212484C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D3221-177B-43CE-BD7D-CB14A110268E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C186D6-6AC5-49EB-A701-C91358B4A25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC9F6C4-F887-4F25-87BD-383F6CF39806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8558962-7A19-4F4A-BED0-9CB5D4CFC422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC63D521-EC88-4B13-BC73-3284F3FCF3A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98048",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038367",
        "source" : "psirt@fortinet.com"
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-017",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T16:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en las funciones rmtree y remove_tree en el módulo File-Path anterior a 2.13 para Perl permite que los atacantes establezcan el modo en archivos arbitrarios, mediante vectores que implican una lógica de flexibilidad de permisos de directorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:file\\:\\:path_project:file\\:\\:path:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "2.13",
            "matchCriteriaId" : "1491E3E4-271C-48B4-8854-687EF27C78A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3873",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99180",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038610",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://rt.cpan.org/Ticket/Display.html?id=121951",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3625-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3625-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://rt.cpan.org/Ticket/Display.html?id=121951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3625-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3625-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T16:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en Flip PDF de FlipBuilder, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro currentHTMLURL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flipbuilder:flip_pdf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF8F9D6-EE10-4C83-8786-DFE5546903E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bits3c.blogspot.dk/2017/05/cve-2017-7384-reflected-xss-in-flippdf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bits3c.blogspot.dk/2017/05/cve-2017-7384-reflected-xss-in-flippdf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T16:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Atlassian Eucalyptus anterior a versión 4.4.1, cuando está en modo EDGE, permite a los usuarios autenticados remotos con ciertos privilegios causar una denegación de servicio (interrupción del servicio E2) por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eucalyptus:eucalyptus:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43CF85C-9F9A-402A-ACF7-3C52A0618F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eucalyptus:eucalyptus:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BD474-CF61-46A0-859C-283770AD349B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eucalyptus:eucalyptus:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93D699A-2605-45C6-8842-CAFC15620059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eucalyptus:eucalyptus:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46784A22-23A2-4786-9D46-02C3A0F90CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eucalyptus:eucalyptus:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C06E2B9-2120-46A5-9EC1-C554B4E959B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eucalyptus:eucalyptus:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0416B5D-60B3-4DA8-BD5E-860B57B362A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://eucalyptus.atlassian.net/wiki/display/advisories/ESA-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://eucalyptus.atlassian.net/wiki/display/advisories/ESA-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T16:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character."
      }, {
        "lang" : "es",
        "value" : "git-shell en git en versiones anteriores a la 2.4.12, versiones 2.5.x anteriores a la 2.5.6, versiones 2.6.x anteriores a la 2.6.7, versiones 2.7.x anteriores a la 2.7.5, versiones 2.8.x anteriores a la 2.8.5, versiones 2.9.x anteriores a la 2.9.4, versiones 2.10.x anteriores a la 2.10.3, versiones 2.11.x anteriores a la 2.11.2 y versiones 2.12.x anteriores a la 2.12.3 podría permitir que usuarios remotos autenticados obtengan privilegios mediante un nombre de repositorio que comienza con un carácter - (guion)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git-shell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F9065E-E69B-4F90-BE48-6FD2CCF37B97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-05/msg00090.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://public-inbox.org/git/xmqq8tm5ziat.fsf%40gitster.mtv.corp.google.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3848",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98409",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038479",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3287-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://insinuator.net/2017/05/git-shell-bypass-by-abusing-less-cve-2017-8386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.googlesource.com/pub/scm/git/git/+/3ec804490a265f4c418a321428c12f3f18b7eff5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ISHYFLM2ACYHHY3JHCLF75X7UF4ZMDM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPYRN7APMHY4ZFDPAKD22J5R4QJFY2JP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDS3LSJJ3YGGQYIVPKQDVOCXWDSF6JGF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-05/msg00090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://public-inbox.org/git/xmqq8tm5ziat.fsf%40gitster.mtv.corp.google.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3287-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://insinuator.net/2017/05/git-shell-bypass-by-abusing-less-cve-2017-8386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.googlesource.com/pub/scm/git/git/+/3ec804490a265f4c418a321428c12f3f18b7eff5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ISHYFLM2ACYHHY3JHCLF75X7UF4ZMDM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPYRN7APMHY4ZFDPAKD22J5R4QJFY2JP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDS3LSJJ3YGGQYIVPKQDVOCXWDSF6JGF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-01T16:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory consumption) via a large number of \"VIRTIO_GPU_CMD_SET_SCANOUT:\" commands."
      }, {
        "lang" : "es",
        "value" : "Filtrado de memoria en la función virtio_gpu_set_scanout en hw/display/virtio-gpu.c en QEMU (también conocido como Quick Emulator) permite que usuarios invitados locales del sistema operativo provoquen una denegación de servicio (consumo de memoria) mediante un gran número de comandos \"VIRTIO_GPU_CMD_SET_SCANOUT:\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=dd248ed7e204ee8a1873914e02b8b526e8f1b80d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/19/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98632",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1452597",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=dd248ed7e204ee8a1873914e02b8b526e8f1b80d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1452597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector MSNIP  hace un uso inapropiado de un puntero NULL. Esto fue dirigido en el archivo epan/dissectors/packet-msnip.c validando una dirección IPv4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98797",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1678",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13725",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=27556320b41904716b9c9f73ef8f4fe705d1e669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-30.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=27556320b41904716b9c9f73ef8f4fe705d1e669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector Bluetooth L2CAP podría dividirse por cero. Esto se abordó en epan/dissectors/packet-btl2cap.c mediante la comprobación de un valor de intervalo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98796",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1539",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13701",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6308ae03d82a29a2e3d75e1c325c8a9f6c44dcdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-29.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6308ae03d82a29a2e3d75e1c325c8a9f6c44dcdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector DNS podría entrar en un bucle infinito. Esto se ha dirigido a epan/dissectors/packet-dns.c al tratar de detectar autoreferencia de punteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1206",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13633",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e280c9b637327a65d132bfe72d917b87e6844eb5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-26.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e280c9b637327a65d132bfe72d917b87e6844eb5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector SoulSeek podría entrar en un bucle infinito. Esto se ha dirigido a epan/dissectors/packet-slsk.c haciendo que los límites del bucle sean más explícitos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98799",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1200",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13631",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c0bd15bd46a95c5b7dce02fe23c594429bb6c7e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-25.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6c0bd15bd46a95c5b7dce02fe23c594429bb6c7e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.6, el disector ROS podría bloquearse con una desreferencia de puntero NULL. Esto fue dirigido en el archivo epan/dissectors/asn1/ros/packet-ros-template.c mediante la validación de un OID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98800",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1216",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13637",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=278e52f26e7e1a23f8d2e8ed98693328c992bdce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42124/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-31.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=278e52f26e7e1a23f8d2e8ed98693328c992bdce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42124/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Wireshark versión 2.2.0 hasta 2.2.6, el disector DOF podría leer más allá del final de un búfer. Esto se solucionó en EPAN/dissectors/Packet-DOF.c  mediante la comprobación un valor de tamaño"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98801",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1151",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13608",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7fe55f96672b7bf2b4ceb9ae039a0f43eddd3151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-23.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7fe55f96672b7bf2b4ceb9ae039a0f43eddd3151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a length value."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector DICOM tiene un bucle infinito. Esto se abordó en epan/dissectors/packet-dcm.c mediante la comprobación de un valor de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98803",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1329",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13685",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb1b6494c44c9e939d9e2554de6b812de395e3f9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cb1b6494c44c9e939d9e2554de6b812de395e3f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Wireshark versión 2.2.0 hasta 2.2.6 y 2.0.0 hasta 2.0.12, el disector openSAFETY podría chocar o agotar la memoria del sistema. Esto se solucionó en EPAN/dissectors/Packet-opensafety.c mediante una comprobación de longitud negativa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98806",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1212",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13649",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dbc7cb0bbdd501fa96e0cb98668f6d6bf17ac4e6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dbc7cb0bbdd501fa96e0cb98668f6d6bf17ac4e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector DHCP pudo leer más allá del final de un búfer. Esto se solucionó en EPAN/dissectors/Packet-BOOTP.c mediante extracción del identificador de clase de proveedor con más detenimiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98808",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1153",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1183",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13609",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13628",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a6e033c14da13bd5f72dfe07a347586517639d12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-24.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a6e033c14da13bd5f72dfe07a347586517639d12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Wireshark versión 2.2.0 hasta 2.2.6 y versión 2.0.0 hasta 2.0.12, el disector Bazaar podría entrar en un bucle infinito. Esto se solucionó en EPAN/dissectors/Packet-BZR.c mediante el aseguramiento de que no ocurra el análisis hacia atrás."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13599",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8c5e0cee278ff0678b0ebf4b9c2a614974b4029a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-22.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8c5e0cee278ff0678b0ebf4b9c2a614974b4029a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Wireshark versión 2.2.0 hasta la versión 2.2.6, el disector IPv6 puede fallar. Esto se solucionó en EPAN/dissectors/Packet-IPv6.c comprobando una dirección IPv6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98805",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1303",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13675",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b2d475c2ad550c1a0f536d5eb30f2a7404c4f0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42123/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-33.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b2d475c2ad550c1a0f536d5eb30f2a7404c4f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42123/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 address."
      }, {
        "lang" : "es",
        "value" : "En Wireshark de 2.2.0 a 2.2.6 y 2.0.0 y 2.0.0 a 2.0.12, el disector RGMP podría caer. Esto fue dirigido a epan/dissectors/packet-rgmp.c mediante la validación de una dirección IPv4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "B8897112-A1DB-4EB1-B94D-F3C8D8FE70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "02A5743A-630C-4DCD-954D-5F3FA1595DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98802",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1243",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13646",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3a77395e651acd81eb41ffd8fbdbf711e1133d76",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-32.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3a77395e651acd81eb41ffd8fbdbf711e1133d76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop)."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de agotamiento de memoria en Asterisk Open Source, en versiones 13.x anteriores a la 13.15.1 y versiones 14.x anteriores a la 14.4.1, y en Certified Asterisk, en versiones 13.13 anteriores a la 13.13-cert4. Esto podría llevarse a cabo mediante el envío de paquetes SCCP especialmente manipulados que provocarían un bucle infinito y darían lugar a un agotamiento de memoria (mediante el registro de mensajes en ese bucle)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0789649-4E5D-4DC1-9B01-B294B6151085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46940409-0771-4ED6-B352-1A43C6208627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0EB47-07D8-4B65-BD62-EA2B68D64AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B90E3BEB-E683-4F71-A6C8-A1BD53CD6D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E29780-8E4A-4CEF-9240-A9AED9BB06AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "715E2B71-425F-42F7-B713-8CC644B1C58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "97507DA4-6B96-4470-9FFC-DFABED357A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC1991F-9E49-4DAB-B60A-3B172D0F86A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7535B8C1-419E-4E81-9955-7B7FE97FBAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B22660-489A-4A62-BA61-7E3B153DE7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47134DA6-5D36-43CF-88A4-9142C9497025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "803258B5-6EF8-4541-B482-00B34668A46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E6F48-96AD-44A0-8E4F-C65E9F82F089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "70485694-089D-4DF5-AC81-5CABBA5A332E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD3F8C-ACA3-460F-A024-A430D9A9F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3FBACC-C61F-46A6-8C49-8268F6E3F3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57094FDA-FDEE-4C5F-BDAB-B4C14E212E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC918B9-BCE7-4310-B385-77B3D9F398FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42641E1-527B-4A2F-B36A-151C1B769AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1B7AA0-A5BC-47B7-BAB7-94C18A975938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE04147-C3D3-4C80-AD27-1A24498DBB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "58CE7E95-CC54-4509-8B3F-22498E0FB6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EEE9C24-FDC9-4675-A912-24100B48C77C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5F5C49-B1F3-43EF-A46B-0B1D6921FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861956E-7C8F-4A6A-9DC3-E23B12FDFDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6097525-B5D5-4ACE-B26E-E976E30D6E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FC6424-B774-4E3F-B835-72296C37C4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC6D5F3-B6C5-4B35-9EDE-FCBC808D4C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "589E43EA-6873-48CE-AB83-D3A42E6D8B68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C489FB-3A83-42D7-94A9-3C7D5B8F980C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5636A9-1E9F-4DA7-8459-6B9257ADE0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDBE806-CDD5-4981-B575-9EB58816CD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A9676683-14B7-4489-9D18-C37365C323D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "660E2F8C-A674-44EE-99AC-80E57A0681C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6949CB9E-8282-4E9D-9DD0-889E3181C845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "B54BB82E-92EF-4D75-8E62-10CDC7C526DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "E759A991-D72D-4FCA-B4F5-3B51D63A31D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E1A5B3-8385-4376-A145-1E1CC0E80818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:certified_asterisk:13.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4E78FF-000E-4DA8-8539-2C5507C09BB8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF4B65D-016F-4306-B1AC-AA83B6049D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2B545C-0A70-405C-8610-24ADE6740549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2609D7-C5E8-42C7-A456-F01051A99A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9707B21-1F6F-4817-8ABC-8FA88670B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A7E5B97-8A5F-4059-8363-F42A2BF5A0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3283C6-3223-41B0-B823-1BCD23AA05FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4011C14B-5338-4E13-A2F3-0E585425D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD51694-6DCD-4B5B-B062-DFA3BAA98DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A774-C370-4787-B84C-6F4AC55A3487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E216708E-5BEE-4E03-93EA-6B013B439E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:14.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "61028A13-37B5-4BC9-8EFB-D2465B9DECCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98573",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/863906",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/863906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."
      }, {
        "lang" : "es",
        "value" : "El analizador multi-part body en PJSIP, tal como es usado en Asterisk Open Source versiones 13.x y anteriores a 13.15.1 y versiones 14.x y anteriores a 14.4.1, Certified Asterisk versión 13.13 y anteriores a 13.13-cert4, y otros productos, permite a los atacantes remotos causar una denegación de servicio (lectura fuera de límites y bloqueo de aplicación) por medio de un paquete especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A2C5FB-2E2E-4F4E-A797-AF39D41C0D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7644395B-43C7-48BC-AC6B-B3E935DE88BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7019C844-90CE-4D32-8837-94C433C382C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "362383FF-1E38-4F3F-8C4E-9294592A39EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35DC8E90-E91A-4BE0-ACAF-D2F0004EAA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DB86C4-AE52-4553-9428-8A0FD48C4F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E85E772D-00CB-4A28-806F-45BB645EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFB4750-F605-4A78-B3DC-B54B956C049E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEC31AC-E133-4B4E-9903-8CEE3F176846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36120DF2-822D-4AD2-8A91-EA0846CB49F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4818640-8F0C-4428-86A6-EAB89AF5B43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D0E3A-C984-4B4B-81E8-C8AECF1EE557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B44BB12-A93B-47D4-9E93-55C077F53A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1500E120-26A4-4EFE-8813-5AF602F6E2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9887311B-D13C-4309-AB66-B30F43CAEE3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F51727C0-4620-4F05-9437-580FD0D5E7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF28CB9-7ED7-4EA7-AE86-937B81706938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5375418-CC58-4483-ADB9-CC020BBE3B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D4E5CB-A3EB-412C-A33E-A487E081D4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "065DB5F9-B797-41FD-AE20-50EC099FD7AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4113D94A-7C17-4201-BDF3-FCBE7AA7D348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C79E8ADE-EE51-442F-8104-4212C35EF626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C8B668-AA45-4BB4-AE31-FED335F2434D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDF369A-FE19-4C1D-BB3A-883A030F0254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01FE18-F706-405A-A5B8-D873D41203F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA7B709-BC5F-46D1-B632-8C2C6A4F1CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7789B9-B7C1-4B16-835B-BB4E965477CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7046623-9371-41E4-B31F-8642CF9EE196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7C29B7-0EF4-410B-BCAE-6A8631566026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7DC262-6C90-4984-A129-AD2762273EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F24B121-92AA-427F-BB69-FC76F1F50670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "216FA98C-4B79-4215-A941-C90776871C08"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7233B5A2-E1CE-4B7E-99FA-26369B892B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "F051FE7D-0695-4552-BC1C-836076825606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D3E102-EFAD-48FF-B8BB-AAA9E1669CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "100A6AFB-628C-4469-B8EB-6E4821105DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D078BC05-F6E0-4183-9A27-8F53ECAAE7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6A16BD47-0634-40A5-8422-0A2ECAF2C55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F379170-DC3B-41B8-B950-7E0E1E6002AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "338BFA7B-AA84-483F-B298-BC932728E0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C608FBEF-143A-4EC3-903F-8832E0A7145E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D169B3-A7C7-40F0-B918-44A11682FB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98578",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/863902",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-26939",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/863902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-26939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php."
      }, {
        "lang" : "es",
        "value" : "WebsiteBanker tiene una vulnerabilidad de inyección SQL en /account/details.php en su versión 2.10.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websitebaker:websitebaker:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F1BCD-5F74-46FD-98BD-4F280CEF654D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jgj212.blogspot.tw/2017/05/a-sql-injection-vulnerability-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jgj212.blogspot.tw/2017/05/a-sql-injection-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php."
      }, {
        "lang" : "es",
        "value" : "WebsiteBaker tiene Cross-Site Scripting (XXS) en /account/details.php en su versión 2.10.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websitebaker:websitebaker:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F1BCD-5F74-46FD-98BD-4F280CEF654D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jgj212.blogspot.tw/2017/05/a-stored-xss-vulnerability-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jgj212.blogspot.tw/2017/05/a-stored-xss-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request."
      }, {
        "lang" : "es",
        "value" : "La serialización Java no segura en la consola IAM anterior a versión 1.7.5 de Soffid, permite a los atacantes remotos lograr la ejecución de código remota arbitraria por medio de una petición de autenticación especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soffid:iam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.4",
            "matchCriteriaId" : "E845E8A5-EEB5-41A3-93E9-021666F33BCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.soffid.com/security-advisory1-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.soffid.com/security-advisory1-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and execute any code."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de subida de archivos sin restricción en BigTree CMS hasta la versión 4.2.18. Si un atacante sube un archivo \"xxx.pht\" o \"xxx.phtml\", podría omitir una comprobación de seguridad y ejecutar cualquier código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/b72293946951cc650eaf51f5d2f62ceac6335e12",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/280",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/b72293946951cc650eaf51f5d2f62ceac6335e12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked."
      }, {
        "lang" : "es",
        "value" : "Existe CSRF en BigTree CMS hasta la versión 4.2.18 con el parámetro force en /admin/pages/revisions.php. Por ejemplo, /admin/pages/revisions/1/?force=false. Una página con id=1 se puede desbloquear."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/c17d09b05d9c20c214ee2f4fbb52f7307a7b4b6f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/281",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/c17d09b05d9c20c214ee2f4fbb52f7307a7b4b6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T05:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tab_name parameter."
      }, {
        "lang" : "es",
        "value" : "EPESI versión 1.8.2 y anteriores de Telaxus, presenta una vulnerabilidad de tipo cross-site-scripting (XSS) almacenada en el archivo modules/Base/Dashboard/Dashboard_0.php, que permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de un parámetro tab_name especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "9A6D23F8-17A2-4626-B367-D69DFB6D2433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/commit/36be628c2597fd0209224a09b17858294f49c585",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/196",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/commit/36be628c2597fd0209224a09b17858294f49c585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6039",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-02T14:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-Coded Password issue was discovered in Phoenix Broadband PowerAgent SC3 BMS, all versions prior to v6.87. Use of a hard-coded password may allow unauthorized access to the device."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Uso de Contraseña codificada en Phoenix Broadband PowerAgent SC3 BMS, todas las versiones anteriores a 6.87. El uso de una contraseña codificada puede permitir el acceso no autorizado al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixbroadband:poweragent_sc3_bms_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.86",
            "matchCriteriaId" : "5F033C67-5F36-4A55-B9EE-3BAA914C612E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixbroadband:poweragent_sc3_bms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F80E58-EDC7-4A04-AA71-0AABAC41DBAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98781",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-152-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-152-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T14:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter."
      }, {
        "lang" : "es",
        "value" : "PJSIP, tal como es usado en Asterisk Open Source versiones 13.x y anteriores a 13.15.1 y versiones 14.x y anteriores a 14.4.1, Certified Asterisk versión 13.13 y anteriores a 13.13-cert4, y otros productos, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) por medio de un paquete SIP con un encabezado CSeq especialmente diseñado junto con un encabezado Via que carece de un parámetro branch."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A2C5FB-2E2E-4F4E-A797-AF39D41C0D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7644395B-43C7-48BC-AC6B-B3E935DE88BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7019C844-90CE-4D32-8837-94C433C382C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "362383FF-1E38-4F3F-8C4E-9294592A39EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35DC8E90-E91A-4BE0-ACAF-D2F0004EAA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DB86C4-AE52-4553-9428-8A0FD48C4F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E85E772D-00CB-4A28-806F-45BB645EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFB4750-F605-4A78-B3DC-B54B956C049E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEC31AC-E133-4B4E-9903-8CEE3F176846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36120DF2-822D-4AD2-8A91-EA0846CB49F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4818640-8F0C-4428-86A6-EAB89AF5B43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D0E3A-C984-4B4B-81E8-C8AECF1EE557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B44BB12-A93B-47D4-9E93-55C077F53A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1500E120-26A4-4EFE-8813-5AF602F6E2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9887311B-D13C-4309-AB66-B30F43CAEE3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F51727C0-4620-4F05-9437-580FD0D5E7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF28CB9-7ED7-4EA7-AE86-937B81706938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5375418-CC58-4483-ADB9-CC020BBE3B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D4E5CB-A3EB-412C-A33E-A487E081D4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "065DB5F9-B797-41FD-AE20-50EC099FD7AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4113D94A-7C17-4201-BDF3-FCBE7AA7D348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C79E8ADE-EE51-442F-8104-4212C35EF626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C8B668-AA45-4BB4-AE31-FED335F2434D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDF369A-FE19-4C1D-BB3A-883A030F0254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01FE18-F706-405A-A5B8-D873D41203F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA7B709-BC5F-46D1-B632-8C2C6A4F1CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7789B9-B7C1-4B16-835B-BB4E965477CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7046623-9371-41E4-B31F-8642CF9EE196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7C29B7-0EF4-410B-BCAE-6A8631566026"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08B0F49-32DD-473D-A5A0-92B87918899D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "980C5A32-3C0F-42F3-8BEC-8202186EBFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E68E591-F39B-4FAF-A4F6-B91F598AB8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "237C7B68-90FF-4F5B-81CC-E3257B988FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D2888E-EEE3-418E-8A7C-A3B51B9B6FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7DC262-6C90-4984-A129-AD2762273EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F24B121-92AA-427F-BB69-FC76F1F50670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "216FA98C-4B79-4215-A941-C90776871C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE34DC7E-92B5-4E5A-9773-80A6D4A7F72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "455A6BED-8493-4CE8-BBB0-112644786AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:open_source:14.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "58846F24-1FE8-495D-9297-3331AE73002D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7233B5A2-E1CE-4B7E-99FA-26369B892B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "F051FE7D-0695-4552-BC1C-836076825606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D3E102-EFAD-48FF-B8BB-AAA9E1669CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "100A6AFB-628C-4469-B8EB-6E4821105DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D078BC05-F6E0-4183-9A27-8F53ECAAE7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6A16BD47-0634-40A5-8422-0A2ECAF2C55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F379170-DC3B-41B8-B950-7E0E1E6002AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "338BFA7B-AA84-483F-B298-BC932728E0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C608FBEF-143A-4EC3-903F-8832E0A7145E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D169B3-A7C7-40F0-B918-44A11682FB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98572",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/863901",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/863901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T15:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have other tasks (such as data backups) to complete before a user is deleted."
      }, {
        "lang" : "es",
        "value" : "BigTree CMS hasta versión 4.2.18, impide a un usuario eliminar su propia cuenta. Esto podría tener relevancia de seguridad porque se suponía que la eliminación era una acción solo del administrador y el administrador puede tener otras tareas (como copias de seguridad de datos) a completar antes de que se elimine un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/f7899701d7be91b7dc546b65e44a27b668eb3b76",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/commit/f7899701d7be91b7dc546b65e44a27b668eb3b76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\\admin\\modules\\dashboard\\vitals-statistics\\404\\clear.php and the from or to parameter to core\\admin\\modules\\dashboard\\vitals-statistics\\404\\create-301.php."
      }, {
        "lang" : "es",
        "value" : "Se presentan múltiples problemas de CSRF en BigTree CMS hasta versión 4.2.18, - el parámetro clear en el archivo core\\admin\\modules\\dashboard\\vitals-statistics\\404\\clear.php y el parámetro from o to en el archivo core\\admin\\modules\\dashboard\\vitals-statistics\\404\\create-301.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T15:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "OpenEMR versión 5.0.0 y anteriores, permite a los usuarios poco privilegiados cargar archivos de tipos peligrosos, lo que puede resultar en la ejecución de código arbitraria en el contexto de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.0",
            "matchCriteriaId" : "C711232D-CB78-436D-ADFE-37CA3D80E83F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-9380-Exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-002",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-9380-Exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0896",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-06-02T17:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this."
      }, {
        "lang" : "es",
        "value" : "Zulip Server versión 1.5.1 y posteriores, sufre de un error en la implementación de la configuración de invite_by_admins_only en el servidor de aplicaciones de chat del grupo Zulip que permitió a un usuario autenticado invitar a otros usuarios a unirse a una organización Zulip, incluso si la organización fue configurada para evitar esto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ECA4CD-B128-45EA-8A19-5F137BD08690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0609969D-7C68-4428-A2F3-EA532F6C4045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6141BC81-A452-44F0-9A61-B82772D406FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3662F33-CC19-46AE-902F-2A685030FDE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A20311C-FC51-4ED5-BCBC-955543FD1AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CC0654-4F8C-4D1B-B06F-035368E7B120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13048A35-82DA-45AF-BB3C-AEBD1A80734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE689D6F-F774-41AF-B97A-23973E22C9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C300421-CBDE-4DC2-A41E-38AFDD498725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DE09CC-3869-4686-A36D-F42788FC7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6AAE8C-F5E6-4A9C-9AF1-0D03EB9A7E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612DA887-F6BC-45F8-B187-AE23CF2F1027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21AE1B1-5A7E-447A-9301-1AD965F04833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034098C9-DCC3-46CC-9534-811F28F4493D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA56546E-7E0A-49EB-967A-7219C907BE50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF03C39-6873-4044-96B8-760156D7B1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0167E36-42E4-4DA5-96FB-CFF0EC8FDA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914FE1E-E734-4B4A-8266-25FB5C32800D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25BEDD5-B562-4A2E-8284-07A47CB1F6D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zulip/zulip/commit/1f48fa27672170bba3b9a97384905bb04c18761b",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21msg/zulip-announce/sUYeJv-fFmg/2TU2TLmNAwAJ",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://hackerone.com/reports/224210",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/1f48fa27672170bba3b9a97384905bb04c18761b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21msg/zulip-announce/sUYeJv-fFmg/2TU2TLmNAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hackerone.com/reports/224210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en LibTIFF 4.0.7 en la función TIFFReadDirEntryLong8Array en tif_dirread.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2689",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.7 se ha encontrado una vulnerabilidad de filtrado de memoria en la función OJPEGReadHeaderInfoSecTablesQTable en tif_ojpeg.c que permite a los atacantes provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2688",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadICONImage en icon.c:452 permite a los atacantes provocar un ataque de denegación de servicio (filtrado de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/457",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.54.0 se ha encontrado una vulnerabilidad de filtrado de memoria en la función gmalloc en gmem.cc que permite a los atacantes provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740347EF-5003-40B2-863C-D86A246DD21B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100775",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadPALMImage en palm.c permite a los atacantes provocar un ataque de denegación de servicio (filtrado de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/459",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.54.0 se ha encontrado una vulnerabilidad de filtrado de memoria en la función Object::initArray en Object.cc que permite a los atacantes provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740347EF-5003-40B2-863C-D86A246DD21B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100776",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-02T19:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.5-5, la función ReadMPCImage en mpc.c permite a los atacantes provocar un ataque de denegación de servicio (filtrado de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/458",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3740",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-04T21:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the system's embedded controller, which could cause a denial of service attack on the system or the ability to alter hardware functionality."
      }, {
        "lang" : "es",
        "value" : "En Lenovo Active Protection System anterior a versión 1.82.0.14, un atacante con privilegios locales podría enviar comandos al controlador integrado del sistema, lo que podría causar un ataque de denegación de servicio sobre el sistema o la capacidad de alterar la funcionalidad del hardware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.00b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F61BE078-322A-45B1-BC57-0A667A86A353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.01b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0188B18D-0F09-4CC6-A528-ADE432233C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D24478B-239A-4646-A664-5B1A4EE6D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF77DA91-EF59-46ED-9EB6-E405ED53B983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E35EE5-BDF4-4444-9427-743C1674E9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A2DFDA-5569-4D5D-8853-B067AE56F1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.30b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C6B9BE-82AB-4A31-BA1C-EBDF1C16A370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3420702-4410-4421-BB1E-C8CABFDA9074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4D7922-1832-405C-9263-B3AA06C7FC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.33b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7022DD3E-AEBC-4F72-8BA8-F9EBE7410BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01AF50B2-3473-43F8-BA67-F97CD19FA9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDB2D82-61E8-4540-849B-B026AE64EB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF622DBD-50C2-46BE-B029-9CE15E3B05F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4345A74B-0946-4F81-9C37-0263B521B50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE678A7B-5BD3-4830-9EE2-28AB71E8A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23B64DA-B893-479A-94B6-39D826E6900B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843DD86D-7030-4E19-AD84-33A73F6F26D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6FA9AB-0F06-4CA1-BF5A-CD39D0AED14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661251D1-92FF-409F-AA56-949630ADD2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75792F99-A17E-4F1B-B8BE-D8B75C040BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEB1AB1-6780-4043-A7EE-3F6A6D5E1BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5A0580-93F3-4734-8578-BBE2BA5D9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54CAF04-1129-43C0-9048-C34056338CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BB873E-EFC8-4FF6-A0D7-3F6C79F50EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56081A7B-356F-4B53-8527-01C1EDA187D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9B2A27-8CF5-47CF-B720-74634407C3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C411E94-EBD9-4714-9900-CEBA62B6A036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C0B207-A92E-4485-A7D7-9B0C8C975959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9F2770-8A1A-4272-8B80-6543E214C171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A42ED0A-8245-4852-ABE5-A7728CBFEFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DDD0A8-4D27-48FF-BBEF-52AA116763CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7537663-CA21-4D35-A96C-579AE7014727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34141E6D-C36B-45D0-BAEF-BBEA7E3CC93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB4C97C-6B54-4364-A112-3E6A78524D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9CEE3-2F3F-41E1-B97E-A3070DFCD1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.77.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EFE84C-3D95-4CCC-8D86-01C3B46D9A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.78.0.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "741E8301-04BF-4B96-9443-3687BB8A6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.78.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F129F3-C149-4878-905D-E0ECD4FA926E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.78.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F22EDFD-6777-4DF8-BAF5-826C6539DFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.79.0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2B7D48-F446-435B-B5EE-503D96710FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.80.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573F1165-2FB0-4F70-9D06-0ABF9241E5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.80.3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ED63CE-462E-4AF1-BE64-E45BB0091451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.80.8.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72A19B2-AA9E-4CFF-842C-1F1FF7AC09E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.80.11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7079EF9-3DE0-4ECE-8727-73191B8A959C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.81.0.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6687F6-900C-465D-A76E-45205FE32F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.82.0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30033295-5737-4DB2-9E2D-7971D9E51765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.82.0.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B1422B-DFF0-46B4-8CB3-C78E355973F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.82.0.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC391FE6-36C6-4FC0-8FDE-EE7746446AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:active_protection_system:1.82.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79859933-97B2-4169-B389-EF5AAE92741B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-13637",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-13637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3741",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-04T21:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation."
      }, {
        "lang" : "es",
        "value" : "En el controlador de Lenovo Power Management anterior a versión 1.67.12.24, un usuario local puede modificar el firmware del trackpoint y evitar que el trackpoint funcione correctamente. Este problema solo afecta a la 5a generación de ThinkPad X1 Carbon."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:power_management:1.67.12.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3418B80A-8FDA-4442-B8DA-0FE391C9FD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:power_management:1.67.12.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE20CF-C6C5-4602-B352-E08F44D4B19C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3B5592-2BC9-449C-A562-D178572716DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14440",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-04T21:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en tools.file_open en Odoo versiones 8.0, 9.0 y 10.0, permite a los usuarios autenticados remotos leer archivos locales arbitrarios legibles por el servicio de Odoo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D140CBF-E659-4E87-8FEE-F19CD2E6B947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59408702-9C9E-4F25-85FB-D4F9AD4949BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75A14CA-5B6C-4324-B5E5-BED6890D1426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/odoo/odoo/issues/17394",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/odoo/odoo/issues/17394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-04T21:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the \"Broadpwn\" issue."
      }, {
        "lang" : "es",
        "value" : "Los chips Wi-Fi Broadcom BCM43xx permiten a los atacantes remotos ejecutar código arbitrario a través de vectores no especificados, también conocidos como \"Broadpwn\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:bcm43xx_wi-fi_chipset_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF933A06-D94C-45B0-A289-B23A46A9CB8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4354_wi-fi_chipset:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3057F71-5EA1-443D-95DC-48DF1A4BB556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4358_wi-fi_chipset:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114DEF45-DC3E-4DCE-95D4-140FBCA5BED3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4359_wi-fi_chipset:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA21F2A-79FE-414B-9FCB-B9C911CA864F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2019/May/24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-9417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://seclists.org/bugtraq/2019/May/30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/kb/HT210121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.blackhat.com/us-17/briefings.html#broadpwn-remotely-compromising-android-and-ios-via-a-bug-in-broadcoms-wi-fi-chipsets",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/May/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-9417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://seclists.org/bugtraq/2019/May/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT210121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.blackhat.com/us-17/briefings.html#broadpwn-remotely-compromising-android-and-ios-via-a-bug-in-broadcoms-wi-fi-chipsets",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-04T23:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\\admin\\modules\\developer\\modules\\designer\\form-create.php. The attacker creates a crafted table name at admin/developer/modules/designer/ and the injection is visible at admin/dashboard/vitals-statistics/integrity/check/?external=true."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en BigTree CMS hasta la versión 4.2.18, permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio del archivo core\\admin\\modules\\developer\\modules\\designer\\form-create.php. El atacante crea un nombre de tabla diseñada en admin/developer/modules/designer/ y la inyección es visible en admin/dashboard/vitals-statistics/length/check/?external=true."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/288",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-04T23:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability exists in core\\admin\\ajax\\developer\\extensions\\file-browser.php in BigTree CMS through 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\\ sequences in the directory parameter."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de salto de directorio en el archivo core\\admin\\ajax\\developer\\extensions\\file-browser.php en BigTree CMS hasta la versión 4.2.18 sobre Windows, permitiendo a los atacantes leer archivos arbitrarios por medio de secuencias ..\\ en el parámetro directory"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/289",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7669",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-05T01:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root."
      }, {
        "lang" : "es",
        "value" : "En Hadoop versiones 2.8.0, 3.0.0-alpha1 y 3.0.0-alpha2 de Apache, el LinuxContainerExecutor ejecuta comandos docker como root con una comprobación de entrada insuficiente. Cuando la funcionalidad docker está habilitada, los usuarios autenticados pueden ejecutar comandos como root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E67A08-33CB-49FF-ACD9-96FD47139B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "C33530ED-6093-4B4C-AFDB-4DB5EB5878E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "38BCF20D-169E-4847-8880-A223467B8639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98795",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/hadoop-user/201706.mbox/%3C4A2FDA56-491B-4C2A-915F-C9D4A4BDB92A%40apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/hadoop-user/201706.mbox/%3C4A2FDA56-491B-4C2A-915F-C9D4A4BDB92A%40apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T03:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c."
      }, {
        "lang" : "es",
        "value" : "Google gRPC antes del 05-04-2017, presenta una escritura fuera de límites causada por un desbordamiento de búfer en la región heap de la memoria relacionado con el archivo core/lib/iomgr/error.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "0C6D2BB1-ADAE-411E-B98F-A5A825DA822E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1018",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/10492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/grpc/grpc/pull/10492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T03:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de importación libstaroffice antes del 07-04-2017 de Document Liberation Project, presenta una escritura fuera de límites causada por un desbordamiento de búfer en la región stack de la memoria relacionado con la función DatabaseName::read en la biblioteca lib/StarWriterStruct.cxx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libstaroffice_project:libstaroffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.3",
            "matchCriteriaId" : "06369F32-AE63-44A8-9B79-3950E1F4D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1029",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/fosnola/libstaroffice/commit/2d6253c7a692a3d92785dd990fce7256ea05e794",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/fosnola/libstaroffice/commit/2d6253c7a692a3d92785dd990fce7256ea05e794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T03:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de importación libmwaw antes del 08-04-2017 de Document Liberation Project, presenta una escritura fuera de límites causada por un desbordamiento de búfer en la región heap de la memoria relacionado con la función MsWrd1Parser::readFootnoteCorrespondance en la biblioteca lib/MsWrd1Parser.cxx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmwaw_project:libmwaw:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.11",
            "matchCriteriaId" : "B3D6A7D0-20D1-4A0C-97E7-D3D08D261E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1037",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T11:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en dnstracer hasta la versión 1.9, permite a los atacantes causar una denegación de servicio (bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de una línea de comando con un argumento de nombre largo que se maneja inapropiadamente en una llamada de strcpy para argv[0]. Un ejemplo de modelo de amenaza es una aplicación web que inicia dnstracer con una cadena de nombre no seguro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnstracer_project:dnstracer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "C30AAF2D-80BC-4C74-BA2A-9F1EAB1162E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2017060030",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142799/DNSTracer-1.8.1-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42115/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42424/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017060030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142799/DNSTracer-1.8.1-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42115/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42424/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution."
      }, {
        "lang" : "es",
        "value" : "Un Sudo de Todd Miller’s versión 1.8.20 y anteriores es vulnerable a una validación de entrada (espacios insertados) en la función get_process_ttyname(), resultando en la divulgación de información y la ejecución de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.20",
            "matchCriteriaId" : "A1E57286-1794-4942-9C9F-884B76550AE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3867",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/30/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/12/22/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/12/22/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038582",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3304-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1381",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1382",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VXEXC4NNIG2QOZY6N2YUK246KI3D3UQO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-15",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42183/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sudo.ws/alerts/linux_tty.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/30/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/12/22/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/12/22/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3304-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VXEXC4NNIG2QOZY6N2YUK246KI3D3UQO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42183/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sudo.ws/alerts/linux_tty.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8438",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-05T14:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug prevents transitioning into the specified user specified in a run_as request. If a role has been created using a template that contains the _user properties, the behavior of run_as will be incorrect. Additionally if the run_as user specified does not exist, the transition will not happen."
      }, {
        "lang" : "es",
        "value" : "Las versiones 5.0.0 hasta 5.4.0 de Elastic X-Pack Security contienen un error de escalación de privilegios en la funcionalidad run_as. Este error impide la transición al usuario establecido, especificado en una petición de run_as. Si un rol ha sido creado utilizando una plantilla que contiene las propiedades de _user, el comportamiento de run_as será incorrecto. Además, si el usuario run_as especificado no existe, la transición no se pasará."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15893C0-5FFF-4A60-940F-C69EBF60CE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE40EC5-19CF-4DDC-98CF-DEA035CBBDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ABFD3F-65B8-45CA-8AA0-DD9FC0E668E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C9B833-CFB8-4CC3-A28D-E5320276E5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444B1E15-1BEF-479B-8DEA-1DB5ACE7C051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9945D4-5B3B-41B3-9F94-DB11A8F7E262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C26D394C-DE12-489F-B7E1-DF4C28BB404B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109A47C4-A688-4712-969F-08859B2A7923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761A9E6A-DBC5-48E4-8A79-A90F65C28E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAAB65B-1C7C-4929-ACAA-9993E1626FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9F72ED-C37A-435D-9253-801C97C50753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965A9F08-9C79-436D-98BA-DAC4F5D71EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D9F09D-81BD-4B6E-8016-E6EAF2D68E5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-released",
        "source" : "security@elastic.co",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8439",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-05T14:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users."
      }, {
        "lang" : "es",
        "value" : "Kibana versión 5.4.0 estuvo afectada por un bug de Cross Site Scripting (XSS) en el Compilador Visual de Series Temporales. Este error podría permitir a un atacante obtener información confidencial de los usuarios de Kibana."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E741D583-C568-4A93-A344-A54267B292F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "security@elastic.co",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/kibana-5-4-1-and-5-3-3-released",
        "source" : "security@elastic.co",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/kibana-5-4-1-and-5-3-3-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8440",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-05T14:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Starting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users."
      }, {
        "lang" : "es",
        "value" : "A partir de la versión 5.3.0, Kibana tenía una vulnerabilidad de cross-site scripting (XSS) en la página de Discover que podría permitir a un atacante obtener información confidencial o realizar acciones destructivas en nombre de otros usuarios de Kibana."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ABA67-0305-46E3-AAED-E3FC9F963F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93558649-84F5-448A-B191-1A0052150929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CD0D6D-2AC7-46E2-ABBE-B780F47DD4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E741D583-C568-4A93-A344-A54267B292F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "security@elastic.co",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/kibana-5-4-1-and-5-3-3-released",
        "source" : "security@elastic.co",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/kibana-5-4-1-and-5-3-3-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8441",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-05T14:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data they should not have access to when performing certain operations against an index alias."
      }, {
        "lang" : "es",
        "value" : "Elastic X-Pack Security versiones anteriores a 5.4.1 y 5.3.3 no siempre aplicaban correctamente la Seguridad de Nivel de Documento para los alias de índices. Este error podría permitir a un usuario con permisos restringidos visualizar datos a los que no debería tener acceso cuando realiza ciertas operaciones contra un alias de índice."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-279"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.3",
            "matchCriteriaId" : "0534BA87-10F3-406A-B6FC-4AF767F5D6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.1",
            "matchCriteriaId" : "0B45E754-714A-4959-9BBB-526B2B3824FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-released",
        "source" : "security@elastic.co",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a session ID can be retrieved from the sessions database."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL se presenta en los dispositivos Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión de firmware anterior a  fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. Un vector de ataque es la cookie bauth para el archivo cgi-bin/MANGA/admin.cgi. Un impacto es la enumeración de las cuentas de usuario al observar si se puede recuperar un ID de sesión de la base de datos de sesiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The CGI scripts in the administrative interface are affected. This allows an attacker to execute commands, if a logged in user visits a malicious website. This can for example be used to change the credentials of the administrative webinterface."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo CSRF en dispositivos Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión de firmware anterior a fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. Los scripts CGI en la interfaz administrativa están afectados. Esto permite que un atacante ejecute comandos, si un usuario ha iniciado sesión  visita un sitio web malicioso. Esto puede ser usado, por ejemplo, para cambiar las credenciales de la interfaz web administrativa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems."
      }, {
        "lang" : "es",
        "value" : "El almacenamiento de contraseñas de texto sin cifrar se presenta en los dispositivos Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión firmware anterior a fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-versión 7.0.1-build2093. Los archivos en cuestión son /etc/waipass y /etc/roapass. En caso de que uno de estos dispositivos se vea comprometido, el atacante puede conseguir acceso a las contraseñas y violarlas para comprometer otros sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS por medio de syncid se presenta en los dispositivos Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión de firmware anterior a fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-versión 7.0.1-build2093. El script afectado está en el archivo cgi-bin/HASync/hasync.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is guest/preview.cgi."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS por medio de orig_url se presenta en los dispositivos Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión de firmware anterior a fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-versión 7.0.1-build2093. El script afectado está en el archivo guest/preview.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, and Submitted syncid."
      }, {
        "lang" : "es",
        "value" : "Una divulgación de información de depuración se presenta en los dispositivos Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión firmware anterior a fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-versión 7.0.1-build2093. Una petición directa a cgi-bin/ HASync/hasync.cgi?Debug=1 muestra la Dirección LAN Maestra, el Número de Serial, el ID de Grupo HA, la IP Virtual y el syncid Enviado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmware_process.cgi via the upfile.path parameter."
      }, {
        "lang" : "es",
        "value" : "Una eliminación de archivos arbitraria se presenta en los dispositivos de Peplink Balance 305, 380, 580, 710, 1350 y 2500 con versión firmware anterior a fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-versión 7.0.1-build2093. La metodología de ataque es el salto de ruta (path) absoluta en el archivo cgi-bin/MANGA/firmware_process.cgi por medio del parámetro upfile.path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934DEA3-D52B-4780-9DB1-DB0892AC5F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CB13A7-2179-46F5-9305-40AFBDE3F0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF409A3-1B36-4F46-A1CC-AFBEFA517201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BC849-D50C-407D-8A05-CA81E9742AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44985F4-9377-41F4-BE49-B9E65A5FD9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7DF9BE-5519-40CF-832F-DC1FE0913973"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584B6897-48D1-4618-9343-43AC251CD691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E9E4F-7786-4A7A-A04D-AB9DB420703A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FD22ED-88A6-44E3-A99D-3236D4E6E6B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E6365-21EB-487B-8739-5DC7512CF01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09E6C0-B9D3-4E65-AFC2-A517040B2DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5058786-C405-4524-BD0C-0F08CB20C580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter."
      }, {
        "lang" : "es",
        "value" : "Crypto ++ (conocido como cryptopp) hasta la versión 5.6.5, contiene una vulnerabilidad de lectura fuera de límites en el archivo zinflate.cpp en el filtro Inflator."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cryptopp:crypto\\+\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.4",
            "matchCriteriaId" : "CCF65951-D574-4603-BA6E-EE43D70B6C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/06/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/weidai11/cryptopp/issues/414",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/weidai11/cryptopp/issues/414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters)."
      }, {
        "lang" : "es",
        "value" : "El ERP/CRM Dolibarr anterior a versión 5.0.3, es vulnerable a una inyección SQL en el archivo user/index.php (parámetros search_supervisor y search_statut)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "F9316B32-0F55-448C-98F5-FE0249297B01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/blob/develop/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/70636cc59ffa1ffbc0ce3dba315d7d9b837aad04",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/blob/develop/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/70636cc59ffa1ffbc0ce3dba315d7d9b837aad04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php."
      }, {
        "lang" : "es",
        "value" : "TeamPass anterior a versión 2.1.27.4, es vulnerable a una inyección SQL en el archivo users.queries.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E39DA4-DF60-4DB1-B647-AFE8EC9E7DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3FE1B6-B126-45F2-8741-901E97C79894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8896298A-354B-4AEF-BA87-945A2F09A977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C276CD9C-09A4-4D97-B371-33DE4F0558F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC7A6CB-ED06-4AE9-9A56-5146F5906253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E05F72-3EDC-4DF7-B2E9-D22E512346E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FD295D-C318-4484-A097-1F6EBE417491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3EE7AE-D4E5-42BB-A1FB-6790789CEC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E6BC0C-670F-499D-B639-D7766A9DE80C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE663CEF-6D83-440A-A103-3596FFBF9677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C082E19A-88A6-4A6F-8436-41DC217106A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FECEF3A-84DD-430D-9DD8-4ECAD0BCBA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A131C1-42F7-4286-9AE1-C6EEC6FAF55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC5E891-17C1-4E95-9E00-2110FA2CBBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE082A-1C30-44C9-A7FD-F1F53C208B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897F9ED9-E288-43A7-8D26-F29131DE49FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB8FBFB-CB8F-4672-B3D9-D5402ADB8D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B776505D-7C89-42CF-9E24-A768462B2576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CED2812-E7AD-4B27-8794-76DDE1AA3CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647F45F5-27FC-445B-8560-3BABD223FE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE0C84A-345A-4B9A-A50C-46814970C0C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EDF657-C59F-4DB3-B0F1-516854FBBECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654A9BA2-5DF1-4BA3-AFE5-ADF610F60C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19D551F-A27A-4646-B4A5-958AC366F5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2370D3-F123-462E-94C6-196CD11D3D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45C638-FB9C-442A-8617-A15EA8517304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD262F8E-5209-47CB-AD08-033FD346084E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A49988E-DCBF-4CA7-A9BD-FAAB15F6C694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5270230-1A7E-4602-845A-1A31AF4758AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9800AF7-E93B-4051-AB84-C70E67C8366B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905A3A93-5429-4617-87EE-E2F89BDB9F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4613D1E-15FF-4F08-8E14-7F0982A037CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B042637C-4E8D-4A77-8ADB-6A02CEDD8210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C228A11C-7C26-4DC0-9B5F-F7044FB3D98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.26.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3C3ECC-A39E-427C-A8A6-C468B4E3DE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2B1AFA-390F-4DE1-84B9-71C707704FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDDA6D8-8517-4A64-888E-F2BEF5D3A8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82FB18A-BFB6-4C36-B311-C86AD904637D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:2.1.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08B58C4-356C-4793-B9DA-D8AF041EFDE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T14:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Openbravo Business Suite 3.0 is affected by SQL injection. This vulnerability could allow remote authenticated attackers to inject arbitrary SQL code."
      }, {
        "lang" : "es",
        "value" : "Openbravo Business Suite versión 3.0, está afectado por la inyección SQL. Esta vulnerabilidad podría permitir a los atacantes autenticados remotos inyectar código SQL arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbravo:openbravo_erp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84F73C6-E951-40BB-8C36-BCBCB79662D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-005",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T16:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution."
      }, {
        "lang" : "es",
        "value" : "La versión 1.8.20p1 y anteriores de sudo de Todd Miller es vulnerable a una validación de entradas (nuevas líneas embebidas) en la función get_process_ttyname() que da lugar a una revelación de información y la ejecución de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.20",
            "matchCriteriaId" : "A1E57286-1794-4942-9C9F-884B76550AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.8.20:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "F2148E02-139E-45BD-A636-E9E1A0FEAF65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98838",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1574",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10205",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3968-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3968-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sudo.ws/alerts/linux_tty.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3968-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3968-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sudo.ws/alerts/linux_tty.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T17:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the _yr_re_emit function, a different vulnerability than CVE-2017-9304."
      }, {
        "lang" : "es",
        "value" : "En el archivo libyara/re.c en el módulo regexp en YARA versión 3.5.0, permite a los atacantes remotos causar una denegación de servicio (consumo de pila) por medio de una regla especialmente diseñada (involucrando a cadenas hexadecimales) que se maneja inapropiadamente en la función _yr_re_emit, una vulnerabilidad diferente que CVE- 2017-9304."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VirusTotal/yara/commit/10e8bd3071677dd1fa76beeef4bc2fc427cea5e7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/674",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/10e8bd3071677dd1fa76beeef4bc2fc427cea5e7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T18:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.5-5, se encontró una perdida de memoria en la función ReadPDBImage en el archivo coders/pdb.c, que permite a los atacantes causar una denegación de servicio por medio de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98907",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/460",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T18:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.5-5, se encontró una perdida de memoria en la función ReadPSDChannel en el archivo coders/psd.c, que permite a los atacantes causar una denegación de servicio por medio de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98908",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/462",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T19:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el plugin Spiffy Calendar anterior a versión 3.3.0 para WordPress, permite a los atacantes remotos inyectar JavaScript arbitrario por medio del parámetro yr."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B48BA7E9-1C6A-4497-A4D6-54328F7BF932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4B4A24B2-EF01-4A17-A6CF-813475D21227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.0.2a:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "60EE3105-9B64-4F6B-B9F6-9C24098721FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "013E5373-DB1D-4755-886C-1B52CCA65F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5885F052-6919-4BA8-9369-BF950BCA6C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "72EED180-74B8-4FEE-90D2-A92DA6F8A0C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2B9862E0-A08D-4A48-B21C-566FFF18BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "DAD97A2D-A21F-4063-832F-99031B313858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5F470C95-E624-4891-B61E-475599994AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E95096B1-5542-43CD-9B97-49C7F70CA23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2FC4484F-C0E2-4351-89FE-53EC17EA5AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5EE2F989-D73F-49E4-A50A-2627CAC7ED26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.1.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "125477F4-CBFC-4B5D-A671-0B06A4A35FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "58FB758D-EC2B-4B2A-9A3D-FC62B9D0F016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.2.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BB4825D9-F7A3-4F17-87A4-FB2BA700BF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "39305F07-2412-4399-A0F9-E73A60E166FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:1.3.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "71522FBE-957B-499E-8E0A-E72B92BEAD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:2.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1CB51901-2BD8-46FE-B168-1BC34F60EC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:2.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "83EB9CA8-6A72-4C8B-AAB9-8F988AFBCFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:2.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1A46D334-F27A-4172-95DB-87676710CA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:2.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C77BA87F-A6D4-4AD4-8809-008DA3AB3900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:2.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0E577878-34D0-4BA3-BE25-EDF8561CB510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:2.1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "89D1B1B6-1A3A-4A6A-B0B3-1BCFE9538571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BC255E43-9EF6-4C39-A761-118971E01F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D6F8972B-3E0E-4913-8122-36E3444D7F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "96DDE807-A788-410E-8260-DCF264AC476D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "49E4DA3E-47F3-40E5-B461-004EA68AA65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C9C04C0E-8FE1-4E87-AB18-30CB6CF30E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8252FE9F-5AAC-49CB-942F-FA3A56CABD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D473CCD0-BEA4-4EE0-94E8-A88C157C3AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "99AA5CF4-183D-43AE-B7BC-4C25334E0DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.0.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "70F92E8E-F523-46BC-9533-4CD3419708E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0E64E631-BAB1-4B44-A903-857A6867D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BF5B4727-50D6-4B83-8312-424BAF042B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "14813E8C-241B-42FA-AD2C-987B9A2BA792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3EF26C4F-0F25-400E-A21D-69E98C9E0F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "459555CA-2058-4692-9731-13894404685E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D3DE567C-E274-4E64-AD9B-134381E50CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sunnythemes:spiffy_calendar:3.2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F15F8FE3-56F3-43A4-BBED-66060D43BBC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://spiffycalendar.sunnythemes.com/version-3-3-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spiffycalendar.sunnythemes.com/version-3-3-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T19:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML by uploading a crafted package, triggering mishandling of the (1) title or (2) version or (3) author_name parameter in manifest.json. This issue exists in core\\admin\\modules\\developer\\extensions\\install\\unpack.php and core\\admin\\modules\\developer\\packages\\install\\unpack.php. NOTE: the vendor states \"You must implicitly trust any package or extension you install as they all have the ability to write PHP files."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en BigTree CMS hasta versión 4.2.18, permiten a los usuarios autenticados remotos inyectar script web o HTML arbitrario al cargar un paquete especialmente diseñado, desencadenando un manejo inapropiado del parámetro (1) title o (2) version o (3) autor_name en el archivo manifest.json. Este problema se presenta en los archivos core\\admin\\modules\\developer\\extensions\\install\\ unpack.php y core\\admin\\modules\\developer\\packages\\ install\\unpack.php. NOTA: el proveedor declara que \"You must implicitly trust any package or extension you install as they all have the ability to write PHP files.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/290",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary code by uploading a crafted package containing a PHP web shell, related to extraction of a ZIP archive to filename patterns such as cache/package/xxx/yyy.php. This issue exists in core\\admin\\modules\\developer\\extensions\\install\\unpack.php and core\\admin\\modules\\developer\\packages\\install\\unpack.php. NOTE: the vendor states \"You must implicitly trust any package or extension you install as they all have the ability to write PHP files."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** BigTree CMS hasta versión 4.2.18, permite a los usuarios autenticados remotos ejecutar código arbitrario al cargar un paquete especialmente diseñado que contiene un shell web de PHP, relacionado con la extracción de un archivo ZIP en patrones de nombre de archivo como cache/package/xxx/yyy.php Este problema se presenta en los archivos core\\admin\\modules\\developer\\extensions\\install\\unpack.php y core\\admin\\modules\\developer\\packages\\install\\unpack.php. NOTA: el proveedor declara que \"You must implicitly trust any package or extension you install as they all have the ability to write PHP files.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T19:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables object in manifest.json in an uploaded package. This issue exists in core\\admin\\modules\\developer\\extensions\\install\\process.php and core\\admin\\modules\\developer\\packages\\install\\process.php. NOTE: the vendor states \"You must implicitly trust any package or extension you install as they all have the ability to write PHP files."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** BigTree CMS hasta versión 4.2.18, permite a los usuarios autenticados remotos conducir ataques de inyección SQL por medio de un objeto de tablas especialmente diseñadas en manifest.json en un paquete cargado. Este problema se presenta en los archivos core\\admin\\modules\\developer\\extensions\\install\\process.php y core\\admin\\modules\\developer\\packages\\install\\process.php. NOTA: el proveedor declara que \"You must implicitly trust any package or extension you install as they all have the ability to write PHP files\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/292",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-05T19:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigTree CMS through 4.2.18 has CSRF related to the core\\admin\\modules\\users\\profile\\update.php script (modify user information), the index.php/admin/developer/packages/delete/ URI (remove packages), the index.php/admin/developer/upgrade/ignore/?versions= URI, and the index.php/admin/developer/upgrade/set-ftp-directory/ URI."
      }, {
        "lang" : "es",
        "value" : "BigTree CMS hasta versión 4.2.18, presenta un problema de tipo CSRF relacionado con el script del archivo core\\admin\\modules\\users\\profile\\update.php (modifica información de usuario), el URI index.php/admin/developer/packages/delete/  (elimina paquetes), el URI index.php/admin/developer/upgrade/ignore/?versions= , y el URI index.php/admin/developer/upgrade/set-ftp-directory/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/293",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5664",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-06T14:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the original HTTP method. If the error page is a static file, expected behaviour is to serve content of the file as if processing a GET request, regardless of the actual HTTP method. The Default Servlet in Apache Tomcat 9.0.0.M1 to 9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43 and 7.0.0 to 7.0.77 did not do this. Depending on the original request this could lead to unexpected and undesirable results for static error pages including, if the DefaultServlet is configured to permit writes, the replacement or removal of the custom error page. Notes for other user provided error pages: (1) Unless explicitly coded otherwise, JSPs ignore the HTTP method. JSPs used as error pages must must ensure that they handle any error dispatch as a GET request, regardless of the actual method. (2) By default, the response generated by a Servlet does depend on the HTTP method. Custom Servlets used as error pages must ensure that they handle any error dispatch as a GET request, regardless of the actual method."
      }, {
        "lang" : "es",
        "value" : "El mecanismo de página de error en Java Servlet Specification requiere que, cuando ocurre un error y se configura una página de error para ese fallo que ha ocurrido, la petición original y la respuesta se envían a la página de error. Esto significa que la petición se presenta en la página de error con el método HTTP original. Si la página de error es un archivo estático, el comportamiento esperado es que sirva contenido del archivo como si estuviese procesando una petición GET, independientemente del método HTTP que se emplee realmente. El Servlet por defecto en Apache Tomcat 9.0.0.M1 a 9.0.0.M20, 8.5.0 a 8.5.14, 8.0.0.RC1 a 8.0.43 y 7.0.0 a 7.0.77 no hizo esto. Dependiendo de la petición original, esto podría conducir a resultados inesperados y no deseados para páginas estáticas de error incluyendo, si DefaultServlet se configura para permitir escrituras, el remplazo o eliminación de la página de error personalizada. Notas para otras páginas de error proporcionadas por el usuario: (1) A no se que se programe de otra forma, los JSPs ignoran el método HTTP. Los JSP empleados como páginas de error deben asegurarse de que gestionan cualquier envío de errores como petición GET, independientemente del método que se emplee realmente. (2) Por defecto, la respuesta que genera un Servlet depende del método HTTP. Los Servlets personalizados empleados como páginas de error deben asegurarse de que gestionan cualquier envío de errores como petición GET, independientemente del método que se emplee realmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8C62EF-1B67-456A-9C66-755439CF8556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "33E9607B-4D28-460D-896B-E4B7FA22441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819E245-D641-4F19-9139-6C940504F6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C381275-10C5-4939-BCE3-0D1F3B3CB2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "81A31CA0-A209-4C49-AA06-C38E165E5B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7205475A-6D04-4042-B24E-1DA5A57029B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08022987-B36B-4F63-88A5-A8F59195DF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA563BF-A67A-477D-956A-167ABEF885C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4B7557-EF35-451E-B55D-3296966695AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B937B-57E0-4E88-9E39-39012A924525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8980E61E-27BE-4858-82B3-C0E8128AF521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8756BF9B-3E24-4677-87AE-31CE776541F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE057E-2092-4C98-8D0C-75CF439D0A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F194580-EE6D-4E38-87F3-F0661262256B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9731BAA-4C6C-4259-B786-F577D8A90FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F74A421-D019-4248-84B8-C70D4D9A8A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05346F5A-FB52-4376-AAC7-9A5308216545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305688F2-50A6-41FB-8614-BC589DB9A789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24AA431-C436-4AA5-85DF-B9AAFF2548FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25966344-15D5-4101-9346-B06BFD2DFFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F4CBAC-27B1-4EFF-955A-A63B457D0578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD55B338-9DBE-4643-ABED-A08964D3AF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4F710E-06EA-48F4-AC6A-6F143950F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4936C2-0B2D-4C44-98C3-443090965F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48453405-2319-4327-9F4C-6F70B49452C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD9544-6424-41A6-AEC0-EC19B8A10E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4670E65-2E11-49A4-B661-57C2F60D411F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8FF71D-4710-4FBB-9925-A6A26C450F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31002A23-4788-4BC7-AE11-A3C2AA31716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7144EDDF-8265-4642-8EEB-ED52527E0A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF06B5C1-B9DD-4673-A101-56E1E593ACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D731065-626B-4425-8E49-F708DD457824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D850EA-E537-42C8-93B9-96E15CB26747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E037DA05-2BEF-4F64-B8BB-307247B6A05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAF1EB5-FB34-40FC-96ED-9D073890D8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D395D95B-1F4A-420E-A0F6-609360AF7B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD221BA-0AB6-4972-8AD9-5D37AC07762F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55B6565-96CB-4F6A-9A80-C3FB82F30546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3300AFE-49A4-4904-B9A0-5679F09FA01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5125CC-05F9-4678-90DB-A5C7CD24AE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B904C74-B92E-4EAE-AE6C-78E2B844C3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8A7333-B4C3-4876-AE01-62F2FD315504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92993E23-D805-407B-8B87-11CEEE8B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A11BD74-305C-41E2-95B1-5008EEF5FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595442D0-9DB7-475A-AE30-8535B70E122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0BA92A-0BD3-4CE4-9465-95E949104BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C947E549-2459-4AFB-84A7-36BDA30B5F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A0EA46-5AEA-4D0A-B89E-6560FA10EC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9453E-BC9B-4F77-85FA-BA15AC55C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF0518-73F9-47DB-8946-A8334936BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AA8778-7833-4572-A71B-5FD89938CE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242E47CE-EF69-4F8F-AB40-5AF2811674CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A225D4F7-174E-47C3-8390-C6FA28DB5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1555C-E55A-4E14-B786-BFEE3F09220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAC42AE-B82A-4ABF-9519-B2D97D925707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8075E9A-DA7F-4A0B-8B4D-0CD951369111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335A5320-6086-4B45-9903-82F6F92A584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B33408-C2E2-4E7C-9334-6AB98F13468C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F036676-9EFB-4A92-828E-A38905D594E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9728EE8-6029-4DF3-942E-E4ACC09111A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DBB843-288C-4060-8777-6CDCF1860D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B87EB5-4902-4C2A-878A-45185F7D0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0596E6C-9ACE-4106-A2FF-BED7967C323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7158DC-966B-4508-8600-40E3E9D3D0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190FE0D-86C1-49EE-BDAE-5879C32BDC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20F45F-01A2-43DD-9731-DFF54E31719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7A728B-59DB-4EDE-8929-C91F4C410902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26889291-3280-4524-8F4A-9B22FF4600C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4CAEBD-0F38-4892-9D0B-9D7392E0BCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C4DA00-E47C-47BE-856C-7E0D4B0F9DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FF234B-A9AD-4C51-8E9E-939DC8ECB64A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4752862B-7D26-4285-B8A0-CF082C758353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*",
            "matchCriteriaId" : "58EA7199-3373-4F97-9907-3A479A02155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F963D737-2E95-4D7C-92C7-DACF3F36D1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBBC5EA-012C-4C5D-A61B-BAF134B300DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4DB619-F6B0-4896-9AE2-7E7D92105577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF96F96-34DB-4EB3-BF59-11220673FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44883383-6360-4BE6-9B48-1308F85E5797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3E379-47D2-4C86-8C6D-8B3C25A0E1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82391BD-10FF-4E7F-91DC-35AA11325530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C22F12-C072-4A12-A4A9-CBF589A36FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A776B25-6AF1-421B-8E47-2A7499F6B4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A332FDE-42AE-4F48-9553-5AE953CD6D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701424A2-BB06-44B5-B468-7164E4F95529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63FA521-9D20-49B9-A9A4-0DF891B4E4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9A5B7E-33A9-4651-9BE1-371A0064B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99252E8-A59C-48E1-B251-718D7FB3E399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D05293B-B9D8-42F1-9367-9D2E058EFAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B38892-9C00-4510-B7BA-F2A8F2CACCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C913AA6-2260-4249-BE1D-7139F45735D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7409B064-D43E-489E-AEC6-0A767FB21737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019268F-80C4-48FE-8164-E9DA0A3BAFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFBD214-FCFE-4F04-A903-66EFDA764B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425D86B3-6BB9-410D-8125-F7CF87290AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE3BB0D-1002-41E4-9BE8-875D97330057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D0E80B-EDDA-4876-912D-44BFE6211EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6622472B-8644-4D45-A54B-A215C3D64B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B338F95B-2924-435B-827F-E64420A93244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209D1349-7740-4DBE-80A5-E6343C62BAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E77C24-C265-403D-A193-B3739713F6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28616FA3-9A98-4AAE-9F94-3E77A14156EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335925DA-11C0-4222-B6B7-82602B361751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603A14BF-72BB-4A3D-8CBC-932DC45CEC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2E1C55-3C89-4F26-A981-1195BCC9BB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC242407-A447-4ABD-8E19-EB6DB1F35121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BB906B-812F-462C-9AEE-147C1418D865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B701E17-D231-44ED-A46E-C67749A725B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CAF2F7-D227-4F06-B0E6-533C5EDB105B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305B73CE-0224-4E73-8EB2-FC41A62FBA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DBF476-D7BB-4FC8-89FE-FF0CD135E9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC866C53-0C6B-4D0B-A168-D3985B1CF0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290B0787-49F1-41FB-9AFD-36646FB16CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B741F4F-E52B-43CD-A9CC-6AC46B2DE111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7A8369-183D-4C00-B2B2-0F81DA153C4E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3245C35C-02E7-46B9-A720-37D3C17AFDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4239A72-EFA1-49E3-8755-5961060F2198"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3891",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3892",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98888",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038641",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1809",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2493",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2494",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2633",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2635",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2636",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2637",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2638",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/a42c48e37398d76334e17089e43ccab945238b8b7896538478d76066%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/a42c48e37398d76334e17089e43ccab945238b8b7896538478d76066%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7515",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-06T14:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service."
      }, {
        "lang" : "es",
        "value" : "poppler hasta versión 0.55.0, es vulnerable a una recursión no controlada en pdfunite resultando en una potencial denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.55.0",
            "matchCriteriaId" : "5923FAB1-BD60-4C09-9242-211F9D8FDEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101208",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T14:29:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos CompuLab Intense PC y MintBox 2 con BIOS antes del 21-05-2017 no usan el mecanismo de protección CloseMnf para la protección contra escritura de regiones de memoria flash, lo que permite a los usuarios locales instalar un rootkit de firmware aprovechando los privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:compulab:intense_pc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cr_2.2.0.400.2",
            "matchCriteriaId" : "D42B7384-0A9E-40C6-B8DA-2C537F90F951"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:compulab:intense_pc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F825C891-97AC-4AF2-9F48-F50BF7CF067D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:compulab:mintbox_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cr_2.2.0.400.2",
            "matchCriteriaId" : "35F7F6E4-DBE4-4B30-ABC3-63200D543ACC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:compulab:mintbox_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0CBAE7-741E-4C27-848D-131AEA92EB1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://watchmysys.com/blog/2017/06/cve-2017-8083-compulab-intensepc-lacks-bios-wp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://watchmysys.com/blog/2017/06/cve-2017-8083-compulab-intensepc-lacks-bios-wp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T14:29:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag."
      }, {
        "lang" : "es",
        "value" : "La función smarty_self en el archivo modules/module_smarty.php en PivotX versión 2.3.11, maneja inapropiadamente el URI, permitiendo una vulnerabilidad de XSS por medio  de vectores que incluyan comillas en la etiqueta Smarty propia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotx:pivotx:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3B3253-5D04-41EF-9ABF-2CE3551AF86D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/pivot-weblog/code/4487/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/pivot-weblog/code/4487/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T15:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML via the description parameter. This issue exists in core\\admin\\ajax\\pages\\save-revision.php and core\\admin\\modules\\pages\\revisions.php. Low-privileged (administrator) users can attack high-privileged (Developer) users."
      }, {
        "lang" : "es",
        "value" : "Unas vulnerabilidades de tipo Cross-site scripting (XSS) en BigTree CMS hasta la versión 4.2.18, permiten a los usuarios autenticados remotos inyectar script web o HTML arbitrario por medio del parámetro description. Este problema se presenta en los archivos core\\admin\\ajax\\pages\\save-revision.php y core\\admin\\modules\\pages\\revisions.php. Los usuarios poco privilegiados (administrador) pueden atacar a los usuarios muy privilegiado (desarrollador)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/294",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T15:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core/admin/modules/developer/modules/views/create.php. The attacker creates a crafted table name at admin/developer/modules/views/create/ and the injection is visible at admin/ajax/auto-modules/views/searchable-page/ or admin/modules_name."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección SQL en BigTree CMS hasta la versión 4.2.18, permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio del archivo core/admin/modules/developer/modules/views/create.php. El atacante crea un nombre de tabla diseñada en admin/developer/modules/views/create/ y la inyección es visible en admin/ajax/auto-modules/views/searchable-page/ o admin/modules_name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/295",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5243",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-06-06T16:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installations vulnerable to a range of MITM, downgrade, and decryption attacks."
      }, {
        "lang" : "es",
        "value" : "La configuración por defecto de SSH en los dispositivos hardware con Nexpose de Rapid7 enviados antes de Junio de 2017 no especifica los algoritmos deseados para el intercambio de claves y otras funciones importantes. Como resultado, vuelve a permitir TODOS los algoritmos compatibles para la versión relevante de OpenSSH y hace que las instalaciones sean vulnerables a una variedad de ataques MITM, degradados y descifrados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:nexpose:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.40",
            "matchCriteriaId" : "A1B79EC4-5022-4BE6-AF39-972407FD03AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.rapid7.com/community/nexpose/blog/2017/05/31/r7-2017-13-nexpose-hardware-appliance-ssh-enabled-obsolete-algorithms-cve-2017-5243",
        "source" : "cve@rapid7.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.rapid7.com/community/nexpose/blog/2017/05/31/r7-2017-13-nexpose-hardware-appliance-ssh-enabled-obsolete-algorithms-cve-2017-5243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS."
      }, {
        "lang" : "es",
        "value" : "El archivo irc.cgi en CGI:IRC anterior a versión 0.5.12, refleja la entrada suministrada por el usuario desde el parámetro R sin la codificación de salida apropiada, también se conoce como XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgiirc:cgi\\:irc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.11",
            "matchCriteriaId" : "50A7472F-64E7-42B7-98CD-3D273F86648E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgiirc.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dgl/cgiirc/commit/46dd48442204207b52c16065ad67d294194afd8d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://cgiirc.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dgl/cgiirc/commit/46dd48442204207b52c16065ad67d294194afd8d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T16:29:00.237",
      "lastModified" : "2023-11-07T02:50:46.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-8920.  Reason: This candidate is a reservation duplicate of CVE-2017-8920.  Notes: All CVE users should reference CVE-2017-8920 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T16:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via the PATH_INFO in an acp.php URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross site scripting (XSS) en el archivo pages.edit_form.php en flatCore versión 1.4.6, permite a los atacantes remotos inyectar JavaScript arbitrario por medio de PATH_INFO en una URL acp.php, debido al uso de $_SERVER['PHP_SELF']  no saneado para generar URLs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20198BCE-94EB-46E7-9065-D518D7E25911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatCore/flatCore-CMS/commit/f1b42b338693a9c240182e76ef2131057f2c2a87",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/commit/f1b42b338693a9c240182e76ef2131057f2c2a87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T16:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de tipo Cross-site scripting (XSS) en el archivo admin.php en Piwigo versión 2.9.0 y anteriores, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "1931608C-2835-4E94-AC78-CCBB6C9EC9E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/issues/667",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T21:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks."
      }, {
        "lang" : "es",
        "value" : "smbd en Samba versiones anteriores a 4.4.10 y 4.5.x versiones anteriores a 4.5.6, tienen una vulnerabilidad de denegación de servicio (fd_open_atomic infinite loop con un alto uso de CPU y consumo de memoria) debido a un manejo inadecuado de los enlaces simbólicos colgantes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.9",
            "matchCriteriaId" : "BCA1676B-E93D-4B1B-87EB-5E9A3F38C13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8400346B-095A-4022-A454-1E0782B66357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F44626-3477-4804-88D7-847DEC41AA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C992A5CB-44AF-4F93-934B-D6995886B2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ACE5BE1-B4A8-4B91-AC51-146C82AB8E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29627C2E-FA74-4908-9AFC-6721AD841CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1612767-5F6E-450C-ADC0-75612C7B5B5A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99455",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1950",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2338",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2778",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/864291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=12572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=10c3e3923022485c720f322ca4f0aca5d7501310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/864291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=12572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=10c3e3923022485c720f322ca4f0aca5d7501310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T21:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Mercurial before 4.1.3, \"hg serve --stdio\" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name."
      }, {
        "lang" : "es",
        "value" : "En Mercurial, en versiones anteriores a la 4.1.3, \\\"hg serve --stdio\\\" permite que usuarios autenticados remotos inicien el depurador de Python y, como consecuencia, ejecuten código arbitrario utilizando --debugger como nombre del repositorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurial:mercurial:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "BC5A4D55-42E1-40D4-82AF-27CBE8D1D369"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3963",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99123",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1576",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/861243",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-18",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurial-scm.org/repo/hg/rev/77eaf9539499",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1.3_.282017-4-18.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/861243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurial-scm.org/repo/hg/rev/77eaf9539499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1.3_.282017-4-18.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-06T21:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c."
      }, {
        "lang" : "es",
        "value" : "La función yr_arena_write_data en YARA versión 3.6.1, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer y bloqueo de aplicación) u obtener información confidencial de la memoria del proceso por medio de un archivo especialmente diseñado que es manejado inapropiadamente en la función yr_re_fast_exec en el archivo libyara/re.c y la función _yr_scan_match_callback en el archivo libyara/scan.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E3A197-A986-45AF-B8F7-E344C200A31D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VirusTotal/yara/commit/992480c30f75943e9cd6245bb2015c7737f9b661",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/992480c30f75943e9cd6245bb2015c7737f9b661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/issues/678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T01:29:01.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash."
      }, {
        "lang" : "es",
        "value" : "En Irssi anterior a versión 1.0.3, durante la recepción de un mensaje DCC sin nick/host de origen, intenta la desreferencia de un puntero NULL. Por lo tanto, los servidores IRC remotos pueden causar un bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "AF02C057-AE3D-4181-A03D-1DF35EC81F30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/06/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3885",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99015",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038621",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_06.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/06/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_06.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T01:29:01.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash."
      }, {
        "lang" : "es",
        "value" : "En Irssi anterior a versión 1.0.3, cuando recibe ciertos archivos DCC citados inapropiadamente, intenta encontrar la cita de terminación one byte anterior de la memoria asignada. Por lo tanto, los atacantes remotos podrían causar un bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "AF02C057-AE3D-4181-A03D-1DF35EC81F30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/06/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3885",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99043",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038621",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_06.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/06/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_06.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, la función MAPIPrint en libreria / ytnef.c permite que los atacantes remotos causen una denegación de servicio (falta de referencia del puntero NULL y bloqueo de la aplicación) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T05:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, la función SwapWord en libreria / ytnef.c permite a los atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en saturación y bloqueo de la aplicación) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapword-ytnef-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapword-ytnef-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T05:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, la función SwapWord en libreria / ytnef.c permite a los atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en saturación y bloqueo de la aplicación) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T05:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, la función TNEFFillMapi en libreria / ytnef.c permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-memory-allocation-failure-in-tneffillmapi-ytnef-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-memory-allocation-failure-in-tneffillmapi-ytnef-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T05:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, la función DecompressRTF en libreria / ytnef.c permite que los atacantes remotos causen una denegación de servicio (desbordamiento de buffer basado en saturación y bloqueo de la aplicación) a través de un archivo diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-decompressrtf-ytnef-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-decompressrtf-ytnef-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Personify360 e-Business versiones 7.5.2 hasta 7.6.1. Cunado se va al URI  /TabId/275, cualquiera puede agregar una cuenta de proveedor o leer los datos de cuentas de proveedores existentes (incluyendo los nombres de usuario y las contraseñas)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:personifycorp:personify360:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35424E7-94C1-4B19-B589-1C6A38DAAAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:personifycorp:personify360:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD111BD-9AA1-4AEB-865A-63E0DCC85E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:personifycorp:personify360:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD12D963-6BC2-469F-85D8-DDDBADB05DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://amswoes.wordpress.com/2017/06/06/first-blog-post/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://amswoes.wordpress.com/2017/06/06/first-blog-post/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T13:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, it is possible to read any customer name, master Customer Id, and email address. In other words, anyone can search for users/customers in the system - no authentication is required."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Personify360 e-Business versiones 7.5.2 hasta 7.6.1. Cuando se va al URI /TabId/275, es posible leer cualquier nombre de cliente, El ID del cliente maestro y la dirección de correo electrónico. En otras palabras, cualquier persona puede buscar usuarios y clientes en el sistema, no se requiere autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:personify:personify360_e-business:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "DCDD70F4-EF6F-473C-A3AA-CAE7E6B94983"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://amswoes.wordpress.com/2017/06/06/cve-2017-7313-how-to-dump-personify-customer-data-with-one-click-23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://amswoes.wordpress.com/2017/06/06/cve-2017-7313-how-to-dump-personify-customer-data-with-one-click-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T13:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating a new role, a list of database tables and their columns is available."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Personify360 e-Business versiones 7.5.2 hasta 7.6.1. Cuando se va al URI /TabId/275, mientras se crea un nuevo rol, están disponibles una lista de tablas de base de datos y sus columnas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:personify:personify360_e-business:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "DCDD70F4-EF6F-473C-A3AA-CAE7E6B94983"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://amswoes.wordpress.com/2017/06/06/cve-2017-7314-dump-personify-database-schema-33/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://amswoes.wordpress.com/2017/06/06/cve-2017-7314-dump-personify-database-schema-33/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T14:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.5-7 Q16, se encontró un fallo en la función SetPixelChannelAttributes, que permite a los atacantes causar una denegación de servicio por medio de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98944",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7fd419441bc7103398e313558171d342c6315f44",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/492",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7fd419441bc7103398e313558171d342c6315f44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T14:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.5-8 Q16, se encontró un fallo en la función ResetImageProfileIterator, que permite a los atacantes generar una Denegación de Servicio por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98941",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/500",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/98941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T14:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.5-7 Q16, se encontró un fallo en la función LockSemaphoreInfo, que permite a los atacantes causar una denegación de servicio por medio  de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98943",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/01843366d6a7b96e22ad7bb67f3df7d9fd4d5d74",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/491",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/01843366d6a7b96e22ad7bb67f3df7d9fd4d5d74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits)."
      }, {
        "lang" : "es",
        "value" : "En Trusted Firmware versión 1.3 de ARM, la memoria RO es siempre ejecutable en AArch64 Secure EL1, lo que permite a los atacantes eludir el mecanismo de protección MT_EXECUTE_NEVER. Este problema ocurre debido a la inconsistencia en el número de bits de nunca ejecutados (un bit contra dos bits)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:arm_trusted_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "21DC8951-D684-4711-991A-D2D7F9224FDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T15:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers."
      }, {
        "lang" : "es",
        "value" : "En Trusted Firmware versión 1.3 de ARM, la interfaz de depuración invasiva segura y auto alojada permite a los atacantes de mundo normal causar una denegación de servicio (pánico de mundo seguro) por medio  de vectores que incluyen excepciones de depuración y registros de depuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:arm_trusted_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "21DC8951-D684-4711-991A-D2D7F9224FDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1125",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-07T17:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340."
      }, {
        "lang" : "es",
        "value" : "Cognos Analytics versiones 10.1 y 10.2 de IBM, podría permitir a un usuario local diseñar una URL que pudiera confirmar la existencia y exponer el contenido postial de un archivo. ID de IBM X-Force: 121340."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31E5733-732B-44C1-B046-18523A8B2B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence_server:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB66D31-26D2-4D91-ABF9-3C923730401B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C949E-36DB-4A57-B50E-E135798A9759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence_server:10.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E44DA96-93BA-49B3-97D0-F50CCEC20D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3B8BE-C8B5-44C8-BAD5-48958F2B5793"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004036",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98945",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121340",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1178",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-07T17:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123430."
      }, {
        "lang" : "es",
        "value" : "Endpoint Manager for Security and Compliance versión 1.9.70 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, por lo tanto, alterar la funcionalidad prevista que podría conllevar a la revelación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 123430."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_security_compliance_analytics:1.9.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF6632-7F43-4E62-BA33-DBB4F91A0432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004164",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98909",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123430",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1196",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-07T17:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671."
      }, {
        "lang" : "es",
        "value" : "BigFix Compliance (TEMA SUAv1 SCA SCM) versión 1.9.70 de IBM, no requiere que los usuarios tengan contraseñas seguras por defecto, lo que facilita a los atacantes comprometer las cuentas de los usuarios. ID de IBM X-Force: 123671."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_security_compliance_analytics:1.9.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF6632-7F43-4E62-BA33-DBB4F91A0432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004168",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98911",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123671",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1305",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-07T17:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125459."
      }, {
        "lang" : "es",
        "value" : "DOORS Next Generation (DNG/RRC) versiones 6.0.2 y 6.0.3 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, por lo tanto, alterar la funcionalidad prevista que podría conllevar a la revelación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 125459."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002799",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98834",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125459",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4914",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T17:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance."
      }, {
        "lang" : "es",
        "value" : "VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, y 5.5.x contiene un problema de deserialización que permitiría a un atacante remoto ejecutar comandos en el aparato."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2725FD-0BEF-442B-A2D6-83C1BF3644E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785AF64D-7D94-49C2-9590-54C709736136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8679C1-4ACA-4E6C-90FC-C906C6E70AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F7F343-0BC4-4142-8FEF-3F52A1AD6EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5455D69B-3439-4345-956F-EB7F80D8AFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49E8B4D-B20A-42F5-BDAF-A53459E980BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABC25F6-3793-475A-A4AA-B52CA0B6AFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE870CC9-2B3B-4C80-AB92-A0F1CB869BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333C262E-9FB0-4A7B-8269-D58FA1371679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB9A697-E4F7-4A8E-BFCC-ACC33EEFF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2438674B-8D7C-433A-A7F1-E97A546DC3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05828BD4-C209-4278-80DF-632274B2ECBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A07628-0466-4E91-B016-4C6B311C479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA48F5F-3B72-427E-9C9A-E5C3EC03A5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF32F55-AE25-4F52-B043-1C2623344F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FEBFF6-CEF2-4A8E-BA29-3F383D6DF436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC123DA-FBC3-4075-B4C0-A5295A6965A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8E9053-F846-48A5-93D7-35D0665D4038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7E39A9-BE37-4848-BAD2-7F97D04F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A908399-8C17-46B6-B554-77F588C2BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8AFC55-915D-46AC-80DA-E100F4CFFD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B9A334-69EB-4E88-A446-18A1B0C669B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98939",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038617",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0010.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42152/",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42152/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4917",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T17:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained."
      }, {
        "lang" : "es",
        "value" : "vSphere Data Protection (VDP) versiones 6.1.x, 6.0.x, 5.8.x y 5.5.x de Vmware, almacena localmente las credenciales del Servidor vCenter utilizando un cifrado reversible. Este problema puede permitir que credenciales de texto plano puedan ser obtenidas ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785AF64D-7D94-49C2-9590-54C709736136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8679C1-4ACA-4E6C-90FC-C906C6E70AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F7F343-0BC4-4142-8FEF-3F52A1AD6EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5455D69B-3439-4345-956F-EB7F80D8AFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49E8B4D-B20A-42F5-BDAF-A53459E980BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABC25F6-3793-475A-A4AA-B52CA0B6AFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE870CC9-2B3B-4C80-AB92-A0F1CB869BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333C262E-9FB0-4A7B-8269-D58FA1371679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB9A697-E4F7-4A8E-BFCC-ACC33EEFF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2438674B-8D7C-433A-A7F1-E97A546DC3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05828BD4-C209-4278-80DF-632274B2ECBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A07628-0466-4E91-B016-4C6B311C479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA48F5F-3B72-427E-9C9A-E5C3EC03A5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF32F55-AE25-4F52-B043-1C2623344F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FEBFF6-CEF2-4A8E-BA29-3F383D6DF436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC123DA-FBC3-4075-B4C0-A5295A6965A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8E9053-F846-48A5-93D7-35D0665D4038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7E39A9-BE37-4848-BAD2-7F97D04F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A908399-8C17-46B6-B554-77F588C2BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8AFC55-915D-46AC-80DA-E100F4CFFD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_data_protection:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B9A334-69EB-4E88-A446-18A1B0C669B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98936",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038617",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0010.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4898",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the \"vmware-vmx\" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed."
      }, {
        "lang" : "es",
        "value" : "Workstation Pro/Player versiones 12.x anteriores a 12.5.3 de VMware, contiene una vulnerabilidad de carga de DLL que ocurre debido al proceso \"vmware-vmx\" que carga archivos DLL desde una ruta (path) definida en la variable de entorno local. La explotación con éxito de este problema puede permitir a los usuarios normales escalar privilegios al sistema en la máquina host donde está instalada Workstation de VMware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE47D4-506C-4132-829B-19A61ED35F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CDB0AC-25B6-4397-9784-386C81C37352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48608C8-B7A6-47DD-8C78-44EB2B0D6C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1D4E53-DEB3-4143-B619-4431DB47341F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83B3D50-43FF-4034-9C75-F44939D60378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1613CB4-1088-40F1-A5E8-584284A980D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8337D-BC36-4910-A998-309D277D008C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E91FE31-B442-4EE3-A415-D635A5CCA6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C67B92FB-CE89-479D-97DF-237C77BF307B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A83855-1411-4CA8-A005-5AA58D1CB32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3516D484-83AF-470E-9E9A-AFE3BBE4F75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5A845C-E2CA-4C3A-8019-22C7DC2EA6DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96772",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037979",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4899",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed."
      }, {
        "lang" : "es",
        "value" : "Workstation Pro/Player versiones 12.x anteriores a 12.5.3 de VMware, contiene una vulnerabilidad de seguridad que se presenta en el controlador SVGA. Un atacante puede explotar este problema para bloquear la máquina virtual o activar una lectura fuera de límite. Nota: este problema se puede desencadenar solo cuando el host no tiene tarjeta gráfica o no hay controladores gráficos instalados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE47D4-506C-4132-829B-19A61ED35F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CDB0AC-25B6-4397-9784-386C81C37352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48608C8-B7A6-47DD-8C78-44EB2B0D6C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1D4E53-DEB3-4143-B619-4431DB47341F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83B3D50-43FF-4034-9C75-F44939D60378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8337D-BC36-4910-A998-309D277D008C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E91FE31-B442-4EE3-A415-D635A5CCA6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C67B92FB-CE89-479D-97DF-237C77BF307B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A83855-1411-4CA8-A005-5AA58D1CB32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3516D484-83AF-470E-9E9A-AFE3BBE4F75D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96771",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037979",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4900",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation Pro/Player 12.x anterior a 12.5.3 contiene una vulnerabilidad de puntero NULL que existe en el driver SVGA. Una explotación satisfactoria de este problema permitirá a los atacantes con privilegios de usuario normal hacer caer la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE47D4-506C-4132-829B-19A61ED35F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CDB0AC-25B6-4397-9784-386C81C37352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48608C8-B7A6-47DD-8C78-44EB2B0D6C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1D4E53-DEB3-4143-B619-4431DB47341F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83B3D50-43FF-4034-9C75-F44939D60378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1613CB4-1088-40F1-A5E8-584284A980D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8337D-BC36-4910-A998-309D277D008C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E91FE31-B442-4EE3-A415-D635A5CCA6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C67B92FB-CE89-479D-97DF-237C77BF307B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A83855-1411-4CA8-A005-5AA58D1CB32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3516D484-83AF-470E-9E9A-AFE3BBE4F75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5A845C-E2CA-4C3A-8019-22C7DC2EA6DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96770",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037979",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4902",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host."
      }, {
        "lang" : "es",
        "value" : "Wmware ESXi sin el parche ESXi650-201703410-SG y 5.5 sin el parche ESXi550-201703401-SG; Workstation Pro / Player 12.x anterior a 12.5.5 y Fusion Pro /Fusion 8.x anterior a la 8.5.6 tiene un buffer overflow basado en el heap --heap-- en SVGA. Este problema permitiría a un huésped ejecutar código en el host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "5DB0B91B-F8F6-456F-8FBD-7B98A9ABA95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "17F1AB0A-CD31-4FE7-AE1F-4C6A111D1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC223AC-EB3D-48CF-A6CC-D35E00A38394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "75C8E87E-A869-49F8-89F9-DE64A45CDB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F8878C-F73D-4549-9607-74880176D2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D369F-13B2-42B3-BB74-60AAD0954B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "C05F1671-5010-4BB5-BFA7-217FBB946B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "AB3E0004-E6F1-4C0D-9B24-A7F1AF4BCBD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97163",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4903",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have an uninitialized stack memory usage in SVGA. This issue may allow a guest to execute code on the host."
      }, {
        "lang" : "es",
        "value" : "ESXi versiones 6.5 sin el parche ESXi650-201703410-SG, 6.0 U3 sin el parche ESXi600-201703401-SG, 6.0 U2 sin el parche ESXi600-201703403-SG, 6.0 U1 sin el parche ESXi600-201703402-SG, y 5.5 sin el parche ESXi550-20-20170140; Workstation Pro / Player versión 12.x anterior de 12.5.5; y Fusion Pro / Fusion versiones 8.x anterior a 8.5.6 de  VMware, presenta un uso de memoria de la pila no inicializada en SVGA. Este problema puede permitir a un invitado ejecutar código en el host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "5DB0B91B-F8F6-456F-8FBD-7B98A9ABA95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "17F1AB0A-CD31-4FE7-AE1F-4C6A111D1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC223AC-EB3D-48CF-A6CC-D35E00A38394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "75C8E87E-A869-49F8-89F9-DE64A45CDB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F8878C-F73D-4549-9607-74880176D2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D369F-13B2-42B3-BB74-60AAD0954B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D5E67-78C9-495E-91F0-AF94871E5FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "6D35CDFE-F0E7-43F7-A307-E3BDDE5AEAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC13026-3B5A-4BF0-BDEC-B77338E427E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA70BA-FFCD-4D2D-AD26-95CC62748937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*",
            "matchCriteriaId" : "4C92DD8B-8AB8-40D4-8E86-12FEB055D37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*",
            "matchCriteriaId" : "C58D77F5-CDB2-47DA-A879-BABEBE2E1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C324FB-3989-4A4A-BF5B-C40CA698DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7AC58E-D1F8-4FDF-9A28-61CF6158330A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*",
            "matchCriteriaId" : "489EE0F6-5510-470E-8711-DC08B4AFB4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*",
            "matchCriteriaId" : "6719ED6F-CBC3-4B1E-9343-23DC3BA15FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAA48A9-9319-4104-B151-D529E5EBF0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "D16CD918-5075-4975-8B1E-21D8AD35A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "7A38CD8E-494D-4E0E-A300-8550FC81FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40ABE8-8DED-4633-A34C-00DF5D510E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "1736B975-089B-413C-8CA0-5524B957EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4DCBF6-7189-497A-B923-08574443172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "16FBA646-0B5E-44A7-BB12-29D5C611AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "29F57497-7B48-4D0C-B8F5-8D33062BECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE96C7-C489-4D14-990B-8524627A23D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "AD82C093-FD98-45DE-9EE6-A05E81A1FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "08789F9E-CDC7-4F89-B925-92C9E3AE5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "26ABB84C-B4BF-424E-8F4C-D2B6BE0AC79E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "621C203B-4B66-49CC-A35D-D7703109BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "3261BDEF-D89C-41D9-A360-EC36EAB17490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*",
            "matchCriteriaId" : "5170A4F6-02B7-4225-B944-73DB5A4D332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*",
            "matchCriteriaId" : "62A97DBA-A56B-4F0B-B9C4-44B5166681AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*",
            "matchCriteriaId" : "806C8BE6-A2BE-45BE-BEF2-396BEB16FCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6211E-134A-484E-8444-FBB5070B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7B05B3-4076-4A44-B9A6-A44419F175C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1636B4-6E79-42D7-AA62-5EE43412B43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0377D0-BBED-41BF-80C5-58414ED413EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*",
            "matchCriteriaId" : "6495283C-D18A-4DDA-852E-46F2273D6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "09DEFEE5-5E9E-4F3A-A245-3E8E2B291339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A97A3-65DB-4697-9CF1-B4F5E4E4132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*",
            "matchCriteriaId" : "17A84E0A-1429-467F-9EE1-FCA062392DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*",
            "matchCriteriaId" : "C591163D-64BC-403B-A460-5B2258EC2F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*",
            "matchCriteriaId" : "ED932B89-D34D-4398-8F79-AF98987CAFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD365A0-0B09-4EC2-9973-691144C99507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE64DC7-A9D1-416F-89BF-D9F8DD8174AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*",
            "matchCriteriaId" : "0E198AE4-A6A3-4875-A7DA-44BE9E1B280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD5BA0-8180-484D-8308-B0862B6E9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EB9A-A908-42D1-A6BC-E38E861BBECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*",
            "matchCriteriaId" : "651EDCAA-D785-464D-AE41-425A69F6FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3C704C-9D60-4F72-B482-07F209985E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFE956-4391-4B71-BD0B-96A008A624B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "409778CD-9AB3-4793-A5F5-8D8657F81442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA75DB-B6BE-4E75-89B6-C69E96CBD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC45A8B-6DE0-465F-9644-B75A09394F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "7A265671-BCB0-401A-A1E8-500F9D41492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "83168067-1E43-4186-9B15-3FC702C6583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*",
            "matchCriteriaId" : "8C122DB4-8410-4C4E-87BE-EB3175CE182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*",
            "matchCriteriaId" : "C76ED78D-0778-4269-938E-BB7586C1E44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F78C5-E995-4E37-83C5-5B6A1D39E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E842D-AF37-4641-AD05-B91F250E7487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EAC87-32FD-4553-B71D-181F2C66AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F0D62-4C51-46D6-A6C4-E479BE6B2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*",
            "matchCriteriaId" : "865D3042-68ED-44B9-A036-9433F7463D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4FEF78-D2DA-4CCE-BB81-7E2090ED545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*",
            "matchCriteriaId" : "11AE3F61-9655-4B20-96E1-92112BE2BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE35166-3019-450B-9C69-484E4EDE5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*",
            "matchCriteriaId" : "D892B066-381B-4F46-8363-7BA1647BBCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*",
            "matchCriteriaId" : "710DB381-5504-4493-8D0A-17AB8E5A903B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*",
            "matchCriteriaId" : "42AAA3B7-B74D-4B67-8BD3-1D9B5ED1E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*",
            "matchCriteriaId" : "33CBCA55-010E-4E84-B2F8-F9B53D5A3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*",
            "matchCriteriaId" : "95A73B4B-F9B3-4D66-9668-902902C73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*",
            "matchCriteriaId" : "8D14D51D-E2EA-4826-8C6E-AF1C15F12384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*",
            "matchCriteriaId" : "BED100A1-9D59-48BE-91D4-0C8F2D678E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*",
            "matchCriteriaId" : "660B51F2-DFE0-49F6-AD2A-6E94B20F4019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "C05F1671-5010-4BB5-BFA7-217FBB946B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "AB3E0004-E6F1-4C0D-9B24-A7F1AF4BCBD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97160",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4904",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Denial of Service of the guest on ESXi 5.5."
      }, {
        "lang" : "es",
        "value" : "El controlador XHCI en ESXi versiones 6.5 sin parche ESXi650-201703410-SG, 6.0 U3 sin parche ESXi600-201703401-SG, 6.0 U2 sin parche ESXi600-201703403-SG, 6.0 U1 sin parche ESXi600-201703402-SG, y 5.5 sin parche ESXi550 -201703401-SG;  Workstation Pro / Player versiones 12.x anteriores a 12.5.5; y Fusion Pro / Fusion versiones 8.x anteriores a 8.5.6 de VMware, presenta un uso de memoria no inicializada. Este problema puede permitir a un invitado ejecutar código en el host. El problema es reducido a una Denegación de Servicio del invitado en ESXi versión 5.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "C05F1671-5010-4BB5-BFA7-217FBB946B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "AB3E0004-E6F1-4C0D-9B24-A7F1AF4BCBD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "5DB0B91B-F8F6-456F-8FBD-7B98A9ABA95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "17F1AB0A-CD31-4FE7-AE1F-4C6A111D1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC223AC-EB3D-48CF-A6CC-D35E00A38394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "75C8E87E-A869-49F8-89F9-DE64A45CDB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F8878C-F73D-4549-9607-74880176D2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D369F-13B2-42B3-BB74-60AAD0954B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97165",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4905",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-07T18:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
      }, {
        "lang" : "es",
        "value" : "ESXi versiones 6.5 sin parche ESXi650-201703410-SG, 6.0 U3 sin parche ESXi600-201703401-SG, 6.0 U2 sin parche ESXi600-201703403-SG, 6.0 U1 sin parche ESXi600-201703402-SG, 5.5 sin parche ESXi550-201701401-SG;  Workstation Pro / Player versiones 12.x anteriores a 12.5.5; y Fusion Pro / Fusion versiones 8.x anteriores a 8.5.6 de VMware, presenta un uso de memoria no inicializada. Este problema puede conducir a un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "C05F1671-5010-4BB5-BFA7-217FBB946B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.6",
            "matchCriteriaId" : "AB3E0004-E6F1-4C0D-9B24-A7F1AF4BCBD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "5DB0B91B-F8F6-456F-8FBD-7B98A9ABA95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.5",
            "matchCriteriaId" : "17F1AB0A-CD31-4FE7-AE1F-4C6A111D1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC223AC-EB3D-48CF-A6CC-D35E00A38394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "75C8E87E-A869-49F8-89F9-DE64A45CDB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F8878C-F73D-4549-9607-74880176D2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D369F-13B2-42B3-BB74-60AAD0954B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97164",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7965",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-06-07T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer en el ejecutable del Software de Programación AlTracePrint.exe, en SoMachine HVAC versión v2.1.0 de Schneider Electric para el controlador Modicon M171/M172."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:somachine_hvac:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F523B8A-A5DE-40F0-9D17-4DB519107368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98449",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7966",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-06-07T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro de DLL en el software de programación de SoMachine HVAC versión v2.1.0 de Schneider Electric, permite que un atacante remoto ejecute código arbitrario en el sistema apuntado. La vulnerabilidad existe debido a la carga inapropiada de una DLL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:somachine:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20558BC2-6E75-4CA5-81AD-27652926A17A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-125-02/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98446",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-125-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-07T19:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de tipo XML external entity (XXE) en la funcionalidad import playlist en Subsonic versión 6.1.1, podría permitir a los atacantes remotos conducir ataques de tipo server-side request forgery (SSRF) por medio de un archivo playlist XSPF especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subsonic:subsonic:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1EA39E-CFA6-4FCA-93A2-BA6938702E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142795/Subsonic-6.1.1-XML-External-Entity-Attack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42119/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142795/Subsonic-6.1.1-XML-External-Entity-Attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42119/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T12:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented \"Block applications\" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application."
      }, {
        "lang" : "es",
        "value" : "Net Monitor for Employees Pro hasta la versión 5.3.4 presenta una ruta de servicio sin comillas, que permite omitir la función de seguridad de su objetivo de diseño documentado \"Block applications\". El atacante local debe tener privilegios para escribir en el archivo program.exe en un directorio protegido, como el directorio %SYSTEMDRIVE%, y por lo tanto el problema no se interpreta como una escalada directa de privilegios. Sin embargo, el atacante local podría tener el objetivo de ejecutar program.exe aunque program.exe sea una aplicación bloqueada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduiq:net_monitor_for_employees:*:*:*:*:professional:*:*:*",
            "versionEndIncluding" : "5.3.4",
            "matchCriteriaId" : "FE95B173-AE60-4F82-AC41-0A737B97B2F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42141/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42141/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4901",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion."
      }, {
        "lang" : "es",
        "value" : "La función drag-and-drop (DnD) en Workstation versiones 12.x y anteriores a 12.5.4 y Fusion versiones 8.x y anteriores a 8.5.5 de VMware, presenta una vulnerabilidad de acceso a la memoria fuera de límites. Esto puede permitir que un invitado ejecute código en el sistema operativo que ejecuta Workstation o Fusion."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BBD4C7-C851-4D40-B6DD-92873319CD28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6759F732-8E65-49F7-B46C-B1E3F856B11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C182F-A8D2-4ABF-B202-261056EF93D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768A4D3B-CC19-4A3A-91D5-9C974F7F0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C5D443-A330-40DF-939B-10597147CE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BF8A2A-295D-44D6-A38E-D4C35437F380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574DB25B-51E1-466A-8089-5108DB5D6FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96881",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038025",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0005.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4907",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway."
      }, {
        "lang" : "es",
        "value" : "Unified Access Gateway (versiones 2.5.x, 2.7.x, 2.8.x anteriores a 2.8.1) y Horizon View (versiones 7.x anteriores a 7.1.0, versiones 6.x anteriores a 6.2.4) de VMware, contienen una vulnerabilidad de desbordamiento de búfer de la pila que puede permitir a un atacante remoto ejecutar código en la puerta de enlace de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370FCB86-72ED-47AB-A414-A12E6C970BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67EA006A-76A5-489E-BD3E-FAFC00AB63C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75798329-EAC2-4B6F-A943-9EB6F01B5145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DEE3EA-30C8-4653-96B3-17D9F66AFDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7C278-5A1D-41A3-AEFB-10AA859DEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155B09B1-D94A-42C6-89DE-76180968C5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32840997-8DA1-481A-BC2B-6A5D3335826D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5252980E-77DE-41C9-B829-775BB929FB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB3A1FE-4DB8-4536-B94F-21C4560D7BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA685CC7-AD8E-4EB6-A6B7-46F126BDE92E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:unified_access_gateway:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D2DF40-13F6-4A11-B96B-002039F16C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:unified_access_gateway:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4B7AA9-E5F1-4388-A083-D1817EE8FA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:unified_access_gateway:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EAAC0B8-C653-40F3-B2E9-7C5DED57E81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:unified_access_gateway:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AFC21D-88E4-4AF0-9DA2-17DCBEE12D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:unified_access_gateway:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F416E-BD1C-4D9F-B3E9-BB05EB421216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97914",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4908",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "Workstation (versiones 12.x anteriores a 12.5.3) y Horizon View Client (versiones 4.x anteriores a 4.4.0) de VMware, contienen varias vulnerabilidades de desbordamiento de búfer de la pila en el analizador JPEG2000 en la biblioteca TPView.dll. En Workstation, esto puede permitir a un invitado ejecutar código o realizar una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir a un escritorio de View ejecutar código o realice una denegación de servicio en el sistema operativo Windows que ejecuta Horizon View Client. La explotación solo es posible si la impresión virtual ha sido habilitada. Esta funcionalidad no está habilitada por defecto en Workstation, pero está habilitada por defecto en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF333D9B-18E5-4753-B6FA-5AE9001F6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC91776C-7B4E-4242-B8F8-EAC4D18C2748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D6C48-2873-4070-A433-109AD21036E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E2C09-1BFD-46D5-A56A-987D6739BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97912",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4909",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "Workstation (versiones 12.x anteriores a 12.5.3) y Horizon View Client (versiones 4.x anteriores a 4.4.0) de VMware, contienen una vulnerabilidad de desbordamiento de búfer de la pila en el analizador TrueType Font (TTF) en la biblioteca TPView.dll. En Workstation, esto puede permitir a un invitado ejecutar código o realizar una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que un escritorio de View ejecute código o realice una denegación de servicio en el sistema operativo Windows que ejecuta Horizon View Client. La explotación solo es posible si la impresión virtual ha sido habilitada. Esta funcionalidad no está habilitada por defecto en Workstation, pero está habilitada por defecto en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF333D9B-18E5-4753-B6FA-5AE9001F6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC91776C-7B4E-4242-B8F8-EAC4D18C2748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D6C48-2873-4070-A433-109AD21036E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E2C09-1BFD-46D5-A56A-987D6739BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97911",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4910",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "Workstation (versiones 12.x anteriores a 12.5.3) y Horizon View Client (versiones 4.x anteriores a 4.4.0) de VMware, contienen varias vulnerabilidades de lectura fuera de límites en el analizador JPEG2000 en la biblioteca TPView.dll. En Workstation, esto puede permitir a un invitado ejecutar código o realizar una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que un escritorio de View ejecute código o realice una denegación de servicio en el sistema operativo Windows que ejecuta Horizon View Client. La explotación solo es posible si la impresión virtual ha sido habilitada. Esta funcionalidad no está habilitada por defecto en Workstation, pero está habilitada por defecto en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF333D9B-18E5-4753-B6FA-5AE9001F6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC91776C-7B4E-4242-B8F8-EAC4D18C2748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D6C48-2873-4070-A433-109AD21036E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E2C09-1BFD-46D5-A56A-987D6739BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97913",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4911",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "Workstation (versiones 12.x anteriores a 12.5.3) y Horizon View Client (versiones 4.x anteriores a 4.4.0) de VMware, contienen varias vulnerabilidades de escritura fuera de límites en el analizador JPEG2000 en la biblioteca TPView.dll. En Workstation, esto puede permitir a un invitado ejecutar código o realizar una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que un escritorio de View ejecute código o realice una denegación de servicio en el sistema operativo Windows que ejecuta Horizon View Client. La explotación solo es posible si la impresión virtual ha sido habilitada. Esta funcionalidad no está habilitada por defecto en Workstation, pero está habilitada por defecto en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF333D9B-18E5-4753-B6FA-5AE9001F6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC91776C-7B4E-4242-B8F8-EAC4D18C2748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D6C48-2873-4070-A433-109AD21036E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E2C09-1BFD-46D5-A56A-987D6739BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97916",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4912",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "Workstation (versiones 12.x anteriores a 12.5.3) y Horizon View Client (versiones 4.x anteriores a 4.4.0) de VMware, contienen varias vulnerabilidades de lectura fuera de límites en el analizador TrueType Font (TTF) en la biblioteca TPView.dll. En Workstation, esto puede permitir a un invitado ejecutar código o realizar una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que un escritorio de View ejecute código o realice una denegación de servicio en el sistema operativo Windows que ejecuta Horizon View Client. La explotación solo es posible si la impresión virtual ha sido habilitada. Esta funcionalidad no está habilitada por defecto en Workstation, pero está habilitada por defecto en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF333D9B-18E5-4753-B6FA-5AE9001F6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC91776C-7B4E-4242-B8F8-EAC4D18C2748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D6C48-2873-4070-A433-109AD21036E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E2C09-1BFD-46D5-A56A-987D6739BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97921",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4913",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T13:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "Workstation (versiones 12.x anteriores a 12.5.3) y Horizon View Client (versiones 4.x anteriores a 4.4.0) de VMware, contienen una vulnerabilidad de desbordamiento de enteros en el analizador True Type Font en la biblioteca TPView.dll. En Workstation, esto puede permitir a un invitado ejecutar código o realizar una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que un escritorio de View ejecute código o realice una denegación de servicio en el sistema operativo Windows que ejecuta Horizon View Client. La explotación solo es posible si la impresión virtual ha sido habilitada. Esta funcionalidad no está habilitada por defecto en Workstation, pero está habilitada por defecto en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF333D9B-18E5-4753-B6FA-5AE9001F6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC91776C-7B4E-4242-B8F8-EAC4D18C2748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D6C48-2873-4070-A433-109AD21036E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E2C09-1BFD-46D5-A56A-987D6739BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1659EFD4-97A7-4DBC-91DA-0B9EE18874F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97920",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6638",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-08T13:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. The attacker would need valid user credentials to exploit this vulnerability. This vulnerability affects all Cisco AnyConnect Secure Mobility Client for Windows software versions prior to 4.4.02034. Cisco Bug IDs: CSCvc97928."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en cómo los archivos DLL son cargados con AnyConnect Secure Mobility Client de Cisco para Windows, podría permitir a un atacante local autenticado instalar y ejecutar un archivo ejecutable con privilegios equivalentes a la cuenta SYSTEM de Microsoft Windows. La vulnerabilidad es debido a la comprobación de entrada incompleta de la ruta (path) de acceso y los nombres de archivo de un archivo DLL antes que sea cargado. Un atacante podría explotar esta vulnerabilidad mediante la creación de un archivo DLL malicioso e instalarlo en un directorio específico del sistema. Una explotación apropiada podría permitir al atacante ejecutar comandos en el host subyacente de Microsoft Windows con privilegios equivalentes a la cuenta SYSTEM. El atacante necesitaría credenciales de usuario válidas para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a todas las versiones de software AnyConnect Secure Mobility Client de Cisco para Windows versiones anteriores a 4.4.02034. ID de bug de Cisco: CSCvc97928."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.00243",
            "matchCriteriaId" : "02ECDB88-47A5-4CF9-80CC-9804995B0B7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98938",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038627",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-anyconnect",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-anyconnect",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6639",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-08T13:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the lack of authentication and authorization mechanisms for a debugging tool that was inadvertently enabled in the affected software. An attacker could exploit this vulnerability by remotely connecting to the debugging tool via TCP. A successful exploit could allow the attacker to access sensitive information about the affected software or execute arbitrary code with root privileges on the affected system. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software Releases 10.1(1) and 10.1(2) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd09961."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad role-based access control (RBAC) de Prime Data Center Network Manager (DCNM) de Cisco, podría permitir a un atacante remoto no identificado acceder a información confidencial o ejecutar código arbitrario con privilegios root en un sistema afectado. La vulnerabilidad es debido a la falta de mecanismos de identificación y autorización para una herramienta de depuración que se habilitó inadvertidamente en el software afectado. Un atacante podría explotar esta vulnerabilidad mediante la conexión remota a la herramienta de depuración por medio de TCP. Una explotación con éxito podría permitir al atacante acceder a información confidencial sobre el software afectado o ejecutar código arbitrario con privilegios root en el sistema afectado. Esta vulnerabilidad afecta al Programa Prime Data Center Network Manager (DCNM) de Cisco versiones 10.1(1) y 10.1(2) para plataformas de Microsoft Windows, Linux y Virtual Appliance. ID de bug de Cisco: CSCvd09961."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_data_center_network_manager:10.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAD8F8D-B121-449E-A6A5-B74D9A7FDA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_data_center_network_manager:10.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D2F2CD-795C-4E34-B0E3-CE3D3205FFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_data_center_network_manager:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3100A1-737E-4DF3-9EE2-9B492DC5AD5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98935",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038626",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03762en_us",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03762en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6640",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-08T13:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el programa Prime Data Center Network Manager (DCNM) de Cisco podría permitir a un atacante remoto no identificado iniciar sesión en la consola administrativa de un servidor DCNM usando una cuenta que tenga una contraseña estática por defecto. La cuenta podría tener privilegios de nivel root o system. La vulnerabilidad se presenta porque el programa afectado tiene una cuenta de usuario predeterminada que presenta una contraseña estática por defecto. La cuenta de usuario es creada automáticamente cuando se instala el programa. Un atacante podría explotar esta vulnerabilidad al conectarse remotamente a un sistema afectado e iniciar sesión en el programa  afectado usando las credenciales para esta cuenta de usuario predeterminada. Una explotación con éxito podría permitir al atacante usar esta cuenta de usuario predeterminada iniciar sesión en el programa afectado y conseguir acceso a la consola administrativa de un servidor DCNM. Esta vulnerabilidad afecta al Programa Prime Data Center Network Manager (DCNM) de Cisco versiones anteriores a 10.2(1) para las plataformas Microsoft Windows, Linux y Virtual Appliance. IDs de Bug de Cisco: CSCvd95346."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_data_center_network_manager:10.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAD8F8D-B121-449E-A6A5-B74D9A7FDA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_data_center_network_manager:10.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D2F2CD-795C-4E34-B0E3-CE3D3205FFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_data_center_network_manager:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3100A1-737E-4DF3-9EE2-9B492DC5AD5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98937",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038625",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6648",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-08T13:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of flow-control mechanisms within the software. An attacker could exploit this vulnerability by sending a flood of SIP INVITE packets to the affected device. An exploit could allow the attacker to impact the availability of services and data of the device, including a complete DoS condition. This vulnerability affects the following Cisco TC and CE platforms when running software versions prior to TC 7.3.8 and CE 8.3.0. Cisco Bug IDs: CSCux94002."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Session Initiation Protocol (SIP) del programa TelePresence Codec (TC) y Collaboration Endpoint (CE) de Cisco, podría permitir a un atacante remoto no  identificado causar que un endpoint de TelePresence se vuelva a cargar inesperadamente, resultado una condición denegación de servicio (DoS). La vulnerabilidad es debido a la falta de mecanismos de control de flujo dentro del programa. Un atacante podría explotar esta vulnerabilidad mediante el envío de un flujo de paquetes INVITE de SIP hacia el dispositivo afectado. Una vulnerabilidad podría permitir al atacante afectar la disponibilidad de los servicios y datos del dispositivo, incluida una condición DoS completa. Esta vulnerabilidad afecta a las siguientes plataformas TC y CE de Cisco cuando se ejecutan versiones de programas anteriores a TC 7.3.8 y CE 8.3.0. IDs de Bug de Cisco: CSCux94002."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_ce_software:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7981082F-B80B-49A5-8AAE-BFA377ED9460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D19C90-19D2-46E5-BDA7-F7125F7A2878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:3.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E8ECB-9A40-4B2A-B1E1-EB9CB69D322A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357A8344-F77C-4D95-AFFC-930E3E177630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052FEBF8-B775-4D8E-B958-A6A17E4DFA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9747F834-034D-438B-8BE5-5B2BDD8FFA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F8F06D-174D-4FEB-880F-825019FF2415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FF142C-42C7-4BD0-9C30-C3B044F6BA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72362874-2BF7-48D4-9C3E-1DC151AA118B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2974B301-5F64-453C-A2A6-E231A998F9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE3BCD5-7472-45A2-8F62-834A90941EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB81C8F-46C1-4A87-B5B5-E63AE9654399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:4.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6349908-7468-43BA-ACF2-4166FC95405C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A19AC9B-91B4-4691-BFB7-BEC9A3CD2678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.0.2-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47981023-90C1-46D1-BCD6-6BE64364C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DB0369-FA22-43FE-9E0B-B370B44490B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94F378C-506E-4C0A-A23A-1F71ABDBD7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.3-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982DC39F-5FA0-4450-8C36-447270BFFC36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB451E1B-9B64-434B-BA1E-FFE9CD472CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.4-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536F8A9D-59C6-42E4-B672-8B1D909F8535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D46D718-4708-4018-A1E2-2094519E9E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.5-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1B1533-30F2-40AB-8429-2E7606EC06CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079634DC-D13E-41A3-87E0-F694C3315647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.6-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B5EEDB-7471-45C2-956B-466626E9EDD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36912424-2973-4550-9EFD-FC344EC55933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.7-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9729B0D4-F6E5-4683-947B-D73C6B147897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C5EE1-0733-499E-92D0-4CFFFD370E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B046A6F-BEAA-4052-8896-0FA33B6BEEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:5.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC20694E-FD91-4932-9AB5-1E1C8DD01BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856DDAE1-C3E6-4F70-946B-515F7B308517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.0-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9056D02-E7C8-47B3-8CEF-E485CA6EC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5198E89F-9F04-4C1E-9EA9-EFE2C118788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.1-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70496628-EF39-4E54-BC9E-E2D9BDC00C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50B4A0E-7851-4C1A-AAA7-2E4EF655056D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5A78C8-E5BA-44B8-91EE-B07E400EE7E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F177059-DA78-4F84-AA72-B6C5CA212BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01392813-2BC7-4A4E-AF57-443E886E2643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B421E06-5487-48FA-A602-2EC81C31F341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.0-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33CFCB77-65F1-48BF-8057-1F9C56BF7DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F940F7CF-D091-4212-8E9C-0FD538F00992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.1-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D68BFBE-50A4-4565-BCDA-29BF2B5B962C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3C002A-8EA4-4731-A546-CA16E4D0BD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.2-cucm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12DD1C-DF28-4B4B-93FB-6E346D810BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DD8580-644F-4640-8127-CC345DC5CDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32A35F-D1AF-490E-A1CB-612E5BC2E9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C20678-F9B0-488C-B1B4-C04005F5E3FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB861F3A-CA8F-493B-B63E-C27007D7A498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72D4048-53D6-4B3A-8148-4C7F5354D3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49545BCD-C2F3-46EC-9F77-34639054E46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB8B703-A9BD-4A63-BC62-3F031440B00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739D968B-C97E-4C1D-A4F0-CC1FA0956E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9063887-80F9-4898-8F69-36178D9C4BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873E6F91-E3A8-4B6F-87F0-2FC843A0521F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACE9AFC-B520-44A9-90E9-0921AA25FA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "383A9D84-B1CA-42E1-B863-42B7F30A0DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E1EDB9-0C99-4067-BA23-94EA3225C0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5B5124-D5AF-46E4-81DF-A63DB4A3141D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0012942-BB39-42EE-AB7F-46E503140016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6627DC6B-166F-4DC9-A330-4C6063C3AD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F58A78-36B5-4CF0-B71D-DF451479F451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B87019A-1277-483E-AAD1-17A53FAD7121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3501B65-DF7C-4E58-894A-E0280A68DA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BCB121-C70F-44BC-80EE-415BDCF0E3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300EE45-2582-41E9-9F7F-4CB81D51E964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB135B8-A4D2-4DDA-96F4-B3149441567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDC6BAF-3133-47A9-9149-FD92BE55C130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc_software:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD1A653-986F-472F-A9B0-904653661DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98934",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038624",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-tele",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-tele",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T13:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file."
      }, {
        "lang" : "es",
        "value" : "Craft CMS anterior a versión 2.6.2982, permite un potencial vector de ataque de tipo XSS cargando un archivo SVG malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2981",
            "matchCriteriaId" : "DDCEA611-C8AD-484A-B147-7DFD59C891F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://craftcms.com/changelog#2-6-2982",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/872599894912937984",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42143/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://craftcms.com/changelog#2-6-2982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/CraftCMS/status/872599894912937984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42143/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV."
      }, {
        "lang" : "es",
        "value" : "atmail anterior a versión 7.8.0.2, presenta un problema de tipo CSRF, permitiendo a un atacante cargar e importar usuarios por medio de CSV."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atmail:atmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.0.1",
            "matchCriteriaId" : "475554FA-203F-43CE-9672-A479B53D8B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T14:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails."
      }, {
        "lang" : "es",
        "value" : "atmail anterior a versión 7.8.0.2, presenta un problema de tipo CSRF, permitiendo a un atacante cambiar el nombre de host SMTP y secuestrar todos los correos electrónicos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atmail:atmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.0.1",
            "matchCriteriaId" : "475554FA-203F-43CE-9672-A479B53D8B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account."
      }, {
        "lang" : "es",
        "value" : "atmail anterior a versión 7.8.0.2, presenta un problema de tipo CSRF, permitiendo a un atacante crear una cuenta de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atmail:atmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.0.1",
            "matchCriteriaId" : "475554FA-203F-43CE-9672-A479B53D8B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T14:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file."
      }, {
        "lang" : "es",
        "value" : "La función r_config_set en el archivo libr/config/config.c en radare2 versión 1.5.0, permite a los atacantes remotos causar una denegación de servicio (uso de memoria previamente liberada y bloqueo de aplicación) por medio de un archivo DEX especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6336FC-AB50-4F45-B01E-2BC3BA758117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/f85bc674b2a2256a364fe796351bc1971e106005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7698",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/f85bc674b2a2256a364fe796351bc1971e106005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T16:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized Java data."
      }, {
        "lang" : "es",
        "value" : "Los unmarshallers AMF en Red5 Media Server en versiones anteriores a la 1.0.8  no restringen las clases para las que realizan deserialización, lo que permite que atacantes remotos ejecuten código arbitrario mediante datos Java serializados manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "93EA9637-BEEE-4BFF-AF94-98F1C600B8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.2:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "5714ECA1-B358-417F-8D88-C559535DBFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45060D79-5F50-4C97-9913-A5EBBFE3EE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF06FE5B-803A-4448-B47A-89BA5E4C413E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FCA077-ADAC-4356-83C6-2ECFA604FB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732B294D-DD73-4325-8F0B-C4A3315F5034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "71B5B0AC-0AE8-4B0C-8773-53CFE5A65C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FE1163-39C6-48F6-A7DE-9FE53FC4663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "352F4573-E09A-4049-9148-7A13C8EC8DC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5777BF-A550-4986-B2CA-68231DB49E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "027563CA-F625-41E3-829F-BE3FAD9CF3F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FBBC5B-9AF0-4476-9B73-7DD5D3A9DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA0D336-802C-4E15-AA3D-54DF0F7910F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.7:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE3149-977A-42B5-808E-BFF1C217DC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "C671E0E0-393F-4A07-9639-4E45374AC1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "247E2E41-9236-4155-9A3F-36D1F7D6946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "697905ED-3667-4645-A947-23AE3180A668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "FC65784E-54E2-4ACA-BD41-F3F91EC54BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "2F653DCF-54C2-4909-BC73-60873DE49F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC7EAFC-508C-4A0E-855D-AC6630F4C2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBA3E03-5781-492B-A70C-F54E2AB36FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "419ED3FB-0E87-4A54-89E5-236B087FA92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B51B2-7662-4EDF-B09E-A69A508615F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "770AF897-CADC-4445-8FFE-534EC45FC678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8BD3A-499A-4CE6-B68E-E4740AE7224B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C63DA6-AF81-482C-9C7E-36B27FD7B335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:red5:media_server:1.0.8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1682A9-7C56-4BFF-BE18-62FA25ED8AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/22/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/22/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T16:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file."
      }, {
        "lang" : "es",
        "value" : "Pruebas sin especificar en Lynis en versiones anteriores a la 2.5.0 permiten que usuarios locales escriban en archivos arbitrarios o que obtengan privilegios mediante un ataque de vínculo simbólico en un archivo temporal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisofy:lynis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "759F8CA2-6273-4737-946D-3C49E943570A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99288",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cisofy.com/security/cve/cve-2017-8108/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CISOfy/lynis/releases/tag/2.5.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJXMPYANXHI25NQZ36QMXNXANDRAA5YG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJHLLWNW7NASVXCK24YBSIUQQPWGCMB5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cisofy.com/security/cve/cve-2017-8108/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CISOfy/lynis/releases/tag/2.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJXMPYANXHI25NQZ36QMXNXANDRAA5YG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJHLLWNW7NASVXCK24YBSIUQQPWGCMB5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T16:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El plugin gmp en strnogSwan anterior a 5.5.3 no valida adecuadamente las claves públicas RSA tras la llamada mpz_powm_sec, lo que podría permitir a peers remotos causar una denegación de servicio (excepción de punto flotante y cierre inesperado del proceso) a través de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.2",
            "matchCriteriaId" : "86691AB7-BE63-4BD7-B6EB-B0E063BE7775"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3866",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3301-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3301-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T16:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El analizador ASN.1 en strongSwan anterior a versión 5.5.3, maneja inapropiadamente los tipos CHOICE cuando el plugin x509 está habilitado, lo que permite a los atacantes remotos causar una denegación de servicio (bucle infinito) por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.2",
            "matchCriteriaId" : "86691AB7-BE63-4BD7-B6EB-B0E063BE7775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3866",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98756",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3301-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3301-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T16:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer."
      }, {
        "lang" : "es",
        "value" : "QEMU (también conocido como Quick Emulator), cuando se integra con soporte de emulación e1000e NIC, permite que usuarios privilegiados invitados locales del sistema operativo provoquen una denegación de servicio (bucle infinito) mediante vectores relacionados con la colocación de la cabecera receive/transmit del descriptor TDH/RDH???? fuera del búfer del descriptor asignado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=4154c7e03fa55b4cf52509a83d50d6c09d743b7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/31/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1452620",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=4154c7e03fa55b4cf52509a83d50d6c09d743b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/31/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1452620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-08T16:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505."
      }, {
        "lang" : "es",
        "value" : "QEMU (también conocido como Quick Emulator), cuando se integra con soporte USB OHCI Emulation, permite que usuarios invitados locales del sistema operativo provoquen una denegación de servicio (bucle infinito) aprovechando un valor de retorno incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=26f670a244982335cc08943fb1ec099a2c81e42d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/01/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1457697",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=26f670a244982335cc08943fb1ec099a2c81e42d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/01/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1457697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4918",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-06-08T19:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed."
      }, {
        "lang" : "es",
        "value" : "VMware Horizon View Client (versiones 2.x, 3.x y versiones 4.x anteriores a 4.5.0), contiene una vulnerabilidad de inyección de comandos en el script de inicio del servicio. La explotación con éxito de este problema puede permitir a los usuarios sin privilegios escalar sus privilegios a root en el sistema Mac OSX donde está instalado el cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0C7B1C-8A3F-41B2-B1CC-933C4DC52DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A63377-0F12-46FC-86BC-C3BEE9826B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C87D08-7E5A-482D-82D8-0317442D4B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47773EA-EB88-4A2A-B477-A8E10FB4E276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E011A0-8338-4010-B7C1-3224CE5D0904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB0B791-BBEB-42ED-A6AF-52FDBE742159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6365FCB-FE92-44B0-9A1D-908DCEFEC746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2E9162-F007-4A4D-B441-565CF3EBB32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA43741-D14F-40F9-9A2A-A31D15636E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6DFB43-D139-4AAF-926D-C6C135EEB906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E8703D-B33B-484B-BF7F-4057842E4D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B15310-DF93-4757-A41C-6E29BDEF61D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D7F936-7C2B-4A1D-8AAC-F1FE3ACC70C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE9659-0F4C-417A-BCDA-023E43F6F78E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98984",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038642",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0011.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1140",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-08T21:29:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "Business Process Manager versiones 8.0 y 8.5 de IBM, son vulnerables a un problema de tipo cross-site-scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, lo que altera la funcionalidad prevista conllevando potencialmente a la divulgación de credenciales dentro de una sesión de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*",
            "matchCriteriaId" : "6131DC1F-CBA6-4025-B5A5-98307274FA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*",
            "matchCriteriaId" : "439A4F14-76E6-4A21-A23C-D3DA243585A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2016.12:*:*:*:*:*:*",
            "matchCriteriaId" : "79A27F7F-9EAE-4E2B-B5E8-2C82380D9C70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999133",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97322",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121905",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1179",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-08T21:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123431."
      }, {
        "lang" : "es",
        "value" : "BigFix Compliance Analytics versión 1.9.79 de IBM, utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. ID de IBM X-Force: 123431."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_security_compliance_analytics:1.9.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF6632-7F43-4E62-BA33-DBB4F91A0432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004161",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98910",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123431",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1319",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-08T21:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookie. IBM X-Force ID: 125731."
      }, {
        "lang" : "es",
        "value" : "Tivoli Federated Identity Manager versión 6.2 de IBM, está afectado por una vulnerabilidad debido a la falta de un atributo seguro en la sesión cookie cifrada (SSL). ID de IBM X-Force: 125731."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E508843E-DEA8-433D-AFD5-2730D2745E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F674F64E-F51F-4F5E-AFCD-952958E66FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F48368-9617-4EE6-BF7A-6873229C0D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22002871",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038504",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125731",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22002871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-09T00:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342."
      }, {
        "lang" : "es",
        "value" : "El producto Sophos Web Appliance versiones anteriores a 4.3.2, presenta un problema de tipo XSS en la página de redireccionamiento FTP, también se conoce como NSWA-1342."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1.4",
            "matchCriteriaId" : "DBBBCA32-5226-416E-9CA2-A885C93E2BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://swa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://swa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2165",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "GroupSession en versiones 4.6.4 y anteriores permite que atacantes remotos autenticados omitan las restricciones de acceso para obtener información sensible como emails mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groupsession:groupsession:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.4",
            "matchCriteriaId" : "1D5DC875-A0BE-47C0-8FEC-696AA3CA5DF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN42164352/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98719",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN42164352/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2176",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en archivos instaladores de salvapantallas (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) disponibles antes del 25 de mayo de 2017, permite alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasdf:screensavers:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3EC0FB-D3B1-4703-BDC5-DB4BDFE8AB6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN41185163/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mod.go.jp/asdf/information/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98823",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN41185163/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mod.go.jp/asdf/information/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2177",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no seguro en el instalador del Software Shogyo Touki Denshi Ninsho versión 1.7 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shogyo:touki_denshi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "26068DD7-0597-4112-AF92-A2AF82DAFF1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN92422409/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.moj.go.jp/MINJI/minji06_00027.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN92422409/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.moj.go.jp/MINJI/minji06_00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2178",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no seguros  en el Instalador de sistema de licitación electrónica y de apertura de ofertas. disponible antes del 25 de mayo de 2017 permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atla:electronic_tendering_and_bid_opening_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20D1CAC-E0F8-454E-B27F-FCBC3EF62146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN75514460/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98725",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN75514460/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2179",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors, a different vulnerability than CVE-2017-2181 and CVE-2017-2182."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Application versión 3.0.2 y anteriores, permite la ejecución de código remota por medio de vectores no especificados, una vulnerabilidad diferente de CVE-2017-2181 y CVE-2017-2182."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "C9256B70-E1AC-478F-813E-8D57D792027D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN80238098/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN80238098/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2180",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Application versión 3.0.2 y anteriores, permite a los atacantes remotos obtener archivos locales por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "C9256B70-E1AC-478F-813E-8D57D792027D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN32120290/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN32120290/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2181",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2182."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Application versión 3.0.2 y anteriores, permite a los atacantes remotos obtener archivos locales por medio de vectores no especificados, una vulnerabilidad diferente de CVE-2017-2179 y CVE-2017-2182."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "C9256B70-E1AC-478F-813E-8D57D792027D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN20870477/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN20870477/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2182",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hands-on Vulnerability Learning Tool \"AppGoat\" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2181."
      }, {
        "lang" : "es",
        "value" : "La herramienta práctica de aprendizaje sobre vulnerabilidades \"AppGoat\" para Web Application versión 3.0.2 y anteriores, permite a los atacantes remotos obtener archivos locales por medio de vectores no especificados, una vulnerabilidad diferente de CVE-2017-2179 y CVE-2017-2181."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:appgoat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "C9256B70-E1AC-478F-813E-8D57D792027D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN01404851/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN01404851/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2187",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting en WP Live Chat Support anterior a versión 7.0.07, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:live_chat:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "7.0.06",
            "matchCriteriaId" : "C5744F57-C6A9-4D17-961D-5272C7048FFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN70951878/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1658232/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN70951878/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1658232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2189",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el instalador del driver RW-4040 para Windows 7 versión 2.27 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharp:rw-4040:2.27:*:*:*:*:windows_7:*:*",
            "matchCriteriaId" : "FCF76DED-08AA-4541-9F2E-27437738D01F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2190",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en la herramienta RW-4040 para verificar el entorno de ejecución en Windows 7 versión 1.2.0.0 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharp:rw-4040:1.2.0.0:*:*:*:*:windows_7:*:*",
            "matchCriteriaId" : "1316B349-72CD-40BD-A01C-07928624A4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2191",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no fiable en el instalador del driver RW-5100 para Windows 7 versión 1.0.0.9 y el instalador del driver RW-5100 para Windows 8.1 versión 1.0.1.0 permite que un atacante obtenga privilegios mediante un archivo DLL troyano en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharp:rw-5100_driver_installer_for_windows_7:1.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDE928F-23CA-46A7-9B5F-20697BFAF9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharp:rw-5100_driver_installer_for_windows_8.1:1.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25B5DF8-7C83-42B3-A45B-BE1ED63E4852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2192",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no fiable en la herramienta RW-5100 para verificar el entorno de ejecución en Windows 7 versión 1.1.0.0 y la herramienta RW-5100 para verificar el entorno de ejecución en Windows 8.1 versión 1.2.0.0 permite que un atacante obtenga privilegios mediante un DLL troyano en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharp:rw-5100:1.1.0.0:*:*:*:*:windows_7:*:*",
            "matchCriteriaId" : "50E8E6F6-89B8-473A-9237-C5CC4624BE96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharp:rw-5100:1.2.0.0:*:*:*:*:windows_8.1:*:*",
            "matchCriteriaId" : "4620F877-E120-4F83-A54E-57C1914E9132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51274854/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2193",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no seguros en el instalador de Tera Term versión 4.94 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.94",
            "matchCriteriaId" : "40AE010C-B4D9-423C-B413-E531E5084E6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN06770361/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98807",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ttssh2.osdn.jp/SA/JVN06770361.html.en",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN06770361/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ttssh2.osdn.jp/SA/JVN06770361.html.en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2195",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Multi Feed Reader anterior a la versión 2.2.4, permite a los atacantes identificados ejecutar comandos SQL arbitrarios por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multi_feed_reader_project:multi_feed_reader:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "E718D6A6-1624-4736-B442-93D185696443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN98617234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/multi-feed-reader/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8844",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN98617234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/multi-feed-reader/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2206",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura en el instalador de SaAT Netizen versión 1.2.10.510 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saat:netizen:1.2.10.510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "655C8AD2-81BB-4ACA-A8F3-ADDEA8D89DB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98817",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN91170929/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.saat.jp/information/netizen/2017/0531_security_update_info.php",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN91170929/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.saat.jp/information/netizen/2017/0531_security_update_info.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2207",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no seguro en el instalador de SaAT Personal versión 1.0.10.272 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saat:personal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.272",
            "matchCriteriaId" : "9EF01D32-C355-4178-8D69-4621FE1EAC9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98809",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN08020381/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.saat.jp/information/personal/2017/0531_security_update_info.php",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN08020381/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.saat.jp/information/personal/2017/0531_security_update_info.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2209",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installation) (The version which was available on the website from 2017 April 4 to 2017 May 18) and ver2.0 and later (For the first installation) (The versions which were available on the website prior to 2017 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no seguros en el instalador de Houkokusyo Sakusei Shien Tool versión 3.0.2 (Para la primera instalación) (La versión que estuvo disponible en el sitio web del 4 de abril de 2017 al 18 de mayo de 2017) y versión 2.0 y posterior (Para la primera instalación) (las versiones que estaban disponibles en el sitio web antes del 4 de abril de 2017), permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:santeikohyo:installer_of_houkokusyo_sakusei_shien_tool:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CFB799-4869-4EE5-975B-783E16A959EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:santeikohyo:installer_of_houkokusyo_sakusei_shien_tool:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5F17E3-DA72-46B5-9354-2CF9174651E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:santeikohyo:installer_of_houkokusyo_sakusei_shien_tool:3.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F79B7-09CF-4D2B-AD86-56C535EBF51B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ghg-santeikohyo.env.go.jp/files/system/report_20170526.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ghg-santeikohyo.env.go.jp/files/system/report_20170529_rev.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ghg-santeikohyo.env.go.jp/tool",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN24087303/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ghg-santeikohyo.env.go.jp/files/system/report_20170526.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ghg-santeikohyo.env.go.jp/files/system/report_20170529_rev.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ghg-santeikohyo.env.go.jp/tool",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN24087303/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2210",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura en PatchJGD (archivo PatchJGD101.EXE) versión 1.0.1, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsi:patchjgd:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C13D81-3455-4712-8588-2B54023E222A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2211",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura  en PatchJGD (Hyoko) (archivo PatchJGDh101.EXE) versión 1.0.1, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsi:patchjgd:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C13D81-3455-4712-8588-2B54023E222A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2212",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:01.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura en TKY2JGD (archivo TKY2JGD1379.EXE) versión 1.3.79, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsi:tky2jgd:1.3.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9796BC-7799-4576-ABAB-1E4DF8CEF5A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2213",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:02.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura en SemiDynaEXE (archivo SemiDynaEXE2008.EXE) versión 1.0.2, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsi:semidynaexe:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2713E4E-38EB-45B0-BB00-A025AF1E4402"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN52691241/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2214",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:02.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura en AppCheck y AppCheck Pro anterior a versión 2.0.1.15, permite a un atacante ejecutar código arbitrario por medio de un archivo ejecutable especialmente diseñado en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiransoft:appcheck:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1.14",
            "matchCriteriaId" : "840F0D93-38C2-4E4F-A206-FFF6FC703BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiransoft:appcheck_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1.14",
            "matchCriteriaId" : "8E6D6B8B-F74C-4B2A-9552-8FF4534FD4F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN99737748/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN99737748/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2219",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-06-09T16:29:02.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no segura en el instalador de [Simeji para Windows] (archivo simeji.exe), permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baidu:simeji:1.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA20AC2-531B-474B-BC56-02672512FD19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN31236539/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN31236539/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-09T16:29:02.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs."
      }, {
        "lang" : "es",
        "value" : "En el paquete cron hasta la versión 3.0pl1-128 en Debian, y hasta la versión 3.0pl1-128ubuntu2 en Ubuntu, el script de mantenimiento postinst permite la escalada de privilegios de grupo-crontab a root por medio de ataques de enlace simbólico (symlink) contra el uso no seguro de los programas chown y chmod."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cron_project:cron:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0pl1-128.",
            "matchCriteriaId" : "E3444166-4E36-4879-BAC9-A90E13FFE19F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407BAF27-8E5E-49F3-9B83-2FDEEE87D981"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8919F1-CD33-437E-9627-69352B276BA3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/864466",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/08/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038651",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/864466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/08/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0375",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-06-09T17:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell."
      }, {
        "lang" : "es",
        "value" : "La función de servicio oculto en Tor antes de la versión 0.3.0.8 permite una denegación de servicio (fallo de aserción y salida de demonio) en la función relay_send_end_cell_from_edge_ a través de una llamada BEGIN con formato incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0.8",
            "matchCriteriaId" : "2CEE4949-FE1A-4AA7-8CA2-895EE9A0723F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99017",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/22493",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/22493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0376",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-06-09T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit."
      }, {
        "lang" : "es",
        "value" : "La función de servicio oculto en Tor antes de la versión 0.3.0.8 permite una denegación de servicio (fallo de aserción y salida de demonio) en la función connection_edge_process_relay_cell a través de una célula BEGIN_DIR en un circuito de rendezvous"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0.8",
            "matchCriteriaId" : "2CEE4949-FE1A-4AA7-8CA2-895EE9A0723F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3877",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/22494",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/22494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5003",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-09T21:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Reflected Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system."
      }, {
        "lang" : "es",
        "value" : "RSA Identity Governance and Lifecycle versiones 7.0.1, 7.0.2 (todos los niveles de parches);  RSA Via Lifecycle and Governance versión 7.0 (todos los niveles de parches); y RSA Identity Management and Governance (IMG) versión 6.9.1 (todos los niveles de parches) de EMC, presentan vulnerabilidades de tipo Cross Site Scripting Reflejado que podrían ser explotadas potencialmente por usuarios maliciosos para comprometer un sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD65ECE7-AEC0-4996-AA77-A1394CD10E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5288389E-1322-4441-A295-045E38B22D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784E8C-B027-446D-92E3-E1FF3CA90BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB09176-507F-4A9E-A316-561BE6D7725F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540693/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98974",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038648",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://web.archive.org/web/20210116013250/http://www.securityfocus.com/archive/1/540693/30/0/threaded",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540693/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5004",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-09T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system."
      }, {
        "lang" : "es",
        "value" : "RSA Identity Governance and Lifecycle versiones 7.0.1, 7.0.2 (todos los niveles de parches); RSA Via Lifecycle and Governance versión 7.0 (todos los niveles de parches); y RSA Identity Management and Governance (IMG) versión 6.9.1 (todos los niveles de parches) de EMC, presentan vulnerabilidades de tipo Cross Site Scripting Almacenado que podrían ser explotadas por usuarios maliciosos para comprometer un sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD65ECE7-AEC0-4996-AA77-A1394CD10E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5288389E-1322-4441-A295-045E38B22D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784E8C-B027-446D-92E3-E1FF3CA90BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB09176-507F-4A9E-A316-561BE6D7725F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540693/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98968",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038648",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://web.archive.org/web/20210116013250/http://www.securityfocus.com/archive/1/540693/30/0/threaded",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540693/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-11T02:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library."
      }, {
        "lang" : "es",
        "value" : "En Libgcrypt, anterior a versión 1.7.7, un atacante que aprende la clave de sesión EdDSA (de la observación del canal lateral durante el proceso de firma) puede fácilmente recuperar la clave secreta a largo plazo  . 1.7.7 haciendo un cambio del archivo cipher/ecc-eddsa.c para almacenar esta clave de sesión en memoria segura, y así garantizar que operaciones puntuales de tiempo constante sean usadas en la biblioteca MPI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.6",
            "matchCriteriaId" : "A66275EC-B910-4149-869D-6C0168547FAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99046",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1042326",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=5a22de904a0a366ae79f03ff1e13a1232a89e26b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=f9494b3f258e01b6af8bd3941ce436bcc00afc56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1042326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=5a22de904a0a366ae79f03ff1e13a1232a89e26b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=f9494b3f258e01b6af8bd3941ce436bcc00afc56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-11T17:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impact via a crafted .rb file."
      }, {
        "lang" : "es",
        "value" : "La función mark_context_stack en el archivo gc.c en mruby hasta la versión 1.2.0, permite a los atacantes causar una denegación de servicio (uso de la memoria previamente liberada en la región heap de la memoria y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo .rb diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "758C7DBA-034E-4B3B-8DD6-95C89DD6D96C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mruby/mruby/commit/5c114c91d4ff31859fcd84cf8bf349b737b90d99",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mruby/mruby/issues/3486",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mruby/mruby/commit/5c114c91d4ff31859fcd84cf8bf349b737b90d99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mruby/mruby/issues/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-11T23:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device."
      }, {
        "lang" : "es",
        "value" : "El Enrutador DIR-615 Wireless N 300 de D-Link, permite la omisión de autenticación por medio de una petición POST modificada para el archivo login.cgi. Este problema ocurre porque no puede comprobar el campo password. La explotación con éxito de este problema le permite a un atacante tomar el control del dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-615_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F284D818-EE79-40AF-80B5-77EBE67B4DD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E92E959-C211-4979-A233-163BEFCF6F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98992",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/tiger_tigerboy/status/873458088321220609",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/tigerBOY777/videos/1368513696568992/",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/tiger_tigerboy/status/873458088321220609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/tigerBOY777/videos/1368513696568992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file."
      }, {
        "lang" : "es",
        "value" : "La función cr_tknzr_parse_comment en el archivo cr-tknzr.c en libcroco versión 0.6.12 permite a los atacantes remotos causar una denegación de servicio (error de asignación de memoria) por medio de un archivo CSS creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libcroco:0.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F691866-18B7-42B3-9AE5-E45CA9E800C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/08/13/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=782647",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42147/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/08/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=782647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42147/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file."
      }, {
        "lang" : "es",
        "value" : "La función cr_parser_parse_selector_core en el archivo cr-parser.c en libcroco versión 0.6.12 permite a los atacantes remotos causar una denegación de servicio (bucle infinito y consumo de la CPU) por medio de un archivo CSS creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libcroco:0.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F691866-18B7-42B3-9AE5-E45CA9E800C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/08/13/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=782649",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42147/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/08/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=782649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42147/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función quicktime_read_moov en el archivo moov.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (bucle infinito y consumo de CPU) por medio  de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función lqt_frame_duration en el archivo lqt_quicktime.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) por medio de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función quicktime_match_32 en el archivo util.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) por medio de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función lqt_frame_duration en el archivo lqt_quicktime.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria) por medio de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función quicktime_read_dref_table en el archivo dref.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función quicktime_user_atoms_read_atom en el archivo useratoms.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función quicktime_video_width en el archivo lqt_quicktime.c en libquicktime versión 1.2.4, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo mp4 diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4545-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URLs in question contain index.pl?Action=Installer with ;Subaction=Intro or ;Subaction=Start or ;Subaction=System appended at the end."
      }, {
        "lang" : "es",
        "value" : "En Open Ticket Request System (OTRS) versión 3.3.x hasta la versión 3.3.16, versión 4.x hasta 4.0.23 y versión 5.x hasta la versión 5.0.19, un atacante con permiso de agente es capaz de abrir una URL específica en un navegador para alcanzar privilegios administrativos y acceso completo. Después, todos los ajustes del sistema se pueden leer y cambiar. Las URL en cuestión contienen index.pl?Action=Installer con ;Subaction=Intro o ;Subaction=Start o ;Subaction=System anexado al final."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.16",
            "matchCriteriaId" : "ECB8472B-A4C5-4C33-A1F8-F309263EA1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.23",
            "matchCriteriaId" : "C4A11EFC-F29E-476B-9F60-D349B8552606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.19",
            "matchCriteriaId" : "36B3B7E9-A5DF-45AE-8695-778C62C1C5A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3876",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142862/OTRS-Install-Dialog-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-03-security-update-otrs-versions/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142862/OTRS-Install-Dialog-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-03-security-update-otrs-versions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm."
      }, {
        "lang" : "es",
        "value" : "En el archivo register.ghp en EFS Software Easy Chat Server versiones 2.0 hasta 3.1, permite a los atacantes remotos restablecer contraseñas arbitrarias por medio de una petición POST diseñada en el archivo registresult.htm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "CC553F29-3FB1-4BC9-AD80-0BD59DCDDE3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42154/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42154/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento de búfer en la región stack de la memoria remoto (SEH) en el archivo register.ghp en EFS Software Easy Chat Server versiones 2.0 hasta 3.1. Al enviar una cadena de nombre de usuario demasiado larga en archivo registresult.htm para registrar al usuario, un atacante puede ser capaz de ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "CC553F29-3FB1-4BC9-AD80-0BD59DCDDE3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42155/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name."
      }, {
        "lang" : "es",
        "value" : "En el archivo admin.php en BigTree hasta versión 4.2.18, permite a los usuarios autenticados remotos causar una denegación de servicio (incapacidad para guardar revisiones) por medio de secuencias de tipo XSS reflejados en un nombre revisión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/298",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and entering the Navigation Title or Page Title of a page that is scheduled for future publication (aka a pending page change)."
      }, {
        "lang" : "es",
        "value" : "En el archivo admin.php en BigTree hasta versión 4.2.18, presenta una vulnerabilidad de tipo Cross-Site Scripting (XSS), que permite a los usuarios autenticados remotos inyectar script web o HTML arbitrario al iniciar una acción Edit Page e ingresar el Título de Navegación o Título de Página de una página que está programada para una publicación futura (también se conoce como cambio de página pendiente)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/297",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T06:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication (aka a pending page change)."
      }, {
        "lang" : "es",
        "value" : "En el archivo admin.php en BigTree hasta la versión 4.2.18, presenta una vulnerabilidad de tipo Cross-Site Scripting (XSS), que permite a los usuarios autenticados remotos inyectar un script web o HTML arbitrario al iniciar una acción Home Template Edit Page e ingresar el Título Navigation de una página que es programada para una publicación futura (también se conoce como cambio de página pendiente)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.18",
            "matchCriteriaId" : "DF5ED7B4-C5CC-475B-8349-3F7979D7CE22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/296",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T13:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el plugin WP-Testimonials versión 3.4.1 para WordPress, permite a un usuario autenticado ejecutar comandos SQL arbitrarios por medio del parámetro testid en el archivo wp-admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goldplugins:testimonials_plugin_easy_testimonials:3.4.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F85679E9-57EF-4E9F-9B2B-6011B12C3832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42166/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42166/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-12T15:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response."
      }, {
        "lang" : "es",
        "value" : "El archivo register.ghp en EFS Software Easy Chat Server versiones 2.0 hasta 3.1, permite a los atacantes remotos detectar contraseñas mediante el envío del parámetro username junto con un parámetro password vacío y leyendo el código fuente HTML de la respuesta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "CC553F29-3FB1-4BC9-AD80-0BD59DCDDE3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42153/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42153/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6892",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2017-06-12T16:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile version 1.0.28, an error in the \"aiff_read_chanmap()\" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file."
      }, {
        "lang" : "es",
        "value" : "En libsndfile versión 1.0.28, se puede explotar un error en la función \"aiff_read_chanmap()\" del archivo (aiff.c) para causar un acceso a memoria de lectura fuera de límites por medio de un archivo AIFF especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erikd/libsndfile/commit/f833c53cb596e9e1792949f762e0b33661822748",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76717/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-13/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://github.com/erikd/libsndfile/commit/f833c53cb596e9e1792949f762e0b33661822748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76717/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7665",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-12T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient."
      }, {
        "lang" : "es",
        "value" : "En Apache NiFi anterior a versión 0.7.4 y versión 1.x anterior a 1.3.0, se presentan ciertos componentes de entrada de usuario en la interfaz de usuario (UI) que habían estado protegiendo algunas formas de XSS reflejado pero fueron insuficientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.3",
            "matchCriteriaId" : "956E1F75-9430-4031-B908-2DFFA7CE22B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C028889E-44E8-4E54-9585-BF9B0EED5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D38C76-98D2-41F1-9F0B-CEE05215AB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B8572D-CA8D-4A41-B94A-A393A22B5B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FDA5E5-6A45-4979-9317-75623A59089F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1BEC26-CB83-4209-893D-5EA6E08A0C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A509533F-ACD6-4290-BE2E-3EDBED60D43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99009",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7667",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-12T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin."
      }, {
        "lang" : "es",
        "value" : "Apache NiFi anterior a versión 0.7.4 y versión 1.x anterior a 1.3.0, necesita establecer el encabezado de respuesta indicando a los navegadores que solo permitan integrarlo con el mismo origen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.3",
            "matchCriteriaId" : "956E1F75-9430-4031-B908-2DFFA7CE22B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C028889E-44E8-4E54-9585-BF9B0EED5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D38C76-98D2-41F1-9F0B-CEE05215AB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B8572D-CA8D-4A41-B94A-A393A22B5B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FDA5E5-6A45-4979-9317-75623A59089F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1BEC26-CB83-4209-893D-5EA6E08A0C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A509533F-ACD6-4290-BE2E-3EDBED60D43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99018",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1214",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-12T19:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854."
      }, {
        "lang" : "es",
        "value" : "IBM iNotes 8.5 y 9.0 permite a un atacante remoto enviar emails malformados a la victima, entonces cuando sea abierto puede resultar en la revelación de información. IBM X-Force ID: 123854."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE6AAC-7B25-40EA-9D25-128D743F18A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726DB55-DE85-4A10-8912-59FFF5D0A87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E3BD0F-DC7F-47C1-A86A-9B1627FBE941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68862417-67DC-462A-8557-E1E371926FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E251CBF-CA6A-4675-B7FA-B68EC44ADA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B097CA3C-2ABA-489E-86C1-EEF891AF7094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8270B1C-31E1-47F6-B641-8A4291EBEF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B62FD4B-A8B0-4215-A22C-241EE84A4C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A913396-D7C3-4088-A4E8-93BF3ADB9C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FAF950-ECA1-4DC1-ABC7-18C073209ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40437DB7-17EB-4C53-9D71-624D01068D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DDC3B-3B08-407F-8543-7A78B38B4F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975E8316-D4C3-40B7-8E57-E871D0327271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B74523E-57BE-4B0B-B639-32927336C862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521E7EBE-CEA6-4FF8-954A-2A43617FB1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30460A5C-2D97-42B5-A190-5E0862E87EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31391143-EE89-4521-81F4-43455AAF7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5344290B-F139-4367-B976-C2E8007487F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664379F7-CE42-4717-A887-F79E6AF8014E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002015",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038654",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123854",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1247",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-12T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124627."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código Javascript aleatorio en la interfaz Web, lo que alterará la funcionalidad planeada potencialmente llevando a la revelación de credenciales dentro de una sesión confiable. IBM X-Force ID: 124627."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFBB5B-8566-45BC-9123-5418821E6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A84EA62-E3F8-4E4C-9FEF-065300C4611A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232D8EF-1DB3-477D-818C-B79B68406197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002809",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99002",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124627",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1276",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-12T19:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124751."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a Cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código Javascript arbitrario en la interfaz web lo que alteraría la funcionalidad planeada llevando potencialmente a la revelación de las credenciales dentro de una sesión confiable. IBM X-Force ID: 124751."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFBB5B-8566-45BC-9123-5418821E6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A84EA62-E3F8-4E4C-9FEF-065300C4611A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232D8EF-1DB3-477D-818C-B79B68406197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002809",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99000",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124751",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1278",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-12T19:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a la inyección de código HTML. Un atacante remoto podría inyectar código HTML malicioso, el que cuando se vea, se ejecutaría en el navegador de la víctima dentro de un contexto seguro del sitio. IBM X-Force ID: 124756."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFBB5B-8566-45BC-9123-5418821E6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A84EA62-E3F8-4E4C-9FEF-065300C4611A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232D8EF-1DB3-477D-818C-B79B68406197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002809",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98994",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2773",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users in multiple components included in PCF Elastic Runtime, aka an \"Unauthenticated JWT signing algorithm in multiple components\" issue."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Pivotal PCF Elastic Runtime en versiones 1.6.x anteriores a la 1.6.60, versiones 1.7.x anteriores a la 1.7.41, versiones 1.8.x anteriores a la 1.8.23 y versiones 1.9.x anteriores a la 1.9.1. La lógica de validación incompleta en las bibliotecas JSON Web Token (JWT) puede permitir que atacantes no privilegiados suplanten a otros usuarios en múltiples componentes incluidos en PCF Elastic Runtime. Esto también se conoce como problema \"Unauthenticated JWT signing algorithm in multiple components\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC5918-BC38-46E3-8000-5FE87A65C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36926681-35F4-4619-9613-155DEEEA3C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FF3C2B-E96F-4DF7-A5C4-703206CB729E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CB3C2D-3080-4A3D-8D8D-1381B5D98920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782781EB-147C-4B00-84C5-1D8443BFA2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A56755-EEB2-4C93-B180-3918A36965AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4009F10-08AF-470B-B903-38B8A6DBF332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2E8F04-53E6-4A3C-BE4B-8D0DDA22CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790DAB24-893A-463F-8358-171DACD75074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3645A1A8-4945-447F-A968-101D5938F9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E52C9B9-8F94-48D8-ADA6-96918F6AAD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3948FC2F-AF3B-4AF3-968D-F124D03A213A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA44F9B-97D5-48C0-91E9-6D3FEC8B7773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B414F88-6541-48C6-B9D6-4DDA035A0037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66235C7F-D5EE-4989-8D24-6D0781954234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E75B49-2419-4313-A648-B5283DA620E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED70273-3FB2-4652-9AA2-10E2E9D581DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C07910-C462-46C1-83CB-39B3FD8D25BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B9243E-31EF-48AB-BAB5-CCC3704A219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCB1D4B-F44C-41A1-90CA-62FD37003A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F623783F-46DF-454E-BD83-5D2AE35EA9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD9D35B-3E85-49FD-BA0A-D9020C5F280E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28CEEDF-FA40-4922-87A6-35DEBF184DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F08111-51B1-4866-8695-C0877FC77D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC58A11-78C4-495B-A898-048EE9F3063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620EAB8D-3754-494D-9912-724A0FE1E80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA74BD-EF83-4F29-8040-FB5B35D38C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E00BE6-B2B6-4C02-9510-1F3DCC081173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D9E726-CF92-4DE5-8A04-02428328CC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1CAC4E-3CD6-4D0C-8544-9481E57FD338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D0F13A-D149-492D-A484-B7F4235B2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160A9972-DCF2-46A9-8025-938C492E5A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43978845-CC25-4975-8155-AC0999A4268B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1A6848-16B9-47EC-B7C8-7740086398F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9708D36-4A9B-484A-A627-69A85D66EDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB1C89-79D2-4997-A00D-E6E62243278B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C071EA95-4AE2-43DC-900F-3DDD38959754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FF1F58-580A-4035-9427-1B4E96FC9E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71499439-2748-4B4F-8659-AE4F67CCC8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50161ECB-FEEA-4E1C-8DF9-5F3F7D944895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D21BF37-C46C-4AF2-BEDA-F048520B2364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F33DD4-DDE7-4742-8FC6-15B6A1879A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74509FEE-7166-4E02-8DF1-8F37DF6B0544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8CCAAC-4ED2-4EA2-A929-ED2A2422DB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5340E4-0C9D-40F5-9E34-14E793A44361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45701FC-4423-4C05-A32F-75DB4B9F1E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902B67BD-57D8-4088-9FD6-9691ADB86D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28873E30-9073-424E-B68B-8DF11AFB72E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F8DC97-BBBA-4377-ADF0-1F92AC5E135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3585890-0DD5-4184-9AEE-5F22EACA2963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B26DE06-585E-4E8B-81BD-5DAF32CF1893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12188BF1-1307-48B0-AAE4-6C91402B726F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335DB844-E49A-439E-A4B3-D8E45BFE5DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA90B5C3-4F17-4F8C-83A2-DFCD194F965C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA644782-F305-4BDB-B720-FF88D5B40308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E71936-5F88-4A8C-BFE5-9591FEC3B5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C9C2B9-DF79-4C9E-87F1-2949F9FC8C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F458801-EB3D-4295-B7B1-AA8259758157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC59E2D-87E5-486E-8035-878B9C85E18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3870B8B2-FAF2-4374-B580-9884B72F2FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B75A7F-EAAC-4D81-9A10-D8DB45828EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53D5B4-75BF-445F-96AA-4DC308B76E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD5D5D9-604D-4917-99D0-1F41784A6835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2BF60D-EEEE-4F4C-A19F-108C78366089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED880C-5EF5-4FEA-A4BD-58CA61C12A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA80BA5-66B0-4A6C-B552-175DBB930EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDBAF27-D5DC-4379-A76E-7BD2CD98EB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D957FD98-C2B4-48C2-81A0-37B2581E9F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DADB2DA-A12F-426E-9DEB-3628B081F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C97080-9BD3-4F17-A0E4-80F9F4CD7DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E764D26C-D2C4-496C-936F-BF6793BF7C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E574EDD-AD33-4A00-8E14-76F0134EC00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2274274-C1F8-4E42-AF7A-BDBF379E823E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB25167-8350-4362-876C-690F5B5B057C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F89423-3AEE-475A-BBBA-B895D9732A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B5CB0D-09C9-4CB2-B842-CA68400CDAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F047032B-218E-41BF-9F46-4682D415960E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B291CCA0-EAE5-4900-ABF3-9A9D76910BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8DAD87-111B-4F17-85CC-65C395851079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248878D6-7987-4608-9A28-66F3F7EFB976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62465763-0887-4082-9363-8F70B264F29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088B4A1B-3E98-4B9E-8430-30F6E61B560B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A13F165-C8D2-4BCB-84D3-B264C3DDD1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0844334C-E31A-4D85-B12A-AD06A00BF76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CF4D45-1011-4252-A1A0-7A60BF6010ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9CB7CA-00B2-4583-ACDB-9269E380D328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCF9CD2-4D4C-44CF-BD32-146A7C782DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034CA20F-30F2-4A6B-BE15-685864B4BB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B5BB61-A6FF-4F7B-852F-6EE86992E5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D25BD5D-948B-4E5E-B25D-669CEDA02A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4634673B-84CD-4FCD-AECB-D5B865C0B05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AE9EB2-4FA8-4186-B6F2-3F8EE3AB880E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B077E17-2BDC-4A55-990C-EE9036D80895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAB3961-38F3-4AEE-8EEA-AC929F93F9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB91D749-3F61-4EAA-872B-27E66BF6D234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23EA9FC-3396-40DB-925F-62CBA92B407C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D4AF5F-FCC7-4795-9E12-7EEA3686F059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC87A91E-9804-4E77-99F0-75D87C970151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE43BD2D-DD11-49F8-9894-719982B1B4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF27099-228F-422B-95BA-F8BDDCD72D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F08919-8764-419D-A399-1EAA6B055C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BA6E79-22B6-4E5E-8C85-BBA8CB6C1828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB328ACE-FC3C-4255-9400-A9BBC5059F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877383E9-545F-4324-B8EA-76F33B7C11C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BCA5E-1A43-41AA-ACEC-2C73E1B84D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF15EDB-2707-43E2-9B53-C0CCA28AC972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C896CBBE-BE7B-44C3-A25E-F85BC7F6CE51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944374E2-A07E-4EEA-BE0C-47EF62FFABA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEA85D5-10B2-4003-A857-2C46F9559694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799E1F2E-DA5F-41B5-9B83-55661E18D726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9369A6-F59D-4C7A-830E-6EAC6F81A493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A2732A-0309-4DF0-9EF1-7954D10BCFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3101A31-55B3-4212-B78F-FE574B445F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED599DA-D25C-45FD-9CDA-8E9E2D17364C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA779B7-1660-48B7-A648-E3952BFD1B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A66A35-48D1-48E5-97A9-A6F136EC9BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598033B9-A0FB-4A5B-9417-5A434608232A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CE5BCF-A1C8-4F24-A5BC-70FAF096253F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E0C92F-485D-4675-95F8-672E8489AF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B95BB7C-D9D7-4A63-B8AB-6EB456D236A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06AE8D5-F30A-4F73-AF69-622F01D0BF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167A8FDC-4C37-4AC4-9A0D-B73602F8062F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FA79FA-C53E-4852-941B-F8B32EBC0BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97135",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-2773",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-2773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4955",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en las versiones de PCF Elastic Runtime de Pivotal versiones 1.6.x anteriores a 1.6.65, versiones 1.7.x anteriores a 1.7.48, versiones 1.8.x anteriores a 1.8.28 y versiones 1.9.x anteriores a 1.9.5. Varias credenciales estaban presentes en los registros para la tarea Notifications en el mosaico de PCF Elastic Runtime."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC5918-BC38-46E3-8000-5FE87A65C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36926681-35F4-4619-9613-155DEEEA3C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FF3C2B-E96F-4DF7-A5C4-703206CB729E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CB3C2D-3080-4A3D-8D8D-1381B5D98920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782781EB-147C-4B00-84C5-1D8443BFA2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A56755-EEB2-4C93-B180-3918A36965AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4009F10-08AF-470B-B903-38B8A6DBF332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2E8F04-53E6-4A3C-BE4B-8D0DDA22CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790DAB24-893A-463F-8358-171DACD75074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3645A1A8-4945-447F-A968-101D5938F9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E52C9B9-8F94-48D8-ADA6-96918F6AAD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3948FC2F-AF3B-4AF3-968D-F124D03A213A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA44F9B-97D5-48C0-91E9-6D3FEC8B7773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B414F88-6541-48C6-B9D6-4DDA035A0037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66235C7F-D5EE-4989-8D24-6D0781954234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E75B49-2419-4313-A648-B5283DA620E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED70273-3FB2-4652-9AA2-10E2E9D581DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C07910-C462-46C1-83CB-39B3FD8D25BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B9243E-31EF-48AB-BAB5-CCC3704A219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCB1D4B-F44C-41A1-90CA-62FD37003A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F623783F-46DF-454E-BD83-5D2AE35EA9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD9D35B-3E85-49FD-BA0A-D9020C5F280E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28CEEDF-FA40-4922-87A6-35DEBF184DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F08111-51B1-4866-8695-C0877FC77D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC58A11-78C4-495B-A898-048EE9F3063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620EAB8D-3754-494D-9912-724A0FE1E80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA74BD-EF83-4F29-8040-FB5B35D38C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E00BE6-B2B6-4C02-9510-1F3DCC081173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D9E726-CF92-4DE5-8A04-02428328CC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1CAC4E-3CD6-4D0C-8544-9481E57FD338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D0F13A-D149-492D-A484-B7F4235B2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160A9972-DCF2-46A9-8025-938C492E5A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43978845-CC25-4975-8155-AC0999A4268B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1A6848-16B9-47EC-B7C8-7740086398F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9708D36-4A9B-484A-A627-69A85D66EDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB1C89-79D2-4997-A00D-E6E62243278B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C071EA95-4AE2-43DC-900F-3DDD38959754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FF1F58-580A-4035-9427-1B4E96FC9E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71499439-2748-4B4F-8659-AE4F67CCC8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50161ECB-FEEA-4E1C-8DF9-5F3F7D944895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D21BF37-C46C-4AF2-BEDA-F048520B2364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F33DD4-DDE7-4742-8FC6-15B6A1879A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74509FEE-7166-4E02-8DF1-8F37DF6B0544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8CCAAC-4ED2-4EA2-A929-ED2A2422DB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5340E4-0C9D-40F5-9E34-14E793A44361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45701FC-4423-4C05-A32F-75DB4B9F1E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902B67BD-57D8-4088-9FD6-9691ADB86D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28873E30-9073-424E-B68B-8DF11AFB72E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F8DC97-BBBA-4377-ADF0-1F92AC5E135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3585890-0DD5-4184-9AEE-5F22EACA2963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B26DE06-585E-4E8B-81BD-5DAF32CF1893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12188BF1-1307-48B0-AAE4-6C91402B726F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335DB844-E49A-439E-A4B3-D8E45BFE5DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA90B5C3-4F17-4F8C-83A2-DFCD194F965C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA644782-F305-4BDB-B720-FF88D5B40308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E71936-5F88-4A8C-BFE5-9591FEC3B5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C9C2B9-DF79-4C9E-87F1-2949F9FC8C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F458801-EB3D-4295-B7B1-AA8259758157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC59E2D-87E5-486E-8035-878B9C85E18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3870B8B2-FAF2-4374-B580-9884B72F2FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69589093-7B4F-433B-AD35-60CB9392C08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C846FB3-526A-4B63-A10D-144DF6E31BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36A6F3C-B2D9-483B-90CD-127DF7444514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394F138C-2C9C-46F5-A7E2-95511A2919C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76CF05-C43D-45C1-A709-1BB7097B9E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B75A7F-EAAC-4D81-9A10-D8DB45828EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53D5B4-75BF-445F-96AA-4DC308B76E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD5D5D9-604D-4917-99D0-1F41784A6835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2BF60D-EEEE-4F4C-A19F-108C78366089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED880C-5EF5-4FEA-A4BD-58CA61C12A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA80BA5-66B0-4A6C-B552-175DBB930EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDBAF27-D5DC-4379-A76E-7BD2CD98EB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D957FD98-C2B4-48C2-81A0-37B2581E9F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DADB2DA-A12F-426E-9DEB-3628B081F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C97080-9BD3-4F17-A0E4-80F9F4CD7DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E764D26C-D2C4-496C-936F-BF6793BF7C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E574EDD-AD33-4A00-8E14-76F0134EC00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2274274-C1F8-4E42-AF7A-BDBF379E823E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB25167-8350-4362-876C-690F5B5B057C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F89423-3AEE-475A-BBBA-B895D9732A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B5CB0D-09C9-4CB2-B842-CA68400CDAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F047032B-218E-41BF-9F46-4682D415960E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B291CCA0-EAE5-4900-ABF3-9A9D76910BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8DAD87-111B-4F17-85CC-65C395851079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248878D6-7987-4608-9A28-66F3F7EFB976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62465763-0887-4082-9363-8F70B264F29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088B4A1B-3E98-4B9E-8430-30F6E61B560B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A13F165-C8D2-4BCB-84D3-B264C3DDD1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0844334C-E31A-4D85-B12A-AD06A00BF76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CF4D45-1011-4252-A1A0-7A60BF6010ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9CB7CA-00B2-4583-ACDB-9269E380D328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCF9CD2-4D4C-44CF-BD32-146A7C782DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034CA20F-30F2-4A6B-BE15-685864B4BB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B5BB61-A6FF-4F7B-852F-6EE86992E5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D25BD5D-948B-4E5E-B25D-669CEDA02A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4634673B-84CD-4FCD-AECB-D5B865C0B05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AE9EB2-4FA8-4186-B6F2-3F8EE3AB880E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B077E17-2BDC-4A55-990C-EE9036D80895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAB3961-38F3-4AEE-8EEA-AC929F93F9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB91D749-3F61-4EAA-872B-27E66BF6D234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23EA9FC-3396-40DB-925F-62CBA92B407C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D4AF5F-FCC7-4795-9E12-7EEA3686F059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC87A91E-9804-4E77-99F0-75D87C970151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE43BD2D-DD11-49F8-9894-719982B1B4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF27099-228F-422B-95BA-F8BDDCD72D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4093B0-E785-4E4D-A076-FAB5CFF397CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAC1C6F-F41A-45B9-A9BC-0BBCB396EC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9862AE-D007-453B-9480-88CBF2C94A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85738A2A-5E35-480D-8BCE-A8298FB5A91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E99A62-2EA2-476A-95F4-8674E6887891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20FB123-CB94-46B3-8800-C93BB6285B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411351FC-6D34-4FB9-A658-937519095A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F08919-8764-419D-A399-1EAA6B055C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BA6E79-22B6-4E5E-8C85-BBA8CB6C1828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB328ACE-FC3C-4255-9400-A9BBC5059F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877383E9-545F-4324-B8EA-76F33B7C11C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BCA5E-1A43-41AA-ACEC-2C73E1B84D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF15EDB-2707-43E2-9B53-C0CCA28AC972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C896CBBE-BE7B-44C3-A25E-F85BC7F6CE51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944374E2-A07E-4EEA-BE0C-47EF62FFABA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEA85D5-10B2-4003-A857-2C46F9559694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799E1F2E-DA5F-41B5-9B83-55661E18D726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9369A6-F59D-4C7A-830E-6EAC6F81A493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A2732A-0309-4DF0-9EF1-7954D10BCFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3101A31-55B3-4212-B78F-FE574B445F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED599DA-D25C-45FD-9CDA-8E9E2D17364C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA779B7-1660-48B7-A648-E3952BFD1B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A66A35-48D1-48E5-97A9-A6F136EC9BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598033B9-A0FB-4A5B-9417-5A434608232A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CE5BCF-A1C8-4F24-A5BC-70FAF096253F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E0C92F-485D-4675-95F8-672E8489AF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B95BB7C-D9D7-4A63-B8AB-6EB456D236A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06AE8D5-F30A-4F73-AF69-622F01D0BF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167A8FDC-4C37-4AC4-9A0D-B73602F8062F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAEFA2F-3E9E-4B4F-8679-7F70A3ED6292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81501627-C022-4BEC-AF42-B10DF1CDA69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD7FDCF-4123-4000-821B-88D5214AF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0224626-1FB4-4DF5-B16F-5D2741E51E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD367D8-748B-4CE7-8CF4-0549B02B1766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25D21E0-E84B-4BCF-B2D0-2332CD583128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C76651-7E20-4456-ADA3-DF5020471743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7911DD-A3CC-4046-884D-C11A1263B037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F122CEA-7924-45A6-BCFD-B9079C4B0DCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97082",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4955",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4959",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Pivotal PCF Elastic Runtime, en versiones 1.8.x anteriores a la 1.8.29 y en versiones 1.9.x anteriores a la 1.9.7. Los despliegues de Pivotal Cloud Foundry que emplean la aplicación Pivotal Account son vulnerables a un error que permite que un usuario autorizado tome el control de la cuenta de otro usuario, lo que podría provocar el bloqueo de la cuenta y un potencial escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258FAFB4-2B67-456B-BE78-1562A3D5E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F08919-8764-419D-A399-1EAA6B055C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BA6E79-22B6-4E5E-8C85-BBA8CB6C1828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB328ACE-FC3C-4255-9400-A9BBC5059F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877383E9-545F-4324-B8EA-76F33B7C11C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BCA5E-1A43-41AA-ACEC-2C73E1B84D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF15EDB-2707-43E2-9B53-C0CCA28AC972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C896CBBE-BE7B-44C3-A25E-F85BC7F6CE51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944374E2-A07E-4EEA-BE0C-47EF62FFABA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEA85D5-10B2-4003-A857-2C46F9559694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799E1F2E-DA5F-41B5-9B83-55661E18D726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9369A6-F59D-4C7A-830E-6EAC6F81A493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A2732A-0309-4DF0-9EF1-7954D10BCFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3101A31-55B3-4212-B78F-FE574B445F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED599DA-D25C-45FD-9CDA-8E9E2D17364C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA779B7-1660-48B7-A648-E3952BFD1B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A66A35-48D1-48E5-97A9-A6F136EC9BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598033B9-A0FB-4A5B-9417-5A434608232A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CE5BCF-A1C8-4F24-A5BC-70FAF096253F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E0C92F-485D-4675-95F8-672E8489AF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B95BB7C-D9D7-4A63-B8AB-6EB456D236A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06AE8D5-F30A-4F73-AF69-622F01D0BF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167A8FDC-4C37-4AC4-9A0D-B73602F8062F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAEFA2F-3E9E-4B4F-8679-7F70A3ED6292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81501627-C022-4BEC-AF42-B10DF1CDA69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD7FDCF-4123-4000-821B-88D5214AF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0224626-1FB4-4DF5-B16F-5D2741E51E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD367D8-748B-4CE7-8CF4-0549B02B1766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DDC3D0-2523-4A10-824F-6630F7559CD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FA79FA-C53E-4852-941B-F8B32EBC0BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25D21E0-E84B-4BCF-B2D0-2332CD583128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C76651-7E20-4456-ADA3-DF5020471743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7911DD-A3CC-4046-884D-C11A1263B037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F122CEA-7924-45A6-BCFD-B9079C4B0DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBFA1F5-3A00-4BCE-8E8D-B3E898933A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3329004D-1F23-4991-A8ED-51DB1E596FD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96218",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4959",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4961",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka \"BOSH Director Shell Injection Vulnerabilities.\""
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en las versiones de BOSH versión 261.x anteriores a 261.3 y en todas las versiones de 260.x de Cloud Foundry Foundation. En ciertos casos, un usuario Director identificado puede proporcionar una suma de comprobaciones maliciosa que podría permitirles escalar sus privilegios en la  Máquina Virtual Director, también se conoce como \"BOSH Director Shell Injection Vulnerabilities"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3F33E-AEE9-4D6B-96F8-908AECBCE525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5D0352-286C-4F64-9147-DEBE00F8B00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44842718-23C0-462F-AEA0-0A1112BBF3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D81B883-92C1-40C5-A791-03243CA6A463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D755675-393A-440C-8333-E53CEE9CCB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AD3D75-6439-43CC-89CE-BA94BB8617A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075C80C7-CF9E-4D0B-8A8F-009DAC9FF84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:260.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5126E768-3CF2-4E88-AC18-23BAD27EDDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:261:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AC8AC7-38F4-4106-8805-8F805C257A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:261.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F460F5ED-2FB6-49B7-9E9F-326388E713C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloud_foundry:bosh:261.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D858418-DCD2-4463-9330-C9A6C3E99237"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4961/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4961/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4963",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier versions. UAA is vulnerable to session fixation when configured to authenticate against external SAML or OpenID Connect based identity providers."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Cloud Foundry Foundation Cloud Foundry release v252 y versiones anteriores, UAA stand-alone release v2.0.0 - v2.7.4.12 y v3.0.0 - v3.11.0, y UAA bosh release v26 y versiones anteriores. UAA es vulnerable a una fijación de sesión cuando está configurado para autenticarse contra proveedores de identidades externos basados en SAML u OpenID Connect."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "252",
            "matchCriteriaId" : "DAA309B2-E073-48D8-9A63-B7DF3C2EAD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.7.4.12",
            "matchCriteriaId" : "1587255F-1BA1-48DE-9515-44182FECB492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.11.0",
            "matchCriteriaId" : "358F315A-CDD2-4C93-B7AC-B0E171BC2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:bosh:*:*",
            "versionEndIncluding" : "26",
            "matchCriteriaId" : "8E77D161-B804-476D-B107-C57216D3D3FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4963/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4963/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4965",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en estas versiones de RabbitMQ de Pivotal: todas las versiones 3.4.x, todas las versiones 3.5.x y versiones 3.6.x anteriores a 3.6.9; y en estas versiones de RabbitMQ de Pivotal para PCF: todas las versiones 1.5.x, versiones 1.6.x anteriores a 1.6.18 y versiones 1.7.x anteriores a 1.7.15. Varios formularios en la interfaz de usuario de administración de RabbitMQ son vulnerables a los ataques de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755456D9-7249-4092-970C-230729E2F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804A09-A266-45F3-BB54-73892AD1D22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DE4A7C-EEA5-46E5-8604-041B721DC3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83206370-1606-4D4C-94F2-6B21885ADB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AA89DA-AE78-409B-B4FF-B743490F76C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90973C7F-E63D-4C00-BB6A-DA2F796697E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451B7B3-9272-4184-B18A-87ED6B3D2756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9166D68-CC18-4F53-9DA6-FA10B93E7702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE205B46-5ACF-44B9-877A-FDC67AA7079F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0FDB23-6A99-4783-871A-CD25E20F044D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A315D37-F74F-4EF2-9F47-9639BEBEAB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE6A4B2-0445-470B-B18C-2CFEB2A52455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B52805C-6F10-4BCD-AA74-3E0C0FF5E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE2FBE9-5D35-4273-8B83-A400D3A0136D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11709F3-3F1C-4FC2-9F2D-87951EC04308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F9F3F6-B1AF-423F-9F96-4329589B323A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECBDFAA-198F-4A47-835A-4E17C090DF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D879D6FD-39D7-4589-8DE7-C8DAAE6F165E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE842A15-D676-4E00-AAD7-1088CE122876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40845F9-00D8-44F0-8B2E-60094A3D37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3772B181-64DB-43AA-99C1-21378CF91E51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "0DA89B77-6455-40CD-931E-BB07CD9A3166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "52350E43-4AB5-45ED-AC31-CC948DB87631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "42856F22-74CD-4278-8EAA-2C6582A7E658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F1C7EE64-A51B-4D02-AAC4-20F4D3FCB110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B0D8589A-B843-4130-8CC8-3D4C464CDB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "62016F87-0B15-4D1B-A2AB-FC4769F95DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "7DF99EF7-AFCB-4CA5-8F28-ABC9118612CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "2D9F3D8B-DDB3-4175-AAD7-8F952E9A7D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C5125B26-63EE-4FE8-97A1-DC6E11757ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "6AF3BAA0-0AEA-4B96-9C91-E51789844A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "DD5F0850-F34B-4E79-A46D-B74F2E90C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "DF23DD7D-16B4-408C-A825-C79487D79A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "E792D92E-07A1-4E48-90CB-5EC7C99E0AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B873D04B-704B-468D-A2B1-8E04653806F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "13C9004B-590A-45F0-8AA9-713928A8F5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F22B84B3-438E-4E08-A02D-4A85C0C561B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "501A5F31-6DBA-4E90-8BAD-E1DFD0967D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "3E99B39C-21AF-4F75-8D96-9B69F48C2A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "0CFACCBF-6C53-4A7F-AC0F-8A2D03E6D6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "3C6E80B6-857B-4D53-B107-8667EFCCE0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "95C7294C-C9D3-40F8-B3C9-40424D5FC124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "66F85747-11AA-4133-B553-3C31152F0781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B425D53C-5713-401E-BE30-BCDE54F65857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "758D57BA-3EA6-4036-8BDD-5BA2AAE25F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "036437B9-1A7F-4C60-B9FE-B38173BC6FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "408D457F-4DE5-4280-8379-083DA78ECF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C9D2B08D-9779-4E80-BAB6-870F81F24F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "90F47590-6640-494F-8A93-A9AC70459DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "5D1F88E0-4047-4ADE-A898-88FE6358D659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "8647C50B-41CB-45CE-89E7-BB4B2759DE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4960386C-07D9-4367-945C-278595DB6C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "A49DCDFA-4D98-4AEC-91A1-612B85DDFB04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4FEB47ED-5D35-4151-B087-8324339DE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "65A513AD-9236-42D7-9D04-F318A5815640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "6647F298-1B11-46D8-B68A-6B284BB1F7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "9997C9C6-4918-4B74-92E4-012B58278DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F6DB5A36-22F9-4A2C-9ED0-68D1434B06D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "33C0370F-77A5-4A51-ABF2-21793CD57043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4C3C0A88-66F6-46D5-9A79-BEFB654979D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "1EC26CD6-172D-4DBE-8B23-59491E4765E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "669EA6CA-3F6C-4151-986D-173F1375B32B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "69960839-7C03-4542-80D3-5C71795F8159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "82CA3E75-AFD0-486A-9EFA-71A8CA780632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "921374B4-B99F-4863-99D8-9FD938EF8EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C5344CFC-3100-4407-93E4-65594C3741B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "06B09408-573D-47A8-BC84-724DD88976E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "ADF54631-875A-45C4-9C0A-4836AB1F8309"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98394",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4965",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4966",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en estas versiones de RabbitMQ de Pivotal: todas las versiones 3.4.x, todas las versiones 3.5.x y versiones 3.6.x anteriores a 3.6.9; y en estas versiones de RabbitMQ de Pivotal para PCF: todas las versiones 1.5.x, versiones 1.6.x anteriores a 1.6.18 y versiones 1.7.x anteriores a 1.7.15. La interfaz de usuario de administración de RabbitMQ almacena las credenciales de los usuarios registrados en el almacenamiento local de un navegador sin expiración, lo que hace posible recuperarlas mediante un ataque encadenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755456D9-7249-4092-970C-230729E2F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804A09-A266-45F3-BB54-73892AD1D22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DE4A7C-EEA5-46E5-8604-041B721DC3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83206370-1606-4D4C-94F2-6B21885ADB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AA89DA-AE78-409B-B4FF-B743490F76C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90973C7F-E63D-4C00-BB6A-DA2F796697E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451B7B3-9272-4184-B18A-87ED6B3D2756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9166D68-CC18-4F53-9DA6-FA10B93E7702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE205B46-5ACF-44B9-877A-FDC67AA7079F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0FDB23-6A99-4783-871A-CD25E20F044D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A315D37-F74F-4EF2-9F47-9639BEBEAB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE6A4B2-0445-470B-B18C-2CFEB2A52455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B52805C-6F10-4BCD-AA74-3E0C0FF5E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE2FBE9-5D35-4273-8B83-A400D3A0136D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11709F3-3F1C-4FC2-9F2D-87951EC04308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F9F3F6-B1AF-423F-9F96-4329589B323A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECBDFAA-198F-4A47-835A-4E17C090DF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D879D6FD-39D7-4589-8DE7-C8DAAE6F165E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE842A15-D676-4E00-AAD7-1088CE122876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40845F9-00D8-44F0-8B2E-60094A3D37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3772B181-64DB-43AA-99C1-21378CF91E51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "0DA89B77-6455-40CD-931E-BB07CD9A3166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "52350E43-4AB5-45ED-AC31-CC948DB87631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "42856F22-74CD-4278-8EAA-2C6582A7E658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F1C7EE64-A51B-4D02-AAC4-20F4D3FCB110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B0D8589A-B843-4130-8CC8-3D4C464CDB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "62016F87-0B15-4D1B-A2AB-FC4769F95DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "7DF99EF7-AFCB-4CA5-8F28-ABC9118612CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "2D9F3D8B-DDB3-4175-AAD7-8F952E9A7D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C5125B26-63EE-4FE8-97A1-DC6E11757ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "6AF3BAA0-0AEA-4B96-9C91-E51789844A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "DD5F0850-F34B-4E79-A46D-B74F2E90C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "DF23DD7D-16B4-408C-A825-C79487D79A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "E792D92E-07A1-4E48-90CB-5EC7C99E0AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B873D04B-704B-468D-A2B1-8E04653806F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "13C9004B-590A-45F0-8AA9-713928A8F5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F22B84B3-438E-4E08-A02D-4A85C0C561B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "501A5F31-6DBA-4E90-8BAD-E1DFD0967D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "3E99B39C-21AF-4F75-8D96-9B69F48C2A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "0CFACCBF-6C53-4A7F-AC0F-8A2D03E6D6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "3C6E80B6-857B-4D53-B107-8667EFCCE0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "95C7294C-C9D3-40F8-B3C9-40424D5FC124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "66F85747-11AA-4133-B553-3C31152F0781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B425D53C-5713-401E-BE30-BCDE54F65857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "758D57BA-3EA6-4036-8BDD-5BA2AAE25F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "036437B9-1A7F-4C60-B9FE-B38173BC6FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "408D457F-4DE5-4280-8379-083DA78ECF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C9D2B08D-9779-4E80-BAB6-870F81F24F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "90F47590-6640-494F-8A93-A9AC70459DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "5D1F88E0-4047-4ADE-A898-88FE6358D659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "8647C50B-41CB-45CE-89E7-BB4B2759DE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4960386C-07D9-4367-945C-278595DB6C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "A49DCDFA-4D98-4AEC-91A1-612B85DDFB04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4FEB47ED-5D35-4151-B087-8324339DE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "65A513AD-9236-42D7-9D04-F318A5815640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "6647F298-1B11-46D8-B68A-6B284BB1F7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "9997C9C6-4918-4B74-92E4-012B58278DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F6DB5A36-22F9-4A2C-9ED0-68D1434B06D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "33C0370F-77A5-4A51-ABF2-21793CD57043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4C3C0A88-66F6-46D5-9A79-BEFB654979D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "1EC26CD6-172D-4DBE-8B23-59491E4765E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "669EA6CA-3F6C-4151-986D-173F1375B32B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "69960839-7C03-4542-80D3-5C71795F8159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "82CA3E75-AFD0-486A-9EFA-71A8CA780632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "921374B4-B99F-4863-99D8-9FD938EF8EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C5344CFC-3100-4407-93E4-65594C3741B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "06B09408-573D-47A8-BC84-724DD88976E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "ADF54631-875A-45C4-9C0A-4836AB1F8309"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4966",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4967",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en estas versiones de RabbitMQ de Pivotal: todas las versiones 3.4.x, todas las versiones 3.5.x y versiones 3.6.x anteriores a 3.6.9; y en estas versiones de RabbitMQ de Pivotal para PCF: todas las versiones 1.5.x, versiones 1.6.x anteriores a 1.6.18 y versiones 1.7.x anteriores a 1.7.15. Varios formularios en la interfaz de usuario de administración de RabbitMQ son vulnerables a los ataques de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755456D9-7249-4092-970C-230729E2F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804A09-A266-45F3-BB54-73892AD1D22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DE4A7C-EEA5-46E5-8604-041B721DC3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83206370-1606-4D4C-94F2-6B21885ADB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AA89DA-AE78-409B-B4FF-B743490F76C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90973C7F-E63D-4C00-BB6A-DA2F796697E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451B7B3-9272-4184-B18A-87ED6B3D2756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9166D68-CC18-4F53-9DA6-FA10B93E7702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE205B46-5ACF-44B9-877A-FDC67AA7079F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0FDB23-6A99-4783-871A-CD25E20F044D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A315D37-F74F-4EF2-9F47-9639BEBEAB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE6A4B2-0445-470B-B18C-2CFEB2A52455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B52805C-6F10-4BCD-AA74-3E0C0FF5E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE2FBE9-5D35-4273-8B83-A400D3A0136D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11709F3-3F1C-4FC2-9F2D-87951EC04308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F9F3F6-B1AF-423F-9F96-4329589B323A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECBDFAA-198F-4A47-835A-4E17C090DF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D879D6FD-39D7-4589-8DE7-C8DAAE6F165E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE842A15-D676-4E00-AAD7-1088CE122876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40845F9-00D8-44F0-8B2E-60094A3D37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3772B181-64DB-43AA-99C1-21378CF91E51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "0DA89B77-6455-40CD-931E-BB07CD9A3166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "52350E43-4AB5-45ED-AC31-CC948DB87631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "42856F22-74CD-4278-8EAA-2C6582A7E658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F1C7EE64-A51B-4D02-AAC4-20F4D3FCB110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B0D8589A-B843-4130-8CC8-3D4C464CDB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "62016F87-0B15-4D1B-A2AB-FC4769F95DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "7DF99EF7-AFCB-4CA5-8F28-ABC9118612CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "2D9F3D8B-DDB3-4175-AAD7-8F952E9A7D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C5125B26-63EE-4FE8-97A1-DC6E11757ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "6AF3BAA0-0AEA-4B96-9C91-E51789844A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "DD5F0850-F34B-4E79-A46D-B74F2E90C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "DF23DD7D-16B4-408C-A825-C79487D79A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "E792D92E-07A1-4E48-90CB-5EC7C99E0AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B873D04B-704B-468D-A2B1-8E04653806F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "13C9004B-590A-45F0-8AA9-713928A8F5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F22B84B3-438E-4E08-A02D-4A85C0C561B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "501A5F31-6DBA-4E90-8BAD-E1DFD0967D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "3E99B39C-21AF-4F75-8D96-9B69F48C2A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "0CFACCBF-6C53-4A7F-AC0F-8A2D03E6D6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "3C6E80B6-857B-4D53-B107-8667EFCCE0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "95C7294C-C9D3-40F8-B3C9-40424D5FC124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "66F85747-11AA-4133-B553-3C31152F0781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "B425D53C-5713-401E-BE30-BCDE54F65857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "758D57BA-3EA6-4036-8BDD-5BA2AAE25F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "036437B9-1A7F-4C60-B9FE-B38173BC6FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "408D457F-4DE5-4280-8379-083DA78ECF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C9D2B08D-9779-4E80-BAB6-870F81F24F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "90F47590-6640-494F-8A93-A9AC70459DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "5D1F88E0-4047-4ADE-A898-88FE6358D659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "8647C50B-41CB-45CE-89E7-BB4B2759DE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4960386C-07D9-4367-945C-278595DB6C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "A49DCDFA-4D98-4AEC-91A1-612B85DDFB04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4FEB47ED-5D35-4151-B087-8324339DE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "65A513AD-9236-42D7-9D04-F318A5815640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "6647F298-1B11-46D8-B68A-6B284BB1F7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "9997C9C6-4918-4B74-92E4-012B58278DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "F6DB5A36-22F9-4A2C-9ED0-68D1434B06D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "33C0370F-77A5-4A51-ABF2-21793CD57043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "4C3C0A88-66F6-46D5-9A79-BEFB654979D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "1EC26CD6-172D-4DBE-8B23-59491E4765E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "669EA6CA-3F6C-4151-986D-173F1375B32B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "69960839-7C03-4542-80D3-5C71795F8159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "82CA3E75-AFD0-486A-9EFA-71A8CA780632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "921374B4-B99F-4863-99D8-9FD938EF8EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "C5344CFC-3100-4407-93E4-65594C3741B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "06B09408-573D-47A8-BC84-724DD88976E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*",
            "matchCriteriaId" : "ADF54631-875A-45C4-9C0A-4836AB1F8309"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4965",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4970",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the Static file build pack causes the Staticfile.auth configuration to be ignored when the Static file file is not present in the application root. Applications containing a Staticfile.auth file but not a Static file had their basic auth turned off when an operator upgraded the Static file build pack in the foundation to one of the vulnerable versions. Note that Static file applications without a Static file are technically misconfigured, and will not successfully detect unless the Static file build pack is explicitly specified."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versión v255 y Staticfile buildpack versiones v1.4.0 hasta v1.4.3 de Cloud Foundry Foundation. Una regresión introducida en el paquete de compilación de archivos Static hace que la configuración de Staticfile.auth sea ignorada cuando el archivo Static file no esté presente en la aplicación root. Las aplicaciones que contienen un archivo Staticfile.auth pero no un archivo Static tuvieron su identificación básica desactivada cuando un operador actualizó el paquete de compilación de archivos Static en la fundación de una de las versiones vulnerables. Tomar en cuenta que las aplicaciones de archivos Static sin un archivo Static están mal configuradas técnicamente y no se detectarán con éxito a menos que el paquete de compilación de archivos Static sea especificada explícitamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:255:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5046C2CB-99C6-4243-B830-B3957910F1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:staticfile_buildpack:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5701A18E-C1F0-4A2D-B2C4-A87F29FCA16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:staticfile_buildpack:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2087B57-6FCA-4FA6-8FB0-F2D998497B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:staticfile_buildpack:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBCCB10-2447-4DB1-A762-F07C1373A5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:staticfile_buildpack:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA73D713-53B5-4F9D-97D7-E1BC391A9D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4970/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4970/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4971",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Spring Web Flow hasta versión 2.4.4 de Pivotal. Las aplicaciones que no cambian el valor de la propiedad useSpringBinding de MvcViewFactoryCreator que está deshabilitada por defecto (es decir, ajustada en \"false\") pueden ser vulnerables a expresiones EL maliciosas en los estados de vista que procesan envíos de formularios pero no tienen un subelemento para declarar asignaciones explícitas de propiedad de enlace de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59073ACA-F7C5-4C50-85E7-80073ED4358A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2CF5C8-DA12-4778-9072-27F27BACAF8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B5074F-2E48-4A4E-AA19-D8883775A818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB71B411-A6F7-4EE3-BE6C-91DFF15DA656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98785",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.spring.io/browse/SWF-1700",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4971",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.spring.io/browse/SWF-1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4972",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. An attacker can use a blind SQL injection attack to query the contents of the UAA database."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versiones anteriores a v257; UAA release versiones 2.x anteriores a v2.7.4.14, versiones 3.6.x anteriores a v3.6.8, versiones 3.9.x anteriores a v3.9.10, y otras versiones anteriores a v3.15.0; y UAA bosh release (uaa-release) versiones 13.x anteriores a v13.12, versiones 24.x anteriores a v24.7, y otras versiones anteriores a v30 de Cloud Foundry Foundation. Un atacante puede usar un ataque de inyección de SQL a ciegas para consultar el contenido de la base de datos UAA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "256",
            "matchCriteriaId" : "9FDE4333-E0BD-4DA7-9869-8739910BC4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "29",
            "matchCriteriaId" : "68FCA5E2-87D1-400C-BF41-12E9C2A09F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D365CB-5BDA-4387-AA3E-2F02B552162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F654A04-B949-415D-982A-7341486B2B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF9F58F-1387-4D84-932F-8CC8F380E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.15.0",
            "matchCriteriaId" : "28BE1352-3E37-4D04-A17F-04E7161DFCCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8157B8-A26B-4148-A02A-DBEC662FE701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F74AEAE-D823-4B1A-9979-0739F6BA17CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97CB502-CE1E-4B63-88D0-7A826C825B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3AAD33-275B-4FF1-9434-BEE85543F7B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4972/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4972/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4973",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versiones anteriores a v257; UAA release versiones 2.x anteriores a v2.7.4.14, versiones 3.6.x anteriores a v3.6.8, versiones 3.9.x anteriores a v3.9.10, y otras versiones anteriores a v3.15.0; y UAA bosh release (uaa-release) versiones 13.x anteriores a v13.12, versiones 24.x anteriores a v24.7, y otras versiones anteriores a v30 de Cloud Foundry Foundation. Se ha identificado una vulnerabilidad con el endpoint groups en UAA permitiendo a los usuarios elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "30",
            "matchCriteriaId" : "C8396327-A941-4AA1-A548-4DA197D25F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F654A04-B949-415D-982A-7341486B2B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF9F58F-1387-4D84-932F-8CC8F380E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_cf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "256",
            "matchCriteriaId" : "B7BC15F3-5AA9-48BE-9D9F-5E0CB9997D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97CB502-CE1E-4B63-88D0-7A826C825B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3AAD33-275B-4FF1-9434-BEE85543F7B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4973/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4973/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4974",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka \"Blind SQL Injection with privileged UAA endpoints.\""
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versiones anteriores a v258; UAA release versiones 2.x anteriores a v2.7.4.15, versiones 3.6.x anteriores a v3.6.9, versiones 3.9.x anteriores a v3.9.11, y otras versiones anteriores a v3.16.0; y UAA bosh release (uaa-release) versiones 13.x anteriores a v13.13, versiones 24.x anteriores a v24.8, y otras versiones anteriores a v30.1 de Cloud Foundry Foundation. Un usuario autorizado puede usar un ataque de inyección SQL a ciegas para consultar el contenido de la base de datos UAA, también se conoce como \"Blind SQL Injection with privileged UAA endpoints.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v257",
            "matchCriteriaId" : "DB81DE95-661D-46E7-900D-10B18EC18EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "30",
            "matchCriteriaId" : "C8396327-A941-4AA1-A548-4DA197D25F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AF658-FFBB-49AB-8A44-9989A7FEC707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B44C3F2-5AC4-4D05-BAF0-EFDFB3FDC3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F654A04-B949-415D-982A-7341486B2B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF9F58F-1387-4D84-932F-8CC8F380E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "FF552C5A-2298-43F4-AF70-20E9E4B402D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D022F9B-4877-4A97-AE22-BAF579B38DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8157B8-A26B-4148-A02A-DBEC662FE701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5A5B1C-7111-464E-9F49-D13621233AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97CB502-CE1E-4B63-88D0-7A826C825B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3AAD33-275B-4FF1-9434-BEE85543F7B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99254",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4974/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4974/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4975",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en PCF Tile Generator versiones anteriores a 6.0.0 de Pivotal. Los mosaicos creados por el PCF Tile Generator crean un grupo de seguridad abierto en ejecución que invalida los grupos de seguridad establecidos por el operador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:pcf_tile_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.7",
            "matchCriteriaId" : "784F2879-DC53-4033-8187-132378A86C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pivotal.io/security/cve-2017-4975",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4991",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.14, 24.x versions prior to v24.9, 30.x versions prior to 30.2, and other versions prior to v36. Privileged users in one zone are allowed to perform a password reset for users in a different zone."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versiones anteriores a 260; UAA release versiones 2.x anteriores a 2.7.4.16, versiones 3.6.x anteriores a 3.6.10, versiones 3.9.x anteriores a 3.9.12, y otras versiones anteriores a 3.17.0; y UAA bosh release (uaa-release) versiones 13.x anteriores a 13.14, versiones 24.x anteriores a 24.9, versiones 30.x anterior a 30.2, y otras versiones anteriores a 36 de Cloud Foundry Foundation. Los usuarios con privilegios de una zona pueden realizar un restablecimiento de contraseña por los usuarios de una zona diferente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "259",
            "matchCriteriaId" : "E08A7651-1329-42BB-BBAA-3C7D61D57E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "35",
            "matchCriteriaId" : "5319D527-5D76-4ADB-8153-36862A85F885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AF658-FFBB-49AB-8A44-9989A7FEC707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F184-AFEC-4992-BFEF-B410CDF1452A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B44C3F2-5AC4-4D05-BAF0-EFDFB3FDC3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BBC265-7026-469B-BB30-D7DB7A334A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E99F4C-6BB5-415E-A5F3-285A3219EEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E24F1B-C999-4C02-BFDD-00F1E2A53E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D365CB-5BDA-4387-AA3E-2F02B552162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "FF552C5A-2298-43F4-AF70-20E9E4B402D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D022F9B-4877-4A97-AE22-BAF579B38DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D2BF0D-963C-430F-A4FE-F452F15035BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8157B8-A26B-4148-A02A-DBEC662FE701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F74AEAE-D823-4B1A-9979-0739F6BA17CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4991/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4992",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versiones anteriores a 261; UAA release versiones 2.x anteriores a 2.7.4.17, versiones 3.6.x anteriores a 3.6.11, versiones 3.9.x anteriores a 3.9.13, y otras versiones anteriores a 4.2.0; y UAA bosh release (uaa-release) versiones 13.x anteriores a 13.15, versiones 24.x anteriores a 24.10, versiones 30.x anteriores a 30.3 y otras versiones anteriores a 37 de Cloud Foundry Foundation. Se presenta una escalada de privilegios (restablecimiento arbitrario de contraseña) con invitaciones de usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "260",
            "matchCriteriaId" : "07F2F02B-1414-4B6A-A544-F00AD397DDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27",
            "matchCriteriaId" : "BBEB6BD4-9D92-4338-8771-A499AC417423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AF658-FFBB-49AB-8A44-9989A7FEC707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F184-AFEC-4992-BFEF-B410CDF1452A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147C8C7B-F6C6-4338-A181-BF450C53C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B44C3F2-5AC4-4D05-BAF0-EFDFB3FDC3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BBC265-7026-469B-BB30-D7DB7A334A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E99F4C-6BB5-415E-A5F3-285A3219EEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D365CB-5BDA-4387-AA3E-2F02B552162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F654A04-B949-415D-982A-7341486B2B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "FF552C5A-2298-43F4-AF70-20E9E4B402D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D022F9B-4877-4A97-AE22-BAF579B38DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D2BF0D-963C-430F-A4FE-F452F15035BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8C3C5E-E942-483A-A914-CC57DDCB6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8157B8-A26B-4148-A02A-DBEC662FE701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F74AEAE-D823-4B1A-9979-0739F6BA17CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FC35CD-79D1-4279-B719-6398C6636113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5A5B1C-7111-464E-9F49-D13621233AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6E52B8-7635-4376-AFAD-935DB44B923C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97CB502-CE1E-4B63-88D0-7A826C825B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3AAD33-275B-4FF1-9434-BEE85543F7B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4992/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4994",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-13T06:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.16, 24.x versions prior to v24.11, 30.x versions prior to 30.4, and other versions prior to v40. There was an issue with forwarded http headers in UAA that could result in account corruption."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en cf-release versiones anteriores a 263; UAA release versiones 2.x anteriores a 2.7.4.18, versiones 3.6.x anteriores a 3.6.12, versiones 3.9.x anteriores a 3.9.14, y otras versiones anteriores a 4.3.0; y UAA bosh release (uaa-release) versiones 13.x anteriores a 13.16, versiones 24.x anteriores a 24.11, versiones 30.x anteriores a 30.4 y otras versiones anteriores a 40 de Cloud Foundry Foundation. Se presentó un problema con los encabezados http reenviados en UAA que podría resultar en corrupción de la cuenta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "39",
            "matchCriteriaId" : "641CFBD1-D8D0-4F7E-BAFD-59A51F3FD353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AF658-FFBB-49AB-8A44-9989A7FEC707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F184-AFEC-4992-BFEF-B410CDF1452A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147C8C7B-F6C6-4338-A181-BF450C53C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555B74DE-E5D6-493B-96B4-87C636104B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B44C3F2-5AC4-4D05-BAF0-EFDFB3FDC3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BBC265-7026-469B-BB30-D7DB7A334A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E99F4C-6BB5-415E-A5F3-285A3219EEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E24F1B-C999-4C02-BFDD-00F1E2A53E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D365CB-5BDA-4387-AA3E-2F02B552162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F654A04-B949-415D-982A-7341486B2B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF9F58F-1387-4D84-932F-8CC8F380E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_cf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "262",
            "matchCriteriaId" : "DFB1693A-98D4-47AB-ADD3-A8412AD24F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "FF552C5A-2298-43F4-AF70-20E9E4B402D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D022F9B-4877-4A97-AE22-BAF579B38DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D2BF0D-963C-430F-A4FE-F452F15035BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8C3C5E-E942-483A-A914-CC57DDCB6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1773D7-B165-414D-9374-9AC8401CE461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8157B8-A26B-4148-A02A-DBEC662FE701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F74AEAE-D823-4B1A-9979-0739F6BA17CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FC35CD-79D1-4279-B719-6398C6636113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5053FDB3-E711-434A-A6A6-4C580A2FF43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5A5B1C-7111-464E-9F49-D13621233AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6E52B8-7635-4376-AFAD-935DB44B923C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97CB502-CE1E-4B63-88D0-7A826C825B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3AAD33-275B-4FF1-9434-BEE85543F7B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-4994/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-4994/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6655",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software on the following Cisco devices when they are configured for FCoE: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. More Information: CSCvc91729. Known Affected Releases: 8.3(0)CV(0.833). Known Fixed Releases: 8.3(0)ISH(0.62) 8.3(0)CV(0.944) 8.1(1) 8.1(0.8)S0 7.3(2)D1(0.47)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del protocolo Fibre Channel over Ethernet (FCoE) en el software NX-OS de Cisco, podría permitir a un atacante adyacente no identificado causar una condición de denegación de servicio (DoS) cuando un proceso relacionado con FCoE se recarga inesperadamente. Esta vulnerabilidad afecta al software de NX-OS de Cisco en los siguientes dispositivos Cisco cuando son configurados para FCoE: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. Más información: CSCvc91729. Versiones Afectadas Conocidas: 8.3(0)CV(0.833). Versiones Corregidas Conocidas: 8.3(0)ISH(0.62) 8.3(0)CV(0.944) 8.1(1) 8.1(0.8)S0 7.3(2)D1(0.47)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:mds_9000_nx-os:7.3\\(1\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "248188E7-3216-435A-9625-FDCEA2C11863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_5500_platform_switches:7.3\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B159EFB5-63F1-4E3E-B015-AC7B4A42A25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_5600_platform_switches:7.3\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B9529-DD6B-40F8-A6E7-CB698C831F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_7700_series_switches:8.0\\(1\\)\\(ed\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16251FB0-AFB1-4B4C-97D8-F7E25D3B3CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167FD2BD-A610-4966-86DF-DA5C78E0D3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(0\\)cv\\(0.833\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6D1E8-D4B1-4AF9-9F7A-4F221A4DB6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98991",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038628",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-nxos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-nxos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6656",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process restarts. More Information: CSCvc29353. Known Affected Releases: 11.0(0.1). Known Fixed Releases: 11.0(0)MP2.153 11.0(0)MP2.62."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo de llamadas de Session Initiation Protocol (SIP) de los dispositivos IP Phone 8800 Series de Cisco, podría permitir a un atacante remoto no identificado causar una condición de denegación de servicio (DoS) debido al reinicio inesperado del proceso SIP. Todas las llamadas telefónicas activas se pierden mientras que el proceso SIP recomienza. Más información: CSCvc29353. Versiones Afectadas Conocidas: 11.0(0.1). Versiones Corregidas Conocidas: 11.0(0)MP2.153 11.0(0)MP2.62."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ip_phone_8800_series:11.0\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62371C8-713D-4F64-836D-ECA413C616EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038636",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-sip",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-sip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6659",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected Releases: 11.5(0) 11.6."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Prime Collaboration Assurance de Cisco, podría permitir a un atacante remoto no identificado conducir un ataque de tipo cross-site request forgery (CSRF) y realizar acciones arbitrarias en un dispositivo afectado. Más información: CSCvc91800. Versiones Afectadas Conocidas: 11.5(0) 11.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.5\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A6A619-18B8-4DD2-A734-8F28BC92DDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458DF130-A84C-49E2-B2B2-4FCB4C990A9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98970",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038633",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-pca",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-pca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6661",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka Message Tracking XSS. More Information: CSCvd30805 CSCvd34861. Known Affected Releases: 10.0.0-203 10.1.0-049."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Email Security Appliance (ESA) y Content Security Management Appliance (SMA) de Cisco, podría permitir a un atacante remoto no identificado conducir un ataque de tipo cross-site-scripting (XSS) contra un usuario de la interfaz de administración basada en web de un dispositivo afectado, también se conoce como XSS de Rastreo de Mensajes. Más información: CSCvd30805 CSCvd34861. Versiones Afectadas Conocidas: 10.0.0-203 10.1.0-049."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:10.0.0-203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB3A4A-CE13-4EF1-AD60-63295EEC6F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:10.1.0-049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF871CD-E3CA-43BC-9FF3-1B792FA32598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:10.0.0-203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F504A58F-D3B1-4403-A662-D7A2D2BA9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:10.1.0-049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E958F0D7-13E1-4240-8622-7A38A783DCB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98950",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038637",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038638",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6666",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de reenvío del software IOS XR de Cisco para Enrutadores Network Convergence System (NCS) 5500 Series de Cisco, podría permitir a un atacante local identificado causar que el router deje de reenviar el tráfico de datos por medio túneles de Ingeniería de Tráfico (TE), resultando en una condición de denegación de servicio (DoS). Más información: CSCvd16665. Versiones Afectadas Conocidas: 6.2.11.BASE. Versiones Corregidas Conocidas: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i. BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC44668-FE9D-47CA-BFD9-BD721ADA9ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BE8485-444F-45E2-BBBB-B69BF322FEB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF1497F-08C0-4064-9AB8-3ED2360F6710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C48F47-B3A9-42D5-8C87-111AEA5BD408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CC4093-80C1-4B0C-82D2-647C625FF42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0235F415-F327-4914-8E2A-96334984797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D093D77E-66E3-4659-820E-F7E03A51A83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C935351A-FC0E-4C83-B596-5A61865D0B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A732BF-A723-48EA-AC0F-813CA5A2DB0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98987",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038630",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6667",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de actualización para el archivo JAR dinámico del kit de desarrollo de software (SDK) de Context Service de Cisco, podría permitir a un atacante remoto no identificado ejecutar código arbitrario en el dispositivo afectado con los privilegios del servidor web. Más información: CSCvb66730. Versiones Afectadas Conocidas: 2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:context_service_development_kit:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D25ACF-D427-4E85-987A-BF9D4CCD3525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98978",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ccs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ccs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6668",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades en la GUI basada en web de Cisco Unified Communications Domain Manager (CUCDM), podrían permitir a un atacante autenticado y remoto afectar la confidencialidad del sistema mediante la ejecución de interrogaciones SQL arbitrarias, también se conoce como Inyección SQL. Más información: CSCvc52784 CSCvc97648. Versiones Afectadas Conocidas: 8.1(7)ER1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\\(7\\)er1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8995B3-6D63-4B62-8BF9-56B26C864845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98947",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038632",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6670",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la GUI basada en web de Cisco Unified Communications Domain Manager, podría permitir a un atacante remoto no autenticado redireccionar a un usuario hacia una página web maliciosa, también se conoce como un problema de Redireccionamiento Abierto. Más información: CSCvc54813. Versiones Afectadas Conocidas: 8.1(7)ER1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\\(7\\)er1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8995B3-6D63-4B62-8BF9-56B26C864845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98946",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038631",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6671",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device, as demonstrated by the Attachment Filter. More Information: CSCvd34632. Known Affected Releases: 10.0.1-087 9.7.1-066. Known Fixed Releases: 10.0.2-020 9.8.1-015."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el escaneo de mensajes de correo electrónico de Cisco AsyncOS Software para Cisco Email Security Appliance (ESA) podría permitir a un atacante remoto no autenticado omitir los filtros configurados en el dispositivo, como lo demuestra el Attachment Filter. Más información: CSCvd34632. Versiones afectadas conocidas: 10.0.1-087 y 9.7.1-066. Versiones solucionadas conocidas: 10.0.2-020 y 9.8.1-015"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance_firmware:9.7.1-066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE95358-5188-4C2E-8B08-5BCD3B2AAE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance_firmware:10.0.1-087:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1A9765-1777-46D1-9727-F20F7CF4AFE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98969",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038635",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esa1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6673",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Firepower Management Center podría permitir a un atacante remoto autenticado obtener información del usuario. Un atacante podría usar esta información para realizar el reconocimiento. Más información: CSCvc10894. Versiones afectadas conocidas: 6.1.0.2 y 6.2.0. Versiones solucionadas conocidas: 6.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53316FAB-A54F-4AB8-B605-FF042B903BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEB9A40-0062-406D-B56D-3163CBBE08D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-fmc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-fmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6674",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de administración de licencias de Cisco Firepower System Software podría permitir a un atacante remoto no autenticado omitir los filtros de URL que se hayan configurado para un dispositivo afectado. Más información: CSCvb16413. Versiones afectadas conocidas: 6.0.1, 6.1.0, 6.2.0 y 6.2.1. Versiones solucionadas conocidas: 6.2.1, 6.2.0.1 y 6.1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBF4E81-9679-480C-8DF8-5F6AEA96943B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C0DE8D-EE79-4B22-8880-8D4631858C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389120A8-415E-4BBB-AFB6-C1283A7BD13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75531FCE-08FA-44F9-9E0F-574A3EB1A10E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98654",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170524-fmc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170524-fmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6675",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Industrial Network Director podría permitir que un atacante remoto no autenticado lleve a cabo un ataque cross-site scripting (XSS) contra un sistema afectado. Más información: CSCvd25405. Versiones afectadas conocidas: 1.1 (0.176)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:industrial_network_director:1.1\\(0.176\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1F8048-9765-4218-88F3-5A0FFDF54395"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98962",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ind",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ind",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6680",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system. More Information: CSCvc76652. Known Affected Releases: 21.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de registro AutoVNF de Ultra Services Framework de Cisco, podría permitir a un atacante remoto no autenticado crear directorios arbitrarios en el sistema afectado. Más información: CSCvc76652. Versiones Afectadas Conocidas: 21.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E859772D-1E47-44E3-93AB-7F68ACFB912D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99001",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6681",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. More Information: CSCvc76662. Known Affected Releases: 21.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la clase AutoVNF VNFStagingView de Cisco Ultra Services Framework podría permitir a un atacante remoto no autenticado ejecutar un ataque de recorrido de ruta relativa, lo que permite a un atacante leer archivos confidenciales del sistema. Más información: CSCvc76662. Versiones afectadas conocidas: 21.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E859772D-1E47-44E3-93AB-7F68ACFB912D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98977",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6682",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commands as the Linux tomcat user on an affected system. More Information: CSCvc76620. Known Affected Releases: 2.2(9.76)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI ConfD de Elastic Services Controllers de Cisco, podría permitir a un atacante autenticado y remoto ejecutar comandos arbitrarios como el usuario tomcat de Linux en un sistema afectado. Más información: CSCvc76620. Versiones Afectadas Conocidas: 2.2(9.76)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98951",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6683",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrary commands as the tomcat user on an affected system, aka an Authentication Request Processing Arbitrary Command Execution Vulnerability. More Information: CSCvc76642. Known Affected Releases: 2.2(9.76)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el archivo esc_listener.py de Elastic Services Controllers de Cisco, podría permitir a un atacante autenticado y remoto ejecutar comandos arbitrarios como el usuario tomcat en un sistema afectado, también se conoce como Vulnerabilidad de Ejecución de Comando Arbitrario del Procesamiento de Peticiones de Autenticación. Más información: CSCvc76642. Versiones Afectadas Conocidas: 2.2(9.76)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98982",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6684",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Elastic Services Controllers podría permitir que un atacante remoto autenticado inicie sesión en un sistema afectado como el usuario administrador de Linux, también conocido como \"Insecure Default Credentials Vulnerability\". Más información: CSCvc76651. Versiones afectadas conocidas: 21.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486C3F08-09D5-4417-A771-DA78C964E67C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98979",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6685",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected Releases: 21.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cisco Ultra Services Framework Staging Server podría permitir a un atacante remoto autenticado con acceso a la red de administración iniciar sesión como usuario administrador del dispositivo afectado, también conocido como \"Insecure Default Credentials Vulnerability\". Más información: CSCvc76681. Versiones afectadas conocidas: 21.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework_staging_server:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664FAE25-071D-40A6-B8E1-6947F709D888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98990",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6686",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known Affected Releases: 21.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Ultra Services Framework Element Manager podría permitir a un atacante remoto autenticado con acceso a la red de administración iniciar sesión como usuario administrativo o operativo del dispositivo afectado, también conocido como \"Insecure Default Credentials Vulnerability\". Más información: CSCvc76699. Versiones afectadas conocidas: 21.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework_element_manager:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9081B39-F915-4A6F-8A92-81DD7BAE5BC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98988",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6687",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system, aka an Insecure Default Password Vulnerability. More Information: CSCvc76695. Known Affected Releases: 21.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Ultra Services Framework Element Manager podría permitir a un atacante remoto autenticado con acceso a la red de administración iniciar sesión en el dispositivo afectado utilizando credenciales predeterminadas presentes en el sistema, también conocida como \"Insecure Default Password Vulnerability\". Más información: CSCvc76695. Versiones afectadas conocidas: 21.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework_element_manager:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9081B39-F915-4A6F-8A92-81DD7BAE5BC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98981",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6688",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux root user, aka an Insecure Default Password Vulnerability. More Information: CSCvc76631. Known Affected Releases: 2.2(9.76)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Elastic Services Controllers de Cisco, podría permitir a un atacante remoto autenticado iniciar sesión en un sistema afectado como usuario root de Linux, también se conoce como una Vulnerabilidad de Contraseña Predeterminada No Segura. Más información: CSCvc76631. Versiones Afectadas Conocidas: 2.2(9.76)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98973",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6689",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.2(9.76)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI ConfD de Elastic Services Controllers de Cisco, podría permitir a un atacante remoto autenticado iniciar sesión en un sistema afectado como usuario administrador, también se conoce como una Vulnerabilidad de Credenciales de Administrador Predeterminadas No Seguras. Más información: CSCvc76661. Versiones Afectadas Conocidas: 2.2(9.76)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98983",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6690",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected Releases: 21.0.v0.65839 21.3.M0.67005. Known Fixed Releases: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la operación de comprobación de archivos de Enrutadores ASR 5000 Series Aggregated Services de Cisco, que ejecutan el sistema operativo StarOS de Cisco, podría permitir a un atacante remoto autenticado sobrescribir o modificar los archivos arbitrarios en un sistema afectado. Más información: CSCvd73726. Versiones Afectadas Conocidas: 21.0.v0.65839 21.3.M0.67005. Versiones Corregidas Conocidas: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1206A9D2-0AA2-4F7A-9AE8-D0BAC299DA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.3.m0.67005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD144CF4-7810-4467-B894-D3EA6E84530C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746254AC-B039-432C-AA5C-A82260E57AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98998",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038634",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6691",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive information on an affected system. More Information: CSCvd29403. Known Affected Releases: 2.3(2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI ConfD de Elastic Services Controllers de Cisco, podría permitir a un atacante autenticado y remoto acceder a la información confidencial en un sistema afectado. Más información: CSCvd29403. Versiones Afectadas Conocidas: 2.3(2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D4B076-9094-43A1-B2BC-0E3F080BF187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98948",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6692",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Ultra Services Framework Element Manager de Cisco, podría permitir a un atacante autenticado y remoto iniciar sesión en el dispositivo con los privilegios del usuario root, también se conoce como una Vulnerabilidad de Información Predeterminada de Cuenta No Segura. Más información: CSCvd85710. Versiones Afectadas Conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework_element_manager:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A26D340-9D9E-47CB-A03B-F36A85B576EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98980",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6693",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access information stored in the file system of an affected system, aka Unauthorized Directory Access. More Information: CSCvd76286. Known Affected Releases: 2.2(9.76) 2.3(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente ConfD server de Elastic Services Controllers de Cisco, podría permitir a un atacante local autenticado acceder a la información almacenada en el sistema de archivos de un sistema afectado, también se conoce como Acceso no autorizado a directorios. Más información: CSCvd76286. Versiones Afectadas Conocidas: 2.2(9.76) 2.3(1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "053E82A5-8630-4197-B428-69B0E0E5E1F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98985",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc7",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6694",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data (cleartext credentials) on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de registro del Administrador de Funciones de Red Virtual (VNFM) de Ultra Services Platform de Cisco, podría permitir a un atacante local autenticado visualizar los datos confidenciales (credenciales de texto sin cifrar) en un sistema afectado. Más información: CSCvd29355. Versiones Afectadas Conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_platform:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9B44D1-0621-4CB4-AD87-E40072F8E855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98972",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usp1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usp1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6695",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servidor ConfD en Ultra Services Platform de Cisco, podría permitir a un atacante local autenticado visualizar la información confidencial. Más información: CSCvd29398. Versiones Afectadas Conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_platform:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9B44D1-0621-4CB4-AD87-E40072F8E855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98963",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usp2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6696",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensitive user credentials that are stored in an affected system. More Information: CSCvd73677. Known Affected Releases: 2.3(2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el sistema de archivos de Elastic Services Controllers de Cisco, podría permitir a un atacante local autenticado conseguir acceso a las credenciales de usuario confidenciales que se almacenan en un sistema afectado. Más información: CSCvd73677. Versiones Afectadas Conocidas: 2.3(2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D4B076-9094-43A1-B2BC-0E3F080BF187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98952",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc8",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6697",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-13T06:29:01.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive system credentials that are stored in an affected system. More Information: CSCvd76339. Known Affected Releases: 2.2(9.76)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Elastic Services Controller de Cisco, podría permitir a un atacante remoto autenticado acceder a las credenciales confidenciales del sistema que se almacenan en un sistema afectado. Más información: CSCvd76339. Versiones Afectadas Conocidas: 2.2(9.76)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98959",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9552",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-06-13T13:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by \"synophoto_dsm_user --auth USERNAME PASSWORD\", and local users are able to obtain credentials by sniffing \"/proc/*/cmdline\"."
      }, {
        "lang" : "es",
        "value" : "Un fallo de diseño en la autenticación en Synology Photo Station de la versión 6.0-2528 a la 6.7.1-3419 permite que usuarios locales obtengan credenciales mediante cmdline. Synology Photo Station emplea el programa synophoto_dsm_user para autenticar el nombre de usuario y la contraseña por \"synophoto_dsm_user --auth USERNAME PASSWORD\" y los usuarios locales pueden obtener credenciales rastreando \"/proc/*/cmdline\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.0-2528:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE9CF02-0D29-4E25-940D-ABA70396800E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.0-2636:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5CB965-0DB4-470C-810F-93255FD6EE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.0-2638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF0D228-FAD1-44AF-A103-CF4157ADB687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.0-2639:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD30021D-5B1B-4694-AAAB-DA87991B4B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.0-2640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2F2249-CBAA-48AD-94DF-2CF34D44A436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2944:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF213FE4-EE94-41A0-B240-F3F66253380D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C66145-57EC-4482-A60A-5C91655ED43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2960:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612BD0F4-09E4-46F6-8069-628DC5F14C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2962:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314BBF84-AAFD-4B8B-8C7C-BEA9A7D86D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2963:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA458-4EF1-4B7C-9321-8838C29C6111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2964:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA143091-3E14-4A11-B8AD-21685EBCE77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2965:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB960C1-0182-4711-ADC2-D15E7EE73EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.4-3166:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58249851-948D-456A-9D92-816CF9D03D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.5.0-3218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27B802A-2213-410B-A517-1EA03B4B3A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.5.1-3223:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DCC751-6662-44AC-869C-D25D3B17C8F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.5.2-3225:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCD0E8C-A452-455B-ADD3-C162B684BB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.5.3-3226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7671D8F-19B2-44FA-A4F2-1A87C831944B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.6.0-3339:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7090BCE8-A479-4FE6-8771-6B5C3385DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.6.1-3345:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0BAE16-43E4-47F5-AA0B-83B671BDAE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.6.1-3346:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1202C8C4-0E03-4BA6-8644-85294B4B6A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.6.2-3346:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184D0C67-4C56-4E6F-AC09-A7AE8AFEF538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.6.3-3347:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A45D93-2194-44C0-8F9E-16F07D6221A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.7.0-3414:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F484A6-FAF7-405D-938F-6747C07954B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.7.1-3419:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE3B09-FBBF-476A-AACA-07CF2C047734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.crozat.net/2017/06/synology-photostation-password-vulnerabilty.html",
        "source" : "security@synology.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Photo_Station_CVE_2017_9552",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.crozat.net/2017/06/synology-photostation-password-vulnerabilty.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Photo_Station_CVE_2017_9552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-13T13:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "KDE kmail anterior a la 5.5.2 y messagelib anterior a la 5.5.2, como distribuciones en aplicaciones KDE anteriores a la 17.04.2, no asegura que la acción de firma del plugin ocurre durante el uso de la característica Send Later, lo que permite a un atacante remoto obtener información sensible mediante la observación de la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "AFE05B36-25E9-45C3-B954-23274FF27E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:messagelib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "EFB5A70C-A555-4661-AD17-FFD7B8401A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:kde:kde:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A3F3E7-0DD1-44DE-BE29-72C6CEA77327"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Tool Signature" ]
      }, {
        "url" : "https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Tool Signature" ]
      }, {
        "url" : "https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Tool Signature" ]
      }, {
        "url" : "https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-13T18:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLAN_ALL ON protection mechanism."
      }, {
        "lang" : "es",
        "value" : "New Relic .NET Agent, en versiones anteriores a la 6.3.123.0 añade errores de inyección SQL en aplicaciones seguras mediante vectores relacionados con el error a la hora de escapar comillas durante el uso de la característica Slow Queries, tal y como queda demostrado con una comilla mal empleada en una cláusula VALUES de una instrucción INSERT, tras omitir un mecanismo de protección SET SHOWPLAN_ALL ON ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newrelic:.net_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.26.0",
            "matchCriteriaId" : "C6ADEDC7-997D-4AF4-8433-D934C211DBE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.seanmcelroy.com/2017/05/26/sql-injection-with-new-relic-patched/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.seanmcelroy.com/2017/05/26/sql-injection-with-new-relic-patched/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-13T18:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el plugin Event List versión 0.7.8 para WordPress, permite a un usuario autenticado ejecutar comandos SQL arbitrarios por medio  del parámetro id en el archivo wp-admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:event_list_project:event_list:0.7.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E06DAD07-5877-4D60-BBC2-272F13250C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42173/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42173/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-13T18:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de SQL injection en el plugin WP Jobs anterior a la versión 1.5 para WordPress permite a usuarios autenticados ejecutar comandos SQL aleatorios mediante el parámetro jobid a wp-admin/edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "C8F25D25-288D-4149-8A3C-5545C9894C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wp-jobs/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42172/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wordpress.org/plugins/wp-jobs/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42172/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1099",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-13T19:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659."
      }, {
        "lang" : "es",
        "value" : "Jazz Foundation de IBM, podría exponer información potencialmente confidencial a los usuarios autenticados por medio de condiciones de error de rastreo de pila. ID de IBM X-Force: 120659."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7E81B-DA97-4545-9C78-962E5FE9202D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E997305-EC48-42C4-9408-EE622818BA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0477D24-56F7-46A2-A08A-C20A90E6E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0514FAC-52CE-41F6-B255-E2D83E71F3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746190AA-6D21-446F-80F5-4C98F5BF74A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08125E1B-FE2B-436C-A69F-067BC1B5C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70C56C7-7811-40F6-BBBD-93E022393041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4377F30-6FDD-4232-92A4-62832E08A934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B494B8-27DC-4FA4-BB86-1FEF51A2FA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CE7D3E-BF02-44DA-ADAE-5CB0E22492AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46883130-F370-406C-A8E8-213399F2EE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13CE71-BEC0-4DEC-9CF7-183672F6729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2451D-F31E-4CF6-8E61-2970A4FB174D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAF452F-94AB-4857-BCD6-AE5251C61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596E71E-4507-4EFC-ABF9-41D8FD338CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B201E3D-1028-4955-AFE2-AF8C14CAA182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C966E0-6372-4CA5-902E-DEE17FC139E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12D7433-30F0-427F-BF82-0AAD492CE35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF2E53-3618-4610-AC36-602584DB26EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF978C93-8747-416A-890B-09575EF0BA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BEB8AD-ACD5-4F5B-8C95-8C1EA8BFE815"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B450B35-5169-4B41-B928-0F22DF55A28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1DD60E-3E2C-4F42-9892-B031CB3B570D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6504477B-9BF5-49F6-8E3A-9B07B30895B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C4948B-69C4-4CAF-808E-426483ED0622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C297440-406F-4508-9D8D-92F79DF91C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C416F89-7E5E-4FE7-A532-F13843AA1771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2654BDE-3134-4653-B472-995B02E9B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9800CBFC-3169-42CA-BB36-22C34F222FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543CFD7E-E204-436E-A88E-212A368F7AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F267A6E4-93BE-43A0-B7EE-04B8143FB0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004534",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120659",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1100",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-13T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120661."
      }, {
        "lang" : "es",
        "value" : "Quality Manager (RQM) versiones 4.0, 5.0 y 6.0 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, y por lo tanto, alterar la funcionalidad deseada que podría conllevar a la revelación de credenciales dentro de una sesión segura. ID de IBM X-Force: 120661."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99006",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120661",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1101",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-13T19:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120662."
      }, {
        "lang" : "es",
        "value" : "Quality Manager (RQM) versiones 4.0, 5.0 y 6.0 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, y por lo tanto, alterar la funcionalidad deseada que podría conllevar a la revelación de credenciales dentro de una sesión segura. ID de IBM X-Force: 120662."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98997",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120662",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1102",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-13T19:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120663."
      }, {
        "lang" : "es",
        "value" : "Quality Manager (RQM) versiones 4.0, 5.0 y 6.0 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, y por lo tanto, alterar la funcionalidad deseada que podría conllevar a la revelación de credenciales dentro de una sesión segura. ID de IBM X-Force: 120663."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99008",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120663",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1104",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-13T19:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120666."
      }, {
        "lang" : "es",
        "value" : "Quality Manager (RQM) versiones 4.0, 5.0 y 6.0 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, y por lo tanto, alterar la funcionalidad deseada que podría conllevar a la revelación de credenciales dentro de una sesión segura. ID de IBM X-Force: 120666."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99004",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120666",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-13T19:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.11.4 defines a backup_handle variable but does not give it an initial value. If one attempts to create a GB surface, with a previously allocated DMA buffer to be used as a backup buffer, the backup_handle variable does not get written to and is then later returned to user space, allowing local users to obtain sensitive information from uninitialized kernel memory via a crafted ioctl call."
      }, {
        "lang" : "es",
        "value" : "La función vmw_gb_surface_define_ioctl (accesible mediante DRM_IOCTL_VMW_GB_SURFACE_CREATE) eb drivers/gpu/drm/vmwgfx/vmwgfx_surface.c en el Kernel de Linux hasta la 4.11.4 define una variable backup_handle pero no da un valor inicial. Si uno intenta crear una superficie GB, con una colocación previa del buffer DMA va ser usado como un buffer backup, la variable backup_handle no consigue escritura, y después es devuelto al espacio de usuario, permitiendo a los usuarios locales obtener información sensible de la memoria del kernel no inicializada mediante la manipulación de la llamada ioctl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.4",
            "matchCriteriaId" : "CEAAE4E7-00CF-47FC-8331-A5B82622BB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07678eca2cf9c9a18584e546c2b2a0d0c9a3150c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99095",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/07678eca2cf9c9a18584e546c2b2a0d0c9a3150c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07678eca2cf9c9a18584e546c2b2a0d0c9a3150c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/07678eca2cf9c9a18584e546c2b2a0d0c9a3150c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7365",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, puede ocurrir una saturación de búfer si una cadena determinada no es finalizada en NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7366",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, una ioctl KGSL no estaba comprobando todos sus parámetros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7367",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una vulnerabilidad de subdesbordamiento de enteros al procesar la imagen de arranque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7368",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, una condición de carrera se presenta potencialmente en el manejador ioctl de un controlador de sonido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7369",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, un índice de matriz en una rutina ALSA no es comprobada apropiadamente lo que conlleva potencialmente a la corrupción de la pila del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7370",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una condición de carrera en un controlador de vídeo que conlleva potencialmente a una condición de uso de la memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7371",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, un puntero de datos es utilizado potencialmente después de que haya sido liberado cuando SLIMbus está apagado mediante Bluetooth."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7372",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una condición de carrera en un controlador de vídeo conllevando a desbordamiento de búfer o a escribir en una ubicación de puntero arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7373",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una vulnerabilidad de doble liberación en un controlador de pantalla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8233",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write."
      }, {
        "lang" : "es",
        "value" : "En una función del controlador de cámara en todas las versiones de Android de CAF usando el kernel de Linux, una comprobación de límites esta faltando cuando se escribe hacia una matriz conllevando a una escritura de pila fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8234",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, potencialmente puede ocurrir un acceso fuera de límites en una función de la cámara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8235",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, una estructura de memoria en un controlador de la cámara no está protegida apropiadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8236",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una vulnerabilidad de desbordamiento de búfer en un controlador IPA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8237",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una vulnerabilidad de desbordamiento del búfer al cargar una imagen de firmware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8238",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una vulnerabilidad de desbordamiento de búfer en una función de la cámara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8239",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to exposure of kernel memory."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, los parámetros controlados  userspace para la inicialización flash no son saneados, conllevando potencialmente a la exposición de la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8240",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, un controlador de kernel presenta una vulnerabilidad de lectura excesiva de búfer por un paso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8241",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una vulnerabilidad de desbordamiento del búfer en una función WLAN debido a una longitud de mensaje incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8242",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-06-13T20:29:01.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Android de CAF usando el kernel de Linux, se presenta una condición de carrera en un controlador QTEE conllevando potencialmente a una escritura de memoria arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5697",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-06-14T12:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page."
      }, {
        "lang" : "es",
        "value" : "Protección insuficiente contra el secuestro de la acción click en la Interfaz de usuario web de Intel AMT versiones de firmware anteriores a 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205 y 11.6.25.1129, que potencialmente permiten a un atacante remoto secuestrar los cliqueos web de los usuarios por medio de la página web especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.40.1000",
            "matchCriteriaId" : "128CB305-59C6-40A9-9E0E-815BC1F1FFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5",
            "versionEndExcluding" : "9.5.60.1952",
            "matchCriteriaId" : "9784196C-F8D7-4F68-BC88-12C34F0F748C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.0.50.1004",
            "matchCriteriaId" : "E75ED508-CF5D-4FEF-8DDC-791691BA9E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.0.0.1205",
            "matchCriteriaId" : "C02C097C-9B6F-4420-A89E-BA2E0BC94074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "11.6.25.1129",
            "matchCriteriaId" : "C69D06FF-7A9E-4ADD-BF92-597053ADBD9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00081&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00081&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0636",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35310230. References: M-ALPS03162263."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de cola de comandos de MediaTek podría permitir que una aplicación maliciosa local ejecute código arbitrario en el contexto del kernel. Este problema se clasifica como Alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: N/A. Android ID: A-35310230. Referencias: M-ALPS03162263"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98866",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0637",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34064500."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en libhevc en Mediaserver podría permitir a un atacante usar un archivo especialmente diseñado para causar daños en la memoria durante el procesamiento de archivos multimedia y de datos. Este problema está clasificado como Crítico debido a la posibilidad de ejecución remota de código dentro del contexto del proceso de Mediaserver. Producto: Android. versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34064500."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/ebaa71da6362c497310377df509651974401d258",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/ebaa71da6362c497310377df509651974401d258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0638",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High because it is a remote arbitrary code execution in an unprivileged process. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36368305."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el componente UI del sistema podría permitir que un atacante que utiliza un archivo especialmente diseñado ejecute código arbitrario dentro del contexto de un proceso no privilegiado. Este problema se califica como alto porque es una ejecución remota de código arbitrario en un proceso no privilegiado. Producto: Android. Versiones: 7.1.1, 7.1.2. ID de Android: A-36368305."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98872",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0639",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35310991."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el componente Bluetooth podría permitir que una aplicación maliciosa local accediera a los datos fuera de sus niveles de permiso. Este problema está clasificado como alto porque es una evasión general para las protecciones del sistema operativo que aíslan los datos de aplicación de otras aplicaciones. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35310991."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98871",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0640",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33129467."
      }, {
        "lang" : "es",
        "value" : "Un denegación de servicio en Mediaserver de Android, podría permitir a un atacante remoto utilizar un archivo especialmente diseñado para hacer que un dispositivo se bloquee se reinicie. Este problema está clasificado como de severidad alta, debido a la posibilidad de denegación de servicio remota. Productos: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33129467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0641",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34360591."
      }, {
        "lang" : "es",
        "value" : "Un denegación de servicio en libvpx en Mediaserver de Android, podría permitir a un atacante remoto utilizar un archivo especialmente diseñado para hacer que un dispositivo se bloquee o se reinicie. Este problema está clasificado como de severidad alta, debido a la posibilidad de denegación de servicio remota. Productos: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34360591."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libvpx/+/698796fc930baecf5c3fdebef17e73d5d9a58bcb",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libvpx/+/698796fc930baecf5c3fdebef17e73d5d9a58bcb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0642",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34819017."
      }, {
        "lang" : "es",
        "value" : "Un denegación de servicio en libhevc en Mediaserver de Android, podría permitir a un atacante remoto utilizar un archivo especialmente diseñado para hacer que un dispositivo se bloquee o se reinicie. Este problema está clasificado como de severidad alta, debido a la posibilidad de denegación de servicio remota. Productos: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34819017."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/913d9e8d93d6b81bb8eac3fc2c1426651f5b259d",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/913d9e8d93d6b81bb8eac3fc2c1426651f5b259d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0643",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-35645051."
      }, {
        "lang" : "es",
        "value" : "Un denegación de servicio en Mediaserver de Android, podría permitir a un atacante remoto utilizar un archivo especialmente diseñado para hacer que un dispositivo se bloquee o se reinicie. Este problema está clasificado como de severidad alta, debido a la posibilidad de denegación de servicio remota. Productos: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-35645051."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0644",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-35472997."
      }, {
        "lang" : "es",
        "value" : "Un denegación de servicio en Mediaserver de Android, podría permitir a un atacante remoto utilizar un archivo especialmente diseñado para hacer que un dispositivo se bloquee o se reinicie. Este problema está clasificado como de severidad alta, debido a la posibilidad de denegación de servicio remota. Productos: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-35472997."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0645",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35385327."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios de Bluetooth podría permitir a una aplicación maliciosa local acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderado debido a que se eluden localmente los requisitos de interacción del usuario. Producto: Android. Versión: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35385327."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98871",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0646",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate due to details specific to the vulnerability. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33899337."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información de Bluetooth podría permitir a una aplicación maliciosa local acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderado debido a que se eluden localmente los requisitos de interacción del usuario. Producto: Android. Versión: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35385327."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98871",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0647",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in libziparchive could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36392138."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en libziparchive podría permitir a una aplicación maliciosa local acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Moderado debido a que puede ser usado para acceder a datos sensibles sin permiso. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36392138."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0648",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-36101220."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el depurador del kernel FIQ podría permitir una aplicación maliciosa local ejecutar código arbitrario en el contexto del kernel. Este problema tiene una severidad Alta debido a la posibilidad de un compromiso permanente del dispositivo local, lo que podría requerir tener que volver a instalar el sistema operativo para reparar el dispositivo. Producto: Android. Versión: Kernel-3.10. Android ID: A-36101220."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98875",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0649",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability specific details which limit the impact of the issue. Product: Android. Versions: N/A. Android ID: A-34468195. References: M-ALPS03162283."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de sonido MediaTek podría permitir una aplicación maliciosa local ejecutar código arbitrario en el contexto del kernel. Este problema se ha clasificado como Moderado debido a que primeramente hay que comprometer un proceso con privilegios y debido a los detalles específicos de la vulnerabilidad lo que limitaría el impacto del problema. Producto: Android. Versión: no aplica. Android ID: A-34468195. References: M-ALPS03162283."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98866",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0650",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35472278."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en controlador de pantalla táctil Synaptics, podría permitir a una aplicación maliciosa local acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Bajo debido a que requiere primero comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.10, Kernel-3.18. Android ID: A-35472278."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37F47C-C217-4BCF-A758-14E1BDBAD63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0651",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35644815."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el subsistema de kernel ION, podría permitir a una aplicación maliciosa local acceder a datos fuera de sus niveles de permiso. Este problema está clasificado como Bajo debido a que requiere primero comprometer un proceso privilegiado. Producto: Android. Versión: Kernel-3.18. Android ID: A-35644815."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CAD86-F652-4B84-932A-A8D9146C9010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98875",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0663",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-06-14T13:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en libxml2 podría permitir a un atacante usar un archivo especialmente diseñado para ejecutar código arbitrario dentro del contexto de un proceso no privilegiado. Este problema se ha calificado como Alto debido a la posibilidad de ejecución remota de código en una aplicación que use esta biblioteca. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37104170"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "security@android.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2810",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-14T13:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad explotable en la funcionalidad Databook loading de Tablib versión 0.11.4. Un Databook cargado yaml puede ejecutar comandos python arbitrarios resultando en la ejecución de comandos. Un atacante puede insertar python hacia yaml cargado para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:tablib:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93FA0B7-1254-4E16-81A4-51AECFBD4186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99076",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-18",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0307",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T13:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given \"URL\" starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string \"file://\")."
      }, {
        "lang" : "es",
        "value" : "En curl en sus versiones anteriores a la 7.54.1 de Windows y DOS, la función libcurl de protocolo por defecto, el cual es lógico que permita una aplicación poner que protocolo libcurl debe intentar usar cuando una URL le es dada sin una parte diseñada, tiene un flaw que podría llevar a sobrescribir buffer heap --heap-- con siete bytes. Si se especifica que el protocolo sea FILE o un archivo: A la URL le faltan dos barras, la URL dada comienza con una letra de unidad, y libcurl es construida para Windows o DOS, entonces libcurl copiaría la ruta de 7bytes, asique el final de la ruta dada escribiría mas allá del buffer reservado (7 bytes son la longitud de la cadena ASCII \"file://\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.54.0",
            "matchCriteriaId" : "4B846EF0-5511-4AD1-8FAC-4232A87785CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/14/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99120",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170614.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7676",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-14T17:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior."
      }, {
        "lang" : "es",
        "value" : "El emparejador de recursos de políticas en Apache Ranger anterior a versión 0.7.1, ignora los caracteres después del carácter comodín “*”, como my*test, test*.txt. Esto puede resultar en un comportamiento no intencionado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ranger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0",
            "matchCriteriaId" : "AE4E138F-A8DE-4F83-9192-9FE18D8962AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98958",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7677",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-14T17:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table."
      }, {
        "lang" : "es",
        "value" : "En entornos que utilizan la ubicación externa para tablas hive, el Autorizador Hive en Apache Ranger anterior a versión 0.7.1, debe comprobar el permiso RWX para crear tabla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ranger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0",
            "matchCriteriaId" : "AE4E138F-A8DE-4F83-9192-9FE18D8962AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98961",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T19:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The user_list_backend.php component is affected: values of the iDisplayStart & iDisplayLength parameters are not sanitized; these are used to construct a SQL query and retrieve a list of registered users into the application."
      }, {
        "lang" : "es",
        "value" : "La aplicación Piwigo esta afectada por una vulnerabilidad de inyección SQL en la versión 2.9.0 y posiblemente anteriores. Esta vulnerabilidad permite a los atacantes identificados  remotos obtener información en el contexto del usuario usado por la aplicación para recuperar datos de la base de datos. El componente del archivo user_list_backend.php se ve afectado: los valores de los parámetros iDisplayStart y iDisplayLength no son saneados; estos se utilizan para construir una consulta SQL y recuperar una lista de usuarios registrados en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "1931608C-2835-4E94-AC78-CCBB6C9EC9E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/commit/42920897ce927c236728d387f61bf03d117109a2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/705",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-003",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/42920897ce927c236728d387f61bf03d117109a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T19:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the \"redirect\" parameter is not validated."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Redireccionamiento Abierto está presente en Piwigo versión 2.9 y anteriores, lo que permite a los atacantes remotos redireccionar a los usuarios a sitios web arbitrarios y conducir ataques de phishing. El componente del archivo identification.php se ve afectado por este problema: el parámetro \"redirect\" no es comprobado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "1931608C-2835-4E94-AC78-CCBB6C9EC9E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/issues/706",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-007",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8907",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-06-14T20:29:00.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so.  An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this vulnerability, provided there is an existing plan with a green build, to create a deployment project and execute arbitrary code on an available Bamboo Agent.  By default a local agent is enabled; this means that code execution can occur on the system hosting Bamboo as the user running Bamboo."
      }, {
        "lang" : "es",
        "value" : "Atlassian Bamboo, en versiones 5.x anteriores a la 5.15.7 y versiones 6.x anteriores a la 6.0.1, no comprobó correctamente si un usuario que crea un proyecto de despliegue tenía el permiso de edición y, por lo tanto, los derechos para hacerlo.  Un atacante que pueda iniciar sesión en Bamboo como usuario sin el permiso de edición para proyectos de despliegue puede emplear esta vulnerabilidad, siempre y cuando exista un plan con un \"green build\" para crear un proyecto de despliegue y ejecute código arbitrario en un agente Bamboo disponible.  Por defecto, un agente local está habilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087D5B44-B9A5-480C-9DDA-16132A79E2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE87C15D-09B8-4B5A-866F-5C2C8A43FB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A5DB02-607E-4147-86BD-205BF33C8A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "54646B4B-05D3-4628-980D-D77C4AAF87F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFD6A97-95B8-4536-AA16-713D76CAC446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9ACEC08-CD6D-4B8F-8A82-A75F925D130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DED96-3E03-48EE-9DF2-0DE73E707845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9E2D3C-D744-4730-83C6-CAFA0C41C916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC6DD-FE26-4A33-99BC-E3C0B90C1A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EB3E57-96E8-42EC-95BE-B14770E450C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC1141-5BE1-4178-9DD7-B7E3CFA59C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64CB47F-1D9B-4C2F-BA47-713F886F2E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E209CB6F-F792-41D9-BC09-41FF771E3659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650A769F-762F-431F-A6B4-3F4AD97C3A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEBC112-E305-4CE6-A935-1D8DBB5A6ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72284F9F-A0DA-4BED-B2CA-83D525ED4A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF3C458-CA8A-4128-BE1C-0AF405D4CC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76C64DA-FAB9-4E72-9F71-088406451285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF61CCA-0502-4DBB-990A-6F602E947C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F2F76E-8150-4432-96A8-52C1D88C1784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2F5445-4C2E-49BF-8B5F-B4AACE00CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BAF1A9-0CBF-4B4F-AD8A-7511659D4FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC432B-4F6C-48A9-9781-F721D254EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE881C-9283-45C3-8982-5887C85C1962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DCD084-030A-4CEB-A16E-765B795E17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64A9422-8C57-4AA8-A166-1C287C09BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44C5F8E-3414-46A8-AC8E-FEF270CBA38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027FC28-00AA-4556-AA9F-C9EF816DFD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209C5313-C450-488E-BF5E-531415B8A484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42F8BBF-3FEF-4922-ACEF-89899337F574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9AAA21-4223-4643-9E39-8DD3FF850B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C45391-347E-4343-8585-58400A219FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0783B9-8610-4710-B0D6-50220D72231A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FA3E09-85DE-48CA-AEC8-ECC5FAA53A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B16FA0-4131-4C34-AEC8-69F1336FC496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E2EBFD-D17C-4539-93D6-5542FC81BD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34040BD5-D443-474E-9AD8-6CD4B2F1F31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FDCCD33-4DB2-4907-A122-D1EE0B41AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBC89FA-A835-45A8-B37A-90ED9134F7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30879C5B-3AC0-46B4-81F5-186ED881840F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E6287B-03F0-443A-ADCB-D93ED072409C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B857798E-7088-40D3-A6EF-9F1D674A7DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A330DDD-E507-42C4-B458-F9825059AF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB54ED38-ABD5-4979-BDB8-0461BA4FE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E21495-A028-4F71-B21C-FBADF3BA8543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493B321D-0034-4AED-8270-3055470BFA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD20A5-B693-4801-9662-79FD68D26FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888DEC36-D4F3-403B-A2F8-83B3AF307934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A11F1D-704A-4FE8-98A6-F1880E20B8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB66A4E-79FD-4793-9218-65A3472ED517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D505A45B-431C-4C5A-B6FC-96C32D31FB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:5.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03895CD-67B9-4F3C-A4C5-9DBED3AF3014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DACC3EE-5898-457C-B9FE-DCBA2634DE4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99090",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-06-14-907283498.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-06-14-907283498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T20:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.7, pedazos mp4 excesivamente profundos podrían causar agotamiento de pila -stack- (recursión incontrolable en la función dissect_mp4_box epan/dissector/file-mp4.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13777",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T20:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.2.7, en los datos DAAP alojados profundamente podrían causar agotamiento de la pila (recursión incontrolada en la función dissect_daap_one_tag en epan/dissectors/packet-daap.c en el disector DAAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99087",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13799",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4981",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-14T21:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability."
      }, {
        "lang" : "es",
        "value" : "RSA BSAFE Cert-C anterior a versión 2.9.0.5 de EMC, contiene una potencial vulnerabilidad de procesamiento inapropiado de certificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:bsafe_cert-c:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.0.5",
            "matchCriteriaId" : "6D714C85-DA08-464A-8481-D16E70D4951D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540720/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99044",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038695",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540720/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4986",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-14T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "ESRS VE versión 3.18 o anterior de EMC, contiene una Omisión de identificación que potencialmente podría ser aprovechada por usuarios maliciosos para poner en peligro el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:secure_remote_services:3.18:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "01434E47-9DD7-4B68-BE21-E822475F0C82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540721/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99036",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038696",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540721/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7910",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-14T21:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting an executable to perform a denial-of-service attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en Digital Canal Structural Wind Analysis en versiones 9.1 y anteriores. Un atacante podría ser capaz de ejecutar código arbitrario explotando de forma remota un ejecutable para realizar un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digital_canal_structural:wind_analysis:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E55C8D-5068-484B-9C8D-4C62E4E50C98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98976",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-157-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-157-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7914",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-14T21:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de falta de autorización en Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730 y 8.00-20141023. No hay comprobación de autorización al conectarse al dispositivo, lo que permite que un atacante logre el acceso remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-882"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00-20140306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EBA0A2-F6F2-4DF0-8FAC-37E5C6768734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7498C8EB-B040-4B5E-BB67-630986C417E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC3FD03-CA9F-427D-B8AB-2280A60738B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7522CC96-D5E9-41AF-95AB-876303767B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.10-20140122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B07AC6A-EFDA-4CC5-937C-6CAD73B3A1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.10.20121012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00391FDB-1094-4FB3-9938-9DEDB1045AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20121012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374DABE1-5D77-4EE3-853A-9FF5AD820861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20130108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031AD257-1BE1-4061-BC6D-1AA0741C99EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20130325:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9743D5-67E5-4DA5-BFDB-E42CD73A8306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20130619:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4A0042-86AF-4BB9-9114-F19777F6312A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20140128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DDD0D2-E7F6-43A9-99A6-6D12B153BB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20140310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CAEE93-3120-4F22-8BE0-46195D489015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20140429:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58A9CCD-3C23-4D1C-815E-C9D107F47B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20140621:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214CB7C5-6241-4589-AA91-014E334FFB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20140729:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC9731-1EA9-4354-959E-494905A45963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:7.00-20141022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3DB916-F40E-4F80-9B28-0CB573585E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:8.00-20140730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94994F4E-0F1D-46FC-A7B2-462838BA4DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:8.00-20141023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8CD419-33AB-43C0-836F-8CC4AFD5F6FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:panelview_plus_6_700-1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3064E9-5257-4D66-A127-E30944447752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-157-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-157-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T21:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) original or (2) new parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad cross-site scripting (XSS) en modules/Base/Lang/Adminsistrator/update_translation.php en EPESI in Telaxus/EPESI 1.8.2 y anteriores permite a atacantes remotos inyectar scripts web aleatorios o código HTML mediantes el original o un nuevo parámetro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "9A6D23F8-17A2-4626-B367-D69DFB6D2433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/commit/3cd666558c89d9c4b27eb74bf6b8e81b4f6e7118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/185",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/commit/3cd666558c89d9c4b27eb74bf6b8e81b4f6e7118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T21:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades cross-site scripting (XSS) en Telaxus/EPESI 1.8.2 y anteriores permite a atacantes remotos inyectar scripts web o código HTML mediante la manipulación de datos comunes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "9A6D23F8-17A2-4626-B367-D69DFB6D2433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/186",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T21:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades corss-site scripting (XSS) en Telaxus/EPESI 1.8.2 y anteriores permite a atacantes remotos inyectar scripts web aleatorios o código HTML mediante la manipulación de los datos de campo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "9A6D23F8-17A2-4626-B367-D69DFB6D2433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-14T21:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades corss-site scripting (XSS) en Telaxus/EPESI 1.8.2 y anteriores permite a atacantes remotos inyectar scripts web aleatorios o código HTML mediante la manipulación de los datos de signo decimal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epesi:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "9A6D23F8-17A2-4626-B367-D69DFB6D2433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Telaxus/EPESI/issues/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0173",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\" This CVE ID is unique from CVE-2017-0215, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versión 1607 y Windows Server 2016, permiten a un atacante aprovechar una vulnerabilidad de omisión de la característica de seguridad en Device Guard, lo que podría permitirle inyectar código malicioso en una sesión de Windows PowerShell, también se conoce como  \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\"  El ID de este CVE es diferente de CVE-2017-0215, CVE-2017-0216, CVE-2017-0218 y CVE-2017-0219."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98873",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0173",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0193",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka \"Hypervisor Code Integrity Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Hyper-V en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703, y Windows Server 2016, permite a un atacante alcanzar privilegios elevados en un sistema operativo invitado de destino cuando la emulación de instrucciones de Windows Hyper-V no logra imponer apropiadamente los niveles de privilegios, también se conoce como  \"Hypervisor Code Integrity Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98878",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038670",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0193",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0215",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\" This CVE ID is unique from CVE-2017-0173, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versión 1607 y Windows Server 2016, permiten a un atacante explotar una vulnerabilidad de omisión de la característica de seguridad en Device Guard, lo que podría permitirle inyectar código malicioso en una sesión de Windows PowerShell, también se conoce como  \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\"  El ID de este CVE es diferente de CVE-2017-0173, CVE-2017-0216, CVE-2017-0218 y CVE-2017-0219."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98879",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038669",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0215",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://posts.specterops.io/umci-bypass-using-psworkflowutility-cve-2017-0215-71c76c1588f9",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://posts.specterops.io/umci-bypass-using-psworkflowutility-cve-2017-0215-71c76c1588f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0216",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\" This CVE ID is unique from CVE-2017-0173, CVE-2017-0215, CVE-2017-0218, and CVE-2017-0219."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versión 1511, Windows 10 versión 1607 y Windows Server 2016, permiten a un atacante aprovechar una vulnerabilidad de omisión de la característica de seguridad en Device Guard, lo que podría permitirle inyectar código malicioso en una sesión de Windows PowerShell, también se conoce como  \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\"   El ID de este CVE es diferente de CVE-2017-0173, CVE-2017-0215, CVE-2017-0218 y CVE-2017-0219."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98896",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0216",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0218",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\" This CVE ID is unique from CVE-2017-0173, CVE-2017-0215, CVE-2017-0216, and CVE-2017-0219."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versión Gold, Windows 10 versión 1511, Windows 10 versión 1607 y Windows Server 2016, permiten a un atacante aprovechar una vulnerabilidad de omisión de la característica de seguridad en Device Guard, lo que podría permitirle inyectar código malicioso en una sesión de Windows PowerShell, también se conoce como \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\"  Este  ID de CVE es diferente de CVE-2017-0173, CVE-2017-0215, CVE-2017-0216 y CVE-2017-0219."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98897",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038669",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0218",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0219",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\" This CVE ID is unique from CVE-2017-0173, CVE-2017-0215, CVE-2017-0216, and CVE-2017-0218."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versión Gold, Windows 10 versión 1511, Windows 10 versión 1607 y Windows Server 2016, permiten a un atacante explotar una vulnerabilidad de omisión de la característica de seguridad en Device Guard, lo que podría permitirle inyectar código malicioso en una sesión de Windows PowerShell, también se conoce como \"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability.\"  El ID de este CVE es diferente de CVE-2017-0173, CVE-2017-0215, CVE-2017-0216 y CVE-2017-0218."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98898",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0219",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0260",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-8506."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Office cuando el programa no maneja apropiadamente los objetos en la memoria, también se conoce como  \"Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512 y CVE-2017-8506."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98810",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038668",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0260",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0282",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka \"Windows Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0284, CVE-2017-0285, and CVE-2017-8534."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3 y Microsoft Office 2010 SP2 permite la divulgación inadecuada del contenido de la memoria, también conocida como \"Windows Uniscribe Information Disclosure Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0284, CVE-2017-0285 y CVE-2017-8534."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98885",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0282",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42237/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42237/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0283",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Business 2016, Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows, and Microsoft Silverlight 5 when installed on Microsoft Windows allows a remote code execution vulnerability due to the way it handles objects in memory, aka \"Windows Uniscribe Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8528."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Business 2016, Microsoft Silverlight 5 Developer Runtime cuando se instala en Microsoft Windows y Microsoft Silverlight 5 cuando se instala en Microsoft Windows permite una vulnerabilidad de ejecución remota de código debido a la forma en que maneja objetos en la memoria , También conocido como \"Windows Uniscribe Remote Code Execution Vulnerability\". Este CVE ID es exclusivo de CVE-2017-8528."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "2530229E-64F1-4218-9378-4F86C7D48EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98920",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038675",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://0patch.blogspot.com/2017/07/0patching-quick-brown-fox-of-cve-2017.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1198",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0283",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42234/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://0patch.blogspot.com/2017/07/0patching-quick-brown-fox-of-cve-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42234/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0284",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:01.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka \"Windows Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0282, CVE-2017-0285, and CVE-2017-8534."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3 y Microsoft Office 2010 SP2 permite la divulgación inadecuada del contenido de la memoria, también conocida como \"Windows Uniscribe Information Disclosure Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0282, CVE-2017-0285 y CVE-2017-8534."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "FFFD8C6B-7A46-484C-8701-81D58AB1C2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98918",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0284",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42235/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42235/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0285",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, and Microsoft Office Word Viewer allows improper disclosure of memory contents, aka \"Windows Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0282, CVE-2017-0284, and CVE-2017-8534."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3 y Microsoft Office 2010 SP2 y Microsoft Office Word Viewer permite la divulgación inadecuada del contenido de la memoria, también conocida como \"Windows Uniscribe Information Disclosure Vulnerability\". Este CVE ID es exclusivo de CVE-2017-0282, CVE-2017-0284 y CVE-2017-8534."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "FFFD8C6B-7A46-484C-8701-81D58AB1C2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98914",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0285",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42236/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42236/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0286",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka \"Windows Graphics Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la divulgación inadecuada del contenido de la memoria, aka Msgstr \"Vulnerabilidad de divulgación de información de Graphics de Windows\". Este ID CVE es exclusivo de CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532 y CVE-2017-8533."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98891",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0286",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42238/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42238/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0287",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka \"Graphics Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0286, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la divulgación inadecuada del contenido de la memoria, aka Msgstr \"Vulnerabilidad de divulgación de información de Graphics Uniscribe. Este CVE ID es exclusivo de CVE-2017-0286, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532 y CVE-2017-8533."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98922",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0287",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42239/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42239/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0288",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka \"Windows Graphics Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la divulgación inadecuada del contenido de la memoria, aka Msgstr \"Vulnerabilidad de divulgación de información de Graphics de Windows\". Este CVE ID es exclusivo de CVE-2017-0286, CVE-2017-0287, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532 y CVE-2017-8533."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98923",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0288",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42241/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42241/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0289",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka \"Windows Graphics Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la divulgación inadecuada del contenido de la memoria, aka Msgstr \"Vulnerabilidad de divulgación de información de Graphics de Windows\". Este CVE ID es exclusivo de CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-8531, CVE-2017-8532 y CVE-2017-8533."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98929",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0289",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42240/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0291",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka \"Windows PDF Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0292."
      }, {
        "lang" : "es",
        "value" : "Windows PDF en Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la ejecución remota de código si un usuario abre un archivo PDF especialmente diseñado, también conocido como \"Windows PDF Remote Vulnerabilidad de ejecución de código \". Este CVE ID es exclusivo de CVE-2017-0292."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98835",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0291",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0292",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka \"Windows PDF Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0291."
      }, {
        "lang" : "es",
        "value" : "Windows PDF en Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la ejecución remota de código si un usuario abre un archivo PDF especialmente diseñado, también conocido como \"Windows PDF Remote Vulnerabilidad de ejecución de código \". Este CVE ID es exclusivo de CVE-2017-0291."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1400A-836A-4E48-B2CD-2B0A9A8241BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98836",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0292",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0294",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute remote code when Windows fails to properly handle cabinet files, aka \"Windows Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten a un atacante ejecutar código remoto cuando Windows falla al manejar correctamente los archivos de tipo cabinet, también conocido como \"Vulnerabilidad de ejecución remota de código de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98837",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0294",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0295",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\\Users\\DEFAULT folder structure, aka \"Windows Default Folder Tampering Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 1607 y 1703 y Windows Server 2016 permiten a un atacante autenticado modificar la estructura de carpetas C:\\Users\\DEFAULT, también conocida como \"Vulnerabilidad de manipulación de carpetas predeterminada de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98904",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038674",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0295",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0296",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it, aka \"Windows TDX Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten a un atacante elevar privilegios cuando tdx.sys no puede comprobar la longitud de un búfer antes de copiar la memoria en él, también conocida como \"Vulnerabilidad de elevación de privilegios de Windows TDX\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98839",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0297",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, CVE-2017-0300."
      }, {
        "lang" : "es",
        "value" : "El núcleo en Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante autenticado obtener información a través de una aplicación especialmente diseñada. Esta vulnerabilidad también es conocida como \"Windows Kernel Information Disclosure Vulnerability\", esta es una vulnerabilidad diferente a CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, CVE-2017-0300."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98840",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0297",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0298",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker to run arbitrary code in another user's session, aka \"Windows COM Session Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un objeto DCOM en Helppane.exe en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016, cuando está configurado para ejecutarse como usuario interactivo, permite a un atacante autenticado ejecutar código arbitrario en la sesión de otro usuario, también conocido como \"Vulnerabilidad de elevación de privilegios de sesión COM de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "AB506484-7F0C-46BF-8EA6-4FB5AF454CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98841",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0298",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0299",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El núcleo en Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante autenticado obtener información a través de una aplicación especialmente diseñada. Esta vulnerabilidad también es conocida como \"Windows Kernel Information Disclosure Vulnerability\", esta es una vulnerabilidad diferente a CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98884",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0299",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42219/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42219/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0300",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El núcleo en Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante autenticado obtener información a través de una aplicación especialmente diseñada. Esta vulnerabilidad también es conocida como \"Windows Kernel Information Disclosure Vulnerability\", esta es una vulnerabilidad diferente a CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98901",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0300",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42244/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42244/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8460",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file, aka \"Windows PDF Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows PDF en Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite la divulgación de información cuando un usuario abre un archivo PDF especialmente creado, se conoce también como \"Windows PDF Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98887",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038678",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8462",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante autenticado conseguir información por medio de una aplicación creada se conoce también como \"Windows Kernel Information Disclosure Vulnerability\", este ID de CVE es una vulnerabilidad diferente de las CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-0300, CVE-2017-0299, y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98900",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8462",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42218/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8464",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.727",
      "lastModified" : "2025-10-22T00:16:11.690",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka \"LNK Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows Shell en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite a los usuarios locales o atacantes remotos ejecutar código arbitrario por medio de un archivo .LNK creado, que no se maneja apropiadamente durante la visualización del icono en el Explorador de Windows o en cualquier otra aplicación que analice el icono del acceso directo. también se conoce como \"LNK Remote Code Execution Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43B1A3-8DAF-4FB5-9549-190E1F2AD9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A637D6-78D0-400D-82A4-FDEFCED069B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A026A3-F59C-48F5-9834-5FB054642136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98818",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42382/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42429/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42382/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42429/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8464",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8465",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-8468."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 R2, Windows 10 versiones Gold, 1511, 1607 y Windows Server 2016, permiten a un atacante ejecutar procesos en un contexto elevado cuando el kernel de Windows maneja inapropiadamente objetos en la memoria, también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8468."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98843",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8465",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8466",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka \"Windows Cursor Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El Cursor de Windows en Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607 y Windows Server 2016 permiten una elevación de privilegios inapropiada, también se conoce como \"Windows Cursor Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98844",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8466",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8468",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-8465."
      }, {
        "lang" : "es",
        "value" : "Los sistemas operativos de Microsoft Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten que un atacante ejecute procesos en un contexto elevado cuando el kernel de Windows maneja de manera inapropiados objetos en la memoria, también se conoce como  \"Win32k Elevation of Privilege Vulnerability\". Este ID de CVE es diferente de CVE-2017-8465."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98846",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8468",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8469",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y Windows Server 2016 permite a un atacante autenticado obtener información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98842",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8469",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42217/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42217/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8470",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten a un atacante autenticado ejecutar una aplicación especialmente creada  cuando el kernel de Windows inicializa inapropiadamente los objetos en la memoria, también se conoce como \"Win32k Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477 y CVE-2017-8484."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8470",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42223/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42223/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8471",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8470, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten a un atacante autenticado ejecutar una aplicación especialmente creada cuando el kernel de Windows inicializa inapropiadamente los objetos en la memoria, también se conoce como \"Win32k Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8470, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477 y CVE-2017-8484."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8471",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42224/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42224/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8472",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484."
      }, {
        "lang" : "es",
        "value" : "En los navegadores Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, y Windows Server 2012 permiten que un atacante autenticado ejecutar una aplicación especialmente creada cuando el kernel de Windows inicializa inapropiadamente los objetos en la memoria, también se conoce como  \"Win32k Information Disclosure Vulnerability\".   Este ID de CVE es diferente de los CVE-2017-8470, CVE-2017-8471, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477 y CVE-2017-8484."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8472",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42225/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8473",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y Windows Server 2016 permiten a un atacante autenticado ejecutar una aplicación especialmente creada cuando el kernel de Windows inicializa inapropiadamente los objetos en la memoria , también se conoce como \"Win32k Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8475, CVE-2017-8477 y CVE-2017-8484."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8473",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42226/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42226/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8474",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:02.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite a un atacante autenticado obtener información por medio de una aplicación especialmente diseñada. también se conoce como \"Windows Kernel Information Disclosure Vulnerability\", una vulnerabilidad diferente de CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8488, CVE-2017-8479, CVE-2017-8476, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:rt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53518A3-04E9-4997-97AD-551DB05EA3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98902",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8475",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8477, and CVE-2017-8484."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten que un atacante autenticado ejecute una aplicación especialmente creada cuando el kernel de Windows se inicializa inapropiadamente objetos en la memoria, también se conoce como \"Win32k Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8477 y CVE-2017-8484."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8475",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8476",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511,1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98903",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8476",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42229/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42229/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8477",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, and CVE-2017-8484."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten a un atacante autenticado ejecutar un especialmente creado aplicación cuando el kernel de Windows inicializa inapropiadamente los objetos en la memoria, también se conoce como \"Win32k Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475 y CVE-2017-8484."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98854",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8477",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42230/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42230/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8478",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98845",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8478",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42231/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42231/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8479",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE -2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8479",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42232/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8480",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\"  una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE -2017-8483, CVE-2017-8482, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98857",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8480",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42233/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8481",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante autenticado conseguir información por medio de una aplicación creada se conoce también como \"Windows Kernel Information Disclosure Vulnerability\",  Este ID de CVE es una vulnerabilidad diferente a las CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98862",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8481",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42242/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42242/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8482",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE -2017-8483, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8482",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42220/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42220/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8483",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8483",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42243/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42243/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8484",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, and CVE-2017-8477."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten a un atacante autenticado ejecutar una aplicación especialmente creada cuando el kernel de Windows inicializa inapropiadamente los objetos en la memoria, también se conoce como \"Win32k Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475 y CVE-2017-8477."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98847",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8484",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42210/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42210/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8485",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8483, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8485",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42228/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8488",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98864",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8488",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42212/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42212/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8489",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8490, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98865",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8489",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42213/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42213/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8490",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8491, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8491, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98867",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8490",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42214/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42214/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8491",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8492, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8492, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98869",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8491",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42215/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8492",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka \"Windows Kernel Information Disclosure Vulnerability,\" a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297."
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información por medio de una aplicación especialmente creada. También se conoce como \"Windows Kernel Information Disclosure Vulnerability,\" una vulnerabilidad diferente de los CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE -2017-8482, CVE-2017-8480, CVE-2017-8479, CVE-2017-8478, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017 -0300, CVE-2017-0299 y CVE-2017-0297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98870",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8492",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42216/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8493",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to set variables that are either read-only or require authentication when Windows fails to enforce case sensitivity for certain variable checks, aka \"Windows Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten a un atacante establecer variables que son de solo lectura o requieren autenticación cuando Windows no puede exigir la confidencialidad de mayúsculas y minúsculas para ciertas comprobaciones de variables, también se conoce como \"Windows Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98850",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8493",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8494",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory, aka \"Windows Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten a un atacante autenticado localmente ejecutar una aplicación especialmente diseñada en un sistema de destino cuando el Modo Kernel Seguro de Windows no maneja apropiadamente los objetos en la memoria, también se conoce como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98855",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8496",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8497."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1607 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando Microsoft Edge tiene acceso incorrecto a objetos en la memoria, también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\". Este ID de CVE es diferente de CVE-2017-8497."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98880",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8496",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42246/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42246/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8497",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8496."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1607 y Windows Server 2016 permite a un atacante ejecutar un código arbitrario en el contexto del usuario actual cuando Microsoft Edge accede inapropiadamente a los objetos en la memoria, también se conoce como  \"Microsoft Edge Memory Corruption Vulnerability\".   Este ID de CVE es diferente de CVE-2017-8496."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8497",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8498",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XML DOM objects to detect installed browser extensions, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8504."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1607 y 1703, y Windows Server 2016, permite a un atacante leer datos no destinados a ser divulgados cuando Edge permite que los objetos DOM XML de Javascript detecten extensiones de navegador instaladas, también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8504."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98886",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8498",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8499",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8520, CVE-2017-8521, CVE-2017-8548, and CVE-2017-8549."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1703 permite a un atacante ejecutar un código arbitrario en el contexto del usuario actual cuando el motor de scripting de JavaScript de Edge no maneja los objetos en la memoria, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8520, CVE-2017-8521, CVE-2017-8548 y CVE-2017-8549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98883",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8499",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8504",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8498."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1607 y 1703, y Windows Server 2016, permite a un atacante leer la dirección URL de una petición entre orígenes cuando la API Fetch de Microsoft Edge maneja inapropiadamente un tipo de respuesta filtrada, también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8498."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98892",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8504",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8506",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-0260."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Office cuando el programa no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\".  Este ID de CVE es diferente de los CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512 y CVE-2017-0260."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "DDA98A76-D0D1-4BFA-BEAC-1C2313F7B859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98811",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038666",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8506",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8507",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka \"Microsoft Office Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en la manera en que el programa de Microsoft Office analiza los mensajes de correo electrónico especialmente creados, también se conoce como  \"Microsoft Office Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "DDA98A76-D0D1-4BFA-BEAC-1C2313F7B859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98827",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038666",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8507",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8508",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka \"Microsoft Office Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de omisión de la característica de seguridad en el software de Microsoft Office cuando maneja inapropiadamente el análisis de formatos de archivo, también se conoce como \"Microsoft Office Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98828",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8508",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8509",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Office cuando el software no maneja apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260 y CVE-2017-8506."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAB1E34-AAEE-4C01-8FA8-6099A74F0731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B10C34-0A0D-4CDD-A2F1-A751B90F4C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onenote:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE50A4D0-ABF4-4EB2-AF63-C8D7E9920099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1400A-836A-4E48-B2CD-2B0A9A8241BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_for_mac:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E1824-01B6-4BAE-9789-B0D3776915B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98812",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8510",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Office cuando el programa no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\".  Este ID de CVE es diferente de los CVE-2017-8509, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260 y CVE-2017-8506."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98813",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038668",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8510",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8511",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Office cuando el software no maneja apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260 y CVE-2017-8506."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9932C177-FCBB-4AD1-A42A-1FAB28F392F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C0BD17-4324-4DFF-9804-1825C4C182A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD8FD65-5B71-4EDB-938E-C721497D1516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint_for_mac:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8183EF0-6363-4372-ABCB-03463EC5FDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98815",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8511",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8512",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-0260, and CVE-2017-8506."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft Office cuando el programa no puede manejar apropiadamente los objetos en la memoria, también se conoce como \"Office Remote Code Execution Vulnerability\".   Este ID de CVE es diferente de los CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-0260 y CVE-2017-8506."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C0BD17-4324-4DFF-9804-1825C4C182A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC865581-3650-4DC4-9138-C2F71AA3B850"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98816",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038668",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8513",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka \"Microsoft PowerPoint Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Microsoft PowerPoint cuando el software no maneja apropiadamente los objetos en la memoria, también se conoce como \"Microsoft PowerPoint Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2E98C5-71A4-4014-AFC4-5438FEC196D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7AEA5E-C3D7-4E6D-96F0-5F9A175631C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98830",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8513",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8514",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:03.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka \"Microsoft SharePoint Reflective XSS Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de divulgación de información cuando el programa Microsoft SharePoint no puede desinfectar apropiadamente las peticiones especialmente creadas, también se conoce como  \"Microsoft SharePoint Reflective XSS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36BB8938-8C63-4375-9DCF-0252FD5CE02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98831",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038663",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8514",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8515",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an unauthenticated attacker to send a specially crafted kernel mode request to cause a denial of service on the target system, aka \"Windows VAD Cloning Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 versión 1511, 1607 y 1703, y Windows Server 2016, permiten a un atacante no identificado enviar una petición de modo kernel especialmente diseñada para causar una denegación de servicio en el sistema de destino, también se conoce como \"Windows VAD Cloning Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98833",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8515",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8517",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8522 and CVE-2017-8524."
      }, {
        "lang" : "es",
        "value" : "Los navegadores de Microsoft en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario el contexto del usuario actual cuando los motores de JavaScript fallan en la interpretación durante el manejo de objetos en memoria en los navegadores de Microsoft, también se conoce como  \"Scripting Engine Memory Corruption Vulnerability\".  Este ID de CVE es diferente de CVE-2017-8522 y CVE-2017-8524."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98895",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038673",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8517",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8519",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8547."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows versión 8.1 y Windows RT versión 8.1, y Windows Server 2012 y R2, permiten a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando Internet Explorer accede inapropiadamente objetos en la memoria, también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8547."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98899",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8519",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8520",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8499, CVE-2017-8521, CVE-2017-8548, and CVE-2017-8549."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1703 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando el motor de scripting de JavaScript perimetral no puede controlar los objetos en la memoria, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8499, CVE-2017-8521, CVE-2017-8548 y CVE-2017-8549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98924",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8520",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8521",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8499, CVE-2017-8520, CVE-2017-8548, and CVE-2017-8549."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 versión 1703, permite a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando el motor de scripting de JavaScript de Edge no maneja objetos en la memoria, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8499, CVE-2017-8520, CVE-2017-8548 y CVE-2017-8549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98925",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8521",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8522",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8517 and CVE-2017-8524."
      }, {
        "lang" : "es",
        "value" : "Los navegadores de Microsoft Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando los motores de JavaScript no se procesan cuando manejan objetos en la memoria en los navegadores de Microsoft, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8517 y CVE-2017-8524."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98926",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038673",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8522",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8523",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-8530 and CVE-2017-8555."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permite a un atacante engañar a un usuario para que cargue una página con contenido malicioso cuando Microsoft Edge no puede aplicar apropiadamente la Política del Mismo Origen para los elementos HTML presentes en otros ventanas del navegador, también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es diferente de CVE-2017-8530 y CVE-2017-8555."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98928",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8523",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8524",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8517 and CVE-2017-8522."
      }, {
        "lang" : "es",
        "value" : "Los navegadores de Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permiten a un atacante ejecutar código arbitrario en el contexto de la usuario actual cuando los motores de JavaScript no se procesan cuando se manejan objetos en la memoria en los navegadores de Microsoft, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8517 y CVE-2017-8522."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98930",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038673",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8524",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8527",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka \"Windows Graphics Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución de código remota debido a la forma en que maneja los objetos en la memoria, también se conoce como \"Windows Graphics Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF9A3D-4EB8-4B2E-B388-04CC0751A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98933",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038680",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8527",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8528",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows a remote code execution vulnerability due to the way it handles objects in memory, aka \"Windows Uniscribe Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0283."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows versiones 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3 y Microsoft Office 2010 SP2, permite una vulnerabilidad de ejecución de código remota debido a la manera en que maneja los objetos en la memoria, también se conoce como \"Windows Uniscribe Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0283."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98949",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8529",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka \"Microsoft Browser Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows versión 8.1 y Windows RT versión 8.1, y Windows Server 2012 y R2, permiten a un atacante detectar archivos específicos en el equipo del usuario cuando los motores de scripting de Microsoft afectados no manejan apropiadamente los objetos en la memoria, también se conoce como \"Microsoft Browser Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98953",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8530",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-8523 and CVE-2017-8555."
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Microsoft Edge en Microsoft Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016 que permite a un atacante engañar a un usuario para que cargue una página con contenido malicioso cuando Microsoft Edge no aplica correctamente las políticas del mismo origen, también se conoce como \" Microsoft Edge Security Feature Bypass Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8523 y CVE-2017-8555."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8530",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8531",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 Service Pack 3, and Microsoft Office 2010 Service Pack 2 allows improper disclosure of memory contents, aka \"Graphics Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8532, and CVE-2017-8533."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 Service Pack 3 y Microsoft Office 2010 Service Pack 2, permite una divulgación inapropiada del contenido de la memoria, también se conoce como \"Graphics Uniscribe Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8532 y CVE-2017-8533."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98819",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8531",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8532",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka \"Graphics Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, and CVE-2017-8533."
      }, {
        "lang" : "es",
        "value" : "Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite la divulgación inapropiada del contenido de la memoria, también se conoce como \"Graphics Uniscribe Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, y CVE-2017-8533."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98820",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8533",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka \"Graphics Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, and CVE-2017-8532."
      }, {
        "lang" : "es",
        "value" : "Los gráficos en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten la divulgación incorrecta de los contenidos de la memoria, alias \"Vulnerabilidad de divulgación de información de Uniscribe de gráficos\". Esta ID de CVE es única de CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531 y CVE-2017-8532."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98821",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8533",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-19-581/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-19-581/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8534",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka \"Windows Uniscribe Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-0282, CVE-2017-0284, and CVE-2017-0285."
      }, {
        "lang" : "es",
        "value" : "Uniscribe en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows versiones 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3 y Microsoft Office 2010 SP2, permite una divulgación inapropiada del contenido de la memoria, también se conoce como \"Windows Uniscribe Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-0282, CVE-2017-0284 y CVE-2017-0285."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98822",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8534",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8543",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.490",
      "lastModified" : "2025-10-22T00:16:12.063",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka \"Windows Search Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8, Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite que un atacante tome el control del sistema afectado cuando la Búsqueda de Windows no puede controlar los objetos en la memoria, también se conoce como el componente \"Windows Search Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Search Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0408DF07-8A1B-47F1-99B2-F2AA77691528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "13B310CD-2A3A-4B89-AAB4-60622FB8EC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "B98DB3FF-CC3B-4E9F-A9CC-EC4C89AF3B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "8733BF37-7BF2-409D-9452-DA8A92DA1124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98824",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038667",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8543",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8544",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to obtain information to further compromise the user's system when Windows Search fails to handle objects in memory, aka \"Windows Search Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten a un atacante obtener información para comprometer más el sistema del usuario cuando Windows Search no maneja objetos en la memoria, también se conoce como \"Windows Search Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98826",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8544",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8545",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka \"Microsoft Outlook for Mac Spoofing Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de suplantación de identidad cuando Microsoft Outlook para Mac no hace un saneamiento apropiado del html, también se conoce como \"Microsoft Outlook for Mac Spoofing Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EDFE7319-3B03-42E7-B73D-907CA8A2C64A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98917",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038664",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8545",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8547",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8519."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows versión 8.1 y Windows RT versión 8.1, y Windows Server 2012 y R2, permiten a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando Internet Explorer accede inapropiadamente a objetos en memoria, también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8519."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98932",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8547",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8548",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\".  This CVE ID is unique from CVE-2017-8499, CVE-2017-8520, CVE-2017-8521, and CVE-2017-8549."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite a un atacante conseguir información para comprometer aún más el sistema de usuario cuando Microsoft Edge maneja inapropiadamente los objetos en la memoria, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID de CVE es diferente de los CVE-2017-8499, CVE-2017-8520, CVE-2017-8521 y CVE-2017-8549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98954",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038676",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8548",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42473/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42473/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8549",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\".  This CVE ID is unique from CVE-2017-8499, CVE-2017-8520, CVE-2017-8521, and CVE-2017-8548."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante obtenga información para comprometer aun más el sistema del usuario cuando Microsoft Edge gestiona incorrectamente los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8499, CVE-2017-8520, CVE-2017-8521 y CVE-2017-8548."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98955",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8549",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8550",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka \"Skype for Business Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota se presenta en Skype for Business cuando el software no puede realizar el saneamiento del contenido especialmente creado, también se conoce como \"Skype for Business Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*",
            "matchCriteriaId" : "E74CB3D6-B0D7-4A6C-ABAA-170C7710D856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98916",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42316/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42316/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8551",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka \"Microsoft SharePoint XSS vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de elevación de privilegios cuando el software Microsoft SharePoint  no puede sanear apropiadamente las peticiones especialmente creadas, también se conoce como \"Microsoft SharePoint XSS vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project_server:2013:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "4257BE20-3E27-4E80-8686-9E80C0D0DACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98913",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038663",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8551",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8552",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE is unique from CVE-2017-0263."
      }, {
        "lang" : "es",
        "value" : "Un controlador del modo kernel en Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, y Windows 8, permite una elevación de privilegios cuando no maneja apropiadamente los objetos en la memoria, también se conoce como \"Win32k Elevation of Privilege Vulnerability\". Este CVE es único de CVE-2017-0263."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8552",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8553",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka \"GDI Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de divulgación de información en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1 y Windows Server 2016 cuando el kernel de Windows maneja de manera inapropiada los objetos en la memoria, también se conoce como \"GDI Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98940",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8553",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8555",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T01:29:04.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-8523 and CVE-2017-8530."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 versión 1703, permite a un atacante engañar a un usuario para que cargue una página con contenido malicioso cuando la Política de Seguridad de Contenido (CSP) de Edge no puede comprobar apropiadamente ciertos documentos especialmente diseñados, también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es diferente de CVE-2017-8523 y CVE-2017-8530."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98956",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8555",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T03:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks."
      }, {
        "lang" : "es",
        "value" : "Infotecs ViPNet Client and Coordinator anterior a la 4.3.2-42442 permite a usuarios locales mediante la colocación de un troyano ViPNet en la carpeta actualizada. El ataque será satisfactorio por los permisos incorrectos de la carpeta junto con la escasez de integridad y la verificación de la autenticidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-354"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infotecs:vipnet_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1",
            "matchCriteriaId" : "DF19E4FF-0D8E-4ACD-98D9-6903BBD9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infotecs:vipnet_coordinator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1",
            "matchCriteriaId" : "01974205-37EB-40F2-8E9F-D68FCC2FEA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Houl777/CVE-2017-9606",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Houl777/CVE-2017-9606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1197",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-15T13:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 123672."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Compliance (TEMA SUAv1 SCA SCM) usa una configuración de cierre de cuenta inadecuada que permitirá a un atacante remoto hacer fuerza bruta contra las credenciales de la cuenta. IBM X-Force ID: 123672."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_security_compliance_analytics:1.9.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF6632-7F43-4E62-BA33-DBB4F91A0432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004170",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123672",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1379",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-15T13:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect versión 5.0.0.0, podría permitir a un atacante remoto obtener información confidencial, causado por el manejo inapropiado de las peticiones hacia el Portal del Desarrollador. ID de IBM X-Force: 127002."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43F8D4-A60E-4C56-B868-8616958A0B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A4F3B4-A3D8-4281-BBB1-8B95297657F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049722A-338F-49FA-A9B2-2A432F04D2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12F86C-FBDF-4231-B4EA-4279FC730088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBC9AEC-CD8B-4F2A-99A7-469B93107B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB03CE4-C3EE-41E9-9321-9AB9829FDB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B9AC88-C53D-4810-B21E-7A836524859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61864755-C7B6-416C-9D3E-334AB3D94825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB9030-50A4-4B9B-8457-9DB9E13B3211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB6EF04-A24E-4857-8C7A-DE779AFA8B70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004714",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99063",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127002",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T13:29:00.250",
      "lastModified" : "2025-08-14T13:29:49.357",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las variables no inicializadas de la pila -stack- en la función load_tic_series() en set.c de gnuplot 5.2.rc1 permite a un atacante causar una denegación de servicio (fallo de segmentación y corrupción de memoria) o posiblemente tener otro impacto no especificado cuando la victima abre una archivo especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnuplot:gnuplot:5.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D76EE490-0FA0-4593-B4ED-07B3F3D54949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/gnuplot/bugs/1933/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/gnuplot/bugs/1933/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5244",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-06-15T14:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Only POST requests should have been allowed, as the stop/stop_all routes change the state of the service. This could have allowed an attacker to stop currently-running Metasploit tasks by getting an authenticated user to execute JavaScript. As of Metasploit 4.14.0 (Update 2017061301), the routes for stopping tasks only allow POST requests, which validate the presence of a secret token to prevent CSRF attacks."
      }, {
        "lang" : "es",
        "value" : "Las rutas empleadas para dejar de ejecutar tareas de Metasploit (específicas o todas) permitían peticiones GET. Solo deberían haberse permitido las peticiones POST, ya que las rutas stop/stop_all cambian el estado del servicio. Esto podría haber permitido que un atacante detenga las tareas de Metasploit actualmente en ejecución haciendo que un usuario autenticado ejecute JavaScript. En Metasploit 4.14.0 (Update 2017061301), las rutas para detener tareas solo permiten peticiones POST, que validan la presencia de un token secreto para evitar ataques Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.19",
            "matchCriteriaId" : "F0B5DBE6-9BC1-47DD-9F27-AAED6E2E9501"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99082",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/metasploit/blog/2017/06/15/r7-2017-16-cve-2017-5244-lack-of-csrf-protection-for-stopping-tasks-in-metasploit-pro-express-and-community-editions-fixed",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/metasploit-web-project-kill-all-running-tasks-csrf-CVE-2017-5244/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/metasploit/blog/2017/06/15/r7-2017-16-cve-2017-5244-lack-of-csrf-protection-for-stopping-tasks-in-metasploit-pro-express-and-community-editions-fixed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/metasploit-web-project-kill-all-running-tasks-csrf-CVE-2017-5244/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9505",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-06-15T16:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notification about new comments. An attacker who can login to Confluence could receive workbox notifications, which contain the content of comments, for comments added to a page after they started watching it even if they do not have permission to view the page itself."
      }, {
        "lang" : "es",
        "value" : "Atlassian Confluence desde la versión 4.3.0 hasta la 6.2.1 no comprobaba si un usuario tenía permiso para visualizar una página mientras se creaba una notificación workbox sobre nuevos comentarios. Un atacante que pueda iniciar sesión en Confluence podría recibir notificaciones workbox, que contienen los comentarios, para los comentarios añadidos a una página una vez que han empezado a verla aunque no tengan permiso para visualizar la propia página."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "6.2.1",
            "matchCriteriaId" : "9806EAE9-4652-46DF-866A-B580435705E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99086",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-52560",
        "source" : "security@atlassian.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170613-0_Atlassian_Confluence_Access_Restriction_Bypass_v10.txt",
        "source" : "security@atlassian.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-52560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170613-0_Atlassian_Confluence_Access_Restriction_Bypass_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T18:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated users to inject arbitrary web script or HTML via the file upload functionality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-site scripting (XSS) en SAP SuccessFactors anterior a la versión b1705.1234962 permite a un usuario autenticado inyectar scripts web aleatorios o código HTML mediante la funcionalidad de subida de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:successfactors:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "b1702p5e.1190658",
            "matchCriteriaId" : "DA617A47-5CBF-4683-BFC2-C9DF2AF4E584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540731/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99072",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142952/SAP-Successfactors-b1702p5e.1190658-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540731/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142952/SAP-Successfactors-b1702p5e.1190658-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T18:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password."
      }, {
        "lang" : "es",
        "value" : "En SimpleCE 2.3.0, una vulnerabilidad CSRF puede ser explotada para añadir una cuenta de administrador (mediante la URL index.php/user/new) o cambiando su configuración (mediante la URL index.php/user/1), incluyendo su contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplece:simplece:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "6A9D8FD9-499D-480E-AA9E-2ECD0D10145D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/142944/SimpleCE-2.3.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142944/SimpleCE-2.3.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return_url=[XSS] exploitable as a regular or admin user."
      }, {
        "lang" : "es",
        "value" : "En SimpleCE 2.3.0, una vulnerabilidad XSS autentificada fue encontrada en index.php/content/text/1?retunr_url=[XSS] explotable como un usuario raso o un admin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplece:simplece:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "6A9D8FD9-499D-480E-AA9E-2ECD0D10145D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/142944/SimpleCE-2.3.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142944/SimpleCE-2.3.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T19:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en el plugin WP Custom Fields Search versión 0.3.28 de Webhammer para WordPress, permite a los atacantes remotos inyectar JavaScript arbitrario por medio del parámetro cs-all-0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhammer:wp_custom_fields_search:0.3.28:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "807AAD2B-9D07-4E78-95B8-F08F7E55037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T19:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot."
      }, {
        "lang" : "es",
        "value" : "En dispositivos D-Link DIR-605L, el firmware en versiones anteriores a la 2.08UIBetaB01.bin permite que una petición GET desencadene un reinicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.08b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856F56E-5C0D-45B1-ADC8-8E08FEE8ED2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_RELEASE_NOTES_v2.08UIBETAB01_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43147/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_RELEASE_NOTES_v2.08UIBETAB01_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43147/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T20:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function."
      }, {
        "lang" : "es",
        "value" : "QNAP QTS anterior a versión 4.2.6, build 20170517, presenta un fallo en la función change password."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "939BC735-3214-4222-91A7-F24A8B66B218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en-us/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-15T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad de inyección de comandos en el QTS permite a los atacantes ejecutar comandos arbitrarios en la aplicación comprometida. QNAP ya ha solucionado el problema en QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 y versiones posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "939BC735-3214-4222-91A7-F24A8B66B218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/release-notes/qts/4.2.6/20170517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/en/release-notes/qts/4.3.3.0174/20170503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201707-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qnap.com/en/release-notes/qts/4.2.6/20170517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qnap.com/en/release-notes/qts/4.3.3.0174/20170503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201707-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8461",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka \"Windows RPC Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Windows RPC con enrutamiento y acceso remoto habilitado en Windows XP y Windows Server 2003 permite a un atacante ejecutar código en un servidor RPC de destino que tiene habilitado el enrutamiento y acceso remoto por medio de una aplicación especialmente creada, también se conoce como \"Windows RPC Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3527F41-A6ED-437D-9833-458A2C60C2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99012",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038701",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8487",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-15T20:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka \"Windows olecnv32.dll Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Fue encontrada una Vulnerabilidad en Windows OLE en Windows XP y Windows Server 2003 que permite a un atacante ejecutar código cuando una víctima abre un archivo o programa especialmente creado, también se conoce como \"Windows olecnv32.dll Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3527F41-A6ED-437D-9833-458A2C60C2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99013",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038702",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42211/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42211/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T03:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file."
      }, {
        "lang" : "es",
        "value" : "En Anti-Web hasta la versión 3.8.7, tal y como se emplea en dispositivos NetBiter FGW200 hasta la versión 3.21.2, dispositivos WS100 hasta la versión 3.30.5, dispositivos EC150 hasta la versión 1.40.0, dispositivos WS200 hasta la versión3.30.4, dispositivos EC250 hasta la versión 1.40.0 y otros productos, una vulnerabilidad LFI permite que un atacante remoto lea o modifique archivos mediante una técnica de salto de directorio. Esto se demuestra por la lectura del archivo de contraseña o mediante el uso del parámetro template en cgi-bin/write.cgi para escribir en un archivo arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.7",
            "matchCriteriaId" : "1E1A03EF-D59E-4045-9A1C-022BE576FA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.0.7:hms2:*:*:*:*:*:*",
            "matchCriteriaId" : "E69C56A5-2A87-45C8-BC6A-7663AC417BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA87DB52-ACBF-447D-8890-FF6E2CA26676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FBB2D5-903C-4744-B415-AA9E67DE4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F9411-BDB6-4A64-AA59-9B076DFCB4D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013E037C-EFDD-47EA-88C3-2F65F5D1381B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62658ADB-AFF8-4E8A-91C4-8D8C2FC4C4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E212BC-C04E-4421-B988-716312AECF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEE5220-1468-4BD3-85B3-4E199060887D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49BD5F4-8773-4B50-BB53-4834F34216D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB108B76-FD67-442E-BA85-B8AD86EB9317"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://misteralfa-hack.blogspot.cl/2017/05/apps-industrial-ot-over-server-anti-web.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ezelf/industrial_Tools/tree/master/scadas_server_antiweb/LFI",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.netbiter.com/docs/default-source/netbiter-english/software/hms-security-advisory-2017-05-24-001-ws100-ws200-ec150-ec250.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://misteralfa-hack.blogspot.cl/2017/05/apps-industrial-ot-over-server-anti-web.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ezelf/industrial_Tools/tree/master/scadas_server_antiweb/LFI",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.netbiter.com/docs/default-source/netbiter-english/software/hms-security-advisory-2017-05-24-001-ws100-ws200-ec150-ec250.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación wawa-employets-credit-union-mobile/id1158082793 versión 4.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wawacu:wawa_employees_credit_union_mobile:4.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "A90DF6A9-0EDC-4665-8B82-DF2A96C282A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación vision-bank de MEA Financial/id420406345 versión 3.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:vision_bank:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "85302187-43D4-4C04-B36C-6EBFCF175ED7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación cayuga-lake-national-bank/id1151601539 versión 4.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cayugalakenationalbank:cayuga_lake_national_bank:4.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "559C1C82-D20A-4C93-9170-D51B4FB0B548"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación lbtc-mobile de Lee Bank & Trust/id1068984753 versión 3.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lbtc:lee_bank_\\&_trust:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E4579A8B-0179-4527-A8FA-41E236503BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación freedom-1st-credit-union-mobile-banking de Freedom First/id1085229458 versión 3.0.0 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:freedom_1st_credit_union_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "BBE5E5A9-C2B1-422F-AD77-C27163BCAFB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación fccb de First Citizens Community Bank/id809930960 versión 3.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:fccb:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "9B2E6F74-B97A-49C4-B76A-E82138A30844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación community-banks-cb2go/id445828071 versión 3.1.3 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes en el medio falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:community_banks_cb2go:3.1.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "966FB4A8-FC26-4EAE-9C86-EE50E4557345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The first-security-bank-sleepy-eye-mobile/id870531890 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación first-security-bank-sleepy-eye-mobile/id870531890 versión 3.0.0 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente diseñado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:first_security_bank_sleepy_eye_mobile:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "8FF614B1-CB34-4246-8A7F-8C2677A4516A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación fsb-dequeen-mobile-banking/id1091025340 versión 3.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:fsb_dequeen_mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "1AE588B4-AF02-4B0D-A9C2-273169B0400B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación avb-bank-mobile-banking/id592565443 versión 3.0.0 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:avb_bank_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "BED1E550-1134-41CF-8943-5935D2ADD9C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación financial-plus-mobile-banking/id731070564 versión 3.0.3 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes en el medio falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myfpcu:financial_plus_mobile_banking:3.0.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "248C7457-05CA-4609-832C-CA186FA2EBA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Citizens Bank (TX) cbtx-on-the-go/id892396102 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación cbtx-on-the-go de Citizens Bank (TX)/id892396102 versión 3.0.0 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes en el medio falsificar los servidores y obtener información confidencial por medio de un certificado especialmente  diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citizensbanktx:cbtx_on_the_go:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "383B8A4A-B407-4121-8137-26EA9353E42C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mount-vernon-bank-trust-mobile-banking/id542706679 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación mount-vernon-bank-trust-mobile-banking/id542706679 versión 3.0.0 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:mount_vernon_bank_\\&_trust_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D183892E-C61C-44C7-86DB-2C91A2ECF554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Citizens Community Bank (TN) ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación ccb-mobile-banking de Citizens Community Bank (TN)/id610030469 versión 3.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccbank:ccb_mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "7C530FB0-BB88-4DDF-9E35-65EF4884ADED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The athens-state-bank-mobile-banking/id719748589 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación athens-state-bank-mobile-banking/id719748589 versión 3.0.0 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:athensstatebank:athens_state_bank_mobile:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "6FD27007-9397-442C-B03A-E40089C8AFB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The North Adams State Bank (Ursa) nasb-mobile-banking/id980573797 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación nasb-mobile-banking de North Adams State Bank (Ursa)/id980573797 versión 3.0.1 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:northadamsbank:nasb_mobile_bank:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "7808FEA0-8FD6-4997-A453-914048C8C680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"KC Area Credit Union Mobile Banking\" by K C Area Credit Union app 3.0.1 -- aka kc-area-credit-union-mobile-banking/id1097607736 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"KC Area Credit Union Mobile Banking\" de K C Area Credit Union versión 3.0.1 -- también se conoce kc-area-credit-union-mobile-banking/id1097607736 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente  diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:kc_area_credit_union_mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "EA5CC55E-BFF2-4D17-A826-DAC5E5950ED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"FVB Mobile Banking\" by First Volunteer Bank of Tennessee app 3.1.1 -- aka fvb-mobile-banking/id551018004 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"FVB Mobile Banking\" de First Volunteer Bank of Tennessee versión 3.1.1 -- también se conoce como fvb-mobile-banking/id551018004 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar a los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:fvb_mobile_banking:3.1.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "5A576997-1419-47A3-973C-50754FB7D3CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Middleton Community Bank Mobile Banking\" by Middleton Community Bank app 3.0.0 -- aka middleton-community-bank-mobile-banking/id721843238 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Middleton Community Bank Mobile Banking\" de Middleton Community Bank versión 3.0.0 -- también se conoce como middleton-community-bank-mobile-banking/id721843238 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar a los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mononabank:middleton_community_bank_mobile:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B01853C5-0C95-4C2C-BB4F-6133953D230A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"First Citizens Bank-Mobile Banking\" by First Citizens Bank (AL) app 3.0.0 -- aka first-citizens-bank-mobile-banking/id566037101 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"First Citizens Bank-Mobile Banking\" de First Citizens Bank (AL) versión 3.0.0 -- también se conoce como first-citizens-bank-mobile-banking/id566037101 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fcbl:first_citizens_bank-mobile:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "7E0FB9BF-29DA-4050-82B2-41C883E1FF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"RVCB Mobile\" by RVCB Mobile Banking app 3.0.0 -- aka rvcb-mobile/id757928895 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"RVCB Mobile\" de RVCB Mobile Banking versión 3.0.0 -- también se conoce como rvcb-mobile/id757928895 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial  por medio de un certificado especialmente  diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rivervalleycommunitybank:rvcb_mobile:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "9188C3AA-6718-4F45-83BA-B2A7EE6101AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"JMCU Mobile Banking\" by Joplin Metro Credit Union app 3.0.0 -- aka jmcu-mobile-banking/id716065893 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"JMCU Mobile Banking\" de Joplin Metro Credit Union versión 3.0.0 -- también se conoce como jmcu-mobile-banking/id716065893 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:jmcu_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "CF8E4366-C0D9-4FEA-9A99-496BE8CED57C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Pioneer Bank & Trust Mobile Banking\" by PIONEER BANK AND TRUST app 3.0.0 -- aka pioneer-bank-trust-mobile-banking/id603182861 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Pioneer Bank & Trust Mobile Banking\" de PIONEER BANK AND TRUST en versiones 3.0.0 (también llamada pioneer-bank-trust-mobile-banking/id603182861) para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:pioneer_bank_\\&_trust_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "C9FB3DBE-A2AA-4CA5-980D-9661D8263899"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Algonquin State Bank Mobile Banking\" by Algonquin State Bank app 3.0.0 -- aka algonquin-state-bank-mobile-banking/id1089657735 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Algonquin State Bank Mobile Banking\" de Algonquin State Bank versión 3.0.0 -- también se conoce como algonquin-state-bank-mobile-banking/id1089657735 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:algonquin_state_bank_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "89B1D702-5C7F-4224-9047-E8BD8B82FFC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"BNB Mobile Banking\" by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"BNB Mobile Banking\" de Brady National Bank  versión 3.0.0 -- también se conoce como bnb-mobile-banking/id674215747 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle  falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bradynationalbank:bnb_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "337EBBDC-85B6-4D94-AEE5-7EE377D17F79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Charlevoix State Bank\" by Charlevoix State Bank app 3.0.1 -- aka charlevoix-state-bank/id1128963717 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Charlevoix State Bank\"  de Charlevoix State Bank versión 3.0.1 -- también se conoce como charlevoix-state-bank/id1128963717 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:charlevoix_state_bank:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E9278BD2-01CE-408C-B071-32A9C36A05DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"HBO Mobile Banking\" by Heritage Bank of Ozarks app 3.0.0 -- aka hbo-mobile-banking/id860224933 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"HBO Mobile Banking\" de Heritage Bank de Ozarks app 3.0.0 también conocido como hbo-mobile-banking/id860224933 para iOS no verifica los certificados X.509 de los servidores SSL, lo cual permite a los atacantes man-in-the-middle suplantar servidores y obtener información sensible mediante certificados manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heritagebankozarks:hbo_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "18746F77-0CDF-4F78-87C2-060A5C7A74AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Community State Bank - Lamar Mobile Banking\" by Community State Bank - Lamar app 3.0.3 -- aka community-state-bank-lamar-mobile-banking/id1083927885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Community State Bank - Lamar Mobile Banking\" de Community State Bank - Lamar versión 3.0.3 -- también se conoce como community-state-bank-lamar-mobile-banking/id1083927885 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente  diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csb-lamar:community_state_bank-lamar:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E16CD119-9180-4636-A910-CE9333E25869"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"FSBY Mobile Banking\" by First State Bank of Yoakum TX app 3.0.0 -- aka fsby-mobile-banking/id899136434 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Pioneer Bank & Trust Mobile Banking\" de First State Bank of Yoakum TX en versiones 3.0.0 (también llamada fsby-mobile-banking/id899136434) para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:fsby_mobile_banking:3.0.0:*:*:*:iphone_os:*:*:*",
            "matchCriteriaId" : "702A3050-8402-4203-A024-E05E73294861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"PCSB BANK Mobile\" by PCSB Bank app 3.0.4 -- aka pcsb-bank-mobile/id1067472090 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"PCSB BANK Mobile\" de PCSB Bank versión 3.0.4 -- también se conoce como pcsb-bank-mobile/id1067472090 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:pcsb_bank_mobile:3.0.4:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "4CABCD8C-71A1-4D31-955E-F5D7ECC47E59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Oritani Mobile Banking\" by Oritani Bank app 3.0.0 -- aka oritani-mobile-banking/id778851066 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Oritani Mobile Banking\" de Oritani Bank versión 3.0.0 -- también se conoce como oritani-mobile-banking/id778851066 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:oritani_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "25FB6F35-0767-401F-BCEA-36C1265722D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"SCSB Shelbyville IL Mobile Banking\" by Shelby County State Bank app 3.0.0 -- aka scsb-shelbyville-il-mobile-banking/id938960224 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"SCSB Shelbyville IL Mobile Banking\" de Shelby County State Bank versión 3.0.0 -- también se conoce como scsb-shelbyville-il-mobile-banking/id938960224 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente  diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:scsb_shelbyville_il_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "21146E65-5AC9-4BF1-8794-8264FB6C7948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"State Bank of Waterloo Mobile Banking\" by State Bank of Waterloo app 3.0.2 -- aka state-bank-of-waterloo-mobile-banking/id555321714 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"State Bank of Waterloo Mobile Banking\" de State Bank of Waterloo en versiones 3.0.2 (también llamada state-bank-of-waterloo-mobile-banking/id555321714) para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sbw:state_bank_of_waterloo_mobile_banking:3.0.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "FE136AE5-A1BE-4DE4-B184-3F9130A16710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"PCB Mobile\" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"PCB Mobile\" de Phelps County Bank versión 3.0.2 -- también se conoce como pcb-mobile/id436891295 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial  por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mypcb:pcb_mobile:3.0.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "31FA27E5-71BF-451F-B3AF-1BB232F0D627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Your Legacy Federal Credit Union Mobile Banking\" by Your Legacy Federal Credit Union app 3.0.1 -- aka your-legacy-federal-credit-union-mobile-banking/id919131389 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Your Legacy Federal Credit Union Mobile Banking\" de Your Legacy Federal Credit Union versión 3.0.1 -- también se conoce como your-legacy-federal-credit-union-mobile-banking/id919131389 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:your_legacy_federal_credit_union_mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "FFAB3498-4FA3-4A92-839A-2916061AD3BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Oculina Mobile Banking\" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Oculina Mobile Banking\" de Oculina Bank versión 3.0.0 -- también se conoce como oculina-mobile-banking/id867025690 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:oculina_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "DD20719C-02E1-4F68-8698-2CE6ABE77BCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"SVB Mobile\" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"SVB Mobile\" de Sauk Valley Bank Mobile Banking versión 3.0.0 -- también se conoce como svb-mobile/id796429885 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente  diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:svb_mobile:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "10C9241F-3ED9-412D-8F1C-0BBDD421472B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"First State Bank of Bigfork Mobile Banking\" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"First State Bank of Bigfork Mobile Banking\" de la aplicación First State Bank of Bigfork 4.0.3 --también conocida como first-state-bank-of-bigfork-mobile-banking/id1133969876 para iOS no verifica los certificados X.509 desde los servidores SSL, lo que permite un ataque man-in-the-middle para saltar los servidores y obtener información sensible mediante la manipulación del certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fsbbigfork:first_state_bank_of_bigfork_mobile_banking:4.0.3:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D97CDE1E-72FF-4E27-8B9C-BCACB02D5456"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"CFB Mobile Banking\" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id1081102805 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"CFB Mobile Banking\" de la aplicación Citizens First Bank Wisconsin 3.0.1 --también conocida como cfb-mobile-banking/id1081102805 para iOS no verifica los certificados X.509 desde los servidores SSL, lo que permite un ataque man-in-the-middle para saltar los servidores y obtener información sensible mediante la manipulación del certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:cfb_mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "2548A281-D116-4FBD-9FF5-1AF1B79EA5BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Blue Ridge Bank and Trust Co. Mobile Banking\" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id699679197 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"Blue Ridge Bank and Trust Co. Mobile Banking\" de la aplicación Blue Ridge Bank and Trust Co. 3.0.1 -- también conocida como blue-ridge-bank-and-trust-co-mobile-banking/id699679197 para iOS no verifica los certificados X.509 desde los servidores SSL, lo que permite un ataque man-in-the-middle para saltar los servidores y obtener información sensible mediante la manipulación del certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:blue_ridge_bank_and_trust_co._mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D81BD677-BA24-42C6-ACF8-DCCB6CF690B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Morton Credit Union Mobile Banking\" by Morton Credit Union app 3.0.1 -- aka morton-credit-union-mobile-banking/id1119623070 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"Morton Credit Union Mobile Banking\" de la aplicación Morton Credit Union 3.0.1 --también conocida como morton-credit-union-mobile-banking/id1119623070 para iOS no verifica los certificados X.509 desde los servidores SSL, lo que permite un ataque man-in-the-middle para saltar los servidores y obtener información sensible mediante la manipulación del certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:morton_credit_union_mobile_banking:3.0.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "FE78CF17-C490-47EB-B2CD-1F545F630539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Fountain Trust Mobile Banking\" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"Fountain Trust Mobile Banking\" de la aplicación FOUNTAIN TRUST COMPANY anterior a la versión 3.2.0 -- también conocido como fountain-trust-mobile-banking/id891343006 para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite un ataque man-in-the-middle para saltarse los servidores y obtener información sensible mediante la manipulación de certificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fountaintrust:fountain_trust_mobile_banking:3.0.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "A888DF38-61D1-4358-ABF0-EC88BCA1AD53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://itunes.apple.com/us/app/fountain-trust-mobile-banking/id891343006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://itunes.apple.com/us/app/fountain-trust-mobile-banking/id891343006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Peoples Bank Tulsa\" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "El \"Peoples Bank Tulsa\" de People Bank -OK app 3.0.2-- también conocido como peoples-bank-tulsa/id1074279285 para iOS no verifica los certificados X.509 del los servidores SSL, lo cual permite ataques man-in-the-middle para saltarse los servidores y obtener información sensible mediante la manipulación del certificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meafinancial:peoples_bank_tulsa:3.0.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "40CC4A8A-0976-41CD-AB16-FB3068BC8DBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T12:29:01.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"FNB Kemp Mobile Banking\" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"FNB Kemp Mobile Banking\" de First National Bank of Kemp versión 3.0.2, también se conoce como fnb-kemp-mobile-banking/id571448725 para iOS, no comprueba los certificados X.509 de los servidores SSL, lo que permite a los atacantes de tipo man-in-the-middle falsificar los servidores y obtener información confidencial por medio de un certificado especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fnbkemp:fnb_kemp_mobile_banking:3.0.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "098A9BBB-899A-4832-A5AA-81E58BEBEF50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of \"RW NT AUTHORITY\\Authenticated Users\" permissions for %SYSTEMDRIVE%\\apcupsd\\bin\\apcupsd.exe."
      }, {
        "lang" : "es",
        "value" : "En Demonio APC UPS hasta versión 3.14.14 de Adam Kropelin adk0212 , la instalación por defecto de APCUPSD permite que un usuario identificado local, pero no privilegiado, ejecute código arbitrario con privilegios elevados al reemplazar el servicio ejecutable apcupsd.exe con un ejecutable malicioso que se ejecutará con privilegios SYSTEM en el inicio. Esto ocurre debido a los permisos \"RW NT AUTHORITY\\Authenticated Users\" para %SYSTEMDRIVE%\\apcupsd\\bin\\apcupsd.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apcupsd:apc_ups_daemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.14.14",
            "matchCriteriaId" : "58E8B12B-0578-4783-9B68-3E6BAEBF7EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99092",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T13:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to Uploads/Documents/ to run any arbitrary code."
      }, {
        "lang" : "es",
        "value" : "El paquete de la aplicación KBVault Mysql Free Knowledge 0.16a viene con un componente de manipulación de archivos FileExplorer/Explorer.aspx?id=/Uploads. Un usuario no autentificado puede acceder a las funcionalidades de borrado y subida de archivos. A través de esta funcionalidad, un usuario puede subir un script ASPX a Uploads/Documents/ para ejecutar código aleatorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kbvault_mysql_project:kbvault_mysql:0.16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2BE509-85C6-4BD4-B36F-0A3190693255"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42184/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T15:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression."
      }, {
        "lang" : "es",
        "value" : "En uClibc 0.9.33.2, hay una lectura fuera de los límites en la función get_subexp de misc/regex/regexec.c cuando se procesa una expresión regular manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclibc:uclibc:0.9.33.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD7DBF9-06F5-44EC-BA62-61AF6D1FCC72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T15:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression."
      }, {
        "lang" : "es",
        "value" : "En uClibc versión 0.9.33.2, se presenta un agotamiento de pila (recursión no controlada) en la función check_dst_limits_calc_pos_1 en el archivo misc/regex/ regexec.c cuando es procesada una expresión regular especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclibc:uclibc:0.9.33.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD7DBF9-06F5-44EC-BA62-61AF6D1FCC72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/16/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T15:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package."
      }, {
        "lang" : "es",
        "value" : "En meta/classes/package_ipk.bbclass en Poky en poky-pyro 17.0.0 para Yocto Project hasta YP Core - Pyro 2.3, los atacantes pueden obtener información sensible leyendo una URL en una entrada Source en un paquete ipk. 1763-L16BBB, series A y B, en versiones 16.00 y anteriores; 1763-L16BWA, series A y B, en versiones 16.00 y anteriores; 1763-L16DWD, series A y B, en versiones 16.00 y anteriores; y los controladores lógicos programables Allen-Bradley MicroLogix 1400 1766-L32AWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWAA, series A y B, en versiones 16.00 y anteriores; 1766-L32BXB, series A y B, en versiones 16.00 y anteriores; 1766-L32BXBA, series A y B, en versiones 16.00 y anteriores; y 1766-L32AWAA, series A y B, en versiones 16.00 y anteriores. No hay penalizaciones por introducir contraseñas incorrectas de forma repetida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yocto_project:yp_core-pyro:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1F0CA5-8A07-4080-B33E-F78FA15B5A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T17:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request."
      }, {
        "lang" : "es",
        "value" : "La función msm_bus_dbg_update_request_write en drivers/platform/msm/msm_bus/msm_bus_dbg.c en android_kernel_huawei_msm8916 hasta el 2017-06-16 en LineageOS y, seguramente, en otros kernels para dispositivos MSM, permite que atacantes provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del dispositivo) mediante una petición de escritura manipulada /sys/kernel/debug/msm-bus-dbg/client-data/update-request."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lineageos:lineageos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-06-16",
            "matchCriteriaId" : "FA96BA63-2AB6-4B1E-A7FC-D24EC9192A2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.secret-team.cn/index.php/archives/5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99107",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.secret-team.cn/index.php/archives/5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7507",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-16T19:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application."
      }, {
        "lang" : "es",
        "value" : "GnuTLS versión 3.5.12 y anteriores, es vulnerable a una desreferencia del puntero NULL durante la descodificación de una extensión TLS de respuesta de estado con contenido válido. Esto podría conllevar a un bloqueo de la aplicación del servidor GnuTLS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.12",
            "matchCriteriaId" : "6117AAF1-2C27-4ED7-9C7A-F5A57FA2EC0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3884",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99102",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.gnutls.org/security.html#GNUTLS-SA-2017-4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.gnutls.org/security.html#GNUTLS-SA-2017-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8449",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-16T21:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index."
      }, {
        "lang" : "es",
        "value" : "X-Pack Security 5.2.x permitiría el acceso a más campos de los que el usuario debería haber visto si las reglas de seguridad a nivel de campo empleasen una combinación de reglas grant y exclude al combinar múltiples reglas con reglas de seguridad a nivel de campo para el mismo índice. 1763-L16BBB, series A y B, en versiones 16.00 y anteriores; 1763-L16BWA, series A y B, en versiones 16.00 y anteriores; 1763-L16DWD, series A y B, en versiones 16.00 y anteriores; y los controladores lógicos programables Allen-Bradley MicroLogix 1400 1766-L32AWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWAA, series A y B, en versiones 16.00 y anteriores; 1766-L32BXB, series A y B, en versiones 16.00 y anteriores; 1766-L32BXBA, series A y B, en versiones 16.00 y anteriores; y 1766-L32AWAA, series A y B, en versiones 16.00 y anteriores. Se generan números de secuencia inicial TCP que no son lo suficientemente aleatorios, lo que podría permitir que un atacante prediga los números de valores anteriores. Esto podría permitir que un atacante suplante o interrumpa las conexiones TCP, lo que resulta en una denegación de servicio (DoS) para el dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.2.2",
            "matchCriteriaId" : "3E741770-9008-443C-8CDE-98FB54AB3762"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8450",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-16T21:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information."
      }, {
        "lang" : "es",
        "value" : "X-Pack 5.1.1 no aplicaba correctamente seguridad a nivel de documento y campo a las peticiones multi-search y multi-get, por lo que los usuarios sin acceso a un documento y/o campo podrían haber accedido a esta información. 1763-L16BBB, series A y B, en versiones 16.00 y anteriores; 1763-L16BWA, series A y B, en versiones 16.00 y anteriores; 1763-L16DWD, series A y B, en versiones 16.00 y anteriores; y los controladores lógicos programables Allen-Bradley MicroLogix 1400 1766-L32AWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWAA, series A y B, en versiones 16.00 y anteriores; 1766-L32BXB, series A y B, en versiones 16.00 y anteriores; 1766-L32BXBA, series A y B, en versiones 16.00 y anteriores; y 1766-L32AWAA, series A y B, en versiones 16.00 y anteriores. El producto afectado reutiliza nonces que podrían permitir que un atacante capture y reproduzca una petición válida hasta cambiar el nonce."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444B1E15-1BEF-479B-8DEA-1DB5ACE7C051"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8451",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-16T21:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website."
      }, {
        "lang" : "es",
        "value" : "Con X-Pack instalado, las versiones anteriores a la 5.3.1 de Kibana tienen una vulnerabilidad de redirección abierta en la página de inicio de sesión que permitiría que un atacante cree un enlace que redirija a una página web arbitraria. 1763-L16BBB, series A y B, en versiones 16.00 y anteriores; 1763-L16BWA, series A y B, en versiones 16.00 y anteriores; 1763-L16DWD, series A y B, en versiones 16.00 y anteriores; y los controladores lógicos programables Allen-Bradley MicroLogix 1400 1766-L32AWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWAA, series A y B, en versiones 16.00 y anteriores; 1766-L32BXB, series A y B, en versiones 16.00 y anteriores; 1766-L32BXBA, series A y B, en versiones 16.00 y anteriores; y 1766-L32AWAA, series A y B, en versiones 16.00 y anteriores. Los productos afectados emplean una contraseña numérica con un tamaño máximo de caracteres pequeño para la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0",
            "matchCriteriaId" : "058E6CC7-5A3E-4BAB-8656-B6C103C2EA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8452",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-16T21:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes."
      }, {
        "lang" : "es",
        "value" : "En Kibana en versiones anteriores a la 5.2.1 configurado para el acceso SSL del cliente, los descriptores de archivos deben ser limpiados tras ciertas peticiones y se acumularán a lo largo del tiempo hasta que el proceso se cierre inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-775"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-769"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "262F1B84-D6B8-4D07-96EE-177473C02B9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T21:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords."
      }, {
        "lang" : "es",
        "value" : "Jetty hasta la versión 9.4.x es propenso a una sincronización de canal en util/security/Password.java, lo que facilita que atacantes remotos obtengan acceso observando el tiempo transcurrido antes de rechazar contraseñas incorrectas. SR 760 Feeder Protection Relay, en versiones de firmware anteriores a la 7.47; SR 469 Motor Protection Relay, en versiones de firmware anteriores a la 5.23; SR 489 Generator Protection Relay, en versiones de firmware anteriores a la 4.06; SR 745 Transformer Protection Relay, en versiones de firmware anteriores a la 5.23; SR 369 Motor Protection Relay, en todas las versiones de firmware; Multilin Universal Relay, en versiones de firmware 6.0 y anteriores; y Multilin URplus (D90, C90, B95), en todas las versiones. Las versiones en texto cifrado de contraseñas de usuario fueron creadas con un vector de inicialización no aleatorio, dejándolas expuestas a ataques de diccionario. El texto cifrado de las contraseñas de usuario se pueden obtener del panel LCD de los productos afectados y a través de los comandos Modbus enviados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.22",
            "matchCriteriaId" : "CDC78342-7D90-4360-8BF1-F59AA812A5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.20",
            "matchCriteriaId" : "87B0BE2C-7D3E-4109-943D-4C9820AA8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.6",
            "matchCriteriaId" : "C4E56EF2-6D17-41A3-8C7A-7A5D93BDD085"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA0A02F-18B1-42E6-80F3-8C6D11A73118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F194FC-4116-45C4-A5B4-B9822EAC3250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBED5A1-5D0A-40D6-ACF1-695F7FCA70FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3DC116-2844-47A1-BEC2-D0675DD97148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:*",
            "matchCriteriaId" : "36FC547E-861A-418C-A314-DA09A457B13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "DF9FEE51-50E3-41E9-AA0D-272A640F85CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:*",
            "matchCriteriaId" : "E69E905F-2E1A-4462-9082-FF7B10474496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0F9B692C-8986-4F91-9EF4-2BB1E3B5C133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA6839-849D-4CEF-85F3-38FE75E07183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE78490-A4BE-40BD-8C72-0A4526BBD4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE3629-4A66-49E4-A33D-6D81CC94962F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/864631",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/issues/1556",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/864631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/issues/1556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T22:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XML external entity (XXE) en Citrix XenMobile Server versión 9.x y versión 10.x anterior a 10.5 RP3, permite a los atacantes obtener información confidencial por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA111D25-3870-427B-B9DF-545CB07CF0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66150E7-E4C3-4895-B806-FCE001EE0739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178F3810-071A-40FF-A22A-D6DB0C53931F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF8A1F0-372E-4A4A-889A-1AF5F287ECC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE08E27-1B91-4187-8F7E-17DE03C94612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D2A8B0-6BD3-48FB-AC71-D087D099C458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837A66B0-F1DB-4E95-880C-8A7533B0574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:xenmobile_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED27536-FB52-4D4A-925C-715511536E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98995",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX220138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX220138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T22:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device."
      }, {
        "lang" : "es",
        "value" : "Una pérdida de memoria en QEMU (conocido como Quick Emulator), cuando se ensambla con el soporte de Emulación AHCI IDE, permite a los usuarios privilegiados del sistema operativo invitado local causar una denegación de servicio (consumo de memoria) mediante una desconexión del dispositivo AHCI repetidamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd674627274267f269e40f0b04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/05/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1458270",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd674627274267f269e40f0b04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1458270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T22:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device."
      }, {
        "lang" : "es",
        "value" : "Una pérdida de memoria en QEMU (conocido como Quick Emulator), cuando se ensambla con el soporte de emulación EHCI USB, permite a los usuarios privilegiados del sistema operativo invitado local causar una denegación de servicio (consumo de memoria) mediante una desconexión del dispositivo repetidamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/06/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98905",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1459132",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/06/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1459132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T22:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing."
      }, {
        "lang" : "es",
        "value" : "QEMU (conocido como Quick Emulator), cuando se ensambla con el soporte del emulador controlador xHCI USB, permite a los usuarios privilegiados del sistema operativo invitado local causar una denegación de servicio (llamada recursiva infinita) por medio de vectores que involucran la secuencia de descriptores de transferencia de control."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/05/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98915",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1458744",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1458744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-16T22:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing."
      }, {
        "lang" : "es",
        "value" : "QEMU (conocido como Quick Emulator), cuando se ensambla con el soporte de emulación del adaptador de bus host SAS 8708EM2 de MegaRAID, permite a los usuarios privilegiados del sistema operativo invitado local causar una denegación de servicio (desreferencia del puntero NULL y bloqueo del proceso QEMU) por medio de vectores que involucran el procesamiento de comandos megasas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/08/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99010",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1459477",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1459477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-17T16:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution."
      }, {
        "lang" : "es",
        "value" : "SPIP en versiones 3.1.x anteriores a la 3.1.6 y versiones 3.2.x anteriores a la Beta 3 no elimina los metacaracteres shell del campo host, lo que permite que un atacante remoto provoque la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F886B97D-1648-4D9A-A1A3-9F7982C6259D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C06AB4FA-EA55-435E-9C04-124BCC008301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A22B763C-1CE8-4219-A767-8400FFDCCDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "26E98301-4358-464A-952C-FE81F9EC7859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE44495-D166-46D4-9375-73890216AF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B645A6EB-B9C5-470C-B42C-E971B2A21D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC77374D-F349-4728-91B9-5483C641B33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5276FA-1CDD-4100-B8A6-21ABB1A7E8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0230D10E-96C6-4C13-BF75-E4B398AAE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591A3B0A-BD8C-4B04-B54A-4165012DC2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D85353-9C50-4BCD-8933-4817D8A35C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.2:alpha-1:*:*:*:*:*:*",
            "matchCriteriaId" : "627024B4-50A4-4A7D-AFC9-BB272D1D2329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6E13B9-3236-4331-AA5D-2B629CAC46AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:3.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D544F17F-4B81-45AD-A90E-45EE5125D8BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://contrib.spip.net/CRITICAL-security-update-SPIP-3-1-6-and-SPIP-3-2-Beta",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://core.spip.net/projects/spip/repository/revisions/23593",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://core.spip.net/projects/spip/repository/revisions/23594",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://contrib.spip.net/CRITICAL-security-update-SPIP-3-1-6-and-SPIP-3-2-Beta",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://core.spip.net/projects/spip/repository/revisions/23593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://core.spip.net/projects/spip/repository/revisions/23594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-17T18:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time."
      }, {
        "lang" : "es",
        "value" : "El archivo sound/core/timer.c en el kernel de Linux anterior a versión 4.11.5, es vulnerable a una carrera de datos en el controlador de /dev/snd/timer de ALSA, resultando en que los usuarios locales sean capaces de leer la información que pertenece a otros usuarios, es decir, los contenidos de la memoria sin inicializar pueden ser divulgados cuando una lectura y un ioctl se presentan al mismo tiempo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.4",
            "matchCriteriaId" : "CEAAE4E7-00CF-47FC-8331-A5B82622BB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ba3021b2c79b2fa9114f92790a99deb27a65b728",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d11662f4f798b50d8c8743f433842c3e40fe3378",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/12/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99121",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ba3021b2c79b2fa9114f92790a99deb27a65b728",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d11662f4f798b50d8c8743f433842c3e40fe3378",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ba3021b2c79b2fa9114f92790a99deb27a65b728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d11662f4f798b50d8c8743f433842c3e40fe3378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/12/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ba3021b2c79b2fa9114f92790a99deb27a65b728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d11662f4f798b50d8c8743f433842c3e40fe3378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-18T21:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In admin\\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via the description parameter in an addgroup action."
      }, {
        "lang" : "es",
        "value" : "En admin\\addgroup.php en el gestor de contenidos Made Simple 2.1.6, cuando se añade un nuevo grupo no filtra el XSS resultando en la generación de un Storage-type XSS, mediante el parametro de descripción en la acción de añadir grupo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XiaoZhis/ProjectSend/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/XiaoZhis/ProjectSend/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-18T21:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file."
      }, {
        "lang" : "es",
        "value" : "install/make-config.php en ProjectSend r754 permite que atacantes remotos ejecuten código PHP arbitrario mediante el parámetro dbprefix. Esto está relacionado con el reemplazo de TABLES_PREFIX en el archivo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectsend:projectsend:r754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC26971D-4906-4B94-8BCE-19DC44BF2136"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XiaoZhis/ProjectSend/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/XiaoZhis/ProjectSend/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función score_opcodes en opcodes/score7-dis.c en GNU Binutils 2.28 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer y cierre inesperado de la aplicación) o, probablemente, causen otros impactos no especificados mediante un archivo binario modificado, como se ha demostrado por la gestión incorrecta de este archivo durante la ejecución de \\\"objdump -D\\\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99105",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21576",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42203/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42203/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función print_insn_score32 en el archivo opcodes/score7-dis.c:552 en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99106",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21577",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función sh_elf_set_mach_from_flags en el archivo bfd/elf32-sh.c en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), tal como es distribuida en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento del búfer y bloqueo de aplicación) o posiblemente tienen otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99108",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21578",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_vms_slurp_etir en el archivo bfd/vms-alpha.c en la biblioteca Binary File Descriptor  (BFD) (también se conoce como libbfd), tal y como es distribuida en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99109",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21579",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función disassemble_bytes en el archivo objdump.c en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de la impresión rae insns para este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99117",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21580",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42199/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42199/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug."
      }, {
        "lang" : "es",
        "value" : "La función ieee_archive_p en el archivo bfd/eee.c en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), tal y como es distribuida en GNU Binutils versión 2.28, podría permitir a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\". NOTA: esto puede estar relacionado a un bug del compilador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99114",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21581",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42200/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42200/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug."
      }, {
        "lang" : "es",
        "value" : "La función ieee_object_p en el archivo bfd/ieee.c en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), tal y como es distribuida en GNU Binutils versión 2.28, podría permitir a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\". NOTA: esto puede estar relacionado a un bug del compilador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21582",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42202/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42202/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "Las macros *regs* en el archivo opcodes/bfin-dis.c en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21586",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42201/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42201/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "En el archivo opcodes/rx-decode.opc en GNU Binutils versión 2.28, la falta de comprobaciones de límites para ciertas matrices de escala, lo que permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como se demuestra por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21587",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42198/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42198/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "En el archivo opcodes/rl78-decode.opc en GNU Binutils versión 2.28, presenta una macro GETBYTE ilimitada, lo que permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99111",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21588",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "En el archivo bfd/vms-alpha.c en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), tal y como es distribuida en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo en las funciones _bfd_vms_get_value y _bfd_vms_slurp_etir durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99122",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21589",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función versados_mkobject en el archivo bfd/versados.c en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), tal y como es distribuida en GNU Binutils versión 2.28, no inicializa una estructura de datos determinada, lo que permite a los atacantes remotos causar una denegación de servicio (desbordamiento del búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99116",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21591",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función process_otr en el archivo bfd/versados.c en la biblioteca Binary File Descriptor (BFD) (también conocida como libbfd), tal y como es distribuida en GNU Binutils versión 2.28, no comprueba un desplazamiento determinado, lo que permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99125",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21591",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "En el archivo opcodes/i386-dis.c en GNU Binutils versión 2.28, no considera el número de registros para el modo bnd, lo que permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado , como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99124",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21594",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T04:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."
      }, {
        "lang" : "es",
        "value" : "La función aarch64_ext_ldst_reglist en el archivo opcodes/aarch64-dis.c en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario especialmente diseñado, como es demostrado por el manejo inapropiado de este archivo durante la ejecución de \"objdump -D\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99103",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21595",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42204/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42204/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4984",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-19T12:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with root-level privileges on the targeted VNX Control Station system, aka remote code execution."
      }, {
        "lang" : "es",
        "value" : "En EMC VNX2 en versiones anteriores a OE for File 8.1.9.211 y VNX1 en versiones anteriores a OE for File 7.1.80.8, un atacante remoto no autenticado podría ser capaz de elevar sus privilegios a root mediante una inyección de comandos. Esto podría ser explotado por un atacante para ejecutar código arbitrario con privilegios de nivel root en el sistema VNX Control Station objetivo. Esto también se conoce como ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:vnx2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DC2941-60A4-4232-AB6C-B5C3F5E0A034"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:vnx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA171162-0FF7-43B3-A5D4-9C954E5B37D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:vnx1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EE4E75-2B7D-4826-BFD8-84739A554316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:vnx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C707E8E-AC08-4B58-9AA1-2850A8BC94F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540738/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99039",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540738/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4985",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-19T12:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system."
      }, {
        "lang" : "es",
        "value" : "En EMC VNX2 en versiones anteriores a OE for File 8.1.9.211 y VNX1 en versiones anteriores a OE for File 7.1.80.8, un usuario local autenticado podría escalar sus privilegios a root debido a que no se realizan comprobaciones de autorización en ciertos scripts de perl. Esto podría ser explotado por un atacante para ejecutar comandos arbitrarios como root en el sistema VNX Control Station objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:vnx2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DC2941-60A4-4232-AB6C-B5C3F5E0A034"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:vnx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA171162-0FF7-43B3-A5D4-9C954E5B37D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:vnx1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EE4E75-2B7D-4826-BFD8-84739A554316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:vnx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C707E8E-AC08-4B58-9AA1-2850A8BC94F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540738/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99037",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540738/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4987",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-19T12:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka an uncontrolled search path vulnerability."
      }, {
        "lang" : "es",
        "value" : "En EMC VNX2 en versiones anteriores a OE for File 8.1.9.211 y VNX1 en versiones anteriores a OE for File 7.1.80.8, un usuario autenticado local puede cargar un archivo maliciosamente manipulado en la ruta de búsqueda que podría permitir que el atacante ejecute código arbitrario en el sistema VNX Control Station objetivo. Esto también se conoce como vulnerabilidad de ruta de búsqueda no controlada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:vnx2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DC2941-60A4-4232-AB6C-B5C3F5E0A034"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:vnx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA171162-0FF7-43B3-A5D4-9C954E5B37D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:vnx1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EE4E75-2B7D-4826-BFD8-84739A554316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:vnx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C707E8E-AC08-4B58-9AA1-2850A8BC94F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540738/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99045",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540738/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T12:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the \"r\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el archivo rdr.php en nuevoMailer versión 6.0 y anteriores, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro \"r\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dfsol:nuevomailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "98933937-4EDD-401D-9645-B01670F26CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42193/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42193/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T13:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated users, or through CSRF."
      }, {
        "lang" : "es",
        "value" : "IPFire 2.19 tiene una vulnerabilidad de inyección remota de comandos en ids.cgi mediante el parámetro OINKCODE, que es gestionado de manera incorrecta por un shell. Esto puede ser explotado directamente por usuarios autenticados o mediante Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipfire:ipfire:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.19",
            "matchCriteriaId" : "CCDE09C1-6D47-4848-B59C-1A970784169F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99173",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/0x09AL/status/873860385652256768",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42149/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/0x09AL/status/873860385652256768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42149/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T14:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account."
      }, {
        "lang" : "es",
        "value" : "Se presenta una inyección SQL en el archivo admin/index.php en Zenbership versión 1.0.8, por medio del parámetro filters array, explotable mediante una cuenta privilegiada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenbership:zenbership:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4D08E8-4FFD-4A87-BEB6-0EBE623421B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99147",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be \"jumped\" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el tamaño de la página de stack guard en Linux; específicamente, una página 4k stack guard no es lo suficientemente grande y puede \"saltarse\" (se omite la página de stack guard). Esto afecta al kernel de Linux en versiones 4.11.5 y anteriores (la página stackguard fue introducida en 2010)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.5",
            "matchCriteriaId" : "16B5D5A3-9169-4BA1-8193-51B6C8E04851"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99130",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/security/cve/CVE-2017-1000364/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/support/kb/doc/?id=7020973",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/security/cve/CVE-2017-1000364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/support/kb/doc/?id=7020973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23."
      }, {
        "lang" : "es",
        "value" : "El Kernel de Linux impone una restricción de tamaño en los argumentos y cadenas de entorno pasados por medio de RLIMIT_STACK/RLIM_INFINITY (1/4 del tamaño), pero no tiene en cuenta el argumento y los punteros de entorno, lo que permite a los atacantes omitir esta limitación. Esto afecta a las versiones 4.11.5 y anteriores del Kernel de Linux. Parece que esta funcionalidad se introdujo en la versión 2.6.23 del Kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.23",
            "versionEndExcluding" : "3.2.91",
            "matchCriteriaId" : "413D61A4-C678-4E38-BFE2-40472701FD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.46",
            "matchCriteriaId" : "B74022CD-4A80-418C-82C6-E903D5F3A944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.59",
            "matchCriteriaId" : "DFCD44DB-A537-4F77-B2DC-E0F3EF3FC431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "5F6B255F-0933-4983-B3F6-AD5B128A8F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.75",
            "matchCriteriaId" : "210DE424-BB18-453F-8EC0-528DB62330A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.35",
            "matchCriteriaId" : "756E8245-FDA8-4533-839F-003E1102C971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.8",
            "matchCriteriaId" : "EC396324-C7F1-4F5F-8C7B-1F084DF92D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99156",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000365",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier."
      }, {
        "lang" : "es",
        "value" : "Glibc contiene una vulnerabilidad que permite que los valores LD_LIBRARY_PATH especialmente creados para manipular la región heap/stack de la memoria, generando entonces un alias, lo que podría conllevar a la ejecución del código arbitrario. Tenga en cuenta que se han realizado cambios de refuerzo adicionales en glibc para evitar la manipulación del stack  y heap de la memoria de almacenamiento dinámico, pero estos problemas no se pueden explotar directamente, por lo que no se les ha otorgado un CVE. Esto impacta a glibc versión 2.25 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*",
            "matchCriteriaId" : "5833A489-D6DE-4D51-9E74-189CBC2E28CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62C9FF6-525F-4706-908C-1081B51AA464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C9F1C4-55B0-426D-BB5E-01372C23AF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D0378-F0F4-4AAA-80AF-8287C790EC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF83BB87-B203-48F9-9D06-48A5FE399050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E6D998-B41D-4B49-9E00-8336D2E40A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C462C17E-DEB3-4E28-9D3E-FEE97907EC14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45010D45-2FF2-4B04-B115-6B6FE606D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81647C-9A53-481D-A54C-36770A093F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B067C7-735E-43C9-9188-7E1522A02491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_long_life:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CC2D9E-C769-4810-99DD-540614627FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E02156-E748-4820-B76F-7074793837E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:cloud_magnum_orchestration:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27A3E24-7BC2-4EA9-BFAD-987C2CDEF8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4A24B121-952E-44CD-92CB-3D66E00DD38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux_enterprise_point_of_sale:11.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "51E07D0D-67A6-4DDE-BE4E-959DE0A3314F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:*",
            "matchCriteriaId" : "3F8CE3BD-993B-407F-BAEC-A070F6B46E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_for_sap:12:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E901D2F9-B4EA-420A-B1DA-4CD5B0A021CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*",
            "matchCriteriaId" : "35BBD83D-BDC7-4678-BE94-639F59281139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:ltss:*:*:*",
            "matchCriteriaId" : "0651347C-AE16-4155-98EF-A0A2C63A37A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F84B2729-7B52-4505-9656-1BD31B980705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:*",
            "matchCriteriaId" : "32C12523-2500-44D0-97EE-E740BD3E61B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server_for_raspberry_pi:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4605D055-EA6E-4C90-9277-AC067E1BD02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "51FA1B64-D002-41CC-908F-3798122ACD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "484E3B41-F560-47A7-9C4C-C0DAF3510818"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.25",
            "matchCriteriaId" : "9C3B907D-79AF-44AC-BD23-C369CD6AE173"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2.14",
            "matchCriteriaId" : "D6AE5831-D666-4D79-9B37-87A969F9127D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0.0",
            "versionEndIncluding" : "7.7.2.2",
            "matchCriteriaId" : "27C7DAE9-3B9A-4062-BB77-683318A739F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Sep/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3887",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038712",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1479",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1480",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1481",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1567",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000366",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10205",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Sep/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-19",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42274/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42275/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42276/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/security/cve/CVE-2017-1000366/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/support/kb/doc/?id=7020973",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Sep/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Sep/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42274/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42276/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/security/cve/CVE-2017-1000366/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/support/kb/doc/?id=7020973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exim supports the use of multiple \"-p\" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time."
      }, {
        "lang" : "es",
        "value" : "Exim es compatible con el uso de múltiples argumentos de líneas de comandos \\\"-p\\\" en los que se emplea la función malloc() y nunca la función free(). Estos argumentos, junto con otros problemas permite que los atacantes provoquen la ejecución de código arbitrario. Esto afecta a las versiones 4.89 y anteriores de exim. Es importante mencionar que en este momento se ha lanzado un parche upstream (commit con ID 65e061b76867a9ea7aeeb535341b790b90ae6c21), pero no se sabe si hay disponible una nueva distribución de punto que trate este problema por el momento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.87.1",
            "matchCriteriaId" : "46B5015F-23DF-4989-B2ED-A1FCF8F50D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:-:*:*:*:*:*:*",
            "matchCriteriaId" : "144B3769-7408-4C7C-94EB-108CD2B238E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E62B76-8B38-4C51-AE2F-B5C640B81339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "752F3F0F-635E-406D-90A6-558CAE26A204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "887F6AE0-E736-463C-AED0-1DBAD62F4324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CDD0DD-5A42-4800-A60C-C0759418AEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D881CB60-EA98-4584-A819-C06987AE6A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "1A866294-79EF-4E0F-845F-F147D33585B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B52AB04-BA19-42D7-811E-61BBABD0735F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1610A031-C253-414D-BF44-E312D338B545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "23259F45-8588-4FDC-94AB-A8F7F878EE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "22D40D0B-C4A1-46C3-9FE3-CC78D89F0A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "061773A0-2675-49C3-8314-A761521035D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "A09D21D1-B978-44CA-BA94-74B31D30A843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6296A7B2-FBBF-4B34-B4C1-01C012E34039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5F71E9-A8FC-4DE5-BD1D-979E8E301A84"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99252",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Exim/exim/commit/65e061b76867a9ea7aeeb535341b790b90ae6c21",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-19",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Exim/exim/commit/65e061b76867a9ea7aeeb535341b790b90ae6c21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems."
      }, {
        "lang" : "es",
        "value" : "El parche offset2lib tal como es usado por el Kernel de Linux contiene una vulnerabilidad que permite que un binario PIE sea execve()'ed con 1 GB de argumentos o cadenas de entorno, entonces la pila ocupa la dirección 0x80000000 y el binario PIE se asigna por encima de 0x40000000 haciendo null la protección del parche offset2lib. Esto afecta al Kernel de Linux versión 4.11.5 y anteriores. Este es un problema diferente al CVE-2017-1000371. Este problema parece estar limitado a los sistemas basados en i386."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "3178B0F5-19A9-43EA-A499-00A81BAC83E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.78",
            "matchCriteriaId" : "53D588E8-41E9-45DB-A106-D0D6FAFBEAEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.39",
            "matchCriteriaId" : "894EA787-0B3C-4729-9CE9-4CA86309E37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.12",
            "matchCriteriaId" : "6070460C-3FAE-457B-9A3E-5ADF3AA3CC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12",
            "versionEndExcluding" : "4.12.3",
            "matchCriteriaId" : "0D1EC748-85AE-40F3-A67C-3F634135A2F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99149",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42273/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42274/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42273/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42274/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems."
      }, {
        "lang" : "es",
        "value" : "El parche offset2lib tal como es usado por el Kernel de Linux contiene una vulnerabilidad, si RLIMIT_STACK se establece en RLIM_INFINITY y se asigna 1 gigabyte de memoria (el máximo bajo la restricción de 1/4) entonces la pila se reducirá hasta 0x80000000, y como el binario PIE es asignado por encima de 0x80000000 la distancia mínima entre el final del segmento de lectura y escritura del binario PIE y el inicio de la pila se convierte en lo suficientemente pequeño como para que la página de protección de pila puede ser saltada por un atacante. Esto afecta al Kernel de Linux versión 4.11.5. Este es un problema diferente a los CVE-2017-1000370 y CVE-2017-1000365. Este problema parece estar limitado a los sistemas basados en i386."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "3178B0F5-19A9-43EA-A499-00A81BAC83E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.78",
            "matchCriteriaId" : "53D588E8-41E9-45DB-A106-D0D6FAFBEAEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.39",
            "matchCriteriaId" : "894EA787-0B3C-4729-9CE9-4CA86309E37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.12",
            "matchCriteriaId" : "6070460C-3FAE-457B-9A3E-5ADF3AA3CC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12",
            "versionEndExcluding" : "4.12.3",
            "matchCriteriaId" : "0D1EC748-85AE-40F3-A67C-3F634135A2F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99131",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000371",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42273/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42276/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42273/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42276/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions."
      }, {
        "lang" : "es",
        "value" : "Existe un error en la implementación de OpenBSD de la página stack guard que permite que los atacantes la omitan, lo que resulta en la ejecución de código arbitrario mediante el uso de binarios setuid como /usr/bin/at. Esto afecta a OpenBSD 6.1 y posiblemente a versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "7F5FE30D-1E1E-4811-8263-EAFB651FF144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99172",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/008_exec_subr.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/008_exec_subr.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in arbitrary code execution attacks. This affects OpenBSD 6.1 and possibly earlier versions."
      }, {
        "lang" : "es",
        "value" : "La función qsort() de OpenBSD es recursiva y no aleatorizada, por lo que un atacante puede construir un array de entrada patológica de elementos N que provoca que qsort() se repita inevitablemente N/4 veces. Esto permite que los atacantes consuman cantidades de memoria de pila arbitrarias y manipulen la memoria de pila para ayudar en los ataques de ejecución de código arbitrario. Esto afecta a OpenBSD 6.1 y, posiblemente, a versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "7F5FE30D-1E1E-4811-8263-EAFB651FF144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99177",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42271/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42271/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions."
      }, {
        "lang" : "es",
        "value" : "Existe un error en la implementación de NetBSD de la página stack guard que permite que los atacantes la omitan, lo que resulta en la ejecución de código arbitrario mediante el uso de ciertos binarios setuid. Esto afecta a NetBSD 7.1 y posiblemente a versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "7F25F328-22FC-4189-B04E-965F2864B051"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99176",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions."
      }, {
        "lang" : "es",
        "value" : "NetBSD asigna el editor de enlace del tiempo de ejecución del archivo ld.so directamente debajo de la región stack, incluso si ASLR está habilitada, esto permite a los atacantes manipular más fácilmente la memoria, lo que conlleva a la ejecución de código arbitraria. Esto afecta a NetBSD versión 7.1 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "7F25F328-22FC-4189-B04E-965F2864B051"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99257",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42272/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42272/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1."
      }, {
        "lang" : "es",
        "value" : "libffi solicita una pila ejecutable que permite que los atacantes desencadenen con más facilidad la ejecución de código arbitrario sobrescribiendo la pila. Se debe tener en cuenta que libffi es empleado por otras bibliotecas. Antes se dijo que esto afecta a la versión 3.2.1 de libffi, pero parece ser incorrecto. libffi en versiones anteriores a la 3.1 en sistemas x86 de 32 bits era vulnerable y se cree que upstream ha solucionado este problema en la versión 3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:enterprise_virtualization_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF9DC60-E34F-4C00-B8E2-E18DD34EACB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B497EBB1-17A4-4FE8-B9FF-B2B53B18C175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libffi_project:libffi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2",
            "matchCriteriaId" : "3F474529-750F-4D6B-B2F5-3722B26C27EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B456D2-0880-4A30-94A0-DA40634642FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F1E1EF-B5D0-4984-A628-AB3A56DD67A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000376",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped by other Linux vendors), specifically the default stack guard page is not sufficiently large and can be \"jumped\" over (the stack guard page is bypassed), this affects PAX Linux Kernel versions as of June 19, 2017 (specific version information is not available at this time)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el tamaño de la página de stack guard por defecto en PAX Linux (originariamente, de GRSecurity, pero distribuido por otros fabricantes de Linux); específicamente, la página stack guard por defecto no es lo suficientemente grande y puede \"saltarse\" (se omite la página de stack guard). Esto afecta al kernel de PAX Linux en versiones hasta el 19 de junio de 2017 (ahora mismo no hay información disponible sobre las versiones en concreto)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99129",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000377",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in arbitrary code execution attacks. This affects NetBSD 7.1 and possibly earlier versions."
      }, {
        "lang" : "es",
        "value" : "La función qsort() de NetBSD es recursiva y no aleatorizada, por lo que un atacante puede construir un array de entrada patológica de elementos N que provoca que qsort() se repita inevitablemente N/4 veces. Esto permite que los atacantes consuman cantidades de memoria de pila arbitrarias y manipulen la memoria de pila para ayudar en los ataques de ejecución de código arbitrario. Esto afecta a NetBSD 7.1 y posiblemente a versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "7F25F328-22FC-4189-B04E-965F2864B051"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/qsort.c?rev=1.23&content-type=text/x-cvsweb-markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99255",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/qsort.c?rev=1.23&content-type=text/x-cvsweb-markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected."
      }, {
        "lang" : "es",
        "value" : "El Kernel de Linux ejecutándose en sistemas AMD64 a veces asignará el contenido de un ejecutable PIE, la región heap o el archivo ld.so donde la pila es asignada, permitiendo a los atacantes manipular más fácilmente la pila. Kernel de Linux versión 4.11.5, esta afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12",
            "versionEndExcluding" : "3.2.90",
            "matchCriteriaId" : "F53DC5E6-098C-4F8D-86E3-CD103DC4547C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.107",
            "matchCriteriaId" : "314F9C88-C8E1-46EF-8119-538C824ED137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.45",
            "matchCriteriaId" : "63252E95-BB44-4171-81B3-530571754ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.58",
            "matchCriteriaId" : "B57F544A-FFA7-4B4B-BFA9-CF77F67139E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.42",
            "matchCriteriaId" : "5EDD29F4-10F1-415A-877F-5586A004E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.74",
            "matchCriteriaId" : "D4B79F86-549A-4B81-9DC6-537C15E34D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.34",
            "matchCriteriaId" : "92D2089E-CF43-483B-88AA-9917920B6F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.7",
            "matchCriteriaId" : "DCD16B30-8493-4434-A34C-9A05F246843F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99284",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1482",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1484",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1485",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1486",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1487",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1488",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1489",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1490",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1491",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000379",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42275/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file."
      }, {
        "lang" : "es",
        "value" : "La función find_eoq en el archivo libr/core/cmd.c en radare2 versión 1.5.0, permite a los atacantes remotos causar una denegación de servicio (lectura fuera de límites en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo binario especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6336FC-AB50-4F45-B01E-2BC3BA758117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/00e8f205475332d7842d0f0d1481eeab4e83017c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7727",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/00e8f205475332d7842d0f0d1481eeab4e83017c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file."
      }, {
        "lang" : "es",
        "value" : "La función cmd_info en el archivo libr/core/cmd_info.c en radare2 versión 1.5.0, permite a los atacantes remotos causar una denegación de servicio (uso de la memoria previamente liberada y bloqueo de aplicación) por medio de un archivo binario especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6336FC-AB50-4F45-B01E-2BC3BA758117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99140",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7726",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-19T16:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array."
      }, {
        "lang" : "es",
        "value" : "La función grub_ext2_read_block en fs/ext2.c en GNU GRUB antes del 2013-11-12, tal y como se usa en shlr/grub/fs/ext2.c en radare2 1.5.0, permite que atacantes remotos provoquen una denegación de servicio (uso excesivo de la pila y cierre inesperado de la aplicación) mediante un archivo binario manipulado. Esto está relacionado con el uso de un array de pila variable-size."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6336FC-AB50-4F45-B01E-2BC3BA758117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99141",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7723",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3214",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-06-20T00:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary."
      }, {
        "lang" : "es",
        "value" : "La aplicación móvil de Android Milwaukee ONE-KEY almacena el token maestro en texto plano en el binario apk."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milwaukeetool:one-key:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "E9CF98CF-7301-4499-A553-60C79F14EEB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3215",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-06-20T00:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a user_id can be used to perform user actions."
      }, {
        "lang" : "es",
        "value" : "La aplicación móvil de Android Milwaukee ONE-KEY emplea tokens bearer con caducidad de un año. Este token bearer, junto con un user_id, puede emplearse para realizar acciones de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milwaukee:one-key:*:*:*:*:*:android:*:*",
            "matchCriteriaId" : "821FB496-C942-4902-9D57-905FD6D4081D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3216",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-06-20T00:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request."
      }, {
        "lang" : "es",
        "value" : "Los routers WiMAX basados en MediaTek SDK (libmtk) que emplean un plugin httpd personalizado son vulnerables a una omisión de autenticación. Esto permite que un atacante remoto no autenticado obtenga acceso de administrador al dispositivo realizando un cambio de contraseña de administrador en el dispositivo mediante una petición POST manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:ox350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A81F52A-6DD6-4631-8733-9E47C6DAC87F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:ox350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327A0834-F46C-4E74-925C-D3EA1DE6941E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:bm2022_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A779549C-E231-44F7-94AB-AE12D63641E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:bm2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F75E1B-DAA2-495B-B1CA-5228E3819F79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hes-309m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7239E02-7A4A-476B-AAF9-EF72D3A9407F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hes-309m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA39FE7-9B9E-443A-B41A-CADDCC4F544C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hes-319m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36923E11-A6AA-41C5-A3F7-8350A9053D86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hes-319m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863C568-5A6A-4961-B628-299D0E7A54E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hes-319m2w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03234F0A-1CD6-4087-829A-2CB15022A200"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hes-319m2w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E48D770-DD54-4980-A8C4-359CF5DEF7A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hes-339m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3294BDE-B2FB-41DD-A6DE-B08B5278AA1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hes-339m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF51DF4-56DB-4EE9-95E4-FCFE040B3770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mada:soho_wireless_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AB1DA5-2DB6-4892-896B-F630B0765989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mada:soho_wireless_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33FD7BD1-B005-4F24-962D-5337AFD740AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:ox-330p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB20B496-6386-49B4-9103-45729D61F435"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:ox-330p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952793D7-1F57-42F3-9379-F9A31289E4AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:max218m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F66ADE-21DF-49F0-A404-CE3EED23E178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:max218m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4B3ACA-0373-4574-AEE1-16E4B8D1E3BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:max218m1w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE102CD-FFFA-4E9C-94E6-DDD3E1673A45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:max218m1w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFAEDFB-E181-4B91-81A6-D105A401870A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:max218mw_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2DF253-7D1D-4C43-A209-681A8663044C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:max218mw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194BED0-101B-4B23-BA0A-BE635F5FA7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:max308m_fimware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0C8A2C-AA09-4326-A369-07895094BB0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:max308m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF88B7A-4919-455F-804F-6C1A709B8147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:max318m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52093480-956D-47D5-998F-68CE3CE69BDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:max318m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55246D23-CF70-4BE5-899D-72AE038DE262"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:max338m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9523A7F1-4F6C-4597-BC02-BA3FE729530D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:max338m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CAEB05-E93D-45BB-9742-00CDBBCFBDE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350135",
        "source" : "cret@cert.org",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3743",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-20T00:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI) or Dynamic System Analysis (DSA) to a second machine, the other users may be able to see the user ID and clear text password that were used to access the second machine during the time the command is processing."
      }, {
        "lang" : "es",
        "value" : "Si múltiples usuarios han iniciado sesión simultáneamente en un único sistema en el que un usuario está enviando un comando mediante Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI) o Dynamic System Analysis (DSA) a un segundo ordenador, los otros usuarios podrían ver el ID de usuario y la contraseña en texto claro que se emplearon para acceder al segundo ordenador durante el tiempo que tarde en procesarse el comando."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:advanced_settings_utility:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "953E805B-13D0-468B-A577-74B302B22FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:toolscenter_dynamic_system_analysis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "DDF8249E-51F2-460D-9847-1E044EFDDBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:updatexpress_system_pack_installer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "756F3F34-D500-4507-98E0-F2B1330A83CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-10810",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-10810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3744",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-20T00:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands."
      }, {
        "lang" : "es",
        "value" : "En el firmware IMM2 de los servidores Lenovo System x, los comandos remotos enviados por LXCA u otras utilidades pueden ser capturados en el registro del servicio First Failure Data Capture (FFDC) si el registro del servicio se genera cuando ese comando remoto está en ejecución. Los datos de comando capturados podrían contener información de inicio de sesión en texto claro. Los usuarios autorizados que pueden capturar y exportar datos de registro del servicio FFDC podrían tener acceso a estos comandos remotos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:integrated_management_module_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9",
            "matchCriteriaId" : "9CA6D55A-5391-4B6F-A399-A0449A1EBD8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x240_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783B2E41-3FC3-4E39-802F-546EC7AA12E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x240_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2CE7A5-1CEE-40C4-BE0E-573C28663A11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x280_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1563A13F-2E56-4E83-9C16-68B2C81843DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x440_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC55C49B-2A5C-452C-8345-1C19A48FBB6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x480_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86B6B27-0E42-47C1-B2D9-A6C5B1364D9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ED17ED-BE60-4EE3-9599-C88C3C7A626C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:nextscale_nx360_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723D2A74-F6F3-4C73-AFD9-CDAE930D0FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3250_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89A2206-7012-4938-9BE2-ACF014E3F3B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3500_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC3467C-3F00-4EE3-B40E-3AE7F93094DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3550_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A78B63-6588-4C40-BEBB-88C8DF467A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3650_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145F0B3C-A945-443B-AB08-329F72358801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3750_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A554CB8-7FE1-454D-8E3D-AA3EC80EEB90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70A2471-D476-4FB7-8D1F-FEE0E4BF460C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A3A89F-CB39-4E76-BC64-3C4F4788FB8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_cx2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA2F515-2E29-4478-AE61-9C513CC6901B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_cx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC339542-79DA-45AB-B488-C99D1FEB8359"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_cx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987FB06B-F349-48D5-B46C-CF23BD6B6811"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:integrated_management_module_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.19",
            "matchCriteriaId" : "740F81FC-AD9F-4AA0-9A32-7363363B7AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs22:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9180CC-F795-4B8D-B9BF-37488D352AC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C010052B-1EBD-4129-9DCE-077575B8286A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs23e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F02BE9-BA77-4DC2-AB7A-BF53FE3B7CA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x220_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0AABD-73B4-4311-9185-643DE173092E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x222_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CC2E42-2E9F-4C41-9A36-4A21C32F4CB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x240_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594B1D02-B6ED-4F9F-BAEC-313FFD1C17C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x280_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828C175A-0B5F-453D-A661-0AD955DB22C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x440_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5934364-CF52-411C-B13F-A8688A7BC0FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x480_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A17A8F8-F833-4F5E-A0ED-CF01B1ABAA9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x880_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC450128-EDFE-4BD3-A87F-946EED1E0E39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:idataplex_dx360_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29845B4B-04B8-4685-948F-4DD19C88D7AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:idataplex_dx360_m4_water_cooled:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7EABA0-ADB1-4A9B-AB96-FF6BB5720C50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:nextscale_nx360_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9642CB05-D7EE-4AFA-A28F-A6E7961A57EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3100_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66DB82A-0FF6-452B-8B11-239BF391AD12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3100_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A58320C-8C0B-4819-838A-AE31F9BFC70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3250_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3672040-7C51-4C83-A62C-096B2B0E5289"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3250_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E3BC19-4A70-4225-91E4-1DAE6C1986E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3300_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD693FE0-9B91-4F52-AE89-C82ED55DE43C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3500_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943B01A-635B-4F62-96DE-715FFA007AA9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3530_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAFFBE1-E343-4DCB-A44D-2E29C547CC28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3550_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F407F5-EF7C-4F65-8978-3FB80CB07C06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3630_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B656E6-B70F-49AB-B17C-F89849CA516E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ED7F3-84FD-4D6C-9EEE-83A52734602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4_bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967EE555-D0BF-4505-BB9D-0A7A92E94889"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DF5766-53F1-4AE8-AB8F-97C0F36215B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3750_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268FEAB9-EEB1-4B00-A086-1185B0A35959"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8ED74FB-C819-4BD9-9986-2588FCC2D308"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB4836-D812-4818-AC08-38EABD56F3EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/product_security/LEN-14054",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/product_security/LEN-14054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3745",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-20T00:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authenticated to the LXCA's internal LDAP server, including administrative accounts and service accounts with administrative privileges. This is an issue only for users who have used local authentication with LXCA and not remote authentication against external LDAP or ADFS servers."
      }, {
        "lang" : "es",
        "value" : "En Lenovo XClarity Administrator (LXCA) en versiones anteriores a la 1.3.0, si se descargan datos del servicio desde LXCA, un usuario no administrativo podría obtener acceso a información de contraseñas de usuarios que se han autenticado previamente en el servidor LDAP interno de LXCA, incluyendo las cuentas administrativas y las cuentas de servicio con privilegios administrativos. Esto solo es un problema para los usuarios que han empleado la autenticación local con LXCA y no la autenticación remota contra servidores LDAP o ADFS externos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "3749C239-F50B-483B-865F-6828A7AFEC14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-13671",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-13671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3167",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-20T01:29:00.330",
      "lastModified" : "2025-11-04T16:15:38.937",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed."
      }, {
        "lang" : "es",
        "value" : "En Apache httpd, en versiones 2.2.x anteriores a la 2.2.33 y versiones 2.4.x anteriores a la 2.4.26, el uso de ap_get_basic_auth_pw() por parte de módulos de terceros fuera de la fase de autenticación puede dar lugar a que se omitan requisitos de autenticación.."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.33",
            "matchCriteriaId" : "288DBB49-70C3-44FD-B0F1-620FF9A21984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.26",
            "matchCriteriaId" : "62198456-19E7-49D4-80C2-0008C43AC925"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967EC28A-607F-48F4-AD64-5E3041C768F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2466282-51AB-478D-9FF4-FA524265ED2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4B4E96-1F12-4719-BDB7-4ED5D3DCF9ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99135",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4%40%3Cdev.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Sep/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4%40%3Cdev.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3169",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-20T01:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port."
      }, {
        "lang" : "es",
        "value" : "En Apache httpd, en versiones 2.2.x anteriores a la 2.2.33 y versiones 2.4.x anteriores a la 2.4.26, mod_ssl podría desreferenciar un puntero NULL cuando los módulos de terceros llaman a ap_hook_process_connection() durante una petición HTTP a un puerto HTPS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AD11FB-529C-404E-A13B-284F145322B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBBB7FE-35FC-4515-8393-5145339FCE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F519633F-AB68-495A-B85E-FD41F9F752CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CF6394-95D9-42AF-A442-385EFF9CEFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B629FB-88C8-4E85-A137-28770F1E524E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03550EF0-DF89-42FE-BF0E-994514EBD947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4886CCAB-6D4E-45C7-B177-2E8DBEA15531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35631AC-7C35-4F6A-A95A-3B080E5210ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CED2BA6-BE5E-4EF1-88EB-0DADD23D2EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71F4154-AD20-4EEA-9E2E-D3385C357DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8C9DB-401E-42B3-BAED-D09A96DE9A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062C20A0-05A0-4164-8330-DF6ADFE607F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D345BA35-93BB-406F-B5DC-86E49FB29C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED4892F-C829-4BEA-AB82-6A78F6F2426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00128AAD-E746-4DCD-8676-1381E5232220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D7ABB-DE11-40D6-8AAF-C626DD7E3914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5252544F-7BDD-42EE-856E-B351B4B6D381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58375DE5-F7EC-400D-84A2-CD70B72C4F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15233815-C037-41BB-A447-A078F83A93F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5444C583-CF83-4ECD-8DF8-66D8C1FCF096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C306D07-9DF3-4AD1-9984-ECA094D0F50E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0358BB2D-7C7D-486D-8AA4-1E59AD0624CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513A1C46-80FF-489C-AD31-F8F790C6D6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "020254C9-BA4E-4705-A967-ABD498722C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCD3C8C-9BF8-4F30-981A-593EEAEB9EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046487A3-752B-4D0F-8984-96486B828EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3ECBCB1-0675-41F5-857B-438F36925F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6CBFBF-74F6-42AF-BC79-AA53EA75F00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8717A96B-9DB5-48D6-A2CF-A5E2B26AF3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F45B27-504B-4202-87B8-BD3B094003F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FB2B98-DFD2-420A-8A7F-9B288651242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B803D25B-0A19-4569-BA05-09D58F33917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8510442C-212F-4013-85FA-E0AB59F6F2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5673AB-53BB-40B2-83A7-8B82B2D0EBB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99134",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "security@apache.org"
      }, {
        "url" : "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae%40%3Cdev.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae%40%3Cdev.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7668",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-20T01:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value."
      }, {
        "lang" : "es",
        "value" : "Los cambios en el análisis sintáctico estricto de HTTP añadidos en las versiones 2.2.32 y 2.4.24 de Apache httpd introdujeron un error en el análisis de listas de tokens. Esto permite que ap_find_token() busque más allá del final de la cadena de entrada. Un atacante puede conseguir causar un fallo de segmentación o forzar a que ap_find_token() devuelva un valor incorrecto mediante la manipulación de una secuencia de cabeceras de peticiones con fines maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "020254C9-BA4E-4705-A967-ABD498722C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2AC773-59A1-46EB-8943-309ADF012435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5673AB-53BB-40B2-83A7-8B82B2D0EBB8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4B4E96-1F12-4719-BDB7-4ED5D3DCF9ED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.0",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "591A337B-D469-4080-BEC6-5ED9523EFC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12.0",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "97AA7714-48CD-4249-9968-81C9781B1102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
            "matchCriteriaId" : "C47360D3-4390-4F31-BA82-7A4F38408E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
            "matchCriteriaId" : "C03A4DED-974B-4FCE-92F7-83DA939E0847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
            "matchCriteriaId" : "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.12.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6536473A-2ECF-4806-AC02-2386552BEAB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99137",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/55a068b6a5eec0b3198ae7d96a7cb412352d0ffa7716612c5af3745b%40%3Cdev.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/55a068b6a5eec0b3198ae7d96a7cb412352d0ffa7716612c5af3745b%40%3Cdev.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7679",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-20T01:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header."
      }, {
        "lang" : "es",
        "value" : "En Apache httpd, en versiones 2.2.x anteriores a la 2.2.33 y versiones 2.4.x anteriores a la 2.4.26, mod_mime puede leer un byte más allá del final de un búfer cuando está enviando una cabecera de respuesta del tipo Content maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.33",
            "matchCriteriaId" : "288DBB49-70C3-44FD-B0F1-620FF9A21984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.26",
            "matchCriteriaId" : "62198456-19E7-49D4-80C2-0008C43AC925"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99170",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751%40%3Cdev.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751%40%3Cdev.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3075",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de liberación de memoria al manipular la clase XML de ActionScript 2. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3076",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de corrupción en el módulo MPEG-4 AVC. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42247/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42247/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3077",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de corrupción de memoria en el parseador de imágenes PNG. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42248/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42248/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3078",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de corrupción de memoria en el módulo de Adobe Texture Format (ATF). Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42249/",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42249/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3079",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de corrupción de memoria en la representación interna de datos ráster. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3081",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de uso después de liberación cuando se realiza computación interna causada por múltiples manipulaciones de máscaras de objetos. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3082",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de corrupción de memoria en la clase LocaleID. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "CD726784-2878-4F1C-B8F5-CFE0A63C0956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3083",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de uso después de liberación en la funcionalidad Primetime SDK relacionada con los metadatos del perfil del flujo del archivo de medios. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3084",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad en la funcionalidad publicitaria de los metadatos. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0.0.171",
            "matchCriteriaId" : "FE421134-FFEE-4027-8724-95D6FD108373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3086",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Shockwave versiones 12.2.8.198 y anteriores, tienen una vulnerabilidad explotable de corrupción de memoria. Una explotación exitosa podría llevar a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.2.8.198",
            "matchCriteriaId" : "C9A4839D-5A9B-4E5E-B253-050099B95EA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99019",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038656",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-16-036",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/shockwave/apsb17-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-16-036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/shockwave/apsb17-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3087",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate."
      }, {
        "lang" : "es",
        "value" : "Adobe Captative versiones 9 y anteriores tienen una vulnerabilidad de divulgación de información debido al abuso de la característica de informes quiz en Captative."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:captivate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "2F62B6F2-019C-4FE6-97F8-D96CEE78238C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038657",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/captivate/apsb17-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/captivate/apsb17-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3088",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores tiene una vulnerabilidad de corrupción de memoria explotable en el motor de tiempo de ejecución de PDF. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3089",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones 4.5.4 y anteriores de Adobe Digital Editions tienen una vulnerabilidad de corrupción de memoria explotable en el modelo de generación de imágenes PDF. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3090",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores contienen una vulnerabilidad de carga de librería insegura. La vulnerabilidad se debe a la carga insegura de la biblioteca de extensiones de biblioteca relacionadas con el navegador en el complemento de instalación. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99024",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3092",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores contienen una vulnerabilidad de carga insegura de librería. La vulnerabilidad se debe a la carga insegura de la biblioteca de las funciones de la biblioteca de control del editor en el complemento del instalador. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99024",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3093",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores tienen una vulnerabilidad de corrupción de memoria explotable en el módulo de representación de mapa de bits. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3094",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores tienen una vulnerabilidad explotable de corrupción de memoria en el motor de procesamiento de PDF. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99021",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3095",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores tienen una vulnerabilidad explotable de corrupción de memoria en el motor de parseado de PDF. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46765D64-26C7-43D3-BA85-61EC4040CD05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99021",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3096",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores tienen una vulnerabilidad explotable de corrupción de memoria en módulo de mapeo de códigos de caracteres. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3097",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer plugin. A successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versiones 4.5.4 y anteriores contienen una vulnerabilidad de carga insegura de biblioteca. La vulnerabilidad se debe a funciones de carga de bibliotecas no seguras en el complemento de instalación. Una explotación exitosa podría conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "52633641-DC5F-435B-81F0-62EE1D380999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99024",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3098",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-06-20T17:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server."
      }, {
        "lang" : "es",
        "value" : "Las versiones 9 y anteriores de Adobe Captivate, presentan una vulnerabilidad de ejecución de código remota en la funcionalidad quiz reporting que podría ser violada para leer y escribir archivos arbitrarios en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:captivate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "2F62B6F2-019C-4FE6-97F8-D96CEE78238C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038657",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/captivate/apsb17-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/captivate/apsb17-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T07:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (large loop) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función wav_open_read en frontend/input.c en libasn1fix.a en Freeware Advanced Audio Coder (FAAC) 1.28 permite a atacantes remotos causar una denegación de servicio (bucle largo) utilizando un archivo wav manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_coder:1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842DC1D-63B2-436A-AC79-247136CE9C9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42207/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42207/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T07:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función faacEncOpen en libfaac/frame.c en Freeware Advanced Audio Decoder (FAAD) 1.28 permite que atacantes remotos provoquen una denegación de servicio (lectura de memoria inválida y cierre inesperado de la aplicación) mediante un archivo wav manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeware_advanced_audio_coder_project:freeware_advanced_audio_coder:1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE3A381-E214-4C68-907C-5B3425207D8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42207/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42207/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T07:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.7, los datos de PROFINET IO con una gran profundidad de recursividad permiten a los atacantes remotos causar una denegación de servicio (agotamiento de pila) en la función dissect_IODWriteReq en el archivo plugins/profinet/packet-dcerpc-pn-io.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13811",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d6e888400ba64de3147d1111a4c23edf389b0000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d6e888400ba64de3147d1111a4c23edf389b0000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T07:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "install\\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameter."
      }, {
        "lang" : "es",
        "value" : "install\\\\save.php en WebsiteBaker v2.10.0 permite que atacantes remotos ejecuten código PHP arbitrario mediante el parámetro database_username."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websitebaker:websitebaker:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F1BCD-5F74-46FD-98BD-4F280CEF654D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XiaoZhis/ProjectSend/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/XiaoZhis/ProjectSend/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T07:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB."
      }, {
        "lang" : "es",
        "value" : "GNU Debugger (GDB) en versiones 8.0 y anteriores no detecta un campo de longitud negativa en una sección DWARF. Una sección mal formada en un binario ELF o un archivo core puede hacer que GDB asigne memoria repetidamente hasta que se alcance el límite de un proceso. Esto puede, por ejemplo, evitar que se analice malware con GDB."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "E1292783-2ED5-493B-9172-73DE7BD07FBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99244",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21600",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2805",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T13:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en pila en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera. Una petición HTTP especialmente manipulada puede provocar un desbordamiento de búfer basado en pila que resulte en la sobrescritura de datos arbitrarios en el frame de la pila. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_hd_indoor_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3.17",
            "matchCriteriaId" : "AD20C2D9-7C46-45AF-ADF0-03037DEDD576"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_hd_indoor_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74B9B8E-DC7B-4595-A878-72A8998CDD84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0299",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2827",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T13:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.37. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell durante la creación de la cuenta, lo que resulta en una inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0328",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2828",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T13:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.37. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell durante la creación de la cuenta, lo que resulta en una inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2829",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T13:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de salto de directorio en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.37. Una petición HTTP especialmente manipulada puede hacer que la aplicación lea un archivo del disco, pero un error al filtrar adecuadamente caracteres resulta en que el atacante puede especificar un archivo fuera del directorio. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99250",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0330",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2830",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T13:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de desbordamiento de búfer explotable en la interfaz de administración web utilizada por la Cámara HD para Interiores C1 de Foscam ejecutando el firmware de la aplicación versión 2.52.2.37. Una petición HTTP especialmente creada puede causar un desbordamiento de búfer resultando en la sobreescritura de datos arbitrarios. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0331",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2831",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T13:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de desbordamiento de búfer explotable en la interfaz de administración web utilizada por la Cámara HD para Interiores C1 de Foscam ejecutando el firmware de la aplicación versión 2.52.2.37. Una petición HTTP especialmente diseñada puede causar un desbordamiento de búfer resultando en la sobreescritura de datos arbitrarios. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0332",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the world-writable location. In the case of the \"system helper\" component, files deployed as part of the app are owned by root, so in the worst case they could be setuid root."
      }, {
        "lang" : "es",
        "value" : "En Flatpak, en versiones anteriores a la 0.8.7, un repositorio de aplicaciones de terceros podría incluir aplicaciones maliciosas que contienen archivos con permisos inadecuados, por ejemplo, setuid o world-writable. Los archivos se despliegan con estos permisos que permitirían que un atacante local abra el ejecutable setuid o escriba en la ubicación modificable por cualquier usuario. En el caso del componente \"system helper\" los archivos desplegados como parte de la aplicación son propiedad de root, por lo que, en el peor caso, podrían ser setuid root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6",
            "matchCriteriaId" : "02ECEDA4-3ECB-4A77-A510-FB4E3FB95F68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3895",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99346",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/865413",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/issues/845",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/865413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/issues/845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1117",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-21T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X-Force ID: 121155."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 8.0 y 9.0 podrían permitir que un usuario autenticado provoque una denegación de servicio (DoS) en el canal MQXR cuando trace está habilitado. IBM X-Force ID: 121155."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153F42BE-64AE-4D38-94C1-E59EF10632A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0628A7A-D9D7-4E29-B5D3-04707585463A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001468",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99136",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121155",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1304",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-21T18:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458."
      }, {
        "lang" : "es",
        "value" : "IBM ha identificado una vulnerabilidad con IBM Spectrum Scale/GPFS utilizado en Elastic Storage Server(ESS)/GPFS Storage Server(GSS) durante el testeo de una configuración sin soporte, donde las aplicaciones de los usuarios son ejecutadas en un nodo servidor ESS I/O activo y que utiliza I/O para llevar a cabo la lectura o escritura a un archivo Spectrum Scale. Esta Vulnerabilidad podría resultar en el uso incorrecto de una dirección de memoria, llevando a fallo al daemon Spectrum Scale/GPFS con un Signal 11, y una posible denegación de servicio o una corrupción de datos indetectada. IBM X-Force ID: 125458."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614607BC-B141-46E4-A814-4503D25E74E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCC98B-C3DD-48B2-A6FA-22374B91D1CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2F5A7B-F33D-4368-859B-6D24AB675D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040C52A2-B68B-4DB0-8DBF-A7281D9F0578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B923C802-6F4B-4F66-B0B8-B2D2CCA49137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69690CF-649D-4018-AE0D-72187A49BA9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDC2BA-207C-476E-8CA5-CF3A57802A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D7652C-D51D-4935-B683-CFA60B0ACC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB5FD4D-8952-454F-89F4-5489E98BBE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7E1CF2-FD94-4FA7-973D-1ED364EA7E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CA6C-6B5B-4E44-8E81-0234E96D4B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FEB7DE-53B4-4934-B1CE-CCE029414691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:elastic_storage_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA85D6-31D8-4E6F-B2B5-032FEC74038A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010230",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99274",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125458",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T18:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the \"Null\" image driver."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una denegación de servicio (DoS) en Horde_Image en versiones 2.x anteriores a la 2.5.0 mediante una URL manipulada en el controlador de imagen \"Null\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9053E0DD-C485-4B91-A3E9-C02BDF37CB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "756FCD4D-83A1-44A5-AB82-9647B9E47114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A761379-3E33-46EF-97CC-7136A56B398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE8836C-D1F7-418A-A6A7-4AB702CA05F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14280BE2-2F87-41A8-9462-26387E8FB363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F270A4F2-A45F-4225-9A76-609B0BEADF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C306F0-4E28-461F-85D7-55768941B40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F5C4F1-E043-46DA-AD83-A40016DEE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E0487A-370A-4755-BE2A-C45AAED1B47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F71071-AD9A-45FF-AC80-EFF0BE4D5E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF62B6D1-5571-4247-BF4F-8EF270D57EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF90B9A-78F9-4F2C-A2A4-C31D4BC1C81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6990F757-6235-4775-8485-92627E5DAB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F39CE1-BB96-4805-B754-E01D32C84CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777D8B07-0D0C-47D1-81BE-6A8FADB0BA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8FFA4C-74DE-4D5C-85D4-B65D4B22FFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E8E220-B79D-4EE4-B330-257F6621E7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92507F4-B3F5-448C-A77A-84CEB875BD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67453C36-6797-49CF-A27E-D4AEB3AE7458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA731CB-58FC-467E-9219-7D317E041E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD295961-3EF9-4D14-A46B-AE3DEDA1EB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FF84E6-0B02-4D75-8C8E-6317E9C3E8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61BBB192-177E-423B-A819-C28998899A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4CC2DC-7B8C-44D9-8122-DABBB7B2874A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B6B00E-196C-453D-8788-05E92AC2183D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B25E03-1C42-4563-8C65-17A8827BA27B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067D0A5D-B612-4FFF-8AE3-D912D0E2891E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1255D2EC-D601-4833-8173-7B3885885529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B910A4-D636-4A16-8900-559AD4E23C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.horde.org/archives/announce/2017/001234.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.horde.org/archives/announce/2017/001234.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T18:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una ejecución remota de código en Horde_Image en versiones 2.x anteriores a la 2.5.0 mediante una petición GET manipulada. Su explotación requiere autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BC7F00-6913-471A-8174-7B4F418959C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF74626-2A3A-4C5B-AAB0-7F89553F8503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1BA827-A904-461E-9F6D-5EEAF1CCAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8388AA4-E32E-472A-935B-EA5859AD6ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702D16E7-B3D9-44BE-A7C8-515AE26946AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECA35FB-CC7D-45C7-8387-281889C5B210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81C3E7-C58E-44F6-8250-25650CC11445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675194BC-5E3C-41D6-B1E7-907DC6EB9FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D38725D-BE36-426A-B9EF-3572D4FC9751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2807B301-F022-4B4D-A71C-C8A158CAB507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C397A0B3-3D64-4D53-9AFF-876EA0795745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27A54B6-E4CE-4116-AECD-2966BF8F5599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84754CB3-0C5F-4442-9206-F3B161D283D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C13980A-F84B-4F6F-9ECD-6D7F62C3D30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A430144-931F-4FDA-9DBF-1B346B300C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9D9DEF-C78C-4FA8-9239-E5AF7FDF3033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE02ED1F-1AFF-4DD2-A95B-2E87D3B06973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A091A9C-39A4-4521-9A19-C697032B0DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B5E13D-BEEE-4CC7-8AC0-5D63FB0681D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300E48B-D8B0-470B-A2D0-01E59FC04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC8F7F1-5B49-4DB0-9639-C676A54E8B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE5077E-5F64-4CB5-B1A9-1AB93CB89FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1469BDF-0B0A-48CE-AD24-4585121C0680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE213A58-0DD8-4F6E-80E3-2F1CA303EE57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.horde.org/archives/announce/2017/001234.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.horde.org/archives/announce/2017/001234.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T18:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker to inject arbitrary HTML or JavaScript via the _username parameter when attempting authentication to webapi.py, which is returned unencoded with content type text/html."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en Check_MK, en versiones 1.4.0x anteriores a la 1.4.0p6, que permite que un atacante remoto no autenticado inyecte HTML o JavaScript arbitrarios mediante el parámetro _username al intentar autenticarse en webapi.py, que se devuelve sin cifrar con el tipo de contenido texto/html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3877AA7-4BAF-4C0E-B157-ED2473ACC72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF31D012-B7D8-4218-8DF0-9497287FC3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "0022EF65-24D5-403E-8824-75BC928FC88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "8F375250-FC89-4FEE-BE18-5724136EF89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "91C50D90-64F3-45EF-B5D8-DA689D4FC0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "39911FDF-8755-425E-937C-9AA6E4A3BA7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=blob%3Bf=.werks/4757%3Bhb=c248f0b6ff7b15ced9f07a3df8a80fad656ea5b1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=blob%3Bf=.werks/4757%3Bhb=c248f0b6ff7b15ced9f07a3df8a80fad656ea5b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2813",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-21T19:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de enteros en la funcionalidad de análisis sintáctico de JPEG 2000 de IrfanView 4.44. Una imagen jpeg2000 especialmente manipulada puede provocar un desbordamiento de enteros y una asignación de memoria errónea que daría lugar a la ejecución de código arbitrario. La vulnerabilidad puede desencadenarse visualizando la imagen en la aplicación o mediante la característica de miniaturas de IrfanView."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98046",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0310",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6043",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-21T19:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de consumo de recursos en Trihedral VTScada versiones anteriores a 11.2.26. El cliente no comprueba apropiadamente la entrada ni limita la cantidad de recursos que son utilizados por un atacante, que puede ser usado para consumir más recursos de los que están disponibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.2.23",
            "matchCriteriaId" : "CA214CB5-FBA6-4996-9B94-0E69BE2E4BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99066",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6045",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-21T19:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Exposición de Información en Trihedral VTScada versiones anteriores a 11.2.26. Algunos archivos se exponen dentro de la aplicación del servidor web a usuarios no autenticados. Estos archivos pueden contener información de configuración confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-548"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.2.23",
            "matchCriteriaId" : "CA214CB5-FBA6-4996-9B94-0E69BE2E4BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99066",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6050",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-21T19:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en Ecava IntegraXor en versiones 5.2.1231.0 y anteriores. La aplicación fracasa a la hora de validar correctamente entradas de usuario, lo que podría permitir que un atacante no autenticado ejecute de forma remota código arbitrario en forma de consultas SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.1231.0",
            "matchCriteriaId" : "CC3AD6FB-EA14-4FBF-8CBB-A9DA6ECC3E5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99164",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-171-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-24",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/99164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-171-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6053",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-21T19:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de tipo cross-site-scripting (XSS) en Trihedral VTScada versiones anteriores a 11.2.26. Una vulnerabilidad tipo cross-site-scripting (XSS) puede permitir que el código JavaScript suministrado por el atacante se ejecute en el navegador del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.2.23",
            "matchCriteriaId" : "CA214CB5-FBA6-4996-9B94-0E69BE2E4BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99066",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7918",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-21T19:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de control de acceso incorrecto en Cambium Networks ePMP. Una vez un usuario válido haya empleado la exportación de configuración SNMP, un atacante podría desencadenar de forma remota las copias de seguridad de la configuración del dispositivo mediante MIB específicos. Estas copias carecen de un control de acceso correcto y podrían permitir el acceso a información sensible y, posiblemente, permitir cambios en la configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8AFE87-7DE5-4D09-AC45-DDD967939A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64386E5-D470-4D75-8DBC-1686285BE06F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_elevate_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A9AA7F-3427-412B-A3D1-0F48E5FD3394"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_elevate:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44737752-57D7-4DB3-B9F4-D7E52189F511"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B140BE5-6FD1-4588-839E-461658EC851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C390E5-C5B7-449A-AFA1-8C746F08D7C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_1000_hotspot_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EBA74-3C0D-427D-8993-BAC5383D8AF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_1000_hotspot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC142E94-06B3-4C18-A281-042B66AAB51E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99083",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7922",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-21T19:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de gestión incorrecta de privilegios en Cambium Networks ePMP. Los privilegios de las cadenas de comunidad SNMP no se restringen correctamente, lo que podría permitir que un atacante obtenga acceso a información sensible y, posiblemente, permitir cambios en la configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8AFE87-7DE5-4D09-AC45-DDD967939A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64386E5-D470-4D75-8DBC-1686285BE06F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_elevate_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A9AA7F-3427-412B-A3D1-0F48E5FD3394"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_elevate:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44737752-57D7-4DB3-B9F4-D7E52189F511"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B140BE5-6FD1-4588-839E-461658EC851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C390E5-C5B7-449A-AFA1-8C746F08D7C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambium_networks:epmp_1000_hotspot_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EBA74-3C0D-427D-8993-BAC5383D8AF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambium_networks:epmp_1000_hotspot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC142E94-06B3-4C18-A281-042B66AAB51E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99083",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3218",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-06-21T20:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates."
      }, {
        "lang" : "es",
        "value" : "Samsung Magician 5.0 no valida certificados TLS para el tráfico de actualización de software HTTPS. En versiones anteriores a la 5.0, Samsung Magician emplea HTTP para las actualizaciones de software."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:magician:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C01892-F651-4637-8E77-DDCBF72485B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99081",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/846320",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/846320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3219",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-06-21T20:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash."
      }, {
        "lang" : "es",
        "value" : "Acronis True Image hasta e incluyendo la versión 2017 Build 8053 realiza actualizaciones de software mediante HTTP. Las actualizaciones descargadas solo se verifican por medio de un hash MD5 proporcionado por el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:true_image:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017",
            "matchCriteriaId" : "40FCED77-070F-4770-94C5-ACCB2C9BF7F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99128",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/489392",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/489392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4988",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-21T20:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Isilon OneFS en versiones 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4 y 7.1.x se ha visto afectado por una vulnerabilidad de escalado de privilegios que podría ser explotada por atacantes para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6F32C-BC12-455D-9C78-F6485C72582E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E706E435-8E45-4ACB-8BBC-5AC458378D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE2D48E-39E8-42E6-8E82-AB9FA0547BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDB97FE-6470-4AFE-A3B0-B664F132A190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A669BE6B-726F-4F34-A009-798E32FF6895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE74624-A44D-4837-AD36-DBF3E93D5ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CBA2E5-6E46-4922-B56B-3F8C578074B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C22C93-9069-406E-9A14-03F20AD34D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD30754-489E-42BA-8B51-1FEB5DC30912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92501AC-0588-4051-9568-52074E8A2D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7407DAA-7740-45B0-BA99-03794C8B1215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E804DB-40F0-4FBF-8A85-A49767DC4022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D645B5EF-4333-48BF-960A-03AA2D624376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302422CE-3C0A-44E6-83ED-51EC65482B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B96819-9F4D-44D4-9645-48EB8E705121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F551F88-3176-4E92-AE7A-FCAB3A220A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26144325-6722-48C1-A0C2-BB78EF9BDE60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87E8EEE-42AA-48B3-ABBE-9CE7FD2C275B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F09B14D-2C84-47F2-8F7F-6F8DAEFFF106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1B998-AEEE-4123-82F3-72D84EF681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0828B061-28B4-4AEE-BBB9-AF287B90713C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064C487D-517E-4F7B-A182-5DF287477652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600B1F-C307-457B-BC84-73339A64DF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2687A1-97EC-4777-9CC1-164D525C56E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB53E775-7A57-41D2-A93D-5F96D72622D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F44A3-8C09-49EE-8545-51C57F36B801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DF0A4B-702E-4E6B-AD2D-086F76B6DBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540755/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99165",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540755/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4989",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-21T20:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information, perform software updates, or run maintenance workflows."
      }, {
        "lang" : "es",
        "value" : "En EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31 y 7.2.0-401, un atacante remoto no autenticado podría omitir el proceso de autenticación para obtener acceso a la página de mantenimiento del sistema. Esto podría ser explotado por un atacante para ver información sensible, realizar actualizaciones de software o llevar a cabo flujos de trabajo de mantenimiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2.0-401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD7E9AC-6477-4C58-A5CA-E294C2D0AB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2.1-31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB2AC0F-B8B3-4232-B530-D9F01D7ECCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2.1-32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5A76F8-15A8-4FE5-884E-6A46337B6F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3.0-226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E105BC-BCB8-481F-B21F-2FB4653CA1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133FFE19-9914-4E7E-BDE4-FF04B6554F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3.1-125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA69C30-4908-4DCD-AC7C-989E81FC7528"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540754/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99243",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038718",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540754/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4990",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-21T20:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system."
      }, {
        "lang" : "es",
        "value" : "En EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233 y 7.3.0-226, un atacante no autorizado podría aprovechar la característica de subida de archivos de la página de mantenimiento del servidor para cargar un archivo maliciosamente manipulado en cualquier directorio, lo que podría permitir que el atacante ejecute código arbitrario en el sistema de Avamar Server."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3.0-226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E105BC-BCB8-481F-B21F-2FB4653CA1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133FFE19-9914-4E7E-BDE4-FF04B6554F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3.1-125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA69C30-4908-4DCD-AC7C-989E81FC7528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4.0-242:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03E6BC-646D-4F15-A372-57C7F45D7194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4.1-58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8240F5F3-623B-420B-9375-894F7C9B4A2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540754/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99243",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038718",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540754/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-21T20:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c."
      }, {
        "lang" : "es",
        "value" : "JasPer versión 2.0.12, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva de búfer en la región heap de la memoria y bloqueo de aplicación) por medio de una imagen creada, relacionada con la función jp2_decode en el archivo libjasper/jp2/jp2_dec.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/140",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-22T03:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of \"plugin/controllers/models/config.py\" performs an eval() call on the contents of the \"key\" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands via api/saveconfig."
      }, {
        "lang" : "es",
        "value" : "Un problema ha sido descubierto en el plugin OpenWebif hasta la versión 1.2.4 para dispositivos abiertos E2. La función saveConfig del archivo \"plugin/controllers/models/config.py\" representa una llamada eval() en los contenidos del parametro \"key\" HTTP GET. Esto permite a un atacante remoto sin autentificar ejecutar código Python aleatorio o comandos del sistema operativo mediante api/saveconfig."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebif_project:openwebif:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.4",
            "matchCriteriaId" : "0AD65577-EEC6-4823-90AF-1C01818DF9B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/02/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99232",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://census-labs.com/news/2017/10/02/e2openplugin-openwebif-saveconfig-remote-code-execution/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/02/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://census-labs.com/news/2017/10/02/e2openplugin-openwebif-saveconfig-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3629",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-06-22T13:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). Las versiones compatibles que se ven afectadas son 10 y 11. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Solaris para comprometerlo. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Solaris. CVSS 3.0 Puntuación Base 7.8 (Impactos de confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-3629-3757403.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99150",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42270/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-3629-3757403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42270/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3630",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-06-22T13:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). Las versiones compatibles que se ven afectadas son 10 y 11. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Solaris para comprometerlo. Los ataques con éxito de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, insertar o eliminar el acceso a algunos de los datos accesibles de Solaris, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Solaris y la capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Solaris . CVSS 3.0 Puntuación Base 5.3 (Impactos de confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-3629-3757403.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99153",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42270/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-3629-3757403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42270/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3631",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-06-22T13:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). La versión compatible que se ve afectada es la 11. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Solaris para comprometerlo. Los ataques con éxito de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, insertar o eliminar el acceso a algunos de los datos accesibles de Solaris, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Solaris y la capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Solaris . CVSS 3.0 Puntuación Base 5.3 (Impactos de confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-3629-3757403.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99151",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42270/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-3629-3757403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42270/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0176",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-22T14:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol connectivity (or Terminal Services) enabled."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en el código de autenticación Smart Card en gpkcsp.dll en Microsoft Windows XP hasta SP3 y Server 2003 hasta SP2 permite que un atacante remoto ejecute código arbitrario en el ordenador objetivo, siempre y cuando el ordenador esté unido a un dominio de Windows y tenga conectividad Remote Desktop Protocol (o Terminal Services) habilitada. 1763-L16BBB, series A y B, en versiones 16.00 y anteriores; 1763-L16BWA, series A y B, en versiones 16.00 y anteriores; 1763-L16DWD, series A y B, en versiones 16.00 y anteriores; y los controladores lógicos programables Allen-Bradley MicroLogix 1400 1766-L32AWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWA, series A y B, en versiones 16.00 y anteriores; 1766-L32BWAA, series A y B, en versiones 16.00 y anteriores; 1766-L32BXB, series A y B, en versiones 16.00 y anteriores; 1766-L32BXBA, series A y B, en versiones 16.00 y anteriores; y 1766-L32AWAA, series A y B, en versiones 16.00 y anteriores. Las credenciales de usuario se envían al servidor web mediante el método HTTP GET, lo que podría resultar en el registro de las credenciales. Esto podría hacer que las credenciales de usuario estén disponibles para su recuperación no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98550",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98752",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.0patch.com/2017/06/a-quick-analysis-of-microsofts.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/4022747/security-update-for-windows-xp-and-windows-server-2003",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.0patch.com/2017/06/a-quick-analysis-of-microsofts.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/4022747/security-update-for-windows-xp-and-windows-server-2003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-22T15:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a denial of service (memory leak within the function _TIFFmalloc in tif_unix.c) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.7, la función TIFFReadDirEntryLong8Array de libtif/tif_dirread.c hace mal uso de la operación malloc, lo que permite a un atacante remoto causar una denegación de servicio (fuga de memoria dentro de la función _TIFFmalloc en tif_unix.c) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE968DD2-24BE-4417-A6DF-D79E40E07766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2682",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/06/libtiffmemory-leak-in-tiffmalloc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99235",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/06/libtiffmemory-leak-in-tiffmalloc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-22T16:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSON deserialization."
      }, {
        "lang" : "es",
        "value" : "IdeaBlade Breeze Breeze.Server.NET en versiones anteriores a la 1.6.5 permite que atacantes remotos ejecuten código arbitrario. Esto está relacionado con el uso de TypeNameHandling en la deserialización JSON."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideablade:breeze.server.net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "2E86F648-E07F-471D-9EE9-633A23D20FA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://breeze.github.io/doc-net/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.blackhat.com/us-17/briefings.html#friday-the-13th-json-attacks",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://breeze.github.io/doc-net/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.blackhat.com/us-17/briefings.html#friday-the-13th-json-attacks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1326",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-22T18:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway no restringe correctamente las peticiones de usuario en base al nivel de permisos. Esto permite que los usuarios actualicen datos relacionados con otros usuarios manipulando los parámetros que se pasan en la petición POST. IBM X-Force ID: 126060."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004274",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99183",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126060",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0897",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-06-22T21:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "ExpressionEngine, en versiones 2.x anteriores a la 2.11.8 y en versiones 3.x anteriores a la 3.5.5, crea un token de firma de objeto con una entropía débil. Si se adivina el token correctamente, puede conducir a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.0.0:public_beta:*:*:*:*:*:*",
            "matchCriteriaId" : "574513F3-4138-4497-AB7B-48C3D0E57D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.0.1:public_beta:*:*:*:*:*:*",
            "matchCriteriaId" : "63A66777-08EF-4CB3-B132-2380632A472B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.0.2:public_beta:*:*:*:*:*:*",
            "matchCriteriaId" : "27FC3CCC-B29C-43BF-B75F-E209F438512A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B61035E8-E776-455D-A87E-D89C635EF612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B084EE1-049A-45E7-9DAA-78A67A08ED2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D9D6C6-E1BE-4AED-BD5A-251E62E02355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB81D8E5-F981-4BA7-ABF3-529E7155EED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34003923-392F-4D6E-91FA-7CEF9CF47933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446AC2B4-DA7A-4982-B383-DF2B0E2FA95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C7196D-190B-4180-AACC-141A13D51DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFAA28E-F9C1-4246-B218-C51A5493C56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E743D80-E5D3-4CB8-9412-99B2A55CD52D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC16511-FDA2-4F85-BB37-557165629592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8472C055-5A50-44A8-ACF7-F9775D2C0E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A730EF01-BB6D-4163-BCF8-7267798857E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CA981E-DE29-48B2-8B78-EAF2F6DE6990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BC9ED-18C4-43D1-88DF-9D41ECB20A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EA0BBC-4D35-4E83-9FEA-80834C5823EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3530A171-A49E-45A3-8DE6-562B657B968C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB735CF0-13A5-43C2-8E27-6AD7C612629F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1337527F-B9F4-4E62-A06D-8F954965F740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C826EC11-0541-415F-ABA7-457D3DF67685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD213AF-F832-49BE-9FB5-6B35D16CA066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC6E0BC-DA5D-4828-96A2-1029AD0CB853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43538A4E-7E4A-44A0-A4D1-F1B0CBDDCEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8079BBD2-1F9A-45F2-AFF3-78D7BA82EA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA7430A-0A6A-4B30-BD0D-E88E4C2914F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFED8674-66D2-404F-9676-71861D85103D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26FE9DF-E047-4172-8E27-58D5316B4E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42792D9B-279D-4837-868B-1D5E30A2D4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D29266-0857-4D5C-AFDC-4CCF97B21BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCCB8A0-DD87-43A4-B1D5-440DF3D537FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4DBC0F-9CCC-4F99-B8DA-EAB86B3EDF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6254A4-5B1A-4777-945A-6AD79643F2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6F5DAE-DFBF-4CD3-ABB0-E3A9290BC2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EF1AF2-4788-467E-8AE6-5213CFB1681A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62810DE1-6661-4A7F-9D38-B96913DA037C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355D00D-A208-4C96-8884-3C13A398084A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51900BA-81FC-4684-8987-E4A6D5FBE789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC26F1D3-C01F-468D-8029-AB57DF72AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E435507-BD37-4BC1-9820-EAB1BA6278B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B1570-9C28-4322-ABCE-8F68AF94EEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7398CE-139E-458F-9255-6E720E36BC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7C8F8E-1FCC-42D6-9606-316DA108852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:2.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08A1FC2-2AC1-4478-9C3A-58F150667854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57982775-D296-4735-8AB3-101AA71C7AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5C58D0-CF8F-409F-BCCF-FCE1F181D512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74CDD8C-C74E-433B-A02B-AF1F8735CB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A19751E-2ADC-4E2E-B1E8-CBF19C2A0C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C429A5AE-EC2F-4BE9-BA06-3CD7A6BA13D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C08C5B-F74F-4DD5-BD45-CE365233C71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517797EA-F496-44BF-8264-3621A2EC0719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C044A1DF-EEF6-40D9-94DC-08A5DC8BD27D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB2057A-E6E7-401D-98AD-407C0A106A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75E0EFB-BCAC-4D7D-B5CC-8E7B190AF5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F0A185-89EF-4FA7-9A14-A3C477AD5DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9D52C6-8BE3-428C-812D-6C491D0DEA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76632461-BEBE-490D-B476-85AD3D0082E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F139E-E486-4F4B-A99B-B8757BF654F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57DE1E4-190C-4216-B230-0A728309AD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEEBD8A-6535-4635-A390-2700E9463022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47192DE3-A103-42C4-A28D-8F5CFA6D7A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA49319-4F1D-42CF-81CC-23F3A8F23A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C855EE7-B0B4-4360-92ED-D397702339B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE605A67-F4B2-4FB0-A554-13130B3ECE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6CE0D3-9D97-4E87-A6D8-190BCCE1D746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F76D20-E9BD-486C-ADCA-52093B49BFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AEA3D-C81A-4606-BB25-7348F23B5B8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11292AD1-91C9-4407-859A-09CC757A7DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F1C5FA-9B2B-451F-B11B-22599DE63FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0960B36-2713-4B8D-9B92-18D616218A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5122EF-8428-46AD-A051-718E907C413C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCE5715-5415-4D79-AAE7-59DA7CD7B899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543A6C6E-5FFE-4F2D-A8CE-BD21F8921BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9ADC42-E62E-49D1-944F-C05ED60C96E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90C24A0-6C65-4D6C-9CA7-AB49AF7A8300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB75B67-1BC5-42BA-98EF-E3A834C33F26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99242",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/215890",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/215890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2780",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-22T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en memoria dinámica (heap) en la funcionalidad de análisis sintáctico de certificados X509 de InsideSecure MatrixSSL 3.8.7b. Un certificado X509 especialmente manipulado puede provocar un desbordamiento de búfer en el heap que daría lugar a la ejecución remota de código. Para desencadenar esta vulnerabilidad, un certificado x509 especialmente manipulado debe presentarse al cliente o aplicación del servidor vulnerable al iniciar la conexión segura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrixssl:matrixssl:3.8.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99DF17-92D2-4887-BBDF-A26BC7DF07C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99249",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0276",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2781",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-22T21:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en memoria dinámica (heap) en la funcionalidad de análisis sintáctico de certificados X509 de InsideSecure MatrixSSL 3.8.7b. Un certificado X509 especialmente manipulado puede provocar un desbordamiento de búfer en el heap que daría lugar a la ejecución remota de código. Para desencadenar esta vulnerabilidad, un certificado x509 especialmente manipulado debe presentarse al cliente o aplicación del servidor vulnerable al iniciar la conexión segura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrixssl:matrixssl:3.8.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99DF17-92D2-4887-BBDF-A26BC7DF07C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99249",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0277",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2782",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-22T21:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de enteros en la funcionalidad de análisis sintáctico de certificados X509 de InsideSecure MatrixSSL 3.8.7b. Un certificado x509 especialmente manipulado puede hacer que se desborde un contador de longitud, lo que desemboca en una operación controlada de copia fuera de límites. Para desencadenar esta vulnerabilidad, un certificado x509 especialmente manipulado debe presentarse al cliente o aplicación del servidor vulnerable al iniciar la conexión segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrixssl:matrixssl:3.8.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99DF17-92D2-4887-BBDF-A26BC7DF07C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99249",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0278",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-22T21:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en JBIG2Stream.cc en pdftocairo en Poppler en versiones anteriores a la 0.56 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante un documento PDF modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.55.0",
            "matchCriteriaId" : "5923FAB1-BD60-4C09-9242-211F9D8FDEE1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99241",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101540",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-22T21:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros que conduce a un desbordamiento de búfer basado en memoria dinámica (heap) en JBIG2Stream.cc en pdftocairo en Poppler en versiones anteriores a la 0.56 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema mediante un documento PDF modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.55.0",
            "matchCriteriaId" : "5923FAB1-BD60-4C09-9242-211F9D8FDEE1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99240",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2550",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101541",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-23T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI."
      }, {
        "lang" : "es",
        "value" : "Sitecore.NET 7.1 hasta la versión 7.2 tiene una vulnerabilidad de Cross-Site Scripting (XSS) mediante el parámetro searchStr en el URI /Search-Results."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:sitecore.net:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C4217E-56CB-491D-B561-055D7CB4C86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:sitecore.net:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543CBF1D-47FD-4B6F-B44E-7F411E255B9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jun/43",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99239",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jun/43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-23T12:29:00.177",
      "lastModified" : "2023-11-07T02:50:27.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-8831.  Reason: This candidate is a duplicate of CVE-2017-8831.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2017-8831 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3948",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-06-23T13:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session."
      }, {
        "lang" : "es",
        "value" : "Cross Site Scripting (XSS) en IMG Tags en la extensión ePO en McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x permite que usuarios autenticados inyecten scripts web o HTML arbitrarios mediante la inyección de código JavaScript malicioso en la sesión de navegación de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4A36C3-3303-4CFB-8253-029CD359E830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9577B426-5FCB-44C5-B6D1-B8F2A58B6BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A1A92B1-9411-4079-AC8E-BD75F155D4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882A1E8B-E2E2-450A-BD22-78255C416207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386BEE29-5DC6-438A-A9E5-C58184CE49FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10202",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1131",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375."
      }, {
        "lang" : "es",
        "value" : "Sterling B2B Integrator Standard Edition versión 5.2 de IBM , podría permitir a un usuario identificado obtener información confidencial mediante el uso de comandos HTTP especialmente creados y no compatibles. ID de IBM X-Force: 121375."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004270",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99227",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121375",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1132",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121418."
      }, {
        "lang" : "es",
        "value" : "Sterling B2B Integrator Standard Edition versión 5.2 de IBM, es vulnerable a un problema de tipo cross-site-scripting (XSS). Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando la funcionalidad deseada lo que conlleva a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 121418."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004199",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99233",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121418",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1193",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: 123667."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 podría permitir a un usuario obtener información sensible usando una petición HTTP GET. IBM X-Force ID: 123667."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004202",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99229",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123667",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1302",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X-Force ID: 125456."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 podría permitir a un usuario local ver información sensible debido a un inapropiado control de acceso. IBM X-Force ID: 125456."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004202",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99238",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125456",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1347",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462."
      }, {
        "lang" : "es",
        "value" : "Sterling B2B Integrator Standard Edition versión 5.2 de IBM, es vulnerable a la inyección SQL. Un atacante remoto podría enviar instrucciones SQL especialmente diseñadas, lo que podría permitir al atacante ver, agregar, modificar o eliminar información en la base de datos back-end. ID de IBM X-Force: 126462."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004199",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99231",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126462",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1348",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126524."
      }, {
        "lang" : "es",
        "value" : "Sterling B2B Integrator Standard Edition versión 5.2 de IBM , es vulnerable a un problema de tipo cross-site-scripting (XSS). Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando la funcionalidad deseada conllevando a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 126524."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004199",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99245",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126524",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1349",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-23T16:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user. IBM X-Force ID: 126525."
      }, {
        "lang" : "es",
        "value" : "Sterling B2B Integrator Standard Edition versión 5.2 de IBM, almacena información potencialmente confidencial de sesiones HTTP que podrían ser leídas por un usuario local. ID de IBM X-Force: 126525."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004209",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99236",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126525",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-23T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable."
      }, {
        "lang" : "es",
        "value" : "Una sanitización insuficiente en las versiones 4.04.0 y 4.04.1 del compilador de OCaml permite que se ejecute código con privilegios elevados en binarios marcados como setuid, estableciendo la variable de entorno CAML_CPLUGINS, CAML_NATIVE_CPLUGINS o CAML_BYTE_CPLUGINS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:ocaml:4.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE9F7CE-A1B9-4C85-B606-C6EC79B8F626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:ocaml:4.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8909B9-8F0B-4322-B174-AA4F72A8B66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://caml.inria.fr/mantis/view.php?id=7557",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sympa.inria.fr/sympa/arc/caml-list/2017-06/msg00094.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://caml.inria.fr/mantis/view.php?id=7557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sympa.inria.fr/sympa/arc/caml-list/2017-06/msg00094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-23T22:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter."
      }, {
        "lang" : "es",
        "value" : "'/cgi-bin/admin/testserver.cgi' del servicio web en la mayoría de las VIVOTEK Network Cameras es vulnerable a la inyección de un comando shell, lo que permite a un atacante remoto ejecutar cualquier comando shell como si fuera root mediante una solicitud HTTP manipulada. Esta vulnerabilidad ya esta verificada en VIVOTEK Network Camera IB8369/FD8164/FD816BA; muchas de las otras tienen un firmware similar que puede ser afectado. Un ataque usa metacaracteres shell en el parámetro sendremail."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivotek:network_camera_ib8369_firmware:ib8369-vvtk-0102a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C5DB13-2631-42A1-9D33-109626D9B2AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivotek:network_camera_ib8369:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CED8977-65CE-47C7-B62D-D604429BF3DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivotek:network_camera_fd8164_firmware:fd8164-_vvtk-0200b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDC585B-65BF-4A18-96A3-440A45B5527B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivotek:network_camera_fd8164:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D8DD51-8504-493F-A8A2-D260D785903E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivotek:network_camera_fd816ba_firmware:fd816ba-vvtk-010101.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E8D766-0F98-4FDB-95AA-C48B5991DED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivotek:network_camera_fd816ba:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C83867F-EEC1-4C38-90F7-FB32DAB32455"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.cal1.cn/post/An%20easy%20way%20to%20pwn%20most%20of%20the%20vivotek%20network%20cameras",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.cal1.cn/post/An%20easy%20way%20to%20pwn%20most%20of%20the%20vivotek%20network%20cameras",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-23T22:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing \"..\" sequences. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected."
      }, {
        "lang" : "es",
        "value" : "'/cgi-bin/admin/downloadMedias.cgi' del servicio web en la mayoría de las VIVOTEK Network Cameras es vulnerable, lo que permite a un atacante remoto leer cualquier archivo del sistema de ficheros Linux de las cámaras mediante una solicitud HTTP manipulada que contenga secuencias \"..\". Esta vulnerabilidad ya esta verificada en VIVOTEK Network Camera IB8369/FD8164/FD816BA; muchas de la otras tienen un firmware similar que también puede ser afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivotek:network_camera_ib8369_firmware:ib8369-vvtk-0102a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C5DB13-2631-42A1-9D33-109626D9B2AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivotek:network_camera_ib8369:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CED8977-65CE-47C7-B62D-D604429BF3DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivotek:network_camera_fd8164_firmware:fd8164-_vvtk-0200b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDC585B-65BF-4A18-96A3-440A45B5527B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivotek:network_camera_fd8164:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D8DD51-8504-493F-A8A2-D260D785903E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivotek:network_camera_fd816ba_firmware:fd816ba-vvtk-010101.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E8D766-0F98-4FDB-95AA-C48B5991DED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivotek:network_camera_fd816ba:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C83867F-EEC1-4C38-90F7-FB32DAB32455"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.cal1.cn/post/An%20easy%20way%20to%20pwn%20most%20of%20the%20vivotek%20network%20cameras",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.cal1.cn/post/An%20easy%20way%20to%20pwn%20most%20of%20the%20vivotek%20network%20cameras",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T00:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of libmtp (version 1.1.12 and below) allows attackers to cause a denial of service (out-of-bounds memory access) or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad integer overflow en la función ptp_unpack_EOS_CustomFuncEx del archivo ptp-pack.c de libmtp (versión 1.1.12 y anteriores) o quizás la ejecución de código remoto mediante la inserción de un dispositivo móvil en un ordenador personal a través de un cable USB."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmtp_project:libmtp:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D69EB4-EB51-4C8D-A1F8-F93E59A9D68E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/libmtp/mailman/message/35735992/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/libmtp/mailman/message/35735992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T00:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1.12 and below) allows attackers to cause a denial of service (out-of-bounds memory access) or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad integer overflow en el archivo ptp-pack.c (función ptp_unpack_OPL) de libmtp permite a un atacante remoto causar una denegación de servicio (acceso fuero de los limites de la memoria) o quizás la ejecución de código mediante el insertado de un dispositivo móvil en un ordenador personal a través de un cable USB."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmtp_project:libmtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.12",
            "matchCriteriaId" : "F76A2C85-25E6-41FD-834E-2B2159BF4ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/libmtp/mailman/message/35729062",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/libmtp/mailman/message/35729062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T02:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of \"../..\" using the FILECAMERA variable (sent by GET) to read files with root privileges. NOTE: multiple third parties report that this is a system-integrator issue (e.g., a vulnerability on one type of camera) because Boa does not include any wapopen program or any code to read a FILECAMERA variable."
      }, {
        "lang" : "es",
        "value" : "/cgi-bin/wapopen in BOA Webserver 0.94.14rc21 permite la inyección de \"../..\" usando la variable FILECAMERA (enviada por GET) para leer archivos con privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boa:boa:0.94.14.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C2FF9B-C1CB-4B00-ADD4-1F7FD6F72C71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/raw/rt7LJvyF",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42290/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pastebin.com/raw/rt7LJvyF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42290/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T15:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the virtual_name parameter to /admin.php (i.e., creating a virtual album)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-site Scripting (XSS en Piwigo 2.9.1 permite a un administrador autentificado remoto inyectar un script arbitrario o código HTML mediante el parámetro virtual_name a /admin.php (p.e, crear un álbum virtual)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76057820-1B0F-4F8C-95C5-DA070CCE5623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/issues/716",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T15:29:00.220",
      "lastModified" : "2023-11-07T02:50:53.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php file from the FTP folder into a web folder."
      }, {
        "lang" : "es",
        "value" : "Winmail Server 6.1 permite ejecución de código remoto por usuarios autentificados quienes aprovechan el directorio transversal en la llamada move_folder_file de netdisk.php para mover un archivo -php de la carpeta FTP a la carpeta web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magicwinmail:winmail_server:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03B46783-0372-4E3D-ADCB-CE4AF1A72D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.magicwinmail.com/changelog.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zhonghaozhao/winmail/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.magicwinmail.com/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zhonghaozhao/winmail/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función bdencode en el archivo bdencode.cpp de libtorrent 1.1.3 permite a un atacante remoto causar una denegación de servicio (buffer overread basado en el heap -heap- y caída de la aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtorrent:libtorrent:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC3CAE2-8B33-433F-8C47-4CB020AE2999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/arvidn/libtorrent/issues/2099",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/arvidn/libtorrent/issues/2099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-24T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in C_InfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute arbitrary SQL commands via an XML document containing a crafted ArticleIDs element within a GetArticleHitsArray element."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad SQL Inyección en el servicio web C_InfoService.asmx de Easysite 7.0, que puede permitir a un atacante remoto ejecutar una comando SQL arbitrario mediante un documento XML que contenga un elemento ArticleIDs manipulado dentro del elemento GetArticleHitsArray."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easysitecms:easysite:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5B2D78-C1A8-46CD-8E70-9009149F43A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.2cto.com/article/201409/338712.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.huilan.com/zkhl/resource/cms/2015/09/2015091814311792443.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Akityo/TOPSEC/issues/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.2cto.com/article/201409/338712.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.huilan.com/zkhl/resource/cms/2015/09/2015091814311792443.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Akityo/TOPSEC/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T12:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM 5.0.3 y anteriores permite a usuarios con pocos privilegios subir archivos de tipos peligrosos, lo que puede resultar en la ejecución de código arbitrario dentro del contexto de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.3",
            "matchCriteriaId" : "D6874657-B9FA-43A6-A4BD-4061EC30DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-009",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T13:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc."
      }, {
        "lang" : "es",
        "value" : "La función GfxImageColorMap::getGray en el archivo GfxState.cc de Poppler 0.54.0 permite a una atacante remoto causar una denegación de servicio (buffer overflow basado en pila -stack- y caída de la aplicación mediante un documento PDF manipulado, relacionado con la pérdida de la validación del mapa de color en el archivo ImageOutputDev.cc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740347EF-5003-40B2-863C-D86A246DD21B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100774",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4042-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4042-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T14:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information."
      }, {
        "lang" : "es",
        "value" : "En Mosquitto hasta la versión 1.4.12, mosquitto.db (también conocido como archivo de persistencia) es legible por todo el mundo, lo que permite a los usuarios locales obtener información sensible de los topic's MQTT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "CDE954B3-68D0-45E7-91DE-C5D3264D4596"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse/mosquitto/issues/468",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/mosquitto/issues/468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T19:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función II_step_one del archivo layer.2 en mpglib, como se utiliza en LAME 3.99.5 y otros productos, permite a un atacante remoto causar una denegación de servicio (buffer overread y caída de la aplicación) mediante la manipulación de una archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99272",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-ii_step_one-layer2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42258/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-ii_step_one-layer2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42258/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T19:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the \"block_type == 2\" case, a similar issue to CVE-2017-11126."
      }, {
        "lang" : "es",
        "value" : "La función III_i_stereo en el archivo layer3.c en mpglib, tal como es usado en libmpgdecoder.a en LAME versión 3.99.5 y otros productos, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva de búfer y bloqueo de aplicación) por medio de un archivo de audio especialmente diseñado que se maneja inapropiadamente en el código para el caso \"block_type == 2\", un problema similar al CVE-2017-11126."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-iii_i_stereo-layer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-iii_i_stereo-layer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T19:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función III_i_stereo en el archivo layer3.c de mpglib, como se utiliza en el archivo libmpgdecoder.a en LAME 3.99.5 y otros productor, permite a un atacante remoto causar una denegación de servicio (buffer overflow basado en la pila -stack- y caída de la aplicación) u otro posible impacto sin especificar mediante la manipulación de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_i_stereo-layer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_i_stereo-layer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-25T19:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función III_dequantize_sample del archivo layer3.c en mpglib, como se utiliza en el archivo libmpgdecoder.a en LAMA 3.99.5 y otros productos, permite a un atacante remoto causar una denegación de servicio (buffer overflow basado en pila -stack- y caída de la aplicación) u otro posible impacto no especificado mediante la manipulación de una archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99270",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_dequantize_sample-layer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42259/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_dequantize_sample-layer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42259/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6662",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-26T07:29:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution. The attacker must have valid user credentials. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file with malicious entries which could allow the attacker to read and write files and execute remote code within the application, aka XML Injection. Cisco Prime Infrastructure software releases 1.1 through 3.1.6 are vulnerable. Cisco EPNM software releases 1.2, 2.0, and 2.1 are vulnerable. Cisco Bug IDs: CSCvc23894 CSCvc49561."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de usuario basada en web de Prime Infrastructure (PI) y Evolved Programmable Network Manager (EPNM) de Cisco, podría permitir a un atacante remoto identificado acceder a la información almacenada en el sistema afectado, así como a realizar ejecución de código remota. El atacante necesita tener credenciales de usuario válidas. La vulnerabilidad es debido al control inapropiado de las entradas de tipo XML External Entity (XXE) cuando se analiza un archivo XML. Un atacante podría explotar esta vulnerabilidad mediante el convencimiento del administrador de un sistema afectado para importar un archivo XML especialmente diseñado con entradas maliciosas que podrían permitir al atacante leer y escribir archivos y ejecutar código remoto dentro de la aplicación, también se conoce como Inyección XML. El software Prime Infrastructure en las versiones 1.1 hasta 3.1.6 de Cisco es vulnerable. El software de EPNM en las versiones 1.2, 2.0 y 2.1 de Cisco son vulnerables. IDs de bug de Cisco: CSCvc23894 CSCvc49561."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C057764-0A1B-41A9-A21B-F665480145AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE45F94-2372-4CDD-A1E1-A4646F8D85AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD09D59-8557-4559-B0AB-71ECDEC77150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E49859E-08F7-485D-8EA0-F1B6024B2413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A9DA98-C2E5-4CCB-B31B-3E55A0C98FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2345C38D-1BA0-4A72-AC3E-8BA80FCEF7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0\\(4.0.45d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "408D3C56-EB92-4013-860B-C60AF0D03D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E28AD8-1C7F-4003-B27C-1F87B988FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA72A91C-0E65-420A-9DBE-3E0853EDB7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.2.0.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B257E2F8-30EB-4BCC-8ACF-35DF73107AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B48C1E6-7C18-4C6B-B402-9C0E1A931C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A7FCA-1DEA-45B2-9C69-CCDCC848D9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78D776C-AA8C-471D-A0C0-02428FA07A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3206E7-DC91-4861-AD32-46DA82509D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.4.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1704AC8E-BD7E-4882-8BB3-45B9E2AE0F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACB00E7-41E3-4221-8400-A279A75FD355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853315C7-01A7-4E83-9CBB-D45F6B5C4664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB157A80-3A03-4B8D-9B20-C456A953CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7678B118-E00C-4B1E-8B40-D3233DE3615C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56394A07-6D74-4588-8C05-DE04959F7FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7830BF63-55ED-4D8B-B380-1E78E338EA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BCDE33-49E9-4B46-AE31-563F3B6434F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F3C5A5-6C84-408D-B59A-265F8775C943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F4F1D6-82DA-4675-B734-D9C5371E6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(0.128\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9CC0D0-08A5-45A0-BF1C-2D3E32D49B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(4.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7500DF7B-FD3C-49B3-81C7-55E78B83A1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(5.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A66318-C59B-4D2C-B63E-5B1E3A61E63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD9A93C-FE79-4323-BBF1-F9B2CD559570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "146E4ECF-B903-488C-8644-932FC57F072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B3932F-457E-4620-AC03-70D5729757E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99194",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038750",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6669",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-26T07:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitation of these vulnerabilities could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Player is an application that is used to play back WebEx meeting recordings that have been recorded on the computer of an online meeting attendee. The player can be automatically installed when the user accesses a recording file that is hosted on a WebEx server. The following client builds are affected by this vulnerability: Cisco WebEx Business Suite (WBS29) client builds prior to T29.13.130, Cisco WebEx Business Suite (WBS30) client builds prior to T30.17, Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242."
      }, {
        "lang" : "es",
        "value" : "Se presentan múltiples vulnerabilidades de desbordamiento de búfer en el producto WebEx Network Recording Player de Cisco para archivos  Advanced Recording Format (ARF). Un atacante podría explotar estas vulnerabilidades dotando a un usuario con un archivo ARF malicioso por medio de un correo electrónico o URL y convenciendo al usuario para activar el archivo. La explotación de estas vulnerabilidades podría causar que un jugador afectado se bloquee y, en algunos casos, podría permitir la ejecución de código arbitraria en el sistema de un usuario destino. El producto Cisco WebEx Network Recording Player es una aplicación que se utiliza para reproducir las grabaciones de reunión de WebEx que se han grabado en el ordenador de un asistente a la reunión en línea. El reproductor puede ser instalado automáticamente cuando el usuario accede a un archivo de grabación hosted en un servidor WebEx. Las siguientes compilaciones cliente se ven afectadas por esta vulnerabilidad: Las compilaciones cliente de Cisco WebEx Business Suite (WBS29) anterior a versión T29.13.130, las compilaciones cliente de Cisco WebEx Business Suite (WBS30) anterior a versión T30.17, Cisco WebEx Business Suite (WBS31) compilaciones cliente anterior a versión T31.10. IDs de bug de Cisco: CSCvc47758 CSCvc51227 CSCvc51242."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_advanced_recording_format_player:29.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F337FE5-A10C-40EB-B719-29A2A32BA874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99196",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038737",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-wnrp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-wnrp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6678",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-06-26T07:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by sending crafted UDP packets to the distributed instance (DI) network addresses of both CF instances on an affected system. A successful exploit could allow the attacker to cause an unhandled error condition on the affected system, which would cause the CF instances to reload and consequently cause the entire VPC to reload, resulting in the disconnection of all subscribers and a DoS condition on the affected system. This vulnerability can be exploited via IPv4 traffic only. Cisco Bug IDs: CSCvc01665 CSCvc35565."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de procesamiento de paquetes de entrada UDP del software Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) de la versión 19.2 a la 21.0 podría permitir que un atacante remoto no autenticado haga que ambas instancias de función de control (CF) se recarguen en un sistema afectado, lo que resulta en una denegación de servicio (DoS). La vulnerabilidad se debe a la gestión insuficiente por parte del software afectado de datos proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad enviando paquetes UDP manipulados a las direcciones de red de la instancia distribuida (DI) de ambas instancias CF en un sistema afectado. Un exploit con éxito podría permitir que el atacante provoque una condición de error no gestionada en el sistema afectado, lo que provocaría que las instancias CF se recarguen y hagan que el VPC completo se recargue. Esto resulta en la desconexión de todos los suscriptores y una condición de denegación de servicio (DoS) en el sistema afectado. Esta vulnerabilidad solo puede ser explotada mediante tráfico IPv4. Cisco Bug IDs: CSCvc01665 CSCvc35565."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v19.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DE3913-DE6C-48A2-BB24-6AF617501DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v19.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE29AF-11C8-495F-86C2-B19B14FD4D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v20.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3CA29A-DA96-4C48-8140-A73C5857DBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v20.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E2AF37-4985-433F-80BE-7060E921A3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v20.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DC29E7-BEE9-4CAA-892C-77FD39A10263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core:v21.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36453D39-614F-4086-8977-A4466BBB6B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99195",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-vpc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-vpc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T07:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated."
      }, {
        "lang" : "es",
        "value" : "ntopng en versiones anteriores a la 3.0 permite Cross-Site Scripting (XSS) debido a que los parámetros GET y POST se validan de forma incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntop:ntopng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "553EDC87-EF7A-4FD1-9CA0-447B22340CC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T07:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ntopng before 3.0 allows HTTP Response Splitting."
      }, {
        "lang" : "es",
        "value" : "ntopng en versiones anteriores a la 3.0 permite la separación de respuesta HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntop:ntopng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "553EDC87-EF7A-4FD1-9CA0-447B22340CC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T07:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces."
      }, {
        "lang" : "es",
        "value" : "El httpd ejecutable en el router TP-Link WR841N V8, en versiones anteriores a la TL-WR841N(UN)_V8_170210, contiene un fallo de diseño en el uso de DES para el cifrado en bloque. Esto resultó en un control de acceso incorrecto, lo que permitía que atacantes obtuviesen acceso de lectura-escritura a las opciones del sistema mediante el servicio de configuración del router protegido tddp mediante las interfaces LAN y Ath0 (Wi-Fi)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wr841n_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "tl-wr841n_v8_140724",
            "matchCriteriaId" : "27E9EF63-0C67-4BD3-8453-40CC03A662A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wr841n_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19358DDB-F638-48C6-A68C-7476804C14DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T07:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file."
      }, {
        "lang" : "es",
        "value" : "Revelación de contraseña en Cognito Software Moneyworks 8.0.3 y anteriores permite a atacantes conseguir acceso de administrador a todos los datos, porque el loguer verboso imprime la contraseña de administrador a un archivo leíble."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cognito:moneyworks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.3",
            "matchCriteriaId" : "56FBD2C3-7AF8-4F50-8468-8EA7A01BD646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cognito.co.nz/mwcommunity/viewtopic.php?f=1&t=3542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/ari/e0dd74c12d84f102e3bcb365118e8c30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://cognito.co.nz/mwcommunity/viewtopic.php?f=1&t=3542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/ari/e0dd74c12d84f102e3bcb365118e8c30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T07:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En Irzip 0.631, un buffer overflow basado en la pila -stack- fue encontrado en la función get_fileinfo del archivo Irzip.c:979, el cual permite a una atacante causar una denegación de servicio mediante la manipulación de un archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T07:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En Irzip 0.631, un buffer overflow basado en la pila -stack- fue encontrado en la función get_fileinfo del archivo Irzip.c:1074, el cual permite a una atacante causar una denegación de servicio mediante la manipulación de un archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:long_range_zip_project:long_range_zip:0.631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808BE16-400E-4C1B-A88C-7C03BD427F5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in_24.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/75",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckolivas/lrzip/issues/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T12:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.8, hay un buffer overflow basado en el heap en la función t2p_write_pfd en el archivo tools/tiff2pdf.c. Este buffer overflow podría resultar en diferentes daños. Por ejemplo, un documento TIFF modificado puede llevar a una lectura fuera de los limites en TIFCleanup, una liberación invalidad en TIFFClose o t2p_free, una corrupción de memoria en la función t2p_readwrite_pdf_image, o a una doble liberación en t2p_free. Dadas esta tres posibilidades, es posible que se pueda causar la ejecución de un código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.8",
            "matchCriteriaId" : "2647FC88-8A14-4B90-87A4-6FDCD086C670"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T12:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.8, hay una fuga de memoria en el archivo tif_jbig.c. Un archivo manipulado puede llevar a una fuga de memoria resultante en un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2706",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99300",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42300/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42300/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T12:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.8, hay una fallo en la asignación de memoria en el archivo tif_jbig.c. Un documento TIFF manipulado puede resultar en la aborción que lleva a un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.8",
            "matchCriteriaId" : "2647FC88-8A14-4B90-87A4-6FDCD086C670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99304",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T13:29:00.207",
      "lastModified" : "2023-11-07T02:49:54.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7855.  Reason: This candidate is a reservation duplicate of CVE-2017-7855.  Notes: All CVE users should reference CVE-2017-7855 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T13:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS."
      }, {
        "lang" : "es",
        "value" : "TikiFilter.php en Tiki Wiki CMS Groupware de las versiones 12.x hasta las 16.x no valida correctamente los parámetros imgsize o lang para evitar Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A6F598-D08E-4678-BDC8-ED54AC8CFD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322FA36F-E1E4-4502-87E0-996109A62B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D47BD31-97FC-4852-88D1-8658AB4C42A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE735FE-550A-4B8D-A5D1-7D75B03754E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEC2B4E-E288-4D5E-983F-6FD52F84635F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A45E65C-6162-4640-9B6E-F684086C88BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55AAF44-F281-4947-B077-ADDC11728036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F231E7-D1D8-4BD7-99F8-2289A88E7A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A092086B-1CD1-422E-9A0F-87D2D04037A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.9:*:lts:*:*:*:*:*",
            "matchCriteriaId" : "EA5ED475-1724-47C1-8827-1AC36BB98660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B721A45-35FD-4F67-A60C-7F9FAA3EBA39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BFF3E8-7D7E-439B-B174-D682A5AC0CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11FD38C-0344-45A4-8A26-5E95B26D006E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1152747A-9219-41B4-8F46-1664D51B2D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF977162-9267-4D3F-9B41-E5F11FC478CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDC15BB-00E6-4540-8406-F0AA9C5E9178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC4E1B6-E1E9-41D6-98B0-F2976D408D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88EB9F2-F9C5-4BB7-9C29-74049BB7C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81ABC2-AF3F-4E01-8E80-F1BEB21C807B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D178BB1C-BFB8-4486-BD09-22063962634B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE0E547-2EF3-4FD8-BBC3-1EE0CFE505E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45A2D67-4C6E-475F-8F03-00E31E2DCA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FAA7AE-B0A7-4D61-AF86-0A09A3A20152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/tikiwiki/code/62386",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tikiwiki/code/62386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T13:29:00.287",
      "lastModified" : "2023-11-07T02:50:47.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-9741.  Reason: This candidate is a reservation duplicate of CVE-2017-9741.  Notes: All CVE users should reference CVE-2017-9741 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7496",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-26T14:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories."
      }, {
        "lang" : "es",
        "value" : "fedora-arm-installer hasta e incluyendo la versión 1.99.16 es vulnerable a un escalado local de privilegios debido a la falta de comprobación de la condición de error de la operación de montaje en directorios temporales creados de forma no segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:arm_installer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.99.16",
            "matchCriteriaId" : "A767BACA-5500-4CEE-A38A-1697739761E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pagure.io/arm-image-installer/pull-request/10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pagure.io/arm-image-installer/pull-request/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T14:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad buffer overflow en la pila -stack- ha sido descubierta en Microsoft Skype en su versiones 7.2, 7.35, y 7.36, anteriores a 7.37, que involucra la mala gestión del contenido del portapapeles remoto RDP dentro de la caja del mensaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD94182-4F64-4C3D-8606-B5053FF159BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype:7.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9406A7A-F863-4C2D-8EF7-BF6C2916C24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype:7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5492C5B-501E-4A60-B55F-07AAD527175E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99281",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2071",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2084",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T20:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02."
      }, {
        "lang" : "es",
        "value" : "La función grub_memmove en el archivo shlr/grub/kern/misc.c de radare2 en su versión 1.5.0 permite a un atacante remoto causar una denegación de servicio (buffer underflow a la pila -stack- y caída de la aplicación) o un posible impacto no especificado mediante la manipulación del archivo binario, posiblemente relacionado al buffer underflow en el archivo fs/ext2.c del GNU GRUB en su versión 2.02."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6336FC-AB50-4F45-B01E-2BC3BA758117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99305",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7683",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6324",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-06-26T21:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application."
      }, {
        "lang" : "es",
        "value" : "El producto Symantec Messaging Gateway, cuando procesa un archivo adjunto de correo electrónico específico, puede permitir que un archivo de Word malformado o corrupto con una macro potencialmente maliciosa a pesar de que el administrador tiene habilitada la funcionalidad “disarm”. Esto constituye un “bypass” de la funcionalidad disarm residente en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.6.2",
            "matchCriteriaId" : "9BFB3393-1DC5-47DE-B7F5-4515337B2A34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98889",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038785",
        "source" : "secure@symantec.com"
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6325",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-06-26T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application."
      }, {
        "lang" : "es",
        "value" : "El producto Symantec Messaging Gateway, puede detectar una vulnerabilidad de inclusión de archivos, que es un tipo de vulnerabilidad que comúnmente afecta a las aplicaciones web que dependen de un tiempo de ejecución de scripting. Este problema es causado cuando una aplicación genera una ruta (path) de acceso al código ejecutable mediante una variable controlada por el atacante de manera que le permite al mismo controlar qué el archivo se ejecute en un tiempo de ejecución. Esta vulnerabilidad de inclusión de archivos subvierte como un código de carga de aplicación para su ejecución. La explotación con éxito de una vulnerabilidad de inclusión de archivos resulta en la ejecución de código remota en el servidor web que ejecuta la aplicación web afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.6.2",
            "matchCriteriaId" : "9BFB3393-1DC5-47DE-B7F5-4515337B2A34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98890",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038785",
        "source" : "secure@symantec.com"
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6326",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-06-26T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process."
      }, {
        "lang" : "es",
        "value" : "El producto Symantec Messaging Gateway, puede detectar un problema de ejecución de código remota, que describe una situación en la que un individuo puede obtener la capacidad de ejecutar comandos remotamente en un equipo destino o en un proceso destino."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.6.3",
            "matchCriteriaId" : "E22096C2-1F48-4646-A257-347857B688B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98893",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038785",
        "source" : "secure@symantec.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42251/",
        "source" : "secure@symantec.com"
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42251/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T23:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty field that should have contained a hostname or IP address."
      }, {
        "lang" : "es",
        "value" : "La función NetworkInterface::getHost en NetworkInterface.cpp en ntopng en versiones anteriores a la 3.0 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un campo vacío que debería haber contenido un nombre de host o una dirección IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntop:ntopng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "553EDC87-EF7A-4FD1-9CA0-447B22340CC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/commit/01f47e04fd7c8d54399c9e465f823f0017069f8f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ntop/ntopng/commit/01f47e04fd7c8d54399c9e465f823f0017069f8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T23:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Hay una liberación invalida dentro de Image::printIFDStructure que lleva a un fallo de segmentación en Exiv2 en su versión 0.26. Una entrada manipulada llevará a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T23:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program."
      }, {
        "lang" : "es",
        "value" : "La función getvalue en el archivo teckhex.c en la librería Binary File Descriptor (BFD), distribuida en GNU Binutils 2.28, permite a un atacante remoto causar una denegación de servicio (buffer overread en la pila -stack- y caída de la aplicación) mediante la manipulación de archivo tekhex, como se demuestra por la mala gestión dentro del programa nm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21670",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-26T23:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program."
      }, {
        "lang" : "es",
        "value" : "La función get_build_id en el archivo opncls.c en la librería Binary File Descriptor (BFD) (también conocida como libbfd) distribuida en GNU binutils 2.28, permite a un atacante remoto causar una denegación de servicio (buffer overread sobre la pila dinámica -heap- y caída de la aplicación) mediante la manipulación del archivo en el que cierto tamaño del campo en el que la longitud es mas largo que la que le corresponde, como se demuestras en la mala gestión dentro del programa objdump."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC528B1-A659-4246-BE7F-02681D22CCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21665",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stsd en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite que atacantes remotos provoquen una denegación de servicio (lectura de memoria inválida y cierre inesperado de la aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stsc en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite que atacantes remotos provoquen una denegación de servicio (error de asignación de memoria y cierre inesperado de la aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stco en common/mp4ff/mp4atom.c en libasn1fix.a en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (error de asignación de memoria) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_mdhd en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite que atacantes remotos provoquen una denegación de servicio (lectura de memoria inválida y cierre inesperado de la aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_parse_tag en common/mp4ff/mp4meta.c en libasn1fix.a en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (bucle infinito y consumo de CPU) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stts en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite que atacantes remotos provoquen una denegación de servicio (lectura de memoria inválida y cierre inesperado de la aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stsd en common/mp4ff/mp4atom.c en libasn1fix.a en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stts en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stsc en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_stco en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T12:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función mp4ff_read_ctts en common/mp4ff/mp4atom.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 permite a atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) utilizando un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2E8DA4-23EC-4E4B-BEEB-DAC70871822B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7508",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-27T13:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a 2.4.3 y anterior a 2.3.17 de OpenVPN, son vulnerables a la denegación de servicio remota cuando se reciben paquetes IPv6 malformados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.16",
            "matchCriteriaId" : "216840B9-FCDB-4921-BE12-2A1FA42F8FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5C67A-34A4-4C7E-BCA9-AF3E5FC70AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "A857CA88-60B0-4D34-87B6-770B67981501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42297EE-B347-4BD8-A657-BDF0AA010C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A56E8-09C8-4DB2-9244-9E5E2BEC1821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "41ACD637-EF6B-40E4-BDE6-0EE7D6AEBAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4150AD-3F46-487D-BCF8-79D0AE2A092D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7663E-3EB5-44F4-B7DE-294A549A12BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81434C3E-F992-4F29-9092-6823989B6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7520",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-27T13:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a 2.4.3 y anterior a 2.3.17 de OpenVPN, son vulnerables a la denegación de servicio y/o posiblemente a la pérdida de memoria confidencial activada por un atacante de tipo man-in-the-middle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.16",
            "matchCriteriaId" : "216840B9-FCDB-4921-BE12-2A1FA42F8FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5C67A-34A4-4C7E-BCA9-AF3E5FC70AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "A857CA88-60B0-4D34-87B6-770B67981501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42297EE-B347-4BD8-A657-BDF0AA010C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A56E8-09C8-4DB2-9244-9E5E2BEC1821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "41ACD637-EF6B-40E4-BDE6-0EE7D6AEBAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4150AD-3F46-487D-BCF8-79D0AE2A092D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7663E-3EB5-44F4-B7DE-294A549A12BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81434C3E-F992-4F29-9092-6823989B6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7521",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-27T13:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension()."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenVPN anteriores a 2.4.3 y 2.3.17, son vulnerables a una denegación de servicio remota debido a un agotamiento de memoria causado por pérdida de memoria y un problema de doble liberación (Double Free) en la función extract_x509_extension()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        }, {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.16",
            "matchCriteriaId" : "216840B9-FCDB-4921-BE12-2A1FA42F8FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5C67A-34A4-4C7E-BCA9-AF3E5FC70AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "A857CA88-60B0-4D34-87B6-770B67981501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42297EE-B347-4BD8-A657-BDF0AA010C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A56E8-09C8-4DB2-9244-9E5E2BEC1821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "41ACD637-EF6B-40E4-BDE6-0EE7D6AEBAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4150AD-3F46-487D-BCF8-79D0AE2A092D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7663E-3EB5-44F4-B7DE-294A549A12BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81434C3E-F992-4F29-9092-6823989B6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7522",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-27T13:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenVPN anteriores a 2.4.3 y 2.3.17, son vulnerables a una denegación de servicio por parte de un atacante remoto autenticado mediante el envío de un certificado con un carácter NULL insertado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.16",
            "matchCriteriaId" : "216840B9-FCDB-4921-BE12-2A1FA42F8FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5C67A-34A4-4C7E-BCA9-AF3E5FC70AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "A857CA88-60B0-4D34-87B6-770B67981501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B42297EE-B347-4BD8-A657-BDF0AA010C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A56E8-09C8-4DB2-9244-9E5E2BEC1821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "41ACD637-EF6B-40E4-BDE6-0EE7D6AEBAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4150AD-3F46-487D-BCF8-79D0AE2A092D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F7663E-3EB5-44F4-B7DE-294A549A12BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81434C3E-F992-4F29-9092-6823989B6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7524",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-06-27T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 1.1.1 de tpm2-tools son vulnerables a un filtrado de contraseña debido a la transmisión de contraseñas en texto plano del cliente al servidor al generar HMAC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpm2-tools_project:tpm2.0-tools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "468D7349-13D2-4C72-8E69-65052C4145E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/01org/tpm2.0-tools/commit/c5d72beaab1cbbbe68271f4bc4b6670d69985157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/01org/tpm2.0-tools/commit/c5d72beaab1cbbbe68271f4bc4b6670d69985157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2841",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-27T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the \"msmtprc\" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.37. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte datos arbitrarios en el archivo de configuración \"msmtprc\", lo que resulta en una ejecución de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0343",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2842",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-27T15:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the \"msmtprc\" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web de la cámara HD de interior Foscam C1 que ejecuta el firmware de la aplicación 2.52.2.37, una solicitud HTTP especialmente diseñada puede permitir a un usuario inyectar datos arbitrarios en el archivo de configuración \"msmtprc\", lo que da lugar a la ejecución de comandos. Un atacante puede simplemente enviar una solicitud HTTP al dispositivo para activar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0344",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2843",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-27T15:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the \"msmtprc\" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web de la cámara HD de interior Foscam C1 que ejecuta el firmware de la aplicación 2.52.2.37, una solicitud HTTP especialmente diseñada puede permitir a un usuario inyectar datos arbitrarios en el archivo de configuración \"msmtprc\", lo que da lugar a la ejecución de comandos. Un atacante puede simplemente enviar una solicitud HTTP al dispositivo para activar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0345",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1105",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-27T16:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows 9.2, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) es vulnerable a un desbordamiento de búfer que podría permitir que un usuario local sobrescriba archivos DB2 o provoque una denegación de servicio (DoS). IBM X-Force ID: 120668."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDE6939-06D6-4DD1-BE95-E0724B72AC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_driver_for_odbc_and_cli:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710BA2FD-B8AD-4D5A-8626-5C5AB64F2989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_driver_package:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAA3FCC-ED16-4FAC-ACFB-AD9C87E98FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_runtime_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021311A-FAFB-4AE7-8EEC-4D4E1C29F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "3D9E7D2A-42B9-4D07-A107-BBD839E59858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "FD27164C-7554-46E1-B755-27C74D2EC3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F199F7B4-F273-4D45-AE08-7B5DAE6E0794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ACEB3F4A-6411-4456-9B89-A43562189BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "1749B7DC-08BB-474B-BA5A-52602459C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "2ECC11D3-7D77-4823-8B34-DD76E131D74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "E1D36687-32AF-43E2-97D9-FDF602F89318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DD80ADF4-35D3-4534-AACD-C00D80870723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8D274B00-C986-4A5D-94B2-79F4A613D951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "67A935CA-7AF6-4DA9-958E-DF4BC8E2B3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "A6B1A4DC-7062-4349-8D1A-3DE4B0E68FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "B3681F43-F23B-413D-B871-A40821F4988B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AE645126-ECD0-40FB-B2BA-5C9EF33EBE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*",
            "matchCriteriaId" : "9AFEA656-426C-4F18-9737-8985531C7A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "09B0333F-0E27-40B3-A0DC-618BEA97CBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "56AA8839-8926-40F1-BB9A-AB648DE7F272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "6ABE0FCB-8E32-4AB6-A8D8-79159FCDD889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5D92ADEC-6ED8-4B07-AB75-204AED0BF896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A2E6CBD8-7DD7-44F7-8F5D-D79074561AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "5273074C-9C2F-458C-9333-BD16B59008CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "3F75FF9A-AAAE-4EFA-B698-230B5CCD0940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4D38B30C-4CC3-43C9-9360-0A79C36A222F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "3599AC98-ACD3-4A09-9764-080A6B8F56A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "44010A01-4E33-4A6D-83DE-6235AEEE90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F40068BF-82CC-43D5-99BC-1228337995FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "97626150-FED1-49F7-9CA5-4A5C61A5544C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "C22B49A3-FE14-4677-A141-935AE852E459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "278FEDCA-CDE6-4EB6-BCD8-B4B0507DC9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "B0106414-9BB7-4189-B30E-E5D2B92DCD12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "38EB6F60-D89E-4594-A323-3F9A7751E2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6A60F310-FB14-4B46-8ECE-310B6690FD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "E80151B7-9F69-428F-9689-78FF8F24BF61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003877",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99264",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038773",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120668",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1234",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-27T16:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913."
      }, {
        "lang" : "es",
        "value" : "IBM Qradar 7.2 y 7.3 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código Javascript aleatorio en la interfaz Web lo que alteraría la funcionalidad planeada potencialmente llevando a la revelación de credenciales dentro de una sesión confiable. IBM X-Force ID: 123913."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C137959-2279-4459-8A10-43AFE09E2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D53329-E729-43C1-8C67-EFA4C3F7BFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4EDCA-DF37-4366-B944-F342FA55EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CA942D-70AD-4E0D-A28E-443FB7140A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8844C7-52E1-45A0-AC51-B6F6F14DE38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5382FD46-85CB-460F-8AA5-163EA26F34B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "73151221-C102-4425-9316-1EE4CAAB6531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2356A4E6-561B-40CA-8348-B30D581B1E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74509F3F-840E-48B8-88B1-EA4FFB90ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7BD528-628F-4CA9-9FE8-8A79BDC97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "26118C2B-78CC-4038-9DEA-7A9417029790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "36CA1C3A-63CA-4FBD-9E84-7E83248265EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004948",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99265",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123913",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1297",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-27T16:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, Unix y Windows 9.2, 10.1, 10.5 y 11.1 (incluido DB2 Connect Server) es vulnerable a un buffer overflow basado en pila --stack-- causado por una inapropiada verificación de límites lo que podría permitir a un atacante local ejecutar código aleatorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDE6939-06D6-4DD1-BE95-E0724B72AC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_driver_for_odbc_and_cli:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710BA2FD-B8AD-4D5A-8626-5C5AB64F2989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_driver_package:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAA3FCC-ED16-4FAC-ACFB-AD9C87E98FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:data_server_runtime_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021311A-FAFB-4AE7-8EEC-4D4E1C29F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "3D9E7D2A-42B9-4D07-A107-BBD839E59858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "FD27164C-7554-46E1-B755-27C74D2EC3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F199F7B4-F273-4D45-AE08-7B5DAE6E0794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ACEB3F4A-6411-4456-9B89-A43562189BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "1749B7DC-08BB-474B-BA5A-52602459C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "2ECC11D3-7D77-4823-8B34-DD76E131D74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "E1D36687-32AF-43E2-97D9-FDF602F89318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DD80ADF4-35D3-4534-AACD-C00D80870723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8D274B00-C986-4A5D-94B2-79F4A613D951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "67A935CA-7AF6-4DA9-958E-DF4BC8E2B3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "A6B1A4DC-7062-4349-8D1A-3DE4B0E68FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "B3681F43-F23B-413D-B871-A40821F4988B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AE645126-ECD0-40FB-B2BA-5C9EF33EBE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*",
            "matchCriteriaId" : "9AFEA656-426C-4F18-9737-8985531C7A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "09B0333F-0E27-40B3-A0DC-618BEA97CBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:advanced_enterprise:*:*:*",
            "matchCriteriaId" : "56AA8839-8926-40F1-BB9A-AB648DE7F272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:advanced_workgroup:*:*:*",
            "matchCriteriaId" : "6ABE0FCB-8E32-4AB6-A8D8-79159FCDD889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5D92ADEC-6ED8-4B07-AB75-204AED0BF896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A2E6CBD8-7DD7-44F7-8F5D-D79074561AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:workgroup:*:*:*",
            "matchCriteriaId" : "5273074C-9C2F-458C-9333-BD16B59008CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "3F75FF9A-AAAE-4EFA-B698-230B5CCD0940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4D38B30C-4CC3-43C9-9360-0A79C36A222F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "3599AC98-ACD3-4A09-9764-080A6B8F56A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "44010A01-4E33-4A6D-83DE-6235AEEE90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F40068BF-82CC-43D5-99BC-1228337995FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "97626150-FED1-49F7-9CA5-4A5C61A5544C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "C22B49A3-FE14-4677-A141-935AE852E459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "278FEDCA-CDE6-4EB6-BCD8-B4B0507DC9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "B0106414-9BB7-4189-B30E-E5D2B92DCD12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:application_server:*:*:*",
            "matchCriteriaId" : "38EB6F60-D89E-4594-A323-3F9A7751E2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6A60F310-FB14-4B46-8ECE-310B6690FD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:unlimited:*:*:*",
            "matchCriteriaId" : "E80151B7-9F69-428F-9689-78FF8F24BF61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004878",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99271",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038772",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125159",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42260/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42260/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1322",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-27T16:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect 5.0.6.0 es vulnerable a un ataque XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente sensible o consumir recursos de la memoria. IBM X-Force ID: 125918."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43F8D4-A60E-4C56-B868-8616958A0B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A4F3B4-A3D8-4281-BBB1-8B95297657F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049722A-338F-49FA-A9B2-2A432F04D2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12F86C-FBDF-4231-B4EA-4279FC730088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBC9AEC-CD8B-4F2A-99A7-469B93107B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB03CE4-C3EE-41E9-9321-9AB9829FDB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B9AC88-C53D-4810-B21E-7A836524859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61864755-C7B6-416C-9D3E-334AB3D94825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB9030-50A4-4B9B-8457-9DB9E13B3211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003621",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99258",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125918",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1328",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-27T16:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID: 126230."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect 5.0.0.0 - 5.0.6.0 podría permitir que un atacante remoto omita las restricciones de seguridad de la API, provocado por la gestión incorrecta de la política de seguridad. Al manipular una petición adecuada, un atacante podría explotar esta vulnerabilidad para omitir la seguridad y emplear la API vulnerable. IBM X-Force ID: 126230."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43F8D4-A60E-4C56-B868-8616958A0B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A4F3B4-A3D8-4281-BBB1-8B95297657F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049722A-338F-49FA-A9B2-2A432F04D2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12F86C-FBDF-4231-B4EA-4279FC730088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBC9AEC-CD8B-4F2A-99A7-469B93107B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB03CE4-C3EE-41E9-9321-9AB9829FDB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B9AC88-C53D-4810-B21E-7A836524859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61864755-C7B6-416C-9D3E-334AB3D94825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB9030-50A4-4B9B-8457-9DB9E13B3211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003867",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99267",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126230",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T16:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the &#5610; Unicode character followed by the &#3903; Unicode character."
      }, {
        "lang" : "es",
        "value" : "El cliente TeamSpeak en su versión 3.0.19 permite a un atacante remoto causar una denegación de servicio (caída de la aplicación) mediante el caracter Unicode ? seguido del carácter Unicode ?."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamspeak:teamspeak_client:3.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9511C80-66D4-4CFE-9905-1B4184E6CBBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99308",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pastebin.com/4Ngstncy",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=8BrQCUOgQL0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pastebin.com/4Ngstncy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=8BrQCUOgQL0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T17:29:00.177",
      "lastModified" : "2025-10-22T00:16:13.163",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"<?php \" substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI."
      }, {
        "lang" : "es",
        "value" : "Util/PHP/eval-stdin.php en PHPUnit, en versiones anteriores a la 4.8.28 y en versiones 5.x anteriores a la 5.6.3, permite que atacantes remotos ejecuten código PHP arbitrario mediante datos HTTP POST que comienzan por una subcadena \""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-02-15",
      "cisaActionDue" : "2022-08-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "PHPUnit Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.27",
            "matchCriteriaId" : "041F2C78-1910-4BAF-A01E-995CF0AC6C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.6.3",
            "matchCriteriaId" : "8DD2DD59-8DEF-4713-A8EA-1EFE10282C6E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.5.0",
            "matchCriteriaId" : "C88D46AF-459D-4917-9403-0F63FEC83512"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101798",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/pull/1956",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-15",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/pull/1956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9841",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T18:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, because (upon instantiation) it creates an RMI server that listens on a TCP port and deserializes objects sent by TCP clients."
      }, {
        "lang" : "es",
        "value" : "Es posible la ejecución remota de código en Code42 CrashPlan 5.4.x mediante la clase de Java org.apache.commons.ssl.rmi.DateRMI debido a que (al instanciar) crea un servidor RMI que escucha en un puerto TCP y deserializa objetos enviados por los clientes TCP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code42:crashplan:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B44D5E-5D74-41BB-A500-D9D104572B9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.radicallyopensecurity.com/CVE-2017-9830.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.radicallyopensecurity.com/CVE-2017-9830.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2491",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-06-27T20:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de la memoria previamente liberada en el método String.replace de JavaScriptCore en Apple Safari en iOS anterior a la versión 10.3, permite a atacantes remotos ejecutar código arbitrario por medio de una página web especialmente diseñada, o un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "A705829E-76A8-4AA8-8D82-037E4E8A52FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98316",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-321",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41964/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-27T20:29:01.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, (2) remove an administrator user via a crafted GET request to <vimbadmin directory>/application/controllers/DomainController.php, (3) change an administrator password via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, (4) add a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, (5) delete a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, (6) archive a mailbox address via a crafted GET request to <vimbadmin directory>/application/controllers/ArchiveController.php, (7) add an alias address via a crafted POST request to <vimbadmin directory>/application/controllers/AliasController.php, or (8) remove an alias address via a crafted GET request to <vimbadmin directory>/application/controllers/AliasController.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en las funciones addAction y purgeAction en ViMbAdmin versión 3.0.15, permiten a los atacantes remotos secuestrar la identificación de administradores registrados para (1) agregar un usuario administrador por medio de una petición POST especialmente diseñada en /application/controllers/DomainController.php, (2) eliminar un usuario administrador por medio de una petición GET especialmente diseñada en /application/controllers/DomainController.php, (3) cambiar un administrador contraseña por medio de una petición POST especialmente diseñada en /application/controllers/DomainController.php, (4) añadir un buzón por medio de una petición POST especialmente diseñada en /application/controllers/MailboxController.php, (5) eliminar un Buzón de correo por medio de una petición POST especialmente diseñada en /application/controllers/MailboxController.php, (6) archivar una dirección de buzón por medio de una petición GET especialment diseñada en /application/controllers/ArchiveController.php, (7) añadir una dirección de alias por medio de una petición POST especialmente diseñada en /application/controllers/AliasController.php, o (8) eliminar una dirección de alias por medio de una petición GET especialmente diseñada en /application/controllers/AliasController.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vimbadmin:vimbadmin:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E264D9F-A7D6-4DCA-AE55-AFB9CD71B3EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/03/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41967/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/05/03/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41967/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it."
      }, {
        "lang" : "es",
        "value" : "En systemd hasta la versión 233, ciertos tamaños pasados a la función dns_packet_new en systemd-resolved pueden causar que asigne un búfer que es muy pequeño. Un servidor DNS malicioso puede aprovechar esto por medio de una respuesta con una carga útil TCP especialmente creada para engañar a systemd-resolved en la asignación de un búfer que es muy pequeño, y posteriormente escribir datos arbitrarios más allá del final de la misma."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "223",
            "versionEndIncluding" : "233",
            "matchCriteriaId" : "838D37A0-18AB-4999-B577-3F38064D99A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/06/27/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99302",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038806",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1695546",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/06/27/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1695546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a \"double fetch\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "La función snd_msnd_interrupt en el archivo sound/isa/msnd/msnd_pinnacle.c en el kernel de Linux hasta la versión 4.11.7 permite a los usuarios locales causar una denegación de servicio (acceso por encima del limite) u otro posible impacto no especificado mediante el cambio del valor del puntero a la cabeza de la cola de mensajes entre la lectura de dicho valor de los dos kernels, también conocido como vulnerabilidad \"double fetch\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.18.71",
            "matchCriteriaId" : "739FF7EE-E610-49E0-9108-E445CFC0BAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.45",
            "matchCriteriaId" : "AEF05B4A-F2FD-4E86-9798-F55AAD1C1C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.88",
            "matchCriteriaId" : "7B9D9F07-3E93-4948-8810-AA3D7F5ACE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.50",
            "matchCriteriaId" : "311D0EBE-84B3-4494-97BA-BBF5ADEC1D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.13",
            "matchCriteriaId" : "75C09DA2-9A56-432C-91E8-779AE07084A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99314",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=196131",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=196131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a \"double fetch\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "La función snd_msndmidi_input_read en el archivo sound/isa/msnd/msnd_midi.c en el kernel de Linux hasta la versión 4.11.7 permite a los usuarios locales causar una denegación de servicio (acceso por encima del limite) u otro posible impacto no especificado mediante el cambio del valor del puntero a la cabeza de la cola de mensajes entre la lectura de dicho valor de los dos kernels, también conocido como vulnerabilidad \"double fetch\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.18.71",
            "matchCriteriaId" : "739FF7EE-E610-49E0-9108-E445CFC0BAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.45",
            "matchCriteriaId" : "AEF05B4A-F2FD-4E86-9798-F55AAD1C1C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.88",
            "matchCriteriaId" : "7B9D9F07-3E93-4948-8810-AA3D7F5ACE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.50",
            "matchCriteriaId" : "311D0EBE-84B3-4494-97BA-BBF5ADEC1D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.13",
            "matchCriteriaId" : "75C09DA2-9A56-432C-91E8-779AE07084A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99335",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=196133",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=196133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a \"double fetch\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "La función intr en el archivo sound/oss/msnd_pinnacle.c en el kernel de Linux hasta la versión 4.11.7 permite a usuarios locales causar una denegación de servicio (acceso por encima del limite) u otro posible impacto no especificado mediante el cambio del valor del puntero a la cabeza de la cola de mensajes entre la lectura de dicho valor de los dos kernels, también conocida como vulnerabilidad \"double fetch\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.7",
            "matchCriteriaId" : "5556BED7-53AD-4C99-8470-F833F13AB73C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=196135",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=196135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Hay un desbordamiento de búfer basado en heap en la función hpel_motion en mpegvideo_motion.c en libav 12.1. Una entrada hecha a mano puede producir un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99846C93-A0F8-459D-AC79-A79CDE487505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1067",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c."
      }, {
        "lang" : "es",
        "value" : "La función readEncUInt30 del archivo util/read.c en libming 0.4.8 maneja inadecuadamente la asignación de memoria. Una entrada manipulada llevará a un ataque remoto de denegación de servicio (desreferencia de puntero NULL) en contra de parser.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:libming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92BC79-2548-4C6F-9BDD-26C12BDF68AC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libming/libming/issues/85",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack."
      }, {
        "lang" : "es",
        "value" : "El archivo util/outputtxt.c en libming 0.4.8 maneja inadecuadamente la asignación de memoria. Una entrada manipulada llevara a un ataque remoto de denegación de servicio (desreferencia de puntero NULL)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:libming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92BC79-2548-4C6F-9BDD-26C12BDF68AC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libming/libming/issues/86",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Buffer overflow basado en pila -stack- en la función color_string_to_rgba en el archivo libavcodec/xpmdec.c en Ffmpeg 3.3.x en sus versiones anteriores a la 3.3.1 permite a un atacante remoto causar una denegación de servicio (caída de la aplicación) u otro posible impacto no especificado mediante la manipulación del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "810187F9-9AC0-4D97-9298-DEFC64008A6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99313",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1466",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/cb243972b121b1ae6b60a78ff55a0506c69f3879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/cb243972b121b1ae6b60a78ff55a0506c69f3879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Buffer overflow en la memoria dinámica -heap- en la función xwd_decode_frame en el archivo libavcodec/xwddec.c en Ffmpeg en sus versiones anteriores a la 2.8.12, 3.0.x en sus versiones anteriores a la 3.0.8, 3.1.x en sus versiones anteriores a la 3.1.8, 3.2.x en sus versiones anteriores a la 3.2.5, y 3.3.x en sus versiones anteriores a la 3.3.1 permite a un atacante remoto causar una denegación de servicio (caída de la aplicación ) u otro posible impacto no especificado mediante la manipulación del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.11",
            "matchCriteriaId" : "B998D047-BA80-4A34-B961-4F8EEB4423F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E85AA0-559E-4EC5-AF61-100732EF0643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E86E3C4-946B-4E89-B0C1-010046D8D478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E316AE-DF67-40B7-99CE-CE30BFECC4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368CB50E-729C-4CA3-A6E4-67A277354255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FD1F85-27FB-4E8B-A2D0-529A048701C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263617D0-E1EF-49DB-B10A-1FF66D8FDFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816B3124-59AD-4209-BD11-D7B8F2898E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F33A28-B1A4-4498-BE03-C02831CC30E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A730657-04E4-4802-8336-DB067AF00C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8C6C8-4849-4475-8271-CAD3ECE761CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A336FF-56BE-4B09-827E-887FCF0A018B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FB6CF6-F80E-4570-8790-F43D2F035A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2E370-7B0E-451F-9802-D4C272C4902E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A040488F-32AA-4451-B922-45B17D2AEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7338D2F-2815-4848-B022-CD35E4620093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC513E18-4938-4424-88B3-58D57FB9A617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F765CB-B78E-42A3-BB22-D9FC515694B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DFEAF5-8003-4EDB-B2B3-9022052939C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498C4AE1-3763-4F6F-873A-AB67B86D25F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86E67CD-9D1A-4544-A0E8-2D2476CCF988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2551ED3-EC8F-4ABC-9C50-C0567CEE7CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC38E2D-3FA2-446B-B5BA-24E98BAA0EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1399",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/441026fcb13ac23aa10edc312bdacb6445a0ad06",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/441026fcb13ac23aa10edc312bdacb6445a0ad06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Buffer overflow en la memoria dinámica -heap- en la función decode_dds1 en el archivo libavcodec/dfa.c en Ffmpeg en sus versiones anteriores a la 2.8.12, 3.0.x en sus versiones anteriores a la 3.0.8, 3.1.x en sus versiones anteriores a la 3.1.8, 3.2.x en sus versiones anteriores a la 3.2.5 y 3.3.x en sus versiones anteriores a la 3.3.1 permite a un atacante remoto provocar una denegación de servicio (caída de la aplicación) o otro posible impacto no especificado mediante la manipulación del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.12",
            "matchCriteriaId" : "941B47E5-FDBB-437A-8A4D-A9788019E5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "23E6910A-C467-44FD-B9CA-3D6049AFB1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "58FFC631-648C-44BE-9EE5-CF3210E632C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "248F96A2-0FAF-4737-8011-3ACAC8115829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "F0E75E33-237A-43F9-9193-002687E3470D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4012",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99319",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1345",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/f52fbf4f3ed02a7d872d8a102006f29b4421f360",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/f52fbf4f3ed02a7d872d8a102006f29b4421f360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data."
      }, {
        "lang" : "es",
        "value" : "Ffmpeg en sus versiones anteriores a la 2.8.12, 3.0.x y 3.1.x en sus versiones anteriores a la 3.1.9, 3.2.x en sus versiones anteriores a la 3.2.6, y 3.3.x en sus versiones anteriores a la 3.3.2 no restringe adecuadamente nombre de archivos con extensiones HTTP Live Streaming y nombres Demuxer, lo que permite a un atacante remoto leer archivo aleatorios mediante la manipulación de los datos de la lista de reproducción."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.12",
            "matchCriteriaId" : "941B47E5-FDBB-437A-8A4D-A9788019E5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.1.9",
            "matchCriteriaId" : "D3930B41-D5FD-4CA5-8DCD-8B7DE6E9CD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.6",
            "matchCriteriaId" : "B42EDB69-32DF-497C-9745-8367E7DFE85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.3.2",
            "matchCriteriaId" : "733D6A4C-79F5-4DE0-A89F-A6DB8D3B7CE0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99315",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/189ff4219644532bdfa7bab28dfedaee4d6d4021",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/a5d849b149ca67ced2d271dc84db0bc95a548abb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/189ff4219644532bdfa7bab28dfedaee4d6d4021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/a5d849b149ca67ced2d271dc84db0bc95a548abb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions."
      }, {
        "lang" : "es",
        "value" : "El archivo libavcodec/webp.c en Ffmpeg en sus versiones anteriores a 2.8.12, 3.0.x en sus versiones anteriores a la 3.0.8, 3.1.x en sus versiones anteriores a la 3.1.8, 3.2.x en sus versiones anteriores a la 3.2.5, y 3.3.x en sus versiones anteriores a la 3.3.1 no asegura que pix_dmt sea puesto, lo que permite a un atacante remoto provocar una denegación de servicio (buffer overflow en la memoria dinámica -heap- y caída de la aplicación) u otro posible impacto no especificado mediante la manipulación del archivo, relacionado a las funciones vp8_decode_mb_row_no_filter y pred8x8_128_dc_8_c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.12",
            "matchCriteriaId" : "941B47E5-FDBB-437A-8A4D-A9788019E5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "23E6910A-C467-44FD-B9CA-3D6049AFB1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "58FFC631-648C-44BE-9EE5-CF3210E632C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "248F96A2-0FAF-4737-8011-3ACAC8115829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "F0E75E33-237A-43F9-9193-002687E3470D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99317",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1434",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1435",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/6b5d3fb26fb4be48e4966e4b1d97c2165538d4ef",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/6b5d3fb26fb4be48e4966e4b1d97c2165538d4ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "El archivo libavcodec/scpr.c en Ffmpeg 3.3 anterior a la 3.3.1 no valida adecuadamente la altura y anchura de los datos, lo que permite a un atacante remoto provocar una denegación de servicio (buffer overflow basado en la pila dinámica -heap- y caída de la aplicación) u otro posible impacto no especificado mediante la manipulación del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC38E2D-3FA2-446B-B5BA-24E98BAA0EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99320",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1478",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1519",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/2171dfae8c065878a2e130390eb78cf2947a5b69",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7ac5067146613997bb38442cb022d7f41321a706",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/2171dfae8c065878a2e130390eb78cf2947a5b69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7ac5067146613997bb38442cb022d7f41321a706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T06:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función cdxl_decode_frame del archivo libavcodec/cdxl.c en Ffmpeg 2.8.x en sus versiones anteriores a 2.8.12, 3.0.x en sus versiones anteriores a la 3.0.8, 3.1.x, en sus versiones anteriores a la 3.1.8, 3.2.x en sus versiones anteriores a 3.2.5, y 3.3.x en sus versiones anteriores a la 3.3.1 no excluye el formato CHUNKY el cual permite a un atacante remoto provocar una denegación de servicio (buffer overflow basado en la memoria dinámica -heap- y caída de la aplicación) u otro posible impacto no especificado mediante la manipulación del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA8F265-CE4D-46FE-9871-FDD4D6738DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3F5FAA-AD9E-4FC1-B91C-E9A561E95173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A269C0-FE0F-4178-8195-955D373D9055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A474-DA24-4510-8AAA-5DF2E85B4D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D124F06-CF7E-4549-82EC-D0EC0B73D146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0A8850-5FAB-449E-B4E9-1DF056BCF5A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24CBBE7-4BC8-4865-B4BE-13F8437B64F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC71065-BD6F-4B3F-AEB2-2C4E7C650411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9193A0-0FB7-4692-9DA1-799EF9953628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FD6747-CE4D-4A0E-8EF0-E9673E843AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0964EE9-0B85-40C8-ACFA-4E373F33762B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:2.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D7512C-F541-4933-A6F2-FB8773F5B2A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E85AA0-559E-4EC5-AF61-100732EF0643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E86E3C4-946B-4E89-B0C1-010046D8D478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E316AE-DF67-40B7-99CE-CE30BFECC4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368CB50E-729C-4CA3-A6E4-67A277354255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FD1F85-27FB-4E8B-A2D0-529A048701C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263617D0-E1EF-49DB-B10A-1FF66D8FDFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816B3124-59AD-4209-BD11-D7B8F2898E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F33A28-B1A4-4498-BE03-C02831CC30E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A730657-04E4-4802-8336-DB067AF00C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8C6C8-4849-4475-8271-CAD3ECE761CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A336FF-56BE-4B09-827E-887FCF0A018B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FB6CF6-F80E-4570-8790-F43D2F035A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2E370-7B0E-451F-9802-D4C272C4902E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A040488F-32AA-4451-B922-45B17D2AEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7338D2F-2815-4848-B022-CD35E4620093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC513E18-4938-4424-88B3-58D57FB9A617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F765CB-B78E-42A3-BB22-D9FC515694B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DFEAF5-8003-4EDB-B2B3-9022052939C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498C4AE1-3763-4F6F-873A-AB67B86D25F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86E67CD-9D1A-4544-A0E8-2D2476CCF988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2551ED3-EC8F-4ABC-9C50-C0567CEE7CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC38E2D-3FA2-446B-B5BA-24E98BAA0EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99323",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1378",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1427",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/1e42736b95065c69a7481d0cf55247024f54b660",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/e1b60aad77c27ed5d4dfc11e5e6a05a38c70489d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/1e42736b95065c69a7481d0cf55247024f54b660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/e1b60aad77c27ed5d4dfc11e5e6a05a38c70489d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-28T11:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función _dwarf_decode_s_leb128_chk del archivo dward_leb.c en libdward hasta el 28-06-2017 permite a un atacante remoto causar una denegación de servicio (fallo de segmentación) mediante la manipulación del archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1999-12-14",
            "versionEndIncluding" : "2017-06-28",
            "matchCriteriaId" : "491EF44F-D946-4569-BB66-45BE9C18E280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5241",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-06-28T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in the \"Name\" and \"Description\" fields of a Workspace, as well as the \"Description\" field of a File Details pane of a file stored in a Workspace. This issue has been resolved in version 5.1.1025."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Biscom Secure File Transfer 5.0.0.0 a 5.1.1024 son vulnerables a las secuencias cross-site scripting (XSS) persistentes posteriores a la autenticación (XSS) en los campos \"Name\" y \"Descripción\" de un área de trabajo, así como el campo \"Description\" de un Panel Detalles de archivo de un archivo almacenado en un espacio de trabajo. Este problema se resolvió en la versión 5.1.1025."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:biscom:secure_file_transfer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.1015",
            "matchCriteriaId" : "F9ECA38F-FE81-49EF-9B5C-58FBB19AE94F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99341",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cve.biscom.com/bis-sft-cv-003/",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cve.biscom.com/bis-sft-cv-003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7686",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-06-28T13:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information."
      }, {
        "lang" : "es",
        "value" : "Apache Ignite 1.0.0-RC3 a 2.0 emplea un componente de notificación de actualizaciones para informar a los usuarios sobre nuevos lanzamientos del proyecto que incluyen funcionalidades adicionales, soluciones de bugs y mejoras en el rendimiento. Para hacer eso, el componente se comunica con un servidor PHP externo (http://ignite.run) donde necesita enviar algunas propiedades del sistema como la versión de Apache Ignite o de Java. Algunas de las propiedades podrían contener información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDBC991-F8E6-4843-B506-97F35FCB62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7DCCD6-7D9E-47EA-8B6E-3B83B5B06E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D140870C-5B83-476F-86D2-3AD9D50307E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07715E5E-765D-4768-91C2-061BD12A74AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A35C7E-57F2-495C-ACA6-80C49CD38D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9E8C9A-5869-49ED-9D7E-AC80F597D3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.5.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A1BC9-235A-49F7-A25B-A5B74B954752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.5.0:final:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8C1EE6-43A8-46B0-9CCA-49F69986E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A116701-1224-448A-843F-684875AAE6B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB2256D-DC30-4735-B172-D9F39432AFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EED4033-EE23-4123-86CA-BE3D2F3EF0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50CC6384-9F23-431C-BA93-A98856BE76B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52AC79-8669-402C-AFFC-A2C555689DBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2017-7686-Apache-Ignite-Information-Disclosure-td19168.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99292",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2017-7686-Apache-Ignite-Information-Disclosure-td19168.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1106",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-28T18:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120744."
      }, {
        "lang" : "es",
        "value" : "IBM Curam Social Program Management 5.2, 6.0 y 7.0 es vulnerable a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 120744. UAA release en todas las versiones de UAA v2.x.x, 3.6.x en versiones anteriores a la v3.6.13, 3.9.x en versiones anteriores a la v3.9.15, 3.20.x en versiones anteriores a la v3.20.0 y otras versiones anteriores a la v4.4.0; y UAA bosh release (uaa-release) 13.x en versiones anteriores a la v13.17 y versiones 24.x anteriores a la v24.12, versiones 30.x anteriores a la 30.5 y otras versiones anteriores a la v41, los administradores de zona puede escalar sus privilegios al mapear permisos para un proveedor externo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:5.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A64B23F-E318-4506-946D-F30BB453282E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:5.2:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8634A1FB-ECD1-45A7-9186-37EB6974EDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:5.2:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BC058F-27F6-4C3E-ACC7-85FBB22055DF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD18D50-AEBC-4131-B89F-F2A74501E0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C54B484-6735-460B-B8CD-CEC0A95E9E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF05C11-3541-4B88-ACAE-8C383EA383C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFDBB0F-A8C9-40DF-81CF-799D034D2EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E3B08-7171-414D-8A41-14C9E18B1BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940271A7-2CC3-4A34-BB5A-D9F4D45A7895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F3FDC1-B49D-46DD-B9F7-DCE3F1FD4B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13AA664F-BCD8-4CED-A201-E2543D437E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6711519-4E7D-4782-8372-7996C24E50D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D0CA3E-2649-4B4B-A805-81213FC07A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510DC15C-03F8-4058-A88A-13EFC48A43C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4971ADE2-3F58-4B42-9EC6-EFF3CF967E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE01821C-590F-40E1-A973-5DF0EA0151D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F30D0-82C1-4F88-9FDB-A8E6D6D39591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17929DC8-0E48-4BF4-AAFE-6463C8540FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD3FF4C-C12A-4CBC-8983-85929C5D121E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE6D88C-92CF-415E-978C-0107C4C4C52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB928C52-91BB-43A6-B25F-F359F05F1388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE6951-4C91-4443-843C-805D416F4074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23EA1C1F-003F-4411-AC1D-F75811D6FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89D44FA-FE58-4A4E-8DB1-BA9667A16612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FCFA0-2443-4AE9-ACE6-394A67443808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A5540-525C-4F99-BA26-3B988B5A08D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5C061E-A4F5-4478-A9E4-D8BA156085B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A2D187-7B5D-44D1-A766-A972F257EF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1991AF-E483-4A6E-938B-D1B6796FF135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6695193E-0347-4E20-A991-038CC3BA6386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B972B5E-6825-4DD5-8BB6-851DFFBB5109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C202FC-EA69-429B-85C6-F58A093C901F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CB6F37-6F14-4313-82D8-7D1EF110852D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A3A8B1-8088-4FCC-A38C-96526201F159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666549A-5879-4141-A97F-347B52755092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808EF0E6-842C-4E81-8743-01230D32532C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7020B7F8-0C57-4533-B49F-559058A23CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5887540-4EBE-484E-9C5B-3EFA0950BE30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E303C07-8CB1-4EF8-82F3-4C2B3C664812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2923B5C1-78A5-4A0D-B18E-DAC59B62EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58610A13-D6F7-49BA-A576-350DACC5C86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA53735-7E72-4717-9168-38286B5261E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB504DC-E137-4026-BB16-E862045BD380"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180CE3A7-BA57-49B4-8103-20E12CD37435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0DF071-1EB8-49FD-A279-A895A45B4679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004580",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99306",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120744",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T00:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS."
      }, {
        "lang" : "es",
        "value" : "En index.php en Zen Cart 1.6.0, el parámetro products_id puede provocar Cross-Site Scripting (XSS). RSA Via Lifecycle and Governance versión 7.0, en todos los niveles de parches y RSA Identity Management and Governance (RSA IMG) versiones 6.9.1, en todos los niveles de parches, permiten que un administrador de aplicación suba archivos arbitrarios que podrían contener código malicioso. El archivo malicioso podría ejecutarse en el sistema afectado con los privilegios del usuario que está ejecutando la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A476EF-01B0-4A75-BAFE-944B37B48F9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zencart/zencart/issues/1443",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zhonghaozhao/zencart/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zencart/zencart/issues/1443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zhonghaozhao/zencart/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T08:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en la función de_dotdot en libhttpd.c en sthttpd 2.27.1 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado del demonio) o, posiblemente, provocar cualquier otro tipo de problema mediante un nombre de archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sthttpd_project:sthttpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.27.1",
            "matchCriteriaId" : "DFA373F1-7E30-4622-BA6A-760DE220A150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/15/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueness/sthttpd/commit/c0dc63a49d8605649f1d8e4a96c9b468b0bff660",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueness/sthttpd/releases/tag/v2.27.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/15/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueness/sthttpd/commit/c0dc63a49d8605649f1d8e4a96c9b468b0bff660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueness/sthttpd/releases/tag/v2.27.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T08:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria previamente liberada en el módulo XML-LibXML hasta la versión 2.0129 para Perl permite que atacantes remotos ejecuten código arbitrario controlando los argumentos de una llamada replaceChild."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xml-libxml_project:xml-libxml:*:*:*:*:*:perl:*:*",
            "versionEndIncluding" : "2.0129",
            "matchCriteriaId" : "6C16CFA0-46C5-4387-ADCD-C1EF21B3526C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rt.cpan.org/Public/Bug/Display.html?id=122246",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4042",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rt.cpan.org/Public/Bug/Display.html?id=122246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T08:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/profile.php in GetSimple CMS 3.x has XSS in a name field."
      }, {
        "lang" : "es",
        "value" : "admin/profile.php en GetSimple CMS 3.x tiene Cross-Site Scripting (XSS) en un campo name."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1685FE6C-8C13-489B-9FDC-32A358AD7266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D400FBBB-51D9-4C69-A530-8085599EF82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733282CB-3E2E-4E12-AF47-6A9EA4807C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D8A854-9344-4063-85BF-1C773B33EADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15806A00-25E7-404A-9E8B-D74DCD847275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD52948-4B08-4582-8E8B-C1E9FA2989B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B64BEF7-F4F8-4B6B-8426-8D3A7365996D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77D84A-9212-4CE9-89D5-3205CD841FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5201DE3-6BF1-4634-9B61-F486C444FF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A26D2C-5F0F-4EEA-B9AB-31ADCC5CD42A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1183BEB7-723B-4E5E-818B-98A8E35E17E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-simple:getsimple_cms:3.3.2:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEA76C0-5C52-4AE6-B97F-AC5DF4D38AAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1234",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1310",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-06-29T13:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server 12.1 podría permitir que un usuario autenticado provoque un desbordamiento de búfer que podría escribir archivos grandes de fallo de aserción en el servidor. Si se hace un número de veces suficiente, esto podría utilizar grandes partes del sistema de archivos y provocar el cierre inesperado del servidor. IBM X-Force ID: 125569."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A95A4E-A509-4FDB-BF4E-88B000C93DAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004930",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99309",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038803",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125569",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8554",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-29T13:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an authenticated attacker to obtain memory contents via a specially crafted application."
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante autenticado obtenga contenido de la memoria mediante una aplicación especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98942",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8554",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8558",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-29T13:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El Motor de Protección de Malware de Microsoft corriendo en Microsoft Forefront y Microsoft Defender en versiones de 32 bits de Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511 , 1607 y 1703, no analiza correctamente un archivo especialmente creado que provoca daños en la memoria. También se conoce como \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "BA592626-F17C-4F46-823B-0947D102BBD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B3B00136-0621-447F-A1AA-1CFCDDA9768B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "507EB48C-F479-424C-8ABA-C279AB4FE3F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "81AC5268-1562-4714-ADBA-8F955DE98E9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC297F51-9742-43A2-8783-53B7E4D5E435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9503E8-6282-4F3A-A6DA-0FA8A9BD941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55E0DDF-4D05-4E5F-BC54-790A722E87A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_intune_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09194815-BBC8-42F7-ABFF-C0AB2CEF99BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99262",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038784",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8558",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42264/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42264/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8575",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-29T13:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application, aka \"Microsoft Graphics Component Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado obtenga información mediante una aplicación especialmente manipulada. Esto también se conoce como \"Microsoft Graphics Component Information Disclosure Vulnerability\". RSA Via Lifecycle and Governance versión 7.0, en todos los niveles de parches y RSA Identity Management and Governance (RSA IMG) versiones 6.9.1, en todos los niveles de parches, se han visto afectados por múltiples vulnerabilidades de Cross-Site Scripting (XSS) persistente. Usuarios autenticados remotos maliciosos podrían inyectar código HTML arbitrario en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99215",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8575",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8576",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-29T13:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka \"Microsoft Graphics Component Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente graphics en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado ejecute código arbitrario en modo kernel mediante una aplicación especialmente manipulada. Esto también se conoce como \"Microsoft Graphics Component Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99210",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8576",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8579",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-29T13:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka \"DirectX Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente DirectX en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante autenticado ejecute código arbitrario en modo kernel mediante una aplicación especialmente manipulada. Esto también se conoce como \"DirectX Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99212",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8579",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8613",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-06-29T13:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka \"Azure AD Connect Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "En Azure AD Connect Password, la escritura diferida de contraseñas, si se configura erróneamente durante la habilitación, permite que un atacante restablezca contraseñas y obtenga acceso no autorizado a cuentas de usuario privilegiado AD on-premise. Esto también se conoce como \"Azure AD Connect Elevation of Privilege Vulnerability\". }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_active_directory_connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.524.0",
            "matchCriteriaId" : "81BC498D-4568-4B67-B40F-270D5A8CE648"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99294",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://technet.microsoft.com/library/security/4033453",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://technet.microsoft.com/library/security/4033453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5528",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-06-29T14:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.  The impact of this vulnerability includes the theoretical disclosure of sensitive information.  Affects TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, and 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.2.0 and below), and TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.2.0 and below)."
      }, {
        "lang" : "es",
        "value" : "Múltiples componentes JasperReports Server contienen vulnerabilidades que podrían permitir que usuarios autorizados realicen ataques de Cross-Site Scripting (XSS) y Cross-Site Request Forgery (CSRF).  El impacto de esta vulnerabilidad incluye la revelación teórica de información sensible.  Afecta a TIBCO JasperReports Server (versiones 6.1.1 y anteriores, 6.2.0, 6.2.1 y 6.3.0), TIBCO JasperReports Server Community Edition (versiones 6.3.0 y anteriores), TIBCO JasperReports Server for ActiveMatrix BPM (versiones 6.2.0 y anteriores), TIBCO Jaspersoft for AWS with Multi-Tenancy (versiones 6.2.0 y anteriores) y TIBCO Jaspersoft Reporting and Analytics for AWS (versiones 6.2.0 y anteriores)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "EB779293-3B1E-4EFA-9949-194F50DF7829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.2.0:*:*:*:-:-:*:*",
            "matchCriteriaId" : "992BFF82-BB2B-4208-B3AA-6C93F9154722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.2.1:*:*:*:-:-:*:*",
            "matchCriteriaId" : "672D50A6-5A35-494B-B6E0-C52E64DED77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.3.0:*:*:*:-:-:*:*",
            "matchCriteriaId" : "AF03FFD8-AD8E-4F8E-8D5D-0675850E87B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "6.3.0",
            "matchCriteriaId" : "53588A16-9E0B-4B9D-80C6-E73406404F96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:activematrix_bpm:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "196B8920-FCBC-401E-A09C-1023A7B29319"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft:*:*:*:*:*:aws_with_multi-tenancy:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "FC9BE526-F462-46F7-A67A-8C46E5E7FBC5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics:*:*:*:*:*:aws:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "C3E68AF5-ED4C-4FEE-9B60-593033371DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5529",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-06-29T14:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO JasperReports Professional (versions 6.2.1 and below, and 6.3.0), TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.3.0 and below), TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.3.0 and below), and TIBCO Jaspersoft Studio for ActiveMatrix BPM (versions 6.2.0 and below)."
      }, {
        "lang" : "es",
        "value" : "Los componentes de la biblioteca JasperReports contienen una vulnerabilidad de divulgación de información. Esta vulnerabilidad incluye la divulgación, en teoría, de cualquier información accesible desde el sistema de archivos del host. Afecta a TIBCO JasperReports Library Community Edition (versiones 6.4.0 y anteriores), TIBCO JasperReports Library for ActiveMatrix BPM (versiones 6.2.0 y anteriores), TIBCO JasperReports Professional (versiones 6.2.1 y anteriores y la versión 6.3.0), TIBCO JasperReports Server (versiones 6.1.1 y anteriores, 6.2.0, 6.2.1 y 6.3.0), TIBCO JasperReports Server Community Edition (versiones 6.3.0 y anteriores), TIBCO JasperReports Server for ActiveMatrix BPM (versiones 6.2.0 y anteriores), TIBCO Jaspersoft for AWS with Multi-Tenancy (versiones 6.3.0 y anteriores), TIBCO Jaspersoft Reporting and Analytics for AWS (versiones 6.3.0 y anteriores) y TIBCO Jaspersoft Studio for ActiveMatrix BPM (versiones 6.2.0 y anteriores)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library_community_edition:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "92BADDE3-0215-4B61-9EF4-EBEBCDDC618F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library_for_activematrix_bpm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "4C41772A-63F9-4CCD-8DBE-105F8A2EF59B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "053B3DCB-B3DA-4257-940D-D95041266461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_professional:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117FDD9C-EC7B-4102-B90C-5B3BF67143C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "EB779293-3B1E-4EFA-9949-194F50DF7829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A9B006-2D34-4F4B-90D2-3AA6F4008C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B3F43A-CBE2-4E1C-B2D8-CABDDE37E639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF00ED7-2B4C-4043-A061-84ADFB785C92"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server_community_edition:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.0",
            "matchCriteriaId" : "36FAD9BF-8E18-4547-8F86-3ECB0625C82A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server_for_activematrix_bpm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "BAD91052-9CD6-46CC-A8C1-97B4C728E4FC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_for_aws_with_multi-tenancy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.0",
            "matchCriteriaId" : "BDDCA701-8160-40CC-9BB9-A1325EB7ABD6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics_for_aws:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.0",
            "matchCriteriaId" : "D1C80725-2AEE-4A9D-A5E4-4747359AA7CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio_for_activematrix_bpm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "3CB2E7DF-C120-47DF-B1A4-063E91824560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017-0",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3747",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-29T15:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de privilegios en Lenovo Nerve Center para Windows 10 en sistemas de sobremesa (Lenovo Nerve Center para notebooks no se ha visto afectado) que podría permitir que un atacante con privilegios locales en un sistema altere claves de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:nerve_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8A7D1B-AF5B-43B6-B1FB-39749ADC0E9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99286",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15046",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3748",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-29T15:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or \"jail breaking\" a device)."
      }, {
        "lang" : "es",
        "value" : "En los teléfonos móviles Lenovo VIBE, los controles de acceso incorrectos en el componente nac_server puede emplearse junto con CVE-2017-3749 y CVE-2017-3750 para elevar los privilegios a usuario root (conocido comúnmente como \"rooting\" o \"jail breaking\" de un dispositivo)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "B349128A-CD08-4B2B-975B-650831183DBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF657581-9D69-4310-AE50-BE48CA5D4CB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFB6B14-B5BB-48AB-92CB-CF7487512DC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325AC02E-E178-40D9-90D0-4E79843290B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339FC9D6-19B2-4B91-B899-00E5E277B303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D59E67-2F49-4B3F-9437-94C7140BCF31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBAF531-27D5-44D6-9EEC-BA86172290E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D1D8F-70CB-4B2F-BC7D-1B10E7EB2077"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3600-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F72DE-F368-4A03-BFA4-56B9FA4938AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6401481C-49A1-4886-80B8-E14569D77DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3800-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FDA3C7-BC99-45A5-AE81-46DA8FA579C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E0F862-F45A-46CA-941A-99ED0FFF4272"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32979F5A-1DD6-42A9-9E10-E34CFFC96626"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6000-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898242F7-7C48-4439-8520-A0680EFD9FCD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6020i37:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC57159C-1E88-43AB-A56E-66CA3AD171EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6A8C1-E7E2-449F-8F6C-02993935E3CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEF9C5D-A634-4E0D-AD7A-7F84BD7EF0CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k30-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AFFC5D-B159-4A7A-A482-455260883DC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k30-w-cu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75A5EB3-6E3D-42D5-98E5-E0523342C11A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k32c30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8E4082-C625-4CC2-BD8E-3D8DD26FC5F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k80m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECF65FF-B344-446E-B303-BDB58FFC7290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99295",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15823",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3749",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-29T15:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750."
      }, {
        "lang" : "es",
        "value" : "En los teléfonos móviles Lenovo VIBE, la aplicación de Android Idea Friend permite que los datos privados se copien y restauren mediante Android Debug Bridge, lo que permite la falsificación que conduce a un escalado de privilegios junto con CVE-2017-3748 y CVE-2017-3750."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "B349128A-CD08-4B2B-975B-650831183DBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF657581-9D69-4310-AE50-BE48CA5D4CB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFB6B14-B5BB-48AB-92CB-CF7487512DC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325AC02E-E178-40D9-90D0-4E79843290B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339FC9D6-19B2-4B91-B899-00E5E277B303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D59E67-2F49-4B3F-9437-94C7140BCF31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBAF531-27D5-44D6-9EEC-BA86172290E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D1D8F-70CB-4B2F-BC7D-1B10E7EB2077"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3600-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F72DE-F368-4A03-BFA4-56B9FA4938AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6401481C-49A1-4886-80B8-E14569D77DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3800-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FDA3C7-BC99-45A5-AE81-46DA8FA579C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E0F862-F45A-46CA-941A-99ED0FFF4272"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32979F5A-1DD6-42A9-9E10-E34CFFC96626"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6000-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898242F7-7C48-4439-8520-A0680EFD9FCD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6020i37:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC57159C-1E88-43AB-A56E-66CA3AD171EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6A8C1-E7E2-449F-8F6C-02993935E3CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEF9C5D-A634-4E0D-AD7A-7F84BD7EF0CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k30-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AFFC5D-B159-4A7A-A482-455260883DC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k30-w-cu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75A5EB3-6E3D-42D5-98E5-E0523342C11A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k32c30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8E4082-C625-4CC2-BD8E-3D8DD26FC5F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k80m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECF65FF-B344-446E-B303-BDB58FFC7290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15823",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3750",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-06-29T15:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749."
      }, {
        "lang" : "es",
        "value" : "En los teléfonos móviles Lenovo VIBE, la aplicación de Android Lenovo Security permite que los datos privados se copien y restauren mediante Android Debug Bridge, lo que permite la falsificación que conduce a un escalado de privilegios junto con CVE-2017-3748 y CVE-2017-3749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "B349128A-CD08-4B2B-975B-650831183DBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF657581-9D69-4310-AE50-BE48CA5D4CB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFB6B14-B5BB-48AB-92CB-CF7487512DC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325AC02E-E178-40D9-90D0-4E79843290B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339FC9D6-19B2-4B91-B899-00E5E277B303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a2880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D59E67-2F49-4B3F-9437-94C7140BCF31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBAF531-27D5-44D6-9EEC-BA86172290E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D1D8F-70CB-4B2F-BC7D-1B10E7EB2077"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3600-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F72DE-F368-4A03-BFA4-56B9FA4938AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6401481C-49A1-4886-80B8-E14569D77DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3800-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FDA3C7-BC99-45A5-AE81-46DA8FA579C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E0F862-F45A-46CA-941A-99ED0FFF4272"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32979F5A-1DD6-42A9-9E10-E34CFFC96626"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6000-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898242F7-7C48-4439-8520-A0680EFD9FCD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6020i37:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC57159C-1E88-43AB-A56E-66CA3AD171EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6A8C1-E7E2-449F-8F6C-02993935E3CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_a6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEF9C5D-A634-4E0D-AD7A-7F84BD7EF0CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k30-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AFFC5D-B159-4A7A-A482-455260883DC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k30-w-cu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75A5EB3-6E3D-42D5-98E5-E0523342C11A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k32c30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8E4082-C625-4CC2-BD8E-3D8DD26FC5F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:vibe_k80m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECF65FF-B344-446E-B303-BDB58FFC7290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15823",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2844",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the \"msmtprc\" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web en Foscam C1 Indoor HD Camera que ejecuta el firmware de aplicación en su versión 2.52.2.37, una petición HTTP especialmente manipulada puede permitir que un usuario inyecte datos arbitrarios en el archivo de configuración \"msmtprc\", lo que resulta en la ejecución de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0346",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2845",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests resulting in command execution"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera que ejecuta el firmware de aplicación en su versión 2.52.2.37. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell arbitrarios durante las pruebas de configuración SMTP, lo que resulta en una ejecución de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0347",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2846",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web en las cámaras Foscam C1 Indoor HD que ejecutan el firmware de aplicación en su versión 2.52.2.37, una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell arbitrarios durante la configuración manual de red, lo que resulta en la inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0348",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2847",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web en las cámaras Foscam C1 Indoor HD que ejecutan el firmware de aplicación en su versión 2.52.2.37, una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell arbitrarios durante la configuración manual de red, lo que resulta en la inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0349",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2848",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web en las cámaras Foscam C1 Indoor HD que ejecutan el firmware de aplicación en su versión 2.52.2.37, una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell arbitrarios durante la configuración manual de red, lo que resulta en la inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0350",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2849",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web en las cámaras Foscam C1 Indoor HD que ejecutan el firmware de aplicación en su versión 2.52.2.37, una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell arbitrarios durante la configuración del servidor NTP, lo que resulta en la inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0351",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2850",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de gestión web en las cámaras Foscam C1 Indoor HD que ejecutan el firmware de aplicación en su versión 2.52.2.37, una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres arbitrarios en el archivo pureftpd.passwd durante un cambio de nombre de usuario, lo que permite que se omitan las restricciones chroot en el servidor FTP. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0352",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2851",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-06-29T17:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En la interfaz web de gestión en las cámaras Foscam C1 Indoor HD con firmware de aplicación 2.52.2.37, una petición HTTP especialmente manipulada puede provocar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_indoor_hd_camera_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E42CC0A-E8B0-407C-A6B8-079CC10D2271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1_indoor_hd_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F43869-2168-407A-B546-06998CA5D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0353",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4997",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-06-29T17:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "Las versiones  8.3.x y anteriores de EMC VASA Provider Virtual Appliance contienen una vulnerabilidad de ejecución remota de código no autenticado que podría ser explotada por usuarios maliciosos con el fin de comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vasa_provider_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.0",
            "matchCriteriaId" : "00B23FCA-20E2-4937-92A4-0EAE7AC70771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540783/30/0/threaded",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99169",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540783/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T21:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Request Forgery (CSRF) en Piwigo hasta la versión 2.9.1 permite que atacantes remotos secuestren la autenticación de usuarios para peticiones que eliminan vínculos permanentes mediante una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "5D356328-15B0-4402-94E6-8C16E09EB088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed."
      }, {
        "lang" : "es",
        "value" : "Piwigo hasta la versión 2.9.1 permite que atacantes remotos obtengan información sensible sobre el nombre descriptivo de un vínculo permanente examinando la URL de redirección que se devuelve en una petición para el número de ID del vínculo permanente de un álbum privado. Los números de ID del vínculo permanente se adivinan fácilmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "5D356328-15B0-4402-94E6-8C16E09EB088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/723",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Request Forgery (CSRF) en Piwigo hasta la versión 2.9.1 permite que atacantes remotos secuestren la autenticación de usuarios para peticiones para cambiar un álbum privado a público mediante una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "5D356328-15B0-4402-94E6-8C16E09EB088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to unlock albums via a crafted request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Request Forgery (CSRF) en Piwigo hasta la versión 2.9.1 permite que atacantes remotos secuestren la autenticación de usuarios para peticiones que desbloquean álbumes mediante una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "5D356328-15B0-4402-94E6-8C16E09EB088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el backend administrativo en Piwigo hasta la versión 2.9.2 permite que usuarios remotos ejecuten comandos SQL arbitrarios mediante los parámetros cat_false o cat_true en la página de comentarios o de estado en cat_options.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "5D356328-15B0-4402-94E6-8C16E09EB088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/3dd6812412289a199564e63fffd0a9754010b9e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43337/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/3dd6812412289a199564e63fffd0a9754010b9e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43337/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T23:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En mpg123 1.25.0, hay una sobrelectura de búfer basada en memoria dinámica (heap) en la función convert_latin1 (libmpg123/id3.c). Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:1.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF74B115-4A54-4D02-9510-97BE3B90F2CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465819",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T23:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."
      }, {
        "lang" : "es",
        "value" : "En ncurses 6.0, hay una vulnerabilidad de desbordamiento de búfer basado en pila en la función fmt_entry. Se podría realizar un ataque de ejecución remota de código arbitrario con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464687",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T23:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."
      }, {
        "lang" : "es",
        "value" : "En ncurses 6.0, hay una vulnerabilidad de cadena de formato en la función fmt_entry. Se podría realizar un ataque de ejecución remota de código arbitrario con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464692",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T23:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) versión 2.14rc0, existen múltiples vulnerabilidades de acceso a la región heap de la memoria previamente liberada en la herramienta nasm. La región heap relacionada es asignada en la función token() y se libera en la función detoken() (llamada por pp_getline()); se usa de nuevo en varias posiciones más adelante, lo que podría causar daños múltiples. Por ejemplo, provoca una lista de doble enlace dañada en detoken(), una doble liberación o corrupción en delete_Token() y una escritura fuera de límites en detoken(). Tiene una alta posibilidad de provocar un ataque de ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392414",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T23:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En LibSass 3.4.5, hay una sobrelectura de búfer basada en memoria dinámica (heap) en la función json_mkstream() de sass_context.cpp. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1466411",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1466411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-29T23:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF versión 4.0.8, se presenta un abortado de aserción en la función TIFFWriteDirectoryTagCheckedLong8Array del archivo tif_dirwrite.c. Una entrada especialmente diseñada conllevará a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2712",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42299/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42299/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6017",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de agotamiento de recursos en Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H y BMXP342030H. Un atacante remoto podría enviar un conjunto de paquetes manipulados al PLC para congelarlo, lo que requeriría que el operador presionase físicamente el botón reset en el PLC para recuperarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C7D02-534F-4FA3-AB3C-B3F39A71900E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmxnoc0401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF08654A-FFCB-47D3-AC82-DF7284548962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDF7041-ED14-44E4-A6E2-868E2432A2EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmxnoe0100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FC6FF2-D662-4A57-AAA6-BC04351DC779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022727EE-C23D-415F-8F61-29C068C0372E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmxnoe0110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F3B055-8919-4E09-9827-288F0A03DAFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmxnoe0110h_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5155A17-6C21-43DF-BB7F-B4CACAC25826"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmxnoe0110h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E47DB14-EF4B-4E4E-9DA2-B3F6EFA72BF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0509170-2D6C-4864-841D-30E74A1F4731"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmxnor0200h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D9A366-3394-4275-B884-AE6E7227156E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146C7F94-4838-4C53-BB73-7E7F05EAE7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178D2338-E48E-493C-992F-337AACE794DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393BF977-E478-4396-B9E6-A760C56048BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D150239-27E2-4CBE-A931-5107C15E362F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13E4CD0-11DB-4987-A30D-C4D635E35BD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98212CF5-BCF4-4A55-B62A-484569687B4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE26AA5C-40EC-4753-B98C-B6D998630D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30336F0-EDCF-486C-B52E-D0C53BCDFC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7F40A9-1D33-4ECD-BB3E-A34E8702348E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F2F851-C18F-4CB8-B47C-516F2AC7955D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020h_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8A1950-48B2-4F0F-BC59-5BE851510B26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAED8B-EEFA-45D7-A5A3-9B62067CE24C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2C68F9-36D3-4509-B33C-5AA2836FF4BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E472ABB0-5556-4B96-9CEF-2180E24FA7FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B3AFA3-A58C-45DE-93C7-5D015F6A3464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354968F7-C41B-4C21-8E47-81DC07DF0EA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302h_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DEEDCA0-FF8D-4CED-9799-932168043661"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075A16D1-F4DF-4DCB-8DF9-152E282CE01F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030h_firmware:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2425E29E-39F0-41FC-8C64-77547F6D6790"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF9608E7-C9B5-4945-9609-690231DB1B5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96414",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/96414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6018",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect issue was discovered in B. Braun Medical SpaceCom module, which is integrated into the SpaceStation docking station: SpaceStation with SpaceCom module (integrated as part number 8713142U), software versions prior to Version 012U000040, and SpaceStation (part number 8713140U) with installed SpaceCom module (part number 8713160U), software versions prior to Version 012U000040. The web server of the affected product accepts untrusted input which could allow attackers to redirect the request to an unintended URL contained within untrusted input."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de redireccionamiento abierto en el módulo SpaceCom de B. Braun Medical, que está integrado en la estación de acoplamiento SpaceStation: módulo SpaceStation with SpaceCom (integrado como número de parte 8713142U), versiones de software anteriores a 012U000040 y SpaceStation (número de parte 8713140U) con módulo SpaceCom instalado (número de parte 8713160U), versiones de software anteriores a 012U000040. El servidor web del producto afectado acepta entradas no seguras, lo que podría permitir a atacantes redireccionar la petición a una dirección URL no deseada contenida en una entrada  no segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bbraun:station_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E894122-0F6B-4A60-BA71-BC9B03A3CAA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bbraun:spacestation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B457DA3F-190E-450C-97B3-8523BC563391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6022",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the confidentiality of limited PHI/PII information stored in the BD Kiestra Database."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de contraseña embebida en Becton, Dickinson and Company (BD) PerformA, en su versión 2.0.14.0 y anteriores, y KLA Journal Service, en su versión 1.0.51 y anteriores. Ambos emplean contraseñas embebidas para acceder a la base de datos BD Kiestra, lo que podría aprovecharse para comprometer la confidencialidad de la información PHI/PII limitada almacenada en la base de datos BD Kiestra."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bd:performa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.14.0",
            "matchCriteriaId" : "25B4C3F5-D413-4CE5-9C68-B7FCF686F54D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bd:kla_journal_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.51",
            "matchCriteriaId" : "2920987E-49B3-4BDB-BC2B-7BD23CE01457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97057",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6026",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised."
      }, {
        "lang" : "es",
        "value" : "Un problema de uso de valores aleatorios insuficientes fue encontrado en Schneider Electric Modicon PLCs Modicon M241, versiones de firmware anteriores a 4.0.5.11, y Modicon M251, versiones de firmware anteriores a 4.0.5.11. Los números de sesión generados por la aplicación web carecen de aleatorización y son compartidos entre varios usuarios. Esto puede permitir que una sesión actual se vea comprometida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3.20",
            "matchCriteriaId" : "6FDB0710-FB7F-4346-9EEC-4C75ECEA0A1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m251:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E03A25-B0B6-4BA2-80BC-52C16A6837E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3.20",
            "matchCriteriaId" : "9CA3FF3A-9145-4DAD-BAD6-D55C97E182AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m241:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8FD9D9-F59F-470E-9F7F-CDDD80B0633C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97254",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45918/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45918/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6028",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application."
      }, {
        "lang" : "es",
        "value" : "Un problema de credenciales protegidas insuficientemente  fue detectado en PLCs Modicon M241, y Modicon M251 de Schneider Electric, en todas las versiones de firmware. Las credenciales de inicio de sesión se envían por medio de la red con codificación Base64 dejándolas susceptibles a ser espiadas. Las credenciales espiadas se podrían usar para iniciar sesión en la aplicación web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3.20",
            "matchCriteriaId" : "9CA3FF3A-9145-4DAD-BAD6-D55C97E182AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m241:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8FD9D9-F59F-470E-9F7F-CDDD80B0633C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3.20",
            "matchCriteriaId" : "6FDB0710-FB7F-4346-9EEC-4C75ECEA0A1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m251:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E03A25-B0B6-4BA2-80BC-52C16A6837E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97254",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6030",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections."
      }, {
        "lang" : "es",
        "value" : "Un problema de Rango de Valor Predecible de Valores Anteriores fue detectado en PLCs Modicon M221, versiones de firmware anteriores a 1.5.0.0, Modicon M241, versiones de firmware anteriores a la 4.0.5.11, y Modicon M251, versiones de firmware anteriores a la 4.0.5.11 de Schneider Electric. Los productos afectados generan números de secuencia inicial TCP de aleatoriedad insuficientemente que pueden permitir a un atacante predecir los números de los valores anteriores. Esto puede permitir a un atacante suplantar o interrumpir las conexiones TCP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-343"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3.20",
            "matchCriteriaId" : "9CA3FF3A-9145-4DAD-BAD6-D55C97E182AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m241:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8FD9D9-F59F-470E-9F7F-CDDD80B0633C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3.20",
            "matchCriteriaId" : "6FDB0710-FB7F-4346-9EEC-4C75ECEA0A1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m251:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E03A25-B0B6-4BA2-80BC-52C16A6837E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1.5",
            "matchCriteriaId" : "68FB877A-87E1-4DE9-B758-8CEA1BE1456F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0D83F4-B718-47AB-AFB8-B576CB138AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97254",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6032",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-force attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de violación de principios de diseño seguro en el protocolo Modicon Modbus, de Schneider Electric. El protocolo Modicon Modbus tiene una debilidad relacionada con la sesión que lo hace susceptible a ataques de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-657"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modbus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF59532-F8A6-4EFC-9B65-7FE1C37B6222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modbus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98D3886-8E25-44A6-9BA0-97274DBE4D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97562",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6034",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de omisión de autenticación por captura por reproducción en el protocolo Modicon Modbus, de Schneider Electric. Se transmite información sensible en texto claro en el protocolo Modicon Modbus, lo que podría permitir que un atacante reproduzca los siguientes comandos: run, stop, upload y download."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modbus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF59532-F8A6-4EFC-9B65-7FE1C37B6222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modbus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98D3886-8E25-44A6-9BA0-97274DBE4D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97562",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6036",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Server-Site Request Forgery (SSRF) en el switch Belden Hirschmann GECKO Lite Managed, en versiones 2.0.00 y anteriores. El servidor web recibe una petición, pero no verifica lo suficiente que la petición se está enviando a su destino esperado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden_hirschmann:gecko_lite_managed_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.00",
            "matchCriteriaId" : "F6C3FE20-F449-4AE3-A70D-125BE0934473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden_hirschmann:gecko_lite_managed_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F981F2D-B30E-49A8-9FFB-5A9A01C6D46C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6038",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Request Forgery (CSRF) en el switch Belden Hirschmann GECKO Lite Managed, en versiones 2.0.00 y anteriores. La aplicación web no verifica lo suficiente que las peticiones fuesen proporcionadas por el usuario que envió la solicitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden_hirschmann:gecko_lite_managed_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.00",
            "matchCriteriaId" : "F6C3FE20-F449-4AE3-A70D-125BE0934473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden_hirschmann:gecko_lite_managed_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F981F2D-B30E-49A8-9FFB-5A9A01C6D46C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6040",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de exposición de información en el switch Belden Hirschmann GECKO Lite Managed, en versiones 2.0.00 y anteriores. Se puede obtener información no sensible de forma anónima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden_hirschmann:gecko_lite_managed_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.00",
            "matchCriteriaId" : "F6C3FE20-F449-4AE3-A70D-125BE0934473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden_hirschmann:gecko_lite_managed_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F981F2D-B30E-49A8-9FFB-5A9A01C6D46C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6041",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. This vulnerability allows an attacker to modify the operation and upload firmware changes without detection."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Carga Sin Restricciones, en el terminal M3000 de Marel Food Processing Systems asociado con los siguientes sistemas: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139 , IPM3 Single Cam v132, P520, P574, línea de flujo SensorX13 QC, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B y V36C; Terminal M3210 asociado a los mismos sistemas que el terminal M3000 identificado anteriormente; Software de escritorio M3000 asociado a los mismos sistemas que el terminal M3000 identificado anteriormente; Controlador MAC4 asociado a los mismos sistemas que el terminal M3000 identificado anteriormente; SensorX23 Máquina de rayos X; SensorX25 Máquina de rayos X; y el sistema de pesaje MWS2. Esta vulnerabilidad permite a un atacante modificar la operación y cargar cambios de firmware sin detección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93191ACD-DF7E-4EE1-9396-5F87BE4BB414"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A569889-0558-4788-9243-6AF94F211CE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB917C8-69E5-4225-8CBF-B64F559B1227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6F958A-27ED-4BD7-B9BE-1E7CF12AE858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a371_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11916717-347F-418A-9222-8D7A69836B39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a371:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130F7106-6439-4A7F-BF38-31669FEE3402"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a520_master_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBE36F1-1D3E-4C30-8017-623EB45F413B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a520_master:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B7F2B3-990A-4B13-BB55-10CFF2438B5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a520_slave_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F635EC13-DD73-4198-8A06-20CB7520B937"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a520_slave:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45DB8E00-26BC-48D3-8F89-2396A112C6D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a530_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E734B17C-E7C8-48B1-8240-825C3AEC41B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EDAD0F-E50F-460C-B572-1CB72285DACB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a542_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CBE310-04B6-4844-B5F7-180CA5DF524F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3DF08D-46C7-4540-AC8A-1E14727DBEB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:a571_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797CFA0D-60DF-4749-B1C6-FADA0D9FCC2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:a571:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D332991E-5CCE-44C0-A438-B7209E373304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:check_bin_grader_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2802D79A-DE9F-4CA0-9517-953337827DD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:check_bin_grader:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48058F05-3E5F-4FC8-9B42-8ADB88D86762"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:flowlineqc_t376_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8421719-5050-49CF-8FBD-566F0359DE36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:flowlineqc_t376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F06F792-297C-447A-8E11-CDB4EEE1B158"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:ipm3_dual_cam_firmware:132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7CB690-FEE4-480E-A1B4-9503D5099945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:ipm3_dual_cam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C816AF7E-3FDC-46D8-AEBC-75C3B4600653"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:ipm3_dual_cam_firmware:139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8513725-09B4-43F5-9685-32839B7809FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:ipm3_dual_cam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C816AF7E-3FDC-46D8-AEBC-75C3B4600653"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:ipm3_dual_cam_firmware:132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7CB690-FEE4-480E-A1B4-9503D5099945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:ipm3_dual_cam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C816AF7E-3FDC-46D8-AEBC-75C3B4600653"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:p520_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AEA79E-9F9D-4098-B3F7-876913CBDC8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:p520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384ED7B9-4B83-4E72-A48E-8A67E2A29C9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:p574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212EC3DC-4868-4E1E-AD35-93BDD1EF1297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:p574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4A4869-50BE-4E9D-99B7-535CF1329778"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:sensorx13_qc_flow_line_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C1496A-69B1-48DC-904A-CD44F0ACE5A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:sensorx13_qc_flow_line:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD15EDF-EE4F-4248-B43F-331598FBE5D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:sensorx23_qc_master_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FCCB05-25F5-4C20-96D9-0907320FCAD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:sensorx23_qc_master:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D24ACE-8639-4FAC-A53D-A483EA98B256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:sensorx23_qc_slave_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F46DC1-2487-4B62-97E7-EDE1F28EEA74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:sensorx23_qc_slave:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663A11BB-6596-43CF-BCC3-C424F2E9305F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:speed_batcher_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C8ADA0-0247-4222-835A-C1105DCF0C34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:speed_batcher:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B164735A-B2DC-4FC6-BB49-A1564BB29BDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:t374_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E32E5B-278B-4A99-98D0-63C703997DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:t374:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DEFFF4-6619-4738-9D63-356224CD96A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:t377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3C440B-6167-471A-9E74-218023AFC823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:t377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FCBD6D-D9A3-498B-93F5-6952747669B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:v36_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB75BCF-DCA2-48D8-BD29-0878ABE2E015"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:v36:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB6A6F0-3ACA-4772-BE2E-8A2E5C50CA0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:v36b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28936CB-D8D2-4B54-B54B-50E541F620EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:v36b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726488AE-F14A-4C95-8CBE-BFC3CB9D2081"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:marel:v36c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120591B-772A-45EB-9B28-A4AC58A270F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:marel:v36c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806F5060-EAD6-48DF-829E-118C87F724C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97388",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6042",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a client into making an unintentional request to the web server that will be treated as an authentic request."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Request Forgery (CSRF) en Sierra Wireless AirLink Raven XE, en todas las versiones anteriores a la 4.0.14, y en AirLink Raven XT, en todas las versiones anteriores a la 4.0.11. Los dispositivos afectados no verifican si una petición fue intencionadamente enviada por el usuario que ha iniciado sesión, lo que podría permitir que un atacante engañe a un cliente para que realice una petición no intencionada al servidor web que será tratada como petición auténtica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierra_wireless:airlink_raven_xe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "BBD39D07-982E-4B1A-910C-76190E77665C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierra_wireless:airlink_raven_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96F360C-3F60-462E-92A3-EE44E3624CCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierra_wireless:airlink_raven_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF87F04-D3EC-49B7-BDD7-9FCE2324B051"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierra_wireless:airlink_raven_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81786F-6C77-42F1-ADDF-594B8D53584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98036",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6044",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autorización incorrecta en Sierra Wireless AirLink Raven XE, en todas las versiones anteriores a la 4.0.14, y en AirLink Raven XT, en todas las versiones anteriores a la 4.0.11. Se puede acceder sin autenticación a ciertos archivos y directorios, lo que podría permitir que un atacante remoto realice funciones sensibles, incluyendo la subida de archivos arbitrarios, la descarga de archivos y el reinicio del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierra_wireless:airlink_raven_xe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "BBD39D07-982E-4B1A-910C-76190E77665C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierra_wireless:airlink_raven_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96F360C-3F60-462E-92A3-EE44E3624CCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierra_wireless:airlink_raven_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF87F04-D3EC-49B7-BDD7-9FCE2324B051"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierra_wireless:airlink_raven_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81786F-6C77-42F1-ADDF-594B8D53584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98036",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6046",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de credenciales insuficientemente protegidas en Sierra Wireless AirLink Raven XE, en todas las versiones anteriores a la 4.0.14, y en AirLink Raven XT, en todas las versiones anteriores a la 4.0.11. La información sensible se protege de forma insuficiente durante la transmisión y es vulnerable a rastreo, que podría conducir a una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierra_wireless:airlink_raven_xe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "BBD39D07-982E-4B1A-910C-76190E77665C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierra_wireless:airlink_raven_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96F360C-3F60-462E-92A3-EE44E3624CCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierra_wireless:airlink_raven_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF87F04-D3EC-49B7-BDD7-9FCE2324B051"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierra_wireless:airlink_raven_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81786F-6C77-42F1-ADDF-594B8D53584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98036",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7898",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. There are no penalties for repeatedly entering incorrect passwords."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Restricción Inapropiada de Intentos de Autenticación Excesivos en los controladores lógicos programables MicroLogix 1100 1763-L16AWA, Series A y B, versión 16.00 y anteriores ; 1763-L16BBB, Serie A y B, versión 16.00 y anteriores; 1763-L16BWA, Serie A y B, versión 16.00 y anteriores; y 1763-L16DWD, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation y controladores lógicos programables MicroLogix 1400 1766-L32AWA, Series A y B, versión 16.00 y anteriores; 1766-L32BWA, Serie A y B, versión 16.00 y anteriores; 1766-L32BWAA, Serie A y B, versión 16.00 y anteriores; 1766-L32BXB, Serie A y B, versión 16.00 y anteriores; 1766-L32BXBA, Serie A y B, versión 16.00 y anteriores; y 1766-L32AWAA, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation . No se presentan penalizaciones por introducir repetidamente contraseñas inapropiadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "E44D0CCE-EDA7-4DF2-B67B-C59DFAE7F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "58E4AB51-E136-4AA3-AFF9-50F240489856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6006CE1E-08EC-4AFC-8F35-73B24AA7F08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "F52398D3-996E-4291-887F-6B8E0AF24AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "61603F24-7505-4A9E-BA9E-57C7B5A60A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9558148B-3000-4D83-9AB0-380D7FBB0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "C805AFD6-481C-4A32-9CE8-281F9B793263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC9E1F42-4F17-4EA4-8D0F-30220F560A0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA98842B-9D09-4C37-AB34-4E9FA566BAD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "8C8E3AF6-1017-4A18-99CA-854F1022ED66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "A093AA8B-7DB9-4373-AE8F-F8B879A4BE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "25DA9309-964B-4C1C-8B95-9C1CD80DDC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6D51D3F6-ABB3-4FFD-81D5-B3D3C29F0A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC05C3A1-1042-46AD-83D8-765AF4C9BCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6218A006-1F60-4E29-85CC-7D1BCBD7C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6B863572-CECF-47DF-AF6F-C25F88200DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "59BEBB0E-8C6E-4663-9E0C-E755C2EF0041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1303D987-4A44-4F33-992E-0C7E683EC7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1E7D8E09-D97D-45FF-9AD0-A9B0A846E600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9D9C64FB-A613-4940-86E6-95431B907159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "B5C50D4A-EB32-4BE4-B9E6-D25494E2EF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2EF59-F451-490D-A7AF-E66D11493948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7899",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. User credentials are sent to the web server using the HTTP GET method, which may result in the credentials being logged. This could make user credentials available for unauthorized retrieval."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Exposición de Información en los controladores lógicos programables MicroLogix 1100 1763-L16AWA, Series A y B, versión 16.00 y anteriores; 1763-L16BBB, Serie A y B, versión 16.00 y anteriores; 1763-L16BWA, Serie A y B, versión 16.00 y anteriores; y 1763-L16DWD, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation y controladores lógicos programables MicroLogix 1400 1766-L32AWA, Series A y B, versión 16.00 y anteriores; 1766-L32BWA, Serie A y B, versión 16.00 y anteriores; 1766-L32BWAA, Serie A y B, versión 16.00 y anteriores; 1766-L32BXB, Serie A y B, versión 16.00 y anteriores; 1766-L32BXBA, Serie A y B, versión 16.00 y anteriores; y 1766-L32AWAA, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation. Las credenciales de usuario se envían al servidor web mediante el método GET HTTP, lo que puede resultar en que se registren las credenciales. Esto podría hacer que las credenciales de usuario estén disponibles para una recuperación no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "E44D0CCE-EDA7-4DF2-B67B-C59DFAE7F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "58E4AB51-E136-4AA3-AFF9-50F240489856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6006CE1E-08EC-4AFC-8F35-73B24AA7F08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "F52398D3-996E-4291-887F-6B8E0AF24AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "61603F24-7505-4A9E-BA9E-57C7B5A60A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9558148B-3000-4D83-9AB0-380D7FBB0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "C805AFD6-481C-4A32-9CE8-281F9B793263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC9E1F42-4F17-4EA4-8D0F-30220F560A0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA98842B-9D09-4C37-AB34-4E9FA566BAD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "8C8E3AF6-1017-4A18-99CA-854F1022ED66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "A093AA8B-7DB9-4373-AE8F-F8B879A4BE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "25DA9309-964B-4C1C-8B95-9C1CD80DDC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6D51D3F6-ABB3-4FFD-81D5-B3D3C29F0A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC05C3A1-1042-46AD-83D8-765AF4C9BCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6218A006-1F60-4E29-85CC-7D1BCBD7C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6B863572-CECF-47DF-AF6F-C25F88200DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "59BEBB0E-8C6E-4663-9E0C-E755C2EF0041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1303D987-4A44-4F33-992E-0C7E683EC7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1E7D8E09-D97D-45FF-9AD0-A9B0A846E600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9D9C64FB-A613-4940-86E6-95431B907159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "B5C50D4A-EB32-4BE4-B9E6-D25494E2EF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2EF59-F451-490D-A7AF-E66D11493948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7901",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. Insufficiently random TCP initial sequence numbers are generated, which may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections, resulting in a denial of service for the target device."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Rango de Valor Predecible de Valores Anteriores en los controladores lógicos programables MicroLogix 1100 1763-L16AWA, Series A y B, versión 16.00 y anteriores; 1763-L16BBB, Serie A y B, versión 16.00 y anteriores; 1763-L16BWA, Serie A y B, versión 16.00 y anteriores; y 1763-L16DWD, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation y en controladores lógicos programables MicroLogix 1400 1766-L32AWA, Series A y B, versión 16.00 y anteriores; 1766-L32BWA, Serie A y B, versión 16.00 y anteriores; 1766-L32BWAA, Serie A y B, versión 16.00 y anteriores; 1766-L32BXB, Serie A y B, versión 16.00 y anteriores; 1766-L32BXBA, Serie A y B, versión 16.00 y anteriores; y 1766-L32AWAA, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation. Se generan números de secuencia inicial TCP de aleatoriedad insuficientemente, lo que puede permitir a un atacante predecir los números de los valores anteriores. Esto puede permitir a un atacante suplantar o interrumpir las conexiones TCP, resultando en una denegación de servicio para el dispositivo de destino."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-343"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "E44D0CCE-EDA7-4DF2-B67B-C59DFAE7F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "58E4AB51-E136-4AA3-AFF9-50F240489856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6006CE1E-08EC-4AFC-8F35-73B24AA7F08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "F52398D3-996E-4291-887F-6B8E0AF24AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "61603F24-7505-4A9E-BA9E-57C7B5A60A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9558148B-3000-4D83-9AB0-380D7FBB0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "C805AFD6-481C-4A32-9CE8-281F9B793263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC9E1F42-4F17-4EA4-8D0F-30220F560A0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA98842B-9D09-4C37-AB34-4E9FA566BAD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "8C8E3AF6-1017-4A18-99CA-854F1022ED66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "A093AA8B-7DB9-4373-AE8F-F8B879A4BE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "25DA9309-964B-4C1C-8B95-9C1CD80DDC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6D51D3F6-ABB3-4FFD-81D5-B3D3C29F0A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC05C3A1-1042-46AD-83D8-765AF4C9BCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6218A006-1F60-4E29-85CC-7D1BCBD7C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6B863572-CECF-47DF-AF6F-C25F88200DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "59BEBB0E-8C6E-4663-9E0C-E755C2EF0041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1303D987-4A44-4F33-992E-0C7E683EC7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1E7D8E09-D97D-45FF-9AD0-A9B0A846E600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9D9C64FB-A613-4940-86E6-95431B907159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "B5C50D4A-EB32-4BE4-B9E6-D25494E2EF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2EF59-F451-490D-A7AF-E66D11493948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7902",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Reusing a Nonce, Key Pair in Encryption\" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected product reuses nonces, which may allow an attacker to capture and replay a valid request until the nonce is changed."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de \"Reusing a Nonce, Key Pair in Encryption\" en los controladores de lógica programable MicroLogix 1100 de Allen-Bradley  1763-L16AWA, Serie A y B, Versión 16.00 y versiones anteriores; 1763-L16BBB, Serie A y B, Versión 16.00 y versiones anteriores; 1763-L16BWA, Serie A y B, Versión 16.00 y versiones anteriores; y 1763-L16DWD, Serie A y B, Versión 16.00 y versiones anteriores y Controladores lógicos programables Allen-Bradley MicroLogix 1400 1766-L32AWA, Serie A y B, Versión 16.00 y versiones anteriores; 1766-L32BWA, Series A y B, versión 16.00 y versiones anteriores; 1766-L32BWAA, Serie A y B, Versión 16.00 y versiones anteriores; 1766-L32BXB, Serie A y B, Versión 16.00 y versiones anteriores; 1766-L32BXBA, Serie A y B, Versión 16.00 y versiones anteriores; y 1766-L32AWAA, Serie A y B, Versión 16.00 y versiones anteriores. El producto afectado reutiliza nonces, lo que puede permitir que un atacante capture y reproduzca una solicitud válida hasta que se cambie el nonce."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "E44D0CCE-EDA7-4DF2-B67B-C59DFAE7F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "58E4AB51-E136-4AA3-AFF9-50F240489856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6006CE1E-08EC-4AFC-8F35-73B24AA7F08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "F52398D3-996E-4291-887F-6B8E0AF24AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "61603F24-7505-4A9E-BA9E-57C7B5A60A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9558148B-3000-4D83-9AB0-380D7FBB0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "C805AFD6-481C-4A32-9CE8-281F9B793263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC9E1F42-4F17-4EA4-8D0F-30220F560A0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA98842B-9D09-4C37-AB34-4E9FA566BAD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "8C8E3AF6-1017-4A18-99CA-854F1022ED66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "A093AA8B-7DB9-4373-AE8F-F8B879A4BE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "25DA9309-964B-4C1C-8B95-9C1CD80DDC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6D51D3F6-ABB3-4FFD-81D5-B3D3C29F0A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC05C3A1-1042-46AD-83D8-765AF4C9BCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6218A006-1F60-4E29-85CC-7D1BCBD7C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6B863572-CECF-47DF-AF6F-C25F88200DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "59BEBB0E-8C6E-4663-9E0C-E755C2EF0041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1303D987-4A44-4F33-992E-0C7E683EC7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1E7D8E09-D97D-45FF-9AD0-A9B0A846E600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9D9C64FB-A613-4940-86E6-95431B907159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "B5C50D4A-EB32-4BE4-B9E6-D25494E2EF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2EF59-F451-490D-A7AF-E66D11493948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7903",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected products use a numeric password with a small maximum character size for the password."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de Requisitos de Contraseña Débiles en los controladores lógicos programables MicroLogix 1100 1763-L16AWA, Series A y B, versión 16.00 y anteriores; 1763-L16BBB, Serie A y B, versión 16.00 y anteriores; 1763-L16BWA, Serie A y B, versión 16.00 y anteriores; y 1763-L16DWD, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation y controladores lógicos programables MicroLogix 1400 1766-L32AWA, Series A y B, versión 16.00 y anteriores; 1766-L32BWA, Serie A y B, versión 16.00 y anteriores; 1766-L32BWAA, Serie A y B, versión 16.00 y anteriores; 1766-L32BXB, Serie A y B, versión 16.00 y anteriores; 1766-L32BXBA, Serie A y B, versión 16.00 y anteriores; y 1766-L32AWAA, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation. Los productos afectados usan una contraseña numérica con un pequeño tamaño máximo de caracteres para la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "E44D0CCE-EDA7-4DF2-B67B-C59DFAE7F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "58E4AB51-E136-4AA3-AFF9-50F240489856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6006CE1E-08EC-4AFC-8F35-73B24AA7F08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "F52398D3-996E-4291-887F-6B8E0AF24AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "61603F24-7505-4A9E-BA9E-57C7B5A60A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9558148B-3000-4D83-9AB0-380D7FBB0C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "C805AFD6-481C-4A32-9CE8-281F9B793263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC9E1F42-4F17-4EA4-8D0F-30220F560A0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA98842B-9D09-4C37-AB34-4E9FA566BAD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "8C8E3AF6-1017-4A18-99CA-854F1022ED66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "A093AA8B-7DB9-4373-AE8F-F8B879A4BE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "25DA9309-964B-4C1C-8B95-9C1CD80DDC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6D51D3F6-ABB3-4FFD-81D5-B3D3C29F0A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "DC05C3A1-1042-46AD-83D8-765AF4C9BCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6218A006-1F60-4E29-85CC-7D1BCBD7C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "6B863572-CECF-47DF-AF6F-C25F88200DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "59BEBB0E-8C6E-4663-9E0C-E755C2EF0041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1303D987-4A44-4F33-992E-0C7E683EC7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "1E7D8E09-D97D-45FF-9AD0-A9B0A846E600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "9D9C64FB-A613-4940-86E6-95431B907159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.000",
            "matchCriteriaId" : "B5C50D4A-EB32-4BE4-B9E6-D25494E2EF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2EF59-F451-490D-A7AF-E66D11493948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7905",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-06-30T03:29:00.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Version 5.23; SR 489 Generator Protection Relay, firmware versions prior to Version 4.06; SR 745 Transformer Protection Relay, firmware versions prior to Version 5.23; SR 369 Motor Protection Relay, all firmware versions; Multilin Universal Relay, firmware Version 6.0 and prior versions; and Multilin URplus (D90, C90, B95), all versions. Ciphertext versions of user passwords were created with a non-random initialization vector leaving them susceptible to dictionary attacks. Ciphertext of user passwords can be obtained from the front LCD panel of affected products and through issued Modbus commands."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de criptografía débil para contraseñas en General Electric (GE) Multilin SR 750 Feeder Protection Relay con versiones de firmware anteriores a la versión 7.47."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-261"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        }, {
          "lang" : "en",
          "value" : "CWE-330"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_sr_750_feeder_protection_relay_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.02",
            "matchCriteriaId" : "F9CDB455-F6F8-4976-95D2-88D21720DE88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_sr_750_feeder_protection_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E636C33-148B-4C26-96B3-CA0D1575C26D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_sr_760_feeder_protection_relay_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.02",
            "matchCriteriaId" : "FDE8714B-96AC-4A85-ADCC-D00F54803596"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_sr_760_feeder_protection_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22504FF2-C1B7-406C-B253-ED7982A624D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_sr_469_motor_protection_relay_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.90",
            "matchCriteriaId" : "9928DE28-CE5A-4AC2-A956-D128764720BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_sr_469_motor_protection_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A23088-B5C4-4B0A-9E92-12946555C8A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_sr_489_generator_protection_relay_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.53",
            "matchCriteriaId" : "8766AA67-18A8-4440-BED6-E6BBDF3EF78D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_sr_489_generator_protection_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E899C89E-89EE-4FC1-809D-E6DB04989B28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_sr_745_transformer_protection_relay_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.85",
            "matchCriteriaId" : "F032369D-581E-4FCA-85CA-B932CB1E821D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_sr_745_transformer_protection_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA36A160-426F-4911-9CF3-28E496AEDDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_sr_369_motor_protection_relay_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F15979-2C0D-4DD6-BA35-C5300EEF752D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_sr_369_motor_protection_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA749D2-FCF4-4936-84AA-EF317BB6DEEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_universal_relay_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "C329C25F-D48E-4B39-8FDB-88CE14E1D285"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_universal_relay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84392E96-D1C4-438C-ABA9-DE1384623D5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_urplus_d90_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F9ACC9-EDE7-42E8-AF34-057EA862147D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_urplus_d90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C697E8E-28F2-43F9-9B7D-0BF939B2F220"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_urplus_c90_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEF4ACF-7851-4EA2-B6E8-D60DB0BC660B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_urplus_c90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E16FE6EA-BB44-4B73-BFA5-30E1ADF5D522"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:multilin_urplus_b95_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D188B6-4ADD-4FA6-9FF4-35B813911398"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:multilin_urplus_b95:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C57507-A23D-4DF7-9D9B-3531F2235132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98063",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-117-01A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-117-01A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-30T12:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the transport encryption."
      }, {
        "lang" : "es",
        "value" : "Existe un oráculo de relleno en OSCI-Transport 1.2, tal y como se emplea en OSCI Transport Library 1.6.1 (Java) y OSCI Transport Library 1.6 (.NET). Bajo una condición MitM en la infraestructura OSCI, un atacante necesita enviar mensajes de protocolo manipulados para analizar el relleno del modo CBC para descifrar el cifrado de transporte."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoev:osci_transport_library:1.6:*:*:*:.net:*:*:*",
            "matchCriteriaId" : "BC7159A3-28E0-4AE2-A2A5-7B5F44D7305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoev:osci_transport_library:1.6.1:*:*:*:java:*:*:*",
            "matchCriteriaId" : "7F00B66D-46D7-4D58-A1A0-7BA1AD5C0EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/44",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.sec-consult.com/2017/06/german-e-government-details-vulnerabilities.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-30T12:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs."
      }, {
        "lang" : "es",
        "value" : "Existe un envoltorio de firma en OSCI-Transport 1.2, tal y como se emplea en OSCI Transport Library 1.6.1 (Java) y OSCI Transport Library 1.6 (.NET). Un atacante con acceso a mensajes de protocolo OSCI no cifrados debe enviar mensajes de protocolo con ID duplicados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoev:osci_transport_library:1.6:*:*:*:.net:*:*:*",
            "matchCriteriaId" : "BC7159A3-28E0-4AE2-A2A5-7B5F44D7305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoev:osci_transport_library:1.6.1:*:*:*:java:*:*:*",
            "matchCriteriaId" : "7F00B66D-46D7-4D58-A1A0-7BA1AD5C0EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/44",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.sec-consult.com/2017/06/german-e-government-details-vulnerabilities.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-30T12:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de XEE (XML External Entity) en OSCI-Transport 1.2, tal y como ser emplea en OSCI Transport Library 1.6.1 (Java) y OSCI Transport Library 1.6 (.NET), explotable mediante el envío de un mensaje OSCI standard-conforming manipulado desde dentro de la infraestructura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoev:osci_transport_library:1.6:*:*:*:.net:*:*:*",
            "matchCriteriaId" : "BC7159A3-28E0-4AE2-A2A5-7B5F44D7305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoev:osci_transport_library:1.6.1:*:*:*:java:*:*:*",
            "matchCriteriaId" : "7F00B66D-46D7-4D58-A1A0-7BA1AD5C0EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/44",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.sec-consult.com/2017/06/german-e-government-details-vulnerabilities.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-30T13:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Antiy Antivirus Engine 5.0.0.06281654 allows local users to cause a denial of service (BSOD) via a long third argument in a DeviceIoControl call."
      }, {
        "lang" : "es",
        "value" : "Antiy Antivirus Engine 5.0.0.06281654 permite que usuarios locales provoquen una denegación de servicio (BSOD) mediante un tercer argumento largo en una llamada DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antiy:antivirus_engine:5.0.0.06281654:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2676F73-2B24-4FF7-AE0C-5514072EF461"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.csdn.net/wdone/article/details/73958872",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.csdn.net/wdone/article/details/73958872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-30T13:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution."
      }, {
        "lang" : "es",
        "value" : "avcodec 2.2.x, tal y como se emplea en el reproductor multimedia VideoLAN VLC en versiones 2.2.7-x anteriores a la 2017-06-29, permite una escritura en la memoria dinámica (heap) fuera de límites debido a que se llama a memcpy() con un tamaño erróneo. Esto conduce a una denegación de servicio (cierre inesperado de la aplicación) o a una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBAF91B-1BC9-4029-ADFC-506FAA3F6C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0E28DE-2CAC-42CD-A8DF-2659AA135772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F39D96-FC35-4063-BB22-2A4CA6C788D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF54451-B67D-4003-991F-8D306C5ED782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38860D21-A9DB-49CD-A8CD-3323F98D111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EC0BA2-715C-4DAD-974D-EFBD3BA51944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CAC2D1-DD94-4ED2-B8B1-DCE63422852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B8A2D0-D22A-4196-9013-D3F60CD27C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1B9AAA-11B1-4215-95B9-92236B81AC99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://trac.videolan.org/vlc/ticket/18467",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://trac.videolan.org/vlc/ticket/18467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-06-30T16:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate attackers to bypass a wrong-PIN lockout feature by pressing backspace after each PIN guess."
      }, {
        "lang" : "es",
        "value" : "La pantalla de bloqueo en dispositivos Elephone P9000 (que ejecutan Android 6.0) permiten que atacantes físicamente cercanos omitan una característica de bloqueo de PIN incorrecto pulsando retroceso tras cada adivinación de PIN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elephone:p9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5187DC73-16BD-4C15-8560-43883CFF2896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.reddit.com/r/netsec/comments/6kajkc/elephone_p9000_lock_screen_lockout_bypass_with/",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.security.nl/posting/522081/Schermvergrendeling+Elephone+P9000+door+lek+te+omzeilen",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-011/?fid=9707",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/SpiderLabs-Blog/Elephone-P9000-Lock-Screen-Lockout-Bypass/?page=1&year=0&month=0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=dwyzonP2eZw",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/netsec/comments/6kajkc/elephone_p9000_lock_screen_lockout_bypass_with/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.security.nl/posting/522081/Schermvergrendeling+Elephone+P9000+door+lek+te+omzeilen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-011/?fid=9707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/SpiderLabs-Blog/Elephone-P9000-Lock-Screen-Lockout-Bypass/?page=1&year=0&month=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=dwyzonP2eZw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8443",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-06-30T19:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs."
      }, {
        "lang" : "es",
        "value" : "En Kibana X-Pack, en versiones de seguridad anteriores a la 5.4.3, si un usuario Kibana abre una URL Kibana manipulada, el resultado podría ser una redirección a una pantalla de inicio de sesión de Kibana inicializada de forma incorrecta. Si el usuario introduce credenciales en esta pantalla, las credenciales aparecerán en la barra de URL. Las credenciales podrían ser vistas por partes no fiables o registradas en los registros de acceso de Kibana."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2",
            "matchCriteriaId" : "AC882BBF-37B0-40BD-940D-0F8B73F0DA2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2292",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2017-06-30T20:29:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the server. The fix for this is to call YAML.safe_load on input. This has been tested in all Puppet-supplied MCollective plugins, but there is a chance that third-party plugins could rely on this insecure behavior."
      }, {
        "lang" : "es",
        "value" : "YAML deserializado de las versiones anteriores a 2.10.4 de MCollective de agentes sin llamar a safe_load, permite la potencial ejecución de código arbitraria en el servidor. La solución para esto es llamar a YAML.safe_load en la entrada. Esto ha sido probado en todos los plugins de MCollective suministrados por Puppet, pero se presenta la posibilidad de que los plugins de terceros puedan confiar en este comportamiento no seguro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:mcollective:*:*:*:*:*:puppet:*:*",
            "versionEndIncluding" : "2.10.3",
            "matchCriteriaId" : "AE3E7458-2D53-48ED-8FBC-E304CCEC4B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://puppet.com/security/cve/cve-2017-2292",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-01",
        "source" : "security@puppet.com"
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2298",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2017-06-30T20:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string \"_pub.pem\"."
      }, {
        "lang" : "es",
        "value" : "El plugin mcollective-sshkey-security, en versiones anteriores a la 0.5.1 para Puppet, emplea un identificador especificado por el servidor como parte de una ruta en la que se escribe un archivo. Un servidor comprometido podría usar esto para escribir un archivo en una ubicación arbitraria en el cliente con el nombre de archivo anexado con la cadena \"_pub.pem\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:mcollective-sshkey-security:*:*:*:*:*:puppet:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "CE22D9E2-5295-4D90-835B-5A51B71C9C24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/puppetlabs/mcollective-sshkey-security/blob/0.5.1/CHANGELOG.md",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/puppetlabs/mcollective-sshkey-security/commit/3388a3109f4fb1c69fa8505e991bf59ca20d19a2",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2298",
        "source" : "security@puppet.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/puppetlabs/mcollective-sshkey-security/blob/0.5.1/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/puppetlabs/mcollective-sshkey-security/commit/3388a3109f4fb1c69fa8505e991bf59ca20d19a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-01T18:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples."
      }, {
        "lang" : "es",
        "value" : "El módulo DBD::mysql hasta la versión 4.043 para Perl, permite a atacantes remotos causar una denegación de servicio (uso de la memoria previamente liberada y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado mediante el desencadenamiento de (1) ciertas respuestas de error de un servidor MySQL o (2) una pérdida de una conexión red  en un servidor MySQL. El fallo de uso de la memoria previamente liberada se introdujo por confiar en la documentación inapropiada de mysql_stmt_close de Oracle y ejemplos de código.El módulo DBD::mysql hasta la versión 4.043 para Perl, permite a atacantes remotos causar una denegación de servicio (uso de la memoria previamente liberada y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado mediante el desencadenamiento de (1) ciertas respuestas de error de un servidor MySQL o (2) una pérdida de una conexión red  en un servidor MySQL. El fallo de uso de la memoria previamente liberada se introdujo por confiar en la documentación inapropiada de mysql_stmt_close de Oracle y ejemplos de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbd-mysql_project:dbd-mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.043",
            "matchCriteriaId" : "B381B18D-5C6F-4805-ABE8-7C07E39EC1F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/443",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99374",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/issues/120",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/issues/120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-01T18:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a \"your communication with the server will be encrypted\" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152."
      }, {
        "lang" : "es",
        "value" : "El módulo DBD::mysql hasta la versión 4.043 para Perl, usa la configuración mysql_ssl=1 para definir que SSL es opcional (aunque la documentación de esta configuración tiene una instrucción \"your communication with the server will be encrypted\"), lo que permite a atacantes de tipo man-in-the-middle suplantar servidores por medio de un ataque de degradación de texto sin cifrar, un problema relacionado con el CVE-2015-3152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbd-mysql_project:dbd-mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.043",
            "matchCriteriaId" : "B381B18D-5C6F-4805-ABE8-7C07E39EC1F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/issues/110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/issues/140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/pull/114",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/issues/110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/issues/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/perl5-dbi/DBD-mysql/pull/114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T03:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "La función _asn1_check_identifier en GNU Libtasn1 hasta la versión 4.12 provoca una desreferencia de puntero NULL y un cierre inesperado cuando se leen entradas manipuladas que desencadenan la asignación de un valor NULL en una estructura asn1_node. Esto puede dar lugar a un ataque remoto de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libtasn1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12",
            "matchCriteriaId" : "536BB341-F6FC-4417-AC6F-136EC90AADD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464141",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00026.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3547-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/06/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3547-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T03:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento entero en la función hash_int de la biblioteca libpspp en PSPP anterior a la versión 0.11.0 de GNU. Por ejemplo, fue observado un bloqueo en el código de la biblioteca al intentar convertir datos SPSS no válidos en formato CSV. Una entrada especialmente diseñada conllevará a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:pspp:0.10.5-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721E6CF7-D7E6-44F3-ADD9-93A237C75B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/pspp-announce/2017-08/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1467004",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/pspp-announce/2017-08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1467004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T03:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta una desreferencia de puntero NULL en la función ll_insert() de la biblioteca libpspp en PSPP anterior a la versión 0.11.0 de GNU. Por ejemplo, se observó un bloqueo en el código de la biblioteca al intentar convertir datos SPSS no válidos en formato CSV. Una entrada especialmente diseñada conllevará a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:pspp:0.10.5-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721E6CF7-D7E6-44F3-ADD9-93A237C75B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/pspp-announce/2017-08/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99385",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1467005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/pspp-announce/2017-08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1467005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T13:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed path length is used."
      }, {
        "lang" : "es",
        "value" : "Cuando Antiy Antivirus Engine anterior a la versión 5.0.0.05171547, analiza un archivo ZIP especial, se bloquea con un desbordamiento de búfer en la región stack de la memoria porque se utiliza una longitud de ruta (path) fija."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antiy:antivirus_engine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8495B7-77B1-4C95-A6B0-EB4CEE1A9180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.lofter.com/lpost/1d52afc9_105e13e5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.lofter.com/lpost/1d52afc9_105e13e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T13:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Subrion CMS 4.1.4 y anteriores permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el cuerpo de blog/add/. Esta vulnerabilidad es diferente de CVE-2017-6069."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F05A1-C491-428E-BF4C-29B50A719AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99378",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/467",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0377",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-07-02T15:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families."
      }, {
        "lang" : "es",
        "value" : "Las versiones 0.3.x de Tor anteriores a la 0.3.0.9 cuentan con un algoritmo de selección de restricciones que solo considera el exit relay (no la familia del exit relay), lo que podría permitir que atacantes remotos superen las propiedades de anonimato planeadas aprovechando la existencia de grandes familias."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7722805-17F9-4215-81B9-E30EE016778B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "028D39E2-0968-4B98-A9E4-60B51440175F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB26D60-528A-4E06-84A9-8B86143307DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60F7D93-611B-43F8-A3EE-874A34F912A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B332C5B-1762-48BA-BD3E-7DD2CC01F65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B815A38-5CE8-4BF3-AE6F-C11CACDBFA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6364CA-DBDA-4626-90A9-FF06A0E08619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA71B4E-8EF4-41D4-AE30-F643D2916209"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/blog/tor-0309-released-security-update-clients",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/blog/tor-0314-alpha-released-security-update-clients",
        "source" : "security@debian.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torproject/tor/commit/665baf5ed5c6186d973c46cdea165c0548027350",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/CVE-2017-0377",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/22753",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/blog/tor-0309-released-security-update-clients",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/blog/tor-0314-alpha-released-security-update-clients",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torproject/tor/commit/665baf5ed5c6186d973c46cdea165c0548027350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/CVE-2017-0377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/22753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T17:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system."
      }, {
        "lang" : "es",
        "value" : "El servidor NFSv4 en el kernel de Linux en versiones anteriores a la 4.11.3 no valida correctamente el tipo de diseño al procesar los operandos NFSv4 pNFS GETDEVICEINFO o LAYOUTGET en un paquete UDP de un atacante remoto. Este valor de tipo no se inicializa al encontrarse ciertas condiciones de error. Este valor se emplea como índice de arrays para desreferenciar, lo que conduce a un error OOPS y, finalmente, a una DoS de knfsd y a un bloqueo parcial de todo el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.1.40",
            "matchCriteriaId" : "D666D375-98D5-46EA-BE3F-818730173F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.70",
            "matchCriteriaId" : "6B6B892D-2153-4B26-A53A-2757488ABBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.30",
            "matchCriteriaId" : "05FA3C9C-F982-4407-89BC-F8936979C1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11",
            "versionEndExcluding" : "4.11.3",
            "matchCriteriaId" : "E99AAEA7-96AE-4F7C-9347-B81325B63989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b550a32e60a4941994b437a8d662432a486235a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f961e3f2acae94b727380c0b74e2d3954d0edf79",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/27/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99298",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038790",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2437",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1466329",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b550a32e60a4941994b437a8d662432a486235a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f961e3f2acae94b727380c0b74e2d3954d0edf79",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b550a32e60a4941994b437a8d662432a486235a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f961e3f2acae94b727380c0b74e2d3954d0edf79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/27/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1466329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b550a32e60a4941994b437a8d662432a486235a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f961e3f2acae94b727380c0b74e2d3954d0edf79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service."
      }, {
        "lang" : "es",
        "value" : "AeroAdmin versión 4.1, usa una función para copiar datos entre dos punteros donde el tamaño de los datos copiados se toma directamente de un paquete de red. Esto puede causar un desbordamiento de búfer y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aeroadmin:aeroadmin:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F434876-2331-4135-A82A-87B705B0C946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T17:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code in the machine."
      }, {
        "lang" : "es",
        "value" : "AeroAdmin versión 4.1, usa un protocolo no seguro (HTTP) para realizar actualizaciones de software. Un atacante puede secuestrar una actualización por medio de la técnica man-in-the-middle con el fin de ejecutar código en la máquina."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aeroadmin:aeroadmin:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F434876-2331-4135-A82A-87B705B0C946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T22:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode."
      }, {
        "lang" : "es",
        "value" : "Cuando GraphicsMagick 1.3.25 procesa una imagen RGB TIFF (con metadatos que indican una única muestra por píxel) en coders/tiff.c, ocurre un desbordamiento de búfer. Esto está relacionado con QuantumTransferMode."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C41978-F9EF-4C9A-9E52-2F1391BA684B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99355",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/code/ci/a20bee0a0ad216aa11a2be3de63b60ca6bef4106/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/code/ci/a20bee0a0ad216aa11a2be3de63b60ca6bef4106/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-02T22:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admin@yourip:554/h264_hd.sdp URL."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos NC250 con firmware hasta la versión 1.2.1 build 170515 de TP-Link, cualquier persona puede visualizar vídeo y audio sin identificación  por medio de una URL rtsp://admin@yourip:554/h264_hd.sdp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:nc250_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "BA6B3F1C-6B2A-40CC-AAED-3DCA8E5E1E41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:nc250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6A3B4E-F357-4E9F-A799-E58E0D593F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/elbauldelgeek/8f0f24c582f43f51a34b34420a385d75",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/elbauldelgeek/8f0f24c582f43f51a34b34420a385d75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T01:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage()."
      }, {
        "lang" : "es",
        "value" : "Cuando GraphicsMagick 1.3.25 procesa una imagen DPX (con metadatos que indican un gran ancho) en coders/dpx.c, puede ocurrir una denegación de servicio (OOM) en ReadDPXImage()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C41978-F9EF-4C9A-9E52-2F1391BA684B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f10b9bb3ca62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99358",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f10b9bb3ca62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T01:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data."
      }, {
        "lang" : "es",
        "value" : "Cuando GraphicsMagick 1.3.25 procesa una imagen MATLAB en coders/mat.c, puede ocurrir una denegación de servicio (OOM) en ReadMATImage() si el tamaño especificado para un objeto MAT es más grande que la cantidad real de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C41978-F9EF-4C9A-9E52-2F1391BA684B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/e5761e3a2012",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99356",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/e5761e3a2012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T03:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ObjectPlanet Opinio before 7.6.4, there is XSS."
      }, {
        "lang" : "es",
        "value" : "Hay Cross-Site Scripting (XSS) en ObjectPlanet Opinio en versiones anteriores a la 7.6.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectplanet:opinio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.3",
            "matchCriteriaId" : "BC57A53E-E5D7-41BC-A75C-6BB5E039DA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.objectplanet.com/opinio/changelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.objectplanet.com/opinio/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T16:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time comparison algorithm for secrets, which makes it easier for remote attackers to obtain sensitive user password information via a timing side-channel attack."
      }, {
        "lang" : "es",
        "value" : "Request Tracker (RT) versión 4.x anterior a 4.0.25, versión 4.2.x anterior a 4.2.14, y versión 4.4.x anterior a 4.4.2, no usa un algoritmo de comparación de tiempo constante para secretos, lo que facilita a los atacantes remotos obtener información confidencial de contraseña de usuario por medio de un ataque al canal lateral de sincronización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44234832-170D-43E0-9643-19CE57378721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CFCCD6-6C5D-41CD-B7FB-D925A46E615C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814172FB-6F34-4356-8105-70AEBE0B6F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D282AC9F-E087-4D8D-B467-1D9480B3ABDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F21EB3-8CE6-4F87-A5DE-A01AA32B943F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDB4AD7-96B5-4D72-8C51-23D744D10C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0096B700-17B5-4158-A736-ECFDF9E9935B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0AF4515-6DB1-406A-878C-6DB32D021BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54781FF6-D6DC-40A0-BE84-4D0FA3321280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8555184-9645-4A86-A342-DB2716FA4502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB4167E-E120-49E5-B41C-2ED61CEB3CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A908C589-C929-4DDB-AA04-428604BD13B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DF0A9-2C43-41FF-B0A0-D57E4D9F5451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AE7380-BD83-4CBD-B800-4ED1C9F2114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90AB565-C945-480C-A159-F0D157920C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4316AA-3412-4CE8-9757-B5A9875E5113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048340BE-7179-4DCD-9A7A-B0C91C384E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB14ADD-F24C-4122-9EDE-FCB0E7E53065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725F177A-347F-46FB-88BE-3EE8CD340A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711FB4EF-6E49-408B-A73D-5AF0E5281919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E54887-C460-4778-B570-8A86B51A7DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19B8ABA-806D-404B-8303-A487D2276B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10368C1D-3D9C-4AC8-83B7-3C17F544F533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4054F0C-ED26-4B96-AF48-7F012DFF6836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F262EE4-AF42-406C-9C56-4D0149954509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016A9A48-9F12-4842-862F-4A192DA0D924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D148F2A-F6B1-432A-9743-35BC43E86B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2445145B-A162-484D-ABDF-053C20FD7E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EE6E16-375A-42B0-AE3C-E1FB95E9F466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BF8033-9E4D-4B8B-B9E4-E992FE848F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C68D322-E453-48D5-A5FB-39C744D90858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3881CA9B-5358-4808-9041-DE3E2FC8927F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95CE3FD-5311-4644-8417-A74FF6B88458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD1F04-3D0E-4210-8039-073B28ECCD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26235782-E3A1-4D71-9E82-87DAC822D79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944E381D-8133-40D8-AE36-DB200E1B2E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6DAD64-37C7-4446-89EF-2F0B06C10050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54510C9E-1C10-4624-8915-1548AB858C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F2E28D-8798-4E1C-806C-5785E571E40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38CD098-4B4C-4942-98C3-381795ECFFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B2EEBC-1695-42B9-85BA-581BA93125FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3883",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T16:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Request Tracker (RT) versión 4.x anterior a 4.0.25, versión 4.2.x anterior a 4.2.14 y versión 4.4.x anterior a 4.4.2, permite a atacantes remotos obtener información confidencial sobre los tokens de verificación de problemas de tipo cross-site request forgery (CSRF) por medio de una URL creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44234832-170D-43E0-9643-19CE57378721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CFCCD6-6C5D-41CD-B7FB-D925A46E615C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814172FB-6F34-4356-8105-70AEBE0B6F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D282AC9F-E087-4D8D-B467-1D9480B3ABDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F21EB3-8CE6-4F87-A5DE-A01AA32B943F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDB4AD7-96B5-4D72-8C51-23D744D10C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0096B700-17B5-4158-A736-ECFDF9E9935B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0AF4515-6DB1-406A-878C-6DB32D021BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54781FF6-D6DC-40A0-BE84-4D0FA3321280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8555184-9645-4A86-A342-DB2716FA4502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB4167E-E120-49E5-B41C-2ED61CEB3CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A908C589-C929-4DDB-AA04-428604BD13B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DF0A9-2C43-41FF-B0A0-D57E4D9F5451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AE7380-BD83-4CBD-B800-4ED1C9F2114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90AB565-C945-480C-A159-F0D157920C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4316AA-3412-4CE8-9757-B5A9875E5113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048340BE-7179-4DCD-9A7A-B0C91C384E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB14ADD-F24C-4122-9EDE-FCB0E7E53065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725F177A-347F-46FB-88BE-3EE8CD340A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711FB4EF-6E49-408B-A73D-5AF0E5281919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E54887-C460-4778-B570-8A86B51A7DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19B8ABA-806D-404B-8303-A487D2276B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10368C1D-3D9C-4AC8-83B7-3C17F544F533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4054F0C-ED26-4B96-AF48-7F012DFF6836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F262EE4-AF42-406C-9C56-4D0149954509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016A9A48-9F12-4842-862F-4A192DA0D924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D148F2A-F6B1-432A-9743-35BC43E86B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2445145B-A162-484D-ABDF-053C20FD7E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EE6E16-375A-42B0-AE3C-E1FB95E9F466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BF8033-9E4D-4B8B-B9E4-E992FE848F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C68D322-E453-48D5-A5FB-39C744D90858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3881CA9B-5358-4808-9041-DE3E2FC8927F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95CE3FD-5311-4644-8417-A74FF6B88458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD1F04-3D0E-4210-8039-073B28ECCD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26235782-E3A1-4D71-9E82-87DAC822D79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944E381D-8133-40D8-AE36-DB200E1B2E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6DAD64-37C7-4446-89EF-2F0B06C10050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54510C9E-1C10-4624-8915-1548AB858C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F2E28D-8798-4E1C-806C-5785E571E40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38CD098-4B4C-4942-98C3-381795ECFFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B2EEBC-1695-42B9-85BA-581BA93125FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99384",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T16:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name."
      }, {
        "lang" : "es",
        "value" : "La interfaz de subscripción del dashboard en Request Tracker (RT) versión 4.x anterior a 4.0.25, versión 4.2.x anterior a 4.2.14 y versión 4.4.x anterior a 4.4.2, podría permitir a los usuarios identificados remotos con ciertos privilegios ejecutar código arbitrario por medio de un nombre de búsqueda guardada especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44234832-170D-43E0-9643-19CE57378721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CFCCD6-6C5D-41CD-B7FB-D925A46E615C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814172FB-6F34-4356-8105-70AEBE0B6F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D282AC9F-E087-4D8D-B467-1D9480B3ABDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F21EB3-8CE6-4F87-A5DE-A01AA32B943F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDB4AD7-96B5-4D72-8C51-23D744D10C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0096B700-17B5-4158-A736-ECFDF9E9935B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0AF4515-6DB1-406A-878C-6DB32D021BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54781FF6-D6DC-40A0-BE84-4D0FA3321280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8555184-9645-4A86-A342-DB2716FA4502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB4167E-E120-49E5-B41C-2ED61CEB3CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A908C589-C929-4DDB-AA04-428604BD13B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DF0A9-2C43-41FF-B0A0-D57E4D9F5451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AE7380-BD83-4CBD-B800-4ED1C9F2114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90AB565-C945-480C-A159-F0D157920C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4316AA-3412-4CE8-9757-B5A9875E5113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048340BE-7179-4DCD-9A7A-B0C91C384E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB14ADD-F24C-4122-9EDE-FCB0E7E53065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725F177A-347F-46FB-88BE-3EE8CD340A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711FB4EF-6E49-408B-A73D-5AF0E5281919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E54887-C460-4778-B570-8A86B51A7DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19B8ABA-806D-404B-8303-A487D2276B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10368C1D-3D9C-4AC8-83B7-3C17F544F533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4054F0C-ED26-4B96-AF48-7F012DFF6836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F262EE4-AF42-406C-9C56-4D0149954509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016A9A48-9F12-4842-862F-4A192DA0D924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D148F2A-F6B1-432A-9743-35BC43E86B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2445145B-A162-484D-ABDF-053C20FD7E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EE6E16-375A-42B0-AE3C-E1FB95E9F466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BF8033-9E4D-4B8B-B9E4-E992FE848F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C68D322-E453-48D5-A5FB-39C744D90858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3881CA9B-5358-4808-9041-DE3E2FC8927F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95CE3FD-5311-4644-8417-A74FF6B88458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD1F04-3D0E-4210-8039-073B28ECCD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26235782-E3A1-4D71-9E82-87DAC822D79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944E381D-8133-40D8-AE36-DB200E1B2E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6DAD64-37C7-4446-89EF-2F0B06C10050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54510C9E-1C10-4624-8915-1548AB858C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F2E28D-8798-4E1C-806C-5785E571E40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38CD098-4B4C-4942-98C3-381795ECFFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestpractical:request_tracker:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B2EEBC-1695-42B9-85BA-581BA93125FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99381",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T16:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request."
      }, {
        "lang" : "es",
        "value" : "La interfaz administrativa para los routers RUT9XX de Teltonika (también se conoce como LuCI) con firmware versión 00.03.265 y anteriores, permite a atacantes remotos ejecutar comandos arbitrarios con privilegios root por medio de metacaracteres shell en el parámetro username en una petición de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:teltonika:rut900_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "00.03.265",
            "matchCriteriaId" : "8C23F232-784F-43BA-88CA-98A288FD5C2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:teltonika:rut900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D1E794-1212-43CC-BA30-551EE45FA646"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:teltonika:rut905_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "00.03.265",
            "matchCriteriaId" : "323FAF90-F8A2-4FFE-B79A-08CB7B56BF73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:teltonika:rut905:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C45D7FA-FA7F-426C-9905-D6A6ACBE8AC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:teltonika:rut950_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "00.03.265",
            "matchCriteriaId" : "AAE86264-F281-42DA-AA35-B6964E430684"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:teltonika:rut950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE17C85-9A69-41FB-AB96-0DCAB72309A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:teltonika:rut955_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "00.03.265",
            "matchCriteriaId" : "DF39D487-2CD1-4E9E-8323-6C5764B42B8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:teltonika:rut955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F29C3F1-DFAF-433A-8B1E-4BD2A8DF6C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nettitude/metasploit-modules/blob/master/teltonika_add_user.rb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nettitude/metasploit-modules/blob/master/teltonika_cmd_exec.rb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://labs.nettitude.com/blog/cve-2017-8116-teltonika-router-unauthenticated-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nettitude/metasploit-modules/blob/master/teltonika_add_user.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nettitude/metasploit-modules/blob/master/teltonika_cmd_exec.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://labs.nettitude.com/blog/cve-2017-8116-teltonika-router-unauthenticated-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7919",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-07-03T19:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de identificación inapropiada en XPS-Cx y XPS-Qx de Newport. Un atacante puede omitir la identificación mediante el acceso a un localizador de recursos uniformes (URL) específico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:newport:xps-cx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A990FB-0731-4118-BE14-F286FC293285"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:newport:xps-cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94349252-74AA-44EB-A9A2-E4781A3B02D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:newport:xps-qx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060C2A1A-3FB6-4F46-B507-5D3575CB4B30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:newport:xps-qx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3D83A7-D9D1-4071-A483-495BBEDF6E58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99291",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-178-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-178-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-03T19:29:00.270",
      "lastModified" : "2025-10-22T00:16:12.527",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise."
      }, {
        "lang" : "es",
        "value" : "La biblioteca Telerik.Web.UI.dll en la Interfaz de Usuario de Progress Telerik para ASP.NET AJAX anterior a la versión R2 2017 SP1 y Sitefinity anterior a la versión 10.0.6412.0, no protege apropiadamente a Telerik.Web.UI.DialogParametersEncryptionKey o MachineKey, lo que facilita para los atacantes remotos superar los mecanismos de protección criptográfica, conllevando a un perdida de MachineKey, cargas o descargas arbitrarias de archivos, XSS o un compromiso de ViewState de ASP.NET."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.6412.0",
            "matchCriteriaId" : "4BDED80D-FD15-42C1-8A1A-9D144803AFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telerik:ui_for_asp.net_ajax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017.2.503",
            "matchCriteriaId" : "ED369CB9-0CF4-4B8F-8075-E2CA3AE6D278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99965",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.telerik.com/blogs/security-alert-for-telerik-ui-for-asp.net-ajax-and-progress-sitefinity",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.telerik.com/support/kb/aspnet-ajax/details/cryptographic-weakness",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43873/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.telerik.com/blogs/security-alert-for-telerik-ui-for-asp.net-ajax-and-progress-sitefinity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.telerik.com/support/kb/aspnet-ajax/details/cryptographic-weakness",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43873/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9248",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3865",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. Affected Products: ASR 5000 Series Routers, Virtualized Packet Core (VPC) Software. More Information: CSCvc21129. Known Affected Releases: 21.1.0 21.1.M0.65601 21.1.v0. Known Fixed Releases: 21.2.A0.65754 21.1.b0.66164 21.1.V0.66014 21.1.R0.65759 21.1.M0.65749 21.1.0.66030 21.1.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente IPsec de StarOS de Cisco para  Enrutadores ASR 5000 Series de Cisco, podría permitir a un atacante no identificado remoto terminar con todos los túneles activos VPN de IPsec e impedir que se establezcan nuevos túneles, resultando en una condición de denegación de servicio (DoS). Productos afectados: Enrutadores ASR 5000 Series , Programa Virtualized Packet Core (VPC). Más información: CSCvc21129. Versiones Afectadas Conocidas: 21.1.0 21.1.M0.65601 21.1.v0. Versiones Fijas Conocidas: 21.2.A0.65754 21.1.b0.66164 21.1.V0.66014 21.1.R0.65759 21.1.M0.65749 21.1.0.66030 21.1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7931FEA-534C-4556-A41F-261A9B25CDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0_m0.64246:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BF3FCD-3A29-4939-871D-C83CC4C9F85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0_m0.64702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749454D-894D-4A57-99A1-6DC9055367BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99218",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038748",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-asr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-asr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6605",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a reflective cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc85415. Known Affected Releases: 2.1(0.800)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Identity Services Engine (ISE) de Cisco, podría permitir a un atacante remoto identificado conducir un ataque de tipo cross-site scripting (XSS) reflexivos contra un usuario de la interfaz de administración basada en web de un dispositivo afectado . Más información: CSCvc85415. Versiones Afectadas Conocidas: 2.1(0.800)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(0.800\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A653B17F-337E-4342-91EF-92483E0E8C03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99207",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038740",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6698",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de base de datos SQL de Prime Infrastructure (PI) y Evolved Programmable Network Manager (EPNM) de Cisco, podría permitir a un atacante remoto identificado impactar la confidencialidad y la integridad de la aplicación ejecutando consultas SQL arbitrarias, también se conoce como Inyección SQL. Más información: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Versiones Afectadas Conocidas: 3.1(1) 2.0(4.0.45B)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.0\\(4.0.45b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D40745-3862-4132-A9B3-BDC0CF3A22AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4683305B-932A-4062-A688-C2204E0B6CB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99214",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6699",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Prime Infrastructure (PI) y Evolved Programmable Network Manager (EPNM) de Cisco, podría permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) reflejado contra un usuario de la interfaz de administración basada en web en un dispositivo afectado. Más información: CSCvc24616 CSCvc35363 CSCvc49574. Versiones Afectadas Conocidas: 3.1(1) 2.0(4.0.45B)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0\\(4.0.45b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8D62-E893-4AF6-8195-DFB7810AA6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0\\(4.0.45d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "408D3C56-EB92-4013-860B-C60AF0D03D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E28AD8-1C7F-4003-B27C-1F87B988FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F4F1D6-82DA-4675-B734-D9C5371E6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(0.128\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9CC0D0-08A5-45A0-BF1C-2D3E32D49B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD9A93C-FE79-4323-BBF1-F9B2CD559570"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99221",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6700",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) based (environment or client-side) cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24620 CSCvc49586. Known Affected Releases: 3.1(1) 2.0(4.0.45B)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Prime Infrastructure (PI) y Evolved Programmable Network Manager (EPNM) de Cisco, podría permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) reflejado contra un usuario de la interfaz de administración basada en web en un dispositivo afectado. Más información: CSCvc24616 CSCvc35363 CSCvc49574. Versiones Afectadas Conocidas: 3.1(1) 2.0(4.0.45B)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.0\\(4.0.45b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D40745-3862-4132-A9B3-BDC0CF3A22AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4683305B-932A-4062-A688-C2204E0B6CB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99216",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6701",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd49141. Known Affected Releases: 2.1(102.101)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de aplicación web del portal Identity Services Engine (ISE) de Cisco, podría permitir a un atacante remoto no autenticado conducir un ataque almacenado de tipo cross-site scripting (XSS) contra un usuario de la interfaz web de un sistema afectado. Más información: CSCvd49141. Versiones Afectadas Conocidas: 2.1(102.101)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(102.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B01C09C-3587-41F7-AAE9-4CC7B8059C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99208",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038740",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6702",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.5(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework Web de SocialMiner de Cisco, podría permitir a un atacante remoto no identificado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz web de un sistema afectado. Más información: CSCve15285. Versiones Afectadas Conocidas: 11.5(1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:socialminer:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBA712A-A9FC-4DA9-A06A-9A49A0355F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99205",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038738",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-csm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-csm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6703",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la aplicación web en la herramienta Prime Collaboration Provisioning de Cisco, podría permitir a un atacante remoto no identificado  secuestrar la sesión de otro usuario. Más información: CSCvc90346. Versiones Afectadas Conocidas: 12.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692B0971-C745-47D6-92E3-5361D4108F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DC57C2-8870-4663-830F-C6209F47DF06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.6_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE3B08D-338D-49EF-A76D-599FC36A18F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD3A6CED-EBF9-47B1-94F7-7FE63A297418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99224",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6704",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected Releases: 12.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la aplicación web en la herramienta Prime Collaboration Provisioning de Cisco, podría permitir a un atacante remoto identificado conducir descargas de archivos arbitrarias que podrían permitir que el atacante lea archivos del sistema de archivos subyacente. Más información: CSCvc90335. Versiones Afectadas Conocidas: 12.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9198A5-1367-495C-9305-3D4D0D462D49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99223",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6705",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el sistema de archivos de la herramienta Prime Collaboration Provisioning de Cisco, podría permitir a un atacante local identificado adquirir información confidencial. Más información: CSCvc82973. Versiones Afectadas Conocidas: 12.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9198A5-1367-495C-9305-3D4D0D462D49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99206",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6706",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de registro de la herramienta Prime Collaboration Provisioning de Cisco, podría permitir a un atacante local no identificado adquirir información confidencial. Más información: CSCvd07260. Versiones Afectadas Conocidas: 12.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692B0971-C745-47D6-92E3-5361D4108F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DC57C2-8870-4663-830F-C6209F47DF06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.6_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE3B08D-338D-49EF-A76D-599FC36A18F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD3A6CED-EBF9-47B1-94F7-7FE63A297418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99204",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6715",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. Affected Products: Cisco Firepower Management Center Releases 5.4.1.x and prior. More Information: CSCuy88951. Known Affected Releases: 5.4.1.6."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Firepower Management Center de Cisco, podría permitir a un atacante remoto identificado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz web. Productos afectados: Firepower Management Center de Cisco versiones 5.4.1.x y anteriores. Más información: CSCuy88951. Versiones Afectadas Conocidas:  5.4.1.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EA38C1-A34F-430A-92F7-1D299F78B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5CF68A-AAF1-4103-AD83-E2192785B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACE806-3514-4D95-85DA-BAD7245011A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1898CADB-3B2B-4A3E-86DD-23A9E1A3E40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B5ED0-0E42-45A2-BBBB-148C2BE5DD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0091657B-E242-4664-8F2F-85B8FCDF3EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D7DA95-E977-4D06-92C8-E4E8B464E1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B5C864-D82A-43BB-B193-CB9756A3B8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8E3657-BC3D-4A7D-8523-0D64F69CFE8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99209",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6716",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower Management Center Software Releases prior to 6.0.0.0. More Information: CSCuy88785. Known Affected Releases: 5.4.1.6."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código del framework web de Firepower Management Center de Cisco, podría permitir a un atacante remoto identificado conducir un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario de la interfaz web de un sistema afectado. Productos afectados: Programa Cisco Firepower Management Center versiones anteriores a 6.0.0.0. Más información: CSCuy88785. Versiones Afectadas Conocidas:  5.4.1.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "861C3411-ECAE-4772-A2E4-A75526B658D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EA38C1-A34F-430A-92F7-1D299F78B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5CF68A-AAF1-4103-AD83-E2192785B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACE806-3514-4D95-85DA-BAD7245011A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1898CADB-3B2B-4A3E-86DD-23A9E1A3E40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B5ED0-0E42-45A2-BBBB-148C2BE5DD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0091657B-E242-4664-8F2F-85B8FCDF3EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D7DA95-E977-4D06-92C8-E4E8B464E1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B5C864-D82A-43BB-B193-CB9756A3B8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8E3657-BC3D-4A7D-8523-0D64F69CFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3614E72A-667E-47F4-8D42-C1EB210E4DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99220",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6717",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. Known Fixed Releases: 6.2.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Firepower Management Center de Cisco, podría permitir a un atacante remoto identificado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz web. Más información: CSCvc38801. Versiones Afectadas Conocidas: 6.0.1.3 6.2.1. Versiones Fijas Conocidas: 6.2.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EA38C1-A34F-430A-92F7-1D299F78B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5CF68A-AAF1-4103-AD83-E2192785B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACE806-3514-4D95-85DA-BAD7245011A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1898CADB-3B2B-4A3E-86DD-23A9E1A3E40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B5ED0-0E42-45A2-BBBB-148C2BE5DD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0091657B-E242-4664-8F2F-85B8FCDF3EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D7DA95-E977-4D06-92C8-E4E8B464E1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B5C864-D82A-43BB-B193-CB9756A3B8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8E3657-BC3D-4A7D-8523-0D64F69CFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3614E72A-667E-47F4-8D42-C1EB210E4DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:5.4_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2E1AA9-8A80-489A-8A6F-E9034E7D2A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E4035-E8E2-4964-A6F4-7292E1804E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF40DB44-C213-466E-B473-B07B30A42B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FD6283-CC58-4864-AA24-F6C6DDE630FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1AFAC1-419D-4ADB-868B-1544BED58B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4EB1FD-690B-4F8C-A559-BC76CA5FDEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D184D6D-D695-48D5-90E6-95185C1D397D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554F229F-A0F5-4CA9-9778-5585E01ADF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6614ED6C-E77E-4C0D-AA96-0BEE84BE2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53316FAB-A54F-4AB8-B605-FF042B903BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEB9A40-0062-406D-B56D-3163CBBE08D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C748E1-1011-4DA3-B910-C4773DC18D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99217",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fpmc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fpmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6718",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del programa IOS XR de Cisco, podría permitir a un atacante local identificado elevar los privilegios al nivel root. Más información: CSCvb99384. Versiones Afectadas Conocidas: 6.2.1.BASE. Versiones Fijas Conocidas: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87B6885-A267-439B-AE04-CBD950BEC205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB9C848A-10AE-4662-B128-492F82B73FCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99226",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038741",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6719",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges, aka Command Injection. More Information: CSCvb99406. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del programa IOS XR de Cisco, podría permitir a un atacante local identificado ejecutar comandos arbitrarios en el sistema operativo host con privilegios root, también se conoce como Inyección de Comando. Más información: CSCvb99406. Versiones Afectadas Conocidas:  6.2.1.BASE. Versiones Fijas Conocidas: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87B6885-A267-439B-AE04-CBD950BEC205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB9C848A-10AE-4662-B128-492F82B73FCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99213",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038741",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6721",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, causing a denial of service (DoS) condition. More Information: CSCvc57428. Known Affected Releases: 6.3(1). Known Fixed Releases: 6.3(0.143) 6.2(3c)6 6.2(3.22)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de ingreso de paquetes TCP fragmentados por Wide Area Application Services (WAAS) de Cisco, podría permitir a un atacante remoto no identificado causar que el proceso WAASNET se reinicie inesperadamente, causando una condición de denegación de servicio (DoS). Más información: CSCvc57428. Versiones Afectadas Conocidas:  6.3(1). Versiones Fijas Conocidas: 6.3(0.143) 6.2(3c) 6 6.2(3.22)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9E1287-58BF-4799-85F5-270658D84083"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99200",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038747",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-waas",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-waas",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6722",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio Extensible Messaging and Presence Protocol (XMPP) de Unified Contact Center Express (UCCx) de Cisco, podría permitir a un atacante remoto no identificado hacerse pasar por un usuario legítimo, también se conoce como una Vulnerabilidad de Autenticación de Texto Sin Cifrar. Más información: CSCuw86638. Versiones Afectadas Conocidas: 10.6(1). Versiones Fijas Conocidas: 11.5(1.10000.61)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "68236DFF-B60E-4209-B9B4-AC75D393A243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:11.5.1es01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CEEC1B-272D-4C36-86C4-93B0D67C5038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:11.5.1su1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24BD150-99E4-4EE2-81E0-D9589F6D825E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99201",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038749",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ucce",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ucce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6724",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65843. Known Affected Releases: 3.1(0.0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código del framework Web de Prime Infrastructure de Cisco, podría permitir a un atacante remoto no identificado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz web de un sistema afectado. Más información: CSCuw65843. Versiones Afectadas Conocidas: 3.1(0.0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.1\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C09E9-B515-469F-86C9-C153547A9AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99203",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6725",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-04T00:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known Affected Releases: 2.2(2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código del framework Web de Prime Infrastructure de Cisco, podría permitir a un atacante remoto no identificado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz web de un sistema afectado. Más información: CSCuw65833 CSCuw65837. Versiones Afectadas Conocidas: 2.2(2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:2.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7830BF63-55ED-4D8B-B380-1E78E338EA2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99202",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T02:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos Humax Digital HG100R versión 2.0.6. Para descargar el archivo de copia de seguridad no es necesario utilizar credenciales, y las credenciales del router se almacenan en texto plano dentro de la copia de seguridad, también se conoce como GatewaySettings.bin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5103D1DB-380D-4630-A67C-D394F1AB4D43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7D3F3-97D5-44EC-81AC-D6E05A940516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/45",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T02:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos Humax Digital HG100R versión 2.0.6. Se presenta un problema de tipo XSS en la página 404."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5103D1DB-380D-4630-A67C-D394F1AB4D43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7D3F3-97D5-44EC-81AC-D6E05A940516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/45",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T02:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en los dispositivos Humax Digital HG100 versión 2.0.6. El atacante puede encontrar las credenciales root en el archivo de copia de seguridad, también se conoce como GatewaySettings.bin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5103D1DB-380D-4630-A67C-D394F1AB4D43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7D3F3-97D5-44EC-81AC-D6E05A940516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/45",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T02:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site-scripting (XSS) en Webmin anterior a la versión 1.850, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro sec en el archivo view_man.cgi, el parámetro referers en el archivo change_referers.cgi, o el parámetro name en el archivo save_user.cgi. NOTA: estos problemas no fueron corregidos en la versión 1.840."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.840",
            "matchCriteriaId" : "84CBDEDB-2FA2-47C2-BC5C-8AAFBC2ECAB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Jul/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99373",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1ab",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jul/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T15:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2.x de JabberD (también conocidas como jabberd2) anteriores a la 2.6.1 permiten que cualquiera pueda autenticarse empleando SASL ANONYMOUS, incluso cuando la opción sasl.anonymous en c2s.xml no está habilitada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberd2:jabberd2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.0",
            "matchCriteriaId" : "13A5AE8E-027E-4A71-9DEB-E242E5494F20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99511",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/867032",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jabberd2/jabberd2/commit/8416ae54ecefa670534f27a31db71d048b9c7f16",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jabberd2/jabberd2/releases/tag/jabberd-2.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/867032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jabberd2/jabberd2/commit/8416ae54ecefa670534f27a31db71d048b9c7f16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jabberd2/jabberd2/releases/tag/jabberd-2.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T18:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used."
      }, {
        "lang" : "es",
        "value" : "En Odoo versión 8.0, Odoo Community Edition versiones 9.0 y 10.0, y Odoo Enterprise Edition versiones 9.0 y 10.0, el manejo no seguro de datos de anonimización en el módulo de Anonimización de Base de Datos permite que los usuarios privilegiados identificados remotos ejecuiten código Python arbitrario, porque es utilizado unpickle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D140CBF-E659-4E87-8FEE-F19CD2E6B947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C3F9E8F1-FAF7-44AE-8D05-BE717D247EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "167C709E-C8B2-4CCB-963E-E1D8C664190A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C52F2EEB-11E5-49E8-AD06-3014FF2C2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A4405E54-6C16-49D5-B632-3D72091B2FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/odoo/odoo/issues/17898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/odoo/odoo/issues/17898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T18:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used."
      }, {
        "lang" : "es",
        "value" : "En Odoo versión 8.0, Odoo Community Edition versiones 9.0 y 10.0, y Odoo Community Edition versiones 9.0 y 10.0, los atacantes remotos pueden omitir la identificación bajo ciertas circunstancias porque los parámetros que contienen caracteres 0x00 están truncados antes de alcanzar la capa de base de datos. Esto ocurre porque es usado Psycopg versión 2.x anterior a 2.6.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D140CBF-E659-4E87-8FEE-F19CD2E6B947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C3F9E8F1-FAF7-44AE-8D05-BE717D247EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "167C709E-C8B2-4CCB-963E-E1D8C664190A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C52F2EEB-11E5-49E8-AD06-3014FF2C2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A4405E54-6C16-49D5-B632-3D72091B2FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/odoo/odoo/issues/17914",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/psycopg/psycopg2/issues/420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/odoo/odoo/issues/17914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/psycopg/psycopg2/issues/420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T18:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users."
      }, {
        "lang" : "es",
        "value" : "En Odoo versión 8.0, Odoo Community Edition versiones 9.0 y 10.0, y Odoo Enterprise Edition versiones 9.0 y 10.0, un control de acceso incorrecto en los tokens OAuth en el módulo OAuth permite a los usuarios identificados secuestrar las sesiones OAuth de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D140CBF-E659-4E87-8FEE-F19CD2E6B947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C3F9E8F1-FAF7-44AE-8D05-BE717D247EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "167C709E-C8B2-4CCB-963E-E1D8C664190A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C52F2EEB-11E5-49E8-AD06-3014FF2C2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A4405E54-6C16-49D5-B632-3D72091B2FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/odoo/odoo/issues/17921",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/odoo/odoo/issues/17921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T18:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) reflejado en TOPdesk anterior a versiones 5.7.6 y 6.x y versión 7.x anterior a 7.03.019."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.5",
            "matchCriteriaId" : "E1E0EB65-70B8-4E03-B4E0-26C72E84EEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F6959-8E9C-47DD-8430-0CD089A9F114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7CE300-DEDF-4E66-9DB4-9EB17B099DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B269D3EE-81D7-4FCE-BA7C-88A7F691F80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AC0D72-24EA-482F-A7E1-5B2F903A1D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2E0FEA-6AAD-4406-907F-B23FC946BC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B6DC6E-9AC0-442E-A4A0-C0357A2CC136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27052123-D6CD-456B-83B4-219494323447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2FCB5F-83FD-41BC-B34A-732A54CEE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.04.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52970F66-2E5B-4048-B5A0-E08F62FA9853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A016F950-4D83-42BC-A8C0-D90BD4D315B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299B2521-6BC1-4931-8AD1-FD371D00638D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A1CEDE3-43D7-4140-A538-3CD16077E897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF988D3-AC10-4147-853A-803A00FCA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D6F0F7-65C1-4986-9329-B343017DFB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BB21BB-1DB8-4C35-8997-19CBAA0F9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1960BB23-A79E-4CDE-B1EA-9CD100E06D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.05.017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB8DD5C-979A-48DF-9188-71309AE45D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66731499-8718-4917-BAE6-4E65FE0D2203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DE0B52-7934-4165-8F60-AF2E92A1CBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EFF762-E58A-4FC4-831C-420247D0BFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8408F8-8E45-4481-A1CE-DF8C8727D77C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCBBA4-84D0-46FA-A7FD-603585F42F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A3816D-B308-4328-862F-DD8FA9692C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB8D01A-30CF-4D89-B983-256E002983E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9940C-69CE-4B2C-BA7D-73DE85648402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.06.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C7ACAE-96E7-4CE2-88E5-71F997FCEB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5BBFBF-2D92-4A37-9AAF-5CA28F592011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D70499D-F794-4A1E-A58E-5E4CE3C08794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65E22AF-F619-4AC3-9180-FB9CC8A1770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B133C7C2-6BED-47E0-9F5C-B9B66D834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1AF1FBC-0D4E-45F4-B8A1-F51C4F56860B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A2FD04-54B7-4F7A-AF12-E0BC5A419643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCE5300-C226-41E1-828F-17D9EC1FBA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.07.023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB209F9-D0DA-4EFA-B758-4956B219E4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F251B7B9-E09F-445C-A20C-8EBBE87BB89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8A9F4D-649A-43FC-ABC5-6849F972C629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8864F1-1EC5-4BE6-BCA9-2A531841B4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF02D6B-4D03-47DF-9BE9-3E0C67205F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFEEFC3-9D04-4645-867F-FF5E2F954D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E914528-B569-4535-B6EC-3A551FF300AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11EEA7CE-23C3-4155-A2E0-EF57A49EB3F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.029:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6CA10B-D248-442D-A6B9-E49E88CCC346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB098139-C256-4C1C-81B1-37CECDFCCB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.031:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21C7B0E-FFFB-4579-9FB4-B615D467FAA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.033:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E9D4CC-8097-41CF-A0F1-62EB26557C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.08.034:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F464AD85-1273-44FC-B3F9-5A5D334AAD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD16DD15-85D4-4855-9826-8E696B1E41DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82337ACD-4C56-4141-B2E3-9B63F3A1FA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB89297-B96C-40AB-8246-C24CD873D0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14FCFCA-F2DB-4160-94C2-D5C2636E1A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CC181-3AB5-49B8-8F98-0DD078129C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED0AD53-2FD1-40F4-B94C-590AB9B696DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A69129-290C-47D5-A387-E4A86C2F2E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005340E1-F4B8-42AE-AE4E-7D9C44C5B0C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F697D400-CD7E-431A-89F9-9FEE6E79EC1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607AD988-D47E-4D48-BDC9-DF2C4C345C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96669DED-8332-4AF7-86B3-3B393FA70143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A85303-153C-4D8A-A110-7CAAA19F5C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1944592-EAA2-4C04-8422-4D1B36E232DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F268B1B-1F83-430A-85FF-DC5386F6139F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.09.024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88900F3-4B18-4357-A08E-64CA2C7F8F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B8220E-7A5D-4F0E-B9E7-97BC3CE56CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC35EB8-E28D-4372-82B3-E4AF6D6355B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E942F93-8ED1-4515-97D9-9BCAE8887CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E22E18F-9C24-4188-B0CF-BC29CDD91A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76065C13-C720-4728-859D-32E05666D6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB92FAC-FCC2-4348-9466-3615F85F2BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.027:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37EFEAED-6DA7-48D3-8C33-0561D375806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.037:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116DFC09-29FF-48BA-B1C9-D2115B2B5F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD98E43-CE54-4944-B9CD-167D8F69DA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.11.003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A243169F-3E4F-4FBB-868E-3829E9408A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.11.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3273E922-4856-4256-B2B5-F0286FD9C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.11.024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303B0D1F-2EDE-4571-8B4A-624A9B521657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.11.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7190CE8C-8994-4075-AB7F-CE82FF91DDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F3F042-291A-472E-BFCA-AF8D53B13A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC68728-0F65-4B5A-8341-C688E3B4A97B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FB58A1-5261-424B-A2D6-D8F5422C603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C31FC8-701B-4188-9F5C-8F07CC153452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2A7DB-4D60-4DFA-8190-A90DE43C3ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A5BD0B-D450-43AF-8132-9F1BCC6DAF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2906C4-E922-4682-BB00-FE1269D3821F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FF3669-A58B-4528-B03E-EEA3A5D7A9DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:6.12.026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9E321C-BFC3-4F3F-91DB-E8A80DE6C8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.01.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFECD3C-E36A-4DED-B910-9DA384EE36DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.01.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB320F1-6018-4172-85E8-4CB3BDCDA5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.01.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40296E8C-9B2C-4118-BE94-2CAF399206E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.01.024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A5EA8E-0CDA-4246-BE8A-24F4EB606224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.02.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F311747D-B39D-4451-A954-27777F33C52D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.02.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E753FF5A-39B5-42CB-8068-11C5EFA2DFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.02.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D91233-F5BB-4CF8-957D-9B9E40C7BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.02.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE6A875-62B1-4A6E-AECE-EC18CA814C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.02.021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2CB23B-6499-40FA-BDA6-033FD5352DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.03.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360186CC-ACF4-4DF8-8395-7800A8CC4684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.03.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1203B5-B7C8-4068-A2A0-87770769C5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.03.018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D1DDEC-698E-4EF5-A8CF-71E9A9556977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.03.019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D387423-2AC3-4685-A8D7-F2C13CA60BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.03.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32333BF-D653-4A08-AFDE-B61D4A33E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.03.022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF73EE-AA85-4191-8FA1-4B4D60353D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.04.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F4134-4680-4083-B903-BCE2A1206BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.04.004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64192FB1-F67D-43E4-9438-183FC79BE29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.04.019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BB5654-9803-4A5E-956D-F8ED676A1F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.04.021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30159F54-0E82-477C-9313-F7D01989EA24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.04.023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66259B8B-AAE0-419C-868E-7DC8D1B22AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.05.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A49668-EE66-45EC-AFB2-DF3C578435B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.05.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43E0603-62E1-4AE0-BD05-1CE74106B8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.05.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E30E048-B9DF-40F4-8F34-0E29775B9F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.05.023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACE6A4B-B479-4FA7-AECB-A03CA60C7BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.06.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "774D5DC3-4843-4667-B308-64970314F889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.06.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F46B5D-A827-4DC5-AF49-92FA72788704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.06.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B4B7DD-F763-4E8A-8A47-8D109DFD9993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.06.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA68C4D-1F9A-4388-B930-D437E579A5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topdesk:topdesk:7.06.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C8890A-CFE3-42F2-A615-38D83F14EE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://page.topdesk.com/cve-2017-7276",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://page.topdesk.com/cve-2017-7276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-04T20:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures."
      }, {
        "lang" : "es",
        "value" : "Una fuga de memoria en la función virtio_gpu_object_create en drivers/gpu/drm/virtio/virtgpu_object.c en el kernel de Linux hasta la versión 4.11.8 permite que atacantes provoquen una denegación de servicio (consumo de memoria) desencadenando fallos de inicialización de objetos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.77",
            "matchCriteriaId" : "F09881FD-5BBD-4E0F-88C0-C795EE420DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.37",
            "matchCriteriaId" : "86853D2B-E143-47D3-9419-39AB1F0960D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.10",
            "matchCriteriaId" : "EE4EAA36-3647-4C48-8C52-857C95CAD243"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99433",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/6/668",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/6/668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216."
      }, {
        "lang" : "es",
        "value" : "La función make_response en el archivo drivers/block/xen-blkback/blkback.c en el kernel de Linux anterior a versión 4.11.8, permite a los usuarios del sistema operativo invitado obtener información confidencial de la memoria del kernel del sistema operativo host (u otro sistema operativo invitado) mediante el aprovechamiento de la copia de campos de relleno no inicializados en estructuras de respuesta de la interfaz del bloque Xen, también se conoce como XSA-216."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.7",
            "matchCriteriaId" : "5556BED7-53AD-4C99-8470-F833F13AB73C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=089bc0143f489bd3a4578bdff5f4ca68fb26f341",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99162",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038720",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/089bc0143f489bd3a4578bdff5f4ca68fb26f341",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-216.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=089bc0143f489bd3a4578bdff5f4ca68fb26f341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/089bc0143f489bd3a4578bdff5f4ca68fb26f341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217."
      }, {
        "lang" : "es",
        "value" : "Xen, hasta las versiones 4.8.x, gestiona de manera incorrecta la transferencia de páginas, lo que permite que los usuarios invitados del sistema operativo obtengan acceso privilegiado al sistema operativo. Esto también se conoce como XSA-217."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-217.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-217.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1."
      }, {
        "lang" : "es",
        "value" : "La característica de tabla grant en Xen, hasta las versiones 4.8.x, ofrece información de mapeo falsa en ciertos casos de llamadas simultáneas de desasignación, lo que permite que atacantes del backend obtengan información sensible o adquieran privilegios. Esto también se conoce como XSA-218, fallo 1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99411",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-218.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2."
      }, {
        "lang" : "es",
        "value" : "La característica de tabla grant en Xen, hasta las versiones 4.8.x, incluye una condición de carrera que da lugar a una doble liberación (double free). Esto permite que los usuarios invitados del sistema operativo provoquen una denegación de servicio (consumo de memoria) o que, probablemente, obtengan información sensible o adquieran privilegios. Esto también se conoce como XSA-218, fallo 2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99411",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-218.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219."
      }, {
        "lang" : "es",
        "value" : "La característica de shadow-paging en Xen, hasta las versiones 4.8.x, gestiona de manera incorrecta referencias de páginas y, en consecuencia, introduce una condición de carrera, lo que permite que los usuarios invitados del sistema operativo obtengan privilegios Xen. Esto también se conoce como XSA-219."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99174",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-219.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-219.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220."
      }, {
        "lang" : "es",
        "value" : "La implementación context-switch de vCPU en Xen hasta la versión 4.8.x, interactúa inapropiadamente con las funcionalidades Memory Protection Extensions (MPX) y Protection Key (PKU), lo que facilita a los usuarios del sistema operativo invitado superar a la ASLR y a otros mecanismos de protección, también se conoce como XSA-220."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CCECD0-C0F9-45A8-8699-64428637EBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED340C-6746-471E-9F2D-19D62D224B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DA3D28-EAE7-4EC9-977C-444A46CBD9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE1F484-23B4-4CCC-AD23-6F8BDC312CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-220.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221."
      }, {
        "lang" : "es",
        "value" : "Xen hasta la versión 4.8.x, no comprueba los números de puerto de los puertos del canal de eventos sondeados, lo que permite a los usuarios del sistema operativo invitado causar una denegación de servicio (desreferencia del puntero NULL y bloqueo del sistema operativo del host) o posiblemente obtener información confidencial, también se conoce como XSA-221."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-221.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222."
      }, {
        "lang" : "es",
        "value" : "Xen, hasta las versiones 4.8.x, no valida las asignaciones de memoria durante ciertas operaciones de P2M, lo que permite que los usuarios invitados del sistema operativo obtengan acceso privilegiado al sistema operativo. Esto también se conoce como XSA-222."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99161",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-222.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-222.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223."
      }, {
        "lang" : "es",
        "value" : "Xen hasta la versión 4.8.x, maneja inapropiadamente la inyección de interrupción virtual, que permite a los usuarios del sistema operativo invitado causar una denegación de servicio (bloqueo del hypervisor), también se conoce como XSA-223."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99159",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-223.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1."
      }, {
        "lang" : "es",
        "value" : "La característica de tabla grant en Xen, hasta las versiones 4.8.x, gestiona de manera incorrecta un mapeo de GNTMAP_device_map y GNTMAP_host_map cuando este va seguido únicamente de una desasignación (unmapping) de GNTMAP_host_map, lo que permite que los usuarios invitados del sistema operativo provoquen una denegación de servicio (mala gestión del conteo y corrupción de memoria) u obtengan privilegios de acceso al sistema operativo anfitrión. Esto también se conoce como XSA-224, fallo 1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-224.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2."
      }, {
        "lang" : "es",
        "value" : "La característica de tabla grant en Xen, hasta las versiones 4.8.x, no asegura que se realicen los conteos de tipos suficientes para un mapeo de GNTMAP_device_map y GNTMAP_host_map, lo que permite que los usuarios invitados del sistema operativo provoquen una denegación de servicio (mala gestión del conteo y corrupción de memoria) u obtengan privilegios de acceso al sistema operativo anfitrión. Esto también se conoce como XSA-224, fallo 2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-224.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3."
      }, {
        "lang" : "es",
        "value" : "La característica de tabla grant en Xen, hasta las versiones 4.8.x, gestiona de manera incorrecta referencias grant de la región MMIO, lo que permite que los usuarios invitados de sistema operativo provoquen una denegación de servicio (pérdida de trazabilidad de grant, también conocido como XSA-224, fallo 3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7494A471-EEFC-44F4-96B1-FDBA3B780313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-224.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T01:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225."
      }, {
        "lang" : "es",
        "value" : "Xen hasta la versión 4.8.x, no comprueba un índice de matriz vCPU sobre el envío de un SGI, lo que permite a los usuarios del sistema operativo invitado causar una denegación de servicio (bloqueo del hypervisor), también se conoce como XSA-225."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE1F484-23B4-4CCC-AD23-6F8BDC312CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99160",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038735",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-225.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T11:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.6-0, una lectura excesiva del búfer en la región heap de la memoria en la función GetNextToken en el archivo token.c permite a atacantes remotos obtener información confidencial de la memoria del proceso o posiblemente tener otro impacto no especificado por medio de un documento SVG especialmente diseñado que se maneja inapropiadamente en la función GetUserSpaceCoordinateValue en el archivo coders/svg.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99480",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T12:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02."
      }, {
        "lang" : "es",
        "value" : "La función grub_memmove en el archivo shlr/grub/kern/misc.c en radare2 versión 1.5.0, permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región heap de la memoria y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo binario creado, posiblemente relacionado con un desbordamiento de lectura en la función grub_disk_read_small_real en el archivo kern/disk.c en GNU GRUB versión 2.02."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6336FC-AB50-4F45-B01E-2BC3BA758117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99608",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/c57997e76ec70862174a1b3b3aeb62a6f8570e85",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7855",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/c57997e76ec70862174a1b3b3aeb62a6f8570e85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/7855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1217",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T13:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123857"
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal 8.5 y 9.9 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a usuarios incrustar código Javascript aleatorio en la interfaz web lo que alteraría la funcionalidad planeada y potencialmente llevando a la revelación de las credenciales dentro de una session confiable. IBM X-Force ID: 123857"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97CDB5F-2EA4-41E8-857B-5D76004C60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC1C53-61B8-41EC-B99D-1100D29F3992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004348",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99350",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038797",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123857",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1256",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T13:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124678"
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 y 10.1 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a usuarios incrustar código Javascript aleatorio en la interfaz web lo que alterará la funcionalidad planeada potencialmente llevando a la revelación de las credenciales dentro de una sesión confiable. IBM X-Force ID: 124678"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004461",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99376",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124678",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1258",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T13:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685"
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 y 10.1 no lleva a cabo un chequeo de la autentificación para los recursos críticos o funcionalidades permitiendo a usuarios anónimos acceder a áreas protegidas. IBM X-Force ID: 124685"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004309",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99377",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124685",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1269",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T13:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 124744"
      }, {
        "lang" : "es",
        "value" : "Security Guardium versiones 10.0 y 10.1 de IBM, es vulnerable a la inyección SQL. Un atacante remoto podría enviar sentencias SQL especialmente especialmente diseñadas, que podrían permitirle visualizar, agregar, modificar o eliminar información en la base de datos back-end. ID de IBM X-force: 124744"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004462",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99361",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124744",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2294",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2017-07-05T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive (a feature added in Puppet 4.6), so key values could be logged and stored in PuppetDB. These releases use the sensitive data type to ensure this won't happen anymore."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Puppet Enterprise anteriores a 2016.4.5 o 2017.2.1, no pudieron marcar las claves privadas del servidor MCollective como confidenciales (una funcionalidad agregada en Puppet versión 4.6), ya que los valores de clave podrían ser registrados y almacenados en PuppetDB. Estas versiones utilizan el tipo de datos confidenciales para garantizar que esto no suceda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016.4.3",
            "matchCriteriaId" : "A3D96E39-2262-4B4A-9EB7-21FC96B500FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2016.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299ACFD1-609F-42CA-B0E5-F7B54A1ACBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2016.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1540BC44-B4EB-4CF9-88DD-EECD855F6BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1364714C-1FD3-4195-BD35-548544EB6424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F91CE9-C65E-4E6E-85C0-FAF898DE0064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://puppet.com/security/cve/cve-2017-2294",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2295",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2017-07-05T15:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Puppet anteriores a la 4.10.1 deserializarán datos \"off the wire\" (del agente al servidor, en este caso) con un formato especificado por el atacante. Esto podría emplearse para forzar la deserialización YAML de forma no segura, lo que conduciría a la ejecución remota de código. Este cambio limita el formato de los datos on the wire a PSON o a YAML descodificado de forma segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.0",
            "matchCriteriaId" : "6953B786-3CDF-48D0-AE6A-1B3924431986"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3862",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98582",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2295",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1113",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121151."
      }, {
        "lang" : "es",
        "value" : "Rational Team Concert (RTC) versiones 4.0, 5.0 y 6.0 de IBM , es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, y por lo tanto, alterar la funcionalidad deseada que podría conllevar a la revelación de credenciales dentro de una sesión segura. ID de IBM X-Force: 121151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7E81B-DA97-4545-9C78-962E5FE9202D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2500F56F-C615-4836-9F6E-44985F898E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D790D42-7B73-40A6-BF0E-630099FB97E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABBECCB-F0B9-4D45-9372-6F313F841FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDFE57E-7905-4DC8-93FC-CAE5BC070790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBEB328-08B8-41ED-8D80-748948CB2BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004611",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99352",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038912",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121151",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1175",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T17:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297."
      }, {
        "lang" : "es",
        "value" : "IBM Máximo Asset Management 7.1, 7.5 y 7.6 es vulnerable a la inyección de sentencias SQL. Un atacante remoto podría enviar sentencias SQL especialmente modificadas, lo que permitiría al atacante ver, añadir modificar o borrar información en el back-end de la base de datos. IBM X-Force ID: 123297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE721CF9-0F75-410B-A0F4-542041E25925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F261A268-7CD0-4328-8FBB-6AC40927DDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005212",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99363",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123297",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1176",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T17:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299."
      }, {
        "lang" : "es",
        "value" : "IBM Máximo Asset Management 7.1, 7.5 y 7.6 permite a usuarios locales obtener información sensible debido a la retención inapropiada de datos de los adjuntos. IBM X-Force ID: 123299."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE721CF9-0F75-410B-A0F4-542041E25925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F261A268-7CD0-4328-8FBB-6AC40927DDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005210",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99371",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123299",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1207",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T17:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Message Broker almacena las credenciales del usuario en texto plano las cuales podrían ser leídas por un usuario local. IBM X-Force ID: 123777."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9244FCC7-99F7-4F90-99CD-12FFF5AD2514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B859DAA9-1B0E-47CE-813D-108776C3B239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458C42A-90F7-457C-AAD6-205D9893A993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFEC988-5E94-474F-9A60-966B8FA8B8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5CCF85-8149-43DB-A594-99895D94F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0D7E80-2607-4567-8D1C-2ADA32F174D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E57C58-4A30-43BE-B8CC-E6B38E67AA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C048F0-D615-49E6-9B50-22E259C02C5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279685A5-23ED-49B1-AF42-2181054B7316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725E3F95-4096-497D-8F2A-02C185ACF8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576FE339-BD08-4994-B31A-15BC521650E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C319D81D-E66B-47E6-A731-D5074314B94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0352390-F2E0-4F66-829B-79A0F210A622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6309A833-9490-494A-BE3A-BA79133BD6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97486673-4740-4F4F-8956-73C06B477096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E917E9-DE5E-482A-9A20-823DF475BE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC25F42C-82EC-44EE-94AC-E85F428460D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3797766-D2E5-4645-A793-ABA12A10CF10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005382",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99368",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123777",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1208",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123778."
      }, {
        "lang" : "es",
        "value" : "IBM Máximo Asset Management 7.1, 7.5 y 7.6 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a lo usuarios incrustar código Javascript aleatorio en la interfaz web lo que alteraría la funcionalidad planeada potencialmente llevando a la revelación de las credenciales dentro de una sesión confiable. IBM X-Force ID: 123778."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE721CF9-0F75-410B-A0F4-542041E25925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F261A268-7CD0-4328-8FBB-6AC40927DDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005243",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99367",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123778",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1096",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T18:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120656."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Reporting Service (JRS) 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 120656."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D226029-A37F-486C-9DCD-1921671F242D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83152595-8909-4AA4-A7D1-2E113A197B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103F9E24-E11F-4BAC-8EDB-86D332B9EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC8D80-8974-41F7-8225-474A9814ABD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3BEA54-9927-4117-8EB8-0D87A42198C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001007",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99353",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120656",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1144",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T18:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033."
      }, {
        "lang" : "es",
        "value" : "WebSphere Message Broker de IBM, podría permitir a un usuario local con acceso especializado impedir que el intermediario de mensajes se inicie. ID de IBM X-Force: 122033."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F93BF57-FD4F-456C-8DFD-CEF8B5AEF35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B859DAA9-1B0E-47CE-813D-108776C3B239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458C42A-90F7-457C-AAD6-205D9893A993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFEC988-5E94-474F-9A60-966B8FA8B8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5CCF85-8149-43DB-A594-99895D94F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0D7E80-2607-4567-8D1C-2ADA32F174D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E57C58-4A30-43BE-B8CC-E6B38E67AA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C048F0-D615-49E6-9B50-22E259C02C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C000DEFF-88E8-405A-B338-A956A07F66F2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9B868C-9348-4D31-95F9-FEC3D91158AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725E3F95-4096-497D-8F2A-02C185ACF8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576FE339-BD08-4994-B31A-15BC521650E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C319D81D-E66B-47E6-A731-D5074314B94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E6A5C9-29C2-458D-AA67-E74945E2012F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6309A833-9490-494A-BE3A-BA79133BD6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97486673-4740-4F4F-8956-73C06B477096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E917E9-DE5E-482A-9A20-823DF475BE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC25F42C-82EC-44EE-94AC-E85F428460D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3797766-D2E5-4645-A793-ABA12A10CF10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005383",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99365",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122033",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1157",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T18:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788."
      }, {
        "lang" : "es",
        "value" : "Jazz Reporting Service (JRS) versiones 5.0 y 6.0 de IBM, podría permitir a un atacante identificado acceder a datos de informes que deberían estar restringidos a usuarios autorizados. ID de IBM X-Force: 122788."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D226029-A37F-486C-9DCD-1921671F242D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001007",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99353",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122778",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22001007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1253",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T18:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 124633."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 permite a un usuario remoto autenticado ejecutar comandos aleatorios en el sistema. Mediante el envió de solicitudes especialmente manipuladas, un atacante podría ejecutar comando aleatorios en el sistema. IBM X-Force ID: 124633."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004426",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99372",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124633",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1254",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T18:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 es vulnerable a ataques XML External Entity Injection (XXE) cuando procesa datos XML. Un atacante remoto podría explotar esta vulnerabilidad exponiendo información altamente sensible o consumiendo recursos de memoria. IBM X-Force ID: 124634."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004463",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99366",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124634",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1264",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-05T18:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 no comprueba o al menos insuficientemente que la identidad de los actores es correcta, lo que llevaría a la exposición de los recursos o la funcionalidad a actores accidentales. IBM X-Force ID: 124739."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004425",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99369",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124739",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to \"Data from Faulting Address controls Code Flow starting at in_flv!winampGetInModule2+0x00000000000009a8.\""
      }, {
        "lang" : "es",
        "value" : "Winamp versión 5.666 Build 3516 (en x86), permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .flv creado, relacionado a \"Data from Faulting Address controls Code Flow starting at in_flv!winampGetInModule2+0x00000000000009a8.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winamp:winamp:5.666:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBE6B8F-6054-4B82-899C-49BC7F563B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10725",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to \"Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951.\""
      }, {
        "lang" : "es",
        "value" : "Winamp versión 5.666 Build 3516 (en x86), podría permitir a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .flv creado, relacionado a \"\"Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winamp:winamp:5.666:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBE6B8F-6054-4B82-899C-49BC7F563B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10726",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to \"Data from Faulting Address controls Branch Selection starting at in_mp3!DeleteAudioDecoder+0x000000000000762f.\""
      }, {
        "lang" : "es",
        "value" : "Winamp versión 5.666 Build 3516 (en x86), podría permitir a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .flv creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at in_mp3!DeleteAudioDecoder+0x000000000000762f.\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winamp:winamp:5.666:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBE6B8F-6054-4B82-899C-49BC7F563B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10727",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "Winamp versión 5.666 Build 3516 (en x86), podría permitir a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .flv creado, relacionado a el \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winamp:winamp:5.666:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBE6B8F-6054-4B82-899C-49BC7F563B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10728",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10729",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10730",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d80.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d80.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10731",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a  \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10732",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a  \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10733",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to an \"Invalid Handle starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a un \"Invalid Handle starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10734",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10735",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at msvcrt!_VEC_memzero+0x000000000000006a.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at msvcrt!_VEC_memzero+0x000000000000006a.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10736",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10737",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a una \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000000c1b541c called from xnview+0x00000000003826ec.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a una \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000000c1b541c called from xnview+0x00000000003826ec.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10739",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at ntdll_77df0000!RtlRbInsertNodeEx+0x000000000000002d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at ntdll_77df0000!RtlRbInsertNodeEx+0x000000000000002d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10740",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10741",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from ntdll_77df0000!LdrxCallInitRoutine+0x0000000000000016.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a una  \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from ntdll_77df0000!LdrxCallInitRoutine+0x0000000000000016.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10742",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpInitializeNode+0x000000000000015b.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a  \"Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpInitializeNode+0x000000000000015b.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10743",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x0000000000000032.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a una \"Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x0000000000000032.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10744",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!RtlProcessFlsData+0x00000000000000b0.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!RtlProcessFlsData+0x00000000000000b0.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10746",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at xnview+0x000000000037a8aa.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at xnview+0x000000000037a8aa.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10747",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV starting at xnview+0x000000000022bf8d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV starting at xnview+0x000000000022bf8d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10748",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un \"User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10749",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a \"User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un  \"User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10750",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a  \"Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10751",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10752",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10753",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10754",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10755",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x0000000000000046.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x0000000000000046.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10756",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10757",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10758",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInsertDependencyRecord+0x0000000000000039.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInsertDependencyRecord+0x0000000000000039\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10759",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente no especificado otro impacto por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10761",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10762",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10763",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at COMCTL32!Tab_OnGetItem+0x000000000000002f.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente no especificado otro impacto por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at COMCTL32!Tab_OnGetItem+0x000000000000002f\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10764",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x0000000000000050.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x0000000000000050\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10765",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:01.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpInsertFreeBlock+0x00000000000001ca.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpInsertFreeBlock+0x00000000000001ca\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10768",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018\" (without RPC initialization)."
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018\" (sin inicialización RPC)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x000000000000053a.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x000000000000053a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10770",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x0000000000000510.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x0000000000000510\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10771",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018\" (with RPC initialization)."
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018\" (con inicialización RPC)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10772",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at MSCTF!_CtfImeCreateThreadMgr+0x00000000000000a8.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at MSCTF!_CtfImeCreateThreadMgr+0x00000000000000a8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10774",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a \"Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a una \"Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a \"Read Access Violation starting at ntdll_77df0000!LdrShutdownProcess+0x0000000000000130.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a una \"Read Access Violation starting at ntdll_77df0000!LdrShutdownProcess+0x0000000000000130\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10776",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10777",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000233125.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000233125\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10778",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000013a20.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000013a20\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10780",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x00000000000000a5.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x00000000000000a5\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10781",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10782",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x0000000000000393.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .rle creado, relacionado a \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x0000000000000393\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 (32bit) with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a529.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.47, permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx creado, relacionado a un \"User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a529\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127D6786-6C65-4E9B-9842-C8F1B0E177E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b3ae.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.47, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .fpx creado, relacionado a \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b3ae\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127D6786-6C65-4E9B-9842-C8F1B0E177E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a \"Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.47, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .fpx creado, relacionado a una \"Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127D6786-6C65-4E9B-9842-C8F1B0E177E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, because of a \"User Mode Write AV near NULL\" in WinDjView.exe. One threat model is a victim who obtains an untrusted .djvu file from a remote location and issues several user-defined commands."
      }, {
        "lang" : "es",
        "value" : "WinDjView 2.1 podría permitir que atacantes ayudados por un usuario ejecuten código arbitrario mediante un archivo .djvu manipulado. Esto se debe a un \"User Mode Write AV near NULL\" en WinDjView.exe.\nUn modelo de amenaza es una víctima que obtiene un archivo .djvu no fiable de una localización remota y envía varios comandos \"zoom in\", por ejemplo, Ctrl + \"+\" (símbolo más)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windjview_project:windjview:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E350B-16F7-4C3C-BCA3-739D8CA07107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7894",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in \"Browser\" mode, because of a \"User Mode Write AV near NULL\" in XnView.exe."
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40,  permite a atacantes remotos asistidos por el usuario ejecutar código por medio de un archivo .mov especialmente diseñado que se maneja inapropiadamente durante la apertura de un directorio en modo \"Browser\", debido a un \"User Mode Write AV near NULL\" en el archivo XnView.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8282",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as demonstrated by Ctrl-A, Delete, and Ctrl-Z."
      }, {
        "lang" : "es",
        "value" : "Sublime Text versión 3 Build 3126, permite a atacantes asistidos por el usuario causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .mkv especialmente diseñado. Un modelo de amenaza es una víctima que obtiene un archivo especialmente diseñado no seguro  desde una ubicación remota y emite varios comandos definidos por el usuario, como es demostrado por Ctrl-A, Delete y Ctrl-Z."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sublimetext:sublime_text_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311A202F-CD34-4288-B405-FE9F529883EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SublimeTextIssues/Core/issues/1700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8368",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SublimeTextIssues/Core/issues/1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) has a \"Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x00000000000002f3\" issue, which might allow attackers to execute arbitrary code via a crafted file."
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), presenta un problema de \"Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x00000000000002f3\", lo que podría permitir a atacantes ejecutar código arbitrario por medio de un archivo especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8369",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service (Heap Corruption and application crash) in processing a FlashPix (.FPX) file, a different vulnerability than CVE-2017-7721."
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.45, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de Heap y bloqueo de aplicación) al procesar un archivo FlashPix (.FPX), una vulnerabilidad diferente a la CVE-2017-7721."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15960D98-8603-4AD4-944B-83FF6FC45E7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in \"Browser\" mode, because of a \"User Mode Write AV near NULL\" in XnView.exe."
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite que los atacantes remotos asistidos por el usuario ejecuten código por medio de un archivo .mkv especialmente diseñado que se maneja inapropiadamente durante la apertura de un directorio en el modo \"Browser\", debido a un \"User Mode Write AV near NULL\" en el archivo XnView.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8381",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer version 1.6.375 might allow user-assisted attackers to execute code via a crafted file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands including Ctrl-+ commands."
      }, {
        "lang" : "es",
        "value" : "STDU Viewer en su versión 1.6.375 podría permitir que atacantes ayudados por un usuario ejecuten código mediante un archivo manipulado. Un modelo de amenaza es una víctima que obtiene un archivo manipulado no fiable de una localización remota y envía varios comandos definidos por el usuario, incluyendo comandos Ctrl-+."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8387",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:02.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SWFTools 2013-04-09-1007 on Windows has a \"Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x0000000000003e71\" issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS (Access Violation)."
      }, {
        "lang" : "es",
        "value" : "SWFTools 2013-04-09-1007 en Windows tiene un problema de \"Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x0000000000003e71\". Este problema puede ser desencadenado por un archivo TTF mal formado que no es manipulado correctamente por font2swf. Los atacantes podrían explotar este problema para provocar DoS (violación de acceso)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:2013-04-09-1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAED5A1E-D73B-4B83-9918-0ABD7F905B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8420",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) allows remote attackers to execute code via a crafted .mov file, because of a \"User Mode Write AV near NULL\" issue."
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), permite a atacantes remotos ejecutar código por medio de un archivo .mov especialmente diseñado, debido a un problema de \"User Mode Write AV near NULL\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in \"Browser\" mode, because of a \"Stack Buffer Overrun\" issue."
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a atacantes remotos asistidos por el usuario ejecutar código por medio de un archivo JPEG 2000 especialmente diseñado que se maneja inapropiadamente durante la apertura de un directorio en el modo \"Browser\", debido a un problema de \"Stack Buffer Overrun\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8781",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer 6.2 has a \"Data from Faulting Address may be used as a return value\" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versión 6.2, presenta un problema de \"Data from Faulting Address may be used as a return value\" . Este problema puede ser activado con un archivo JPEG 2000 malformado que es manejado inapropiadamente por el archivo FSViewer.exe. Los atacantes podrían explotar este problema para una DoS (Violación de Acceso) o posiblemente otro impacto no especificado.versión 6.2, presenta un problema de \"Data from Faulting Address may be used as a return value\" . Este problema puede ser activado con un archivo JPEG 2000 malformado que es manejado inapropiadamente por el archivo FSViewer.exe. Los atacantes podrían explotar este problema para una DoS (Violación de Acceso) o posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14D7F39-6197-414E-A08E-BDD7DA84A5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8785",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a \"Data from Faulting Address controls Code Flow\" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands."
      }, {
        "lang" : "es",
        "value" : "Notepad++ versión 7.3.3 (en 32 bits) con Plugin Hex Editor versión v0.9.5, podría permitir a atacantes asistidos por el usuario ejecutar código por medio de un archivo especialmente diseñado, debido a un problema de \"Data from Faulting Address controls Code Flow\". Un modelo de amenaza es una víctima que obtiene un archivo especialmente diseñado no seguro  desde una ubicación remota y emite varios comandos definidos por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mh-nexus:hex_editor:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B509DA34-893C-4675-B52F-82AE870D45AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:notepad-plus-plus:notepad\\+\\+:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D50C0BD-CB4A-44D3-BCCA-22537296266D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8803",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer 6.2 has a \"User Mode Write AV\" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versión 6.2, presenta un problema de \"User Mode Write AV\", posiblemente relacionado con la función jpeg_mem_term en el archivo jmemnobs.c en biblioteca libjpeg. Este problema puede ser activado con un archivo JPEG malformado que es manejado inapropiadamente por el archivo FSViewer.exe. Los atacantes podrían aprovechar  este problema para una DoS (Violación de Acceso) o posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14D7F39-6197-414E-A08E-BDD7DA84A5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8826",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000000f53.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000000f53\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9528",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"User Mode Write AV starting at Xfpx+0x0000000000004efd.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows versión 2.40, permite a atacantes remotos ejecutar código por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at Xfpx+0x0000000000004efd.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9529",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000150.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits), podría permitir a atacantes causar una denegación de servicio o ejecutar código arbitrario por medio de un archivo especialmente diseñado, relacionado a \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000150.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.50",
            "matchCriteriaId" : "67D03B62-C25C-424A-9D46-7E5B7B7E1F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9530",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX+0x000000000000176c.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX+0x000000000000176c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9531",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX+0x0000000000001555.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX+0x0000000000001555.\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9532",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!DE_Decode+0x0000000000000a9b.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX!DE_Decode+0x0000000000000a9b.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9533",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9534",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000016e53.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000016e53\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9535",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x00000000000014eb.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a una \"Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x00000000000014eb.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9536",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a una \"Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9873",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000007822.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000007822.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9874",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"User Mode Write AV starting at FPX!DE_Decode+0x0000000000000cdb.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.46, permite a atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .fpx especialmente diseñado, relacionado a un \"User Mode Write AV starting at FPX!DE_Decode+0x0000000000000cdb.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9875",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c995.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flow comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c995.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9876",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c998.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a un atacante ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"datos de Faulting Address controls Code Flow comenzado en FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c998.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9877",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c99a.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a un atacante ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation en Control Flow comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c99a.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to \"Data from Faulting Address controls subsequent Write Address starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a525.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite atacantes ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls subsecuente a Wtrite Address comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a525.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9879",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007236.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin 4.46 permite a atacantes ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flow comenzando en FPX+0x0000000000007236.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9880",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x00000000000014e7.\""
      }, {
        "lang" : "es",
        "value" : "Irfanview en su versión 4.44 (32bit) con el plugin FPX 4.46 permite atacantes ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls code Flow comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x00000000000014e7.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9881",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a \"Read Access Violation on Block Data Move starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b84f.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation en Block Data Move comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b84f.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacante ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flow comenzando en FPX+0x0000000000007216.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9883",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado relacionado a \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9884",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:03.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000006a98.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado Faulting Address es usado como uno o mas argumentos en una subsecuencia Function Call comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x0000000000006a98.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9885",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX+0x000000000000688d.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address es usado como uno o mas argumentos en una subsecuencia Function Call comenzando en FPX+0x000000000000688d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9887",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at FPX!FPX_GetScanDevicePropertyGroup+0x00000000000031a0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Branch Selection comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x00000000000031a0.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a \"Read Access Violation starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000003714.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x0000000000003714.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a \"Read Access Violation starting at FPX+0x000000000000153a.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation comenzando en FPX+0x000000000000153a.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9890",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000007053.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante la manipulación de un archivo .fpx, relacionado a \"Data from Faulting Address es used como uno o mas argumentos en una subsecuencia Function Call comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x0000000000007053.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9891",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x0000000000000393.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante la manipulación de un archivo .fpx, relacionado a \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77df0000!RtlpFreeHeap+0x0000000000000393.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:fpx:4.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB388CE0-44E9-4B29-9632-702F0FB98774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9892",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"User Mode Write AV comenzado en Xfpx!gffGetFormatInfo+0x0000000000012548.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9893",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"User Mode Write AV comenzado en Xfpx!gffGetFormatInfo+0x0000000000029272.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9894",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e95.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation on Control Flow comenzado en Xfpx!gffGetFormatInfo+0x0000000000020e95.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9895",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation on Control Flow comenzado en Xfpx!gffGetFormatInfo+0x0000000000013e8a.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9896",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"User Mode Write AV starting at Xfpx+0x000000000000dcab.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"User Mode Write AV comenzado en Xfpx+0x000000000000dcab.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9897",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a \"User Mode Write AV starting at Xfpx+0x0000000000004cbb.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"User Mode Write AV comenzado en Xfpx+0x0000000000004cbb.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flaw comenzando en Xfpx!gffGetFormatInfo+0x000000000002e388.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9899",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flow comenzado en Xfpx!gffGetFormatInfo+0x000000000002e385.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9900",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to \"Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls subsequent Write Address comenzado en Xfpx!gffGetFormatInfo+0x000000000002bfd5.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9901",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flow comenzado en Xfpx!gffGetFormatInfo+0x0000000000020e91.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9902",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to \"Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos ejecutar código mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Code Flow comenzado en Xfpx+0x00000000000117ff.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante una archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9904",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at Xfpx!gffGetFormatInfo+0x00000000000228e8.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante una archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Branch Selection comenzando en Xfpx!gffGetFormatInfo+0x00000000000228e8.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9905",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx!gffGetFormatInfo+0x0000000000028508.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante una archivo .fpx manipulado, relacionado a \"Data from Faulting Address es usado como uno o más argumentos en una subsecuencia Function Call comenzando en Xfpx!gffGetFormatInfo+0x0000000000028508.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9906",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante una archivo .fpx manipulado, relacionado a \"Possible Stack Corruption comenzando en Xfpx!gffGetFormatInfo+0x0000000000022e1f.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9907",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a \"Read Access Violation starting at Xfpx+0x000000000000d6da.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Read Access Violation comenzado en Xfpx+0x000000000000d6da.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9908",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlAddAccessAllowedAce+0x000000000000027a.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Branch Selection comenzado en ntdll_77df0000!RtlAddAccessAllowedAce+0x000000000000027a.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9909",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an \"Error Code (0xc000041d) starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Error Code (0xc000041d) comenzado en wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9910",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx+0x0000000000010e81.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address es usado como un o mas argumentos en una subsecuencia Function Call comenzando en Xfpx+0x0000000000010e81.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:04.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x0000000000000393.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante una archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77df0000!RtlpFreeHeap+0x0000000000000393.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!TpAllocCleanupGroup+0x00000000000003d7.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto provocar una denegación de servicio o la posibilidad de otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a \"Data from Faulting Address controls Selection comenzado en ntdll_77df0000!TpAllocCleanupGroup+0x00000000000003d7.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9913",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a \"Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite a un atacante remoto ejecutar código mediante un archivo .bie modificado, relacionado a un \"Read Access Violation en el Block Data Move que comienza en Xjbig+0x000000000000121b.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a \"Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!memcpy+0x0000000000000033.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9915",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlFreeHandle+0x00000000000001b6.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!RtlFreeHandle+0x00000000000001b6.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9916",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!RtlFreeHandle+0x0000000000000218.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!RtlFreeHandle+0x0000000000000218.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9917",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at KERNELBASE!QueryOptionalDelayLoadedAPI+0x0000000000000c42.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en KERNELBASE!QueryOptionalDelayLoadedAPI+0x0000000000000c42.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000087.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000087.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19827CE9-DE69-48A5-9889-D499A95AB906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9919",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9920",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResGetMappingSize+0x00000000000003cc.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!LdrpResGetMappingSize+0x00000000000003cc.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpCompareResourceNames_U+0x0000000000000062.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!LdrpCompareResourceNames_U+0x0000000000000062.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9922",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to \"Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a \"Data from Faulting Address controls Branch Selection que comienza en KERNELBASE!EnumResourceTypesInternal+0x0000000000000589.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:tools:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B989EB-BACF-47F8-9477-9E6F3BB91BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9923",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a \"User Mode Write AV starting at image00000000_00400000+0x000000000001b72a.\""
      }, {
        "lang" : "es",
        "value" : "En SWFTools 2013-04-09-1007 de Windows, png2swf permite a un atacante remoto ejecutar un código arbitrario o una denegación de servicio mediante un archivo manipulado, relacionado a \"User Mode Write AV el cual comienza en image00000000_00400000+0x000000000001b72a.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:2013-04-09-1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAED5A1E-D73B-4B83-9918-0ABD7F905B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a \"User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "En SWFTools 2013-04-09-1007 en Windows, png2swf permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio a través de un archivo creado, relacionado con un \"Modo de Usuario Escribir AV cerca de NULL a partir de wow64! Wow64NotifyDebugger + 0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:2013-04-09-1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAED5A1E-D73B-4B83-9918-0ABD7F905B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to a \"Read Access Violation starting at image00000000_00400000+0x000000000001b596.\""
      }, {
        "lang" : "es",
        "value" : "En SWFTools 2013-04-09-1007 en Windows, png2swf permite a los atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de un archivo creado, relacionado con una \"Violación de acceso de lectura que comienza en image00000000_00400000 + 0x000000000001b596\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:2013-04-09-1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAED5A1E-D73B-4B83-9918-0ABD7F905B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-05T20:29:05.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to a \"Read Access Violation starting at image00000000_00400000+0x000000000001b5fe.\""
      }, {
        "lang" : "es",
        "value" : "En SWFTools 2013-04-09-1007 en Windows, png2swf permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de un archivo creado, relacionado con una \"Violación de acceso de lectura que comienza en image00000000_00400000 + 0x000000000001b5fe\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:2013-04-09-1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAED5A1E-D73B-4B83-9918-0ABD7F905B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9927",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6707",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software could allow an authenticated, local attacker to break from the StarOS CLI of an affected system and execute arbitrary shell commands as a Linux root user on the system, aka Command Injection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before inserting them into Linux shell commands. An attacker could exploit this vulnerability by submitting a crafted CLI command for execution in a Linux shell command as a root user. Cisco Bug IDs: CSCvc69329, CSCvc72930."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código command-parsing de la CLI del sistema operativo StarOS de Cisco para dispositivos ASR 5000 Series versión 11.0 hasta 21.0, 5500 Series y 5700 Series de Cisco y el software Virtualized Packet Core (VPC) de Cisco, podría permitir a un atacante local autenticado interrumpir la CLI del StarOS de un sistema afectado y ejecutar comandos shell arbitrarios como usuario root de Linux en el sistema, también se conoce como Inyección de Comandos. La vulnerabilidad existe porque el sistema operativo afectado no hace un saneamiento de los comandos antes de insertarlos en los comandos shell de Linux. Un atacante podría explotar esta vulnerabilidad mediante el envío de un comando creado de la CLI para su ejecución en un comando shell de Linux como un usuario root. ID de Bug de Cisco: CSCvc69329, CSCvc72930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:11.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C454137D-16DF-4AC2-A713-F7063E898939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EED3DD-496A-48CF-8AF0-5E30DAA6314F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:12.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9417F3-7D70-4484-9B93-19C28C38F51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:12.2\\(300\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D2589B-FC06-47BB-B545-95424C052E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:12.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831BFC89-3876-4F6F-A926-C29C13A6D9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:14.0\\(600\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFE6257-0118-430B-9856-55B745FCF9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8633C3-7092-4793-AE4B-CB537DE514DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:15.0\\(912\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF86D7C7-353B-4BC7-9F18-D00C7F2E695C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:15.0\\(935\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1C51B9-163D-440A-8B14-2B0D6F437CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:15.0\\(938\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2300C8D-AA18-45CA-9EC0-EB4659385863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:15.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5289C275-E80F-4776-8871-4873634C1E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.0\\(900\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8043AB1-636A-47AB-9B5A-D1FC6D286D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A3FBBB-BF06-4F27-9AFA-0F57C6343865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2E4C7F-0A9E-4B0C-B248-966155B56B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C130CD-A00A-4FDC-B6AA-E6C3E3532ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1E3EE9-06ED-46B6-8576-B9F5CCF8C5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD80771F-7650-4DAF-B9FD-AE978C43736F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15F6CD4-C821-4957-B65E-5E2A771D929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:17.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04145290-816F-4A19-8739-396CBD786D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:17.2.0.59184:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7E4AEE-94AF-45E2-BCD3-0CB156A0EC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:17.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C68829-4B5B-4B0F-BA9D-4D6A26B92A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8967E4-D278-4A38-900F-BE64F5088989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:17.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8823E83-1EAC-4ED0-8B1C-369152040E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:17.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F532C0-1054-4470-B788-58E84CD5781A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E044CCC9-D15F-4674-BEC9-832988EFEB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.0.0.57828:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7311CD2-6668-4254-BF40-99A36ECDD48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.0.0.59167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C1A510-800B-4F0F-8483-B485C6CFD3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.0.0.59211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80218968-C095-4830-B9A7-67BB6FFAE4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.0.l0.59219:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9B9641-D25B-41D2-8AC4-9FDDC5B82D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0014BF-BFFB-409C-B9A5-193C5039FE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.1.0.59776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13AB3F1A-84F3-43A3-882D-7EE3DBADDFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.1.0.59780:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97857CC-40AB-48A2-A39E-27E075BC6DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5BBA4D-F4BF-4849-8387-74EBD17AC30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD68E907-280D-42A1-8215-ECB2DA7286FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF8900C-FD6D-48FA-90EE-77E46DF31B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:18.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A156E7C-C4FC-4166-9806-537A2F2B0514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BB9185-2E79-4A78-A5DE-D77F5CD2CFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.0.m0.60737:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F4FDEC-551A-4A6A-90B2-0838305E28F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.0.m0.60828:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B94C0A-A9D4-4EC6-B063-C4292975F855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.0.m0.61045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857DAEB3-BE28-48DD-9D3F-55E47BC05B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E92EEAD-E9D0-407C-BC4E-F64C8F015414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.1.0.61559:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C968950-13F7-4671-B1EA-922951760B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF8ED69-D9ED-4E9B-831C-803E1A94A41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:19.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6602B9A6-C35F-4E50-9CD5-E0135962694A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5173B19-BCD1-419E-9335-AEA1F05CBA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3A11B0-CC34-4F64-B4D7-DB45A5E92B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.1.a0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED29CFC-A64B-49FF-ABEA-487BA88C880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.1.v0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D8753E-45EE-484F-B7B0-44FA608EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F215052-EA0B-4646-B993-4F30487BB45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.2.3.65026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8141015-B85E-45D7-9DA0-BF29D8FB01ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.2.v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DFC8AE-3448-4F6D-BFD7-F1A2055F375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.m0.62842:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E697D7-05C0-4BE0-B64B-06DBF0B4083F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.m0.63229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECCE42E-EF83-4A2D-83BE-59C8902E3F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:20.0.v0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2379CED-D0DC-491B-BA03-863A9E1811D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7931FEA-534C-4556-A41F-261A9B25CDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A827B2AE-0DB8-4857-A438-D5DFDF2828E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0_m0.64246:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BF3FCD-3A29-4939-871D-C83CC4C9F85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:21.0_m0.64702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749454D-894D-4A57-99A1-6DC9055367BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99462",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038818",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6708",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links. This vulnerability affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76654."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de creación de enlaces simbólicos (symlink) de la herramienta AutoVNF para el Framework Ultra Services de Cisco, podría permitir a un atacante remoto no autenticado leer archivos confidenciales o ejecutar código malicioso en un sistema afectado. La vulnerabilidad es debido a la ausencia de verificación de comprobación en la entrada que es usada para crear enlaces simbólicos. Esta vulnerabilidad afecta a todas las versiones del Framework Ultra Services anteriores a las 5.0.3 y 5.1 de Cisco. ID de Bug de Cisco: CSCvc76654."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "9750B831-5B32-4889-B712-EA8A15D1D225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99512",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6709",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller (ESC) and Cisco OpenStack deployments in an affected system. The vulnerability exists because the affected software logs administrative credentials in clear text for Cisco ESC and Cisco OpenStack deployment purposes. An attacker could exploit this vulnerability by accessing the AutoVNF URL for the location where the log files are stored and subsequently accessing the administrative credentials that are stored in clear text in those log files. This vulnerability affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76659."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la herramienta AutoVNF para el Framework Ultra Services de Cisco, podría permitir a un atacante remoto no autenticado acceder a las credenciales administrativas de las implementaciones de Elastic Services Controller (ESC) y OpenStack de Cisco, en un sistema afectado. La vulnerabilidad se debido a que el software afectado registra las credenciales administrativas en texto sin cifrar para los propósitos de implementación de ESC y OpenStack de Cisco. Un atacante podría explotar esta vulnerabilidad accediendo a la URL de AutoVNF para la ubicación donde se almacenan los archivos de registro y posteriormente acceder a las credenciales administrativas que están almacenadas en texto sin cifrar en esos archivos de registro. Esta vulnerabilidad afecta a todas las versiones de Framework  Ultra Services anteriores a las 5.0.3 y 5.1 de Cisco. ID de BUG de Cisco: CSCvc76659."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        }, {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "9750B831-5B32-4889-B712-EA8A15D1D225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6711",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the affected software. An attacker could exploit this vulnerability by accessing the affected device through the orchestrator network. An exploit could allow the attacker to gain access to ZooKeeper data nodes (znodes) and influence the behavior of the system's high-availability feature. This vulnerability affects all releases of Cisco Ultra Services Framework UAS prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvd29395."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Servicio de Automatización Ultra (UAS) del Framework Ultra Services de Cisco, podría permitir a un atacante remoto no autenticado conseguir acceso no autorizado a un dispositivo específico. La vulnerabilidad es debido a una configuración por defecto no segura del servicio  ZooKeeper de Apache usado por el software afectado. Un atacante podría explotar esta vulnerabilidad accediendo al dispositivo afectado por medio de la red orchestrator. Una explotación podría permitirle al atacante conseguir acceso a los nodos de datos de ZooKeeper (znodos) e influenciar el comportamiento de la funcionalidad high-availability del sistema. Esta vulnerabilidad afecta a todas las versiones del Framework Ultra Services UAS anteriores a las 5.0.3 y 5.1 de Cisco. ID de BUG de Cisco: CSCvd29395."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "9750B831-5B32-4889-B712-EA8A15D1D225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99440",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-uas",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-uas",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6712",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a \"tomcat\" user on the system can run certain shell commands, allowing the user to overwrite any file on the filesystem and elevate privileges to root. This vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc76634."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en ciertos comandos de Elastic Services Controller de Cisco, podría permitir a un atacante remoto autenticado elevar los privilegios a root y ejecutar comandos peligrosos en el servidor. La vulnerabilidad ocurre porque un usuario \"tomcat\" en el sistema puede ejecutar ciertos comandos shell, permitiéndole sobrescribir cualquier archivo del sistema de archivos y elevar los privilegios a root. Esta vulnerabilidad afecta a Elastic Services Controller anterior a las versiones 2.3.1.434 y 2.3.2 de Cisco. ID de BUG de Cisco: CSCvc76634."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382A6F13-572D-4F0F-A563-2DA5D2AA1686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B56D33A-3027-4A5E-9FFC-C565865670EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B4001C-0835-4D77-8930-02A96BAF6BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A98B6A-3861-43B8-86ED-7DE8C95C1D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DA8739-DE37-4086-86C1-3740195DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66268BF5-4D8B-4A84-87C1-637CAA18C429"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99461",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6713",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain full access to the affected system. The vulnerability is due to static, default credentials for the Cisco ESC UI that are shared between installations. An attacker who can extract the static credentials from an existing installation of Cisco ESC could generate an admin session token that allows access to all instances of the ESC web UI. This vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc76627."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Framework Play de Elastic Services Controller (ESC) de Cisco, podría permitir a un atacante remoto no autenticado conseguir acceso completo al sistema afectado. La vulnerabilidad es debido a las credenciales estáticas y por defecto para la interfaz de usuario ESC de Cisco que se comparten entre las instalaciones. Un atacante que puede extraer las credenciales estáticas de una instalación existente de ESC de Cisco podría generar un token de sesión de administrador que permita el acceso a todas las instancias de la interfaz de usuario web de ESC. Esta vulnerabilidad afecta a Elastic Services Controller anterior a las versiones 2.3.1.434 y 2.3.2 de Cisco. ID de BUG de Cisco: CSCvc76627."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382A6F13-572D-4F0F-A563-2DA5D2AA1686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B56D33A-3027-4A5E-9FFC-C565865670EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B4001C-0835-4D77-8930-02A96BAF6BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A98B6A-3861-43B8-86ED-7DE8C95C1D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DA8739-DE37-4086-86C1-3740195DC121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66268BF5-4D8B-4A84-87C1-637CAA18C429"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99437",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6714",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-06T00:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. This vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76673."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio AutoIT de Staging Server del Framework Ultra Services de Cisco, podría permitir a un atacante remoto no autenticado ejecutar comandos shell arbitrarios como usuario root de Linux. La vulnerabilidad es debido a invocaciones shell inapropiadas. Un atacante podría explotar esta vulnerabilidad mediante la creación de entradas de comandos de la CLI para ejecutar comandos shell de Linux como usuario root. Esta vulnerabilidad afecta a todas las versiones de Staging Server de Ultra Services Framework anterior a las versiones 5.0.3 y 5.1 de Cisco. ID de BUG de Cisco: CSCvc76673."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework_staging_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "991C1294-F10F-4CFB-BCB7-A17A4A07A57D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99436",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T11:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en link.php en Cacti 1.1.12 permite que usuarios remotos anónimos inyecten scripts web o HTML arbitrarios mediante el parámetro id, relacionado con la función die_html_input_error en lib/html_validate.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBF429F-68C6-4FBE-ACE3-E391B0DDAB02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/838",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T11:29:00.243",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events."
      }, {
        "lang" : "es",
        "value" : "En el servidor X de X.Org antes del 19-06-2017, un usuario autenticado en una Sesión X podría bloquear o ejecutar código en el contexto del servidor X al explotar un desbordamiento de pila en la conversión endianness de Eventos X."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.3",
            "matchCriteriaId" : "9C274A00-CD58-40E2-A8E6-FAE26782DE48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99546",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1035283",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073c",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9d",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1035283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T11:29:00.273",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server."
      }, {
        "lang" : "es",
        "value" : "Datos no inicializados en la conversión endianness en el manejo de XEvent del servidor X de X.Org antes del 19-06-2017, permitieron a usuarios maliciosos autenticados potencialmente acceder a datos privilegiados del servidor X."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.3",
            "matchCriteriaId" : "9C274A00-CD58-40E2-A8E6-FAE26782DE48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99543",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1035283",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=05442de962d3dc624f79fc1a00eca3ffc5489ced",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1035283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=05442de962d3dc624f79fc1a00eca3ffc5489ced",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T14:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in an upload notification and in the myfiles component, if the attacker can convince the victim to proceed with an upload despite the appearance of an XSS payload in the filename."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Lutim anterior a versión 0.8, podría permitir a atacantes remotos inyectar un script web o HTML arbitrario por medio de un nombre de archivo creado de manera inapropiada en una notificación de carga y en el componente myfiles, si el atacante puede convencer a la víctima para proceder con una carga a pesar de la aparición de una carga útil XSS en el nombre del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lutim_project:lutim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.1",
            "matchCriteriaId" : "5C564716-0F30-4D11-BAD3-58C6CC5C1D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://framagit.org/luc/lutim/issues/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://framagit.org/luc/lutim/issues/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1236",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-06T14:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM X-Force ID: 124354"
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 9.0.2 permitiría a un usuario autenticado causar una denegación de servicio mediante el guardado del estado de investigación del canal. IBM X-Force ID: 124354"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003510",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99505",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124354",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T15:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2 procesa un archivo creado en ttftool, puede conllevar a una lectura excesiva del búfer en la región heap de la memoria en la función readBlock() en la biblioteca lib/ttf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FineCMS before 2017-07-06, application\\core\\controller\\config.php allows XSS in the (1) key_name, (2) key_value, and (3) meaning parameters."
      }, {
        "lang" : "es",
        "value" : "En FineCMS antes del 06-07-2017, en el archivo application\\core\\controller\\config.php permite un problema de tipo XSS en los parámetros (1) key_name, (2) key_value y (3) meaning."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/andrzuk/FineCMS/pull/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/pull/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T16:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP Host header."
      }, {
        "lang" : "es",
        "value" : "En FineCMS antes del 06-07-2017, en el archivo application/lib/ajax/get_image_data.php presenta un problema de tipo SSRF, relacionado con las peticiones de archivos sin imagen con un encabezado Host HTTP modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-05-12",
            "matchCriteriaId" : "5F65F90A-6982-48DD-BA88-AC3D023E427B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/andrzuk/FineCMS/pull/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/pull/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/pull/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andrzuk/FineCMS/pull/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T16:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de desbordamiento de búfer (de un problema de manejo de código BB) en TeamSpeak Server versión 3.0.13.6 (11/08/2016 09:48:33) , que habilita a los usuarios Bloquear a cualquier cliente de WINDOWS que haya cliqueado en un canal vulnerable de un servidor TeamSpeak."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamspeak:teamspeak_server:3.0.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4413ACE1-DF07-40E7-92EA-8B4BE2FA2640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamspeak:teamspeak_client:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C377316-402B-4262-84E7-EBB6EDA364AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143053/TeamSpeak-Client-3.1.4-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143053/TeamSpeak-Client-3.1.4-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T16:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries."
      }, {
        "lang" : "es",
        "value" : "Un error en la implementación de la biblioteca estándar ScalarMult de curve P-256 para arquitecturas amd64 en Go anterior a versión 1.7.6 y 1.8.x anterior a versión 1.8.2, causa resultados incorrectos para ser generados por puntos de entrada específicos. Se puede montar un ataque adaptativo para extraer progresivamente la entrada scalar hacia ScalarMult mediante el envío de puntos creados y observando fallos para la salida correcta derivada. Esto conduce a un ataque de recuperación de clave completa contra ECDH estático, tal y como es usado en las bibliotecas populares JWT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "8244E4BF-E822-40BF-B436-35B073514530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B9EAD3-EF36-4F95-8DB4-9FB8E19CC0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DC2B77-B2C2-41AE-B51E-A766C79AA00F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BEF8F1-A70F-455C-BFDD-09E0A658F702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-06/msg00079.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-06/msg00080.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1455191",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/issues/20040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://go-review.googlesource.com/c/41070/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/golang-announce/B5ww0iFt1_Q/TgUFJV14BgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZH4T47ROLZ6YEZBDVXVS2KISTDMXAPS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-06/msg00079.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-06/msg00080.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1455191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/issues/20040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://go-review.googlesource.com/c/41070/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/golang-announce/B5ww0iFt1_Q/TgUFJV14BgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZH4T47ROLZ6YEZBDVXVS2KISTDMXAPS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-06T16:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function."
      }, {
        "lang" : "es",
        "value" : "El servidor qemu-nbd en QEMU (también se conoce como Quick Emulator), cuando se ensambló con el soporte del servidor Network Block Device (NBD), permite a los atacantes remotos causar una denegación de servicio (fallo de segmentación y fallo del servidor) aprovechando el fallo para garantizar que toda la inicialización ocurre antes de hablar con un cliente en la función nbd_negotiate."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/12/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1681",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1682",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg06240.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg02321.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg06240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg02321.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0664",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36491278."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el Android framework. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36491278."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0665",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36991414."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36991414."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0666",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37285689."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el Framework de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37285689."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0667",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37478824."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el Framework de Android. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37478824."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0668",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-22011579."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el Framework de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-22011579."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0669",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el Framework de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34114752."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0670",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36104177."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el Framework de Android. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36104177."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0671",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android libraries. Product: Android. Versions: 4.4.4. Android ID: A-34514762."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en las librerías de Android. Producto: Android. Versiones: 4.4.4. ID de Android: A-34514762."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0672",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-34778578."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en las librerías de Android. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-34778578."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0673",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33974623."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-33974623."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0674",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231163."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34231163."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0675",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34779227."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0676",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34896431."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34896431."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0677",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36035074."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36035074."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0678",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-36576151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0679",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36996978."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36996978."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0680",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37008096."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37008096."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0681",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37208566."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37208566."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0682",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en el Framework de medios de Android. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-36588422."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0683",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36591008."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en el framework multimedia de Android. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-36591008."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0684",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35421151."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35421151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0685",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34203195."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34203195."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0686",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-34231231."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0688",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35584425."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-35584425."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0689",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36215950."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36215950."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0690",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36592202."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36592202."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0691",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. ID de Android: A-36724453."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0692",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36725407."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36725407."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0693",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36993291."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36993291."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0694",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37093318."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37093318."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0695",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37094889."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37094889."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0696",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207120."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37207120."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0697",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37239013."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37239013."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0698",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35467458."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el framework multimedia de Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-37239013."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0699",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36490809."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el framework multimedia de Android. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-36490809."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0700",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-35639138."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en la interfaz de usuario del sistema Android. Producto: Android. Versiones: 7.1.1, 7.1.2. ID de Android: A-35639138."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0701",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36385715."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en la interfaz de usuario del sistema Android. Producto: Android. Versiones: 7.1.1, 7.1.2. ID de Android: A-36385715."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0702",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36621442."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código remota en la interfaz de usuario del sistema Android. Producto: Android. Versiones: 7.1.1, 7.1.2. ID de Android: A-36621442."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0703",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33123882."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en la interfaz de usuario del sistema Android. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. ID de Android: A-33123882."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0704",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-33059280."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en la interfaz de usuario del sistema Android. Producto: Android. Versiones: 7.1.1, 7.1.2. ID de Android: A-33059280."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0705",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-34973477. References: B-RB#119898."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador wi-fi de Broadcom. Producto: Android. Versiones: kernel de Android. ID de Android: A-34973477. Referencias: B-RB # 119898."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99482",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-0705.c",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-0705.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0706",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-35195787. References: B-RB#120532."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador wi-fi de Broadcom. Producto: Android. Versiones: kernel de Android. ID de Android: A-35195787. Referencias: B-RB # 120532."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99482",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0707",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the HTC led driver. Product: Android. Versions: Android kernel. Android ID: A-36088467."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador led de HTC. Producto: Android. Versiones: kernel de Android. ID de Android: A-36088467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99474",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0708",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the HTC sound driver. Product: Android. Versions: Android kernel. Android ID: A-35384879."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador de sonido de HTC. Producto: Android. Versiones: kernel de Android. ID de Android: A-35384879."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99474",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0709",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the HTC sensor hub driver. Product: Android. Versions: Android kernel. Android ID: A-35468048."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el controlador del concentrador de sensores de HTC. Producto: Android. Versiones: kernel de Android. ID de Android: A-35468048."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99474",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0710",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el tcb de Linux aguas arriba. Producto: Android. Versiones: kernel de Android. ID de Android: A-34951864."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99468",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0711",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-07-06T20:29:01.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek networking driver. Product: Android. Versions: Android kernel. Android ID: A-36099953. References: M-ALPS03206781."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el controlador de red MediaTek. Producto: Android. Versiones: kernel de Android. ID de Android: A-36099953. Referencias: M-ALPS03206781."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99466",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6247",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-06T20:29:01.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process in the kernel. Product: Android. Versions: N/A. Android ID: A-34386301. References: N-CVE-2017-6247."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el driver de sonido de NVIDIA habilita una aplicación maliciosa que ejecuta código aleatorio dentro del contexto del kernel. Este problema esta evaluado como moderado debido a que primeramente requiere comprometer los privilegios del proceso en el kernel. Producto: Android. Versión: N/A. Android ID: A-34386301. Referencias: N-CVE-2017-6247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98876",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6248",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-06T20:29:02.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34372667. References: N-CVE-2017-6248."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el driver de sonido de NVIDIA habilita una aplicación maliciosa que ejecuta código aleatorio dentro del contexto del kernel. Este problema esta evaluado como moderado debido a que primeramente requiere comprometer los privilegios del proceso. Producto: Android. Versión: N/A. Android ID: A-34372667. Referencias: N-CVE-2017-6248."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98876",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4998",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-07T00:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a cross-site request forgery vulnerability. A remote low privileged attacker may potentially exploit the vulnerability to execute unauthorized requests on behalf of the victim, using the authenticated user's privileges."
      }, {
        "lang" : "es",
        "value" : "RSA Archer versiones 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 de EMC, está potencialmente afectado por una vulnerabilidad de tipo cross-site request forgery. Un atacante remoto con pocos privilegios puede explotar potencialmente la vulnerabilidad para ejecutar peticiones no autorizadas en nombre de la víctima, utilizando los privilegios del usuario autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DD1233-DD85-441C-96BF-0C2F546E9460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CE57E4-7A97-433B-98BA-8D8348414207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB7C61B-6E97-456B-91FB-6B3456E5EBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A155A-42C9-47DC-ABC6-80E1AABF0FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AC15A9-4869-4593-B06D-0111E625C94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DD0FBE-D500-4A77-A440-5958EDF9678B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4999",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-07T00:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other users' discussion forum messages."
      }, {
        "lang" : "es",
        "value" : "RSA Archer versiones 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1  de EMC, está afectado por una omisión de autorización por medio de una vulnerabilidad de clave controlada por el usuario en los Mensajes del Foro de Discusión. Un atacante remoto con pocos privilegios puede explotar potencialmente esta vulnerabilidad para elevar sus privilegios y visualizar los mensajes del foro de discusión de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DD1233-DD85-441C-96BF-0C2F546E9460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CE57E4-7A97-433B-98BA-8D8348414207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB7C61B-6E97-456B-91FB-6B3456E5EBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A155A-42C9-47DC-ABC6-80E1AABF0FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AC15A9-4869-4593-B06D-0111E625C94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DD0FBE-D500-4A77-A440-5958EDF9678B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5000",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-07T00:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack."
      }, {
        "lang" : "es",
        "value" : "RSA Archer versiones 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 de EMC, está afectado por una exposición de información por medio de una vulnerabilidad de mensaje de error. Un atacante remoto con pocos privilegios puede explotar potencialmente esta vulnerabilidad para utilizar la información revelada en un mensaje de error para iniciar otro ataque más concentrado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DD1233-DD85-441C-96BF-0C2F546E9460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CE57E4-7A97-433B-98BA-8D8348414207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB7C61B-6E97-456B-91FB-6B3456E5EBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A155A-42C9-47DC-ABC6-80E1AABF0FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AC15A9-4869-4593-B06D-0111E625C94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DD0FBE-D500-4A77-A440-5958EDF9678B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5001",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-07T00:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack."
      }, {
        "lang" : "es",
        "value" : "RSA Archer versiones 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 de EMC, está afectado por una exposición de información por medio de una vulnerabilidad de mensaje de error. Un atacante remoto con pocos privilegios puede explotar potencialmente esta vulnerabilidad para utilizar la información revelada en un mensaje de error para iniciar otro ataque más centrado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DD1233-DD85-441C-96BF-0C2F546E9460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CE57E4-7A97-433B-98BA-8D8348414207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB7C61B-6E97-456B-91FB-6B3456E5EBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A155A-42C9-47DC-ABC6-80E1AABF0FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AC15A9-4869-4593-B06D-0111E625C94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DD0FBE-D500-4A77-A440-5958EDF9678B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5002",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-07T00:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred."
      }, {
        "lang" : "es",
        "value" : "EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 es afectado por una vulnerabilidad de redirección. Un atacante remoto sin privilegios puede redireccionar a usuarios legítimos y conducirles a un ataque de phishing. El atacante puede robar las credenciales de la víctima y autenticarse silenciosamente en la aplicación RSA Archer sin que la victima se de cuenta del ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DD1233-DD85-441C-96BF-0C2F546E9460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CE57E4-7A97-433B-98BA-8D8348414207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB7C61B-6E97-456B-91FB-6B3456E5EBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A155A-42C9-47DC-ABC6-80E1AABF0FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AC15A9-4869-4593-B06D-0111E625C94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_archer_egrc:5.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DD0FBE-D500-4A77-A440-5958EDF9678B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T11:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FineCMS through 2017-07-07, application\\core\\controller\\template.php allows remote PHP code execution by placing the code after \"<?php\" in a route=template request."
      }, {
        "lang" : "es",
        "value" : "En FineCMS hasta el 07-07-2017, el archivo application\\core\\controller\\template.php permite la ejecución de código remota PHP colocando el código después de \""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_codeexec/finecmscodeexec_2017_07_06_submit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_codeexec/finecmscodeexec_2017_07_06_submit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T11:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on this product."
      }, {
        "lang" : "es",
        "value" : "Yaws 1.91 permite la divulgación remota de archivos sin autenticarse mediante un salto de directorio HTTP con /%5C../ en el puerto 8080. NOTA: Este CVE solo trata el uso de una secuencia /%5C inicial para omitir los mecanismos de protección contra saltos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4D556C-941C-479C-BB4C-87883F9AEA16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/YAWS-WEB-SERVER-v1.91-UNAUTHENTICATED-REMOTE-FILE-DISCLOSURE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99515",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42303/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/YAWS-WEB-SERVER-v1.91-UNAUTHENTICATED-REMOTE-FILE-DISCLOSURE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42303/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T11:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file."
      }, {
        "lang" : "es",
        "value" : "Nitro Pro 11.0.3 y anteriores permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante un archivo PCX manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonitro:nitro_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.3",
            "matchCriteriaId" : "72A6668B-BED6-4912-8CEF-571CFD61F172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.gonitro.com/support/downloads#securityUpdates",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.gonitro.com/support/downloads#securityUpdates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T12:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "La función getNodeSize en ext/rtree/rtree.c en SQLite, hasta la versión 3.19.3, como se utiliza en GDAL y otros productos, gestiona de manera incorrecta los blobs RTree que tienen un tamaño demasiado pequeño en una base de datos manipulada, lo que da lugar a una sobrelectura de búfer basada en memoria dinámica (heap) o, posiblemente, cause otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.19.3",
            "matchCriteriaId" : "F0D613CD-BB15-4C73-AC3C-3E43B3FB03B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=sqlite-users&m=149933696214713&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99502",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2405",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1700937",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sqlite.org/src/info/66de6f4a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4019-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=sqlite-users&m=149933696214713&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1700937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sqlite.org/src/info/66de6f4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4019-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T12:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim's Router without knowing the credentials (CSRF). An attacker can host a page that sends a POST request to Form2File.htm that tries to upload Firmware to victim's Router. This causes the router to reboot/crash resulting in Denial of Service. An attacker may succeed in uploading malicious Firmware."
      }, {
        "lang" : "es",
        "value" : "En D-Link DIR-615 en versiones anteriores a v20.12PTb04, si una víctima con sesión iniciada en la interfaz web del router visita un sitio malicioso desde otra pestaña Browser, el sitio malicioso podría enviar peticiones al router de la víctima sin conocer las credenciales (CSRF). Un atacante podría alojar una página que envía una petición POST a Form2File.htm que intenta subir firmware al router de la víctima. Esto provoca que el router se reinicie/cierre inesperadamente, resultando en una denegación de servicio. Un atacante podría tener éxito a la hora de subir firmware malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12ptb01",
            "matchCriteriaId" : "F1744224-B87C-4342-AC97-21668EB17709"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E92E959-C211-4979-A233-163BEFCF6F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T12:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP address belonging to the victim's host, an attacker might be able to take over the administrative session without being prompted for authentication credentials. An attacker can get the victim's and router's IP addresses by simply sniffing the network traffic. Moreover, if the victim has web access enabled on his router and is accessing the web interface from a different network that is behind the NAT/Proxy, an attacker can sniff the network traffic to know the public IP address of the victim's router and take over his session as he won't be prompted for credentials."
      }, {
        "lang" : "es",
        "value" : "En D-Link DIR-615 en versiones anteriores a la v20.12PTb04, una vez autenticado, el dispositivo identifica al usuario basándose en la dirección IP de su máquina. Al suplantar la dirección IP perteneciente al host de la víctima, un atacante podría ser capaz de asumir el control de la sesión administrativa sin que se le pidan credenciales de autenticación. Un atacante puede conseguir las direcciones IP de la víctima y del router suplantando el tráfico de red. Además, si al víctima tiene el acceso web habilitado en su router y está accediendo a la interfaz web desde una red distinta que está detrás del NAT/Proxy, un atacante puede suplantar el tráfico de red para conocer la dirección IP pública del router de la víctima y tomar el control de su sesión, ya que no se le pedirán credenciales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12ptb01",
            "matchCriteriaId" : "F1744224-B87C-4342-AC97-21668EB17709"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E1CAC5-130B-4B49-85B9-DEEA5ED57B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T12:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to steal a user's credentials and/or credentials of users being added while sniffing the traffic."
      }, {
        "lang" : "es",
        "value" : "El dispositivo D-Link DIR-615 en versiones anteriores a v20.12PTb04 no emplea SSL en ninguna de las páginas autenticadas. Además, tampoco permite que el usuario genere su propio certificado SSL. Un atacante podría, simplemente, monitorizar el tráfico de red para robar las credenciales de un usuario y/o las credenciales de usuarios que se estén añadiendo al suplantar el tráfico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12ptb01",
            "matchCriteriaId" : "F1744224-B87C-4342-AC97-21668EB17709"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E1CAC5-130B-4B49-85B9-DEEA5ED57B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2144",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page."
      }, {
        "lang" : "es",
        "value" : "Cybozu Garoon desde la versión 3.0.0 hasta la 4.2.4 podría permitir que un atacante bloquee el archivo de otro usuario mediante una página especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16589DC-22D2-466A-B2D7-85E20A82B8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN43534286/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9648",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN43534286/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2145",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fijación de sesión en Cybozu Garoon desde las versiones 4.0.0 hasta las 4.2.4 permite que atacantes remotos realicen operaciones arbitrarias mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CC4428-0CB4-497F-8274-52E6CC273D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN43534286/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9695",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN43534286/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2146",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Cybozu Garoon versión 3.0.0 hasta 4.2.4, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del menú de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0121310-1C8A-4F3E-9C0C-B8EA37907C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE55E26D-AC2D-4384-97BC-090737F2D100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B042AA50-E923-4C84-8A94-85479A59F652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN43534286/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9702",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN43534286/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2172",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting  en Cybozu KUNAI para Android versión 3.0.0 hasta 3.0.6, permite a atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:android:*:*",
            "matchCriteriaId" : "3AF2CE5A-5E23-4BC7-845B-A5AB1AA851D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "95703DE0-59AE-4DD7-9F4D-01AAB7394CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:android:*:*",
            "matchCriteriaId" : "259B2682-0893-4100-8E44-096AAA42178E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0279559D-E349-4A29-85E2-CEB8DB291E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A568C416-2533-4EC6-B1F6-CB099EAC0AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.5:*:*:*:*:android:*:*",
            "matchCriteriaId" : "231CA1DB-E4EA-47CE-B8DF-ACA4C54824BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.5.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "50B00EED-5292-4834-B823-23CF3AC0854D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:kunai:3.0.6:*:*:*:*:android:*:*",
            "matchCriteriaId" : "307BB9E0-4DFC-4791-A40A-C97096566397"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN56588965/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9909",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN56588965/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2183",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings."
      }, {
        "lang" : "es",
        "value" : "HOME SPOT CUBE2 con versiones de firmware V101 y anteriores permite que atacantes autenticados ejecuten comandos arbitrarios del sistema operativo mediante Clock Settings."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD41B8B-D43A-466D-B994-B6B7AE8554DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2957E610-4807-4EA0-9242-B4F693E222F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:kddi:home_spot_cube_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330A6D16-3BBA-4D46-B7C1-17C08C8373D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2184",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en HOME SPOT CUBE2 con versiones de firmware V101 y anteriores permite que un atacante ejecute código arbitrario mediante WebUI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD41B8B-D43A-466D-B994-B6B7AE8554DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2957E610-4807-4EA0-9242-B4F693E222F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:kddi:home_spot_cube_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330A6D16-3BBA-4D46-B7C1-17C08C8373D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2185",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI."
      }, {
        "lang" : "es",
        "value" : "HOME SPOT CUBE2 con firmware V101 y anteriores permite que atacantes autenticados ejecuten comandos arbitrarios del sistema operativo mediante la interfaz de usuario web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD41B8B-D43A-466D-B994-B6B7AE8554DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2957E610-4807-4EA0-9242-B4F693E222F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:kddi:home_spot_cube_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330A6D16-3BBA-4D46-B7C1-17C08C8373D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2186",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI."
      }, {
        "lang" : "es",
        "value" : "HOME SPOT CUBE2 con firmware V101 y anteriores permite que un atacante omita la autenticación para cargar firmware malicioso mediante la interfaz de usuario web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD41B8B-D43A-466D-B994-B6B7AE8554DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2957E610-4807-4EA0-9242-B4F693E222F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:kddi:home_spot_cube_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330A6D16-3BBA-4D46-B7C1-17C08C8373D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN24348065/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.au.com/information/notice_mobile/update/update-20170612-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2188",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 March Edition (Ver.9.0.001.001) [Updated on 2017 June 9], (Ver.8.0.001.001) [Updated on 2016 May 31] and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de Denshinouhin Check System (para el Ministerio de Agricultura, Silvicultura y Pesca Nouson Seibi Jigyou) Edición de marzo 2014 (Versión 9.0.001.001) [Actualizado el 9 de junio de 2017], (Versión .8.0.001.001) [Actualizado el 31 de mayo de 2016] y anterior, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maff:denshinouhin_check_system:8.0.001.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65E59A4-6D3E-451D-8A2E-1BF8D8E782D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maff:denshinouhin_check_system:9.0.001.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E47448-602F-4FC4-90C0-8CC0D2F4021D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65154137/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65154137/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2194",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de tipo Cross-site scripting en la herramienta de estudio de seguridad de código Fuente iCodeChecker, permite a un atacante inyectar un script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:icodechecker:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04492ED-2820-49F8-BF05-46A994D7A994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN25078144/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/security/vuln/iCodeChecker/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN25078144/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ipa.go.jp/security/vuln/iCodeChecker/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2208",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el Instalador del Sistema de Apertura de Ofertas y Licitación Electrónica disponible antes del 12 de junio de 2017, permite a un atacante ejecutar código arbitrario por medio de un archivo ejecutable especialmente creado en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquisition_technology_and_logistics_agency:installer_of_electronic_tendering:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "06112017",
            "matchCriteriaId" : "C9C2F983-5E1D-49C8-BAD3-02D4A678CFD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN27198823/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN27198823/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2215",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of \"Setup file of advance preparation\" (jizen_setup.exe) (The version which was available on the website prior to 2017 June 12) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de \"Setup file of advance preparation\" (jizen_setup.exe) (la versión que estaba disponible en el sitio web antes del 12 de junio de 2017), permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-tax.nta:e-tax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "251BD62C-18FB-49AA-BABF-E8841EFD56EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.e-tax.nta.go.jp/topics/topics_290525.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN34508179/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.keisan.nta.go.jp/oshirase/h28info/201705.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.e-tax.nta.go.jp/topics/topics_290525.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN34508179/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.keisan.nta.go.jp/oshirase/h28info/201705.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2216",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en versiones anteriores a la 2.9.50 de WordPress Download Manager permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3eden:download_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.9.49",
            "matchCriteriaId" : "39852D43-123F-46A9-B23C-12E19CAC5F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN79738260/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1650075/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/download-manager/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN79738260/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1650075/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/download-manager/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2217",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redirección abierta en versiones anteriores a la 2.9.51 de WordPress Download Manager permite a atacantes remotos redirigir usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3eden:download_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.9.50",
            "matchCriteriaId" : "3E22F4CE-9081-480A-87FE-5F97101108C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN79738260/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1650075/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/download-manager/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN79738260/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1650075/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/download-manager/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2218",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el instalador de QuickTime para Windows permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5969D4-3D98-490E-89B6-FF7765E78C40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN94771799/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/kb/DL837?viewlocale=en_US",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN94771799/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/kb/DL837?viewlocale=en_US",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2220",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de CASL II simulator (formato autoextraíble) permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:casl_ii_simulator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "2CC5BA12-E4E5-44DD-AFEB-DA0FB27B92B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN67305782/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.jitec.ipa.go.jp/1_20casl2/casl2dl_2017_01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN67305782/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.jitec.ipa.go.jp/1_20casl2/casl2dl_2017_01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2222",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en WP-Members anterior a  la versión 3.1.8, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butlerblog:wp-members:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.7",
            "matchCriteriaId" : "7C273FA7-06C1-4E9D-A297-E7B4F810672B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN51355647/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1667369/#file12",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-members/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN51355647/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1667369/#file12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-members/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2223",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC con versiones de firmware 1.19 y anteriores y TS-WPTCAM2 con versiones de firmware 1.01 y anteriores permite que atacantes remotos secuestren la autenticación de los administradores mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19",
            "matchCriteriaId" : "710F4A6E-DD20-4EE8-BB4D-F1523D5D505D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD265FB-B8F9-40D9-8A19-C32FBE038020"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19",
            "matchCriteriaId" : "9025E34D-525D-4185-A7B3-7AD347D8B12D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA2FECD-B383-4E34-855E-CE8507677039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-ptcam\\/poe_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19",
            "matchCriteriaId" : "EE91D6B4-65AB-4FBD-845A-C3E0A89541F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-ptcam\\/poe_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD15C82A-ED6F-4C5C-B7E8-0C844B51C49D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlc2_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19",
            "matchCriteriaId" : "452F727A-3D77-42DF-9876-98D2F51754C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlc2_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEC260D-9795-4206-B83F-D2104FAEC04B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wlce_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19",
            "matchCriteriaId" : "1C7936A1-C72F-40C6-AB32-43E22EFD0F66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wlce_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6728B8-C169-4B59-B8DB-7B6397FA38AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wrlc_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19",
            "matchCriteriaId" : "0A873FE0-3049-4941-BD3F-0ED668FDD2B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wrlc_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A60C28A-5E28-406C-8307-69C234B070E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:ts-wptcam2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01",
            "matchCriteriaId" : "80EE5067-0C5F-44EE-8A8B-7F0838C5D4E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:ts-wptcam2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBCAD37-39CB-411B-BADC-3DB54D500CB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.iodata.jp/support/information/2017/camera201706/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99144",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65411235/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/camera201706/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65411235/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2224",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Event Calendar WD anterior a la versión 1.0.94, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-dorado:event_calendar_wd:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.93",
            "matchCriteriaId" : "8E693466-B73B-4BF3-A6E6-5AD88AB144CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99155",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73550134/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1671891/#file313",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/event-calendar-wd/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8859",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "http://www.securityfocus.com/bid/99155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73550134/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1671891/#file313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/event-calendar-wd/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2225",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en EbidSettingChecker.exe (versión 1.0.0.0) permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mext:ebidsettingchecker:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0410557-FF0E-4A3B-A34A-47DBF83B6284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN01775119/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://portal.ebid.mext.go.jp/top/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN01775119/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://portal.ebid.mext.go.jp/top/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2226",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en el archivo Setup de preparación avanzada para el software e-Tax (versión WEB) en su versión 1.17.1 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nta:e-tax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17.1",
            "matchCriteriaId" : "31DBE237-34E3-4CA6-BA9C-333A43BE9A46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN79451345/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99334",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN79451345/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2227",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no fiable en el instalador de Charamin OMP en su versión 1.1.7.4 y anteriores y la versión 1.2.0.0 Beta y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charamin:omp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7.4",
            "matchCriteriaId" : "2DE77332-80D3-4C14-BCC6-120625366515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charamin:omp:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.0",
            "matchCriteriaId" : "9C702AE6-9E07-4FE2-B99D-8B5DA264FD5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN09293613/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN09293613/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2229",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en Douroshisetu Kihon Data Sakusei System versión 1.0.2 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:douroshisetu:kihon_data_sakusei_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "D12976A8-448E-4301-87B1-A8A255A62E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN20409270/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/index_help.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN20409270/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/index_help.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2230",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 (cdrw_checker_3.1.0.lzh) and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Douro Kouji Kanseizutou Check Program en su versión 3.1 (cdrw_checker_3.1.0.lzh) y anteriores permite que atacantes remotos consigan privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilim:road_construction_completion_diagram_check_program:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AB75CA-F35D-4036-9D27-A4CFB83A0E15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN82120115/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/index_help.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN82120115/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nilim-cdrw.jp/index_help.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2231",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de MLIT DenshiSeikabutsuSakuseiShienKensa system versión 3.02 y anteriores, distribuido hasta el 20 de junio de 2017, el archivo autoextraíble incluyendo el instalador of MLIT DenshiSeikabutsuSakuseiShienKensa system  versión 3.02 y anterior, distribuido el 20 de junio de 2017, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlit:denshiseikabutsusakuseishienkensa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "BAE529A4-B10F-483F-90AD-BBE0CA30DF86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN06337557/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mlit.go.jp/common/001189444.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mlit.go.jp/gobuild/gobuild_cals_sysv3.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN06337557/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.mlit.go.jp/common/001189444.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mlit.go.jp/gobuild/gobuild_cals_sysv3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2232",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de Shinseiyo Sogo Soft (versión 4.8A) y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moj:shinseiyo_sogo_soft:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8a",
            "matchCriteriaId" : "B2111366-8252-4547-B831-316A972C166A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN23389212/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN23389212/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2233",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador del Plugin de PDF Digital Signature versión (G2.30) y anteriores, distribuido hasta el 29 de junio de 2017, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moj:pdf_digital_signature:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "g2.30",
            "matchCriteriaId" : "4C8A5911-B69C-4825-931C-35C9EE900C15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN45134765/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN45134765/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2234",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to perform operations on device with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Toshiba Home Gateway HEM-GW16A firmware HEM-GW16A-FW-Versión 1.2.0 y anteriores, Toshiba Home Gateway HEM-GW26A firmware HEM-GW26A-FW-Versión 1.2.0 y anteriores, pueden permitir que atacantes remotos accedan a una pantalla de desarrollador no documentada para realizar operaciones en dispositivo con privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw16a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "D34FB0D3-9DB4-4DD3-A755-239F9127EA79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw16a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9C8238-D8C8-46CD-993F-3A49C1627BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "4A511ECD-B10E-4482-8E2D-DE24767060EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D699E38-BB97-4831-B5BF-E1DF1735ABEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2235",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Toshiba Home gateway HEM-GW26A con versiones de firmware HEM-GW26A-FW-V1.2.0 y anteriores permite que un atacante omita las restricciones de acceso para cambiar la contraseña de la cuenta de administrador mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw16a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "D34FB0D3-9DB4-4DD3-A755-239F9127EA79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw16a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9C8238-D8C8-46CD-993F-3A49C1627BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "4A511ECD-B10E-4482-8E2D-DE24767060EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D699E38-BB97-4831-B5BF-E1DF1735ABEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2236",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Toshiba Home gateway HEM-GW16A con versiones de firmware HEM-GW16A-FW-V1.2.0 y anteriores y Toshiba Home gateway HEM-GW26A con versiones de firmware HEM-GW26A-FW-V1.2.0 y anteriores emplea credenciales embebidas, lo que podría permitir que atacantes puedan realizar operaciones en el dispositivo con privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw16a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "D34FB0D3-9DB4-4DD3-A755-239F9127EA79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw16a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9C8238-D8C8-46CD-993F-3A49C1627BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "4A511ECD-B10E-4482-8E2D-DE24767060EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D699E38-BB97-4831-B5BF-E1DF1735ABEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2237",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Toshiba Home gateway HEM-GW16A con versiones de firmware HEM-GW16A-FW-V1.2.0 y anteriores permite que un atacante ejecute comandos del sistema operativo arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw16a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "D34FB0D3-9DB4-4DD3-A755-239F9127EA79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw16a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9C8238-D8C8-46CD-993F-3A49C1627BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "4A511ECD-B10E-4482-8E2D-DE24767060EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D699E38-BB97-4831-B5BF-E1DF1735ABEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2238",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en Toshiba Home gateway HEM-GW16A con versiones de firmware HEM-GW16A-FW-V1.2.0 y anteriores y Toshiba Home gateway HEM-GW26A con versiones de firmware HEM-GW26A-FW-V1.2.0 y anteriores permite que atacantes remotos secuestren la autenticación de los administradores mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw16a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "D34FB0D3-9DB4-4DD3-A755-239F9127EA79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw16a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9C8238-D8C8-46CD-993F-3A49C1627BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toshiba:hem-gw26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "4A511ECD-B10E-4482-8E2D-DE24767060EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:hem-gw26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D699E38-BB97-4831-B5BF-E1DF1735ABEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN85901441/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2239",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript."
      }, {
        "lang" : "es",
        "value" : "Marp en versiones v0.0.10 y anteriores podría permitir que un atacante acceda a recursos y archivos locales utilizando JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marp:marp:0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDD2740-60FD-4615-8747-61D58906B7F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN21174546/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN21174546/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2243",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en versiones anteriores a la 1.7.2 de Responsive Lightbox permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dfactory:responsive_lightbox:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "764A1A97-4268-454E-BACB-B099DD32A7F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN39819446/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99463",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/responsive-lightbox/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN39819446/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/responsive-lightbox/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2244",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en MFC-J960DWN con versiones de firmware ver.D y anteriores permite que atacantes remotos secuestren la autenticación de los administradores mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:mfc-j960dwn_firmware:d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B2C476-E42C-4465-9BFB-84D209CDB14A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:mfc-j960dwn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B818C4E4-8800-4C5D-8674-5FB65C08E3D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN95996423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.brother.co.jp/j/s/support/vul_info/JVN95996423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN95996423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.brother.co.jp/j/s/support/vul_info/JVN95996423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2245",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-07T13:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en Shortcodes Ultimate en versiones anteriores a la 4.10.0 permite que atacantes remotos lean archivos arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getshortcodes:shortcodes_ultimate:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.9.9",
            "matchCriteriaId" : "CF4AD338-8412-4B16-90F8-0CC9A2E0C371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99495",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63249051/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1684377/#file217",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/shortcodes-ultimate/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63249051/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1684377/#file217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/shortcodes-ultimate/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0326",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-07T14:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driver could result in possible information disclosure. This issue is rated as Moderate. Product: Android. Version: N/A. Android ID: A-33718700. References: N-CVE-2017-0326."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de revelación de información en el controlador de vídeo NVIDIA, debido a una función de lectura fuera de límites en el controlador Tegra Display Controller, podría resultar en una revelación de información. Este problema se ha clasificado como moderado (Moderate). Producto: Android. Versión: N/A. Android ID: A-33718700. Referencias: N-CVE-2017-0326."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99477",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0340",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-07T14:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled size could lead to a memory corruption and possible remote code execution. This issue is rated as High. Product: Android. Version: N/A. Android ID: A-33968204. References: N-CVE-2017-0340."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el componente Libnvparser de NVIDIA debido a una memcpy en un búfer de tamaño fijo con un tamaño controlado por el usuario podría conllevar a una corrupción de memoria y una posible ejecución de código remota. Este problema está valorado como alto. Producto: Android. Versión: N/A. Identificación de Android: A-33968204. Referencias: N-CVE-2017-0340."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99477",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T14:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Irssi anterior a versión 1.0.4. Cuando se reciben mensajes con marcas de tiempo no válidas, Irssi intentaría la desreferencia de un puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "EE14BB61-3A65-4C86-9F07-238F5849277F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_07.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_07.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T14:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Irssi anterior a versión 1.0.4. Al actualizar la lista de nick interna, Irssi podría usar incorrectamente la interfaz de GHashTable y liberar el nick al actualizarlo. Esto resultaría luego en condiciones de uso de memoria previamente liberada en cada acceso de la tabla de hash."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "EE14BB61-3A65-4C86-9F07-238F5849277F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_07.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_07.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T14:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Statistics hasta la versión 12.0.9 para WordPress tiene XSS en los parámetros rangestart y rangeend en la página wps_referrers_page."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-statistics:wp_statistics:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "12.0.9",
            "matchCriteriaId" : "503C9B89-A005-40BC-B70E-32B7D1CF003A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lorexxar.cn/2017/07/07/WordPress%20WP%20Statistics%20authenticated%20xss%20Vulnerability%28WP%20Statistics%20-=12.0.9%29/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lorexxar.cn/2017/07/07/WordPress%20WP%20Statistics%20authenticated%20xss%20Vulnerability%28WP%20Statistics%20-=12.0.9%29/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader anterior a versión 8.3.1 y PhantomPDF anterior a versión 8.3.1, presenta una vulnerabilidad de Escritura Arbitraria, que permite a los atacantes remotos ejecutar código arbitrario por medio de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-123"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.0.14878",
            "matchCriteriaId" : "78F1409A-2B5D-4B55-BB5E-9F34D9A99607"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.0.14878",
            "matchCriteriaId" : "1765179E-1AB8-42F2-853B-640F7924085D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99499",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T16:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image."
      }, {
        "lang" : "es",
        "value" : "La función mng_get_long en el archivo coders/png.c en ImageMagick versión 7.0.6-0, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria y bloqueo de aplicación) por medio de una imagen MNG creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99496",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/538",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. \"0day\"), running the service in question with root privileges rather than the user intended."
      }, {
        "lang" : "es",
        "value" : "systemd versión v233 y anteriores, no pueden analizar de forma segura los nombres de usuario que comienzan con un dígito numérico (por ejemplo, \"\"0day\"\"), ejecutando el servicio en cuestión con privilegios root en lugar de lo que el usuario desea."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "229",
            "versionEndExcluding" : "234",
            "matchCriteriaId" : "4EA3AF57-73E4-44F8-88EF-574BD0A10EE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/02/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99507",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038839",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/systemd/systemd/issues/6237",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/systemd/systemd/issues/6237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way."
      }, {
        "lang" : "es",
        "value" : "La función \"ares_parse_naptr_reply()\" de c-ares, que es usada para analizar las respuestas NAPTR, podría ser activada para leer la memoria fuera del búfer de entrada dado si el pasado en el paquete de respuesta DNS fue creado de una manera particular."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares:c-ares:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BDB0FC-AA36-4C41-B3DC-201F0DE0191A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares:c-ares:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B38F8E2-7710-4303-A80F-9009619BEC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares:c-ares:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1637EF-3393-4770-91AE-89EA53D57830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares:c-ares:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FA2559-0DB1-49BE-A6E6-C73408F4AB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares:c-ares:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92EADF5-3500-4F37-808E-41DC48DE8D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares_project:c-ares:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F4F4BD-4316-4CB2-8FCE-9EE5C59E64EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-ares_project:c-ares:1.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "476034B6-69BF-4130-8139-D5DDC1EB0028"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "A47FC4F7-1F77-4314-B4B3-3C5D8E335379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.8.4",
            "matchCriteriaId" : "AC1070A7-E3E0-423C-A73A-040FCED8AD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.12.0",
            "matchCriteriaId" : "121E5D5D-B4D9-43F3-B5C9-74590192FAF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.8.1",
            "matchCriteriaId" : "D107EC29-67E7-40C3-8E5A-324C9105C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.11.1",
            "matchCriteriaId" : "6EA3B1B4-3576-4508-AC77-4AE3A5622E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.10.1",
            "matchCriteriaId" : "B9C02D94-B713-4BE4-8C26-F21C2ADC01B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.1.4",
            "matchCriteriaId" : "02C6E585-2704-4EC2-BED1-CF6D61BE9CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99148",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://c-ares.haxx.se/0616.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://c-ares.haxx.se/adv_20170620.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://c-ares.haxx.se/0616.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://c-ares.haxx.se/adv_20170620.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6868",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-07-07T17:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to perform administrative actions on the Communication Process (CP) of the RNA series module, if network access to Port 102/TCP is available and the configuration file for the CP is stored on the RNA's CPU."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de autenticación inapropiada en SIMATIC CP 44x-1 RNA de Siemens, todas las versiones anteriores a 1.4.1. Un atacante remoto no autenticado puede ser capaz de realizar acciones administrativas en el Proceso de Comunicación (CP) del módulo de la serie RNA, si el acceso de red al puerto 102/TCP está disponible y el archivo de configuración para el CP se salva en la CPU del RNA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_cp_44x-1_redundant_network_access_modules:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "D0D86C69-26D1-482A-BB8D-B5976628CBC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99234",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038788",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-173-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-126840.pdf",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/99234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-173-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-126840.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9627",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-07-07T17:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema de consumo incontrolable de recursos fue descubierto en Schneider Electric Wonderware ArchestrA Logger, en su versión 2017.426.2307.1 y anteriores. La vulnerabilidad de consumo incontrolable de recursos podía permitir a un atacante agotar la fuente de memoria de la máquina causando una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_archestra_logger:2017.426.2307.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9B4217-AAE8-4B13-B710-2DD773E58785"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99488",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038836",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9629",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-07-07T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow a remote attacker to execute arbitrary code in the context of a highly privileged account."
      }, {
        "lang" : "es",
        "value" : "Un problema de buffer-overflow en la pila fue descubierto en Schneider Electric Wonderware ArchestrA Logger, en su versión 2017.426.2307.1 y anteriores. La vulnerabilidad de buffer overflow basado en pila ha sido descubierta, lo que podría permitir a un atacante remoto ejecutar código aleatorio en el contexto de una cuenta con altos privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_archestra_logger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017.426.2307.1",
            "matchCriteriaId" : "44B2EAA7-1C85-43EC-BB4D-E2E3328A3BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99488",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038836",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9631",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-07-07T17:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The null pointer dereference vulnerability could allow an attacker to crash the logger process, causing a denial of service for logging and log-viewing (applications that use the Wonderware ArchestrA Logger continue to run when the Wonderware ArchestrA Logger service is unavailable)."
      }, {
        "lang" : "es",
        "value" : "Un problema de desreferencia de un puntero NULL fue descubierto en Schneider Electric Wonderware ArchestrA Logger, en sus versiones 2017.426.2307.1 y anteriores. La vulnerabilidad de desreferencia a un puntero NULL podría permitir a un atacante hacer caer el proceso logger, causando una denegación de servicio para el loggin y el log-viewing (las aplicaciones que usan Wonderware ArchestrA Logger continua ejecutandose cuando el servicioWonderware ArchestrA Logger esta inhabilitado)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_archestra_logger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017.426.2307.1",
            "matchCriteriaId" : "44B2EAA7-1C85-43EC-BB4D-E2E3328A3BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99488",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038836",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modules/swffilter.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2, procesa un archivo creado en swfcombine, puede conllevar a una desreferencia de puntero NULL en la función swf_DeleteFilter() en la biblioteca lib/modules/swffilter.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2, procesa un archivo creado en swfc, puede conllevar a una desreferencia de puntero NULL en la función dict_lookup() en la biblioteca lib/q.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2, procesa un archivo creado en png2swf, puede conllevar a una Violación de Segmentación en la función png_load() en la biblioteca en lib/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2, procesa un archivo creado en wav2swf, puede conllevar a una Violación de Segmentación en la función wav_convert2mono() en la biblioteca lib/wav.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2, procesa un archivo creado en swfextract, puede conllevar a una desreferencia de puntero NULL en la función swf_FoldSprite() en la biblioteca lib/rxfswf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c."
      }, {
        "lang" : "es",
        "value" : "Cuando SWFTools versión 0.9.2, procesa un archivo creado en swfcombine, puede conllevar a una desreferencia de un puntero NULL en la función swf_Relocate() en la biblioteca lib/modules/swftools.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-07T18:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length color_image data structure."
      }, {
        "lang" : "es",
        "value" : "La función ReadOneJNGImage en el archivo coders/png.c en GraphicsMagick versión 1.3.26, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) durante la lectura de JNG por medio  de una estructura de datos color_image de longitud cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/d445af60a8d5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/dea93a690fc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99498",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/d445af60a8d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/dea93a690fc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7660",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-07T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism using the BasicAuthPlugin or if the user has implemented a custom Authentication plugin, which does not implement either \"HttpClientInterceptorPlugin\" or \"HttpClientBuilderPlugin\", his/her servers are vulnerable to this attack. Users who only use SSL without basic authentication or those who use Kerberos are not affected."
      }, {
        "lang" : "es",
        "value" : "Apache Solr utiliza un mecanismo basado en PKI para proteger la comunicación entre nodos cuando la seguridad está habilitada. Es posible crear un nombre de nodo especialmente elaborado que no existe como parte del clúster y apunta hacia un nodo malicioso. Esto puede engañar a los nodos del clúster para creer que el nodo malicioso es un miembro del clúster. Por lo tanto, si los usuarios de Solr han habilitado el mecanismo de autenticación BasicAuth mediante BasicAuthPlugin o si el usuario ha implementado un complemento de autenticación personalizado, que no implementa \"HttpClientInterceptorPlugin\" o \"HttpClientBuilderPlugin\", sus servidores son vulnerables a este ataque. Los usuarios que solo utilizan SSL sin autenticación básica o aquellos que utilizan Kerberos no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A15EC7D-D9FD-4BAF-AB39-3CDF36485557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BE5B93-258A-4CE9-990C-3B8447A6B454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6ECE67-ED5D-4188-9E67-3B4C91251D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C579A3-DBF2-4B9A-9119-DD7854D1B74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB5011F-D3B0-4778-9EE6-052EFA99608D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EABC66-0815-4B89-B0ED-2C44EC20F8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79098DA-B7D2-4A8A-9FD8-B1B4330DBA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3541C154-9A45-4331-8C15-B0BABE388058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38C7034-7432-4530-8CFC-A04F08300074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE8EEE3-1EC6-4277-86CA-6AF6CC5B7928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F3170C-C5D6-431F-A2DD-692636CF5DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA339070-A2BD-4559-B400-2BC2EB9923A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B737CF14-C14A-4D97-B838-47EC4A2C68C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036F935D-B469-47C6-AF5D-3DFC73070753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A1A17A-32EA-40A2-9A1E-6019B493B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76557E9C-1F16-44D9-ACA1-F4DAEC966F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE068A02-D47A-4C6C-BFD3-040385599CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB3F9EB-63DE-4780-A357-FE89D1DB70CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099B5DFD-CCD9-4EE7-B49E-77EC286D5F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745CE558-1411-4356-9B79-2805FB4C80D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B41559-4695-467E-B7EA-B9D86127CFD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.us.apache.org/mod_mbox/www-announce/201707.mbox/%3CCAOOKt53EgrybaD%2BiSn-nBbvFdse-szhg%3DhMoDZuvUvyMme-Z%3Dg%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99485",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181127-0003/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://mail-archives.us.apache.org/mod_mbox/www-announce/201707.mbox/%3CCAOOKt53EgrybaD%2BiSn-nBbvFdse-szhg%3DhMoDZuvUvyMme-Z%3Dg%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181127-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8442",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-07-07T20:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch _nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated Elasticsearch user to improperly view these details."
      }, {
        "lang" : "es",
        "value" : "Elasticsearch X-Pack Security versiones desde 5.0.0 hasta 5.4.3, cuando está habilitada, pueden resultar en que la API _nodes de Elasticsearch  filtre información confidencial de configuración, como las paths y frases de contraseña de las claves SSL que se configuraron como parte de un realm de autenticación. Esto podría permitir que un usuario autenticado de Elasticsearch visualice inapropiadamente estos detalles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-402"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.4.3",
            "matchCriteriaId" : "EB0FC342-EE55-4E79-97C9-C442792C68EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7512",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-07T22:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512 maps to an OpenVPN vulnerability. The proper CVE ID for that OpenVPN vulnerability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN. Any source that lists BOTH CVE-2017-7512 and CVE-2017-7521 for OpenVPN should have listed ONLY CVE-2017-7521."
      }, {
        "lang" : "es",
        "value" : "La plataforma de administración de API (AMP) de 3scale (aka RH-3scale) anterior a la versión 2.0.0 de Red Hat, permitiría la creación de un token de acceso sin un secreto de cliente. Un atacante podría utilizar este fallo para omitir los controles de autenticación y conseguir acceso a las API restringidas. NOTA: algunas fuentes tienen un error tipográfico en que el CVE-2017-7512 se relaciona con una vulnerabilidad de OpenVPN. El ID de CVE adecuado para esa vulnerabilidad de OpenVPN es CVE-2017-7521. Específicamente, CVE-2017-7521 es el ID de CVE correcto para DOS hallazgos estrechamente relacionados en OpenVPN. Cualquier fuente que enumere AMBOS CVE-2017-7512 y CVE-2017-7521 para OpenVPN debe haber enumerado SOLAMENTE CVE-2017-7521."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:3scale_api_management_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBAC48D-AA8F-45F9-98DE-AA676C926661"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-7512",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1457997",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-7512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1457997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T10:29:00.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check."
      }, {
        "lang" : "es",
        "value" : "Knot DNS anterior a versión 2.4.5 y versión 2.5.x anterior a 2.5.2, contiene un fallo dentro de la implementación del protocolo TSIG que permitiría a un atacante con un nombre de clave válido y un algoritmo omitir la autenticación TSIG si no se establecen restricciones ACL adicionales, debido a una comprobación inapropiada del período de validez TSIG."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knot-dns:knot_dns:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.4",
            "matchCriteriaId" : "7F0CEBFD-11BC-40ED-935F-9E621F99A1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knot-dns:knot_dns:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BBCEF1-0DF1-4A0A-8B43-EEBA203A7314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knot-dns:knot_dns:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362CB21-8799-4059-A816-B63064389D0B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00076.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00078.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00089.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00049.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3910",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99598",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.synacktiv.ninja/ressources/Knot_DNS_TSIG_Signature_Forgery.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/865678",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nic.cz/pipermail/knot-dns-users/2017-June/001144.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00076.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00078.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00089.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.synacktiv.ninja/ressources/Knot_DNS_TSIG_Signature_Forgery.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/865678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nic.cz/pipermail/knot-dns-users/2017-June/001144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T12:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter."
      }, {
        "lang" : "es",
        "value" : "phpLDAPadmin hasta versión 1.2.3 presenta una vulnerabilidad de tipo cross-site scripting XSS en el archivo htdocs/entry_chooser.php por medio de los parámetros form, element, rdn o container."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B754CCF0-CBD1-45E5-93BC-AEA72E5B78C9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1701731",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leenooks/phpLDAPadmin/issues/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1701731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leenooks/phpLDAPadmin/issues/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T17:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol."
      }, {
        "lang" : "es",
        "value" : "tcpdump 4.9.0 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de aplicación) mediante datos de paquetes manipulados. El cierre inesperado ocurre en la función EXTRACT_16BITS que es llamada desde la función stp_print por el protocolo Spanning Tree (STP)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468504",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T17:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance."
      }, {
        "lang" : "es",
        "value" : "Vim versión 8.0, permite a los atacantes causar una denegación de servicio (liberación no válida) o posiblemente tener otro impacto no especificado por medio de un archivo fuente creado (aka -S). NOTA: podría haber un número limitado de escenarios en que esto tenga relevancia para la seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC903FFF-0467-4E1C-916E-BA16A75EDDF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468492",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4309-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T17:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer."
      }, {
        "lang" : "es",
        "value" : "La función ole_init en el archivo ole.c en catdoc versión 0.95, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región heap de la memoria y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo creado, es decir, los datos se escriben en las direcciones de memoria antes del comienzo del búfer tmpBuf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fossies:catdoc:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABDDB23-C0A0-4CE2-B7F5-664556A7E90F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468471",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T17:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) versión 2.14rc0, el archivo preproc.c permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región heap de la memoria  y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392415",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T17:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data."
      }, {
        "lang" : "es",
        "value" : "En ncurses versión 6.0, hay un intento de acceso 0xffffffffffffffffff en la función append_acs del archivo tinfo/parse_entry.c. Podría conllevar a un ataque remoto de denegación de servicio si el código de la biblioteca terminfo se utiliza para procesar datos terminfo no seguros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464686",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-08T17:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data."
      }, {
        "lang" : "es",
        "value" : "En ncurses 6.0, hay una desreferencia de puntero NULL en la función _nc_parse_entry de tinfo/parse_entry.c. Podría provocar un ataque de denegación de servicio remoto si se utiliza el código de la librería terminfo al procesar datos terminfo no confiables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464691",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1464691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4976",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-09T20:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server."
      }, {
        "lang" : "es",
        "value" : "ESRS Policy Manager anterior a versión 6.8 de EMC, contiene una cuenta no documentada (administrador de OpenDS) con una contraseña por defecto. Un atacante remoto con el conocimiento de la contraseña por defecto puede iniciar sesión en el sistema y alcanzar privilegios de administrador en el servidor de directorio LDAP local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:esrs_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "32E20D5E-3F45-407B-BD0D-3D767BE8DCB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/13",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038840",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8002",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-09T20:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands."
      }, {
        "lang" : "es",
        "value" : "Data Protection Advisor anterior a versión 6.4 de EMC, contiene múltiples vulnerabilidades de inyección SQL ciega. Un atacante autenticado remoto puede potencialmente explotar estas vulnerabilidades para conseguir información sobre la aplicación causando la ejecución de comandos SQL arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:data_protection_advisor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "E023164A-9BB1-43DC-9048-A661772FDF50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99487",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038841",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8003",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-09T20:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized information from the underlying OS server by supplying specially crafted strings in input parameters of the application."
      }, {
        "lang" : "es",
        "value" : "Data Protection Advisor de EMC anterior a versión 6.4, contiene una vulnerabilidad de salto de directorio. Un usuario autenticado remoto con privilegios elevados puede potencialmente explotar esta vulnerabilidad para acceder a información no autorizada desde el servidor del sistema operativo subyacente mediante la proporción de cadenas especialmente creadas en los parámetros de entrada de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:data_protection_advisor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "E023164A-9BB1-43DC-9048-A661772FDF50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99487",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038841",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T03:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c."
      }, {
        "lang" : "es",
        "value" : "libxar.so en xar versión 1.6.1, presenta una desreferencia de puntero NULL en la función xar_unserialize en el archivo archive.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xar_project:xar:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73DE95C-7AFD-41AB-A3E3-C16D8A6E5798"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_unserialize-archive-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S2KRIILUKBJHXDNYJQQX74TFUQRG5ND/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YV6RF6VWM7AFYFTTS7VY5TNH26QUEEFC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_unserialize-archive-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S2KRIILUKBJHXDNYJQQX74TFUQRG5ND/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YV6RF6VWM7AFYFTTS7VY5TNH26QUEEFC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T03:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c."
      }, {
        "lang" : "es",
        "value" : "libxar.so en xar versión 1.6.1,presenta una desreferencia de puntero NULL en la función xar_get_path en el archivo util.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xar_project:xar:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73DE95C-7AFD-41AB-A3E3-C16D8A6E5798"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_get_path-util-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S2KRIILUKBJHXDNYJQQX74TFUQRG5ND/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YV6RF6VWM7AFYFTTS7VY5TNH26QUEEFC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_get_path-util-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S2KRIILUKBJHXDNYJQQX74TFUQRG5ND/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YV6RF6VWM7AFYFTTS7VY5TNH26QUEEFC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T03:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the \"block_type != 2\" case, a similar issue to CVE-2017-9870."
      }, {
        "lang" : "es",
        "value" : "La función III_i_stereo en el archivo libmpg123/layer3.c en mpg123 hasta versión 1.25.1, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva de búfer y bloqueo de aplicación) por medio de un archivo de audio creado que es manejado inapropiadamente en el código para el caso \"block_type != 2\", un caso similar al problema CVE-2017-9870."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.25.1",
            "matchCriteriaId" : "C26C3530-0329-463B-A41C-105278D25946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/07/03/mpg123-global-buffer-overflow-in-iii_i_stereo-layer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/07/03/mpg123-global-buffer-overflow-in-iii_i_stereo-layer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T03:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick versión 1.3.26 tiene una vulnerabilidad de doble liberación (double free) en la función ReadOneJNGImage() en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/4d0baa77245b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99504",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/4d0baa77245b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T03:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial of service (resource consumption) via crafted JPEG files."
      }, {
        "lang" : "es",
        "value" : "La función ReadJPEGImage en el archivo coders/jpeg.c en GraphicsMagick versión 1.3.26, crea una cache de píxeles antes de una lectura con éxito de una línea de navegación, lo que permite a los atacantes remotos causar una denegación de servicio (consumo de recursos) por medio  de archivos JPEG creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/b4139088b49a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99503",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/b4139088b49a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T03:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadMATImage function in coders\\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call."
      }, {
        "lang" : "es",
        "value" : "La función ReadMATImage en el archivo coders\\mat.c en ImageMagick versión 7.0.5-6, presenta una vulnerabilidad de pérdida de memoria que puede causar agotamiento de memoria por medio de un archivo MAT creado, relacionado con el orden incorrecto de una llamada SetImageExtent."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99506",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/469",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T14:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c."
      }, {
        "lang" : "es",
        "value" : "En PHP anterior a versión 5.6.31, versión 7.x anterior a 7.0.17 y versión 7.1.x anterior a 7.1.3, los atacantes remotos podrían causar un ataque de denegación de servicio de consumo de CPU mediante la inyección de variables de formulario largo, relacionadas con el archivo main/php_variables.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/0f8cf3b8497dc45c010c44ed9e96518e11e19fc3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/a15bffd105ac28fd0dd9b596632dbf035238fda3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/0f8cf3b8497dc45c010c44ed9e96518e11e19fc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/a15bffd105ac28fd0dd9b596632dbf035238fda3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T14:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c."
      }, {
        "lang" : "es",
        "value" : "En PHP anterior a versión 5.6.31, una liberación no válida en la deserialización WDDX de parámetros booleanos podría ser utilizada por atacantes capaces de inyectar XML para la deserialización en el bloqueo del intérprete PHP, relacionado con una liberación no válida para un elemento booleano vacío en el archivo ext/wddx/wddx.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74145",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2aae60461c2ff7b7fbcdd194c789ac841d0747d7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2aae60461c2ff7b7fbcdd194c789ac841d0747d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T14:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission."
      }, {
        "lang" : "es",
        "value" : "En PHP, en versiones anteriores a la 5.6.31, las versiones 7.x anteriores a la 7.0.21 y las versiones 7.1.x anteriores a la 7.1.7, el código de sellado PEM de la extensión openssl no comprobó el valor de retorno de la función de sellado de OpenSSL, lo que podría conducir al cierre inesperado del intérprete de PHP. Esto está relacionado con un conflicto de interpretación para un número negativo en ext/openssl/openssl.c y una omisión de documentación OpenSSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=73cabfedf519298e1a11192699f44d53c529315e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=89637c6b41b510c20d262c17483f582f115c66d6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91826a311dd37f4c4e5d605fa7af331e80ddd4c3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74651",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=73cabfedf519298e1a11192699f44d53c529315e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=89637c6b41b510c20d262c17483f582f115c66d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91826a311dd37f4c4e5d605fa7af331e80ddd4c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T14:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist."
      }, {
        "lang" : "es",
        "value" : "En PHP anterior a versión 5.6.31, versión 7.x anterior a 7.0.21, y versión 7.1.x anterior a 7.1.7, un error en el código de análisis timelib_meridian de la extensión de fecha podría ser utilizado por los atacantes capaces de proporcionar cadenas de fecha para filtrar información del intérprete, relacionada con el archivo ext/date/lib/parse_date.c y vulnerabilidad de lectura fuera de límites que afectan a la función php_parse_date. NOTA: la corrección apropiada está en la commit e8b7698f5ee757ce2c8bd10a192a491a498f891c, no en la gist bd77ac90d3bdf31ce2a5251ad92e9e75."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e8b7698f5ee757ce2c8bd10a192a491a498f891c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74819",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/bd77ac90d3bdf31ce2a5251ad92e9e75",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e8b7698f5ee757ce2c8bd10a192a491a498f891c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/bd77ac90d3bdf31ce2a5251ad92e9e75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T14:29:00.667",
      "lastModified" : "2023-11-07T02:38:10.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not an independently fixable security issue relative to CVE-2017-11145.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T14:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c."
      }, {
        "lang" : "es",
        "value" : "En PHP anterior a versión 5.6.30 y versión 7.x anterior a 7.0.15, el manejador de archivos PHAR podría ser utilizado por archivos maliciosos suministrados por los atacantes para bloquear el intérprete PHP o potencialmente divulgar información debido a una lectura excesiva de búfer en la función phar_parse_pharfile en el archivo ext/phar/phar.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.30",
            "matchCriteriaId" : "76B7220C-1274-4F7F-914D-A1C6BF0EBDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.15",
            "matchCriteriaId" : "3A59822F-11EA-4F4D-9721-6D3DD9842FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.1",
            "matchCriteriaId" : "473456E3-B45F-46C0-AEF8-72D78487CF38"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e5246580a85f031e1a3b8064edbaa55c1643a451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99607",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e5246580a85f031e1a3b8064edbaa55c1643a451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1284",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-10T16:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive information from WebSphere Application Server traces including user credentials. IBM X-Force ID: 125145."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 9.0.1 y 9.0.2 podría permitir a un usuario local con habilidad de ejecución o activación de rutas, obtener información sensible desde rutas de WebSphere Application Server incluidas credenciales de usuario. X-Force ID: 125145."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003851",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99494",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125145",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1337",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-10T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Force ID: 126245."
      }, {
        "lang" : "es",
        "value" : "La aplicación Java/JMS de WebSphere MQ versiones 9.0.1 y 9.0.2 de IBM, puede transmitir incorrectamente las credenciales de usuario en texto plano. ID de IBM X-Force: 126245."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003853",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99493",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126245",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1398",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-10T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 127385."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Commerce Enterprise, Professional, Express y Developer versiones 6.0, 7.0 y 8.0, podrían permitir que un atacante remoto conducir ataques de phishing mediante un ataque de redireccionamiento abierto. Mediante la persuasión a una víctima para que visite un sitio Web especialmente creado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL desplegada para redireccionar a un usuario a un sitio web malicioso que parece ser de confianza. Esto podría permitir al atacante conseguir información altamente sensible o conducir nuevos ataques contra la víctima. ID de IBM X-Force: 127385."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2E7243-19A2-47B2-905E-47219F08F4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C534568E-A611-472C-9399-15FC66D875C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF3D419-A12C-4A21-9796-DBB73D638E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87504CD1-92DA-4847-BDA7-013622CA7AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625E1896-9035-46F3-957B-83FB128F90F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3AC68C-CCA2-495D-AE21-04C937CD5340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56CE80F-A7E1-4BE0-9679-BB4F94362B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3C8F33-D613-4183-ABE1-5A3A08C16BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5F593-BE92-4E37-9EE9-42C05FA87DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D19E4D-A256-44D5-A8D8-7C9F3A64B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12961C31-63AD-4AA8-8267-E003F985CE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9D8DAA-285C-4ED1-A602-412725FD79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75B5188-E337-4240-9834-92C11DCE9DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2E3F22-60F9-4B70-9485-6DDAC7FE4496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8902699B-AE6A-44A4-838A-28F3EB62881B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50A02C-E75F-4602-BDAA-FA4CBEE9CB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC536A-498B-439F-927E-B72314F8B0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0A8CAD-D5DD-45DE-900F-046673002D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC353B83-4053-4762-8E90-9E96AA30F04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A3EBB9-C6B1-4A2D-A4E5-2D3E53A1CF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1895E-384D-4EF3-A395-7AFFC22E46CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438E93D2-502F-4569-AB8A-EFECA403798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64287718-D7AD-425B-B7B7-A6442BFD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1523569-2A23-4689-BE59-F74E678A8B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F4B2FD-14BA-46D9-B09F-1DABBA88FF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B22C48-3347-422C-9730-0A9442645D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDA8ACF-4134-434E-A5FD-39A587DE27FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFB25F3-6FD7-45C9-AFCF-FAB034107E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BCC81A-B7DA-40B9-B883-A00DF9CE585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8C98FD-E4AB-4BC8-9729-652294B1DF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C13D23-08C9-4836-A204-5168C8B019AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE36EB64-A7C6-42F2-876D-B7DBAF7C83BA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775206CE-A901-4653-BD17-DE1BFBA076FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213C52C9-C5B5-4F26-BBB7-EE0824A995AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC937CD-1BE1-4827-9145-E2EA7F3AA792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6189A9-E083-41D3-9D36-7B41D82EC197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6F4DC0-41E3-4F73-9F62-3D415F8949C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACFED34-9B1E-4950-9D03-756942EF32F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202F791B-697B-4D9C-BF5D-84F7C657C790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012405FA-CE85-47B6-B368-2EAEBD06A15E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05260EDC-BD28-4F89-809A-7852E294A540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F86968-8BD4-42D0-A5C5-9685E3287D01"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59C1AD7-5E0A-4DB6-B1F9-BAE6C6BC52D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF24659-1284-4762-925C-4879B56AC386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4783F5D2-0709-4E5B-B6B7-DF7823E928CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB6E277-36B8-483E-8F9E-34D350BBB0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A7EA48-BCC0-41BD-975D-0C01B6066BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2AE738-BC94-4731-B6C3-54F808756ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE23443C-6FB5-43AC-9822-1267AE61D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5952ADD8-4D62-401A-A5D3-1A63706D2F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA04184-B648-48CB-8664-D53AE07196BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F7D656-CFD1-4447-97CE-1D183CB41571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005360",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99491",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127385",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9791",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-10T16:29:00.277",
      "lastModified" : "2025-10-22T00:16:12.670",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage."
      }, {
        "lang" : "es",
        "value" : "El plugin Struts 1 en Apache Struts versiones 2.1.x y 2.3.x, podría permitir la ejecución de código remota por medio de un valor de campo malicioso pasado en un mensaje sin procesar en la ActionMessage."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apache Struts 1 Improper Input Validation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3316DA-9E34-4955-91CA-E35B141A7007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D152B29-FAD5-4DEA-B187-278EBD37FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC68463-F500-471C-8600-8F8FD9743B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92AAE08-4811-465A-8178-25F5F349B8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487975D-6394-4136-B45C-C1F209465B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41957-8CCA-46A6-BD31-4039EEF3C457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B4E64-2A36-49C6-B09D-77B3BDF69709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2481505C-4FD1-4195-9E10-9DD741498FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED63DB-2AAF-4BC9-A844-074EDF63C89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A6CEED-6C43-4325-B36C-9F254CCDFDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F43088-26AA-4890-A9D6-1B9B48D5F02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6820E3-8FDF-4BDF-8B62-E604A91F1280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44527919-8403-42A8-9CE1-3B4F58630F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB91D8A-14B8-4263-B90D-F776535F9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB525941-7175-43C1-9F17-814F5F7C72CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10D559E-04A0-4002-947C-D3902138795B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89203DD8-2C95-4546-9504-83654FFA5DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3D5644-CFAC-4FB5-A1FB-387F97876098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC883A7-0766-4857-ABC8-9DB4BA713650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FF6282-0BCA-46EB-9648-6EE3EDA189F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1467BC-9BC8-402D-A420-615CF9698648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880AEA69-3705-447D-80FF-60753248158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524C5119-416D-413B-BF1D-29291E23FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45446B16-F531-4C6D-B889-A8A6622C70A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71823E13-1896-4EE4-A49C-CFFB717FFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067F6249-CC5A-4402-843C-06D5F9F77267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFA78DD-B60C-46AD-BCCB-4E15BB16BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA1EABE-5292-44C2-8327-54201A42F204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327A6EA-69AF-4EB2-8F17-8011678FAB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FAA0C-0908-4105-BE3A-016B4A298264"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://struts.apache.org/docs/s2-048.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99484",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038838",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180706-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42324/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44643/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://struts.apache.org/docs/s2-048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180706-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42324/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44643/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9791",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T18:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en aggregate_graphs.php en Cacti versión 1.1.12, permite a los usuarios autenticados a distancia inyectar secuencias de comandos web arbitrarias o HTML mediante cabeceras de referencia HTTP especialmente diseñadas, relacionadas con la variable $cancel_url."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBF429F-68C6-4FBE-ACE3-E391B0DDAB02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038908",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/847",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T18:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadXWDImage function in coders\\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file."
      }, {
        "lang" : "es",
        "value" : "La función ReadXWDImage en el archivo coders\\xwd.c en ImageMagick versión 7.0.5-6, presenta una vulnerabilidad de pérdida de memoria que puede causar el agotamiento de la memoria por medio de un campo de longitud creada (número de entradas de mapa de color) en el encabezado de un archivo XWD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/471",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7670",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-10T18:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is restarted. If connections remain in the ESTABLISHED state indefinitely and accumulate in number to match the size of the thread pool dedicated to processing DNS requests, the thread pool becomes exhausted. Once the thread pool is exhausted, Traffic Router is unable to service any DNS request, regardless of transport protocol."
      }, {
        "lang" : "es",
        "value" : "El componente Traffic Router del proyecto Apache Traffic Control en incubación es vulnerable a un ataque de denegación de servicio de estilo Slowloris. Las conexiones TCP realizadas en el puerto DNS configurado permanecerán en el estado ESTABLISHED hasta que el cliente cierre explícitamente la conexión o se reinicie Traffic Router. Si las conexiones permanecen en el estado ESTABLISHED indefinidamente y se acumulan en número para que coincida con el tamaño del grupo hilo (subprocesos) dedicado al procesamiento de peticiones DNS, el grupo hilo (subprocesos) se agota. Una vez que se agota el grupo de hilo (subprocesos), Traffic Router no puede atender ninguna petición DNS, independientemente del protocolo de transporte."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "1DBD0BDC-FE45-4783-836C-98AC3C1AD582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:1.8.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7D341B-4BCD-4040-9539-0B3D3BF489AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A5940F-5AF1-4E6A-8D40-800C402188DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A07F5552-C1D7-4D61-A7EA-FACE14BFB707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:2.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "CF329CC2-2B4C-46B7-AAB3-5902C66731C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:2.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA4DE4E-41E9-4D6A-824A-259A10C58A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:2.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A0F919-6FA5-4C28-B840-E605C7EA1C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_control:2.0.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EA36D0-C636-4D8F-96B3-77BF5266D9B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/42b207e9f526353b504591684bd02a5e9fcb4b8f28534253d07740a0%40%3Cusers.trafficcontrol.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/bb09fc29e9c2ee85b118a3d5748a8a523d30cf691ff8b606c6a1748c%40%3Ccommits.trafficcontrol.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c675031ac220b5eae64a9c84a03ee60045c6045738607dca4a96cb8%40%3Ccommits.trafficcontrol.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/42b207e9f526353b504591684bd02a5e9fcb4b8f28534253d07740a0%40%3Cusers.trafficcontrol.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/bb09fc29e9c2ee85b118a3d5748a8a523d30cf691ff8b606c6a1748c%40%3Ccommits.trafficcontrol.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c675031ac220b5eae64a9c84a03ee60045c6045738607dca4a96cb8%40%3Ccommits.trafficcontrol.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-10T19:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the \"Custom output format\" field)."
      }, {
        "lang" : "es",
        "value" : "NfSen anterior a versión 1.3.8, permite a los atacantes remotos ejecutar comandos de sistema operativo arbitrarios por medio de metacaracteres shell en el parámetro customfmt (también se conoce como el campo \"Custom output format\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.7",
            "matchCriteriaId" : "689759A5-360A-4049-8927-C748E418CFB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42314/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42314/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5640",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-10T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemons to skip authentication checks when Kerberos is enabled (but TLS is not). If the malicious server responds with 'COMPLETE' before the SASL handshake has completed, the client will consider the handshake as completed even though no exchange of credentials has happened."
      }, {
        "lang" : "es",
        "value" : "Se notó que un proceso malicioso que suplantaba un demonio Impala en Apache Impala (incubando) versión 2.7.0 hasta 2.8.0, podría causar que el demonio Impala omita las comprobaciones de autenticación cuando Kerberos está habilitado (pero TLS no). Si el servidor malicioso responde con “COMPLETE” antes de que se haya completado el protocolo de enlace SASL, el cliente considerará soporte como completado aunque no se haya producido ningún intercambio de credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:impala:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497D7640-736C-4B18-94AE-5C72435383F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:impala:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A4E559-9641-4301-8175-29FB21AA65C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99508",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/c02e83aa46c90b7cbc87dd649cf8f9b73e11053eddea9144a397da53%40%3Cdev.impala.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/c02e83aa46c90b7cbc87dd649cf8f9b73e11053eddea9144a397da53%40%3Cdev.impala.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5652",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-10T20:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluster was configured to use TLS. The port in question was used by the StatestoreSubscriber class which did not use the appropriate secure Thrift transport when TLS was turned on. It was therefore possible for an adversary, with access to the network, to eavesdrop on the packets going to and coming from that port and view the data in plaintext."
      }, {
        "lang" : "es",
        "value" : "Durante un análisis de seguridad, fue encontrado que uno de los puerto de Apache Impala 2.7.0 a 2.8.0 envía datos en texto plano incluso cuando esta configurado para usar TLS. El puerto en cuestión fue usado por la clase StatestoreSuscriber la cual no usa de forma segura el ahorro de transport cuando el TLS es encendido. Entonces es posible para un adversario, con acceso a la red, espiar los paquetes que van y vienen del puerto y ver los datos en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:impala:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497D7640-736C-4B18-94AE-5C72435383F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:impala:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A4E559-9641-4301-8175-29FB21AA65C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540831/100/0/threaded",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5bab4424f23aebefc8108a0e30273c2a543a289df8113c461f930143%40%3Cdev.impala.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5bab4424f23aebefc8108a0e30273c2a543a289df8113c461f930143%40%3Cdev.impala.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6726",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve system process information, which could lead to the disclosure of confidential information. More Information: CSCvd59341. Known Affected Releases: 4.2(1.0)P1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI de Cisco Prime Network Gateway podría permitir que un atacante local autenticado recupere la información de proceso del sistema, que conllevaría a la divulgación de la información confidencial. Más información: CSCvd59341. Versiones afectadas conocidas: 4.2(1.0)P1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network:4.2\\(1.0\\)p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA63D84-E588-4C04-8023-7368067EF36B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99456",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-cpn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-cpn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6727",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly and creating Core Dump files. More Information: CSCvc63035. Known Affected Releases: 6.2(3a). Known Fixed Releases: 6.3(0.167) 6.2(3c)5 6.2(3.22)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo Server Message Block (SMB) de Cisco Wide Area Application Services (WAAS) podría permitir que un atacante remoto no autenticado provoque una condición de denegación de servicio (DoS) en un dispositivo afectado. Esto se debe a que un proceso se reinicia inesperadamente y crea archivos de volcado de memoria. Más información:\tCSCvc63035.\tVersiones afectadas conocidas: 6.2(3a). Versiones corregidas conocidas:\t6.3(0.167) 6.2(3c)5 6.2(3.22)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1C2B85-1129-49EA-9414-F44B7A911D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99483",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038824",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6728",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, because of Incorrect Permissions. More Information: CSCvb99389. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.3.1.15i.BASE 6.2.3.1i.BASE 6.2.2.15i.BASE 6.1.4.10i.BASE."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de Cisco IOS XR Software podría permitir que un atacante local autenticado ejecute código arbitrario a nivel de privilegios root en un sistema afectado debido a permisos incorrectos. Más información: CSCvb99389. Versiones afectadas conocidas: 6.2.1.BASE. Versiones corregidas conocidas: 6.3.1.15i.BASE 6.2.3.1i.BASE 6.2.2.15i.BASE.1.4.10i.BASE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92587AA0-BDB6-4594-8F14-DC2A91FA4CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99464",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038821",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ios",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ios",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6729",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de procesamiento Border Gateway Protocol (BGP) del sistema operativo Cisco StarOS para Cisco ASR 5000 Series Router y el software Cisco Virtualized Packet Core (VPC), podría permitir a un atacante remoto no autenticado causar la recarga del proceso BGP en un sistema afectado, resultando en una condición de denegación de servicio (DoS). Esta vulnerabilidad afecta a los productos siguientes si están ejecutándose en el sistema operativo Cisco StarOS y el BGP se habilita para el sistema: Cisco ASR 5000 Series Router y Cisco Virtualized Packet Core Software. Más información: CSCvc44968. Versiones afectadas conocidas: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Versiones fijas conocidas: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7328828D-C398-445D-9D39-151ACBC64092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:16.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A03BA11-CE7E-4CE1-BA13-9F3DB66EF4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF07C8-2BB2-4C87-9B53-1F5FD6B166AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1AAF0E-D72B-4F76-BDEE-F4A5D52827BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.2.0.59184:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6564BD37-C0DC-4804-B892-ACDC40ABA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF91C11-C7BD-48CC-89B1-743B74B993B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0798EBF4-3F40-4BF4-B1B0-E8DB62CD0752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.3.9.62033:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B511EAC1-E9DA-4E11-8BFE-02AFC55A5A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3CE2F2-C090-4399-B76E-A9F49A629C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAD7B1D-F05F-4C7A-A9C7-D7F3AA268BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:17.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EF2980-0D33-4EC9-A8C9-1E0DC03B494C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5F3E18-1B7C-42F8-8663-AAC6AE299BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.0.0.57828:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF930785-B365-4D87-BBDD-F1DD7E84F713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.0.0.59167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDB9CE-8282-44CC-87D4-970463868E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.0.0.59211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "423FC5E3-2B6A-468A-B3C0-BA15C7ED989B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.0.l0.59219:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAE388B-88F8-480B-8580-B64C9DD1E62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B14A1C6-B14A-453C-9368-A05D56F83100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.1.0.59776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336BDB6D-0386-4668-BB27-6279172CB782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.1.0.59780:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D23DD3-EF51-49B8-8E2A-95D11BCC3901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAB6518-33BF-40A7-8179-CD84A78CBF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BDCAA-9E20-4DD6-A6FD-29E3FE79E98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.3_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B1C78C-5349-4D4F-B3D1-DB76D432C520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:18.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CCB5CA-CB83-4900-8AC3-43355DA36A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D300F74-79BD-4054-90F3-22FCD3E1FDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60737:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367EE318-4040-42C7-831C-747A71B7545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60828:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E59FC3-EC5C-43E9-8444-2CC1ADC052DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF555599-94A2-4E5A-A487-75D67297BC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D26DF95-B1FB-4720-BAE0-33698CD5EB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.1.0.61559:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EAC723-2922-40C2-8B5A-56B51B33DCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6188B2-D27E-4FBE-B5C3-BC439D5CC405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A4BA17-D3C2-4CB0-A1CA-F40D63A022FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB176F9B-DB94-48CB-B9CA-AD430389E291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:19.6_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608F39FC-1972-4B9D-9533-B56227C09D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD3C35D-0CDD-4E67-99CC-1A7CB0C5042F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306E301C-B770-4D3A-8EF9-8A9082BC267E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.1.a0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA394A72-446F-4821-B449-4C5D532840AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.1.v0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D90A76D-217A-4002-AA04-EE13C3695AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F2B8EF-2E7A-4125-80FF-D315A833597E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.2.3.65026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C402E840-E6EB-407D-89F9-CA71002B163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.2.v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA07D86-8F8D-4E98-B486-940A7B253427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.m0.62842:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4065C54C-C9E7-403F-A063-BE953D677686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.m0.63229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB3F67C-1277-4523-9B0E-0AB9D62A32C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.0.v0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4459D79-0EF9-4267-8E2F-A3E0FCDC5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.1.v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8746987C-A623-4770-95BC-0855CBE253B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90596B64-BB15-4533-88B7-E1F695743596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5145A11F-A30B-4F26-9C2A-665752DA962E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:20.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42081F4-2724-4C85-9B6C-FB6E65A4BA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A8EDBF-CED2-4EE1-9FB8-0865796F969D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0.v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CF48A0-BE7D-43D1-A9B7-1D9A0CEA42C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9529FCD0-C49B-4C21-972F-66C9E8744339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0_m0.64246:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C5D474-B72D-4B66-B838-39E758963A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0_m0.64702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54736D7-526F-439D-A0BF-C9D2D090F9D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746254AC-B039-432C-AA5C-A82260E57AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100015",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038819",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-staros",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-staros",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6730",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are running an affected release of Cisco Wide Area Application Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Application Services (vWAAS), Cisco Wide Area Application Services (WAAS) Appliances, Cisco Wide Area Application Services (WAAS) Modules. Only Cisco WAAS products that are configured with the Central Manager role are affected by this vulnerability. More Information: CSCvd87574. Known Affected Releases: 4.4(7) 6.2(1) 6.2(3). Known Fixed Releases: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz gráfica de usuario web de Cisco Wide Area Application Services (WAAS) Central Manager podría permitir que un atacante remoto no autenticado recupere informes completos de un sistema afectado. Esto también se conoce como divulgación de información. Esta vulnerabilidad afecta a los siguientes productos si están ejecutando una versión afectada de Cisco Wide Area Application Services (WAAS) Software y están configurados para emplear la función Central Manager: Cisco Virtual Wide Area Application Services (vWAAS), Cisco Wide Area Application Services (WAAS) Appliances, Cisco Wide Area Application Services (WAAS) Modules. Solo los productos Cisco WAAS que están configurados con el rol Central Manager se han visto afectados por esta vulnerabilidad.\nMás información: CSCvd87574. Versiones afectadas conocidas: 4.4(7) 6.2(1) 6.2(3). Versiones corregidas conocidas: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:4.4\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACB0E71-4EE9-4B8C-971F-8C0AAC299E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB7741B-037F-480F-B90A-CB60055C1EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5BB7A1-FB47-4BB7-AC5A-199345BADC84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99481",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038825",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6731",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service (DoS) condition. The MSDP session will restart within a few seconds. More Information: CSCvd94828. Known Affected Releases: 4.3.2.MCAST 6.0.2.BASE. Known Fixed Releases: 6.3.1.19i.MCAST 6.2.3.1i.MCAST 6.2.2.17i.MCAST 6.1.4.12i.MCAST."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de paquetes entrantes Multicast Source Discovery Protocol (MSDP) en Cisco IOS XR Software podría permitir que un atacante remoto sin autenticar provoque que la sesión MSDP se reinicie inesperadamente, provocando una corta condición de denegación de servicio (DoS).\tLa sesión MSDP se reiniciará en unos pocos segundos. Más información: CSCvd94828. Versiones afectadas conocidas: 4.3.2.MCAST 6.0.2.BASE. Versiones corregidas conocidas: 6.3.1.19i.MCAST 6.2.3.1i.MCAST 6.2.2.17i.MCAST 6.1.4.12i.MCAST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:4.3.2.mcast:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFBFDDF-BBAD-4673-B0B2-CC542AFD46AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.0.2.base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE8581A-BB4C-44D2-9C4E-2B26F9D064F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038820",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-iosxr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-iosxr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6732",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate their privileges to root privileges. More Information: CSCvd47343. Known Affected Releases: 4.2(2.1)PP1 4.2(3.0)PP6 4.3(0.0)PP4 4.3(1.0)PP2. Known Fixed Releases: 4.3(2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procedimiento de instalación para Cisco Prime Network Software podría permitir que un atacante local autenticado eleve sus privilegios a root.\tMás información: CSCvd47343. Versiones afectadas conocidas: 4.2(2.1)PP1 4.2(3.0)PP6 4.3(0.0)PP4 4.3(1.0)PP2. Versiones corregidas conocidas: 4.3(2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network:4.2\\(2.1\\)pp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C18427D-A798-407B-84C9-89CC424A5A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network:4.2\\(3.0\\)pp6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6626A27D-CA5C-4F9B-ADC7-ACDAF5E79578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network:4.3\\(0.0\\)pp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0893432A-4BAD-46D1-B950-3087924E9B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network:4.3\\(1.0\\)pp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A0130E-4B14-4746-BC27-D6FD9E3A8AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99457",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-prime",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-prime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6733",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd87482. Known Affected Releases: 2.1(102.101) 2.2(0.283) 2.3(0.151)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de aplicación web del portal de Cisco Identity Services Engine (ISE) podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un sistema afectado. Más información: CSCvd87482. Versiones afectadas conocidas: 2.1(102,101) 2.2(0,283) 2.3(0,151)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(102.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B01C09C-3587-41F7-AAE9-4CC7B8059C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.2\\(0.283\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07ED241-D48D-4FEE-B472-ECCB8C099A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3\\(0.151\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55077AB-5532-4377-8F08-014A36153394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99458",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038822",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ise1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ise1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6734",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected device, related to the Guest Portal. More Information: CSCvd74794. Known Affected Releases: 1.3(0.909) 2.1(0.800)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web del portal de Cisco Identity Services Engine (ISE) Software podría permitir que un atacante remoto autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un sistema afectado. Esto se relaciona con Guest Portal. Más información: CSCvd74794. Versiones afectadas conocidas: 1.3(0.909) 2.1(0.800)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(0.722\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDA2348-7DF8-4A0C-AC7B-FA02E9A48D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(0.876\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40531FF3-D0DB-4DBA-A92C-C4E09EF46796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(0.909\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B2A9A5-344D-4147-96C3-C2C1E21E760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(106.146\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72637FC1-19A0-4B23-ABEC-0D9606741452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(120.135\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D435868B-CC18-4BE3-995C-D67BA1BF53B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(0.474\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E53B93-2A49-4B3F-8487-E45D8F70F64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(0.800\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A653B17F-337E-4342-91EF-92483E0E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(102.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B01C09C-3587-41F7-AAE9-4CC7B8059C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5077AF4-F044-4FBA-8464-D65FBE34486A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99459",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038823",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ise2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ise2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6735",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-10T20:29:00.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad backup y restore de Cisco FireSIGHT System Software, podría permitir a un atacante local autenticado ejecutar código arbitrario en un sistema destino. Más información: CSCvc91092. Versiones afectadas conocidas: 6.2.0 y 6.2.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A5C44-A26D-44A3-9674-92657FBA0513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFBDE0A2-5ECA-4287-8A70-235C1E17FA68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99460",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038826",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-FireSIGHT",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-FireSIGHT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8032",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-10T20:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.17, 24.x versions prior to v24.12. 30.x versions prior to 30.5, and other versions prior to v41, zone administrators are allowed to escalate their privileges when mapping permissions for an external provider."
      }, {
        "lang" : "es",
        "value" : "En cf-release de Cloud Foundry versiones anteriores a 264; UAA libera todas las versiones de UAA v2.x.x, versión 3.6.x anteriores a 3.6.13, versión 3.9.x anteriores a 3.9.15, versiones 3.20.x anteriores a v3.20.0, y otras versiones anteriores a v4.4.0; y versiones de UAA bosh release (uaa-release) versión 13.x anteriores a v13.17, versión 24.x anteriores a 24.12. 30.x versiones anteriores a 30.5, y otras versiones anteriores a 41, los administradores de zona pueden escalar sus privilegios al asignar permisos para un proveedor externo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942E59F5-172F-4802-81AE-D43E72189889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AA7E0-D1F5-4097-B53B-F0E36328B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCD6CB7-5D49-4897-8353-44E5B08D9375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4C4EB-3337-4053-BA4B-93A849263A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9339A684-B1F0-4110-9E48-A04BED74DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35CCB74-63A3-4F95-9EAE-ADC5A8BACB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A1BAE9-FCB6-458E-A1A6-03F0AB742E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2261C887-8179-4BBA-A2CF-174F8F3017FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EED2616-E58D-4604-BBBC-AC24BCA068A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916733EA-F51A-49E2-9D47-9B713B36C847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1887F9-EB71-41AE-9E45-DD86A54AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D01A32-98DA-4F7F-B7A0-D1695478C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C57AACB-1ECA-4047-A8AA-D768DA54BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D164FF1-D85D-4800-A726-465A32974BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAC5B15-895E-43CA-AFE1-EE7E06EF08D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10286C78-A413-4FD3-B7F7-39C17A50D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D022F9B-4877-4A97-AE22-BAF579B38DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D2BF0D-963C-430F-A4FE-F452F15035BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8C3C5E-E942-483A-A914-CC57DDCB6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D741750F-DC85-4701-90F7-4AE00DB04B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126E318-6572-4BC3-8FA4-835AC49432C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5B622B-C14C-4160-ACFD-CD2AB3786828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE0A85A-5B1A-49E0-8FC7-4A68505B6506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3CEAB-E58E-4870-A719-F46D6DE2E710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDD149-4BBB-47A1-8E23-2247DCF9C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B90A0-757D-4406-9EC1-A31968CC7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8157B8-A26B-4148-A02A-DBEC662FE701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F74AEAE-D823-4B1A-9979-0739F6BA17CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FC35CD-79D1-4279-B719-6398C6636113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5053FDB3-E711-434A-A6A6-4C580A2FF43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E909E6B8-AD6F-4B96-968D-A6C952462C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DB34-FA12-41A6-A90F-456777ADEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92D875-509C-42BE-90E4-112C94170199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166C908D-7D5F-43DD-B3EA-BAFF23DBBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83917A-D326-4874-AD82-0DBD131DC0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C19F44-AB0F-44BB-A298-F81B853FA71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B981590F-0649-4BBA-AB5F-CC5C7858DFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36B9F9-6D45-4D84-869A-25131BF482BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC5C69-1910-4D19-97B2-B44A594B8B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5314895-961D-4D2B-A0C9-1B23C03317CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5A5B1C-7111-464E-9F49-D13621233AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6E52B8-7635-4376-AFAD-935DB44B923C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97CB502-CE1E-4B63-88D0-7A826C825B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3AAD33-275B-4FF1-9434-BEE85543F7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18EEF16B-A74C-401A-913B-E3E9DA99EC68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "40",
            "matchCriteriaId" : "420CF106-9916-4219-A4E1-AA907EE68955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24E2CE5-6DBA-4B45-951D-0F7189C9A94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EB01AB-A033-4DCC-B433-0674078E31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B1CBF-6297-4F4D-970D-25D1D0A88AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C369E22-27DF-40B3-B94F-45DFC47E6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A2FE05-FC02-4FC1-B9B3-40E4EC62C5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4975D0-2C4D-4883-A849-D434FB8A7E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85B347-27E2-4EF9-9CF0-13902EC4741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93081AC1-C07E-4E6D-8B1E-8D561461FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F6208B-7FA5-4177-8942-2037BEE99546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DA4C6-BCA9-4959-82FC-2596C6EBD6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8120A442-6A3D-4918-A829-A84B2B9694E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AF658-FFBB-49AB-8A44-9989A7FEC707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F184-AFEC-4992-BFEF-B410CDF1452A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147C8C7B-F6C6-4338-A181-BF450C53C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555B74DE-E5D6-493B-96B4-87C636104B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E995D9-D404-4A19-BDD8-C911A1A2AD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A090F790-1A28-4238-8727-3F9475706A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFE0727-C152-4726-A70E-C75BACD31071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D708B8-485D-445E-8A21-474A500F1184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8A221-8740-4D35-871D-EABDB2F8332D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A426C1DD-0C64-468A-B96E-B0B94FFF0A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEEACE-5BED-4507-A770-69D36F478791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860B073C-AC50-473C-9650-7421F3638FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B44C3F2-5AC4-4D05-BAF0-EFDFB3FDC3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BBC265-7026-469B-BB30-D7DB7A334A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E99F4C-6BB5-415E-A5F3-285A3219EEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E24F1B-C999-4C02-BFDD-00F1E2A53E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D145BD-EEAC-4434-9435-A3676A15DD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D365CB-5BDA-4387-AA3E-2F02B552162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80E3184-345D-4C78-ABAA-94B3D9A53252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F654A04-B949-415D-982A-7341486B2B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF9F58F-1387-4D84-932F-8CC8F380E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EB573D-313D-4DB4-8820-E99AE4FCA210"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cloud_foundry_cf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "263",
            "matchCriteriaId" : "8AB2BFCD-60E5-481A-9FCB-E2937CD9ECBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8032/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8032/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T03:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression."
      }, {
        "lang" : "es",
        "value" : "En PCRE versión 8.41, la función OP_KETRMAX en la función de coincidencia en el archivo pcre_exec.c permite el agotamiento de la pila (recursión no controlada) cuando se procesa una expresión regular creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4917CD-FA24-46D5-89D2-0E6785BF2CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/11/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/11/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/12/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T17:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories."
      }, {
        "lang" : "es",
        "value" : "ubuntu-image versión 1.0 anterior a versión 2017-07-07, cuando se invoca como no root, crea archivos en la imagen resultante con el uid del usuario que invoca. Cuando la imagen resultante es iniciada, un atacante local con el mismo uid que el creador de la imagen tiene acceso no deseado a los directorios cloud-init y snapd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:ubuntu-image:1.0:2017-07-06:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F8912A-AEE1-4713-89FF-9E9C04112176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.snapcraft.io/t/ownership-bug-in-ubuntu-image/1285",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://forum.snapcraft.io/t/ownership-bug-in-ubuntu-image/1285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T17:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos cube de iSmartAlarm, presentan una vulnerabilidad de Comprobación de Certificado SSL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ismartalarm:cubeone_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20E2DC6-E03D-4A07-B878-5D6EF833C81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675B613E-FA9B-49A4-854E-A60CADBD8634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T17:29:00.253",
      "lastModified" : "2023-11-07T02:50:15.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in customer-controlled software.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T17:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos cube de iSmartAlarm, se presenta una omisión de autenticación que conlleva a la ejecución de comandos remota (por ejemplo, ajustando el encendido/apagado de la alarma), relacionada a una criptografía incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ismartalarm:cubeone_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20E2DC6-E03D-4A07-B878-5D6EF833C81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675B613E-FA9B-49A4-854E-A60CADBD8634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T17:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On iSmartAlarm cube devices, there is Incorrect Access Control because a \"new key\" is transmitted in cleartext."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos cube de iSmartAlarm, se presenta un control de acceso incorrecto porque una \"new key\" es trasmitida en texto sin cifrar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ismartalarm:cubeone_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20E2DC6-E03D-4A07-B878-5D6EF833C81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675B613E-FA9B-49A4-854E-A60CADBD8634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T17:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the \"cube\" and it will stop responding."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos cube de iSmartAlarm, permiten una denegación de servicio. Al enviar un flujo SYN en el puerto 12345 congelará al \"cube\" y dejará de responder."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ismartalarm:cubeone_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20E2DC6-E03D-4A07-B878-5D6EF833C81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675B613E-FA9B-49A4-854E-A60CADBD8634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T20:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadTGAImage function in coders\\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file."
      }, {
        "lang" : "es",
        "value" : "La función ReadTGAImage en el archivo coders\\tga.c en ImageMagick versión 7.0.5-6, presenta una vulnerabilidad de pérdida de memoria que puede causar el agotamiento de memoria por medio de datos de colores no válidos en el encabezado de un archivo TGA o VST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/472",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T20:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data (an invalid magic cookie). Each failed authentication attempt will leak a file descriptor in gnome-session. When the maximum number of file descriptors is exhausted in the gnome-session process, it will enter an infinite loop trying to communicate without success, consuming 100% of the CPU. The graphical session associated with the gnome-session process will stop working correctly, because communication with gnome-session is no longer possible."
      }, {
        "lang" : "es",
        "value" : "Un mal conteo de referencias en el contexto de la función accept_ice_connection() en el archivo gsm-xsmp-server.c en versiones anteriores de gnome-session hasta la versión 2.29.92, permite a un atacante local establecer conexiones ICE en gnome-session con datos de autenticación no válidos (cookie magic no válida). Cada intento de autenticación fallido filtrará un descriptor de archivo en gnome-session. Cuando se agote el número máximo de descriptores de archivo en el proceso de gnome-session, entrará en un bucle infinito intentando comunicarse sin éxito, consumiendo el 100% de la CPU. La sesión gráfica asociada con el proceso de gnome-session dejará de funcionar correctamente, porque ya no es posible la comunicación con gnome-session."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-session:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29.92",
            "matchCriteriaId" : "71BA08C3-D836-4FB1-98D3-1F31FEE15C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1025068",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/gnome-session/commit/b0dc999e0b45355314616321dbb6cb71e729fc9d",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1025068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/gnome-session/commit/b0dc999e0b45355314616321dbb6cb71e729fc9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0170",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability due to the way it parses XML input, aka \"Windows Performance Monitor Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Performance Monitor en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de revelación de información debido a la forma en la que analiza entradas XML. Esto también se conoce como \\\"Windows Performance Monitor Information Disclosure Vulnerability\\\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99398",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038855",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0170",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0243",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8570."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office permite una vulnerabilidad de ejecución de código remota debido a la manera en que se manejan los objetos en la memoria, también se conoce como \"Microsoft Office Remote Code Execution Vulnerability\". Este ID de CVE es diferente del CVE-2017-8570."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3B020-7F19-49D5-8034-567E379C6CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:web_applications:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AC93E283-E88A-41F1-90B6-CD256FF02F11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99446",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0243",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8463",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and shares during rename operations, aka \"Windows Explorer Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Shell en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite una vulnerabilidad de ejecución de código remota debido a la manera en que se manejan inapropiadamente los archivos ejecutables y los recursos compartidos durante las operaciones de cambio de nombre, también se conoce como  \"Windows Explorer Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99389",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038850",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8463",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8467",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Graphics en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite una vulnerabilidad de escalada de privilegios debido a la manera en que se manejan los objetos en la memoria, también se conoce como \"Win32k Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99409",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8467",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8486",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure due to the way it handles objects in memory, aka \"Win32k Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permiten la divulgación de información debido a la manera en que se manejan los objetos en la memoria, también se conoce como  \"Win32k Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99414",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8486",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8495",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka \"Kerberos SNAME Security Feature Bypass Vulnerability\" or Orpheus' Lyre."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten a un atacante omitir la Protección Ampliada para la Autenticación cuando Kerberos no puede evitar la manipulación del campo SNAME durante el intercambio de tickets, también se conoce como  \"Kerberos SNAME Security Feature Bypass Vulnerability\" o Orpheus' Lyre."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99424",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038862",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8495",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.orpheus-lyre.info/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.orpheus-lyre.info/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8501",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8502."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office permite una vulnerabilidad de ejecución remota de código debido a la forma en la que gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8502."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "94F5E2F8-0D37-4FCC-B55A-9F09C421272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4635DA5-27DA-43FF-92AC-A9F80218A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "0D84FC39-29AA-4EF2-ACE7-E72635126F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "447CCA6E-9955-4771-82DD-925380F3C439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C0BD17-4324-4DFF-9804-1825C4C182A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993E5C5C-4C78-4CDA-BF67-5A35814EF621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99441",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8501",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8502",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8501."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office permite una vulnerabilidad de ejecución remota de código debido a la forma en la que gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8501."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99442",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8502",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8556",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Microsoft Graphics Component Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8574."
      }, {
        "lang" : "es",
        "value" : "Graphics en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permite una vulnerabilidad de escalada de privilegios cuando no se maneja apropiadamente los objetos en la memoria, también se conoce como  \"Microsoft Graphics Component Elevation of Privilege Vulnerability\" Este ID de CVE es diferente de los CVE-2017-8573 y CVE-2017-8574."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99439",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8556",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8557",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a reference to an external entity, aka \"Windows System Information Console Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "La consola de información del sistema de Windows en Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no analiza correctamente entradas XML que contienen una referencia a una entidad externa. Esto también se conoce como \\\"Windows System Information Console Information Disclosure Vulnerability\\\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99387",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99398",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038855",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8557",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8559",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka \"Microsoft Exchange Cross-Site Scripting Vulnerability\". This CVE ID is unique from CVE-2017-8560."
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16 y Exchange Server 2016 CU5 permiten una vulnerabilidad de elevación de privilegios debido a la forma en la que Exchange Outlook Web Access (OWA) gestiona las peticiones web. Esto también se conoce como \"Microsoft Exchange Cross-Site Scripting Vulnerability\". El ID de este CVE es diferente de CVE-2017-8560."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8BCE7D-51F0-41A2-A110-71044844C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "23015889-48AF-40A5-862F-290E73A54E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99448",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8559",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8560",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka \"Microsoft Exchange Cross-Site Scripting Vulnerability\". This CVE ID is unique from CVE-2017-8559."
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16 y Exchange Server 2016 CU5 permiten una vulnerabilidad de elevación de privilegios debido a la forma en la que Exchange Outlook Web Access (OWA) gestiona las peticiones web. Esto también se conoce como \"Microsoft Exchange Cross-Site Scripting Vulnerability\". El ID de este CVE es diferente de CVE-2017-8559."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8BCE7D-51F0-41A2-A110-71044844C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "23015889-48AF-40A5-862F-290E73A54E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99449",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8560",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8561",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que gestiona objetos en la memoria. Esto también se conoce como \"Windows Kernel Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99426",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8561",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8562",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC), aka \"Windows ALPC Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten una vulnerabilidad de escalada de privilegios debido a que Windows maneja inapropiadamente las llamadas a Advanced Local Procedure Call (ALPC), también se conoce como \"Windows ALPC Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99397",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8562",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8563",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol, aka \"Windows Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten una vulnerabilidad de elevación de privilegios debido a que Kerberos  vuelve a tener el protocolo de autenticación NT LAN Manager (NTLM) como el protocolo de autenticación por defecto. Esto también se conoce como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99402",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8563",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8564",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly initialize a memory address, aka \"Windows Kernel Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El Kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no se puede inicializar correctamente una dirección de memoria, también se conoce como \"Windows Kernel Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8564",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42338/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42338/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8565",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka \"Windows PowerShell Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows PowerShell en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite una vulnerabilidad de ejecución de código remota cuando PSObject encapsula una Instancia CIM, también se conoce como \"Windows PowerShell Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99394",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038854",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8565",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8566",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IME) improperly handling parameters in a method of a DCOM class, aka \"Windows IME Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 1607, 1703 y Windows Server 2016 permiten una vulnerabilidad de elevación de privilegios debido a que Windows Input Method Editor (IME) gestiona los parámetros incorrectamente en un método de una clase DCOM. Esto también se conoce como \"Windows IME Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99404",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8566",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8569",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka \"SharePoint Server XSS Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Server permite una vulnerabilidad de elevación de privilegios debido a la forma en la que sanitiza una petición web especialmente manipulada a un servidor SharePoint afectado. Esto también se conoce como \"SharePoint Server XSS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99447",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8569",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8570",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.267",
      "lastModified" : "2025-10-22T00:16:12.213",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office permite una vulnerabilidad de ejecución remota de código debido a la forma en la que gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0243."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-02-25",
      "cisaActionDue" : "2022-08-25",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "72324216-4EB3-4243-A007-FEF3133C7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99445",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ParsingTeam/ppsx-file-generator",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rxwx/CVE-2017-8570",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tezukanice/Office8570",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ParsingTeam/ppsx-file-generator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rxwx/CVE-2017-8570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tezukanice/Office8570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8570",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8573",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Microsoft Graphics Component Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8574 and CVE-2017-8556."
      }, {
        "lang" : "es",
        "value" : "Graphics en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permite una vulnerabilidad de elevación de privilegios cuando no se manejan apropiadamente los objetos en la memoria, también se conoce como \"Microsoft Graphics Component Elevation of Privilege Vulnerability\". Este CVE es diferente de los CVE-2017-8574 y CVE-2017-8556."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99431",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8573",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8574",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Microsoft Graphics Component Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8556."
      }, {
        "lang" : "es",
        "value" : "Graphics de Microsoft Windows 10 versiones 1607, 1703 y Windows Server 2016, permiten una vulnerabilidad de elevación de privilegios cuando no se manejan apropiadamente los objetos en la memoria, también se conoce como \"Microsoft Graphics Component Elevation of Privilege Vulnerability\". Este CVE es diferente de los CVE-2017-8573 y CVE-2017-8556."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99438",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8574",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8577",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8578, CVE-2017-8580, CVE-2017-8581, and CVE-2017-8467."
      }, {
        "lang" : "es",
        "value" : "Win32k en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8578, CVE-2017-8580, CVE-2017-8581 y CVE-2017-8467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99416",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8577",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8578",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8577, CVE-2017-8580, CVE-2017-8581, and CVE-2017-8467."
      }, {
        "lang" : "es",
        "value" : "Win32k en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8577, CVE-2017-8580, CVE-2017-8581 y CVE-2017-8467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99419",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8578",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8580",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8577, CVE-2017-8578, CVE-2017-8581, and CVE-2017-8467."
      }, {
        "lang" : "es",
        "value" : "Win32k en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8577, CVE-2017-8578, CVE-2017-8581 y CVE-2017-8467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99421",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8580",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8581",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8578, CVE-2017-8580, CVE-2017-8577, and CVE-2017-8467."
      }, {
        "lang" : "es",
        "value" : "Win32k en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8578, CVE-2017-8580, CVE-2017-8577 y CVE-2017-8467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99423",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8581",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8582",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly handles objects in memory, aka \"Https.sys Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "HTTP.sys en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permite una vulnerabilidad de divulgación de información cuando el componente maneja inapropiadamente los objetos en la memoria, también se conoce como \"Https.sys Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99429",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8582",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8584",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet aka \"HoloLens Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows 10 versión 1607 y Windows Server 2016, permiten a un atacante ejecutar código remotamente por medio de un paquete WiFi especialmente creado, también se conoce como \"HoloLens Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99434",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038865",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8584",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8585",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability."
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET Framework versiones 4.6, 4.6.1, 4.6.2 y 4.7, permiten a un atacante enviar peticiones especialmente creadas a una aplicación web .NET, resultando en una denegación de servicio, también se conoce como vulnerabilidad de denegación de servicio de .NET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0B660D-1F30-4D45-B98B-726EDB8CB90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99432",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038864",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3248",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8585",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8587",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511 allows a denial of service vulnerability when it attempts to open a non-existent file, aka \"Windows Explorer Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Explorer en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, permite una vulnerabilidad de denegación de servicio cuando intenta abrir un archivo inexistente, también se conoce como \"Windows Explorer Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99413",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038850",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8587",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8588",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka \"WordPad Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft WordPad en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite una vulnerabilidad de ejecución de código remota debido a la manera en que analiza archivos especialmente creados, también se conoce como \"WordPad Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99400",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038857",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8588",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8589",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka \"Windows Search Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código debido a la forma en la que Windows Search gestiona los objetos en la memoria. Esto también se conoce como \"Windows Search Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99425",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038866",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8589",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8590",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory, aka \"Windows CLFS Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten una vulnerabilidad de elevación de privilegios debido a la forma en la que el controlador Common Log File System (CLFS) de Windows gestiona los objetos en la memoria. Esto también se conoce como \"Windows CLFS Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99427",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8590",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8592",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests, aka \"Microsoft Browser Security Feature Bypass\"."
      }, {
        "lang" : "es",
        "value" : "Los navegadores de Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1 y Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten una vulnerabilidad de omisión de la característica de seguridad cuando manejan inapropiadamente las peticiones de redireccionamiento, también se conoce como \"Microsoft Browser Security Feature Bypass\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99396",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8592",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8594",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows versión 8.1 y Windows RT versión  8.1, y Windows Server 2012 R2, permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando Internet Explorer accede inapropiadamente a objetos en la memoria, también se conoce como \"Internet Explorer Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99401",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8594",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42336/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42336/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8595",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8601,CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando el motor JavaScript fracasa a la hora de representarse cuando gestiona objetos en Microsoft Edge. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8596, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99403",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8596",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8598, CVE-2017-8610, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607 y 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando el motor JavaScript fracasa a la hora de representarse cuando gestiona objetos en Microsoft Edge. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8598, CVE-2017-8610, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99405",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8596",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8598",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:01.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando el motor JavaScript fracasa a la hora de representarse cuando gestiona objetos en Microsoft Edge. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99417",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8598",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8599",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka \"Microsoft Edge Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante engañe a un usuario para que cargue una página con contenido malicioso cuando Edge Content Security Policy (CSP) no valida correctamente ciertos documentos especialmente manipulados. Esto también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99393",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8599",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8601",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8598 and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando el motor de JavaScript no se procesa mientras se manejan objetos en la memoria en Microsoft Edge, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\".  Este ID de CVE es diferente de los CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE- 2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8598 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99420",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8601",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42479/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8602",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a spoofing vulnerability in the way they parse HTTP content, aka \"Microsoft Browser Spoofing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten una vulnerabilidad de suplantación debido a la forma en la que analizan sintácticamente el contenido HTTP. Esto también se conoce como \"Microsoft Browser Spoofing Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99390",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8602",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8603",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8598, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 versiones 1511, 1607 y 1703, y Windows Server 2016, permiten a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando el motor de JavaScript no renderiza al manejar objetos en memoria en Microsoft Edge, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este CVE es diferente de los CVE-2017-8596, CVE-2017-8610, CVE-2017-8598, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99406",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8603",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8604",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8601, CVE-2017-8610, CVE-2017-8603, CVE-2017-8598, CVE-2017-8601, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando el motor JavaScript fracasa a la hora de representarse cuando gestiona objetos en Microsoft Edge. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8601, CVE-2017-8610, CVE-2017-8603, CVE-2017-8598, CVE-2017-8601, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99407",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8604",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8605",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8598, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando el motor JavaScript fracasa a la hora de representarse cuando gestiona objetos en Microsoft Edge. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8596, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8598, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99388",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8605",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8606",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609"
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando los motores JavaScript fracasan a la hora de representarse cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99408",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8606",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8607",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8608, and CVE-2017-8609"
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando los motores JavaScript fracasan a la hora de representarse cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8608 y CVE-2017-8609\" }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99410",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8607",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8608",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8607, and CVE-2017-8609"
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows Server 2008 and R2, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando los motores JavaScript fracasan a la hora de representarse cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8598, CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8607 y CVE-2017-8609\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99412",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8608",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8609",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer en Microsoft Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando el motor de JavaScript no renderiza al manejar objetos en memoria en Microsoft Internet Explorer, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este CVE es diferente a los CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99418",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8609",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8610",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8595, CVE-2017-8618, CVE-2017-8619, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 versión 1703, permite a un atacante ejecutar código arbitrario en el contexto del usuario actual cuando el motor de JavaScript no renderiza al manejar objetos en la memoria en Microsoft Edge, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este CVE es diferente a los CVE-2017-8598, CVE-2017-8596, CVE-2017-8595, CVE-2017-8618, CVE-2017-8619, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99415",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8610",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8611",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via a crafted web site, aka \"Microsoft Edge Spoofing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que atacantes remotos suplanten contenido web mediante un sitio web manipulado. Esto también se conoce como \"Microsoft Edge Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99391",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8611",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8617",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka \"Microsoft Edge Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 1703 permite una vulnerabilidad de ejecución remota de código en la forma en la que los motores scripting de Microsoft se representan cuando gestionan objetos en la memoria. Esto también se conoce como \"Microsoft Edge Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99422",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8617",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8618",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8619, CVE-2017-9598 and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows versión 8.1 y Windows RT versión 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016, Internet Explorer en la manera en que la reproducción de los motores de scripting de Microsoft es afectada cuando se manejan objetos en la memoria, también se conoce como \"Scripting Engine Memory Corruption Vulnerability.\" Este ID de CVE es diferente de los CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE- 2017-8607, CVE-2017-8608, CVE-2017-8619, CVE-2017-9598 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99399",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8618",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42337/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42337/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8619",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8618, CVE-2017-9598 and CVE-2017-8609."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código en la forma en la que los motores de scripting de Microsoft se representan cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de C CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8618, CVE-2017-9598 y CVE-2017-8609."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99392",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8619",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8621",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-11T21:29:02.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka \"Microsoft Exchange Open Redirect Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16 y Exchange Server 2016 CU5, permiten una vulnerabilidad de redireccionamiento abierto que podría conllevar a suplantación, también se conoce como \"Microsoft Exchange Open Redirect Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EA9AD-1E84-4AB5-A1EF-3B9F2AC84755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8BCE7D-51F0-41A2-A110-71044844C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "23015889-48AF-40A5-862F-290E73A54E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99533",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-11T23:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "La función mq_notify en el kernel de Linux hasta versión 4.11.9 no se ajusta el puntero sock a NULL al ingresar a la lógica de reintento. Durante un cierre de espacio de usuario de un socket Netlink, permite que los atacantes causen una denegación de servicio (uso de memoria previamente liberada) o posiblemente tengan otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.92",
            "matchCriteriaId" : "21888989-B8CA-4696-9FE4-9CDA1B3B92AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.47",
            "matchCriteriaId" : "18369FD7-D135-4C78-BA5E-8FF5F4573485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.61",
            "matchCriteriaId" : "737CDAED-1476-433D-A1D3-7460323FF392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "5F6B255F-0933-4983-B3F6-AD5B128A8F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.77",
            "matchCriteriaId" : "F09881FD-5BBD-4E0F-88C0-C795EE420DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.38",
            "matchCriteriaId" : "E384283D-0BD4-4873-A961-1B6CD1A5F451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.11",
            "matchCriteriaId" : "034014AF-629B-4611-9567-8F875FB8A29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12",
            "versionEndExcluding" : "4.12.2",
            "matchCriteriaId" : "132D6674-8244-452B-ADBA-2B0136E4435E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f991af3daabaecff34684fd51fac80319d1baad1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99919",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0169",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3822",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f991af3daabaecff34684fd51fac80319d1baad1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45553/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f991af3daabaecff34684fd51fac80319d1baad1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f991af3daabaecff34684fd51fac80319d1baad1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45553/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T00:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked."
      }, {
        "lang" : "es",
        "value" : "En FineCMS hasta el 11-07-2017, en el archivo application/core/controller/style.php, permite que los atacantes remotos escriban en archivos arbitrarios por medio de los parámetros contents y filename en una acción route=style. Por ejemplo, esto puede ser usado para sobrescribir un archivo .php porque la extensión del archivo no está comprobada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-05-12",
            "matchCriteriaId" : "5F65F90A-6982-48DD-BA88-AC3D023E427B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_writefile/finecmswritefile_2017_07_011_subm1t.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_writefile/finecmswritefile_2017_07_011_subm1t.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T00:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account."
      }, {
        "lang" : "es",
        "value" : "FineCMS hasta la versión 2017-07-11 tiene Cross-Site Scripting (XSS) persistente en route=admin al modificar información de usuario, así como en route=register al registrar una cuenta de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T00:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen."
      }, {
        "lang" : "es",
        "value" : "FineCMS hasta la versión 2017-07-11 tiene Cross-Site Scripting (XSS) persistente en la funcionalidad de inicio de sesión, tal y como demuestra una carga útil XSS en (1) la cabecera User-Agent de una petición HTTP o (2) el nombre de usuario introducido en la pantalla de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T00:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable."
      }, {
        "lang" : "es",
        "value" : "En Rise Ultimate Project Manager v1.8, se encontraron vulnerabilidades de XSS en la sección Messaging. Los campos Subject y Message son vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fairsketch:rise_ultimate_project_manager:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD4EC23-D977-46C2-BADF-0E6C8AAD1C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T00:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable."
      }, {
        "lang" : "es",
        "value" : "En Rise Ultimate Project Manager v1.8, se encontraron vulnerabilidades de XSS en la sección My Profile. Todos los campos de entrada son vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fairsketch:rise_ultimate_project_manager:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD4EC23-D977-46C2-BADF-0E6C8AAD1C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T12:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI."
      }, {
        "lang" : "es",
        "value" : "dataTaker DT80 dEX versión 1.50.012, permite a los atacantes remotos obtener información confidencial sobre las credenciales y la configuración por medio de una petición directa para el URI /services/getFile.cmd?userfile=config.xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datataker:dt80_dex_firmware:1.50.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F594D069-B141-45A0-98F1-C91C99DFE4AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datataker:dt80_dex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5864099C-1054-4521-9191-E546B6351534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143328/DataTaker-DT80-dEX-1.50.012-Sensitive-Configuration-Exposure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42313/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143328/DataTaker-DT80-dEX-1.50.012-Sensitive-Configuration-Exposure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42313/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T13:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager \"Add Site\" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo() input value."
      }, {
        "lang" : "es",
        "value" : "FineCMS 2.1.0 permite que atacantes remotos ejecuten código PHP arbitrario mediante una acción URL Manager \"Add Site\" action para introducir este código tras una secuencia ', en un nombre de dominio, tal y como demuestra el valor de entrada ',phpinfo()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FBD7CA1-0C29-468D-89D7-35104187D591"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.03sec.com/3169.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.03sec.com/3169.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7678",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-12T13:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script, would then be reflected back to the user and could be evaluated and executed by MS Windows-based clients. It is not an attack on Spark itself, but on the user, who may then execute the script inadvertently when viewing elements of the Spark web UIs."
      }, {
        "lang" : "es",
        "value" : "En Spark anterior a versión 2.2.0 de Apache, es posible que un atacante tome ventaja de la confianza de un usuario en el servidor para engañarlo y que visite un enlace que apunte a un clúster Spark compartido y envíe datos incluyendo MHTML al master Spark , o un historial del servidor. Esta información, que podría contener un script, se reflejaría de vuelta hacia al usuario y podría ser evaluada y ejecutada por los clientes basados en MS Windows. No es un ataque sobre el Spark en sí, sino sobre el usuario, quien puede ejecutar el script inadvertidamente cuando visualiza elementos de las interfaces de usuario web de Spark."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "46377024-4D7A-47C4-82EE-C8B693480432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://apache-spark-developers-list.1001551.n3.nabble.com/CVE-2017-7678-Apache-Spark-XSS-web-UI-MHTML-vulnerability-td21947.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99603",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://apache-spark-developers-list.1001551.n3.nabble.com/CVE-2017-7678-Apache-Spark-XSS-web-UI-MHTML-vulnerability-td21947.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T14:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly."
      }, {
        "lang" : "es",
        "value" : "phpMyFAQ anterior a versión 2.9.8, no mitiga apropiadamente los ataques de fuerza bruta que intentan muchas contraseñas durante inicios de sesión intentados rápidamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.7",
            "matchCriteriaId" : "42BCD029-3707-48A6-B302-DEAF66F927F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-07-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-07-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T15:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadDPXImage function in coders\\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check."
      }, {
        "lang" : "es",
        "value" : "La función ReadDPXImage en el archivo coders\\dpx.c en ImageMagick versión 7.0.6-0, presenta una vulnerabilidad de bucle largo que puede causar el agotamiento de la CPU por medio de un archivo DPX creado, relacionado con la falta de una comprobación EOF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/509",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4052",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-07-12T15:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en la interfaz web en McAfee Advanced Threat Defense (ATD) versiones 3.10, 3.8, 3.6, 3.4, permite a los usuarios no autenticados remotos y atacantes remotos cambiar o actualizar cualquier ajuste de configuración, y alcanzar la funcionalidad de administrador por medio de un parámetro request HTTP creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7EA0FB-89B8-42D5-9FEB-ED7BCF95C0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CE425-423E-4770-A4E8-5FCFABC23D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3361CC0-8D59-459F-A349-22028BDEA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD51315-9731-42B2-A9D2-E6E18A417658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99557",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4053",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-07-12T15:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos en la interfaz web de McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6 y 3.4 permite a usuarios no identificados ejecutar un comando de su elección mediante un parámetro en una solicitud HTTP manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7EA0FB-89B8-42D5-9FEB-ED7BCF95C0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CE425-423E-4770-A4E8-5FCFABC23D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3361CC0-8D59-459F-A349-22028BDEA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD51315-9731-42B2-A9D2-E6E18A417658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99560",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4054",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-07-12T15:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos en la interfaz web de McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6 y 3.4 permite a usuarios no identificados ejecutar un comando de su elección mediante un parámetro en una solicitud HTTP manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7EA0FB-89B8-42D5-9FEB-ED7BCF95C0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CE425-423E-4770-A4E8-5FCFABC23D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3361CC0-8D59-459F-A349-22028BDEA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD51315-9731-42B2-A9D2-E6E18A417658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99559",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4055",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-07-12T15:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Explotación de Autenticación en la interfaz web en McAfee Advanced Threat Defense (ATD) versiones  3.10, 3.8, 3.6, 3.4, permite a los usuarios no autenticados remotos y a los atacantes remotos omitir la detección de ATD por medio de la ejecución flexible de la autenticación y la autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7EA0FB-89B8-42D5-9FEB-ED7BCF95C0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CE425-423E-4770-A4E8-5FCFABC23D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3361CC0-8D59-459F-A349-22028BDEA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD51315-9731-42B2-A9D2-E6E18A417658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99564",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4057",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-07-12T15:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de la escalada de privilegios en la interfaz web en McAfee Advanced Threat Defense (ATD) versiones 3.10, 3.8, 3.6, 3.4, permite a los usuarios autenticados remotos alcanzar privilegios elevados por medio de los comandos GUI o GUI terminal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7EA0FB-89B8-42D5-9FEB-ED7BCF95C0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CE425-423E-4770-A4E8-5FCFABC23D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3361CC0-8D59-459F-A349-22028BDEA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD51315-9731-42B2-A9D2-E6E18A417658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99561",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which could be relevant if unrarlib is used as library code for a long-running application. NOTE: one of the several test cases in the references may be the same as what was separately reported as CVE-2017-14121."
      }, {
        "lang" : "es",
        "value" : "unrarlib.c en unrar-free versión 0.0.1 podría permitir a atacantes remotos causar una denegación de servicio (desviación del puntero NULL y caída de la aplicación), lo que podría ser relevante si unrarlib se utiliza como código de biblioteca para una aplicación de larga duración. NOTA: uno de los varios casos de prueba en las referencias puede ser el mismo que se reportó por separado como CVE-2017-14121"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarzilla:unrar-free:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD1C050-688C-4772-93FC-3340137A0EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0x09AL/my-exploits/tree/master/pocs/unrar-free/dos",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0x09AL/my-exploits/tree/master/pocs/unrar-free/dos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T16:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via an RAR archive containing a long filename."
      }, {
        "lang" : "es",
        "value" : "El archivo unrarlib.c en unrar-free versión 0.0.1, cuando el modo _DEBUG_LOG está habilitado, podría permitir a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región stack de la memoria y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo RAR que contiene un largo nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarzilla:unrar-free:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD1C050-688C-4772-93FC-3340137A0EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0x09AL/my-exploits/blob/master/pocs/unrar-free/buffer-overflow/DESCRIPTION",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0x09AL/my-exploits/blob/master/pocs/unrar-free/buffer-overflow/DESCRIPTION",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T16:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP Security Note 2406841."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver AS ABAP versión 7.40 permite que los usuarios autenticados remotos con ciertos privilegios causen una denegación de servicio (bloqueo del proceso) por medio de vectores que incluyen disp+work.exe, también se conoce como Nota de Seguridad de SAP 2406841."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_abap:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "181F800E-64BC-4734-91B6-D74C955CFE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96900",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-010-sap-netweaver-abap-dispwork-crash-using-cl_java_script/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-010-sap-netweaver-abap-dispwork-crash-using-cl_java_script/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T16:29:00.420",
      "lastModified" : "2025-05-02T15:25:18.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in a request to metadatauploader, aka SAP Security Note 2399804. NOTE: The vendor states that the devserver package of Visual Composer deserializes a malicious object that may cause legitimate users accessing a service, either by crashing or flooding the service."
      }, {
        "lang" : "es",
        "value" : "AP NetWeaver versión 7400.12.21.30308 permite a los atacantes remotos causar una denegación de servicio y, posiblemente, ejecutar código arbitrario por medio de un objeto Java serializado creado en una petición a metadatauploader, también se conoce como Nota de Seguridad de SAP 2399804."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7400.12.21.30308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FBEE54-4F7B-4F26-B6A2-0B42E7ED9AF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-014-sap-netweaver-java-deserialization-untrusted-user-value-metadatauploader/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://me.sap.com/notes/2399804",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-014-sap-netweaver-java-deserialization-untrusted-user-value-metadatauploader/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T16:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted DIAG request, aka SAP Security Note 2405918."
      }, {
        "lang" : "es",
        "value" : "disp+work versión 7400.12.21.30308 en SAP NetWeaver versión 7.40 permite a los atacantes remotos causar una denegación de servicio (consumo de recursos) por medio de una petición DIAG creada, también se conoce como Nota de Seguridad de SAP 2405918."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019F7F5-7740-4BD4-850F-D7A1923C6200"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96874",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-015-sap-netweaver-dispwork-anonymous-denial-service/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-015-sap-netweaver-dispwork-anonymous-denial-service/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T16:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image (aka DMG) files."
      }, {
        "lang" : "es",
        "value" : "AVG AntiVirus para MacOS con motor de escaneo anterior a versión 4668, podría permitir a los atacantes remotos omitir la detección de malware al aprovechar la falta de escaneo dentro de archivos de imagen de disco (también conocido como DMG)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:anti-virus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52686D9-7854-4E5D-B6C7-43E787F60141"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/06/avg-antivirus-for-macos-doesnt-scan-inside-disk-images-cve-2017-9977/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/06/avg-antivirus-for-macos-doesnt-scan-inside-disk-images-cve-2017-9977/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1285",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-12T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user with authority to send a specially crafted message that would cause a channel to remain in a running state but not process messages. IBM X-Force ID: 125146."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 9.0.1 y 9.0.2 podría permitir a un usuario autenticado con autoridad para enviar mensajes especialmente manipulados que causarían que un canal permaneciese en un estado de ejecución pero no procesaría mensajes. IBM X-Force ID: 125146."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99538",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125146",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22003856",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22003856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1321",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-12T17:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125916."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server versión 9.1,versión 11.3 y versión 11.5 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite a los usuarios insertar un código JavaScript arbitrario en la interfaz del usuario web, por lo tanto, alterar la funcionalidad deseada que podría conducir a la divulgación de credenciales dentro de una sesión segura. ID de IBM X-Force: 125916."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A5CF53-1A0C-4519-90A7-DFF6629820B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99537",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125916",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2814",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-07-12T17:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file can be used to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de desbordamiento de pila explotable en la funcionalidad de renderizado de imágenes de Poppler versión 0.53.0. Un pdf específicamente creado puede causar un cambio de tamaño de la imagen después de que la asignación ya haya ocurrido, resultando en una corrupción de la pila lo que puede conllevar a la ejecución de código. Se puede usar un archivo PDF controlado por un atacante para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00C454-6F80-4468-8FD3-DCBDFDF1438B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99497",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0311",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2818",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-07-12T17:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting in heap corruption. An attacker controlled PDF file can be used to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de desbordamiento de pila explotable en la funcionalidad de renderizado de imágenes de Poppler versión 0.53.0. Un PDF específicamente creado puede causar un número excesivamente grande de componentes de color durante el renderizado de imágenes, resultando en una corrupción de la pila. Un archivo PDF controlado por un atacante puede ser usado para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00C454-6F80-4468-8FD3-DCBDFDF1438B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99497",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2820",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-07-12T17:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de desbordamiento de enteros explotable en la funcionalidad de análisis de imágenes JPEG 2000 de freedesktop.org de Poppler versión 0.53.0. Un archivo PDF especialmente creado puede conllevar a un desbordamiento de enteros causando una sobreescritura de memoria fuera de límites en la pila, resultando en una potencial ejecución de código arbitraria. Para desencadenar esta vulnerabilidad, una víctima necesita abrir el PDF malicioso en una aplicación usando esta biblioteca."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00C454-6F80-4468-8FD3-DCBDFDF1438B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99497",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0321",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2863",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-07-12T17:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en la funcionalidad de análisis de PDF de Infix versión  7.1.5. Un archivo PDF especialmente creado puede causar una vulnerabilidad resultando en una potencial corrupción de la memoria. Un atacante puede enviar a la víctima un archivo PDF específico para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iceni:infix:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630800C1-B001-42EB-A23D-E80FBB545A39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0367",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T20:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These functions do not have any protections against CSRF. That can allow an attacker to run these commands against any IP if they can get an admin to visit their malicious CSRF page."
      }, {
        "lang" : "es",
        "value" : "Pulse Connect Secure versión 8.3R1, presenta un problema de tipo CSRF en el archivo diag.cgi. En el panel, el archivo diag.cgi es responsable de ejecutar comandos como ping, ping6, traceroute, traceroute6, nslookup, arp y Portprobe. Estas funciones no tienen ninguna protección contra CSRF. Eso puede permitir que un atacante ejecute estos comandos contra cualquier IP si pueden lograr que un administrador visite su página CSRF maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CC2CCF-AF71-4DB5-98D1-C82C4DD8E7C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T20:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and is not properly sanitized, allowing an attacker to inject tags. An attacker could come up with clever payloads to make the system run commands such as ping, ping6, traceroute, nslookup, arp, etc."
      }, {
        "lang" : "es",
        "value" : "En Pulse Connect Secure versión 8.3R1, presenta un problema de tipo XSS reflejado en el archivo adminservercacertdetails.cgi. En el panel de administración, el parámetro certid del archivo adminservercacertdetails.cgi es reflejado en la respuesta de la aplicación y no está saneado apropiadamente, permitiendo que un atacante inyecte etiquetas. Un atacante podría venir con una carga útil inteligente para hacer que el sistema ejecute comandos como ping, ping6, traceroute, nslookup, arp, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CC2CCF-AF71-4DB5-98D1-C82C4DD8E7C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T20:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can use javascript: or data: to abuse this."
      }, {
        "lang" : "es",
        "value" : "Pulse Connect Secure versión 8.3R1, tiene una vulnerabilidad de tipo cross-site scripting (XSS) reflejado en el archivo launchHelp.cgi. El parámetro helpLaunchPage es reflejado en un elemento IFRAME, si el valor contiene dos comillas. Al sanear apropiadamente las comillas y las etiquetas, entonces no se puede cerrar el src con una comilla e inyectar después de esta. Sin embargo, un atacante puede usar javascript: o data: para abusar de esto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CC2CCF-AF71-4DB5-98D1-C82C4DD8E7C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T20:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not protected by any CSRF tokens, thus allowing an attacker to logout a user by making them visit a malicious web page."
      }, {
        "lang" : "es",
        "value" : "Pulse Connect Secure versión  8.3R1, tiene una vulnerabilidad de tipo CSRF en el archivo logout.cgi. La función logout del panel de administración no está protegida por ningún token CSRF, lo que permite a un atacante cerrar la sesión de un usuario haciéndole visitar una página web maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CC2CCF-AF71-4DB5-98D1-C82C4DD8E7C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/sxcurity/status/884556905145937921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-12T21:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses."
      }, {
        "lang" : "es",
        "value" : "En el archivo install/page_dbsettings.php en la distribución Core de XOOPS versión 2.5.8.1, datos no filtrados pasados ??a las consultas CREATE y ALTER SQL causaron una inyección SQL en la página de configuración de la base de datos, relacionada con el uso de GBK en las sentencias CHARACTER SET y COLLATE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BA9895-4753-4BBF-9D92-7C101FAF369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tsublogs.wordpress.com/2017/07/12/xoops-core-2-5-8-1-install-db-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tsublogs.wordpress.com/2017/07/12/xoops-core-2-5-8-1-install-db-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T01:29:01.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo /application/lib/ajax/get_image.php en FineCMS hasta el 12-07-2017, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros folder, id, o name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Reflected-XSS-in-get-image-php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Reflected-XSS-in-get-image-php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T01:29:01.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitor_ip parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una inyección SQL en FineCMS hasta la versión 2017-07-12 mediante el parámetro visitor_ip en application/core/controller/excludes.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Authenticated-SQL-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Authenticated-SQL-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T01:29:01.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "application/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action."
      }, {
        "lang" : "es",
        "value" : "application/core/controller/images.php en FineCMS hasta la versión 2017-07-12 permite que atacantes remotos lleven a cabo ataques XSS subiendo una imagen mediante una acción route=images."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-images-php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-images-php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T01:29:01.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during logging or during the reading of logs, a different vulnerability than CVE-2017-11180."
      }, {
        "lang" : "es",
        "value" : "FineCMS hasta la versión 2017-07-12 permite XSS en visitors.php debido a que JavaScript, en URL visitadas, no se restringe ni durante la creación ni la lectura de registros. Esta vulnerabilidad es diferente de CVE-2017-11180."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72826395-137B-4200-8C57-CE1C35A5EF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-visitors-php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-visitors-php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T03:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed."
      }, {
        "lang" : "es",
        "value" : "La falta de anclaje en la expresión regular (regex) generada para rack-cors anterior a versión 0.4.1 permite que un sitio de terceros malicioso realice peticiones CORS. Si la configuración estuviera destinada a permitir solo el nombre de dominio de confianza example.com y no el nombre de dominio malicioso example.net, entonces, podría ser permitido inadvertidamente example.com.example.net (así como example.com-example.net)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack-cors_project:rack-cors:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "0.4.1",
            "matchCriteriaId" : "15A00D74-A764-4CA5-89B7-23E9E440D470"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/22",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyu/rack-cors/commit/42ebe6caa8e85ffa9c8a171bda668ba1acc7a5e6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143345/rack-cors-Missing-Anchor.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyu/rack-cors/commit/42ebe6caa8e85ffa9c8a171bda668ba1acc7a5e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143345/rack-cors-Missing-Anchor.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T13:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated."
      }, {
        "lang" : "es",
        "value" : "Heimdal en versiones anteriores a la 7.4 permite que atacantes remotos suplanten servicios con ataques Orpheus' Lyre ya que obtiene nombres de servicios principales, de manera que viola la especificación del protocolo Kerberos 5. En _krb5_extract_ticket() el nombre del servicio KDC-REP se debe obtener de la versión cifrada almacenada en 'enc_part' en lugar de la versión sin cifrar almacenada en 'ticket'. El uso de versiones sin cifrar supone una oportunidad para que se lleve a cabo una suplantación del servidor exitosa además de otros ataques. NOTA: este CVE solo es aplicable a Heimdal y otros productos que embeben código Heimdal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "BBB557FB-2D64-4B67-ABB4-232B8532E9F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.4.15",
            "matchCriteriaId" : "F4D6C6EB-04EC-4514-947F-37DA23C07BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.12",
            "matchCriteriaId" : "C93F9D32-8BFD-484B-8D16-6A440132A4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.6",
            "matchCriteriaId" : "92EBC874-FF91-47E4-B57D-A54DF0859239"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.h5l.org/advisories.html?show=2017-07-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038876",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/releases/tag/heimdal-7.4.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:05.heimdal.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.orpheus-lyre.info/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-11103.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.h5l.org/advisories.html?show=2017-07-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/releases/tag/heimdal-7.4.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:05.heimdal.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.orpheus-lyre.info/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-11103.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7529",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-13T13:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request."
      }, {
        "lang" : "es",
        "value" : "Las versiones desde la 0.5.6 hasta 1.13.2 incluyéndola de Nginx, son susceptibles a una vulnerabilidad de desbordamiento de enteros en el módulo filtro de rango de nginx, resultando en un filtrado de información potencialmente confidencial activada por una petición especialmente creada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.5.6",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "D19034A4-1211-4A40-A2D3-2A9F87770081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndIncluding" : "1.13.2",
            "matchCriteriaId" : "BA59CB1C-4A69-4593-9D22-9B45FCA70490"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2016.4.7",
            "matchCriteriaId" : "B7ABD977-A333-473B-806D-32ECD7909B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.1.0",
            "versionEndIncluding" : "2017.1.1",
            "matchCriteriaId" : "15CC6F3C-8DA8-4CE0-8E9A-057A0F55DEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.2.1",
            "versionEndIncluding" : "2017.2.3",
            "matchCriteriaId" : "38CBF065-5219-463A-9677-86088D761584"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.0",
            "matchCriteriaId" : "BB279F6B-EE4C-4885-9CD4-657F6BD2548F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Sep/36",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039238",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2538",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-7529",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212818",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Sep/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-7529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1308",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-13T15:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462."
      }, {
        "lang" : "es",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual versiones 4.1.5.1 y 5.0, podría permitir a un atacante autenticado descargar archivos a los que no debería tener acceso debido a controles de acceso inapropiados. ID de IBM X-Force: 125462."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "CE271ACB-648A-4117-91CB-95ABE6CBD598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "D516AA91-8C4D-4CFB-B7DF-1D520AAC13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "E63FCFEB-CBEF-43A0-987E-AA4551B3C7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "D8BB9447-81BD-4E24-9D6A-2C06EC306B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "89511A39-7BF6-4D39-B967-61B4222935B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "B08CA954-1BF8-47FC-B481-FB364A36F891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "66523749-B623-4EC3-86B2-7C55DB2E12BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003806",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99549",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125462",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7672",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-13T15:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12."
      }, {
        "lang" : "es",
        "value" : "Si una aplicación permite la introducción de una URL en un campo de un formulario y se emplea URLValidator (integrado), es posible preparar una URL especial que será utilizada para sobrecargar el proceso del servidor cuando se lleva a cabo la validación de la URL. La solución es actualizar a la versión 2.5.12 de Apache Struts."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CE1226-E0E6-4DC6-AC89-3FFDE6BD7B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F914BA-CF16-4B03-A6A2-8C9816EC1248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C82970-62C9-4513-A66D-6BDA4048C27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D284BF2-101C-490C-85CB-69D156D1FF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C720D6-312B-477C-A993-BEE39A7ADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF635DCE-D495-4166-9E25-1E48DDDF9AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DBE04-720B-421E-B76A-4EE92FEE171C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://struts.apache.org/docs/s2-047.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99563",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039114",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d%40%3Cannouncements.struts.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180706-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://struts.apache.org/docs/s2-047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d%40%3Cannouncements.struts.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180706-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9787",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-13T15:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33."
      }, {
        "lang" : "es",
        "value" : "Cuando se utiliza una funcionalidad de Programación Orientada a Aspectos (POA) Spring para hacer las acciones Struts seguras, es posible realizar un ataque de DoS. La solución es actualizar a la versión 2.5.12 o 2.3.33 de Apache Struts."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B4E64-2A36-49C6-B09D-77B3BDF69709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2481505C-4FD1-4195-9E10-9DD741498FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910DCB81-63A8-4BBB-8897-A98A0F2AEEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F4616-4B4B-4CAB-968B-502179152D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D12A0A-1DC5-47C7-9FF6-E8103C75FE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED63DB-2AAF-4BC9-A844-074EDF63C89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86232DA-90C7-43F8-99CC-C1BFB4BA3F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A6CEED-6C43-4325-B36C-9F254CCDFDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F43088-26AA-4890-A9D6-1B9B48D5F02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6820E3-8FDF-4BDF-8B62-E604A91F1280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44527919-8403-42A8-9CE1-3B4F58630F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB91D8A-14B8-4263-B90D-F776535F9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB525941-7175-43C1-9F17-814F5F7C72CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10D559E-04A0-4002-947C-D3902138795B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89203DD8-2C95-4546-9504-83654FFA5DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3D5644-CFAC-4FB5-A1FB-387F97876098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC883A7-0766-4857-ABC8-9DB4BA713650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3553904-BF3C-4636-947A-8AA16D4F38A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93CE807-D7C2-4865-ACF8-E366A6478B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FF6282-0BCA-46EB-9648-6EE3EDA189F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1467BC-9BC8-402D-A420-615CF9698648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE716B-867F-49CA-BDAF-194714D990C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880AEA69-3705-447D-80FF-60753248158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6057D5-0787-4026-A202-ACD07C862F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3AE8EA-4D25-4151-A210-ECDE802F8A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C615AE-4709-47EB-85F8-BD944096428E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524C5119-416D-413B-BF1D-29291E23FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45446B16-F531-4C6D-B889-A8A6622C70A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39047809-4E6D-4670-B9BA-D8FD910E38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71823E13-1896-4EE4-A49C-CFFB717FFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291F3624-8AB5-46F2-9BB5-F592DF1C9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD053675-DE5E-40A8-B404-4F36AAC82502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0392E61-6D77-43C3-8009-96BC0F90B8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067F6249-CC5A-4402-843C-06D5F9F77267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFA78DD-B60C-46AD-BCCB-4E15BB16BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA1EABE-5292-44C2-8327-54201A42F204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327A6EA-69AF-4EB2-8F17-8011678FAB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FAA0C-0908-4105-BE3A-016B4A298264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CE1226-E0E6-4DC6-AC89-3FFDE6BD7B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F914BA-CF16-4B03-A6A2-8C9816EC1248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C82970-62C9-4513-A66D-6BDA4048C27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A43CA5-46DE-4513-A309-BE3A60CD5489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D83D2FA-8931-45F8-82D6-DE270A2BA55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D284BF2-101C-490C-85CB-69D156D1FF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAD7A75-378F-4A0F-A10F-E4F7AF60F285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E43496-097F-4560-BFB1-BDDA4659F197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C720D6-312B-477C-A993-BEE39A7ADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03367A87-9011-45F4-B534-DEA26F8D4567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF635DCE-D495-4166-9E25-1E48DDDF9AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DBE04-720B-421E-B76A-4EE92FEE171C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://struts.apache.org/docs/s2-049.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99562",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039115",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d%40%3Cannouncements.struts.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/de3d325f0433cd3b42258b6a302c0d7a72b69eedc1480ed561d3b065%40%3Cannouncements.struts.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180706-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://struts.apache.org/docs/s2-049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d%40%3Cannouncements.struts.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/de3d325f0433cd3b42258b6a302c0d7a72b69eedc1480ed561d3b065%40%3Cannouncements.struts.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180706-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6249",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-13T16:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34373711. References: N-CVE-2017-6249."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elevación de privilegios en el driver de sonido de NVIDIA habilita una aplicación maliciosa que ejecuta código aleatorio dentro del contexto del kernel. Este problema esta evaluado como moderado debido a que primeramente requiere comprometer los privilegios del proceso. Producto: Android. Versión: N/A. Android ID: A-34373711. Referencias: N-CVE-2017-6249."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99616",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9788",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-13T16:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service."
      }, {
        "lang" : "es",
        "value" : "En Apache httpd, en versiones anteriores a la 2.2.34 y en versiones 2.4.x anteriores a la 2.4.27, el valor placeholder en cabeceras [Proxy-]Authorization del tipo 'Digest' no se inicializó o reinició antes de o entre las asignaciones sucesivas key=value por mod_auth_digest. Proporcionar una clave inicial sin asignación \"=\" podría reflejar el valor obsoleto de la memoria agrupada no inicializada utilizada por la petición anterior. Esto podría dar lugar al filtrado de información potencialmente confidencial y, en otros casos, a un fallo de segmentación que daría como resultado una denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.33",
            "matchCriteriaId" : "BF02A472-9FEE-4796-B9B6-DEF9FB20AFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.26",
            "matchCriteriaId" : "B4F38A30-B7C6-4F9E-BFE0-B8481B0EAD26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81647C-9A53-481D-A54C-36770A093F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B067C7-735E-43C9-9188-7E1522A02491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2466282-51AB-478D-9FF4-FA524265ED2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681173DF-537E-4A64-8FC7-75F439CCAD0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4B4E96-1F12-4719-BDB7-4ED5D3DCF9ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3913",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99569",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038906",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2708",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2709",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2710",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3239",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3240",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_22.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb%40%3Cannounce.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170911-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb%40%3Cannounce.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170911-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9789",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-13T16:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 59.0.3071.115 para Mac, permitía que un atacante remoto realizase una suplantación de dominio mediante un nombre de dominio manipulado que contiene un carácter U+0620. Esto también se conoce como Apple rdar problem 32458012."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB3ED63-45CA-44AB-973C-9AD2569AD800"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99568",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038907",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/9d0098775bd83cf7c33ac5a077ef412c14ce939198921e639c734e20%40%3Cannounce.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170911-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9d0098775bd83cf7c33ac5a077ef412c14ce939198921e639c734e20%40%3Cannounce.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170911-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-13T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_user_chunk_callback function in coders\\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files."
      }, {
        "lang" : "es",
        "value" : "La función read_user_chunk_callback en el archivo coders\\png.c en ImageMagick versión 7.0.6-1 Q16 2017-06-21 (beta), presenta vulnerabilidades de pérdida de memoria por medio de archivos PNG creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/517",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0028",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-17T13:18:08.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user, aka \"Scripting Engine Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota cuando el motor de scripting de Microsoft accede inapropiadamente a objetos en la memoria. La vulnerabilidad podría corromper la memoria de una manera que habilita a un atacante ejecutar código arbitrario en el contexto del usuario actual. Un atacante que explotó con éxito la vulnerabilidad podría alcanzar los mismos derechos de usuario que el usuario actual, también se conoce como \"Scripting Engine Memory Corruption Vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Microsoft/ChakraCore/commit/402f3d967c0a905ec5b9ca9c240783d3f2c15724",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Microsoft/ChakraCore/commit/402f3d967c0a905ec5b9ca9c240783d3f2c15724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0152",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-17T13:18:11.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user, aka \"Scripting Engine Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en la manera en que el motor de scripting de Microsoft afectado renderiza durante el manejo de objetos en memoria en los navegadores de Microsoft. La vulnerabilidad podría corromper la memoria de tal manera que un atacante podría ejecutar código arbitrario en el contexto del usuario actual. Un atacante que exploto con éxito la vulnerabilidad podría obtener los mismos derechos de usuario que el usuario actual, también se conoce como \"Scripting Engine Memory Corruption Vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Microsoft/ChakraCore/commit/9da019424601325a6e95e6be0fa03d7d21d0b517",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Microsoft/ChakraCore/commit/9da019424601325a6e95e6be0fa03d7d21d0b517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0196",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-07-17T13:18:11.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en el motor de scripting de Microsoft, permite a los atacantes remotos obtener información confidencial de la memoria del proceso por medio de un sitio web creado, también se conoce como \"Microsoft Browser Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Microsoft/ChakraCore/commit/065b7978c40ded35c356ced6cd922a40156c9c46",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Microsoft/ChakraCore/commit/065b7978c40ded35c356ced6cd922a40156c9c46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:15.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on."
      }, {
        "lang" : "es",
        "value" : "FedMsg versión 0.18.1 y anteriores, es vulnerable a un fallo de comprobación de mensajes resultando en que la comprobación de mensajes no se habilita si es configurada para estar activada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:fedmsg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.1",
            "matchCriteriaId" : "C35B558A-AC09-4410-A74E-E0BC1D514DB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fedora-infra/fedmsg/blob/0.18.2/CHANGELOG.rst",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fedora-infra/fedmsg/blob/0.18.2/CHANGELOG.rst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:15.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure."
      }, {
        "lang" : "es",
        "value" : "La versiones 2.2.1 y anteriores de ATutor, son vulnerables a una omisión de comprobación de la extensión de archivo y el salto de directorio en el componente Course resultando en la ejecución de código. ATutor versiones 2.2.1 y anteriores, son susceptibles a una vulnerabilidad de salto de directorio en el componente Course Icon resultando en la divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "477E8516-CADE-4D79-85C3-E64736C03CA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/view.php?id=5681",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99599",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/view.php?id=5681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Module component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to a incorrect access control check vulnerability in the Alternative Content component resulting in privilege escalation."
      }, {
        "lang" : "es",
        "value" : "ATutor en sus versiones 2.2.1 y anteriores es vulnerable a una verificación de control de acceso incorrecta en el componente Social Application, lo que da como resultado un escalado de privilegios. ATutor en sus versiones 2.2.1 y anteriores es vulnerable a una verificación de control de acceso incorrecta en el componente Module, lo que da como resultado un escalado de privilegios. ATutor en sus versiones 2.2.1 y anteriores es vulnerable a una verificación de control de acceso incorrecta en el componente Alternative Content, lo que da como resultado un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "477E8516-CADE-4D79-85C3-E64736C03CA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/view.php?id=5681",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99599",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/view.php?id=5681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ATutor version 2.2.1 and earlier are vulnerable to a SQL injection in the Assignment Dropbox, BasicLTI, Blog Post, Blog, Group Course Email, Course Alumni, Course Enrolment, Group Membership, Course unenrolment, Course Enrolment List Search, Glossary, Social Group Member Search, Social Friend Search, Social Group Search, File Comment, Gradebook Test Title, User Group Membership, Inbox/Sent Items, Sent Messages, Links, Photo Album, Poll, Social Application, Social Profile, Test, Content Menu, Auto-Login, and Gradebook components resulting in information disclosure, database modification, or potential code execution."
      }, {
        "lang" : "es",
        "value" : "La versiones 2.2.1 y anteriores de ATutor, son vulnerables a una inyección SQL en los componentes Assignment Dropbox, BasicLTI, Blog Post, Blog, Group Course Email, Course Alumni, Course Enrolment, Group Membership, Course unenrolment, Course Enrolment List Search, Glossary, Social Group Member Search, Social Friend Search, Social Group Search, File Comment, Gradebook Test Title, User Group Membership, Inbox/Sent Items, Sent Messages, Links, Photo Album, Poll, Social Application, Social Profile, Test, Content Menu, Auto-Login y Gradebook, resultando en la divulgación de información, modificación de la base de datos o una potencial ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "477E8516-CADE-4D79-85C3-E64736C03CA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/view.php?id=5681",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99599",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/atutor/mantis/view.php?id=5681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS in the name of databases, tables and columns resulting in potential account takeover and scraping of data (stealing data)."
      }, {
        "lang" : "es",
        "value" : "PHPMiniAdmin versión 1.9.160630 es vulnerable a un problema de tipo XSS almacenado en el nombre de bases de datos, tablas y columnas, resultando en una posible toma de cuenta y scraping de datos (robo de datos)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpminiadmin_project:phpminiadmin:1.9.160930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D97B070-F1B3-44F4-90A8-C060305DB7A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osalabs/phpminiadmin",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osalabs/phpminiadmin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a 1.16.0 de plotly.js de Plotly, Inc. son vulnerables a un problema de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07CB77A-D197-4997-8913-9C826F4CB4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EECBD1-289B-4808-8667-47BD9E2BB5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835B8248-2AE6-493D-8BEB-59BBE66E5F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3569A162-EEAC-47D2-BBE9-3303DB09F385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0DC5E4-4DB5-407F-81CA-845C2EEABB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E745F1-8561-4B11-9473-C8B02D1F07BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plotly:plotly.js:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E625BBE1-3A1D-4398-AFDB-23C083603569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure."
      }, {
        "lang" : "es",
        "value" : "txAWS (todas las versiones actuales) no realiza la comprobación completa del certificado, resultando en una vulnerabilidad a ataques de tipo MitM y a la divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twistedmatrix:txaws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADB9159-C868-497B-987E-5F0F26367805"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/twisted/txaws/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twisted/txaws/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password."
      }, {
        "lang" : "es",
        "value" : "Chyrp Lite versión 2016.04, es vulnerable a un problema de tipo CSRF en la función user settings, lo que permite a los atacantes secuestrar la autenticación de usuarios registrados para modificar la información de la cuenta, incluyendo su contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chyrp-lite_project:chyrp_lite:2016.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B688CCC6-00D8-45EB-91BD-9DA8F4E9848D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xenocrat/chyrp-lite/commit/79bb2de7f57d163d256b6bdb127dc09cfdb6235a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xenocrat/chyrp-lite/commit/79bb2de7f57d163d256b6bdb127dc09cfdb6235a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution."
      }, {
        "lang" : "es",
        "value" : "CE y EE anterior a versiones 1.6.6, 1.5.15, 1.4.28 de Akeneo PIM  son vulnerables a la inyección shell en la edición masiva, resultando en una ejecución remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:-:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "09961B92-558C-483D-A244-F0464A6C451C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:beta1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CA821035-E542-4557-87FB-4489470E9075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:beta2:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8DFFA9C4-75A6-4D3E-BA9E-757DCA7119EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:beta3:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "93F08A81-9A3F-45FC-B5F5-286EA44D12C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:rc1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B58FF996-30CA-4B9B-90B6-9711AA85238A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EEC56E78-9F76-4658-8028-887127F23915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "227DFE9E-FC0D-4C16-9246-2C5DA08F3C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D3D3B57F-AAF3-4147-89EC-5BC9DBC2FCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9E807838-7FB5-448C-8EDC-7BBB35613099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "208252AB-3E3F-4FEB-BCBE-7152D85AFEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E4EE1DC6-641F-497D-AEE1-19C6016A99D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "417F83EC-8877-48FA-B3C2-2F73D43A3F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4A5E39B2-5342-4AD0-89D0-48376DFD42EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "99D0CEA1-EF11-4816-A5C5-4118C93D784D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3C43DF6E-665B-4A44-A799-A25B627B7629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8D657FE2-AD6D-4ACA-A460-ED11150F505D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C8C0029F-6B8A-42BF-8867-4FFE5B042800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.13:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4F8C8A10-DA74-4D2D-92D9-4FB60BE3BE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.14:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F07EB708-5CE4-4E86-AB54-DB0D8757D026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.15:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2CDDCB42-C313-40B7-9F08-9875A553A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6F5840C5-F733-44B7-B192-740B4189956D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.17:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DF40977C-CD1E-41F4-8EF2-8F95B0EFCD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.18:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA720436-D6E8-4B4B-8B98-59F96D975C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.19:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "60FFB54D-9FDA-4496-AAED-787B2E7134B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.20:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9DB5787D-1582-487E-B77D-579AD40AE4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.21:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5E03188B-E57E-4AAD-828A-3BDC07F1CFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.22:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "094FB9DA-F337-4FD4-B4BE-7AFFC1CED00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.23:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0817F232-9278-41AC-AB36-61138E3962B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.24:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "821A5ED9-7755-4D3E-86AA-8E2C315DD5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.25:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "009ED22D-2AA7-4561-9763-0BE9974A5AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.26:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2D9B0A41-137F-4B2A-9ED5-AA5D95FCBD60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.27:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "92805097-A49A-4F50-A226-544612D88918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:-:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "100261A3-656B-48F2-94A7-F16CF911C7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:alpha1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "12F58CE5-87A6-46AA-A1E5-CBA7A248EE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:beta1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "76E533B8-90C2-441F-8479-3D158857DA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:rc1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A93343CF-131E-4A96-8652-46F27FC567DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9A22EFD3-AD28-49EF-8413-9BBA9E6D87D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D2C674E1-EDBA-4BC1-99C6-761207E6EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6E9AFF7D-594C-4FA6-B176-18F38139A206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B1FB942F-AAB3-40D4-AF03-F97063A29FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "245D8720-B7A2-4934-841C-6A3400C1CCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3E9A8E1F-A423-4872-BFC7-40B1982BCDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5F0BED3B-2BC1-4E2C-9715-4731E898455F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B11AD7D6-AE52-435F-B399-225321F2B59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40DC79A0-3179-47A7-9A39-211620F20AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "30ADBF8D-2DAE-4974-B922-DFDF952E15F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "564B0954-019C-49CF-98B5-D981D78626A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FED37BF2-5ED3-469D-9A06-B36956C2364C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.13:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B010DD2A-923C-4703-BFF5-258B02B4BD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.14:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4A12A9FD-DF0A-4B8C-A31E-6CAC37F92020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:-:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6E2E597A-0FC9-4B04-8F0A-B9990308E76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "66DC5FA1-7EDC-4929-9262-928DDA6CF06F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha2:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D49F779B-F4F1-42B4-9CEB-C39392A178E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:rc1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5ECB19C4-A000-481A-9F19-E17214E78D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BD38E663-DE40-4D11-9C08-DD990F1862A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E3E240B9-671A-49F6-B28A-CCBD565D6715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E1878674-4340-480C-AD2A-B53BF43077D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F0568DD4-8CDC-4743-AB67-94337DB7FA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "851CCFE3-C81D-4EAD-BC75-C98EF7EE9921"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:-:*:*:community:*:*:*",
            "matchCriteriaId" : "D9960587-9B32-476F-B52D-BD83C21E1716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:beta1:*:*:community:*:*:*",
            "matchCriteriaId" : "5F7DBA22-D16A-4C83-AC29-A7EF5FF8177C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:beta2:*:*:community:*:*:*",
            "matchCriteriaId" : "3F65E714-010E-4300-95D5-51DAAFFCF0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:beta3:*:*:community:*:*:*",
            "matchCriteriaId" : "3F75681C-F0A9-4BD4-B4BA-6598FEEA9165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.0:rc1:*:*:community:*:*:*",
            "matchCriteriaId" : "A8CFD1B2-E7E5-4B59-BB0D-89EE65CA8DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BFCC93EF-94B1-429B-860C-77BAFC6BC93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "39C9005F-A2A3-418F-A941-121126A5FF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "A6C66876-5A76-4007-BDCA-E5671AEA778B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "60971CBF-D460-4B86-8C99-2492969A447A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "3A58222A-C8B2-49CD-9C63-CBE86F574170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CF968F13-AB0A-4931-9F70-40CD20363F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D7AC6664-697A-4AB1-A673-6B1F0843D07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "B1A60C35-F581-4BEE-82A0-C3D3EC875161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "109BF7F8-0B55-49B5-AE5C-F5E5C6CFC7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.10:*:*:*:community:*:*:*",
            "matchCriteriaId" : "237C9D30-AB04-4B57-97C6-211829B6AE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.11:*:*:*:community:*:*:*",
            "matchCriteriaId" : "88EC5B83-0868-45F9-8A0A-7151E78CFDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.12:*:*:*:community:*:*:*",
            "matchCriteriaId" : "674C514B-7B6C-4FFF-9596-767620B81FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.13:*:*:*:community:*:*:*",
            "matchCriteriaId" : "B7DE8604-AE92-4E70-BAEA-324820E14745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.14:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BD20E8E4-7911-4AEE-9F33-D77BE9602D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.15:*:*:*:community:*:*:*",
            "matchCriteriaId" : "4636650D-0114-4931-A5B7-38A3A38047D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.16:*:*:*:community:*:*:*",
            "matchCriteriaId" : "082BDF6C-57F3-49E9-942A-7E270B6D5DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.17:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7B0B2FB7-768B-4F8E-AA79-AAD19F0BA0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.18:*:*:*:community:*:*:*",
            "matchCriteriaId" : "B7DEBC4C-8802-4B13-A63D-67AA466800DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.19:*:*:*:community:*:*:*",
            "matchCriteriaId" : "3E4F2A3D-9725-498F-8338-5646991D3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.20:*:*:*:community:*:*:*",
            "matchCriteriaId" : "575E9AE9-11D9-45D4-90CC-AEA6EC3697BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.21:*:*:*:community:*:*:*",
            "matchCriteriaId" : "1F69ED88-DE3A-4CB9-8DE8-F31C524C5EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.22:*:*:*:community:*:*:*",
            "matchCriteriaId" : "840A87AC-B424-480D-8393-C9C764FC15A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.23:*:*:*:community:*:*:*",
            "matchCriteriaId" : "FA533FC2-BFC5-47F8-A193-B88BD07AA54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.24:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7E7392B2-9F76-4AB8-A4BF-87D499A04EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.25:*:*:*:community:*:*:*",
            "matchCriteriaId" : "88DC1086-52A0-489A-85A4-E15BDCB46328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.26:*:*:*:community:*:*:*",
            "matchCriteriaId" : "0A2231ED-5A6F-4876-A988-E06AC926B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.4.27:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BA86E0DF-606C-4C4E-830E-023D313FD783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:-:*:*:community:*:*:*",
            "matchCriteriaId" : "7E34819C-2579-42B4-9500-F5F38F366CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:alpha1:*:*:community:*:*:*",
            "matchCriteriaId" : "8AC6A965-D44E-49C0-8341-DA511DF01D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:beta1:*:*:community:*:*:*",
            "matchCriteriaId" : "CD5FF35C-6058-4A57-A645-FA026036FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.0:rc1:*:*:community:*:*:*",
            "matchCriteriaId" : "B5499E66-29C2-4C82-9CEE-9F58767F8A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "11965034-B4A7-469A-969C-C93165857531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "67384E45-D2CF-4923-96E4-EC23C10D4F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "DA9819BE-A491-4837-927F-2A5045ECB1F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "9F018372-119B-4678-B747-7E66C62E199E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "193C3E63-4F82-4F25-8D0D-F5CC4F70DC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "8D533299-AC08-44C1-AF13-D7C422911BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "F09157D5-C7BD-431B-A463-D0A2E7C49EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "F7BB1F44-A29F-4E57-898C-F973BA1B60CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "5914A9A1-EFEB-4C4E-960D-556F460D04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.10:*:*:*:community:*:*:*",
            "matchCriteriaId" : "585D769B-004E-4C9F-AE5E-62A3C90E2BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.11:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CD9A26F6-07F1-4254-A7F1-C3800016DEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.12:*:*:*:community:*:*:*",
            "matchCriteriaId" : "24CD93D3-CEFD-4355-9472-14BE3A0A474E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.13:*:*:*:community:*:*:*",
            "matchCriteriaId" : "EEB33E72-5AEC-4171-AC7A-9FBD5E58FD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.5.14:*:*:*:community:*:*:*",
            "matchCriteriaId" : "AFD37A1E-5921-415E-9A15-AB6B6832FBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:-:*:*:community:*:*:*",
            "matchCriteriaId" : "4B04A28D-0266-4F29-8711-9E63EC31DB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha1:*:*:community:*:*:*",
            "matchCriteriaId" : "4C14D67E-3856-48B7-9029-0BF99DE6A99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha2:*:*:community:*:*:*",
            "matchCriteriaId" : "CE295B81-9AD3-4105-BA38-8CADAB788513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.0:rc1:*:*:community:*:*:*",
            "matchCriteriaId" : "7303C2BB-134E-448B-9820-27DC2184C4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "52BD18BE-1347-4A22-BA20-1E76B3F285AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "A04D2731-6864-4F9F-8D48-F35C2BD48A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "8DDFF87C-BE90-42DA-A8B8-00B4858B2A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "64BE2FD4-CD98-4B80-87D4-8C5663E7BEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeneo:product_information_management:1.6.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "672EBFE9-2DAF-46E4-ABAE-DBA242995E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Audacity versión 2.1.2 hasta la versión 2.3.2 es vulnerable al secuestro de DLL en la biblioteca avformat-55.dll resultando en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audacityteam:audacity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.2",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "3F9636ED-292C-42D7-B8C4-A68297BBD208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GitHubAssessments/CVE_Assessments_10_2019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/140365/Audacity-2.1.2-DLL-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/GitHubAssessments/CVE_Assessments_10_2019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/140365/Audacity-2.1.2-DLL-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information"
      }, {
        "lang" : "es",
        "value" : "MyWebSQL versión 3.6, es vulnerable a un problema de tipo XSS almacenado en el componente database manager, resultando en la toma de control de la cuenta o el robo de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebsql:mywebsql:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D19D7-2EA7-477E-8B1D-B3805ED72CA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Samnan/MyWebSQL",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Samnan/MyWebSQL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user"
      }, {
        "lang" : "es",
        "value" : "MySQL Dumper versión 1.24, es vulnerable a un problema de tipo XSS almacenado cuando muestra los datos en la base de datos al usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysqldumper:mysqldumper:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C1732-4F51-42B9-BA75-9F61D38CA7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DSB/MySQLDumper",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DSB/MySQLDumper",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness"
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin en las versiones 4,0, 4,4, y 4,6 es vulnerable a una debilidad de redireccionamiento abierta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F06DC95-76B1-4E24-A55F-1358A25ED0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B406A721-0075-46C8-A920-3C9602AD667B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AE4653-1911-4A58-85DD-51E0578E788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA76CB4-6167-446A-8D4F-6D5B38046334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D28655-7F37-474D-A4E2-772AF24B94E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA1951E-BD85-42BF-BF7F-79A14D165914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DD0910-DBBA-4858-B9B1-FA93D08323D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8D93A3-8997-4EB9-A411-74B296D1341F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0245AF2D-F856-4CAA-A830-36D43026D1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69E253E-157D-45BA-A977-079A49F74A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6325E2AE-BB86-4953-AA9E-0433C00B096E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54B828-8B23-4C62-907E-8EE7E757B721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD18C8-172B-41CD-87DD-58BDEC0D9418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10666E30-D98A-47A9-881A-B281066F0EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3993826B-CA66-4BC2-8E1B-06CF9230B214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14928F51-761E-4FCA-B13C-A11530C7FC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB761644-20F5-4E0D-B301-7809EAECA813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896439D0-6C98-44A6-8C9D-0D57D57782D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978B828C-1FCB-4386-B685-5BEE5A8A500C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A3261B-23BE-42D7-8A52-AE2E8C274A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B7EA51-27EC-4884-8D60-FB9477D2B91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F85FEC-427E-487D-997E-7EE359475876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C825978-7E00-4C20-A806-0B968AA589AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B744FB8F-C58C-446C-B4B9-53548EBE12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50F69E9-0326-4A6F-B2FE-D87AB811281A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90D111A-A076-4936-BA7F-E2C3ACE44B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CD0228-728B-437A-84C1-BD7AFA52FFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF55485-9892-4E7B-AEE0-017E61EAA7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6100FE3E-0A31-4B55-90F2-90AF765A8EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E06B1D3-29B4-45B7-B81F-C864AF579011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2E3923-0E2B-411A-B091-088E6FF050D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1848C748-804D-4FE4-AB9C-B1BF9E58A19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12296322-DFAD-4B36-83EC-D01BF5DF7F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA321C14-C8F4-41FC-B601-2F646064ABBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF3DBC5-7020-48D0-ADEA-E71776DB2285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F952E-5F12-4ED3-8FA3-FC1106B50F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B97F98-C0A7-4D9E-8333-7EE9EC456A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1E753D-5653-4D7A-8E41-6C02511EBFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417230C7-0EC2-49F4-B810-A8AE84A302AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103FEAB1-194E-4CEF-935A-4DBCCA298205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5814003-9FF8-4F8E-9D90-A2BBB80B8451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D28B77-9353-4259-9299-30638A78CCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C022292B-6E06-4328-842F-135A872D22AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15F00FB-BB9B-4D54-B198-0A74D418B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC10AF20-7B65-4FAE-A2AD-783867D60A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BED20D9-C571-4BC5-9A54-450A364C6E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B92C51-B51B-4538-8A2A-102881F8024C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C191A5-3316-4A34-8B37-64D6DD616CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D97993-070A-4D32-B560-38AF28C87A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C641F362-D37D-47CB-BE6C-36E5F116F844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EA8819-70F8-48DC-8667-6CF25E7D9C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2796DA-3E74-4765-90D1-783849C7A44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4024DA77-BFE4-48C6-A2AF-46003071BDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85631B69-7060-42D1-AE24-466BA10EB390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62EDC79-47AA-4CED-AB7F-1E4D158EB653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B800AA-6290-4032-AA17-21025A19C392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230D3D61-B090-49FA-91B1-9FA4DD2C6209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33130418-95AC-41D2-B8B0-A107C9CABCFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95720",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality"
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin en las versiones 4,0, 4,4, y 4,6 es vulnerable a una debilidad de denegación de servicio (DOS) en la funcionalidad de table editing."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F06DC95-76B1-4E24-A55F-1358A25ED0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B406A721-0075-46C8-A920-3C9602AD667B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AE4653-1911-4A58-85DD-51E0578E788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA76CB4-6167-446A-8D4F-6D5B38046334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D28655-7F37-474D-A4E2-772AF24B94E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA1951E-BD85-42BF-BF7F-79A14D165914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DD0910-DBBA-4858-B9B1-FA93D08323D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8D93A3-8997-4EB9-A411-74B296D1341F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0245AF2D-F856-4CAA-A830-36D43026D1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69E253E-157D-45BA-A977-079A49F74A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6325E2AE-BB86-4953-AA9E-0433C00B096E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54B828-8B23-4C62-907E-8EE7E757B721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD18C8-172B-41CD-87DD-58BDEC0D9418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10666E30-D98A-47A9-881A-B281066F0EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3993826B-CA66-4BC2-8E1B-06CF9230B214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14928F51-761E-4FCA-B13C-A11530C7FC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB761644-20F5-4E0D-B301-7809EAECA813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896439D0-6C98-44A6-8C9D-0D57D57782D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978B828C-1FCB-4386-B685-5BEE5A8A500C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A3261B-23BE-42D7-8A52-AE2E8C274A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B7EA51-27EC-4884-8D60-FB9477D2B91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F85FEC-427E-487D-997E-7EE359475876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C825978-7E00-4C20-A806-0B968AA589AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B744FB8F-C58C-446C-B4B9-53548EBE12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50F69E9-0326-4A6F-B2FE-D87AB811281A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90D111A-A076-4936-BA7F-E2C3ACE44B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CD0228-728B-437A-84C1-BD7AFA52FFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF55485-9892-4E7B-AEE0-017E61EAA7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6100FE3E-0A31-4B55-90F2-90AF765A8EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E06B1D3-29B4-45B7-B81F-C864AF579011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2E3923-0E2B-411A-B091-088E6FF050D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1848C748-804D-4FE4-AB9C-B1BF9E58A19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12296322-DFAD-4B36-83EC-D01BF5DF7F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA321C14-C8F4-41FC-B601-2F646064ABBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF3DBC5-7020-48D0-ADEA-E71776DB2285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F952E-5F12-4ED3-8FA3-FC1106B50F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B97F98-C0A7-4D9E-8333-7EE9EC456A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1E753D-5653-4D7A-8E41-6C02511EBFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417230C7-0EC2-49F4-B810-A8AE84A302AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103FEAB1-194E-4CEF-935A-4DBCCA298205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5814003-9FF8-4F8E-9D90-A2BBB80B8451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D28B77-9353-4259-9299-30638A78CCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C022292B-6E06-4328-842F-135A872D22AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15F00FB-BB9B-4D54-B198-0A74D418B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC10AF20-7B65-4FAE-A2AD-783867D60A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BED20D9-C571-4BC5-9A54-450A364C6E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B92C51-B51B-4538-8A2A-102881F8024C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C191A5-3316-4A34-8B37-64D6DD616CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D97993-070A-4D32-B560-38AF28C87A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C641F362-D37D-47CB-BE6C-36E5F116F844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EA8819-70F8-48DC-8667-6CF25E7D9C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2796DA-3E74-4765-90D1-783849C7A44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4024DA77-BFE4-48C6-A2AF-46003071BDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85631B69-7060-42D1-AE24-466BA10EB390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62EDC79-47AA-4CED-AB7F-1E4D158EB653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B800AA-6290-4032-AA17-21025A19C392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230D3D61-B090-49FA-91B1-9FA4DD2C6209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33130418-95AC-41D2-B8B0-A107C9CABCFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95721",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters"
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin en las versiones 4.0, 4.4 y 4.6 es vulnerable a un ataque de inyección de tipo CSS por medio de parámetros cookies creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F06DC95-76B1-4E24-A55F-1358A25ED0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B406A721-0075-46C8-A920-3C9602AD667B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AE4653-1911-4A58-85DD-51E0578E788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA76CB4-6167-446A-8D4F-6D5B38046334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D28655-7F37-474D-A4E2-772AF24B94E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA1951E-BD85-42BF-BF7F-79A14D165914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DD0910-DBBA-4858-B9B1-FA93D08323D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8D93A3-8997-4EB9-A411-74B296D1341F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0245AF2D-F856-4CAA-A830-36D43026D1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69E253E-157D-45BA-A977-079A49F74A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6325E2AE-BB86-4953-AA9E-0433C00B096E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54B828-8B23-4C62-907E-8EE7E757B721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD18C8-172B-41CD-87DD-58BDEC0D9418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10666E30-D98A-47A9-881A-B281066F0EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3993826B-CA66-4BC2-8E1B-06CF9230B214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14928F51-761E-4FCA-B13C-A11530C7FC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB761644-20F5-4E0D-B301-7809EAECA813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896439D0-6C98-44A6-8C9D-0D57D57782D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978B828C-1FCB-4386-B685-5BEE5A8A500C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A3261B-23BE-42D7-8A52-AE2E8C274A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B7EA51-27EC-4884-8D60-FB9477D2B91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F85FEC-427E-487D-997E-7EE359475876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C825978-7E00-4C20-A806-0B968AA589AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B744FB8F-C58C-446C-B4B9-53548EBE12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50F69E9-0326-4A6F-B2FE-D87AB811281A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90D111A-A076-4936-BA7F-E2C3ACE44B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CD0228-728B-437A-84C1-BD7AFA52FFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF55485-9892-4E7B-AEE0-017E61EAA7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6100FE3E-0A31-4B55-90F2-90AF765A8EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E06B1D3-29B4-45B7-B81F-C864AF579011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2E3923-0E2B-411A-B091-088E6FF050D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1848C748-804D-4FE4-AB9C-B1BF9E58A19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12296322-DFAD-4B36-83EC-D01BF5DF7F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA321C14-C8F4-41FC-B601-2F646064ABBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF3DBC5-7020-48D0-ADEA-E71776DB2285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F952E-5F12-4ED3-8FA3-FC1106B50F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B97F98-C0A7-4D9E-8333-7EE9EC456A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1E753D-5653-4D7A-8E41-6C02511EBFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417230C7-0EC2-49F4-B810-A8AE84A302AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103FEAB1-194E-4CEF-935A-4DBCCA298205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5814003-9FF8-4F8E-9D90-A2BBB80B8451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D28B77-9353-4259-9299-30638A78CCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C022292B-6E06-4328-842F-135A872D22AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15F00FB-BB9B-4D54-B198-0A74D418B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC10AF20-7B65-4FAE-A2AD-783867D60A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BED20D9-C571-4BC5-9A54-450A364C6E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B92C51-B51B-4538-8A2A-102881F8024C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C191A5-3316-4A34-8B37-64D6DD616CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D97993-070A-4D32-B560-38AF28C87A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C641F362-D37D-47CB-BE6C-36E5F116F844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EA8819-70F8-48DC-8667-6CF25E7D9C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2796DA-3E74-4765-90D1-783849C7A44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4024DA77-BFE4-48C6-A2AF-46003071BDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85631B69-7060-42D1-AE24-466BA10EB390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62EDC79-47AA-4CED-AB7F-1E4D158EB653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B800AA-6290-4032-AA17-21025A19C392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230D3D61-B090-49FA-91B1-9FA4DD2C6209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33130418-95AC-41D2-B8B0-A107C9CABCFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95726",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18."
      }, {
        "lang" : "es",
        "value" : "Se detectó una debilidad en la que un atacante puede inyectar valores arbitrarios en las cookies del navegador. Esta es una reedición de una solución incompleta de PMASA-2016-18."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C641F362-D37D-47CB-BE6C-36E5F116F844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85631B69-7060-42D1-AE24-466BA10EB390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62EDC79-47AA-4CED-AB7F-1E4D158EB653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B800AA-6290-4032-AA17-21025A19C392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230D3D61-B090-49FA-91B1-9FA4DD2C6209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33130418-95AC-41D2-B8B0-A107C9CABCFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A5550C-91AC-41C3-AADF-1A7C02089E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A5E347-7A9D-4FAF-BDD2-314FA0A01821"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server"
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin versiones 4.0, 4.4 y 4.6 son vulnerables a una debilidad donde un usuario con los permisos adecuados puede conectarse a un servidor MySQL arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.10.19",
            "matchCriteriaId" : "18ADFF10-3935-419D-A5F2-589A702A857F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndIncluding" : "4.4.15.10",
            "matchCriteriaId" : "928D191C-A3A7-4DEE-87AF-CF2A03295798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndIncluding" : "4.6.6",
            "matchCriteriaId" : "F21A70D3-CFF3-4A41-82BC-9EA2D7A190B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95732",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name"
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin en las versiones 4.0, 4.4 y 4.6 es vulnerable a un ataque de tipo DOS en el estado de replicación al usar un nombre de tabla especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.10.19",
            "matchCriteriaId" : "18ADFF10-3935-419D-A5F2-589A702A857F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.15.10",
            "matchCriteriaId" : "4FEFDD77-6453-4FA9-811D-A4A14BBD17A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.6",
            "matchCriteriaId" : "A6BBF43D-4C74-466D-986C-FABDCDB75069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. \"eCos Embedded Web Servers used by Multiple Routers and Home devices, while sending SYN Flood or FIN Flood packets fails to validate and handle the packets and does not ask for any sign of authentication resulting in Authentication Bypass. An attacker can take complete advantage of this bug and take over the device remotely or locally. The bug has been successfully tested and reproduced in some versions of SOHO Routers manufactured by TOTOLINK, GREATEK and others.\""
      }, {
        "lang" : "es",
        "value" : "El ataque de tipo SYN Flood o FIN Flood en ECos versión 1 y en otras versiones de dispositivos incorporados da como resultado un bypass de autenticación web. \"Embedded Web Servers de eCos utilizados por múltiples enrutadores y dispositivos domésticos, mientras envían los paquetes SYN Flood o FIN Flood fallan en la comprobación y el manejo de los paquetes, y no solicitan ninguna firma de autenticación que resulta en la Omisión de Autentificación. Un atacante tomar ventaja de este bug y tomar el control del dispositivo de manera remota o local. El bug se ha probado y reproducido con éxito en algunas versiones de Enrutadores SOHO  fabricados por TOTOLINK, GREATEK y otros \"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ecos:embedded_web_servers:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "DC2D3228-8D54-4A29-940E-54A12A343883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greatek:soho:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A48C0A7-821B-493C-9211-FC38521459C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:soho:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE8FF0-D0DB-49B4-B360-8A90C780950B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ecos.sourceware.org/ecos/problemreport.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ecos.sourceware.org/ecos/problemreport.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents."
      }, {
        "lang" : "es",
        "value" : "LogicalDoc Community Edition versión 7.5.3 y anteriores son vulnerable a ataques de tipo XXE durante el indexado de documentos XML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "7.5.3",
            "matchCriteriaId" : "CDC890B0-54E5-43C9-AD48-C82199BD6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.randorisec.fr/logicaldoc-from-guest-to-root/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.randorisec.fr/logicaldoc-from-guest-to-root/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "LogicalDoc Community Edition versión 7.5.3 y anteriores contienen un control de acceso incorrecto que podría conllevar a una escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "7.5.3",
            "matchCriteriaId" : "CDC890B0-54E5-43C9-AD48-C82199BD6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.randorisec.fr/logicaldoc-from-guest-to-root/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.randorisec.fr/logicaldoc-from-guest-to-root/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document."
      }, {
        "lang" : "es",
        "value" : "LogicalDoc Community Edition versión 7.5.3 y anteriores son vulnerables a un Cross-Site Scripting (XSS) cuando se usa la vista previa en un documento HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "7.5.3",
            "matchCriteriaId" : "CDC890B0-54E5-43C9-AD48-C82199BD6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.randorisec.fr/logicaldoc-from-guest-to-root/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.randorisec.fr/logicaldoc-from-guest-to-root/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission"
      }, {
        "lang" : "es",
        "value" : "Shotwell en su versión 0.24.4 o anteriores y 0.25.3 o anteriores es vulnerable a una revelación de información en los plugins de publicación web que tiene como resultado una posible transmisión de contraseña y de token oauth en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:shotwell:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.24.0",
            "versionEndIncluding" : "0.24.4",
            "matchCriteriaId" : "CE17101F-6BDF-4013-B621-A3FC68C2CD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:shotwell:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.25.0",
            "versionEndIncluding" : "0.25.3",
            "matchCriteriaId" : "90DC6BB5-1885-4E63-AB4F-6843CFA8508D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mail.gnome.org/archives/shotwell-list/2017-January/msg00048.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://mail.gnome.org/archives/shotwell-list/2017-January/msg00048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites."
      }, {
        "lang" : "es",
        "value" : "GNOME Web (Epiphany) versión 3.23 anterior a 3.23.5, versión 3.22 anterior a 3.22.6, versión 3.20 anterior a 3.20.7, versión 3.18 anterior a 3.18.11, y versiones anteriores, es vulnerable a un ataque de barrido del administrador de contraseñas resultando en la exfiltración remota de contraseñas almacenadas para un conjunto seleccionado de sitios web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDFB818-6C5C-4096-A876-17BA2A2F1C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE98221C-CD91-43D0-9F18-3A2AB74865ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C60BA75-B5CF-4864-96EA-33DF903C7997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA67A36C-BA89-4D72-9633-AE95B54F7402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6362D-2572-4691-914F-11D01EFDD0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A58E111-8E3B-4AAA-8825-CB89512ACCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B538B-1452-4638-91A5-44015B0E6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA37FA4-F067-43F0-A6DD-16ED0255671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08CFDA8-97C8-440A-BEC3-7BB103608209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD807F01-2B8E-4F4D-A81E-ADEB644A5B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB40BC93-019C-447D-817A-9977D098D68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2A94B0-327B-42CC-94D9-6BC6B141D67D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0249CD-8AB6-4814-B9A1-DE680718B90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1475432C-00CC-4BD1-B295-5A434E72BAB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768FD6B-DA9B-468C-9C87-F926BC18C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D79A35-C832-4371-8788-E0921E027CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4411AC7-0E85-447D-BBB7-F75B4922D003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F51FCF-9DA1-4ACF-98E5-3C34B07EAF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7336B3AC-D83A-420B-A56D-1EBEEE50DF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96867303-0A09-4805-9563-6A18E4858CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB7A05C-0B4A-4773-A38D-6CA938656F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E879BF18-0776-453B-B35A-4923A3B2B4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21ADBDBE-A7BE-4024-AE2F-395347711A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C7C2B5-3840-4CCC-A0C3-A286DF40B8C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9831291F-547B-41D6-B72C-A78CFBDA4F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5BE4E2-BE52-4C1A-866D-A8E867D13A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14AE530-369D-480F-84A7-4D4ECF3F2590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0808E0-2536-49A2-811E-07E9145F967E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107F5D77-36CE-4BAE-B4D2-9D92A373869A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3304E4-7AC0-4482-9479-683055FBD4D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:3.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D9C9BF-B685-4C9E-A038-2252C6621D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=752738",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/silver",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=752738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/silver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using \"..\" in tar archive entries"
      }, {
        "lang" : "es",
        "value" : "Las versiones 0.3.0 y anteriores del archivo mixlib de Chef Software, son vulnerables a un ataque de salto de directorio que permite a los atacantes sobrescribir archivos arbitrarios utilizando \"..\" en las entradas de archivo tar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:mixlib-archive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.0",
            "matchCriteriaId" : "8C19D9AB-7E4D-4F65-9F76-45FD3B5F51FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chef/mixlib-archive/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chef/mixlib-archive/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access."
      }, {
        "lang" : "es",
        "value" : "Las versiones 8.x, 9.x, 10.x de Koozali Foundation SME Server, son susceptibles a una vulnerabilidad de redireccionamiento URL abierto en la función user web login, resultando en un acceso no autorizado a la cuenta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koozali:sme_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6786B7-D62B-4BC0-BDA8-F2C2E830492C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koozali:sme_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B204F03-3150-46B7-88F5-746E85A47DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koozali:sme_server:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B9C2DA-9907-4378-9E44-3013A21A282F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koozali:sme_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26F0530-608D-4F2D-BEF2-67C0FF0BA5F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://forums.contribs.org/index.php/topic%2C52838.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://forums.contribs.org/index.php/topic%2C52838.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "Oracle, GlassFish Server Open Source Edition versión 4.1 es vulnerable a directorios identificados y no autorizados, que puede operarse emitiendo una petición GET de HTTP especialmente creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:4.1:*:*:*:open_source:*:*:*",
            "matchCriteriaId" : "A0A03921-CEC1-4EC5-9560-6783085AE1C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/45196/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45198/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45196/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45198/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication."
      }, {
        "lang" : "es",
        "value" : "Oracle, GlassFish Server Open Source Edition versión 3.0.1 (build 22), es susceptible a la vulnerabilidad de Inclusión de Archivos Locales, que hace posible incluir archivos arbitrarios en el servidor, esta vulnerabilidad puede ser explotada sin ninguna autenticación previa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:open_source:*:*:*",
            "matchCriteriaId" : "6DF8A9EA-D8BF-4B3A-B7E4-431FE726081D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface."
      }, {
        "lang" : "es",
        "value" : "Oracle, GlassFish Server Open Source Edition versión 3.0.1 (build 22), es susceptible a la vulnerabilidad de divulgación de contraseña de Key Store de Java, lo que hace posible proporcionar al atacante no autenticado una contraseña de texto plano de usuario administrativo y conceder acceso a la interfaz de administración basada en web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:open_source:*:*:*",
            "matchCriteriaId" : "6DF8A9EA-D8BF-4B3A-B7E4-431FE726081D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in graph_templates_inputs.php in Cacti 0.8.8b allows remote attackers to execute arbitrary SQL commands via the graph_template_input_id and graph_template_id parameters."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el archivo graph_templates_inputs.php en Cacti versión 0.8.8b, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio de los parámetros graph_template_input_id y graph_template_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C92A47-E876-481D-83DB-0B547F0C101E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/?fid=7789",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/?fid=7789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:16.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parent_id parameter to tree.php and drp_action parameter to data_sources.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site scripting (XSS) en cactus versión 0.8.8b, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro parent_id en archivo tree.php y parámetro drp_action en archivo data_sources.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C92A47-E876-481D-83DB-0B547F0C101E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user."
      }, {
        "lang" : "es",
        "value" : "Wordpress Plugin Vospari Forms versión anterior a 1.4, es vulnerable a un ataque de tipo cross site scripting reflejado en la entrega de formulario resultando en la ejecución de código javascript en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vospari_forms_project:vospari_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "02A79E66-F8A8-4798-8CD4-D94A6652E5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cjc.im/advisories/0007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8862",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cjc.im/advisories/0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem."
      }, {
        "lang" : "es",
        "value" : "En Akka versiones anteriores e incluyendo a 2.4.16 y 2.5-M1, son vulnerables a un ataque de deserialización java en el componente Remoting, resultando en la ejecución de código remota en el contexto del ActorSystem."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akka:akka:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.16",
            "matchCriteriaId" : "ECE16545-E8EE-43C4-BB5D-2921C598041A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akka:akka:2.5:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "F07FAEAF-CB5D-46C1-BC32-1C5C7A175377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack"
      }, {
        "lang" : "es",
        "value" : "Tiny Tiny RSS en versiones anteriores a la 829d478f es vulnerable a Cross-Site Scripting (XSS) window.opener attack."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tt-rss:tiny_tiny_rss:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4EF876-BD58-457A-92FE-5D8E0CE4DB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.tt-rss.org/git/tt-rss/commit/829d478f1b054c8ce1eeb4f15170dc4a1abb3e47",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.tt-rss.org/git/tt-rss/commit/829d478f1b054c8ce1eeb4f15170dc4a1abb3e47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.110",
      "lastModified" : "2023-11-07T02:37:53.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RVM automatically loads environment variables from files in $PWD resulting in command execution RVM vulnerable to command injection when automatically loading environment variables from files in $PWD RVM automatically executes hooks located in $PWD resulting in code execution RVM automatically installs gems as specified by files in $PWD resulting in code execution RVM automatically does \"bundle install\" on a Gemfile specified by .versions.conf in $PWD resulting in code execution"
      }, {
        "lang" : "es",
        "value" : "RVM carga automáticamente las variables de entorno de archivos en $PWD, resultando en una ejecución del comando RVM vulnerable a la inyección de comandos cuando las variables de entorno se cargan automáticamente de archivos en $PWD. RVM ejecuta automáticamente los hooks ubicados en $PWD, resultando en la ejecución del código. RVM instala automáticamente las gemas según lo especifican los archivos en $PWD resultando en la ejecución del código RVM haciendo automáticamente la \"bundle install\" en un Gemfile especificado por .versions.conf en $PWD resultando en la ejecución del código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rvm_project:rvm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.28.0",
            "matchCriteriaId" : "B4933467-7525-4AFB-AC8D-803DEFDC25A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/justinsteven/advisories/blob/master/2017_rvm_cd_command_execution.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/justinsteven/advisories/blob/master/2017_rvm_cd_command_execution.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site"
      }, {
        "lang" : "es",
        "value" : "WordPress plugin Relevanssi versión 3.5.7.1 es vulnerable a ataques de tipo XSS almacenado, resultando en que un atacante sea capaz de ejecutar JavaScript en el sitio afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:relevanssi:relevanssi:3.5.7.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5AE57E0A-E965-4A04-8E36-CF00C5E01C44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.dxw.com/advisories/stored-xss-in-relevanssi-could-allow-an-unauthenticated-attacker-to-do-almost-anything-an-admin-can-do/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.dxw.com/advisories/stored-xss-in-relevanssi-could-allow-an-unauthenticated-attacker-to-do-almost-anything-an-admin-can-do/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution"
      }, {
        "lang" : "es",
        "value" : "Framadate versión 1.0, es vulnerable a la Inyección de Formula en la Exportación CSV, resultando en una posible Divulgación de Información y la Ejecución del Código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:framasoft:framadate:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7A7638-B508-49DA-8854-ADDB09EA2A1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://framagit.org/framasoft/framadate/issues/220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://framagit.org/framasoft/framadate/issues/220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name."
      }, {
        "lang" : "es",
        "value" : "MapBox.js versiones 1.x anterior a 1.6.5 y 2.x anterior a 2.1.7, son vulnerables a un ataque de tipo cross-site-scripting en ciertos escenarios de uso poco común por medio del Nombre TileJSON."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40307D63-7A34-4DE5-B430-E3A852C294F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB7D25D-5D2C-4F31-9E46-D2B0A70DB037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCF75C8-C0E5-4AF9-8E9D-AE192BB1B31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF791189-CE77-4DD1-B5FD-76104350970E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BD602D-1B8F-448C-B58C-7A4CD7E0CDC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1C07C1-EDE8-443F-B617-3780CB752FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACE6A2C-2A49-46DA-8F12-5035129F4034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F94F01-7399-4AEA-AE0D-4B77A5E3204E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881D738-9506-4FC4-B0C2-31BF1E82D402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2602CFC-766A-46F8-86F9-A6473C32DF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EA98E2-41BC-45A9-9744-7849698CC764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39960AA9-0985-410F-923B-ADBDC09EA20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD04839-1097-431B-A85E-01946F8A622B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE413D9-5813-405F-B103-897D3358C0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BDAE50-CE6D-484F-A655-8D304454A930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97CA4336-4CE0-4CC5-8D8A-AC5AF2903CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D0E904-3518-4DFB-B0AB-5F0452F60A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "B6BF803C-E4C3-4E7E-B044-89B33E1A317A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3183A472-8AB8-47FC-B492-73B790AD22D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D1A107-D943-4515-AE2A-07FA932FA3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.2:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA197AB-DC6C-4475-BE38-4F1DBF3B5B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71636B4D-7ED4-4788-94E9-DF3C7A7FC038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA17348F-8E8E-43AD-97C8-8A3F04579E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.0.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7BC62D-59E5-486A-8626-B11833CD3A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D7CF6-645D-45F4-BBAA-8EDDACBBF897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABDB22A-08CB-436B-809E-F63FC0EAB513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7751BFA9-54F3-4C8F-926C-48CD9B1F3FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757F1A8F-5009-4EBE-AFE5-87D0DFB891AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC8F23E-3D85-4217-AF48-2401EFB4EDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6266E7EC-749F-44C8-9E15-9C010B7C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A34984-5FDA-440F-80DF-8140FE774DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCA0849-F91C-45E3-89FA-06233CBC534C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox_project:mapbox:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B28313-AE76-4466-85B8-593687202D8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/54327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/49",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/54327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control"
      }, {
        "lang" : "es",
        "value" : "MapBox.js versiones 1.x anterior a 1.6.6 y 2.x anterior a 2.2.4, son vulnerables a un ataque de tipo cross-site-scripting en ciertos escenarios de uso poco común por medio del nombre TileJSON y  el control de mapa compartido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox:mapbox.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.6.6",
            "matchCriteriaId" : "879E7F84-EBE0-4EED-B4E1-508122CE45D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapbox:mapbox.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.4",
            "matchCriteriaId" : "E0CE734D-C6D7-4676-9533-1CB59A67F586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/99245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/99245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering"
      }, {
        "lang" : "es",
        "value" : "En gtk-vnc versión 0.4.2 y anteriores, no comprueban correctamente los límites del framebuffer cuando se actualiza el framebuffer, lo que puede conllevar a una corrupción  de memoria al renderizar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gtk-vnc:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC1E2EB-A000-42CC-BF7D-41BE47F64A63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.gnome.org/browse/gtk-vnc/commit/?id=f3fc5e57a78d4be9872f1394f697b9929873a737",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/gtk-vnc/commit/?id=f3fc5e57a78d4be9872f1394f697b9929873a737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.360",
      "lastModified" : "2023-11-07T02:37:53.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mautic 2.6.1 and earlier fails to set flags on session cookies"
      }, {
        "lang" : "es",
        "value" : "En Mautic versión 2.6.1 y anteriores, se presenta un fallo al ajustar las flags en las cookies de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "E09F6CCE-9E00-44B8-8E93-83CC45862B7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustmatta.com/advisories/MATTA-2017-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.trustmatta.com/advisories/MATTA-2017-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code execution"
      }, {
        "lang" : "es",
        "value" : "En rbenv (todas las versiones actuales) es vulnerable a salto de directorio en la especificación de la versión Ruby, resultando en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rbenv_project:rbenv:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3935389-BF7F-46DF-A09B-A553F93F1B39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/justinsteven/advisories/blob/master/2017_rbenv_ruby_version_directory_traversal.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/justinsteven/advisories/blob/master/2017_rbenv_ruby_version_directory_traversal.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash."
      }, {
        "lang" : "es",
        "value" : "El framework web utilizando el módulo qs anterior a las versiones v6.3.2, v6.2.3, v6.1.2 y v6.0.4 de ljharb, es vulnerable a una DoS. Un usuario malicioso puede enviar una petición malintencionada para causar un bloqueo del framework web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59D4E83-E0E4-4FDA-BD67-8FEFB3F8FEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F84B0A5-FD8E-4747-A020-FDA4D988BF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69152D81-88C4-4B56-8555-FA2CB81F9AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D653824-83C9-4C88-8303-D06C90F466AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2F55BE-E78A-41B2-B9CC-F24DE9103B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432764B3-0CB0-4DEA-B5F7-4F3329C5532E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D89D437-D47D-4873-BCB4-EF8C78B1884C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000EE50-8D9F-41E6-9578-0820BE32F71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00E24A-8796-4079-8EC8-C5BEB3594155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E099ED-791E-4B91-A99D-FE44AF2D3440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E2A2A3-8C15-4C76-8180-9E980572FBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC748F7-4CC5-458B-8C45-EB9BF31761BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42999B0-A8A4-4828-AD0E-6B0B0401242A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7FE03A-DBC3-471C-936B-7F0E3F34508C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A934D909-0AF8-4A8D-BC87-60D1F5B0577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D579FA-0476-45F1-87C6-EE2460A4C27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D159120-E1A8-4518-BD9B-79AA38696BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61C7B6F-6BB6-4BE0-8E4C-F0593663CD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3B8E1D-42C1-4304-86A3-9A81A4FB1250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1E93EC-C59F-40C1-B021-B85C3D64CE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DEF8FD-89AA-460B-A6D3-91F9192444E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EC3EC4-84BF-4402-A061-FE70116C75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274DBBC9-B229-4F8C-A0AC-E335067701E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7DE2A2-3323-4F3D-9B0C-E03E875707EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D4B584-D55E-4C49-8E70-7DB1824004E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E62FFB-D768-48F0-BEDF-30DB5EB63BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD4139-7BA5-4203-B9C1-1B6B7C5C7B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A65518C-CF38-4789-A3C4-3BB8035C34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CA554E-825F-461B-85AA-511B6D67D61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AC05C0-73B5-4F5D-B184-E528EB2823F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ljharb/qs/issues/200",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ljharb/qs/issues/200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.500",
      "lastModified" : "2023-11-07T02:37:53.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-8864.  Reason: This candidate is a reservation duplicate of CVE-2015-8864.  Notes: All CVE users should reference CVE-2015-8864 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service."
      }, {
        "lang" : "es",
        "value" : "JasPer versión 2.0.12 es vulnerable a una excepción de puntero NULL en la función jp2_encode que falló al comprobar si la imagen contenía al menos un componente resultando en una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96595",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3505",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3693-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/03/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3693-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting (XSS) en la exportación pad en XWiki labs CryptPad anterior a la versión 1.1.1, permite a atacantes remotos inyectar script web o HTML arbitrario por medio del contenido del pad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:cryptpad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "7ADAB99F-835F-4DA0-8648-27D6001D1BC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.cryptpad.fr/2017/03/06/Security-growing-pains/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xwiki-labs/cryptpad/releases/tag/1.1.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.cryptpad.fr/2017/03/06/Security-growing-pains/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xwiki-labs/cryptpad/releases/tag/1.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions."
      }, {
        "lang" : "es",
        "value" : "En Elixir Plug anterior a las versiones v1.0.4, v1.1.7 y v1.2.3 v1.3.2 es vulnerable a la inyección del byte null en el componente Plug.Static, lo que puede permitir a los usuarios omitir las restricciones filetype."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "38329BE4-C3B3-43CA-9CC6-2D41718ED7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.1.7",
            "matchCriteriaId" : "C92340CB-1162-45CB-B1C1-713A96769FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "AE86EF47-8104-4DEA-93C8-CA1A04B08F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "10EBA90B-A064-4671-991E-911BE237D7C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://elixirforum.com/t/security-releases-for-plug/3913",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://elixirforum.com/t/security-releases-for-plug/3913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session."
      }, {
        "lang" : "es",
        "value" : "En Elixir Plug anterior a las versiones v1.0.4, v1.1.7 y v1.2.3 v1.3.2 es vulnerable a la ejecución de código arbitrario en las funciones de deserialización del componente Plug.Session."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "38329BE4-C3B3-43CA-9CC6-2D41718ED7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.1.7",
            "matchCriteriaId" : "C92340CB-1162-45CB-B1C1-713A96769FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "AE86EF47-8104-4DEA-93C8-CA1A04B08F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plug_project:plug:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "10EBA90B-A064-4671-991E-911BE237D7C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://elixirforum.com/t/security-releases-for-plug/3913",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://elixirforum.com/t/security-releases-for-plug/3913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages."
      }, {
        "lang" : "es",
        "value" : "En Rocket.Chat versión 0.8.0 y más recientes, es vulnerable a ataques de tipo Cross-Site Scripting (XSS) en el enlace markdown al analizar código  para los mensajes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF613F17-D4DA-47C2-92B9-A03762409266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1F5D57-8DE5-4007-BB4B-BCF7712704E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA12B02-8256-478E-8979-085033689C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A13209C-A0DE-4933-8F75-E5E552B0D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09462FD-7DA0-4F39-8CE4-83FE4CDDC56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3CB778-9518-4BE2-A7DF-E31CADF72D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDB79A5-D83C-4F17-BD74-5CF7EF394FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFB2D52-5E32-4962-B999-FD878D3EACDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E057DD1-5A2C-48D7-B0EE-610AFEC5D977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A405C9F-A862-4A65-820B-5464501C14B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4136EB-315F-42C9-BBFB-CABC9D6BC4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9F418B-9BF7-43D5-A971-0DF847DF7277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605DE665-18E6-4E77-9E21-6ACE13715747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E51EDED-8576-4D30-A65B-5B6570E09902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6002C4-B504-4734-8991-ACCC98004322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD2FFFD-8CAF-4EEB-A8C1-F91E6D6FBA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4292722-2628-40A8-AB1F-B9651561BF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B1C015-BB14-4FF7-920A-95FD19791EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6398A7AA-31F4-4F3E-A9BC-192A7BAF1290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A97AD43-7079-450A-B63A-047D969F0FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5017E5-E028-4C41-87EE-D7E4253DD75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F782A-4CF6-4DE2-92A2-402CABEBA855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F9A7ED-C75F-4E73-8ACE-5A1CFD08576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0FD7DD-6957-4DED-B454-A2C8097E21EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019CCA80-45D0-4583-9ED5-1226E6A599C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CDC0BF-EDEC-4791-8044-2ADB6F55F16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFC2DE9-0173-4832-B70C-935CF76C9246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3620536-7C42-404C-B700-54ACA911C322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43928E9D-27A9-4885-8674-C96F71A7C6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E215C8-8F24-4C3A-9A87-171D193399F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B297B25-8EA9-4F71-A95D-2881C013F687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D4D2A8-3F4D-4BC0-8207-7FDDB03234D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E40487-EED3-4E63-AC5B-21A20150E5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E6B455-7374-428C-9A8C-1396E030A69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E024BC91-C485-4AF7-A493-7E45C6C041A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.38.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E694FC-CED3-4CA7-B61A-A57BFED5D94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9A3A69-DB5E-4A56-91ED-58F74FFD39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.40.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787BEB5F-FEC7-4389-8E78-91919651B6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.41.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD3A6BD-11D5-41E5-923A-894128E29A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.42.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6717EB-C447-4E9E-922B-ACFF6353EA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.43.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AEEC3F-A07C-4065-BAD8-F15F7A4D245C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.44.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BE169-F602-4D09-A53A-B617F3AF877A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969032CA-69E2-4B56-A5DC-090998B64153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.46.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DB4DF8-43CF-4710-86BB-083FF4619534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0409F829-EB84-4BC3-8519-51AAFE48481C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.47.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFFD3CE-38CE-4B69-9A93-B6F8E5394CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4529DFF4-B595-47AE-8F93-7A67768A82F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.48.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A5476F-3574-402A-8551-70955324A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.48.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F983EFB8-9BDA-44AD-9D19-45F232FEAC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DBF1925-706F-4661-9E7C-04E762419F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.49.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C84C49-DE87-4879-ABD3-A788987A1E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.49.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5794EBDF-878A-426E-B3DC-4A5CBD3DCE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5915B364-0146-49FC-8708-06EE99800CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.49.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B162B88-927D-4761-90E2-51869ABAFABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA45689-7905-45CF-A71B-13CF4A609E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.50.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828FC0D7-D7DC-4A55-B32D-D0D60E3E5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.51.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D4CC11-F44F-42CA-B78F-FC96F4936456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191F4459-A96C-4376-96AE-6EF14E09AB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606DD15D-9973-4B5A-845C-5264CC9FC28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50085232-AA00-4213-B662-7D8B7B488E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.54.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7B5363-2506-4712-B8FC-B8AB91A9FA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.54.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB9F77E-72E1-44C2-9DB3-AE3450B20F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.55.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452815AF-AF46-4B34-8005-2EF3E0DE10A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.55.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04CA793-BA74-439D-994A-AB81EBFB283E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.56.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11D2B2F-4948-4D31-A484-422985115575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D448E0E-2F92-4B30-A127-53A3A8ED0A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F6F05B-B0C9-4DAD-B848-F1B577B360B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1263E3-91BF-4038-8E70-725CB2BEF646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F71F660-9087-40F4-A656-50E18EDC0BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1F8BF1-64BC-44DB-AE75-5BDF29F30F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D984700-ED1F-4C03-81D7-E59EE51E5825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketchat:rocket.chat:0.57.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F4A695-0C1D-4E21-8137-29B85760DD04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.theblazehen.com/posts/CVE-2017-xxxxxx-rocketchat-xss-with-markdown-url-handling-in-messages/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "URL Repurposed" ]
      }, {
        "url" : "https://www.theblazehen.com/posts/CVE-2017-xxxxxx-rocketchat-xss-with-markdown-url-handling-in-messages/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.703",
      "lastModified" : "2023-11-07T02:37:53.710",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object."
      }, {
        "lang" : "es",
        "value" : "En Kubernetes versión 1.5.0 hasta 1.5.4, es vulnerable a una escalada de privilegios en el plugin admission de PodSecurityPolicy, resultando en la capacidad de hacer uso de cualquier objeto PodSecurityPolicy existente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5AF640-0C20-48D5-A418-83E14935E8A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05445BA-4E94-44D8-91BC-72F889D30D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4CEFFE-B8F0-4F03-A6B5-3F2A7BE57AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A9AF70-ACD4-4357-A096-6ABC02A185A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F527925-3B46-45BD-8A1A-EF52E62E9CA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/43459",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubernetes/kubernetes/issues/43459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.780",
      "lastModified" : "2023-11-07T02:37:53.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de tipo XSS almacenado en chevereto CMS anterior a la versión 3.8.11, uno en el perfil de usuario y otro en el analizador de datos Exif."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chevereto:chevereto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.10",
            "matchCriteriaId" : "A68ECBB2-8F2C-4F57-BF60-606829341962"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chevereto.com/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://chevereto.com/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users."
      }, {
        "lang" : "es",
        "value" : "En Live Helper Chat versión 2.06v y anteriores, es vulnerable a un problema de tipo Cross-Site Scripting en el manejador del encabezado HTTP resultando en la ejecución de cualquier código Javascript provisto por el usuario en la sesión de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livehelperchat:live_helper_chat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.06",
            "matchCriteriaId" : "B2D248B4-1BD2-4078-8E6C-EA0BDE5F47C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.compass-security.com/research/advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/research/advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root"
      }, {
        "lang" : "es",
        "value" : "En EyesOfNetwork (EON) versión 5.1, una inyection SQL no autenticada en eonweb conlleva a un root remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rioru.github.io/pentest/web/2017/03/28/from-unauthenticated-to-root-supervision.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rioru.github.io/pentest/web/2017/03/28/from-unauthenticated-to-root-supervision.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service"
      }, {
        "lang" : "es",
        "value" : "En xmlsec versión 1.2.23 y anteriores, son vulnerables a un problema de tipo  XML External Entity Expansion mientras se analizan documentos de entrada creados, resultando en una posible divulgación de información o denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsec_project:xmlsec:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.23",
            "matchCriteriaId" : "028F68AA-1521-4D93-B3C7-98D71FCB840F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/lsh123/xmlsec/issues/43",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PWHBRWXR3RNPHDSTQI6UWDG5ETOQ7VR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/lsh123/xmlsec/issues/43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PWHBRWXR3RNPHDSTQI6UWDG5ETOQ7VR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution"
      }, {
        "lang" : "es",
        "value" : "kittoframework kitto versión 0.5.1, es vulnerable a salto de directorio en el enrutador resultando en la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitto_project:kitto:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273A07DB-066C-46FE-B5F7-0351F827C732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:17.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure"
      }, {
        "lang" : "es",
        "value" : "En kittoframework kitto versión 0.5.1, es vulnerable a un problema de tipo Cross-Site Scripting (XSS) en la página 404, resultando en la divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitto_project:kitto:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273A07DB-066C-46FE-B5F7-0351F827C732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS"
      }, {
        "lang" : "es",
        "value" : "En kittoframework kitto versión 0.5.1, es vulnerable al agotamiento de la memoria en el enrutador resultando en una DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitto_project:kitto:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273A07DB-066C-46FE-B5F7-0351F827C732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management(Users) functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo Cross-site scripting (XSS) en el archivo rpc.php en OpenMediaVault versión 2.1, en la funcionalidad Access Rights Management(Users), permite a los atacantes inyectar scripts web arbitraria y ejecutar scripts maliciosos dentro del navegador de un cliente autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmediavault:openmediavault:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BC1C2A-39C3-4D07-8BA9-BB0EB0E708EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openmediavault/openmediavault/commit/b2db1e24d0e52b961b5c3b3329b6ee717cac53a2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openmediavault/openmediavault/commit/b2db1e24d0e52b961b5c3b3329b6ee717cac53a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information."
      }, {
        "lang" : "es",
        "value" : "La función entry details view en KeePass versión 1.32, desencripta inadvertidamente ciertas entradas de base de datos en la memoria, resultando en la divulgación de información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keepass:keepass:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CD0B72-2D31-449F-A23E-BC092DF86563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://keepass.info/news/news_all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://keepass.info/news/news_all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges."
      }, {
        "lang" : "es",
        "value" : "MODX Revolution versión 2.x hasta 2.5.6, es vulnerable a inyección SQL ciega causada por un saneamiento inapropiado mediante el método de escape, resultando en que un usuario autenticado acceda a la base de datos y posiblemente escale privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC01BEC-3376-4C94-9DCA-2C82DE75E810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E13093C8-6D9D-4542-A6AF-2C9FFA59BC0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F5C6A-33DC-41F2-ACDD-B7358024F9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC561AA-5730-4D15-88BC-2BAA99FEDD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F00392B-6B2E-455C-AD3C-97D2C8692300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB19DC1E-477B-4CB2-88AE-7B693701AB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD8E758-588B-4706-B4DA-097009C9829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6079B90E-A472-4286-920F-312C003F3BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.1:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "CA68C845-CCE6-4036-8DA5-E451F0912943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4D2D85-9A84-456B-9970-0DFB43360F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C400F-97FC-4BDA-B583-8E587BD44C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC9C96-2F59-4C70-844A-C96BF85ED4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C085106-26AF-4F3B-A649-84D60687B25D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDDBE7-77A0-4552-AA01-4D7DD502D731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA997F7B-23CB-4215-9FDB-441E75C1565E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFFDFC0-268C-435D-9A6D-CF96D33F5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC36839A-2A85-450C-A7E6-C0D5374832EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591447-499C-4C97-8436-845F2A9006EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1153BA-7050-40E1-90C9-75071114F153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997C5948-45E2-4BB6-B12C-EDA839015EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50905CD0-B72A-4AB6-ADA9-1C7353D14917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB51ED9-9683-42A8-ABB6-CC21521DA808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745972A9-B150-4462-872A-3085E35D929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09F11AE-7719-48ED-BC11-03A7F5DA3A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CCC7E4-D602-473D-A944-6869747052E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B57252-10D4-4D0B-B70D-3D138B2D4249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC26BED-7BF3-4D3D-BCFA-497C8DCAF658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32772FEB-430E-4F96-8B5F-6C786BE3D7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DB2AA8-3569-42BA-94D6-CEA59916A3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0501306-7E8F-4AB1-9179-247B0C4B7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD0D4D8-FC21-40B8-A5D3-454B864FA0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "744C0B94-7F15-4C35-9A1C-81A65F45D35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382F6AFC-7338-4133-B233-DE1D093340F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F328ADB0-F1C0-46F5-9F87-8EB72B285330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C40375-1110-4EEB-8120-74D1D23C137F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB7E380-740A-4B2A-8186-CDD2835D65D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:revolution:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE616B3E-1B31-4191-A041-CE4E900A3F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modxcms/revolution/blob/9bf1c6cf7bdc12190b404f93ce7798b39c07bc59/core/xpdo/changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/blob/9bf1c6cf7bdc12190b404f93ce7798b39c07bc59/core/xpdo/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.0 y anteriores de TestTrack Server, son vulnerables a un fallo de autenticación en la función split disablement resultando en la capacidad de deshabilitar divisiones en ejecución arbitrarias y causar la denegación de servicio a los clientes en el campo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betterment:testtrack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FAC85053-71CF-42D1-9AAE-559D6A0DC627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Betterment/test_track/releases/tag/v1.0.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Betterment/test_track/releases/tag/v1.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF in Bitly oauth2_proxy 2.1 during authentication flow"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF)  en Bitly oauth2_proxy versión 2.1 durante el flujo de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oauth2_proxy_project:oauth2_proxy:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF290E4-1AD1-4660-B3D1-BBDB5CAF0E56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bitly/oauth2_proxy/pull/360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitly/oauth2_proxy/pull/360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819"
      }, {
        "lang" : "es",
        "value" : "La versión 2.1 y anteriores de Bitly oauth2_proxy  fue afectada por una vulnerabilidad de redireccionamiento abierto durante el inicio y la terminación del flujo 2-legged OAuth. Este problema fue causado por una comprobación de entrada inapropiada y una violación de RFC-6819."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oauth2_proxy_project:oauth2_proxy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "2FF44E49-835E-45EC-8A53-AE94DD462A4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bitly/oauth2_proxy/pull/359",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.ietf.org/html/rfc6819#section-5.2.3.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/bitly/oauth2_proxy/pull/359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.ietf.org/html/rfc6819#section-5.2.3.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server."
      }, {
        "lang" : "es",
        "value" : "Jasig phpCAS versión 1.3.4, es vulnerable a una omisión de autenticación en la función validateCAS20 cuando se configura para autenticarse en un antiguo servidor CAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apereo:phpcas:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64DC472-F459-43CB-8714-2279E2B1D3F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99609",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Jasig/phpCAS/issues/228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Jasig/phpCAS/issues/228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modification of unexpected memory locations"
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity versión 1.0, es susceptible a una problema de doble liberación (Double Free) en la función gravity_value lo que potencialmente conlleva a la modificación de ubicaciones de memoria inesperadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/123",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity versión 1.0, es vulnerable a un desbordamiento de pila en un componente no revelado lo que puede resultar en la ejecución  de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function."
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity versión 1.0, es vulnerable a un desbordamiento de pila en la función string_repeat()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function"
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity versión 1.0, es vulnerable a un desbordamiento de pila en la función memcmp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/133",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration"
      }, {
        "lang" : "es",
        "value" : "Linux foundation ONOS versión 1.9, es vulnerable a XSS en el Registro del Dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A51ADFD-8C5C-44BC-9BE0-869D0A68BCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD116BB-602C-4A86-97D1-58C0875B6AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux foundation ONOS 1.9.0 is vulnerable to a DoS."
      }, {
        "lang" : "es",
        "value" : "Linux foundation ONOS versión 1.9.0, es vulnerable a una DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A51ADFD-8C5C-44BC-9BE0-869D0A68BCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD116BB-602C-4A86-97D1-58C0875B6AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets."
      }, {
        "lang" : "es",
        "value" : "Linux foundation ONOS versión 1.9.0, permite el uso no autenticado de websockets."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A51ADFD-8C5C-44BC-9BE0-869D0A68BCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD116BB-602C-4A86-97D1-58C0875B6AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "Linux foundation ONOS versión 1.9.0, es vulnerable a la carga no autenticada de aplicaciones (.oar) resultando en la ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A51ADFD-8C5C-44BC-9BE0-869D0A68BCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD116BB-602C-4A86-97D1-58C0875B6AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.onosproject.org/display/ONOS/Security+advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the backup directory, if present. Upgrading from before 1.498 will no longer create a backup directory. Administrators relying on file access permissions in their manually created backups are advised to check them for the directory $JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups, and delete it if present."
      }, {
        "lang" : "es",
        "value" : "El monitor de administración re-key fue introducido en Jenkins versión 1.498 y se han cifrado nuevamente todos los secretos en JENKINS_HOME con una nueva clave. También se creó un directorio de copia de seguridad con todos los secretos antiguos y la clave utilizada para cifrarlos. Estas copias de seguridad eran legibles por todos y no se eliminaron después. Jenkins ahora elimina el directorio de copia de seguridad, si está presente. La actualización anterior a la versión 1.498 ya no creará un directorio de copia de seguridad. Se aconseja a los administradores que dependen de los permisos de acceso de archivo en sus copias de seguridad creadas manualmente que los consulten en el directorio $JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups y eliminarlos si están presentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.498",
            "matchCriteriaId" : "241796B2-9B50-4A67-B091-2D55B1F5F1FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:18.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line."
      }, {
        "lang" : "es",
        "value" : "Una escritura fuera de límites en el archivo drivers/char/lp.c de Linux, Debido a la falta de comprobación de límites, y al hecho de que el entero parport_ptr es estático, un adversario de línea de comando del kernel \"secure boot\" (puede ocurrir debido a vulnerabilidades del cargador de arranque, por ejemplo, CVE-2016-10277 de Google Nexus 6, donde debido a una vulnerabilidad el adversario tiene control parcial sobre la línea de comando) puede desbordar la matriz parport_nr en el siguiente código, mediante la incorporación muchos argumentos (mayor que LP_NO) 'lp=none' hacia la línea de comando."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12",
            "versionEndExcluding" : "3.2.91",
            "matchCriteriaId" : "F0B73773-84BE-4606-995B-8D6E4E662B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.106",
            "matchCriteriaId" : "3116EF11-56E7-4D40-9FD0-6109280D0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.46",
            "matchCriteriaId" : "B74022CD-4A80-418C-82C6-E903D5F3A944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.55",
            "matchCriteriaId" : "92A95C1A-1941-4789-B2F3-687F85106E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.70",
            "matchCriteriaId" : "6B6B892D-2153-4B26-A53A-2757488ABBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.30",
            "matchCriteriaId" : "05FA3C9C-F982-4407-89BC-F8936979C1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.3",
            "matchCriteriaId" : "24D5182D-708B-4C85-9FFA-591A649330A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5098AB-40B1-4110-B2C7-186FD2B92AA9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98651",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017023",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10601",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:18.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configuration precondition to occur. Typically, device configurations are the result of a trusted administrative change to the system's running configuration. The following error messages may be seen when this failure occurs: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. If the administrative changes are not made that result in such a failure, then this issue is not seen. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 prior to 13.3R7; 14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6; 14.1X53 prior to 14.1X53-D30; 14.2 prior to 14.2R4; 15.1 prior to 15.1F2, 15.1F3, 15.1R2."
      }, {
        "lang" : "es",
        "value" : "Una configuración de dispositivo específica puede resultar en una condición de fallo de confirmación. Cuando esto ocurre, un usuario inicia sesión sin ser solicitada una contraseña mientras intenta iniciar sesión por medio de la consola, ssh, ftp, telnet o su, etc., Este problema se basa en una condición previa de configuración del dispositivo para presentarse. Típicamente, las configuraciones de dispositivo son el resultado de un cambio administrativo de confianza en la configuración en ejecución del sistema. Los siguientes mensajes de error se pueden visualizar cuando éste fallo se presenta: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. Si no se realizan los cambios administrativos que resultan en un fallo, entonces este problema no se visualiza. Ningún otro producto o plataforma de Juniper Networks se ve afectado por este problema. Las versiones afectadas son Juniper Networks Junos OS versión 12.3 anterior a 12.3R10, 12.3R11; versión 12.3X48 anterior a 12.3X48-D20; versión 13.2 anterior a 13.2R8; versión 13.3 anterior a 13.3R7; versión 14.1 anterior a 14.1R4-S12, 14.1R5, 14.1R6; versión 14.1X53 anterior a 14.1X53-D30; versión 14.2 anterior a 14.2R4; versión 15.1 anterior a 15.1F2, 15.1F3, 15.1R2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E014A0D-0054-4EBA-BA1F-035B74BD822F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "960059B5-0701-4B75-AB51-0A430247D9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "05E187F6-BACD-4DD5-B393-B2FE4349053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "3C240840-A6BC-4E3D-A60D-22F08E67E2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC90563F-6BCB-4D77-8FD4-584E3A6C7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD03BA7-D9EC-420F-97C4-383F79D6873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB7D840-9469-4CE2-8DBF-017A44741374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A0A607-7D3C-4F2A-B5F5-576A70649CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "32E9620A-7C0A-474C-919E-13609FFE580D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "672D3A38-92B4-4F33-82A6-B2D3F3403AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C24441-6E9D-4EF7-8903-A109A52340C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB98C4F-617F-4F51-A86E-D1EBE2BDE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A24E3EA6-810D-4885-8BE5-8A70E61E7589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "767182F3-E97B-4E21-8FD5-A50C9F42ED60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8935F46F-084A-473E-94B1-011DA15D52AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D252DA6-1269-42A0-A6DB-070AAC8396B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038902",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10802",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10602",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:18.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with root privileges. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D46 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4-S9, 14.2R6; 15.1 versions prior to 15.1F5, 15.1R3; 15.1X49 versions prior to 15.1X49-D40 on SRX Series; 15.1X53 versions prior to 15.1X53-D47 on NFX150, NFX250; 15.1X53 versions prior to 15.1X53-D65 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la CLI de Junos OS puede permitir que un usuario autenticado local con privilegios de solo lectura y acceso a la CLI de Junos ejecute código con privilegios root. Las versiones afectadas son Juniper Networks Junos OS: versión 14.1X53 y versiones anteriores a 14.1X53-D46 en EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; Versiones 14.1X53 anteriores a 14.1X53-D130 en QFabric System; versión 14.2 y versiones anteriores a 14.2R4-S9, 14.2R6; versión 15.1 y versiones anteriores a 15.1F5, 15.1R3; versión 15.1X49 anteriores a 15.1X49-D40 en la serie SRX; versión 15.1X53 anteriores a 15.1X53-D47 en NFX150, NFX250; versión 15.1X53 anteriores a 15.1X53-D65 en la serie QFX10000; versión 15.1X53 anteriores a 15.1X53-D233 en QFX5110, QFX5200."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8278F453-2364-43DE-A1A7-7538291970FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3F89F2-5CAC-4016-AC55-2B43909F3E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-F643-40B7-B34F-3926151B0DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04595957-476D-4021-9CFA-CA51BA294E56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5ED13-F998-447C-8FEA-047FE9FE2F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "65F3CD2A-D5E1-4EFF-9013-6D81B396F765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100323",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "http://www.securitytracker.com/id/1038900",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10803",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10603",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:18.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15.1 prior to 15.1R3. Junos versions prior to 15.1 are not affected. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección XML en la CLI de Junos OS puede permitir que un usuario autenticado localmente eleve privilegios y ejecute comandos arbitrarios como el usuario root. Este problema se detectó durante las pruebas internas de seguridad del producto. Las versiones afectadas son Juniper Networks Junos OS versión 15.1X53 anterior a 15.1X53-D47, versión 15.1 anterior a 15.1R3. Las versiones de Junos anteriores a 15.1 no se ven afectadas. Ningún otro producto o plataforma de Juniper Networks se ve afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5ED13-F998-447C-8FEA-047FE9FE2F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "65F3CD2A-D5E1-4EFF-9013-6D81B396F765"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038901",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10805",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10604",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:18.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, and a cluster sync or failover operation occurs, then there will be errors associated with synch or failover while the root account is locked out. Administrators can confirm if the root account is locked out via the following command root@device> show system login lockout user root User Lockout start Lockout end root 1995-01-01 01:00:01 PDT 1995-11-01 01:31:01 PDT Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D65 on SRX series; 12.3X48 prior to 12.3X48-D45 on SRX series; 15.1X49 prior to 15.1X49-D75 on SRX series."
      }, {
        "lang" : "es",
        "value" : "Cuando el dispositivo está configurado para realizar el bloqueo de la cuenta con un período de tiempo definido, cualquier usuario no autenticado que intente iniciar sesión como root con una contraseña incorrecta puede desencadenar un bloqueo de la cuenta root. Cuando un dispositivo de la serie SRX está en modo clúster y se produce una operación de sincronización o conmutación por error del clúster, entonces habrá errores asociados con la sincronización o la conmutación por error mientras la cuenta root está bloqueada. Los administradores pueden confirmar si la cuenta root está bloqueada por medio del siguiente comando root@device> show system login show system login lockout user root User Lockout start Lockout end root 1995-01-01 01:00:01 PDT 1995-11-01 01:31:01 PDT Las versiones afectadas son Juniper Networks Junos OS versión 12.1X46 anterior a 12.1X46-D65 en la serie SRX; versión 12.3X48 anterior a 12.3X48-D45 en la serie SRX; versión 15.1X49 anterior a 15.1X49-D75 en la serie SRX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91484FF4-F20C-4541-A5D9-128157E4F11D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91484FF4-F20C-4541-A5D9-128157E4F11D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91484FF4-F20C-4541-A5D9-128157E4F11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038886",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10806",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10605",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:18.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the device(s). Repeated crashes of the flowd process may constitute an extended denial of service condition for the device(s). If the device is configured in high-availability, the RG1+ (data-plane) will fail-over to the secondary node. If the device is configured in stand-alone, there will be temporary traffic interruption until the flowd process is restored automatically. Sustained crafted packets may cause the secondary failover node to fail back, or fail completely, potentially halting flowd on both nodes of the cluster or causing flip-flop failovers to occur. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67 on vSRX or SRX Series; 12.3X48 prior to 12.3X48-D50 on vSRX or SRX Series; 15.1X49 prior to 15.1X49-D91, 15.1X49-D100 on vSRX or SRX Series."
      }, {
        "lang" : "es",
        "value" : "En todos los dispositivos de las series vSRX y SRX, cuando es configurado el relé DHCP o DHCP, un paquete especialmente creado puede causar que el proceso flowd bloquee, detenga o interrumpa el tráfico de fluir por medio de los dispositivos. Los bloqueos repetidos del proceso flowd pueden constituir una condición de denegación de servicio extendida para los dispositivos. Si el dispositivo está configurado en alta disponibilidad, el RG1+ (plano de datos) conmutará por error al nodo secundario. Si el dispositivo está configurado de manera independiente, habrá una interrupción temporal del tráfico hasta que el proceso flowd se restaure automáticamente. Los paquetes creados sostenidos pueden causar que el nodo de conmutación por error secundario falle, o falle completamente, lo que puede detener flowd en ambos nodos del clúster o causar que conmutaciones por error flip-flop se presenten. Ningún otro producto o plataforma de Juniper Networks se ve afectado por este problema. Las versiones afectadas son Juniper Networks Junos OS versión 12.1X46 anterior a 12.1X46-D67 en la serie vSRX o SRX; versión 12.3X48 anterior a 12.3X48-D50 en la serie vSRX o SRX; versión 15.1X49 anterior a 15.1X49-D91, 15.1X49-D100 en la serie vSRX o SRX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD32D8A-7531-4691-B45D-9EACC69A23D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "76DFA52F-5B2E-47DA-9A8E-7D17A7413929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038891",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10789",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca soundlib/Load_psm.cpp en OpenMPT hasta la versión 1.26.12.00 y libopenmpt anterior a versión 0.2.8461-beta26, presenta un desbordamiento de búfer en la región heap de la memoria con la posibilidad de ejecución de código arbitraria por medio de un archivo PSM creado que desencadena el uso de la mismo slot de muestra para dos muestras."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmpt:libopenmpt:*:beta25:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.8414",
            "matchCriteriaId" : "8A83BC1F-7409-4C60-8317-6CEB6D8B9F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmpt:openmpt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.26.12.00",
            "matchCriteriaId" : "B0C5379F-2997-4EE7-8FB6-5E4F20D026F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/867579",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lib.openmpt.org/libopenmpt/md_announce-2017-07-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.openmpt.org/browse/openmpt/branches/OpenMPT-1.26/?op=revision&rev=8438",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.openmpt.org/browse/openmpt/trunk/?rev=6800",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/867579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lib.openmpt.org/libopenmpt/md_announce-2017-07-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.openmpt.org/browse/openmpt/branches/OpenMPT-1.26/?op=revision&rev=8438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.openmpt.org/browse/openmpt/trunk/?rev=6800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events."
      }, {
        "lang" : "es",
        "value" : "El cliente Cobian Backup versión 11, permite a atacantes de tipo man-in-the-middle agregar y ejecutar nuevas tareas de copia de seguridad cuando el servidor maestro es suplantado. Además, el atacante puede ejecutar comandos del sistema de remotamente mediante la violación de eventos de copia de seguridad previa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cobiansoft:cobian_backup:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8273C6F-B948-4126-B21F-B9465942C379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/advisories/Tarlogic-2017-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Tarlogic-2017-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer en la región heap de la memoria en la función yr_object_array_set_item() en  el archivo object.c en YARA versión 3.x, permite un ataque de denegación de servicio mediante el análisis de un archivo .NET creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C7D3A4-DA18-425D-B70E-109111B0CB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CEDA9E-B4F5-4307-A709-6978C59760EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA7DF4F-7F7C-4DD9-BA1F-F937A714B745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EF96E-EC1C-4FB8-BD07-1DC26E07BD97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0756F4C-5A99-4C89-BA0E-80D659CA1907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0254F781-4B89-4557-8F17-1F228A3A8216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DC84F8-7570-461D-8804-8A21AB3B59F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E3A197-A986-45AF-B8F7-E344C200A31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1691F0-DF55-4B37-A014-69001356852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virustotal:yara:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6775243E-8D4A-47DD-93F3-A0D1F2BAD582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VirusTotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VirusTotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers."
      }, {
        "lang" : "es",
        "value" : "GLPI anterior a versión 9.1.5, permite la inyección SQL por medio de una petición en el archivo ajax/getDropdownValue.php con un parámetro entity_restrict que no esta en una lista de enteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.4",
            "matchCriteriaId" : "71E7F94F-BB7E-4FA5-A08C-BBA1D4013F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/issues/2456",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/issues/2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related to the ZIPDecode function in tif_zip.c). A crafted input may lead to a remote denial of service attack or an arbitrary code execution attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento de búfer en la región heap de la memoria en el archivo tools/tiff2pdf.c de LibTIFF versión 4.0.8 por medio de una imagen PlanarConfig=Contig, que causa una escritura fuera de límites de más de cien bytes (relacionado con la función ZIPDecode en el archivo tif_zip.c). Una entrada creada puede conllevar a un ataque de denegación de servicio remoto o a un ataque de ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2715",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta una lectura excesiva de búfer en la región heap de la memoria en la función Image::printIFDStructure en el archivo image.cpp en Exiv2 versión 0.26. Una entrada creada conllevará a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470729",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta una liberación no válida en la función Action::TaskFactory::cleanup del archivo actions.cpp en Exiv2 versión 0.26. Una entrada creada conllevará a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470737",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta un bucle infinito en la función Exiv2::Image::printIFDStructure del archivo image.cpp en Exiv2 versión 0.26. Una entrada creada conllevará a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470913",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento de búfer en la región heap de la memoria en la función Image::printIFDStructure del archivo image.cpp en Exiv2 versión 0.26. Una entrada creada conllevará a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470946",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo de segmentación en la función XmpParser::terminate() en Exiv2 versión 0.26, relacionada con una llamada exit. Una entrada creada conllevará a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470950",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta una lectura excesiva del búfer en la región heap de la memoria en el archivo lexer.hpp de LibSass versión 3.4.5. Una entrada creada conducirá a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470714",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta un acceso de dirección ilegal en el archivo ast.cpp de LibSass versión 3.4.5. Una entrada creada conducirá a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in O(n) lookup time."
      }, {
        "lang" : "es",
        "value" : "Debido a una solución incompleta para el CVE-2012-6125, todas las versiones de CHICKEN Scheme hasta 4.12.0 incluyéndola, son vulnerables a un ataque de complejidad algorítmica. Un atacante puede proporcionar una entrada creada que, cuando sea insertada en la tabla de símbolos, resultará en un tiempo de búsqueda O(n)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:call-cc:chicken:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.0",
            "matchCriteriaId" : "A2B09DD8-3AF5-4A49-89E5-8513C3061955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/chicken-announce/2017-07/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/chicken-announce/2017-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response."
      }, {
        "lang" : "es",
        "value" : "Un Desbordamiento de búfer global en networkmap en el firmware Asuswrt-Merlin para dispositivos ASUS y en el firmware ASUS para dispositivos RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 de ASUS, permiten a los atacantes remotos escribir código shell en cualquier dirección de la pila; esto puede ser utilizado para ejecutar código arbitrario en el enrutador mediante el alojamiento de un documento XML creado de descripción de dispositivo en una URL especificada dentro de un encabezado Location en una respuesta SSDP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac5300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "D4D88DAF-DFC0-4272-92E8-92B8B720ABC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85195C1-D431-47A3-B740-84B9E97E6A97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "8EC02A03-C4AA-4A88-A4C5-B28851820640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1900p_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879F2C62-40D6-47C7-B08D-EF394C184141"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "92F02BF7-4804-4088-974A-850BE8753637"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A532686-2867-4960-979B-7B91CB403F56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac68p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "E5976A71-B3A0-41EA-ACCA-FC7DDE42A288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac68p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9024B4-BF99-4002-8550-24DA6BE94013"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "E8A15254-7453-4DF2-9EAC-4D13FD11AF05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3348D32-AA0C-4249-B507-1A46DF5A62F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "4F4FEB77-CD0D-4313-BB03-9DD480A7971C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC93B36-B0B3-4557-812A-042E6ADC3EA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "0BE5C7A7-D210-4CA0-9391-FF1BF640F1AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac66u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F533CF-447F-4BA8-B01E-F6E8290D768C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7485",
            "matchCriteriaId" : "7116534C-8FC3-49C0-8911-F0160FFC6CB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E770C7D6-5403-455F-BCBF-C56E21CBCD40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "C4F02DDE-A0EF-4A07-BEBA-C41E99FDDCE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E7631A-AD48-4AFA-8F7D-E39578F492ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac55u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "858F993B-494F-4CD0-AEEA-9C96505A7460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac55u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883E9C34-65D6-4D2C-9D60-A173575247B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac52u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.4180",
            "matchCriteriaId" : "6CA2E840-7343-40A0-A32D-455E950DAAD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac52u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9DDB3B-0765-4A69-9190-FF132630F291"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac51u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "67A02F10-D8C4-49E1-A6DD-C7E0600F3C49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac51u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91207A19-15F3-476A-8136-08665E10119D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n18u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "B4F031C0-ED90-4470-8DEA-F22CB081C22E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n18u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625C1795-2197-461F-9880-523CEB436B9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n66u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "2FD21108-18FA-4545-8712-0EDD6DA40C12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474CEA6E-1F80-4A10-B750-7F47C94629E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.378.7177",
            "matchCriteriaId" : "EE9EBB70-B4A6-4F9D-A9C7-32620E2D2735"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0C2572-667F-4BDE-B296-1B4210E351FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac3200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "3EDDCCBF-FD1A-4EE1-9B2D-9E11D4417D9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC4D044-4850-465D-B1DA-ED734BCC5277"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac3100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "052CE11F-FF92-452D-8A3A-3651A303F100"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E15ED3-C71D-402D-B879-B4CA5D5B3525"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1200gu_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.5577",
            "matchCriteriaId" : "00F54F3B-C7D0-49C9-B6C0-9AD2EC53C2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1200gu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171DFA-6307-4078-BBB7-4E8EA904131F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1200g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.3167",
            "matchCriteriaId" : "974F507C-A577-424B-A332-CC4EE3442E04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1200g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B6588-9F8F-48B9-9EE0-209BBFE0C9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9880",
            "matchCriteriaId" : "3C9311D4-A79F-4EDD-9442-6D87A1AE4D71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25606A77-1489-4624-8759-20DEC679E5E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac53_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9883",
            "matchCriteriaId" : "49F94A48-EE6E-49F5-A673-229A42967EF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CE8587-6DF9-4AB4-A2D8-F45D52D86419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.2943",
            "matchCriteriaId" : "97E8B7EB-6CCA-4D17-8851-8C762FC9D6C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F166B64F-2A6E-404C-AD3F-337D631043F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.3479",
            "matchCriteriaId" : "3E92F296-E91F-4B61-8D9F-F3CADD8CBB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12hp_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CCFDE4-B93B-4149-BB2F-EC113F316876"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12d1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "5F3394D8-B251-444F-9CCB-2DC4C5F925EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18926678-B568-4B23-8882-877ECB802D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "9C9D353C-C88E-4772-83A4-BA2774D1296D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44800173-189F-45D7-A8D0-0DFF3BA02488"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_n12\\+_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9880",
            "matchCriteriaId" : "3EC8FF40-47DF-4D08-98FF-09A9D51E8220"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_n12\\+_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB403995-31CF-4468-9245-205EF4FE309A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n16_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "4733E9E4-B297-4AF5-AEBA-C87D5E62FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1708CE7D-7096-4846-A143-F248D5F25B15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "00790F60-6870-47AE-B779-B8DF3DF5D2CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F266FCC-AC0C-4802-946E-3E4302E0A834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/14/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:20.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by hosting a crafted device description XML document (that includes a serviceType element) at a URL specified within a Location header in an SSDP response."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en networkmap en el firmware Asuswrt-Merlin para dispositivos ASUS y firmware ASUS para dispositivos RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 de ASUS, permiten que los atacantes remotos ejecuten código arbitrario en el enrutador mediante el alojamiento de un documento XML creado de descripción de dispositivo (que incluye un elemento serviceType) en una URL especificada dentro de un encabezado Location en una respuesta SSDP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac5300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "D4D88DAF-DFC0-4272-92E8-92B8B720ABC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85195C1-D431-47A3-B740-84B9E97E6A97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "8EC02A03-C4AA-4A88-A4C5-B28851820640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1900p_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879F2C62-40D6-47C7-B08D-EF394C184141"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "92F02BF7-4804-4088-974A-850BE8753637"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A532686-2867-4960-979B-7B91CB403F56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac68p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "E5976A71-B3A0-41EA-ACCA-FC7DDE42A288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac68p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9024B4-BF99-4002-8550-24DA6BE94013"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "E8A15254-7453-4DF2-9EAC-4D13FD11AF05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3348D32-AA0C-4249-B507-1A46DF5A62F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "4F4FEB77-CD0D-4313-BB03-9DD480A7971C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC93B36-B0B3-4557-812A-042E6ADC3EA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "0BE5C7A7-D210-4CA0-9391-FF1BF640F1AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac66u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F533CF-447F-4BA8-B01E-F6E8290D768C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7485",
            "matchCriteriaId" : "7116534C-8FC3-49C0-8911-F0160FFC6CB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E770C7D6-5403-455F-BCBF-C56E21CBCD40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "C4F02DDE-A0EF-4A07-BEBA-C41E99FDDCE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E7631A-AD48-4AFA-8F7D-E39578F492ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac55u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "858F993B-494F-4CD0-AEEA-9C96505A7460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac55u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883E9C34-65D6-4D2C-9D60-A173575247B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac52u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.4180",
            "matchCriteriaId" : "6CA2E840-7343-40A0-A32D-455E950DAAD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac52u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9DDB3B-0765-4A69-9190-FF132630F291"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac51u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "67A02F10-D8C4-49E1-A6DD-C7E0600F3C49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac51u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91207A19-15F3-476A-8136-08665E10119D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n18u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "B4F031C0-ED90-4470-8DEA-F22CB081C22E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n18u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625C1795-2197-461F-9880-523CEB436B9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n66u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "2FD21108-18FA-4545-8712-0EDD6DA40C12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474CEA6E-1F80-4A10-B750-7F47C94629E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.378.7177",
            "matchCriteriaId" : "EE9EBB70-B4A6-4F9D-A9C7-32620E2D2735"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0C2572-667F-4BDE-B296-1B4210E351FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac3200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "3EDDCCBF-FD1A-4EE1-9B2D-9E11D4417D9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC4D044-4850-465D-B1DA-ED734BCC5277"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac3100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "052CE11F-FF92-452D-8A3A-3651A303F100"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E15ED3-C71D-402D-B879-B4CA5D5B3525"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1200gu_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.5577",
            "matchCriteriaId" : "00F54F3B-C7D0-49C9-B6C0-9AD2EC53C2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1200gu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171DFA-6307-4078-BBB7-4E8EA904131F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1200g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.3167",
            "matchCriteriaId" : "974F507C-A577-424B-A332-CC4EE3442E04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1200g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B6588-9F8F-48B9-9EE0-209BBFE0C9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9880",
            "matchCriteriaId" : "3C9311D4-A79F-4EDD-9442-6D87A1AE4D71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25606A77-1489-4624-8759-20DEC679E5E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac53_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9883",
            "matchCriteriaId" : "49F94A48-EE6E-49F5-A673-229A42967EF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CE8587-6DF9-4AB4-A2D8-F45D52D86419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.2943",
            "matchCriteriaId" : "97E8B7EB-6CCA-4D17-8851-8C762FC9D6C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F166B64F-2A6E-404C-AD3F-337D631043F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.3479",
            "matchCriteriaId" : "3E92F296-E91F-4B61-8D9F-F3CADD8CBB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12hp_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CCFDE4-B93B-4149-BB2F-EC113F316876"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12d1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "5F3394D8-B251-444F-9CCB-2DC4C5F925EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18926678-B568-4B23-8882-877ECB802D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "9C9D353C-C88E-4772-83A4-BA2774D1296D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44800173-189F-45D7-A8D0-0DFF3BA02488"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_n12\\+_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9880",
            "matchCriteriaId" : "3EC8FF40-47DF-4D08-98FF-09A9D51E8220"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_n12\\+_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB403995-31CF-4468-9245-205EF4FE309A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n16_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "4733E9E4-B297-4AF5-AEBA-C87D5E62FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1708CE7D-7096-4846-A143-F248D5F25B15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "00790F60-6870-47AE-B779-B8DF3DF5D2CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F266FCC-AC0C-4802-946E-3E4302E0A834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/14/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos."
      }, {
        "lang" : "es",
        "value" : "Desktop Central antes del build 100092 de Zoho ManageEngine, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores que involucran la carga de videos de soporte al usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_desktop_central:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0",
            "matchCriteriaId" : "61F8D5C2-47A1-4D4C-88A7-A64C0D9250C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42358/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.manageengine.com/products/desktop-central/remote-code-execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42358/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.manageengine.com/products/desktop-central/remote-code-execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código autenticada en MetInfo versión 5.3.17, permite a un atacante remoto autenticado generar un script PHP con el contenido de una imagen maliciosa, relacionada con los archivos admin/include/common.inc.php y admin/app/physical/physical.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AFA18D-7A78-45EE-B0CF-BAEE3639D587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/imp0wd3r/MetInfo_Vuln/blob/master/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/imp0wd3r/MetInfo_Vuln/blob/master/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value."
      }, {
        "lang" : "es",
        "value" : "En Octopus Deploy versión 3.x anterior a 3.15.4, un usuario autenticado con permiso PackagePush para cargar paquetes podría cargar un paquete NuGet creado con fines maliciosos, sobrescribiendo potencialmente otros paquetes o modificando archivos del sistema. Esto es un salto de directorio en el valor PackageId."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:C/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592A1CB-D692-42CA-99B0-49A0494D4F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA6E50F-0AFC-4977-A63D-133F64B715A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06638B98-91C6-4F48-8DD5-69F90FFF74A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43708008-E680-4083-99DD-A737749C53DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7524BE5-2EDC-4D5C-97FF-392A7B80211B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22DEEAA-93DE-43F9-A218-AD46E278C04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FC407C-A5C7-4104-A9AE-EF48A317886B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1551AB5E-482E-4DB2-A2CB-3CD04212A6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8622F5-163F-4B5A-9971-D876BA5A939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781BDF8F-F837-462C-A2B3-4AA204F27A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47BE91C-DBE5-4DA5-BB89-E9384DCC4BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033F6B90-8000-4F85-9B3E-CD1564B8D6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84514B1-1230-4CCB-A621-157A3AFBBB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1E776-01C1-47E6-A45F-DE8AB1A9990A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F024D605-633A-4D22-B814-A7703F10F012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7903F0-75CF-4A2D-98CF-9BBC3B4CF783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D1E184-9375-4C10-A2B4-D62D92D6BEB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D941F0-64E1-43E9-8E10-214302A02F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836E5299-455C-4E14-9261-654BC730E192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2C9756-3DA2-4A65-B171-6828A85D6663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67255DA8-8722-4777-A278-11FD07266CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60F2518-2DB1-4C1D-B226-CD58D819B6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9395E6C3-9541-4174-A027-E77B9CDCB850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3E52D7-00D2-4E47-B75F-31D13DD923DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0385069-D41F-4C0A-89C8-A4D876E6C24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139E00C-D90B-4C3D-8DE5-A2B5BAB7FF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B9DAFD-D058-4339-847D-78B852836B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A629902-AFD6-456A-9756-B0D0E5ADE3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B070591B-3CEF-4656-B344-0687A3A2790C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88080BEB-3954-4C30-8040-3B88A76CECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.0:beta0001:*:*:*:*:*:*",
            "matchCriteriaId" : "73E87619-DD84-4F22-98C2-C182FFB0ECC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.0:beta0002:*:*:*:*:*:*",
            "matchCriteriaId" : "6D12D23A-AFED-46BA-8128-3CD49AA095EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C742DB8-EB27-485C-8945-B4FADAD89768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBEA447-30CF-496C-A811-3E83AA2924EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AF3F15-D74E-4BE2-B4CA-52B5D69F6C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B682943A-529A-46FF-90F7-7CD7B0068E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF472ECF-6878-4B78-AE99-52D99FDF28F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587E9EF9-93A5-4C93-8992-52400DD104FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDCD0FB-332A-4636-9EF8-6F4BE5D00723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C87BC0-2C2D-4007-B36C-3A39A32567D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B70D7E-56EC-4AE2-9DC9-875E454CC35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD7E8CF-260F-4884-84A5-316E0DFC8F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.0:beta0001:*:*:*:*:*:*",
            "matchCriteriaId" : "D0546545-0137-4C1D-B91C-74A74A3B6702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5D978C-92B9-47B0-945E-23C697E8BA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906D5A61-03D6-4CAA-A4F4-867CBC833BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CFB75C-5139-436E-912C-8488EA2F36AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446499E9-DD4A-44ED-93EE-5B5B70B0DC0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122B5129-E2A7-4381-B79B-911CE57D7271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9E2762-C1E5-4E0C-AD35-BD700B3E26EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6B1A53-53C7-44EC-9DDB-8C9DC9826BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F432E48A-2DBD-4DB0-B797-E176903EC8BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0CEEC1-8BAE-4448-A8BD-F7A2ED840C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDD9154-8D3B-4C1E-B0B0-62ABFF8C0C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4EF3-AD9E-4B51-8425-FA37000C4CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485570D8-D260-490F-920E-62F71F445F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6577AF07-27C9-45A0-93A2-F02CD3C147F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1408070-501E-4E31-961A-C1EE8783B1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47A3F1A-5AE2-49DC-B0D6-6499D60A9519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6010FDC3-D02C-454C-87B2-EF47AF054A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11B45F8-E4DC-40DE-991D-35B0EFF36120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BB64B1-2DBB-4BDD-AF28-8300997E9E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E271A37D-C69F-4AE1-B3EA-1AD0BA658384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3144E0C4-8CDF-4018-9050-E518436F1AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.0:beta0001:*:*:*:*:*:*",
            "matchCriteriaId" : "41EBFA72-2020-455A-8046-98E6739529FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.0:beta0002:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E4BF7-C8F9-459F-B53E-63EE835072F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406EF20A-5751-48C7-BE49-1E2BACDF446F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B994380-E4C4-446A-BDE2-B8F2325BC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC82DF99-445F-4E2A-AE71-AE6AB198D570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55217D26-037B-4739-94F8-F95FCFB9AF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29960FBF-9019-4C28-9DAE-374850E67968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2674D3B5-D177-4BA9-A3A4-198493E288BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B99EFBD-9D9A-4678-B042-22595C20C00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE41FE9-0C20-4074-825E-9007E2358D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A3D3E1-B1D0-4ABC-9B87-C02EE51F8A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E5E851-7737-406A-9CB6-22EDD6E80FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0942CD86-FDB4-4716-9C53-5EF490837777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BACDD08-414D-49A9-B559-867757C248FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F272B963-D4D4-468A-8BCC-944999086776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD582AA-2171-4AED-9C95-F17705ADCD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3AE1-F578-4AA1-9DBA-EDD4F2C58904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD43A779-2AD9-4FC3-94B1-46C446F48975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675DEEE8-53B9-4356-8440-1EF7BB70A828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47726008-9429-4830-950B-6606C28ED148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7A590A-8C38-40D7-AF7A-33BC18BB1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16F4565-1CFB-45F5-9D51-40EFB4C7B519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CF217D-627F-4C4E-AE8D-5A1E618EFF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC6E8A0-55BE-49A9-9CC2-36E02C9F38A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7B064-DF20-43D3-9C4D-B515A6D47A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBEAE34-DBA8-4774-910A-AF7021B691AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1A66B5-9F14-49CE-95D6-A64A6D4EDE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.0:beta0001:*:*:*:*:*:*",
            "matchCriteriaId" : "E24F7B24-09E9-4D62-BFA3-012AD2D55449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.0:beta0002:*:*:*:*:*:*",
            "matchCriteriaId" : "B32E1BDE-D9CD-4940-9D70-FEF50EA828A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E29513-24FF-4547-A44B-997C51D6C04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F88CA-1336-4593-B5BD-1FCE93D41373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1751D91-3964-4783-9413-A9A526369A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C54175-16D3-4D83-AC87-7BF010AE969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAC6499-C9D2-4508-944D-91ECD7C885E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32BF320-5A7E-428F-87BA-4665CFDAB094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452BFE20-AF6A-4B2F-A324-18AF2D9867D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFEB77D-03C6-4195-B585-4F25B0C097D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22ED8747-0547-47D2-94D9-10EBD3AA0379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD787C8-254A-44B7-A932-CC96425DF7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43BEB7C-FAAF-4AC0-B848-139E82824997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783749E9-2B76-4EDF-8A7F-0C18168B0BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11718EB5-44AE-4C4B-95EE-750C7145199C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68958940-C6DF-4723-8F63-077B70DFBC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A9DEE-BBC4-4FF5-AC64-49DD34F2FF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FBBD45-633F-4D05-8406-AA42C9FF5FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AFB7C9-B2AF-4F0C-9057-6496BFBAE361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B22281-05BA-4367-A572-0FBFE9AE32FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC9D0BC-9E78-4D18-9948-405361BEA09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118FC49A-5541-47C9-AD3F-079C07D1D162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE0126B-89FD-4165-BCA7-FACE36D6A9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3541A472-7A56-46C8-B6FE-D4EA3BEB9E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88638E48-31FC-4A7E-ADC5-0F42ADDED546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F6ACED-B445-42D1-9767-197907797EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D9911-FA92-4B88-87E3-26CE969B9068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D18466E-39C6-4E16-80B3-C8973A4B04B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6450B5-3291-4ECA-8E30-CD1526D1A3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5457EBE3-8996-4B52-9991-54D00A2F2CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE419CB7-DF77-42C1-94C2-6690067262CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8412D07-1B9F-4AFB-B716-DA8FEC96711E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C684F69-DACC-4DD1-8100-CB70BFDB3578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDBE325-FEC3-4644-864C-CDA9C957EDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827BD351-4C1A-469A-BF80-59EC0C935682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8473CB4-1170-44E6-ADD2-E468868CBA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345D8C8D-E1CF-4DC2-9E90-0A71749B57E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE34D1A7-7D13-456C-B09A-04A247A890BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA5325C-FE3A-4857-B875-76628BF2C05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E62EBE-FBCD-4817-8121-34FD5DF1B2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E421D1DF-DCB8-4426-9D64-B855B33BE824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912C038-5CE7-494E-9C06-45A6793D3975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B0AD8-895E-449E-8050-AF73A0677FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD0918D-165E-4313-BCB8-0391FFE6B163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55371420-7E0F-4E8B-8D15-C46A4E4A6433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35FEB7F-E65E-4F90-B92D-B9CBED5ECDFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6D0008-8729-47D5-9080-D4415D8A5A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D0608F-0836-44C5-A792-B20F432F0648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7076A3E-55DB-4B47-8FBB-1CA38993FDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1CAA02-BEC7-4F3B-9367-FD38BAB89ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55BEF8A-1611-4968-9971-79B1CE846700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CC9340-4C49-42FF-9A84-2B4578F7E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D72C82C-B1CA-4F4E-A46B-5D85919F15F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB386D5-5E18-4E64-9F55-DE286FDE93FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2055F65D-91A4-4F8D-B57B-FF26DF63719B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186DF1E5-E4B3-40D4-A196-5EC015230C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B873D81-B729-4D86-AFB7-60B547BF0635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42D5AD-1205-4D02-8FBC-9F6BFEA8352A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2582EE1-59DD-4CB4-8783-5B4E840C3A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E8588A-F2B3-4446-82DE-8FD7472B78BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1FAFA4-F6B0-4D93-8FCF-EDC9D5399909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70245FE9-9C1D-47C0-BCF5-623E10796F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F787AA4B-4E5A-4B95-9BB6-AF703792214D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4478F7D2-D102-4B8B-9CB0-3B33F872E250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA167C5-BE25-42C0-90B6-A9CF17AE953F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE6779F-B1A8-4D0D-9E0D-9BFE8D210F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A605F79A-41C4-49DD-9F57-030E23D954CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC19DCB4-0C24-4872-88BE-F32FEE2C28F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE8332E-FB0E-4EDD-A4AC-E7299EAC99A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DE188D-2476-4D47-B1EA-F5994B87D9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD8B805-E383-4A8E-84E6-C8C7FF95EB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F746D068-17F1-4910-B3C2-93E724537E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4580D06-34A1-41DD-B761-0A5329FDEFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02658783-BAFF-4378-8A0B-F69AFF1F6D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.11.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1EE68B-F702-4FE5-8C00-FCC9356A1BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F64A21-FCDB-4F75-A40C-E33B4985FF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB2BA6-455F-4C7E-90DE-DDEEA0D35A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3CF216-C004-41E2-844B-755BDD3B445F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41105AAF-DA38-4E88-8D98-AFF6992E2C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34F53D1-0EEB-4149-8311-F100AE08990E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E90449-98FB-499A-8417-9130E917C2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11979C6-A969-472B-9599-63D030E02CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BCDBCF-2BB9-4B5B-92FD-2DCEE823316D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0B8225-BC02-47D7-B036-E819DEDD982E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E262C3-BA59-4684-ADB6-4AB54008A6B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906F638C-46C4-42B4-B942-11A49BFEC731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F37B02D-F3B8-4BD5-9F03-957BC5E98250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D740A4B-B19A-400B-AA35-B27E79628BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E885E7BF-E83F-4225-9A7D-92856304FB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DFB9A5-4EA6-4CC1-BB21-0837AD1B443A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD5D129-7CB1-4265-B01A-845A3151F926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922EEEB7-F909-4FC3-B594-D1C2F8E186C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.13.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D860E8A-6F52-4D60-A8AA-628A74FF7365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029BB83B-0CE9-42D6-B457-57CC8C376F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.14.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD362A49-EA6B-426D-8972-EE125DAF6482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.14.159:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F86EC1-1BD0-4960-8B5C-A42F7C696099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.14.1592:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B2CF6-2B31-42CE-9AB8-58FC6A76F768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.14.15926:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECB6B08-1C12-4DA1-A13F-9F3BF90C818C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748FB71C-DB3A-4BED-BAFD-C0F5422724E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20977EE4-0D05-4602-B182-661A7480DD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA08512B-0587-4B4B-8487-0905091F07DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:3.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6530D6-A7B3-47C4-9DFD-DFF5F9DD28C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3654",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data."
      }, {
        "lang" : "es",
        "value" : "dataTaker DT8x dEX versión 1.72.007, permite a los atacantes remotos crear programas o calendarios, para fines tales como el envío de mensajes de correo electrónico o hacer conexiones salientes hacia servidores FTP para cargar datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datataker:dt8x_firmware:1.72.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5C1D67-08F4-4EBA-9053-27AC11D48A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datataker:dt8x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7694EFF4-3544-468C-B784-DCD3EB4BB30C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/nullku7/status/859238295959609344",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/nullku7/status/859238295959609344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick anterior a versión 7.0.5-10, una imagen RLE creada puede desencadenar un bloqueo debido a un manejo incorrecto de EOF en el archivo coders/rle.c. NOTA: esta vulnerabilidad existe debido a una solución incompleta para el CVE-2017-9144."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.8-9",
            "matchCriteriaId" : "F558CAA6-585F-4D44-8872-72991AA14612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.5-10",
            "matchCriteriaId" : "A48A21A9-4024-4080-ABBB-99413FD90E4C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99600",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/868469",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/502",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/868469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH and PGP keys."
      }, {
        "lang" : "es",
        "value" : "yadm (otro administrador de archivos de puntos) versión 1.10.0, tiene una condición de carrera (relacionada con el comportamiento de los comandos git en la configuración de permisos para nuevos archivos y directorios), lo que potencialmente permite el acceso a las claves SSH y PGP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yadm_project:yadm:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064EEBAB-42F4-44DA-BD32-4C051E251541"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/868300",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TheLocehiliosan/yadm/issues/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/868300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TheLocehiliosan/yadm/issues/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in editing or adding a tag name."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión v2.0.7, presenta una vulnerabilidad de inyección SQL en dapur/apps/app_article/sys_article.php por medio del parámetro name en editar o agregar un nombre de etiqueta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadRLEImage function in coders\\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value."
      }, {
        "lang" : "es",
        "value" : "La función ReadRLEImage en el archivo coders\\rle.c en ImageMagick versión 7.0.6-1, presenta una vulnerabilidad de bucle largo por medio de un archivo rle diseñado que desencadena un enorme valor de number_pixels."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/518",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:21.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function."
      }, {
        "lang" : "es",
        "value" : "En PHP, en versiones 7.x anteriores a la 7.0.21 y versiones 7.1.x anteriores a la 7.1.7, ext/intl/msgformat/msgformat_parse.c no restringe la longitud del valor locale, lo que permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en pila y cierre inesperado de la aplicación) o, probablemente, causen otros impactos no especificados en International Components for Unicode (ICU) para C/C++ mediante un primer argumento largo a la función msgfmt_parse_message."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73473",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-21",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3566-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=73473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3566-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1181",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-17T13:18:21.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Monitoring Portal V6 permite a un atacante local escalar privilegios para IBM Tivoli Monitoring, causando que la conexión por defecto de la consola no sea encriptada. IBM X-Force ID: 123487."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8B4310-F5D2-4448-89C1-E6D656351E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1EEA0F-0501-4316-BD33-ECF44BDD9008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7484661E-4906-4027-B4B7-9AA952661923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003402",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99596",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038913",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123487",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1182",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-17T13:18:21.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Monitoring Portal v6 permite a un atacante local o de una red adyacente ejecutar comando aleatorios en el sistema, cuando las comunicaciones por defecto entre el cliente y el servidor HTTP están siendo usadas. IBM X-Force ID: 123494."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8B4310-F5D2-4448-89C1-E6D656351E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1EEA0F-0501-4316-BD33-ECF44BDD9008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7484661E-4906-4027-B4B7-9AA952661923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003402",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038913",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123493",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1183",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-17T13:18:22.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Monitoring Portal v6 permite a un atacante local o de una red adyacente modificar comando SQL al Portal Server, cuando las comunicaciones por defecto entre el cliente y el servidor HTTP están siendo usadas. IBM X-Force ID: 123494."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8B4310-F5D2-4448-89C1-E6D656351E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1EEA0F-0501-4316-BD33-ECF44BDD9008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7484661E-4906-4027-B4B7-9AA952661923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003402",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99610",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038913",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123494",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2240",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:22.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via \"File Transfer Web Service\"."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto del directorio en AssetView para MacOS versión 9.2.0 y anteriores, permite a atacantes remotos leer archivos arbitrarios por medio del  \"File Transfer Web Service\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hammock:assetview:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB49676-A7E8-4D89-9CDB-50B78F40A421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "3B2C6646-3ADB-4A79-B860-7480D169E604"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/vu/JVNVU93377948/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.hammock.jp/assetview/info/170714.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/vu/JVNVU93377948/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.hammock.jp/assetview/info/170714.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2241",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:22.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via \"File Transfer Web Service\"."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en AssetView para MacOS versión 9.2.0 y anteriores, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del  \"File Transfer Web Service\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hammock:assetview:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB49676-A7E8-4D89-9CDB-50B78F40A421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "3B2C6646-3ADB-4A79-B860-7480D169E604"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/vu/JVNVU93377948/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.hammock.jp/assetview/info/170714.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/vu/JVNVU93377948/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.hammock.jp/assetview/info/170714.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2246",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el Instalador de Lhaz versión 2.4.0 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chitora:lhaz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "9D9DEC2E-5777-424C-8FAF-53195B7513C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2247",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en los archivos Autoextraíbles creados por Lhaz versión 2.4.0 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chitora:lhaz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "9D9DEC2E-5777-424C-8FAF-53195B7513C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2248",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el Instalador de Lhaz+ versión 3.4.0 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chitora:lhaz\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.0",
            "matchCriteriaId" : "F52E7D46-057D-48ED-AF57-EB07201D5554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2249",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en archivos Autoextraíbles creados por Lhaz+ versión 3.4.0 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chitora:lhaz\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.0",
            "matchCriteriaId" : "F52E7D46-057D-48ED-AF57-EB07201D5554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://chitora.com/jvn21369452.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN21369452/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2252",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en archivos Autoextraíbles creados por File Compact Ver.5 versión 5.10 y anteriores, Ver.6 versión 6.02 y anterior, Ver.7 versión 7.02 y anterior, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcenext:file_compact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.09",
            "matchCriteriaId" : "226F3AEC-A582-45D8-9BBC-10AA505443F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcenext:file_compact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.01",
            "matchCriteriaId" : "7424DCC6-79F4-4F9B-966E-D9E03C86D5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcenext:file_compact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.01",
            "matchCriteriaId" : "22636993-DD45-47C4-954E-1CB35795255D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN29939155/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29939155/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2253",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en el instalador de Yahoo! Toolbar (para Internet explorer) versión v8.0.0.6 y anteriores, con su marca de tiempo anterior al 13 de junio de 2017, 18:18:55, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:toolbar:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "8.0.0.6",
            "matchCriteriaId" : "294F9340-438E-4DEB-9C25-FE7A853EF9A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN02852421/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN02852421/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2265",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en FileCapsule Deluxe Portable versión 1.0.4.1 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume-next:filecapsule_deluxe_portable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.1",
            "matchCriteriaId" : "E38DD1CE-7458-4D8B-93C8-AD908AC36EA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2266",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en archivos cifrados en formato auto descifrado creados por FileCapsule Deluxe Portable versión 1.0.4.1 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume-next:filecapsule_deluxe_portable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.1",
            "matchCriteriaId" : "E38DD1CE-7458-4D8B-93C8-AD908AC36EA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2267",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en FileCapsule Deluxe Portable versión 1.0.5.1 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume-next:filecapsule_deluxe_portable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.5.1",
            "matchCriteriaId" : "52345151-6DB0-462C-AABB-4413F46A43C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2268",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta (path) de búsqueda no confiable en archivos cifrados en formato auto descifrado creados por FileCapsule Deluxe Portable Versión 1.0.5.1 y anteriores, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume-next:filecapsule_deluxe_portable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.5.1",
            "matchCriteriaId" : "52345151-6DB0-462C-AABB-4413F46A43C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2269",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de ruta (path) de búsqueda no confiable en FileCapsule Deluxe Portable versión 2.0.9 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume-next:filecapsule_deluxe_portable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.9",
            "matchCriteriaId" : "1A033B87-C47A-424A-8C11-B0A7D91BF0D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2270",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de ruta (path) de búsqueda no confiable en archivos cifrados en formato auto descifrado creados por FileCapsule Deluxe Portable Versión 2.0.9 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume-next:filecapsule_deluxe_portable:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.9",
            "matchCriteriaId" : "1A033B87-C47A-424A-8C11-B0A7D91BF0D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://resumenext.blog.fc2.com/blog-entry-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42031953/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2271",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de ruta (path) de búsqueda no confiable en archivos cifrados Autoextraíbles creados por AttacheCase versión 2.8.3.0 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hibara:attachecase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.3.0",
            "matchCriteriaId" : "E23EF154-50BF-4B4F-A8AC-8EAA68D644E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN61502349/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN61502349/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2272",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-17T13:18:23.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de ruta (path) de búsqueda no confiable en archivos cifrados Autoextraíbles creados por AttacheCase Versión 3.2.2.6 y anteriores, permite a un atacante alcanzar privilegios por medio de un archivo DLL caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hibara:attachecase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2.6",
            "matchCriteriaId" : "AD6C9D58-6E1D-444D-8203-727DA0339C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN61502349/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN61502349/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2314",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:23.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. By continuously sending specially crafted BGP OPEN messages, an attacker can repeatedly crash the rpd process causing prolonged denial of service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R12-S4, 12.3R13, 12.3R3-S4; 12.3X48 prior to 12.3X48-D50; 13.3 prior to 13.3R4-S11, 13.3R10; 14.1 prior to 14.1R8-S3, 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R4-S7, 14.2R6-S4, 14.2R7; 15.1 prior to 15.1F2-S11, 15.1F4-S1-J1, 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D33, 15.1X53-D50."
      }, {
        "lang" : "es",
        "value" : "La recepción de un mensaje BGP OPEN malformado puede causar que el proceso routing protocol daemon (rpd) se bloquee y reinicie. Mediante el envío continuo de mensajes BGP OPEN especialmente creados, un atacante puede bloquear repetidamente el proceso rpd causando una denegación de servicio prolongada. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema. Las versiones afectadas son Juniper Networks Junos OS versión 12.3 anterior a 12.3R12-S4, 12.3R13 y 12.3R3-S4; versión 12.3X48 anterior a 12.3X48-D50; versión 13.3 anterior a 13.3R4-S11 y 13.3R10; versión 14.1 anterior a 14.1R8-S3 y 14.1R9; versión 14.1X53 anterior a 14.1X53-D40; versión 14.1X55 anterior a 14.1X55-D35; versión 14.2 anterior a 14.2R4-S7, 14.2R6-S4 y 14.2R7; versión 15.1 anterior a 15.1F2-S11, 15.1F4-S1-J1, 15.1F5-S3, 15.1F6 y 15.1R4; versión 15.1X49 anterior a 15.1X49-D100; versión 15.1X53 anterior a 15.1X53-D33 y 15.1X53-D50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E014A0D-0054-4EBA-BA1F-035B74BD822F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "960059B5-0701-4B75-AB51-0A430247D9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "05E187F6-BACD-4DD5-B393-B2FE4349053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "3C240840-A6BC-4E3D-A60D-22F08E67E2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC90563F-6BCB-4D77-8FD4-584E3A6C7741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD03BA7-D9EC-420F-97C4-383F79D6873F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FED64-8725-4978-9EBF-E3CD8EF338E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0B8539-31FF-4AE9-91D6-47E6305D9EDF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51AFC81-0CF9-49BD-89A7-2C5729A09250"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038889",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10779",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2335",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:23.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) persistente en la WebUI de NetScreen de Juniper Networks Juniper NetScreen Firewall+VPN ejecutándose en ScreenOS, permite a un usuario con el rol “security” inyectar contenido HTML/JavaScript hacia la sesión de administración de otros usuarios, incluyendo el administrador. Esto permite a un usuario con pocos privilegios ejecutar comandos de manera eficaz con los permisos de un administrador. Este problema afecta a Juniper Networks ScreenOS versión 6.3.0 anteriores a 6.3.0r24 en la serie SSG. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F484AD-901C-4D4E-81D0-41C177A73246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE622D-529B-4D89-BAE2-1AFA64C21930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "85E96339-7B15-425C-93BF-A6C3909BC514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "68BF865C-C264-40B9-ADE2-0E4E2F389533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E16DB-CC63-4C17-97F1-7E96C00D4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D61E2-7DD7-4BE0-A6B2-05F609248C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "443A7726-36FD-4F15-A0E4-FD6CBE7E4EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r15:*:*:*:*:*:*",
            "matchCriteriaId" : "0A45A2F9-F33F-429B-A66D-B2BCBA7B8836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r16:*:*:*:*:*:*",
            "matchCriteriaId" : "B6923ED1-A07D-46FD-BB81-ECA920E13840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r17:*:*:*:*:*:*",
            "matchCriteriaId" : "9323A380-A99C-4B35-B379-51A57CF17678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r18:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F2143-1B00-4F3D-9454-24A80D9C88FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r19:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF89BB-010B-4E95-8E80-69749BDF4211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0181A3-AD21-403B-B583-3AB729E57A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r21:*:*:*:*:*:*",
            "matchCriteriaId" : "FC170FC3-A579-4EF4-8120-C5DEDC939D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r22:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FC3EB-4B5A-4036-BECE-2F170033F1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23:*:*:*:*:*:*",
            "matchCriteriaId" : "184A1C40-2A96-4662-BE43-E02AA9D5AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23b:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA53A17-46E0-4CAD-9F19-3949A2B9D08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D68DB5-4F2F-4C31-9329-7AD74F7C5F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9D4824-4734-4BAF-84B0-A57692DC339D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6A64A3-8273-4BD4-839E-EA0AF6DAEF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF8354-8178-4A34-ACC6-E513A74CC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "22AC6768-B3B4-46BC-AD8D-2AC9ED16F7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "A52F0C7A-E2EA-48DB-B22C-1E62CE768AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "1F63C5B5-C813-4456-8D1B-B3CF50DA15CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2336",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:23.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a network based attacker to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the attacker to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) reflejado en la WebUI de NetScreen de Juniper Networks Juniper NetScreen Firewall+VPN ejecutándose en ScreenOS, permite a un atacante sobre la red inyectar contenido HTML/JavaScript hacia la sesión de administración de otros usuarios, incluyendo el Administrador. Esto permite al atacante ejecutar comandos de manera eficaz con los permisos de un administrador. Este problema afecta a Juniper Networks ScreenOS versión 6.3.0 anteriores a 6.3.0r24 en la serie SSG. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F484AD-901C-4D4E-81D0-41C177A73246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE622D-529B-4D89-BAE2-1AFA64C21930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "85E96339-7B15-425C-93BF-A6C3909BC514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "68BF865C-C264-40B9-ADE2-0E4E2F389533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E16DB-CC63-4C17-97F1-7E96C00D4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D61E2-7DD7-4BE0-A6B2-05F609248C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "443A7726-36FD-4F15-A0E4-FD6CBE7E4EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r15:*:*:*:*:*:*",
            "matchCriteriaId" : "0A45A2F9-F33F-429B-A66D-B2BCBA7B8836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r16:*:*:*:*:*:*",
            "matchCriteriaId" : "B6923ED1-A07D-46FD-BB81-ECA920E13840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r17:*:*:*:*:*:*",
            "matchCriteriaId" : "9323A380-A99C-4B35-B379-51A57CF17678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r18:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F2143-1B00-4F3D-9454-24A80D9C88FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r19:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF89BB-010B-4E95-8E80-69749BDF4211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0181A3-AD21-403B-B583-3AB729E57A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r21:*:*:*:*:*:*",
            "matchCriteriaId" : "FC170FC3-A579-4EF4-8120-C5DEDC939D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r22:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FC3EB-4B5A-4036-BECE-2F170033F1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23:*:*:*:*:*:*",
            "matchCriteriaId" : "184A1C40-2A96-4662-BE43-E02AA9D5AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23b:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA53A17-46E0-4CAD-9F19-3949A2B9D08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D68DB5-4F2F-4C31-9329-7AD74F7C5F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9D4824-4734-4BAF-84B0-A57692DC339D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6A64A3-8273-4BD4-839E-EA0AF6DAEF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF8354-8178-4A34-ACC6-E513A74CC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "22AC6768-B3B4-46BC-AD8D-2AC9ED16F7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "A52F0C7A-E2EA-48DB-B22C-1E62CE768AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "1F63C5B5-C813-4456-8D1B-B3CF50DA15CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2337",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) persistente en la WebUI de NetScreen de Juniper Networks Juniper NetScreen Firewall+VPN ejecutándose en ScreenOS, permite a un usuario con el rol “security” inyectar contenido HTML/JavaScript en la sesión de administración de otros usuarios, incluyendo el administrador. Esto permite al usuario con pocos privilegios ejecutar comandos de manera eficaz con los permisos de un administrador. Este problema afecta a Juniper Networks ScreenOS versión 6.3.0 anteriores a 6.3.0r24 en la serie SSG. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F484AD-901C-4D4E-81D0-41C177A73246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE622D-529B-4D89-BAE2-1AFA64C21930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "85E96339-7B15-425C-93BF-A6C3909BC514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "68BF865C-C264-40B9-ADE2-0E4E2F389533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E16DB-CC63-4C17-97F1-7E96C00D4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D61E2-7DD7-4BE0-A6B2-05F609248C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "443A7726-36FD-4F15-A0E4-FD6CBE7E4EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r15:*:*:*:*:*:*",
            "matchCriteriaId" : "0A45A2F9-F33F-429B-A66D-B2BCBA7B8836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r16:*:*:*:*:*:*",
            "matchCriteriaId" : "B6923ED1-A07D-46FD-BB81-ECA920E13840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r17:*:*:*:*:*:*",
            "matchCriteriaId" : "9323A380-A99C-4B35-B379-51A57CF17678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r18:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F2143-1B00-4F3D-9454-24A80D9C88FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r19:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF89BB-010B-4E95-8E80-69749BDF4211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0181A3-AD21-403B-B583-3AB729E57A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r21:*:*:*:*:*:*",
            "matchCriteriaId" : "FC170FC3-A579-4EF4-8120-C5DEDC939D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r22:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FC3EB-4B5A-4036-BECE-2F170033F1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23:*:*:*:*:*:*",
            "matchCriteriaId" : "184A1C40-2A96-4662-BE43-E02AA9D5AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23b:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA53A17-46E0-4CAD-9F19-3949A2B9D08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D68DB5-4F2F-4C31-9329-7AD74F7C5F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9D4824-4734-4BAF-84B0-A57692DC339D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6A64A3-8273-4BD4-839E-EA0AF6DAEF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF8354-8178-4A34-ACC6-E513A74CC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "22AC6768-B3B4-46BC-AD8D-2AC9ED16F7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "A52F0C7A-E2EA-48DB-B22C-1E62CE768AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "1F63C5B5-C813-4456-8D1B-B3CF50DA15CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2338",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) persistente en la WebUI de NetScreen de Juniper Networks Juniper NetScreen Firewall+VPN ejecutándose en ScreenOS, permite a un usuario con el rol “security” inyectar contenido HTML/JavaScript en la sesión de administración de otros usuarios, incluyendo el administrador. Esto permite al usuario con pocos privilegios ejecutar comandos de manera eficaz con los permisos de un administrador. Este problema afecta a Juniper Networks ScreenOS versión 6.3.0 anteriores a 6.3.0r24 en la serie SSG. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F484AD-901C-4D4E-81D0-41C177A73246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE622D-529B-4D89-BAE2-1AFA64C21930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "85E96339-7B15-425C-93BF-A6C3909BC514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "68BF865C-C264-40B9-ADE2-0E4E2F389533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E16DB-CC63-4C17-97F1-7E96C00D4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D61E2-7DD7-4BE0-A6B2-05F609248C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "443A7726-36FD-4F15-A0E4-FD6CBE7E4EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r15:*:*:*:*:*:*",
            "matchCriteriaId" : "0A45A2F9-F33F-429B-A66D-B2BCBA7B8836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r16:*:*:*:*:*:*",
            "matchCriteriaId" : "B6923ED1-A07D-46FD-BB81-ECA920E13840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r17:*:*:*:*:*:*",
            "matchCriteriaId" : "9323A380-A99C-4B35-B379-51A57CF17678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r18:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F2143-1B00-4F3D-9454-24A80D9C88FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r19:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF89BB-010B-4E95-8E80-69749BDF4211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0181A3-AD21-403B-B583-3AB729E57A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r21:*:*:*:*:*:*",
            "matchCriteriaId" : "FC170FC3-A579-4EF4-8120-C5DEDC939D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r22:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FC3EB-4B5A-4036-BECE-2F170033F1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23:*:*:*:*:*:*",
            "matchCriteriaId" : "184A1C40-2A96-4662-BE43-E02AA9D5AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23b:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA53A17-46E0-4CAD-9F19-3949A2B9D08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D68DB5-4F2F-4C31-9329-7AD74F7C5F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9D4824-4734-4BAF-84B0-A57692DC339D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6A64A3-8273-4BD4-839E-EA0AF6DAEF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF8354-8178-4A34-ACC6-E513A74CC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "22AC6768-B3B4-46BC-AD8D-2AC9ED16F7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "A52F0C7A-E2EA-48DB-B22C-1E62CE768AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "1F63C5B5-C813-4456-8D1B-B3CF50DA15CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2339",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) persistente en la WebUI de NetScreen de Juniper Networks Juniper NetScreen Firewall+VPN ejecutándose en ScreenOS, permite a un usuario con el rol “security” inyectar contenido HTML/JavaScript en la sesión de administración de otros usuarios, incluyendo el administrador. Esto permite al usuario con pocos privilegios ejecutar comandos de manera eficaz con los permisos de un administrador. Este problema afecta a Juniper Networks ScreenOS versión 6.3.0 anteriores a 6.3.0r24 en la serie SSG. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F484AD-901C-4D4E-81D0-41C177A73246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE622D-529B-4D89-BAE2-1AFA64C21930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "85E96339-7B15-425C-93BF-A6C3909BC514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "68BF865C-C264-40B9-ADE2-0E4E2F389533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E16DB-CC63-4C17-97F1-7E96C00D4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D61E2-7DD7-4BE0-A6B2-05F609248C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "443A7726-36FD-4F15-A0E4-FD6CBE7E4EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r15:*:*:*:*:*:*",
            "matchCriteriaId" : "0A45A2F9-F33F-429B-A66D-B2BCBA7B8836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r16:*:*:*:*:*:*",
            "matchCriteriaId" : "B6923ED1-A07D-46FD-BB81-ECA920E13840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r17:*:*:*:*:*:*",
            "matchCriteriaId" : "9323A380-A99C-4B35-B379-51A57CF17678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r18:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F2143-1B00-4F3D-9454-24A80D9C88FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r19:*:*:*:*:*:*",
            "matchCriteriaId" : "29AF89BB-010B-4E95-8E80-69749BDF4211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0181A3-AD21-403B-B583-3AB729E57A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r21:*:*:*:*:*:*",
            "matchCriteriaId" : "FC170FC3-A579-4EF4-8120-C5DEDC939D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r22:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FC3EB-4B5A-4036-BECE-2F170033F1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23:*:*:*:*:*:*",
            "matchCriteriaId" : "184A1C40-2A96-4662-BE43-E02AA9D5AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r23b:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA53A17-46E0-4CAD-9F19-3949A2B9D08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D68DB5-4F2F-4C31-9329-7AD74F7C5F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9D4824-4734-4BAF-84B0-A57692DC339D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6A64A3-8273-4BD4-839E-EA0AF6DAEF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF8354-8178-4A34-ACC6-E513A74CC7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "22AC6768-B3B4-46BC-AD8D-2AC9ED16F7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "A52F0C7A-E2EA-48DB-B22C-1E62CE768AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:screenos:6.3.0:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "1F63C5B5-C813-4456-8D1B-B3CF50DA15CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2341",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D40 on QFX5110, QFX5200, QFX10002, QFX10008, QFX10016, EX4600 and NFX250; 15.1 prior to 15.1R5 on EX4600; 15.1X49 prior to 15.1X49-D70 on vSRX, SRX1500, SRX4100, SRX4200; 16.1 prior to 16.1R2 on EX4600, ACX5000 series. This issue does not affect vMX. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación insuficiente en plataformas donde las instancias de Junos OS se ejecutan en un entorno virtualizado, puede permitir que los usuarios sin privilegios de la instancia de Junos OS alcanzar acceso al entorno operativo del host y, por lo tanto, escalar los privilegios. Las versiones afectadas son Juniper Networks Junos OS versión 14.1X53 anterior a 14.1X53-D40 en QFX5110, QFX5200, QFX10002, QFX10008, QFX10016, EX4600 y NFX250; versión 15.1 anterior a 15.1R5 en EX4600; versión 15.1X49 anterior a 15.1X49-D70 en vSRX, SRX1500, SRX4100, SRX4200; versión 16.1 anterior a 16.1R2 en la serie EX4600, ACX5000. Este problema no afecta a vMX. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7DBA7C-962E-40AD-84E7-7E80338193BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63814912-13EF-4009-B329-A87372E29430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFC7A52-9982-4CAF-9FD8-6629DD3D9930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2534954-04C0-45E0-8889-1184D82CCD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9D78C-775A-4F29-A1CB-7FDF82BA6E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C40BB8-052B-4D47-8ED3-93C4C2988BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53-d35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6654B5FD-8F94-4564-AFAB-D97760218ED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10DFCE-5331-4D79-8D9F-EF84743493D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C398D8D-AD15-422C-90DE-2EAD9B9A7DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038893",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10787",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2342",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It falls back to an unencrypted link. This can happen when MACsec is configured on ports that are not capable of MACsec or when a secure link can not be established. This can mislead customers into believing that a link is secure. On SRX 300 series devices, prior to 15.1X49-D100, MACsec was only supported on control and fabric ports of SRX340 and SRX345 devices. SRX300 and and SRX320 did not have any MACsec capable ports. Configuring MACsec on ports that were not MACsec capable would have resulted in this issue. Affected releases are Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series."
      }, {
        "lang" : "es",
        "value" : "La función MACsec en Juniper Networks Junos OS versión 15.1X49 anterior a 15.1X49-D100 en la serie SRX300, no informa de errores cuando un enlace seguro no se puede establecer. Vuelve a un enlace sin cifrar. Esto puede suceder cuando el MACsec se configura en los puertos que no son capaces del MACsec o cuando un enlace seguro no puede ser establecido. Esto puede inducir a los clientes a creer que un enlace es seguro. En los dispositivos de la serie SRX 300, anterior a versión 15.1X49-D100, MACsec sólo era compatible con los puertos de control y de estructura de los dispositivos SRX340 y SRX345. SRX300 y SRX320 y SRX320 no tenían ningún puerto compatible con MACsec. Configurar MACsec en puertos que no eran compatibles con maCsec habría resultado en este problema. Las versiones afectadas son Juniper Networks Junos OS versión 15.1X49 anterior a 15.1X49-D100 en la serie SRX300."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-392"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038890",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10790",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2343",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API, hardcoded credentials were identified and removed which can impact both the SRX Series device, and potentially LDAP and Active Directory integrated points. An attacker may be able to completely compromise SRX Series devices, as well as Active Directory servers and services. When Active Directory is compromised, it may allow access to user credentials, workstations, servers performing other functions such as email, database, etc. Inter-Forest Active Directory deployments may also be at risk as the attacker may gain full administrative control over one or more Active Directories depending on the credentials supplied by the administrator of the AD domains and SRX devices performing integrated authentication of users, groups and devices. To identify if your device is potentially vulnerable to exploitation, check to see if the service is operating; from CLI review the following output: root@SRX-Firewall# run show services user-identification active-directory-access domain-controller status extensive A result of \"Status: Connected\" will indicate that the service is active on the device. To evaluate if user authentication is occurring through the device: root@SRX-Firewall# run show services user-identification active-directory-access active-directory-authentication-table all Next review the results to see if valid users and groups are returned. e.g. Domain: juniperlab.com Total entries: 3 Source IP Username groups state 172.16.26.1 administrator Valid 192.168.26.2 engg01 engineers Valid 192.168.26.3 guest01 guests Valid Domain: NULL Total entries: 8 Source IP Username groups state 192.168.26.4 Invalid 192.168.26.5 Invalid This will also indicate that Valid users and groups are authenticating through the device. Affected releases are Juniper Networks Junos OS 12.3X48 from 12.3X48-D30 and prior to 12.3X48-D35 on SRX series; 15.1X49 from 15.1X49-D40 and prior to 15.1X49-D50 on SRX series. Devices on any version of Junos OS 12.1X46, or 12.1X47 are unaffected by this issue."
      }, {
        "lang" : "es",
        "value" : "La función Integrated User Firewall (UserFW) fue introducida en Junos OS versión 12.1X47-D10 en los dispositivos de la serie SRX de Juniper para proporcionar una integración sencilla de los perfiles de usuario en la parte superior de las políticas de firewall existentes. Como parte de una revisión de seguridad interna de la API de autenticación de servicios UserFW, se identificaron y eliminaron las credenciales codificadas, lo que puede impactar tanto al dispositivo de la serie SRX como a los puntos integrados de LDAP y Active Directory. Un atacante puede poner en peligro completamente los dispositivos de la serie SRX, así como los servidores y servicios de Active Directory. Cuando Active Directory se ve comprometido, puede permitir el acceso a credenciales de usuario, estaciones de trabajo, servidores que realizan otras funciones como correo electrónico, base de datos, etc. Las implementaciones de Active Directory entre bosques también pueden estar en riesgo, ya que el atacante puede alcanzar el control administrativo total sobre uno o más directorios activos en función de las credenciales proporcionadas por el administrador de los dominios de AD y los dispositivos SRX que realizan autenticación integrada de usuarios, grupos y dispositivos. Para identificar si su dispositivo es potencialmente vulnerable a la explotación, compruebe si el servicio está funcionando; de la revisión de la CLI de la siguiente salida: root@SRX-Firewall#, ejecutar show services user-identification active-directory-access domain-controller status extensive Un resultado de \"Status: Connected” indicará que el servicio está activo en el dispositivo. Para evaluar si la autenticación de usuario se está produciendo por medio del dispositivo: root@SRX-Firewall#, ejecutar show services user-id active-directory-access active-directory-authentication-table all Next revise los resultados para visualizar si los usuarios y grupos válidos son devueltos. e.g. Dominio: juniperlab.com Total de entradas: 3 Grupos de nombres de usuario IP de origen estado 172.16.26.1 administrador válido 192.168.26.2 ingenieros engg01 válidos 192.168.26.3 invitado Dominio válido: ENTRADAS totales NULL: 8 grupos de nombres de usuario IP de origen estado 192.168.26.4 192.168.26.5 No válido Esto también indicará que los usuarios y grupos válidos se autentican por medio del dispositivo. Las versiones afectadas son Juniper Networks Junos OS versión 12.3X48 de 12.3X48-D30 y anteriores a versión 12.3X48-D35 en la serie SRX; versión 15.1X49 de 15.1X49-D40 y anterior a 15.1X49-D50 en la serie SRX. Los dispositivos de cualquier versión de Junos OS versión 12.1X46 o 12.1X47 no están afectados por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038904",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10791",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2344",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service (kernel panic) or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running on the device itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utilizing signed binaries shipped with Junos OS itself. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una rutina dentro de una biblioteca de sockets de Junos OS interna es vulnerable a un desbordamiento de búfer. La explotación maliciosa de este problema puede conllevar a una denegación de servicio (pánico del Kernel) o a ser explotada como una escalada de privilegios por medio de la ejecución de código local. Las rutinas solo son accesibles por medio de programas que se ejecutan en el propio dispositivo, y veriexec restringe la ejecución de programas arbitrarios en Junos OS. No se presentan vectores de explotación conocidos que utilicen binarios firmados enviados con el propio sistema operativo Junos. Las versiones afectadas son Juniper Networks Junos OS versión 12.1X46 anterior a 12.1X46-D67; versión 12.3X48 anterior a 12.3X48-D51, 12.3X48-D55; versión 13.3 anterior a 13.3R10-S2; versión 14.1 anterior a 14.1R2-S10, 14.1R8-S4, 14.1R9; versión 14.1X50 anterior a 14.1X50-D185; versión 14.1X53 anterior a 14.1X53-D122, 14.1X53-D45, 14.1X53-D50; versión 14.2 anterior a 14.2R4-S9, 14.2R7-S7, 14.2R8; versión 15.1 anterior a 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; versión 15.1X49 anterior a 15.1X49-D100; versión 15.1X53 anterior a 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; versión 16.1 anterior a 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; versión 16.2 anterior a 16.2R2; versión 17.1 anterior a 17.1R1-S3, 17.1R2; versión 17.2 anterior a 17.2R1-S1, 17.2R2; versión 17.2X75 anterior a 17.2X75-D30. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD32D8A-7531-4691-B45D-9EACC69A23D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "76DFA52F-5B2E-47DA-9A8E-7D17A7413929"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "6B65EF51-ED97-4973-94C4-8F66C553F190"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "99A946CE-FFC7-4F16-82F4-795A6E5B84C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104A7E60-EDE5-43E6-82FA-93016265CF4F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d121:*:*:*:*:*:*",
            "matchCriteriaId" : "1E87AF59-23AC-4CE2-98AE-41849D643A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C0C9D6-7C78-40CA-984B-46F4223E5DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d230:*:*:*:*:*:*",
            "matchCriteriaId" : "3E364FE2-5FB1-4E14-8DF5-CA21F4BFBBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "1749B778-0E36-4539-8668-89F4460F251F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d57:*:*:*:*:*:*",
            "matchCriteriaId" : "188FED65-8A81-4BB0-B10B-8CA17B4F71CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d64:*:*:*:*:*:*",
            "matchCriteriaId" : "395CC50B-9042-4B12-9A1C-A8D5D571DC25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D571B57-4F4C-4232-9D3B-B2F7AAAB220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B47EC5-0276-4799-B536-12B33B5F003B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EB45C0-E3BD-4C0D-9E97-1DB726D66401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A3F26-3C6E-4B5A-9D40-E6ABC2BFA7AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99556",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038896",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10792",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2345",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes of the snmpd daemon can result in a partial denial of service condition. Additionally, it may be possible to craft a malicious SNMP packet in a way that can result in remote code execution. SNMP is disabled in Junos OS by default. Junos OS devices with SNMP disabled are not affected by this issue. No other Juniper Networks products or platforms are affected by this issue.  NOTE: This is a different issue than Cisco CVE-2017-6736, CVE-2017-6737, and CVE-2017-6738. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D44, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100, 15.1X49-D110; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2, 16.2R3; 17.1 prior to 17.1R1-S3, 17.1R2, 17.1R3; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. Junos releases prior to 10.2 are not affected."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos de Junos OS con SNMP habilitado, un atacante sobre la red con acceso sin filtrar al RE puede causar que el demonio snmpd de Junos OS se bloquee y reinicie mediante el envío de un paquete SNMP creado. Los bloqueos repetidos del demonio snmpd pueden resultar en una condición de denegación de servicio parcial. Además, puede ser posible crear un paquete SNMP malicioso de manera que pueda resultar en la ejecución de código remota. SNMP está deshabilitado en Junos OS por defecto. Los dispositivos Junos OS con SNMP deshabilitado no están afectados por este problema. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema. NOTA: Este es un problema diferente a los Cisco CVE-2017-6736, CVE-2017-6737, y CVE-2017-6738. Las versiones afectadas son Juniper Networks Junos OS versión 12.1X46 anterior a 12.1X46-D67; versión 12.3X48 anterior a 12.3X48-D51, 12.3X48-D55; versión 13.3 anterior a 13.3R10-S2; versión 14.1 anterior a 14.1R2-S10, 14.1R8-S4, 14.1R9; versión 14.1X50 anterior a 14.1X50-D185; versión 14.1X53 anterior a 14.1X53-D122, 14.1X53-D44, 14.1X53-D50; versión 14.2 anterior a 14.2R4-S9, 14.2R7-S7, 14.2R8; versión 15.1 anterior a 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; versión 15.1X49 anterior a 15.1X49-D100, 15.1X49-D110; versión 15.1X53 anterior a 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; versión 16.1 anterior a 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; versión 16.2 anterior a 16.2R2, 16.2R3; versión 17.1 anterior a 17.1R1-S3, 17.1R2, 17.1R3; versión 17.2 anterior a 17.2R1-S1, 17.2R2; versión 17.2X75 anterior a 17.2X75-D30. Las versiones de Junos anteriores a 10.2 no están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD32D8A-7531-4691-B45D-9EACC69A23D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "76DFA52F-5B2E-47DA-9A8E-7D17A7413929"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "6B65EF51-ED97-4973-94C4-8F66C553F190"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "99A946CE-FFC7-4F16-82F4-795A6E5B84C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104A7E60-EDE5-43E6-82FA-93016265CF4F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d121:*:*:*:*:*:*",
            "matchCriteriaId" : "1E87AF59-23AC-4CE2-98AE-41849D643A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d44:*:*:*:*:*:*",
            "matchCriteriaId" : "81BEA7EA-FF95-425B-9245-21927E1F30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C0C9D6-7C78-40CA-984B-46F4223E5DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d230:*:*:*:*:*:*",
            "matchCriteriaId" : "3E364FE2-5FB1-4E14-8DF5-CA21F4BFBBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "1749B778-0E36-4539-8668-89F4460F251F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d57:*:*:*:*:*:*",
            "matchCriteriaId" : "188FED65-8A81-4BB0-B10B-8CA17B4F71CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d64:*:*:*:*:*:*",
            "matchCriteriaId" : "395CC50B-9042-4B12-9A1C-A8D5D571DC25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D571B57-4F4C-4232-9D3B-B2F7AAAB220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11BD757A-99BC-44E8-A95B-2CDDA638E469"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B47EC5-0276-4799-B536-12B33B5F003B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EB45C0-E3BD-4C0D-9E97-1DB726D66401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A3F26-3C6E-4B5A-9D40-E6ABC2BFA7AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99567",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038903",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10793",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2346",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with ALGs enabled. This issue was caused by the code change for PR 1182910 in Junos OS 14.1X55-D30, 14.1X55-D35, 14.2R7, 15.1R5, and 16.1R2. No other versions of Junos OS and no other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS on MX platforms running: 14.1X55 from 14.1X55-D30 to releases prior to 14.1X55-D35; 14.2R from 14.2R7 to releases prior to 14.2R7-S4, 14.2R8; 15.1R from 15.1R5 to releases prior to 15.1R5-S2, 15.1R6; 16.1R from 16.1R2 to releases prior to 16.1R3-S2, 16.1R4."
      }, {
        "lang" : "es",
        "value" : "Un servicio MS-MPC o MS-MIC de PIC puede bloquearse cuando se pasan paquetes fragmentados grandes por medio de una Application Layer Gateway (ALG). Los bloqueos repetidos del equipo de servicio pueden resultar en una condición de denegación de servicio extendida. El problema se puede visualizar solamente si el NAT o las reglas del Cortafuegos con estado se configuran con la ALG habilitada. Este problema fue causado por el cambio de código para PR 1182910 en Junos OS versiones 14.1X55-D30, 14.1X55-D35, 14.2R7, 15.1R5 y 16.1R2. Ninguna otra versión del sistema operativo Junos y ningún otro producto o plataforma de Juniper Networks están afectados por este problema. Las versiones afectadas son Juniper Networks Junos OS en plataformas MX que se ejecutan: versión 14.1X55 de 14.1X55-D30 a versiones anteriores a 14.1X55-D35; versión 14.2R de 14.2R7 a las versiones anteriores a 14.2R7-S4, 14.2R8; versión 15.1R de 15.1R5 a las versiones anteriores a 15.1R5-S2, 15.1R6; versión 16.1R de 16.1R2 a las versiones anteriores a 16.1R3-S2, 16.1R4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51AFC81-0CF9-49BD-89A7-2C5729A09250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x55:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "641131E9-6F1E-4EF4-A33E-EDCCCC3459C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDB4E0A-364C-4CC7-9E87-81BED027E106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "43522D77-C47C-40F7-B84F-927AB84556F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72952BFC-45B9-4379-8D9A-A10132CC34EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038895",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10794",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2347",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured. Repeated crashes of the rpd daemon can result in an extended denial of service condition for the device. The affected releases are Junos OS 12.3X48 prior to 12.3X48-D50, 12.3X48-D55; 13.3 prior to 13.3R10; 14.1 prior to 14.1R4-S13, 14.1R8-S3, 14.1R9; 14.1X53 prior to 14.1X53-D42, 14.1X53-D50; 14.2 prior to 14.2R4-S8, 14.2R7-S6, 14.2R8; 15.1 prior to 15.1F2-S14, 15.1F5-S7, 15.1F6-S4, 15.1F7, 15.1R4-S7, 15.1R5-S1, 15.1R6; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D105, 15.1X53-D47, 15.1X53-D62, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en el demonio rpd de Juniper Networks Junos OS, permite que un paquete de ping MPLS malformado bloquee el demonio rpd si MPLS OAM está configurado. Los bloqueos repetidos del demonio rpd pueden resultar en una condición de denegación de servicio extendida para el dispositivo. Las versiones afectadas son Junos OS versión 12.3X48 anterior a 12.3X48-D50, 12.3X48-D55; versión 13.3 anterior a 13.3R10; versión 14.1 anterior a 14.1R4-S13, 14.1R8-S3, 14.1R9; versión 14.1X53 anterior a 14.1X53-D42, 14.1X53-D50; versión 14.2 anterior a 14.2R4-S8, 14.2R7-S6, 14.2R8; versión 15.1 anterior a 15.1F2-S14, 15.1F5-S7, 15.1F6-S4, 15.1F7, 15.1R4-S7, 15.1R5-S1, 15.1R6; versión 15.1X49 anterior a 15.1X49-D100; 15.1X53 anterior a 15.1X53-D105, 15.1X53-D47, 15.1X53-D62, 15.1X53-D70; versión 16.1 anterior a 16.1R3-S3, 16.1R4. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "6B65EF51-ED97-4973-94C4-8F66C553F190"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "73406DE9-08FD-49A0-A56E-D2FFC478EB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "58BD3996-C235-4B3F-8BC8-69817A4B35C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "1749B778-0E36-4539-8668-89F4460F251F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d57:*:*:*:*:*:*",
            "matchCriteriaId" : "188FED65-8A81-4BB0-B10B-8CA17B4F71CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d64:*:*:*:*:*:*",
            "matchCriteriaId" : "395CC50B-9042-4B12-9A1C-A8D5D571DC25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100236",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038892",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10795",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2348",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51, 15.1X53-D60 on NFX, QFX, EX."
      }, {
        "lang" : "es",
        "value" : "El demonio jdhcpd mejorado de Juniper puede experimentar un uso elevado de la CPU, o bloquearse y reiniciar al recibir un paquete UDP IPv6 no válido. La utilización elevada de la CPU y los bloqueos repetidos del demonio jdhcpd pueden resultar en una denegación de servicio a medida que se interrumpe el servicio DHCP. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema. Las versiones afectadas son Juniper Networks Junos OS versión 14.1X53 anterior a 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 en QFX, EX, QFabric System; versión 15.1 anterior a 15.1F2-S18, 15.1R4 en todos los productos y plataformas; versión 15.1X49 anterior a 15.1X49-D80 en SRX; versión 15.1X53 anterior a 15.1X53-D51, 15.1X53-D60 en NFX, QFX, EX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d38:*:*:*:*:*:*",
            "matchCriteriaId" : "321F9E68-E55C-4EF0-B6CC-1D7BDA3966A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "1749B778-0E36-4539-8668-89F4460F251F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038899",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10800",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2349",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-07-17T13:18:24.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D50; 12.1X47 prior to 12.1X47-D30, 12.1X47-D35; 12.3X48 prior to 12.3X48-D20, 12.3X48-D30; 15.1X49 prior to 15.1X49-D20, 15.1X49-D30."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en la función IDP de Juniper Networks Junos OS en dispositivos de la serie SRX potencialmente permite a un usuario con acceso de inicio de sesión al dispositivo ejecutar comandos shell y elevar privilegios. Las versiones afectadas son Juniper Networks Junos OS versión 12.1X44 anterior a 12.1X44-D60; versión 12.1X46 anterior a 12.1X46-D50; versión 12.1X47 anterior a 12.1X47-D30, 12.1X47-D35; versión 12.3X48 anterior a 12.3X48-D20, 12.3X48-D30; versión 15.1X49 anterior a 15.1X49-D20, 15.1X49-D30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B307477-C5F2-4D98-AF4C-640D326164C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "AC405A12-112D-4C9D-90DA-6ED484109793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC42F2D-7593-4DBE-AE89-A6B78E7F9089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "731A6469-3DE0-491A-BCC5-7642FB347ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "D12A8119-3E59-4062-9A04-1F6EA48B78E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B33B80-3189-4412-BFE0-359E755AB07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E8F87E-DEB2-4849-ABB5-75A67CFD2D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE231CE-0D93-4293-8720-4CCEE2EA651E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "74253C79-C13F-4FBD-B173-8E87A62845DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "96831D1B-881B-4B18-A330-9E32A0D21148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x44:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "802A9024-3921-49CA-9B38-3BF8937687C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB3DE56-1B04-4A53-B4A4-93286FC98463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "181C0D30-4476-48EE-A4A4-3B2461F4AC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "63F559A2-2744-4771-9420-C70AA87496A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "040A6307-236E-4FAA-9A74-676F1DB0CF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "350A0F1E-1057-4A8E-AB0B-7615B3877858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE85C83-E6FC-42DE-9857-A1FFA3A1B82A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038898",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10801",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3080",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-07-17T13:18:26.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Las versiones 26.0.0.131 y anteriores de Adobe Flash Player, presentan una vulnerabilidad de omisión de seguridad relacionada con la API Flash utilizada por Internet Explorer. Una explotación con éxito conllevaría a la divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.131",
            "matchCriteriaId" : "0D0B7A7C-BCAE-47E5-942D-45434E6F5770"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.120",
            "matchCriteriaId" : "CDD1AB8B-529C-49C1-B7EA-28AB75C47B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.120",
            "matchCriteriaId" : "D4284037-6379-4D41-AFFA-CE2348981788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.131",
            "matchCriteriaId" : "C0BE88AA-85AC-41A3-B032-43BF5797A662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99519",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038845",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1731",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3099",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-07-17T13:18:26.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones 26.0.0.131 y anteriores de Adobe Flash Player, presentan una vulnerabilidad explotable de corrupción de memoria en el modelo de datos ráster de Action Script 3. Una explotación con éxito conllevaría a la ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.131",
            "matchCriteriaId" : "0D0B7A7C-BCAE-47E5-942D-45434E6F5770"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.120",
            "matchCriteriaId" : "CDD1AB8B-529C-49C1-B7EA-28AB75C47B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.120",
            "matchCriteriaId" : "D4284037-6379-4D41-AFFA-CE2348981788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.131",
            "matchCriteriaId" : "C0BE88AA-85AC-41A3-B032-43BF5797A662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99520",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038845",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1731",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3100",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-07-17T13:18:26.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure."
      }, {
        "lang" : "es",
        "value" : "Las versiones 26.0.0.131 y anteriores de Adobe Flash Player, presentan una vulnerabilidad explotable de corrupción de memoria en la clase BitmapData de Action Script 2. La explotación con éxito conllevaría a la divulgación de direcciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.131",
            "matchCriteriaId" : "0D0B7A7C-BCAE-47E5-942D-45434E6F5770"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.120",
            "matchCriteriaId" : "CDD1AB8B-529C-49C1-B7EA-28AB75C47B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.120",
            "matchCriteriaId" : "D4284037-6379-4D41-AFFA-CE2348981788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.131",
            "matchCriteriaId" : "C0BE88AA-85AC-41A3-B032-43BF5797A662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99523",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038845",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1731",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201707-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3101",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-07-17T13:18:26.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack."
      }, {
        "lang" : "es",
        "value" : "Adobe Connect versiones 9.6.1 y anteriores, presenta una vulnerabilidad de secuestro de cliqueo. Una explotación con éxito podría conllevar a un ataque de secuestro de cliqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.1",
            "matchCriteriaId" : "45A77A87-0D3C-48E0-A494-0BFA3A4FDE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99521",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038846",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3102",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-07-17T13:18:26.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack."
      }, {
        "lang" : "es",
        "value" : "Adobe Connect versiones 9.6.1 y anteriores, presenta una vulnerabilidad de tipo cross-site scripting reflejado. Una explotación con éxito podría conllevar a un ataque de tipo cross-site scripting reflejado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.1",
            "matchCriteriaId" : "45A77A87-0D3C-48E0-A494-0BFA3A4FDE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99517",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038846",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3103",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-07-17T13:18:26.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack."
      }, {
        "lang" : "es",
        "value" : "Adobe Connect versiones 9.6.1 y anteriores, presenta una vulnerabilidad de tipo cross-site scripting almacenado. Una explotación con éxito podría conllevar a un ataque de tipo cross-site scripting (XSS) almacenado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.1",
            "matchCriteriaId" : "45A77A87-0D3C-48E0-A494-0BFA3A4FDE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99518",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038846",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7663",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0."
      }, {
        "lang" : "es",
        "value" : "Tanto la sala de chat como el chat global, son vulnerables un ataque de tipo XSS en OpenMeetings versión 3.2.0. de Apache."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/aka2z2dq7icfw2p2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99577",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://markmail.org/message/aka2z2dq7icfw2p2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7664",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0."
      }, {
        "lang" : "es",
        "value" : "Los documentos XML cargados no fueron comprobados correctamente en OpenMeetings versión 3.1.0. de Apache."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/cwr552iapmhukb45",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99576",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://markmail.org/message/cwr552iapmhukb45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7666",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0, es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF), ataques de tipo cross-site scripting (XSS), secuestro de cliqueo y ataques basados en MIME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/fkesu4e5hhz5xdbg",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://markmail.org/message/fkesu4e5hhz5xdbg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7673",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0.0,  utiliza un almacenamiento criptográfico no muy fuerte, el captcha no es usado en el registro y olvida los cuadros de diálogos de contraseñas, y los formularios de identificación carecen de protección de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/3hshl26omwjo6c5i",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99587",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://markmail.org/message/3hshl26omwjo6c5i",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7680",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0.0, tiene un archivo crossdomain.xml demasiado permisivo. Esto permite que el contenido flash sea cargado desde dominios no confiables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/whhibri7ervbjvda",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://markmail.org/message/whhibri7ervbjvda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7681",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0.0,  es vulnerable a la inyección SQL. Esto permite a usuarios identificados modificar la estructura de la consulta existente y filtrar la estructura de otras consultas que están siendo realizadas por la aplicación en el back-end."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/j774dp5ro5xmkmg6",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://markmail.org/message/j774dp5ro5xmkmg6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7682",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted areas."
      }, {
        "lang" : "es",
        "value" : "OpenMeetings versión 3.2.0 de Apache, es vulnerable a ataques de manipulación de parámetros, como resultado el atacante tiene acceso a áreas restringidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/dbrbvf5k343ulivf",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://markmail.org/message/dbrbvf5k343ulivf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7683",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0, muestra la versión y el seguimiento detallado de la pila de errores de Tomcat, que no es seguro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/hint6fp66lijqdvu",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://markmail.org/message/hint6fp66lijqdvu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7684",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:29.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0, no comprueba el contenido de los archivos que se están cargando. Un atacante puede causar una denegación de servicio mediante la carga de múltiples archivos grandes en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/v6dpmrdd6cgg66up",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99584",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://markmail.org/message/v6dpmrdd6cgg66up",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7685",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:30.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0, responde a los siguientes métodos HTTP no seguros: PUT, DELETE, HEAD y PATCH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/uxk4bpq35svnyjhb",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99592",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://markmail.org/message/uxk4bpq35svnyjhb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7688",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-17T13:18:30.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OpenMeetings 1.0.0 updates user password in insecure manner."
      }, {
        "lang" : "es",
        "value" : "Apache OpenMeetings versión 1.0.0, actualiza la contraseña de usuario de manera no confiable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B6167B-E822-4146-87F2-E2769DC85F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDA54EE-9AE1-4551-8C24-D2077515029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB137AFF-1BB8-4FFC-9247-376718AAFEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B4E9B-D707-4B96-93B0-7E5F19C8C9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44AAC6C-13E1-423B-BB4C-4C92B763DE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268D5F6C-F1E8-400B-8D79-A79A9481DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57895052-DBEF-4CD4-B2B8-C6EBB7A607C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80F112-8C3B-4D79-86A6-C7B3396C4DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC28AE2-7EDD-4554-B418-7C4AD5D6E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2711-23CA-4FA5-8868-664A839F7EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA799EE-CDF8-41C6-A3CF-5FC47ED0920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D13854-BD10-4404-89A7-F6D398680628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC465AB-5CA6-4C97-8544-59D3236A7123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCC94CB-EBC7-46D2-BD9E-DB043A4CD5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC811824-EA8F-49F6-B732-10731A1BC0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFF29DC-46BA-4505-A921-42C783BC4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085A80B3-B880-428D-AF1D-BED61C31E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46036494-F97D-4C02-A630-102D9E7DE2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C208B6-E86A-4F73-B078-BA47BA1B162D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331EDEB7-D823-43C6-9D8B-E872F921A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D44A5F-C7BD-4CC2-9065-179FA92301C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://markmail.org/message/ctsiiqtekzsun6fi",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99586",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://markmail.org/message/ctsiiqtekzsun6fi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:30.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call."
      }, {
        "lang" : "es",
        "value" : "El archivo cairo-truetype-subset.c en cairo versión 1.15.6 y anteriores, permite que los atacantes remotos causen una denegación de servicio (lectura fuera de límites) debido al manejo inapropiado de una llamada malloc(0) inesperada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cairographics:cairo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.6",
            "matchCriteriaId" : "8F51C916-C23D-4C37-AA64-FD21A28E4998"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101547",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T13:18:30.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705."
      }, {
        "lang" : "es",
        "value" : "La función try_read_command en el archivo memcached.c en memcached anterior a versión 1.4.39, permite a los atacantes remotos causar una denegación de servicio (fallo de segmentación) por medio de una petición para agregar y configurar una clave, lo que hace una comparación entre un int firmado y sin firmar y activa una lectura excesiva del búfer en la región heap de la memoria. NOTA: esta vulnerabilidad existe debido a una solución incompleta para el CVE-2016-8705."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.38",
            "matchCriteriaId" : "9BBF21B9-EC29-439E-B875-913CC487A8C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/memcached/memcached/wiki/ReleaseNotes1439",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/message/raw?msg=memcached/ubGWrkmrr4E/nrm1SeVJAQAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3588-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/memcached/memcached/wiki/ReleaseNotes1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/message/raw?msg=memcached/ubGWrkmrr4E/nrm1SeVJAQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3588-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8000",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-17T14:29:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA Authentication Manager database. The profile name could include a crafted script (with an XSS payload) that could be executed when viewing or editing the assigned token profile in the token by another administrator's browser session."
      }, {
        "lang" : "es",
        "value" : "En RSA Authentication Manager versión 8.2 SP1 y anteriores de EMC, un Administrador de la Consola de Seguridad de RSA malicioso podría crear un perfil de token y almacenar el nombre del perfil en la base de datos de RSA Authentication Manager. El nombre del perfil podría incluir un script creado (con una carga de tipo XSS) que podría ser ejecutada al visualizar o editar el perfil del token asignado en el token por la sesión del navegador de otro administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "8A7D03E1-0EEF-4E76-ADEF-39A302C6DD13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/25",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99572",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038878",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8004",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-17T14:29:01.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) allow an application administrator to upload arbitrary files that may potentially contain a malicious code. The malicious file could be then executed on the affected system with the privileges of the user the application is running under."
      }, {
        "lang" : "es",
        "value" : "Los productos RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance y RSA IMG de EMC (RSA Identity Governance and Lifecycle versiones 7.0.1, 7.0.2, todos los niveles de parches ; RSA Via Lifecycle and Governance versión 7.0, todos los niveles de parches; RSA Identity Management and Governance (RSA IMG) versiones 6.9.1, todos los niveles de parches), permiten a un administrador de aplicación cargar archivos arbitrarios que potencialmente contengan un código malicioso. El archivo malicioso podría ser luego ejecutado en el sistema afectado con los privilegios del usuario bajo el que se ejecuta la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD65ECE7-AEC0-4996-AA77-A1394CD10E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66E2A38-220A-4417-882A-3D12B98F6F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ED5260-0321-47F7-9637-8E5A10BACCB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A348908-0266-45AA-9D4E-88CAA301B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5288389E-1322-4441-A295-045E38B22D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB9C02F-D12B-4CCF-B4F8-3979833FFBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784E8C-B027-446D-92E3-E1FF3CA90BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7911EFFA-376A-4BF2-8FF4-3F773820DF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E085B6-20D0-44D8-BE5F-A93095619076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F28360-E854-459B-810E-116000656DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB4F747-283D-4C55-9AC1-2BAE838A53E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF9632-E0A8-44F7-8995-93DB5688629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F37E7E2-A7C7-4556-9701-F53EF8CD9AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC40E49-B24F-48E2-A952-B368F1821AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DADC80-FB42-466A-9411-C1591570CFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D706444-C2CC-4AA6-83B9-1D2145226B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E913D0-CF21-431F-800D-DFC30B3C5485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E328640-2653-45FB-943B-5694813C380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA58360-4AC1-489D-BAD1-D25B162555BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819D0E33-9C21-4482-9F5C-8F7E3261D7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF97A4FA-A118-4603-B0CB-B8DC78D8AE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E086173-5575-4CDE-A289-98E16CFD2E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FD8890-0E9F-46AD-9414-4B7B32102786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A52C830-8381-4182-9BB0-4DC4EFD482CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB75A283-EA87-4937-89CB-499AA9E1C6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB5B2A0-FAC9-4BD2-845D-590BC2D101B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD73332D-C5F1-414A-9849-071F52A635AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015FEE26-3158-4C89-A7E0-7ABAE87AE769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73001754-E19F-40DF-95EF-7BE802365DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8248E-6DF0-4D83-B048-11168A74AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED2552E-20B5-4A96-AB45-EDE8C9CDD346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB09176-507F-4A9E-A316-561BE6D7725F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4765B8C0-A9C2-4D99-9D9B-9FEB8D9A8482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D8C9C5-613A-4B7F-9654-1D11C08F166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F5A118-16A6-42A7-A804-F0974E30AC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964AEB79-478C-44A7-B17A-787ED1EE5CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBE6361-CD6C-4B18-9D99-849A67081A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/24",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99591",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038877",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8005",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-17T14:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) are affected by multiple stored cross-site scripting vulnerabilities. Remote authenticated malicious users could potentially inject arbitrary HTML code to the application."
      }, {
        "lang" : "es",
        "value" : "Los productos RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance y RSA IMG de EMC (RSA Identity Governance and Lifecycle versiones 7.0.1, 7.0.2, todos los niveles de parches ; RSA Via Lifecycle and Governance versión 7.0, todos los niveles de parches; RSA Identity Management and Governance (RSA IMG) versiones 6.9.1, todos los niveles de parches), están afectadas por múltiples vulnerabilidades de tipo cross-site scripting almacenadas. Los usuarios maliciosos autenticados remotos podrían inyectar código HTML arbitrario a la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD65ECE7-AEC0-4996-AA77-A1394CD10E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66E2A38-220A-4417-882A-3D12B98F6F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ED5260-0321-47F7-9637-8E5A10BACCB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A348908-0266-45AA-9D4E-88CAA301B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5288389E-1322-4441-A295-045E38B22D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB9C02F-D12B-4CCF-B4F8-3979833FFBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784E8C-B027-446D-92E3-E1FF3CA90BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7911EFFA-376A-4BF2-8FF4-3F773820DF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E085B6-20D0-44D8-BE5F-A93095619076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F28360-E854-459B-810E-116000656DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB4F747-283D-4C55-9AC1-2BAE838A53E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADF9632-E0A8-44F7-8995-93DB5688629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F37E7E2-A7C7-4556-9701-F53EF8CD9AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC40E49-B24F-48E2-A952-B368F1821AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DADC80-FB42-466A-9411-C1591570CFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D706444-C2CC-4AA6-83B9-1D2145226B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E913D0-CF21-431F-800D-DFC30B3C5485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E328640-2653-45FB-943B-5694813C380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA58360-4AC1-489D-BAD1-D25B162555BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819D0E33-9C21-4482-9F5C-8F7E3261D7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF97A4FA-A118-4603-B0CB-B8DC78D8AE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E086173-5575-4CDE-A289-98E16CFD2E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FD8890-0E9F-46AD-9414-4B7B32102786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A52C830-8381-4182-9BB0-4DC4EFD482CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB75A283-EA87-4937-89CB-499AA9E1C6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB5B2A0-FAC9-4BD2-845D-590BC2D101B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD73332D-C5F1-414A-9849-071F52A635AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015FEE26-3158-4C89-A7E0-7ABAE87AE769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73001754-E19F-40DF-95EF-7BE802365DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8248E-6DF0-4D83-B048-11168A74AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED2552E-20B5-4A96-AB45-EDE8C9CDD346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB09176-507F-4A9E-A316-561BE6D7725F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4765B8C0-A9C2-4D99-9D9B-9FEB8D9A8482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D8C9C5-613A-4B7F-9654-1D11C08F166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F5A118-16A6-42A7-A804-F0974E30AC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964AEB79-478C-44A7-B17A-787ED1EE5CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBE6361-CD6C-4B18-9D99-849A67081A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/24",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99591",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038877",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8006",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-17T14:29:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources."
      }, {
        "lang" : "es",
        "value" : "En RSA Authentication Manager versión 8.2 SP1 Patch 1 y anteriores de EMC, un usuario malicioso que inició sesión en la Consola de Autoservicio de RSA Authentication Manager como un usuario destino puede usar un ataque de fuerza bruta para intentar identificar el PIN de ese usuario. El usuario malicioso podría potencialmente restablecer el PIN comprometido para afectar la capacidad de la víctima para obtener acceso a los recursos protegidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "8A7D03E1-0EEF-4E76-ADEF-39A302C6DD13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/23",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99554",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038879",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8011",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-17T14:29:01.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R para SAS Solution Packs (EMC ViPR SRM anterior a versión 4.1, EMC Storage M&R anterior a versión 4.1, EMC VNX M&R todas las versiones, EMC M&R (Watch4Net) para todas las versiones de SAS Solution Packs), contienen cuentas no documentadas con contraseñas por defecto para los componentes WebService Gateway y RMI JMX. Un atacante remoto con conocimiento de la contraseña por defecto puede usar estas cuentas para ejecutar servicios web arbitrarios y llamadas a procedimientos remotos sobre el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_m\\&r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A85D4E-3852-4638-9CD0-EBA9544B950F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_storage_monitoring_and_reporting:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D171B347-D3A0-4067-B92F-60FE4DC64F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vipr_srm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "15CDF8E3-4681-48E5-A0D3-CF40E301D23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vnx_monitoring_and_reporting:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE16D5AE-ABC8-4210-A54C-67F2162F64E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/21",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99555",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038905",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8034",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-17T14:29:01.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do not validate the issuer on JSON Web Tokens (JWTs) from UAA. With certain multi-zone UAA configurations, zone administrators are able to escalate their privileges."
      }, {
        "lang" : "es",
        "value" : "El controlador y el enrutador de nube en Cloud Foundry (publicación de CAPI versiones de capi anteriores a v1.32.0, publicación de enrutamiento versión anterior a v0.159.0, publicación de CF versión anterior a v267), no comprueban el emisor en los Tokens Web JSON (JWTs) de la UAA. Con determinadas configuraciones UAA multizona, los administradores de zona pueden escalar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-565"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.31.0",
            "matchCriteriaId" : "74ADCD1C-5F30-45D1-9CA5-343462A54FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "266",
            "matchCriteriaId" : "2DA8FC23-944E-4157-A830-ABF07AE0D575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:routing-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.158.0",
            "matchCriteriaId" : "C1E2500E-D912-4E0D-A1EB-9BDB7CFBB869"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8034/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T15:29:00.230",
      "lastModified" : "2023-11-07T02:38:08.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T16:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application crash) via malformed compressed data."
      }, {
        "lang" : "es",
        "value" : "La función shoco_decompress en la API en shoco hasta el 17-07-2017, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer y bloqueo de aplicación) por medio de datos comprimidos malformados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shoco_project:shoco:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-07-17",
            "matchCriteriaId" : "0368DB80-6526-43B2-A62E-B2965FD1CFEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ed-von-Schleck/shoco/issues/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ed-von-Schleck/shoco/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows \"Read / write overflow in make_secret()\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-201 en FreeRADIUS versión 2.x anterior a 2.2.10 y versión 3.x anterior a 3.0.15, permite un \"Read / write overflow in make_secret()\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.2.10",
            "matchCriteriaId" : "01D07DE7-862C-46DB-94AD-50A74DED1581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.15",
            "matchCriteriaId" : "AAEC9608-EA95-46FD-B370-A2A54821B7B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21690BAC-2129-4A33-9B48-1F3BF30072A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99893",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows \"Write overflow in rad_coalesce()\" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-202 en FreeRADIUS versión 2.x anterior a 2.2.10, permite un \"Write overflow in rad_coalesce()\" - esto permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) o posiblemente ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F041B7-4DDB-406E-8A89-D2DDABD4AF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA3BD5F-8CB9-4907-92C5-7A4E884CE1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7056CF-FF7C-4175-907A-A47984A82CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A43D5-03CA-4AAA-98A8-4EC86EC3EACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB64CF-D48E-4E3E-A1E8-B6AE330A6C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BF923C-F7CD-4232-8613-B1F09C7B9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A113B67-B9B6-421C-9EC9-E1FB462A4214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6518E4DA-9531-4135-8462-A9E3BDD7AE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92B1F7-8139-4D5A-9461-0C7314BCCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAEB64-0676-4C18-8255-DACDA612188E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7A434-49DC-4005-9161-F2B49559621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A54D59A-B832-4EE3-A8D6-A85EC17C268A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D494932F-F639-44BE-B15C-7F07A67B0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D45784-C53B-4A11-B1B3-BC68B514002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969979B-2852-453D-AF48-A462448D4C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E56E3E2-9142-47F5-B53E-61ACE4FA9A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0CFEA6-1AC0-41AA-BEF0-16FE1A933758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908DA549-0EE5-4B85-961F-1C67210F6AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B421C2D-290B-4439-BED6-4C0AEBAF484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09685697-9D74-4ECA-ACB0-DF08A1442DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D536C78-5619-4B01-A838-EB348B6D947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3482E5-E818-40CE-A061-4469F3CAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595550B-8820-471A-9D23-C40A848B73FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D7F150-6B47-44B8-82A9-5E03AC83B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5600607D-209E-4A7B-AC82-657638232D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C236E624-8DE0-46CD-A9F1-951D1CDD9F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11403C9E-7217-43AF-9BF4-371FA2623C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A2EC8C-840A-4DB2-8038-7E0E2D704EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Memory leak in decode_tlv()\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-203 en FreeRADIUS versión 2.x anterior a 2.2.10, permite una \"DHCP - Memory leak in decode_tlv()\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F041B7-4DDB-406E-8A89-D2DDABD4AF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA3BD5F-8CB9-4907-92C5-7A4E884CE1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7056CF-FF7C-4175-907A-A47984A82CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A43D5-03CA-4AAA-98A8-4EC86EC3EACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB64CF-D48E-4E3E-A1E8-B6AE330A6C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BF923C-F7CD-4232-8613-B1F09C7B9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A113B67-B9B6-421C-9EC9-E1FB462A4214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6518E4DA-9531-4135-8462-A9E3BDD7AE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92B1F7-8139-4D5A-9461-0C7314BCCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAEB64-0676-4C18-8255-DACDA612188E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7A434-49DC-4005-9161-F2B49559621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A54D59A-B832-4EE3-A8D6-A85EC17C268A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D494932F-F639-44BE-B15C-7F07A67B0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D45784-C53B-4A11-B1B3-BC68B514002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969979B-2852-453D-AF48-A462448D4C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E56E3E2-9142-47F5-B53E-61ACE4FA9A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0CFEA6-1AC0-41AA-BEF0-16FE1A933758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908DA549-0EE5-4B85-961F-1C67210F6AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B421C2D-290B-4439-BED6-4C0AEBAF484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09685697-9D74-4ECA-ACB0-DF08A1442DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D536C78-5619-4B01-A838-EB348B6D947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3482E5-E818-40CE-A061-4469F3CAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595550B-8820-471A-9D23-C40A848B73FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D7F150-6B47-44B8-82A9-5E03AC83B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5600607D-209E-4A7B-AC82-657638232D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C236E624-8DE0-46CD-A9F1-951D1CDD9F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11403C9E-7217-43AF-9BF4-371FA2623C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A2EC8C-840A-4DB2-8038-7E0E2D704EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Memory leak in fr_dhcp_decode()\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-204 en FreeRADIUS versión 2.x anterior a 2.2.10, permite una \"DHCP - Memory leak in fr_dhcp_decode()\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F041B7-4DDB-406E-8A89-D2DDABD4AF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA3BD5F-8CB9-4907-92C5-7A4E884CE1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7056CF-FF7C-4175-907A-A47984A82CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A43D5-03CA-4AAA-98A8-4EC86EC3EACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB64CF-D48E-4E3E-A1E8-B6AE330A6C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BF923C-F7CD-4232-8613-B1F09C7B9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A113B67-B9B6-421C-9EC9-E1FB462A4214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6518E4DA-9531-4135-8462-A9E3BDD7AE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92B1F7-8139-4D5A-9461-0C7314BCCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAEB64-0676-4C18-8255-DACDA612188E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7A434-49DC-4005-9161-F2B49559621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A54D59A-B832-4EE3-A8D6-A85EC17C268A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D494932F-F639-44BE-B15C-7F07A67B0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D45784-C53B-4A11-B1B3-BC68B514002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969979B-2852-453D-AF48-A462448D4C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E56E3E2-9142-47F5-B53E-61ACE4FA9A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0CFEA6-1AC0-41AA-BEF0-16FE1A933758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908DA549-0EE5-4B85-961F-1C67210F6AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B421C2D-290B-4439-BED6-4C0AEBAF484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09685697-9D74-4ECA-ACB0-DF08A1442DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D536C78-5619-4B01-A838-EB348B6D947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3482E5-E818-40CE-A061-4469F3CAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595550B-8820-471A-9D23-C40A848B73FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D7F150-6B47-44B8-82A9-5E03AC83B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5600607D-209E-4A7B-AC82-657638232D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C236E624-8DE0-46CD-A9F1-951D1CDD9F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11403C9E-7217-43AF-9BF4-371FA2623C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A2EC8C-840A-4DB2-8038-7E0E2D704EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Buffer over-read in fr_dhcp_decode_options()\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-205 en FreeRADIUS versión 2.x anterior a 2.2.10, permite una \"DHCP - Buffer over-read in fr_dhcp_decode_options()\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F041B7-4DDB-406E-8A89-D2DDABD4AF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA3BD5F-8CB9-4907-92C5-7A4E884CE1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7056CF-FF7C-4175-907A-A47984A82CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A43D5-03CA-4AAA-98A8-4EC86EC3EACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB64CF-D48E-4E3E-A1E8-B6AE330A6C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BF923C-F7CD-4232-8613-B1F09C7B9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A113B67-B9B6-421C-9EC9-E1FB462A4214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6518E4DA-9531-4135-8462-A9E3BDD7AE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92B1F7-8139-4D5A-9461-0C7314BCCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAEB64-0676-4C18-8255-DACDA612188E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7A434-49DC-4005-9161-F2B49559621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A54D59A-B832-4EE3-A8D6-A85EC17C268A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D494932F-F639-44BE-B15C-7F07A67B0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D45784-C53B-4A11-B1B3-BC68B514002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969979B-2852-453D-AF48-A462448D4C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E56E3E2-9142-47F5-B53E-61ACE4FA9A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0CFEA6-1AC0-41AA-BEF0-16FE1A933758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908DA549-0EE5-4B85-961F-1C67210F6AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B421C2D-290B-4439-BED6-4C0AEBAF484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09685697-9D74-4ECA-ACB0-DF08A1442DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D536C78-5619-4B01-A838-EB348B6D947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3482E5-E818-40CE-A061-4469F3CAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595550B-8820-471A-9D23-C40A848B73FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D7F150-6B47-44B8-82A9-5E03AC83B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5600607D-209E-4A7B-AC82-657638232D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C236E624-8DE0-46CD-A9F1-951D1CDD9F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11403C9E-7217-43AF-9BF4-371FA2623C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A2EC8C-840A-4DB2-8038-7E0E2D704EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows \"DHCP - Read overflow when decoding option 63\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-206 en FreeRADIUS versión 2.x anterior a 2.2.10 y versión 3.x anterior a 3.0.15, permite una \"DHCP - Read overflow when decoding option 63\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F041B7-4DDB-406E-8A89-D2DDABD4AF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA3BD5F-8CB9-4907-92C5-7A4E884CE1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7056CF-FF7C-4175-907A-A47984A82CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A43D5-03CA-4AAA-98A8-4EC86EC3EACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB64CF-D48E-4E3E-A1E8-B6AE330A6C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BF923C-F7CD-4232-8613-B1F09C7B9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A113B67-B9B6-421C-9EC9-E1FB462A4214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6518E4DA-9531-4135-8462-A9E3BDD7AE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B92B1F7-8139-4D5A-9461-0C7314BCCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAEB64-0676-4C18-8255-DACDA612188E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7A434-49DC-4005-9161-F2B49559621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A54D59A-B832-4EE3-A8D6-A85EC17C268A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D494932F-F639-44BE-B15C-7F07A67B0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D45784-C53B-4A11-B1B3-BC68B514002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969979B-2852-453D-AF48-A462448D4C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E56E3E2-9142-47F5-B53E-61ACE4FA9A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0CFEA6-1AC0-41AA-BEF0-16FE1A933758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908DA549-0EE5-4B85-961F-1C67210F6AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B421C2D-290B-4439-BED6-4C0AEBAF484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09685697-9D74-4ECA-ACB0-DF08A1442DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D536C78-5619-4B01-A838-EB348B6D947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3482E5-E818-40CE-A061-4469F3CAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595550B-8820-471A-9D23-C40A848B73FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D7F150-6B47-44B8-82A9-5E03AC83B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5600607D-209E-4A7B-AC82-657638232D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C236E624-8DE0-46CD-A9F1-951D1CDD9F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11403C9E-7217-43AF-9BF4-371FA2623C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A2EC8C-840A-4DB2-8038-7E0E2D704EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D7673-6BA7-4113-86E1-00F9A60C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B5D50-C251-4569-9D2C-49FB64702646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D867F-7147-4C97-927B-C10404CC2985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C129A8-59C9-4780-8454-4EB112DF0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C228DD-0EB3-4348-8D7A-D17A59E92013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2400422C-8E52-4946-BE83-AA7167F0F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76048BE7-ABC9-4177-A6A6-03CD267708A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F2F28A-E975-469F-8720-ACAD38230A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D08EA5-E832-40D7-9530-079C400B050E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50B666B-B423-4182-BD9A-8893B66848AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows \"Write overflow in data2vp_wimax()\" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-301 en FreeRADIUS versión 3.x anterior a 3.0.15, permite un \"Write overflow in data2vp_wimax()\" - esto permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) o posiblemente ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D7673-6BA7-4113-86E1-00F9A60C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B5D50-C251-4569-9D2C-49FB64702646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D867F-7147-4C97-927B-C10404CC2985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C129A8-59C9-4780-8454-4EB112DF0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C228DD-0EB3-4348-8D7A-D17A59E92013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2400422C-8E52-4946-BE83-AA7167F0F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76048BE7-ABC9-4177-A6A6-03CD267708A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F2F28A-E975-469F-8720-ACAD38230A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D08EA5-E832-40D7-9530-079C400B050E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50B666B-B423-4182-BD9A-8893B66848AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows \"Infinite loop and memory exhaustion with 'concat' attributes\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-302 en FreeRADIUS versión 3.x anterior a 3.0.15, permite un \"Infinite loop and memory exhaustion with 'concat' attributes\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D7673-6BA7-4113-86E1-00F9A60C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B5D50-C251-4569-9D2C-49FB64702646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D867F-7147-4C97-927B-C10404CC2985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C129A8-59C9-4780-8454-4EB112DF0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C228DD-0EB3-4348-8D7A-D17A59E92013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2400422C-8E52-4946-BE83-AA7167F0F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76048BE7-ABC9-4177-A6A6-03CD267708A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F2F28A-E975-469F-8720-ACAD38230A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D08EA5-E832-40D7-9530-079C400B050E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50B666B-B423-4182-BD9A-8893B66848AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Infinite read in dhcp_attr2vp()\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-303 en FreeRADIUS versión 3.x anterior a 3.0.15, permite una \"DHCP - Infinite read in dhcp_attr2vp()\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D7673-6BA7-4113-86E1-00F9A60C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B5D50-C251-4569-9D2C-49FB64702646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D867F-7147-4C97-927B-C10404CC2985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C129A8-59C9-4780-8454-4EB112DF0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C228DD-0EB3-4348-8D7A-D17A59E92013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2400422C-8E52-4946-BE83-AA7167F0F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76048BE7-ABC9-4177-A6A6-03CD267708A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F2F28A-E975-469F-8720-ACAD38230A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D08EA5-E832-40D7-9530-079C400B050E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50B666B-B423-4182-BD9A-8893B66848AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Buffer over-read in fr_dhcp_decode_suboptions()\" and a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un problema FR-GV-304 en FreeRADIUS versión 3.x anterior a 3.0.15, permite una \"DHCP - Buffer over-read in fr_dhcp_decode_suboptions()\" y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D7673-6BA7-4113-86E1-00F9A60C8796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B5D50-C251-4569-9D2C-49FB64702646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D867F-7147-4C97-927B-C10404CC2985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C129A8-59C9-4780-8454-4EB112DF0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C228DD-0EB3-4348-8D7A-D17A59E92013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2400422C-8E52-4946-BE83-AA7167F0F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76048BE7-ABC9-4177-A6A6-03CD267708A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F2F28A-E975-469F-8720-ACAD38230A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D08EA5-E832-40D7-9530-079C400B050E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50B666B-B423-4182-BD9A-8893B66848AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freeradius.org/security/fuzzer-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inteno routers have a JUCI ACL misconfiguration that allows the \"user\" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the \"user\" password might be \"user\" or might match the Wi-Fi key.)"
      }, {
        "lang" : "es",
        "value" : "Los enrutadores Inteno tienen una configuración inapropiada de la ACL JUCI, que permite a la cuenta \"user\" leer archivos, escribir en archivos y agregar claves SSH root por medio de comandos JSON en ubus. (La explotación algunas veces es fácil porque la contraseña de \"user\" puede ser \"user\" o puede coincidir con la clave de Wi-Fi)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intenogroup:inteno_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC291C7C-0D3F-4D00-A8C9-7B0A437FCA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intenogroup:inteno_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62DBDCB-B236-427F-A1E4-C44C8D7296C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://neonsea.uk/blog/2017/07/17/cve-2017-11361.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://neonsea.uk/blog/2017/07/17/cve-2017-11361.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moodle 3.x has user fullname disclosure on the user preferences page."
      }, {
        "lang" : "es",
        "value" : "Moodle versión 3.x, presenta divulgación de nombre completo del usuario en la página de preferencias del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78B75B-49B5-472B-A999-62447327BDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A40773-16F5-452F-9820-A22EDAE5C3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAD7AF3-F18E-421C-818B-A015EC2432B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9586F5C5-45A6-4F7F-A381-075B210E2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C32BF18-8D36-47D0-AEEE-36A0962635E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99606",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=355554",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=355554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.3, the course overview block reveals activities in hidden courses."
      }, {
        "lang" : "es",
        "value" : "En Moodle versión 3.3, el bloque de vista general del curso revela actividades en cursos ocultos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9586F5C5-45A6-4F7F-A381-075B210E2583"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99618",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=355555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=355555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T17:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.x, course creators are able to change system default settings for courses."
      }, {
        "lang" : "es",
        "value" : "En Moodle versión 3.x, los creadores de cursos son capaces de cambiar la configuración por defecto del sistema para los cursos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78B75B-49B5-472B-A999-62447327BDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A40773-16F5-452F-9820-A22EDAE5C3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAD7AF3-F18E-421C-818B-A015EC2432B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9586F5C5-45A6-4F7F-A381-075B210E2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C32BF18-8D36-47D0-AEEE-36A0962635E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=355556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=355556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T19:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a \"Content-Type: image/svg+xml\" header."
      }, {
        "lang" : "es",
        "value" : "Bolt CMS versión 3.2.14, permite una vulnerabilidad de tipo XSS almacenado mediante la carga de un documento SVG con un encabezado \"Content-Type: image/svg+xml\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boltcms:bolt:3.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272CE78-1195-4D51-B8EF-B63C6400AB51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T19:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry."
      }, {
        "lang" : "es",
        "value" : "Bolt CMS versión 3.2.14, permite una vulnerabilidad de tipo XSS almacenado mediante una entrada de texto, como fue mostrado mediante el campo Title de una Entrada Nueva."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boltcms:bolt:3.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272CE78-1195-4D51-B8EF-B63C6400AB51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la función ape_decode_frame en el archivo libavcodec/apedec.c en FFmpeg versión 2.4 hasta la versión 3.3.2, permite a los atacantes remotos causar una denegación de servicio (acceso fuera de la matriz y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo APE creado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.2",
            "matchCriteriaId" : "7950917A-647C-431B-A872-67E914C135A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/96349da5ec8eda9f0368446e557fe0c8ba0e66b7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/ba4beaf6149f7241c8bd85fe853318c2f6837ad0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/96349da5ec8eda9f0368446e557fe0c8ba0e66b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/ba4beaf6149f7241c8bd85fe853318c2f6837ad0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3742",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-07-17T19:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to the user's contents could connect to the Connect2 hotspot and see the contents of files while they are being transferred between the two systems."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Lenovo Connect2 anteriores a 4.2.5.4885 para Windows y versión 4.2.5.3071 para Android, cuando una conexión ad-hoc se realiza  entre dos sistemas con el fin de compartir archivos, la contraseña de esta conexión ad-hoc será almacenada en una ubicación legible por el usuario. Un atacante con acceso de lectura al contenido del usuario podría conectarse al punto de acceso Connect2 y visualizar el contenido de los archivos mientras estos son transferidos entre los dos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:connect2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.5",
            "matchCriteriaId" : "3D397211-B783-40B4-83C7-C01825D6C112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:connect2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.5",
            "matchCriteriaId" : "3D397211-B783-40B4-83C7-C01825D6C112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14398",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3754",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-07-17T19:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code."
      }, {
        "lang" : "es",
        "value" : "Algunos sistemas notebook de la marca Lenovo no tienen protecciones de escritura configuradas apropiadamente en el BIOS del sistema. Esto podría permitir a un atacante con acceso físico o administrativo a un sistema para ser capaz de flashear el BIOS con una imagen arbitraria y potencialmente ejecutar código BIOS malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D66F0D-6C60-4CF6-A509-C6FAC2E22F95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:710s-13ikb\\/xiaoxin_air_13ikb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF203824-4977-4970-93FA-311FC0726DE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:710s-13isk\\/xiaoxin_air_13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA559DCA-5395-4205-916B-62A94E078788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:k21-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56C7CE7-D4A0-4179-B65D-EA8EDA2F7299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:k22-80\\/lenovo_v720-12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6817BA2D-2383-428F-941D-BCAC7A476818"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:k41-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC9595C-D1DA-4769-9401-1D2430CE69CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:lenovo_ideapad_110-14ast:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63C6054-D0EE-4AED-B829-A2F676E89D86"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:lenovo_ideapad_110-15ast:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3F252A-E00B-40AA-8F02-7987D2102D4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:lenovo_ideapad_320-14ast:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD8431A-FFF2-4519-BCC3-80A8B76CC80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:lenovo_ideapad_320-15ast:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21481398-B4A5-4C7F-BA4F-A52D6C13756B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:lenovo_xiaoxin_rui7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BA3B3C-0E21-4877-8B0D-11E5FEF12384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:miix_710-12ikb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE26E1F-D6B8-4ECD-86DE-D492BBC1FE64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:miix_720-12ikb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E7697B-53B4-4A2A-B285-0620962A0E4A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:notebook_320-17ast:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719BD6FE-DB95-4096-9829-33536AD077C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rescuer_e520-15ikb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC1D30D-C105-4BAF-9085-7E5C8D253A23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:v110-14iap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAED167E-15AF-4B45-952C-113726BCFAE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:v110-15iap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972B1468-D71C-449C-B392-4A62BA9BF835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:v110-15ikb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423385C-5562-4578-9602-C85ED87CB530"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:v110-15isk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41B17-C208-4A3A-BCC5-F7D4046A9249"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yoga_710-11ikb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A573B96D-E21C-4869-A6CE-FDB3926875CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15084",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9639",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-07-17T19:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memory buffer), which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Un problema fue descubierto en Fuji Electric V-Server en su versión 3.3.22.0 y anteriores. Una vulnerabilidad de corrupción de memoria ha sido identificada (También conocido como restricción de operaciones inapropiada dentro de los límites del buffer de la memoria), lo que podría permitir ejecución de código remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.22.0",
            "matchCriteriaId" : "6D77A1EB-BE7D-45FA-AF45-BC5F5286B573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99544",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6736",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.213",
      "lastModified" : "2025-10-22T00:16:08.243",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\r\n\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\r\n\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\r\n\r   There are workarounds that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El subsistema Simple Network Management Protocol (SNMP) de Cisco IOS versión 12.0 hasta 12.4 y versión 15.0 hasta 15.6 e IOS XE versión 2.2 hasta 3.17 de Cisco, contiene múltiples vulnerabilidades que podrían permitir a un atacante remoto autenticado ejecutar el código remotamente en un sistema afectado o causar que un sistema afectado se recargué. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP creado a un sistema afectado por medio de IPv4 o IPv6. Solo el tráfico dirigido a un sistema afectado puede ser usado para explotar estas vulnerabilidades. Las vulnerabilidades son debido a una condición de desbordamiento del búfer en el subsistema SNMP del software afectado. Las vulnerabilidades afectan a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotar estas vulnerabilidades por medio de SNMP Versión 2c o anterior, el atacante necesita conocer la cadena community de solo lectura de SNMP para el sistema afectado. Para explotar estas vulnerabilidades por medio de la versión 3 de SNMP, el atacante necesita tener credenciales de usuario para el sistema afectado. Todos los dispositivos que hayan habilitado SNMP y no hayan excluido explícitamente las MIB u OID afectadas deben considerarse vulnerables. Identificación de errores de Cisco: CSCve57697."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17",
            "matchCriteriaId" : "61E68EDC-8A69-446C-922A-57A6186786A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/artkond/cisco-snmp-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43450/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6736",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6737",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.243",
      "lastModified" : "2025-10-22T00:16:08.670",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;\r\n\r\n\r\n\r\nThe vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.\r\n\r\n\r\n\r\nOnly traffic directed to the affected system can be used to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene múltiples vulnerabilidades que pueden permitir una autenticación a un atacante remoto para ejecutar código remotamente en el sistema afectado o causar una recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tráfico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versión 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusión explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve60402."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17.0",
            "matchCriteriaId" : "0B36DE05-C663-4F15-B52C-921378DA4CD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6737",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6738",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.290",
      "lastModified" : "2025-10-22T00:16:09.067",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\r\n\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\r\n\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\r\n\r   There are workarounds that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene múltiples vulnerabilidades que pueden permitir una autenticación a un atacante remoto para ejecutar código remotamente en el sistema afectado o causar una recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tráfico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versión 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusión explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve89865, CSCsy56638."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17.0",
            "matchCriteriaId" : "0B36DE05-C663-4F15-B52C-921378DA4CD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6738",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6739",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.337",
      "lastModified" : "2025-10-22T00:16:09.317",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;\r\n\r\n\r\n\r\nThe vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.\r\n\r\n\r\n\r\nOnly traffic directed to the affected system can be used to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "El subsistema Simple Network Management Protocol (SNMP) de IOS versión 12.0 hasta 12.4 y versión 15.0 hasta 15.6 y IOS XE versión 2.2 hasta 3.17 de Cisco, contiene múltiples vulnerabilidades que podrían permitir a un atacante remoto autenticado ejecutar el código remotamente en un sistema afectado o causar que un sistema afectado se recargué. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP creado a un sistema afectado por medio de IPv4 o IPv6. Solo el tráfico dirigido a un sistema afectado puede ser usado para explotar estas vulnerabilidades. Las vulnerabilidades son debido a una condición de desbordamiento del búfer en el subsistema SNMP del software afectado. Las vulnerabilidades afectan a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotar estas vulnerabilidades por medio de SNMP Versión 2c o anterior, el atacante necesita conocer la cadena community de solo lectura de SNMP para el sistema afectado. Para explotar estas vulnerabilidades por medio de la versión 3 de SNMP, el atacante necesita tener credenciales de usuario para el sistema afectado. Todos los dispositivos que hayan habilitado SNMP y no hayan excluido explícitamente las MIB u OID afectadas deben considerarse vulnerables. Identificación de errores de Cisco: CSCve66540."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17.0",
            "matchCriteriaId" : "0B36DE05-C663-4F15-B52C-921378DA4CD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6739",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6740",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.370",
      "lastModified" : "2025-10-22T00:16:09.447",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\r\n\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\r\n\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\r\n\r   There are workarounds that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene múltiples vulnerabilidades que pueden permitir una autenticación a un atacante remoto para ejecutar código remotamente en el sistema afectado o causar una recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tráfico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versión 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusión explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve66601."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17",
            "matchCriteriaId" : "61E68EDC-8A69-446C-922A-57A6186786A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6740",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6741",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.417",
      "lastModified" : "2025-07-31T17:15:28.590",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;\r\n\r\n\r\n\r\nThe vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.\r\n\r\n\r\n\r\nOnly traffic directed to the affected system can be used to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene múltiples vulnerabilidades que pueden permitir una autenticación a un atacante remoto para ejecutar código remotamente en el sistema afectado o causar una recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tráfico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versión 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusión explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve66658."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA80102-6194-4157-91FC-13EE64F4B0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B35652-621F-48DB-84FF-E214D42AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E216416-E3ED-437D-A725-2297DD86EF3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8F3444-17E3-48A5-BEC1-97967F7E4EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539E369A-299B-4CDE-940F-C853E08439B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39120E68-F456-4035-8B28-64943CDDCFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F6EF3B-2F31-4449-9B2A-9114D41BBC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E6D907-4B38-4046-BF4F-C7DFA36F55E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0B52CA-3834-4435-A3E1-9684A41E6405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5976253B-339F-49C3-A538-653901E85EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C42B4-6D72-4EE5-A0F0-87E60D73A44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB06F1BF-E186-48EA-BAE2-1B76DB16BC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23AD1406-D2E4-4517-BF3E-A87C1FA8AC7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D203439-1A4B-4805-8A15-5A33C612A5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A41531-FBC0-41DD-9965-8CAFA30488AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310BA9E3-8175-4220-9FC3-48390C994174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A13401-2660-483E-89A5-6420B5866BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FC74E2-2510-40F5-BB2B-11608B844E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C69E845-700C-4250-B528-9482A5362F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE45DBE-1CE2-4CAC-81E6-1BA07F0D90EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9388B3A6-2952-4895-B1C1-2B7F160AB637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A40EA0A-1642-4950-9943-20C1888C18D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621845E0-E885-46E4-929D-55DBE43DC97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFD3A39-9E02-409C-9F9C-9C90D58D3A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F3E17-5C65-4C91-8881-AAEAA00BCD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E76FF-DE36-463D-B610-A99C90AF7B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF8A6EC-3C45-4CDB-81B5-4D50CD5C4087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC52EC4-6658-40AB-A357-F9B538F21ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737D7668-872C-4246-9AB9-12FF059E231A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CBDA4F-DBB3-4426-8C16-2B2314ACF21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45225F2-C9EB-493D-B845-64BFB8DBB89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252377A3-7F15-45F2-A169-BBC37858D4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E8F96A-EA9C-4E66-8491-9B2A3A4023F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85908754-8426-49D3-BCC2-AF174B5D0EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5BA973-D59A-4CB9-BC35-089F88737425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6E83FC-CFAE-45EA-9F20-830FC5E97399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B3BCAC-8317-41C4-9A60-85B693818044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBC4A31-F564-4F5F-86C9-08964EFB3AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5872A42F-745E-4EC6-8679-C28F79F6621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86947E54-A1B9-4ECE-92A6-417462249612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C910BE7C-517F-4E41-8433-1858F700AA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB5A06F-59B5-43A1-8D06-1B6BA08630A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F6C44-DB9D-41FD-AD8D-AF45258772DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9E07C9-4C98-48A3-ACF9-1C6FE834D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86176257-7075-476E-BE09-B0E469392BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6742",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.447",
      "lastModified" : "2025-10-22T00:16:09.653",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;\r\n\r\n\r\n\r\nThe vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.\r\n\r\n\r\n\r\nOnly traffic directed to the affected system can be used to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene múltiples vulnerabilidades que pueden permitir una autenticación a un atacante remoto para ejecutar código remotamente en el sistema afectado o causar una recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tráfico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versión 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusión explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve54313."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-04-19",
      "cisaActionDue" : "2023-05-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17",
            "matchCriteriaId" : "61E68EDC-8A69-446C-922A-57A6186786A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6742",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6743",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.477",
      "lastModified" : "2025-10-22T00:16:09.807",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\r\n\r\nThe vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\r\n\r\nCustomers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\r\n\r\n  There are workarounds that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene múltiples vulnerabilidades que pueden permitir una autenticación a un atacante remoto para ejecutar código remotamente en el sistema afectado o causar una recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tráfico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versión 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusión explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve60376, CSCve78027."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "63ACD7DB-DCFE-4CDB-A3F0-4E413E178315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "3.17",
            "matchCriteriaId" : "61E68EDC-8A69-446C-922A-57A6186786A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6743",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6744",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-17T21:29:00.510",
      "lastModified" : "2025-10-22T00:16:10.083",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\r\n\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\r\n\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\r\n\r   There are workarounds that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El subsistema del Protocolo Simple de Administración de Red (SNMP) del software Cisco IOS y IOS XE contiene múltiples vulnerabilidades que podrían permitir que un atacante remoto autenticado ejecute código de forma remota en un sistema afectado o provoque su recarga. Un atacante podría explotar estas vulnerabilidades enviando un paquete SNMP manipulado a un sistema afectado mediante IPv4 o IPv6. Solo el tráfico dirigido a un sistema afectado puede utilizarse para explotar estas vulnerabilidades. Las vulnerabilidades se deben a un desbordamiento de búfer en el subsistema SNMP del software afectado. Las vulnerabilidades afectan a todas las versiones de SNMP: versiones 1, 2c y 3. Para explotar estas vulnerabilidades mediante SNMP versión 2c o anterior, el atacante debe conocer la cadena de comunidad de solo lectura de SNMP del sistema afectado. Para explotar estas vulnerabilidades mediante SNMP versión 3, el atacante debe tener las credenciales de usuario del sistema afectado. Un exploit exitoso podría permitir al atacante ejecutar código arbitrario y obtener el control total del sistema afectado o provocar su recarga. Se recomienda a los clientes aplicar la solución alternativa que se describe en la sección \"Soluciones alternativas\" más adelante. La información sobre el software corregido está disponible a través del verificador de software Cisco IOS. Todos los dispositivos que tengan SNMP habilitado y no hayan excluido explícitamente los MIB u OID afectados deben considerarse vulnerables. Existen soluciones alternativas que abordan estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software SNMP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19BA770-83E0-4D07-BE31-97FA8C86437B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4627BEF7-CEEB-4CBC-8620-4D9C5A7F7C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7EF0685-7BEF-4F84-902C-DFE533CD2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F114FD7-F62C-4A24-9CE6-C9A7136465F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F72BE-B65F-4271-9042-3B459DFBB43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7715D0D0-E8B2-444A-A590-7B5B0BFA713F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B526DE1-EEA7-47E4-B291-09C02F018A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECDE91B-EA0E-4938-BC64-6A2A7DAF2A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00F4FE4-769F-4268-A623-DD56F12D7F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97983D5-B4D4-4A69-8573-A978EF9F8859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6E74-0AAA-4CB4-B119-30ED3DB95749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B33EF2-3157-457D-BB77-CE99C9F02A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2477EEC8-93F2-45D2-AFF6-8D83AE5195B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2570C01-A377-421E-B2A1-EC05A87DC684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B7D11D-1C92-4369-A446-2CC58AEC70D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF19E91-370E-4F3E-A6ED-778A0493912F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072FFEF0-72C9-4C19-8A3B-9633DDCA24E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AE17A1-7FC7-4197-825C-92B32AC64D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00328248-72C7-4646-9312-5EAA7FE0D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5535D673-8DF3-4737-A531-E7B28C419235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D97E83-3091-4E46-818C-503D7D1F9D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE109462-C870-4C66-A7AE-B1ADED3B8DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D0156C-3153-4A64-8491-A6A1B60FE5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C075F42D-27C1-46A2-893A-5C0D9BE13861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF11222-0EA2-4E6B-B6DC-D16FCFEDE807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0BE6E0-3D82-4B2A-9B4B-C50021F0687A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD063290-8E11-43E3-B55E-411551074C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A6E72-A63C-487C-BD50-3902D328C011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D964C2-D315-45AA-BA20-F3723EDCF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A8CD5-93F3-4A40-A533-98DFE63FB699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43938EBD-70E9-415E-83C0-8CED61EB84DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FC422E-1DCC-48BF-84BC-9082F559644B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB3C3CD-1E42-4E59-AA9C-4AB91DAE917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF9F501-FC58-489F-9662-4DD30DEBDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FB6BD4-CFCA-4BE6-8C82-9F83A3F41C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B01C-956E-4C74-AA03-F028C25C2DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5898745E-C1D3-4D0E-8476-2EEAA4327B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "887C5632-F3F7-4EDB-A065-D81F64A9B15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD397982-87E8-46CF-95A5-61435849D02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B648C2EF-489B-4F62-B898-110A09794810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE2AE1-346A-462F-AF0A-3022EB2ED66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DADD4F-B761-406B-8BF1-A7AF0C6896D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600F1FE-17F6-4F6D-886A-ED95FEA9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17356A3C-0C05-46A7-89EF-A2C48DDEC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5C5C5D-B40A-4DD6-A10C-C8713CCF2E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE68EAC3-05F4-46C5-8A48-4ECFF1844BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284967DB-32D7-4F7B-8B69-767BFFBE0924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D896F9-9E25-464F-B6C5-55A2DD38CC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF566A3-331A-4A8A-9EEF-D1FBF71BF4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0623C531-CFF1-4C45-B8A7-BCF2C4678222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B72BB-52D0-4307-8A61-73AA2477885A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E66D10-84F4-486D-BFAF-B7D4AE2E5583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C364500B-B7B0-47CC-9277-8D43BAB6E6D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B797B2-6AB2-4946-88C0-12D71258CCE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12B9DA7-28C4-4584-A548-6B06874F9C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0C66F2-D158-497D-8683-2264F58A33B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE361F3-BA5B-453C-A58C-6E8CB84BC101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C55E31F-B291-4FE9-81FB-A91E95323863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83184158-7C5F-4294-895E-7CF5B76A0F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A081B105-AD3F-4529-B3E7-D8B0851C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3142DA6-0FA9-4CEC-95FC-938AFD944BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)wo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1644E8D2-E3F2-4ACB-A0D0-F374B565D121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC24BF9-DCD1-4974-A2C7-654E9B469C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F8F86-8C63-4A29-A384-62A849848EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D89B24-5DE1-4E15-B539-EC3FF6BA0658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87760068-4255-4D18-A62D-FDC156F7A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF551C-1482-489C-AC4B-DF3E9BBB0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904C4D5C-F603-42CE-9CAD-28B01223452B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D0BBED-E68E-43B7-93F5-FC5DEE7BEB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F2951-FF09-45FC-81BD-7C8C6C7CD1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C5C43F-67A3-4000-845E-FDA620AD1B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565F3777-89E2-4159-9D8E-629EB7A56837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C3DF8-2B59-41EB-A151-15E46348DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700DDE2E-922C-426F-8751-BADD15055AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CA171-4BE2-4204-BDAB-EA19BCD4842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84766AF1-DC74-4D64-A4E1-56B377D6CE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A0517-EF86-4655-B4B4-246ED3A84803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E3912E-11F7-421B-A5C4-35568A6E386B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360F3E49-D75A-4ACE-B775-14055272C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362C676-5002-4ABC-9C60-97D4B65A399D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14EB41-CD6A-483A-8F68-9072E436807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABCE40E-04D5-4248-A374-EAB938575C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61323E0-9CBA-4629-87C8-9F8B59ABD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A859E-3B77-4CAE-A38D-C1CF3FFB6DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CCEA43-40D6-4A6A-A235-2301DE7C4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABC42E8-E304-4D00-8C6C-604F3EE13DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D38633-31AE-42E9-8FFA-77C8EFA9AABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6D9CC-70F0-475C-8AB0-48980596BE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECEF97-EC6A-43C8-A7AB-5C48948183FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AB39F8-5D39-4E8A-A8A5-B91718D37A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63328822-DC2E-41A3-9E12-F5F824847AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350D9AFE-66AD-486B-B42D-E6A3CE62640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D67BDA-AEA7-4ED2-AFA4-20283B446602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D593974-6D7B-4AF8-85B2-A77D8BE5CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B4BFC4-F2C9-4D5E-AD22-3AAF36CFB12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2E6D25-7528-4433-9BB3-4F45DB0FE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E1ADA5-C782-4F8A-A77C-A895B402A792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C897E-CE32-4350-9315-DEE4EA5FF02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7FF79-0AFF-4DB5-BDCA-797B8FAB7F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B02DE-CE0C-47E1-91BF-F115EE970B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5374A08-2788-40A0-82B5-9597C28396EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189B0C7C-D794-43EB-A6C6-F29C4B9623A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF55C0A-768F-445A-AF40-2B553363AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D5CC-521E-4B2A-B6DB-D2A49D31DE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D75DC6-D7B1-46D2-ABEF-97D908992FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971AAF00-63AA-4B3F-8E0F-B8FBD011C071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A0087-5926-46AF-B1DA-3AA18FAB87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A2402-F662-4900-8137-B14EB2537173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5757C194-AF18-434C-9F19-2FC775720556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28722F17-AF23-4435-AF9B-996798ACF2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587450DF-77E4-4320-9191-383EBE5A6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB4363E-49B6-4682-AEF3-6B0AB38A3932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FCA457-9074-4876-A21A-144F03CD6450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8BBC30-EB90-40AC-A57F-AAB16DFA2A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD560277-FD93-413C-B1ED-9B7DA6658753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D3C419-D1FF-45E8-A5B1-AFFC59567478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59065FF7-E644-4927-9A3D-21431A5D91D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E5F13-3F15-418B-A0AF-038BEABF8445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694AA98F-2705-477E-B2EE-75D2CEDB263B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7760B1FF-BC56-49F4-8020-439EA2F53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABF12A-78BD-459D-BF53-065A56C385AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D15A929-0C2B-4C3D-99E4-0E7D46217216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AC1EA3-AD9C-4AE1-91B6-4EBD22B77D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CA27BF-13BC-4C13-A049-FA50247ACE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C8B101-CB42-43CF-98CE-44EE5FBC9BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054583DC-AAF8-4BF0-AC13-5A488476C161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A9B13E-8CF7-4879-8C33-8E690291335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343F5C35-A0C0-4747-95BA-D4044C64508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EAC82-48B1-47A2-80D7-8CEE806E4B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B4687-CC90-45D8-989D-8DF38940C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F755B9BE-3DF6-49AE-847E-F74B696A49A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF429A0-4A54-48FA-B69B-D34898E987EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A867AA1-E46F-4027-A41B-6AE1A27EB2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF4082D-8F3E-4274-83DD-431E99C395B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230ACE85-877C-45D7-A2A9-0085C421292A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37BA5F4-9D5C-4D92-A6D3-055B79049719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED6E6E2-AB47-442C-93B9-DEBA9D124B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CC7F08-343B-40CC-9D03-81EE4924D6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31444A2D-BBF0-4D6A-A898-5EC4E782CC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D39E1ED-2F67-4116-9BF5-44CA8EF9A016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729613AF-4C56-4514-9ECD-6A466C278E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368F2F9E-FD52-4A74-8378-DF246252B745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E452976-8876-40D7-8880-29197DB5457A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5CC49C-34B5-4C8A-8FFC-DACB4B0C76FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D93F335-8058-45BA-8653-9F3E4A5FA28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9108D-B313-4C07-A9E3-5C2591304919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A89C06-8384-4B23-8D3A-293C9035FC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B7F513-E991-47A4-A96B-2EB90B15D197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D601E90-6F2A-4C66-97A2-152031C88DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC0B809-72AD-413F-BE84-73FE2DB33950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72782F95-948D-489B-A19A-9DAB825DFE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10438F4B-281D-4C2F-B4C3-DC3D47B0033A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681E360E-2287-4BE7-8228-77C235DFA901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81800178-449A-4B61-9611-5FB2FC4DBC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D6FBCE-F1F0-437B-A9B0-57F717C974F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD5D14D-A9F8-4323-A67B-FF983900D99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C2BB1F-79DF-4471-B75F-C22CEBB5380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF92BEC-AA46-46DF-8C1E-956F3E506E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C226FE9-61A0-4873-B277-1B8ADB397B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5BD905-75C3-47AE-8D19-6225BD808B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DE452A-6852-4879-9187-8A152E6E260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65589A68-58A4-4BD4-8A26-C629AE610953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65F813B-C080-4028-8E1E-A81827917DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D54D10E-D94E-4731-9988-4EC1786FF4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4p\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316E962-6C56-4F45-9575-274506B9D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28874B-148A-4299-9AA1-67A550B25F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D8279A-3B2E-450C-B41E-23C9E9FF770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE991877-18E0-4374-A441-C2316085CCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A472B96-0DDE-49DD-A7E3-A82DD6AEB3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757EB1A1-4764-4108-9AB1-F33CF9CEE574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5c\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7803B445-FE22-4D4B-9F3A-68EFE528195E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595F3D8-8D99-4C82-9EC1-1187C52A6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6465E3DA-90F0-4DD6-82B1-C9DF9FAEBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A1BC08-28AF-4583-BE21-0D85CA2D7B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CD336D-1110-4B0C-B8D4-7C96293CBADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD51F00-C219-439F-918E-9AF20A6E053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1887D9-E339-4DC6-BE24-A5FF15438B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2645F-C3BF-458F-9D07-6D66E1953730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6744",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line."
      }, {
        "lang" : "es",
        "value" : "Clustered Data ONTAP anterior a versión 8.3.2P11, versión 9.0 anterior a P4 y versión 9.1 anterior a P5 de NetApp, permite a los atacantes obtener información confidencial de contraseñas al aprovecharse del registro de contraseñas ingresadas de manera no interactiva en la línea de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.2:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3DC62E-A09B-4031-B7FF-4DE483CABCBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A90E31D-D078-4622-880E-E0E51E23E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "6885544D-D523-4611-87A4-1C8532E3D1B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170630-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170630-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters."
      }, {
        "lang" : "es",
        "value" : "OwnCloud Server anterior a versión 8.2.12, versión 9.0.x anterior a 9.0.10, versión 9.1.x anterior a 9.1.6 y versión 10.0.x anterior a 10.0.2, son vulnerables a un problema de tipo XSS en páginas de error mediante la inyección de código en los parámetros URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.11",
            "matchCriteriaId" : "C6540BB0-D15D-4E2F-A1C6-89BD41B51F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.0.9",
            "matchCriteriaId" : "F8B54771-D38B-46A3-8F5B-D34140E6967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "9.1.0",
            "versionEndIncluding" : "9.1.5",
            "matchCriteriaId" : "B28E556F-FE12-4349-BE74-978CC3C2C296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "2405B337-B1FA-4CB0-87DE-DBD63558A80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/215410",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/215410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue."
      }, {
        "lang" : "es",
        "value" : "Un escape inadecuado conlleva a una vulnerabilidad de tipo XSS en el módulo de búsqueda en ownCloud Server anterior a versión 8.2.12, versión 9.0.x anterior a 9.0.10, versión 9.1.x anterior a 9.1.6 y versión 10.0.x anterior a 10.0.2. Para poder ser explotada, un usuario tiene que escribir o pegar contenido malicioso en el cuadro de diálogo de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "A5EBF784-F3A9-49C5-9F81-26E9EA30FE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.10",
            "matchCriteriaId" : "07198AE4-DE06-4CA0-B587-9A3EBF86EFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.6",
            "matchCriteriaId" : "1AC3E2BC-FC00-419B-A9CF-54C7020A7F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "2405B337-B1FA-4CB0-87DE-DBD63558A80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99322",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-007",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token."
      }, {
        "lang" : "es",
        "value" : "Un error lógico en ownCloud Server anterior a versión 10.0.2, causó la divulgación de tokens share válidos para calendarios públicos. De este manera, conceder a un atacante acceso potencial a calendarios compartidos públicamente sin conocer el token share."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "3085407E-B978-4DB5-A2D2-0BC66562D474"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-005",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before 10.0.2."
      }, {
        "lang" : "es",
        "value" : "Un atacante ha iniciado sesión como un usuario normal y de alguna manera puede hacer que el administrador elimine las carpetas compartidas en ownCloud Server anterior a versión 10.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "3085407E-B978-4DB5-A2D2-0BC66562D474"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/166581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-006",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/166581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://owncloud.org/security/advisory/?id=oc-sa-2017-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-site scripting (XSS) en Blackcat CMS 1.2 permite a usuarios remotamente autenticados inyectar scripts web aleatorios o código HTML mediante el parámetro map_language a backend/pages/lang_settings.php"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6EA519-1503-4687-8420-7B393165B180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143103/Blackcat-CMS-1.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BlackCatDevelopment/BlackCatCMS/issues/373",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143103/Blackcat-CMS-1.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BlackCatDevelopment/BlackCatCMS/issues/373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file."
      }, {
        "lang" : "es",
        "value" : "Un heap overflow en la apk (Paquete de gestión de Linux Alpine) permite a un atacante remoto causar una denegación de servicio, o conseguir la ejecución de código, mediante la manipulación del archivo malicioso APKINDEX.tar.gz"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:alpinelinux:alpine_linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBEEBA1-DEC3-4AD1-A1C5-53A2AED36EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/25/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99340",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block."
      }, {
        "lang" : "es",
        "value" : "Un heap overflow en la apk (Paquete de gestión de Linux Alpine) permite a un atacante remoto causar una denegación de servicio, o conseguir la ejecución de código, mediante la manipulación del archivo malicioso APKINDEX.tar.gz con un mal bloque en cabecera pax."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:alpinelinux:alpine_linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBEEBA1-DEC3-4AD1-A1C5-53A2AED36EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/25/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99340",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain."
      }, {
        "lang" : "es",
        "value" : "No existen tokens Anti-CSRF en ningún formulario en la interfaz web en Kaspersky Anti-Virus para Linux File Server anterior al paquete de mantenimiento 2 corrección crítica 4 (versión 8.0.4.312). Esto permitiría a un atacante enviar peticiones autenticadas cuando un usuario autenticado navega en un dominio controlado por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:anti-virus_for_linux_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.3.297",
            "matchCriteriaId" : "FE4FEA38-D3BC-45B9-9DFA-5B9D1ADA21B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root."
      }, {
        "lang" : "es",
        "value" : "El kluser es capaz de interactuar con el binario kav4fs-control en Kaspersky Anti-Virus para Linux File Server anterior al paquete de mantenimiento 2 corrección crítica 4 (versión 8.0.4.312). Al violar las operaciones de lectura y escritura en cuarentena, es posible elevar los privilegios a root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:anti-virus_for_linux_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.3.297",
            "matchCriteriaId" : "FE4FEA38-D3BC-45B9-9DFA-5B9D1ADA21B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges."
      }, {
        "lang" : "es",
        "value" : "El parámetro reportId del método de la acción getReportStatus puede ser violado en la interfaz web en Kaspersky Anti-Virus para Linux File Server anterior al paquete de mantenimiento 2 corrección crítica 4 (versión 8.0.4.312), para leer archivos arbitrarios con privilegios kluser."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:anti-virus_for_linux_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.3.297",
            "matchCriteriaId" : "FE4FEA38-D3BC-45B9-9DFA-5B9D1ADA21B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the licenseKeyInfo action method is vulnerable to cross-site scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "En Kaspersky Anti-Virus para Linux File Server anterior al paquete de mantenimiento 2 corrección crítica 4 (versión 8.0.4.312), el parámetro scriptName del método de acción licenseKeyInfo es vulnerable a un problema de tipo cross-site scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:anti-virus_for_linux_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.3.297",
            "matchCriteriaId" : "FE4FEA38-D3BC-45B9-9DFA-5B9D1ADA21B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jun/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents."
      }, {
        "lang" : "es",
        "value" : "Invalidación del cache inapropiada en Joomla! CMS 1.7.3 hasta la 3.7.2 que lleva a una revelación de los contenidos"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF53BD-6A52-41D3-8BB3-B08AC81C65E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23070D86-E104-4A93-84EA-5B23952B6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:alpha_1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2DE577-2D67-4D70-B86B-3FF20F5E9C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:alpha_2:*:*:*:*:*:*",
            "matchCriteriaId" : "8286A8C0-066A-4BB7-A82E-5AA87D912E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "3137CC27-B135-4512-A0C9-536CC94D80B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA762BD-C275-4652-9E0B-8B6F92970933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "08B68FC5-6B7A-4403-9A94-012BE5825AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:beta_4:*:*:*:*:*:*",
            "matchCriteriaId" : "88D2EF45-8A8F-4D71-9D8A-3C4A58AC0E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "99090851-FD91-47AC-B9D2-D36B4027C0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC365315-880A-430B-9321-0CD9F6189BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "8029E15B-6221-4457-B02B-3543313D9635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE72698-9832-4EC4-8051-92582CA42699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A21583-491E-4B29-AC2D-88A561C83A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "70E1D22A-6502-4F7C-8F36-6232D611090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4244822B-5426-4E99-97F8-19D25794BB3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99450",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038817",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/696-20170601-core-information-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/696-20170601-core-information-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-17T21:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability."
      }, {
        "lang" : "es",
        "value" : "Perdidos tokens CSRF verificados y validación inapropiada de la entrada en Joomla! CMS 1.7.3 hasta la 3.7.2 que lleva a una vulnerabilidad XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF53BD-6A52-41D3-8BB3-B08AC81C65E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23070D86-E104-4A93-84EA-5B23952B6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A21583-491E-4B29-AC2D-88A561C83A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0B9B94-9601-40B1-BBF0-71BCB400C05C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99451",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038817",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/697-20170602-core-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/697-20170602-core-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T00:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadMNGImage en el archivo coders/png.c en GraphicsMagick versión  1.3.26, tiene una llamada de fuera de servicio de la función CloseBlob , resultando en un uso de memoria previamente liberadas (use-after-free) mediante un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/d0a76868ca37",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/d0a76868ca37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T00:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php."
      }, {
        "lang" : "es",
        "value" : "En CMS Made Simple (CMSMS) versión 2.2.2, los administradores autenticados remotos pueden cargar un archivo .php por medio de una acción FileManager en el archivo admin/moduleinterface.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374F6E2F-C2A4-46D4-9932-FCE2FFFFAB07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T00:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file."
      }, {
        "lang" : "es",
        "value" : "En CMS Made Simple (CMSMS) versión 2.2.2, los administradores autenticados remotos pueden cargar un archivo .php por medio de una acción CMSContentManager en el archivo admin/moduleinterface.php, seguido por una acción FilePicker en el archivo admin/moduleinterface.php en la que type=image es cambiada a type=file."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374F6E2F-C2A4-46D4-9932-FCE2FFFFAB07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/filepickerimages/FilePicker_upload_vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/filepickerimages/FilePicker_upload_vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo dapur/apps/app_comment/controller/comment_status.php por medio del parámetro $_GET[“id”]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo dapur/apps/app_article/controller/comment_status.php por medio del parámetro $_GET[“id”]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POST['web'], $_POST['email'], $_POST['status'], $_POST['id'], and $_REQUEST['id']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo dapur/apps/app_comment/sys_comment.php por medio de los parámetros $_POST[“comment”], $_POST[“name”], $_POST[“web”], $_POST[“email”], $_POST[“status”], $_POST[“id”], y $_REQUEST[“id”]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo dapur/apps/app_article/sys_article.php por medio de los parámetros $_POST[“parent_id”], $_POST[“desc”], $_POST[“keys”], y $_POST[“level”]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo/apps/app_comment/controller/insert.php por medio del parámetro name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS 2.0.7, presenta inyección SQL en el archivo dapur/apps/app_article/controller/article_status.php por medio del parámetro $_GET['id']."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET['level'], and $_GET['iSortCol_'.$i]."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo dapur/apps/app_article/controller/article_list.php por medio de los parámetros $_GET['cat'], $_GET['user'], $_GET['level'], y $_GET['iSortCol_'.$i]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS versión 2.0.7, presenta inyección SQL en el archivo /apps/app_article/controller/editor.php por medio de los parámetros $_POST['id'] y $_POST['art_title']."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T05:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandled during a strcat to a device list."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en el archivo ASUS_Discovery.c en componente  networkmap en firmware Asuswrt-Merlin para dispositivos ASUS y firmware ASUS para dispositivos ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, y RT-N300, permiten que los atacantes remotos ejecuten código arbitrario por medio de información de dispositivo larga que es manejada inapropiadamente durante un strcat en una lista de dispositivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac5300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "D4D88DAF-DFC0-4272-92E8-92B8B720ABC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85195C1-D431-47A3-B740-84B9E97E6A97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "8EC02A03-C4AA-4A88-A4C5-B28851820640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1900p_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879F2C62-40D6-47C7-B08D-EF394C184141"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "92F02BF7-4804-4088-974A-850BE8753637"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A532686-2867-4960-979B-7B91CB403F56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac68p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "E5976A71-B3A0-41EA-ACCA-FC7DDE42A288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac68p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9024B4-BF99-4002-8550-24DA6BE94013"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "E8A15254-7453-4DF2-9EAC-4D13FD11AF05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3348D32-AA0C-4249-B507-1A46DF5A62F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "4F4FEB77-CD0D-4313-BB03-9DD480A7971C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC93B36-B0B3-4557-812A-042E6ADC3EA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac66u_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "0BE5C7A7-D210-4CA0-9391-FF1BF640F1AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac66u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F533CF-447F-4BA8-B01E-F6E8290D768C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7485",
            "matchCriteriaId" : "7116534C-8FC3-49C0-8911-F0160FFC6CB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E770C7D6-5403-455F-BCBF-C56E21CBCD40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "C4F02DDE-A0EF-4A07-BEBA-C41E99FDDCE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E7631A-AD48-4AFA-8F7D-E39578F492ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac55u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "858F993B-494F-4CD0-AEEA-9C96505A7460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac55u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883E9C34-65D6-4D2C-9D60-A173575247B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac52u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.4180",
            "matchCriteriaId" : "6CA2E840-7343-40A0-A32D-455E950DAAD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac52u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9DDB3B-0765-4A69-9190-FF132630F291"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac51u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "67A02F10-D8C4-49E1-A6DD-C7E0600F3C49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac51u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91207A19-15F3-476A-8136-08665E10119D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n18u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "B4F031C0-ED90-4470-8DEA-F22CB081C22E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n18u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625C1795-2197-461F-9880-523CEB436B9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n66u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "2FD21108-18FA-4545-8712-0EDD6DA40C12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474CEA6E-1F80-4A10-B750-7F47C94629E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.378.7177",
            "matchCriteriaId" : "EE9EBB70-B4A6-4F9D-A9C7-32620E2D2735"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0C2572-667F-4BDE-B296-1B4210E351FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac3200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "3EDDCCBF-FD1A-4EE1-9B2D-9E11D4417D9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC4D044-4850-465D-B1DA-ED734BCC5277"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac3100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "052CE11F-FF92-452D-8A3A-3651A303F100"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E15ED3-C71D-402D-B879-B4CA5D5B3525"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1200gu_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.5577",
            "matchCriteriaId" : "00F54F3B-C7D0-49C9-B6C0-9AD2EC53C2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1200gu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171DFA-6307-4078-BBB7-4E8EA904131F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_ac1200g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.3167",
            "matchCriteriaId" : "974F507C-A577-424B-A332-CC4EE3442E04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_ac1200g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B6588-9F8F-48B9-9EE0-209BBFE0C9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9880",
            "matchCriteriaId" : "3C9311D4-A79F-4EDD-9442-6D87A1AE4D71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25606A77-1489-4624-8759-20DEC679E5E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-ac53_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9883",
            "matchCriteriaId" : "49F94A48-EE6E-49F5-A673-229A42967EF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CE8587-6DF9-4AB4-A2D8-F45D52D86419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.2943",
            "matchCriteriaId" : "97E8B7EB-6CCA-4D17-8851-8C762FC9D6C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F166B64F-2A6E-404C-AD3F-337D631043F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12hp_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.3479",
            "matchCriteriaId" : "3E92F296-E91F-4B61-8D9F-F3CADD8CBB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12hp_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CCFDE4-B93B-4149-BB2F-EC113F316876"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12d1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "5F3394D8-B251-444F-9CCB-2DC4C5F925EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18926678-B568-4B23-8882-877ECB802D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n12\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "9C9D353C-C88E-4772-83A4-BA2774D1296D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n12\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44800173-189F-45D7-A8D0-0DFF3BA02488"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt_n12\\+_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.9880",
            "matchCriteriaId" : "3EC8FF40-47DF-4D08-98FF-09A9D51E8220"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt_n12\\+_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB403995-31CF-4468-9245-205EF4FE309A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n16_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "4733E9E4-B297-4AF5-AEBA-C87D5E62FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1708CE7D-7096-4846-A143-F248D5F25B15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin_project:rt-n300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7378",
            "matchCriteriaId" : "00790F60-6870-47AE-B779-B8DF3DF5D2CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin_project:rt-n300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F266FCC-AC0C-4802-946E-3E4302E0A834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/13/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1318",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-18T13:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730."
      }, {
        "lang" : "es",
        "value" : "IBM MQ Appliance versiones 8.0 y 9.0, podría permitir a un administrador de mensajería autenticado ejecutar comandos arbitrarios sobre el sistema, causado ??por la ejecución de comandos. ID de IBM X-Force: 125730."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7DA05B-423A-46E7-9CC6-DAE6CFCC8918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBD08F-324F-414E-A443-8BE077EB990D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DD00E0-0014-4EF4-8A00-9FED5EA531A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77214B9C-EBEB-4264-AE23-2105F1991275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE45015B-97C5-40DB-B45A-1F78C5C93DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB96DA2-96F0-4B3B-9876-79EB219A0632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD56E6F3-1D56-4CB8-8590-915D8F497564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5C17C6-B0F4-4050-8B29-6120552FA235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_appliance:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFE4BB8-ED85-4FC8-BD74-A1E3E730D8DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99594",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125730",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components."
      }, {
        "lang" : "es",
        "value" : "REDCap anterior a versión 7.5.1, presenta un problema de tipo CSRF en la función deletion de los componentes File Repository y File Upload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.0",
            "matchCriteriaId" : "8459A929-646B-481D-9C23-78818C7D8FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.projectredcap.org/articles/13/changelog-standard-release.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.projectredcap.org/articles/13/changelog-standard-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T14:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "REDCap before 7.5.1 has XSS via the query string."
      }, {
        "lang" : "es",
        "value" : "REDCap anterior a versión 7.5.1, presenta un problema de tipo XSS por medio de la cadena de consulta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.0",
            "matchCriteriaId" : "8459A929-646B-481D-9C23-78818C7D8FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.projectredcap.org/articles/13/changelog-standard-release.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.projectredcap.org/articles/13/changelog-standard-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5245",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-07-18T14:29:00.263",
      "lastModified" : "2023-11-07T02:49:23.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T14:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (2016-08-19); fixed in 6.1.0.003 (2017-01-17)) in which an authenticated user can execute arbitrary shell commands and gain root privileges. The vulnerability stems from unsanitized data being processed in a system call when the delete_assessment command is issued."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de inyección de comando remota en la línea de productos de Barracuda Load Balancer (confirmada en versión v5.4.0.004 (2015-11-26) y versión v6.0.1.006 (2016-08-19); corregida en versión 6.1.0.003 (2017- 01-17), en el que un usuario autenticado puede ejecutar comandos shell arbitrarios y obtener privilegios root. La vulnerabilidad se debe a que los datos no saneados son procesados en una llamada del sistema cuando se emite el comando delete_assessment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barracuda:load_balancer_adc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1.006",
            "matchCriteriaId" : "7C32D260-BA40-4680-BC5F-2715595C1E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://campus.barracuda.com/product/loadbalanceradc/article/ADC/ReleaseNotes610003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42333/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://campus.barracuda.com/product/loadbalanceradc/article/ADC/ReleaseNotes610003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42333/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7506",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-18T15:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak."
      }, {
        "lang" : "es",
        "value" : "Spice versiones hasta 0.13, son vulnerables al acceso a la memoria fuera de límites al procesar mensajes especialmente creados desde el atacante autenticado hasta el servidor de Spice, resultando en un bloqueo y/o pérdida de memoria del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D43478E1-FAC9-4331-890A-3A0657B297CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF919EB-A288-4B04-B16D-5CBF02D3DA50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6CA6B-2EA2-49B2-A1CB-1A2E6BCD5310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3799D9A4-36DD-46C7-920F-CBBACFBD1A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98B8AD9-2199-491B-971D-51C8E8C8620F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E8934-ACD6-4EA8-8603-1A74754E686E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC523EFE-42BB-401F-B56F-CD3111521926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D99BC7E-E0AE-47DB-AB4E-E2E8B819F11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94048EB-8898-48D2-94F5-5EB4EBACF1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDB2652-0358-4624-AA5A-85E6AF78602D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DDBC28-2B52-4ED3-A547-220308730442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415261CB-7BC6-43A3-8655-4A9B5762D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC9E53-64A4-4ACD-96A2-914E99FD18CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AF8BAE-BA8D-4B88-ABF7-BFF3FF1C35FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B572F78E-3D9E-447C-AC2A-790833FE9572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C5F192-9B57-406B-A026-986C5FA23E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AC3C68-6EF4-45BA-AE83-63BF7E2C5FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FAD2D-A31D-47F5-A0CA-F956566AF64E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A7A337-017E-442C-8243-ACCEC60386DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FEDFB76-03BA-4C85-8941-60ED24248C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534D1105-4AC0-4DD4-93BA-CD7B6DF09F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937428E5-EE31-4BBF-9774-EFB9866B58D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE28BE9-1851-4BCA-A1B8-8F291C744703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD83413-0A15-4117-87B9-C6551A327448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9120288-1454-4ED9-AFD2-FCA52B92E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12099A50-80EA-4613-B55E-2A6F426AABAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E7D605-AF1B-4A3E-B522-FA019879238A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE37633B-B577-4C8E-B807-23561DFE18D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF05DBE8-B5CF-40BA-8EFF-51B416E0CD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice_project:spice:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3CFB3D-0D04-4F62-9CD9-886CDE5AA578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3907",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/14/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99583",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1452606",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1452606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5246",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-07-18T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces ({{ }}). This expression will be evaluated by any other authenticated user who views the attacker's display name. Affected versions are 5.0.0000 through 5.1.1026. The Issue is fixed in 5.1.1028."
      }, {
        "lang" : "es",
        "value" : "Biscom Secure File Transfer es vulnerable a la inyección de expresión AngularJS en el campo Nombre para mostrar. Un usuario autenticado puede llenar este campo con una expresión AngularJS válida, envuelta en llaves dobles ({{}}). Esta expresión será evaluada por cualquier otro usuario autenticado que vea el nombre para mostrar del atacante. Las versiones afectadas son 5.0.0000 a 5.1.1026. El problema se solucionó en 5.1.1028."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:biscom:secure_file_transfer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA39957-D9D2-41F6-BAC4-B6DCE183BC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.biscom.com/bis-sft-cv-0004/",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://twitter.com/i_bo0om/status/885050741567750145",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cve.biscom.com/bis-sft-cv-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://twitter.com/i_bo0om/status/885050741567750145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5247",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-07-18T18:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticated user who views the attacker-supplied file name. All versions of SFT prior to 5.1.1028 are affected. The fix version is 5.1.1028."
      }, {
        "lang" : "es",
        "value" : "Biscom Secure File Transfer es vulnerable a las  cross-site scripting  en el campo Nombre de archivo. Un usuario autenticado con permisos para cargar o enviar archivos puede llenar este campo con un nombre de archivo que contiene etiquetas de secuencias de comandos HTML estándar. El script resultante será evaluado por cualquier otro usuario autenticado que vea el nombre del archivo proporcionado por el atacante. Todas las versiones de SFT anteriores a la versión 5.1.1028 se ven afectadas. La versión de reparación es 5.1.1028."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:biscom:secure_file_transfer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA39957-D9D2-41F6-BAC4-B6DCE183BC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.biscom.com/bis-sft-cv-0005/",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://twitter.com/i_bo0om/status/885050741567750145",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cve.biscom.com/bis-sft-cv-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://twitter.com/i_bo0om/status/885050741567750145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T19:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the \"Bad Taste\" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename."
      }, {
        "lang" : "es",
        "value" : "\"gnome-exe-thumbnailer anterior a versión 0.9.5, es susceptible a una inyección VBScript cuando se generan miniaturas (thumbnails) para archivos MSI, también se conoce como el problema \"\"Bad Taste\"\". Se presenta un ataque local si la víctima utiliza el administrador de archivos GNOME Files y navega en un directorio que contiene un archivo .msi con el código de VBScript en su nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome-exe-thumbnailer_project:gnome-exe-thumbnailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.4",
            "matchCriteriaId" : "9BE7335B-A720-4AD6-874E-366A8BCFB1D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/868705",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gnome-exe-thumbnailer/gnome-exe-thumbnailer/commit/1d8e3102dd8fd23431ae6127d14a236da6b4a4a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/868705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gnome-exe-thumbnailer/gnome-exe-thumbnailer/commit/1d8e3102dd8fd23431ae6127d14a236da6b4a4a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T20:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file."
      }, {
        "lang" : "es",
        "value" : "Fue detectado un problema en Apport hasta la versión 2.20.x. En el archivo apport/report.py, Apport establece el campo ExecutablePath y, a entonces, usa la ruta (path) de acceso para ejecutar enlaces específicos del paquete sin proteger contra el salto de ruta (path) de acceso. Esto permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo .crash creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20.6",
            "matchCriteriaId" : "44F317CA-0246-45C3-9003-F6C463C329A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.net/bugs/1700573",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/ubuntu/+source/apport/+changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1700573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/ubuntu/+source/apport/+changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T20:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file."
      }, {
        "lang" : "es",
        "value" : "La función cabd_read_string en el archivo mspack/cabd.c en libmspack versión 0.5alpha, tal como se usa en ClamAV versión 0.99.2 y otros productos, permite a los atacantes remotos causar una denegación de servicio (exceso lectura del búfer en la región stack de la memoria y bloqueo de aplicación) por medio  de un archivo CAB creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "986DA387-2AD7-4B4B-9153-FAAC30954623"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5643323C-F44D-4F04-A710-D25EA28D301F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11873",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/clamav-vul",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/clamav-vul",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T21:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.7 y versión 2.0.0 hasta 2.0.13, el disector DOCSIS podría entrar en un loop infinito. Esto fue abordado en plugins/docsis/packet-docsis.c por el rechazo de los valores inválidos del parámetro Frame Control."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.13",
            "matchCriteriaId" : "652A3935-30AB-49E2-85F5-1FCA2712DE75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.7",
            "matchCriteriaId" : "1793AF59-7E98-4791-B454-39E978284C58"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13797",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=250216263c3a3f2c651e80d9c6b3dc0adc53dc2c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-36.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=250216263c3a3f2c651e80d9c6b3dc0adc53dc2c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.7 y versión 2.0.0 hasta 2.0.13, el Disector MQ podría bloquearse. Esto se solucionó en epan/dissectors/packet-mq.c mediante la validación de longitud del fragmento anterior a un intento de reensamblaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.13",
            "matchCriteriaId" : "652A3935-30AB-49E2-85F5-1FCA2712DE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.7",
            "matchCriteriaId" : "1793AF59-7E98-4791-B454-39E978284C58"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99910",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13792",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4e54dae7f0d7840836ee6d5ce1e688f152ab2978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-35.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4e54dae7f0d7840836ee6d5ce1e688f152ab2978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T21:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.2.0 hasta 2.2.7 y versión 2.0.0 hasta 2.0.13, el disector AMQP podría bloquearse. Esto fue abordado en el archivo epan/dissectors/packet-amqp.c mediante la comprobación de la disección list con éxito."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8464D-85E7-4FDE-B922-A542451B18FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE77814-337C-4BA9-861B-4EDAFE49A43F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13780",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a102c172b0b2fe231fdb49f4f6694603f5b93b0c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e57c86ef8e3b57b7f90c224f6053d1eacf20e1ba",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-34.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a102c172b0b2fe231fdb49f4f6694603f5b93b0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e57c86ef8e3b57b7f90c224f6053d1eacf20e1ba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T21:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type."
      }, {
        "lang" : "es",
        "value" : "En Wireshark versión 2.0.0 hasta 2.0.13, el disector GPRS LLC podría entrar en un loop grande. Esto se solucionó en epan/dissectors/packet-gprs-llc.c mediante el uso de un tipo de datos entero diferente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.13",
            "matchCriteriaId" : "652A3935-30AB-49E2-85F5-1FCA2712DE75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99914",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13603",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57b83bbbd76f543eb8d108919f13b662910bff9a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-37.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57b83bbbd76f543eb8d108919f13b662910bff9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-37.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T21:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702."
      }, {
        "lang" : "es",
        "value" : "En Wireshark hasta la versión 2.0.13 y versión 2.2.x hasta 2.2.7, el disector WBXML podría entrar en un bucle infinito, accionado por la inyección de paquetes o un archivo de captura malformado. Esto fue abordado en el archivo epan/dissectors/packet-wbxml.c mediante la adición de una comprobación de relaciones entre índices y longitudes. NOTA: esta vulnerabilidad se presenta debido a una corrección incompleta del CVE-2017-7702."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8464D-85E7-4FDE-B922-A542451B18FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE77814-337C-4BA9-861B-4EDAFE49A43F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13796",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3c7168cc5f044b4da8747d35da0b2b204dabf398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3c7168cc5f044b4da8747d35da0b2b204dabf398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-18T21:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350."
      }, {
        "lang" : "es",
        "value" : "En Wireshark hasta la versión 2.0.13 y versión 2.2.x hasta 2.2.7, el disector openSAFETY podría bloquearse o agotar la memoria del sistema. Esto fue abordado en el archivo epan/dissectors/packet-opensafety.c mediante la adición de una comprobación de longitud. NOTA: esta vulnerabilidad se presenta debido a una corrección incompleta del CVE-2017-9350."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8464D-85E7-4FDE-B922-A542451B18FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE77814-337C-4BA9-861B-4EDAFE49A43F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13755",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a83a324acdfc07a0ca8b65e6ebaba3374ab19c76",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a83a324acdfc07a0ca8b65e6ebaba3374ab19c76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T03:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones Google News y Weather, en versiones anteriores a la 3.3.1, para Android permite que atacantes remotos lean tokens OAuth rastreando la red y aprovechando la falta de SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:news_and_weather:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "0C3F865A-E0EA-4F70-BDFD-C513E20D4222"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99892",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/18/advisory-googles-android-news-and-weather-app-doesnt-always-use-ssl-cve-2017-9245/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/18/advisory-googles-android-news-and-weather-app-doesnt-always-use-ssl-cve-2017-9245/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI."
      }, {
        "lang" : "es",
        "value" : "phpSocial (anteriormente phpDolphin) anterior a versión 3.0.1 y anteriores, se presenta un problema de tipo XSS en PATH_INFO para el URI search/tag/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsocial:phpsocial:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "DBF10693-C4CD-42AE-8722-A5769B9B52EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phpsocial.com/page/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-script/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://phpsocial.com/page/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-script/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords."
      }, {
        "lang" : "es",
        "value" : "El Enrutador Wi-Fi modelo HG100R-* versión 2.0.6 de Humax es propenso a una vulnerabilidad de omisión de autenticación por medio de peticiones especialmente creadas en la consola de administración. El bug es explotable remotamente cuando el router es configurado para exponer la consola de administración. El enrutador no está comprobando el token de sesión mientras devuelve respuestas para algunos métodos en url ”/api”. Un atacante puede usar esta vulnerabilidad para recuperar información confidencial, como direcciones IP privadas y públicas, nombres SSID y contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5103D1DB-380D-4630-A67C-D394F1AB4D43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7D3F3-97D5-44EC-81AC-D6E05A940516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackertor.com/2017/07/19/na-cve-2017-11435-the-humax-wi-fi-router-model-hg100r-2-0-6-is/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection."
      }, {
        "lang" : "es",
        "value" : "D-Link DIR-615 anterior a versión 20.12PTb04, tiene una segunda cuenta de administrador con un valor  BACKDOOR de 0x1, que podría permitir a los atacantes remotos obtener acceso por medio de una conexión TELNET."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12ptb01",
            "matchCriteriaId" : "F1744224-B87C-4342-AC97-21668EB17709"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E1CAC5-130B-4B49-85B9-DEEA5ED57B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rootlabs.com.br/backdoor-dlink-dir-615/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rootlabs.com.br/backdoor-dlink-dir-615/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter."
      }, {
        "lang" : "es",
        "value" : "En Sitecore versión 8.2, se presenta un problema de tipo XSS reflejado del parámetro Program del  archivo shell/Applications/Tools/Run."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC590FA4-067E-4DF4-AD10-DE40097B713B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter."
      }, {
        "lang" : "es",
        "value" : "En Sitecore versión 8.2, se presenta un salto de ruta (path) de acceso absoluto por medio del parámetro fi del archivo shell/Applications/Layouts/IDE.aspx y el parámetro Reference del archivo admin/LinqScratchPad.aspx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC590FA4-067E-4DF4-AD10-DE40097B713B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297."
      }, {
        "lang" : "es",
        "value" : "La interfaz de WHM Upload Locale en cPanel anterior a versión 56.0.51, versión 58.x anterior a 58.0.52, versión 60.x anterior a 60.0.45, versión 62.x anterior a 62.0.27, versión 64.x anterior a 64.0.33, y versión 66.x anterior a 66.0.2, presenta un problema de tipo XSS por medio de un nombre de archivo locale, también se conoce como como SEC-297."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.50",
            "matchCriteriaId" : "AD777F77-FEF1-4FC4-BDB2-FA2BAA6EDFA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F028D92-3C84-4FE4-AAF5-328FEC5D0D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897810CF-3BC7-4887-B071-09FB65BD083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CB639A-E60D-4D85-8618-370417571607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4B94D-7D02-43B7-B85C-8E2E8D4EEE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB435131-49F8-459A-BDBE-525499DDED2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF830BB-5C9A-4AB4-8747-0B86EFB01742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9888697E-CC9E-4AE4-B574-EE048CFCC170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415FF9CE-35AD-405F-8ED4-226F885A2518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2D7F2D-5DD5-41C4-BD70-58A65C35B0DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AFC390-8866-482C-B66D-64B75BE99F01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19773D25-BAAB-4700-A442-74C40C49590B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60F6226-DDC1-4CE2-9480-432330818260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD26C46-E1EE-4F8D-A8BC-25CC0E900845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1664B4D-3315-4762-992F-2588B809A636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499671F3-552B-4C6B-898B-DEF0CC57C972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5EFA69-203B-4294-B46A-C73752491877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CCCF02-50E9-4B6E-BB4B-CDA62E226E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75CAE9E-39E3-4897-92B3-497446C24BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3286FD4-AD8C-4E83-B8B9-E4F493BD2234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267C1DB8-9B00-42B0-817E-FE0BC858E22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6FCE08-A701-44B0-9F1A-A3E3BAC93E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97B2F37-8C20-41C9-BE64-458A0AB8E6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40CAD8E8-B92A-4C08-BD4E-3F1A02030BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8AAAE7-00D9-4EDE-A14A-F20E00752C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9568FD6-3D95-4A16-AAD3-5F5DCB7C6B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D7EE7C-9BEC-4957-A490-B96FE278B17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D56B8C-4E8D-476A-BAEA-6517B3C562C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33B8944-8D93-4C12-8DA8-7CF106F8B73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9BF23-1C5A-400D-9914-7BDEFF420552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90398E79-AA78-4A66-AEA4-422C2EE7616C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D151D482-5CE7-4C5D-90E7-55C43371F58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54390258-F8A8-4CFE-8AD5-97855459809A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3073AFD6-7009-49F8-8CC9-559CB2C141B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90317F2F-4610-4B09-8969-BC3D86C6FFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:58.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24EDFDC-3F25-4E3F-B9BC-A9FDE2EE6CE3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E21E570-C2EB-4FFE-85C4-C713963C64EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704DE57D-B2C7-4727-9680-79A8CCF13FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC3C139-8A52-43C4-9FC9-F28157E389A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2330529-D41E-44EB-92D0-B395F7D51917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8DF0CB-6F96-465C-96CB-A3CD44DC4C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5623E6-B6F1-4E52-984B-837988D2CB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC225EE6-68CB-4178-AD65-3DF0FE05560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F43E06-AF7E-4014-93C2-72D0439448A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68C7B25-8E17-4864-BE4F-76878F597DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABEA0FE-A5F8-4757-83BC-593E6B7DD416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2412C3E-77F8-4878-AA5F-B3BA0964C2B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A6C727-81AE-42BF-B304-C013566A0C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2BFF0C-9938-47BD-A326-2F59FF378840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C283BB9-8119-4196-B5E6-13EFF746DAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E853D84D-6151-4E3E-BC59-B3547B060E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B2D4F0-C24A-4343-A11E-33D992BAFDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D313A9FB-3F2F-4B6E-9F7D-252CB9AB8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FE9AD2-3904-4B46-B678-704F4EFFFCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D86369-7ABE-4B73-B286-64F57CC65E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA7C360-5542-494D-B0CC-C52E34A26F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A662B4A1-2DFC-4F4D-BE29-B16158A60C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BB95D-3A28-4FA7-9246-4CA0AD1D590E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29F29FA-2DED-413A-AF3E-AE4AE8C9A7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110F953F-25D8-44C2-823F-30067C61C379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294B30D8-E12F-47CF-B2DA-AC7577FD4B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1BC575-9427-4125-AA54-616FAE6D0BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DBCBE1-EB6F-4876-A956-C12FB0EAED61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D61027-EB99-415F-9F10-B6F9FFC87D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AF6A6B-9AAF-4F74-8A98-48D5F34E6C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A3BD47-3220-484C-B1A8-C3DC8A46306A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD04020-BDD4-4572-8C83-48956C936E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:60.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731A22C9-0426-48EE-92EF-2440ECA1F022"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88079D27-72A3-421F-AF06-A4E136E36970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675E8818-C8C2-42FC-9E1E-C3425B4F45B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ECD9CB6-EF15-41CE-9776-DDB3214F7BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0926FA9-8AC7-49EC-A8A1-62DF897B3E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F03BA70-00E4-431D-BA94-434A629CA864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B614E2-088F-4D56-9D2B-E88EF4F324E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A220E99-3047-4076-9911-141F657846B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410891E7-16EE-4484-9B8A-3F846D97E814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977FF9E0-97B8-4648-AB81-BEB873A8484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C8D92-EE52-4968-8784-9DF10A56C665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204899BD-2207-4F04-ABDA-DE9C99BF46E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0E6E2B-28A9-4F6D-B2DB-D7883755F4B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E2C75A-498B-4307-B037-E40FF971A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB376BFE-CA59-4234-A8DB-224EE8EB2322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FFE31B-F76E-4C03-9789-8B57EEFDB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03CC16-AB92-474A-A822-8333B14B9759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "988AB53E-986F-4354-AD3E-A624BF153EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAC8D69-85E5-43F0-8961-C463347146D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398C63A9-FA1B-493C-AFDA-EF7BFF9976E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:62.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9636950-0115-4BE3-BDE3-70E5BA8FB444"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668787FC-7EC5-4C18-8CB7-52B0D6096A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796793D1-EC44-4B08-84EE-55E1ED33D3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552D9B8-4636-4FBC-A9A7-F35066755F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B946FC-1297-4B93-8CA2-2766DB6B92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A37691-C7D5-4D1B-B3C7-0A1856A97855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FEE551-A861-4F37-9600-9EDB428B6553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC0F847-68D4-49D7-A46E-AB567FE45A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9C2290-6C36-4096-AF00-04CCEAE97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F2C36E-DCD3-4233-A79B-49975B1ACFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F844EA-873F-4002-9641-45E87778A514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047F230D-CE98-455C-A2AA-0913AA85CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8863BD0A-F3AB-40A8-A691-C7E3B7398544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3E2FCD-7A8B-4E69-8838-A8C7472359A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B81B71-F25D-4030-8BD8-FD95BAA4F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7311E32-D6A3-4631-BCC2-FA1583521883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB25FB9-16C1-4242-A662-FD2FE540FF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D851B7C1-0376-4E3A-BB49-48C3CB56A1A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C95DA9-BE14-4668-B7C4-ABE2BD9E2214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EE0B2C-BE85-4303-8A8C-14CEA2BA018B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CF5EB8-AFBA-49F5-8CCB-40155D056D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3335D4-723F-4755-AAEA-76CB3B34DC8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E037D4A-F267-448C-82EF-6A7984B6D33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3034A0D0-05E3-46CF-B77C-4168DB4882B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01032A77-602A-4575-9D9D-02A8EC8B0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:64.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AB5065-5774-4EAA-8118-86403EAA1090"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:whm:66.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45589384-10B4-4CE4-A08E-541F62213002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS anterior a versión 4.1.5.10, presenta una vulnerabilidad de inyección SQL en el archivo /front/search.php por medio de la matriz $_GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.4",
            "matchCriteriaId" : "8F42DA9A-02E5-47D1-AEB5-1F80771F7180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intelliants/subrion/issues/479",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS anterior a versión 4.1.6, presenta una vulnerabilidad de inyección SQL en el archivo /front/actions.php por medio de la matriz $_POST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.4",
            "matchCriteriaId" : "8F42DA9A-02E5-47D1-AEB5-1F80771F7180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intelliants/subrion/issues/480",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadPESImage function in coders\\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file."
      }, {
        "lang" : "es",
        "value" : "La función ReadPESImage en el archivo coders\\pes.c in en ImageMagick  versión 7.0.6-1, tiene una vulnerabilidad de bucle infinito que puede generar el agotamiento del CPU por medio de un archivo PES creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/537",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service."
      }, {
        "lang" : "es",
        "value" : "La función ReadSCREENSHOTImage en el archivo coders/screenshot.c en ImageMagick anterior a versión 7.0.6-1, presenta pérdida de memoria, causando una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.6-0",
            "matchCriteriaId" : "6DE125EC-DF93-4416-B1ED-2F0017FE7DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99948",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867897",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/72a50e400d98d7a2fd610caedfeb9af043dc5582",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/72a50e400d98d7a2fd610caedfeb9af043dc5582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadJPEGImage en el archivo coders/jpeg.c en ImageMagick anterior a versión 7.0.6-1, permite a los atacantes remotos obtener información confidencial de ubicaciones de memoria no inicializadas por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-0",
            "matchCriteriaId" : "4418E9AC-8B0E-4C0C-9B70-21FF197441FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.6-1",
            "matchCriteriaId" : "FB5FB6BA-15D2-4169-BF8D-6102E106080B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867893",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f6463ca9588579633bbaed9460899d892aa3c64a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f6463ca9588579633bbaed9460899d892aa3c64a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin."
      }, {
        "lang" : "es",
        "value" : "El archivo coders/mpc.c en ImageMagick anterior a versión 7.0.6-1, no habilita transmisiones visibles y, por lo tanto, no puede comprobar los tamaños de blob, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de una imagen recibida de stdin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-0",
            "matchCriteriaId" : "4418E9AC-8B0E-4C0C-9B70-21FF197441FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.6-1",
            "matchCriteriaId" : "FB5FB6BA-15D2-4169-BF8D-6102E106080B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99958",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867896",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/529ff26b68febb2ac03062c58452ea0b4c6edbc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/b007dd3a048097d8f58949297f5b434612e1e1a3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/529ff26b68febb2ac03062c58452ea0b4c6edbc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/b007dd3a048097d8f58949297f5b434612e1e1a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short."
      }, {
        "lang" : "es",
        "value" : "El archivo coders/jpeg.c en ImageMagick anterior a versión 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un dato JPEG que es demasiado corto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-0",
            "matchCriteriaId" : "4418E9AC-8B0E-4C0C-9B70-21FF197441FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.6-1",
            "matchCriteriaId" : "FB5FB6BA-15D2-4169-BF8D-6102E106080B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867894",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-11450",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-11450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T07:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file."
      }, {
        "lang" : "es",
        "value" : "Los enrutadores GWR de Geneko permiten secuencias de salto de directorios arrancando con una subcadena /../, como es demostrado por el acceso de lectura no autenticado en el archivo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:geneko:gwr352_3g_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEF2807-20CA-4C38-BBEA-A7C6DB3CAC07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:geneko:gwr352_3g_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705B0D7C-5192-49AD-8C5F-BF091773A898"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:geneko:gwr352wv_wide_voltage_3g_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9343D32-F84D-4EBF-AE3F-756145F60C07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:geneko:gwr352wv_wide_voltage_3g_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBEF4A2-3466-4F58-A2AE-9517DF055F8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:geneko:gwr252_edge_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF12B26C-5503-4BFD-B453-8806AE6F51BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:geneko:gwr252_edge_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED2C10E-6E61-4705-9ADC-FFFEF938BDB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:geneko:gwr202_gprs_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01AB59E-A71A-47CC-B2A6-447677EFD47F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:geneko:gwr202_gprs_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB4180-4378-4918-8B56-050E21B42C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3317#more-3317",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3317#more-3317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T12:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en MetInfo versión 5.3.17, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio del encabezado HTTP Client-IP o X-Forwarded-For  en el archivo /include/stat/stat.php en una acción para."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AFA18D-7A78-45EE-B0CF-BAEE3639D587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phantom0301/vulns/blob/master/Metinfo.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phantom0301/vulns/blob/master/Metinfo.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T18:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel."
      }, {
        "lang" : "es",
        "value" : "El componente Screensavercc en eLux RP anterior a versión 5.5.0, permite a los atacantes omitir las restricciones de configuración previstas y ejecutar comandos arbitrarios con privilegios root mediante la inserción de comandos en un cuadro de diálogo de configuración local en el panel de control."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:elux:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.0",
            "matchCriteriaId" : "56CAC801-DC37-4998-9CB7-89FD4BA7137D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-7977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-7977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1203",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-19T20:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678."
      }, {
        "lang" : "es",
        "value" : "La plataforma y las aplicaciones de IBM Tivoli Endpoint Manager (para Lifecycle/Power/Patch) son vulnerables a un problema de tipo cross-site-scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, lo que altera la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 123678."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AD0AAF-1D86-44B4-92DB-3E4A3C38DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A36BD8-D35C-4FDE-9CFC-455728F61F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC36F04-C3B1-4DBD-B28B-4C4BBBB139E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82EAE1E-3994-45CA-9988-7561A67652E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200C85DF-E535-4A36-A601-9A6CF79141C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37ED6B1-BB21-4DC5-8DDD-909FEE674001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2F8B3-CCDD-4C4D-8790-4468A15D32AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E47D31B-7665-416E-9220-7DC02B4BC298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7890CF-0008-48BA-8A04-FCFFC0C1B01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4442C0AA-DE96-4040-B907-2B10167B18AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5419C4-A2C6-417E-8EE4-A797579A2B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8C1B44-1283-441B-9AAB-B95C7DC80255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FE1605-0746-4A94-A643-5187CBEAE596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6565DE-ACFA-41E7-8761-1C1BC8A301BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314204A3-9777-4AE8-84BF-CB41BA2BB47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5F7894-92B8-4304-BEC8-269C2A9D91EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006014",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123678",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1218",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-19T20:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager es vulnerable a un problema de tipo cross-site request forgery, lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario en el que el sitio web confía. ID de IBM X-Force: 123858."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FE1605-0746-4A94-A643-5187CBEAE596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6565DE-ACFA-41E7-8761-1C1BC8A301BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314204A3-9777-4AE8-84BF-CB41BA2BB47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5F7894-92B8-4304-BEC8-269C2A9D91EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123858",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1219",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-19T20:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager es vulnerable a un ataque de Inyección  XML External Entity (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información confidencial o consumir recursos de memoria. ID de IBM X-Force: 123859."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AD0AAF-1D86-44B4-92DB-3E4A3C38DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A36BD8-D35C-4FDE-9CFC-455728F61F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC36F04-C3B1-4DBD-B28B-4C4BBBB139E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82EAE1E-3994-45CA-9988-7561A67652E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200C85DF-E535-4A36-A601-9A6CF79141C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37ED6B1-BB21-4DC5-8DDD-909FEE674001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2F8B3-CCDD-4C4D-8790-4468A15D32AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E47D31B-7665-416E-9220-7DC02B4BC298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7890CF-0008-48BA-8A04-FCFFC0C1B01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4442C0AA-DE96-4040-B907-2B10167B18AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5419C4-A2C6-417E-8EE4-A797579A2B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8C1B44-1283-441B-9AAB-B95C7DC80255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FE1605-0746-4A94-A643-5187CBEAE596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6565DE-ACFA-41E7-8761-1C1BC8A301BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006014",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123859",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1223",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-19T20:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123902."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager podría permitir a un atacante remoto conducir ataques de phishing mediante un ataque de redireccionamiento abierto. Mediante la persuasión a una víctima para que visite un sitio Web especialmente creado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada para reconducir a un usuario a un sitio web malicioso que parece ser de confianza. Esto podría permitir al atacante obtener información altamente confidencial o conducir nuevos ataques contra la víctima. ID de IBM X-Force: 123902."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FE1605-0746-4A94-A643-5187CBEAE596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6565DE-ACFA-41E7-8761-1C1BC8A301BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314204A3-9777-4AE8-84BF-CB41BA2BB47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5F7894-92B8-4304-BEC8-269C2A9D91EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123902",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1224",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-19T20:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. ID de IBM X-Force: 123903."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FE1605-0746-4A94-A643-5187CBEAE596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6565DE-ACFA-41E7-8761-1C1BC8A301BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314204A3-9777-4AE8-84BF-CB41BA2BB47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5F7894-92B8-4304-BEC8-269C2A9D91EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123903",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1309",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-19T20:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Master Data Management Server versión 11.0 hasta 11.6, almacena las credenciales de usuario en texto plano y sin cifrar que puede ser leído por un usuario local. ID de IBM X-Force: 125463."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54ABD5B3-167A-403E-AF24-4648ED141EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD87A187-8144-4862-95B5-4431B14939CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE14EFD3-EE7A-4115-8ACB-E84C2C9D7C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245897F6-4514-4311-8842-0E7CA4D39F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70161811-DB7E-4675-BF8B-CEEA38A2C69A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005437",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99872",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125463",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T21:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero."
      }, {
        "lang" : "es",
        "value" : "Un SIGFPE se genera en la función box_blur_line del archivo rsvg-filter.c en GNOME librsvg versión 2.40.17 durante un intento de análisis de un archivo SVG creado, debido a la protección incorrecta contra la división por cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:librsvg:2.40.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A5C854-983B-42B9-AF52-7D8F62549768"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=783835",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://git.gnome.org/browse/librsvg/commit/?id=ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4436-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=783835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://git.gnome.org/browse/librsvg/commit/?id=ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4436-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-19T21:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecified other impact via a crafted Ruby script, related to the parser_tokadd_utf8 function in parse.y. NOTE: this might have security relevance as a bypass of a $SAFE protection mechanism."
      }, {
        "lang" : "es",
        "value" : "La función parser_yyerror en el analizador UTF-8 de Ruby versión 2.4.1, permite a los atacantes causar una denegación de servicio (lectura o escritura no válidas) o posiblemente tener otro impacto no especificado por medio de un script Ruby creado, relacionado con la función parser_tokadd_utf8 en parse.y. NOTA: esto podría tener relevancia para la seguridad como una omisión de un mecanismo de protección $SAFE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946D2AB0-D334-4D94-BDA2-733BFC6C9E1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.ruby-lang.org/issues/13742",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/59344",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/issues/13742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/59344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T00:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to servlets/ajax_file_upload. This results in arbitrary code execution by requesting the .jsp file at a /assets URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga de archivos arbitraria en el archivo com/dotmarketing/servlets/AjaxFileUploadServlet.class en dotCMS versión 4.1.1, permite a los administradores autenticados remotos cargar archivos .jsp en ubicaciones arbitrarias por medio de secuencias de salto de directorio en el parámetro fieldName en servlets/ajax_file_upload. Esto da como resultado la ejecución de código arbitrario mediante la petición del archivo .jsp en un URI /asset."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B242F55-9EC7-46B3-AC09-F0D57BC2B5AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/12131",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143383/dotcms411-shell.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dotCMS/core/issues/12131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143383/dotcms411-shell.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T00:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrientDB through 2.2.22 does not enforce privilege requirements during \"where\" or \"fetchplan\" or \"order by\" use, which allows remote attackers to execute arbitrary OS commands via a crafted request."
      }, {
        "lang" : "es",
        "value" : "OrientDB hasta versión 2.2.22, no impone requisitos de privilegios durante el uso de \"where\", \"fetchplan\" o \"order by\", que permite a los atacantes remotos ejecutar comandos arbitrarios de sistema operativo por medio de una petición creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orientdb:orientdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.22",
            "matchCriteriaId" : "099C02D4-94F1-4F2E-ACA3-16B17B99F77E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.heavensec.org/?p=1703",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/orientechnologies/orientdb/wiki/OrientDB-2.2-Release-Notes#2223---july-11-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.heavensec.org/?p=1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/orientechnologies/orientdb/wiki/OrientDB-2.2-Release-Notes#2223---july-11-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T00:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la función soap_get en Genivia gSOAP, en versiones 2.7.x y 2.8.x anteriores a la 2.8.48, como se utilizaba en las cámaras y otros dispositivos de Axis, permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (desbordamiento de búfer basado en pila y cierre inesperado de la aplicación) mediante un documento XML de gran tamaño. Esto también se conoce como Devil's Ivy. Nota: el documento de gran tamaño sería bloqueado por múltiples configuraciones de servidores web comunes en ordenadores de uso general."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBB3636-9B3C-4510-95A3-252C58512803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21B0C46-4D0F-4F62-B16E-0653D8967F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E052E826-21DB-4319-A70E-0FE9E4EEA411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0D7CA0-7B78-4992-8C19-0786F9043472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F24EDE-83A7-4AA4-9705-874ED61BA3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C175F7E-B2E0-4B32-9EDC-BAF3F54249FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA6230D-EA05-40AF-A32F-313F831B0144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E34821-2752-417B-A7E6-17B6B134C90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA08B1C-23ED-481C-80DE-79DA72E70990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194E477C-5D82-42A0-B8D9-D01562D63E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A989624-C8E3-4D05-939E-0767B24A4FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7897D98D-87D9-4EBA-9CE6-9157420FC921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF79A11-5E29-4F65-828F-60B8AD07418D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD5B9D9-F244-4D46-9295-160A1FD11093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FACDE9-9E5C-4E0B-B741-826C5009DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A09C78D-1AB0-414E-9AD8-B6D3D3C0E6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA182C1-F202-4597-892B-9D282944F197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CED955-9381-4D75-872C-4A9116BA2287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D1493E-5DB4-47BF-9687-D8B1F4F9F9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D930C1-E319-4280-A699-9212689246C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17864E93-1E1C-40B8-8C42-6FEA85493A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F201B4-283C-4DE2-8C58-BDA1A544CBCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E24264-626A-420B-99D5-FEC3CD6E87DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3F00D7-7A38-4BD3-A906-A9353C04B1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC584D2-A001-455D-B525-CD6431489E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D367806E-9664-423B-9DC7-102949BEDABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8AB823-1D53-48CB-BB45-7928C282871D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF4BC36-DEE3-4E27-932B-12DC3FBD6F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2792495C-C97D-4F01-A682-54F2F6028855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A895EF05-7C7A-4695-AACA-F6D3985B0CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10012CF-CECE-4FF3-80AF-6BE451CF9670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C80B20A-C551-4F58-A7CD-BF92AD614A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E701D21-912D-4338-91AE-A56F114EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE217A0-A7E3-4403-BE5D-E4170752341B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC9BFF6-0D19-4299-846E-A81A949E2BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D11963-1098-429E-8191-B42AA7D00887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A275DDC1-D2B8-4C4F-A5C6-D8631832E8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF675C-3FCC-466F-A8CE-9E17F39895D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A1D8AE-7559-40D0-B71C-AD88ADC59900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A177EC-7BC0-46D6-9851-4A9D9E2F6DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F58CA26-237D-45C4-ACF5-51302797B38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E25C09-FF39-4180-9B19-697EE8B01EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B22D3E-385E-424C-97FD-C9891730E5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FF7B6B-F12D-4EF5-87AB-8C16FCC66D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54429AF8-AF48-429F-9EBD-F79EC71B54B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD8433B-E530-4244-BC0E-668190A9EFC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAADC039-FFD2-43E8-AA97-D93A9CDDCE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48468AB9-8D98-4AE9-A284-B847D007C6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13CCD80-B55D-4FE3-8FDD-5051AB55F8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CED617-A0EB-4003-AADE-B8B80281B679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE54C1F8-4066-41ED-A692-28A4E8A0DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44396580-4842-4BE3-B84D-E3878210D5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98534011-D3D8-4202-8821-F5691B40D978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F75A9B9-E967-494F-8257-B0A3571D3D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3F022A-B8CD-4696-8363-23287E5A7691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D9E0C-3F85-4668-B935-B3201A1EB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86267EB7-D754-4BE4-8698-908E20E100B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473FFA52-32D0-44B6-BD80-1F41A172C2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053AB4E-FB4A-48A1-95CA-5C10029919AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE1F7B3-DBD9-42E8-90B5-33A000713816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC23211-5826-4CB8-A68E-1C7F5CF30BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41947A86-4173-495F-A44E-2D1A737CA1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767B61BF-7E8E-4867-9336-2F24C71D1637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9654CC51-6CD8-4D58-B4F3-AD47FAE3D76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E635FEB-A1C1-4246-8FBA-50109E5B8506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2862792-6768-4EDB-9A38-377A136593D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.senr.io/blog/devils-ivy-flaw-in-widely-used-third-party-code-impacts-millions",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.senr.io/devilsivy.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99868",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1472807",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049348",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.genivia.com/advisory.html#Security_advisory:_CVE-2017-9765_bug_in_certain_versions_of_gSOAP_2.7_up_to_2.8.47_%28June_21%2C_2017%29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.genivia.com/changelog.html#Version_2.8.48_upd_%2806/21/2017%29",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://blog.senr.io/blog/devils-ivy-flaw-in-widely-used-third-party-code-impacts-millions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.senr.io/devilsivy.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1472807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.genivia.com/advisory.html#Security_advisory:_CVE-2017-9765_bug_in_certain_versions_of_gSOAP_2.7_up_to_2.8.47_%28June_21%2C_2017%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.genivia.com/changelog.html#Version_2.8.48_upd_%2806/21/2017%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T01:34:13.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos D-Link DIR-600M anteriores a versión C1_v3.05ENB01_beta_20170306, se encontró un problema de tipo XSS en el parámetro username del archivo form2userconfig.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-600m_firmware:fw3.05b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED97C29-98BB-4CEB-A56A-6A6C9C14F268"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-600m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17C8001-4987-4A70-84C8-5AFF6F196BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600M/REVC/DIR-600M_REVC_FIRMWARE_PATCH_NOTES_3.05B01_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/stored-xss-in-d-link-dir-600m-router.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Product", "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600M/REVC/DIR-600M_REVC_FIRMWARE_PATCH_NOTES_3.05B01_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/stored-xss-in-d-link-dir-600m-router.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter."
      }, {
        "lang" : "es",
        "value" : "El archivo get2post.php en IDERA Uptime Monitor versión 7.8, presenta un salto de directorio en el parámetro file_name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idera:uptime_infrastructure_monitor:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92EF25C-2F12-4F88-94BC-1BCE97E1C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3223#more-3223",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3223#more-3223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter."
      }, {
        "lang" : "es",
        "value" : "IDERA Uptime Monitor versión 7.8, presenta inyección SQL en el archivo /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php por medio del parámetro element."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idera:uptime_infrastructure_monitor:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92EF25C-2F12-4F88-94BC-1BCE97E1C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3223#more-3223",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3223#more-3223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter."
      }, {
        "lang" : "es",
        "value" : "IDERA Uptime Monitor versión 7.8, presenta una inyección SQL en el archivo /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php por medio del parámetro element."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idera:uptime_infrastructure_monitor:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92EF25C-2F12-4F88-94BC-1BCE97E1C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3223#more-3223",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3223#more-3223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."
      }, {
        "lang" : "es",
        "value" : "La función acpi_ns_terminate() en el archivo drivers/acpi/acpica/nsutils.c en el kernel de Linux anterior a versión 4.12, no limpia la caché operand y causa un volcado de pila del kernel, que permite a los usuarios locales obtener información confidencial de la memoria del kernel y omitir el mecanismo de protección KASLR (en el kernel hasta versión 4.9) por medio de una tabla ACPI creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.9",
            "matchCriteriaId" : "F52D90B6-7027-46F8-9696-3783E7F7A0B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3b2d69114fefa474fca542e51119036dceb4aa6f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/acpica/acpica/commit/a23325b2e583556eae88ed3f764e457786bf4df6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e51119036dceb4aa6f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3b2d69114fefa474fca542e51119036dceb4aa6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/acpica/acpica/commit/a23325b2e583556eae88ed3f764e457786bf4df6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e51119036dceb4aa6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función mp_override_legacy_irq() en arch/x86/kernel/acpi/boot.c en el kernel de Linux hasta la versión 3.2 permite que los usuarios locales obtengan privilegios mediante una tabla ACPI manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "5A53989A-9D64-4F5D-AC0F-115A2A72785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.63",
            "matchCriteriaId" : "7E7373BF-7059-470B-B762-F3696EED61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.44",
            "matchCriteriaId" : "C2695139-BE23-4BAC-97F1-4CD2A6240BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.79",
            "matchCriteriaId" : "6C4F1EAA-26DD-4383-BB29-9304CE7705F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.40",
            "matchCriteriaId" : "E0B96CF8-017F-4BA8-A487-1308681D0C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.4",
            "matchCriteriaId" : "6D215460-34F8-4C32-939B-270A67F6FA9C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100010",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=96301209473afd3f2f274b91cb7082d161b9be65",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3fe3d8f2892173fa6a4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=96301209473afd3f2f274b91cb7082d161b9be65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3fe3d8f2892173fa6a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php."
      }, {
        "lang" : "es",
        "value" : "GLPI anterior a versión 9.1.5.1, presenta Inyección SQL en la variable $crit en el archivo inc/computer_softwareversion.class.php, explotable mediante ajax/common.tabs.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.5.0",
            "matchCriteriaId" : "ACAEDDE9-AE9D-42A3-ABEA-737C4F943920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/issues/2475",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/issues/2475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php."
      }, {
        "lang" : "es",
        "value" : "GLPI anterior a versión 9.1.5.1, presenta inyección SQL en el campo condition rule, explotable mediante front/rulesengine.test.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.5.0",
            "matchCriteriaId" : "ACAEDDE9-AE9D-42A3-ABEA-737C4F943920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/issues/2476",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/issues/2476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T04:29:00.423",
      "lastModified" : "2025-10-22T00:16:07.533",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Citrix NetScaler SD-WAN hasta la versión v9.1.2.26.561201 permite a atacantes remotos ejecutar comandos de shell aleatorios como root mediante la cookie CGISESSID. En los dispositivos cloudBridge (el nombre formal de NetScaler SD-WAN), la cookie llamada fue CAKEPHP mas que CGISESSID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Citrix Multiple Products Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.2.26.561201",
            "matchCriteriaId" : "F3EEC9A0-E3AC-43C2-AC41-08C0847A025E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99943",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039019",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225990",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42345/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42346/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42345/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42346/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6316",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9785",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2017-07-20T12:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie."
      }, {
        "lang" : "es",
        "value" : "El archivo Csrf.cs en NancyFX Nancy anterior a la versión 1.4.4 y versión 2.x anterior a la 2.0-dangermouse, presenta una ejecución de código remota por medio de la deserialización de datos JSON en una cookie CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nancyfx:nancy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.3",
            "matchCriteriaId" : "C54A1B53-D168-4227-90FD-D97F895367DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nancyfx:nancy:2.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "47190699-3346-445E-BBFB-44A98C871A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nancyfx:nancy:2.0.0:barneyrubble:*:*:*:*:*:*",
            "matchCriteriaId" : "BC055B23-F9E3-4AEA-B059-74CE27D24EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nancyfx:nancy:2.0.0:clinteastwood:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA014C4-2473-4021-9315-4A8D37A94E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NancyFx/Nancy/releases/tag/v1.4.4",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NancyFx/Nancy/releases/tag/v1.4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9822",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2017-07-20T12:29:00.233",
      "lastModified" : "2025-10-22T00:16:13.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka \"2017-08 (Critical) Possible remote code execution on DNN sites.\""
      }, {
        "lang" : "es",
        "value" : "DNN (también se conoce como DotNetNuke) anterior a la versión 9.1.1, presenta una ejecución de código remota por medio de una cookie, también se conoce como \"2017-08 (Critical) Possible remote code execution on DNN sites.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "DotNetNuke (DNN) Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.1",
            "matchCriteriaId" : "15E7F247-9C24-475D-9D04-01078139EDF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.dnnsoftware.com/community/security/security-center",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102213",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.dnnsoftware.com/community/security/security-center",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9822",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T13:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Televes COAXDATA GATEWAY 1Gbbps doc-wifi-hgw_v1.02.0014 4.20 no verifica la contraseña de password.shtml, llevando al cambio de contraseña aleatorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:televes:coaxdata_gateway_1gbps_firmware:1.02.0014_4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74ABA4C7-CDCA-4FC7-8883-ABD67936DBB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:televes:coaxdata_gateway_1gbps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548C15C7-67A7-47D7-BFAD-BC93AF87F6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T13:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Televes COAXDATA GATEWAY 1Gbps doc-wifi-hgw_v1.02.0014 4.20 la propiedad de backup carece de control de acceso, relacionado a ReadFile.cgi y LoadCfgFile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:televes:coaxdata_gateway_1gbps_firmware:1.02.0014_4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74ABA4C7-CDCA-4FC7-8883-ABD67936DBB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:televes:coaxdata_gateway_1gbps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548C15C7-67A7-47D7-BFAD-BC93AF87F6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T13:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in /mib.db."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Televes COAXDATA GATEWAY 1Gbps doc-wifi-hgw_v1.02.0014 4.20 tienes las credenciales en texto plano en /mib.db."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:televes:coaxdata_gateway_1gbps_firmware:1.02.0014_4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74ABA4C7-CDCA-4FC7-8883-ABD67936DBB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:televes:coaxdata_gateway_1gbps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548C15C7-67A7-47D7-BFAD-BC93AF87F6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T16:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image."
      }, {
        "lang" : "es",
        "value" : "La función ReadOneDJVUImage en el archivo coders/djvu.c en ImageMagick hasta  las versiones 6.9.9-0 y versión 7.x hasta 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (bucle infinito y consumo de CPU) por medio de una imagen DJVU malformada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867826",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/528",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2517",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a la versión 10.3.3 está afectado. El problema involucra el componente \"Safari\". Permite a los atacantes remotos falsificar la barra de direcciones por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7006",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct a timing side-channel attack to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses SVG filters."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2 y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos lleven a cabo un ataque de sincronización de canal lateral para omitir la política del mismo origen y obtener información sensible mediante un sitio web manipulado que utilice filtros SVG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99886",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7007",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the \"EventKitUI\" component. It allows remote attackers to cause a denial of service (resource consumption and application crash)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a la versión 10.3.3 está afectado. El problema involucra el componente \"EventKitUI\". Permite a los atacantes remotos causar una denegación de servicio (consumo de recursos y bloqueo de aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7008",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the \"CoreAudio\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. El problema involucra el componente \"CoreAudio\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un archivo movie creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99880",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7009",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"IOUSBFamily\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"IOUSBFamily\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7010",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"libxml2\" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted XML file."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. iCloud anterior a versión 6.2.2 en Windows se ve afectado. iTunes anterior a versión 12.6.2 en Windows se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. El problema involucra el componente \"libxml2\". Permite a los atacantes remotos obtener información confidencial o causar una denegación de servicio (lectura fuera de límites y bloqueo de aplicación) por medio de un archivo XML creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99889",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7011",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME elements."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos suplanten la barra de direcciones mediante un sitio web manipulado que utiliza elementos FRAME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "8D427225-2688-4270-B6A3-762A99D70084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99887",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7012",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the \"WebKit Web Inspector\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows y iTunes en versiones anteriores a la 12.6.2 en Windows. El problema está relacionado con el componente \\\"WebKit Web Inspector\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99890",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7013",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"libxml2\" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted XML file."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. iCloud anterior a versión 6.2.2 en Windows se ve afectado. iTunes anterior a versión 12.6.2 en Windows se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a 3.2.3 se ve afectado. El problema involucra el componente \"libxml2\". Permite a los atacantes remotos obtener información confidencial o causar una denegación de servicio (lectura fuera de límites y bloqueo de aplicación) por medio de un archivo XML creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99879",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7014",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión  10.12.6 está afectado. El problema involucra el componente \"Intel Graphics Driver\".  Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7015",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Audio\" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión 10.12.6 está afectado. El problema involucra el componente \"Audio\". Permite a los atacantes remotos obtener información confidencial de la memoria de proceso o causar una denegación de servicio (corrupción de memoria) por medio de un archivo de audio creado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7016",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"afclip\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión 10.12.6 está afectado. El problema involucra el componente \"afclip\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un archivo de audio creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7017",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a  la versión 10.12.6 está afectado. El problema involucra el componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7018",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42373/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7019",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit Page Loading\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit Page Loading\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7020",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7021",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"AppleGraphicsPowerManagement\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a  la versión 10.12.6 está afectado. El problema involucra el componente \"AppleGraphicsPowerManagement\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7022",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "8D427225-2688-4270-B6A3-762A99D70084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7023",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "8D427225-2688-4270-B6A3-762A99D70084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7024",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "8D427225-2688-4270-B6A3-762A99D70084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7025",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "8D427225-2688-4270-B6A3-762A99D70084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7026",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7027",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7028",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a10.3.3 se ve afectado. MacOS versión anterior a10.12.6 se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. WatchOS versión anterior a 3.2.3 se ve afectado. El tema involucra el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.3",
            "matchCriteriaId" : "0EAF71BD-DE31-4444-903C-90EE1D2F07EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7029",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. MacOS versión anterior a 10.12.6 se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. WatchOS versión anterior a 3.2.3 se ve afectado. El tema involucra el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.3",
            "matchCriteriaId" : "0EAF71BD-DE31-4444-903C-90EE1D2F07EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7030",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7031",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Foundation\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a  la versión 10.12.6 está afectado. El problema involucra el componente \"Foundation\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7032",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"kext tools\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión 10.12.6 está afectado. El problema involucra el componente \"kext tools\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7033",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"afclip\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a  la versión 10.12.6 está afectado. El problema involucra el componente \"afclip\". Permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de un archivo de audio creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7034",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7035",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión 10.12.6 está afectado. El problema involucra el componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7036",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a  la versión 10.12.6 está afectado. El problema involucra el componente \"Intel Graphics Driver\" . Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7037",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42378/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42378/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7038",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Scripting (XSS) de DOMParser en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2 y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99888",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7039",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42362/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42362/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7040",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42367/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42367/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7041",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42366/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42366/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7042",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42364/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7043",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en ciertos productos de Apple. Las versiones anteriores a la 10.3.3 de iOS se han visto afectadas, así como Safari en versiones anteriores a la 10.1.2, iCloud en versiones anteriores a la 6.2.2 en Windows, iTunes en versiones anteriores a la 12.6.2 en Windows y tvOS en versiones anteriores a la 10.2.2. El problema está relacionado con el componente \\\"WebKit\\\". Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42361/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42361/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7044",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a  la versión 10.12.6 está afectado. El problema involucra el componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7045",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión 10.12.6 está afectado. El problema involucra el componente \"Intel Graphics Driver\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7046",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari versión anterior a 10.1.2 se ve afectado. iCloud versión anterior a 6.2.2 en Windows se ve afectado. iTunes versión anterior a 12.6.2 en Windows se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42365/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42365/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7047",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"libxpc\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. MacOS versión anterior a 10.12.6 se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. WatchOS versión anterior a 3.2.3 se ve afectado. El problema involucra el componente \"libxpc\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.3",
            "matchCriteriaId" : "0EAF71BD-DE31-4444-903C-90EE1D2F07EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42407/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42407/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7048",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari versión anterior a 10.1.2 se ve afectado. iCloud versión anterior a 6.2.2 en Windows se ve afectado. iTunes versión anterior a 12.6.2 en Windows se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42360/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42360/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7049",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:01.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari versión anterior a 10.1.2 se ve afectado. iCloud versión anterior a 6.2.2 en Windows se ve afectado. iTunes versión anterior a 12.6.2 en Windows se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42363/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42363/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7050",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos de Apple, macOS estas afectadas las versiones anteriores a la 10.12.6. Se trata del componente \"Bluetooth\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación elaborada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7051",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos de Apple, macOS estas afectadas las versiones anteriores a la 10.12.6. Se trata del componente \"Bluetooth\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación elaborada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7052",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari versión anterior a 10.1.2 se ve afectado. iCloud versión anterior a 6.2.2 en Windows se ve afectado. iTunes versión anterior a 12.6.2 en Windows se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7053",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iTunes before 12.6.2 on Windows is affected. The issue involves the \"iTunes\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue detectado un problema en ciertos productos de Apple. iTunes versión anterior a 12.6.2 en Windows se ve afectado. El tema involucra el componente \"iTunes\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99884",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7054",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos de Apple, macOS estas afectadas las versiones anteriores a la 10.12.6. Se trata del componente \"Bluetooth\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación elaborada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7055",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari  versión anterior a 10.1.2 se ve afectado. iCloud  versión anterior a 6.2.2 en Windows se ve afectado. iTunes  versión anterior a 12.6.2 en Windows se ve afectado. TVOS  versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7056",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS  versión anterior a 10.3.3 se ve afectado. Safari  versión anterior a 10.1.2 se ve afectado. iCloud  versión anterior a 6.2.2 en Windows se ve afectado. iTunes  versión anterior a 12.6.2 en Windows se ve afectado. TVOS v anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42376/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42376/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7058",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the \"Notifications\" component. It allows physically proximate attackers to read unintended notifications on the lock screen."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a  la versión 10.3.3 está afectado. El problema involucra el componente \"Notifications\". Permite a los atacantes físicamente próximos leer notificaciones no deseadas en la pantalla de bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7059",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema de XSS de DOMParser en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari versión anterior a 10.1.2 se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99886",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7060",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the \"Safari Printing\" component. It allows remote attackers to cause a denial of service (excessive print dialogs) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. Safari anterior a la versión 10.1.2 se ve afectado. El problema está relacionado con el componente \"Safari Printing\". Permite a los atacantes remotos causar una denegación de servicio (diálogos de impresión excesivos) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99887",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7061",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a10.3.3 se ve afectado. Safari versión anterior a 10.1.2 se ve afectado. iCloud versión anterior a 6.2.2 en Windows se ve afectado. iTunes versión anterior a 12.6.2 en Windows se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) por medio de un sitio web creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.2",
            "matchCriteriaId" : "1FE3A798-7209-4143-AE7A-AD7928F3C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "6220D63F-26C4-4AF5-B382-A3FB9B887C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.2",
            "matchCriteriaId" : "677C2157-45FF-4143-8879-9BABB7F50310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42666/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42666/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7062",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Contacts\" component. A buffer overflow allows remote attackers to execute arbitrary code or cause a denial of service (application crash)."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS anterior a versión 10.3.3 se ve afectado. MacOS anterior a versión 10.12.6 se ve afectado. TVOS anterior a versión 10.2.2 se ve afectado. WatchOS anterior a versión 3.2.3 se ve afectado. El problema involucra el componente \"Contacts\". Un desbordamiento de búfer permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7063",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Messages\" component. It allows remote attackers to cause a denial of service (memory consumption and application crash)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. iOS anterior a  la versión 10.3.3 está afectado. WatchOS anterior a la versión 3.2.3 está afectado. El problema involucra el componente \"Messages\". Permite a los atacantes remotos causar una denegación de servicio (consumo de memoria y bloqueo de aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99881",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7064",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the \"WebKit\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.3 esta afectado. Safari versión anterior al 10.1.2 esta afectado. iCloud versión anterior a 6.2.2 en Windows esta afectado. iTunesversión anterior a 12.6.2 en Windows esta afectado. El problema involucra el componente \"WebKit\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.1",
            "matchCriteriaId" : "B5211EFA-1504-463B-AC5C-35EA9DD5B152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "8D427225-2688-4270-B6A3-762A99D70084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "3184DE24-441E-4AF1-A834-1A6B30BBB309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99890",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42375/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42375/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7067",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en ciertos productos de Apple. MacOS anterior a la versión 10.12.6 está afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes omitir las restricciones de lectura de memoria previstas por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7068",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"libarchive\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted archive file."
      }, {
        "lang" : "es",
        "value" : "Un problema fue encontrado en ciertos productos de Apple. iOS  versión anterior a 10.3.3 se ve afectado. MacOS versión anterior a 10.12.6 se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. WatchOS versión anterior a 3.2.3 se ve afectado. El problema involucra el componente \"libarchive\". Permite a los atacantes remotos ejecutar un código arbitrario o causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) por medio de un archivo archive creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7069",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-07-20T16:29:02.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema  en ciertos productos de Apple. iOS versión anterior a 10.3.3 se ve afectado. MacOS versión anterior a 10.12.6 se ve afectado. TVOS versión anterior a 10.2.2 se ve afectado. WatchOS versión anterior a 3.2.3 se ve afectado. El problema involucra el componente \"Kernel\". Permite a los atacantes ejecutar un código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "6EDF6EA0-1304-4C8E-B5C7-7C05A4008934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.1",
            "matchCriteriaId" : "383DC324-1949-487D-9247-81D84B61646F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "7700B09A-5980-4112-9F22-47285E293398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0378",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-07-20T17:29:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema de tipo XSS en la función login_form en views/helpers.php en Phamm anterior a versión 0.6.7, explotable por medio de PATH_INFO a el archivo main.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phamm:phamm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.6",
            "matchCriteriaId" : "E9BF071E-2BA2-426E-8AF2-2F07A3E3AF3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/20/3",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.phamm.org/docs/CHANGELOG",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99927",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/868988",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lota/phamm/issues/21",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.phamm.org/docs/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/868988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lota/phamm/issues/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T22:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos PHICOMM K2(PSG1218) versión V22.5.11.5 y anteriores, permiten la ejecución de código remota no autenticada por medio de una petición a un script ASP no especificado; como alternativa, el atacante puede aprovechar el acceso no autenticado a este script para activar un reinicio por medio de una acción ifType=reboot."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phicomm:k2\\(psg1218\\)-firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "22.5.11.5",
            "matchCriteriaId" : "27563F99-921B-458D-98A0-9BBD1901E33C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phicomm:k2\\(psg1218\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E7754E-AAE2-4EED-903A-D77AEA263906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZIllR0/Routers/blob/master/PHICOMM",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ZIllR0/Routers/blob/master/PHICOMM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T22:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\\ to delete any .zip file via the filenames parameter to /admin/system/database/filedown.php."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de recorrido de directorio en MetInfo versión 5.3.17. Un atacante remoto puede usar ..\\ para eliminar cualquier archivo .zip por medio del parámetro filename en el archivo /admin/system/database/filedown.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AFA18D-7A78-45EE-B0CF-BAEE3639D587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blackwolfsec.cc/2017/07/20/Metinfo-directory-traversal-bypass/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blackwolfsec.cc/2017/07/20/Metinfo-directory-traversal-bypass/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T23:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint."
      }, {
        "lang" : "es",
        "value" : "Docker Registry anterior a versión 2.6.2 en Docker Distribution, no restringe apropiadamente la cantidad de contenido aceptado por un usuario, lo que permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) por medio un endpoint manifest."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker_registry:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "0CD9E095-2771-4013-B1EB-B00CE7C9CB89"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00047.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2603",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docker/distribution/pull/2340",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docker/distribution/releases/tag/v2.6.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docker/distribution/pull/2340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docker/distribution/releases/tag/v2.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T23:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf."
      }, {
        "lang" : "es",
        "value" : "NixOS  versión 17.03 y anteriores tienen una ausencia predeterminada involuntaria de la comprobación de certificado SSL para LDAP. El módulo users.ldap NixOS implementa la identificación de usuarios contra servidores LDAP por medio de un módulo PAM. Se encontró que si TLS está habilitado para conectarse al servidor LDAP con users.ldap.useTLS, la verificación entre iguales se deshabilitará incondicionalmente en /etc/ldap.conf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nixos_project:nixos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.03",
            "matchCriteriaId" : "17B2506F-7453-4F4D-BC34-94FD6A02DB24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/issues/27506",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/nix-security-announce/qrDU0KH_ZRk",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/issues/27506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/nix-security-announce/qrDU0KH_ZRk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T23:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with \"GET /../\" on TCP port 4321."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos DOCSIS DPC3928AD de Technicolor permiten a los atacantes remotos leer archivos arbitrarios por medio de una petición que comienza con \"GET /../\" sobre el puerto TCP 4321."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3928ad_docsis_wireless_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD30BB9E-19FC-4E2D-A4DA-04A08A575A75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3928ad_docsis_wireless_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5046E9-BBC2-4A7C-9157-77EBC27BBB66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/2911#more-2911",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/2911#more-2911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-20T23:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPMailer 5.2.23 has XSS in the \"From Email Address\" and \"To Email Address\" fields of code_generator.php."
      }, {
        "lang" : "es",
        "value" : "PHPMailer versión 5.2.23 tiene XSS en los campos \"From Email Address\" y \"To Email Address\" de code_generator.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmailer_project:phpmailer:5.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833C6842-6A40-4566-992C-0CF77CF40B70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99293/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039026",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017060181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143138/phpmailer-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/PHPMailer/PHPMailer",
        "source" : "nvd@nist.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.24",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99293/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017060181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143138/phpmailer-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T06:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal."
      }, {
        "lang" : "es",
        "value" : "Contao anterior a versión 3.5.28 y versión 4.x anterior a 4.4.1, permite que los atacantes remotos incluyan y ejecuten archivos PHP locales arbitrarios por medio de un parámetro creado en una URL, también se conoce como Salto de Directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.27",
            "matchCriteriaId" : "345EFF44-3226-4823-92C5-3E94043A0384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A36BE117-EB7C-416B-A0C8-FAD70E65C7F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "63498341-5F80-4552-A533-3DA0C398FEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D08FA6D9-CFF9-496A-A4E3-35CFBB832802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45C3808-BEDF-403A-A972-630067B29525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590812CA-69C8-433B-B95E-F9419655E950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE4F7CE-9A04-4A84-9C45-28DC84A386BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C978D3A-B6B3-4BD7-9C49-F5D9C076B498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F00A7E-AE29-40CA-AE6B-D5FEBE483CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F57CC647-3B81-475D-A4A3-499D223941F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0473068-D670-41FE-AFCD-0B14E9EC8705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD176B3F-51E2-4BC0-9C34-116C2532F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB7FC43-D899-4AF2-B48B-CA689D8E0E60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3856C8EA-96A6-4164-BA6B-C7B2827416C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7B0B82-B936-4283-BB12-16E4CD1024A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F67D76B5-92C0-4403-9F7C-DB91C0A8E52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "103492BC-2152-41D6-9A3D-EE95AE5AE8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E9C0D4-3DC2-4AB6-BE48-FBAB387FF24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228151A7-BBC0-413C-9220-05D3F45D148F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A00DDA-346C-476F-832B-D0DA9B8CB926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563EA1E3-ECB2-454B-BC0D-5E7AFE2A1566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A33B5AE6-7AD8-4F7A-8E72-21962C601E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5239F9C4-1601-477D-9CB4-C95586BB3F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45C8E022-7F37-4BFA-9D28-C083ADE58CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479DEA11-6158-476F-AEC6-2BED5AC3FC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BE9E24-F0EA-4D5F-B172-92EBE3FC8F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4728FDD-09FD-4752-AC10-BEA4BFC3C16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBD2BD2-341E-4332-8A78-8973895A8C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA95607-828A-4FBB-818F-D22DBD4A19DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E145183E-26DD-435B-B060-8E3F17F0EA7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3036F-A8BA-402F-9F94-E5A8CA880606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FE8357-7569-4F12-847B-F615BBB75486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA64EC0D-FACA-4683-84AA-8288BECD376D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE3E158-9C34-490E-8858-F887A98AFB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3759FE91-B5BF-4DAD-B972-FB23C5FE12C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "45C095B1-09F3-43EE-9738-8157ED74A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0D08445B-DCB8-416A-A0E1-62D9E1E68B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:4.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A176687-80CF-4159-97CA-05B332F5E295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://contao.org/en/news/contao-3_5_28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://contao.org/en/news/contao-3_5_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T06:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema de tipo Cross-Site Request Forgery (CSRF) en Green Packet DX-350 versión de Firmware v2.8.9.5-g1.4.8-atheeb, como es demostrado por una petición al archivo ajax.cgi que habilita al UPnP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:dx-350_firmware:2.8.9.5-g1.4.8-atheeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCA7042-F011-4B56-AFFD-BE83DB35A2BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:dx-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C932192-F34B-4E1B-B39C-5945A8951790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-csrf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-csrf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T06:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema de tipo Cross-Site Scripting (XSS) en Green Packet DX-350 versión de Firmware v2.8.9.5-g1.4.8-atheeb, como es demostrado por el parámetro action en el archivo ajax.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:dx-350_firmware:2.8.9.5-g1.4.8-atheeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCA7042-F011-4B56-AFFD-BE83DB35A2BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:dx-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C932192-F34B-4E1B-B39C-5945A8951790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-cross.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-cross.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T06:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account."
      }, {
        "lang" : "es",
        "value" : "Green Packet DX-350 versión de Firmware v2.8.9.5-g1.4.8-atheeb, tiene una contraseña de administrador por defecto para la cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:dx-350_firmware:2.8.9.5-g1.4.8-atheeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCA7042-F011-4B56-AFFD-BE83DB35A2BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:dx-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C932192-F34B-4E1B-B39C-5945A8951790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/authentication-bypass-in-green-packet.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/authentication-bypass-in-green-packet.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T06:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the \"PING\" (aka tag_ipPing) feature within the web interface allows performing command injection, via the \"pip\" parameter."
      }, {
        "lang" : "es",
        "value" : "En Green Packet DX-350 versión de firmware v2.8.9.5-g1.4.8-atheeb, la función \"PING\" (se conoce como tag_ipPing) dentro de la interfaz web permite realizar la inyección de comandos, por medio del parámetro \"pip\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:dx-350_firmware:2.8.9.5-g1.4.8-atheeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCA7042-F011-4B56-AFFD-BE83DB35A2BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:dx-350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C932192-F34B-4E1B-B39C-5945A8951790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/command-injection-in-green-packet-dx.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/command-injection-in-green-packet-dx.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T14:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site request forgery (CSRF) en subsonic versión 6.1.1, permite a los atacantes remotos con conocimiento del nombre de usuario de destino secuestrar la autenticación de los usuarios para peticiones que cambian las contraseñas por medio de una petición creada en el archivo userSettings.view."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subsonic:subsonic:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1EA39E-CFA6-4FCA-93A2-BA6938702E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42117/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T16:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file."
      }, {
        "lang" : "es",
        "value" : "La función ReadOneJNGImage en el archivo coders/png.c en ImageMagick hasta versión 6.9.9-0 y versión 7.x  hasta 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) por medio de un archivo JNG malformado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867824",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/526",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7542",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-21T16:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket."
      }, {
        "lang" : "es",
        "value" : "La función ip6_find_1stfragopt en el archivo net/ipv6/output_core.c en el kernel de Linux hasta la versión 4.12.3, permite a los usuarios locales causar una denegación de servicio (desbordamiento de enteros y bucle infinito) mediante la explotación de la capacidad de abrir un socket sin procesar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.3",
            "matchCriteriaId" : "93B616B9-0E9C-48F4-B663-8278767861FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6399f1fae4ec29fab5ec76070435555e256ca3a6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99953",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6399f1fae4ec29fab5ec76070435555e256ca3a6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6399f1fae4ec29fab5ec76070435555e256ca3a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6399f1fae4ec29fab5ec76070435555e256ca3a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T19:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de  tipo XSS en el archivo framework/views/errorHandler/exception.php en Yii Framework versión 2.0.12 que afecta a la pantalla de excepción cuando el modo de depuración está habilitado, ya que $exception->errorInfo es manejado inapropiadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yiiframework:yii:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB530A0E-5765-4793-A30A-10172B39A095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yiisoft/yii2/pull/14492",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/pull/14492/files/feb4067de8a58f391a66e395192b0d83a8109b95",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/pull/14492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/pull/14492/files/feb4067de8a58f391a66e395192b0d83a8109b95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3734",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-07-21T19:29:00.550",
      "lastModified" : "2023-11-07T02:44:12.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T20:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en el archivo GCoreServer.exe en el servidor en Geutebrueck Gcore versiones 1.3.8.42 y 1.4.2.37, permite a los atacantes remotos ejecutar código arbitrario por medio de un URI largo en una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geutebrueck:gcore:1.3.8.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A38427-5D7B-449C-AC35-D725C9085D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geutebrueck:gcore:1.4.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20176910-61E0-4D63-9760-12DC13972679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41153/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41153/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1267",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-21T20:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium versión 10.0 y versión 10.1 procesa parches, copias de seguridad de imágenes y otras actualizaciones sin suficiente comprobación del origen y la integridad del código. ID de IBM X-Force: 124742."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C62744-22BD-4038-8257-822ADDAC370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EA5CC2-F4BE-4F22-AC85-1956EFA88B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37342DD2-055B-429C-9231-2D9FE70B5AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004424",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99896",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038984",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124742",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1371",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-21T20:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864."
      }, {
        "lang" : "es",
        "value" : "Las herramientas de Builder ejecutadas en la plataforma de aplicación TRIRIGA versiones 3.3, 3.4 y 3.5 de IBM, contienen una vulnerabilidad que podría permitir a un usuario autenticado ejecutar acciones de la herramienta Builder a las que no tiene acceso. ID de IBM X-Force: 126864."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349582F6-EBBA-4AA8-88F4-A708A1472859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679228D7-1FF0-44E9-AB51-A3436CC550AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004674",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126864",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1372",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-21T20:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126865."
      }, {
        "lang" : "es",
        "value" : "La plataforma de aplicación TRIRIGA versiones 3.3, 3.4 y 3.5 de IBM, es vulnerable a un problema de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, por lo tanto, alterar la funcionalidad deseada que podría conllevar a la revelación de credenciales dentro de una sesión confiable. ID de IBM X-Force: 126865."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349582F6-EBBA-4AA8-88F4-A708A1472859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679228D7-1FF0-44E9-AB51-A3436CC550AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004675",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126865",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1373",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-21T20:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866."
      }, {
        "lang" : "es",
        "value" : "Los informes ejecutados en la plataforma de aplicación TRIRIGA versiones 3.3, 3.4 y 3.5 de IBM, contienen una vulnerabilidad que podría permitir a un usuario autenticado ejecutar un informe al que no tiene acceso. ID de IBM X-Force: 126866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349582F6-EBBA-4AA8-88F4-A708A1472859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679228D7-1FF0-44E9-AB51-A3436CC550AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004677",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99908",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126866",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1374",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-21T20:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867."
      }, {
        "lang" : "es",
        "value" : "Los datos confidenciales se pueden exponer en la plataforma de aplicaciones TRIRIGA 3.3, 3.4 y 3.5 de IBM, lo que puede causar que un atacante obtenga acceso no autorizado al sistema. ID de IBM X-Force: 126867."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349582F6-EBBA-4AA8-88F4-A708A1472859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679228D7-1FF0-44E9-AB51-A3436CC550AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004681",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126867",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1381",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-21T20:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server Proxy Server o On-demand-router (ODR) versión 7.0,versión 8.0,versión 8.5,versión 9.0 podría permitir a un atacante local obtener información confidencial, causada por el almacenamiento de datos antiguos. ID de IBM X-Force: 127152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndIncluding" : "7.0.0.43",
            "matchCriteriaId" : "98101B85-FFB7-4E21-AB44-9B8BE3ED9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.13",
            "matchCriteriaId" : "5BF39DFD-2907-4395-80E1-40764882AA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.12",
            "matchCriteriaId" : "F69D245F-F757-420B-80D9-24BFF1AD8B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.4",
            "matchCriteriaId" : "B1A8416E-DB6A-4FA6-9923-4533BE43BC9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004792",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99917",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038985",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127152",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-21T21:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511."
      }, {
        "lang" : "es",
        "value" : "El archivo passwd_recovery.lua en TP-Link Archer versión C9 (UN) _V2_160517, permite a un atacante restablecer la contraseña de administrador al aprovechar un seed generador de números aleatorios predecible. Esto se soluciona en versión C9 (UN) _V2_170511."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-335"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_c9_\\(2.0\\)_firmware:160517:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE412A-C6BA-49AF-9DFF-8230A6FC481B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_c9_\\(2.0\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B10A72E-7A6A-4B2B-921E-3B2A74BD0D25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tp-link.com/en/download/Archer-C9_V2.html#Firmware",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.tp-link.com/en/download/Archer-C9_V2.html#Firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7473",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-21T22:29:00.207",
      "lastModified" : "2023-11-07T02:50:09.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA based off of CNT 3. Further investigation determined that there was a secure method for using the directive. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7480",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-21T22:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution."
      }, {
        "lang" : "es",
        "value" : "rkhunter versiones anteriores a 1.4.4, es vulnerable a descargar archivos en canales no seguros cuando se realiza una actualización espejo, resultando en una potencial ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rootkit_hunter_project:rootkit_hunter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "45C0F2CA-9B99-41D9-A4E1-A6F3877E3896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/643",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-11",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7523",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-21T22:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string."
      }, {
        "lang" : "es",
        "value" : "Cygwin versiones 1.7.2 hasta e incluyendo a 1.8.0,  son susceptibles a una vulnerabilidad de desbordamiento de búfer en las funciones wcsxfrm y wcsxfrm_l resultando en una denegación de servicio por el bloqueo o el posible secuestro del proceso que se ejecuta con privilegios administrativos activado por una cadena de entrada especialmente creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28230858-0B1C-4336-8C5C-86C96DFA098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581471BF-47F8-4742-986D-ADCD70179D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D9333B-AB0D-4ACF-9747-5ED10CE5C073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB48C8F3-1BAE-4159-95C7-ECF847ED8E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0165998-89F7-4891-8CC7-905380858261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49200723-56CD-44E7-9E8F-5213F1006ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83811F47-2B4B-4659-86A1-AE36375DFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57C27C7-2DC7-40C4-BCA6-997409AEE479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6BF3225-5B2C-4CD9-80D4-ABC64745FB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A964D38B-3B81-4891-B01B-527A2EE7ACC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B96CD403-2DF6-44CB-AB89-83B392061CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1266B5C-D791-430A-ADC7-DB279624AB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D58DCAD-1D5E-4891-B627-98FAA8E11D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B653FC24-6783-4A25-84A3-AF08F6590B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E839FA-A8B6-490B-B5AB-39EB9625D05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2DA96F-099E-4F6C-A836-1C0EFD32CE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A49C1A8-8A3F-4C05-86ED-42B7DED2A719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC0DABE-12A0-4832-B177-7146F086ECE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F127A321-5212-471A-A132-4526260E6C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044A1B33-23A1-40C0-99A2-819702B177DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19116C2-EB1C-403A-9965-3113935317CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E279B8F-9545-4B17-94CE-74C8D79AAEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C7B4E2-CC33-4D47-AF3C-74022E784D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A346A2F6-B834-4DB3-839F-1F5A9A11E1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB231BE4-64CB-44BE-81EF-7697AB63DAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ECD96C-EFE2-449D-AD26-F754CC622978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE94167-C3B7-4A16-9886-6ADDFB2135FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8CD0846-39D0-4736-9D78-C01FA5ED42B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8567DA10-2EF4-468D-A03E-DF84BEDDA4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169F927F-EB92-41A9-8781-BD04C0538793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.7.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8AA4897-2A28-4198-B86F-283D21607859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:cygwin:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1741D63-6937-4C12-BAA4-06679806E4BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cygwin.com/ml/cygwin/2017-05/msg00149.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://cygwin.com/ml/cygwin/2017-05/msg00149.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7540",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-21T22:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "rubygem-safemode, tal como es usado en Foreman,  versiones 1.3.2 y anteriores, son vulnerables a omitir las limitaciones de modo seguro mediante una sintaxis especial de Ruby. Esto puede conllevar a la eliminación de objetos para los que el usuario no tiene permisos de eliminación o posiblemente a la escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safemode_project:safemode:*:*:*:*:*:ruby:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "A0517B41-8027-4C39-A1B5-DAEDF156B6B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/svenfuchs/safemode/pull/23",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/svenfuchs/safemode/pull/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2126",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-22T00:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configuration interface via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "WAPM-1166D firmware  versión 1.2.7 y anteriores, y WAPM-APG600H firmware versión 1.16.1 y anteriores, permite a los atacantes remotos omitir la autenticación y acceder a la interfaz de configuración por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wapm-1166d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.7",
            "matchCriteriaId" : "9E0EEF8C-0EA2-4EF1-A97F-5C80A3CCE7AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wapm-1166d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EA757C-A36D-4010-BADF-86E83032CD05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wapm-apg600h_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16.1",
            "matchCriteriaId" : "F6E5557C-17F2-4847-9BDF-426A4C306613"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wapm-apg600h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA312D01-98E7-4CBE-94E3-C3A9A0A757F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buffalo.jp/support_s/s20170718.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48823557/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://buffalo.jp/support_s/s20170718.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48823557/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2273",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-22T00:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en WMR-433 firmware versión 1.02 y anteriores, y WMR-433W firmware  versión 1.40 y anteriores, permite a los atacantes remotos secuestrar la autenticación de administradores por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wmr-433_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "101B5AA1-6ED7-4C7C-ABC9-40A8C9182383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wmr-433:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90667415-ECA5-4403-84E8-9A9B96A883C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wmr-433w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40",
            "matchCriteriaId" : "6D1C7D33-128A-4560-B9EB-BB6B23077EB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wmr-433w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F4999E-091E-4856-A97C-03B01F40085B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buffalo.jp/support_s/s20170606.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48413726/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://buffalo.jp/support_s/s20170606.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48413726/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2274",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-22T00:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en WMR-433 firmware versión 1.02 y anteriores, y WMR-433W firmware  versión 1.40 y anteriores, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wmr-433_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "101B5AA1-6ED7-4C7C-ABC9-40A8C9182383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wmr-433:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90667415-ECA5-4403-84E8-9A9B96A883C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wmr-433w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40",
            "matchCriteriaId" : "6D1C7D33-128A-4560-B9EB-BB6B23077EB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wmr-433w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F4999E-091E-4856-A97C-03B01F40085B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buffalo.jp/support_s/s20170606.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48413726/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://buffalo.jp/support_s/s20170606.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN48413726/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2275",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-22T00:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "WG-C10 versión v3.0.79 y anteriores, permite a un atacante ejecutar comandos de sistema operativo arbitrarios por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:wg-c10_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.79",
            "matchCriteriaId" : "4CDA4687-99EE-4314-8762-E63526D6F261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:wg-c10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398093BE-5188-46B3-BFC5-117D7907C50A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14151222/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14151222/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2276",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-22T00:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en WG-C10 versión 3.0.79 y anteriores, permite a un atacante ejecutar comandos arbitrarios por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:wg-c10_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.79",
            "matchCriteriaId" : "4CDA4687-99EE-4314-8762-E63526D6F261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:wg-c10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398093BE-5188-46B3-BFC5-117D7907C50A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14151222/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14151222/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2277",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-07-22T00:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the product via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "WG-C10 versión 3.0.79 y anteriores, permite a un atacante omitir las restricciones de acceso para obtener o alterar la información almacenada en el almacenamiento externo conectado al producto por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:wg-c10_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.79",
            "matchCriteriaId" : "4CDA4687-99EE-4314-8762-E63526D6F261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:wg-c10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398093BE-5188-46B3-BFC5-117D7907C50A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN77412145/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN77412145/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-22T18:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections."
      }, {
        "lang" : "es",
        "value" : "La función SdpContents::Session::Medium::parse en el archivo resip/stack/SdpContents.cxx en reSIProcate versión 1.10.2, permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) mediante la activación de muchas conexiones de medios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA289E6F-9411-4E86-BE4C-066F226464F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/resiprocate/resiprocate/pull/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://list.resiprocate.org/archive/resiprocate-users/msg02701.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/resiprocate/resiprocate/pull/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://list.resiprocate.org/archive/resiprocate-users/msg02701.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3221",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-07-22T20:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL ciega en el formulario de inicio de sesión de Inmarsat AmosConnect 8 permite que los atacantes remotos accedan a credenciales de usuario, incluyendo nombres de usuario y contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAF2167-8ECD-44C7-B4F8-E177A8560C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B15FCD0-5843-4A33-B562-3568A6ABD0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF1A3D2-8034-47A2-B7F6-29B909A31A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DFAE7A-E516-40E3-915F-419E90C81BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB42615D-B58C-4774-9A0C-59E1711931AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8170C7A0-67FE-4E80-BFD4-B3DD63529F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D236C2E-CEF8-49A1-9E98-9C9797327E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F4098F-E186-49B5-B61F-DBB00CA65F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7865632-9C18-4D3B-AF5E-F992731F9123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect_8:8.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC5B843-A0F6-49AF-BEA4-7BE9538B5EA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99899",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/mkolsek/status/923988845783322625",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/586501",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/mkolsek/status/923988845783322625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/586501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3222",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-07-22T20:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."
      }, {
        "lang" : "es",
        "value" : "Las credenciales codificadas en AmosConnect 8, permiten a atacantes remotos alcanzar privilegios administrativos completos, incluida la capacidad de ejecutar comandos en la plataforma host de Microsoft Windows con privilegios SYSTEM mediante la violación del Administrador de tareas de AmosConnect."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFBF35E-464C-4D0A-994C-6E0D2BF2EEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4841016-AE8E-427E-88C6-8652E536E8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9D4054-A8F3-40FC-A847-7E3E99080310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64224E85-F3E8-4B45-B877-9EF3CB04FDD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5C8665-64A6-4DAF-A6AC-ABF12EAD4268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FE4D18-037A-4DCD-97EF-0513B2B4BB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C811BF-607D-4663-8406-9E67C66192FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829663CA-7449-49D6-A063-BC52DFB49D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3754FB-1AD8-4EA4-81BE-FBC457F465D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inmarsat:amosconnect:8.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E82817-1484-4C5F-9F18-0FD9AEE74F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99899",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/mkolsek/status/923988845783322625",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/586501",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/mkolsek/status/923988845783322625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/586501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-22T21:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función WriteOnePNGImage en el archivo coders/png.c en ImageMagick anterior a versión 6.9.9-0 y 7.x hasta 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/869209",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/816ecab6c532ae086ff4186b3eaf4aa7092d536f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/586",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/869209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/816ecab6c532ae086ff4186b3eaf4aa7092d536f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-22T21:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered."
      }, {
        "lang" : "es",
        "value" : "La función ReadTXTImage en el archivo coders/txt.c en ImageMagick hasta la versión 6.9.9-0 y versión 7.x hasta 7.0.6-1, permite a los atacantes remotos generar una Denegación de Servicio (infinite loop) mediante un archivo creado, porque la condición end-of-file no es considerada ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/869210",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/869210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7336",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-07-22T21:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges."
      }, {
        "lang" : "es",
        "value" : "Una cuenta codificada denominada “upgrade” en Fortinet FortiWLM versión 8.3.0 y versiones inferiores, permite a un atacante remoto iniciar sesión y ejecutar comandos con privilegios de cuenta “upgrade”."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.0",
            "matchCriteriaId" : "D3998893-D8ED-427A-AB9F-8C3DD10AD336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99351",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-115",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función WriteBlob en el archivo MagickCore/blob.c en ImageMagick anterior a versión 6.9.8-10 y versión 7.x anterior a 7.6.0-0, permite a los atacantes remotos causar una denegación de servicio (error de aserción y salida de aplicación) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-10",
            "matchCriteriaId" : "CE647FCB-8290-44EA-9064-1BE902CA499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/506",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadCINImage en el archivo coders/cin.c en ImageMagick anterior a versión 6.9.9-0 y versión 7.x anterior a 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867810",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadOneMNGImage en el archivo coders/png.c en ImageMagick anterior a versión 6.9.9-0 y versión 7.x anterior a 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (bucle largo y consumo de CPU) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-10",
            "matchCriteriaId" : "CE647FCB-8290-44EA-9064-1BE902CA499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99932",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867825",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadDPXImage en el archivo coders/dpx.c en ImageMagick anterior a versión 6.9.9-0 y versión 7.x anterior a 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-10",
            "matchCriteriaId" : "CE647FCB-8290-44EA-9064-1BE902CA499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867812",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/523",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadDIBImage en el archivo coders/dib.c en ImageMagick anterior a versión 6.9.9-0 y versión 7.x anterior a 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (pérdida de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-10",
            "matchCriteriaId" : "CE647FCB-8290-44EA-9064-1BE902CA499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867811",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/522",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadMATImage en el archivo coders/mat.c en ImageMagick anterior a versión 6.9.9-0 y versión 7.x anterior a 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (pérdida de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-10",
            "matchCriteriaId" : "CE647FCB-8290-44EA-9064-1BE902CA499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867823",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/525",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadEPTImage en el archivo coders/ept.c en ImageMagick anterior a versión 6.9.9-0 y versión 7.x anterior a 7.0.6-1, permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-10",
            "matchCriteriaId" : "CE647FCB-8290-44EA-9064-1BE902CA499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867821",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/524",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función WriteHISTOGRAMImage() en coders/histogram.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99998",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/566",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función WriteMPCImage() en coders/mpc.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick versión 7.0.6-1 procesa un archivo creado en convert, puede conllevar a una lectura excesiva de búfer en la región heap de la memoria en la función WriteUILImage() en el archivo coders/uil.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función lite_font_map() en coders/wmf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/564",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick versión 7.0.6-1 procesa un archivo creado en convert, puede conllevar a una lectura excesiva de búfer en la región heap de la memoria en la función WritePSImage() en el archivo coders/ps.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función WriteJP2Image() en coders/jp2.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/567",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick versión 7.0.6-1 procesa un archivo creado en conversión, conlleva a una excepción de punto flotante (FPE) en la función WritePALMImage() en el archivo coders/palm.c, relacionada con un cálculo incorrecto de bits por píxel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función WriteOnePNGImage() en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100003",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/569",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función ReadOnePNGImage() en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99936",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/582",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage function in coders/xpm.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una sobrelectura de búfer basada en memoria dinámica (heap) en la función GetPixelIndex() llamada desde la función WritePICONImage en coders/xpm.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99929",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c."
      }, {
        "lang" : "es",
        "value" : "tcpdump 4.9.0 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en la función lldp_print en print-lldp.c. Esto está relacionado con to util-print.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99941",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c."
      }, {
        "lang" : "es",
        "value" : "tcpdump 4.9.0 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en la función pimv1_print en print-pim.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c."
      }, {
        "lang" : "es",
        "value" : "tcpdump 4.9.0 presenta un desbordamiento de búfer en la función sliplink_print en print-sl.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99939",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.907",
      "lastModified" : "2023-11-07T02:38:18.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.937",
      "lastModified" : "2023-11-07T02:38:18.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:00.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función extend_alias_table en localealias.c de Exiv2 0.26. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471772",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de consumo de pila en la función lex del archivo parser.hpp (como es usado en sassc) en LibSass versión 3.4.5. Una entrada creada conllevará a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sass/libsass/issues/2445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sass/libsass/issues/2445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función Eval::operator en eval.cpp en LibSass 3.4.5. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T03:29:01.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de consumo de pila en la función Parser::advanceToNextToken del archivo parser.cpp en LibSass versión 3.4.5. Una entrada creada puede conllevar a la denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471786",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T20:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "debian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly (with a wrong assumption that the specific pathname would remain the same forever), which allows attackers to bypass intended AppArmor restrictions by leveraging the silent loss of this protection mechanism. NOTE: this does not affect systems, such as default Debian stretch installations, on which Tor startup relies on a systemd unit file (instead of this tor.init script)."
      }, {
        "lang" : "es",
        "value" : "El archivo debian/tor.init en el paquete tor_0.2.9.11-1-deb9u1 de Debian para Tor, fue creado para ejecutar aa-exec desde el pathname (nombre de ruta) del sistema estándar si el paquete apparmor está instalado, pero implementa esto inapropiadamente (con una suposición inapropiada de que el pathname (nombre de ruta) específico sigue siendo el mismo siempre), lo que permite a los atacantes omitir las restricciones previstas de AppArmor mediante la explotación de la pérdida silenciosa de este mecanismo de protección. NOTA: esto no afecta a los sistemas, como las instalaciones de extensión de Debian por defecto, en las que el inicio de Tor se basa en un archivo de unidad systemd (en lugar de este script tor.init)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:tor:0.2.9.11-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12F01E2-1A59-46EA-A9FF-C496412E41BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99933",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/869153",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/869153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge versión 20161012, es vulnerable a una lectura excesiva del búfer en la región heap de la memoria en la función PSCharStringToSplines (psread.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3089",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge versión 20161012, es vulnerable a una lectura excesiva del búfer en la región heap de la memoria en la función readttfcopyrights (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3093",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión 20161012, es vulnerable a una lectura en exceso del búfer en la función umodenc (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fontforge/fontforge/issues/3097",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión 20161012, es vulnerable a un desbordamiento de búfer en la región stack de la memoria en la función addnibble (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3087",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión 20161012, es vulnerable a una lectura excesiva del búfer en la región heap de la memoria en la función readcfftopdicts (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3092",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión 20161012, es vulnerable a una lectura excesiva del búfer en la función ValidatePostScriptFontName (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fontforge/fontforge/issues/3098",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "En  FontForge  versión  20161012, es vulnerable a un desbordamiento de búfer en la región heap de la memoria en la función readcffset (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3090",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión  20161012, es vulnerable a una lectura en exceso del búfer en la función strnmatch (char.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado, relacionado con una llamada de la función readttfcopyrights en el archivo parsettf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3096",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión  20161012, no garantiza un tamaño positivo en una llamada memcpy de vector weight en la función readcfftopdict (parsettf.c) resultando en una DoS por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3091",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-23T22:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file."
      }, {
        "lang" : "es",
        "value" : "FontForge  versión  20161012, es vulnerable a una lectura excesiva del búfer en la función getsid (parsettf.c) resultando en una DoS o ejecución de código por medio de un archivo otf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C3205C-92DF-4B61-9D3F-B35D1230FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3088",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/fontforge/fontforge/issues/3088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin/Login.php via a payload in the username field that does not begin with a '<' character."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms versión 5.0.9, tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el archivo admin/Login.php por medio de una carga útil en el campo username que no comienza con un carácter de \"menor que\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7775BA4-FB0A-4AED-9175-F3EA6F44F553"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#Reflected-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#Reflected-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms versión 5.0.9, tiene una vulnerabilidad de inyección SQL por medio del parámetro num en una petición action=related o action=tags en el archivo libraries/Template.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "6239A4D5-DD8D-4EBC-A6CB-FF94062D355A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-after-limit-via-system-num-parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-after-limit-via-system-num-parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms versión 5.0.9, tiene una vulnerabilidad de inyección SQL por medio del parámetro catid en una petición action=related en el archivo libraries/Template.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "6239A4D5-DD8D-4EBC-A6CB-FF94062D355A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-in-action-related-catid-parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-in-action-related-catid-parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms versión 5.0.9, se presenta una inyección SQL por medio del parámetro field en una petición action=module, action=member, action=form o action=related en el archivo libraries/Template.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "6239A4D5-DD8D-4EBC-A6CB-FF94062D355A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-via-system-field-parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-via-system-field-parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms versión 5.0.9, se presenta una ejecución de código remota PHP por medio del parámetro param en una petición action=cache en el archivo libraries/Template.php, también se conoce como Eval Injection."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7775BA4-FB0A-4AED-9175-F3EA6F44F553"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#remote-php-code-execution",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#remote-php-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms versión 5.0.9, se presenta una Violación de URL Redirector por medio del parámetro url en una acción sync, relacionada con el archivo controllers/Weixin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "6239A4D5-DD8D-4EBC-A6CB-FF94062D355A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI."
      }, {
        "lang" : "es",
        "value" : "En dispositivos DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E y DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 de Cisco, se presenta un salto de directorio en el parámetro filename en el URI /download.conf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:residential_gateway_firmware:ddr2200b-na-annexa-fcc-v00.00.03.45.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DC81B8-4D8B-49DF-AFF8-6B82B50FCE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:residential_gateway_firmware:ddr2201v1-na-annexa-fcc-v00.00.03.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7D5ADD-54CB-4D28-9B10-9FFA656E1737"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:residential_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA392713-F12E-4300-9F8E-0EEB432A968F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is remote command execution via shell metacharacters in the pingAddr parameter to the waitPingqry.cgi URI. The command output is visible at /PingMsg.cmd."
      }, {
        "lang" : "es",
        "value" : "En dispositivos DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E y DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 de Cisco, se presenta una ejecución de comando remota por medio de metacaracteres shell en el parámetro pingAddr en el URI waitPingqry.cgi. La salida del comando es visible en /PingMsg.cmd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:residential_gateway_firmware:ddr2200b-na-annexa-fcc-v00.00.03.45.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DC81B8-4D8B-49DF-AFF8-6B82B50FCE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:residential_gateway_firmware:ddr2201v1-na-annexa-fcc-v00.00.03.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7D5ADD-54CB-4D28-9B10-9FFA656E1737"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:residential_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA392713-F12E-4300-9F8E-0EEB432A968F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99963",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T00:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd, statsatm.cmd, scsrvcntr.cmd, scacccntr.cmd, logview.cmd, voicesipview.cmd, usbview.cmd, wlmacflt.cmd, wlwds.cmd, wlstationlist.cmd, HPNAShow.cmd, HPNAView.cmd, qoscls.cmd, qosqueue.cmd, portmap.cmd, scmacflt.cmd, scinflt.cmd, scoutflt.cmd, certlocal.cmd, or certca.cmd."
      }, {
        "lang" : "es",
        "value" : "En dispositivos DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E y DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 de Cisco , no hay control de acceso para el archivo info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd, statsatm.cmd, scsrvcntr.cmd, scacccntr.cmd, logview.cmd, voicesipview.cmd, usbview.cmd, wlmacflt.cmd, wlwds.cmd, wlstationlist.cmd, HPNAShow.cmd, HPNAView.cmd, qoscls.cmd, qoscls. portmap.cmd, scmacflt.cmd, scinflt.cmd, scoutflt.cmd, certlocal.cmd o certca.cmd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:residential_gateway_firmware:ddr2200b-na-annexa-fcc-v00.00.03.45.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DC81B8-4D8B-49DF-AFF8-6B82B50FCE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:residential_gateway_firmware:ddr2201v1-na-annexa-fcc-v00.00.03.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7D5ADD-54CB-4D28-9B10-9FFA656E1737"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:residential_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA392713-F12E-4300-9F8E-0EEB432A968F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T01:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en la función caseless_hash en gxps-archive.c en libgxps 0.2.5. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libgxps:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CC22E0-197E-4884-8EFE-8097132D599C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T01:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input."
      }, {
        "lang" : "es",
        "value" : "Hay una excepción de punto flotante en la función Exiv2::ValueType en Exiv2 versión 0.26 que conllevará a un ataque de denegación de servicio remoto por medio de una entrada creada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T01:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de rutinas de administración de memoria no coincidente en la función Exiv2::FileIo::seek de Exiv2 versión 0.26, que conllevará a un ataque de denegación de servicio remoto (corrupción de memoria en pila) por medio de una entrada creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473889",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T01:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Markdown Preview Plus extension before 0.5.7 for Chrome allows remote attackers to inject arbitrary web script or HTML into some web applications via the upload and display of crafted text, markdown, or rst files that are designed to be viewed in the browser as plain text, but that will be converted to HTML without proper sanitization."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en la extensión de Markdown Preview Plus anterior a la versión 0.5.7 para Chrome, permite a los atacantes remotos inyectar script web o HTML arbitrario en algunas aplicaciones web por medio de la carga y visualización de texto creado, markdown o archivos rst que están diseñados para ser vistos en el navegador como texto plano, pero que se convertirán a HTML sin saneamiento apropiado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ooso:markdown_preview_plus:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "0.4.5",
            "matchCriteriaId" : "6B949A26-D632-482B-9215-77B9C8BD6E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/volca/markdown-preview/commit/1181f044a5457d5e1ac35804ecd84e05977f1920",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/volca/markdown-preview/issues/60",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/volca/markdown-preview/commit/1181f044a5457d5e1ac35804ecd84e05977f1920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/volca/markdown-preview/issues/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T01:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0 allows remote attackers to inject arbitrary web script or HTML via non-sanitized Markdown content in a new thread or a thread comment."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en el analizador Markdown en Loomio anterior a la versión 1.8.0, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de contenido Markdown no saneado en un nuevo hilo (subproceso) o un comentario de hilo (subproceso)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FCC51-7D95-4080-B3FF-4647ABEAE75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FC47CF-01B0-46D8-ADBA-B84D6A85BA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8121C3F3-FCDF-4120-B8C1-85152C49DCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC75F6A-F937-4A89-A856-7D188C13E3D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F7EBC8-9BFB-4FC1-B14F-E5B2BDAEB092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D2A210-C4C6-450B-A815-86D8FDF24EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56939EC-D022-4120-BA1E-A3C008A4398A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loomio:loomio:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEC9D29-4D87-45E1-BF4E-5D59BDC17FEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/loomio/loomio/commit/63973f71e337ead8ca7b7ae2a043b837032dc3fe",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/loomio/loomio/issues/4220",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/loomio/loomio/releases/tag/1.8.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/loomio/loomio/commit/63973f71e337ead8ca7b7ae2a043b837032dc3fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/loomio/loomio/issues/4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/loomio/loomio/releases/tag/1.8.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T07:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message."
      }, {
        "lang" : "es",
        "value" : "net/xfrm/xfrm_policy.c en el kernel de Linux hasta la versión 4.12.3, cuando se habilita CONFIG_XFRM_MIGRATE, no asegura que el valor dir de xfrm_userpolicy_id sea XFRM_POLICY_MAX o inferior, lo que permite que los usuarios locales provoquen una denegación de servicio (acceso fuera de límites) o, probablemente, causen otros impactos no especificados mediante un mensaje XFRM_MSG_MIGRATE xfrm Netlink."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.21",
            "versionEndExcluding" : "3.2.93",
            "matchCriteriaId" : "D5928442-90C8-4CF4-99D6-FD6413331840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.18.70",
            "matchCriteriaId" : "CB780C40-C214-45CC-8FD2-CBCEE5A4217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.45",
            "matchCriteriaId" : "AEF05B4A-F2FD-4E86-9798-F55AAD1C1C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.87",
            "matchCriteriaId" : "5FEE2737-FAD8-4C80-925C-0270CE9B7A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.48",
            "matchCriteriaId" : "CAF50161-21D4-4D8A-AF13-2459A5103452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.11",
            "matchCriteriaId" : "9463D887-C14C-404D-B58A-2BE16D1EF820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jul/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99928",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1965",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2003",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Jul/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T07:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en memoria dinámica (heap) en LibSass 3.4.5 relacionada con la dirección 0xb4803ea1. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1474019",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1474019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T12:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc."
      }, {
        "lang" : "es",
        "value" : "Statamic framework anterior a la versión 2.6.0, no comprueba correctamente los permisos de sesión cuando son llamados los métodos de una clase de usuario. Los métodos problemáticos incluyen restablecer la contraseña, crear nueva cuenta, crear nuevo rol, etc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.0",
            "matchCriteriaId" : "C147CD59-F3CD-476D-A69F-C52476738CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/rambo691/3714c8c09cf894d574d37c294711c49e",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/rambo691/3714c8c09cf894d574d37c294711c49e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T12:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en memoria dinámica (heap) en la función Sass::Prelexer::re_linebreak en lexer.cpp en LibSass 3.4.5. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1474276",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1474276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T13:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter."
      }, {
        "lang" : "es",
        "value" : "En SimpleRisk versión 20170614-001, un ataque de tipo CSRF en el archivo reset.php (también se conoce como Formulario de Envío de Contraseña de Restablecimiento de Correo Electrónico) puede insertar secuencias XSS por medio del parámetro user."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplerisk:simplerisk:20170614-001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436534FF-B01F-41F0-949A-45B1EAF56C23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.seekurity.com/blog/general/reflected-xss-vulnerability-in-simplerisk/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=jOUKEYW0RQw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/reflected-xss-vulnerability-in-simplerisk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=jOUKEYW0RQw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T13:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Tilde CMS 1.0.1. Al no escapar el carácter acento grave, una consulta SELECT en class.SystemAction.php es vulnerable a inyección SQL. La vulnerabilidad se puede desencadenar mediante una petición POST en /actionphp/action.input.php con el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tilde_cms_project:tilde_cms:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE67A0EC-3FB3-4F6C-8FBF-0364DEEE64F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T13:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Tilde CMS versión 1.0.1. Los archivos arbitrarios se pueden leer por medio de un ataque file=../ en actionphp/download.File.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tilde_cms_project:tilde_cms:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE67A0EC-3FB3-4F6C-8FBF-0364DEEE64F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T13:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Tilde CMS 1.0.1. Es posible omitir las restricciones implementadas en la subida de archivos arbitrarios mediante una manipulación filename.+php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tilde_cms_project:tilde_cms:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE67A0EC-3FB3-4F6C-8FBF-0364DEEE64F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-24T13:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftp_upload."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Tilde CMS versión 1.0.1. Es posible recuperar datos confidenciales usando referencias directas. Un usuario con pocos privilegios puede cargar recursos PHP tales como el archivo admin/content.php y admin/content.php?method=ftp_upload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tilde_cms_project:tilde_cms:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE67A0EC-3FB3-4F6C-8FBF-0364DEEE64F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2605",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-24T17:29:00.187",
      "lastModified" : "2023-11-07T02:43:52.097",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-1000362. Reason: This candidate is a duplicate of CVE-2017-1000362.  A vendor reference identifier was mistakenly treated as a CVE ID. Notes: All CVE users should reference CVE-2017-1000362 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8036",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-24T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la API Cloud Controller en Cloud Foundry Foundation CAPI-release 1.33.0. La solución original para CVE-2017-8033 en CAPI-release 1.33.0 introduce una regresión que permite que el desarrollador de espacio ejecute código arbitrario en Cloud Controller VM ejecutando una aplicación especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D55D28-676E-42C4-90A5-C9CE306D42C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100002",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8036/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8036/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9553",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-07-24T20:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter."
      }, {
        "lang" : "es",
        "value" : "Un fallo de diseño en el archivo SYNO.API.Encryption en Synology DiskStation Manager (DSM) anterior a versión 6.1.3-15152 permite a los atacantes remotos omitir el mecanismo de protección de encriptación mediante el  parámetro de versión creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1-15101-4",
            "matchCriteriaId" : "81439218-45FE-42A5-9598-EB5BA4F97DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/",
        "source" : "security@synology.com"
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM",
        "source" : "security@synology.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9554",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-07-24T20:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de exposición de información en el archivo forget_passwd.cgi en Synology DiskStation Manager (DSM) anterior a la versión 6.1.3-15152, permite a los atacantes remotos enumerar nombres de usuario válidos por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1-15101-4",
            "matchCriteriaId" : "81439218-45FE-42A5-9598-EB5BA4F97DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43455/",
        "source" : "security@synology.com"
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM",
        "source" : "security@synology.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43455/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1245",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-24T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124580."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Software Architect Design Manager 5.0 y 6.0 es vulnerable a ataques Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124580."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED534E3-80EF-40AF-927A-20D59DA7B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543CFD7E-E204-436E-A88E-212A368F7AB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006052",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124580",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1249",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-24T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "IBM Rhapsody DM 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9F8754-B1A3-4261-B879-8E02FADFE4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301BD8A0-35A8-4AEE-9D8F-28BC8E0C3FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84620B49-B887-4A87-A2EF-6E763AB4E9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094E765E-C844-4E35-9CDC-F291F7082C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92322AD7-00B7-496B-9924-D8929E7BAAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838DE085-54BB-4726-9E6F-FAF26EDFE539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8973E37A-6451-4FA0-A340-4E09E4F3D21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006052",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124629",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1287",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-24T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim."
      }, {
        "lang" : "es",
        "value" : "IBM Rhapsody DM en sus versiones 5.0 y 6.0 podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9F8754-B1A3-4261-B879-8E02FADFE4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301BD8A0-35A8-4AEE-9D8F-28BC8E0C3FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84620B49-B887-4A87-A2EF-6E763AB4E9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094E765E-C844-4E35-9CDC-F291F7082C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92322AD7-00B7-496B-9924-D8929E7BAAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838DE085-54BB-4726-9E6F-FAF26EDFE539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8973E37A-6451-4FA0-A340-4E09E4F3D21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006052",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125148",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1380",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-24T21:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127151."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 127151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndIncluding" : "7.0.0.43",
            "matchCriteriaId" : "98101B85-FFB7-4E21-AB44-9B8BE3ED9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.13",
            "matchCriteriaId" : "5BF39DFD-2907-4395-80E1-40764882AA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.11",
            "matchCriteriaId" : "F98D9448-811F-4446-B05C-06541D9CECF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.4",
            "matchCriteriaId" : "B1A8416E-DB6A-4FA6-9923-4533BE43BC9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004786",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99961",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038978",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127151",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1382",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-24T21:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versión 7.0,versión 8.0,versión 8.5 y versión 9.0 podría crear archivos usando los permisos por defecto en lugar de los permisos personalizados cuando se usan scripts de inicio personalizados. Un atacante local podría explotar esto para obtener acceso a archivos con un impacto desconocido. ID de IBM X-Force: 127153."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndIncluding" : "7.0.0.43",
            "matchCriteriaId" : "98101B85-FFB7-4E21-AB44-9B8BE3ED9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.13",
            "matchCriteriaId" : "5BF39DFD-2907-4395-80E1-40764882AA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.12",
            "matchCriteriaId" : "F69D245F-F757-420B-80D9-24BFF1AD8B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.4",
            "matchCriteriaId" : "B1A8416E-DB6A-4FA6-9923-4533BE43BC9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99960",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038977",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127153",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7541",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-07-25T04:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet."
      }, {
        "lang" : "es",
        "value" : "La función brcmf_cfg80211_mgmt_tx en el archivo drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c en el kernel de Linux anterior a la versión 4.12.3, permite a los usuarios locales causar una denegación de servicio (desbordamiento de búfer y bloqueo del sistema) o posiblemente alcanzar privilegios por medio de un paquete de Netlink  NL80211_CMD_FRAME creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "EA344106-6A14-4E25-BCAF-456232B0EC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.48",
            "matchCriteriaId" : "60F94CD7-8A37-47E5-8E46-8CE5E862C739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.62",
            "matchCriteriaId" : "61D7C16A-92B3-4598-A2A0-4C4795AF0491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "5F6B255F-0933-4983-B3F6-AD5B128A8F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.78",
            "matchCriteriaId" : "53D588E8-41E9-45DB-A106-D0D6FAFBEAEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.39",
            "matchCriteriaId" : "894EA787-0B3C-4729-9CE9-4CA86309E37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.12",
            "matchCriteriaId" : "6070460C-3FAE-457B-9A3E-5ADF3AA3CC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12",
            "versionEndExcluding" : "4.12.3",
            "matchCriteriaId" : "0D1EC748-85AE-40F3-A67C-3F634135A2F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/24/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1049645",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473198",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8f44c9a41386729fea410e688959ddaa9d51be7c",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable/msg180994.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1049645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8f44c9a41386729fea410e688959ddaa9d51be7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable/msg180994.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8033",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-25T04:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushing a specially crafted application that can write arbitrary files to the Cloud Controller VM."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto en la API Cloud Controller en Cloud Foundry Foundation CAPI-release en versiones anteriores a 1.35.0 y las versiones cf-release anteriores a v268. Existe una vulnerabilidad de salto de sistema de archivos en Cloud Controller que permite que un desarrollador de espacio escale privilegios ejecutando una aplicación especialmente manipulada que pueda escribir archivos arbitrarios en Cloud Controller VM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.0",
            "matchCriteriaId" : "CF4B940B-21FF-4FF9-92C0-12FBB8DC5C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "268",
            "matchCriteriaId" : "64E1973B-8A36-443B-AC11-1BC29076C4B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8033/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8033/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8035",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-07-25T04:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and prior to v268. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto en la API Cloud Controller en Cloud Foundry Foundation CAPI-release en versiones posteriores a 1.6.0 y anteriores a 1.35.0 y las versiones cf-release posteriores a v244 y anteriores a v268. Una petición CAPI especialmente manipulada desde un Space Developer puede permitir que atacantes obtengan acceso al Cloud Controller VM para tal instalación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.35.0",
            "matchCriteriaId" : "1A0C915A-9E70-4210-A449-7C0B8E092AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "245",
            "versionEndExcluding" : "268",
            "matchCriteriaId" : "A287CDAB-5206-4F42-8CAE-4371C82965B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8035/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8035/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T13:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup."
      }, {
        "lang" : "es",
        "value" : "Node.js versión v4.0 hasta v4.8.3, todas las versiones de v5.x, versión v6.0 hasta v6.11.0, versión v7.0 hasta v7.10.0, y versión v8.0 hasta v8.1.3, fue susceptible a ataques DoS remotos de inundación de hash ya que el seed HashTable fue constante en una versión dada de Node.js. Esto fue el resultado de la compilación con instantáneas V8 habilitadas por defecto, lo que causó que el seed aleatorizado inicialmente se sobrescribiera en el arranque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0390D600-532D-4675-95BB-10EC4E06F3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35AAF7CD-9AE6-4A4B-858E-4B17031BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCB6010-AC31-4B61-9DA6-E119ADC5D70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5364365-36F1-49C0-BF8D-2D5054BC7B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0740684D-989A-4957-8AC1-AAB01A04E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C97202-6AEC-4B8D-B3F6-49F6AEF9CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFA073A-9AC2-4162-9DDA-B6CD0AE53D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8FD4B3-D515-486A-94A3-29CBDA2E25CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E18631-9502-42CC-A85A-EA5742FDC317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCBC213-1524-4C88-9EB3-52E003070A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C928FB55-2F33-4458-8484-4010AE8883A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEEFA5F-2B32-4CA0-84AD-E0ECA0F81078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4754B0A8-A7D7-41A1-BFE5-10D84E7CEC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D132104E-163C-47EE-B247-578D64AC88D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E208FB1-A772-4002-BD56-3360BDDFEF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BE6C0B-E6EC-4CD2-912B-45DE9F94BA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714EBE27-F0D0-4B2E-90E1-4C73DF7FAA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE8859F-1EBE-4B9A-A5ED-7FA63D68C947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1249AA75-5676-4AFC-99B4-A59DC9BE1F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E875B302-1923-40AF-B956-A063714BBA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10940F9C-6671-4C0D-89F9-6111A44FA74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F031F09-0AF1-4825-8C8C-AC5A65119E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413C8F30-5B76-49D6-95C2-E62FC34911EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA03990-23A0-4D9E-A46C-39E4C214CDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B156BD-1465-4758-A767-5D1377FD9B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AF4AFE-14E3-4264-84BB-45B9CDB6D363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39233953-4ADE-49D7-95E8-0199008375E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CF669-688A-40D3-9576-17ABFB17DE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D6AF6A-5B1A-46DE-B03D-DDEB69B86F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29C7E8C-8C0B-4B44-A178-5C31D9B1F3A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5573D5-6792-472E-943C-582C104A9266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC50639-CD44-408B-98C2-20A6D71C454B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C38CBB-154F-4842-B783-86DE1700A59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A52ABF-EAB6-4B14-8DF2-49E0D93F0737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F7E56E-CA65-47C3-9ADA-F13A834D3961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183A5888-01C5-4977-9C66-1467FFA6D457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F811E8BB-F1C8-43BE-BEAD-FC4FE122ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDE8D29-7C15-44D1-8D5C-0E438D9DE029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCA3C10-FB37-4256-812A-EB8A3A095E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54197CC5-9C7D-4DCE-A60F-625DE246E5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6173A6E4-F472-46CF-9762-6F3CAAFD9C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C25A52-E3C0-4429-AB96-1E33523E51D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590070D6-198A-456E-A55D-D0B06DD3FF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FCC5E2-1106-4153-B8C6-5E9594735529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56778D45-8B99-406D-BE97-034D3A29F32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C7E2F2-8C41-4F3B-848A-144DCA30FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11778EAE-5DCD-4D4E-807B-FD3C0DC47BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C203335-0CB9-4B38-80C1-344607FFAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D70C084-6B75-401B-9F52-B3E2B5060FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0381B-EECC-49E9-A43E-9877226FAFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5C5E18-2613-4851-953F-6773886A908F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2478B4BA-703D-45BD-9B59-713AEDEDB14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB33415-8446-43C6-9D1B-DF0D6BF8D0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A53CB0E-3FBA-4796-BC81-6003A7DC29DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F3F415-CD69-4E19-A4F9-3673D2907932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758E9981-966B-4BB5-8982-183683C76228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD05686C-E548-43CB-81C1-5AE3E3E5ECBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FAA74-207E-4E37-90F7-75202ED64E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F747352F-DFE4-45C3-9806-CBDC1E4A64E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E144BC9-0D69-4C9B-9AF0-D7730F1719EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EA5976-2268-4FF3-BE6A-5680D45073E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85F98DB-A43D-47C0-B271-0E25DCF0EA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E82A49-5897-43D4-8EF7-F743B8B909E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083FA7D0-5707-4B87-955A-5C75E416715A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A96BD0-0922-4E96-BE72-0FB39D6C139F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A8B882-F8A2-4D11-B9C9-F02227661BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02AA2065-D99B-4805-BD30-63CC42B07264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612507E3-84F7-4343-8F8F-156BF96B1535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053FD13-3912-45D3-BBFF-A29415675B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5406D0BF-7AA8-49A1-A712-A78D0E5A4AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F53DBB-AE67-47DF-81AF-3E697D099EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E72FD09-9C0F-4685-83CE-A60823208169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B889EF50-8C17-48B1-8D79-BFBB69E0E808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A16A6C5-170F-48D2-A9B4-F64CCC436E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96903DD4-70B8-4F30-AE8D-B5BF4235EC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F1B8C-B2A2-46F0-A46B-543876382BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4E9F52-DAAA-4E7E-B37A-A8612DDF6717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33314D49-3EDD-458F-9DC6-71AC0C1BF2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6335D5-4A9B-425E-BEE2-F79BE4B07F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03B878-CC9F-4E5B-98FF-89302D1A14C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A26147-1A40-40BA-A31A-1D3E3C12B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF5735F-9BDC-4F99-8E5F-EE2BA0946B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726FC696-439B-49FD-AD83-E8E0808A877E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6876765D-5936-49D2-ACCC-DFBAD2ADC7AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531E6D2A-80F5-4E61-9F94-20C52EF51C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89DB06D6-94B8-47B4-A63B-678866B6CF91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127BC110-BCB3-4EF5-918B-487AA953DAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD59683C-71B8-40B1-8F63-6C615D1F24C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF6BA-B4EE-4E43-9D53-A088ED8B5C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CF83FA-1E27-462D-9669-BCF4EA2B112C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAB616B-F595-4B96-960F-F0693BFE5AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF65EA06-835C-4CC6-92D4-B457C4EADD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E256FD-DC14-4507-9070-32940032FE7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7C28EC-2D0F-4146-A495-44B5C63571C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0ABD2F-2130-40BD-B008-095AB6A93BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710CFCCF-7086-472E-90A9-ACE36A8F8AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35B2D35-798E-4186-8C17-4AC717777668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC765BA6-CDB8-4C3B-9D23-64996F38027A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35BB2AB-7E3E-450D-A135-A0A8020F0BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710334-6ADA-4BF3-A4A8-F1EF1CC07674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T14:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Cirrus CLGD 54xx VGA Emulator en Quick Emulator (Qemu) en versiones 2.8 y anteriores permite que los usuarios invitados del sistema operativo ejecuten código arbitrario o provoquen una denegación de servicio (DoS) mediante vectores relacionados con un cliente VNC que actualiza su display después de una operación VGA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "715CFA1A-8873-49BC-A504-8F472F9AEC92"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFB20FA-CB00-4729-AB3A-816454C6D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B152EDF3-3140-4343-802F-F4F1C329F5C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B152EDF3-3140-4343-802F-F4F1C329F5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86166F9-BBF0-4650-8CCD-0F9C97104D21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ubuntu.com/usn/usn-3289-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/21/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97955",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0983",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0988",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1205",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1430",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1441",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1430056",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://ubuntu.com/usn/usn-3289-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1430056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T14:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS."
      }, {
        "lang" : "es",
        "value" : "El firmware UEFI de Phoenix SecureCore de Intense PC, no realiza la comprobación de firma de cápsula anterior a actualizar el firmware del sistema. La ausencia de comprobación de firma permite a un atacante con privilegios de administrador actualizar una BIOS UEFI modificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:compulab:intense_pc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cr_2.2.0.400.2",
            "matchCriteriaId" : "D42B7384-0A9E-40C6-B8DA-2C537F90F951"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:compulab:intense_pc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F825C891-97AC-4AF2-9F48-F50BF7CF067D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143481/Compulab-Intense-PC-MintBox-2-Signature-Verification.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/56",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://watchmysys.com/blog/2017/07/cve-2017-9457-compulab-intense-pc-lacks-firmware-validation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143481/Compulab-Intense-PC-MintBox-2-Signature-Verification.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://watchmysys.com/blog/2017/07/cve-2017-9457-compulab-intense-pc-lacks-firmware-validation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AppUse 4.0 allows shell command injection via a proxy field."
      }, {
        "lang" : "es",
        "value" : "AppUse versión 4.0, permite la inyección de comandos shell por medio de un campo proxy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appsec-labs:appuse:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F19E35-C066-4CF2-B8F4-67751D9C22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/shiham101/4807e3dea54ee0f0456c47fcd1400e97",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/shiham101/4807e3dea54ee0f0456c47fcd1400e97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T17:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial information. Connex utilizes an IBM i DB2 user account for database access. The account name is HMSCXPDN. Its password is hard-coded in multiple places in the application. Customers do not have the option to change this password. The account has elevated DB2 roles, and can access all objects or database tables on the customer DB2 database. This account can access data through ODBC, FTP, and TELNET. Customers without Connex installed are still vulnerable because the MEDHOST setup program creates this account."
      }, {
        "lang" : "es",
        "value" : "MEDHOST Connex contiene credenciales codificadas que se usadas para el acceso a la base de datos de los clientes. Un atacante con conocimiento de las credenciales codificadas y la capacidad para comunicarse directamente con la base de datos es capaz de obtener o modificar información confidencial del paciente y financiera. Connex utiliza una cuenta de usuario IBM i DB2 para el acceso a la base de datos. El nombre de la cuenta es HMSCXPDN. Su contraseña está codificada en varios lugares de la aplicación. Los clientes no tienen la opción de cambiar esta contraseña. La cuenta tiene roles DB2 elevados y se puede acceder a todos los objetos o tablas de base de datos en la base de datos DB2 del cliente. Esta cuenta puede acceder a los datos por medio de ODBC, FTP y TELNET. Los clientes sin Connex instalado todavía son vulnerables debido a que el programa de instalación de MEDHOST crea esta cuenta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medhost:connex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2A54E8-3352-4B93-AE8E-CDBA1D022B34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/59",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en atmail anterior a versión 7.8.0.2, permite a los atacantes remotos inyectar un script web o HTML arbitrario dentro del cuerpo de un correo electrónico por medio de un elemento IMG con comillas simples y comillas dobles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atmail:atmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.0.1",
            "matchCriteriaId" : "475554FA-203F-43CE-9672-A479B53D8B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.bishopfox.com/blog/2017/06/how-i-built-an-xss-worm-on-atmail/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.bishopfox.com/blog/2017/06/how-i-built-an-xss-worm-on-atmail/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string."
      }, {
        "lang" : "es",
        "value" : "La función dhcp_decode en el archivo slirp/bootp.c en QEMU (conocido como Quick Emulator), permite a los usuarios de sistemas operativos invitados locales causar una denegación de servicio (lectura fuera de límites y bloqueo del proceso QEMU) por medio de una cadena de opciones DHCP creada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "81B915ED-AC3E-4612-ADAC-6FB87F4DB55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DF68D2-5250-4575-90CC-21828D03793E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F82EF5-A116-4676-9D24-1C45E7F49D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4ADA19-36E9-44A2-8AEC-1117F631A4D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/19/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99923",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1472611",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg05001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1472611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg05001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request, aka SAP Security Note 2387249."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad tipo XML external entity (XXE) en componente com.sap.km.cm.ice en SAP NetWeaver AS JAVA versión 7.5 permite a los usuarios identificados remotos leer archivos arbitrarios o conducir ataques de tipo server-side request forgery (SSRF) por medio de una DTD creada en una petición XML, también se conoce como Nota de Seguridad de SAP 2387249."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97572",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-018-sap-netweaver-java-7-5-xxe-com-sap-km-cm-ice/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-018-sap-netweaver-java-7-5-xxe-com-sap-km-cm-ice/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de tipo cross-site-scripting (XSS) en el servlet ctcprotocol/Protocol en SAP NetWeaver AS JAVA versión 7.3 permite a los atacantes remotos inyectar scripts web arbitrarios o HTML por medio del parámetro sessionID, también se conoce como Nota de Seguridad de SAP 2406783."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A1E0B9-8C28-41BC-B050-237B5F929C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97566",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-017-sap-netweaver-java-7-3-java-xss-ctcprotocolprotocol-servlet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-017-sap-netweaver-java-7-3-java-xss-ctcprotocolprotocol-servlet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592."
      }, {
        "lang" : "es",
        "value" : "SAP TREX versión 7.10 permite a los atacantes remotos (1) leer archivos arbitrarios mediante un comando fget o (2) escribir en archivos arbitrarios y, en consecuencia, ejecutar código arbitrario mediante un comando fdir, también se conoce como Nota de Seguridad de SAP 2419592."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:trex:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480E51C3-A029-44F2-9874-B9B551A225CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://erpscan.io/advisories/erpscan-17-019-sap-trex-rce/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-019-sap-trex-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shp_result.jsp, aka SAP Security Note 2308535."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting (XSS) en el servlet DataArchivingService en SAP NetWeaver Portal versión 7.4 permite a los atacantes remotos inyectar un script web o HTML arbitrario por medio del parámetro responsecode hacia shp/shp_result.jsp, también se conoce como Nota de Seguridad de SAP 2308535."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_portal:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3467363F-8080-4C93-A09A-A3E1AD8FDE32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97565",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-016-sap-netweaver-java-7-4-dataarchivingservice-servlet-xss/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-016-sap-netweaver-java-7-4-dataarchivingservice-servlet-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "En NetApp OnCommand API Services anterior a la versión 1.2P3, registra la contraseña BIND de LDAP cuando un usuario intenta iniciar sesión utilizando la API REST, lo que permite a los usuarios autenticados remotos obtener información confidencial de la contraseña por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_api_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "C314C793-7144-4F7C-84BA-7BE114E8A967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99957",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/ka51A0000008Spy/NTAP-20170718-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/ka51A0000008Spy/NTAP-20170718-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T18:29:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a podcast via the add parameter to podcastReceiverAdmin.view or (2) update Internet Radio Settings via the urlRedirectCustomUrl parameter to networkSettings.view.  NOTE: These vulnerabilities can be exploited to conduct server-side request forgery (SSRF) attacks."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en la función Podcast en Subsonic versión 6.1.1, permiten a los atacantes remotos secuestrar la autenticación de los usuarios para peticiones que (1) suscriben a un podcast por medio del parámetro add en podcastReceiverAdmin.view o (2) actualizan la configuración de radio de Internet por medio del parámetro urlRedirectCustomUrl en networkSettings.view. NOTA: estas vulnerabilidades pueden ser explotadas para conducir ataques de tipo server-side request forgery (SSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subsonic:subsonic:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1EA39E-CFA6-4FCA-93A2-BA6938702E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/142794/Subsonic-6.1.1-Server-Side-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42118/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142794/Subsonic-6.1.1-Server-Side-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42118/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6612",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el nodo de soporte del gateway GPRS (GGSN) de ASR 5000 Series Aggregation Services Routers versión 17.3.9.62033 hasta 21.1.2 de Cisco, podría permitir a un atacante remoto no autenticado redireccionar el tráfico HTTP enviado hacia un dispositivo afectado. Más información: CSCvc67927."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:17.3.9.62033:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909549D4-A2D3-473F-9982-36C3709749A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:17.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8C599F-D45E-4613-9DEC-9ECC6C2B600B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A32B7EC-24D8-4344-AD67-0C2479BD2443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80A1B52-D2D3-4EC0-82FF-D8D3AE01185F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857DEC6B-8984-468B-9926-F0862D0A4EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C137DA3-4CBE-4FCB-BC26-BBB82C392B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E56217A-1BD5-431B-8BF5-F32714BD79CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99920",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038961",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6672",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en ciertos mecanismos de filtrado de listas de control de acceso (ACL) para ASR 5000 Series Aggregation Services Routers hasta la versión 21.x de Cisco, podría permitir a un atacante remoto no autenticado omitir las reglas ACL que se han configurado para un dispositivo afectado. Más información: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EAE02AB-44AC-4EEE-9274-AD10320FA877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA697893-345B-4DDD-AD7C-CE00D44D5176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753E0174-3A75-439F-B453-DA166A4F455E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36870B2A-DF0E-41EE-8138-236382C1D6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A32B7EC-24D8-4344-AD67-0C2479BD2443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:19.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7B2293-C2C5-4F68-B28A-6A97DBFF00C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.1.v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C5AB0D-AD19-4370-AE82-4811BE994BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10591A5D-8060-4A15-BD3D-0CE41227D36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857DEC6B-8984-468B-9926-F0862D0A4EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B0C568-5178-4463-ABB3-B699A9C99A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:20.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438EFFB2-E2DA-4B01-9341-D0D7F7D02B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.0.v1.66638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFBA068A-8576-41C7-963B-F49853D6291A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.0.v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94852E5-FD14-4AB2-9761-0B6FD6689715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E614236-7374-4910-800D-49257D5C8BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E56217A-1BD5-431B-8BF5-F32714BD79CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03864985-A75F-48A8-98BB-015F450B1DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65921:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8E6B0C-431B-40A3-BDD7-E610F35FC26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65931:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4FCB9C-4A60-4959-B3A1-11CAECA98D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65986:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C3F053-0D2E-4602-96CF-D2A0A0DC12D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.1.v0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C04C347-5F68-41D2-93AF-9873DA777E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65914:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F392BF-F029-4050-B987-90C3D7FACCA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65995:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B06E7D-0466-4000-88A0-CE6736C9ECCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_series_software:21.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394B086E-6019-452C-BBFA-90200CE3FB44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99921",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038962",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6746",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Web Security Appliance (WSA) de Cisco, podría permitir a un atacante remoto autenticado realizar la inyección de comandos y elevar los privilegios a root. El atacante necesita autenticarse con credenciales de administrador válidas. Productos afectados: Cisco AsyncOS Software versión 10.0 y posterior para WSA tanto en dispositivos virtuales como de hardware. Más información: CSCvd88862. Versiones afectadas conocidas: 10.1.0-204. Versiones fijas conocidas: 10.5.1-270 10.1.1-235."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C84C8F0-4722-4385-B3CD-86E05F3D72BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B251F2-C0EF-41A5-9318-CAB6FF8D7D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6845F048-06E0-4F5D-A2BD-A8D856530D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC71F9F5-B0BA-4415-A4C8-9D0B15732A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89E6946-5451-4A35-BD48-BA260B7928F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88C4824-EAE3-4636-92BE-1ADF944B1EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68D77CC-8FA7-436C-9799-EB691D145C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C185A6-D4DE-4EA0-952D-714CCCAF2B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9EA61C-3D1D-463A-802A-0073183CE39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:11.0.0-613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8BB0F9-F14B-4EA5-B24E-FED0B8C1B264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:11.0.0-641:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B430E9-EBFF-4B90-9844-D9758FA626D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99877",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038948",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6748",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el analizador de la CLI de Web Security Appliance (WSA) de Cisco, podría permitir a un atacante local autenticado realizar la inyección de comandos y elevar los privilegios a root. El atacante necesita autenticarse con credenciales válidas de nivel de operador o de administrador. Productos afectados: versiones virtuales y de hardware de Web Security Appliance (WSA) de Cisco. Más información: CSCvd88855. Versiones afectadas conocidas: 10.1.0-204. Versiones fijas conocidas: 10.5.1-270 10.1.1-234."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4BDE8C-6D41-4BCF-8BB3-9256E2AD09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C84C8F0-4722-4385-B3CD-86E05F3D72BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B251F2-C0EF-41A5-9318-CAB6FF8D7D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6845F048-06E0-4F5D-A2BD-A8D856530D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC71F9F5-B0BA-4415-A4C8-9D0B15732A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89E6946-5451-4A35-BD48-BA260B7928F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68D77CC-8FA7-436C-9799-EB691D145C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C185A6-D4DE-4EA0-952D-714CCCAF2B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9EA61C-3D1D-463A-802A-0073183CE39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:11.0.0-613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8BB0F9-F14B-4EA5-B24E-FED0B8C1B264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69528D17-2EA4-4CF5-B2D4-26B185C66ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F260BF88-C6C4-41B7-BDE7-EC1CF4EFB74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED59A8D-41E6-448E-AEEF-91400742CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF6B908-B1A0-48FC-A481-CA2AF9738BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F432D2A9-AF00-4578-B1DC-171876CE1C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD97A391-7E07-46EC-85D6-C17D1EB753A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679B5A90-ED85-4086-916B-664FF2DD9EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FAE893-BD18-481B-A65D-D2F235571836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:11.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599D1619-F27A-4205-972C-3B4B9578C2E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99918",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038956",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6749",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Web Security Appliance (WSA) de Cisco, podría permitir a un atacante remoto autenticado conducir un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario de la interfaz de administración basada en web de un dispositivo afectado . Productos afectados: versiones virtuales y de hardware de Web Security Appliance (WSA) de Cisco. Más información: CSCvd88865. Versiones afectadas conocidas: 10.1.0-204."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4BDE8C-6D41-4BCF-8BB3-9256E2AD09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C84C8F0-4722-4385-B3CD-86E05F3D72BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B251F2-C0EF-41A5-9318-CAB6FF8D7D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6845F048-06E0-4F5D-A2BD-A8D856530D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC71F9F5-B0BA-4415-A4C8-9D0B15732A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89E6946-5451-4A35-BD48-BA260B7928F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88C4824-EAE3-4636-92BE-1ADF944B1EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA9660A-C242-4080-9B38-A819A3BBCF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68D77CC-8FA7-436C-9799-EB691D145C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C185A6-D4DE-4EA0-952D-714CCCAF2B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.1-270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2F79DB-DA5F-47E1-9FE1-EF9114004BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69528D17-2EA4-4CF5-B2D4-26B185C66ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F260BF88-C6C4-41B7-BDE7-EC1CF4EFB74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED59A8D-41E6-448E-AEEF-91400742CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF6B908-B1A0-48FC-A481-CA2AF9738BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F432D2A9-AF00-4578-B1DC-171876CE1C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD97A391-7E07-46EC-85D6-C17D1EB753A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679B5A90-ED85-4086-916B-664FF2DD9EB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99875",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038957",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6750",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en AsyncOS para Web Security Appliance (WSA) de  Cisco, podría permitir a un atacante local no autenticado iniciar sesión en el dispositivo con los privilegios de un usuario limitado o un atacante remoto no autenticado para autenticarse en ciertas áreas de la GUI basada en web, también se conoce como Vulnerabilidad de Credenciales Estáticas. Productos afectados: versiones virtuales y de hardware de Web Security Appliance (WSA) de Cisco. Más información: CSCve06124. Versiones afectadas conocidas: 10.1.0-204. Versiones fijas conocidas: 10.5.1-270."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4BDE8C-6D41-4BCF-8BB3-9256E2AD09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C84C8F0-4722-4385-B3CD-86E05F3D72BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B251F2-C0EF-41A5-9318-CAB6FF8D7D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6845F048-06E0-4F5D-A2BD-A8D856530D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC71F9F5-B0BA-4415-A4C8-9D0B15732A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89E6946-5451-4A35-BD48-BA260B7928F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88C4824-EAE3-4636-92BE-1ADF944B1EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.1-235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA9660A-C242-4080-9B38-A819A3BBCF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68D77CC-8FA7-436C-9799-EB691D145C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C185A6-D4DE-4EA0-952D-714CCCAF2B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69528D17-2EA4-4CF5-B2D4-26B185C66ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F260BF88-C6C4-41B7-BDE7-EC1CF4EFB74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED59A8D-41E6-448E-AEEF-91400742CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF6B908-B1A0-48FC-A481-CA2AF9738BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F432D2A9-AF00-4578-B1DC-171876CE1C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD97A391-7E07-46EC-85D6-C17D1EB753A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679B5A90-ED85-4086-916B-664FF2DD9EB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99924",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038958",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6751",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypass Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.0-485."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad proxy web de Cisco Web Security Appearance (WSA) podría permitir que un atacante remoto no autenticado redirija tráfico de la interfaz proxy web de un dispositivo afectado a una interfaz de administración de un dispositivo afectado. Esta vulnerabilidad también se conoce como \"Access Control Bypass Vulnerability\". Productos afectados: versiones de hardware y virtuales de Cisco Web Security Appliance (WSA). Más información: CSCvd88863. Versiones afectadas conocidas: 10.1.0-204 9.0.0-485."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:9.0.0-162:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BF001A-7ADB-4976-8A50-0EFC53FB6AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:9.0.0-193:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD5471D-6A95-4BF2-9ECB-3F7AE74BCE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:9.0.0-485:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE42EB-F7F1-4F68-BFCF-B452A2C0AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4BDE8C-6D41-4BCF-8BB3-9256E2AD09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C84C8F0-4722-4385-B3CD-86E05F3D72BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC71F9F5-B0BA-4415-A4C8-9D0B15732A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAE1AB3-224F-473D-8E41-DF641CFBF864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69528D17-2EA4-4CF5-B2D4-26B185C66ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED59A8D-41E6-448E-AEEF-91400742CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF6B908-B1A0-48FC-A481-CA2AF9738BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99967",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038959",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6753",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. This vulnerability affects the browser extensions for Cisco WebEx Meetings Server, Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center), and Cisco WebEx Meetings when they are running on Microsoft Windows. The vulnerability is due to a design defect in the extension. An attacker who can convince an affected user to visit an attacker-controlled web page or follow an attacker-supplied link with an affected browser could exploit the vulnerability. If successful, the attacker could execute arbitrary code with the privileges of the affected browser. The following versions of the Cisco WebEx browser extensions are affected: Versions prior to 1.0.12 of the Cisco WebEx extension on Google Chrome, Versions prior to 1.0.12 of the Cisco WebEx extension on Mozilla Firefox. Cisco Bug IDs: CSCvf15012 CSCvf15020 CSCvf15030 CSCvf15033 CSCvf15036 CSCvf15037."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las extensiones del navegador WebEx de Cisco para Google Chrome y Mozilla Firefox, podría permitir que un atacante remoto no autenticado ejecute código arbitrario con los privilegios del navegador afectado sobre un sistema afectado. Esta vulnerabilidad afecta a las extensiones del navegador para WebEx Meetings Server de Cisco, WebEx Centers de Cisco (Meeting Center, Event Center, Training Center y Support Center) y WebEx Meetings de Cisco cuando son ejecutadas en Microsoft Windows. Una vulnerabilidad es debido a un defecto de diseño en la extensión. Un atacante que pueda convencer a un usuario afectado para visitar una página web controlada por un atacante o siga un enlace provisto por un atacante con un navegador afectado podría atacar esta vulnerabilidad. Si tiene éxito, el atacante podría ejecutar código arbitrario con privilegios del navegador afectado. Las siguientes versiones de las extensiones del navegador de WebEx de Cisco están afectadas: Versiones anteriores a 1.0.12 de la extensión WebEx de Cisco en Google Chrome, Versiones anteriores a 1.0.12 de la extensión WebEx de Cisco en Mozilla Firefox. Identificación de Bug Cisco: CSCvf15012 CSCvf15020 CSCvf15030 CSCvf15033 CSCvf15036 CSCvf15037."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_event_center:t30_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B23ACCD-6784-4043-9AD1-AD1D9149D510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_event_center:t31_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB7E784F-423E-4ABB-AAC9-9CBBF3873702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_event_center:t32_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D6C33C-D91B-4C54-AA35-530293E43517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1515E161-06AE-4A77-BA55-B04E0ECF05B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t31_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A34A56-995C-456D-9F66-2D4510A8746A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB819563-9DED-4339-BD3E-AB59E510EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t30_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE4DDB4-A4EA-48F4-ABAF-0E14CE903824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:1.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E8E429-36B2-41A8-A483-8FD2E7044986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:1.5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D31BB1-C7AF-4EB8-8234-97ABDA21D4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:1.5.1.131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC55BEF-9FDD-49FA-AC8E-53467824AB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:1.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B8FEF2-8D03-4752-B829-E8694DCB850E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0.1.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB009CBA-0A3B-4578-BFC7-74C42CC3F107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B9A3E8-DD9D-451B-81A4-BADA16512845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C7BE43-0F81-4550-813E-66D0844E9291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9043AE98-9A13-46F8-8E8A-BEC9E8EE0843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8289371-84B7-4342-9EA6-2844A9C5DCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.5_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4AF5A4-1B99-43F8-A659-7C57B033F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B669D-5A30-49CA-9F35-8F7AA5A2DF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0048F-B88D-47F6-89D6-B7EDDECBF700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ECA8FE-D587-4692-AA90-9706E44BAC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.8_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04698E83-4906-4FD9-81C1-955A6D770898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE527118-BAFE-4120-890B-B6D3AFF91D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1297660-D3BF-4EB4-9AD8-F0B6CB1D7EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633885BF-E4AD-4D68-BE6B-FC422C4A6756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735D9391-9600-4488-A5A3-9BE519991C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596CF80A-6D04-4C8C-8E4C-A312F50F90CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26700488-AE40-4B51-9205-90B2822A1473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64859732-7AD6-4393-927A-2D610746C6B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0:mr9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A173DA9-B4F4-4A1E-8A57-B7D04FAD775B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0_mr8_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC24AAF-F4B6-45D6-9C62-09B104C72F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0_mr9_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACAED8E-CD53-4F12-858E-3AB1DB652893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0_mr9_patch:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396E0F99-BD66-4B77-BA1F-6CDC25BAD54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.0_mr9_patch:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5EBC53-A135-429B-B132-B2FF8F6E2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5:mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2C39D-1B45-42D6-B09E-1E5FA258A776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5:mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B02318-4867-43D4-9FB2-82A3CF59342E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5:mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32CA3D-7617-453A-9D1B-4BCD84017573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5:mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE64939-BE95-454D-88C1-39A8E69A21D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5:mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571E071B-BF6D-4DC7-9E29-C150C18C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5:mr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8E6509-E041-489C-A31E-BC4EAF5DEA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5_mr2_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A3B55D-840B-48CA-9A01-97F33C24E38B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5_mr5_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2715AB5-39A2-4AB4-8DBC-A0AF0E659DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5_mr6_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478A42B0-27D5-4C01-B515-C09A5C87F49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5_mr6_patch:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D2AB6C-7C5D-44FD-9990-6EAD1CFCC10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5_mr6_patch:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63FD08C-2483-4F4D-BF90-4FC53AC51F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.5_mr6_patch:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D28387-E832-4EB5-BD0C-B64BBE42943B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6:mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C89D9D6-0923-4D11-A264-776AB637B007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6:mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CA8FDC-2040-44AC-B05D-D94F3387118E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6:mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCAF0D6-372F-4230-A9FE-D76E6CDDBA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6_mr1_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0CBF03-2DC9-4C66-A324-F007D5C03429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6_mr2_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C416484-9739-453F-A8F8-FB2A0AE3716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6_mr3_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277467C-D605-496C-A666-520C7E8729CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.6_mr3_patch:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032142FE-89CD-4810-A6F2-890CD16E6333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.7:mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECC6270-A8DC-4B51-9675-FF428E33790C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.7:mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06C6985-D7A1-4146-BCAA-BA255F238172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.7_mr1_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E33A813-6D07-447A-96A6-36E2B63FE799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server_2.7_mr2_patch:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8284327-927C-406A-BAC6-B7EF21F47407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_support_center:t30_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F014B7-5DDB-48DC-ABF9-DA7BC081830F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_support_center:t31_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AAF51C-6E2A-465E-8AD9-9A170E9FC3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_support_center:t32_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305F6293-1231-419B-B096-6F88943806A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_training_center:t30_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAA1ECC-04D7-47EA-B457-818F5BA381AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_training_center:t31_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E501E7-912E-462C-BC4C-5C8E1C6425AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_training_center:t32_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB3EDE5-67C5-40E4-AB92-BBF1B8122091"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99614",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038909",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038910",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038911",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170717-webex",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170717-webex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6755",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-07-25T19:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc90312. Known Affected Releases: 12.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el portal web de Cisco Prime Collaboration Provisioning (PCP) Tool podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz web en el sistema afectado. Más información: CSCvc90312. Versiones afectadas conocidas: 12.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9198A5-1367-495C-9305-3D4D0D462D49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99878",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038960",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-pcpt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-pcpt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T20:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de XML External Entity (XEE) en libexpat versión 2.2.0 y anteriores (Expat XML Parser Library) permite que los atacantes consigan que el analizador entre en un bucle infinito utilizando una definición de entidad externa mal formada desde una DTD externa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "05CD4F3D-73D5-45A0-8F13-896D7C1ED818"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.15",
            "matchCriteriaId" : "CF6ABED2-9492-42E0-80A7-AB77C2900E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.7",
            "matchCriteriaId" : "2E822AE7-709A-4DA4-B2C6-7A5968AE62FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.7",
            "matchCriteriaId" : "E65C03FE-52E0-477A-A104-8F2CC0EEE753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "9C0FE3B2-27E6-4DA9-8479-B34E3014AC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "0AAF5776-8121-49B5-A6AE-815B7CCAC307"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/17/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99276",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libexpat/libexpat/blob/master/expat/Changes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://libexpat.github.io/doc/cve-2017-9233/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K03244804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/17/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libexpat/libexpat/blob/master/expat/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://libexpat.github.io/doc/cve-2017-9233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K03244804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T23:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an \"infinite loop.\""
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de consumo de pila en libqpdf en QPDF 6.0.0, lo que permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado. Esto está relacionado con la función QPDFTokenizer::resolveLiteral en QPDFTokenizer.cc después de dos llamadas consecutivas en QPDFObjectHandle::parseInternal. Esto también se conoce como \\\"infinite loop.\\\"\" }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T23:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an \"infinite loop.\""
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de consumo de pila en libqpdf en QPDF 6.0.0, lo que permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado. Esto está relacionado con la función QPDF::resolveObjectsInStream en QPDF.cc. Esto también se conoce como \\\"infinite loop.\\\"\" }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_26.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T23:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after four consecutive calls to QPDFObjectHandle::parseInternal, aka an \"infinite loop.\""
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de consumo de pila en libqpdf en QPDF 6.0.0, lo que permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado. Esto está relacionado con la función QPDFTokenizer::resolveLiteral en QPDFTokenizer.cc después de cuatro llamadas consecutivas en QPDFObjectHandle::parseInternal. Esto también se conoce como \\\"infinite loop.\\\"\" }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_65.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/119",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_65.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T23:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the PointerHolder function in PointerHolder.hh, aka an \"infinite loop.\""
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de consumo de pila en libqpdf en QPDF 6.0.0, lo que permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado. Esto está relacionado con la función PointerHolder en PointerHolder.hh. Esto también se conoce como \\\"infinite loop.\\\"\" }"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_21.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/118",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-25T23:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives."
      }, {
        "lang" : "es",
        "value" : "En PHP, en versiones anteriores a la 5.6.31, versiones 7.x anteriores a la 7.0.21 y versiones 7.1.x anteriores a la 7.1.7, un desbordamiento de búfer basado en pila en la función zend_ini_do_op() en Zend/zend_ini_parser.c podría provocar una denegación de servicio (DoS) o, posiblemente, permitir la ejecución de código. NOTA: esto solo es relevante en aplicaciones PHP que aceptan entradas no fiables (en lugar del archivo php.ini del sistema) para las funciones parse_ini_string o parse_ini_file. Por ejemplo, una aplicación web para la validación sintáctica de directivas php.ini."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=05255749139b3686c8a6a58ee01131ac0047465e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=5f8380d33e648964d2d5140f329cf2d4c443033c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99489",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74603",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-21",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=05255749139b3686c8a6a58ee01131ac0047465e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=5f8380d33e648964d2d5140f329cf2d4c443033c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.8, existe una vulnerabilidad de denegación de servicio (DoS) en la función TIFFOpen. Se podría realizar un ataque de denegación de servicio con una entrada especialmente manipulada. Durante el proceso TIFFOpen, no se verifica td_imagelength. El valor de td_imagelength se puede controlar directamente por un archivo de entrada. En la función ChopUpSingleUncompressedStrip , se llama a la función _TIFFCheckMalloc en base a td_imagelength. Si se establece un valor para td_imagelenght cercano a la cantidad de memoria del sistema, el sistema se colgará o se activará el killer OOM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99977",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.php via the function parameter in a c=api&m=data2 request."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms hasta la versión 5.0.10, presenta un problema de tipo Cross Site Scripting (XSS) en el archivo controllers/api.php por medio del parámetro function en una petición c=api&m=data2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.10",
            "matchCriteriaId" : "63DB7313-F40B-4ADF-85D1-DCA05A570E10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#api-php-Reflected-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#api-php-Reflected-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dapur\\apps\\app_config\\controller\\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853."
      }, {
        "lang" : "es",
        "value" : "dapur\\\\apps\\\\app_config\\\\controller\\\\backuper.php en Fiyo CMS 2.0.7 permite que los atacantes remotos borren archivos arbitrarios mediante secuencias de salto de directorio en el parámetro file en una petición type=database. Esta es una vulnerabilidad diferente de CVE-2017-8853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "dapur/app/app_user/controller/status.php en Fiyo CMS 2.0.7 tiene una inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene un desbordamiento de memoria dinámica (heap) en la función WriteRGBImage() en coders/rgb.c cuando se procesan múltiples tramas que no tienen anchuras idénticas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/39961adf974c",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99978",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/39961adf974c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene una desreferencia de puntero NULL en la función WritePCLImage() en coders/pcl.c durante la escritura de imágenes monocroma."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f3ffc5541257",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f3ffc5541257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene una violación de segmentación en la función WriteMAPImage() en coders/map.c cuando se procesan imágenes que no están en color. Esta es una vulnerabilidad diferente a CVE-2017-11642."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una sobrelectura de búfer basada en memoria dinámica (heap) en la función WriteCIPImage() en coders/tiff.c. Esto está relacionado con la función GetPixelLuma en MagickCore/pixel-accessor.h."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/588",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una excepción de acceso de direcciones en la función WritePTIFImage() en coders/tiff.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/584",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick versión 1.3.26 tiene una pérdida de memoria en la función PersistCache en el archivo magick/pixel_cache.c durante la escritura de archivos de Magick Persistent Cache (MPC)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/db732abd9318",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/db732abd9318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick  versión 1.3.26 presenta una desreferencia de puntero NULL en la función WriteMAPImage() en el archivo coders/map.c cuando se procesa una imagen sin asignación de color, una vulnerabilidad diferente a la CVE-2017-11638."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick  versión 1.3.26 presenta un desbordamiento de pila en la función WriteCMYKImage() en el archivo coders/cmyk.c cuando se procesan varios tramas que tienen anchos no idénticos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/d00b74315a71",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/d00b74315a71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c."
      }, {
        "lang" : "es",
        "value" : "Cuando ImageMagick 7.0.6-1 procesa un archivo manipulado en convert, puede provocar una fuga de memoria en la función ReadMATImage() en coders/tiff.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/587",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag."
      }, {
        "lang" : "es",
        "value" : "NexusPHP V1.5 tiene Cross-Site Scripting (XSS) mediante una URL javascript: o data: en una etiqueta url UBBCode."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709A2AE8-5027-4BC4-A737-BF40D8304252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://118.89.230.52/about/details.docx",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://118.89.230.52/about/details.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T08:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Waves MaxxAudio, as installed on Dell laptops, adds a \"WavesSysSvc\" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system."
      }, {
        "lang" : "es",
        "value" : "Waves MaxxAudio, tal como es instalado en laptops Dell, agrega un servicio de Windows \"WavesSysSvc\" con la versión de archivo 1.1.6.0. Este servicio tiene una vulnerabilidad conocida como ruta de servicio sin entrecomillar. Esto podría potencialmente permitir a un usuario local autorizado pero no privilegiado ejecutar código arbitrario con privilegios elevados en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waves:maxxaudio:1.1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A825008D-B9FB-439D-92A7-A63A5779C9C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://justpentest.blogspot.in/2017/07/dell-unquoted-service-path-local.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://justpentest.blogspot.in/2017/07/dell-unquoted-service-path-local.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T14:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de lectura y escritura fuera de límites en la manera en que SIPcrack versión 0.2 procesó el tráfico SIP, porque la terminación 0x00 de una matriz de carga útil se manejó inapropiadamente. Un atacante remoto potencialmente podría  usar este fallo para bloquear el proceso sipdump mediante la generación de tráfico SIP especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sipcrack_project:sipcrack:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A066A372-D163-4F3F-99DD-70FF98417C1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100023",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T14:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions."
      }, {
        "lang" : "es",
        "value" : "Se encontró una perdida de memoria en la manera en que SIPcrack versión 0.2 manejó el procesamiento del tráfico SIP, porque una matriz de líneas se manejó inapropiadamente. Un atacante remoto podría usar este fallo para bloquear sesiones de espiado de red sipdump de larga ejecución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sipcrack_project:sipcrack:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A066A372-D163-4F3F-99DD-70FF98417C1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100024",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T15:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components."
      }, {
        "lang" : "es",
        "value" : "En Joomla! en versiones anteriores a la 3.7.4, el filtrado inadecuado de etiquetas HTML potencialmente maliciosas conduce a vulnerabilidades XSS en varios componentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65184BFE-A070-4099-B672-3A238E9F83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920129E4-F979-49B5-9B96-62BCBC3954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A8900-E441-46C4-A725-BA312358760E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E276C-C62D-4828-89CB-80F526FEAEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E48636-9EDB-49BB-ABC8-D79864BFCB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E5E84-4C69-49F2-83DA-FC86202DB7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB968DF7-4A0B-474C-8639-06976837E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6BE010-649F-4E48-97DC-DDF7511406D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C4094-D028-4A55-B523-C90F5A4C9D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA6550-2135-4D41-B592-433FFFDEE180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73D78E0-BF24-433B-9F1B-03FD956C5779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BAC75B-DAC1-47E1-B9C9-48CF19489143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA97C8A-809D-44FC-95D2-5F269B6BF77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F607CF-AC49-4B13-96E5-B44191108CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B39FD1-44E2-43EC-B393-99E6208622B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77BABA-7768-4F92-84C7-D247E4772749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487204D9-7A9F-4A44-B625-FDBE2807444A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C8747-BF6A-4436-BC3A-A4B808AFF889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F137D-4572-472E-B1E0-EF7A0A3ED443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51BDBB-270D-4D4D-91D6-30114927667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861627F-EB9F-4B19-9E48-E3E9967EEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C15380EB-6543-4C95-9B7F-35DDD99D1C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "C95EE9E1-CB59-4E8B-B57B-991295790328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F893A-2612-4524-B24B-0468F5EE2019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "21D252E2-1961-4D4F-8471-584CF6CB39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0930E8-3E98-4DF5-AED3-146D34F843D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "C732CFEF-CF4D-4EB7-A730-A5764B40A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta13:*:*:*:*:*:*",
            "matchCriteriaId" : "10880E1E-8478-485C-AD9C-ABE4C51D2EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "816A10B4-EC28-47EF-BD47-7F431AB77561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "F9085C7C-6CA0-4423-93B1-9E8AF6D2978E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCAD021-E5B2-4232-81FF-BB04908F4FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0B842E1A-348B-4644-930E-CF46E1E38E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D08BB717-4841-482D-A1AD-E8DF769E57C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "065980D5-AEBA-44B1-A58D-8BF8FFF674F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC711DC-C790-4558-B305-A812EE2290B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE1D53-EE34-4C2C-B2AD-3DD58254C874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "9E11C49B-2A3E-4D52-BEFA-CDDB751E20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6CA7BE-DD88-4899-A284-C9E4F97F4005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C686887-75D3-4682-AE61-245D10EEAADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15F42BC-7826-493B-8C5A-D70A7263DCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC6CF00-2D88-4B97-A496-DCBE1B4E9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25771A2-206B-4366-B9DE-34D8CE12AE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F920ED-9578-4913-B851-3205BE13A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5F713F-F7EF-4E9B-BEB1-DDFDA0838D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9774D211-08D9-4339-B2AE-42434DBAF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C03B8F0-9A63-4896-A8CA-8CE829DE6B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086B989-8ED6-4DF2-92D6-2572315BEF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFFED66-B44C-47BC-A6FC-560DC9540001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552C590-F5AB-4B9C-9E18-ECE9E2753377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF53BD-6A52-41D3-8BB3-B08AC81C65E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23070D86-E104-4A93-84EA-5B23952B6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A21583-491E-4B29-AC2D-88A561C83A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0B9B94-9601-40B1-BBF0-71BCB400C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49994A54-AB81-402A-932E-E6E7C056C0E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/701-20170605-core-xss-vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/701-20170605-core-xss-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T15:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library."
      }, {
        "lang" : "es",
        "value" : "Un escape del sandbox en Lua Interface en Wube Factorio anterior a la versión 0.15.31, permite a los servidores de juegos remotos o atacantes asistidos por el usuario ejecutar código C arbitrario incluyendo y  cargando una biblioteca C."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:factorio:factorio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.15.30",
            "matchCriteriaId" : "792FA719-E0DC-4E72-B357-445CFADDF26A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gerhardt.link/RCE-in-Factorio/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gerhardt.link/RCE-in-Factorio/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T15:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack."
      }, {
        "lang" : "es",
        "value" : "En el plugin Rocket WP versión 2.9.3 para WordPress, la técnica de mitigación de Inclusión de Archivos Locales es un corte transversal de caracteres (..) -- sin embargo, esto es insuficiente para detener los ataques remotos y se puede omitir mediante el uso 0x00 bytes, como es demostrado por un ataque .%00.../.%00.../."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "DE590550-9E64-4A97-ABF7-53B5DEA5F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2FCACF92-3F5F-40A6-A6FC-0F5E750670E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3127480F-F9B4-4539-9ED8-AF6FA6AF95C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CB23D069-3680-4D57-A45E-8F5998840268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "914C1A92-F5ED-40C6-AE1D-F761F600EDF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E8A4E293-9605-42FE-A1B5-7FC9E5133E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9DF8D9F8-9D3C-4FDD-B1E0-5BA18CC16370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:1.3.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "191EAAE6-DC40-4E3F-9127-09E18BB27701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "505A4169-8C32-4163-98BB-331D0085076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "EBF17953-FD42-438A-BDA6-283EC5A38FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B187A5E2-A53F-4028-9399-F8913572B92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "15DF3B42-6A90-4073-B46D-85C4EA91E934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.0.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8FC1478F-A293-4214-BA5C-64E804B09F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "15BF3CE2-63E1-452D-BF13-C45A5FB0D2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1E7C618D-3829-4194-A14E-436B82B8E721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1FA3D72B-8C9F-46F4-A788-742380866840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6AD653B2-0DFA-4BC3-965B-7C8032D2A697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.2.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "60CF945B-3963-4F74-B4FC-70814AA1C394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.2.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "03FDF275-CD9F-48C7-91C5-666FA28CA0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.2.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "186340C3-60C9-4D1A-A794-A6FF7FD5245A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "522168A9-4D08-4CDC-ABDD-E130D8891269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "47C19AB9-9858-4B71-B2A1-ABF713625747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "59D73F47-AED8-419E-9AFE-5DE0C0BE53DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FE406318-CF3D-40CB-9150-D1DB78872C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "15D44F2F-117C-4700-8012-591658ADC9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "009A4DBA-7829-491C-99FD-36EB75219AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C2D083B6-DA28-4E6C-9EB4-23AC1D6C454D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8899BFA0-867E-45FD-B8C1-8BF78C9CAD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FE7D2EEC-05A8-49E5-8AF1-34A0ED8F12A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A1218861-7461-43E2-97A0-7F7B9792BFC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "079056BE-7970-4FA1-AD39-E60776F7ED83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.3.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "88C81A66-DB12-4CC2-921B-8CB1C0C56C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.4.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FDF181E6-F30B-41E0-A533-64311D205315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.4.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4DF5CD80-C15A-41B0-BE93-2DCDF4E99866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.4.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "28869339-74FE-4108-A487-AD52DDDB313C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9A5E2717-0EB8-426D-9C9D-9FE6D102AD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "DF051BF6-6A4D-4722-BBF5-D6DE08AFEF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2B49A300-032F-49AF-9FB4-D361396DD216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8CB42A61-E141-4AD1-A9A1-8B607F1DE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3A3EF37A-4ADD-4AA9-9A8B-F9CE8C486DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9304C1A0-DC00-4B76-9822-8ED674EA0906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C9647B44-A7E9-411D-A361-70C2D2F2426C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4E6A1D0B-EABF-4C09-B716-41FF31A44FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BCC64FA5-2E44-415C-9C53-9492FBADB7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "664F0406-D68B-4B04-9FCE-2D0346862C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "080477D9-1FA2-41C0-A010-B98FD468405F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E68BBA9D-F6E8-4E8D-AC55-49BBD613CEC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.5.12:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8035B861-8532-470E-9086-A0AC251527A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D25CA333-5CE0-4673-8576-818CF5FD20E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "323B178D-EDE2-43FD-A25F-06EEDF0972F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7FC10E2B-8F85-495A-97CA-AC764EDA9DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2E8C2CD3-0B38-45D5-934F-66D4B253DFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C8F039C3-B46C-451E-85FB-A6F95407BF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "846E3BD9-11DA-4004-9749-051F22FCF6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E20BF544-6E8E-401C-96B6-E873B7BAB6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C00682F5-A103-40D3-83A6-2908A5F422AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1C74E1E6-01BE-4119-BB2B-5F7DB70B21C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "20614A15-758A-4CE2-B399-AD16C72EAFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CE925A09-E172-437A-961D-3001608B378B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E2005A1F-BA74-43E5-A29F-63E093B865C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.12:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2656367B-09E8-49DA-9618-D38E6D3A7614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.13:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "328524A1-278B-4105-BD3B-4A045C05B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.14:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "441FEDC1-41CC-4A6D-8D93-EAFFAB924C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.15:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F4A2C7CD-00FD-48D6-8577-C3756FA2BA96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.6.16:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "07489703-482E-4E8E-BE6B-BA9B861DFCC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.7.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "086A1BA0-4667-41DF-8B36-9293E0C6FB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.7.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "307C5A42-A035-411C-93FF-70588A0BABC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.7.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "57DF001B-245A-4AD2-B0C3-D35FC0BDB0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.7.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8EF3A5F4-411B-4377-8205-6CB787C2DCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.7.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2D4970F8-0425-4333-957A-10B058C01EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "22E49101-DBCD-473D-9550-593AB9D57AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A8AE1C49-EE09-42F1-94BB-A7684B337FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F816A4CD-723F-483B-8115-C6DDD5362CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6762EF26-1EE9-449F-8EE4-04E545FE54A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "34B53033-0037-43F2-9A52-EEEF49516A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "294F2DDD-1C6D-4AE6-A472-AA2B52697BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BA42031A-F1FD-4C3E-B67E-ABBE247590DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5CB7E5F7-8EB8-44F2-A6D4-A5FDD09264DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4F8B8521-6B39-4925-BE73-7A083F67AE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4C852816-FC67-4625-8009-4A594962650E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4A83F278-7F8F-4257-AC66-BDF29C2E7E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "EE8BC797-9717-4799-B7AA-9A6FF48243D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.12:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5DADB00D-95B2-4B36-B531-50F2BD99597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.13:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "67D9996B-02C2-4886-9FFB-55FDF9B00B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.14:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "06993847-E213-4FD9-9E4B-FDA759F293C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.15:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FDC992F8-A687-417F-858C-3EA58267322E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.16:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4A0E3FAC-5BD4-482E-9C65-D1A90AEC4AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.17:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F4E65F96-F6FF-40A3-99B3-765A65C4916B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.18:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E89D6124-F117-4508-9B2B-7F6FFB9DD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.19:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "441DA0FF-CA02-4378-9C79-2452689B33FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.20:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "11FEE42D-B075-4405-B8EC-4B6E84BE149D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.21:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "07B9F100-2E71-4C8D-A35D-805BE6C521BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.8.23:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "593E2898-798E-4D27-AD30-E89D4B665F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CFAD0798-D129-45D7-BB34-1B132620EEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F492E828-B1A4-48A5-BB9A-A4B21FF22CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "EEE58EF4-7141-4F91-8E57-52A8A064298B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9AC4A290-6F60-4E31-B87F-F70ACA0471A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D12B85FE-7187-4F72-8E1F-6DFE1693AA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "57206522-62AE-4FCB-A6A6-46CD993F7EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9BAF2690-E9F7-4B63-8B60-B9090911C346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3A4E290E-1A92-432C-9A3E-845B2E4CB4EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "63CD0478-B6F8-44A6-A3F2-07A272E7C83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.8.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8EE1A656-8C61-467D-98D4-16E5261F5D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "47DDE391-D3DC-4309-A755-3E47BF9C1D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "84C52DD0-E046-4293-97F5-85A0EF82BE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.9.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F9FF47A0-156D-4224-9945-7B6D7C28CC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.10.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "AB72E496-A2F6-4F5E-A512-9F1886FCF04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.10.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A6DD0842-6CEF-46BF-8839-B725FF5A15C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.10.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CE11ACF1-63E4-4BB6-B240-6ED1036318A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-rocket:wp-rocket:2.10.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "91017243-DCE3-4611-98BB-6656F6886559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wp-rocket.me/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8872",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wp-rocket.me/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5691",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-07-26T15:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state."
      }, {
        "lang" : "es",
        "value" : "La comprobación incorrecta en los procesadores Intel de las familias de procesadores Intel Core de 6a y 7a generación, de las familias de productos Intel Xeon E3-1500M versiones v5 y v6, y de las familias de productos Intel Xeon E3-1200 versiones v5 y v6, permite que el firmware del sistema comprometido impacte la seguridad SGX por medio de un estado inicial incorrecto del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682EDAC2-F993-4401-B649-B5C49E3E1761"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384BE426-912A-4BFD-8AE7-BEB0F941DF7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF91B19-0FA1-4CE8-B729-A09612466725"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D0E50D-B369-4C82-91DB-AD44A71736EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:stk2mv64cc_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E5D206-247A-41BA-BAE6-83F482D1090A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9497CA1C-A3CA-4CC4-8192-69DF58630575"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:stk2m3w64cc_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE204F78-8A38-4FC5-BCBF-6EB40015ABAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123782EB-5B44-492A-86B1-D10C03C89D64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc6i7kyk_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4414D9EF-D36D-4190-8581-3E0370764CA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196D3E-062A-4301-BAA8-51FAF153F2EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc6i3syk_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C2391-2CD8-49F6-BDAE-B79670CEC3B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc6i3syk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035B570B-8441-4F84-A441-FFBD1378EE6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc6i5syk_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF24505-0212-4152-80FD-F80792E51E9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc6i5syk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9AEC7B5-E79D-4CB0-8BA9-4ED6001603D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:r1304sposhor_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECEC599-486C-45B6-9D5C-73CCDF1BD5BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:r1304sposhor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3684B23-A791-43B9-8426-EE79463E9471"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:r1304sposhorr_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBDCDD-2015-45EE-BDFD-0876F20A58E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:r1304sposhorr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB43BBF2-C737-4246-8943-E21178192050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:r1208sposhorr_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921BA513-3719-4213-BB0B-96062C64459D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:r1208sposhorr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2392C7B-4401-4ECF-9AF2-AED3B375DA1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:lr1304spcfg1r_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05649F5-F879-434D-9BAC-AA95AA011DE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:lr1304spcfg1r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846E6438-E23A-4444-94C1-8E9326B53FC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:r1208sposhor_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CD2904-77C2-4F70-A187-469895E53B37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:r1208sposhor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4BADBE-93D4-44C6-8307-72A5351587F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:s1200spsr_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93285F46-461A-4BA2-B195-A7869E194CDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:s1200spsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19990B5-8D2D-4A9F-B323-2E82B46ACAF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:s1200spor_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0563A19E-8ABD-4652-B5CB-D64DBD96BD9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:s1200spor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F0421C-DD38-4FAD-8EA8-A264025A3C6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:lr1304spcfg1_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59866E74-BB74-450C-8375-61C86FA6E261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:lr1304spcfg1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3353F12-6B1E-479A-88A0-51315E377891"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:s1200spl_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACE8E81-E786-4262-AAF5-738756B5E549"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:s1200spl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFED93FA-650A-4908-9D22-DFA1013A9AF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:s1200spo_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7AF551-F825-4E09-AC7E-B94CB21B56D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:s1200spo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06306DD8-2347-4A9A-8A4A-2D283F784207"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:s1200sps_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A87E1D-1BAF-4A11-894C-0FF1592B6561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:s1200sps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB414F9E-02B4-4CD4-9534-35BD478A9598"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:r1304sposhbn_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB2AA41-AB3A-41B4-AF30-B3970A5971D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:r1304sposhbn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1698F3C-7D8C-4C5F-AB32-4176E363EC77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:s1200splr_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8245B6D7-B1E8-4B63-AA5D-E9C2BB132F75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:s1200splr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1CAD2B-7D17-4D75-9746-C6AF049F6C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:r1304sposhbnr_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52415BC5-A21B-45E2-BE4D-9BF4FF9CB0A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:r1304sposhbnr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB06D22E-814F-4B2E-BDB6-E8ADB0EDC7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15184",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo js/ViewerPanel.js en el plugin file previewer en Kopano WebApp versiones 3.3.0 y anteriores, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de un archivo de vista previa especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kopano:webapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "C95E2FF5-60BD-4D82-A804-663A3A88B11F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://stash.kopano.io/projects/KWA/repos/filepreviewer/commits/85d2b5c2d27f461bba12e9491fcc4b0d8fde771a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://stash.kopano.io/projects/KWA/repos/filepreviewer/commits/85d2b5c2d27f461bba12e9491fcc4b0d8fde771a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función xps_load_sfnt_name en xps/xpsfont.c en Artifex Ghostscript GhostXPS versión 9.21 permite a los atacantes remotos causar una denegación de servicio (DoS) (sobreescritura del búfer en la zona heap de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio  de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=d2ab84732936b6e7e5a461dc94344902965e9a06",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99976",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698025",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=d2ab84732936b6e7e5a461dc94344902965e9a06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función Ins_MIRP en base/ttinterp.c en Artifex Ghostscript GhostXPS versión 9.21 permite a los atacantes remotos causar una denegación de servicio (DoS) (sobreescritura del búfer en la zona heap de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio  de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC5891C-6572-4B5F-9249-DADE456F6510"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c7c55972758a93350882c32147801a3485b010fe",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99975",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c7c55972758a93350882c32147801a3485b010fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función Ins_IP en el archivo base/ttinterp.c en Artifex Ghostscript GhostXPS versión 9.21, permite a los atacantes remotos generar una denegación de servicio (uso de la memoria previamente liberada ‘Use After Free’ y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=98f6da60b9d463c617e631fc254cf6d66f2e8e3c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99979",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=98f6da60b9d463c617e631fc254cf6d66f2e8e3c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función xps_load_sfnt_name en xps/xpsfont.c en Artifex Ghostscript GhostXPS versión 9.21 permite a los atacantes remotos causar una denegación de servicio (DoS) (desbordamiento de búfer y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio  de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3c2aebbedd37fab054e80f2e315de07d7e9b5bdb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99993",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3c2aebbedd37fab054e80f2e315de07d7e9b5bdb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (Segmentation Violation and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función xps_true_callback_glyph_name en xps/xpsttf.c en Artifex Ghostscript GhostXPS versión 9.21 permite que los atacantes remotos provoquen una denegación de servicio (DoS) (violación de segmentación y bloqueo de la aplicación) por medio  de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c53183d4e7103e87368b7cfa15367a47d559e323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99988",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698042",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c53183d4e7103e87368b7cfa15367a47d559e323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function."
      }, {
        "lang" : "es",
        "value" : "La función xps_select_font_encoding en xps/xpsfont.c en Artifex Ghostscript GhostXPS versión 9.21 permite a los atacantes remotos causar una denegación de servicio (DoS) (sobreescritura del búfer en la zona heap de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio  de un documento creado, relacionado con la función xps_encode_font_char_char_imp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ee55637480d5e319a5de0481b01c3346855cbc9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99990",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698050",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ee55637480d5e319a5de0481b01c3346855cbc9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función Ins_MDRP en el archivo base/ttinterp.c en Artifex Ghostscript GhostXPS versión 9.21, permite a los atacantes remotos generar una denegación de servicio (lectura excesiva de búfer en la región heap de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.ghostscript.com/show_bug.cgi?id=698055",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7755e67116e8973ee0e3b22d653df026a84fa01b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99992",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.ghostscript.com/show_bug.cgi?id=698055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7755e67116e8973ee0e3b22d653df026a84fa01b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función gx_ttfReader__Read en option.cc en base/gxttfb.c en  Artifex Ghostscript GhostXPS 9.21 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o, probablemente, causar cualquier otro tipo de impacto mediante un archivo modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.ghostscript.com/show_bug.cgi?id=698056",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=937ccd17ac65935633b2ebc06cb7089b91e17e6b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99999",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.ghostscript.com/show_bug.cgi?id=698056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=937ccd17ac65935633b2ebc06cb7089b91e17e6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función Ins_JMPR en base/ttinterp.c en Artifex Ghostscript GhostXPS versión 9.21 permite a los atacantes remotos causar una denegación de servicio (DoS) (sobreescritura del búfer en la zona heap de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio  de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c501a58f8d5650c8ba21d447c0d6f07eafcb0f15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99987",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698063",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c501a58f8d5650c8ba21d447c0d6f07eafcb0f15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La función xps_decode_font_char_imp en el archivo xps/xpsfont.c en Artifex Ghostscript GhostXPS versión 9.21, permite a los atacantes remotos generar una denegación de servicio (lectura excesiva de búfer en la región stack de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio de un documento creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C5143D-FB5B-4326-899C-7B4D7C3E60E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=961b10cdd71403072fb99401a45f3bef6ce53626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99983",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698064",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=961b10cdd71403072fb99401a45f3bef6ce53626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T19:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document. This is related to a lack of an integer overflow check in base/gsalloc.c."
      }, {
        "lang" : "es",
        "value" : "La función gs_alloc_ref_array en psi/ialloc.c en Artifex Ghostscript versión 9.21 permite a los atacantes remotos causar una denegación de servicio (DoS) (desbordamiento de búfer en la región heap de la memoria y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio  de un documento PostScript creado. Esto está relacionado con la falta de una comprobación de desbordamiento de enteros en base/gsalloc.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC5891C-6572-4B5F-9249-DADE456F6510"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=cfde94be1d4286bc47633c6e6eaf4e659bd78066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=cfde94be1d4286bc47633c6e6eaf4e659bd78066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=697985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T20:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session."
      }, {
        "lang" : "es",
        "value" : "OpenProject anterior a versión 6.1.6 y versión 7.x anterior a 7.0.3, maneja inapropiadamente la expiración de sesión, lo que permite a los atacantes remotos realizar peticiones APIv3 indefinidamente aprovechando una sesión secuestrada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.5",
            "matchCriteriaId" : "B0509FAC-06FE-474A-832A-7C31BF61025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7B2B4B-1A7B-4FEB-89E3-DA8BE2014C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2A84EB-96AE-405A-A028-F07A5E7B7657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5DE2F2-197B-481E-85A6-C5784800DC67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/commit/0fdd7578909d2ec50abc275fc4962e99566437ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.openproject.org/openproject-6-1-6-released-security-fix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openproject.org/openproject-7-0-3-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opf/openproject/commit/0fdd7578909d2ec50abc275fc4962e99566437ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.openproject.org/openproject-6-1-6-released-security-fix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openproject.org/openproject-7-0-3-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-26T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas circunstancias, la función ix86_expand_builtin en el archivo i386.c en GNU Compiler Collection (GCC) versiones 4.6, 4.7, 4.8, 4.9, versión 5 anterior a 5.5 y versión 6 anterior a 6.4, generará secuencias de instrucciones que marcarán el flag status de los intrínsecos RDRAND y RDSEED antes de que se pueda leer, es posible que no se denuncien los fallos de estas instrucciones. Esto podría potencialmente conllevar a una menor aleatoriedad en la generación de números aleatorios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432D419B-7C47-432B-90CC-CBAD7112FD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01EDC85-552A-47B3-9801-99E6D033884E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B242A15-371A-4FB7-9515-46DDA6E07C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DDA9FF-4383-4E66-8945-41BB25C6C04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C86C936-3E2E-4E89-A3A4-3E77EF1AE761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF2D5BD-B28C-43A2-A990-21F5ECB1C570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D100A33-D544-4613-893B-5BBA013DB2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EE4B8E-1E82-415D-950D-13750B99E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D66615-998F-4FDA-A1E2-E203E95D55DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D812A692-BBCE-469F-9EA3-DFC0C43B347C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A4004B-67A0-4677-BC78-3019B14E3C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6A4748-7738-4259-9B4A-D013CFCCA7F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD09C4A-59C9-4852-BF74-BAF72F4EDA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/27/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100018",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7659",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-07-26T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process."
      }, {
        "lang" : "es",
        "value" : "Una petición HTTP/2 construida de manera maliciosa podría causar que mod_http2 en el Servidor HTTP de Apache versiones 2.4.24, 2.4.25, desreferencie al puntero NULL y bloquee el procesamiento del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2AC773-59A1-46EB-8943-309ADF012435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5673AB-53BB-40B2-83A7-8B82B2D0EBB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99132",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/1d0b746bbaa3a64890fcdab59ee9050aaa633b7143e7d412374e5a9a%40%3Cannounce.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/1d0b746bbaa3a64890fcdab59ee9050aaa633b7143e7d412374e5a9a%40%3Cannounce.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related to a \"User Mode Write AV starting at reporter!madTraceProcess.\""
      }, {
        "lang" : "es",
        "value" : "El archivo Reporter.exe en Acunetix versión 8, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo PRE malformado, relacionado con un \"User Mode Write AV starting at reporter!madTraceProcess\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acunetix:web_vulnerability_scanner:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01FE1E5-DE28-4653-A83F-A69BF824B7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/07/readwrite-access-violation-acunetix.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/07/readwrite-access-violation-acunetix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a \"Read Access Violation starting at reporter!madTraceProcess.\""
      }, {
        "lang" : "es",
        "value" : "El archivo Reporter.exe en Acunetix versión 8, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo PRE malformado, relacionado con una \"Read Access Violation starting at reporter!madTraceProcess\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acunetix:web_vulnerability_scanner:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01FE1E5-DE28-4653-A83F-A69BF824B7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/07/readwrite-access-violation-acunetix.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/07/readwrite-access-violation-acunetix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the admin_name array parameter to admin_dir/login.php, if there is an export of an error-log entry for that invalid array index."
      }, {
        "lang" : "es",
        "value" : "La función traverseStrictSanitize en el archivo admin_dir/includes/classes/AdminRequestSanitizer.php en ZenCart versión 1.5.5e, maneja inapropiadamente las cadenas de claves, permitiendo a los usuarios autenticados remotos ejecutar código PHP arbitrario mediante la colocación de ese código en un índice de matriz no válido del parámetro matriz admin_name en el archivo admin_dir/login.php, si hay una exportación de una entrada de registro de error para ese índice de matriz no válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.5.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FCB837-36FA-4D8F-8592-E4220A3E2AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/imp0wd3r/vuln-papers/tree/master/zencart-155e-auth-rce",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/imp0wd3r/vuln-papers/tree/master/zencart-155e-auth-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site-scripting (XSS) en Hashtopus versión 1.5g, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio de la cadena Query al archivo admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashtopus_project:hashtopus:1.5g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41A8CB2-88AF-41EA-AC33-A65FFF3005F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99974",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/curlyboi/hashtopus/issues/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/curlyboi/hashtopus/issues/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Hashtopus versión 1.5g permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio del parámetro format en archivo admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashtopus_project:hashtopus:1.5g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41A8CB2-88AF-41EA-AC33-A65FFF3005F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/curlyboi/hashtopus/issues/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/curlyboi/hashtopus/issues/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action."
      }, {
        "lang" : "es",
        "value" : "Se presenta una problema de tipo Cross-Site Request Forgery (CSRF) en Hashtopus versión 1.5g por medio del parámetro password en archivo admin.php en una acción a=config."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashtopus_project:hashtopus:1.5g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41A8CB2-88AF-41EA-AC33-A65FFF3005F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/curlyboi/hashtopus/issues/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/curlyboi/hashtopus/issues/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php."
      }, {
        "lang" : "es",
        "value" : "Se presenta una problema de tipo Cross-Site Request Forgery (CSRF) en Hashtopussy versión 0.4.0, permitiendo un cambio de contraseña del administrador por medio del archivo users.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:project_hashtopussy:hashtopussy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "99C59E3C-84FE-4625-A08A-488732AA5C3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3inlc/hashtopussy/issues/241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3inlc/hashtopussy/issues/241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Hashtopussy versión 0.4.0, permite a los usuarios autenticados remotos ejecutar acciones que solo deberían estar disponibles para roles administrativos, como es demostrado por una petición action=createVoucher al archivo agents.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:project_hashtopussy:hashtopussy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "99C59E3C-84FE-4625-A08A-488732AA5C3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3inlc/hashtopussy/issues/241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3inlc/hashtopussy/issues/241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de tipo Cross-site scripting almacenada en Hashtopussy versión 0.4.0, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio del parámetro (1) version, (2) url o (3) rootdir en el archivo hashcat.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashtopolis:hashtopolis:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9C6259-A246-49FA-90F8-86E8EE428D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s3inlc/hashtopussy/issues/241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s3inlc/hashtopussy/issues/241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input."
      }, {
        "lang" : "es",
        "value" : "Hay una aserción alcanzable en la función Internal::TiffReader::visitDirectory en el archivo tiffvisitor.cpp de Exiv2 versión 0.26 que conllevará a un ataque de denegación de servicio remoto por medio de una entrada creada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100030",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1475124",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1475124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input."
      }, {
        "lang" : "es",
        "value" : "Se presenta un acceso de dirección ilegal en la función build_table en el archivo libavcodec/bitstream.c de Libav versión 12.1, que conllevará a la denegación remota de servicio por medio de una entrada creada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99846C93-A0F8-459D-AC79-A79CDE487505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site-scripting (XSS) reflexivo en la búsqueda y visualización de datos de eventos en  Zoho ManageEngine Event Log Analyzer versiones 11.4 y 11.5, permiten a los atacantes remotos inyectar scripts web o HTML arbitrarios, como es demostrado por el parámetro fName."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2001AC-0699-40AC-AD32-7DD526A31574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542CF2AD-EC7E-4D05-B70D-D5934ABE6A49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://init6.me/exploiting-manageengine-eventlog-analyzer.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://init6.me/exploiting-manageengine-eventlog-analyzer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Event Log Analyzer versiones 11.4 y 11.5, permite a los atacantes remotos obtener la contraseña de un usuario autenticado por medio de vulnerabilidades XSS o espiando el tráfico no SSL en la red, porque la contraseña se representa en una cookie con un método de codificación  reversible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2001AC-0699-40AC-AD32-7DD526A31574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542CF2AD-EC7E-4D05-B70D-D5934ABE6A49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://init6.me/exploiting-manageengine-eventlog-analyzer.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://init6.me/exploiting-manageengine-eventlog-analyzer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML via syslog."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site-scripting (XSS) persistentes en las funciones de visualización y análisis de registro de eventos  en Zoho ManageEngine Event Log Analyzer versiones 11.4 y 11.5, permiten a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio de syslog."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2001AC-0699-40AC-AD32-7DD526A31574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542CF2AD-EC7E-4D05-B70D-D5934ABE6A49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://init6.me/exploiting-manageengine-eventlog-analyzer.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://init6.me/exploiting-manageengine-eventlog-analyzer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de tipo cross-site-scripting (XSS) en el archivo auth_profile.php en Cacti versión 1.1.13, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio de encabezados Referer HTTP especialmente creados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC00868-0425-43E1-B35A-4040C20CC979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100022",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/104090aeead4aa433bf1f18cd6d52dcfeb71236c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/867",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/104090aeead4aa433bf1f18cd6d52dcfeb71236c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función TDStretch::processSamples en el archivo source/SoundTouch/TDStretch.cpp en SoundTouch versión 1.9.2 permite a los atacantes remotos causar una denegación de servicio (bucle infinito y consumo de CPU) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surina:soundtouch:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0933086D-D8EB-40B1-A53B-7C4A6D040628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42389/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42389/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función TDStretch::acceptNewOverlapLength en el archivo source/SoundTouch/TDStretch.cpp en SoundTouch versión 1.9.2, permite a los atacantes remotos causar una denegación de servicio (error de asignación de memoria y bloqueo de aplicación) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surina:soundtouch:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0933086D-D8EB-40B1-A53B-7C4A6D040628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100095",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42389/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42389/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función TDStretchSSE::calcCrossCorr en el archivo source/SoundTouch/sse_optimized.cpp en SoundTouch versión 1.9.2 , permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surina:soundtouch:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0933086D-D8EB-40B1-A53B-7C4A6D040628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42389/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42389/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.773",
      "lastModified" : "2023-11-07T02:50:46.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.803",
      "lastModified" : "2023-11-07T02:50:46.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of CVE-2015-9100. Notes: All CVE users should reference CVE-2015-9100 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función unpack_read_samples en el archivo frontend/get_audio.c en LAME versión 3.99.5, permite a los atacantes remotos causar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42390/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42390/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file."
      }, {
        "lang" : "es",
        "value" : "La función next_text en el archivo src/libmpg123/id3.c en mpg123 versión 1.24.0, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva de búfer) por medio de un archivo mp3 creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:1.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A095B1-79B7-4A45-B2C7-30B301D81601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/65",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T06:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted jpg file. NOTE: Maintainer asserts the issue is due to a bug in downstream code caused by misuse of the libjpeg API"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La función fill_input_buffer en el archivo jdatasrc.c en libjpeg-turbo versión 1.5.1, permite a los atacantes remotos causar una denegación de servicio (acceso a memoria no válido y bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un archivo jpg creado. NOTA: El mantenedor afirma que el problema se debe a un error en el código posterior causado por un mal uso de la API libjpeg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d.r.commander:libjpeg-turbo:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2EDAFC-A0CA-43CC-BC5B-22B3AF3E8DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143518/libjpeg-turbo-1.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/66",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libjpeg-turbo/libjpeg-turbo/issues/167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42391/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143518/libjpeg-turbo-1.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libjpeg-turbo/libjpeg-turbo/issues/167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42391/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T12:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream."
      }, {
        "lang" : "es",
        "value" : "La función ff_amf_get_field_value en el archivo libavformat/rtmppkt.c en FFmpeg versión 3.3.2, permite a los servidores RTMP remotos causar una denegación de servicio (infracción de segmentación y bloqueo de aplicación) por medio de un flujo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0BBD48-E620-409E-A7B9-EA22493981F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100017",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/ffcc82219cef0928bed2d558b19ef6ea35634130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/ffcc82219cef0928bed2d558b19ef6ea35634130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T13:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en MediaCoder versión 0.8.48.5888, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo .m3u creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacoder:mediacoder:0.8.48.5888:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5113EC16-3A87-45F1-82B7-958830794E3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42384/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42384/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-27T18:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en AudioCoder versión 0.8.46 permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo .m3u creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacoderhq:audiocoder:0.8.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE38098-6472-4411-9929-7491CE2B712C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42385/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42385/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter."
      }, {
        "lang" : "es",
        "value" : "El archivo front/backup.php en GLPI anterior a la versión 9.1.5, permite a los administradores autenticados remotos eliminar archivos arbitrarios por medio de un parámetro file creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.4",
            "matchCriteriaId" : "71E7F94F-BB7E-4FA5-A08C-BBA1D4013F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/issues/2450",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/issues/2450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter."
      }, {
        "lang" : "es",
        "value" : "Se presenta una inyección SQL en el archivo front/devicesoundcard.php en GLPI anterior a la versión 9.1.5, por medio del parámetro start."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.4",
            "matchCriteriaId" : "71E7F94F-BB7E-4FA5-A08C-BBA1D4013F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/issues/2449",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/issues/2449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html."
      }, {
        "lang" : "es",
        "value" : "Los enrutadores NetComm Wireless 4GT101W con Hardware: versión 0.01/Software: versión V1.1.8.8/Cargador de Arranque: versión 1.1.3, no requieren autenticación para los archivos logfile.html, status.html o system_config.html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netcomm:4gt101w_software:1.1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC69B9B-1F1E-430C-9B7D-EFF11F311C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netcomm:4gt101w_bootloader:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D44258-A822-40DF-9AA3-E63C331597CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/access-violation-vulnerability-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/access-violation-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device."
      }, {
        "lang" : "es",
        "value" : "Los enrutadores NetComm Wireless 4GT101W con Hardware: versión 0.01/Software: versión V1.1.8.8/Cargador de Arranque: versión 1.1.3, son vulnerables a los ataques de tipo CSRF, como es demostrado usando el archivo administration.html para deshabilitar el firewall. No contienen ningún token que pueda mitigar las vulnerabilidades de CSRF dentro del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netcomm:4gt101w_software:1.1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC69B9B-1F1E-430C-9B7D-EFF11F311C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netcomm:4gt101w_bootloader:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D44258-A822-40DF-9AA3-E63C331597CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Los enrutadores NetComm Wireless 4GT101W con Hardware: versión 0.01/Software: versión V1.1.8.8/Cargador de Arranque: versión 1.1.3, son vulnerables a los ataques de tipo cross-site scripting almacenados. Creando un SSID con una carga útil de XSS resultando en una explotación con éxito."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netcomm:4gt101w_software:1.1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC69B9B-1F1E-430C-9B7D-EFF11F311C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netcomm:4gt101w_bootloader:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D44258-A822-40DF-9AA3-E63C331597CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/cross-site-scripting-vulnerability-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/cross-site-scripting-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de perdida de memoria en la función parseSWF_DOACTION del archivo útil/parser.c en Ming versión 0.4.8, que permite a los atacantes causar una denegación de servicio por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingmemory-leak-in-parseswfdoaction.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/72",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingmemory-leak-in-parseswfdoaction.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se encontró una lectura en exceso del búfer en la región heap de la memoria en la función decompileIF en el archivo útil/decompile.c en Ming versión 0.4.8, que permite a los atacantes causar una denegación de servicio por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/76",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se encontró una perdida de memoria en la función parseSWF_SHAPEWITHSTYLE en el archivo útil/parser.c en Ming versión 0.4.8, lo que permite a los atacantes causar una denegación de servicio por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingmemory-leak-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingmemory-leak-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was \"At the moment that is an accepted risk. We only have https on the checkout part of the site.\""
      }, {
        "lang" : "es",
        "value" : "La aplicación Boozt Fashion anterior a la versión 2.3.4 para Android, permite a los atacantes remotos leer las credenciales de inicio de sesión mediante el espiado de la red y aprovechando la ausencia de certificados SSL. NOTA: la respuesta del proveedor, antes que la aplicación fuera cambiada para habilitar los inicios de sesión SSL, fue \"At the moment that is an accepted risk. We only have https on the checkout part of the site.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boozt:boozt:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "8F6A71A6-5F70-4E80-BCA3-67C128FA8FDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/166712",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/27/boozt-fashion-android-app-didnt-use-ssl-for-login-cve-2017-11706/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/166712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/27/boozt-fashion-android-app-didnt-use-ssl-for-login-cve-2017-11706/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c."
      }, {
        "lang" : "es",
        "value" : "El archivo psi/ztoken.c en Artifex Ghostscript versión 9.21, maneja inapropiadamente las referencias a la estructura de estado del escáner, que permite a los atacantes remotos generar una denegación de servicio (bloqueo de aplicación) o posiblemente tener otro impacto no especificado por medio de un documento PostScript creado, relacionado con una lectura fuera de limites de la función igc_reloc_struct_ptr en el archivo psi/igc.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC5891C-6572-4B5F-9249-DADE456F6510"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=671fd59eb657743aa86fbc1895cb15872a317caa",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039233",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698158",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=671fd59eb657743aa86fbc1895cb15872a317caa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions involving admin/system/safe.php and job/cv.php."
      }, {
        "lang" : "es",
        "value" : "En el archivo job/uploadfile_save.php en MetInfo hasta la versión 5.3.17, bloquea la extensión .php pero no las extensiones relacionadas, lo que podría permitir que los administradores autenticados remotos ejecuten código PHP arbitrario al cargar un archivo .phtml después de ciertas acciones que involucran al archivo admin/system/safe.php y job/cv.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo_project:metinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.17",
            "matchCriteriaId" : "8205EF34-EC30-4AB3-B13D-FAA94FEE4053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lncken.cn/?p=316",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lncken.cn/?p=316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode."
      }, {
        "lang" : "es",
        "value" : "En MetInfo hasta la versión 5.3.17, permite ataques de tipo Cross-Site Scripting (XSS) almacenado por medio del Modo Edit de HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo_project:metinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.17",
            "matchCriteriaId" : "8205EF34-EC30-4AB3-B13D-FAA94FEE4053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lncken.cn/?p=339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lncken.cn/?p=339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page."
      }, {
        "lang" : "es",
        "value" : "En MetInfo hasta la versión 5.3.17 acepta la misma respuesta CAPTCHA por 120 segundos, lo que hace más fácil para los atacantes remotos omitir los requisitos de desafío previstos al modificar el flujo de datos hacia el servidor cliente, como es demostrado por la página de login/findpass."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo_project:metinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.17",
            "matchCriteriaId" : "8205EF34-EC30-4AB3-B13D-FAA94FEE4053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lncken.cn/?p=343",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lncken.cn/?p=343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php."
      }, {
        "lang" : "es",
        "value" : "Se presentó una Violación de URL Redirector en MetInfo hasta la versión 5.3.17 por medio del parámetro gourl en el archivo member/login.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo_project:metinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.17",
            "matchCriteriaId" : "8205EF34-EC30-4AB3-B13D-FAA94FEE4053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lncken.cn/?p=350",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lncken.cn/?p=350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T05:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file."
      }, {
        "lang" : "es",
        "value" : "La función dnxhd_decode_header en el archivo libavcodec/dnxhddec.c en FFmpeg versión 3.0 hasta la versión 3.3.2, permite a los atacantes remotos causar una denegación de servicio (acceso fuera de la matriz) o posiblemente tener otro impacto no especificado por medio de un archivo DNxHD creado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.2",
            "matchCriteriaId" : "7950917A-647C-431B-A872-67E914C135A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/296debd213bd6dce7647cedd34eb64e5b94cdc92",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/f31fc4755f69ab26bf6e8be47875b7dcede8e29e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/296debd213bd6dce7647cedd34eb64e5b94cdc92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/f31fc4755f69ab26bf6e8be47875b7dcede8e29e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T13:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial information. PostgreSQL is used as the Document Management System database. The account name is dms. The password is hard-coded throughout the application, and is the same across all installations. Customers do not have the option to change passwords. The dms account for PostgreSQL has access to the database schema for Document Management System."
      }, {
        "lang" : "es",
        "value" : "El sistema de gestión de documentos de MEDHOST contiene credenciales codificadas que son usadas para el acceso a la base de datos de los clientes. Un atacante con conocimiento de las credenciales codificadas y la capacidad de comunicarse directamente con la base de datos puede obtener o modificar información financiera y confidencial del paciente. PostgreSQL se utiliza como la base de datos del Sistema de Gestión de Documentos. El nombre de la cuenta es dms. La contraseña está codificada en toda la aplicación y es la misma en todas las instalaciones. Los clientes no tienen la opción de cambiar las contraseñas. La cuenta dms para PostgreSQL tiene acceso al esquema de base de datos para el Sistema de Gestión de Documentos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medhost:medhost_document_management_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE13E75-1EDB-4F32-952A-0ED20F12A3E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T13:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with Apache Solr may be able to obtain or modify sensitive patient and financial information. The Apache Solr account name is dms. The password is hard-coded throughout the application, and is the same across all installations. Customers do not have the option to change passwords. The dms account for Apache Solr has access to all indexed patient documents."
      }, {
        "lang" : "es",
        "value" : "El sistema de gestión de documentos de MEDHOST contiene credenciales codificadas que son usadas para el acceso a Apache Solr. Un atacante con conocimiento de las credenciales codificadas y la capacidad de comunicarse directamente con Apache Solr puede obtener o modificar información  financiera y confidencial del paciente. El nombre de la cuenta Apache Solr es dms. La contraseña está codificada en toda la aplicación y es la misma en todas las instalaciones. Los clientes no tienen la opción de cambiar las contraseñas. La cuenta dms para Apache Solr tiene acceso a todos los documentos de pacientes indexados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medhost:medhost_document_management_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE13E75-1EDB-4F32-952A-0ED20F12A3E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T13:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging statement executing outside of a loop, and consequently using an invalid array index corresponding to the loop's exit condition."
      }, {
        "lang" : "es",
        "value" : "La función WriteOnePNGImage en el archivo coders/png.c en GraphicsMagick versión 1.3.26 permite a los atacantes remotos causar una denegación de servicio (lectura fuera de límites y bloqueo de aplicación) por medio de un archivo creado, debido a que el flujo de control actual del programa era inconsistente con su sangría. Esto resultó en que una instrucción de registro se ejecutara fuera de un bucle y, en consecuencia, utilizara un índice de matriz no válido correspondiente a la condición de salida del bucle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f423ba88ca4e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f423ba88ca4e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-28T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file."
      }, {
        "lang" : "es",
        "value" : "Se presentó una vulnerabilidad de división por cero en LAME versión 3.99.5, causada por un archivo input malformado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/777159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/460/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/777159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/460/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6251",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a missing permissions check may allow users to gain access to arbitrary physical system memory, which may lead to an escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "INVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel donde una falta de comprobación de permisos puede permitir a los usuarios conseguir acceso a la memoria del sistema físico arbitrario, lo que puede conllevar a una escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6252",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel, donde una desreferencia del puntero NULL  puede conllevar a una denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6253",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated which may lead to denial of service or potential escalation of privileges"
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde el tamaño de un búfer de entrada no es validado, lo que puede conllevar a la denegación de servicio o a una posible escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C44215-3940-4A5C-BC6F-0F0E4B7A91DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6254",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from an user to the driver is used without validation which may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde un puntero pasado de un usuario hacia el controlador es usado sin validación, lo que puede conllevar a la denegación del servicio o a una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C44215-3940-4A5C-BC6F-0F0E4B7A91DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6255",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an improper input parameter handling may lead to a denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel (nvlddmkm.sys) para DxgkDdiEscape donde un manejo inapropiado del parámetro input puede conllevar a una denegación de servicio o una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C44215-3940-4A5C-BC6F-0F0E4B7A91DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6256",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or potential escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, donde un valor pasado de un usuario al controlador no se valida correctamente y es usado como el índice de una matriz, lo que puede conllevar a la denegación del servicio o a una potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C44215-3940-4A5C-BC6F-0F0E4B7A91DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6257",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges"
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel donde una desreferencia del puntero NULL  puede conllevar a la denegación de servicio o la potencial escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEFACEB-63FC-4848-9B40-35C38768C271"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6259",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invalid state produced by specific user actions may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver contiene una vulnerabilidad en el manejador layer del modo kernel donde una detección y recuperación incorrecta de un estado no válido producido por las acciones de un usuario específico pueden conllevar a la denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEFACEB-63FC-4848-9B40-35C38768C271"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6260",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-07-28T19:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en la función auxiliar layer del modo kernel  donde un cálculo inapropiado de la longitud de la cadena puede conllevar a la denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4919",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-07-28T22:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server versiones  5.5, 6.0, 6.5, permite a los usuarios de vSphere con ciertos privilegios de vSphere limitados usar la API VIX para acceder a los Sistemas Operativos Invitados sin la necesidad de autenticarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B12523A-5C1E-408F-BB4B-98EF32C7D676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7499E57A-1F9C-45F0-93F8-F3FB7B0F990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D97854C-DE5D-48B4-B5DB-C132E6D4B826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100102",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039004",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0012.html",
        "source" : "security@vmware.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2017-0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delete any folder via directory traversal sequences in the deld parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto del directorio en el archivo plugins/ImageManager/backend.php en Xinha versión 0.96, tal como es usado en Jojo versión 4.4.0, permite a los atacantes remotos eliminar cualquier carpeta por medio del salto de directorio en el parámetro deld."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xinha:xinha:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12845EA-55CF-44A2-A931-666C6A75809B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JojoCMS/Jojo-CMS/issues/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JojoCMS/Jojo-CMS/issues/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures."
      }, {
        "lang" : "es",
        "value" : "La función ReadMATImage en el archivo coders/mat.c en ImageMagick hasta la versión 6.9.9-3 y versión 7.x hasta 7.0.6-3, presenta pérdidas de memoria que involucran las estructuras de datos quantum_info y clone_info."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.9-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10128E43-3DBD-4461-ACCD-1D088D3E39F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/624",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/104597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections."
      }, {
        "lang" : "es",
        "value" : "La función share en Thycotic Secret Server anterior a versión 10.2.000019, maneja inapropiadamente el botón Back, lo que conlleva a redireccionamientos involuntarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thycotic:secret_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.000018",
            "matchCriteriaId" : "8F490CD3-7C08-423A-AF12-ADDF653F144E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thycotic.com/products/secret-server/resources/advisories/thy-ss-009/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://thycotic.com/products/secret-server/resources/advisories/thy-ss-009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de sobrelectura de búfer basada en memoria dinámica (heap) en la función OpCode (cuando se llama desde decompileSETMEMBER) en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode_32.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/82",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode_32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función OpCode (cuando se llama desde decompileINCR_DECR line 1440) en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/79",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de sobrelectura de búfer basada en memoria dinámica (heap) en la función OpCode (cuando se llama desde decompileINCR_DECR line 1474) en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode_24.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/81",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de lectura de memoria no válida en la función OpCode (cuando se llama desde isLogicalOp y decompileIF) en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libminginvalid-memory-read-in-opcode.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/84",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libminginvalid-memory-read-in-opcode.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap) en la función dcputs (cuando se llama desde decompileIMPLEMENTS) en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-dcputs.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/80",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-dcputs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función stackswap (cuando se llama desde decompileSTACKSWAP) en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingnull-pointer-dereference-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/78",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingnull-pointer-dereference-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T05:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de sobrelectura de búfer basada en memoria dinámica (heap) en la función decompileCALLFUNCTION en util/decompile.c en la versión 0.4.8 de Ming, que permite a los atacantes provocar la denegación del servicio mediante un fichero especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:ming:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ADA512-48F0-4FC4-8614-0212A9799B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in_24.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/83",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libming/libming/issues/83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T14:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in core\\admin\\auto-modules\\forms\\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via the tags array parameter."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección SQL en el archivo core\\admin\\auto-modules\\forms\\process.php en BigTree versión 4.2.18, permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio del parámetro matriz tags."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:4.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E063676-F915-4F47-AA8E-A3ACEF258F08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/304",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-29T14:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page."
      }, {
        "lang" : "es",
        "value" : "En el archivo Interfaz/js/app/history.js en la WebUI en Rspamd anterior a la versión 1.6.3, permite ataques de tipo XSS por medio de los encabezados Subject y Message-Id, que son manejados inapropiadamente en la página del histórico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rspamd_project:rspamd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "ECD82C37-0D7E-45EC-B4CE-867438F6E6AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vstakhov/rspamd/issues/1738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vstakhov/rspamd/releases/tag/1.6.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vstakhov/rspamd/issues/1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vstakhov/rspamd/releases/tag/1.6.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T14:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan horse ADVAPI32.DLL in the current working directory because of an untrusted search path, aka DLL hijacking."
      }, {
        "lang" : "es",
        "value" : "La función writeRandomBytes_RtlGenRandom en el archivo xmlparse.c en libexpat en Expat versiones 2.2.1 y 2.2.2 en Windows, permite a los usuarios locales alcanzar privilegios por medio de una biblioteca de tipo caballo de Troya ADVAPI32.DLL en el directorio de trabajo actual debido a una ruta de búsqueda no confiable, también se conoce como secuestro de DLL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexpat_project:libexpat:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682E52D-A77F-4072-B8C9-42DE7F956DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexpat_project:libexpat:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912E3DE9-F354-4990-B2E0-3545C52BA704"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100147",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libexpat/libexpat/issues/82",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libexpat/libexpat/issues/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T15:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MODX Revolution 2.5.7, the \"key\" and \"name\" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module."
      }, {
        "lang" : "es",
        "value" : "En MODX Revolution versión 2.5.7, los parámetros \"key\" y \"name\" en el módulo Configuración de Sistema son vulnerables a ataques de tipo XSS. Cada usuario que acceda a este módulo activará una carga maliciosa enviada hacia el archivo connectors/index.php que será activado por cada usuario, cuando visiten este módulo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E69041C-F126-4D58-9735-BA111D7A374F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modxcms/revolution/issues/13564",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modxcms/revolution/issues/13564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T16:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a \"kill `cat /pathname/tenshi.pid`\" command."
      }, {
        "lang" : "es",
        "value" : "Tenshi versión  0.15 crea un archivo tenshi.pid después de perder los privilegios a una cuenta no root, lo que podría permitir a los usuarios locales eliminar procesos arbitrarios al explotar el acceso a esta cuenta no root para la modificación de tenshi.pid antes de que un script root ejecute un comando \"kill `cat /pathname/tenshi.pid`\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inversepath:tenshi:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE62B00-3480-4B30-B0B2-72A6B8BE1064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/inversepath/tenshi/issues/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/inversepath/tenshi/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a \"kill `cat /run/tinyproxy/tinyproxy.pid`\" command."
      }, {
        "lang" : "es",
        "value" : "El archivo main.c en Tinyproxy versión 1.8.4 y anteriores, crea un archivo /run/tinyproxy/tinyproxy.pid después de quitar los privilegios a una cuenta no root, lo que podría permitir a los usuarios locales eliminar procesos arbitrarios mediante el aprovechamiento del acceso a esta cuenta no root para la modificación de Tinyproxy.pid antes de que un script root ejecute el comando \"kill` cat/run/tinyproxy/tinyproxy.pid`\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinyproxy_project:tinyproxy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.4",
            "matchCriteriaId" : "04519538-C2BF-4130-B376-3EBBC1A183FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tinyproxy/tinyproxy/issues/106",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/tinyproxy/tinyproxy/issues/106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file."
      }, {
        "lang" : "es",
        "value" : "VIT Spider Player versión 2.5.3, presenta una ruta de búsqueda no confiable, que permite el secuestro de DLL por medio de unos archivos de tipo caballo de Troya dwmapi.dll, olepro32.dll, dsound.dll o AUDIOSES.dll."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softonic:spider_player:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EEB857-D3F2-47F2-8F80-73CAE3948756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.pentest.space/2017/07/spider-player-253-unsafe-dll-loading.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.pentest.space/2017/07/spider-player-253-unsafe-dll-loading.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T16:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file."
      }, {
        "lang" : "es",
        "value" : "InternetSoft FTP Commander versión 8.02 y anterior, presenta una ruta de búsqueda no confiable, lo que permite el secuestro de DLL por medio de un archivo de tipo caballo de Troya dwmapi.dll."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet-soft:ftp_commander:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.02",
            "matchCriteriaId" : "449A9315-2C2F-4D5C-92C6-8C7D13444E14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.pentest.space/2017/07/023-ftp-commander-802-unsafe-dll.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.pentest.space/2017/07/023-ftp-commander-802-unsafe-dll.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function \"Token& Scanner::peek\" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string."
      }, {
        "lang" : "es",
        "value" : "La función \"Token & Scanner::peek\" en el archivo scanner.cpp en yaml-cpp versión 0.5.3 y anteriores, permite a los atacantes remotos causar una denegación de servicio (fallo de aserción y salida de aplicación) por medio de una cadena '!2'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaml-cpp_project:yaml-cpp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.3",
            "matchCriteriaId" : "BAAAAE9D-FD0F-4C49-BFD2-01C5E103365D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jbeder/yaml-cpp/issues/519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jbeder/yaml-cpp/issues/519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T17:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadOneJNGImage en el archivo coders/png.c en ImageMagick versiones 6.9.9-4 y 7.0.6-4, permite a los atacantes remotos causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.9.9-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEF4B5C-D4DE-4F37-94D3-782AFAFEC791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/632",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T17:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función WritePICONImage en el archivo coders/xpm.c en ImageMagick versión 7.0.6-4, permite a los atacantes remotos causar una denegación de servicio (pérdida de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/631",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T18:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadMAGICKImage en el archivo coders/magick.c en ImageMagick versión 7.0.6-4, permite a los atacantes remotos causar una denegación de servicio (pérdida de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/628",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T18:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file."
      }, {
        "lang" : "es",
        "value" : "La función GetImageDepth en el archivo MagickCore/attribute.c en ImageMagick versión 7.0.6-4, podría permitir a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria) por medio de un archivo Flexible Image Transport System (FITS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/629",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T18:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an OpenPixelCache call."
      }, {
        "lang" : "es",
        "value" : "La función WritePICONImage en el archivo coders/xpm.c en ImageMagick versión 7.0.6-4, permite a los atacantes remotos causar una denegación de servicio (pérdida de memoria) por medio de un archivo creado que es manejado inapropiadamente en una llamada OpenPixelCache."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/633",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T18:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an AcquireSemaphoreInfo call."
      }, {
        "lang" : "es",
        "value" : "La función WritePICONImage en el archivo coders/xpm.c en ImageMagick versión 7.0.6-4, permite a los atacantes remotos causar una denegación de servicio (pérdida de memoria) por medio de un archivo creado que es manejado inapropiadamente en una llamada AcquireSemaphoreInfo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/634",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-30T18:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe=config_upload, and then using user.php/music/add/ to upload the code."
      }, {
        "lang" : "es",
        "value" : "En Earcms Ear Music hasta la versión 4.1 build 20170710, los usuarios autenticados remotos pueden ejecutar código PHP arbitrario cambiando las extensiones de carga de música permitidas para incluir .php además de .mp3 y .m4a en admin.php?iframe=config_upload, y luego usar el user.php/music/add/ para cargar el código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earcms:ear_music:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "427FE176-3EFC-46A7-AAB6-C62D3CD702A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lncken.cn/?p=359",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lncken.cn/?p=359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos WiFi Home Hotspot de Comcast XFINITY permiten a los atacantes remotos suplantar las identidades de los clientes de Comcast por medio de una dirección MAC falsificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comcast:xfinity_wifi_hotspot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10035D0-FE84-4AF8-B35F-79E8EBECBEA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-17.public-wifi-theft-impersonation.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-17.public-wifi-theft-impersonation.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices makes it easy for remote attackers to determine the hidden SSID and passphrase for a Home Security Wi-Fi network."
      }, {
        "lang" : "es",
        "value" : "El firmware de Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST); y Arris TG1682G (eMTA&DOCSIS.CT versión 10.0.132.SIP.PC20.CT, versión de software TG1682_2.2p7s2_PROD_sey),  facilitan a los atacantes remotos determinar el SSID oculto y la frase de contraseña para una red Wi-Fi de Home Security."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2CACD9-23A9-4E24-A1C5-A09B99874EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70716B6-6002-457E-8414-297402EDCC74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-18.home-security-wifi-network.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-18.home-security-wifi-network.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot."
      }, {
        "lang" : "es",
        "value" : "El firmware de Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST) y DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los atacantes remotos detectar la dirección MAC CM mediante la conexión al hotspot xfinitywifi del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-19.wifi-dhcp-cm-mac-leak.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-19.wifi-dhcp-cm-mac-leak.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote attackers to discover hidden Home Security Wi-Fi networks by leveraging the embedding of the MTA/VoIP MAC address into the DNS hostname."
      }, {
        "lang" : "es",
        "value" : "El firmware de Comcast en Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST) y DPC3939 (DPC3939 (DPC3939 ( versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), establece la dirección MAC CM en un valor con un offset de dos bytes de la Dirección MAC MTA/VoIP, que indirectamente permite a los atacantes remotos detectar redes Wi-Fi ocultas de Home Security mediante el aprovechamiento de la inserción de la dirección MAC MTA/VoIP en el nombre de host DNS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-20.emta-reverse-dns.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-20.emta-reverse-dns.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a readable filesystem."
      }, {
        "lang" : "es",
        "value" : "El firmware de Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los atacantes remotos ejecutar comandos arbitrarios como root mediante el aprovechamiento del acceso a la red local y conectándose al servidor syseventd, como es demostrado por el copiado de los datos de configuración en un sistema de archivos legible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-22.syseventd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-22.syseventd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows local users (e.g., users who have command access as a consequence of CVE-2017-9479 exploitation) to read arbitrary files via UPnP access to /var/IGD/."
      }, {
        "lang" : "es",
        "value" : "El firmware de Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los usuarios locales (por ejemplo, usuarios que tienen acceso de comando como consecuencia de la explotación del CVE-2017-9479) para leer archivos arbitrarios por medio del acceso UPnP al archivo  /var/IGD/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-23.upnp-directory-write.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-23.upnp-directory-write.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain unintended access to the Network Processor (NP) 169.254/16 IP network by adding a routing-table entry that specifies the LAN IP address as the router for that network."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los atacantes remotos obtener un acceso involuntario a la red IP 169.254/16 del Procesador de Red (NP) mediante la incorporación una entrada en la tabla de enrutamiento que especifica la dirección IP de la LAN como el enrutador para esa red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-24.atom-ip-routing.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-24.atom-ip-routing.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon (through CVE-2017-9479 exploitation) and then establishing a TELNET session."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los atacantes remotos obtener acceso root al sistema Linux del Procesador de Red (NP) mediante la habilitación de un demonio TELNET (a través de la explotación del CVE-2017-9479) y luego estableciendo una sesión TELNET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-25.atom-telnet.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-25.atom-telnet.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users to obtain root access to the Application Processor (AP) Linux system via shell metacharacters in commands."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los usuarios Linux del Procesador de Red (NP) obtener acceso root al sistema Linux del Procesador de Aplicación (AP) por medio de metacaracteres shell en los comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-26.arbitrary-command-execution.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-26.arbitrary-command-execution.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic calculations."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST) y DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST) de Cisco, permite a los atacantes remotos detectar una dirección MAC CM mediante el espiado del tráfico de Wi Fi y el desarrollo de cálculos aritméticos sencillos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-27.ipv6-cm-mac-leak.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-27.ipv6-cm-mac-leak.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by leveraging the device's operation in UI dev mode."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los atacantes remotos escribir datos arbitrarios en un nombre de ruta conocida /var/tmp/sess_* mediante el aprovechamiento de la operación del dispositivo en modo dev de la interfaz de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-28.session-cookie-write.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-28.session-cookie-write.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to compute password-of-the-day values via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST), permite a los atacantes remotos calcular los valores de contraseña del día por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-29.password-of-the-day.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-29.password-of-the-day.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST) y DPC3941T (versión de firmware DPC3941_2.5s3_PROD_sey) de Cisco, permite a los atacantes remotos detectar una dirección IP IPv6 de la WAN aprovechando el conocimiento de la dirección MAC CM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3941t_firmware:dpc3941_2.5s3_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C5B524-7AF3-4171-8D5F-8AE80C7EA925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3941t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053BE8F7-5FFA-4021-B18C-651F0546A04B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-30.wan0-ipv6-cm-mac.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-30.wan0-ipv6-cm-mac.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST) y DPC3941T (versión de firmware DPC3941_2.5s3_PROD_sey) de Cisco, permite que los atacantes remotos accedan a la interfaz de usuario web estableciendo una sesión para la dirección IPv6 de la WAN wan0 y luego ingresando credenciales codificadas no especificadas. Esta interfaz wan0 no se puede acceder a desde la Internet pública."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3941t_firmware:dpc3941_2.5s3_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C5B524-7AF3-4171-8D5F-8AE80C7EA925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3941t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053BE8F7-5FFA-4021-B18C-651F0546A04B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939B (versión de firmware dpc3939b-v303r204217-150321a-CMCST), permite cambios en la configuración por medio de un ataque de tipo CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66771E5F-70F1-409D-92EE-D30BF402F8FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600BCE42-4D69-42EB-AB79-2893A0D4D5C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2CACD9-23A9-4E24-A1C5-A09B99874EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70716B6-6002-457E-8414-297402EDCC74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Arris TG1682G (eMTA & DOCSIS versión 10.0.132.SIP.PC20.CT, versión de software TG1682_2.2p7s2_PROD_sey), permite cambios de configuración por medio de un ataque de tipo CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66771E5F-70F1-409D-92EE-D30BF402F8FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600BCE42-4D69-42EB-AB79-2893A0D4D5C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arris:tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B612C6-FE05-4765-8515-7A5B9F86A2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arris:tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5051E8-4786-4AE6-BC41-27C33C4B4568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not set the secure flag for cookies in an https session to an administration application, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (versión de firmware dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (versión de firmware DPC3941_2.5s3_PROD_sey); y Arris TG1682G (eMTA & DOCSIS versión 10.0.132.SIP.PC20.CT, versión de software TG1682_2.2p7s2_PROD_sey), no establecen la flag secure para las cookies en una sesión https para una aplicación de administración, lo que hace más fácil para atacantes remotos capturar cookies interceptando su transmisión dentro de una sesión http."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66771E5F-70F1-409D-92EE-D30BF402F8FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600BCE42-4D69-42EB-AB79-2893A0D4D5C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3941t_firmware:dpc3941_2.5s3_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C5B524-7AF3-4171-8D5F-8AE80C7EA925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3941t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053BE8F7-5FFA-4021-B18C-651F0546A04B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2CACD9-23A9-4E24-A1C5-A09B99874EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70716B6-6002-457E-8414-297402EDCC74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not include the HTTPOnly flag in a Set-Cookie header for administration applications, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (versión de firmware dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (versión de firmware DPC3941_2.5s3_PROD_sey); y Arris TG1682G (versión 10.0.132.SIP.PC20.CT de eMTA y DOCSIS, versión de software TG1682_2.2p7s2_PROD_sey), no incluye la flag HTTPOnly en el encabezado Set-Cookie para aplicaciones de administración, lo que hace que sea más fácil para los atacantes remotos obtener potencialmente información confidencial mediante un script de acceso a las cookies."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66771E5F-70F1-409D-92EE-D30BF402F8FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600BCE42-4D69-42EB-AB79-2893A0D4D5C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3941t_firmware:dpc3941_2.5s3_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C5B524-7AF3-4171-8D5F-8AE80C7EA925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3941t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053BE8F7-5FFA-4021-B18C-651F0546A04B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2CACD9-23A9-4E24-A1C5-A09B99874EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70716B6-6002-457E-8414-297402EDCC74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing attacks (between an RF4CE remote and a set-top box) by repeatedly transmitting the same pairing code."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey), permite a los atacantes remotos conducir ataques con éxito de emparejamiento forzado (entre un control remoto RF4CE y un decodificador) mediante la transmisión repetida del mismo código de emparejamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089E31F-163E-4A03-9E36-A6C0D7E1E2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey), permite a los atacantes remotos habilitar un Inspector Web Remoto que es accesible desde la Internet pública."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:motorola:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8281B6-AD0F-4665-AB01-EED113CF62FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-38.remote-web-inspector.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-38.remote-web-inspector.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing \"EXIT, Down, Down, 2\" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey), permite a los atacantes físicamente cercanos leer archivos arbitrarios presionando \"EXIT, Down, Down, 2\" en un control remoto RF4CE para llegar a la pantalla de diagnóstico y luego activar un script del Inspector Web Remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:motorola:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8281B6-AD0F-4665-AB01-EED113CF62FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey), permite a los atacantes físicamente cercanos acceder a un servidor SNMP conectando un cable al puerto Ethernet y luego establecer la comunicación con la dirección IPv6 local del enlace del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089E31F-163E-4A03-9E36-A6C0D7E1E2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-40.ethernet-snmp.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-40.ethernet-snmp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey), permite a los atacantes físicamente próximos ejecutar comandos arbitrarios como root al desplegar el menú de diagnósticos en el decodificador y luego publicarlos en una ruta del Inspector Web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089E31F-163E-4A03-9E36-A6C0D7E1E2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey) y Xfinity XR11-20 Voice Remote, permite a los usuarios locales cargar imágenes de firmware arbitrarias en un XR11 aprovechando el acceso root. En otras palabras, no existe un mecanismo de protección que incluya firmas digitales para el firmware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:motorola:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8281B6-AD0F-4665-AB01-EED113CF62FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comcast:xfinity_xr11-20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C26C5A3-4C6C-4381-B28E-E71A27B20455"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comcast:xfinity_xr11-20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC523DA-A4A5-4CFA-BE62-73008627037D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows remote attackers to execute arbitrary code via a specific (but unstated) exposed service. NOTE: the scope of this CVE does NOT include the concept of \"Unnecessary Services\" in general; the scope is only a single service that is unnecessarily exposed, leading to remote code execution. The details of that service might be disclosed at a later date."
      }, {
        "lang" : "es",
        "value" : "El firmware Comcast en los dispositivos Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (versión de firmware dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (versión de firmware dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (versión de firmware DPC3941_2.5s3_PROD_sey); y Arris TG1682G (eMTA & DOCSIS versión 10.0.132.SIP.PC20.CT, versión de software TG1682_2.2p7s2_PROD_sey), permiten a los atacantes remotos ejecutar código arbitrario por medio de un servicio expuesto específico (pero no declarado). NOTA: el alcance de este CVE NO incluye el concepto de \"Unnecessary Services\" en general; el alcance es solo un servicio que se expone innecesariamente, lo que conlleva a la ejecución de código remota. Los detalles de ese servicio pueden ser divulgados en una fecha posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421733-160420a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1B99C-3219-4AED-85CE-18B979634B08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C881B07A-9652-465E-A804-1B5ED959E1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66771E5F-70F1-409D-92EE-D30BF402F8FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3939b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600BCE42-4D69-42EB-AB79-2893A0D4D5C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:dpc3941t_firmware:dpc3941_2.5s3_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C5B524-7AF3-4171-8D5F-8AE80C7EA925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:dpc3941t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053BE8F7-5FFA-4021-B18C-651F0546A04B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2CACD9-23A9-4E24-A1C5-A09B99874EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70716B6-6002-457E-8414-297402EDCC74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-32.unnecessary-services.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-32.unnecessary-services.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T03:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame."
      }, {
        "lang" : "es",
        "value" : "El firmware Time Warner en dispositivos Technicolor TC8717T, establece la frase de contraseña de Wi-Fi por defecto en una combinación de SSID y BSSID, lo que facilita a los atacantes remotos obtener acceso a la red mediante la lectura de una trama beacon."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:spectrum:tc8717t_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB6B376-FE55-47D0-929E-3AB8B8E43677"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:spectrum:tc8717t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B92D95A-5B01-4F23-882B-335A2F1EA50A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-21.default-wifi-credentials.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-21.default-wifi-credentials.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file."
      }, {
        "lang" : "es",
        "value" : "La función put_chars en el archivo html_r.c en Twibright Links versión 2.14, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer) por medio de un archivo HTML creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twibright:links:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358F0722-371B-43F7-9038-E61FE5F73BC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/76",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted jpg file."
      }, {
        "lang" : "es",
        "value" : "La función ExifJpegHUFFTable::deriveTable en el archivo ExifHuffmanTable.cpp en OpenExif versión 2.1.4, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo jpg creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexif_project:openexif:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA1405A-7E62-4378-807A-E2AF9F34FB64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file."
      }, {
        "lang" : "es",
        "value" : "La función ExifImageFile::readDQT en el archivo ExifImageFileRead.cpp en OpenExif versión 2.1.4, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo jpg creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexif_project:openexif:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA1405A-7E62-4378-807A-E2AF9F34FB64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file."
      }, {
        "lang" : "es",
        "value" : "La función ExifImageFile::readDHT en el archivo ExifImageFileRead.cpp en OpenExif versión 2.1.4, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer en la región heap de la memoria y bloqueo de aplicación) por medio de un archivo jpg creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexif_project:openexif:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA1405A-7E62-4378-807A-E2AF9F34FB64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file."
      }, {
        "lang" : "es",
        "value" : "La función ExifImageFile::readImage en el archivo ExifImageFileRead.cpp en OpenExif versión 2.1.4, permite a los atacantes remotos causar una denegación de servicio (bucle infinito y consumo de CPU) por medio de un archivo jpg creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexif_project:openexif:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA1405A-7E62-4378-807A-E2AF9F34FB64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/openexif/bugs/18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file."
      }, {
        "lang" : "es",
        "value" : "La función chk_mem_access en el archivo cpu/nes6502/nes6502.c en la biblioteca libnosefart.a en Nosefart versión 2.9-mls, permite a los atacantes remotos causar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) por medio de un archivo nsf creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nosefart_project:nosefart:2.9-mls:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB980F8B-C132-4B2F-AB74-5C03517CF2DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/78",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted avi file."
      }, {
        "lang" : "es",
        "value" : "La función DivFixppCore::avi_header_fix en el archivo DivFix++Core.cpp en DivFix++ versión 0.34, permite a los atacantes remotos causar una denegación de servicio (escritura de memoria no válida y bloqueo de aplicación) por medio de un archivo avi creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:divfix:divfix\\+\\+:0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21588E22-09D6-4106-BC26-2AFDFEACF94B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/79",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42396/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42396/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función wav_open en el archivo oggenc/audio.c en Xiph.Org vorbis-tools versión 1.4.0, permite a los atacantes remotos causar una denegación de servicio (error de asignación de memoria) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiph:vorbis-tools:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA7E477-3D44-407A-80EE-B6E74EE1F0A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/80",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42397/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42397/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función startread en el archivo wav.c en Sound eXchange (SoX) versión14.4.2, permite a los atacantes remotos causar una denegación de servicio (error de división por cero y bloqueo de aplicación) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/81",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42398/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42398/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:00.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file."
      }, {
        "lang" : "es",
        "value" : "La función vorbis_analysis_wrote en la biblioteca lib/block.c en Xiph.Org libvorbis versión 1.3.5, permite a los atacantes remotos causar una denegación de servicio (OOM) por medio de un archivo wav creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28797143-02BB-4A25-BA9D-E5220F13011F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/82",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42399/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42399/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file."
      }, {
        "lang" : "es",
        "value" : "La función read_samples en el archivo hcom.c en Sound eXchange (SoX) versión 14.4.2, permite a los atacantes remotos causar una denegación de servicio (lectura de memoria inválida y bloqueo de aplicación) por medio de un archivo hcom creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/81",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/03/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/04/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/05/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/06/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42398/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/04/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42398/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conversion to a wav file."
      }, {
        "lang" : "es",
        "value" : "La función wavwritehdr en el archivo wav.c en Sound eXchange (SoX)  versión 14.4.2 permite a los atacantes remotos causar una denegación de servicio (error de división por cero y bloqueo de aplicación) por medio de un archivo snd creado, durante la conversión a un archivo wav."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/81",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42398/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42398/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option."
      }, {
        "lang" : "es",
        "value" : "La función insert_note_steps en el archivo readmidi.c en TiMidity++ versión 2.14.0, permite a los atacantes remotos causar una denegación de servicio (error de división por cero y bloqueo de aplicación) por medio de un archivo mid creado. NOTA: un bloqueo puede ser relevante cuando se utiliza la opción --background."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timidity\\+\\+_project:timidity\\+\\+:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1CA24-D1AA-49EF-9715-672F07A78D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/83",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a setuid-root installation."
      }, {
        "lang" : "es",
        "value" : "La función resample_gauss en el archivo resample.c en TiMidity++ versión 2.14.0, permite a los atacantes remotos causar una denegación de servicio (exceso de lectura de búfer en la región heap de la memoria) por medio de un archivo mid creado. NOTA: un bloqueo puede ser relevante cuando se utiliza la opción --background. NOTA: la documentación README.alsaseq de TiMidity++ sugiere una instalación de setuid-root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timidity\\+\\+_project:timidity\\+\\+:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1CA24-D1AA-49EF-9715-672F07A78D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/83",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file."
      }, {
        "lang" : "es",
        "value" : "La función _tokenize_matrix en el archivo audio_out.c en Xiph.Org libao versión 1.2.0, permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria) por medio de un archivo MP3 creado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiph:libao:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDC057F-2A64-4E22-A550-DAB2392335D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/84",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42400/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42400/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option."
      }, {
        "lang" : "es",
        "value" : "La función play_midi en el archivo playmidi.c en TiMidity++ versión 2.14.0, permite a los atacantes remotos causar una denegación de servicio (bucle grande y consumo de CPU) por medio de un archivo mid creado. NOTA: El consumo de CPU puede ser relevante cuando se utiliza la opción --background."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timidity\\+\\+_project:timidity\\+\\+:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1CA24-D1AA-49EF-9715-672F07A78D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/83",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file."
      }, {
        "lang" : "es",
        "value" : "La función id3_ucs4_length en el archivo ucs4.c en libid3tag versión 0.15.1b, permite a los atacantes remotos causar una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) por medio de un archivo mp3 creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libid3tag_project:libid3tag:0.15.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB7DF5-C4CE-4865-B9B2-5C5097F24F46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/85",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file."
      }, {
        "lang" : "es",
        "value" : "La función id3_field_parse en el archivo field.c en libid3tag versión 0.15.1b, permite a los atacantes remotos causar una denegación de servicio (OOM) por medio de un archivo MP3 creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libid3tag_project:libid3tag:0.15.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB7DF5-C4CE-4865-B9B2-5C5097F24F46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/85",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.597",
      "lastModified" : "2023-11-07T02:38:19.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T13:29:01.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. An attacker with knowledge of the hard-coded credential and the ability to communicate directly with the Mirth Connect management console may be able to intercept sensitive patient information. The admin account password is hard-coded as $K8t1ng throughout the application, and is the same across all installations. Customers do not have the option to change the Mirth Connect admin account password. The Mirth Connect admin account is created during the Connex install. The plaintext account password is hard-coded multiple times in the Connex install and update scripts."
      }, {
        "lang" : "es",
        "value" : "MEDHOST Connex contiene una credencial de administrador Mirth Connect codificada que es utilizada para el acceso de administración de Mirth Connect del cliente. Un atacante con conocimiento de la credencial codificada y la capacidad de comunicarse directamente con la consola de administración de Mirth Connect puede ser capaz de interceptar información confidencial del paciente. La contraseña de la cuenta de administrador está codificada como $K8t1ng en toda la aplicación y es la misma en todas las instalaciones. Los clientes no tienen la opción de cambiar la contraseña de la cuenta de administrador de Mirth Connect. La cuenta de administrador de Mirth Connect se crea durante la instalación de Connex. La contraseña de la cuenta de texto plano está codificada varias veces en los scripts de instalación y actualización de Connex."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medhost:connex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2A54E8-3352-4B93-AE8E-CDBA1D022B34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/75",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100086",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T14:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte allocation. The _srvLnaConnectMP1 function is affected."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en la región heap de la memoria en Actian Pervasive PSQL versión 12.10 y Zen versión 13 permite a los atacantes remotos ejecutar código arbitrario por medio de un tráfico creado hacia el puerto TCP 1583. El desbordamiento ocurre después del intercambio de claves de cifrado de Cliente-Servidor. El problema resulta en un subdesbordamiento de enteros que conlleva a una asignación de cero bytes. La función _srvLnaConnectMP1 se ve afectada"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actian:pervasive_psql:12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CB9990-A786-4CB5-9DD3-403ACBD95E8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actian:zen:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110F9BA5-9556-4A2E-9A62-27F6070210C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://supportservices.actian.com/support-services/security-center#announcements",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/2924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/SecuriTeam_SSD/status/815567538318954496",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://supportservices.actian.com/support-services/security-center#announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/SecuriTeam_SSD/status/815567538318954496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T17:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic."
      }, {
        "lang" : "es",
        "value" : "Un fallo de lectura fuera de límites relacionado con la función assess_packet en el archivo eapmd5pass.c:134, se encontró en la manera en que el eapmd5pass versión 1.4 manejó el procesamiento de los paquetes de red. Un atacante remoto podría usar potencialmente este fallo para bloquear el proceso de eapmd5pass bajo ciertas circunstancias mediante la generación de un tráfico de red especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eapmd5pass_project:eapmd5pass:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622671BD-2F33-4F6A-B47C-6A09FE428C09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/31/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/31/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T17:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic."
      }, {
        "lang" : "es",
        "value" : "Un fallo de lectura fuera de límites relacionado con la función assess_packet en el archivo eapmd5pass.c:211 se encontró en la manera en que el eapmd5pass versión 1.4 manejó el procesamiento de los paquetes de red. Un atacante remoto podría usar potencialmente este fallo para bloquear el proceso de eapmd5pass bajo ciertas circunstancias mediante la generación de un tráfico de red especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eapmd5pass_project:eapmd5pass:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622671BD-2F33-4F6A-B47C-6A09FE428C09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/31/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/31/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de comprobación de longitud (que conlleva a una lectura y escritura fuera de límites) en la manera en que eapmd5pass versión 1.4 manejó el tráfico de red en la función extract_eapusername. Un atacante remoto podría usar potencialmente este fallo para bloquear el proceso eapmd5pass mediante la generación de un tráfico de red especialmente creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eapmd5pass_project:eapmd5pass:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622671BD-2F33-4F6A-B47C-6A09FE428C09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/07/31/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/07/31/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T17:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data, as demonstrated by uploading as an image within the description text area."
      }, {
        "lang" : "es",
        "value" : "El archivo uploadImage.php en ProjeQtOr anterior a la versión 6.3.2, permite a los usuarios autenticados remotos ejecutar código PHP arbitrario mediante la carga de un archivo .php compuesto de datos de imagen concatenados y datos de script, como es demostrado por la carga de una imagen dentro del área de texto de descripción."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projeqtor:projeqtor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1",
            "matchCriteriaId" : "C3AEAB52-B926-4A90-9692-FF6756F4D466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://track.projeqtor.org/view/main.php?directAccess=true&objectClass=Ticket&objectId=2884",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://track.projeqtor.org/view/main.php?directAccess=true&objectClass=Ticket&objectId=2884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1227",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager podría permitir a un usuario no autorizado consumir todos los recursos y bloquear el sistema. ID de IBM X-Force: 123906."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AD0AAF-1D86-44B4-92DB-3E4A3C38DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003222",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123906",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1303",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125457."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal y Web Content Manager 7.0, 8.0, 8.5 y 9.0 son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite a los usuarios que incrusten un código arbitrario JavaScript en la interfaz web de usuario, alterando la funcionalidad y pudiendo provocar que se revelen credenciales en una sesión en la que se confía. IBM X-Force ID: 125457."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E2D77-FE89-4F4E-9C06-861BB3385B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE1E2EF-A079-4A67-AA50-0712D2E330F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97CDB5F-2EA4-41E8-857B-5D76004C60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC1C53-61B8-41EC-B99D-1100D29F3992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004979",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100007",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125457",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1332",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234."
      }, {
        "lang" : "es",
        "value" : "IBM iNotes versiones 8.5 y 9.0, es vulnerable a un ataque de tipo cross-site-scripting (XSS). Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, lo que altera la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 126234."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE6AAC-7B25-40EA-9D25-128D743F18A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B097CA3C-2ABA-489E-86C1-EEF891AF7094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B100002-E6E8-4FB8-A1A8-02BFBB37A126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975E8316-D4C3-40B7-8E57-E871D0327271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005233",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100028",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126234",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1370",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Reporting Service (JRS) versiones 5.0 y 6.0, podría revelar información confidencial, incluyendo las credenciales de usuario, por medio de un mensaje de error de la página de configuración del administrador de Report Builder. ID de IBM X-Force: 126863."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D226029-A37F-486C-9DCD-1921671F242D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83152595-8909-4AA4-A7D1-2E113A197B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103F9E24-E11F-4BAC-8EDB-86D332B9EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC8D80-8974-41F7-8225-474A9814ABD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3BEA54-9927-4117-8EB8-0D87A42198C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC88614B-EEB1-41C5-B28A-4E3E35008855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005868",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99954",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126863",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1386",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect versión 5.0.0.0, podría permitir a un usuario omitir las restricciones de la política y crear contraseñas no conformes que podrían ser interceptadas y descifradas utilizando técnicas de tipo man in the middle. ID de IBM X-Force: 127160."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43F8D4-A60E-4C56-B868-8616958A0B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A4F3B4-A3D8-4281-BBB1-8B95297657F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049722A-338F-49FA-A9B2-2A432F04D2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12F86C-FBDF-4231-B4EA-4279FC730088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBC9AEC-CD8B-4F2A-99A7-469B93107B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB03CE4-C3EE-41E9-9321-9AB9829FDB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B9AC88-C53D-4810-B21E-7A836524859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61864755-C7B6-416C-9D3E-334AB3D94825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB9030-50A4-4B9B-8457-9DB9E13B3211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43992823-2626-4056-A26A-4B2E53336A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E03654-F4C3-4210-8A0E-831764797418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C252D53-04CC-4E1F-9392-C6E9A6C944B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E796A38-E153-4846-AEEA-A1CF08F93687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF45935-84D6-4DD0-AF5D-FE93160ECE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DD689E-C1FE-4D07-B46A-161E6D5917FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA2CE29-04AD-459B-9E97-0B1F858D7A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C4BCF2-7A4F-401B-84A2-04ECB91EE17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40F2C7F-7AC6-4D44-966F-3B9DA714BD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2A5737-1E5D-417F-AD8C-A564DC9C496B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF0F3B5-AB1F-4262-BDC9-1DB6C100F61C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_management:4.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7535401D-74A1-4656-98B6-733DEC98D274"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004981",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100008",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127160",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1460",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379."
      }, {
        "lang" : "es",
        "value" : "IBM i OSPF versiones 6.1, 7.1, 7.2 y 7.3 es vulnerable cuando un router malicioso suplanta su origen. Las tablas de ruteo se ven afectadas por una falta de LSA, que puede conllevar a la pérdida de conectividad. ID de IBM X-Force: 128379."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912719C3-463E-4E8E-9FC9-23BEF3942A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F0F975-DD09-4851-A536-1B8484715FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD871157-2BB3-4641-B84E-3EA13D24D35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A49E8C5-7967-42AE-A787-C533D24A63D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=nas8N1022191",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128379",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=nas8N1022191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1496",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-07-31T21:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128694."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition versión 5.2.x es vulnerable a ataque de tipo cross-site-scripting (XSS). Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Web UI, lo que altera la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión de confianza. ID de IBM X-Force: 128694."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFED58A-46D2-40F1-9C20-DC7DC21E32E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF848B29-F381-43DF-B2C9-052AAE8AE732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC62E84-ED41-42CD-AA65-CF3D97BC2612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF65201D-8980-450A-A542-3B5473A6F374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22465F0-BADF-4993-B80B-378AC623D655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CDD0B7-CE7F-4A4E-A218-F0CBF57BAAED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006175",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128694",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T23:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 no poseen ninguna medida de seguridad contra las vulnerabilidades de tipo Cross-Site Request Forgery (CSRF), tal y como lo demuestra una petición goform/BasicSettings para inhabilitar el filtrado de puertos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:techroutes:tr_1803-3g_firmware:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2858192-58AB-4D91-A70A-F35ED5314F4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:techroutes:tr_1803-3g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD66AE9-2AE3-4E4A-B123-D510C25C3BC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery_31.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery_31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T23:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an e-mail address setting."
      }, {
        "lang" : "es",
        "value" : "services/system_io/actionprocessor/System.rails en ConnectWise Manage 2017.5 es vulnerable a Cross-Site Request Forgery (CSRF), tal y como se demuestra cuando se cambia la configuración de una dirección de correo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:manage:2017.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7D675E-3896-4360-9149-AF29DD568AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-CSRF-CVE-2017-11726.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-CSRF-CVE-2017-11726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-07-31T23:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS."
      }, {
        "lang" : "es",
        "value" : "services/system_io/actionprocessor/Contact.rails en ConnectWise Manage 2017.5 permite la ejecución de código JavaScript arbitrario del lado del cliente (involucrando un campo ContactCommon) sobre las víctimas que pulsen en un enlace manipulado. Esto también se conoce como Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:manage:2017.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7D675E-3896-4360-9149-AF29DD568AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-XSS-CVE-2017-11727.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-XSS-CVE-2017-11727.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T05:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name."
      }, {
        "lang" : "es",
        "value" : "La función csv_log_html en library/edihistory/edih_csv_inc.php en OpenEMR 5.0.0 y anteriores permite a los atacantes evadir las restricciones de acceso mediante un nombre manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBA5191-1CC6-45DE-920C-7EB87822E303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/b8963a5ca483211ed8de71f18227a0e66a2582ad",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/b8963a5ca483211ed8de71f18227a0e66a2582ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T05:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter."
      }, {
        "lang" : "es",
        "value" : "spikekill.php en Cacti en versiones anteriores a la 1.1.16 puede permitir a los atacantes remotos ejecutar código arbitrario mediante el parámetro avgnan, outlier-start o outlier-end."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.15",
            "matchCriteriaId" : "A36ACCD5-4309-4B3A-AC08-578B0B95F53E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cacti.net/release_notes.php?version=1.1.16",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/877",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cacti.net/release_notes.php?version=1.1.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T05:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable. NOTE: this vulnerability exists because of an incomplete fix (lack of the htmlspecialchars ENT_QUOTES flag) for CVE-2017-11163."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en aggregate_graphs.php en Cacti en versiones anteriores a la 1.1.16 permite que los usuarios remotos autenticados inyecten scripts web arbitrarios o HTML mediante cabeceras de referenciadores HTTP especialmente creadas en relación con la variable $cancel_url. NOTA: esta vulnerabilidad existe porque hay una parche incompleto (falta el flag htmlspecialchars ENT_QUOTES) para CVE-2017-11163."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.15",
            "matchCriteriaId" : "A36ACCD5-4309-4B3A-AC08-578B0B95F53E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cacti.net/release_notes.php?version=1.1.16",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/877",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cacti.net/release_notes.php?version=1.1.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T05:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c."
      }, {
        "lang" : "es",
        "value" : "Potrace 1.14 tiene una vulnerabilidad de tipo heap buffer over-read en la función interpolate_cubic en mkbitmap.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:potrace_project:potrace:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1161802F-EAB3-4BB2-A6C7-064A3DA0EFB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/potrace/heap-buffer-overflow-mkbitmap",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/potrace/heap-buffer-overflow-mkbitmap",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T05:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action."
      }, {
        "lang" : "es",
        "value" : "El plugin Event List en su versión 0.7.9 para WordPress tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el parámetro slug array para wp-admin/admin.php en una acción el_admin_categories delete_bulk."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:event_list_project:event_list:0.7.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4DAE558E-041D-4697-BBB5-CA26B0C5A395"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T05:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens."
      }, {
        "lang" : "es",
        "value" : "El plugin Easy Testimonials en su versión 3.0.4 para WordPress tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en include/settings/display.options.php, tal y como lo demuestran las pantallas de Default Testimonials Width, View More Testimonials Link y Testimonial Excerpt Options."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goldplugins:easy_testimonials:3.0.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B8005D34-8445-46DC-B415-3CC5547CE6F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corruption seen in a crash in the mad_decoder_run function in decoder.c in libmad) via a crafted MP3 file."
      }, {
        "lang" : "es",
        "value" : "mpg321.c en mpg321 0.3.2-1 no gestiona correctamente la memoria para emplear con libmad 0.15.1b. Esto permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria vista en un cierre inesperado en la función mad_decoder_run en decoder.c en libmad) mediante un archivo MP3 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underbit:mad_libmad:0.15.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077DFA99-A61D-4FDA-BAB2-BE680A798DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/94",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42409/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42409/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android. El almacén de claves está bloqueado con una contraseña embebida. Por ello, cualquiera que tenga acceso al almacén de claves podrá leer el contenido, como por ejemplo, la clave privada del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android, en la versión 0.0.80w para web, y 0.0.86 para ordenador. El protocolo del producto únicamente trata de asegurar la confidencialidad. No se realizan verificaciones de integridad ni autenticidad en todo el protocolo. Por ello, los atacantes que realicen Man-in-the-Middle (MitM) pueden llevar a cabo ataques de replay."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*",
            "versionEndIncluding" : "0.0.80w",
            "matchCriteriaId" : "7E553895-3705-4809-99B5-D5E950740406"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*",
            "versionEndIncluding" : "0.0.86w",
            "matchCriteriaId" : "1B54E116-A0F8-4EF9-BC5B-A998B6A5572B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. For authentication, the user password is hashed directly with SHA-512 without a salt or another key-derivation mechanism to enable a secure secret for authentication. Moreover, only the first 32 bytes of the hash are used. This allows for easy dictionary and rainbow-table attacks if an attacker has access to the password hash."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android, en la versión 0.0.80w para web, y 0.0.86 para ordenador. Para la autenticación, la contraseña del usuario se crea con un hash SHA-512 sin sal ni ningún otro mecanismo de derivación de clave para establecer un secreto seguro. Además, solo se utilizan los 32 primeros bytes del hash. Esto facilita los ataques de diccionario y de tablas rainbow si un atacante tiene acceso al hash de la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*",
            "versionEndIncluding" : "0.0.80w",
            "matchCriteriaId" : "7E553895-3705-4809-99B5-D5E950740406"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*",
            "versionEndIncluding" : "0.0.86w",
            "matchCriteriaId" : "1B54E116-A0F8-4EF9-BC5B-A998B6A5572B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice it."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en las versiones anteriores a 1.5.18 de heinekingmedia StashCat para Android. No se implementa la fijación de ningún certificado, por lo que el atacante podría enviar un certificado para el backend y la aplicación no se daría cuenta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heinekingmedia:stashcat:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.5.17",
            "matchCriteriaId" : "A1975BB7-071A-4C49-BCD1-DBE4A939EC01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. To encrypt messages, AES in CBC mode is used with a pseudo-random secret. This secret and the IV are generated with math.random() in previous versions and with CryptoJS.lib.WordArray.random() in newer versions, which uses math.random() internally. This is not cryptographically strong."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android, en la versión 0.0.80w para web, y 0.0.86 para ordenador. Para cifrar mensajes, se utiliza AES en modo CBC con un secreto pseudoaleatorio. Este secreto, así como el vector de inicialización (IV), se generaban con math.random() en versiones anteriores y con CryptoJS.lib.WordArray.random() en versiones nuevas que usan math.random() de forma interna. Esta no es una práctica segura a nivel de criptografía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*",
            "versionEndIncluding" : "0.0.80w",
            "matchCriteriaId" : "7E553895-3705-4809-99B5-D5E950740406"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*",
            "versionEndIncluding" : "0.0.86w",
            "matchCriteriaId" : "1B54E116-A0F8-4EF9-BC5B-A998B6A5572B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login credentials are written into a log file on the device. Hence, an attacker with access to the logs can read them."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android. Las credenciales de acceso están escritas en un archivo de registro en el dispositivo. Por lo tanto, un atacante con acceso a los archivos de registro podría leer estas credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the device ID. This causes a denial of service. This might be interpreted as a vulnerability in customer-controlled software, in the sense that the StashCat client side has no secure way to signal that it is ending a session and that data should be deleted."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android, en la versión 0.0.80w para web, y 0.0.86 para ordenador. Los mecanismos de cierre de sesión no piden autorización. Por ello, un atacante solo necesita saber el ID del dispositivo. Esto da lugar a una denegación de servicio. Se puede interpretar como una vulnerabilidad en software controlado por cliente; en el sentido de que el lado del cliente de StashCat no tiene una forma segura de indicar que se está cerrando una sesión y que la información se debería eliminar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*",
            "versionEndIncluding" : "0.0.80w",
            "matchCriteriaId" : "7E553895-3705-4809-99B5-D5E950740406"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*",
            "versionEndIncluding" : "0.0.86w",
            "matchCriteriaId" : "1B54E116-A0F8-4EF9-BC5B-A998B6A5572B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T14:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange a secret for symmetric encryption of messages. However, the private RSA key is not only stored on the client but transmitted to the backend, too. Moreover, the key to decrypt the private key is composed of the first 32 bytes of the SHA-512 hash of the user password. But this hash is stored on the backend, too. Therefore, everyone with access to the backend database can read the transmitted secret for symmetric encryption, hence can read the communication."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la versión 1.7.5 de heinekingmedia StashCat para Android, en la versión 0.0.80w para web, y 0.0.86 para ordenador. Se utiliza RSA para intercambiar un secreto para el cifrado simétrico de los mensajes. Sin embargo, la clave privada RSA no solo se almacena en el lado del cliente, sino que también se transmite al backend. Además, la clave necesaria para descifrar la clave privada está compuesta de los primeros 32 bytes del hash SHA-512 de la contraseña del usuario, pero este hash también está almacenado en el backend. Por ello, cualquier usuario que tenga acceso a la base de datos del backend puede leer el secreto que se transmite para el cifrado simétrico y, por lo tanto, puede leer la comunicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "97F04CBB-21CF-4DC2-9E98-70DF7B355308"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*",
            "versionEndIncluding" : "0.0.80w",
            "matchCriteriaId" : "7E553895-3705-4809-99B5-D5E950740406"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*",
            "versionEndIncluding" : "0.0.86w",
            "matchCriteriaId" : "1B54E116-A0F8-4EF9-BC5B-A998B6A5572B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11379",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-01T15:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1."
      }, {
        "lang" : "es",
        "value" : "Los archivos de copia de seguridad de base de datos y de configuración no se firman o validan en Trend Micro Deep Discovery Director 1.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_director:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABBB5E3-0B14-42F9-8BBE-E717D2A6315F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1117663",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11380",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-01T15:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1."
      }, {
        "lang" : "es",
        "value" : "Los archivos de copia de seguridad estaban cifrados con una contraseña estática en diferentes instalaciones, lo que sugiere que la misma contraseña se ha podido utilizar en todos los modelos de dispositivos virtuales de Trend Micro Deep Discovery Director 1.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_director:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABBB5E3-0B14-42F9-8BBE-E717D2A6315F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1117663",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11381",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-01T15:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en Trend Micro Deep Discovery Director 1.1 que permite que un atacante recupere cuentas que pueden acceder a la consola de preconfiguración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_director:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABBB5E3-0B14-42F9-8BBE-E717D2A6315F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1117663",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T15:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized before being output, allowing remote attackers to inject arbitrary JavaScript code, as demonstrated by the $f_database, $f_db_username, and $f_admin_username variables. This is mitigated by the fact that the admin/ folder should be deleted after installation, and also prevented by CSP."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo Cross-Site Scripting (XSS) en admin/install.php en MantisBT en versiones anteriores a la 1.3.12 y todas las 2.X anteriores a la 2.5.2. Algunas variables que están bajo el control de usuarios en el script de instalación de MantisBT no están sanitizadas correctamente antes de que se envíen, permitiendo a los atacantes remotos inyectar código JavaScript arbitrario, tal y como lo demuestran las variables $f_database, $f_db_username, y $f_admin_username. Esto se mitiga con el hecho de que se debería borrar la carpeta admin/ después de la instalación y se evita con una política de seguridad de contenido (CSP)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.12",
            "matchCriteriaId" : "1287A4F6-7331-4B5E-8105-8F66307BC08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.2",
            "matchCriteriaId" : "17391E26-3429-45B8-A8BC-7C95F82F9620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039030",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/17f9b94f031ba93ae2a727bca0e68458ecd08fb0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/c73ae3d3d4dd4681489a9e697e8ade785e27cba5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=23146",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/17f9b94f031ba93ae2a727bca0e68458ecd08fb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/c73ae3d3d4dd4681489a9e697e8ade785e27cba5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=23146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T15:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo Cross-Site Scripting (XSS) en manage_user_page.php en MantisBT en sus versiones 2.X anteriores a la 2.5.2. El campo \"filter\" no se sanitiza antes de que se renderice en la página Manage User, permitiendo a los atacantes remotos ejecutar código JavaScript arbitrario si se deshabilita la política de seguridad de contenido (CSP)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6AF670-28C3-4D7E-9EB4-E0B366CE818E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021CC8F4-B310-4DBF-9D50-B8A357158E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E7205-12E1-4C57-A120-91C4C0760305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262EC0CC-0716-4AED-9255-13288A297879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2550F1FD-5104-4BAA-80F6-C6202D7326B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDE5FC-B891-4ACA-BCAB-83EB9D49C91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F89D994-7F93-4839-8A57-F4CD633576E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2154CE53-2DED-4023-96D5-515468E226B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF4779C-8E14-4CB1-BCB4-80F4C5020629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C79C70-F6BE-485D-952A-44E5E9F16D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5AE145-E1B4-40EF-A3B8-A13C114D3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77FD43E-A573-408F-A566-0959DAF442AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB5C9D9-8EC1-46C7-BB09-84ED20E6E61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9258FCA1-6948-4DFE-BE50-5A39B5A64120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4582B6DC-A625-41B2-ABF8-CF3BCF90A590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F06B9BB-77DF-4185-A496-88DA8DABDDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE637AB4-0E47-4063-8CFF-F163A27D7F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75EE73EE-2A07-48BE-B7B9-C21643EC25B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039030",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/9b5b71dadbeeeec27efea59f562ac5bd6d2673b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=23166",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/commit/9b5b71dadbeeeec27efea59f562ac5bd6d2673b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=23166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-01T16:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation."
      }, {
        "lang" : "es",
        "value" : "La herramienta de resolución de zonas stub de DNS en la librería GNU C, también conocida como glibc o libc6, en sus versiones anteriores a la 2.26 cuando el soporte EDNS está activado, solicitará respuestas UDP de gran tamaño de servidores de nombres, pudiendo simplificar los ataques de suplantación de DNS debido a una fragmentación de IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.25",
            "matchCriteriaId" : "9C3B907D-79AF-44AC-BD23-C369CD6AE173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://arxiv.org/pdf/1205.4011.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21361",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://arxiv.org/pdf/1205.4011.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4921",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-08-01T16:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server en su versión 6.5 anterior a la 6.5 U1 tiene un problema de carga insegura de librerías que ocurre porque se utiliza la variable LD_LIBRARY_PATH de una manera no segura. Si se explota con éxito esta vulnerabilidad, podría permitir a los usuarios host sin privilegios cargar una librería compartida que pueda provocar un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D97854C-DE5D-48B4-B5DB-C132E6D4B826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100006",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039013",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0013.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4922",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-08-01T16:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server en su versión 6.5 anterior a la 6.5 U1 tiene un problema de fuga de información puesto que el script de inicio del servicio utiliza directorios modificables por cualquier usuario para almacenar temporalmente información crítica. Si se explota con éxito esta vulnerabilidad, podría permitir que los usuarios host sin privilegios accedan a información crítica cuando el servicio se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D97854C-DE5D-48B4-B5DB-C132E6D4B826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100012",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039013",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0013.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4923",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-08-01T16:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server en su versión 6.5 anterior a la 6.5 U1 contiene una vulnerabilidad de fuga de información. Esta vulnerabilidad permite que se obtengan credenciales en texto plano cuando se utiliza la función de copia de seguridad de archivos de vCenter Server Appliance."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D97854C-DE5D-48B4-B5DB-C132E6D4B826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99997",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039013",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0013.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1500",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-01T18:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0. The vulnerable parameter is \"scope\"; if you set as its value a \"realm\" not defined in authenticationConfig.xml, you get an HTTP 403 Forbidden response and the value will be reflected in the body of the HTTP response. By setting it to arbitrary JavaScript code it is possible to modify the flow of the authorization function, potentially leading to credential disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Reflected Cross-Site Scripting (XSS) en la función de autorización expuesta por la API web RESTful de IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, y 8.0. El parámetro vulnerable es \"scope\". Si se le asigna como valor un \"realm\" no definido en authenticationConfig.xml, se obtendría una respuesta HTTP 403 Forbidden y el valor se mostraría en el cuerpo de la respuesta HTTP. Con un código JavaScript arbitrario, sería posible modificar el flujo de la función de autorización, pudiendo provocar que se revelen credenciales en una sesión de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:6.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C251EF2-D519-4CAD-961E-BC3C244E2180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422B50A-0F9D-412C-92EC-0D640E01F7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152FC3F6-FDE0-43E3-BB1B-7FDE50E3588B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BCA59D-888E-4E25-8C11-12FEAF0807BB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:worklight:6.1.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8C653FD2-1225-412C-BB28-6BF215299858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:worklight:6.2.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D346FD1F-5172-4B0C-B190-234F3731763D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000316",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129404",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8571",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-01T20:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka \"Microsoft Office Outlook Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1 y Outlook 2016, tal y como vienen en la paquetería de Microsoft Office, tienen una vulnerabilidad de omisión de características de seguridad por la manera en la que gestionan la información entrante. También se conoce como \"Vulnerabilidad de omisión de característica de seguridad de Microsoft Office Outlook\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99452",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039012",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8571",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8572",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-01T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information disclosure vulnerability due to the way that it discloses the contents of its memory, aka \"Microsoft Office Outlook Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1 y Outlook 2016, tal y como vienen en la paquetería de Microsoft Office, tienen una vulnerabilidad de divulgación de información por la manera en la que muestran los contenidos en sus memorias. También se conoce como \"Vulnerabilidad de divulgación de información de Microsoft Office Outlook\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99453",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039010",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8572",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8663",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-01T20:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code execution vulnerability due to the way Microsoft Outlook parses specially crafted email messages, aka \"Microsoft Office Outlook Memory Corruption Vulnerability\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1 y Outlook 2016, tal y como vienen en la paquetería de Microsoft Office, son vulnerables a la ejecución de código remoto por la forma en que Microsoft Outlook analiza los mensajes de email especialmente manipulados. Esto también se conoce como \"Vulnerabilidad de corrupción de memoria de Microsoft Office Outlook\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100004",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039011",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8663",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter."
      }, {
        "lang" : "es",
        "value" : "XOOPS Core 2.5.8 tiene una vulnerabilidad de omisión de redirección de URL en /modules/profile/index.php debido al filtro URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D99A65-CB2B-4285-B7F0-F2EC3A1EF84E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/XOOPS/XoopsCore25/issues/523",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/XOOPS/XoopsCore25/issues/523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php."
      }, {
        "lang" : "es",
        "value" : "XOOPS Core 2.5.8 tiene una vulnerabilidad de Cross-Site Scripting (XSS) en imagemanager.php por la ausencia de validación de tipo MIME en htdocs/class/uploader.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D99A65-CB2B-4285-B7F0-F2EC3A1EF84E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100094",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/XOOPS/XoopsCore25/issues/524",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/XOOPS/XoopsCore25/issues/524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadDCMImage function in coders\\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file."
      }, {
        "lang" : "es",
        "value" : "La función ReadDCMImage en coders\\dcm.c en ImageMagick 7.0.6-1 contiene un error en la propiedad signedness de un número entero que provoca un consumo de memoria excesivo mediante un archivo DCM manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/533",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, se detectó una vulnerabilidad de desbordamiento de búfer en la zona heap de la memoria en la función TNEFFillMapi en ytnef.c que permite a los atacantes provocar una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yeraze/ytnef/issues/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/ytnefheap-buffer-overflow-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/ytnefheap-buffer-overflow-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3667-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, se detectó una vulnerabilidad de lectura de memoria no válida en la función SwapDWord en ytnef.c que permite a los atacantes provocar una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yeraze/ytnef/issues/49",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/ytnefinvalid-memory-read-in-swapdword.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/ytnefinvalid-memory-read-in-swapdword.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En libquicktime 1.2.4, se detectó un error de asignación en la función quicktime_read_info en lqt_quicktime.c que permite a los atacantes provocar una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libquicktime/mailman/message/35888850/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libquicktime/mailman/message/35888850/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef 1.9.2, se detectó un error de asignación en la función TNEFFillMapi en ytnef.c que permite a los atacantes provocar una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D35B46-2DF2-4BBD-B8E9-E2015459EB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/51",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En libquicktime 1.2.4, se detectó un error de asignación en la función quicktime_read_ftyp en ftyp.c que permite a los atacantes provocar una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9F87AF-E0FA-46C8-8360-165FA982E93D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libquicktime/mailman/message/35888849/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libquicktime/mailman/message/35888849/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-item, video_update_order video-item, image_update_order list-item, tag_group_update_order list_item, category_products_update_order category-product-item, custom_fields_update_order field-item, categories_update_order category-item, subcategories_update_order subcategory-item, and tags_update_order tag-list-item."
      }, {
        "lang" : "es",
        "value" : "El plugin Etoile Ultimate Product Catalog en su versión 4.2.11 para WordPress tiene una vulnerabilidad de inyección SQL con las siguientes acciones POST de wp-admin/admin-ajax.php: catalogue_update_order list-item, video_update_order video-item, image_update_order list-item, tag_group_update_order list_item, category_products_update_order category-product-item, custom_fields_update_order field-item, categories_update_order category-item, subcategories_update_order subcategory-item y tags_update_order tag-list-item."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etoilewebdesign:ultimate_product_catalog:4.2.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A3B3A0A7-7E44-4BC6-91AD-999BE06291CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T05:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component."
      }, {
        "lang" : "es",
        "value" : "El plugin Etoile Ultimate Product Catalog en su versión 4.2.11 para WordPress tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el componente Add Product Manually."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etoilewebdesign:ultimate_product_catalog:4.2.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A3B3A0A7-7E44-4BC6-91AD-999BE06291CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T14:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs."
      }, {
        "lang" : "es",
        "value" : "El instalador CMS en versiones anteriores a la 3.7.4 de Joomla! no verifica la propiedad de un usuario en un espacio web, lo que permite que usuarios remotos autenticados consigan control sobre la aplicación objetivo, haciendo uso de los logs del estándar Certificate Transparency."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6228AD9C-C546-414D-855A-D4C0F8EC01DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736BD419-6B13-48DD-9500-DF712D2C60F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109BD231-8EF2-4DDE-93B9-168384EE4D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6A159A-7C68-41A3-A41E-5008D5F293EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F395A75A-AFD7-48C9-AD99-F37BB6CA293C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97970CC6-AC4A-4D78-98F7-14C2417B4667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A7477A-30A6-4A28-B5CE-F609C4C42EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA01482F-A400-4553-AE2D-90134A0F7576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB2D3D2-4147-44DD-B7D3-B7B4688C1C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279BA59F-2B7A-475C-A6C8-BA5393A6A514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3C247-93FC-470D-908B-EA978883D035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D213FF9C-D69A-4674-83E5-F0AA109F014F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59251C20-5F67-4479-A4D3-2D24CEADD228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E1193B-3C59-43D5-A662-3B164E1DB74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0184097-457C-4559-B1BA-59B748FB4A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FF1C39-8A41-4923-92C3-85B582DAB380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65184BFE-A070-4099-B672-3A238E9F83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920129E4-F979-49B5-9B96-62BCBC3954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A8900-E441-46C4-A725-BA312358760E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E276C-C62D-4828-89CB-80F526FEAEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E48636-9EDB-49BB-ABC8-D79864BFCB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E5E84-4C69-49F2-83DA-FC86202DB7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB968DF7-4A0B-474C-8639-06976837E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6BE010-649F-4E48-97DC-DDF7511406D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C4094-D028-4A55-B523-C90F5A4C9D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA6550-2135-4D41-B592-433FFFDEE180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73D78E0-BF24-433B-9F1B-03FD956C5779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BAC75B-DAC1-47E1-B9C9-48CF19489143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA97C8A-809D-44FC-95D2-5F269B6BF77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F607CF-AC49-4B13-96E5-B44191108CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B39FD1-44E2-43EC-B393-99E6208622B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77BABA-7768-4F92-84C7-D247E4772749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487204D9-7A9F-4A44-B625-FDBE2807444A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C8747-BF6A-4436-BC3A-A4B808AFF889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F137D-4572-472E-B1E0-EF7A0A3ED443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51BDBB-270D-4D4D-91D6-30114927667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861627F-EB9F-4B19-9E48-E3E9967EEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C15380EB-6543-4C95-9B7F-35DDD99D1C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "C95EE9E1-CB59-4E8B-B57B-991295790328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F893A-2612-4524-B24B-0468F5EE2019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "21D252E2-1961-4D4F-8471-584CF6CB39E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0930E8-3E98-4DF5-AED3-146D34F843D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "C732CFEF-CF4D-4EB7-A730-A5764B40A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta13:*:*:*:*:*:*",
            "matchCriteriaId" : "10880E1E-8478-485C-AD9C-ABE4C51D2EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "816A10B4-EC28-47EF-BD47-7F431AB77561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "F9085C7C-6CA0-4423-93B1-9E8AF6D2978E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCAD021-E5B2-4232-81FF-BB04908F4FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0B842E1A-348B-4644-930E-CF46E1E38E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D08BB717-4841-482D-A1AD-E8DF769E57C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "065980D5-AEBA-44B1-A58D-8BF8FFF674F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC711DC-C790-4558-B305-A812EE2290B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE1D53-EE34-4C2C-B2AD-3DD58254C874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "9E11C49B-2A3E-4D52-BEFA-CDDB751E20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6CA7BE-DD88-4899-A284-C9E4F97F4005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C686887-75D3-4682-AE61-245D10EEAADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15F42BC-7826-493B-8C5A-D70A7263DCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC6CF00-2D88-4B97-A496-DCBE1B4E9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25771A2-206B-4366-B9DE-34D8CE12AE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F920ED-9578-4913-B851-3205BE13A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5F713F-F7EF-4E9B-BEB1-DDFDA0838D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9774D211-08D9-4339-B2AE-42434DBAF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C03B8F0-9A63-4896-A8CA-8CE829DE6B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086B989-8ED6-4DF2-92D6-2572315BEF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFFED66-B44C-47BC-A6FC-560DC9540001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552C590-F5AB-4B9C-9E18-ECE9E2753377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF53BD-6A52-41D3-8BB3-B08AC81C65E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23070D86-E104-4A93-84EA-5B23952B6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9382E8F4-30E6-473C-92F8-B8A48C28449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD19865B-7F80-41B3-B31F-948B30B73FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F50C51B-84E1-468F-B7ED-790BA079864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D1C175-74AB-46AD-BAE0-25F0DF6EF944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8684-EC16-4DB7-B8EE-7C2C009FA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA0D93-26C1-4D24-993C-F07B102EAD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB372030-D07A-42DD-AF36-CD47EA2D8F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2143F-76E8-4BAF-8EAD-68E86EC73060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAEC506-1375-4BC7-BEB4-85F90491BDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43B63EB2-031C-47A0-875E-6D3FF5B32D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3931745-E865-419E-A252-5306A63878D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1C8F45-53F2-468E-97D5-E7D1FE9F789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6373A-1200-49D8-87B8-1D923752E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "639BD6FA-F5A9-4D58-9FD0-F20610CFF48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "871D0251-2BF5-4167-9B40-2D8024154802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3191-47BB-438D-87BC-74CB19DC99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B36EC1DA-762B-4686-BE6E-6604D02F9FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FE2EA-51E5-43FE-8DEA-94EA8A016B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "D5870A8F-914C-474F-BB4D-41F23061E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7945BC2A-0357-4E49-9314-C8C75B926585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "622CF895-3402-449F-A769-535ABD102D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "04E27344-9C09-4202-8AFD-D2ADD8294D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "76E37DC8-1D4D-4E82-BB27-F6B5B947C8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCF94C1-7F4C-4F0D-973D-1A44F3CA2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F3AD2F-5503-4A6A-BF32-6B570F5C383E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FF086-3D89-4350-92BC-8914ACD471A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "352A89E4-8031-4AF7-8A57-A4BDF72FE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86535F-D1AE-4F4C-8B2D-6418D789CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F8CEE-67F3-4868-87A6-E9DBAE70AA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3D2D6-BCC8-4381-B941-09FE693B8AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "53190951-2DCC-4B00-A921-8F77A044FD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "77138C7E-04FE-4442-AEF9-BE8EB68F5ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0C7A46-1EF2-4DD4-991E-F120F994161C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A21583-491E-4B29-AC2D-88A561C83A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0B9B94-9601-40B1-BBF0-71BCB400C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49994A54-AB81-402A-932E-E6E7C056C0E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039015",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/700-20170704-core-installer-lack-of-ownership-verification.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/hanno/status/890281330906247168",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/700-20170704-core-installer-lack-of-ownership-verification.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/hanno/status/890281330906247168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T14:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en SOL.Connect ISET-mpp meter en su versión 1.2.4.2 y anterior permite que los atacantes remotos ejecuten comandos SQL arbitrarios a través del parámetro de usuario en una acción de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sol-connect:sol.connect_iset-mpp_meter_firmware:1.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8935F0CC-0BF0-4242-AFAF-A36BCC9767B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sol-connect:sol.connect_iset-mpp_meter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F75361-1801-4FCC-854D-5DB0C41A80F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540946/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100067",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42408/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540946/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42408/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2138",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de tipo cross-site request forgery (CSRF) en CS-Cart Japanese Edition v4.3.10 y versiones anteriores (excepto v2 y v3); y CS-Cart Multivendor Japanese Edition v4.3.10 y versiones anteriores (excepto v2 y v3). Esta vulnerabilidad permite que los atacantes puedan apropiarse de la autenticación de los administradores utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:japanese:*:*:*",
            "versionEndIncluding" : "4.3.10",
            "matchCriteriaId" : "E8652FFE-26AB-4CEC-8411-41932837AA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:*:*:*:*:japanese:*:*:*",
            "versionEndIncluding" : "4.3.10",
            "matchCriteriaId" : "C81B130D-46A0-4B66-9A20-BDF9FFE97E56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tips.cs-cart.jp/fix-csrf-20170406.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87770873/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tips.cs-cart.jp/fix-csrf-20170406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87770873/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2278",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2.0.3 y anteriores de la aplicación RBB SPEED TEST App para Android, así como las versiones 2.1.0 y anteriores para iOS no verifican certificados X.509 desde servidores SSL. Esto permite a los atacantes que realicen Man-in-the-Middle (MitM) suplantar servidores y obtener información sensible utilizando un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iid:rbb_speed_test:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67143102-14B0-45F9-8C6E-66733446CC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "C53B5958-BCDB-4D35-923F-1F997B1ABC8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iid:rbb_speed_test:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67143102-14B0-45F9-8C6E-66733446CC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "49BAE6ED-890F-49BC-A54C-5E5C71899F8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.iid.co.jp/information/170714.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN24238648/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iid.co.jp/information/170714.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN24238648/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2279",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en la versión 1.6.6.0 y anteriores de Tween permite a los atacantes conseguir privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiri:tween:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.6.0",
            "matchCriteriaId" : "625D4501-7705-4B44-A9E3-EBA7CDA1314A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN17523256/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN17523256/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2280",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.00 y anteriores del firmware WN-AX1167GR utilizan credenciales embebidas que pueden permitir a un atacante acceder al dispositivo para ejecutar código arbitrario en él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-ax1167gr_firmware:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2746BD-F53A-4631-B0D7-1A0EF0967FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-ax1167gr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23CDC37-9491-4534-96E3-42654BB49BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ax1167gr/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01312667/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ax1167gr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01312667/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2281",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.00 y anteriores del firmware WN-AX1167GR permiten a los atacantes ejecutar comandos arbitrarios del sistema operativo utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-ax1167gr_firmware:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2746BD-F53A-4631-B0D7-1A0EF0967FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-ax1167gr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23CDC37-9491-4534-96E3-42654BB49BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ax1167gr/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01312667/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ax1167gr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01312667/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2282",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.00 y anteriores del firmware WN-AX1167GR permiten a los atacantes ejecutar comandos arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-ax1167gr_firmware:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2746BD-F53A-4631-B0D7-1A0EF0967FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-ax1167gr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23CDC37-9491-4534-96E3-42654BB49BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ax1167gr/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01312667/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-ax1167gr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01312667/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2283",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.0.2 y anteriores del firmware WN-G300R3 utilizan credenciales embebidas que pueden permitir a un atacante acceder al dispositivo para ejecutar código arbitrario en él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wn-g300r3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "4FD5A09F-4D89-4F19-AB38-361E5F895CF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wn-g300r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185631B5-C854-4476-9061-539C67A63E58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.iodata.jp/support/information/2017/wn-g300r3_2/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN51410509/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/wn-g300r3_2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN51410509/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2284",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en versiones anteriores a la 1.6.5 de Popup Maker permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "90C161EC-2573-42D2-87D9-34B3D6B8DC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D9B91723-3887-4F17-9C22-F75D9190EE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F1AC248E-BF46-422F-84F9-EDC409CA22F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6C0338C3-969D-49CC-8883-A6FC1F85EA96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.0.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "54C7BF56-F9C6-4858-9084-20BC7695BD6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "36323BBF-DF81-47D3-B126-6673A3BF8F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4B6B06C5-EBE8-4BD5-AB71-1212847F2D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2B9A7EA4-3EAC-40C3-945B-96B26462B163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9D48C71B-3971-4AD2-897F-ED9BCF478451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D789C13D-7C6D-4F5B-A212-B836E08E213A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CFE80F18-726C-4BDE-838C-B44479DF6165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "440D38B5-4C30-4960-8DF7-1234AB843972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4EB472CF-32C4-4BB0-AF92-8B015A40BE59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "59839A5E-3462-4084-AC68-E9BB758D29AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "37360399-BB08-4CCD-BF97-9C244B8538AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "34C82A10-464A-4CDC-8947-7B1494F0EB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.1.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "70B17631-F056-4E9B-BFF8-73BCE1116815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "76350181-42BA-49C3-A25D-9B9FCB4E526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.2.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8E3085B2-66B0-4006-AA8E-9EF4CAB97FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.2.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "102F9DD7-E0B5-4918-895E-DEFCAAC8FC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "39D04E83-EF5C-4981-BB0E-6F929AF1C25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C759FBB3-A063-4CCC-B3A5-F6DC8D6B8A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "283F2952-A467-4E2C-9E01-7E48234A3B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "AB0D76F5-C2EB-4C6D-A187-DF3363EC19A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "70B45C8A-79DA-4AEE-BCC1-C06C77FEE40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8FCC14C3-C650-44AF-8292-5497B508556A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "007D28DF-7E53-486F-B9AB-1BCD54020AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5B735B73-E003-4848-A7F3-EBA9D19039EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8868752E-BB92-43F4-8D1C-769D512DA13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.3.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "334E63C2-E717-4C11-958D-B48EE3440B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "82588758-797D-489D-A19F-0E0D7CC807E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8588997E-AA8B-440F-9F1B-713FFB097234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FA9E5F61-97EB-470B-BA39-50ED30FDA492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3C2511EE-E091-41C4-BF06-DFBC27B3E3B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BFB9A292-0E2D-4378-9039-ED45DABE726C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CEDE2DC6-0A58-47C2-944F-8010524B2821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5827184B-ACEC-452A-8190-64A32F76E902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6E5B070F-A8E3-4320-832E-1FE9577E7B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8142F60E-FDBF-4DE1-89C9-5925290E9E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FEE8319A-33A8-486C-92A5-4941681B8B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "10A5384C-C79D-429A-9094-538BE9C70C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.11:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "39F86BCA-C2F6-4664-B36E-43FF3F9D13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.12:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0C583011-48FD-4EC3-9C58-28EF3E5C9D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.13:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "DD0B7B26-72EA-4712-B783-3989FDB05194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.14:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6A1CC3A8-EBAA-4FA2-B0B9-4B05C9742CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.15:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FE801999-733C-4C82-9114-B2228AADE290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.16:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7A33CEB9-8CE3-4F1A-A1C8-2176F65DA787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.17:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "AF294B42-DF3C-4ACB-B439-CE41581FB685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.18:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D18DDBCA-4F33-4CD0-BE52-1B6F87D273E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.19:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "65B14941-933B-4ECF-95CA-16F208EB2FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.20:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "38951BCB-E275-4952-850A-F007CB06B5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.4.21:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "862E52EA-4F2E-42F5-8099-DAC7F3025923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5AD0FA3F-03CC-470D-A0A5-857CA7A46D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0CC71336-9C78-4228-9393-F9139ED44979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FF5128CC-6B8B-4CC6-9D08-2188D93ABD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "30B1DDBC-10D1-4718-B07E-946D72F1B581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9E0DC38E-A42A-4008-9E67-0487F0849CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9B9657B9-C347-4DF9-A306-C281396FB81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E0E732F1-84C1-44A6-B1B3-BCA25B8272C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A78EFBC6-C767-466E-8A7A-68A7606227C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.5.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C218BC8D-9798-4EEC-8B64-EE96888FA338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.6.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4177F386-AFB2-421B-8444-89D16B6C78C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.6.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CF7C5849-3102-4D27-BBB8-A6E31230150F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.6.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "30BCFF57-5F8E-478B-A484-9C771BA33E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.6.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D00FE9DD-4EF5-4CAF-88B1-0C260610063A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-atlantic:popup_maker:1.6.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FAB6541B-F121-4668-A2CA-EE6120014633"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN92921024/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1697216/#file3",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/popup-maker/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8878",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN92921024/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1697216/#file3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/popup-maker/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2285",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.567",
      "lastModified" : "2025-05-06T15:15:51.390",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Simple Custom CSS and JS en versiones anteriores a la 3.4 permite a los atacantes que inyecten scripts web o HTML arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FE6A3F4D-31DF-4195-8EDB-B003B4453CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1D2E36D5-23D0-440B-9678-340A0B89E8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "062EAD3E-AB27-4713-8A22-34986A00DEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BC13DEB7-CD88-4C66-BAD8-D8A3E8BD9221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D28C6D31-1010-401D-AC77-3BF214A495C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D4C97E9D-2860-475A-A16D-C7C799DBCE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4D4F1A9F-6BE4-4780-BF62-38B97FC7FFAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5E72E4A6-84C3-4ED6-8868-4C09FBD5C8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C7FAD033-62A7-4503-A071-98FE474E6EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "582DE8B3-F102-40F7-B03C-816C637E4F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "39ED4178-ACBA-4C55-A975-23154290503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "695B68E2-20C5-4E41-B188-3A2A8B9E00A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A44CC8F6-459C-433E-9F54-5155DE19AE07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "20BE7CA8-B712-4E7F-92EC-D3F25FC7EF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D15BDD75-E1E2-4561-B6A3-B63DB15B570D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C201CD20-035C-4A4C-973B-9905CDE352E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "64131CE2-CA15-4AC9-88D7-BFBE8A976042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C699E9A8-5BB8-4B1E-BC37-EE08FF79FFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3144C8A4-5D55-41C9-8429-1B9259966642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "54148D7E-6CD2-41AC-AA73-32328F4FCB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5B2BE06F-B93D-4BC1-A372-C8A8F2396C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "DECB5657-FE13-4D4E-A447-6A4BA3D7511B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN31459091/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1695440/#file6",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/custom-css-js/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8879",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN31459091/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1695440/#file6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/custom-css-js/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2286",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable permite a los atacantes conseguir privilegios utilizando un archivo DLL troyano en un directorio no especificado. Esta vulnerabilidad afecta a NFC Port Software, versiones 5.5.0.6 y anteriores (para RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S); NFC Port Software, versiones 5.3.6.7 y anteriores (para RC-S320, RC-S310/J1C, RC-S310/ED4C); PC/SC Activator for Type B, versiones 1.2.1.0 y anteriores; SFCard Viewer 2, versiones 2.5.0.0 y anteriores; y NFC Net Installer, versiones 1.1.0.0 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:nfc_port_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.0.6",
            "matchCriteriaId" : "58FF206E-61CB-41AE-A055-D17B9D4D3C3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DFE77A-E624-40C8-BB52-DC1BA2DCFE6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D736000-7095-4F5D-9EFA-3B3CA9D90236"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC30D968-0F24-41BF-A856-D3A9A9585A6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4E817B-B58D-4CF2-91EA-79A1C0C275E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB37F739-30F5-416A-9231-1C1F65636A4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s380\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5CB280-9536-4853-BDEE-AEB0EEF5F620"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:nfc_port_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6.7",
            "matchCriteriaId" : "6C391E1E-E1D8-4C91-A95D-047AAFD7455B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s310\\/ed4c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187AE859-6A0F-4995-8171-D0464D570B27"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s310\\/j1c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F74EB26-5AA7-44FA-9B42-1D93929C4F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sony:rc-s320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D736000-7095-4F5D-9EFA-3B3CA9D90236"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:pc\\/sc_activator_for_type_b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1.0",
            "matchCriteriaId" : "F090AA3D-E974-4983-854A-24825A574D81"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:sfcard_viewer_2:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F08CDA0-9C53-4991-A5D4-86E9F4B0686B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sony:nfc_net_installer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0.0",
            "matchCriteriaId" : "A7C79B64-38A9-437C-B153-281D4ED8A547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN16136413/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN16136413/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2287",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en las versiones 1.3.0.1 y anteriores de NFC Port Software permite a los atacantes conseguir privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:nfc_port_software_remover:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0.1",
            "matchCriteriaId" : "0180311F-4024-49CB-A4ED-3428B4D23727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN33797604/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN33797604/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2288",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-02T16:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en las versiones 1.6.5 y anteriores de LhaForge permite a los atacantes conseguir privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lhaforge_project:lhaforge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.5",
            "matchCriteriaId" : "3C1EB621-3DA9-418B-BF75-927D8345DDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN74554973/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN74554973/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1118",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-02T17:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configured security policy. IBM X-Force ID: 121156."
      }, {
        "lang" : "es",
        "value" : "BM WebSphere MQ Internet Pass-Thru 2.0 y 2.1 podría permitir que un atacante haga que MQIPT deje de responder por una política de seguridad configurada incorrectamente. IBM X-Force ID: 121156."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_internet_pass-thru:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CB3327-C1C4-4AC2-AA96-66DB9E643E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_internet_pass-thru:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2D7650-4440-4F2D-976E-D8088E47B512"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006580",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100021",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121156",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1383",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-02T17:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155."
      }, {
        "lang" : "es",
        "value" : "Las versiones 9.1, 11.3 y 11.5 de IBM InfoSphere Information Server son vulnerables a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 127155."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:softlayer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BF7B27-5799-46A0-9560-FAE3DA73545F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005803",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127155",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1467",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-02T17:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de la seguridad en la capa de red en InfoSphere Information Server 9.1, 11.3 y 11.5 permite que se escalen privilegios o un acceso no autorizado. IBM X-Force ID: 128466."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:softlayer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BF7B27-5799-46A0-9560-FAE3DA73545F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006063",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100103",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128466",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1468",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-02T17:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3 y 11.5 podría permitir que un usuario local obtenga privilegios elevados al ubicar archivos arbitrarios en los directorios de instalación. IBM X-force ID: 128467."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:softlayer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BF7B27-5799-46A0-9560-FAE3DA73545F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006067",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100099",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128467",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1495",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-02T17:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3 y 11.5 podría permitir que un usuario con privilegios haga un volcado de memoria que pueda contener información altamente sensible, incluyendo credenciales de acceso. IBM X-Force ID: 128693."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:cloud:*:*",
            "matchCriteriaId" : "F4242935-3E3A-4181-842F-5E58AE829C71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006068",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128693",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt."
      }, {
        "lang" : "es",
        "value" : "qemu-nbd en QEMU (Quick Emulator) no ignora la señal SIGPIPE, lo que permite a atacantes remotos provocar una denegación de servicio desconectando el proceso durante un intento de respuesta de servidor a cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86166F9-BBF0-4650-8CCD-0F9C97104D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/29/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2390",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1466190",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg02693.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1466190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg02693.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer de pila en hw/usb/redirect.c en Quick Emulator (QEMU) podría permitir a los usuarios locales invitados del sistema operativo provocar una denegación de servicio mediante vectores relacionados con el registro de mensajes de depuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/07/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99475",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468496",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-05/msg03087.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-05/msg03087.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area."
      }, {
        "lang" : "es",
        "value" : "La función address_space_write_continue en exec.c en QEMU (también conocido como Quick Emulator) permite a los usuarios invitado locales con privilegios del sistema operativo provocar una denegación de servicio (acceso fuera de los límites y detención de las instancias de la cuenta de invitado) usando qemu_map_ram_ptr para acceder al área del bloque de memoria ram del invitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/17/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99895",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3369",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471638",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg03775.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/17/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg03775.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to the main page; the (2) beanReference parameter to the JavaBean viewer page; or the (3) pyTableName to the System database schema modification page."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de tipo Cross-Site Scripting (XSS) en PEGA Platform 7.2 ML0 y anteriores que permiten a los atacantes inyectar scripts web o HTML arbitrarios con (1) PATH_INFO en la página principal; (2) el parámetro beanReference en la página del visor JavaBean; o (3) pyTableName en la página de modificación del esquema de base de datos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2_ml0",
            "matchCriteriaId" : "D99B50FB-B3F8-45B0-AF05-590CEBA16EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42335/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42335/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de exportación de distribuciones de aplicaciones en PEGA Platform 7.2 ML0 y anteriores permite que los usuarios autenticados con los privilegios adecuados obtengan información sensible de configuraciones usando un control de acceso que no existía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2_ml0",
            "matchCriteriaId" : "D99B50FB-B3F8-45B0-AF05-590CEBA16EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42335/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42335/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users."
      }, {
        "lang" : "es",
        "value" : "GitLab Enterprise Edition (EE) en sus versiones anteriores a la 8.17.7 y las versiones 9.0.11, 9.1.8, 9.2.8 y 9.3.8 permite que un usuario autenticado con la capacidad para crear un proyecto utilice la función de replicación para poder acceder a repositorios de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F9A689B7-5338-4CD9-817B-6BC7CFBF777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2A545241-72A5-478D-95DE-D16D81D059D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6214BCAC-88CB-4584-9263-4C363E09DF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B111C038-809E-433A-AEFB-DB08485D433F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5703243F-1311-43AF-A4D3-EE481AE6AF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "97D2593C-82F8-4FDA-90E9-5F99FA5E618C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9F154A97-727E-4328-8DD4-5ADB5DFF9BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7050F394-AA21-413C-B7AA-025C6867EA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "60F33D8A-D19A-489A-B7EF-F3B9BB21128C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A242BEA6-967C-4AD6-B1B5-6ACF07D7A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4EC5D7BC-D90E-4246-8875-D55E733A17D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7835A619-4618-4871-B593-0F852D017FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2E83AF15-2F16-4C9C-8426-65B1521367FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.5.13:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5FDF0654-A1D5-484C-81FB-C8190358D149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C6026502-F953-4DD6-9045-C261DCF1A8C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "16CF71BA-270C-44BA-9901-E340E52A9433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "66C84616-682F-48B7-BF50-B1720620A220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "42B65A36-4287-4D67-862F-D3F64FA7EA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "361FDAC0-9A78-485E-A761-80594B610E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E2AFB344-CFB4-43CB-83DF-56E7C152E824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6E132515-1E9D-4ECC-9BEB-A7BD469C7C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4C90D1E1-F070-4334-9D24-5FDF0D94375D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "41E3D5D9-7E0C-46CD-B0E9-BC047D5999F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.6.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "255E7E71-B6A0-4BC1-A0CC-3D96EC9EC5E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F6274FC1-B2DE-4DBE-8771-C1BEC9064707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F974D2B-B850-4551-A239-2282CB6F4726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7CAAD899-AEFB-47B5-A002-F62931DE2555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ACE69267-26A8-4079-8611-5391D8591A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E81D3A01-5108-4135-86C3-511CF6BA2DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FC8A3B06-7F24-4A10-932D-B04C04D79AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "98A064EA-02A1-438B-8F5E-600B65B3EE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A6E99B95-7887-409E-B661-19BDC4B397E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "686E5B3F-A633-42AF-822C-DEA1063373D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.7.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "47D46996-0BD0-4430-BA1F-681D6C3A063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "91644919-EA2F-45F5-99A4-56C3E2CAFE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "30B7F5DD-874F-4384-97FB-7BFF550FFF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9D67A403-F067-406B-9750-6BFC060564F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "197423E1-4AC1-4D26-8699-5DF8F5EE3F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A93559F4-90A2-40EF-9D69-0D55D3C47CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BA2868FF-5ACD-44F9-9A57-7EF63C7E640E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AD687ECD-BF49-45D6-A35C-AC4E24FB9A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "03DF09B5-D8D6-4467-98FA-DFF6D2B55033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3E8092F0-9AE5-4CF3-B7E3-414F726F2F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.8.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B0B38D4A-6E17-4BE0-9A16-D8A181B4F530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "714A27C4-DA0F-40F0-882E-E818EA943EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "413D4C46-571E-4F4C-BA82-C5005F607E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EBC8BEA5-B157-4058-A60E-55AA9B73B601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "419AE443-4512-40F7-82FF-C7EC56D67B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "99743846-474B-436E-8EB1-1CB9F31CF4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3476E93B-274E-404F-9E34-0C10C21565E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A8C88B77-533B-4552-99E1-DD25EC198AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A201ABFD-4A87-47A1-8320-9F982B84BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F3502F66-C892-41FE-B26C-76E75721D6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.9.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B9AABA2E-550F-4C23-8CF2-3EF3F7379FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "331EE96A-1BE0-474D-86D1-1DB43C74277E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B15DB780-A850-41FE-AD9F-6C346B4989C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F4FC046D-7A57-4892-BF69-0E79424F512B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2A462CD5-92E9-4C32-B04D-E7B25317F27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "269B515B-277B-4807-9159-9DF65D3C0D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ADF1DAF8-2A35-4775-92F5-A1F8E57FE326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F1CF3A4A-722D-4F0B-815D-DF7D779F45AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "38C019DC-04A4-446B-AF57-0D7DA6BBFD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D6B66E5D-E2BA-4C5B-BBB3-5D813EC70C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C79BCFD6-1A37-4148-9770-B2109BC553DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "71F68373-D0FD-4AD0-B382-A0D09EE36485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "49ACBD20-69FE-48F8-B972-95A10430DE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2B736A41-4879-49EF-88DE-2E8872E54731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.10.13:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C38A9845-4307-463A-BE55-72263468A0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AB6C28DB-00B5-4DAC-BB5E-5141FCCA7779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "09D275A5-FA0A-468A-A490-6D40C2016266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CB22081E-45A1-4599-B0FF-5CD0C4191832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F06FC003-C7E7-4666-AD9A-ED90A42EF582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F607CA2B-1D61-4C15-BA54-9B382CB1B5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F44BE0E2-97EB-4BE7-8A84-6EDE25649C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5B0E74E3-C58D-4D89-BFCA-722366B49255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EA760556-96D0-4F69-BC72-6D72CF599AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D56AC6D5-A08C-4543-97F4-23D77F3DF1DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C53175BE-0F48-4357-B950-75E4C92C1E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EA8C529E-A755-4DA7-B5FA-CECA7D77BFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.11.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "13B92102-2233-43D9-B7D6-7B917ACBC513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "48B34C3C-03AB-4459-ABCA-480C07B1B5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "09BB2940-8CF8-4ADA-B734-99A8035BA7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6ED2E761-8424-47ED-9ECC-9EEE0F06E693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "24B2DF94-D1BC-4F94-8AAF-DF4CDBDAE5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6569CE8E-0C8B-4A2D-91A0-A99354E72A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D5853E3-1CA4-4731-A2C3-DE5350FBE685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "25B7D422-BEDA-427D-9BE7-04C851D1E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "24D15B0E-D6DB-4A01-B996-026A3FAA2B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "074F2E17-E065-4700-8A6C-60A0555D9CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4E18FD1C-DEC2-4C95-87BC-E5D4B7CCA2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8F3D07EF-1030-4B4E-AEAF-FDC6C9EC1152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1053EFC9-1E3F-47D5-B0C1-D3752F89F5A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.12.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D3FA1A2B-4EF8-40BF-BF3D-A381AFD3AED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BF27DE16-6B02-4B8C-8171-644F96B91EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "309BE602-C30A-453B-B53E-87559A4A65C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0D1AEB22-B278-40B8-959B-59DF4CCE1756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6E6C2412-07E9-494C-8374-D23244896593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8754F4EA-AA92-4308-BCE1-F6214A502368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "46015599-12C0-4DFA-BBF9-2252446C899A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "38D6EBF6-43D0-4D5E-A21D-29D775593236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E36DA897-3A68-454F-90B8-B83E6D28AC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9BBB030E-9065-46C5-B53D-1652BE5F8592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "95A34884-89DE-4BB1-9E83-34FA67111E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CDD3228C-F3BE-4C85-90FE-4D29F40CABCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.13.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E390DA6B-EC51-4534-A375-F8E30B365409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "234CD36B-CEAC-4C89-A515-22D088589024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A044ACCF-7534-4A81-9F66-7235CA4B74C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6265E089-155E-474C-B020-85C75EE500E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "62B5B510-E6BE-414A-BAE3-91DBDF571682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EAA4671D-EF34-4325-A992-7C81D5BAADD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C0CE42B2-B475-4D8C-B8AE-BC32BAF6234E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C93D5B03-B1D0-4F94-BDF5-4AE508A0BF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9627D6F1-4EE6-41A5-9C36-295A3E838D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1B594D99-2948-4A7A-9D0B-F4F62746E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.14.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "507368E5-8FEB-4981-A228-047F081288FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4FE20CBB-70B6-45B9-A477-1E4B50DAB672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A1C4F42E-C2A5-445B-9B82-08CD28A624C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FB98703B-DC7E-4BFA-B11C-23A813FF8F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE10D715-8C4B-4915-A063-0E68F12261F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "94AF72BC-2F35-4FBA-98AA-37DBC4450B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D1FD095-2ECE-4708-A8A0-08713D664881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D4102D04-E8F9-412C-A07A-FC70FD7CCBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.15.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A8C257F5-BA6B-4D97-A810-D8892A65347F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FF573E1E-3635-45BD-BD3A-14833BE25037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "44E4EFCF-390A-443F-9D8B-9778474280B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "19905721-3BA5-4C6C-A706-A814C6C03F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1C65DD44-8746-4E32-9A71-8E3358577331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ED7EC2EB-4DFA-48BF-BA20-F405C6BED3B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "DA6E2911-A293-430D-B8FB-D531074802A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5C6A6C84-71D0-42C1-A54E-01319FFFA9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9FC9C9FB-DD73-4482-A95C-F9BE5738466E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "37AE396B-8674-4693-BA62-A4CC4D425EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.16.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "437E47B2-BAC5-429A-A16E-730A08F3072B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "232319FB-619D-45FD-A091-ECE7937B38C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EBC485DB-B02E-44E5-8FD9-BEBB859FFC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "31BC0B13-B59C-41B8-907A-9DFBEC54D3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BEB69ACB-D9A8-49EF-B9A2-30D3FAAB2684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "307769BA-3940-49A0-B428-381DB21048E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B1A330EC-953E-4947-BF3F-59981437478B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:8.17.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4D9C5763-05A2-4334-AD8D-7F0355D1A712"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2FD7115D-5389-41E0-A434-E309C589904E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "56A91763-FD44-400E-A44B-CFF30BED8BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "39CF4E50-959C-4CCD-BA3B-C08801938FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D4167398-A7FF-4F0A-8BB3-2A61095EADD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2FB25D27-2086-4B5D-98E4-6D5DE385CEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EB58A6B5-2444-4F0C-8D76-23286A148FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "863D2334-4FC6-43C7-BC79-34FFB932C9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0542A00D-9B9F-4F31-A71D-C0036868A6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "69DEB9B7-A622-4F02-87C0-D8C073FBC433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1B383F93-5B84-4959-8BF9-5EF589FE3861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CFCA88A2-52A6-46C0-8D04-6D66A25ECC98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F0E33B7B-74F6-4180-83DD-B3103FA69973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5B456316-8D07-4FC4-8371-F1FAA6DA66CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A6BD46FF-C9D8-4420-BEF2-55E7865A7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F2894748-99BB-4105-BF7E-9EBF3A96C591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "48F0243B-5E32-4958-907F-28F687BCFEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B8A8A421-89D4-4D88-AC5E-A4675B57281D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9F674ABE-8BD6-45DD-9604-3789D7143ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7E8D058B-CA9A-4DB0-BA37-B4A8F82B80CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77E257DF-7EF6-4F94-A901-70D14B230AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5150656E-DF20-4930-9D8F-F35371E25F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ED08A352-986E-4B87-A2B3-FD42C99DEBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F78723C9-5DCC-49D8-A81C-2ABEFF93DCF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA0BE35C-0CE7-49C3-882B-9E8751CF780E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "78F36A2D-0BAF-461B-9C45-28F5E5919FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A1ED26D9-9138-40E7-8040-7758A3C55DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D8BA8D86-FEB3-4EF6-AD02-AC7EB724A8B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3978E438-C566-4D20-8A61-35BE3DD53216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E1B7646D-8AA1-4C71-A200-1F4AF69C15F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8706044B-BC22-4808-8C91-F212A9597CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6813D127-BD01-47C3-B2C2-28C48D15E662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F7E8D785-1D9F-4DCE-BDDB-3F43A3D1A121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D039DB11-A182-43C7-9D1C-CADC03E4EEB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "706DC40E-D1A8-4124-A038-8F1AF94FDA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4CCEF509-13C2-4DD0-A578-FDA31EE9B152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup."
      }, {
        "lang" : "es",
        "value" : "GitLab Community Edition (CE) y Enterprise Edition (EE) anteriores a la 9.0.11, 9.0.11, 9.1.8 y 9.2.8 permiten que un usuario autenticado con la capacidad para crear un grupo se añada a sí mismo en cualquier proyecto que se sitúe dentro de un subgrupo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CA141AF7-A786-4484-89C6-641FE75304EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2FD7115D-5389-41E0-A434-E309C589904E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7184277D-C727-4364-8926-BFADAAD65111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "56A91763-FD44-400E-A44B-CFF30BED8BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6D737A3C-7FCE-40FF-8B4F-73ACCF72A95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "39CF4E50-959C-4CCD-BA3B-C08801938FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7FB672A5-0079-4174-9B05-87B7830ADE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D4167398-A7FF-4F0A-8BB3-2A61095EADD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "5D760B70-6A23-4A86-862D-358DED91273F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2FB25D27-2086-4B5D-98E4-6D5DE385CEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "95CB5974-672E-45B5-8251-2E31AB4B56C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EB58A6B5-2444-4F0C-8D76-23286A148FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "134815AB-D605-4148-9358-11B56347F94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "863D2334-4FC6-43C7-BC79-34FFB932C9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C0AADEAB-5C55-4E5D-9291-8EB7A3C9749C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0542A00D-9B9F-4F31-A71D-C0036868A6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "11733956-6E02-4157-9FBC-3FA2EA0FD476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "69DEB9B7-A622-4F02-87C0-D8C073FBC433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "E1CDD134-AE19-4B1C-8ADB-40E1B4AEE963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1B383F93-5B84-4959-8BF9-5EF589FE3861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.10:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D7555266-A0C7-440F-88C1-CF3C2F6ECA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CFCA88A2-52A6-46C0-8D04-6D66A25ECC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "3BCC102E-DB51-4449-9518-B01B7894AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F0E33B7B-74F6-4180-83DD-B3103FA69973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7396F198-4E66-460C-AAC2-7B8DDD2F3D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5B456316-8D07-4FC4-8371-F1FAA6DA66CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "90F5AE42-8D2F-434B-B6B1-57B9B6024D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A6BD46FF-C9D8-4420-BEF2-55E7865A7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "E8084DEF-E62E-4C55-9E3F-9985966717DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F2894748-99BB-4105-BF7E-9EBF3A96C591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D6074F33-B363-4070-B572-C669650425AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "48F0243B-5E32-4958-907F-28F687BCFEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BF6F7B4C-E0EE-4B89-944D-25539CE7F54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B8A8A421-89D4-4D88-AC5E-A4675B57281D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "4EADBBD3-DC56-4E06-ABED-000CB59FADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9F674ABE-8BD6-45DD-9604-3789D7143ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6E987824-25AB-4BC2-BBAB-032EA3640BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7E8D058B-CA9A-4DB0-BA37-B4A8F82B80CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D80390B9-CDBF-413B-A4BD-DC070DE965FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77E257DF-7EF6-4F94-A901-70D14B230AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "2F9C1467-8D27-4AF8-B6E1-F8BBFB92C4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5150656E-DF20-4930-9D8F-F35371E25F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "341C87D3-A74B-41AF-BBA2-205997F8B0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ED08A352-986E-4B87-A2B3-FD42C99DEBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C84AF9BB-5A67-432F-AB71-310953407EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F78723C9-5DCC-49D8-A81C-2ABEFF93DCF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "FD2D4D56-9218-4962-88C2-44A1728F1EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA0BE35C-0CE7-49C3-882B-9E8751CF780E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "8289D1E1-8DE2-4795-B602-E357C4A3B7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "78F36A2D-0BAF-461B-9C45-28F5E5919FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "0BBDC678-4A27-4236-A27E-25C88EFC2008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A1ED26D9-9138-40E7-8040-7758A3C55DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "E2B2A42C-7860-46CF-AB24-05FDFF58D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D8BA8D86-FEB3-4EF6-AD02-AC7EB724A8B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable."
      }, {
        "lang" : "es",
        "value" : "El asistente de comandos sudo en el plugin HashiCorp Vagrant VMware Fusion (también conocido como vagrant-vmware-fusion) en sus versiones anteriores a la 4.0.21 permite a los usuarios locales obtener privilegios root utilizando el error para verificar la ruta al script en ruby codificado o manipulando la variable PATH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.20",
            "matchCriteriaId" : "423D153E-455F-4201-A940-04CC89A7D6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vagrant-plugin-changelog/blob/master/vagrant-vmware-changelog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42334/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vagrant-plugin-changelog/blob/master/vagrant-vmware-changelog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42334/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information."
      }, {
        "lang" : "es",
        "value" : "La función de descodificación de GIF \"gdImageCreateFromGifCtx \" en gd_gif_in.c en GD Graphics Library (también conocido como libgd),que se usa en PHP en versiones anteriores a la 5.6.31 y en todas las 7.x anteriores a la 7.1.7, no asigna el valor cero a los objetos array colorMap antes de usarse. Una imagen GIF especialmente manipulada podría utilizar las tablas no inicializadas para leer sobre 700 bytes por encima de la pila, pudiendo divulgar información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99492",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74435",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.php.net/patch-display.php?bug=74435&patch=fix-74435-php-7.0&revision=1497970038",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.php.net/patch-display.php?bug=74435&patch=fix-74435-php-7.0&revision=1497970038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "El proxy DNS en Palo Alto Networks PAN-OS en sus versiones anteriores a la 6.1.18, todas las 7.x antes de la 7.0.16, todas las 7.1.x antes de la 7.1.11 y todas las 8.x antes de la 8.0.3 permite a los atacantes remotos que ejecuten código arbitrario a través de un nombre de dominio especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.17",
            "matchCriteriaId" : "460EF266-5397-4FB9-B4C3-BECB2FB12AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAF08A-5478-4942-8CC0-0F267F464684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033CDBB8-59A7-44BA-B28C-57A91CCD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA1E444-B9CE-48CF-BEA2-5A39D0641483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D166F248-CB7B-4C71-9A54-355CED04F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C3582B-9218-4464-B944-29DD47D4FC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA169C5-66C2-4BA6-9515-2C1EF2D2B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07023EC-3119-4D08-AB90-3CBF534B1B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038976",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-8390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-8390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow remote attackers to inject arbitrary web script or HTML by uploading and attaching a crafted photo to a Card."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la app de Trello para versiones anteriores a la 4.0.8 para iOS que podría permitir que los atacantes remotos inyecten scripts web o HTML arbitrarios subiendo y adjuntando una imagen especialmente manipulada a una tarjeta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trello:trello:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "6D2B1224-3E16-47E4-97B2-9C3DD88D0A21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/227853",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/227853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades ruta de servicio sin entrecomillar en Mobile Broadband Driver Package (MBDP) de Sierra Wireless Windows con ID de compilación menor a 4657, permite a los usuarios locales iniciar procesos con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sierrawireless:sierra_wireless_em7345_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982BA736-3802-4A63-8077-3E3CB43219E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sierrawireless:sierra_wireless_em7455_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1F9701-1C0E-435C-9C1A-77D15FF15166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sierrawireless:sierra_wireless_location_sensor_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25297B93-3B46-4242-AB2A-CBA8F634446E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.lenovo.com/us/en/product_security/LEN-12739",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.lenovo.com/us/en/product_security/LEN-12739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la interfaz web de gestión en Palo Alto Networks PAN-OS en sus versiones anteriores a la 6.1.18, todas las 7.x antes de la 7.0.16, todas las 7.1.x antes de la 7.1.11 y todas las 8.x antes de la 8.0.3 permite a los atacantes remotos que inyecten scripts web o HTML arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.17",
            "matchCriteriaId" : "460EF266-5397-4FB9-B4C3-BECB2FB12AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAF08A-5478-4942-8CC0-0F267F464684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033CDBB8-59A7-44BA-B28C-57A91CCD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA1E444-B9CE-48CF-BEA2-5A39D0641483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D166F248-CB7B-4C71-9A54-355CED04F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C3582B-9218-4464-B944-29DD47D4FC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA169C5-66C2-4BA6-9515-2C1EF2D2B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07023EC-3119-4D08-AB90-3CBF534B1B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99902",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038974",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-9459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-9459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la interfaz externa de GlobalProtect en Palo Alto Networks PAN-OS en sus versiones anteriores a la 6.1.18, todas las 7.x antes de la 7.0.16, todas las 7.1.x antes de la 7.1.11 y todas las 8.x antes de la 8.0.3 permite a los atacantes remotos que inyecten scripts web o HTML arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.17",
            "matchCriteriaId" : "460EF266-5397-4FB9-B4C3-BECB2FB12AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAF08A-5478-4942-8CC0-0F267F464684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033CDBB8-59A7-44BA-B28C-57A91CCD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA1E444-B9CE-48CF-BEA2-5A39D0641483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D166F248-CB7B-4C71-9A54-355CED04F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA169C5-66C2-4BA6-9515-2C1EF2D2B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07023EC-3119-4D08-AB90-3CBF534B1B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99907",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038975",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-9467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-9467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process."
      }, {
        "lang" : "es",
        "value" : "Se podría enviar una llamada IOCTL especialmente manipulada al controlador rzpnk.sys en Razer Synapse 2.20.15.1104 que se reenviaría a ZwOpenProcess, permitiendo que se abra un manipulador para un proceso arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razer:synapse:2.20.15.1104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39895E5B-9289-4E0F-8ADC-5E8EFDE8DAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://warroom.securestate.com/cve-2017-9769/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42368/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://warroom.securestate.com/cve-2017-9769/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42368/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-02T19:29:01.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read operation to occur due to a field within the IOCTL data being used as a length."
      }, {
        "lang" : "es",
        "value" : "Se podría enviar una llamada IOCTL especialmente manipulada al controlador rzpnk.sys en Razer Synapse para que realice una operación de lectura inadecuada al haber un campo en los datos de la llamada IOCTL que se utiliza como un valor de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razerzone:razer_synapse:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EABE2453-E4AC-4A5D-A34A-2F3FAA991293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://warroom.securestate.com/cve-2017-9770/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://warroom.securestate.com/cve-2017-9770/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11383",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL en Trend Micro Control Manager versión 6.0, causa una ejecución de código remota al ejecutar el código de operación 0x1b07 debido a una falta de comprobación de entrada de usuario apropiada en la biblioteca cmdHandlerTVCSCommander.dll. Anteriormente ZDI-CAN-4560."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-493",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11384",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL en Trend Micro Control Manager versión 6.0, causa una ejecución de código remota al ejecutar el código de operación 0x3b21 debido a una falta de comprobación de entrada de usuario apropiada en la biblioteca mdHandlerLicenseManager.dll. Anteriormente ZDI-CAN-4561."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-494",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11385",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Trend Micro Control Manager 6.0 permite la ejecución de código remoto cuando se ejecuta opcode 0x6b1b por no haber una validación de los datos de entrada del usuario correcta en cmdHandlerStatusMonitor.dll. Anteriormente esta vulnerabilidad tenía el código ZDI-CAN-4545."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-495",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11386",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Trend Micro Control Manager 6.0 permite la ejecución de código remoto cuando se ejecuta opcode 0x4707 por no haber una validación de los datos de entrada del usuario correcta en cmdHandlerNewReportScheduler.dll. Anteriormente esta vulnerabilidad tenía el código ZDI-CAN-4549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-496",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11387",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en Trend Micro Control Manager 6.0 podría permitir que se divulgue información cuando la validación de la autenticación no se realiza para la funcionalidad que puede cambiar el nivel de registro de depuración. Anteriormente esta vulnerabilidad tenía el código ZDI-CAN-4512."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-497",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11388",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Trend Micro Control Manager 6.0 permite que se ejecute código remoto cuando RestfulServiceUtility.NET.dll no valida correctamente los strings proporcionados por el usuario antes de construir las consultas SQL. Anteriormente esta vulnerabilidad tenía los códigos ZDI-CAN-4639 y ZDI-CAN-4638."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-498",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-499",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11389",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory. Formerly ZDI-CAN-4684."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Directory Traversal en Trend Micro Control Manager 6.0 que permite que se ejecute código remoto por atacantes capaces de ubicar archivos arbitrarios en un directorio expuesto en Internet. Anteriormente esta vulnerabilidad tenía el código ZDI-CAN-4684."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11390",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-02T21:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-4706."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de procesamiento de entidades XML externas (XXE) en Trend Micro Control Manager 6.0 que, de ser explotado, podría provocar que se fugue información. Anteriormente esta vulnerabilidad tenía el código ZDI-CAN-4706."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7E3779-69E4-46AB-94E3-4A81E35A5194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-501",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-03T08:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a certificate. This allows attackers with write access to that partition to disable signature validation."
      }, {
        "lang" : "es",
        "value" : "El Primary Bootloader (PBL) de OnePlus 2 no valida la partición SBL1 antes de ejecutarla, aunque contiene un certificado. Esto permite que atacantes con acceso de escritura en esa partición deshabiliten la validación de firma."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:primary_bootloader:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B47FF6-644D-451A-8980-2594438BFD90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B048C-6522-41A7-9DAB-834FBFCA3C00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://alephsecurity.com/vulns/aleph-2017026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-03T08:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) persistente en el SSID de dispositivos wifi cercanos en routers Technicolor TC7337, versión 08.89.17.20.00 permite que un atacante provoque envenenamiento de DNS y robe credenciales del router."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:technicolor:tc7337_firmware:08.89.17.20.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268292CB-1160-4654-A0DB-BC23A5B9F1F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:technicolor:tc7337:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77B06D8-2095-47E9-9021-F8ABE67EBAED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42427/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-03T08:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted packet."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en ioquake3 anterior a 2017-08-02 permite que atacantes remotos provoquen una denegación de servicio (caída de la aplicación) o, posiblemente, causen otro tipo de impacto utilizando un paquete manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ioquake3:ioquake3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-07-31",
            "matchCriteriaId" : "1ED00225-517F-41A4-8885-5D9C92674425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/d2b1d124d4055c2fcbe5126863487c52fd58cca1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ioquake/ioq3/commit/d2b1d124d4055c2fcbe5126863487c52fd58cca1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-03T08:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences."
      }, {
        "lang" : "es",
        "value" : "Nitro Pro 11.0.3.173 permite que atacantes remotos ejecuten código arbitrario mediante las llamadas saveAs y launchURL con secuencias de salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonitro:nitro_pro:11.0.3.173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFA95E4-9780-4B0A-9996-95A257C8DE99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://srcincite.io/advisories/src-2017-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42418/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://srcincite.io/advisories/src-2017-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42418/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11382",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-03T15:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Trend Micro Deep Discovery Email Inspector, versión 2.5.1 permite que atacantes remotos eliminen archivos arbitrarios en instalaciones vulnerables, por lo que se deshabilita el servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_email_inspector:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED6A9D3-8304-466C-B57E-27A59D847C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100076",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-503",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116750",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1116750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11391",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-03T15:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the \"t\" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos proxy en Trend Micro InterScan Messaging Virtual Appliance 9.0 y 9.1 permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables. Este fallo específico puede explotarse parseando el parámetro \"t\" en modMCSS Proxy. Anteriormente, esta vulnerabilidad se denominaba ZDI-CAN-4744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E37F502-38BE-432E-B897-C57C9A39B2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEA17C4-77A1-4C6B-8FDC-455B3FAFD90E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100075",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-502",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117723",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11392",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-03T15:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the \"T\" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos proxy en Trend Micro InterScan Messaging Virtual Appliance 9.0 y 9.1 permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables. Este fallo específico puede explotarse parseando el parámetro \"T\" en modTMCSS Proxy. Anteriormente, esta vulnerabilidad se denominaba ZDI-CAN-4745."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E37F502-38BE-432E-B897-C57C9A39B2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEA17C4-77A1-4C6B-8FDC-455B3FAFD90E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100075",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-504",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117723",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11393",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-03T15:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección de comandos proxy en Trend Micro OfficeScan 11 y XG (12) permite que atacantes remotos puedan ejecutar código arbitrario en instalaciones vulnerables. Este error específico se puede explotar parseando el parámetro tr en Proxy.php. Anteriormente ZDI-CAN-4543."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100127",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-522",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117769",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11394",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-08-03T15:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección de comandos proxy en Trend Micro OfficeScan 11 and XG (12) permite que atacantes remotos puedan ejecutar código arbitrario en instalaciones vulnerables. Este fallo específico se puede explotar parseando el parámetro T en Proxy.php. Anteriormente ZDI-CAN-4544."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100130",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-521",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117769",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42971/",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42971/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1199",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-03T15:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674."
      }, {
        "lang" : "es",
        "value" : "Las versiones 10.0, 11.0, 11.3, 11.4, 11.5 y 11.6 de IBM InfoSphere Master Data Management Server son vulnerables a ataques de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios introducir código JavaScript arbitrario en la interfaz de usuario de la web, lo que altera la funcionalidad prevista y puede dar lugar a la revelación de credenciales en una sesión fiable. IBM X-Force ID: 123674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B176246A-FFAD-46E5-ACED-144925A35CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54ABD5B3-167A-403E-AF24-4648ED141EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD87A187-8144-4862-95B5-4431B14939CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE14EFD3-EE7A-4115-8ACB-E84C2C9D7C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245897F6-4514-4311-8842-0E7CA4D39F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management_server:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70161811-DB7E-4675-BF8B-CEEA38A2C69A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006618",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100129",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123674",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-03T15:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll."
      }, {
        "lang" : "es",
        "value" : "Format Factory 4.1.0 tiene una vulnerabilidad de secuestro de DLL puesto que se utiliza una ruta de búsqueda que no es de confianza para buscar msimg32.dll, WindowsCodecs.dll y dwmapi.dll."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcfreetime:format_factory:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1CC2E0-B7E6-4666-97BB-6F460A63407C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kth.ninja/2017/08/format-factory-dll-hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kth.ninja/2017/08/format-factory-dll-hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1327",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-03T15:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062."
      }, {
        "lang" : "es",
        "value" : "IBM iNotes 8.5 y 9.0 es vulnerable a Cross-Site Scripting (XSS). La vulnerabilidad permite a los usuarios que incrusten código JavaScript arbitrario en la interfaz web de usuario, alterando la funcionalidad y pudiendo provocar que se revelen las credenciales en una sesión abierta de confianza. IBM X-Force ID: 126062."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE6AAC-7B25-40EA-9D25-128D743F18A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B097CA3C-2ABA-489E-86C1-EEF891AF7094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B100002-E6E8-4FB8-A1A8-02BFBB37A126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975E8316-D4C3-40B7-8E57-E871D0327271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003664",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100139",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1504",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-03T15:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable AES password encryption. IBM X-Force ID: 129579."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server en su versión 9.0.0.4 podría ofrecer una seguridad más débil después de usar el comando PasswordUtil para activar el cifrado de contraseñas AES. IBM X-Force ID: 129579."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C60195-38B4-4BBC-85A3-BD0D9314723B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006803",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100137",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T00:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-5 sufre fugas de memoria en las funciones parse8BIMW y format8BIM en coders/meta.c relacionadas con la función WriteImage en MagickCore/constitute.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0DB591-61B5-4E3E-84F6-25FE4B32589B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/643",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T09:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Shadow anteriores a la 4.5, la herramienta newusers podría utilizarse para manipular estructuras de datos internas de formas no permitidas por los desarrolladores. Las entradas manipuladas podrían llevar a caídas (con un desbordamiento de búfer u otros tipos de corrupción de memoria) o a otro tipo de comportamiento sin especificar. Esto provoca un límite de privilegios en, por ejemplo, ciertos entornos de hospedaje web en los que un Panel de Control permite que una cuenta de usuario sin privilegios cree subcuentas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadow_project:shadow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "47C73BF7-91C6-44B6-B55B-4477B6F66C04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756630",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1266675",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadow-maint/shadow/commit/954e3d2e7113e9ac06632aee3c69b8d818cc8952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-16",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1266675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadow-maint/shadow/commit/954e3d2e7113e9ac06632aee3c69b8d818cc8952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T09:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2. A wrong if statement in the varnishd source code means that particular invalid requests from the client can trigger an assert, related to an Integer Overflow. This causes the varnishd worker process to abort and restart, losing the cached contents in the process. An attacker can therefore crash the varnishd worker process on demand and effectively keep it from serving content - a Denial-of-Service attack. The specific source-code filename containing the incorrect statement varies across releases."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Varnish HTTP Cache 4.0.1 a 4.0.4; 4.1.0 a 4.1.7; 5.0.0; y 5.1.0 a 5.1.2. Una instrucción if incorrecta en el código fuente de varnishd significa que ciertas peticiones no válidas formuladas por el cliente pueden desembocar en una aserción, relacionada con un desbordamiento de enteros. Esto provoca que el proceso de trabajo varnishd se anule y se reinicie, perdiendo todos los contenidos de la caché en el proceso. Por lo tanto, un atacante puede bloquear el proceso de trabajo varnishd cuando quiera y evitar de forma efectiva que envíen contenidos (ataque por Denegación de Servicio). El nombre de archivo de código fuente específico que contiene la instrucción errónea varía según las versiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:4.0.2:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCFB5A3-F97D-4C62-9324-30B5C6B737A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:4.0.3:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "93E1B7BD-3071-46AF-9470-BB6FB9F29A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:4.0.3:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D22D35-0EBB-4B15-B343-1BFE0E8F1491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:4.0.3:rc-2-proper:*:*:*:*:*:*",
            "matchCriteriaId" : "347CC238-B8C6-4A4A-9994-1A79FD48965F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:4.0.3:rc-3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4139146-80E5-409F-8746-E1766F18F26C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791C39CC-4641-4560-96CF-B919B856F8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD46E760-9422-4DBD-A2A1-5A0B81D6A579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B533AC-733A-44C1-B43D-349A22AF0C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE32E00-E8AD-4DCB-8EBC-B744E30E7C34"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8410C957-DCFF-4695-ABDB-A567661543BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA866DC-4D72-40F4-88DD-388EC098AAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.0:technology_preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "50361AF7-7F0D-42E0-8B0B-D896A307504A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6719C47D-51F1-403D-A21A-5DF3AF9208EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "88E88E88-8B1D-4F4C-99E1-785A6F1A318C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D62B8D4C-49AA-41C0-A4AB-141E0715048D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C750BB32-7A70-4457-9DA5-E170BC1519A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "379B6419-098E-4426-BC21-A5E2C5702497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E97F4BA3-D045-4015-8374-D3E5A3BE55ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A680B064-4AC8-4787-A9F9-EA438312BC1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.3:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "057BB869-6C8D-4A11-AFD7-DFEA82B269FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.3:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D1EEDC15-4C82-4BE3-BF90-EFF62A40B21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3875CE-E365-4D48-856A-DF15C185CC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.4:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F13B2C-A678-4179-AA21-5AA8EC6F7058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.4:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "11740572-89AB-458D-939D-325B6F64B5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.4:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "01C7216D-5EC7-42C2-9761-A641EC26AD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32267919-FA63-4495-9D6A-C2339266CB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9CE595-A13A-4256-A537-AD324A53CD84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "30DC86C5-93F6-4F8E-B43D-FB699ED7E78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ACE623F-E5A0-4983-ADCA-407FED2DD0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-software:varnish_cache:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F216A-7F1E-4E56-A5CA-563A7F7BDD93"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8171E888-A6FA-41E8-89AC-01AD6FFEB82F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0CEE96-C295-4E33-8957-664AF93712BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5726EF-CEB3-48C3-8A70-8B677C584F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9170FD-AD29-4824-BDDE-B98BD9F44E2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477222",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1051917",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/varnishcache/varnish-cache/issues/2379",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00186.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.varnish-cache.org/security/VSV00001.html#vsv00001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1051917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/varnishcache/varnish-cache/issues/2379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00186.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.varnish-cache.org/security/VSV00001.html#vsv00001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T09:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function."
      }, {
        "lang" : "es",
        "value" : "La función ProcessMSLScript en coders/msl.c de ImageMagick anterior a la versión 6.9.9-5 y 7.x anterior a 7.0.6-5 permite que atacantes remotos provoquen una denegación de servicio (filtrado de memoria) mediante un archivo manipulado, relacionado con la función WriteMSLImage."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-4",
            "matchCriteriaId" : "D6A41663-3042-4B23-A030-542E6E3F2951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5232BD2F-4F7B-483C-B605-D7EBD4C227A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e793eb203e5e0f91f5037aed6585e81b1e27395b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/636",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e793eb203e5e0f91f5037aed6585e81b1e27395b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-1 en la función ReadWMFImage en coders/wmf.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio en CloneDrawInfo en draw.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/544",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.6-1 en la función ReadMIFFImage en coders/miff.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/545",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.6-1 en la función ReadMPCImage en coders/mpc.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/546",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de uso después de liberación de memoria (use-after-free) en ImageMagick 7.0.6-1 en la función ReadWMFImage en coders/wmf.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/555",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.6-1, en la función ReadPCXImage en coders/pcx.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/536",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to ResizeMagickMemory in memory.c."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-1 en la función ReadPESImage en coders/pes.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio relacionada con ResizeMagickMemory en memory.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/548",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de falta de comprobación NULL en ImageMagick 7.0.6-1, en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (fallo de aserción) en DestroyImageInfo en image.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/547",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T10:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.6-1, en la función ReadSUNImage en coders/sun.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/543",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T13:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos AXIS 2100 en su versión 2.43 tienen una vulnerabilidad de tipo Cross-Site Scripting (XSS) a través de la URI, probablemente relacionada con admin/admin.shtml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:2100_network_camera_firmware:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722C1F31-3F00-4FA1-B70C-BA3FBB0D02BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:2100_network_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5525-00CD-4ED8-9C62-B027D1D4F730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143657/Axis-2100-Network-Camera-2.43-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143657/Axis-2100-Network-Camera-2.43-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T14:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\\Dashlane directory."
      }, {
        "lang" : "es",
        "value" : "Dashlane podría permitir que los usuarios locales consigan privilegios mediante la colocación de un troyano WINHTTP.dll en el directorio %APPDATA%\\Dashlane."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dashlane:dashlane:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "FA79039F-7B92-427B-83BC-C3851E3ADB53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3357",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10949",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-08-04T15:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en Dell Storage Manager 2016 R2.1 da lugar a una divulgación de información cuando el método doGet de la clase EmWebsiteServlet no valida correctamente la ruta ofrecida por el usuario y la utiliza en operaciones de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:storage_manager_2016:r2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3875384E-E153-4430-A792-9351651C65CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://topics-cdn.dell.com/pdf/dell-compellent-sc8000_release%20notes24_en-us.pdf",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100138",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-523",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://topics-cdn.dell.com/pdf/dell-compellent-sc8000_release%20notes24_en-us.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c."
      }, {
        "lang" : "es",
        "value" : "La función bfd_cache_close en bfd/cache.c de la librería Binary File Descriptor (BFD), también llamada libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen un uso de memoria dinámica antes de liberación y, probablemente, logren ejecutar código a través de un archivo anidado manipulado. Esto ocurre debido a que se llama a funciones incorrectas mientras se intenta liberar memoria. Este problema puede afrontarse mejorando la validación de entradas en la función bfd_generic_archive_p, en bfd/archive.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21787",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_vms_save_sized_string en vms-misc.c en la librería Binary File Descriptor (BFD) (también conocida como libbfd), tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo vms manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file."
      }, {
        "lang" : "es",
        "value" : "La función alpha_vms_object_p en bfd/vms-alpha.c de la librería Binary File Descriptor (BFD), también llamada libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una escritura de memoria dinámica fuera de límites y, probablemente, logren ejecutar código a través de un archivo vms alpha manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_xcoff_read_ar_hdr en bfd/coff-rs6000.c y bfd/coff64-rs6000.c en la librería Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de pila fuera de límites mediante un archivo de imagen COFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21786",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file."
      }, {
        "lang" : "es",
        "value" : "La función bfd_mach_o_i386_canonicalize_one_reloc en bfd/mach-o-i386.c en la librería Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo mach-o manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_vms_slurp_eeom en libbfd.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo vms alpha manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_vms_slurp_egsd en bfd/vms-alpha.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria arbitraria mediante un archivo vms alpha manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file."
      }, {
        "lang" : "es",
        "value" : "La función evax_bfd_print_emh en vms-alpha.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo vms alpha manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file."
      }, {
        "lang" : "es",
        "value" : "La función read_symbol_stabs_debugging_info en rddbg.c en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo binario manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función bfd_make_section_with_flags en section.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una desreferencia del puntero NULL mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file."
      }, {
        "lang" : "es",
        "value" : "La función nlm_swap_auxiliary_headers_in en bfd/nlmcode.h en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo nlm manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T15:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file."
      }, {
        "lang" : "es",
        "value" : "La función bfd_mach_o_read_symtab_strtab en bfd/mach-o.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites y, probablemente, logren ejecutar código a través de un archivo mach-o manipulado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.29",
            "matchCriteriaId" : "D1CD99BF-7AA0-42A4-B867-67F6DBA9AA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10815",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when \"Remote Control\" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent."
      }, {
        "lang" : "es",
        "value" : "MaLion para Windows versión 5.2.1 y anteriores (solo cuando se instala \"Remote Control\") y MaLion para Mac versión 4.0.1 hasta 5.2.1 (solo cuando se instala \"Remote Control\") permiten a los atacantes remotos omitir la autenticación para ejecutar comandos u operaciones arbitrarias en el Agente Terminal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:mac_os_x:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "4B1C3A9B-1A0C-4E71-9532-4F6026CC935B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "BAB50670-B628-4109-8CB8-AC1B9A6071F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10816",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en MaLion para Windows y Mac en sus versiones 5.0.0 a 5.2.1 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante Relay Service Server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:macos:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "30AAD2E0-65ED-4CB1-A6B6-FB32E6494467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "BAB50670-B628-4109-8CB8-AC1B9A6071F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10817",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server."
      }, {
        "lang" : "es",
        "value" : "MaLion para Windows y Mac en sus versiones 5.0.0 a 5.2.1 permite que atacantes remotos omitan la autenticación para modificar la configuración en Relay Service Server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:macos:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "30AAD2E0-65ED-4CB1-A6B6-FB32E6494467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "BAB50670-B628-4109-8CB8-AC1B9A6071F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10818",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service."
      }, {
        "lang" : "es",
        "value" : "MaLion para Windows y Mac de las versiones 3.2.1 a 5.2.1 utiliza una clave criptográfica embebida que podría permitir que un atacante modifique la configuración de conexión de Terminal Agent y suplante el Relay Service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "3.2.1",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "A83690AC-603D-450B-8846-4B27C9E5B1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "3.2.1",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "E9EBA824-4D62-41DD-A541-27D8E50957F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10819",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication."
      }, {
        "lang" : "es",
        "value" : "MaLion para Mac en sus versiones 4.3.0 a 5.2.1 no valida certificados correctamente, lo que podría permitir que un atacante escuche una comunicación cifrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intercom:malion:*:*:*:*:*:macos:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "30AAD2E0-65ED-4CB1-A6B6-FB32E6494467"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.intercom.co.jp/information/2017/0801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91587298/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10820",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el instalador de IP Messenger para Windows en su versión 4.60 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipa:ip_messenger:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "4.60",
            "matchCriteriaId" : "F6852E38-385E-4467-87D1-06977445F2C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ipmsg.org/ipmsg_dll_vulnerability.html.en",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN86724730/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ipmsg.org/ipmsg_dll_vulnerability.html.en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN86724730/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1331",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-04T16:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126233."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2.0.3 y 3.0.0 de IBM Content Navigator son vulnerables a ataques de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario de la web, lo que altera la funcionalidad prevista y puede dar lugar a la revelación de credenciales en una sesión fiable. IBM X-Force ID: 126233."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49CC892-16E8-43C7-9DA4-889C6DE83FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BE9068-FF24-470D-B852-7338D8990285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44863E7C-4A2B-471A-8411-1CD7A38E7300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA906C7B-FD7E-4F7B-AFB8-645EBCB3AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC6DC-5F0D-46E8-85F9-BC9EA5244D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003928",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100120",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126233",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2221",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-04T16:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el instalador de Baidu IME Ver3.6.1.6 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baidu:baidu_ime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.1.6",
            "matchCriteriaId" : "B4A35CE8-3C28-47E7-AF05-0D2814D092D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN17788774/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN17788774/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T19:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función find_option en option.cc en Ledger 3.1.1 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en pila y caída de aplicación) o, probablemente, provocar cualquier otro tipo de impacto no especificado utilizando un archivo modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledger-cli:ledger:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876C55BA-ED06-46C0-874C-63816CF695E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.ledger-cli.org/show_bug.cgi?id=1222",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.ledger-cli.org/show_bug.cgi?id=1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-04T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ledger::parse_date_mask_routine en times.cc en Ledger 3.1.1 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en pila y caída de aplicación) o, probablemente, provocar cualquier otro tipo de impacto utilizando un archivo modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledger-cli:ledger:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876C55BA-ED06-46C0-874C-63816CF695E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.ledger-cli.org/show_bug.cgi?id=1224",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.ledger-cli.org/show_bug.cgi?id=1224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'admin' directory (as recommended in the \"Post-installation and upgrade tasks\" section of the MantisBT Admin Guide), and the MySQL client has a local_infile setting enabled (in php.ini mysqli.allow_local_infile, or the MySQL client config file, depending on the PHP setup), an attacker may take advantage of MySQL's \"connect file read\" feature to remotely access files on the MantisBT server."
      }, {
        "lang" : "es",
        "value" : "Si tras la correcta instalación de MantisBT en su versión 2.5.2 en MySQL/MariaDB el administrador no elimina el directorio \"admin\" (tal y como se recomienda en la sección \"Post-installation and upgrade tasks\" de la MantisBT Admin Guide) y el cliente MySQL tiene una configuración local_infile habilitada (en php.ini mysqli.allow_local_infile o el archivo de configuración del cliente MySQL, dependiendo de la configuración de PHP), un atacante podría aprovecharse de la funcionalidad \"connect file read\" de MySQL para acceder de forma remota a los archivos del servidor de MantisBT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146401B2-FDE4-4ACC-9CFA-E7BEE11D1FCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2177DDD2-8830-4838-9945-0368DBDD1815"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA450156-3EEF-4F22-8F28-2E0A55C81FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/08/04/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100142",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=23173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/04/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mantisbt.org/bugs/view.php?id=23173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file. This has resultant content forgery, cross site scripting, and unvalidated redirection issues."
      }, {
        "lang" : "es",
        "value" : "SocuSoft Flash Slideshow Maker Professional en su versión v5.20 (cuando se usa la configuración avanzada) tiene un parámetro HTTP xml_path que confía en las entradas proporcionadas por el usuario, además de un archivo de configuración XML no seguro. Esto da como resultado problemas de falsificación de contenido, Cross-Site Scripting y cuestiones de redirección sin validar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socusoft:flash_slideshow_maker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.20",
            "matchCriteriaId" : "534D0800-1C0A-497F-809A-EB786E0E5982"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143542/Flash-Slideshow-Maker-Professional-XSS-Content-Forgery-Redirect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143542/Flash-Slideshow-Maker-Professional-XSS-Content-Forgery-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7533",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-05T16:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en la implementación de fsnotify en el kernel de Linux hasta la versión 4.12.4, permite a los usuarios locales alcanzar privilegios o causar una denegación de servicio (corrupción de memoria) por medio de una aplicación creada que aprovecha la ejecución simultánea de las funciones inotify_handle_event y vfs_rename."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.14",
            "versionEndExcluding" : "3.16.47",
            "matchCriteriaId" : "92869CCB-E9ED-4079-8754-0E8BFFC7A607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.64",
            "matchCriteriaId" : "226BE74E-0154-4F65-B5DC-E4C7AA03D270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.4.80",
            "matchCriteriaId" : "13528C00-9A5F-4D0D-9BA4-FE4613F5C0AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.41",
            "matchCriteriaId" : "26275761-EE66-4513-A2C7-DEB0432414CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.5",
            "matchCriteriaId" : "17029DFF-1DBB-4776-BC98-7B7D48008881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/03/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/27/7",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100123",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2473",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2585",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468283",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9755753/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9755757/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/03/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/27/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1468283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9755753/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9755757/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica en la función psf_binheader_writef en common.c en la versión 1.0.28 de libsndfile permite que atacantes remotos provoquen una denegación de servicio (caída de la aplicación) o, posiblemente, causar cualquier otro tipo de impacto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erikd/libsndfile/issues/292",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erikd/libsndfile/issues/292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the database port of Sunny Explorer, the application can be crashed. NOTE: the vendor reports that the maximum possible damage is a communication failure. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA** Se ha descubierto un problema en productos SMA Solar Technology. La aplicación puede bloquearse mediante el envío de datos sin sentido o configurando una sesión TELNET al puerto de la base de datos de Sunny Explorer. NOTA: El proveedor informa de que el máximo daño posible es un fallo de comunicación. Además, sólo Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30 podrían verse afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sma:sunny_explorer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6293DBA-5747-4315-A394-ECE32BD64C1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to be default or similar across installations installed by the same company (but are sometimes changed). Hidden user accounts have (at least in some cases, though more research is required to test this for all hidden user accounts) a fixed password for all devices; it can never be changed by a user. Other vulnerabilities exist that allow an attacker to get the passwords of these hidden user accounts. NOTE: the vendor reports that it has no influence on the allocation of passwords, and that global hardcoded master passwords do not exist. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se ha descubierto un problema de gestión de contraseñas incorrecto en los productos de SMA Solar Technology. Existen contraseñas predeterminadas que rara vez se modifican. Las contraseñas de usuario casi siempre serán las predeterminadas. Se espera que las contraseñas de los instaladores sean predeterminadas o similares en todas las instalaciones realizadas por la misma empresa (pero a veces se cambian). Las cuentas de usuario ocultas tienen (al menos en algunos casos, aunque se requiere más investigación para probar esto para todas las cuentas de usuario ocultas) una contraseña fija para todos los dispositivos; nunca puede ser cambiada por un usuario. Existen otras vulnerabilidades que permiten a un atacante obtener las contraseñas de estas cuentas de usuario ocultas. NOTA: el proveedor informa de que no tiene ninguna influencia en la asignación de contraseñas y de que no existen contraseñas maestras globales con código duro. Además, sólo Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30 podrían verse afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of characters. NOTE: the vendor reports that the 12-character limit provides \"a very high security standard.\" Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se descubrió un problema en los productos de SMA Solar Technology. Todos los inversores tienen una política de contraseñas muy débil para el usuario y el instalador. No se establecen requisitos de complejidad ni de longitud. Además, las contraseñas fuertes son imposibles de usar debido a un máximo de 12 caracteres y un conjunto limitado de caracteres. NOTA: el proveedor informa que el límite de 12 caracteres proporciona \"un estándar de seguridad muy alto\". Además, sólo Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30 podrían verse afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the overall device. NOTE: the vendor reports that exploitation likelihood is low because these packets are usually sent only once during installation. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se descubrió un problema en los productos de SMA Solar Technology. Al realizar sniffing de paquetes específicos en el host local, se pueden obtener contraseñas de texto plano a medida que el usuario las escribe en Sunny Explorer. Estas contraseñas se pueden utilizar para comprometer el dispositivo en su conjunto. NOTA: el proveedor informa que la probabilidad de explotación es baja porque estos paquetes se envían normalmente sólo una vez durante la instalación. Además, sólo Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30 podrían verse afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system. This system uses predictable codes, and a single Grid Guard code can be used on any SMA inverter. Any such code, when combined with the installer account, allows changing very sensitive parameters. NOTE: the vendor reports that Grid Guard is not an authentication feature; it is only a tracing feature. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se descubrió un problema en los productos de SMA Solar Technology. Un sistema de autenticación secundario está disponible para los instaladores llamado sistema Grid Guard. Este sistema utiliza códigos predecibles, y un único código Grid Guard puede utilizarse en cualquier inversor SMA. Cualquier código de este tipo, cuando se combina con la cuenta del instalador, permite cambiar parámetros muy sensibles. NOTA: el proveedor informa que Grid Guard no es una función de autenticación; es sólo una función de rastreo. Además, sólo Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30 podrían verse afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are \"encrypted\" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** Se ha descubierto un problema en productos SMA Solar Technology. Las contraseñas interceptadas que se encuentran en de la comunicación SMAdata2+ se pueden descifrar con suma facilidad. Estas contraseñas se \"cifran\" empleando un algoritmo de cifrado muy sencillo. Esto permite que un atacante encuentre las contraseñas en texto plano y se autentique en el dispositivo. NOTA: El vendedor informa que únicamente podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be replayed, injected, or used for a man in the middle session. All functionalities available in Sunny Explorer can effectively be done from anywhere within the network as long as an attacker gets the packet setup correctly. This includes the authentication process for all (including hidden) access levels and the changing of settings in accordance with the gained access rights. Furthermore, because the SMAdata2+ communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** Se ha descubierto un problema en productos SMA Solar Technology. El protocolo de comunicación SMAdata2+ no emplea correctamente la autenticación con cifrado, por lo que es vulnerable a ataques Man-in-the-Middle, inyección de paquetes y ataques de replay. Cualquier cambio de configuración, paquete de autenticación, paquete de rastreo, etc., puede ser reproducido, inyectado o empleado para un Man-in-the-Middle. Todas las funcionalidades disponibles en Sunny Explorer pueden realizarse correctamente desde cualquier parte de la red siempre y cuando el atacante configure correctamente el paquete. Esto incluye el proceso de autenticación para todos los niveles de acceso (incluyendo aquellos que están ocultos) y el cambio de configuraciones según lo establecido por los derechos de acceso adquiridos. Además, debido al hecho de que el canal de comunicación SMAdata2+ no está cifrado, un atacante que entienda el protocolo será capaz de escuchar comunicaciones. NOTA: La posición del vendedor que la autenticación con cifrado no es requerida en una red aislada. También, únicamente podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in further attacks (such as a brute force attack) as one now knows exactly which users exist and which do not. NOTE: the vendor's position is that this \"is not a security gap per se.\" Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** Se ha descubierto un problema en productos SMA Solar Technology. Se pueden determinar cuáles son las cuentas de usuario activas e inactivas mediante el envío de paquetes manipulados a un inversor y observando la respuesta. Esto sirve de ayuda en ataques posteriores (como los ataques de fuerza bruta), ya que el atacante puede conocer exactamente qué usuarios existen y cuáles no. NOTA: La posición del fabricante es que \"no es una brecha de seguridad per se.\" También, únicamente podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt the password for REGISTER requests. This hashing algorithm can be cracked relatively easily. An attacker will likely be able to crack the password using offline crackers. This cracked password can then be used to register at the SMA servers. NOTE: the vendor's position is that \"we consider the probability of the success of such manipulation to be extremely low.\" Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** Se ha descubierto un problema en productos SMA Solar Technology. Los inversores emplean un algoritmo de hash débil para cifrar la contraseña de peticiones REGISTER. Este algoritmo de hash se puede romper con relativa facilidad. Lo más probable es que un atacante sea capaz de descubrir la contraseña empleando crackers offline. Esta contraseña descubierta podrá emplearse para registrarse en los servidores SMA. NOTA: La posición del fabricante es que \"nosotros consideramos que la probabilidad de algún tipo de manipulación exitosa es extremadamente baja.\" También, únicamente podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to create a custom firmware version that is accepted by the inverter, the inverter is compromised completely. This allows the attacker to do nearly anything: for example, giving access to the local OS, creating a botnet, using the inverters as a stepping stone into companies, etc. NOTE: the vendor reports that this attack has always been blocked by \"a final integrity and compatibility check.\" Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se ha descubierto un problema en productos SMA Solar Technology. Un atacante puede emplear Sunny Explorer o el protocolo de red SMAdata2+ para actualizar el dispositivo sin tener que autenticarse. Si un atacante es capaz de crear una versión personalizada del firmware que sea aceptada por el inversor, dicho inversor se volverá completamente vulnerable. Esto le permite al atacante hacer prácticamente cualquier cosa: dar acceso al sistema operativo local, crear una botnet, emplear los inversores como punto de entrada a una empresa, etc. NOTA: El vendedor informa que este ataque siempre ha sido bloqueado por \"una comprobación final de integridad y compatibilidad\". También, únicamente están potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to replay attacks, packet injection attacks, and man in the middle attacks. An attacker is able to successfully use SIP to communicate with the device from anywhere within the LAN. An attacker may use this to crash the device, stop it from communicating with the SMA servers, exploit known SIP vulnerabilities, or find sensitive information from the SIP communications. Furthermore, because the SIP communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. For example, passwords can be extracted. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se ha descubierto un problema en productos SMA Solar Technology. La implementación SIP no emplea correctamente la autenticación con encriptación: es vulnerable a ataques de replay, ataques de inyección de paquetes o ataques Man-in-the-Middle. Un atacante es capaz de emplear SIP con éxito para comunicarse con el dispositivo desde cualquier lugar de la red LAN. El atacante podría emplear esta vulnerabilidad para bloquear el dispositivo, hacer que deje de comunicarse con los servidores SMA, explotar vulnerabilidades SIP conocidas o encontrar información sensible en las comunicaciones SIP. Además, debido al hecho de que el canal de comunicación SIP no está cifrado, un atacante que entienda el protocolo será capaz de escuchar comunicaciones. Por ejemplo, se pueden extraer las contraseñas. NOTA: La posición del vendedor es que la auntenticación con cifrado no es requerida en una red aislada. También, únicamente podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug report, disclosing information regarding the application and allowing the attacker to create and save a .txt file with contents to his liking. An attacker may use this for information disclosure, or to write a file to normally unavailable locations on the local system. NOTE: the vendor reports that \"the information contained in the debug report is of marginal significance.\" Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se ha descubierto un problema en productos SMA Solar Technology. Cuando se inicia sesión en Sunny Explorer con una contraseña incorrecta, es posible crear un informe de depuración que contiene información relacionada con la aplicación y que permite que el atacante cree y guarde un archivo .txt con el contenido que estime oportuno. Un atacante podría emplear esta vulnerabilidad para divulgar información o para escribir un archivo en lugares normalmente inaccesibles del sistema local. NOTA: El fabricante reporta que \"la información contenida en el informe de depuración tiene una importancia menor\". También, solo podrían estar potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sma:sunny_explorer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6293DBA-5747-4315-A394-ECE32BD64C1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters (for example, issuing a POST request to change the user password). All Sunny Explorer settings available to the authenticated user are also available to the attacker. (In some cases, this also includes changing settings that the user has no access to.) This may result in complete compromise of the device. NOTE: the vendor reports that exploitation is unlikely because Sunny Explorer is used only rarely. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se ha descubierto un problema en productos SMA Solar Technology. Si un usuario está ejecutando Sunny Explorer y, al mismo tiempo, visita un host malicioso, se puede usar el cross-site request forgery para cambiar la configuración en los inversores (por ejemplo, lanzando una petición POST para cambiar la contraseña de usuario). Todos los ajustes de Sunny Explorer disponibles para un usuario autenticado también lo estarán para el atacante. (En algunos casos, esto también incluye la modificación de ajustes a los que el usuario no puede acceder). Esto podría dar como resultado un dispositivo completamente comprometido. NOTA: El fabricante informa que esta explotación es improbable porque Sunny Explorer se utiliza en raras ocasiones. También, solamente se encuentran potencialmente afectados Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sma:sunny_explorer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6293DBA-5747-4315-A394-ECE32BD64C1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T17:29:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se ha descubierto un problema en productos SMA Solar Technology. Un atacante puede cambiar la hora de la planta sin estar autenticado de ninguna forma. Esto cambia la hora del sistema, lo que podría afectar a las políticas de bloqueo y generadores de números aleatorios basados en marca de tiempo. Además, hace imposible confiar en las marcas de tiempo de los análisis de datos. NOTA: El fabricante reporta que es bastante irrelevante por que solo afecta a marcas de tiempo del log-entry, y por que la planta sería reiniciada via NTP. (Nunca se ha dado el caso en el que afectara la política de bloqueo o la generación de números aleatorios.) Además, solo Sunny Boy TLST-21 y TL-21 y Sunny Tripower TL-10 y TL-30 podrían estar potencialmente afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF135EE-B9B5-41B4-ADD5-A28EAAD794BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A72AD7-33EC-4B93-BF10-DB6DC78AFC00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA6E217-2C7E-485B-90DB-6B962C02DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E381975C-AC80-4797-9D60-21A8FEEBA71C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33CE8B-F38A-4E06-9888-E1C6FB2EF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_core1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A24A14C-E510-479F-86ED-050502912FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFE4BC8-80B8-4C16-B6B1-3458B54B61EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_15000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E930476-4BB4-44FB-94EF-B327B7016C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21E55C7-EF78-46DF-B221-0D16F76D16C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_20000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E14A85-4A8F-441B-B457-39A8CB114272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7210BF3C-EA34-4805-A596-9B818EE231F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_25000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58780AF-6A20-44FE-9627-7ED1965DC6D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37031D3-E12D-450C-9DAF-E57E70A179FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916D5DB-736B-4958-A62C-29F8DACFE4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB8A5FD-512F-48CE-B9DB-B61228178515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_12000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD72861-42E9-4DD0-A71F-91C327245A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BDD3FF-D9B4-473B-8495-D8EE7D236C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_tripower_60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513FDCE-0DB9-4A3C-BACC-636476BB47A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BA76D-0221-4820-855A-8647B70AF590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68A664-FB5B-466F-AB6D-0EB6C76E5EA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F089F6-9A2B-4D27-94A4-2B59683C044B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3600tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF17FB-7E59-4407-B9E5-02EE8329EE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004C609-A8C6-4A69-A9CA-670D28060948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0263729-F7F5-4F06-9845-432F248B0010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8305C0A5-CD69-42ED-94F8-A548997ECE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5000tl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C5BD9-4348-4E0C-9F76-2BDA1A5ADBFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABAC551-0937-4C35-B367-E082216973A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_1.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6499AD-A269-4D05-9562-975C59659563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE97058-71A8-4594-8D1C-44EED65137FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E999A43F-820D-4281-9393-C8641CFDCC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FB31D-3CC8-4506-976D-ED65B9CEC3BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE8CFE7-2C58-4C98-A806-6010ACAF0127"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA13E68-78D0-4EA3-9D1E-5E34E55EBFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_3.6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C472660-FAF7-48FB-9190-D85EB317197E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E830DAA-4072-48C8-B047-56CA7D61C48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_4.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024BC798-2EC6-404E-9B2A-32F661823474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A48910-3876-426B-AB95-0EA5F08D4883"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EF8258-E693-4E18-A7AC-F0A7C40F5211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C2345E-E79E-4AAA-AF19-1914F508F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A5EC9-69D7-452A-8667-A54D8B890A53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14616A98-3829-41DF-BB99-011A617FA45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_1000cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202672A-9402-4B55-95B2-0341BD216AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C43D9A-29EC-4AE0-99F4-5EE700905D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_800cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C685EA76-43AE-4354-9C07-122F4D070074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF640501-1D66-40B3-B473-B8844D7F8C62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_850cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3A2CAD-4435-418A-9380-2F5F6A60703F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788BEC5-7DE7-4CA7-9F1C-0F515FEC077E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_900cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB862CD2-BA9D-4C95-ABDE-2F6EC23C9C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D310BA4B-734C-41BF-BDAF-DCBFE26264AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_500cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60266D0B-6195-4737-A6EB-6B46B81E0616"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89052ECC-5760-4D13-B320-5860C22B52C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_630cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5CF00-8E95-48A7-94EC-6E98E77C998A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65922D8F-AF83-4DE5-AF8C-B64C27A99A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_720cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC865DBB-C763-4063-ADD9-0D230D91C591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8484D2-BA3E-4C87-A392-157B112D3222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_760cp_xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD088AB2-1C70-4C86-A25C-05B59D566E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D94A22-FF34-411B-BF12-767CE2518B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B541D1-2B28-430A-9AE4-3A67FD6E42D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0A4615-BA47-4E3D-8B6C-3CF5B2CC84C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B76D414-9B83-47EF-BCC5-EC9FDDF7A4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC8D9CD-9F52-4257-ACB8-1881ADAB70E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D33F707-E03E-4221-A65B-DE694B7BBA85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7508D9-EAAC-4D68-85B7-013AF5DAF3EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3785766A-5450-4AE0-BFE6-11E4D298BB36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809F04D-7E1E-4197-AC7A-D84A74609E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6A3F5-1C14-4001-9B63-8F75C25850AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9291B-FF03-463E-A935-267E11B2AC0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D43021-CFF4-4AA8-A926-97D093EFED9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD66DB1-9FFE-4C04-A518-AB93C3F513A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72879781-EA14-49DC-9586-E6FF3871E0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892FC47-F5B2-4655-9FCE-6CE1F83012C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D59F07-E40A-4801-B552-B8CD9B948741"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A867B7BA-E6ED-4E7B-A660-95E7B7140644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC1DC9B-F825-4E56-BAF6-8A1F2997F2B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB33BAA-3995-4914-8DB0-D43A4762A6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_central_storage_2500-ev:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B488C87D-A594-49E1-B5D9-F951EE180304"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B282A58C-280A-48BA-B454-980B21FAE9AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sma:sunny_boy_storage_2.5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5AD56-F1CF-4383-B676-9935BD50BBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.sma.de/en/statement-on-cyber-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://horusscenario.com/CVE-information/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T18:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.6-2 en la función ReadPSDImage en coders/psd.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/599",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T18:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-2 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/601",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T18:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-2 en la función ReadOneJNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/602",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T18:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-2 en la función ReadMVGImage en coders/mvg.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio relacionada con la función ReadSVGImage en svg.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/603",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-05T21:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) persistente en Splunk Enterprise 6.5.x anterior a 6.5.2; 6.4.x anterior a 6.4.6; y 6.3.x anterior a 6.3.9 y Splunk Light anterior a 6.5.2, cuya explotación requiere acceso de administrador, también conocido como SPL-134104."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "017E3E44-C062-463F-B9D3-75BA57992C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A2BB5352-F0AF-4578-979A-7E7D3259A94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "011F96AC-580A-4798-82F9-5D7CF80505DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8B2CE702-BB9A-426C-ADE1-6CC0CD96A2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "51ABD86F-DD27-43D6-AC0C-BE8E7B5A6308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EED5369E-4539-4598-85C9-00384CBB7410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "963C3008-04D5-4331-89E9-09FEC12FEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6C85C2D3-FA71-47C4-9BA1-1008F033E24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A7686091-ABEF-4EA3-B9EC-9B09C7B05FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D0BDC526-0F46-41E6-B723-D93A5FA288B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9BCB1613-C716-4147-9E1E-0FCAD800DE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FF59568E-ECF4-4AF9-9F70-01AB67CEACA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "AA23CDDF-349C-4028-B857-FA1837BBEBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6169CE4B-429B-4DB8-B2D1-8AEAAB1BFB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.4.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40B5692A-74AE-4B06-9E6A-A8DD83AB394D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.5.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EB11750A-BE9D-450C-856B-550DE8B0A55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.5.0:*:*:*:light:*:*:*",
            "matchCriteriaId" : "4FACB46B-623A-460A-B8A8-59762632067B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.5.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "61B46B1C-70A9-4959-998B-1B9927378CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:6.5.1:*:*:*:light:*:*:*",
            "matchCriteriaId" : "DAFEA182-7B21-4E96-86F2-67DC7E5DA4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.splunk.com/view/SP-CAAAPYC",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAPYC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T01:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (disrupting its network connection) by sending a large amount of HTTP packets."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio en Debut embedded httpd 1.20 en Brother DCP-J132W (y, probablemente, otros modelos de DCP) permite que atacantes remotos bloqueen la impresora (interrumpiendo su conexión a la red) mediante el envío de una gran cantidad de paquetes HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:dcp-j132w_firmware:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C58551F-D5B5-4A46-9C9A-15D7716322D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:dcp-j132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0948AA1-005C-4A4F-8980-70F2953DF5E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T02:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy (SOP) is a precondition; however, recent Electron versions do not have strict SOP enforcement. Combining an SOP bypass with a privileged URL internally used by Electron, it was possible to execute native Node.js primitives in order to run OS commands on the user's host. Specifically, a chrome-devtools://devtools/bundled/inspector.html window could be used to eval a Node.js child_process.execFile API call."
      }, {
        "lang" : "es",
        "value" : "GitHub Electron en versiones anteriores a la 1.6.8 permite la ejecución remota de comandos debido a una vulnerabilidad de omisión de nodeIntegration. Esta vulnerabilidad también afecta a todas las aplicaciones que incluyen código Electron equivalentes a la versión 1.6.8 o anteriores. Omitir la Same Origin Policy (SOP) es un prerrequisito. Sin embargo, las versiones recientes de Electron no tienen un cumplimiento estricto de esta política. Mediante la combinación de una omisión de SOP y una URL con privilegios empleada internamente por Electron, fue posible ejecutar primitivos Node.js nativos para ejecutar comandos del sistema operativo en el host del usuario. Concretamente, se podría emplear una ventana chrome-devtools://devtools/bundled/inspector.html para evaluar una llamada API a Node.js child_process.execFile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electron:electron:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.7",
            "matchCriteriaId" : "90D309B0-C178-4ACC-8C59-B8C29762C9F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.doyensec.com/2017/08/03/electron-framework-security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.doyensec.com/2017/08/03/electron-framework-security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T03:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php."
      }, {
        "lang" : "es",
        "value" : "La versión 2017-02-19b de DokuWiki tiene una vulnerabilidad de tipo XSS en el parámetro at (o variable DATE_AT) al doku.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-19b",
            "matchCriteriaId" : "DF38597C-8FCE-4ED4-BA2C-A0BCDC294FBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T03:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation."
      }, {
        "lang" : "es",
        "value" : "No existe mitigación para la vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en la versión 8.3.1 de SLiMS 8 Akasia. Además, se puede actualizar un perfil de usuario completo (incluida la contraseña) sin necesidad de que se envíe la contraseña actual. Esto permite que atacantes remotos engañen a un usuario para que cambie su contraseña a una controlada por los atacantes y asumir el control total de la cuenta mediante los campos passwd1 y passwd2 en una operación admin/modules/system/app_user.php changecurrent=true."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:senayan_library_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.1",
            "matchCriteriaId" : "6F6818AA-64F1-4ECE-9574-975C1B7BD8AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slims/slims8_akasia/issues/49",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/slims/slims8_akasia/issues/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T03:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. It can be exploited by remote authenticated librarian users."
      }, {
        "lang" : "es",
        "value" : "SLiMS 8 Akasia en su versión 8.3.1 tiene una inyección SQL en admin/AJAX_lookup_handler.php (parámetros tableName y tableFields), admin/AJAX_check_id.php y admin/AJAX_vocabolary_control.php. Esta vulnerabilidad puede ser explotada por usuarios remotos de librería autenticados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D9E614-A634-4769-B76D-0D1E1E693275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382402AC-A381-447A-9C5A-5280D4632835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD6A532-C370-49C6-95C8-5543F50A5963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C6AF7D-5966-40BC-855E-ED15EA126622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F979A52-EBEF-470C-B226-ADC5A3B65EC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slims/slims8_akasia/issues/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/slims/slims8_akasia/issues/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T03:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users."
      }, {
        "lang" : "es",
        "value" : "La versión 8.3.1 de SLiMS 8 Akasia tiene un problema de lectura de archivos arbitrarios debido a un salto de directorio en el parámetro url al admin/help.php. Esta vulnerabilidad puede ser explotada por usuarios remotos de librería remotos autenticados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D9E614-A634-4769-B76D-0D1E1E693275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382402AC-A381-447A-9C5A-5280D4632835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD6A532-C370-49C6-95C8-5543F50A5963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C6AF7D-5966-40BC-855E-ED15EA126622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:akasia:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F979A52-EBEF-470C-B226-ADC5A3B65EC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slims/slims8_akasia/issues/48",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/slims/slims8_akasia/issues/48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T04:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\\Local\\Temp directory."
      }, {
        "lang" : "es",
        "value" : "El instalador de Sandboxie 5071703 tiene una vulnerabilidad de secuestro de DLL o carga insegura de DLL mediante un archivo troyano dwmapi.dll o profapi.dll en un directorio AppData\\Local\\Temp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandboxie:sandboxie_installer:5071703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA3ACF7-ED3E-4857-A3F3-F53C946D4AF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T14:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\\pwp.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una importante vulnerabilidad de bucle en la función ReadPWPImage en coders\\pwp.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/535",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T14:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact."
      }, {
        "lang" : "es",
        "value" : "Los módulos de entrada y salida de zmq3 en versiones de rsyslog anteriores a 8.28.0 interpretaban campos de descripción como cadenas de formato, lo que podía dar lugar a un ataque de tipo “format string” y causar un impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsyslog:rsyslog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.27.0",
            "matchCriteriaId" : "43786829-C62D-4802-A45E-19C23E1A8DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rsyslog/rsyslog/pull/1565",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rsyslog/rsyslog/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rsyslog/rsyslog/pull/1565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241227-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-06T18:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en dispositivos Linksys EA4500 con versión de firmware anterior a 2.1.41.164606, tal y como demuestra una petición a apply.cgi para deshabilitar SIP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linksys:ea4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.36",
            "matchCriteriaId" : "D9964829-13B5-4AB7-A524-DACA52E3135E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:linksys:ea4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F4E6A9-A5EC-4B0A-8328-DC05AB5AFB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "En OpenEXR 2.2.0, una imagen manipulada provoca una sobrelectura de búfer basada en memoria dinámica en la función hufDecode en IlmImf/ImfHuf.cpp durante la ejecución de exrmaketiled. Esto podría tener como consecuencia una denegación de servicio o, posiblemente, causar otro tipo de impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openexr/openexr/issues/238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.3.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/openexr.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/issues/238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openexr/openexr/releases/tag/v2.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/openexr.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4148-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de escritura fuera de límites en la función FillColorRow1 en utils.cpp cuando lee una imagen utilizando cv::imread."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene un error de lectura fuera de límites en la función cv::RBaseStream::readBlock modules/imgcodecs/src/bitstrm.cpp cuando lee un archivo de imagen utilizando cv::imread. Esto se ha demostrado con la prueba8-opencv-invalid-read-fread."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de lectura fuera de límites en la función icvCvt_BGRA2BGR_8u_C4C3R cuando lee una imagen utilizando cv::imread."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene un problema de denegación de servicio (consumo de CPU), como se ha demostrado con la prueba 11-opencv-dos-cpu-exhaust."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9311",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene un desbordamiento de búfer en la función cv::BmpDecoder::readData en modules/imgcodecs/src/grfmt_bmp.cpp cuando lee un archivo de imagen utilizando cv::imread. Esto se ha demostrado con la prueba 4-buf-overflow-readData-memcpy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene un problema de denegación de servicio (consumo de memoria), como se ha demostrado con la prueba 10-opencv-dos-memory-exhaust."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9311",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene una escritura no válida en la función cv::RLByteStream::getBytes en modules/imgcodecs/src/bitstrm.cpp. cuando lee un archivo de imagen utilizando cv::imread. Esto se ha demostrado con la prueba 2-opencv-heapoverflow-fseek."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de escritura fuera de límites en la función FillUniColor en utils.cpp cuando lee una imagen utilizando cv::imread."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de escritura fuera de límites en la función FillColorRow8 en utils.cpp cuando lee un archivo de imagen utilizando cv::imread."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T01:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread."
      }, {
        "lang" : "es",
        "value" : "La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de escritura fuera de límites en la función FillColorRow4 en utils.cpp cuando lee una imagen utilizando cv::imread."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T03:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message."
      }, {
        "lang" : "es",
        "value" : "Libclamav/message.c en la versión 0.99.2 de ClamAV permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) utilizando un mensaje de correo electrónico manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5643323C-F44D-4F04-A710-D25EA28D301F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11797",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_email_crash.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrtadmin/clamav-devel/commit/586a5180287262070637c8943f2f7efd652e4a2c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_email_crash.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrtadmin/clamav-devel/commit/586a5180287262070637c8943f2f7efd652e4a2c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T03:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file."
      }, {
        "lang" : "es",
        "value" : "mspack/lzxd.c en libmspack 0.5alpha, como se utiliza en la versión 0.99.2 de ClamAV permite a atacantes remotos causar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica y caída de la aplicación) o posiblemente, tener otro impacto no especificado utilizando un archivo CHM manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "986DA387-2AD7-4B4B-9153-FAAC30954623"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5643323C-F44D-4F04-A710-D25EA28D301F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11701",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrtadmin/clamav-devel/commit/a83773682e856ad6529ba6db8d1792e6d515d7f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrtadmin/clamav-devel/commit/a83773682e856ad6529ba6db8d1792e6d515d7f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T03:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression."
      }, {
        "lang" : "es",
        "value" : "La función wwunpack en libclamav/wwunpack.c en ClamAV 0.99.2 permite que atacantes remotos provoquen una denegación de servicio (use-after-free) mediante un archivo PE manipulado con compresión WWPack."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5643323C-F44D-4F04-A710-D25EA28D301F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11798",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/use-after-free/clamav-use-after-free-pe.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/use-after-free/clamav-use-after-free-pe.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6663",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.230",
      "lastModified" : "2025-10-22T00:16:08.070",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica Autonomic Networking de Cisco IOS Software y Cisco IOS XE Software podría permitir que un atacante no autenticado y en redes adyacentes provoque que los nodos autonómicos de un sistema afectado se vuelvan a cargar, lo que resultaría en una condición de denegación de servicio (DoS). Más información: CSCvd88936. Lanzamientos afectados conocidos: Denali-16.2.1 Denali-16.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F6FC68-BF4A-4511-8B46-A93C81E349B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7582DA8C-2360-4E8C-90F8-6194F269CD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE651A7-D75C-4641-9AD3-C3FDB1B96792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD5D14D-A9F8-4323-A67B-FF983900D99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5C39A9-F4FC-4190-9AE3-3D3FC34CF0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD15D65-9471-4755-9EDB-04ECF34DFD8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8957EB38-37CF-47FA-853D-7A1AA6079874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAA5367-F81E-425A-A93C-B9220D1BB37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1ED4F8-3B6C-452D-A3D0-D2F1A24AF994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF32BC7-57DF-4BF0-BF97-69E97CC048CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3836108-E847-4BB6-BFFE-7C81E9D94A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38466E0-40AC-45C6-9C14-1BE309B079CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4151B2B1-B17F-4F1D-A211-34C7DB84E442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F13E87-E45B-462A-8334-78C8245D6464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447FAF3B-8E93-4A2C-A8B1-1A2F7D958754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC40192-6A93-423C-8907-60CC39077668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2628F-456D-4471-A914-D92157725CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9359056-42C8-4031-9E5A-433DFB3DF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA37E61-7EA5-45F3-87F6-432B591A79BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86EA2EC-7FEA-4AE8-8CE0-45CA3C21B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1AA87D-33F3-4153-BD59-331E9AD82623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA64C4F-8D3E-43AE-BD13-70D5E10205A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047B501B-FBEC-445B-9CC8-A3B83EBF5925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EBAF71-E476-44F2-8D3E-1D0989F95A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C68169-0271-4C6C-975B-32112B04AB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE308E0-89DA-4BE8-BF81-6D802D7B1B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55064D6F-6E4F-4F04-BC19-E6D4110D89EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC59C3E-A2A4-4A1A-B561-E411D7DE85E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945363EE-FE7A-44ED-A4A0-942A1F9B2702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE18163D-C81F-49DC-996F-DE340C623539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB5DABC-4DAF-4696-A8AE-D4B6B188B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72480900-6E08-425F-965D-143B348E374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBA0926-E790-4B1C-A549-5B7D2F040E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E903D9F-530D-4597-ABA9-4C1CFB79814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE10B51-53FB-4F30-BAA0-0BD92C3D5C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5600F2-BE56-480F-B9BC-256960878B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E8589D-1F50-4CE8-BF95-1134F0BBF21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5060BAEA-DF8F-4B85-84F5-1410FD45C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F03EF8-1276-4193-8901-228148E76042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB56857D-029C-4DA8-B439-F1B89EA32074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5609B342-D98E-4850-A0FE-810699A80A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1887D9-E339-4DC6-BE24-A5FF15438B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2645F-C3BF-458F-9D07-6D66E1953730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8A00BF-4522-467B-A96E-5C33623DCA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE50185-23ED-4640-9037-E45810793C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99973",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038999",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6663",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6664",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked. This vulnerability affected devices that are running Release 16.x of Cisco IOS XE Software and are configured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of Cisco IOS XE Software or devices that are not configured to use Autonomic Networking. More Information: CSCvd22328. Known Affected Releases: 15.5(1)S3.1 Denali-16.2.1."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B39732-D8FA-4E08-95FC-8F26C0BF8D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99986",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038997",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6665",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system, an Information Disclosure Vulnerability. More Information: CSCvd51214. Known Affected Releases: Denali-16.2.1 Denali-16.3.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad Autonomic Networking de Cisco IOS Software y Cisco IOS XE Software podría permitir que un atacante adyacente sin autenticar reinicie el Autonomic Control Plane (ACP) de un sistema afectado y vea los paquetes ACP que se transfieren sin cifrar dentro de un sistema afectado (vulnerabilidad de divulgación de información). Más información: CSCvd51214. Versiones afectadas conocidas: Denali-16.2.1 Denali-16.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F6FC68-BF4A-4511-8B46-A93C81E349B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7582DA8C-2360-4E8C-90F8-6194F269CD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE651A7-D75C-4641-9AD3-C3FDB1B96792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD5D14D-A9F8-4323-A67B-FF983900D99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5C39A9-F4FC-4190-9AE3-3D3FC34CF0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD15D65-9471-4755-9EDB-04ECF34DFD8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8957EB38-37CF-47FA-853D-7A1AA6079874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAA5367-F81E-425A-A93C-B9220D1BB37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1ED4F8-3B6C-452D-A3D0-D2F1A24AF994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF32BC7-57DF-4BF0-BF97-69E97CC048CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3836108-E847-4BB6-BFFE-7C81E9D94A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38466E0-40AC-45C6-9C14-1BE309B079CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4151B2B1-B17F-4F1D-A211-34C7DB84E442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F13E87-E45B-462A-8334-78C8245D6464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447FAF3B-8E93-4A2C-A8B1-1A2F7D958754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC40192-6A93-423C-8907-60CC39077668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2628F-456D-4471-A914-D92157725CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9359056-42C8-4031-9E5A-433DFB3DF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA37E61-7EA5-45F3-87F6-432B591A79BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86EA2EC-7FEA-4AE8-8CE0-45CA3C21B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1AA87D-33F3-4153-BD59-331E9AD82623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA64C4F-8D3E-43AE-BD13-70D5E10205A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047B501B-FBEC-445B-9CC8-A3B83EBF5925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EBAF71-E476-44F2-8D3E-1D0989F95A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C68169-0271-4C6C-975B-32112B04AB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE308E0-89DA-4BE8-BF81-6D802D7B1B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55064D6F-6E4F-4F04-BC19-E6D4110D89EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC59C3E-A2A4-4A1A-B561-E411D7DE85E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945363EE-FE7A-44ED-A4A0-942A1F9B2702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE18163D-C81F-49DC-996F-DE340C623539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB5DABC-4DAF-4696-A8AE-D4B6B188B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72480900-6E08-425F-965D-143B348E374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBA0926-E790-4B1C-A549-5B7D2F040E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E903D9F-530D-4597-ABA9-4C1CFB79814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE10B51-53FB-4F30-BAA0-0BD92C3D5C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5600F2-BE56-480F-B9BC-256960878B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E8589D-1F50-4CE8-BF95-1134F0BBF21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5060BAEA-DF8F-4B85-84F5-1410FD45C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F03EF8-1276-4193-8901-228148E76042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB56857D-029C-4DA8-B439-F1B89EA32074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5609B342-D98E-4850-A0FE-810699A80A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1887D9-E339-4DC6-BE24-A5FF15438B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2645F-C3BF-458F-9D07-6D66E1953730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8A00BF-4522-467B-A96E-5C33623DCA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE50185-23ED-4640-9037-E45810793C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B39732-D8FA-4E08-95FC-8F26C0BF8D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99969",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038998",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-aniacp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-aniacp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6745",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servidor caché de Cisco Videoscape Distribution Suite (VDS) para Television 3.2(5)ES1 podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un dispositivo objetivo. Esto se debe a que un exceso de conexiones mapeadas agota los recursos asignados del sistema. Un atacante podría explotar esta vulnerabilidad mediante el envío de grandes cantidades de tráfico de entrada a un dispositivo, con el objetivo de sobrecargar ciertos recursos. Si se tiene éxito, el dispositivo podría recargarse, provocando una denegación de servicio. Cisco Bug IDs: CSCvc39260."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\\(5\\)es1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8C50F3-DE69-4810-9C9B-43950B326905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D322339B-01E5-4AE5-A646-49CE3EB170F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "547B1AE2-7081-4AB3-A3C9-31DBF4B47543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7806199-2882-4166-B5B5-565413723C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77783F4-B383-4F83-B173-721452D2C3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A091D4E-C9A4-41C1-BA65-5607D6737EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AA47AE-E9F2-4CD7-BBE4-5903408C4D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\\(1\\)-cos:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FC6B01-E93C-4B96-BD6B-154D6355EE1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AF3BB3-5885-4312-9EAC-276C455E3AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.8\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "299E89B7-2B29-4DB1-8B8A-D98F4AA5E326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.9\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "23943C16-7A8B-49FC-95FF-ECA0C738D4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6663090A-8ED5-47B2-A53F-CAE8EC5A1E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFBB802-6352-4BAD-9532-BDF72DB348A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84055DF-CB8F-4608-AB36-E32E85AED5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFA6A35-DA36-4798-BF2C-6017DC4F0114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A20369-73B9-4E4B-943B-01A65F2ECB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4238E3F5-C174-4DEF-A0AE-5C38C998EDBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100106",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-vds",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-vds",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6747",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An attacker could exploit this vulnerability by authenticating with a valid external user account that matches an internal username and incorrectly receiving the authorization policy of the internal account. An exploit could allow the attacker to have Super Admin privileges for the ISE Admin portal. This vulnerability does not affect endpoints authenticating to the ISE. The vulnerability affects Cisco ISE, Cisco ISE Express, and Cisco ISE Virtual Appliance running Release 1.3, 1.4, 2.0.0, 2.0.1, or 2.1.0. Release 2.2.x is not affected. Cisco Bug IDs: CSCvb10995."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo de autenticación de Cisco Identity Services Engine (ISE) podría permitir que un atacante remoto sin autenticar omita la autenticación local. Esto se debe a un manejo incorrecto de las peticiones de autenticación y asignación de políticas para los usuarios autenticados externamente. Un atacante podría explotar esta vulnerabilidad autenticándose con una cuenta válida de usuario externo que coincida con un nombre de usuario interno y recibiendo de forma errónea la política de autorización de la cuenta interna. Con un exploit, el atacante podría tener privilegios de Super Admin para el portal ISE Admin. Esta vulnerabilidad no afecta a los extremos que se autentican en el ISE. Este problema afecta a Cisco ISE, Cisco ISE Express y los dispositivos virtuales de Cisco ISE que estén en sus versiones 1.3, 1.4, 2.0.0, 2.0.1 o 2.1.0. La versión 2.2.x no se ha visto afectada. Cisco Bug IDs: CSCvb10995."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(0.722\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDA2348-7DF8-4A0C-AC7B-FA02E9A48D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(0.876\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40531FF3-D0DB-4DBA-A92C-C4E09EF46796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(0.909\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B2A9A5-344D-4147-96C3-C2C1E21E760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(106.146\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72637FC1-19A0-4B23-ABEC-0D9606741452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.3\\(120.135\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D435868B-CC18-4BE3-995C-D67BA1BF53B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.4\\(0.109\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A33974F4-0716-484A-AE94-0D9B241A5B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.4\\(0.181\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "974E0C3B-40FF-42BD-8B5C-B24951FC9EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.4\\(0.253\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4840347-066A-4045-A676-413B7969A7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.4\\(0.908\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD23FB7-BFEA-45EF-BABE-983AB6536FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0\\(0.147\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "733EC91E-7240-4CED-A699-67B4D4D8BE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0\\(0.169\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E706A31-E8FD-40B5-9523-817603C43247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0\\(0.222\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CA3F80-69B7-4767-A05A-648B0D9C06B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0\\(1.130\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "177D1AD9-E72A-45A9-A5A3-1343241A397D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE683A98-EEF0-4809-8198-6B0D1FBB0F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(0.474\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E53B93-2A49-4B3F-8487-E45D8F70F64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(0.800\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A653B17F-337E-4342-91EF-92483E0E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1\\(102.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B01C09C-3587-41F7-AAE9-4CC7B8059C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5077AF4-F044-4FBA-8464-D65FBE34486A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039054",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6752",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the interaction between Lightweight Directory Access Protocol (LDAP) and SSL Connection Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enumeration attack to the IP address of the device. An exploit could allow the attacker to determine valid usernames. Cisco Bug IDs: CSCvd47888."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Adaptive Security Appliance (ASA) 9.3(3) y 9.6(2) podría permitir que un atacante remoto sin autenticar determine nombres de usuario válidos. El atacante podría utilizar esta información para llevar a cabo ataques de reconocimiento adicionales. La vulnerabilidad se produce debido a la interacción entre Lightweight Directory Access Protocol (LDAP) y SSL Connection Profile cuando se configuran conjuntamente. Un atacante podría explotar la vulnerabilidad mediante la ejecución de un ataque de enumeración de nombres de usuario contra la dirección IP del dispositivo. Un exploit podría permitir que el atacante determine nombres de usuario válidos. Cisco Bug IDs: CSCvd47888."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100113",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039057",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd47888",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd47888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6754",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system through SQL timing attacks. The vulnerability is due to insufficient input validation of certain user-supplied fields that are subsequently used by the affected software to build SQL queries. An attacker could exploit this vulnerability by submitting crafted URLs, which are designed to exploit the vulnerability, to the affected software. To execute an attack successfully, the attacker would need to submit a number of requests to the affected software. A successful exploit could allow the attacker to determine the presence of values in the SQL database of the affected software. Cisco Bug IDs: CSCvf07617."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 podría permitir que un atacante remoto autenticado realice un ataque ciego de sólo lectura de inyección SQL, lo que haría que este comprometiese la confidencialidad del sistema mediante ataques SQL basados en tiempo. La vulnerabilidad se debe a que no se validan lo suficiente los campos de entrada de datos de usuario que son, posteriormente, empleados por el software afectado para realizar consultas SQL. Un atacante podría explotar esta vulnerabilidad enviando al software afectado URL manipuladas diseñadas para este fin. Para llevar a cabo este ataque de forma exitosa, el atacante necesitaría enviar una serie de peticiones al software afectado. Si se realiza correctamente, esta vulnerabilidad podría permitir que el atacante determine la presencia de valores en la base de datos SQL del software afectado. Cisco Bug IDs: CSCvf07617."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_net_total_care_collector_appliance:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DA489C-B051-45DB-B068-96E09B7E57BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100126",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf07617",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-sntc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf07617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-sntc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6756",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of defense against cross-site request forgery (CSRF) attacks. An attacker could exploit this vulnerability by forcing the user's browser to perform any action authorized for that user. Cisco Bug IDs: CSCvc90280."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la aplicación de interfaz de usuario web de Cisco Prime Collaboration Provisioning Tool en su versión 12.2 podría permitir que un atacante remoto sin autenticar ejecute acciones no deseadas. La vulnerabilidad se debe a la poca defensa contra ataques de Cross-Site Request Forgery (CSRF). Un atacante podría explotar esta vulnerabilidad obligando al navegador del usuario a que lleve a cabo cualquier acción autorizada para este. Cisco Bug IDs: CSCvc90280."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E5419B-485B-4A5E-88E8-15013CF0F891"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100112",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039061",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6757",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this vulnerability by sending crafted URLs that include SQL statements. An exploit could allow the attacker to modify or delete entries in some database tables, affecting the integrity of the data. Cisco Bug IDs: CSCve13786."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), y 11.5(1.10000.6) podría permitir que un atacante remoto autenticado lleve a cabo un ataque a ciegas por inyección SQL. Esto se debe a la imposibilidad de validar entradas proporcionadas por el usuario empleadas en consultas SQL que eluden los filtros de protección. Un atacante podría explotar esta vulnerabilidad mediante el envío de URL modificadas que incluyan instrucciones SQL. Un exploit podría permitir que el atacante modifique o elimine entradas en algunas tablas de bases de datos, lo que afectaría a la integridad de los datos. Cisco Bug IDs: CSCve13786."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100121",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039063",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13786",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6758",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Cisco Unified Communications Manager 11.5(1.10000.6) podría permitir que un atacante remoto autenticado acceda a archivos arbitrarios dentro de la estructura del directorio root web en un dispositivo afectado. Esta vulnerabilidad también se debe a la insuficiente validación de entradas por parte del software afectado. Un atacante podría explotar esta vulnerabilidad mediante el uso de técnicas de salto de directorio para leer archivos en la estructura del directorio root web en el sistema de archivos de Cisco Unified Communications Manager. Cisco Bug IDs: CSCve13796."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100119",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039064",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6759",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by triggering the upgrade package installation functionality. Cisco Bug IDs: CSCvc90304."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en UpgradeManager del Cisco Prime Collaboration Provisioning Tool 12.1 podría permitir que un atacante remoto autenticado escriba archivos arbitrarios como root en el sistema. Esta vulnerabilidad se debe a una validación de entrada insuficiente. Un atacante podría explotar esta vulnerabilidad utilizando la funcionalidad de instalación de paquetes de actualizaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9198A5-1367-495C-9305-3D4D0D462D49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039062",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc90304",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc90304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6761",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvd96744."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Finesse 10.6(1) y 11.5(1) podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado. Esta vulnerabilidad se debe a la validación insuficiente de entradas de usuario por parte de la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial del navegador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:10.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D9DEF1-C06C-47A8-B813-A2BA7EE21B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4941884A-2DC7-4C24-A2FE-D09C57D736D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100110",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039059",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd96744",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-cf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd96744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6762",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve09718."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Jabber Guest Server 10.6(9), 11.0(0), y 11.0(1) podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en el software afectado. La vulnerabilidad se debe a la validación insuficiente de entradas de usuario por parte de la interfaz de gestión web del software afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial del navegador. Cisco Bug IDs: CSCve09718."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber_guest:10.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261A91A2-CA9C-45B7-9781-F336720FDF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber_guest:10.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC407E2-ACEF-4D89-A70D-AA7AC8F633AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber_guest:10.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66D32E5-1C01-4B1B-821B-0DA1B659A57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber_guest:10.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDEBEC-8E9E-45D7-867E-DD4B36BE6EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber_guest:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD7D264-BD17-4EF6-967F-3C24E226FE16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100108",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039060",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve09718",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-cj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve09718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-cj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6763",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability exists because the affected application does not properly validate Fragmentation Unit (FU-A) protocol packets. An attacker could exploit this vulnerability by sending a crafted H.264 FU-A packet through the affected application. A successful exploit could allow the attacker to cause a DoS condition on the affected system due to an unexpected restart of the CMS media process on the system. Although the CMS platform continues to operate and only the single, affected CMS media process is restarted, a brief interruption of media traffic for certain users could occur. Cisco Bug IDs: CSCve10131."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del protocolo H.264 en Cisco Meeting Server (CMS) 2.1.4 podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un sistema afectado. La vulnerabilidad existe porque la aplicación afectada no valida correctamente los paquetes de protocolo Fragmentation Unit (FU-A). Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete H.264 FU-A manipulado usando la aplicación afectada. Una ejecución exitosa de la vulnerabilidad permitiría que el atacante provocase una situación de denegación del servicio en el sistema afectado debido a un reinicio inesperado del proceso CMS media en el sistema. Aunque la plataforma CMS sigue operando y solo se reinicia el proceso CMS media afectado, podría interrumpirse brevemente el tráfico multimedia para ciertos usuarios. Cisco Bug IDs: CSCve10131."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ECDC6B-C793-4015-A40F-152A840E6417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100111",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039058",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve10131",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve10131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6764",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvd82064."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Adaptive Security Appliance (ASA) 9.5(1) podría permitir que un atacante remoto autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entradas de usuario por parte de la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial del navegador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCCD4D3-59CA-4B2F-8385-3FD099D831ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100107",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039055",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd82064",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd82064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6765",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka WebVPN XSS. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve19179."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Adaptive Security Appliance (ASA) 9.1(6,11) y 9.4(1.2) podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado, también conocido como WebVPN XSS. La vulnerabilidad se debe a la validación insuficiente de entradas de un usuario por parte de la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial del navegador. Cisco Bug IDs: CSCve19179."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(6.11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02EAD21-F591-4739-BCD7-3FB29A8CD6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\\(1.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE84303-0D9D-40E8-BDAE-925405C221F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100150",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039056",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve19179",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve19179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6766",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic on an affected system. The vulnerability is due to unexpected interaction with Known Key and Decrypt and Resign configuration settings of SSL policies when the affected software receives unexpected SSL packet headers. An attacker could exploit this vulnerability by sending a crafted SSL packet through an affected device in a valid SSL session. A successful exploit could allow the attacker to bypass the SSL decryption and inspection policy for the affected system, which could allow traffic to flow through the system without being inspected. Cisco Bug IDs: CSCve12652."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad Secure Sockets Layer (SSL) Decryption and Inspection de Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1 y 6.2.2 podría permitir que un atacante remoto sin autenticar eluda la política SSL para descifrar e inspeccionar tráfico en un sistema afectado. La vulnerabilidad se debe a una interacción inesperada con las opciones de configuración Known Key y Decrypt and Resign de las políticas SSL cuando el software afectado recibe cabeceras de paquetes SSL inesperadas. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete SSL manipulado a través de un dispositivo afectado en una sesión SSL válida. Si se explota esta vulnerabilidad con éxito, el atacante podría eludir la política de descifrado e inspección SSL para el sistema afectado, lo que podría permitir que el tráfico fluyese a través del sistema sin ser inspeccionado. Cisco Bug IDs: CSCve12652."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB13B96-D431-49BD-ADAB-9AE5DB559935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DC251B-1CA8-4232-A900-885933E01FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D52DB0-4441-41C9-900E-DE917B0CBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362E320D-70E9-4B51-9298-ADF612FD440F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A5C44-A26D-44A3-9674-92657FBA0513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFBDE0A2-5ECA-4287-8A70-235C1E17FA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firesight_system_software:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4153DE2F-B331-4FA6-B16D-3C2D975FD887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve12652",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-fpw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCve12652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-fpw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6769",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCve70587. Known Affected Releases: 5.8(0.8) 5.8(1.5)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Secure Access Control System (ACS) podría permitir que un atacante remoto autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) almacenado, contra un usuario de dicha interfaz en un sistema afectado. Más información: CSCve70587. Versiones afectadas conocidas: 5.8(0.8) 5.8(1.5)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(0.8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF9BA07-DBB4-4691-AA7F-750806B09011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(1.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CA0902-7AFF-4214-9751-2893941F49AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99985",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-acs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-acs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6770",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-07T06:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database. This vulnerability could allow an unauthenticated, remote attacker to take full control of the OSPF Autonomous System (AS) domain routing table, allowing the attacker to intercept or black-hole traffic. The attacker could exploit this vulnerability by injecting crafted OSPF packets. Successful exploitation could cause the targeted router to flush its routing table and propagate the crafted OSPF LSA type 1 update throughout the OSPF AS domain. To exploit this vulnerability, an attacker must accurately determine certain parameters within the LSA database on the target router. This vulnerability can only be triggered by sending crafted unicast or multicast OSPF LSA type 1 packets. No other LSA type packets can trigger this vulnerability. OSPFv3 is not affected by this vulnerability. Fabric Shortest Path First (FSPF) protocol is not affected by this vulnerability. Cisco Bug IDs: CSCva74756, CSCve47393, CSCve47401."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS 12.0 en versiones hasta 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 en versiones hasta 9.7.1.2, NX-OS 4.0 en versiones hasta 12.0, e IOS XE 3.6 en versiones hasta 3.18 se han visto afectadas por una vulnerabilidad relacionada con la base de datos Link State Advertisement (LSA) del protocolo de enrutamiento Open Shortest Path First (OSPF). Esta vulnerabilidad podría permitir que un atacante remoto sin autenticar asuma el control total de la tabla de enrutamiento de dominios OSPF Autonomous System (AS). Así, el atacante podría interceptar el tráfico y crear agujeros negros. El atacante podría explotar esta vulnerabilidad mediante la inyección de paquetes OSPF manipulados. La explotación exitosa de esta vulnerabilidad podría hacer que el router objetivo vacíe su tabla de enrutamiento y propague la actualización OSPF LSA type 1 manipulada, mediante el dominio OSPF AS. Para explotar esta vulnerabilidad, un atacante debe determinar con precisión ciertos parámetros en la base de datos LSA del router objetivo. Esta vulnerabilidad solo puede aprovecharse mediante el envío de paquetes OSPF LSA type 1 de unidifusión (unicast) o multidifusión (multicast) manipulados. Ningún otro tipo de paquete LSA presenta esta vulnerabilidad. OSPFv3 no se ha visto afectado por esta vulnerabilidad. El protocolo Fabric Shortest Path First (FSPF) no se ha visto afectado por esta vulnerabilidad. Cisco Bug IDs: CSCva74756, CSCve47393, CSCve47401."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os:1.1\\(0.825a\\):*:*:*:*:nexus_9000_series:*:*",
            "matchCriteriaId" : "F3E83036-4C85-4CDB-B010-F3EFC6E814DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os:1.1\\(1g\\):*:*:*:*:nexus_9000_series:*:*",
            "matchCriteriaId" : "2B319452-D309-4678-BD05-CF12FE2F109A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_5500_platform_switches:7.3\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B159EFB5-63F1-4E3E-B015-AC7B4A42A25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_5500_platform_switches:base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE154DBF-5283-4122-96C9-F9F981A09D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_5600_platform_switches:7.3\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B9529-DD6B-40F8-A6E7-CB698C831F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_5600_platform_switches:base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55356E4-C213-4E69-9228-BB3F620C550A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_7700_series_switches:8.0\\(1\\)\\(ed\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16251FB0-AFB1-4B4C-97D8-F7E25D3B3CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_7700_series_switches:8.1\\(1\\)\\(ed\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEDCADA-B994-434C-948F-01012E35A1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nx-os_for_nexus_7700_series_switches:base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F938C0E6-86C3-4F34-B3AE-C64B478F0966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7632C245-04C6-4E78-87B7-55CCCA6FD6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA0DDDD-C987-4DA6-ADEE-77B387C26A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E84099EB-2535-4A9F-8355-FF937CFBD122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBC03FE-3A54-450E-A8CE-844C4A6E54B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C599F894-DAD2-4231-8BB8-1427E7C02D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5123875E-2726-4AD3-A767-04D4F3C15DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F60C12-71C9-47C6-B43F-A0374419D736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBC6451-C5CE-4A84-8FAD-A0B6DBF67D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C853CD9-F451-406E-A515-3BDC34E55639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4D6D0E-03FD-4C3C-9F6F-0BCE4B9F5D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B296BB10-E740-4EFC-A9FE-5E8C6D9BA0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41173D04-CD92-429A-A201-094C324435ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FB6BAE-322B-48F1-A26D-0ADC86ECCAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF3A418-EF33-4BEF-8508-DA573885AE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929BF200-619E-4F35-9DDC-8DBFA7728CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEBB18A-F33C-4A07-8C3F-5042F5C5B66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C28DC-B15F-486B-96F1-D08529B7374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E00BE3-089B-48DB-8626-F5F655271CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89373AD0-3CC4-4BD0-BA5C-352322BD371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240E8B28-9CC1-4995-91D4-B41ACC96C44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB3077B-59B9-4B33-AE6F-A0AF84EB69EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03A1408-A55A-4482-B239-B13094B13BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABBFB9E-C009-42B6-A7D7-D897843F9A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FCA9A3-94DF-4A5C-84D8-A1E95BC9A8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9776E3A4-8F5D-4579-992D-EC00F0F7AEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4400D917-0BEB-49AE-80C9-0F607818EEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B53107-BCD0-4D3E-B090-91D6BD6139C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0430DD9-E36F-4911-ABB3-5B1043AE9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3639AA-0F7B-403E-83F9-538A770008E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A929090-A536-44B3-9371-A827FD0BEEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB1837E-A87E-435A-8C89-AA6BB55FE9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF45DF2C-54FF-48FE-A72B-9416CD5A582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27FAEFB-6129-44D5-A836-867B24C6A980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3845853-C6C5-464D-8BEA-4F3D6B53AEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C6B77C-1AD1-48E5-9279-B9F388066082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E87DA1-3BD9-46E3-ADDB-DF7F5B958009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CDAE653-39BC-443F-B2B0-06BEE9A66E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43EB0487-CF1F-4314-BD0D-2F31E4252431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D147236F-7871-4879-86E1-CDD49E9C4C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1.2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8708CA-EA75-40EB-A868-BA78B5753516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E853B8BF-07F5-46DF-8DEA-302F68B8B086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ADB02B-E12A-49F7-84A5-981C51CBD85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE8E662-2772-4D98-B01C-694757D9D6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1950D663-F0C9-4AE1-9595-FDCCDA1D83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6C582-4CCD-4BEA-8367-242CC3BADE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95627941-30D8-452F-B6C8-76D2BEE93514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7C3B04-B4F2-442C-BB54-9F4F192FB80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECA50E1-B84C-46DD-AACE-513E9D4C383B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1E4830-C94A-4B7E-9CE1-63D0A747FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C569D949-A2BE-4983-A5C3-14508676B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF586164-82BC-4EA9-BE9D-4B6CDBFD7D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A338318-148E-4EB3-B406-29A55F6E0B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F3A543-ECF2-4672-B6B6-DC1AB7D96D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364CA0EA-F85E-4C4B-96D8-A7256F413844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA148AD-604D-4284-AE41-4E279F616B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4087CC-8B4D-42F5-9917-DA5EA2AA684C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CE8E7E-86CD-458C-AAB4-5901F66FC977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AB954E-D1F4-4B29-B782-2E9917D82DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B943E75A-F816-473B-A458-9C6F3F702414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C016EF9-C98A-4877-8086-39EA92031FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E552CFA-627D-4CE5-9E73-E97A1DFCF40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C47D6AE-7B30-422F-9F7F-2A95608AD3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF918814-7EC6-4F46-AA7D-6AA52A42DB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B55084-8826-4FE1-B0C0-0132354D9CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC75098F-97F4-4E27-8602-4521048C144C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA3389C-86FE-45F7-97D7-E3386403944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54C2EAD-3E0F-451D-8451-A5D29D005DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7025DA5B-2C48-4044-B11C-F45FF351311A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F9B862-1E61-477A-9ADF-8DCCDCB1C239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61FFB15-1E0C-4B7C-A506-BE69F1049D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53EC396-87B2-46F2-B150-841804F10FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19432EC8-2C08-4C07-80A1-36BD1A747C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E501CF3-86C1-4F37-8228-79A698236733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730F28DB-DFAC-4D9D-AB4A-42C158F3D88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656D49C2-4F2E-4369-8933-FF74A3CD51EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D2A272-5B6A-426C-B95C-03F1CF92A556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AD5614-6AA5-4607-9B4D-7F40E174B51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68E73D6-A207-4276-A972-52B859CD958A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743B9EEB-8A00-4EDD-A10D-4FC0A8C2E6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA384B7-938A-48F7-8154-442E46FB1400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250AEA5-7613-4F64-B90D-D600745F2403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44B4A87-D033-4C3F-B1F8-BC40E2CCDC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C93F75-E046-4E09-A269-49A55EFF2978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CFD97E-113C-4F56-9BF1-D57C81BCA589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880058C4-556B-42FF-98AF-4428CB8CB94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D6D5C-1DA2-407A-BE75-2189E04BC9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D61007E-55D6-4E10-A9CF-B4B5227AC909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A862D259-40EE-45AE-B896-7F68AC06272C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D33210F-0FA8-4089-AA05-C7AA80C12460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2D6C8E-2E0F-4328-8BE5-8E6845B75513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313EF49F-4F50-4205-93D8-38B0B18EB7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E406214-2776-42C2-B777-92E6420FBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837D743B-CCCB-4D30-9B2E-24CBC4F9F9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B44024A-4500-4ACD-9C92-8EA996188B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C2A72E-C42C-456B-B712-D04860CE1A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC7F030-18CA-4F56-8F97-69E038319E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911DC415-971F-46C1-B804-F8E87A0FD60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756BFBA7-D2D1-45D7-B225-A12B4FB82949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.0.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200F740F-9D7D-4A64-AE1F-276CF58241C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B9D86-8EEB-4A5E-824C-4D7EBD64877A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD242CAB-9DB6-42F3-B649-A963C386C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9251926E-96A3-4160-BADB-2DF5CB662B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2B9487-9749-4271-8112-C4FA21611312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E478D1ED-C5AF-46C2-B49B-515A62B653B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAB258C-5D97-489B-8B4E-0511B00BE506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CF28B6-627D-4E25-BB61-32956239963D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E91C88B-7DF8-4ED5-B4BD-8C252C6EF0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519C99B8-E222-4FA3-8C8F-0DA6019CD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E26DFA-B023-44B9-80D1-A5E391B571AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F07BA4-A069-4CD5-B0D9-156320CBB5AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CDDEAF-C62D-4364-ACA8-14F14BBFB150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1.2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D140D4-1AE3-4D46-9B13-3EC78EBC4FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70158003-F6CA-4A5C-893C-BF885A388D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2C8AFA-A4B6-44A2-B00C-1950997493C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6297451E-196E-4C6D-9186-451BB42CAE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465313C5-BFB9-458A-8150-8F7BA1F8C386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF399187-270F-4560-9C09-DF18132FA427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7A928A-2CBA-43BC-B312-975EE9E24830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF721BA-25FF-485E-9102-5741AC9BC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F34D78E-68C9-4372-85F2-E74A1C8C06F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05748A45-8423-42F4-8F95-7BA83548C4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C15D1F6-997D-47FD-A654-AEF3332E6105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3E5F50-CBD1-4516-BC97-3AF59DB39A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B54134-5AC7-4D7E-A7F1-D4C2057FF146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFE499E-09BB-4C86-AC74-7568B2D3CA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5BF7-18FB-4066-947E-7352B9951AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42DD43A-B6BD-4C2B-BA57-928501C62388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE65B75-4987-4E77-8814-F7BC9875924A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C890603E-6634-46E2-AFA9-ADE8ED1B9E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBAB79E-83BF-4AD1-875B-D015A18ECB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA41C5E-F854-4729-9498-C54FA5C00664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B08E743-488A-4F99-ABA6-98AD534B603B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978A0B9D-1B1D-4E22-893C-52DE75247BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD17927A-7AFA-4177-A34E-5FEB7A9400AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4B884F-EDE6-4055-83D8-609D2D1E518F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8570FBED-D38F-49ED-8C6A-E241BF7E1274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2889989-8D9C-4E06-8477-8BCF6DC7D84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E9724F-AD95-4572-BD8F-27B71F8EBC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA7A0DD-9826-4AD8-B7C8-AD750BD87E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990B883-0B5A-44F0-B4DC-8031ED0F2026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA74460-D26D-4C0A-B697-DF9003096065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BEB7A8-B2DB-46EB-9265-AB88476B1002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF80D39-35D2-447C-A809-E4C819FEEF25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F417BC-5835-4F29-8DB6-03A62B7B2364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90599A3-F885-414E-94F9-B4AECEB34D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0185F882-E031-4B16-8DB3-62F76FBB78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092FB46B-A4A4-40E5-B474-4FC36ADC427C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB27EFB-BF82-493D-ADF2-7395B4E2A55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD84D98-1B98-454C-AF63-DE5E76E17C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D975A3B-0B3C-44E6-BE9C-AA73CF97AF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAF32AF-EF06-4663-BFBE-1334D491A212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB85D8-B247-4921-AE49-C2A1C2FDEB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BA59C8-F3D0-4B94-824B-F3CDAB465D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF3C75D-751C-444F-A4AF-303409B22B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CD6FE3-1B32-461E-9215-0F016798B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22552CF4-01F8-46A8-ADD4-7BABFA574330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1C5485-EAF4-4F4D-AFA1-E105F433665E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989F9AC4-C2D1-49A0-95C3-79A4EB827E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE2E079-D7AC-4FE9-8938-A75C12AF5CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B442C852-2465-4EA8-A977-1F10A4CE23AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB6ED4-3095-46C1-9CB6-2975A7B05303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE68CD8E-B9CF-4519-8B0E-4C4488B34887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D762C9A7-005C-44FD-9BB2-7A1DD4EBE90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0B1212-87F3-46E5-B14A-C0C6BBAAAC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4826-06B0-4DDC-B082-A536418FD292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E343DE08-58FA-4C39-99F9-8CB5F57D0CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76363698-DB62-4D92-8EE4-069891A9F92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6159BEE3-D097-4E07-9962-06DB740E2AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD606591-F69A-47AD-9256-20B98CA16135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EF3895-F372-45D3-9C7D-15F5C4712D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC5960D-B917-4ABA-850F-A710676ACB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B746A138-6650-49A3-87C8-3728FE5CF215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50C2A13-5A8B-4FA5-ABB8-1157E560503B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F9D55-9276-4CF1-BC63-7CEEF8F25C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F383D276-D5EC-4335-AC09-9D30F6443AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C2A7FF-6AC3-42B5-954A-9AA5950C523A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7F36A8-C291-423D-AF28-56AAD8D0F712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2009F4-F832-49D6-8346-54A7328BD93B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9221DD4-498A-4867-B647-47E42299CE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B839A425-E08C-41B1-9270-E177E40B1E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4DDF53-0995-4971-A980-30FD15A40C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3BD921-A58A-47EB-B90D-21C3A5D02D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800FE449-350D-4C4C-A8C2-D4C5A3B59F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49BF8F7-5ACE-4D90-8F17-1AA9D3A2FD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE6D050-F186-492C-9813-895433B2612A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6157AA5C-8297-4A32-B0A8-1E7E801E9CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A13091-02C6-4D98-90C9-ED4C43BDAFAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C3E0E1-C3F3-4D53-8116-7D1AF3CD53CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F3DB48-E1EE-44E9-85DE-9FD7D5C59B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E064BD-CBC0-4556-9BCF-87D808809237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D5DC14-187B-4808-8377-5FF44A11AA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64079FC4-53D8-4DBF-A2D5-2CED256F4939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF969BE-46BB-4AD7-85AB-8384426E9551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EEA7A5-67FD-4CA4-8FF8-4B17A9C47B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E618B3-DD03-4ECD-AB9B-97F1EDF95E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0DFE19-1C68-40E6-B8CD-9CC03F8B4281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20424324-881A-496B-BC55-62AA75994249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67012F3-5153-400E-BD6F-EB0949875F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40E9AB5-26E0-4BA2-9AFA-496BAA0EAC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BA4B2D-187A-47EC-8BE1-7EA178549476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF52FB9-4EA9-41A7-AD29-E963C09FC98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C8C6E9-D5C3-42DC-B431-9097B2FCCB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B5CF41-7F01-4AE9-B54B-8DB6909504B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BDD9D1-0DE3-4FA7-BDC1-2A724162CEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C80EAFF-E577-414A-9DDE-D27A41CB3DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CC07CC-0C79-48ED-BEB6-4B576A0DBD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FA6817-C5B7-410F-9CF7-801CC958C12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1576FC7F-B7DD-41DD-A95E-23B1F86E4B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3768E4B0-E457-47AB-99B0-7C1A0E0CBE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D142088-0265-4987-8F5C-029F3DD06A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EDEE39-865D-4DA3-B1C9-033F2FF1A56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E1C03C-0737-4E2B-B3F9-10770281F4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7052D2-0789-4A4D-917D-FCD894B7280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956F0A8-7424-437C-AAD8-203183BEBFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB57F9-5B37-4509-B2EB-6A16DFE11F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F6504-9CD0-453E-8C25-02BB9EE818F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E842AF74-D1E3-4F71-80F9-197B38942405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A48B1-112A-41C2-BC01-BCCF5794553D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6448B4B4-022D-4D4A-A6DE-0090CEA12595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42813600-3186-4D19-8AF2-F4F98D3C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0969E6-151D-4298-8EC8-68D7880E994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0091CE-3386-4CCC-A2A8-900842EA6F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A450E0-09E4-44C5-B55C-78A4BDAADA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8285C95A-316D-4965-A34D-3BCB9AB83FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213F0A66-A71E-4B64-A66F-EA7B9C0D9151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D33B43A-1836-4402-AEAC-59CA8F44E3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B7B477-15FD-4198-B0D9-0F9A8A2E4C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6887033-E697-47D0-B6E0-61B64E9D3AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C1AB6D-F2C5-4726-8792-581E8DCB9EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA1216C-903C-469D-8615-ECFB3AA29BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0707169B-34B9-4666-8EBD-F5967059D6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E84C25-0BA3-4446-B208-DA0AC4BF7F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD99B7C-B785-45CF-993E-3A4FA4CA9060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4714F698-BBAE-47BB-99E8-F90D22415EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB55BC7E-0B3F-4202-8768-08F27B763926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB01683-C482-4A5B-90FA-B5266BEA452E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA16481A-4A47-4A8E-8C78-87B3A171280A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0258ED-6ED0-49C7-A13A-368711649FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049D602-54F1-4072-936E-0D7E337162B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0710D6C8-AD34-43E2-B72B-315FFF3DC34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8F1D2-2196-44C4-B420-824F49BB4ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E14B8D3-6D53-4E84-9B5D-24667B192C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CC96C9-492F-49CB-BEFE-356581E96B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1F7D4-EC51-47D1-A71A-9EF98C51D388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EBFAB-25E2-4245-B748-92CAA943D4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BFB446-5747-42BB-98BC-B8DF250F1842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A13A9C-5387-4670-8E20-FE878946D091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC39DA3-8171-4344-A946-7965873C56F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C31567-8AEB-49C6-AA60-4150411D62AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA140CB2-C17C-4164-A59A-8585906057BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39330218-32FA-42FF-B5CA-288B7D140304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D7CED-D036-414B-B9EB-DCAF7F425A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAAB02-140D-46F2-A315-5791BF5A853F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B4370A-84E5-4766-9D9D-EA1C53D73B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2F3C77-89CD-4990-98FA-E896079B6C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D03293-9765-46DB-B53D-1B23D5C14373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0286DAF0-FACA-4F94-82E9-EAED8750DB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E77826-1208-4582-A94C-242B601BD456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD617A59-2A4C-4264-BB5D-0126EF292079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B9FC85-13B8-488C-80C4-C29C0E244601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7582A-835E-4A84-B197-EB40EE7985C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C489F4-4501-48D1-830F-169382343B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7C150D-8C79-4CF4-A6B6-AA46A94A3B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E044883-9952-477A-B2AA-3E0BB90C96A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D83ED80-972A-4548-9AB0-10F9A23DF749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D99395-D18D-458E-9880-19B7767F69D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7DD812-DC72-4816-8B0F-361C32B2CD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41D4CD-D5EA-4678-B3AA-962C7C937118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996C9552-5743-4639-A077-5B057605DF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5779CE0-7691-47DA-902C-4D32D6650C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D12EFD-71D6-480E-97D5-278CCE4A7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE55AB-8170-4E3A-AF89-A8F79599901A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10653A-0E7C-4014-825D-76B5B438D378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77642A96-EF7F-4138-97BC-B3793EE0FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE9F46B-DD74-4295-BB6A-9239E29F4416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F53875-D589-4C34-B863-67AC9945BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B313B0E-4200-427F-A156-1EDA681F439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C49821-3BA5-4B44-84F5-113024FD030F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2011F264-53A5-4507-843B-46F66D285ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE2EE9B-D44E-430D-8469-1DF0ADC322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6B45EB-97BB-4683-9092-95E560B2585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3AA854-0F4D-4B08-A249-B3C19C056D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E55E46-01F5-4C0D-8A69-1BBC590188BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BCCA3-958D-41C4-98CE-1A333F9667A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245E680B-7A2D-4F98-9D59-6ECF70FE882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C78E5C3-4D0D-4DFD-AA91-93DD58B195F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F831FD5A-1D54-4DFA-9AED-C3F2CBCE4069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605E74EC-D021-452B-849D-C5E42D34BA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333BA077-7CAE-43C7-B6C6-836F2A4973D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDA2E9E-C62A-4533-ABCF-971E901150CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29F95F5-6957-46F0-A0A2-CCACBBA14F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9EFD6D-A657-4102-982D-7634AC25E75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59593836-990A-4CF1-AFBC-516C4A318641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5479676D-6B3F-4154-B0D4-D2C81E6C941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F062A64B-7184-49C6-BDF5-8A413B0A85F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B574E7C0-95AA-4A24-9470-FA282192D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5B88C0-F809-4A58-9708-60C56129142C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF8738F-8D49-47D3-B60D-3145218C9C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D146E0E-59DD-48BD-9A74-4E4823590E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FB5698-3AEA-4246-A677-7DB3DE73605D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56190201-887B-4157-9323-AAAA1CD86F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0863F213-2EDF-4874-AFB3-E70B4B356BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2780DD07-79B8-4096-A435-DB8FD6301E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2D8411-7317-4865-ADF9-279648210E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA7A9-F4DB-4BC1-9233-F72B66191F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D8C893-BA42-4EE5-A790-13614A6B436F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339ACF13-0E1F-48D6-9939-96B16AE857CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5D09C9-4559-4FED-B4B7-EAE5935EBCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074A5E58-A066-470B-840A-1148A8979DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF2C556-48E6-4572-8FD9-4DC8BAD90B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAD792D-70DB-4123-8BCC-B6890A9BCAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7425B1F7-FB7B-4B5B-9713-015D2101C319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FB1712-7D75-43A7-A7BC-30AA73265E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F273C29-0615-45E9-9860-178227E726B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E59B31-CBCB-46BC-A2CE-98754FC8C36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6279892E-BB24-428F-95AE-07257400444B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8208A38E-5B6E-4669-ADAE-E40A4C0E3A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E70FB5E-2729-48CA-AA96-D2A4B2694CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FCBAFC-41BE-4650-B7D1-39F8C7688870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:100.14\\(0.4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94543E47-A64E-4345-BFF4-0D4D539EE4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:100.14\\(1.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C5DEB8-688A-435E-8D80-14468F8FFCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFBBDA3-8A5E-407D-8608-45C1BD56BF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BCF2C5-A881-458F-9489-DAFFFCBBEB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B94CEF-FE61-479C-8BBF-81A7D3A4F32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DDC99D-8B73-452C-94A7-A9A48F2F379B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE82F26-02FE-4BA0-88F4-88D834CAD6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DE48FA-C33C-491C-B235-448CF36F7B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D801F3-1C3B-4564-8498-25A49FE0CEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12551307-4D72-4D24-BA0D-07235EB762AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031B43DC-9FF7-48B8-815A-C91E6A51A730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14624D88-B29E-4FF3-B3CB-CBE804202683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6802931B-6461-4266-A5A5-42F3BFFFE509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8A9960-4372-4B21-ACEC-6E46E53921AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E32C808-0471-443D-98AC-DF30AFFE633D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2a\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF347FB7-BA1F-4888-A976-1C196C7AA921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "593E5730-3777-4DEF-A1D3-73AF0B98448B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2207E5-7458-40C5-AEF4-73B271EAB3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34D17AC-A587-4472-9836-80CE24C34625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4C50A6-1A11-4E17-A24A-7956CE00E0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9D86DC-9417-47F6-9103-76E581C6B6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7109585-1433-4940-B7C9-C561DEAF1498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C217CD0-9EEF-42A2-88B2-6B1887C3B70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F96BEB-19C2-48E4-8884-EA61B32D5BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)xe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6E3C0-F981-4F1B-8524-4013F2E97626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8E8E47-FF3E-4BF6-87F1-934700AA632E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F9AD39-CDA0-4CCF-BB81-379FE4533EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CD9FB1-FC65-484C-97D3-09428A79C00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B93745-F14C-428E-9A90-47ACE43451EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0D82E1-CCF7-429B-A637-479E839EAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1B2747-4A9C-44FC-BBA8-39E338B30417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7E1C07-4383-4B85-969C-11F7887ED8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65176343-0120-4038-844E-FDE48A920270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C899E5-CA5E-48B1-8E0F-EDB66557A356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F7F85D-0B9B-43B0-A3B3-2C1E30315330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(4b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2F85F7-5ACC-4823-960C-04071AD5F078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BB7513-C232-4B4F-BE68-972B05086ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4F875A-D58F-47BA-A441-2362C1688256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCEE111-BEFA-4285-B892-58DE3964F497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA263B60-E7C0-4374-96DF-6E4EB9C16743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C570B5A-185E-4AA7-A8B8-BE80605020FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15295BD6-CC76-41BE-B5A0-A08888207011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "988A680B-FDBA-4A06-871B-AE9D1534C5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7337C3-A659-48F6-82E4-E557167FFC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD8D473-4C10-4D8B-AE91-8AAD40C00138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEC932-C16C-4E7B-A4C9-7F4715A8BA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A53FFB4-5C2D-4266-8EBC-63CDC64F9B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCCE386-7C14-4E6D-B803-1DB8B1B6E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0BF960-62EC-4A5C-AD56-67D20358474A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E23E273-1962-4EAA-B7ED-4DCCB1B128DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1423776F-1C73-4872-81F6-29C411B6E545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B730E9A-698D-4DC0-AFFE-A1DB7E56E1E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FA18C8-0152-4035-8C6F-9AAC4B1985B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B58A48-9028-4736-9556-0AB895A6901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A261A492-8EEC-4659-8400-4E5CB8F65B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE69A3-41C6-4893-86D4-7F264352C8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083DC46B-AF61-4507-AA09-5D50BD289E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EAE70D7-1360-4BDD-98B2-9286DC16F363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3286E4-A7F7-4D5F-A9CE-B2A0C0FEFAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0CCFA4-494D-4F7F-B431-63CB03297A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9ECD601-83BF-4D1E-ABD7-789DBFED6D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C575430A-762A-405F-95DA-92589BF4C611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884C496-04F2-4401-8F33-8543E2A71A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F7E834-DFDE-4075-85DD-57FE3035D5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE808362-AFA6-4270-8ECE-8FFD10EE3678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA0B5C8-9BB3-40BC-ADED-3A21DD019A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA654CE6-82C3-43D0-BAED-70E88A740BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1720AE47-5ED4-4E5D-AF25-F9FD7E43F6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E339A080-2572-4764-BB7C-F49F66432BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA30506F-4C7B-4540-B226-44A33CD98A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E737A2B-8B1A-4F53-B1AA-ECB354D10D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC5E6E9-E639-424B-963D-2760B2C38D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C49C21-F3B6-43C3-B59B-40070E02F8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDCC99B-BC23-4101-9D73-A21107FF8630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED4869D-EB53-4A7B-A630-69B8D76D48DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6833BBD-CB8C-40E3-BCB1-193E0E03A95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "387FCCC1-B05D-4493-9F05-BAC5A0E57F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(8\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8425E546-EBBD-49FF-8C4F-10CB7E6B0B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(8\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E0F459-8A71-4FAE-BE7A-6C56E28988BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(8\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DF9243-C06C-4384-BC4F-32C615B1BB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(8\\)sc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C6046F-1E9C-4575-B98D-5D893A0497B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E63F87A-7BBB-4619-935E-F1F0C3C7E322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6ABDAE-182B-4367-80B6-B8C8ABF92059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EB360F-7BAE-4BB5-BB55-E3FFC567A1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA03CF9-26C6-4621-B73C-EBABB20CB250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F722FC00-53D1-4821-B1E8-0E2A978FFCD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE67186-1364-4917-8309-5A29F5DA3097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)sl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F730DBAB-9A6A-4612-A315-04E5F5932238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)sl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7421AB52-D8F1-4B4B-92BE-F677CA4F53CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D475FC-9F57-4BB2-AB55-2E537C00E4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(9a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B94014A-8415-4174-AF4B-C9026C6EC559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FEB240-8BB9-4AD6-8188-836D866F4F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58233A12-09C9-4AFE-8115-E68FD7861673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4DFE44-DD42-42EE-9105-67C7FBE28D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2CF72C-8792-47C1-8937-A6964863960A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB5312-A703-4D65-BE49-103795FBED22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F41EB6-4214-4A86-BBB5-619154971F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EB4062-99A4-4FA3-A101-AD01510EEAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFDE195-9A26-45F4-8035-05B3C22F067E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E5113C-945B-40CB-9F5C-0B7063704364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB25BAC-590E-4496-AB43-64A8EEBFDCBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DA0EA1-2D66-49C0-9A8E-FD4D05D24AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)sc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162F67BA-A1D8-4471-A11B-526E28198EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9778314F-56C0-45C4-8EA7-70734917A96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CC66A3-413A-429E-9F20-B984BFD1453B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320486EF-1082-40D0-961F-2877A0D5C66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C370DE-48A4-4800-8E81-50D32B14E718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F22FDF5-ADA3-485C-8A31-35A75A33A622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(10a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1863F9E2-9FFB-4C19-92E3-15DD9ED72608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FC2BEE-7BB4-4CD6-9DBD-3E38BD381528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE5C4C9-E1C0-4B6B-9E69-518B913A7BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8A1A18-B3B6-43C0-8763-B4CEB1C0B99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D746F4-F56F-4509-9DBF-DF81B6D2AB56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73890B4-274F-4E74-B4EF-6112B8C9F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3976D56C-CAF2-444C-9924-9D63DCA06067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E042391-AB19-449A-B2D2-2B04D19E47C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403EE717-FD69-405C-9544-6349CBE09D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94C2EA0-0E09-4442-B480-857AD2F676D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4BC4A8-B718-42DF-B1A3-FFDB25F896AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)sl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D960A96F-E938-4181-8306-F40C268A2967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710F1C0D-2F43-422E-AF41-195531C28DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFC6557-D57F-49BA-8BD6-6510D7D2D960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B3C094-DABF-42E0-835D-5A3E1707DD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)st3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5C9475-8235-4635-AF1D-5EE3DDF32417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)st4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF987B2-BA35-4933-85F7-7F3F2C732961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(11a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A942A-4A2C-4A87-A866-12B758DB645B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FACCFF-1222-4C02-A286-717E954A7ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F77F45C-55A1-4856-A88B-50B8120B4EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B8B584-05A7-4DCE-92AA-F5FEFBB79B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7296C213-7632-4DE6-9890-080D713E23DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E0B16B-D4C1-4140-830F-4F5C0D90AD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15063AA-2800-4856-B3F2-F727BE44BAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8ADE6F0-32AB-40A6-B70F-84A86A3C2317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(12a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3C8355-42F3-43DE-A2D9-0B77138461FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5823E9-75C9-4F0A-BE8F-FDA7F7BD8540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB23619C-9BD3-4BFA-90E6-0B75CA53A640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D979C2-67E4-49E7-99D5-F27E9E37B259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE8BB55-2111-48D2-9EF4-B2B75D6BCFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BD2608-6609-42D3-8984-BBC533A2101F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D9D01-D87D-4A4A-9164-13E8116F9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049F128A-8BD2-4717-B9D6-FC740AC02C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BD6B1C-DDA0-4C64-84C5-68F51BFAB457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050F0FAE-8871-4A14-9180-4779014D9BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E80E93C-58E5-4325-A4A8-06CEAD2DB464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3572607D-5E92-4706-8B83-C5CF01E63416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C7CA43-AB0C-4085-BB46-78A622241E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F59D2A-D27B-459A-9CFB-7CC675D020E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0D8C6A-13EE-411B-A5F9-AB0F58D3BF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FA7482-D97D-41ED-B8BF-F5A8C810EAA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD73800-27FC-4F78-928C-BA9D20EEDC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FEC251-10F9-4E52-9909-5EB2100C2878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A48911-528F-4B3E-AEDD-3B053EC2678F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370BA3E4-EE4D-4ABF-A44C-F141FDA89DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B8E04-A044-4A32-ADB7-9C25B32E9F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF44B838-8E44-4281-94FD-922A60047F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07D64331-E78D-4BBC-BC12-C7DF14EAE2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480111A5-DEC8-4E00-BB59-38EE9F747262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)sl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C8EA15-FE0F-40A4-9656-30B401F4A444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353010B4-3E37-4451-9B17-EF5701DCE9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553D665F-5EA8-47F8-B78E-8A914BEBDCF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9AA841-22CF-4DE0-9103-4E98679740EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)st3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828D84E5-E8E4-4425-9E35-B1EBDBE245BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(14a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DBE65-0402-4205-8820-48EB20386DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D779F-76AE-446A-BDD3-C8B8003D63A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8ECE5F1-5153-4F93-9618-CF7AD2B3C426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD6DF3C-0602-4C35-9C12-6A0635176020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CF528B-A4F4-4BFA-B807-4943F76D650F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC97D92-C82C-4CBF-93E3-4215B11FD896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF6B72A-E79C-47DD-942A-AD83578DDB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1262E417-402F-4ED7-9E7A-F8E0184F8759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295B139A-50F6-48E7-B42D-9A53BCA3777F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992DF258-DAEC-4EF1-941D-7DBD347546B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52531223-05D2-41C7-ADE2-E957443297F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)sc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7C5C5B-2F74-4ACE-A03E-71374098AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E611A0-B984-47A6-95F3-B582EE0766E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E93E4A5-6D2B-4E79-B713-7CA1BEE0E36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(15b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "654DBD6A-8122-4BDB-A042-19E9A00DDF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "965B583D-471F-4BE2-BD49-798E2B29EC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF480A-AD29-4CE3-9B88-E917D75F3FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F625617-A62C-4322-935F-305BC17F61B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECCD46F-FCC6-4DB2-9397-2BF1E295F62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121C826A-747F-43D1-A7A1-EB57CB0864B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F65B012-4385-4471-8B1F-A2DA5617B926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91871BF-0979-433F-9BD6-04D14F9B6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03C9ACD-FBD2-4247-8D36-E68296EC151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1650F5D-07D8-48AE-B9CA-34C84D43F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2657AD4D-F324-4527-9C4F-360946FE0D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CF1C3-3A5E-49CA-9D01-AC3DB4A7159E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0359BF58-50EF-4FD6-98B7-45171B9504C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C19B39-258F-4A26-B751-8E9AB4807718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641A5B81-B92B-4A65-9828-C7795B0AB4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)sc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFFBEDD-D2BC-44F5-8449-932274315BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)sc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB1B5-D1F6-4900-AFAD-F39B53CE5470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)sc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD766E23-7CA6-4CC3-9CFF-4E81E370CFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E68F0B5-D6B5-4012-A563-346FD83AC9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C3D66E-C49F-4A41-B67E-D9DE768356FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(16a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD09CC38-FBBD-44DD-8322-F642DC8B6F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6342713F-C4C6-4451-9637-B744311EC287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95185E5-65CF-478B-B450-2FA9C05E4A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F532AD9-8EA3-4302-91D6-09EE3817F81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C10580-2221-4DED-8C79-66DA7287E31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1BD7BC-ADE7-4811-A466-628F37928F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D281BAB0-994A-418A-8FB9-C8F6509DC56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA9EFF4-BE57-4077-825E-009BC01D933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9FE1D3-5B0E-4E3C-8EF1-19BAAB81D583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5E2F5D-ED58-44F3-A26D-D93DCF093C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04586FE6-78BF-4171-8A6A-EFAC90BAC8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7CE8AF-C2C5-4664-B723-D7ACA1CD5811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4444CF9-66F8-4941-8300-4547BA7C164B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F12759-1D73-4CFA-AA61-7C4CB1E94653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03CF529-73E2-45BA-B29D-9E4F7BF1412A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C443B7-6774-4F50-B8F6-008A59AF2096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C204A1-935D-4CFF-8FBA-9A6E37597E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC201B08-A495-4B84-B64B-54CC6AAD420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D79636-074A-4C2C-83FA-7055A58E01B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA42C30-EB70-4030-9D02-0F3635C980EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B3D096-3D20-4F6D-98BF-EB4B4B06EE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D79347F-006A-41FE-85E6-96B88AC57D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F9AFB4-AB99-41F6-A1E5-F07B3BA40599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4EE26C-9B9D-41B5-9E0D-46D599EDE8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C38A6E5-DF0A-47A8-8574-B34E1E9A947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E7679F-9700-44F7-B5BB-1293582A4BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A125557-4893-4C74-800D-D5A2FCFE6C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(17a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7B649-548F-46B5-BC0C-AB4013CF290F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D30532B-303D-427E-80C6-B051B39D1D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4D37B0-460F-4F16-B4F4-33A4DB80FC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108457DC-9B6C-4240-BF52-6FED1B9423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE13EC0D-1058-4A75-B594-7D1F2D3E0816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45952551-BEA5-48FF-B901-4E0027C6E457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A50E6D2-661F-4AB7-AAB2-AF2D476A3DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6018992E-1FB3-4ED8-ADC3-3BA49B76165D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF6C534-3DF7-45A5-8F76-DF75A7EB0E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846C7BE0-F218-4AC2-9762-118DC107560D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684ED113-91F6-41BC-BAF5-62041D850F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58781CA8-478E-4972-A393-7802BDB36BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEE0CBD-9810-46D0-87B8-0B46926C2F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B09CFD6-0C51-4D89-AAE7-D8E1B08C0EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(18b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDD3722-C5FC-4AD0-83D3-7E5D2F4B51E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BB143D-CE87-4B5B-8B41-F641C160624F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BF4CAE-9C49-412C-A3F3-F365D2E0F619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EEA827-AF55-482B-BC8F-1589118DCA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA28B36-9E53-4D2C-9ADB-C878182DB688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801F584F-A11B-4C28-BF74-2917BED984DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E01C42-3154-49C2-AF48-9F91C6177552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6B7A5F-DFE1-4597-B121-BF4714CD2E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7D5266-C127-4CF4-B1CF-3D639A9E204C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A39784-646E-45F9-BFAA-880776013D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363F8B87-F88F-4AF6-AC67-DA334E854B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4E81A3-146E-4375-9982-A0AAE12FDDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78459C5-2762-4652-8D34-772F3A025381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52877E55-8DB4-4E4E-BBA1-72F2E1B0C6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C7EA72-BA53-4A2E-9E01-6594565AC358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9AD4E-CF9A-4772-9E84-6C11401245A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F04E5DC-ACC8-4713-9367-F685C197539A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0357937-D9C0-43A1-A6B3-4FFE3ACBB357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E37F723-C67D-44CA-9C3F-294ABCC60274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B83B0C4-897E-487E-939F-1E40144399EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ECD6C4-10AA-4B34-96F3-7EF6A093EDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(19b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F3276-4CBD-4222-A85F-2167F79FA2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70D7C4A-00C6-4FC1-82CE-8BFDB6558BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDF9828-5951-40D9-B2E2-C92138E1C3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF17AA7-D3FE-45DD-9CF2-1E6844F68A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9032AFE-430F-409F-9558-F2179CE19087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D45D4CD-8753-4BF1-B21B-BA4FC14710A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D75DD6-51C6-4F8D-8885-80F53B9A42AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C3BF2-D500-4079-9BD3-698F6B9C3379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587A531C-B3EF-4B7F-872B-7481E38BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(20a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1734A3F8-45A2-4590-9518-0753F503433D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1BAAAE-64F3-4982-80C5-E97B14A07BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8735B4-CD22-40E7-B7D2-C7A4B559F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EAB9029-DC45-4F55-A4FF-F6DEEDFFA150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A59C50-E192-4560-9BDC-65D34D2AA614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5310F83-EB1F-423C-A5EF-681FECAD66FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0018A817-4A25-404A-A288-02028EB3ED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390D496F-AFFE-4CAA-AA27-66E8C755887C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A88CB1A-6AB0-4605-BC64-BDA3865B3C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CB6075-DB61-4BDE-BD9E-4DBE06CF25E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AB2EF6-03CC-4C83-B81D-E7C4B2C03B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E41A9DD-65DA-4276-BBFD-0DB27805A382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B88B203-B522-428B-A273-2DDFF9CC2898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E87A9A-121E-41D7-88ED-E61A29741DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E247E-5514-4489-A169-513115AB42D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17566E61-4B9D-41EA-876B-C0952CBFFF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90665BC-94D1-4C6D-B908-4207030F19B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E44F0D-A140-4A4C-9DA9-469EC5875DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFDA3AD-5BCC-450E-A8ED-C8DF307BC4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A403EBDC-7118-427D-A383-8558DC86DEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63A470-D9B3-4773-9075-7F8B73214F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E288B46A-FD62-4208-B8E3-F93C6B1B1273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839A0960-3EDD-4A73-9D1C-5A5BACF29CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEEF0AA-002E-4768-9302-B7CCBBF25C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1954F4B1-7E02-41A7-968A-4590F54E77B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BBC74-F18B-470A-A1E9-4D67F5866D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A4E74E-DE87-4787-8E2E-3C7D77E02224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)sx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D913DB3-A8A7-48D4-8BC2-69BB55C2A263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA59F14-5C5D-4BB7-A08D-3FD2549F9D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(21a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "442338B0-C242-45A1-8860-4386A5033C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E686E7-A875-4C95-B70F-49D36533C630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6070D9A2-9A74-46B1-979D-F3F80D69513E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0728C305-B321-4B45-B696-38A05DB47268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0264E8DC-FEFD-4BF9-AAEA-9E50B2016B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F9DEE7-ACC6-4E8A-9D68-A2CF1638D0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296A483F-363A-48B6-AAC1-C123341BEF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FEFE3-6A9C-40DA-903B-9C95473ACF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96DA6BC-1928-4784-896C-0D69E3418564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C8C0D6-214C-429C-B3CF-7DFF309F6B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600CB264-1DC0-4AD6-AAA8-552E961A74D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C1316C-3FE8-4CC9-8CA2-0701393E4985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3241C5A-0EBB-4F31-9BCE-C364A16295C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156B5451-D777-4942-BB5E-ACBD51749E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DBB2CF9-2F36-4CA8-8814-C34AE5620942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D5D66A-7524-4209-A641-6B7B53E08E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7498FF80-0A4D-4510-9C1A-DA24E1A4A4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7655FB4-AB4A-44DA-891D-637BA29A81EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64F685C-EB5A-4A13-9D97-F1ABAC23816F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5EB5FE-A51C-4C40-90F5-78CF7B49CA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A369BA-657D-4E14-AEAF-A85C12B1F01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88C529D-6ADF-48E5-A65C-588EBB7E40D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448CA2F-8C4B-4834-8B36-B2E60D7A2D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56FFEE5D-63B4-4E37-953B-41F266CE9301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBAB365-6B58-44D2-A078-B3B4369CA32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A78C4-94F3-4F0D-B480-7A7989C83733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FC8CEC-3B6E-450D-A664-954C7CF823B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3456E77-D75E-45E3-B0D9-AA6374493D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332C413B-7AC7-4475-A968-9D0B7EF14B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35999D5E-F831-446C-B509-F1531A2D1DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67DEFA98-F2AE-437A-8BE3-7F021C0AE76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B8DAC3-EC99-4F1D-8381-F3D279CA0729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F37758-9AC2-4CAA-8A09-5A59FC622267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DCE7CFB-9250-46C3-A694-845153A2C6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C3BF07-3AC6-4279-AF81-EA7768896AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB97AE04-F03F-4A3C-A1F0-527158000E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B046F0D-4C23-418B-8FD1-035C7CA4A612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FFB681-1C03-4563-BADF-C45B4894DBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sz3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507C7471-9E00-40A2-8719-CAB900D300AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "659BC5A8-460F-4395-B0CF-2099223A3B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7B6278-9DC1-4152-8F02-71120D8F0E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3630462-F414-4D6B-8766-7CED5366C852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6D0C5A-87C7-4169-B9DC-2AFA217888F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D5D1B6-BC4E-46FE-8D6C-8E43832F734E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CFAA82-7CA0-4391-A35C-A2AAD8A69A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02150E7D-68EF-48E2-A328-6AF9D21CF5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DF5979-73D5-4B2E-B98E-CD0AB8517F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D354F5-E7BF-4DBF-A76B-1AC8D35D26B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA92F7A-C14E-4186-8E96-51D2BDC40DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451B6F0-429F-4B75-93F2-52AF4F65D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "634D6F3F-E037-42FF-B336-62840AF394D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367A5924-A0CD-489C-B74E-0ED8AC21647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C634FD5-0716-435A-8D5A-0640DB34C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187DCDB9-A7CD-464E-8FE6-63E23B9F396C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B11BDB5-C7F4-41C2-A3B5-B5CAFAC999A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8670AA-D64B-4334-AAEE-F97BF74A42EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90AEBC1-B79A-4883-A109-F86B49AAC47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F746D6A-1497-4B9F-98BB-90872B3A0E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14606475-199A-4797-8B17-4347F391888B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E37C57-1AA3-480B-9F7A-3D63BE5838A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45455BD0-2B62-4B29-A22D-69FC32C5264E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C33EA0D-4C6E-44BF-B00B-EEC34499F962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A66503-7BF4-4EA2-9C0C-454EF9D6776C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771E5FD9-E6B5-4AC6-AA51-399442A4CF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31EC7E1-2FC9-4ABB-8C3E-E361F6673E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F044A37-820C-40C5-93BF-9F4E617B5147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3E4C72-874E-4A88-A17C-27F32A529539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD6291C-3FAD-4B6D-8DA1-573EB71CF7C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9465E5CB-2844-4F12-8EF5-F65E4D67E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829695D-D650-48C5-AC5B-FDD6B9125E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C37C455-D223-47CF-A5AD-02C970CF3447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)sx10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D71002-BE24-4037-B6D5-A4D240281BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17DD4A5-9E82-49EF-965D-DF714DDBFF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25058DEF-01CC-4148-923C-7AC433D82E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179CEE21-E5CA-466A-BAF0-8936F2E0B06F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F22B210-D1B8-4875-BDF2-2BE5B116B527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF3AF67-1A43-4459-9A78-566C63663A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C4B4B5-D96F-43AE-A4F5-830A8BEE110B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26230378-5E18-4401-9356-77FEA52D6508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1E0BA5-4A57-4D26-A453-A4D5D56DE66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A300584-6480-410F-8399-092682A62435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00682210-2C86-4912-A423-5F7011C2FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5C5244-8E39-41AE-931D-D935DC3CE00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C17FFCF-3E76-4D19-89A4-1A377C44E9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E2F788-556D-4018-9144-D80422BF0C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1F905-216C-45CA-B432-BBDB714B2F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E513706-82B3-4DFC-8DF7-FEB566AB3D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "816276EF-A529-4522-9F49-80E9FF64F795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8085420E-BF3C-4C5F-9925-28D7EF5594F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6342FAA-D745-424C-9D5A-3B2F37880A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11662FEE-1C39-40F3-8362-B09DFC19FA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1336C42E-DA75-4DBC-81E1-70DD987EE54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978002DE-1259-4AA9-8369-CBAED8628CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7042F5-2878-45B2-856B-5EBC93A2BE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF72C3D-5098-42A4-A900-544591EF5648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA45EF8-C69D-4A72-8933-BE8A3D174869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8399B9C8-D811-4E06-A6C0-3F762B636A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C4011A-B88C-49BD-B798-786EAC87EB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(28d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F864A21-658C-4789-940C-E915F6C9F8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(29\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A64DF-0C14-4AED-8460-D5C03AD1B11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(29\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B61399-D7E2-45B2-888A-E1D61468E62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5E7CAB-2905-43A3-A00D-3F5796A76C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49C8C12-CE1E-41B9-991D-CC3AE51FEA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1DAEE2-8026-46DA-A652-6E0CD5A6A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556FA3BA-F06E-4BF5-8804-ACFE4EDA7432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "616EA4E3-C5FC-4145-963B-E3ABAFB5E5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8822DD-64E8-46FE-909B-039A01121E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)sz4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E34A000-A4F0-4B0F-B9A4-CDD26EBD4AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)sz5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82EDD77-C4D5-493F-BD53-33EDF507D538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)sz6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6C3357-CAD8-4CE0-8525-9AA793E8A7A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)sz8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368B0972-49BC-48E5-B7F2-B138FC23AF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)sz9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC224844-B8CE-4C38-838C-E88063DCC07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)sz10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CCB476-6B48-417F-A286-B83C1E344E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B896570-8184-4EC8-8EB3-95312E4ED869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5743923A-A78D-4C8C-99C5-5063A609700C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C8F1D2-0C9F-4032-A6CF-665FDB247A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34765AC6-303C-49C8-B8B5-BC3A61BE152A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83F3FF7-4EC0-44F2-A509-31CFB43AFE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA15360-A99B-479E-B96B-10CDF621559B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2B1863-1394-4C6F-BC0D-96FDF39ACDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65931E61-4156-45BC-BBC9-E220D1BE60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5D94C-4BA3-41DC-BB67-36CA4157704A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762D9EF3-3CE5-4F24-BCB9-2B7D7E9B07D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CD362B-6DB6-4737-83E5-860AE46AF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73DB33F-CA9E-4A95-AAD2-DFE1E56E70C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D499FB0-A078-4C57-8C02-362F5DA29F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9075CC98-BEF0-4D4E-969D-C99A61D3B6E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADD5F4C-5CB1-405F-83C0-D79BDA9E652F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C91C86C-15EE-43BB-B8C3-8F97C4DFE778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B05C4BC-C3A8-4220-A91B-B9A1A2BBC2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FCB14-B96D-40A6-9C87-EC4613045EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818FEF1E-BE11-43BE-9F50-2B1CF7D585A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F505B0A-E9E0-4CF3-B85B-70EEE71314F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED66A91B-6429-4983-8167-07DECA601916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DBAA66-04A2-4638-AADE-33E3C1FB5F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F8DAA3-2EA1-4EE6-B838-075B4D8AD57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3C1559-5EC2-422A-B3BE-16BD2F3FD5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC231CD1-A0D2-46A5-B7E4-30E4CE846B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA05909-40E8-4D04-B923-E391B0E4465E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7BB044-B6C8-491F-90A9-2AFEF119C266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1425F1-F6DC-4119-B8BB-6136FD0952CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BF6F61-5115-40E6-AEDE-E315D3069E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772D4EBC-0E22-4FB7-A058-8E944283B297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86B6B11-1A55-4EEF-8748-E6CDD19DA572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F288884-3DB7-474D-B56B-120E2DB7975A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29860C6-75E6-43A4-8BF5-E6ABF2040B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87C317B-1D47-479C-8D7F-FBEDAFFAA8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CDA0E7-2EAB-445A-89E9-41156474431D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD77717E-4652-4221-8064-CD0AA148B11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC11CF2-08F2-40CF-B46E-6D33D9576B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C10639-6F67-41CB-B982-4F83AF78ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE9AA0B-E4A3-49B2-AFDC-B2FEE10A2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561D2B8C-D5B8-4570-9271-EA790973D9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33235D52-02B3-45B3-AB7A-BA20028C0F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0148187A-CE09-401B-9FE6-599A22531A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAAED6C-05A7-4B93-B563-1EDE090D9B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8B91B3-9F46-4D0D-89F9-F715A57B6FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0C8019-BDDA-4019-AF64-352EFFAC9036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCFE974-9D9A-443D-A55D-6A2CBF96EC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E115D3-36AC-46AA-97D8-515ACCC36D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5273893C-140C-49A1-A5FB-EE276EBDD9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC115BD-087E-4BCE-913B-D323177BAEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E63F988-7D36-4FB3-B7B4-4A9B3F6A8022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983DF832-6166-40B3-9AC0-38C13DD0F55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6268DF-BC75-460D-AC78-6D90165D6C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E126B43-1796-4A79-BE7B-463BEBA105AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86E0B83-3098-47A6-9298-43D3D5F476DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75818AA-8EB8-4B56-B935-AF7B3583D1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D20FB3-E659-4A61-8775-7B3D007E106D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708FCBA8-5144-4360-A830-684F3836C821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F454FC51-B224-45F7-91AA-0CA73EDDF532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ABD77F9-0DEC-465C-B554-56E7C8AFFBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09F6AD8-4B16-465A-9781-1B650062FB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C0DE28-5B43-40AC-9860-0D2D1698DAA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96541BD7-7D90-4C56-BC23-7071A07711DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2161A9F2-DCC2-4CF7-BA51-738B09F0D773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA56EF-E123-4539-80EA-B94965EAA2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E35FE87-6711-49ED-AC37-9C6FB3A4D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1a\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDD9202-56A8-4924-AC60-08B223D5C3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16930C1E-3509-48C5-B534-8F82B3D30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E960CA4-679E-4748-ADDA-D122C5A2D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1AE0AB-E942-483D-84CD-551803251E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7577EA8C-4963-40EB-B7AA-D5933538AACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326374ED-7ADC-457A-A8E1-4C42CDB8F3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49805121-E5C8-4AE0-B2D6-92DCFB1BD714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A990422-7DA1-4776-BAEB-CCFC49E5AA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3346EEFB-963B-4F37-9E97-CF9EE91DEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACBE073-7B4F-4CA5-8DB0-1DBDA7774171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A0B63E-5CCF-4441-A6A1-B4EE1A556070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D154A102-FA68-465B-A640-BD77F11D32DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2a\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D14C05-46BB-460A-B25B-9A6E6F4145EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2a\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6AE362-5135-440A-8CAF-A3DA482B3C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58DAD06-8EE4-4991-8D3F-087CB2D7B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6812739-E9C0-425A-989D-E68CE3030E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156DB723-98BC-402A-A517-18D20DA45206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3\\)xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02516D45-C6EB-4B06-B309-C093E4C75F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CDE45A-5955-4149-B6C7-83577CEAFB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CB1C58-5BD3-403A-AC30-0E528E7C0BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA25848-4EDA-4D61-B3C7-A25A9E970547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28640526-A25E-47B9-9123-197DC470D32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C57DE3-ACD5-44A8-A35B-EC266A7D7051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA303C5-8B6B-482F-A38F-579236B3291D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30142776-CF36-485C-AD6D-2F245BFD88F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF621A5A-A65E-42C6-A046-CE995DF4CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D685D41-A2D6-4E73-86D7-C52AD75DDB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24574E90-88EC-46E5-921A-B15B21E5630B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05A9ABF-B070-4136-8F69-A492D7098C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D13C15-8F28-4250-A3CF-34696E01FCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5812D9C4-8973-4F63-A6B1-444323B57C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3061CCE-5295-426D-86AD-7E3905E50E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CF0322-73F9-44AE-84EE-E69B1F39EBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683E6594-C796-4A39-85AD-EBF0D1ADF8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35494253-675B-42E6-90CC-B5510024C4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A625976-9090-48DB-9B8F-7F2EE1D110EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8B81C-2C2F-4360-BAAE-CD2463890F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01456324-A17F-4CF0-822C-781AFDC6B932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6474961-D92D-434A-B446-79326F1ACB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8235D1B9-4D99-4015-A575-4AC533E8E879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9449A4E-43E8-4AAB-B664-69B1E3BA46F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF9AA2B-0E9B-4ACA-AAF3-0DFC3DF1FC0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB3730B-38C8-46AB-82B3-A1B954CA5BED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDE8D34-5405-45B6-BB59-3D2853123B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9996FC0F-8A65-4E22-93E5-DD01A9B410C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E0C1D4-265E-4505-8570-CE242B5FCECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3D3829-AA18-4C6A-9AFA-B6FFDED14581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22876813-6490-4454-8CE0-E37368B34E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF1198D-69FA-48C1-A853-083CE294D2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0950B765-26F8-416B-9716-8F62FB838EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0BE079-5746-4C3D-BA05-469C4E7F2C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F4D99B-F8C2-4AF5-973F-1CBE9D2569CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(4c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1FC9E6-4E29-49C9-BB8E-521C7786F2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0565A-DBB6-4910-A408-FF0F686DF760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE7A4D4-814E-47E3-A081-8EEF83FA864A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2D147-2566-4F13-83A4-E40660472EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C60337C-9487-47FD-95AB-8F6D012B59BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C51C5B-4070-4B15-A3AE-7FFD1EBAD555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC8695-7D0D-4196-8D9E-5768E3F6F3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA4D6CD-DF61-46A7-A688-2BDA334E8D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF92A2A-459C-49D9-A96D-AC39B01BB919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF9B04A-E0E1-4475-A33E-9F9455B94885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE6CDD9-B53B-4635-BF9F-65553480ABF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFAFA6A-F62D-436C-B7C2-516F9FF557F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4F2898-2F96-4D43-B4B7-EB316C3487BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54BB836-EA2D-4BEA-ADD9-6D82C5826D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E62EA-2BA4-4250-A60E-28483BDF3238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFF4E1E-FAA5-434B-80E8-E6EBE939C6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5CC175-AB38-4ABA-A1D4-0C80994EF160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B3449-E1E1-408C-90DB-504AD2857BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF6864A-9F94-4A3F-B127-323F2220D6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97156FB-BBBF-4EAB-AB3E-1C4740E2905A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED3057-BBBF-4A5C-B912-013307282E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F4B00F-B652-4A1F-88CF-43563BFEB867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CF719B-2823-4078-92C2-A6D7E247E551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2FD8AD-01C0-4FB5-AE3F-84C04FA1006B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)t20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727DD760-8E6F-47E3-A2ED-C0CF081D1081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05A0F6A-B2F7-4F00-9E9C-002E0E48E1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2272F9B-74AF-44E7-9124-0A067D16D3B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2156C7D8-8B91-407E-BD52-619F8BB8D17C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02309FC9-2061-49FB-8625-BACED7FA07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F2766E-6E82-416E-A24A-04D95459F99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27B8613-8A3C-4AFC-9DE3-159E31C9E399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC76C7B-C50F-4DB2-A31B-2CE36B67C5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA86FEC9-116E-4740-AD42-CF0093E48B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)xm8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EFB045-5434-4AF2-84E0-0568C18343EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80262A82-A668-4C85-A9AA-D27DCA9C327D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)yb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2457C01A-F008-49A8-9718-EC95A0D08B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)yb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F44952-5746-4D27-8025-27FC4B4E9CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5\\)yb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CA7C44-0DC9-40C4-A57B-5D108209D931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA5A08-C236-492D-AC8C-9DD62EAF145E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C05152-8070-4853-BC0A-01A0A2C226F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E28B89E-9D41-43F7-821D-E794E68CAC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5a\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C290BDDB-258F-4244-A6E8-387497730966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5a\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95C6086-E086-41C4-9165-6E33440F1E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5a\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFD0EA7-4740-4A03-B74A-677943226663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FEC3DE-3033-4819-8C0B-347588F60875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5b\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5D5169-32C3-4CEE-91C9-CF77D44B6A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2544486-0053-4A71-A55B-E8EC529D4794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5c\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5EF359A-2F28-4B3F-89D3-D35D49EFDCE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5c\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6752D6F7-878A-4C99-82DF-8B34E5A63B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5c\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD41A5E7-E1E7-499A-9777-773A5D8C9B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5c\\)e12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A661E88D-A248-4622-B667-FD2FD4AA3624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5c\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEAF857-44DB-49E8-ADF2-0B9676D14F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "743B06C7-A301-41C7-91E0-0EB35B3BDF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B11FB8-9490-49D8-AC87-F63F48B39CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9C34CF-FA5A-411D-94D6-3101625E871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378CE445-B38D-42D7-81F2-6C1913BF7410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DDB721-68BA-41EB-B87E-7302B94104F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF99DDB-E82D-4F0C-99EF-5A20C21F8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5732A85-255A-4324-A9FE-713FCB389AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3AE142-9448-4B3A-9B69-0988AD940AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03197268-2B31-4953-96A5-B59F2AE2ED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CF3632-9AFB-416B-B7BE-ACC40265C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942A6040-051A-4FD1-935C-54CDF87C19DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)e13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3334393E-B9B9-43AE-A745-EF24EB5A662D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1168DD8-4DF7-4A2B-B080-D267BF815F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E0729D-D79E-424B-B3E9-BB785ACBEBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7A1F8D-63A0-4CAD-B8FD-91D19F31C63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAE896A-4B97-4E67-8A55-046AB7CC0C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4BC9F3-FFE9-42C0-99D6-BE7A9CC9C835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C0CF63-FCC4-427A-9A86-48A03D913726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD9268E3-6B9F-4049-832E-7B8ED7864E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A878AD7-317D-4F53-97BA-C84666390A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1481AA47-0E3F-4B64-B8EF-13358EDB4B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B52D934-DDD8-45FE-B427-AE1417692F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A581CC-2E8B-41C1-9A76-1FC607EB1C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92703C4-FB4B-4776-AD50-D7001BFAB2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941DF5DE-1167-41D8-8E09-A8C48D7EF1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABB18D5-A0F0-4673-BC56-C89E5A3F3026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7377C1-1A0F-420C-B6E1-8A6CFFD4C1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C171AB0-9605-46A9-88E3-87E8DB04A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E24AB6D-AEDD-47D2-868E-7C2801B8A667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "989069B1-5B8B-4F6E-BD76-3B2999F2BC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(7c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55D9D9A-2D79-4A39-9255-3FD536495FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF384E8C-2EB1-4747-B749-E89E25A77321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)ea1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F299684D-4676-4810-9BC3-1E28DF75E776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5160A78-7C72-437F-90A6-A4460063FE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B55D19-C1E2-4535-9C0C-A4EC29FA014C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7798EF-FC39-48F1-9B49-74070F1404C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC63AE-31B1-44E7-BABF-B8C529283E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115D15E4-17B5-4C5F-BA85-EDED208A9A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB36E458-C378-4DE9-B8AC-3A8339314EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E5628F-5336-4C04-A3A0-9416EC1750C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92714BBA-3B56-4DA9-B32D-9EDD3E4EED30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7520A15-27CC-4043-99A1-E2F6F2E1719C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429E111D-F383-4DCC-A378-D7F15234E059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B45852-A773-40E0-97D5-4F4A5F6E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA87A2A-E394-4EA4-82BA-9CA3A561C8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7D6679-B1A5-4483-B70E-6BF3C24782B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F07D06-36DA-4BE8-B77C-60EA1A435CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED533B23-7115-451A-9F68-FCD13339CF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B117C8-E888-4A4F-A69E-80D43AC9DB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD2B299-8C70-444B-9AEC-B9EAD4650C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37EC9304-51E7-4147-820B-E6DFA9267617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083007BB-084B-42A0-87A0-0C18DDB6C77C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705F661D-46E4-40C7-88C9-1CA642392F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3365A9-43E8-4769-9172-5502ECAC64C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5D2A17-9E19-44ED-950C-1A20B255D3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF5CF62-C9A7-43C7-82DD-3CDAD6218D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1AAD07-8EA0-496D-A4A7-6DD72B711813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7258C5E-8D61-4ADF-AF7D-F772C0A14C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC8A311-8456-4EEA-A0AA-BD6F976895E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859372A-D2F6-4D97-939D-91A28B65B1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F9DF30-67BA-4330-A712-056A0EC52081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431E7BBE-A6A6-4CDB-9F68-A7D50D9DC995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA4DD8C-4524-4A7B-A957-0B20A2696F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C03276-B783-49BC-841B-6A75FFDDCBF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B04BC6-B6BD-4CD2-9257-B7493B33ADAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04050E01-D4E5-470B-BA66-1F135EA9CB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4572D6E7-9987-4453-906F-B2E2ABF39F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718E435B-14E4-45AD-8565-CAE1F245772D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAFA73-B3F1-4527-8D7B-9B1B8263B50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEE4AB3-7207-461C-98AF-3E471AB3AB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2465A016-415C-4EE9-9DEC-B71C3EDC0BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CCBA2B-DCD7-49F8-BEAB-E71BB3D85291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2849DDE-86BA-4A4A-B830-AB73026C2640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71655A8A-9E5F-4B48-A490-2A3110230DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(9a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6D148F-D29B-4610-85EB-557AC86C7FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "791F8D35-C80C-4540-9FD4-A957F429C712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32F2780-796C-4A03-BA5C-3B0CDCD2FEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BEFFE8-9443-4ECF-95E0-361E7E288049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072EDA05-071C-4BBC-9858-AAB108DA5D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D4A27B-120D-4395-A86E-B01F341DCF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2046F5A7-EA7D-4C6F-9B93-467AB1CC2624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FB3BEB-336A-485D-924F-C808AF12E166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C664FD7-5D0E-43D5-B3A3-4E023C75F0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FB3B7F-67B3-4DB1-B31C-01151750EE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE5EC3-456E-4CBD-A114-CA0FCA78346E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72890DBE-3976-44E7-941C-DCFD0E24F9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA022E55-1EC7-4447-8B1F-1DE2102F71FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11032330-069D-4E4A-8F65-BC9EC832EC24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAB23AE-C93C-4121-9745-1144881397EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ev1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A5BF9C-5268-45A4-B2DA-F34C0CAF7506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ev1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6F0B09-D2C6-440B-9723-94BFC0DFAC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ev2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63443D2A-934D-4A23-BBDD-DD2CF58ED702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ev3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09467ADC-7D15-42EA-8F0C-00D2703FFF5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ev4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF3CFE1-50D8-4476-A745-E88AE407A5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9352A8-5C48-46D7-A9B9-61C6D003E9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45E801F-FE5D-48A8-85BE-058166AAD102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089C367E-33E1-4E84-8E5F-0A328313227B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(10a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB900989-74D8-4DD2-93BF-5A6D50E48213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B0EBB1-E870-4794-9474-F4E2A8AFEC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91195861-AC53-4468-B1BB-3144A6F3CB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0690F55-8755-40F4-A2C1-34335ACDEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "330A2017-426D-4D6D-86A1-1D063038366E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC01431-DCF5-4F12-B95C-4F0813A04070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040B04CD-B891-4F19-A7CC-5C2D462FBD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452BA5E5-77C2-4E9B-8B36-5EA921877A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6344C921-0055-4D21-B767-632D58B62055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25185924-4082-4FF7-BD23-888F991C02D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78EDDEBA-C103-4C00-B1D2-B623676DDEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91DD666-7E05-4A22-9546-D1E06D3613B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEB47E2-BA6D-4543-88E4-8AC5C8A4813B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57107DDF-700C-430E-B942-FD5FB9D15C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EDA472-97E1-4400-BE14-C28C2B6F2E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF3CA43-D1EA-444E-B306-5628B1C67D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF29685-7FFC-4093-A1D4-21E4871AF5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72872C9-63AF-417F-BFAE-92B4D350C006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E981B9CC-A4BD-4949-91DD-70A1BFAFA02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77F78-FE77-41F8-8014-7A51344ADD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C990595-1445-4856-973C-EC3EFCADF4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC77A77-51E7-4111-A097-CC766D273CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE71E624-6FFE-42B5-A6D6-9A314FBA2BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C00276-416D-462A-B171-755083863765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA6CBB3-6F8D-40D4-9511-C9DD6F703C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A3BEF7-B34D-4D07-A8E6-834F555D0468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC4D8BB-2A95-4A57-AF3F-1CD01F55D62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AA3BC4-C536-4EEF-85E3-D521580F18D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3342AD7C-9492-4F5F-9FED-831A7291182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA235402-9AA3-4E89-AB2F-5C7AB0682727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC41033D-8CC0-4DFD-9C24-35E92B3B9A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC5103-D999-4044-9D85-6D77F750F146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808F3C04-D9A9-4D89-B48D-9234742D07A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9CAF1D-6126-4AAA-A278-2363EBA3B7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F61986-DFF4-4201-A68E-73BFFF2023D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C20A694-A84E-47F4-ACCA-BF6AC9C2BF8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9944C77A-16EF-4908-930A-5B6C47BA897D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF8CAD4-6B77-4B1F-B3EF-05873051949C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68B6FEC-931D-485F-9679-3F97245490DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293E9147-064A-49FF-BDBF-D8B560A4AEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ev1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893054DA-281E-4505-8F97-7FB7C9E43D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ev2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4837F3DA-0E3C-41D4-9220-B60F530748C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ev3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F368AC-036D-4F60-9D8C-FA0882C5F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5917C2D-EF96-4017-8021-D68EF0903A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A8512E-9A9A-413A-A416-B74BFDC1E7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B05345-1E8F-4FD0-BADE-A9748EC4EE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFC514-5956-4D25-9B62-1FCFA5C08078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E89EF44-F094-4002-A325-C765D5CB9B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D25940-F5DD-436A-BC20-44BA1F8D693F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F5AF27-5901-4B04-BA8A-49E9BAF72C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A3703-1082-45A6-B510-9B6C880F14A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E435F882-E8C5-40B2-BCFE-D2A42FC0C94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9478F31-994D-4FD8-AC53-B000815FBA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24135889-28E6-4905-B4EE-FF51CF9213EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB275FD-926E-4875-AAA2-88F8DB3B8B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCBC3BD-A704-4770-B2D3-C4F289A78DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82CD138-E6FB-427A-9184-6C9650B133F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD22C40-94AD-4264-9984-0E266893A44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EEC237-DD65-43F0-9DFE-0D32C929153E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDDDA5C-5727-43CF-A841-1C84267D15CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BCF196-5E5A-4F31-BCE7-AA0C748CA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B72467E-E410-4469-AACE-3E01CF0C4A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A4534E-6A1F-4690-9806-BF4528C65615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE497DA8-240B-44DE-92F4-6CAC88A89B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFCFBFD-E998-4581-B7C1-5A8BFA27DE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2346F7C-18D7-4E07-9A78-14A910BBA086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542A822E-ADB9-410A-B204-576972534C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18B0A3D-4A12-4327-B6EA-8E73B8FCD245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337A0980-A5B4-4605-8572-8283FD1588C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC069569-859C-41DB-93FE-57E8B3F2EBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B7978F-4C1F-4F96-AF73-D5A1AC94F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B63153-D51A-40AE-887B-CC9362263602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C368DA1-B608-464D-A467-EE870D83522C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B6C565-2C80-4030-9996-9E5D30A2B628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27074B20-F463-44C4-82AF-E16FCD18C6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A767E382-4D86-4B0F-9E14-4A08D2CBD796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ec2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031A2A6B-68B1-40D1-B09A-4ED34062580E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ec3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CF1B53-8A97-4566-A3C2-85DE2CD9B60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ec4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B768122E-E02F-44CA-A0CB-46854D742F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3F54C6-FD33-442F-9E82-510EA39B0A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86343D29-3662-4A66-BE6C-08CE6BBD5E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273EB99C-6969-495F-879A-0EFF82BDED44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAE713-DC4E-4180-8CF5-3000B1C16B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6568612-226C-48A3-B619-4C540D05968A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B1DD0F-0379-43D1-BDD9-52A4B7064545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C18F63E-B119-43E6-B137-D274309E1A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9F169-F1BB-4D40-81CF-9772B4E3BFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E82F23E-04E7-447A-86F7-E2A9AF4D32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FA053B-CAC5-4588-AD40-F41CF730D757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0097ECF-6FB0-444C-997C-7FA44E82321C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C1373-B7AE-4356-A5CE-A20A4D844B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F633F237-0B44-482F-A120-53A90EE0A328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4734B564-06E3-45D7-BDFE-AADB0DE1C32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6781AE11-EEA5-4067-9E35-841FF07C58DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0E2DFA-B2B6-4FB3-97DD-D1167014323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C56EFD-03B8-415D-B2E8-8B7116915D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EB7207-89FE-450E-8A7A-8F3517F17F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD38B1D2-5860-4CE2-A33F-BAF27C2F3B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED09E588-89E8-416F-9A7B-0CF73807998C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1229A52-54B6-478F-A419-8D0340336BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548C1020-E629-4F47-B8D2-AFBF77EC01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2652E42C-E7FF-405A-8B6D-47C28A62757E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97CCD6D-091C-4B49-86E2-E27FD3971EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(15\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6FB537-E584-4F53-A529-BF2C62DBF6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FA390A-9AE1-4C7D-906B-EFB5F927CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(17\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14A3D9-3730-41AE-8B19-F8C571728A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(17a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4859139-0F61-4A85-B0F7-A73681498ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(18\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8C2D22-61C6-4CA5-A275-DAEE2CD7D3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4944AFEF-D002-4C86-958A-4EB753399FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DEF5CE-8637-42DA-A371-AC9BF74D213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970939C5-1E6F-47B6-97E6-7B2C1E019985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D838FB5F-C511-4365-89E8-E3EA7A91AA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD41270-AA7E-48B4-8E02-03AA6BF07C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FD18DC-00FD-444F-8A89-FF4A174018E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C3903E-94DA-409B-A0E9-A66BCB48204E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED0CADA-A86E-43B7-A541-ED51F405DCCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC3D006-6C20-43B9-9100-E427895AA3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D670129B-4D75-4E55-91B3-126BD8A53722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ea1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41768F22-7164-458E-8753-9B89BEDBAFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ea1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFDD737-B7D0-45A0-A6D6-3494FE8B777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ea1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0CE611-2E4D-454D-A247-18744A6E74E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C447217-4078-4DE0-829E-DEE210A456FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54874F5C-4165-4CFA-9908-587A808CF3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06723B5A-DA84-4AEA-81CE-3ABE86D87087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184BB6B9-4E7D-4107-BFBA-847329C59209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103200C4-D316-42BA-A1E1-001DF9497BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ew2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F12F5D-4844-4338-B2D1-34E6CA1B0062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ew3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B06D76-49C9-412A-95C8-4C78C303488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC9A03B-752D-4F68-B360-CBE2EDBFD8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C3B6E2-3D33-457E-B85D-8C2FC9DA2FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41AB141-A566-4738-8E07-E6410590FB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F074DF74-81FA-4F09-A6E5-18DD9A4E76C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9689234D-7762-4BA4-827E-702407F5BDF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED3263A-67C0-403C-B022-63360F2F27D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A390527A-7522-4580-8C0A-F68BF90A5CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D029F4-DFAE-41E7-B1A7-2AEBEF71FEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4041EB0-F402-4C01-9337-212E3E461AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00388B56-F514-4A9F-95FE-1D8239BE1EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A56097-E614-4FE2-AA09-3FC5EDDB0170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF5A303-9B9A-48DA-AC21-6C8449D02AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DEB16EF-D0C1-4C56-85B1-3C07D8CFD493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCFD88F-4320-4F4F-9CAD-BA8A5AA5D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89132D4-850A-4C33-BDE4-51F6A053C848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF47EFA-68A6-4231-AA72-FC6D0D0B5D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379E0F70-EE01-48F9-A4F0-BFCF9BDAB4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CD0C63-7500-4A32-BD85-27E6C2F70FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDFD76E-0668-4137-A747-8FDE700A3B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA2D946-D1F0-41B1-BBA8-C57A1A324932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F7143A-9B42-47FC-8626-19A850A74E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(20a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5FC2F-7BBA-43FB-A550-24183F348297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F924068F-7AD5-4BC3-9A03-3EEE14962E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E63F79F-BF31-4076-BBCA-1BC6CC23D0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2303A74-E862-42DF-B3B0-16DF1CB97306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7744338-A68E-4F38-8C89-E07DC4BDCFB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAE1CF1-67D5-4739-AAC8-81868BF851BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E01A6F-E21C-414E-BCA2-F7490DC78147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A3360A-0515-4374-90F7-FC48CE3A82E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD04F53-794A-49B3-BCD0-889269181D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C32D452-DEA1-45DD-BCBD-97CE2447A9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B2BF3F-8B92-41BC-946F-E0BBEC874257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A640A1B7-8A59-43A6-8675-7E95FACF7A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B46F396D-2A00-4DB3-9BDE-F2291E7782BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB440BC6-9FC8-4EFD-B05E-3F5A5A68F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4A473-C851-4D2F-A22E-66A267A1BDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD4687F-D78C-41C8-B2B8-D140813A8619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052CBE3E-F871-4AFC-8DBB-E6783A5D7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8C33CF-9FD2-4DC5-B69C-0C8E0C6A987F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFF09A6-DE59-4CBF-AF02-DF2862C05D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA069FDD-BC7C-4C61-955F-F6F2179091ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E74792B-0E3E-45E1-B86E-34233330EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE3D38F-5DD5-44C5-BB38-571F81B1BC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5D0F6-810F-40E0-8CAE-3B01C13CC857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB63B163-E48F-4D40-BD9F-518F24B27C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea10b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C72D3246-8E14-4A27-8A9B-2A1572849966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7112F7-C3AB-4B67-A58B-A04E60F5F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269AC3C-7455-4016-8025-A97CFEDFC9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33626D6-8C41-461F-B3E9-6EFF574E3EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3931806-9627-452A-B78E-5AFECB49D391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E065806-84D8-4DE8-A42B-7D102DC770D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(22c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED71956-ED87-482C-8D9F-C86CA4AB9FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(23\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA977A65-0136-4268-8513-BB0D4880E17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(23\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A43DD0D6-6890-472F-AA0B-75B218FCDC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(23\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35548BE0-8745-416D-A530-BAB85361FC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(23\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A33D633-8D55-4F1A-B5C3-5D8C96DB2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(23\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58F9A6-9298-4C47-A3C3-5C1DBF93E65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(23\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E3F3E2-472B-44A9-818D-A945A7E16EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(24\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0201F4-6975-4849-895C-FE518BD62463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(25\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A76C1D-3553-40DB-BE1A-53CFE5141F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A900F51A-DE6B-4481-824A-47CB414296F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3692A0-9A71-4E31-9741-0D0ED42DB101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038514E5-49BA-4E0D-AEDB-6868117E0B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E596B7DB-0771-40B6-899C-3839EFC38A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0563D082-E449-40F0-93EE-437C1780CC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F84A59-5A29-4B7E-94AE-F1D90173D5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F473A2-A960-4311-9B40-E0DA8041F686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F466CB-E4B1-4310-8C01-6CE13C0908FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D748A3-8A11-4222-9E73-027F46B9BC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "642D64F0-F728-4761-AD7C-77A33D160AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3578E17-D5D4-463B-9B55-C34E92ADB61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1772A7-BBEB-464F-B9A8-4506E003E48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(26\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF2E0B-0747-42A5-9EBC-22E81DFB2112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B430330A-8D7A-44F1-A338-7E6F702FB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C648698-1911-410B-986F-61203D5C5251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38345DF-A94B-4C8B-9F4D-9D70BC0ECA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE24B83-CC1E-4D31-BB38-6233BDFA08E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27b\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B61EFDB-0AE4-4BA0-9937-695C93F55AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27b\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EFE1FB-98AB-406D-9371-BEC336CA4914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27b\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32AF5F5-D319-40C5-9AFB-BFFF6B8E305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(27b\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14C12A0-7796-4837-B888-A5507DBB82AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF86B641-08DC-404A-9718-F2A99C1B0889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324E754D-D755-4987-A892-D04A0690DD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)dx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECC08A3-57B5-4B02-B3E9-FFC3AF4522AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)m0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C02AFEE3-F2E8-4C09-932E-D8F9DCE18B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)mb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE662ECD-8C06-4217-801D-15BD11D9B751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38C9EE3-1A86-4930-AEF7-EAC3A2713DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "742CC70E-68FB-4658-A475-E7BBC5983878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CB7FD1-77B4-4439-9BB2-F50A0BF4F8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CE5741-1569-4B69-B7F7-094F0C6101AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B4D71A-D418-4E6B-88F7-50833C00236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2AD384-0545-4108-89E5-2FF3290C2DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA14DF9-7766-42AB-9C77-E86233D5D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9B3920-D3F1-478F-ADE9-6022763E8740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xs1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9CF50-E0F7-4513-B7EB-A2E095D3E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xs1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CC2DDF-0E84-46FE-A2E3-42B40A483CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1\\)xs2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C333C6-F2AB-4AC6-AB12-581F3F4A3707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A929AB-EAD3-4185-9E16-25C052642389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1a\\)xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89AF350-CCE5-4CB4-92AD-F3CEE8BC94D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1a\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E00FE75-8669-4489-A0DC-ABD762FEB657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1a\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74FC37FD-D849-4A22-9FD6-2710301294BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1a\\)xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB96407B-9FA6-4B00-B0AA-B4A0F76DE814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD94AB1-0D8D-4DBE-AB1B-6AE464743E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1b\\)da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47634E7F-E9C4-4E2F-B53F-2AC70114A6BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1b\\)da1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4C28B5-4591-49E0-80F9-7C6059F24B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98B9905-F381-452E-B136-361CA141EC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D6897E-33F3-409A-B874-501FFF989EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE975E4-1D07-464A-8116-69393D07C362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3135781-7061-4AC6-8D51-6BB300B78385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDBF86-8699-4021-9407-0F3149EAE918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28955545-2790-4E96-A63D-5608B18B23DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF030FBA-A7FE-45E5-AF50-ECA50A2B238A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CF1C0D-B225-4242-899F-880F6AC523C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A83582B-A255-43EF-AEB2-18A694CD4ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)b7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F77755E-99A5-4F96-A532-1D94159A9901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFF0815-8F37-4613-A54D-42D7AA299D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)bx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA17E5C-549D-44EC-9E52-E31BB5CC3558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB420B3-E9DA-4C5A-9299-FFAB48734116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)by1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FA5381-BA48-4A64-ABAB-A464090733CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)by2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB7CEB1-84F0-405E-967A-A62B54B7CBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)by3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CED8F-7D46-4D48-AE59-1C3F65043AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC07EDF2-A0A4-4367-9A51-ACD7F7DBBA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)dd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C243A4-8193-40B1-9788-52FF8DCB4EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)dd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D072285-12DD-46F6-85AE-6F3A2BCB651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)dd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA91C37-5799-4B30-97FF-76A6A84F3606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)dd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE44B0E-1537-4CA5-8158-BDDB5759E2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)dx3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863B1124-4ACA-4AEA-AA4E-927A46F52C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07398411-7920-4B52-92C8-3696F49370B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371FA715-3966-4071-961F-12E691608DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C8D247-130F-4DC2-90E2-22BA7303B3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E32716-69C7-4C4B-9545-856629C5E6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5868C882-A976-4A9E-B0E5-73BF3C0E116D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xa5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2713E8-3E4B-4C60-9ABD-01B962A85A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A81B7B5-6C16-41CB-BB1A-FB33E7235AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE289B6E-4D33-489E-8AAA-9F946613098A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A44418C-C041-4A98-9D1F-1E7510B9AD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3EAFEFC-E046-4498-A486-B8B7633A2298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777C8F-DF69-4FD7-BF99-E2145DF6FC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC8EF0-6030-47CA-8CBB-4C135B0F2955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03484447-A15B-4775-AA73-CF8664E02E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA6870-8DB6-4A2B-B631-707FDF76503F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2808EB6-5964-4931-AEE2-BE1CF503B7E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8614213A-339D-4331-BC2F-E15F12102B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0CD136-C54F-41F9-9969-9F367921B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xb15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABBB62E-EE60-4E80-9208-A6F5C1F80C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2049E3A4-9D8E-4998-B074-14DDB34E1DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C39B9F-E597-473E-8297-6D1E8D9713E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667B626B-346D-4D76-9BAB-E1DA380B549E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E319FE1E-8D75-4CA2-8EA9-C1C32C290891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0ECA4F-D3DA-4CBD-8815-1586FE2284C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98016F8E-AA0A-4420-9606-4A8F2C396FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82C4003-D2CD-4243-8A8D-B8A9B449D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29056463-CDD9-4399-964E-14BDBFF760A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xh2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259BD3FC-FFC5-44B7-8641-917A1BF2E98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4C67B0-81D3-4430-A9F7-6F15C601693E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA145839-3DC4-41C4-96B7-88B8EE87D70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC95C37-9102-45C7-813A-15A0ACFF5D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC3931F-A21C-467D-888B-A1388D09C986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8D649D-474E-4661-A68E-517EA3563CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBE3818-025D-45D7-93D7-D8B296969F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D64712-7335-4FED-B74D-5EFFD45ECC25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "420C23F6-1E44-418F-B6CA-DECA22218B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FEB158-215B-4C9D-8882-D44EE7F90B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xt2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE1A868-75EE-4FFB-AD65-BD962CE59C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xt3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BD8E31-5117-4E79-92A4-5FF08BC8BB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274DF264-D0DE-46DC-A91F-DD53ACE06AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D917117D-CF4D-427C-8529-EB2D856E8A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)yc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115380FA-5076-424C-8CA2-6E82BACA3C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)yc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B548C7-0834-4D3F-BC53-0698FC261865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)yc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99656AC3-3F4A-43B2-8578-7171FC25CD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(2\\)yc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD202242-3FF8-4D10-880E-9BB1638EDA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EA6782-77F4-4E2B-A882-A24ACEA5776B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F506234F-79AE-45B4-8E31-1BCE8BFCA8AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1535543-BC80-4F22-8EB5-A8DAAAA838AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA4E85A-50FF-460C-B014-142B1E81C206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A33120F-F2DD-47A6-9BA3-58989C3CF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EFC0EF-0202-489A-BA0B-FE823384E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A82EDE9-A7BD-4F36-8A97-DDDDAC45D80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8697C1FE-2EC8-4116-809D-461801FDE1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4181019C-3AF9-42A7-AD01-28B17AB6DE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7265E4-1EE9-45E7-AB34-9BD6AA13E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5DC2C3-1DF3-47ED-BA83-9C9FEC2FD8F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF1FE7C-8400-46D1-8980-EF16549F574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADBD5B5-D5F6-4FC5-B426-AF30DE93994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122C5E78-6BC4-4133-935C-06DA77489AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)b8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F750D95-9E57-46BB-975F-4E1290F68FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B2979C5-DAF5-4A29-BD21-F6B0173574E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bc1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FDBABF-EDEC-4E65-925B-E4FB97FF27BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bc1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39982138-AB35-496B-BCE1-CEC17CE0682C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C1C230-F46C-45D9-BB49-A18ADE650551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321057FF-5DA3-4D64-BEE8-F52D86871A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bw1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66FFFB4-9C1A-4A47-931D-2AF65A57F1F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A489FD-2E7D-49E4-89BC-A1A63A562500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bz1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41D24F9-18F3-4DD7-A084-6BDA094A006C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)bz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D4F8F2-971D-4AA3-90C4-DDC56339135A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2641634-E42E-496A-992A-5EB37518D74B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34862D68-2613-4814-8D66-98894B643BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213AB5CB-DB2C-4939-94D7-E211AD817FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A8D38D-B01A-40C4-BC6C-47F2FB733598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447628EA-9613-46A5-9971-3559C76F99ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7AFD95-79BE-4501-9AAB-6DCC844154E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B8CBC1-6522-4AA6-A20F-ABC30016DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5EDF655-362F-4E2C-B2EC-10EB5B64CB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEE6751-EDAD-4442-B48C-A9138562FC29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F222A66-BEF5-4F7F-A293-340290A0AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E53E6F5-E474-4664-AEE1-969B3E28EA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F0404C-408C-4109-A5B2-C2AD64F4225B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A1F18F-77EB-4BE9-AFF4-00187613E5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A06A6B7-0745-42B9-B280-3AFA37481CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb13a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353DBF53-B0B7-4871-8656-D1BA6AEA72DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb13b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C785F596-113A-4B2E-9963-4D740F15DF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)mb13c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93B704C-55B8-4FFF-8910-314604143411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082899CD-C075-4478-93E5-35C44F61159A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF4007E-6D5D-4090-8789-4E8E7070E51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB4D744-B7FA-41E4-8272-BC71C413BAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6182868-9C1E-4E8F-A52D-6E460C7CAF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B2C3C-FC46-42F8-99A2-B285B5A7433D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F385AAFC-9125-41A9-A51E-6972E6CB0E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06997F81-3A97-44C3-84B4-0868E0D20CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6463D1-F115-474F-B1C3-804E74BBEF0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xl6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98F0C82-E9F2-4B52-A89C-F34924FBB1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52EA73E8-D40C-4E1D-94E9-E6FA63D7C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xm2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4478DFE6-341F-410D-967E-EFF8B67A2E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xm3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44489BB4-588F-4713-91F1-2CD9C49B04F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xm4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5136400A-E544-4F4D-9348-5B58F846C99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0570296A-6F1C-40E1-93F8-C23BF4330E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B9A8D2-AC4A-4769-AAF4-87266C36113F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDC82EA-B7E9-49A9-9358-AC00F2045B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B954B9-C570-43E7-94B5-8BB1B61859E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF154-AE0F-4C7D-9A54-430B2B9A417C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FF9D24-A414-417C-AFF2-1BEBBCFD40A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A162CB55-74D7-4F97-AB77-CAB2C1F8B8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xv5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD648380-B0D9-4035-994A-37640F58D82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79D38C9-271A-433C-9BED-C4893C2B0260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1119AC22-9A4E-468D-A9A4-27A4C9191F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ya1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A326CF-ED69-44A6-B7BC-3DCCC2A1766C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ya2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02049D00-08C6-48D1-A499-29E68D248D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ya6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0E490D-BEDC-4A8D-ABD6-59D5DDB4AAD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)ya7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A76FBC72-6021-4535-8CD1-DD4208FD9CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DF8F59-0C88-4E38-B9A5-12293A2FE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC057F5D-541C-44DC-A609-C25DC9CCD9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(4\\)yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC20686-CCC3-4DF7-BC7C-C2C924213F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6829DD-33EA-40CE-A01B-EAA7667CBDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5\\)da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7CE6B5-B209-46ED-AD32-D39BB5475CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5\\)da1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D61D027-3B23-4467-AEE3-5C4881AC65C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE66C5E1-D284-4557-9466-2C2C2B00C671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1238735C-4BF5-4355-A65C-AFADB212F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF3B774-D79E-4648-B3DD-917CC76DC145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F327B39-CCBA-4B2F-A083-CEEB625BD836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8F387C-2EC3-412D-8496-18FC5A4D461D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB18906A-C72C-4B5F-B47A-BCBE3235E5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "927E4A17-20BF-4D8F-8815-6766ED6D7C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B858AB50-2EC6-4820-801B-5EAB72A0F947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6c\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF51703-6429-4814-9DCD-46A89618CFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B41AA7-B563-476F-88BC-B82B143A754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD79B07D-E130-49BD-B877-BA87F173EF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2100744-5BD7-4819-8A19-4E577972F916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C288BF-1D1F-4E33-B6C2-66CFCFBEA189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D39B90-2832-4BFC-B002-883E8457D578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C791BF4-EF30-4AAB-BDB4-F756CC10D18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8DD122-AB51-444A-A810-9B2F190A99E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CED27A-7885-4D42-8A91-128BD76EF585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7\\)da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A057D34A-C0E0-4DA1-8E51-2E7C2572D28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65C0314-7816-40C4-9950-1B40740204E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84CAE9D3-209C-4663-BD5E-424928E152F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "191428C2-2F39-49B6-9ACA-E4C1A46F6C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8911D68E-DFBD-42F9-9E15-C0F6BD8B48B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(7g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFE5ADD-1B04-40F1-AD0E-26453906AB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D67FDB9-FA6C-41F7-ACA0-AA04066B92F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB558451-96B7-4626-9368-7F9364B3D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)bc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C60E334-D40F-4986-8613-DB05A311334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874DBAE8-CB9E-4E10-BDE8-2C3AB6C85042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)by1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9310178-13D9-4F61-BAEA-4581757AF7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)by2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0E4A50-A82A-48CA-BED4-29FC32A2CEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)mc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33EE95F5-7422-4AF4-8644-9E1128373A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)mc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB26E7E-E45A-4796-89B1-1F9D1F2DA221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)mc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A91F3E6-BA0B-45A2-8CA1-14FC752E38A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)mc2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66FC610-18D9-499C-9493-E5EED89A4CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)mc2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C420C5FB-47C0-4658-A382-1C88884C722B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)mc2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90079AC1-6E95-4B25-965E-9D3ED0763DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)tpc10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0977D51-0EF6-4219-BEC9-400DF80B356C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)tpc10b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7E9D7A-1016-4892-A026-08458032783B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)tpc10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C504B494-4623-4A24-AEDE-4BAD9EAD1EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A331B245-2FFC-41AE-9E17-61F6E9AD002C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1774B58C-4813-4D7B-A486-8914284F9D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA98FD1-75BD-4DBD-BAC8-A48EE8FCC96E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8E2180-5468-4A71-8B67-680DFDEC059C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C95807-2278-40AC-A04B-8E451D06481A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE24D3F-688E-4E89-A1A6-2959B7D18ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B5134C-5A27-4BBF-AA82-2C80A3F6A061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0EE03A-CE09-4C7C-9501-1112FF46460C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382756AF-BFE6-47CB-892C-E16AB229D597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CD5D67-D068-48DD-A1F7-9AA7895563C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7D94E8-DB47-421C-B072-7279A99D3D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139DE650-5861-495E-9B87-6C9B68AA5233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yw3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A7C0DB-63E2-447A-A66C-1F7419F1EB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E5F20E-18F9-4108-AB48-E9A4DBB230B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B7432E-AF47-4E66-ABC6-5CBB12B5FE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E0CA00B-64DA-466F-9BE8-5A2A09FC4E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C91D2A28-D85D-4F62-92ED-11317A9C5947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)yy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A5662A-96DF-4BA1-9605-A537E6324623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAB0CEE-C5EE-4F7C-9BDF-50DA89E7D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77191B25-3137-407E-A32B-0745F78C54C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEBCDDF-38C9-4A02-93E0-7CBDE15490C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB5CA0C-69B1-438A-AE68-668D21516321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FE5C8B-3691-44B9-95DB-35D1B71FB795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05240D4-B3D4-420A-8B99-47F2BA01473D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E95FCF-7C9A-4D51-B37A-0F23C03DFF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32415F2E-54BD-4798-B07C-1BDE69DECCBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF4480F-6C08-43B0-92C5-3FE07B5E09D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(8\\)zb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117D5DA9-C221-4F39-98EB-92984A23E9AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(9\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F575CA7-9875-4582-B9E0-446DE7227073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(9\\)ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F66A31-86B9-4BDF-A8C4-380F6AB82DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(9\\)za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C017CC95-30E3-41F3-9358-3DC5C112376C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE33458E-271D-40B4-A1A6-626DCC188F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97080120-CFA6-49AE-BD5A-40F9D3615EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C36FC3-0EFD-491E-9D1B-E346A9175579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55396406-FB71-46A6-9CDF-27F041605097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8463C163-7BB3-4743-90A9-FBCF1EFC978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC774495-327F-4488-A257-1F3C5FB2E00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C932C1C0-55DF-42C6-9993-A8F2E3991551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7A0404-1335-476D-A931-A26809C83B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66011841-ED38-4BDD-9EE4-7BD7CEE00B5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07153D6A-41F2-409F-A6C4-1F1612ED3646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10\\)da9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660F76B7-7F4F-4661-8E29-BF5A74A4C92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6F2477-B137-4549-8FF9-DA21499ECD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5990BF-1A31-4430-92BA-A82C22AF059A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE853CC-8A2B-47C9-B094-5BA2908A2630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(10g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E013BC-9F5F-4209-9588-1A3CDB017659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD01C9B-CCED-4C4D-A85E-253C72007A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1826B63-DA65-4506-9845-34422FA5EEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A939DA-A1A5-425B-B415-3066B1959FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FDBA2E-3A58-463A-957D-D1E7981A17BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C444D544-6C89-4D6E-8BB2-55560CC54B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAA0A6-0714-4729-8596-10A6EA0794D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0546B28-7C5E-43E0-B709-D98FD863992C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A240F-34A9-4F49-95B9-E786DBEAA633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B059AD2-3215-4647-B4A6-AC9642E5623E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)bc3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B1EB76-8053-4473-B5BF-FEBA6B9FC6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB7BD6A-7484-4249-A90E-CAC3F6BB8FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)cx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186C7F4D-D620-452A-9B47-2E9D8DE2F75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D034E2-A3DA-44D6-B06F-6C509335F016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12239FC0-358F-4235-82F5-89B687715B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF344B7B-DA85-40A6-9A33-7C892F089337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5550333-D453-402A-B062-01DB657963F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26594716-2155-4732-9721-13048A263E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32A425A-3C28-412B-B698-144492CC0BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yt2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C862F41-1E89-4277-AB9D-78F18A6678F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B52D7F7-AC13-42FF-BBDC-FFF4A25DFD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574C686D-F7B6-42F5-BBE6-AAA61425DF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B9B149-88E8-4DAE-9B8C-91BB31A440B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A62D04-0DD5-456D-8C13-88A0DD3E1FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC078D8F-8E9B-4D75-892F-55540774581D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yz1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473B29A6-B496-4E7F-8252-B477EFF53011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(11\\)yz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2FDA81-E862-45C4-BB48-152BB4C33BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3568B82-1112-417F-8F2A-ADAC7BE9D0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B0F970-9D58-4628-B01C-EF0761086F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC2609C-75FC-409C-8FD4-10742DC07D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29A64E3-63D2-44E1-BC80-9E3A942DA802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA67A2F1-F728-4776-AC96-0FB1C0326572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C407188F-2140-4932-8796-F1EF8A4ABFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DAF880-8A7E-46DF-BCE4-FBDFF6B17ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE0EFE8-2F1D-49B7-B244-1EA39C7CCFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B78D94-C79A-422E-BFF7-AE76209DE1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C0F9A6-F438-44B2-8CA4-F8810160801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCC7A72-05CB-4283-82B8-3F5501CDF923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB688242-6126-4D83-843B-84D5C75CA57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF02EC80-D1AC-48A0-921A-7697EB40FBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1262A406-06E8-4578-8C96-25ACC16EEF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12\\)da13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A537CE0-B77E-4ABF-80B5-C2E34E2B19C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C26FB66C-0F2E-428F-82D8-AA221B62996E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD9B22DC-353D-437E-B648-CFB39D6D34BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12b\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B45CD32-6499-4290-BD02-7858318E419D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8EA12C-A99D-4FE3-B18F-715D49764320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6B569D-C294-454F-846D-6184EA8CA2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B82ABE5-4748-41B8-95F6-5E213BF06B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7CC6B5-44B7-4DCA-86C8-F032AF65FDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "208A52BF-BAE3-4F5F-9279-88C360FDCBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12h\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2978632-0300-495B-9971-5EA1A09C9B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F081454-D139-4630-BCCB-172303F78DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E30E2C1-1FC0-4405-8F43-9375662C5425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A3BC1E-B069-4659-A3E4-0CB26527AD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "263C9638-BCBA-4929-8980-4613237C4BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(12m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F440A82E-518E-4E35-AC1D-7B2BA9963EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E926A720-D79D-4A81-8E28-137CE36C4995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F77A78-FFCE-4BD5-A027-A3AE81AE4C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E9238E-EACF-4474-9105-37C1819FE734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574A6245-868D-4AE4-B346-481E5704E0AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA235645-9AC4-4876-A512-425097C5D2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8886373B-3CEF-4B67-9137-736191C10D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71C31AB-60C5-41D3-9C28-E11D8C87BA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F26995-8997-4665-B277-42119A370FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA71EF7-8B9B-4018-A7F3-79C9A902F5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE31CB1-FCA9-4E88-97F9-0CBABDEB82D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9585CFD-C563-4D76-A606-6C629B0BA12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zh2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0954BF45-9B02-43F8-AB5D-4EDFD6709FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zh3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193A196-05E1-4143-961B-E8100C7A7323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13\\)zh5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28635F15-F620-4BE5-B65D-F7E0F40E0083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "02879682-3521-4E10-95C7-4F3C3B488B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5881E62-2712-4D3C-8C44-286AEE62C1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC578464-4EBD-42D4-B694-8BF960DC7462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(13e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20087BA2-1C64-4741-BF0B-7DF45DCC9364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B721725-3499-4653-8489-A0337FE08215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05571CB-86A2-47C9-95AE-6CB680CE0E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB6A479-1B65-4B1F-95F1-3EEF734FC084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53BCB4F-AD5B-4E81-B225-9A8ECE11CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA8E858-D6D9-4577-B71C-BA23934E7B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB4DDE5-8EC2-4A11-BD27-3FD17F29F3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1708587C-5B57-4630-9D07-0B6C45BBBBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627DECAA-1F1D-4B97-BF22-745B9398D911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B95C8E7-2AF8-461B-97ED-E6FCEE2DC68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88ECD96E-92EA-435A-ADF1-0BC1D4A07B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D48E88-A180-4491-8D2A-B9C12E0D88F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6181F56-00F9-4FF6-8285-271D9E1FEA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC33DFE-2514-4A75-AB59-8EA0C03187B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034A3445-32E6-4CCE-89A4-DDB6DE25A9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAEBB78-0404-487F-A800-88B13B13734E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCE096-4360-4C85-9D06-786C02199F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C336FB62-F663-4ACC-98B0-FF633CBC9F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)s19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A5322-D5E3-416F-916A-3031569C9379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BF42DC-32F1-44BA-BA64-6D9F7065A3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)su1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67A1301-FDDE-4730-B166-BC592F06F8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)su2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7682BC6-5FF5-449A-905D-2178C16361F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "051AB4A7-54BC-4D33-B329-2FB84A7C9A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C60F5A-0478-4CF1-B621-4B747DD02A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sx2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB9D0313-BEB6-4A36-BF58-A9FE9FB3E8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1F4148-E772-4708-8C1F-D67F969C11DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D551E8-4BA0-4CF4-BAD9-2509B53D5649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B45748E-BB62-46DA-8D67-50DE759FF583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAE458F-1F30-40F7-9D07-29A55CABBF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE96827-FAAB-47DC-BE81-A30EFF695A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D9BA55-F193-4BCA-ACC2-BBC892E9D7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46974023-379B-4475-A59F-BD340043CFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71C21E1-BC04-4537-B64D-76492F282B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5C9424-067B-4604-A197-478D4BFE72F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CC34CD-3004-4EA3-9DD1-E9CA0E2336E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F228FB3-0015-456A-A49C-7B1284F641B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)sz6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99F0772-C2C0-4356-896C-30ED62B7887E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26835676-2738-47CB-A364-78D1964FEC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209A1BE7-EEFC-476E-84E4-4EFD68DD7E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D449C0-9EEA-483D-8BA9-B2D738B79CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B4538E-10D3-4055-9970-5C15F78B4BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA400F06-CFC7-4E1A-AD21-1D89FF3204CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2110B540-18FE-4CAC-8C2C-C17380348293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(14\\)za7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912B35A-02ED-45FF-9FD8-6BA9B763D4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3DF4A1-DF61-46CB-AFF5-9B7DD6F93317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CDFBF7-D393-42F5-89A8-482459A426A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C151F4A-7516-40E1-9BEA-3A68233B050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F091ECC-FE01-469A-8D18-8FDCFEFE0F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5C6AC9-C032-4ED3-A3F3-8DCEBBBCB226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EA86AA-FAAC-40C5-847C-7EDF36E228A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644AB61C-9AB0-43FC-BFEC-F289BD11C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D17BA6-BA60-4019-8034-302777B06CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293E0025-3C5E-4063-BAED-FD89B9DE258D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C00B0A-668D-454E-9FB1-EBCD657E55B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF528DE-A1E7-49E0-BC45-A1FD6C083896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D9EFA0-1831-4F2F-BB04-917861EDCA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B6E095-CF83-4BD6-A23D-BAB5FE8EB557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EEDCD0-80B7-47E1-AF92-07F691BDF8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7914E45E-7012-4486-A830-6659277F88E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9185C8A1-426B-4313-832F-18B2F9507DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FDE8F3-850B-4AEA-8240-77B03CEBDC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4938C9-0511-4AC3-85F0-44A0AC8D5820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D137683-0B21-45E4-AA17-FCFA1085499D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864B17DA-90A8-40F0-8885-3F9E47589131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)bz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D1054F-9680-4046-859B-C51851B48560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32737FE9-2E17-4DA9-B3DD-6B5A4CBE2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)cx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B2EA9C-51D2-4829-8088-4A7F581611A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C02477E-BBB9-49A2-94CC-9457DC928EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426D8823-FA55-40EC-AB20-EE5A6F17952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF85DB42-CF2C-40C8-81CA-F3C7F3822869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDF5885-3E4C-4558-8CD5-8C53AFFC10D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D67E53-8AB9-4DF2-B306-D727563E01BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A866F9FB-C1E7-44A1-B50F-8F1DF79E197D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0413EB-BD18-4325-B214-8FF2FD69D129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CA5BF4-05BD-4B26-A49F-AB3897B563CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2360BC32-F9AD-4407-9BB2-C19CC190B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188B2A92-21CC-4FA0-9C10-FD49D635F81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486EEB87-D2FF-4D3B-8E5F-8DDF4CAA30D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41716655-A83E-4057-B902-20DEA21CC293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7852B6D-CF96-42D6-A94E-AA7B59D38166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EC217-381A-4E93-A55E-E09E23CDBC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AF013D-505B-462A-8CD1-B4FC47A20331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62B9E29-8EA2-4E12-A857-20651ACAEACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E16265-363B-4BA4-9709-10135A70568F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530211-6ECF-4881-A069-826E0737CE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5C18D0-B516-4F5A-AB43-B3D5FBB14202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB1FC76-DFCC-4F06-A320-82C27A502B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17E0E7D-E7C0-434D-9142-F8A93BF63FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zj5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECE24CE-A222-42ED-ABCB-1C91F59C420A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB25CF-C329-46A0-A404-36D951C7A0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(15\\)zl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CD80CB-7E2D-4DC0-A84E-D9E1ADFA141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CD7B51-C357-4AD6-8E64-26330F89CE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6730C6-1387-4A52-8778-7FC144134AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D461538-0218-40E9-A74A-9982E4075485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A51B617-C1EA-4C92-A1D7-16C8BE62A7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79433418-CB13-4F11-B606-3D804926BB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)bx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B6AB1D-6F01-4D01-ACFC-7CA0812582ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)bx2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334DD476-F6CF-4D2C-8838-9471472D9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16\\)bx3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5257ABFA-D97C-43D8-9646-A9E53F3204AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B6B4D3-887F-4F1D-B9EA-1A846A4D3232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78F671-6719-4DD9-8B5A-E0163FE24AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AFF397-AC43-4D9E-BDA5-6434D7F18CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(16f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "680AC7AF-998A-4584-8087-9409A7407AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D298FE2E-227C-4385-9DFA-55A2D5C04E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A28E43B-9153-4491-AA25-0011732C6E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\)sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68C7DE5-DFA7-40CF-BF97-3EF32E0BCE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\)sx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3054AE0D-231A-456F-9026-3DC90D87353A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\)sx2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731F75E5-25A4-448D-86C6-59E9E4088555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\)sx3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17676028-2B2D-4640-A486-4800303CBF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17a\\)sx4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA0903B-F654-477B-9935-45990D8C37F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "88610AA0-8BC3-4EBE-ABD8-0962AFA7C684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17b\\)sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC22162-36D7-43C0-966C-2DD62CA1DD6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17b\\)sxa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6571207-7C97-4DBC-A403-BDD9759907D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3514C99A-95B8-4827-A9D4-E8E851D7FB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E947BE8B-DB42-45E9-89E9-2E42DF6242F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EFE80F-8DDA-402D-95AB-431E406975D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7A17F5-F4CF-408A-BA0A-4190E135F34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621E4249-1238-44F8-ABB4-52929BA3EB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D72D028-3001-49C2-91DD-CC87EBBF2808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07AF5BD-84F0-4ADA-A547-79CC069BF720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAC243C-598E-4DA2-ABB7-D26C33DC37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30C6E0A-6D9F-43EF-A202-678BAC2C9950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CE4197-A9D6-4DF5-A8F9-8E1520D80D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B561F1C-B1C9-4043-9FA5-01EEE84A0580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7C58-5AF1-4486-B81D-A68DC3D738AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E27D814-59EB-4B2D-9905-8E7877B7844C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb11a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB10E20-C6CE-4592-9782-731DDF413E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C8129D-92F0-4337-BD71-240A4DB7C737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(17f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "75999E88-10C0-4F99-9F2E-7F2325E2737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E49B392-5366-422D-A10E-EE4F3A33C4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "949E9057-ABD6-4FA6-9F41-B427E7C98391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11BE83A-EE4B-4495-BAEF-EA4802FE5376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A077B6B3-F0CA-45BC-8A62-EAC12EB28FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31D54A5-08AD-4C20-8A70-5CA52968382B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E46610-76B6-4C7D-AC8B-64B24CFBE303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3ED962-B5DD-4D72-8271-17CFB8CA8AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ew7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FC1CBB-EE9C-4877-AC6C-63608EF56D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E7BDED-3778-4D4C-85C5-C71E6B5148DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2765DC75-C4D0-406E-8861-58722D1E5E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F0DAF5-8D44-4429-B6C4-958BA267723A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA57574-1AF4-4DDD-9ED5-CAEEA2A7713A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083ED9F1-56B5-4767-8EFD-9DEF8EE3EBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046111A6-31F2-470F-9829-137E9EB98FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF54CA8-46E5-4D5F-9AB5-6FD2D28DC5D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CAEB61-B392-4EEE-86A2-729C86DD154E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F352CC47-8BB2-433F-A58D-8DBCCAE61ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F0340-A5D1-4401-809E-5E96E6B5385E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75867D36-8445-4D75-AEA5-408D0C8A5CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9CF410-0302-4308-83AF-B7929A3C2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)ixh1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1101B3-4B4D-4A47-B820-31B0ED91A983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0E67EE-AF42-4B53-B70A-45562CE164D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B086B50F-03C8-4C5C-8D4D-37EA33C6D7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5783901-D472-4DA3-B836-45704F3A6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39ABB80-0A2C-4B9F-BD62-59863BC2E451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A77C844-EAF8-497E-820F-EF2A87451319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A35F1F-98DF-4D24-A924-E05DE781B452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8942C0A-8DDB-46CA-81CA-0DA442C27502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753EA4F9-F601-4E63-A7C0-7ECF10E6026D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7979BB-03BD-495B-8C4A-EF916AC5B546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCFBB45-4784-490A-BDD2-DA2D54C792B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3AC772-803C-499C-85E7-7176688DCB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10FA021-127C-4556-9BA6-30B0F39F7BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBD5821-1F9B-4A0D-9E16-1F6E3EFC9660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4378A5D-8480-4223-A4CE-F40884A084E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E319ADC-C636-4933-BD50-B613677AD4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E052D7-9811-416F-A5AA-7DB2DC8B9F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16498F9-9691-49A0-9793-81322D96B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C863A46-0D1A-407E-A1EC-5432D0F911B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2AC64A-328F-4FF9-AB4C-610870036CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF320DA-468E-4E40-A55E-E74EA44A3122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57131F6-D6D6-4910-B1BE-7F0D9500A125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33B898-F029-4C2B-A551-6CD294050115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)so7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0550D4F-4F2F-4528-AC07-0AA6B0DE5885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A15042D-EB07-4754-8144-947CDE669CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CDEB8C-BF52-4E9E-B7E7-DADAD34760D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F761BA88-613F-4854-8B49-060A34487E01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sv3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC2BB88-ECB4-4F93-BDE7-8486852AB27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58F4903-E834-4476-876F-8C144BD93D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21217A24-CA47-4601-8B87-42EFAD9A8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D890842-FBBC-4D2F-8403-E8FF383A0289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC99C9FE-7AF0-42ED-9F75-697347D27FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0B0F7B-29D9-4867-9422-4AEEAA93F01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A59C144-2B35-470D-BF33-29CA7EFF2ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0B9E6B-439F-4623-BE70-68F1835747BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086B1BAC-0C9A-40C7-BEBB-FF0E1FC72463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94D83AD-D5B4-4968-8080-92CE49A1494C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DE15C3-75E8-497B-92DB-437B592DD70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0844A5CB-BC28-4E1E-BA29-37E8D8B6231C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF6A337-FE37-4CE2-B0FC-AB0AE099C10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0076A522-5490-4D31-A10A-3611B587E5C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA5C7A-CBE1-47A6-A4EE-BE7CC7F47DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A041C16C-8A48-4470-B1E9-3159C3463A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF709E70-5C87-4402-B601-124C6F3EC1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162C4807-A39E-43DA-A685-A54389799B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC364BDC-D6F9-46AD-8D44-FCC5E72844EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCE7DF9-B1E3-4111-97A2-3AE55A669C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80EB545-CB7E-4352-8A31-062E422F5D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A523641-0044-4A2A-9097-D32504F2A019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50615A05-0D49-483C-AD83-710A227662E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4F06E4-CE51-414B-A39F-93895E1B072D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5852E825-A7DF-4873-82C6-C75DBF28F331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA14C4E-8927-4FA9-9937-26D80792F208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BC6BF-1166-4E9A-AF2A-95D6E93A041B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07ED1FA2-E7A1-4712-ACE6-DCDFE74E8B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECCFD2F-77C0-4158-8CB2-1DFF44B3B929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9E5F20-592E-41F4-9630-017C37CE5090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73924E98-811D-47E2-B074-7ACD1DC64728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F625F5E3-380A-4426-8FE1-22222EBAF11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF8537C-F600-4D31-A938-7C406B798E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06A7893-181D-4899-81B0-316697AFB296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E35BB9-5A49-4982-96E3-7E37F9A3772F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8631D4-A0D7-471E-B457-7E658AB82073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DF114A-BD7A-4DDD-A44C-85B0D33860A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E623AB-FA9A-4E9C-B6AA-D955F658D46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21EEDF0-D2B1-4FD4-BA88-6D6C657BAEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1F6069-6917-472A-9CD1-DA516CB95801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8839276F-2A5C-4F84-BE81-33C3793C1314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543A66F5-E73B-41A5-9E1A-C4FC7B21B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F37FEE-7663-4268-B387-4054C4D60A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf17b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFF8581-E1BD-4FB2-93AA-0FBAA50AE69D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40FE9D2-38B3-4CD8-BD8F-78EF5D246B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E089F880-A07F-4946-AD61-9E3A251E141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D52ECA7-3495-4166-86B2-A33EFC27A6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B84E0D7-3094-438D-8410-618AF6DB6871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD09178-CC6E-4B77-BDB8-296142180AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692A21BB-1127-40FB-9CC8-3BE28C907337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB3DAFD-2CBE-436C-9086-983390CB011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629AE578-4B9F-416D-8FA1-EE7EEE2B298F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD3CE986-EDA1-4714-8805-829CAFB0973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0163DE2-938C-4E21-960C-1D267318317A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D4EEFC-1AD9-43F9-9744-9428C64F64E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F621288-534C-49CC-9863-0F5D662187C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(18\\)zya3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B789D8-F038-4120-A943-64DD11D6AFA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "532987C6-8D68-40B0-ABB3-236C49A63D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(19\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958068B2-8124-4C2E-9618-EB65C35C775E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(19a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66196CD-D43D-4682-A39C-59995C464F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(19b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "949A25F3-4445-49B2-BF26-A3424D4BEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(19c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F854A11E-2149-405A-A2CD-720FB06C0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "522425D5-1EFE-4F07-88FE-9EE4376D7171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)eu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A21CA-3E35-4F73-9451-72EF1265ECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)eu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47186E81-9EAD-4AD6-B888-F1F94C2EA128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955BF110-FFBE-4368-BE06-21AC794C53AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ew1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F952BB-8DCA-42ED-BAB7-CF3612FCD444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ew2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DBF354-E96F-41C8-A393-077682738B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ew3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FC49A2-CB0C-43CB-86F2-2D4483CFE5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ew4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2645B7-DEE2-45F9-83E8-4BA49016A920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F08381-956E-4E97-8226-6EDC66C281D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A211E02C-BF5F-4587-8416-7A3F15E1920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CCAA24-53BB-4998-B986-358701A8A8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2560DA-E091-4344-A7D0-9BEEB6998AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A526C3-8B1F-44BB-BCEE-C3D8140CDF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12B5F13-392E-4BE0-AFC0-BAB2E989A08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10151339-0261-4F5D-9601-F048C0B70908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2498113D-65B7-4144-AD1C-9FCB6534B7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84685E46-066D-42B4-8800-7D529AFC4FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96B72B0-0F9E-44AC-870E-84DC484173E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99299759-15D1-4BEB-95D3-8D53C27674A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C74A6F1-1A75-4D57-BDAA-68110CE604B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3290C7D-BB60-4095-BBFF-0484C1FEA071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4528A0-A342-482E-BF87-AB4B7EC69C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2C7EF6-410E-4D27-8C09-D0CEFDA360AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326FC2B8-62F0-46B9-961F-4D5526D41A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE80643C-A1C6-4633-AD50-91E713E312AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A9D0C0-1DEC-43D0-AED0-B9B9C54A6E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC6664F-7F61-4645-82F5-33D48A2413DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17BB367-5B20-4D0B-9BBA-244146405527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)s14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EAA596-E2F7-4B8C-9AC2-88C834B1235D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA74FF4-FD5B-4EE9-969F-93EAC73D89B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D273495-EA24-4D04-BA90-710B22B4C003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA90AE6-0BC8-442E-81F3-49E6C8D71F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692B182F-4E9A-41C0-B254-0B0362A7B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(20\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F680CA8F-7F5C-4F72-B4B3-67617EA99E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9324BF58-67E2-410D-AA71-F280B3D64498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB7A3A1-19CA-435B-A964-5F1C19552528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21\\)sw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853069CD-72EC-4AB9-A046-C3A0B7092424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "060D7CA2-0A02-49E3-BCFB-EFE7F6EC08F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(21b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AAE391-8039-4BCA-851E-CC3992BE7F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(22\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B20E6F8-5E33-4F24-BB8B-8B61E39C01E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(22\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435CD99F-9A10-4475-A589-CE202694A8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(22\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F657AFFB-B3C7-419F-82A2-B244186EDD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(22\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF2A5E3-819D-48F7-BA3B-C189E5BB5C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(22\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777381FD-8BC0-49AF-A4D9-83FC7E601BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "947062EE-A5CF-4A7F-8EF7-921F45118268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F498091F-9A02-43E4-BAF7-FB81B8E5A90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099D2308-DAFA-4790-AFD8-066B841CD0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C78ECAE-978F-4DDE-83D4-DCF4ECC20EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23\\)sw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A1CB66-2C2B-487E-945F-2B6B470501C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D1C25C-1BED-41F9-8CCC-044065B7572A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C9D0569-89F6-4F28-B4C9-CEA8FFBE0392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2A0FDA-C6C2-473A-91AD-CB0BFBAD6FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E4D5FF-43DD-43F6-B6B4-E731F68BDBBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(23f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B55C5D-F153-47CC-8E79-94B6451D04A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(24\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4E83FE-4A5F-49A1-B6E5-B39171AA8825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(24\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69F16A8-ED8E-4B89-AA80-CEF9C488A03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(24\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016CB579-0452-4DFE-8CDE-D3161579DDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(24a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA61D29-0341-4702-9775-74D30614BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(24b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "683742ED-3BCA-46FC-A0B4-D5942AE8CEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF347D-F8D5-4D3D-AF23-E89A8C77AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878773DC-1360-4608-AB17-0081B33B11F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2B085A-57AF-4A84-A354-166E61B5CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C181E469-32B1-48AD-86F2-63AA790C5EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35979BE-B33F-4709-8B36-FB8297E321FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66130668-1107-42B3-BFAF-5640D3AC7595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0333A54-6370-4327-BF38-B873F3AC6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CF87CF-3EC9-46C0-A98C-25F6055A3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A93F44-8924-4787-AF35-4D6937B87086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABADA146-ACE1-4CE0-8CD3-A3F25EEAA3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216D7B37-0925-4A83-980D-2145B00793BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856842DE-6995-4CB5-A500-6D851BBF3DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862661A6-07AC-4FD3-B84C-977F66EDE29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30806B3-C98C-4D4B-AF11-0743EBB5B50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF3B7A3-F63F-472D-87D8-5EB767E0DE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18937501-09CF-48AC-A4FD-7ADE162BEF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7346EC5B-4F87-423A-A579-AE0E1583190A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D298138B-2107-4DAC-842A-DC8A2BBD667D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22E4042-3628-4A7E-BD93-1F3F282F9E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EC3F33-4A8D-46CE-A5FC-913E03F6DEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84C2CA8-1BA4-4899-9AFF-443FBC5003D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5E50CF-9084-459B-AFE5-5E0C63E17AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F9FC27-5954-4374-BE61-E0E563A0DD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC9A8EF-FE37-42CB-A33F-4B6AF29A8827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C9F1F1-EA5E-4921-A862-06304CE55C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD274CE-D174-471A-8423-02F33F63B574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA143186-1E3B-4B5F-A5FD-AE90A2664AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4912CA3-2311-4D0F-8767-6815F43BE645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC91248E-CE91-4BAA-B52B-4AB77AAF77B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092374D9-6DFE-45A8-B3F1-562C56787304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E5E380-4843-4E2F-8807-BFBDB42CB734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBCF4DF-404F-4701-91FF-E3D246C1420A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065CBFDD-BF57-4FE4-A48E-03CFDE5530B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD62508D-30AB-4E3C-88F8-9274FDB22AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B110C4C-B97F-408A-9D0D-A4D1B1982A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD4136F-BAEC-4EAC-B32E-F1A3AF3267C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED06EBB-A8BE-4A0D-AEC1-7BD7BBFF8FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B622CB7-1F24-42B9-878E-6172694E2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA16AE4-7C19-4172-8969-C6CDC9AF2946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179613A3-C3BE-4328-BF49-229AAADE037A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB8A7BF-71A7-43A8-817E-5F8F583E5C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F61BB89-DF16-402B-870D-685E539A3D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36953AD6-CE36-480E-8679-DE5EEBCC5A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F83F949-8F27-4FF7-A586-BDCDAA52B2EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F571ECA8-0AB1-4BC0-A6AE-06BAE1FD2375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F402D2-7DCE-4D22-BA71-ADB3622058D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E67F0D3-5722-49F3-80FA-8BA7292C085D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA79BC8E-753F-4245-9885-A7A2733E4013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B820873-78DF-401B-8A99-EB1F115FED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4A5F6D-CEEC-4BBF-9E4A-2D3B1D148371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F88317-18BE-4484-A027-D69500937799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sec2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6CCDEE-0D38-4C6B-82D8-CDE5067CC704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C342FEA-F2AC-4E0C-946E-1F7DB2994D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82284ED7-CA08-447E-8EA7-FCD33D500BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C112D4-820D-4BFD-AD59-4957E7D5FDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)see1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EAF282-5537-4836-BC54-BB7EA023BF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)see2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF228683-2C83-477B-904E-54E1446928A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)see3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DDE240-25BC-40F0-B8F4-D2D94389C08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)see4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359E5A44-2CE6-463A-B9A4-C8BE21491D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B69AF0E-CF4D-417F-9E5A-B8540FAB2EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768A5932-EEF1-4A39-A054-CA54DE4CAC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)seg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E87B20-EF04-476D-829A-6F1433DD9854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B142BAA-613A-40F8-9FD2-EB081867B3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A632D64-8E99-496A-8DE7-4A2458D1D7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48263C15-99F4-424D-AE45-F3A17E291F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0048C46A-BC09-4958-B4FB-EA69B25E4EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA202662-DD3B-44BD-A6A0-F31056A85759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB91AA52-72DC-4832-8FD0-C9E775E14876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1036B4D-4666-4BCC-9345-2DEAD2F49ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sv3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156CE790-020F-48D3-ACA5-5BF9AC1F0E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3C8845-179E-4098-842D-2F886885CFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B8A985-16EE-47D6-8CA3-DDB0E29804BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17669022-FFB1-4463-9FF2-C87670E0CB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECC1FAD-D600-476F-AC96-6B7DBC15D454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F5683A-5EA5-4991-A677-2390477BA8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF0E312-0A76-47FD-BCFD-39ABDDDB99A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3D41BA-41BD-4F4A-9CD5-1EDA026F0979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A83498-DD1A-4E96-A032-2879F3375AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F28A7-A0CE-4B5B-BD84-ED1066D7701A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3545FA68-6641-4DED-814D-6A4C62AC13AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FC37A2-86A9-46C4-B19B-F880DBE1C395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E10C1-68A9-4422-A5D6-7DC23EE11A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39BAAE7-F6AA-47B1-9191-7394179EFF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176BA46C-575D-43BF-997F-4E2060235959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)sw12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BB0342-7915-4A20-83FD-A07D744065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(26\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA519C6-92EC-4FC2-B527-3C368E754224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(26\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183C82F0-09A5-406F-9362-E268335D4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(26\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1F98B3-23E1-475E-8CC4-7E39D091BDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(26a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26656B9-BCBA-438B-9380-2349E46ACD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(26b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40966B8-23E0-4ADC-BCEB-74DC2FA7EA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(26c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E434B756-FF79-466E-B906-5A06E6FF1DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D75D6E-F173-4D71-B3F1-E942A03EE469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADFC5FC-CE15-4C83-8E11-7CC29EE8F32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62696E58-9626-45C2-A25F-0F477194F6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DF979D-7377-44F1-B1C7-6773A3279B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9197A03E-540E-4180-A6B4-094AC69D3F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76D52D6-A6E3-4573-B106-64DDC16DB04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F8B7E-3559-4065-AAEA-88A220156DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C1FA18-BE28-47B1-A7FA-14479A7BD31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3C951B-527D-4C0E-A1AF-D0F6871AEB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF30D6DF-69D3-477A-866C-DD87C1B97630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sv3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EAF816B-45A2-4A67-A7F5-5F421B0BBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sv4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D93AB41-FCB6-4F13-8AA7-E1FAC5DB6B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27\\)sv5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791E0895-2925-4AC0-B49B-F1D8BD5048DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD06342-15F0-4CDC-95C1-3FCC022AE742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D4091C-087D-4267-B606-664EDA55DE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(27c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA547F58-1182-48EF-A9EC-C74B317B6744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "968C42F5-9FB5-4442-9314-9D0156DA4719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAAD4CB-1879-4CB3-B803-9FD173AB8239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD416F78-9808-4033-B8A4-841F8543B8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A9D0BB-6752-4471-A8C2-E9964319115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301EC873-E298-4D02-A101-C0856BF43BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC82E35-E72A-4165-B17F-F98F6ED7D295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4763B2C6-B64B-4F7A-B88B-45D491DFAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A68EBA-447B-4F6A-A13C-D78C136DFC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8451D760-EFCA-401D-A7D3-A6D2C89AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9553BC92-FD53-4EA1-ABD6-FB3F42756B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185849CA-CFF6-4718-8FD6-B2750F4467DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0CEB4B-9462-4EE7-832E-DD01F4EA06B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F613406-0EC1-4B82-9FE0-D0506659C2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B49ED5DA-546F-487E-A9E9-728292FD151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sb13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B3419D-50F3-4F85-9C8F-D67224A76492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A962D30-42C4-4F4F-9368-B99F2308D53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE93DCD-F0D7-49E6-B013-37DF68E9701F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)sv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795ED1DC-1965-49EE-9F0B-CBC517EB48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28\\)zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3310C7-E423-4340-8B2E-63A3B7A571A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "406DA544-0990-4B0D-A75E-23DA7667C859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5574C55-6951-42D1-9B29-6A9A1808FDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1625DE6D-5848-436B-A220-C0D1EE3ED0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(28d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EBF6A2-C7C7-4A8F-940F-B7ECE0A43221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D20AEC-A6D4-419F-A771-686CDA05CB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016A96C6-EB03-4C4C-B50B-AF6565B167BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A282E11-D592-489A-8BC0-20ADC5059E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)sv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ACCE527-9BF8-4073-B681-A9830750DBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)sv3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A59813-2772-4B33-B5A2-9BF45B2E6FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)sva2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299BF4FC-20BB-4D37-8F27-BA3C04751297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFF6960-9DF1-4ACB-A41E-8E23E81D3BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60200C9-7F3B-4E16-A8C6-861382641500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)svd0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8713AA-FC0D-40B8-9CCB-7A1ADCC84BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)svd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8B0879-6180-43F7-A995-D57407D92D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29\\)sve0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C1E2B1-FD4A-46B0-9FC9-3ACBB028ED4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F018CEF-2A91-4067-8104-63686F9489CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29a\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77215C81-79EB-4262-B5C6-A59050A22D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29a\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF987C4B-DD5C-46F0-A042-123C606D108D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "244B12D6-43F4-49E0-9102-26DBB77DA960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29b\\)sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE37B8CD-6912-4679-9DE7-4B3460EB4C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(29b\\)sv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330AE6D-F4AA-4C00-9F03-4B8612EFB272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(30\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF94640-63A5-454E-B0B1-1DC1274DFE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(30\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F12CDE-0C47-433D-81CC-EE33C3C36B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5BAE50-27D4-4BAC-9C15-0EC889139144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050FA44E-25A5-4708-A319-107D42E0F8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "774C8FD5-95FF-4F4F-ADA4-D95BE6C8DCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb3x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F5233-9264-41B0-A271-47AB30811253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0855213A-6987-4F74-87E2-79FABB7C37CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3ECAFB1-2023-4A8C-BDBC-E0486109F4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4495F1-77DA-4047-B4E6-5A00931061FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D8E000-EFC2-428B-986A-35B2EC85E73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440620AD-73FC-4859-9CB0-95B45BE0AA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B5525F-3AC7-45EB-B4EF-025D50EB6CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8B4E8B-4C25-4C5E-9B39-FC9DC416BFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A5FB07-EA61-4268-967A-9F71FE660E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A02EC-32F1-4574-B9E4-5D0BD4C2B1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CBA3F2-C63D-4EF9-B484-5E0F35191FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FEEBED-8E18-4D30-94E8-DF8FD835CA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395BF2B1-3B5E-4E03-8891-C1C6F90877C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CC6F69-E14A-4731-95FD-A780826F7AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E367EF07-BAA0-4A7F-BC5D-0A819F099029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A26DC32-8466-4AF0-A282-5AA5A8B818F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0AEDA5-CEEE-4AE9-8BBF-30F35677C4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sb21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D8C032-57E0-4E2C-BFC3-A26DAA5DDC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B752C842-B50D-4BE9-93E6-CAD0560B679E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4ECB0B-62BD-4429-BF35-9ECBDAC952E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A46E63C-D7D4-47ED-8C83-E7EBA5B17A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "616C69BF-7431-4D40-BD31-929D4CE8C7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940F55CA-49E2-4353-9714-BA6A86D9DD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703C31A0-4E23-4D3E-9764-4A43A55AEDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6B1A28-415B-4AA9-8CAF-2552B64D79C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE45B81D-7F63-41ED-A163-0103A702023C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB656D5-1D86-4D3C-9A1B-92E6CE404E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE955775-49ED-4495-A70A-2C1315E95D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C88AF23-D873-4723-908D-E2898E9ED3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A57EC0-6DE8-4552-BAC6-EB173D84AFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F81076A-6583-4184-B8FE-1544792BCA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329678E4-D593-4E96-A33B-E8DBF87730E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052091E6-A3E9-4E90-BBD5-1E0ED25998E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(31\\)sga11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AD7780-0194-47E9-980C-35215DFFD198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(32\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6D26B-0D9D-4801-829E-DEABCA488967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454D4CE2-9722-4EBD-8C03-2B932632C044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB69F43-BF84-41BD-B4D4-BFEA65390E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474762DA-7431-4CBA-8F63-046C1C5F8D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D770F45-50CF-47A4-9152-84EBFD422A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B66CB52-66BC-4796-8175-BF392CE1E2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925D52A9-826D-427B-9A16-E0C9DBF5D636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB53B13-C9CC-4B63-AF23-F363F5E7D3F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sra7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199EC693-7F36-4723-8798-3EB41B39AAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD5747D-D301-467D-A8FC-05BD1D07099D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A3C33D-2217-46D4-89CD-9680EC77D6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3763940-052A-4C74-A3C8-A4AE4EACBA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2973EF6D-8428-43AE-84EE-9DBB3D2AAFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7EB868-B5B2-4C04-B368-CF25E139767D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823F0558-9362-42AB-BDAB-8B29F4B4F780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC2369A-8311-4CCA-8758-2A289B8A5E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3C1DED-8378-4C00-AC61-FDB9C91682D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CD3E97-1FE9-4E87-9E5A-F196537632C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEEE78E-68F8-4FCB-B679-9A003407EEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D0009B-65A0-491F-9104-29CD5FF4184C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB785B7A-E904-4AA4-A6D2-E84387B0BF91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06D32FC-BBAB-4128-9EB6-E3E0DB681294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0C5801-0500-4D01-9F91-7013C15953F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536B21A2-B634-4289-A53E-9BE777948B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6390-79DC-4E8E-ABF5-ECA13C7F9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B5AA1B-9503-4BDF-8FA6-35206C002E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E649CB0A-5055-49F5-AE6B-7CCFAB800477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E96ACC-4945-49D0-89A1-F2E24D01A6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D44889-D541-4FF3-810C-7BA5E8679296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4264A174-AD34-434B-AD71-91925C22F1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F031447-30AC-4CC4-825E-D347C58D526F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB35398-9758-46CC-A2BD-AF099FB502CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8775F34C-07AA-4B33-A08A-456696BA9194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D62520-15CE-411D-96A1-4D9F8C30C4EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D0D0C9-BB7C-4706-B1D2-BE4446E196D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652160C5-DCD6-450F-A238-847D1B08A216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C15434-4890-4F02-B07C-1FDA97DF2A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B517DA-5CB4-4B3F-B163-DF7FED184700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DC8683-6B2B-4D3A-94D1-161834064610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B5AF0C-7815-4E2D-9F9B-8C2C20E50C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxh8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD47561-4519-449F-827E-54902C3D77EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19BA770-83E0-4D07-BE31-97FA8C86437B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4627BEF7-CEEB-4CBC-8620-4D9C5A7F7C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E9A29-97D8-41E1-81BE-73FAF1B5E2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72F30BA-0376-426F-9E74-A39231973D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C409330E-2C8F-425F-8A9F-B04E67A83608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8940ECBB-CA08-4292-AA5C-55AB95D98580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C29F00F-1779-46BB-9964-8692AB4AD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950F3BA6-DEEB-4EA5-96E3-88B33B0331D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48E7E3A-61B2-4188-831C-26EB583ECD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C54AA9-EFDB-43A5-AD00-4E9965881927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7497ED9-109E-4B44-8C16-D43F7FA1A326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9F3020-E327-4DA0-BD2A-22677BEA0629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B34634-EAEA-4FAC-98DD-E50EB7FE9286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875897DB-094B-41BD-9205-9D4564B52998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B119CD4-DA82-4F35-B5CD-71E2434C23B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D581EB8-FBAC-4F48-82B5-6F8BEE2D8CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3855C5-86C9-4408-B644-78E0B17F6F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B47AFB-BFB5-4DF1-9F05-695BBDC21CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB7463C-01C6-4483-8EF1-1E1257738CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFE2CEF-595A-4D4D-A741-4562CD03B67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EC6DC5-E871-43E3-991E-0EE4B310CA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102395E9-4110-4C7C-B152-5C60EB17D1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4200124-000B-49C0-B380-A478C1CF4A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40BAA65-D2A7-42BB-BAD7-C9F7FCE7B123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B9DB1-8AB9-45A7-8DC4-FD6CED335D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F17158D-9CCD-4186-B97D-51242AB92547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E920061-80A8-41E0-BA64-A20264020C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB5FB44-0CD9-40E1-80EC-C8CFBA023FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxj10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3509F6-5475-4924-9E5C-4E2E03D65F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(34\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8CD1C2-EC73-4235-9441-3CF9D634222F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(34a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E2651-061B-4137-941B-5535BF834C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(35\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF116D8B-2C19-402A-9733-540CF79D80A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(35\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2A4B06-3E30-4633-9D9F-07AD91ED4281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(35\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35F3267-6978-4816-8DBC-2C7E2CFEE35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(35\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF7FB11-5610-4EDC-8F08-4FF5EF0182E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(35\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69C46C6-E6B6-45DC-89EA-B028740F1DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(35\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3B4F88-99E5-4C1F-A160-821B3A99F0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(37\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFB8EDC-484D-461D-BDA1-EC7ABDF34352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(37\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9545967F-C55D-48A4-B70A-3E9B2D7E1617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(37\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DBB5F7-D105-4F8E-B144-C392D3FC6AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(37\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AB797-74DB-4414-B895-8D3403CF0334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(37\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A503C16-2719-435C-9CCE-B9743A42E9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF55A5-2413-4F1F-96D5-10F06661559D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A73E2A-287A-48A0-90F2-9AA2DCC8595D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93174C2-4F87-42DF-856C-E9938DBC4DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A199EA0-3C40-4AB4-B67B-B4E0DA3E2512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10924FB-9326-4EE2-B6FD-37011A2C2E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DB20CD-004C-478C-B19C-48D7C0B6FE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E6E66F-D0F2-4CF7-AB96-D6DB38746972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BCC700-7375-477C-9585-16DF7AC3852A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA49B682-E7ED-44CE-906C-9DD9D183583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(40a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7DD3C1-ADDC-4799-8664-B36D1F187539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AFB195-54B4-4DF1-991B-0EDB6E3286C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3E6D9B-BCC6-452A-8420-87E601B74949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA609E08-3369-4359-B126-19A54D537C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15085505-6E63-40B7-9F71-7BF6F965FBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71ADE6DE-5C2A-4D34-BE8B-A6ADEC61246E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43710D33-1685-4EA9-948F-2B79122C4A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE43284-9902-4701-916A-FF10AE966842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859A0347-C043-41F4-B2CC-EC54E36A81A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA011033-D263-4D47-8F33-844DB9C0B6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FBF27D-7288-4251-9846-064AAD6E6AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7988103E-FEC8-4F3D-AB7C-645C0D5070EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(44\\)sq2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0888AE6-9FC0-4927-B74F-65711EDB4DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(46\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E098CA10-72C3-434F-AD8E-AF56946B87A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(46\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E61C16-55F9-4054-8CC2-38D5197A1FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(46\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C923698-3017-49B8-9DAF-98584CE0402C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(46a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFF3E48-20E4-4642-AEFB-6AA49070BDA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7EF0685-7BEF-4F84-902C-DFE533CD2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F114FD7-F62C-4A24-9CE6-C9A7136465F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F72BE-B65F-4271-9042-3B459DFBB43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7715D0D0-E8B2-444A-A590-7B5B0BFA713F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B526DE1-EEA7-47E4-B291-09C02F018A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECDE91B-EA0E-4938-BC64-6A2A7DAF2A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00F4FE4-769F-4268-A623-DD56F12D7F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97983D5-B4D4-4A69-8573-A978EF9F8859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6E74-0AAA-4CB4-B119-30ED3DB95749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B33EF2-3157-457D-BB77-CE99C9F02A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2477EEC8-93F2-45D2-AFF6-8D83AE5195B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2570C01-A377-421E-B2A1-EC05A87DC684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B7D11D-1C92-4369-A446-2CC58AEC70D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF19E91-370E-4F3E-A6ED-778A0493912F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072FFEF0-72C9-4C19-8A3B-9633DDCA24E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AE17A1-7FC7-4197-825C-92B32AC64D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00328248-72C7-4646-9312-5EAA7FE0D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5535D673-8DF3-4737-A531-E7B28C419235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D97E83-3091-4E46-818C-503D7D1F9D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE109462-C870-4C66-A7AE-B1ADED3B8DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D0156C-3153-4A64-8491-A6A1B60FE5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C075F42D-27C1-46A2-893A-5C0D9BE13861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sq7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF11222-0EA2-4E6B-B6DC-D16FCFEDE807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA53AAE-4FF1-4662-9671-06C001C22750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACB4AD8-7013-471B-94D1-5B4C6F2362EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0352D485-5A78-4761-82A5-5A214DD39689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9447E8-B489-4FE3-8014-460ED80DB96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(50\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2FFD2B-2C99-4BF7-81ED-7A3C58F43266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0BE6E0-3D82-4B2A-9B4B-C50021F0687A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD063290-8E11-43E3-B55E-411551074C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A6E72-A63C-487C-BD50-3902D328C011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D964C2-D315-45AA-BA20-F3723EDCF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A8CD5-93F3-4A40-A533-98DFE63FB699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43938EBD-70E9-415E-83C0-8CED61EB84DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FC422E-1DCC-48BF-84BC-9082F559644B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB3C3CD-1E42-4E59-AA9C-4AB91DAE917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF9F501-FC58-489F-9662-4DD30DEBDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FB6BD4-CFCA-4BE6-8C82-9F83A3F41C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B01C-956E-4C74-AA03-F028C25C2DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5898745E-C1D3-4D0E-8476-2EEAA4327B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "887C5632-F3F7-4EDB-A065-D81F64A9B15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(52\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD397982-87E8-46CF-95A5-61435849D02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE2AE1-346A-462F-AF0A-3022EB2ED66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17356A3C-0C05-46A7-89EF-A2C48DDEC4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5C5C5D-B40A-4DD6-A10C-C8713CCF2E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE68EAC3-05F4-46C5-8A48-4ECFF1844BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284967DB-32D7-4F7B-8B69-767BFFBE0924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D896F9-9E25-464F-B6C5-55A2DD38CC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF566A3-331A-4A8A-9EEF-D1FBF71BF4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0623C531-CFF1-4C45-B8A7-BCF2C4678222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B72BB-52D0-4307-8A61-73AA2477885A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E66D10-84F4-486D-BFAF-B7D4AE2E5583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C364500B-B7B0-47CC-9277-8D43BAB6E6D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B797B2-6AB2-4946-88C0-12D71258CCE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12B9DA7-28C4-4584-A548-6B06874F9C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0C66F2-D158-497D-8683-2264F58A33B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE361F3-BA5B-453C-A58C-6E8CB84BC101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(53\\)sg11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C55E31F-B291-4FE9-81FB-A91E95323863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83184158-7C5F-4294-895E-7CF5B76A0F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A081B105-AD3F-4529-B3E7-D8B0851C83B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3142DA6-0FA9-4CEC-95FC-938AFD944BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)wo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1644E8D2-E3F2-4ACB-A0D0-F374B565D121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(54\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC24BF9-DCD1-4974-A2C7-654E9B469C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F8F86-8C63-4A29-A384-62A849848EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87760068-4255-4D18-A62D-FDC156F7A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AF551C-1482-489C-AC4B-DF3E9BBB0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904C4D5C-F603-42CE-9CAD-28B01223452B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F2951-FF09-45FC-81BD-7C8C6C7CD1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C5C43F-67A3-4000-845E-FDA620AD1B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7C3DF8-2B59-41EB-A151-15E46348DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700DDE2E-922C-426F-8751-BADD15055AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CA171-4BE2-4204-BDAB-EA19BCD4842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84766AF1-DC74-4D64-A4E1-56B377D6CE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A0517-EF86-4655-B4B4-246ED3A84803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E3912E-11F7-421B-A5C4-35568A6E386B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360F3E49-D75A-4ACE-B775-14055272C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5362C676-5002-4ABC-9C60-97D4B65A399D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(55\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14EB41-CD6A-483A-8F68-9072E436807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABCE40E-04D5-4248-A374-EAB938575C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61323E0-9CBA-4629-87C8-9F8B59ABD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A859E-3B77-4CAE-A38D-C1CF3FFB6DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CCEA43-40D6-4A6A-A235-2301DE7C4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABC42E8-E304-4D00-8C6C-604F3EE13DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D38633-31AE-42E9-8FFA-77C8EFA9AABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6D9CC-70F0-475C-8AB0-48980596BE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(58\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECEF97-EC6A-43C8-A7AB-5C48948183FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AB39F8-5D39-4E8A-A8A5-B91718D37A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63328822-DC2E-41A3-9E12-F5F824847AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350D9AFE-66AD-486B-B42D-E6A3CE62640C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D67BDA-AEA7-4ED2-AFA4-20283B446602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D593974-6D7B-4AF8-85B2-A77D8BE5CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B4BFC4-F2C9-4D5E-AD22-3AAF36CFB12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2E6D25-7528-4433-9BB3-4F45DB0FE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E1ADA5-C782-4F8A-A77C-A895B402A792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C897E-CE32-4350-9315-DEE4EA5FF02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7FF79-0AFF-4DB5-BDCA-797B8FAB7F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2B02DE-CE0C-47E1-91BF-F115EE970B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(60\\)ez11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5374A08-2788-40A0-82B5-9597C28396EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(99\\)sx1003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C73047F-AA0A-4F61-A992-A1580081CC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(99\\)sx1006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF73B049-7936-414C-92FB-B30172777367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(99\\)sx1010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13199395-0ED5-4D11-A697-8BA09BD15269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(99\\)sx1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83087687-A641-4BCF-BA85-1A15A4C6FFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(99\\)sx1017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE65C9DE-D3AF-4159-A439-A807937645C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B028329-15DE-4A82-99C7-A7E8ED731D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2928F8-6C6B-4C3F-BBE7-EAE8A0C47E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(1a\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26DAE5B-2FA5-435D-9A21-597251C5ABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(1a\\)bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2F6BF0-FEAF-4A30-A4ED-FABE4C5C2217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DB7725-5D9E-4204-8409-F73ADAF2DB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23D7886-E907-4017-9E6E-D65F90167DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DF7FFF-9B29-4657-AB0F-31A491E1B765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19940BFF-0888-4717-AC5F-87A85BE165A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF322E0-57B5-48E5-861D-8162030C9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E4FE0C-A608-4E35-918E-1932AE29AB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926A8285-31EF-47F9-BCD5-D52F57CC4502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2893BE83-B6D3-47CE-8290-9B9AEF9EF36A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C4D3D1-5E63-4A1E-BF9B-588FFE5790B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108CDD9-8785-4CAB-BDEF-5F14DB842EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5A144-6394-465E-B598-DEB529EBBE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720F85E7-AB9A-4E9E-A9F5-C08A45316F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AB31CE-7F20-4B15-8BEE-3812FDA578F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94D6CD6-3AF5-4CC6-991D-3D8C229A1C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F2C771-1E11-4B3D-AAC0-524CCC5FE133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD11995C-8667-4B12-B27B-991BC205F035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF39A0E-8D01-4AEF-80DD-F98168C157A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B67F97-8BA9-47B3-A871-D7F874717DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "011A28AB-DBBD-4582-94C2-9F1C887CF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C268494-F83A-488D-AEE6-AF7D319B6F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484207D7-0AC2-48B6-B86F-182651B6BBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC8F6F-273F-4935-915D-DF614B8BC23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DBCB3-77DD-42B9-814D-74F6FC271FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F502ACF0-AE4B-4977-BECC-1F05950A6E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0AF55E-7437-40D8-B0EF-5AFF260A4327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF6C6D9-A2BD-469E-AA75-18C063A435D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE48276-21BF-4275-8512-4C5401423064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56FD2F9A-B723-4842-B847-BEFF3A0331AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D576AE4D-6513-4538-BF13-8D5D7D8E707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xz1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F14367-5D4A-4130-9937-6FFBB189F268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97FFE38-1AD3-4307-8D60-EA8DBA6366A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9BF2A6-A980-4BF3-B2BA-D66DA5FF329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB74E22-7761-4139-AB47-F82E541C3A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62913E0-2FEA-4F30-B6E6-4447E7ADC35F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BDE13E-604D-4398-9C25-37761ED640BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCDC8E5-25F9-45AD-A8C6-8B97DA171A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A4A80E-F7C5-46DB-85CE-E5329C6947FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40DD5508-B8BF-435C-B316-42FEDDDBA859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFB39FF-9429-40F6-8226-076AC029FC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76112673-D48E-49AC-888A-40B2AA785FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B5329-6A76-4BE9-AA57-3463D614D495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC06EA9-D4D9-42EE-8A98-598356707894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BCC003-3F88-4369-A387-6B8D0FDFBE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD45AA0-EEE1-43FF-B04D-4063769D71AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7873D1DB-80D0-4076-8716-7618D7161EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EEE641F-A0BD-4689-93D2-E3B995960A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF292613-B9BC-4CF1-A6FA-4AFC077D8632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208EF5CB-8131-443A-928B-391104DC1C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0B56E6-90F8-42F3-9625-3A8264BE5DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888BC045-03C8-408E-AC93-C8CE996C4B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3115134B-46F9-40F0-9ABD-3F35EE635EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E168A04-E291-4940-ADBE-453016DEDF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B61B76-FEFA-4652-8868-CA77FA48E5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A8AFAE-A725-4258-B640-DB7077EE2960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)tpc11b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F170E9DE-B256-4ADB-B922-6BD91BD454E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B1AF9D-106A-43CB-972C-5E85ADFC355D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D460AE-3B86-4178-A9D4-172AD4AF1DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8577B0-8761-466F-A940-CE33043241A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8BDDAE-8979-4C21-BDA8-25735A5512CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AD4DD0-0750-4EA4-8A35-6946ED7D8C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DFEF95-E48F-4586-9D70-89C192FD21E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E1EA17-0717-4715-9F2E-48264E18885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985EC25E-933A-4ABC-91E6-0633B8BD561E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACA1E35-3681-4E2C-BAB2-DAD99F24F8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB85916-14A8-4D16-8BE0-D99B8E5B020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F672CDF2-ACC2-485E-89C6-42E47974C8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C47064-BDD5-4EE7-BAB1-E8FE21EB7DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF755A-1B22-4E18-9DCD-34FAC9231EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC204B9A-1C01-4900-B515-5796B0B06E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A06F5D-ADA4-44C6-84EA-7229428B7AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67151B56-DD5F-4384-9651-FA927CE73D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111C62A4-9DF0-4317-9F95-0112BE24D727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53430E70-FBAD-42F7-8614-7AB04E566810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DD2403-9818-4A72-97AB-C6D55966844A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC9F410-782A-416C-9E10-AF43D5BD44FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC8454B-C7F0-4E93-B8C6-4286AD7956F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1183C1D-868D-42B7-B32D-CEDAEF9763BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27107AB2-87AB-4909-9F6D-352BA94F8032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4403BFFB-8A89-4512-8030-5DEDC0C0FF93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38549C-107E-4350-90F2-BA928E3872AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "004FF344-E1AA-4A94-A9B8-578AA0A4D291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7601422B-1C22-44D2-A398-1586814A9F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B9FEE8-FFBB-46E6-A1EA-A243A0073853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B4FE3-7A03-430F-AE68-743559D74DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5C4FD2-E4BC-447D-8B3B-0248BFBE9121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EA2941-C260-4773-AE78-E96B81AB0AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0C4E44-ECB5-4DB1-9340-C73F49BE6486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F645CEE-083C-412E-BCEF-2761AC266CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CCD5B9-0771-47B3-A280-6566A489A5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEADF66-3434-41E0-9527-4D97F1836A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD2279A-B605-4FDA-8D4D-E95B9A9E0213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14495B0-ACEC-413E-8035-28DD3A6739CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EF12C6-A9B8-472B-8EA3-5A2A1F0ECF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C82EB5-8397-4C0D-8074-7B55D83708B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870D5820-B6AF-441F-B5B7-28CFD0236D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22A2436-564E-4F97-803D-DC5A2A56CB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6735142-065C-4AA2-B78A-FCD7CA8CB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337C0195-34F6-4683-A944-2F698A677476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75901574-5BDD-4388-96F9-A2B4E9970F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FFB99-8ABE-4E43-87E8-93BEFA5DE1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBCC011-54AB-4E8E-BC20-68E6F274D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A9D75D-644C-481D-9220-1BD86402F085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37DC38C-D9BD-4C25-B706-230FD6D610FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00754AB0-91C4-40A3-9DF4-32068C674D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B49EAC-7AF7-4493-952F-404D9AED1994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0A3B5B-4E6B-437A-B355-D9DCDF078201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689D066C-972F-4868-A6A3-2F5522489D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB32233-FE9B-48B4-9796-080E741A8C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C28301-4844-437E-95F9-8FDD256FFF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CA13FE-93EF-414A-A8D5-333D4A5B9320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF90D7E4-0ABF-4A0A-8499-9BE62A0EF580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943BE2C3-6414-4CB6-954F-31036B5F09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A7D19-BB77-49E0-8A91-6A2EDC4D90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46701D71-6F19-47FA-9567-C003C98F3851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A91EE01-2AEC-4B36-8724-EF95C6A07108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi8d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C189C7CA-5B90-4226-86CE-56DBAD2F319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6CFC59-5BC7-4F19-9D5E-A667904DFD33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22EC08A-DB7B-420F-A03B-8F37AE678406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4136A24-DCEC-47DC-9C2B-5E818B1D91EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC931BF7-E174-4AB4-B74A-BE7E7ACFB0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8622383C-0ACE-4791-A7E1-975087296423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1595A-487E-4509-9FCB-F1F0936D4FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75692660-3697-467E-B192-31A73C4EC95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A0327C-3B82-49AE-A168-637BD4828E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19F9376-BE29-4F08-B86F-E1634FF750F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DC1732-CED8-4FA6-9A75-000BABBEA5C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6558D91-698F-4783-9218-297D48C3D192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570AF3F9-D3F5-44B1-82A1-3C7966A27BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EA5342-065E-47D1-B56E-0AFAA0F7D411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E345C8-B6D9-4D5D-8E52-4D545DFC57CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xs1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031073F9-47FB-4041-8E37-E7415BD1D98E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xs2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5199DA9-F6C6-4803-8D8D-03708FC62B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFA62CE-440B-49F6-9ECD-2B3957E54F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0354BECD-B9AF-451B-80B5-DBD1EFB49F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2907D213-A8D1-45ED-BE6E-B8C30E29A42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21932884-D10B-4C2D-99C5-ED4DE3DA38E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF5A40E-E911-4545-9655-696C5FA113A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE165073-45D1-41C6-998C-F174F7C5B701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4C56D7-435E-4AE3-BAE8-96A6EAB57488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44A3B72-EFF5-460D-8EE0-13782AAFDB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378FFEBE-3815-4293-943E-86771AB6D63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F588A9-6D9B-4B2D-AA80-91F45D70C23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB99DAF-0BF1-43FE-8263-AF8F5EEA7D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94BFE90-E092-4835-BCAC-F0A5BD981A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425DDADE-877B-4253-BA87-9B2AFFDAA85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78D2BD4-CD3F-40D2-8F0F-FC765A9B1ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770112BB-FFD8-4E60-93E7-2F5ADC78CA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4F2AB1-6B32-48A7-9FBE-52B013844635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE34E6E8-D564-4E1A-A1A9-25FF88CD15D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC91BD9-F7D5-482C-A932-23723C71B9CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF02F06C-6A49-47CD-93D2-D769E311BCB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AC03A9-89D7-4E27-9416-4F70FF1EE152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xw3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35482D60-11C1-4DC2-B978-D9AF90C999F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A3EDE3-03BD-47A2-8CC1-22C41BA8F7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DCA46A-0D4E-4BE4-84C0-C25DB64DAE3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xx2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF8B5AE-A3F7-49A7-AAB6-F9D09C9A7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001D9621-F363-469D-9FD6-D136FE769844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ya1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F0AD5B-4C2D-4C9D-8207-0A67F9AF995A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91192EA-0320-43D1-8D73-FAD57CC18259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E779F9-65B8-4B09-AF27-F4CE8FFC7226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581D9245-944E-4464-924B-6CB1E874FFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE205377-1B09-4498-8538-F2B7DF91E579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBBB1FA-5FA9-4042-AE12-F39307C27F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8108DEF0-102A-452B-9B94-D5AAA3918322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D69E7E3-C599-428C-9743-90396357EFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0DD4EA-66D9-4593-9E2E-D4AA26AFDA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B952F9A-2681-49DF-B6EE-42B28FA21357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4666469-0A0F-4D28-8A1E-39D82ED210CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD8A9BF-F084-447C-B28C-2736E8C3A83D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E6381-8906-4579-8056-DED1A2BEEFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A515A997-5922-4C07-9C68-0D071E811F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32590DF-B8E9-4F3A-BB4F-D971DEAEDB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21837255-F23B-488A-A9FB-ED984020147D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4A2620-D263-44DF-85C2-11833B4DD8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F92965-6498-40EC-8AF7-D31466F973A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB68489-A77A-4C70-B9C1-9F3ABE39E58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9417A9B3-CAD8-4E69-9871-484DED263683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2128B1F8-24B5-4DF3-A78B-FE3F573C40BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D21F8572-2B21-4FA8-8378-872B53BB5AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A75FEC4-A4E8-4F74-85A7-84581683777C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39601936-034D-4F48-9F02-0F0E251E34F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3761893-292D-41E8-9800-C888B235E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFAE401-10D1-43BE-B041-125B9ABAF7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5305A69-6B79-4C91-9147-4D93B101FCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "08024D0C-A2E0-460C-89F6-004A4CB57A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D6C9BF-B536-4B92-860A-587ECFDD90D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EE4026-2A06-4E63-924C-43E663EA47DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8B6B9-3023-4C33-AFB1-C8C4E1504178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "697C9EFC-7B70-438F-A418-AEFA22841655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "786EF823-2151-4BA5-84D2-F037AEC64A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF7FF33-5299-4EBD-9E53-DD2FB1DFF939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF6B0F5-0E61-4ECC-B329-80ABCAED3057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F6275E-146F-4B70-B14C-D857DDA13819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F590204-33CC-4A6A-9C37-380ADC15813A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C2E7B0-1FB9-4003-A59A-696B6354F488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F50FF-2A42-4BE6-84D8-C6C2A5938125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3434D927-F4DB-4525-9A5F-73D0DAD9633B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969DCEF1-A34B-4144-BA04-92BD32A87981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48ACEA8-6E12-40CF-868B-DE343BEBFE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71775098-8BA1-442F-9709-0BCE255DD773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355DB7C-2E2C-4108-BD0F-361B0B898D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "628427D1-0C6F-489F-AC30-AB4D63268AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80E065F-ABB5-4824-9C59-A53690B0CD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4E3DC5-0F83-42DE-9482-92DB413DCDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E06B44-B59B-4FA5-9753-73F853145D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B162A30-1FA1-4955-91DA-F38AAB51AEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FEE13-5E2A-4011-B720-63EFAFF55049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)xl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FB629F-ABDD-4824-882B-DEA8D0444B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E27655-2889-4B2A-9C48-ADD48ED5B365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DB00B1-2172-46A3-A7D4-5A7D181AEB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F58FC83-C321-4A9F-8EE2-1531B73E064C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7D8166-6522-437F-AEDE-2AC02913FC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B805F909-5650-4884-9990-F3776DF203AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C705B7F5-2BE4-45F9-8B5F-9FAC900FF6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5610D63-0E50-4AB3-A6F7-36BCF7F69EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5092A-473E-4356-9EFB-9E3EBFCD5F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF310185-68F5-48BB-8E11-E38E1961B380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41A6D48-40EE-427E-89F5-28782DD8EFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E109B3D5-90BB-45B6-8265-B32465AC85E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C441F423-86ED-49DF-8BFC-3CA988C9177A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01081557-DA36-47E9-8556-5E46B2C50DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4179B03E-2B84-4182-A58E-B58B94299DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yz1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7EB61C-2172-4D4C-A027-0343D8A6DEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F064D3-B2EC-4673-BC3F-28BEC13D0C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F0BFAB-D26C-4D17-B5AB-647780423E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5409B6AF-9DA6-434F-B0ED-FDBB1B1A404A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3B6E-59F6-47B1-BC28-C0B171F1E1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6609D78A-44DB-4CD7-AADB-7D4D33A176B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92561F15-147A-4E50-B2C8-57CCA98B49DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3FBFC2-0628-4A56-A96C-904807E85B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B69920A-6775-4D3B-81A8-F971875C43D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4093FE1B-3B95-4F25-AAF5-329FEBE0F0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9411EF8-54EF-49CB-BA09-3AE1133D3146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AA815E-CD4A-44D5-A772-93CB340E7998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1900200C-B826-45C7-8638-637BEEF8A432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C35DC9C-2A74-477F-821D-37D7E12DCA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6FA0B3-3C96-4F3A-9E7F-E8737BBB9197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF74E32-DC6D-4054-97E8-BCF035E8D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADD00A1-4BC6-417C-8129-9E1732EB9DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AB99B6-84C5-426A-A037-5022FD00E6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32302AE-54E2-423A-A418-6C7EAE2CDF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AC5870-7A4A-407F-B24A-0C9B406A6FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F616AE0-42B4-403B-B610-99DE15EE490D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E46898-8ED6-4AF2-88F3-EC6346A0C311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A83281-667D-4D1A-9F76-CFF3E5AD560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51412CA-2964-4E7D-B749-E7D8BBAEE605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F53F71-BE33-4F6C-8586-21D2A84B0A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E9AABB-A080-4221-BCE1-DFEA614CF147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD17A1E3-4F0C-454A-B08A-08FE39AA95C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FD8309-111A-45BC-819A-99FE9E002ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC8F77F-9280-4437-8EB4-9F46832D1B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D53862C-1D66-4DA3-B4F1-BA2CD5A4EE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683CD69B-7A2C-40F1-8BB5-8DF5643E0944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEFD1E0-0803-406B-849D-8372E898CC65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CEECBC-C6E5-4031-90A6-32B851355374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F379CC-A2B7-4783-93E5-2736A816B497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813F31BC-A544-4A2A-A8D6-8D94BEC9756C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA070F6-36F2-4201-B01A-07BE79EEDA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C8FAE8-E184-424C-BE32-F73E3BAB15C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C7F308-DB1C-4500-81E4-9E3325D58A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9C9A9-9B90-479A-9D2D-8681056892AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9E673E-3E4C-4030-B643-D876B5D5DE5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19661048-2B60-437E-9D56-9189BFC4C8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF870144-DFCD-4ADC-A695-3DF9266890EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBFA607-BF05-4F9D-BF51-E4B1CD529C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7A2861-B4F8-47C6-B541-F6357B774DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961E9F4F-D67D-4CAB-B69B-249DE0F59D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7CB55B-318B-423D-B9A0-E16BB250F958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D389A57A-005E-40B1-8DFC-3347F67F19F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7CEBAF-65BB-4A89-8C3B-CEF1052D99E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B311DEA-F602-49DA-8208-353D2D33283F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14407B6-FEC1-4FD8-8359-CA3EC5477B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD190476-DC7A-4033-9149-062D75704AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B752740A-68C3-46D6-B368-3C3C70D8ED6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4510B95-F9F7-4407-B00F-F91B352C99C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E236CDE4-3369-4CDF-B0F0-4888610CCFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(16a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C89250E-DC08-48ED-A89F-80AAF314232F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "844943F3-3506-4405-8D5C-800E91069498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7A61FB-E14D-454D-8C11-618BA7365A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E4521D-43CD-4A52-A9E8-C8096102CBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17a\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5CD5C1-D282-4258-90BA-E745313F2D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17a\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318902-557E-43F8-9D4B-A555D9A7A260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0508B734-4CF2-4A17-8AFE-5044D9A922E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2770C4D8-EEC8-4542-85CC-3F0D73FBEAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F078EB67-EFD0-480C-90F7-75100C3AAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458E9F48-CB2C-450B-9B5E-0B2511085A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1555FD-3FD4-48B6-A374-0D7CC765E464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D202CC8-78B6-44BC-BC5D-9B895AAA15A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3137F8B-3061-4F85-A790-A3E5809DBDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17b\\)bc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8090C0B-A459-4FDF-B474-76E975C89A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(17c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F68479-C4A7-45DA-ABA9-ED496D201B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(18\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AFB4C3-795C-403C-B8D6-7D016262448F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(18a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F5FBF1-4700-4FC6-96CE-6EF711D6C6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E52F74-3CF5-4077-8825-E45F2544028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(19a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52D9BBD-9E50-49CC-AD82-C8EDC96238B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF0EB33-8652-44B9-8CDE-83B988D1AC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(20a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "319815C4-0BCB-445D-B57D-2D77EE9FD68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AF7CDC-1D05-436B-9505-BC106B7DBC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1A3099-DC1A-42BD-AE79-2C289E4143F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64FEBD23-6206-4CC8-AD13-E7AEC785239F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D672CF-E5F2-47EB-9B55-88BB7408A858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2253FBB-CE83-44E1-A1E1-E83F20029996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CCDE27-155F-4F92-8CDF-0C7A276A9D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE173C61-1ED8-415E-86FF-259B8223FEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED7FDB0-0F2E-4D33-A149-76FBF2D26B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C657F332-E5D0-4B49-9724-7992BE8C8D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2829BC84-E1ED-4636-B1D6-28FD7A0FA639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21a\\)bc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB0969A-8D9B-425A-B84C-4E31E2546B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(21b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B33A53-8739-42DB-B999-E499FCE22986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(22\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5861E5E6-BD1B-495B-B9C5-BC1552E2909C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(22a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB783CF-98D8-4C8A-A4F4-50D0827190CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECAA21E-0A0F-4E7D-AA7E-AD1F8D64D544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4A8876-E472-47CF-9B71-EDB9C2199F8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8659495-7542-4D89-B73C-07C07E7DC878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7735A5-04E5-40B1-AD93-44E061F88DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42AA2CE-54A1-491C-B4EF-45F74896ECA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523C4FF5-E67F-46E2-A7DD-61ED80121CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B84EAA0-629B-43D0-8719-16DFE8FF76A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD08F9FA-A954-414B-9115-30FD1B299747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1DFDB6-735D-48D1-8FB2-03B7EC136DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C4FAB8-146F-46AA-A62A-3B295E6C0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D886591D-468D-4210-974E-B40BF6DF16DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(23\\)bc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FDDF44-DECC-4867-9135-A13541DC1D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(24\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "070D954E-AAD2-4937-B6E4-2413D75FD679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(24a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D659C32-6FE7-46E5-A505-3676F6C8C8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(25\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0CC534-4502-4575-A399-1F82764F6446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(26\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "947D3808-A367-4060-9A78-82ED9CA32DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B65738-134F-4C1A-916B-D6CD6365CB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4D2643-3910-446C-9145-ACF104533A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5331586-8380-4F77-8735-17EC0D0E503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35536E91-A58D-40F7-A256-34128E64B920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69329B-4D37-428E-B467-E3B9314A4D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B275-5748-46CC-8A77-4A9550A39050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421CD923-6282-4404-A642-C04E1F57F12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4411CB-5EE9-455C-AE90-1770320EFD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593D1680-4883-43FE-A925-B87ED1D2E785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C05A14-198A-4019-AA54-C7943AF3A2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B96FDE-4D91-40A8-BDE5-6CCF6F115BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FDA68E-2A40-4D56-842F-A748A7B4E4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F82960B-1DDA-4226-BB16-DC193A418E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D74C08-866D-45E7-AB71-5BC4941B1405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90769378-BBD1-48D0-921C-A79413B99CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F07E20-9636-41B5-9F98-1EE6FA1CF955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8FB3D-8AC1-41C5-B4B0-52669380A9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D00960-9AB1-45FD-B8F0-405894B2DA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97957D83-E380-4F87-921C-C6E370182547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3672E518-C54C-466C-9847-DDD7A08147FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D779117D-1CBD-44AE-A5DF-1016600896B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F33A6A-6581-47C6-B5E4-0274850B628C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028D6231-676C-4F98-A42C-51DB4808B5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C77A6EE-A85D-4B8A-8123-93B8B106E7C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A42CF31-5644-44AC-B087-CC30056A484F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6DF704-8CC8-42C3-83F1-4D38734DEAEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D6801-E9A8-416B-830B-7682A9AF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0CB586-7EDF-4682-92E3-6F1D24F76687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "23265E4D-855C-4CCC-A875-DFCBA55B3CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A35F5F-23D0-4663-8D7F-9EA330F8BA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAA9122-8663-44DE-B28F-A9171BE85693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78D9D91-B4D2-4903-B64F-6811D11E10EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC1D6C2-EF6B-444B-B6C7-E1E60016884E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1E8EF7-37FD-44EA-837B-3E63FDF04F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA02886-7227-4B13-9193-1D73560D0677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB86291-EB40-4CFD-A424-898EFB3D518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9746C786-0C23-47BE-B96A-4685E4FC70EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10AADAC-4687-4308-8E4F-B7F9549556DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA3891E-91A2-4A7B-93AA-503ACA036076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A747987-5218-4C1E-87C4-0675CD4F7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8A4893-EF3F-4662-806D-54FD5614652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D01F64-F9FA-4765-B4C5-E793ECC5E7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5171FB-1887-42B2-BC74-4468F861FDA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "619027AE-5B1D-48EB-AA6E-B9CC9440CAD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B20F25-86D2-428A-8D43-F00394A834E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF09F7EC-1423-47F4-B96D-DF3279965606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC270C4-6097-4380-9086-914444648D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B5F4A7-7507-46FF-AD28-BEF2405C052C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD9FCCC-FD04-48EA-B502-5D454CB1C925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8173A1E-EDC6-4B32-B37A-8F7F449B2842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665CA058-DB5F-4562-AE2B-CE9BF3278A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB96F70-178E-4930-BAB2-EE55B756FD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C441D259-314E-4A38-8504-596544E63ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C689450-7C7D-4A66-AD17-FC78F676F95B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C0091A-4330-469E-8DB2-F5E816D74923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC707E7-2A61-46EA-B2A5-870E35BC8218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B84B05F-86DE-4C96-B7EE-287CB7CDC5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ECD0FE-AE9F-4C49-B132-16A5C96C2376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997F2502-D8E7-4D79-A896-7A7533CB255C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A07C385-B49E-4824-B828-1387D92464B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C7E9F-7AB4-4B38-ADB7-6A6796429570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B5C692-524F-407E-B478-8FCDB36F7C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD709AA-1C7D-484A-B6D1-B028DD87B1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7760C6-CADC-4EDE-8CDC-1F0001F1F2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)xd12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F106B28-2061-4749-805B-1EC63C698405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6483CB-7838-45F7-AE28-824AD71172A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A290A3E-3C35-4660-84CE-B3A8D4EFB640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04759B1E-8B40-460F-B33F-4E6332CFC31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5336B-6E7A-46D4-96A7-F4835C3E4DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FBA109-F786-46CD-887F-56D5667C08EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5618399-E568-4100-A6BC-A13521FD0FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF3694-9686-444B-8D92-E41D262F74E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5595E7D-3CFD-4FF2-A6BE-59645058C54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE3A43-A5C4-44A1-89D6-DED8FDFAA5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "222F1735-48DB-496F-B385-BA6620A731E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0C85DA-CBBC-4B9D-A8E9-15CA28AA376A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05228BD2-4049-4C5C-AC35-1D5554BA5EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DBDA90-B774-497A-9B1E-D89642DDF563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD949FB-F573-4D47-AC0E-B6014C9A99D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3088426-1A8B-4C7F-BF7F-52D0373206AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0E6B73-4BAD-4DF4-BCBB-3ECA92BFAEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3361451-BBC4-43A4-9B4F-188E7955E26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6DA92B-9AF2-4B35-B326-CF7F6E357D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0473386A-1392-4B51-9BFF-B5CF4854FF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xe1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B10A20-15E6-4854-A91B-160D6F716F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xe2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B6ED86-0ED1-48A7-8C4E-026F1F9B6AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6383426E-0D90-4F15-9AE3-733D6AE47D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354CE9ED-23DD-412B-A1B0-A99A047E0773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C95088-E0E0-4C87-A2A2-A81913DFFC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C02021-AEAB-42AC-AB91-BD70A204F60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)xt2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3260B3-8C2D-488A-913F-5B295B321D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4235428-5E2E-4BCB-98B7-8844B19C7AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1E17AB-F645-4636-9337-3158556E85A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FE45DD-879A-4211-9EFB-67DF565F6747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3066C3D6-E6AD-4252-B3F7-D18547E7D02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB24DBA-16CA-4463-AF7B-B853C5555E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C39ABE-FB22-42F5-934B-9FFACF8802A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DDB74B-1ECC-4D8E-9B0B-9DF68310D5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2AE775-4D43-4E80-8C8E-C73EC09AA604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB21C59E-36DA-4AAF-90F2-21646016C036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86150D11-94D7-43F9-9D19-33778558255F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A21CA7E-F0F7-445B-8292-A02239B2421E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B843B7C-7FD9-4CE7-BD1F-3657100C69F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD18C4FC-F378-4ABD-B7AC-AB9DE2AD32CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "744D9085-707A-41E3-ACFC-01B7986A42D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3744631-1B9A-4294-9490-992003DA6A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC43701-8A3A-42FB-B4F5-566DE59E542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348D28D7-05A9-4574-B6CF-76CC3A5B1209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F5C0C1-37D3-4A77-8DC6-B2995127D7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9771992F-73B8-40E5-B0E1-6FC091A7229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2FDA7E-51BC-4479-A750-CD9CEF35C3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B380AF8F-F205-42F4-B8D3-6DB4489A376C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CA3779-7F57-4E84-BD07-73294F5907BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B971DE56-D763-4E48-841E-352BC292F70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2057639-BA27-4262-BD2E-AE00280F7495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)xg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69627800-9244-4A1B-8E1B-FD684391D662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)xg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F1FE1-9D2C-46F3-927E-0FA9C35AC279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)xg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A04D7A2-8400-4A1B-8DC7-E2704472C507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)xg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B6F3D1-5B4F-4D2F-8481-41DEDB905B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)xg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A9ED22-9A6B-4B93-B930-CA56ADE5F1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16045C57-C1B3-419E-828A-9EA60D360714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(10b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E8C6F4-251A-4E94-BA8C-750E641C7B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(10c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69070802-50A5-42F2-9351-B938670BE75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484084D8-8EFE-447D-8A6E-93124AFE3C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9EC51-97EA-473F-B563-175EAA082245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)sw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99E5C6E-1683-4A6B-A784-DA570BC3D3A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)sw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141DA93D-2316-4AB3-92BF-0727A1723F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)sw3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FD0FA5-ACCD-4B89-89F0-FDEA0D44838C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268C9F59-2D01-4D4D-A366-2813E85ACA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC89897-FC5B-4E9A-A112-31FB891DE9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDB484E-4DE0-4BC3-AD8E-FEB4D3D0D891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18713D1-30A8-4232-8586-2F8147C3051A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD87A7A9-BF7E-4238-812D-B2360262ECA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B0EFD9-261E-4F64-8670-024F04194E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xj2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E0B801-5171-4746-864A-CA02A61D79A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xj3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF53903-C369-4E6D-BCA5-35CC39B7E2A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xj4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEF7BEC-268F-4FA2-B800-11938460DEAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFBFB2E-0046-4DB7-BC56-8F3591878D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CADBA99-B716-46B2-AF2C-93B0D98EAC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85280CFE-E0B5-4AFD-AEE4-A6B7D40EE4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1B010F-4A8E-4FFE-8850-D32A574D493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D801EAB-6073-4466-9634-9E1F7EC0360B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E0673A-00C7-41A7-8BBD-E116AED292AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F396605E-EFC6-4B16-B172-8FE130DF0727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70751EBC-3064-4DC3-8C81-44129F2E7EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFAFD55-E9BE-4489-8974-61FE53953EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D24BED-CCF5-4EE8-955A-7B3C99BA284E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE92DE3-788D-4760-B77F-1CF7970F6E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23AF70D-15A6-46FF-ADED-5866635B0BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(11\\)xw10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0E1D6A-ED2F-47A4-8987-ADE95DE5FAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4DC262-689C-4BC5-A7C7-3994944CA7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17E2E9D-2A8B-4015-9560-294154B5262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAB1F0E-A3BB-4CBA-949A-A1892543EF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12\\)mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8057C516-221E-47CF-B3DB-E306DA1F7EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E1A20A-A4CB-43E4-A303-6A36A43B059F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FD0C5F-3B83-4EE1-8C9F-993B4E268FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(12c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F4AD35-3FA4-4E69-BC75-896B3A6F1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B024C3-360E-475A-803A-FE5B9EC93875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9599D5A7-716F-4D96-9D25-377A0F827296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA0482A-A290-40AD-8567-15DEF6814D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF540C4-6993-4056-8206-5E1311DB73E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41EAA80-F09E-4C42-8EE9-95054A7C266E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE8092F-DC1F-46ED-B0A7-1AB5BF613494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(13f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47F8317-7249-465C-9FB3-DC869FED07B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(14\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9ED75F-D87B-48D3-B969-32753171BED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B452DF1-3286-4021-8923-61EDD37F11AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65301C51-1962-4941-9B78-8B65A247E184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4635B39E-572A-4236-9E4C-2BADA7F74018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3D7003-6534-4837-8881-BAF0EE72DEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F446C7-D68F-4D7E-8B9A-02D3EEC37268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6810B80C-F888-4D5B-AFDA-D4E9FA39FADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA7F869-F5AD-45A8-80EA-66FF5CC0B261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56418082-134A-464F-94CA-7F4AF1DF020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BCBA92-EF6E-4E86-B4ED-36F4E6E227FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D45C486-D6D5-42F3-8552-A03BD3103CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)sw9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C74357B-CCD5-4B62-81A9-3C65E799BEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AD5F4-096F-468D-B0F2-EE9A525172D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCB890E-FC28-42C2-BF76-C40ACD1E2AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4870897A-5854-4DEA-A315-F019B6214C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7F1F2-2B75-47C9-B523-542A32473167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780FCF98-F214-40C6-A519-22BC55D966FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51677EB5-858D-4231-A935-098849F5F4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F080DEF9-8ACE-4018-AEAB-5F372528A97C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7E7758-4751-4DB5-8DE5-F4398B36E27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D631C739-53AC-4379-8F41-031B0E3FAE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91C73BE-7D8E-4709-AC45-7A6F9FF2A544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26AA329-2100-4E93-ACEA-041570C89EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3FFCBBA-4B20-4117-A19F-A67160E8C2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9340D70D-05A9-4472-B118-66C9FA1D28EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695F94E2-3C21-480D-BC75-AA1F48C8B688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5DA2E6-7A42-4A2A-B75F-B5BC09F6B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB6D523-39BF-495F-8334-3B3CB0CC5A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50412C8E-69C3-4FE6-A6CD-F8ACEE7C3E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)t17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665B295C-D387-4156-A6B4-FEF772A2F0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136B8472-BBB5-4069-83EA-A73EE4ACFBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0F0F0A-D8E1-4FA6-9E22-553165138DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5E014-A364-4932-B71A-999E3D3DCD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DEB856-97EF-452D-B29F-BBC6358AA728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C3A657-59F7-4B92-B616-73D644484D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81B3312-E84E-4977-9613-91AF51A4BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9834E2C-77BC-42CF-BF7B-DFC7EE29D175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B603CB-AC73-4953-B96D-5CD01697D3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xm1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08409BAF-1BEE-479D-8624-85B82F674FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xm2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C0E1A0-3D52-42EB-BE82-D3592278F5A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xm3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6E9842-6266-4D3D-B9A9-11291415FB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E333F99A-D8E6-4BF1-AF87-3015FD51BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7371E5E-384E-4C2C-AC9F-58A6164E255E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79206723-3B63-46DE-B26E-A61349EC984F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63CCDDF-6752-4D78-8F4B-814FBEE2164E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0E9DA0-F28E-4D63-A4CE-C5B9B0A949CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DCFC3C3-707F-4D26-B48A-ACD9DE8AE824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F03701C-FAE5-4C99-BFD8-3E3695BDF242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2711EA03-BBE6-41D5-BE8C-5C7CF654D242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BF32BE-999C-425E-BD39-DF0ED5A0AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95EFAB5-708A-4079-A143-AD9CFCA60A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E9A5FA-403D-4C48-9E45-65999E223996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xq8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292D16E-79F4-4531-9DD7-2D058532EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A53F32-0AF9-4B56-B813-DF9D690B2E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4C5382-C442-4550-8023-B24E8FAD3CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7A0A96-7EC2-49FC-B879-2ECC8C7747CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7125EC11-EEF4-4CAD-BEB5-B50922F63A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C607F-437A-47AD-99E8-38ED39447187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC60C640-B605-4C38-8A32-72ED0FF342B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F42A68-AFBA-49A4-BF68-3DDCA4CB7BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062B7563-1F3C-4D36-8748-C9D6F72828C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED82594-AF77-4C18-BF26-514E15B5CA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3C92D5-A04F-4139-8677-D4DCF6196318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xr10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DC23FE-CE09-4FBB-9D1B-8F2FC9C60BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC76C99-6E72-4477-B4E8-03E20E92F26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22F1413-D0EF-4B67-A126-53E45574B2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9757D26E-778B-48AA-8106-B0225E71769A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FEEF78-D3E8-4A6C-94A1-92F6DE3CA8E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37048276-B0A0-4580-9ACC-727C2BC4CCEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAED2F0-363C-419F-AD83-AEA0191315EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0B1ED8-4480-4874-AD43-C8FB643075ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xz1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1398C51-F809-49C4-9428-B3F318DB9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(15\\)xz2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B424C30B-6486-4E04-8F59-1C73D18AED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "216BDC89-7A4B-4A1A-9DB0-2656C835B2A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(16\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566048A2-C276-4972-B779-B13327D91259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(16\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A14FDD-A03E-460D-928E-439AED000307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(16\\)mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83285DE-83E2-4BC6-84F8-45CB36C49745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(16a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AB5580-D78B-4664-B102-8FE6D960A2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(16b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E84E9D2-17B7-4909-82C8-77EB23D083E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(17\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BE9EA7-14CA-4461-99D7-5A8C7F8E27DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(17a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EBE632-B1B2-44C4-9507-72E11EAE5BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(17b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA94EBA-B902-4DD3-9995-4ED283066AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(18\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5145993E-489F-468B-93F2-92F2507E0DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(18a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6D7E51-4C9C-4425-B0D4-88C82BCA20C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(18b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D615E581-C23D-424B-A428-BECDFB131279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(18c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AEB18DD-A332-4C0E-8568-29CE4CE9C9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(18e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD23A960-6B08-4FB5-82B1-2384E8335405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "815FFDC7-9AE7-492B-A114-FE18899ED1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(19\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B5AD72-10AD-49F0-9CCF-4EE4E8387E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(19\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CC797B-1A1E-4D82-9EE0-0CE25D9CF794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(19\\)mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5644F789-C5B0-49F3-8FDA-AC1938C745AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(19\\)mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92787059-8948-4EB3-A0C5-D0B1A6CDCAA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256FEF5A-AAC5-4306-91E0-1B19F8E9F38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6B7A7B-5D5A-4881-A79A-162F3ED105B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)mrb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C065ED38-B787-4BB2-ACDA-18FC9C9CA19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)mrb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D770DEF-33F6-49F6-8718-9CA3B919D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E49719E-C5DF-44EF-943F-547A153200D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFE34C-185A-487C-BCA9-E32132A21B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F26604B-D512-4C59-95E0-17A12D6D6472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5644FA52-8412-4CC9-8C92-462D68873F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2E19A5-5B74-4091-98F7-2D531ED466CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55788D15-2CCB-43C1-B4C8-8C7F806ACFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFD6CB9-939B-426E-B6CC-CF72578EEFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66A78A6-6427-4A08-8B4A-7E4679598C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)ya1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7652A6-E5F0-4221-BE9D-77375AD069EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)ya2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEFFF54-301F-4946-8862-9F163408216F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(20\\)ya3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D62A0DB-C844-44FC-9AC7-94415AB03329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98FA73D-3FD0-4FF0-BEAB-A56A8F564D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(21a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "984EEC74-FBAD-4C0D-B18C-A1691CB70F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B8AA0A-AD37-4E22-AB75-78CF4B00E9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD17B45-17BC-43BD-A180-AACEE0888D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039F72C1-FCA3-4403-90A0-C4B507D9A85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B83D2BE-762D-4D74-B9C4-BF765DCF31B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874F3BFC-CC93-42C6-A168-ED554AB1713C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479287A-64FD-40A3-8C92-2C52FD902F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C3D5843-A77C-42AB-9A3F-F8F18E2854C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A422DC5-DBED-447C-8E1F-BE75B70EF677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7837CF7-9CAD-4650-901F-587E3F2F5694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905571F1-D7E7-4266-9DEB-AD45C4EFDA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DD52B2-811C-4599-8DAF-B990BF6F4135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7F96A8-8F7B-417F-93E0-9780E9199A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6354ECE9-4B45-4998-BEA9-4F1740FD3759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFD59CA-9FB4-4C63-B776-719DCDAC5B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E49AF-FEF7-4749-A648-AB2D3F784F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6F41A-6C48-415D-8CD2-C73421693158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F136F045-6B90-4E37-9CDF-D84050DD175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCCCF8A-ADDE-4E67-B9A1-DEBE6C5E4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)xr12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B3E0D4-B335-4597-A482-F60A2C7BF90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117F0E70-5093-4AAB-8C71-14BEEABEE1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F33189-5511-46D9-9809-185AF9644B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD42A62-01A9-476A-A299-8AFAE0AC9A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7537592F-8B12-42AB-A7F5-4445EE95E95E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C79F62-364E-4791-B647-02B3C34507C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1187C5F-E428-45AE-9D94-5F9BDF61DB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D580F7-7A90-4152-A029-5DF95149DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F3EACB-A730-489C-800F-D31F95A99979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8DC03-C2F3-4224-8904-46F7A904BED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB046218-6A6A-4B15-9376-D26079495494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FFF02F-94E6-492D-9C61-52C0AC94C36A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8643DD86-CA72-499F-B3B2-2317F242A072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7470707-E9B9-4D2D-AF2D-8E86B223912C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)yd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA3EB7D-E49C-47E6-A319-A14E981D5FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465B2F7F-6DA6-4E1D-9255-655F7B04A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEDB356-5ADC-4596-96FD-B66F59FB76E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7AB041-AAD0-43E4-A32C-DE34209EC9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C38513-4723-40A2-85B9-89C127A57044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95B11BD-16AD-4291-8A0F-CB7D24EA43E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DE3B3C-68E7-4F6C-B28F-DC2CBD073C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(22\\)ye6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA211F5-9124-4B94-BAD6-62F7256364F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "359A43AF-C87D-46BF-8389-921DADA7180F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A358CFA-C4D8-47DB-AF35-B250401E7045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BB831C-7AD2-49D8-984E-B860F951841C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAE1637-C89E-4CC4-9358-5D47BDBD8E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)gc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2549AD3A-FDBA-4EAE-92A1-06913A5914BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)gc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5528533C-7248-4BF3-952B-C58D0DD7CEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)gc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19106ACC-FA7B-4B97-918F-5D14F2A710C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E44F5F4-D7FE-4B9C-BA65-2365EF7A8092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9548BCBF-0E01-41F8-A6BA-D70032340C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BF1BB8-EAB1-46C9-BD36-73E502619C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F23388-1B0B-4708-85F4-5A8B7359C1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6728EA8-00AC-4BE1-AA48-22D8AA861532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10090F0A-645B-451E-ABAA-57DCA9C081E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)md7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BBFE8-2D55-4CDF-B624-6B509411945B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD74F179-FDAB-465D-80D5-65711B34D12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94615285-655F-436B-A967-D8FFCF4B7794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491BFBBE-1B48-4F58-96BA-E0B065DF2BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F2AFD4-D5D6-4D4F-9085-6869738B56B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D794DE0F-12BF-421E-8E5A-A505501EA0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF65A6E8-8D58-4537-8AE6-DE4A72FF3A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9622A8CF-0C0A-4CED-B469-CAA868970323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9746F30-F1AD-4643-8BAD-6FD049B7536F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C533F5D8-9C23-4D7E-8C58-56B65AD76AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB531CBC-8EE0-46B0-88C5-2362837729E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4485F3-AF11-4E2D-AF01-8243D9C8A851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4433412-E849-4040-BAA5-1CE9CE17B924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9B1DF0-A3D9-4AFD-9305-C156A8CB101C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1591B1A2-15AB-4226-B0E3-AEA84D0A7928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D85C68-9A72-4C6F-89C4-CAACFAE7C76A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CA4EEA-9AE8-4F5A-9FDF-A6CFA503ADF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0532182F-A3BB-42EF-A2E5-B3B1C092335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD686C04-03E3-409B-B92A-D9177924340F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A7C36F-FC21-4BEA-920F-9F3F9CA76C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74487E59-3809-4054-89CA-ED7900A793A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B174D7-FE10-4416-9572-CE00FF580A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE654FD0-AC27-49B7-91FD-8F15FE78E97B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB46CA20-CDCA-495E-A4DB-5BDB9AC5BC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C02086-1473-403B-97AF-8500104E6C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2ED2BA-9D3E-412B-86C2-2A0E9588E84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC9CBDA-AFED-45E7-91CC-8AFD887122D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA93FA2-0C10-4809-8EE3-3445DC5B1E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED0CFC4-95B0-420B-B6C2-EB953B93628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E24E081-FF09-4569-B83C-C46F390CD6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FB8B6D-69F6-4619-8F76-0EB92C785F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF02D7D8-124C-4CE8-BF32-D6C7851B3B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D741B6-6599-4209-9D6C-06570FBF4B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)mdb19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97E52D-1053-4704-B404-B85B99F46CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9C9B9C-2064-4130-95B9-5BCE4BB97789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6AD6E5-EBB0-44D8-A63C-EFF7260E4CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B1B14-6FCA-423D-B49B-D07624DAE4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88A1ADC-A53A-407F-80F7-A0EF5359DDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775CF994-36BE-4456-99CD-1FDEA5CC9B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t3f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766668CA-B5BF-4D80-811E-B2E6396AC6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7937F33C-95A5-4D38-B574-1B04051DC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF7258F-C4A4-4E56-88B0-CF1536AEE9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605EC471-A558-4414-B691-1E852EA7EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53830355-05F7-4A49-A0D9-731F43870F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5ED4DEB-4DCF-4660-8D4C-059537A5B144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8294E41A-AE2A-4EEA-A932-45CFB294A48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC9B0EA-FDF6-49D0-8118-4F336750E473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t4l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB4F895-D790-4A23-ADDF-5EFCA9B86208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E00079-3EB8-4FE5-A977-CF78673D7AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36204F5-1257-4A08-8764-8700C4545FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F288BF4-A550-4807-9C02-F6A93B8D1AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1A64DF-83BF-41CA-839F-72C7E8A9A7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5310D04F-32BF-4FC8-90BE-8671AB0D6AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C30FF2-BD09-4553-9CB3-82B2FC3871B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EF862A-49AF-47C5-8279-E3AEDDB29B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7B6BAF-B292-448B-A99C-0823B936378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33FA995-4BBF-43B5-BBD5-E03A9FD8897F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377CF6E6-B5F7-4EA0-911C-9AF068D5F8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30660E5B-786F-4430-B6C1-ECFECB393407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C2423-DF2F-4C8C-85A4-1B5536091FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF2DD56-4113-4A5A-8A0B-CB4BA3AEF79F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F800C8-4842-4C61-ACEE-E544A7CFA0FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28EF8CD-4117-409D-A2FE-48077BD97E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1EB28A-F5C9-40C2-8C2D-6A6773232A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)ye7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EE8921-8972-4D0F-8E53-14F8B391A2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)yg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98963D57-18BE-49D2-A3FF-35E86F3AEF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)yg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1ED725-DEFC-41CC-AF37-753F506B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)yg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD57A0-D85C-4110-B810-4B866475B9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)yg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6789D8-C2EC-4631-9B72-B645A5C04985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AED810-8545-4D35-B353-33F9654ECE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8AE02F-BB02-4486-BB28-B54BE5ADC714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB8FAD0-98D6-4005-8E50-2BDE02C98E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16200BA2-8998-4913-B0DA-F2A7FF1CEBF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5178E5-5163-4610-9E56-0BD624FEA365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D702D460-AAA5-423A-B796-25885F1A3610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE41534-21AD-45BB-9E32-3AA1E99E9BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3855D67C-8752-4CA7-B1D6-69C869D7A1D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189B0C7C-D794-43EB-A6C6-F29C4B9623A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97701A6-F7AE-4D14-A5C1-8F7743256766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB788EFF-FB9E-41BC-B8FD-8EE40F657B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A801C7F1-7E15-4B40-A2F0-DD181F13DB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A735690-4813-486E-929A-2F97F51FDEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BB6662-6683-4EA7-B2E2-984FB68977AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8720B1-11DF-47E6-90C3-F0D3F77E69D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FA81AE-B37E-4F38-ABAD-44EF200FA5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3083C5E7-A17A-4744-A700-697FF50B5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E760F98-3A9B-48BE-83AD-22672B15C619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049F7107-B407-4F99-8688-738AF3AF4CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EC3675-6213-4AA2-9C91-73A89AD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82608B6F-BB73-4A62-881C-636BF1BF1CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B9B664-5B90-4F3A-BD6C-33F0AAC75CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54966D6A-5471-4685-9FCC-C3F75297F2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AEE27B-B0A8-486C-8E12-D789047401B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61A54FC-77F0-4BAB-8AE5-3E8D60EC14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F73E68-CCD1-424E-91BC-5D30241EE797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E286E50-601F-4285-ABE0-B829FF9DF0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412B45A9-AC1C-4142-81FA-8E60FA189726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40AF3A-596C-469E-968C-9747042A70A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971AAF00-63AA-4B3F-8E0F-B8FBD011C071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A0087-5926-46AF-B1DA-3AA18FAB87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A2402-F662-4900-8137-B14EB2537173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5757C194-AF18-434C-9F19-2FC775720556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3048FEB4-3269-4EE1-88B5-0AA3E681402B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5B2E97-12F4-4B3B-90C6-106667787472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BFDF59-CDED-4A52-9E24-673E86B00C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331D55CC-055A-47E9-9019-B6AEAE0F8576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE53F4B-83D6-4E40-8117-D1983E798CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21941E6C-4DE9-45EA-8B14-CCEF208C458F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8D765-D1F3-43E9-BCBA-DBC4FA7BAB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C06387D-C32E-4C3A-9A02-C0748DB88D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D754113E-26FE-4E2E-AFF0-680866C32CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0489630E-150D-4C80-8E93-045B89A83631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39832F23-3841-44CA-B1C0-321CA9B59627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD804E72-BAB3-4471-9EB2-11D607895357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5350BD36-86A8-4C33-B638-EF287DA8622F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xa1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E145F9B7-ECAF-432F-B6FB-7CB5EA97B17C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC60D5E-0005-4FF6-B55E-FE344C9BC58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xa3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984EC0F5-F270-470C-A959-919B0B7A7B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57726EE6-38B3-4F1F-8DFF-0891C85395A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xa5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017CDE22-7CC3-4EB6-9131-ABBD5F3FC0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28722F17-AF23-4435-AF9B-996798ACF2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587450DF-77E4-4320-9191-383EBE5A6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD560277-FD93-413C-B1ED-9B7DA6658753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ed1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D3C419-D1FF-45E8-A5B1-AFFC59567478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)eh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59065FF7-E644-4927-9A3D-21431A5D91D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E5F13-3F15-418B-A0AF-038BEABF8445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ek1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694AA98F-2705-477E-B2EE-75D2CEDB263B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AC1EA3-AD9C-4AE1-91B6-4EBD22B77D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CA27BF-13BC-4C13-A049-FA50247ACE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C8B101-CB42-43CF-98CE-44EE5FBC9BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054583DC-AAF8-4BF0-AC13-5A488476C161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA091446-13F4-4D87-9E0C-2C3847056C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A9B13E-8CF7-4879-8C33-8E690291335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343F5C35-A0C0-4747-95BA-D4044C64508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713C55A8-F24D-45FE-88AA-1D1EFEC88339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815EAC82-48B1-47A2-80D7-8CEE806E4B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68B4687-CC90-45D8-989D-8DF38940C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F755B9BE-3DF6-49AE-847E-F74B696A49A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF429A0-4A54-48FA-B69B-D34898E987EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A867AA1-E46F-4027-A41B-6AE1A27EB2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF4082D-8F3E-4274-83DD-431E99C395B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230ACE85-877C-45D7-A2A9-0085C421292A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37BA5F4-9D5C-4D92-A6D3-055B79049719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED6E6E2-AB47-442C-93B9-DEBA9D124B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CC7F08-343B-40CC-9D03-81EE4924D6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sg11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31444A2D-BBF0-4D6A-A898-5EC4E782CC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D39E1ED-2F67-4116-9BF5-44CA8EF9A016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729613AF-4C56-4514-9ECD-6A466C278E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368F2F9E-FD52-4A74-8378-DF246252B745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E452976-8876-40D7-8880-29197DB5457A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5CC49C-34B5-4C8A-8FFC-DACB4B0C76FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D93F335-8058-45BA-8653-9F3E4A5FA28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6FDABA-6F35-4FAA-9ADF-04E4CD1DCF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E2A502E-2855-4876-89D5-F5CA4AA3DF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371D61F2-A11B-408F-A80D-45431DDCE5D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40ED05B-4E73-4517-8972-75972F28C476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173A1E9E-30A4-4A72-8955-A8227708C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEE53F5-55F2-4E89-82C1-8BF4ED36EC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EADDB-435F-4965-8064-E3D102139053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D255E7E-037D-4926-8791-55B962AAA1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F79E255-6198-4251-92C8-90A797F65DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A89C06-8384-4B23-8D3A-293C9035FC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B7F513-E991-47A4-A96B-2EB90B15D197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD483E0-66F9-4DD1-85FA-C125C9617E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C1075B-11F3-453C-957D-834C5D6D8CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115E901C-94B4-4EC7-AA85-03A20CFA90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14181F4B-9A5C-40B4-BD15-FED694E9AE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E402E-5D8B-4261-906C-C5668B4A12BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85017D3F-5CEF-48BA-847E-7DCB39AC7636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4DD419-4BA3-4E3F-935C-2A6C9C71BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277D20C6-DAD1-455F-91E8-E5E091C1E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B33D730-0E80-46AF-8B53-FCEFF457EBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D383F-F5A1-4BF6-9334-356E3CEEE897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE0230-D1A0-4A9E-A0A3-037C7977D450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7ACB559-F6D1-49B9-A76F-7DCAC88F802B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CC749F-28E1-474F-9E60-D2793805F767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)ey1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C147B53-2332-4354-B97E-644BD9207C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4630A3-E56A-4403-8832-6A3445FA4057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)ey2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC841984-1764-40A1-BAB0-6710F147216D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)ey3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA49A0D0-1DE9-412A-A203-32E70467F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)ey4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDF8EF-93D4-4F65-B8F3-A64FC591D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF70487-4E51-4570-927B-1B74D73E9D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242A4DC2-C9C7-4ACB-99F0-317959B0CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF5C-1B91-4B54-BAB4-2DF17A1BBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241590D8-0230-4504-BD8D-815C8BC1F0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF1AB59-AC63-49AC-9A5B-8D8987A9E3F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB7A4D4-ADF6-4845-8B5E-A432BF52F0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sng:*:*:*:*:*:*:*",
            "matchCriteriaId" : "861A1E09-4531-4AA1-92F0-B14B83171BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)snh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362DDF36-FDDC-4A98-B07F-08CC0A6F21FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sni:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00301A-3ED7-48F1-AC9D-1471C8CAE076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sni1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE82FCE4-3613-4595-8745-C3F985776AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCF559-9324-4CE1-A986-EF4A174DCEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE56D89-5894-49E9-BDCF-E23AE4159989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D14775C-95F5-4507-9837-CA818489CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9895119-8DE1-4D27-A5B6-5FFA46A9B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CDBE37-FFAF-4EB1-834B-6972D16FA222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC3E04D-52F8-4C36-9B6C-086FD3BFFD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FE3400-AF89-4A5F-AFF5-3521B1CC1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014EEE0B-4158-49F1-B2B1-692FF481991F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3D239A-CB65-46BA-8048-73439B8DA3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A3D04B-CA03-4CAF-8AE6-44B89DDAA104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411E4426-C053-48C6-B468-84204DDE67AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)mra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A476A597-31B0-4793-A7DA-174F453691D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)mra1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48DC394-BBFC-441B-A50C-126AAC0698CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)mra2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944D5FAB-0DE1-4B77-906F-BBD661C316F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744D47A-1D42-4A98-8120-F1DFC5FD60C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80003271-E86E-48B3-9D06-1484414116C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B70AC2-A5D6-48C2-AA0E-6B2C9B526264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABF43C0-7BAC-4EF6-9772-B5E59656C758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE3AD11-6E9B-43B2-96E0-14D80F4AF25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA33681-4F59-4F5C-ADEB-7AD7776427D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F0C310-0851-4E83-B893-FD4FF1DE2E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606E2317-C625-4CDF-BF03-BCA49E7659B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2A3707-FF8D-4A5B-B0C5-5609ECD229F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855B1020-7FB6-46D1-ABAF-5618590CF329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDD05CF-2C4D-484D-AEB0-C5C28F432A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485923CB-D5BD-400D-8324-3FA94D11C4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DA1B7-18E9-43CF-BD77-050B971D75FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75634752-042C-4E27-972E-E0D5DCD38BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD00484-39D2-4CD5-ABEA-3C5AD9977BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD9B95-0D54-49CA-824D-68175D6B4A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082C941-CE02-440F-8DD7-87873504B964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBAA67-9C88-48CE-88F7-4B5463B87B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71E784-53C0-46AE-AB6E-9B4CB5FAFFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC09-8BA9-4595-89C2-1EAD0310B78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4334D40-9B30-483E-9154-E0956D8849A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14897FA-0E55-425C-9048-5987A0A6CE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4BCB9-8FE1-4B69-8245-F0F2955CAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112C4EA9-2FB4-4C2F-B550-036FCC289DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B770E747-517E-42FE-9197-8E654F294B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59D6811-BF02-436B-808A-DF21682561CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE752C6-250E-47CE-93EA-536958874386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3103F-9381-40A5-A7BD-D1251B3EA5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B990E413-C863-4613-803F-1E492982C70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D601E90-6F2A-4C66-97A2-152031C88DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EB6A3F-DDAB-4FC6-A857-6E106E815505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741D6E0-2507-44D9-8476-AE11DADEC611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318BB57-8001-4F2A-954C-AD8DB2A94356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF56A5C-3370-4F64-9F2D-F003B8536CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78159F0B-2553-41F7-9ABA-38065EB5B23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC8876-9FC4-451A-996F-71F2B1C35781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC0B809-72AD-413F-BE84-73FE2DB33950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D1F5C8-F388-4999-BE87-33BE68976EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D05A1-996F-408D-AC4D-F6B0538E8956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4EEC19-209E-4CED-8348-60E34F7EE419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F7E13A-AAFD-428C-9C4D-395460EFB8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE036B-F8F4-47A0-B192-807899B87885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6C6D6-ED67-4ECA-8FD1-9C3890C061DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC422D76-8337-41F0-98AE-E5D85DF4D0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB76F47-8723-4888-8613-AC3273BAB758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CC5862-F8D0-4184-A29B-AE627680D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CCA5C4-3683-46C9-801B-683E194DDA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D4C7E2-F1F1-43BF-A53E-2A8FF408F4A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sng:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B85501-8588-4DFE-B25C-E2AB44221F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)snh1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FB91A5-8042-422F-97F7-B70D1E33016E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sni:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B67EA46-5A45-4875-8E02-DB5B5FEE7983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C2BB1F-79DF-4471-B75F-C22CEBB5380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65589A68-58A4-4BD4-8A26-C629AE610953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1DE401-4E0B-4F72-B59D-1A600624D43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59B7F84-4C39-46E1-932C-EE52F22F4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A0F9C0-4591-4981-863E-1704FC4A0919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF56328-A74E-432E-A790-E16C941CA3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91421B-F04E-4CA7-8EE3-2F06AC6303C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B6E5BE-2D8B-4BAF-88BE-772F5905875E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFB827C-E7A9-410F-AE0D-5E31C6B29EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180C12CE-E9EC-4E86-A18A-E57803232193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8007004F-7331-48FF-9821-866560F3580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F877F3-C1EB-47D4-BBF2-0D678403A1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65F813B-C080-4028-8E1E-A81827917DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D54D10E-D94E-4731-9988-4EC1786FF4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4p\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316E962-6C56-4F45-9575-274506B9D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28874B-148A-4299-9AA1-67A550B25F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D682D369-AFAA-47D6-B063-95A9FE336FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FDD38A-D864-4E73-BEBE-E3545113FA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC7974-36DA-49AF-BDA3-671EA5F41441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36979139-66D2-40DD-A865-547BA9D49786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E129B-EB7C-4E67-A50A-38CA19B697AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7E5969-E55B-4EBF-ADDE-8A969174E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8957EB38-37CF-47FA-853D-7A1AA6079874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAA5367-F81E-425A-A93C-B9220D1BB37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1ED4F8-3B6C-452D-A3D0-D2F1A24AF994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF32BC7-57DF-4BF0-BF97-69E97CC048CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3836108-E847-4BB6-BFFE-7C81E9D94A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4151B2B1-B17F-4F1D-A211-34C7DB84E442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447FAF3B-8E93-4A2C-A8B1-1A2F7D958754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2628F-456D-4471-A914-D92157725CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6465E3DA-90F0-4DD6-82B1-C9DF9FAEBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A1BC08-28AF-4583-BE21-0D85CA2D7B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86EA2EC-7FEA-4AE8-8CE0-45CA3C21B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716EC9AA-0569-4FA7-A244-1A14FA15C5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CD336D-1110-4B0C-B8D4-7C96293CBADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC59C3E-A2A4-4A1A-B561-E411D7DE85E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB5DABC-4DAF-4696-A8AE-D4B6B188B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72480900-6E08-425F-965D-143B348E374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E903D9F-530D-4597-ABA9-4C1CFB79814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE10B51-53FB-4F30-BAA0-0BD92C3D5C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5060BAEA-DF8F-4B85-84F5-1410FD45C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCBE369-81ED-4C94-8C44-53C6F4A087CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:1.0\\(1.110a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE956FC-1BEF-40E6-AD94-B61ABBAC22EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:1.0\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E0DFB9-D722-445D-B9CD-AA36B4CDC659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:1.0\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B53606-5DDF-48C6-AEA1-FBC73DD9EE7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(0\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "234FD6A8-24D0-4F54-8E41-70E9575DCC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(0\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A69202E-9600-4949-98F1-3037C8036B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(0\\)n1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "877676F4-566D-4C5A-946F-E22BA70865BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(1a\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD10C022-06D6-4821-8BB1-928A04E705C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(1a\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3230A799-F129-4ABE-8DA1-83595015FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(1a\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CB0C21-D8E6-4CBB-8F6F-33B02B5BB57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.0\\(1a\\)n2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C04C7-8314-4A7F-B7C0-7B17A4204419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "91272DF0-CD4C-4ECD-92C4-357CB881B9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1\\(3\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC4AE3C-FEBA-4EC3-AF7C-EE21400E26A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1\\(3\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A8C85D-ECAA-44E0-BE94-247EDB780895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1\\(3\\)n2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "487AD645-B95D-44C8-9B27-9651108F10A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1.\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1702F4-816E-4045-80B6-2BC71DC344F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1.\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AC8BC8-638A-4F73-A64B-B490675AA1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1.\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F128DC9-C4CA-4547-B6C8-8E83A8C5F6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.1.\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB6C32-CD16-41E9-AB42-A294424266DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9E0C2E-E44E-4B2D-B7EA-CFEA7BE092A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(1\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A05AE9-050B-4B22-B668-B5250C853DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(1\\)n2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8D6E3E-CE8F-4017-B0EE-DED343049A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE1586F-E01C-4C4F-8284-1B1FE5370343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "891D883E-8263-42B2-A978-49F6AEF4CD49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C059CCD-1BE1-4675-8388-0DB219C04E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "67829CF9-FDCB-4A17-9241-1B48A38B1A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:4.2.\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0476865-D306-47B7-A84A-C163A316D9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F69DC16-8793-4A50-B901-2BDBE007405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(2\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "392B8209-689D-4EFB-8B8E-04910EEB38AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(2\\)n2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8595D2-710F-4C09-BEA4-A3D81C2269A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6753978-267E-4398-A1F7-96C37B5C8600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16131960-37FE-4154-A82C-E3249B066DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)n1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B91092-DE54-4591-9C0F-A22A04AB71E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE1F177-8952-4ECE-9E7D-5DB17895148A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)n2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95D0F4E-944D-4AB8-B316-7842CB1F9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)n2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7856BA8B-4959-4FC2-AF4F-747FCFCC8EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)n2\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A402251-E36D-4DD1-8DE9-6DA025CBECEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BDA5ED-E9AF-4D9C-9D13-BADFC515670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C124BA-D5FC-422A-B3F4-AC1A41B7EEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F358E8D0-624B-412A-8726-B8AF96156317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u1\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A4CE07-64FF-4C5C-81FF-A2388818CF7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDC9595-39D4-4BF8-AF18-D27A500C9007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7241BFDB-6386-4CBE-ACFB-4599EDE9CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF7CE90-9433-4E1D-A2AD-0B8854521CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "171160E9-F6B8-4C8A-B086-431E3E2A27BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAFAE6E-8B64-4A1F-A7E4-2D4BDFB7D5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u2\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C35886-CB9B-4477-9AB3-9F1C9E45E757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u2\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F393BE8-8CC4-4302-829F-2C4F97BAC14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u2\\(2d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE855B3E-B2B8-4EBA-8303-55F6A5A77E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "641D651A-B85B-4E9E-BE92-35AFAE8A63A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7810F6FD-F58F-4121-9D30-8C5E3E163EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u3\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C38DCD-2A5F-4095-ABA4-02E95D93C358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u3\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "103A4C19-0E91-45FC-9AA2-F40215FCF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F61C03B-D7AB-468A-B092-158730FB3E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F883AA8-CC44-4440-AB30-D7AC29C242F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7390B4D2-2121-4311-A798-337E8B777A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C6663-9EA0-4124-ACC6-0AFC649AEA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C559C83-FB34-4B1A-A6B3-1834D6CD022C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F422D53-4FF4-43FB-8F62-D53393A8C038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFFFE88-17EA-4515-BF71-C0AB82957B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF14E5C-B776-4A04-A5CC-853CFF2816B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7E681A-F354-4093-84A9-5A357EAB1559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(3\\)u5\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B627C66-CFE1-40B9-8264-392BB091EA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3296D4-DA94-4E41-BAAF-CEC0E84BB498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B582362-FCFB-4D94-9C0E-2B7FD3F5340E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FF6E77-B7C2-4CBB-A8FE-1D6218BA330C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAF2ADA-2C84-44EB-8893-0AB612AFF68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F6A4FB-A7C4-48C8-AEE4-584DE5A7D57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3BE66A-77B5-4808-BFFC-26B6A77F048F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A7B6A-C923-4D1A-89D4-3F46FE94D003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\)n2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CE3C35-D73A-4FB9-B061-B8A65F84F927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\)n2\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E0B7CF-91B6-4E49-A763-65A2EEED5C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(3\\)n2\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AA1C60-38DC-44E2-A4D8-0F290DA8D83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D70623-8F98-44CA-A589-B93B167F88EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AE58DE-C708-4C15-B2C4-2366F4378344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "80510B23-1F02-4FE0-BF3D-E2CD2A5D5B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F179FBC-22BE-4C44-AAE0-866F1D6B1270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "757A0C8E-4817-41DD-A609-2B61C36DBBCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECFED5-8D06-4396-BDD2-AAA0F5241839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "772A297E-E323-4D2D-9129-6C4FC63643DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "149ABB41-A8FF-4A8F-888E-F27BDAAE9C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6918EB91-679A-4F47-BB9E-3A22287F14FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0464AAE-73CF-4B24-A5CE-5C1131909CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "68376361-C835-4552-8490-553C9A082615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "270620E3-92B7-4914-88C7-9D955B2B856E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E48600-FD20-4743-A3E8-AD5297164551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A10C1B6-616E-4F94-8889-9C99906326D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A091A5-2848-4901-B193-1EC9DD8A52E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)n1\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "380FEA27-D68C-48DA-B2B9-4A3B3A71B059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C628947-4A0E-4904-A6F7-745C3370A8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "356B4143-5184-491B-9D10-19D6536366CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C038896F-6DBC-4695-9DBE-A60F6C39AFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2453F2-704F-48F7-8009-991BE0B49251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00B4AC8-1D27-4394-AF28-10785AEFC073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(9\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD74E645-4087-4E84-8B32-313E85759EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48926DA6-2020-4D4F-AD12-555163C6C352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "161C5BDB-CD50-40C7-B972-A1B650607338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B9FE4E-0C82-4511-9A4A-DCBFEB93DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FCA143-FDAB-472D-B9E1-F7CB4041BBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8844860D-427F-4B01-980A-59B082F26034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13305C9-008F-488A-ADC7-0724AFB313DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46376F5C-2CF0-46F1-ADCF-870065A24D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EA3CBB-EAF7-4837-96AF-0258220C4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6FB730-84CD-496D-9140-BC9375548D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD712B88-298A-4488-A053-67CB45190F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED5F397-D3E6-4A4A-BF38-6B295A6AB9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D91C38-76AB-47F5-BDDE-E940D87C34F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF78015A-5C28-4FD2-915E-EC343201A9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED17D340-9C18-4B1E-BA15-CAE2ADAAD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C871A419-B769-46B2-956E-467BBE94F290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EACF481-3E4B-4580-8AE7-3D49790E0715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "698ABD3F-C9DE-4376-B57A-D05AEDCD9A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5010EDAE-67BB-4E23-B0F5-10096A7DAB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84CF5114-731F-4BF4-83E0-9B095C34541C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4750621F-E7C5-4E6A-BC5F-232E75A454E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F35A63-9343-47D6-AB91-37AB148137E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADBDD1D-DA17-40EE-8B23-81E9991387DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A623F8E1-B97B-41DD-947F-7E1B65DD6902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D9588-D98A-45FC-8344-58C55F35610E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190D0A-B758-49BA-9830-9870F699DA0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)n2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5613C4-6D05-4CF3-931F-F685150494DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFA21F2-E2B2-49B6-9956-D6219D499F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52899164-992D-4736-B460-FDFB825DB7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8766DA4C-A25C-48D4-A6FC-2357200A9215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C48105-F73E-40C9-8CD9-B46C5319FB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F5B47A-023B-4415-8DB9-6829C5E72901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "618861BD-8FEE-4EF8-BFFB-A5BCBA8EA3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6459DD6B-6DC1-4C14-A8E7-4503ED5F69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA600413-FC70-4776-99DF-180C96D4FD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC9066F-3082-48A0-BA52-9ED9420EA47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "78611E25-E33E-4C88-A681-97B5A2A01B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "780B04ED-412E-441F-8717-D8F9257F5699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A3647-2AF0-4D45-BCC9-24618B43ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2AABBD-8680-4615-A4E2-B607CB1B0979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "693F444B-FA34-489C-BB45-E9185DE47816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "13669043-3F12-4439-812F-6DE35F70B159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A8BDE0-2F73-4E0C-B73A-918DB3352067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BFAE68-01C5-4EF8-8B86-F470092E9034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D02FC11-EB21-45CD-A070-89C4862240BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C67AE59-380A-402B-9B2A-F595E001637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71ED401-6786-4AAE-A98F-BE4732256A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(1.41\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFA09E0-9FA2-4E21-B285-CC64495461B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B5EC76-A4A7-41C0-9F37-5EC85FD1EB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BC7FC9-1167-41C5-9B0E-7D68400F3C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EB46CC-2939-4326-8CB9-504D7C7EF05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(0.46\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C7EA58-2F17-41B2-8955-CADE8B7D2FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8845147E-D3B1-41B9-BBD2-77B2823F3AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC4F349-9E1C-4DD8-BC07-6CB67053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "08032AAC-F094-4717-A56F-89289FBD1F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "07645F73-AC79-4BB8-A98E-1740F7D6EC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "147D1A4A-6404-47E3-B1A6-4C001C8DD9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0D74A0-C4B2-46EC-A9FF-562A997E3150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "817A45B4-7C79-4D1A-B889-18A937CF8361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "155F3CB7-A85B-4897-A4E2-F485FDF44AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0E6C0C-B88D-4085-AA28-0EA8CD1AB419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A967FB72-BCEB-4A76-A322-DDB0C4094E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F882AB-C25D-477F-96BF-7001BB77B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E48EE6-C498-4E13-AC5E-28F6B4391725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB0F49B-85C0-4C52-82E0-C2683D43B553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABB647D-B91E-4C2F-9FBE-1C9AAB27E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "384B7337-1C2F-479E-BB2B-F31320D82EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i2\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED50316-7044-4757-9C51-5543BA5693A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB11917-C606-4025-A91A-596F7D47A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B757AE-83C8-4194-9BAE-DBECA2021597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1A44C9-147B-4D1F-AB98-EB4F9F8C1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "702EF8D5-1F3F-45EF-AC8D-BD5A9E46A78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i3\\(3.78\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B69592-B64F-4D96-A39E-887E2D38B8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(2\\)i3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0750C504-3D45-4ED7-9A0A-A8EEEEE426ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B41075-01D1-4832-A025-07A378F2A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D98CD1-AE44-4863-9B9B-8B16746E122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3357A3F-C304-4D73-8E0A-74DC3B54913D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "858E4134-643C-422C-8441-5372F4BC25D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12BFDB0-4B90-4EB6-9CBE-A7A33C57EA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB9928F-B632-4A06-8065-FFB85998D979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(1.121\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710C34E7-0FCF-4182-9514-8E05C7273EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDE8EF9-47CF-451D-9570-3D369D74D44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A760CE-5E63-4A6B-8DA3-A473BC3900E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E738E86-B75F-48BF-9E76-C7DD470F3688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C6090F-0B05-46F0-8A67-928FE1C36D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD345BD-83EF-4913-A0F3-74E52AD76BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B2B97B-DDB7-4208-BF1A-D10C8A075A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(8b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "317C8BE8-84DA-43D5-AE93-7E7DCDE6883E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7B1216-4C4F-4A23-9474-23876649ABF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57892CBB-8C95-4E56-90F8-B77BBBDC03FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2\\(14\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8505B4-61A1-4E98-8E13-9F8BAF825E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD613D8F-099C-43A1-BD29-A98250E1334A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "576B74DF-9527-4931-B1A3-8FEE1DB1AD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(1\\)n1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B2080A-6055-4459-ADAC-CD33E3697EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5B4FA9-E550-4C69-A4E7-A989BBCCF22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "108374E9-8814-41C4-9474-6EE3AF24D71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BC9769-F3CD-4047-8C86-8C09FB2AB0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C775E53-781D-4426-A59B-DB65D697A844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "619DEAAE-3356-4079-8CC8-F477FCA18199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "99909A45-A094-4706-B2BA-C6E352235724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "17773F3D-62E6-4DA4-9B81-F52BC3C58A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0C7A02-9B94-4F2C-9B15-C70C98EF22B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i1\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBD429-3141-4DDC-8DFB-C78CC0FC6DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(0.373\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBECEDD-FFEA-4720-822F-3132CB914DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "046E260B-F842-41BA-914B-ACD7B71AB62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF537FC-B681-4F52-9324-9A4AC29651AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B2E736-F9D2-453A-9998-38800CC875F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8CEAC9-1C53-46A6-A18A-2A970D587C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "851E1B4E-40C4-4639-8FC6-C9DEC6FB2744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5FED85-FDCD-44BE-9C38-53F6EF6212EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4C8DC0-0DBF-410E-ABC7-53CD5AD04EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(0.170\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC5F341-81B9-472D-9AB9-8B04F84EF1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC49A1-91FC-4D55-BD74-42C918CCFDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4142F873-0492-4ACC-88F9-3A243128D0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(2\\)\\(md\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F2BAE1-D61B-49E2-AC79-C63F0E7DA18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A500F4-1899-4F96-98E3-9330146A7963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "63949081-E2F3-4EB4-BABC-270AAB19EE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58292522-F486-410D-AD99-DFD6EC0AA9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB59A4B-3FCA-47F9-A4DB-D2B8ABAFB54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(5\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07ACF87-C694-41DB-B4BD-23CE72E32EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83C312B-0B0E-4A02-A9EE-F864EFBE60CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47E0A4D-4033-43A8-9A50-E1A2BD7B419C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(8\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631EAC6-1D33-485E-9E00-8572FA015C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3644F66-F964-4D50-A6E0-EE8784490BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AD166D-7CBF-4A4D-A376-907DDA1BB504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A20D72B-E2C6-47B6-A54D-FA435F29D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D9EEFA-D652-45D2-8AF5-8A72825E7ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEB91EC-E548-4C53-920F-C4871BC464B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0282F963-2C1F-44F7-A0D0-4929685051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97083C8-89AE-4D0D-A039-1B798D60B573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3.12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "768151A3-CCF6-4F37-877F-4F1F2CD60791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9103A92E-C9F3-401B-AE30-66466210ADED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)d1\\(0.437\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B917BAB-61B4-4596-B409-E9D8CBB3A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "185B1E14-1944-4BD2-AA45-0F5025EDDC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E485E99D-F421-487D-86E7-A2D119623D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)zn\\(99.67\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09770FE-CD69-401E-8DC3-5DBBFB14B698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)zz\\(99.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6964-B258-42D4-8181-BB4765B58AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)zz\\(99.3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE99C10-B3DF-4BF1-B3D5-01CA37F16132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18A0045-87F3-4782-81C5-0BF615EA9346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AA886F-7BD1-4699-B1D3-E495EFCA2812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "569B3CE7-CA06-4636-8043-7ED7635195A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1\\)\\(ed\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "847A0625-B1B4-4312-A88F-1265BD07D967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zd\\(0.47\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2036380D-7658-40AE-B645-026A220E4BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zd\\(0.61\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25D743D-FBCA-4A10-924A-DBD75F7FE171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zn\\(0.9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8645B1E7-8044-4311-B2AB-7820DC723313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zn\\(0.81\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBF13E-A73F-4042-A263-DCA99DD75D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zn\\(0.83\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF357599-3FB1-4B4F-9E79-74E0BFC9F35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zn\\(0.161\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D32F3A3-C0C6-44FE-8047-C2751BC0124B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7AC947-04D9-4437-811B-71BD2FD648F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)n1\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92EECB-28FD-436C-98E6-488554EDFB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(0.296\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB84933-1B94-474A-ABB6-AFF91B62446A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167FD2BD-A610-4966-86DF-DA5C78E0D3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(0\\)cv\\(0.342\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7304A486-5925-42D3-A5F3-21671BB3FB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(0\\)cv\\(0.345\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FDDA8-B18D-483E-B1D5-5DD76A053D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(0\\)cv\\(0.833\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6D1E8-D4B1-4AF9-9F7A-4F221A4DB6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64CC640-B37D-4064-8946-B8CCCDE1A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8983275-20C6-487E-A265-3836F06AB226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCA0A4F-D475-405C-B9A7-EBB0A816B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0E0039-23E1-425B-8B2C-DFE2C185CC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3FB2AC-934D-4F12-9E9B-EA5F0731DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE91F5-EC9B-4486-80F1-CFC3DA570B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C60E5B9-10AB-4A69-B28D-0D526756E6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "979FEE23-2C28-4212-9DA5-10A0EAFE1668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B610400-181F-4621-B27B-18C2609990DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4585B70C-E162-42FA-9CB8-42C1F34017AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "788E6471-F000-45A7-9829-71F7AE5ED1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD04718-6743-40A1-9115-A172D1C37835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE500E08-7AC5-4086-8B83-20E24CB5DDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA00485-725D-467C-9152-DF325507E248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7ED5D0-12BD-483C-902B-CF1AE23611E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "582C120A-DFA9-40F8-875A-C7875D9D93F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "040EFFE2-EE24-46EA-B77B-7FDCCF66923D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB814B0-24AE-4C62-9CCE-5D572D0FC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FAEF9F-724D-43E9-8916-BEF64A9B8F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA448665-A433-4C40-940D-1165C6A2777F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "061AC794-EDA5-4166-85D1-EA827685C0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE372D3-4978-4C78-AE1A-14E29ED00D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A11D005-53E4-4575-8EAC-86F9DDB62FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "952CC9AA-D03C-44F5-8600-78C1E20D0F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F6CC3C-BFCB-4CD6-830E-6A2C29EB0923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C3B5E-AD72-4A32-BE7B-885AE8DFB480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9188E945-D4A9-47A7-8588-302762510C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A00C1F-7270-4E2F-8420-8567336AD1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EE58D9-D1BF-41BD-B331-A3472D38B1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B28302-6700-4B2C-9531-6BECA5113D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34C017B-E9C3-48B8-AB7E-0A8C6CD8788B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0CF9B2-356D-45C5-BFCD-94155E1A2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2478A831-330D-4526-8A2C-DC8C0F6973ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1569E0F4-33D1-408D-88DC-26822447F325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA86F8E0-58FB-4CA5-9541-E9D55BED533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F031ABAD-3D20-4374-ABBE-24D5C01BE910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F227E127-08EE-4A86-956C-BBBDB49925A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE5B22-F9D3-4EAA-A552-7F0271080632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DB471F-43AF-4E94-99B0-7D38CB3F5943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9217FBFE-2708-440A-90F9-0562C159DE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5F46C-3172-4509-856F-703E0B517E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07DC9A1-E4BA-474C-96C2-0B73704628AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B05631-0319-4AFA-867A-2AECEAD449CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "771CD71E-4F24-4ACC-8D86-11429379093B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFBAD221-BBD3-4BE6-974F-361C8E0FC6E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100005",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039005",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039006",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039007",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170727-ospf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170727-ospf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7916",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. The web application does not properly restrict privileges of the Guest account. A malicious user may be able to gain access to configuration information that should be restricted."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de control de permisos, privilegios y accesos en ABB VSN300 WiFi Logger Card versiones 1.8.15 y anteriores, y VSN300 WiFi Logger Card for React versiones 2.1.3 y anteriores. La aplicación web no restringe privilegios de la cuenta de invitado correctamente. Un usuario malicioso podría ser capaz de conseguir acceso a información de configuración que debería estar restringida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:vsn300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.15",
            "matchCriteriaId" : "55CE1554-02F3-48C7-9358-5BFAE8C73088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:vsn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440423E1-CF52-4E64-9FFF-BA00636DAB57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:vsn300_for_react_firmware:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A99018B-9729-45B8-8E1C-1A3940329897"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:vsn300_for_react:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14628BB-774D-436E-A2DF-C9CC66A1D3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99558",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7920",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access internal information about status and connected devices without authenticating."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en ABB VSN300 WiFi Logger Card versiones 1.8.15 y anteriores, y VSN300 WiFi Logger Card for React versiones 2.1.3 y anteriores. Al acceder a una URL concreta en el servidor web, un usuario malicioso es capaz de acceder a información interna acerca del estado y los dispositivos conectados sin autenticarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:vsn300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.15",
            "matchCriteriaId" : "55CE1554-02F3-48C7-9358-5BFAE8C73088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:vsn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440423E1-CF52-4E64-9FFF-BA00636DAB57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:vsn300_for_react_firmware:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A99018B-9729-45B8-8E1C-1A3940329897"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:vsn300_for_react:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14628BB-774D-436E-A2DF-C9CC66A1D3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99558",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7928",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de control de acceso incorrecto en Schweitzer Engineering Laboratories (SEL) SEL-3620 y SEL-3622 Security Gateway Versiones R202 y, R203, R203-V1, R203-V2 y, R204, R204-V1. El dispositivo no aplica correctamente controles de acceso al estar configurado para el reenvío de puertos NAT, lo que podría permitir que se realizasen comunicaciones no autorizadas a dispositivos de bajada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3620_firmware:r202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6583BFAD-2575-4E44-8627-93F398CC5FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3620_firmware:r203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "402F8A8A-1F2C-4604-B18C-AB2A25003A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3620_firmware:r203-v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E61C60-30D0-45C9-BFC5-6FA526AAD466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3620_firmware:r203-v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90060D74-8688-477B-842A-47A02F8B28D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3620_firmware:r204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38283FF1-5422-4D73-84CC-7EC57286A8FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3620_firmware:r204-v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1BD563-98E4-4A2D-9489-5EA7959546EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:selinc:sel-3620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDB548A-15DE-4512-9C02-6197E08051DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3622_firmware:r202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65F7FC5-C8EF-4884-B5F5-66DBE6751121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3622_firmware:r203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A6C684-A415-4A00-AB85-13A127A13D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3622_firmware:r203-v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DCDDC-AE50-4322-BCEE-BF636ECA84B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3622_firmware:r203-v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20DCC56-E2F2-4414-89D3-821F7E230B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3622_firmware:r204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CA202B-F6D0-4727-BFC0-DBA9A871B582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:selinc:sel-3622_firmware:r204-v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2DFB60-2951-4AAA-9094-CA7F90EC82DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:selinc:sel-3622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5E4D1-3584-4B2A-9598-601AAD7FF977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99536",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7932",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de validación incorrecta de certificados en NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, y i.MX 6QuadPlus. Cuando el dispositivo está configurado con opciones de seguridad habilitadas, bajo algunas condiciones es posible eludir la verificación de firma utilizando un certificado especialmente manipulado que lleva a la ejecución de una imagen sin firmar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf30nn151cku26_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82ABEF1B-6B93-48B5-B34B-1D155EC55ED8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf30nn151cku26:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A93AF1-F85B-43AC-8D9B-98E47B6B001E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf30ns151cku26_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B81B61-456E-4359-AD6B-2317376AB24C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf30ns151cku26:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D98873-7A8C-449D-A044-B05887A890E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50nn151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26C9279-3069-4093-BA96-2CB70AEDD2F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50nn151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C674A05-5443-402D-B508-62EF31AD15BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5C139B-A4DC-414C-B278-ED4E5F5492C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F14598B-FD3C-4CFC-8DBE-FC1EA733731C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50ns151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1A6ACE-A4B5-48DE-ACE4-DF50A928DE3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50ns151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CA505E-6B28-41C9-93B0-7406F489BDB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78300258-A011-4920-B39C-7B8C0412C921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C271C7-E84F-4BF8-AB80-9934BB0A5FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf51nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BA42E1-0931-4ECC-8A90-8485D6071158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf51nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A843151-9A62-4515-A82A-E798DD89EFF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf51ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E296D84B-F3E5-4FBE-AA21-E8FDFB12F448"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf51ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DD4EB6-9AC7-40AD-BFE2-EE9AB100F666"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60nn151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DBF157-B729-4FE0-87E2-075C6154CCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60nn151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD55202-ABCF-4B87-963D-476507A721FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60ns151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE02CB27-F9E9-46EC-8D66-93482390B6FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60ns151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD1ACEE-674D-4ECF-BDA5-A371B57DF38F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902E393B-EDC6-4814-B712-C218BED08866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF82AB-BC34-4CE0-B5E6-9AB40241FFD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEE62D2-1F7D-4083-BB14-0BFA6B8F5A8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87BB6B2-BB8B-4264-90F3-EE2E7B63F73B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf61nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B4DE7F-2141-4954-8A5A-1CA9FC61CA01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf61nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A401CC61-AB8A-4AC4-B50B-4953660E9CD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf61ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881A99E8-BC43-4C28-A394-83171519F1C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf61ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7921E65C-2824-446A-8BC3-563A68808270"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf62nn151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B3ABED-465D-4897-9EC4-3E6AF1A7519A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf62nn151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1A0B17-65C1-44AF-A686-04FBFB5C1AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F523DEA-C0B0-4268-9F6A-E48282A32A8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA014971-DCCC-4B8D-8653-DD3A158B8A1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_53_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B5CAEA-5120-4089-8E31-0BC959EFF849"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0496E7EB-4D37-4333-A854-A8D45B8A86D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6ull_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF45AD7-B959-452C-81CB-FD9A40D11378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6ull:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CD0D2A-C1A5-4771-ADAB-70375BF06670"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6ultralite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3ECF45-3884-4AEF-B26E-72DA6E43F49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6ultralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A59F6D-0000-4E82-8F16-BC9BC946A7B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6sololite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25507E5C-FCAC-46E1-A90F-B9AE7D554F76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6sololite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C42AF58-A53F-4307-A381-CD1A511F4569"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6solo_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA76C3C4-0030-4C52-BCDE-D4D963C2B511"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6solo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A69747C-AE47-4219-8892-461341151E6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6duallite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28AF0906-B8CE-40FE-BEE0-03A814C55B0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6duallite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F40FEC3-EBBC-4B1D-9677-23B3A6D89B91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6solox_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB98D4-51CD-45AB-8C5D-79989A083946"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6solox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71631A11-FB49-4335-BB1B-47EB9061F47B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6dual_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042E76C8-94AD-4F30-AFDC-D6E4C3F49FF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6dual:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D9AB2D-303F-4C16-A584-0812DE52C7EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6quad_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A062D5CA-B204-4209-A398-343E191A4AE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6quad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C69EB9-C38F-41AF-B1A6-0E7BB841BA58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6quadplus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0BC58B-DFD5-465A-AB3D-724DD05B6199"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6quadplus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623866FF-4E6B-48F8-B601-09AB288294D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6dualplus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77688E97-E680-445E-B291-CEABBF0AC460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6dualplus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41F948-3B57-4462-9FF5-890FBD038E66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_28_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A416B6-B9A4-4408-8848-214E8947FB78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEECEEB-834C-4A3C-B907-92836250CC80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_7dual_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079CC43E-F536-4C7A-BB92-DA2B0C051680"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_7dual:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F7AFD4-FE4A-4D1F-9944-BF67D77E8E5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_7solo_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7206B367-4736-4045-8468-C39A41A8435C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_7solo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F78E63-D311-4D82-A0CE-5A756D469396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99966",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7936",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, and Vybrid VF6xx. When the device is configured in security enabled configuration, SDP could be used to download a small section of code to an unprotected region of memory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de desbordamiento de búfer basado en pila en NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, y Vybrid VF6xx. Cuando el dispositivo está configurado con opciones con seguridad habilitadas, se podría utilizar SDP para descargar una pequeña sección de código en una parte desprotegida de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf30nn151cku26_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82ABEF1B-6B93-48B5-B34B-1D155EC55ED8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf30nn151cku26:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A93AF1-F85B-43AC-8D9B-98E47B6B001E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf30ns151cku26_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B81B61-456E-4359-AD6B-2317376AB24C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf30ns151cku26:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D98873-7A8C-449D-A044-B05887A890E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50nn151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26C9279-3069-4093-BA96-2CB70AEDD2F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50nn151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C674A05-5443-402D-B508-62EF31AD15BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5C139B-A4DC-414C-B278-ED4E5F5492C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F14598B-FD3C-4CFC-8DBE-FC1EA733731C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50ns151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1A6ACE-A4B5-48DE-ACE4-DF50A928DE3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50ns151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CA505E-6B28-41C9-93B0-7406F489BDB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf50ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78300258-A011-4920-B39C-7B8C0412C921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf50ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C271C7-E84F-4BF8-AB80-9934BB0A5FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf51nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BA42E1-0931-4ECC-8A90-8485D6071158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf51nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A843151-9A62-4515-A82A-E798DD89EFF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf51ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E296D84B-F3E5-4FBE-AA21-E8FDFB12F448"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf51ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DD4EB6-9AC7-40AD-BFE2-EE9AB100F666"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60nn151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DBF157-B729-4FE0-87E2-075C6154CCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60nn151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD55202-ABCF-4B87-963D-476507A721FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60ns151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE02CB27-F9E9-46EC-8D66-93482390B6FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60ns151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD1ACEE-674D-4ECF-BDA5-A371B57DF38F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902E393B-EDC6-4814-B712-C218BED08866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF82AB-BC34-4CE0-B5E6-9AB40241FFD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf60ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEE62D2-1F7D-4083-BB14-0BFA6B8F5A8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf60ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87BB6B2-BB8B-4264-90F3-EE2E7B63F73B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf61nn151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B4DE7F-2141-4954-8A5A-1CA9FC61CA01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf61nn151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A401CC61-AB8A-4AC4-B50B-4953660E9CD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf61ns151cmk50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881A99E8-BC43-4C28-A394-83171519F1C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf61ns151cmk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7921E65C-2824-446A-8BC3-563A68808270"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:vybrid_mvf62nn151cmk40_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B3ABED-465D-4897-9EC4-3E6AF1A7519A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:vybrid_mvf62nn151cmk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1A0B17-65C1-44AF-A686-04FBFB5C1AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F523DEA-C0B0-4268-9F6A-E48282A32A8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA014971-DCCC-4B8D-8653-DD3A158B8A1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_53_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B5CAEA-5120-4089-8E31-0BC959EFF849"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0496E7EB-4D37-4333-A854-A8D45B8A86D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6ull_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF45AD7-B959-452C-81CB-FD9A40D11378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6ull:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CD0D2A-C1A5-4771-ADAB-70375BF06670"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6ultralite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3ECF45-3884-4AEF-B26E-72DA6E43F49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6ultralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A59F6D-0000-4E82-8F16-BC9BC946A7B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6sololite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25507E5C-FCAC-46E1-A90F-B9AE7D554F76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6sololite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C42AF58-A53F-4307-A381-CD1A511F4569"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6solo_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA76C3C4-0030-4C52-BCDE-D4D963C2B511"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6solo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A69747C-AE47-4219-8892-461341151E6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6duallite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28AF0906-B8CE-40FE-BEE0-03A814C55B0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6duallite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F40FEC3-EBBC-4B1D-9677-23B3A6D89B91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6solox_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB98D4-51CD-45AB-8C5D-79989A083946"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6solox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71631A11-FB49-4335-BB1B-47EB9061F47B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6dual_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042E76C8-94AD-4F30-AFDC-D6E4C3F49FF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6dual:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D9AB2D-303F-4C16-A584-0812DE52C7EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6quad_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A062D5CA-B204-4209-A398-343E191A4AE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6quad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C69EB9-C38F-41AF-B1A6-0E7BB841BA58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6quadplus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0BC58B-DFD5-465A-AB3D-724DD05B6199"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6quadplus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623866FF-4E6B-48F8-B601-09AB288294D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_6dualplus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77688E97-E680-445E-B291-CEABBF0AC460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_6dualplus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41F948-3B57-4462-9FF5-890FBD038E66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99966",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9630",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de autenticación incorrecta en PDQ Manufacturing LaserWash G5 y G5 S Series en todas las versiones; LaserWash M5, todas las versiones; LaserWash 360 y 360 Plus, todas las versiones; LaserWash AutoXpress y AutoExpress Plus, todas las versiones; LaserJet, todas las versiones; ProTouch Tandem, todas las versiones; ProTouch ICON, todas las versiones; y ProTouch AutoGloss, todas las versiones. El servidor web no verifica adecuadamente que la información de autenticación proporcionada sea correcta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_g5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5214117-D2A6-4CBE-92AB-1C10FFF53960"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_g5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D29EF-F2EB-4FC2-8021-64A98DCFC278"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_g5_s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8345743-9E9B-4B22-950F-B8D16B2DD389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_g5_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9418A71C-C776-42D1-8C49-8E7A5A35510F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_m5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526E3009-4341-4510-87EF-6579B2016EA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556B3850-9721-4338-BAE8-0E6827EE967F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF481571-EA78-4915-9B56-6E20B423CA5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3E7B3B-0A5A-4643-949B-ECA1771A67EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_360_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215A6BA3-1AE7-4452-9F09-1D47D46314F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_360_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC978B-25DE-4BFC-8B35-349CB0C49059"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_autoxpress_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D824F5-77FA-4664-A37C-AC5810102262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_autoxpress:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E1E23A-1A79-4863-9981-DF0E1AA971A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_autoxpress_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E34E8DC-2ADE-4100-BC53-C8E632C57BE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_autoxpress_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEF583E-6F5B-42E4-B3D1-536E9497BDC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserjet_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD3B5D6-773B-40BC-AFB4-39877E300D78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserjet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FAAE69-1553-4C1D-B447-FDA4AE980417"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:protouch_tandem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4030F5FE-0CE3-4604-A4A4-F88E219CA466"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:protouch_tandem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC802696-788D-48C2-B4E4-37DC0D733BEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:protouch_icon_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C452-C834-4E78-8CEF-92C4B69FB0E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:protouch_icon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA832AF8-2250-4EF8-85DF-C6DA40CC471D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:protouch_autogloss_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57FFA51-B5B4-4817-9047-B7F3A74CCA31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:protouch_autogloss:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A40A9-F759-4D9F-9237-1C4BACE79D07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9632",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de falta de cifrado de datos confidenciales en PDQ Manufacturing LaserWash G5 y G5 S Series en todas las versiones; LaserWash M5, todas las versiones; LaserWash 360 y 360 Plus, todas las versiones; LaserWash AutoXpress y AutoExpress Plus, todas las versiones; LaserJet, todas las versiones; ProTouch Tandem, todas las versiones; ProTouch ICON, todas las versiones; y ProTouch AutoGloss, todas las versiones. El usuario y la contraseña se transmiten de forma no segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_g5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5214117-D2A6-4CBE-92AB-1C10FFF53960"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_g5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D29EF-F2EB-4FC2-8021-64A98DCFC278"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_g5_s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8345743-9E9B-4B22-950F-B8D16B2DD389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_g5_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9418A71C-C776-42D1-8C49-8E7A5A35510F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_m5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526E3009-4341-4510-87EF-6579B2016EA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556B3850-9721-4338-BAE8-0E6827EE967F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF481571-EA78-4915-9B56-6E20B423CA5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3E7B3B-0A5A-4643-949B-ECA1771A67EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_360_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215A6BA3-1AE7-4452-9F09-1D47D46314F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_360_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC978B-25DE-4BFC-8B35-349CB0C49059"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_autoxpress_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D824F5-77FA-4664-A37C-AC5810102262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_autoxpress:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E1E23A-1A79-4863-9981-DF0E1AA971A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserwash_autoxpress_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E34E8DC-2ADE-4100-BC53-C8E632C57BE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserwash_autoxpress_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEF583E-6F5B-42E4-B3D1-536E9497BDC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:laserjet_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD3B5D6-773B-40BC-AFB4-39877E300D78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:laserjet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FAAE69-1553-4C1D-B447-FDA4AE980417"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:protouch_tandem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4030F5FE-0CE3-4604-A4A4-F88E219CA466"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:protouch_tandem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC802696-788D-48C2-B4E4-37DC0D733BEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:protouch_icon_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C452-C834-4E78-8CEF-92C4B69FB0E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:protouch_icon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA832AF8-2250-4EF8-85DF-C6DA40CC471D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pdqinc:protouch_autogloss_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57FFA51-B5B4-4817-9047-B7F3A74CCA31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pdqinc:protouch_autogloss:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A40A9-F759-4D9F-9237-1C4BACE79D07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9633",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.447",
      "lastModified" : "2025-05-06T15:15:52.377",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. A vulnerability in the temporary mobile subscriber identity (TMSI) may allow an attacker to access and control memory. This may allow remote code execution on the baseband radio processor of the TCU."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de restricción de operaciones incorrecta dentro de los límites de búfer de la memoria en el conjunto de chips Continental AG Infineon S-Gold 2 (PMB 8876) presente en varios modelos de BMW producidos entre 2009-2010, un número limitado de vehículos P-HEV de Ford, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, y Nissan 2011-2015 Leaf. Una vulnerabilidad en el campo Temporary Mobile Subscriber Identity (TMSI) podría permitir que un atacante tuviese el acceso y el control de la memoria. Esto podría posibilitar la ejecución remota de código en el procesador de banda base del TCU."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:infineon:s-gold_2_pmb_8876:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4984A894-4524-4396-9B99-BAAA9F52FF9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100132",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9647",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-07T08:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. An attacker with a physical connection to the TCU may exploit a buffer overflow condition that exists in the processing of AT commands. This may allow arbitrary code execution on the baseband radio processor of the TCU."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en el conjunto de chips Continental AG Infineon S-Gold 2 (PMB 8876) presente en varios modelos de BMW producidos entre 2009-2010, un número limitado de vehículos P-HEV de Ford, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, y Nissan 2011-2015 Leaf. Un atacante con conexión física con el TCU podría explotar un problema de desbordamiento de búfer que existe en el procesamiento de comandos AT. Esto podría posibilitar la ejecución de código arbitrario en el procesador de banda base del TCU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:infineon:s-gold_2_pmb_8876:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4984A894-4524-4396-9B99-BAAA9F52FF9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100132",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el protocolo propietario bpserverd en Unitrends Backup (UB) en versiones anteriores a la 10.0.0, cuando se invoca a través de xinetd, tiene un problema que permite omitir la autenticación. Un atacante remoto podría emplear este problema para ejecutar comandos arbitrarios con privilegios root en el sistema objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaseya:unitrends_backup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0",
            "matchCriteriaId" : "FD7754C9-2896-4011-9DBD-6C5831BFCE1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/000005755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43031/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/000005755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43031/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la interfaz web api/storage en Unitrends Backup (UB) en versiones anteriores a la 10.0.0 tiene un problema por el cual uno de sus parámetros de entrada no fue validado. Un atacante remoto podría emplear este fallo para eludir la autenticación y ejecutar comandos arbitrarios con privilegios root en el sistema objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaseya:unitrends_backup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0",
            "matchCriteriaId" : "FD7754C9-2896-4011-9DBD-6C5831BFCE1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/000005756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43030/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45559/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/000005756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43030/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45559/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege user to root privileges. A remote attacker with existing low-privilege credentials could then execute arbitrary commands with root privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que un problema en la lógica de sesión en Unitrends Backup (UB) en versiones anteriores a la 10.0.0 permitía emplear la variable de entorno LOGDIR durante una sesión web para elevar a un usuario existente con pocos privilegios a la categoría root. Un atacante remoto que tenga credenciales con pocos privilegios podría ejecutar comandos arbitrarios con privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaseya:unitrends_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "939F9A86-4E06-4CE2-B23E-CD92D8C5235B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/000005757",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.unitrends.com/UnitrendsBackup/s/article/000005757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una vulnerabilidad de lectura fuera de límites en ReadOneMNGImage en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100155",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/307fa45d512641fcd105f0d57ca50c1437cd1b81",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/542",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/307fa45d512641fcd105f0d57ca50c1437cd1b81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\\png.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtración de memoria en ReadOneJNGImage en coders\\png.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c9aa9f80828594eacbe3affe16c43d623562e5d8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/550",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c9aa9f80828594eacbe3affe16c43d623562e5d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\\mpc.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtración de memoria en ReadMPCImage en coders\\mpc.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/552",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\\png.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una vulnerabilidad de agotamiento de memoria en ReadOneJNGImage en coders\\png.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100218",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d9ccd8227c4c88a907cda5278408b73552cb0c07",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/549",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d9ccd8227c4c88a907cda5278408b73552cb0c07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T15:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\\dcm.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtración de memoria en ReadDCMImage en coders\\dcm.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100162",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/a33f7498f9052b50e8fe8c8422a11ba84474cb42",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/551",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/a33f7498f9052b50e8fe8c8422a11ba84474cb42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9801",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-07T15:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers."
      }, {
        "lang" : "es",
        "value" : "Cuando un sitio de llamada pasa un asunto para un email que contiene saltos de línea en Apache Commons Email 1.0 en su versión 1.4, el autor de la llamada puede añadir encabezados SMTP arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F19A6E-9804-46E5-BB19-D68FD7151A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F3451B-7369-45FA-AAA7-BD5DFF71595B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46162757-2BEB-4AE3-8C87-72605B9EF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7771B984-C576-4E86-8A33-A6C0D87ABE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C4BCC5-676C-4CEC-9917-16ACF9E4CB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF0651E-705F-4E15-A4C2-FA074002858C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C31A98B-BBC5-4F26-B60F-399AFFA58C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_email:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D2181B-15C0-4FDD-A881-AE400841B20A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100082",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039043",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/7ef903a772a2ff08605df1be819044fb15df2815eb3d63878b3fbbb5%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T16:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en Quest KACE Asset Management Appliance en sus versiones 6.4.120822 a 7.2, Systems Management Appliance en sus versiones 6.4.120822 a 7.2.101, y K1000 as a Service en sus versiones 7.0 a 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_asset_management_appliance:6.4.120822:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8009F05B-712F-417A-BB2E-5C6273D789AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_asset_management_appliance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA833ED-B9A7-4C7C-A58D-A266923CBE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_asset_management_appliance:7.0.121306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46609881-4011-4667-9121-7CFB96F10E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_asset_management_appliance:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C270DB0-232B-4CF9-B5CC-6266A7834911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_asset_management_appliance:7.1.149:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4ABD83-C646-4FA1-9518-1E2C103883DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_asset_management_appliance:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C13A622-F7EC-47C4-9E62-452D10D251F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:6.4.120822:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD553EC2-0FD8-450D-9FE1-08C979D0823E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A51289-32D7-4657-B508-A69B091BDB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:7.0.121306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E804AA7D-C40C-4C47-A05B-55DCCD7DF6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8F0EEF-7E64-460C-9AB8-2AD8C987EB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:7.1.149:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CEBEF9-6442-496D-8E64-788105C0C77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3974E4F-C02B-4903-9E4D-B099E3C86BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:kace_systems_management_appliance:7.2.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016EC87A-4889-4E56-A15F-CACBD6DA6F81"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:k1000_as_a_service:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1723889D-A814-4C2F-980E-58A136F20D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:k1000_as_a_service:7.0.121306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E30595-7BC2-472A-9DB4-34E4C896971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:k1000_as_a_service:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2672C38D-C094-45DF-B59D-986F9B411002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:k1000_as_a_service:7.1.149:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74248440-AD91-4755-A618-D04D336E24D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:k1000_as_a_service:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746F52B2-BC6C-4840-AF21-289DE56E739E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.quest.com/kace-systems-management-appliance/kb/231874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.quest.com/kace-systems-management-appliance/kb/231874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Liferay Portal en versiones anteriores a la 7.0 CE GA4 mediante un portletId no válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "2EF349F1-9D4E-41AD-8C60-3E69F4141B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.liferay.com/browse/LPS-72307",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.liferay.com/browse/LPS-72307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T16:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Liferay Portal en versiones anteriores a la 7.0 CE GA4 mediante un nombre de inicio de sesión, contraseña o dirección de email."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "2EF349F1-9D4E-41AD-8C60-3E69F4141B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/49833",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/49833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T16:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Liferay Portal en versiones anteriores a la 7.0 CE GA4 mediante un título de artículo de Knowledge Base."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "2EF349F1-9D4E-41AD-8C60-3E69F4141B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/48901",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/48901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T16:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Liferay Portal en versiones anteriores a la 7.0 CE GA4 mediante una marcador URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "2EF349F1-9D4E-41AD-8C60-3E69F4141B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/47888",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/47888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T16:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Liferay Portal en versiones anteriores a la 7.0 CE GA4 mediante un resumen o título manipulado que no se administra correctamente en el Web Content Display."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "2EF349F1-9D4E-41AD-8C60-3E69F4141B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/47579",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brianchandotcom/liferay-portal/pull/47579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T17:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header."
      }, {
        "lang" : "es",
        "value" : "Existe una inyección SQL en el plugin Loginizer en versiones anteriores a la 1.3.6 para WordPress mediante el encabezado X-Forwarded-For HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loginizer:loginizer:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "109D57F0-3B25-4130-9BF4-531FC2671F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sv.wordpress.org/plugins/loginizer/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8883",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sv.wordpress.org/plugins/loginizer/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T17:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked."
      }, {
        "lang" : "es",
        "value" : "Existe Cross Site Request Forgery (CSRF) en Blacklist and Whitelist IP Wizard en init.php en el plugin Loginizer en sus versiones anteriores a la 1.3.6 para WordPress debido a que el encabezado GTTP Referer no ha sido comprobado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loginizer:loginizer:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "109D57F0-3B25-4130-9BF4-531FC2671F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sv.wordpress.org/plugins/loginizer/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8884",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sv.wordpress.org/plugins/loginizer/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\\Python27 directory."
      }, {
        "lang" : "es",
        "value" : "360 Total Security 9.0.0.1202 en versiones anteriores a la 2017-07-07 permite escalar privilegios empleando un archivo troyano Shcore.dll en cualquier directorio de la ruta, tal u como se demostró en el directorio C:\\Python27."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:360totalsecurity:360_total_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.0.1202",
            "matchCriteriaId" : "C0A4E868-F621-4AD0-9285-A65DAD060F89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3314#more-3314",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3314#more-3314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadPICTImage en coders/pict.c de ImageMagick 7.0.6-3 permite que atacantes remotos provoquen una denegación de servicio (filtrado de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/620",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T20:29:01.120",
      "lastModified" : "2025-10-22T00:16:04.740",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de salto de directorio en el archivo scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS en SAP NetWeaver Application Server Java versión 7.5, permite a los atacantes remotos leer archivos arbitrarios por medio de un .. (punto punto) en la cadena de consulta, tal y como fue explotado “in the wild” en agosto de 2017, también se conoce como Nota de Seguridad de SAP 2486657."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2025-03-19",
      "cisaActionDue" : "2025-04-09",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "SAP NetWeaver Directory Traversal Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://web.archive.org/web/20170807202056/http://www.sh0w.top/index.php/archives/7/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12637",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T20:29:01.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en NexusPHP version v1.5 mediante el parámetro query de log.php en una acción dailylog."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lu4n.com/cve/1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T20:29:01.183",
      "lastModified" : "2023-11-07T02:49:52.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its requester. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WritePDFImage en coders/pdf.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100232",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/bd40cc5f53067322861b881485cbd70f509f3829",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/576",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/bd40cc5f53067322861b881485cbd70f509f3829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WriteMAPImage en coders/map.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/1dc0ac5016f1c4d50b100a086526d6a2453a5444",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/573",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/1dc0ac5016f1c4d50b100a086526d6a2453a5444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WritePALMImage en coders/palm.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/0417cea1b6d72f90bd4f1f573f91e42a8ba66a89",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/574",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/0417cea1b6d72f90bd4f1f573f91e42a8ba66a89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WritePICTImage en coders/pict.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c1b09bbec148f6ae11d0b686fdb89ac6dc0ab14e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/577",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c1b09bbec148f6ae11d0b686fdb89ac6dc0ab14e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WriteINLINEImage en coders/inline.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100226",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d5559407ce29f4371e5df9c1cbde65455fe5854c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/572",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d5559407ce29f4371e5df9c1cbde65455fe5854c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\\mat.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtrado de memoria en ReadMATImage en coders\\mat.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/bfb7915d4b2e11acb6a819e451c382dc645277db",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/553",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/bfb7915d4b2e11acb6a819e451c382dc645277db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WritePCXImage en coders/pcx.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/2ba8f335fa06daf1165e0878462686028e633a74",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/575",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/2ba8f335fa06daf1165e0878462686028e633a74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WriteCALSImage en coders/cals.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/73b6c35cede48ccb2e29dbe62c2d77488e5e70b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/571",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/73b6c35cede48ccb2e29dbe62c2d77488e5e70b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema en ImageMagick 7.0.6-3 de falta de validación en coders/mat.c, que conduce a un fallo de aserción en la función DestroyImage en MagickCore/image.c. Esto provoca que los atacantes puedan causar denegaciones de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/610",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema de falta de asignación NULL en ImageMagick 7.0.6-3 en coders/mat.c, que conduce a una liberación no válida (invalid free) en la función DestroyImage en MagickCore/image.c. Esto provoca que los atacantes puedan causar denegaciones de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/621",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-3 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/617",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-3 en la función ReadOneMNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/619",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de CPU en ImageMagick 7.0.6-2 en la función ReadPDBImage en coders/pdb.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/604",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema en ImageMagick 7.0.6-3 de falta de comprobación de datos multidimensionales en coders/mat.c, que conduce a una fuga de memoria en la función ReadImage en MagickCore/constitute.c. Esto provoca que los atacantes puedan causar denegaciones de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/616",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-07T21:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-3 en la función ReadOneJNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/618",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6866",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-07T23:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0.0.2) that could allow an authenticated low-privileged remote user to gain read access to data in the XHQ solution exceeding his configured permission level."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en el servidor Siemens XHQ 4 y 5 (4, en versiones anteriores a V4.7.1.3 y 5,en versiones anteriores a V5.0.0.2) que podría permitir que un usuario remoto con pocos privilegios obtuviera acceso de lectura a los datos de la solución XHQ que requieren un nivel de permisos superior al que tiene configurado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:xhq_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1.2",
            "matchCriteriaId" : "3DF7D4D0-548A-4E45-A279-FA2A0F32EA9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:xhq_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.0.1",
            "matchCriteriaId" : "0204E2A9-AA1D-42D8-A5B3-939DB37D581C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99247",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-945660.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-945660.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6869",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted network packets to port 443/TCP or port 80/TCP."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens ViewPort para Web Office Portal antes de su revisión número 1453 que podría permitir que un usuario remoto sin autenticar subiese código arbitrario y lo ejecutase con los permisos del usuario del sistema operativo que administra el servidor web mediante el envío de paquetes de red especialmente manipulados al puerto 443/TCP o al puerto 80/TCP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:viewport_for_web_office_portal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6111D7-BEBE-42C6-9997-E58E5E9A20C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99343",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-545214.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-545214.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6870",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SIMATIC WinCC Sm@rtClient para Android (todas las versiones anteriores a la V1.0.2.2). La implementación del protocolo TLS existente podría permitir que un atacante lea y modifique datos en una sesión TLS mientras realiza un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_sm\\@rtclient:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.0.2.1",
            "matchCriteriaId" : "2B041048-D9F4-4F84-9454-8744BF2708EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99582",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6871",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SIMATIC WinCC Sm@rtClient para Android (todas las versiones anteriores a la V1.0.2.2) y SIMATIC WinCC Sm@rtClient para Android Lite (todas las versiones anteriores a la V1.0.2.2). Un atacante con acceso físico a un dispositivo móvil desbloqueado que esté ejecutando la app afectada podría eludir el mecanismo de autenticación de la app bajo ciertas condiciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_sm\\@rtclient:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.0.2.1",
            "matchCriteriaId" : "2B041048-D9F4-4F84-9454-8744BF2708EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_sm\\@rtclient_lite:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.0.2.1",
            "matchCriteriaId" : "F92BEB88-D33F-40EB-8D22-9E86160336E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99582",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6872",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker with access to port 21/tcp to access or alter historical measurement data stored on the device."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens OZW672 (todas las versiones) y OZW772 (todas las versiones) que podría permitir que un atacante con acceso al puerto 21/tcp accediese o alterase el histórico de datos de medición guardado en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ozw772_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD525AE-EFE3-45DA-A282-40509B4EEFB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ozw772:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76AA89B-3B42-4A6D-858D-63F503D8F953"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ozw672_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917679B1-91CD-4A63-A336-85EED243837A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ozw672:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B44996E-361B-4A33-BCBA-E834612D891E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99473",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-563539.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-563539.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6873",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/tcp."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens OZW672 (todas las versiones) y OZW772 (todas las versiones) que podría permitir que un atacante leyese y manipulase datos en una sesión TLS mientras realiza un ataque Man-in-the-Middle (MitM) en el servidor web integrado en el puerto 443/tcp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ozw772_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD525AE-EFE3-45DA-A282-40509B4EEFB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ozw772:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76AA89B-3B42-4A6D-858D-63F503D8F953"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ozw672_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917679B1-91CD-4A63-A336-85EED243837A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ozw672:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B44996E-361B-4A33-BCBA-E834612D891E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99473",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-563539.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-563539.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9938",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SIMATIC Logon (todas las versiones anteriores a la V1.6) que podría permitir que se enviasen paquetes especialmente manipulados al servicio SIMATIC Logon Remote Access en el puerto 16389/tcp para provocar una denegación de servicio. El servicio se reinicia automáticamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_logon:*:sp3_update_2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "16917185-6CDC-4D28-BE16-AC0DA0504995"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99539",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-804859.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-34",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-804859.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9939",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SiPass integrated (todas las versiones anteriores a la V2.70) que podría permitir que un atacante con acceso red al servidor SiPass integrated omitiese el mecanismo de autenticación y realizase operaciones administrativas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sipass_integrated:*:sp2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.65",
            "matchCriteriaId" : "2375DDBA-DBFD-49DB-9B13-0D832E21146B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9940",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SiPass integrated (todas las versiones anteriores a la V2.70) que podría permitir que un atacante con acceso a una cuenta de usuario con pocos privilegios leyese o escribiese archivos en el sistema de archivos del servidor SiPass integrated en la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sipass_integrated:*:sp2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.65",
            "matchCriteriaId" : "2375DDBA-DBFD-49DB-9B13-0D832E21146B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9941",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SiPass integrated (todas las versiones anteriores a la V2.70) que podría permitir que un atacante en posición Man-in-the-Middle entre el servidor SiPass integrated y los clientes SiPass integrated leyese o modificase la comunicación de red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sipass_integrated:*:sp2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.65",
            "matchCriteriaId" : "2375DDBA-DBFD-49DB-9B13-0D832E21146B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9942",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-08T00:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Siemens SiPass integrated (todas las versiones anteriores a la V2.70) que podría permitir que un atacante con acceso local al servidor SiPass integrated o al cliente SiPass integrated obtuviese credenciales de los sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sipass_integrated:*:sp2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.65",
            "matchCriteriaId" : "2375DDBA-DBFD-49DB-9B13-0D832E21146B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-08T01:34:00.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the IdentityServer authorization response."
      }, {
        "lang" : "es",
        "value" : "IdentityServer3 2.4.x, 2.5.x, y 2.6.x en las versiones anteriores a 2.6.1 tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en una expresión angular en la página de respuesta de autorización. Esto podría permitir que atacantes remotos consigan información sensible sobre la respuesta de autorización IdentityServer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identityserver:identityserver3:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF405C9-6A11-4C7D-90B9-F8A5BDD0FAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identityserver:identityserver3:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC186893-6E04-43D5-8084-6EDE5F93F28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identityserver:identityserver3:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1419C7-0715-4D76-8782-98ACBA213FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identityserver:identityserver3:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0399752-06F5-4B8E-AE29-028C628C3748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identityserver:identityserver3:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359AD70A-EFAC-4F4F-9AE3-AC155BDA9A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identityserver:identityserver3:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD2B612-6047-4ACB-A5A5-801CDC5E012A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IdentityServer/IdentityServer3/releases/tag/2.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityServer/IdentityServer3/releases/tag/2.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-08T01:34:00.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "En TagLib 1.11.1, la función rebuildAggregateFrames en id3v2framefactory.cpp tiene una vulnerabilidad del tipo pointer to cast, que permite que atacantes remotos provoquen una denegación de servicio u otro tipo de errores no especificados mediante un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taglib:taglib:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA80713-7FB3-4FBC-B1A8-D9B84913CA53"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/taglib/taglib/issues/829",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/taglib/taglib/pull/831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/09/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/taglib/taglib/issues/829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/taglib/taglib/pull/831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/09/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10000",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: Reporting). Las versiones soportadas que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad de fácil esplotación permite que un atacante con pocos privilegios con acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Aunque la vulnerabilidad está presente en Oracle Hospitality Reporting and Analytics, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga bloquear o cerrar repetidamente (ataque DoS completo) Oracle Hospitality Reporting and Analytics sin autorización. CVSS 3.0 Base Score 7.7 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10001",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 1.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony First Edition accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Simphony First Edition accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Simphony First Edition. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony First Edition de Oracle Hospitality Applications (subcomponente: Core). La versión compatible afectada es la 1.7.1. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony First Edition. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso total a todos los datos accesibles de Oracle Hospitality Simphony First Edition, así como en la actualización, inserción o eliminación de acceso sin autorización de algunos de los datos accesibles de Oracle Hospitality Simphony First Edition. Además, también puede dar lugar a que el atacante consiga bloquear o cerrar repetidamente Oracle Hospitality Simphony First Edition sin autorización. CVSS 3.0 Base Score 7.6. (Impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C :H/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:1.7.1:*:*:*:first:*:*:*",
            "matchCriteriaId" : "A7B30694-D33F-4FE0-959A-D1681F0223E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10002",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Settings and Config). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Inventory Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Inventory Management de Oracle Hospitality Applications (subcomponente: Settings and Config). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios con acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Inventory Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso sin autorización de algunos de los datos accesibles de Oracle Hospitality Inventory Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Inventory Management. CVSS 3.0 Base Score 5.4 (Impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_inventory_management:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E629BF-1404-44E1-932B-11D7128DF984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_inventory_management:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6AFFF1-D94F-4B0F-9792-5996DB24D01B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99699",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10003",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network Services Library). The supported version that is affected is 10. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Network Services Library). La versión compatible afectada es la 10. Esta vulnerabilidad de difícil explotación permite que un atacante con pocos privilegios que pueda iniciar sesión en la infraestructura en la que se ejecuta Solaris comprometa la seguridad de Solaris. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Solaris, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Solaris. Además, el atacante puede conseguir provocar una denegación de servicio parcial (DoS parcial) de Solaris. CVSS 3.0 Base Score 4.5 (Impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99848",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10004",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). Las versiones compatibles que se han visto afectadas son la 10 y la 11. Esta vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga la posibilidad de iniciar sesión en la infraestructura en la que se ejecuta Solaris comprometa la seguridad de Solaris. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Solaris. CVSS 3.0 Base Score 6.7 (Impactos a la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99843",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10005",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Esta vulnerabilidad de fácil explotación permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Para que el ataque tenga éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle FLEXCUBE Private Banking, los ataques también podrían causar impactos serios en productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso a la actualización, inserción o supresión sin autorización a algunos de los datos accesibles de Oracle FLEXCUBE Private Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 6.1 (Impactos a la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99766",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10006",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en la creación, supresión o modificación no autorizada de datos de suma importancia o de todos los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 6.5 (Impactos a la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99716",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10007",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Esta vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios con acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 4.3 (Impactos a la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99812",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10008",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Miscellaneous). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios con acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 4.3 (Impactos a la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100266",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10009",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: varios). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Esta vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 4.3 (Impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10010",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: FileUploads). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: FileUploads). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Private Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 4.6 (Impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99829",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10011",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle FLEXCUBE Private Banking executes to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: varios). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que pueda iniciar sesión en la infraestructura en la que se ejecuta Oracle FLEXCUBE Private Banking comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.5 (Impactos en la confidencialidad). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99675",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10012",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Operations). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Private Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99862",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10013",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: User Interface). La versión compatible afectada es la AK 2013. Una vulnerabilidad de difícil explotación permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Sun ZFS Storage Appliance Kit (AK). Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Sun ZFS Storage Appliance Kit (AK), los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 8.3 (Impactos en la confidencialidad, integridad y disponibilidad). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit_software:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06E5C2E-66BF-434F-9137-B256450C00EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99833",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10015",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Designer). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Application Designer). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad de difícil explotación permite que un atacante con pocos privilegios con inicio de sesión en la infraestructura en la que se ejecuta PeopleSoft Enterprise PeopleTools comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99819",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10016",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: User Interface). La versión compatible afectada es la AK 2013. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Sun ZFS Storage Appliance Kit (AK). Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.5 (Impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit_software:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06E5C2E-66BF-434F-9137-B256450C00EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99855",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10017",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workcenter). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Workcenter). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad de fácil explotación permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (Impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99784",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10018",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FSCM de Oracle PeopleSoft Products (subcomponente: Strategic Sourcing). La versión compatible afectada es la 9.2. Una vulnerabilidad de fácil explotación permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise FSCM. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise FSCM. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_strategic_sourcing:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B732E320-417F-40CE-9458-F80C9AE6AE1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99811",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10019",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Integration Broker). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.4 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99735",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10020",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Updates Change Assistant). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad difícilmente explotable permite que un atacante con pocos privilegios que tenga la posibilidad de iniciar sesión en la infraestructura en la que se ejecuta PeopleSoft Enterprise PeopleTools comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99825",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10021",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: PIA Search). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99768",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10022",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Operations). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99864",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10023",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: Operations). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99816",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10024",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Layout Tools). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como acceso a la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99723",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10025",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: BI Publisher Security). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99697",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10027",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Fluid Homepage Navigation). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99803",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10028",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Web Server). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en las confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99724",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10029",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Web Server). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99738",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10030",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Web Server). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red po HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99740",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10031",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications (subcomponent: Mail Proxy (dojo)). Supported versions that are affected are 3.0 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Convergence. While the vulnerability is in Oracle Communications Convergence, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Convergence accessible data as well as unauthorized read access to a subset of Oracle Communications Convergence accessible data. CVSS 3.0 Base Score 7.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Communications Convergence de Oracle Communications Applications (subcomponente: Mail Proxy (dojo)). Las versiones compatibles que se han visto afectadas son la 3.0 y la 3.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Communications Convergence. Aunque la vulnerabilidad está presente en Oracle Communications Convergence, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Communications Convergence, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Communications Convergence. CVSS 3.0 Base Score 7.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_convergence:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09084476-F7CE-44C6-861E-BC81CAF5BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_convergence:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AD8F01-F325-486E-ADAA-5A5C219EEDA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99720",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038945",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10032",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List). Supported versions that are affected are 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 and 6.4.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Transportation Management de Oracle Supply Chain Products Suite (subcomponente: Access Control List). Las versiones compatibles que se han visto afectadas son la 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 y 6.4.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Transportation Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Transportation Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Transportation Management. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DC0CF3-9940-492F-910B-2DF677A630F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4710A19E-BDEA-468C-A7E9-63C36AFCC515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DC86F9-25C7-43BA-A4EA-4EFA4C73F3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6799DFB4-DAE6-4D32-924C-1941EAAB03A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053492A-2648-4FF4-BC04-26EE0066A462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6C3331-91FB-4D74-91DA-1B6EEB3D67D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191FA9F9-A97A-470F-B92B-A4EB2BC3CB27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99686",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10035",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Web Server). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0 y la 11.1.1.9.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99741",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10036",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NFSv4). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFSv4 to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: NFSv4). Las versiones compatibles que se han visto afectadas son la 10 y la 11. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por NFSv4 comprometa la seguridad de Solaris. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Solaris. CVSS 3.0 Base Score 7.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99840",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10038",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Las versiones compatibles que se han visto afectadas son la 15.1, 15.2 y la 16.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Primavera P6 Enterprise Project Portfolio Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99751",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10039",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Web Client). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Agile PLM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 6.8 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED43772F-D280-42F6-A292-7198284D6FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99657",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10040",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Content de Oracle Fusion Middleware (subcomponente: Content Server). Las versiones compatibles que se han visto afectadas son la 11.1.1.9.0 y la 12.2.1.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebCenter Content. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle WebCenter Content, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de datos de un nivel de importancia crítico o de todos los datos accesibles de Oracle WebCenter Content, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle WebCenter Content. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB7ABDC-88C1-465B-9C9B-301AB02F2487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0CC508-1DB4-4429-94BA-1AD7C4BC963F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99801",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10041",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Web Server). Las versiones compatibles que se han visto afectadas son la 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un nivel bajo de privilegios que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher, así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 7.6 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15A37F2-37B0-4AAF-B827-9BE8B9F008BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5741273E-EA18-4708-8FFC-D413B016E5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99742",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10042",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: IKE). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via IKE to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: IKE). Las versiones compatibles que se han visto afectadas son la 10 y la 11. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por IKE comprometa la seguridad de Solaris. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Solaris. CVSS 3.0 Base Score 7.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99838",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10043",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: BI Publisher Security). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0 y la 11.1.1.9.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher, así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99696",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10044",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: Reporting). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Reporting and Analytics, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99714",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10045",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Integration Broker). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso en red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99806",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10046",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Las versiones compatibles que se han visto afectadas son la 8.3, 8.4, 15.1, 15.2 y la 16.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un nivel bajo de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Primavera P6 Enterprise Project Portfolio Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Primavera P6 Enterprise Project Portfolio Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Primavera P6 Enterprise Project Portfolio Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99770",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44141/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44141/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10047",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MICROS BellaVita component of Oracle Hospitality Applications (subcomponent: Interface). The supported version that is affected is 2.7.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS BellaVita. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MICROS BellaVita accessible data as well as unauthorized read access to a subset of MICROS BellaVita accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MICROS BellaVita de Oracle Hospitality Applications (subcomponente: Interface). La versión compatible afectada es la 2.7.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de MICROS BellaVita. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de MICROS BellaVita, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de MICROS BellaVita. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_bellavita:2.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA18A1C2-C01F-420C-B384-467E899ADCA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99661",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10048",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Enterprise Repository component of Oracle Fusion Middleware (subcomponent: Web Interface). Supported versions that are affected are 11.1.1.7.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Repository. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Repository, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Repository accessible data as well as unauthorized update, insert or delete access to some of Oracle Enterprise Repository accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Enterprise Repository de Oracle Fusion Middleware (subcomponente: Web Interface). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0 y la 12.1.3.0.0. Un vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Enterprise Repository. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Enterprise Repository, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Enterprise Repository; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle Enterprise Repository. CVSS 3.0 Base Score 8.2 (ipactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69300B13-8C0F-4433-A6E8-B2CE32C4723D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_repository:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E13DD9-F456-4802-84AD-A2A1F12FE999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99771",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10049",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core CRM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core CRM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core CRM accessible data as well as unauthorized read access to a subset of Siebel Core CRM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente OSiebel Core CRM de Oracle Siebel CRM (subcomponente: Search). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Siebel Core CRM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Siebel Core CRM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Siebel Core CRM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Siebel Core CRM. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core-server_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A14AF13-C632-48AB-A8B6-67A4073C44A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core-server_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF403FF-EFCD-48E2-8F4F-D8173E98861E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99626",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038936",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10052",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.740",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PCMServlet). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: PCMServlet). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Agile PLM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99660",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10053",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: 2D). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones en sandbox Java Web Start y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4022E33-B50C-4B0D-8485-F9091B6E57E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider:*:*:*:*:*:clustered_data_ontap:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "C57F75D8-DF7A-49D1-BB27-FF21661107B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider:6.0:*:*:*:*:clustered_data_ontap:*:*",
            "matchCriteriaId" : "74118415-7E65-4D4B-A5E8-51D17CE5B6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "066C2961-E9C4-418E-82AF-1A7C35D5C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "C54F036F-C6F9-47B5-AFFA-DD3C1D08DD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.2.2:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "88B2E009-A457-4C3D-A8CF-84B7F3E8DA90"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99842",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10056",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Property Management Systems). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700 executes to compromise Oracle Hospitality 9700. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality 9700 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality 9700 de Oracle Hospitality Applications (subcomponente: Property Management Systems). La versión compatible afectada es la 4.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que pueda iniciar sesión en la infraestructura en la que se ejecuta Oracle Hospitality 9700 comprometa la seguridad de Oracle Hospitality 9700. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality 9700. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_9700:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90FF2E4-06A9-45AB-A5AD-2C08D295F1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99826",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10057",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Discussion Forum). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Discussion Forum). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99798",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10058",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (subcomponente: Analytics Web Administration). Las versiones compatibles que se han visto afectadas son la 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Esta vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Business Intelligence Enterprise Edition. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Business Intelligence Enterprise Edition, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en el acceso no autorizado a la creación, supresión o modificación de datos de nivel de importancia crítico o de todos los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition. CVSS 3.0 Base Score 6.9 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "523CD57C-43D4-4C79-BA00-A9A65C6588E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3E422CC6-EFD7-4350-911E-43C55C46B128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "61CE24F5-4D90-4F06-89FC-D7C2915C6FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99820",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10059",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Service). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: Mobile Service). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 7.6 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99743",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10061",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:01.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Integration Broker). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 8.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99728",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-038-directory-traversal-vulnerability-integration-gateway-psigw/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-039-file-upload-integration-gateway-psigw-peoplesoft/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-038-directory-traversal-vulnerability-integration-gateway-psigw/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-039-file-upload-integration-gateway-psigw-peoplesoft/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10062",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Oracle Java Web Console). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Oracle Java Web Console). La versión compatible afectada es la 10. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga permisos de inicio de sesión en la infraestructura en la que se ejecuta Solaris comprometa la seguridad de Solaris. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Solaris, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Solaris. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Solaris. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99845",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10063",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Services). Las versiones compatibles que se han visto afectadas son la 10.3.6.0, 12.1.3.0, 12.2.1.1 y la 12.2.1.2. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle WebLogic Server. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle WebLogic Server. CVSS 3.0 Base Score 4.8 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99653",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10064",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality WebSuite8 Cloud Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hospitality WebSuite8 Cloud Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality WebSuite8 Cloud Service accessible data as well as unauthorized read access to a subset of Hospitality WebSuite8 Cloud Service accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality WebSuite8 Cloud Service de Oracle Hospitality Applications (subcomponente: General). Las versiones compatibles que se han visto afectadas son la 8.9.6 y la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Hospitality WebSuite8 Cloud Service. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Hospitality WebSuite8 Cloud Service, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Hospitality WebSuite8 Cloud Service, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Hospitality WebSuite8 Cloud Service. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD6D970-B5CA-416E-A896-019E4DBAF8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2D8BC0-5F99-424A-BBF9-7A0C234C40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83F6AA2-9207-4F6C-AD6B-1E7B8E17A726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981EBDB5-D0E2-42C0-B24B-3DD37CAF2CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100229",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10067",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones de Java Web Start en sandbox o applets de Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4022E33-B50C-4B0D-8485-F9091B6E57E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "066C2961-E9C4-418E-82AF-1A7C35D5C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "C54F036F-C6F9-47B5-AFFA-DD3C1D08DD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.2.2:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "88B2E009-A457-4C3D-A8CF-84B7F3E8DA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99756",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10069",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Payment Interface accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Payment Interface de Oracle Hospitality Applications (subcomponente: Core). La versión compatible afectada es la 6.1.1. Una vulnerabilidad difícilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Payment Interface. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Payment Interface. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payment_interface:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1B74B5-E7B7-4E29-AA78-0A3541803169"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99721",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10070",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Maintenance Folders). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Maintenance Folders). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99762",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10071",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: All Modules). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99866",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10072",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: todos los módulos). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99860",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10073",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle FLEXCUBE Universal Banking, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99850",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10074",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Hotspot). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones de Java Web Start en sandbox o applets de Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 8.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "066C2961-E9C4-418E-82AF-1A7C35D5C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "C54F036F-C6F9-47B5-AFFA-DD3C1D08DD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.2.2:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "88B2E009-A457-4C3D-A8CF-84B7F3E8DA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99731",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10075",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Content de Oracle Fusion Middleware (subcomponente: Content Server). Las versiones compatibles que se han visto afectadas son la 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebCenter Content. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle WebCenter Content, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle WebCenter Content; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle WebCenter Content. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB7ABDC-88C1-465B-9C9B-301AB02F2487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0CC508-1DB4-4429-94BA-1AD7C4BC963F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6093FA14-1827-418D-882C-E53985CD6C42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99807",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10076",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony First Edition Venue Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition Venue Management. While the vulnerability is in Oracle Hospitality Simphony First Edition Venue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony First Edition Venue Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony First Edition Venue Management accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony First Edition Venue Management de Oracle Hospitality Applications (subcomponente: Core). La versión compatible afectada es la 3.9. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony First Edition Venue Management. Aunque la vulnerabilidad está presente en Oracle Hospitality Simphony First Edition Venue Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Simphony First Edition Venue Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Simphony First Edition Venue Management. CVSS 3.0 Base Score 6.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony_first_edition_venue_management:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877CC038-DDF1-44AB-9B6A-215A8A4C4C41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99666",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10078",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Scripting). La versión compatible afectada es Java SE: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Java SE. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de datos confidenciales o de todos los datos accesibles de Java SE, así como el acceso sin autorización a datos de un nivel de importancia crítico o todos los datos accesibles de Java SE. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start en sandbox o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 8.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "066C2961-E9C4-418E-82AF-1A7C35D5C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "C54F036F-C6F9-47B5-AFFA-DD3C1D08DD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.2.2:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "88B2E009-A457-4C3D-A8CF-84B7F3E8DA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99752",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10079",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suites Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suites Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suites Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suites Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suites Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suites Management de Oracle Hospitality Applications (subcomponente: Core). La versión compatible afectada es la 3.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suites Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Suites Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Suites Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Suites Management. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suites_management:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D90245-30CF-4C02-80E3-B26D3A4D25B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99684",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10080",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.490",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Agile PLM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99669",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10081",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Hotspot). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que sólo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "066C2961-E9C4-418E-82AF-1A7C35D5C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "C54F036F-C6F9-47B5-AFFA-DD3C1D08DD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.2.2:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "88B2E009-A457-4C3D-A8CF-84B7F3E8DA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99853",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10082",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.553",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Agile PLM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99673",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10083",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle FLEXCUBE Universal Banking, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99844",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10084",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Report Generator). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99836",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10085",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle FLEXCUBE Universal Banking; así como a la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99628",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10086",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: JavaFX). Las versiones compatibles que se han visto afectadas son JavaSE: 7u141 y 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionStartIncluding" : "7.1",
            "matchCriteriaId" : "BB6FD3C7-7214-4E28-9A88-FBA91F2A4277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.1",
            "matchCriteriaId" : "A85C4E34-7F3B-4137-9D4C-9C80490B3409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4022E33-B50C-4B0D-8485-F9091B6E57E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4005",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99662",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10087",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Libraries). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4022E33-B50C-4B0D-8485-F9091B6E57E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:vmware_vsphere:*:*:*",
            "matchCriteriaId" : "670A4C5C-8FB1-4B7C-9E05-ACF110E95CCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99703",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10088",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.740",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 3.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante con muchos privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Agile PLM comprometa la seguridad de Oracle Agile PLM. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 3.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99698",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10089",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: ImageIO). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99659",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10090",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Libraries). Las versiones compatibles que se han visto afectadas son JavaSE: 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99706",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10091",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. While the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Enterprise Manager Base Platform de Oracle Enterprise Manager Grid Control (subcomponente: UI Framework). Las versiones compatibles que se han visto afectadas son la 12.1.0, 13.1.0 y la 13.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Enterprise Manager Base Platform. Aunque la vulnerabilidad está presente en Enterprise Manager Base Platform, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de datos de suma importancia o de todos los datos accesibles de Enterprise Manager Base Platform. CVSS 3.0 Base Score 7.7 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6511F08F-4F2A-47DD-867D-687607EBC5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EED735-EC5C-470F-A14C-F566D4DCCEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9325CD6E-DB11-432D-A13D-3E353D52C66E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99649",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038930",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10092",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.867",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Agile PLM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99677",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10093",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.897",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99692",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10094",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:02.943",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Agile PLM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99680",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10095",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). La versión compatible afectada es la 11. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con permisos de inicio de sesión en la infraestructura en la que se ejecuta Solaris comprometa la seguridad de Solaris. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Solaris. CVSS 3.0 Base Score 3.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99849",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10096",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: JAXP). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99670",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10097",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: Reporting). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Reporting and Analytics, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Reporting and Analytics, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99679",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10098",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Infrastructure). Las versiones compatibles que se han visto afectadas son la 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 y la 12.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB2438-6836-4632-A344-3486F0661D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99856",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10100",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: HTML Area). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99759",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10101",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: JAXP). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99674",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10102",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: RMI). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red mediante múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad sólo puede ser explotada proporcionando datos a las API en los Componentes especificados sin emplear aplicaciones Java Web Start que no son de confianza o applets Java que no son de confianza, como a través de un servicio web. CVSS 3.0 Base Score 9.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4022E33-B50C-4B0D-8485-F9091B6E57E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99712",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10103",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Private Banking de Oracle Financial Services Applications (subcomponente: varios). Las versiones compatibles que se han visto afectadas son la 2.0.0, 2.0.1, 2.2.0 y 12.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Private Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD2C28-65DB-43F6-9F79-DB672C9C1165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCECB33-4CA3-4519-A733-3529B70AB9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715C8EF-DAC6-487F-89F4-52713BB7F663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CCF1EE-70D3-40C9-9797-AE6228DA8522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99750",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10104",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Java Advanced Management Console. While the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java Advanced Management Console. CVSS 3.0 Base Score 7.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión compatible afectada es Java Advanced Management Console: 2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Java Advanced Management Console. Aunque la vulnerabilidad está presente en Java Advanced Management Console, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Java Advanced Management Console; el acceso de lectura sin autorización a un subconjunto de datos accesibles de Java Advanced Management Console; y la capacidad no autorizada de un atacante para provocar una denegación de servicio parcial (DoS parcial) de Java Advanced Management Console. CVSS 3.0 Base Score 7.4 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15058582-065B-4EDA-834C-0F192F10A979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99797",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10105",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Deployment). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99851",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10106",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Portal). Las versiones compatibles que se han visto afectadas son la 8,54 y la 8,55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99777",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-037-multiple-xss-vulnerabilities-testservlet-peoplesoft/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-037-multiple-xss-vulnerabilities-testservlet-peoplesoft/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10107",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: RMI). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99719",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10108",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start en sandbox o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212E1878-1B9A-4CB4-A1CE-EAD60B867161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:7.1:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "A692982A-DED0-42C8-BC5B-F25314309F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99846",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10109",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99847",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10110",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: AWT). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99643",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10111",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Libraries). La versión compatible afectada es Java SE: 8u131; Java SE Embedded: 8u131. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99707",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10112",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: User Registration). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso acceso a red por HTTP comprometa la seguridad de Oracle iStore. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iStore, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle iStore; así como la actualización, inserción o supresión no autorizada de algunos de los datos accesibles de Oracle iStore. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99663",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10113",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications de Oracle E-Business Suite (subcomponente: CRM User Management Framework). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Common Applications. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Common Applications, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Common Applications; así como la actualización, inserción o eliminación de acceso no autorizada de algunos de los datos accesibles de Oracle Common Applications. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F4DED6-1E2A-4DD4-8D90-BD319DF993AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27227D-8844-4D2E-979D-91AAA657155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C9C61-EFCD-41CD-8EFB-A9ECBD7DCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20D8C53-46D2-409B-B24A-B6023F6DF4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0505D42-88E5-4DB5-BB6E-473522DF2B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99639",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10114",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: JavaFX). Las versiones compatibles que se han visto afectadas son JavaSE: 7u141 y 8u131. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 8.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4005",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99726",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10115",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: JCE). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start en sandbox o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99774",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10116",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, Java SE Embedded y JRockit, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start en sandbox o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 8.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA4F304-3992-42BA-ABB5-5E3A7A066A42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99734",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10117",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión compatible afectada es Java Advanced Management Console: 2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Java Advanced Management Console. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Java Advanced Management Console. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15058582-065B-4EDA-834C-0F192F10A979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99835",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10118",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: JCE). Las versiones compatibles que se han visto afectadas son Java SE: 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start en sandbox o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99782",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10119",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: OSB Web Console Design, Admin). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Service Bus, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Bus accessible data as well as unauthorized update, insert or delete access to some of Oracle Service Bus accessible data. CVSS 3.0 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Service Bus de Oracle Fusion Middleware (subcomponente: OSB Web Console Design, Admin). La versión compatible afectada es la 11.1.1.9.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Service Bus. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Service Bus, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Service Bus; así como la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Service Bus. CVSS 3.0 Base Score 7.6 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2B6C75-3EB5-4BCE-B5D1-39DD3DE94139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99813",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10120",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS Security accessible data. CVSS 3.0 Base Score 1.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente RDBMS Security de Oracle Database Server. La versión compatible afectada es la 12.1.0.2. Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios (Create Session, Select Any Dictionary) y con permisos de inicio de sesión en la infraestructura en la que se ejecuta RDBMS Security comprometa la seguridad de RDBMS Security. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de RDBMS Security. CVSS 3.0 Base Score 1.9 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99867",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038923",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10121",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:03.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión soportada afectada es Java Advanced Management Console: 2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Java Advanced Management Console. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java Advanced Management Console, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Java Advanced Management Console, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Java Advanced Management Console. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15058582-065B-4EDA-834C-0F192F10A979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99832",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10122",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS 3.0 Base Score 1.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: Kernel). Las versiones compatibles que se han visto afectadas son la 10 y la 11. Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios con permisos de inicio de sesión en la infraestructura en la que se ejecuta Solaris comprometa la seguridad de Solaris. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Solaris. CVSS 3.0 Base Score 1.8 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 1.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99852",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10123",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Container). La versión compatible afectada es la 12.1.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99650",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10125",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Deployment). Las versiones compatibles que se han visto afectadas son Java SE: 7u141 y 8u131. Una vulnerabilidad difícilmente explotable permite el acceso físico, lo que compromete la seguridad de Java SE. Aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Se aplica a la implementación de Java cuando Java Auto Update está habilitado. CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99809",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10126",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: HTML Area). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99760",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10128",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality WebSuite8 Cloud Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hospitality WebSuite8 Cloud Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality WebSuite8 Cloud Service accessible data as well as unauthorized read access to a subset of Hospitality WebSuite8 Cloud Service accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality WebSuite8 Cloud Service de Oracle Hospitality Applications (subcomponente: General). Las versiones compatibles que se han visto afectadas son la 8.9.6 y la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Hospitality WebSuite8 Cloud Service. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Hospitality WebSuite8 Cloud Service, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Hospitality WebSuite8 Cloud Service, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Hospitality WebSuite8 Cloud Service. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD6D970-B5CA-416E-A896-019E4DBAF8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2D8BC0-5F99-424A-BBF9-7A0C234C40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83F6AA2-9207-4F6C-AD6B-1E7B8E17A726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981EBDB5-D0E2-42C0-B24B-3DD37CAF2CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99676",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10129",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y con permiso de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99638",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42426/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42426/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10130",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: User Management). Las versiones soportadas que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle iStore. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iStore, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle iStore; así como la actualización, inserción o supresión de acceso sin autorización de algunos de los datos accesibles de Oracle iStore. CVSS 3.0 Base Score 7.6 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99678",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10131",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Las versiones compatibles que se han visto afectadas son la 8.3, 8.4, 15.1, 15.2, 16.1 y la 16.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Primavera P6 Enterprise Project Portfolio Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Primavera P6 Enterprise Project Portfolio Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Primavera P6 Enterprise Project Portfolio Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Primavera P6 Enterprise Project Portfolio Management. Además, esto puede dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99757",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10132",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/iOS). The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Hotel Mobile de Oracle Hospitality Applications (subcomponente: Suite8/iOS). La versión compatible afectada es la 1.05. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Hospitality Hotel Mobile. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Hospitality Hotel Mobile. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_hotel_mobile:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA56D3-D94C-4DB2-9A5C-7A8CE8CCF5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99769",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10133",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RestAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Hotel Mobile de Oracle Hospitality Applications (subcomponente: Suite8/RestAPI). La versión compatible afectada es la 1.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Hospitality Hotel Mobile. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Hospitality Hotel Mobile. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_hotel_mobile:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB46D614-C880-41F7-ABCC-707C0F127F84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99763",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10134",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eProcurement). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise FSCM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FSCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FSCM de Oracle PeopleSoft Products (subcomponente: eProcurement). La versión compatible afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise FSCM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise FSCM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise FSCM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise FSCM. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9938A25-0584-4666-BAF3-42257CB94F4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10135",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: JCE). Las versiones compatibles que se han visto afectadas son Java SE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 5.9 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212E1878-1B9A-4CB4-A1CE-EAD60B867161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99839",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10136",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Import/Export). La versión compatible afectada es la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Applications. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10137",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: JNDI). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: JNDI). Las versiones compatibles que se han visto afectadas son la 10.3.6.0 y la 12.1.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Aunque la vulnerabilidad está presente en Oracle WebLogic Server, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server. CVSS 3.0 Base Score 10.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99634",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10141",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data. CVSS 3.0 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). La versión compatible afectada es la 8.5.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Outside In Technology. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle Outside In Technology, así como la actualización, inserción o eliminacisupresión sin autorización de algunos de los datos accesibles de Oracle Outside In Technology. CVSS 3.0 Base Score 8.2 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E641F594-9A34-4AA5-8C3F-E44B0C35A625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99785",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10142",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Mobile Apps). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: Mobile Apps). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Reporting and Analytics, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99710",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10143",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: Preferences). Las versiones soportadas que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle CRM Technical Foundation. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle CRM Technical Foundation, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation, así como la actualización, inserción o supresión sin autorización de alguna información accesibles de Oracle CRM Technical Foundation. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA70943-1CEE-4520-A304-1DAA26EAF4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6436020A-CEFD-4197-8DEF-9DE173B8F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6481EF2E-3030-4162-B142-97FF254FA581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18AC792-50EE-4EC7-8449-089D3D790D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99633",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10144",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Applications Manager. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications Manager de Oracle E-Business Suite (subcomponente: Oracle Diagnostics Interfaces). La versión compatible afectada es la 12.1.3. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Applications Manager. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle Applications Manager. CVSS 3.0 Base Score 7.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FDF7A2-A97E-46CD-8F20-BF4A1C4F0058"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99685",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10145",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java Advanced Management Console. While the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java Advanced Management Console. CVSS 3.0 Base Score 7.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión soportada afectada es Java Advanced Management Console: 2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java Advanced Management Console. Aunque la vulnerabilidad está presente en Java Advanced Management Console, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Java Advanced Management Console, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Java Advanced Management Console. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java Advanced Management Console. CVSS 3.0 Base Score 7.4 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15058582-065B-4EDA-834C-0F192F10A979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99804",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10146",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Portal). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 8.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99732",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-040-anonymous-directory-traversal-vulnerability-double-encode-peoplesoft/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-040-anonymous-directory-traversal-vulnerability-double-encode-peoplesoft/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10147",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 8.6 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). NOTE: the previous information is from the July 2017 CPU. Oracle has not commented on third-party claims that this issue exists in the migrate functionality in the WebLogic/cluster/singleton/ServerMigrationCoordinator class and allows remote attackers to shutdown the server via a crafted T3 request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Core Components). Las versiones compatibles que se han visto afectadas son la 10.3.6.0, 12.1.3.0, 12.2.1.1 y la 12.2.1.2. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso en red vía T3 comprometa la seguridad de Oracle WebLogic Server. Aunque la vulnerabilidad está presente en Oracle WebLogic Server, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en la habilidad no autorizada para provocar un cuelgue o bloqueo repetido frecuentemente (DOS completo) de Oracle WebLogic Server. CVSS 3.0 Base Score 8.6 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). NOTA: la información previa es del CPU de julio de 2017. Oracle no ha comentado sobre las afirmaciones de terceros de que este problema existe en la funcionalidad de migración en la clase WebLogic/cluster/singleton/ServerMigrationCoordinator y que permite que los atacantes remotos cierren el servidor mediante una petición T3 manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99651",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-041-unauthorized-container-shutdown-servermigrationcoordinator/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://github.com/vah13/OracleCVE/tree/master/CVE-2017-10147",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-041-unauthorized-container-shutdown-servermigrationcoordinator/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vah13/OracleCVE/tree/master/CVE-2017-10147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10148",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N). NOTE: the previous information is from the July 2017 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to inject special data into log files via a crafted T3 request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Core Components). Las versiones compatibles que se han visto afectadas son la 10.3.6.0, 12.1.3.0, 12.2.1.1 y la 12.2.1.2. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso en red vía T3 comprometa la seguridad de Oracle WebLogic Server. Aunque la vulnerabilidad está presente en Oracle WebLogic Server, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualización, inserción o eliminación de acceso no autorizada de algunos de los datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 5.8 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N). NOTA: la información anterior es del CPU de julio de 2017. Oracle no ha respondido a las afirmaciones de terceros indicando que este problema permite que atacantes remotos inyecten datos especiales en archivos de registro mediante una petición T3 manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99652",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-042-anonymous-log-injection-in-fscm/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://github.com/vah13/OracleCVE/tree/master/CVE-2017-10148",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-042-anonymous-log-injection-in-fscm/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vah13/OracleCVE/tree/master/CVE-2017-10148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10149",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera Unifier de Oracle Primavera Products Suite (subcomponente: Platform). Las versiones compatibles que se han visto afectadas son la 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 y la 16.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Primavera Unifier. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Primavera Unifier, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Primavera Unifier, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Primavera Unifier. CVSS 3.0 Base Score 4.8 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63BF9ED-CA82-4533-9217-4215D5F0C1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2889BC-5CA8-454B-A164-316B6A3076DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DDDDD-DF1F-40FA-8712-74415AA8027B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDECEE0D-3CEF-4BB4-93BC-86412DE9F478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8A0650-C1A5-4C5A-8F01-9243531F678F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F274A413-4666-4B62-A152-C7452C474B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55A54FD-7DD1-49CD-BE81-0BE73990943C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EB08C0-2D46-4635-88DF-E54F6452D3A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99780",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10150",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera Unifier de Oracle Primavera Products Suite (subcomponente: Platform). Las versiones soportadas que se han visto afectadas son la 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 y la 16.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Primavera Unifier. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Primavera Unifier. CVSS 3.0 Base Score 4.3 (impactos en integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63BF9ED-CA82-4533-9217-4215D5F0C1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2889BC-5CA8-454B-A164-316B6A3076DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DDDDD-DF1F-40FA-8712-74415AA8027B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDECEE0D-3CEF-4BB4-93BC-86412DE9F478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8A0650-C1A5-4C5A-8F01-9243531F678F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F274A413-4666-4B62-A152-C7452C474B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55A54FD-7DD1-49CD-BE81-0BE73990943C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EB08C0-2D46-4635-88DF-E54F6452D3A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99800",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10156",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: BI Publisher Security). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de BI Publisher; así como la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15A37F2-37B0-4AAF-B827-9BE8B9F008BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5741273E-EA18-4708-8FFC-D413B016E5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99682",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10157",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of BI Publisher accessible data as well as unauthorized read access to a subset of BI Publisher accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente BI Publisher de Oracle Fusion Middleware (subcomponente: BI Publisher Security). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de BI Publisher. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de BI Publisher, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de BI Publisher. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15A37F2-37B0-4AAF-B827-9BE8B9F008BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5741273E-EA18-4708-8FFC-D413B016E5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99694",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10160",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite (subcomponente: Web Access). Las versiones soportadas que se han visto afectadas son la 8.3, 8.4, 15.1, 15.2, 16.1 y la 16.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Primavera P6 Enterprise Project Portfolio Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF6794-2CE6-407F-B8E0-81871AB7B40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021C23-AB9B-4877-833F-D01359A98762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8ED016-32A1-42EE-844E-3E6B2C116B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A046CC2C-445F-4336-8810-930570B4FEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99793",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10168",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite 8/Windows). The supported version that is affected is 1.1. Difficult to exploit vulnerability allows physical access to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Hotel Mobile accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hospitality Hotel Mobile. CVSS 3.0 Base Score 4.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Hotel Mobile de Oracle Hospitality Applications (subcomponente: Suite 8/Windows). La versión compatible afectada es la 1.1. Una vulnerabilidad difícilmente explotable permite el acceso físico, lo que compromete la seguridad de Hospitality Hotel Mobile. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Hospitality Hotel Mobile. Además, esto puede dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Hospitality Hotel Mobile. CVSS 3.0 Base Score 4.6 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_hotel_mobile:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB46D614-C880-41F7-ABCC-707C0F127F84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99841",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10169",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Operation Security). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700 executes to compromise Oracle Hospitality 9700. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality 9700 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality 9700 de Oracle Hospitality Applications (subcomponente: Operation Security). La versión compatible afectada es la 4.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality 9700 comprometa la seguridad de Oracle Hospitality 9700. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality 9700. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_9700:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90FF2E4-06A9-45AB-A5AD-2C08D295F1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99823",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10170",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:04.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Field Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Field Service accessible data as well as unauthorized update, insert or delete access to some of Oracle Field Service accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Field Service de Oracle E-Business Suite (subcomponente: Wireless/WAP). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2 y la 12.1.3. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Field Service. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Field Service, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Field Service; así como la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Field Service. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E658038-CC76-4472-8801-AB598C28762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBC2B42-25DA-4098-98BE-F25EC44F84EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D458D91-3E70-4EBD-906B-EE879A057EBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99647",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10171",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Home Page). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Marketing de Oracle E-Business Suite (subcomponente: Home Page). Las versiones soportadas que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Marketing. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Marketing, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Marketing; así como la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Marketing. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5E189E-FB41-4332-A037-3DDA98746371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00EEA-140F-4652-AF01-5FE522E5D1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEB6C88-B08C-44B2-8330-57B5BD931A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8273378-896F-4EA3-884C-47B31422028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704D9437-039F-46F4-ACC4-C8C10C56E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C98EA8-6D5A-40DF-8232-818C8BB2FB9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99655",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10172",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Framework). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Open Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Open Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Open Commerce Platform de Oracle Retail Applications (subcomponente: Framework). Las versiones compatibles que se han visto afectadas son la 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 y la 15.1. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Retail Open Commerce Platform. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Retail Open Commerce Platform, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Retail Open Commerce Platform, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Retail Open Commerce Platform. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB0E2F7-2697-484B-BD35-23B1022D819D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48C408E-A113-461C-AED4-484006FAE8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2950C923-CB2F-4A09-9272-B2F670E58ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8603FF9-0CBF-4D32-BD99-D6A991DA2484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E8EAD1-68CF-45CC-B188-8ADAF98E6357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B78698-DE10-469A-8B55-9E1123762E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A349926F-1CF0-434F-88BC-710CC71BC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8350140F-4E7D-4B74-B871-A1217D687F25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99737",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10173",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Website). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. While the vulnerability is in Oracle Retail Open Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Open Commerce Platform de Oracle Retail Applications (subcomponente: Website). Las versiones compatibles que se han visto afectadas son la 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 y la 15.1. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Retail Open Commerce Platform. Aunque la vulnerabilidad está presente en Oracle Retail Open Commerce Platform, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Retail Open Commerce Platform. CVSS 3.0 Base Score 5.8 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB0E2F7-2697-484B-BD35-23B1022D819D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48C408E-A113-461C-AED4-484006FAE8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2950C923-CB2F-4A09-9272-B2F670E58ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8603FF9-0CBF-4D32-BD99-D6A991DA2484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E8EAD1-68CF-45CC-B188-8ADAF98E6357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B78698-DE10-469A-8B55-9E1123762E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A349926F-1CF0-434F-88BC-710CC71BC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8350140F-4E7D-4B74-B871-A1217D687F25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99745",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10174",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Service Request). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iSupport de Oracle E-Business Suite (subcomponente: Service Request). Las versiones soportadas que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle iSupport. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iSupport, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle iSupport; así como en la actualización, inserción o supresión de acceso sin autorización de algunos de los datos accesibles de Oracle iSupport. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C39B616-E8F9-4478-9402-962E55FDDB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922FFA2-7265-4AA1-9AFB-792F28EE665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596ADA1-FA00-461B-87B4-D44C0FD1387F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8983A006-E184-4E74-9032-7070CF7E666E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A49365-DADC-46B6-AD8F-51BD82508039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CEE9EB-A0DD-4344-8420-31CF673AB9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89183608-9229-4AB1-BCFB-DF318D02EC34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99664",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10175",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iSupport de Oracle E-Business Suite (subcomponente: Profiles). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle iSupport. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle iSupport. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C39B616-E8F9-4478-9402-962E55FDDB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922FFA2-7265-4AA1-9AFB-792F28EE665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596ADA1-FA00-461B-87B4-D44C0FD1387F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8983A006-E184-4E74-9032-7070CF7E666E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A49365-DADC-46B6-AD8F-51BD82508039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CEE9EB-A0DD-4344-8420-31CF673AB9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89183608-9229-4AB1-BCFB-DF318D02EC34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99717",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10176",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son Java SE: 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start en sandbox o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99788",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10177",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Flexfields). The supported version that is affected is 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application Object Library accessible data as well as unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Object Library de Oracle E-Business Suite (subcomponente: Flexfields). La versión compatible afectada es la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Application Object Library. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, supresión o modificación de datos de un nivel de importancia crítico o de todos los datos accesibles de Oracle Application Object Library, así como el acceso sin autorización a datos de suma importancia o a todas la información accesible de Oracle Application Object Library. CVSS 3.0 Base Score 8.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99672",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10178",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Container). Las versiones compatibles que se han visto afectadas son la 10.3.6.0, 12.1.3.0, 12.2.1.1 y la 12.2.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle WebLogic Server, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle WebLogic Server, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99644",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10179",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported versions that are affected are AMP 12.1.0.4.0 and AMP 13.1.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Management Pack for Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Management Pack for Oracle E-Business Suite accessible data as well as unauthorized read access to a subset of Application Management Pack for Oracle E-Business Suite accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Application Management Pack for Oracle E-Business Suite de Oracle E-Business Suite (subcomponente: User Monitoring). Las versiones compatibles que se han visto afectadas son la AMP 12.1.0.4.0 y la AMP 13.1.1.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Application Management Pack for Oracle E-Business Suite. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Application Management Pack for Oracle E-Business Suite, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Application Management Pack for Oracle E-Business Suite. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_management_pack:12.1.0.4.0:*:*:*:*:e-business_suite:*:*",
            "matchCriteriaId" : "E414BEDE-73AB-4616-8285-1974A8C225DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_management_pack:13.1.1.1.0:*:*:*:*:e-business_suite:*:*",
            "matchCriteriaId" : "4A97C4F0-3913-4123-B289-A2048CDE388B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10180",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: CMRO). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: CMRO). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle CRM Technical Foundation. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle CRM Technical Foundation, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle CRM Technical Foundation. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA70943-1CEE-4520-A304-1DAA26EAF4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6436020A-CEFD-4197-8DEF-9DE173B8F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6481EF2E-3030-4162-B142-97FF254FA581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18AC792-50EE-4EC7-8449-089D3D790D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99630",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10181",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Forgot Password). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Direct Banking as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data and unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Direct Banking de Oracle Financial Services Applications (subcomponente: Forgot Password). Las versiones compatibles que se han visto afectadas son la 12.0.2 y la 12.0.3. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Direct Banking. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle FLEXCUBE Direct Banking, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle FLEXCUBE Direct Banking. CVSS 3.0 Base Score 6.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC13CF11-2880-41FA-9534-7874904FDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA84D97F-A400-4D39-B60A-63F3407E2B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99648",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10182",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (subcomponente: OPERA Export Functionality). Las versiones compatibles que se han visto afectadas son la 5.4.0.x, 5.4.1.x y la 5.4.3.x. Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 4.4 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE431F81-E85E-42B7-B977-B4076A717C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825F9006-E4DD-4583-AAF6-DF73545DF8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB95F1A-0B62-475A-8883-A84D9E3D294F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99725",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10183",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. While the vulnerability is in Oracle Retail Xstore Point of Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Point of Service accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Xstore Point of Service de Oracle Retail Applications (subcomponente: Point of Sale). Las versiones compatibles que se han visto afectadas son la 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x y la 16.0.0. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Retail Xstore Point of Service. Aunque la vulnerabilidad está presente en Oracle Retail Xstore Point of Service, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Retail Xstore Point of Service, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Retail Xstore Point of Service. Además, esto podría dar luegar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85836F6D-F497-42C9-AD5A-91AC7D36C82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A0E714-AC23-49B5-A36C-D10FA4699561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379D4FD1-82B0-466E-8C0F-767B8244DA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E79C8AA-9607-48F5-BD13-4E9CC6A8BBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1223C57-DA2C-42C0-9DCC-6124DF3AE67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87FC90-16D0-4051-8280-B0DD4441F10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702064C8-8CA2-466D-969A-4E21C20CAA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C702023-1827-4A3B-A902-9C234F665CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA46C198-4681-464E-B4A7-1942F161DC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D9152B-ED96-4517-BE51-9F16BFA2413F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6184C9-932C-44C5-BC19-5AAF9B115C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B3354D-3929-4AEC-AAE0-7F573341FD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA365CA-7C4A-4C58-8608-3AFEF38CA841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF67C514-9438-46F9-888D-FAC17A8EF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF21C27-8AF3-4FB3-874B-710874910818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5821027F-DF34-440A-8604-2E85DD45BEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C364E49C-F61E-499D-826C-7D23FF6E7C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55901EF7-B71C-40B3-B276-FDA6381F051F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA6839-849D-4CEF-85F3-38FE75E07183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385D40CC-5AA0-4DAB-A2E7-F3A3CFF95BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B9C6CE-C3B9-4F83-8F09-7AA060C0AD1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99727",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10184",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Field Service accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Field Service de Oracle E-Business Suite (subcomponente: Wireless/WAP). Las versiones soportadas que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una nerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Field Service. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Field Service. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E658038-CC76-4472-8801-AB598C28762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBC2B42-25DA-4098-98BE-F25EC44F84EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D458D91-3E70-4EBD-906B-EE879A057EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E984F348-F290-4E18-96D6-C604E91BE1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D389D1-3B40-43A6-BB03-27AEF0D48BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED3A930-612B-472B-B786-0A649A1343BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:field_service:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A79630-1C3D-4D25-B368-FA4DF3EA55A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99708",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10185",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: User Management). Las versiones soportadas que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle CRM Technical Foundation. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle CRM Technical Foundation, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation; así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle CRM Technical Foundation. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA70943-1CEE-4520-A304-1DAA26EAF4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6436020A-CEFD-4197-8DEF-9DE173B8F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6481EF2E-3030-4162-B142-97FF254FA581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18AC792-50EE-4EC7-8449-089D3D790D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99636",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10186",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User and Company Profile). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: User and Company Profile). Las versiones soportadas que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle iStore. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle iStore. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99715",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10187",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 4.6 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión soportada afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle VM VirtualBox. Ademas, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle VM VirtualBox. CVSS 3.0 Base Score 4.6 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99711",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10188",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite 8/Android). The supported version that is affected is 1.01. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Hotel Mobile executes to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Hotel Mobile de Oracle Hospitality Applications (subcomponente: Suite 8/Android). La versión compatible afectada es la 1.01. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Hospitality Hotel Mobile comprometa la seguridad de Hospitality Hotel Mobile. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Hospitality Hotel Mobile. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_hotel_mobile:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3831193-90D3-499D-956C-E4239EB212E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99817",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10189",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Suite8 executes to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: Leisure). La versión compatible afectada es la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Hospitality Suite8 comprometa la seguridad de Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Hospitality Suite8. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49124BE-9A0A-4005-B57E-91F30446889B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99821",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10191",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Web Analytics component of Oracle E-Business Suite (subcomponent: Common Libraries). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Analytics accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Analytics accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Web Analytics de Oracle E-Business Suite (subcomponente: Common Libraries). Las versiones soportadas que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Web Analytics. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Web Analytics, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Web Analytics; así como en la actualización, inserción o supresión de acceso sin autorización de algunos de los datos accesibles de Oracle Web Analytics. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093C7808-E27A-4852-A14F-7D17674EB769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16ABB788-8351-4E1B-BABE-FC2B1F5A2855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9350D23-8D8C-4518-AC9F-BF45FA5CFC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE322FA9-B1DE-4DCF-A103-CA25BF4FB890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A742A6B-BB08-4CDC-8753-0C1DAFB7BB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77283D1C-7458-4356-B1B5-2B9C9453F6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_analytics:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FAC4A-EEEC-452D-A977-9FF0F9D0738F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99658",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10192",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: Shopping Cart). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle iStore. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle iStore. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99713",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10193",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son Java SE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de aislado Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 3.1 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99854",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10195",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Import/Export). La versión compatible afectada es la 2.8. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Applications. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99805023-76DA-44A5-912E-74074E04B6E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10196",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data. CVSS 3.0 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). La versión compatible afectada es la 8.5.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Outside In Technology. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle Outside In Technology; así como la actualización, inserción o supresión de acceso sin autorización de algunos de los datos accesibles de Oracle Outside In Technology. CVSS 3.0 Base Score 8.2 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E641F594-9A34-4AA5-8C3F-E44B0C35A625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99794",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10198",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Aunque la vulnerabilidad está presente en Java SE, Java SE Embedded y JRockit, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 6.8 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:fl_mguard_dm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "8556AADE-54E7-4D1B-A5AB-D37EF3B4962E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "D8236A99-A6FC-4C71-A506-55B48FCD3A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAA5561-CA42-457A-B63E-96A79258758B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99818",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10199",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages). The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iLearning, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iLearning accessible data as well as unauthorized update, insert or delete access to some of Oracle iLearning accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iLearning de Oracle iLearning (subcomponente: Learner Pages). La versión compatible afectada es la 6.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle iLearning. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iLearning, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle iLearning; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle iLearning. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ilearning:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D361A9A8-15B0-4527-868B-80998772F2AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99637",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038949",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10200",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality e7 accessible data as well as unauthorized read access to a subset of Oracle Hospitality e7 accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality e7 de Oracle Hospitality Applications (subcomponente: Other). La versión compatible afectada es la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que consiga iniciar sesión en la infraestructura en la que se ejecuta Oracle Hospitality e7 comprometa la seguridad de Oracle Hospitality e7. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality e7, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality e7. CVSS 3.0 Base Score 4.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_e7:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2C6B33-8391-408B-A6D3-432986776C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99858",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10201",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality e7 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality e7 de Oracle Hospitality Applications (subcomponente: Other). La versión compatible afectada es la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que consiga iniciar sesión en la infraestructura en la que se ejecuta Oracle Hospitality e7 comprometa la seguridad de Oracle Hospitality e7. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality e7. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_e7:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2C6B33-8391-408B-A6D3-432986776C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99834",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10202",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. While the vulnerability is in OJVM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of OJVM. Note: This score is for Windows platforms. On non-Windows platforms Scope is Unchanged, giving a CVSS Base Score of 8.8. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente OJVM de Oracle Database Server. Las versiones compatibles que se han visto afectadas son la 11.2.0.4, 12.1.0.2 y la 12.2.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos Create Session y Create Procedure que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de OJVM. Aunque la vulnerabilidad está presente en OJVM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de OJVM. Nota: Esta puntuación es para plataformas Windows. En plataformas distintas a Windows, el alcance no cambia, por lo que se da una puntuación base de CVSS de 8.8. CVSS 3.0 Base Score 9.9 (mpactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E221FD4B-190F-4752-9617-FB0C704E7AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99865",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038923",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10204",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:05.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión soportada afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/152617/VirtualBox-COM-RPC-Interface-Code-Injection-Privilege-Escalation.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99631",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42425/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/152617/VirtualBox-COM-RPC-Interface-Code-Injection-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42425/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10205",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Enterprise Management Console). La versión compatible afectada es la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante con un nivel bajo de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10206",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Simphony. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Engagement). La versión compatible afectada es la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Simphony, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Simphony. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Simphony. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99641",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10207",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Utilities). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Utilities). La versión compatible afectada es la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Applications. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99718",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10208",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality e7 accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality e7 de Oracle Hospitality Applications (subcomponente: Other). La versión compatible afectada es la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por SMTP comprometa la seguridad de Oracle Hospitality e7. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality e7. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_e7:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2C6B33-8391-408B-A6D3-432986776C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99795",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10209",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión soportada afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle VM VirtualBox. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle VM VirtualBox. CVSS 3.0 Base Score 5.2 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99709",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10210",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión soportada afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10211",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). La versión compatible afectada es la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Hospitality Suite8. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Hospitality Suite8, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Hospitality Suite8, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Hospitality Suite8. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49124BE-9A0A-4005-B57E-91F30446889B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99671",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10212",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). La versión compatible afectada es la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Hospitality Suite8. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49124BE-9A0A-4005-B57E-91F30446889B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99656",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10213",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Suite8 executes to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hospitality Suite8 accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). La versión compatible afectada es la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga permisos de inicio de sesión en la infraestructura en la que se ejecuta Hospitality Suite8 comprometa la seguridad de Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Hospitality Suite8. CVSS 3.0 Base Score 4.0 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49124BE-9A0A-4005-B57E-91F30446889B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99863",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10214",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Point of Service accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Xstore Point of Service accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Xstore Point of Service de Oracle Retail Applications (subcomponente: Xstore Office). Las versiones compatibles que se han visto afectadas son la 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x y la 16.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Retail Xstore Point of Service. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Retail Xstore Point of Service, así como en la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85836F6D-F497-42C9-AD5A-91AC7D36C82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A0E714-AC23-49B5-A36C-D10FA4699561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379D4FD1-82B0-466E-8C0F-767B8244DA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E79C8AA-9607-48F5-BD13-4E9CC6A8BBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1223C57-DA2C-42C0-9DCC-6124DF3AE67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87FC90-16D0-4051-8280-B0DD4441F10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702064C8-8CA2-466D-969A-4E21C20CAA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C702023-1827-4A3B-A902-9C234F665CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA46C198-4681-464E-B4A7-1942F161DC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D9152B-ED96-4517-BE51-9F16BFA2413F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6184C9-932C-44C5-BC19-5AAF9B115C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B3354D-3929-4AEC-AAE0-7F573341FD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA365CA-7C4A-4C58-8608-3AFEF38CA841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF67C514-9438-46F9-888D-FAC17A8EF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF21C27-8AF3-4FB3-874B-710874910818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5821027F-DF34-440A-8604-2E85DD45BEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C364E49C-F61E-499D-826C-7D23FF6E7C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55901EF7-B71C-40B3-B276-FDA6381F051F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA6839-849D-4CEF-85F3-38FE75E07183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385D40CC-5AA0-4DAB-A2E7-F3A3CFF95BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B9C6CE-C3B9-4F83-8F09-7AA060C0AD1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99733",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10215",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_DEFN_CATG). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: EPPCM_DEFN_CATG). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99749",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10216",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Property Interfaces. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Property Interfaces accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Property Interfaces de Oracle Hospitality Applications (subcomponente: Parser). La versión compatible afectada es la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Hospitality Property Interfaces. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importanciao un acceso completo a todos los datos accesibles de Hospitality Property Interfaces. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8_property_interfaces:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3724A797-A15C-4BF4-94C3-F662AC2F8C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8_property_interfaces:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43426EE8-02B5-464E-A050-67F386BE9DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8_property_interfaces:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03EAEC6-5723-4F01-9F7D-16EE09654691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99654",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10217",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Base). Las versiones compatibles que se han visto afectadas son la 4.2.0.0 y la 4.2.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Guest Access. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD776B4-406C-4C95-BE1D-28F89CCB4073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA4C30C-D1F4-4730-8947-64B8B5BF8625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99776",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10218",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Base). Las versiones compatibles que se han visto afectadas son la 4.2.0.0 y la 4.2.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Guest Access. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD776B4-406C-4C95-BE1D-28F89CCB4073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA4C30C-D1F4-4730-8947-64B8B5BF8625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99781",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10219",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Guest Access executes to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Base). Las versiones compatibles que se han visto afectadas son la 4.2.0.0 y la 4.2.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality Guest Access comprometa la seguridad de Oracle Hospitality Guest Access. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD776B4-406C-4C95-BE1D-28F89CCB4073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA4C30C-D1F4-4730-8947-64B8B5BF8625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99831",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10220",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Property Interfaces executes to compromise Hospitality Property Interfaces. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hospitality Property Interfaces accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality Property Interfaces de Oracle Hospitality Applications (subcomponente: Parser). La versión compatible afectada es la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga permisos de inicio de sesión en la infraestructura en la que se ejecuta Hospitality Property Interfaces comprometa la seguridad de Hospitality Property Interfaces. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Hospitality Property Interfaces. CVSS 3.0 Base Score 4.0 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8_property_interfaces:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3724A797-A15C-4BF4-94C3-F662AC2F8C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8_property_interfaces:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43426EE8-02B5-464E-A050-67F386BE9DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8_property_interfaces:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03EAEC6-5723-4F01-9F7D-16EE09654691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99861",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10221",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operations). The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RES 3700 executes to compromise Oracle Hospitality RES 3700. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality RES 3700 accessible data as well as unauthorized read access to a subset of Oracle Hospitality RES 3700 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality RES 3700 de Oracle Hospitality Applications (subcomponente: OPS Operations). La versión compatible afectada es la 5.5. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality RES 3700 comprometa la seguridad de Oracle Hospitality RES 3700. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality RES 3700, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality RES 3700, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality RES 3700. Además, esto puede dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality RES 3700. CVSS 3.0 Base Score 5.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_res_3700:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA0EDDA-0DBD-49B3-BC5C-5162FE6C17E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99837",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10222",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Production Tool). Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Materials Control accessible data as well as unauthorized read access to a subset of Oracle Hospitality Materials Control accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Materials Control de Oracle Hospitality Applications (subcomponente: Production Tool). Las versiones compatibles que se han visto afectadas son la 8.31.4 y la 8.32.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Materials Control. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Materials Control, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Materials Control. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_materials_control:8.31.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB5A63D-FFA6-44E6-80EF-11AA19C08078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_materials_control:8.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB4B2CF-AD69-49E9-A47B-5143ADFE4175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99701",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10223",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Purchasing). Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Materials Control accessible data as well as unauthorized read access to a subset of Oracle Hospitality Materials Control accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Materials Control de Oracle Hospitality Applications (subcomponente: Purchasing). Las versiones compatibles que se han visto afectadas son la 8.31.4 y la 8.32.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Materials Control. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Materials Control, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Materials Control. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_materials_control:8.31.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB5A63D-FFA6-44E6-80EF-11AA19C08078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_materials_control:8.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB4B2CF-AD69-49E9-A47B-5143ADFE4175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99704",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10224",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. While the vulnerability is in Oracle Hospitality Inventory Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Inventory Management accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Inventory Management de Oracle Hospitality Applications (subcomponente: Inventory and Count Cycle). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Inventory Management. Aunque la vulnerabilidad está presente en Oracle Hospitality Inventory Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Inventory Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Inventory Management. CVSS 3.0 Base Score 6.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_inventory_management:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E629BF-1404-44E1-932B-11D7128DF984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_inventory_management:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6AFFF1-D94F-4B0F-9792-5996DB24D01B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99665",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10225",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operations). The supported version that is affected is 5.5. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality RES 3700. While the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality RES 3700 accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality RES 3700 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality RES 3700 de Oracle Hospitality Applications (subcomponente: OPS Operations). La versión compatible afectada es la 5.5. Una vulnerabilidad difícilmente explotable permite el acceso físico, lo que compromete la seguridad de Oracle Hospitality RES 3700. Aunque la vulnerabilidad está presente en Oracle Hospitality RES 3700, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la creación, supresión o modificación sin autorización de datos de un nivel de importancia crítico o de todos los datos accesibles de Oracle Hospitality RES 3700, así como el acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality RES 3700. Además, esto podría dar lugar a que un atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality RES 3700. CVSS 3.0 Base Score 7.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_res_3700:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA0EDDA-0DBD-49B3-BC5C-5162FE6C17E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99815",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10226",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Fleet Management de Oracle Hospitality Applications (subcomponente: Fleet Management System Suite). La versión compatible afectada es la 9.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Fleet Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality Cruise Fleet Management, así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3CA62F-1206-420B-9B51-21FC38E02A95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99646",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10228",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Module). The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Shipboard Property Management System de Oracle Hospitality Applications (subcomponente: Module). La versión compatible afectada es la 8.0.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Shipboard Property Management System. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Cruise Shipboard Property Management System, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_shipboard_property_management_system:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E2B270-D7F8-4154-9100-8CB3BEAF1161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99695",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10229",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: Event Viewer). The supported version that is affected is 7.30.562. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Materials Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Materials Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Materials Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Materials Management de Oracle Hospitality Applications (subcomponente: Event Viewer). La versión compatible afectada es la 7.30.562. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Materials Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Cruise Materials Management, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Materials Management. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_materials_management:7.30.562:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68940BAA-FC23-4D74-B4B8-B9ABBAD0CC44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99691",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10230",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications (subcomponent: SilverWhere). The supported version that is affected is 8.0.75. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Dining Room Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Dining Room Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Dining Room Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Dining Room Management de Oracle Hospitality Applications (subcomponente: SilverWhere). La versión compatible afectada es la 8.0.75. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Dining Room Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Cruise Dining Room Management, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Dining Room Management. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_dining_room_management:8.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3E5E98-3AEF-4B06-8ACA-709E0316CA3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99688",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10231",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AWExport). The supported version that is affected is 2.2.05.062. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise AffairWhere executes to compromise Oracle Hospitality Cruise AffairWhere. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise AffairWhere accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise AffairWhere de Oracle Hospitality Applications (subcomponente: AWExport). La versión compatible afectada es la 2.2.05.062. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality Cruise AffairWhere comprometa la seguridad de Oracle Hospitality Cruise AffairWhere. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Hospitality Cruise AffairWhere. CVSS 3.0 Base Score 5.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_affairwhere:2.2.05.062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC43FBB-6133-4302-B88C-A9F9D4BE61F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99830",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10232",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality WebSuite8 Cloud Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality WebSuite8 Cloud Service accessible data as well as unauthorized update, insert or delete access to some of Hospitality WebSuite8 Cloud Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hospitality WebSuite8 Cloud Service. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Hospitality WebSuite8 Cloud Service de Oracle Hospitality Applications (subcomponente: General). Las versiones compatibles que se han visto afectadas son la 8.9.6 y la 8.10.x. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Hospitality WebSuite8 Cloud Service. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos confidenciales o un acceso total a todos los datos accesibles de Hospitality WebSuite8 Cloud Service, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Hospitality WebSuite8 Cloud Service. Además, puede dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Hospitality WebSuite8 Cloud Service. CVSS 3.0 Base Score 7.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD6D970-B5CA-416E-A896-019E4DBAF8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2D8BC0-5F99-424A-BBF9-7A0C234C40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83F6AA2-9207-4F6C-AD6B-1E7B8E17A726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_websuite8_cloud_service:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981EBDB5-D0E2-42C0-B24B-3DD37CAF2CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10233",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión soportada afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99642",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10234",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Solaris Cluster. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris Cluster de Oracle Sun Systems Products Suite (subcomponente: NAS device addition). La versión compatible afectada es la 4. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga permisos de inicio de sesión en la infraestructura en la que se ejecuta Solaris Cluster comprometa la seguridad de Solaris Cluster. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Solaris Cluster. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:solaris_cluster:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A83709-4D38-4844-8928-0C2D6F2033BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99859",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038937",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10235",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.7 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 6.7 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99705",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10236",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99645",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10237",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:06.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99667",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10238",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99668",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10239",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99681",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10240",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99683",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10241",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99687",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10242",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.24. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.22",
            "matchCriteriaId" : "C0B81AFD-494B-4921-B4CF-903BD55469E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99689",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10243",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: JAX-WS). Las versiones compatibles que se han visto afectadas son JavaSE: 6u151, 7u141 y 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Java SE, Java SE Embedded y JRockit. Además, pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "A3322D72-6B56-467E-90E5-5DCE0FA1F431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0E043-D34F-446D-879B-692E3CF500C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "106E9F69-857A-42F8-A727-2650C896D3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "673DD72C-4FC8-406A-A24A-B06DD709649C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "363C8E7E-2EEA-4308-A141-854B9EC17AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "595FC4B7-418E-457C-ADCC-0A49A676D629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1FE26D-1936-475A-B644-BBB4281FB5C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99827",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170720-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10244",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Object Library de Oracle E-Business Suite (subcomponente: Attachments). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Application Object Library. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Application Object Library. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BD1423-F7EE-4B53-AE4B-DFA784F685C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95FED83-21C8-4035-BB1B-3C8A93D4645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411C3C4C-5513-4F7D-8D58-A39F21F43637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99702",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10245",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle General Ledger accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle General Ledger de Oracle E-Business Suite (subcomponente: Account Hierarchy Manager). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle General Ledger. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle General Ledger. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02272A60-6BE5-4F13-BBC0-242885BA1212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C081521-5324-4B88-88CA-5BB4E8FB46BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290F71F8-F430-4F65-A6A6-C3BF3A8F3F01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969B5917-7D01-4900-B49D-F3454FF7CF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF27C478-4091-487B-8B66-D0708445CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24376F3B-FA25-4171-AC58-9214AAD5695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154EBC09-223E-44E7-9441-C5D8A65809FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99690",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10246",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data as well as unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Object Library de Oracle E-Business Suite (subcomponente: iHelp). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Application Object Library. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Application Object Library, así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle Application Object Library. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BD1423-F7EE-4B53-AE4B-DFA784F685C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95FED83-21C8-4035-BB1B-3C8A93D4645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411C3C4C-5513-4F7D-8D58-A39F21F43637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99625",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42340/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42340/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10247",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: HTML Area). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99761",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10248",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: EPPCM_HIER_TOP). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99754",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10249",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Integration Broker). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99764",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10250",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Tuxedo). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Tuxedo). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta PeopleSoft Enterprise PeopleTools comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99824",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10251",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Test Framework). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta PeopleSoft Enterprise PeopleTools comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99822",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10252",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Updates Change Assistant). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta PeopleSoft Enterprise PeopleTools comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99828",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10253",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pivot Grid). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Pivot Grid). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99773",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10254",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FSCM de Oracle PeopleSoft Products (subcomponente: Staffing Front Office). La versión compatible afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise FSCM. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise FSCM. CVSS 3.0 Base Score 2.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_staffing_front_office:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406D9847-F366-4177-B5CC-A104200489AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99814",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10255",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: EPPCM_HIER_TOP). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99755",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10256",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: EPPCM_HIER_TOP). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99758",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10257",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Browse Folder Hierarchy). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Browse Folder Hierarchy). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99747",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10258",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Add New Image). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Add New Image). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19441072-55F8-4A0E-9221-38902A3AB5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99739",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11151",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-08T15:29:07.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en synotheme_upload.php en Synology Photo Station en versiones anteriores a la 6.7.3-3432 y a la 6.3-2967 permite que atacantes remotos suban archivos arbitrarios sin autenticación mediante la acción logo_upload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.2-3429",
            "matchCriteriaId" : "FAD31531-C414-44A3-AE98-4FD62506367A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F6615-7773-42A5-9A58-7248D4820E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11152",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-08T15:29:07.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en PixlrEditorHandler.php en Synology Photo Station en versiones anteriores a la 6.7.3-3432 y a la 6.3-2967 permite que atacantes remotos escriban archivos arbitrarios mediante el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.2-3429",
            "matchCriteriaId" : "FAD31531-C414-44A3-AE98-4FD62506367A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F6615-7773-42A5-9A58-7248D4820E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11153",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-08T15:29:07.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized payload."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de deserialización en synophoto_csPhotoMisc.php en Synology Photo Station en versiones anteriores a la 6.7.3-3432 y a la 6.3-2967 permite que atacantes remotos consigan privilegios de administrador mediante un payload de diseño serializado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.2-3429",
            "matchCriteriaId" : "FAD31531-C414-44A3-AE98-4FD62506367A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F6615-7773-42A5-9A58-7248D4820E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11154",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-08T15:29:07.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de subida de archivos sin restricciones en PixlrEditorHandler.php en Synology Photo Station en versiones anteriores a la 6.7.3-3432 y a la 6.3-2967 permite que atacantes remotos creen scripts PHP arbitrarios mediante el parámetro type."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.2-3429",
            "matchCriteriaId" : "FAD31531-C414-44A3-AE98-4FD62506367A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F6615-7773-42A5-9A58-7248D4820E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11155",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-08T15:29:07.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de exposición de información en index.php en Synology Photo Station en versiones anteriores a la 6.7.3-3432 y a la 6.3-2967 permite que atacantes remotos obtengan información sensible del sistema mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-205"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.2-3429",
            "matchCriteriaId" : "FAD31531-C414-44A3-AE98-4FD62506367A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F6615-7773-42A5-9A58-7248D4820E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3529",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: UDF). Las versiones compatibles que se han visto afectadas son la 8.54 y la 8.55. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99746",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3562",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications DBA en Oracle E-Business Suite (subcomponente: AD Utilities). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5 y 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Applications DBA. Los ataques exitosos a esta vulnerabilidad pueden resultar en la creación, supresión o modificación sin autorización de datos de suma importancia o de todos los datos accesibles de Oracle Applications DBA, así como el acceso sin autorización a datos de nivel de importancia crítico o todos los datos accesibles de Oracle Applications DBA. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E064D5-BDE1-4040-BC83-9BECED3299DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479AF1FF-B81F-4FAE-866B-70EDDA900EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5A8EFC-607E-40E5-A732-51B23C1D7460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC89B9D8-3C9F-44E1-83F7-246AC0F06918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007AA843-EE17-4B19-969B-CA7749EB2ACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99700",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3632",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3632 is assigned to the \"EASYSTREET\" vulnerability. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris de Oracle Sun Systems Products Suite (subcomponente: CDE Calendar). Las versiones compatibles que se han visto afectadas son la 10 y la 11. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por TCP comprometa la seguridad de Solaris. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Solaris. Nota: CVE-2017-3632 está asignado a la vulnerabilidad \"EASYSTREET\". CVSS 3.0 Base Score 9.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99857",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3633",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:07.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Memcached). Las versiones compatibles que se han visto afectadas son la 5.6.36 y anteriores, y la 5.7.18 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por Memcached comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.0.0.4.0",
            "matchCriteriaId" : "C6851BFC-B947-415E-B531-DAAD397F4B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A173D32B-2A79-45F3-9ED9-0568F07A2FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndIncluding" : "12.2.2",
            "matchCriteriaId" : "875E3490-3A71-4862-A118-E7756F67A76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E605DBF-9370-4302-A700-7B1467A02880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F13568-4C70-4E0D-A431-F7099CC5394C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A54784-2FBD-4610-BE85-5C2E725334F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88303006-EEBF-44CA-8AF2-466424F3A42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CAA46E-F2F4-4E4B-83B9-4290C8E27C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99722",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3634",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.6.36 y anteriores, y la 5.7.18 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3635",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C). Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. Note: The documentation has also been updated for the correct way to use mysql_stmt_close(). Please see: https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-execute.html,  https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-fetch.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-close.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-error.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-errno.html, and  https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-sqlstate.html. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Connectors de Oracle MySQL (subcomponente: Connector/C). Las versiones compatibles que se han visto afectadas son la 06.1.10 y anteriores. Esta vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Connectors. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Connectors. Nota: La documentación también ha sido actualizada para describir la correcta utilización de mysql_stmt_close(). Consulte: https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-execute.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-fetch.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-close.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-error.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-errno.html, y https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-sqlstate.html. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connector\\/c:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.10",
            "matchCriteriaId" : "66901954-1C46-465A-B244-39E49E040F51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99730",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3636",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Client programs). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, y la 5.6.36 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta MySQL Server comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de MySQL Server, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de MySQL Server. Además, esto puede dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de MySQL Server. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.57",
            "matchCriteriaId" : "A0CDB8FC-7764-4218-AF71-29300E292B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.32",
            "matchCriteriaId" : "C2A1395D-DD3D-4470-A881-AC2F7A443BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.26",
            "matchCriteriaId" : "639D0A69-301F-4C14-9A98-AF208CD31F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99736",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3955",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3637",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: X Plugin). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99748",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3638",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con muchos privilegios con acceso en red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99778",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3639",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99753",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3640",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99765",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3641",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, 5.6.36 y anteriores, y la 5.7.18 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.57",
            "matchCriteriaId" : "A0CDB8FC-7764-4218-AF71-29300E292B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.32",
            "matchCriteriaId" : "C2A1395D-DD3D-4470-A881-AC2F7A443BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.26",
            "matchCriteriaId" : "639D0A69-301F-4C14-9A98-AF208CD31F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99767",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3955",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3642",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99779",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3643",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99772",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3644",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99775",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3645",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99783",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3646",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: X Plugin). Las versiones compatibles que se han visto afectadas son la 5.7.16 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.16",
            "matchCriteriaId" : "8DC73DC2-8D62-4ED4-AC91-CCC929BDC846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99786",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3647",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Replication). Las versiones compatibles que se han visto afectadas son la 5.6.36 y anteriores, y la 5.7.18 y anteriores. Esta vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.4 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99796",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3648",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Charsets). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, 5.6.36 y anteriores, y la 5.7.18 y anteriores. Esta vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.4 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99789",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3649",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Replication). Las versiones compatibles que se han visto afectadas son la 5.6.36 y anteriores, y la 5.7.18 y anteriores. Esta vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.4 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99799",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3650",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: C API). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar con acceso en red por medio múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de MySQL Server. CVSS 3.0 Base Score 3.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99808",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3651",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Client mysqldump). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, 5.6.36 y anteriores, y la 5.7.18 y anteriores. Un vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de MySQL Server. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.53",
            "matchCriteriaId" : "06A4DF4B-A863-4091-8FE1-3DB55B99B7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.28",
            "matchCriteriaId" : "B4C9A810-E03B-40D5-9B47-EFD7891283AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.19",
            "matchCriteriaId" : "71A20CCF-309C-474B-B717-DB924D8AA0D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2927.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2928.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99802",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2927.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2016-2928.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3652",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DDL). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, 5.6.36 y anteriores, y la 5.7.18 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de MySQL Server, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de MySQL Server. CVSS 3.0 Base Score 4.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99805",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3653",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-08-08T15:29:08.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DDL). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, 5.6.36 y anteriores, y la 5.7.18 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de MySQL Server. CVSS 3.0 Base Score 3.1 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.56",
            "matchCriteriaId" : "47B58881-DD55-42F4-B37A-B512748451BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.57",
            "matchCriteriaId" : "A0CDB8FC-7764-4218-AF71-29300E292B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.32",
            "matchCriteriaId" : "C2A1395D-DD3D-4470-A881-AC2F7A443BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.26",
            "matchCriteriaId" : "639D0A69-301F-4C14-9A98-AF208CD31F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99810",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3955",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-08T19:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts."
      }, {
        "lang" : "es",
        "value" : "El plugin HashiCorp Vagrant VMware Fusion (también conocido como vagrant-vmware-fusion) en sus versiones anteriores a la 4.0.24 utiliza permisos débiles para los scripts sudo helper, permitiendo que usuarios locales ejecuten código arbitrario con privilegios root sobreescribiendo uno de los scripts."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.23",
            "matchCriteriaId" : "97504435-79AD-4D03-8671-E892F5DA6738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/0",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201711741-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43224/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201711741-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43224/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0174",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka \"Windows NetBIOS Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows NetBIOS en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que se produzca una denegación de servicio cuando gestiona incorrectamente paquetes NetBIOS. Esto también se conoce como \"Windows NetBIOS Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100038",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039109",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0174",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0250",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to buffer overflow, aka \"Microsoft JET Database Engine Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft JET Database Engine en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que se produzca una vulnerabilidad de ejecución remota de código debido a un desbordamiento de búfer. Esto también se conoce como \"Microsoft JET Database Engine Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98100",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039090",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0250",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0293",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka \"Windows PDF Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows PDF Library en Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que se produzca una vulnerabilidad de ejecución remota de código cuando gestiona de manera incorrecta objetos en la memoria. Esto también se conoce como \"Windows PDF Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100039",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039092",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0293",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8503",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, aka \"Microsoft Edge Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8642."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703, y Windows Server 2016 permite que un atacante escape de la sandbox AppContainer. Esta vulnerabilidad también es denominada \"Vulnerabilidad de elevación de privilegios de Microsoft Edge\". Este ID CVE es exclusivo de CVE-2017-8642."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99395",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8503",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8516",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when it improperly enforces permissions, aka \"Microsoft SQL Server Analysis Services Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft SQL Server Analysis Services en Microsoft SQL Server 2012, Microsoft SQL Server 2014, y Microsoft SQL Server 2016 permite una vulnerabilidad de divulgación de información cuando aplica permisos de forma incorrecta. Esta vulnerabilidad también es denominada \"Microsoft SQL Server Analysis Services Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEA6995-0B2D-44C5-9A14-76C9796A9863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A0AA01-39E8-42A5-8B57-46BEE3A2CD51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "58837806-386A-40AC-B8D3-35765113D75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40058AB9-EE59-449E-B4C4-541E12A4861F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "51143C5C-46EA-4B37-8C1F-0697A62AC4E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100041",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039110",
        "source" : "secure@microsoft.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8516",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8591",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Input Method Editor (IME) in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka \"Windows IME Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Input Method Editor (IME) en Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando gestiona de manera incorrecta objetos en la memoria. Esto también se conoce como \"Windows IME Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99430",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039097",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8591",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8593",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Win32k en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100032",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039105",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8593",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8620",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka \"Windows Search Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Search en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Windows Search Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100034",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039091",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8620",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://threatpost.com/windows-search-bug-worth-watching-and-squashing/127434/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://threatpost.com/windows-search-bug-worth-watching-and-squashing/127434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8622",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes, aka \"Windows Subsystem for Linux Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El subsistema de Windows para Linux en Windows 10 1703 permite una vulnerabilidad de elevaciónd e privilegios cuando no gestiona correctamente tuberías nombradas NT. Esto también se conoce como \"Windows Subsystem for Linux Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100040",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039103",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8622",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8623",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka \"Windows Hyper-V Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Hyper-V en Windows 10 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de denegación de servicio cuando no valida correctamente entradas de un usuario con privilegios en un sistema operativo invitado. Esto también se conoce como \"Windows Hyper-V Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100042",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039104",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8623",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8624",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CLFS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka \"Windows CLFS Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El controlado Common Log File System (CLFS) en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que gestiona objetos en la memoria. Esto también se conoce como \"Windows CLFS Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100061",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039106",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8624",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8625",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka \"Internet Explorer Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante eluda las políticas Device Guard User Mode Code Integrity (UCMI) debido a que Internet Explorer no valida las políticas UMCI. Esto también se conoce como \"Internet Explorer Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100063",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039112",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8627",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka \"Windows Subsystem for Linux Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El subsistema de Windows para Linux en Windows 10 1703 permite una vulnerabilidad de denegación de servicio debido a la forma en la que gestiona objetos en la memoria. Esto también se conoce como \"Windows Subsystem for Linux Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100065",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039103",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8627",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8633",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka \"Windows Error Reporting Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Error Reporting (WER) en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios. Esto también se conoce como \"Windows Error Reporting Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100069",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039102",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8633",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8634",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100043",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8634",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42474/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42474/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8635",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript renderizan cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100055",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8635",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42471/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42471/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8636",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript de los navegadores Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100056",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8636",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42466/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42467/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42468/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42478/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42466/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42467/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42468/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8637",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to bypass Arbitrary Code Guard (ACG) due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka \"Scripting Engine Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante eluda el Arbitrary Code Guard (ACG) debido a la forma en la que Microsoft Edge accede a la memoria en código compilado por el compilador Edge Just-In-Time (JIT). Esto también se conoce como \"Scripting Engine Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100045",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8637",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8638",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100049",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8638",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8639",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100050",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8639",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8640",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100051",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8640",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42476/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42476/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8641",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript de los navegadores Microsoft renderizan cuando gestiona objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100057",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8641",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42465/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42465/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8642",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to elevate privileges due to the way that Microsoft Edge validates JavaScript under specific conditions, aka \"Microsoft Edge Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8503."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante eleve privilegios debido a la forma en la que Microsoft Edge valida JavaScript bajo ciertas condiciones específicas. Esto también se conoce como \"Microsoft Edge Elevation of Privilege Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8503."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100046",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8642",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8644",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8652 and CVE-2017-8662."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante revele información debido a la forma en la que Microsoft Edge gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8652 y CVE-2017-8662."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100044",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8644",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42459/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42459/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8645",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100052",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8645",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42469/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42469/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8646",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100053",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8646",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42470/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42470/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8647",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 1703 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100054",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8647",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8650",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to exploit a security feature bypass due to Microsoft Edge not properly enforcing same-origin policies, aka \"Microsoft Edge Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante explote una omisión de una característica de seguridad debido a que Microsoft Edge no aplica correctamente políticas del mismo origen. Esto también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100048",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8650",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8651",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows Server 2008 SP2 y Windows Server 2012 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a que Intermet Explorer accede de forma incorrecta a los objetos en la memoria. Esto también se conoce como \"Internet Explorer Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100058",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8651",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8652",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8644 and CVE-2017-8662."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante revele información debido a la forma en la que Microsoft Edge gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8644 y CVE-2017-8662."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100047",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8652",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42445/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42445/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8653",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly accessing objects in memory, aka \"Microsoft Browser Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8669."
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a que los navegadores Microsoft acceden de forma incorrecta a los objetos en la memoria. Esto también se conoce como \"Microsoft Browser Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8669."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100059",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8653",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8654",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka \"Microsoft Office SharePoint XSS Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Server 2010 Service Pack 2 permite una vulnerabilidad de tipo cross-site scripting (XSS) cuando no sanitiza correctamente una petición web especialmente manipulada a un servidor SharePoint afectado. Esto también se conoce como \"Microsoft Office SharePoint XSS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100064",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039111",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8654",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8655",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100027",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8655",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8656",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100033",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8656",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42464/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42464/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8657",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Windows renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100035",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8657",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42481/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42481/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8659",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine not properly handling objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante obtenga información para compromete aún más la seguridad del sistema del usuario debido a que el motor de scripting Chakra no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Scripting Engine Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8659",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8661",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way affected Microsoft scripting engines render when handling objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores Microsoft scripting afectados renderizan cuando gestionan objetos en la memoria. Esto también se conoce como \"Vulnerabilidad de corrupción de memoria en Microsoft Edge\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100037",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8661",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8662",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to disclose information due to how strings are validated in specific scenarios, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8644 and CVE-2017-8652."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante revele información debido a la forma en la que se validan los strings en escenarios específicos. Esto también se concoe como \"Microsoft Edge Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8644 y CVE-2017-8652."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100031",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8664",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka \"Windows Hyper-V Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Hyper-V en Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando valida de manera incorrecta entradas de un usuario con privilegios en un sistema operativo invitado. Esto también se conoce como \"Windows Hyper-V Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100085",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039093",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8664",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8666",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly handle objects in memory, aka \"Win32k Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Win32k en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de revelación de información cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100089",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039105",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8666",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8668",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Volume Manager Extension Driver in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 allows an attacker to run a specially crafted application and obtain kernel information, aka \"Volume Manager Extension Driver Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El Volume Manager Extension Driver en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 permite que un atacante ejecute una aplicación especialmente manipulada y obtenga información del kernel. Esto también se conoce como \"Volume Manager Extension Driver Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100092",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039108",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8668",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8669",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly handling objects in memory while rendering content, aka \"Microsoft Browser Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8653."
      }, {
        "lang" : "es",
        "value" : "Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a que los navegadores de Microsoft gestionan de forma incorrecta los objetos en la memoria mientras renderizan el contenido. Esto también se conoce como \"Microsoft Browser Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8653."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100068",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8669",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8670",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100070",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8670",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42477/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42477/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8671",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8672, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Windows renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8672, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100071",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8671",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42475/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42475/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8672",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, and CVE-2017-8674."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Windows renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, y CVE-2017-8674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100072",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8672",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8673",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to connect to a target system using RDP and send specially crafted requests, aka \"Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La implementación Remote Desktop Protocol (RDP) en Microsoft Windows 10 1703 permite que un atacante se conecte a un sistema objetivo empleando RDP y envíe peticiones especialmente manipuladas. Esto también se conoce como \"Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039107",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8673",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8674",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, and CVE-2017-8672."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, y CVE-2017-8672."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100081",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8674",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8691",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-08T21:29:01.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka \"Express Compressed Fonts Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows Server 2008 SP2 y R2 SP1, y Windows 7 SP1 permiten que un atacante ejecute código de forma remota en un sistema objetivo cuando la biblioteca de fuentes Windows no gestiona correctamente fuentes específicamente embebidas. Esto también se conoce como \"Express Compressed Fonts Remote Code Execution Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100090",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039096",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-142",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8691",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11506",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2017-08-09T12:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks."
      }, {
        "lang" : "es",
        "value" : "Cuando se enlaza un escáner o agente Nessus a Tenable.io u otro gestor, Nessus en versiones 6.x anteriores a la 6.11 no verifica el certificado TLS del gestor cuando se realiza la conexión de salida inicial. Esto podría permitir ataques man-in-the-middle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7923ECD-EEDF-4D48-9ED6-87015CE0CA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5876269F-33C4-4B1C-AF06-9A759FAF648C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CC5273-FD17-4939-AFA2-2EB83D198133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4433E6-22A9-495B-8D53-85A70C61DE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCDBFCB-A468-4906-9C23-FDFC8E9BF079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB1D79C-C494-4B1E-93B4-3893FA0769B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E93213F-1C9B-42D7-BA99-ECE1860AFD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397B5EA3-1A2B-4994-BA75-A518A5DD455B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271247EB-1B01-4EF5-9FA0-544F3076DE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95814164-7E9C-41F0-B6BE-3591D910C194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6ACA7D-EC6E-4392-A3E6-ADC3F4425144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3484CEC-98E6-4261-A985-7D57E2D84054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C694D04-2661-4A55-A6DB-80F2358F3991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85A5402-3278-4DC4-8730-D5CB21C5DA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C7FBC9-C7B2-43E9-B33B-6465047FECE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D943C2-A047-4A7F-8E71-CFE0024BE911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB0711E-CB5F-43E9-91EB-2BDB9175824E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5C3250-A46A-46D4-A3A1-474DA9197135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604C9743-65B0-4A04-A004-C9248FE9D722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3CCA94-4EC3-410E-9ED0-ABFE506A807C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627DBD85-AD43-42E1-9D3F-2C8707F4B9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE9DEBC-B513-4692-A5C2-128FE960D63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE9807-86DE-4DD7-8399-D09B37B6F41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B632C9-1CDE-4141-B3F3-1D97E59EE391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D9ACDE-4F82-4291-870F-466A133431A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42C7022-2502-4341-A50A-0B99E283AAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101A55B7-B147-4B35-A5F8-5BB0314FD805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F25FF46-DC19-45EB-A4AA-2E09068EB4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146E9E56-3FC2-4B50-A329-6F50662C1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E04EEA5-6FE6-425F-9CA5-8BD6917B5C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4DF770-7342-401E-AFDA-181384C72275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344995CB-4E95-42AE-B909-A4148148E40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63616621-2753-4095-B1E6-71289422D099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F128AEB9-6D5F-47C8-B119-7D8061C6F8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250F614B-0BFB-4DBA-B78C-E3DA99DE0240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523F2759-5610-4F03-BA8D-60C20D9FB57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1975C695-0C1C-4585-BEE9-234E0C2BF9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C14B7B-DE1F-4751-A681-B051CC55163E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8AFD34-B980-49A8-AD6B-F92DBD695102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A284F5-758D-4040-9920-9DD72122A4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C69E7-A926-40F1-B546-0436BAEF48B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB1B932-1EAF-4C8E-BC5C-46F5F144D9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7384A2FE-4BFB-45CE-BF0C-7785D8900DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E2D1A-981B-4E77-88D0-9EA6990EE438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ACBE09-02EA-4741-AD5C-6E15C1E2064C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282C236A-6D50-4F0A-8642-1EED7F766089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:6.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD42BAC-84AD-4C83-A855-2F8B7698AF30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039141",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-11",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5694",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-08-09T14:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Data corruption vulnerability in firmware in Intel Solid-State Drive Professional PSF104P, PSF109P allows local users to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de corrupción de datos en el firmware en Intel Solid-State Drive Professional PSF104P, PSF109P permite que usuarios locales provoquen una denegación de servicio mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_6000p_firmware:psf104p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D5FC60-C12E-4E56-BA31-4B0544834E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_6000p_firmware:psf109p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C36E2C-A14B-4CF4-B9E7-B33C37D1F3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_pro_6000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2467F592-716C-4F14-AD78-A63FD5FCA070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00078&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00078&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5695",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-08-09T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Data corruption vulnerability in firmware in Intel Solid-State Drive Consumer, Professional, Embedded, Data Center affected firmware versions LSBG200, LSF031C, LSF036C, LBF010C, LSBG100, LSF031C, LSF036C, LBF010C, LSF031P, LSF036P, LBF010P, LSF031P, LSF036P, LBF010P, LSMG200, LSF031E, LSF036E, LSMG100, LSF031E, LSF036E, LSDG200, LSF031D, LSF036D allows local users to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de corrupción de datos en el firmware en Intel Solid-State Drive Consumer, Professional, Embedded, Data Center con versiones afectadas de firmware LSBG200, LSF031C, LSF036C, LBF010C, LSBG100, LSF031C, LSF036C, LBF010C, LSF031P, LSF036P, LBF010P, LSF031P, LSF036P, LBF010P, LSMG200, LSF031E, LSF036E, LSMG100, LSF031E, LSF036E, LSDG200, LSF031D, LSF036D permite que usuarios locales provoquen una denegación de servicio mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_2.5\\\"_firmware:lsbg200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A78DAA2-E23E-4CB8-AD6F-DCC0F591C8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_2.5\\\"_firmware:lsf031c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D7B830-0173-4823-AE40-1B51D4C761E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_2.5\\\"_firmware:lsf036c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351635D1-ACC5-445E-BE82-CDC4E6F09821"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_540s_2.5\\\":-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC67DD9-67BD-410C-A819-6CE53785D494"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_series_m.2_firmware:lbf010c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5C227D-1B03-4799-B218-B66215B6F508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_series_m.2_firmware:lsbg100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2CB402-9736-40CA-9A3A-538D4566815C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_series_m.2_firmware:lsf031c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D460A-055B-4D06-A71A-0563C75E2383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_540s_series_m.2_firmware:lsf036c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121FDCB9-A018-44BC-B4EA-7D9A251F6511"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_540s_m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01498CD6-6834-47D9-9850-B0A5DE2DADA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_5400s_2.5\\\"_firmware:lbf010p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D489C05-3EDF-442B-81A2-2FBCF2A83A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_5400s_2.5\\\"_firmware:lsf031p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E747A2-54DA-4446-A7D5-6ADCF27C23A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_5400s_2.5\\\"_firmware:lsf036p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028C8FCD-AB00-43FD-96D4-564C70006E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_pro_5400s_2.5\\\":-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C770B5B-0ACC-4867-88DC-BFB61FDC5491"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_5400s_m.2_firmware:lbf010p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42AC055-AC0A-455F-B5B3-6828DB5C8A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_5400s_m.2_firmware:lsf031p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05ACB100-EAC9-4E6C-A505-EDDCF564A778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_pro_5400s_m.2_firmware:lsf036p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE0EAF-8C9C-4F62-B967-4A24BA144229"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_pro_5400s_m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D2562E-FDC2-4A2C-8D57-59E36468B63F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_2.5\\\"_firmware:lsf031e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59303AC-F2CA-487C-981B-11FF3EA5D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_2.5\\\"_firmware:lsf036e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E0668A-B2D1-4567-8E35-B3BD147DCD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_2.5\\\"_firmware:lsmg200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048EF9B-C100-4D34-AD6B-A616F34DFB78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_e_5400s_2.5\\\":-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED1C042-4767-4AD4-ADC5-6AE8E65F8C67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_m.2_firmware:lsf031e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7137BAAC-1728-4061-964D-7F78D993A045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_m.2_firmware:lsf036e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310CC1E1-F1A2-426C-86AB-D304113BFD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_m.2_firmware:lsmg100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53B6F57-CFBF-4C23-9C3F-DF1F2C7D007C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_e_5400s_m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41EEFE2-026F-4D5D-842A-9000425DA4AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_dc_s3100_firmware:lsdg200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E74FA9-5E59-4836-AB4E-211E3B4CE5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_dc_s3100_firmware:lsf031d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC770E1-5813-4162-8E17-8B7D9C14B13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_dc_s3100_firmware:lsf036d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95CBE55-EF84-4AB1-93D3-C8DC20E53518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_m.2_firmware:lsf031e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7137BAAC-1728-4061-964D-7F78D993A045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_m.2_firmware:lsf036e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310CC1E1-F1A2-426C-86AB-D304113BFD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:ssd_e_5400s_m.2_firmware:lsmg100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53B6F57-CFBF-4C23-9C3F-DF1F2C7D007C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:ssd_dc_s3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E59A345-E42C-40D9-BAE7-331FAC01F2DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.lenovo.com/us/en/solutions/LEN-26626",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00079&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.lenovo.com/us/en/solutions/LEN-26626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00079&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-09T15:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by sending a crafted http GET request packet that includes a long delete_offline_client parameter in the url."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en httpd en Asuswrt-Merlin firmware en versiones 380.67_0RT-AC5300 y anteriores para dispositivos ASUS y firmware ASUS para dispositivos ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, y RT-N300 permite que atacantes remotos ejecuten código arbitrario en el router mediante el envío de un paquete de petición http GET manipulado que incluya un parámetro delete_offline_client largo en la URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asuswrt-merlin:asuswrt-merlin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "380.67",
            "matchCriteriaId" : "24A51C18-BA52-4666-AF28-63CE24F05B3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172A8C92-FBA4-4E8F-82B5-DBAD291F0C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BABD3B7-BED6-4663-8BDB-CA3AED33C98C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318F3EC7-7345-462A-85B0-B6AB8E757CDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac51u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4608AAAB-B3BF-4EE8-BBD4-FA649D9F9097"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac52u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824491F0-B64A-4275-8ADF-07D34511F9A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A946F3-9111-4222-BF01-A2CAE7230E14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A369F50B-158C-44C8-8E29-2AC6073ECDFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac55u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1728ED-E57E-49A0-8771-962063866B83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497EF81-791F-4916-91BC-5C8EE58FEFDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F30F79C-2B91-4D96-95D5-7898EF081E76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7684627F-8923-43D1-908B-3A8B31959E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac66u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00206EE5-CCBF-42BB-8893-78BE4A61D1AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac68p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CAE899-98E6-41FF-95BF-C678B206E93B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECC7554-C1C9-481B-8975-582CCE2214C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-ac88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67DD9314-9619-4BCF-B35B-37435BF3DDDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n12\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497EB1D7-7D17-4016-BAC5-3EE3BEE82A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n12d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653A0F2A-E04B-4915-BCF4-395165F9BB15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n12hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F61186-DE9F-4B4A-8658-E0D663FA952E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n12hp_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766E4B3D-74CA-4F08-95AA-DED41E684B5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6BEAF4-DD12-4AF3-8F30-EC83D4C6EC30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n18u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEA946E-EC94-40CD-AD37-5A044900AF03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBE25EE-3619-4C82-8BC2-AEF6C5F05894"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9832D1CE-88C4-4C86-8BA2-A035BD99241A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt-n66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791ACAB0-2C00-467D-9248-F467122A6A5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt_ac1200g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55501BE2-9F07-4623-A456-BBC46C143F4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt_ac1200gu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7090145-A3D0-4C08-96C7-B8B0C6BB05A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt_ac1900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D58D23-EB2B-449C-AC49-D7D84B83CDA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asuswrt-merlin:rt_n12\\+_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F238B1-88D8-45B0-9268-B38B3C1A0E9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/Asus_DeleteOfflineClientOverflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://asuswrt.lostrealm.ca/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/Asus_DeleteOfflineClientOverflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9370",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-08-09T17:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de relevavión de información o elevación de privilegios en BlackBerry Workspaces Server podría permitir que un atacante con acceso legítimo a BlackBerry Workspaces obtuviese acceso al espacio de trabajo de otro usuario mediante múltiples peticiones de inicio de sesión al servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8636A1D-6DC1-4DFF-BCDD-C6020D99A521"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045350",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-09T18:29:01.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests."
      }, {
        "lang" : "es",
        "value" : "En MIT Kerberos 5 (también llamado krb5) en versiones 1.7 y posteriores, un atacante autenticado puede provocar un error de aserción KDC mediante el envío de peticiones S4U2Self o S4U2Proxy no válidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos:5-1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58B2F8D-83F5-46E0-B0DE-FEC2B0706CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB1190E-BE7A-4C6B-862D-D5747C64E980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B09C090-B842-43C7-B8A6-DBF63D80FEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36823B2B-5C72-4FF3-9301-FB263EB8CE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AFA33E-FEBC-45F5-9EC6-8AA363163FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D83332-B2FD-4E86-A76C-C3F1CD3B3A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758A0011-20ED-414A-9DF3-50A161DF8BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7768AED0-AE4C-4D4E-8D5D-5B618AB82966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534104C5-966E-4740-A354-4F6C210FF25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78AF5659-C0E3-49C4-9CA7-FC3917C8AC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86738633-C081-4440-9F75-A775D6DF2228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BCFFEE-EA7A-4F26-97AA-31128A179745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A2D7F5-EBDE-4000-AC78-8DD6472E685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E92BFA5-723E-4843-A8D8-BC1D32F34569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C27198-9B55-42FB-AA21-D8B4EB60D926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC504264-A9E9-4433-B7AA-6D5015A93FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FA352F-520C-4C05-AD52-FC8586DB16B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB18F7-CB08-4AE4-9DEC-55D047819A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637E858A-7C16-490C-99A8-F46440E5F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22840B84-2EA4-4E96-A8D8-154AAEADB806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D554BDC-CD7D-4572-B1E8-5F627F2C5916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BCD38A-33AD-4FD7-AF5B-8470B24C4139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11F9209-799A-428B-9513-DBD0F19C7BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA40FAA-B858-4282-8438-247E99FBB002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65795542-D886-46C4-8ECB-4630078DF66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A4C436-C3D7-469E-8895-8EEC9569EE86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A9FAE9-7219-4D6A-9E94-FFE20223537D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA68BC90-FCFC-4C9B-8574-9029DB2358E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0A28CB-173D-4676-B083-E3718213B840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3D2861-7EB7-4984-AC92-989B427BDB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D00BD-344F-453C-BE7C-9DF0740080BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765B3248-A524-4A79-858C-E787C1C1599E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1BB0AB-2C22-49F9-9D2A-074D2F711BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EC001E-9507-410D-836F-93002789D574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0037EF80-A599-4938-889F-9276E339A8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CABFE58-4811-49EC-8565-35EB7D5F6F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E30B176-1FE5-4C53-8B79-2E6D87DF05B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC81822F-DC8C-4889-AD53-33216B66A109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B23EE0-35EB-46FC-8620-AC0059498D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "70831CB8-695D-45E8-A829-2E888823E8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E650B5A3-99CA-491B-A1FB-259EF548D92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091F3C51-980E-482F-9882-0A555A8F74BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00BDDDC-3D5D-4D63-A8D8-63BF2F4C7329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42505BC2-12A0-43E9-8561-80270D7CA74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0496EF-F0F9-4A5D-92F4-E50C5F3DCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EEC80F-9E4F-4A6D-BB8D-6AB7764AD8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB427FE4-CC39-43EE-A27B-69C5B18056FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "14A2F0C0-91E0-4DD9-851E-67CE8A5EAE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C1770120-B3B2-4B5A-9785-162399A47989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100291",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1357",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-09T18:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Asset Management 7.5 y 7.6 podría permitir que un usuario autenticado manipulase órdenes de trabajo para falsificar correos electrónicos. Esto podría emplearse para llevar a cabo ataques más avanzados. IBM X-Force ID: 126684."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B590C42-21A1-4C62-8293-5A0D7AD628E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01604919-877F-4BDF-A137-C1A54E04BEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4577B9CD-45CA-4D01-B99D-7C39131C9C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB734EA-42EE-4BE0-934E-9E783BCDA31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16981EC3-76AE-441B-92C4-8DD6E6A1EA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36BB996E-17BC-4E35-97A0-142946F6B2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8B991C-2AE4-499D-B173-BF016D7F78F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A2AD3-94FB-4085-AE08-F7120EDDEFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2659CCD-6D04-4479-BA93-B906DC200424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47DB9B3-C8CD-45E9-9F53-617354F3A339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB19E05B-1E03-4230-BE05-21A989695749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B028794E-5FA0-4E3D-AC4D-A2826DD6282C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050D798F-F9CC-447B-94F4-81A893349695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948B518D-129E-42E7-B07F-5E1CA5056DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7038EBF6-E527-492B-A6A5-14F9A2F79BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29858665-FA68-4EDE-A0E7-6C79E8786871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B7CA3C-5F9B-45A3-80AC-F5A4E190CC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5550B7-9133-4434-A01C-0A35E59ECDD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4B8FE2-799E-4D5F-B582-49E799A3ADDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA89D39-C008-49CD-9D1E-7109644970AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF98E-13F3-4D28-9BD1-4D17DFF290D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF1B4FA-A938-4A1C-91C7-21255ACDB0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5C2A28-739B-42A3-9161-E88BACB1876A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB685AE-C72D-41BD-B9E3-0767328EAB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDC50C9-49EF-47CA-88FB-A8BCDF44922B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7197C12C-5CD7-4F7D-8B38-F792FAABC1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE096D4-40A8-4FD8-905C-3B13476BF748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E369397-1BC9-42E3-94AB-1CDB01D4838C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F90E1F-C0A0-4D6C-A497-9CC3AAF9ECB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF80B092-7E42-4F78-A137-015E382271F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228B8913-D50A-4645-9519-1633D0ACA44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A38DFC7-0B96-43F8-88EE-7F8CD29CD41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F10D4F-B0A5-4E40-B3AA-47838343D8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB194228-212C-499F-A3C6-147B5CD89581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D2023D-F6A3-4E44-B8C3-4B694A629B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48467B08-08D3-4129-9687-A0EC01920694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A162A9A1-5FF5-47A3-BC80-9577FC8EE00A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7DA64E-DAC8-4DE5-8EB7-2FCAD88A8E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006647",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100214",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126684",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1448",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-09T18:29:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128173."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Supplier Lifecycle Management en sus versiones 10.0.x y 10.1.x podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 128173."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5555B678-E8D8-43CC-8117-7CE4E8796A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21FB10-17CF-4968-A4D6-B62BA6B5D7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C308D968-9F2F-44FE-9820-B1E1850B5127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90517A03-8F15-41B1-B30C-548B04B8C732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD66461-A68B-44A1-BE9D-51D600F77FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59E7DBF-728D-4463-B28A-B21A3DDBA6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D86A9B-A047-4299-8D21-E2F1CA512AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3643AA98-41D9-4692-A327-77E9320B19FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316CC123-E4DE-4DE6-B077-457FA34D22D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C1A95D-7F81-4A0D-9353-17B4E651F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E856B7F-E960-46C3-B828-508689AE375F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBECE59F-3B62-4DDF-884A-963D6B64E6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697DE60B-55BC-4F65-9045-77D5B11395CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2D5E97-2A91-4E4D-AD28-5DDD86AD4DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12170D-1E85-4116-8EAC-B5C8F8D0C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4FB269-336D-46B9-8E63-ED9FB0BCB6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3290A0-A8B3-4CB5-B762-3DB2C39EF3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD32235-AA85-4EC7-B80E-D21CF7D3B3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD90BD58-2DA8-4996-97C7-FA8C33BAE91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE42663-A9ED-4699-954C-88FF3CC269DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918C6DE4-AB67-4441-B909-201EDDD6752E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F322CBE-90CB-448F-9050-422A155F1099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E465BDB0-7B28-44D5-8BBB-652849A835F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DAE142-6C1A-4913-B485-868CCC2A1A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7400F66A-874B-4631-9601-9A44A97FD3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF466B8C-B1EC-46AD-A229-7952F590CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C949766-E6EE-400C-8783-4D0B26FE066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5EF36C-0B12-4E83-BF97-7C6DE880ED5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B2C996-EAD2-4FAB-A526-2885BEBBB5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C631E15C-1D03-48FB-8407-C5C5BECCD88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF57983-F635-43B7-B829-ECCB90316C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0DAE73-DDAC-4972-BD28-456E506B0DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006B14A4-D8B0-4FA1-ABCE-E8A07AA6D752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725D01D2-25EB-400A-8C54-9EE85DA400CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CF890B-1F33-4923-8C7B-69FEC29D5476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C5E315-9C99-4B09-BD91-30EC10E1F6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D686D3-3866-4126-B0B4-F1F3C44E8915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F300CFB-AA06-4458-A0E1-E678364E2FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E03914-296D-4A9E-91B0-A240471F46D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99088F49-1908-4979-A88C-F8929190515A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4CD3A-9D28-4B27-A662-3A70767ED6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB1086A-67C8-4335-88F1-F7D4F2EADC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0561DAA-35D3-46EA-9E76-8E2E71445D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806C334F-FC48-4B32-A0F6-D1A5E47BF69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A99871-8804-41BA-AAA9-BDEC07BF9977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C313E-5816-437B-8C62-D893A254FBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B043330-8938-4B6F-9EF0-D3DE596D8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308F7C3-8B20-48E5-A22E-E60C9E40BD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E98450-93BC-4C9C-96B9-AD87B865445E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DE14C7-C72A-4492-831D-E2FC69F4A66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A06DC9A-A90D-4E84-AB18-EA51D15289DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE577C59-6C1B-4878-A708-5B4E5F65BAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5EF975-25A8-4297-BB5C-5D8D6CA88DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCAA80-D144-4064-B96F-D4E7A7B94623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7BB95E-1DB8-4867-8BAD-C477DF0700A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49660891-48F1-4DB3-85AB-1F123F4571E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E76021-96F2-4EF3-B5D7-EE4135530AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E3AA06-713A-4FEE-BC8F-F647FD817A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4203E000-9148-4C36-ADC3-DABC2985C52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E79273-2C57-415E-8AB9-C499295B3ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68994B41-BCC9-4620-8454-D57DE0B5C9FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E3BED0-FC48-411C-949F-B5B853EB95B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D443B00-594F-4E5B-9943-E6ABEE3DF404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7765BD4-FE09-4B05-A8D4-B547C5C7AE6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006854",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100222",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128173",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0712",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework (wi-fi service). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207928."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (servicio wifi). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207928."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100220",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0713",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android libraries (sfntly). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-32096780."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en las librerías Android (sfntly). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-32096780."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100219",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0714",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637."
      }, {
        "lang" : "es",
        "value" : "Existe una na vulnerabilidad de ejecución remota de código en el media framework de Android (decodificador h263). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0715",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36998372."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36998372."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0716",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0718",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547."
      }, {
        "lang" : "es",
        "value" : "Existe una na vulnerabilidad de ejecución remota de código en el media framework de Android (decodificador mpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0719",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673."
      }, {
        "lang" : "es",
        "value" : "Existe una na vulnerabilidad de ejecución remota de código en el media framework de Android (decodificador mpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0720",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0721",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0722",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827."
      }, {
        "lang" : "es",
        "value" : "Existe una na vulnerabilidad de ejecución remota de código en el media framework de Android (decodificador h263). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0723",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37968755."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37968755."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0724",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36819262."
      }, {
        "lang" : "es",
        "value" : "Existe vulnerabilidad de denegación de servicio en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36819262."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0725",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libskia). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0726",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36389123."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36389123."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0727",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libgui). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libgui). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0728",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (hevc decoder). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (hevc decoder). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0729",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (mediadrmserver). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37710346."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (mediadrmserver). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37710346."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0730",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (h264 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36279112."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (h264 decoder). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36279112."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0731",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (mpeg4 encoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36075363."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (mpeg4 encoder). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36075363."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0732",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37504237."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libstagefright). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37504237."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0733",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libmediaplayerservice). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0734",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38014992."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38014992."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0735",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38239864."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38239864."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0736",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38487564."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38487564."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0737",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563942."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libgstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563942."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3692-2/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3692-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0738",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (audioserver). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563371."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (audioserver). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563371."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0739",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37712181."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37712181."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0740",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Broadcom networking driver. Product: Android. Versions: Android kernel. Android ID: A-37168488. References: B-RB#116402."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el networking driver de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37168488. Referencias: B-RB#116402."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100217",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0741",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek gpu driver. Product: Android. Versions: Android kernel. Android ID: A-32458601. References: M-ALPS03007523."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver de la gpu de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-32458601. Referencias: M-ALPS03007523."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100209",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0742",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek video driver. Product: Android. Versions: Android kernel. Android ID: A-36074857. References: M-ALPS03275524."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en video driver de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-36074857. Referencias: M-ALPS03275524."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100209",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0745",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (avc decoder). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0746",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Qualcomm ipa driver. Product: Android. Versions: Android kernel. Android ID: A-35467471. References: QC-CR#2029392."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en IPA driver en Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-35467471. Referencias: QC-CR#2029392."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0747",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Qualcomm proprietary component. Product: Android. Versions: Android kernel. Android ID: A-32524214. References: QC-CR#2044821."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el componente propietario en Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-32524214. Referencias: QC-CR#2044821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0749",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream Linux linux kernel. Product: Android. Versions: Android kernel. Android ID: A-36007735."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el kernel linux en Upstream Linux. Producto: Android. Versiones: Android kernel. Android ID: A-36007735."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1053162",
        "source" : "security@android.com"
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0749.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0749",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1053162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0749.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0750",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-09T21:29:01.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de archivos Upstream Linux. Producto: Android. Versiones: Android kernel. Android ID: A-36817013."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1053160",
        "source" : "security@android.com"
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0750.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0750",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1053160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-09T21:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter."
      }, {
        "lang" : "es",
        "value" : "Una inyección de comandos en transferencias desde otro servidor en extplorer en se versiones 2.1.9 y anteriores permite que un atacante inyecte comandos a través del parámetro userfile[0]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extplorer:extplorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.9",
            "matchCriteriaId" : "7F589837-522E-4DDA-9F79-0DD15F19162E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://extplorer.net/news/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://extplorer.net/news/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-09T21:29:01.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree."
      }, {
        "lang" : "es",
        "value" : "Una inyección de comandos en transferencias desde otro servidor en extplorer en se versiones 2.1.9 y anteriores permite que un atacante inyecte comandos a través del parámetro userfile[0]."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18",
            "versionEndExcluding" : "3.18.64",
            "matchCriteriaId" : "AA5C240C-195E-486B-BBEB-DB830D7D66F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndIncluding" : "4.4.80",
            "matchCriteriaId" : "1B85F93D-0C2D-4351-BD2D-8448C7A837C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndIncluding" : "4.9.41",
            "matchCriteriaId" : "0AC5E809-CD25-4763-8973-B2B5507C98E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndIncluding" : "4.12.5",
            "matchCriteriaId" : "230A3EC9-BF2E-4E68-9A4B-057DE2657AA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2020/02/11/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/02/11/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/02/14/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100251",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9880041/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/02/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/02/11/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/02/14/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9880041/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-09T21:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "finecms in 1.9.5\\controllers\\member\\ContentController.php allows remote attackers to operate website database"
      }, {
        "lang" : "es",
        "value" : "finecms en 1.9.5\\controllers\\member\\ContentController.php permite que atacantes remotos operen bases de datos de sitios web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661B8DBE-24B1-494D-950D-73B0853C6041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yzcrnx/finecms/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yzcrnx/finecms/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-09T21:29:01.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en NexusPHP version v1.5 mediante algunos parámetros a usersearch.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.d4rksec.org/cve/CVE-2017-12777.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lu4n.com/cve/4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.d4rksec.org/cve/CVE-2017-12777.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3752",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-08-09T21:29:01.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad que afecta a toda la industria en la implementación del protocolo de enrutamiento Open Shortest Path First (OSPF) empleado en algunos switches Lenovo. La explotación de estos fallos de implementación puede dar lugar a que los atacantes consigan borrar o alterar las tablas de de enrutamiento de uno o muchos routers, switches u otros dispositivos que son compatibles con OSPF en un dominio de enrutamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:1g_l2-7_slb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.24.0",
            "matchCriteriaId" : "5C373989-F05A-495C-9099-3475B4B49DD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D1286-5D11-4F31-AF77-BBB37B66897A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:1\\:10g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.16.0",
            "matchCriteriaId" : "5957C6B8-870E-487F-B003-C751847B4179"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138E5BA5-72E6-4ADE-BBC7-C61274062FC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:layer_2\\/3_copper_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.10.0",
            "matchCriteriaId" : "851856BA-623E-4030-B53A-B276CB3551F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138E5BA5-72E6-4ADE-BBC7-C61274062FC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:virtual_fabric_10gb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.12.0",
            "matchCriteriaId" : "6147AD83-A935-4228-B4F5-B9F44C142DCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138E5BA5-72E6-4ADE-BBC7-C61274062FC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:en2092_1gb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.16.0",
            "matchCriteriaId" : "090ECD7A-C62C-4C8F-B7A0-EBD085FC113E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D1286-5D11-4F31-AF77-BBB37B66897A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:fabric_cn4093_10gb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.16.0",
            "matchCriteriaId" : "CBB91913-36E2-4CCD-8F06-9559686354E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D1286-5D11-4F31-AF77-BBB37B66897A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:fabric_en4093\\/en4093r_10gb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.16.0",
            "matchCriteriaId" : "C4BFB21C-2618-4C36-8100-D0AD973DEED9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8D1286-5D11-4F31-AF77-BBB37B66897A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8052_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.19.0",
            "matchCriteriaId" : "6C523570-23D7-4D7C-BD7B-3F88792D691A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8124_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.11.9.0",
            "matchCriteriaId" : "8C619041-574D-4F20-B6E2-20C8DF0C48DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8124e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.11.9.0",
            "matchCriteriaId" : "70B625F3-7530-4704-8D34-4AE0CB6017F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8264_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.19.0",
            "matchCriteriaId" : "5C0230A2-652F-4979-843F-F386B27ED200"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8264cs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.16.0",
            "matchCriteriaId" : "32E2E71B-3CEF-427A-B383-3E91F889FFDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8264t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.19.0",
            "matchCriteriaId" : "52078020-A91C-4C90-816D-D035324A59C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8316_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.19.0",
            "matchCriteriaId" : "C53AF1F2-C22A-46AE-A0EB-B78715F800BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:g8332_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.25.0",
            "matchCriteriaId" : "76BE4F68-3093-4104-8848-087971C350EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F582ABF9-86DE-4300-9635-A004BA40B048"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:fabric_cn4093_10gb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "A6AE62EB-61FC-4FBC-886E-956F18D3ABFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0DBD6A-3583-4319-A0E7-A3DBAED3588A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:fabric_en4093r_10gb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "DA0F8CD7-B875-47DB-AE77-DEF269321627"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0DBD6A-3583-4319-A0E7-A3DBAED3588A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:si4091_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "DD2F5AE9-9942-4D9B-B7C1-3A821F9473C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0DBD6A-3583-4319-A0E7-A3DBAED3588A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8052_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "73DD6C3A-3447-4538-9671-2B2075DAC741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8124e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "A70DD7D3-405F-4BC6-BEF7-1827AE29AEF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8264_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "639A4EA4-DFA9-4A7A-B22E-23C150DD2E8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8264cs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "DFA4508C-4DDE-4E84-826F-9C3AA475A34C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8272_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "37008C3A-0DE7-40A8-A945-AB7FD92A6395"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8296_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "9E93F011-AA73-40B0-A3BC-BAD75BB6B627"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:g8332_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.3.0",
            "matchCriteriaId" : "7607ACCB-235B-4116-BE00-39911040EAE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9188F-E06E-47B4-9868-A7295B7B6E8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99995",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14078",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9799",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-09T21:29:01.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised."
      }, {
        "lang" : "es",
        "value" : "**RECHAZADA** NO UTILICE ESTE NÚMERO DE CANDIDATO. ConsultIDs: none. Motivo: Este candidato ha sido retirado por su CNA. Estudios en mayor profundidad han determinado que no existía un problema de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:storm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB2448C-5AE6-4EB1-A55F-32F615720C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:storm:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8266020D-09C4-4C21-A8F6-FE303D9E2B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:storm:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED31B67-186C-4711-B8C9-D3E8FB9A6142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:storm:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B52BFD-75D3-4504-9A11-749964F053E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:storm:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FD2CFF-2B4C-445A-80FE-ACAFFE4A70AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100235",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039116",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/b9125bf507ed6f2ca6e85ba1a4b44e232aa70eeddfba2a9d8a954127%40%3Cdev.storm.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/b9125bf507ed6f2ca6e85ba1a4b44e232aa70eeddfba2a9d8a954127%40%3Cdev.storm.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3751",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-08-10T00:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de ruta de búsqueda sin entrecomillar en el driver para ThinkPad Compact USB Keyboard con versiones de TrackPoint anteriores a la 1.5.5.0. Esto podría permitir que un atacante con privilegios locales ejecutase código con privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:thinkpad_compact_usb_keyboard_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F6FF54-B70F-42EC-B9C0-E5121CF77FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15061",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3753",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-08-10T00:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en algunos productos Lenovo que emplean código UEFI (BIOS) desarrollado por American Megatrends, Inc. (AMI). Con esta vulnerabilidad existe una serie de condiciones por las cuales un atacante con privilegios de administración o acceso físico a un sistema podría ser capaz de ejecutar código especialmente manipulado que le permitiría eludir protecciones del sistema como Device Guard y Hyper-V."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:ideacentre_300-20ish_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95CFF1F-B5C4-4412-8A08-C71AC57C526A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:ideacentre_300-20ish:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79B93AC-4B97-4BE2-A607-33E83DB5A280"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:ideacentre_300s-11ish_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88505D4E-BEB2-4F5F-9229-F82D30CEF568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:ideacentre_300s-11ish:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAC5CD4-C827-4F53-8F0D-7F976362B230"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:ideacentre_510s-08ish_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2E23E0-E46C-4FD9-9A7E-6DBA8EB2A3A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:ideacentre_510s-08ish:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B577E76-F2D0-41C3-9CEC-0BFEC594E6D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:ideacentre_700_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2574D3F-1983-4102-ADCF-31AD18BD47C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:ideacentre_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6544D554-AEDB-4BE2-8F52-6B841A9C0580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:63_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3460F4C5-8CD4-4B45-A0E6-DB486D033E25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:63:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E0E7DA-863A-4806-BFC8-89F09D94E783"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:h50-30g_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F5CEBF-F7EF-4BF8-87C5-F24C85541F6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:h50-30g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A699C8-93A0-4E2C-9F82-DF25DED0EA20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:m4500_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC361D3-2F5F-4058-8124-CE7381EF42C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:m4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B934ADD-BAD9-45FB-BA2C-98EAC8B7312F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:m4500_id_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CCA53C-A487-4610-A243-162E03DCD077"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:m4500_id:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6E53D2-59A1-46D8-B5EA-3C8FA963D3B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:m4550_id_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BAD395-7892-4D15-A35F-B6D5BD40EA95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:m4550_id:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D15C0D-4B07-454A-B22B-2786FE74F5A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:s500_firmware:m0kkt24a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C61EE96-AD0E-43E4-B3D6-4E7442F68C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:s500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FCBF2F-652E-4DA0-A6BC-961CBD988C2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:v320-15iap_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D8C1DB-5BB4-4219-AD5D-6642273F3F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:v320-15iap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279E3E0E-2350-47FA-A950-5A747D226D4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e73_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF396A57-2479-4C09-99B6-9D39A65EC2C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e73:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0B0B51-22D3-4C3F-9A10-BA95ABE46E60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e73s_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FFE87E-672C-41FF-B231-D362D3D0F39F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e73s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC91C340-8B0D-4714-BB41-2BEAA13171F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e74_firmware:m05kt54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4493C265-8F52-4397-8F47-970AD8B1E226"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e74:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C479EB30-629C-407B-93B2-6136AA49CAA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e74s_firmware:m05kt54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8406C79-EC7E-4D18-A2E7-ADA8139602F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e74s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E4ADCB-D11B-4A39-8C0A-86FB5B263760"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e75_t\\/s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529F20F8-872C-4EAA-BEA7-D747445759C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e75_t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F545A383-5F1C-4A53-A5DF-D2CF8099FF2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e79_firmware:m0lkt12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BA039C-CB3F-4BA0-AD57-DFC307396592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e79:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1FDA91B-F6D0-438D-92F3-FCC216DD7BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e93_firmware:fbktc5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F83EAB9-5256-4932-B61A-B24355A18EBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e93:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9110B9-D4E6-4DEC-B0B9-DE4641117B54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m4500k_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2847F9E-02DA-4FBC-B290-C612A5C705ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m4500k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB21E3F-A4D2-4AEC-8279-0CF8C4DA3803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m4500q_firmware:fhkt66a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E432D0E-8646-4D32-BEB5-CE43EC1D7DB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m4500q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B588AF-BB3E-4A22-8197-0450B307F38B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m4500t\\/s_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C01DD2-81F6-46E7-9379-680DE3D05FF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m4500t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3550BE77-FBF2-49F2-B009-766D9A29750E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m4600t\\/s_firmware:m05kt54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71228C2E-C778-4C8A-8BEE-BF6E5B1788DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m4600t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E704551A-8C09-4497-97A9-D67F15CF3BC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m600_firmware:m00kt44a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5687B42A-8F47-4FF2-9A5B-EB32603A2E30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA4E481-3FE3-4AC5-BDEA-EF0C667E331E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8AE8D2-71FB-440A-8707-B860533A57A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE551E12-1DEC-4B82-804A-72434F1B8A59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m6500t\\/s_firmware:fbktc5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C69D687-9F6E-4E9C-AB60-E678000A7526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m6500t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BD6A2B-9A26-410E-A4D0-CCCCDECB7036"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m6600_firmware:fwkt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64454D0D-CF97-4EEE-BFA6-BDB5A3B565E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CD688F-4889-4EC6-9664-40918E13D2AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m6600q_firmware:fwkt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D637AFA-04FB-4D8A-9F6E-1EB3D0B3F233"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m6600q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B844BF-DD4B-49B1-AF99-5DE7BDC3ACC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m6600t\\/s_firmware:fwkt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C508DC3A-124D-40AE-88DD-097D02CA69FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m6600t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B017B-D84C-42E1-A1DB-2ADF40C62657"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m700_firmware:m05kt54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0AB483-A3EE-44A5-B528-D990803D0D05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81CBD019-58D0-45D3-9BEC-E5C518DE3C7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m710t\\/s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424FDB00-E9B1-469B-B73E-4BD99C1D1056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m710t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17940D80-D0C3-44BE-87C7-1BE466515F3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m715q_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108CB026-FC4F-4ADF-88D7-8552B7029A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m715q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91FA2E9-A1D4-434B-AAEA-B201915B9AF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m72e_firmware:f1kt71a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC15FD5-3844-4104-A9F6-B87CBDF295C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m72e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE50774-5DEE-4A21-BD96-6973272676B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m73_firmware:fckt78a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D60EA2B-0D17-4DAD-9CCF-E555AF7BC0F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m73:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB24CE6-E1F1-4151-9228-61DCD08E9D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m73p_firmware:fbktc5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6DA1CA-5023-4F55-83E4-1ECA97F1EF96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m73p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7C0580-76A1-41C4-B743-96000853236B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m79_firmware:m0lkt12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82869C8-8E7A-4511-AF61-D317D38B1A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m79:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B14A8E7-33BD-458F-8BFB-4699AAD392BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m800_firmware:fwkt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85A9882-55F9-4D01-AE8E-B8544496472D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97FE070-E06D-433B-AAC9-A2460E404B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m83_firmware:fbktcga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B992F9-2F62-4743-85C6-70C48AAA6BD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m83:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB1BF39-4D09-4133-88CB-AD9E1271EFF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m8500t\\/s_firmware:fbktc5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F798BC-BE97-4380-B0FC-F2D8825DD1AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m8500t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC5D34D-72DB-455E-9A01-9066BE4D3670"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m8600t\\/s_firmware:fwkt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC85F1BA-CA17-457F-B65E-E13EA586A72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m8600t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D2DD3A-4596-49DC-BCFB-440FA422B5D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m900_firmware:fwkt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3D3123-1805-4246-AD00-EABF3E9533BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC80C43-18AF-433D-AA51-F473B8501329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m910t\\/s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13A08A2-C764-4C1B-A4C4-A0209D8A78A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m910t\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5BBA91-DBF6-4394-9FB4-863AE52DCD7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m910q_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CDD5E1-2A3B-4039-A37E-28E3EFED12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m910q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4292102B-EE5D-4665-AB5C-936BAB1CBB26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m910x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CC287-6181-4881-80E4-AAE89C7D4581"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m910x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1650B0-A469-4C44-87C9-2FFDFC0AA4DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m92_firmware:9skt95a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46511DB-0FF5-4110-8359-34DD4521931E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m92:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC40D42D-20E1-4D6F-A8F1-9E310C23E27E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m92p_firmware:9skt95a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8346BB8-7AC8-4A9D-9EE3-B656B70FF309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m92p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C247D962-68C7-4EBA-A673-A6633A2E0D6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m93_firmware:fbktc5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64716D3F-989B-4C4E-985F-C9DCA9877C2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m93:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6340A351-D5A0-46D2-BF97-412DD66BDE65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m93p_firmware:fbktc5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E113494-0334-422F-B857-30F9B6548F4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m93p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A2CF02-7D37-4C2A-ABB5-0F072BF7C739"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_afh110_firmware:m05kt73a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA97329-474C-4425-B6A7-E7FF32387397"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_afh110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32F2191-1AC8-418E-82E9-CEEEC0A08474"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_afh81_firmware:fckt80a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5316C3-7A63-4CAB-9E4E-A533AAC59568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_afh81:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E171B10-E2A5-4837-B77B-9B2E4A128DD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_afq150_firmware:fwkt57a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546B17FC-4067-41F4-B0B0-66999CC717C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_afq150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2240063-1947-4394-B102-F6FBE36A9448"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_mc_carrizo-l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2167A9-F598-41E8-8F2E-8DC5E81C2BF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_mc_carrizo-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA077961-8FFD-4470-8D1F-BFC4DCA56F75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_mc_godavari_firmware:m0lkt13a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1131A2-EF03-4504-939B-09D16CCE7166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_mc_godavari:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048FF339-4E87-4604-94DE-57413798C4F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_mc_h110_firmware:m05kt61a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2DA471-9D5B-4A9E-B3C5-30EAECEAFC88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_mc_h110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD83E8C-DF2D-4271-B681-20FDE41BE6D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_mc_h81_firmware:fckt80a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CFDFCB-CE55-436F-AF63-560DA0122462"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_mc_h81:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DC9B3A-7FC1-4D47-B183-31A64B543210"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_me\\/we_h110_firmware:m05kt61a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5700C0D-DBAF-4415-9DA7-EF102704C63F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_mc_h110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD83E8C-DF2D-4271-B681-20FDE41BE6D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_mf\\/wf_h81_firmware:fckt80a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38625144-1C35-4BCF-B038-0B6AA86C8EBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_mf\\/wf_h81:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34555A69-7EFA-4AFC-AB35-A5AF10E4CD37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:ideacentre_510s-23isu_firmware:o2ekt24a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8E2196-B7F9-4CF1-97E7-873D0E9F158F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:ideacentre_510s-23isu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0ED28F0-B719-4D58-A4BE-AA3D6679E4AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:s200z_firmware:m09kt33a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BFA463-2074-47B5-9078-6236237ED828"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:s200z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7358234F-27AE-4390-8C95-BBD3A4990D62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e73z_\\(aio\\)_firmware:fgkt49a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0588E5F6-2B52-430C-85BC-354E5D8A705E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e73z_\\(aio\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC31F9BF-842C-4177-9A2E-F6B08D6CFD1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e74z_firmware:fvkt48a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAF1836-C6B5-4C8C-A6FF-7AF5FD135341"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e74z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AB19AE-C881-4FE6-ADB4-1A09219EA64F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_e93z_\\(aio\\)_firmware:ffkt43a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53FB6E5-0AEB-452B-B5BE-FD8EB68F8679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_e93z_\\(aio\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5B056C-5656-405D-BB23-E3B67E141EA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_edge_62z_firmware:f8kt40a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B5927D-4E64-45A9-B6D7-64A6BEA0D54D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_edge_62z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F893083-0851-445A-B42D-DED748C0B99E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m700z_firmware:fvkt48a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A49CCC6-1808-4D2A-854C-95F020FE19D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m700z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA424630-E452-4870-8D3E-D8C0076FD058"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m7200z_firmware:fgkt46a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFE6DBA-B963-4C40-924D-7B91506DEB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m7200z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338B37A9-3379-4CA7-AD15-65A257C61862"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m7250z_firmware:fgkt46a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B41BED-CDEA-413A-B35E-332DEF780799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m7250z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D656C9-CBB3-4CD2-8718-0739D6607624"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m7300z_firmware:fvkt42a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B636A438-8227-443E-BE3A-E47A295F5925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m7300z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1518CD27-F123-469E-A6AF-C370B6C133FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m73z_\\(aio\\)_firmware:fgkt46a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA022A3-B9C0-4E0D-B276-EE4EC9C35265"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m73z_\\(aio\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B43D37-721E-417A-984B-D524DB9AC4FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m800z_firmware:fvkt42a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6A808E-D753-49E2-9687-F409C130A317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m800z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917D30C-3020-4D74-A4B1-0FCA92C02BA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m810z_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280445F6-17CD-4412-B4DF-86DA774DAA39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m810z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D5591C-340C-45FC-A696-E146EE895FC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m8200z_firmware:fgkt46a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA42E179-E41A-4705-BE22-2733DA547B89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m8200z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43A4C9-87CB-4627-9968-29E25DE20E14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m8250z_firmware:fgkt46a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF10157-9C7E-4654-B73E-AFF0C4BE085A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m8250z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495BD354-99D5-4E69-A439-DA5FAF7FD469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m8300z_firmware:fvkt42a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6260E4-3F73-43C7-8B37-4BD910B40775"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m8300z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3595A16-7491-4CA6-8055-B6365BA8D20D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m8350z_firmware:fvkt42a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC3A29D-816F-4B57-81D8-2D6EAF517A6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m8350z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8216E5A-8E36-4A8B-9FEA-CF8169FE2511"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m83z_\\(aio\\)_firmware:fvkt42a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73681D3A-600E-4E68-9336-53ECB7F8C4B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m83z_\\(aio\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57DAF4F-3984-4BA4-9CAB-DF1E3A988777"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m900z_firmware:fukt39a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062CCE9A-AD71-4111-9D7A-7EBFD238E1F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m900z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBDEE92-3FBB-411A-8EAF-38040A5E2FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m9500z_firmware:fukt44a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B379601A-A9F1-412F-A6B7-359C76FFFE83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m9500z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89446497-E0E8-4506-A00A-81AC9F0A5CF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m9550z_firmware:fukt44a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0285448E-E4BF-41A5-9B99-867951F8973C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m9550z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EC4A70-43AD-4F75-A969-D8F280BE740E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_x1_aio_firmware:m0hkt32a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1561DD91-863F-4FA0-85E6-BB91E16D03D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_x1_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F8061D-17C4-459C-B567-E4E4E7B6F0FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_s3040_firmware:fgkt49a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53161988-3405-401A-966C-AF89699251EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_s3040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF05DE89-B663-410F-8E39-23801FD82219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:yangtian_s800_firmware:ffkt43a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649B31C2-B2B4-4062-B132-5653650DAFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:yangtian_s3040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF05DE89-B663-410F-8E39-23801FD82219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd340_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79837CAF-3538-481E-9137-39F459D3B953"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A48E001-1D62-4A25-8C7F-D4691BAEC3DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd440_firmware:a0tsb5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E26781-8BD3-4786-B925-8A215F7AB3E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED7B28A-1E10-4011-8250-8E060F74E3CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd540_firmware:a1tsb5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE09997C-18CE-4C62-88A9-C4D3436B623A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30925DE-F919-472F-AA5B-0E2566F99DDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd640_firmware:a1tsb5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A081C8-BFA0-451A-89EB-3A67B05A6460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30925DE-F919-472F-AA5B-0E2566F99DDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rq750_firmware:7.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339C4E95-0A7B-4FC0-A5AA-234F674DE631"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rq750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A3486A-5BEF-4B6A-B516-DCABBF7DE66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rs140_firmware:fbkt91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841C7D76-77E5-4449-AED2-21195809D626"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rs140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2808287-BB21-47D6-8D9B-FE0B72E24A5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_td340_firmware:a3tsb5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA14BAC-D541-4CD3-ADCE-2F5706FCE183"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_td340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42109D0F-9FDD-4199-A946-64C453B40CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts140_firmware:fbktc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A027CE30-D11C-4CDC-9FEB-6F14A6E1C525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7791F37A-6A3D-4E9E-9A66-DBF2A7164A5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts150_firmware:fbktc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B92FA0-4C40-4881-8A04-A1238420768F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D3E3E1-5ED3-45F0-B823-190A8A1119C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts240_firmware:fbktc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E998E6-6094-4A7F-8548-BB6DD8187A96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DAEF23-3EE2-4F8F-BE0D-F1981D46E387"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF16DEE-FBB8-4F9A-9817-36E765321A01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B7B624-963D-4BC4-9935-AF592A0B30F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556B0C7A-C3A5-4C27-8B16-168D035EB5F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A85E220-538C-4F31-9469-3B8069F1D1DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A6DD49-1D87-408F-A389-A3215816DF81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC81C774-0B97-4E3D-955B-482D5E7FFD44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_c30_\\(1136\\)_firmware:a1kt57a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F3A7CD-844F-453A-83AC-4E69AD5C8650"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_c30_\\(1136\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380C8746-BBE7-4EB1-94F1-031F6C99BC91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_d30_\\(4353\\)_firmware:a3kt57a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7D8FD2-CBE8-47AA-B056-B900962C560A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_d30_\\(4353\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7AC864-3E2F-4C17-BD25-F11C8CBE0C39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_e31_firmware:9skt97a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C02EF3-6700-44C1-B0BF-D7CB581AB7D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_e31:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AD9B57-FDD3-4B3D-9AC8-4909C46362D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_e32_firmware:fbktc6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570C9C49-80AD-4779-A396-B00E858ED347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_e32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5109E812-6297-4C9F-B2A1-7DBEB186D346"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p300_firmware:fbktc6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38911ED2-9945-4D8F-917E-9F6469BDB74B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCE0A0B-C9EB-402A-B43B-6B7670E2BF73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p310_firmware:fwkt57a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBFD9F3-C223-4AF3-94BB-931E7B77EA05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363F9A72-1401-4F5D-84F1-D018867D972D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A12154-FC5F-468E-891D-518950BABA04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435B308E-C9CC-45BD-B929-D734B773AEDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD40A19-3031-432A-9D59-550F9FA2A072"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C313E3-8F25-4EED-9CC7-0AB1240A43C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p500_firmware:a4kt86a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D151D908-7AD0-4CC0-B6A6-C2CBD20CA288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CA9A54-00A0-4569-9AE0-6AE02A039600"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p510_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9915C930-1B18-4417-A47B-29DE80644950"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3166B16-D045-48BB-9E5D-C40E622291EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p700_firmware:a5kt86a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FB850B-D882-414F-8E4F-8759C59C21E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA54FF9E-3B77-4B09-A77B-D7F522A69326"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7065AE9D-3B8C-4B22-83BD-35B3446B904E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F9868-E1CB-498B-9135-29C4D19327D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p900_firmware:a6kt86a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487E1930-48B1-4FCF-BFF7-808A769117E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FB1B208-2854-4F95-BAB0-661442FEC477"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p910_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A5057A-318D-42F1-A157-E608878497A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4863F94-2106-4F4F-A812-7E109871A0FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_s30_\\(4351\\)_firmware:a2kt54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D69502-F23C-4B6D-B6C3-E412B4C39F77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_s30_\\(4351\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A19159-9A42-4C42-850D-202CA11F79B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_c30_\\(1137\\)_firmware:a1kt57a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08EBF56-7666-4C56-B41B-4CC38A0FE5BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_c30_\\(1137\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C34609-B9F4-420A-9655-B1E2A3593C46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_s30_\\(4352\\)_firmware:a2kt54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12041AAC-95A6-4912-9CCE-9A544662B841"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_s30_\\(4352\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93145BC2-5F6C-4DFF-AF19-AC70AB4E2C9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_d30_\\(4354\\)_firmware:a3kt57a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DC567A-DBFB-4C3A-809F-858B381F0201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_d30_\\(4354\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C1E36-D3C9-4049-867A-AC3BECCCD1B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14695",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1168",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-10T15:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123187."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Engineering Lifecycle Manager 4.0, 5.0, y 6.0 es vulnerable a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 123187."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006976",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100269",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123187",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1174",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-10T15:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 es vulnerable a inyecciones SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 123296."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004268",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1192",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-10T15:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator 5.2 es vulnerable a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente sensible o consumir recursos de la memoria. IBM X-Force ID: 123663."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004267",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102864",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123663",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1377",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-10T15:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874."
      }, {
        "lang" : "es",
        "value" : "IBM Runbook Automation revela información sensible en mensajes de error que podría ser utilizada en más ataques contra el sistema. IBM X-Force ID: 126874."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:runbook_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD56AE1-AC90-4519-B05D-53DEA0F44F20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007031",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100247",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126874",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1431",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-10T15:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127632."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Streams en sus versiones 4.0, 4.1, y 4.2 es vulnerable a cross-site scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 127632."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFBF64F-FD31-41B0-8F12-6B8CEA326569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23595170-2E0B-4426-A752-6EE704B07BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF36ACB-69F4-466C-8E5D-1A2EB6A1C2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9282E439-C38A-4858-9043-17FA7E3B12EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E9BA46-F725-4715-A145-9DF0B2EC7153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91159AC7-A6CB-41AB-85E7-A3A2F12D2566"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006827",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100253",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127632",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-10T18:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en NexusPHP versión v1.5 mediante el parámetro q de searchsuggest.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/6.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lu4n.com/cve/6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-10T18:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file."
      }, {
        "lang" : "es",
        "value" : "La función elf_read_notes en bfd/elf.c en GNU Binutils 2.29 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer y caída de aplicación) o, probablemente, provocar cualquier otro tipo de problema mediante un archivo binario modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100292",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21933",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3156",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-10T18:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisticated timing attacks."
      }, {
        "lang" : "es",
        "value" : "OAuth2 Hawk y JOSE MAC en Apache CXF en versiones anteriores a la 3.0.13 y en versiones 3.1.x anteriores a la 3.1.10 no emplean un algoritmo de comparación de firma MAC de tiempo constante, lo que podría ser explotado por ataques basados en tiempo sofisticados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "6BD90097-47AF-47E6-ABF9-80CFAAC71740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFBBD3B0-C8AE-45BA-83A3-847F03E90319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F66A01-83E5-48D8-AD1F-7F331CC889D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1BF056-AA31-4968-85C7-9897F5720325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF05B313-65F0-4DD3-B6AC-0B4F6E39E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DA5338-6541-46CF-B8BC-BA41CF9C33CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132F95AB-FF48-4434-A5E7-4EC7C801FAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74DDFC9-7DFB-4C60-B20D-274260481F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0029085-6E5C-4502-967B-8CA47FDE39EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F2C5BA-4052-46F7-9AF4-BB87E7A8FFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35153CBF-EBC4-4D83-86F1-E1AC867DE7ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-3156.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96398",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-3156.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8518",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-10T18:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge permite una vulnerabilidad de ejecución remota de código debido a la forma en la que accede a los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100122",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8518",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3130",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-08-10T21:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Fortinet FortiOS 5.6.0, 5.4.4 y versiones inferiores permite que un atacante obtenga la información de la versión de FortiOS mediante la inspección de paquetes FortiOS IKE VendorID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E542BE2-14FC-4BA8-890C-7DA81F33F032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8A5EC4-CE2C-4174-9F09-361B8D153AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C172379-F6BA-4343-831A-62004E742C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516597D9-086E-4668-A40B-473F38125F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62F480B-D8CA-4F5C-8034-C0AE73F26B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F435F408-EC5B-42A0-9E3C-4DE5D702ACAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823C8357-E638-4EAE-B231-3B60263FFE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6615C7-C6F8-4E42-BA09-5A29A0B68E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B24C5917-BBC0-4924-9FB0-49E141DC9D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513A1CAA-9B87-4CF5-9513-396E2E686CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CD94B3-C430-4672-BBEA-B8A542944F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91AA2061-5D28-4DCF-9126-8D5CE57D96F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1FA9832-A573-489B-A26E-7A7DFC1E0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC836E7-DAA2-4FDB-9919-D5FF35E67C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E627C59-7C16-44F0-800D-A2E8A766B26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233236FA-BB13-4261-BE2E-3E617406DC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27844CC9-498B-4A65-91AC-AC130222EE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B4C672-7ED5-4113-87AE-5774D1263C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CB7A90-91BC-49AF-9B5C-EBD212484C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D3221-177B-43CE-BD7D-CB14A110268E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C186D6-6AC5-49EB-A701-C91358B4A25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC9F6C4-F887-4F25-87BD-383F6CF39806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8558962-7A19-4F4A-BED0-9CB5D4CFC422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC63D521-EC88-4B13-BC73-3284F3FCF3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100211",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-073",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7737",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-08-10T21:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de revelación de información en Fortinet FortiWeb 5.8.2 y versiones inferiores permite que un usuario administrador con la sesión iniciada tenga acceso a la contraseña de usuario SNMPv3 en formato de texto no cifrado en webui mediante el código fuente HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.8.2",
            "matchCriteriaId" : "AC1EF0FC-9272-4D3D-AA07-C0A3669064F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100205",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-162",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3168",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-11T01:29:02.213",
      "lastModified" : "2023-11-07T02:44:04.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8658",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-11T01:29:02.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código que se manifiesta en la forma en la que el motor Chakra JavaScript renderiza cuando gestiona objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.0",
            "matchCriteriaId" : "28D94750-D55B-44A2-9106-E4B52F62EBE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100036",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8658",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7674",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-11T02:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances."
      }, {
        "lang" : "es",
        "value" : "CORS Filter en Apache Tomcat 9.0.0.M1 a 9.0.0.M21, 8.5.0 a 8.5.15, 8.0.0.RC1 a 8.0.44 y 7.0.41 a 7.0.78 no añadió un encabezado HTTP Vary indicando que la respuesta varía dependiendo de Origin. Esto permitía, en algunas circunstancias, el envenenamiento de la caché del lado del cliente y del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8A7333-B4C3-4876-AE01-62F2FD315504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92993E23-D805-407B-8B87-11CEEE8B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A11BD74-305C-41E2-95B1-5008EEF5FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595442D0-9DB7-475A-AE30-8535B70E122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0BA92A-0BD3-4CE4-9465-95E949104BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C947E549-2459-4AFB-84A7-36BDA30B5F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D55DF79-F9BE-4907-A4D8-96C4B11189ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14AB5787-82D7-4F78-BE93-4556AB7A7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9453E-BC9B-4F77-85FA-BA15AC55C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF0518-73F9-47DB-8946-A8334936BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AA8778-7833-4572-A71B-5FD89938CE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242E47CE-EF69-4F8F-AB40-5AF2811674CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A225D4F7-174E-47C3-8390-C6FA28DB5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1555C-E55A-4E14-B786-BFEE3F09220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAC42AE-B82A-4ABF-9519-B2D97D925707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8075E9A-DA7F-4A0B-8B4D-0CD951369111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335A5320-6086-4B45-9903-82F6F92A584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B33408-C2E2-4E7C-9334-6AB98F13468C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F036676-9EFB-4A92-828E-A38905D594E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9728EE8-6029-4DF3-942E-E4ACC09111A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DBB843-288C-4060-8777-6CDCF1860D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B87EB5-4902-4C2A-878A-45185F7D0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0596E6C-9ACE-4106-A2FF-BED7967C323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7158DC-966B-4508-8600-40E3E9D3D0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190FE0D-86C1-49EE-BDAE-5879C32BDC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20F45F-01A2-43DD-9731-DFF54E31719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7A728B-59DB-4EDE-8929-C91F4C410902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26889291-3280-4524-8F4A-9B22FF4600C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4CAEBD-0F38-4892-9D0B-9D7392E0BCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C4DA00-E47C-47BE-856C-7E0D4B0F9DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FF234B-A9AD-4C51-8E9E-939DC8ECB64A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA0E2FD-84FB-4691-B4B5-12A381CB091E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CE354B-36BE-4280-9D86-E3AC552E6D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4752862B-7D26-4285-B8A0-CF082C758353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*",
            "matchCriteriaId" : "58EA7199-3373-4F97-9907-3A479A02155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F963D737-2E95-4D7C-92C7-DACF3F36D1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBBC5EA-012C-4C5D-A61B-BAF134B300DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4DB619-F6B0-4896-9AE2-7E7D92105577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF96F96-34DB-4EB3-BF59-11220673FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44883383-6360-4BE6-9B48-1308F85E5797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3E379-47D2-4C86-8C6D-8B3C25A0E1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82391BD-10FF-4E7F-91DC-35AA11325530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C22F12-C072-4A12-A4A9-CBF589A36FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E008F8-2F01-4DD8-853A-337B4B4163C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A776B25-6AF1-421B-8E47-2A7499F6B4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A332FDE-42AE-4F48-9553-5AE953CD6D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701424A2-BB06-44B5-B468-7164E4F95529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63FA521-9D20-49B9-A9A4-0DF891B4E4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9A5B7E-33A9-4651-9BE1-371A0064B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99252E8-A59C-48E1-B251-718D7FB3E399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D05293B-B9D8-42F1-9367-9D2E058EFAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B38892-9C00-4510-B7BA-F2A8F2CACCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C913AA6-2260-4249-BE1D-7139F45735D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7409B064-D43E-489E-AEC6-0A767FB21737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019268F-80C4-48FE-8164-E9DA0A3BAFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFBD214-FCFE-4F04-A903-66EFDA764B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425D86B3-6BB9-410D-8125-F7CF87290AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE3BB0D-1002-41E4-9BE8-875D97330057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D0E80B-EDDA-4876-912D-44BFE6211EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6622472B-8644-4D45-A54B-A215C3D64B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B338F95B-2924-435B-827F-E64420A93244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209D1349-7740-4DBE-80A5-E6343C62BAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E77C24-C265-403D-A193-B3739713F6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28616FA3-9A98-4AAE-9F94-3E77A14156EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335925DA-11C0-4222-B6B7-82602B361751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603A14BF-72BB-4A3D-8CBC-932DC45CEC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2E1C55-3C89-4F26-A981-1195BCC9BB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC242407-A447-4ABD-8E19-EB6DB1F35121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BB906B-812F-462C-9AEE-147C1418D865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B701E17-D231-44ED-A46E-C67749A725B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CAF2F7-D227-4F06-B0E6-533C5EDB105B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305B73CE-0224-4E73-8EB2-FC41A62FBA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DBF476-D7BB-4FC8-89FE-FF0CD135E9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC866C53-0C6B-4D0B-A168-D3985B1CF0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290B0787-49F1-41FB-9AFD-36646FB16CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B741F4F-E52B-43CD-A9CC-6AC46B2DE111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7A8369-183D-4C00-B2B2-0F81DA153C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50550ABF-3414-4F93-A56C-9B0CCC8A52AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3245C35C-02E7-46B9-A720-37D3C17AFDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4239A72-EFA1-49E3-8755-5961060F2198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9053CCE-1175-47F9-BF27-7586F082AF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3974",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100280",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/22b4bb077502f847e2b9fcf00b96e81e734466ab459780ff73b60c0f%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e5342a7dc5e1e7b85%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0003/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/22b4bb077502f847e2b9fcf00b96e81e734466ab459780ff73b60c0f%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e5342a7dc5e1e7b85%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7675",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-11T02:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "La implementación HTTP/2 en Apache Tomcat en sus versiones 9.0.0.M1 a 9.0.0.M21 y 8.5.0 a 8.5.15 eludía una serie de verificaciones de seguridad que prevenían ataques de salto de directorio. Por lo tanto, era posible eludir restricciones de seguridad empleando una URL especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A7FC28-A0EC-4516-9776-700343D2F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18814653-6D44-47D9-A2F5-89C5AFB255F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B461D5A-1208-498F-B551-46C6D514AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876EADA5-60AD-4849-BE10-61C75AA75053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3245C35C-02E7-46B9-A720-37D3C17AFDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4239A72-EFA1-49E3-8755-5961060F2198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9053CCE-1175-47F9-BF27-7586F082AF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3974",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100256",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5f8ab8a02f3610bd56ea2b0d69af25cbde451d79c46276c350e05a15%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/d3a5818e8af731bde6a05ef031ed3acc093c6dd7c4bfcc4936eafd6c%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0003/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5f8ab8a02f3610bd56ea2b0d69af25cbde451d79c46276c350e05a15%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/d3a5818e8af731bde6a05ef031ed3acc093c6dd7c4bfcc4936eafd6c%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180614-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8258",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-11T15:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver."
      }, {
        "lang" : "es",
        "value" : "Un acceso a un array fuera de límites en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux puede ocurrir en un controlador de cámara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8259",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-11T15:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un desbordamiento de búfer en el localizador de servicios en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, ya que el conjunto de variables que determina el tamaño del búfer no se emplea para indicar este tamaño."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8264",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-11T15:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel."
      }, {
        "lang" : "es",
        "value" : "Un proceso de espacio de usuario puede provocar una denegación de servicio en el controlador de cámara de todos los productos Qualcomm con distribiciones Android desde CAF empleando el kernel Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8269",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-11T15:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory."
      }, {
        "lang" : "es",
        "value" : "El parámetro no finalizado en null controlado por el espacio de usuario para IPA WAN ioctl en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux puede llevar a la exposición de la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8271",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-11T15:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una escritura en la memoria fuera de límites en el controlador MDSS Rotator en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux por un parámetro sin sanitizar controlado por el espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8273",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-11T15:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un desbordamiento de búfer en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, mientras procesa comandos de arranque fastboot cuando está deshabilitada la característica de arranque verificado, con un tamaño mayor que el búfer de arranque de imagen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11148",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-11T19:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo server-side request forgery (SSRF) en la previsualización de enlaces en Synology Chat en versiones anteriores a la 1.1.0-0806 permite que usuarios remotos autenticados accedan a recursos de la intranet mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:chat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2-0159",
            "matchCriteriaId" : "73F41B58-00B3-4B8C-AA38-16F34D2F7C93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100310",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_38_Chat",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_38_Chat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11209",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria que ocurre cuando se lee un archivo JPEG embebido en un archivo XML Paper Specification (XPS). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-577/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11210",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria en el parseo de fuentes, en la que la fuente está embebida en un archivo XML Paper Specification (XPS). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-578/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11211",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de desbordamiento basado en memoria dinámica en el parser JPEG. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-579/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11212",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text output. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con la salida de texto. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-580/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11214",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to rendering a path. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con el renderizado de una ruta. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11216",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to bitmap transformations. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con transformaciones bitmap. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-584",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11217",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing of Unicode text strings. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con el dibujado de cadenas de texto Unicode. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-586",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11218",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad uso de memoria antes de liberación (use after free) en la gestión de eventos XFA. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-572/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11219",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor de renderizado XFA. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-585/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11220",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in an internal data structure. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de desbordamiento de memoria dinámica en una estructura de datos interna. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11221",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad explotable de confusión de tipo en la funcionalidad de anotación. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100181",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11222",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor Product Representation Compact (PRC). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11223",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el núcleo del motor XFA. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-588/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11224",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor de diseño XFA. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-587/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11226",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de procesamiento de imagen cuando procesa datos de secuencias de código JPEG 2000 (JP2). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11227",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11228",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos de secuencias de código JPEG 2000 (JP2). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11229",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF)."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de omisión de seguridad cuando se manipula el formato Forms Data Format (FDF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100186",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11230",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor JPEG 2000. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11231",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in Acrobat/Reader rendering engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor de renderizado Acrobat/Reader. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "EF760070-8BFE-49B0-9AFE-082F8D1A7ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "EDE53AA2-7D0D-44B2-897F-EA22196D9037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11232",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) cuando procesa datos Enhanced Metafile Format (EMF) relacionados con la manipulación de pinceles. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100185",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11233",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to block transfer of pixels. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con la transferencia en bloque de píxeles. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11234",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of each pixel are stored. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos TIFF relacionados con la manera en la que se almacenan los componentes de cada píxel. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11235",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor de conversión de imágenes cuando descomprimen datos JPEG. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11236",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en la gestión interna de cadenas literales UTF-16. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11237",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el módulo de parseo de fuentes. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11238",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to curve drawing. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con el dibujo de curvas. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11239",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text strings. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con las cadenas de texto. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11241",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to polygons. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de desbordamiento de memoria dinámica en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con los polígonos. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11242",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to line segments. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con los segmentos de línea. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11243",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor XSLT. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11244",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transformation of blocks of pixels. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con la transformación de bloques de píxeles. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11245",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11246",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing JPEG data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imágenes cuando parsea datos JPEG. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11248",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to pixel block transfer. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con la transferencia de bloques de píxeles. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11249",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing an invalid Enhanced Metafile Format (EMF) record. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando parsea un registro no válido de datos privados Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11251",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el módulo de parseo JPEG 2000. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11252",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager (AGM) module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el módulo Adobe Graphics Manager (AGM). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11254",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the Acrobat/Reader's JavaScript engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor JavaScript de Acrobat/Reader. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11255",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imágenes cuando procesa datos de mapa de color TIFF. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11256",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when generating content using XFA layout engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) cuando genera contenido empleando el motor de diseño XFA. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11257",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de confusión de tipo en el motor de diseño XFA. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100181",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11258",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the embedded GIF image. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF) y la imagen GIF embebida. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11259",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11260",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data interpreted as a GIF image. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF) interpretados como imagen GIF. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11261",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the embedded TIF image. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF) y la imagen TIF embebida. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11262",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing ASCII text string. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con el dibujado de cadenas de texto ASCII. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11263",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal data structure manipulation related to document encoding. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en la manipulación interna de datos relacionados con la codificación de documentos. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11265",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el módulo Adobe Graphics Manager. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11267",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data interpreted as JPEG data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF) interpretados como datos JPEG. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11268",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private JPEG data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados JPEG Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.009.20044",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "E40A408B-E6BB-44C4-85D4-DB2055B2441F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.009.20044",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "19009758-09C7-479F-B43B-72C748934C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11269",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) image stream data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos de secuencia de imagen Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11270",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data representing icons. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos privados Enhanced Metafile Format (EMF) que representan iconos. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11271",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transfer of pixel blocks. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con la transferencia de bloques de píxeles. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "A30D9514-FE2E-4A9C-9500-16890F53E970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "7C9B6745-48B3-47D5-B624-3321E9058FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "99D08096-DEEA-4409-835A-68479002FF0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "C7A7FA12-9250-4E26-87AE-D5413A1B7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.00000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "11A0E83A-9D77-4A0B-90DE-386D21D54146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30060",
            "versionEndIncluding" : "15.006.30306",
            "matchCriteriaId" : "0E4BAFB4-C5F3-4033-9876-AC3CF37206F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.007.20033",
            "versionEndIncluding" : "17.009.20058",
            "matchCriteriaId" : "7C578153-11EF-4F8D-9137-4F7AB8024D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.20",
            "matchCriteriaId" : "1F87CC97-6ED7-4AF1-B7B7-F89EA09A68DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11272",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions en su versión 4.5.4 y anteriores tiene una vulnerabilidad de omisión de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100193",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11274",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de uso de memoria antes de liberación (use after free). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100194",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11275",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:01.993",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de desbordamiento de memoria dinámica. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11276",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11277",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11278",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11279",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de uso de memoria antes de liberación (use after free). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11280",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3016",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3085",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player en sus versiones 26.0.0.137 y anteriores tiene una vulnerabilidad de omisión de seguridad que da lugar a una revelación de información cuando se lleva a cabo una redirección URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "E1E372AA-736C-4E3B-B95F-08F0740729D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "A12CDEA6-D7A0-4FC8-BB0C-86BBD368CB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "5749101F-B883-4303-9511-D1B9F088E74A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "D0784B39-1D26-423F-BB54-6B83F2EECF0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100191",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039088",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-634/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2457",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.bjornweb.nl/2017/08/flash-remote-sandbox-escape-windows-user-credentials-leak/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-634/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.bjornweb.nl/2017/08/flash-remote-sandbox-escape-windows-user-credentials-leak/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3091",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions 4.5.4 and earlier versions 4.5.4 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions 4.5.4 y versiones anteriores 4.5.4 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "7E9F81B2-50AA-4AAE-B248-85749547F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3106",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versiones 26.0.0.137 y anteriores tiene una vulnerabilidad explotable de confusión de tipo al parsear archivos SWF. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "E1E372AA-736C-4E3B-B95F-08F0740729D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "A12CDEA6-D7A0-4FC8-BB0C-86BBD368CB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "5749101F-B883-4303-9511-D1B9F088E74A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.137",
            "matchCriteriaId" : "D0784B39-1D26-423F-BB54-6B83F2EECF0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100190",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039088",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2457",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42480/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42480/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3107",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Experience Manager 6.3 y anteriores tiene una vulnerabilidad de error de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "78ABCAD8-71B2-4799-B887-3FACFA4D873A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100188",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039099",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3108",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Experience Manager 6.2 y anteriores tiene una vulnerabilidad de ejecución de archivos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "5426B0B2-4788-4F92-8C7C-8AC52655D285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100195",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039099",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3110",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability."
      }, {
        "lang" : "es",
        "value" : "Adobe Experience Manager 6.1 y anteriores tiene una vulnerabilidad de exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "E93AA75A-1CAE-4736-832F-0C3B0FE20C6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100192",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039099",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3113",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor JavaScript al crear strings de gran tamaño. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3115",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de revelación de información cuando gestiona enlaces en un documento PDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100187",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3116",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el plugin MakeAccesible cuando parsea datos de fuentes TrueType. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3117",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de desbordamiento de memoria dinámica en el plugin que gestiona enlaces en el PDF. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3118",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability related to execution of malicious attachments."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de omisión de seguridad relacionada con la ejecución de archivos adjuntos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100189",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3119",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in Acrobat/Reader 11.0.19 engine. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor Acrobat/Reader 11.0.19. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3120",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA parsing engine when handling certain types of internal instructions. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de uso de memoria antes de liberación (use after free) en el motor de parseo XFA cuando gestiona ciertos tipos de instrucciones internas. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3121",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Enhanced Metafile Format (EMF) parser. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el parser Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3122",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos Enhanced Metafile Format (EMF) relacionados con las curvas Bezier. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3123",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data drawing position definition. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el motor de conversión de imagen cuando procesa datos de definición de posición de dibujo Enhanced Metafile Format (EMF). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3124",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-08-11T19:29:02.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the picture exchange (PCX) file format parsing module. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader 2017.009.20058 y anteriores, 2017.008.30051 y anteriores, 2015.006.30306 y anteriores, y 11.0.20 y anteriores tiene una vulnerabilidad de corrupción de memoria en el módulo de parseo de formato de archivo picture exchange (PCX). La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "841C1E2E-489F-452C-9512-C4976F7951ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "DD7E48BF-3FFF-4584-A3EF-4C3B671FF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "AEAD8344-7386-4468-BD13-F3220B6EBA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "4A939794-0D67-400D-AF40-5B09A747DA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.000.0000",
            "versionEndExcluding" : "15.006.30355",
            "matchCriteriaId" : "84C9A908-2F15-4B64-9627-32029DC93DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.011.30066",
            "matchCriteriaId" : "28BC5560-D81A-4B5F-B38A-5BA6000E2586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.000.0000",
            "versionEndExcluding" : "17.012.20098",
            "matchCriteriaId" : "ADB953D4-4A78-4D43-BAD9-72BC7F3DF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.21",
            "matchCriteriaId" : "F6E71815-C6E4-465F-B484-C8C87543DEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6327",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-08-11T20:29:00.207",
      "lastModified" : "2025-10-22T00:16:07.670",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 10.6.3-267 de Symantec Messaging Gateway puede encontrarse un problema de ejecución remota de código que describe una situación en la que un individuo puede conseguir ejecutar comandos de forma remota en una máquina objetivo o en un proceso objetivo. En esta situación, tras haber obtenido el acceso al sistema, el atacante podría intentar elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Symantec Messaging Gateway Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:message_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.3-267",
            "matchCriteriaId" : "E1384026-561F-4A47-BE5D-710BBC1281DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/28",
        "source" : "secure@symantec.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100135",
        "source" : "secure@symantec.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42519/",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42519/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6327",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6328",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-08-11T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. A CSRF attack attempts to exploit the trust that a specific website has in a user's browser."
      }, {
        "lang" : "es",
        "value" : "Symantec Messaging Gateway en versiones anteriores a la 10.6.3-267 puede encontrarse con un problema de tipo cross site request forgery (también conocido como ataque en un clic y abreviado como CSRF o XSRF), que es un tipo de exploit malicioso de un sitio web en el que un usuario en el que confía la aplicación web transmite comandos sin autorización. Un ataque CSRF intenta explotar la confianza que un sitio web específico tiene en el navegador de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:message_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.6.3-2",
            "matchCriteriaId" : "14960FF1-4537-46E3-BDCE-3970DFAA89D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100136",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9556",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-11T20:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabildad de tipo Cross-Site Scripting (XSS) en Video Metadata Editor en Synology Video Station en versiones anteriores a la 2.3.0-1435 permite que atacantes remotos autenticados inyecten script web o HTML arbitrario mediante el parámetro título."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:video_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1-1364",
            "matchCriteriaId" : "CE3AE3D6-3712-4E52-924F-4FAFDAEC0E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_39_Video_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_39_Video_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9800",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-11T21:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://."
      }, {
        "lang" : "es",
        "value" : "Una URL creada con fines maliciosos svn+ssh:// podría provocar que clientes de Subversion en versiones anteriores a la 1.8.19, en versiones 1.9.x anteriores a la 1.9.7, y en versiones 1.10.0.x a 1.10.0-alpha3 ejecuten un comando shell arbitrario. Tal URL podría ser generada por un servidor malicioso, por un usuario malicioso que se confirma en un servidor honesto (para atacar otro usuario de los repositorios de ese servidor), o por un servidor proxy. La vulnerabilidad afecta a todos los clientes, incluyendo aquellos que usan file://, http://, y svn:// plano (sin túnel)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.18",
            "matchCriteriaId" : "C10F0402-14B0-4870-91A0-53BA3200B2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892FF423-1848-4E69-8C4C-E1972B656196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACF37C7-8752-4A8F-B7E3-2E813C4A0DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74200C33-9505-48EB-964D-6CA28C7F6DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FBAFE7-986D-4B24-8122-FDCC380331C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B6148E-3E5F-4DCB-BD8E-45B3D56CB18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA37FBDF-C9BD-4D8F-B24A-CC35DF7EE7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E228BEF8-CACB-46DF-816B-ECCB406DFB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEDF94B-8B94-43AD-8DA7-580EF40CAD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.10.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "8053093C-E4F4-411B-A4B7-1728E40E7D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.10.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "6997704A-5C87-47B7-BF17-5C0F43642065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:subversion:1.10.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E5C581-41D7-4694-A050-5455D6C8BB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143722/Apache-Subversion-Arbitrary-Code-Execution.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3932",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540999/100/0/threaded",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100259",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039127",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2480",
        "source" : "security@apache.org"
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2017-08-11-933099891.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/cb607dc2f13bab9769147759ddccb14a4f9d8e5cdcad5e99c0d03b63%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/d8cf53affd700dfce90bad4968fb8b1dfb69cf7c443052c70398ff76%40%3Ccommits.subversion.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-09",
        "source" : "security@apache.org"
      }, {
        "url" : "https://subversion.apache.org/security/CVE-2017-9800-advisory.txt",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143722/Apache-Subversion-Arbitrary-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540999/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2017-08-11-933099891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/cb607dc2f13bab9769147759ddccb14a4f9d8e5cdcad5e99c0d03b63%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/d8cf53affd700dfce90bad4968fb8b1dfb69cf7c443052c70398ff76%40%3Ccommits.subversion.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://subversion.apache.org/security/CVE-2017-9800-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-14T13:29:00.187",
      "lastModified" : "2023-11-07T02:38:28.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12799. Reason: This candidate is a reservation duplicate of CVE-2017-12799. Notes: All CVE users should reference CVE-2017-12799 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9802",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-14T13:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially crafted input strings."
      }, {
        "lang" : "es",
        "value" : "El método Javascript method Sling.evalString() en Apache Sling Servlets Post en versiones anteriores a la 2.3.22 emplea la función javascript ‘eval’ para parsear cadenas de entrada, lo que permite la ejecución de ataques XSS pasando cadenas de entrada especialmente manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_servlets_post:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.20",
            "matchCriteriaId" : "C9E9FE4E-91AE-4CBD-90CB-7BE2ECBB1C8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143758/Apache-Sling-Servlets-Post-2.3.20-Cross-Site-Scripting.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541024/100/0/threaded",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100284",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/SLING-7041",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2f4b8333e44c6e7e0b00933bd4204ce64829952f60dbb6814f2cdf91%40%3Cdev.sling.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143758/Apache-Sling-Servlets-Post-2.3.20-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541024/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/SLING-7041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2f4b8333e44c6e7e0b00933bd4204ce64829952f60dbb6814f2cdf91%40%3Cdev.sling.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9646",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento de ruta de búsqueda no controlado en Solar Controls Heating Control Downloader (HCDownloader) versión 1.0.1.15 y anteriores. Se ha identificado un problema de elemento de ruta de búsqueda no controlado, lo que podría permitir que un atacante ejecute código arbitrario en un sistema objetivo mediante un archivo DLL malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarcontrols:heating_control_downloader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.15",
            "matchCriteriaId" : "1AFDB908-9BF6-4091-B9F9-AAB5C81BF7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100261",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9648",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento de ruta de búsqueda no controlado en Solar Controls WATTConfig M Software versión 2.5.10.1 y anteriores. Se ha identificado un problema de elemento de ruta de búsqueda no controlado, lo que podría permitir que un atacante ejecute código arbitrario en un sistema objetivo mediante un archivo DLL malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarcontrols:wattconfig_m:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.10.1",
            "matchCriteriaId" : "1CEC0077-7FBF-4BE5-B871-7ABCE3D17EA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100264",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9653",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en OSIsoft PI Integrator for Business Analytics en versiones anteriores a la 2016 R2, PI Integrator for Microsoft Azure en versiones anteriores a la 2016 R2 SP1, y PI Integrator for SAP HANA en versiones anteriores a la 2017. Un atacante puede obtener acceso con privilegios al sistema sin estar autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_integrator_for_business_analystics:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6853E73C-50FE-47DD-BD81-9A528ED05BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_integrator_for_microsoft_azure:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25392999-7BC1-4E32-8B63-274A2666DD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_integrator_for_sap_hana:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE851C8E-DCC1-4CDE-839E-804EFE28B51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100212",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9655",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a malicious web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de tipo Cross-Site Scripting (XSS) en OSIsoft PI Integrator for Business Analytics en versiones anteriores a la 2016 R2, PI Integrator for Microsoft Azure en versiones anteriores a la 2016 R2 SP1, y PI Integrator for SAP HANA en versiones anteriores a la 2017. Un atacante podría ser capaz de subir un script malicioso que intente redireccionar usuarios a un sitio web malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_integrator_for_business_analystics:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016",
            "matchCriteriaId" : "D8E0EC7C-427F-441C-8C1B-99F24C061FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_integrator_for_microsoft_azure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016",
            "matchCriteriaId" : "9DF99D91-D094-4EF0-86AD-037F54AAF9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_integrator_for_sap_hana:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016",
            "matchCriteriaId" : "338BC335-5BC9-47C6-B4A9-C63353118B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100212",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9659",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en Fuji Electric Monitouch V-SFT en las versiones anteriores a la 5.4.43.0. Se ha identificado una vulnerabilidad de desbordamiento de búfer basado en pila, lo que podría provocar un bloqueo o permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.42.0",
            "matchCriteriaId" : "1975EBDE-8004-45FB-A57D-A10461C775EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100265",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-643/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-644/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-643/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-644/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9660",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en memoria dinámica en Fuji Electric Monitouch V-SFT en las versiones anteriores a la 5.4.43.0. Se ha identificado una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica, lo que podría provocar un bloqueo o permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.42.0",
            "matchCriteriaId" : "1975EBDE-8004-45FB-A57D-A10461C775EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100265",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-645/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-645/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9661",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento de ruta de búsqueda no controlado en SIMPlight SCADA Software versión 4.3.0.27 y anteriores. Se ha identificado la vulnerabilidad de elemento de ruta de búsqueda no controlado, lo que podría permitir que un atacante coloque un archivo DLL malicioso en la ruta de búsqueda, desembocando en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplight:scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0.27",
            "matchCriteriaId" : "941323A5-F73C-4BFC-BAD8-FDED058FE396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100263",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9662",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-14T16:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de gestión incorrecta de privilegios en Fuji Electric Monitouch V-SFT en las versiones anteriores a la 5.4.43.0. Monitouch V-SFT se instala en un directorio con controles de acceso por defecto débiles, lo que podría permitir que un atacante autenticado con acceso local escale privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.42.0",
            "matchCriteriaId" : "1975EBDE-8004-45FB-A57D-A10461C775EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100268",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-646/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-646/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11149",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-14T19:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo server-side request forgery (SSRF) en Downloader en Synology Download Station 3.8.x en versiones anteriores a la 3.8.5-3475 y 3.x en versiones anteriores a la 3.5-2984 permite que usuarios remotos autenticados descarguen archivos locales arbitrarios mediante URI manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388EC850-91FB-495E-8CC1-E3B6468A7D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EE8CB0-5D39-4361-B17F-D073377B8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF5E40E-AFF1-4548-8F80-61D11A658C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DAD7D7-C695-4C6A-9674-199C61604B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47302F69-2ED0-431E-82EE-16942C8B14B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EF711B-10DA-4356-8ED0-FFF08BDB0A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400A6164-B4D7-4988-B16A-E3CFABDB995D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5F75FA-B343-4513-B92C-5F3D89DEB2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5D8FDA-BE01-440A-93F5-0314C15B345C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043E910E-9129-43C9-B27F-0A8C6AC9D44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3DD08D-4025-424B-8B6D-6F45F64BA1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4ED375-025B-4C51-B8B4-DDAFE550C7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FA562D-F3C5-43D3-8FF2-5C3BC84B23C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3688F1-5EFC-4611-9976-85EAF9595255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FBB132-BF8D-4B95-A32A-12B40E85C1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC3C6CE-9E0F-499F-B3AC-2D9F21289670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93E493C-1889-40B3-B8C7-0F4D0B6B72DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4712A752-7F18-45B0-A333-287734E6B46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971F5675-E834-48FE-AED6-0D06E554FEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FFE8AC-9E8B-4435-B6A7-B876AFF4D669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9AD47A-71CA-4E9F-B4BB-49C664BFFDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D5E19B-A34F-4FD1-AC8E-005E6F565ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858B2972-78D9-496D-B61D-BB38F5CC8B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645A9A0B-F0D1-4122-A5D4-E12D32AA8633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD9E764-07E4-44F0-B268-7BFFE1E91F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DFFD31-8496-4B23-8AA0-05D895A4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB54B93-7F72-4797-8620-552EB9971B0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D6CEC0-9BAE-4627-A57A-5DBA81A39AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27981034-F4ED-47B7-9A87-D5EAD8BB4EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E525F0C-1D37-447D-A688-6FD87822889C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3240461-598E-4C41-9234-400AAAEE32B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D36302B-9478-4348-8059-D89BEC858F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFA7620-E000-448D-BEC2-9EEC47649334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_28_Download_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_28_Download_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11150",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-14T19:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en Document.php en Synology Office 2.2.0-1502 y 2.2.1-1506 permite que usuarios remotos autenticados ejecuten comandos arbitrarios mediante metacaracteres shell en el nombre del archivo manipulado de documentos RTF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:office:2.2.0-1502:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1492EEA5-B996-402D-B964-29D3BBFB48FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:office:2.2.1-1506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A7F1F6-2C8C-4F9D-B009-014EE3D19447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_26_Office",
        "source" : "security@synology.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_26_Office",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11156",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-14T19:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Synology Download Station 3.8.x en versiones anteriores a la 3.8.5-3475 y 3.x en versiones anteriores a la 3.5-2984 emplea permisos débiles (0777) para el directorio ui/dlm/btsearch, lo que permite que usuarios remotos autenticados ejecuten código arbitrario mediante la subida de un archivo ejecutable usando vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388EC850-91FB-495E-8CC1-E3B6468A7D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EE8CB0-5D39-4361-B17F-D073377B8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF5E40E-AFF1-4548-8F80-61D11A658C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DAD7D7-C695-4C6A-9674-199C61604B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47302F69-2ED0-431E-82EE-16942C8B14B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EF711B-10DA-4356-8ED0-FFF08BDB0A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400A6164-B4D7-4988-B16A-E3CFABDB995D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5F75FA-B343-4513-B92C-5F3D89DEB2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5D8FDA-BE01-440A-93F5-0314C15B345C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043E910E-9129-43C9-B27F-0A8C6AC9D44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3DD08D-4025-424B-8B6D-6F45F64BA1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4ED375-025B-4C51-B8B4-DDAFE550C7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FA562D-F3C5-43D3-8FF2-5C3BC84B23C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3688F1-5EFC-4611-9976-85EAF9595255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FBB132-BF8D-4B95-A32A-12B40E85C1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC3C6CE-9E0F-499F-B3AC-2D9F21289670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93E493C-1889-40B3-B8C7-0F4D0B6B72DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4712A752-7F18-45B0-A333-287734E6B46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971F5675-E834-48FE-AED6-0D06E554FEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FFE8AC-9E8B-4435-B6A7-B876AFF4D669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9AD47A-71CA-4E9F-B4BB-49C664BFFDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D5E19B-A34F-4FD1-AC8E-005E6F565ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858B2972-78D9-496D-B61D-BB38F5CC8B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645A9A0B-F0D1-4122-A5D4-E12D32AA8633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD9E764-07E4-44F0-B268-7BFFE1E91F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DFFD31-8496-4B23-8AA0-05D895A4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB54B93-7F72-4797-8620-552EB9971B0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D6CEC0-9BAE-4627-A57A-5DBA81A39AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27981034-F4ED-47B7-9A87-D5EAD8BB4EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E525F0C-1D37-447D-A688-6FD87822889C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3240461-598E-4C41-9234-400AAAEE32B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D36302B-9478-4348-8059-D89BEC858F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFA7620-E000-448D-BEC2-9EEC47649334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_28_Download_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_28_Download_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-14T20:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46."
      }, {
        "lang" : "es",
        "value" : "Un usuario estándar autenticado podría resetear la contraseña de otros usuarios (incluyendo al administrador) alterando los datos del formulario. Afecta a kanboard en versiones anteriores a la 1.0.46."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.45",
            "matchCriteriaId" : "BF0BD9E9-7C97-4DAD-842F-0D05D1EF2EF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100352",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/88dd6abbf3f519897f2f6280e95c9eec9123a4ae",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/88dd6abbf3f519897f2f6280e95c9eec9123a4ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-14T20:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46."
      }, {
        "lang" : "es",
        "value" : "Un usuario estándar autenticado podría resetear la contraseña del administrador alterando los datos del formulario. Afecta a kanboard en versiones anteriores a la 1.0.46."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.45",
            "matchCriteriaId" : "BF0BD9E9-7C97-4DAD-842F-0D05D1EF2EF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100352",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/b79b18efd7a1a8b591753a4eddd473f88d55b7df",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/b79b18efd7a1a8b591753a4eddd473f88d55b7df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-14T20:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated."
      }, {
        "lang" : "es",
        "value" : "RealTime RWR-3G-100 Router Firmware Version Ver1.0.56 tiene una vulnerablidad de tipo cross-site request forgery (CSRF), un ataque que fuerza a un usuario final a ejecutar acciones no deseadas en una aplicación web en la que está autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rtsindia:rwr-3g-100_firmware:1.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608D1B09-644A-4280-A9D1-D016C67E3157"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rtsindia:rwr-3g-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0B370B-5B41-4C2A-8D1F-692964D1AD54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://touhidshaikh.com/blog/advisory/realtime-rwr-3g-csrf/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42449/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://touhidshaikh.com/blog/advisory/realtime-rwr-3g-csrf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42449/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-14T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import."
      }, {
        "lang" : "es",
        "value" : "GitLab Community Edition (CE) y Enterprise Edition (EE) en versiones anteriores a la 8.17.8, 9.0.x en versiones anteriores a la 9.0.13, 9.1.x en versiones anteriores a la 9.1.10, 9.2.x en versiones anteriores a la 9.2.10, 9.3.x en versiones anteriores a la 9.3.10, y 9.4.x en versiones anteriores a la 9.4.4 podría permitir que atacantes remotos ejecuten código arbitrario mediante una URL SSH manipulada en una importación de proyecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "8.17.7",
            "matchCriteriaId" : "3437C074-9275-4375-80C6-D803FA8424A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "8.17.7",
            "matchCriteriaId" : "C7E6CB12-5A39-4A37-81EB-4DE53B8AFC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CA141AF7-A786-4484-89C6-641FE75304EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2FD7115D-5389-41E0-A434-E309C589904E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7184277D-C727-4364-8926-BFADAAD65111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "56A91763-FD44-400E-A44B-CFF30BED8BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6D737A3C-7FCE-40FF-8B4F-73ACCF72A95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "39CF4E50-959C-4CCD-BA3B-C08801938FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7FB672A5-0079-4174-9B05-87B7830ADE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D4167398-A7FF-4F0A-8BB3-2A61095EADD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "5D760B70-6A23-4A86-862D-358DED91273F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2FB25D27-2086-4B5D-98E4-6D5DE385CEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "95CB5974-672E-45B5-8251-2E31AB4B56C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EB58A6B5-2444-4F0C-8D76-23286A148FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "134815AB-D605-4148-9358-11B56347F94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "863D2334-4FC6-43C7-BC79-34FFB932C9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C0AADEAB-5C55-4E5D-9291-8EB7A3C9749C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0542A00D-9B9F-4F31-A71D-C0036868A6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "11733956-6E02-4157-9FBC-3FA2EA0FD476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "69DEB9B7-A622-4F02-87C0-D8C073FBC433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "E1CDD134-AE19-4B1C-8ADB-40E1B4AEE963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1B383F93-5B84-4959-8BF9-5EF589FE3861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.10:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D7555266-A0C7-440F-88C1-CF3C2F6ECA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CFCA88A2-52A6-46C0-8D04-6D66A25ECC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.11:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D2F43A32-769D-4C8E-A1B3-86512D2C05FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.11:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2F96255F-95ED-4F8B-A891-EDC80F75EFB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.12:*:*:*:community:*:*:*",
            "matchCriteriaId" : "8E16D6A5-6F0A-4A60-A082-0765ADB8B0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.0.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E9084EEF-9FE1-4885-BA7E-2ACD497B4E95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "3BCC102E-DB51-4449-9518-B01B7894AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F0E33B7B-74F6-4180-83DD-B3103FA69973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7396F198-4E66-460C-AAC2-7B8DDD2F3D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5B456316-8D07-4FC4-8371-F1FAA6DA66CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "90F5AE42-8D2F-434B-B6B1-57B9B6024D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A6BD46FF-C9D8-4420-BEF2-55E7865A7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "E8084DEF-E62E-4C55-9E3F-9985966717DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F2894748-99BB-4105-BF7E-9EBF3A96C591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D6074F33-B363-4070-B572-C669650425AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "48F0243B-5E32-4958-907F-28F687BCFEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BF6F7B4C-E0EE-4B89-944D-25539CE7F54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B8A8A421-89D4-4D88-AC5E-A4675B57281D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "4EADBBD3-DC56-4E06-ABED-000CB59FADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9F674ABE-8BD6-45DD-9604-3789D7143ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6E987824-25AB-4BC2-BBAB-032EA3640BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7E8D058B-CA9A-4DB0-BA37-B4A8F82B80CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "106A7C2B-64C7-49EB-8440-0C8F85B1B834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C8965CE9-87FE-4FA2-B753-E4EF270D733A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "F1519903-67B1-498B-B805-BDFDC467EB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.1.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A4474444-B743-4E02-9D5B-3F6B1E450CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D80390B9-CDBF-413B-A4BD-DC070DE965FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77E257DF-7EF6-4F94-A901-70D14B230AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "2F9C1467-8D27-4AF8-B6E1-F8BBFB92C4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5150656E-DF20-4930-9D8F-F35371E25F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "341C87D3-A74B-41AF-BBA2-205997F8B0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ED08A352-986E-4B87-A2B3-FD42C99DEBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C84AF9BB-5A67-432F-AB71-310953407EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F78723C9-5DCC-49D8-A81C-2ABEFF93DCF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "FD2D4D56-9218-4962-88C2-44A1728F1EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA0BE35C-0CE7-49C3-882B-9E8751CF780E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "8289D1E1-8DE2-4795-B602-E357C4A3B7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "78F36A2D-0BAF-461B-9C45-28F5E5919FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "0BBDC678-4A27-4236-A27E-25C88EFC2008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A1ED26D9-9138-40E7-8040-7758A3C55DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "E2B2A42C-7860-46CF-AB24-05FDFF58D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D8BA8D86-FEB3-4EF6-AD02-AC7EB724A8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "1D55194E-7027-4F64-BFCA-7380FC0B9F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "BC83D69E-AB3C-4538-A240-9CFD71C17180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "00E69F6C-69B8-4789-BFC2-669D86F6E129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.2.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "1C9D27C6-718F-464E-A304-2B555D4D8BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "87C5D7F8-F57E-408A-B069-7197B8A721CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3978E438-C566-4D20-8A61-35BE3DD53216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "472EDFE6-2AF5-452C-AF40-CACCDD0C00EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E1B7646D-8AA1-4C71-A200-1F4AF69C15F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "00594FEE-AF50-4725-84E0-217051C02F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8706044B-BC22-4808-8C91-F212A9597CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "470AF5CB-8F15-4D7C-B1FB-73335CA9F52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "6813D127-BD01-47C3-B2C2-28C48D15E662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.4:*:*:*:community:*:*:*",
            "matchCriteriaId" : "1C750B16-1605-43B0-894D-055600E635B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F7E8D785-1D9F-4DCE-BDDB-3F43A3D1A121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CA5576C8-FCB7-440F-92E1-34809E91AA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D039DB11-A182-43C7-9D1C-CADC03E4EEB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.6:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C87EF839-2B6F-4C6F-A6CE-5B8F03B30209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "706DC40E-D1A8-4124-A038-8F1AF94FDA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.7:*:*:*:community:*:*:*",
            "matchCriteriaId" : "388525B6-2021-4EC7-A030-A8B1836B81ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4CCEF509-13C2-4DD0-A578-FDA31EE9B152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.8:*:*:*:community:*:*:*",
            "matchCriteriaId" : "DFB211D1-224F-49E0-9FAA-8C254805C000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3785EDB4-0F39-4A5B-86B2-84D176621284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.9:*:*:*:community:*:*:*",
            "matchCriteriaId" : "48DB2E8F-7C64-48D8-B28D-BC1F6987C2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B577A91B-7BFE-4BDC-A3F0-C9F0BE383B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "559AB080-B1A7-429C-9EC0-8AB2D0833CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8A7B88CC-DD9F-47F8-9528-ADC067F425E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "872C5FE5-BE2F-49E3-B26A-376645CA8893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "931EC96C-12A2-4CBC-86D3-C75223373A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "066065C9-485C-4C29-A5C1-7E0948F7396B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "648F9926-6F22-4663-90DB-92D299443FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "FEA56D27-8AB6-464E-A211-C4E801EB3874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9AF64005-6780-4628-80EF-6F45CD69A0DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1190",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-14T22:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By manipulating a configurable property, an attacker could exploit this vulnerability to gain full control over the system. IBM X-Force ID: 123559."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Strategic Supply Management Platform 10.x y 10.1 podría permitir que un usuario local con roles de acceso especiales ejecute código arbitrario en el sistema. Mediante la manipulación de una propiedad configurable, un atacante podría explotar esta vulnerabilidad para obtener el control total del sistema. IBM X-Force ID: 123559."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5555B678-E8D8-43CC-8117-7CE4E8796A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21FB10-17CF-4968-A4D6-B62BA6B5D7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C308D968-9F2F-44FE-9820-B1E1850B5127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90517A03-8F15-41B1-B30C-548B04B8C732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD66461-A68B-44A1-BE9D-51D600F77FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59E7DBF-728D-4463-B28A-B21A3DDBA6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D86A9B-A047-4299-8D21-E2F1CA512AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3643AA98-41D9-4692-A327-77E9320B19FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316CC123-E4DE-4DE6-B077-457FA34D22D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C1A95D-7F81-4A0D-9353-17B4E651F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E856B7F-E960-46C3-B828-508689AE375F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBECE59F-3B62-4DDF-884A-963D6B64E6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697DE60B-55BC-4F65-9045-77D5B11395CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2D5E97-2A91-4E4D-AD28-5DDD86AD4DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12170D-1E85-4116-8EAC-B5C8F8D0C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4FB269-336D-46B9-8E63-ED9FB0BCB6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3290A0-A8B3-4CB5-B762-3DB2C39EF3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD32235-AA85-4EC7-B80E-D21CF7D3B3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD90BD58-2DA8-4996-97C7-FA8C33BAE91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE42663-A9ED-4699-954C-88FF3CC269DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918C6DE4-AB67-4441-B909-201EDDD6752E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F322CBE-90CB-448F-9050-422A155F1099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E465BDB0-7B28-44D5-8BBB-652849A835F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DAE142-6C1A-4913-B485-868CCC2A1A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7400F66A-874B-4631-9601-9A44A97FD3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5EF36C-0B12-4E83-BF97-7C6DE880ED5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B2C996-EAD2-4FAB-A526-2885BEBBB5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C631E15C-1D03-48FB-8407-C5C5BECCD88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF57983-F635-43B7-B829-ECCB90316C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0DAE73-DDAC-4972-BD28-456E506B0DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006B14A4-D8B0-4FA1-ABCE-E8A07AA6D752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725D01D2-25EB-400A-8C54-9EE85DA400CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CF890B-1F33-4923-8C7B-69FEC29D5476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C5E315-9C99-4B09-BD91-30EC10E1F6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D686D3-3866-4126-B0B4-F1F3C44E8915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F300CFB-AA06-4458-A0E1-E678364E2FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E03914-296D-4A9E-91B0-A240471F46D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4CD3A-9D28-4B27-A662-3A70767ED6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB1086A-67C8-4335-88F1-F7D4F2EADC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0561DAA-35D3-46EA-9E76-8E2E71445D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806C334F-FC48-4B32-A0F6-D1A5E47BF69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A99871-8804-41BA-AAA9-BDEC07BF9977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C313E-5816-437B-8C62-D893A254FBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B043330-8938-4B6F-9EF0-D3DE596D8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308F7C3-8B20-48E5-A22E-E60C9E40BD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E98450-93BC-4C9C-96B9-AD87B865445E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006799",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123559",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1469",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-14T22:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, y 11.5 podría permitir que un usuario local consiga privilegios elevados mediante la colocación de archivos arbitrarios en directorios de instalación. IBM X-Force ID: 128468."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006069",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100309",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128468",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-15T16:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack."
      }, {
        "lang" : "es",
        "value" : "La función numpy.pad en Numpy 1.13.1 y versiones anteriores no cuenta con validación de entrada. Una lista vacía o ndarray entrará en un bucle infinito, lo que puede propiciar que los atacantes provoquen un ataque DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:numpy:numpy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.1",
            "matchCriteriaId" : "516F3D03-E951-43EA-A475-CB22E2833667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/numpy/numpy/issues/9560#issuecomment-322395292",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/numpy/numpy/issues/9560#issuecomment-322395292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-15T16:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected."
      }, {
        "lang" : "es",
        "value" : "Xen mantiene los bits _GTF_{read,writ}ing como apropiados para informar al invitado de que se está empleando una sentencia grant. Se espera que el invitado no modifique los detalles de la sentencia grant mientras se está utilizando, aunque puede modificar/reusar la entrada grant cuando no está en uso. Bajo algunas circunstancias, Xen limpiará los bits de estado demasiado pronto, informando al invitado de forma incorrecta que la sentencia grant ya no se está utilizando. Un invitado podría creer prematuramente que un marco de concesión vuelve a ser privado de forma segura y reutilizarlo de forma que contenga información sensible, mientras que el dominio en el extremo de la sentencia grant sigue utilizándola. Xen 4.9, 4.8, 4.7, 4.6, y 4.5 se han visto afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CCECD0-C0F9-45A8-8699-64428637EBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED340C-6746-471E-9F2D-19D62D224B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DA3D28-EAE7-4EC9-977C-444A46CBD9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14442705-D243-4250-A486-E70989946D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D58EAB-3FEB-4D5A-B998-D77EC90FDFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DD0255-9127-4C7F-9C02-42198820363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E971A9F-18CB-4264-AF71-CCB32B7325B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D52712-AD95-459D-943C-936F90B828B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100341",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039177",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-230.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-230.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-15T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier."
      }, {
        "lang" : "es",
        "value" : "En modules/imgcodecs/src/grfmt_pxm.cpp, el tamaño del búfer AutoBuffer _src es más pequeño de lo esperado, lo que causará un desbordamiento de búfer de copia posteriormente. Si la imagen proviene de una fuente remota, podría provocar la ejecución remota de código o una denegación de servicio. Esto afecta a la versión 3.3 de Opencv y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9370",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-15T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier."
      }, {
        "lang" : "es",
        "value" : "En opencv/modules/imgcodecs/src/grfmt_pxm.cpp, la función PxMDecoder::readData tiene un desbordamiento de enteros cuando calcula src_pitch. Si la imagen proviene de una fuente remota, podría provocar la ejecución remota de código o una denegación de servicio. Esto afecta a Opencv 3.3 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9371",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-15T16:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier."
      }, {
        "lang" : "es",
        "value" : "En opencv/modules/imgcodecs/src/grfmt_pxm.cpp, la función ReadNumber no comprueba el tamaño de la entrada, lo que conduce a un desbordamiento de enteros. Si la imagen proviene de una fuente remota, podría provocar la ejecución remota de código o una denegación de servicio. Esto afecta a la versión 3.3 de Opencv y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9372",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8665",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-08-15T18:29:00.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka \"Xamarin.iOS Elevation Of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente de actualización Xamarin.iOS en sistemas con macOS permite que un atacante ejecute código arbitrario como root. Esto también se conoce como \"Xamarin.iOS Elevation Of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xamarin.ios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.11",
            "matchCriteriaId" : "13FC8259-FBCE-44ED-8D1C-CC17560BE6A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100308",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8665",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42454/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-16T14:29:00.177",
      "lastModified" : "2023-11-07T02:38:31.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11424.  Reason: This candidate is a duplicate of CVE-2017-11424.  Notes: All CVE users should reference CVE-2017-11424 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6421",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-16T15:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En la función de controlador táctil en todos los productos Qualcomm con Android for MSM, Firefox OS for MSM, o QRD Android, el usuario podría controlar una variable, lo que llevaría a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=be42c7ff1f0396484882451fd18f47144c8f1b6b",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=be42c7ff1f0396484882451fd18f47144c8f1b6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8243",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-16T15:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file."
      }, {
        "lang" : "es",
        "value" : "Podría ocurrir un desbordamiento de búfer en todos los productos Qualcomm con Android for MSM, Firefox OS for MSM, o QRD Android cuando se procesa un archivo de imagen firmware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465/references",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8248",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-16T15:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation."
      }, {
        "lang" : "es",
        "value" : "Podría ocurrir un desbordamiento de búfer al procesar un mensaje NAS descendiente en Qualcomm Telephony tal y como se emplea en Apple iPhone 5 y siguientes, iPad 4th generation y siguientes, y iPod touch 6th generation."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.2",
            "matchCriteriaId" : "859CEE41-0336-40DF-A9EF-C3CF2315D023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/34",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7546",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-16T18:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password."
      }, {
        "lang" : "es",
        "value" : "PostgreSQL en sus versiones anteriores a 9.2.22, 9.3.18, 9.4.13, 9.5.8 y 9.6.4 es vulnerable a un fallo de autenticación incorrecta que permite que atacantes remotos obtengan acceso a cuentas de la base de datos con una contraseña vacía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD27648F-E2FF-4779-97F9-2632DCC6B16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFB4916-8B59-4534-804C-CF9DA1B18508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3413A3AB-45A3-48E1-9B30-1194C4E7D49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5760CE83-4802-42A0-9338-E1E634882450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41009E-4028-4D82-B8D0-8B949EDC0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832F3EBE-A92C-4FB3-BF3C-0E7B750F966B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1571EE80-55A6-4F91-909B-C46BA19EC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848E3BC-293A-4A75-BEB7-C2F1637AD3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC9133E-94FC-4199-BD69-BBB46CF3799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200172CE-40AB-49E3-93D1-9947E3CBFFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90B21A9-19A7-4DCB-A2FE-C558CCB6BBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924D1F84-EC50-44C3-A156-DC8E3A5E3909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5EAF3B-B148-4B57-8E4E-0B5365003DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CE8DB4-CD97-4F60-9080-9FB093BD60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5AA780-4378-4959-9256-510C65E6E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C9EB31-5D8E-4583-BC95-700F53854964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700FF66-108C-47C2-B4C2-1CB0B5575EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239F26B4-CFB2-4D7A-939E-0215A336A490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C32070D-D751-4D3E-9457-5B1D1C551E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADABD34-25A1-46D3-AEFB-249E912A723A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53E81C9-5693-4929-BC19-DEBAEF686E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B92B02-44DD-40D4-94F7-A3EE4621D854"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB6018C-3FC5-4D4E-BA7C-07C0A3B47976"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ED9A2E-8169-4470-AE61-54829B11BDAB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9671475-BC67-436F-B2B1-5128347B3C64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FEF31-B528-46A8-AAA8-63B30D5A10EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3935",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100278",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2677",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2678",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2728",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2860",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1772/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7547",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-16T18:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so."
      }, {
        "lang" : "es",
        "value" : "PostgreSQL en sus versiones anteriores a 9.2.22, 9.3.18, 9.4.13, 9.5.8 y 9.6.4 es vulnerable a un fallo de autorización que permite que los atacantes remotos autenticados recuperen contraseñas de los mapeos de usuarios definidos por los propietarios del servidor extranjero sin tener privilegios para ello."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD27648F-E2FF-4779-97F9-2632DCC6B16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFB4916-8B59-4534-804C-CF9DA1B18508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3413A3AB-45A3-48E1-9B30-1194C4E7D49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5760CE83-4802-42A0-9338-E1E634882450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41009E-4028-4D82-B8D0-8B949EDC0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832F3EBE-A92C-4FB3-BF3C-0E7B750F966B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1571EE80-55A6-4F91-909B-C46BA19EC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848E3BC-293A-4A75-BEB7-C2F1637AD3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC9133E-94FC-4199-BD69-BBB46CF3799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200172CE-40AB-49E3-93D1-9947E3CBFFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90B21A9-19A7-4DCB-A2FE-C558CCB6BBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924D1F84-EC50-44C3-A156-DC8E3A5E3909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5EAF3B-B148-4B57-8E4E-0B5365003DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CE8DB4-CD97-4F60-9080-9FB093BD60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5AA780-4378-4959-9256-510C65E6E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C9EB31-5D8E-4583-BC95-700F53854964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700FF66-108C-47C2-B4C2-1CB0B5575EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239F26B4-CFB2-4D7A-939E-0215A336A490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C32070D-D751-4D3E-9457-5B1D1C551E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADABD34-25A1-46D3-AEFB-249E912A723A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53E81C9-5693-4929-BC19-DEBAEF686E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B92B02-44DD-40D4-94F7-A3EE4621D854"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB6018C-3FC5-4D4E-BA7C-07C0A3B47976"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ED9A2E-8169-4470-AE61-54829B11BDAB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DF5BA0-6D8E-416E-B441-1A2D8624FD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9671475-BC67-436F-B2B1-5128347B3C64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FEF31-B528-46A8-AAA8-63B30D5A10EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3935",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100275",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2678",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2728",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.postgresql.org/about/news/1772/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.postgresql.org/about/news/1772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7548",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-16T18:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service."
      }, {
        "lang" : "es",
        "value" : "PostgreSQL en sus versiones anteriores a 9.4.13, 9.5.8 y 9.6.4 es vulnerable a un fallo de autorización que permite que atacantes remotos sin privilegios sobre un gran objeto sobreescriban todo el contenido del objeto. Esto resultaría en una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4",
            "versionEndExcluding" : "9.4.13",
            "matchCriteriaId" : "E370B696-649E-48B8-A358-7544057FC82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5",
            "versionEndExcluding" : "9.5.8",
            "matchCriteriaId" : "1EC050F6-E045-4605-8739-32D657632606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6",
            "versionEndExcluding" : "9.6.4",
            "matchCriteriaId" : "D5F2A1D5-D7F7-4216-9B28-E7A32DFE0A78"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3935",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100276",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2677",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2678",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1772/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7551",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-16T18:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts."
      }, {
        "lang" : "es",
        "value" : "389-ds-base en su versión anterior a 1.3.5.19 y 1.3.6.7 es vulnerable a ataques de fuerza bruta de contraseñas durante un bloqueo de cuenta debido a los diferentes códigos de retorno que se devuelven durante los intentos de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:1.3.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56A41C4-3612-431A-9D31-49EAAF080FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:1.3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A7D3E1-5DFE-4D54-82BF-D0DDC550089C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2569",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://pagure.io/389-ds-base/issue/49336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pagure.io/389-ds-base/issue/49336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-16T21:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer."
      }, {
        "lang" : "es",
        "value" : "Los instaladores Foxit PDF Compressor de las versiones 7.0.0.183 a 7.7.2.10 contienen una vulnerabilidad de precarga de DLL, en la que es posible para el instalador cargar un DLL malicioso localizado en el directorio de trabajo actual del instalador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:pdf_compressor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B4D531-B8D4-45DD-BD0A-EF9AC942ABD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100414",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file."
      }, {
        "lang" : "es",
        "value" : "La función _WM_SetupMidiEvent en internal_midi.c:2318 en WildMIDI 0.4.2 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo mid manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindwerks:wildmidi:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5072089A-8B4C-4AD3-B53B-459FD0F69AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file."
      }, {
        "lang" : "es",
        "value" : "La función _WM_ParseNewMidi en f_midi.c: en WildMIDI 0.4.2 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo mid manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindwerks:wildmidi:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5072089A-8B4C-4AD3-B53B-459FD0F69AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file."
      }, {
        "lang" : "es",
        "value" : "La función _WM_SetupMidiEvent en internal_midi.c:2315 en WildMIDI 0.4.2 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo mid manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindwerks:wildmidi:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5072089A-8B4C-4AD3-B53B-459FD0F69AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file."
      }, {
        "lang" : "es",
        "value" : "La función _WM_SetupMidiEvent en internal_midi.c:2122 en WildMIDI 0.4.2 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo mid manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindwerks:wildmidi:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5072089A-8B4C-4AD3-B53B-459FD0F69AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file."
      }, {
        "lang" : "es",
        "value" : "La función row_is_empty en base/4bitmap.c:274 en minidjvu 0.8 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo djvu manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minidjvu_project:minidjvu:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E23819-843B-4CAE-B789-9385D9AC78D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file."
      }, {
        "lang" : "es",
        "value" : "La función row_is_empty en base/4bitmap.c:272 en minidjvu 0.8 row_is_empty en minidjvurow_is_empty puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo djvu manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minidjvu_project:minidjvu:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E23819-843B-4CAE-B789-9385D9AC78D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file."
      }, {
        "lang" : "es",
        "value" : "La función mdjvu_bitmap_pack_row en base/4bitmap.c en minidjvu 0.8 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo djvu manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minidjvu_project:minidjvu:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E23819-843B-4CAE-B789-9385D9AC78D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file."
      }, {
        "lang" : "es",
        "value" : "La función mdjvu_bitmap_get_bounding_box en base/4bitmap.c en minidjvu 0.8 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo djvu manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minidjvu_project:minidjvu:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E23819-843B-4CAE-B789-9385D9AC78D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T16:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file."
      }, {
        "lang" : "es",
        "value" : "La función JB2BitmapCoder::code_row_by_refinement en jb2/bmpcoder.cpp en minidjvu 0.8 puede provocar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) mediante un archivo djvu manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minidjvu_project:minidjvu:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E23819-843B-4CAE-B789-9385D9AC78D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7555",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-17T19:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution."
      }, {
        "lang" : "es",
        "value" : "Augeas en sus versiones hasta la 1.8.0 (esta incluida) es vulnerable a un desbordamiento de búfer basado en memoria dinámica debido a una gestión indebida de strings escapados. Un atacante podría enviar strings manipulados que harían que la aplicación que emplea Augeas copie y pegue el final de un búfer, provocando un bloqueo o una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:augeas:augeas:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "6E6A5F03-A1F0-42AC-BBCF-A37EC722618A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3949",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100378",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2403",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/hercules-team/augeas/pull/480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-7555",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/hercules-team/augeas/pull/480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-7555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7556",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-17T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user."
      }, {
        "lang" : "es",
        "value" : "Hawtio en sus versiones hasta la 1.5.3 (esta incluida) es vulnerable a una vulnerabilidad CSRF que permite que atacantes remotos engañen al usuario para que visite su sitio web, que contiene un script malicioso que puede ser enviado al servidor de Hawtio en nombre del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hawt:hawtio:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAD4991-F07E-4ED8-AB08-797AA8D1A2EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1480060",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1480060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T20:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) en NexusPHP versión v1.5 mediante la ruta URL a usersearch.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/7.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lu4n.com/cve/7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T20:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en takeconfirm.php en NexusPHP 1.5 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro conusr."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/8.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lu4n.com/cve/8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T20:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en modtask.php en NexusPHP 1.5 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro userid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/9.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lu4n.com/cve/9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-17T20:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en massmail.php en NexusPHP 1.5 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro or."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lu4n.com/cve/10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lu4n.com/cve/10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6710",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privileges and run commands in the context of the root user on the server. The vulnerability is due to command settings that allow Cisco VNF Element Manager users to specify arbitrary commands that will run as root on the server. An attacker could use this setting to elevate privileges and run commands in the context of the root user on the server. Cisco Bug IDs: CSCvc76670. Known Affected Releases: prior to 5.0.4 and 5.1.4."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Virtual Network Function (VNF) Element Manager podría permitir que un atacante remoto autenticado elevase privilegios y ejecutase comandos en el contexto del usuario root en el servidor. Esta vulnerabilidad se debe a la configuración de comandos que permite a los usuarios de Cisco VNF Element Manager especificar comandos arbitrarios que se ejecutarán como root en el servidor. Un atacante podría emplear esta configuración para elevar privilegios y ejecutar comandos en el contexto del usuario root en el servidor. Cisco Bug IDs: CSCvc76670. Versiones afectadas conocidas: anteriores a la 5.0.4 y 5.1.4"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtual_network_function_element_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.3",
            "matchCriteriaId" : "FF9B8506-3299-4441-A13A-D7BE4D840689"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtual_network_function_element_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.3",
            "matchCriteriaId" : "BA0EA90E-C0E1-4ECE-83E0-4CC1BDE3C2A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100362",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-em",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-em",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6767",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are higher or lower than what should have been granted. The attacker cannot gain root-level privileges. The vulnerability is due to a limitation with how Role-Based Access Control (RBAC) grants privileges to remotely authenticated users when login occurs via SSH directly to the local management interface of the APIC. An attacker could exploit this vulnerability by authenticating to the targeted device. The attacker's privilege level will be modified to match that of the last user to log in via SSH. An exploit could allow the attacker to gain elevated privileges and perform CLI commands that should be restricted by the attacker's configured role. Cisco Bug IDs: CSCvc34335. Known Affected Releases: 1.0(1e), 1.0(1h), 1.0(1k), 1.0(1n), 1.0(2j), 1.0(2m), 1.0(3f), 1.0(3i), 1.0(3k), 1.0(3n), 1.0(4h), 1.0(4o); 1.1(0.920a), 1.1(1j), 1.1(3f); 1.2 Base, 1.2(2), 1.2(3), 1.2.2; 1.3(1), 1.3(2), 1.3(2f); 2.0 Base, 2.0(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Application Policy Infrastructure Controller (APIC) podría permitir que un atacante remoto autenticado obtenga privilegios más altos que los que se han asignado a la cuenta. El atacante tendrá los privilegios del último usuario que haya iniciado sesión, independientemente de si esos privilegios son mayores o menores que los que se deberían haber dado. El atacante no puede obtener permisos root. La vulnerabilidad se debe a una limitación en la forma en la que Role-Based Access Control (RBAC) concede permisos a usuarios autenticados de forma remota cuando el inicio de sesión ocurre directamente mediante SSH directamente en la interfaz de gestión local. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo objetivo. El nivel de privilegios del atacante será modificado para coincidir con el del último usuario que haya iniciado sesión por SSH. Un exploit podría permitir que el atacante obtenga privilegios elevados y realizar comandos CLI que deberían estar restringidos por el rol configurado del atacante. Cisco Bug IDs: CSCvc34335. Versiones afectadas conocidas: 1.0(1e), 1.0(1h), 1.0(1k), 1.0(1n), 1.0(2j), 1.0(2m), 1.0(3f), 1.0(3i), 1.0(3k), 1.0(3n), 1.0(4h), 1.0(4o); 1.1(0.920a), 1.1(1j), 1.1(3f); 1.2 Base, 1.2(2), 1.2(3), 1.2.2; 1.3(1), 1.3(2), 1.3(2f); 2.0 Base, 2.0(1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8758B8E1-9800-4424-8F7E-0275088B08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED952FBB-666D-4D10-A02D-6D2758D629B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "909A6D4D-490C-46A9-BDD9-051B39647880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F14F3A-478A-430B-BB48-90A21CC206AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE548D4-6006-4480-8E65-6E27EB0BD3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB01850-2EEF-458E-A7D7-E76592473A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "55615A6F-84F7-4768-AC65-DE472CCD7E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2EF8E0-00CC-4305-B332-5BB1D2DB7C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(3k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C5A222-0C4B-4C52-8B9D-D740563F4ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD3D71B-9121-453E-AAF3-5988F723D3A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(4h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78B0115-3C9C-439F-A25F-B7B0637CC71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0\\(4o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0E3576-0A04-48ED-B7ED-FAFD84974DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\\(0.920a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB53938-6806-4B04-B7FF-26E33CE6DEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF54ABE-3471-4FC5-A1C3-80FF87DDF974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11FB6E8-A139-40F7-A771-389BA5206AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "633D2528-7FC4-448C-AEF4-5849B172CE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2585A246-7C8F-4755-9DB9-E9A668901B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99045-1F1E-47E4-927F-D5BFE604A600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DC0E10-92EE-4333-BD79-97A67F1391B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "789A655E-4670-421D-98EA-B80F4EF35191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB2662B-7AD7-486D-B492-3ED74723A88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF694D0-E231-454D-B7EB-BBBDE205C836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "05098742-7099-424F-8490-300508F0459F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDD546D-F662-41D4-B67C-4FBF919C7DE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100400",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039180",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6768",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC) devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to a custom executable system file that was built to use relative search paths for libraries without properly validating the library to be loaded. An attacker could exploit this vulnerability by authenticating to the device and loading a malicious library that can escalate the privilege level. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device. The attacker must have valid user credentials to log in to the device. Cisco Bug IDs: CSCvc96087. Known Affected Releases: 1.1(0.920a), 1.1(1j), 1.1(3f); 1.2 Base, 1.2(2), 1.2(3), 1.2.2; 1.3(1), 1.3(2), 1.3(2f); 2.0 Base, 2.0(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procedimiento de construcción para ciertos archivos del sistema ejecutables instalados en el tiempo de arranque en dispositivos Cisco Application Policy Infrastructure Controller (APIC) podría permitir que un atacante local autenticado obtuviese privilegios de nivel root. Esta vulnerabilidad se debe a un archivo del sistema ejecutable personalizado que ha sido construido para usar rutas de búsqueda relativas para librerías sin validar correctamente la librería que se va a cargar. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo y cargando una librería maliciosa que puede escalar el nivel de privilegios. Un exploit exitoso podría permitir que el atacante obtenga privilegios de nivel root y obtenga el control total del dispositivo. El atacante debe tener credenciales de usuario válidas para poder iniciar sesión en el dispositivo. Cisco Bug IDs: CSCvc96087. Versiones afectadas conocidas: 1.1(0.920a), 1.1(1j), 1.1(3f); 1.2 Base, 1.2(2), 1.2(3), 1.2.2; 1.3(1), 1.3(2), 1.3(2f); 2.0 Base, 2.0(1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\\(0.920a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB53938-6806-4B04-B7FF-26E33CE6DEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF54ABE-3471-4FC5-A1C3-80FF87DDF974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11FB6E8-A139-40F7-A771-389BA5206AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "633D2528-7FC4-448C-AEF4-5849B172CE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2585A246-7C8F-4755-9DB9-E9A668901B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99045-1F1E-47E4-927F-D5BFE604A600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DC0E10-92EE-4333-BD79-97A67F1391B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "789A655E-4670-421D-98EA-B80F4EF35191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB2662B-7AD7-486D-B492-3ED74723A88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF694D0-E231-454D-B7EB-BBBDE205C836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "05098742-7099-424F-8490-300508F0459F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDD546D-F662-41D4-B67C-4FBF919C7DE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100363",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039179",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6771",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to a specific URL of an affected device. An exploit could allow the attacker to view sensitive configuration information about the deployment. Cisco Bug IDs: CSCvd29358. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la herramienta de automatización AutoVNF de Cisco Ultra Services Framework podría permitir que un atacante remoto sin autenticar consiga información sensible. Esta vulnerabilidad se debe a una protección de datos sensibles insuficiente. Un atacante podría explotar esta vulnerabilidad navegando hasta una URL específica en un dispositivo afectado. Un exploit podría permitir que el atacante acceda a información sensible de configuración sobre la implementación. Cisco Bug IDs: CSCvd29358. Versiones afectadas conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_framework:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866211EC-E373-4DBF-B0FA-56E9783C47BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100385",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6772",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and navigating to certain configuration files. An exploit could allow the attacker to view sensitive system configuration files. Cisco Bug IDs: CSCvd29408. Known Affected Releases: 2.3(2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Elastic Services Controller (ESC) podría permitir que un atacante remoto autenticado acceda a información sensible. Esta vulnerabilidad se debe a una protección de datos sensibles insuficiente. Un atacante podría explotar esta vulnerabilidad autenticándose en la aplicación y navegando hasta ciertos archivos de configuración. Un exploit podría permitir que el atacante vea archivos de configuración del sistema sensibles. Cisco Bug IDs: CSCvd29408. Versiones afectadas conocidas: 2.3(2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D4B076-9094-43A1-B2BC-0E3F080BF187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100388",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6773",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands on the underlying operating system. The vulnerability is due to insufficient input sanitization of user-supplied input at the CLI. An attacker could exploit this vulnerability by crafting a script on the device that will allow them to bypass built-in restrictions. An exploit could allow the unauthorized user to launch the CLI directly from a command shell. Cisco Bug IDs: CSCvd47722. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el CLI de Cisco ASR 5000 Series Aggregated Services Routers ejecutando el sistema operativo Cisco StarOS podría permitir que un atacante local autenticado omita las restricciones de CLI y ejecute comandos en el sistema operativo subyacente. Esta vulnerabilidad se debe a la insuficiente sanitización de las entradas proporcionadas por el usuario en el CLI. Un atacante podría explotar esta vulnerabilidad creando un script en el dispositivo que les permitirá omitir las restricciones incorporadas. Un exploit podría permitir que el usuario sin autorización lance el CLI directamente desde una consola de comandos. Cisco Bug IDs: CSCvd47722. Versiones afectadas conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1206A9D2-0AA2-4F7A-9AE8-D0BAC299DA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100376",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039181",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6774",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco ASR 5000 Series Aggregated Services Routers ejecutando el sistema operativo Cisco StarOS podría permitir que un atacante remoto autenticado sobrescriba o modifique archivos del sistema sensibles. Esta vulnerabilidad se debe a la inclusión de archivos sensibles del sistema en subdirectorios FTP específicos. Un atacante podría explotar esta vulnerabilidad sobrescribiendo archivos de configuración sensibles mediante FTP. Un exploit podría permitir que un atacante sobrescribiese archivos de configuración en un sistema afectado. Cisco Bug IDs: CSCvd47739. Versiones afectadas conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1206A9D2-0AA2-4F7A-9AE8-D0BAC299DA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100386",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039182",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6775",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying environment variables. An exploit could allow the attacker to gain admin-level privileges and take control of the affected device. Cisco Bug IDs: CSCvd47741. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el CLI de Cisco ASR 5000 Series Aggregated Services Routers ejecutando el sistema operativo Cisco StarOS podría permitir que un atacante local autenticado eleve sus privilegios hasta el nivel de administrador. Esta vulnerabilidad se debe a permisos incorrectos que son entregados a un conjunto de usuarios. Un atacante podría explotar esta vulnerabilidad iniciando sesión en la shell de un dispositivo afectado y elevando sus privilegios modificando variables de entorno. Un exploit podría permitir que el atacante obtenga privilegios de nivel administrativo y obtenga el control del dispositivo afectado. Cisco Bug IDs: CSCvd47741. Versiones afectadas conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1206A9D2-0AA2-4F7A-9AE8-D0BAC299DA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100381",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039183",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6776",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by convincing a user to access a malicious link or by intercepting a user request and injecting malicious code into the request. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvd76324. Known Affected Releases: 2.2(9.76) and 2.3(1)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework red de Cisco Elastic Services Controller (ESC) podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de tipo Cross-Site Scripting (XSS) contra un usuario de dicha interfaz. La vulnerabilidad se debe a la validación insuficiente de entrada de datos del usuario por parte del software afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código de script arbitrario en el contexto del sitio afectado o permitir que el atacante pueda acceder a información sensible del navegador. Cisco Bug IDs: CSCvd76324. Versiones afectadas conocidas: 2.2(9.76) and 2.3(1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "053E82A5-8630-4197-B428-69B0E0E5E1F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100370",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6777",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could exploit this vulnerability by logging into the ConfD server and executing certain commands. An exploit could allow an unprivileged user to view configuration parameters that can be maliciously used. Cisco Bug IDs: CSCvd76409. Known Affected Releases: 2.3, 2.3(2)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servidor ConfD de Cisco Elastic Services Controller (ESC) podría permitir que un atacante remoto autenticado obtenga información sensible del sistema. Esta vulnerabilidad se debe a una protección de archivos sensibles del sistema insuficiente. Un atacante podría explotar esta vulnerabilidad iniciando sesión en el servidor ConfD y ejecutando ciertos comandos. Un exploit podría permitir que un usuario sin privilegios vea parámetros de configuración que pueden emplearse de forma maliciosa. Cisco Bug IDs: CSCvd76409. Versiones afectadas conocidas: 2.3, 2.3(2)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F72EBEE-43E5-42E1-9DDB-5A5CEBE5CA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D4B076-9094-43A1-B2BC-0E3F080BF187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100390",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6778",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. An exploit could allow the attacker to view information regarding the Ultra Services Platform deployment. Cisco Bug IDs: CSCvd76406. Known Affected Releases: 21.0.v0.65839."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web Elastic Services Controller (ESC) de Cisco Ultra Platform podría permitir que un atacante remoto autenticado consiga información sensible. La vulnerabilidad se debe a la transmisión de información sensible como parte de una petición GET. Un atacante podría explotar esta vulnerabilidad enviando una petición GET a un dispositivo afectado. Un exploit podría permitir que el atacante vea información relacionada con la implementación de Ultra Services Platform. Cisco Bug IDs: CSCvd76406. Versiones afectadas conocidas: 21.0.v0.65839."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ultra_services_platform:21.0.v0.65839:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9B44D1-0621-4CB4-AD87-E40072F8E855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100380",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6781",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la gestión de cuentas de usuario shell para Cisco Policy Suite (CPS) Software para aparatos CPS podría permitir que un atacante local autenticado gane privilegios elevados en un sistema afectado. El nivel de privilegios afectado no está a nivel root. La vulnerabilidad se debe a un control de acceso basado en roles o RBAC (role-based access control) incorrecto para cuentas de usuario shell. Un atacante podría explotar esta vulnerabilidad autenticándose en un aparato afectado y proporcionando entradas de usuario manipuladas mediante el CLI. Un exploit exitoso podría permitir que el atacante adquiera un mayor nivel de privilegios que el que tendría que tener. Para explotar esta vulnerabilidad, el atacante debe iniciar sesión en el aparato con credenciales válidas. Cisco Bug IDs: CSCve37724. Versiones afectadas conocidas: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93529363-097E-407D-8DFB-1825BBFE918A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14242B24-1005-4448-98EB-F4AF1D1829CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A538DC-454D-4138-B59B-5BDB5CAA9D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E134B57-BB82-436E-BF85-BE1A89743951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:policy_suite:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB0E517-D433-483E-8380-2ADBB9A82EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100365",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6782",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the affected application. The vulnerability is due to improper sanitization of parameter values by the affected application. An attacker could exploit this vulnerability by injecting malicious code into an affected parameter and persuading a user to access a web page that triggers the rendering of the injected code. Cisco Bug IDs: CSCve47074. Known Affected Releases: 3.2(0.0)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz administrativa web de Cisco Prime Infrastructure podría permitir que un usuario remoto autenticado modifique una página en la interfaz web de la aplicación afectada. La vulnerabilidad se debe a una sanitización inadecuada de valores de parámetro por parte de la aplicación afectada. Un atacante podría explotar esta vulnerabilidad inyectando código malicioso en un parámetro afectado y persuadiendo a un usuario para que acceda a una página web que desencadene el renderizado del código inyectado. Cisco Bug IDs: CSCve47074. Versiones afectadas conocidas: 3.2(0.0)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.2\\(0.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "146E4ECF-B903-488C-8644-932FC57F072C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100366",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039189",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cpi",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cpi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6783",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to discover confidential information about the appliances that should be available only to an administrative user. The vulnerability occurs because the appliances do not protect confidential information at rest in response to Simple Network Management Protocol (SNMP) poll requests. An attacker could exploit this vulnerability by doing a crafted SNMP poll request to the targeted security appliance. An exploit could allow the attacker to discover confidential information that should be restricted, and the attacker could use this information to conduct additional reconnaissance. The attacker must know the configured SNMP community string to exploit this vulnerability. Cisco Bug IDs: CSCve26106, CSCve26202, CSCve26224. Known Affected Releases: 10.0.0-230 (Web Security Appliance), 9.7.2-065 (Email Security Appliance), and 10.1.0-037 (Content Security Management Appliance)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el sondeo SNMP para Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), y Content Security Management Appliance (SMA) podría permitir que un atacante remoto autenticado descubriese información confidencial sobre los aparatos que solo debería estar disponible para un usuario administrador. La vulnerabilidad ocurre porque los aparatos no protegen la información confidencial en reposo en respuesta a las peticiones de sondeo Simple Network Management Protocol (SNMP). Un atacante podría explotar esta vulnerabilidad haciendo una petición de sondeo SNMP manipulada al aparato de seguridad objetivo. Un exploit podría permitir que el atacante descubra información confidencial que debería estar restringida. El atacante podría utilizar esta información para llevar a cabo reconocimientos adicionales. Para explotar esta vulnerabilidad, el atacante debe conocer la cadena de comunidad SNMP configurada. Cisco Bug IDs: CSCve26106, CSCve26202, CSCve26224. Versiones afectadas conocidas: 10.0.0-230 (Web Security Appliance), 9.7.2-065 (Email Security Appliance), y 10.1.0-037 (Content Security Management Appliance)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:10.1.0-037:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E58F8B5-7DC9-4089-AF25-DBA31AB9F1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:9.7.2-065:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E7EE7B-4363-47BB-A7FF-9347D65DBEBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:10.0.0-230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EDE2F2-2EBE-41DF-A373-04E4FB7EDBD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100387",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039186",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039187",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039188",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-csa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-csa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6784",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco WebEx Meetings not sufficiently protecting sensitive data when responding to an HTTP request to the web interface. An attacker could exploit the vulnerability by attempting to use the HTTP protocol and looking at the data in the HTTP responses from the Cisco WebEx Meetings Server. An exploit could allow the attacker to find sensitive information about the application. Cisco Bug IDs: CSCve37988. Known Affected Releases: firmware 1.0.0.30, 1.0.0.33, 1.0.1.9, 1.0.1.16."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco RV340, RV345, y RV345P Dual WAN Gigabit VPN Routers podría permitir que un atacante remoto sin autenticar acceda a datos sensibles. El atacante podría utilizar esta información para llevar a cabo ataques de reconocimiento adicionales. La vulnerabilidad se debe a que Cisco WebEx Meetings no protege lo suficiente los datos sensibles cuando responde a una petición HTTP a la interfaz web. Un atacante podría explotar la vulnerabilidad tratando de emplear el protocolo HTTP y mirando los datos en las respuestas HTTP provenientes de Cisco WebEx Meetings Server. Un exploit podría permitir que el atacante encuentre información sensible sobre la aplicación. Cisco Bug IDs: CSCve37988. Versiones afectadas conocidas: firmware 1.0.0.30, 1.0.0.33, 1.0.1.9, 1.0.1.16."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv340_firmware:1.0.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F2025A-9AF4-4DFD-80BF-844EFC6C103A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv340_firmware:1.0.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8750A439-1D5F-4D40-9875-D5CD0C116C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv340_firmware:1.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D63FAC-EE0A-4CD4-B733-A96170E32F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv340_firmware:1.0.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBF80BD-1C86-4FFE-9EF5-ADF8B3D179B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85968D9-1F54-48DC-9AB0-04563B98A627"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345_firmware:1.0.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D398560-159A-4245-BE66-EFD8DC552CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345_firmware:1.0.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34993920-0954-4F0A-80CB-78FF49494CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345_firmware:1.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC4A323-27D0-4098-8105-07D43CFEAB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345_firmware:1.0.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C915253-432A-4A2E-B4FC-0BBCFBBBBCAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48F3FF1-8512-48F2-A404-B78FD093B785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345p_firmware:1.0.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EF4A73-A2E6-481A-829B-17A9DF3406B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345p_firmware:1.0.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47121289-EDAF-4AF3-9026-FA91CDA3063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345p_firmware:1.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F08B6D3-A919-4C4F-9155-527DF7DB8D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_rv345p_firmware:1.0.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4DB1A1-F673-4932-830E-790B0FE2AACD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985C841B-65E9-4858-8331-71CF8BBFD3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100402",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039191",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-crr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-crr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6785",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of proper Role Based Access Control (RBAC) when certain user configuration changes are requested. An attacker could exploit this vulnerability by sending an authenticated, crafted HTTP request to the targeted application. An exploit could allow the attacker to impact the integrity of the application where one user can modify the configuration of another user's information. Cisco Bug IDs: CSCve27331. Known Affected Releases: 10.5(2.10000.5), 11.0(1.10000.10), 11.5(1.10000.6)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la validación de permisos de modificación de configuración en Cisco Unified Communications Manager podría permitir que un atacante remoto autenticado realice una escalada horizontal de privilegios en la que un usuario puede modificar la configuración de otro usuario. La vulnerabilidad se debe a la falta de un control de acceso basado en roles o RBAC (role-based access control) apropiado, en el que se requieren ciertos cambios de la configuración del usuario. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP manipulada a la aplicación objetivo. Un exploit podría permitir que el atacante afecte la integridad de la aplicación, ya que un usuario puede modificar la configuración de la información de otro usuario. Cisco Bug IDs: CSCve27331. Versiones afectadas conocidas: 10.5(2.10000.5), 11.0(1.10000.10), 11.5(1.10000.6)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100375",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039184",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6786",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive information, including credentials for system accounts, on an affected system. The vulnerability is due to improper protection of sensitive log files. An attacker could exploit this vulnerability by logging in to an affected system and accessing unprotected log files. A successful exploit could allow the attacker to access sensitive log files, which may include system credentials, on the affected system. Cisco Bug IDs: CSCvc76616. Known Affected Releases: 2.2(9.76)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Elastic Services Controller podría permitir que un usuario local, autenticado y sin privilegios acceda a información sensible, incluyendo las credenciales para cuentas del sistema, en un sistema afectado. Esta vulnerabilidad se debe a una protección inadecuada de archivos de registro sensibles. Un atacante podría explotar esta vulnerabilidad iniciando sesión en un sistema afectado y accediendo a los archivos de registro sin protección. Si se explota esta vulnerabilidad con éxito, podría permitir que el atacante acceda a archivos de registro sensibles, que podrían incluir credenciales del sistema, en el sistema afectado. Cisco Bug IDs: CSCvc76616. Versiones afectadas conocidas: 2.2(9,76)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:2.2\\(9.76\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20A8B43-6D8F-468D-8194-0D8125742D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100391",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-esc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6788",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the WebLaunch function of the affected software. An attacker could exploit this vulnerability by convincing a user to access a malicious link or by intercepting a user request and injecting malicious code into the request. Cisco Bug IDs: CSCvf12055. Known Affected Releases: 98.89(40)."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad WebLaunch de Cisco AnyConnect Secure Mobility Client Software contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque Cross-Site Scripting (XSS) contra un usuario del software afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan a la función WebLaunch del software afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que entre a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Cisco Bug IDs: CSCvf12055. Versiones afectadas conocidas: 98.89(40)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.4\\(4027\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4AE83D-FC9A-4942-BD75-5530A2CB07F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\\(58\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0A0171-260B-4E2D-8D7F-035345D9C902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100364",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039190",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-caw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-caw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6790",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-08-17T20:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the device. An attacker could exploit this vulnerability by transmitting large volumes of SIP traffic to the VCS. An exploit could allow the attacker to cause a complete DoS condition on the targeted system. Cisco Bug IDs: CSCve32897."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Session Initiation Protocol (SIP) de Cisco TelePresence Video Communication Server (VCS) podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un aparato objetivo. La vulnerabilidad se debe a que se envía al dispositivo una cantidad excesiva de tráfico SIP. Un atacante podría explotar esta vulnerabilidad transmitiendo grandes volúmenes de tráfico SIP al VCS. Un exploit podría permitir que un atacante provoque un DoS total en el sistema objetivo. Cisco Bug IDs: CSCve32897."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD644623-840C-424C-82EE-20FC01A9E56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9E2322-4D18-4C17-8D4C-011E8B0ECAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B267B94B-700C-428F-AAA9-C695B8F2DFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FAFCD6-50DE-452F-A0F9-B95EE7511001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7F04B1-DF6A-4749-B8D4-A13DE3DD3E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D997B3DF-3CC4-495B-AAAA-5A0D60A3CBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100369",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039185",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-vcs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-vcs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T02:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Cacti 1.1.17 en el parámetro method en spikekill.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAFEF3A-7F11-4C9A-8739-8E135FF8A9B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039208",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/a032ce0be6a4ea47862c594e40a619ac8de1ef99",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/907",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/a032ce0be6a4ea47862c594e40a619ac8de1ef99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T03:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."
      }, {
        "lang" : "es",
        "value" : "Ext/standard/var_unserializer.re en PHP en en sus versiones 7.0.x hasta 7.0.22 y versiones 7.1.x hasta 7.1.8 es propenso a un uso de memoria dinámica antes de liberación (heap use after free) al deserializar datos que no son de confianza. Esto está relacionado con el uso incorrecto de la API hash para borrado de claves en una situación de tamaño de array no válido. La explotación de este problema puede tener un impacto sin especificar en la integridad de PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF89D76-3FB3-42FA-80FF-53C2E222F9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF27AF4F-68BB-465A-8668-44833A87D023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4E7085-5075-4682-BBDD-55BBF828167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84BB8CA-DD39-44F6-8C9C-FF1467815B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74103",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-21",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180112-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T03:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP."
      }, {
        "lang" : "es",
        "value" : "La función finish_nested_data en ext/standard/var_unserializer.re en PHP en versiones anteriores a la 5.6.31, versiones 7.0.x anteriores a la 7.0.21 y versiones 7.1.x anteriores a la 7.1.7 es propenso a sufrir un buffer over-read al deserializar datos que no son de confianza. La explotación de este problema puede tener un impacto sin especificar en la integridad de PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.30",
            "matchCriteriaId" : "399EA21A-9B46-4F4F-9A33-4DC557B11743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99490",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3566-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3566-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3566-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3566-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T03:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue can have an unspecified impact on the integrity of PHP."
      }, {
        "lang" : "es",
        "value" : "ext/standard/var_unserializer.re en PHP en versiones 7.0.x anteriores a la 7.0.21 y versiones 7.1.x anteriores a la 7.1.7 es propenso a un uso de memoria dinámica antes de liberación (heap use after free) al deserializar datos que no son de confianza. Esto está relacionado con la función zval_get_type en Zend/zend_types.h. La explotación de este problema puede tener un impacto sin especificar en la integridad de PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B90B947-7B54-47F3-9637-2F4AC44079EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35848414-BD5D-4164-84DC-61ABBB1C4152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F8402-8551-4F66-A9A7-81D472AB058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A773E8E-48CD-4D35-A0FD-629BD9334486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC492340-79AF-4676-A161-079A97EC6F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C2D8FE-C380-4B43-B634-A3DBA4700A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB58393-0C10-413C-8D95-6BAA8BC19A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751F51CA-9D88-4971-A6EC-8C0B72E8E22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B74118-8FC2-44CB-9673-A83DF777B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56A200-1477-40DA-9444-CFC946157C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D1CCC-A857-4C15-899E-08F9255CEE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6745CC43-2836-4CD8-848F-EEA08AE9D5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB6696-14F9-4D9B-9974-B682FFBB828E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04146390-021D-4147-9830-9EAA90D120A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B124547-DC1D-4A92-B8AB-8A1900063786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45B2127-CF3D-4D59-9042-AE6DF2908319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A450E3-931F-4487-A76D-80A38210297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C099A0C4-883D-42ED-8359-FFD3ADD692A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD07432-5A23-491E-892E-42F0F58307D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19627ECC-9342-4917-8FCC-7757339E3242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2466D297-9442-40B0-A1A7-F9D166396CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726E9B6-A7FA-402B-A911-0CE81C623087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3670FF7-2CA3-41A4-92FE-0123497E4E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C258AF27-84DF-4FC3-A651-1349BB567FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100428",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74101",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T12:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c."
      }, {
        "lang" : "es",
        "value" : "La función ReadMNGImage en coders/png.c de GraphicsMagick 1.3.26 maneja incorrectamente imágenes MNG de gran tamaño, provocando que haya lecturas de memoria no válidas en la función SetImageColorCallBack en magick/image.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/cd699a44f188",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-invalid-memory-read-in-setimagecolorcallback-image-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/cd699a44f188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-invalid-memory-read-in-setimagecolorcallback-image-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T12:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting."
      }, {
        "lang" : "es",
        "value" : "La función ReadWMFImage en coders/wmf.c de GraphicsMagick 1.3.26 tiene un problema de uso de memoria previamente liberada para los datos asociados con el informe de excepciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/be898b7c97bd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/be898b7c97bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T12:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "La función ReadSUNImage en coders/sun.c de GraphicsMagick 1.3.26 tiene una vulnerabilidad de desbordamiento de búfer basado en montículos en la matriz de colores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/95d00d55e978",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100442",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-heap-based-buffer-overflow-in-readsunimage-sun-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/95d00d55e978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-heap-based-buffer-overflow-in-readsunimage-sun-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10811",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Buffalo WCR-1166DS con firmware 1.30 y anteriores permiten que un atacante ejecute comandos SO arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wcr-1166ds_firmware:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB83D1-1800-4A6A-A351-615F6DD30253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wcr-1166ds:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5537A90-A060-4CB4-8912-D7994AE75196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buffalo.jp/support_s/s20170804_1.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN05340005/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://buffalo.jp/support_s/s20170804_1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN05340005/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10821",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en Installer para Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (lanzado el 30 de septiembre de 2013), distrubuido en la página web hasta el 17 de mayo de 2017, permite que un atacante obtenga privilegios mediante un DLL troyano en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enecho.meti:shin_kikan_toukei_houkoku_data_nyuryokuyou_program:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0048F7A7-2A69-4C64-AC5E-16191BC66DF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN73559859/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73559859/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10822",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30) distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en Installer para Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (lanzado el 30 de septiembre de 2013), distrubuido en la página web hasta el 17 de mayo de 2017, permite que un atacante obtenga privilegios mediante un DLL troyano en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enecho.meti:shin_sekiyu_yunyu_chousa_houkoku_data_nyuryoku_program:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5343E0-E132-4F39-BEB9-6475533BCDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN71104430/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN71104430/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10823",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Distributed on the website till 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en Installer para Shin Kinkyuji Houkoku Data Nyuryoku Program (lanzado el 10 de marzo de 2011), distrubuido en la página web hasta el 17 de mayo de 2017, permite que un atacante obtenga privilegios mediante un DLL troyano en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enecho.meti:shin_kinkyuji_houkoku_data_nyuryoku_program:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7449AF73-1E72-424C-B658-E3BA0FB5B887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN23546631/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN23546631/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10824",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : ">Una vulnerabilidad de tipo ruta de búsqueda no confiable en el software de uso TDB CA TypeA versión 5.2 y anteriores, distribuido hasta el 10 de agosto de 2017, permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teikoku_databank:type_a:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B02D23-4A08-4C52-9386-E40735DD43CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN18641169/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18641169/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T13:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file."
      }, {
        "lang" : "es",
        "value" : "UnRAR en versiones anteriores a la 5.5.7 permite a los atacantes remotos evitar los mecanismos de protección ante ataques de tipo Directory Traversal mediante vectores incluyendo un symlink al direction \".\", un symlink al directorio \"..\" y un archivo regular."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.6",
            "matchCriteriaId" : "4FBF68E6-20E3-4B2A-A07B-F8E8D3037F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T13:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución de código remoto en todas las versiones de Unity Editor para Windows. Por ejemplo, las anteriores a 5.3.8p2, 5.4.x anterior a 5.4.5p5, 5.5.x anterior a 5.5.4p3, 5.6.x anterior a 5.6.3p1 y 2017.x anterior a 2017.1.0p4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077DD33E-1976-408D-A367-1BD9636FC35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56F1E1A-1CBD-4129-8BC0-A54B5D645126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9A3DCD-FA91-4130-A3BC-9507236E7C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F50CC365-E2FC-4B1B-9CE2-5415399B9E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5F1B23-E1DE-4C2A-9395-75DD01C44822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8167AEDA-1318-45B9-BDB5-EC85AB7E803C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BA0A2B-C527-4577-BEBD-EC3C929D977F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D733A3-EE69-4854-8044-1A45E6780B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5645267-E999-4C76-8829-3441F9D73D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2B16C1-005D-42A7-8287-09AEEC27644E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7336648E-EB60-4D97-8917-A638D5D4E716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D3584-9491-4E2B-86B3-DB0F9C752A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA49F442-16D0-400F-A316-B8733BE4EA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unity3d:unity_editor:2017.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E2AD21-8E16-49E9-A956-5D11D5661AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100444",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/0x09AL/status/898635999185711108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://unity3d.com/security#issues",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/0x09AL/status/898635999185711108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://unity3d.com/security#issues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2228",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Teikihoukokusho Sakuseishien Tool v4.0 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enecho.meti:teikihoukokusho_sakuseishien_tool:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA77712C-B93C-4D86-8EC5-5B3785E065EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN53292345/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN53292345/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2289",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-18T13:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el instalador de la herramienta de conexión Qua Station para Windows v1.00.03 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kddi:qua_station_firmware:1.00.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65A4859-6090-4F8C-87D0-AE422361AF52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:kddi:qua_station:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD1419-3F87-4346-9B35-85411C683289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN81659403/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN81659403/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. (dot dot) in the file name."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en ajaxfileupload.php en Kayson Group Ltd. phpGrid en versiones anteriores a la 7.2.5 permite que atacantes remotos ejecuten código arbitrario mediante la subida de un archivo manipulado con un .. (dot dot) en el nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgrid:phpgrid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2",
            "matchCriteriaId" : "BA424916-A0AC-438B-9E62-3516B51E8B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phpgrid.com/announcement/version-7-2-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.futureweb.at/security/CVE-2017-10665/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgrid.com/announcement/version-7-2-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.futureweb.at/security/CVE-2017-10665/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee."
      }, {
        "lang" : "es",
        "value" : "Aodh, tal y como viene en Openstack Ocata y Newton antes de change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 y antes de Pike-rc1, no verifica que las ID de confianza pertenecen al usuario cuando se crean acciones de alarma con el esquema \"trust+http\", lo que permite a los usuarios autenticados remotos con conocimiento sobre las ID de confianza en donde Aodh es la entidad de confianza obtener un token Keystone y realizar acciones autenticadas no especificadas añadiendo una acción de alarma con el esquema \"trust+http\" y proporcionando una ID de confianza en donde Aodh es la entidad de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:openstack:07132017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A918C7A9-B922-41FA-9B3E-08F66454B41F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100455",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ossn/+bug/1649333",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/493823/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/493824/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/493826/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ossn/+bug/1649333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/493823/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/493824/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/493826/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function."
      }, {
        "lang" : "es",
        "value" : "libunrar.a en UnRAR en versiones anteriores a la 5.5.7 tiene un problema de lectura fuera de los límites de la memoria en la llamada EncodeFileName::Decode en la función Archive::ReadHeader15."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.6",
            "matchCriteriaId" : "4FBF68E6-20E3-4B2A-A07B-F8E8D3037F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function."
      }, {
        "lang" : "es",
        "value" : "libunrar.a en UnRAR en versiones anteriores a la 5.5.7 tiene un problema de lectura fuera de los límites de la memoria en la función Unpack::Unpack20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.6",
            "matchCriteriaId" : "4FBF68E6-20E3-4B2A-A07B-F8E8D3037F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function."
      }, {
        "lang" : "es",
        "value" : "libunrar.a en UnRAR en versiones anteriores a la 5.5.7 tiene un problema de desbordamiento de búfer en la función Unpack::LongLZ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.6",
            "matchCriteriaId" : "4FBF68E6-20E3-4B2A-A07B-F8E8D3037F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en ASSA ABLOY APTUS Styra Porttelefonkort 4400 anterior a A2 provoca un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aptus:styra_porttelefonkort_4400_firmware:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E152C3-D8E6-4E5A-8819-83A0B785E431"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aptus:styra_porttelefonkort_4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078B387E-B691-4D49-8B0B-D11A58CD4B8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.aptus.se/sv/site/aptusse/support/sakerhetsuppdatering/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.aptus.se/sv/site/aptusse/support/sakerhetsuppdatering/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T14:29:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la función ares_parse_a_reply en la biblioteca embebida ares en ReSIProcate en versiones anteriores a la 1.12.0 permite que atacantes remotos provoquen una denegación de servicio (lectura fuera de límites) mediante una respuesta DNS manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "D7A9B784-2E65-4DD9-A2BF-37E9423059E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC4049D-A7EE-4E51-82F1-3431B4571C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha10:*:*:*:*:*:*",
            "matchCriteriaId" : "2A32D09D-AFFE-407D-908F-8191D2973C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha11:*:*:*:*:*:*",
            "matchCriteriaId" : "3885433A-D1DE-4970-84AF-A7D6DFAF1B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6DE94C-6DCB-4668-A326-9E001283C822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "888FA5FD-51E9-4185-ADA1-D668997EB4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "4402C7AC-9011-4D24-A480-4345E53CCDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "887E4C3A-421B-45FA-B15A-B28C5441690D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha6:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF27A62-D822-4EC6-B9B0-8B649E4D1945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha7:*:*:*:*:*:*",
            "matchCriteriaId" : "A56BD5AA-5147-46E7-8A9C-D7659910F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha8:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0618F8-A8A1-424E-99C2-9BD5EC1D0107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha9:*:*:*:*:*:*",
            "matchCriteriaId" : "1D69BFE3-1049-4A6A-B0C6-DD19C42841D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "245EB59F-6C85-4ADB-9CF8-BC14BCA0F95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "2730BF92-BCE5-4AAE-BE01-247DC88E1930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEF426E-6BC3-430A-A6CB-A191878336F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2FA8BF-3C02-4D2C-87FF-AC5AF93969BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A99CFB3-19B9-4795-918C-3EBA7CCEEEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8041C24-A94D-4608-95DC-6C88205E6396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "39317578-B144-4B3A-86CE-DEF08381B0AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D281F50A-901C-40C5-B00C-0DBD091660E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3801C8-13A4-4FF6-B37A-F470776C7BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "CED56E7C-2C14-412B-98E5-1800FE7BC7F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "608290B9-AA27-439A-AA69-2EA1FAF8D9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "64FF1CA1-79CB-4626-AE4C-A565872798C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A69805-93E3-49ED-8BBC-FDE1C2704B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "917E083C-B1A3-4F5A-93D1-D8FB4FC2B313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "791BA3D2-D50A-4ABA-BC4A-44469C09EA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://list.resiprocate.org/archive/resiprocate-users/msg02700.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://list.resiprocate.org/archive/resiprocate-users/msg02700.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T15:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-600 Rev Bx con firmware v2.x permiten a los atacantes remotos leer contraseñas mediante un ataque de tipo Absolute Path Traversal model/__show_info.php?REQUIRE_FILE= tal y como se puede ver al descubrir la contraseña de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-600_b1_firmware:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5822C40-63B4-4C38-BB44-30C890B7D3CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-600_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01EA1FD-0D5E-466E-8866-119E58379185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jithindkurup.tumblr.com/post/165218785974/d-link-dir-600-authentication-bypass-absolute",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42581/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=PeNOJORAQsQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jithindkurup.tumblr.com/post/165218785974/d-link-dir-600-authentication-bypass-absolute",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42581/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=PeNOJORAQsQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T15:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation."
      }, {
        "lang" : "es",
        "value" : "La función TIFFReadDirEntryArray en tif_read.c en LibTIFF 4.0.8 maneja incorrectamente la asignación de memoria para archivos pequeños, lo que permite a los atacantes remotos provocar una denegación de servicio en la función TIFFFetchStripThing en tif_dirread.c durante una invocación tiff2pdf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2725",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1338",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-18T15:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126246."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126246."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFBB5B-8566-45BC-9123-5418821E6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A84EA62-E3F8-4E4C-9FEF-065300C4611A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232D8EF-1DB3-477D-818C-B79B68406197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3547663B-AA43-4866-931F-E4FBB64E7568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93778FE9-8ED2-471D-BEC8-EF7D7E5AFC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F403652E-333E-4828-A3A6-FED1DF447AA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004138",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100353",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1501",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-18T15:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 8.0, 8.5 y 9.0 podría proporcionar una seguridad más débil de lo esperado después de usar la consola de administrador para actualizar la configuración de seguridad de los servicios web. IBM X-Force ID: 129576."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1667C5-D19B-469C-82D5-8406B6D75EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89551609-69B7-452A-9CB2-04C12D268B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF27B7D7-4442-47CA-880D-D3B5412AEF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B595B048-4204-49B4-9497-B8D119C8784D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC38B5D4-66A3-4671-9099-0F38D283BA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B357DB53-061F-43D5-9E9F-5D5468A5805B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29ADADD2-EC21-4C45-A381-BC2091CD9F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD901DE-9258-40DA-A09B-B0CA9DCCF843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C21DDD3-C1CF-4CB2-BA13-4807F17AC5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DBD14D-F0F2-4606-BC55-ECB6CCA3EF81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F994982-0972-4AC2-A0AB-BD3E46F7AA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAAF976-032D-49F7-AE25-29A85E371EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B4F3AE-880A-45C9-8E31-A1F2548E58CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430F7529-85F0-494B-A086-1BBD33DA9FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54026F65-6FA5-42E3-AE9C-F3668881A0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F072D774-F55B-4B5E-A65D-CE1D00716D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79600453-6230-461B-BA56-3F8B7696D083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9F706-FB93-45B7-8A00-73C100C77964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158899BA-035B-46D9-89A5-EEEB8169D1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFA114D-57E4-4AD3-8117-06F2150C6D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C60195-38B4-4BBC-85A3-BD0D9314723B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006810",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100394",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039199",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129576",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T16:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station."
      }, {
        "lang" : "es",
        "value" : "Un usuario sin privilegios podría acceder a todas las funciones en el componente Surveillance Station en los dispositivos QNAP TS212P con firmware 4.2.1 versión 20160601. Un usuario sin privilegios no puede iniciar sesión en el front-end pero con esa SID de usuario sin privilegios, se podría acceder a todas las funciones de Surveillance Station."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-212p_firmware:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3FD13E-9D65-4A42-8532-4FAB7B912451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:ts-212p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0363E774-84B2-4248-AA88-8E557B590495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kth.ninja/2017/08/qnap-surveillance-station.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kth.ninja/2017/08/qnap-surveillance-station.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T16:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en NexusPHP en su versión 1.5 mediante el parámetro type de shoutbox.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.lsafe.org/cve.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lsafe.org/cve.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T16:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "NetApp Data ONTAP en su versión 8.2.5, cuando opera en 7-Mode en entornos NFS, permite a los atacantes remotos provocar una denegación de servicio mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "56A2FEB8-76F8-4BD2-B532-2496D07CC35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100417",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170815-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170815-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T16:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Name or (2) Description parameter to RM/Reservation/ReserveNew; the (3) Description parameter to RM/Topology/Update; the (4) Name, (5) Description, (6) ExecutionBatches[0].Name, (7) ExecutionBatches[0].Description, or (8) Labels parameter to SnQ/JobTemplate/Edit; or (9) Alias or (10) Description parameter to RM/AbstractTemplate/AddOrUpdateAbstractTemplate."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código que se manifiesta en la forma en la que el motor Chakra JavaScript renderiza cuando gestiona objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quali:cloudshell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.0.6508",
            "matchCriteriaId" : "99BACB31-2D88-4E02-AE9C-B424485397A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143746/Quali-CloudShell-7.1.0.6508-Patch-6-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541023/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42453/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143746/Quali-CloudShell-7.1.0.6508-Patch-6-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541023/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42453/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T16:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en versiones anteriores a la 17.2.32.2279 de Paessler PRTG Network Monitor permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.2.32.2206",
            "matchCriteriaId" : "26C4D596-BF68-4ADB-B3EF-801D4AB4D584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.paessler.com/prtg/history/stable",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.paessler.com/prtg/history/stable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0687",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-18T17:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35583675."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35583675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature."
      }, {
        "lang" : "es",
        "value" : "El plugin gmp en strongSwan en versiones anteriores a la 5.6.0 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y daemon crash) mediante una firma RSA manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.3",
            "matchCriteriaId" : "2AE9E3E8-A661-4A0D-A1D4-CAD6BB3B3C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-%28cve-2017-11185%29.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-%28cve-2017-11185%29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:01.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file."
      }, {
        "lang" : "es",
        "value" : "Razer Synapse 2.20.15.1104 y anteriores emplea permisos débiles para el directorio CrashReporter, lo que permite que usuarios locales obtengan privilegios mediante un archivo troyano dbghelp.dll."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razer:synapse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20.15.1104",
            "matchCriteriaId" : "9DEF7D25-5A6F-4631-BF1D-FDF03830545C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:01.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan horse (1) RazerConfigNative.dll or (2) RazerConfigNativeLOC.dll file."
      }, {
        "lang" : "es",
        "value" : "Razer Synapse 2.20.15.1104 y anteriores emplea permisos débiles para el directorio Devices, lo que permite que usuarios locales obtengan privilegios mediante un archivo troyano (1) RazerConfigNative.dll or (2) RazerConfigNativeLOC.dll."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razer:synapse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20.15.1104",
            "matchCriteriaId" : "9DEF7D25-5A6F-4631-BF1D-FDF03830545C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:01.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en montículos en la implementación SMB en NetApp Clustered Data ONTAP en sus versiones anteriores a la 8.3.2P8 y 9.0 anterior al P2 permite que los usuarios autenticados remotos provoquen una denegación de servicio o ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:*:p7:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.2",
            "matchCriteriaId" : "8D465B3D-98EA-4A5A-84EE-E62FE706D8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:*:p1:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "E65C5912-99DA-4A34-A812-F046F7565841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100429",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170814-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170814-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:02.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 no están protegidos contra ataques de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tomaxcom:r60g_firmware:2.6.3-170330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6336B2-BAC6-4027-9DE3-B0D037EE9C02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tomaxcom:r60g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEFE743-3F09-4DC1-9700-AA7579BFA679"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tomaxcom:r60gv2_firmware:2.6.3-170330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7534A-46EC-4CCE-8E03-9C1BF0292E0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tomaxcom:r60gv2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AFE828-EDC3-416F-A0CC-D59D1EA6A3F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:02.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ASUS DSL-N10S V2.1.16_APAC reflejan una vulnerabilidad de Cross-Site Scripting (XSS), tal y como se puede ver en el parámetro snmpSysName."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n10s_firmware:v2.1.16_apac:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3DC554-7B0E-4F7B-87D9-9FB3B1CA7C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n10s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101A4EDA-0480-417B-9F03-D485754BE174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:02.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ASUS DSL-N10S V2.1.16_APAC tienen una vulnerabilidad de escalado de privilegios. Un usuario normal podría escalar sus privilegios y llevar a cabo acciones administrativas. No se mapean los usuarios con sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n10s_firmware:v2.1.16_apac:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3DC554-7B0E-4F7B-87D9-9FB3B1CA7C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n10s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101A4EDA-0480-417B-9F03-D485754BE174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS DSL-N10S V2.1.16_APAC devices allow CSRF."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ASUS DSL-N10S V2.1.16_APAC permiten que se realicen ataques de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n10s_firmware:v2.1.16_apac:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3DC554-7B0E-4F7B-87D9-9FB3B1CA7C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n10s_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9DD524-BAFD-46AE-AD97-1BB752FB3016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T17:29:02.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en reports.php en NexusPHP 1.5 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro delreport."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sh1yan.top/shiyan/cve.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxfocus/cve/blob/master/takeupdate.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sh1yan.top/shiyan/cve.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxfocus/cve/blob/master/takeupdate.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T18:29:03.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en Spring Batch Admin en versiones anteriores a la 1.3.0 permite a los atacantes remotos interceptar la autenticación de víctimas sin especificar y enviar peticiones arbitrarias como la explotación de la vulnerabilidad de subida de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spring_batch_admin_project:spring_batch_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "BF510D12-F180-45EE-9C20-94AACE2B0F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100410",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T18:29:03.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Stored Cross-Site Scripting (XSS) en Spring Batch Admin en versiones anteriores a la 1.3.0 permite a los usuarios autenticados remotos inyectar código JavaScript o HTML arbitrario a través de la función de subida de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spring_batch_admin_project:spring_batch_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "BF510D12-F180-45EE-9C20-94AACE2B0F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100410",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T18:29:03.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "classes\\controller\\admin\\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators."
      }, {
        "lang" : "es",
        "value" : "classes\\controller\\admin\\modals.php en el plugin Easy Modal en sus versiones anteriores a la 2.1.0 para WordPress tiene una vulnerabilidad de inyección SQL en una acción delete con los parámetros id, ids o modal para wp-admin/admin.php, explotable por administradores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easymodal_project:easy_modal:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.17",
            "matchCriteriaId" : "0D6200E3-C71B-4C00-961F-5420CB56BB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-modal/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-modal/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T18:29:03.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "classes\\controller\\admin\\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators."
      }, {
        "lang" : "es",
        "value" : "classes\\controller\\admin\\modals.php en el plugin Easy Modal en sus versiones anteriores a la 2.1.0 para WordPress tiene una vulnerabilidad de inyección SQL en una acción untrash con los parámetros id, ids o modal para wp-admin/admin.php, explotable por administradores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easymodal_project:easy_modal:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.17",
            "matchCriteriaId" : "0D6200E3-C71B-4C00-961F-5420CB56BB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-modal/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-modal/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T18:29:03.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Core\\Admin\\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF."
      }, {
        "lang" : "es",
        "value" : "Core\\Admin\\PFTemplater.php in el plugin PressForward 4.3.0 y anterior para WordPress tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en PATH_INFO para wp-admin/admin.php, relacionada con PHP_SELF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pressforward:pressforward:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "C19818F6-D132-4B6D-8D20-0558E95E5CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.defensecode.com/advisories/DC-2017-05-007_WordPress_PressForward_Plugin_Advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.defensecode.com/advisories/DC-2017-05-007_WordPress_PressForward_Plugin_Advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T18:29:03.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib\\modules\\contributors\\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF."
      }, {
        "lang" : "es",
        "value" : "lib\\modules\\contributors\\contributor_list_table.php ien el plugin Podlove Podcast Publisher 2.5.3 y anteriores para WordPress tiene una vulnerabilidad de inyección SQL en el parámetro orderby de wp-admin/admin.php, explotable mediante un ataque de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podlove:podlove_podcast_publisher:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "159FADA8-26BE-42AC-AC46-DB820B91F7D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.defensecode.com/advisories/DC-2017-05-006_WordPress_Podlove_Podcast_Publisher_Plugin_Advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.defensecode.com/advisories/DC-2017-05-006_WordPress_Podlove_Podcast_Publisher_Plugin_Advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8253",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from userspace."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, la memoria kernel podría sobrescribirse si un master no válido se envía desde userspace."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8254",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, un apuntador de cliente de audio es desreferenciado antes de que se compruebe si es válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8255",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, existe una vulnerabilidad de desbordamiento de números enteros en boot."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8256",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, puede ocurrir un acceso fuera de los límites del array si userspace envía más de 16 direcciones multicast."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8257",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, al acceder a la interfaz de depuración sde_rotator para la lectura de registros con múltiples procesos, un proceso puede liberar el búfer de depuración mientras que otro proceso sigue utilizándolo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8260",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, debido a una conversión de tipos, un valor podría pasar indebidamente la validación y causar una escritura fuera de los límites posteriormente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-8260.c",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-8260.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8261",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially occur."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una sobrescritura de kernel en un camera driver ioctl en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8262",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En algunas funciones de asignación de memoria y libres, podría ocurrir una condición de carrera en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, lo que conduciría a una condición Use After Free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8263",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual address in userspace."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un error de kernel al realizar ciertas operaciones en una dirección virtual de sólo lectura en el espacio de usuario en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8265",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free."
      }, {
        "lang" : "es",
        "value" : "xiste una condición de carrera en un controlador de vídeo en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, lo que podría desembocar en una liberación doble (double free)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8266",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition."
      }, {
        "lang" : "es",
        "value" : "Existe una condición de carrera en un controlador de vídeo en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, lo que podría desembocar en una condición use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8267",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "Existe una condición de carrera en un controlador IOCTL en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, lo que podría desembocar en un desbordamiento de enteros y en una escritura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8268",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read."
      }, {
        "lang" : "es",
        "value" : "La aplicación de cámara podría solicitar un procesado de búfer de marco/comando con valores no válidos en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, lo que podría desembocar en un heap buffer over-read."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8270",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition."
      }, {
        "lang" : "es",
        "value" : "Existe una condición de carrera en un controlador en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, lo que podría desembocar en una condición use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8272",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T18:29:03.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated potentially leading to an out of bounds heap write."
      }, {
        "lang" : "es",
        "value" : "En una función de controlador, un valor del espacio de usuario no se valida correctamente en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux,lo que podría desembocar en una escritura de montículo fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11160",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-18T19:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ruta de búsqueda no confiable en installer en Synology Assistant en versiones anteriores a la 6.1-15163 en Windows permite que atacantes locales ejecuten código arbitrario y lleven a cabo un secuestro de DLL mediante un archivo troyano (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll en el directorio de trabajo actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:assistant:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1-15030",
            "matchCriteriaId" : "3C098455-DEB8-4956-AAF8-562A92F5A7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_44_Synology_Assistant",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_44_Synology_Assistant",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3756",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-08-18T19:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de escalado de privilegios en Lenovo Active Protection System para versiones de sistemas ThinkPad anteriores a la 1.82.0.17. Un atacante con privilegios locales podría ejecutar código con privilegios de administrador a través de una ruta de servicio sin entrecomillar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_10_ella_2_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A9E06F-CCA5-438A-B477-9BBB954DFF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_11e_beema_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CC8858-E7EB-40DB-BCC0-3C4490CDBBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_11e_braswell_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5283A0C-4F21-414F-8448-42F0AF5E3A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_11e_broadwell_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B62564C-94F5-408D-8787-AEB0A825951B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_11e_skylake_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E598F517-B199-41A7-9581-736DE3CD73E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_13e_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB31A2F4-7BBA-42B5-9435-24B63BB429D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e450_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22F9EA-2869-46C7-B0DE-8336C408ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e450c_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90897A3E-97F1-4192-9AAC-67066509D752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e455_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3657062-5DF1-44EE-9E32-D4D6F02DD5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e460_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B2EB5D-EFE4-4CDB-B06D-9E35B007ADE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e465_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202001D0-727C-4076-8C0C-B8FA288BBE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e550_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF8964F-3823-43A8-8CAA-261D83026842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e550c_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7170684-8BD1-4E94-8D91-D2356BF1D5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e555_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D401D6-1BE6-476E-B3C8-7063F68AB629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e560_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124D4A4B-2DF2-424F-879E-A7088763654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_e565_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214E9770-B020-4F4F-913F-21550E68D4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_edge_e440_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FDDBC4-E6CE-4338-9031-D8E3090D9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_edge_e445_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E53EEC9-262F-43E8-828A-8EA8FFC84899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_edge_e540_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB4F086-FDC9-4A2E-B98A-B5DA80429652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_edge_e545_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3282E42-1A06-4E58-B150-14110BA305E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_helix_20cg_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3B2082-901E-402E-98A7-8FA89696094B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_helix_20ch_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0EC65A-8171-4ECB-A51D-DD1551C71DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_l440_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B323D40-6620-44D3-AC96-82DAC6F2DABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_l450_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCD6BF2-42F5-4091-9EC0-A6B4B631D5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_l460_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B7C1E0-00D1-44E8-B297-E1A20B3F4923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_l540_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FECE6C-B105-4755-8E2D-380FE482FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_l560_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB15CEB-639E-40C5-ACD6-64681FCDFFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_p50_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573A1F93-8462-4E4F-B3B8-241B0ACA1C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_p50s_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF035670-4062-4C5D-A7D6-1527E127FA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_p70_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934EADE7-A270-4707-9676-5526CC4321BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s1_yoga_12_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "457BDFE3-2443-4B3E-A562-A45CADE07AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s1_yoga_non_vpro_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8783EB6E-B117-4C9B-819F-75923964A184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s1_yoga_vpro_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5370AD-2E0F-472D-8C44-47A9E451B7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s3_s440_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD8714-3936-4D89-A6F5-83408C569CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s3_yoga_14_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652BC360-7391-49D8-84B1-129CAD947665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s5_e560p_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EA2E2F-679E-4B7C-90EA-437B30FBADDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s5_yoga_15_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6299BB-84AB-462C-970E-BD163B240BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_s540_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAF6666-4DF4-4083-ADF0-258004D6D917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t440_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D7E807-04A3-4E3C-BDB9-04FBD436AC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t440p_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B660FE4E-7E31-4712-B070-1988110F7CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t440s_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4217C576-0220-44C5-B9A4-E5BDCAE663D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t440u_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BDB868-5286-47B4-BBE8-964B607B9656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t450_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379182F3-41E8-4D9E-B62B-855264DE1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t450s_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E133A4-8A24-439B-90C3-A0E68F6F875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t460_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6C2828-A9B0-4E55-AEBA-81863A38A7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t460p_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761A1E93-1141-4190-AC3B-83F98D4D5B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t460s_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2B9E56-5B83-4513-BC52-49EEA51CD625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t540_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD8E506-DE1C-428E-BBA1-C2614DD2E97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t540p_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6E3B17-2E9D-45EC-9025-3881A27D5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t550_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C5DD41-344B-4A4A-9B9A-95103711B2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_t560_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F1B0B7-A12A-48E0-B410-554AB6A28333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_tablet_10_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857415C8-D6C9-427D-83B1-0EAFDBA37CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_tablet_8_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA671B1-CB70-4189-A021-942EB954DB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_w540_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A97797-1CCC-4638-A1BA-911FB119EBC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_w541_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E7ECDE-68C0-4AE7-83EE-741D708253A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_w550s_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9AB29E-872B-4E9B-AD7B-F6F1FD7228E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x1_carbon_20ax_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA54090B-BBFE-4FAD-A07D-8B8135916FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x1_carbon_20bx_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1612F425-C622-4E75-947C-7B3DEF392DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x1_carbon_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7363457F-AA3B-4CD2-A0C3-43BD58FB8296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x1_tablet_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34060A72-AB64-4996-B7A6-44575E00FDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x1_yoga_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33138022-444C-49FD-94C4-80E76EF10112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x140e_amd_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5252AB-73F2-4508-8B65-28D5856A578A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x240_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33224D30-DC55-4705-8F4F-13348568A696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x240s_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE308ED0-7024-4108-AAE6-9318F845193B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x250_broadwell_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29341782-D473-4601-9AE6-FAAAD6EEADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x250_sharkbay_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC323DE6-C99E-4FE0-9C5B-952F693B09C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_x260_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479021AA-EB96-4361-B58A-592CB7F8095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_11e_beema_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C4743A-25E5-40EF-92F5-AC49A656F53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_11e_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596B5686-8D13-403E-A076-A8AAE3CA7704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_11e_braswell_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239C4629-A82B-4149-AD85-5A260685002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_11e_broadwell_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA9C8D4-EF0A-4D97-9159-4EEC46276FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_11e_skylake_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D2CCB1-B870-4347-A492-1A4798404ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_14_460_s3_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CB1108-B0D2-4551-AACE-0F8759B868EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkpad_yoga_260_s1_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA742E4-F501-4F58-84C3-05BD4DB3BFBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_10_ella_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F76EA8-7102-4698-9072-AD915A8918C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_beema:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF576279-3E6E-4638-AED0-B5B08FC0ECDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_braswell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A3913F-E1D4-4D52-B63B-3B1C8C1AED93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_broadwell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF36AEB-9E95-437F-8BD2-6D9ED91AC339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_skylake:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8557564-B0EF-48CC-A8F8-AE48522DDBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_13e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DBB534-1134-4523-9CD7-590CB81C59F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA339604-9751-43FA-B76F-7F2171615EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e450c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1ACFA23-CA56-4350-971D-DEF9B1EB2ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE114D6-94A7-49E3-B59F-A15F5C0CA091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A9D0E7-6995-4485-948D-1C6AE3DA0852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E37D1D5-96FF-43AD-963C-89263E578EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516C4759-773C-4975-AEF5-9976E0DFD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e550c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A5B02A-5CAF-4313-BF39-56501EC5638E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e555:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5262D8E3-E4AB-433D-8752-043A12129A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1503BA-645A-4051-8DE7-1DCCACC5D25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e565:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98974C2-F0F8-4BB1-8AB6-10E71B3C614F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_edge_e440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594AB083-54EA-4BE3-9978-644E85CEA340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_edge_e445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272C1500-E07F-4340-9207-F778C6AEB3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_edge_e540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5A8AC2-D1F8-4F36-B5D2-8469554D8A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_edge_e545:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2D1FF2-5F83-43D9-A941-6088F03E4EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_helix_20cg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB55F38-145F-4CCE-816A-7B858A16D476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_helix_20ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB76C77-AB1A-40A3-AB74-FB8417A12DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9E5785-3AC4-4BAF-BFA8-86C327C9183F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A581500-3F97-4B68-92F9-0EE9182603CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE4E9C-5296-4FB5-A2FD-363D4682E6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F27E4-1508-444A-ADC5-694B67383F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A146DB0-4E3D-491B-8D30-EBF0F3BC17B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F583B121-A68C-463B-9D72-06061F74D007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1669BD8-C96F-4302-8E80-53D90EA719CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_yoga_12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52944176-C48C-4439-B0F5-9584491867CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_yoga_non_vpro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9E1A94-9288-4032-B6E4-1E99A4CE4460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_yoga_vpro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97D7707-BDF2-4CFD-A345-73A9C95022DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s3_s440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924ED9DE-5E42-40CD-A4B7-0F5536EFC60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s3_yoga_14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32CEBA9-DE1B-415F-9F7A-4D790E46AA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s5_e560p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF6F846-63BC-4223-945A-F4F956AEA31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s5_yoga_15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAB8A16-DA03-4582-8D6C-FEBF91FECA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A8D286-D464-44C9-9716-2AC73328E9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A4F2A0-BA6D-48F7-8805-7CE17AEE6DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A6E989-646D-4B08-A475-BFF70B6286F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF1A0BA-A517-4BDA-9B10-07284A572577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33761C7-C84E-4D79-81B3-028A36E59178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D943E973-EEAF-48E6-BD8A-05C61EA4FD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t450s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB7FFCD-F586-4846-9053-B56EA599D4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86FD3AD-D731-4C30-8A72-EC1A45B203F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t460p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E6AE13-913E-4FD7-A0DC-F554605F81B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E38817-144F-41B9-9EE5-2A78F4DBC718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF11DB35-3AB6-4D4E-8067-414C57398F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E207A025-49AB-4886-BDD9-36D624D40D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D79966D-08A3-428F-B4EC-CAAC8F4CF435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84478711-E030-42CD-9B8A-0C54C8DB8128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_tablet_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7280F05D-378C-43E9-9BC4-A5E716EAD2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_tablet_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A775A1-C311-423D-A210-BEED4661DB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A51FFE-257C-4609-BC14-C0DE0969E7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23267973-5F08-43C5-9C92-F429B84D3245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9E7845-CEA3-43A4-8978-F447A45E0E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_20ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A94104A-C67B-4643-B70E-DC259175CB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_20bx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3229E50-34FD-4457-B816-ABD453C77E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_tablet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C63844-B6F1-46B4-9267-361D7B94FD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45044ABC-76BF-475E-9B12-A77901172E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x140e_amd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50272074-AD4E-4ACE-9B07-D9B2D9FCB54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E250F0-9F11-4BD6-A71A-4D2C82F193B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2462DB48-9AC0-4E1F-A925-2DFC0CB54BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x250_broadwell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C59194B-3EE3-4DEB-A615-2A064C9D2AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x250_sharkbay:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BA9710-644E-4544-91A7-2CC4D6FB02F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08393A13-D68E-4042-B223-EF80E581EEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C2E66F-B45C-4850-8C19-2AD84939173C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e_beema:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC998747-F416-4D16-98A8-C38E9C63BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e_braswell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E61E14B-B616-45F8-BF93-DEF70BA95FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e_broadwell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520FEBA4-79AC-4D31-955B-D9F99FE11F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e_skylake:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC10E43-0446-41FA-9153-1D1AB1A43B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_14_460_s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F100E9-0BB9-4503-9B0D-20ECE5702568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_260_s1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCFE731-C81C-40E6-ACA3-5E0DE06EEEF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100305",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15765",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7364",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, en la función __mdss_fb_copy_destscaler_data(), la variable ds_data[i].scale puede apuntar a una dirección proporcionada por el usuario (que puede conducir a una dirección kernel arbitraria) para que en una condición de error, esta dirección se libere y una operación continuada podría resultar en una condición de uso después de liberar la memoria previamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9678",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy()."
      }, {
        "lang" : "es",
        "value" : "En un controlador de vídeo, puede ocurrir una corrupción de memoria debido a la falta de comprobación de límites en un memcpy() en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9679",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, si una cadena del espacio de usuario no se finaliza en nulo, el contenido de la memoria kernel podría filtrarse a los registros del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9680",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, si un argumento de puntero proveniente del espacio de usuario no es válido, un controlador podría emplear una estructura sin inicializar para registrar un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9682",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en dos funciones del controlador KGSL en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux podría desembocar en una condición use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9684",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en un controlador USB en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux podría desembocar en una condición use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9685",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-08-18T19:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en un controlador WLAN en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux podría desembocar en una condición use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100477",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8445",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-08-18T20:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior in this instance is for the TLS trust manager to deny all certificates."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error en el administrador de confianza X-Pack Security TLS en las versiones de la 5.0.0 a la 5.5.1. Si la recarga del material de confianza fracasa, el administrador de confianza será reemplazado por una instancia que confía en todos los certificados. Esto podría permitir que cualquier nodo se uniese a un clúster empleando cualquier certificado. El comportamiento adecuado en esta instancia es que el administrador de confianza TLS niegue todos los certificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "2B4F9A05-371C-44E9-8345-BC837276FA18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8446",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-08-18T20:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reporting user, possibly gaining access to sensitive data."
      }, {
        "lang" : "es",
        "value" : "La característica Reporting en X-Pack en versiones anteriores a la 5.5.2 y el plugin independiente Reporting en versiones anteriores a la 2.4.6 presentaba una vulnerabilidad de suplantación. Un usuario con el papel de reporting_user podría ejecutar un informe con los permisos de otro usuario que informa, obteniendo así acceso a datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:x-pack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "551291BD-5144-4521-9941-7DDF310F40B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:x-pack_reporting:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.5",
            "matchCriteriaId" : "91F786A9-C0DB-4325-8FCE-043008BA2B16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.elastic.co/community/security",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elastic.co/community/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer basado en montículos en basicio.cpp de Exiv2 0.26 La vulnerabilidad causa una escritura fuera de los límites en Exiv2::Image::printIFDStructure(), lo que puede provocar una denegación de servicio u otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482295",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en Exiv2::FileIo::path[abi:cxx11]() en basicio.cpp de libexiv2 en Exiv2 0.26 que puede provocar una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482296",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de sobrelectura de búfer basado en montículos en libexiv2 en Exiv2 0.26 que se activa en la función Exiv2::Image::io en image.cpp. Esto provoca una denegación de servicio en remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482423",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Se presenta un acceso de dirección ilegal en la función output_hex() en el archivo data/data-out.c en la biblioteca libpspp en GNU PSPP anterior a la versión 1.0.1, que conllevará a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:pspp:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330B1CE9-6082-4C42-9BFB-EDCAFB3D8654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482429",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se presenta una anulación de aserción accesible en la función dict_add_mrset() en el archivo data/dictionary.c en la biblioteca libpspp en GNU PSPP anterior a la versión 1.0.1, que conllevará a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:pspp:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330B1CE9-6082-4C42-9BFB-EDCAFB3D8654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482432",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una anulación de aserción accesible en la función dict_rename_var() en el archivo data/dictionary.c en la biblioteca libpspp en GNU PSPP anterior a la versión 1.0.1, que conllevará a la denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:pspp:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330B1CE9-6082-4C42-9BFB-EDCAFB3D8654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482433",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una anulación de aserción en la función parse_attributes() en el archivo data/sys-file-reader.c en la biblioteca libpspp en GNU PSPP anterior a la versión 1.0.1, que conllevará a la denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:pspp:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330B1CE9-6082-4C42-9BFB-EDCAFB3D8654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482436",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/forum/forum.php?forum_id=8936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existen fugas de memoria en LibSass 3.4.5 accionadas por un código muy anidado, como un código con una secuencia larga de caracteres de paréntesis abiertos, lo que puede provocar un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482331",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix (available from GitHub after 2017-07-24)."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en Sass::Eval::operator() en eval.cpp de LibSass 3.4.5, permitiendo un ataque de denegación de servicio. NOTA: esta vulnerabilidad es similar a CVE-2017-11555 pero sigue siendo explotable incluso después de la corrección del fabricante para CVE-2017-11555 (disponible en GitHub desde el 24-07-2017)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482335",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-18T21:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de consumo de pila en LibSass 3.4.5 que se activa en la función Sass::Eval::operator() en eval.cpp. Esto provoca una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsass:libsass:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD5BFB9-7E02-45FC-A083-F1B45617CFF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482397",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-19T16:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of \"AUX\" as the initial substring of a filename."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en ESTsoft ALZip 8.51 y anteriores permite que atacantes remotos ejecuten código arbitrario mediante un archivo de dispositivo MS-DOS manipulado, tal y como demuestra el uso de \"AUX» como subcadena inicial de un nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estsoft:alzip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.51",
            "matchCriteriaId" : "EE276C28-43C0-4459-B7C2-E8569AE1300A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.altools.com/ALTools/ALZip/Version-History.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.altools.com/ALTools/ALZip/Version-History.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-19T16:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary."
      }, {
        "lang" : "es",
        "value" : "La función getsym en tekhex.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de pila y bloqueo de aplicación) mediante un binario tekhex."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21962",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-19T18:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en fs/timerfd.c en el kernel Linux en versiones anteriores a la 4.10.15 permite que usuarios locales obtengan privilegios o provoquen una denegación de servicio (corrupción de lista o use-after-free) mediante operaciones simultáneas de descriptor de archivo que aprovechan la cola inadecuada might_cancel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.92",
            "matchCriteriaId" : "21888989-B8CA-4696-9FE4-9CDA1B3B92AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.47",
            "matchCriteriaId" : "18369FD7-D135-4C78-BA5E-8FF5F4573485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.52",
            "matchCriteriaId" : "8104AAC1-9700-4372-8E11-37B09309A76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.67",
            "matchCriteriaId" : "168D3A9F-B199-4E02-B791-291B29317EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.27",
            "matchCriteriaId" : "922869C5-7B17-4B57-9E84-B746C7ABCFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.15",
            "matchCriteriaId" : "85F68625-69D9-4FD0-A41C-40383EB29CF1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB33390A-F51F-4451-8FEA-7FC31F1AA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81C5D4E-3CAD-43CE-82BC-B0619CA3A74A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4057",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4058",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2020:0036",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1481136",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43345/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2020:0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1481136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43345/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-19T18:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La función sanity_check_raw_super en fs/f2fs/super.c en el kernel Linux en versiones anteriores a la 4.11.1 no valida el conteo de segmentos, lo que permite que usuarios locales obtengan privilegios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.18.53",
            "matchCriteriaId" : "782F0A68-1913-44D3-9276-E9D60E14746F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.41",
            "matchCriteriaId" : "9019BEC9-FE77-4506-A019-B8B4D8BCEBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.68",
            "matchCriteriaId" : "8E5474E5-2A5B-4534-A1AE-46BE3C5884D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.28",
            "matchCriteriaId" : "08EE535F-28D2-470D-A06D-93027A507803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.16",
            "matchCriteriaId" : "8120FC70-5A9E-433F-AEE0-85DED2CE0B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11",
            "versionEndExcluding" : "4.11.1",
            "matchCriteriaId" : "493C208D-F4C9-4EE9-84FC-A33FEF355F46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dd46188edc2f0d1f37328637860bb65a771124",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1481146",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b9dd46188edc2f0d1f37328637860bb65a771124",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dd46188edc2f0d1f37328637860bb65a771124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1481146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b9dd46188edc2f0d1f37328637860bb65a771124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-19T18:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La función sanity_check_ckpt en fs/f2fs/super.c en el kernel Linux en versiones anteriores a la 4.12.4 no valida los arrays blkoff y segno, lo que permite que usuarios locales obtengan privilegios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8",
            "versionEndExcluding" : "3.18.64",
            "matchCriteriaId" : "912A77EB-CAFA-41ED-A8A9-6A2C7CF6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.44",
            "matchCriteriaId" : "C2695139-BE23-4BAC-97F1-4CD2A6240BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.81",
            "matchCriteriaId" : "74C80B36-9485-4CC6-830B-9E86746DE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.42",
            "matchCriteriaId" : "2E4DFB24-2EA3-4158-AAE3-C5FDF2B4C9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.4",
            "matchCriteriaId" : "6D215460-34F8-4C32-939B-270A67F6FA9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15d3042a937c13f5d9244241c7a9c8416ff6e82a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1481149",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/15d3042a937c13f5d9244241c7a9c8416ff6e82a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15d3042a937c13f5d9244241c7a9c8416ff6e82a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1481149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/15d3042a937c13f5d9244241c7a9c8416ff6e82a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file."
      }, {
        "lang" : "es",
        "value" : "La función asn1f_lookup_symbol_impl en asn1fix_retrieve.c en libasn1fix.a en asn1c 0.9.28 permite a atacantes remotos causar una denegación de servicio (fallo de segmentación) utilizando un archivo .asn1 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asn1c_project:asn1c:0.9.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1510C569-E721-4738-B08D-09A2049E6514"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T16:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC."
      }, {
        "lang" : "es",
        "value" : "En Nimbus JOSE+JWT en versiones anteriores a la 4.39 no hay comprobación de desbordamiento de enteros al convertir valores de longitud de bytes a bits, lo que permite que atacantes lleven a cabo ataques de omisión HMAC mediante el cambio de Additional Authenticated Data (AAD) y texto cifrado. Así, se obtiene texto plano diferente a partir del mismo HMAC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D2BDED-6749-4862-9D2D-54D871BDC8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7AD668-E307-4B4A-9BE8-E837DE4F717C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF9F006-8B1B-4448-8778-423A6A1F3DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9523DEE0-8CCF-49C4-B0DA-C9EF243D4B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7206DFE0-70A4-4E06-BE7F-D8FA8C62A094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91050A7-FAE4-4080-B53C-F77420CBF9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E63FFD-9C37-4AFD-843E-2ED4235EE399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE00EFF-9045-4D30-AFA5-BFF0EDEF91B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFC1A72-B7A1-42D3-BA3E-C009F041692D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7891E427-B4D0-4E4A-9F5B-4A9122B72ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A76765-2D77-4C79-9E0E-B6A613835F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC445F4-0859-4287-A22F-361CB2F3D037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BA3A10-0631-41B3-930E-D56A0AE6A273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E3F6F8-7EDD-4D5B-8805-41DDE054BEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE3E9B7-C835-461E-ADD7-D45FBB5A71F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5B2D3A-EEF6-4147-A779-44E02AB395C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71010D0A-F4E0-4935-8809-F8E995BFA86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41465ADD-A6B9-4F80-80EF-B636997EA707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F8CA64-C93D-43E4-8EB4-3D4797008DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36364548-4CE5-467A-BA83-5E742AB2593C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46518146-4629-4ACD-B313-339BCB30F1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1C5455-5B5E-4BDE-8AA3-9F64A85912EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45973290-BB00-4376-A965-1A49CAC438E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1BAB53-F7B9-4D29-88AA-C661E7899CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0193A1C-E481-401C-B6EB-AC519FD26B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7B82D5-29EE-422D-B1E4-B3F6397307F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848658B-357A-4DAF-9B03-ACFBC3FAF0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB464C1-DA4B-44ED-A412-810B9AA189E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431AD7BC-0959-4FEB-955A-9D194224DFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063DCC0-C019-49B2-8FBC-3C6E002D271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58E19F-C057-45FD-AB6D-8E0B3C3435F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2634E6C8-BC82-4108-B56D-A54215D5CBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C9121-0AD9-48CC-AFEF-A31F31486F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396692A2-8D0D-41FB-AC89-860113B5095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F670A4-E4E8-4FE9-8BDB-5FB9B87EA476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB27BDBF-0174-49F3-9E0B-763C3295ED5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B070AE-3C83-45BA-BA17-23CF14C01BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E42F44-32C1-42C4-95AE-6B39CBE8215E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B6591B-133D-4D26-975E-CB7BACAAAB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43E0F8B-851B-47DE-9756-93B7F289C853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899B28A8-9399-4D4A-A148-3D6A370235E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB4503D-6395-419E-A114-B919C80C676C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38364B69-9544-4DFE-8005-257966E0A118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2877D83-1126-40CF-B537-6A59E79B4432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94B0B2A-D953-448E-895E-7B64EC527A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF5F7D4-413D-4BB3-8E91-DA63B4A4EB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5200FE-DB3C-4AA7-9A2C-E897B57B94C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EA3A68-BB92-40C8-A499-3A355CC0C2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8918A7A3-0CBA-4CA2-9F6D-EA077747E004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C686C25-7B32-4100-8A45-A74F71DBAE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D27567-5D24-4213-B02E-49F17F738D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22B26BE-378A-4A19-BF62-C88236D798D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3184E5FE-9689-4036-84A5-96E368EFA4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419FFF5B-29E7-44E1-9B24-6FB7C2FC2E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080D89F9-2CC0-44C7-A23D-268658708AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F362B31F-A7A0-4BEF-A51D-51A7E465486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E57CA1D-10EE-4C07-A67A-52B9AAA95335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F422D307-57B2-4FA5-814C-441E5C229159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DA3D0D-7782-42DA-AAA2-DE44B2B67360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5894378-A2F7-4BE0-8C31-D9B8CE98A7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978B4A23-8F2F-494C-957B-BCFD72FAD731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0985B2D-A96C-484A-B693-54C746024386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A722D35B-1B21-42BC-A408-7437C9CEC5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB5F53D-F786-45C5-A3E6-D20501F6AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F095DBDD-265E-4603-868E-8C4E3DCD5532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD047F-EFC2-47CE-A405-B107EEDCC46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A6125-A5D7-4113-83D6-2C3C88F241B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D46507-7624-446D-B75C-F1D2F9716EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76BC618-1F55-4FCB-A97C-616AC36F3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6912C07-AF3F-44F4-964C-419C5AC1C8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF903D4-539F-4AA6-A30E-52022F06B8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE6CF55-5C3F-4FB1-BC85-68CF5B8C42F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B7AA70-C87D-4900-8DD6-A522A47EDDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7927D451-07DB-4414-99DB-80DD9598F2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874C9354-4C0B-4F05-8B04-196ECFF983B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F309097C-98E3-467E-A1ED-92C25620F54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA6D9F-DD84-42A8-88E5-FDF049722825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12957562-6B96-4482-A4DB-A08B396F3B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231EE0FC-E5A8-4BB5-A913-36F2C0C0E3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750AAE75-42C4-4C0D-8F12-64DEB7A3C0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1B0E66-5556-4F95-9B65-EF7235A5F249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE57AC-021B-432D-AC88-5233E79CA3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71EC2F3-E793-48A4-956A-B9E097ED4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E92D26-7241-453C-A72B-134EAFE123C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427A87D9-5DFC-46BF-8CD2-E5EAF5B0E0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB0A69F-E99A-4E9F-9533-3B0498CE0F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD474EC-34E4-480E-A6D6-E38AA45A024E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5DC51A-99A4-4F80-A969-08CD423576EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46F965D-BF09-4834-80B1-3BD43B5319AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F3776-7963-4FF2-8E14-8530F8DF5B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBB3337-A2BB-4795-8500-4A7DA2513B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284AD842-9C1D-4B59-A265-55F86F4B6F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF725FA-FC45-45F4-8109-796CC0D56D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085AA1DF-FB71-4663-BF34-E91180FC3822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68601D0B-E05A-478F-AB8B-61432036DC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB3F14BD-7BE0-42EE-A895-804DCAD108C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561929A8-4D82-429E-908F-DECA493F3237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD6C3B2-DFD4-4E4A-AB7E-C4CCA81431BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7261E1-4125-45C7-980D-256950A7B886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27DFF6F-E3BD-4F1B-8E4A-3DB33F98EE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86416AA0-CCD5-4780-8A41-724C7AAC9A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247027A4-E5EA-4584-9A3E-8F62987123D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E0DB99-22D1-4AE4-BD9F-78F55D19D400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB4D8B7-F73E-4B38-86A3-0656E6A2191F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07686354-6652-4FFE-9BBC-905F8AD5632F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77C8B71-BC12-4645-AB1C-893F28F07414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C72D36D-2E37-446C-AE45-1433F2BF6449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149B96B8-1DEB-4620-8C2D-D03A593D5ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A3D07E-40B7-4730-A666-640FE212A964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A42AAD-E7BA-434C-816E-9C606AE66CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5095CB6A-7159-498D-9E0A-36245B7D7EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDA0B1-1B68-49CE-9AF2-FD8F62441317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17270178-8541-412C-AE9D-7ADE694DB39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6ECBB9-F71E-4E04-8C1E-349650DE2F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AFDEAF-CD55-495A-9B12-F131FE454FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A39BB9C-2183-45DA-8236-D31125B447BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62612F6-5774-4EAA-ACC1-A837256163FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDB6684-DF68-4334-ADB4-484731DAEE61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842555FA-61DC-40C1-AE26-319E10D63D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C6517-0B9B-4C36-BD34-80D7803FACCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D632C03-C8BE-4C2F-AB6C-D3ED55869D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0A77CA-FF6D-44DB-9476-1DF4F473C3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BAF720-023A-4563-AD85-6CB70772A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1995BF-76DB-4DC9-8FBA-824D8C4793EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD399CAD-D6DB-4FED-B537-C857D40D0BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE6158-7F92-4873-A0E4-CC9701F6CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3C9378-48D1-4BB1-86B6-C2EB1EE72D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack."
      }, {
        "lang" : "es",
        "value" : "Nimbus JOSE+JWT en versiones anteriores a la 4.39 procede de forma inadecuada tras detectar un HMAC no válido en un descifrado AES-CBC, lo que permite que atacantes lleven a cabo un ataque padding oracle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D2BDED-6749-4862-9D2D-54D871BDC8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7AD668-E307-4B4A-9BE8-E837DE4F717C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF9F006-8B1B-4448-8778-423A6A1F3DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9523DEE0-8CCF-49C4-B0DA-C9EF243D4B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7206DFE0-70A4-4E06-BE7F-D8FA8C62A094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91050A7-FAE4-4080-B53C-F77420CBF9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E63FFD-9C37-4AFD-843E-2ED4235EE399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE00EFF-9045-4D30-AFA5-BFF0EDEF91B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFC1A72-B7A1-42D3-BA3E-C009F041692D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7891E427-B4D0-4E4A-9F5B-4A9122B72ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A76765-2D77-4C79-9E0E-B6A613835F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC445F4-0859-4287-A22F-361CB2F3D037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BA3A10-0631-41B3-930E-D56A0AE6A273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E3F6F8-7EDD-4D5B-8805-41DDE054BEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE3E9B7-C835-461E-ADD7-D45FBB5A71F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5B2D3A-EEF6-4147-A779-44E02AB395C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71010D0A-F4E0-4935-8809-F8E995BFA86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41465ADD-A6B9-4F80-80EF-B636997EA707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F8CA64-C93D-43E4-8EB4-3D4797008DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36364548-4CE5-467A-BA83-5E742AB2593C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46518146-4629-4ACD-B313-339BCB30F1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1C5455-5B5E-4BDE-8AA3-9F64A85912EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45973290-BB00-4376-A965-1A49CAC438E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1BAB53-F7B9-4D29-88AA-C661E7899CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0193A1C-E481-401C-B6EB-AC519FD26B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7B82D5-29EE-422D-B1E4-B3F6397307F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848658B-357A-4DAF-9B03-ACFBC3FAF0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB464C1-DA4B-44ED-A412-810B9AA189E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431AD7BC-0959-4FEB-955A-9D194224DFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063DCC0-C019-49B2-8FBC-3C6E002D271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58E19F-C057-45FD-AB6D-8E0B3C3435F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2634E6C8-BC82-4108-B56D-A54215D5CBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C9121-0AD9-48CC-AFEF-A31F31486F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396692A2-8D0D-41FB-AC89-860113B5095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F670A4-E4E8-4FE9-8BDB-5FB9B87EA476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB27BDBF-0174-49F3-9E0B-763C3295ED5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B070AE-3C83-45BA-BA17-23CF14C01BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E42F44-32C1-42C4-95AE-6B39CBE8215E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B6591B-133D-4D26-975E-CB7BACAAAB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43E0F8B-851B-47DE-9756-93B7F289C853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899B28A8-9399-4D4A-A148-3D6A370235E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB4503D-6395-419E-A114-B919C80C676C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38364B69-9544-4DFE-8005-257966E0A118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2877D83-1126-40CF-B537-6A59E79B4432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94B0B2A-D953-448E-895E-7B64EC527A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF5F7D4-413D-4BB3-8E91-DA63B4A4EB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5200FE-DB3C-4AA7-9A2C-E897B57B94C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EA3A68-BB92-40C8-A499-3A355CC0C2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8918A7A3-0CBA-4CA2-9F6D-EA077747E004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C686C25-7B32-4100-8A45-A74F71DBAE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D27567-5D24-4213-B02E-49F17F738D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22B26BE-378A-4A19-BF62-C88236D798D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3184E5FE-9689-4036-84A5-96E368EFA4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419FFF5B-29E7-44E1-9B24-6FB7C2FC2E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080D89F9-2CC0-44C7-A23D-268658708AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F362B31F-A7A0-4BEF-A51D-51A7E465486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E57CA1D-10EE-4C07-A67A-52B9AAA95335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F422D307-57B2-4FA5-814C-441E5C229159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DA3D0D-7782-42DA-AAA2-DE44B2B67360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5894378-A2F7-4BE0-8C31-D9B8CE98A7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978B4A23-8F2F-494C-957B-BCFD72FAD731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0985B2D-A96C-484A-B693-54C746024386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A722D35B-1B21-42BC-A408-7437C9CEC5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB5F53D-F786-45C5-A3E6-D20501F6AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F095DBDD-265E-4603-868E-8C4E3DCD5532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD047F-EFC2-47CE-A405-B107EEDCC46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A6125-A5D7-4113-83D6-2C3C88F241B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D46507-7624-446D-B75C-F1D2F9716EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76BC618-1F55-4FCB-A97C-616AC36F3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6912C07-AF3F-44F4-964C-419C5AC1C8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF903D4-539F-4AA6-A30E-52022F06B8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE6CF55-5C3F-4FB1-BC85-68CF5B8C42F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B7AA70-C87D-4900-8DD6-A522A47EDDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7927D451-07DB-4414-99DB-80DD9598F2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874C9354-4C0B-4F05-8B04-196ECFF983B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F309097C-98E3-467E-A1ED-92C25620F54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA6D9F-DD84-42A8-88E5-FDF049722825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12957562-6B96-4482-A4DB-A08B396F3B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231EE0FC-E5A8-4BB5-A913-36F2C0C0E3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750AAE75-42C4-4C0D-8F12-64DEB7A3C0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1B0E66-5556-4F95-9B65-EF7235A5F249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE57AC-021B-432D-AC88-5233E79CA3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71EC2F3-E793-48A4-956A-B9E097ED4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E92D26-7241-453C-A72B-134EAFE123C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427A87D9-5DFC-46BF-8CD2-E5EAF5B0E0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB0A69F-E99A-4E9F-9533-3B0498CE0F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD474EC-34E4-480E-A6D6-E38AA45A024E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5DC51A-99A4-4F80-A969-08CD423576EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46F965D-BF09-4834-80B1-3BD43B5319AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F3776-7963-4FF2-8E14-8530F8DF5B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBB3337-A2BB-4795-8500-4A7DA2513B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284AD842-9C1D-4B59-A265-55F86F4B6F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF725FA-FC45-45F4-8109-796CC0D56D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085AA1DF-FB71-4663-BF34-E91180FC3822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68601D0B-E05A-478F-AB8B-61432036DC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB3F14BD-7BE0-42EE-A895-804DCAD108C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561929A8-4D82-429E-908F-DECA493F3237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD6C3B2-DFD4-4E4A-AB7E-C4CCA81431BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7261E1-4125-45C7-980D-256950A7B886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27DFF6F-E3BD-4F1B-8E4A-3DB33F98EE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86416AA0-CCD5-4780-8A41-724C7AAC9A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247027A4-E5EA-4584-9A3E-8F62987123D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E0DB99-22D1-4AE4-BD9F-78F55D19D400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB4D8B7-F73E-4B38-86A3-0656E6A2191F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07686354-6652-4FFE-9BBC-905F8AD5632F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77C8B71-BC12-4645-AB1C-893F28F07414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C72D36D-2E37-446C-AE45-1433F2BF6449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149B96B8-1DEB-4620-8C2D-D03A593D5ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A3D07E-40B7-4730-A666-640FE212A964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A42AAD-E7BA-434C-816E-9C606AE66CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5095CB6A-7159-498D-9E0A-36245B7D7EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDA0B1-1B68-49CE-9AF2-FD8F62441317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17270178-8541-412C-AE9D-7ADE694DB39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6ECBB9-F71E-4E04-8C1E-349650DE2F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AFDEAF-CD55-495A-9B12-F131FE454FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A39BB9C-2183-45DA-8236-D31125B447BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62612F6-5774-4EAA-ACC1-A837256163FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDB6684-DF68-4334-ADB4-484731DAEE61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842555FA-61DC-40C1-AE26-319E10D63D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C6517-0B9B-4C36-BD34-80D7803FACCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D632C03-C8BE-4C2F-AB6C-D3ED55869D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0A77CA-FF6D-44DB-9476-1DF4F473C3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BAF720-023A-4563-AD85-6CB70772A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1995BF-76DB-4DC9-8FBA-824D8C4793EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD399CAD-D6DB-4FED-B537-C857D40D0BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE6158-7F92-4873-A0E4-CC9701F6CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3C9378-48D1-4BB1-86B6-C2EB1EE72D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T16:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation."
      }, {
        "lang" : "es",
        "value" : "Nimbus JOSE+JWT en versiones anteriores a la 4.36 procede con la construcción ECKey sin asegurarse de que las coordenadas públicas x e y están en la curva especificada. Esto permite que los atacantes lleven a cabo un ataque de curva no válida en entornos en los que el proveedor JCE no cuenta con la validación de curva aplicable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D2BDED-6749-4862-9D2D-54D871BDC8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7AD668-E307-4B4A-9BE8-E837DE4F717C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF9F006-8B1B-4448-8778-423A6A1F3DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9523DEE0-8CCF-49C4-B0DA-C9EF243D4B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7206DFE0-70A4-4E06-BE7F-D8FA8C62A094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91050A7-FAE4-4080-B53C-F77420CBF9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E63FFD-9C37-4AFD-843E-2ED4235EE399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE00EFF-9045-4D30-AFA5-BFF0EDEF91B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFC1A72-B7A1-42D3-BA3E-C009F041692D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7891E427-B4D0-4E4A-9F5B-4A9122B72ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A76765-2D77-4C79-9E0E-B6A613835F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC445F4-0859-4287-A22F-361CB2F3D037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BA3A10-0631-41B3-930E-D56A0AE6A273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E3F6F8-7EDD-4D5B-8805-41DDE054BEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE3E9B7-C835-461E-ADD7-D45FBB5A71F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5B2D3A-EEF6-4147-A779-44E02AB395C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71010D0A-F4E0-4935-8809-F8E995BFA86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41465ADD-A6B9-4F80-80EF-B636997EA707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F8CA64-C93D-43E4-8EB4-3D4797008DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36364548-4CE5-467A-BA83-5E742AB2593C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46518146-4629-4ACD-B313-339BCB30F1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1C5455-5B5E-4BDE-8AA3-9F64A85912EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45973290-BB00-4376-A965-1A49CAC438E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1BAB53-F7B9-4D29-88AA-C661E7899CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0193A1C-E481-401C-B6EB-AC519FD26B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7B82D5-29EE-422D-B1E4-B3F6397307F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848658B-357A-4DAF-9B03-ACFBC3FAF0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB464C1-DA4B-44ED-A412-810B9AA189E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431AD7BC-0959-4FEB-955A-9D194224DFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063DCC0-C019-49B2-8FBC-3C6E002D271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58E19F-C057-45FD-AB6D-8E0B3C3435F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2634E6C8-BC82-4108-B56D-A54215D5CBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C9121-0AD9-48CC-AFEF-A31F31486F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396692A2-8D0D-41FB-AC89-860113B5095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F670A4-E4E8-4FE9-8BDB-5FB9B87EA476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB27BDBF-0174-49F3-9E0B-763C3295ED5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B070AE-3C83-45BA-BA17-23CF14C01BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E42F44-32C1-42C4-95AE-6B39CBE8215E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B6591B-133D-4D26-975E-CB7BACAAAB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43E0F8B-851B-47DE-9756-93B7F289C853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899B28A8-9399-4D4A-A148-3D6A370235E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB4503D-6395-419E-A114-B919C80C676C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38364B69-9544-4DFE-8005-257966E0A118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2877D83-1126-40CF-B537-6A59E79B4432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94B0B2A-D953-448E-895E-7B64EC527A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF5F7D4-413D-4BB3-8E91-DA63B4A4EB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5200FE-DB3C-4AA7-9A2C-E897B57B94C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EA3A68-BB92-40C8-A499-3A355CC0C2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8918A7A3-0CBA-4CA2-9F6D-EA077747E004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C686C25-7B32-4100-8A45-A74F71DBAE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D27567-5D24-4213-B02E-49F17F738D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22B26BE-378A-4A19-BF62-C88236D798D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3184E5FE-9689-4036-84A5-96E368EFA4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419FFF5B-29E7-44E1-9B24-6FB7C2FC2E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080D89F9-2CC0-44C7-A23D-268658708AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F362B31F-A7A0-4BEF-A51D-51A7E465486D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E57CA1D-10EE-4C07-A67A-52B9AAA95335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F422D307-57B2-4FA5-814C-441E5C229159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DA3D0D-7782-42DA-AAA2-DE44B2B67360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5894378-A2F7-4BE0-8C31-D9B8CE98A7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978B4A23-8F2F-494C-957B-BCFD72FAD731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0985B2D-A96C-484A-B693-54C746024386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A722D35B-1B21-42BC-A408-7437C9CEC5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB5F53D-F786-45C5-A3E6-D20501F6AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F095DBDD-265E-4603-868E-8C4E3DCD5532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD047F-EFC2-47CE-A405-B107EEDCC46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A6125-A5D7-4113-83D6-2C3C88F241B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D46507-7624-446D-B75C-F1D2F9716EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76BC618-1F55-4FCB-A97C-616AC36F3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6912C07-AF3F-44F4-964C-419C5AC1C8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF903D4-539F-4AA6-A30E-52022F06B8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE6CF55-5C3F-4FB1-BC85-68CF5B8C42F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B7AA70-C87D-4900-8DD6-A522A47EDDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7927D451-07DB-4414-99DB-80DD9598F2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874C9354-4C0B-4F05-8B04-196ECFF983B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F309097C-98E3-467E-A1ED-92C25620F54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA6D9F-DD84-42A8-88E5-FDF049722825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12957562-6B96-4482-A4DB-A08B396F3B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231EE0FC-E5A8-4BB5-A913-36F2C0C0E3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750AAE75-42C4-4C0D-8F12-64DEB7A3C0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1B0E66-5556-4F95-9B65-EF7235A5F249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE57AC-021B-432D-AC88-5233E79CA3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71EC2F3-E793-48A4-956A-B9E097ED4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E92D26-7241-453C-A72B-134EAFE123C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427A87D9-5DFC-46BF-8CD2-E5EAF5B0E0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB0A69F-E99A-4E9F-9533-3B0498CE0F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD474EC-34E4-480E-A6D6-E38AA45A024E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5DC51A-99A4-4F80-A969-08CD423576EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46F965D-BF09-4834-80B1-3BD43B5319AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F3776-7963-4FF2-8E14-8530F8DF5B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBB3337-A2BB-4795-8500-4A7DA2513B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284AD842-9C1D-4B59-A265-55F86F4B6F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF725FA-FC45-45F4-8109-796CC0D56D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085AA1DF-FB71-4663-BF34-E91180FC3822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68601D0B-E05A-478F-AB8B-61432036DC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB3F14BD-7BE0-42EE-A895-804DCAD108C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561929A8-4D82-429E-908F-DECA493F3237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD6C3B2-DFD4-4E4A-AB7E-C4CCA81431BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7261E1-4125-45C7-980D-256950A7B886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27DFF6F-E3BD-4F1B-8E4A-3DB33F98EE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86416AA0-CCD5-4780-8A41-724C7AAC9A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247027A4-E5EA-4584-9A3E-8F62987123D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E0DB99-22D1-4AE4-BD9F-78F55D19D400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB4D8B7-F73E-4B38-86A3-0656E6A2191F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07686354-6652-4FFE-9BBC-905F8AD5632F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77C8B71-BC12-4645-AB1C-893F28F07414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C72D36D-2E37-446C-AE45-1433F2BF6449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149B96B8-1DEB-4620-8C2D-D03A593D5ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A3D07E-40B7-4730-A666-640FE212A964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A42AAD-E7BA-434C-816E-9C606AE66CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5095CB6A-7159-498D-9E0A-36245B7D7EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDA0B1-1B68-49CE-9AF2-FD8F62441317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17270178-8541-412C-AE9D-7ADE694DB39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6ECBB9-F71E-4E04-8C1E-349650DE2F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AFDEAF-CD55-495A-9B12-F131FE454FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A39BB9C-2183-45DA-8236-D31125B447BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62612F6-5774-4EAA-ACC1-A837256163FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDB6684-DF68-4334-ADB4-484731DAEE61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842555FA-61DC-40C1-AE26-319E10D63D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C6517-0B9B-4C36-BD34-80D7803FACCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D632C03-C8BE-4C2F-AB6C-D3ED55869D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0A77CA-FF6D-44DB-9476-1DF4F473C3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BAF720-023A-4563-AD85-6CB70772A02F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T20:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117."
      }, {
        "lang" : "es",
        "value" : "git-annex en versiones anteriores a la 6.20170818 permite que atacantes remotos ejecuten comandos arbitrarios mediante una URL ssh con un carácter de guion en el nombre de host, tal y como demuestra ssh://-eProxyCommand= URL, un problema relacionado con CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-annex_project:git-annex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.20170520",
            "matchCriteriaId" : "66B00212-3094-4437-80FE-9BAB05A2A060"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://source.git-annex.branchable.com/?p=source.git%3Ba=blob%3Bf=doc/bugs/dashed_ssh_hostname_security_hole.mdwn",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=c24d0f0e8984576654e2be149005bc884fe0403a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=df11e54788b254efebb4898b474de11ae8d3b471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://source.git-annex.branchable.com/?p=source.git%3Ba=blob%3Bf=doc/bugs/dashed_ssh_hostname_security_hole.mdwn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=c24d0f0e8984576654e2be149005bc884fe0403a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=df11e54788b254efebb4898b474de11ae8d3b471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.183",
      "lastModified" : "2023-11-07T02:37:55.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by the Primary CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.230",
      "lastModified" : "2023-11-07T02:37:55.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11097. Reason: This candidate is a reservation duplicate of CVE-2017-11097. Notes: All CVE users should reference CVE-2017-11097 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.263",
      "lastModified" : "2023-11-07T02:37:55.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11096. Reason: This candidate is a reservation duplicate of CVE-2017-11096. Notes: All CVE users should reference CVE-2017-11096 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.293",
      "lastModified" : "2023-11-07T02:37:55.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11101. Reason: This candidate is a reservation duplicate of CVE-2017-11101. Notes: All CVE users should reference CVE-2017-11101 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.327",
      "lastModified" : "2023-11-07T02:37:55.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11100. Reason: This candidate is a reservation duplicate of CVE-2017-11100. Notes: All CVE users should reference CVE-2017-11100 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.357",
      "lastModified" : "2023-11-07T02:37:55.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-10976. Reason: This candidate is a reservation duplicate of CVE-2017-10976. Notes: All CVE users should reference CVE-2017-10976 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.403",
      "lastModified" : "2023-11-07T02:37:55.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11099. Reason: This candidate is a reservation duplicate of CVE-2017-11099. Notes: All CVE users should reference CVE-2017-11099 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-20T22:29:00.433",
      "lastModified" : "2023-11-07T02:37:55.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11098. Reason: This candidate is a reservation duplicate of CVE-2017-11098. Notes: All CVE users should reference CVE-2017-11098 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.187",
      "lastModified" : "2023-11-07T02:37:54.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12425. Reason: This candidate is a reservation duplicate of CVE-2017-12425. Notes: All CVE users should reference CVE-2017-12425 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.217",
      "lastModified" : "2023-11-07T02:37:54.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12474, CVE-2017-12475, CVE-2017-12476.  Reason: This candidate is a reservation duplicate of CVE-2017-12474, CVE-2017-12475, and CVE-2017-12476.  Notes: All CVE users should reference CVE-2017-12474, CVE-2017-12475, and/or CVE-2017-12476 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.247",
      "lastModified" : "2023-11-07T02:37:54.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11366. Reason: This candidate is a reservation duplicate of CVE-2017-11366. Notes: All CVE users should reference CVE-2017-11366 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.280",
      "lastModified" : "2023-11-07T02:37:55.010",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by the Primary CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.327",
      "lastModified" : "2023-11-07T02:37:55.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by the Primary CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.357",
      "lastModified" : "2023-11-07T02:37:55.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12933. Reason: This candidate is a reservation duplicate of CVE-2017-12933. Notes: All CVE users should reference CVE-2017-12933 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.390",
      "lastModified" : "2023-11-07T02:37:55.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-9091.  Reason: This candidate is a reservation duplicate of CVE-2017-9091.  Notes: All CVE users should reference CVE-2017-9091 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T00:29:00.420",
      "lastModified" : "2023-11-07T02:37:55.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11104. Reason: This candidate is a reservation duplicate of CVE-2017-11104. Notes: All CVE users should reference CVE-2017-11104 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T01:29:00.343",
      "lastModified" : "2023-11-07T02:37:54.597",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11366. Reason: This candidate is a reservation duplicate of CVE-2017-11366. Notes: All CVE users should reference CVE-2017-11366 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T01:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type."
      }, {
        "lang" : "es",
        "value" : "components/filemanager/class.filemanager.php en Codiad en versiones anteriores a la 2.8.4 es vulnerable a la ejecución remota de código debido a que los comandos shell pueden embeberse en valores de parámetro, tal y como demuestra search_file_type."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codiad:codiad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.3",
            "matchCriteriaId" : "EF658973-71B4-461C-969F-DB35A6A00665"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.jianshu.com/p/41ac7ac2a7af",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/issues/1011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/pull/1013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.jianshu.com/p/41ac7ac2a7af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/issues/1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/pull/1013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T01:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web-Dorado \"Photo Gallery by WD - Responsive Photo Gallery\" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin \"Photo Gallery by WD - Responsive Photo Gallery\" de Web-Dorado en su versión 1.3.51 para WordPress tiene una vulnerabilidad de inyección SQL que afecta a bwg_edit_tag() en photo-gallery.php y a edit_tag() en admin/controllers/BWGControllerTags_bwg.php. Los administradores lo podrían explotar mediante el parámetro tag_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:10web:photo_gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.50",
            "matchCriteriaId" : "1AFD1FF6-9EA4-469A-8933-8C9358C0E75E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jgj212/Advisories/blob/master/photo-gallery.1.3.50-SQL",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/photo-gallery/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jgj212/Advisories/blob/master/photo-gallery.1.3.50-SQL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/photo-gallery/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID for a NoviWare issue, but the correct ID for that issue is CVE-2017-12787."
      }, {
        "lang" : "es",
        "value" : "En Youngzsoft CCFile, también conocido como CC File Transfer, en su versión 3.6, es posible que un usuario malicioso bloquee el software afectado de forma remota mediante el envío de una petición HTTP manipulada. No se requiere autenticación. Un payload de ejemplo es un encabezado de petición con formato incorrecto con muchos caracteres '|'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccfile:cc_file_transfer:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E75F5A0-465C-4FE8-A030-441CA9CE5D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/0B9DojFnTUSNGcG1WN2Q1eVZMQTg/view",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/0B9DojFnTUSNGcG1WN2Q1eVZMQTg/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user."
      }, {
        "lang" : "es",
        "value" : "lib/html.php en Cacti en versiones anteriores a la 1.1.18 tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) que se puede producir mediante el campo de título de un enlace externo añadido por un usuario autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.17",
            "matchCriteriaId" : "78EC139C-9B12-4B07-843D-DB9498845AE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Cacti/cacti/blob/develop/docs/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/9c610a7a4e29595dcaf7d7082134e4b89619ea24",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/918",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Cacti/cacti/blob/develop/docs/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/9c610a7a4e29595dcaf7d7082134e4b89619ea24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution."
      }, {
        "lang" : "es",
        "value" : "DokuWiki en su versión 2017-02-19c tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) cuando presenta un nombre de lenguaje malicioso en un elemento del código en /inc/parser/xhtml.php. Un atacante puede crear o editar una wiki con este elemento para desencadenar la ejecución de JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-19c",
            "matchCriteriaId" : "D4A4E51B-009F-4D4F-8DE4-EF96F2D1953F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as demonstrated by the dc:creator element."
      }, {
        "lang" : "es",
        "value" : "DokuWiki en su versión 2017-02-19c tiene XSS almacenado cuando presenta un canal RSS o Atom malicioso, en /inc/parser/xhtml.php. Un atacante puede crear o editar una wiki que emplee datos RSS o Atom desde un servidor controlado por el atacante para desencadenar la ejecución de JavaScript. JavaScript puede estar presente en un campo de autor, tal y como demuestra el elemento dc:creator."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-19c",
            "matchCriteriaId" : "D4A4E51B-009F-4D4F-8DE4-EF96F2D1953F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2081",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action."
      }, {
        "lang" : "es",
        "value" : "NexusPHP 1.5.beta5.20120707 tiene una inyección SQL en forummanage.php mediante el parámetro sort en una acción addforum."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "3211FF0C-19EF-4C9C-B077-B48EDC60766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gitsucce/nexusphp/blob/master/nexusphp.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gitsucce/nexusphp/blob/master/nexusphp.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c."
      }, {
        "lang" : "es",
        "value" : "La función bmp_read_info_header en bin/jp2/convertbmp.c en OpenJPEG 2.2.0 no rechaza encabezados con un biBitCount de cero. Esto permite que atacantes remotos provoquen una denegación de servicio (fallo de asignación de memoria) en la función opj_image_create en lib/openjp2/image.c, relacionado con la función opj_aligned_alloc_n en opj_malloc.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "1E370DD2-BCCE-48F1-BB6D-58227282E967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/983",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-26",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en montículos en la función ReadSFWImage en coders/sfw.c en ImageMagick 7.0.6-8 permite que atacantes remotos provoquen una denegación de servicio o, posiblemente, provocar cualquier otro tipo de problema mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/682",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-21T07:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php."
      }, {
        "lang" : "es",
        "value" : "PHPMyWind 5.3 tiene XSS in shoppingcart.php, relacionado con message.php, admin/message.php, y admin/message_update.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmywind:phpmywind:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E142A6-38AB-4242-A371-486246E9029B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42535/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42535/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5187",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-08-21T15:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Request Forgery (CWE-352) en Directory Server (también llamado Enterprise Server Administration web UI) en Micro Focus Enterprise Developer y Enterprise Server 2.3 y anteriores, 2.3 Update 1 en versiones anteriores a Hotfix 8, y 2.3 Update 2 en versiones anteriores a Hotfix 9 permite que atacantes remotos sin autenticar vean y alteren (CWE-275) la información de configuración e inyecten comandos del sistema operativo (CWE-78) mediante peticiones falsificadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:directory_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA6D858-2EBE-4EDB-9178-1FAB470F4E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13FE8F0-D7FF-4C77-A0D9-DBE13222B2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA9BF3-9B1F-44AE-9D74-B8747979DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18C3E3-494E-40A7-92F7-E7B95E9C094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "E6A661E8-AFD3-4B51-9E69-AD709A969ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "E23C5342-8F45-4675-9401-EBC7287D65CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD523A5-68BB-4397-945E-C95FD0E3229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server_monitor_and_control:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94B4907-6212-448D-A8F0-E5A8FD701F58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7420",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-08-21T15:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación (CWE-287) en ESMAC (también llamado Enterprise Server Monitor and Control) en Micro Focus Enterprise Developer y Enterprise Server 2.3 y anteriores, 2.3 Update 1 en versiones anteriores a Hotfix 8, y 2.3 Update 2 en versiones anteriores a Hotfix 9 permite que atacantes remotos sin autenticar vean y alteren la información de configuración y alteren el estado del producto en ejecución (CWE-275)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13FE8F0-D7FF-4C77-A0D9-DBE13222B2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA9BF3-9B1F-44AE-9D74-B8747979DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18C3E3-494E-40A7-92F7-E7B95E9C094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "E6A661E8-AFD3-4B51-9E69-AD709A969ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "E23C5342-8F45-4675-9401-EBC7287D65CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD523A5-68BB-4397-945E-C95FD0E3229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server_monitor_and_control:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94B4907-6212-448D-A8F0-E5A8FD701F58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7421",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-08-21T15:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features."
      }, {
        "lang" : "es",
        "value" : "Las vulnerabilidades de cross-Site Scripting (XSS) reflejado y stored en Directory Server (también llamado Enterprise Server Administration web UI) y ESMAC (también llamado Enterprise Server Monitor and Control) en Micro Focus Enterprise Developer y Enterprise Server 2.3 y anteriores, 2.3 Update 1 en versiones anteriores a Hotfix 8, y 2.3 Update 2 en versiones anteriores a Hotfix 9 permiten que atacantes remotos autenticados omitan los mecanismos de protección (CWE-693) y otras características de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:directory_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA6D858-2EBE-4EDB-9178-1FAB470F4E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13FE8F0-D7FF-4C77-A0D9-DBE13222B2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA9BF3-9B1F-44AE-9D74-B8747979DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18C3E3-494E-40A7-92F7-E7B95E9C094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "E6A661E8-AFD3-4B51-9E69-AD709A969ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "E23C5342-8F45-4675-9401-EBC7287D65CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD523A5-68BB-4397-945E-C95FD0E3229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server_monitor_and_control:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94B4907-6212-448D-A8F0-E5A8FD701F58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7422",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-08-21T15:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features, if this component is configured. Note esfadmingui is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Las vulnerabilidades de cross-Site Scripting (XSS) reflejado y stored en esfadmingui en Micro Focus Enterprise Developer y Enterprise Server 2.3, 2.3 Update 1 en versiones anteriores a Hotfix 8, y 2.3 Update 2 en versiones anteriores a Hotfix 9 permiten que atacantes remotos autenticados omitan los mecanismos de protección (CWE-693) y otras características de seguridad si este componente está configurado. Nótese que esfadmingui no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13FE8F0-D7FF-4C77-A0D9-DBE13222B2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA9BF3-9B1F-44AE-9D74-B8747979DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18C3E3-494E-40A7-92F7-E7B95E9C094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E2A416-8236-43F3-8305-365F0871273D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "E23C5342-8F45-4675-9401-EBC7287D65CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD523A5-68BB-4397-945E-C95FD0E3229A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7423",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-08-21T15:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes creating new privileged credentials, resulting in privilege elevation (CWE-275). Note esfadmingui is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en esfadmingui en Micro Focus Enterprise Developer y Enterprise Server 2.3, 2.3 Update 1 en versiones anteriores a Hotfix 8, y 2.3 Update 2 en versiones anteriores a Hotfix 9 permite que atacantes remotos sin autenticar falsifiquen peticiones si este componente está configurado. Esto incluye la creación de nuevas credenciales con privilegios, resultando en una elevación de privilegios (CWE-275). Nótese que esfadmingui no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13FE8F0-D7FF-4C77-A0D9-DBE13222B2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA9BF3-9B1F-44AE-9D74-B8747979DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18C3E3-494E-40A7-92F7-E7B95E9C094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E2A416-8236-43F3-8305-365F0871273D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "E23C5342-8F45-4675-9401-EBC7287D65CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD523A5-68BB-4397-945E-C95FD0E3229A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7424",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-08-21T15:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is configured. Note esfadmingui is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en esfadmingui en Micro Focus Enterprise Developer y Enterprise Server 2.3, 2.3 Update 1 en versiones anteriores a Hotfix 8, y 2.3 Update 2 en versiones anteriores a Hotfix 9 permite que atacantes remotos autenticados descarguen archivos arbitrarios desde un sistema ejecutando el producto si este componente está configurado. Nótese que esfadmingui no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13FE8F0-D7FF-4C77-A0D9-DBE13222B2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAA9BF3-9B1F-44AE-9D74-B8747979DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_developer:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18C3E3-494E-40A7-92F7-E7B95E9C094F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E2A416-8236-43F3-8305-365F0871273D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "E23C5342-8F45-4675-9401-EBC7287D65CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:enterprise_server:2.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD523A5-68BB-4397-945E-C95FD0E3229A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6329",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-08-21T20:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, the application will generally follow a specific search path to locate the DLL. The exploitation of the vulnerability manifests as a simple file write (or potentially an over-write) which results in a foreign executable running under the context of the application."
      }, {
        "lang" : "es",
        "value" : "Symantec VIP Access for Desktop en versiones anteriores a la 2.2.4 puede ser susceptible a una vulnerabilidad de precarga de DLL. Este tipo de problema ocurre cuando una aplicación trata de llamar a un DLL para ejecutarlo y un atacante proporciona en su lugar un DLL malicioso. Dependiendo de cómo esté configurada la aplicación, ésta por lo general seguirá una ruta de búsqueda específica para localizar el DLL. La explotación de la vulnerabilidad se manifiesta como una escritura simple de archivo (o, potencialmente, una sobrescritura), lo que resulta en un ejecutable externo que se ejecuta bajo el contexto de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:vip_access_for_desktop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "A448327A-337B-4B56-9021-9B682907EBE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100200",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170821_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170821_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8037",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-08-21T22:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation, aka an Information Leak / Disclosure."
      }, {
        "lang" : "es",
        "value" : "En Cloud Foundry Foundation CAPI-release en versiones posteriores a la v1.6.0 y anteriores a la v1.38.0 y cf-release en versiones posteriores a la v244 y anteriores a la v270 hay una solución incompleta para CVE-2017-8035. Si ha emprendido acciones para solucionar CVE-2017-8035, también debería actualizar para solucionar este CVE. Una petición CAPI especialmente manipulada desde un Space Developer puede permitir que atacantes obtengan acceso al Cloud Controller VM para tal instalación. Esto también se conoce como (Fuga/Divulgación de Información)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F260594E-4032-406D-8B84-3E91400F86FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D9350E-0AA5-4D9A-A41A-855B40E440D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66A9C0A-9B42-4B7E-A4B7-F06601B67FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207F6A29-0A37-4CDD-8DB2-E6CD89204013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3803207-D7A0-47E0-A357-314C245C5C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039156DB-D2DC-4AD5-9ACE-52095FE688BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7343B84E-3255-4BB4-A988-03BC9DC8D7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB53101-EC12-49DE-8C3C-3B373C4FA1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15625A3E-61A4-4F7E-BFEC-7ED830AE41C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7D6B1-2CB1-4FB1-BC63-3104391D2742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9D5D4-14E4-404A-B88E-78C8A37CB9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C56907A-3233-435F-933B-8E3ED4965BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A33E86E4-BD1C-4D03-9AF4-7A86B0B5BCE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C409657C-0C4D-4873-B707-38AC618035CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD5C38-E188-41DB-A811-27438525FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3EC8F2-3520-4952-9541-3C56F6D131BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671324-93EB-4409-9BA5-0D2D847C6A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AC669D-3AED-48C2-ADA2-D1EE235FA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8970738B-E240-4C3E-A8F6-57FB66976B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00406C75-1032-49A3-9C4E-AC41F46CA778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D464CFBC-5AEF-4B65-8616-8E31E8C856D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE0978C-1BEC-4FCE-A625-0FF196B3E6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B258E3E-2291-4180-9735-71EE2874250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416F421-66EB-4A80-BC1A-B99AE3F7E126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8DA9C5-C65C-467B-AD90-8B84E8EF9397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7F5A30-36EF-4F1D-B712-4F482F757CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D55D28-676E-42C4-90A5-C9CE306D42C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76369246-BE4B-4FAC-855B-8590C5C8DFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F684CB9F-8079-452A-9F27-8F964C636AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772569FD-E641-42EB-A694-64EC4E7437E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:1.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A5003C-2FB9-4FA3-AC7E-038CD573A23C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:245:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA6A56C-E0FE-4CB1-BE86-4C1E80D97265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:246:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4D7D1-4C35-4F76-816D-3F2407804E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:247:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D852D5F4-DDB4-4C76-88B6-EB49E21FEDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:248:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35C30C1-E2B9-4590-8765-1E0DA735E026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:249:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3680FAA7-9B57-4A9A-BD20-68821A7D4FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F9A19A-9E31-4E4A-869C-9C13163A06C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:251:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08095E9-1BA9-438F-B776-D75F419E682E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:252:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE29D36-9A2E-4D87-8C0C-D8FC1034B027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:253:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E227D42-19CA-45DD-AAC1-8D31537B5BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:254:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC145421-17F6-438B-9C3F-8DED72F3B5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:255:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5046C2CB-99C6-4243-B830-B3957910F1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A07B320-7DC3-4E7B-8997-6606F8FCBEBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:257:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7777A5-9136-49E4-9A6F-3C9A6687DAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:258:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C90B83-9597-427C-A941-06F0C5A8C3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:259:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D92B65-E45A-42EE-B0B9-AD69E1881E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98BAE4B-184F-49A4-89E1-4F270CC7FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:261:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E78B11-B3E9-4D62-8F17-F2575D7F9181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:262:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5EF186-0D05-497D-A66C-142ED0DFA973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:263:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A262620-E71A-44C7-A1F4-BEEDF107BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:264:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D721F9-227C-4F1D-9010-D1920F692228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:265:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE4BA55-963C-4EB1-AD85-344AAE107A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5827B3-143F-408B-A0C7-005079BD9215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:267:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762BE4A1-931B-4C44-94C8-F5DC894CFD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:268:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735E1016-97F0-4286-955F-6017A2F8AD79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:269:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F021AB15-30F0-46DE-B613-11E3D4C9FD50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100448",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8037/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8037/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-6 en la función WritePCXImage en coders/pcx.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-6 en la función WriteOneJNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en WriteJNGImage) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/667",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-5 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0DB591-61B5-4E3E-84F6-25FE4B32589B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/644",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de validación de longitud en ImageMagick 7.0.6-5 en la función ReadPSDLayersInternal en coders/psd.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de memoria en ReadPSDImage) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0DB591-61B5-4E3E-84F6-25FE4B32589B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/645",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-6 en la función formatIPTC en coders/meta.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en WriteMETAImage) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene una vulnerabilidad de desbordamiento de búfer basado en montículos en la función GetStyleTokens en coders/svg.c:314:12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/434/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene una vulnerabilidad de desbordamiento de búfer basado en montículos en la función GetStyleTokens en coders/svg.c:311:12."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/436/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/436/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene una vulnerabilidad de desreferencia de puntero NULL en la función SVGStartElement en coders/svg.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/435/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T06:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene una vulnerabilidad de filtrado de memoria en la función CloneImage in magick/image.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/430/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/430/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T14:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command."
      }, {
        "lang" : "es",
        "value" : "Cyrus IMAP en versiones anteriores a la 3.0.3 permite que usuarios remotos autenticados escriban en archivos arbitrarios mediante un comando manipulado (1) SYNCAPPLY, (2) SYNCGET o (3) SYNCRESTORE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrusimap:cyrus_imap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "47EADBB1-37C8-4099-81AA-927E89EFE3F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/commit/53c4137bd924b954432c6c59da7572c4c5ffa901",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/commit/5edadcfb83bf27107578830801817f9e6d0ad941",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M32R5QPCCNT57BVH3NPV5WVJFSTDP7Q/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.3.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/commit/53c4137bd924b954432c6c59da7572c4c5ffa901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/commit/5edadcfb83bf27107578830801817f9e6d0ad941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M32R5QPCCNT57BVH3NPV5WVJFSTDP7Q/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7557",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-08-22T14:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack."
      }, {
        "lang" : "es",
        "value" : "dnsdist versión 1.1.0 es vulnerable a un error en el mecanismo de autenticación para la API REST, permitiendo potencialmente ataques de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:dnsdist:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AAC9CD-B715-47B3-8323-85B3821C7A88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100508",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T17:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the \"show log cli\" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection."
      }, {
        "lang" : "es",
        "value" : "La interfaz de línea de comandos de novish, incluida en la distribución de software NoviWare en su versión NW400.2.6 e implementada en dispositivos NoviSwitch tiene tendencia a sufrir un desbordamiento de búfer en el comando \"show log cli\". Esto podría ser empleado por un usuario con permisos de sólo lectura (rol de monitorización) para obtener privilegios (root) de ejecución de código en el switch mediante la inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noviflow:noviware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "400.2.6",
            "matchCriteriaId" : "69810F5C-5FAF-48E8-A481-FA3EF0AFBE59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42518/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42518/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied. This could be leveraged by remote, unauthenticated attackers to gain resultant privileged (root) code execution on the switch, because there is a stack-based buffer overflow during unserialization of packet data."
      }, {
        "lang" : "es",
        "value" : "Las interfaces en red de los servicios cliengine y noviengine, incluidos en la distribución de software NoviWare en su versión NW400.2.6 e implementada en dispositivos NoviSwitch pueden verse expuestas involuntariamente si un operador intenta modificar ACL. Esto se debe a un error que aparece al aplicar las modificaciones ACL. Atacantes remotos sin autenticar podrían aprovecharse de esto para obtener privilegios (root) de ejecución de código en el switch, ya que existe un desbordamiento de búfer basado en pila durante la deserialización de los datos del paquete."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noviflow:noviware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "400.2.6",
            "matchCriteriaId" : "69810F5C-5FAF-48E8-A481-FA3EF0AFBE59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42518/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42518/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-22T17:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied. This could be leveraged by remote, unauthenticated attackers to gain resultant privileged (root) code execution on the switch, because incoming packet data can contain embedded OS commands, and can also trigger a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Una interfaz de red del servicio novi_process_manager_daemon, incluido en la distribución de software NoviWare en su versión NW400.2.6 e implementada en dispositivos NoviSwitch puede verse expuesta involuntariamente si un operador intenta modificar ACLs. Esto se debe a un error que aparece al aplicar las modificaciones ACL. Atacantes remotos sin autenticar podrían aprovecharse de esto para obtener privilegios (root) de ejecución de código en el switch, ya que los datos de paquete entrantes pueden contener comandos del sistema operativo embebidos y, además, podría desencadenar un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noviflow:noviware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "400.2.6",
            "matchCriteriaId" : "69810F5C-5FAF-48E8-A481-FA3EF0AFBE59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42518/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42518/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5208",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-08-22T18:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de números enteros en el programa wrestool en icoutils en versiones anteriores a la 0.31.1 permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria) mediante un ejecutable manipulado. Esto desencadena una denegación de servicio (bloqueo de aplicación) o la posibilidad de ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.31.1",
            "matchCriteriaId" : "C82D0A7D-0A9A-40AB-9E61-01257D4E8D7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3756",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/08/5",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95315",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1411251",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/08/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1411251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1422",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-22T19:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412."
      }, {
        "lang" : "es",
        "value" : "IBM MaaS360 DTM en todas las versiones hasta la 3.81 no realiza correctamente la verificación para derechos de usuario de ciertas aplicaciones. Esto podría divulgar información sensible. IBM X-Force ID: 127412."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maas360_dtm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.81",
            "matchCriteriaId" : "22D69FF0-8454-4718-8FF6-1307D1760388"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006985",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100415",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127412",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T00:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring."
      }, {
        "lang" : "es",
        "value" : "mcmnm en BMC Patrol permite que usuarios locales obtengan privilegios mediante un archivo libmcmclnx.so manipulado en el directorio de trabajo actual, ya que es setuid root y la variable RPATH comienza con la subcadena \".:\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:patrol:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E2779-95EA-462C-9739-BFF2C7087FFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/itm4n/bmc-patrol-mcmnm-privesc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/itm4n/bmc-patrol-mcmnm-privesc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T03:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-8 en la función ReadMIFFImage en coders/miff.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en NewLinkedList en MagickCore/linked-list.c) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/676",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T03:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the \"dump uncompressed PseudoColor packets\" step, which allows attackers to cause a denial of service (assertion failure in WriteBlobStream in MagickCore/blob.c) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.6-8, la función WritePDFImage en coders/pdf.c opera en una estructura de datos incorrecta en el paso \"dump uncompressed PseudoColor packets\", que permite que atacantes provoquen una denegación de servicio (fallo de aserción en WriteBlobStream en MagickCore/blob.c) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/674",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T03:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.6-8 la función load_level en coders/xcf.c no cuenta con validación de desplazamiento. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de memoria de load_tile) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/679",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T03:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.6-6 y GraphicsMagick 1.3.26 se ha encontrado una vulnerabilidad de sobrelectura de búfer basada en montículos en la función SFWScan en coders/sfw.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/1b47e0078e05",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/670",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/1b47e0078e05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.9-0 y 7.x en versiones anteriores a la 7.0.6-1, la función ReadOneMNGImage en coders/png.c tiene una lectura fuera de límites con el fragmento MNG CLIP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100494",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870109",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d072ed6aff835c174e856ce3a428163c0da9e8f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d072ed6aff835c174e856ce3a428163c0da9e8f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.9-1 y 7.x en versiones anteriores a la 7.0.6-2, la función ReadOnePNGImage en coders/png.c permite que atacantes remotos provoquen una denegación de servicio (bloqueo de la aplicación en LockSemaphoreInfo) mediante un archivo PNG con un ancho igual a MAGICK_WIDTH_LIMIT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/596",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.9-4 y 7.x en versiones anteriores a la 7.0.6-4, un archivo modificado podría desencadenar una fuga de memoria en ReadOnePNGImage en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-3",
            "matchCriteriaId" : "5875084E-72B2-4260-B29C-39788CB1575D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06235879-834B-4D96-A5FA-5613E968D612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870116",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/600",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.9-0 y 7.x en versiones anteriores a la 7.0.6-1, un archivo PNG modificado podría desencadenar un bloqueo debido a una verificación insuficiente para archivos pequeños."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-0",
            "matchCriteriaId" : "FD50817F-6EB7-477D-B5D9-A7E1B10E5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800A90FA-0B60-4AB7-8061-C9365432C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77990FE0-5063-455A-BF06-2CD41393E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/46e3aabbf8d59a1bdebdbb65acb9b9e0484577d3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/aa84944b405acebbeefe871d0f64969b9e9f31ac",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/46e3aabbf8d59a1bdebdbb65acb9b9e0484577d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/aa84944b405acebbeefe871d0f64969b9e9f31ac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.7-6 y 7.x en versiones anteriores a la 7.0.4-6, la función ReadMATImage en coders/mat.c emplea datos sin inicializar, lo que podría permitir que atacantes remotos obtengan información sensible de la memoria de proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.7-5",
            "matchCriteriaId" : "EBF81B46-43DA-40F9-9F40-061B613895FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/362",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.7-10, there is a crash (rather than a \"width or height exceeds limit\" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.7-10, hay un bloqueo (en vez de un informe de error \"width or height exceeds limit\") si las dimensiones de la imagen son demasiado grandes, tal y como demuestra el uso del coder mp3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.7-9",
            "matchCriteriaId" : "917C274B-F692-4773-9C99-A8179120B794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869728",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31438",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.8-8 y 7.x en versiones anteriores a la 7.0.5-9, la función ReadJP2Image en coders/jp2.c no valida correctamente la geometría del canal, lo que conduce a un bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-7",
            "matchCriteriaId" : "BB75E6D5-E439-46D8-A2E3-05B0163EAC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869830",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/acee073df34aa4d491bf5cb74d3a15fc80f0a3aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f13c6b54a879aaa771ec64b5a066b939e8f8e7f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/501",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/acee073df34aa4d491bf5cb74d3a15fc80f0a3aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f13c6b54a879aaa771ec64b5a066b939e8f8e7f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T06:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.8-5 y 7.x en versiones anteriores a la 7.0.5-6, existe una fuga de memoria en la función ReadMATImage en coders/mat.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.8-4",
            "matchCriteriaId" : "7DC128E6-C9C0-4863-8F91-B819A587870D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870013",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/79e5dbcdd1fc2f714f9bae548bc55d5073f3ed20",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/79e5dbcdd1fc2f714f9bae548bc55d5073f3ed20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups."
      }, {
        "lang" : "es",
        "value" : "El servidor XML-RPC en supervisor en versiones anteriores a la 3.0.1, 3.1.x en versiones anteriores a la 3.1.4, 3.2.x en versiones anteriores a la 3.2.4, y 3.3.x en versiones anteriores a la 3.3.3 permite que atacantes remotos autenticados ejecuten comandos arbitrarios mediante una petición XML-RPC, relacionada con búsquedas de espacio de nombres supervisor anidados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "EF8843B0-023D-4D38-B8A6-0082DA076EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7331EA-43A4-4B66-A2C8-9F9677CDF199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873339F6-2F2F-4FCA-850B-AFBB869FAE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8C540A-EFA9-41E3-B80A-B5D1DC002BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9FCD82-05D1-4AE0-B5F4-83C70D34B3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBADED9-ABB4-4D28-916E-71A005781756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A70602-4024-4EB4-BC9D-9AA65E3DC3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164F8D14-DC0E-4F60-B3E9-E4BB7BC859DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD9C65-805C-42B8-970F-71086029EC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D1DFCA-8289-41C7-A11A-5B5BFA6BA493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C1E9BA-5D9E-407F-80DE-E3C7886F8FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supervisord:supervisor:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4642C276-6F33-4FC8-80FB-512310366D30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1BA91-4695-4E64-A9D7-4A6CB6904D41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3942",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3005",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.0.1/CHANGES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.1.4/CHANGES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.2.4/CHANGES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.3.3/CHANGES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/issues/964",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GMSCGMM477N64Z3BM34RWYBGSLK466B/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTPDZV4ZRICDYAYZVUHSYZAYDLRMG2IM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXGWOJNSWWK2TTWQJZJUP66FLFIWDMBQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42779/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.0.1/CHANGES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.1.4/CHANGES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.2.4/CHANGES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/blob/3.3.3/CHANGES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Supervisor/supervisor/issues/964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GMSCGMM477N64Z3BM34RWYBGSLK466B/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTPDZV4ZRICDYAYZVUHSYZAYDLRMG2IM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXGWOJNSWWK2TTWQJZJUP66FLFIWDMBQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42779/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en la validación minion id en SaltStack Salt en versiones anteriores a la 2016.11.7 y 2017.7.x en versiones anteriores a la 2017.7.1 permite que minions remotos con credenciales incorrectas se autentiquen en un master mediante un ID minion manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016.11.6",
            "matchCriteriaId" : "5F8DFD0A-C813-4EA5-B90D-4A05E84D7F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F54D0CC-68F0-44E0-B565-BB9EFFE56817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100384",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872399",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482006",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.11/topics/releases/2016.11.7.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/pull/42944",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1482006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.11/topics/releases/2016.11.7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/pull/42944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) en en panel de administrador en IceWarp Mail Server 10.4.4 permite que administradores del dominio remotos autenticados inyecten scripts web o HTLM arbitrarios mediante un nombre de usuario manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:mail_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4D9EF8-9B01-4AD2-876B-4CC55C779076"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://youtu.be/MI4dhEia1d4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/MI4dhEia1d4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de doble liberación en la función _zip_dirent_read en zip_dirent.c en libzip permite que atacantes provoquen un impacto sin especificar mediante el uso de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libzip:libzip:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAF9F0B-71F7-4A20-9BA6-DCFCF3EA9268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100459",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nih-at/libzip/commit/2217022b7d1142738656d891e00b3d2d9179b796",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nih-at/libzip/commit/2217022b7d1142738656d891e00b3d2d9179b796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL."
      }, {
        "lang" : "es",
        "value" : "Una neutralización incorrecta de elementos especiales en un comando del sistema operativo en la función de marcado de Newsbeuter en sus versiones de la 0.7 hasta la 2.9 permite que atacantes remotos realicen una ejecución de código asistidos por usuarios mediante la manipulación de un elemento RSS que incluya código shell en su título y/o URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684B7199-9344-4DBA-90AD-DEDEC056F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CD698E-70A1-43A0-B828-3DBD519DDDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379E21B5-D427-45EC-B674-9BCC8A47CA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0B1B93-8E8C-4A77-98F8-CE5BFED550DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C907407-E178-43BF-A433-9BC73EB7FD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3A20C1-1FB7-43C8-A78E-FBEBB4E888AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F963DE-447B-4D6C-A508-C4449C67F1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BAF663-30D1-4584-A0B0-CF02D2646877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50AD4B86-FED2-4469-BBD7-B698A7C1B4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E8E19D-024A-4F73-B66F-87741325BC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34C699-1E62-4A54-B929-0C187299ABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E5E120-42BD-4846-9C6B-D51804C902A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC168D9-75AB-43DD-A1F6-103F14AD9995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA4C1C6-33AD-420C-ABA3-F7254A51BDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC3FE66-8689-4F61-9035-00DAD02A1527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FADF671-B5B0-4634-AA18-15551363293B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8DC0AC-DA20-4A93-9561-C2D906D0D1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6A06A3-2A06-4DDC-851A-6B27B7BB7F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CDB422-35D4-42E5-A897-3C12C6E16E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF398D-94EA-4628-99A2-35B698579B96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3947",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/issues/591",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/newsbeuter/iFqSE7Vz-DE",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4585-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/issues/591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/newsbeuter/iFqSE7Vz-DE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4585-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php."
      }, {
        "lang" : "es",
        "value" : "El plugin FormCraft Basic 1.0.5 para WordPress tiene una inyección SQL en el parámetro id en form.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:formcrafts:formcraft:1.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2E0D1609-180A-42F1-B73B-A006D237B95E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143116/WordPress-FormCraft-Basic-1.0.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143116/WordPress-FormCraft-Basic-1.0.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T14:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) basada en DOM en el tema Bridge en versiones anteriores a la 11.2 para WordPress permite que atacantes remotos inyecten JavaScript arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qodeinteractive:bridge:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "11.1",
            "matchCriteriaId" : "461087B0-A1AB-4497-9580-6CD1D08F8A1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bridge.qodeinteractive.com/change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://imgur.com/a/OT9vl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bridge.qodeinteractive.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://imgur.com/a/OT9vl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11159",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-23T15:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ruta de búsqueda no confiable en installer en Synology Photo Station Uploader en versiones anteriores a la 1.4.2-084 en Windows permite que atacantes locales ejecuten código arbitrario y lleven a cabo un secuestro de DLL mediante un archivo troyano (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll o (4) dwmapi.dll en el directorio de trabajo actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station_uploader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1-083",
            "matchCriteriaId" : "3CEE1A80-3F60-4053-95E0-B3DD74626438"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_45_Photo_Station_Uploader",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_45_Photo_Station_Uploader",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T16:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive."
      }, {
        "lang" : "es",
        "value" : "QEMU (también conocido como Quick Emulator), cuando se integra con el disco IDE y soporte para CD/DVD-ROM Emulator, permite que usuarios con privilegios de sistema operativo invitado local provoquen una denegación de servicio (desreferencia de puntero NULL y bloqueo del proceso QEMU) al vaciar una unidad de dispositivo CDROM vacía."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "81B915ED-AC3E-4612-ADAC-6FB87F4DB55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DF68D2-5250-4575-90CC-21828D03793E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.10.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F82EF5-A116-4676-9D24-1C45E7F49D50"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100451",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg01850.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg01850.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T16:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fijación de sesión en Apache2Triad 1.5.4 permite que atacantes remotos secuestren sesiones mediante el parámetro PHPSESSID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache2triad:apache2triad:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F8E79A-63B5-4438-A780-8AC954AEBF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100447",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42520/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T16:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to phpsftpd/users.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en Apache2Triad 1.5.4 permite que atacantes remotos secuestren la autenticación de usuarios autenticados para peticiones que (1) añadan o (2) eliminen cuentas de usuario mediante una petición a phpsftpd/users.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache2triad:apache2triad:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F8E79A-63B5-4438-A780-8AC954AEBF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100447",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42520/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T16:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Apache2Triad 1.5.4 permite que atacantes remotos inyecten scripts web o HTML mediante el parámetro account en phpsftpd/users.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache2triad:apache2triad:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F8E79A-63B5-4438-A780-8AC954AEBF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100447",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42520/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42520/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T17:29:00.177",
      "lastModified" : "2025-10-22T00:16:01.770",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Telerik.Web.UI en Progress Telerik UI for ASP.NET AJAX en versiones anteriores a la R1 2017 y R2 en versiones anteriores a la R2 2017 SP2 emplea un cifrado RadAsyncUpload débil, lo que permite que atacantes remotos realicen subidas de archivos arbitrarios o ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-04-11",
      "cisaActionDue" : "2022-05-02",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telerik:ui_for_asp.net_ajax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016.3.1027",
            "matchCriteriaId" : "D76294AA-998D-4411-8C38-A94E960991EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telerik:ui_for_asp.net_ajax:2017.2.503:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894650C2-0A22-43E4-A032-D5806A6332AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telerik:ui_for_asp.net_ajax:2017.2.621:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D83BFE5-6C1C-4BDB-B2BE-92E83509DB94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43874/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43874/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11317",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T17:29:00.227",
      "lastModified" : "2025-10-22T00:16:01.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Progress Telerik UI para ASP.NET AJAX en versiones anteriores a la R2 2017 SP2 no restringe correctamente las entradas por parte de un usuario en RadAsyncUpload, lo que permite que atacantes remotos realicen subidas de archivos arbitrarios o ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-01-26",
      "cisaActionDue" : "2023-02-16",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telerik:ui_for_asp.net_ajax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.1.114",
            "matchCriteriaId" : "E98B8E56-660F-4AD3-90B0-F799B2257F95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43874/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43874/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T17:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.3.26 fue hallado un fallo de asignación en la función ReadMNGImage en coders/png.c cuando un archivo MNG pequeño tiene un fragmento MEND con un valor de longitud grande."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/446/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/446/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9506",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-23T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF)."
      }, {
        "lang" : "es",
        "value" : "IconUriServlet del plugin Atlassian OAuth desde la versión 1.3.0 y antes de la versión 1.9.12, y desde la versión 2.0.0 antes de la versión 2.0.4 permite que atacantes remotos accedan al contenido de los recursos de red internos y/o realizar un ataque XSS mediante Server Side Request Forgery (SSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6931470D-FCD0-4295-B526-72F9DC18F8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DF4383-C75F-4C20-97AE-17024E59C85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE7703F-28FA-49F3-B8F0-0EA19983534C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B1269B-D7F0-4AB9-A6A1-F5F09273C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F788273-7F50-4A5F-B194-9AF88AD5C83F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D90C52-C6D4-4BA2-B16F-E24562AB35D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74865E14-42E9-40C9-AA3E-33B00BCBAF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4D0F79-ACD1-4356-BED4-F361D60633FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F8F976-DA00-4618-8E54-60D6133AAB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5826307-85F4-4C9D-A8C2-E736877F2487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7408A0CF-58FC-4FC5-8406-9624C059F480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3CB417-E229-4D0E-AAE1-6A1708332DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.4.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B25D52D-C926-4CE2-8FD7-08211FB5156F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.4.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B45678B-D690-455B-82FB-29B5E6C92D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5890D37F-7C5E-484C-BA9F-B101EE407535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8F9EE5-680F-4E96-8266-61F5EAD57F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.5.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E96B8-D920-43B9-A587-9A6ED4CADDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.5.0:m3:*:*:*:*:*:*",
            "matchCriteriaId" : "68DC4126-C130-419F-8A1C-B50C4AB196F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BECD3F-26FD-4FF4-AB68-6597766C5784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.6.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "03914A93-B432-4AE1-94C1-23C23C22E07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.6.0:m4:*:*:*:*:*:*",
            "matchCriteriaId" : "441FE496-A2A8-478D-8AC0-6AE7210B8DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF711A0D-7527-440D-9F54-32B2D550BFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6E4311-CDED-4D26-8258-0CA2106723C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408339FF-21EB-44D8-BD26-E085AE83AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "B60AA166-B682-4420-BC98-104A19E0F604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8278DDA7-4F73-4EDD-AA97-A1AB6806D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A9F674-3B94-4D3A-870E-F4488A00BDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4088D76-BA49-422A-B80F-BC4C7656C28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32804B74-92C4-4FAD-86D3-599108CC0E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919EB181-8A1D-4BBC-A847-F6320480EDC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F98ECB-402C-404B-B22D-9E145CC568F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6A21E5-78A2-4C70-9EA2-0C3463647B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "70DD87A9-806B-4D01-876B-AFCCF57052ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA83C8C5-6AA5-4560-8839-297DF9A676DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964D45DE-7F4D-41C4-AD3E-D14FF2906632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8944539B-B073-4308-91FF-84437D7AE220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5AF81F-65A5-402A-9AFE-A414F969C1F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844330C2-A2C6-433A-9C28-5012FDF81423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E6952F-3742-4A9F-B6A3-E6469E1D3D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638EEDC-AEF5-4496-A006-E860E7C59926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108C2E74-3300-47AD-940C-ADEF1613F380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B479B9-4299-4F54-8E6D-6EE9E860B4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF046E0-0BAB-42D0-A7D2-4179EF6639EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:1.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554DF85D-5B54-42EC-B86E-94449C592C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFCCA48-CC4A-4B97-A1E2-17D26D88C47C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4A72A1-F335-4E22-B798-69B122145411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C01D71-0E47-48C1-A55B-7548AD0178A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:oauth:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8466429-974C-4921-AE06-CE3DB2E6E48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dontpanic.42.nl/2017/12/there-is-proxy-in-your-atlassian.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/OAUTH-344",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3",
        "source" : "security@atlassian.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/Zer0Security/status/983529439433777152",
        "source" : "security@atlassian.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/ankit_anubhav/status/973566620676382721",
        "source" : "security@atlassian.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dontpanic.42.nl/2017/12/there-is-proxy-in-your-atlassian.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/OAUTH-344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/Zer0Security/status/983529439433777152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/ankit_anubhav/status/973566620676382721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T21:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a \"kill `cat /pathname/nagios.lock`\" command."
      }, {
        "lang" : "es",
        "value" : "Nagios Core en versiones anteriores a la 4.3.3 crea un archivo nagios.lock PID tras eliminar privilegios a una cuenta no-root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no-root para modificar nagios.lock antes de que un script root ejecute un comando \"kill `cat /pathname/nagios.lock`\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2",
            "matchCriteriaId" : "EB40EDD4-55D8-4C3C-9D84-1F7B930F476F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100403",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/blob/master/Changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/commit/1b197346d490df2e2d3b1dcce5ac6134ad0c8752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/commit/3baffa78bafebbbdf9f448890ba5a952ea2d73cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/issues/404",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/blob/master/Changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/commit/1b197346d490df2e2d3b1dcce5ac6134ad0c8752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/commit/3baffa78bafebbbdf9f448890ba5a952ea2d73cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/issues/404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T21:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.3.26 se ha encontrado una vulnerabilidad de fuga de memoria en la función ReadMATImage en coders/mat.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/433/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-23T21:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command. NOTE: the vendor indicates that there is no common or recommended scenario in which a root script would execute this kill command."
      }, {
        "lang" : "es",
        "value" : "UnrealIRCd 4.0.13 y anteriores crea un archivo PID tras eliminar privilegios a una cuenta no-root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no-root para modificar PID antes de que un script root ejecute un comando \"kill `cat /pathname`\". NOTA: El proveedor indica que no existe un escenario común o recomendado en el que un script root ejecutaría este comando kill."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unrealircd:unrealircd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.13",
            "matchCriteriaId" : "820D68EC-4DF4-4050-8BB5-996690483267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100507",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.unrealircd.org/view.php?id=4990",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.unrealircd.org/view.php?id=4990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0805",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-08-24T00:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T06:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick en versiones anteriores a la 6.9.9-3 y 7.x en versiones anteriores a la 7.0.6-3 se ha encontrado una vulnerabilidad de falta de comprobación de valores NULL en la función ReadMATImage en coders/mat.c, que conduce a una denegación de servicio (fallo de aserción y salida de aplicación) en la función DestroyImageInfo en MagickCore/image.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9-2",
            "matchCriteriaId" : "DC7CD350-8F0B-4A33-BE6F-858D59871D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C9F8F-A8C1-4D06-8F31-E085E16E701C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E12EB4-B8F6-43A3-847D-DBC96AE10905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30539421-5872-4C2E-94AE-8A2B05C952C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B7537-8563-409D-82DE-EB07107D3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA648D3C-A464-4F54-8B5E-E8431531FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6666BB0-B211-490F-884C-BE410CD19DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF2582D-1513-448B-8B61-9C4844B08324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E6BA4-A727-4CF5-B15F-76632D02617A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C721BC6F-61DD-4ED1-8024-2946C494AEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD319D32-FE7A-456D-AFEE-DC9F0D98652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CDF263-38F5-469F-984B-9D9A223159B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243FF3C1-D676-4D5F-A90C-3017DCBBE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD89B9-6A69-41DE-BE38-5E9193828279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139BC277-8E00-4700-8B47-6D3A3CB38B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FA2E18-6F7B-49D6-B60C-38851398F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7F510A-A439-47A3-AF31-4BF7F74D58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91B94E3-33BB-46B6-A1AE-EAA9906605CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3DE17-08A8-457D-9AEB-BD6E04376B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AD438E-28B7-4491-B58F-55FDE7F67CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9B68E7-0E40-437A-A71B-0C078FE76FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D5778-AD2A-4293-AE39-A406D75F5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D391DECE-2408-4A8F-ACE6-F18028C422A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A0C584-9DA3-48B0-B152-67B9E0239876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42943C5-CC66-4E88-9085-1BD39937C09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E396985D-BE6A-4F4C-B294-FE69724534EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84944-322C-4B5D-9B1C-587301747A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48F5327-CA20-4756-A06F-B30B660E8DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C11EC2-C798-4C3B-8E00-9C70C3499B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441F9FAE-11FA-4976-8BB3-4A3A79B57663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1620AF57-49AF-4487-80A1-07627F50F817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF373D13-0AB1-4518-AFFE-D09A5F56E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86483865-BFC3-4845-80DE-A6AC632A92A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A147E12-E5D4-400E-9432-BB5BCF2352CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F2BF9D-9821-424E-8F06-BFB637C103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7231D-442B-4E7C-BCB2-EE8D787FD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B8733-47B0-4F63-874D-62DF323CD045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9D1C91-B67A-430B-AB24-DCC7DAF69D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5BE761-44E8-4614-BBD4-3FA7148156B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AA4723-3637-4FA7-AE60-9CEE7C535A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1F577A-316C-4ECE-91CB-4C15F12CC63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F19A0F-29E9-40A5-B6BB-23C20343CDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A65A02-CD63-4DDD-AFCC-FE6988F85E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25690796-E494-4D28-BB4F-AAF40D596AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0242E-0292-4DF7-A3FC-BE96DA95E7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853E8E-1ED2-4BDA-BE60-BBE1F658695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F0FF1-EAA3-4DAC-A669-0C6B8590576F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D7BFB-7FE0-4477-AF72-E5BCE1A39FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56AEC8-473C-4898-A9A8-14E151F3A322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870019",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e5c063a1007506ba69e97a35effcdef944421c89",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/598",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e5c063a1007506ba69e97a35effcdef944421c89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T06:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de números enteros en pixel-a.asm, el código de ensamblado x86 para planeClipAndMax() en MulticoreWare x265 en su versión 2.5, tal y como se emplea en libbpg y otros productos. Un valor de altura pequeño puede provocar un desbordamiento de enteros, lo que llevaría a un bloqueo. Esta vulnerabilidad es diferente de CVE-2017-8906."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB78313-23B0-4C58-A87A-DEE57400CCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D38467-3E84-40F6-A7F9-03B90FE8A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335C0E27-A30C-4A8B-9C58-9685C228A249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EEBD42-F04C-499D-9800-82962518525D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CF2655-7781-4143-BEB8-F17439F08E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5559A2-94A4-492B-A587-2EEC553D0045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76598BAE-B462-4042-A9B1-0A4753C5B98E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C33FBD6-54EB-44AA-93ED-B28530612609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9DD340-0C8D-411F-9219-9DA8598E7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7385B748-76F7-4167-810F-2442ABDCF79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F123EF6-EDB7-4F5E-8830-5D744F6691A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59CEEB99-0CA8-4671-A8DF-22DED7198D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CE29FE-DEE3-472D-9F38-E60862E94C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA6F4AE-5169-4E67-859E-5ED1FF5164FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48E4D6C-8753-4657-B710-EFFDFB284564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C270A77-094F-445A-80D5-C36C9624478F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71B1BD6-6DA8-4FDB-9BCF-BA9FC0799DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349FB1EB-DB9B-4C31-A472-5AB863D0AD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE68FE6-9115-47B8-A27B-447DF8D0A3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD89DA5A-4BB7-4EAB-93B2-94D045DDC203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8304DB-D325-4C15-AF52-34D09046A8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A58F171-2431-49CE-96E5-0606DE4B6465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FF812F-8D15-4074-AB26-BA0295D94E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65BC15E-F21E-48B9-8E6B-032F8DF0223A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B29D7F-FC1D-4703-9C0A-79D5566C6733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multicorewareinc:x265:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5A34C0-E24E-46DA-8CFD-0226F38463A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/multicoreware/x265/issues/364/integer-overflow-and-affect-top-level",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/multicoreware/x265/issues/364/integer-overflow-and-affect-top-level",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T14:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation."
      }, {
        "lang" : "es",
        "value" : "La función xen_biovec_phys_mergeable en drivers/xen/biomerge.c en Xen podría permitir que usuarios invitados locales del sistema operativo corrompan transmisiones en bloque de datos del sistema y, consecuentemente, obtengan información sensible de la memoria, provoquen una denegación de servicio o consigan privilegios del SO mediante el aprovechamiento del cálculo incorrecto de block IO merge-ability."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B9CCC2-BAC5-4A65-B8D4-4B71EBBA0C2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEA97B9-A443-4F87-81B4-B3F0E94AC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56434D13-7A7B-495C-A135-2688C706A065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5647AEA-DCE6-4950-A7EB-05465ECDDE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A35129-70B0-4EA9-A0A2-51AC277649D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100343",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039176",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-229.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477656",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-229.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T14:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants."
      }, {
        "lang" : "es",
        "value" : "Xen permite que usuarios locales invitados del sistema operativo provoquen una denegación de servicio (bloqueo) o que tengan la posibilidad de obtener información sensible u obtener privilegios mediante vectores relacionados con concesiones transitivas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B9CCC2-BAC5-4A65-B8D4-4B71EBBA0C2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEA97B9-A443-4F87-81B4-B3F0E94AC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56434D13-7A7B-495C-A135-2688C706A065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5647AEA-DCE6-4950-A7EB-05465ECDDE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A35129-70B0-4EA9-A0A2-51AC277649D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/04/14/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100344",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-226.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477655",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/04/14/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-226.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T14:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en el código de tabla de concesiones en Xen 4.6.x a 4.9.x permite que administradores invitados locales del sistema operativo provoquen una denegación de servicio (corrupción de lista libre y bloqueo del host) o que obtengan beneficios en el host mediante vectores que impliquen la gestión de lista libre de maptrack."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14442705-D243-4250-A486-E70989946D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D58EAB-3FEB-4D5A-B998-D77EC90FDFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DD0255-9127-4C7F-9C02-42198820363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E971A9F-18CB-4264-AF71-CCB32B7325B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D52712-AD95-459D-943C-936F90B828B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEA97B9-A443-4F87-81B4-B3F0E94AC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56434D13-7A7B-495C-A135-2688C706A065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5647AEA-DCE6-4950-A7EB-05465ECDDE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A35129-70B0-4EA9-A0A2-51AC277649D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100346",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039175",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-228.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477651",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T14:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref."
      }, {
        "lang" : "es",
        "value" : "arch/x86/mm.c en Xen permite que usuarios locales PV del sistema operativo obtengan privilegios SO del host mediante vectores relacionados con map_grant_ref."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B9CCC2-BAC5-4A65-B8D4-4B71EBBA0C2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEA97B9-A443-4F87-81B4-B3F0E94AC18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56434D13-7A7B-495C-A135-2688C706A065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5647AEA-DCE6-4950-A7EB-05465ECDDE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A35129-70B0-4EA9-A0A2-51AC277649D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100342",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039174",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-227.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477657",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-227.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T14:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by \"-oProxyCommand=id;localhost:/bar.\""
      }, {
        "lang" : "es",
        "value" : "CVS 1.12.x, cuando se configura para que use SSH para repositorios remotos, podría permitir que atacantes remotos ejecuten código arbitrario mediante una URL de repositorio con un nombre de host manipulado, tal y como demuestra \"-oProxyCommand=id;localhost:/bar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359EEFB0-AE2F-4F7B-AF46-B72E0F6515FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "820263AF-2639-4FE3-938F-E7EAB2369824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA492E1-DF19-454F-B355-B52905D2636F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246AC1F0-F5A9-42DA-9E16-92FED6CDB5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D913462-3B95-4092-81B8-E6B78499C6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521809DF-2D04-4DFC-9028-97C62EB4F8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9717A42-7B9F-40B4-B924-8190F522AC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DBECDC-5B09-47CB-ABDE-6FE287B36D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70BBA7-B635-44E9-98A3-2B1B8721D286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:cvs:1.12.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FC08C4-73FB-4EF0-B3DD-4262D97B9500"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.nongnu.org/archive/html/bug-cvs/2017-08/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/11/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/11/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100279",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3399-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1480800",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.nongnu.org/archive/html/bug-cvs/2017-08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3399-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1480800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11424",
      "sourceIdentifier" : "security@duo.com",
      "published" : "2017-08-24T16:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys. Specifically, the PKCS1 PEM encoded format would be allowed because it is prefaced with the string `-----BEGIN RSA PUBLIC KEY-----` which is not accounted for. This enables symmetric/asymmetric key confusion attacks against users using the PKCS1 PEM encoded public keys, which would allow an attacker to craft JWTs from scratch."
      }, {
        "lang" : "es",
        "value" : "En PyJWT 1.5.0 y anteriores, la comprobación `invalid_strings` en `HMACAlgorithm.prepare_key` no da cuenta de todas las claves públicas codificadas PEM. Específicamente, el formato codificado PKCS1 PEM se permitiría porque va precedido por la cadena `-----BEGIN RSA PUBLIC KEY-----`, la cual no se tiene en cuenta. Esto permite ataques simétricos/asimétricos de confusión de claves contra usuarios que empleen las claves públicas PKCS1 PEM, que permitirían que un atacante manipulase JWT desde cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyjwt_project:pyjwt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "2ED2491D-3EA6-4348-BABC-A1752F717260"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3979",
        "source" : "security@duo.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpadilla/pyjwt/pull/277",
        "source" : "security@duo.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpadilla/pyjwt/pull/277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php."
      }, {
        "lang" : "es",
        "value" : "Existe una inyección SQL en NexusPHP 1.5.beta5.20120707 mediante el parámetro delcheater en cheaterbox.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "3211FF0C-19EF-4C9C-B077-B48EDC60766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bingtanguan/cve/blob/master/201701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bingtanguan/cve/blob/master/201701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T17:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php."
      }, {
        "lang" : "es",
        "value" : "Existe una inyección SQL en NexusPHP 1.5.beta5.20120707 mediante el parámetro setanswered en staffbox.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "3211FF0C-19EF-4C9C-B077-B48EDC60766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bingtanguan/cve/blob/master/201701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bingtanguan/cve/blob/master/201701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9507",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-24T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the review filter title parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso review dashboard en Atlassian Crucible desde la versión 4.1.0 hasta antes de la versión 4.4.1 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad cross-Site Scripting (XSS) en el parámetro review filter title."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "63C32D18-9A27-4D20-A0EA-A44BA2DA9E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "BB0CDA4F-731F-4F40-9ED9-496576B93345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8043",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9508",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-24T17:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in Atlassian Fisheye and Crucible before version 4.4.1 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a repository or review file."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en Atlassian FishEye y Crucible en versiones anteriores a la 4.4.1 permiten que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad cross-Site Scripting (XSS) mediante el nombre de un archivo de repositorio o de revisión"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA71640-8570-4FE1-939C-3B58FB991AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4313BC7C-73BF-407B-9437-90717C4E4AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8E34-5BA2-4314-B550-C8A72E8F5ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594DD2B1-F553-4121-ADDF-D639E7F53426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8044",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6898",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9509",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-24T17:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The review file upload resource in Atlassian Crucible before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the charset of a previously uploaded file."
      }, {
        "lang" : "es",
        "value" : "El recurso review file upload en Atlassian Crucible en versiones anteriores a la 4.4.1 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad cross-Site Scripting (XSS) mediante el conjunto de caracteres de un archivo previamente subido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "63C32D18-9A27-4D20-A0EA-A44BA2DA9E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "BB0CDA4F-731F-4F40-9ED9-496576B93345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8046",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9510",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-24T17:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the start date and end date parameters."
      }, {
        "lang" : "es",
        "value" : "El recurso de registro de cambios en el repositorio en Atlassian Fisheye en versiones anteriores a la 4.4.1 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad cross-Site Scripting (XSS a través de los parámetros de fecha de inicio y fecha de finalización"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "BB0CDA4F-731F-4F40-9ED9-496576B93345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/FE-6890",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9512",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-24T17:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email addresses of committers, as it lacked permission checks."
      }, {
        "lang" : "es",
        "value" : "El recurso mostActiveCommitters.do en Atlassian FishEye y Crucible en versiones anteriores a la 4.4.1 permite que atacantes remotos accedan a información sensible, por ejemplo, las direcciones de email de los autores, ya que no cuenta con verificación de permisos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "63C32D18-9A27-4D20-A0EA-A44BA2DA9E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "BB0CDA4F-731F-4F40-9ED9-496576B93345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8053",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6892",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12074",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-24T18:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en SYNO.DNSServer.Zone.MasterZoneConf en Synology DNS Server en versiones anteriores a la 2.2.1-3042 permite que atacantes remotos escriban archivos arbitrarios mediante el parámetro domain_name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:dns_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0-3032",
            "matchCriteriaId" : "65866EE0-4B04-43EA-83FF-6A9453A25E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_46_DNS_Server",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_46_DNS_Server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9511",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-08-24T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system."
      }, {
        "lang" : "es",
        "value" : "La clase MultiPathResource en Atlassian FishEye y Crucible en versiones anteriores a la 4.4.1 permite que atacantes anónimos remotos lean archivos arbitrarios mediante una vulnerabilidad de salto de directorio cuando FishEye o Crucible se ejecutan en el sistema operativo Microsoft Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "63C32D18-9A27-4D20-A0EA-A44BA2DA9E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "BB0CDA4F-731F-4F40-9ED9-496576B93345"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8049",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6891",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T19:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-site scripting (XSS-STORED) en la funcionalidad DEVICES OR SENSORS en Paessler PRTG Network Monitor en versiones anteriores a la 17.3.33.2654 permite que atacantes remotos autenticados inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.3.33",
            "matchCriteriaId" : "E9B25E08-3F1F-4B05-BCB8-1C3FEE0BE09B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B6WbMqXSfqQFODZHUGtLdzU3eDA",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.paessler.com/prtg/history/preview",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.paessler.com/prtg/history/stable",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://youtu.be/QOLdH2oey8Q",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://drive.google.com/open?id=0B6WbMqXSfqQFODZHUGtLdzU3eDA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.paessler.com/prtg/history/preview",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.paessler.com/prtg/history/stable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://youtu.be/QOLdH2oey8Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T19:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation."
      }, {
        "lang" : "es",
        "value" : "app/View/Helper/CommandHelper.php en MISP en versiones anteriores a la 2.4.79 tiene XSS persistente mediante comentarios. Sólo afecta a los usuarios de la misma instancia, debido a que el campo comment no forma parte de la sincronización MISP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.78",
            "matchCriteriaId" : "9549DC6D-C254-47E7-8003-B022A67949DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100533",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9555",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-24T19:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabildad de tipo Cross-Site Scripting (XSS) en PixlrEditorHandler.php en Synology Photo Station en versiones anteriores a la 6.7.0-3414 permite que atacantes remotos inyecten script web o HTML arbitrario mediante el parámetro image."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.3-3347",
            "matchCriteriaId" : "0F89C6A8-C2CF-4C09-A4D1-BF23B7237DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_47_Photo_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_47_Photo_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-24T22:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release."
      }, {
        "lang" : "es",
        "value" : "net/ipv4/route.c en el kernel Linux 4.13-rc1 en su versión 4.13-rc6 comprueba demasiado tarde el campo fi NULL cuando se establece RTM_F_FIB_MATCH, lo que permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL) o que tengan un impacto sin especificar mediante llamadas del sistema manipuladas. NOTA: Esto no afecta a ninguna distribución estable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "00DC2A8C-1E8B-4799-BE91-771BB321246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBE5190-4EFC-4C4E-BE91-5711E04F3D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7715C0-AB55-458B-9242-8BEE9446F6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "BA601A37-DCB0-45D4-AE9A-637221D488DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "44295B9F-B686-4BD8-8C59-26CB590557B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAEC1E0-FD67-4750-9816-975321F3EF01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-25T08:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument."
      }, {
        "lang" : "es",
        "value" : "En Tidy 5.5.31, la función IsURLCodePoint en attrs.c permite que atacantes provoquen una denegación de servicio (error de segmentación), tal y como demuestra un argumento ISALNUM inválido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htacg:tidy:5.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D35CF7-80F5-41AE-A8EA-1AA52907EC7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/htacg/tidy-html5/issues/588",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/htacg/tidy-html5/issues/588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-25T08:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."
      }, {
        "lang" : "es",
        "value" : "La función acpi_ds_create_operands() en drivers/acpi/acpica/dsutils.c en el kernel Linux en su versión 4.12.9 no vacía la caché operand y provoca un volcado de pila de kernel, lo que permite que usuarios locales obtengan información sensible de la memoria del kernel y omitan el mecanismo de protección KASLR (en la versión 4.9 del kernel) mediante una tabla ACPI manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.9",
            "matchCriteriaId" : "D79A22B9-3726-448A-BFE1-196A48099B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100502",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/acpica/acpica/pull/295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/acpica/acpica/pull/295/commits/987a3b5cf7175916e2a4b6ea5b8e70f830dfe732",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9919053/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/acpica/acpica/pull/295/commits/987a3b5cf7175916e2a4b6ea5b8e70f830dfe732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9919053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-25T08:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and node_ext caches and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."
      }, {
        "lang" : "es",
        "value" : "La función acpi_ps_complete_final_op() en drivers/acpi/acpica/psobject.c en el kernel Linux en su versión 4.12.9 no vacía las cachés node y node_ext y provoca un volcado de pila de kernel, lo que permite que usuarios locales obtengan información sensible de la memoria del kernel y omitan el mecanismo de protección KASLR (en la versión 4.9 del kernel) mediante una tabla ACPI manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.9",
            "matchCriteriaId" : "D79A22B9-3726-448A-BFE1-196A48099B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100500",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/acpica/acpica/pull/278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/acpica/acpica/pull/278/commits/4a0243ecb4c94e2d73510d096c5ea4d0711fc6c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9806085/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/acpica/acpica/pull/278/commits/4a0243ecb4c94e2d73510d096c5ea4d0711fc6c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9806085/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-25T08:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."
      }, {
        "lang" : "es",
        "value" : "La función acpi_ns_evaluate() en drivers/acpi/acpica/nseval.c en el kernel Linux en su versión 4.12.9 no vacía la caché operativa y provoca un volcado de pila de kernel, lo que permite que usuarios locales obtengan información sensible de la memoria del kernel y omitan el mecanismo de protección KASLR (en la versión 4.9 del kernel) mediante una tabla ACPI manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.9",
            "matchCriteriaId" : "D79A22B9-3726-448A-BFE1-196A48099B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100497",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9850567/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3696-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3696-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3762-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3762-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9850567/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3696-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3696-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3762-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3762-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12703",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T16:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Request Forgery (CSRF) en Westermo MRD-305-DIN en versiones anteriores a la 1.7.5.0, y MRD-315, MRD-355, MRD-455 en versiones anteriores a la 1.7.5.0. La aplicación no verifica si una petición ha sido proporcionada intencionadamente por el usuario, lo que posibilita que un atacante engañe a un usuario para que realice una petición maliciosa al servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-305-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D52093-D913-47EA-80F1-927355BB543F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-305-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9962B99-63CF-489E-95B4-A26F851F64E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-315-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB09CA-7887-4422-BB7F-2B6FEFDD81A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-315-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E32165-E272-4ADD-B14F-585950E25A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-355-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED01C8B2-2A75-4420-8156-F7B53C50E269"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-355-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5305D4F0-10A0-4B6A-97B2-C49EE527088E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-455-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7777DED-BF73-4512-813E-2F858D787DB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-455-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B043DE84-41F2-4AE2-8254-275FDED1ED77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100470",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12709",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T16:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded credentials, which could allow for unauthorized local low-privileged access to the device."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de credenciales codificadas de forma rígida en MRD-305-DIN en versiones anteriores a la 1.7.5.0, y MRD-315, MRD-355, MRD-455 en versiones anteriores a la 1.7.5.0. El dispositivo emplea credenciales codificadas de forma rígida, lo que podría permitir el acceso local sin autorización y con pocos privilegios al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-305-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D52093-D913-47EA-80F1-927355BB543F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-305-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9962B99-63CF-489E-95B4-A26F851F64E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-315-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB09CA-7887-4422-BB7F-2B6FEFDD81A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-315-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E32165-E272-4ADD-B14F-585950E25A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-355-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED01C8B2-2A75-4420-8156-F7B53C50E269"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-355-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5305D4F0-10A0-4B6A-97B2-C49EE527088E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westermo:mrd-455-din_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7777DED-BF73-4512-813E-2F858D787DB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westermo:mrd-455-din:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B043DE84-41F2-4AE2-8254-275FDED1ED77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100470",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-25T17:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable."
      }, {
        "lang" : "es",
        "value" : "controllers/member/api.php en dayrui FineCms 5.0.11 tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) relacionado con la variable dirname."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D00BBF3-0360-4B0C-B4E5-30B9CD57A09F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.bendawang.site/article/The-latest-version-of-finecms-unlimited-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.bendawang.site/article/The-latest-version-of-finecms-unlimited-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12694",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de salto de directorio en SpiderControl SCADA Web Server. Un atacante podría ser capaz de emplear una petición GET para realizar un salto de directorio en archivos de sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidercontrol:scada_web_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7753D3FD-FE72-4CE3-8106-CB14722DCB05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100456",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12707",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted html file may cause a stack overflow."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en SpiderControl SCADA MicroBrowser en su versión 1.6.30.144 y anteriores. Abrir un archivo html manipulado maliciosamente podría provocar un desbordamiento de la pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidercontrol:scada_microbrowser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.30.144",
            "matchCriteriaId" : "AE60B541-01B0-404E-A17E-F3BC85B560EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100453",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-25T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's memory which could contain an administrator's password or other sensitive information."
      }, {
        "lang" : "es",
        "value" : "Polycom SoundStation IP, VVX, y RealPresence Trio que ejecuten software anterior a UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, o 5.6.0 se han visto afectadas por una vulnerabilidad en la aplicación web UCS. Esta vulnerabilidad podría permitir que un atacante remoto autenticado leyese un segmento de la memoria del teléfono, el cual podría contener una contraseña de administrador u otro tipo de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.11",
            "matchCriteriaId" : "499B2603-7408-4EC4-9176-CF36DCAC2D5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:polycom:soundstation_ip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D084EA08-E7A4-415E-803F-11E7BA1119AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.6",
            "matchCriteriaId" : "67FF91FF-524B-43F9-993A-6A67596CDE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "10B74669-87A8-4639-A814-2B09B782C064"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:polycom:vvx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC78465-4DD8-42E7-84A5-DB8153659E97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.4",
            "matchCriteriaId" : "0C4D4484-464C-44DF-8974-376A1F73CC05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:polycom:realpresence_trio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB194641-9EC3-4B52-BAC8-2BB3C1C67F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-information-disclosure-on-polycom-voice-products-v1.0.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-information-disclosure-on-polycom-voice-products-v1.0.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7926",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Request Forgery en OSIsoft PI Web API en versiones anteriores a la 2017 (1.9.0). Esta vulnerabilidad permite que ocurran ataques Cross-Site Request Forgery (CSRF) cuando una petición cross-site que normalmente no tendría autorización es enviada desde un navegador previamente autenticado por el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_web_api:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DA97B1-761E-442C-A51D-D43C3BF498E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99058",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7930",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en OSIsoft PI Server 2017 PI Data Archive en versiones anteriores a la 2017. PI Data Archive cuenta con fallos de protocolo que podrían exponer registros de cambios de forma segura y permitir que un tercero malicioso suplante un servidor en un colectivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_data_archive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.410.1256",
            "matchCriteriaId" : "827DA593-DF27-4688-BC0B-E8EE068D60E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99059",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7934",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an undefined manner."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en OSIsoft PI Server 2017 PI Data Archive en versiones anteriores a la 2017. PI Network Manager, cuando emplea versiones antiguas del protocolo, contiene un fallo que podría permitir que un usuario malicioso se autentique con un servidor y provoque que PI Network Manager se comporte de forma sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_data_archive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.410.1256",
            "matchCriteriaId" : "827DA593-DF27-4688-BC0B-E8EE068D60E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99059",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9640",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de salto de directorio en Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web en versiones anteriores a la 6.5; ALC WebCTRL, SiteScan Web 6.1 y anteriores; ALC WebCTRL, i-Vu 6.0 y anteriores; ALC WebCTRL, i-Vu, SiteScan Web 5.5 y anteriores; y ALC WebCTRL, i-Vu, SiteScan Web 5.2 y anteriores. Un atacante autenticado podría ser capaz de sobrescribir archivos que se emplean para ejecutar código. Esta vulnerabilidad no afecta a la versión 6.5 del software."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "5948CDA4-5FE6-448B-9F64-D077F41DDF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "E829060A-3BA2-43ED-AAC9-E0E5008345DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "F476895F-3AF0-4F96-8420-E57801B03F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "3F6C18E1-2165-49FE-B351-56BF2B3142A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "701AF14C-15DE-496A-8077-53D6BF3C80DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "5A35BFAD-0A53-438B-8A7A-78F92210DDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "A41C3278-DB17-488C-BFEF-AA51B8289DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "27E012C0-3E9B-484C-A697-B39DF43F0F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "D2A6E893-4D91-4D54-A831-B47F792FC6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "E912DDD9-081A-49A1-9CD5-9127B676A190"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100452",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42543/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42543/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9644",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An unquoted search path vulnerability may allow a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de ruta de búsqueda o elemento sin comillas en Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 y anteriores; ALC WebCTRL, SiteScan Web 6.1 y anteriores; ALC WebCTRL, i-Vu 6.0 y anteriores; ALC WebCTRL, i-Vu, SiteScan Web 5.5 y anteriores; y ALC WebCTRL, i-Vu, SiteScan Web 5.2 y anteriores. Una vulnerabilidad de ruta de búsqueda sin comillas podría permitir que un atacante local sin privilegios cambie archivos en el directorio de instalación y ejecute código arbitrario con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "5948CDA4-5FE6-448B-9F64-D077F41DDF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "E829060A-3BA2-43ED-AAC9-E0E5008345DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "F476895F-3AF0-4F96-8420-E57801B03F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "865ECF73-F257-4A48-831E-4A542ADA4BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "3F6C18E1-2165-49FE-B351-56BF2B3142A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "701AF14C-15DE-496A-8077-53D6BF3C80DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "5A35BFAD-0A53-438B-8A7A-78F92210DDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "D602FF0F-8AFE-4815-BFA0-623DE28D26FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "A41C3278-DB17-488C-BFEF-AA51B8289DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "27E012C0-3E9B-484C-A697-B39DF43F0F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "D2A6E893-4D91-4D54-A831-B47F792FC6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "E912DDD9-081A-49A1-9CD5-9127B676A190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "292B6AC3-89A7-4E81-946A-7C0FED0DF79D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100454",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42542/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42542/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9650",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-25T19:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to upload a malicious file allowing the execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de carga de archivos sin restricciones con tipos peligrosos en Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 y anteriores; ALC WebCTRL, SiteScan Web 6.1 y anteriores; ALC WebCTRL, i-Vu 6.0 y anteriores; ALC WebCTRL, i-Vu, SiteScan Web 5.5 y anteriores; y ALC WebCTRL, i-Vu, SiteScan Web 5.2 y anteriores. Un atacante autenticado podría ser capaz de subir un archivo malicioso que permita la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "5948CDA4-5FE6-448B-9F64-D077F41DDF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "E829060A-3BA2-43ED-AAC9-E0E5008345DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "F476895F-3AF0-4F96-8420-E57801B03F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:i-vu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "865ECF73-F257-4A48-831E-4A542ADA4BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "3F6C18E1-2165-49FE-B351-56BF2B3142A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "701AF14C-15DE-496A-8077-53D6BF3C80DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "5A35BFAD-0A53-438B-8A7A-78F92210DDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatedlogic:sitescan_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "D602FF0F-8AFE-4815-BFA0-623DE28D26FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "A41C3278-DB17-488C-BFEF-AA51B8289DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "27E012C0-3E9B-484C-A697-B39DF43F0F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "D2A6E893-4D91-4D54-A831-B47F792FC6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "E912DDD9-081A-49A1-9CD5-9127B676A190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "292B6AC3-89A7-4E81-946A-7C0FED0DF79D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100452",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42544/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42544/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12816",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-08-25T20:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC."
      }, {
        "lang" : "es",
        "value" : "En Kaspersky Internet Security para Android 11.12.4.1622, algunas de las actividades de exportación de aplicación tienen permisos débiles, lo que podría ser empleado por una aplicación malware para obtener acceso sin autorización a la funcionalidad de producto mediante el uso de Android IPC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:internet_security:11.12.4.1622:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4A9DD9D2-3E56-48B9-A13C-D243A9AB9097"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100505",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.kaspersky.com/vulnerability.aspx?el=12430#090817",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.kaspersky.com/vulnerability.aspx?el=12430#090817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12817",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-08-25T20:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted."
      }, {
        "lang" : "es",
        "value" : "En Kaspersky Internet Security para Android 11.12.4.1622, algunos de los archivos de seguimiento de aplicación no estaban cifrados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:internet_security:11.12.4.1622:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4A9DD9D2-3E56-48B9-A13C-D243A9AB9097"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100504",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.kaspersky.com/vulnerability.aspx?el=12430#090817",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.kaspersky.com/vulnerability.aspx?el=12430#090817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-26T04:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows remote authenticated users to inject arbitrary commands to read OS files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en viewer_script.jsp en Riverbed OPNET App Response Xpert (ARX) versión 9.6.1 permite que atacantes remotos autenticados inyecten comandos arbitrarios para leer archivos SO."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riverbed:opnet_app_response_xpert:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B34C67-68E5-421D-B57A-348654F74122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arthrocyber.com/research#finding_5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://arthrocyber.com/research#finding_5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-27T15:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc."
      }, {
        "lang" : "es",
        "value" : "El tokenizador en QPDF 6.0.0 y 7.0.b1 es recursivo para los arrays y diccionarios, lo que permite a los atacantes remotos provocar una denegación de servicio (consumo de pila y error de segmentación) o causar otro impacto no especificado mediante un documento PDF con una estructura de datos profunda, tal y como se puede comprobar con un fallo en QPDFObjectHandle::parseInternal en libqpdf/QPDFObjectHandle.cc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5331ADE-7B81-4DC8-8AFB-06F8058C453B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:7.0.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BF5D83-AA22-4BA6-972F-A618A2584F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qpdf/qpdf/commit/ad527a64f93dca12f6aabab2ca99ae5eb352ab4b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/146",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/qpdf/qpdf/commit/ad527a64f93dca12f6aabab2ca99ae5eb352ab4b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-27T15:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers to gain root privileges via sudo command execution. The vi program can be accessed through sudo, in order to navigate the filesystem and modify a critical file such as /etc/passwd."
      }, {
        "lang" : "es",
        "value" : "Un escalado de privilegios en Replibit Backup Manager en versiones anteriores a la 2017.08.04 permitiría a los atacantes obtener privilegios root ejecutando un comando sudo. Se puede acceder al programa vi mediante un sudo para navegar en el sistema de archivos y modificar un archivo crítico como /etc/passwd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axcient:replibit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.08.04",
            "matchCriteriaId" : "0FD4C8BD-1080-4E26-8ED3-49F7EAF5D3BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wh1t3Rh1n0/exploits/blob/master/2017-08-25%20Replibit%20Backup%20Manager/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Wh1t3Rh1n0/exploits/blob/master/2017-08-25%20Replibit%20Backup%20Manager/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-27T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree."
      }, {
        "lang" : "es",
        "value" : "En FlightGear en su versión 017.3.1, Main/logger.cxx en el subsistema FGLogger permite que se sobrescriba cualquier archivo mediante un recurso que afecte a los contenidos del árbol de propiedades global."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flightgear:flightgear:2017.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8E5053-ADCE-4A18-94B2-AAEC73625EC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/flightgear/flightgear/ci/2a5e3d06b2c0d9f831063afe7e7260bca456d679/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/flightgear/flightgear/ci/c7a2aef59979af3e9ff22daabb37bdaadb91cd75/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/flightgear/flightgear/ci/2a5e3d06b2c0d9f831063afe7e7260bca456d679/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/flightgear/flightgear/ci/c7a2aef59979af3e9ff22daabb37bdaadb91cd75/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-27T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small."
      }, {
        "lang" : "es",
        "value" : "La función setup_group en elf.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como viene distribuida en GNU Binutils 2.29 permite a los atacantes remotos provocar una denegación de servicio (desreferencia de puntero NULL y fallo de aplicación) mediante una sección de grupo que sea demasiado pequeña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0c54f69295208331faab9bc5e995111a35672f9b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0c54f69295208331faab9bc5e995111a35672f9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T15:29:01.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the \"megasas_mmio_write\" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la función \"megasas_mmio_write\" en Qemu 2.9.0 permite que atacantes remotos provoquen un impacto sin especificar mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2FC474-181C-4022-8A7E-AEEE4DDAE6A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98303",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12076",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-28T19:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM) before 6.1.1-15088 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de recursos sin control en SYNO.Core.PortForwarding.Rules en Synology DiskStation (DSM) para versiones anteriores a la 6.1.1-15088 permite a un atacante autenticado remoto agotar los recursos de memoria de la máquina, provocando una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "238E5F65-362F-46F5-B1BF-EDB697C21CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B08A749-B1C0-4307-8F15-5B4DF04EC774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_48_DSM",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_48_DSM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12077",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-28T19:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de recursos sin control en SYNO.Core.PortForwarding.Rules en Synology Router Manager (SRM) para versiones anteriores a la 1.1.4-6509 permite a un atacante autenticado remoto agotar los recursos de memoria de la máquina, provocando una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.3-6447-4",
            "matchCriteriaId" : "2AFCE995-88E2-4541-9254-321A8248E6EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_49_SRM",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_49_SRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally exploitable heap based buffer overflow in the handling of an IOCTL message of type 0x0FA4204. The vulnerability is present due to the kernel driver failing to allocate sufficient memory on the kernel heap to contain a user supplied string as such the string is copied into a buffer of constant size (0x1000-bytes) and thus an overflow condition results. Access to the kernel driver is permitted through an obfuscated interface whereby bytes of user supplied message are \"authenticated\" via an obfuscation routine employing a linear equation."
      }, {
        "lang" : "es",
        "value" : "Un controlador kernel llamado DLMFENC.sys que viene con la aplicación cliente DESlock+ 4.8.16 y anterior contiene una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica que se puede explotar de manera local en la gestión de un mensaje IOCTL de tipo 0x0FA4204. Existe esta vulnerabilidad porque el controlador kernel falla a la hora de asignar la memoria necesaria en la memoria dinámica del kernel para contener un string proporcionado por un usuario. El string se copia en un búfer de tamaño constante (0x1000 bytes) y entonces ocurre el desbordamiento. Se permite el acceso al controlador kernel mediante una interfaz ofuscada en donde los bytes del mensaje proporcionado por el usuario están \"autenticados\" mediante una rutina de ofuscación que emplea una ecuación lineal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deslock:deslock\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.16",
            "matchCriteriaId" : "2B1317BE-B611-47E3-8B7C-820DFA9F9E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-016/?fid=9946",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-016/?fid=9946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica en enhance.c en ImageMagick en versiones anteriores a la 7.0.6-6 permite que atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.6-6",
            "matchCriteriaId" : "7E545DED-03D1-40A4-83C6-35FE50868C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/10/imagemagick-heap-based-buffer-overflow-in-omp_outlined-32-enhance-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/10/imagemagick-heap-based-buffer-overflow-in-omp_outlined-32-enhance-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de memoria antes de liberación (use-after-free)en la función DestroyImage en image.c de ImageMagick para versiones anteriores a la 7.0.6-6 permite que atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-6",
            "matchCriteriaId" : "1CC65CC8-1DD1-4576-ABD7-939E3A8DEF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.6-6",
            "matchCriteriaId" : "7E545DED-03D1-40A4-83C6-35FE50868C26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/10/imagemagick-use-after-free-in-destroyimage-image-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/04178de2247e353fc095846784b9a10fefdbf890",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/10/imagemagick-use-after-free-in-destroyimage-image-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/04178de2247e353fc095846784b9a10fefdbf890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica en OLEStream::WriteVT_LPSTR de olestrm.cpp en libfpx 1.3.1_p6 permite que atacantes remotos provoquen una denegación de servicio mediante un archivo fpx manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-heap-based-buffer-overflow-in-olestreamwritevt_lpstr-olestrm-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-heap-based-buffer-overflow-in-olestreamwritevt_lpstr-olestrm-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "CDirectory::GetDirEntry en dir.cxx en libfpx 1.3.1_p6 permite que los atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante una imagen fpx manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-cdirectorygetdirentry-dir-cxx/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-cdirectorygetdirentry-dir-cxx/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "PFileFlashPixView::GetGlobalInfoProperty en f_fpxvw.cpp en libfpx 1.3.1_p6 permite que los atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante una imagen fpx manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-pfileflashpixviewgetglobalinfoproperty-f_fpxvw-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-pfileflashpixviewgetglobalinfoproperty-f_fpxvw-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "wchar.c en libfpx 1.3.1_p6 permite que los atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante una imagen fpx manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-wchar-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-wchar-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "OLEStream::WriteVT_LPSTR en olestrm.cpp en libfpx 1.3.1_p6 permite que los atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante una imagen fpx manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-olestreamwritevt_lpstr-olestrm-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-olestreamwritevt_lpstr-olestrm-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "CDirVector::GetTable en dir.cxx en libfpx 1.3.1_p6 permite que los atacantes remotos provoquen una denegación de servicio (error de división entre cero) mediante una imagen fpx manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-divide-by-zero-in-cdirvectorgettable-dirfunc-hxx/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-divide-by-zero-in-cdirvectorgettable-dirfunc-hxx/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de liberación doble (double free) en DfFromLB en docfile.cxx en libfpx 1.3.1_p6 permite que atacantes remotos provoquen una denegación de servicio utilizando un archivo de imagen fpx manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "BF638605-D30B-4530-A86A-ADC123F254FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-double-free-in-dffromlb-docfile-cxx/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/17/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/09/libfpx-double-free-in-dffromlb-docfile-cxx/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file."
      }, {
        "lang" : "es",
        "value" : "La función gig::Region::Region en gig.cpp en libgig 4.0.0 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) mediante un archivo gig manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxsampler:libgig:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3E2F8F-A33F-41E4-A3F5-8E7AF94C51D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file."
      }, {
        "lang" : "es",
        "value" : "La función gig::DimensionRegion::CreateVelocityTable en gig.cpp en libgig 4.0.0 permite que atacantes remotos provoquen una denegación de servicio (sobre-lectura de búfer basada en pilas y bloqueo de aplicación) mediante un archivo gig manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgig0:libgig:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F11A37F-A0DE-4163-BBB4-F0502FBE714B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file."
      }, {
        "lang" : "es",
        "value" : "La función LoadString en helper.h en libgig 4.0.0 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) mediante un archivo gig manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgig0:libgig:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F11A37F-A0DE-4163-BBB4-F0502FBE714B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file."
      }, {
        "lang" : "es",
        "value" : "La función gig::Instrument::UpdateRegionKeyTable en gig.cpp en libgig 4.0.0 permite que atacantes remotos provoquen una denegación de servicio (escritura de memoria no válida y bloqueo de aplicación) mediante un archivo gig manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgig0:libgig:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F11A37F-A0DE-4163-BBB4-F0502FBE714B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file."
      }, {
        "lang" : "es",
        "value" : "La función gig::Region::GetSampleFromWavePool en gig.cpp en libgig 4.0.0 permite que atacantes remotos provoquen una denegación de servicio (escritura de memoria no válida y bloqueo de aplicación) mediante un archivo gig manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgig0:libgig:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F11A37F-A0DE-4163-BBB4-F0502FBE714B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42546/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument."
      }, {
        "lang" : "es",
        "value" : "Una desreferencia de puntero NULL en la función id3v2AddAudioDuration en libmp3lame/id3tag.c en LAME 3.99.5 permite que atacantes realicen una denegación de servicio desencadenando un primer argumento NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100525",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/472/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/472/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3735",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-08-28T19:29:01.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g."
      }, {
        "lang" : "es",
        "value" : "Al analizar una extensión IPAddressFamily en un certificado X.509, es posible realizar una sobrelectura de un bit. Esto tendría como resultado que el texto del certificado se muestre de forma incorrecta. Este error ha existido desde 2006 y está presente en todas las versiones de OpenSSL anteriores a la 1.0.2m y 1.1.0g."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA28812-8A24-4FE1-BED9-D6D5BB023645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9894D83E-2A27-446E-8B47-9C03CF802A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A9AC4D-E19B-431F-8679-B62F5F46BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766EA6F2-7FA4-4713-9859-9971CCD2FDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB38AEA-BAF0-4920-9A71-747C24444770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F33EA2B-DE15-4695-A383-7A337AC38908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261EE631-AB43-44FE-B02A-DFAAB8D35927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1365ED-4651-4AB2-A64B-43782EA2F0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC82690C-DCED-47BA-AA93-4D0C9E95B806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9BF2DD-85EF-49CF-8D83-0DB46449E333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEBE689-3952-46F0-BACA-BB03041C6D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*",
            "matchCriteriaId" : "564AA4E7-223E-48D8-B3E0-A461969CF530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C2AE06-B6E8-41C4-BB60-177AC4819CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45491BD3-7C62-4422-B7DA-CB2741890FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499E52F3-4B34-4C47-8ABF-292928EBAA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7540155-3629-4C76-9C67-8A8E0C1067F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419BBCCD-6F8A-418A-BA02-56267B11D948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B4D332-3CB7-4C57-A689-ED0894659ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB130295-F27C-45DD-80F6-BE4BB0931C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA6F5C9-9EE6-40FA-AA99-B4C7274BE8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6626FDA4-82B2-412E-8282-7031E53F020B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DB3BC8-C87B-4937-BB97-4BE7BCF525CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ACAA671-BDC0-42F4-9AB5-CF19F50AF101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2075BD-6102-4B0F-839A-836E9585F43B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F02E634E-1E3D-4E44-BADA-76F92483A732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2B07A-49EF-411F-8A4D-89435E22B043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9480D6-3B6A-4C41-B8C1-C3F945040772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FF0A06-DA61-4250-B083-67E55E362677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6BA453-C150-4159-B80B-5465EFF83F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638A2E69-8AB6-4FEA-852A-FEF16A500C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C47D3A-B99D-401D-B6B8-1194B2DB4809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08355B10-E004-4BE6-A5AE-4D428810580B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738BCFDC-1C49-4774-95AE-E099F707DEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B242C0-D27D-4644-AD19-5ACB853C9DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132B9217-B0E0-4E3E-9096-162AA28E158E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7619F9A0-9054-4217-93D1-3EA64876C5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D82C405-17E2-4DF1-8DF5-315BD5A41595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C96806F-4718-4BD3-9102-55A26AA86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A16CD99-AF7F-4931-AD2E-77727BA18FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88440697-754A-47A7-BF83-4D0EB68FFB10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38721148-F24A-4339-8282-BC2DD9553512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CE49C8-0672-46A0-BCD0-C0E62801444E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1C00C0-C77E-4255-9ECA-20F2673C7366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "21F16D65-8A46-4AC7-8970-73AB700035FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "92F393FF-7E6F-4671-BFBF-060162E12659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B85A09-CF8D-409D-966E-168F9959F6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C684FB18-FDDC-4BED-A28C-C23EE6CD0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74A79A7-4FAF-4C81-8622-050008B96AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDACCB9-8D61-49EE-9957-9E58BC7BB031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E884B241-F9C3-44F8-A420-DE65F5F3D660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A383620-B4F7-44A7-85DA-A4FF2E115D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0C6812-F455-49CF-B29B-9AC00306DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3703E445-17C0-4C85-A496-A35641C0C8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEC1927-F469-4B9E-B544-DA6CF90F0B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "18797BEE-417D-4959-9AAD-C5A7C051B524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAA3C31-BD9D-45A9-A502-837FECA6D479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "6455A421-9956-4846-AC7C-3431E0D37D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F946FD-F564-49DA-B043-5943308BA9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B89180B-FB68-4DD8-B076-16E51CC7FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C986592-4086-4A39-9767-EF34DBAA6A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B23181C-03DB-4E92-B3F6-6B585B5231B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D9EC1C-4843-4026-9B05-E060E9391734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036FB24F-7D86-4730-8BC9-722875BEC807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF148A3-1AA7-4F27-85AB-414C609C626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15B749E-6808-4788-AE42-7A1587D8697E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B78EDF-6BB7-42C4-9423-9332C62C6E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73104834-5810-48DD-9B97-549D223853F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC70262-0DCD-4B46-9C96-FD18D0207511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E07A34-08A0-4765-AF81-46A3BDC5648A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B0A3D8-60C7-4F42-9DD6-C535F983D98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD08E859-BB6D-4909-A873-C2609FA2821A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BF7D67-EAF4-4D01-9185-0DB69F2C543B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100515",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039726",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3221",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3505",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170927-0001/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171107-0002/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://usn.ubuntu.com/3611-2/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4017",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4018",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170828.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171102.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-14",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-15",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170927-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171107-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3611-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20170828.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171102.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets."
      }, {
        "lang" : "es",
        "value" : "El código de validación de ruta de tránsito en Heimdal en versiones anteriores a la 7.3 podría permitir que atacantes omitan el mecanismo de protección de política capath aprovechándose del error a la hora de añadir el dominio de salto anterior a la ruta de tránsito de tickets emitidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.0",
            "matchCriteriaId" : "01013DC7-03C4-45E0-82FF-190E334827A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-08/msg00062.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.h5l.org/advisories.html?show=2017-04-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/commit/b1e699103f08d6a0ca46a122193c9da65f6cf837",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/releases/tag/heimdal-7.3.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-08/msg00062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.h5l.org/advisories.html?show=2017-04-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/commit/b1e699103f08d6a0ca46a122193c9da65f6cf837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/releases/tag/heimdal-7.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this information to fine-tune and enumerate valid accounts on the system by searching for common usernames."
      }, {
        "lang" : "es",
        "value" : "En la aplicación virtual OSNEXUS QuantaStor v4 en versiones anteriores a la 4.3.1, se ha encontrado un error por el cual se envía como respuesta un mensaje de error a usuarios que no existen en el sistema. Un atacante podría aprovechar esta información para ajustar y enumerar cuentas válidas en el sistema buscando nombres de usuario comunes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osnexus:quantastor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "AEB26265-6FB9-48C5-BFBE-D9412D6E7FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42517/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42517/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T19:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn't sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS."
      }, {
        "lang" : "es",
        "value" : "En la aplicación virtual OSNEXUS QuantaStor v4 en versiones anteriores a la 4.3.1, si la llamada REST no existe, aparecerá un error que contiene el método inválido que se ha invocado anteriormente. En este caso, la respuesta que se envía al usuario no está sanitizada. Un atacante podría aprovecharse de este problema mediante la inclusión de código HTML o JavaScript arbitrario como parámetro. Esto también se conoce como XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osnexus:quantastor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "AEB26265-6FB9-48C5-BFBE-D9412D6E7FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42517/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42517/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-28T21:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."
      }, {
        "lang" : "es",
        "value" : "La rutina C++ symbol demangler en cplus-dem.c en libiberty, tal y como se distribuye en GNU Binutils 2.29, permite que atacantes remotos provoquen una denegación de servicio (asignación de memoria excesiva y bloqueo de aplicación) mediante un archivo manipulado, tal y como demuestra una llamada de la librería Binary File Descriptor (BFD) (también conocida como libbfd)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22009",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10812",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Photo Collection PC Software Ver.4.0.2 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nttdocomo:photo_collection_pc_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "D53FEDAE-2B53-449F-AF86-774C483F9325"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN67954465/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN67954465/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10826",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Security Kinou Mihariban v1.0.21 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt:security_kinou_mihariban:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.21",
            "matchCriteriaId" : "D710B8D2-640C-4B67-83D5-83065CE1793F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flets-w.com/topics/mihariban_vulnerability/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11601216/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://flets-w.com/topics/mihariban_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11601216/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10827",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Flets Azukeru para Windows Auto Backup Tool v1.0.3.0 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt:flets_azukuu_pc_automatic_backup_tool:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "1.0.3.0",
            "matchCriteriaId" : "85218225-A2BD-47C9-B319-402E6A021B0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flets-w.com/topics/azukeru_vulnerability/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14658714/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://flets-w.com/topics/azukeru_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14658714/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10828",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Flets Install Tool all versions distributed through the website till 2017 August 8 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Flets Install Tool en todas las versiones distribuidas en la página web hasta el 8 de agosto de 2017, permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt:flets_install_tool:12.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3F75E4-C2E9-4B75-9101-4A235586BD6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flets-w.com/topics/inst_tool_vulnerability/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14926025/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://flets-w.com/topics/inst_tool_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN14926025/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10830",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Security Setup Tool en todas sus versiones permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt:security_setup_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6386E8-9D47-4351-81CE-99804CDD5C5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://f-security.jp/v6/support/information/100161.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN36303528/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://f-security.jp/v6/support/information/100161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN36303528/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10831",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system \"The CRCA user's Software\" Ver1.8 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el sistema de autenticación electrónica basada en el sistema de registro comercial \"The CRCA user's Software\" v1.8 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moj.go:commercial_registration_electronic_authentication_software:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892590E8-DD4B-4847-8F66-B0FA2E7DEA41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.moj.go.jp/MINJI/minji06_00027.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN30866130/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.moj.go.jp/MINJI/minji06_00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN30866130/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10832",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"Dokodemo eye Smart HD\" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "\"Dokodemo eye Smart HD\" SCR02HD con firmware 1.0.3.1000 y anteriores permiten que un atacante ejecute comandos de sistema operativo arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nippon-antenna:scr02hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1000",
            "matchCriteriaId" : "C923FA98-DBBF-400F-B9F4-CA1F59DF018A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nippon-antenna:scr02hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B246BC46-4DBD-4E41-849D-5649DC93671B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10833",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"Dokodemo eye Smart HD\" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "\"Dokodemo eye Smart HD\" SCR02HD con firmware 1.0.3.1000 y anteriores permiten que un atacante remoto omita las restricciones de acceso para visualizar información o modificar configuraciones mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nippon-antenna:scr02hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1000",
            "matchCriteriaId" : "C923FA98-DBBF-400F-B9F4-CA1F59DF018A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nippon-antenna:scr02hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B246BC46-4DBD-4E41-849D-5649DC93671B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10834",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in \"Dokodemo eye Smart HD\" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en \"Dokodemo eye Smart HD\" SCR02HD con firmware 1.0.3.1000 y anteriores permite que un atacante autenticado lea archivos arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nippon-antenna:scr02hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1000",
            "matchCriteriaId" : "C923FA98-DBBF-400F-B9F4-CA1F59DF018A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nippon-antenna:scr02hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B246BC46-4DBD-4E41-849D-5649DC93671B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10835",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:12.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"Dokodemo eye Smart HD\" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "\"Dokodemo eye Smart HD\" SCR02HD con firmware 1.0.3.1000 y anteriores permiten que un atacante autenticado lleve a cabo ataques de inyección de código mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nippon-antenna:scr02hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1000",
            "matchCriteriaId" : "C923FA98-DBBF-400F-B9F4-CA1F59DF018A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nippon-antenna:scr02hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B246BC46-4DBD-4E41-849D-5649DC93671B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87410770/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10836",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Optimal Guard 1.1.21 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:optim:optimal_guard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.21",
            "matchCriteriaId" : "924B17C4-F1AD-4B3A-8050-23E0490EC5BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN87540575/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.optim.co.jp/contents/23246",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87540575/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.optim.co.jp/contents/23246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10837",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en BackupGuard en versiones anteriores a la 1.1.47 permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backup-guard:backup_guard:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.46",
            "matchCriteriaId" : "17A3E2EA-F985-4393-9C6A-4A39FC228BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN58559719/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/backup/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN58559719/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/backup/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10838",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en SEO Panel en versiones anteriores a la 3.11.0 permite a un atacante inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.10.0",
            "matchCriteriaId" : "44C73652-BA07-408C-BEA8-430557811985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN39628662/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN39628662/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10839",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en SEO Panel en versiones anteriores a la 3.11.0 permite a los atacantes autenticados ejecutar comandos SQL arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.10.0",
            "matchCriteriaId" : "44C73652-BA07-408C-BEA8-430557811985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN39628662/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN39628662/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10840",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en WebCalendar 1.2.7 y en versiones anteriores permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar_project:webcalendar:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC55852-9F9F-4383-9E66-E0896DDA1AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN23340457/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN23340457/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10841",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en WebCalendar 1.2.7 y en versiones anteriores permite que un atacante autenticado lea archivos arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar_project:webcalendar:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC55852-9F9F-4383-9E66-E0896DDA1AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN23340457/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN23340457/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10842",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en baserCMS 3.0.14 y anterior y 4.0.5 y anterior permite a los atacantes remotos ejecutar comandos SQL arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.14",
            "matchCriteriaId" : "669DA21C-6F41-4A37-A78E-0B0031396457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.5",
            "matchCriteriaId" : "777A377C-540A-437B-ACB6-B2BD461A3D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN78151490/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://basercms.net/security/JVN78151490",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN78151490/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://basercms.net/security/JVN78151490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10843",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the \"File\" field is being used in the mail form."
      }, {
        "lang" : "es",
        "value" : "baserCMS 3.0.14 y anterior y 4.0.5 y anterior permite que los atacantes remotos borren archivos arbitrarios mediante vectores no especificados cuando el campo \"File\" se utilice en el formulario de correo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.14",
            "matchCriteriaId" : "669DA21C-6F41-4A37-A78E-0B0031396457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.5",
            "matchCriteriaId" : "777A377C-540A-437B-ACB6-B2BD461A3D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN78151490/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://basercms.net/security/JVN78151490",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN78151490/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://basercms.net/security/JVN78151490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10844",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "baserCMS 3.0.14 y anterior y 4.0.5 y anterior permite que un atacante ejecute código PHP arbitrario en el servidor utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.14",
            "matchCriteriaId" : "669DA21C-6F41-4A37-A78E-0B0031396457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.5",
            "matchCriteriaId" : "777A377C-540A-437B-ACB6-B2BD461A3D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN78151490/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://basercms.net/security/JVN78151490",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN78151490/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://basercms.net/security/JVN78151490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1110",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T01:35:13.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915."
      }, {
        "lang" : "es",
        "value" : "IBM Curam Social Program Management 6.0, 6.1, 6.2 y 7.0 contiene una vulnerabilidad no especificada que podría permitir que un usuario autenticado visualice los incidentes de un usuario con más privilegios. IBM X-Force ID: 120915."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFDBB0F-A8C9-40DF-81CF-799D034D2EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E3B08-7171-414D-8A41-14C9E18B1BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940271A7-2CC3-4A34-BB5A-D9F4D45A7895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F3FDC1-B49D-46DD-B9F7-DCE3F1FD4B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13AA664F-BCD8-4CED-A201-E2543D437E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6711519-4E7D-4782-8372-7996C24E50D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D0CA3E-2649-4B4B-A805-81213FC07A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510DC15C-03F8-4058-A88A-13EFC48A43C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4971ADE2-3F58-4B42-9EC6-EFF3CF967E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE01821C-590F-40E1-A973-5DF0EA0151D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F30D0-82C1-4F88-9FDB-A8E6D6D39591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17929DC8-0E48-4BF4-AAFE-6463C8540FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD3FF4C-C12A-4CBC-8983-85929C5D121E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE6D88C-92CF-415E-978C-0107C4C4C52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB928C52-91BB-43A6-B25F-F359F05F1388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE6951-4C91-4443-843C-805D416F4074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23EA1C1F-003F-4411-AC1D-F75811D6FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89D44FA-FE58-4A4E-8DB1-BA9667A16612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FCFA0-2443-4AE9-ACE6-394A67443808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A5540-525C-4F99-BA26-3B988B5A08D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5C061E-A4F5-4478-A9E4-D8BA156085B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A2D187-7B5D-44D1-A766-A972F257EF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1991AF-E483-4A6E-938B-D1B6796FF135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6695193E-0347-4E20-A991-038CC3BA6386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B972B5E-6825-4DD5-8BB6-851DFFBB5109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C202FC-EA69-429B-85C6-F58A093C901F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CB6F37-6F14-4313-82D8-7D1EF110852D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A3A8B1-8088-4FCC-A38C-96526201F159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666549A-5879-4141-A97F-347B52755092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808EF0E6-842C-4E81-8743-01230D32532C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7020B7F8-0C57-4533-B49F-559058A23CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5887540-4EBE-484E-9C5B-3EFA0950BE30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E303C07-8CB1-4EF8-82F3-4C2B3C664812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2923B5C1-78A5-4A0D-B18E-DAC59B62EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58610A13-D6F7-49BA-A576-350DACC5C86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA53735-7E72-4717-9168-38286B5261E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB504DC-E137-4026-BB16-E862045BD380"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180CE3A7-BA57-49B4-8103-20E12CD37435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0DF071-1EB8-49FD-A279-A895A45B4679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007161",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120915",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T01:35:13.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet."
      }, {
        "lang" : "es",
        "value" : "función __skb_flow_dissect en net/core/flow_dissector.c en el kernel Linux en versiones anteriores a la 4.3 no garantiza que se inicialicen n_proto, ip_proto y thoff. Esto permite que atacantes remotos provoquen una denegación de servicio (bloqueo del sistema) o que ejecuten código arbitrario mediante un único paquete MPLS manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "2D7D2BE9-1366-4308-965F-0AD4FD7A85F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/345",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100517",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a6e544b0a88b53114bfa5a57e21b7be7a8dfc9d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1376",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T01:35:13.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873."
      }, {
        "lang" : "es",
        "value" : "Un fallo en el verificador de clase IBM J9 VM permite que código que no es de confianza deshabilite el administrador de seguridad y eleve privilegios. IBM X-Force ID: 126873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:operations_analytics_predictive_insights:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75481351-F6BF-41BE-86D0-975E3E6A793D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:operations_analytics_predictive_insights:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F643C787-0CF2-4453-A1F0-2DF3597C4C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:operations_analytics_predictive_insights:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328456ED-ADE9-47AF-8A69-98546B6D39B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:operations_analytics_predictive_insights:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B14528-FCC2-4563-931A-0E447197C7C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:operations_analytics_predictive_insights:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA27123-A8D5-4FEB-9E5A-41E9264FBC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:operations_analytics_predictive_insights:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2C5501-97B7-4349-8F23-90F46F401A1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126873",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1489",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T01:35:13.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687."
      }, {
        "lang" : "es",
        "value" : "Las configuraciones e-community de IBM Security Access Manager 6.1, 7.0, 8.0, y 9.0 podrían estar afectadas por una vulnerabilidad de redirección. ECSSO Master Authentication puede redireccionar a un servidor que no participa en un dominio e-community. IBM X-Force ID: 128687."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAE25B3-55F6-4D93-9110-26323F5D6CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB8C962-AAEA-4005-BC6B-7768310295E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E64D67-84B1-4B22-B68C-AAFA68149206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B0FD7F-8007-41F8-A0B3-0C11B9F6D2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7255EFB-AE47-45E9-853E-5242D350A04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F1E4CC-0FE8-4D18-9507-74131B8F21E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624215F6-12DE-42B5-98AE-29F30C759690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D6417-ECB7-4A02-8C01-6E85087AD073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FF03BE-E1FC-491A-BBA5-0C67B9EC0F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9EFD7C-D827-4079-BBA5-38601F1DA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C54E2A37-F451-4109-A367-A35D38D8E44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BBDD80-3EBA-4F5E-89BC-4107431B813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2826D12C-893B-4045-98C0-60FDBB5EC252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1678A4B5-E2BB-41A2-9238-D0D34B189D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4412073-8390-46B3-94A6-20D7B8075838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0AE0FD-6595-4132-8715-D2B859B04EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4256CF5F-8B99-4C5D-B67B-840DE56412EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA0D2F3-31B5-4AF8-B6E0-6795A240F094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37632E93-91AA-47A6-9EF7-EB5A6FC4B843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937C104A-74B7-4FC4-B436-42C14C4E4339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4449E78-A1A2-423C-A9A4-5AB8ED7B1D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351D1-5DB8-4C6D-8CA8-C22E6DE66D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8671CD-4FEA-4408-B594-ED8B7BD8543F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB5C09B-0681-42A1-AF82-15E91CD94787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1083BB5E-C153-46D1-8FEE-63AEB52B5546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59231981-02BF-4998-A86F-BFF6B4B79CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912624A-33B5-4AF5-96DB-292C14B0A37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB434802-50F4-4FCB-B674-C92FC5046140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0553613-6429-4202-B9F1-CB2F58412D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC68FC7C-F67D-44C7-AAA7-ECD2DB27C286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7D529E-724A-4AC6-91AA-9C771C980471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12664D6B-1DF6-455E-99CB-08AF7A3C926E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDBFAE1-351E-4E9F-877E-E9BBB50FCFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE91D383-8FCF-4352-9DE4-306F99171785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318A64DE-04E9-4A55-85D7-1079EECD7175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8961882B-0715-4B61-8343-9225BDDBC9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699C6485-0FA4-47EE-9081-0332D0B1F8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6165F468-26EE-4AA7-B806-007F78AFD754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C01EE0-7BE2-420C-B538-A15589D9A019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFB52D6-9F29-49C1-83CC-CE662253488B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B247D8-4BEC-41BC-822E-5C31A8AECCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A32A31D-266C-47D9-B11D-3C2DAEF6A025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D32BB3A-3404-4B3B-AEBF-BF40B0CDC426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958706F-D4E1-41C0-A341-2E045A110E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E149CF2-75F4-43E8-9B1C-657D95403AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE300627-1032-405E-96CC-B8CDF03C2326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745799EB-8664-40D6-907B-9B8F640860E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097C64C6-9C0E-463A-8EEB-2906D9131887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF8D79D-0859-4943-A3A9-0C2F4183A9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F491FA5-27ED-454B-850E-76DF60960D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24610D16-7235-4EE2-AF20-AAAFCDF749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4406DA-9DC1-4F76-9D2B-BE5BD8FB31F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7E8F5B-743B-4778-B096-1A2F950A31BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3930684E-FA31-42CB-8750-097ABEBE643B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B733C54-4DDA-4491-A6A0-F07D7D879900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F34676D-8537-4C7A-9C25-EF6973C0AD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8CB2D8-D1EC-429B-8C8B-48AF082C5FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B0FF96-BF36-40A7-99B5-9904785D4A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08CB452-3475-4143-AD28-550E130A33B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D86E921-FF6A-4045-B853-0D6F86BF2475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B582DA4C-9457-4EDD-A47B-66DB213198AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D7BEE-0DB2-435D-844E-387590EF087A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9BAD4E-9F38-4AB7-A566-834A97CD1A86"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACDCBD6-EEF3-4259-9866-A89105AA4C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536755AC-3FA7-4FA4-8CA3-0E1D4CB0FB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DB06C6-84B3-4DC6-AEE9-9DA49715A3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B894B409-DC42-4FA4-8864-387635B55F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B9A91-EDAF-43CC-A271-02ADCD691875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F740591-A399-49AC-911B-9ADD117B5BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EB9A2D-0ABF-46C3-A742-959CC39070DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B832D0A-923B-4F4B-9F81-BA1BA2E7A920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EA2E35-08D1-4A2F-8941-0C87DF1BFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A953FA93-A982-4104-8D6A-685E53613691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0028F4-5A36-4597-9830-46CFE5CF2EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE607CA8-FB8A-4373-A345-822D5ABEA408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB32198-9382-43CC-9079-08D2162B4C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4336D4DD-5DE4-441E-B852-A2E1409953CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCBBC83-DCE2-4522-9808-8EFA63485388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66159D17-FAB8-408A-90FA-62E9F840B568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D79656C-0F25-4647-BE54-AAF0336C7BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940F82D3-5809-42DC-92B5-F699C34F6996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994DE96-2967-4C7C-A896-B68E064C41C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55734E7A-D2CA-490F-8BAC-F47CE1A2F3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9047D70-83D3-4D45-8A16-4299A0D06D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F66744-ABFA-4EB1-ACFB-FF88E0F20BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C28A38-46FA-4878-9F03-D9ACB510ED88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2EC653-CE7B-45A2-AB9F-F760646A4682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF01E4-FBF5-4AF5-A6E8-BECF6052F72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0E063D-2C5E-4619-9176-9D28716BEDC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC30B443-ACDB-4D10-88F2-07DAF8684C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E843FD37-844C-4359-9465-30C95B5F0831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE19EBF-68CA-4075-9A6D-B3DB7FF5DB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D424803C-85C3-4860-B842-93B98554070D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC489116-D486-4388-8E93-E6E98EA81868"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A3B2B3-52B4-4086-9092-364649265F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24ACD0C-D825-4B2B-9483-66F0B815CB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD382BC-2AA1-448E-BC8E-CAB2408995BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A074B8-A709-44F1-9CB9-7BF2590989C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F73936C-442D-4857-99B3-605E55D82833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54243412-CB97-4752-A31A-3CB6A757E495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9CF344-C187-4D60-8C90-2FB459883D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AF8910-3F9A-407F-9834-B57D5807693D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB1BA86-C809-414E-8F58-2B6101518FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1634D4-28AB-4F12-B5FB-D32742F5836B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA35BD4-8738-47D3-A8F0-F9ABE4AEB985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344FE134-DE7B-4925-875E-097DD0AB9AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674FFA61-8F2A-43FB-BF51-68700698703C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332D3784-C24E-45A7-880B-0C4A32687B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0738FC-EAC8-45C4-ADA9-06DBE3D9EADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837D32E7-CFB7-462B-8479-E9811C149775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BE362F-72B3-481A-ABF4-4A36F4535F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73DE810-1D11-4480-AF62-DC37F22DCC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D161F8-D61A-40DF-AA14-5256DD394082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154B6E05-54C8-4271-A904-21CA6A2E6F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6389F03A-3547-44B1-9603-947735FC31B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2735E77-B9ED-4608-AFA5-969E039C82F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C58102A-8817-4656-AB85-07D60CB2D10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461046D0-29C2-4152-B4D2-C60E9A04EE07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EB7777-7CA5-41CB-98BC-AFC254E02C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFFABA7-86BD-4201-89F9-0F61E673DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F472F171-9FF2-4C44-AF5B-9CBA19E62A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5675CDEE-09CB-49D9-8C71-0CD71238129F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69978C3B-708B-4CDC-8FA0-65A98F2223E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CAA03E-DE79-4527-918D-EA219DC2DA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB312B8-7B65-4CE9-B399-2896450B5647"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4AD958-FDB2-4F63-AD4F-C88B33BFA692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397073E9-9696-4B4C-926D-668EA4A52E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643E7B97-17AB-4209-804E-79E94F3D671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F807870-4976-43E1-89BE-F08DEEE109CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B3E49D-08E6-44CF-B034-D155247B5DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F50A5E-111B-4CF6-A531-FE88E7735140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54372BE-6201-48AB-A720-F29E931E52B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE958E-6DFA-403E-B251-F5BA7825A546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA2F71C-E15F-4729-A0D9-C8C116819546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39017599-E63F-4101-8D37-62D9B0CE6917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB037932-234B-41AD-8119-D964796ADDFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA1DA71-91C8-4989-98B9-E924ED7B272A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F884817-A712-4A89-B199-2E2483CD8363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F627D1-6FB4-47A2-817D-F9EC914DAC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C428319-FFE3-4365-ABFE-1E6D1CABC0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79613B00-9B72-43BB-A42A-3BB191021ED7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1B0C02-D5D9-4F10-9120-C76D39D5C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44310E32-EA05-420B-8676-4E6EEAFB6631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B93CED0-E8FA-4238-8963-46074D11A334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907BB0CF-D270-4493-8D61-9841E6C5FE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0801BD2-D95B-4703-9804-A555F9E7BA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525EF7EC-712E-4C84-A15C-B2A30BD11A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE90667-0C16-4E4B-98DC-A6AD7A073D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049DD26B-9CF5-4E0C-812E-76A1224A15FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909073A4-C6D5-47D7-911F-C855DB693EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A523C406-D64C-4CE6-8CBE-34D4C060E0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707F0FE4-EC91-44FF-AA21-1E2A99AC5C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D646B2-7308-43A0-AE76-873946FB024E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1988E5-DFE6-4282-B9D3-6655297B481B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEF4063-73D7-416D-AD21-CDC1C0534677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DFC0D0-2326-40CA-B4CC-65194566DA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A180463-EDE0-47DB-A031-979E73AA2A33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF57E01-A333-49D7-8B25-D65B66410DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B67748-2677-44E7-B43D-857EBCA926C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEE420D-4686-4C58-B77A-2E509983F4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C9CD3B-A25E-4DD1-9955-39E6E1EB4DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA399A01-351E-4587-9B0B-804452F09832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC682158-A8A0-4D2D-9ACD-ADF4093B7ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:9.0.3.0:if1:*:*:*:*:*:*",
            "matchCriteriaId" : "A483F61A-0DAC-43DB-B69B-37A6207C1CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006959",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100592",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039227",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128687",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2242",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Flets Setsuzoku Tool para Windows en todas sus versiones permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt:flets_setsuzoku_tool:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "77BF9687-BA33-4AAA-A1E2-003EEE17E1B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flets-w.com/topics/setsuzoku_tool_vulnerability/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN22272314/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://flets-w.com/topics/setsuzoku_tool_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN22272314/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2254",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input"
      }, {
        "lang" : "es",
        "value" : "Cybozu Garoon en las versiones 3.5.0 a 4.2.5 permite que un atacante provoque una denegación de servicio en la función edit del menú de la aplicación mediante una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F71558-BFBC-4D43-AAF8-7DEB7AE2F29D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9751",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2255",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via \"Rich text\" function of the application \"Space\"."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ruta de búsqueda no confiable en el instalador en Synology Cloud Station Backup anterior a la versión  4.2.5-4396 en Windows, permiten a los atacantes locales ejecutar código arbitrario y conducir ataques de secuestro de DLL mediante un archivo de tipo caballo de Troya en las bibliotecas (1) shfolder.dll, (2) ntmarta.dll , (3) secur32.dll o (4) dwmapi.dll, en el directorio de trabajo actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F71558-BFBC-4D43-AAF8-7DEB7AE2F29D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9746",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2256",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via \"Rich text\" function of the application \"Memo\"."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad  de tipo Cross-Site Scripting en Cybozu Garoon versión 3.0.0 hasta 4.2.5, permite a un atacante inyectar un script web o HTML arbitrario por medio de la función \"Rich text\" de la aplicación \"Memo\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F71558-BFBC-4D43-AAF8-7DEB7AE2F29D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9744",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2257",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad cross-Site Scripting (XSS) en Cybozu Garoon en las versiones 3.0.0 a 4.2.5 permite que un atacante inyecte script web o HTML arbitrario mediante la función mail."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C7B082-06A5-4AC8-91D4-C6E2835AB286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F08BE5-2639-4581-A49C-854820B25763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56525E34-BC26-4833-938F-F157B77D82CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195BBDF-2153-4600-8308-110BE2A73816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921FEEAD-1C44-4E65-8912-102A31B3D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FAED9-AC11-4D20-885B-FFA04995F1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F181B9E-3613-42D4-92FA-3AA54BB10785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2014154-4685-4A48-AA69-02D0C1C78ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19694FDB-184D-4C09-BD72-BB7B96F6391D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD33E00A-5082-42F4-81F5-4647BD602D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130F88-71DE-4FBF-B5DF-DD8173F03151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9B321F-6CDC-426B-AE62-090E067F3533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9EABAA-964A-4242-939A-378B03A1F150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9487784-3EF9-4B11-A831-5F3D35BC716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03D1A99-E1D3-4400-856C-62F2961E41FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165B99C-EE50-4151-90AF-CE1F71E86D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F71558-BFBC-4D43-AAF8-7DEB7AE2F29D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9765",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2258",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-08-29T01:35:13.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API \"WorkflowHandleApplications\"."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en Cybozu Garoon en las versiones 4.2.4 a 4.2.5 permite que un atacante lea archivos arbitrarios mediante Garoon SOAP API \"WorkflowHandleApplications\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6C3FA5-801C-440F-A755-6BC9BB04EB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F71558-BFBC-4D43-AAF8-7DEB7AE2F29D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9846",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN63564682/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3746",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-08-29T01:35:13.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405) driver, various versions, was found to contain a privilege escalation vulnerability that could allow a local user to execute arbitrary code with administrative or system level privileges."
      }, {
        "lang" : "es",
        "value" : "El controlador de ThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405), en varias versiones, contiene una vulnerabilidad de escalado de privilegios que podría permitir que un usuario local ejecute código arbitrario con privilegios de nivel administrativo o de sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:thinkpad_usb_3.0_ethernet_adapter_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F8C4C6-25FB-4B50-9E77-C194974306F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100520",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-9896",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-9896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3757",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-08-29T01:35:13.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de ruta de búsqueda sin entrecomillar en el controlador para ElanTech Touchpad en varias versiones que se emplea en varios notebooks de la marca Lenovo (excepto ThinkPads). Esto podría permitir que un atacante con privilegios locales ejecutase código con privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:elan_touchpad_driver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.4.1.6",
            "matchCriteriaId" : "1805E22D-3BC8-4C10-BF1C-15ACDF56CB04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14390",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función dump_callback en SQLite 3.20.0 permite que atacantes remotos provoquen una denegación de servicio (EXC_BAD_ACCESS y fallo de aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlite:sqlite:3.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4F8750-6CAD-4F1D-9B1B-5F0736AD3B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4019-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4019-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4019-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función TIFFWriteDirectorySec() en LibTIFF 4.0.8 en relación con tif_dirwrite.c y una etiqueta SubIFD. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2727",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función TIFFWriteDirectoryTagSubifd() en LibTIFF 4.0.8 en relación con tif_dirwrite.c y una etiqueta SubIFD. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2728",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un bucle infinito en la función next_char en comp_scan.c de ncurses 6.0 en relación con libtic. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484274",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función _nc_save_str en alloc_entry.c en ncurses 6.0. Esto podría permitir que se realice un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función _nc_read_entry_source() en progs/tic.c en ncurses 6.0 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484284",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función postprocess_termcap() en parse_entry.c en ncurses 6.0 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484285",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función dump_uses() en dump_entry.c en ncurses 6.0 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función fmt_entry en dump_entry.c en ncurses 6.0 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función _nc_safe_strcat en strings.c en ncurses 6.0 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una excepción de punto flotante en la función kodak_radc_load_raw en dcraw_common.cpp en LibRaw 0.18.2. Esto podría permitir que se realice un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD276716-465E-4BE7-AF47-C789A06D97EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1483988",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1483988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existen muchas fugas de memoria en la función GMCommand en magick/command.c en GraphicsMagick 1.3.26 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484192",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una liberación no válida en la función MagickFree en magick/memory.c en GraphicsMagick 1.3.26 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/3db9449e3d6a/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/29/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100518",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/878511",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484196",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/3db9449e3d6a/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/878511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función _lou_getALine en compileTranslationTable.c:346 en Liblouis 3.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484297",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en montículos que hace que se escriban más de dos mil bytes fuera de los límites en Liblouis 3.2.0 que se desencadena en la función resolveSubtable() en compileTranslationTable.c. Esto provocaría una denegación de servicio o una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484299",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en Liblouis 3.2.0 que se desencadena en la función parseChars() en compileTranslationTable.c que provocaría una denegación de servicio o posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484306",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de uso después de liberación de memoria (use-after-free) en la función compileTranslationTable.c en Liblouis 3.2.0 que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484332",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en Liblouis 3.2.0 que se desencadena en la función includeFile() en compileTranslationTable.c que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484334",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer en Liblouis 3.2.0 que se desencadena en la función _lou_showString() en utils.c que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484335",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0."
      }, {
        "lang" : "es",
        "value" : "Existe un acceso ilegal a direcciones en la función _lou_getALine() en compileTranslationTable.c:343 en Liblouis 3.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D6B62-4FB7-4936-8BC4-B206FAEA2BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484338",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función jpc_dec_process_sot() en jpc/jpc_dec.c en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto desencadenando un valor de retorno jpc_ppmstabtostreams inesperado. Esta vulnerabilidad es diferente de CVE-2018-9154."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485274",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función jpc_dec_process_siz() en jpc/jpc_dec.c:1297 en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función jjpc_floorlog2() en jpc/jpc_math.c en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:00.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existen muchas fugas de memoria en JasPer 2.0.12 que se desencadenan en la función jas_strdup() en base/jas_string.c que podría acabar en un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:01.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función jpc_pi_nextrpcl() en jpc_t2cod.c en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485285",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:01.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función jpc_dec_process_siz() en jpc/jpc_dec.c:1296 en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485280",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:01.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función calcstepsizes() en jpc/jpc_dec.c en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485283",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:01.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Es posible abortar aserciones alcanzables en la función jpc_dequantize() en jpc/jpc_dec.c en JasPer 2.0.12 que provocaría un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F33A75-A103-4BDA-8830-8021A2BFC5B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T06:29:01.127",
      "lastModified" : "2023-11-07T02:38:42.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9396.  Reason: This candidate is a duplicate of CVE-2016-9396.  Notes: All CVE users should reference CVE-2016-9396 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10950",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-08-29T13:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of the 0x8000E038 IOCTL in the bdfwfpf driver. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker could leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4776."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes locales ejecuten código arbitrario en instalaciones vulnerables de Bitdefender Total Security 21.0.24.62. En primer lugar, un atacante debe obtener la habilidad para ejecutar código de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad. Este error en concreto existe al procesar el IOCTL 0x8000E038 en el controlador bdfwfpf. El problema deriva de la falta de validación de la existencia de un objeto previo a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto de SYSTEM. Anteriormente era ZDI-CAN-4776."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:total_security:21.0.24.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA75B60-9F03-4C28-B8A2-AA96F95F4736"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100418",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-693",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10951",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-08-29T13:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within app.launchURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4724."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método app.launchURL. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para ejecutar una llamada del sistema. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del actual proceso. Anteriormente era ZDI-CAN-4724."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100409",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039213",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-691",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10952",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-08-29T13:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs JavaScript function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4518."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.2.0.2051. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la función JavaScript saveAs. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede conducir a la escritura de archivos arbitrarios en localizaciones controladas por el atacante. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del actual proceso. Anteriormente era ZDI-CAN-4518."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.2.0.2051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D35D12EC-E8EB-4BC9-A989-5A7D0EA393F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100412",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039212",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/08/0patching-foxit-readers-saveas-0day-cve.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-692",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/08/0patching-foxit-readers-saveas-0day-cve.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens."
      }, {
        "lang" : "es",
        "value" : "diag.cgi en Pulse Connect Secure 8.2R1 en su versión 8.2R5, 8.1R1 en su versión 8.1R10 y Pulse Policy Secure 5.3R1 en su versión 5.3R5, 5.2R1 en su versión 5.2R8, y 5.1R1 en su versión 5.1R10 permite que atacantes remotos secuestren la autenticación de administradores para peticiones para poner en marcha tcpdump, relacionado con la falta de tokens anti-CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202E4839-7CE4-49CE-BEE1-CB33A96770E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2037BE1-408C-47E8-8A70-8440BF3A1ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7369296-0C10-4B64-A0EC-2E7BFAC5BB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F586F-A5FA-424F-B172-14FC29402F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6BE71A8-1C4A-4CE0-A78C-DCF72E6775BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E0AC17-77DE-440F-8166-FD3A8D039EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7A8628-6636-485E-B888-A13D732D87C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB60BAE-D42E-4953-822D-C9B4CF83EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9BB556-DADF-49F0-BEF2-84629EC430FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AB1607-3B0C-49A8-95E0-68FB8DF6432B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45491FB0-2EDC-4B62-838F-A8CB2E92F4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62EC1F3-10DC-4387-B4DA-8EA8086EA390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A2801C-029F-469C-9492-9AB0535B1F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219B113E-88AB-4250-81BB-3735A49A09C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84885E71-5C0D-4869-97A5-B8F955FBE728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F5AB09-D5D3-4499-BDE8-6471F827D825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5E94-07F5-416C-976F-4FF22141A145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77318F9-AA30-4010-A351-98A3942DA8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D328C58-51A0-4A62-8CFC-BAA5A9D8EDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3015D79-3AD8-4EBE-A236-6ADEC2AA4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC948E7-4EC5-45E1-98A7-A940D05E3BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BFFFF2-BA60-483A-BD7E-041EDD1932E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A100AF1-A8A7-4E0A-9D29-E00C56C0AAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE85EB6-035E-4158-92E5-C6D2543FBE1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A42EFC8-C5FF-4397-87CF-263813FAA5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C952B5B8-DCAB-476A-9E60-3F1BBE509F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F199F01-9EEA-4184-AD99-6B21110484AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9938EBCC-B9B7-4FB1-9ACB-9BED485AB5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4A309B-ACB0-4053-909A-6889129EB2C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A4A105-EBF3-4895-9ABE-50972DD232F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4013CA1C-48F0-46F6-B327-E6B34311A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112B9736-336D-4C72-A960-0B33DD3439EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FA8DC5-900B-4A53-AF55-410A7FF901E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4946BBE-E449-4F89-910C-3389BDF36071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170224-C78B-458A-B63E-53E303B0DCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17449ADA-D4CC-4A23-9699-2D3E695C519A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B21A8C-F09F-4286-8E32-C10E474C8D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8654C226-F77A-464D-9AD1-010DC11F8C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F3AFCF-8723-4F80-89A2-BC9D62CE920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545F18AB-635E-47C0-ACFE-8B2A849253FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52DD6EDE-5CF1-4BD9-93B7-8100ED9DDC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D74E173-3599-4A32-BE9A-482998800122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116DD35E-B83E-4865-8B54-E5C68D148187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D02A7DF-69CE-426B-8153-3BA404B4AC64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA199898-3820-4B6C-ADF6-9EA0E8238200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37EBB8A-48E0-4092-A5E4-ABA0C02934AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EAEBC16-AA55-4145-8FD4-84217DE4CB6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100530",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039242",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40793",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "NetApp StorageGRID Webscale 10.2.x en versiones anteriores a la 10.2.2.3, 10.3.x en versiones anteriores a la 10.3.0.4, y 10.4.x en versiones anteriores a la 10.4.0.2 permite que usuarios remotos autenticados eliminen objetos arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74318CA3-4B90-4886-A2B1-8EA54CEB9E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB97C85-F4EF-404B-B326-8661E348532C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E806C9-1971-4188-9249-466D2A528362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10077C73-1C7D-4615-93C0-67F2C7999DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B245F53E-D1F4-4B2A-A5E5-DF4620185591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721C0B1A-B308-4A44-9CB5-875F2A3FC42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E303D4-45ED-43DA-ADE1-F7F04E0DE7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid_webscale:10.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67542C62-A3C3-4C27-B6F5-531461874559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100535",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170825-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170825-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files."
      }, {
        "lang" : "es",
        "value" : "Una utilidad del servidor sin especificar en NoMachine en versiones anteriores a la 5.3.10 en Mac OS X y Linux permite que usuarios autenticados obtengan privilegios obteniendo acceso a archivos locales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nomachine:nomachine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.9",
            "matchCriteriaId" : "BD3E8B71-1AAB-4CC2-8955-A79632AC6983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.nomachine.com/forums/topic/security-advisory-nomachine-privileges-escalation-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.nomachine.com/SU08O00185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.nomachine.com/forums/topic/security-advisory-nomachine-privileges-escalation-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts."
      }, {
        "lang" : "es",
        "value" : "qa-include/qa-install.php en Question2Answer en versiones anteriores a la 1.7.5 permite que atacantes remotos creen múltiples cuentas de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:question2answer:question2answer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.4",
            "matchCriteriaId" : "CA539195-06BF-4F80-A6FD-45B7314C36D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.question2answer.org/versions.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/q2a/question2answer/commit/6013ca1c83bf232008f7be815c0e4821fb6b120a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.question2answer.org/versions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/q2a/question2answer/commit/6013ca1c83bf232008f7be815c0e4821fb6b120a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de números enteros en la función INT123_parse_new_id3 en el párser ID3 en mpg123 en versiones anteriores a la 1.25.5 en plataformas de 32 bits permite que atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado, lo que desencadena un desbordamiento de búfer basado en montículos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:*:*:*:*:*:*:x86:*",
            "versionEndIncluding" : "1.25.4",
            "matchCriteriaId" : "73CC7B71-F521-4732-9469-A7349FFB9A50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/mpg123/bugs/254/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/mpg123/mailman/message/35987663/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/mpg123/bugs/254/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/mpg123/mailman/message/35987663/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en C.P.Sub 5.2 permite que atacantes remotos inyecten scripts web o HTML mediante el parámetro keyword en index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c.p.sub_project:c.p.sub:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F97B678-0D8C-48C5-9BE1-699AAEBD200F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cooltey/C.P.Sub/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cooltey/C.P.Sub/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset."
      }, {
        "lang" : "es",
        "value" : "La clase SimpleSAML_Auth_TimeLimitedToken en SimpleSAMLphp 1.14.14 y anteriores permite que atacantes con acceso a un token secreto extiendan su periodo de validez manipulando el offset de tiempo antepuesto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.14",
            "matchCriteriaId" : "3A58B9AF-97F3-4511-9928-7E0D35F52D27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://simplesamlphp.org/security/201708-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://simplesamlphp.org/security/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T15:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función WritePixelCachePixels en ImageMagick 7.0.6-6 permite que atacantes remotos provoquen una denegación de servicio (consumo de CPU) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/659",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in \"dnsproxy.c\" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the \"name\" variable."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en \"dnsproxy.c\" en connman 1.34 y anteriores permite que atacantes remotos provoquen una denegación de servicio (bloqueo) o ejecuten código arbitrario mediante una cadena de consulta de respuesta manipulada pasada a la variable \"name\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:connman:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.34",
            "matchCriteriaId" : "1919AFA0-4CCB-491B-9364-AD47CD7BB068"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3956",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100498",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://01.org/security/intel-oss-10001/intel-oss-10001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1483720",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=5c281d182ecdd0a424b64f7698f32467f8f67b71",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nri-secure.com/blog/new-iot-vulnerability-connmando",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://01.org/security/intel-oss-10001/intel-oss-10001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1483720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=5c281d182ecdd0a424b64f7698f32467f8f67b71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nri-secure.com/blog/new-iot-vulnerability-connmando",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T16:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function."
      }, {
        "lang" : "es",
        "value" : "La actualización de la pantalla VGA en la región calculada inapropiadamente para la instantánea dirty bitmap en el caso de que el modo pantalla dividida sea usado, lo que provoca una denegación de servicio (fallo de aserción) en la función cpu_physical_memory_snapshot_get_dirty."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242C3AA9-F5FC-4D25-9F96-1DEC709AA9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2FC474-181C-4022-8A7E-AEEE4DDAE6A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/10/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.qemu.org/gitweb.cgi?p=qemu.git%3Ba=commit%3Bh=bfc56535f793c557aa754c50213fc5f882e6482d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04685.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.qemu.org/gitweb.cgi?p=qemu.git%3Ba=commit%3Bh=bfc56535f793c557aa754c50213fc5f882e6482d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04685.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3150",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-29T20:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script."
      }, {
        "lang" : "es",
        "value" : "Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating emplea cookies que podrían ser accesibles para un script del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29E849-5092-496D-9D46-ABEAEEDE9129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9064A625-AA0A-4606-9DB1-98D5015C648F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACA970-3D32-47E8-87AD-7C618EBA8096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100536",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3151",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-29T20:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality."
      }, {
        "lang" : "es",
        "value" : "Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating es vulnerable a Stored Cross-Site Scripting en la funcionalidad edit-tag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EE763-E25B-4573-893C-1CDEB17DDEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "D69F336C-D87D-4403-9289-048AD33C5BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACA970-3D32-47E8-87AD-7C618EBA8096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100547",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3152",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-29T20:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality."
      }, {
        "lang" : "es",
        "value" : "Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating es vulnerable a DOM XSS en la funcionalidad edit-tag."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29E849-5092-496D-9D46-ABEAEEDE9129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9064A625-AA0A-4606-9DB1-98D5015C648F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACA970-3D32-47E8-87AD-7C618EBA8096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100577",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3153",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-29T20:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality."
      }, {
        "lang" : "es",
        "value" : "Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating es vulnerable a XSS reflejado en la funcionalidad search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29E849-5092-496D-9D46-ABEAEEDE9129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9064A625-AA0A-4606-9DB1-98D5015C648F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACA970-3D32-47E8-87AD-7C618EBA8096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100578",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3154",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-29T20:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information."
      }, {
        "lang" : "es",
        "value" : "Las respuestas de error de Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating incluyen seguimiento de la pila, lo que expone información excesiva."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29E849-5092-496D-9D46-ABEAEEDE9129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9064A625-AA0A-4606-9DB1-98D5015C648F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACA970-3D32-47E8-87AD-7C618EBA8096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100581",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3155",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-29T20:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting."
      }, {
        "lang" : "es",
        "value" : "Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating es vulnerable a cross frame scripting."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29E849-5092-496D-9D46-ABEAEEDE9129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9064A625-AA0A-4606-9DB1-98D5015C648F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACA970-3D32-47E8-87AD-7C618EBA8096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100587",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1195",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T21:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670."
      }, {
        "lang" : "es",
        "value" : "IBM Curam Social Program Management 6.0, 6.1, 6.2, y 7.0 podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 123670."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFDBB0F-A8C9-40DF-81CF-799D034D2EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E3B08-7171-414D-8A41-14C9E18B1BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940271A7-2CC3-4A34-BB5A-D9F4D45A7895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F3FDC1-B49D-46DD-B9F7-DCE3F1FD4B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13AA664F-BCD8-4CED-A201-E2543D437E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6711519-4E7D-4782-8372-7996C24E50D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D0CA3E-2649-4B4B-A805-81213FC07A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510DC15C-03F8-4058-A88A-13EFC48A43C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4971ADE2-3F58-4B42-9EC6-EFF3CF967E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE01821C-590F-40E1-A973-5DF0EA0151D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F30D0-82C1-4F88-9FDB-A8E6D6D39591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17929DC8-0E48-4BF4-AAFE-6463C8540FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD3FF4C-C12A-4CBC-8983-85929C5D121E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE6D88C-92CF-415E-978C-0107C4C4C52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB928C52-91BB-43A6-B25F-F359F05F1388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE6951-4C91-4443-843C-805D416F4074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23EA1C1F-003F-4411-AC1D-F75811D6FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89D44FA-FE58-4A4E-8DB1-BA9667A16612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FCFA0-2443-4AE9-ACE6-394A67443808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A5540-525C-4F99-BA26-3B988B5A08D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5C061E-A4F5-4478-A9E4-D8BA156085B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A2D187-7B5D-44D1-A766-A972F257EF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1991AF-E483-4A6E-938B-D1B6796FF135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6695193E-0347-4E20-A991-038CC3BA6386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B972B5E-6825-4DD5-8BB6-851DFFBB5109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C202FC-EA69-429B-85C6-F58A093C901F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CB6F37-6F14-4313-82D8-7D1EF110852D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A3A8B1-8088-4FCC-A38C-96526201F159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666549A-5879-4141-A97F-347B52755092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808EF0E6-842C-4E81-8743-01230D32532C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7020B7F8-0C57-4533-B49F-559058A23CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5887540-4EBE-484E-9C5B-3EFA0950BE30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E303C07-8CB1-4EF8-82F3-4C2B3C664812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2923B5C1-78A5-4A0D-B18E-DAC59B62EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58610A13-D6F7-49BA-A576-350DACC5C86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA53735-7E72-4717-9168-38286B5261E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB504DC-E137-4026-BB16-E862045BD380"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180CE3A7-BA57-49B4-8103-20E12CD37435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0DF071-1EB8-49FD-A279-A895A45B4679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007160",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123670",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1427",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T21:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127579."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 es vulnerable a cross-site scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 127579."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714FD2CA-C89D-49B6-9F92-DB167B09B898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE56F02-E122-4A65-81A8-43BB926B9701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1428",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T21:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 podría permitir que un atacante remoto secuestre la acción de clicado de la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clicado de la víctima y, probablemente, lanzar más ataques contra la víctima. IBM X-Force ID: 127583."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714FD2CA-C89D-49B6-9F92-DB167B09B898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE56F02-E122-4A65-81A8-43BB926B9701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127583",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1485",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T21:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128623."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 es vulnerable a cross-site scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128623."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714FD2CA-C89D-49B6-9F92-DB167B09B898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE56F02-E122-4A65-81A8-43BB926B9701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128623",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1535",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-29T21:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130677."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130677."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714FD2CA-C89D-49B6-9F92-DB167B09B898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE56F02-E122-4A65-81A8-43BB926B9701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100834",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130677",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0379",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-08-29T22:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c."
      }, {
        "lang" : "es",
        "value" : "Libgcrypt en versiones anteriores a la 1.8.1 no considera correctamente ataques de canal lateral Curve25519, lo que facilita que los atacantes descubran una clave secreta relacionada con cipher/ecc.c y mpi/ec.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "C3EDDB00-5923-4D66-B2A2-AB9AB5C5FF03"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100503",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041294",
        "source" : "security@debian.org"
      }, {
        "url" : "https://bugs.debian.org/873383",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://eprint.iacr.org/2017/806",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b",
        "source" : "security@debian.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00221.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0379",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180726-0002/",
        "source" : "security@debian.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3959",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/873383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://eprint.iacr.org/2017/806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180726-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T22:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls."
      }, {
        "lang" : "es",
        "value" : "En The Sleuth Kit (TSK) 4.4.2, abrir una imagen ISO 9660 manipulada desencadena una lectura fuera de límites en iso9660_proc_dir() en tsk/fs/iso9660_dent.c en libtskfs.a, tal y como demuestra fls."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sleuthkit:the_sleuth_kit:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281CF478-C92F-4483-92F0-096CBBFC98E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sleuthkit/sleuthkit/issues/913",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sleuthkit/sleuthkit/issues/913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T22:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls."
      }, {
        "lang" : "es",
        "value" : "En The Sleuth Kit (TSK) 4.4.2, abrir una imagen de disco manipulada desencadena una recursión infinita en dos_load_ext_table() en tsk/vs/dos.c en libtskfs.a, tal y como demuestra mmls."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sleuthkit:the_sleuth_kit:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281CF478-C92F-4483-92F0-096CBBFC98E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sleuthkit/sleuthkit/issues/914",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sleuthkit/sleuthkit/issues/914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T23:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c."
      }, {
        "lang" : "es",
        "value" : "La biblioteca Binary File Descriptor (BFD) (también llamada libbfd), tal y como se distribuye en GNU Binutils 2.29, no valida el tamaño de sección PLT, lo que permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en montículos y fallo de la aplicación) mediante un archivo ELF manipulado, relacionado con elf_i386_get_synthetic_symtab en elf32-i386.c y elf_x86_64_get_synthetic_symtab en elf64-x86-64.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22018",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=90efb6422939ca031804266fba669f77c22a274a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=90efb6422939ca031804266fba669f77c22a274a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T23:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.6-10 hay un desbordamiento de búfer basado en montículos en la función TracePoint() en MagickCore/draw.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B450807-6F43-4852-93CF-CC1EB85D83F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32583",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-29T23:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a."
      }, {
        "lang" : "es",
        "value" : "En The Sleuth Kit (TSK) 4.4.2, fls depende de una imagen exfat corrupta en tsk_img_read() en tsk/img/img_io.c en libtskimg.a."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sleuthkit:the_sleuth_kit:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281CF478-C92F-4483-92F0-096CBBFC98E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sleuthkit/sleuthkit/issues/906",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sleuthkit/sleuthkit/issues/906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T00:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS."
      }, {
        "lang" : "es",
        "value" : "ONOS en sus versiones 1.8.0, 1.9.0, y 1.10.0 es vulnerable a Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DC5644-60E9-48F6-AF7B-B45E3376EFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589F0DEF-2F1C-4F0C-9700-6F0AEBEAC5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561BA05F-F588-4495-9462-F02A1467089B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.onosproject.org/#/c/14031/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14049/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14050/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14066/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14067/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14069/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14170/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14179/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14182/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14031/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14049/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14050/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14066/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14067/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14069/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14170/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14179/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14182/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T00:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited."
      }, {
        "lang" : "es",
        "value" : "ONOS en sus versiones 1.8.0, 1.9.0, y 1.10.0 no restringe la cantidad de memoria asignada. El tamaño de payload de Netty no se encuentra limitado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DC5644-60E9-48F6-AF7B-B45E3376EFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589F0DEF-2F1C-4F0C-9700-6F0AEBEAC5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onosproject:onos:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561BA05F-F588-4495-9462-F02A1467089B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.onosproject.org/#/c/13831/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14318/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/13831/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.onosproject.org/#/c/14318/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0, el disector Modbus podría fallar con una desreferencia de puntero NULL. Esto se ha tratado en epan/dissectors/packet-mbtcp.c añadiendo una validación de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13925",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b87ffbd12bddf64582c0a6e082b462744474de94",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-40.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b87ffbd12bddf64582c0a6e082b462744474de94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0, 2.2.0-2.2.8 y 2.0.0-2.0.14, el disector IrCOMM tiene una vulnerabilidad de sobrelectura de búfer y de fallo de aplicación. Esto se ha tratado en plugins/irda/packet-ircomm.c añadiendo una validación de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.14",
            "matchCriteriaId" : "1AA060EA-E62B-4134-B11E-2836AFA3C0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.8",
            "matchCriteriaId" : "03113E13-A64D-4C34-A6B3-799A2082F104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13929",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94666d4357096fc45e3bcad3d9414a14f0831bc8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-41.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94666d4357096fc45e3bcad3d9414a14f0831bc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0 y 2.2.0-2.2.8, el disector Profinet I/O podría fallar con una escritura fuera de límites. Esto se ha tratado en plugins/profinet/packet-dcerpc-pn-io.c añadiendo una validación de strings."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8464D-85E7-4FDE-B922-A542451B18FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE77814-337C-4BA9-861B-4EDAFE49A43F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13847",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2096bc1e5078732543e0a3ee115a2ce520a72bbc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=af7b093ca528516c14247acb545046199d30843e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-39.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2096bc1e5078732543e0a3ee115a2ce520a72bbc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=af7b093ca528516c14247acb545046199d30843e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0, 2.2.0-2.2.8 y 2.0.0-2.0.14, el disector MSDP podría entrar en un bucle infinito. Esto se ha tratado en epan/dissectors/packet-msdp.c añadiendo una validación de longitud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BE013B-8615-49DB-939E-B7E289171467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB30F17-A41A-4F09-977F-AB91E509247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F77523-59BD-431A-A790-C3886D337EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99405746-65A3-4D33-8B03-B7091C3B8E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2B0D12-04C7-4CBF-AF70-EE3EF37BA6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8464D-85E7-4FDE-B922-A542451B18FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE77814-337C-4BA9-861B-4EDAFE49A43F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13933",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6f18ace2a2683418a9368a8dfd92da6bd8213e15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-38.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6f18ace2a2683418a9368a8dfd92da6bd8213e15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-38.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service by sending a crafted image file."
      }, {
        "lang" : "es",
        "value" : "Una desreferencia de puntero NULL en la función IdentifyImage en MagickCore/identify.c en ImageMagick en las versiones 7.0.6-10 permite que los atacantes realicen una denegación de servicio mediante el envío de un archivo de imagen manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-11",
            "matchCriteriaId" : "4EDBB847-A6B9-45A2-AE5C-3E4DAE48C86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndIncluding" : "7.0.6-10",
            "matchCriteriaId" : "894A2A6C-2D18-4EF3-A74A-970457FCD53A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100569",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/706",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file."
      }, {
        "lang" : "es",
        "value" : "La función WriteTHUMBNAILImage en coders/thumbnail.c de ImageMagick 7.0.6-10 permite que atacantes provoquen una denegación de servicio (sobrelectura de búfer) mediante el envío de un archivo JPEG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-11",
            "matchCriteriaId" : "4EDBB847-A6B9-45A2-AE5C-3E4DAE48C86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndIncluding" : "7.0.6-10",
            "matchCriteriaId" : "894A2A6C-2D18-4EF3-A74A-970457FCD53A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/705",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Hikvision iVMS-4200 en versiones anteriores a la v2.6.2.7 permiten que los usuarios locales generen códigos de recuperación de contraseñas mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hikvision:ivms-4200:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2.6",
            "matchCriteriaId" : "2B220603-BE47-4C5E-92A6-8DF2829ADF63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ipvm.com/reports/hik-vms-pass",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://ipvm.com/reports/hik-vms-pass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene un problema de denegación de servicio en ReadJNXImage() en coders/jnx.c por el que grandes cantidades de recursos de memoria y CPU se pueden consumir aunque el archivo no soporte las peticiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/b037d79b6ccd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100570",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/b037d79b6ccd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c \"Read hex image data\" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene un problema de denegación de servicio en ReadXBMImage() en un caso coders/xbm.c \"Read hex image data\" version!=10 que resultará en que no retorna el lector. Esto podría hacer que se consuman grandes cantidades de recursos de memoria y CPU aunque el archivo manipulado no lo pida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100574",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c \"Read hex image data\" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 tiene un problema de denegación de servicio en ReadXBMImage() en un caso coders/xbm.c \"Read hex image data\" version==10 que resultará en que no retorna el lector. Esto podría hacer que se consuman grandes cantidades de recursos de memoria y CPU aunque el archivo manipulado no lo pida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100575",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4222-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T09:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has XSS in dapur\\apps\\app_config\\sys_config.php via the site_name parameter."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS 2.0.7 tiene una vulnerabilidad de Cross-Site Scripting (XSS) en dapur\\apps\\app_config\\sys_config.php mediante el parámetro site_name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3163",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-08-30T14:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access."
      }, {
        "lang" : "es",
        "value" : "Cuando se usa la característica Index Replication, los nodos Apache Solr pueden tomar archivos index de un nodo master/leader usando una API HTTP que acepta un nombre de archivo. Sin embargo, Solr en versiones anteriores a la 5.5.4 y en versiones 6.x anteriores a la 6.4.1 no valida el nombre de archivo, por lo que fue posible manipular una petición especial que involucre un salto de ruta, dejando expuestos todos los archivos legibles en el proceso de servidor Solr. Los servidores Solr protegidos y restringidos por reglas de firewall y/o autenticación no estarían en riesgo ya que solo los clientes y usuarios de confianza obtendrían acceso HTTP directo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.3",
            "matchCriteriaId" : "C0CB118A-E405-41E5-B25F-C151B14292A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F3170C-C5D6-431F-A2DD-692636CF5DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA339070-A2BD-4559-B400-2BC2EB9923A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B737CF14-C14A-4D97-B838-47EC4A2C68C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036F935D-B469-47C6-AF5D-3DFC73070753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A1A17A-32EA-40A2-9A1E-6019B493B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76557E9C-1F16-44D9-ACA1-F4DAEC966F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE068A02-D47A-4C6C-BFD3-040385599CA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1447",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1448",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1451",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4124",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T17:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de EyesOfNetwork (también conocido como eonweb) 5.1-0 permite que se produzcan ataques de salto de directorio para leer archivos arbitrarios mediante el parámetro file de module/admin_conf/download.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12698",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de autenticación incorrecta en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Unas peticiones especialmente manipuladas podrían permitir que haya una omisión de autenticación y así ejecutar código remotamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12702",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. String format specifiers based on user provided input are not properly validated, which could allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de cadenas de formato controladas externamente en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Los especificadores de formato de cadenas basados en valores de entrada proporcionados por el usuario no están validados correctamente, lo que podría permitir que un atacante ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12704",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de desbordamiento de búfer basado en montículos en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Los investigadores han identificado múltiples vulnerabilidades en donde no se valida correctamente la longitud de los datos introducidos por el usuario antes de copiarlos a la memoria dinámica, lo que podría permitir a un atacante ejecutar código arbitrario bajo el contexto del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12706",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de desbordamiento de búfer basado en pilas en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Los investigadores han identificado múltiples vulnerabilidades en donde no se valida correctamente la longitud de los datos introducidos por el usuario antes de copiarlos a la pila, lo que podría permitir a un atacante ejecutar código arbitrario bajo el contexto del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12708",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad en la que se restringe incorrectamente las operaciones dentro de los límites de un búfer de memoria en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Los investigadores han identificado múltiples vulnerabilidades que permiten que se referencien ubicaciones no válidas al búfer de memoria, lo que puede permitir que un atacante ejecute código arbitrario o haga que el sistema falle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12710",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de inyección SQL en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Al enviar un parámetro especialmente manipulado, es posible inyectar declaraciones SQL que podrían permitir a un atacante obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-712/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-29",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-712/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12711",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de asignación incorrecta de privilegios en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Se le ha concedido un privilegio sensible a una cuenta de usuario incorporada que podría permitir a un usuario elevar sus privilegios a privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12713",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Multiple files and folders with ACLs that affect other users are allowed to be modified by non-administrator accounts."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de asignación incorrecta de privilegios en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Se permite que cuentas que no son administradores modifiquen múltiples archivos y carpetas con listas de control de acceso que afecten a otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12717",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-08-30T18:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema relacionado con un elemento de ruta de búsqueda no controlado en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Un archivo dll manipulado de manera maliciosa ubicado previamente en la ruta de búsqueda puede permitir a un atacante ejecutar código en el contexto de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "79C75B6F-94D4-4051-8B98-A12B61063140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T19:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 (All versions V8.1 and earlier), SIMATIC WinCC (All versions < V7.4 SP1), SIMATIC WinCC Runtime Professional (All versions < V14 SP1), SIMATIC NET PC Software, and SIMATIC IT Production Suite. By sending specially crafted packets to the OPC Discovery Server at port 4840/tcp, an attacker might cause the system to access various resources chosen by the attacker."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad XXE en OPC Foundation UA .NET Sample Code antes del 21-03-2017 y Local Discovery Server (LDS) antes de la versión 1.03.367. Los siguientes productos se han visto afectados por esta vulnerabilidad, entre otros: Siemens SIMATIC PCS7 (todas las versiones V8.1 y anteriores), SIMATIC WinCC (todas las versiones anteriores a V7.4 SP1), SIMATIC WinCC Runtime Professional (todas las versiones anteriores a V14 SP1), SIMATIC NET PC Software y SIMATIC IT Production Suite. Un atacante podría hacer que el sistema acceda a varios recursos escogidos por el atacante mediante el envío de paquetes especialmente manipulados a OPC Discovery Server en el puerto 4840/tcp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_pcs7:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "D6D19542-FDC9-4CBC-A75A-370DE4B4C929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:wincc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4",
            "matchCriteriaId" : "0C4AD3A6-D8F1-4DE0-9B08-25F95753F666"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocpfoundation:local_discovery_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01.333.0",
            "matchCriteriaId" : "B5A47D3C-FE15-48DC-9A2B-C2F4A1B74AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocpfoundation:ua_.net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-03-21",
            "matchCriteriaId" : "FE0DC426-A197-41CF-A2D3-C2A959736F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100559",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12069.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-535640.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12069.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-535640.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12734",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-30T19:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with network access to the integrated web server on port 80/tcp could obtain the session ID of an active user session. A user must be logged in to the web interface. Siemens recommends to use the integrated webserver on port 80/tcp only in trusted networks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en LOGO! 8 BM (incl. Variantes SIPLUS) (todas las versiones anteriores a V1.81.2). Un atacante con acceso de red al servidor web integrado en el puerto 80/tcp podría obtener la ID de sesión de una sesión de usuario activa. Un usuario debe iniciar sesión en la interfaz web. Siemens recomienda utilizar el servidor web integrado en el puerto 80/tcp solo en redes de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-895"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:logo\\!8_bm_fs-05_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.81.1",
            "matchCriteriaId" : "6128EB35-6031-4F61-8B25-596E6FE664A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:logo\\!8_bm_fs-05:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641F5F08-8D9F-425C-9735-DC174431EEA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100560",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12735",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-30T19:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en LOGO! 8 BM (incl. Variantes SIPLUS) (Todas las versiones anteriores a la V8.3). Un atacante que realiza un ataque Man-in-the-Middle entre LOGO! BM y otros dispositivos podrían potencialmente descifrar y modificar el tráfico de la red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:logo\\!_8_bm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2FA7BA89-3BF0-4C68-AC47-951B1F11F96D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:logo\\!:12\\/24rce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824EC061-CCDD-4A6F-9F5C-AE03677419B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:logo\\!:24ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7001A98B-C075-4FD5-A519-6810D947BB19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:logo\\!:24rce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E863E4-3A2C-4CD7-B083-AD9CFB8CAAF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:logo\\!:230rce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDF73B9-A572-45A0-801C-6DCEF2530C2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100561",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9945",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-08-30T19:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover."
      }, {
        "lang" : "es",
        "value" : "En el módulo de expansión Siemens 7KM PAC Switched Ethernet PROFINET (todas las versiones anteriores a v2.1.3), se podría provocar una denegación de servicio mediante un paquete PROFINET DCP especialmente manipulado que se envíe como una transmisión Ethernet local (capa 2). El componente afectado requiere un reinicio manual a través del dispositivo principal que hay que recuperar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:7km_pac_switched_ethernet_profinet_expansion_module_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "349F42C5-B626-41A1-A35E-628438178816"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:7km_pac_switched_ethernet_profinet_expansion_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A212F763-4EC8-4DEA-A667-86E694C4DD49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100562",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-771218.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-771218.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11157",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-30T20:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ruta de búsqueda no confiable en el instalador en Synology Cloud Station Backup anterior a la versión  4.2.5-4396 en Windows, permiten a los atacantes locales ejecutar código arbitrario y conducir ataques de secuestro de DLL mediante un archivo de tipo caballo de Troya en las bibliotecas (1) shfolder.dll, (2) ntmarta.dll , (3) secur32.dll o (4) dwmapi.dll, en el directorio de trabajo actual"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:cloud_station_backup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4-4393",
            "matchCriteriaId" : "C978D170-85D5-47E6-9BC8-29C5A73D84E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_50_Cloud_Station_Backup",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_50_Cloud_Station_Backup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T20:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected."
      }, {
        "lang" : "es",
        "value" : "ARM mbed TLS en versiones anteriores a la 1.3.21 y en versiones 2.x anteriores a la 2.1.9, si se configura la autenticación opcional, permite a los atacantes omitir la autenticación Peer mediante una cadena de certificados X.509 con muchos intermediarios. NOTA: aunque mbed TLS se conocía antes como PolarSSL, las versiones lanzadas con el nombre PolarSSL no están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28621156-2430-447B-8816-47B0FB58245B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB2C-0423-47B1-AE12-EB849E17BAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131CE76-6260-412C-A6A6-20B0E978E569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE92D8F7-5705-47B6-B2C2-9DE6C7880647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA50C256-2054-4661-9C42-D31D7D87BAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7791D4E9-3FEE-42DA-B320-CF7188A10294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE415DAA-A89F-4204-AC2C-577FCB447E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F691DB-9552-4EBB-B29D-16658561FA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1547B2A-E0D5-41D1-9449-1CCF35022B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF762122-64BC-4A1A-A26D-81C1270541A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D6B559-5F99-4E38-A861-3AB8A7D2E6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:1.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8956C8-6CF0-4C37-84F9-8A89726806C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B395D81-876F-43FC-8DB9-44377647A37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92622F1-82DA-4819-8275-06DC9DBE1BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5871FDE9-02D0-466C-BDB7-90A14C4F637E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B4875-3FC3-499F-A76B-2D04982F743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B67842-5AFA-459F-9CCF-772B9DC7139F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0500EE-52C0-4896-B3D8-5BE731D66039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015739E9-C0E3-4A62-BB9D-FA836BFD4351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842B0D15-6A3D-4CEE-AD02-49B0436E78E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF6E05C-E6E5-40B8-AFEA-A5ED937F5439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4133C86-70E0-44FD-BBDB-D61EFB31F027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9D24F0-3892-417F-9C3A-CACEF00C2293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8911513E-968C-403E-9D00-2DC0AA82F99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D98945-82BB-4954-AA6D-7D98E4CE1154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6378C1CC-7C8F-47E3-A1A7-CDEC76E4CBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525190A3-2194-4E4E-9D34-0048583B9C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70407352-624A-40E6-82E4-7B4FAFE0C0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD52988E-4B2F-41AF-BC25-F38F87D9B8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1F7803-31F3-40A9-A878-FDC757FCE83F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/873557",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/873557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T21:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CrushFTP 8.x before 8.2.0 has a serialization vulnerability."
      }, {
        "lang" : "es",
        "value" : "CrushFTP en versiones 8.x anteriores a la 8.2.0 tiene una vulnerabilidad de serialización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E7F694-F9AB-4637-8CE6-359C8DB3E6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73AE567-BD06-43A5-B011-FF5CC07EC6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B218F40-7C23-4AFF-B252-245524A776A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AAC122-297D-4DA8-9010-E869D7597C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crushftp.com/version8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T21:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS."
      }, {
        "lang" : "es",
        "value" : "CrushFTP en versiones anteriores a la 7.8.0 y 8.x anteriores a la 8.2.0 tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.0",
            "matchCriteriaId" : "61F6F765-270D-47AE-90C9-0E975828616E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E7F694-F9AB-4637-8CE6-359C8DB3E6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73AE567-BD06-43A5-B011-FF5CC07EC6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B218F40-7C23-4AFF-B252-245524A776A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AAC122-297D-4DA8-9010-E869D7597C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crushftp.com/version7.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T21:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability."
      }, {
        "lang" : "es",
        "value" : "CrushFTP en versiones anteriores a la 7.8.0 y 8.x anteriores a la 8.2.0 tiene una vulnerabilidad de cabeceras HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.0",
            "matchCriteriaId" : "61F6F765-270D-47AE-90C9-0E975828616E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E7F694-F9AB-4637-8CE6-359C8DB3E6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73AE567-BD06-43A5-B011-FF5CC07EC6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B218F40-7C23-4AFF-B252-245524A776A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AAC122-297D-4DA8-9010-E869D7597C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crushftp.com/version7.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T21:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability."
      }, {
        "lang" : "es",
        "value" : "CrushFTP en versiones anteriores a la 7.8.0 y 8.x anteriores a la 8.2.0 tiene una vulnerabilidad de redirección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.0",
            "matchCriteriaId" : "61F6F765-270D-47AE-90C9-0E975828616E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E7F694-F9AB-4637-8CE6-359C8DB3E6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73AE567-BD06-43A5-B011-FF5CC07EC6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B218F40-7C23-4AFF-B252-245524A776A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crushftp:crushftp:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AAC122-297D-4DA8-9010-E869D7597C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crushftp.com/version7.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crushftp.com/version8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1440",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-30T21:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 podría permitir a un atacante remoto incluir archivos arbitrarios. Un atacante remoto podría enviar una URL especialmente manipulada para especificar un archivo malicioso desde un sistema remoto, que podría permitir al atacante ejecutar código arbitrario en el servidor web vulnerable. IBM X-Force ID: 128105."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C33906-5E82-4E6B-8366-DAF2D8E257C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433B6F1E-A425-48AA-A122-A5C607B25BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178BB81-6C4E-4FE3-8C88-14FE4D93FEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B126FA9F-D8F8-4089-A98B-E3E506685934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A7113-0F4B-4E7A-AB03-C86794E54B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4C2602-FF2D-4D16-941E-96C45D563327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F195668-2897-4365-98C7-1F969AEF0822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99542",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128105",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1441",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-30T21:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information stored locally due to improper access control. IBM X-Force ID: 128106."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 podría permitir a un usuario local visualizar información sensible almacenada localmente por un control de acceso incorrecto. IBM X-Force ID: 128106."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C33906-5E82-4E6B-8366-DAF2D8E257C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433B6F1E-A425-48AA-A122-A5C607B25BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178BB81-6C4E-4FE3-8C88-14FE4D93FEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B126FA9F-D8F8-4089-A98B-E3E506685934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A7113-0F4B-4E7A-AB03-C86794E54B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4C2602-FF2D-4D16-941E-96C45D563327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F195668-2897-4365-98C7-1F969AEF0822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99547",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128106",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1442",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-30T21:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 128107."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 es vulnerable a Cross-Site Request Forgery (CSRF), lo que podría permitir a un atacante ejecutar acciones no autorizadas y maliciosas transmitidas desde un usuario considerado de confianza por la página web.. IBM X-Force ID: 128107."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C33906-5E82-4E6B-8366-DAF2D8E257C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433B6F1E-A425-48AA-A122-A5C607B25BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178BB81-6C4E-4FE3-8C88-14FE4D93FEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B126FA9F-D8F8-4089-A98B-E3E506685934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A7113-0F4B-4E7A-AB03-C86794E54B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4C2602-FF2D-4D16-941E-96C45D563327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F195668-2897-4365-98C7-1F969AEF0822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99542",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128107",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1443",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-30T21:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128109."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Services Procurement 10.0.0.5 es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128109."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C33906-5E82-4E6B-8366-DAF2D8E257C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433B6F1E-A425-48AA-A122-A5C607B25BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9178BB81-6C4E-4FE3-8C88-14FE4D93FEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B126FA9F-D8F8-4089-A98B-E3E506685934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A7113-0F4B-4E7A-AB03-C86794E54B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4C2602-FF2D-4D16-941E-96C45D563327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_services_procurement:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F195668-2897-4365-98C7-1F969AEF0822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99542",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128109",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1445",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-30T21:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128170."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Spend Analysis desde la versión 9.5.0.0 hasta la 10.1.1 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128170."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1173E8F6-A85E-452C-9B36-89427D57DDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD21D4C5-5180-4AE0-A11F-009A6CF1EFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC42DEB-FA8D-42C4-ACDC-0A5036939B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE122AF0-070A-41EE-980C-C55BF1A7995F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148B7634-1DC4-4FAB-91E6-5BFB0DB2EFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117DE7FF-B360-4289-A576-5C0868C71ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF90C02-38E5-4994-9360-867121A796C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A43F165A-8116-4A12-8276-42CC9DF35B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501E457B-084A-4E3B-981A-01B19B28B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D3D778-C6EC-430C-BD37-AB5386102612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77ACB541-1EB6-4DA7-B18D-6A0260C55918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51E3871-94A6-4567-AFB8-44BD4C73BB39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005787",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99541",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128170",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1446",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-30T21:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128171."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Spend Analysis desde la versión 9.5.0.0 hasta la 10.1.1 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128171."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1173E8F6-A85E-452C-9B36-89427D57DDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD21D4C5-5180-4AE0-A11F-009A6CF1EFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC42DEB-FA8D-42C4-ACDC-0A5036939B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE122AF0-070A-41EE-980C-C55BF1A7995F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:9.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148B7634-1DC4-4FAB-91E6-5BFB0DB2EFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117DE7FF-B360-4289-A576-5C0868C71ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF90C02-38E5-4994-9360-867121A796C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501E457B-084A-4E3B-981A-01B19B28B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251FE42A-D7C2-415A-8356-F0B1A141147A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4755DD4A-B42D-42AD-87A7-AE4191A5886C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_spend_analysis:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D6B16F-CE15-4208-A14B-1FC916331B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005787",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99541",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128171",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T22:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de desbordamiento de búfer basado en montículos en la función opj_t2_encode_packet en lib/openjp2/t2.c en OpenJPEG 2.2.0. La vulnerabilidad provoca una escritura fuera de límites, lo que puede provocar una denegación de servicio o posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "1E370DD2-BCCE-48F1-BB6D-58227282E967"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100550",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/992",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-26",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T22:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un acceso de escritura no válido en bin/jp2/convert.c en OpenJPEG 2.2.0 desencadenando un fallo en la función tgatoimage. La vulnerabilidad puede provocar una denegación de servicio o posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5CD01A-5791-4D61-937C-4F3FF23C5C2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100553",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/2cd30c2b06ce332dede81cccad8b334cde997281",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/995",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/2cd30c2b06ce332dede81cccad8b334cde997281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T22:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de desbordamiento de búfer basado en pila en la función pgxtoimage en bin/jp2/convert.c en OpenJPEG 2.2.0. La vulnerabilidad provoca una escritura fuera de límites, lo que puede provocar una denegación de servicio o posiblemente una ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5CD01A-5791-4D61-937C-4F3FF23C5C2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100555",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/e5285319229a5d77bf316bb0d3a6cbd3cb8666d9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/997",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/e5285319229a5d77bf316bb0d3a6cbd3cb8666d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-30T22:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un fallo de asignación de memoria en la función ReadPNMImage en coders/pnm.c en GraphicsMagick 1.3.26. La vulnerabilidad provoca una gran asignación de memoria, lo que puede provocar una denegación de servicio remota en la función MagickRealloc en magick/memory.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100556",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/4206-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T04:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajax_upload.php, as demonstrated by a ZIP archive that contains a .php file."
      }, {
        "lang" : "es",
        "value" : "En BlackCat CMS 1.2, los usuarios autenticados remotos pueden subir cualquier archivo mediante la función media upload en backend/media/ajax_upload.php. Esto se demostró con un archivo ZIP que contenía un archivo .php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6EA519-1503-4687-8420-7B393165B180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE/blackcat_cms_RCE.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE/blackcat_cms_RCE.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T04:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted new_modulename parameter to backend/addons/ajax_create.php. NOTE: this can be exploited via CSRF."
      }, {
        "lang" : "es",
        "value" : "BlackCat CMS 1.2 permite que los usuarios autenticados remotos inyecten código PHP arbitrario en info.php mediante un parámetro new_modulename manipulado en backend/addons/ajax_create.php. NOTA: se puede explotar mediante un ataque CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6EA519-1503-4687-8420-7B393165B180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE2/blackcat_cms_RCE2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE2/blackcat_cms_RCE2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T04:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field."
      }, {
        "lang" : "es",
        "value" : "En BlackCat CMS 1.2, backend/settings/ajax_save_settings.php permite que los usuarios autenticados remotos realicen ataques de Cross-Site Scripting (XSS) mediante el campo Website header o Website footer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6EA519-1503-4687-8420-7B393165B180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_xss/blackcat_cms_xss.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_xss/blackcat_cms_xss.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T04:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file."
      }, {
        "lang" : "es",
        "value" : "En BlackCat CMS 1.2, backend/addons/install.php permite que los usuarios autenticados remotos ejecuten código PHP arbitrario mediante un archivo ZIP que contiene un archivo .php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6EA519-1503-4687-8420-7B393165B180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE3/blackcat_cms_RCE3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE3/blackcat_cms_RCE3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T04:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la función qla2x00_sysfs_write_optrom_ctl en drivers/scsi/qla2xxx/qla_attr.c en el kernel de Linux hasta la versión 4.12.10 permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria y fallo de sistema) con acceso root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.10",
            "matchCriteriaId" : "20C3AEA9-9BF4-453D-8BB5-635FF9512E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=194061",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/patch/9929625/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.kernel.org/show_bug.cgi?id=194061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/patch/9929625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11158",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-08-31T13:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ruta de búsqueda no confiable en el instalador en Synology Cloud Station Driver en versiones anteriores a la 4.2.5-4396 en Windows permiten que atacantes locales ejecuten código arbitrario y lleven a cabo un secuestro de DLL mediante un archivo troyano (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll o (4) dwmapi.dll en el directorio de trabajo actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:cloud_station_drive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4-4393",
            "matchCriteriaId" : "1441059F-19E4-4880-BB6A-A46FE0558AC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_51_Cloud_Station_Drive",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_51_Cloud_Station_Drive",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T14:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en el servicio del servidor web en VX Search Enterprise 10.0.14 permite que atacantes remotos ejecuten código arbitrario mediante una petición GET manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vxsearch:vx_search:10.0.14:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E5FB9765-B32D-4A6C-A115-609D92E34708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143949/VX-Search-Enterprise-10.0.14-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143949/VX-Search-Enterprise-10.0.14-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1444",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-31T14:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128110."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128110."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A510872-DA85-4041-9D82-94FE64135F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970BBAEB-9B4E-4E99-A1A6-DB1DEA30B3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94720238-F3C6-4E3B-AB0D-07A2E00316D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6371A5-AB51-4C52-9548-17572D4F8BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8EEB27-C73B-403F-BD6C-012DA02614D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C51A9-6ED2-43E1-A3AA-88B7EA4EC6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BDB2B8-AC6D-4811-B889-F06345EABF7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524A7263-139E-4A65-85FB-CF4EFD18740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349341EF-A838-4642-A8E3-8BD3FDCD1AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF61E42-8D4A-4A82-807D-A27E1E38F2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A28E28-899C-493A-AE8E-202CEE03881D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811C5D4F-9A96-416A-84B6-EA3AEFE03173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E566623-639E-4A38-95A9-4A6951D31EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF0AC4-2026-4A9D-9C7D-8C98E9116238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128110",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1447",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-31T14:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128172."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto podría desembocar en una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128172."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A510872-DA85-4041-9D82-94FE64135F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970BBAEB-9B4E-4E99-A1A6-DB1DEA30B3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94720238-F3C6-4E3B-AB0D-07A2E00316D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6371A5-AB51-4C52-9548-17572D4F8BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8EEB27-C73B-403F-BD6C-012DA02614D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C51A9-6ED2-43E1-A3AA-88B7EA4EC6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BDB2B8-AC6D-4811-B889-F06345EABF7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524A7263-139E-4A65-85FB-CF4EFD18740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349341EF-A838-4642-A8E3-8BD3FDCD1AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF61E42-8D4A-4A82-807D-A27E1E38F2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A28E28-899C-493A-AE8E-202CEE03881D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811C5D4F-9A96-416A-84B6-EA3AEFE03173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E566623-639E-4A38-95A9-4A6951D31EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF0AC4-2026-4A9D-9C7D-8C98E9116238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128172",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1449",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-31T14:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128174."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 podría permitir que un atacante remoto realice ataques de phishing mediante un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 128174."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A510872-DA85-4041-9D82-94FE64135F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970BBAEB-9B4E-4E99-A1A6-DB1DEA30B3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94720238-F3C6-4E3B-AB0D-07A2E00316D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6371A5-AB51-4C52-9548-17572D4F8BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8EEB27-C73B-403F-BD6C-012DA02614D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C51A9-6ED2-43E1-A3AA-88B7EA4EC6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BDB2B8-AC6D-4811-B889-F06345EABF7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524A7263-139E-4A65-85FB-CF4EFD18740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349341EF-A838-4642-A8E3-8BD3FDCD1AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF61E42-8D4A-4A82-807D-A27E1E38F2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A28E28-899C-493A-AE8E-202CEE03881D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811C5D4F-9A96-416A-84B6-EA3AEFE03173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E566623-639E-4A38-95A9-4A6951D31EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF0AC4-2026-4A9D-9C7D-8C98E9116238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128174",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1450",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-08-31T14:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128177."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Sourcing 9.5 - 10.1.3 podría permitir que un atacante remoto realice ataques de phishing mediante un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 128177."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A510872-DA85-4041-9D82-94FE64135F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970BBAEB-9B4E-4E99-A1A6-DB1DEA30B3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94720238-F3C6-4E3B-AB0D-07A2E00316D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6371A5-AB51-4C52-9548-17572D4F8BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8EEB27-C73B-403F-BD6C-012DA02614D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C51A9-6ED2-43E1-A3AA-88B7EA4EC6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:9.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BDB2B8-AC6D-4811-B889-F06345EABF7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524A7263-139E-4A65-85FB-CF4EFD18740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349341EF-A838-4642-A8E3-8BD3FDCD1AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF61E42-8D4A-4A82-807D-A27E1E38F2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A28E28-899C-493A-AE8E-202CEE03881D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811C5D4F-9A96-416A-84B6-EA3AEFE03173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E566623-639E-4A38-95A9-4A6951D31EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_sourcing:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF0AC4-2026-4A9D-9C7D-8C98E9116238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128177",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22005834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large \"len\" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En libavformat/rmdec.c en FFmpeg 3.3.3, se podría realizar un ataque de denegación de servicio en ivr_read_header() al no haber un chequeo EOF (End Of File) que podría provocar acabar en un gran consumo de CPU. Cuando se envía un archivo IVR manipulado que reclama un campo \"len\" grande en la cabecera pero que no contiene suficientes datos de respaldo, el primer bucle type==4 consumiría una gran cantidad de recursos de CPU, ya que no hay ningún chequeo EOF en el bucle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/124eb202e70678539544f6268efc98131f19fa49",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/124eb202e70678539544f6268efc98131f19fa49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large \"nb_frames\" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En libavformat/mvdec.c in FFmpeg 3.3.3, se podría realizar un ataque de denegación de servicio en mv_read_header() al no haber un chequeo EOF (End Of File) que podría provocar acabar en un gran consumo de CPU y de memoria. Cuando se envía un archivo MV manipulado que reclama un campo \"nb_frames\" grande en la cabecera pero que no contiene suficientes datos de respaldo, el bucle en los frames consumiría una gran cantidad de recursos de CPU y de memoria, ya que no hay ningún chequeo EOF en el bucle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/4f05e2e2dc1a89f38cd9f0960a6561083d714f1e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/4f05e2e2dc1a89f38cd9f0960a6561083d714f1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large \"frame_count\" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops."
      }, {
        "lang" : "es",
        "value" : "En libavformat/rl2.c in FFmpeg 3.3.3, se podría realizar un ataque de denegación de servicio en rl2_read_header() al no haber un chequeo EOF (End Of File) que podría provocar acabar en un gran consumo de CPU y de memoria. Cuando se envía un archivo RL2 manipulado que reclama un campo \"frame_count\" grande en la cabecera pero que no contiene suficientes datos de respaldo, los bucles (para las tablas offset y size) consumirían una gran cantidad de recursos de CPU y de memoria, ya que no hay ningún chequeo EOF en los bucles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large \"name_len\" or \"count\" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops."
      }, {
        "lang" : "es",
        "value" : "En FFmpeg 3.3.3, se podría realizar un ataque de denegación de servicio en asf_read_marker() al no haber un chequeo EOF (End Of File) que podría provocar acabar en un gran consumo de CPU y de memoria. Cuando se envía un archivo MV manipulado que reclama un campo \"name_len\" o \"count\" grande en la cabecera pero que no contiene suficientes datos de respaldo, los bucles en torno al nombre y los marcadores consumirían una gran cantidad de recursos de CPU y de memoria, ya que no hay ningún chequeo EOF en estos bucles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7f9ec5593e04827249e7aeb466da06a98a0d7329",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7f9ec5593e04827249e7aeb466da06a98a0d7329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop)."
      }, {
        "lang" : "es",
        "value" : "En FFmpeg versiones 2.4 y 3.3.3, la función read_data en libavformat/hls.c no restringe los intentos de recarga de una lista insuficiente, lo que permite a los atacantes remotos causar una denegación de servicio (bucle infinito)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7ba100d3e6e8b1e5d5342feb960a7f081d6e15af",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7ec414892ddcad88313848494b6fc5f437c9ca4a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7ba100d3e6e8b1e5d5342feb960a7f081d6e15af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7ec414892ddcad88313848494b6fc5f437c9ca4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large \"duration\" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En FFmpeg 3.3.3, se podría realizar un ataque de denegación de servicio en cine_read_header() al no haber un chequeo EOF (End Of File) que podría acabar en un gran consumo de CPU y de memoria. Cuando se envía un archivo CINE manipulado que reclama un campo \"duration\" grande en la cabecera pero que no contiene suficientes datos de respaldo, el bucle en el análisis image-offset consumiría una gran cantidad de recursos de CPU y de memoria, ya que no hay ningún chequeo EOF en el bucle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7e80b63ecd259d69d383623e75b318bf2bd491f6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/7e80b63ecd259d69d383623e75b318bf2bd491f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T15:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.6-10,existe una vulnerabilidad de desreferencia de puntero NULL en la función ReadCUTImage en coders/cut.c que podría permitir a un atacante provocar una denegación de servicio (en la función QueueAuthenticPixelCacheNexus en el archivo MagickCore/cache.c) enviando un archivo de imagen mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B450807-6F43-4852-93CF-CC1EB85D83F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/710",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T16:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de enteros en la función _isBidi de bidi.c en Libidn2 en versiones anteriores a la 2.0.4 permite a los atacantes remotos provocar una denegación de servicio y posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libidn2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "DC548AA6-970F-484A-A64A-B5EC6469A2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/libidn/libidn2/blob/master/NEWS",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/blob/master/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T16:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de enteros en la función puny_decode.c en Libidn2 en versiones anteriores a la 2.0.4 permite a los atacantes remotos provocar una denegación de servicio y posiblemente otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libidn2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "E5DF64B4-EAF6-4049-933D-D7DF73DD37CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3988",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/blob/master/NEWS",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00040.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/blob/master/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T16:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL."
      }, {
        "lang" : "es",
        "value" : "Async Http Client (también async-http-client) en versiones anteriores a la 2.0.35 se puede engañar para que se conecte a otro host diferente del extraído por java.net.URI si existe el caracter '?' en un identificador de fragmento. Se identificaron bugs similares en cURL(CVE-2016-8624) y Oracle Java 8 java.net.URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.35",
            "matchCriteriaId" : "3D8C30B0-3C1B-4BA8-AC9E-EE7D69D06EF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AsyncHttpClient/async-http-client/issues/1455",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r04b15fd898a6b1612153543375daaa8145a0fd1804ec9fa2e0d95c97%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a6b6429a7558051dbb70bd06584b4b1c334a80ec9203d3d39b7045a%40%3Ccommits.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r14a74d204f285dd3a4fa203de6dbb4e741ddb7fdfff7915590e5b3db%40%3Cdev.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3df4b7ccc363b4850a24842138117aa4451b875bc4773a845b828fc6%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r41a0e2c36f7d1854a4d56cb1e4aa720ef501782d887ece1c9b1e2d60%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4ebb9596d890f3528630492bd78237b3eef06f093bac238a0da9b630%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b8666c4414500ff6e993bfa69cb6afa19b1b67c4585a045c0c21662%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f07c30721503d4c02d5451f77a611a1a0bb2a94ddcdf071c9485ea3%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f794dc07913c5f2ec08f540813b40e61b562d36f8b1f916e8705c56%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r683d78c6d7a15659f2bb82dd4120dab8c45a870eaa7f1a15cce4ed3b%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7046a51116207588e36ca8c2e291327e391dae40712d267117475a98%40%3Cdev.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7879a48644f708be0529bd39f0679ad3ad951f3dc24442878a008fd8%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r79d9bab405414af45568c4683386f5e9fd02c10ca87ffa2ee33512dc%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r868875e67494a18d31e88cba2672f45c3fc6708ffdde445723004da4%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea5d489e004b40baf73880c4e11dd4de24b799d15e091e1f4017108%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbbad61e1ba5b21e234a6664963618acfee237af754eb20300d938e1e%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc4fbb06ccb10e26e6064f57f6bd4935eabe2d18a0cb9a7183699396%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc550b8955b37b40fee18db99f167337c41c930d8c3763b9631e01dda%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcb46acc25917e01ebecca132e870da9ab935d5796686ed8a2785b026%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re2510852c4a1f635b14b35e5dfd7597076928e723ab08559ede575e0%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re7367895ccbf64523efcd39a9181baf2eaa30b069d8d6496852fba56%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd823a733b02cffbef5a69953fdcbed2d1d0afad5e1ea4e96ff6bf0a%40%3Cissues.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe55d83e4070bcc9285bbbf6bc39635dbcbba6d14d89aab0f339c83a%40%3Ccommits.tez.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/08/31/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AsyncHttpClient/async-http-client/issues/1455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r04b15fd898a6b1612153543375daaa8145a0fd1804ec9fa2e0d95c97%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a6b6429a7558051dbb70bd06584b4b1c334a80ec9203d3d39b7045a%40%3Ccommits.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r14a74d204f285dd3a4fa203de6dbb4e741ddb7fdfff7915590e5b3db%40%3Cdev.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3df4b7ccc363b4850a24842138117aa4451b875bc4773a845b828fc6%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r41a0e2c36f7d1854a4d56cb1e4aa720ef501782d887ece1c9b1e2d60%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4ebb9596d890f3528630492bd78237b3eef06f093bac238a0da9b630%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b8666c4414500ff6e993bfa69cb6afa19b1b67c4585a045c0c21662%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f07c30721503d4c02d5451f77a611a1a0bb2a94ddcdf071c9485ea3%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f794dc07913c5f2ec08f540813b40e61b562d36f8b1f916e8705c56%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r683d78c6d7a15659f2bb82dd4120dab8c45a870eaa7f1a15cce4ed3b%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7046a51116207588e36ca8c2e291327e391dae40712d267117475a98%40%3Cdev.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7879a48644f708be0529bd39f0679ad3ad951f3dc24442878a008fd8%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r79d9bab405414af45568c4683386f5e9fd02c10ca87ffa2ee33512dc%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r868875e67494a18d31e88cba2672f45c3fc6708ffdde445723004da4%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea5d489e004b40baf73880c4e11dd4de24b799d15e091e1f4017108%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbbad61e1ba5b21e234a6664963618acfee237af754eb20300d938e1e%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc4fbb06ccb10e26e6064f57f6bd4935eabe2d18a0cb9a7183699396%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc550b8955b37b40fee18db99f167337c41c930d8c3763b9631e01dda%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcb46acc25917e01ebecca132e870da9ab935d5796686ed8a2785b026%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re2510852c4a1f635b14b35e5dfd7597076928e723ab08559ede575e0%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re7367895ccbf64523efcd39a9181baf2eaa30b069d8d6496852fba56%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd823a733b02cffbef5a69953fdcbed2d1d0afad5e1ea4e96ff6bf0a%40%3Cissues.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe55d83e4070bcc9285bbbf6bc39635dbcbba6d14d89aab0f339c83a%40%3Ccommits.tez.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T17:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len."
      }, {
        "lang" : "es",
        "value" : "Ruby hasta la versión 2.2.7, 2.3.x hasta la 2.3.4, y 2.4.x hasta la 2.4.1 puede exponer memoria arbitraria durante una llamada JSON.generate. Los problemas surgen al usar strdup en ext/json/ext/generator/generator.c, el cual se detendría después de encontrar un byte '\\0', devolviendo un puntero a un string de longitud cero, que no es la longitud almacenada en space_len."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.7",
            "matchCriteriaId" : "20D4B423-C141-4B08-9FE4-2ADCB868A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822307DD-7F7D-44C2-9C4B-CB8704663410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D62AC9-83B8-4C84-A47E-2B06C2816964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "E583E49C-95B1-4AE4-AA7A-6D6BA7D470B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F197C5A-2588-417F-A743-E72D1E8EF4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA01BF1-91AD-4968-9AC2-A194FCD6AB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36CCD91-2A20-4C2E-96D5-73704DFC10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485C401C-CC3B-4A74-82D6-F4539FFE48B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E99F5A-E693-43E9-8AB3-A3FCB21BCF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDA92E9-C9CF-47B9-B647-0202D493D057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "A682A487-A615-404C-A7D9-A28C0C31B4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview3:*:*:*:*:*:*",
            "matchCriteriaId" : "8930BA64-E9BC-42E0-9D74-8FA2ABD1F692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AE96A-F7FB-41A2-943C-DFAEA6D81446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946D2AB0-D334-4D94-BDA2-733BFC6C9E1E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100890",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/issues/13853",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/flori/json/commit/8f782fd8e181d9cfe9387ded43a5ca9692266b85",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/209949",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ruby-lang.org/issues/13853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/flori/json/commit/8f782fd8e181d9cfe9387ded43a5ca9692266b85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/209949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T18:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en NexusPHP 1.5.beta5.20120707 mediante el parámetro de array usernw en nowarn.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "3211FF0C-19EF-4C9C-B077-B48EDC60766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/nowarn.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://raw.githubusercontent.com/zhangyuhang2017/cve/master/1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/nowarn.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://raw.githubusercontent.com/zhangyuhang2017/cve/master/1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T18:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en NexusPHP 1.5.beta5.20120707 a través de PATH_INFO a ipsearch.php en relación con PHP_SELF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "3211FF0C-19EF-4C9C-B077-B48EDC60766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhangyuhang2017/cve/blob/master/4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zhangyuhang2017/cve/blob/master/4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en NexusPHP 1.5.beta5.20120707 mediante el parámetro id en linksmanage.php en una acción editlink."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "3211FF0C-19EF-4C9C-B077-B48EDC60766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/linksmanage.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/linksmanage.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0899",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-08-31T20:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences."
      }, {
        "lang" : "es",
        "value" : "RubyGems 2.6.12 y anteriores es vulnerable a especificaciones de gemas manipuladas maliciosamente que incluyen caracteres de escapada de terminal. Imprimir la especificación de las gemas ejecutaría secuencias de escapada de terminal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.12",
            "matchCriteriaId" : "1161B0D8-43B3-4123-BD4F-87F260AB8947"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100576",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/226335",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/226335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0900",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-08-31T20:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command."
      }, {
        "lang" : "es",
        "value" : "RubyGems 2.6.12 y anteriores es vulnerable a especificaciones de gemas manipuladas maliciosamente para provocar ataques de denegación de servicio contra clientes RubyGems que hayan enviado un comando query."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.12",
            "matchCriteriaId" : "1161B0D8-43B3-4123-BD4F-87F260AB8947"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100579",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/8a38a4fc24c6591e6c8f43d1fadab6efeb4d6251",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/243003",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/8a38a4fc24c6591e6c8f43d1fadab6efeb4d6251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/243003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0901",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-08-31T20:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem."
      }, {
        "lang" : "es",
        "value" : "RubyGems 2.6.12 y anteriores no valida con éxito los nombres de las especificaciones, permitiendo que una gema manipulada maliciosamente sobrescriba cualquier archivo en el sistema de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.12",
            "matchCriteriaId" : "1161B0D8-43B3-4123-BD4F-87F260AB8947"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100580",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/243156",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3553-1/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42611/",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/243156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3553-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42611/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0902",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-08-31T20:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls."
      }, {
        "lang" : "es",
        "value" : "RubyGems 2.6.12 y anteriores es vulnerable a secuestro de DNS, lo que permite a un atacante Man-in-the-Middle (MitM) forzar el cliente RubyGems a que descargue e instale gemas desde un servidor que está bajo el control del atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-350"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.12",
            "matchCriteriaId" : "1161B0D8-43B3-4123-BD4F-87F260AB8947"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100586",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/8d91516fb7037ecfb27622f605dc40245e0f8d32",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/218088",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3553-1/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/08/27/2.6.13-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/8d91516fb7037ecfb27622f605dc40245e0f8d32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/218088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3553-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-08-31T21:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the \"language\" parameter."
      }, {
        "lang" : "es",
        "value" : "El el componente webmail en IceWarp Server 11.3.1.5, existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el parámetro language."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:server:11.3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2CB55C-6483-41E9-8638-79E927CA535E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T05:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by the init-script.in and mimedefang-init.in scripts."
      }, {
        "lang" : "es",
        "value" : "MIMEDefang 2.80 y anteriores crea un archivo PID tras eliminar privilegios a una cuenta que no es root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no root para modificar archivos PID antes de que un script root ejecute un comando \"kill `cat /pathname`\", tal y como demuestran los scripts init-script.in y mimedefang-init.in."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mimedefang:mimedefang:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558BD09F-6F3A-4DB4-8020-7FB4BE962F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038077.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038085.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T13:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation."
      }, {
        "lang" : "es",
        "value" : "El método secureCompare en lib/SimpleSAML/Utils/Crypto.php en SimpleSAMLphp 1.14.13 y anteriores, al usarse con PHP en versiones anteriores a la 5.6, permite que los atacantes lleven a cabo ataques de fijación de sesión o que, posiblemente, omitan la autenticación aprovechando las conversiones de caracteres que faltan antes de una operación XOR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.13",
            "matchCriteriaId" : "AA1268D7-6B0D-4BE5-9916-BE2860E66710"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.38",
            "matchCriteriaId" : "44B09073-783B-4ADE-A5B8-DA6F93DBA46F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/simplesamlphp/simplesamlphp/commit/4bc629658e7b7d17c9ac3fe0da7dc5df71f1b85e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://simplesamlphp.org/security/201705-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/simplesamlphp/simplesamlphp/commit/4bc629658e7b7d17c9ac3fe0da7dc5df71f1b85e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://simplesamlphp.org/security/201705-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T13:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input."
      }, {
        "lang" : "es",
        "value" : "El módulo multiauth en SimpleSAMLphp 1.14.13 y anteriores permite que atacantes remotos omitan las restricciones de contexto de autenticación y empleen un origen de autenticación definido en config/authsources.php mediante vectores relacionados en la validación incorrecta de las entradas de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.13",
            "matchCriteriaId" : "AA1268D7-6B0D-4BE5-9916-BE2860E66710"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201704-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T13:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers."
      }, {
        "lang" : "es",
        "value" : "SimpleSAMLphp 1.14.12 y anteriores hace que sea más fácil para atacantes Man-in-the-Middle (MitM) obtener información sensible mediante el aprovechamiento de los métodos aesEncrypt y aesDecrypt en la clase SimpleSAML/Utils/Crypto class para proteger los identificadores de sesión en respuestas a proveedores de servicios no-HTTPS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.12",
            "matchCriteriaId" : "41D7B1EE-5A76-48D0-A244-2B6A6DE134F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://simplesamlphp.org/security/201704-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T13:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update."
      }, {
        "lang" : "es",
        "value" : "QEMU (también conocido como Quick Emulator), cuando se integra con soporte para emulador de pantalla VGA, permite que usuarios con privilegios de sistema operativo invitado local provoquen una denegación de servicio (lectura fuera de límites y bloqueo del proceso QEMU) mediante vectores relacionados con la actualización de pantalla."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "DE828526-81EF-4807-8E73-E0FC56034D8B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/30/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100540",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2162",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486560",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04684.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/30/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04684.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13674",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-09-01T13:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges."
      }, {
        "lang" : "es",
        "value" : "Symantec ProxyClient 3.4 para Windows es susceptible a una vulnerabilidad de escalado de privilegios. Un usuario malicioso local de Windows puede, en ciertas circunstancias, explotar esta vulnerabilidad para escalar sus privilegios en el sistema y ejecutar código arbitrario con privilegios LocalSystem."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:proxyclient:3.4:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "2BD11FE5-E7C4-4A69-BC75-62EBD9BF3DA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100554",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA152",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T13:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso después de liberación de memoria (use-after-free) en la función sofree en slirp/socket.c en QEMU (también conocido como Quick Emulator) permite que atacantes remotos provoquen una denegación de servicio (bloqueo de la instancia QEMU) aprovechando el error a la hora de eliminar correctamente ifq_so de los paquetes pendientes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.1",
            "matchCriteriaId" : "E202FB04-7753-484E-88C7-A2D9B59FEC5F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/29/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100534",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486400",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg05201.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/29/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg05201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T13:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403."
      }, {
        "lang" : "es",
        "value" : "Las funciones ReadJNGImage y ReadOneJNGImage en coders/png.c en GraphicsMagick 1.3.26 no gestiona correctamente los punteros de imagen tras ciertas condiciones de error, lo que permite que atacantes remotos lleven a cabo ataques de uso después de liberación de memoria (use-after-free) mediante un archivo manipulado, relacionado con una llamada CloseBlob fuera de servicio ReadMNGImage. NOTA: Esta vulnerabilidad existe debido a una solución incompleta para CVE-2017-11403."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/01/graphicsmagick-use-after-free-in-closeblob-blob-c-incomplete-fix-for-cve-2017-11403/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/01/graphicsmagick-use-after-free-in-closeblob-blob-c-incomplete-fix-for-cve-2017-11403/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3897",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-09-01T13:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de código en el mecanismo de autenticación no basado en certificados en McAfee Live Safe en versiones anteriores a la 16.0.3 y McAfee Security Scan Plus (MSS+) en versiones anteriores a la 3.11.599.3 permite que los atacantes en red lleven a cabo la ejecución de un archivo malicioso mediante una respuesta backend HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:livesafe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.2",
            "matchCriteriaId" : "7D213D39-7A5C-4A34-85EF-7F5D1665524C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:security_scan_plus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.11.599.2",
            "matchCriteriaId" : "99BCB455-ACAD-444C-B5E1-25A71521E920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100100",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3898",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-09-01T13:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ataque Man-in-the-Middle (MitM) en el mecanismo de autenticación no basado en certificados en McAfee LiveSafe (MLS) en versiones anteriores a la 16.0.3 permite que atacantes en red modifiquen el valor de registro de Windows asociado con la actualización McAfee mediante una respuesta backend HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:livesafe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.2",
            "matchCriteriaId" : "7D213D39-7A5C-4A34-85EF-7F5D1665524C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10829",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-01T14:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en Remote Support Tool (Enkaku Support Tool) en todas sus versiones distribuidas mediante la página web hasta el 10 de agosto del 2017 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt:enkaku_support_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE23CA9-F33E-4915-8728-ADF56EB64872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flets-w.com/topics/remote_support_vulnerability/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://flets.com/osa/remote/pc_tool.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN26115441/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://flets-w.com/topics/remote_support_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://flets.com/osa/remote/pc_tool.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN26115441/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10848",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-01T14:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en los instaladores de DocuWorks 8.0.7 y anteriores y DocuWorks Viewer Light publicado en julio de 2017 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujixerox:docuworks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.7",
            "matchCriteriaId" : "327A607C-5BA3-40FC-A9C3-9A413B121377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujixerox:docuworks_viewer_light:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.7",
            "matchCriteriaId" : "ABE4264B-BF31-4460-A7FF-F36E1B236DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10849",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-01T14:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en un documento autoextraíble generado por DocuWorks 8.0.7 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujixerox:docuworks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.7",
            "matchCriteriaId" : "327A607C-5BA3-40FC-A9C3-9A413B121377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10850",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-01T14:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en los instaladores del controlador ART EX para ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 12 de abril de 2017, 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 12 de abril de 2017, 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 3 de noviembre de 2017, 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 26 de mayo de 2017, 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 25 de agosto de 2015, 08:51 UTC.) permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:apeosport-vi:c2271:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBA07D9-E4B8-42E9-BA2B-9EC1A2618524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:apeosport-vi:c3371:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45F8CC7-1945-4828-87D0-6056075D11D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:apeosport-vi:c4471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D6C68A-8B63-441E-9ED3-CE7FE854D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:apeosport-vi:c5571:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8E8F80-B567-4386-9563-F5774B57738D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:apeosport-vi:c6671:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DEB232-7CC1-49D1-9097-617C4C8D7E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:apeosport-vi:c7771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5709EB00-593F-4B82-9DB9-DF68C24CD6E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:docucentre-vi:c2271:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B77A6D-6B3B-43C9-A119-0EE0806EE6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:docucentre-vi:c3371:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA19720-37CD-4C00-89FC-EC26E11CE375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:docucentre-vi:c4471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219EF658-013B-44D6-A338-9F45B96898E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:docucentre-vi:c5571:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7C9A55-D9E2-4DA9-9739-6CF1DCAC5011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:docucentre-vi:c6671:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B00442C-5B00-4BDB-9B7F-C52768E9A97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujifilm:docucentre-vi:c7771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB1978C-5209-4655-9856-C94B22914C0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10851",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-01T14:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el instalador de ContentsBridge Utility para Windows en su versión 7.4.0 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujixerox:contentsbridge_utility:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.0",
            "matchCriteriaId" : "5363A7EC-F8DB-4DFC-A48F-C782B9E08A20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN09769017/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T16:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path."
      }, {
        "lang" : "es",
        "value" : "La función tcp_disconnect en net/ipv4/tcp.c en el kernel de Linux en versiones anteriores a la 4.12 permite que usuarios locales provoquen una denegación de servicio allows local users to cause a denial of service (error __tcp_select_window de división por cero y bloqueo del sistema) desencadenando una desconexión en una ruta de código tcp_recvmsg determinada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.12",
            "matchCriteriaId" : "13332751-6BF4-4D8A-A5D2-62A8AF6C1F92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=499350a5a6e7512d9ed369ed63a4244b6536f4f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/499350a5a6e7512d9ed369ed63a4244b6536f4f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/netdev%40vger.kernel.org/msg186255.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=499350a5a6e7512d9ed369ed63a4244b6536f4f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/499350a5a6e7512d9ed369ed63a4244b6536f4f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/netdev%40vger.kernel.org/msg186255.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T17:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface)."
      }, {
        "lang" : "es",
        "value" : "HiveManager Classic en su versión 8.1r1 permite la ejecución arbitraria de código JSP modificando un archivo de recuperación antes de una restauración. Esto se debe a que la característica de restauración no valida nombres de ruta en el archivo. Un atacante local autenticado -incluso restringido como inquilino- puede añadir un jsp en HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (se expondrá en la interfaz web)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aerohive:hivemanager_classic:8.0r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3FE92F-4676-41F3-9D7F-A3A6ECC5B10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aerohive:hivemanager_classic:8.1r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23389E4E-A98A-4D8D-9335-292451BD4AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theguly/CVE-2017-14105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theguly/CVE-2017-14105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T17:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive."
      }, {
        "lang" : "es",
        "value" : "La función _zip_read_eocd64 en zip_open.c en libzip en versiones anteriores a la 1.3.0 no gestiona correctamente los registros EOCD, lo que permite que atacantes remotos provoquen una denegación de servicio (error de asignación de memoria en _zip_cdir_grow en zip_dirent.c) mediante un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libzip:libzip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "977BC6AD-09AF-4808-BBA3-352B6A932B59"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nih-at/libzip/commit/9b46957ec98d85a572e9ef98301247f39338a3b5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nih-at/libzip/commit/9b46957ec98d85a572e9ef98301247f39338a3b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "NetApp Clustered Data ONTAP 8.3.x en versiones anteriores a la 8.3.2P12 permite que atacantes remotos autenticados ejecuten código arbitrario en el controlador de almacenamiento mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A0EA35-0A5A-4610-958E-4CE41DDA0DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD92543B-9A32-4285-85D1-1925C3F4DEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104D9174-045F-457A-8C35-84B62ABD11DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.2p11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A6ADB0-FCA5-4258-BFE9-32FABA6290A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170831-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170831-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "NetApp Clustered Data ONTAP 8.3.x en versiones anteriores a la 8.3.2P12 permite que atacantes remotos autenticados lean datos en otras máquinas virtuales de almacenamiento (SVM) mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A0EA35-0A5A-4610-958E-4CE41DDA0DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD92543B-9A32-4285-85D1-1925C3F4DEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104D9174-045F-457A-8C35-84B62ABD11DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:8.3.2p11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A6ADB0-FCA5-4258-BFE9-32FABA6290A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170831-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170831-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ReadOneLayer en coders/xcf.c de ImageMagick 7.0.6-6 permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/656",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file."
      }, {
        "lang" : "es",
        "value" : "La función ReadVIFFImage en coders/viff.c de ImageMagick 7.0.6-6 permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un archivo VIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/653",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file."
      }, {
        "lang" : "es",
        "value" : "La función ReadBMPImage en coders/bmp.c de ImageMagick 7.0.6-6 permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un archivo BMP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV)."
      }, {
        "lang" : "es",
        "value" : "El método aesEncrypt en lib/SimpleSAML/Utils/Crypto.php en SimpleSAMLphp 1.14.x hasta la versión 1.14.11 facilita que los atacantes dependientes del contexto omitan el mecanismo de de protección de cifrado aprovechando el uso de los primeros 16 bytes de la clave secreta como vector de inicialización (IV)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CCD17F-ABF0-468F-8675-9E5793FC3B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158D36D6-CE08-4DBB-A390-1D92242418CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3A50E0-F98C-4414-910F-31CD8A73AE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC53A612-0089-4162-BC57-0FEC9BBE25C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D1B626-9458-4FA0-B3F6-C9882072B548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0138AEE-D6F3-4876-850A-F2F2727C54B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAC8D43-079D-4143-B44D-D30B0F0B53C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4396B3D7-8A38-44F3-AC91-3F2665DBE50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647A1484-6E5D-4E2D-8853-B42B1BF73E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D19ADB-348C-48E0-8972-E0212664F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D01B211-1424-418B-BE1E-661A60CF27B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C9947E-FDC8-4C17-A4A0-10198555F9D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201703-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201703-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input."
      }, {
        "lang" : "es",
        "value" : "El origen de autenticación (1) Htpasswd en el módulo authcrypt y (2) la clase SimpleSAML_Session en SimpleSAMLphp 1.14.11 y anteriores permite que atacantes remotos lleven a cabo ataques de intervalos de canal lateral aprovechando el uso del operador de comparación estándar para comparar el material secreto con las entradas del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.11",
            "matchCriteriaId" : "3E88E434-E7D0-4CE5-B17C-77F0F9B63415"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201703-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201703-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured."
      }, {
        "lang" : "es",
        "value" : "SimpleSAMLphp 1.7.0 hasta la versión 1.14.10 permite que los atacantes obtengan información sensible, consigan acceso sin autorización o provoquen cualquier otro impacto sin especificar aprovechando la incorrecta generación persistente de NameID cuando no se configura correctamente un Identity Provider (IdP)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndIncluding" : "1.14.10",
            "matchCriteriaId" : "1F513BAE-A775-44DF-980A-1CEA3A25CA35"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201612-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201612-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities."
      }, {
        "lang" : "es",
        "value" : "El módulo InfoCard 1.0 para SimpleSAMLphp permite que los atacantes suplanten mensajes XML aprovechando una comprobación incorrecta de valores de retorno en las utilidades de validación de firmas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:infocard_module:1.0:*:*:*:*:simplesamlphp:*:*",
            "matchCriteriaId" : "73147799-BEC2-42C5-A2DC-987218F2704A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201612-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201612-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-01T21:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session."
      }, {
        "lang" : "es",
        "value" : "NetApp OnCommand Unified Manager para Clustered Data ONTAP en versiones anteriores a la 7.2P1 no establece la marca segura para una cookie sin especificar en una sesión HTTPS, lo que facilita que atacantes remotos capturen esta cookie interceptando su transmisión en una sesión HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2",
            "matchCriteriaId" : "A041DC6E-BB51-4BAE-8C71-FCB6359FC705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170831-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/NTAP-20170831-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-02T16:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash."
      }, {
        "lang" : "es",
        "value" : "En el controlador de canal pjsip (res_pjsip) en Asterisk 13.x en versiones anteriores a la 13.17.1 y 14.x en versiones anteriores a la 14.6.1, una URI tel cuidadosamente manipulada en un encabezado From, To, o Contact podría provocar el bloqueo de Asterisk."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E7D1238A-A8D2-485E-81FD-46038A883EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E93A7967-9A04-424A-BDDB-A2B8289B9AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F75C9FF-6F95-4F6A-B683-FE2BEDE3AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "68226156-42ED-4F0E-93E1-02DD57E582B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EB385E-28B5-4259-9431-99E1F32D61B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C0FF1B-6188-4181-A139-1806328762BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "890EBB8C-989B-4344-AC03-62B399076008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121EACD3-D5E3-4691-8024-95996865BB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136D6508-660E-410D-829A-7DD452BF8819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B23D17-7356-4D37-8C73-E87896D1335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8A6CB-D236-4AB3-8476-C2D34DB7EF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599833A2-CBE9-479B-8A6E-AF79C5EED1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B55719B3-7325-47E1-8D16-3F34B1F44385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B870B3B7-E8DC-45A2-8FA4-657D005D00E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C91E9A3B-54EB-4819-94DD-30F7D0C90047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47189DF9-8E57-4BA6-9F52-B7A8229AE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84AAFA3C-3CCD-4615-9725-169C303CF18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C39FA-EF1A-4F2B-87A0-A00BAE73C6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D1211-0B07-47B9-AB7A-E820E2B29561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84202BAF-29E1-472B-B11F-B73F6A8891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7120D-E6A0-4801-A1CC-3E143896EE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF2A83D-D9AE-441D-8D4E-335BF9D28A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5C1479-A540-4B7D-B00C-BD35EEC83BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC12556C-5E82-47D7-87E5-FBDC01A920DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461C1D2D-C4C1-4FF8-8231-38A2505F3523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66595711-8573-4A9B-A8FE-4943E3097AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FE3D4-A0B9-475A-9B89-B0222283A6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9670B5AC-CBD1-484C-90F8-69B1A60B6054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5794B6-246C-415E-8E20-56447F152488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726CA39-A763-4422-B59E-E9E12518EA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96EB57-835A-45B4-82F5-31F925A85629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206F1DC9-9E8F-4497-A354-4A14711993DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D428364-E2AD-4BC6-9329-71793BC0EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08963910-E0BD-4487-B669-60E0BFA79863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B16D04-3808-4380-8F64-0C36B185C1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BD16A9-24BC-4FC1-81BA-A6D1FEF38D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BAAD53-DE75-41CA-BF60-C0363029D3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC383B3-27EF-4C37-94BE-F0D41B34CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7824B34-06C3-403B-B6F3-C850D54438EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17E86941-98F6-45A5-8646-6876F74D909F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB27C0-C74E-4E6A-AA63-09CFE73C2EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C443A3B-DF96-4A68-B046-DE13689CA974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3AC9AE-288C-4F0E-BF15-C3F4AF09D8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "796A6021-9FCA-4354-A47C-7500C363C168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9D073-195F-4C2A-932E-7F027710DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604E58C8-9B81-4992-8993-4A6CB876EE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077C4CB8-1FDE-45D3-82E6-CE09A22809B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDB96CA-5AAE-4B39-8E01-2E72E3B476AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB33EC3-CDE0-40BD-B269-512AE074D278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363FA95F-03EF-4D6A-A40D-76D285D16255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA96DC31-4BAC-4C5A-923C-EBBFFC7ABB52"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C949D5F5-6C0B-4B17-85B6-3A77D08CF967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D413741-BDB7-496D-A01B-75E2A98FDB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "29130F7F-DE00-43E1-A4A6-8F1F95D5CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E94EC0-F577-4B2B-8B11-DC76278CDD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "101AD474-9B89-483D-84E8-08012677C55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57E41F6-C2CF-4183-A78A-9531A88FB65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F9BB8-F951-427E-B770-69C2ACEBDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4CE405-E923-4C9C-849A-D1031C4DB493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C039C0CE-9C9C-4D85-8D7C-574DCF9D920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B2F2CC-18C3-46E7-8E7F-970622A710C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04ECDFF1-9718-4FAE-B45B-4F8CCA82829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C4DA60-5701-4BD0-B2F9-D93B9E64111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B12834D-2AF1-4AD1-AB23-859CAA5D3210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89036D04-EA04-4041-9694-6768478D35F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19070D3-9F03-43C7-9F31-9A54BD5F2441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BAA74-50A8-4087-8FF8-7C5922121319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D29C253-B403-4B00-A626-3E3A920DC018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9D8FA2-21EA-4384-8001-118DA7C959F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3368DE88-7009-46A0-93F4-4D52BAD3D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "26586127-B68B-4476-8182-C49B1B1DCDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EFDCC-983E-4227-9FD5-456C16610BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA7DBAD-BCA6-47D1-A92E-4EB7941F55F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "02C6C827-97A6-4287-8B3E-DE29054242B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4F7C1-BB82-44BA-BBFD-9F660330EC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FCA146-5A72-4746-BE23-63271FBC4D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C90BB-C3FE-4A75-B739-0236C4256F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BD9466-0BC9-4B4D-928F-240CD46D306C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06F456AD-19D3-49EF-82B1-07370F6499AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24A9997E-D0DC-45B0-B4DB-308667FA820E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26202E79-98E0-4533-B4AE-1ABB2477F5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7384F-DF1B-4ED7-B1D5-885B95774DDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100583",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/873909",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27152",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/873909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-02T16:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data disclosure (media takeover in the RTP stack) is possible with careful timing by an attacker. The \"strictrtp\" option in rtp.conf enables a feature of the RTP stack that learns the source address of media for a session and drops any packets that do not originate from the expected address. This option is enabled by default in Asterisk 11 and above. The \"nat\" and \"rtp_symmetric\" options (for chan_sip and chan_pjsip, respectively) enable symmetric RTP support in the RTP stack. This uses the source address of incoming media as the target address of any sent media. This option is not enabled by default, but is commonly enabled to handle devices behind NAT. A change was made to the strict RTP support in the RTP stack to better tolerate late media when a reinvite occurs. When combined with the symmetric RTP support, this introduced an avenue where media could be hijacked. Instead of only learning a new address when expected, the new code allowed a new source address to be learned at all times. If a flood of RTP traffic was received, the strict RTP support would allow the new address to provide media, and (with symmetric RTP enabled) outgoing traffic would be sent to this new address, allowing the media to be hijacked. Provided the attacker continued to send traffic, they would continue to receive traffic as well."
      }, {
        "lang" : "es",
        "value" : "En res/res_rtp_asterisk.c en Asterisk 11.x en versiones anteriores a la 11.25.2, 13.x en versiones anteriores a la 13.17.1, y 14.x en versiones anteriores a la 14.6.1 y Certified Asterisk 11.x en versiones anteriores a la 11.6-cert17 y 13.x en versiones anteriores a la 13.13-cert5, es posible divulgar datos sin autorización si un atacante ataca en el momento adecuado. La opción \"strictrtp\" en rtp.conf habilita una característica de la pila RTP que aprende la dirección de origen de los medios para una sesión y coloca cualquier paquete que no se haya originado a partir de la dirección esperada. Esta opción está activda por defecto en Asterisk 11 y superiores. Las opciones \"nat\" y \"rtp_symmetric\" (para chan_sip y chan_pjsip, respectivamente) permiten el soporte RTP simétrico en la pila RTP. Esto emplea la dirección de origen de medios entrantes como dirección de destino de cualquier medio enviado. Esta opción no está activada por defecto, pero suele estar habilitada para gestionar dispositivos tras NAT. Se ha realizado un cambio en el soporte RTP estricto en la pila RTP para tolerar mejor los medios tardíos cuando ocurre una reinvitación. Cuando se combina con el soporte RTP simétrico, esto introdujo una avenida en la que se podía secuestrar medios. En vez de solo aprender una nueva dirección cuando se espera, el nuevo código permitía una nueva dirección de origen que debía ser aprendida en todo momento. Si se recibe un flujo de tráfico RTP, el soporte RTP estricto permitiría que la nueva dirección proporcionase medios, y (con RTP simétrico habilitado) el tráfico saliente sería enviado a esta nueva dirección, permitiendo el secuestro de los medios. Si el atacante continúa enviando tráfico, también seguiría recibiéndolo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E7D1238A-A8D2-485E-81FD-46038A883EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E93A7967-9A04-424A-BDDB-A2B8289B9AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F75C9FF-6F95-4F6A-B683-FE2BEDE3AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "68226156-42ED-4F0E-93E1-02DD57E582B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EB385E-28B5-4259-9431-99E1F32D61B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C0FF1B-6188-4181-A139-1806328762BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "890EBB8C-989B-4344-AC03-62B399076008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121EACD3-D5E3-4691-8024-95996865BB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136D6508-660E-410D-829A-7DD452BF8819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B23D17-7356-4D37-8C73-E87896D1335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8A6CB-D236-4AB3-8476-C2D34DB7EF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599833A2-CBE9-479B-8A6E-AF79C5EED1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B55719B3-7325-47E1-8D16-3F34B1F44385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B870B3B7-E8DC-45A2-8FA4-657D005D00E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C91E9A3B-54EB-4819-94DD-30F7D0C90047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47189DF9-8E57-4BA6-9F52-B7A8229AE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84AAFA3C-3CCD-4615-9725-169C303CF18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C39FA-EF1A-4F2B-87A0-A00BAE73C6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D1211-0B07-47B9-AB7A-E820E2B29561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84202BAF-29E1-472B-B11F-B73F6A8891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7120D-E6A0-4801-A1CC-3E143896EE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF2A83D-D9AE-441D-8D4E-335BF9D28A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5C1479-A540-4B7D-B00C-BD35EEC83BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC12556C-5E82-47D7-87E5-FBDC01A920DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461C1D2D-C4C1-4FF8-8231-38A2505F3523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66595711-8573-4A9B-A8FE-4943E3097AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FE3D4-A0B9-475A-9B89-B0222283A6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9670B5AC-CBD1-484C-90F8-69B1A60B6054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5794B6-246C-415E-8E20-56447F152488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726CA39-A763-4422-B59E-E9E12518EA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96EB57-835A-45B4-82F5-31F925A85629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206F1DC9-9E8F-4497-A354-4A14711993DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D428364-E2AD-4BC6-9329-71793BC0EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08963910-E0BD-4487-B669-60E0BFA79863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B16D04-3808-4380-8F64-0C36B185C1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BD16A9-24BC-4FC1-81BA-A6D1FEF38D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BAAD53-DE75-41CA-BF60-C0363029D3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC383B3-27EF-4C37-94BE-F0D41B34CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7824B34-06C3-403B-B6F3-C850D54438EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17E86941-98F6-45A5-8646-6876F74D909F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB27C0-C74E-4E6A-AA63-09CFE73C2EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C443A3B-DF96-4A68-B046-DE13689CA974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3AC9AE-288C-4F0E-BF15-C3F4AF09D8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "796A6021-9FCA-4354-A47C-7500C363C168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9D073-195F-4C2A-932E-7F027710DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604E58C8-9B81-4992-8993-4A6CB876EE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077C4CB8-1FDE-45D3-82E6-CE09A22809B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDB96CA-5AAE-4B39-8E01-2E72E3B476AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB33EC3-CDE0-40BD-B269-512AE074D278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363FA95F-03EF-4D6A-A40D-76D285D16255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA96DC31-4BAC-4C5A-923C-EBBFFC7ABB52"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C949D5F5-6C0B-4B17-85B6-3A77D08CF967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D413741-BDB7-496D-A01B-75E2A98FDB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "29130F7F-DE00-43E1-A4A6-8F1F95D5CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E94EC0-F577-4B2B-8B11-DC76278CDD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "101AD474-9B89-483D-84E8-08012677C55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57E41F6-C2CF-4183-A78A-9531A88FB65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F9BB8-F951-427E-B770-69C2ACEBDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4CE405-E923-4C9C-849A-D1031C4DB493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C039C0CE-9C9C-4D85-8D7C-574DCF9D920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B2F2CC-18C3-46E7-8E7F-970622A710C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04ECDFF1-9718-4FAE-B45B-4F8CCA82829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C4DA60-5701-4BD0-B2F9-D93B9E64111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B12834D-2AF1-4AD1-AB23-859CAA5D3210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89036D04-EA04-4041-9694-6768478D35F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19070D3-9F03-43C7-9F31-9A54BD5F2441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BAA74-50A8-4087-8FF8-7C5922121319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D29C253-B403-4B00-A626-3E3A920DC018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9D8FA2-21EA-4384-8001-118DA7C959F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3368DE88-7009-46A0-93F4-4D52BAD3D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "26586127-B68B-4476-8182-C49B1B1DCDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EFDCC-983E-4227-9FD5-456C16610BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA7DBAD-BCA6-47D1-A92E-4EB7941F55F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "02C6C827-97A6-4287-8B3E-DE29054242B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4F7C1-BB82-44BA-BBFD-9F660330EC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FCA146-5A72-4746-BE23-63271FBC4D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C90BB-C3FE-4A75-B739-0236C4256F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BD9466-0BC9-4B4D-928F-240CD46D306C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06F456AD-19D3-49EF-82B1-07370F6499AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24A9997E-D0DC-45B0-B4DB-308667FA820E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26202E79-98E0-4533-B4AE-1ABB2477F5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7384F-DF1B-4ED7-B1D5-885B95774DDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53B8453-F35A-49BE-8129-774BADF71BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB0C07E-DA2F-4169-848D-C3315CDC1CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "410C43E6-5912-4C22-A592-7CF94402EEB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D50A355E-1B55-4DD2-8100-EB81AA6FC40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF4230-EFEB-45EC-9C96-0262B4A3E459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5234531C-F69A-4B94-A480-147734206C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321C1066-6800-4488-A7C4-BE91FF738453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B51588-50A2-40B2-A007-06F57D38C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE2B00C-6AC0-4166-8A25-EFC42CE7F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD404B4-2B0A-4D7A-8CF6-E2C6B4BACBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "617FC4AF-D152-4EE1-828D-C2A6AD0DFD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3FE6DC-17FD-4CEE-BDFB-9D4685640381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEB6C2-0A6D-4434-8446-CB8605CD3B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1548C574-CD51-49F6-91B1-B06C504000E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE4127D-8123-4408-86D3-08168A4501B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8836F348-66DF-43BC-9962-946018D13127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1453BB31-D674-4A05-AB2A-2502D127C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868865A1-E074-4DB0-A119-D24C5C53FEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1794440C-7068-4673-9142-6221B8A39E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CF286B-3377-4AE9-A7B9-8535641D639A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3D89C7-909F-419A-9EE8-A1F0D02934EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EC8D9D-3483-4080-8000-496343BC8BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6695F632-6AC4-400F-B513-280304ABC1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A3423C40-240A-4237-8B0F-A4B4ED421C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03298D9F-CFB8-48F9-BD0C-8A0BEB0760C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "87FCBE6A-C1CD-48EF-A435-4CEADD46C917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "42E0E639-70A2-41EE-9B34-A9223D1958AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32E84D64-0CB8-46BF-BD3F-8CA2E0CE4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70420A8-8571-4528-98E1-72BE00270C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A276363F-F897-4E6D-9D55-5F5AA73DEE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "38230656-6242-4D24-AA67-F42A6FA2FC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "20ED9FC3-5E56-4AE7-903F-267CAE7F2CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "84F88075-9935-45BF-88B7-21ACE8AAB314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB16D9D6-A2F6-4C4B-B364-1B63B1FFB5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "283793E4-0AE8-48D9-ABCF-70E44FE55C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F79D5F-EB28-417A-86DF-053D6EDBA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A036F91-70E0-4E97-9896-EEE97BE3C20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92ECBCD-1EE3-498A-B3A4-22BF8EFD2EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EABFC3-24FA-4441-9F2B-650D90AE5CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA61A22-3DD0-46A3-8C13-F25F4F03FD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2026FD07-103C-4691-AFA4-88C490382F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "791700CD-E007-489E-9BC6-37025CAA8144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65607103-4284-430A-8212-AC1DCFFFA778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4061B4C7-8315-450C-866A-C4F3A6BCB1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EA7154-7F08-4E43-9270-E617632230AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00099DC9-D437-429B-9D08-F0DFA4942A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "4149F36C-D455-415F-93D7-F92EEE41419D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC51129-8F38-4505-90FB-4FFDED45BABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA571E0-B513-47AA-95BE-EB4DD2AA91E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89504BDC-82F7-4813-9C1E-456C9ACC6FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118C550E-79A8-431E-BADB-710EEEEDC6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "96C7950F-41D1-46B5-BA62-E8450CB81244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A32ECC-E208-4834-8EF7-FEF7A3495041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6BC60-23F5-46A1-83F8-F4BCDEF196EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3E0D41-2E6E-4294-8E56-1A738A7F9AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D16109B8-4CDF-46FC-9AD9-A158E532791B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCAA174-3CA3-49DB-BA19-D2BCF4F8953F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4D1A5A-99A3-4D23-B40C-BBE11EA5B325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5EE428-98FF-42BC-9F61-311327B8F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2FD08-D761-410F-9804-A76F0DD77349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74B34C21-D90B-4E32-BBA6-7773DB663F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "90996D49-5731-4F7D-9DBE-D0599A5D85A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C91C8D-707D-443D-985F-FA3EDB181208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EA2E1-B178-467F-BBC2-1B2ECEDE662A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E00A6C7-D3CF-40B5-A586-06E09C5AA1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E25D043-EE0D-49A5-A468-03EDD9CFE0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.22.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA17630B-444D-4AE4-B582-F8106C4EEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A20D6B-62FE-440D-BC58-F764AAA5562B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AE880B-2FA2-42BB-BEBF-771E18FDA141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC982D1B-B018-474E-94BE-2157C21276C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26815C8-8E43-4C26-947B-986EFFF0ACE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8213E-650F-4C95-B9E5-753E7784EF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B8F794-A7F2-4B8F-B36C-55E61DC6939A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7FC3A1-AFB0-4280-BFC5-68F61CFD0AF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "322694EF-B086-4BE7-A9F0-41D3A9C245FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "781AC882-80DD-4176-8E4F-220343B15F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "770CCEEA-B121-454B-BD36-3FC1B262998A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEBE67E-A3E5-4BC9-8740-4F51123CC9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:*:*:*:*",
            "matchCriteriaId" : "CD094E25-5E10-4564-9A4D-BE5A14C2815F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert12:*:*:*:*:*:*",
            "matchCriteriaId" : "B6873174-0109-402F-ADCA-B1635F441FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert13:*:*:*:*:*:*",
            "matchCriteriaId" : "B529CD2F-2958-44E6-839A-3E4FE392B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14:*:*:*:*:*:*",
            "matchCriteriaId" : "B961BF46-DEF7-4804-AF9A-D13F160FA213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC801D4-7A69-4855-8757-24ACE70D784B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "60C2B8F0-7722-48B5-89AA-435F52CBC0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert15:*:*:*:*:*:*",
            "matchCriteriaId" : "B9305CA8-835C-4DFF-9CD8-C1072BACED42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert16:*:*:*:*:*:*",
            "matchCriteriaId" : "B3729EA6-3949-4854-80D4-DC5587161FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "013B1940-C45D-4FE2-8B49-D92B8F1A9048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "A98B11B5-B8E2-4903-B4F7-3AC23751AE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D60B24-C509-49C3-87A9-49D05CB44183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1F9978-44E7-4D39-BEC6-5C6DB7F893E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "69BA61A8-2A95-4800-BB4E-692BA4321A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "C481D8B0-622D-491D-B292-717B0369B507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8390D4-F339-43FF-9F2B-71331D4ECB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:*:*:*:*",
            "matchCriteriaId" : "4490B76B-FA41-43DB-9A31-6B3F220F1907"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "0449B393-FA4E-4664-8E16-BE6B94E4872F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED8E415-64FA-4E77-A423-3478E606E58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E13CA1DD-B384-4408-B4EC-1AA829981016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE28BD0A-EA30-4265-A5D6-0390F3558D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F82048D-C65F-4439-BBE4-2D4A9B07EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "6447B77F-3770-4703-9188-B7344ED98E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "5C103924-1D61-4090-8ED5-4731371B2B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "08F87B09-3867-4CAE-BAD7-2206CD6CAF97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039251",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/873907",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27013",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rtpbleed.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/873907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rtpbleed.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-02T16:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. The app_minivm module has an \"externnotify\" program configuration option that is executed by the MinivmNotify dialplan application. The application uses the caller-id name and number as part of a built string passed to the OS shell for interpretation and execution. Since the caller-id name and number can come from an untrusted source, a crafted caller-id name or number allows an arbitrary shell command injection."
      }, {
        "lang" : "es",
        "value" : "En Asterisk 11.x en versiones anteriores a la 11.25.2, 13.x en versiones anteriores a la 13.17.1, y 14.x en versiones anteriores a la 14.6.1 y Certified Asterisk 11.x en versiones anteriores a la 11.6-cert17 y 13.x en versiones anteriores a la 13.13-cert5, es ejecutar comandos sin autorización. El módulo app_minivm tiene una opción de configuración de programa \"externnotify\" que es ejecutada por la aplicación dialplan MinivmNotify. La aplicación emplea el nombre y el número caller-id como parte de una cadena integrada pasada al shell del sistema operativopara su interpretación y ejecución. Debido a que el nombre y el número caller-id pueden proceder de una fuente no confiable, un nombre o número caller-id permite una inyección arbitraria de comandos shell."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E7D1238A-A8D2-485E-81FD-46038A883EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E93A7967-9A04-424A-BDDB-A2B8289B9AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F75C9FF-6F95-4F6A-B683-FE2BEDE3AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "68226156-42ED-4F0E-93E1-02DD57E582B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EB385E-28B5-4259-9431-99E1F32D61B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C0FF1B-6188-4181-A139-1806328762BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "890EBB8C-989B-4344-AC03-62B399076008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121EACD3-D5E3-4691-8024-95996865BB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136D6508-660E-410D-829A-7DD452BF8819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B23D17-7356-4D37-8C73-E87896D1335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8A6CB-D236-4AB3-8476-C2D34DB7EF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599833A2-CBE9-479B-8A6E-AF79C5EED1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B55719B3-7325-47E1-8D16-3F34B1F44385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B870B3B7-E8DC-45A2-8FA4-657D005D00E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C91E9A3B-54EB-4819-94DD-30F7D0C90047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47189DF9-8E57-4BA6-9F52-B7A8229AE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84AAFA3C-3CCD-4615-9725-169C303CF18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C39FA-EF1A-4F2B-87A0-A00BAE73C6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D1211-0B07-47B9-AB7A-E820E2B29561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84202BAF-29E1-472B-B11F-B73F6A8891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7120D-E6A0-4801-A1CC-3E143896EE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF2A83D-D9AE-441D-8D4E-335BF9D28A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5C1479-A540-4B7D-B00C-BD35EEC83BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC12556C-5E82-47D7-87E5-FBDC01A920DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461C1D2D-C4C1-4FF8-8231-38A2505F3523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66595711-8573-4A9B-A8FE-4943E3097AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FE3D4-A0B9-475A-9B89-B0222283A6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9670B5AC-CBD1-484C-90F8-69B1A60B6054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5794B6-246C-415E-8E20-56447F152488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726CA39-A763-4422-B59E-E9E12518EA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96EB57-835A-45B4-82F5-31F925A85629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206F1DC9-9E8F-4497-A354-4A14711993DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D428364-E2AD-4BC6-9329-71793BC0EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08963910-E0BD-4487-B669-60E0BFA79863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B16D04-3808-4380-8F64-0C36B185C1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BD16A9-24BC-4FC1-81BA-A6D1FEF38D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BAAD53-DE75-41CA-BF60-C0363029D3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC383B3-27EF-4C37-94BE-F0D41B34CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7824B34-06C3-403B-B6F3-C850D54438EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17E86941-98F6-45A5-8646-6876F74D909F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB27C0-C74E-4E6A-AA63-09CFE73C2EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C443A3B-DF96-4A68-B046-DE13689CA974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3AC9AE-288C-4F0E-BF15-C3F4AF09D8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "796A6021-9FCA-4354-A47C-7500C363C168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9D073-195F-4C2A-932E-7F027710DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604E58C8-9B81-4992-8993-4A6CB876EE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077C4CB8-1FDE-45D3-82E6-CE09A22809B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDB96CA-5AAE-4B39-8E01-2E72E3B476AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB33EC3-CDE0-40BD-B269-512AE074D278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363FA95F-03EF-4D6A-A40D-76D285D16255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA96DC31-4BAC-4C5A-923C-EBBFFC7ABB52"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C949D5F5-6C0B-4B17-85B6-3A77D08CF967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D413741-BDB7-496D-A01B-75E2A98FDB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "29130F7F-DE00-43E1-A4A6-8F1F95D5CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E94EC0-F577-4B2B-8B11-DC76278CDD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "101AD474-9B89-483D-84E8-08012677C55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57E41F6-C2CF-4183-A78A-9531A88FB65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F9BB8-F951-427E-B770-69C2ACEBDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4CE405-E923-4C9C-849A-D1031C4DB493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C039C0CE-9C9C-4D85-8D7C-574DCF9D920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B2F2CC-18C3-46E7-8E7F-970622A710C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04ECDFF1-9718-4FAE-B45B-4F8CCA82829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C4DA60-5701-4BD0-B2F9-D93B9E64111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B12834D-2AF1-4AD1-AB23-859CAA5D3210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89036D04-EA04-4041-9694-6768478D35F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19070D3-9F03-43C7-9F31-9A54BD5F2441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BAA74-50A8-4087-8FF8-7C5922121319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D29C253-B403-4B00-A626-3E3A920DC018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9D8FA2-21EA-4384-8001-118DA7C959F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3368DE88-7009-46A0-93F4-4D52BAD3D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "26586127-B68B-4476-8182-C49B1B1DCDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EFDCC-983E-4227-9FD5-456C16610BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA7DBAD-BCA6-47D1-A92E-4EB7941F55F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "02C6C827-97A6-4287-8B3E-DE29054242B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4F7C1-BB82-44BA-BBFD-9F660330EC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FCA146-5A72-4746-BE23-63271FBC4D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C90BB-C3FE-4A75-B739-0236C4256F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BD9466-0BC9-4B4D-928F-240CD46D306C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06F456AD-19D3-49EF-82B1-07370F6499AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24A9997E-D0DC-45B0-B4DB-308667FA820E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26202E79-98E0-4533-B4AE-1ABB2477F5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7384F-DF1B-4ED7-B1D5-885B95774DDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53B8453-F35A-49BE-8129-774BADF71BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB0C07E-DA2F-4169-848D-C3315CDC1CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "410C43E6-5912-4C22-A592-7CF94402EEB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D50A355E-1B55-4DD2-8100-EB81AA6FC40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF4230-EFEB-45EC-9C96-0262B4A3E459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5234531C-F69A-4B94-A480-147734206C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321C1066-6800-4488-A7C4-BE91FF738453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B51588-50A2-40B2-A007-06F57D38C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE2B00C-6AC0-4166-8A25-EFC42CE7F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD404B4-2B0A-4D7A-8CF6-E2C6B4BACBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "617FC4AF-D152-4EE1-828D-C2A6AD0DFD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3FE6DC-17FD-4CEE-BDFB-9D4685640381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEB6C2-0A6D-4434-8446-CB8605CD3B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1548C574-CD51-49F6-91B1-B06C504000E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE4127D-8123-4408-86D3-08168A4501B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8836F348-66DF-43BC-9962-946018D13127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1453BB31-D674-4A05-AB2A-2502D127C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868865A1-E074-4DB0-A119-D24C5C53FEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1794440C-7068-4673-9142-6221B8A39E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CF286B-3377-4AE9-A7B9-8535641D639A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3D89C7-909F-419A-9EE8-A1F0D02934EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EC8D9D-3483-4080-8000-496343BC8BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6695F632-6AC4-400F-B513-280304ABC1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A3423C40-240A-4237-8B0F-A4B4ED421C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03298D9F-CFB8-48F9-BD0C-8A0BEB0760C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "87FCBE6A-C1CD-48EF-A435-4CEADD46C917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "42E0E639-70A2-41EE-9B34-A9223D1958AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32E84D64-0CB8-46BF-BD3F-8CA2E0CE4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70420A8-8571-4528-98E1-72BE00270C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A276363F-F897-4E6D-9D55-5F5AA73DEE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "38230656-6242-4D24-AA67-F42A6FA2FC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "20ED9FC3-5E56-4AE7-903F-267CAE7F2CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "84F88075-9935-45BF-88B7-21ACE8AAB314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB16D9D6-A2F6-4C4B-B364-1B63B1FFB5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "283793E4-0AE8-48D9-ABCF-70E44FE55C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F79D5F-EB28-417A-86DF-053D6EDBA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A036F91-70E0-4E97-9896-EEE97BE3C20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92ECBCD-1EE3-498A-B3A4-22BF8EFD2EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EABFC3-24FA-4441-9F2B-650D90AE5CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA61A22-3DD0-46A3-8C13-F25F4F03FD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2026FD07-103C-4691-AFA4-88C490382F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "791700CD-E007-489E-9BC6-37025CAA8144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65607103-4284-430A-8212-AC1DCFFFA778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4061B4C7-8315-450C-866A-C4F3A6BCB1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EA7154-7F08-4E43-9270-E617632230AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00099DC9-D437-429B-9D08-F0DFA4942A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "4149F36C-D455-415F-93D7-F92EEE41419D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC51129-8F38-4505-90FB-4FFDED45BABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA571E0-B513-47AA-95BE-EB4DD2AA91E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89504BDC-82F7-4813-9C1E-456C9ACC6FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118C550E-79A8-431E-BADB-710EEEEDC6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "96C7950F-41D1-46B5-BA62-E8450CB81244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A32ECC-E208-4834-8EF7-FEF7A3495041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6BC60-23F5-46A1-83F8-F4BCDEF196EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3E0D41-2E6E-4294-8E56-1A738A7F9AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D16109B8-4CDF-46FC-9AD9-A158E532791B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCAA174-3CA3-49DB-BA19-D2BCF4F8953F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4D1A5A-99A3-4D23-B40C-BBE11EA5B325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5EE428-98FF-42BC-9F61-311327B8F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2FD08-D761-410F-9804-A76F0DD77349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74B34C21-D90B-4E32-BBA6-7773DB663F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "90996D49-5731-4F7D-9DBE-D0599A5D85A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C91C8D-707D-443D-985F-FA3EDB181208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EA2E1-B178-467F-BBC2-1B2ECEDE662A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E00A6C7-D3CF-40B5-A586-06E09C5AA1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E25D043-EE0D-49A5-A468-03EDD9CFE0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.22.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA17630B-444D-4AE4-B582-F8106C4EEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A20D6B-62FE-440D-BC58-F764AAA5562B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AE880B-2FA2-42BB-BEBF-771E18FDA141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC982D1B-B018-474E-94BE-2157C21276C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26815C8-8E43-4C26-947B-986EFFF0ACE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8213E-650F-4C95-B9E5-753E7784EF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B8F794-A7F2-4B8F-B36C-55E61DC6939A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7FC3A1-AFB0-4280-BFC5-68F61CFD0AF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "322694EF-B086-4BE7-A9F0-41D3A9C245FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "781AC882-80DD-4176-8E4F-220343B15F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "770CCEEA-B121-454B-BD36-3FC1B262998A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEBE67E-A3E5-4BC9-8740-4F51123CC9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:*:*:*:*",
            "matchCriteriaId" : "CD094E25-5E10-4564-9A4D-BE5A14C2815F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert12:*:*:*:*:*:*",
            "matchCriteriaId" : "B6873174-0109-402F-ADCA-B1635F441FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert13:*:*:*:*:*:*",
            "matchCriteriaId" : "B529CD2F-2958-44E6-839A-3E4FE392B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14:*:*:*:*:*:*",
            "matchCriteriaId" : "B961BF46-DEF7-4804-AF9A-D13F160FA213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC801D4-7A69-4855-8757-24ACE70D784B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "60C2B8F0-7722-48B5-89AA-435F52CBC0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert15:*:*:*:*:*:*",
            "matchCriteriaId" : "B9305CA8-835C-4DFF-9CD8-C1072BACED42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert16:*:*:*:*:*:*",
            "matchCriteriaId" : "B3729EA6-3949-4854-80D4-DC5587161FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "013B1940-C45D-4FE2-8B49-D92B8F1A9048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "A98B11B5-B8E2-4903-B4F7-3AC23751AE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D60B24-C509-49C3-87A9-49D05CB44183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1F9978-44E7-4D39-BEC6-5C6DB7F893E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "69BA61A8-2A95-4800-BB4E-692BA4321A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "C481D8B0-622D-491D-B292-717B0369B507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8390D4-F339-43FF-9F2B-71331D4ECB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:*:*:*:*",
            "matchCriteriaId" : "4490B76B-FA41-43DB-9A31-6B3F220F1907"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "0449B393-FA4E-4664-8E16-BE6B94E4872F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED8E415-64FA-4E77-A423-3478E606E58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E13CA1DD-B384-4408-B4EC-1AA829981016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE28BD0A-EA30-4265-A5D6-0390F3558D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F82048D-C65F-4439-BBE4-2D4A9B07EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "6447B77F-3770-4703-9188-B7344ED98E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "5C103924-1D61-4090-8ED5-4731371B2B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "08F87B09-3867-4CAE-BAD7-2206CD6CAF97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039252",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/873908",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27103",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/873908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-02T16:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets."
      }, {
        "lang" : "es",
        "value" : "RTPproxy hasta la versión 2.2.alpha.20160822 tiene una característica NAT que resulta en que no se determina correctamente la dirección IP y el número de puerto del destinatario legítimo de tráfico RTP, lo que permite que atacantes remotos obtengan información sensible o provoquen una denegación de servicio (interrupción de la comunicación) mediante paquetes RTP manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtpproxy:rtpproxy:*:alpha.20160822:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "4529ABC9-0034-496E-98E9-E21976F96893"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rtpbleed.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rtpbleed.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T19:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and the bdctest password, which allows remote attackers to obtain sensitive information (such as the Wi-Fi password) by leveraging knowledge of a hardware identifier, related to the Bulk Data Collection (BDC) mechanism defined in Broadband Forum technical reports."
      }, {
        "lang" : "es",
        "value" : "El firmware ATT U-verse 9.2.2h0d83 para Arris NVG589, NVG599 y otros dispositivos sin especificar, cuando el modo IP Passthrough no está en uso, configura un servicio sbdc.ha WAN TCP en el puerto 61001 con la cuenta bdctest y la contraseña bdctest, lo que permite que atacantes remotos obtengan información sensible (como la contraseña Wi-Fi) aprovechando el conocimiento de un identificador de hardware, relacionado con el mecanismo Bulk Data Collection (BDC) definido en los informes técnicos Broadband Forum."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1842B6DE-8E24-4B2C-BE3E-8E9447BDD3ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg589:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBA3A2E-9422-4951-916A-EC6F62165EBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg599:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D58B7B-3A60-4FBE-9B78-F1E3BB6EB584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T19:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access a \"Terminal shell v1.0\" service, and subsequently obtain unrestricted root privileges, by establishing an SSH session and then entering certain shell metacharacters and BusyBox commands."
      }, {
        "lang" : "es",
        "value" : "El firmware ATT U-verse 9.2.2h0d83 para dispositivos Arris NVG589 y NVG599, cuando el modo IP Passthrough no está en uso, configura inicios de sesión ssh-permanent-enable WAN SSH en la cuenta remotessh con la contraseña 5SaP9I26, lo que permite que los atacantes remotos accedan a un servicio \"Terminal shell v1.0\" y, posteriormente, obtengan privilegios root sin restricciones estableciendo una sesión SSH e introduciendo ciertos metacaracteres shell y comandos BusyBox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1842B6DE-8E24-4B2C-BE3E-8E9447BDD3ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg589:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBA3A2E-9422-4951-916A-EC6F62165EBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg599:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D58B7B-3A60-4FBE-9B78-F1E3BB6EB584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T19:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 and then installing new software, such as BusyBox with \"nc -l\" support."
      }, {
        "lang" : "es",
        "value" : "El firmware ATT U-verse 9.2.2h0d83 para el dispositivo Arris NVG599, cuando el modo IP Passthrough no está en uso, configura el acceso WAN a un servicio caserver https con la cuenta tech y una contraseña vacía, lo que permite que atacantes remotos obtengan privilegios root estableciendo una sesión en el puerto 49955 y, a continuación, instalando un nuevo software como BusyBox con soporte \"nc -l\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1842B6DE-8E24-4B2C-BE3E-8E9447BDD3ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg599:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D58B7B-3A60-4FBE-9B78-F1E3BB6EB584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T19:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \\x2a\\xce\\x01 followed by other predictable values."
      }, {
        "lang" : "es",
        "value" : "El firmware ATT U-verse 9.2.2h0d83 para los dispositivos Arris NVG589 and NVG599, cuando el modo IP Passthrough no está en uso, configura un servicio de proxy sin autenticar en el puerto WAN TCP 49152, lo que permite que atacantes remotos establezcan conexiones TCP arbitrarias en hosts de intranet mediante el envío de \\x2a\\xce\\x01 seguido por otros valores predecibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1842B6DE-8E24-4B2C-BE3E-8E9447BDD3ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg589:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBA3A2E-9422-4951-916A-EC6F62165EBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_nvg599:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D58B7B-3A60-4FBE-9B78-F1E3BB6EB584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.nomotion.net/blog/sharknatto/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T20:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\\tool_all\\tools\\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the host_list parameter to module/tool_all/select_tool.php."
      }, {
        "lang" : "es",
        "value" : "En la interfaz web EyesOfNetwork (también llamada eonweb) 5.1-0, module\\tool_all\\tools\\interface.php no restringe correctamente llamadas exec, lo que permite que atacantes remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el parámetro host_list en module/tool_all/select_tool.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kk.whitecell-club.org/index.php/archives/220/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://kk.whitecell-club.org/index.php/archives/220/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T20:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\\tool_all\\tools\\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter."
      }, {
        "lang" : "es",
        "value" : "En la interfaz web EyesOfNetwork (también llamada eonweb) 5.1-0, module\\tool_all\\tools\\snmpwalk.php no restringe correctamente llamadas popen, lo que permite que atacantes remotos ejecuten comandos arbitrarios mediante metacaracteres shell en un parámetro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kk.whitecell-club.org/index.php/archives/220/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://kk.whitecell-club.org/index.php/archives/220/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T20:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory."
      }, {
        "lang" : "es",
        "value" : "unrar 0.0.1 (también llamado unrar-free o unrar-gpl) cuenta con una vulnerabilidad de salto de directorio para archivos RAR v2: los nombres de ruta de tipo ../[nombre de archivo] se descomprimen en el directorio superior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9375EDD-F652-4A42-AC16-0C28FB47CE96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874059",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T20:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references."
      }, {
        "lang" : "es",
        "value" : "La función DecodeNumber en unrarlib.c en unrar versión 0.0.1 (también conocido como unrar-free o unrar-gpl) sufre un fallo de desviación de puntero NULL provocado por un archivo RAR manipulado. NOTA: esto puede ser lo mismo que uno de los varios casos de prueba en las referencias de CVE-2017-11189."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9375EDD-F652-4A42-AC16-0C28FB47CE96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874061",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-03T20:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp."
      }, {
        "lang" : "es",
        "value" : "unrar 0.0.1 (también llamado unrar-free o unrar-gpl) cuenta con una sobrelectura de búfer basada en pila en unrarlib.c, relacionado con ExtrFile y stricomp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9375EDD-F652-4A42-AC16-0C28FB47CE96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874060",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the \"Group Chat\" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by /itplus/FileStorage/302/shell.jsp."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Firewall Analyzer 12200 tiene una vulnerabilidad de subida de archivos sin restricción en la sección \"Group Chat\". Cualquier usuario podría subir archivos con cualquier extensión. Al subir un archivo PHP al servidor, un atacante podría hacer que se ejecute en el contexto del servidor, tal y como se puede ver en /itplus/FileStorage/302/shell.jsp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.2:12200:*:*:*:*:*:*",
            "matchCriteriaId" : "05955BD9-919D-4088-BD16-0C3BB81F354B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pitstop.manageengine.com/portal/kb/articles/latest-consolidated-patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pitstop.manageengine.com/portal/kb/articles/latest-consolidated-patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Participants Database plugin before 1.7.5.10 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin Participants Database en versiones anteriores a la 1.7.5.10 para WordPress tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnau:participants_database:1.7.5.10:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9A5F1B38-5746-4853-8FB2-A68D71EB8E07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://limbenjamin.com/articles/cve-2017-14126-participants-database-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wordpress.org/plugins/participants-database/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42618/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://limbenjamin.com/articles/cve-2017-14126-participants-database-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wordpress.org/plugins/participants-database/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42618/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en Ping Module en la interfaz web de los dispositivos Technicolor TD5336 OI_Fw_v7 permite que los atacantes remotos ejecuten comandos de sistema operativo arbitrario como root mediante metacaracteres shell en el parámetro pingAddr a mnt_ping.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:technicolor:td5336_firmware:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C3A299-0017-44C6-BAA2-AF6F366A363C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:technicolor:td5336:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B9FEE9-8063-4E62-B84A-26F31B262C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jordyf.me/2017/09/02/technicolor-pwn.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jordyf.me/2017/09/02/technicolor-pwn.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función decode_line_info en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basado en montículos read_1_byte y bloqueo de aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22059",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e8b60085eb3e6f2c41bc0c00c0d759fa7f72780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e8b60085eb3e6f2c41bc0c00c0d759fa7f72780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función read_section en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basado en montículos parse_comp_unit y bloqueo de aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22047",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e4f2723003859dc6b33ca0dadbc4a7659ebf1643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e4f2723003859dc6b33ca0dadbc4a7659ebf1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_elf_parse_attributes en elf-attrs.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basado en montículos _bfd_elf_attr_strdup y bloqueo de aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22058",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=2a143b99fc4a5094a9cf128f3184d8e6818c8229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=2a143b99fc4a5094a9cf128f3184d8e6818c8229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T20:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c."
      }, {
        "lang" : "es",
        "value" : "JasPer versiones 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 permite a los atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basado en montículos y fallo de aplicación) mediante una imagen manipulada relacionada con la función jas_image_ishomosamp en libjasper/base/jas_image.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8082B6B8-4CBC-44EB-801C-E7D60E28680C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T23:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI."
      }, {
        "lang" : "es",
        "value" : "enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py en el plugin webadmin para opendreambox 2.0.0 permite a los atacantes remotos ejecutar comandos de sistema operativo arbitrarios mediante metacaracteres shell en el parámetro command a la URI /script."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dreambox:opendreambox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75201AE6-6687-4639-9508-996952C69657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T23:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597."
      }, {
        "lang" : "es",
        "value" : "OpenCV (Open Source Computer Vision Library) 3.3 tiene un error de escritura fuera de los límites en la función FillColorRow1 en utils.cpp al leer un archivo de imagen utilizando cv::imread. NOTA: Esta vulnerabilidad existe debido a una solución incompleta para CVE-2017-12597."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A645C4-B81A-4204-917C-089D97F69813"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencv/opencv/issues/9443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/pull/9448",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/pull/9448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/opencv.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T23:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header."
      }, {
        "lang" : "es",
        "value" : "ReadWEBPImage en coders/webp.c en ImageMagick versión 7.0.6-5, presenta un error causado por una asignación de memoria excesiva, ya que depende solo de un campo longitud en una cabecera."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0DB591-61B5-4E3E-84F6-25FE4B32589B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/641",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T23:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-5 tiene una vulnerabilidad de fuga de memoria en ReadWEBPImage in coders/webp.c ya que la memoria no se libera en algunos casos de error, tal y como lo demuestran los errores VP8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0DB591-61B5-4E3E-84F6-25FE4B32589B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/639",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-04T23:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-2 tiene una vulnerabilidad de fuga de memoria en WriteMSLImage en coders/msl.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E47D35D-B2EB-4957-A0C8-7DE54233997F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T06:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a \"--\" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename."
      }, {
        "lang" : "es",
        "value" : "El archivo backend/comics/comics-document.c (también conocido como comic book backend) en versiones anteriores a la v3.24.1 de GNOME Evince permite que atacantes remotos ejecuten comandos arbitrarios utilizando un archivo .cbt, que es un archivo TAR que contiene un nombre de archivo que comienza con un substring de opción de línea de comandos \"--\". Esto ha sido demostrado con --checkpoint-action=exec=bash al principio del nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evince:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.24.0",
            "matchCriteriaId" : "9131D549-DC0E-48F3-96E9-5609E294B9C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4AB18C-40FC-4E48-830D-481A97B34256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D3235A-DB42-4868-90D9-712C3B3693AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E92F9B3-3841-4C05-88F0-CEB0735EA4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/128",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99597",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2388",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=784630",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/evince/commit/717df38fd8509bf883b70d680c9b1b3cf36732ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45824/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/46341/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=784630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/evince/commit/717df38fd8509bf883b70d680c9b1b3cf36732ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45824/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/46341/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T06:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\\0' characters."
      }, {
        "lang" : "es",
        "value" : "Libgedit.a en GNOME gedit hasta la versión 3.22.1 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) utilizando un archivo que comienza con múltiples caracteres ‘\\0’."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.22.1",
            "matchCriteriaId" : "54303254-1DFD-4272-AF8F-E06110C856D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=791037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017090008",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143983/libgedit.a-3.22.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=791037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017090008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143983/libgedit.a-3.22.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T06:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR."
      }, {
        "lang" : "es",
        "value" : "La llamada al sistema move_pages en mm/migrate.c en versiones anteriores a la 4.12.9 del kernel Linux no verifica correctamente el id de usuario del proceso objetivo. Esto permite que un atacante local aprenda la distribución de la memoria de un ejecutable setuid a pesar de la ASLR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.8",
            "matchCriteriaId" : "9B949AB6-FF3D-451E-8359-36D51A31987F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T07:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HelpDEZk 1.1.1 has SQL Injection in app\\modules\\admin\\controllers\\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function."
      }, {
        "lang" : "es",
        "value" : "HelpDEZk 1.1.1 contiene una inyección SQL en app\\modules\\admin\\controllers\\loginController.php mediante el PATH_INFO admin/login/getWarningInfo/id/, relacionada con la función selectWarning."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdezk:helpdezk:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8CA732-4397-4B0A-8EAE-533D3783AE32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/helpdezk_sql/helpdezk_sql_injection.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/helpdezk_sql/helpdezk_sql_injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T07:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\\app\\uploads\\helpdezk\\attachments\\ directory."
      }, {
        "lang" : "es",
        "value" : "HelpDEZk 1.1.1 permite que usuarios remotos autenticados ejecuten código PHP arbitrario subiendo un archivo adjunto en formato .php y solicitándolo posteriormente en el directorio helpdezk\\app\\uploads\\helpdezk\\attachments\\."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpdezk:helpdezk:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8CA732-4397-4B0A-8EAE-533D3783AE32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/helpdezk_file_upload/helpdezk_file_upload.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4ple/vulnerability/blob/master/helpdezk_file_upload/helpdezk_file_upload.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T07:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a \"POST / HTTP/1.1\" request."
      }, {
        "lang" : "es",
        "value" : "GoAhead en versiones de la 3.4.0 a la 3.6.5 presenta una desreferencia de puntero NULL en la función websDecodeUrl en http.c, lo que da lugar a un bloqueo en una petición \"POST / HTTP/1.1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DE3222-0FA8-49DE-8E94-AB3BC8816F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60001CE1-A452-49B4-9C27-D892B91078F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE3F237-3B0B-40B5-A3E3-E468883D6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAEAA94-A8FB-4D32-9D8A-E06F2F548FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B7280F-4FBF-4451-BAAF-E90068CDAB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168E900-DFA1-4D9C-AD08-9A1B876C6DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78418AE8-D5B3-4771-BFFD-DC28BBC42B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3BB240-A988-497F-82CE-F99C8438F0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B89AAB-1CBF-4862-A7AC-9DDEF026646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05918B61-7E62-40BA-9EF3-FB4DD2EC3BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5EE6D-A498-4C35-81F7-684E30845E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801889A1-C61C-4CC9-8B2A-46CF4E246978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF17ED0-EFA5-407E-9CCC-15543C2D194C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACEEDBF-0C89-46E7-9A00-9C4BD61DAE7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7EE03C-294B-485E-9CA4-5E0714A2939C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EBF002-17C3-4AD5-BDC3-B7643BEA5173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B4E67D-5883-43A5-85B2-1E8D8D157F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0D5BD-F1C0-4DA0-9BC2-AE8DA03F2204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2A0A7F-8516-4405-A8C8-B862E59DEAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A1B366-C737-43F7-A391-C28C434026C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shadow4u/goaheaddebug/blob/master/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadow4u/goaheaddebug/blob/master/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T16:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error por un paso (off-by-one) en opj_tcd_code_block_enc_allocate_data en lib/openjp2/tcd.c en OpenJPEG 2.2.0. La vulnerabilidad da lugar a una escritura fuera de límites que puede causar una denegación de servicio remota (desbordamiento de búfer basado en montículos que afecta a opj_mqc_flush en lib/openjp2/mqc.c y a opj_t1_encode_cblk en lib/openjp2/t1.c) o una posible ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5CD01A-5791-4D61-937C-4F3FF23C5C2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100633",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/afb308b9ccbe129608c9205cf3bb39bbefad90b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/982",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/afb308b9ccbe129608c9205cf3bb39bbefad90b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T16:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un caso de un valor cero que no se maneja correctamente en opj_j2k_set_cinema_parameters en lib/openjp2/j2k.c en OpenJPEG 2.2.0. La vulnerabilidad da lugar a una escritura fuera de límites que puede causar una denegación de servicio remota (desbordamiento de búfer basado en montículos que afecta a opj_write_bytes_LE en lib/openjp2/cio.c y a opj_j2k_write_sot en lib/openjp2/j2k.c) o una posible ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5CD01A-5791-4D61-937C-4F3FF23C5C2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/4241ae6fbbf1de9658764a80944dc8108f2b4154",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/985",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/4241ae6fbbf1de9658764a80944dc8108f2b4154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T17:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes."
      }, {
        "lang" : "es",
        "value" : "La función atyfb_ioctl en drivers/video/fbdev/aty/atyfb_base.c en las versiones de Linux kernel hasta la 4.12.10 no inicializa una estructura de datos específica. Esto permite a los usuarios locales obtener información sensible de la memoria de pila del kernel leyendo ubicaciones relacionadas con bytes de relleno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12.10",
            "matchCriteriaId" : "20C3AEA9-9BF4-453D-8BB5-635FF9512E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/pull/441",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-kernel&m=150401461613306&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-kernel&m=150453196710422&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/pull/441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-kernel&m=150401461613306&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-kernel&m=150453196710422&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T17:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by interaction between dataReceived (in core/downloader/handlers/http11.py) and S3FilesStore."
      }, {
        "lang" : "es",
        "value" : "Scrapy 1.4 permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) utilizando archivos de gran tamaño, ya que se leen numerosos archivos en la memoria. Esto resulta especialmente problemático si los archivos se escriben posteriormente de manera individual en un hilo separado a un recurso de almacenamiento lento. Esto se ha demostrado con la interacción entre dataReceived (en core/downloader/handlers/http11.py) y S3FilesStore."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scrapy:scrapy:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE92E8B-C950-4763-9ED0-2C7FC020815B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.csdn.net/wangtua/article/details/75228728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scrapy/scrapy/issues/482",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.csdn.net/wangtua/article/details/75228728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scrapy/scrapy/issues/482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-05T18:29:00.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by openldap-initscript."
      }, {
        "lang" : "es",
        "value" : "slapd en OpenLDAP en su versión 2.4.45 y anteriores crea un archivo PID tras eliminar privilegios a una cuenta no-root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no-root para modificar el archivo PID antes de que un script root ejecute un comando \"kill `cat /pathname`\". Esto se ha demostrado con openldap-initscript."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.45",
            "matchCriteriaId" : "00A6E51B-52B6-4190-BB10-3622D575A7D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.2",
            "matchCriteriaId" : "D0DBC938-A782-433F-8BF1-CA250C332AA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openldap.org/its/index.cgi?findid=8703",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/index.cgi?findid=8703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2779",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVIEW 2014. A specially crafted Virtual Instrument (VI) file can cause an attacker controlled looping condition resulting in an arbitrary null write. An attacker controlled VI file can be used to trigger this vulnerability and can potentially result in code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria explotable en la funcionalidad de análisis de segmentos RSRC de LabVIEW 2017, LabVIEW 2016, LabVIEW 2015 y LabVIEW 2014. Un archivo de Instrumento Virtual (VI) especialmente diseñado puede causar una condición de bucle controlada por un atacante que resulta en una escritura nula arbitraria. Un archivo VI controlado por un atacante puede ser utilizado para desencadenar esta vulnerabilidad y puede potencialmente resultar en la ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ni:labview:2014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D03DA4-6434-4EE4-8F0A-DF22DFEBF126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ni:labview:2015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F116DEDC-3AEF-4382-8C05-1748CC4BEFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ni:labview:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95C08DE-6E3F-4BE9-AF26-7179CA2C96B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ni:labview:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5509E419-FDAF-43CE-BB61-DF77A3CDF59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ni.com/product-documentation/54099/en/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100519",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0273",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ni.com/product-documentation/54099/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2807",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la funcionalidad de análisis sintáctico de etiquetas de Ledger-CLI 3.1.1. Un archivo journal especialmente manipulado podría provocar un desbordamiento inferior de enteros que daría lugar a la ejecución de código. Un atacante puede crear un archivo journal malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledger-cli:ledger:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876C55BA-ED06-46C0-874C-63816CF695E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100543",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0303",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2808",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de uso de memoria previamente liberada (use-after-free) en el componente de análisis sintáctico de cuentas de Ledger-CLI 3.1.1. Un archivo ledger especialmente manipulado puede provocar una vulnerabilidad de uso de memoria previamente liberada que daría lugar a la ejecución de código arbitrario. Un atacante puede convencer a un usuario para que cargue un archivo journal para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledger-cli:ledger:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876C55BA-ED06-46C0-874C-63816CF695E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100546",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0304",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202004-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2821",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective Document Filters 11.3.0.2400 and 11.4.0.2452. A crafted PDF document can lead to a use-after-free resulting in direct code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de uso de memoria previamente liberada (use-after-free) en la funcionalidad de parseo de PDF de Lexmark Perspective Document Filters 11.3.0.2400 y 11.4.0.2452. Un documento PDF manipulado puede causar una vulnerabilidad de uso de memoria previamente liberada (use-after-free) que daría lugar a la ejecución directa de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:perceptive_document_filters:11.3.0.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D405F9-B492-4CB2-863E-B02E79887539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:perceptive_document_filters:11.4.0.2452:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95552759-355C-4A4B-ACB7-93DD2FAC77AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100510",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0322",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2822",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A maliciously crafted PDF file can be used to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de renderización de imágenes de Lexmark Perceptive Document Filters 11.3.0.2400. Un PDF especialmente manipulado puede provocar una llamada a una función en un DCTStream corrupto, lo que daría lugar a que se escribiese información controlada por el usuario en la pila. Se puede utilizar un archivo PDF manipulado con fines maliciosos para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:perceptive_document_filters:11.3.0.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D405F9-B492-4CB2-863E-B02E79887539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100512",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0323",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2862",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de montículos en la funcionalidad gdk_pixbuf__jpeg_image_load_increment de Gdk-Pixbuf 2.36.6. Un archivo jpeg especialmente manipulado puede provocar un desbordamiento de montículos que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo o URL para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:2.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B13349-6CEB-4C8D-A1C0-B5BED4C67A76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3978",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100541",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2870",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-05T18:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de enteros en la funcionalidad tiff_image_parse de Gdk-Pixbuf 2.36.6 cuando se compila con Clang. Un archivo tiff especialmente manipulado puede provocar un desbordamiento de montículos que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo o URL para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:2.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B13349-6CEB-4C8D-A1C0-B5BED4C67A76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100541",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5698",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-09-05T19:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "El sistema anti-rollback de Intel Active Management Technology, Intel Standard Manageability e Intel Small Business Technology en sus versiones 11.0.25.3001 y 11.0.26.3000 no evita que se actualice el firmware a la versión 11.6.x.1xxx, la cual es vulnerable a CVE-2017-5689. Esto puede llevarlo a cabo un usuario local con privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:11.0.25.3001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58BB0F4-0CC8-4117-9FBD-842F1A2629A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:11.0.26.3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA1C111-F4A6-4191-A649-83B8D7E87920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.0.25.3001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A6B19B-50BD-4EFE-A707-F3557D05D816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.0.26.3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E412DFA-8C90-4C8C-A281-00A344AEF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:small_business_technology_firmware:11.0.25.3001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E975987A-24AC-43B2-8E8D-FCAFF2DFABAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:small_business_technology_firmware:11.0.26.3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3F2A41-56E9-4648-94B8-FBDFCA43B3D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00082&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00082&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5716",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-09-05T19:29:00.247",
      "lastModified" : "2023-11-07T02:49:32.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12865.  Reason: This candidate is a reservation duplicate of CVE-2017-12865.  Notes: All CVE users should reference CVE-2017-12865 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1097",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-05T21:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Strategic Supply Management Platform en versiones de las 10.0.0.x hasta las 10.1.1.x es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 120657."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5555B678-E8D8-43CC-8117-7CE4E8796A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21FB10-17CF-4968-A4D6-B62BA6B5D7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C308D968-9F2F-44FE-9820-B1E1850B5127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90517A03-8F15-41B1-B30C-548B04B8C732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD66461-A68B-44A1-BE9D-51D600F77FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59E7DBF-728D-4463-B28A-B21A3DDBA6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D86A9B-A047-4299-8D21-E2F1CA512AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3643AA98-41D9-4692-A327-77E9320B19FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316CC123-E4DE-4DE6-B077-457FA34D22D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C1A95D-7F81-4A0D-9353-17B4E651F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E856B7F-E960-46C3-B828-508689AE375F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBECE59F-3B62-4DDF-884A-963D6B64E6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697DE60B-55BC-4F65-9045-77D5B11395CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2D5E97-2A91-4E4D-AD28-5DDD86AD4DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12170D-1E85-4116-8EAC-B5C8F8D0C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4FB269-336D-46B9-8E63-ED9FB0BCB6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3290A0-A8B3-4CB5-B762-3DB2C39EF3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD32235-AA85-4EC7-B80E-D21CF7D3B3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD90BD58-2DA8-4996-97C7-FA8C33BAE91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE42663-A9ED-4699-954C-88FF3CC269DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918C6DE4-AB67-4441-B909-201EDDD6752E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F322CBE-90CB-448F-9050-422A155F1099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E465BDB0-7B28-44D5-8BBB-652849A835F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DAE142-6C1A-4913-B485-868CCC2A1A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7400F66A-874B-4631-9601-9A44A97FD3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF466B8C-B1EC-46AD-A229-7952F590CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C949766-E6EE-400C-8783-4D0B26FE066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5EF36C-0B12-4E83-BF97-7C6DE880ED5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B2C996-EAD2-4FAB-A526-2885BEBBB5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C631E15C-1D03-48FB-8407-C5C5BECCD88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF57983-F635-43B7-B829-ECCB90316C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0DAE73-DDAC-4972-BD28-456E506B0DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006B14A4-D8B0-4FA1-ABCE-E8A07AA6D752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725D01D2-25EB-400A-8C54-9EE85DA400CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CF890B-1F33-4923-8C7B-69FEC29D5476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C5E315-9C99-4B09-BD91-30EC10E1F6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D686D3-3866-4126-B0B4-F1F3C44E8915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F300CFB-AA06-4458-A0E1-E678364E2FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E03914-296D-4A9E-91B0-A240471F46D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99088F49-1908-4979-A88C-F8929190515A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99149B8-DF80-422F-9D16-8DB578B86A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79298E57-F042-4ED7-8AE1-01A1845F5E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DF0D70-78DF-4A3B-9754-D8C46A969FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4CD3A-9D28-4B27-A662-3A70767ED6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB1086A-67C8-4335-88F1-F7D4F2EADC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0561DAA-35D3-46EA-9E76-8E2E71445D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806C334F-FC48-4B32-A0F6-D1A5E47BF69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A99871-8804-41BA-AAA9-BDEC07BF9977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C313E-5816-437B-8C62-D893A254FBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B043330-8938-4B6F-9EF0-D3DE596D8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308F7C3-8B20-48E5-A22E-E60C9E40BD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E98450-93BC-4C9C-96B9-AD87B865445E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DE14C7-C72A-4492-831D-E2FC69F4A66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A06DC9A-A90D-4E84-AB18-EA51D15289DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1302AB01-B4F1-4369-80A9-A5F12A41931C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247F1C68-BA05-4C44-BA0F-A5BC27106CF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006963",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120657",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1129",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-05T21:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370."
      }, {
        "lang" : "es",
        "value" : "IBM Notes 8.5 y 9.0 es vulnerable a denegaciones de servicio. Si se convence a un usuario para que haga clic en un enlace malicioso, esto podría dar lugar a que el cliente de Notes se bloquee y tenga que reiniciarse. IBM X-Force ID: 121370."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE6AAC-7B25-40EA-9D25-128D743F18A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B097CA3C-2ABA-489E-86C1-EEF891AF7094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B100002-E6E8-4FB8-A1A8-02BFBB37A126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975E8316-D4C3-40B7-8E57-E871D0327271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:expeditor:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387A02F1-7113-4B16-8A96-3ADA514CCE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:expeditor:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20000BBC-F785-4CF8-99E9-A2929F69A8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:expeditor:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E52005-A232-4950-8338-18CC7EE48F7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999385",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002103",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121370",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42602/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22002103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42602/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1130",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-05T21:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371."
      }, {
        "lang" : "es",
        "value" : "IBM Notes 8.5 y 9.0 es vulnerable a denegaciones de servicio. Si se convence a un usuario para que haga clic en un enlace malicioso, podrían abrirse numerosas ventanas de diálogo de selección de archivo. Esto podría provocar que el cliente se bloquee y tenga que reiniciarse. IBM X-Force ID: 121371."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE6AAC-7B25-40EA-9D25-128D743F18A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B097CA3C-2ABA-489E-86C1-EEF891AF7094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B100002-E6E8-4FB8-A1A8-02BFBB37A126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975E8316-D4C3-40B7-8E57-E871D0327271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999384",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100632",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121371",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42604/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21999384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42604/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1457",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-05T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128376."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar Network Security 5.4 es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128376."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_security:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91BB760-2115-4A11-949D-4DBAD7BB0BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100636",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128376",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1458",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-05T21:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar Network Security 5.4 es vulnerable a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 128377."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_security:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91BB760-2115-4A11-949D-4DBAD7BB0BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007551",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100638",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128377",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1491",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-05T21:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 128689."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar Network Security 5.4 da la posibilidad de que múltiples actores interactúen y les permite negociar qué algoritmo se debería utilizar como mecanismo de protección (por ejemplo, el cifrado o la autenticación), pero no selecciona el algoritmo más robusto que esté disponible para ambas partes. IBM X-Force ID: 128689."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_security:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91BB760-2115-4A11-949D-4DBAD7BB0BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007535",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128689",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-06T08:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función AP4_AtomSampleTable::GetSample en Core/Ap4AtomSampleTable.cpp en Bento4 mp42ts en versiones anteriores a la 1.5.0-616 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0-615",
            "matchCriteriaId" : "03DB20DA-7153-4678-A2D6-01464B589FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-06T08:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AP4_Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función AP4_Processor::Process en Core/Ap4Processor.cpp en Bento4 mp4encrypt en versiones anteriores a la 1.5.0-616 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0-615",
            "matchCriteriaId" : "06BA45D7-9450-4F10-8F6E-AF1FC28CBD90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-06T08:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función AP4_AvccAtom::InspectFields en Core/Ap4AvccAtom.cpp en Bento4 mp4dump en versiones anteriores a la 1.5.0-616 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y bloqueo de aplicación) mediante un archivo mp4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0-615",
            "matchCriteriaId" : "03DB20DA-7153-4678-A2D6-01464B589FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-06T18:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152."
      }, {
        "lang" : "es",
        "value" : "Existe un error de validación de tamaño en opj_j2k_write_sot en lib/openjp2/j2k.c en OpenJPEG 2.2.0. La vulnerabilidad da lugar a una escritura fuera de límites que puede causar una denegación de servicio remota (desbordamiento de búfer basado en montículos que afecta a opj_write_bytes_LE en lib/openjp2/cio.c) o una posible ejecución remota de código. NOTA: Esta vulnerabilidad existe debido a una solución incompleta para CVE-2017-14152."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "1E370DD2-BCCE-48F1-BB6D-58227282E967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100677",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/06/heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c-incomplete-fix-for-cve-2017-14152/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/dcac91b8c72f743bda7dbfa9032356bc8110098a",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/991",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-26",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/06/heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c-incomplete-fix-for-cve-2017-14152/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/commit/dcac91b8c72f743bda7dbfa9032356bc8110098a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-06T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c."
      }, {
        "lang" : "es",
        "value" : "La función ReadSUNImage en coders/sun.c en GraphicsMagick 1.3.26 presenta un error causado por una asignación de memoria excesiva, ya que depende solo de un campo longitud en una cabecera. Esto puede dar lugar a una denegación de servicio remota en la función MagickMalloc en magick/memory.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/493da54370aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100678",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/06/graphicsmagick-memory-allocation-failure-in-magickmalloc-memory-c-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/493da54370aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/06/graphicsmagick-memory-allocation-failure-in-magickmalloc-memory-c-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-06T18:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c."
      }, {
        "lang" : "es",
        "value" : "libarchive 3.3.2 permite a los atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basada en montículos xml_data y fallo de aplicación) mediante un archivo xar manipulado. Esto está relacionado con la mala gestión de strings vacíos en la función atol8 en archive_read_support_format_xar.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libarchive:libarchive:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FF21B2-41AD-446B-9EE5-184F573973E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/06/libarchive-heap-based-buffer-overflow-in-xml_data-archive_read_support_format_xar-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/commit/fa7438a0ff4033e4741c807394a9af6207940d71",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3736-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/06/libarchive-heap-based-buffer-overflow-in-xml_data-archive_read_support_format_xar-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/commit/fa7438a0ff4033e4741c807394a9af6207940d71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3736-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, which claims a large \"item_num\" field such as 0xffffffff, is provided. As a result, the variable \"item_num\" turns negative, bypassing the check for a large value."
      }, {
        "lang" : "es",
        "value" : "En la función mxf_read_primer_pack en libavformat/mxfdec.c en FFmpeg versión 3.3.3 mayor a 2.4, podría ocurrir un error de firmas de enteros cuando se proporciona un archivo manipulado que reclame un campo \"item_num\" grande como 0xffffffff. Como consecuencia, la variable \"item_num\" se vuelve negativa, omitiendo el chequeo de valores grandes"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100692",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/a4e85b2e1c8d5b4bf0091157bbdeb0e457fb7b8f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/a4e85b2e1c8d5b4bf0091157bbdeb0e457fb7b8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large \"nb_index_entries\" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file."
      }, {
        "lang" : "es",
        "value" : "En libavformat/mxfdec.c en FFmpeg versión 3.3.3 mayor a 2.4, en DoS una denegación de servicio en mxf_read_index_entry_array() por una falta de chequeos EOF (End of File) podría provocar un enorme consumo de recursos de la CPU. Cuando se proporciona un archivo MXF manipulado que pide un campo \"nb_index_entries\" grande en la cabecera pero no contiene suficientes datos de respaldo, el bucle consumiría una gran cantidad de recursos de CPU, ya que el bucle no contiene ningún chequeo EOF. Además, este gran bucle se invocaría en múltiples ocasiones si existe más de un segmento de datos aplicable en el archivo MXF manipulado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/900f39692ca0337a98a7cf047e4e2611071810c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/f173cdfe669556aa92857adafe60cbe5f2aa1210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/900f39692ca0337a98a7cf047e4e2611071810c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/f173cdfe669556aa92857adafe60cbe5f2aa1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large \"table_entries_used\" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En libavformat/nsvdec.c en FFmpeg versión 2.4 y 3.3.3, una denegación de servicio en nsv_parse_NSVf_header() por una falta de chequeos EOF (End of File) podría provocar un enorme consumo de recursos de la CPU. Cuando se proporciona un archivo NSV manipulado que pide un campo \"table_entries_used\" grande en la cabecera pero no contiene suficientes datos de respaldo, el bucle en \"table_entries_used\" consumiría una gran cantidad de recursos de CPU, ya que el bucle no contiene ningún chequeo EOF"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/c24bcb553650b91e9eff15ef6e54ca73de2453b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/c24bcb553650b91e9eff15ef6e54ca73de2453b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large \"extent\" field in the header but does not contain sufficient backing data, is provided, the loop over \"length\" would consume huge CPU resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En coders/ps.c en ImageMagick 7.0.7-0 Q16, una denegación de servicio en ReadPSImage() por una falta de chequeos EOF (End of File) podría provocar un enorme consumo de recursos de la CPU. Cuando se proporciona un archivo PSD manipulado que pide un campo \"extent\" grande en la cabecera pero no contiene suficientes datos de respaldo, el bucle en \"length\" consumiría una gran cantidad de recursos de CPU, ya que el bucle no contiene ningún chequeo EOF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/bdbbb13f1fe9b7e2465502c500561720f7456aac",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/715",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/bdbbb13f1fe9b7e2465502c500561720f7456aac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation \"GetQuantumRange(depth)+1\" when \"depth\" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large \"max_value\" value."
      }, {
        "lang" : "es",
        "value" : "En la función ReadTXTImage() en coders/txt.c en ImageMagick 7.0.6-10, podría ocurrir un desbordamiento de enteros por la operación de suma \"GetQuantumRange(depth)+1\" cuando \"depth\" es muy grande, produciendo un valor más pequeño de lo esperado. Como consecuencia, podría ocurrir un bucle infinito para un archivo TXT manipulado que pida un valor \"max_value\" muy grande."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B450807-6F43-4852-93CF-CC1EB85D83F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/50f54462076648ac2e36c3f58f4dadd4babbf1c9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/50f54462076648ac2e36c3f58f4dadd4babbf1c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large \"length\" field in the header but does not contain sufficient backing data, is provided, the loop over \"length\" would consume huge CPU resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En coders/psd.c en ImageMagick 7.0.7-0 Q16, una denegación de servicio en ReadPSDLayersInternal() por una falta de chequeos EOF (End of File) podría provocar un enorme consumo de recursos de la CPU. Cuando se proporciona un archivo PSD manipulado que pide un campo \"length\" grande en la cabecera pero no contiene suficientes datos de respaldo, el bucle en \"length\" consumiría una gran cantidad de recursos de CPU, ya que el bucle no contiene ningún chequeo EOF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/04a567494786d5bb50894fc8bb8fea0cf496bea8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f68a98a9d385838a1c73ec960a14102949940a64",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/714",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/04a567494786d5bb50894fc8bb8fea0cf496bea8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/f68a98a9d385838a1c73ec960a14102949940a64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T06:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over the rows would consume huge CPU resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En coders/xbm.c en ImageMagick 7.0.6-1 Q16, una denegación de servicio en ReadXBMImage() por una falta de chequeos EOF (End of File) podría provocar un enorme consumo de recursos de la CPU. Cuando se proporciona un archivo XBM manipulado que pide campos de columnas y filas grandes en la cabecera pero no contiene suficientes datos de respaldo, el bucle en las filas consumiría una gran cantidad de recursos de CPU, ya que el bucle no contiene ningún chequeo EOF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d9a8234d211da30baf9526fbebe9a8438ea7e11c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d9a8234d211da30baf9526fbebe9a8438ea7e11c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save.  NOTE: this issue can be leveraged to execute arbitrary code remotely."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en Mongoose Web Server en versiones anteriores a la 6.9 permite que atacantes remotos secuestren la autenticación de usuarios para peticiones que modifiquen Mongoose.conf mediante una petición a __mg_admin?save. NOTA: este problema se puede aprovechar para ejecutar código arbitrario remotamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose_embedded_web_server_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8",
            "matchCriteriaId" : "180908EB-8B8D-45B9-A436-8A424BE50F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MONGOOSE-WEB-SERVER-v6.5-CSRF-COMMAND-EXECUTION.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42614/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MONGOOSE-WEB-SERVER-v6.5-CSRF-COMMAND-EXECUTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42614/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en la función clntudp_call en sunrpc/clnt_udp.c en GNU C Library (también conocida como glibc o libc6), en versiones anteriores a la 2.26, permite que atacantes remotos provoquen un impacto sin especificar mediante vectores relacionados con una ruta de error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.25",
            "matchCriteriaId" : "9C3B907D-79AF-44AC-BD23-C369CD6AE173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYZL6PAKI73XYRJYL5VLDGA4FFGWMB7A/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21115",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=d42eed4a044e5e10dfb885cf9891c2518a72a491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4416-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.securityfocus.com/bid/100679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYZL6PAKI73XYRJYL5VLDGA4FFGWMB7A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=d42eed4a044e5e10dfb885cf9891c2518a72a491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4416-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.securityfocus.com/bid/100679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper request parameter validation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la interfaz de puerta de enlace interna y externa de GlobalProtect en Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.18, versiones 7.0.x anteriores a la 7.0.17, versiones 7.1.x anteriores a la 7.1.12 y versiones 8.0.x anteriores a la 8.0.3 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores relacionados con la validación inadecuada de parámetros request."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.17",
            "matchCriteriaId" : "460EF266-5397-4FB9-B4C3-BECB2FB12AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F100E-2163-4B32-8F9A-02CB98A54F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D166F248-CB7B-4C71-9A54-355CED04F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA169C5-66C2-4BA6-9515-2C1EF2D2B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211E8BB6-F500-4BA7-9FB9-A744A04A90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07023EC-3119-4D08-AB90-3CBF534B1B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100619",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039255",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-12416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-12416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with \"DEBUG = True\" (which makes this page accessible) in your production settings."
      }, {
        "lang" : "es",
        "value" : "En Django versiones 1.10.x anteriores a la 1.10.8 y versiones 1.11.x anteriores a la 1.11.5, se deshabilitó la función de autoescapado HTML en una parte de la plantilla para la página de depuración technical 500. En las condiciones adecuadas, esto permitiría un ataque de Cross-Site Scripting (XSS). Esta vulnerabilidad no debería afectar a la mayoría de sitios de producción, ya que no se debería ejecutar el programa con \"DEBUG = True\" (lo que hace que esta página sea accesible) en la configuración de producción."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2541CE-0462-46DF-BDD8-C19D6E45140B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE31960-7C68-42F3-B215-B30A87DB67CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3838B8E-8F0E-4F7A-88E6-FFF2590E5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6C6214-7946-4025-84E6-59448CFE75B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58182835-CB1F-4490-AE65-90601DBFD0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AE04CD-E923-4630-9BAA-5A4D5A5D0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2517FB1C-B732-432B-9F27-EE60F6556433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F4BB27-B6AF-47AD-9301-DDFF4198B9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC58EB0F-6DE0-450B-A963-2CA4084BDE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437E4D87-F5C9-4954-9882-396C0ADF649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D64C7397-B2A8-4C93-AC09-337E243A7483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3CDEA7-EFB7-4F4B-872B-1D18CDE340CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EFE4B2-E975-4842-BCAB-528D03F4AB73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100643",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039264",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3559-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2017/sep/05/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3559-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2017/sep/05/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en NexusPHP 1.5 permite que atacantes remotos secuestren la autenticación de usuarios para peticiones que (1) envíen manas mediante una petición a mybonus.php o (2) añadan administradores mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.recorday.cn/about/csrf.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.recorday.cn/about/csrf.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_resend.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo Cross-Site Scripting (XSS) en NexusPHP permiten que atacantes remotos inyecten scripts web o HTML arbitrarios mediante PATH_INFO a (1) cheaters.php o (2) confirm_resend.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3920B7-D378-45FA-AD21-A9492C2CCBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://loid.online/cve/cve.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/confirm_resend.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://loid.online/cve/cve.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/confirm_resend.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg."
      }, {
        "lang" : "es",
        "value" : "TW WIFI Repeater BE126 permite que usuarios remotos autenticados ejecuten código arbitrario mediante metacaracteres shell en el parámetro user en cgi-bin/webupg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:twsz:wifi_repeater_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57337C77-E8E1-4515-A534-FF483FCA7145"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:twsz:wifi_repeater:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631C3F47-B78C-4143-8567-1AB6430C179D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143978/Wireless-Repeater-BE126-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42608/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143978/Wireless-Repeater-BE126-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42608/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the \"advanced settings - time server\" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the \"server name\" field in actions/ChangeConfiguration.html."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el módulo \"advanced settings - time server\" en Wibu-Systems CodeMeter en versiones anteriores a la 6.50b permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el campo \"server name\" en actions/ChangeConfiguration.html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50a",
            "matchCriteriaId" : "47F7DE4B-6E64-4D3C-AC9E-D13EDFC234AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541119/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/104433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-102-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42610/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541119/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/104433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-102-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42610/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet."
      }, {
        "lang" : "es",
        "value" : "Lexmark Scan To Network (SNF) 3.2.9 y anteriores almacena las credenciales de configuración de red como texto plano y las transmite en peticiones, lo que permite que atacantes remotos obtengan información sensible mediante peticiones a (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet o (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:scan_to_network:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.9",
            "matchCriteriaId" : "CBB089DD-B6DF-48C2-96C1-F3EC679384D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/46",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de liberación doble (double free) en la función gdImagePngPtr en libgd2 en versiones anteriores a la 2.2.5 permite que atacantes remotos provoquen una denegación de servicio utilizando vectores relacionados con una paleta sin colores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:libgd:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCB4BFD-A35B-4A87-BC10-4B6C4C5214D0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3961",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgd/libgd/issues/381",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgd/libgd/releases/tag/gd-2.2.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N2BLXX7KNRE7ZVQAKGTHHWS33CUCXVUP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgd/libgd/issues/381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgd/libgd/releases/tag/gd-2.2.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N2BLXX7KNRE7ZVQAKGTHHWS33CUCXVUP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T13:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or conduct server-side request forgery (SSRF) attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XML External Entity (XXE) en la interfaz de puerta de enlace interna y externa de GlobalProtect en Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.18, versiones 7.0.x anteriores a la 7.0.17, versiones 7.1.x anteriores a la 7.1.12 y versiones 8.0.x anteriores a la 8.0.3 permite que atacantes remotos obtengan información sensible, provoquen una denegación de servicio o lleven a cabo ataques de tipo Server-Side Request Forgery (SSRF) mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.17",
            "matchCriteriaId" : "460EF266-5397-4FB9-B4C3-BECB2FB12AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F100E-2163-4B32-8F9A-02CB98A54F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D166F248-CB7B-4C71-9A54-355CED04F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA169C5-66C2-4BA6-9515-2C1EF2D2B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211E8BB6-F500-4BA7-9FB9-A744A04A90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07023EC-3119-4D08-AB90-3CBF534B1B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100614",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039256",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-9458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-9458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T14:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"apetag.c\" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file."
      }, {
        "lang" : "es",
        "value" : "El archivo \"apetag.c\" en MP3Gain 1.5.2.r2 presenta una vulnerabilidad que tiene como resultado la corrupción de la memoria de la pila al abrir un archivo MP3 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9FB7CF-1B24-4B32-8567-233A61E3A179"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGeS1hZlJkeGVkYlU",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGeS1hZlJkeGVkYlU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T14:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"mpglibDBL/layer3.c\" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file."
      }, {
        "lang" : "es",
        "value" : "El archivo \"mpglibDBL/layer3.c\" en MP3Gain 1.5.2.r2 presenta una vulnerabilidad que tiene como resultado la violación del acceso de lectura al abrir un archivo MP3 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9FB7CF-1B24-4B32-8567-233A61E3A179"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGeS1hZlJkeGVkYlU",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B9DojFnTUSNGeS1hZlJkeGVkYlU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T14:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper authentication on this page, the software accepts the request hence allowing attacker to reset the router to its default configurations which later could allow attacker to login to router by using default username/password."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en FiberHome User End Routers Bearing Model Number AN1020-25 que podría permitir que un atacante restaurase un router a sus valores de fábrica simplemente navegando al enlace http://[Default-Router-IP]/restoreinfo.cgi y ejecutándolo. Debido a la incorrecta autenticación en esta página, el software acepta la petición, lo que permite que el atacante restablezca el router con sus configuraciones por defecto. Esto podría permitir que, posteriormente, el atacante pueda iniciar sesión en el router empleando el usuario/contraseña por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:adsl_an1020-25_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58FA1E6B-5A2E-4726-A972-E7054D608651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:adsl_an1020-25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCA1CFD-B0B2-49EB-B798-D7311C0B11D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144022/FiberHome-Unauthenticated-ADSL-Router-Factory-Reset.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://beefaaubee09.github.io/fiberhome-adsls-dos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42649/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144022/FiberHome-Unauthenticated-ADSL-Router-Factory-Reset.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://beefaaubee09.github.io/fiberhome-adsls-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42649/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T14:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 \"but with much less impact.\""
      }, {
        "lang" : "es",
        "value" : "El compilador OCaml permite que los atacantes provoquen un impacto sin especificar mediante vectores desconocidos. Este problema es parecido al de CVE-2017-9772 \"pero con un impacto mucho menor.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.04.1",
            "matchCriteriaId" : "85552670-E97B-4BE6-B23E-53DD79345F58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://caml.inria.fr/mantis/view.php?id=7557",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sympa.inria.fr/sympa/arc/caml-list/2017-06/msg00094.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://caml.inria.fr/mantis/view.php?id=7557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sympa.inria.fr/sympa/arc/caml-list/2017-06/msg00094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T14:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el plugin WatuPRO en versiones anteriores a la 5.5.3.7 para WordPress permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro watupro_questions en una acción watupro_submit para wp-admin/admin-ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscripts:watupro:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "5.5.1",
            "matchCriteriaId" : "7A361290-C564-479C-A146-289749BEDFA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8897",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42291/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1098",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-07T16:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120658."
      }, {
        "lang" : "es",
        "value" : "IBM Emptoris Supplier Lifecycle Management 10.1.0.x es vulnerable a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 120658."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464DFCCD-F094-495E-843B-58D112F5E647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29083642-622C-45A2-8D2D-B3DFEA8801DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D971E3-2C2D-44DC-ADF5-70C4E4FE20FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B395BC-C8DD-46D2-A2D1-1038BCD5E9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C942F9F-685A-463D-B8F4-146870ADB4AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2BF576-7DAA-482F-B444-F810BAFCE49F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A21B4FF-2A6C-45F8-BB1E-F3DA9162FD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C43888-3A83-45D6-95A2-A677C6D6D5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8091E6B3-3DB8-41F7-AD87-3A21257CE90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA519B53-A6BF-44CE-853A-818219EA6322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2027D4-B354-4F99-900A-5946770FA1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF9CCA4-5999-4063-95E0-8C3FE7504818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728D568A-7633-4B10-BF69-E6CAB889FA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:emptoris_supplier_lifecycle_management:10.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAA1687-A0DA-42B7-B4A6-D4ECC8B25759"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005824",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120658",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1189",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-07T16:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal y Web Content Manager 6.1, 7.0 y 8.0 son vulnerables a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 123558."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618064A-3D05-4DC6-9A47-0EDF2427642F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE74154-3E79-4D56-96C4-D8E644F1419D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA915826-5D89-43E9-83E7-88973648302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DB29F4-59AB-439C-91C4-CDF677676C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6CA922-11EF-4315-A09A-B4A8937E4CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526738D7-1AF8-4A8F-B833-BA0E35973A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D6BE9C-16FD-4FB4-8A87-56B42C246316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1964FC-672F-4139-938F-A8EF9D86D9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B50CEA-AFC4-4B45-9954-519965237FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0902AC0F-EA4D-4E65-A70A-15DE9B904B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808F95D-C6BD-43EB-B16C-66449977BCFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:cf001:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C645C1-21E3-48A8-A1A5-9519CB845493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6ECEE98-B276-4ED6-AA5A-109EA57E9925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:*",
            "matchCriteriaId" : "2991B76F-8E96-45A9-8B9D-942AF93755E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:*",
            "matchCriteriaId" : "041D220D-2088-4633-B1AA-8902AD1C6BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:*",
            "matchCriteriaId" : "53B376AE-7AA9-4362-9CB2-17B3AB783FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:*",
            "matchCriteriaId" : "84D744C2-DA4B-4F04-894F-7820FDC49A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:*",
            "matchCriteriaId" : "4713D128-6C5F-4362-A0E2-363F81D9BCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:*",
            "matchCriteriaId" : "67E76EE5-B618-49AA-A489-1BD7E45D391F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:*",
            "matchCriteriaId" : "DC001899-F77A-4EED-BC6D-8400FF4354EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:*",
            "matchCriteriaId" : "05426398-FE6A-4E4A-9C46-4675B5FAD915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:*",
            "matchCriteriaId" : "29E0A9B5-945C-4859-BE83-56B34544350B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf019:*:*:*:*:*:*",
            "matchCriteriaId" : "10E59411-D50B-4A34-84C7-7563D301764A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4FF84B-A17F-464B-A718-67C44D2C69BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:*",
            "matchCriteriaId" : "B469E735-0DCE-4616-B3FE-DED75FEAC642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ACFABA-E470-4043-B8E7-ACE2F9781D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2FA62F-EEB7-4312-9359-FDA8E4743A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8ABD15-49DE-4C4A-B9C0-5696BC1899C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D98D3D-18DC-47CF-BED8-CD61A531D858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:*",
            "matchCriteriaId" : "9326CFC3-D9A7-43CE-8673-FD009F7A1F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:*",
            "matchCriteriaId" : "B34D73EE-1E9D-4896-B2A2-D1463C13F399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:*",
            "matchCriteriaId" : "96B7FB90-D1F8-4D83-B954-A1990400BC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf019:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4C07B8-CC26-4F83-8BA8-8702594CBB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf020:*:*:*:*:*:*",
            "matchCriteriaId" : "22C95FC9-0342-4ACC-B4F8-052554771D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf021:*:*:*:*:*:*",
            "matchCriteriaId" : "62AA773F-7D18-41F7-8561-81D83336E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf022:*:*:*:*:*:*",
            "matchCriteriaId" : "2C17D73E-9F0B-4C11-8C1D-A3987DED44F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf23:*:*:*:*:*:*",
            "matchCriteriaId" : "53DDB154-F94B-47F8-964B-34EFE2C99370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf24:*:*:*:*:*:*",
            "matchCriteriaId" : "10FCF563-A945-425A-A577-37867CF05CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf25:*:*:*:*:*:*",
            "matchCriteriaId" : "8373D2A7-EC57-4336-A877-B5D262F05191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf26:*:*:*:*:*:*",
            "matchCriteriaId" : "0A005963-7EF6-40D4-A54B-E3749ED5B587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf27:*:*:*:*:*:*",
            "matchCriteriaId" : "4210F236-A2B1-49F2-A16E-65BB513ECBA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE1E2EF-A079-4A67-AA50-0712D2E330F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5566C6-E42F-4786-A8FC-59BE7EB47296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*",
            "matchCriteriaId" : "31C0EC0E-0106-4333-8401-0F655C0F5850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E4DA0C-9F97-4856-B9DE-D96994A65B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:*",
            "matchCriteriaId" : "4180809C-4A1E-4DB4-9E7C-641B753B97D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:*",
            "matchCriteriaId" : "5A60A788-F7B3-4922-8B30-8F586B1685CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40E0F5-B964-4BDC-828E-7571619F7C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:*",
            "matchCriteriaId" : "9A07791C-5EDE-4C2B-A441-6599339ED43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6F9920-B458-496B-B0C0-BF8B85606BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf06:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2C78E9-EB40-42C0-A772-6203555D5E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf07:*:*:*:*:*:*",
            "matchCriteriaId" : "A910F5CA-8257-420E-8D31-6BB0E4CFC963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf08:*:*:*:*:*:*",
            "matchCriteriaId" : "462CF706-A352-40EE-8158-3A2197FE4098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf09:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93EAB-BDBC-4C20-9BD2-AACC95CD8355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf12:*:*:*:*:*:*",
            "matchCriteriaId" : "3D660652-D318-44B8-996A-6E56F4D71F68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008028",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100699",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039268",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123558",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T16:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "DeleteBitBuffer en libbitbuf/bitbuffer.c en mp4tools aacplusenc 0.17.5 permite que atacantes remotos provoquen una denegación de servicio (escritura no válida en la memoria, SEGV en la dirección desconocida 0x000000000030 y bloqueo de la aplicación) o que provoquen cualquier otro impacto sin especificar mediante un archivo .wav manipulado. Esto también se conoce como desreferencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aacplusenc_project:aacplusenc:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500870B0-DDD6-4DDA-9C7E-98C809CCECAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/07/aacplusenc-null-pointer-dereference-in-deletebitbuffer-bitbuffer-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/teknoraver/aacplusenc/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/07/aacplusenc-null-pointer-dereference-in-deletebitbuffer-bitbuffer-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/teknoraver/aacplusenc/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1502",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-07T16:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129577."
      }, {
        "lang" : "es",
        "value" : "IBM Content Navigator CMIS 2.0.3, 3.0.0 y 3.0.1 es vulnerable a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 129577."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D78A4C4-ABA7-445C-8D4D-F6A9FBC6BDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC6DC-5F0D-46E8-85F9-BC9EA5244D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018B5713-4F70-4AE5-8AE3-CDFC0789F56B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006941",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129577",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T17:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The checktitle function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the module field."
      }, {
        "lang" : "es",
        "value" : "La función checktitle en controllers/member/api.php en dayrui FineCms 5.0.11 presenta un XSS relacionado con el campo module."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D00BBF3-0360-4B0C-B4E5-30B9CD57A09F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T17:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The oauth function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "La función oauth en controllers/member/api.php en dayrui FineCms 5.0.11 presenta un XSS relacionado con el encabezado HTTP Referer con Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D00BBF3-0360-4B0C-B4E5-30B9CD57A09F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T17:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "La función out en controllers/member/Login.php en dayrui FineCms 5.0.11 presenta unXSS relacionado con el encabezado HTTP Referer con Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D00BBF3-0360-4B0C-B4E5-30B9CD57A09F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T17:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The call_msg function in controllers/Form.php in dayrui FineCms 5.0.11 might have XSS related to the Referer HTTP header with Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "La función call_msg en controllers/member/Form.php en dayrui FineCms 5.0.11 podría tener un XSS relacionado con el encabezado HTTP Referer con Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D00BBF3-0360-4B0C-B4E5-30B9CD57A09F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bendawang.site/article/finecms-V5.0.11-multi-vulnerablity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12211",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this vulnerability by polling the affected device IPv6 information. An exploit could allow the attacker to trigger high CPU usage or a reload of the device. Known Affected Releases: Denali-16.3.1. Cisco Bug IDs: CSCvb14640."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código del SNMP (Simple Network Management Protocol) IPv6 de Cisco IOS y Cisco IOS XE Software podría permitir que un atacante remoto autenticado haga un uso elevado de recursos de CPU o reinicie el dispositivo. La vulnerabilidad se debe a una corrupción de sub-bloques IPv6. Un atacante podría explotar esta vulnerabilidad sondeando la información IPv6 del dispositivo afectado. Un exploit podría permitir que el atacante realice un uso elevado de recursos de CPU o reinicie el dispositivo. Versiones afectadas conocidas: Denali-16.3.1. Cisco Bug IDs: CSCvb14640."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018E29DB-FB2B-4180-BE81-E01426DF9F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDEB8-D012-4162-A3C6-7D8F1CA3D618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100648",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039290",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb14640",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb14640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12212",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Known Affected Releases 10.5(2). Cisco Bug IDs: CSCvf25345."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Cisco Unity Connection podría permitir que un atacante remoto no autenticado llevase a cabo un ataque de Cross-Site Scripting (XSS) reflejado contra un usuario de la interfaz web de un sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al software afectado mediante los métodos HTTP GET y HTTP POST. Un atacante que pudiera convencer a un usuario para que abra un enlace proporcionado por el atacante podría ejecutar código HTML o scripts arbitrarios en el navegador del usuario en el contexto de una página afectada. Versiones afectadas conocidas 10.5(2): Cisco Bug IDs: CSCvf25345."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:10.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F5AF19-C869-4A55-B4D7-38C0FFABCC6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100645",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039277",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf25345",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf25345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12213",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic to the default VLAN of the affected port. The vulnerability is due to an uncaught error condition that may occur during the reassignment of the auth-default-ACL dynamic ACL to a switch port after 802.1x authentication fails. A successful exploit of this issue could allow a physically adjacent attacker to bypass 802.1x authentication and cause the affected port to fail open, allowing the attacker to pass traffic to the default VLAN of the affected switch port. Cisco Bug IDs: CSCvc72751."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de lista de control de acceso (ACL) dinámica de Cisco IOS XE Software que se ejecuta en Cisco Catalyst 4000 Series Switches podría permitir que un atacante adyacente no autenticado provoque un fallo en la asignación de listas de control de acceso dinámicas y que el puerto falle y quede abierto. Esto podría permitir a un atacante pasar tráfico al VLAN por defecto del puerto afectado. Esta vulnerabilidad se debe a una condición de error no capturado que podría ocurrir durante la reasignación de lista de control de acceso dinámicas auth-default-ACL a un puerto switch después de que la autenticación 802.1 falle. Una explotación con éxito de esta vulnerabilidad podría permitir a un atacante físicamente adyacente omitir la autenticación 802.1x y provocar que el puerto afectado quede abierto por error, permitiendo que el atacante pase tráfico al VLAN por defecto del puerto switch afectado. Cisco Bug IDs: CSCvc72751."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D95E8A-8F0B-44E5-B266-09E10BAAEC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F2D5-4847-460C-A8A7-3E7E22C5E0C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100663",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039284",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cat",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12216",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file with malicious entries, which could allow the attacker to read and write files and execute remote code within the application. Cisco Bug IDs: CSCvf47946."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de usuario web de Cisco SocialMiner podría permitir a un atacante remoto no autenticado tener acceso de lectura y escritura a la información almacenada en el sistema afectado. La vulnerabilidad se debe a una gestión incorrecta de las entradas XXE (XML External Entity) cuando se analizan sintácticamente en un archivo XML. Un atacante podría explotar esta vulnerabilidad convenciendo al administrador de un sistema afectado para que importe un archivo XML manipulado con entradas maliciosas, lo que podría permitir al atacante leer y modificar archivos y ejecutar código remotamente en la aplicación. Cisco Bug IDs: CSCvf47946."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:socialminer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A9B36-D4E2-4578-9BB9-3CCD008AE628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100664",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039274",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-socmin",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-socmin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12217",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler of Cisco ASR 5500 System Architecture Evolution (SAE) Gateways could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation of GPRS Tunneling Protocol packet headers. An attacker could exploit this vulnerability by sending a malformed GPRS Tunneling Protocol packet to an affected device. A successful exploit could allow the attacker to cause the GTPUMGR process on an affected device to restart unexpectedly, resulting in a partial DoS condition. If the GTPUMGR process restarts, there could be a brief impact on traffic passing through the device. Cisco Bug IDs: CSCve07119."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el gestor de paquetes de entrada del protocolo de túnel GPRS (General Packet Radio Service) de Cisco ASR 5500 System Architecture Evolution (SAE) Gateways podría permitir a un atacante remoto no autenticado provocar una denegación de servicio (DoS) parcial en el dispositivo afectado. Esta vulnerabilidad se debe a una validación incorrecta de entradas de las cabeceras de los paquetes de protocolo de túnel GPRS. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete de protocolo de túnel GPRS mal formado a un dispositivo afectado. Una explotación con éxito podría permitir que el atacante provoque que el proceso GTPUMGR de un dispositivo afectado se reinicie de manera inesperada, lo que da lugar a una denegación de servicio (DoS) parcial. Si el proceso GTPUMGR se reinicia, podría produirse un leve impacto en el tráfico que pasa a través del dispositivo. Cisco Bug IDs: CSCve07119."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asr_5500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2624D3-4E35-47A8-9A46-48B22549D525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301681DF-2A9E-4A91-9918-4A46153ADC01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100642",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039276",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12218",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. The vulnerability is due to the failure of AMP to scan certain EML attachments that could contain malware. An attacker could exploit this vulnerability by sending an email with a crafted EML attachment through the targeted device. A successful exploit could allow the attacker to bypass the configured ESA email message and content filtering and allow the malware to be delivered to the end user. Vulnerable Products: This vulnerability affects Cisco AsyncOS Software for Cisco ESA, both virtual and hardware appliances, that are configured with message or content filters to scan incoming email attachments on the ESA. Cisco Bug IDs: CSCuz81533."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de detección de malware en Advanced Malware Protection (AMP) de Cisco AsyncOS Software para Cisco Email Security Appliances (ESAs) podría permitir que un atacante remoto no autenticado envíe un archivo adjunto con malware en un email a un usuario final. Esta vulnerabilidad se debe al fallo de AMP en escanear ciertos archivos adjuntos EML que pudieran contener malware. Un atacante podría explotar esta vulnerabilidad mediante el envío de un email con un adjunto EML manipulado al dispositivo objetivo. Una explotación con éxito podría permitir que el atacante omita el filtrado de contenidos y de mensajes de email ESA configurado y dar lugar a que el malware se entregue al usuario final. Productos vulnerables: Esta vulnerabilidad afecta a Cisco AsyncOS Software para Cisco ESA, tanto para máquinas virtuales como físicas, que están configuradas con filtros de contenidos y mensajes para escanear los archivos de email adjuntos entrantes en los Email Security Appliances. Cisco Bug IDs: CSCuz81533."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87AA6AB8-12B9-4810-9D06-01EEBF7B01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100681",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039288",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-esa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-esa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12220",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvc50771."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Firepower Management Center podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) reflejado contra un usuario de dicha interfaz en un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código de script arbitrario en el contexto de la interfaz o permitir que el atacante pueda acceder a información confidencial del navegador. Cisco Bug IDs: CSCvc50771."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEC54E5-91D8-48AB-A890-5841A158839F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100639",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-firepower-1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-firepower-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12221",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the affected software. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code in the context of the affected system. Cisco Bug IDs: CSCvc38983."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Cisco Firepower Management Center podría permitir que un atacante remoto autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de la interfaz web del software afectado. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario por parte del software afectado. Una explotación con éxito de esta vulnerabilidad podría permitir al atacante que ejecute código arbitrario en el contexto del sistema afectado. Cisco Bug IDs: CSCvc38983."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEC54E5-91D8-48AB-A890-5841A158839F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100640",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-firepower-2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-firepower-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12223",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization of user input. An attacker who can access an affected router via the console could exploit this vulnerability by entering ROMMON mode and modifying ROMMON variables. A successful exploit could allow the attacker to execute arbitrary code and install a malicious version of Hypervisor firmware on an affected device. Cisco Bug IDs: CSCvb44027."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código del monitor ROM (ROMMON) de Cisco IR800 Integrated Services Router Software podría permitir que un atacante local sin autenticar arranque un Hipervisor sin firma en un dispositivo afectado y, por lo tanto, comprometa la integridad del sistema. Esta vulnerabilidad se debe a una sanitización insuficiente de las entradas realizadas por el usuario. Un atacante que pueda acceder a un router afectado mediante la consola podría explotar esta vulnerabilidad entrando en modo ROMMON y modificando las variables ROMMON. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código arbitrario e instalar una versión maliciosa del firmware del hipervisor en un dispositivo afectado. Cisco Bug IDs: CSCvb44027."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ir800_integrated_services_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1E3CD-4CA7-40C2-9AEF-4A553B302FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ir800_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941935AF-4909-4C21-9AD9-0CFE957A1519"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100689",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039275",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-isr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-isr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12224",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow an authenticated, remote attacker to enter a meeting with a hyperlink URL, even though access should be denied. The vulnerability is due to the incorrect implementation of the configuration setting Guest access via hyperlinks, which should allow the administrative user to prevent guest users from using hyperlinks to connect to meetings. An attacker could exploit this vulnerability by using a crafted hyperlink to connect to a meeting. An exploit could allow the attacker to connect directly to the meeting with a hyperlink, even though access should be denied. The attacker would still require a valid hyperlink and encoded secret identifier to be connected. Cisco Bug IDs: CSCve20873."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la capacidad de los usuarios invitados de unirse a reuniones mediante un hipervínculo con Cisco Meeting Server podría permitir que un atacante remoto autenticado acceda a una reunión con una URL de hipervínculo, a pesar de que se le debería negar el acceso. Esta vulnerabilidad se debe a la incorrecta implementación de la opción de configuración de acceso de invitados mediante hipervínculos, lo que debería permitir que el usuario administrador evite que los usuarios invitados empleen hipervínculos para conectarse a las reuniones. Un atacante podría aprovechar esta vulnerabilidad empleando un hipervínculo manipulado para conectarse a una reunión. Si se explota esta vulnerabilidad, el atacante podría conectarse directamente a la reunión con un hipervínculo, aunque el acceso se le debería negar. Aun así, el atacante seguiría necesitando un hipervínculo válido y un identificador secreto codificado para conectarse. Cisco Bug IDs: CSCve20873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6B8207-6AC8-4551-8C2E-66F81B4D419C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100657",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039283",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12225",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability. The vulnerability is due to the reuse of a preauthentication session token as part of the postauthentication session. An attacker could exploit this vulnerability by obtaining the presession token ID. An exploit could allow an attacker to hijack an existing user's session. Known Affected Releases 4.2(5). Cisco Bug IDs: CSCvf58392."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad web de Cisco Prime LAN Management Solution podría permitir que un atacante remoto autenticado secuestre la sesión administrativa de otro usuario. Esto también se conoce como vulnerabilidad de fijación de sesión. Esta vulnerabilidad se debe a la reutilización de un token de la sesión de preautenticación como parte de la sesión de postautenticación. Un atacante podría explotar esta vulnerabilidad obteniendo el ID del token de presesión. Si se explota esta vulnerabilidad, un atacante podría secuestrar la sesión de un usuario. Versiones afectadas conocidas 4.2(5): Cisco Bug IDs: CSCvf58392."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_lan_management_solution:4.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF17DFC-F732-4A4D-86A9-03E67A01D61B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039285",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12227",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this vulnerability by sending crafted URLs that include SQL statements. An exploit could allow the attacker to view or modify entries in some database tables, affecting the integrity of the data. Cisco Bug IDs: CSCvb58973."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de la base de datos SQL de Cisco Emergency Responder podría permitir que un atacante remoto sin autenticar ejecute un ataque de inyección de SQL a ciegas. Esto se debe a un fallo en la validación de entradas proporcionadas por el usuario empleadas en consultas SQL que eluden los filtros de protección. Un atacante podría explotar esta vulnerabilidad mediante el envío de URL modificadas que incluyan instrucciones SQL. Un exploit podría permitir al atacante ver o modificar entradas en algunas tablas de bases de datos, lo que afectaría a la integridad de los datos. Cisco Bug IDs: CSCvb58973."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3342DE3-F98B-48CF-9416-FA8D7F062E65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100653",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039287",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cer",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6627",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.660",
      "lastModified" : "2025-10-22T00:16:07.947",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service (DoS) condition. The vulnerability is due to Cisco IOS Software application changes that create UDP sockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP packets with a destination port of 0 to an affected device. A successful exploit could allow the attacker to cause UDP packets to be held in the input interfaces queue, resulting in a DoS condition. The input interface queue will stop holding UDP packets when it receives 250 packets. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de procesamiento UDP de Cisco IOS 15.1, 15.2 y 15.4, e OS XE 3.14 hasta la versión 3.18 podría permitir que un atacante remoto sin autenticar provoque que la cola de entrada de un sistema afectado retenga paquetes UDP. Esto provoca una cola de paquetes en la interfaz y una denegación de servicio. Esta vulnerabilidad se debe a cambios en la aplicación Cisco IOS Software que crean sockets UDP y dejan los sockets inactivos sin cerrarlos. Un atacante podría explotar esta vulnerabilidad enviando paquetes UDP con un puerto de destino 0 a un dispositivo afectado. Si se explota esta vulnerabilidad con éxito, un atacante podría provocar que los paquetes UDP fuesen retenidos en la cola de interfaces de entrada, lo que daría como resultado una condición DoS. La cola de interfaz de entrada dejará de retener paquetes UDP una vez que reciba 250 paquetes. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF70487-4E51-4570-927B-1B74D73E9D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242A4DC2-C9C7-4ACB-99F0-317959B0CA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF5C-1B91-4B54-BAB4-2DF17A1BBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD00484-39D2-4CD5-ABEA-3C5AD9977BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD9B95-0D54-49CA-824D-68175D6B4A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B082C941-CE02-440F-8DD7-87873504B964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EB6A3F-DDAB-4FC6-A857-6E106E815505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741D6E0-2507-44D9-8476-AE11DADEC611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318BB57-8001-4F2A-954C-AD8DB2A94356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3r\\)gca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB015852-A945-4801-93AA-6C562AFAB80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF9C9AE-B5A6-4B03-9ED9-FDBB40CE5BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08C168-48BE-41ED-A3BD-87BAE27A1351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100644",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039289",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6627",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6631",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the firmware of an affected device fails to handle certain XML values that are passed to the HTTP RPC service listening on the local subnet of the device. An attacker could exploit this vulnerability by submitting a malformed request to an affected device. A successful attack could cause the affected device to restart, resulting in a DoS condition. Yes has updated the affected devices with firmware that addresses this vulnerability. Customers are not required to take action. Vulnerable Products: This vulnerability affects YesMaxTotal, YesMax HD, and YesQuattro STB devices. Cisco Bug IDs: CSCvd08812."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio de llamada a procedimiento remoto (RPC) HTTP de receptores set-top box (STB) fabricados por Cisco para Yes podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio en un dispositivo afectado. Esta vulnerabilidad existe porque el firmware de un dispositivo afectado no es capaz de gestionar ciertos valores XML que se pasan al servicio RPC HTTP que escucha en la subred local del dispositivo. Un atacante podría explotar esta vulnerabilidad enviando una petición con formato incorrecto a un dispositivo afectado. Si se tiene éxito, el dispositivo podría reiniciarse, lo que provocaría una denegación de servicio. Yes ha actualizado los dispositivos afectados con firmware que soluciona esta vulnerabilidad. No se requiere que los clientes tomen medidas. Productos vulnerables: Esta vulnerabilidad afecta a dispositivos YesMaxTotal, YesMax HD, y YesQuattro STB. Cisco Bug IDs: CSCvd08812."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:yesmax_hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF02B52-46D1-4F73-A994-1FB0160B93B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:yesmax_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1CB0E9-9E2E-4E88-9C7A-82711E9DB1BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:yesmaxtotal_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59B52B8-BB93-42B2-B2DC-293987C9E2EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:yesmaxtotal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70F621E-D77F-4762-BCC8-E59388E30457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:yesquattro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBD73C0-8C0C-4EF1-85E7-F569CB5C31D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:yesquattro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7842C8-1210-4640-B17D-94262533C9C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100672",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-stb",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-stb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6780",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP packets to a specific group of open listening ports on a targeted device. An exploit could allow the attacker to cause the system to consume additional memory. If enough available memory is consumed, the system will restart, creating a temporary denial of service (DoS) condition. The DoS condition will end after the device has finished the restart process. This vulnerability affects the following Cisco products: Connected Grid Network Management System, if running a software release prior to IoT-FND Release 4.0; IoT Field Network Director, if running a software release prior to IoT-FND Release 4.0. Cisco Bug IDs: CSCvc77164."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de limitación TCP para Cisco IoT Field Network Director (IoT-FND) podría permitir que un atacante remoto sin autenticar provoque que el sistema consuma memoria adicional, forzando finalmente el reinicio del dispositivo. Esto también se conoce como agotamiento de memoria. Esta vulnerabilidad se debe a una protección de límite de tasa insuficiente. Un atacante podría explotar esta vulnerabilidad enviando una gran tasa de paquetes TCP a un grupo en concreto de puertos abiertos en escucha en un dispositivo objetivo. La vulnerabilidad podría permitir que el atacante provocase que el sistema consuma memoria adicional. Si se consume la suficiente memoria, el sistema se reiniciará, creando una condición temporal de denegación de servicio. La denegación de servicio terminará una vez el dispositivo haya finalizado el proceso de reinicio. Esta vulnerabilidad afecta a los siguientes productos Cisco: Connected Grid Network Management System, si ejecuta una versión de software anterior a IoT-FND Release 4.0; IoT Field Network Director, si ejecuta una versión de software anterior a IoT-FND Release 4.0. Cisco Bug IDs: CSCvc77164."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_grid_network_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0\\(0.54\\)",
            "matchCriteriaId" : "D81E72E3-D1C8-47CA-A0B3-148C9058F948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0-182",
            "matchCriteriaId" : "206F153F-37C7-4239-BA09-09C02FA93064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100641",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-fnd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-fnd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6789",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model (DOM)-based, environment or client-side cross-site scripting (XSS) attack. The vulnerability occurs because user-supplied data in the DOM input is not validated. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious DOM statements to the affected system. A successful exploit could allow the attacker to affect the integrity of the system by manipulating the database. Known Affected Releases 11.0(1)ES10. Cisco Bug IDs: CSCvf18325."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Unified Intelligence Center podría permitir que un atacante remoto sin autenticar afecte a la integridad del sistema ejecutando un ataque de Cross-Site Scripting (XSS) basado en DOM, en el entorno o del lado del cliente. Esta vulnerabilidad ocurre porque los datos proporcionados por el cliente en la entrada DOM no se validan. Un atacante podría explotar esta vulnerabilidad mediante el envío de URL modificadas que incluyan instrucciones DOM maliciosas al sistema afectado. Si se explota esta vulnerabilidad con éxito, un atacante podría afectar la integridad del sistema manipulando la base de datos. Versiones afectadas conocidas 11.0(1)ES10. Cisco Bug IDs: CSCvf18325."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:11.0\\(1\\)es10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA7A0BF-3EF1-437D-A94A-5FDD09590A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100646",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039278",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf18325",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuic",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf18325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuic",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6791",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) traffic by the affected software. An attacker could exploit this vulnerability by generating incomplete traffic streams. A successful exploit could allow the attacker to deny access to the TVS for an affected device, resulting in a DoS condition, until an administrator restarts the service. Known Affected Releases 10.0(1.10000.24) 10.5(2.10000.5) 11.0(1.10000.10) 9.1(2.10000.28). Cisco Bug IDs: CSCux21905."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio de verificación de confianza (TVS) en Cisco Unified Communications Manager podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un sistema afectado. Esta vulnerabilidad se debe a una gestión incorrecta del tráfico Transport Layer Security (TLS) por parte del software afectado. Un atacante podría explotar esta vulnerabilidad generando flujos de tráfico incompletos. Si se explota esta vulnerabilidad con éxito, el atacante podría negarle el acceso al TVS a un dispositivo afectado, lo que resultaría en una denegación de servicio hasta que el administrador reiniciase el servicio. Versiones afectadas conocidas 10.0(1.10000.24) 10.5(2.10000.5) 11.0(1.10000.10) 9.1(2.10000.28). Cisco Bug IDs: CSCux21905."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:9.1\\(2.10000.28\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3655A2A6-E9A2-43C2-97FE-96BD8343E5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.0\\(1.10000.24\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A3C945-C4A2-4187-9104-E61111C0832D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100662",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039286",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCux21905",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCux21905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6792",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker could exploit this vulnerability by manipulating the parameters of the batch action file function. Cisco Bug IDs: CSCvd61766."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de aprovisionamiento de lotes en Cisco Prime Collaboration Provisioning Tool podría permitir que un atacante remoto autenticado sobrescriba archivos del sistema como root. Esta vulnerabilidad se debe a la falta de validación de entradas de los parámetros en BatchFileName y Directory. Un atacante podría explotar esta vulnerabilidad manipulando los parámetros de la función batch action file. Cisco Bug IDs: CSCvd61766."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC0B9B9-C678-450E-9238-EECDD20EAB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100666",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039279",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6793",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit this vulnerability by accessing unauthorized information via the user interface. Cisco Bug IDs: CSCvd61932."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de gestión de inventario en Cisco Prime Collaboration Provisioning Tool podría permitir que un atacante remoto autenticado vea información sensible en el sistema. Esta vulnerabilidad se debe a una protección de información restringida insuficiente. Un atacante podría explotar esta vulnerabilidad accediendo a información sin autorización mediante la interfaz de usuario. Cisco Bug IDs: CSCvd61932."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC0B9B9-C678-450E-9238-EECDD20EAB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039280",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6794",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate their privileges to root. The attacker must first authenticate to the application with valid administrator credentials. The vulnerability is due to insufficient validation of user-supplied input at the CLI for certain commands. An attacker could exploit this vulnerability by authenticating to the affected application and submitting a crafted CLI command for execution at the Cisco Meeting Server CLI. An exploit could allow the attacker to perform command injection and escalate their privilege level to root. Vulnerable Products: This vulnerability exists in Cisco Meeting Server software versions prior to and including 2.0, 2.1, and 2.2. Cisco Bug IDs: CSCvf53830."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de análisis sintáctico de comandos CLI de Cisco Meeting Server podría permitir que un atacante local autenticado inyectase comandos y elevase sus privilegios a root. En primer lugar, el atacante debe autenticarse en la aplicación con credenciales de administrador válidas. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en el CLI para ciertos comandos. Un atacante podría explotar esta vulnerabilidad autenticándose en la aplicación afectada y enviando un comando CLI manipulado para ejecutarlo en el CLI de Cisco Meeting Server. Un exploit podría permitir que el atacante realizase una inyección de comandos y elevase su nivel de privilegios a root. Productos vulnerables: Esta vulnerabilidad existe en versiones de software Cisco Meeting Server anteriores a 2.0, 2.1 y 2.2 (estas, también incluidas). Cisco Bug IDs: CSCvf53830."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48DC084-1DD2-4878-B1DB-1035CAE3B918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA9A904-9AB5-4757-ABD1-0F6F933799BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B444DC9-BA6F-4159-A841-E8681DE3D38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA8A21E-97BA-4326-9F7B-FCBD480134EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FA3F5-752D-45AB-A8CB-6488F409D933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B80C9BA-07EC-4183-9AAD-3229913C9FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1895DF-AFB1-4B6E-A42C-38F7E19A5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC4BC50-1D9C-42F3-A88F-FE1E2C8A6C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA671C18-10F2-4A45-8D1C-BF460ECA84B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F618372C-0913-4773-9267-A835F31FA776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66C4375-BC22-43C6-8028-AA7F6B8D82AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507959BF-7A97-4037-954E-42D4EDAD93BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C1B418-2789-4A1B-843D-D36FD43FA434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D4B5E7-0496-47A6-AEC5-B08C18FB7EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4712BD6-A0E5-476D-903A-3F83540A80EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F214C934-BD71-4C2B-A9E0-140E2E9F42FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C3114E-7453-42E5-B0E7-632635E4A54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B310B39B-7D5D-4533-9FE6-5F47985E35B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2720CCF-3B73-4268-94C7-9AE3D1ECAC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7F9D72-0801-43B5-A64D-14E21DFC0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5D443-3345-42B6-8EC9-5F010785D5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ECDC6B-C793-4015-A40F-152A840E6417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD13161-9DE7-4183-BBA3-877E83E9DD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40AE1-65C6-421B-93EB-12EEE1AF55DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4E022B-7CC9-4CDC-BC75-FAAFD641A202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09489D1A-97AB-468F-AA47-33C23D08ED95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E050F7-7AE7-4B3E-BAFA-4CE00F3DAEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AD9EC-465B-47A9-8D7A-05C52CBD4509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B019426-0625-4588-B0E1-94FD58F2BB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E377BED5-DC33-44C4-A75E-73971A13C211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100464",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039245",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170823-cms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170823-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6795",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device. Cisco Bug IDs: CSCvf10783."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código USB-modem de Cisco IOS XE Software que se ejecuta en Cisco ASR 920 Series Aggregation Services Routers podría permitir que un atacante local autenticado sobrescriba archivos arbitrarios en el sistema operativo subyacente de un dispositivo afectado. La vulnerabilidad se debe a una validación de entrada incorrecta del comando usb modem de la plataforma en el CLI del software afectado. Un atacante podría explotar esta vulnerabilidad modificando el comando usb modem de la plataforma en el CLI de un dispositivo afectado. Si se explota esta vulnerabilidad con éxito, el atacante podría sobrescribir archivos arbitrarios en el sistema operativo subyacente de un dispositivo afectado. Cisco Bug IDs: CSCvf10783."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D95E8A-8F0B-44E5-B266-09E10BAAEC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-10sz-pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCA2DB2-AE09-4A99-90C9-60AE0CD9A035"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B83BED-5A49-4CF0-9827-AA291D01F60E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9ECE39-C111-412B-AF56-9B7435D98FE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B25F27-6527-46F8-9C1A-4B4F79F3E6C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE70CCD-6062-45D8-8566-7C9E237E030F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375F9E12-A61B-4FD3-AE07-D4E686EB112A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr-920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCC94C3-9EEF-4600-BE82-8AEDEB0F1446"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870D5B63-A1D5-442A-B2B9-9E522E5DB08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85489F69-EAF0-4971-8C93-36838A8AA00E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100656",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039282",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6796",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-07T21:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Cisco Bug IDs: CSCve48949."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código USB-modem de Cisco IOS XE Software que se ejecuta en Cisco ASR 920 Series Aggregation Services Routers podría permitir que un atacante local autenticado inyecte y ejecute comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado. La vulnerabilidad se debe a una validación de entrada incorrecta del comando usb modem de la plataforma en el CLI del software afectado. Un atacante podría explotar esta vulnerabilidad modificando el comando usb modem de la plataforma en el CLI de un dispositivo afectado. Si se explota esta vulnerabilidad con éxito, el atacante podría inyectar y ejecutar comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado. Cisco Bug IDs: CSCve48949."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D95E8A-8F0B-44E5-B266-09E10BAAEC55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100647",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039281",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-07T22:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an \"airbase-ng -e\" command."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de XSS (persistente) en el router Intelbras Wireless N 150Mbps con firmware WRN 240 permite que los atacantes roben credenciales inalámbricas sin estar conectados a la red; esto se relaciona con userRpm/popupSiteSurveyRpm.htm y userRpm/WlanSecurityRpm.htm. El vector de ataque es un ESSID manipulado, tal y como demuestra un comando \"airbase-ng -e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intelbras:wrn_240_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D27BC2-4C36-4E12-829D-F52C4817C629"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intelbras:wrn_240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF13F09-B72E-45B3-B79F-5A31D2A5063E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://whiteboyz.xyz/xss-roteador-intelbras-wrn-240.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42633/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://whiteboyz.xyz/xss-roteador-intelbras-wrn-240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42633/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-08T10:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a \"create-file-popup\" action, and the directory name in a \"create-directory-popup\" action, in the HTTP POST method to the \"/plugin/file_manager/\" script (aka an /admin/plugin/file_manager/browse// URI)."
      }, {
        "lang" : "es",
        "value" : "Wolf CMS 0.8.3.1 permite que se lleven a cabo ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad existe por una sanitización insuficiente del nombre de archivo en una acción \"create-file-popup\" y del nombre de directorio en una acción \"create-directory-popup\" en el método HTTP POST al script \"/plugin/file_manager/\" (también conocido como una URI /admin/plugin/file_manager/browse//)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfcms:wolf_cms:0.8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519B59F4-C6D6-43CB-AE6B-42CAA317FA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-08T10:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import."
      }, {
        "lang" : "es",
        "value" : "Un ataque de tipo XXE en Diving Log 6.0 permite que los atacantes vean archivos locales de forma remota mediante un archivo dive.xml manipulado que no se gestiona adecuadamente durante una importación Subsurface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:divinglog:diving_log:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.9",
            "matchCriteriaId" : "06678DB7-0B4C-483C-9AD3-A01B94884DCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thenopsled.com/divinglog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43187/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://thenopsled.com/divinglog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43187/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11161",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-09-08T14:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to label.php; or (2) type parameter to synotheme.php."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de inyección SQL en Synology Photo Station en versiones anteriores a la 6.7.4-3433 y 6.3-2968 que permiten que los atacantes remotos ejecuten comandos SQL arbitrarios mediante (1) el parámetro article_id en label.php; o (2) el parámetro type en synotheme.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3-2967",
            "matchCriteriaId" : "23EC868E-F493-4A58-B3D5-0D05F33725FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.3-3432",
            "matchCriteriaId" : "9EDAA6AE-EA8A-4B2E-A36D-9EBC48BFC485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11162",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-09-08T14:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en synphotoio en Synology Photo Station en versiones anteriores a la 6.7.4-3433 y a la 6.3-2968 permite que atacantes remotos autenticados lean archivos arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3-2967",
            "matchCriteriaId" : "23EC868E-F493-4A58-B3D5-0D05F33725FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.3-3432",
            "matchCriteriaId" : "9EDAA6AE-EA8A-4B2E-A36D-9EBC48BFC485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12071",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-09-08T14:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download arbitrary local files via the url parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Server-Side Request Forgery (SSRF) en file_upload.php en Synology Photo Station en versiones anteriores a la 6.7.4-3433 y 6.3-2968 permite que usuarios remotos autenticados descarguen archivos locales arbitrarios mediante el parámetro url."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3-2967",
            "matchCriteriaId" : "23EC868E-F493-4A58-B3D5-0D05F33725FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.3-3432",
            "matchCriteriaId" : "9EDAA6AE-EA8A-4B2E-A36D-9EBC48BFC485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2550",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-08T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily guessable filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Easy Joomla Backup v3.2.4. El software crea una copia del archivo de recuperación en el root web con un nombre de archivo fácilmente adivinable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubik-rubik:easy_joomla_backup:3.2.4:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "4544E6EF-CD44-4938-B776-CD536821C906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=200",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-08T18:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la función load_multiboot en hw/i386/multiboot.c en QEMU (Quick Emulator) permite que usuarios locales invitados del sistema operativo ejecuten código arbitrario en el host mediante valores de dirección de cabeceras de arranque múltiple manipulados, que desencadenan una escritura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "DE828526-81EF-4807-8E73-E0FC56034D8B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100694",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3368",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3369",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-09/msg01032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2017-09/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-08T19:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides."
      }, {
        "lang" : "es",
        "value" : "La implementación driver_override en drivers/base/platform.c en el kernel de Linux en versiones anteriores a la 4.12.1 permite que los usuarios locales obtengan privilegios mediante el uso de una condición de carrera causada por una operación de lectura y otra de almacenamiento que involucren diferentes sobrescrituras de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.61",
            "matchCriteriaId" : "737CDAED-1476-433D-A1D3-7460323FF392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "5F6B255F-0933-4983-B3F6-AD5B128A8F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.77",
            "matchCriteriaId" : "F09881FD-5BBD-4E0F-88C0-C795EE420DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.37",
            "matchCriteriaId" : "86853D2B-E143-47D3-9419-39AB1F0960D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.10",
            "matchCriteriaId" : "EE4EAA36-3647-4C48-8C52-857C95CAD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12",
            "versionEndExcluding" : "4.12.1",
            "matchCriteriaId" : "E490C35F-808E-44C4-9895-65DA70CC76F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6265539776a0810b7ce6398c27866ddb9c6bd154",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100651",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489078",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1057474",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6265539776a0810b7ce6398c27866ddb9c6bd154",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6265539776a0810b7ce6398c27866ddb9c6bd154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1057474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6265539776a0810b7ce6398c27866ddb9c6bd154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0752",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (windowmanager). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100673",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0753",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en las bibliotecas Android (libgdx). Producto: Android. Versiones: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100650",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0755",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32178311."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en las librerías de Android (libminikin). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32178311."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100650",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0756",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0757",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0758",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0759",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libstagefright). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0760",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libstagefright). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0761",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0762",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0763",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0764",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libvorbis). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0765",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872863."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libstagefright). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872863."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0766",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libjhead). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libjhead). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0767",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37536407."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libeffects). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37536407."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0768",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62019992."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libeffects). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62019992."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0769",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37662122."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libstagefright). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37662122."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0770",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38234812."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libmediaplayerservice). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38234812."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0771",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37624243."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libskia). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-37624243."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0772",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38115076."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38115076."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0773",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37615911."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37615911."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0774",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62673844."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62673844."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0775",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673179."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673179."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0776",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38496660."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38496660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0777",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-38342499."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-38342499."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0778",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-62133227."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-62133227."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0779",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (audioflinger). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38340117."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (audioflinger). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38340117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0780",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android runtime (android messenger). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37742976."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en runtime en Android (android messenger). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37742976."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100674",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0784",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android system (nfc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de Android (nfc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100671",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0786",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37351060. Referencias: B-V2017060101."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0787",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References: B-V2017053104."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37722970. Referencias: B-V2017053104."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0788",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722328. References: B-V2017053103."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37722328. Referencias: B-V2017053103."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0789",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37685267. References: B-V2017053102."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37685267. Referencias: B-V2017053102."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0790",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37357704. References: B-V2017053101."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37357704. Referencias: B-V2017053101."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0791",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37306719. References: B-V2017052302."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37306719. Referencias: B-V2017052302."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0792",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37305578. References: B-V2017052301."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el driver Wi-Fi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37305578. Referencias: B-V2017052301."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0793",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the N/A memory subsystem. Product: Android. Versions: Android kernel. Android ID: A-35764946."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el subsistema de memoria N/A. Producto: Android. Versiones: Android kernel. Android ID: A-35764946."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100670",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0794",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el driver scsi del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-35644812."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100667",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3798-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3798-2/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3798-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3798-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0795",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-36198473. References: M-ALPS03361480."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek accessory detector driver. Producto: Android. Versiones: Android kernel. Android ID: A-36198473. Referencias: M-ALPS03361480."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0796",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek auxadc driver. Product: Android. Versions: Android kernel. Android ID: A-62458865. References: M-ALPS03353884, M-ALPS03353886, M-ALPS03353887."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek auxadc driver. Producto: Android. Versiones: Android kernel. Android ID: A-62458865. Referencias: M-ALPS03353884, M-ALPS03353886, M-ALPS03353887."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0797",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-62459766. References: M-ALPS03353854."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek accessory detector driver. Producto: Android. Versiones: Android kernel. Android ID: A-62459766. Referencias: M-ALPS03353854."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0798",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek kernel. Product: Android. Versions: Android kernel. Android ID: A-36100671. References: M-ALPS03365532."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek kernel. Producto: Android. Versiones: Android kernel. Android ID: A-36100671. Referencias: M-ALPS03365532."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0799",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek lastbus. Product: Android. Versions: Android kernel. Android ID: A-36731602. References: M-ALPS03342072."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek lastbus. Producto: Android. Versiones: Android kernel. Android ID: A-36731602. Referencias: M-ALPS03342072."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0800",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek teei. Product: Android. Versions: Android kernel. Android ID: A-37683975. References: M-ALPS03302988."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek teei. Producto: Android. Versiones: Android kernel. Android ID: A-37683975. Referencias: M-ALPS03302988."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0801",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek libmtkomxvdec. Product: Android. Versions: Android kernel. Android ID: A-38447970. References: M-ALPS03337980."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek libmtkomxvdec. Producto: Android. Versiones: Android kernel. Android ID: A-38447970. Referencias: M-ALPS03337980."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0802",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek kernel. Product: Android. Versions: Android kernel. Android ID: A-36232120. References: M-ALPS03384818."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek kernel. Producto: Android. Versiones: Android kernel. Android ID: A-36232120. Referencias: M-ALPS03384818."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0803",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-36136137. References: M-ALPS03361477."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek accessory detector driver. Producto: Android. Versiones: Android kernel. Android ID: A-36136137. Referencias: M-ALPS03361477."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0804",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-08T20:29:01.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the MediaTek mmc driver. Product: Android. Versions: Android kernel. Android ID: A-36274676. References: M-ALPS03361487."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en MediaTek mmc driver. Producto: Android. Versiones: Android kernel. Android ID: A-36274676. Referencias: M-ALPS03361487."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "ACB63B86-4554-430F-B80E-98AC49314905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12699",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-09T01:29:02.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de permisos por defecto incorrectos en AzeoTech DAQFactoy en versiones anteriores a la 17.1. Los usuarios locales que no son administradores podrían reemplazar o modificar los archivos de aplicaciones originales con archivos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azeotech:daqfactory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.3",
            "matchCriteriaId" : "219DA227-87A6-430B-B4BF-E98B024D35A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100522",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12731",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-09T01:29:02.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of malicious SQL queries via the input from the client."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en las consolas de OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500 y SiteSentinel iSite ATG con las siguientes versiones de software: anteriores a la V175, V175-V189, V191-V195 y V16Q3.1. La aplicación es vulnerable a la inyección de consultas SQL maliciosas a través de la entrada del cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "175",
            "matchCriteriaId" : "A065260A-6ED8-45F2-9190-D4F3F1CA4948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:16q3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316BBC8F-75C9-49D4-8971-A16C67DAAC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AABDF8A-4058-45BE-9246-5133494BDD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC929081-714F-4F86-9B84-2E06F7623753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9239F35E-C6D2-41D7-A4A1-127C3E607573"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:opwglobal:sitesentinel_isite_atg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB71D3F-AAB9-4333-B47A-524F80ED9F78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "175",
            "matchCriteriaId" : "2F2B9FEC-D4EC-4284-8B11-BD7C1AE46AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:16q3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7527D23C-F614-4317-83C5-DAC1355DE70F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6B6A28-A289-4CF7-9CA4-93A2317306B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCC190C-2F13-4192-B4CD-F6C404DEC4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B4B62F-4828-4E34-ADB5-D5D808D6B0A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:opwglobal:sitesentinel_integra_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F123D060-C5EA-44CB-AB0A-10D7D94BF96A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "175",
            "matchCriteriaId" : "8EA66397-344F-4B95-A742-761D32AB6EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:16q3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28ECD62-417B-4FEC-A84A-FD2E2E35A14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8E0ABE-2228-431D-92F9-45257AD8D8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FC1AA6-DEEC-4DFA-8EFB-7FE250DA5301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975D97B5-EB10-4DFF-A9F6-EF5414E55EE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:opwglobal:sitesentinel_integra_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CBB664-CFC2-4F74-969B-3FC73BD4B61A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100563",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12733",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-09T01:29:02.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may create an application user account to gain administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de falta de autenticación para una función crítica en las consolas de OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500 y SiteSentinel iSite ATG con las siguientes versiones de software: anteriores a la V175, V175-V189, V191-V195 y V16Q3.1. Un atacante podría crear una cuenta de usuario de aplicación para obtener privilegios de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "175",
            "matchCriteriaId" : "A065260A-6ED8-45F2-9190-D4F3F1CA4948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:16q3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316BBC8F-75C9-49D4-8971-A16C67DAAC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AABDF8A-4058-45BE-9246-5133494BDD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC929081-714F-4F86-9B84-2E06F7623753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9239F35E-C6D2-41D7-A4A1-127C3E607573"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:opwglobal:sitesentinel_isite_atg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB71D3F-AAB9-4333-B47A-524F80ED9F78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "175",
            "matchCriteriaId" : "2F2B9FEC-D4EC-4284-8B11-BD7C1AE46AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:16q3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7527D23C-F614-4317-83C5-DAC1355DE70F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6B6A28-A289-4CF7-9CA4-93A2317306B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCC190C-2F13-4192-B4CD-F6C404DEC4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B4B62F-4828-4E34-ADB5-D5D808D6B0A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:opwglobal:sitesentinel_integra_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F123D060-C5EA-44CB-AB0A-10D7D94BF96A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "175",
            "matchCriteriaId" : "8EA66397-344F-4B95-A742-761D32AB6EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:16q3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28ECD62-417B-4FEC-A84A-FD2E2E35A14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8E0ABE-2228-431D-92F9-45257AD8D8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FC1AA6-DEEC-4DFA-8EFB-7FE250DA5301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:195:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975D97B5-EB10-4DFF-A9F6-EF5414E55EE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:opwglobal:sitesentinel_integra_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CBB664-CFC2-4F74-969B-3FC73BD4B61A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100563",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T01:29:02.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large \"item_count\" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En libavformat/mov.c en FFmpeg 3.3.3, una denegación de servicio en read_tfra() debido a una falta de comprobación EOE (End of File) podría provocar un gran consumo de CPU y memoria. Cuando se proporciona un archivo MOV manipulado, que reclama un gran campo \"item_count\" en el encabezado pero que no contiene datos de respaldo suficientes, el bucle consumiría una gran cantidad de recursos de CPU y de memoria, ya que no existe una comprobación EOF dentro del bucle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100701",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/9cb4eb772839c5e1de2855d126bf74ff16d13382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/9cb4eb772839c5e1de2855d126bf74ff16d13382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T01:29:02.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large \"ict\" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop."
      }, {
        "lang" : "es",
        "value" : "En libavformat/asfdec_f.c en FFmpeg 3.3.3, una denegación de servicio en asf_build_simple_index() debido a una falta de comprobación EOE (End of File) podría provocar un gran consumo de CPU. Cuando se proporciona un archivo ASF manipulado, que reclama un gran campo \"ict\" en el encabezado pero que no contiene datos de respaldo suficientes, el bucle for consumiría una gran cantidad de recursos de CPU y de memoria, ya que no existe una comprobación EOF dentro del bucle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100703",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/afc9c683ed9db01edb357bc8c19edad4282b3a97",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/afc9c683ed9db01edb357bc8c19edad4282b3a97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T01:29:02.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en montículos en la función WritePCXImage en coders/pcx.c en ImageMagick 7.0.6-8 Q16 permite que atacantes remotos provoquen una denegación de servicio o ejecución de código mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100702",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/733",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5147",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-09T01:29:02.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento de ruta de búsqueda no controlado en AzeoTech DAQFactory en versiones anteriores a la 17.1. Se ha identificado una vulnerabilidad de elemento de ruta de búsqueda no controlado, que podría ejecutar archivos DLL maliciosos que se han colocado en la ruta de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azeotech:daqfactory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.3",
            "matchCriteriaId" : "219DA227-87A6-430B-B4BF-E98B024D35A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100522",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8040",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-09-09T01:29:03.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the Single Sign-On service broker file system."
      }, {
        "lang" : "es",
        "value" : "En Single Sign-On para Pivotal Cloud Foundry (PCF) en versiones 1.3.x anteriores a la 1.3.4 y en versiones a la 1.4.x anteriores a la 1.4.3, se ha descubierto un ataque XXE (XML External Entity) en el cuadro de mandos del servicio Single Sign-On. En algunos casos, los usuarios con privilegios pueden subir archivos XML mal formados, lo que llevaría a una exposición de datos en el sistema de archivos del bróker de servicios Single Sign-On."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637F500-B290-4E67-9479-DDD225596E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57579759-CA64-4722-BAEC-6B111BB23BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDE1123-0E6A-4293-A84A-6C7D5E87C60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23C2CCE-3943-48BC-AB44-FE6E19F1DF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2075D6CD-CC36-42C7-8F4D-E14E9B946367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C6E42F-0C08-4F77-8D42-1BEA8CCD38DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED7CDE4-3AF9-4171-8F63-1BE147487A02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100617",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8040",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8041",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-09-09T01:29:03.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name."
      }, {
        "lang" : "es",
        "value" : "En Single Sign-On para Pivotal Cloud Foundry (PCF) en versiones 1.3.x anteriores a la 1.3.4 y en versiones 1.4.x anteriores a la 1.4.3, un usuario puede ejecutar un ataque XSS en ciertas páginas de la interfaz de usuario delservicio Single Sign-On introduciendo código en el campo de texto para un nombre de organización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637F500-B290-4E67-9479-DDD225596E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57579759-CA64-4722-BAEC-6B111BB23BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDE1123-0E6A-4293-A84A-6C7D5E87C60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23C2CCE-3943-48BC-AB44-FE6E19F1DF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2075D6CD-CC36-42C7-8F4D-E14E9B946367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C6E42F-0C08-4F77-8D42-1BEA8CCD38DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED7CDE4-3AF9-4171-8F63-1BE147487A02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100615",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8041",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T08:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodec_string function in libavcodec/utils.c, leading to a NULL pointer dereference. (It is also conceivable that there is security relevance for a NULL pointer dereference in av_color_primaries_name calls within the ffprobe command-line program.)"
      }, {
        "lang" : "es",
        "value" : "La función av_color_primaries_name en libavutil/pixdesc.c en FFmpeg 3.3.3 podría devolver un puntero NULL dependiendo de un valor contenido en un archivo, se anticipa en las llamadas, tal y como demuestra la función avcodec_string en libavcodec/utils.c, lo que conduce a una desreferencia de puntero NULL. (También es posible que haya relevancia de seguridad para una desreferencia de puntero NULL en llamadas av_color_primaries_name en el programa de línea de comandos ffprobe)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97A44A7-DFB8-4DA8-8A4A-DBC1FF255D9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100704",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/837cb4325b712ff1aab531bf41668933f61d75d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2017-August/215198.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/837cb4325b712ff1aab531bf41668933f61d75d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2017-August/215198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T08:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application."
      }, {
        "lang" : "es",
        "value" : "WP1StylesListener.cpp, WP5StylesListener.cpp, y WP42StylesListener.cpp en libwpd 0.10.1 no gestiona iteradores correctamente, lo que permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en montículos en la clase WPXTableList en WPXTable.cpp). Esta vulnerabilidad puede desencadenarse en LibreOffice en versiones anteriores a la 5.3.7. Podría conducir a un ataque remoto contra una aplicación LibreOffice."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6",
            "matchCriteriaId" : "20A88F1B-439B-477D-ACEA-F839F392E833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libwpd:libwpd:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419E516E-2F49-4DF0-B725-85E08BF517CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.documentfoundation.org/show_bug.cgi?id=112269",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489337",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/libreoffice/core/commit/?id=dd89afa6ee8166b69e7a1e86f22616ca8fc122c9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libwpd/code/ci/0329a9c57f9b3b0efa0f09a5235dfd90236803a5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libwpd/code/ci/f40827b3eae260ce657c67d9fecc855b09dea3c3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libwpd/tickets/14/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.documentfoundation.org/show_bug.cgi?id=112269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/libreoffice/core/commit/?id=dd89afa6ee8166b69e7a1e86f22616ca8fc122c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libwpd/code/ci/0329a9c57f9b3b0efa0f09a5235dfd90236803a5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libwpd/code/ci/f40827b3eae260ce657c67d9fecc855b09dea3c3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/libwpd/tickets/14/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T08:29:00.287",
      "lastModified" : "2025-11-03T20:15:41.793",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the bson_utf8_validate function in bson-utf8.c), as demonstrated by bson-to-json.c."
      }, {
        "lang" : "es",
        "value" : "En MongoDB libbson 1.7.0, la función bson_iter_codewscope en bson-iter.c no calcula correctamente un argumento de longitud bson_utf8_validate, lo que permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en montículos en la función bson_utf8_validate en bson-utf8.c), tal y como demuestra bson-to-json.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08F7D5-3B9A-4335-9631-889023D013FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100825",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489355",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489356",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489362",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/05/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T08:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0 hay un acceso ilegal a dirección en la función paste_tokens() en preproc.c, también llamado desreferencia de puntero NULL. Esto conducirá a un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-09T08:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un bucle infinito en la función jpc_dec_tileinit en jpc/jpc_dec.c en Jasper 2.0.13. Esto podría permitir que se realice un ataque de denegación de servicio remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8082B6B8-4CBC-44EB-801C-E7D60E28680C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/mdadams/jasper/issues/146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-10T07:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service (daemon crash) via a 'LIST \"\" \"Other Users\"' command."
      }, {
        "lang" : "es",
        "value" : "En la función mboxlist_do_find en imap/mboxlist.c en Cyrus IMAP en versiones anteriores a la 3.0.4, un error por un paso (off-by-one) en el cálculo de prefijos para el comando LIST provocaba el uso de memoria sin inicializar, lo que podría permitir que atacantes remotos obtengan información sensible o provoquen una denegación de servicio (daemon crash) mediante un comando 'LIST \"\" \"Other Users\"'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "B093D058-650F-443F-AB82-F3E58BFD222B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/commit/6bd33275368edfa71ae117de895488584678ac79",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/issues/2132",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.andrew.cmu.edu/pipermail/cyrus-announce/2017-September/000145.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/commit/6bd33275368edfa71ae117de895488584678ac79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cyrusimap/cyrus-imapd/issues/2132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.andrew.cmu.edu/pipermail/cyrus-announce/2017-September/000145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-10T07:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS en versiones anteriores a la 1.1.0 permite que atacantes remotos provoquen una denegación de servicio (bloqueo de cuenta) aprovechando la gestión incorrecta de ciertas relaciones de substrings de nombre de usuario, como por ejemplo el nombre de usuario admin"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "F166E57C-441B-4B5E-9050-586E57BF7E7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/semplon/GeniXCMS/issues/78",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/issues/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/semplon/GeniXCMS/releases/tag/v1.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en admin/menus/edit.php en Dolibarr ERP/CRM 6.0.0 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro menuid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7E0AC9-13AB-4343-BFB6-6338B66E323B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de tipo Cross-Site Scripting (XSS) en Dolibarr ERP/CRM 6.0.0 que permiten a usuarios autenticados remotos inyectar scripts web o HTML arbitrarios mediante los parámetros (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5 o (16) ProfId6 en htdocs/admin/company.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7E0AC9-13AB-4343-BFB6-6338B66E323B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información sensible en document.php en Dolibarr ERP/CRM 6.0.0 mediante el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7E0AC9-13AB-4343-BFB6-6338B66E323B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Dolibarr ERP/CRM 6.0.0 permite que usuarios autenticados remotos inyecten scripts web o HTML arbitrarios mediante el parámetro Title en htdocs/admin/menus/edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7E0AC9-13AB-4343-BFB6-6338B66E323B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en don/list.php en Dolibarr 6.0.0 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro statut."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7E0AC9-13AB-4343-BFB6-6338B66E323B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/33e2179b65331d9d9179b59d746817c5be1fecdb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/33e2179b65331d9d9179b59d746817c5be1fecdb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en la interfaz web de EyesOfNetwork (también conocido como eonweb) 5.1-0 mediante la cookie user_id en header.php. Este es un problema relacionado con CVE-2017-1000060."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/eonweb_Translator.class.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/eonweb_Translator.class.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de sobrelectura de búfer basada en memoria dinámica (heap) en SampleImage() en MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 permite que atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/717",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-8 Q16 gestiona los chequeos EOF incorrectamente en ReadMPCImage in coders/mpc.c, provocando una división entre cero en GetPixelCacheTileSize in MagickCore/cache.c, permitiendo a los atacantes remotos provocar una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54497F6-C5E0-49FD-B8C2-5456A99F39E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/708",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de subida de archivos sin restricciones en fileDenyPattern en sysext/core/Classes/Core/SystemEnvironmentBuilder.php en TYPO3 para las versiones 7.6.0 a 7.6.21 y 8.0.0 a 8.7.4 permite a los usuarios autenticados remotos subir archivos con una extensión .pht y, como consecuencia, ejecutar código PHP arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C022973-D06B-4CEF-87BF-3C016AAD4770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A63F3A-DC95-49FF-B6AC-FD98F8499905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E276D9-4C36-4630-BC44-5D49398E4452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF317B6-656C-4C2C-81F8-4864EE3F4D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D691A7EF-EE47-44EC-A073-04C3C0A432E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E140F9-73E8-4EF7-BFDA-F56584D7FCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E576B25-E43B-4C21-B1E5-EF937714ABC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAB79AD-5991-4FCD-99C4-E742845BF086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E5EBD4-51A0-4948-BF52-442766C32B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B431C56-1D78-40BC-9E29-CE3F124ECDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E04FC7-CB8E-4F68-94AC-8604DD8CD2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5773A565-8A1C-419D-81BA-F38AB1890AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B1CD9B-C309-442D-A870-89E6B3413878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D44308-795D-4BA4-8631-5888D52866A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC7A89-35EB-4D15-8ABC-C1B4BBFAE51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83755CA5-630F-43F4-A584-4D4A4A8850E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5624ED7-228F-4961-A7D4-6631AF72702B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E21CB97-F010-453F-B823-39F9620EF9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD83B4C9-B519-4B55-9506-8EA7F617B29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00509AC8-DCAC-44F1-BC29-6583913A6DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06031E12-E8F9-4D5E-9B93-5D3D650E839F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:7.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4376EA-D181-4D6B-911A-93BFF586BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05C2314-BE68-448D-A7A9-3A5B5CBC1845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC55556-3347-4AAB-AF6D-CC8440CD1C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5ADD12-44F2-49AA-BE15-9DEE18C9E80C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12C85B0-522C-4526-99EE-8EEFD1830281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7676A2E-513C-4111-AA46-24C3C33DF34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1660098C-AFA8-49D6-B78B-2A5E639352FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E16C4B2-5F02-44CF-84CF-D8699BD38548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F39A9A-3929-4747-BB60-7F415B22C407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0274745-3C5D-4E3B-A41F-48DED56D094C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B321C23-AFD1-4586-92DA-8A1DC8FF88F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C171728-F6C4-4B47-80B6-5CC5B67874CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06439EC9-8513-40D5-A918-DBC58879366B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05143443-C657-4B75-9BEE-A85AD09BC00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F725F38B-C2BA-4746-9F1E-B6E89A8BCAD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED959D2E-37A2-46CB-B21C-91BD526D9804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A648456-839C-40F7-B7B4-4D2B9A815925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3DDDE3-CF53-435F-AB74-0E7BD6490F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB7E6E3-F533-4E24-9AAE-45FF2FC9AF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D5980B-BA21-4D0C-9005-5D3184806C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:8.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7559EA-16E2-4256-90A9-0063A20B658A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100620",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039295",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en la interfaz web de EyesOfNetwork (también conocido como eonweb) 5.1-0 mediante la cookie group_id en side.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/eonweb_side.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/eonweb_side.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file."
      }, {
        "lang" : "es",
        "value" : "En el SDK en Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample en Core/Ap4AtomSampleTable.cpp contiene una vulnerabilidad de infracción de acceso de lectura de memoria. Es posible explotar esta vulnerabilidad abriendo un archivo MP4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479B40C3-F64E-4514-8047-41B54281DEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file."
      }, {
        "lang" : "es",
        "value" : "En el SDK en Bento4 1.5.0-616, SetItemCount en un archivo Core/Ap4StscAtom.h contiene una vulnerabilidad de infracción de acceso de escritura de memoria. Es posible explotar esta vulnerabilidad y posiblemente ejecutar código arbitrario abriendo un archivo MP4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479B40C3-F64E-4514-8047-41B54281DEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file."
      }, {
        "lang" : "es",
        "value" : "En el SDK en Bento4 1.5.0-616, la clase AP4_StscAtom en Ap4StscAtom.cpp contiene una vulnerabilidad de infracción de acceso de escritura de memoria. Es posible explotar esta vulnerabilidad y posiblemente ejecutar código arbitrario abriendo un archivo MP4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479B40C3-F64E-4514-8047-41B54281DEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file."
      }, {
        "lang" : "es",
        "value" : "En el SDK en Bento4 1.5.0-616, la clase AP4_StssAtom en Ap4StssAtom.cpp contiene una vulnerabilidad de infracción de acceso de escritura de memoria. Es posible explotar esta vulnerabilidad y posiblemente ejecutar código arbitrario abriendo un archivo MP4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:1.5.0-616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD1E6D7-F592-4AA5-9776-734899DDE7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file."
      }, {
        "lang" : "es",
        "value" : "En el SDK en Bento4 1.5.0-616, la clase AP4_StszAtom en el archivo Ap4StszAtom.cpp contiene una vulnerabilidad de infracción de acceso de lectura de memoria. Es posible explotar esta vulnerabilidad abriendo un archivo MP4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479B40C3-F64E-4514-8047-41B54281DEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter."
      }, {
        "lang" : "es",
        "value" : "En dispositivos NVR de Samsung, los atacantes pueden leer el hash de la contraseña MD5 de la cuenta \"admin\" mediante unos datos szUserName JSON en cgi-bin/main-cgi y conectarse al dispositivo con ese hash en el parámetro szUserPasswd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:srn_1670d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C7B58C-6093-42CA-9D69-C236A14E9830"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:srn_1670d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4B4F1E-E134-4A73-80BF-B67728C404D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:srn_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B36B3-1613-4537-87B4-DBFC2BE1A7DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:srn_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5781F8-7203-4602-B82D-F998B357D4D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:srn_472s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F48CC4C-CDB6-4BB8-9E37-203D8929DF67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:srn_472s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09190D06-644D-4AC2-8BFA-1C143492AF5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:srn_470d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193199CD-A964-4970-937A-55FBD264D6B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:srn_470d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED8FE5E-391F-40FB-8026-99EBDC7E78CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zzz66686/Samsung_NVR_vul",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zzz66686/Samsung_NVR_vul",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control the device."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NVR de Honeywell permiten a los atacantes remotos crear una cuenta de usuario en el grupo admin accediendo a la cuenta guest para obtener un ID de sesión y luego enviar dicho ID de sesión a la URI /RPC2 mediante una petición userManager.addUser. El atacante puede conectarse al dispositivo con la nueva cuenta de usuario para hacerse con el control completo de dicho dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:enterprise_dvr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B360358-8C69-4C2C-A630-63BE3085CEC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:enterprise_dvr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5C35FE-7FB7-48C9-8C49-1F7AA72920B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:maxpro_nvr_hybrid_se_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B04C04-6833-470D-AB54-DAAA037FCE8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:maxpro_nvr_hybrid_se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C40877-53B6-4E93-A20E-C1B10A3DDC64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:maxpro_nvr_hybrid_xe_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E40FD2-07EB-4B84-A08E-C832F1DA5247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:maxpro_nvr_hybrid_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713DEEB9-D826-4AEC-8507-C7FD9E6DDE0A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:maxpro_nvr_se_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8D0409-22A3-4086-8AAD-164B4C1A328D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:maxpro_nvr_se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE36368-5954-4F85-B497-3020D901A78C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:maxpro_nvr_xe_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5660B432-624E-4397-B967-C292F215B81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:maxpro_nvr_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865A4620-2861-4D0F-A1DE-F64FD6D5ACC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:fusion_iv_rev_c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3660E3E2-FFBA-4103-9618-BDA559616C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:fusion_iv_rev_c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146194EE-79D7-4C76-9E89-A9C6FD79BC32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:honeywell:maxpro_nvr_pe_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9987B93-673C-493C-B782-61D7698B7B16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:honeywell:maxpro_nvr_pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4BF9BE-9DC7-4CE4-BC26-828C16F20841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zzz66686/Honeywell_NVR_vul",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zzz66686/Honeywell_NVR_vul",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de desbordamiento de búfer basado en pila en xtrans_interpolate en internal/dcraw_common.cpp de LibRaw en versiones anteriores a la 0.18.3. Podría permitir un ataque remoto de denegación de servicio o de ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.2",
            "matchCriteriaId" : "CD1DD3D2-FD82-4212-B4CC-B44AF66EEC00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibRaw/LibRaw/issues/99",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/issues/99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos EE 4GEE WiFi MBB (anteriores a EE60_00_05.00_31) tienen una vulnerabilidad de Cross-Site Request Forgery (CSRF) relacionada con goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset y goform/uploadBackupSettings."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ee:4gee_wifi_mbb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ee60_00_05.00_25",
            "matchCriteriaId" : "BAB5D116-3945-4A27-8CD2-7687D9CCD6FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ee:4gee_wifi_mbb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E111C2-C792-40A5-BE04-4E22FF5710DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/AddProfileCSRFXSSPoc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFInternetDCPoC.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocRedirectSMS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocResetDefaults.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/uploadBinarySettingsCSRFPoC.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/AddProfileCSRFXSSPoc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFInternetDCPoC.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocRedirectSMS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocResetDefaults.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/uploadBinarySettingsCSRFPoC.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos EE 4GEE WiFi MBB (anteriores a EE60_00_05.00_31) tienen una vulnerabilidad de Cross-Site Scripting (XSS) en el parámetro sms_content en una petición getSMSlist."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ee:4gee_wifi_mbb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ee60_00_05.00_25",
            "matchCriteriaId" : "BAB5D116-3945-4A27-8CD2-7687D9CCD6FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ee:4gee_wifi_mbb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E111C2-C792-40A5-BE04-4E22FF5710DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T09:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos EE 4GEE WiFi MBB (anteriores a EE60_00_05.00_31) permiten a los atacantes remotos obtener información sensible mediante un endpoint JSONP, tal y como se ve en contraseñas y contenidos de SMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ee:4gee_wifi_mbb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ee60_00_05.00_25",
            "matchCriteriaId" : "BAB5D116-3945-4A27-8CD2-7687D9CCD6FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ee:4gee_wifi_mbb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E111C2-C792-40A5-BE04-4E22FF5710DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7649",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2017-09-11T16:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and executing commands using the Equinox \"exec\" command. As the process is running as \"root\" full control over the device can be acquired. IPv6 is also left in auto-configuration mode, accepting router advertisements automatically and assigns a MAC address based IPv6 address."
      }, {
        "lang" : "es",
        "value" : "La distribución adaptada a la red de Kura en versiones anteriores a la 2.1.0 asume el control de la configuración del firewall del dispositivo, pero no permite la configuración de las reglas del firewall IPv6. El puerto 5002 de la consola Equinox queda abierto, permitiendo el acceso a Kura sin credenciales de usuario por medio de un protocolo telnet sin cifrar y ejecutando comandos con el comando de Equinox \"exec\". Se puede conseguir el control total del dispositivo al ejecutarse el proceso como root. IPv6 también se deja en modo de autoconfiguración, aceptando anuncios de router automáticamente y asignando una dirección IPv6 basada en una dirección MAC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:kura:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "D5CB27F8-741A-458B-94C3-C2657DB5D4B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=514681",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/kura/issues/956",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=514681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/kura/issues/956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7650",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2017-09-11T16:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto."
      }, {
        "lang" : "es",
        "value" : "En Mosquitto en versiones anteriores a la 1.4.12, las listas de control de acceso (ACL) basadas en patrones pueden ser omitidas por clientes que establecen su ID de nombre de usuario/cliente como '#' o '+'. Esto permite que los clientes conectados de forma local o remota accedan a temas MQTT a los que no tienen derecho de acceso. Este mismo problema también podría estar presente en plugins de control de autenticación/acceso para Mosquitto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.12",
            "matchCriteriaId" : "E80E733B-BD63-4B8E-88FE-11243F5BA437"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mosquitto.org/2017/05/security-advisory-cve-2017-7650/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3865",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98741",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=516765",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://mosquitto.org/2017/05/security-advisory-cve-2017-7650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=516765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T17:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824a7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in an out-of-bounds write condition. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a los atacantes locales escalar privilegios en Jungo WinDriver 12.4.0 y anteriores. En primer lugar, un atacante debe obtener la habilidad para ejecutar código de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad. Este error en concreto existe cuando el controlador de kernel windrvr1240 procesa el IOCTL 0x953824a7. Este problema radica en la incapacidad para validar correctamente los datos proporcionados por el usuario, lo que puede resultar en una condición de escritura fuera de límites. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.1",
            "matchCriteriaId" : "6FC2BCC1-1394-477C-A167-31A68A3C1D29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144045/Jungo-DriverWizard-WinDrive-OOB-Write-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42625/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144045/Jungo-DriverWizard-WinDrive-OOB-Write-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42625/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T17:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a los atacantes locales escalar privilegios en Jungo WinDriver 12.4.0 y anteriores. En primer lugar, un atacante debe obtener la habilidad para ejecutar código de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad. Este error en concreto existe cuando el controlador de kernel windrvr1240 procesa el IOCTL 0x953824b7. Este problema radica en la incapacidad para validar correctamente los datos proporcionados por el usuario, lo que puede resultar en un desbordamiento de espacio de memoria de kernel. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.1",
            "matchCriteriaId" : "6FC2BCC1-1394-477C-A167-31A68A3C1D29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144046/Jungo-DriverWizard-WinDrive-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42624/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144046/Jungo-DriverWizard-WinDrive-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42624/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at ntdll_77400000!RtlFillMemoryUlong+0x0000000000000010.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en ntdll_77400000!RtlFillMemoryUlong+0x0000000000000010\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14270",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at ntdll_77400000!RtlImpersonateSelfEx+0x000000000000024e.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en ntdll_77400000!RtlImpersonateSelfEx+0x000000000000024e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14271",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at jbig2dec+0x000000000000595d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en jbig2dec+0x000000000000595d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14272",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x00000000000003b0.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV a partir de ntdll_77400000!RtlInterlockedPopEntrySList+0x00000000000003b0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14273",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008706.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address comenzando en jbig2dec+0x0000000000008706\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14274",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV near NULL comenzando en wow64!RtlInterlockedPopEntrySList+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14275",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Possible Stack Corruption comenzando en jbig2dec+0x0000000000002fbe\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14276",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at jbig2dec+0x0000000000005956.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en jbig2dec+0x0000000000005956\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at jbig2dec+0x0000000000005940.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en jbig2dec+0x0000000000005940\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at jbig2dec+0x0000000000005643.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en jbig2dec+0x0000000000005643\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14279",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection comenzando en jbig2dec+0x000000000000571d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14280",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x00000000000090f1.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address se emplea como uno o más argumentos en una llamada de función comenzando en jbig2dec+0x00000000000090f1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14281",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at jbig2dec+0x0000000000005862.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en jbig2dec+0x0000000000005862\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14282",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at jbig2dec+0x0000000000008fe4.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en jbig2dec+0x0000000000008fe4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14283",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlGetCurrentDirectory_U+0x000000000000016c.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77400000!RtlGetCurrentDirectory_U+0x000000000000016c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14284",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x000000000000039b.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic 2.40 para Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77400000!RtlInterlockedPopEntrySList+0x000000000000039b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14285",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000cb8c.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en STDUJBIG2File!DllUnregisterServer+0x000000000000cb8c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14286",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"Read Access Violation on Control Flow starting at STDUJBIG2File+0x00000000000015eb.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation on Control Flow comenzando en STDUJBIG2File+0x00000000000015eb\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14287",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en STDUJBIG2File!DllGetClassObject+0x0000000000002ff7\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14288",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000303e.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en STDUJBIG2File!DllGetClassObject+0x000000000000303e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14289",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Heap Corruption comenzando en wow64!DllGetClassObject+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14290",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d8.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en STDUJBIG2File!DllUnregisterServer+0x00000000000076d8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14291",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en STDUJBIG2File!DllUnregisterServer+0x000000000000570e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14292",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Heap Corruption starting at wow64!Wow64LdrpInitialize+0x00000000000008e1.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Heap Corruption comenzando en wow64!Wow64LdrpInitialize+0x00000000000008e1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14293",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000566e.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV comenzando en STDUJBIG2File!DllUnregisterServer+0x000000000000566e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14294",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls Code Flow starting at STDUJBIG2File+0x00000000000015e9.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Code Flow comenzando en STDUJBIG2File+0x00000000000015e9\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14295",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address comenzando en STDUJBIG2File!DllGetClassObject+0x00000000000043e6\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000002f35.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Code Flow comenzando en STDUJBIG2File!DllGetClassObject+0x0000000000002f35\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14297",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000038e8.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address comenzando en STDUJBIG2File!DllGetClassObject+0x00000000000038e8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14298",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x000000000000384b.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address comenzando en STDUJBIG2File!DllGetClassObject+0x000000000000384b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14299",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x0000000000004479.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address comenzando en STDUJBIG2File!DllGetClassObject+0x0000000000004479\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14300",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d3.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address comenzando en STDUJBIG2File!DllUnregisterServer+0x00000000000076d3\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14301",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllGetClassObject+0x00000000000064d7.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection comenzando en STDUJBIG2File!DllGetClassObject+0x00000000000064d7\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14302",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x0000000000003047.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en STDUJBIG2File!DllGetClassObject+0x0000000000003047\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14303",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e0.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en STDUJBIG2File!DllGetClassObject+0x00000000000043e0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14304",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection comenzando en STDUJBIG2File!DllUnregisterServer+0x0000000000005578\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14305",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en STDUJBIG2File!DllUnregisterServer+0x0000000000006e10\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14306",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection comenzando en ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14308",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14309",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T18:29:01.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a \"Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000001869.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Read Access Violation comenzando en STDUJBIG2File!DllUnregisterServer+0x0000000000001869\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14310",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T19:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017)."
      }, {
        "lang" : "es",
        "value" : "Se introdujo un fallo en la función file() en un commit con ID 9611f31313a93aa036389c5f3b15eea53510d4d1 (octubre 2016) que permite a un atacante sobrescribir un búfer de pila fijo de 20 bytes con una sección .notes especialmente manipulada en un archivo binario ELF. Esto se solucionó en el commit con ID 35c94dc6acc418f1ad7f6241a6680e5327495793 (agosto 2017)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:file_project:file:5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA05566A-1567-4115-B62B-7B268A84050A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/file/file/commit/9611f31313a93aa036389c5f3b15eea53510d4d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/file/file/commit/9611f31313a93aa036389c5f3b15eea53510d4d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-11T22:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a non-root account (and similarly can have nagios.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account."
      }, {
        "lang" : "es",
        "value" : "Nagios Core hasta la versión 4.3.4 ejecuta inicialmente /usr/sbin/nagios como root, pero es compatible con opciones de configuración en las cuales este archivo es propiedad de una cuenta sin root (y, de forma similar, puede poseer nagios.cfg sin root), lo que permite que usuarios locales obtengan privilegios aprovechando el acceso a esta cuenta sin root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_core:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.4",
            "matchCriteriaId" : "EAE753D4-DBFF-4B22-AB54-57E4DDCC7A95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/issues/424",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/NagiosEnterprises/nagioscore/issues/424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T00:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg()."
      }, {
        "lang" : "es",
        "value" : "La función shibboleth_login_form en shibboleth.php en el plugin Shibboleth en versiones anteriores a la 1.8 para WordPress es propenso a sufrir una vulnerabilidad XSS debido a un uso incorrecto de add_query_arg()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shibboleth_project:shibboleth:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "5E2E423E-61BF-4BE9-903E-040CB84249BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/874416",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelryanmcneill/shibboleth/commit/1d65ad6786282d23ba1865f56e2fd19188e7c26a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8901",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/874416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelryanmcneill/shibboleth/commit/1d65ad6786282d23ba1865f56e2fd19188e7c26a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T00:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer over-read and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Un error por un paso (off-by-one) en la función DrawImage en magick/render.c en GraphicsMagick 1.3.26 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica (heap) DrawDashPolygon y bloqueo de aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/2835184bfb78",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/448/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/2835184bfb78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/448/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3131",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-09-12T02:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in \"Applications\" under FortiView."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS desde la versión 5.4.0 hasta la 5.4.4 y la versión 5.6.0 permite que atacantes remotos ejecuten código o comandos sin autorización mediante la entrada de filtro en \"Applications\" en FortiView."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100009",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039020",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-104",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42388/",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3132",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-09-12T02:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS en su versión 5.6.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante la entrada de acción durante la activación de un FortiToken."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.0",
            "matchCriteriaId" : "A509FF43-9706-4EC7-B1D0-D3BF0569C9F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100009",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039020",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-104",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42388/",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3133",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-09-12T02:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS en su versión 5.6.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante el código HTML de los mensajes de reemplazo para SSL-VPN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.0",
            "matchCriteriaId" : "A509FF43-9706-4EC7-B1D0-D3BF0569C9F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100009",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039020",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-104",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42388/",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7734",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-09-12T02:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS desde la versión 5.4.0 hasta la 5.4.4 permite que atacantes remotos ejecuten código o comandos sin autorización mediante 'Comments' mientras se guardan revisiones de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99098",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038705",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-127",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7735",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-09-12T02:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS desde la versión 5.2.0 hasta la 5.2.11 y 5.4.0 hasta la 5.4.4 permite que atacantes remotos ejecuten código o comandos sin autorización mediante la entrada \"Groups\" al crear o editar grupos de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E627C59-7C16-44F0-800D-A2E8A766B26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233236FA-BB13-4261-BE2E-3E617406DC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27844CC9-498B-4A65-91AC-AC130222EE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B4C672-7ED5-4113-87AE-5774D1263C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CB7A90-91BC-49AF-9B5C-EBD212484C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D3221-177B-43CE-BD7D-CB14A110268E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C186D6-6AC5-49EB-A701-C91358B4A25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC9F6C4-F887-4F25-87BD-383F6CF39806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8558962-7A19-4F4A-BED0-9CB5D4CFC422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC63D521-EC88-4B13-BC73-3284F3FCF3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB756AF8-F9D2-472E-867B-C04D11F62FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99098",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038705",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-127",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T08:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160."
      }, {
        "lang" : "es",
        "value" : "tcprewrite en Tcpreplay 3.4.4 tiene una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap), desencadenada por un archivo PCAP manipulado. Esta vulnerabilidad está relacionada con CVE-2016-6160."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD52704-8BBC-43A3-AAC2-A1486E382412"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42652/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42652/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T08:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de fuga de memoria en ImageMagick 7.0.7-1 Q16 en la función ReadMPCImage en coders/mpc.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E11CC8-738C-4B10-85E9-25EF4B48B3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100863",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T08:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de fuga de memoria en ImageMagick 7.0.7-1 Q16 en la función PersistPixelCache en magick/cache.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en ReadMPCImage en coders/mpc.c) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E11CC8-738C-4B10-85E9-25EF4B48B3CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100874",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/741",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T08:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de fuga de memoria en ImageMagick 7.0.7-1 Q16 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E11CC8-738C-4B10-85E9-25EF4B48B3CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T08:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during \"readelf -a\" execution."
      }, {
        "lang" : "es",
        "value" : "La función process_version_sections en readelf.c en GNU Binutils 2.29 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de enteros y bloqueo debido a un bucle largo) o que puedan causar otro tipo de impacto sin especificar mediante un archivo binario sin especificar con valores inválidos de ent.vn_next, durante la ejecución de \"readelf -a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21990",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=21990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T08:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Beijing Hanbang Hanbanggaoke, debido a que las entradas controladas por el usuario no están lo suficientemente sanitizadas, el envío de una petición PUT a /ISAPI/Security/users/1 permite un cambio de contraseña de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7024xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B6C030-51F7-4F0D-B902-6570CBC0E1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7024xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD085B9-A3D3-46BA-B2AD-3DCAF920287B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7032xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D79B5A-9BFD-45F4-B63E-E6B15028E34F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7032xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8D5B0C-E85F-4F85-9406-EF65EC487401"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7008t2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0144456C-9935-4BB0-B1CE-9176AF0E89E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7008t2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3293E13-3ADA-42F4-97A9-90B014C1F5E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7016t2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646CC691-0E44-4655-A220-FE6FC38410E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7016t2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F099DB70-2C23-4F04-BE38-C5E8F88D7EF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7204xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD6A00-7B23-4D28-8EAF-086C49AB12FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7204xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC53D28D-43BD-4EBA-9FDD-1DE03D656A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7208xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE3CEFB-556E-4B70-B184-8B5AE3A626B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7208xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E1C167-791C-41B6-95C7-9B9A95DF9BA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7216xt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FB4ED58-99E7-47B8-A2F1-78F42F1C827F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7216xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330D019A-E40D-4473-816B-4448DAEDCB2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7208x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7973C2B6-0764-4ED6-A48B-C84C83B0BC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7208x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010CBF4E-866C-4744-972B-F02A57301B07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7216x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7552A286-EDF8-4EA3-9470-47A3F9E5B238"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7216x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB8A621-1CAA-4D71-B91F-422E00A3249F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7204x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED91751-F32E-465A-9D65-704FE2526FB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7204x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934BC86A-7F01-481E-978E-333017DAB19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7208x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E152F6B8-4810-4766-A86B-C19231539FA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7208x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93385793-9640-4102-BF53-6D890EDD6A22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7216x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B481FA-DE79-46E2-B7B0-01C3CE86A83E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7216x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA78E5ED-8981-49A3-B53B-3895B4F1D252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:7204xr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3523F546-BCB1-444B-B768-6AD04E751597"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:7204xr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EF2CBB-F764-4ABF-9A26-78A99828158C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:7208xr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EE6F06-154E-43B5-8170-C879ADC81D0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:7208xr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4E08F7-411D-414F-905F-78DF9301A15E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:7216xr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB685A8-4366-4E5F-A848-D041054165EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:7216xr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7B8025-4D15-4378-9FBA-1B7F4B12231B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7004k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8932BF60-EF5C-444B-97F3-1860C49517C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7004k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BD3020-BB77-418A-AEB9-87E59E5F050E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7004kh_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8847CE6A-07E8-4845-B8EE-9C10304BFD95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7004kh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2E5885-E585-46E1-ACB2-BF3A1499827C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7008kc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DDEAAC-F204-48CC-A167-D6198D04DC5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7008kc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8096B4-E649-426E-A7EE-599A3092F5FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7008kce_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038AEF1C-ADF5-4700-9C88-FA18370B72C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7008kce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC28BC2-4913-4ED0-B75E-097B21803839"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7008kh_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545C7901-7071-49FE-98FD-59E57938F1E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7008kh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED19184-8060-45FF-8DDB-60CD5DA2726B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7008khe_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCE70C6-04A2-4633-969C-C0D20572C70D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7008khe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE947902-B5B8-4FF4-8F54-116CAAB1CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7204kl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8435E8C4-AFE1-4207-9217-8E38CB36BCA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7204kl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F4E103-52AA-46A8-B99B-F758E1D057A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7204kk_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34D9ED7-2482-477D-AE78-7E6428D0E53A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7204kk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F0E196-C9B8-4C1F-B451-D1CC0888E3F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7016lc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D924A0D4-7C8E-4D64-83C0-D1712F257C64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7016lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E404FE1-E889-434A-AB11-5D04188A8263"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7016lh_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD3DB47-9CBA-42F4-8CF1-EBB23E3DF0F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7016lh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BC6780-9873-4DEE-A00E-99C494AB2B7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7116x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9F723D-B3E8-40B8-A8EF-212E0020EAB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7116x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD59753A-72A9-4FFD-A8A3-939A5E51EF04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7108x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3455E4-FC97-4AF4-B478-A360CDD84D00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7108x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71312FBF-283D-433D-8DB0-4B71CEDC399C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8004_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF006E55-2AA6-4616-B507-CEA88F0932CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6BAE70-CDEB-4A5F-8EC4-AB926FDD6B38"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8008_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DDFD54-4411-44DC-B21D-5C13DC657516"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5D7F19-80D1-4887-B80F-8E37FA0A47F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC76276D-3BC4-4FB1-8B4E-0959E5413FEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7161EE67-071D-4843-A52C-2A1F6E2FC093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8004r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD0099E-1D08-4ECA-BCD3-E1A0D1973DBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8004r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A270DD13-0DF8-424D-8F61-FE1C320C5D0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8008r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856C9BDC-5D60-465B-B8BA-60E65DCF4C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8008r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B31C4DC-DA18-409F-83FD-1CE11DBC9CDE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8016r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A52831C-5A66-41A5-A3ED-D8F194CC9991"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8016r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BDBF1A-8D11-4F6A-AC97-CFF523470E72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8204h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CF6B5-7ACD-4754-971F-3DC5E20C6DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8204h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03D0319-C580-43C9-AA65-0E9EACEE7283"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8208h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F0DB7C-EB5A-4A6C-A919-6C27D702661F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8208h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECA7EBD-8CBB-4707-985C-4063992CF012"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8216h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D9F1CE-4909-43D1-BD44-090B667FECE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8216h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCE08AE-E488-4999-B0B7-F3B07A229DEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8204hr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B391135-D585-414B-A388-E71BA2198B07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8204hr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FC7B55-00E7-4484-BCD5-921F5EC8A9EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8208hr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE588F2A-E16F-4E60-90A6-BC7C227D5A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8208hr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32826224-54E3-474C-8874-ED17D3E833BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8216hr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C372C4C-74A2-4919-AB42-9C3B318EB2CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8216hr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B927B6-7F9D-4511-AB56-79A0F96E0020"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8208x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6846F335-ADE3-42E8-826B-699868852DA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8208x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD8C803-5DD8-4180-BC7F-7F2383B6F439"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8216x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEA44D6-1B0A-4125-9230-B5D137885A8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8216x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79091CBC-1B02-412D-9225-250F62FCFA32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8608x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C239A502-A62E-4667-B273-6C3677D70E05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8608x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25D84A8-1019-4BFB-942A-FBBCCC18CAFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8616x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AA7DD3-50EE-467B-A2F4-46D189342160"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8616x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20ABAA14-C405-46E0-BCA0-380F6846633C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8808x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE867EE-6388-49D1-A232-E89C2A79A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8808x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E75911-FB81-42F0-9490-BAA990280A0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb8816x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A01EDE-2F6D-43DD-BDCE-0DB207EF7636"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb8816x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2889676D-6481-4C88-94A6-596C91DD2760"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9404x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B18B5-97F7-4302-9E9C-C9C226843E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9404x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621C793F-8BF3-4C42-92DE-57C7EBEA6190"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9408x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA44CD4-4AF5-4EF4-BD32-47D25B3436C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9408x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C327E557-0A5B-4963-845D-C3B73B2E434F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9604x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C07FBA-98FA-4D91-86CE-59CA49FB65A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9604x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87715274-66AF-4F76-B318-6A9328C0657C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9608x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E628E00-4971-4AC7-968F-E9AFE4926E63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9608x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD9A5ED-DEB6-41A5-97BF-77B08030D212"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9012x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287A1406-930E-494C-8BDD-56F9E18059E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9012x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCB6DF4-3AD3-471E-8596-4986FF48CE31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9020x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A6B9A9-7379-4D77-ADAF-27616D8EEABD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9020x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE0B5BE-A928-48E6-B016-3FA04B268CE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9212x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B1A42-3219-43F3-B332-B8992497299A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9212x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66D944E-A002-4A4F-B97C-0D64708BCF66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9220x3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47549F1-E48B-4342-A9F2-D7169E0E657E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9220x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC17F9F-F8F3-4E13-8CFD-22E2000A2B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7904_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870B2CC3-5BE3-4D6D-942B-B60E59B101C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD75DF9-AEFD-439E-AD9E-CF72215BCE89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7908_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2FB61B-65BD-41BF-8714-AF00661E5774"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7908:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955BBCAB-73F8-4272-A764-854A88CF7B78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7916s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A737B18-1CB2-4BD5-B956-9B3CDDD38C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7916s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30FB6503-27F1-49BC-BED9-9B405A22FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7904x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEDE3CF-DF67-4A8B-9467-7186D935C134"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7904x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B523D8B-19DC-4C8C-B5AD-8FDF05F9DF0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7908x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FB076DC-2308-42F7-A252-7F5F9940E114"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7908x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD512DB-4E29-453D-AE39-DBB17337B53F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb7916sx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7042CCB5-B66E-42D7-99C4-105A3F523FF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb7916sx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F6DE12-74E4-407A-BB97-04604959768A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9904_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0294F16-3466-4CD2-A8CD-F60716C10D2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2130EF88-63A6-4833-B988-3A740ED07A73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9908_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE567CC0-B459-403E-9DDD-5E2DE3DCB544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9908:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEF1F86-D231-4441-A07C-AA58F7A2FF42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9912_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D4DB17-157E-4216-B096-860893DE6481"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67E6B73-4D86-40E1-8474-80CC417EDF60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9916_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F12724-F15E-44E6-88CC-CE3D6664AA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B99D4E5-2EF5-4AC0-A342-B5409F90182D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9924_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0F7EAB-7E00-471F-9568-AE4B0D48B2BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9924:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83989090-54B3-4E2E-AE1A-84F5A6D67ED5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9932_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6E0751-8DAC-44B6-80FF-BFAB46A0199D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9932:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5331F6-74BD-4959-8F76-058472C8A22D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9808n04_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA69724-8C0F-40B0-9CF1-934D7CF37963"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9808n04:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D676B1A2-AE0A-45FD-BD1C-675E7A1429B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9816n08_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E54EE4-4D5B-4DA8-A723-944AD7E3E290"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9816n08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBB1FDA-32A2-41C0-B03E-424DD20085A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9824n16_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C60E85E-2C87-45EF-943C-E1D8C23F9D35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9824n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFE23F2-82D0-482B-AB15-560A05485D55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hbgk:hb9832n16_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3544259E-1D8C-4EB3-837B-AACC22587264"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hbgk:hb9832n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D298744-E86C-4E80-8290-E3BEB97904CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T15:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attacker can use this overflow to gain full control of the device through the relatively high privileges of the Bluetooth stack in iOS. The attack bypasses Bluetooth access control; however, the default \"Bluetooth On\" value must be present in Settings."
      }, {
        "lang" : "es",
        "value" : "En Apple iOS 7 hasta la versión 9, debido a un error \"BlueBorne\" en la implementación de LEAP (Low Energy Audio Protocol), se puede enviar un comando de audio largo a un dispositivo objetivo y desencadenar un desbordamiento de memoria dinámica (heap) con datos controlados por el atacante. Los comandos de audio enviados a través de LEAP no se validan correctamente, por lo que un atacante podría emplear este desbordamiento para obtener el control total del dispositivo mediante los privilegios relativamente elevados de la pila Bluetooth en iOS. El ataque omite el control de acceso Bluetooth, sin embargo, el valor por defecto \"Bluetooth On\" debe estar presente en Configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A11433-B725-4BD6-B998-4B3637F061EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD62141-07B1-4E3D-80BC-25D519F90DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9737BD4-B4F4-4291-A1E9-B692ECBC657E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6160869-944D-4E34-BB81-6A1259D692B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090CAC3C-4B20-46E5-A8C7-950B7E1DB5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96F77DD-0962-4E55-97A2-9BC2FE01D8A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD9ACBF-34A4-4181-A6E0-78ABD4FC9ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF40E86-E5D2-4D66-B296-ADFA78B42113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997D8B0E-44AC-4598-B533-AB31CBE5E2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343E9709-AE00-4F6D-85DF-E7841A1086BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7350A49-6D6B-4E03-933E-52453FE33E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C067D7E6-41CD-4859-A214-80F4C8E88567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245A0B42-AA79-4B33-AAEE-E414B6B1EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3064F3-0E1C-4E9D-AB4A-930A38D3939A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01986EC5-A2F0-4053-B4FA-B602F505ED8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A96C13A0-1ED4-48FD-A401-D5E719FDE2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8C4D24-60BE-4A9B-88DB-78FE82EF27EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708A47AF-E707-4447-934F-2AA38F128CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43407BEC-120E-458C-9A8B-74AAADBE568F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4947E737-4F7F-4C32-A209-FDD908450B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8CF641-5D21-4A0E-931F-C561617AACC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772F662B-351B-45B1-86B6-80917977F1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD8801E-E7F8-4AF6-8592-F1CAA3F74C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F9FDAC-5C8D-45FC-AF63-FCB8033C0BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50BE429-7D84-4C78-ADC1-E6E3B40F8021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE10F0E-DA27-437F-8A30-83BA723F5433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720014DA-BBA4-43DB-8938-64D9975DA009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7104A121-F2E3-4E11-80B8-40A343E30E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EF83E8-1450-46AD-9209-68277DD0AB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC09B623-2732-4745-AB1F-6E3D031CB77F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2019/May/24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100816",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/May/30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/kb/HT210121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.armis.com/blueborne",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/May/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/May/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT210121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.armis.com/blueborne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T15:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `MEMF_get_node` macro. While the function checks to see if the special constant `NUMA_NO_NODE` is specified, it otherwise does not handle the case where `node >= MAX_NUMNODES`. This allows an out-of-bounds access to an internal array."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de verificación de parámetros en Xen hasta la versión 4.9.x. La función `alloc_heap_pages` permite que los que la llaman especifiquen el primer nodo NUMA que debería usarse para asignaciones a través del parámetro `memflags`; el nodo se extrae empleando la macro `MEMF_get_node`. Aunque la función comprueba si se especifica la constante especial `NUMA_NO_NODE`, no gestiona el caso en el que `node >= MAX_NUMNODES`. Esto permite el acceso fuera de límites a un array interno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100818",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039348",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-231.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX227185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-231.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX227185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T15:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it (including domain creation / destruction, ballooning, device changes, etc.)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de limpieza de dominio en el demonio C xenstore (también conocido como cxenstored) en Xen hasta la versión 4.9.x. Cuando se apaga una VM con un dominio stub, una carrera en cxenstored podría causar una liberación doble (double-free). El demonio xenstored podría cerrarse inesperadamente, resultando en una denegación de servicio de cualquier parte del sistema que dependa de él (incluyendo la creación/destrucción de demonios, ballooning, cambios de dispositivo, etc)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100826",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039350",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-233.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-233.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T15:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check to see if the owning domain actually has a grant table or not. Some special domains, such as `DOMID_XEN`, `DOMID_IO` and `DOMID_COW` are created without grant tables. Hence, if __gnttab_cache_flush operates on a page owned by these special domains, it will attempt to dereference a NULL pointer in the domain struct."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen desde las versiones 4.5.x hasta las 4.9.x. La función `__gnttab_cache_flush` gestiona operaciones de tabla de concesión GNTTABOP_cache_flush. Comprueba si el dominio de llamada es el propietario de la página en la que se tiene que operar. Si no lo es, la tabla de concesión del propietario se comprueba para ver si existe una asignación de concesión al dominio de llamada para la página en cuestión. Sin embargo, la función no comprueba si el dominio de propietario tiene una tabla de concesión o no. Algunos dominios especiales como `DOMID_XEN`, `DOMID_IO` y `DOMID_COW` se crean sin tablas de concesión. Por lo tanto, si __gnttab_cache_flush opera en una página poseída por estos dominios especiales, intentará desreferenciar un puntero NULL en la estructura del dominio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CCECD0-C0F9-45A8-8699-64428637EBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED340C-6746-471E-9F2D-19D62D224B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DA3D28-EAE7-4EC9-977C-444A46CBD9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14442705-D243-4250-A486-E70989946D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D58EAB-3FEB-4D5A-B998-D77EC90FDFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DD0255-9127-4C7F-9C02-42198820363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E971A9F-18CB-4264-AF71-CCB32B7325B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D52712-AD95-459D-943C-936F90B828B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100817",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039349",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-232.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX227185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX227185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T15:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were taken into account."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desasignación de concesión en Xen hasta la versión 4.9.x. Cuando se elimina o reemplaza una asignación de concesión, la ruta específica de la PV x86 necesita asegurarse de que las entradas de tabla de página siguen sincronizadas con otras cuentas realizadas. Aunque la identidad del marco de la página se validó correctamente, no se tuvo en cuenta ni la presencia de la asignación ni la capacidad de escritura de la página."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100819",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039351",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-234.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX227185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-234.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX227185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T16:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access as an arbitrary user."
      }, {
        "lang" : "es",
        "value" : "Cuando MISP en versiones anteriores a la 2.4.80 se configura con la autenticación del certificado X.509 (CertAuth) conjuntamente con una API ReST de gestión de usuarios externos no perteneciente a MISP, si un usuario externo proporciona una autenticación de certificado X.509 y esta API devuelve un valor vacío, el usuario sin autenticar puede obtener acceso como un usuario arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.79",
            "matchCriteriaId" : "04F9B0DC-899B-4F57-8CF8-A7B78062D1E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/be111a470204a974c50682054c9c7d4b94396ed9",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.circl.lu/advisory/CVE-2017-14337/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/be111a470204a974c50682054c9c7d4b94396ed9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.circl.lu/advisory/CVE-2017-14337/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T17:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del servidor SDP en BlueZ 5.46 y anteriores son vulnerables a sufrir una divulgación de información que permite que los atacantes remotos obtengan información sensible de la memoria del proceso bluetoothd. Esta vulnerabilidad se basa en el procesamiento de peticiones del atributo de búsqueda SDP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.46",
            "matchCriteriaId" : "0A6C5D02-8B93-4876-84E2-9C529EF85150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100814",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/blueborne",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.armis.com/blueborne",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/240311",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000250",
        "source" : "nvd@nist.gov",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/blueborne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.armis.com/blueborne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/240311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space."
      }, {
        "lang" : "es",
        "value" : "La pila Bluetooth nativa en el Kernel Linux (BlueZ), comenzando por la versión 2.6.32 del kernel de Linux y hasta, e incluyendo, la versión 4.13.1, es vulnerable a un desbordamiento de pila durante el procesado de las respuestas de configuración L2CAP, lo que desemboca en la ejecución remota de código en el espacio del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.32",
            "versionEndExcluding" : "3.2.94",
            "matchCriteriaId" : "6085F01E-A338-4BD7-84E5-A0D347E18EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.49",
            "matchCriteriaId" : "6D2B2AB6-A208-4834-8CF4-03EF0774B915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.71",
            "matchCriteriaId" : "DCD26AC7-E8BD-470E-9B64-EC9974B7DFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.45",
            "matchCriteriaId" : "AEF05B4A-F2FD-4E86-9798-F55AAD1C1C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.88",
            "matchCriteriaId" : "7B9D9F07-3E93-4948-8810-AA3D7F5ACE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.50",
            "matchCriteriaId" : "311D0EBE-84B3-4494-97BA-BBF5ADEC1D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.13",
            "matchCriteriaId" : "75C09DA2-9A56-432C-91E8-779AE07084A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13",
            "versionEndExcluding" : "4.13.2",
            "matchCriteriaId" : "84B83CE7-CB2C-4FA6-B05A-BAAABD64C797"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:jetson_tk1:r21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1302746-9142-4546-B47A-7C78BD4A59AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:jetson_tk1:r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C577191-AB9A-4E68-92D3-FCF567F191F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:jetson_tx1:r21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8F5385-9C27-4DB0-88F6-3B41FEC6C170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:jetson_tx1:r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC78F5C-FC3E-403A-94C6-ED43D4E66D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D0378-F0F4-4AAA-80AF-8287C790EC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF83BB87-B203-48F9-9D06-48A5FE399050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E6D998-B41D-4B49-9E00-8336D2E40A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81647C-9A53-481D-A54C-36770A093F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B067C7-735E-43C9-9188-7E1522A02491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21690BAC-2129-4A33-9B48-1F3BF30072A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E02156-E748-4820-B76F-7074793837E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100809",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039373",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2679",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2680",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2681",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2682",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2683",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2704",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2731",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2732",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/blueborne",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.armis.com/blueborne",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42762/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/240311",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/blueborne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.armis.com/blueborne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42762/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/240311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T17:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-6 cuenta con una gran vulnerabilidad de bucle en ReadWPGImage en coders/wpg.c, provocando el agotamiento de la CPU mediante un archivo de imagen wpg manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/654",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-6 cuenta con una vulnerabilidad de agotamiento de memoria en ReadWPGImage en coders/wpg.c mediante un archivo de imagen wpg manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/650",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T17:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-6 cuenta con una vulnerabilidad de fuga de memoria en ReadXCFImage en coders/xcf.c mediante un archivo de imagen xcf manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/649",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T18:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes locales escalen privilegios en Jungo WinDriver 12.4.0 y anteriores. En primer lugar, un atacante debe obtener la habilidad para ejecutar código de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad. Este error en concreto existe al procesar el IOCTL 0x95382673 por el controlador del kernel windrvr1240. El problema radica en el fracaso a la hora de validar correctamente datos introducidos por el usuario, lo que podría resultar en un desbordamiento de espacio de memoria del kernel. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.1",
            "matchCriteriaId" : "6FC2BCC1-1394-477C-A167-31A68A3C1D29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://srcincite.io/advisories/src-2017-0027/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42665/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://srcincite.io/advisories/src-2017-0027/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42665/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en tianchoy/blog hasta 2017-09-12 mediante el parámetro id a view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blog_project:blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-09-12",
            "matchCriteriaId" : "D2CF3827-4B28-4647-84E3-A92CE560487F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/imsebao/404team/blob/master/tianchoy-blog-sql.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/imsebao/404team/blob/master/tianchoy-blog-sql.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T18:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file."
      }, {
        "lang" : "es",
        "value" : "upload.php en tianchoy/blog hasta 2017-09-12 permite la subida de archivos sin restricciones y la ejecución de código PHP mediante el uso del tipo de contenido image/jpeg, image/pjpeg, image/png, o image/gif para un archivo .php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blog_project:blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-09-12",
            "matchCriteriaId" : "D2CF3827-4B28-4647-84E3-A92CE560487F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/imsebao/404team/blob/master/tianchoy-blog-getshell.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/imsebao/404team/blob/master/tianchoy-blog-getshell.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T18:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de XEE (XML External Entity) en Dive Asisstant - Template Builder en Blackwave Dive Assistant - Desktop Edition 8.0 que permite a atacantes visualizar remotamente archivos locales mediante un archivo template.xml manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackwave:dive_assistant:8.0:*:*:*:desktop:*:*:*",
            "matchCriteriaId" : "4DFDB2E9-7DF6-4901-96CC-705FA89E2F59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thenopsled.com/Exploit-DB%20Writeup.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://thenopsled.com/Exploit-DB%20Writeup.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T19:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action."
      }, {
        "lang" : "es",
        "value" : "NexusPHP 1.5.beta5.20120707 tiene XSS en el parámetro returnto a fun.php en una acción delete."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3920B7-D378-45FA-AD21-A9492C2CCBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yangchonghui2017/cve/blob/master/1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yangchonghui2017/cve/blob/master/1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T19:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file."
      }, {
        "lang" : "es",
        "value" : "LibRaw en versiones anteriores a la 0.18.4 tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función processCanonCameraInfo mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.3",
            "matchCriteriaId" : "59C927CB-58E1-481D-9A4C-CCECD597E486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100866",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/issues/100",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/issues/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8015",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-09-12T20:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC AppSync (en todas las versiones anteriores a la 3.5) contiene una vulnerabilidad de inyección SQL que podría ser explotada por usuarios maliciosos con el fin de comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:appsync:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "F24DDE71-DE93-4D69-B706-47E4249288BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/14",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100683",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1162",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 122957."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar 7.2 y 7.3 divulga información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 122957."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C137959-2279-4459-8A10-43AFE09E2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D53329-E729-43C1-8C67-EFA4C3F7BFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4EDCA-DF37-4366-B944-F342FA55EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CA942D-70AD-4E0D-A28E-443FB7140A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8844C7-52E1-45A0-AC51-B6F6F14DE38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5382FD46-85CB-460F-8AA5-163EA26F34B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008194",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100686",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122957",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1352",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Asset Management 7.5 y 7.6 podría permitir que un usuario autenticado inyecte comandos en órdenes de trabajo que podrían ser ejecutadas por otro usuario que descargue el archivo afectado. IBM X-Force ID: 126538."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006650",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100697",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126538",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1434",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows 11.1 (incluye DB2 Connect Server), bajo circunstancias no habituales, podría exponer información altamente sensible a un usuario local mediante el registro de errores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005740",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100693",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039297",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127806",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1438",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows 9.7, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) podría permitir a un usuario local con privilegios de propietario en la instancia DB2 obtener acceso root. IBM X-Force ID: 128057."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A8E221-7045-4BAD-9B29-ABBC5216559D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513D42C-E558-4CC7-88D3-BB44F1B40157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F441BE8-AEC0-44F0-875E-03C65A45CF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E9715-CFAA-4F2A-B432-181EDCA3D812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539123F-B8AC-4051-9458-A780C68E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3958E50-1F97-4C06-AF22-C635FB2557A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AC4D14-805A-42F6-9348-D13C9A48136F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:a:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F07F2-3F58-4999-97E9-50C627D9CB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B54C55B-9288-4E04-B0D6-6765E5217DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA99C5A3-D43E-4942-AE87-8DA46FCDCD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FA4086-9B5D-4352-B717-3F826DE17D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD79FF24-6C10-437B-86AF-E211B8C6FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABB145C-44EE-47F5-9439-DE6433F8008E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F138E08-6808-4371-9E9C-096B01126B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813AE6CA-39B5-448C-8781-F2C3B499160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DCF076-B475-41E6-B1ED-44FBC99238C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1972D-F7FC-4ABA-9DEE-9953D2572944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CA651B7E-418B-4C3C-9A83-7E25342D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D276299-D403-4C41-ACBF-A23383CB3FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830263A-6970-43B8-BF08-2886327004A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F67DD01-F0E6-420E-A144-A8DD001BBBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78533-899B-4482-97A7-7E2730C18C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8DDC8C-92D4-4078-8C82-9CB27B0DBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2418D4-8A16-4617-AE27-B2FDD68711C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC23293-580F-48B7-BB18-C91E254B4885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD2BBD-1ED1-4FF0-8A5D-AD36B71BF5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A09A6A-D7D8-4ADE-850B-1FA98E4FD8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EA04C9-3B45-47C2-88C6-4BE578673A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10331272-C7E3-4F77-BAB7-C931CDD57699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781B87AB-DBCA-495A-B809-648357EF6873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8F6CF0-8418-41CB-B3E5-B04CF633DBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28D8A2E-ECA5-401E-806B-2385668C90D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D92905F-5327-4CAA-9ECE-5211FB92BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620D61-5F09-44E7-A19F-7E70A7F0D832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B343CCB4-CE4B-44D2-A04E-69031CD649EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC80416E-982E-496E-BB46-5928FDB8CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B2A6C0-93D4-4648-A507-62F075D6AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510BA35-C62A-46CE-A009-F20971EAE9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE54DD24-2E67-49D9-81EB-88A50ED3FB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20186C62-14F0-47FA-BF37-772AEDF64E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC398F4-AA9B-446B-ABE3-236A3F72FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD73C3-412C-461A-A1A4-BB760CC3C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D91F10-BC9A-4A20-A153-022C9207A1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95700FA-C64B-40D9-81C5-39A76961A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3EF9D-7FD1-46F4-A745-2C3D31B2E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269C7299-D812-462D-9C4D-D36F5665789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89A2701-5904-4DBD-8AAC-9972611CC92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E8C32-272B-4D9D-8479-D15D511FAAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006885",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100685",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039300",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128057",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1439",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128058."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows 9.7, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) podría permitir a un usuario local con privilegios de propietario en la instancia DB2 obtener acceso root. IBM X-Force ID: 128058."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A8E221-7045-4BAD-9B29-ABBC5216559D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513D42C-E558-4CC7-88D3-BB44F1B40157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F441BE8-AEC0-44F0-875E-03C65A45CF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E9715-CFAA-4F2A-B432-181EDCA3D812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539123F-B8AC-4051-9458-A780C68E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3958E50-1F97-4C06-AF22-C635FB2557A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AC4D14-805A-42F6-9348-D13C9A48136F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:a:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F07F2-3F58-4999-97E9-50C627D9CB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B54C55B-9288-4E04-B0D6-6765E5217DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA99C5A3-D43E-4942-AE87-8DA46FCDCD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FA4086-9B5D-4352-B717-3F826DE17D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD79FF24-6C10-437B-86AF-E211B8C6FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABB145C-44EE-47F5-9439-DE6433F8008E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F138E08-6808-4371-9E9C-096B01126B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813AE6CA-39B5-448C-8781-F2C3B499160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DCF076-B475-41E6-B1ED-44FBC99238C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1972D-F7FC-4ABA-9DEE-9953D2572944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CA651B7E-418B-4C3C-9A83-7E25342D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D276299-D403-4C41-ACBF-A23383CB3FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830263A-6970-43B8-BF08-2886327004A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F67DD01-F0E6-420E-A144-A8DD001BBBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78533-899B-4482-97A7-7E2730C18C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8DDC8C-92D4-4078-8C82-9CB27B0DBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2418D4-8A16-4617-AE27-B2FDD68711C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC23293-580F-48B7-BB18-C91E254B4885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD2BBD-1ED1-4FF0-8A5D-AD36B71BF5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A09A6A-D7D8-4ADE-850B-1FA98E4FD8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EA04C9-3B45-47C2-88C6-4BE578673A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10331272-C7E3-4F77-BAB7-C931CDD57699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781B87AB-DBCA-495A-B809-648357EF6873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8F6CF0-8418-41CB-B3E5-B04CF633DBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28D8A2E-ECA5-401E-806B-2385668C90D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D92905F-5327-4CAA-9ECE-5211FB92BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620D61-5F09-44E7-A19F-7E70A7F0D832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B343CCB4-CE4B-44D2-A04E-69031CD649EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC80416E-982E-496E-BB46-5928FDB8CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B2A6C0-93D4-4648-A507-62F075D6AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510BA35-C62A-46CE-A009-F20971EAE9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE54DD24-2E67-49D9-81EB-88A50ED3FB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20186C62-14F0-47FA-BF37-772AEDF64E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC398F4-AA9B-446B-ABE3-236A3F72FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD73C3-412C-461A-A1A4-BB760CC3C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D91F10-BC9A-4A20-A153-022C9207A1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95700FA-C64B-40D9-81C5-39A76961A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3EF9D-7FD1-46F4-A745-2C3D31B2E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269C7299-D812-462D-9C4D-D36F5665789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89A2701-5904-4DBD-8AAC-9972611CC92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E8C32-272B-4D9D-8479-D15D511FAAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006061",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100690",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039301",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128058",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T21:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php."
      }, {
        "lang" : "es",
        "value" : "En osTicket en versiones anteriores a la 1.10.1, es posible realizar una inyección SQL mediante la construcción de un array utilizando corchetes al final del nombre del parámetro, tal y como demuestra el parámetro key para file.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9239890B-3367-46E4-8ED2-A30E95D5191F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osticket.com/blog/125",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osticket.com/blog/125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T21:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "AnyDesk en versiones anteriores a la 3.6.1 en Windows tiene una vulnerabilidad de inyección DLL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anydesk:anydesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.0",
            "matchCriteriaId" : "48F8807D-84BF-40FA-BB7E-B85B2DC75ECE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.anydesk.com/changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://download.anydesk.com/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T21:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\\media\\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php."
      }, {
        "lang" : "es",
        "value" : "En BlackCat CMS 1.2.2 es posible la subida de archivos sin restricción en backend\\media\\ajax_rename.php mediante el parámetro extension, tal y como demuestra el cambio de extensión de .jpg a .php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8744CF02-6713-4294-8031-35A9AF16FD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SPuerBRead/blackcat-cms-file-upload/blob/master/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SPuerBRead/blackcat-cms-file-upload/blob/master/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-12T21:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service (NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.7-1 Q16, la función PersistPixelCache en magick/cache.c no gestiona correctamente el nexo de caché de píxeles, lo que permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL en la función GetVirtualPixels en MagickCore/cache.c) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EE134-ACEE-4E13-8AD2-C95F0C15246E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1451",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows 9.7, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) podría permitir a un usuario local con privilegios de propietario en la instancia DB2 obtener acceso root. IBM X-Force ID: 128178."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A8E221-7045-4BAD-9B29-ABBC5216559D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513D42C-E558-4CC7-88D3-BB44F1B40157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F441BE8-AEC0-44F0-875E-03C65A45CF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E9715-CFAA-4F2A-B432-181EDCA3D812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539123F-B8AC-4051-9458-A780C68E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3958E50-1F97-4C06-AF22-C635FB2557A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AC4D14-805A-42F6-9348-D13C9A48136F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:a:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F07F2-3F58-4999-97E9-50C627D9CB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B54C55B-9288-4E04-B0D6-6765E5217DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA99C5A3-D43E-4942-AE87-8DA46FCDCD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FA4086-9B5D-4352-B717-3F826DE17D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD79FF24-6C10-437B-86AF-E211B8C6FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABB145C-44EE-47F5-9439-DE6433F8008E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F138E08-6808-4371-9E9C-096B01126B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813AE6CA-39B5-448C-8781-F2C3B499160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DCF076-B475-41E6-B1ED-44FBC99238C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1972D-F7FC-4ABA-9DEE-9953D2572944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CA651B7E-418B-4C3C-9A83-7E25342D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D276299-D403-4C41-ACBF-A23383CB3FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830263A-6970-43B8-BF08-2886327004A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F67DD01-F0E6-420E-A144-A8DD001BBBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78533-899B-4482-97A7-7E2730C18C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8DDC8C-92D4-4078-8C82-9CB27B0DBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2418D4-8A16-4617-AE27-B2FDD68711C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC23293-580F-48B7-BB18-C91E254B4885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD2BBD-1ED1-4FF0-8A5D-AD36B71BF5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A09A6A-D7D8-4ADE-850B-1FA98E4FD8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EA04C9-3B45-47C2-88C6-4BE578673A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10331272-C7E3-4F77-BAB7-C931CDD57699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781B87AB-DBCA-495A-B809-648357EF6873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8F6CF0-8418-41CB-B3E5-B04CF633DBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28D8A2E-ECA5-401E-806B-2385668C90D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D92905F-5327-4CAA-9ECE-5211FB92BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620D61-5F09-44E7-A19F-7E70A7F0D832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B343CCB4-CE4B-44D2-A04E-69031CD649EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC80416E-982E-496E-BB46-5928FDB8CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B2A6C0-93D4-4648-A507-62F075D6AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510BA35-C62A-46CE-A009-F20971EAE9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE54DD24-2E67-49D9-81EB-88A50ED3FB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20186C62-14F0-47FA-BF37-772AEDF64E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC398F4-AA9B-446B-ABE3-236A3F72FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD73C3-412C-461A-A1A4-BB760CC3C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D91F10-BC9A-4A20-A153-022C9207A1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95700FA-C64B-40D9-81C5-39A76961A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3EF9D-7FD1-46F4-A745-2C3D31B2E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269C7299-D812-462D-9C4D-D36F5665789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89A2701-5904-4DBD-8AAC-9972611CC92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E8C32-272B-4D9D-8479-D15D511FAAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006061",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100690",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039301",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128178",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1452",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and overwrite DB2 files. IBM X-Force ID: 128180."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 para Linux, UNIX y Windows 9.7, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) podría permitir a un usuario local obtener privilegios elevados y sobrescribir archivos DB2.. IBM X-Force ID: 128180."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A8E221-7045-4BAD-9B29-ABBC5216559D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513D42C-E558-4CC7-88D3-BB44F1B40157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F441BE8-AEC0-44F0-875E-03C65A45CF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E9715-CFAA-4F2A-B432-181EDCA3D812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539123F-B8AC-4051-9458-A780C68E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3958E50-1F97-4C06-AF22-C635FB2557A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AC4D14-805A-42F6-9348-D13C9A48136F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:a:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F07F2-3F58-4999-97E9-50C627D9CB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B54C55B-9288-4E04-B0D6-6765E5217DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA99C5A3-D43E-4942-AE87-8DA46FCDCD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FA4086-9B5D-4352-B717-3F826DE17D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD79FF24-6C10-437B-86AF-E211B8C6FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABB145C-44EE-47F5-9439-DE6433F8008E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F138E08-6808-4371-9E9C-096B01126B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813AE6CA-39B5-448C-8781-F2C3B499160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DCF076-B475-41E6-B1ED-44FBC99238C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1972D-F7FC-4ABA-9DEE-9953D2572944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CA651B7E-418B-4C3C-9A83-7E25342D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D276299-D403-4C41-ACBF-A23383CB3FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830263A-6970-43B8-BF08-2886327004A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F67DD01-F0E6-420E-A144-A8DD001BBBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78533-899B-4482-97A7-7E2730C18C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8DDC8C-92D4-4078-8C82-9CB27B0DBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2418D4-8A16-4617-AE27-B2FDD68711C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC23293-580F-48B7-BB18-C91E254B4885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD2BBD-1ED1-4FF0-8A5D-AD36B71BF5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A09A6A-D7D8-4ADE-850B-1FA98E4FD8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EA04C9-3B45-47C2-88C6-4BE578673A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10331272-C7E3-4F77-BAB7-C931CDD57699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781B87AB-DBCA-495A-B809-648357EF6873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8F6CF0-8418-41CB-B3E5-B04CF633DBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28D8A2E-ECA5-401E-806B-2385668C90D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D92905F-5327-4CAA-9ECE-5211FB92BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620D61-5F09-44E7-A19F-7E70A7F0D832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B343CCB4-CE4B-44D2-A04E-69031CD649EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC80416E-982E-496E-BB46-5928FDB8CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B2A6C0-93D4-4648-A507-62F075D6AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510BA35-C62A-46CE-A009-F20971EAE9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE54DD24-2E67-49D9-81EB-88A50ED3FB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20186C62-14F0-47FA-BF37-772AEDF64E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC398F4-AA9B-446B-ABE3-236A3F72FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD73C3-412C-461A-A1A4-BB760CC3C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D91F10-BC9A-4A20-A153-022C9207A1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95700FA-C64B-40D9-81C5-39A76961A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3EF9D-7FD1-46F4-A745-2C3D31B2E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269C7299-D812-462D-9C4D-D36F5665789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89A2701-5904-4DBD-8AAC-9972611CC92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E8C32-272B-4D9D-8479-D15D511FAAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006109",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100698",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039299",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128180",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1519",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular configuration. IBM X-Force ID: 129829."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 10.5 y 11.1 es vulnerable a denegaciones de servicio. Un usuario remoto puede provocar la interrupción del servicio en la instalación de DB2 Connect Server con una configuración específica. IBM X-Force ID: 129829."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DCF076-B475-41E6-B1ED-44FBC99238C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1972D-F7FC-4ABA-9DEE-9953D2572944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CA651B7E-418B-4C3C-9A83-7E25342D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D276299-D403-4C41-ACBF-A23383CB3FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830263A-6970-43B8-BF08-2886327004A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F67DD01-F0E6-420E-A144-A8DD001BBBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78533-899B-4482-97A7-7E2730C18C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC398F4-AA9B-446B-ABE3-236A3F72FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD73C3-412C-461A-A1A4-BB760CC3C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D91F10-BC9A-4A20-A153-022C9207A1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95700FA-C64B-40D9-81C5-39A76961A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3EF9D-7FD1-46F4-A745-2C3D31B2E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269C7299-D812-462D-9C4D-D36F5665789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89A2701-5904-4DBD-8AAC-9972611CC92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E8C32-272B-4D9D-8479-D15D511FAAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007183",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100688",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039298",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129829",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1520",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-12T21:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 9.7, 10,1, 10.5 y 11.1 es vulnerable a que se ejecute un comando no autorizado que permita activar la base de datos cuando la autenticación es de tipo CLIENT. IBM X-Force ID: 129830."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A8E221-7045-4BAD-9B29-ABBC5216559D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513D42C-E558-4CC7-88D3-BB44F1B40157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F441BE8-AEC0-44F0-875E-03C65A45CF68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E9715-CFAA-4F2A-B432-181EDCA3D812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539123F-B8AC-4051-9458-A780C68E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3958E50-1F97-4C06-AF22-C635FB2557A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AC4D14-805A-42F6-9348-D13C9A48136F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.9:a:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F07F2-3F58-4999-97E9-50C627D9CB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B54C55B-9288-4E04-B0D6-6765E5217DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA99C5A3-D43E-4942-AE87-8DA46FCDCD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FA4086-9B5D-4352-B717-3F826DE17D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD79FF24-6C10-437B-86AF-E211B8C6FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABB145C-44EE-47F5-9439-DE6433F8008E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F138E08-6808-4371-9E9C-096B01126B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813AE6CA-39B5-448C-8781-F2C3B499160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DCF076-B475-41E6-B1ED-44FBC99238C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1972D-F7FC-4ABA-9DEE-9953D2572944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CA651B7E-418B-4C3C-9A83-7E25342D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D276299-D403-4C41-ACBF-A23383CB3FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830263A-6970-43B8-BF08-2886327004A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F67DD01-F0E6-420E-A144-A8DD001BBBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78533-899B-4482-97A7-7E2730C18C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E17D042-0EE4-4F81-8E39-D8730D792BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8DDC8C-92D4-4078-8C82-9CB27B0DBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2418D4-8A16-4617-AE27-B2FDD68711C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC23293-580F-48B7-BB18-C91E254B4885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD2BBD-1ED1-4FF0-8A5D-AD36B71BF5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A09A6A-D7D8-4ADE-850B-1FA98E4FD8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EA04C9-3B45-47C2-88C6-4BE578673A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10331272-C7E3-4F77-BAB7-C931CDD57699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781B87AB-DBCA-495A-B809-648357EF6873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8F6CF0-8418-41CB-B3E5-B04CF633DBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28D8A2E-ECA5-401E-806B-2385668C90D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D92905F-5327-4CAA-9ECE-5211FB92BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620D61-5F09-44E7-A19F-7E70A7F0D832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B343CCB4-CE4B-44D2-A04E-69031CD649EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC80416E-982E-496E-BB46-5928FDB8CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B2A6C0-93D4-4648-A507-62F075D6AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510BA35-C62A-46CE-A009-F20971EAE9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE54DD24-2E67-49D9-81EB-88A50ED3FB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20186C62-14F0-47FA-BF37-772AEDF64E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC398F4-AA9B-446B-ABE3-236A3F72FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD73C3-412C-461A-A1A4-BB760CC3C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D91F10-BC9A-4A20-A153-022C9207A1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95700FA-C64B-40D9-81C5-39A76961A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3EF9D-7FD1-46F4-A745-2C3D31B2E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269C7299-D812-462D-9C4D-D36F5665789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89A2701-5904-4DBD-8AAC-9972611CC92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E8C32-272B-4D9D-8479-D15D511FAAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E32FD81-F765-4115-9977-B1913CE13106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007186",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100684",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039308",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129830",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0161",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:08.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain certain sequencing requirements, aka \"NetBIOS Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Windows NetBT Session Services en Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se origine una vulnerabilidad de ejecución remota de código cuando fracasa a la hora de mantener ciertos requerimientos secuenciales. Esto también se conoce como \"NetBIOS Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100728",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039318",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0161",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11761",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:08.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka \"Microsoft Exchange Information Disclosure Vulnerability\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange Server 2013 y Microsoft Exchange Server 2016 permiten que se origine un problema de sanitización de entradas con Microsoft Exchange, lo que podría desembocar en una divulgación de información accidental. Esto también se conoce como \"Microsoft Exchange Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8BCE7D-51F0-41A2-A110-71044844C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "3A170414-3B67-4A2E-B788-7DA125F06C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "23015889-48AF-40A5-862F-290E73A54E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC34516-D7E7-4AD9-9B45-5474831548E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100731",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039320",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11764",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:08.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, and CVE-2017-8756."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607, 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting de Microsoft Edge gestiona objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8635, CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, y CVE-2017-8756."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100726",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11764",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42765/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42765/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11766",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:08.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8731, CVE-2017-8734, and CVE-2017-8751."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que Microsoft Edge accede a objetos en la memoria. Esto también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8731, CVE-2017-8734, y CVE-2017-8751."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100729",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8567",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka \"Microsoft Office Remote Code Execution\"."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Excel para Mac 2011 cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como \"Microsoft Office Remote Code Execution\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF929F6-6551-4358-AFBE-3495E8DC7BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100719",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8567",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8597",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8643 and CVE-2017-8648."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en la versión 1703 de Microsoft Windows 10 permite que un atacante obtenga información para comprometer aún más la seguridad del sistema del usuario debido a la forma en la que Microsoft Edge gestiona objetos en la memoria. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8643 y CVE-2017-8648."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100745",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8597",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8628",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsoft's implementation of the Bluetooth stack, aka \"Microsoft Bluetooth Driver Spoofing Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Bluetooth Driver en Windows Server 2008 SP2; Windows 7 SP1; Windows 8.1; Windows RT 8.1 y Windows 10 Gold, 1511, 1607 y 1703 permite que se produzca una vulnerabilidad de suplantación debido a la implementación de la pila Bluetooth por parte de Microsoft. Esto también se conoce como \"Microsoft Bluetooth Driver Spoofing Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100744",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039339",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8628",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8629",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka \"Microsoft SharePoint XSS Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Server 2013 Service Pack 1 permite que se produzca una vulnerabilidad de elevación de privilegios cuando no sanitiza correctamente una petición web especialmente manipulada a un servidor SharePoint afectado. Esto también se conoce como \"Microsoft SharePoint XSS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100725",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039329",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8629",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8630",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2016 allows a remote code execution vulnerability when it fails to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8631, CVE-2017-8632, and CVE-2017-8744."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2016 permite que se produzca una vulnerabilidad de ejecución remota de código cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8631, CVE-2017-8632, y CVE-2017-8744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100732",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8630",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8631",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3 y Office Online Server cuando no se gestionan correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8630, CVE-2017-8632, y CVE-2017-8744."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A70D659-F648-4870-852A-4E86D1F4B646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BF87B2-CE8F-4977-9436-9BE5821CF1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0390EFCA-87B4-42D6-817A-603765F49816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4635DA5-27DA-43FF-92AC-A9F80218A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_web_app:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCFAB1AB-D9E4-4845-A9CA-29D757B41D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6404DAF-34CC-47A0-B711-87EAC662FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93566DC7-8B2D-4EB6-B701-15885F3AEA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100751",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8631",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8632",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office Compatibility Pack Service Pack 3, when they fail to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8630, CVE-2017-8631, and CVE-2017-8744."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office Compatibility Pack Service Pack 3 cuando no se gestionan correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8630, CVE-2017-8631, y CVE-2017-8744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_for_mac:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF929F6-6551-4358-AFBE-3495E8DC7BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_for_mac:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6BEA4C-18FE-48D1-86AB-670833528150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93566DC7-8B2D-4EB6-B701-15885F3AEA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100734",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8632",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8643",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open during user clipboard activities, due to the way that Microsoft Edge handles clipboard events, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8597 and CVE-2017-8648."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que un atacante deje una página web maliciosa abierta durante las actividades de portapapeles del usuario debido a la forma en la que Microsoft Edge gestiona los eventos del portapapeles. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8597 y CVE-2017-8648."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100747",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8643",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8648",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8597 and CVE-2017-8643."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en la versión 1703 de Microsoft Windows permite que un atacante obtenga información para comprometer aun más la seguridad del sistema del usuario debido a la forma en la que Microsoft Edge gestiona objetos en la memoria. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8597 y CVE-2017-8643."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100750",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8649",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607, 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Microsoft renderizan los contenidos cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8635, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100754",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8649",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8660",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript del navegador de Windows renderizan contenido cuando gestionan objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-8635, CVE-2017-8649, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100757",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8660",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8675",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\".. This CVE ID is unique from CVE-2017-8720."
      }, {
        "lang" : "es",
        "value" : "El componente Windows Kernel-Mode Drivers en Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite que se produzca una vulnerabilidad de elevación de privilegios cuando el componente Win32k gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es distinto a CVE-2017-8720."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100752",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8675",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8676",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka \"Windows GDI+ Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La interfaz Graphics Device Interface (GDI) de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703 y Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office para Mac 2011 y 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; y Live Meeting 2007 Add-in y Console permite que un atacante autenticado recupere información de un sistema objetivo mediante una aplicación especialmente manipulada. Esto también se conoce como \"Windows GDI+ Information Disclosure Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB045C-AAC8-42F2-84A9-062630FA14E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83FB32-9775-418B-99A7-EC1FEA345F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*",
            "matchCriteriaId" : "EE98CEE9-200B-494A-B645-D14ACB577250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "0D84FC39-29AA-4EF2-ACE7-E72635126F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "447CCA6E-9955-4771-82DD-925380F3C439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2007:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7936CE28-BCF1-40A6-99D6-973A907EF566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2010:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC68ECB-4FB5-4702-A16D-77A36A715BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039333",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8677",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kernel memory addresses, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8681, and CVE-2017-8687."
      }, {
        "lang" : "es",
        "value" : "El componente GDI+ de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando revela de manera incorrecta direcciones de la memoria del kernel. Esto también se conoce como \"Win32k Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8678, CVE-2017-8680, CVE-2017-8681 y CVE-2017-8687."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100767",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8677",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8678",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8677, CVE-2017-8680, CVE-2017-8681, and CVE-2017-8687."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Win32k Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8677, CVE-2017-8680, CVE-2017-8681 y CVE-2017-8687."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100769",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8678",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42750/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42750/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8679",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:09.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8708, CVE-2017-8709, and CVE-2017-8719."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8708, CVE-2017-8709, y CVE-2017-8719."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100720",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8679",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8680",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8678, CVE-2017-8677, CVE-2017-8681, and CVE-2017-8687."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2 y Windows RT 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Win32k Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8678, CVE-2017-8677, CVE-2017-8681 y CVE-2017-8687."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100722",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8680",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42741/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42741/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8681",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8677, and CVE-2017-8687."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Win32k Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8678, CVE-2017-8680, CVE-2017-8677 y CVE-2017-8687."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8681",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42742/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42742/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8682",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and Microsoft Office 2010 Service Pack 2 allows an attacker to execute remote code by the way it handles embedded fonts, aka \"Win32k Graphics Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8683."
      }, {
        "lang" : "es",
        "value" : "Los gráficos de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; Windows Server 2016; Microsoft Office Word Viewer; Microsoft Office 2007 Service Pack 3; y Microsoft Office 2010 Service Pack 2 permite que un atacante ejecute código remoto debido a la forma en la que se gestionan las fuentes embebidas. Esto también se conoce como \"Win32k Graphics Remote Code Execution Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8683."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2007:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF1FCE5-BA29-4968-ADE4-0500B50ADDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2010:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "09A10A53-6939-4B83-AEFF-C7CA27407449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100772",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039352",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8682",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42744/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42744/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8683",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded fonts, aka \"Win32k Graphics Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8682."
      }, {
        "lang" : "es",
        "value" : "Los gráficos de Windows en Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite que un atacante ejecute código remoto debido a la forma en la que se gestionan las fuentes embebidas. Esto también se conoce como \"Win32k Graphics Remote Code Execution Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8682."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8683",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42746/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8684",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka \"Windows GDI+ Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8685 and CVE-2017-8688."
      }, {
        "lang" : "es",
        "value" : "El componente GDI+ de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; y Windows RT 2016 permite la divulgación de información debido a la forma en la que se revelan direcciones de memoria del kernel. Esto también se conoce como \"Windows GDI+ Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8685 y CVE-2017-8688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8684",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42747/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42747/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8685",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka \"Windows GDI+ Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688."
      }, {
        "lang" : "es",
        "value" : "El componente GDI+ de Microsoft Windows Server 2008 SP2 and R2 SP1 y Windows 7 SP1 permite la divulgación de información debido a la forma en la que se revelan direcciones de memoria del kernel. Esto también se conoce como \"Windows GDI+ Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8684 y CVE-2017-8688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100724",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8685",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42748/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42748/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8686",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive, due to a memory corruption vulnerability in the Windows Server DHCP service, aka \"Windows DHCP Server Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El servicio DHCP de Windows Server en Windows Server 2012 Gold y R2 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el servidor de failover DHCP o provocar que el servicio DHCP no responda por una vulnerabilidad de corrupción de memoria en el servicio DHCP de Windows Server. Esto también se conoce como \"Windows DHCP Server Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100730",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039337",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8686",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8687",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Win32k Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8677, and CVE-2017-8681."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Win32k Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8678, CVE-2017-8680, CVE-2017-8677 y CVE-2017-8681."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100736",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8687",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42749/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42749/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8688",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka \"Windows GDI+ Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8685."
      }, {
        "lang" : "es",
        "value" : "El componente GDI+ de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se divulgue información por la forma en la que revela las direcciones de la memoria del kernel. Esto también se conoce como \"Windows GDI+ Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-8684 y CVE-2017-8685."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100756",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8688",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8692",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Uniscribe component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote code execution vulnerability when it fails to properly handle objects in memory, aka \"Uniscribe Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Uniscribe de Windows en Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite que ocurra una vulnerabilidad de ejecución remota de código cuando gestiona de manera incorrecta objetos en la memoria. Esto también se conoce como \"Uniscribe Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "1F33C32A-46EF-4652-AA91-A27A18D3A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "AB506484-7F0C-46BF-8EA6-4FB5AF454CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100762",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039344",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8692",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8695",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to obtain information to further compromise a user's system via a specially crafted document or an untrusted webpage, aka \"Graphics Component Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente Uniscribe de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703 y Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office para Mac 2011 y 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; y Live Meeting 2007 Add-in y Console permite que un atacante obtenga información para comprometer posteriormente el sistema de un usuario mediante un documento especialmente manipulado o una página web no fiable. Esto también se conoce como \"Graphics Component Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB045C-AAC8-42F2-84A9-062630FA14E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83FB32-9775-418B-99A7-EC1FEA345F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*",
            "matchCriteriaId" : "EE98CEE9-200B-494A-B645-D14ACB577250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "0D84FC39-29AA-4EF2-ACE7-E72635126F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2007:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF1FCE5-BA29-4968-ADE4-0500B50ADDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2010:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC68ECB-4FB5-4702-A16D-77A36A715BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "AB506484-7F0C-46BF-8EA6-4FB5AF454CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100773",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039344",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8695",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8696",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to execute code remotely via a specially crafted website or a specially crafted document or email attachment, aka \"Microsoft Graphics Component Remote Code Execution.\""
      }, {
        "lang" : "es",
        "value" : "El componente Uniscribe de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 y 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee y Live Meeting 2007 Add-in y Console permite que un atacante ejecute código remotamente mediante una página web, un documento o archivo de correo adjunto especialmente manipulados. Esto también se conoce como \"Microsoft Graphics Component Remote Code Execution\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB045C-AAC8-42F2-84A9-062630FA14E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83FB32-9775-418B-99A7-EC1FEA345F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*",
            "matchCriteriaId" : "EE98CEE9-200B-494A-B645-D14ACB577250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2007:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF1FCE5-BA29-4968-ADE4-0500B50ADDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_2010:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC68ECB-4FB5-4702-A16D-77A36A715BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039344",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8696",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8699",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user, due to the way that Windows Shell validates file copy destinations, aka \"Windows Shell Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Shell en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual por la manera en la que Windows Shell valida los destinos de copia de archivos. Esto también se conoce como \"Windows Shell Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039331",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8699",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8702",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka \"Windows Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Error Reporting (WER) en Microsoft Windows 10 Gold, 1511 y 1607 y Windows Server 2016 permite a un atacante obtener un mayor acceso a información sensible y funcionalidades del sistema por la manera en la que WER maneja y ejecuta archivos. Esto también se conoce como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100785",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039353",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8704",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows 10, 1607 y Windows Server 2016 permite que ocurra una vulnerabilidad de denegación de servicio cuando no valida correctamente entradas de un usuario autenticado en un sistema operativo invitado. Esto también se conoce como \"Hyper-V Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100787",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8704",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8706",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8713."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que ocurra una vulnerabilidad de divulgación de información cuando no valida correctamente entradas de un usuario autenticado en un sistema operativo invitado. Esto también se conoce como \"Hyper-V Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8707, CVE-2017-8711, CVE-2017-8712 y CVE-2017-8713."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100789",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8706",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8707",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka Hyper-V Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8706, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8713."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no valida correctamente los valores de entrada de un usuario autenticado en un sistema operativo invitado. Esta condición también se conoce como \"Hyper-V Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8706, CVE-2017-8711, CVE-2017-8712 y CVE-2017-8713."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100790",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8707",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8708",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8679, CVE-2017-8709, and CVE-2017-8719."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando maneja objetos incorrectamente en la memoria. Esta condición también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8679, CVE-2017-8709 y CVE-2017-8719."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100791",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8708",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42743/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42743/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8709",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8708, CVE-2017-8679, and CVE-2017-8719."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando maneja objetos incorrectamente en la memoria. Esta condición también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8708, CVE-2017-8679 y CVE-2017-8719."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100792",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8709",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8710",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Common Console Document (.msc) in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1 allows an attacker to read arbitrary files via an XML external entity (XXE) declaration, due to the way that the Microsoft Common Console Document (.msc) parses XML input containing a reference to an external entity, aka \"Windows Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El documento de la consola común de Microsoft (.msc) en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1 permite a un atacante leer archivos arbitrarios mediante una declaración XXE (XML External Entity) por la manera en la que el documento de la consola común de Microsoft analiza sintácticamente los valores de entrada de los XML que contengan una referencia a una entidad externa. Esta condición también se conoce como \"Windows Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100793",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8710",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=bIFot3a-58I",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=bIFot3a-58I",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8711",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8707, CVE-2017-8706, CVE-2017-8712, and CVE-2017-8713."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows 10 1607 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no valida correctamente los valores de entrada de un usuario autenticado en un sistema operativo invitado. Esta condición también se conoce como \"Hyper-V Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8707, CVE-2017-8706, CVE-2017-8712 y CVE-2017-8713."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100794",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8711",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8712",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8706, and CVE-2017-8713."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows 10 1607, 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no valida correctamente los valores de entrada de un usuario autenticado en un sistema operativo invitado. Esta condición también se conoce como \"Hyper-V Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8707, CVE-2017-8711, CVE-2017-8706 y CVE-2017-8713."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100795",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8712",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8713",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka \"Hyper-V Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8706."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando no valida correctamente los valores de entrada de un usuario autenticado en un sistema operativo invitado. Esta condición también se conoce como \"Hyper-V Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8707, CVE-2017-8711, CVE-2017-8712 y CVE-2017-8706."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100796",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8713",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8714",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka \"Remote Desktop Virtual Host Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Hyper-V de Windows en Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows 10 1607 y Windows Server 2016 permite que se produzca una vulnerabilidad de ejecución remota de código cuando no valida correctamente los valores de entrada de un usuario autenticado en un sistema operativo invitado. Esta condición también se conoce como \"Remote Desktop Virtual Host Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039341",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8714",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8716",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:10.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka \"Windows Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Control Flow Guard de Windows en Microsoft Windows 10 1703 permite a un atacante ejecutar una aplicación especialmente manipulada para omitir el mecanismo de seguridad de Control Flow Guard por la manera en la que Control Flow Guard maneja los objetos en la memoria. Esta condición también se conoce como \"Windows Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100802",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8716",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8719",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8708, CVE-2017-8709, and CVE-2017-8679."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de divulgación de información cuando maneja objetos incorrectamente en la memoria. Esta condición también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es distinto a CVE-2017-8708, CVE-2017-8709 y CVE-2017-8679."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100803",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8719",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8720",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows graphics component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8675."
      }, {
        "lang" : "es",
        "value" : "El componente de gráficos de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de elevación de privilegios cuando el componente Win32k maneja objetos incorrectamente en la memoria. Esta condición también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es distinto a CVE-2017-8675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100804",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8720",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8723",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-8754."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante engañar a un usuario para que cargue una página con contenidos maliciosos por la manera en la que la política de seguridad de contenido (CSP) de Edge valida algunos documentos especialmente manipulados. Esta condición también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es distinto a CVE-2017-8754."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100768",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8723",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8724",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka \"Microsoft Edge Spoofing Vulnerability\". This CVE ID is unique from CVE-2017-8735."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite a un atacante engañar a un usuario redirigiéndolo a una página web especialmente manipulada por la manera en la que Microsoft Edge analiza sintácticamente los contenidos HTTP. Esta condición también se conoce como \"Microsoft Edge Spoofing Vulnerability\". El ID de este CVE es distinto a CVE-2017-8735."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100777",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8724",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8725",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka \"Microsoft Office Publisher Remote Code Execution\"."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft Publisher 2007 Service Pack 3 y Microsoft Publisher 2010 Service Pack 2 cuando no manejan correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Publisher Remote Code Execution\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB29E20-496D-4CDA-918B-40E4ABB3ECBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "78E9611F-1DE1-4FB2-9C70-16602FFC73C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100758",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039322",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8725",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8728",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles objects in memory, aka \"Windows PDF Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8737."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de PDF de Microsoft Windows en Microsoft Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que la biblioteca de PDF de Windows maneja los objetos en la memoria. Esto también se conoce como \"Windows PDF Remote Code Execution Vulnerability\". El ID de este CVE es distinto a CVE-2017-8737."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100739",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039327",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8728",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8729",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) en el plugin Activity Log en versiones anteriores a la 2.4.1 para WordPress permiten que los atacantes remotos inyecten código HTML o JavaScript arbitrario mediante un título que no está escapado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100733",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8729",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42763/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42763/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8731",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8734, CVE-2017-8751, and CVE-2017-11766."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que Microsoft Edge accede a los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8734, CVE-2017-8751 y CVE-2017-11766."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100735",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8731",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42758/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42758/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8733",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into believing that the user was visiting a legitimate website, due to the way that Internet Explorer handles specific HTML content, aka \"Internet Explorer Spoofing Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante engañar a un usuario para que crea que visitaba una página web legítima por la manera en la que Internet Explorer maneja los contenidos HTML. Esto también se conoce como \"Internet Explorer Spoofing Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100737",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039328",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8733",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8734",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8731, CVE-2017-8751, and CVE-2017-11766."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que Microsoft Edge accede a los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8731, CVE-2017-8751 y CVE-2017-11766."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100738",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8734",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42759/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42759/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8735",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka \"Microsoft Edge Spoofing Vulnerability\". This CVE ID is unique from CVE-2017-8724."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante engañar a un usuario redirigiéndolo a una página web especialmente manipulada por la manera en la que Microsoft Edge analiza sintácticamente los contenidos HTTP. Esta condición también se conoce como \"Microsoft Edge Spoofing Vulnerability\". El ID de este CVE es distinto a CVE-2017-8724."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100740",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8735",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8736",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to obtain specific information used in the parent domain, due to Microsoft browser parent domain verification in certain functionality, aka \"Microsoft Browser Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante obtener información específica en el dominio padre por la verificación de dominios padre del navegador de Windows en ciertas funcionalidades. Esto también se conoce como \"Microsoft Browser Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100743",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8736",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8737",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles objects in memory, aka \"Windows PDF Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8728."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de PDF de Microsoft Windows en Microsoft Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que la biblioteca de PDF de Windows maneja los objetos en la memoria. Esto también se conoce como \"Windows PDF Remote Code Execution Vulnerability\". El ID de este CVE es distinto a CVE-2017-8728."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100749",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039327",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8737",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8738",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que el motor de scripting de Microsoft Edge maneja los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100759",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8738",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8739",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite a un atacante obtener información para comprometer el sistema del usuario por la manera en la que el motor de scripting de Microsoft Edge maneja los objetos en la memoria. Esto también se conoce como \"Scripting Engine Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100761",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8739",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8740",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que el motor de scripting de Microsoft Edge maneja los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100763",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8740",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42764/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42764/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8741",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 e Internet Explorer y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que los motores JavaScript de los navegadores de Microsoft renderizan los contenidos cuando manejan los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100764",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8741",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8742",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 when they fail to properly handle objects in memory, aka \"PowerPoint Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8743."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Web Apps 2010 Service Pack 2 y Microsoft Office Compatibility Pack Service Pack 3 cuando manejan incorrectamente objetos en la memoria. Esto también se conoce como \"PowerPoint Remote Code Execution Vulnerability\" El ID de este CVE es distinto a CVE-2017-8743."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2E98C5-71A4-4014-AFC4-5438FEC196D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCB2D72-B779-4772-8F72-7177E3F47A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6E71BA-0EBA-40EE-8B81-92C6DECE8DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "36A1FA52-BFBD-4C88-9CBE-B68E55C75726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C971A8FC-3897-496D-BB9A-9E6C8A03AEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint_viewer:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871A04D-4B02-4A8C-BAFC-EB27D23AD346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100741",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039323",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8742",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8743",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka \"PowerPoint Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8742."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016 y Office Online Server cuando manejan incorrectamente objetos en la memoria. Esto también se conoce como \"PowerPoint Remote Code Execution Vulnerability\". El ID de este CVE es distinto a CVE-2017-8742."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6404DAF-34CC-47A0-B711-87EAC662FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C971A8FC-3897-496D-BB9A-9E6C8A03AEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850873B-E635-439C-9720-8BBE59120EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100746",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039323",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8743",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8744",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016 when they fail to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8731."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1 y Microsoft Excel 2016 cuando no manejan correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\" El ID de este CVE es distinto a CVE-2017-8630, CVE-2017-8632 y CVE-2017-8731."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100748",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8744",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8745",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka \"Microsoft SharePoint Cross Site Scripting Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en Microsoft SharePoint Foundation 2013 Service Pack 1 cuando no sanitiza correctamente una petición web especialmente manipulada a un servidor SharePoint afectado. Esto también se conoce como \"Microsoft SharePoint Cross Site Scripting Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100753",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8745",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8746",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Device Guard in Windows 10 1607, 1703, and Windows Server 2016 allows A security feature bypass vulnerability due to how PowerShell exposes functions and processes user supplied code, aka \"Device Guard Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Device Guard en Windows 10 1607, 1703 y Windows Server 2016 permite que se produzca una vulnerabilidad de omisión de la característica de seguridad por la manera en la que PowerShell expone las funciones y procesa el código proporcionado por el usuario. Esto también se conoce como \"Device Guard Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100760",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039340",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8746",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8747",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Internet Explorer accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8749."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que Internet Explorer accede a los objetos en la memoria. Esto también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100765",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039328",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8747",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8748",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft browser JavaScript engines render content when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que los motores JavaScript de los navegadores de Microsoft renderizan los contenidos cuando manejan los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8748",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8749",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Internet Explorer accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8747."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que Internet Explorer accede a los objetos en la memoria. Esto también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8747."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100770",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039328",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8749",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8750",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browsers access objects in memory, aka \"Microsoft Browser Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante ejecutar código remotamente en el contexto del usuario actual por la manera en la que los navegadores de Microsoft acceden a los objetos en la memoria. Esto también se conoce como \"Microsoft Browser Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100771",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8750",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8751",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8731, CVE-2017-8734, and CVE-2017-11766."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 1703 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que Microsoft Edge accede a los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8731, CVE-2017-8734 y CVE-2017-11766."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8751",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43151/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43151/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8752",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:11.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que el motor de scripting de Microsoft Edge maneja los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100775",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8752",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8753",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que el motor de scripting de Microsoft Edge maneja los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8755, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100776",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8753",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8754",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-8723."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante engañar a un usuario para que cargue una página con contenidos maliciosos por la manera en la que la política de seguridad de contenido (CSP) de Edge valida algunos documentos especialmente manipulados. Esta condición también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es distinto a CVE-2017-8723."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100779",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8754",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8755",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8756, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que el motor de scripting maneja los objetos en la memoria en Microsoft Edge. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8756 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100778",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42766/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42766/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8756",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, and CVE-2017-11764."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que Microsoft Edge accede a los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es distinto a CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755 y CVE-2017-11764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100718",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8756",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8757",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way Microsoft Edge handles objects in memory, aka \"Microsoft Edge Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite a un atacante ejecutar código arbitrario en el contexto del usuario actual por la manera en la que Microsoft Edge maneja los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100721",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8757",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8758",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka \"Microsoft Exchange Cross-Site Scripting Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange Server 2016 permite que ocurra una vulnerabilidad de elevación de privilegios cuando Microsoft Exchange Outlook Web Access (OWA) no maneja las peticiones web correctamente. Esto también se conoce como \"Microsoft Exchange Cross-Site Scripting Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100723",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039320",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8758",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8759",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-09-13T01:29:12.193",
      "lastModified" : "2025-10-22T00:16:12.357",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 y 4.7 permite que un atacante ejecute código remotamente mediante un documento o aplicación maliciosos. Esto también se conoce como \".NET Framework Remote Code Execution Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft .NET Framework Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B3A045-B08A-44E0-91BE-726753F6A362"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC4407-7E92-4E60-82F0-0C87D1860D3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "23317443-1968-4791-9F20-AD3B308A83D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0B660D-1F30-4D45-B98B-726EDB8CB90F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DD582C-1660-4E6E-81A1-537BD1307A99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0B660D-1F30-4D45-B98B-726EDB8CB90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100742",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039324",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/GitHubAssessments/CVE_Assessments_01_2020",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bhdresh/CVE-2017-8759",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nccgroup/CVE-2017-8759",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42711/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/GitHubAssessments/CVE_Assessments_01_2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bhdresh/CVE-2017-8759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nccgroup/CVE-2017-8759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42711/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the \"ACCOUNT UPDATE\" section."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de The EyesOfNetwork, también llamada eonweb, en su versión 5.1-0 cuenta con una inyección SQL mediante el parámetro user_name para module/admin_user/add_modify_user.php en la sección \"ACCOUNT UPDATE\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/module_admin_user_add_modify_user.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/module_admin_user_add_modify_user.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the \"ACCOUNT CREATION\" section, related to lack of input validation in include/function.php."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de The EyesOfNetwork, también llamada eonweb, en su versión 5.1-0 cuenta con una inyección SQL mediante el parámetro user_name para module/admin_user/add_modify_user.php en la sección \"ACCOUNT CREATION\", relacionada con la falta de validación de entradas en include/function.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/eonweb_include_function.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/eonweb_include_function.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php."
      }, {
        "lang" : "es",
        "value" : "La interfaz web The EyesOfNetwork, también llamada eonweb, en su versión 5.1-0 cuenta con una inyección SQL mediante el parámetro term para module/admin_group/search.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/eonweb_module_admin_group_search.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/eonweb_module_admin_group_search.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_tool variable) to module/tool_all/select_tool.php, as demonstrated by a tool_list=php://filter/ substring."
      }, {
        "lang" : "es",
        "value" : "La interfaz web The EyesOfNetwork, también llamada eonweb, en su versión 5.1-0 permite la inclusión de archivos locales mediante el parámetro tool_list (variable url_tool) para module/tool_all/select_tool.php, tal y como demuestra la subcadena tool_list=php://filter/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/eonweb_module_tool_all_select_tool.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/eonweb_module_tool_all_select_tool.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de The EyesOfNetwork, también llamada eonweb, en su versión 5.1-0 permite la ejecución remota de comandos mediante metacaracteres shell en un parámetro array hosts_cacti para module/admin_device/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/eonweb_module_admin_device_index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/eonweb_module_admin_device_index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en sync_buffer en interface.c en mpglibDBL, como en el caso de la versión 1.5.2 de MP3Gain. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-null-pointer-dereference-in-sync_buffer-mpglibdblinterface-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-null-pointer-dereference-in-sync_buffer-mpglibdblinterface-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en pila en filterYule en gain_analysis.c en la versión 1.5.2 de MP3Gain. Esta vulnerabilidad provoca el cierre inesperado de la aplicación, lo que puede dar lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-filteryule-gain_analysis-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-filteryule-gain_analysis-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en pila en dct36 en layer3.c en mpglibDBL, como en el caso de la versión 1.5.2 de MP3Gain. Esta vulnerabilidad provoca el cierre inesperado de la aplicación, lo que puede dar lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-dct36-mpglibdbllayer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-dct36-mpglibdbllayer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer en III_dequantize_sample en layer3.c en mpglibDBL, como en el caso de la versión 1.5.2 de MP3Gain. Esta vulnerabilidad tiene como consecuencia una lectura fuera de límites, lo que da lugar a una denegación de servicio remota o a una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-global-buffer-overflow-in-iii_dequantize_sample-mpglibdbllayer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-global-buffer-overflow-in-iii_dequantize_sample-mpglibdbllayer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer en III_i_stereo en layer3.c en mpglibDBL, como en el caso de la versión 1.5.2 de MP3Gain. Esta vulnerabilidad provoca el cierre inesperado de la aplicación, lo que puede dar lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-global-buffer-overflow-in-iii_i_stereo-mpglibdbllayer3-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-global-buffer-overflow-in-iii_i_stereo-mpglibdbllayer3-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en copy_mp en interface.c en mpglibDBL, como en el caso de la versión 1.5.2 de MP3Gain. Esta vulnerabilidad tiene como consecuencia una lectura fuera de límites, lo que da lugar a una denegación de servicio remota o a una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-copy_mp-mpglibdblinterface-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-copy_mp-mpglibdblinterface-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T03:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service (segmentation fault and application crash) or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Existe una escritura de memoria no válida en copy_mp en interface.c en mpglibDBL, como en el caso de la versión 1.5.2 de MP3Gain. Esta vulnerabilidad provoca una denegación de servicio (error de segmentación y cierre inesperado de la aplicación) u otros posibles impactos no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195E1AA2-59CA-4CE2-B3DC-1BF97C2A4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-invalid-memory-write-in-copy_mp-mpglibdblinterface-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/08/mp3gain-invalid-memory-write-in-copy_mp-mpglibdblinterface-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en cgi-bin/ConfigSet en dispositivos Axesstel MU553S MU55XS-V1.14."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axesstel:mu553s_firmware:mu553s-v1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659481EC-5D67-40C8-A88C-3D61D1D85D23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axesstel:mu553s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B4F610-6721-432B-80EF-FE44EF9F747B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Axesstel MU553S MU55XS-V1.14 tienen una contraseña de administrador por defecto para la cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axesstel:mu553s_firmware:mu553s-v1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659481EC-5D67-40C8-A88C-3D61D1D85D23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axesstel:mu553s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B4F610-6721-432B-80EF-FE44EF9F747B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the \"Basic Settings\" page."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Axesstel MU553S MU55XS-V1.14, existe una vulnerabilidad de Cross-Site Scripting (XSS) persistente en el parámetro APN en la página \"Basic Settings\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axesstel:mu553s_firmware:mu553s-v1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659481EC-5D67-40C8-A88C-3D61D1D85D23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axesstel:mu553s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B4F610-6721-432B-80EF-FE44EF9F747B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, and consequently gain privileges, via a methodology involving a handle to \\Device\\PhysicalMemory, IOCTL 0x22A064, and ZwMapViewOfSection."
      }, {
        "lang" : "es",
        "value" : "rzpnk en Razer Synapse 2.20.15.1104 permite a los usuarios locales leer y escribir ubicaciones de memoria arbitrarias y, como consecuencia, ganar privilegios mediante una metodología que involucre el manejo de \\Device\\PhysicalMemory, IOCTL 0x22A064 y ZwMapViewOfSection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razer:synapse:2.20.15.1104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39895E5B-9289-4E0F-8ADC-5E8EFDE8DAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://twitter.com/FuzzySec/status/907722788219256832",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/FuzzySec/status/907722788219256832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to crash the OS via a malformed IOCTL call."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de espacio de memoria del kernel en el controlador hitmanpro37.sys en Sophos SurfRight HitmanPro en versiones anteriores a la 3.7.20 Build 286 (incluido en la solución HitmanPro.Alert y Sophos Clean) permite que usuarios remotos provoquen el cierre inesperado del sistema operativo mediante una llamada IOCTL mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:hitmanpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.20",
            "matchCriteriaId" : "CE3713F1-84E7-484C-9CF3-C95E5C323721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nuitduhack.com/fr/planning/talk_10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nuitduhack.com/fr/planning/talk_10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de espacio de memoria del kernel en el controlador hitmanpro37.sys en Sophos SurfRight HitmanPro en versiones anteriores a la 3.7.20 Build 286 (incluido en la solución HitmanPro.Alert y Sophos Clean) permite que usuarios remotos escalen privilegios mediante una llamada IOCTL mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:hitmanpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.20",
            "matchCriteriaId" : "CE3713F1-84E7-484C-9CF3-C95E5C323721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cbayet/Exploit-CVE-2017-6008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43057/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.nuitduhack.com/fr/planning/talk_10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cbayet/Exploit-CVE-2017-6008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43057/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.nuitduhack.com/fr/planning/talk_10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T08:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver level, an attacker can use this vulnerability to leak some critical information about the machine such as nt!ExpPoolQuotaCookie."
      }, {
        "lang" : "es",
        "value" : "En Sophos SurfRight HitmanPro en versiones anteriores a 3.7.20 Build 286 (incluido en la solución HitmanPro.Alert y Sophos Clean), un IOCTL manipulado con código 0x22E1C0 podría conducir a fugas de datos del kernel. Debido a que la fuga ocurre a nivel de controlador, un atacante puede emplear esta vulnerabilidad para filtrar información crítica sobre la máquina, como por ejemplo nt!ExpPoolQuotaCookie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:hitmanpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.20",
            "matchCriteriaId" : "CE3713F1-84E7-484C-9CF3-C95E5C323721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nuitduhack.com/fr/planning/talk_10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nuitduhack.com/fr/planning/talk_10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6330",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-09-13T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests.\""
      }, {
        "lang" : "es",
        "value" : "Symantec Encryption Desktop en versiones anteriores a SED 10.4.1MP2 puede permitir que atacantes remotos provoquen una denegación de servicio (consumo de recursos) mediante peticiones web manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:encryption_desktop:*:mp1:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.1",
            "matchCriteriaId" : "8E11C5A7-A579-4C6C-B5C0-1ED3EEA03166"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100552",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170907_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170907_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T16:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de doble liberación (double free) en MIT Kerberos 5 (también conocido como krb5) que permite que atacantes provoquen un impacto no especificado mediante vectores que causen borrados automáticos de contextos de seguridad por error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E30B176-1FE5-4C53-8B79-2E6D87DF05B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC81822F-DC8C-4889-AD53-33216B66A109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B23EE0-35EB-46FC-8620-AC0059498D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "70831CB8-695D-45E8-A829-2E888823E8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E650B5A3-99CA-491B-A1FB-259EF548D92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091F3C51-980E-482F-9882-0A555A8F74BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00BDDDC-3D5D-4D63-A8D8-63BF2F4C7329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42505BC2-12A0-43E9-8561-80270D7CA74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0496EF-F0F9-4A5D-92F4-E50C5F3DCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EEC80F-9E4F-4A6D-BB8D-6AB7764AD8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB427FE4-CC39-43EE-A27B-69C5B18056FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "14A2F0C0-91E0-4DD9-851E-67CE8A5EAE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.15.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C1770120-B3B2-4B5A-9785-162399A47989"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772E9557-A371-4664-AE2D-4135AAEB89AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://krbdev.mit.edu/rt/Ticket/Display.html?id=8598",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1488873",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FPRUP4YVOEBGEROUYWZFEQ64HTMGNED/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://krbdev.mit.edu/rt/Ticket/Display.html?id=8598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1488873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FPRUP4YVOEBGEROUYWZFEQ64HTMGNED/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12612",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-13T16:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the local machine. It does not affect apps run by spark-submit or spark-shell. The attacker would be able to execute code as the user that ran the Spark application. Users are encouraged to update to version 2.2.0 or later."
      }, {
        "lang" : "es",
        "value" : "En las versiones 1.6.0 a 2.1.1 de Apache Spark, la API de lanzamiento realiza una deserialización no segura de los datos recibidos por su socket. Esto hace que las aplicaciones ejecutadas de manera programática utilizando la API del lanzador potencialmente vulnerable a la ejecución de código arbitrario por un atacante con acceso a cualquier cuenta de usuario en la máquina local. Esto no afecta a las apps ejecutadas por spark-submit o spark-shell. El atacante podría ejecutar código como el usuario que ejecutaba la aplicación Spark. Se recomienda a los usuarios que actualicen a la versión 2.2.0 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58865F90-EC63-4921-96BC-4EE9B534A3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C61354-EBDA-4D5C-B04E-13485603EB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E516F716-30A9-4B2A-BE27-A8AF590950ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD42625-3551-48FB-8368-A7C3B6AC32ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1720777E-9812-4D9E-A303-5923DF02D483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D47F51-C0CC-4626-9EC5-44364725F50E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46511CBC-8190-44BF-B0DD-F46FEFE0DEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E35193-4C21-4DC6-A1F4-EA484BC81823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BD3AC-64E0-4D06-9F33-A9130210F38A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100823",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/spark-dev/201709.mbox/%3CCAEccTyy-1yYuhdNgkBUg0sr9NeaZSrBKkBePdTNZbxXZNTAR-g%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/spark-dev/201709.mbox/%3CCAEccTyy-1yYuhdNgkBUg0sr9NeaZSrBKkBePdTNZbxXZNTAR-g%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T16:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions."
      }, {
        "lang" : "es",
        "value" : "En eLux RP en versiones 5.x anteriores a la 5.5.1000 LTSR y 5.6.x anteriores a la 5.6.2 CR, cuando se utiliza el modo escritorio clásico, es posible iniciar otras aplicaciones que no sean las definidas, incluso si el usuario no tiene los permisos para modificar las definiciones de aplicaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:*:*:*:*:ltsr:*:*:*",
            "versionEndIncluding" : "5.5.0",
            "matchCriteriaId" : "D6AF926B-30DE-4280-81A4-64885F7BDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:*:*:*:*:cr:*:*:*",
            "versionEndIncluding" : "5.6.0",
            "matchCriteriaId" : "F8B113B7-59D7-4707-9D7B-2EF7B7FBA1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926C7A24-FE41-44BB-9DDA-38563710BCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640B135D-A49F-405E-A239-9DE91A6C07E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438409A8-E3BE-4DA1-A3B6-89124A27676B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8AA6D28-CD35-4E4B-86AE-F21A36F2787A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7D03C9-38B8-44CF-8A9C-AD5AC9BF6546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2E61D0-2072-41C5-9BBD-73B6008DEEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E155FE8B-BAA1-4B52-A420-E1ED73D583B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD616DF0-45A8-4FE5-BF69-48FD5B76BC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0B0A09-1B98-461B-A805-B91752E06185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E889239-6B70-4BFE-BE9E-04BC2DC0EF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9C1A5D-6581-436D-A717-A95B5BCB8EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8356BD02-F3A0-4592-A2FC-F866BE5C553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749DC7C7-2CDE-4032-BDD8-605F4C5916F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:4.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E54EAA-8D6A-4548-B01D-12B8829FF57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A343891-DE61-43F0-B7E1-A0E522BC5FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155C0F05-111F-4478-8CDA-922F9C6764BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B9D8F5-22AE-45E8-AFE5-42A55191A945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76B159C-2288-41DB-8CE2-364DEFD7E043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D50A8-93B1-448E-9E01-CE9AF42FDB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicon-software:rp:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F294F0E-86BC-4A0F-8341-2911915834F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3165",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-13T16:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user's resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En Apache Brooklyn en versiones anteriores a la 0.10.0, el servidor REST es vulnerable a Cross-Site Scripting (XSS) en el cual un usuario autenticado puede hacer que los scripts se ejecuten en el navegador de otro usuario autorizado para acceder a los recursos del primer usuario. Esto se debe al escape incorrecto del contenido del lado del servidor. Se sabe que existe un exploit a modo de prueba de concepto que emplea esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:brooklyn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "37F4D23C-1126-43D6-9C86-706C0B6D38D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96228",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://brooklyn.apache.org/community/security/CVE-2017-3165.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5aa6b7583edbfc1f5653607003204326d9e27ef65e8af356c798b21c%40%3Cdev.brooklyn.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/96228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://brooklyn.apache.org/community/security/CVE-2017-3165.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5aa6b7583edbfc1f5653607003204326d9e27ef65e8af356c798b21c%40%3Cdev.brooklyn.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wpsacts.php."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A con versiones de firmware hasta FW114WWb07_h2ab_beta1 tienen una vulnerabilidad de Cross-Site Scripting (XSS) en el parámetro action para htdocs/web/wpsacts.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/shareport.php."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A con versiones de firmware hasta FW114WWb07_h2ab_beta1 tienen una vulnerabilidad de Cross-Site Scripting (XSS) en el parámetro action en htdocs/web/shareport.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/sitesurvey.php."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A con versiones de firmware hasta FW114WWb07_h2ab_beta1 tienen una vulnerabilidad de Cross-Site Scripting (XSS) en el parámetro action para htdocs/web/sitesurvey.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wandetect.php."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A con versiones de firmware hasta FW114WWb07_h2ab_beta1 tienen una vulnerabilidad de Cross-Site Scripting (XSS) en el parámetro action para htdocs/web/wandetect.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services."
      }, {
        "lang" : "es",
        "value" : "register_send.php en dispositivos D-Link DIR-850L REV. B (con firmware hasta la versión FW208WWb02) no requiere autenticación, lo que puede resultar en una inscripción involuntaria en mydlink Cloud Services."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices, sends the cleartext admin password over the Internet as part of interaction with mydlink Cloud Services."
      }, {
        "lang" : "es",
        "value" : "La extensión D-Link NPAPI, tal y como se emplea conjuntamente con dispositivos D-Link DIR-850L REV. B (con firmware hasta la versión FW208WWb02) envía la contraseña de administrador en texto claro a través de Internet como parte de la interacción con mydlink Cloud Services."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, participates in mydlink Cloud Services by establishing a TCP relay service for HTTP, even though a TCP relay service for HTTPS is also established."
      }, {
        "lang" : "es",
        "value" : "La extensión D-Link NPAPI, tal y como se emplea conjuntamente con dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) participa en mydlink Cloud Services estableciendo un servicio de retransmisión de TCP para HTTP, a pesar de que también se establece un servicio de retransmisión de TCP para HTTPS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La extensión D-Link NPAPI, tal y como se emplea conjuntamente con dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) no verifica certificados X.509 de servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw114wwb07_h2ab_beta1",
            "matchCriteriaId" : "3AB746EA-BB7F-43DD-96B8-20161EA23C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. B (con firmware hasta la versión FW208WWb02) tienen una contraseña embebida de wrgac25_dlink.2013gui_dir850l para la cuenta Alphanetworks al restablecer el dispositivo, lo que permite que atacantes remotos obtengan acceso root mediante una sesión TELNET."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) emplean la misma clave embebida /etc/stunnel.key a lo largo de instalaciones de diferentes clientes, lo que permite que atacantes remotos superen los mecanismos de protección criptográfica HTTPS aprovechando el hecho de que conocen esta clave por otra instalación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests."
      }, {
        "lang" : "es",
        "value" : "htdocs/parentalcontrols/bind.php en dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) no evita ataques de adivinación de nonces, lo que facilita que atacantes remotos cambien la configuración de DNS mediante una serie de peticiones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/passwd permissions."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) tienen permisos 0666 /var/passwd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/etc/hnapasswd permissions."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) tienen permisos 0666 /var/etc/hnapasswd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow (aka the /etc/shadow symlink target) permissions."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) tienen permisos 0644 /var/etc/shadow (también conocidos como el destino /etc/shadow symlink)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storage_account_root permissions."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) tienen permisos 0666 /var/run/storage_account_root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/hostapd* permissions."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) tienen permisos 0666 /var/run/hostapd*."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.870",
      "lastModified" : "2025-05-06T15:15:50.277",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenticated remote code execution as root because /etc/services/INET/inet_ipv4.php mishandles shell metacharacters, affecting generated files such as WAN-1-udhcpc.sh."
      }, {
        "lang" : "es",
        "value" : "El cliente DHCP en dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) permite la ejecución remota de código sin autenticación como root debido a que /etc/services/INET/inet_ipv4.php no gestiona correctamente los metacaracteres shell. Esto afecta a archivos generados como WAN-1-udhcpc.sh."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T17:29:00.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to cause a denial of service (daemon crash) via crafted LAN traffic."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versión FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versión FW208WWb02) permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado del demonio) mediante tráfico LAN manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw114wwb07_h2ab",
            "matchCriteriaId" : "1A2C72E9-93AA-4670-B0B5-4016E442DFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E063822-8CED-46B3-BE66-7AD18F02FAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "fw208wwb02",
            "matchCriteriaId" : "AD01AE08-1F0A-4004-8EC3-4887E540F349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7560",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-13T17:29:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que los archivos PID de rhnsd se crean de modo que cualquier usuario pueda modificarlos, lo que permite que atacantes locales llenen los discos o terminen procesos seleccionados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:rhnsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D0350E-D828-4DD9-AEFD-29F6FFDD276D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1480550",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1480550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7561",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-13T17:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact."
      }, {
        "lang" : "es",
        "value" : "Red Hat JBoss EAP en su versión 3.0.7 hasta antes de la versión 4.0.0.Beta1 es vulnerable a un envenenamiento de la caché por parte del servidor o a peticiones CORS en el componente JAX-RS, resultando en un impacto moderado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25033CDC-E3CA-47D6-B1BB-6838D9DCAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7CB4CB-4143-4FC1-970C-D102BA119B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F498215-6D52-4F74-A8ED-D151DA1E09E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEB4E47-CE89-437D-BA89-4FC163F6BDE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8683E0-C5FF-4D6A-8079-08E822733B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926A7B4B-54B3-4E58-A66E-1DBD6246F657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF85FD4-6231-4554-AF41-D3EEA2D56466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C8C145-1E87-44FA-881E-7EF9F737AF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED9028C-999D-4658-91FD-9083E822CADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E9BAD1-3484-4758-A3FC-D42F963A5A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65D0A95-B2C2-4708-B0FB-8D3100FD522B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F3E403-66B7-4E23-9B9D-E6BB2F7D56C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC3A3D4-CB51-40AA-9267-5D723DC71421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431D16DC-F569-4CA9-8BF2-9CB7E3D2856D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.jboss.org/browse/RESTEASY-1704",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.jboss.org/browse/RESTEASY-1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1508",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-13T18:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server 12.1 podría permitir que un usuario local inicie sesión con un usuario administrador de la base de datos para obtener privilegios root. IBM X-Force ID: 129620."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A95A4E-A509-4FDB-BF4E-88B000C93DAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006872",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100820",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129620",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1556",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-13T18:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. IBM X-Force ID: 131546."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect 5.0.7.0 hasta la versión 5.0.7.2 es vulnerable a un ataque de expresión regular que podría permitir que un atacante autenticado use una expresión regular y provoque que el sistema se ralentice o se bloquee. IBM X-Force ID: 131546."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB6EF04-A24E-4857-8C7A-DE779AFA8B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6AFDC6-3596-4640-8E92-984B308A1C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008315",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100831",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131546",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2816",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-13T18:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la funcionalidad de análisis sintáctico de etiquetas de LibOFX 0.9.11. Un archivo OFX especialmente manipulado podría provocar una escritura fuera de límites, lo que resultaría en un desbordamiento de búfer en la pila. Un atacante puede crear un archivo OFX malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libofx_project:libofx:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C3B3C1-4AE2-4755-A64F-438DE0BAE785"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100828",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-26",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0317",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12249",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-13T22:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to components of or sensitive information in an affected system. The vulnerability is due to an incorrect default configuration of the TURN server, which could expose internal interfaces and ports on the external interface of an affected system. An attacker could exploit this vulnerability by using a TURN server to perform an unauthorized connection to a Call Bridge, a Web Bridge, or a database cluster in an affected system, depending on the deployment model and CMS services in use. A successful exploit could allow the attacker to gain unauthenticated access to a Call Bridge or database cluster in an affected system or gain unauthorized access to sensitive meeting information in an affected system. To exploit this vulnerability, the attacker must have valid credentials for the TURN server of the affected system. This vulnerability affects Cisco Meeting Server (CMS) deployments that are running a CMS Software release prior to Release 2.0.16, 2.1.11, or 2.2.6. Cisco Bug IDs: CSCvf51127."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servidor TURN (Traversal Using Relay NAT) incluido en Cisco Meeting Server (CMS) podría permitir que un atacante autenticado remoto obtenga acceso no autorizado o no autenticado a componentes o información sensible de un sistema afectado. La vulnerabilidad se debe a una configuración por defecto incorrecta del servidor TURN, lo que podría exponer puertos e interfaces internos en la interfaz externa de un sistema afectado. Un atacante podría explotar esta vulnerabilidad utilizando un servidor TURN para realizar una conexión no autorizada a un Call Bridge, un Web Bridge o un clúster de bases de datos en un sistema afectado, dependiendo del modelo de despliegue y los servicios CMS en uso. Una explotación con éxito podría permitir a un atacante obtener acceso no autenticado a un Call Bridge o un clúster de bases de datos en un sistema afecado, o acceso no autorizado a información de reuniones sensible en un sistema afectado. Para explotar esta vulnerabilidad, el atacante debe poseer las credenciales válidas para el servidor TURN del sistema afectado. Esta vulnerabilidad afecta a los despliegues de Cisco Meeting Server (CMS) que estén ejecutando un lanzamiento del software de CMS anterior al 2.0.16, 2.1.11 o 2.2.6. Cisco Bug IDs: CSCvf51127."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.15",
            "matchCriteriaId" : "A20F8707-43C8-473D-8656-C33DD4E0C4E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B310B39B-7D5D-4533-9FE6-5F47985E35B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2720CCF-3B73-4268-94C7-9AE3D1ECAC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7F9D72-0801-43B5-A64D-14E21DFC0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5D443-3345-42B6-8EC9-5F010785D5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ECDC6B-C793-4015-A40F-152A840E6417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD13161-9DE7-4183-BBA3-877E83E9DD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40AE1-65C6-421B-93EB-12EEE1AF55DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4E022B-7CC9-4CDC-BC75-FAAFD641A202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09489D1A-97AB-468F-AA47-33C23D08ED95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E050F7-7AE7-4B3E-BAFA-4CE00F3DAEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AD9EC-465B-47A9-8D7A-05C52CBD4509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E377BED5-DC33-44C4-A75E-73971A13C211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5836B782-DBFC-411B-82CE-BB712B920A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE719DD3-DAA4-4AE8-94D6-96201F117F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CCB9AE-494E-4AD6-ABF4-87A02D54FF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F5474C-C206-4F2D-841A-A0DD6881DDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6778DD12-81FF-4D24-8355-E2BF9085CDA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100821",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039357",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170913-cmsturn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170913-cmsturn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-13T22:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fuga de memoria en Xen desde la versión 3.3 hasta las 4.8.x permite que usuarios invitados del sistema operativo provoquen una denegación de servicio (consumo de memoria del sistema operativo host ARM o x86 AMD) debido a que se salta una serie de tareas de limpieza si no se ha asignado un dispositivo de paso, también llamado XSA-207."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB157D09-B91B-486A-A9F7-C9BA75AE8823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA95119D-EAF1-48D4-AE7C-0C4927D06CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D40E4E4-3FCB-4980-8DD2-49DDABCB398E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7D1B7E-C30F-430F-832D-2A405DA1F2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C1D0AD-B804-474C-96A3-988BADA0DAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCD1F05-9F96-40DD-B506-750E87306325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B6AE42-E1EB-47A8-8FAF-7A93A67EC67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BADA43-94D5-4E80-B5C8-D01A0249F13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550223A9-B9F1-440A-8C25-9F0F76AF7301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC734D58-96E5-4DD2-8781-F8E0ADB96462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CEC1BF-1922-410D-BCBA-C58199F574C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F2C2B-4A65-4823-B511-D0FEB7C7FAB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A24DED-B2EC-4D9C-9FA4-DD37EF3E3BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D532B60-C8DD-4A2F-9D05-E574D23EB754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D83CA8B-8E49-45FA-8FAB-C15052474542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27537DF5-7E0F-463F-BA87-46E329EE07AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA4F978-9145-4FE6-B4F9-15207E52C40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A995FD-9B7F-4DF0-BECF-4B086E470F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219597E2-E2D7-4647-8A7C-688B96300158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C59417-493C-493A-9AB2-317F240BF387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E55950-EACA-4209-B2A1-E09026FC6006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0AF8EF-6FF6-4E22-B16E-82C9F90C6B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47640819-FC43-49ED-8A77-728C3D7255B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2448537F-87AD-45C1-9FB0-7A49CA31BD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36B2265-70E1-413B-A7CF-79D39E9ADCFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37148A72-BE20-45C5-8589-2309ED84D08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB736B4C-325A-4B27-8C8A-15E60B8A8C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF948E6A-07BE-4C7D-8A98-002E89D35F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E23B94-1726-4F63-84BB-8D83FAB156D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76124AB-4E3D-4BE0-AAEA-7FC05868E2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30B5EF5-0AE8-420B-A103-B1B25A372F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F784EF07-DBEC-492A-A0F4-F9F7B2551A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1044792C-D544-457C-9391-4F3B5BAB978D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CF23B21B-594A-42E2-AF90-D5C4246B39A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD9AD01-50B7-4951-8A73-A6CF4801A487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75615D84-9CA1-456C-816D-768E37B074A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB87384-A1F8-4136-A242-441C655D9364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CCECD0-C0F9-45A8-8699-64428637EBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED340C-6746-471E-9F2D-19D62D224B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DA3D28-EAE7-4EC9-977C-444A46CBD9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE1F484-23B4-4CCC-AD23-6F8BDC312CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-207.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico SMB/CIFS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en smbutil.c:name_len()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring()."
      }, {
        "lang" : "es",
        "value" : "Varios analizadores sintácticos de protocolos en tcpdump en versiones anteriores a la 4.9.2 podrían provocar una sobrelectura de búfer en addrtoname.c:lookup_bytestring()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ICMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-icmp.c:icmp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISAKMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isakmp.c:isakmp_rfc3948_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISO CLNS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:isoclns_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico NFS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-nfs.c:interp_reply()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico DECnet en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-decnet.c:decnet_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf()."
      }, {
        "lang" : "es",
        "value" : "Varios analizadores sintácticos de protocolos en tcpdump en versiones anteriores a la 4.9.2 podrían provocar una sobrelectura de búfer en util-print.c:tok2strbuf()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico EIGRP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-eigrp.c:eigrp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico Zephyr en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-zephyr.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ip6.c:ip6_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de cabeceras de enrutamiento IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-rt6.c:rt6_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IEEE 802.11 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-802_11.c:parse_elements()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico telnet en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-telnet.c:telnet_parse()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico RESP en tcpdump en versiones anteriores a la 4.9.2 podría introducir un bucle infinito por un fallo en print-resp.c:resp_get_length()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISAKMP en tcpdump en versiones anteriores a la 4.9.2 podría introducir un bucle infinito por varios fallos en print-isakmp.c en múltiples funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BGP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-bgp.c:bgp_attr_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico RIPng en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ripng.c:ripng_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico Juniper en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-juniper.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BGP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-bgp.c:bgp_attr_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico DNS en tcpdump en versiones anteriores a la 4.9.2 podría introducir un bucle infinito por un fallo en print-domain.c:ns_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PIMv2 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pim.c:pimv2_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico LLDP en tcpdump en versiones anteriores a la 4.9.2 podría introducir un bucle infinito por un fallo en print-lldp.c:lldp_private_8021_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IS-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:isis_print_extd_ip_reach()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IS-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:isis_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IEEE 802.15.4 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-802_15_4.c:ieee802_15_4_if_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico NFS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-nfs.c:nfs_printfh()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico AODV en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-aodv.c:aodv_extension()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico LMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-lmp.c:lmp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de protocolos Juniper en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-juniper.c:juniper_parse_header()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico NFS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-nfs.c:xid_map_enter()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico L2TP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-l2tp.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PKTAP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pktap.c:pktap_if_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IEEE 802.11 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-802_11.c:parse_elements()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de movilidad IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-mobility.c:mobility_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BEEP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-beep.c:l_strnstart()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal()."
      }, {
        "lang" : "es",
        "value" : "Varios analizadores sintácticos de protocolos en tcpdump en versiones anteriores a la 4.9.2 podrían provocar un desbordamiento de búfer en util-print.c:bittok2str_internal()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ICMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-icmp.c:icmp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ARP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-arp.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico del protocolo de White Board en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-wb.c:wb_prep() en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico EAP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-eap.c:eap_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISO ES-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:esis_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico DHCPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-dhcp6.c:dhcp6opt_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PGM en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pgm.c:pgm_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PGM en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pgm.c:pgm_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico VTP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-vtp.c:vtp_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:01.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ICMPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-icmp6.c:icmp6_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ip.c:ip_printroute()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de movilidad IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-mobility.c:mobility_opt_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de movilidad IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-mobility.c:mobility_opt_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de movilidad IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-mobility.c:mobility_opt_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISO IS-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico LLDP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-lldp.c:lldp_mgmt_addr_tlv_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BOOTP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-bootp.c:bootp_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PPP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ppp.c:print_ccp_config_options()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PIM en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pim.c y otras funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de cabeceras de fragmentación IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-frag6.c:frag6_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico RADIUS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-radius.c:print_attr_string()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico VTP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-vtp.c:vtp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PGM en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pgm.c:pgm_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISO IS-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:isis_print_id()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico OSPFv3 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ospf6.c:ospf6_decode_v3()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ip.c:ip_printts()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico PPP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-ppp.c:handle_mlppp()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISAKMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isakmp.c y otras funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico MPTCP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-mptcp.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ICMPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-icmp6.c:icmp6_nodeinfo_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico HNCP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-hncp.c:dhcpv6_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BGP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-bgp.c:decode_multicast_vpn()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico HNCP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-hncp.c:dhcpv4_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico VQP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-vqp.c:vqp_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BGP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-bgp.c:bgp_attr_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISO ES-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:esis_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:02.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico RSVP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-rsvp.c:rsvp_obj_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de protocolo Rx en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en over-read in print-rx.c:ubik_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico RPKI-Router en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-rpki-rtr.c:rpki_rtr_pdu_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico RSVP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-rsvp.c:rsvp_obj_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico CFM en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-cfm.c:cfm_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico BGP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-bgp.c:decode_rt_routing_info()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico LLDP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-lldp.c:lldp_private_8023_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico ISO IS-IS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isoclns.c:isis_print_is_reach_subtlv()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico Cisco HDLC en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-chdlc.c:chdlc_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico OLSR en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-olsr.c:olsr_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IKEv1 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isakmp.c:ikev1_id_print()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico IKEv2 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isakmp.c en varias funciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print()."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de cabeceras de enrutamiento IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-rt6.c:rt6_print()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "15620492-1343-4632-A942-281535A101B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tcpdump.org/tcpdump-changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2018:0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T06:29:03.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GSTN_offline_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the \"C:\\GST Offline Tool\" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript code. For example, a local user could create VBScript code for a TCP reverse shell, and use that later for Remote Command Execution."
      }, {
        "lang" : "es",
        "value" : "GSTN_offline_tool en India Goods and Services Tax Network (GSTN) Offline Utility tool en versiones anteriores a la 1.2 ejecuta winstart-server.vbs desde el directorio \"C:\\GST Offline Tool\", que no tiene permisos seguros. Esto permite que los usuarios locales obtengan privilegios reemplazando winstart-server.vbs por código VBScript arbitrario. Por ejemplo, un usuario local podría crear código VBScript para un shell TCP inverso y emplearlo más tarde para ejecutar comandos remotamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstn:india_goods_and_services_tax_network_offline_utility_tool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "044FDC11-DD62-41FB-AEDE-3558835A3F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tink2hack.blogspot.in/2017/09/writeup-of-cve-2017-13779-remote.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://tink2hack.blogspot.in/2017/09/writeup-of-cve-2017-13779-remote.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002000",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin mobile-friendly-app-builder-by-easytouch v3.0 en WordPress. El código en el archivo ./mobile-friendly-app-builder-by-easytouch/server/images.php no requiere autenticación o no verifica que el usuario tenga permisos para subir contenido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobile-friendly-app-builder-by-easytouch_project:mobile-friendly-app-builder-by-easytouch:3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "662EAFF6-529C-40D3-B307-EC3829A9C119"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96899",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96905",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=179",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/mobile-friendly-app-builder-by-easytouch/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/mobile-friendly-app-builder-by-easytouch/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002001",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin mobile-app-builder-by-wappress v1.05 de WordPress. Este plugin incluye software CMS vulnerable sin licencia de http://www.invedion.com."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobile-app-builder-by-wappress_project:mobile-app-builder-by-wappress:1.05:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B7CC1826-233C-4D23-9E21-8CCCCABE41B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=180",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/mobile-app-builder-by-wappress/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/mobile-app-builder-by-wappress/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002002",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin webapp-builder v2.0 de WordPress. Este plugin incluye software CMS vulnerable sin licencia de http://www.invedion.com/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webapp-builder_project:webapp-builder:2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1DEC6276-D3A1-4534-ADBC-1486B9959432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96906",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=181",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/webapp-builder/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/webapp-builder/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002003",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin wp2android-turn-wp-site-into-android-app v1.1.4 de WordPress. Este plugin incluye software CMS vulnerable sin licencia de http://www.invedion.com/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp2android-turn-wp-site-into-android-app_project:wp2android-turn-wp-site-into-android-app:1.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5179D8DB-3906-4548-A594-F663DEA96DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96908",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=182",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/wp2android-turn-wp-site-into-android-app/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins-wp/wp2android-turn-wp-site-into-android-app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002004",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin DTracker v1.5 de WordPress. En el archivo ./dtracker/download.php no se sanitizan los valores de entrada del usuario por medio de la variable id antes de añadirla al final de una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dtracker_project:dtracker:1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7EB87112-8F47-4EEC-8C98-0BFE853CB65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96781",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=183",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002005",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact_id variable before adding it to the end of an SQL query."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin DTracker v1.5 de WordPress. En el archivo ./dtracker/delete.php no se sanitizan los valores de entrada del usuario por medio de la variable contact_id antes de añadirla al final de una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dtracker_project:dtracker:1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7EB87112-8F47-4EEC-8C98-0BFE853CB65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96781",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=183",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002006",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin DTracker v1.5 de WordPress. El código en dtracker/save_contact.php no verifica que el usuario esté autorizado antes de inyectar nuevos contactos en la tabla wp_contact."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dtracker_project:dtracker:1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7EB87112-8F47-4EEC-8C98-0BFE853CB65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96890",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=186",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002007",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin DTracker v1.5 de WordPress. El código en dtracker/save_mail.php no verifica que el usuario esté autorizado antes de inyectar nuevos contactos en la tabla wp_contact."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dtracker_project:dtracker:1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7EB87112-8F47-4EEC-8C98-0BFE853CB65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96890",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=186",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/dtracker/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002008",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin membership-simplified-for-oap-members-only v1.58 de WordPress. El código de descarga de archivos en membership-simplified-for-oap-members-only/download.php no verifica si un usuario ha iniciado sesión y si tiene privilegios de descarga."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:membership_simplified_project:membership_simplified:1.58:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0B309CF8-9739-4612-AA8F-3995F74BEBA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=187",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/membership-simplified-for-oap-members-only",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8777",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41622/",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/membership-simplified-for-oap-members-only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41622/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002009",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin Membership Simplified v1.58 de WordPress. El código en membership-simplified-for-oap-members-only/updateDB.php es vulnerable a inyecciones SQL a ciegas porque no sanitiza los valores de entrada del usuario mediante recordId en la función delete."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ontraport:membership_simplified:1.58:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6569A609-8064-4EB9-8604-A2378FEEFB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://membership.officeautopilot.com/get-it-now/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=188",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://membership.officeautopilot.com/get-it-now/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002010",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete_media function."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin Membership Simplified v1.58 de WordPress. El código en membership-simplified-for-oap-members-only/updateDB.php es vulnerable a inyecciones SQL a ciegas porque no sanitiza los valores de entrada del usuario mediante recordId en la función delete_media."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ontraport:membership_simplified:1.58:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6569A609-8064-4EB9-8604-A2378FEEFB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://membership.officeautopilot.com/get-it-now/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=188",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://membership.officeautopilot.com/get-it-now/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002011",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value->gallery_name and $value->gallery_description where anyone with privileges to modify or add galleries/images and inject javascript into the database."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin image-gallery-with-slideshow v1.5.2 de WordPress que consiste en un Cross-Site Scripting (XSS) persistente mediante los valores $value->gallery_name y $value->gallery_description donde cualquier usuario con privilegios para modificar o añadir galerías o imágenes pueda inyectar JavaScript en la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anblik:image-gallery-with-slideshow:1.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "94A0CDF3-5DD3-48CB-9B82-CD566D6B5285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002012",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin image-gallery-with-slideshow v1.5.2 en WordPress. En image-gallery-with-slideshow/admin_setting.php el siguiente fragmento de código no sanitiza los valores de entrada mediante la variable gid antes de pasarla a una instrucción SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anblik:image-gallery-with-slideshow:1.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "94A0CDF3-5DD3-48CB-9B82-CD566D6B5285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002013",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/admin_setting.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin image-gallery-with-slideshow v1.5.2 de WordPress que consiste en una inyección SQL a ciegas, mediante el parámentro imgid en image-gallery-with-slideshow/admin_setting.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anblik:image-gallery-with-slideshow:1.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "94A0CDF3-5DD3-48CB-9B82-CD566D6B5285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002014",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via gallery_name parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin image-gallery-with-slideshow v1.5.2 de WordPress que consiste en una inyección SQL a ciegas en image-gallery-with-slideshow/admin_setting.php, mediante el parámetro gallery_name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anblik:image-gallery-with-slideshow:1.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "94A0CDF3-5DD3-48CB-9B82-CD566D6B5285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002015",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via selectMulGallery parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin image-gallery-with-slideshow v1.5.2 de WordPress que consiste en una inyección SQL a ciegas en image-gallery-with-slideshow/admin_setting.php, mediante el parámetro selectMulGallery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anblik:image-gallery-with-slideshow:1.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "94A0CDF3-5DD3-48CB-9B82-CD566D6B5285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/image-gallery-with-slideshow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002016",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin flickr-picture-backup v0.7 de WordPress. El código en flickr-picture-download.php no verifica si el usuario está autenticado o tiene permisos para subir archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flickr_picture_backup_project:flickr_picture_backup:0.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "84E29232-0CD6-473B-9D84-862F40C5214B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=190",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/flickr-picture-backup/",
        "source" : "larry0@me.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/flickr-picture-backup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002017",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin gift-certificate-creator v1.0 en WordPress. El código en gc-list.php no sanitiza los valores de entrada del usuario con el fin de evitar una vulnerabilidad Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bobcares:gift-certificate-creator:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F1D081EF-77DC-4580-A55D-13F41A7DDF15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=191",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/gift-certificate-creator/",
        "source" : "larry0@me.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/gift-certificate-creator/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002018",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin eventr v1.02.2 de WordPress. Ni el formulario en edit.php ni el código en attendees.php sanitizan los valores de entrada, lo que permite que se produzca una inyección SQL a ciegas mediante el parámetro event."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eventr_project:eventr:1.02.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C7ABD027-CA0A-49DE-892F-41C7680D317E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=192",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/eventr/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/eventr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002019",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize input, this allows for blind SQL injection via the event parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin eventr v1.02.2 de WordPress. Ni el formulario en edit.php ni el código en event_form.php sanitizan los valores de entrada, lo que permite que se produzca una inyección SQL a ciegas mediante el parámetro event."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eventr_project:eventr:1.02.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C7ABD027-CA0A-49DE-892F-41C7680D317E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=192",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/eventr/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/eventr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002020",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin surveys v1.01.8 en WordPress. El código en survey_form.php no sanitiza la variable action antes de incluirla dentro de una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surveys_project:surveys:1.01.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "11A73A23-A10A-4B00-835F-0D0E200871BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=193",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/surveys/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8833",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/surveys/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002021",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin surveys v1.01.8 en WordPress. El código en individual_responses.php no sanitiza la variable survey_id antes de incluirla dentro de una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surveys_project:surveys:1.01.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "11A73A23-A10A-4B00-835F-0D0E200871BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=193",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/surveys/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8833",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/surveys/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002022",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin surveys v1.01.8 en WordPress. El código en questions.php no sanitiza la variable survey antes de incluirla dentro de una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surveys_project:surveys:1.01.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "11A73A23-A10A-4B00-835F-0D0E200871BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=193",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/surveys/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8833",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/surveys/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002023",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easy_team_manager_desc_edit.php"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin Easy Team Manager v1.3.2 de WordPress. El código no sanitiza id antes de incluirlo en una instrucción SQL en el archivo ./easy-team-manager/inc/easy_team_manager_desc_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daisythemes:easy_team_manager:1.3.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "ABD95ADF-88AD-4F13-9E39-9F8FDE4A8536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=194",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-team-manager/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-team-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002024",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la aplicación web Kind Editor v4.1.12, en la que kindeditor/php/upload_json.php no verifica la autenticación antes de permitir que los usuarios suban archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.6",
            "matchCriteriaId" : "946E81FA-FF86-49C2-9D91-5CB86D4BC95E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23480F7A-B5E8-46F0-B9AB-CD88D78A496C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878DFA29-2919-4C50-96DE-A68F26794FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E702CE-CFD7-4566-A384-607D096BE70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A5D893-38E4-4151-B1CF-535DFD672452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AC27F1-6F0C-49FA-AFDC-C35B32316EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBDB383-D30D-4FFA-932C-97EA06DDD038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A1E683-A774-486B-BCCD-A20B91E4CC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5D5174-B363-4879-A348-0A30EE48CCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531482E9-39EC-45E7-A5C9-2B78D14CF96E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4780CA-50A5-4F72-8BBD-805ADF49154A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBCC0FD-D582-46CD-ABC4-FBE438D04C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC0A074-848E-4D53-9BDF-E26B22F8CC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A962DD0-C190-4FD1-83D8-152FED03ABC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B4D314-605F-4BB8-969F-01DA39379EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D6DD6A-6550-4ED2-B3A7-B1B407CB2431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1C3E8C-E647-4300-AD2E-03339F12E6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0F69F7-A09C-4698-88D0-6F91B30369DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84DDD7F-224C-49AA-93F2-CAC745B22F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kind_editor:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32A3FBC-C6C6-4CD0-8E31-3D6B1C96298A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindsoft:kindeditor:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED5316D-F519-4F41-8950-E897A5EBDD42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kindeditor.org",
        "source" : "larry0@me.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=195",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kindsoft/kindeditor",
        "source" : "larry0@me.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://kindeditor.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kindsoft/kindeditor",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002025",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin add-edit-delete-listing-for-member-module v1.0 de WordPress. El autor del plugin no sanitiza las entradas proporcionadas por el usuario mediante $act antes de pasarlas a una instrucción SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:add-edit-delete-listing-for-member-module_project:add-edit-delete-listing-for-member-module:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "20F982F7-54C7-4ACC-9548-8949F921728C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=196",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/add-edit-delete-listing-for-member-module/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/add-edit-delete-listing-for-member-module/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002026",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin Event Expresso Free v3.1.37.11.L de WordPress. La función edit_event_category no sanitiza las entradas proporcionadas por el usuario mediante el parámetro $id antes de pasarlas a una instrucción SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eventespresso:event_espresso:3.1.37.11.l:*:*:*:free:wordpress:*:*",
            "matchCriteriaId" : "A112161D-E331-497E-833D-99B83C23C6A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=197",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/event-espresso-free/",
        "source" : "larry0@me.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/event-espresso-free/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002027",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rk_user_list.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin rk-responsive-contact-form v1.0 de WordPress. No se sanitiza la variable $delid antes de pasarla a una consulta en el archivo ./rk-responsive-contact-form/include/rk_user_list.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rayanehdownload:rk-responsive-contact-form:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A47B2558-61A9-4C62-ABAE-F0FF9825BE2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=198",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/rk-responsive-contact-form/",
        "source" : "larry0@me.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8889",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/rk-responsive-contact-form/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002028",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-14T13:29:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el plugin wordpress-gallery-transformation v1.0 de WordPress que consiste en una inyección SQL en ./wordpress-gallery-transformation/gallery.php, debido a que no se sanitiza el parámetro $jpic antes de pasarlo a una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrybyte:gallery-transformation:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "42C33274-5FF8-4F81-A858-2D3D196D7091"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=199",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wordpress-gallery-transformation/",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8888",
        "source" : "larry0@me.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wordpress-gallery-transformation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002100",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2017-09-14T13:29:01.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to \"container\" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requires privileged access to the Kubernetes cluster or authenticated access to the Azure portal."
      }, {
        "lang" : "es",
        "value" : "Los permisos de acceso por defecto para volúmenes persistentes (PV) creados por el proveedor de servicios en la nube Kubernetes en Azure, en sus versiones de la 1.6.0 a la 1.6.5, están establecidos a \"container\", lo que expone una URI que se puede acceder sin autenticación en la red de internet pública. Para acceder al string URI se requieren permisos de acceso al clúster de Kubernetes o acceso autenticado al portal Azure."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CE4080-7128-4FDC-9723-1C163BE7D83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.0:*:*:*:*:*:*",
            "matchCriteriaId" : "3F37DCFE-39BF-4FFB-9AB2-10F285554815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.1:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC20273-E14D-43F1-B6E9-C2F57331DE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.2:*:*:*:*:*:*",
            "matchCriteriaId" : "289C4EFE-172C-49CD-B9DE-DB14049E06C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33D4AC-F81D-400A-A166-522B447F0612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.0:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8EE9E4-C2FE-4F45-970D-D3B26D87FD05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.1:*:*:*:*:*:*",
            "matchCriteriaId" : "68793380-41DB-48B1-BDAB-8CA326320321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.2:*:*:*:*:*:*",
            "matchCriteriaId" : "53A7675A-15D9-4A18-8DB3-17162E6AB6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.3:*:*:*:*:*:*",
            "matchCriteriaId" : "53DBAAB4-DCC5-40B3-82F5-A95BD40ADA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.4:*:*:*:*:*:*",
            "matchCriteriaId" : "59A469FA-7A6F-4E63-97D5-BD091F5A2C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.0:rc.1:*:*:*:*:*:*",
            "matchCriteriaId" : "98370CF2-0D4B-4962-97C7-DDDF556B7609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBE416B-81DC-4E6E-8839-1AA0A212C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.1:beta.0:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4356AD-77C5-4D3E-AEB6-2950591C03CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "008FA1B0-8297-475D-8474-1038C8625EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.2:beta.0:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA9B3BE-F7C2-4561-8445-6D183273D7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5101C877-7403-42DC-BDD4-EE9390DCFC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.3:beta.0:*:*:*:*:*:*",
            "matchCriteriaId" : "5261E659-FB2A-4DA3-83AF-A199D3DB074E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.3:beta.1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFB90A-4AB0-4BA6-BA20-D5F08A0B46A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD0DEFF-DFED-4A55-AE9C-BE5374825984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.4:beta.0:*:*:*:*:*:*",
            "matchCriteriaId" : "D20E8A6C-0720-4878-A5FF-CB1251248B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.4:beta.1:*:*:*:*:*:*",
            "matchCriteriaId" : "91711ECA-ABA9-40D4-88EE-5C16888CCBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19741B06-64B6-49DD-828C-114473D2F90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:1.6.5:beta.0:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB36BFD-3474-4C3E-894A-B7EADFF4238D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/47611",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/kubernetes-security-announce/n3VBg_WJZic/-ddIqKXqAAAJ",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubernetes/kubernetes/issues/47611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/kubernetes-security-announce/n3VBg_WJZic/-ddIqKXqAAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002150",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2017-09-14T13:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection"
      }, {
        "lang" : "es",
        "value" : "python-fedora, en su versión 0.8.0 y anteriores, es vulnerable a una redirección abierta y, como consecuencia, a una pérdida de protección contra ataques de tipo Cross-Sire Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:python-fedora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.0",
            "matchCriteriaId" : "F3D3853E-7C48-4CD2-BF6E-84798AA44E2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002151",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2017-09-14T13:29:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization"
      }, {
        "lang" : "es",
        "value" : "Pagure, en su versión 3.3.0 y anteriores, es vulnerable a una pérdida de confidencialidad debida a una autorización incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:pagure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "451A4627-89C9-4A67-A58C-63A7E0E4C168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pagure.io/pagure/c/c92108097e8ae4702c115ae4702b63d960838e75.patch",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://pagure.io/pagure/pull-request/2426",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pagure.io/pagure/c/c92108097e8ae4702c115ae4702b63d960838e75.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://pagure.io/pagure/pull-request/2426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1490",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-14T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el motor de consulta de ciclo de vida de Jazz Reporting Service en sus versiones de la 6.0 a la 6.0.4 que podría revelar información sumamente sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC8D80-8974-41F7-8225-474A9814ABD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3BEA54-9927-4117-8EB8-0D87A42198C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC88614B-EEB1-41C5-B28A-4E3E35008855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008253",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100835",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128688",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13067",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-09-14T15:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack."
      }, {
        "lang" : "es",
        "value" : "QNAP ha parcheado una vulnerabilidad de ejecución remota de código que afecta a la biblioteca multimedia de QTS en todas sus versiones anteriores a la QTS 4.2.6 build 20170905 y QTS 4.3.3.0299 build 20170901. Esta vulnerabilidad permite que un atacante remoto ejecute comandos en un NAS de QNAP utilizando un servicio de transcodificación en el puerto 9251. No es necesario que un usuario remoto tenga privilegios para llevar a cabo un ataque con éxito."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "F061D299-AF11-413B-96D8-977D8F7BA2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndIncluding" : "4.3.3.0299",
            "matchCriteriaId" : "B43F1A92-B74F-4F95-8C6C-12552F115922"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-hk/releasenotes/",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-hk/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14113",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-09-14T15:29:00.310",
      "lastModified" : "2023-11-07T02:38:51.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-13067.  Reason: This candidate is a reservation duplicate of CVE-2017-13067.  Notes: All CVE users should reference CVE-2017-13067 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted \"Content-Type: text/enriched\" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe Gnus support for enriched and richtext inline MIME objects in lisp/gnus/mm-view.el. In particular, an Emacs user can be instantly compromised by reading a crafted email message (or Usenet news article)."
      }, {
        "lang" : "es",
        "value" : "GNU Emacs en versiones anteriores a la 25.3 permite que atacantes remotos ejecuten código arbitrario por email con datos \"Content-Type: text/enriched\" manipulados que contienen un elemento x-display XML que especifica la ejecución de comandos shell. Esto está relacionado con una extensión text/enriched no segura en lisp/textmodes/enriched.el, así como con un soporte Gnus inseguro para objetos MIME \"enriched\" y \"richtext\" en lisp/gnus/mm-view.el. Concretamente, es posible que un usuario de Emacs quede comprometido instantáneamente leyendo un mensaje de correo electrónico manipulado (o un artículo de noticias de Usenet)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.2",
            "matchCriteriaId" : "07D81FB9-4FD0-41B9-8BFB-37EB24EE3939"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/11/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=28350",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-25&id=9ad0fcc54442a9a01d41be19880250783426db70",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-07",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3970",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gnu.org/software/emacs/index.html#Releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=28350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-25&id=9ad0fcc54442a9a01d41be19880250783426db70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gnu.org/software/emacs/index.html#Releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-14T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses."
      }, {
        "lang" : "es",
        "value" : "El módulo Fastly de red de entrega de contenidos (CDN) en versiones anteriores a la 1.2.26 para Magento2, cuando se utiliza con un plugin de autenticación de un tercero, podría permitir que usuarios remotos autenticados obtengan información sensible de sesiones autenticadas mediante vectores que implican el almacenamiento de respuestas redireccionadas en caché."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastly:fastly:*:*:*:*:*:magento2:*:*",
            "versionEndIncluding" : "1.2.25",
            "matchCriteriaId" : "463D605D-AA80-42EC-B62F-EEA143F7D998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.fastly.com/security-advisories/vulnerability-fastly-open-source-cdn-module-intended-be-integrated-magento2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fastly.com/security-advisories/vulnerability-fastly-open-source-cdn-module-intended-be-integrated-magento2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0781",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-14T19:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el sistema Android (bluetooth). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100810",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44415/",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44415/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0782",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-14T19:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el sistema Android (bluetooth). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100822",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0783",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-14T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63145701."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63145701."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100811",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0785",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-09-14T19:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100812",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041300",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2809",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-09-14T19:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de carga de archivos yaml de ansible-vault en versiones anteriores a la 1.0.5. Una bóveda (vault) especialmente manipulada puede ejecutar comandos python arbitrarios. Un atacante puede insertar código python en la bóveda para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansible-vault_project:ansible-vault:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "E3BAF98D-136C-4FCC-8CD9-BCE01B993B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100824",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tomoh1r/ansible-vault/issues/4",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tomoh1r/ansible-vault/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T10:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command."
      }, {
        "lang" : "es",
        "value" : "flower.initd en el paquete de Gentoo dev-python/flower en versiones anteriores a la 0.9.1-r1 para Celery Flower establece la propiedad de los archivos PID a una cuenta que no es root, lo que podría permitir que usuarios locales finalicen procesos arbitrarios aprovechando el acceso a esta cuenta que no es root para modificar archivos PID antes de que un script root ejecute un comando \"kill `cat /pathname`\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:dev-python-flower:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1",
            "matchCriteriaId" : "CE2F457B-B674-4683-8F60-61770777082F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/631020",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/631020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T10:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe \"chown -R\" command is executed."
      }, {
        "lang" : "es",
        "value" : "El paquete de Gentoo sci-mathematics/gimps en versiones anteriores a la 28.10-r1 para Great Internet Mersenne Prime Search (GIMPS) permite que usuarios locales obtengan privilegios mediante la creación de un vínculo físico en /var/lib/gimps debido a que se ejecuta un comando \"chown -R\" no seguro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:sci-mathematics-gimps:28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF6A92C-F52E-4133-8EEE-5DDAF1955E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=603408",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=603408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T10:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation."
      }, {
        "lang" : "es",
        "value" : "La función iscsi_if_rx en drivers/scsi/scsi_transport_iscsi.c en el kernel de Linux hasta la versión 4.13.2 permite que usuarios locales provoquen una denegación de servicio (pánico) aprovechando que se realiza una validación de longitud incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.2",
            "matchCriteriaId" : "0EF2760C-2621-4F9D-B214-92E84C65244F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1490421",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9923803/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42932/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1490421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9923803/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42932/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T11:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory."
      }, {
        "lang" : "es",
        "value" : "La macro XFS_IS_REALTIME_INODE en fs/xfs/xfs_linux.h en el kernel de Linux en versiones anteriores a la 4.13.2 no verifica que un sistema de archivos tenga un dispositivo realtime, lo que permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y OOPS) mediante vectores relacionados con la configuración de una marca RHINHERIT en un directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.1",
            "matchCriteriaId" : "82940A2B-88B3-4D0B-B5E6-177D939E1833"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b31ff3cdf540110da4572e3e29bd172087af65cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/436",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100851",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1491344",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b31ff3cdf540110da4572e3e29bd172087af65cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b31ff3cdf540110da4572e3e29bd172087af65cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1491344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b31ff3cdf540110da4572e3e29bd172087af65cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4924",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-09-15T13:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host."
      }, {
        "lang" : "es",
        "value" : "VMware ESXi (ESXi 6.5 sin el parche ESXi650-201707101-SG), Workstation (en versiones 12.x anteriores a la 12.5.7) y Fusion (en versiones 8.x anteriores a la 8.5.8) contienen una vulnerabilidad de escritura fuera de límites en un dispositivo SVGA. Este problema podría permitir que un invitado ejecute código en el host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.8",
            "matchCriteriaId" : "92BB0EFB-2FDE-4C23-81D6-A706C380F83C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.7",
            "matchCriteriaId" : "F5298092-7D33-4BB6-954E-4DECA2C554EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100843",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039365",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039366",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0015.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4925",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-09-15T13:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs."
      }, {
        "lang" : "es",
        "value" : "VMware ESXi 6.5 sin el parche ESXi650-201707101-SG, ESXi 6.0 sin el parche ESXi600-201706101-SG, ESXi 5.5 sin el parche ESXi550-201709101-SG, Workstation (en versiones 12.x anteriores a la 12.5.3) y Fusion (en versiones 8.x anteriores a la 8.5.4) contienen una vulnerabilidad de desreferencia de puntero NULL. Este problema ocurre cuando se gestionan peticiones RPC por parte de un invitado. Si se explota esta vulnerabilidad con éxito, los atacantes con privilegios de usuario normal podrían provocar el cierre inesperado de sus máquinas virtuales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC223AC-EB3D-48CF-A6CC-D35E00A38394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "75C8E87E-A869-49F8-89F9-DE64A45CDB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F8878C-F73D-4549-9607-74880176D2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D369F-13B2-42B3-BB74-60AAD0954B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:*",
            "matchCriteriaId" : "45551873-2E14-4324-9946-C22079F7D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D5E67-78C9-495E-91F0-AF94871E5FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "6D35CDFE-F0E7-43F7-A307-E3BDDE5AEAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC13026-3B5A-4BF0-BDEC-B77338E427E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA70BA-FFCD-4D2D-AD26-95CC62748937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*",
            "matchCriteriaId" : "4C92DD8B-8AB8-40D4-8E86-12FEB055D37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*",
            "matchCriteriaId" : "C58D77F5-CDB2-47DA-A879-BABEBE2E1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C324FB-3989-4A4A-BF5B-C40CA698DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7AC58E-D1F8-4FDF-9A28-61CF6158330A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*",
            "matchCriteriaId" : "489EE0F6-5510-470E-8711-DC08B4AFB4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*",
            "matchCriteriaId" : "6719ED6F-CBC3-4B1E-9343-23DC3BA15FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAA48A9-9319-4104-B151-D529E5EBF0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "D16CD918-5075-4975-8B1E-21D8AD35A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "7A38CD8E-494D-4E0E-A300-8550FC81FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40ABE8-8DED-4633-A34C-00DF5D510E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "1736B975-089B-413C-8CA0-5524B957EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4DCBF6-7189-497A-B923-08574443172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "16FBA646-0B5E-44A7-BB12-29D5C611AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "29F57497-7B48-4D0C-B8F5-8D33062BECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE96C7-C489-4D14-990B-8524627A23D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "AD82C093-FD98-45DE-9EE6-A05E81A1FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "08789F9E-CDC7-4F89-B925-92C9E3AE5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "26ABB84C-B4BF-424E-8F4C-D2B6BE0AC79E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "621C203B-4B66-49CC-A35D-D7703109BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "3261BDEF-D89C-41D9-A360-EC36EAB17490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*",
            "matchCriteriaId" : "5170A4F6-02B7-4225-B944-73DB5A4D332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*",
            "matchCriteriaId" : "62A97DBA-A56B-4F0B-B9C4-44B5166681AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*",
            "matchCriteriaId" : "806C8BE6-A2BE-45BE-BEF2-396BEB16FCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6211E-134A-484E-8444-FBB5070B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7B05B3-4076-4A44-B9A6-A44419F175C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1636B4-6E79-42D7-AA62-5EE43412B43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0377D0-BBED-41BF-80C5-58414ED413EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*",
            "matchCriteriaId" : "6495283C-D18A-4DDA-852E-46F2273D6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "09DEFEE5-5E9E-4F3A-A245-3E8E2B291339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A97A3-65DB-4697-9CF1-B4F5E4E4132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*",
            "matchCriteriaId" : "17A84E0A-1429-467F-9EE1-FCA062392DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*",
            "matchCriteriaId" : "C591163D-64BC-403B-A460-5B2258EC2F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*",
            "matchCriteriaId" : "ED932B89-D34D-4398-8F79-AF98987CAFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD365A0-0B09-4EC2-9973-691144C99507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE64DC7-A9D1-416F-89BF-D9F8DD8174AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*",
            "matchCriteriaId" : "0E198AE4-A6A3-4875-A7DA-44BE9E1B280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD5BA0-8180-484D-8308-B0862B6E9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EB9A-A908-42D1-A6BC-E38E861BBECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*",
            "matchCriteriaId" : "651EDCAA-D785-464D-AE41-425A69F6FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3C704C-9D60-4F72-B482-07F209985E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFE956-4391-4B71-BD0B-96A008A624B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "409778CD-9AB3-4793-A5F5-8D8657F81442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA75DB-B6BE-4E75-89B6-C69E96CBD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC45A8B-6DE0-465F-9644-B75A09394F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "7A265671-BCB0-401A-A1E8-500F9D41492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "83168067-1E43-4186-9B15-3FC702C6583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*",
            "matchCriteriaId" : "8C122DB4-8410-4C4E-87BE-EB3175CE182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*",
            "matchCriteriaId" : "C76ED78D-0778-4269-938E-BB7586C1E44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F78C5-E995-4E37-83C5-5B6A1D39E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E842D-AF37-4641-AD05-B91F250E7487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EAC87-32FD-4553-B71D-181F2C66AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F0D62-4C51-46D6-A6C4-E479BE6B2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*",
            "matchCriteriaId" : "865D3042-68ED-44B9-A036-9433F7463D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4FEF78-D2DA-4CCE-BB81-7E2090ED545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*",
            "matchCriteriaId" : "11AE3F61-9655-4B20-96E1-92112BE2BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE35166-3019-450B-9C69-484E4EDE5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*",
            "matchCriteriaId" : "D892B066-381B-4F46-8363-7BA1647BBCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*",
            "matchCriteriaId" : "710DB381-5504-4493-8D0A-17AB8E5A903B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*",
            "matchCriteriaId" : "42AAA3B7-B74D-4B67-8BD3-1D9B5ED1E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*",
            "matchCriteriaId" : "33CBCA55-010E-4E84-B2F8-F9B53D5A3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*",
            "matchCriteriaId" : "95A73B4B-F9B3-4D66-9668-902902C73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*",
            "matchCriteriaId" : "8D14D51D-E2EA-4826-8C6E-AF1C15F12384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*",
            "matchCriteriaId" : "BED100A1-9D59-48BE-91D4-0C8F2D678E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*",
            "matchCriteriaId" : "660B51F2-DFE0-49F6-AD2A-6E94B20F4019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF80536-348A-468E-AC1C-DA53632FCC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.3",
            "matchCriteriaId" : "436F87D0-646B-44D8-ADB8-444D87971644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.3",
            "matchCriteriaId" : "119CB5C4-DCF8-492C-924C-5FC46CE5463E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.4",
            "matchCriteriaId" : "E5D9E1FD-5D56-48E9-A09B-84CF4A9175EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100842",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039367",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039368",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0015.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4926",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-09-15T13:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server (en versiones 6.5 anteriores a la 6.5 U1) contiene una vulnerabilidad que podría permitir ataques de Cross-Site Scripting (XSS) persistente. Un atacante con privilegios de usuario VC puede inyectar códigos JavaScript maliciosos, que se ejecutarán cuando otros usuarios VC accedan a la página."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D97854C-DE5D-48B4-B5DB-C132E6D4B826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100844",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039364",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0015.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10813",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos CG-WLR300NM con firmware 1.90 y anteriores permiten que un atacante ejecute comandos arbitrarios del sistema operativo mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:corega:wlr_300_nm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.90",
            "matchCriteriaId" : "E0476601-28BA-4B1F-BFB6-B9CF81602073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:corega:wlr_300_nm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731A755B-2957-45F8-97CE-347C809EA139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.corega.jp/support/security/20170908_wlr300nm.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN00719891/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.corega.jp/support/security/20170908_wlr300nm.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN00719891/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10814",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en dispositivos CG-WLR300NM con firmware 1.90 y anteriores permiten que un atacante ejecute comandos arbitrarios del sistema operativo mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:corega:wlr_300_nm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.90",
            "matchCriteriaId" : "E0476601-28BA-4B1F-BFB6-B9CF81602073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:corega:wlr_300_nm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731A755B-2957-45F8-97CE-347C809EA139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.corega.jp/support/security/20170908_wlr300nm.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN00719891/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.corega.jp/support/security/20170908_wlr300nm.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN00719891/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10845",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi STATION L-02F con versión de software V10g y anteriores permite que atacantes remotos accedan al dispositivo con privilegios administrativos y realicen operaciones accidentales mediante una cuenta a modo de puerta trasera."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nttdocomo:wi-fi_station_l-02f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v10g",
            "matchCriteriaId" : "613F5A28-6122-4BC2-AC71-7FF1AFCCDCED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nttdocomo:wi-fi_station_l-02f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9DC948-D3C0-4D1C-B190-0253054243FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en//jp/JVN68922465/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en//jp/JVN68922465/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10846",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi STATION L-02F con versión de software V10g y anteriores permite que atacantes remotos omitan las restricciones de acceso para obtener información sobre la configuración del dispositivo mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nttdocomo:wi-fi_station_l-02f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v10b",
            "matchCriteriaId" : "0B981954-8236-4AF2-878B-4D299EEC7556"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nttdocomo:wi-fi_station_l-02f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9DC948-D3C0-4D1C-B190-0253054243FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN03044183/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN03044183/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10855",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en FENCE-Explorer para Windows V8.4.1 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:fence-explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.1",
            "matchCriteriaId" : "4B249F1E-2C21-4CE3-BF89-F874EFEB9EBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fujitsu.com/jp/group/bsc/services/fence/info-2017080101.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57205588/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.fujitsu.com/jp/group/bsc/services/fence/info-2017080101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57205588/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10856",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet."
      }, {
        "lang" : "es",
        "value" : "SEIL/X 4.60 a 5.72, SEIL/B1 4.60 a 5.72, SEIL/x86 3.20 a 5.72 y SEIL/BPV4 5.00 a 5.72 permite que atacantes remotos provoquen un fallo temporal de las comunicaciones cifradas del dispositivo mediante un paquete especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:b1_firmware:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD5B0AE-9433-4923-82F0-3DA10526641E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:b1_firmware:5.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9648927F-D1A7-4287-AA69-2C09F9CCE10D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E9D891-10A8-4A16-9CB6-BE031C713EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:bpv_4_firmware:5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7071D3E5-1468-4AC0-8C60-E7D74E0A0B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:bpv_4_firmware:5.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3CEDDA-50F6-4F67-84A9-3F3ADE40A999"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:bpv_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB68F73D-A80D-4B4A-A865-F20C23B419B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x1_firmware:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85854003-80DC-41C4-A944-5D14CE27B534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x1_firmware:5.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E8F25A-BF5A-423F-85A9-BCA591B346A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:x1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40A80E-6BB7-401B-874B-FFF01B4114AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x2_firmware:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389544EF-2F71-482D-BA9B-8D183DCD54A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x2_firmware:5.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F89D635-1A79-4401-A51D-49DCBEB9B67A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:x2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AE9731-348F-41B3-A347-F6C4B63300CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x86_fuji_firmware:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5AFC54-DAEA-48C7-AFCD-0226262963EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seil:x86_fuji_firmware:5.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96090329-E826-4307-BC79-B4E811012AD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seil:x86_fuji:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0B7F96-4A3D-4240-96B0-62CC4148CFCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.seil.jp/support/security/a01811.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN76692689/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.seil.jp/support/security/a01811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN76692689/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10858",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in \"i-filter 6.0 install program\" file version 1.0.8.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el archivo \"i-filter 6.0 install program\" en su versión 1.0.8.1 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daj:i-filter_installer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8.1",
            "matchCriteriaId" : "D928101D-D46D-4965-BE30-D5750287271A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daj.jp/cs/info/2017/0912/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75929834/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.daj.jp/cs/info/2017/0912/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75929834/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10859",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in \"i-filter 6.0 installer\" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el archivo \"i-filter 6.0 install program\" cuya marca de tiempo de la firma de código es anterior a 23 de agosto de 2017 (JST) permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daj:i-filter_installer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F29CAF9-0E6D-4EEE-ADF3-27E6152263E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daj.jp/cs/info/2017/0912/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75929834/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.daj.jp/cs/info/2017/0912/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75929834/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10860",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-09-15T17:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in \"i-filter 6.0 installer\" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no confiable en el archivo \"i-filter 6.0 install program\" cuya marca de tiempo de la firma de código es anterior a 23 de agosto de 2017 (JST) permite que un atacante ejecute código arbitrario mediante un archivo ejecutable especialmente manipulado en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daj:i-filter_installer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F29CAF9-0E6D-4EEE-ADF3-27E6152263E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.daj.jp/cs/info/2017/0912/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100916",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75929834/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.daj.jp/cs/info/2017/0912/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75929834/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T18:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls."
      }, {
        "lang" : "es",
        "value" : "La función tpacket_rcv en net/packet/af_packet.c en el kernel de Linux en versiones anteriores a la 4.13 no gestiona correctamente cabeceras vnet, lo que podría permitir que usuarios locales provoquen una denegación de servicio (desbordamiento de búfer y corrupción de disco y de memoria) o, posiblemente, provoquen otro impacto sin especificar mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.9.51",
            "matchCriteriaId" : "00AB00A3-1183-4070-BF4D-E3354C6D7DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.14",
            "matchCriteriaId" : "0758FD06-3B98-48B9-9A66-49CA15173FC5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edbd58be15a957f6a760c4a514cd475217eb97fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/476",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039371",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492593",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/edbd58be15a957f6a760c4a514cd475217eb97fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-kernel&m=150394500728906&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=150394517700001&r=1&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edbd58be15a957f6a760c4a514cd475217eb97fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/edbd58be15a957f6a760c4a514cd475217eb97fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-kernel&m=150394500728906&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=150394517700001&r=1&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T18:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en SilverStripe CMS en versiones anteriores a la 3.6.1 mediante un documento SVG que no es gestionado correctamente por (1) la opción Insert Media en el editor de contenidos o (2) un nombre de ruta admin/assets/add, tal y como demuestra la URI admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload. Este problema también se conoce como SS-2017-017."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.0",
            "matchCriteriaId" : "BA11EA4A-649D-4DFC-926A-6804AD312F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.openwall.net/full-disclosure/2017/09/14/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.silverstripe.org/en/3/changelogs/3.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/commit/25b77a2ff8deabe8e8894002b9a5647eaec27b0a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-installer/commit/c25478bef75cc5482852e80a1fa6f1f0e6460e39",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.openwall.net/full-disclosure/2017/09/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.silverstripe.org/en/3/changelogs/3.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/commit/25b77a2ff8deabe8e8894002b9a5647eaec27b0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-installer/commit/c25478bef75cc5482852e80a1fa6f1f0e6460e39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2299",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2017-09-15T18:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` parameter but do not specify the `ssl_certs_dir` parameter, a default will be provided for the `ssl_certs_dir` that will trust certificates from any of the system-trusted certificate authorities. This did not affect FreeBSD."
      }, {
        "lang" : "es",
        "value" : "Las versiones del módulo puppetlabs-apache anteriores a 1.11.1 y 2.1.0 hacen que sea muy sencillo configurar de forma incorrecta las relaciones de confianza para TLS Si se especifica el parámetro `ssl_ca` pero no se especifica el parámetro `ssl_certs_dir`, se proporcionará uno por defecto para `ssl_certs_dir` que confiará en certificados de cualquiera de las autoridades certificadoras de confianza del sistema. Esto no afecta a FreeBSD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.0.4:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "7D70DDE7-AFD8-4E96-B124-D8C74A713D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.4.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "C3246101-B815-433E-8818-69DDCBF231DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.6.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "96DC25A5-20DA-4AAB-AFE8-E0F8860410CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.7.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "024EAA12-121C-4C5D-AEA0-1006A9EEC1C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.8.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "2D2DA386-58F8-42FF-AB23-87260D459CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.8.1:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "0179AF2F-6F74-4A78-978D-12A981792F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.9.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "D964B3B4-497E-45EF-802A-79ACEB7872C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.10.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "52A890BA-C4EA-4F72-9937-66F96C3B8480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:0.11.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "D2BA6D0F-E9D5-4769-994C-BDA113D4B1A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.0.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "E2429B70-9CDE-430C-9324-01EE6928299F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.0.1:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "7CBA3B25-D5A3-424C-B69A-6CCCF10F395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.1.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "2C73644F-80EF-40FD-BE15-3ACB9DC829CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.1.1:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "C414F85A-5D3A-46A1-994F-2BE4C1210640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.2.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "6F26D4FE-B16F-4619-AD16-043CF29EADBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.3.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "C606B26F-9844-4F3C-ACAB-EEB518A2D76B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.4.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "14EBC0AA-06E2-49C1-AE46-CB5F672B5A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.4.1:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "3010C01A-82B8-444B-801D-A8D515D6EC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.5.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "59EAC010-B84C-4ED6-AEC7-CD70D89AC859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.6.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "8EF8205F-4624-4CEF-8935-3C868FC9FFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.7.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "0FB55AE5-E67D-4697-A139-4425D5E953DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.7.1:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "BA3DD4BB-F2BE-4134-A7C3-C5F649BB5374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.8.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "693B5119-047D-4EFB-9FA3-D1CC96A8445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.8.1:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "8ED815B1-53DF-407C-8FA2-D1002B3040E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.10.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "097F64B5-6019-4AE0-8F7E-F986E30619DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:1.11.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "A40BABAF-51B6-4B45-9E5F-F2BC14BB4D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppetlabs-apache:2.0.0:*:*:*:*:puppet:*:*",
            "matchCriteriaId" : "34E0E71D-3CD8-473C-9B31-98049634B43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100859",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://puppet.com/security/cve/CVE-2017-2299",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://puppet.com/security/cve/CVE-2017-2299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0898",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-09-15T19:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap."
      }, {
        "lang" : "es",
        "value" : "Ruby, en versiones anteriores a la 2.4.2, 2.3.5 y 2.2.8, es vulnerable a una cadena de formato maliciosa qe contiene un especificador (*) con un valor grande negativo. Esta situación puede provocar un desbordamiento de búfer, provocando una corrupción de la memoria dinámica (heap) o una fuga de información de dicha memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F103B7-0E70-4490-9802-2CD6034E240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D36707-03B7-437C-B21D-A27D5C530117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCCD8F3-E667-42F2-9861-14EDFB16583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3CEF46-C95D-493B-A99B-7C90FDF27B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1629D696-BD68-4C4F-B6CE-885AD670A12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87B9AD8-CF70-4CA9-A655-838B1D7AD056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB471265-C399-49D4-8CA2-5FC1C85C6F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F7FF5E-EBD0-415E-BFA1-6AF1527F1174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822307DD-7F7D-44C2-9C4B-CB8704663410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F197C5A-2588-417F-A743-E72D1E8EF4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA01BF1-91AD-4968-9AC2-A194FCD6AB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36CCD91-2A20-4C2E-96D5-73704DFC10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485C401C-CC3B-4A74-82D6-F4539FFE48B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E99F5A-E693-43E9-8AB3-A3FCB21BCF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946D2AB0-D334-4D94-BDA2-733BFC6C9E1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100862",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://github.com/mruby/mruby/issues/3722",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/212241",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/mruby/mruby/issues/3722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/212241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9805",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-15T19:29:00.237",
      "lastModified" : "2025-10-22T00:16:12.827",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads."
      }, {
        "lang" : "es",
        "value" : "El Plugin REST en Apache Struts versiones 2.1.1 hasta 2.3.x anteriores a 2.3.34 y versiones 2.5.x anteriores a 2.5.13, usa una XStreamHandler con una instancia de XStream para deserialización sin ningún filtrado de tipos, lo que puede conllevar a una ejecución de código remota cuando se deserializan cargas XML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apache Struts Deserialization of Untrusted Data Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.2",
            "versionEndExcluding" : "2.3.34",
            "matchCriteriaId" : "13744BE3-2443-4640-BDB4-722C4D393B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.13",
            "matchCriteriaId" : "6B45E858-E783-4D6E-AFD3-97E9963EB05B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:digital_media_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B1E953-33EF-498D-AB75-4A0A7733BC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_solution:10.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4C9089-0F27-4C66-8E12-2BCAC148B7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_solution:11.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCC3E9D-4D39-4530-A5FC-7E9A4E395D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_solution:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F972A2A1-3002-4086-8FA2-F231D4ED0B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_solution:11.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52C5D91-33D1-4C90-BEC9-90D955AA5883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:media_experience_engine:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C3A3B2-B346-47F4-B987-0098AB95F939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:media_experience_engine:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CCEC7F-058D-4202-88B3-F06372DFFA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_performance_analysis:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D400A4-9918-494E-89B7-EAA57B2830D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:video_distribution_suite_for_internet_streaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912F9C5E-AA5F-4746-AC49-D33C2495C73B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100609",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039263",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1488482",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-052",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lgtm.com/blog/apache_struts_CVE-2017-9805",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170907-0001/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-052.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42627/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/112992",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1488482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lgtm.com/blog/apache_struts_CVE-2017-9805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170907-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42627/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/112992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-15T20:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de metacaracteres shell en /usr/www/include/ajax/GetTest.php en TerraMaster TOS en versiones anteriores a la 3.0.34 permite la ejecución remota de código como root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:terra-master:terramaster_operating_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.33",
            "matchCriteriaId" : "7E562AEC-DBC7-479B-8349-C97B3699B66A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/hybriz/63bbe2d963e531357aca353c74dd1ad5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/hybriz/63bbe2d963e531357aca353c74dd1ad5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904."
      }, {
        "lang" : "es",
        "value" : "No se neutralizan correctamente los elementos especiales utilizados en un comando de sistema operativo en la función de reproducción de podcasts de Podbeuter en Newsbeuter de la versión 0.3 a la 2.9. Esto permite a atacantes remotos ejecutar código proporcionado por el usuario manipulando un elemento RSS con un adjunto audiovisual (es decir, un archivo podcast) que incluye metacaracteres shell en su nombre de archivo. Esto está relacionado con pb_controller.cpp y queueloader.cpp. Esta vulnerabilidad es distinta a CVE-2017-12904."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF4978C-4EBF-41ED-962F-0890E5BDC071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDA3939-74B1-4A44-955D-1BA1D2A23C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B242B9F1-3B5B-41EE-8CFF-BCC3008B785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733B891C-63E6-45A2-AE6D-32A4C860A07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684B7199-9344-4DBA-90AD-DEDEC056F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CD698E-70A1-43A0-B828-3DBD519DDDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379E21B5-D427-45EC-B674-9BCC8A47CA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0B1B93-8E8C-4A77-98F8-CE5BFED550DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C907407-E178-43BF-A433-9BC73EB7FD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3A20C1-1FB7-43C8-A78E-FBEBB4E888AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F963DE-447B-4D6C-A508-C4449C67F1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BAF663-30D1-4584-A0B0-CF02D2646877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50AD4B86-FED2-4469-BBD7-B698A7C1B4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E8E19D-024A-4F73-B66F-87741325BC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34C699-1E62-4A54-B929-0C187299ABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E5E120-42BD-4846-9C6B-D51804C902A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC168D9-75AB-43DD-A1F6-103F14AD9995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA4C1C6-33AD-420C-ABA3-F7254A51BDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC3FE66-8689-4F61-9035-00DAD02A1527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FADF671-B5B0-4634-AA18-15551363293B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8DC0AC-DA20-4A93-9561-C2D906D0D1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6A06A3-2A06-4DDC-851A-6B27B7BB7F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CDB422-35D4-42E5-A897-3C12C6E16E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbeuter:newsbeuter:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF398D-94EA-4628-99A2-35B698579B96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/16/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/commit/c8fea2f60c18ed30bdd1bb6f798e994e51a58260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/issues/598",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4585-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/commit/c8fea2f60c18ed30bdd1bb6f798e994e51a58260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akrennmair/newsbeuter/issues/598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4585-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T18:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header."
      }, {
        "lang" : "es",
        "value" : "Existe un error de lectura fuera de límites en parse_file_info de archive_read_support_format_iso9660.c en libarchive 3.3.2 cuando se extraen archivos .iso iso9660 especialmente manipulados. Esto está relacionado con archive_read_format_iso9660_read_header."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libarchive:libarchive:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FF21B2-41AD-446B-9EE5-184F573973E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/875966",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/issues/949",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3736-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/875966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/issues/949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3736-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T18:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header."
      }, {
        "lang" : "es",
        "value" : "Existe un error por un paso en read_header de archive_read_support_format_rar.c en libarchive 3.3.2 para los nombres UTF-16 en archivos RAR, lo que provoca una lectura fuera de límites en archive_read_format_rar_read_header."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libarchive:libarchive:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FF21B2-41AD-446B-9EE5-184F573973E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/875974",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/commit/5562545b5562f6d12a4ef991fae158bf4ccf92b6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3859-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/875974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/commit/5562545b5562f6d12a4ef991fae158bf4ccf92b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3859-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T18:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16."
      }, {
        "lang" : "es",
        "value" : "libarchive 3.3.2 sufre una lectura fuera de límites en lha_read_data_none() en archive_read_support_format_lha.c cuando se extraen archivos lha especialmente manipulados. Esto está relacionado con lha_crc16."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libarchive:libarchive:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FF21B2-41AD-446B-9EE5-184F573973E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/875960",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/issues/948",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3736-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/875960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libarchive/libarchive/issues/948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3736-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T19:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi, and password.cgi."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en dispositivos UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 permite que los atacantes accedan directamente a la configuración de administración y obtener credenciales en texto claro desde el código fuente HTML, tal y como se puede ver en info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi y password.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utstar:wa3002g4_firmware:wa3002g4-0021.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C6E4C3-D7AD-405C-ABE8-81D07CEA8C84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utstar:wa3002g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15BB475-F28B-4F9F-A1BA-8D405E35AAE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42739/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42739/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T19:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de omisión de autenticación en dispositivos iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 que podría permitir a atacantes acceder directamente a la configuración de administración del router creando URL manipuladas con una extensión .cgi, tal y como se puede ver en /info.cgi y /password.cgi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iball:ib-wra150n_firmware:fw_ib-lr7011a_1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024EB91B-C9A5-49E2-AFEF-661C65566C75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iball:ib-wra150n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9AEFCD-95EC-4A36-B1F3-F5D91761F477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42740/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42740/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T19:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference."
      }, {
        "lang" : "es",
        "value" : "ReadPNMImage en coders/pnm.c en GraphicsMagick 1.3.26 no garantiza el número correcto de colores para el formato XV 332. provocando una desreferencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=fb09ca6dd22c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100877",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/465/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/466/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=fb09ca6dd22c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/465/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/466/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T19:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input."
      }, {
        "lang" : "es",
        "value" : "DrawGetStrokeDashArray en wand/drawing-wand.c en ImageMagick 7.0.7-1 no gestiona correctamente algunos arrays NULL, lo que permite a atacantes provocar denegaciones de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación en AcquireQuantumMemory en MagickCore/memory.c) al proporcionar un archivo de imagen manipulado como entrada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EE134-ACEE-4E13-8AD2-C95F0C15246E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/716",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T21:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). Several areas have been identified in the Documents and Emails module that could allow an authenticated user to perform SQL injection, as demonstrated by a backslash character at the end of a bean_id to modules/Emails/DetailView.php. An attacker could exploit these vulnerabilities by sending a crafted SQL request to the affected areas. An exploit could allow the attacker to modify the SQL database. Proper SQL escaping has been added to prevent such exploits."
      }, {
        "lang" : "es",
        "value" : "Existe un problema en SugarCRM en versiones anteriores a la 7.7.2.3, en versiones 7.8.x anteriores a la 7.8.2.2 y en versiones 7.9.x anteriores a la 7.9.2.0 (y Sugar Community Edition 6.5.26). Se identificaron múltiples áreas en el módulo Documents and Emails que podrían permitir a un usuario autenticado ejecutar inyecciones SQL, tal y como se demuestra con el carácter barra invertida al final de un bean_id para modules/Emails/DetailView.php. Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición SQL manipulada a las áreas afectadas. Un exploit podría permitir que el atacante modifique la base de datos SQL. Un escapado SQL correcto prevendría dicho exploit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.2.2",
            "matchCriteriaId" : "1CF7DEB0-D9C7-4422-8632-F70D7EE23DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:6.5.26:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D3E99EB2-05BF-4575-9170-D9014B2D6B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5EB33E-9B9E-4D05-928E-55D53F94A698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62260AB3-77B6-4E7D-9ECF-AB0871F01E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B59B76F-5141-47BE-975D-356742C13659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F20AB20-1C40-4192-8B1D-0C227681F2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2021DD4C-B55B-4C52-B46B-C71AE71E1B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A722A2-2DD7-4513-85B2-5DE2886D1AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34FE48A-1DA0-4F87-9C62-507123D070AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7C251-86A8-4B1C-9296-C6008CAF65DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T21:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). A remote file inclusion has been identified in the Connectors module allowing authenticated users to include remotely accessible system files via a module=CallRest&url= query string. Proper input validation has been added to mitigate this issue."
      }, {
        "lang" : "es",
        "value" : "Existe un problema en SugarCRM en versiones anteriores a la 7.7.2.3, en versiones 7.8.x anteriores a la 7.8.2.2 y en versiones 7.9.x anteriores a la 7.9.2.0 (y Sugar Community Edition 6.5.26). Existe una vulnerabilidad de inclusión remota de archivos en el módulo Connectors que permite a usuarios autenticados incluir archivos de sistema que se pueden acceder remotamente mediante una cadena de consulta module=CallRest&url=. Una validación de valores de entrada correcta mitigaría este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.2.2",
            "matchCriteriaId" : "1CF7DEB0-D9C7-4422-8632-F70D7EE23DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:6.5.26:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D3E99EB2-05BF-4575-9170-D9014B2D6B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5EB33E-9B9E-4D05-928E-55D53F94A698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62260AB3-77B6-4E7D-9ECF-AB0871F01E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B59B76F-5141-47BE-975D-356742C13659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F20AB20-1C40-4192-8B1D-0C227681F2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2021DD4C-B55B-4C52-B46B-C71AE71E1B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A722A2-2DD7-4513-85B2-5DE2886D1AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34FE48A-1DA0-4F87-9C62-507123D070AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7C251-86A8-4B1C-9296-C6008CAF65DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T21:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). The WebToLeadCapture functionality is found vulnerable to unauthenticated cross-site scripting (XSS) attacks. This attack vector is mitigated by proper validating the redirect URL values being passed along."
      }, {
        "lang" : "es",
        "value" : "Existe un problema en SugarCRM en versiones anteriores a la 7.7.2.3, en versiones 7.8.x anteriores a la 7.8.2.2 y en versiones 7.9.x anteriores a la 7.9.2.0 (y Sugar Community Edition 6.5.26). La funcionalidad WebToLeadCapture es vulnerable a ataques Cross-Site Scripting (XSS) no autenticados. Este vector de ataque se mitiga mediante la correcta validación de los valores de redirección URL que se van pasando."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.2.2",
            "matchCriteriaId" : "1CF7DEB0-D9C7-4422-8632-F70D7EE23DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:6.5.26:*:*:*:community:*:*:*",
            "matchCriteriaId" : "D3E99EB2-05BF-4575-9170-D9014B2D6B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5EB33E-9B9E-4D05-928E-55D53F94A698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62260AB3-77B6-4E7D-9ECF-AB0871F01E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B59B76F-5141-47BE-975D-356742C13659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F20AB20-1C40-4192-8B1D-0C227681F2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2021DD4C-B55B-4C52-B46B-C71AE71E1B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A722A2-2DD7-4513-85B2-5DE2886D1AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34FE48A-1DA0-4F87-9C62-507123D070AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:7.9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7C251-86A8-4B1C-9296-C6008CAF65DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T21:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SAP E-Recruiting (aka ERECRUIT) 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and confirm email addresses that they do not have access to (candidate_hrobject is predictable and corr_act_guid is improperly validated). Furthermore, since an email address can be registered only once, an attacker could prevent other legitimate users from registering. This is SAP Security Note 2507798."
      }, {
        "lang" : "es",
        "value" : "Existe un problema en SAP E-Recruiting (también conocido como ERECRUIT) desde la versión 605 hasta la 617. Cuando un candidato externo se registra en la aplicación E-Recruiting, recibe un enlace por correo electrónico para confirmar el acceso para la dirección de correo proporcionada. Sin embargo, esta medida se puede omitir y los atacantes pueden registrar y confirmar direcciones de correo a las que no tengan acceso (candidate_hrobject es predecible y corr_act_guid se valida incorrectamente). Además, dado que la dirección de correo solo se puede registrar una vez, un atacante podría impedir a otros usuarios legítimos que se registren. Esta es la nota 2507798 de SAP Security."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:e-recruiting:605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77132B19-7629-4E76-B195-C741EB140BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:e-recruiting:606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC24258-F0FD-4EFF-B371-842313F2D329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:e-recruiting:616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F0DC-DE41-43EC-84E5-4D4CEF59BD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:e-recruiting:617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A507A8-585D-47C3-9C83-BC152B94E198"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2507798",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/email-verification-bypass-in-sap-e-recruiting/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2507798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/email-verification-bypass-in-sap-e-recruiting/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T21:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981."
      }, {
        "lang" : "es",
        "value" : "NexusPHP 1.5.beta5.20120707 tiene una inyección SQL en forummanage.php mediante el parámetro sort en una acción editforum. Esta vulnerabilidad es distinta de CVE-2017-12981."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3920B7-D378-45FA-AD21-A9492C2CCBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rezhish/NexusPHP/blob/master/nexusphp.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rezhish/NexusPHP/blob/master/nexusphp.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T21:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the f_filename parameter in a fingerprintdo action to admin/app/physical/physical.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en MetInfo 5.3.17 permite que atacantes remotos lean información de cualquier archivo .ini mediante el parámetro f_filename en una acción fingerprintdo para admin/app/physical/physical.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AFA18D-7A78-45EE-B0CF-BAEE3639D587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phantom0301/vulns/blob/master/Metinfo2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phantom0301/vulns/blob/master/Metinfo2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T22:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en dispositivos Tenda W15E en versiones anteriores a la 15.11.0.14 permite que atacantes remotos lean archivos no cifrados mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v15.11.0.13_cn",
            "matchCriteriaId" : "EFA14873-A7DC-4AF7-8873-7B698235FFE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tendacn.com/en/2018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tendacn.com/en/2018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T22:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap) en dispositivos Tenda W15E permite a atacantes remotos provocar una denegación de servicio (corte temporal de transmisión HTTP y desconexión forzada) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v15.11.0.13_cn",
            "matchCriteriaId" : "EFA14873-A7DC-4AF7-8873-7B698235FFE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tendacn.com/en/2018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tendacn.com/en/2018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T23:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una desreferencia de puntero NULL en la función XRef::parseEntry() en XRef.cc mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102687",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/105050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T23:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una excepción de punto flotante en la función isImageInterpolationRequired() en Splash.cc mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102688",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T23:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop)."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una corrupción de memoria en una llamada a Object::streamGetChar en Object.h después de repetir series de llamadas Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText y Gfx::doShowText (también conocida como bucle infinito en Gfx.cc)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-17T23:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, ocurre una excepción de punto flotante en Splash::scaleImageYuXd() en Splash.cc, lo que puede permitir que se produzca un ataque cuando se manejan archivos PDF maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102719",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T00:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función TIFFSetProfiles en coders/tiff.c en ImageMagick 7.0.6 tiene unas expectativas incorrectas de si los valores de retorno de LibTIFF TIFFGetField han pasado por una validación de datos, lo que permite a atacantes remotos provocar una denegación de servicio (uso de memoria previamente liberada después de una llamada no válida a TIFFSetField y cierre inesperado de aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D333EB-283A-4E9C-A9E8-167F7AF1B93C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2730",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100875",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32560",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T00:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function."
      }, {
        "lang" : "es",
        "value" : "La función pe_print_idata en peXXigen.c en la librería Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, gestiona incorrectamente entradas de vectores HintName, lo que permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de aplicación) mediante un archivo PE manipulado. Esto está relacionado con la función bfd_getl16."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22113",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4d465c689a8fb27212ef358d0aee89d60dee69a6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=dcaaca89e8618eba35193c27afcb1cfa54f74582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4d465c689a8fb27212ef358d0aee89d60dee69a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=dcaaca89e8618eba35193c27afcb1cfa54f74582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T01:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action=manage&do=create operation, as demonstrated by inserting XSS sequences."
      }, {
        "lang" : "es",
        "value" : "WP_Admin en las versiones anteriores a la 0.4.7 del plugin Crony Cronjob Manager para WordPress tiene una vulnerabilidad de Cross-Site Request Forgery (CSRF) mediante el parámetro name en una operación action=managedo=create operation, tal y como se demuestra al insertar secuencias XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crony_cronjob_manager_project:crony_cronjob_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.4.6",
            "matchCriteriaId" : "802219F8-64DD-439A-83A4-227D4C099A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybersecurityworks.com/zerodays/cve-2017-14530-crony.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cybersecurityworks/Disclosed/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/crony/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cybersecurityworks.com/zerodays/cve-2017-14530-crony.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cybersecurityworks/Disclosed/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/crony/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T01:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 tiene una vulnerabilidad de agotamiento de memoria en ReadSUNImage en coders/sun.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/718",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T01:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 tiene una vulnerabilidad de desreferencia de puntero NULL en TIFFIgnoreTags en coders/tiff.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100883",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/719",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T01:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.6-6 tiene una vulnerabilidad de fuga de memoria en ReadMATImage en coders/mat.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100885",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/648",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T01:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse package. This has security implications in cases where untrusted users can trigger CallOPKG calls, and these users can enter an arbitrary URL in an input field, even though that input field was only intended for a package name. This threat model may be relevant in the latest versions of third-party products that bundle OpenWebif, i.e., set-top box products. The issue of Trojan horse packages does NOT have security implications in cases where the attacker has full OpenWebif access."
      }, {
        "lang" : "es",
        "value" : "OpenWebif 1.2.5 permite la ejecución remota de código mediante una URL a la función CallOPKG en la clase IpkgController en plugin/controllers/ipkg.py, cuando la URL referencia una página web controlada por el atacante con un paquete que contiene un virus troyano. Esto tiene implicaciones de seguridad en casos en los que usuarios no fiables pueden desencadenar llamadas CallOPKG e introducir una URL arbitraria en un campo input, incluso si el campo estaba pensado para un nombre de paquete. Este modelo de amenaza puede ser relevante en las últimas versiones de productos externos que incluyan OpenWebif; es decir, productos Set-Top Box. El problema de los paquetes con virus troyanos NO tiene ninguna implicación de seguridad en casos en los que el atacante tiene acceso completo a OpenWebif."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebif_project:openwebif:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD29E375-8B66-4E01-9D90-89048D56984D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/621",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12156",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-18T04:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moodle 3.x has XSS in the contact form on the \"non-respondents\" page in non-anonymous feedback."
      }, {
        "lang" : "es",
        "value" : "Moodle 3.x tiene una vulnerabilidad de Cross-Site Scripting (XSS) en el formulario de contacto en la página \"non-respondents\" en feedback público."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3989501E-B42A-4CCB-859C-862BE31B80B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF2D22F-577F-4F06-80E0-B107F474CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE87CB-0720-41F8-9B14-9FE670742A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC8BEC8-5A7D-4331-BE6D-68A82049C547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06C6677-5F8C-4294-B0A3-DA04BEB2BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3615451E-DD6D-4DAC-B053-0DD7414EAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78B75B-49B5-472B-A999-62447327BDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A40773-16F5-452F-9820-A22EDAE5C3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03C97FB-373F-424B-8BEE-CD64C0440962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51230E9E-7825-45B9-859C-19AD9AFD5317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAD7AF3-F18E-421C-818B-A015EC2432B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDAC94C-36DA-4931-A05B-7D90EACD2EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E718A046-BFAB-42C3-80A3-FBFA23A19530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9586F5C5-45A6-4F7F-A381-075B210E2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C32BF18-8D36-47D0-AEEE-36A0962635E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B74CB3-D3AE-4F70-9975-A25FFA62630F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100867",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=358585",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=358585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12157",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-18T04:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access."
      }, {
        "lang" : "es",
        "value" : "En Moodle 3.x, varios informes de cursos permiten a los profesores visualizar detalles sobre usuarios en los grupos a los que no pueden acceder."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3989501E-B42A-4CCB-859C-862BE31B80B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF2D22F-577F-4F06-80E0-B107F474CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE87CB-0720-41F8-9B14-9FE670742A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A9221-1536-4989-A2B0-CD5C348B035A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC8BEC8-5A7D-4331-BE6D-68A82049C547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06C6677-5F8C-4294-B0A3-DA04BEB2BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3615451E-DD6D-4DAC-B053-0DD7414EAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0033EC68-98DB-42E6-A256-EFA05F6EC72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F5E2DD-495F-4C4E-92B9-5481D432BC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16158B28-FE97-4BF3-BCDF-D754B5158825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B58722-61EF-4283-A434-A022583C528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EC92C0-87A6-4D86-B940-C907EC4153ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798441F2-2FE1-4335-A87C-08067C411718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2479F7AE-8DC6-45CE-99E5-5063FE854635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13697DD6-EE2E-45B8-9FF5-B1D903F99F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78B75B-49B5-472B-A999-62447327BDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A40773-16F5-452F-9820-A22EDAE5C3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03C97FB-373F-424B-8BEE-CD64C0440962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AE2C05-6EC3-42FA-82BC-48177EC2BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3A427510-6E46-4D0D-9BA6-C7D496D5FC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F6B28F-694A-4F7B-AB46-3F733C2423EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C84D53-E3E6-4FEA-A5EE-EFF793A24163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A7BB8-AE92-454F-976B-4C851A3AB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "294BD385-E050-4124-80BE-28A48D893DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "842BB818-567E-4D57-9D21-5992244B4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FB40E7-35C2-4554-91D6-EA06DCA2E31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBC235-875A-4EA2-A30E-73B16291F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAD7AF3-F18E-421C-818B-A015EC2432B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDAC94C-36DA-4931-A05B-7D90EACD2EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9586F5C5-45A6-4F7F-A381-075B210E2583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "85F6F9E7-F93D-4975-B345-A0F723934B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59FF409A-C3A4-496B-A919-55A3B3B7B3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FB44A6-895A-4149-9D67-A94FF90BD7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6ACA5A-D8BA-4CD9-9B24-15BFE387B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C32BF18-8D36-47D0-AEEE-36A0962635E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=358586",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=358586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T04:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en NexusPHP 1.5.beta5.20120707 mediante PATH_INFO a location.php. Esto está relacionado con PHP_SELF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3920B7-D378-45FA-AD21-A9492C2CCBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/yangchonghui2017/cve/master/2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/yangchonghui2017/cve/master/2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9798",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-18T15:29:00.307",
      "lastModified" : "2025-11-04T16:15:41.470",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c."
      }, {
        "lang" : "es",
        "value" : "Apache httpd permite que atacantes remotos lean datos secretos de la memoria de proceso si la directiva Limit se puede establecer en un archivo .htaccess del usuario o si existen ciertos errores de configuración en httpd.conf. Esto también se conoce como Optionsbleed. Esta vulnerabilidad afecta a Apache HTTP Server hasta la versión 2.2.34 y a las versiones 2.4.x hasta la 2.4.27. El atacante envía una petición HTTP OPTIONS sin autenticar cuando intenta leer datos secretos. Este es un problema de uso de memoria previamente liberada y, por lo tanto, los datos secretos no siempre se envían y los datos específicos dependen de muchos factores, entre los que se encuentra la configuración. La explotación con .htaccess puede bloquearse con un parche en la función ap_limit_section en server/core.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.34",
            "matchCriteriaId" : "FE75C79F-7F36-41C1-BF03-97416A06D81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC40E89-2D57-4988-913E-024BFB56B367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCD3C8C-9BF8-4F30-981A-593EEAEB9EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046487A3-752B-4D0F-8984-96486B828EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2E052-51CD-4B57-A8B8-FAE51988D654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA27058-BACF-4F94-8E3C-7D38EC302EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEAB0DF-04A9-4F99-8666-0BADC5D642B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D924D1-8A36-4C43-9E56-52814F9A6350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CDFECC-E26D-47E0-976F-6629040B3764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3ECBCB1-0675-41F5-857B-438F36925F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6CBFBF-74F6-42AF-BC79-AA53EA75F00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8717A96B-9DB5-48D6-A2CF-A5E2B26AF3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F45B27-504B-4202-87B8-BD3B094003F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FB2B98-DFD2-420A-8A7F-9B288651242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B803D25B-0A19-4569-BA05-09D58F33917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8510442C-212F-4013-85FA-E0AB59F6F2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5673AB-53BB-40B2-83A7-8B82B2D0EBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB3ED63-45CA-44AB-973C-9AD2569AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF30AD98-9CBA-456E-A827-79FCEDEB30A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/18/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3980",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100872",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105598",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039387",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2882",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2972",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3018",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3239",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3240",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/httpd/commit/4cc27823899e070268b906ca677ee838d07cf67a",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hannob/optionsbleed",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-9798",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0003/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42745/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Sep/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/httpd/commit/4cc27823899e070268b906ca677ee838d07cf67a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hannob/optionsbleed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-9798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42745/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0380",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-09-18T16:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit."
      }, {
        "lang" : "es",
        "value" : "La función rend_service_intro_established en or/rendservice.c en versiones de Tor anteriores a la 0.2.8.15, versiones 0.2.9.x anteriores a la 0.2.9.12, versiones 0.3.0.x anteriores a la 0.3.0.11, versiones 0.3.1.x anteriores a la 0.3.1.7 y versiones 0.3.2.x anteriores a la 0.3.2.1-alpha, cuando se deshabilita SafeLogging, permite a los atacantes obtener información sensible mediante el acceso al archivo de registro de un servicio oculto. Esto se debe a que los datos de la pila sin inicializar se incluyen en un mensaje de error sobre el punto de entrada a la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.8.14",
            "matchCriteriaId" : "1656D224-8858-4C8D-9E4A-439AEFB5B83D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A377C0D2-0081-4C2D-90D6-C6A4A689AF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E7EAA3-1FF5-4234-AD50-C83A3C8655C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F58A98FD-7A39-4718-9264-76AFB431BE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF92477-A17F-43AF-A351-E12B28AFFB7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B925E-C788-4F47-A757-9E7C0962C744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "24F88DB6-38FF-4667-8664-E719D8AB9114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB692AE-737A-4EE1-9F3B-8A412343B207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3484577-F652-4FE7-96B3-200D4224CE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7993C7DE-32E6-412A-87B2-EC4EBF20B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAE75A5-EB2D-49CE-B6A8-24A86361DD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF18C5D-1EFB-4755-B5BF-C500E84F19EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.2.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AEDB54E-57CC-4BA5-933C-927649E16045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55CC07A-4639-4B72-9F65-D27043CFFF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C7722805-17F9-4215-81B9-E30EE016778B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "028D39E2-0968-4B98-A9E4-60B51440175F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB26D60-528A-4E06-84A9-8B86143307DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.4:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "56134ADE-05F9-4087-BAD3-09480DBA2CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.5:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6431AD-B020-4277-8633-27ED05F4D770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B815A38-5CE8-4BF3-AE6F-C11CACDBFA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6364CA-DBDA-4626-90A9-FF06A0E08619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA71B4E-8EF4-41D4-AE30-F643D2916209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E09522C-61F3-495F-A82F-47251468736E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA8DAD-EF04-4252-8FCA-5E21FB506D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "725179F8-E402-4238-9A17-AD237145C0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B36195-8CE2-40CC-9701-5ECA042A395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.1.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "47279FE4-FD6E-4FE6-B2BD-7D3EA20A2F11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "801F7D20-5525-4733-A0EB-E54D68C6B2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "65B2EE3E-A8AB-46C0-8A43-E89ECC6F9E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "05E91522-EA34-4894-898F-BA5E2051975B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49250EAD-6CC3-4CB3-9407-C520635B3C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3993",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039519",
        "source" : "security@debian.org"
      }, {
        "url" : "https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/23490",
        "source" : "security@debian.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/23490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008823.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008823\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14538",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to \"Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x000000000011d767.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 - 32bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .svg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x000000000011d767\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14539",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 - 32bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .svg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14540",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to \"Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.40 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .svg manipulado. Esta vulnerabilidad está relacionada con Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A195A41-AABE-4513-9734-3C650136C163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14541",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a \"Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x0000000000010262.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .epub manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x0000000000010262\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14542",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to \"Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .epub manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14543",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUEPubFile!DllUnregisterServer+0x000000000003fff1.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .epub manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUEPubFile!DllUnregisterServer+0x000000000003fff1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14544",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to \"Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .epub manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14545",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to an \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .epub manipulado. Esta vulnerabilidad está relacionada con \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14546",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mobi file, related to a \"Read Access Violation starting at STDUMOBIFile!DllUnregisterServer+0x000000000002efc0.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .mobi manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at STDUMOBIFile!DllUnregisterServer+0x000000000002efc0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14547",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14549",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a \"Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14550",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to \"Data from Faulting Address controls Branch Selection starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d9f2.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d9f2\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d9a9.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d9a9\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14552",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x00000000000085f5.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x00000000000085f5\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14553",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a \"Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d908.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d908\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14554",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000ec6e.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000ec6e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14555",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000da27.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000da27\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14556",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14557",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x0000000000018cc2.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x0000000000018cc2\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14558",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005af2.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005af2\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14559",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:00.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to \"Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd2.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd2\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14560",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000048c024d called from STDUXPSFile!DllUnregisterServer+0x0000000000025638.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000048c024d called from STDUXPSFile!DllUnregisterServer+0x0000000000025638\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to an \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14562",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005311.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005311\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14563",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to \"Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000028657.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection comenzando en STDUXPSFile!DllUnregisterServer+0x0000000000028657\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14564",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a \"Possible Stack Corruption starting at Unknown Symbol @ 0x00000000038f2fbf called from image00000000_00400000+0x0000000000240065.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at Unknown Symbol @ 0x00000000038f2fbf called from image00000000_00400000+0x0000000000240065\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14565",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"User Mode Write AV starting at Unknown Symbol @ 0x00000000039d76c4 called from Unknown Symbol @ 0x0000000000049d2c.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at Unknown Symbol @ 0x00000000039d76c4 called from Unknown Symbol @ 0x0000000000049d2c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14566",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnregisterServer+0x000000000002e77b.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnregisterServer+0x000000000002e77b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14567",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an \"Illegal Instruction Violation starting at Unknown Symbol @ 0x000000000297024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025630.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Illegal Instruction Violation starting at Unknown Symbol @ 0x000000000297024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025630\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a \"Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14569",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14570",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000049c024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025706.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000049c024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025706\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14571",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14572",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000030c024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566a.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000030c024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14573",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV comenzando en Unknown Symbol @ 0x0000000004940490\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14574",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an \"Illegal Instruction Violation starting at Unknown Symbol @ 0x0000000002d8024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566c.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Illegal Instruction Violation starting at Unknown Symbol @ 0x0000000002d8024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14575",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a \"Possible Stack Corruption starting at Unknown Symbol @ 0x00000000049f0281.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at Unknown Symbol @ 0x00000000049f0281\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14576",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"Read Access Violation on Control Flow starting at Unknown Symbol @ 0x0000000003aa7cef called from Unknown Symbol @ 0x0000000004aa024d.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Control Flow starting at Unknown Symbol @ 0x0000000003aa7cef called from Unknown Symbol @ 0x0000000004aa024d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14577",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 - 32bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .ani manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at ntdll_77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14578",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"Read Access Violation on Control Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000005b70.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Control Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000005b70\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14579",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-18T17:29:01.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at jbig2dec+0x000000000000870f.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.41 permite que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .jb2 manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at jbig2dec+0x000000000000870f\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E016033-D6D3-4D2B-892C-0A7307FB0C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14580",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6147",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-09-18T17:29:01.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when \"SSL Forward Proxy\" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM y WebSafe 12.1.2-HF1 y 13.0.0, una serie de peticiones no reveladas puede provocar el reinicio del TMM y la interrupción del servicio, cuando la configuración \"SSL Forward Proxy\" está habilitada en los perfiles SSL del servidor y del cliente asignados a un BIG-IP Virtual Server."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C03B68-914F-4DB0-A832-B626B8746524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F72B2-84F2-4FA2-9B53-E98344235EB6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100981",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K43945001",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K43945001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9803",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-18T21:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider). Firstly, access to the security configuration can be leaked to users other than the solr super user. Secondly, malicious users can exploit this leaked configuration for privilege escalation to further expose/modify private data and/or disrupt operations in the Solr cluster. The vulnerability is fixed from Apache Solr 6.6.1 onwards."
      }, {
        "lang" : "es",
        "value" : "El plugin Kerberos de Apache Solr puede configurarse para emplear tokens de delegación, lo que permite que una aplicación reutilice la autenticación de un usuario final o de otra aplicación. Hay dos problemas con esta funcionalidad (al emplear el tipo SecurityAwareZkACLProvider del proveedor de listas de control de acceso, como SaslZkACLProvider). En primer lugar, el acceso a la configuración de seguridad puede filtrarse a otros usuarios distintos al superusuario de solr. En segundo lugar, los usuarios maliciosos pueden explotar esta configuración filtrada para escalar privilegios para exponer/modificar aun más los datos privados y/o las operaciones de interrupción en el clúster de Solr. Esta vulnerabilidad se ha solucionado desde la versión 6.6.1 de Solr."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036F935D-B469-47C6-AF5D-3DFC73070753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A1A17A-32EA-40A2-9A1E-6019B493B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76557E9C-1F16-44D9-ACA1-F4DAEC966F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE068A02-D47A-4C6C-BFD3-040385599CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB3F9EB-63DE-4780-A357-FE89D1DB70CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099B5DFD-CCD9-4EE7-B49E-77EC286D5F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745CE558-1411-4356-9B79-2805FB4C80D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B41559-4695-467E-B7EA-B9D86127CFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6BAA828-C451-4C42-A37B-DE9DB2AF9F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw%40mail.gmail.com%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100870",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T07:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en AdminPanel en AfterLogic WebMail 7.7 y Aurora 7.7.5 mediante el campo txtDomainName a adminpanel/modules/pro/inc/ajax.php al añadir un dominio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afterlogic:aurora:7.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8389D0ED-7ECF-4FC1-B70F-0C713F899792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afterlogic:webmail:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF2048-A391-4A7E-916F-3474CAA52D82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T07:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure."
      }, {
        "lang" : "es",
        "value" : "Pragyan CMS v3.0 es vulnerable a una inyección SQL basada en errores en cms/admin.lib.php mediante $_GET['del_black']. Esto deriva en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pragyan_cms_project:pragyan_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9496D3A2-C8A9-4A1A-A67E-E44C1839E75F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/delta/pragyan/issues/228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/delta/pragyan/issues/228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T07:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure."
      }, {
        "lang" : "es",
        "value" : "Pragyan CMS v3.0 es vulnerable a una inyección SQL basada en valores booleanos en cms/admin.lib.php mediante $_GET['forwhat']. Esto deriva en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pragyan_cms_project:pragyan_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9496D3A2-C8A9-4A1A-A67E-E44C1839E75F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/delta/pragyan/issues/228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/delta/pragyan/issues/228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12615",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-19T13:29:00.190",
      "lastModified" : "2025-10-22T00:16:04.227",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server."
      }, {
        "lang" : "es",
        "value" : "Cuando se ejecuta Apache Tomcat en sus versiones 7.0.0 a 7.0.79 en Windows con HTTP PUT habilitado (por ejemplo, estableciendo el parámetro de inicialización de solo lectura del Default en \"false\") fue posible subir un archivo JSP al servidor mediante una petición especialmente manipulada. Este archivo JSP podría ser solicitado y cualquier código que contenga podría ser ejecutado por el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apache Tomcat on Windows Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.79",
            "matchCriteriaId" : "0A3F5425-BA5F-411C-BA1D-FFC3D2EBF93D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A36AEE-5842-4876-9C2F-E703C981C992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB70A2F8-EAB3-4898-9353-F679FF721C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC848-C2D0-4878-8619-F5815173555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681173DF-537E-4A64-8FC7-75F439CCAD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2F2F98-DB90-43F6-8F28-3656207B6188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server_text-only_advisories:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E5BFFC-F3E0-43E6-BA40-81B2A8B7CC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DD0CA2-3786-4E97-A60C-5043FDDBCB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E4609A-C986-4041-A528-1B4B37E1F6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BDD126-A468-47D9-A468-6E229D75939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAA8C42-870A-42B4-AE9F-7C67F4122ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2148300C-ECBD-4ED5-A164-79629859DD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B908AEF5-67CE-42D4-961D-C0E7ADB78ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8EB695-5EA3-46D2-941E-D7F01AB99A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DB003-76B8-4D7B-A6ED-5064C3AE1C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC68D88-3CD3-4A3D-A01B-E9DBACD9B9CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF87FD-9358-42A5-9917-25DF0180A5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B2E32-B838-4E51-BAA2-764089D2A684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4319B943-7B19-468D-A160-5895F7F997A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C1ABF5-4070-4AA7-BAB8-4F63E1BD91FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8036E2AE-4E44-4FA5-AFFB-A3724BFDD654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A584AAA-A14F-4C64-8FED-675DC36F69A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A24D0C-604D-4421-AFA6-5D541DA2E94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2E3637-B6A6-4DA9-8B0A-E91F22130A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81F859C-DA89-4D1E-91D3-A000AD646203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418488A5-2912-406C-9337-B8E85D0C2B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE1DC7-72C5-483C-8921-0B462C8284D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70DB420-5485-4820-9F1C-3F78A6219984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.6_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9942F96-A8C1-4281-82C5-BB9D9C50A6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.7_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5325286E-F11D-4713-B666-5D7A4F65B326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6A25CB-907A-4D05-8460-A2488938A8BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100901",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039392",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/breaktoprotect/CVE-2017-12615",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171018-0001/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42953/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_54_Tomcat",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/breaktoprotect/CVE-2017-12615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171018-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42953/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_54_Tomcat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12615",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12616",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-19T13:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request."
      }, {
        "lang" : "es",
        "value" : "Cuando se empleó un VirtualDirContext con Apache Tomcat en sus versiones 7.0.0 a 7.0.80 fue posible omitir las restricciones de seguridad o ver el código fuente de los archivos JSP para los recursos servidos por VirtualDirContext usando una petición especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8C62EF-1B67-456A-9C66-755439CF8556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "33E9607B-4D28-460D-896B-E4B7FA22441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819E245-D641-4F19-9139-6C940504F6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C381275-10C5-4939-BCE3-0D1F3B3CB2EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "81A31CA0-A209-4C49-AA06-C38E165E5B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7205475A-6D04-4042-B24E-1DA5A57029B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08022987-B36B-4F63-88A5-A8F59195DF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA563BF-A67A-477D-956A-167ABEF885C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4B7557-EF35-451E-B55D-3296966695AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B937B-57E0-4E88-9E39-39012A924525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8980E61E-27BE-4858-82B3-C0E8128AF521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8756BF9B-3E24-4677-87AE-31CE776541F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE057E-2092-4C98-8D0C-75CF439D0A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F194580-EE6D-4E38-87F3-F0661262256B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9731BAA-4C6C-4259-B786-F577D8A90FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F74A421-D019-4248-84B8-C70D4D9A8A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05346F5A-FB52-4376-AAC7-9A5308216545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305688F2-50A6-41FB-8614-BC589DB9A789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24AA431-C436-4AA5-85DF-B9AAFF2548FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25966344-15D5-4101-9346-B06BFD2DFFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F4CBAC-27B1-4EFF-955A-A63B457D0578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD55B338-9DBE-4643-ABED-A08964D3AF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4F710E-06EA-48F4-AC6A-6F143950F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4936C2-0B2D-4C44-98C3-443090965F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48453405-2319-4327-9F4C-6F70B49452C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD9544-6424-41A6-AEC0-EC19B8A10E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4670E65-2E11-49A4-B661-57C2F60D411F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8FF71D-4710-4FBB-9925-A6A26C450F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31002A23-4788-4BC7-AE11-A3C2AA31716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7144EDDF-8265-4642-8EEB-ED52527E0A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF06B5C1-B9DD-4673-A101-56E1E593ACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D731065-626B-4425-8E49-F708DD457824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D850EA-E537-42C8-93B9-96E15CB26747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E037DA05-2BEF-4F64-B8BB-307247B6A05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAF1EB5-FB34-40FC-96ED-9D073890D8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D395D95B-1F4A-420E-A0F6-609360AF7B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD221BA-0AB6-4972-8AD9-5D37AC07762F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55B6565-96CB-4F6A-9A80-C3FB82F30546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3300AFE-49A4-4904-B9A0-5679F09FA01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5125CC-05F9-4678-90DB-A5C7CD24AE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B904C74-B92E-4EAE-AE6C-78E2B844C3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8A7333-B4C3-4876-AE01-62F2FD315504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92993E23-D805-407B-8B87-11CEEE8B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A11BD74-305C-41E2-95B1-5008EEF5FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595442D0-9DB7-475A-AE30-8535B70E122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0BA92A-0BD3-4CE4-9465-95E949104BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C947E549-2459-4AFB-84A7-36BDA30B5F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A0EA46-5AEA-4D0A-B89E-6560FA10EC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9453E-BC9B-4F77-85FA-BA15AC55C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF0518-73F9-47DB-8946-A8334936BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AA8778-7833-4572-A71B-5FD89938CE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242E47CE-EF69-4F8F-AB40-5AF2811674CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A225D4F7-174E-47C3-8390-C6FA28DB5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1555C-E55A-4E14-B786-BFEE3F09220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAC42AE-B82A-4ABF-9519-B2D97D925707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8075E9A-DA7F-4A0B-8B4D-0CD951369111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335A5320-6086-4B45-9903-82F6F92A584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B33408-C2E2-4E7C-9334-6AB98F13468C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F036676-9EFB-4A92-828E-A38905D594E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9728EE8-6029-4DF3-942E-E4ACC09111A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DBB843-288C-4060-8777-6CDCF1860D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B87EB5-4902-4C2A-878A-45185F7D0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0596E6C-9ACE-4106-A2FF-BED7967C323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7158DC-966B-4508-8600-40E3E9D3D0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190FE0D-86C1-49EE-BDAE-5879C32BDC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20F45F-01A2-43DD-9731-DFF54E31719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7A728B-59DB-4EDE-8929-C91F4C410902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26889291-3280-4524-8F4A-9B22FF4600C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4CAEBD-0F38-4892-9D0B-9D7392E0BCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C4DA00-E47C-47BE-856C-7E0D4B0F9DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FF234B-A9AD-4C51-8E9E-939DC8ECB64A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CC7A75-8EA2-4F62-AF84-CE60C76F9F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:7.0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA59311-0095-49D7-BDF2-E72F847F3F09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100897",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039393",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171018-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://usn.ubuntu.com/3665-1/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_54_Tomcat",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171018-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3665-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_54_Tomcat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10930",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2017-09-19T14:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords."
      }, {
        "lang" : "es",
        "value" : "ZXR10 1800-2S en versiones anteriores a la 3.00.40 restringe incorrectamente el acceso a un recurso de un actor sin autorización. Esto provoca que los usuarios normales sean capaces de descargar archivos de configuración para robar información, como por ejemplo las cuentas y contraseñas de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_1800-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "720817E2-2A6C-458D-A755-734D3950ACB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_1800-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2AC22D-CC1C-4F6E-AFA1-EEC6C2A294DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_2800-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "1953F140-3D24-4496-B5EB-9E79A2B00DA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_2800-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A4FC3A-3137-4B81-85D4-48AC72CF1019"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_3800-8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "9C47EA3A-F5B6-4536-A35E-86426A6324C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_3800-8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6346FA61-050D-4E0A-906C-D2E62D9AA3A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "57325750-FFA0-4F1B-A2BA-CC1573509445"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6389B69E-A7E2-4BF3-A628-4F5C0ED6EF86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10931",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2017-09-19T14:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration."
      }, {
        "lang" : "es",
        "value" : "ZXR10 1800-2S en versiones anteriores a la 3.00.40 restringe incorrectamente las descarga del rango del directorio de archivos para los usuarios WEB. Esto provoca que se pueda descargar cualquier archivo y provocar filtraciones de información como la configuración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_1800-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "720817E2-2A6C-458D-A755-734D3950ACB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_1800-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2AC22D-CC1C-4F6E-AFA1-EEC6C2A294DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_2800-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "1953F140-3D24-4496-B5EB-9E79A2B00DA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_2800-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A4FC3A-3137-4B81-85D4-48AC72CF1019"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_3800-8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "9C47EA3A-F5B6-4536-A35E-86426A6324C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_3800-8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6346FA61-050D-4E0A-906C-D2E62D9AA3A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "57325750-FFA0-4F1B-A2BA-CC1573509445"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6389B69E-A7E2-4BF3-A628-4F5C0ED6EF86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T15:29:00.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application."
      }, {
        "lang" : "es",
        "value" : "En el componente medialibrary en QNAP NAS 4.3.3.0229, un atacante remoto sin autenticar puede ejecutar comandos arbitrarios del sistema como el usuario root de la aplicación NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3.0229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593CFA0-ABF0-4FF6-B2DE-735D68B2DA1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/support/con_show.php?cid=128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T15:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object."
      }, {
        "lang" : "es",
        "value" : "La función del Developer System Helper wiki_decode en el panel de administrador en Kaltura en versiones anteriores a la 13.2.0 permite que atacantes remotos lleven a cabo ataques de inyección de objetos PHP y ejecuten código PHP arbitrario mediante un objeto serializado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaltura:kaltura_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2.0",
            "matchCriteriaId" : "91B57D98-D4C1-4B45-B19F-EB81CFEAD0F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100976",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T15:29:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to server/admin_console/web/tools/bigRedButton.php; the (3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId, or (8) uiConfId parameter to server/admin_console/web/tools/bigRedButtonPtsPoc.php; the (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to server/admin_console/web/tools/AkamaiBroadcaster.php; the (14) entryId parameter to server/admin_console/web/tools/XmlJWPlayer.php; or the (15) partnerId or (16) playerVersion parameter to server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-Site Scripting (XSS) en Kaltura en versiones anteriores a la 13.2.0 permiten que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante los parámetros (1) partnerId o (2) playerVersion a server/admin_console/web/tools/bigRedButton.php; los parámetros(3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId o (8) uiConfId a server/admin_console/web/tools/bigRedButtonPtsPoc.php; los parámetros (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId o (13) entryId a server/admin_console/web/tools/AkamaiBroadcaster.php; el parámetro (14) entryId a server/admin_console/web/tools/XmlJWPlayer.php; o los parámetros (15) partnerId o (16) playerVersion a server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaltura:kaltura_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mercury-13.1.0",
            "matchCriteriaId" : "18FF98A6-B7C8-4114-A02C-93EF1E541336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100976",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kaltura/server/pull/6003/commits/7e00a578d6ba748f6d3bdc255a40a4a0a594e6f9",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kaltura/server/pull/6003/commits/a63362aa87d668d5ebf4a89cdd5bb8b815ac7f70",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kaltura/server/pull/6003/commits/7e00a578d6ba748f6d3bdc255a40a4a0a594e6f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kaltura/server/pull/6003/commits/a63362aa87d668d5ebf4a89cdd5bb8b815ac7f70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T15:29:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via a crafted userzone cookie."
      }, {
        "lang" : "es",
        "value" : "La función getUserzoneCookie en Kaltura en versiones anteriores a la 13.2.0 emplea un secreto de cookie embebido para validar firmas de cookies. Esto permite que los atacantes remotos omitan un mecanismo de protección previsto y que lleven a cabo ataques de inyección de objetos PHP y ejecuten código PHP arbitrario mediante una cookie userzone manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaltura:kaltura_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mercury-13.1.0",
            "matchCriteriaId" : "18FF98A6-B7C8-4114-A02C-93EF1E541336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100976",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43028/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43876/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43028/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43876/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T16:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call."
      }, {
        "lang" : "es",
        "value" : "El controlador Winring0x32.sys en NetMechanica NetDecision 5.8.2 permite que los usuarios locales obtengan privilegios mediante una llamada IOCTL 0x9C402088 manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmechanica:netdecision:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9F446-EE54-4DDD-96CE-828237C2734B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42735/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42735/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T16:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request, aka SAP Security Note 2389181."
      }, {
        "lang" : "es",
        "value" : "El servicio web Host Control en SAP NetWeaver AS JAVA en sus versiones 7.0 a 7.5 permite que los atacantes remotos provoquen una denegación de servicio (cierre inesperado del servicio) mediante una petición manipulada. Esto también se conoce como SAP Security Note 2389181."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.00",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "BE4E8DEC-7C97-46AC-9780-2BA5462EC949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://erpscan.io/advisories/erpscan-17-030-sap-hostcontrol-remote-dos/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-030-sap-hostcontrol-remote-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name."
      }, {
        "lang" : "es",
        "value" : "El código de autenticación Basic en la biblioteca WEBrick en Ruby en versiones anteriores a la 2.2.8, 2.3.x anteriores a la 2.3.5 y 2.4.x hasta la 2.4.1 permite que atacantes remotos inyecten secuencias de escape del emulador del terminal en su registro y que puedan ejecutar comandos arbitrarios mediante un nombre de usuario manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.7",
            "matchCriteriaId" : "20D4B423-C141-4B08-9FE4-2ADCB868A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822307DD-7F7D-44C2-9C4B-CB8704663410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D62AC9-83B8-4C84-A47E-2B06C2816964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "E583E49C-95B1-4AE4-AA7A-6D6BA7D470B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F197C5A-2588-417F-A743-E72D1E8EF4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA01BF1-91AD-4968-9AC2-A194FCD6AB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36CCD91-2A20-4C2E-96D5-73704DFC10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485C401C-CC3B-4A74-82D6-F4539FFE48B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E99F5A-E693-43E9-8AB3-A3FCB21BCF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDA92E9-C9CF-47B9-B647-0202D493D057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "A682A487-A615-404C-A7D9-A28C0C31B4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview3:*:*:*:*:*:*",
            "matchCriteriaId" : "8930BA64-E9BC-42E0-9D74-8FA2ABD1F692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AE96A-F7FB-41A2-943C-DFAEA6D81446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946D2AB0-D334-4D94-BDA2-733BFC6C9E1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100853",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3528-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3528-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T17:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string."
      }, {
        "lang" : "es",
        "value" : "El método decode en el módulo OpenSSL::ASN1 en Ruby en versiones anteriores a la 2.2.8, versiones 2.3.x anteriores a 2.3.5, y 2.4.x hasta la 2.4.1 permite que los atacantes provoquen una denegación de servicio (cierre inesperado del intérprete) mediante una string manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F103B7-0E70-4490-9802-2CD6034E240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "C0232F9E-8AA2-4BE3-B967-A83692579CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C13ED3C-5F26-4249-8FB4-6714B2E0D767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2AFFD9-DFF5-444F-81B9-51EEF69DF1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D36707-03B7-437C-B21D-A27D5C530117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCCD8F3-E667-42F2-9861-14EDFB16583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3CEF46-C95D-493B-A99B-7C90FDF27B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1629D696-BD68-4C4F-B6CE-885AD670A12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87B9AD8-CF70-4CA9-A655-838B1D7AD056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB471265-C399-49D4-8CA2-5FC1C85C6F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F7FF5E-EBD0-415E-BFA1-6AF1527F1174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822307DD-7F7D-44C2-9C4B-CB8704663410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D62AC9-83B8-4C84-A47E-2B06C2816964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "E583E49C-95B1-4AE4-AA7A-6D6BA7D470B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F197C5A-2588-417F-A743-E72D1E8EF4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA01BF1-91AD-4968-9AC2-A194FCD6AB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36CCD91-2A20-4C2E-96D5-73704DFC10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485C401C-CC3B-4A74-82D6-F4539FFE48B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E99F5A-E693-43E9-8AB3-A3FCB21BCF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDA92E9-C9CF-47B9-B647-0202D493D057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "A682A487-A615-404C-A7D9-A28C0C31B4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:preview3:*:*:*:*:*:*",
            "matchCriteriaId" : "8930BA64-E9BC-42E0-9D74-8FA2ABD1F692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AE96A-F7FB-41A2-943C-DFAEA6D81446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946D2AB0-D334-4D94-BDA2-733BFC6C9E1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100868",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T17:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx."
      }, {
        "lang" : "es",
        "value" : "Astaro Security Gateway (también conocido como ASG) 7 permite que atacantes remotos ejecuten código arbitrario mediante una petición manipulada a index.plx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sophos:astaro_security_gateway_firmware:7.500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4706DFB-4B49-4D3D-B77F-EEBE125F05C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sophos:astaro_security_gateway_firmware:7.506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B80484E-8781-4334-9017-2B4492393477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sophos:astaro_security_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EB80BA-182C-4139-B4DD-15883723C39F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42726/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42726/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T18:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en la función S_regatom en el archivo regcomp.c en Perl 5 anterior a versión 5.24.3-RC1 y versión 5.26.x anterior a 5.26.1-RC1, permite a los atacantes remotos causar una denegación de servicio (escritura fuera de límites) por medio de una expresión regular con un escape '\\N{}' y el modificador que no distingue entre mayúsculas y minúsculas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.24.2",
            "matchCriteriaId" : "DB276E2C-622C-45EB-8378-35751366049F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:5.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71CAECA-2A6A-4604-863F-3C1C055FB1CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100860",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492091",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/commitdiff/96c83ed78aeea1a0496dd2b2d935869a822dc8a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rt.perl.org/Public/Bug/Display.html?id=131582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180426-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/commitdiff/96c83ed78aeea1a0496dd2b2d935869a822dc8a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rt.perl.org/Public/Bug/Display.html?id=131582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180426-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-19T18:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\\N{U+...}' escape."
      }, {
        "lang" : "es",
        "value" : "Un Desbordamiento de búfer en la función S_grok_bslash_N en el archivo regcomp.c en Perl versión 5 anterior a 5.24.3-RC1 y versión 5.26.x anterior a 5.26.1-RC1, permite a los atacantes remotos divulgar información confidencial o causar una denegación de servicio (bloqueo de aplicación) por medio de una expresión creada con un escape '\\N{U+...}' inválido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.24.2",
            "matchCriteriaId" : "DB276E2C-622C-45EB-8378-35751366049F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:5.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71CAECA-2A6A-4604-863F-3C1C055FB1CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/source/lang-base/perl/patches/CVE-2017-12883.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100852",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492093",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/commitdiff/2be4edede4ae226e2eebd4eff28cedd2041f300f#patch1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rt.perl.org/Public/Bug/Display.html?id=131598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180426-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/source/lang-base/perl/patches/CVE-2017-12883.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/commitdiff/2be4edede4ae226e2eebd4eff28cedd2041f300f#patch1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rt.perl.org/Public/Bug/Display.html?id=131598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180426-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12168",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-20T08:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR)."
      }, {
        "lang" : "es",
        "value" : "La función access_pmu_evcntr en arch/arm64/kvm/sys_regs.c en el kernel Linux en versiones anteriores a la 4.8.11 permite que los usuarios KVM invitados del sistema operativo provoquen una denegación de servicio (fallo de aserción y cierre inesperado del sistema operativo del host) accediendo a Performance Monitors Cycle Count Register (PMCCNTR)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.10",
            "matchCriteriaId" : "BA4CF0D6-DBAC-4857-A977-D43B9018CE3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9e3f7a29694049edd728e2400ab57ad7553e5aa9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.11",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492984",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/9e3f7a29694049edd728e2400ab57ad7553e5aa9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9e3f7a29694049edd728e2400ab57ad7553e5aa9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1492984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/9e3f7a29694049edd728e2400ab57ad7553e5aa9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T08:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious \"sh -c\" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field."
      }, {
        "lang" : "es",
        "value" : "GNOME Nautilus en versiones anteriores a la 3.23.90 permite que los atacantes suplanten un tipo de archivo mediante la extensión de archivo .desktop, tal y como se ve en un ataque en el cual el nombre de un archivo .desktop acaba en .pdf, pero el campo Exec de este archivo lanza un comando \"sh-c\" malicioso. En otras palabras, Nautilus no proporciona ninguna indicación en la interfaz de usuario sobre si un archivo tiene realmente la extensión .desktop. En lugar de eso, la interfaz de usuario sólo muestra la extensión .pdf. Un factor de mitigación (leve) es que un ataque requiere que el archivo .desktop tenga permisos de ejecución. La solución es pedirle al usuario que confirme que el archivo debe ser tratado como un .desktop y después recordar la respuesta del usuario en el campo metadata::trusted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:nautilus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.90",
            "matchCriteriaId" : "4D9D36E9-BF92-413D-B951-D76D6DD04DE6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3994",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101012",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0223",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860268",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777991",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/nautilus/commit/1630f53481f445ada0a455e9979236d31a8d3bb0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/nautilus/commit/bc919205bf774f6af3fa7154506c46039af5a69b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/freedomofpress/securedrop/issues/2238",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://micahflee.com/2017/04/breaking-the-security-model-of-subgraph-os/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=777991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/nautilus/commit/1630f53481f445ada0a455e9979236d31a8d3bb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GNOME/nautilus/commit/bc919205bf774f6af3fa7154506c46039af5a69b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/freedomofpress/securedrop/issues/2238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://micahflee.com/2017/04/breaking-the-security-model-of-subgraph-os/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T14:29:00.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de archivos locales (LFD) en los dispositivos BE126 WIFI repeater versión 1.0 que permiten que los atacantes lean todo el sistema de archivos en el dispositivo mediante un parámetro getpage manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:twsz:wifi_repeater_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57337C77-E8E1-4515-A534-FF483FCA7145"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:twsz:wifi_repeater:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631C3F47-B78C-4143-8567-1AB6430C179D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42547/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42547/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T14:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:\"root\" password:\"root\"). The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the device with malicious code."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos BE126 WIFI repeater versión 1.0, un atacante puede iniciar sesión mediante el protocolo telnet (abierto por defecto) con credenciales predeterminadas como root (nombre de usuario: \"root\", contraseña: \"root\"). El atacante puede hacer que un usuario conectado al repetidor haga clic en un enlace malicioso que iniciará sesión a través de telnet e infectará el dispositivo con código malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:twsz:wifi_repeater_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57337C77-E8E1-4515-A534-FF483FCA7145"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:twsz:wifi_repeater:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631C3F47-B78C-4143-8567-1AB6430C179D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T14:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:\"root\" password:\"root\") and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires (malicious or not)."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos BE126 WIFI repeater versión 1.0, un atacante puede iniciar sesión mediante el protocolo telnet (abierto por defecto) con credenciales predeterminadas como root (nombre de usuario: \"root\", contraseña: \"root\") y puede: 1. Leer todo el archivo; 2. Escribir en el sistema de archivos; o 3. Ejecutar cualquier código que desee el atacante (malicioso o no)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:twsz:wifi_repeater_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57337C77-E8E1-4515-A534-FF483FCA7145"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:twsz:wifi_repeater:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631C3F47-B78C-4143-8567-1AB6430C179D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T16:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive."
      }, {
        "lang" : "es",
        "value" : "El analizador sintáctico de paquetes DNS en YADIFA en versiones anteriores a la 2.2.6 no comprueba la presencia de bucles de puntero infinitos, por lo que es posible forzarlo a entrar en un bucle infinito. Esto puede provocar un gran uso de recursos de CPU y hacer que el servidor no responda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yadifa:yadifa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.5",
            "matchCriteriaId" : "E76A9995-CE82-476B-B061-E19D0D7E59ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yadifa/yadifa/blob/v2.2.6/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/blog/fuzzing-yadifa-dns/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yadifa/yadifa/blob/v2.2.6/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/blog/fuzzing-yadifa-dns/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7924",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-20T16:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de validación de entrada incorrecta en los controladores Rockwell Automation MicroLogix 1100 1763-L16BWA, 1763-L16AWA, 1763-L16BBB y 1763-L16DWD. Un atacante remoto sin autenticar podría enviar un único paquete de tipo Programmable Controller Communication Commands (PCCC) manipulado al controlador que podría provocar que el controlador entre en una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1763-l16bwa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B607BEF4-2B20-4CF4-B023-F87F9082E5F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1763-l16bwa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F7B3DF-9701-4572-8F14-D23ADD480C11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1763-l16awa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0083DB-5493-4308-9E9D-C16EB031FCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1763-l16awa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61086D54-3DF1-4EA4-97A6-6B87091FF9D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1763-l16bbb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F295FFA-DB99-4C12-8557-8BFA1D9FFC8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1763-l16bbb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4285CA85-BA1D-4870-8125-49AEA64E9545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1763-l16dwd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E14833-6DDD-45ED-BA02-194183FC7586"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1763-l16dwd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4F33C7-3449-409D-8F80-040F5277172A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99622",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T16:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an integer overflow."
      }, {
        "lang" : "es",
        "value" : "El código de control BL1 FWU SMC en ARM Trusted Firmware en versiones anteriores a la 1.4 podría permitir que los atacantes escriban datos arbitrarios para asegurar la memoria, omitir el mecanismo de protección bl1_plat_mem_check, provocar una denegación de servicio o provocar cualquier otro impacto sin especificar mediante una imagen AArch32 manipulada, lo que desencadena un desbordamiento de enteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:arm-trusted-firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "8ABB54EA-6233-431B-8F26-27F82E3AB49B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/blob/v1.4/docs/change-log.rst#new-features",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/blob/v1.4/docs/change-log.rst#new-features",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9645",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-20T16:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). Decryption of data is possible at the hardware level."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de robustez de cifrado inadecuado en Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX y variantes (incluyendo RSD31-AM Package), DRM-1/2 y variantes (incluyendo Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II y MESH Repeater (Telemetry Enabled Devices). Es posible el descifrado de datos a nivel de hardware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:dmc_3000_transmitter_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F68D607-4774-45A7-A3CC-D93EE51C5169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:dmc_3000_transmitter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D95AAD-66AD-4FCE-A0C2-4C086FF08FEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:ipam_transmitter_f\\/dmc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D590D7-E680-4251-8BBB-20E842026F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:ipam_transmitter_f\\/dmc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180D4F01-B15D-4FB7-8808-84E731444C2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:rds-31_itx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08274BFB-DB85-458D-9FDE-31C3EDCE614B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:rds-31_itx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB79C5C-5F12-4799-AB24-539270E5F40C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:drm-1\\/2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D16832-0B56-4278-81F2-346F68AA4CF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:drm-1\\/2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568972B1-2B1F-4929-A1D1-B8E1779F3B0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:drm-2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090843E3-BBEA-42C2-A4A7-00510FB1CD4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:drm-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CF0450-2B8D-4FCE-B50C-422B21D21143"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:rds-31_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F64F40-FBF8-4524-AF53-B6563F4C89DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:rds-31:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDBBE39-6EBD-4880-B3FE-56AB8EB08AEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:telepole_2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44C2C06-1312-43BD-8768-4824BF6EC55E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:telepole_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CAB081C-73B8-49C2-BE47-56CED7CE4FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion:wrm2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B7F948-3A2C-4170-B95F-0FE9AAD7EF90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion:wrm2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49137D8C-510F-4FCA-8F48-C63EEB1FB7B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100001",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9649",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-20T16:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de clave criptográfica embebida en Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX y variantes (incluyendo RSD31-AM Package), DRM-1/2 y variantes (incluyendo Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II y MESH Repeater (Telemetry Enabled Devices). Se incluye una clave de fábrica imposible de cambiar en el firmware transmisor de 900MHz."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:dmc_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC6372-8CD1-45F4-BE53-53D24BF22054"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:dmc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64F77B6-9389-4FF3-AB9B-99DD73590860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:ipam_transmitter_f\\/dmc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14D28BB-776A-401B-B832-E57BAACD3FA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:ipam_transmitter_f\\/dmc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA09D90D-53D8-4EE8-9966-D2884FBEFF7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:telepole_ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1D83AF-67AC-4B1A-ACAB-599A1A629536"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:telepole_ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C188712C-2656-495B-871D-7025BCD84049"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:rds-31_itx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079AAF-23EC-4793-AE6A-E79DAF542E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:rds-31_itx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8121F6-BFF1-4E14-8341-5B29D1AD2F23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:rsd31-am_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8A46A6-58EC-403A-A5B7-05970784EB03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:rsd31-am:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09B515E-38E6-4C8D-8ECC-AD831DE407AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:wrm2_mesh_repeater_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64296E40-113A-4A82-A293-9E4525EA2233"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:wrm2_mesh_repeater:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "223DC579-D37A-4AC7-8399-00BEA6B20D29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirion_technologies:drm-1\\/2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30378F88-26B0-49B3-934D-7C3DB340D63E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mirion_technologies:drm-1\\/2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1ABCEE-AA08-4D81-88BF-E18CEB923509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100001",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12611",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-20T17:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack."
      }, {
        "lang" : "es",
        "value" : "En Apache Struts versiones 2.0.0 hasta 2.3.33 y versiones 2.5 hasta 2.5.10.1, el uso de una expresión no intencional en una etiqueta Freemarker en lugar de literales de cadena podría conllevar a un ataque de tipo RCE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3A90B7-C632-4D3E-9A4F-21E46D273B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386538BE-F258-4870-8E11-750ADA228026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CF15B9-3714-4206-9971-1F7D59E20483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA32D87-65C7-4589-86B7-500BE3203CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C3FB11-4E24-4067-A3A9-021F849DAAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661F1610-9FCD-4FC1-BCA1-69C58E0A1389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C89E22-B106-4EAB-90A1-0EA86C165737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1BABB2-780E-47E0-87A9-A164906C8421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC32348E-7EF4-411C-9A44-CD041ABFA0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BD452B-AE41-4F7A-9DB9-4B1039582537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDC53B-7B8E-4333-BC87-E01024EC9C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0818E7-B617-4C30-BFAC-9FE2F375F8BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F4A58E-F3D4-4711-A37E-EA538B112371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFCC96F-FD87-4495-B8A5-19D7898D5662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA0424E-84B4-41BD-8E6C-93E2A77DD6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC53AE5-3640-4FE1-B0B1-EA26C5B9EB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662A2E4B-A76A-4498-98A6-F90DF65C62B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E720B3A-4CFB-47FE-B80C-67C59D4C7FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA687B56-A09B-4741-84F1-2BD9569A3F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC0E358-8B4D-480B-BFAE-966CB697310A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7E8E1C-C667-4AED-86A5-2BD0C62AAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B3348C-1086-4A16-97E3-52DB65FF860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C65711D-9C5B-4644-A12D-82243CB6FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1FA9A7-2C8E-4651-9400-190198528642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9093C0-AE6A-4285-B159-8FDBF37E33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267A1C33-1C95-41DA-8A01-6F20C7BE1772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4590B9-6A44-4DC6-B7DF-5E6CAAA9D25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30860683-D403-4D24-B356-FD306AEFCA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3316DA-9E34-4955-91CA-E35B141A7007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D152B29-FAD5-4DEA-B187-278EBD37FEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC68463-F500-471C-8600-8F8FD9743B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92AAE08-4811-465A-8178-25F5F349B8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487975D-6394-4136-B45C-C1F209465B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41957-8CCA-46A6-BD31-4039EEF3C457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84408BC6-E785-4874-9409-AC02AF0A7897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E08D3E-9F86-4E9D-B1BF-EBEA8AB3BEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B4E64-2A36-49C6-B09D-77B3BDF69709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2481505C-4FD1-4195-9E10-9DD741498FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910DCB81-63A8-4BBB-8897-A98A0F2AEEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F4616-4B4B-4CAB-968B-502179152D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D12A0A-1DC5-47C7-9FF6-E8103C75FE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED63DB-2AAF-4BC9-A844-074EDF63C89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86232DA-90C7-43F8-99CC-C1BFB4BA3F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A6CEED-6C43-4325-B36C-9F254CCDFDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F43088-26AA-4890-A9D6-1B9B48D5F02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6820E3-8FDF-4BDF-8B62-E604A91F1280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44527919-8403-42A8-9CE1-3B4F58630F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB91D8A-14B8-4263-B90D-F776535F9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB525941-7175-43C1-9F17-814F5F7C72CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10D559E-04A0-4002-947C-D3902138795B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89203DD8-2C95-4546-9504-83654FFA5DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3D5644-CFAC-4FB5-A1FB-387F97876098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC883A7-0766-4857-ABC8-9DB4BA713650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3553904-BF3C-4636-947A-8AA16D4F38A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93CE807-D7C2-4865-ACF8-E366A6478B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FF6282-0BCA-46EB-9648-6EE3EDA189F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1467BC-9BC8-402D-A420-615CF9698648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE716B-867F-49CA-BDAF-194714D990C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6057D5-0787-4026-A202-ACD07C862F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3AE8EA-4D25-4151-A210-ECDE802F8A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C615AE-4709-47EB-85F8-BD944096428E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39047809-4E6D-4670-B9BA-D8FD910E38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71823E13-1896-4EE4-A49C-CFFB717FFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291F3624-8AB5-46F2-9BB5-F592DF1C9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD053675-DE5E-40A8-B404-4F36AAC82502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0392E61-6D77-43C3-8009-96BC0F90B8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067F6249-CC5A-4402-843C-06D5F9F77267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFA78DD-B60C-46AD-BCCB-4E15BB16BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA1EABE-5292-44C2-8327-54201A42F204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327A6EA-69AF-4EB2-8F17-8011678FAB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FAA0C-0908-4105-BE3A-016B4A298264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5068CA-A472-47D2-A89F-A43EA8617874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CE1226-E0E6-4DC6-AC89-3FFDE6BD7B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E17D62B8-349B-4F30-8849-6912828802C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E91133-D585-43F7-9093-94D735B3167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DD44FD72-ECE7-4E08-AD9E-5CE2C310C2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F914BA-CF16-4B03-A6A2-8C9816EC1248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C82970-62C9-4513-A66D-6BDA4048C27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A43CA5-46DE-4513-A309-BE3A60CD5489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D83D2FA-8931-45F8-82D6-DE270A2BA55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D284BF2-101C-490C-85CB-69D156D1FF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAD7A75-378F-4A0F-A10F-E4F7AF60F285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E43496-097F-4560-BFB1-BDDA4659F197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C720D6-312B-477C-A993-BEE39A7ADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03367A87-9011-45F4-B534-DEA26F8D4567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF635DCE-D495-4166-9E25-1E48DDDF9AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100829",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/ka51A000000CgttQAC/NTAP-20170911-0001",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-053.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netapp.com/support/s/article/ka51A000000CgttQAC/NTAP-20170911-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://struts.apache.org/docs/s2-053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T17:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.7-4 Q16 se ha detectado un error de lectura fuera de límites relacionado con la función ReadTIFFImage en coders/tiff.c. Un atacante podría explotar esta vulnerabilidad para divulgar memoria sensible o provocar el cierre inesperado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100944",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/765",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T17:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash."
      }, {
        "lang" : "es",
        "value" : "En LibRaw hasta la versión 0.18.4, un error de lectura fuera de límites relacionado con kodak_65000_load_raw se ha detectado en dcraw/dcraw.c e internal/dcraw_common.cpp. Un atacante podría explotar esta vulnerabilidad para divulgar memoria potencialmente sensible o provocar el cierre inesperado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.4",
            "matchCriteriaId" : "DA58125A-903F-4BC1-8B3D-2ECD63761144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibRaw/LibRaw/commit/d13e8f6d1e987b7491182040a188c16a395f1d21",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/issues/101",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/d13e8f6d1e987b7491182040a188c16a395f1d21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/issues/101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9793",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-20T17:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload."
      }, {
        "lang" : "es",
        "value" : "El Plugin REST en Apache Struts versiones 2.1.x, versiones 2.3.7 hasta 2.3.33 y versiones 2.5 hasta 2.5.12, está usando una biblioteca XStream obsoleta que es vulnerable y permite realizar un ataque de DoS usando una petición maliciosa con una carga útil XML especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B4E64-2A36-49C6-B09D-77B3BDF69709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2481505C-4FD1-4195-9E10-9DD741498FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910DCB81-63A8-4BBB-8897-A98A0F2AEEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F4616-4B4B-4CAB-968B-502179152D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D12A0A-1DC5-47C7-9FF6-E8103C75FE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED63DB-2AAF-4BC9-A844-074EDF63C89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86232DA-90C7-43F8-99CC-C1BFB4BA3F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A6CEED-6C43-4325-B36C-9F254CCDFDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F43088-26AA-4890-A9D6-1B9B48D5F02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6820E3-8FDF-4BDF-8B62-E604A91F1280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44527919-8403-42A8-9CE1-3B4F58630F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB91D8A-14B8-4263-B90D-F776535F9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB525941-7175-43C1-9F17-814F5F7C72CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10D559E-04A0-4002-947C-D3902138795B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89203DD8-2C95-4546-9504-83654FFA5DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3D5644-CFAC-4FB5-A1FB-387F97876098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC883A7-0766-4857-ABC8-9DB4BA713650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3553904-BF3C-4636-947A-8AA16D4F38A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93CE807-D7C2-4865-ACF8-E366A6478B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FF6282-0BCA-46EB-9648-6EE3EDA189F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1467BC-9BC8-402D-A420-615CF9698648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE716B-867F-49CA-BDAF-194714D990C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6057D5-0787-4026-A202-ACD07C862F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3AE8EA-4D25-4151-A210-ECDE802F8A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C615AE-4709-47EB-85F8-BD944096428E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39047809-4E6D-4670-B9BA-D8FD910E38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71823E13-1896-4EE4-A49C-CFFB717FFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291F3624-8AB5-46F2-9BB5-F592DF1C9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD053675-DE5E-40A8-B404-4F36AAC82502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0392E61-6D77-43C3-8009-96BC0F90B8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067F6249-CC5A-4402-843C-06D5F9F77267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFA78DD-B60C-46AD-BCCB-4E15BB16BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA1EABE-5292-44C2-8327-54201A42F204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327A6EA-69AF-4EB2-8F17-8011678FAB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FAA0C-0908-4105-BE3A-016B4A298264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5068CA-A472-47D2-A89F-A43EA8617874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CE1226-E0E6-4DC6-AC89-3FFDE6BD7B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E17D62B8-349B-4F30-8849-6912828802C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E91133-D585-43F7-9093-94D735B3167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DD44FD72-ECE7-4E08-AD9E-5CE2C310C2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F914BA-CF16-4B03-A6A2-8C9816EC1248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C82970-62C9-4513-A66D-6BDA4048C27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A43CA5-46DE-4513-A309-BE3A60CD5489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D83D2FA-8931-45F8-82D6-DE270A2BA55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D284BF2-101C-490C-85CB-69D156D1FF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAD7A75-378F-4A0F-A10F-E4F7AF60F285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E43496-097F-4560-BFB1-BDDA4659F197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C720D6-312B-477C-A993-BEE39A7ADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03367A87-9011-45F4-B534-DEA26F8D4567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF635DCE-D495-4166-9E25-1E48DDDF9AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DBE04-720B-421E-B76A-4EE92FEE171C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F36F794-B949-40DB-986A-EDB0E6619100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-429.htm",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100611",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039262",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180629-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://struts.apache.org/docs/s2-051.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-429.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180629-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://struts.apache.org/docs/s2-051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9804",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-20T17:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.  NOTE: this vulnerability exists because of an incomplete fix for S2-047 / CVE-2017-7672."
      }, {
        "lang" : "es",
        "value" : "En Apache Struts desde la versión 2.3.7 hasta la 2.3.33 y desde la 2.5 hasta la 2.5.12, si una aplicación permite la introducción de una URL en un campo de un formulario y se emplea URLValidator (integrado), es posible preparar una URL especial que será usada para sobrecargar el proceso del servidor cuando se lleva a cabo la validación de la URL. NOTA: Esta vulnerabilidad existe debido a una solución incompleta para S2-047 / CVE-2017-7672."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B4E64-2A36-49C6-B09D-77B3BDF69709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2481505C-4FD1-4195-9E10-9DD741498FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910DCB81-63A8-4BBB-8897-A98A0F2AEEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F4616-4B4B-4CAB-968B-502179152D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D12A0A-1DC5-47C7-9FF6-E8103C75FE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED63DB-2AAF-4BC9-A844-074EDF63C89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86232DA-90C7-43F8-99CC-C1BFB4BA3F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A6CEED-6C43-4325-B36C-9F254CCDFDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F43088-26AA-4890-A9D6-1B9B48D5F02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6820E3-8FDF-4BDF-8B62-E604A91F1280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44527919-8403-42A8-9CE1-3B4F58630F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB91D8A-14B8-4263-B90D-F776535F9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB525941-7175-43C1-9F17-814F5F7C72CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10D559E-04A0-4002-947C-D3902138795B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89203DD8-2C95-4546-9504-83654FFA5DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3D5644-CFAC-4FB5-A1FB-387F97876098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC883A7-0766-4857-ABC8-9DB4BA713650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3553904-BF3C-4636-947A-8AA16D4F38A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93CE807-D7C2-4865-ACF8-E366A6478B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FF6282-0BCA-46EB-9648-6EE3EDA189F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1467BC-9BC8-402D-A420-615CF9698648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE716B-867F-49CA-BDAF-194714D990C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6057D5-0787-4026-A202-ACD07C862F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3AE8EA-4D25-4151-A210-ECDE802F8A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C615AE-4709-47EB-85F8-BD944096428E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39047809-4E6D-4670-B9BA-D8FD910E38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71823E13-1896-4EE4-A49C-CFFB717FFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291F3624-8AB5-46F2-9BB5-F592DF1C9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD053675-DE5E-40A8-B404-4F36AAC82502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0392E61-6D77-43C3-8009-96BC0F90B8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067F6249-CC5A-4402-843C-06D5F9F77267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFA78DD-B60C-46AD-BCCB-4E15BB16BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA1EABE-5292-44C2-8327-54201A42F204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327A6EA-69AF-4EB2-8F17-8011678FAB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FAA0C-0908-4105-BE3A-016B4A298264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5068CA-A472-47D2-A89F-A43EA8617874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CE1226-E0E6-4DC6-AC89-3FFDE6BD7B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E17D62B8-349B-4F30-8849-6912828802C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E91133-D585-43F7-9093-94D735B3167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DD44FD72-ECE7-4E08-AD9E-5CE2C310C2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F914BA-CF16-4B03-A6A2-8C9816EC1248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C82970-62C9-4513-A66D-6BDA4048C27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A43CA5-46DE-4513-A309-BE3A60CD5489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D83D2FA-8931-45F8-82D6-DE270A2BA55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D284BF2-101C-490C-85CB-69D156D1FF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAD7A75-378F-4A0F-A10F-E4F7AF60F285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E43496-097F-4560-BFB1-BDDA4659F197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C720D6-312B-477C-A993-BEE39A7ADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03367A87-9011-45F4-B534-DEA26F8D4567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF635DCE-D495-4166-9E25-1E48DDDF9AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DBE04-720B-421E-B76A-4EE92FEE171C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F36F794-B949-40DB-986A-EDB0E6619100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100612",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039261",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180629-0001/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://struts.apache.org/docs/s2-050.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180629-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://struts.apache.org/docs/s2-050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T18:29:01.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state."
      }, {
        "lang" : "es",
        "value" : "En Joomla! en versiones anteriores a la 3.8.0, un error de lógica en una consulta SQL puede llevar a la divulgación de textos de introducción de artículos cuando estos artículos se encuentran archivados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A21583-491E-4B29-AC2D-88A561C83A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0B9B94-9601-40B1-BBF0-71BCB400C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49994A54-AB81-402A-932E-E6E7C056C0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D243F11-6BDD-4E3C-AADE-A21615CD54AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC40CD9-B724-4B65-9C1D-F474EA3D8E79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100900",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039407",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T18:29:01.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password."
      }, {
        "lang" : "es",
        "value" : "En Joomla! en versiones anteriores a la 3.8.0, un escape inadecuado en el plugin de autenticación LDAP puede resultar en una divulgación del nombre de usuario y la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65184BFE-A070-4099-B672-3A238E9F83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920129E4-F979-49B5-9B96-62BCBC3954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90A8900-E441-46C4-A725-BA312358760E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E276C-C62D-4828-89CB-80F526FEAEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E48636-9EDB-49BB-ABC8-D79864BFCB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E5E84-4C69-49F2-83DA-FC86202DB7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB968DF7-4A0B-474C-8639-06976837E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6BE010-649F-4E48-97DC-DDF7511406D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C4094-D028-4A55-B523-C90F5A4C9D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA6550-2135-4D41-B592-433FFFDEE180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73D78E0-BF24-433B-9F1B-03FD956C5779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BAC75B-DAC1-47E1-B9C9-48CF19489143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA97C8A-809D-44FC-95D2-5F269B6BF77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B39FD1-44E2-43EC-B393-99E6208622B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77BABA-7768-4F92-84C7-D247E4772749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487204D9-7A9F-4A44-B625-FDBE2807444A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C8747-BF6A-4436-BC3A-A4B808AFF889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F137D-4572-472E-B1E0-EF7A0A3ED443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51BDBB-270D-4D4D-91D6-30114927667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861627F-EB9F-4B19-9E48-E3E9967EEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15F42BC-7826-493B-8C5A-D70A7263DCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC6CF00-2D88-4B97-A496-DCBE1B4E9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25771A2-206B-4366-B9DE-34D8CE12AE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F920ED-9578-4913-B851-3205BE13A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5F713F-F7EF-4E9B-BEB1-DDFDA0838D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9774D211-08D9-4339-B2AE-42434DBAF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C03B8F0-9A63-4896-A8CA-8CE829DE6B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086B989-8ED6-4DF2-92D6-2572315BEF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFFED66-B44C-47BC-A6FC-560DC9540001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C552C590-F5AB-4B9C-9E18-ECE9E2753377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C291481-02FA-4AE1-A112-DDF704DFD450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12F064-48B1-4A0B-B729-E8A60B101F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886DFC89-F4F9-4EA3-A83D-9ACAB1025592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F31F1-59C7-4FC1-9F33-5868095147A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287DD122-A85D-4B55-97AC-5861157A177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194B27E6-49C4-409F-B727-38E5C904CD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA936AAF-A6E6-42AE-81D6-FC12BD5F74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB51FDA-2080-447C-A57A-B95A1A9741E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709046EE-05BE-4B74-A364-ECCE4165EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEEFBF9-82AC-425E-ADA7-CA84EBEF69EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BA879-7B9E-4009-8059-3B7511E912F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01879A02-1248-44D9-A106-4CAED12B3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860AF6DE-436A-4051-8730-038FD2B04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEFB738-56D7-4C73-BC13-C62BD9FD90AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3C521-D8DF-4111-8074-ADFEC3426396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65365011-7019-430D-BE32-9E0124F27841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2A21F-C41F-4A30-BA2E-A6DEB761C7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D10456-3735-4F8F-A97B-9D8D561BA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F5CA89-A8B2-4A7A-B4D7-DC884B8A9B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC3C1-7CCE-4FA3-A759-91051F9124CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:2.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961CDDB-C81D-4CB3-8AFC-D869D044A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E7538-038C-42D7-B4A8-BED0F120B605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF53BD-6A52-41D3-8BB3-B08AC81C65E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23070D86-E104-4A93-84EA-5B23952B6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74090E-8F37-442E-A29C-DE41898291C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6037D413-3356-4801-8886-57D990DC25A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A2FDC8-9123-49BC-8A2B-719192913172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA80B0B6-590F-4550-9984-BABB24B268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36C2F51-7B04-4B57-AC3A-E2B245FE182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83513309-01CD-411C-82EF-62C1F7F4764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BABCB8-916D-452E-8848-B51B3374CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14669F-9C13-46BA-A45B-EC0B4081D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F58E9-AD21-446F-BC29-10F2A448F18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C7EA5D-CEB8-45C6-A50F-577B02BBD25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9382E8F4-30E6-473C-92F8-B8A48C28449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD19865B-7F80-41B3-B31F-948B30B73FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F50C51B-84E1-468F-B7ED-790BA079864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3ED8A4-60AF-4347-8A4E-41BAF7ED09B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B4D693-A540-4FB3-B7F9-9746F01B44CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9623DC6-3822-4493-A0CC-C87134799D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B71C854-FDCA-40C9-BB18-D7947BE81F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3861B6-CBD7-438E-A067-AEAEBB6C09B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F78591-585E-4571-813C-528256709932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D1C175-74AB-46AD-BAE0-25F0DF6EF944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA20940F-8056-4F18-8D8A-4CE1EE22327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D81D1-16F7-448B-BA23-C24AAAE1A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176F330D-DAC5-4D3E-823D-E59E6469D089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E76ADE1-A88F-468B-8D9C-72B90AF2A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98475DA0-9D72-4952-878B-4DD619132E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6C4C68-E526-408F-A54D-86CB3E5D800F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0B678E-DB68-4F62-9E94-2A2D9053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5427CD-4C44-4B6A-A72E-BF27BECFD631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7FF37-53BA-4DCB-B350-3D779977A853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D4E968-72C3-40D1-A9E0-FC1C45513436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B37E54-0DCD-4A8B-83A0-3B14B962EBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7B9A2E-1D53-4F55-A021-4B28C1F95C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003DBC50-8865-4704-BC79-1D945499BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A79B694-384E-4DDD-9AE5-DFFF1E695BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C0F39-B5FD-409C-8AA1-720720704952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E250E60-0F12-48F4-8959-CC2641A3E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0598E85E-BD26-4E5F-86AC-AE1C2BC786F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7664A2-C71A-45AB-BE14-E6EF782C549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A21583-491E-4B29-AC2D-88A561C83A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0B9B94-9601-40B1-BBF0-71BCB400C05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49994A54-AB81-402A-932E-E6E7C056C0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D243F11-6BDD-4E3C-AADE-A21615CD54AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC40CD9-B724-4B65-9C1D-F474EA3D8E79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039407",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.ripstech.com/2017/joomla-takeover-in-20-seconds-with-ldap-injection-cve-2017-14596/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/711-20170902-core-ldap-information-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.ripstech.com/2017/joomla-takeover-in-20-seconds-with-ldap-injection-cve-2017-14596/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/711-20170902-core-ldap-information-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T18:29:01.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by bearerbox."
      }, {
        "lang" : "es",
        "value" : "Los demonios del servidor en Kannel 1.5.0 y anteriores crean un archivo PID tras eliminar privilegios a una cuenta no-root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no root para modificar el archivo PID antes de que un script root ejecute un comando \"kill `cat /pathname`\". Esto se ha demostrado con bearerbox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kannel:kannel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "EC10B108-C2D3-414A-A224-5595A7C099F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://redmine.kannel.org/issues/771",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.kannel.org/issues/771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T18:29:01.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command."
      }, {
        "lang" : "es",
        "value" : "bareos-dir, bareos-fd y bareos-sd en bareos-core en Bareos 16.2.6 y anteriores crea un archivo PID tras eliminar privilegios a una cuenta no root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no root para modificar archivos PID antes de que un script root ejecute un comando \"kill `cat /pathname`\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bareos:bareos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.2.6",
            "matchCriteriaId" : "88D2372E-F2FB-48E9-A1C6-1355ED75DC25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.bareos.org/view.php?id=847",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.bareos.org/view.php?id=847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T20:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the context of any logged in user in the Web UI visiting \"Traffic Monitor\" sections \"Events\" and \"All.\" As a side effect, no further events will be visible in the Traffic Monitor until the device is restarted."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema FBX-5313 en WatchGuard Fireware en versiones anteriores a la 12.0. Cuando se realiza un intento fallido de inicio de sesión en el punto de conexión de inicio de sesión de la interfaz XML-RPC, si el código JavaScript, codificado para ser consumido por los analizadores sintácticos XML, se embebe como valor del elemento usuario, el código será procesado en el contexto de cualquier usuario que haya iniciado sesión en la interfaz web y que visite las secciones de \"Events\" y \"All\" de\"Traffic Monitor\". Como efecto secundario, no podrán visualizarse más eventos en el monitor de tráfico hasta que se reinicie el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.12.4",
            "matchCriteriaId" : "1B6786D7-D193-4D19-9536-02F1F813EFEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Sep/22",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000L0HSAU&lang=en_US",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/09/18/Fixed-Fireware-XXE-DOS-and-stored-XSS-vulnerabilities-discovered-by-Sidertia",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Sep/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000L0HSAU&lang=en_US",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/09/18/Fixed-Fireware-XXE-DOS-and-stored-XSS-vulnerabilities-discovered-by-Sidertia",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T20:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empty member element, the wgagent crashes, logging out any user with a session opened in the UI. By continuously executing the failed login attempts, UI management of the device becomes impossible."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema FBX-5312 en WatchGuard Fireware en versiones anteriores a la 12.0. Si se intenta iniciar sesión en la interfaz XML-RPC con un mensaje XML que contiene un elemento de miembro vacío, se produce el cierre inesperado de wgagent, cerrando la sesión de cualquier usuario con sesión iniciada en la interfaz de usuario. Si se ejecuta continuamente el intento fallido de inicio de sesión, la gestión de la interfaz de usuario del dispositivo se volverá imposible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.12.4",
            "matchCriteriaId" : "1B6786D7-D193-4D19-9536-02F1F813EFEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/540427",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/09/18/Fixed-Fireware-XXE-DOS-and-stored-XSS-vulnerabilities-discovered-by-Sidertia",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/540427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sidertia.com/Home/Community/Blog/2017/09/18/Fixed-Fireware-XXE-DOS-and-stored-XSS-vulnerabilities-discovered-by-Sidertia",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T21:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, una excepción de punto flotante ocurre en la clase ImageStream en Stream.cc, lo que podría desembocar en un ataque al administrar archivos PDF maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102854",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T21:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an \"Add New FAQ\" action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en inc/PMF/Faq.php en phpMyFAQ hasta la versión 2.9.8 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el campo Questions en una acción \"Add New FAQ\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-10-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/144280/phpMyFAQ-2.9.8-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42761/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-10-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://packetstormsecurity.com/files/144280/phpMyFAQ-2.9.8-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42761/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T21:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the \"Title of your FAQ\" field in the Configuration Module."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en phpMyFAQ hasta la versión 2.9.8 permite que atacantes remotos inyecten scripts web o HTML mediante el campo \"Title of your FAQ\" en el módulo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-10-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/30b0025e19bd95ba28f4eff4d259671e7bb6bb86",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144603/phpMyFAQ-2.9.8-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42987/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyfaq.de/security/advisory-2017-10-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/30b0025e19bd95ba28f4eff4d259671e7bb6bb86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144603/phpMyFAQ-2.9.8-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42987/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T23:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Portus 2.2.0 has XSS via the Team field, related to typeahead."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Portus 2.2.0 en el campo Team, relacionado con typeahead."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:portus:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D7165-5106-44D7-80CD-50405BE41787"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SUSE/Portus/pull/1425",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SUSE/Portus/pull/1425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-20T23:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: (1) it relies only on the return error of the Bind function call to determine whether a user is authorized (i.e., a nil return value is interpreted as successful authorization) and (2) it is used with an LDAP server allowing unauthenticated bind."
      }, {
        "lang" : "es",
        "value" : "En el paquete ldap.v2 (también conocido como go-ldap) hasta la versión 2.5.0 para Go, un atacante podría ser capaz de iniciar sesión con una contraseña vacía. Este problema afecta a una aplicación que usa este paquete si se cumplen las siguientes condiciones: (1) solo depende del error de retorno de la llamada de función Bind para determinar si un usuario está autorizado (por ejemplo, si se interpreta un valor nulo como una autorización con éxito) y (2) se emplea con un servidor LDAP que permita el enlace sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-ldap_project:ldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.0",
            "matchCriteriaId" : "5AFC31F6-1078-4377-AEF0-6249089C93B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-ldap/ldap/commit/95ede1266b237bf8e9aa5dce0b3250e51bfefe66",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/go-ldap/ldap/pull/126",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-ldap/ldap/commit/95ede1266b237bf8e9aa5dce0b3250e51bfefe66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/go-ldap/ldap/pull/126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12214",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to the OAMP and sending a crafted HTTP request. A successful exploit could allow the attacker to gain administrator privileges. The attacker must successfully authenticate to the system to exploit this vulnerability. This vulnerability affects Cisco Unified Customer Voice Portal (CVP) running software release 10.5, 11.0, or 11.5. Cisco Bug IDs: CSCve92752."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la funcionalidad de reinicio de credenciales OAMP (Operations, Administration, Maintenance and Provisioning) para Cisco Unified Customer Voice Portal (CVP) que podría permitir que un atacante autenticado remoto obtenga privilegios elevados. Esta vulnerabilidad se debe a la ausencia de una validación de entrada correcta. Un atacante podría explotar esta vulnerabilidad autenticándose en el OAMP y enviado una petición HTTP manipulada. Una explotación con éxito podría permitir a un atacante obtener privilegios de administrador. El atacante debe autenticarse con éxito en el sistema para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a las versiones 10.5, 11.0 o 11.5 del software que ejecute Cisco Unified Customer Voice Portal (CVP). Cisco Bug IDs: CSCve92752."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_customer_voice_portal:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D653797-3076-43A5-9AD3-4B56CA0D563F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_customer_voice_portal:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6564540-1719-474D-8825-0D3A2AEB3222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_customer_voice_portal:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0E5D57-F461-41FD-B0AA-136F7783ECE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100931",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039411",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cvp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cvp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12215",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an affected device to run out of memory and stop scanning and forwarding email messages. When system memory is depleted, it can cause the filtering process to crash, resulting in a denial of service (DoS) condition on the device. This vulnerability affects software version 9.0 through the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. Cisco Bug IDs: CSCvd29354."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de filtrado de mensajes de correo de Cisco AsyncOS Software para Cisco Email Security Appliance podría permitir a un atacante autenticado remoto provocar que el dispositivo afectado agote su memoria y deje de escanear y reenviar mensajes de correo. Agotar la memoria del sistema puede provocar el cierre inesperado del proceso de filtrado, resultando en una denegación de servicio (DoS) en el dispositivo. Esta vulnerabilidad afecta desde la versión de software 9.0 hasta la primera distribución corregida de Cisco AsyncOS Software para Cisco Email Security Appliances, tanto para máquinas virtuales como físicas, si el software se configura para aplicar un filtro de mensaje o de contenido a los archivos adjuntos de email entrantes. Esta vulnerabilidad no se limita a reglas o acciones específicas para un filtro de mensaje o de contenido. Cisco Bug IDs: CSCvd29354."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBDE866-1A7E-4D06-9753-09CA2748E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B4BD6E-05A1-46F8-AD08-C57A15DAD389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE65F11-D473-404B-AA99-68EFBC6855DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC71421-BBED-4EEB-991A-650698F1862A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A838252C-3B2A-4D80-99AA-9C88D13D751C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA5A67-D93C-4AAF-A8CB-E3CB1ECAD7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E7EB49-7E83-44DB-8462-AE1241A239D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100920",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039414",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-esa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-esa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12219",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to the inability to handle many large IP fragments for reassembly in a short duration. An attacker could exploit this vulnerability by sending a crafted stream of IP fragments to the targeted device. An exploit could allow the attacker to cause a DoS condition when the device unexpectedly reloads. Cisco Bug IDs: CSCve82586."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la gestión de los fragmentos de IP para Cisco Small Business SPA300, SPA500, y SPA51x Series IP Phones que podría permitir a un atacante autenticado remoto provocar que el dispositivo recargue de manera inesperada, provocando una denegación de servicio (DoS). Esta vulnerabilidad se debe a la incapacidad para gestionar muchos fragmentos de IP largos para reensamblarlos en un espacio de tiempo pequeño. Un atacante podría explotar esta vulnerabilidad enviando una serie de fragmentos de IP manipulados al dispositivo objetivo. Su explotación podría permitir a un atacante provocar una denegación de servicio cuando el dispositivo recarga de manera inesperada. Cisco Bug IDs: CSCve82586."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_301_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E955BFE-A202-492C-B0A2-1EC620806988"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE3C04F-884C-4CD1-8503-DB60CCC1B1F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_303_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED774745-8D65-422A-888F-37D3E71C1682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_303:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04B0F29-5620-4714-A151-7CDA2B9D8F2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_500ds_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8347D-0E1A-4E00-9E95-ADC376F867B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_500ds:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3C90F-011D-454C-8E0C-92E72A6EFE1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_500s_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66A6032-B44B-486B-8522-6DB99314BDEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C72E35-F124-4D09-AA68-0678ACBA590D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_501g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29312DC7-EFF2-4E17-A22B-76F5F8638E7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_501g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A258316-4DB6-47AC-90C0-CB9EF777E151"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_502g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481F1A9-4F99-4AB7-94B7-C7768370D4D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_502g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DF893E-7E9E-419B-8E7C-E846333646BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_504g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07646977-B2A5-4311-9AFE-605FDC694855"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_504g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F78AAB2-8ECD-4FAA-8A2A-9035F5C59597"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_508g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A002C4EF-8259-4896-A748-57412A8D3375"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_508g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26A21E-CD32-4DED-8A31-4CCA1C4DD642"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_509g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E77DAF-E479-4F52-88A7-7189B326429D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_509g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4373DD-753A-46A6-BB96-0488EA52157E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_512g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A432C3A-C720-465E-9916-C329718BABCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_512g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBA0C4D-4BB6-455D-8355-F4FACC5D721C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_514g_firmware:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EF3707-FE37-425B-9C0A-297CB62B28A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_514g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97551DEA-85F9-4A38-A8AC-F477CB7ABC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100926",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039413",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-spa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-spa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12248",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.357",
      "lastModified" : "2025-07-31T15:03:24.870",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by persuading a user to click a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76835."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código framework de red de Cisco Unified Intelligence Center Software podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en el sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web del software afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que entre a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código de script arbitrario en el contexto del sitio afectado o permitir que el atacante pueda acceder a información confidencial del navegador. Cisco Bug IDs: CSCve76835."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "060AFE51-F470-4B14-8D74-8B721129A37E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100921",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039408",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12250",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization (AO) related process to restart, causing a partial denial of service (DoS) condition. The vulnerability is due to lack of input validation of user-supplied input parameters within an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request through the targeted device. An exploit could allow the attacker to cause a DoS condition due to a process unexpectedly restarting. The WAAS could drop traffic during the brief time the process is restarting. Cisco Bug IDs: CSCvc63048."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web HTTP para Cisco Wide Area Application Services (WAAS) podría permitir a un atacante remoto no autenticado provocar que un proceso HTTP relacionado con la optimización de aplicaciones se reinicie, provocando una denegación de servicio parcial. Esta vulnerabilidad se debe a la falta de validación de entrada de parámetros de entrada proporcionados por el usuario en una petición HTTP. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP manipulada al dispositivo objetivo. Su explotación podría permitir a un atacante provocar una denegación de servicio por el reinicio inesperado de un proceso. WAAS podría tener una caída de tráfico durante el breve período de tiempo en el que se reinicia el proceso. Cisco Bug IDs: CSCvc63048."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1C2B85-1129-49EA-9414-F44B7A911D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100928",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039415",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-waas",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-waas",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12252",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicious copy of a specific, nondefined DLL file instead of the DLL file it was expecting. An attacker could exploit this vulnerability by placing an affected DLL within the search path of the host system. An exploit could allow the attacker to load a malicious DLL file into the system, thus partially compromising confidentiality, integrity, and availability on the device. Cisco Bug IDs: CSCve89785."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco FindIT Network Discovery Utility podría permitir que un atacante local autenticado realice un ataque de precarga de DLL, pudiendo causar un impacto parcial en la disponibilidad, confidencialidad e integridad del dispositivo. Esta vulnerabilidad se debe a que la aplicación carga una copia maliciosa de un DLL específico pero no definido en vez del archivo DLL esperado. Un atacante podría explotar esta vulnerabilidad ubicando un DLL afectado en una ruta de búsqueda del sistema anfitrión. Su explotación podría permitir que el atacante cargue un archivo DLL malicioso en el sistema, comprometiendo parcialmente la disponibilidad, confidencialidad e integridad del dispositivo. Cisco Bug IDs: CSCve89785."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:findit_network_discovery_utility:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EDE9FA-4191-4033-BE35-5E6F582A8304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100923",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-findit",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-findit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12253",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.687",
      "lastModified" : "2025-07-31T15:03:24.870",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCve76872."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en Cisco Unified Intelligence Center que podría permitir que un atacante remoto no autenticado ejecute acciones no deseadas. La vulnerabilidad se debe a la ausencia de medidas de defensa contra ataques de Cross-Site Request Forgery (CSRF). Un atacante podría explotar esta vulnerabilidad engañando al usuario de una aplicación web para que ejecute una acción adversa. Cisco Bug IDs: CSCve76872."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "060AFE51-F470-4B14-8D74-8B721129A37E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100919",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039409",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12254",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.780",
      "lastModified" : "2025-07-31T15:03:24.870",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site scripting attack. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attacker to execute arbitrary code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76848, CSCve76856."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Unified Intelligence Center podría permitir a un atacante remoto sin autenticar que realice un ataque Cross-Site Scripting (XSS) basado en DOM (Document Object Model). La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario para que entre a un enlace malicioso o interceptando una petición de usuario e inyectando el código malicioso. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código arbitrario en el contexto del sitio afectado o permitir que el atacante pueda acceder a información confidencial del navegador. Cisco Bug IDs: CSCve76848, CSCve76856."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "060AFE51-F470-4B14-8D74-8B721129A37E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100922",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039410",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12255",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due to insufficient input validation of commands entered in the CLI, aka a Restricted Shell Break Vulnerability. An attacker could exploit this vulnerability by entering a specific command with crafted arguments. An exploit could allow the attacker to gain shell access to the underlying system. Cisco Bug IDs: CSCve70762."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de Cisco UCS Central Software podría permitir que un atacante autenticado local obtenga acceso shell. La vulnerabilidad se debe a una validación insuficiente de entradas de los comandos introducidos en la interfaz de línea de comando. Esta vulnerabilidad también se conoce como \"Restricted Shell Break Vulnerability\". Un atacante podría explotar esta vulnerabilidad introduciendo un comando específico con argumentos manipulados. Un exploit podría permitir que un atacante obtenga acceso shell al sistema subyacente. Cisco Bug IDs: CSCve70762."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:1.5\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13B4E44-9E29-49C5-9498-40D3DCEAB440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_computing_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301FBC67-7946-479D-ACC5-D54CBD698291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100932",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039412",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-ucs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-ucs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T05:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en la función PostscriptDelegateMessage en coders/ps.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/722",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T05:29:00.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en la función sixel_output_create en coders/sixel.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100941",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T05:29:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en la función sixel_decode en coders/sixel.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100943",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/720",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/721",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6720",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-21T05:29:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema Secure Shell (SSH) del software de Cisco Small Business Managed Switches podría permitir que un usuario remoto autenticado provoque la recarga del switch afectado. Esto resultaría en una condición de denegación de servicio. Esta vulnerabilidad se debe al procesado incorrecto de las conexiones SSH. Un atacante podría explotar esta vulnerabilidad iniciando sesión en un switch afectado mediante SSH y enviando un mensaje SSH malicioso. Esta vulnerabilidad afecta a los siguientes productos Cisco cuando SSH está activado: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches y ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "94B04BB6-59CF-44E5-A0D3-BE67B5C57854"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFEF3C3-0C7C-4359-A45F-00152ACAB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "037DBB1B-D044-44E4-A52A-567BD1CE2C69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19890DBE-F1B9-4454-8738-AC2AC6704C75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "B1E08101-09E4-4E03-B47B-BB5961491E67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1772C3-48DB-4BEF-9F12-CDCC3BBFA0E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "315B9FBD-8132-4192-9F10-4C11258ED524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD7CDE3-7247-4EA9-8A72-7ABC961BD895"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "DB95AE0E-2534-4BAC-9480-7BC17C5EB1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7B70CB-9D7A-4637-8A51-634157F7AC85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "284A43F4-C4AB-48AD-B4D4-EFB61792964C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5248F85-411D-4ED9-983C-A28A90C8FC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "DC338E75-CBEF-4010-B3C9-24B78DF05414"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F6741-AA56-47EA-998C-78FD7F6B01CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "90A4C654-6C95-4D65-9ADB-7D53A03C6B53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C96B794-16D3-46FE-8A2B-262BD38994E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "C37A7ED8-E54E-44D4-9612-9114F8FDE553"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5307DEF-DCD1-417A-B649-FF4DCE66193E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "2A2B6310-E2C4-46D3-AE0C-2E318870E239"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F6D7AC-2ACB-4693-AB8E-C700B99C5BF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "DB328ED1-9705-440D-862D-F52B4D195363"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9054C3D1-BA1A-4BAC-8834-88673B804E4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "2D84629A-B96B-4492-9988-94A5BB92D161"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B44981-5C59-4328-A7DB-FBF50F9C92C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "BC9DAE47-423E-45E7-B6DB-4C104371D0F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D5109D-C78B-4362-B000-0AA073FCC843"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "8DA4E70C-C089-4B70-A905-356266C03D68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D909B9-5B11-401E-8484-D6CD39D64142"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "6EEDB984-EC17-414D-9514-8595D168D902"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8124725E-8340-43BC-BEBB-BC39E3AE7368"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "A4E701E1-BB13-4742-B925-409DECE26E0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74DB8D8-B79B-4DAE-BF88-98C1F518E76D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "AEC87CC6-7F24-46BA-A1A9-8C0DF40C3E51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765DECDB-4234-4444-B78F-01C1DCBAD8FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "B10721A8-98C5-4EBD-B208-553FD5BCCE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A677CE-4360-4780-ABF9-466C45CB19E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "0C4AD929-F658-4BCA-B5A3-9142C6380947"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C97D56-2E3C-4F36-89E2-BC169AED3CC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "BC2011B9-CEDD-46E4-8784-FAEB90E2A4F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E26EE1D-763F-4893-9997-F4C1CE7A1089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "AF3B19AA-1F87-4D61-817F-AED3E5C6ABAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C324F7E3-2088-452F-B049-519A9D25C9B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "886DD687-6981-4616-B4E9-3ED1F0949CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04042998-72B6-4215-9264-CC563E51D9CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "17425E0B-2C3C-411B-8694-AFA4275F1A39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4882366A-9450-47BE-BE70-CC3A9D2F5275"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "761E4820-0E4A-44F0-B738-979116586A46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B402FBC0-91FC-471D-9D8A-C71F4FECF338"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "6CE91665-49EC-41F0-90F0-D2C03A0A2E81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2B761-E591-42B6-B62F-63A6D41F4FAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "D753EBFF-AE47-465F-8B40-30EA41C01C2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9DF9C4-9D06-4449-8AF0-8322C6B77F6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "C0288DEE-2215-474C-8833-2F4EA16DBA0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C3B5A2-CAE6-4E75-A1A3-4FCB1C62A7A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "21890651-67CF-4EA4-92EF-89A9060100FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6035EA-0F55-4C76-9E2F-DD4938576D1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "8EF8919D-ED09-421C-B649-36795689F1E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E534B2-12EA-489B-A939-4F1965B5EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500xg-8f8t_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "E0F97911-5452-4C23-A2FC-14DEC4E47433"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500xg-8f8t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FE0E3E-5AB4-4BBA-A787-072799BF3EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "582BF27D-BC0F-4721-BEEA-6B9099BBFF2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0F8958-8059-411B-86C8-40B1073C80C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "EC186187-7420-4164-A606-B5F10DC56105"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218D6018-551C-46B8-AE27-F88E6052F37B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "9975567A-C169-45B9-99B1-500A96391C53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB8DE78-E398-458B-98EF-EEEB6E219BAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "0DC11D96-72FB-40E8-BFE1-4AFDA00DD41B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E443C685-F000-4F89-ADEA-7084138018D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "9DEBD433-A018-4AFB-992E-675C4CC5D2A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0779C5EE-C145-4C28-8F60-EE692409102D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "B0C13803-5052-423C-8C93-2C54DBCBCCDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D4AD6-C5FD-40D8-B002-2B784EC88B89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "12F620D4-6023-4B41-B7DF-48A72A5C0A78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40273E59-7C60-4094-B9FC-A633A2F23E61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "E98BACEF-AF33-4900-A2EE-7298C0637C3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A201E5-0603-4C96-8F4B-87934B7B99D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "65E9F796-2B47-4596-B0D1-A586AF9F3C8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9D4D4-EF09-4862-B62A-94913AEFA2BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "17A4C75C-5651-46DF-9E9F-0F09841B32A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0093FE2A-3D4C-4435-AE35-D213C9700771"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "F54552BD-1505-4D65-A5DA-0BD476B164A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D71EE-64CC-4966-98D1-C0697816120A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "2EB24D4F-2EFF-478A-A1F1-ADC4D2692859"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E99C3C2-0B98-4108-8102-80132BF47A32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-350g-52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "5ED0BEAE-B725-40B1-A8AF-F747A5D3EC0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-350g-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6812853E-C083-4841-A467-91130ED194BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-350g-52dc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "D486D2C4-DF6F-4E8F-8BD0-5891AA8AC763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-350g-52dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A7AB18-C75F-4C63-9132-140EFC46E3C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "3436FDC5-9FC4-41DC-8989-98F6EC0BE2BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B70093-E9FE-410A-973E-CE847F08F43A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-550x-48dc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8.06",
            "matchCriteriaId" : "F81A5EB6-94AA-455E-9609-035A18DDF374"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-550x-48dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3503F68-CF84-468E-9A40-9F98875DD1C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "4BC6336C-2351-4192-99DF-3C0A201F7593"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79843C24-2CE8-4040-9C04-79902D8F741D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "B8141B0C-61C4-4F0B-890C-9540B579386E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD650E51-E248-4CFD-8163-72717B66D675"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "CD930606-ED38-4E11-85FB-2520A85285AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B36A173-5C14-4B38-B3DD-CD83B19AF94B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg355-10p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "7C9FD643-13C5-4327-90B8-DEE683658874"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg355-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4432E33-8F3C-4C51-8AE3-C53333A867E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "9BD33FFF-FE0E-4852-9F56-5843433D7823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F9351-FA0C-4648-A2A6-ACFF6C8FD157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "6CC54297-D4E6-4786-8A98-D965F9EFD67A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8122322F-6104-4978-9E00-40437365FF67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "93099CC0-A7ED-4E27-A4FC-3FD6C4D98193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11548FB9-ADB1-4281-B89B-6D61836072DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "611F027A-1FC2-449D-AF7D-FF0D7886177B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF58ED1-AECE-435C-8F8F-6053C44E01C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "34E3F010-D1E9-4238-AB19-975ED5EFB5E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BE66F3-51C8-42D8-927A-5BA0B9B072EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "9F0F5B31-B746-4EB5-AB6A-E13602A1A3FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DE3B15-DD70-445E-936C-0C9D5C3F1450"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-2f10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "7DACF69E-8AD8-4764-89A1-F158895F3084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-2f10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C65522C-E250-408C-8A89-AFE4909804D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "EFFE932F-6DCC-42B0-84FF-D172388102BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620FE5-567B-4B78-910D-14819E2CDE3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-24t_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "E3AB71D4-B89C-4A08-8BF8-EEB67F3102B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-24t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEA8A38-C545-49AA-812F-8668EED9B23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-48t_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "4BC96BB1-2482-4ADC-BF0D-D6D7AEB97017"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-48t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F986FD6-A139-43CA-9D83-40CAA8D62B32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "F4B1EEA1-D5B9-4D87-A2D0-7FB57163D4B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB21D371-D443-40FE-8DFF-3DD4A9655471"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "E40B7BF3-701B-49B0-ACDA-DF4D8E88165D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FC4FC7-5DF4-4FE5-87A5-3B897FAFD72E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "CDA6CF9D-12BB-438D-807A-E4D3CE24CF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9879BE9-D4FA-4EEA-8852-B972299220E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "F18B486C-C92E-4D4F-8206-EB8E9A3850AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613300D2-A079-415A-B9F7-178B8048AA61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "B6E9C557-F886-40AC-9B17-A3BB1773C0C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA11905-1953-4EEB-95CE-3BDB619D0F72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "B885C5F5-C236-4C5F-9CAC-76F1E9464838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D1DE6B-6E09-40CF-9507-867ECB183A30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-16ft_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "7FC04842-1D72-4288-BA8C-EABA5AAB904B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-16ft:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D9BEB5-78FE-49EB-92BE-6597E7608E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24ft_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "C56E6CAD-F314-4D17-8110-9C88C27D1A07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24ft:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDE246-7DF9-486D-A5B9-5596FE0AC582"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "5F2519C2-F0EE-4F99-B537-23A8A48E865C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52D0E9C-FC04-4A45-81D5-A335B30F725E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "9298FA5A-9B5F-4DCC-8FB3-F71BE7D34988"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CAD50CE-8D02-4FD9-965A-7C14D146B52D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "50362982-A566-4D4C-B395-9DE48CDAE5A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39E214D-A4B7-460C-9402-8F94336B30A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "2FB61FC6-4608-4EBE-A95F-198868E6BCF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297A662D-BD11-4021-8F19-946CA4BCF8D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "96838C5E-F1B8-401F-8A1A-6BB91756912A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADB1D69-CBDC-4045-A806-087878560EF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "12014E4E-78E9-48E7-915A-2166F5237BFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B88075-F579-492C-B87C-5E4291D269B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "F503F055-A8A3-4782-99C8-02826AC2D512"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605B8DE5-56EB-4FFF-BC04-1B3A38762727"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24mpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "B0D1C787-27C4-4492-862F-C959E1EE3372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C940275E-41A8-470D-AD97-AB6EC5A75CEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "22543B6D-96EE-4C88-84D5-6350DD0F2FB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235AAB5A-9D0A-4864-89E2-D69D1D8A79D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "43741AC4-4CD1-4F02-BC92-5A801C449DCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DCE55-B7D5-4D63-9693-B42FAA9243B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "41C1DC6C-D860-4061-B8EE-2DBDA787F1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA6BED3-2564-4A7C-91DC-F843E301A35E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "9E265502-609E-4E6F-9817-9341E1AA80FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C2EAA-CD47-4D76-BBC6-C59D531AB1D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "823D486C-6F51-4C37-94CE-C53D6F29454E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDF26D7-B3B5-47CA-94E9-B14BEFE02318"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "F960F9BF-90C1-4CDB-BAD0-CFB053E85928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC0655-0F02-4397-881F-CFB6DAC3AA3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "BA4ED222-F963-425C-A99F-D4CACB314747"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C374EB87-A4C6-43FB-B42E-DEA973375EC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "63B2A832-8E66-49CF-99B6-9CDD1B1AD400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903E59DA-DE59-4CD4-BE32-B91DDA1DA07D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.130",
            "matchCriteriaId" : "1B89D6B8-6A7B-4096-A3F7-7E24EBE8CB16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6AFC45-9ECC-4D4A-80BF-20F49C83A57A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100933",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp."
      }, {
        "lang" : "es",
        "value" : "En sam2p 0.49.3, existe un desbordamiento de búfer basado en memoria dinámica (heap) en la función pcxLoadImage24 del archivo in_pcx.cpp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C002E-B104-49DF-9724-ECEF53735DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element."
      }, {
        "lang" : "es",
        "value" : "En sam2p 0.49.3, la función in_xpm_reader en in_xpm.cpp tiene un error en la propiedad signedness de un número entero, provocando su cierre inesperado a la hora de escribir en un elemento array fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C002E-B104-49DF-9724-ECEF53735DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation."
      }, {
        "lang" : "es",
        "value" : "En sam2p 0.49.3, existe un desbordamiento de enteros en la función pcxLoadImage24 del archivo in_pcx.cpp, provocando una operación de escritura no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C002E-B104-49DF-9724-ECEF53735DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En sam2p 0.49.3, la función pcxLoadRaster en in_pcx.cpp tiene un error en la propiedad signedness de un número entero, provocando un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C002E-B104-49DF-9724-ECEF53735DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184."
      }, {
        "lang" : "es",
        "value" : "Xiph.Org libvorbis 1.3.5 permite la ejecución remota de código después de liberar memora no inicializada en la función vorbis_analysis_headerout() en info.c cuando vi->channels<=0. Este problema es similar al bug 550184 de Mozilla."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28797143-02BB-4A25-BA9D-E5220F13011F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.xiph.org/xiph/vorbis/issues/2328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3569-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.xiph.org/xiph/vorbis/issues/2328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3569-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis()."
      }, {
        "lang" : "es",
        "value" : "En Xiph.Org libvorbis 1.3.5, existe una vulnerabilidad de lectura de array fuera de límites en la función mapping0_forward() en mapping0.c, lo que puede provocar una denegación de servicio cuando se opera con un archivo de audio manipulado con vorbis_analysis()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28797143-02BB-4A25-BA9D-E5220F13011F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.xiph.org/xiph/vorbis/issues/2329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3569-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.xiph.org/xiph/vorbis/issues/2329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3569-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T07:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "En libsndfile 1.0.28, existe un error de división entre cero en la función double64_init() en double64.c, lo que puede provocar una denegación de servicio cuando se reproduzca un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erikd/libsndfile/issues/318",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/erikd/libsndfile/issues/318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T13:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values."
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera de límites en la función d2alaw_array() en alaw.c de libsndfile 1.0.28 podría acabar en un ataque remoto de denegación de servicio o de fuga de información relacionado con la mala gestión de los valores de puntos flotantes NAN e INFINITY."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erikd/libsndfile/issues/317",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-65",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/erikd/libsndfile/issues/317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T13:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values."
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera de límites en la función d2ulaw_array() en ulaw.c de libsndfile 1.0.28 podría acabar en un ataque remoto de denegación de servicio o de fuga de información relacionado con la mala gestión de los valores de puntos flotantes NAN e INFINITY."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233F513A-E8C3-4B55-BA92-6A814D3A7CED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erikd/libsndfile/issues/317",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-65",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/erikd/libsndfile/issues/317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T13:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection."
      }, {
        "lang" : "es",
        "value" : "En OTRS (Open Ticket Request System) en versiones 3.3.x anteriores a la 3.3.18, 4.x anteriores a la 4.0.25 y 5.x anteriores a la 5.0.23, los usuarios autenticados remotos pueden utilizar los permisos de escritura de estadísticas para obtener privilegios mediante la inyección de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4C9653-D2B6-4A2E-A1E3-59D9E47D4F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F950A3B9-9347-4271-9AE2-816BB37F2FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "78F12260-F695-492E-9F93-34873E8CD42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFBFFA0-A57E-44A8-9D37-25AD4D0D36F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ACF399-6BD0-4753-A8FA-A7031C5E898D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "E314819D-7CF9-4DCC-8007-CFE73F3138A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1D286118-DA1F-43A4-9B0B-9A340887EA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E2C445-2CC0-4F4E-BF4E-C2987E273448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB02A9C-AE23-4DF6-88E7-A606A3483036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AEB95F-BF0E-42DE-BB47-3CB10BB27DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AAC1C3-14CE-41F9-A371-769BEF17551E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB04AB6-A380-4620-A196-A295FE7C170D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB92BA3D-0A1A-47A9-ABFE-04D66F6BE7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E537B043-413F-4EA3-A6E5-8711DA1C53FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6931F41-690F-4B4C-A637-FBB18DB0895B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454607A9-6CAA-49F1-81D6-A2D1CC468C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8FD518-C35A-4E90-A8DB-F716F30614F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DAA2B2-9A7B-4948-BA48-3AFC5688DD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC9ADBF-6530-4135-8481-7B12DAA86479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64505573-B426-4E5A-9182-FD716E009351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55560A17-9FCD-4AD4-9339-B6472D89520F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF1A81F-89F3-4F0A-A04F-0DD461C433EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9677F3F-8EF5-40C0-8CDD-DB9B03BDD175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:3.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27751304-9036-4710-B7A5-BEC55AF8B2C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "99632B5B-563F-434F-B49E-34EE29B6EAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBCC863-CE5B-43E2-8331-DDA8AE68E6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9CDD3C-6B34-4020-B692-CDE682254B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "46071699-8EA1-46BA-ADA1-5F572AF8EF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AC339E-A6CC-4621-A4C4-6A39C30BCE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "68B923FE-6F43-44FA-8445-6019127DCA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD316D98-1DC4-4DC7-A488-851E94CC5263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9B81FE-4BA6-46B5-B390-1B05CB33C648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E38191D-DD62-476D-BB4A-80094B0FFD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875C5002-3E08-47A4-825C-282E6476507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE3222C-1C90-43D1-9E06-A9F867880900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6257D3-FD70-486D-B11A-77FE5904FFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6C894-111B-4432-B93B-989C8007CB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADCDD21-3665-4460-845F-DE9851607673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB52A359-2564-4E8D-929A-5402D04CDED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE86BC8-E092-4436-B632-8D117980D242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C2FF70-9B69-43FD-872D-8E6F1CD59634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2661294-7039-4C6A-8BFA-D790E93415C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B3DBFC-A962-44C3-810D-A9538E328E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DFB908-1877-4C6F-BAFB-45B3B17CBE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B96AE1B-9B8B-40D9-99AA-797859FA0EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C427B-DC2B-41F7-B3FC-BF0D51706F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B4648D-E3C7-4C5D-897C-CC27F8082AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908263DC-2F85-4ED9-AF4A-884609B2A3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F64E91-CF0C-4C48-94F0-0474A3D484F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974BFF95-01AC-454D-97CC-A82CA8823FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654C711F-2C10-4E7A-BFFF-9AD911576CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF723BA-E772-48F8-8B45-753CD372DCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00DD7D5-EBB4-4E7F-8669-FA96FF9E6B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906E3FE6-2516-474C-9F91-539A77E0085C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA73A62B-BFA7-4793-96E6-BB832418A259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE138E72-61A0-4495-86CE-4342B93049CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C473A55A-677C-4D0B-9C0D-D1B3857AE8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D977D160-7B24-4ADD-9818-4C93A9E7D865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "472ACCD4-1B3D-4468-B084-D4E98032FF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8838C987-53ED-4E05-99D1-57A56A899C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C00BB3-3349-4DB3-B753-B36B88E1B9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D567DC5-332F-4F95-BA0B-B076661AB14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361E43E-9140-49DC-9F06-865BDFC3A60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DF625C-C5B1-4B7F-BDB4-34F751093104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0124AD54-B58F-4D36-B45F-B836C321067F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D36D023-BE8C-47EF-934E-4E808FA3C0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D7CD3E-A98A-4FBD-B267-E69E1711B741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08621604-0098-45F9-9684-85973F4C3058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2209CD7C-0539-4A36-B40A-D437F6926444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F821217-A3A1-4CAC-9904-80543FD17808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE3BC26-B6CE-4A47-87EE-ABF098D0D553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B352C86-4538-4266-8FDE-AA8F4FD173AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E569B83B-4DDF-48FE-9143-57CE2D0EBA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B103C-3B32-4BD9-BE83-6E8B8D43F51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0052F432-313F-416F-A655-BB5E3E880915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E464C4-60E9-43C5-A42E-371B332C859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B011E9D-C067-4362-9181-EB568C59944D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FD254-B891-4911-9DBC-C55E67F13C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE23C83-B4A3-4996-82A5-E19D6D43E0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA401F3-9ADF-4725-825F-7E94AF6589BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91E306F-59EC-43AC-8208-38FBBB6D2989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0B0D2F-29F9-4648-BB4D-81A70E429872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2017/dsa-4021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-04-security-update-otrs-versions/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-04-security-update-otrs-versions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T14:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file."
      }, {
        "lang" : "es",
        "value" : "La función bark_noise_hybridmp en psy.c en Xiph.Org libvorbis 1.3.5 permite que atacantes remotos provoquen una denegación de servicio (acceso fuera de límites y cierre inesperado de aplicación) o, probablemente, provocar cualquier otro tipo de impacto mediante un archivo mp4 modificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28797143-02BB-4A25-BA9D-E5220F13011F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101045",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-36",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10996",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, es posible que haya un acceso fuera de límites en c_show() ya que compat_hwcap_str() no finaliza en un valor nulo. Este error no es fatal. Sin embargo, el dispositivo podría cerrarse inesperadamente o reiniciarse con un acceso fuera de límites o no autorizado a la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10997",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, una escritura en el registro PCIe podría provocar que se corrompa la memoria del kernel utilizando un nodo debugfs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10998",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is fully within the valid region. If the buffer length is large enough then the address + length operation could overflow and produce a result far below the valid region."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, la longitud del búfer en audio_aio_ion_lookup_vaddr, que es la entrada del usuario, se acaba utilizando para validar si el búfer se encuentra por completo en la región válida. Si la longitud del búfer es lo suficientemente grande, entonces la operación \"dirección + longitud\" podría desbordarse y producir un resultado muy inferior a la región válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10999",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing locks."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, una serie de llamadas concurrentes en el ioctl RMNET_IOCTL_ADD_MUX_CHANNEL en el driver ipa wan podría provocar la corrupción de la memoria debido a la ausencia de \"locks\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11000",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, en una función del driver del kernel de ISP Camera, una comprobación en los límites incorrectos podría provocar una escritura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11001",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, la longitud de la dirección MAC no se comprueba, lo que podría provocar una lectura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11002",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, cuando se procesa un subcomando del fabricante, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11040",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, cuando se lee desde los nodos sysfs, se podría acceder a más información de la que se debería."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11041",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in another."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, se puede acceder a un búfer de salida en un hilo y se podría liberar en otro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12153",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-21T15:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un fallo de seguridad en la función nl80211_set_rekey_data() en net/wireless/nl80211.c en el kernel de Linux hasta la versión 4.13.3. La función no comprueba si los atributos requeridos están presentes en una petición Netlink. Esta petición la puede enviar un usuario con la capacidad CAP_NET_ADMIN y podría provocar una desreferencia de puntero NULL y un cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.3",
            "matchCriteriaId" : "FA1E2C32-ED0D-4E2B-A313-448CC0545ED2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/437",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100855",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1058410",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1491046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=150525503100001&r=1&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1058410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1491046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=150525503100001&r=1&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8247",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function \"msm_close\"."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, si hay más de un subproceso realizando la operación de apertura del dispositivo, éste podría abrirse más de una vez. Esto llevaría a que get_pid being sea llamado más de una vez, aunque put_pid solo se llamaría una vez en la función \"msm_close\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8250",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables \"nr_cmds\" and \"nr_bos\" number are passed across functions without any check. An integer overflow to buffer overflow (with a smaller buffer allocated) may occur when they are too large or negative."
      }, {
        "lang" : "es",
        "value" : "Las variables de número controladas por el usuario \"nr_cmds\" and \"nr_bos\" se pasan entre funciones sin ningún mecanismo de comprobación en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux. Podría ocurrir un desbordamiento de enteros o un desbordamiento de búfer (con un búfer más pequeño asignado) cuando éstos son demasiado grandes o negativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8251",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_update_cgc_override, 'stream_cfg_cmd->num_streams' is not checked, and could overflow the array stream_cfg_cmd->stream_handle."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, 'stream_cfg_cmd->num_streams' no se comprueba en las funciones msm_isp_check_stream_cfg_cmd y msm_isp_stats_update_cgc_override. Esto podría provocar el desbordamiento del array stream_cfg_cmd->stream_handle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8277",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client, if the client registers failed, it would be freed. However the client was not removed from list. Use-after-free would occur when traversing the list next time."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, si el registro de clientes fracasa en la función msm_dba_register_client, se liberaría. Sin embargo, el cliente no fue eliminado de la lista. Al volver a navegar por la lista, ocurriría un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8278",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, podría ocurrir un desbordamiento de búfer o de enteros al leer datos de audio desde un controlador sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8280",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, durante la operación de guardado y recuperación de datos de calibración wlan , existen algunas condiciones de carrera potenciales que podrían conducir a una fuga de memoria y a un desbordamiento de búfer durante el cambio de contexto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8281",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera puede permitir el acceso a la memoria ya liberada al consultar el estado de un evento mediante DCI en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux podría desembocar en una condición use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9676",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock."
      }, {
        "lang" : "es",
        "value" : "Podrían darse situaciones en las que se use memoria previamente liberada y condiciones de carrera al acceder a variables estáticas globales sin emplear un lock en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9677",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable \"ddp->params_length\" could be accessed and modified by multiple threads, while it is not protected with locks. If one thread is running, while another thread is setting data, race conditions will happen. If \"ddp->params_length\" is set to a big number, a buffer overflow will occur."
      }, {
        "lang" : "es",
        "value" : "En la función msm_compr_ioctl_shared en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, se podría acceder a la variable \"ddp->params_length\" y modificarla empleando múltiples subprocesos, siempre y cuando no esté protegida por locks. Si un subproceso se está ejecutando mientras otro establece los datos, ocurrirá una condición de carrera. Si se establece \"ddp->params_length\" con un número grande, ocurrirá un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9720",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur."
      }, {
        "lang" : "es",
        "value" : "Podría ocurrir una lectura/escritura fuera de límites en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux debido a un error por un paso (off-by-one)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9724",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, los permisos de nivel de usuario se pueden emplear para conseguir acceder a la memoria del kernel. Específicamente, el código de mantenimiento de la caché ION está escribiendo a una dirección proporcionada por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9725",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-09-21T15:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, durante la asignación de DMA, el tamaño de asignación se trunca, lo que permite que la asignación sea un éxito cuando debería fallar. Esto se debe a un tipo de tamaño de datos erróneo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T16:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials."
      }, {
        "lang" : "es",
        "value" : "Una contraseña embebida de tecn0visi0n para la cuenta dlxuser en TecnoVISION DLX Spot Player4 (en todas sus versiones conocidas) permite a los atacantes remotos iniciar sesión mediante una conexión por SSH y escalar privilegios para acceder como root con las mismas credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tecnovision:dlx_spot_player4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D8B45D-2CB7-48A4-8DB8-41D41D449CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144259/DlxSpot-Hardcoded-Password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144259/DlxSpot-Hardcoded-Password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T16:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution."
      }, {
        "lang" : "es",
        "value" : "Una subida de archivos arbitrarios en resource.php de TecnoVISION DLX Spot Player4 en versiones posteriores a la 1.5.10 permite a los usuarios autenticados remotos subir archivos arbitrarios, provocando una ejecución remota de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tecnovision:dlx_spot_player4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D8B45D-2CB7-48A4-8DB8-41D41D449CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144258/DlxSpot-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144258/DlxSpot-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T16:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL en la interfaz de administrador en TecnoVISION DLX Spot Player4 en versiones posteriores a la 1.5.10 permite a los usuarios remotos no autenticados acceder a la interfaz web como administrados mediante una contraseña manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tecnovision:dlx_spot_player4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D8B45D-2CB7-48A4-8DB8-41D41D449CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T16:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 1.5.3 de Mirasvit Helpdesk MX podría permitir que los atacantes remotos ejecuten código arbitrario utilizando los fallos a la hora de filtrar los archivos subidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasvit:helpdesk_mx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "5197B0D3-E716-4627-AEEB-B8EDF5F143F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.webshield.hu/vulnerabilities-found-webshield.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.webshield.hu/vulnerabilities-found-webshield.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T16:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de Cross-Site Scripting (XSS) en la interfaz administrativa en las versiones anteriores a la 1.5.3 de Mirasvit Helpdesk MX permiten que atacantes remotos inyecten scripts web o HTML mediante (1) el nombre del cliente o (2) el asunto en un ticket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasvit:helpdesk_mx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "5197B0D3-E716-4627-AEEB-B8EDF5F143F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.webshield.hu/vulnerabilities-found-webshield.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.webshield.hu/vulnerabilities-found-webshield.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h."
      }, {
        "lang" : "es",
        "value" : "AP4_AtomFactory::CreateAtomFromStream en Core/Ap4AtomFactory.cpp en Bento4 1.5.0-617 carece de mecanismos de verificación de valores NULL, lo que puede provocar una desreferencia de puntero NULL, fallo de segmentación y el cierre inesperado de la aplicación en AP4_Atom::SetType en Core/Ap4Atom.h."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "AP4_VisualSampleEntry::ReadFields en Core/Ap4SampleEntry.cpp en Bento4 1.5.0-617 utiliza datos de tipo carácter incorrectos, lo que puede provocar un subdesbordamiento de búfer basado en pila y una escritura fuera de límites, desembocando en una denegación de servicio (cierre inesperado de la aplicación) o incluso otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-underflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/03d1222ab9c2ce779cdf01bdb96cdd69cbdcfeda",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/190",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-underflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/03d1222ab9c2ce779cdf01bdb96cdd69cbdcfeda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en AP4_AtomSampleTable::GetSample en Core/Ap4AtomSampleTable.cpp en Bento4 1.5.0-617. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsampletablegetsample-ap4atomsampletable-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/2f267f89f957088197f4b1fc254632d1645b415d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsampletablegetsample-ap4atomsampletable-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/2f267f89f957088197f4b1fc254632d1645b415d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en la clase AP4_DataAtom en MetaData/Ap4MetaData.cpp en Bento4 1.5.0-617. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_dataatomap4_dataatom-ap4metadata-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/41cad602709436628f07b4c4f64e9ff7a611f687",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_dataatomap4_dataatom-ap4metadata-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/41cad602709436628f07b4c4f64e9ff7a611f687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en la clase AP4_HdlrAtom en Bento4 1.5.0-617. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación en AP4_StdcFileByteStream::ReadPartial en System/StdC/Ap4StdCFileByteStream.cpp, lo que da lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_stdcfilebytestreamreadpartial-ap4stdcfilebytestream-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/22192de5367fa0cee985917f092be4060b7c00b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/185",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_stdcfilebytestreamreadpartial-ap4stdcfilebytestream-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/22192de5367fa0cee985917f092be4060b7c00b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h."
      }, {
        "lang" : "es",
        "value" : "La clase AP4_HdlrAtom en Core/Ap4HdlrAtom.cpp en Bento4 1.5.0-617 utiliza datos de tipo carácter incorrectos, provocando una sobrelectura de búfer basada en memoria dinámica (heap) y el cierre inesperado de la aplicación en AP4_BytesToUInt32BE en Core/Ap4Utils.h."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bytestouint32be-ap4utils-h/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/5eb8cf89d724ccb0b4ce5f24171ec7c11f0a7647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bytestouint32be-ap4utils-h/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/5eb8cf89d724ccb0b4ce5f24171ec7c11f0a7647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en la clase AP4_HdlrAtom en Bento4 1.5.0-617. Esta vulnerabilidad tiene como consecuencia una lectura fuera de límites, lo que da lugar a una denegación de servicio remota o a una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_hdlratomap4_hdlratom-ap4hdlratom-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_hdlratomap4_hdlratom-ap4hdlratom-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en pila en AP4_BitStream::ReadBytes en layer3.c en Codecs/Ap4BitStream.cpp en Bento4 1.5.0-617. Esta vulnerabilidad provoca el cierre inesperado de la aplicación, lo que puede dar lugar a una denegación de servicio remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bitstreamreadbytes-ap4bitstream-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bitstreamreadbytes-ap4bitstream-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp."
      }, {
        "lang" : "es",
        "value" : "Las clases AP4_AvccAtom y AP4_HvccAtom en Bento4 1.5.0-617 no validan correctamente los tamaños de los datos, provocando una sobrelectura de búfer basada en memoria dinámica (heap) y el cierre inesperado de la aplicación en AP4_DataBuffer::SetData en Core/Ap4DataBuffer.cpp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AADCDAA-F274-4231-BF07-2478EC64FBE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_databuffersetdata-ap4databuffer-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/53499d8d4c69142137c7c7f0097a444783fdeb90",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/188",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_databuffersetdata-ap4databuffer-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/commit/53499d8d4c69142137c7c7f0097a444783fdeb90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en pila en AP4_VisualSampleEntry::ReadFields en Core/Ap4SampleEntry.cpp en Bento4 1.5.0-617. Esta vulnerabilidad tiene como consecuencia una lectura fuera de límites, lo que da lugar a una denegación de servicio remota o a una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91AC306-5354-4B0C-B481-CBA451648D90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-overflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-overflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer global en la función iteration_loop en loop.c en BladeEnc 0.94.2. Esta vulnerabilidad tiene como consecuencia una escritura fuera de límites, lo que da lugar a una denegación de servicio remota o a una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bladeenc:bladeenc:0.94.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E57D3D-6E99-4D25-998A-0A23EE071EAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/19/bladeenc-global-buffer-overflow-in-iteration_loop-loop-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-18",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/19/bladeenc-global-buffer-overflow-in-iteration_loop-loop-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash)."
      }, {
        "lang" : "es",
        "value" : "ReadOneJNGImage en coders/png.c en GraphicsMagick 1.3.26 no valida correctamente los datos JNG, provocando una denegación de servicio (fallo de aserción en magick/pixel_cache.c y cierre inesperado de la aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/358608a46f0a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100958",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/19/graphicsmagick-assertion-failure-in-pixel_cache-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/439/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/358608a46f0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/19/graphicsmagick-assertion-failure-in-pixel_cache-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/439/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T17:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability has been found in the Horde_Image library when using the \"Im\" backend that utilizes ImageMagick's \"convert\" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en la librería Horde_Image cuando se utiliza el backend \"Im\" que emplea la utilidad de ImageMagick \"convert\". No se puede explotar con ninguna aplicación de Horde porque la ruta del código a la vulnerabilidad no se utiliza en ningún código de Horde. Las aplicaciones personalizadas que utilicen la librería Horde_Image podrían verse afectadas. Esta vulnerabilidad afecta a todas las versiones de Horde_Image desde la versión 2.0.0 hasta la 2.5.1 y se corrige en la 2.5.2. El problema se debe a la ausencia de mecanismos de validación de entrada del campo index en _raw() durante la construcción de una línea de comandos de ImageMagick."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BC7F00-6913-471A-8174-7B4F418959C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF74626-2A3A-4C5B-AAB0-7F89553F8503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1BA827-A904-461E-9F6D-5EEAF1CCAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8388AA4-E32E-472A-935B-EA5859AD6ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702D16E7-B3D9-44BE-A7C8-515AE26946AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECA35FB-CC7D-45C7-8387-281889C5B210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81C3E7-C58E-44F6-8250-25650CC11445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675194BC-5E3C-41D6-B1E7-907DC6EB9FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D38725D-BE36-426A-B9EF-3572D4FC9751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2807B301-F022-4B4D-A71C-C8A158CAB507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C397A0B3-3D64-4D53-9AFF-876EA0795745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27A54B6-E4CE-4116-AECD-2966BF8F5599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84754CB3-0C5F-4442-9206-F3B161D283D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C13980A-F84B-4F6F-9ECD-6D7F62C3D30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A430144-931F-4FDA-9DBF-1B346B300C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9D9DEF-C78C-4FA8-9239-E5AF7FDF3033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE02ED1F-1AFF-4DD2-A95B-2E87D3B06973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A091A9C-39A4-4521-9A19-C697032B0DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B5E13D-BEEE-4CC7-8AC0-5D63FB0681D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300E48B-D8B0-470B-A2D0-01E59FC04C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC8F7F1-5B49-4DB0-9639-C676A54E8B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE5077E-5F64-4CB5-B1A9-1AB93CB89FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1469BDF-0B0A-48CE-AD24-4585121C0680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE213A58-0DD8-4F6E-80E3-2F1CA303EE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11382562-09B0-483C-8AD8-DFBF8950864A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_image_api:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421090AC-28F9-4BD7-9CC5-7D9385BE4375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/21/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=horde-announce&m=150600299528079&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=horde-announce&m=150600299528079&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T18:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter."
      }, {
        "lang" : "es",
        "value" : "WSO2 Data Analytics Server 3.1.0 tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en carbon/resources/add_collection_ajaxprocessor.jsp mediante los parámetros collectionName o parentPath."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:api_manager:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245D4EB1-F69D-4FAF-94DB-F4B3D3C20539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:app_manager:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD697F16-E1A2-4320-A76E-794B05D3620B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:application_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8891BAB1-C357-4BC7-8B7A-541B9698F0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:business_process_server:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AA02-B597-4C9F-936A-A4DC91F590B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:business_rules_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5435A911-096A-4DEE-9E04-1D3CBF4D98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:complex_event_processor:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397D6C9B-62A5-42FC-AB3B-C03598C25A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:dashboard_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5FB891-085E-4777-B771-1CDC367B8848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:data_analytics_server:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941D83A5-1978-49AE-890D-E31980E2D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:data_services_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC72298-39AC-450F-8419-951057332163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:enterprise_integrator:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3B48BB-ECB5-4A94-B76D-97BC3D303E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:enterprise_mobility_manager:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D6FCEF-7685-42DD-B322-AD87B5F37574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:governance_registry:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B815FD-E12D-46CE-94B3-06ED2C75285D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:identity_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375C318-ECD2-4657-A0D7-4A0708266FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:iot_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E81462-A034-4540-A086-7D836C6B17E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:machine_learner:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE333EE1-8158-40AF-8367-ACDCAA498516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:message_broker:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E3ADAB-067C-4D18-BDCA-43DDC607E4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:storage_server:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0036440-3C00-4776-8DF6-AC30256EADBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cybersecurityworks/Disclosed/issues/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cybersecurityworks/Disclosed/issues/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T20:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en mobiquo/lib/classTTForum.php en el plugin Tapatalk en versiones anteriores a la 4.5.8 para MyBB que permite que un atacante autenticado remoto inyecto comandos SQL arbitrarios mediante un documento codificado en XML-RPC que se envía como parte de un proceso de registro de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tapatalk:tapatalk:*:*:*:*:*:mybb:*:*",
            "versionEndIncluding" : "4.5.7",
            "matchCriteriaId" : "74327B01-C80A-49F2-84BA-18757E3CD471"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adrianhayter.com/exploits.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-release-announcement-and--t5877-s50.html#p187116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://adrianhayter.com/exploits.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-release-announcement-and--t5877-s50.html#p187116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12170",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-21T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd."
      }, {
        "lang" : "es",
        "value" : "La versión downstream 1.0.46-1 de pure-ftpd, tal y como viene distribuido en Fedora, es vulnerable a los errores de empaquetado ya que se ignora la configuración original después de que se actualice y que el servicio empiece a ejecutarse con la configuración por defecto. Esto provoca un impacto en la seguridad por omitir configuraciones de seguridad. Este problema no aplica a la versión upstream de pure-ftpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pureftpd:pure-ftpd:1.0.46-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE04278C-F528-438A-A89A-BDC89E53269C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEACBFF-6D05-4B69-BF7A-F7E539D9BF6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1493114",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1493114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Tool Signature", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7544",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-21T21:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure."
      }, {
        "lang" : "es",
        "value" : "libexif hasta la versión 0.6.21 es vulnerable a una lectura de la memoria dinámica (heap) fuera de límites en la función exif_data_save_data_entry en libexif/exif-data.c. Esto se debe al cálculo incorrecto de la longitud de los datos asignados de una entrada ExifMnote que podrían provocar una denegación de servicio o, posiblemente, una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.21",
            "matchCriteriaId" : "21034802-5B3C-4D89-819D-D0907E062D7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://sourceforge.net/p/libexif/bugs/130/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4277-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/libexif/bugs/130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4277-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7549",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-21T21:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error en la versión 7.2.0 de instack-undercloud tal y como viene incorporado en Red Hat OpenStack Platform Pike; la versión 6.1.0 en Red Hat OpenStack Platform Oacta y la versión 5.3.0 en Red Hat OpenStack Newton, en donde los scripts de preinstalación y políticas de seguridad emplearon archivos temporales no seguros. Un usuario local podría explotar esta vulnerabilidad para llevar a cabo un ataque de enlace simbólico que les permita sobrescribir el contenido de archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:instack-undercloud:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438CD7A3-3F93-4BC8-AE63-B61BD852D406"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:instack-undercloud:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C766B188-526F-48FD-B9D0-9B6C7B6696C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:instack-undercloud:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B62CC2D-0A0E-4E55-9215-83061A608926"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2557",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2687",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2693",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2726",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477403",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9281",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-21T22:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros (CWE-190) que podría provocar una vulnerabilidad de lectura fuera de límites (CWE-125) en la versión 8.5 de Micro Focus VisiBroker podría conducir a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:visibroker:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CD4C19-343D-4CEF-9220-2D813392E559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9282",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-21T22:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros (CWE-190) que podría conducir a una escritura fuera de límites (CWE-787) en un área asignada por la memoria dinámica (heap) y que desemboca en la corrupción de la memoria dinámica en la versión 8.5 de Micro Focus VisiBroker. No se ha evaluado la posibilidad de explotar esta vulnerabilidad para realizar más ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:visibroker:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CD4C19-343D-4CEF-9220-2D813392E559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9283",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-21T22:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de lectura fuera de límites (CWE-125) en la versión 8.5 de Micro Focus VisiBroker. No se ha evaluado la posibilidad de explotar esta vulnerabilidad para realizar más ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:visibroker:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CD4C19-343D-4CEF-9220-2D813392E559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T23:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document."
      }, {
        "lang" : "es",
        "value" : "ZKTeco ZKTime Web 2.0.1.12280 permite que los atacantes remotos obtengan metadatos sensibles de los empleados mediante una petición directa de un documento PDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zkteco:zktime_web:2.0.1.12280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A66D7A-0989-48D3-A4C7-FF847300A6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Sep/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Sep/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T23:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for p3scan.pid modification before a root script executes a \"kill `cat /pathname/p3scan.pid`\" command, as demonstrated by etc/init.d/p3scan."
      }, {
        "lang" : "es",
        "value" : "El demonio en P3Scan 3.0_rc1 y anteriores crea un archivo p3scan.pid tras eliminar privilegios a una cuenta no root, lo que podría permitir que usuarios locales terminen procesos arbitrarios aprovechando el acceso a esta cuenta no root para modificar el archivo p3scan.pid antes de que un script root ejecute un comando \"kill `cat /pathname/p3scan.pid`\". Esto se ha demostrado con etc/init.d/p3scan."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:p3scan_project:p3scan:*:rc1:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "D5EB8317-686C-4983-924D-9FB74FC564AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/p3scan/bugs/33/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/p3scan/bugs/33/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-21T23:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928."
      }, {
        "lang" : "es",
        "value" : "GetNextToken en MagickCore/token.c en ImageMagick 7.0.6 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de aplicación) o, probablemente, provocar cualquier otro tipo de problema mediante un documento SVG modificado. Esta es una vulnerabilidad diferente a CVE-2017-10928."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D333EB-283A-4E9C-A9E8-167F7AF1B93C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32726",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T01:29:25.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-4 Q16 en la función ReadVIPSImage en coders/vips.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en ResizeMagickMemory en MagickCore/memory.c) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/770",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8007",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-09-22T01:29:25.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call."
      }, {
        "lang" : "es",
        "value" : "En EMC ViPR SRM, Storage MR, VNX MR y MR (Watch4Net) para SAS Solution Packs, la puerta de enlace del servicio web se ha visto afectado por una vulnerabilidad de salto de directorio. Los atacantes que conozcan las credenciales de la puerta de enlace del servicio web podrían explotar esta vulnerabilidad para acceder a información no autorizada y modificar o borrar datos proporcionando strings especialmente manipuladas en parámetros de entrada de la llamada del servicio web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_m\\&r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4257D51A-8593-43F5-9C39-1D0BA9DD2C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_storage_monitoring_and_reporting:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B368A32D-4310-476A-A012-67D9A77D4EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vipr_srm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "15CDF8E3-4681-48E5-A0D3-CF40E301D23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vnx_monitoring_and_reporting:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DC88D9-BBC4-47B7-83D4-6958FDD6FF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/51",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100957",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039417",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039418",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8012",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-09-22T01:29:25.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially exploit this vulnerability to create arbitrary files on the affected system and create a DoS condition by leveraging inherent JMX protocol capabilities."
      }, {
        "lang" : "es",
        "value" : "En EMC ViPR SRM, Storage MR, VNX MR y MR (Watch4Net) para SAS Solution Packs, el protocolo Java Management Extensions (JMX) empleado para la comunicación entre componentes los componentes Alerting o Compliance puede aprovecharse para provocar una condición de denegación de servicio. Los atacantes que conozcan las credenciales de usuario del agente JMX podrían explotar esta vulnerabilidad para crear archivos arbitrarios en el sistema afectado y crear una condición de denegación de servicio mediante el aprovechamiento de las capacidades inherentes del protocolo JMX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_m\\&r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4257D51A-8593-43F5-9C39-1D0BA9DD2C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_storage_monitoring_and_reporting:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B368A32D-4310-476A-A012-67D9A77D4EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vipr_srm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "15CDF8E3-4681-48E5-A0D3-CF40E301D23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_vnx_monitoring_and_reporting:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DC88D9-BBC4-47B7-83D4-6958FDD6FF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/51",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100982",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039417",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039418",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T06:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to \"Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61\" on Windows. This occurs because xps_load_links_in_glyphs in xps/xps-link.c does not verify that an xps font could be loaded."
      }, {
        "lang" : "es",
        "value" : "La versión 1.11 de Artifex MuPDF permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61\" en Windows. Esto ocurre porque xps_load_links_in_glyphs en xps/xps-link.c no verifica que se puede cargar una fuente xps."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F18A1A-67A7-471B-AD7A-29F65DF4F2BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=ab1a420613dec93c686acbee2c165274e922f82a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14685",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=ab1a420613dec93c686acbee2c165274e922f82a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T06:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d\" on Windows. This occurs because read_zip_dir_imp in fitz/unzip.c does not check whether size fields in a ZIP entry are negative numbers."
      }, {
        "lang" : "es",
        "value" : "La versión 1.11 de Artifex MuPDF permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .xps manipulado, relacionado con \"User Mode Write AV comenzando en wow64!Wow64NotifyDebugger+0x000000000000001d\" en Windows. Esto ocurre porque read_zip_dir_imp en fitz/unzip.c no comprueba si los campos de tamaño en una entrada ZIP son números negativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F18A1A-67A7-471B-AD7A-29F65DF4F2BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=0f0fbc07d9be31f5e83ec5328d7311fdfd8328b1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698540",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14686",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=0f0fbc07d9be31f5e83ec5328d7311fdfd8328b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T06:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to \"Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f\" on Windows. This occurs because of mishandling of XML tag name comparisons."
      }, {
        "lang" : "es",
        "value" : "La versión 1.11 de Artifex MuPDF permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f\" en Windows. Esto se debe a la gestión incorrecta de las comparaciones de nombres de etiquetas XML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F18A1A-67A7-471B-AD7A-29F65DF4F2BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=2b16dbd8f73269cb15ca61ece75cf8d2d196ed28",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14687",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=2b16dbd8f73269cb15ca61ece75cf8d2d196ed28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T07:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element."
      }, {
        "lang" : "es",
        "value" : "Debido a un desbordamiento de enteros en la versión 0.49.3 de sam2p, un bucle se ejecuta 0xffffffff veces, acabando con una lectura inválida de tamaño 1 en la función Image::Indexed::sortPal en image.cpp. Sin embargo, esto también provoca una corrupción de memoria debido a un intento de escritura en el elemento array inválido d[0xfffffffe]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C002E-B104-49DF-9724-ECEF53735DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T07:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address."
      }, {
        "lang" : "es",
        "value" : "En la versión 0.49.3 de sam2p hay una lectura no válida de tamaño 2 en la función parse_rgb en in_xpm.cpp. Sin embargo, esto también puede provocar una escritura en una dirección ilegal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C002E-B104-49DF-9724-ECEF53735DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pts/sam2p/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T07:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter."
      }, {
        "lang" : "es",
        "value" : "member/Orderinfo.asp en la versión 2.7.2 de ASP4CMS AspCMS permite que los usuarios autenticados remotos lean información de pedidos arbitraria mediante un parámetro OrderNo modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp4cms:aspcms:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636C680F-C804-456D-94A1-67F98F73BED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://asdedc.bid/aspcms.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://asdedc.bid/aspcms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T08:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a \"Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d917.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d917\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14688",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T08:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000328e.\""
      }, {
        "lang" : "es",
        "value" : "La versión 1.6.375 de STDU Viewer permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000328e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14689",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T08:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14690",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T08:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .jb2 manipulado, relacionado con \"Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14691",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T08:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a \"User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b.\""
      }, {
        "lang" : "es",
        "value" : "STDU Viewer 1.6.375 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .jb2 manipulado, relacionado con \"User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E841F3F-38C6-4A73-887F-7A77251C4A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14692",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T08:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to \"Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613.\""
      }, {
        "lang" : "es",
        "value" : "La versión 4.44 - 32bit de IrfanView permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .djvu manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14693",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.irfanview.net/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3763",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-09-22T14:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Un atacante que obtenga acceso a la localización en el que se almacena el sistema de archivos de LXCA podría acceder a las credenciales de las cuentas locales de LXCA en las versiones anteriores a 1.3.2 de LXCA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "2B8B3461-FE28-4F26-B347-0AB295D0EB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16333",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3770",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-09-22T14:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalado de privilegios en versiones anteriores a la 1.3.2 de LXCA en donde un usuario autenticado podría explotar ciertas funcionalidades de la interfaz web para ejecutar comandos con privilegios en el sistema operativo LXCA subyacente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "2B8B3461-FE28-4F26-B347-0AB295D0EB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16333",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9393",
      "sourceIdentifier" : "vuln@ca.com",
      "published" : "2017-09-22T14:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search."
      }, {
        "lang" : "es",
        "value" : "CA Identity Manager de la versión r12.6 a la r12.6 SP8, 14.0 y 14.1 permite que los atacantes remotos identifiquen contraseñas de cuentas bloqueadas mediante una búsqueda exhaustiva."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "BC40E880-CBE1-401D-AC52-ABD8AA5BA532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "29BC5F88-A884-4F5E-9D04-34C73B7A2CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "18C26D26-5ACC-489E-88BA-25A0008CA2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC189A1D-4508-466A-9116-99EF52A2BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4AC0A-5F43-4000-A414-99964CB404CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "3478DC20-8307-4DA8-B922-5A995BDE233C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "97628548-6314-4A4F-AA5B-7FCCBA168150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD363ACE-7E26-430B-AA6A-1AE1BF4C5142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:12.6:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "CC53B461-E09D-45C3-8CB8-CEAA69FF6A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB09257-D88D-417A-B734-7AF24889D46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6060C-BF65-45E3-91F5-D3AAC4305ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager_virtual_appliance:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C494D3D0-0351-40BC-AA45-54F1272250A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_manager_virtual_appliance:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "416D96F6-1BB4-4F0C-A75C-0E88968FC0B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100956",
        "source" : "vuln@ca.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html",
        "source" : "vuln@ca.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11395",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-09-22T16:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en la interfaz de usuario de administración del servidor Trend Micro Smart Protection Server (Standalone) en sus versiones 3.1 y 3.2 permite que los atacantes con acceso autenticado ejecuten código arbitrario en instalaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB62FC55-4EA1-485E-9381-C14BA2F1E074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4157366A-854E-4993-B08B-FAF7EA4D9ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.coresecurity.com/advisories/trend-micro-smart-protection-os-command-injection",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100461",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117933",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/advisories/trend-micro-smart-protection-os-command-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11396",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-09-22T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections."
      }, {
        "lang" : "es",
        "value" : "Los problemas de vulnerabilidades con la inspección del servicio web de parámetros de entrada en la versión 6.5 de Trend Micro Web Security Virtual Appliance podría permitir que los atacantes que ya posean derechos de administración en la consola implementen inyecciones remotas de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF71E3A-0C66-4FCC-AEEE-3CCFBDCF3ADD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1117412",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1117412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14078",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-09-22T16:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de inyección SQL en las versiones anteriores a 9.7 Patch 3 de Trend Micro Mobile Security (Enterprise) permiten que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:mobile_security:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "30F9451B-BA02-4E14-8775-C49E6F5C87BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100966",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-739",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-740",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-741",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-742",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-743",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-744",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-745",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-746",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-747",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-748",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-749",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-750",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-751",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-753",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-754",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-755",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-756",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-757",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-758",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-759",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-760",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-761",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-762",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-763",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-764",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-765",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-766",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-768",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-769",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-770",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-771",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-772",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-773",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-775",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-776",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-777",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-778",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-779",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-780",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-781",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-782",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-783",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-784",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-786",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-787",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-788",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-791",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-792",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-793",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-794",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-795",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-796",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-797",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-798",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-799",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-800",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-801",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-802",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-803",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-804",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-805",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-806",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-808",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-809",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-810",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14079",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-09-22T16:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations."
      }, {
        "lang" : "es",
        "value" : "Las subidas de archivos sin restricción en las versiones anteriores a 9.7 Patch 3 de Trend Micro Mobile Security (Enterprise) permiten que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:mobile_security:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "30F9451B-BA02-4E14-8775-C49E6F5C87BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100970",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-785",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-789",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-790",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-807",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14080",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-09-22T16:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en las versiones anteriores a 9.7 Patch 3 de Trend Micro Mobile Security (Enterprise) permite que atacantes remotos accedan a una parte específica de la consola empleando una contraseña en blanco."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:mobile_security:9.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "30F9451B-BA02-4E14-8775-C49E6F5C87BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-767",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14081",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-09-22T16:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de inyección de comandos proxy en las versiones anteriores a 9.7 Patch 3 de Trend Micro Mobile Security (Enterprise) permiten que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:mobile_security:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "9.7",
            "matchCriteriaId" : "75377571-A277-4F06-8A97-AFD55E9CF295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100969",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-752",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-774",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6266",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel, en donde los controles de acceso incorrectos podrían permitir que los usuarios sin privilegios provoquen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101028",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6267",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel, en donde una incorrecta inicialización de objetos internos podría provocar un bucle infinito que conduciría a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101025",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6268",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, en donde un valor que se pasa de un usuario al controlador no se valida correctamente y se emplea como índice para un array, lo que podría suponer una denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101007",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6269",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is used without validation which may lead to denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, en donde un puntero que se pasa de un usuario al controlador se emplea sin validación. Esto podría suponer una denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101020",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6270",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation during a calculation which may lead to a potential divide by zero and denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel para DxgkDdiCreateAllocation, en donde las entradas de usuario no confiables se emplean como divisor sin validación durante un cálculo, lo que podría conducir a una potencial división entre cero y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101002",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6271",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while processing block linear information which may lead to a potential divide by zero and denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel para DxgkDdiCreateAllocation, en donde las entradas de usuario no confiables se emplean como divisor sin validación mientras se procesa información lineal en bloque, lo que podría conducir a una potencial división entre cero y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101001",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6272",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel, en donde un valor que se pasa de un usuario al controlador no se valida correctamente y se emplea como índice para un array que podría llevar a una denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "362.00",
            "matchCriteriaId" : "0693AFAE-98E0-47EC-A182-A7DCA1293279"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100997",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6277",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-09-22T17:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, en donde un valor que se pasa de un usuario al controlador no se valida correctamente y se emplea como índice para un array que podría llevar a una denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6B8C06-F379-49FB-B0F2-097752154708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101004",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T18:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments."
      }, {
        "lang" : "es",
        "value" : "DenyAll WAF en versiones anteriores a la 6.4.1 permite la ejecución remota de comandos sin autenticación mediante el puerto TCP 3001 debido a que los metacaracteres shell se pueden insertar en el parámetro type a la función tailDateFile en /webservices/stream/tail.php. Se necesita un parámetro de autenticación iToken, pero puede obtenerse mediante la explotación de CVE-2017-14706. Esto afecta a DenyAll i-Suite LTS desde la versión 5.5.0 hasta la 5.5.12, i-Suite 5.6, Web Application Firewall 5.7 y las versiones 6.x de Web Application Firewall anteriores a la 6.4.1 con implementaciones On Premises o en la nube de AWS/Azure."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "450728AF-ED58-4237-A4D8-AB0517915FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.9:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "4ED1E4B4-D0CC-4431-A51C-D5F0B87D122D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.10:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "752FD974-6DFC-4C9C-920E-A5AD8ABA802F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.11:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E8054F08-B88D-4816-8FBA-8E3AF859FA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.12:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "9720647C-FFF7-4F72-A739-D36B2EA37AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.6.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "8B7B0771-C019-4AB2-91EE-A32879CFE9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF3034E-C0B5-4383-8F6C-679DA953184A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E65A2B-9E42-4417-893F-343E6AF49851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CD97FE-A66D-4714-B24D-B5EB2858F6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F508551B-25F5-4D7F-8A59-08273760DEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C65604A-D664-46EA-8EDD-602B2B673964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E690DAF-5EB5-41B2-B77D-4CE85FFC2B7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/8980",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/8980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T18:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments."
      }, {
        "lang" : "es",
        "value" : "DenyAll WAF en versiones anteriores a la 6.4.1 permite que los atacantes remotos sin autenticar obtengan información de autenticación realizando una petición typeOf=debug a /webservices/download/index.php y, a continuación, leyendo el campo iToken en la respuesta. Esto afecta a DenyAll i-Suite LTS desde la versión 5.5.0 hasta la 5.5.12, i-Suite 5.6, Web Application Firewall 5.7 y las versiones 6.x de Web Application Firewall anteriores a la 6.4.1 con implementaciones On Premises o en la nube de AWS/Azure."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "450728AF-ED58-4237-A4D8-AB0517915FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.9:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "4ED1E4B4-D0CC-4431-A51C-D5F0B87D122D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.10:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "752FD974-6DFC-4C9C-920E-A5AD8ABA802F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.11:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E8054F08-B88D-4816-8FBA-8E3AF859FA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.5.12:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "9720647C-FFF7-4F72-A739-D36B2EA37AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:i-suite:5.6.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "8B7B0771-C019-4AB2-91EE-A32879CFE9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF3034E-C0B5-4383-8F6C-679DA953184A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E65A2B-9E42-4417-893F-343E6AF49851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CD97FE-A66D-4714-B24D-B5EB2858F6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F508551B-25F5-4D7F-8A59-08273760DEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C65604A-D664-46EA-8EDD-602B2B673964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denyall:web_application_firewall:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E690DAF-5EB5-41B2-B77D-4CE85FFC2B7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/8980",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/8980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to \"Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x000000000000002f.\"."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader 8.3.2.25013 y anteriores y Foxit PhantomPDF 8.3.2.25013 y anteriores, cuando se ejecuta en modo de única instancia, permiten que los atacantes ejecuten código arbitrario o provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esto está relacionado con \"Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x000000000000002f.\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101009",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14694",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) persistente en la versión 1.8.2 rev20170830 de EPESI, en el parámetro Tasks Phonecall Notes Title."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "D68D395C-AB6A-4EA9-ABF2-F88229D02FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42950/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42950/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) persistente en la versión 1.8.2 rev20170830 de EPESI, en el parámetro Phonecalls Description."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2.4",
            "matchCriteriaId" : "1A70585D-8AF7-4902-93E6-51E2AF1AC476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) persistente en la versión 1.8.2 rev20170830 de EPESI, en el parámetro Phonecalls Subject."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2.4",
            "matchCriteriaId" : "1A70585D-8AF7-4902-93E6-51E2AF1AC476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) persistente en la versión 1.8.2 rev20170830 de EPESI, en el parámetro Tasks Alerts Title."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2.4",
            "matchCriteriaId" : "1A70585D-8AF7-4902-93E6-51E2AF1AC476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) persistente en la versión 1.8.2 rev20170830 de EPESI, en el parámetro Tasks Title."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2.4",
            "matchCriteriaId" : "1A70585D-8AF7-4902-93E6-51E2AF1AC476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-22T19:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) persistente en la versión 1.8.2 rev20170830 de EPESI, en el parámetro Tasks Description."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telaxius:epesi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2.4",
            "matchCriteriaId" : "1A70585D-8AF7-4902-93E6-51E2AF1AC476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42950/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42950/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file."
      }, {
        "lang" : "es",
        "value" : "Desbordamientos de búfer basado en pila en la versión 2.5 de CyberLink LabelPrint permiten que los atacantes ejecuten código arbitrario mediante los parámetros (1) author (dentro de la etiqueta INFORMATION), (2) name (dentro de la etiqueta INFORMATION), (3) artist (dentro de la etiqueta TRACK) o (4) default (dentro de la etiqueta TEXTO) en un archivo de proyecto lpp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberlink:labelprint:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD660477-65B1-46F9-8768-30A3CBE981DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42777/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45985/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42777/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45985/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress era susceptible a un ataque de Cross-Site Scripting (XSS) en el modal de enlace mediante una URL javascript: o data:."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41393",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress era susceptible a un ataque de salto de directorio durante operaciones de descompresión en los componentes ZipArchive y PclZip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A684588-4D37-4817-9A1A-BF2E70EC8F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D3E145-ECF8-4BAD-9471-4E4605887B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525887EE-50DB-4739-8897-A0D19D486CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC19614-2A59-4A49-B824-35975502B38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2DDB9C-E1D7-4DBD-A27C-93C9A9C0B7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832F89CB-595B-407A-A27C-F655F7112830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89977E0E-694C-49FA-814D-D356EC9294C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D1E83C-39AC-4E3D-874A-AF0F16ADDE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FD149E-8CF4-46FE-9F5E-9DEE61B4164C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1397-7262-4B61-8061-83C2ED731DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D16FE-BB31-4866-8F85-22F1C0F1131D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3446B691-B59E-4FCC-9F88-385AED59CBA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47275886-14AC-4BD2-BAE7-5203A9D6D6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07D26683-3F22-4BAD-BD4F-CB712DB8F855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648439C2-2459-4AB3-9E9A-B63F5030A4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CF5422-62D0-4777-AA94-5C166AEA4AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19420CF9-1B33-422F-8D47-A8FE58F84944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EA8986-0845-4F67-9429-C6DAA0006C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E080CA-3432-44E7-B632-BA52C9E16A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C04D0-05E9-41C8-B15B-A3A0DBFE0E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3631CE91-D41D-4758-B3D2-3950BC0E2455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E836FE-E2B5-46A3-8A1C-A9F380F2FA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AACC9C9-83F3-4430-89C8-63D8696D2143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105F27B1-5E0F-4E46-9753-85D31084C49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E89BDE1-E39E-427D-9F4D-6D82B2A63579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85AF22E6-6C7E-4F91-835D-A28A38420C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3AEA5A-7557-4D45-87B3-4B7149EDE535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF506A50-1C11-42C8-831B-F94AAF2E4C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18712D2F-7093-4CE8-8331-242792F91E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE342362-E2E1-4CED-881A-F37B09423662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA03A409-E46C-47ED-82B3-43C13FA2DD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A9D4B6-C1B3-47BD-9DD9-DE35E4022A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC94113-2731-405A-BE17-09FC80C1B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46295B2B-C46B-4476-A66C-113E234FAE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6B93D0-9020-4C03-AE10-9D20850AE113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E794AE-BFAA-427F-A415-876BA4213E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0B5203-D03E-468F-8D08-9E87D0154B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D8354E-F1D4-4F79-86F0-0F3B8B75BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEBB74E-D7AD-4A1D-9747-3AAB96516F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575B839B-3748-44C6-95F5-CA2C86AAEE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49D6886-0296-4EF1-AB8D-6826ADC1D14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C21F919-CF21-4E1B-8009-0E44856C628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BEFA4D-2141-4315-B432-01733F446556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD9D8E46-6693-45D5-A580-09DBB19D34D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF44C4D1-7C57-4CA6-893E-EF6A003C968F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70552EB5-C3AA-423B-AA81-23ABDFA28B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16F59DF-E4E8-4BBB-934F-4EB5F694F740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8B517D-5266-48F1-A0B4-41B737D35D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BDAED6-AB30-49F0-B9C2-D37E10038A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D38621-9941-4D03-91D7-3902930546A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934CC6A1-D5E4-468C-B31D-F5C7B02FCE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02EF96-4F17-443C-A739-961EED916C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C631B472-8FF2-4A93-91F1-DCA813A8520A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB9FD7-7922-44A5-BB82-410B33032E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE04B535-BFAD-4953-8393-F6F7BA6DE6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F325C188-BF90-4ED1-B6F7-FFE92DC9E067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9CEA64-61A9-4BF0-A1B0-C49FA7C59E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06868909-4F89-467F-B1E9-2FEB3789838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01022C60-D5A6-46EE-A1F5-63D650A74157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BE90CB-7AC0-4754-A17C-C1C54FC0868C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1060873-D06B-4CE7-AEEA-EDA4FE038BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1224B76-9DE2-44D0-83A3-A0C6B1C0BD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88CD416-B96D-478D-A4B4-E673873AD793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7F369A-EEA5-4674-87C3-74126AEF1C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0252D17F-9F9C-4E79-AA58-BC0BB14F5036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3558F32-94AF-4CF2-B269-6C4F0993957D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103FF345-C648-4D50-9026-EE05F060EF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6EAAC9-3C11-47D6-A5A4-2B4EE41F2C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7E7726-BF40-46F8-85A9-6D7CE6300990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2FDBC-1994-433B-829D-D1311AD09840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B239FCB6-20CD-4FB1-BDA8-1C39E135D347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3008738B-F024-4597-BB99-66D1C4C5F631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9343FA-182C-4E2E-85ED-13F0B398258A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79DE40E-BFA7-43DA-AB42-2812FB207941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED9381-2BFC-4BDA-AC4B-CBC77E8538D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDD6C2-CD33-4812-9962-3BE73D450C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB4E2E6-75E5-412C-847B-78E69C913AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990C83DA-0F54-46A1-A8CF-472DF4DF11BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E8EB5D-303A-477E-8B55-8B476EC5AA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB9BE56-88A3-401D-8CE0-F852C996CB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97CD303A-5A62-40C7-865B-9CCB025CBA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "744945FF-1A5B-4203-9DC3-1A74815E0F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6651B0EF-BD5B-4CA0-9C7E-DF1475A78079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D559AF-D5FF-4BC6-BFF0-F14D66042985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DDAF7F-6553-45E7-B25F-D59BAAD0BDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D6540-75FB-4BF7-A171-E2C4FE636583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520947A7-3A72-4263-98BB-16F618ECC35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A52A8FD-FDB3-4C32-813A-3DF6FD5214C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FC10D9-B3F4-4233-8385-70777DC5F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF59AD68-0C96-4933-930D-0C3D0C1D7A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB349138-2452-42A2-9205-56C7738F2EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5C6FE7-9303-4AB3-B330-23079F243503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:3.9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E782F-7C89-499F-9B4C-35B581FBA87F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E372A3D2-FCB5-4A74-840D-EC03732FCC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22427650-230D-4CB0-BACC-723B9B2CDC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CFAF3D-7A58-4FE2-AD0C-DB7456BEB7D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEFDF7C-0D42-4E1F-AEE9-CE22AB8555E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C24D94-543B-4288-B0A8-590E5F3D503E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A842F1C-576A-4DE6-9EC3-D098DCAEEF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB760341-1C47-4538-997B-22E0CE1797F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5E009E-84C8-43E2-807D-377BCB09F6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AAB011-8AF7-4CF7-8BD0-48A3730957CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39894FB-51F5-453C-83CC-69A3BB129A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2F34E5-8607-479E-A602-EB8FA9B2587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BE09BF-E8C5-4A48-90DE-E80CC652D396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8182C9E-EEF9-4887-87AB-0E0A217FF9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2445BB0-8F66-4E6C-BB74-F96FC491669E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8434E49-29CC-43D2-B22D-D1A1B5B04C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188D128F-2DA9-400A-BA01-A6A9EC706BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248F3F3E-1498-431A-8E90-D7B5161FC91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AF9F2A-608A-47C6-8BFF-9B742E917B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A64D90-9252-420E-B571-B2F9CD5C67C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E89B006-0EF2-410E-84E8-C22167C8B3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18F20563-46BB-4E5C-BEF5-122A32C76261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AF56DD-82D6-4100-B82C-536C46358B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC7A1CD-8890-4FA6-96B4-16C115FE9C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940DB813-56E3-48FB-816B-AD76D136F7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1D92E5-4F37-43BE-A44C-531EB580972A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000252F1-F575-4EFE-90A6-46748A833B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B35F69-06FF-442B-BF2C-9A7F8727689B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C814566-FB09-4266-BDA9-9F3C44F3A535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312B775E-5F23-488A-920F-6990B565B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2974F63B-61C2-4A99-A792-94F41A6C1625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B11A75-AD4E-46E2-9628-99AD56006EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEDEF97-D6A8-4B15-91E9-46B2F0D10D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3BF63-E238-4B11-84BC-4F26F2B36232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8EF361-FDB1-4D12-A266-7B620EFB69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03A12A7-C0D7-4746-ADE5-D2097ECC3AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A736773E-D9FB-4FC8-B764-4E41FF9E336F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA89D6A-56AF-48CC-8E19-D70F9AA71553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5F883F-8CC5-4200-A26E-55169C71B698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78ADC88E-85AB-4192-9716-8CE9445E9147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716BF6C3-70EE-4A8A-B9E2-91605AAC3230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C3AF1A-2060-443F-A548-6B9A5AC08637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "416D068C-E88C-441E-88D1-FDB17828D094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5167EBC-89BC-4C6C-8DA3-9D38C108210C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441B7D19-DF65-4C23-BCB9-CA02FBF90FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2191D6-5506-41F6-AE91-FD055E83BF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED37943-A46F-40AD-82F3-FDE032727E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10438ABD-416B-4251-983D-93D6D1350CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFF9524-DFCD-4CC0-9290-62F490FFC8A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B15D4A-9D77-47F5-9859-44D610E859E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A5CC84-A0FB-443E-B713-CAB3236D1038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3280E55-1FDB-49BA-B1B0-DEF9CC6262D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1836E2-91BD-40E2-8762-DF03CEB2DFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6A6F75-1614-40E4-983C-BDE99C497D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC53209D-36C4-4012-B0A0-301B96565ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88EFFB6E-C84C-43B9-97BA-1AEEEF433D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A61EFA-2525-4407-BCEB-DB6FBC2B9345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C9FFA7-D8E4-4A40-8FF7-C4533583B161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372A0F00-00C8-4EAC-A1E6-5318522A8D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B82B97-E62B-4EDA-852F-FC40446F69CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F5183F-C37B-42B0-8633-669B03FFC771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9AF704-75D6-4A2D-BCA4-E2F4AC21B3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85EB1B3-A000-4509-B891-68FA66036FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF3A996-9444-4C63-BB0F-AEC0023A803A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336E8DEE-6474-4744-B7C7-5F1B43646E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97456CBE-A359-428D-8F83-9CCE2F9B1933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E7D5406-CE35-4551-8A56-511CC63EAF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E89E96-6037-4C6F-9723-2614FD583E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BFA042-66EF-4FFA-A85F-9ADAF5B16E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7AEDC4-9E90-48CC-872F-099C648871B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C3A35C-7771-41A7-93D5-2E8DA4CA5425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A692C9AC-0FE4-4CA9-A582-6A8C03510A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA8C3E8-5B27-4F32-91C7-1385D9559221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036EF44B-EC67-47E8-A60F-1A99AA5F28EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84EB80B2-116F-403A-8F4E-C1F78580B80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4E82B9-BD56-43F4-BA96-AD90B9389D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBE237A-A691-4EA9-B7D4-36D0612447F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00339245-17C4-4F12-AC22-2083FA17B432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B6374D-4D1B-488B-9F20-D4C39732F652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F6D7E7-6139-4057-87A1-A61E31258A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9308D8-0B90-4786-9B61-A0A6B55160D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700559E0-DF63-4C1C-A859-6FFB3D125D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3935DF6C-BF72-4ACC-9391-1C9F59C8E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296050F6-ADE7-4047-A682-32EFF3D74DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512BEAD4-46AA-4125-9CA4-CEA24B3E3848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083DF458-9F92-4D0A-8847-E4D7010C9260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3C09D8-B36B-4807-AC78-C0E893F1A72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF40BBA4-DF8A-4BAF-AD00-CB49F1A3392D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CEE7E4-8B49-40F6-8580-988A6345CE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCB96FD-DECC-4CF1-B570-59630E449A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FCD65F-0015-4974-B5BA-0312CDCFE1B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860E3C02-D43E-4BC8-BBD4-9EAAE262D9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43036FA2-3167-44CC-8557-B6A2733EEF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BED0613-1B1C-49CB-B73B-C55A72556C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E00DFA-8B83-4D97-A1FF-2BEB6F0B835A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A4C4FD-D7F8-4B65-94FF-D00A7CBB4667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C200778C-005E-43AB-99B1-26796922B411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3BF436-B48F-48E5-A5B1-9B03FC7E4EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10DA22C-3EDA-4636-9819-998255E7A191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44398CB2-FC06-4545-84AA-099DEADD9A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3ABEC24-72A0-4129-9255-4342D40FF2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9EBA73-1915-4326-AA32-B38F42C9C040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABC52C-7C28-4CB7-9432-38540152F3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B095729-5746-4E32-B857-7BC78962561C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8459259A-4895-42B6-A242-D0B5871BE672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17C01D0-ADB4-4001-B5AD-9B996FA3A8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E49912-BB67-4587-BDD3-2F3EFF9996AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A2F43A-F720-463F-9514-A71B11446553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19847112-E600-4AB6-A7CD-13C05F6ADBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD70C31-FA2A-4236-A773-5AAEF22B5C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41457",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress permitía un ataque de Cross-Site Scripting (XSS) en la vista de plantilla de lista mediante un nombre de plantilla modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress permitía un ataque de Cross-Site Scripting (XSS) en el editor de plugins mediante un nombre de plugin modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress permitía un ataque de salto de directorio en el componente Customizer mediante un nombre de tema manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABC52C-7C28-4CB7-9432-38540152F3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B095729-5746-4E32-B857-7BC78962561C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8459259A-4895-42B6-A242-D0B5871BE672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17C01D0-ADB4-4001-B5AD-9B996FA3A8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E49912-BB67-4587-BDD3-2F3EFF9996AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A2F43A-F720-463F-9514-A71B11446553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19847112-E600-4AB6-A7CD-13C05F6ADBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD70C31-FA2A-4236-A773-5AAEF22B5C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41397",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8912",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress no gestionaba correctamente caracteres % y valores de sustitución adicionales en $wpdb->prepare, por lo que no abordaba correctamente la posibilidad de que los plugins o los temas permitiesen los ataques de inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress era vulnerable a Cross-Site Scripting (XSS) en oEmbed Discovery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41448",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8913",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress era susceptible a un ataque de redirección abierta en wp-admin/edit-tag-form.php y wp-admin/user-edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41398",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8910",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.8.2, WordPress era vulnerable a un ataque de Cross-Site Scripting (XSS) mediante shortcodes en el editor visual TinyMCE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "1C048B30-793C-4BDC-A2DE-6C87991205A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://core.trac.wordpress.org/changeset/41395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-23T20:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized."
      }, {
        "lang" : "es",
        "value" : "logger.c en el plugin logger en WeeChat en versiones anteriores a la 1.9.1 permite un cierre inesperado mediante especificadores strftime de fecha y hora debido a que no se inicializa un buffer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weechat:logger:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB6F39E-691E-41E2-A689-E1759146B2E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E127A69E-06CF-4465-AE73-4DEDA095C9F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E288417C-C213-4876-A06B-0D51C06821BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287B7B4A-E07C-4B29-872C-BA3D4148A5A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14A2EF7-4306-4A21-A166-00DB1265D4B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD540D-78EF-4A9A-A608-5B3FD1DDD316"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC2EB17-C1D8-48CB-853D-BBD513C129D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178CEFDB-BF33-45AC-95FB-2860994B791C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E9E6AD-3722-41A5-98EB-80371579D0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA029516-E0C1-47EB-B5FA-331F07891ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A82F71-260B-42CF-9875-D105FD729733"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60310327-04C3-4949-A5DF-F4D65EC94B2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574F7EBF-3999-414A-80F1-B0C053483787"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D688D18E-34F7-4C30-A415-C10A8DC1B956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A08B88-16E2-41CE-9C22-D47CC5C73567"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC47486-0796-4AD7-AE3F-D6186BD6099B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262FD0BB-06A3-4806-AC07-951DEE3FD771"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28072989-2E65-4FB0-85EC-1E3FB0BCE0C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7B92C8-D89D-4EB3-9A12-2378EFDD792B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A997F14-D97B-49FB-8EBA-00CCA6138975"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0813D0F6-34E5-4D23-A260-14974FA687B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCFD842-0076-42BC-B927-23F7641DCA8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58744DB9-6D89-4E96-B204-A438235481B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E362060F-8B23-4344-8875-8ADB4810A1EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0760C38-1CB4-4E3F-ABD2-1B5E340C1D57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "009C3FBF-CC75-42F0-8F87-E6985B00962E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA25E2F9-A390-4230-974F-71CE75A2D972"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:weechat:weechat:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0095B6-9111-4EC1-A319-CFE19415F4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101003",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/weechat/weechat/commit/f105c6f0b56fb5687b2d2aedf37cb1d1b434d556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://weechat.org/download/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://weechat.org/news/98/20170923-Version-1.9.1-security-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/weechat/weechat/commit/f105c6f0b56fb5687b2d2aedf37cb1d1b434d556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://weechat.org/download/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://weechat.org/news/98/20170923-Version-1.9.1-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T08:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file."
      }, {
        "lang" : "es",
        "value" : "geminabox (también llamado Gem in a Box) en versiones anteriores a la 0.13.6 tiene XSS, tal y como demuestra la subida de un archivo gem que tiene un valor gem.homepage manipulado en su archivo .gemspec."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geminabox_project:geminabox:*:*:*:*:*:ruby:*:*",
            "versionEndIncluding" : "0.13.5",
            "matchCriteriaId" : "0AA2F067-08B5-471C-8EEE-0025244689E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T08:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload."
      }, {
        "lang" : "es",
        "value" : "geminabox (también llamado Gem in a Box) en versiones anteriores a la 0.13.7 tiene Cross-Site Request Forgery (CSRF), tal y como demuestra una subida gem accidental."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geminabox_project:geminabox:*:*:*:*:*:ruby:*:*",
            "versionEndIncluding" : "0.13.6",
            "matchCriteriaId" : "BA403903-2C6C-4B8A-8F84-9A40F0E0D6AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1235",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-25T16:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potentially cause denial of service. IBM X-Force ID: 123914."
      }, {
        "lang" : "es",
        "value" : "La versión 8.0 de IBM WebSphere MQ podría permitir que un usuario autenticado finalice de manera prematura un hilo de la aplicación cliente, lo que podría provocar una denegación de servicio. IBM X-Force ID: 123914."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153F42BE-64AE-4D38-94C1-E59EF10632A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005415",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100955",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123914",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1346",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-25T16:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan. IBM X-Force ID: 126461."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager 7.5, 8.0 y 8.5 guarda temporalmente los archivos en una carpeta temporal durante las instalaciones offline, los cuales podrían ser leídos por un usuario local en un corto espacio de tiempo. IBM X-Force ID: 126461."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "91BDDE54-95C6-4E95-9427-D83E61355E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1D338AF3-8FE6-4E51-B961-344E157EECFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8057C7D0-978D-490B-BE80-597A2CB27A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "16617000-4388-43EF-AE14-8C108068155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E4B6A964-F948-4FAA-A6C7-41641AF12504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC02B89-813E-4B3D-B518-6565BE06C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "3DEBE193-CDE1-406C-9042-4085AA0EED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "05B6C389-9332-4C33-A3AD-270A54AC564E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "07630F25-A03C-401D-A16A-51B63014C963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFA125-9D52-4C16-9946-DB8D43700415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "EF781F2F-05FB-4DBD-8BC1-98A630CD375A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "17E42B0A-0947-4799-993F-CBF8A84EBD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E95968B6-FF99-4234-9EC7-6EAA9C7DA753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613CC0CD-083E-439A-9A53-777E69CDE2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "0F1442C9-ED96-40C5-BE20-987C928BAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "50B6287C-5A45-46B7-A685-93D1CBA0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3693DBD8-F30F-44D0-A154-4C268120D7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDC7513-E826-42A7-B3DE-15EBAB836FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B8D43-BD99-499E-B0D4-27BFC997DF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004654",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100964",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126461",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1362",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-25T16:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 126801."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Manager Adapters 6.0 y 7.0 almacena las credenciales de usuario en texto plano, por lo que podrían ser leídos por un usuario local. IBM X-Force ID: 126801."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3DD5D1-ADBD-48A0-B359-36E2FF8894A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E76774-A3B4-4499-8D2E-8EF8BBF11298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007381",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100965",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126801",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1424",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-25T16:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127477."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager 8.5.7 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 127477."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005112",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100962",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127477",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T16:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c."
      }, {
        "lang" : "es",
        "value" : "Las funciones *_get_synthetic_symtab en la biblioteca Binary File Descriptor (BFD) (también llamada libbfd), tal y como se distribuye en GNU Binutils 2.29 no aseguran una entrada PLT única para un símbolo. Esto permite que los atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o que tengan otro impacto sin especificar mediante un archivo ELF manipulado, relacionado con elf32-i386.c y elf64-x86-64.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/25/binutils-heap-based-buffer-overflow-in-_bfd_x86_elf_get_synthetic_symtab-elfxx-x86-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22170",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=56933f9e3e90eebf1018ed7417d6c1184b91db6b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=61e3bf5f83f7e505b6bc51ef65426e5b31e6e360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/25/binutils-heap-based-buffer-overflow-in-_bfd_x86_elf_get_synthetic_symtab-elfxx-x86-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=56933f9e3e90eebf1018ed7417d6c1184b91db6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=61e3bf5f83f7e505b6bc51ef65426e5b31e6e360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1551",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-25T16:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131291."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect desde la versión 5.0.0.0 hasta la 5.0.7.2 podría permitir que un atacante remoto secuestre la acción de clicado de la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clicado de la víctima y, probablemente, lanzar más ataques contra la víctima. IBM X-Force ID: 131291."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43F8D4-A60E-4C56-B868-8616958A0B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A4F3B4-A3D8-4281-BBB1-8B95297657F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049722A-338F-49FA-A9B2-2A432F04D2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12F86C-FBDF-4231-B4EA-4279FC730088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBC9AEC-CD8B-4F2A-99A7-469B93107B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB03CE4-C3EE-41E9-9321-9AB9829FDB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B9AC88-C53D-4810-B21E-7A836524859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61864755-C7B6-416C-9D3E-334AB3D94825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB9030-50A4-4B9B-8457-9DB9E13B3211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2679C4-FF15-4FB5-A6D6-11229AB5EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BB28DE-AF37-4444-8BA5-9928072C2F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB6EF04-A24E-4857-8C7A-DE779AFA8B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6AFDC6-3596-4640-8E92-984B308A1C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008372",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131291",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1555",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-25T16:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect desde la versión 5.0.0.0 hasta la 5.0.7.2 podría permitir que un usuario autenticado genere un token API cuando no está suscrito al plan de aplicación. IBM X-Force ID: 131545."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B43F8D4-A60E-4C56-B868-8616958A0B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A4F3B4-A3D8-4281-BBB1-8B95297657F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049722A-338F-49FA-A9B2-2A432F04D2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12F86C-FBDF-4231-B4EA-4279FC730088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBC9AEC-CD8B-4F2A-99A7-469B93107B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB03CE4-C3EE-41E9-9321-9AB9829FDB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B9AC88-C53D-4810-B21E-7A836524859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8AD67C-0221-4EF1-B0A2-C13CEE62D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61864755-C7B6-416C-9D3E-334AB3D94825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB9030-50A4-4B9B-8457-9DB9E13B3211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2679C4-FF15-4FB5-A6D6-11229AB5EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BB28DE-AF37-4444-8BA5-9928072C2F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB6EF04-A24E-4857-8C7A-DE779AFA8B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6AFDC6-3596-4640-8E92-984B308A1C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008588",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100973",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131545",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T16:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as their name in the usr_registration table. The values are then emailed to the the user and administrator and if accepted become part of the new user's account."
      }, {
        "lang" : "es",
        "value" : "Mahara en versiones 15.04 anteriores a la 15.04.14, 16.04 anteriores a la 16.04.8, 16.10 anteriores a la 16.10.5, 17.04 anteriores a la 17.04.3 es vulnerable a que un usuario envíe una carga útil potencialmente peligrosa, como por ejemplo un código XSS, que se vaya a guardar como su nombre en la tabla usr_registration. Los valores se envían por correo electrónico a continuación al usuario y administrador y, si se aceptan, formarían parte de la nueva cuenta de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FF82A5-DF51-4719-9940-85A0E4AF4626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3605A76D-1C09-4998-B387-FE7BED77B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB396B0-459E-4C15-9813-980F35C4C44D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BD9F88-E643-4CF5-A426-82B2D6133F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F2D3A9-81B1-42E3-AF72-FBA985C48650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D050E953-88B1-40F7-98A8-B6A026292B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CDBF96-CFA2-4941-A9D9-C618A2A1D08D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DF3D9-A46D-4933-84FB-8179651C5B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D642FA0-D977-4157-B379-3BBA86D80D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D2BD22-57F7-4594-AE5F-426AA1D74BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5712D88-9218-4E7D-977C-07755D1B0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA26090-2ED4-453D-85AA-46ED4E00DFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F2B552-479F-4EEA-858B-2920E14BF5C0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4968B1-0D09-4449-B2A8-22B8C4B4346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "68A1A68E-704F-49C9-B07A-23C1B69A0966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262C2C07-CFDB-42A0-8896-758F1FF5BE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265120A4-CD21-425B-9272-06EB68654A80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1697308",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1697308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T17:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Server Side Request Forgery en Vebto Pixie Image Editor 1.4 y 1.7 permite que los atacantes remotos divulguen información o ejecuten código arbitrario mediante el parámetro url a Launderer.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vebto:pixie_-_image_editor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D690126-D8EE-41C7-96AB-8373D6DE1F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vebto:pixie_-_image_editor:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCACDF49-FF49-463C-AD88-C62E74CDB231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T17:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the \"id\" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el plugin Responsive Image Gallery en versiones anteriores a la 1.2.1 para WordPress permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro id en una tarea en la página add_edit_theme para wp-admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:responsive_image_gallery_gallery_album:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "DA06C60F-C0A6-4C78-8780-0544ED01189B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/55",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8907",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T17:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has \"chown -R\" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LS_USER account for creation of a hard link."
      }, {
        "lang" : "es",
        "value" : "El script init en el paquete app-admin/logstash-bin de Gentoo en versiones anteriores a la 5.5.3 y las versiones 5.6.x anteriores a la 5.6.1 tiene llamadas \"chown -R\" para árboles de directorio escribibles por los usuarios, lo que permite que los usuarios locales obtengan privilegios aprovechando el acceso a una cuenta $LS_USER para crear un vínculo físico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8102CDF3-E87D-47C5-AF0D-C80377F17BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC605F4-F54D-4CCE-871B-9ED65690A649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE359E34-6382-4CA6-8007-44E30AA2A37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE9BC9A-9560-4102-BA7A-35483A5EC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F805018-CE98-454F-AE85-4839245B8737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDBB24F-AB33-4601-B8F8-98A59B87A560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56110525-4479-4893-8173-4940FB9EAFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF433D16-F557-4C1D-B153-C2C2B92EC89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2764E7D4-6413-468B-BE09-A98AA62CADF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63588DEF-1628-4690-B7E0-F854D7C361D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F60E8A3-5BCE-4CD0-B0A8-866489ECC818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DDE0B-FD14-49EA-AEE7-EBDA8B36AB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C407A-9BEF-4291-A025-73B68D03AF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8356D01-2F43-4003-8ACD-4CB4B76E48A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D238B6-8065-4392-A343-D0215D514A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C455913E-FA72-4422-8B6B-83E5ECC1F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:logstash:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C493C-F643-4962-A0E3-7D6B5DC9FDE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92121D8A-529E-454A-BC8D-B6E0017E615D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/628558",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gentoo/gentoo/pull/5665",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=18f97c851c209f291b31ae7a902719f1c17c79fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bbd6cb398c1740c68e9b1b78340c887c58c1fbda",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/628558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gentoo/gentoo/pull/5665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=18f97c851c209f291b31ae7a902719f1c17c79fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bbd6cb398c1740c68e9b1b78340c887c58c1fbda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T21:29:01.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call."
      }, {
        "lang" : "es",
        "value" : "ofx_proc_file en ofx_preproc.cpp en LibOFX 0.9.12 permite a los atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basado en montículos y fallo de aplicación) mediante un archivo manipulado, tal y como demuestra una llamada ofxdump."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libofx_project:libofx:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9300054-4F1C-4CB7-8EFD-2DC64138A6A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libofx/libofx/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libofx/libofx/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T21:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "ReadRLEImage en coders/rle.c en GraphicsMagick 1.3.26 no gestiona correctamente las cabeceras RLE que especifican muy pocos colores. Esto permite que los atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de la aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=5381c71724e3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/458/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=5381c71724e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/458/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T21:29:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to hevc_decode_init1."
      }, {
        "lang" : "es",
        "value" : "La función build_msps en libbpg.c en libbpg 0.9.7 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o, probablemente, provocar cualquier otro tipo de impacto mediante un archivo BPG modificado, relacionado con hevc_decode_init1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leonzhao7/vulnerability/blob/master/A%20heap-buffer-overflow%20vulnerability%20in%20hevc_decode_init1%20of%20libbpg.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leonzhao7/vulnerability/blob/master/A%20heap-buffer-overflow%20vulnerability%20in%20hevc_decode_init1%20of%20libbpg.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-25T21:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of &colon; to construct a javascript: URL."
      }, {
        "lang" : "es",
        "value" : "OWASP AntiSamy hasta la versión 1.5.7 permite que se produzca Cross-Site Scripting (XSS) mediante entidades HTML5, tal y como demuestra el uso de : (:) para construir un javascript: URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antisamy_project:antisamy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "089D0CD6-5D98-4D0A-B0C5-BAEE49012045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/105656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/nahsra/antisamy/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/105656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/nahsra/antisamy/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T01:29:03.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key."
      }, {
        "lang" : "es",
        "value" : "Un canal lateral criptográfico basado en caché en la implementación RSA en Botan en versiones anteriores a la 1.10.17 y las versiones 1.11.x y 2.x anteriores a la 2.3.0 permite que un atacante local recupere información sobre las claves secretas RSA, tal y como demuestra CacheD. Esto ocurre porque un array se indexa con bits derivados de una clave secreta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.16",
            "matchCriteriaId" : "DAAEF77B-BB38-45E4-9859-911212C269B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C098FACD-8EDB-4A97-BA9F-39472F400F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1B306E-BCD0-4839-9D20-921BA5BEB1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30E1A6A-5944-4D82-8EFB-67639E9BE246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92649934-B0EB-4D27-AA54-760E7832E70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F80D802-D5AD-4A41-B5A3-23B7AE923053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F809C01-0A6E-4EDD-B9C1-6B1B41368B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8582CD-E9CE-4A56-83D2-33CFBC4BBE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EAF817-CCF2-40C3-A556-BA17895165DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92649146-62FC-4984-A726-18C9468240F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4928BBB-AD18-4EA5-98E4-9CB3CC75376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229A6D01-3882-4F3F-92F5-517F79644480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0699917-881B-4BA3-9D88-0ED47954DEA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCDCE72-44D7-442C-AF2A-EDC9E39126D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55DBFAF-48C1-412C-B56D-EBD7EC82588A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBAC97E-B04F-48EA-87C8-62FD14B0E759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A00B6F0-7DCC-46D4-818A-F17BFAF18E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61529353-E862-44AD-84EC-778B65C88112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B683D891-9A15-40F5-82B0-5B16359330F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EE4374-31D9-4E68-A700-AFF590F37283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F536ECD-C3D9-4997-A936-7E415A670E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF026C4E-FEAE-47A1-A3CA-330DBE6250ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA36F817-A50B-40E6-811B-B331BA2229A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F7E018-B544-4A7F-ABE1-737988AE0382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7CD5BD-2938-4C79-95A7-96AC1BB037A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D16EDE-885C-450F-85AD-3F49ABA6C340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436B72BE-9E39-46F0-869A-C18B74EB1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4107FF3-20B0-4D9D-9555-2022E48D91A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0DB79-ABE4-49A7-A194-E1B6007B2719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB4D3A5-4493-4E53-A52D-77D60099DAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E6A828-A610-4428-AD75-9CA594E06B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:1.11.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F950A7F7-416F-481C-9EF3-09C2F9AFAE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED962E0-714F-4DA5-B495-A7895C5F8232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9287361E-DC3A-4E80-BBA3-30D0419ACBC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F79C8A-DE48-4A2D-8670-7411870562AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298B6CD3-3EC1-47A7-B0E5-E28966C11BD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/randombit/botan/issues/1222",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/randombit/botan/issues/1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7969",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Request Forgery (CSRF) en el componente Secure Gateway de PowerSCADA Anywhere v1.0 redistribuido con PowerSCADA Expert v8.1 y PowerSCADA Expert v8.2 y Citect Anywhere versión 1.0, de Schneider Electric para múltiples peticiones de cambio de estado. Este tipo de ataque requiere cierto nivel de ingeniería social para conseguir que un usuario legítimo haga clic o acceda a un enlace o página maliciosa que contenga el ataque CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445511E-70B8-4E03-A178-FFDBE02E1609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE171A71-B1AF-471B-9D27-07D4491D05B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A3FA74-D201-41AA-BDA1-82816813AD11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:citect_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182F21D-1DF5-492A-9A3D-B913AC6B12F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7970",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite que se especifiquen nodos de destino del servidor arbitrarios en peticiones de conexión a los componentes de Secure Gateway y Server."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445511E-70B8-4E03-A178-FFDBE02E1609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE171A71-B1AF-471B-9D27-07D4491D05B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A3FA74-D201-41AA-BDA1-82816813AD11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:citect_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182F21D-1DF5-492A-9A3D-B913AC6B12F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7971",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite que se utilicen suites de cifrado obsoletas y se verifique incorrectamente el certificado Peer SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445511E-70B8-4E03-A178-FFDBE02E1609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE171A71-B1AF-471B-9D27-07D4491D05B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A3FA74-D201-41AA-BDA1-82816813AD11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:citect_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182F21D-1DF5-492A-9A3D-B913AC6B12F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7972",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite escaparse de las aplicaciones remotas de PowerSCADA Anywhere y ejecutar otros procesos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445511E-70B8-4E03-A178-FFDBE02E1609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE171A71-B1AF-471B-9D27-07D4491D05B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_expert:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A3FA74-D201-41AA-BDA1-82816813AD11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:citect_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182F21D-1DF5-492A-9A3D-B913AC6B12F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7973",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en la que un usuario no autenticado puede llamar a varias rutas permitiendo que se ejecuten comandos SQL arbitrarios contra la base de data subyacente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7974",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de salto de directorio/fuga de información en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en la que un usuario no autenticado puede ejecutar código arbitrario y filtrar archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9956",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de omisión de autenticación en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en la que el sistema contiene una sesión válida embebida. Un atacante podría utilizar ese ID de sesión como parte de la cookie HTTP de una petición web, resultando en una omisión de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9957",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en la que el servicio web contiene una cuenta de sistema oculta con una contraseña embebida. Un atacante podría utilizar esta información para conectarse al sistema con unas credenciales con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9958",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de control de acceso incorrecto en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en el que una gestión incorrecta de la configuración del sistema puede permitir a un atacante ejecutar código arbitrario bajo el contexto de root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9959",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en la que el sistema acepta el reinicio en una sesión por usuarios no autenticados, permitiendo que se realice una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9960",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:03.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en las versiones 1.2.1 y anteriores del software de U.motion Builder de Schneider Electric en la que los mensajes de error del sistema proporcionan más información de la que se debería mostrar a un usuario no autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "849D3761-51AA-4820-B995-BBB065B8086B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9961",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:04.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la versión 4.07.000 de Pro-Face GP Pro EX de Schneider Electric que permite que un atacante ejecute código arbitrario. Se necesita acceder a un ordenador para instalar el código malicioso. Al ubicar un archivo DLL/OCX específico, un atacante podría forzar que el proceso cargue DLL arbitrarios y ejecute códigos también arbitrarios en el contexto del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:pro-face_gp_pro_ex:4.07.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471F96CF-DFC4-4449-A9B4-C2BD6B39DEFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100114",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9962",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2017-09-26T01:29:04.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a agosto 2017 de ClearSCADA de Schneider Electric son susceptibles a una vulnerabilidad de asignación de memoria en la que se podrían enviar peticiones mal formadas a las aplicaciones cliente de ClearSCADA para provocar un comportamiento inesperado. Las aplicaciones cliente afectadas son ViewX y el icono de servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:clearscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2010",
            "matchCriteriaId" : "DAF38D64-EC72-4D39-80BB-4B3958C18B8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14001",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-09-26T02:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program."
      }, {
        "lang" : "es",
        "value" : "No se neutralizan correctamente los elementos especiales utilizados en un comando de sistema operativo en Digium Asterisk GUI 2.1.0 y anteriores. Se ha identificado una vulnerabilidad de inyección de comandos de sistema operativo que podría permitir la ejecución de código arbitrario en el sistema mediante la inclusión de comandos de sistema operativo en la petición URL del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk_gui:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "0E66B0B6-E3CF-4A63-9727-D859BC09AD69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100950",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T02:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La función AcquireResampleFilterThreadSet en magick/resample-private.h en ImageMagick 7.0.7-4 no gestiona correctamente el fallo en la asignación de memoria, lo que permite que los atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL en DistortImage en MagickCore/distort.c y cierre inesperado de la aplicación) mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/780",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T02:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "La función ReadCAPTIONImage en coders/caption.c en ImageMagick 7.0.7-3 permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo de fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE001E6E-5FD8-4C62-BEAC-9C2A5D992901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/771",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T05:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c."
      }, {
        "lang" : "es",
        "value" : "El subsistema KVM en el kernel de Linux hasta la versión 4.13.3 permite que los usuarios invitados del sistema operativo provoquen una denegación de servicio (fallo de aserción y bloqueo o cierre inesperado del hipervisor) mediante un valor guest_irq fuera de límites, relacionado con arch/x86/kvm/vmx.c y virt/kvm/eventfd.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.3",
            "matchCriteriaId" : "FA1E2C32-ED0D-4E2B-A313-448CC0545ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/15/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1490781",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=kvm&m=150549145711115&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=kvm&m=150549146311117&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1490781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=kvm&m=150549145711115&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=kvm&m=150549146311117&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12154",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-26T05:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the \"CR8-load exiting\" and \"CR8-store exiting\" L0 vmcs02 controls exist in cases where L1 omits the \"use TPR shadow\" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register."
      }, {
        "lang" : "es",
        "value" : "La función prepare_vmcs02 en arch/x86/kvm/vmx.c en el kernel de Linux hasta la versión 4.13.3 no asegura que los controles L0 vmcs02 \"CR8-load exiting\" y \"CR8-store exiting\" existan en casos en los que L1 omite el control vmcs12 \"use TPR shadow\". Esto permite que los usuarios invitados del sistema operativo obtengan acceso de lectura y escritura al registro CR8 del hardware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.3",
            "matchCriteriaId" : "FA1E2C32-ED0D-4E2B-A313-448CC0545ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100856",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1946",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1491224",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/51aa68e7d57e3217192d88ce90fd5b8ef29ec94f",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3698-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg155414.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1491224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/51aa68e7d57e3217192d88ce90fd5b8ef29ec94f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3698-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg155414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T06:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Faleemi FSC-880 00.01.01.0048P2 permiten la inyección SQL sin autenticación mediante el elemento Username en un documento XML a /onvif/device_service, tal y como se demuestra al leer la contraseña de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:faleemi:fsc-880_firmware:00.01.01.0048p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4AEB76-4563-4C7B-9638-984C74204B33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:faleemi:fsc-880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7786FAB7-C300-434C-B127-74D638943A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T06:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la versión 1.4.3.3 de UEditor mediante el atributo SRC de un elemento IFRAME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baidu:ueditor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.3.3",
            "matchCriteriaId" : "B5D0ADE2-CF30-42AB-8F6D-D5FAE3724C5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.yuag.org/2017/09/19/ueditor%E5%82%A8%E5%AD%98%E5%9E%8Bxss%E6%BC%8F%E6%B4%9E/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://ueditor.baidu.com/website/changelog.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.yuag.org/2017/09/19/ueditor%E5%82%A8%E5%AD%98%E5%9E%8Bxss%E6%BC%8F%E6%B4%9E/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T13:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Cash Back Comparison Script 1.0 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante la función PATH_INFO a search/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cashbackcomparisonscript:cash_back_comparison:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9658805-2FDD-4875-BEF7-7CEEC216F07A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42772/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T14:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of anti-CSRF tokens."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en la versión 2.0.1.12280 de ZKTeco ZKTime Web permite que los usuarios autenticados remotos secuestren la autenticación de los administradores para peticiones que añadan administradores aprovechando la falta de tokens anti-CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zkteco:zktime_web:2.0.1.12280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A66D7A-0989-48D3-A4C7-FF847300A6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Sep/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/38",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Sep/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T14:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en la interfaz de gestión de Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.1 anterior a la build 135.18, 10.5 anterior a la build 66.9, 10.5e anterior a la build 60.7010.e, 11.0 anterior a la build 70.16, 11.1 anterior a la build 55.13 y 12.0 anterior a la build 53.13 (excepto la build 41.24) que, si se explota, podría permitir que un atacante con acceso a la interfaz de gestión de NetScaler obtenga acceso administrativo a la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD06CC6E-DA2E-4F3F-9A35-9108826DE451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A953CA4-98B4-4881-8674-A5B9B6A427F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE459BE-DA8F-4DFB-B901-5F294C6311F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49454F7D-77B5-46DF-B95C-312AF2E68EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A254925E-AD47-4722-AAB2-43A6FEA900AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX227928",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX228091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX227928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX228091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T14:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de subida de archivos sin restricción en las funciones (1) imageSubmit y (2) proof_submit en Claydip Laravel Airbnb Clone 1.0 permiten que los usuarios autenticados remotos ejecuten código arbitrario mediante la subida de un archivo con extensión ejecutable y, a continuación, acceder a éste por medio de una petición directa al archivo en images/profile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claydip:airbnb_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649AA617-F273-41E2-851B-B319936C83E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42773/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42773/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T14:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed."
      }, {
        "lang" : "es",
        "value" : "Al utilizar el cliente local_batch de salt-api en SaltStack Salt en versiones anteriores a la 2015.8.13, las versiones 2016.3.x anteriores a 2016.3.5 y las versiones 2016.11.x anteriores a 2016.11.2, no se respeta la autenticación externa, por lo que se permite la omisión de todas las autenticaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2015.8.12",
            "matchCriteriaId" : "5135EC7D-6FA9-4F57-A282-5F8DA85E8C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FAF769-AFAC-4235-916C-F6EDA3CD1CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458E57E7-BF82-4863-B4E4-F39754B6665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C015342-15C6-4970-9137-10F900962159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2868E1-D6E6-4EBC-8330-6603D93C8EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD78645D-A0ED-4B22-982E-A65C016D7384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B7EDF4-414F-429A-BD20-0B967737598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594339CF-8192-425D-9C8C-AA51342D9477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54FADCE-5311-4C8A-9527-1623F9AAC69E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T14:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client."
      }, {
        "lang" : "es",
        "value" : "salt-api en SaltStack Salt en versiones anteriores a la 2015.8.13, las versiones 2016.3.x anteriores a 2016.3.5 y las versiones 2016.11.x anteriores a 2016.11.2 permite la ejecución arbitraria de comandos en un salt_master mediante el ssh_client de Salt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2015.8.12",
            "matchCriteriaId" : "5135EC7D-6FA9-4F57-A282-5F8DA85E8C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FAF769-AFAC-4235-916C-F6EDA3CD1CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458E57E7-BF82-4863-B4E4-F39754B6665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C015342-15C6-4970-9137-10F900962159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2868E1-D6E6-4EBC-8330-6603D93C8EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD78645D-A0ED-4B22-982E-A65C016D7384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B7EDF4-414F-429A-BD20-0B967737598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594339CF-8192-425D-9C8C-AA51342D9477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54FADCE-5311-4C8A-9527-1623F9AAC69E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T16:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c."
      }, {
        "lang" : "es",
        "value" : "Las funciones *_get_synthetic_symtab en la biblioteca Binary File Descriptor (BFD) (también llamada libbfd), tal y como se distribuye en GNU Binutils 2.29 interpretan un valor -1 como cuenta de ordenamiento en lugar de como marca de error. Esto permite que los atacantes remotos provoquen una denegación de servicio (desbordamiento de enteros y cierre inesperado de la aplicación) o que tengan otro impacto sin especificar mediante un archivo ELF manipulado, relacionado con elf32-i386.c y elf64-x86-64.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22148",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1425",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-26T17:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127478."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager en sus versiones 8.0.1.1 y 8.5.7 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 127478."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006265",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100961",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127478",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initial loading of that match."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en la versión 1.15.0.2 de Blizzard Overwatch permite que los usuarios autenticados remotos provoquen una denegación de servicio (expulsión de la temporada y pérdidas de SR para otros usuarios) abandonando una partida competitiva en un momento en concreto durante la carga inicial de esa partida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blizzard:overwatch:1.15.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D241583-3AB1-4A72-8721-B907696686B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101087",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us.battle.net/forums/en/overwatch/topic/20759216554",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us.battle.net/forums/en/overwatch/topic/20759216554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1527",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-26T17:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 130156."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "91BDDE54-95C6-4E95-9427-D83E61355E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1D338AF3-8FE6-4E51-B961-344E157EECFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8057C7D0-978D-490B-BE80-597A2CB27A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "16617000-4388-43EF-AE14-8C108068155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E4B6A964-F948-4FAA-A6C7-41641AF12504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC02B89-813E-4B3D-B518-6565BE06C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "3DEBE193-CDE1-406C-9042-4085AA0EED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "05B6C389-9332-4C33-A3AD-270A54AC564E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "07630F25-A03C-401D-A16A-51B63014C963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFA125-9D52-4C16-9946-DB8D43700415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "EF781F2F-05FB-4DBD-8BC1-98A630CD375A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "17E42B0A-0947-4799-993F-CBF8A84EBD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E95968B6-FF99-4234-9EC7-6EAA9C7DA753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613CC0CD-083E-439A-9A53-777E69CDE2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "0F1442C9-ED96-40C5-BE20-987C928BAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "50B6287C-5A45-46B7-A685-93D1CBA0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3693DBD8-F30F-44D0-A154-4C268120D7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDC7513-E826-42A7-B3DE-15EBAB836FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B8D43-BD99-499E-B0D4-27BFC997DF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007346",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100959",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130156",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1530",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-26T17:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130409."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130409."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "91BDDE54-95C6-4E95-9427-D83E61355E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1D338AF3-8FE6-4E51-B961-344E157EECFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8057C7D0-978D-490B-BE80-597A2CB27A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "16617000-4388-43EF-AE14-8C108068155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E4B6A964-F948-4FAA-A6C7-41641AF12504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC02B89-813E-4B3D-B518-6565BE06C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "3DEBE193-CDE1-406C-9042-4085AA0EED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "05B6C389-9332-4C33-A3AD-270A54AC564E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "07630F25-A03C-401D-A16A-51B63014C963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFA125-9D52-4C16-9946-DB8D43700415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "EF781F2F-05FB-4DBD-8BC1-98A630CD375A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "17E42B0A-0947-4799-993F-CBF8A84EBD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E95968B6-FF99-4234-9EC7-6EAA9C7DA753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613CC0CD-083E-439A-9A53-777E69CDE2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "0F1442C9-ED96-40C5-BE20-987C928BAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "50B6287C-5A45-46B7-A685-93D1CBA0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3693DBD8-F30F-44D0-A154-4C268120D7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDC7513-E826-42A7-B3DE-15EBAB836FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B8D43-BD99-499E-B0D4-27BFC997DF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007351",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100960",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130409",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1531",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-26T17:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130410."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130410."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "91BDDE54-95C6-4E95-9427-D83E61355E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1D338AF3-8FE6-4E51-B961-344E157EECFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8057C7D0-978D-490B-BE80-597A2CB27A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "16617000-4388-43EF-AE14-8C108068155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E4B6A964-F948-4FAA-A6C7-41641AF12504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC02B89-813E-4B3D-B518-6565BE06C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "3DEBE193-CDE1-406C-9042-4085AA0EED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "05B6C389-9332-4C33-A3AD-270A54AC564E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "07630F25-A03C-401D-A16A-51B63014C963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFA125-9D52-4C16-9946-DB8D43700415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "EF781F2F-05FB-4DBD-8BC1-98A630CD375A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "17E42B0A-0947-4799-993F-CBF8A84EBD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E95968B6-FF99-4234-9EC7-6EAA9C7DA753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613CC0CD-083E-439A-9A53-777E69CDE2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "0F1442C9-ED96-40C5-BE20-987C928BAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "50B6287C-5A45-46B7-A685-93D1CBA0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3693DBD8-F30F-44D0-A154-4C268120D7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDC7513-E826-42A7-B3DE-15EBAB836FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B8D43-BD99-499E-B0D4-27BFC997DF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007354",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100963",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130410",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1539",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-26T17:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a un escalado de privilegios debido a que no distinguen entre la pertenencia a un grupo interno o la pertenencia a un grupo de usuarios registrados. Mediante la manipulación de una pertenencia a un grupo LDAP, un atacante podría conseguir acceso con privilegios. IBM X-Force ID: 130807."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "91BDDE54-95C6-4E95-9427-D83E61355E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1D338AF3-8FE6-4E51-B961-344E157EECFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8057C7D0-978D-490B-BE80-597A2CB27A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "16617000-4388-43EF-AE14-8C108068155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E4B6A964-F948-4FAA-A6C7-41641AF12504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC02B89-813E-4B3D-B518-6565BE06C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "3DEBE193-CDE1-406C-9042-4085AA0EED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "05B6C389-9332-4C33-A3AD-270A54AC564E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "07630F25-A03C-401D-A16A-51B63014C963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06DFA125-9D52-4C16-9946-DB8D43700415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "EF781F2F-05FB-4DBD-8BC1-98A630CD375A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "17E42B0A-0947-4799-993F-CBF8A84EBD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E95968B6-FF99-4234-9EC7-6EAA9C7DA753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613CC0CD-083E-439A-9A53-777E69CDE2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "0F1442C9-ED96-40C5-BE20-987C928BAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "50B6287C-5A45-46B7-A685-93D1CBA0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3693DBD8-F30F-44D0-A154-4C268120D7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161542A0-E919-4105-AD4F-C881ACF8D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32504DEB-7391-4452-BA2E-409959B24222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F74820-DF10-499E-AF7A-93AC285843D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12274F-495C-4E81-A317-E66916B0A2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C89DF-C6CB-45C9-9592-30A83896BD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783C2592-9669-4C75-9E63-C834482F6F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD35B-B0C3-4B90-87E3-19EF561D3722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDC7513-E826-42A7-B3DE-15EBAB836FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B8D43-BD99-499E-B0D4-27BFC997DF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007451",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100967",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130807",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T18:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \\ characters cause incorrect 0x00 characters in bytecode.literal data."
      }, {
        "lang" : "es",
        "value" : "La versión 1.0 de JerryScript permite que los atacantes remotos provoquen una denegación de servicio (corrupción de la memoria dinámica \"heap\" jmem_heap_alloc_block_internal) o, posiblemente, que ejecuten código arbitrario mediante un archivo .js manipulado. Esto se debe a que los caracteres \\ no reconocidos provocan caracteres 0x00 incorrectos en los datos de bytecode.literal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CCB68A-559D-430C-BD80-B6AFE8EF3FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/2008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/2008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-26T22:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Intense WP \"WP Jobs\" plugin 1.5 for WordPress has XSS, related to the Job Qualification field."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) el plugin \"WP Jobs\" de Intense WP en su versión 1.5 para WordPress relacionada con el campo Job Qualification."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "43D991EE-1DA1-4B26-BB74-49373476CD97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FE48447C-1C29-46A8-B04A-F1A91DE3E1DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A2D0D415-D375-45D3-8191-492709D7EB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A5794E42-136E-4822-A5A6-F61860E7020B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6E1EE499-BD7D-405A-BFB4-C325A2187904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensewp:wp_jobs:1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2B40CBDC-D4CB-447D-B171-EDE480AC2830"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bbs.microdesktop.com/2017/09/25/wordpress-4-8-wp-jobs-1-5-job-qualification-edit-box-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101030",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-jobs/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://bbs.microdesktop.com/2017/09/25/wordpress-4-8-wp-jobs-1-5-job-qualification-edit-box-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-jobs/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T03:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/module_filters/index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la versión 5.1.-0 de la interfaz web EyesOfNetwork (también llamada eonweb) permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro filter en module/module_filters/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101031",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsj730sos/Vulnerability-details/wiki/eyesofnetwork_eonweb-5.1_filter_cross-site-scripting-%28XSS%29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsj730sos/Vulnerability-details/wiki/eyesofnetwork_eonweb-5.1_filter_cross-site-scripting-%28XSS%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the recurrence_id parameter to /wp-admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "Existe una inyección SQL en /includes/event-management/index.php en el plugin event-espresso-fee (también conocido como Event Espresso Lite) en su versión v3.1.37.12.L para WordPress mediante el parámetro recurrence_id en /wp-admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eventespresso:event_espresso_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.37.12.l",
            "matchCriteriaId" : "3112E7C3-9A4D-4F31-BC00-2F8739E087E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/wp_event-espresso-free.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/wp_event-espresso-free.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter."
      }, {
        "lang" : "es",
        "value" : "En GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B450BEE-B175-4A6E-A054-C71ABB0F2203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter."
      }, {
        "lang" : "es",
        "value" : "En GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B450BEE-B175-4A6E-A054-C71ABB0F2203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme."
      }, {
        "lang" : "es",
        "value" : "En la página Install Themes en GeniXCMS 1.1.4, los usuarios autenticados remotos pueden ejecutar código PHP arbitrario mediante un archivo .php en un archivo ZIP de un tema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B450BEE-B175-4A6E-A054-C71ABB0F2203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module."
      }, {
        "lang" : "es",
        "value" : "En la página Upload Modules en GeniXCMS 1.1.4, los usuarios autenticados remotos pueden ejecutar código PHP arbitrario mediante un archivo .php en un archivo ZIP de un módulo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B450BEE-B175-4A6E-A054-C71ABB0F2203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request."
      }, {
        "lang" : "es",
        "value" : "En GeniXCMS 1.1.4, gxadmin/index.php tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el campo Menu ID en una petición page=menus."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B450BEE-B175-4A6E-A054-C71ABB0F2203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 1.6.4 del plugin Simple Student Result para WordPress tienen una vulnerabilidad de omisión de autenticación ya que las funciones fn_ssr_add_st_submit() y fn_ssr_del_st_submit() en functions.php solo piden el número del id del estudiante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saadamin:simple_student_result:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.3",
            "matchCriteriaId" : "E06E0971-5862-44FF-90F4-0227C353DA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://limbenjamin.com/articles/simple-student-result-auth-bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/simple-student-result/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8920",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://limbenjamin.com/articles/simple-student-result-auth-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/simple-student-result/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-27T08:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file."
      }, {
        "lang" : "es",
        "value" : "La función sdp_parse_fmtp_config_h264 en libavformat/rtpdec_h264.c en FFmpeg en versiones anteriores a la 3.3.4 gestiona incorrectamente los valores sprop-paremeter-sets vacíos, lo que permite que los atacantes causen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap) o posiblemente otro impacto no especificado mediante un archivo sdp manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.3",
            "matchCriteriaId" : "2B5DAA40-CAB2-4B80-9B3D-36709C4E12E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/c42a1388a6d1bfd8001bf6a4241d8ca27e49326d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/c42a1388a6d1bfd8001bf6a4241d8ca27e49326d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10932",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2017-09-28T01:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones anteriores a V12.17.20 de los productos de ZTE Microwave de la serie NR8000 (NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR y NR8950) son las aplicaciones de arquitectura C/S que emplean el servicio Java RMI mediante el cual los servidores emplean la biblioteca Apache Commons Collections (ACC), lo que puede originar vulnerabilidades de deserialización de Java. Un atacante remoto sin autenticar puede explotar estas vulnerabilidades enviando una petición RMI manipulada para ejecutar código arbitrario en el host objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:nr8120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.17.20",
            "matchCriteriaId" : "E8807FCE-8AC8-4E32-B175-8A685ADC6835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:nr8120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F1B24E-199F-4E46-8ADE-911AA9304537"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:nr8120a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.17.20",
            "matchCriteriaId" : "F5CB45CB-4324-46BA-85E4-8BC9E3E2F7A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:nr8120a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAC6C2A-E58B-4212-A19B-89498F4EFD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:nr8150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.17.20",
            "matchCriteriaId" : "48A6E609-D8D6-460E-B8C2-B667019BDF18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:nr8150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8B80DA-7D74-41A7-A015-8EB2FFECC6D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:nr8250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.17.20",
            "matchCriteriaId" : "62E51DE4-4AFC-4B70-A453-D618F27C5FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:nr8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD90566-E31C-480A-A408-64C80871A037"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:nr8000tr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.17.20",
            "matchCriteriaId" : "5940B7FE-423A-45D7-89BD-6D5564E1BD76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:nr8000tr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731CC36E-F5C7-4BD5-98CD-9D53FEFAA322"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:nr8950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.17.20",
            "matchCriteriaId" : "6070E2BF-092D-4AEC-A1F5-CA073558E00B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:nr8950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43CD2EB-B572-4B52-8BDE-3B7C72912005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008422",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204."
      }, {
        "lang" : "es",
        "value" : "En los chips Wi-Fi Broadcom BCM4355C0 versión 9.44.78.27.0.1.56 y otros chips, un atacante puede crear un frame del RRM Neighbor Report Frame Handler malformadopara desencadenar un desbordamiento interno de búfer en el firmware Wi-Fi, también conocido como B-V2017061204."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:bcm4355c0_firmware:9.44.78.27.0.1.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F51115-D846-4E13-9EE3-AE29CFC0ECE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4355c0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AA6E9F-384C-4981-B570-1B6B21DE5961"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "11895153-2FE5-4D73-B7FC-182FA280BA36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1289",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42784/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42784/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V2017061205."
      }, {
        "lang" : "es",
        "value" : "En los chips Wi-Fi Broadcom BCM4355C0 9.44.78.27.0.1.56 y otros chips, se podrían desencadenar desbordamientos internos de la memoria dinámica (heap) del firmware Wi-Fi si se utilizan frames en modo Fast Transition con intinerancia Over-the-Air. Esto conduciría a una denegación de servicio u otros efectos, lo que también se conoce como B-V2017061205."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:bcm4355c0_firmware:9.44.78.27.0.1.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F51115-D846-4E13-9EE3-AE29CFC0ECE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4355c0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AA6E9F-384C-4981-B570-1B6B21DE5961"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "11895153-2FE5-4D73-B7FC-182FA280BA36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144329/Broadcom-802.11r-FT-Reassociation-Response-Overflows.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144329/Broadcom-802.11r-FT-Reassociation-Response-Overflows.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Las versiones 4.x de FreeIPA que tengan la versión 2.213 de la API permiten que usuarios autenticados remotos omitan las restricciones de bloqueo de cuenta previstas mediante una acción de desbloqueo con un ID de sesión antiguo (para la misma cuenta de usuario) que se había creado para una sesión anterior. NOTA: El fabricante afirma que no existe este problema en este producto y no reconoce este informe como un problema de seguridad válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71429C12-3A4D-4412-9550-E791883A7E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865A81F2-D9BD-47DC-A635-EA3B122CB66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E797DF-4F3A-464D-B49E-142292C95DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E97AAF-77F5-4BC4-8857-C3966EA117B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0115B8E-7AD4-41D7-A785-DB3441CEF886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AD72D4-CF70-46BC-A980-ED2C8859A128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4789CE-5BAE-42A3-B8A1-7C22DB2726A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA432C-89F2-4207-B867-05B7C386F5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B320E94F-1110-441C-A8A1-CDB3D8E6C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC763F1-5B71-494C-8E8C-A3AB6D90248C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F71E457-DC39-4FFC-87FB-FBC187D1C8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3E80C7-5169-4241-A0D2-44DDAB632390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B9782C-BDD1-4D54-9851-A92FB1AEC3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8BBE22-BBAC-42E8-97FD-5948CED7169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C012151-B96A-45E8-A915-D42511EECB88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47014414-E33A-4F0E-A176-776D73F2B900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027670DD-56FD-4CC1-9C2C-0AB7876E8B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64FB1C5-B46C-4C9B-A9B3-19FA365C6957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5243F6-793F-4674-9460-6E47D8017F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4183CD99-9C98-49C5-AD08-29EAEB6FB8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C8B89B-CBD5-4917-8841-4D338F2726CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22800DB4-7B42-4CDF-98DF-28E3EC8A47AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFECE21-6D83-4F86-9FDC-1CDA11346469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D702655E-1F3C-4C25-BB25-E121C3559877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B71CD3-6BFE-437F-83CE-C3CE7251F427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C97475-0869-492E-A87E-78CFBC612C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AFE514-CD16-4F0F-B6F1-6F24C7D54D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D100DB3-C496-441B-B86E-AC754F59AE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5CE49B-C5EA-4E3D-9163-C5A375E01E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAF3C72-652F-4FD2-97E3-C0046000D861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47653A5A-BC24-4F29-963F-37216CE3F892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143532/FreeIPA-2.213-Session-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143532/FreeIPA-2.213-Session-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12621",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-28T01:29:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a \"SYSTEM\" entity with a URL and that entity is used in the body of the Jelly file, during parser instantiation the parser will attempt to connect to said URL. This could lead to XML External Entity (XXE) attacks in Apache Commons Jelly before 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Durante el análisis sintáctico de archivos Jelly (xml) con Apache Xerces, si se declara una entidad de tipo de archivo personalizado con una entidad \"SYSTEM\" con una URL y esa entidad se emplea en el cuerpo del archivo Jelly, el analizador sintáctico intentará conectarse a dicha URL durante la creación de la instancia del análisis. Esto podría permitir ataques XEE (XML External Entity) en Apache Commons Jelly en versiones anteriores a la 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_jelly:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "41EE6AE8-F18D-4CDD-BA96-4BA1ED170622"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101052",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039444",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/JELLY-293",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f1fc3f2c45264af44ce782d54b5908ac95f02bf7ad88bb57bfb04b73%40%3Cdev.commons.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/JELLY-293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f1fc3f2c45264af44ce782d54b5908ac95f02bf7ad88bb57bfb04b73%40%3Cdev.commons.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en el método CPerlHost::Add en win32/perlhost.h en Perl en versiones anteriores a la 5.24.3-RC1 y las versiones 5.26.x anteriores a 5.26.1-RC1 en Windows permite que los atacantes ejecuten código arbitrario mediante una variable de entorno larga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.24.2",
            "matchCriteriaId" : "DB276E2C-622C-45EB-8378-35751366049F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:5.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71CAECA-2A6A-4604-863F-3C1C055FB1CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101051",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rt.perl.org/Public/Bug/Display.html?id=131665",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180426-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rt.perl.org/Public/Bug/Display.html?id=131665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180426-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13676",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-09-28T01:29:01.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. A Norton Remove & Reinstall update, version 4.4.0.58, has been released which addresses the aforementioned vulnerability."
      }, {
        "lang" : "es",
        "value" : "Norton Remove Reinstall puede ser susceptible a una vulnerabilidad de precarga de DLL. Este tipo de problema ocurre cuando una aplicación trata de llamar a un DLL para ejecutarlo y un atacante proporciona en su lugar un DLL malicioso. Dependiendo de cómo esté configurada la aplicación, ésta por lo general seguirá una ruta de búsqueda específica para localizar el DLL. La vulnerabilidad puede ser explotada mediante una escritura simple de archivo (o, potencialmente, una sobrescritura), lo que resulta en un DLL externo que se ejecuta bajo el contexto de la aplicación. Se ha lanzado una actualización de Norton Remove Reinstall, la versión 4.4.0.58, que soluciona esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norton:remove_\\&_reinstall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "7FECBAB0-646F-4DAE-BB3E-30AFDA299280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100939",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170926_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Mitigation", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170926_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1407",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-28T01:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Manager Virtual Appliance en sus versiones 6.0 y 7.0 podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el sistema. Mediante el envío de una petición especialmente manipulada, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema. IBM X-Force ID: 127394."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAAD944-2A0E-4A75-AE51-34DDC4C3ACB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FB196B-1B0B-4B14-BC5C-1F804BBCCB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0187EA9-098C-4650-A385-4CACC1356F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B611614-3FF9-401F-A88F-04DBF065FDA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB33ED-08C3-467A-921D-F70349661B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07547A7-E87E-4085-983F-29BD485E3160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007377",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101015",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127394",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de redirección abierta en OpenText Documentum Administrator 7.2.0180.0055 permiten que los atacantes remotos redireccionen a los usuarios a sitios web arbitrarios y lleven a cabo ataques de phishing mediante (1) una URL en el parámetro startat a xda/help/en/default.htm o (2) /%09/ (barra diagonal + código ascii de tabulador horizontal + barra diagonal) seguido por un dominio en el parámetro redirectUrl en xda/component/virtuallinkconnect."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_administrator:7.2.0180.0055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEBDA29-6EC7-4E2D-A74A-3967AE2C6458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_webtop:6.8.0160.0073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C082233-5926-436C-B55D-99349345A9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de redirección abierta en OpenText Documentum Webtop versión 6.8.0160.0073 permiten que los atacantes remotos redireccionen a los usuarios a sitios web arbitrarios y lleven a cabo ataques de phishing mediante (1) una URL en el parámetro startat a xda/help/en/default.htm o (2) /%09/ (barra diagonal + código ascii de tabulador horizontal + barra diagonal) seguido por un dominio en el parámetro redirectUrl en xda/component/virtuallinkconnect."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_administrator:7.2.0180.0055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEBDA29-6EC7-4E2D-A74A-3967AE2C6458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_webtop:6.8.0160.0073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C082233-5926-436C-B55D-99349345A9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a (1) crafted DTD, involving unspecified XML structures in a request to xda/com/documentum/ucf/server/transport/impl/GAIRConnector or crafted XML file in a MediaProfile file (2) import or (3) check in."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XEE (XML External Entity) en la versión 7.2.0180.0055 de OpenText Documentum Administrator permiten que los usuarios autenticados remotos listen el contenido de directorios remotos, lean archivos arbitrarios, provoquen una denegación de servicio o, en Windows, obtengan hashes de usuario de Documentum mediante (1) un archivo DTD manipulado, que involucra estructuras XML sin especificar en una petición a xda/com/documentum/ucf/server/transport/impl/GAIRConnector o un archivo XML manipulado en un archivo MediaProfile (2) importado o (3) insertado en el repositorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_administrator:7.2.0180.0055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEBDA29-6EC7-4E2D-A74A-3967AE2C6458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_webtop:6.8.0160.0073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C082233-5926-436C-B55D-99349345A9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/58",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a (1) crafted DTD, involving unspecified XML structures in a request to xda/com/documentum/ucf/server/transport/impl/GAIRConnector or crafted XML file in a MediaProfile file (2) import or (3) check in."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XEE (XML External Entity) en la versión 6.8.0160.0073 de OpenText Documentum Webtop permiten que los usuarios autenticados remotos listen el contenido de directorios remotos, lean archivos arbitrarios, provoquen una denegación de servicio o, en Windows, obtengan hashes de usuario Documentum mediante (1) un archivo DTD manipulado, que implica estructuras XML sin especificar en una petición a xda/com/documentum/ucf/server/transport/impl/GAIRConnector o un archivo XML manipulado en un archivo MediaProfile (2) importado o (3) insertado en el repositorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_administrator:7.2.0180.0055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEBDA29-6EC7-4E2D-A74A-3967AE2C6458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_webtop:6.8.0160.0073:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C082233-5926-436C-B55D-99349345A9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/58",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo Cross-Site Scripting (XSS) en el plugin de 2kb Amazon Affiliates Store en versiones anteriores a la 2.1.1 para WordPress permiten que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante (1) el parámetro page o (2) el parámetro kbAction en la página kbAmz a wp-admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2kblater:2kb_amazon_affiliates_store:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "17A16178-8A51-4374-8CA3-B42C5FB9BFA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101050",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144261/WordPress-2kb-Amazon-Affiliates-Store-2.1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/2kb-amazon-affiliates-store/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144261/WordPress-2kb-Amazon-Affiliates-Store-2.1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/2kb-amazon-affiliates-store/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 5.5.10 de Laravel gestionan incorrectamente el proceso de verificación del token remember_me porque DatabaseUserProvider no compara los tokens constantemente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.9",
            "matchCriteriaId" : "813815A7-28DC-4A74-ACC0-BE1DFCDF582F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/laravel/framework/pull/21320",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/releases/tag/v5.5.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://laravel-news.com/laravel-v5-5-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/pull/21320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/releases/tag/v5.5.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://laravel-news.com/laravel-v5-5-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hls_pcm_sample in hevc.c in libavcodec in FFmpeg and put_pcm_var in hevcdsp_template.c in libavcodec in FFmpeg."
      }, {
        "lang" : "es",
        "value" : "La función hevc_write_frame en libbpg.c en libbpg 0.9.7 permite que los atacantes remotos causen una denegación de servicio (lectura fuera de límites y cierre inesperado de la aplicación) o posiblemente otro impacto no especificado mediante un archivo BPG manipulado relacionado con la interacción incorrecta con hls_pcm_sample en hevc.c en libavcodec en FFmpeg y put_pcm_var en hevcdsp_template.c en libavcodec en FFmpeg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leonzhao7/vulnerability/blob/master/An%20Out-of-Bounds%20Read%20%28DoS%29%20Vulnerability%20in%20hevc.c%20of%20libbpg.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leonzhao7/vulnerability/blob/master/An%20Out-of-Bounds%20Read%20%28DoS%29%20Vulnerability%20in%20hevc.c%20of%20libbpg.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:01.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copy_CTB_to_hv in hevc_filter.c in libavcodec in FFmpeg and sao_filter_CTB in hevc_filter.c in libavcodec in FFmpeg."
      }, {
        "lang" : "es",
        "value" : "La función hevc_write_frame en libbpg.c en libbpg 0.9.7 permite que los atacantes remotos causen una denegación de servicio (subdesbordamiento de enteros y cierre inesperado de la aplicación) o posiblemente otro impacto no especificado mediante un archivo BPG manipulado relacionado con la interacción incorrecta con copy_CTB_to_hv en hevc_filter.c en libavcodec en FFmpeg y sao_filter_CTB en hevc_filter.c en libavcodec en FFmpeg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leonzhao7/vulnerability/blob/master/An%20integer%20underflow%20vulnerability%20in%20sao_filter_CTB%20of%20libbpg.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leonzhao7/vulnerability/blob/master/An%20integer%20underflow%20vulnerability%20in%20sao_filter_CTB%20of%20libbpg.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1483",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-28T01:29:02.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Manager Adapters 6.0 y 7.0 no realizan chequeos de autenticación para un recurso o funcionalidad críticos, permitiendo que los usuarios anónimos accedan a áreas protegidas. IBM X-Force ID: 128621."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FB196B-1B0B-4B14-BC5C-1F804BBCCB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0187EA9-098C-4650-A385-4CACC1356F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EC043A-A9F1-4DE1-BFBB-3E48AFEE70EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB33ED-08C3-467A-921D-F70349661B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07547A7-E87E-4085-983F-29BD485E3160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007375",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101013",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128621",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange."
      }, {
        "lang" : "es",
        "value" : "TeamWork Job Links permite que se suban archivos arbitrarios en profileChange y coverChange."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamworktec:job_links:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18C8D3-9138-43C4-B945-1C064B777580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42795/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42795/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover."
      }, {
        "lang" : "es",
        "value" : "TeamWork Photo Fusion permite que se suban archivos arbitrarios en changeAvatar y changeCover."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamworktec:photo_fusion:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706D70AD-292B-4E53-B3D5-088F44761C86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42797/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42797/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamWork TicketPlus allows Arbitrary File Upload in updateProfile."
      }, {
        "lang" : "es",
        "value" : "TeamWork TicketPlus permite que se suban archivos arbitrarios en updateProfile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamworktec:ticketplus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58157260-9568-4BEA-95A4-3B0286CC1FDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42796/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42796/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling."
      }, {
        "lang" : "es",
        "value" : "El sistema de gestión Annual Maintenance Contract (AMC) de Mojoomla permite que se suban archivos arbitrarios a la hora de manejar imágenes de profilesetting."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:annual_maintenance_contract_management_system:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D8E5430A-2D7D-4687-A2ED-515FBD049439"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42799/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42799/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "SMSmaster Multipurpose SMS Gateway de Mojoomla para WordPress permite la inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:smsmaster_multipurpose_sms_gateway:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C8DDED77-096B-4857-9599-0982DCEA2934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42798/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42798/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla School Management System for WordPress allows SQL Injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "School Management System de Mojoomla para WordPress permite la inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:school_management_system:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7DCB4412-4DD5-4D73-AC01-48AE4AE36205"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42804/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42804/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "WPGYM - WordPress Gym Management System de Mojoomla permite la inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:wpgym_gym_management_system:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E3854CB7-58EF-4B0B-810C-EF449A8C5819"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42801/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42801/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "WPCHURCH - Church Management System de Mojoomla permite la inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:wpchurch_church_management_system:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0F2AFAF7-875A-4A2C-B2FA-D7AA3EC39880"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42800/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42800/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Hospital Management System de Mojoomla para WordPress permite la inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:hospital_management_system:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "DB0220EB-2B9B-4938-9E60-86CEB59D7441"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42802/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42802/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter."
      }, {
        "lang" : "es",
        "value" : "WPAMS - Apartment Management System de Mojoomla para WordPress permite la inyección SQL mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:wpams_apartment_management_system:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F932053E-F868-40EE-B83B-0E85D1D69741"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42805/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42805/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-28T01:29:02.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to \"..\" handling was incompatible with the pathname validation used by unspecified community modules."
      }, {
        "lang" : "es",
        "value" : "Node.js en versiones 8.5.0 anteriores a la 8.6.0 permite que los atacantes remotos accedan a archivos a los que no se debería acceder porque un cambio en el modo de manejar los \"..\" sería incompatible con el esquema de validación de nombres de ruta utilizado por módulos sin especificar de la comunidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B4767-BFBC-4595-90A6-64927ADEE378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101056",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/september-2017-path-validation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/nodejs/status/913131152868876288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/september-2017-path-validation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/nodejs/status/913131152868876288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1577",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-28T01:29:02.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal 7.0, 8.0, 8.5 y 9.0 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias \"punto punto\" (/../) para visualizar archivos arbitrarios en el sistema. IBM X-Force ID: 132117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6ECEE98-B276-4ED6-AA5A-109EA57E9925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4FF84B-A17F-464B-A718-67C44D2C69BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40E0F5-B964-4BDC-828E-7571619F7C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF6533-4FE9-4A9B-ABF6-CEDD30402A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008586",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101017",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039405",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132117",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1591",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-09-28T01:29:02.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132368."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere DataPower Appliances versión 7.0.0 hasta 7.6, es vulnerable a ataques de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, y por lo tanto, alterar la funcionalidad deseada que podría conllevar a la divulgación de credenciales dentro de una sesión confiable. ID de IBM X-Force: 132368."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A38D3F1-B9B7-4507-9E7D-8D6BB6B4BA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDD32DA-E5B7-4396-8DE4-EEE9E2A2578B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102B1969-5BE1-4CC2-9588-691D715F4DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EBFF6E-53A2-4187-801A-8640D941C717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A51FA23-9FF6-4236-9EBE-C063EA70211B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E0456B-A3DA-4E78-9566-11106CB57B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79CAC5E6-15C2-4F22-A3D3-CA58A33903F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A92C11-CB05-4D5F-A58D-1AC2A2AE49E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9C4B24-3F61-4790-920E-67A287F4FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3470C5C5-0023-433F-8266-05EDAC5E1C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E1DC3-3CFF-4F20-B908-36871BC513EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC5134B-9542-4EA3-A10B-C7A3C6DEFF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5389D4-9396-428F-90B2-F1E91B600A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49945A97-02BF-4F4B-80C3-CEE2ADEF8142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6F1087-E586-4D87-B323-CE8FBB370DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDA13A7-83FE-4B20-A7D0-76183699B09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE9AD587-4B32-439F-9C99-3A5E293C6CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351F8DC4-34ED-478A-8F63-530E91651861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964ED59D-2118-47F8-BD01-66051DC7957D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FED8A1C-7C8B-4636-BD55-A30F361BF3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46CC198-5282-4398-9AA3-96FA18D1B76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48173CD-C84A-4A3A-A91A-E3808BFD0CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDB53F0-8AFD-4ACC-A8EC-D910E5B77996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022E5711-C03B-4456-8F31-C7685E010FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FEDAEBE-CB98-4B2B-A228-4B730401262F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFA9D43-38AE-4331-8031-DE20A0DDB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A159909C-C85A-4A6D-B2FE-AAC130BAFC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CAF192-4F42-4DCB-8F81-9B72554CD5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0C8E56-F6C9-4D91-B974-6A4DD6D2593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B717E5-84C1-4CF5-BDDB-22EC2EE9DE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44805D56-CD37-480D-947F-C7B075E72F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F297CABF-10ED-405B-AEEB-FED174EF56A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7929BF-68EE-440D-92AE-77A4984CF3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB853AEF-DF28-477A-B6F0-3EDE63BCA93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D84AAA9-B3B9-42F9-9703-847DFE8D8178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E7C415-D1CF-4A76-9FE2-DED1605D0AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AB722E-0E6D-4DCD-A57A-B74B4C2A96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7E3EE6-A73F-467C-A9D9-52A35597E7C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36BDBADF-65FA-4EC7-AF9E-AB6A03668154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32139A0-894E-4A7D-AED8-4584B1680693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41AB81C-9F09-4DCC-BACA-25164CA8053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33502503-EA47-4498-ABA5-A37E1D0604D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCE704-2DEC-4339-927E-0519DBCC3B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C5ACAC-960B-42BC-9D5E-CF6AEDB33CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3072ABC1-22E9-462F-80EB-489504BC9CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53DB10C-C377-4ABD-9470-325AE52B8AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C298EB-410E-4953-A972-33666EFA7D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC5B96D-DE35-43AC-B720-D35E390DA78A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE47689B-4233-4038-A0D6-E88567F60BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE074A6E-6FE8-4E6F-BA2B-C1AC95D6D248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C39DC4C-2268-4D29-8B3B-F84761ECF4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA8FE6D-BB4A-4AF6-871C-F0681E59C6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6092928D-BF84-4A46-8ADA-21D36CD4E230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A47EBCD-4160-4B17-80ED-3C89629BE8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFA5522-29C8-4496-B4E1-B894C1DA7AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CA8ACA-4060-49DE-BF60-7D196F175615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267E68E8-EB07-462E-94BB-4F96A63443E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB2F80D-9908-4269-9115-DFF5339705C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0914A678-A86D-436B-822A-656811CC9EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7E02EE-BC8E-4B40-82BD-986A93C816E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851A125-1929-4839-A423-21A7EBAC7841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E8E276-1BEE-4A88-B5DB-EE6C8947C91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B328B8D-3B4E-4964-BC8F-506A498B1BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B7BCA8-CF1D-4EF1-B80A-819CB630C49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCBD768-EAD7-40A8-94D5-ECFDC796F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BDECCB-7460-4212-AE2F-832E2B3F3AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CA331B-79E6-4051-AA8B-AFDADFEFA718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C2AA21-0527-4D6B-BAA4-8DDEA964E266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FE278C-E00A-4739-9A93-5F8F86386455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F1048C-F9E8-4EF2-AB0C-78E4D65A4925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4084264-D16A-45AC-A972-AAEE02BD4190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB166ED-6AF5-4C16-9E19-DB7B1DDD3B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71877AE-CFB5-4B11-880B-C9B2F090B177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119214C4-CF20-4BFE-A0FB-82D15193CB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D46C36-6662-48C2-B5B0-4BEDD040F68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD560D9-B35F-41E6-9895-9F39E873B622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2469E01-F471-496A-800B-C369D6A4EDC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70347058-3EE4-4B01-98FF-53A0BA2202C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDB0FC9-8890-45CF-BAA5-09CC655AC647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDCA98C-9360-4FCB-8B51-1C86994A2C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B132DA61-30D2-4D04-B8A5-6678A6DF7670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDE5F6F-AED2-42ED-A3C7-E3DE7A395548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F74EF3-0B80-40C8-84E6-EA01F74738B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:7.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC26F69C-797D-431A-A948-046423AFE283"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101021",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132368",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2551",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2017-09-28T01:29:02.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en versiones anteriores a la 3.4.2 del plugin BackWPup para WordPress permite que se pueda descargar un archivo de copia de seguridad mediante un ataque de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inpsyde:backwpup:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.4.1",
            "matchCriteriaId" : "0D14B9B7-9AB4-415B-9C9A-C01974C7DF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=201",
        "source" : "larry0@me.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/backwpup/#developers",
        "source" : "larry0@me.com",
        "tags" : [ "Product", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vapidlabs.com/advisory.php?v=201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/backwpup/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:48.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en SAP Enterprise Portal 7.50 permite que atacantes remotos inyecten scripts web o HTML arbitrarios. Esta vulnerabilidad también se puede consultar en SAP Security Notes 2469860, 2471209 y 2488516."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "16AFFE57-DB0A-4350-8199-1A6EC68F1EC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100786",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100788",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100805",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101068",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017090219",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017090219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11479",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-09-29T01:34:48.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 5.6.1 de Kibana presentan una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Timelion que podría permitir a un atacante obtener información sensible o realizar acciones destructivas en nombre de otros usuarios de Kibana."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAFDC79-44C7-4CD4-BAF7-E4263A94D55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19498633-0929-4FA6-84AA-21D392CF9431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD1A0D0-D2AD-48A1-B833-4D3914631D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794A6F03-3152-4A05-911F-3EA58250E906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E8AB6F-EA19-4C92-8AAE-FE6EFA06AF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDE1AED-DB91-4DAA-9AD8-5859C7D58AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B420684-A6B0-46E4-8214-F8BB1D3E1E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBBEEC5-0843-41F1-BD55-0C8C8CA781FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ABA67-0305-46E3-AAED-E3FC9F963F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93558649-84F5-448A-B191-1A0052150929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CD0D6D-2AC7-46E2-ABBE-B780F47DD4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059C285F-499A-481D-876E-9BEA2EC8628C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E741D583-C568-4A93-A344-A54267B292F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653C9B4E-5A67-4566-B687-68454C72B1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852CEAF2-B88A-44AB-8B83-9A568CDBCEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBCC33B-3171-4AD4-A57D-4C0C78536DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F168795-5821-407A-B789-3673A51D2393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8116EC73-5279-48F3-A958-0C8FAB8755B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B3710A-8F7E-42C5-9832-47FF3EF89443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A2BA4B-B74F-40B9-9536-80BF19DE9B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C22151C-45AD-44DB-B3E0-178BC93CC8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:kibana:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DFD4F0-9179-4B37-90B0-8CFF88CE3828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2019/10/24/1",
        "source" : "security@elastic.co"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/10/29/3",
        "source" : "security@elastic.co"
      }, {
        "url" : "https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884",
        "source" : "security@elastic.co",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/10/24/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/10/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12222",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted association request. An exploit could allow the attacker to cause the switch to restart. This vulnerability affects Cisco Catalyst 3650 and 3850 switches running IOS XE Software versions 16.1 through 16.3.3, and acting as wireless LAN controllers (WLC). Cisco Bug IDs: CSCvd45069."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el gestor de controladores de red inalámbrica de CISCO IOS XE permite que un atacante adyacente sin autenticar haga que el switch se reinicie y provoque una denegación de servicio (DoS) como consecuencia. Esta vulnerabilidad se debe a una validación de entrada insuficiente. Un atacante podría explotar esta vulnerabilidad enviando una petición de asociación manipulada. Un exploit podría permitir que el atacante provoque el reinicio del switch. Esta vulnerabilidad afecta a los switches de Cisco Catalyst 3650 y 3850 que ejecuten el software de IOS XE desde la versión 16.1 hasta la 16.3.3 y actúen como controladores de conexiones WLAN (WLC). Cisco Bug IDs: CSCvd45069."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF08F8-5B1D-42A6-B333-84B9D9A14941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438B3809-0783-44AC-8BC6-0FD37E865E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6E477-C477-4CC3-B2E0-A870DA632C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1778BBA8-0C04-4159-A1BD-6CD9CC0AAB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101035",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039458",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ios-xe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ios-xe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12226",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E (Wireless) Switches, and Cisco New Generation Wireless Controllers (NGWC) 3850 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incomplete input validation of HTTP requests by the affected GUI, if the GUI connection state or protocol changes. An attacker could exploit this vulnerability by authenticating to the Wireless Controller GUI as a Lobby Administrator user of an affected device and subsequently changing the state or protocol for their connection to the GUI. A successful exploit could allow the attacker to elevate their privilege level to administrator and gain full control of the affected device. This vulnerability affects the following Cisco products if they are running Cisco IOS XE Software Release 3.7.0E, 3.7.1E, 3.7.2E, 3.7.3E, 3.7.4E, or 3.7.5E: Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E (Wireless) Switches, Cisco New Generation Wireless Controllers (NGWC) 3850. Cisco Bug IDs: CSCvd73746."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz gráfica de usuario (GUI) web de los controladores de redes inalámbricas de Cisco IOS XE para los controladores Wireless LAN de Cisco 5760, los switches de Cisco Catalyst 4500E Supervisor Engine 8-E (Wireless) y Cisco New Generation Wireless Controllers (NGWC) 3850 podría permitir que un atacante remoto autenticado eleve sus privilegios en el dispositivo afectado. La vulnerabilidad se debe a una validación de entrada incompleta de las peticiones HTTP de la GUI afectada si el estado de conexión a la GUI o el protocolo cambia. Un atacante podría explotar esta vulnerabilidad autenticándose en la Wireless Controller GUI como un usuario Lobby Administrator de un dispositivo afectado y después cambiando el estado o protocolo para su conexión con la GUI. Un exploit exitoso podría permitir que el atacante eleve el nivel de privilegios a administrador y obtenga el control total del dispositivo afectado. La vulnerabilidad afecta a los siguientes productos de Cisco si ejecutan las distribuciones 3.7.0E, 3.7.1E, 3.7.2E, 3.7.3E, 3.7.4E o 3.7.5E del software de Cisco IOS XE: Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E (Wireless) Switches, Cisco New Generation Wireless Controllers (NGWC) 3850. Cisco Bug IDs: CSCvd73746."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101063",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039456",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039457",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ngwc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ngwc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12228",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software. Cisco Bug IDs: CSCvc33171."
      }, {
        "lang" : "es",
        "value" : "Un vulnerabilidad en la aplicación Cisco Network Plug and Play de Cisco IOS desde la versión 12.4 hasta la 15.6 y Cisco IOS XE desde la 3.3 hasta la 16.4 podría permitir que un atacante remoto sin autenticar obtenga acceso no autorizado a datos sensibles mediante el uso de un certificado no válido. Esta vulnerabilidad también se debe a la validación insuficiente de certificados por parte del software afectado. Un atacante podría explotar esta vulnerabilidad enviando un certificado manipulado a un dispositivo afectado. Una explotación exitosa podría permitir a un atacante realizar ataques Man-in-the-Middle (MitM) para descifrar información confidencial en las conexiones del usuario al software afectado. Cisco Bug IDs: CSCvc33171."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25e\\)jao3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F0D7D1-4408-432D-BB53-C40512779D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25e\\)jao20s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0214A5B7-858D-4670-9B32-7821BD07AF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25e\\)jap1n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B60534E-9927-4055-95DD-A14FEE5A14DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(25e\\)jap9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23AA33F-1033-450A-AF15-26C47C64DB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D50E8-99DB-4B15-B0F2-84674A9346A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ej1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A101303-CFB2-4EF9-AD68-AF6D8E1E8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C965E814-7ABE-4C45-8EA8-B6818BC213F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4556022D-5B0C-4F7A-868C-9EC01F716D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7760B1FF-BC56-49F4-8020-439EA2F53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49229E8B-19ED-4E5E-AA2E-F699C033F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4AC61-4386-4218-91B7-6CE776D8050B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59403A6B-3488-4F81-BE3C-A06AF1731B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABF12A-78BD-459D-BF53-065A56C385AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D15A929-0C2B-4C3D-99E4-0E7D46217216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CEEA13-0B40-4203-8BAE-09374C9B1FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422A740-0029-4C05-A7FE-12F12CD73B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A634C47-2FD6-4106-86B6-DD465A5394E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DDA3F8-7207-4FC9-B491-F49418975D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E64DDB-BF0A-4CCF-A01A-B45A9D566C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E28EAD6-BD32-4DD7-9558-6E7F5264DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09AEBD6-56E7-4D22-B300-C904464FE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD98F15-F847-4968-8A9E-D4D5D2ED4FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97525468-9E3E-4E34-8319-B4DFB51BC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611A649F-161B-4683-98D5-4C8150838039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F414ABC6-B95C-48ED-BC15-817356248776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137D26AB-CA68-4CBC-91E8-8C0901D5BF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343F5C35-A0C0-4747-95BA-D4044C64508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6FDABA-6F35-4FAA-9ADF-04E4CD1DCF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2a\\)se9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC9108D-B313-4C07-A9E3-5C2591304919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD483E0-66F9-4DD1-85FA-C125C9617E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C1075B-11F3-453C-957D-834C5D6D8CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115E901C-94B4-4EC7-AA85-03A20CFA90DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14181F4B-9A5C-40B4-BD15-FED694E9AE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E402E-5D8B-4261-906C-C5668B4A12BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3E8927-D460-4589-9E4C-493E916F9969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCF559-9324-4CE1-A986-EF4A174DCEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B11B78-1936-42CA-919E-BCD1E0C2A397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D601E90-6F2A-4C66-97A2-152031C88DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC0B809-72AD-413F-BE84-73FE2DB33950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72782F95-948D-489B-A19A-9DAB825DFE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90447919-CC40-4CA5-A488-2FCF0F25ABE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF74559-F418-48EA-9CA7-A9574CAFC97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10438F4B-281D-4C2F-B4C3-DC3D47B0033A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681E360E-2287-4BE7-8228-77C235DFA901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81800178-449A-4B61-9611-5FB2FC4DBC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89D14BC-1718-4AE9-B107-1709C2CE965E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A45595-A97C-4B72-9ED4-7F431F041627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBF7035-E936-44A3-B196-6946AEB466A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F95DC51-220F-41F9-BC48-E010746C2D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jax1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A7A51A-98DD-416E-82EB-CBB824D3C789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F81AACB-C3F9-454F-A31D-E985451B0105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F31A7-E4A7-41DC-B6C6-36D5C665B7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC473A4-39F2-4F32-B268-B9282B0B7823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF758B9D-7E81-4B27-865C-7CE675D38228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F26328-57B0-4E5F-932D-EEA70DF7C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282A8AA5-B087-4F0E-A8B1-4EA811E40270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455FEA02-5E9A-4B73-8E93-6D0BF778E954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)jn2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D276149-6D16-4C8D-8D7F-BAD72D7C78BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC422D76-8337-41F0-98AE-E5D85DF4D0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB76F47-8723-4888-8613-AC3273BAB758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CC5862-F8D0-4184-A29B-AE627680D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CCA5C4-3683-46C9-801B-683E194DDA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D4C7E2-F1F1-43BF-A53E-2A8FF408F4A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sng:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B85501-8588-4DFE-B25C-E2AB44221F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)snh1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FB91A5-8042-422F-97F7-B70D1E33016E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sni:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B67EA46-5A45-4875-8E02-DB5B5FEE7983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B24B56-CCD1-4DD0-B042-C6296338BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FFFE6-5FF5-478C-8C57-A6590840219E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1246D88-D206-453B-8EB6-A9848BB09781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AEA886-C40F-4C2E-86F5-A4A8707E7DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E759D97-682F-4EFC-9885-14B1CBC80C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDB0B25-95E0-4796-A56F-1A59EF7EA283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F6FC68-BF4A-4511-8B46-A93C81E349B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7582DA8C-2360-4E8C-90F8-6194F269CD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D6FBCE-F1F0-437B-A9B0-57F717C974F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A98BB51-F35D-46F4-9929-9C76F9430467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80852CE-8D91-4E85-A97F-C7A9AF5278CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF777880-43BF-4D4A-9BA1-B2E925B5DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D89FF8-F1AF-43A9-894F-2B57A3A415D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8F1123-AB39-4D42-BD2B-B4F75705D645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823287A-86A3-447E-9B25-87CA5CBCE743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB88A4B-6A77-4B8F-BA6B-D4B9C50DC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597644C-023A-4EA0-99CC-2EBCF1FBB382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD5D14D-A9F8-4323-A67B-FF983900D99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD15D65-9471-4755-9EDB-04ECF34DFD8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C2BB1F-79DF-4471-B75F-C22CEBB5380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF92BEC-AA46-46DF-8C1E-956F3E506E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C226FE9-61A0-4873-B277-1B8ADB397B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5BD905-75C3-47AE-8D19-6225BD808B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DE452A-6852-4879-9187-8A152E6E260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6367C8-C9D7-4965-BD9C-1DD4A2FCE2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3C4298-7F6E-4C19-949C-EE317BB720A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65589A68-58A4-4BD4-8A26-C629AE610953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A64C8F-6380-47CA-8116-E3438B953F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3714E18-9A21-4D04-BB5E-0299AF443E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E07C719-3374-4707-BAF4-EC123991F86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C8AA2A-AA54-43D1-BDE3-A40CFAD58795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFCDD9D-F2C9-431E-BE9C-9A89C5501939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1783208B-3BAD-411B-AE3E-BF7F3C13BEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9843B15-19B6-4A35-9C9A-5B803352A46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314FAE74-75CF-4E43-ABC5-826190F49D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C2203-4972-45D5-8DA0-83A9AB4D6C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB9B457-8B4B-4761-A23F-8A99F28E4CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2590898B-201F-44EE-91D9-E3A891C974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6526FB8-288D-46CB-BF02-AFF61CB13144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE089B8-4176-4618-8C1A-525A8CF96053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32222F6C-960D-4AF6-ABA1-6BED7FEDCFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb5h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DABB2A02-1CB2-4BAB-A92D-511298C9D28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb5m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F00FA76-674A-4463-AB30-6DB279251FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981C90B0-43DD-482D-9471-74E4CC5DB0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jb7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B964038-AF95-427D-8DAB-419E4E5661AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6098745-F5CB-4D3B-A04D-E4C1F1382FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37D2CBE-2B93-45CB-AB59-AFDF14277E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2911989-D074-42DF-AB58-6849B3E0B72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34299D29-96EC-4AAA-8137-49B292FC2D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5092DFCF-FEE9-4BE3-9116-01F3CBCE8A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCBDFC3-13C3-45D3-80C9-E533082FAF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1DE401-4E0B-4F72-B59D-1A600624D43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59B7F84-4C39-46E1-932C-EE52F22F4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A0F9C0-4591-4981-863E-1704FC4A0919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF56328-A74E-432E-A790-E16C941CA3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91421B-F04E-4CA7-8EE3-2F06AC6303C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B6E5BE-2D8B-4BAF-88BE-772F5905875E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFB827C-E7A9-410F-AE0D-5E31C6B29EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180C12CE-E9EC-4E86-A18A-E57803232193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8007004F-7331-48FF-9821-866560F3580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F877F3-C1EB-47D4-BBF2-0D678403A1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65F813B-C080-4028-8E1E-A81827917DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D54D10E-D94E-4731-9988-4EC1786FF4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4n\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC02AA6-E046-4EC9-9FFB-8B2C76FBE027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4o\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BB34B-D902-4064-BADC-56B5379E92CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4p\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316E962-6C56-4F45-9575-274506B9D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D8279A-3B2E-450C-B41E-23C9E9FF770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B80CBC-961F-4EE8-A998-C0A827151EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE991877-18E0-4374-A441-C2316085CCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A472B96-0DDE-49DD-A7E3-A82DD6AEB3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757EB1A1-4764-4108-9AB1-F33CF9CEE574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5c\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7803B445-FE22-4D4B-9F3A-68EFE528195E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D682D369-AFAA-47D6-B063-95A9FE336FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FDD38A-D864-4E73-BEBE-E3545113FA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC7974-36DA-49AF-BDA3-671EA5F41441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E599088-5071-469B-980F-4BA3026856C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA5302F-0F9E-4E0A-AA59-CB23B9A89F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943E4AE-F0EE-4643-B34D-44896C8CBF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6ED45F-4479-445D-8970-F90413C51B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8922A697-63B0-480E-B91F-4C16E2F325B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1EB55A-4D3A-42ED-9EA0-DF31DE62086C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36979139-66D2-40DD-A865-547BA9D49786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E129B-EB7C-4E67-A50A-38CA19B697AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7E5969-E55B-4EBF-ADDE-8A969174E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3376544F-A13B-4800-952D-08A2F429E9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57A83D0-E043-4294-A61D-730FAE30CCEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71493AA2-49E9-4FF5-AC29-DC2426973EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1E9625-A8CF-4D0F-BB0D-9FB91391D977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja1n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DAE7DA-E0D3-4434-AD75-C8894D939A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F96295-2E72-4C23-B973-791B4A2B63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8555124-BAFA-45D4-8208-ED1172D55F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A313DD0B-C9A9-4731-A486-EE1BCBA3B1F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B9D9B5-807F-494B-9ED2-7F4BDB32432A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6089D71A-8D46-4819-80E9-8A29BCA47EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21678FDA-D2B4-4041-A52D-C7AA562FD086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EB0CFF-88F5-4193-8896-B3E4BA8D1AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0DFB20-5617-43F0-A67B-74EC2D003E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C172E7A8-7AB9-4269-ADA7-494CC4F08C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jaa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BD12E4-2ADA-4E3D-A12D-FF0E1031D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jab:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E4321-D52D-4C16-8821-ED16529C9090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC643B-AA58-42EA-A777-52FCF6065F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jax1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFB57C3-6CDF-46D1-858D-D5234956653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jax2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330125E6-3645-40B5-8E64-009B622090B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D874DF-54A1-47C7-B3D9-A9CE41A42418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jb75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEF825D-E2DA-43E3-8193-301CE202506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1485E3A5-A586-408A-8325-7572779DD0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2244E538-6B35-44E0-B93E-60B773745A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DB6B2A-19D2-4684-B07F-5D42EC850A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC1C381-4795-4992-BE3C-9615E005DE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80188F84-30DE-46AC-8E0C-984126B77CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECBF0A9-D84F-40A2-AC61-A9C59C819787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F129CF-FB92-49E9-BD86-90DDB8218FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C288D58-F765-4403-BF18-CC0A62B1AA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C910D02-A7FD-4338-8DF3-18682F1B4C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF8146-FBF4-48F9-8BF0-61ACB2B3524E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27357CD7-3E9E-4EF2-A5D4-A6BC44952FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4246ACD7-DBCF-4CE6-B9B8-D44AAB2DEC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1046E19B-DB53-418A-BFEC-5CD4492E6626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0062D992-D990-4EC9-BABD-2EFFF84254D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC81B74C-4F63-46E8-ACF4-EB707853580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C779C9-3B83-4B26-8942-B8475FB3B5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7A12FC-A129-4129-90CB-7A13848B4A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02F541F-3A35-4331-8211-3619823A7B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8CF6E8-C7C0-45B8-8DB8-FE5993001BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jca7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6135D11-F4C2-4B6C-BC63-1132499D64A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D7D48C-9FA1-45DB-B206-437E8ECBF53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3626B216-43E8-4E60-96E5-7CAA0CB67F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B59D8B-E71A-4671-BA0B-00E56498E280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956C0089-E5AE-4289-B6D7-A8AB3C39AAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jda3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF76399-30C8-4EFB-B30D-9194A2BF9EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)je:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2955A319-04AC-4D0C-80B7-0C90503908C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)je1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9659C7-5B0A-471F-8A61-B0382926DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBD0947-656E-4CB0-9B4F-1A1F7AA360C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D6C6EE-CFD9-49A9-8784-498560847737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE60A6-9E75-4B20-A06D-411E774511B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1451BB33-6BE0-4F4A-A193-14E13DECEE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0FC09E-8C60-4EAC-B729-3BE3524E6F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC3CD43-F30A-484B-9285-D925C1262212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F807A36A-9363-40F1-9B20-E5C4D503EB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5200C1CD-DEAB-44FD-970D-098F3E01F36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E71841-512D-483C-A911-86EA745AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB655C5-2D7B-4ED5-89D6-4ED613CF3934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA0BCD1-4E75-4F39-B960-4B6B1B357442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17F3285-80E8-4BE5-8704-3379CF326601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9669DF61-DDC5-498D-906A-494D56BAE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571ECF0D-06C6-4371-891C-FB68A3093F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A38CF1F-37D9-4CBD-8B98-C24637FF7F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0886F6DC-C590-48A0-BE27-6CD778EB37FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8552242D-0A93-4841-83F9-EA4D7F58938E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0667D1-B4EC-4FF0-AC5D-9C1B04D84099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45D0EFD-784A-4CDB-8FDB-41F6869B4735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942CC01D-ED6E-4731-A61B-75CDF219F760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024D075-2652-41BF-9C6F-AB668C281C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA595EF-8718-4477-8EEC-EA948C14F091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDCADB1-EA01-41AF-9D96-A6EDE42D7A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A3D8C2-15FF-47BC-B983-908BF86488C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3C0371-223A-433C-B8A3-C24A499EB82F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A066A001-830B-4407-A5CD-AB99059C190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A9F7DF-BB18-46FC-B471-3FC41F4CCD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499C6196-2D34-4312-9C3E-B1A6E8D21112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12F00E7-8134-4CF4-ACD3-1E7E6F1C6332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279A96A-43B2-4FD4-97F0-DA331EACF918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3479B06E-1B67-4399-BA3A-E02331E21BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7855CC38-5E3E-486D-9322-7BF0DC1FF623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496E2D60-AEEF-4D34-ABE4-9A9B101643D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A740BDE4-B65E-4F6F-BAB7-BBA64567EC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F391FDE-A48C-4F59-BC6F-7880B234E3A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10916E9-6105-46F9-993D-F09C223003B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8957EB38-37CF-47FA-853D-7A1AA6079874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAA5367-F81E-425A-A93C-B9220D1BB37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1ED4F8-3B6C-452D-A3D0-D2F1A24AF994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF32BC7-57DF-4BF0-BF97-69E97CC048CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3836108-E847-4BB6-BFFE-7C81E9D94A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595F3D8-8D99-4C82-9EC1-1187C52A6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4151B2B1-B17F-4F1D-A211-34C7DB84E442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F13E87-E45B-462A-8334-78C8245D6464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447FAF3B-8E93-4A2C-A8B1-1A2F7D958754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC40192-6A93-423C-8907-60CC39077668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2628F-456D-4471-A914-D92157725CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9359056-42C8-4031-9E5A-433DFB3DF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6465E3DA-90F0-4DD6-82B1-C9DF9FAEBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346BD6D0-AAF2-4C9A-8DD3-8C710302DCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A1BC08-28AF-4583-BE21-0D85CA2D7B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86EA2EC-7FEA-4AE8-8CE0-45CA3C21B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716EC9AA-0569-4FA7-A244-1A14FA15C5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CD336D-1110-4B0C-B8D4-7C96293CBADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1AA87D-33F3-4153-BD59-331E9AD82623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA64C4F-8D3E-43AE-BD13-70D5E10205A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047B501B-FBEC-445B-9CC8-A3B83EBF5925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EBAF71-E476-44F2-8D3E-1D0989F95A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C68169-0271-4C6C-975B-32112B04AB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE308E0-89DA-4BE8-BF81-6D802D7B1B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55064D6F-6E4F-4F04-BC19-E6D4110D89EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC59C3E-A2A4-4A1A-B561-E411D7DE85E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204B0A52-F6AB-406B-B46D-E92F2D7D87F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE18163D-C81F-49DC-996F-DE340C623539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB5DABC-4DAF-4696-A8AE-D4B6B188B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72480900-6E08-425F-965D-143B348E374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E903D9F-530D-4597-ABA9-4C1CFB79814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE10B51-53FB-4F30-BAA0-0BD92C3D5C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5600F2-BE56-480F-B9BC-256960878B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E8589D-1F50-4CE8-BF95-1134F0BBF21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5060BAEA-DF8F-4B85-84F5-1410FD45C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F03EF8-1276-4193-8901-228148E76042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.4\\(3\\)s",
            "matchCriteriaId" : "587D3D93-1222-4E04-91C4-E1E03AEFD7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930678B3-1527-4967-9D8F-27FC0DA060AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A34268-7618-48D2-8872-27B5B624543B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2017A75-CC29-4161-85CB-7A531E5ABB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14EB390-BA15-45C9-B971-D66CD98B0EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B82207E-7E19-4E0A-93E6-C631897793D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB5A06F-59B5-43A1-8D06-1B6BA08630A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F6C44-DB9D-41FD-AD8D-AF45258772DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9E07C9-4C98-48A3-ACF9-1C6FE834D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A9A46-517E-467B-A702-E6F6DD9FCD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671F6847-6855-41BF-A148-944AEEB32A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87687169-312C-41E6-9557-B2536A4CCA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312FDFDD-7612-4E79-A12E-7B1540324696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A56292-386C-4FC8-BC54-EF9E465F891B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86176257-7075-476E-BE09-B0E469392BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCBE369-81ED-4C94-8C44-53C6F4A087CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3B6D68-DA31-45EB-ACFD-AE703B2FA2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6352A220-8F3E-4E08-8DD3-50E366434333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483A3F03-F5CC-45BD-AEB7-83E23601BB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE50185-23ED-4640-9037-E45810793C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96637FB9-B552-417B-8C7F-4F4524F69690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08C168-48BE-41ED-A3BD-87BAE27A1351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF08F8-5B1D-42A6-B333-84B9D9A14941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438B3809-0783-44AC-8BC6-0FD37E865E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6E477-C477-4CC3-B2E0-A870DA632C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1778BBA8-0C04-4159-A1BD-6CD9CC0AAB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101065",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039450",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-pnp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-pnp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12229",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to bypass authentication to the REST API of the web UI of the affected software. The vulnerability is due to insufficient input validation for the REST API of the affected software. An attacker could exploit this vulnerability by sending a malicious API request to an affected device. A successful exploit could allow the attacker to bypass authentication and gain access to the web UI of the affected software. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the HTTP Server feature is enabled for the device. The newly redesigned, web-based administration UI was introduced in the Denali 16.2 Release of Cisco IOS XE Software. This vulnerability does not affect the web-based administration UI in earlier releases of Cisco IOS XE Software. Cisco Bug IDs: CSCuz46036."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API REST de la interfaz de usuario web de Cisco IOS XE desde la versión 3.1 hasta la 16.5 podría permitir a un atacante remoto no autenticado omitir la autenticación de la API REST de la interfaz de usuario web del software afectado. Esta vulnerabilidad también se debe a la validación insuficiente de entrada para la API REST del software afectado. Un atacante podría explotar esta vulnerabilidad enviando una petición API maliciosa a un dispositivo afectado. Si se explota correctamente, esta vulnerabilidad podría permitir que el atacante omita la autenticación y obtenga acceso a la interfaz de usuario web del software afectado. Esta vulnerabilidad afecta a los dispositivos de Cisco que ejecuten una distribución vulnerable del software de Cisco IOS XE, si la característica HTTP Server está habilitada para el dispositivo. El nuevo diseño de la interfaz de usuario de administración web se introdujo en la distribución 16.2 de Denali del software de Cisco IOS XE. Esta vulnerabilidad no afecta a las interfaces de usuario de administración web en distribuciones anteriores del software de Cisco IOS XE. Cisco Bug IDs: CSCuz46036."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.1.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE45DBE-1CE2-4CAC-81E6-1BA07F0D90EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BC2A87-31EC-4E15-86E3-ECBEFA9E479A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E13E8-A609-4635-8427-558FA2359484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.7asg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F853F07-5C24-4A8B-86C3-FCF03E3536D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33B0BB-BB47-42AD-9EA4-6B4D63C34E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA08C168-48BE-41ED-A3BD-87BAE27A1351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF08F8-5B1D-42A6-B333-84B9D9A14941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438B3809-0783-44AC-8BC6-0FD37E865E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6E477-C477-4CC3-B2E0-A870DA632C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B39732-D8FA-4E08-95FC-8F26C0BF8D0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101032",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039447",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-restapi",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-restapi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12230",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incorrect default permission settings for new users who are created by using the web UI of the affected software. An attacker could exploit this vulnerability by using the web UI of the affected software to create a new user and then logging into the web UI as the newly created user. A successful exploit could allow the attacker to elevate their privileges on the affected device. This vulnerability affects Cisco devices that are running a vulnerable release Cisco IOS XE Software, if the HTTP Server feature is enabled for the device. The newly redesigned, web-based administration UI was introduced in the Denali 16.2 Release of Cisco IOS XE Software. This vulnerability does not affect the web-based administration UI in earlier releases of Cisco IOS XE Software. Cisco Bug IDs: CSCuy83062."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de usuario web de Cisco IOS XE 16.2 podría permitir que un atacante remoto autenticado eleve sus privilegios en un dispositivo afectado. Esta vulnerabilidad se debe a que la configuración por defecto de los permisos es incorrecta para los nuevos usuarios que se crean mediante la interfaz de usuario web del software afectado. Un atacante podría explotar esta vulnerabilidad mediante el uso de la interfaz de usuario web del software afectado para crear un nuevo usuario y luego iniciar sesión en la interfaz de usuario web como ese nuevo usuario. Un exploit exitoso podría permitir que el atacante eleve sus privilegios en el dispositivo afectado. Esta vulnerabilidad afecta a los dispositivos de Cisco que ejecuten una distribución vulnerable del software de Cisco IOS XE, si la característica HTTP Server está habilitada para el dispositivo. El nuevo diseño de la interfaz de usuario de administración web se introdujo en la distribución 16.2 de Denali del software de Cisco IOS XE. Esta vulnerabilidad no afecta a las interfaces de usuario de administración web en distribuciones anteriores del software de Cisco IOS XE. Cisco Bug IDs: CSCuy83062."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101036",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039446",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-privesc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-privesc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12231",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.747",
      "lastModified" : "2025-10-22T00:16:02.827",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper translation of H.323 messages that use the Registration, Admission, and Status (RAS) protocol and are sent to an affected device via IPv4 packets. An attacker could exploit this vulnerability by sending a crafted H.323 RAS packet through an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to use an application layer gateway with NAT (NAT ALG) for H.323 RAS messages. By default, a NAT ALG is enabled for H.323 RAS messages. Cisco Bug IDs: CSCvc57217."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la funcionalidad NAT (Network Address Translation) en Cisco IOS desde la versión 12.4 hasta la 15.6 podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a una traducción incorrecta de los mensajes H.323. que utiliza el protocolo RAS (Registration, Admission and Status) y a que se envían al dispositivo afectado mediante paquetes IPv4. Un atacante podría explotar esta vulnerabilidad enviando un paquete H.323 RAS manipulado mediante el dispositivo afectado. Si se explota con éxito, podría permitir que el atacante provoque que el dispositivo afectado deje de ejecutarse de manera inesperada y que se reinicie, provocando una denegación de servicio. Esta vulnerabilidad afecta a los dispositivos Cisco que están configurados para usar una puerta de enlace a nivel de aplicación con NAT (NAT ALG) para mensajes H.3323 RAS. Por defecto, NAT ALG está habilitado para mensajes H.323 RAS. Cisco Bug IDs: CSCvc57217."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.4",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "3AE09220-EF68-4DFE-AA9C-E4F5508EDF3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A4ED65-7DED-4EAD-BF37-FCA71E807CA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34DAD43-0C95-4830-8078-EFE3E6C0A930"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5CBF0-7F55-44C0-B321-896BDBA22679"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D381E343-416F-42AF-A780-D330954F238F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3816C-95F4-443C-9C79-72F0251528F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1810C73-93B8-4EB5-85FC-3585AD5256BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2BC76E-A166-4E71-B058-F49FF84A9E19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542244A0-300C-4630-812A-BF45F61E38DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002_fixed_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAE214D-8DD8-4DA3-872A-609E7CE6E606"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA873342-542E-4FC8-9C22-B5A43F9F3E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF8271-315F-4756-931F-015F790BE693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324C97E6-1810-404F-9F45-6240F99FF039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64B28-7F3F-40BC-B289-0D1DB55B6461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5603296-34B3-4EEB-B242-C44BC56BFBB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2A515C-797D-47EE-8051-F3FBE417BCE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E673A75F-EFF8-4591-8E0F-A21083563DBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433F4A82-04A4-4EAA-8C19-F7581DCD8D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "A50A1CA4-F928-4787-ADB4-0274301B7EF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5456C70-6BA4-456A-BCFA-06FD052E44EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515CD97F-DDBD-4F75-A6DB-646890A30B32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E181FC9-6790-4C12-874F-67252B6879BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD4F12D-3F97-44D2-9DE2-571425E75F4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-4sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1288DB-5946-4091-A6E8-42E0A0E7B2B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70352B04-C3FD-47F5-A2F8-691CF63EB50D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE063AF2-5579-4D7E-8829-9102FC7CB994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51938C0A-AFDB-4B12-BB64-9C67FC0C738F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_907:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18E4A46-10D3-48F8-9E92-377ACA447257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_914:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D5E61B-9F17-4C56-A1BB-3EE08CB62C53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE110B5-CC6E-4103-9983-4195BCC28165"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DDC45-ABD1-4C8F-A249-0865345637A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE4D129-435B-45DD-838D-4017BD94DF93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456C68A8-F3C8-4302-B55A-134979B42045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870D5B63-A1D5-442A-B2B9-9E522E5DB08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C6733C-F77B-4688-B051-C1557F4D8D41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD45D77-4097-4AFB-98DF-5B8188316C20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489F97AB-5C6D-4AFE-BE5A-ABF7F9ED8B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064DB97B-9E52-45BC-9F43-8FCB5570FC7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31608C12-FBED-4EAD-96EC-48BC4B356B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D989205A-0576-415C-935E-E83AD42FD1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D21D9A5-DE8F-4C55-B03F-35C04C270A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C3EB40-574A-48F7-A679-90F62ED976B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC6206-DF19-4636-84C2-8912E443D122"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85489F69-EAF0-4971-8C93-36838A8AA00E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95FEC1-12F3-44FC-B922-CD18CADB42FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D029B0C-2DAE-491A-90B4-79C093EC9E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE37BC85-7758-4412-A5E6-0F1A19E8776B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920u-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA179D79-07E7-4721-85BB-0C740B516B1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5E60AB-94FF-448A-89D8-5D2197E21C74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91474DBC-FB31-4DDF-96C5-311FA1D53A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA241214-2F05-4360-9B50-385355E29CF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93212A4-50AB-42E7-89A4-5FBBAEA050C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA53A61-98B3-458C-8893-61CD7D6B1E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F396564E-B477-4A27-A189-CEB737552E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5445CC54-ACFB-4070-AF26-F91FEAA85181"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E7ED87-8AC0-4107-A7A5-F334236E2906"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7814FA61-CAF1-46DE-9D84-CEBE6480EA03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4F60E-DF3D-4839-8731-7CF16DA8FF26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5EEE3-A084-46B4-84C0-ADFD69800649"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592F67D5-344B-49AF-A277-1089A40AC2FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7434059A-25B8-4FAC-A756-6E571348B76E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2A5355-BF40-437C-8683-A7A81DEE362C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F4B90E-3499-45D4-864D-18505E2149F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9BE6BA-6B2D-47C9-B8F1-3C9CE213948D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FEECF-CC69-4E68-8E8A-674643021964"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5FCCFF-E491-474F-9B86-AB51D8244582"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8464F8-D6D2-4165-ADE8-B40F7D8556C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61007628-A81B-43E0-86DE-1F7DDAD9F1A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9F022-4C3D-493E-9418-E9CDDAFEC9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3F03C3-C0CA-4E9B-A99A-BE28153EB5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39F250E-6A89-4537-BD31-1FB81734A9A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4E3B69-DDE8-4EA2-8E63-D6EEF41083B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8904EAF5-25E7-4A6B-8117-1859F913B83B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A369CD35-1242-4556-A83D-BD69CC149CFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D1B9E-6234-4FD6-A003-AFBC8A4DC2E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784A1499-1F33-493D-B433-EB2550C03C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A990D6-B748-4AFD-B924-1D19680BD3DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFC88D-5480-46E4-BF74-E11A514A8BDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54D16A8-0407-41E3-9599-9A6F57E1AA75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94A9A21-C4F7-4EA4-95B1-DEA7DDA0F77D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3818CC-8653-4A9E-A57B-950A15914D6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDC790B-B42D-45DB-ACF5-A789F76C2BC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A6BC84-91F2-437D-9D2E-F8B3F5966767"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F331F13-5D05-4213-B442-D48D8E22287B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E312F4-90DA-40E4-BCD1-92F41BEEEECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32EA3F-946D-430D-B00F-939D828DD72C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D239A09C-34D2-4418-B538-03A1080B8479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84561E-DD99-4433-9EF2-083F7C300123"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29871BE-CA7D-4108-B46A-CBD539C9A2B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CD9189-6524-4157-B90E-FF6A81DE3599"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1B702-643A-4AF2-B0AD-3C540CF85F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96269625-CB31-4850-872B-B2C1321B13B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426B68A6-3A41-43DB-846F-AEFBA62E221B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDE086A-3FE5-46E3-BD66-23D0AE5089BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53775A-D3ED-4D34-8338-A384DBEB94E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7D4522-D6BB-467F-AF5D-4D753A89D524"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C96215F-A300-4B4E-9D3A-C32E484BFC5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C680534-C663-40B0-A4AA-7F292EE60FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4F233-7B47-46ED-BDC5-A589BCFC0B39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A528EC0-4650-4787-BE52-A588E7E38A31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53898E96-03D6-43A2-AE05-46C62464BD26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465917E5-8BF0-4BBB-85A0-DE8F516880C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FA66D9-E465-406E-A95C-608A1BE34D74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFE6E6-413F-48AC-B4CE-0F1058C48FC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1456B204-A2A5-4790-A684-7F50D692EC9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD715BDD-7C74-4785-BEDF-75918F6FB37A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD10664-94D0-48C0-92EF-E8EA66841245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071A47F9-FF35-4F2C-BF5D-897CAC8BC08A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E988448-36C9-47E0-9356-DA400EB824E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D067EF9-00DB-4979-B12E-55749059A083"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FA300A-44B1-44EE-8111-C1296EB0B638"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8598A543-B30B-4BD4-9974-F432FFFDCDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DEBBAD-D28D-4784-BBD8-9FAD1710A919"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FC516-6B48-4D77-B26D-FA097AC91D1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7437E4-5C09-436C-AFBC-F6B6747A4339"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC0277-4990-4DE7-AD80-20E8A6F561D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7DAF69-662B-4999-A6AD-AA528B53EAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF90C70-A2B8-44A4-B4A1-2A1B48AA9D0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28306B1-3DDE-4444-9784-522B3D2163EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9257D187-1F2D-40F4-8C87-78978DB56C3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF4A033-FD9E-4B98-A0FD-CF6CD9BD3E5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF8261-74E0-4F53-B82C-A7BA7559D7CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AE251E-E99F-4546-85B0-C57834B040B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62FFCB9-4253-459B-9298-C252DA9177DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991CBDFB-6836-4D1F-80A9-14EBCE3F855F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C0250-DA0D-4CEE-99F4-C211163C6653"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18C436-AC70-4E2E-8ED2-EEADFCE36CB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D453BF6-AB9F-4D47-B4DF-C25C67358FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F5347-A5E6-4954-ACAB-E4DF29119724"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2A8413-DF92-4690-8BC1-A21001BDF76B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8D8F-E154-45C3-BB47-5353167C9776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD7BE51-0BA6-4750-B274-A6E33D32B484"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87F823-D924-4718-AD81-248A6C619531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC866C9-BB98-4320-9FFA-F0960C560DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AD7495-3DA2-4596-9620-CD36D7C561AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492F3F8-4188-41E4-9A84-5E30C4AC3378"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5CB558-BD42-4615-BC31-41CCF25DE5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45BCCD0-65BB-431F-B448-221C1595CD92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33BA722-0680-4074-8D03-41657F8CDCC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C46B4-5E9F-4DD8-861B-00BA43923306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431570C7-74A1-4F7E-8FD0-690AEF0F823B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D22E15-E1E8-4115-A55F-5743CA9C5947"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840171D-CA1C-4E25-BD41-6B871C47BB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B240B20-CF48-4A72-9653-9D04D59C1391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CCD143-3D6E-4880-B275-ECF5B04238C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C466B-CE87-4A57-B40B-88C94BAAF36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58FF034-8E07-4518-A858-5F16F22217E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376AD386-373D-4B24-966F-D11F76C9020F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1174-C789-4547-9899-F7FCD0905F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC366801-655A-403B-ACD9-3BB43802A3C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39600E51-4A21-4E5B-9FF9-E7C00AE86646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E4D5A8-7E4A-44C5-81DC-84712781206D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D6D50-D0FA-4527-BED3-52560DDD5253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BF315-D833-4711-97FC-512151113367"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04072C0F-78A2-4D10-87B2-52DC2537BA89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD262F58-C47F-439E-A9FF-D1C60120D306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35490BDE-DF21-495E-9F8A-7631FCB32A1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FC868-0B38-4F24-BA40-87966FF80AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19A801D-02D7-40B0-88E8-FE7BA8630E60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA59279-3504-417D-9E86-E5886EE198BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4035136-CC10-4DDD-92AF-9DC41D19CF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E283C34-43AE-49A5-A72B-32DEA185ABD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3AF13-5324-42CD-8EDB-6F730BF46214"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78706517-83F4-4D44-A6EC-B78ADCEABAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101039",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039449",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-nat",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-nat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12231",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12232",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.780",
      "lastModified" : "2025-10-22T00:16:02.973",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de un protocolo en los routers Cisco Integrated Services Routers Generation 2 (ISR G2) que ejecuten Cisco IOS desde la versión 15.0 hasta la 15.6 podría permitir que un atacante adyacente sin autenticar haga que el dispositivo afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. Esta vulnerabilidad se debe a una clasificación incorrecta de los frames Ethernet. Un atacante podría explotar esta vulnerabilidad enviando un frame Ethernet al dispositivo afectado. Si se explota con éxito, podría permitir que el atacante provoque que el dispositivo afectado se reinicie, provocando una denegación de servicio. Cisco Bug IDs: CSCvc03809."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A273EE-41C1-41E9-9002-46F83FC6533F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C90C43-2D7D-43F8-AD7F-421878909AE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445597DA-7EEC-470D-9A71-BC43A9F7DE5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86049773-C88D-4A26-A0D3-D40F3C312AEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB4B7C2-4D45-4267-BCBB-57D36C6104A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8A4630-8B21-4994-8EF5-E105593A64E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F799DC02-EB06-458C-8545-A174475FE7A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89FBA68-A8ED-4C5A-916E-A68468F59730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD272E6E-2ED1-4408-8FF7-0B82F9DCBEF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC278B77-AD63-42AD-B9E8-EE4DE97E27E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:44461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697BEF89-6D9B-4870-BE85-9090152F3E6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:829_industrial_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398D63B0-F15B-409B-AFBC-DE6C94FAF815"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:829_industrial_integrated_services_routers:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D05CC9-8D04-4DE0-A854-375192B4D46C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:829_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9030977A-7753-4ED5-A082-4B2F5749D37D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:860vae-w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9C511D-7D5E-4758-A335-70019EBD9F8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:861_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E109E908-78B9-44ED-8719-B057057C2185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:861w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F8D515-3D54-459F-8CE7-FFA91439C0D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:866vae_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510B60EF-AA4D-469F-8EEF-133F354DDF55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:867_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7E6C9E-326B-42EF-86D4-4FB2C13E2BA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:867vae_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D562373-BD3F-4690-928F-9FE0325A3379"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:871_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A300FE-D6D3-41AC-9792-4D0E28621F72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:880-voice_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB62165B-6CA9-4DD8-8A36-B658F61FF9EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:880_3g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2F1852-8ADC-42E0-8D05-961A733523D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:881-cube_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5ACE25-8C18-49B0-AFFC-17CB30F61930"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:881_3g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6E4CF5-D944-4281-94E5-72BC5437BC62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:881_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB6E8CC-89B8-490A-BFCF-FA9D55543B21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:881w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480629DC-DA23-4A9E-B90F-E8AB894C9353"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:886_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEBDDE6-0EA0-4C2B-9A04-87236312A269"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:886va-cube_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA60A-1BA9-43E8-AF81-914846C26CC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:886va-w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7C5306-B810-4036-A241-7178F48ABE8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:886va_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5413C7E7-F55C-4158-ABDF-2D8844B96680"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:886vag_3g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6745ADF-DCE3-42C3-A548-F9E44AEE88CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFD38B2-348F-4EF2-A9B7-40A9AA5FF511"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887v_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F9EA2E-9EE7-4F68-9765-C78F85624F2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887va-cube_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1563AC8D-4E4D-4126-8C5D-84B449AAEF57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887va-w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3945CCD-E6F5-412D-9935-160BCD664B10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887va_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C23393-F7BB-4BA9-81A5-C298D84EBF0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887vag_3g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B623C2-D81B-430B-9FD2-E2764EE94809"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887vam-w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828E07F6-1E92-4990-AEBC-DBFE4B5B2DE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:887vamg_3g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B77C60-06E0-47FF-8CD4-35FE5C60FF95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:888-cube_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E97DA13-D485-42BE-A0E9-F40A0C823735"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:888_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E984A1EA-728A-4663-8494-1787AB5D93C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:888e-cube_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D9B6C7-A707-41CD-953F-5773FB3F7685"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:888e_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716E154A-5586-4F58-8203-EC8256E00BAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:888eg_3g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC0F79A-52CA-46A6-9C6A-0596718053E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:888w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8054E665-E4DA-4453-A34B-830B69D273A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:891-24x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA480B3-25E2-4B05-9F46-417B696789B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:891_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526558F9-C72D-4DDA-B0DF-CAF7B97E30C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:891w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B9D069-85C0-4299-BCAF-441A2D6227BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:892_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AFBDFF-3D83-4685-82EE-A9EA4DC09241"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:892f-cube_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4AF464-B247-40CF-A2B5-1B278303418B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:892w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D674C533-304A-42A4-97EE-1CA39908E888"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2182E7-C813-4966-A36C-E648A9344299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABA6B44-E3FB-4B9C-8148-D9F10E617DB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cloud_services_router_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCB8270-A01D-40A6-BF4B-26BAF65E68F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:integrated_services_virtual_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5361C70A-C036-4254-9698-BC58F48C465B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101044",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039452",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-rbip-dos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-rbip-dos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12232",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12233",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.827",
      "lastModified" : "2025-10-22T00:16:03.203",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuz95334."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la implementación de una característica CIP (Common Industrial Protocol) en Cisco IOS desde la versión 12.4 hasta la 15.6 podrían permitir que un atacante remoto sin autenticar haga que el dispositivo afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. Estas vulnerabilidades se deben a un análisis sintáctico incorrecto de los paquetes CIP manipulados destinados al dispositivo afectado. Un atacante podría explotar estas vulnerabilidades enviando paquetes CIP manipulados para que los procese el dispositivo afectado. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie, provocando una denegación de servicio. Cisco Bug IDs: CSCuz95334."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.4",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "3AE09220-EF68-4DFE-AA9C-E4F5508EDF3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D5057-138A-42C4-BA35-8077A0A60068"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED555B12-41F4-4D62-B519-22601FB7AF8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A4ED65-7DED-4EAD-BF37-FCA71E807CA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B10158-5235-483E-BACD-C407609EA6BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8964F9BA-6E6C-44BF-9A8C-93D081B6678C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51251FE1-67D2-4903-B7D3-E0C727B9A93C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111-4pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7262ADAB-296F-4DC2-9CD7-A86D7F6441C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111-8pwb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3056B31-1977-4472-BC74-19A5B8B5EC44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784E4562-FE26-4049-9D23-4CA46432EE14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1113-8plteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9261A638-E2E4-4EF0-84E9-A585BF763263"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1113-8pmwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C85463D-0B37-4746-B7EA-80F3096305E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1113-8pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C04E5B-AC03-440F-9007-0D6761B41F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1116-4plteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A5E963-2987-4927-862A-6375624FC876"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1116-4pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3601499F-AD3B-47EA-816A-A01379CA1A33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4plteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303129EF-9107-4B39-8683-1BD917B3E68D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4pmlteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B2B271-555B-4439-95D8-086E516F1169"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4pmwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB321CD-9096-4F75-AD2F-4EAE1CA75D76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F31C77-0303-4FD9-B968-6B430202C6AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D64BDE-0D00-4FBE-873B-F5D52AD0C5A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_connected_grid_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6835F8AD-B55D-4B57-B3B5-0095E309B2B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A41A34-58D2-4DBC-ABC9-20A62BC8A838"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF0025D-8DE1-437D-9A4E-72C3AC6B46CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-con-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E69A6F-DFC0-4C8A-B77F-B7329FA5F567"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-ncp-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA015C4-7163-4FCD-ADE1-D5481B10EACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101038",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039459",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12233",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12234",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.857",
      "lastModified" : "2025-10-22T00:16:03.363",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la implementación de una característica CIP (Common Industrial Protocol) en Cisco IOS desde la versión 12.4 hasta la 15.6 podrían permitir que un atacante remoto sin autenticar haga que el dispositivo afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. Estas vulnerabilidades se deben a un análisis sintáctico incorrecto de los paquetes CIP manipulados destinados al dispositivo afectado. Un atacante podría explotar estas vulnerabilidades enviando paquetes CIP manipulados para que los procese el dispositivo afectado. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie, provocando una denegación de servicio. Cisco Bug IDs: CSCvc43709."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.4",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "3AE09220-EF68-4DFE-AA9C-E4F5508EDF3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8D5057-138A-42C4-BA35-8077A0A60068"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED555B12-41F4-4D62-B519-22601FB7AF8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A4ED65-7DED-4EAD-BF37-FCA71E807CA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B10158-5235-483E-BACD-C407609EA6BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8964F9BA-6E6C-44BF-9A8C-93D081B6678C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51251FE1-67D2-4903-B7D3-E0C727B9A93C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111-4pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7262ADAB-296F-4DC2-9CD7-A86D7F6441C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111-8pwb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3056B31-1977-4472-BC74-19A5B8B5EC44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784E4562-FE26-4049-9D23-4CA46432EE14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1113-8plteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9261A638-E2E4-4EF0-84E9-A585BF763263"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1113-8pmwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C85463D-0B37-4746-B7EA-80F3096305E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1113-8pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C04E5B-AC03-440F-9007-0D6761B41F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1116-4plteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A5E963-2987-4927-862A-6375624FC876"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1116-4pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3601499F-AD3B-47EA-816A-A01379CA1A33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4plteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303129EF-9107-4B39-8683-1BD917B3E68D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4pmlteeawe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B2B271-555B-4439-95D8-086E516F1169"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4pmwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB321CD-9096-4F75-AD2F-4EAE1CA75D76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1117-4pwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F31C77-0303-4FD9-B968-6B430202C6AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D64BDE-0D00-4FBE-873B-F5D52AD0C5A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_connected_grid_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6835F8AD-B55D-4B57-B3B5-0095E309B2B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A41A34-58D2-4DBC-ABC9-20A62BC8A838"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF0025D-8DE1-437D-9A4E-72C3AC6B46CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-con-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E69A6F-DFC0-4C8A-B77F-B7329FA5F567"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-ncp-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA015C4-7163-4FCD-ADE1-D5481B10EACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101038",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039459",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12234",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12235",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.890",
      "lastModified" : "2025-10-22T00:16:03.493",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper parsing of ingress PN-DCP Identify Request packets destined to an affected device. An attacker could exploit this vulnerability by sending a crafted PN-DCP Identify Request packet to an affected device and then continuing to send normal PN-DCP Identify Request packets to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to process PROFINET messages. Beginning with Cisco IOS Software Release 12.2(52)SE, PROFINET is enabled by default on all the base switch module and expansion-unit Ethernet ports. Cisco Bug IDs: CSCuz47179."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de un PN-DCP (PROFINET Discovery and Configuration Protocol) para Cisco IOS desde la versión 12.2 hasta la 15.6 podría permitir que un atacante remoto sin autenticar haga que el dispositivo afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. Esta vulnerabilidad se debe a un análisis sintáctico incorrecto de los paquetes PN-DCP Identify Request manipulados destinados al dispositivo afectado. Un atacante podría explotar esta vulnerabilidad enviando un paquete PN-DCP Identify Request manipulado al dispositivo afectado y luego continuando el envío de paquetes PN-DCP Identify Request normales al dispositivo. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie, provocando una denegación de servicio. Esta vulnerabilidad afecta a dispositivos Cisco que están configurados para procesar mensajes PROFINET. Empezando con la distribución 12.2(52)SE del software de Cisco IOS, PROFINET está habilitado por defecto en todos los puertos Ethernet para las unidades de expansión y los módulos de switch base. Cisco Bug IDs: CSCuz47179."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "5B29302F-A386-4E69-BD22-59CDF9CB0E21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524D907D-4DDC-4439-A9E0-328BA272BE79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057243E-C776-4048-AF08-F1339DECFB76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-nx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D7518A-B5EA-493C-80C7-4938A36FF621"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16t67-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0474966A-3F71-474F-926F-D4C03F0989D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16t67p-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199F317F-4C29-4BE4-B5EE-FFD70C693A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A805F6F4-D977-493F-B3E8-CCE64A6F5AE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0122F-82AB-467A-861B-9A9EAF36F695"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-n_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A29BB0-4033-4067-97E9-372C797A29CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-x_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334BC0D6-E9D8-47F5-AB48-7AB3F3A17844"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1931F1-02FC-4F7D-8C18-C1482CD2530D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_24t67-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F9FB2B-D9AD-46DD-8D2E-0FB71E2EA825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4s-ts-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75325EB7-ABB8-409F-BB8E-1696FB3D0DA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4s-ts-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CB2133-041C-48EE-8594-2F80C7A89A05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4D3841-67B6-4E21-A68D-FED30EC2CDEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E906703D-3946-4EE7-BEF1-9753409FEEF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D64C4436-6BB8-48EB-923D-11B6F9F18B1D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECD0A92-A198-463B-8046-92D738C40DAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C75A46-74FC-4AF1-AF76-0CAC422473E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE4BC00-19FE-468C-8BCE-193E72066B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62729BD3-975A-4FCA-B255-FFFD51901081"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FAB865C-D5D6-474F-B42C-2C2958B1E876"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8t67-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94DAA2-D52A-424B-8E17-FC17D4B117B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8t67p-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429B7E0E-2897-4838-AC6B-41B3A5D85204"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22980E67-0A91-473F-9F86-3B594D7BE9FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-b_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4360DC5A-DD47-42C5-9940-B9FE24422758"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-e_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417ACF82-6769-4441-92CB-8BD06470518A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36036C1F-2A42-4633-AFD7-F4F8DEADBDE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-n_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE1A077-564B-49A3-84C4-3E9EA6EA7675"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-l_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAFB25E-F057-423E-811D-1E4A8F9E2D73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:industrial_ethernet_2000_series_firmware:15.2\\(5.4.32i\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4A570B-15DD-45CD-8E0E-B828031CA8ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101043",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039451",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-profinet",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-profinet",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12235",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12236",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier (EID) to a Routing Locator (RLOC) in the map server/map resolver (MS/MR). The vulnerability is due to a logic error introduced via a code regression for the affected software. An attacker could exploit this vulnerability by sending specific valid map-registration requests, which will be accepted by the MS/MR even if the authentication keys do not match, to the affected software. A successful exploit could allow the attacker to inject invalid mappings of EIDs to RLOCs in the MS/MR of the affected software. This vulnerability affects Cisco devices that are configured with LISP acting as an IPv4 or IPv6 map server. This vulnerability affects Cisco IOS XE Software release trains 3.9E and Everest 16.4. Cisco Bug IDs: CSCvc18008."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de LISP (Locator/ID Separation Protocol) en Cisco IOS XE desde la versión 3.2 hasta la 16.5 podría permitir que un atacante remoto no autenticado utilice un túnel x del router para omitir los chequeos de autenticación realizados cuando se registra un EID (Endpoint Identifier) en un RLOC (Routing Locator) en MS/MR (Map Server/Map Resolver). Esta vulnerabilidad se debe a un error de lógica introducido mediante una regresión de código en el software afectado. Un atacante podría explotar esta vulnerabilidad enviando ciertas peticiones map-registration válidas, las cuales se aceptarían en el MS/MR incluso si las claves de autenticación no coinciden, al software aceptado. Si se explota correctamente, esta vulnerabilidad podría permitir que el atacante inyecte mapeos no válidos de los EID a los RLOC en el MS/MR del software afectado. Esta vulnerabilidad afecta a los dispositivos de Cisco que están configurados con LISP actuando como servidor de mapas IPv4 o IPv6. Esta vulnerabilidad afecta a las distribuciones Train 3.9E y Everest 16.4 del software de Cisco IOS XE. Cisco Bug IDs: CSCvc18008."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.2.0ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BC2A87-31EC-4E15-86E3-ECBEFA9E479A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B39732-D8FA-4E08-95FC-8F26C0BF8D0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101033",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039448",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-lisp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-lisp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12237",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.967",
      "lastModified" : "2025-10-22T00:16:03.623",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to how an affected device processes certain IKEv2 packets. An attacker could exploit this vulnerability by sending specific IKEv2 packets to an affected device to be processed. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. This vulnerability affects Cisco devices that have the Internet Security Association and Key Management Protocol (ISAKMP) enabled. Although only IKEv2 packets can be used to trigger this vulnerability, devices that are running Cisco IOS Software or Cisco IOS XE Software are vulnerable when ISAKMP is enabled. A device does not need to be configured with any IKEv2-specific features to be vulnerable. Many features use IKEv2, including different types of VPNs such as the following: LAN-to-LAN VPN; Remote-access VPN, excluding SSL VPN; Dynamic Multipoint VPN (DMVPN); and FlexVPN. Cisco Bug IDs: CSCvc41277."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo Internet Key Exchange Version 2 (IKEv2) de Cisco IOS desde la versión 15.0 hasta la 15.6 y Cisco IOS XE desde la versión 3.5 hasta la 16.5 podría permitir que un atacante remoto no autenticado provoque que haya un consumo elevado de recursos de CPU, que pueda leer trazas del sistema o que reinicie el dispositivo afectado para provocar una denegación de servicio (DoS). Esta vulnerabilidad se debe a la manera en la que el dispositivo afectado procesa ciertos paquetes IKEv2. Un atacante podría explotar esta vulnerabilidad enviando unos paquetes IKEv2 específicos al dispositivo afectado para que los procese. Una explotación exitosa podría permitir al atacante provocar que haya un consumo elevado de recursos de CPU, que pueda leer trazas del sistema o que reinicie el dispositivo afectado para provocar una denegación de servicio (DoS). Esta vulnerabilidad afecta a dispositivos de Cisco que tienen habilitado ISAKMP (Internet Security Association and Key Management Protocol). Aunque solo se pueden utilizar paquetes IKEv2 para desencadenar esta vulnerabilidad, los dispositivos que ejecuten Cisco IOS o Cisco IOS XE serían también vulnerables cuando ISAKMP está habilitado. No se necesita configurar los dispositivos con ninguna característica específica de IKEv2 para que sean vulnerables. Muchas características utilizan IKEv2, incluyendo diferentes tipos de VPN como los mostrados a continuación: LAN-to-LAN VPN; Remote-access VPN, excepto SSL VPN; Dynamic Multipoint VPN (DMVPN) y FlexVPN. Cisco Bug IDs: CSCvc41277."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "650EB42C-D85F-482B-972D-7DCAC210DC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0e",
            "versionEndIncluding" : "16.5",
            "matchCriteriaId" : "F6F88B83-D6C8-4B41-94B2-F95E6E6E5248"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1240_connected_grid_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB6ACAE-8C89-48F6-95BA-DE32F4F81FE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A273EE-41C1-41E9-9002-46F83FC6533F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C90C43-2D7D-43F8-AD7F-421878909AE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445597DA-7EEC-470D-9A71-BC43A9F7DE5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86049773-C88D-4A26-A0D3-D40F3C312AEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB4B7C2-4D45-4267-BCBB-57D36C6104A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8A4630-8B21-4994-8EF5-E105593A64E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F799DC02-EB06-458C-8545-A174475FE7A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89FBA68-A8ED-4C5A-916E-A68468F59730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD272E6E-2ED1-4408-8FF7-0B82F9DCBEF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC278B77-AD63-42AD-B9E8-EE4DE97E27E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:44461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697BEF89-6D9B-4870-BE85-9090152F3E6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34DAD43-0C95-4830-8078-EFE3E6C0A930"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5CBF0-7F55-44C0-B321-896BDBA22679"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D381E343-416F-42AF-A780-D330954F238F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2514A1-486C-40F7-8746-56E2B973CBE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3816C-95F4-443C-9C79-72F0251528F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1810C73-93B8-4EB5-85FC-3585AD5256BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2BC76E-A166-4E71-B058-F49FF84A9E19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542244A0-300C-4630-812A-BF45F61E38DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2182E7-C813-4966-A36C-E648A9344299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7814FA61-CAF1-46DE-9D84-CEBE6480EA03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4F60E-DF3D-4839-8731-7CF16DA8FF26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5EEE3-A084-46B4-84C0-ADFD69800649"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592F67D5-344B-49AF-A277-1089A40AC2FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7434059A-25B8-4FAC-A756-6E571348B76E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2A5355-BF40-437C-8683-A7A81DEE362C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F4B90E-3499-45D4-864D-18505E2149F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9BE6BA-6B2D-47C9-B8F1-3C9CE213948D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FEECF-CC69-4E68-8E8A-674643021964"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5FCCFF-E491-474F-9B86-AB51D8244582"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8464F8-D6D2-4165-ADE8-B40F7D8556C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61007628-A81B-43E0-86DE-1F7DDAD9F1A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9F022-4C3D-493E-9418-E9CDDAFEC9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3F03C3-C0CA-4E9B-A99A-BE28153EB5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39F250E-6A89-4537-BD31-1FB81734A9A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4E3B69-DDE8-4EA2-8E63-D6EEF41083B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8904EAF5-25E7-4A6B-8117-1859F913B83B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A369CD35-1242-4556-A83D-BD69CC149CFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D1B9E-6234-4FD6-A003-AFBC8A4DC2E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784A1499-1F33-493D-B433-EB2550C03C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A990D6-B748-4AFD-B924-1D19680BD3DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFC88D-5480-46E4-BF74-E11A514A8BDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54D16A8-0407-41E3-9599-9A6F57E1AA75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94A9A21-C4F7-4EA4-95B1-DEA7DDA0F77D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3818CC-8653-4A9E-A57B-950A15914D6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDC790B-B42D-45DB-ACF5-A789F76C2BC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A6BC84-91F2-437D-9D2E-F8B3F5966767"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F331F13-5D05-4213-B442-D48D8E22287B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E312F4-90DA-40E4-BCD1-92F41BEEEECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32EA3F-946D-430D-B00F-939D828DD72C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D239A09C-34D2-4418-B538-03A1080B8479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84561E-DD99-4433-9EF2-083F7C300123"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29871BE-CA7D-4108-B46A-CBD539C9A2B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CD9189-6524-4157-B90E-FF6A81DE3599"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1B702-643A-4AF2-B0AD-3C540CF85F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96269625-CB31-4850-872B-B2C1321B13B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426B68A6-3A41-43DB-846F-AEFBA62E221B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDE086A-3FE5-46E3-BD66-23D0AE5089BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53775A-D3ED-4D34-8338-A384DBEB94E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7D4522-D6BB-467F-AF5D-4D753A89D524"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C96215F-A300-4B4E-9D3A-C32E484BFC5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C680534-C663-40B0-A4AA-7F292EE60FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4F233-7B47-46ED-BDC5-A589BCFC0B39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A528EC0-4650-4787-BE52-A588E7E38A31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53898E96-03D6-43A2-AE05-46C62464BD26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465917E5-8BF0-4BBB-85A0-DE8F516880C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FA66D9-E465-406E-A95C-608A1BE34D74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFE6E6-413F-48AC-B4CE-0F1058C48FC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1456B204-A2A5-4790-A684-7F50D692EC9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD715BDD-7C74-4785-BEDF-75918F6FB37A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD10664-94D0-48C0-92EF-E8EA66841245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071A47F9-FF35-4F2C-BF5D-897CAC8BC08A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E988448-36C9-47E0-9356-DA400EB824E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D067EF9-00DB-4979-B12E-55749059A083"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FA300A-44B1-44EE-8111-C1296EB0B638"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8598A543-B30B-4BD4-9974-F432FFFDCDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DEBBAD-D28D-4784-BBD8-9FAD1710A919"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FC516-6B48-4D77-B26D-FA097AC91D1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7437E4-5C09-436C-AFBC-F6B6747A4339"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC0277-4990-4DE7-AD80-20E8A6F561D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7DAF69-662B-4999-A6AD-AA528B53EAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF90C70-A2B8-44A4-B4A1-2A1B48AA9D0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28306B1-3DDE-4444-9784-522B3D2163EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9257D187-1F2D-40F4-8C87-78978DB56C3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF4A033-FD9E-4B98-A0FD-CF6CD9BD3E5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF8261-74E0-4F53-B82C-A7BA7559D7CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AE251E-E99F-4546-85B0-C57834B040B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62FFCB9-4253-459B-9298-C252DA9177DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991CBDFB-6836-4D1F-80A9-14EBCE3F855F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C0250-DA0D-4CEE-99F4-C211163C6653"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18C436-AC70-4E2E-8ED2-EEADFCE36CB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D453BF6-AB9F-4D47-B4DF-C25C67358FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F5347-A5E6-4954-ACAB-E4DF29119724"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2A8413-DF92-4690-8BC1-A21001BDF76B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8D8F-E154-45C3-BB47-5353167C9776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD7BE51-0BA6-4750-B274-A6E33D32B484"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87F823-D924-4718-AD81-248A6C619531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC866C9-BB98-4320-9FFA-F0960C560DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AD7495-3DA2-4596-9620-CD36D7C561AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492F3F8-4188-41E4-9A84-5E30C4AC3378"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5CB558-BD42-4615-BC31-41CCF25DE5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45BCCD0-65BB-431F-B448-221C1595CD92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33BA722-0680-4074-8D03-41657F8CDCC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C46B4-5E9F-4DD8-861B-00BA43923306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431570C7-74A1-4F7E-8FD0-690AEF0F823B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D22E15-E1E8-4115-A55F-5743CA9C5947"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840171D-CA1C-4E25-BD41-6B871C47BB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B240B20-CF48-4A72-9653-9D04D59C1391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CCD143-3D6E-4880-B275-ECF5B04238C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C466B-CE87-4A57-B40B-88C94BAAF36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58FF034-8E07-4518-A858-5F16F22217E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376AD386-373D-4B24-966F-D11F76C9020F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1174-C789-4547-9899-F7FCD0905F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC366801-655A-403B-ACD9-3BB43802A3C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39600E51-4A21-4E5B-9FF9-E7C00AE86646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E4D5A8-7E4A-44C5-81DC-84712781206D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D6D50-D0FA-4527-BED3-52560DDD5253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BF315-D833-4711-97FC-512151113367"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04072C0F-78A2-4D10-87B2-52DC2537BA89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD262F58-C47F-439E-A9FF-D1C60120D306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35490BDE-DF21-495E-9F8A-7631FCB32A1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737F22AB-C5A9-4A18-BA3D-38A222491397"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5DCFD5-2B46-4D06-9E4C-B2325F440F02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9407r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5508320-8318-41A8-8026-4A61907C1CD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9410r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD337D8-8C72-4025-A8C3-E63598DE7BDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FC868-0B38-4F24-BA40-87966FF80AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19A801D-02D7-40B0-88E8-FE7BA8630E60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA59279-3504-417D-9E86-E5886EE198BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4035136-CC10-4DDD-92AF-9DC41D19CF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A41A34-58D2-4DBC-ABC9-20A62BC8A838"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF0025D-8DE1-437D-9A4E-72C3AC6B46CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cbr-8_converged_broadband_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CCBE67-E509-43EC-9AFB-8A9B6A115126"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-con-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E69A6F-DFC0-4C8A-B77F-B7329FA5F567"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-ncp-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA015C4-7163-4FCD-ADE1-D5481B10EACA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D19136-4ECB-437F-BA8A-E2FE35A39BF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:integrated_services_virtual_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5361C70A-C036-4254-9698-BC58F48C465B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101037",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039460",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ike",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ike",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12237",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12238",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:48.997",
      "lastModified" : "2025-10-22T00:16:03.777",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resulting in a denial of service (DoS) condition. The vulnerability is due to a memory management issue in the affected software. An attacker could exploit this vulnerability by creating a large number of VPLS-generated MAC entries in the MAC address table of an affected device. A successful exploit could allow the attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resulting in a DoS condition. This vulnerability affects Cisco Catalyst 6800 Series Switches that are running a vulnerable release of Cisco IOS Software and have a Cisco C6800-16P10G or C6800-16P10G-XL line card in use with Supervisor Engine 6T. To be vulnerable, the device must also be configured with VPLS and the C6800-16P10G or C6800-16P10G-XL line card needs to be the core-facing MPLS interfaces. Cisco Bug IDs: CSCva61927."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código VPLS (Virtual Private LAN Service) de Cisco IOS desde la versión 15.0 hasta la 15.4 para los switches de la serie 6800 de Cisco Catalyst podría permitir que un atacante adyacente sin autenticar provoque el cierre inesperado de las tarjetas de línea C6800-16P10G o C6800-16P10G-XL, provocando una denegación de servicio (DoS) como consecuencia. Esta vulnerabilidad se debe a un problema de gestión de memoria en el software afectado. Un atacante podría explotar esta vulnerabilidad creando un gran número de entradas MAC generadas por el VPLS en la tabla de direcciones MAC del dispositivo afectado. Si se explota con éxito, podría permitir que el atacante provoque el cierre inesperado de las tarjetas de línea C6800-16P10G o C6800-16P10G-XL, provocando una denegación de servicio (DoS) como consecuencia. Esta vulnerabilidad afecta a los switches de la serie 6800 de Cisco Catalyst que ejecutan una distribución vulnerable del software de Cisco IOS y tienen una tarjeta de línea Cisco C6800-16P10G o C6800-16P10G-XL que se utiliza con Supervisor Engine 6T. Para que sea vulnerable, el dispositivo tiene que estar también configurado con VPLS y la tarjeta de línea C6800-16P10G o C6800-16P10G-XL necesita estar en las interfaces conectadas al núcleo MPLS Cisco Bug IDs: CSCva61927."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.4",
            "matchCriteriaId" : "2C8ACCBC-19E5-4960-84BF-BD6EBAE0AC39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c6800-16p10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D782FEB-FF9A-4F41-95BA-88C239656F7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c6800-16p10g-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F508C81E-D31B-44BA-82C8-FEDA00324B8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38280588-3CE2-4797-A56A-00256E634C62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2AF1C7-23EB-4C13-AC71-4FA7E78E8ED7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF0BBC8-04BD-4867-B188-35461E50FF16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1E3F7-D48E-4AF1-8205-33EB71E09E09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C959C93D-D58C-4AB5-9058-0CF257C68F72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDB5EAC-E41D-4A15-B059-45B4BE4813EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DF345D-AD8A-4DE6-8136-6EF7B011E4B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFBFA86-64F2-4CB0-99E1-FAEFCA690FF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B48565-92C7-4AE1-AE3A-6FF7DD010745"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC58B690-8D30-4A04-82AA-A827F87DEE02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BED8BD-79D2-4DD9-A895-66A8C9349F62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "41491D13-A3F9-464A-A84B-A58320838CBD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0747C3-2712-4FA9-92E3-260B3CF080DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF4CBFF-56C4-4411-9F12-2506C3DD563E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4D3F34-A1B3-4469-BF21-666FDAE9198B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F202892E-2E58-4D77-B983-38AFA51CDBC6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F57DF3E-4069-4EF0-917E-84CDDFCEBEEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE25114-ABBC-47A0-9C20-E8D40D721313"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADD5F49-2817-40EC-861C-C922825708BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6509-neb-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E628F9C4-98C6-4A95-AF81-F1E6A56E8648"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFF899C-1EB3-46D8-9003-EA36A68C90B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6463491-F63E-44CB-A1D4-C029BE7D3D3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8668D34-096B-4FC3-B9B1-0ECFD6265778"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101040",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039453",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-vpls",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-vpls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12238",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12239",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:49.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical attacker to access an affected device's operating system. The vulnerability exists because an engineering console port is available on the motherboard of the affected line cards. An attacker could exploit this vulnerability by physically connecting to the console port on the line card. A successful exploit could allow the attacker to gain full access to the affected device's operating system. This vulnerability affects only Cisco ASR 1000 Series Routers that have removable line cards and Cisco cBR-8 Converged Broadband Routers, if they are running certain Cisco IOS XE 3.16 through 16.5 releases. Cisco Bug IDs: CSCvc65866, CSCve77132."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los puertos de la consola de la placa base de las tarjetas de línea para Cisco ASR 1000 Series Aggregation Services Routers y Cisco cBR-8 Converged Broadband Routers podría permitir que un atacante físico no autenticado acceda al sistema operativo del dispositivo afectado. Existe una vulnerabilidad en la que un puerto de consola está disponible en la placa base de las tarjetas de línea afectadas. Un atacante podría explotar esta vulnerabilidad conectándose físicamente al puerto de consola en la tarjeta de línea. Una explotación exitosa podría permitir que un atacante obtenga acceso total al sistema operativo del dispositivo afectado. Esta vulnerabilidad afecta a los routers de la serie ASR 1000 de Cisco que tienen tarjetas de línea extraíbles y routers Cisco cBR-8 Converged Broadband, si ejecutan determinadas distribuciones de Cisco IOS XE desde la 3.16 hasta la 16.5. Cisco Bug IDs: CSCvc65866, CSCve77132."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97410577-A005-49B6-981C-535B3484E72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3420FB4D-8A6A-4B37-A4AE-7B35BEEEAF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1gsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3170E3-0BCC-4C5F-8E6C-5E91E8C4E7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1hsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCDB353-DD15-4C91-AD2A-73649C012E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1isp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DAAE1-BB3F-4FBA-A6ED-3BABC9196C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101042",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039454",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039455",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12240",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-09-29T01:34:49.077",
      "lastModified" : "2025-10-22T00:16:03.900",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a buffer overflow condition in the DHCP relay subsystem of the affected software. An attacker could exploit this vulnerability by sending a crafted DHCP Version 4 (DHCPv4) packet to an affected system. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a DoS condition. Cisco Bug IDs: CSCsm45390, CSCuw77959."
      }, {
        "lang" : "es",
        "value" : "El subsistema relay DHCP de Cisco IOS desde la versión 12.2 hasta la 15.6 y Cisco IOS XE contiene una vulnerabilidad que podría permitir a un atacante remoto no autenticado ejecutar código arbitrario y obtener el control total del sistema afectado. El atacante podría también hacer que el sistema afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. Esta vulnerabilidad se debe a un desbordamiento de búfer en el subsistema relay DHCP del software afectado. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete DHCPv4 (DHCP Version 4) al sistema afectado. Una explotación exitosa podría permitir que el atacante ejecute código arbitrario y obtenga el control total del sistema afectado o haga que el sistema afectado se reinicie, provocando una denegación de servicio (DoS) como consecuencia. Cisco Bug IDs: CSCsm45390, CSCuw77959."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2",
            "versionEndIncluding" : "15.6",
            "matchCriteriaId" : "5B29302F-A386-4E69-BD22-59CDF9CB0E21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A273EE-41C1-41E9-9002-46F83FC6533F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34DAD43-0C95-4830-8078-EFE3E6C0A930"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5CBF0-7F55-44C0-B321-896BDBA22679"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D381E343-416F-42AF-A780-D330954F238F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2514A1-486C-40F7-8746-56E2B973CBE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3816C-95F4-443C-9C79-72F0251528F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1810C73-93B8-4EB5-85FC-3585AD5256BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2BC76E-A166-4E71-B058-F49FF84A9E19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542244A0-300C-4630-812A-BF45F61E38DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2182E7-C813-4966-A36C-E648A9344299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA873342-542E-4FC8-9C22-B5A43F9F3E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF8271-315F-4756-931F-015F790BE693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324C97E6-1810-404F-9F45-6240F99FF039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64B28-7F3F-40BC-B289-0D1DB55B6461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5603296-34B3-4EEB-B242-C44BC56BFBB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2A515C-797D-47EE-8051-F3FBE417BCE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E673A75F-EFF8-4591-8E0F-A21083563DBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433F4A82-04A4-4EAA-8C19-F7581DCD8D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5456C70-6BA4-456A-BCFA-06FD052E44EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515CD97F-DDBD-4F75-A6DB-646890A30B32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E181FC9-6790-4C12-874F-67252B6879BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD4F12D-3F97-44D2-9DE2-571425E75F4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-4sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1288DB-5946-4091-A6E8-42E0A0E7B2B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70352B04-C3FD-47F5-A2F8-691CF63EB50D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE063AF2-5579-4D7E-8829-9102FC7CB994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51938C0A-AFDB-4B12-BB64-9C67FC0C738F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_907:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18E4A46-10D3-48F8-9E92-377ACA447257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_914:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D5E61B-9F17-4C56-A1BB-3EE08CB62C53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE110B5-CC6E-4103-9983-4195BCC28165"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DDC45-ABD1-4C8F-A249-0865345637A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8A748B-DDA9-4F0B-9AAA-F9A62BBC3DCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE4D129-435B-45DD-838D-4017BD94DF93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456C68A8-F3C8-4302-B55A-134979B42045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F681230-2530-4ED9-85E9-FE7A57FCF2F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870D5B63-A1D5-442A-B2B9-9E522E5DB08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C6733C-F77B-4688-B051-C1557F4D8D41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3D23C1-FE0E-4D33-9E89-07A4135E1360"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD45D77-4097-4AFB-98DF-5B8188316C20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489F97AB-5C6D-4AFE-BE5A-ABF7F9ED8B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E598123-4AF8-44F6-BE87-9F62007FF658"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064DB97B-9E52-45BC-9F43-8FCB5570FC7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31608C12-FBED-4EAD-96EC-48BC4B356B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC28F05-20D0-4518-93FF-F254BA81E4B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D989205A-0576-415C-935E-E83AD42FD1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D21D9A5-DE8F-4C55-B03F-35C04C270A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BCA1C7-5642-4A2B-9E61-B141E70E098A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C3EB40-574A-48F7-A679-90F62ED976B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC6206-DF19-4636-84C2-8912E443D122"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27ED272-FCA6-4002-93E1-EF0B89C84572"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85489F69-EAF0-4971-8C93-36838A8AA00E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95FEC1-12F3-44FC-B922-CD18CADB42FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD184DD-8774-4C18-BE53-BC6B133B01C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D029B0C-2DAE-491A-90B4-79C093EC9E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE37BC85-7758-4412-A5E6-0F1A19E8776B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F587F6-876D-4AE4-B6BD-ED50D47F5361"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920u-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA179D79-07E7-4721-85BB-0C740B516B1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5E60AB-94FF-448A-89D8-5D2197E21C74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91474DBC-FB31-4DDF-96C5-311FA1D53A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA241214-2F05-4360-9B50-385355E29CF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93212A4-50AB-42E7-89A4-5FBBAEA050C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA53A61-98B3-458C-8893-61CD7D6B1E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F396564E-B477-4A27-A189-CEB737552E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5445CC54-ACFB-4070-AF26-F91FEAA85181"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E7ED87-8AC0-4107-A7A5-F334236E2906"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7814FA61-CAF1-46DE-9D84-CEBE6480EA03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4F60E-DF3D-4839-8731-7CF16DA8FF26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5EEE3-A084-46B4-84C0-ADFD69800649"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592F67D5-344B-49AF-A277-1089A40AC2FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7434059A-25B8-4FAC-A756-6E571348B76E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2A5355-BF40-437C-8683-A7A81DEE362C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F4B90E-3499-45D4-864D-18505E2149F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9BE6BA-6B2D-47C9-B8F1-3C9CE213948D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FEECF-CC69-4E68-8E8A-674643021964"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5FCCFF-E491-474F-9B86-AB51D8244582"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8464F8-D6D2-4165-ADE8-B40F7D8556C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61007628-A81B-43E0-86DE-1F7DDAD9F1A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9F022-4C3D-493E-9418-E9CDDAFEC9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3F03C3-C0CA-4E9B-A99A-BE28153EB5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39F250E-6A89-4537-BD31-1FB81734A9A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4E3B69-DDE8-4EA2-8E63-D6EEF41083B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8904EAF5-25E7-4A6B-8117-1859F913B83B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A369CD35-1242-4556-A83D-BD69CC149CFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D1B9E-6234-4FD6-A003-AFBC8A4DC2E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784A1499-1F33-493D-B433-EB2550C03C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A990D6-B748-4AFD-B924-1D19680BD3DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFC88D-5480-46E4-BF74-E11A514A8BDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54D16A8-0407-41E3-9599-9A6F57E1AA75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94A9A21-C4F7-4EA4-95B1-DEA7DDA0F77D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3818CC-8653-4A9E-A57B-950A15914D6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDC790B-B42D-45DB-ACF5-A789F76C2BC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A6BC84-91F2-437D-9D2E-F8B3F5966767"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F331F13-5D05-4213-B442-D48D8E22287B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E312F4-90DA-40E4-BCD1-92F41BEEEECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32EA3F-946D-430D-B00F-939D828DD72C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D239A09C-34D2-4418-B538-03A1080B8479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84561E-DD99-4433-9EF2-083F7C300123"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29871BE-CA7D-4108-B46A-CBD539C9A2B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CD9189-6524-4157-B90E-FF6A81DE3599"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1B702-643A-4AF2-B0AD-3C540CF85F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96269625-CB31-4850-872B-B2C1321B13B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426B68A6-3A41-43DB-846F-AEFBA62E221B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDE086A-3FE5-46E3-BD66-23D0AE5089BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53775A-D3ED-4D34-8338-A384DBEB94E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7D4522-D6BB-467F-AF5D-4D753A89D524"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C96215F-A300-4B4E-9D3A-C32E484BFC5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C680534-C663-40B0-A4AA-7F292EE60FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4F233-7B47-46ED-BDC5-A589BCFC0B39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A528EC0-4650-4787-BE52-A588E7E38A31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53898E96-03D6-43A2-AE05-46C62464BD26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465917E5-8BF0-4BBB-85A0-DE8F516880C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FA66D9-E465-406E-A95C-608A1BE34D74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFE6E6-413F-48AC-B4CE-0F1058C48FC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1456B204-A2A5-4790-A684-7F50D692EC9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD715BDD-7C74-4785-BEDF-75918F6FB37A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD10664-94D0-48C0-92EF-E8EA66841245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071A47F9-FF35-4F2C-BF5D-897CAC8BC08A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E988448-36C9-47E0-9356-DA400EB824E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D067EF9-00DB-4979-B12E-55749059A083"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FA300A-44B1-44EE-8111-C1296EB0B638"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8598A543-B30B-4BD4-9974-F432FFFDCDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DEBBAD-D28D-4784-BBD8-9FAD1710A919"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FC516-6B48-4D77-B26D-FA097AC91D1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7437E4-5C09-436C-AFBC-F6B6747A4339"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC0277-4990-4DE7-AD80-20E8A6F561D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7DAF69-662B-4999-A6AD-AA528B53EAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF90C70-A2B8-44A4-B4A1-2A1B48AA9D0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28306B1-3DDE-4444-9784-522B3D2163EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9257D187-1F2D-40F4-8C87-78978DB56C3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF4A033-FD9E-4B98-A0FD-CF6CD9BD3E5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF8261-74E0-4F53-B82C-A7BA7559D7CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AE251E-E99F-4546-85B0-C57834B040B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62FFCB9-4253-459B-9298-C252DA9177DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991CBDFB-6836-4D1F-80A9-14EBCE3F855F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C0250-DA0D-4CEE-99F4-C211163C6653"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18C436-AC70-4E2E-8ED2-EEADFCE36CB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D453BF6-AB9F-4D47-B4DF-C25C67358FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F5347-A5E6-4954-ACAB-E4DF29119724"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2A8413-DF92-4690-8BC1-A21001BDF76B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8D8F-E154-45C3-BB47-5353167C9776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD7BE51-0BA6-4750-B274-A6E33D32B484"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87F823-D924-4718-AD81-248A6C619531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC866C9-BB98-4320-9FFA-F0960C560DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AD7495-3DA2-4596-9620-CD36D7C561AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492F3F8-4188-41E4-9A84-5E30C4AC3378"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5CB558-BD42-4615-BC31-41CCF25DE5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45BCCD0-65BB-431F-B448-221C1595CD92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33BA722-0680-4074-8D03-41657F8CDCC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C46B4-5E9F-4DD8-861B-00BA43923306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431570C7-74A1-4F7E-8FD0-690AEF0F823B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D22E15-E1E8-4115-A55F-5743CA9C5947"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840171D-CA1C-4E25-BD41-6B871C47BB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B240B20-CF48-4A72-9653-9D04D59C1391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CCD143-3D6E-4880-B275-ECF5B04238C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C466B-CE87-4A57-B40B-88C94BAAF36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58FF034-8E07-4518-A858-5F16F22217E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376AD386-373D-4B24-966F-D11F76C9020F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1174-C789-4547-9899-F7FCD0905F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC366801-655A-403B-ACD9-3BB43802A3C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39600E51-4A21-4E5B-9FF9-E7C00AE86646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E4D5A8-7E4A-44C5-81DC-84712781206D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D6D50-D0FA-4527-BED3-52560DDD5253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BF315-D833-4711-97FC-512151113367"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04072C0F-78A2-4D10-87B2-52DC2537BA89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD262F58-C47F-439E-A9FF-D1C60120D306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35490BDE-DF21-495E-9F8A-7631FCB32A1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101034",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039445",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCsm45390",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCuw77959",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-dhcp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCsm45390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://quickview.cloudapps.cisco.com/quickview/bug/CSCuw77959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-dhcp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12240",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) timeline parameter in content_timeline_class.php; or the id parameter to (2) pages/content_timeline_edit.php or (3) pages/content_timeline_index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en la versión 4.4.2 del plugin Content Timeline para WordPress permiten a los atacantes remotos ejecutar comandos SQL arbitrarios mediante (1) el parámetro timeline en content_timeline_class.php o el parámetro id a (2) pages/content_timeline_edit.php o (3) pages/content_timeline_index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shindiristudio:content_timeline:4.4.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "032D5FAB-4F4C-460D-8781-5F2F9B5ADEDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8921",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42794/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42794/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En Exiv2 0.26, existe una liberación no válida en la clase Image en image.cpp que provoca un fallo de segmentación. Se podría realizar un ataque de denegación de servicio con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1495043",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1495043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en memoria dinámica (heap) en la función Exiv2::l2Data de types.cpp en la versión 0.26 de Exiv2. Se podría realizar un ataque de denegación de servicio con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una desreferencia de dirección de memoria inválida en la función Exiv2::StringValueBase::read en value.cpp en la versión 0.26 de Exiv2. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en memoria dinámica (heap) en la función Exiv2::Jp2Image::readMetadata de jp2image.cpp en la versión 0.26 de Exiv2. Se podría realizar un ataque de denegación de servicio con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de consumo de pila en la función Exiv2::Internal::stringFormat de image.cpp en la versión 0.26 de Exiv2. Se podría realizar un ataque de denegación de servicio remoto con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494787",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una desreferencia de dirección de memoria inválida en la función Exiv2::DataValue::read en value.cpp en la versión 0.26 de Exiv2. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494786",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una desreferencia de puntero NULL en la función Exiv2::Image::printIFDStructure en image.cpp en la versión 0.26 de Exiv2. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una desreferencia de dirección de memoria inválida en la función Exiv2::getULong en types.cpp en la versión 0.26 de Exiv2. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494467",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:49.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en memoria dinámica (heap) en la función Exiv2::us2Data de types.cpp en la versión 0.26 de Exiv2. Se podría realizar un ataque de denegación de servicio con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494778",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:50.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en memoria dinámica (heap) en la función Exiv2::s2Data de types.cpp en la versión 0.26 de Exiv2. Se podría realizar un ataque de denegación de servicio con una entrada especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494781",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1494781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-29T01:34:50.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support."
      }, {
        "lang" : "es",
        "value" : "Git en versiones anteriores a la 2.10.5, las versiones 2.11.x anteriores a 2.11.4, las 2.12.x anteriores a2.12.5, las 2.13.x anteriores a 2.13.6 y las 2.14.x anteriores a 2.14.2 emplean scripts de Perl no seguros para dar soporte a subcomandos como cvsserver. Esto permite que los atacantes ejecuten comandos arbitrarios del sistema operativo mediante metacaracteres shell en un nombre de módulo. El código vulnerable puede alcanzarse mediante git-shell incluso sin soporte para CVS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.4",
            "matchCriteriaId" : "869803A7-F867-498B-AE64-424EE475E890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97E04C0-465C-4A2D-8FD5-FC75094E3736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA24D16-84C8-4DF6-B4E1-288A3C991518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA9C323-AEAA-4A55-849B-B0E731709AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301975E7-A398-49F1-BC07-5D72643C16D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CAC635-62EE-49EC-A5AA-5B4D8A1C6AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BF6D70-E21E-4E47-A41E-C063659A7786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDA604D-2901-4AF2-9411-80681B445F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EC96D3-BD11-4E2A-9E7B-276F4311EF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C65FA3-5BA4-40E5-A0C3-38E464A60D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE0CA61-E0C2-432C-9095-DEDC2DDA32E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7CD32-A6BB-474A-A356-C2BFBBE9910A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6945B1B-75CF-42F5-A93E-D077CA1ED9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3A3F02-578A-4C96-B0A8-AED9204B8872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B08345-AE7F-4130-AD09-A5BA2F2C2F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69295DA-2E14-4FF3-8778-7650B20A75B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FFDA48-13E9-4918-BA44-EE3BCF670B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FDC16B-61FD-4D08-8EBF-D0DAB07079BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/26/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101060",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039431",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/876854",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00246.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://public-inbox.org/git/xmqqy3p29ekj.fsf%40gitster.mtv.corp.google.com/T/#u",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/09/26/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/876854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://public-inbox.org/git/xmqqy3p29ekj.fsf%40gitster.mtv.corp.google.com/T/#u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7552",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-29T01:34:50.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en el editor de archivos de milicore que afecta a las versiones anteriores a la 3.19.0 y a las versiones 4.x anteriores a la 4.5.0, lo que permite que los archivos se ejecuten y se creen. Un atacante podría aprovechar esta vulnerabilidad para comprometer otros proyectos de usuarios o equipos almacenados en el sistema de control de código fuente (SCM) de la instalación RHMAP Core."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mobile_application_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.3",
            "matchCriteriaId" : "E67D227E-8AAE-4C87-8318-B6E465CA44CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477797",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1477797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7553",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-29T01:34:50.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints."
      }, {
        "lang" : "es",
        "value" : "La llamada api external_request en App Studio (millicore) permite que se realicen ataques de tipo Server Side Request Forgery (SSRF). Un atacante podría aprovechar este fallo para sondear los recursos internos de la red y acceder a puntos de conexión restringidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mobile_application_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.3",
            "matchCriteriaId" : "E67D227E-8AAE-4C87-8318-B6E465CA44CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1478792",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1478792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7554",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-09-29T01:34:50.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el componente App Studio de RHMAP 4.4 ejecuta código JavaScript proporcionado por el usuario. Un atacante podría aprovechar este fallo para ejecutar un ataque de Cross-Site Scripting (XSS) persistente en un administrador de aplicaciones que emplee App Studio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mobile_application_platform:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B231672A-BFBC-47C5-A923-D3802EB86AFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1478770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1478770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7687",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-29T01:34:50.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable."
      }, {
        "lang" : "es",
        "value" : "Al gestionar un error de descodificación para una ruta URL malformada de una petición HTTP, libprocess en Apache Mesos en versiones anteriores a la 1.1.3, las versiones 1.2.x anteriores a la 1.2.2, las 1.3.x anteriores a la 1.3.1 y 1.4.0-dev podría cerrarse inesperadamente ya que el código llama por error a una función no apropiada. Por lo tanto, un actor malicioso podría provocar una denegación de servicio (DoS) de los nodos Maestro de Mesos, haciendo que el clúster controlado por Mesos no funcione."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "A1F792FD-9C0E-4E42-8F3A-BC6F0738C8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD55F4CD-6F00-49B9-B366-7A0777BFE0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD891F6-4971-4074-8BE2-4098D844808E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072B30C9-9868-4888-AACF-C0A340169D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1556E40-DC8D-4558-8583-6416AD6226AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.4.0-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682123F2-153D-4B2E-B984-13076997F612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101027",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2c9ed2b07c2b2831a11d21db3cf8408a71fcf2c300d73ca01bad89df%40%3Cdev.mesos.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2c9ed2b07c2b2831a11d21db3cf8408a71fcf2c300d73ca01bad89df%40%3Cdev.mesos.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8444",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-09-29T01:34:50.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data."
      }, {
        "lang" : "es",
        "value" : "client-forwarder en las versiones de Elastic Cloud Enterprise anteriores a 1.0.2 no cifra el tráfico a ZooKeeper. Si un atacante puede realizar un ataque Man-in-the-Middle (MitM) en el tráfico entre client-forwarder y ZooKeeper, podría obtener datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:cloud_enterprise:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36601381-6544-4E2F-8D0B-91F57E3728C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:cloud_enterprise:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205A850F-371F-419D-839F-E5D987F379EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8447",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-09-29T01:34:50.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index' permissions on an index in a cluster, they may be able to issue both delete and index requests against that index."
      }, {
        "lang" : "es",
        "value" : "Existe un error en torno al cumplimiento de los privilegios en X-Pack Security desde la versión 5.3.0 hasta la 5.5.2 Si un usuario tiene los permisos de \"delete\" o \"index\" en un índice en un clúster, podría enviar las peticiones de delete e index contra el índice."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761A9E6A-DBC5-48E4-8A79-A90F65C28E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAAB65B-1C7C-4929-ACAA-9993E1626FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9F72ED-C37A-435D-9253-801C97C50753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965A9F08-9C79-436D-98BA-DAC4F5D71EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D9F09D-81BD-4B6E-8016-E6EAF2D68E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF02F57-1183-4A26-98ED-90D43C8E1472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38E001E-D799-4F5E-BF62-E8F58EF7B8BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/x-pack-security-5-6-0-and-5-5-3-security-update/100089",
        "source" : "security@elastic.co",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/x-pack-security-5-6-0-and-5-5-3-security-update/100089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8448",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-09-29T01:34:50.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Existe un error en el modelo de permisos utilizado en X-Pack Alerting desde la versión 5.0.0 hasta la 5.6.0, en donde los usuarios que tienen integrados ciertos roles podrían crear un \"watch\" que haría que esos usuarios obtengan privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15893C0-5FFF-4A60-940F-C69EBF60CE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE40EC5-19CF-4DDC-98CF-DEA035CBBDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ABFD3F-65B8-45CA-8AA0-DD9FC0E668E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444B1E15-1BEF-479B-8DEA-1DB5ACE7C051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9945D4-5B3B-41B3-9F94-DB11A8F7E262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C26D394C-DE12-489F-B7E1-DF4C28BB404B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109A47C4-A688-4712-969F-08859B2A7923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761A9E6A-DBC5-48E4-8A79-A90F65C28E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAAB65B-1C7C-4929-ACAA-9993E1626FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9F72ED-C37A-435D-9253-801C97C50753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965A9F08-9C79-436D-98BA-DAC4F5D71EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D9F09D-81BD-4B6E-8016-E6EAF2D68E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF02F57-1183-4A26-98ED-90D43C8E1472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38E001E-D799-4F5E-BF62-E8F58EF7B8BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:x-pack:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2E2D75-D5F8-4D62-B63E-595A8C280CFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884",
        "source" : "security@elastic.co",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9790",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-29T01:34:50.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with '/'. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable."
      }, {
        "lang" : "es",
        "value" : "Cuando se procesa un mensaje libprocess contenido en una petición HTTP, libprocess en Apache Mesos en versiones anteriores a la 1.1.3, 1.2.x anteriores a la 1.2.2, 1.3.x anteriores a la 1.3.3 y 1.4.0-dev se cierra de manera inesperada si la ruta de la petición está vacía porque el analizador sintáctico asume que la ruta de la petición siempre empieza por \"/\". Un atacante malicioso podría entonces provocar una denegación de servicio (DoS) en los nodos Maestro de Meses, haciendo que el clúster controlado por Mesos se vuelva inoperable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "A1F792FD-9C0E-4E42-8F3A-BC6F0738C8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD55F4CD-6F00-49B9-B366-7A0777BFE0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD891F6-4971-4074-8BE2-4098D844808E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072B30C9-9868-4888-AACF-C0A340169D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1556E40-DC8D-4558-8583-6416AD6226AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mesos:1.4.0-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682123F2-153D-4B2E-B984-13076997F612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101023",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/cc1e7a69ea78da0511f5b54b6be7aa6e3c78edad5aaff430e7de028b%40%3Cdev.mesos.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/cc1e7a69ea78da0511f5b54b6be7aa6e3c78edad5aaff430e7de028b%40%3Cdev.mesos.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via vectors related to incorrect literal handling, which trigger CPM stack corruption."
      }, {
        "lang" : "es",
        "value" : "Los sistemas Unisys Libra con clases 64xx, 84xx y FS601 con versiones anteriores a la 43.211 de MCP-FIRMWARE permiten que usuarios autenticados remotos provoquen una denegación de servicio (cierre inesperado del programa) o que provoquen otro impacto sin especificar mediante vectores relacionados con la gestión incorrecta de literales. Esto desencadena una corrupción de la pila CPM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unisys:mcp-firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "43.185",
            "matchCriteriaId" : "23604CD3-EE62-40EE-974B-15DBBA16EA9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=44",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13982",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en HPE BSM Platform Application Performance Management System Health en versiones 9.26, 9.30 y 9.40 permite que los usuarios suban archivos sin restricción."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9D6E45-C6F1-4DC3-BE44-BCEC06491234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2806918C-E1E1-4D5C-8671-28FDAA8725E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD78083-6382-4721-B85E-79FE0CA01747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101199",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-719/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-719/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13983",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación en HPE BSM Platform Application Performance Management System Health en versiones 9.26, 9.30 y 9.40 permite que los usuarios remotos omitan la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9D6E45-C6F1-4DC3-BE44-BCEC06491234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2806918C-E1E1-4D5C-8671-28FDAA8725E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD78083-6382-4721-B85E-79FE0CA01747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-722/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-722/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13984",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación en HPE BSM Platform Application Performance Management System Health en versiones 9.26, 9.30 y 9.40 permite que los usuarios remotos eliminen archivos arbitrarios mediante un salto de directorio servlet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9D6E45-C6F1-4DC3-BE44-BCEC06491234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2806918C-E1E1-4D5C-8671-28FDAA8725E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD78083-6382-4721-B85E-79FE0CA01747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-720/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-720/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13985",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación en HPE BSM Platform Application Performance Management System Health en versiones 9.26, 9.30 y 9.40 permite que los usuarios remotos salten directorios, lo que conduce a una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9D6E45-C6F1-4DC3-BE44-BCEC06491234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2806918C-E1E1-4D5C-8671-28FDAA8725E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:bsm_platform_application_performance_management_system_health:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD78083-6382-4721-B85E-79FE0CA01747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-721/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-721/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02942065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13986",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite que se revele información de forma no intencionada cuando se envía una URL específica al sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13987",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso insuficiente en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite que un usuario sin autorización descargue archivos de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13988",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso incorrecto en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite que los usuarios sin autorización alteren el tamaño máximo de grupos de almacenamiento y habiliten/deshabiliten el ajuste para la función 'follow schedule'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13989",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to retrieve or modify storage information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso incorrecto en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite que los usuarios sin autorización recuperen o modifiquen información de almacenamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13990",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of Apache Tomcat application server version."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de filtrado de información en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite la revelación de la versión del servidor de la aplicación Apache Tomcat."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13991",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of product license features."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de filtrado de información en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite la revelación de las características de la licencia de producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02944672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14349",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación en las versiones 11.2x y 11.3x de HPE SiteScope permite que las cuentas de sólo lectura vean todas las interfaces y monitores de SiteScope, pudiendo llegar a exponer datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8172205D-C9CE-487E-BF67-33A46EBF056E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8F86F8-D697-44B8-9216-2319EF7A76D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5290D701-53C2-4C14-B380-F9DE30DA57D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3D0E42-4BC5-4109-A069-5E1A79A13051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE7D552-5C3F-4B3D-A7B3-AE9D4AD0FAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24.391:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C737A71B-03DF-4436-ACE5-43D47E8C7138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F02A47A-24BB-42CA-AC9C-D3A7B2FECEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30.521:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06DD563-7712-4CC4-AD78-27F534003479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230FF2E9-DEDC-4B99-BC2B-7D2488423596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027F6746-2AA5-41E8-BE67-A2CAAFEA5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779FEDAE-F5D9-4055-A275-FD70C6C93F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100989",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02948051",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52758",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02948051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/52758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14350",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en HPE Application Performance Management (BSM) Platform en versiones 9.26, 9.30 y 9.40. La vulnerabilidad podría explotarse de forma remota para permitir la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:application_performance_management:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AF14AC-72C5-4C3B-B828-5F941B085A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:application_performance_management:9.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5842D8D7-48E7-4126-9EA9-76B877DC176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:application_performance_management:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82283FBB-87D2-4C27-9770-3B484F60C0F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100988",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-825/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02960811",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-825/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02960811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14351",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en las versiones 10.10, 10.11, 10.20, 10.21, 10.22 y 10.23 de HP UCMDB Configuration Manager. Estas vulnerabilidades podrían explotarse de forma remota para permitir la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51748783-95F1-400A-A435-12D1F4A1312E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3837E366-A291-4E93-9AC7-595BF661CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E3B18E-18CE-42C5-BDCC-93A339C2E80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FA4110-8DB1-4CC1-A768-F33E91BB5AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00348879-766F-4CBA-9761-AE4E258CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A06A8A-739A-4240-9AF6-080A2D7B4A4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.hpe.com/km/KM02968622",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-32",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02968622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14352",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-09-30T01:29:01.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en las versiones 10.10, 10.11, 10.20, 10.21, 10.22 y 10.23 de HP UCMDB Configuration Manager. Estas vulnerabilidades podrían explotarse de forma remota para permitir Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51748783-95F1-400A-A435-12D1F4A1312E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3837E366-A291-4E93-9AC7-595BF661CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E3B18E-18CE-42C5-BDCC-93A339C2E80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FA4110-8DB1-4CC1-A768-F33E91BB5AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00348879-766F-4CBA-9761-AE4E258CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A06A8A-739A-4240-9AF6-080A2D7B4A4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101154",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02968622",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02968622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación Zoho Site24x7 Mobile Network Poller en versiones anteriores a 1.1.5 para Android no verifica los certificados de los servidores SSL, lo que permite que los atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado autofirmado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:site24x7_mobile_network_poller:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "1E389A66-9D05-4398-8218-AB3A7D524440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101091",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/09/27/zoho-site24x7-mobile-network-poller-for-android-didnt-properly-validate-ssl-cve-2017-14582/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/09/27/zoho-site24x7-mobile-network-poller-for-android-didnt-properly-validate-ssl-cve-2017-14582/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting."
      }, {
        "lang" : "es",
        "value" : "La versión 11.3.6347 de SmarterStats renderiza el campo Referer de archivos de registro HTTP desde URL /Data/Reports/ReferringURLsWithQueries. Esto provocaría un Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartertools:smarterstats:11.3.6347:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01ADBDA-7A1F-4FDA-8715-FA2AAEEC055A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xss.cx/cve/2017/14620/smarterstats.v11-3-6347.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42923/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xss.cx/cve/2017/14620/smarterstats.v11-3-6347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42923/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to \"com.branaghgroup.ecers.update.UpdateRequest\" object deserialization."
      }, {
        "lang" : "es",
        "value" : "La versión 1.8.1.0 de ERS Data System permite que los atacantes remotos ejecuten código remoto, relacionado con la deserialización del objeto \"com.branaghgroup.ecers.update.UpdateRequest\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:branaghgroup:ers_data_system:1.8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E422AF6-35D0-4F9D-9A72-000EAB984322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wshepherd0010/advisories/blob/master/CVE-2017-14702.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42952/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/wshepherd0010/advisories/blob/master/CVE-2017-14702.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42952/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function)."
      }, {
        "lang" : "es",
        "value" : "FileRun (versión 2017.09.18 y anteriores) tiene una vulnerabilidad de inyección remota de SQL debido a un error a la hora de sanitizar las entradas en el parámetro metafield dentro del módulo metasearch (bajo la función search)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filerun:filerun:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017.09.18",
            "matchCriteriaId" : "E6A4900B-48A6-4460-8AA9-7269D5E58334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://feedback.filerun.com/topics/189-critical-security-update-available/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42922/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://feedback.filerun.com/topics/189-critical-security-update-available/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42922/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript via the User-Agent HTTP header, which is mishandled during rendering by the application administrator."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en las versiones anteriores a 16.1.20170922 de eGroupware Community Edition permite que un atacante remoto sin autenticar inyecte código JavaScript mediante la cabecera HTTP User-Agent, la cual no se gestiona correctamente durante el renderizado por parte del administrador de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "16.1.20170703",
            "matchCriteriaId" : "D9A5A866-ADA0-41C9-A509-057CB2FAC05B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EGroupware/egroupware/commit/0ececf8c78f1c3f9ba15465f53a682dd7d89529f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EGroupware/egroupware/commit/0ececf8c78f1c3f9ba15465f53a682dd7d89529f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability via IMG element at \"Filename\" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS)persistente mediante un elemento IMG en \"Filename\" de FileManager en Time 2.0 Community Edition en versiones anteriores a la 2017.08.4 permite que un usuario autenticado inyecte código JavaScript, el cual no se gestiona correctamente durante el renderizado por parte del administrador de la aplicación u otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tine20:tine_2.0:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "2017.08.3",
            "matchCriteriaId" : "B37AEE90-38C9-404F-8120-555D5DAD5AC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability via IMG element at \"History\" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente mediante un elemento IMG en \"History\" de of Profile, Calendar, Tasks y CRM en Time Community Edition en versiones anteriores a la 2017.08.4 permite que un usuario autenticado inyecte código JavaScript, el cual no se gestiona correctamente durante el renderizado por parte del administrador de la aplicación u otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tine20:tine_2.0:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "2017.08.3",
            "matchCriteriaId" : "B37AEE90-38C9-404F-8120-555D5DAD5AC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:01.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability via IMG element at \"Leadname\" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente mediante un elemento IMG en \"Leadname\" de CRM en Time 2.0 Community Edition en versiones anteriores a la 2017.08.4 permite que un usuario autenticado inyecte código JavaScript, el cual no se gestiona correctamente durante el renderizado por parte del administrador de la aplicación u otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tine20:tine_2.0:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "2017.08.3",
            "matchCriteriaId" : "B37AEE90-38C9-404F-8120-555D5DAD5AC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) mediante un elemento IMG en Tiki en versiones anteriores a 16.3, las versiones 17.x anteriores a 17.1, 12 LTS anteriores a 12.12 LTS y 15 LTS en versiones anteriores a la 15.5 LTS permite que un usuario autenticado obtenga privilegios de administrador si un administrador abre una página de wiki con un elemento IMG. Esto se relaciona con tiki-assignuser.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B9B11DE8-D769-4368-9673-557806FF3CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.1:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "9D8C7315-9B1C-4472-986B-70059DB85B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.2:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "8AC641D2-9F5E-48A1-A9E9-999543F894FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.3:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "EF4E2F18-2B2D-49CF-8921-E7B0C18072EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.4:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "8BD002F1-AA90-49A4-8604-FFE0BB081AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.5:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E1B61E9C-A2C8-4109-B772-45C01545F362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.6:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "0E4FE121-C76E-48AA-8BC6-E15264BDD182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.7:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E5488F9D-638A-48C4-8BFA-B8DF98C4FD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.8:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "D01D66A8-D33F-4C1A-AEE3-9B12EB95A915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.9:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5F8AF787-295B-4B68-9403-ECDC04C3DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.10:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "9CB17964-F2C6-4BC7-9706-00827975EAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.11:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "7E00FFA9-DF8F-4CAE-BBD4-7D20167A1C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "76F00805-C136-4C4E-90B2-25AC35861D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.1:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "76FAB03D-EF3F-4F78-B4B8-0E067098C478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.2:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "CB47183C-0A64-476C-A8EE-4530C223C053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.3:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "942B0F1F-736A-4295-B82F-31EDA5C53FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.4:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "166BA1B9-2A83-4BDA-B48F-9912A244D027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE0E547-2EF3-4FD8-BBC3-1EE0CFE505E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45A2D67-4C6E-475F-8F03-00E31E2DCA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FAA7AE-B0A7-4D61-AF86-0A09A3A20152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93FE186-2879-4ABF-BCC4-27C406C92EED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tikiwiki/code/63829",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tikiwiki/code/63829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to tiki-objectpermissions.php. For example, an attacker could assign administrator privileges to every unauthenticated user of the site."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) mediante un elemento IMG en Tiki en versiones anteriores a 16.3, las versiones 17.x anteriores a 17.1, 12 LTS anteriores a 12.12 LTS y 15 LTS en versiones anteriores a la 15.5 LTS permite que un usuario autenticado evite permisos globales si un administrador abre una página de wiki con un elemento IMG. Esto se relaciona con tiki-objectpermissions.php. Por ejemplo, un atacante podría asignar privilegios de administrador a cada usuario sin autenticar del sitio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B9B11DE8-D769-4368-9673-557806FF3CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.1:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "9D8C7315-9B1C-4472-986B-70059DB85B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.2:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "8AC641D2-9F5E-48A1-A9E9-999543F894FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.3:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "EF4E2F18-2B2D-49CF-8921-E7B0C18072EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.4:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "8BD002F1-AA90-49A4-8604-FFE0BB081AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.5:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E1B61E9C-A2C8-4109-B772-45C01545F362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.6:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "0E4FE121-C76E-48AA-8BC6-E15264BDD182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.7:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E5488F9D-638A-48C4-8BFA-B8DF98C4FD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.8:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "D01D66A8-D33F-4C1A-AEE3-9B12EB95A915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.9:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5F8AF787-295B-4B68-9403-ECDC04C3DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.10:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "9CB17964-F2C6-4BC7-9706-00827975EAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:12.11:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "7E00FFA9-DF8F-4CAE-BBD4-7D20167A1C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "76F00805-C136-4C4E-90B2-25AC35861D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.1:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "76FAB03D-EF3F-4F78-B4B8-0E067098C478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.2:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "CB47183C-0A64-476C-A8EE-4530C223C053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.3:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "942B0F1F-736A-4295-B82F-31EDA5C53FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:15.4:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "166BA1B9-2A83-4BDA-B48F-9912A244D027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE0E547-2EF3-4FD8-BBC3-1EE0CFE505E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45A2D67-4C6E-475F-8F03-00E31E2DCA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FAA7AE-B0A7-4D61-AF86-0A09A3A20152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93FE186-2879-4ABF-BCC4-27C406C92EED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tikiwiki/code/63872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/09/28/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/tikiwiki/code/63872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una desreferencia de puntero NULL en AnnotRichMedia::Content::Content en Annot.cc mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102601",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una desreferencia de puntero NULL en la función SplashOutputDev::type3D0() en SplashOutputDev.cc mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102604",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una desreferencia de puntero NULL en AnnotRichMedia::Configuration::Configuration en Annot.cc mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102607",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls (aka a Gfx.cc infinite loop), a different vulnerability than CVE-2017-14519."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, ocurre una corrupción de memoria en una llamada a Object::dictLookup() en Object.h después de series repetitivas de llamadas a Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill y Gfx::drawForm (esto también se conoce como bucle infinito de Gfx.cc). Esta es una vulnerabilidad diferente a CVE-2017-14519."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102969",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "Existe una fuga de memoria en decode_line_info en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, que permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22191",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted JPEG file."
      }, {
        "lang" : "es",
        "value" : "ExifImageFile::readDQT en ExifImageFileRead.cpp en OpenExif 2.1.4 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en pilas y cierre inesperado de aplicación) mediante un archivo JPEG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexif_project:openexif:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA1405A-7E62-4378-807A-E2AF9F34FB64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/skysider/openexif_vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/skysider/openexif_vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "decode_line_info en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22204",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e338894dc2e603683bed2172e8e9f25b29051005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e338894dc2e603683bed2172e8e9f25b29051005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "read_formatted_entries en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22210",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=30d0157a2ad64e64e5ff9fcc0dbe78a3e682f573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=33e0a9a056bd23e923b929a4f2ab049ade0b1c32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=30d0157a2ad64e64e5ff9fcc0dbe78a3e682f573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=33e0a9a056bd23e923b929a4f2ab049ade0b1c32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure."
      }, {
        "lang" : "es",
        "value" : "process_debug_info en dwarf.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo ELF manipulado que contenga un valor de tamaño negativo en una estructura CU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22219",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=19485196044b2521af979f1e5c4a89bfb90fba0b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=19485196044b2521af979f1e5c4a89bfb90fba0b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Pulse Secure Pulse One On-Premise en su versión 2.0.1649 y anteriores no valida correctamente las peticiones, lo que permite que los usuarios remotos envíen consultas y obtengan información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_one_on-premise:2.0.1649:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259D2FBB-6725-40E6-A759-75A436E9972F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "_bfd_elf_slurp_version_tables en elf.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una denegación de servicio (asignación excesiva de memoria y cierre inesperado de la aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101212",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/26/binutils-memory-allocation-failure-in-_bfd_elf_slurp_version_tables-elf-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22166",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bd61e135492ecf624880e6b78e5fcde3c9716df6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/26/binutils-memory-allocation-failure-in-_bfd_elf_slurp_version_tables-elf-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bd61e135492ecf624880e6b78e5fcde3c9716df6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte."
      }, {
        "lang" : "es",
        "value" : "decode_line_info en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, gestiona de manera incorrecta un cálculo de longitud, lo que permite a atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basado en pila y bloqueo de aplicación) mediante un archivo ELF manipulado, relacionado con read_1_byte."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22169",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=515f23e63c0074ab531bc954f84ca40c6281a724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42970/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=515f23e63c0074ab531bc954f84ca40c6281a724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42970/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "scan_unit_for_symbols en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/09/26/binutils-null-pointer-dereference-in-scan_unit_for_symbols-dwarf2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22166",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0d76029f92182c3682d8be2c833d45bc9a2068fe",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/09/26/binutils-null-pointer-dereference-in-scan_unit_for_symbols-dwarf2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0d76029f92182c3682d8be2c833d45bc9a2068fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Intelbras WRN 150 permiten que los atacantes remotos lean el archivo de configuración y omitan los mecanismos de autenticación como consecuencia mediante una petición directa a cgi-bin/DownloadCfg/RouterCfm.cfg que contiene una cookie admin:language=pt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intelbras:wrn_150_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAF6AF4-F93F-4130-8974-0AB5F9310C35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intelbras:wrn_150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C63D22-FBFB-4371-9A9B-6FE7D10DF2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://whiteboyz.xyz/authentication-bypass-intelbras-wrn-150.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42916/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://whiteboyz.xyz/authentication-bypass-intelbras-wrn-150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42916/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 4.7.14 de Inedo ProGet no gestiona correctamente los ID de paquetes peligrosos a la hora de añadir paquetes. Esto también se conoce como PG-1060."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:proget:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.13",
            "matchCriteriaId" : "19DD4FF0-42A2-4780-BDC7-6A841EC2D3FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://inedo.com/blog/proget-4714-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://inedo.com/blog/proget-4714-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Possible Stack Corruption starting at KERNELBASE!RaiseException+0x0000000000000068.\""
      }, {
        "lang" : "es",
        "value" : "Artifex GSView 6.0 Beta en Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at KERNELBASE!RaiseException+0x0000000000000068\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:gsview:6.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "08A44983-C085-42F6-B981-51B00029162F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698537",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at mupdfnet64!mIncrementalSaveFile+0x000000000000344e.\""
      }, {
        "lang" : "es",
        "value" : "Artifex GSView 6.0 Beta en Windows permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado, relacionado con \"Data from Faulting Address controls Branch Selection starting at mupdfnet64!mIncrementalSaveFile+0x000000000000344e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:gsview:6.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "08A44983-C085-42F6-B981-51B00029162F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698538",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-09-30T01:29:02.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a \"Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359.\""
      }, {
        "lang" : "es",
        "value" : "Artifex GSView 6.0 Beta en Windows permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .xps manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:gsview:6.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "08A44983-C085-42F6-B981-51B00029162F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698551",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9794",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-09-30T01:29:03.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently executing gfsh query, potentially revealing data that the user is not authorized to view."
      }, {
        "lang" : "es",
        "value" : "Cuando se opera un clúster en modo seguro, un usuario con privilegios de lectura para determinadas regiones de datos podría utilizar la herramienta de línea de comandos gfsh para ejecutar consultas. En las versiones anteriores a la 1.2.1 de Apache Geode, los resultados de las consultas pueden contener datos de otra consulta gfsh del usuario que se esté ejecutando de manera concurrente, pudiendo revelar datos que el usuario no está autorizado para visualizar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E929494D-00C5-4C57-9426-34A1830A199C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-FqzrT+deCkNkM-EQZuKfg-XuqY4cGjFiqxoKBVduY1Zw%40mail.gmail.com%3e",
        "source" : "security@apache.org"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-FqzrT+deCkNkM-EQZuKfg-XuqY4cGjFiqxoKBVduY1Zw%40mail.gmail.com%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-01T01:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories) by leveraging the ability to sniff HTTP traffic on the local intranet network."
      }, {
        "lang" : "es",
        "value" : "La ausencia de cifrado en la capa de transporte en la API publica en Philips Hue Bridge BSB002 SW 1707040932 permite que los atacantes remotos lean claves de API (y en consecuencia omitir el mecanismo de protección pushlink y obtener el control completo de los accesorios conectados) mediante la capacidad para rastrear el tráfico HTTP en la intranet local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:philips:hue_bridge_bsb002_firmware:1707040932:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D4FB5F-8B57-436B-991C-F300A9B09B40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:philips:hue_bridge_bsb002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A54ECAB-98FB-4E50-B359-C01FB23FE3FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tiferrei.com/philips-we-need-to-talk",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tiferrei.com/philips-we-need-to-talk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector."
      }, {
        "lang" : "es",
        "value" : "Jaspersoft JasperReports 4.7 sufre una vulnerabilidad de revelación de credenciales guardadas, lo que permite que un usuario autenticado remoto recupere contraseñas almacenadas de orígenes de datos accediendo a flow.html y leyendo el código fuente HTML de la página que se alcanza en una acción Edit para un conector de un origen de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaspersoft:jasperreports:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B63B7A-FC8B-49D4-BC7E-3D15A6CA455F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/binary1985/VulnerabilityDisclosure/blob/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/binary1985/VulnerabilityDisclosure/blob/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call."
      }, {
        "lang" : "es",
        "value" : "La implementación waitid en kernel/exit.c en el kernel de Linux hasta la versión 4.13.4 accede a estructuras de datos rusage en casos que no debería, lo que permite a los usuarios locales obtener información sensible y omitir el mecanismo de protección KASLR mediante una llamada al sistema manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.4",
            "matchCriteriaId" : "928AB8DD-8573-4425-803D-1B164491BF77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/_argp/status/914021130712870912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/grsecurity/status/914079864478666753",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/_argp/status/914021130712870912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/grsecurity/status/914079864478666753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report."
      }, {
        "lang" : "es",
        "value" : "Check_MK en versiones anteriores a la 1.2.8p26 gestiona de manera incorrecta determinados errores en la característica de guardado de intentos fallidos de inicio de sesión por culpa de una condición de carrera que permite que los atacantes remotos obtengan información sensible de usuarios leyendo un informe de cierre inesperado de la interfaz gráfica de usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.3:i6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7B318A-D457-4E1F-84B7-D92F18248D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.3:i7:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4E9D1-1C3A-4287-8CF1-94694654B901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.4:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "163C58C9-1176-4532-9235-FF00BDDE5813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.5:i1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE05BCD-2C6A-4492-9A0F-F6DC38039FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.5:i2:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD44A20-C935-421E-84EB-3B6DF32A8A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.5:i3:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D9A1D3-D127-43EB-9C26-541DFC03B2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.5:i4:*:*:*:*:*:*",
            "matchCriteriaId" : "90E5A726-1AA7-4C47-92D8-E0DB5B4EEEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.5:i5:*:*:*:*:*:*",
            "matchCriteriaId" : "A72D561E-5B99-4A1A-905D-F6E314765D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.5:i6:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDFBEA4-45A2-4438-93F4-A0FF32B5B60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.6:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "82FC9CF8-5A45-4FD8-85F8-891A0FEC78F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.6:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "38568181-E4D6-44E5-BCE3-3CFD96CDB285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.6:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "D63191B3-02D4-4C8F-B620-8A57DF0FBB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.7:i1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D907F9-234B-469F-B36F-E378FAF06554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.7:i1p2:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB2F75E-A2AE-4C66-93C8-AFC8CEF8BD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.7:i2:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDC0157-0B34-4FE2-8A26-89F80A32FC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.7:i3:*:*:*:*:*:*",
            "matchCriteriaId" : "C72153BC-0469-4B8B-ADAC-9056FA4A83E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.7:i4:*:*:*:*:*:*",
            "matchCriteriaId" : "75E0038E-5789-4DBE-9920-FDB5D5208E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.8:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "2289725D-D71F-4CDA-94DD-409F060948FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.2.8:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDBA00E-28D5-4366-8431-7BA7B2D3B63C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43021/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43021/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript. If the victim is an administrator, an attacker can (for example) change global settings or create/delete posts. It is also possible to execute JavaScript against unauthenticated users of the blog."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) persistente mediante un comentario en inc/conv.php en BlogoText en versiones anteriores a la 3.7.6 permite que un atacante no autenticado inyecte código JavaScript. Si la víctima es un administrador, un atacante podría (por ejemplo) cambiar la configuración global o crear o eliminar publicaciones. Es también posible ejecutar código JavaScript contra los usuarios no autenticados del blog."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogotext_project:blogotext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.5",
            "matchCriteriaId" : "45522958-7ACC-449C-B9F3-11042C6CD4FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/01/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/318",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/pull/320/commits/1a283cc8ad2cda37e0a6aff8f4558b98ecbfd9c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/releases/tag/3.7.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/pull/320/commits/1a283cc8ad2cda37e0a6aff8f4558b98ecbfd9c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/releases/tag/3.7.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file."
      }, {
        "lang" : "es",
        "value" : "lib.php en PivotX 2.3.11 no bloquea correctamente las subidas de tipos de archivos peligrosos por parte de los usuarios administradores, lo que permite la ejecución remota de código PHP mediante la subida de un archivo .php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotx:pivotx:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3B3253-5D04-41EF-9ABF-2CE3551AF86D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/pivot-weblog/code/4490/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/pivot-weblog/code/4490/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating \"it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table.\""
      }, {
        "lang" : "es",
        "value" : "En lib/ofp-util.c en Open vSwitch (OvS) en versiones anteriores a 2.8.1, hay múltiples fugas de memoria al analizar sintácticamente mensajes mod grupales OpenFlow malformados. NOTA: El proveedor discute la relevancia de este informe, diciendo que \"solo puede ser iniciado mediante un controlador OpenFlow, pero los controladores OpenFlow tienen formas mucho más directas y poderosas para forzar a Open vSwitch a asignar memoria, como insertando flujos en la tabla de flujo\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.0",
            "matchCriteriaId" : "8D9C4206-5C67-41FD-BEF0-80EFBF9A18D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339086.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339086.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c."
      }, {
        "lang" : "es",
        "value" : "Las funciones *_get_synthetic_symtab de la biblioteca Binary File Descriptor (BFD) (también llamada libbfd), tal y como se distribuye en GNU Binutils 2.29, gestionan de manera incorrecta el fallo de un paso de canonización determinado, lo que permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo ELF manipulado, relacionado con elf32-i386.c y elf64-x86-64.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22163",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e70c19e3a4c26e9c1ebf0c9170d105039b56d7cf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e70c19e3a4c26e9c1ebf0c9170d105039b56d7cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "La función FoFiType1C::convertToType0 en FoFiType1C.cc en Poppler 0.59.0 tiene una vulnerabilidad de desreferencia de puntero NULL porque una estructura de datos no se inicializa, lo que permite a un atacante provocar un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.freedesktop.org/show_bug.cgi?id=102653",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.freedesktop.org/show_bug.cgi?id=102653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "La función FoFiType1C::convertToType0 en FoFiType1C.cc en Poppler 0.59.0 puede sufrir una vulnerabilidad de sobrelectura de búfer basada en memoria dinámica (heap) si se utiliza una fuente que provoca una indexación fuera de la memoria, lo que permite a un atacante provocar un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.freedesktop.org/show_bug.cgi?id=102724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/poppler/poppler/commit/?id=da63c35549e8852a410946ab016a3f25ac701bdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.freedesktop.org/show_bug.cgi?id=102724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/poppler/poppler/commit/?id=da63c35549e8852a410946ab016a3f25ac701bdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-02T01:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "La función FoFiTrueType::getCFFBlock en FoFiTrueType.cc en Poppler 0.59.0 tiene una vulnerabilidad de desreferencia de puntero NULL debida a la ausencia de validación de un puntero de tabla, lo que permite a un atacante provocar un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103045",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command."
      }, {
        "lang" : "es",
        "value" : "La interfaz shell restringida en UCOPIA Wireless Appliance en versiones anteriores a la 5.1.8 permite que los usuarios autenticados remotos obtengan privilegios de administrador mediante metacaracteres shell en el comando less."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ucopia:wireless_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.7",
            "matchCriteriaId" : "C9C1B92E-A360-47CF-813E-46FDECB6C892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42937/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42937/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client."
      }, {
        "lang" : "es",
        "value" : "El ejecutable chroothole_client en UCOPIA Wireless Appliance en versiones anteriores a la 5.1.8 permite que los atacantes remotos obtengan privilegios root mediante un metacaracter del signo del dólar ($) en el argumento en chroothole_client."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ucopia:ucopia_wireless_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.7",
            "matchCriteriaId" : "B0171BAA-3981-42A2-B78C-D11874CC4405"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42936/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42936/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en hasplms en Gemalto ACC (Admin Control Center) en todas sus versiones desde HASP SRM 2.10 hasta Sentinel LDK 7.50 permite que los atacantes remotos ejecuten código arbitrario mediante transferencias ASN.1 mal formadas en V2C y archivos de entrada similares."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D085F4-A4D5-406F-9C71-60E38674D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613D88BA-F9E7-4F5C-849D-36D5C0934617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A692A81-F3B0-4894-A04D-948D488AD2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22489E71-8667-40F0-BC80-35278EF7DC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.kaspersky.com/alerts/2017/07/28/multiple-vulnerabilities-found-in-popular-license-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/alerts/2017/07/28/multiple-vulnerabilities-found-in-popular-license-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en hasplms en Gemalto ACC (Admin Control Center) en todas sus versiones desde HASP SRM 2.10 hasta Sentinel LDK 7.50 permite que los atacantes remotos ejecuten código arbitrario mediante paquetes de lenguaje que contengan nombres de archivo más largos que 1024 caracteres."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D085F4-A4D5-406F-9C71-60E38674D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613D88BA-F9E7-4F5C-849D-36D5C0934617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A692A81-F3B0-4894-A04D-948D488AD2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22489E71-8667-40F0-BC80-35278EF7DC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process (a denial of service) via a language pack (ZIP file) with invalid HTML files."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en hasplms en Gemalto ACC (Admin Control Center) en todas sus versiones desde HASP SRM 2.10 hasta Sentinel LDK 7.50 permite que los atacantes remotos detengan el proceso remoto (denegación de servicio) mediante un paquete de lenguaje (archivo ZIP) con archivos HTML no válidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D085F4-A4D5-406F-9C71-60E38674D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613D88BA-F9E7-4F5C-849D-36D5C0934617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A692A81-F3B0-4894-A04D-948D488AD2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemalto:sentinel_ldk_rte:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22489E71-8667-40F0-BC80-35278EF7DC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-001-sentinel-ldk-rte-language-pack-with-invalid-html-files-leads-to-denial-of-service/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-001-sentinel-ldk-rte-language-pack-with-invalid-html-files-leads-to-denial-of-service/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12620",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-03T01:29:01.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache OpenNLP are affected."
      }, {
        "lang" : "es",
        "value" : "A la hora de cargar modelos o diccionarios que contengan XML, es posible realizar un ataque XEE (XML External Entity). Ya que Apache OpenNLP es una librería, solo afecta a aplicaciones que cargan modelos o diccionarios de orígenes desconocidos. Las versiones afectadas de Apache OpenNLP son de la 1.5.0 a la 1.5.3, la 1.6.0, de la 1.7.0 a la 1.7.2 y de la 1.8.0 a la 1.8.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA59EC-7EC1-4076-B65A-D018EF723B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F1448-FB8F-4BDC-951C-57B1374BA21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A7CFF7-D3FC-43DB-B670-4B7AF57F0FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D76D779B-A94C-4B11-A236-7F8D7FB829EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30344145-13D3-4A56-87EF-E699E8772A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9358E641-684D-4490-A265-171B5E53A4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B33045-2231-4401-80D8-6CD160D3277A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534308F6-389B-4FC9-94EB-44F6309B7E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C791176-008B-4C0D-8BFB-E8D52CD05947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:opennlp:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39263FB2-4AE2-4F8A-A975-1F64FFBE773A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://opennlp.apache.org/news/cve-2017-12620.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://opennlp.apache.org/news/cve-2017-12620.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or ETCETERABLUE."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en el servidor de Ipswitch IMail hasta la versión 12.5.5 (y esta incluida) que permite que atacantes remotos ejecuten código arbitrario mediante vectores no especificados en IMmailSrv, también conocido como ETBL o ETCETERABLUE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.5",
            "matchCriteriaId" : "070F5BF9-9318-4D55-A558-2C5719B88F57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.ipswitch.com/_Messaging/IMailServer/v12.5.6/ReleaseNotes/index.htm#link8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.ipswitch.com/_Messaging/IMailServer/v12.5.6/ReleaseNotes/index.htm#link8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or ETCTERARED."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en el servidor de Ipswitch IMail hasta la versión 12.5.5 (y esta incluida) que permite que los atacantes remotos ejecuten código arbitrario mediante vectores no especificados en IMmailSrv, también conocido como ETRE o ETCTERARED."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.5",
            "matchCriteriaId" : "070F5BF9-9318-4D55-A558-2C5719B88F57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.ipswitch.com/_Messaging/IMailServer/v12.5.6/ReleaseNotes/index.htm#link8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.ipswitch.com/_Messaging/IMailServer/v12.5.6/ReleaseNotes/index.htm#link8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to linksmanage.php."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de tipo Cross-Site Request Forgery (CSRF) en NexusPHP 1.5 que permiten que atacantes remotos secuestren la autenticación de los administradores para las peticiones que realizan ataques de tipo Cross-Site Scripting (XSS) mediante el parámetro (1) linkname, (2) url o (3) title en una acción add a linksmange.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/UUUUnotfound/cve-2017-12792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/UUUUnotfound/cve-2017-12792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1311",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 125719."
      }, {
        "lang" : "es",
        "value" : "IBM Insights Foundation for Energy 2.0 es vulnerable a inyecciones SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 125719."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:insights_foundation_for_energy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB4D213-76D8-4731-918A-95CA4A80BF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009039",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101058",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125719",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1324",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125975."
      }, {
        "lang" : "es",
        "value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125975."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125975",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1334",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126242."
      }, {
        "lang" : "es",
        "value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126242."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126242",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1335",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126243."
      }, {
        "lang" : "es",
        "value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126243."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126243",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1345",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460."
      }, {
        "lang" : "es",
        "value" : "IBM Insights Foundation for Energy 2.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126460."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:insights_foundation_for_energy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB4D213-76D8-4731-918A-95CA4A80BF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009039",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126460",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1359",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126686."
      }, {
        "lang" : "es",
        "value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126686."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126686",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1364",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126857."
      }, {
        "lang" : "es",
        "value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126857."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126857",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1369",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126862."
      }, {
        "lang" : "es",
        "value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126862."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126862",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash."
      }, {
        "lang" : "es",
        "value" : "En las versiones anteriores a la 2.78 de dnsmasq, si el tamaño del paquete DNS no coincide con el tamaño esperado, el parámetro size en una llamada memset obtiene un valor negativo. Como es un valor sin signo, memset acaba escribiendo hasta 0xffffffff ceros (0xffffffffffffffff en plataformas de 64 bits), haciendo que dnsmasq se cierre de manera inesperada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEACBFF-6D05-4B69-BF7A-F7E539D9BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64AAD2D-38ED-4BA2-A27A-A2716F28D43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76221AE4-1A3C-48EC-AFC2-1819BE4D3DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=63437ffbb58837b214b4b92cb1c54bc5f3279928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TK6DWC53WSU6633EVZL7H4PCWBYHMHK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=63437ffbb58837b214b4b92cb1c54bc5f3279928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TK6DWC53WSU6633EVZL7H4PCWBYHMHK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13997",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-03T01:29:01.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio provides the capability for an HMI client to trigger script execution on the server for the purposes of performing customized calculations or actions. A remote malicious entity could bypass the server authentication and trigger the execution of an arbitrary command. The command is executed under high privileges and could lead to a complete compromise of the server."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de ausencia de autenticación para una función crítica en Schneider Electric InduSoft Web Studio v8.0 SP2 o anteriores y en InTouch Machine Edition v8.0 SP2 o anteriores. InduSoft Web Studio proporciona la capacidad para que un cliente HMI dé lugar a la ejecución de un script en el servidor para realizar cálculos o acciones personalizados. Una entidad maliciosa remota podría omitir la autenticación del servidor y desencadenar la ejecución de un comando arbitrario. El comando se ejecuta con privilegios elevados y podría desembocar en un compromiso del servidor por completo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_indusoft_web_studio:*:sp2:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "909E4BF0-FD67-4F8B-B577-57E8E5F7A686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_intouch:*:sp2:*:*:machine:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "F51870FA-9C46-4C8B-83B0-3C32B0722581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100952",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1429",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:01.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127587."
      }, {
        "lang" : "es",
        "value" : "Las versiones 4.0, 5.0 y 6.0 de IBM RELM son vulnerables a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 127587."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127587",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en dnsmasq en versiones anteriores a la 2.78 permite a los atacantes provocar una denegación de servicio (cierre inesperado) o ejecutar código arbitrario mediante una petición manipulada de anuncio de router IPv6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64AAD2D-38ED-4BA2-A27A-A2716F28D43A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76221AE4-1A3C-48EC-AFC2-1819BE4D3DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=24036ea507862c7b7898b68289c8130f85599c10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42942/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=24036ea507862c7b7898b68289c8130f85599c10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42942/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en dnsmasq en versiones anteriores a la 2.78 permite a los atacantes provocar una denegación de servicio (cierre inesperado) o ejecutar código arbitrario mediante una petición DHCPv6 manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=3d4ff1ba8419546490b464418223132529514033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42943/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=3d4ff1ba8419546490b464418223132529514033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42943/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 2.78 de dnsmasq, cuando se configuran como retransmisor, permiten que los atacantes remotos obtengan información sensible de la memoria mediante vectores relacionados con la gestión de peticiones DHCPv6 reenviadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64AAD2D-38ED-4BA2-A27A-A2716F28D43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76221AE4-1A3C-48EC-AFC2-1819BE4D3DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=33e3f1029c9ec6c63e430ff51063a6301d4b2262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42944/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=33e3f1029c9ec6c63e430ff51063a6301d4b2262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42944/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation."
      }, {
        "lang" : "es",
        "value" : "Una fuga de memoria en las versiones anteriores a la 2.78 de dnsmasq, cuando están especificadas las opciones --add-mac, --add-cpe-id o --add-subnet, permite que los atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante vectores relacionados con la creación de respuestas DNS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64AAD2D-38ED-4BA2-A27A-A2716F28D43A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76221AE4-1A3C-48EC-AFC2-1819BE4D3DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=51eadb692a5123b9838e5a68ecace3ac579a3a45",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42945/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=51eadb692a5123b9838e5a68ecace3ac579a3a45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42945/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento inferior de enteros en las versiones anteriores a la 2.78 de dnsmasq, cuando están especificadas las opciones --add-mac, --add-cpe-id o --add-subnet, permite que los atacantes remotos provoquen una denegación de servicio mediante una petición DNS manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64AAD2D-38ED-4BA2-A27A-A2716F28D43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76221AE4-1A3C-48EC-AFC2-1819BE4D3DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=897c113fda0886a28a986cc6ba17bb93bd6cb1c7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42946/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=897c113fda0886a28a986cc6ba17bb93bd6cb1c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, parameter: xsd_datasource_schema_file filename. In order for this vulnerability to be exploited, an attacker must authenticate to the application first."
      }, {
        "lang" : "es",
        "value" : "OpenText Document Sciences xPression (anteriormente conocido como EMC Document Sciences xPression) v4.5SP1 Patch 13 (otras versiones más antiguas también podrían verse afectadas) es propenso a una lectura de archivos arbitrarios: /xAdmin/html/cm_datasource_group_xsd.jsp, parámetro: xsd_datasource_schema_file filename. Para que esta vulnerabilidad sea explotada, un atacante debe autenticarse antes en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "67E30F02-6D4D-49D1-8146-644D15A0F910"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/92",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/XPressoDoc, parameter: categoryId."
      }, {
        "lang" : "es",
        "value" : "OpenText Document Sciences xPression (anteriormente conocido como EMC Document Sciences xPression) v4.5SP1 Patch 13 (otras versiones más antiguas también podrían verse afectadas) es propenso a Cross-Site Scripting (XSS): /xAdmin/html/XPressoDoc, parámetro: categoryId."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1_p13:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "EF51F3BC-93F4-44A4-82EB-880D5F223D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/95",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/Deployment (cat_id)."
      }, {
        "lang" : "es",
        "value" : "OpenText Document Sciences xPression (anteriormente conocido como EMC Document Sciences xPression) v4.5SP1 Patch 13 (otras versiones más antiguas también podrían verse afectadas) es propenso a Cross-Site Scripting (XSS): /xAdmin/html/Deployment (cat_id)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1_p13:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "EF51F3BC-93F4-44A4-82EB-880D5F223D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/96",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first."
      }, {
        "lang" : "es",
        "value" : "OpenText Document Sciences xPression (anteriormente conocido como EMC Document Sciences xPression) v4.5SP1 Patch 13 (otras versiones más antiguas también podrían verse afectadas) es propenso a una inyección SQL: /xDashboard/html/jobhistory/downloadSupportFile.action, parámetro: jobRunId. Para que esta vulnerabilidad sea explotada, un atacante debe autenticarse antes en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "67E30F02-6D4D-49D1-8146-644D15A0F910"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42939/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42939/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.jsp, parameter: documentId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first."
      }, {
        "lang" : "es",
        "value" : "OpenText Document Sciences xPression (anteriormente conocido como EMC Document Sciences xPression) v4.5SP1 Patch 13 (otras versiones más antiguas también podrían verse afectadas) es propenso a una inyección SQL: /xAdmin/html/cm_doclist_view_uc.jsp, parámetro: documentId. Para que esta vulnerabilidad sea explotada, un atacante debe autenticarse antes en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1_p13:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "EF51F3BC-93F4-44A4-82EB-880D5F223D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42940/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42940/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service."
      }, {
        "lang" : "es",
        "value" : "OpenText Document Sciences xPression (anteriormente conocido como EMC Document Sciences xPression) v4.5SP1 Patch 13 (otras versiones más antiguas también podrían verse afectadas) es propenso a una vulnerabilidad de XML External Entity: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. Un usuario sin autenticar puede leer listas de directorios o archivos del sistema, así como provocar SSRF o una denegación de servicio (DoS).<"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1_p13:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "EF51F3BC-93F4-44A4-82EB-880D5F223D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/97",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debugger-pause state during the authentication process."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 8.5.501 de Skybox Manager Client Application son propensas a una vulnerabilidad de divulgación de información de hashes de contraseñas de usuario. Un atacante local autenticado puede acceder a los hashes de contraseña en un estado de debugger-pause durante el proceso de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skyboxsecurity:skybox_manager_client_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.500",
            "matchCriteriaId" : "0906A37E-99AC-49EB-BF81-396C76EA8CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary file and overwrite existing files within the scope of the affected application."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 8.5.501 de Skybox Manager Client Application son propensas a una vulnerabilidad de subida de archivos arbitraria debido a una insuficiente validación de entradas de rutas de archivos proporcionados por el usuario al subir archivos mediante la aplicación. Durante un estado de debugger-pause, un atacante local autenticado puede subir un archivo arbitrario y sobrescribir archivos existentes dentro del ámbito de la aplicación afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skyboxsecurity:skybox_manager_client_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.500",
            "matchCriteriaId" : "0906A37E-99AC-49EB-BF81-396C76EA8CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing error messages upon valid and invalid account login attempts."
      }, {
        "lang" : "es",
        "value" : "Skybox Manager Client Application es propenso a la divulgación de información mediante un ataque de enumeración de nombres de usuario. Un atacante local sin autorización podría explotar esta vulnerabilidad para obtener nombres de usuario válidos analizando mensajes de error a raíz de intentos de inicio de sesión válidos e inválidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skyboxsecurity:skybox_manager_client_application:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D4A7CE-677E-4692-B284-9A9DB468C5C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be exploited by a local authenticated attacker."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 8.5.501 de Skybox Manager Client Application son propensas a una vulnerabilidad de elevación de privilegios durante la autenticación de un usuario válido en un estado de debugger-pause. Esta vulnerabilidad solo puede ser explotada por un atacante local autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skyboxsecurity:skybox_manager_client_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.500",
            "matchCriteriaId" : "0906A37E-99AC-49EB-BF81-396C76EA8CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter."
      }, {
        "lang" : "es",
        "value" : "WPHRM Human Resource Management System para WordPress 1.0 permite la inyección SQL mediante el parámetro employee_id."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasinfomedia:wphrm_human_resource_management_system:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CCFA216C-D03F-4D51-B0BE-76E35AFD44FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8929",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42924/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42924/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php."
      }, {
        "lang" : "es",
        "value" : "Gxlcms emplea un enfoque de reemplazo de caracteres no seguro para intentar restringir el acceso. Esto permite que los atacantes remotos lean archivos arbitrarios mediante nombres de ruta modificados en el parámetro s en index.php. Esto se relaciona con Lib/Admin/Action/TplAction.class.php y Lib/Admin/Common/function.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gxlcms:gxlcms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF57E442-DA05-45A2-9951-18D26421AD84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Blck4/blck4/blob/master/Gxlcms%20POC.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Blck4/blck4/blob/master/Gxlcms%20POC.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/_standard/rss_feeds/edit_feed.php). An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) en ATutor en versiones anteriores a la 2.2.3. Esta vulnerabilidad existe debido a un filtrado de datos insuficiente (url en /mods/_standard/rss_feeds/edit_feed.php). Un atacante podría inyectar código HTML y script arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "FF908CFF-8192-462B-8966-C6FA918166F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/atutor/ATutor/issues/135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/atutor/ATutor/issues/135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/admin_conf/index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la versión 5.1.-0 de la interfaz web EyesOfNetwork (también llamada eonweb) permite que administradores remotos inyecten scripts web o HTML arbitrarios mediante el parámetro object en module/admin_conf/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_conf_index%20xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_conf_index%20xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the bp_name parameter to /module/admin_bp/add_services.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la versión 5.1.-0 de la interfaz web EyesOfNetwork (también llamada eonweb) permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro bp_name en /module/admin_bp/add_services.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_bp_add_services_XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_bp_add_services_XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/module_frame/index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en la versión 5.1.-0 de la interfaz web EyesOfNetwork (también llamada eonweb) permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro url en module/module_frame/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_module_frame_module_frame.php%20xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_module_frame_module_frame.php%20xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Header::readfrom en IlmImf/ImfHeader.cpp en OpenEXR 2.2.0 permite que los atacantes remotos provoquen una denegación de servicio (asignación de memoria excesiva) mediante un archivo manipulado al que se puede acceder con la función ImfOpenInputFile en IlmImf/ImfCRgbaFile.cpp. NOTA: El mantenedor de software y varios terceros creen que esta vulnerabilidad no es válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA193BE-2354-4F9E-8415-F743BAAFEA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00063.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/issues/248",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00063.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/issues/248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:02.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en RenderFreetype in MagickCore/annotate.c en ImageMagick 7.0.7-4 Q16 permite que los atacantes provoquen el cierre inesperado de la aplicación mediante un archivo de fuente manipulado, ya que la función FT_Done_Glyph (de FreeType 2) se llama en un lugar incorrecto en el código de ImageMagick."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/781",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:03.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability)."
      }, {
        "lang" : "es",
        "value" : "La versión 4.8.2 de WordPress almacena valores wp_signups.activation_key en texto claro (pero almacena los valores análogos wp_users.user_activation_key como hashes), lo que podría facilitar que los atacantes remotos secuestren cuentas de usuario sin activar aprovechando el acceso de lectura a las bases de datos (como, por ejemplo, el acceso obtenido mediante una vulnerabilidad de inyección SQL sin especificar)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F06988-E1EB-40A1-8DF5-DB722BA14629"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039554",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://core.trac.wordpress.org/ticket/38474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://core.trac.wordpress.org/ticket/38474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1569",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-03T01:29:03.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.0 y 8.0 de IBM WebSphere Commerce contienen una vulnerabilidad sin especificar en E-Marketing Spots que podría provocar una denegación de servicio (DoS). IBM X-Force ID: 131779."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB67367A-C255-4003-B2E7-AE84DB84A63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213C52C9-C5B5-4F26-BBB7-EE0824A995AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC937CD-1BE1-4827-9145-E2EA7F3AA792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6189A9-E083-41D3-9D36-7B41D82EC197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6F4DC0-41E3-4F73-9F62-3D415F8949C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACFED34-9B1E-4950-9D03-756942EF32F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202F791B-697B-4D9C-BF5D-84F7C657C790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012405FA-CE85-47B6-B368-2EAEBD06A15E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05260EDC-BD28-4F89-809A-7852E294A540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2E7243-19A2-47B2-905E-47219F08F4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C534568E-A611-472C-9399-15FC66D875C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF3D419-A12C-4A21-9796-DBB73D638E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87504CD1-92DA-4847-BDA7-013622CA7AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625E1896-9035-46F3-957B-83FB128F90F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3AC68C-CCA2-495D-AE21-04C937CD5340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56CE80F-A7E1-4BE0-9679-BB4F94362B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3C8F33-D613-4183-ABE1-5A3A08C16BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5F593-BE92-4E37-9EE9-42C05FA87DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D19E4D-A256-44D5-A8D8-7C9F3A64B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12961C31-63AD-4AA8-8267-E003F985CE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9D8DAA-285C-4ED1-A602-412725FD79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75B5188-E337-4240-9834-92C11DCE9DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2E3F22-60F9-4B70-9485-6DDAC7FE4496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8902699B-AE6A-44A4-838A-28F3EB62881B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50A02C-E75F-4602-BDAA-FA4CBEE9CB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC536A-498B-439F-927E-B72314F8B0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0A8CAD-D5DD-45DE-900F-046673002D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC353B83-4053-4762-8E90-9E96AA30F04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A3EBB9-C6B1-4A2D-A4E5-2D3E53A1CF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1895E-384D-4EF3-A395-7AFFC22E46CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438E93D2-502F-4569-AB8A-EFECA403798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64287718-D7AD-425B-B7B7-A6442BFD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1523569-2A23-4689-BE59-F74E678A8B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F4B2FD-14BA-46D9-B09F-1DABBA88FF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B22C48-3347-422C-9730-0A9442645D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDA8ACF-4134-434E-A5FD-39A587DE27FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFB25F3-6FD7-45C9-AFCF-FAB034107E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BCC81A-B7DA-40B9-B883-A00DF9CE585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8C98FD-E4AB-4BC8-9729-652294B1DF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F938475-91A7-4FE8-AD38-6D4C0377865B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C13D23-08C9-4836-A204-5168C8B019AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE36EB64-A7C6-42F2-876D-B7DBAF7C83BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF019C2-CD66-406D-9469-BEAB38248474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A754F0-1328-48EF-B3C6-8435EC11D680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3DF211-CE2D-47AE-BADA-A75F28B6961C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DB29B-5FC7-496A-B20E-99A644D8A073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D04C7-A19F-4EB6-91AE-A8890F8FFEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72243D91-19BC-4D66-8DF0-AD615E5CAE9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73151B02-88BC-43BE-A725-02759A33BD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8D520C-4724-4622-80AE-0F9F39DB8AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DABD4B-DD76-4E73-A85E-7E1515BD3DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E7F742-FA1B-4224-A528-71FC2F2056BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45802520-DA5B-4BD8-AED7-E60455B0E1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB0C3F5-A39F-43C4-A007-C0EF362A3FDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008547",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101073",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131779",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:03.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en PhpCollab 2.5.1 y anteriores permite que los atacantes remotos ejecuten comandos SQL arbitrarios mediante los (1) parámetros project o id en topics/deletetopics.php; el (2) parámetro id en bookmarks/deletebookmarks.php; o el (3) parámetro id en calendar/deletecalendar.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcollab:phpcollab:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "9D34B563-0710-4247-B8E3-0110FD3775EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-6089-phpcollab-2-5-1-multiple-sql-injections-unauthenticated/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42935/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-6089-phpcollab-2-5-1-multiple-sql-injections-unauthenticated/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42935/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:03.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de subida de archivos sin restricción en clients/editclient.php en PhpCollab 2.5.1 y anteriores permite que los usuarios autenticados remotos ejecuten código arbitrario mediante la subida de un archivo con una extensión ejecutable y, a continuación, acceder a éste por medio de una petición directa al archivo en logos_clients/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcollab:phpcollab:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "9D34B563-0710-4247-B8E3-0110FD3775EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-6090-phpcollab-2-5-1-arbitrary-file-upload-unauthenticated/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42934/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43519/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-09-29-cve-2017-6090-phpcollab-2-5-1-arbitrary-file-upload-unauthenticated/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42934/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43519/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8018",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-03T01:29:03.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of service (DoS) vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "El plugin host EMC AppSync en versiones 3.5 y anteriores (sólo en la plataforma Windows) incluye una vulnerabilidad de denegación de servicio (DoS) que podría se explotada por usuarios maliciosos para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:appsync:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "9C36A658-B08A-4858-8A02-58A4695ACFAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/75",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101016",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8021",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-03T01:29:03.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Elastic Cloud Storage (ECS) en versiones anteriores a la 3.1 se ha visto afectado por una vulnerabilidad de cuenta sin documentar que podría ser aprovechada por usuarios maliciosos para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "A7A669C5-CD78-40C7-8D07-33DBBFCB91B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/74",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101018",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:03.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de tipo Cross-Site Scripting (XSS) persistente en la función Add Node de SolarWinds Network Performance Monitor en su versión 12.0.15300.90 que permite que los atacantes remotos introduzcan código JavaScript arbitrario en varios parámetros vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:network_performance_monitor:12.0.15300.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D1F393-3253-436B-A207-7CB2D7CF68C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541262/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101071",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541262/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-03T01:29:03.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service (permanent display of a \"Cannot exit above the top directory\" error message throughout the entire web application) via a \"..\" in the path field. In other words, the denial of service is caused by an incorrect implementation of a directory-traversal protection mechanism."
      }, {
        "lang" : "es",
        "value" : "La función \"Upload logo from external path\" de SolarWinds Network Performance Monitor en su versión 12.0.15300.90 permite que los atacantes remotos provoquen una denegación de servicio (muestra permanente de un mensaje de error \"Cannot exit above the top directory\" en toda la aplicación web) mediante un \"..\" en el campo path. En otras palabras, la denegación de servicio es provocada por una implementación incorrecta de un mecanismo de protección contra saltos de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:network_performance_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.15300.90",
            "matchCriteriaId" : "0F6998BB-854A-4CC9-A0F7-A70D49333DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101066",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9797",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-03T01:29:03.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster."
      }, {
        "lang" : "es",
        "value" : "Cuando un clúster de Apache Geode en versiones anteriores a la 1.2.1 opera en modo seguro, un cliente sin autenticar puede entrar en modo de autenticación multi-user y enviar mensajes con metadatos. Estas operaciones con metadatos podrían filtrar información sobre tipos de datos de aplicación. Además, un atacante podría llevar a cabo un ataque de denegación de servicio (DoS) en el clúster."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E929494D-00C5-4C57-9426-34A1830A199C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-Hrbb7JS8Nygrh7geyFvW4bMZ3AdCmPOzMfvbniipz0bA%40mail.gmail.com%3e",
        "source" : "security@apache.org"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-Hrbb7JS8Nygrh7geyFvW4bMZ3AdCmPOzMfvbniipz0bA%40mail.gmail.com%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0806",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:00.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (gatekeeperresponse). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101086",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/base/+/b87c968e5a41a1a09166199bf54eee12608f3900",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/base/+/b87c968e5a41a1a09166199bf54eee12608f3900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0807",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (ui framework). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101190",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102131",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0808",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android framework (file system). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62301183."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el framework de Android (file system). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62301183."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101190",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/libcore/+/809681f310663288e83587089abb7715c68f6924",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/libcore/+/809681f310663288e83587089abb7715c68f6924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0809",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673128."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673128."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/552a3b5df2a6876d10da20f72e4cc0d44ac2c790",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/552a3b5df2a6876d10da20f72e4cc0d44ac2c790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0810",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/7737780815fe523ad7b0e49456eb75d27a30818a",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/7737780815fe523ad7b0e49456eb75d27a30818a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0811",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37930177."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37930177."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/25c0ffbe6a181b4a373c3c9b421ea449d457e6ed",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/25c0ffbe6a181b4a373c3c9b421ea449d457e6ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0812",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android media framework (audio hal). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (audio hal). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/device/google/dragon/+/7df7ec13b1d222ac3a66797fbe432605ea8f973f",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/device/google/dragon/+/7df7ec13b1d222ac3a66797fbe432605ea8f973f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0813",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36531046."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework de Android (libstagefright). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-36531046."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/7fa3f552a6f34ed05c15e64ea30b8eed53f77a41",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/7fa3f552a6f34ed05c15e64ea30b8eed53f77a41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0814",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62800140."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62800140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/tremolo/+/eeb4e45d5683f88488c083ecf142dc89bc3f0b47",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/tremolo/+/eeb4e45d5683f88488c083ecf142dc89bc3f0b47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0815",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63526567."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libeffects). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63526567."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/f490fc335772a9b14e78997486f4a572b0594c04",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/f490fc335772a9b14e78997486f4a572b0594c04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0816",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63662938."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libeffects). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63662938."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/f490fc335772a9b14e78997486f4a572b0594c04",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/f490fc335772a9b14e78997486f4a572b0594c04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0817",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63522430."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libstagefright). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63522430."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/d834160d9759f1098df692b34e6eeb548f9e317b",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/d834160d9759f1098df692b34e6eeb548f9e317b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0818",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63581671."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63581671."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/d07f5c14e811951ff9b411ceb84e7288e0d04aaf",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/d07f5c14e811951ff9b411ceb84e7288e0d04aaf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0819",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63045918."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63045918."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/87fb7909c49e6a4510ba86ace1ffc83459c7e1b9",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/87fb7909c49e6a4510ba86ace1ffc83459c7e1b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0820",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187433."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187433."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/8a3a2f6ea7defe1a81bb32b3c9f3537f84749b9d",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/8a3a2f6ea7defe1a81bb32b3c9f3537f84749b9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0822",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android system (camera). Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63787722."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de Android (camera). Producto: Android. Versiones: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63787722."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/frameworks/base/+/c574568aaede7f652432deb7707f20ae54bbdf9a",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/base/+/c574568aaede7f652432deb7707f20ae54bbdf9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0823",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android system (rild). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37896655."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (rild). Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37896655."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/hardware/ril/+/cd5f15f588a5d27e99ba12f057245bfe507f8c42",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/hardware/ril/+/cd5f15f588a5d27e99ba12f057245bfe507f8c42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0824",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37622847. References: B-V2017063001."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador wifi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37622847. Referencias: B-V2017063001."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0825",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References: B-V2017063002."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el controlador wifi de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-37305633. Referencias: B-V2017063002."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0826",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-34949781."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el bootloader de HTC. Producto: Android. Versiones: Android kernel. Android ID: A-34949781."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0827",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-62539960. References: M-ALPS03353876, M-ALPS03353861, M-ALPS03353869, M-ALPS03353867, M-ALPS03353872."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador del SoC de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-62539960. Referencias: M-ALPS03353876, M-ALPS03353861, M-ALPS03353869, M-ALPS03353867, M-ALPS03353872."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101120",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0828",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions: Android kernel. Android ID: A-34622855."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el bootloader de Huawei. Producto: Android. Versiones: Android kernel. Android ID: A-34622855."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0829",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-10-04T01:29:01.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Motorola bootloader. Product: Android. Versions: Android kernel. Android ID: A-62345044."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el bootloader de Motorola. Producto: Android. Versiones: Android kernel. Android ID: A-62345044."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "EFB2D835-93F5-428E-A606-2DA253C97EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:02.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading."
      }, {
        "lang" : "es",
        "value" : "En chips Wi-Fi de Broadcom con modelo BCM4355C0 y firmware 9.44.78.27.0.1.56, un atacante puede provocar una fuga de información por una validación de longitudes insuficiente. Esto está relacionado con la descarga de anuncios de router ICMPv6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:bcm4355c0_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.44.78.27.0.1.56",
            "matchCriteriaId" : "170834EE-1E66-496B-B3D9-F27983162825"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:broadcom:bcm4355c0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AA6E9F-384C-4981-B570-1B6B21DE5961"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144461/Broadcom-ICMPv6-Information-Leak.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208113",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144461/Broadcom-ICMPv6-Information-Leak.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1126",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-04T01:29:02.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Message Broker (IBM Integration Bus 9.0 y 10.0) permite que un usuario no autorizado obtenga información sensible sobre versiones de software que podría permitir que se produzcan futuros ataques. IBM X-Force ID: 121341."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D627B445-2980-4AC2-B674-CA4C472AB214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725E3F95-4096-497D-8F2A-02C185ACF8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C319D81D-E66B-47E6-A731-D5074314B94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DF80F1-4163-46E0-A304-BD01C11EA658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E7A0A-47BD-42EC-A66C-E1F64AD6CA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6309A833-9490-494A-BE3A-BA79133BD6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97486673-4740-4F4F-8956-73C06B477096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E917E9-DE5E-482A-9A20-823DF475BE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC25F42C-82EC-44EE-94AC-E85F428460D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3797766-D2E5-4645-A793-ABA12A10CF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1486EFCC-5D66-4172-9D57-55AB25C77B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3770768C-96D0-4D8E-8AB5-0347DBE01AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9244FCC7-99F7-4F90-99CD-12FFF5AD2514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B859DAA9-1B0E-47CE-813D-108776C3B239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458C42A-90F7-457C-AAD6-205D9893A993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFEC988-5E94-474F-9A60-966B8FA8B8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5CCF85-8149-43DB-A594-99895D94F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0D7E80-2607-4567-8D1C-2ADA32F174D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E57C58-4A30-43BE-B8CC-E6B38E67AA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C048F0-D615-49E6-9B50-22E259C02C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C000DEFF-88E8-405A-B338-A956A07F66F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008470",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101104",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121341",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12166",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-04T01:29:02.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution."
      }, {
        "lang" : "es",
        "value" : "OpenVPN en versiones anteriores a la 2.3.3 y en versiones 2.4.x anteriores a la 2.4.4 es vulnerable a undesbordamiento de búfer cuando se utiliza key-method 1, lo que puede provocar la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.18",
            "matchCriteriaId" : "C5DD8899-640F-42F3-A82F-ACC4D2529C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "4BC52F79-A9F0-45FE-9EC0-58E970E4B3B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101153",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "URL Repurposed" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039470",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "URL Repurposed" ]
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/CVE-2017-12166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "URL Repurposed" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "URL Repurposed" ]
      }, {
        "url" : "https://community.openvpn.net/openvpn/wiki/CVE-2017-12166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12617",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-04T01:29:02.120",
      "lastModified" : "2025-10-22T00:16:04.407",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server."
      }, {
        "lang" : "es",
        "value" : "Al ejecutar Apache Tomcat desde la versión 9.0.0.M1 hasta la 9.0.0, desde la 8.5.0 hasta la 8.5.22, desde la 8.0.0.RC1 hasta la 8.0.46 y desde la 7.0.0 hasta la 7.0.81 con los HTTP PUT habilitados (por ejemplo, configurando el parámetro de inicialización de solo lectura del servlet Default a \"false\"), es posible subir un archivo JSP al servidor mediante una petición especialmente manipulada. Este JSP se puede después solicitar y cualquier código que contenga se ejecutaría por el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apache Tomcat Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.82",
            "matchCriteriaId" : "A7286E06-DA84-401D-8FB8-DEEF6A171C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.0.47",
            "matchCriteriaId" : "2C385FE9-F78C-49BC-AE87-5FE1A9BD7ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0",
            "versionEndExcluding" : "8.5.23",
            "matchCriteriaId" : "EF72650E-5826-4ABB-9B7D-43C96DB3B9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.1",
            "matchCriteriaId" : "817D7E47-947E-4A2F-A8AB-1302D5DF6684"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "B3293E55-5506-4587-A318-D1734F781C09"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14ABF04-E460-4911-9C6C-B7BCEFE68E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF62B0C-A8BD-40E6-9E4E-E684F4E87ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED43772F-D280-42F6-A292-7198284D6FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622B95F1-8FA4-4AA6-9B68-5FE4302BA150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B65CD29-C729-42AC-925E-014BA19581E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E856B4A-6AE7-4317-921A-35B4D2048652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_mysql_database:12.1.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E0C5E-00DF-4AD2-AE97-A752B3DC1631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.3.0.0",
            "versionEndIncluding" : "7.3.5.3.0",
            "matchCriteriaId" : "4C3CFCCE-A8D4-4B78-9C37-88238580B5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0.0",
            "versionEndIncluding" : "8.0.9.0.0",
            "matchCriteriaId" : "9380A86A-7A58-477F-A697-B6692E18B4B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fmw_platform:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657387A7-DFD9-4CDC-968A-3F3970FDE224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fmw_platform:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5E9A12-BFE9-4963-A360-A34168A6BF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CD44C0-F9DD-46F0-A4C1-2C2639217B4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3DC116-2844-47A1-BEC2-D0675DD97148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:management_pack:11.2.1.0.13:*:*:*:*:goldengate:*:*",
            "matchCriteriaId" : "5EB9E1EA-E136-4B09-9BBB-D7D48D993349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_lucas:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EE20FD-3D21-4E23-95B8-7BD13816EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78933DD0-F774-4E60-BC66-D5A57919717A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECA7A7E-8177-4FD4-B9B9-F4B1B6F43F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C9A2AD-F384-44D5-AB33-86B7250760A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB4EB87-5ABB-437D-BDAC-FB64F33929FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F5761-E2A0-4F67-BAE1-503877676BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E3C86B-4483-430A-856D-7EAB7D388D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.6.3293",
            "matchCriteriaId" : "FF9C223C-BC90-4253-A009-53DEDEE9C1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndIncluding" : "3.4.4.4226",
            "matchCriteriaId" : "52886BA2-204E-4F0E-B22F-CE5FDFCC98B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.0.5135",
            "matchCriteriaId" : "6470AB3F-ADE2-4BA2-A6B9-E094C927CC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_advanced_inventory_planning:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8193A06-3F6B-4F5A-AA58-B1B0AB3A87A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_advanced_inventory_planning:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE65A212-7385-4973-A9C8-FB9C2F9F745F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56239DBD-E294-44A4-9DD3-CEEC58C1BC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517E0654-F1DE-43C4-90B5-FB90CA31734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:14.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB363B97-8D71-4FC5-AF88-B6A0040E3D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:14.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92978070-A3FD-45E7-8A19-C6324116416B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_central_office:14.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D44D74-4402-4569-B335-AFB5F80424ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_central_office:14.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABB11E1-AD2A-47AA-A5AA-49D94B50CEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_convenience_and_fuel_pos_software:2.1.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5B8931-D3B4-46A9-B1A0-9A6BBA365FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_eftlink:1.1.124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD00C4A5-D05A-4C64-A50C-B8CE182FFB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_eftlink:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AC9F0D-4476-41AC-A7AB-5DE52135D8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_eftlink:16.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DF6FE2-35CB-43AB-95F4-40C909DEC69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_insights:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCCBA87-C934-4B94-A5F2-B459FF9CBEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_insights:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D962EF0-D6E1-4B1F-9F50-0E30C3B5CF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_insights:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3935CB-58D4-49A4-B3D4-D0DA0CD12F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_insights:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCEDB-57A1-4611-A009-29791E0EF9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D1FAEE-65FD-47EB-9F4D-505C72000F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C45FF05-FB76-4782-891E-F4A8A4871A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C03ED7B-3826-4D6D-89C5-61DE12E27213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8893CB1D-F18C-404D-BC06-CA2617BFAE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42227DD8-6671-4B38-9E42-4ACF78F09C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69962BD9-A102-4621-9461-018E87261657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "788F2530-F011-4489-8029-B3468BAF7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D939BB4-9D34-43A4-A19C-1CC90DB748FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E864D4-96C0-4FD5-993F-7E2472893FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA4DF85-9225-4422-BF10-D7DAE7DCE007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C2A2A4-285B-40A1-B9AD-42219D742DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8CF045-09BB-4069-BCEC-496D5AE3B780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E74E68-7F19-4EF3-AC00-3C249EAAA39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01FFED25-C781-45CA-8F3B-7A75D5F1E126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_management_system:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5092E0-0F34-4330-BE16-B0D5FF4C91E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_management_system:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBC99BE-E550-482C-B759-6032E6593D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_management_system:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAA1FF-02B0-4479-8349-DEB19208A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:14.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C47CC5A-5A12-4058-9F60-A50E2D2040BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:14.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1CE1F19-1F07-4CBB-9930-F47394ED8054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABD1A02-06F9-48A7-A22D-10DCD24938E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06992F7E-3BCA-4489-AD12-534C50CE6E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D3F48B-E5F3-4412-815A-6C1E23E98674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19C5CC9-544A-4E4D-8F0A-579BB5270F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891E192D-BA12-4D89-8D18-C93D2F26A369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B956113-5B3B-436D-858B-8F29FB304364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8917F6-00E7-47EC-B86D-A3B11D5F0E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_price_management:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC5F424-119D-4C66-8251-E735EEFBC0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_returns_management:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B31A871-77CF-455F-A28A-FBCE595D51DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_returns_management:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892B1AB5-B0DC-4E57-B22F-0196A9F22CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_returns_management:14.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9002D8-133F-4AB2-8475-4B0A464D0021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_returns_management:14.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529695B-B859-4A1B-9873-6C870201879F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:12.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26748F3-1952-43B2-8847-264257ECBF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:13.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142391D3-E38C-4F0E-9BB1-034DC28FAF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:13.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555925C7-3345-48F8-9FD9-0E6C1E83E960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:13.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0953CAB4-B627-419D-9B8A-7C776A4FC18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E703304-0752-46F2-998B-A3D37C9E7A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722969B5-36CD-4413-954B-347BB7E51FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:15.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BE74EA-FC65-4A23-B5AA-1FC97390ADAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_store_inventory_management:16.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAFAA67-42E9-4B4E-9DC7-A38275FD45CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A0E714-AC23-49B5-A36C-D10FA4699561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B3354D-3929-4AEC-AAE0-7F573341FD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55901EF7-B71C-40B3-B276-FDA6381F051F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385D40CC-5AA0-4DAB-A2E7-F3A3CFF95BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A714FB-050A-4040-BC57-C22FA4DD58D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A775321B-6DFB-4770-8F6D-D34D655438AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835BB7D9-633C-4CB3-8E8F-CA6FD62E587A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FE41BA-1E3C-4626-930F-3F8FEE124A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F284EF-05CF-4CF5-B7CA-F58AE01DA3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09892E8-D580-488A-A80E-B358D682A25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58642E0-CA59-4DE6-A83C-F551FC621C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo_system_and_applications_monitor:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7072B3F-88AE-4432-879B-9D8208C67C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD848FE1-CFD7-490C-B008-DF3B30F3256F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:element:-:*:*:*:*:vcenter_server:*:*",
            "matchCriteriaId" : "5E1DE4F5-9094-4C73-AA1B-5C902F38DD24"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077732DB-F5F3-4E9C-9AC0-8142AB85B32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681173DF-537E-4A64-8FC7-75F439CCAD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2F2F98-DB90-43F6-8F28-3656207B6188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server_text-only_advisories:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E5BFFC-F3E0-43E6-BA40-81B2A8B7CC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DD0CA2-3786-4E97-A60C-5043FDDBCB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E4609A-C986-4041-A528-1B4B37E1F6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BDD126-A468-47D9-A468-6E229D75939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAA8C42-870A-42B4-AE9F-7C67F4122ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84EAAE7-0249-4EA1-B8D3-E039B03ACDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2148300C-ECBD-4ED5-A164-79629859DD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B908AEF5-67CE-42D4-961D-C0E7ADB78ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8EB695-5EA3-46D2-941E-D7F01AB99A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DB003-76B8-4D7B-A6ED-5064C3AE1C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC68D88-3CD3-4A3D-A01B-E9DBACD9B9CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8D654F-2442-4EA0-AF89-6AC2CD214772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF87FD-9358-42A5-9917-25DF0180A5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B2E32-B838-4E51-BAA2-764089D2A684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4319B943-7B19-468D-A160-5895F7F997A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C1ABF5-4070-4AA7-BAB8-4F63E1BD91FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8036E2AE-4E44-4FA5-AFFB-A3724BFDD654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A24D0C-604D-4421-AFA6-5D541DA2E94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2E3637-B6A6-4DA9-8B0A-E91F22130A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81F859C-DA89-4D1E-91D3-A000AD646203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418488A5-2912-406C-9337-B8E85D0C2B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100954",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039552",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0268",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0269",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0270",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0271",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0275",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2939",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171018-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K53173544",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3665-1/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42966/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43008/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171018-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K53173544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3665-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42966/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12617",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12818",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-10-04T01:29:02.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de pila en un analizador XML personalizado en los productos HASP SRM, Sentinel HASP y Sentinel LDK de Gemalto anteriores a la versión 7.55 de Sentinel LDK RTE que podría provocar una denegación de servicio (DoS) remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sentinel:sentinel_ldk_rte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "CCEE1CD0-CB56-4117-A1CA-FAD2F6E5DDF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in-custom-xml-parser-leads-to-remote-denial-of-service/",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in-custom-xml-parser-leads-to-remote-denial-of-service/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12819",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-10-04T01:29:02.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55."
      }, {
        "lang" : "es",
        "value" : "Las manipulaciones remotas en el actualizador de paquetes de idioma permiten un ataque de relevo de autenticación NTLM (NTLM-relay) al usuario del sistema en los productos HASP SRM, Sentinel HASP y Sentinel LDK de Gemalto anteriores a la versión 7.55 de Sentinel LDK RTE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sentinel:sentinel_ldk_rte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "CCEE1CD0-CB56-4117-A1CA-FAD2F6E5DDF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-005-sentinel-ldk-rte-remote-manipulations-with-language-pack-updater-lead-to-ntlm-relay-attack-for-system-user/",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-005-sentinel-ldk-rte-remote-manipulations-with-language-pack-updater-lead-to-ntlm-relay-attack-for-system-user/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12820",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-10-04T01:29:02.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service."
      }, {
        "lang" : "es",
        "value" : "Existe una lectura arbitraria de memoria desde el puntero que controla el acceso a la memoria en los productos HASP SRM, Sentinel HASP y Sentinel LDK de Gemalto anteriores a la versión 7.55 de Sentinel LDK RTE que podría provocar una denegación de servicio (DoS) remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sentinel:sentinel_ldk_rte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "CCEE1CD0-CB56-4117-A1CA-FAD2F6E5DDF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12821",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-10-04T01:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una corrupción de memoria en los productos HASP SRM, Sentinel HASP y Sentinel LDK de Gemalto anteriores a la versión 7.55 de Sentinel LDK RTE que podría provocar una denegación de servicio (DoS) remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sentinel:sentinel_ldk_rte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "CCEE1CD0-CB56-4117-A1CA-FAD2F6E5DDF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption-might-cause-remote-code-execution/",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption-might-cause-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12822",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-10-04T01:29:02.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors."
      }, {
        "lang" : "es",
        "value" : "La habilitación y deshabilitación remota de la interfaz de administración en los productos HASP SRM, Sentinel HASP y Sentinel LDK de Gemalto anteriores a la versión 7.55 de Sentinel LDK RTE podría permitir que se originen nuevos vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sentinel:sentinel_ldk_rte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.50",
            "matchCriteriaId" : "CCEE1CD0-CB56-4117-A1CA-FAD2F6E5DDF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:02.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en dnsmasq en versiones anteriores a la 2.78 permite a los atacantes provocar una denegación de servicio (cierre inesperado) o ejecutar código arbitrario utilizando una respuesta DNS manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.77",
            "matchCriteriaId" : "B85D7A28-8CBA-4D77-AD30-DB3CA49F2F98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B21E9A8-CE63-42C2-A11A-94D977A96DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "58D3B6FD-B474-4B09-B644-A8634A629280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F892F1B0-514C-42F7-90AE-12ACDFDC1033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC411C9-9A8A-49D0-B704-2207674778CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B12243B2-D726-404C-ABFF-F1AB51BA1783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r21.6",
            "matchCriteriaId" : "54DF7A22-DF8B-4272-8EC6-48173E8860B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tk1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B05A3-29CF-464F-9E63-8238AA0651AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r24.2.2",
            "matchCriteriaId" : "22159717-67FD-4A10-9F65-4434FEC1F922"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1FDAD-C594-43D9-9BF6-F7461177AB91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.10.0.55",
            "matchCriteriaId" : "5454038C-F1F0-4061-8B5C-04A8CF1658C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_play_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "jimmy-al00ac00b135",
            "matchCriteriaId" : "CF744446-5C60-4C66-BE6B-DD108487B46C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9_play:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B543AF24-5D59-4A46-AC76-0EFF314E3D1A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.15",
            "matchCriteriaId" : "E861FF18-4E42-4092-81B6-0BB32679B2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "4.16.13m",
            "matchCriteriaId" : "E2DED50F-C1ED-43EB-9E63-B65F4F287F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17",
            "versionEndExcluding" : "4.17.8m",
            "matchCriteriaId" : "B5F144E5-EFB1-47E7-A2D2-28DEE6045CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.18",
            "versionEndIncluding" : "4.18.4.2f",
            "matchCriteriaId" : "8F1A3AF8-D105-4F13-8921-D94DCC7DE1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "63C108C5-0EF5-4C6D-8D83-ADB5EED24A6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284DF779-D900-48B4-A177-7281CD445AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "E25B682B-83F5-4903-9138-16907DC7A859"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB9921A-5204-40A3-88AB-B7755F5C6875"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "E8B2D681-1FBF-4013-B223-9878F4F1DB27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E917CBBB-EF41-4113-B0CA-EB91889235E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.1.5",
            "matchCriteriaId" : "AE55F796-FA73-4992-9826-57A00F77F6CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.1",
            "versionEndExcluding" : "6.3.1.25",
            "matchCriteriaId" : "CFE6B116-71BB-49BF-A5EF-4460D9089511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.4.0",
            "versionEndExcluding" : "6.4.4.16",
            "matchCriteriaId" : "193354A0-B108-4CA4-A1C3-F5F23147A295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.1.9",
            "matchCriteriaId" : "47D1AB4F-0922-49AF-9AE5-AEB4019E652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.3.0",
            "versionEndExcluding" : "6.5.3.3",
            "matchCriteriaId" : "8F5D03FA-CE4E-4888-88E2-384986A890BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndExcluding" : "6.5.4.2",
            "matchCriteriaId" : "E39B25F2-C65B-457F-A36E-14FC8285A004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndExcluding" : "8.1.0.4",
            "matchCriteriaId" : "00E53FE9-EA96-456A-B522-FC81DD0CCE3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46261C28-E276-4639-BA3D-A735B02599F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01527614-8A68-48DC-B0A0-F4AA99489221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65372FA7-B54B-4298-99BF-483E9FEBA253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D04EA1A-F8E0-415B-8786-1C8C0F08E132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4560",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2838",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2839",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2840",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2841",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42941/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3430-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/3199382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42941/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/973527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0."
      }, {
        "lang" : "es",
        "value" : "La función sg_ioctl en drivers/scsi/sg.c en el kernel de Linux en versiones anteriores a la 4.13.4 permite que los usuarios locales obtengan información sensible de zonas de la memoria dinámica del kernek no inicializadas mediante una llamada IOCTL SG_GET_REQUEST_TABLE a /dev/sg0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.3",
            "matchCriteriaId" : "FA1E2C32-ED0D-4E2B-A313-448CC0545ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3e0097499839e0fe3af380410eababe5a47c4cf9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3e0097499839e0fe3af380410eababe5a47c4cf9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3e0097499839e0fe3af380410eababe5a47c4cf9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3e0097499839e0fe3af380410eababe5a47c4cf9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the ability of DCM_ReadNonNativeImages to yield an image list with zero frames."
      }, {
        "lang" : "es",
        "value" : "ReadDCMImage en coders/dcm.c en GraphicsMagick 1.3.26 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante una imagen DICOM manipulada. Esta vulnerabilidad está relacionada con la capacidad de DCM_ReadNonNativeImages para proporcionar una lista de imágenes con frames con valor cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=b3eca3eaa264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101182",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://nandynarwhals.org/CVE-2017-14994/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/512/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=b3eca3eaa264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nandynarwhals.org/CVE-2017-14994/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/512/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "La consola de administración en WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1 y WSO2 Machine Learner 1.2.0 se ha visto afectada por un Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:application_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8891BAB1-C357-4BC7-8B7A-541B9698F0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:business_process_server:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AA02-B597-4C9F-936A-A4DC91F590B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:business_rules_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5435A911-096A-4DEE-9E04-1D3CBF4D98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:complex_event_processor:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397D6C9B-62A5-42FC-AB3B-C03598C25A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:dashboard_server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5FB891-085E-4777-B771-1CDC367B8848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:data_analytics_server:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941D83A5-1978-49AE-890D-E31980E2D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:data_services_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC72298-39AC-450F-8419-951057332163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wso2:machine_learner:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE333EE1-8158-40AF-8367-ACDCAA498516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 permite que los atacantes remotos provoquen una denegación de servicio (asignación excesiva de memoria) a causa de un subdesbordamiento de enteros en ReadPICTImage en coders/pict.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=0683f8724200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101183",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/511/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/code/ci/0683f8724200495059606c03f04e0d589b33ebe8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=0683f8724200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/511/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/code/ci/0683f8724200495059606c03f04e0d589b33ebe8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element."
      }, {
        "lang" : "es",
        "value" : "La versión 17.3.33.2830 de PRTG Network Monitor es vulnerable a Cross-Site Scripting (XSS) persistente en todos los títulos de sensores. Esto se relaciona con una mala gestión de errores para un %00 en el atributo SRC de un elemento IMG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:17.3.33.2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50563838-FE5C-4B0F-BBFE-6D6D8072077D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg parameter."
      }, {
        "lang" : "es",
        "value" : "La versión 17.3.33.2830 de PRTG Network Monitor es vulnerable a Cross-Site Scripting (XSS) reflejado en error.htm (la página de error) mediante el parámetro errormsg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:17.3.33.2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50563838-FE5C-4B0F-BBFE-6D6D8072077D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de denegación de servicio con expresiones regulares (ReDoS) en el módulo tough-cookie en versiones anteriores a la 2.3.3 para Node.js. Un atacante que sea capaz de realizar una petición HTTP utilizando una cookie especialmente manipulada podría hacer que la aplicación consuma una cantidad excesiva de recursos de CPU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:tough-cookie:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "F06572BE-8433-4322-9E3A-4090793D5371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101185",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2912",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2913",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1263",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1264",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/salesforce/tough-cookie/issues/92",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://nodesecurity.io/advisories/525",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/npm:tough-cookie:20170905",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/salesforce/tough-cookie/issues/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nodesecurity.io/advisories/525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/npm:tough-cookie:20170905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-04T01:29:03.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string."
      }, {
        "lang" : "es",
        "value" : "Las tuberías nombradas en qtsingleapp en QT 5.x, tal y como se usan en qBittorrent y SugarSync, están configuradas para que se puedan acceder de manera remota y permitan que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante una cadena no especificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C7E11D-AA2C-48BB-8C50-B04E5CD3A7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30B4386-B419-46B7-945F-C04F79600708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E42429B-0123-428E-AD62-23000CDF7343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE36CAC-6DB0-4061-AC83-AF12A30F2EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2980C52-9843-4A39-B164-76E9583F2D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE4473E-33BB-4953-9FC5-B3EE503A19E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1E6864-005E-4843-8D76-AF7D687CF991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC41EE4-29DE-4F86-AEA5-179F6AC9F24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F663AA25-2910-4D31-AD72-8BC8F76E9AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD2FCA0-F628-4164-8D32-8191A3004AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AA598B-B954-4389-AEC4-6B8E7762D507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F566F5-FB40-4F63-BF93-C9253A828B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5483AF-66FC-411D-A529-16C5CC8BD8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6827E6-7B15-423D-89C2-46B5E2D35961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58551C4F-EDA2-4AA3-9C5D-6FDF88C5746F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CCC1DB-3BA9-48CB-ADEE-F1C74C88CC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9024B9F9-90B8-494F-950E-955E62A3C872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B9182-F8A0-45AA-99A8-A7424A7C34E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63018D9-848B-4901-9DC9-CE6BBF0C2CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE2DA92-F05B-426C-8CE7-6DCC6AF6461D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4018AD-55DB-4C13-A26B-ED1564E4C501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC8E8B7-299B-4E76-9DC7-8482BA357B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5AC67C-2634-49DB-9F97-C27498047C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F2A2AC-F3DE-49E3-B0AF-3953ABD1C269"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=m6zISgWPGGY",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=m6zISgWPGGY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1541",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-04T01:29:03.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en AIX 5.3, 6.1, 7.1 y 7.2 en JRE/SDK con los paquetes installp y updatep evitaba que los archivos java.security, java.policy y javaws.policy se actualizasen correctamente. IBM X-Force ID: 130809."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0402E20C-8B41-4A2A-BFF9-92EC843985F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6791504A-A48A-4ED0-94AF-4C8A3B91516F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100914",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100915",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039372",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130809",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8047",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-04T01:29:03.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain access to user credentials or other sensitive data. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones anteriores a la 0.163.0 del desarrollo routing-release y en todas las versiones anteriores a la 274 del desarrollo cf-release de los router de Cloud Foundry, es posible añadir una combinación de caracteres en la URL que permitirá una redirección abierta. Un atacante podría explotar esta vulnerabilidad con un ataque de phishing para obtener acceso a las credenciales de usuario y otros datos sensibles. NOTA: 274 resuelve la vulnerabilidad pero tiene un error grave que se resuelve en 275."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "273",
            "matchCriteriaId" : "FAEB1B88-D592-419C-9244-F8BA5762BBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:routing-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.162.0",
            "matchCriteriaId" : "166C3DF7-422B-4C02-8352-CD62B7FEE368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8047/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8047/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8048",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-04T01:29:03.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275."
      }, {
        "lang" : "es",
        "value" : "En las versiones de la 1.33.0 hasta la 1.42.0 del desarrollo capi-release y las versiones de la 268 hasta la 274 (no inclusive) del desarrollo cf-release de Cloud Foundry, la solución original para CVE-2017-8033 introduce una regresión de API que permite que un desarrollador de espacio ejecute código arbitrario en la máquina virtual de Cloud Controller abriendo una aplicación especialmente manipulada. NOTA: 274 resuelve la vulnerabilidad pero tiene un error grave que se resuelve en 275."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:268:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735E1016-97F0-4286-955F-6017A2F8AD79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:269:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F021AB15-30F0-46DE-B613-11E3D4C9FD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F6F25E-B163-4587-A5B0-38D06E79F9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:271:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C362BD6-2F2B-41F5-85B4-8EF412C52FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:272:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97DC93C-8944-412F-8F5D-1CE29BA1E53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:273:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4D07FC-7A86-4B9E-BF2C-382BB0DA8F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA3D640-F0F2-4F0A-9B7D-6ADD356A0620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A2F496-2DC2-4715-AE3C-2D1B4F7FC42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "182CF381-85D1-4FD5-A4A7-77ECE267BD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A011CFE7-9F6C-4584-A600-27A0605DD424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2158F3B-2746-4E15-87C5-39CAE6EB2163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.38.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AABE9B-DAB9-41CA-AFE2-AC6F8C37F207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664569DC-51E7-4C6E-ACED-D382A261B878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF614F71-E9DF-4B90-B503-1618AA79B707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:capi-release:1.41.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1960B595-6BAC-489D-9534-6894C3C5F019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8048/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8048/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9792",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-04T01:29:03.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Impala (incubating) before 2.10.0, a malicious user with \"ALTER\" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it \"external\" and then changing the underlying table mapping to point to other Kudu tables. This violates and works around the authorization requirement that creating a Kudu external table via Impala requires an \"ALL\" privilege at the server scope. This privilege requirement for \"CREATE\" commands is enforced to precisely avoid this scenario where a malicious user can change the underlying Kudu table mapping. The fix is to enforce the same privilege requirement for \"ALTER\" commands that would make existing non-external Kudu tables external."
      }, {
        "lang" : "es",
        "value" : "En Apache Impala (incubating) en versiones anteriores a a la 2.10.0, un usuario malicioso con permisos ALTER en una tabla Impala puede acceder a datos de una tabla Kudu alterando las propiedades de la tabla para hacerla \"externa\" y cambiando luego el mapeado de la tabla subyacente para que apunte a otras tablas Kudu. Esto no cumple con el requisito de autorización de que se necesita el privilegio ALL en el lado del servidor para crear una tabla Kudu externa mediante Impala. Este requisito de privilegio para los comandos CREATE se garantiza para precisamente evitar esta situación en donde un usuario malicioso puede cambiar el mapeo de las tablas Kudu subyacentes. La solución es asegurarse de que hay el mismo requisito de privilegio para los comandos ALTER que haría que las tablas Kudu no externas se vuelvan externas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:impala:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A4E559-9641-4301-8175-29FB21AA65C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:impala:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E823ADD-8484-41FD-946B-8EC843C2B34E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101173",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/IMPALA-5638",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/74a163df0cdefcd738c8d18821e69aa69eed2ba5384c0cc255d15c4b%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/IMPALA-5638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/74a163df0cdefcd738c8d18821e69aa69eed2ba5384c0cc255d15c4b%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12149",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-04T21:01:00.180",
      "lastModified" : "2025-10-22T00:16:02.640",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data."
      }, {
        "lang" : "es",
        "value" : "En Jboss Application Server tal y como se distribuye con Red Hat Enterprise Application Platform 5.2, se ha descubierto que el método doFilter en el ReadOnlyAccessFilter del invocador HTTP no restringe las clases para las que realiza la deserialización y, por lo tanto, permite que un atacante ejecute código arbitrario mediante datos serializados manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-12-10",
      "cisaActionDue" : "2022-06-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Red Hat JBoss Application Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*",
            "matchCriteriaId" : "B8423D7F-3A8F-4AD8-BF51-245C9D8DD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D7F1AD-4BD3-4C37-B6B5-B287464B2EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D8FCD1-55D5-4187-87DD-39904EDE2EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972C5C87-E982-44A5-866D-FDEACB5203B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13890AE-5FDE-4698-8A2E-1B2FA0A313AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A785F07-9B76-4153-B676-29C9682B2F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46849C8D-36E9-4E97-BB49-E04F4EB199E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D29C15-4423-4EB1-BF7F-7081B4EE6416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66331CF-15C6-424A-90F8-F8F4FD3EC1E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1607",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1608",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-12149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-12149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12149",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.430",
      "lastModified" : "2023-11-07T02:37:53.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference  providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.477",
      "lastModified" : "2023-11-07T02:37:53.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference  providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins."
      }, {
        "lang" : "es",
        "value" : "El plugin Parameterized Trigger no comprueba el permiso Item/Build: El plugin Parameterized Trigger no comprueba la autenticación de las builds que ejecuta y permite que se lleve a cabo cualquier otro proyecto en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3046A867-0F3E-4F99-A75D-6BA23EC6D24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "88283810-FE73-4F19-A90D-8BF7857B8589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "42DDF92F-C610-4378-ADD8-5513C9F8D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "9743BC49-BFE2-47DC-8D8A-9E2A6DFA20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "31ABE1ED-5FE7-42CC-9B00-E5F8CD1C6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4E2A35AC-2DBE-4ED7-A59F-01D0F99A8A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:1.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "29C04E88-8DE2-494C-8E79-B99C0C35B942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "CEFA3582-BB8C-48B5-9AA7-AFDF55480C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "74E179D7-7717-4F41-9113-5BD702788842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7D728FA2-9611-40E4-B206-91EBFB1AD55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "490531CC-0442-42DD-85BC-549BFEFE210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7030E5CD-B99E-43BC-A4B0-D1075ACF3357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B1761105-7FF6-42B7-B11C-39B42CCBAFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BFAF9266-D838-4636-AF8F-01AD7430215F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6136A5E9-2CB7-45F7-A9BB-826AAAB7B7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D4442742-504C-481F-9FD7-EF72F8732135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.9:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "72B7A98C-9ACB-41BC-AEE7-2DEB4261B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.10:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D7B234FE-C38D-4390-AE03-453BCBD1E1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.11:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5003AF35-DCB8-4C5D-9BF3-FC77542F312D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.12:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "209181AB-3B5F-4572-99E5-2F4D22C04EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.13:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2CAC8BB1-A639-40A1-9497-EAA8BD011065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.14:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FCE572AD-3FED-4D40-B7DA-51358CDE96E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.15:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5E4020A1-704A-4BC3-A5F4-60B5285903F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.16:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "87740C04-48B8-4497-A683-7B691A4A3F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.17:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "457F0491-0440-43CB-A442-EBA71B216FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.18:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AE2397B0-5B1F-4966-8462-60575F9EC9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.19:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "81BE8393-8668-40F0-8637-5D85AC268FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.20:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0381C288-235D-47F4-8253-3B4DB513E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.21:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "92DAF792-6A28-4E5C-9332-9B1930B337CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.22:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C6849633-C8D3-4202-A3C5-7EC5FFE25653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.23:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5283460F-F0F3-485A-93D9-8F35F228A13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.24:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "93E3A8B5-FD8B-4562-8ADC-95BEB0EE7136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.25:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2CCD379A-00E4-4DED-9423-7BD3085ED75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.26:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3FD73CD6-8CF6-40B5-BE5B-E86630D3CC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.27:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "17F2DABC-DC01-4AE9-801F-1B827DC398DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.28:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "EAAE2AA3-2778-482F-96FA-4B28DDC82EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.29:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "24DB9090-1FAB-4D3F-8AC7-EC809010301E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.30:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DFD874EF-FBE5-43AC-AA1A-7F9B9BD79EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.31:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "48C536DA-2764-4A56-8E4D-460377B95BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.32:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "97F15C56-3142-4E04-8714-B29344A09526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.33:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FDCFD5C8-94FA-49EB-A2C9-B5AF1D6F6DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:parameterized_trigger:2.34:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "71D8314B-D27E-40CE-90B2-1B2197851A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to connect to any web server or Subversion server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery attacks."
      }, {
        "lang" : "es",
        "value" : "El plugin Subversion conecta con un repositorio Subversion especificado por el usuario como parte de una validación de formulario (por ejemplo, para recuperar una lista de etiquetas). La herramienta no comprueba correctamente los permisos, lo que permite que cualquier usuario con permisos Item/Build (pero no Item/Configure) se conecte a cualquier servidor web o servidor Subversion y envíe credenciales con un ID conocido, pudiendo capturarlas en consecuencia. Además, esta funcionalidad no necesita utilizar peticiones POST, lo que permite que se realice lo anterior sin tener acceso directo a Jenkins mediante ataques de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:subversion:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "9DB3B3E5-3597-47C3-94F9-679392CAF0B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99574",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger backups, restore backups, download backups, and also delete all previous backups via log rotation. Additionally, the plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks."
      }, {
        "lang" : "es",
        "value" : "El plugin Period Backup no realiza ningún chequeo de permisos, lo que permite que cualquier usuario con acceso Overall/Read cambie su configuración, haga copias de seguridad, recupere o descargue copias de seguridad y también borre todas las copias de seguridad anteriores mediante la rotación de logs. Además, el plugin no necesita que se envíen peticiones a su API mediante POST, exponiéndose, en consecuencia, a ataques de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:periodic_backup:1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E0FAA343-6C7F-4F8B-9258-2580F7FE43E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:periodic_backup:1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D2A325BD-75E3-48AC-980C-A520C586C3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:periodic_backup:1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D59D73CB-D25A-4DAC-BFCB-638EC21AB171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:periodic_backup:1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FB8D6B9A-BC01-47AF-8DC8-88BBA93A04DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:periodic_backup:1.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "53976206-EA0F-4CA6-9781-E50D0DC2BDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100437",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use. This functionality did not check permissions, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those could be used as part of an attack to capture the credentials using another vulnerability."
      }, {
        "lang" : "es",
        "value" : "GitHub Branch Source proporciona una lista de ID de credenciales aplicables para permitir a los usuarios configurar una tarea para que escojan la que les apetezca utilizar. Esta funcionalidad no chequea permisos, lo que permite que cualquier usuario con permiso Overall/Read obtenga una lista de ID de credenciales válidos. Se podrían utilizar como parte de un ataque para capturar las credenciales utilizando otra vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.7",
            "matchCriteriaId" : "271BAC96-05B7-402C-B7BF-46837F2D408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A511F648-0D88-4D1F-9EA1-851C066EA9BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B6096BE5-B2AA-4DB5-AF31-D137C562CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F7508088-0FCC-47B5-9562-60F929B45088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D7A04FB1-3555-47BF-844A-75714A2B8A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6FF29165-A7E7-4338-A805-95F9D35C82EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F5E10E7C-A96E-4D72-901A-A975C5C74933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2F4EC898-A3AD-4749-80D0-3D8B4E0A62A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "55DD8799-3D69-46C3-BAEF-3AE8253A48D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3D30BBA5-114F-4222-9C1C-2452D47E1263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.4:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "EABBCDC8-187C-4E98-A54F-E408BEA40D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5AF85B9C-00AC-4C01-8979-DF1EE693BA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E37CFC39-1337-42C1-A9E8-D3D1DC2885BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "31AE1E2F-64E9-4A1D-A9CB-F4C314B0AB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "403B2716-91C6-407A-8670-F848D34D0DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.8.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7CBFB929-A823-4681-A59D-0B8F4961D78F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.9:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7E263793-F71F-4DCD-8C3D-5197D90F1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.10:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "61E15CCA-CCCB-4FEB-AED2-D412A69FEEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F4C6C0E5-20E9-4864-A6C1-53656F2852DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2418A083-456F-457B-A77E-4D1C824E36D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "26CDE908-A6A1-4AB1-98C0-0C0E4A5980E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AD5E5DF9-9C36-4694-8BF9-BD0414AA94B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0DC703A2-C0AD-404B-B396-6584B585F9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1EB3064E-F4A0-47CF-9AC1-5718B01429BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BC77DA15-8BCE-4FB2-8167-ADFA9A3F2198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E2B6D674-9F05-4294-B84D-0181460DDB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-5:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "42B72E35-5768-4BE1-A758-D2C7D8251C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-6:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D357735D-58BB-42C8-A8DA-0F3970BC4A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5F904453-6C74-43DE-A21F-E0F3C060EA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "64374558-36DA-4841-8B20-2DD3188BD1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "32C595AA-EE76-4446-BD6B-576ED2EDE5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.4:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "ECDB4CDE-7547-49E9-9DF7-F3DAEDB0FF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "016AC1F5-FC7E-4D94-B13B-B375E3483F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3A3A960B-EA82-4EEC-A6B8-02D1246534CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B8E5ABB1-986C-4D8C-835D-56BDB3F46179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BF2EF3DA-DBBE-458E-ACFC-2A330A3915A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1B7FD58E-9959-4C40-9846-57ED0CA9A36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "299AE4BC-BD79-4629-9C47-6B517482FBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E4F9BF9F-197C-4027-81D5-8E9A7F92ED79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "69C82FCF-CEF6-4CE7-868F-C8E2F181A034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links."
      }, {
        "lang" : "es",
        "value" : "El plugin Sidebar Link permite que los usuarios puedan configurar tareas, vistas y agentes para añadir entradas en la barra lateral de estos objetos. No existe validación de entradas, lo que significa que los usuarios pueden utilizar esquemas javascript: para estos enlaces."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:sidebar_link:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "BBAA09BB-19A5-43A8-B91F-7379C844AF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Las builds en Jenkins están asociadas a una autenticación que controla los permisos con los que tiene que interactuar la build junto con otros elementos en Jenkins. Con respecto a Pipeline: El plugin Build Step no comprueba la autenticación de las builds que ejecuta y permite que se lleve a cabo cualquier otro proyecto en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline\\:_build_step:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "A716DB19-A051-4BC5-9295-C24F3C2EE83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Role-based Authorization Strategy Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This allowed attackers to add administrator role to any user, or to remove the authorization configuration, preventing legitimate access to Jenkins."
      }, {
        "lang" : "es",
        "value" : "El plugin Role-based Authorization Strategy no necesita que se envíen peticiones a su API mediante POST, exponiéndose, en consecuencia, a ataques de tipo Cross-Site Request Forgery (CSRF). Esto permite a los atacantes añadir el rol de administrador a cualquier usuario o eliminar la configuración de autorización, evitando el acceso legítimo a Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:role-based_authorization_strategy:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.5.0",
            "matchCriteriaId" : "8EDFA189-3A0F-4824-81C8-DCC99A1776B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g. GitHub Enterprise) as part of form validation and completion (e.g. to verify Scan Credentials are correct). This functionality improperly checked permissions, allowing any user with Overall/Read access to Jenkins to connect to any web server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery."
      }, {
        "lang" : "es",
        "value" : "El plugin GitHub Branch Source conecta con una URL de una API de GitHub especificada por el usuario (por ejemplo, GitHub Enterprise) como parte de la validación y finalización del formulario (por ejemplo, para verificar que las Scan Credentials son correctas). La herramienta no comprueba correctamente los permisos, lo que permite que cualquier usuario con acceso Overall/Read a Jenkins se conecte a cualquier servidor web y envíe credenciales con un ID conocido, pudiendo capturarlos en consecuencia. Además, esta funcionalidad no necesita utilizar peticiones POST, permitiendo que se realice lo anterior sin tener acceso directo a Jenkins mediante ataques de tipo Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A511F648-0D88-4D1F-9EA1-851C066EA9BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B6096BE5-B2AA-4DB5-AF31-D137C562CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F7508088-0FCC-47B5-9562-60F929B45088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:0.1:beta-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D7A04FB1-3555-47BF-844A-75714A2B8A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6FF29165-A7E7-4338-A805-95F9D35C82EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F5E10E7C-A96E-4D72-901A-A975C5C74933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2F4EC898-A3AD-4749-80D0-3D8B4E0A62A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "55DD8799-3D69-46C3-BAEF-3AE8253A48D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3D30BBA5-114F-4222-9C1C-2452D47E1263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.4:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "EABBCDC8-187C-4E98-A54F-E408BEA40D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5AF85B9C-00AC-4C01-8979-DF1EE693BA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E37CFC39-1337-42C1-A9E8-D3D1DC2885BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "31AE1E2F-64E9-4A1D-A9CB-F4C314B0AB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "403B2716-91C6-407A-8670-F848D34D0DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.8.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7CBFB929-A823-4681-A59D-0B8F4961D78F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.9:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7E263793-F71F-4DCD-8C3D-5197D90F1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:1.10:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "61E15CCA-CCCB-4FEB-AED2-D412A69FEEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F4C6C0E5-20E9-4864-A6C1-53656F2852DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2418A083-456F-457B-A77E-4D1C824E36D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "26CDE908-A6A1-4AB1-98C0-0C0E4A5980E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AD5E5DF9-9C36-4694-8BF9-BD0414AA94B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0DC703A2-C0AD-404B-B396-6584B585F9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1EB3064E-F4A0-47CF-9AC1-5718B01429BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BC77DA15-8BCE-4FB2-8167-ADFA9A3F2198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E2B6D674-9F05-4294-B84D-0181460DDB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-5:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "42B72E35-5768-4BE1-A758-D2C7D8251C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.1:beta-6:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D357735D-58BB-42C8-A8DA-0F3970BC4A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5F904453-6C74-43DE-A21F-E0F3C060EA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "64374558-36DA-4841-8B20-2DD3188BD1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "32C595AA-EE76-4446-BD6B-576ED2EDE5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.4:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "ECDB4CDE-7547-49E9-9DF7-F3DAEDB0FF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "016AC1F5-FC7E-4D94-B13B-B375E3483F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3A3A960B-EA82-4EEC-A6B8-02D1246534CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.0.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C0782CF8-414A-4061-AAEC-20166C658A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BF2EF3DA-DBBE-458E-ACFC-2A330A3915A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1B7FD58E-9959-4C40-9846-57ED0CA9A36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "299AE4BC-BD79-4629-9C47-6B517482FBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:alpha-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E4F9BF9F-197C-4027-81D5-8E9A7F92ED79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_branch_source:2.2.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "69C82FCF-CEF6-4CE7-868F-C8E2F181A034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server."
      }, {
        "lang" : "es",
        "value" : "El plugin Git se conecta a un repositorio de Git especificado por el usuario como parte de la validación de formularios. Un atacante que no tenga acceso directo a Jenkins pero que pueda adivinar un ID de credenciales de nombre de usuario/contraseña podría engañar a un desarrollador con permisos de configuración de tareas para que acceda a un enlace con una URL Jenkins manipulada con fines maliciosos, lo que puede provocar que el cliente de Git de Jenkins envíe el nombre de usuario y la contraseña a un servidor controlado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DB4E4FC0-7580-4FBB-A139-797A60357EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "677080D2-F865-4F8E-A950-690C063E8078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.3.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "46B3B5C9-5D20-4D53-921E-160B1ABB338C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.4.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "67C09409-E8DF-4174-B276-3C09DAB8CCD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.5.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AFA7DF0D-10B2-42E8-A721-601A47CB8E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.6.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "819379AD-978B-498B-98FC-ACD7BB0426FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.7.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "16A1E997-1499-45EA-9DE4-9E30A071957A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.7.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2A50E52B-25F2-41CA-98AA-FAB65AB993FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.7.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E0F1D344-77AC-4FB0-A12A-3E03CCB34E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.7.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B7754A95-AF91-49EF-8965-7E63AB1CCAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.8.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1F589112-DEFC-4BC8-81A7-72DD2BC1FA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.8.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3CBF17E0-B324-49C0-AD5C-141D456CCC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.8.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D41DA62C-75DC-46BC-B300-46EDDDCF456A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.9.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AFB68276-8776-4293-A762-5B2FE1862892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.9.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7FBCE99F-BF42-4126-8CCC-93927427293E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:0.9.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A8022A06-6A26-4BD4-82D5-C31E944B5425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.0.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "8F3F756A-02CC-4680-9C4D-B8913F54078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1B09D69F-639C-43BA-856F-A0B61E43D66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A3298505-24F3-4335-9257-9FE6208B14FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4526FCB4-1CFB-48A8-84AF-65267A1AF61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0606E95F-66B8-4FE9-8B9E-0D110E3C0380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "345AF76C-A05F-477E-96DA-D81E55F51397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4E619E21-218E-42E9-8B49-55ED5B6D1707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "365AE461-27A5-4027-B3FB-911D073CDF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "323964F0-4A7A-4C78-BF55-3536682501C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "63A0EF35-CF43-4025-BDF0-782D995BDA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "99A5279C-041F-4E4F-916E-FA3C7E337095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.9:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "54805166-D56E-47BE-8ED6-3934C7D37573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.10:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F488A22E-32B4-4F48-9147-39A08868D21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.11:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2035150A-915D-4A3D-9E31-A07A26419347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.12:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FF7D4054-7393-4797-B029-218D6346F05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.13:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F3180557-DB1A-4DF1-A1A2-CAC7953A55D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.14:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0BA98018-F0DD-4338-9892-AA1B5F336A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.15:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "8463B4B8-F656-47C3-86DA-572C3C6C26F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.16:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4ABD72A1-3802-432F-82B9-8620DEBF9736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.17:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F3758A9E-63E3-4D19-87F2-DD9EAE3805EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.18:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "15969DE6-CEF4-4E11-89C2-CA16A9EFA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.19:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "142BCBAC-8779-4CAF-8B40-BBDFC655CC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.20:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3C1EC783-A402-48A6-8EC4-354009927118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.21:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "18C6971D-A64A-40E7-8699-319FB9C5C012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.22:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "00D49A22-8E40-4D90-9637-3983EE5A00D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.23:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1BBC99C6-A757-4F50-B8D8-06E2D184F802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.24:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BAD742A3-0968-4125-8470-A606EF704EA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.25:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "8E1AA9C6-9298-4194-9E2B-1239CF5340F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.26:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "223A2980-F9B1-4487-A722-E5EB1C490A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.27:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "04662411-8E1B-4475-9775-5486AFEA8CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.28:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E216DB21-0479-43A9-92E3-E8B7DD21D98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.1.29:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "9E0AC53B-F90C-4A43-B5DD-3AAD55A36668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "CDF0EE94-AB3B-4A53-B681-AEFD1B25CFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.3.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "676B8587-D103-4289-AAE7-AEC669901348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.4.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "52790BF9-338F-48E0-8589-8B12CD841577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.5.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C89707D1-2517-414D-B4B8-7458F87C527D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:1.6.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DDE9A7CC-4941-4C6B-8C9E-E4FDC6A857C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C3A56B14-5584-42D2-B612-D62B064806AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.0:alpha-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "93E6C099-AA06-405D-8711-657D83962EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.0:alpha-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "00FB7EF8-0ED4-49EC-A43E-FE774B495656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "23F164E6-F9E1-4A3F-A3BC-48B2537DBA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.0:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "76FDF0F0-F6E9-49EE-9BC7-2BFA59E970B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "084E37A1-4446-44C7-845A-CCEA77A6CF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "23971890-1FD6-49AF-B14D-3435B05EAE51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E321BB4A-CD62-47A5-8E41-28B2FAD72DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.0.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1DFDB0FE-F09B-46ED-8595-D673DCE03250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "09CFCF17-D7ED-4F0B-95F6-21ECAF4DBAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "612D9AC8-996C-4AB2-9221-57A735A757CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C9D2156A-2461-45D7-BFDA-48E1A1607042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2D0960CF-E96D-4750-93C3-A6BDE67E4534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "30C24C33-FEFF-47DC-A608-646F3D64B260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4A9A2E1B-5803-418A-8A40-674711037117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1C5AB485-17A4-4525-9D32-8032B0414DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2E86B79A-3574-4A6E-A8C3-1706790709BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A8F007EC-A886-4544-9E83-8BABFFE9CA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "40912236-69A3-4E2D-BD91-217FE52DCFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.9:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F830CEAC-AA1C-4B64-BFAD-FE9296BEF571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.10:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AC18C7E1-D808-401F-A97A-9631E35DA7D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.11:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "83A4C949-8A88-48FC-841E-DF9944E7D85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.2.12:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "09677FA9-1411-4FFF-A5B7-93758B1A455E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "41EC1109-DFE3-4BF5-BE6F-CEBDE78C05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "219FDFBE-AEBC-4DFE-AEC0-2E87AEB79BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1BA545CA-4F7A-4C86-8AF8-7733F5FD94D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.0:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3D82424E-26BE-445F-8B98-AC89616CBE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.0:beta-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5A7D44A1-A926-4321-9B8D-C8A02901C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F0C9E21F-B5E8-4072-9405-75E503DAFABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D77AA97E-55FD-4D7F-86B7-DFAD6C330A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FA8DA453-C09F-4745-B056-057EDB7D93DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F7B17F60-E1E6-4E5C-B91B-F8CCEDBC1EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.3.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AAFAA96E-76B5-4D11-939C-DBE647200F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.4.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DA1B861E-8E14-4B28-9110-790AA5225820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.4.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0B64FBA4-E28E-4560-922D-EE750EF1A5A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.4.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AA791F81-C8BB-4C76-840C-6A338CD14B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.4.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1BF74B44-160D-4C12-8F42-33320D14F42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.4.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "3B043F28-8821-47EA-AA0D-1BABD293B226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "01D52B58-F3E9-41D3-9F63-FA7FD52D07B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6284EE03-B9C8-416B-8AFE-E9DF69BBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "73C9FBCC-8EA0-4364-A07B-1D3313BD60A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.0:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C74DB2EA-CCB6-4419-9895-9EBAB0B10497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.0:beta-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F6C95AAC-8D8D-4641-984B-03543ACA742A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.0:beta-5:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "95CC9043-A604-4159-B088-144E22FC2692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A3691557-61F0-493D-BB07-31DC514AC6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "62855947-0D7A-43E4-AA13-8ACE828670DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.5.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1F0007C3-E62F-4967-B5D8-D32AD59032DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D74818F0-D227-4C20-A00B-98D9F90C0DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "849FE2D4-6821-4FB7-A63A-4DB69F5E760D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1BA36392-D2A2-48FE-A0DA-F0506B8F4DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.2:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1D7871F7-0464-4FE8-BE25-F1850E50FD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.2:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1F0491FA-ABC1-4F8A-8EC1-28B6A6DCE98E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DAF4DF9B-1A13-4E97-8EA7-314920CCFD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:2.6.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B80C0DD3-D13E-4BE3-A725-D6F30C76539B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "64EB6FCA-F51A-4E19-8295-D33EC3C2F2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F4004DD0-FA0F-496D-B55A-532BC2AC9C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D50CF5BC-9DF3-4470-A251-FB9A293C6474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FFAE336E-F298-4DFE-A962-E12992F4E261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4A9CDB02-9046-4CEB-92DD-A543A9CCD60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.2:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "9CEDCC1A-D893-4BC6-8F76-664E770A7282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.2:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "24FD6C60-A3ED-40D6-A81F-3F0E4B0F565D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6EFE4D87-9963-446E-85EC-9FB87D4A62DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "659C6AE8-7FBA-48CD-B7D7-50775163B920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.0.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "8FF05032-310B-4CB7-A658-0D27852A03DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "71A8E89B-39E9-4B5A-B814-B4981BB158E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B9567E6E-50BA-436A-82C8-B59BA8B75F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.3.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7644636A-C6B9-4502-95B6-E7083D62AD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.3.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7FFA6D47-FC31-4E7D-BACE-8A57BB674AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.4.0:alpha-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "903074CE-C5D6-4BCF-A7E3-44C490510756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.4.0:alpha-4:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AA7E1D39-4A57-4A1D-9D3A-33E48E4C0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git:3.4.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5D749ADF-C75A-4C90-8735-50E12564838E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100435",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Poll SCM Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This allowed attackers to initiate polling of projects with a known name. While Jenkins in general does not consider polling to be a protection-worthy action as it's similar to cache invalidation, the plugin specifically adds a permission to be able to use this functionality, and this issue undermines that permission."
      }, {
        "lang" : "es",
        "value" : "El plugin Poll SCM no necesita que se envíen peticiones a su API mediante POST, exponiéndose, en consecuencia, a ataques de tipo Cross-Site Request Forgery (CSRF). Esto permite a los atacantes sondear los proyectos con un nombre conocido. Aunque Jenkins, en general, no considera el sondeo una acción que necesite protección ya que es similar a la invalidación de memoria caché, el plugin añade específicamente un permiso para poder utilizar esta funcionalidad y esta vulnerabilidad mina ese permiso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:poll_scm:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "02DB8C05-28B0-4F17-8D05-7D817E4C47F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to authenticate with a Docker Registry. This functionality did not check permissions, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those could be used as part of an attack to capture the credentials using another vulnerability."
      }, {
        "lang" : "es",
        "value" : "El plugin Docker Commons proporciona una lista de ID de credenciales aplicables para permitir a los usuarios configurar una tarea para que escojan la que les apetezca utilizar para autenticarse con un registro Docker. Esta funcionalidad no chequea permisos, lo que permite que cualquier usuario con permiso Overall/Read obtenga una lista de ID de credenciales válidos. Se podrían utilizar como parte de un ataque para capturar las credenciales utilizando otra vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:docker_commons:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "F9F6F996-6DD0-4CF9-8802-52980A446CF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild['rawBuild'] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object)."
      }, {
        "lang" : "es",
        "value" : "La lista blanca por defecto incluye las siguientes entradas no seguras: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). Esto permite omitir muchas de las restricciones de acceso implementadas en el sandbox del script utilizando, por ejemplo, currentBuild['rawBuild'] en vez de currentBuild.rawBuild. Además, las siguientes entradas permiten que se acceda a datos privados que no serían accesibles de otra manera por mecanismos de seguridad de scripts: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:script_security:1.34:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F330BD19-176E-4D33-8302-9904501F853F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución de código arbitrario por una protección de sandboxes incompleta. Los constructores, los inicializadores de variables de instancias y los inicializadores de instancias en scripts de Pipeline no están sometidos a mecanismos de protección de sandboxes y podrían ejecutar código arbitrario en consecuencia. Por ejemplo, se podría explotar con usuarios normales de Jenkins con el permiso para configurar Pipelines en Jenkins o con committers de confianza en repositorios que contengan Jenkinsfiles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline\\:_groovy:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.36",
            "matchCriteriaId" : "ED6D19F1-7469-45C9-97AA-3121BB3EDB30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99571",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate."
      }, {
        "lang" : "es",
        "value" : "En Darwin, no se verifican las preferencias de confianza del usuario para certificados root. Si el usuario tiene un certificado root cargado en su Keychain que se ha definido explícitamente como no fiable, un programa Go podría aun verificar una conexión utilizando ese certificado root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "583AACA0-8F17-4903-B063-B1253BA95325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndExcluding" : "1.7.4",
            "matchCriteriaId" : "6BA96926-E4F1-417B-8979-5956D23DD043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/golang/go/issues/18141",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://go-review.googlesource.com/c/33721/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/golang/go/issues/18141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://go-review.googlesource.com/c/33721/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:03.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given \"maxMemory\" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors."
      }, {
        "lang" : "es",
        "value" : "El método Request.ParseMultipartForm del paquete net/http empieza a escribir en archivos temporales una vez que el tamaño del cuerpo de la petición sobrepase el límite \"maxMemory\" establecido. Un atacante podría generar un petición multipart manipulada para que el servidor se quede sin descriptores de archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-769"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "583AACA0-8F17-4903-B063-B1253BA95325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndExcluding" : "1.7.4",
            "matchCriteriaId" : "6BA96926-E4F1-417B-8979-5956D23DD043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://golang.org/cl/30410",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/issue/17965",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://golang.org/cl/30410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/issue/17965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application's provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory."
      }, {
        "lang" : "es",
        "value" : "A la hora de pedir un archivo de una URL de tipo \"file://\", libcurl ofrece una característica que envía metadatos sobre el archivo mediante cabeceras HTTP. El código responsable de esto enviaría el búfer erróneo al usuario (stdout o la llamada de vuelta de la aplicación), lo que podría provocar que otros datos privados de la memoria dinámica (heap) se muestren en consecuencia. El búfer erróneo es un área no inicializada de la memoria asignada en la memoria dinámica y si resulta que no tienen ningún byte con valor cero, continuaría y mostraría los datos que siguen a ese búfer en la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.54.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1D4922-F424-45B1-AF98-B1DD33981110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100281",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039119",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://curl.haxx.se/0809C.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170809C.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://curl.haxx.se/0809C.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS."
      }, {
        "lang" : "es",
        "value" : "A la hora de hacer una transferencia TFTP y proporcionar una URL con un nombre de archivo muy grande (mayor que 515 bytes) en curl/libcurl, el nombre de archivo se trunca para que entre en los límites del búfer, pero el tamaño del búfer se sigue actualizando erróneamente para usar la longitud no truncada. Este valor excesivamente grande se utiliza luego en la llamada sendto(), lo que hace que un intento curl envíe más datos que los que están realmente puestos en el búfer. La función endto() lee entonces más allá del final del búfer basado en la memoria dinámica (heap). Un servidor HTTP(S) malicioso podría redirigir un cliente vulnerable que utiliza libcurl a una URL TFTP manipulada (si el cliente no tuviese restringidos a qué protocolos se permiten redirecciones) y engañarle para que envíe contenidos privados de la memoria a un servidor remoto por UDP. Limite los protocolos de redirección de curl con --proto-redir y los de libcurl, con CURLOPT_REDIR_PROTOCOLS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BBDF07-DB97-433E-B542-EFEBE45550DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8BE3F8-82ED-4DD7-991E-979E950C98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AA231-4694-46E8-B559-1594263A9987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E1F171-B887-499A-BF4F-538EBF347811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07AA276A-0EBA-4DC9-951C-8F8159FAC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEEF534-9AD2-4439-9D69-E91D062C4647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63643BE1-C978-4CD2-8ED1-2B979DB0676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FA04A0-9258-4654-ABCF-F41340B1FA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE829230-AFDB-4131-9C6A-D9D7A66C5B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E8BA30-8087-48D4-AE1B-48326FF826B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47970EFF-2F51-4875-A6BD-E30614E13278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C9B668-3204-41C5-A82E-262BDFA541DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C8EE1E-E186-42D6-8B12-05865C73F261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3D88B-41B9-4D79-B47D-B3D6058C0C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C80901-D48E-4C2A-9BED-A40007A11C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331A51E4-AA73-486F-9618-5A83965F2436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB32DF2C-9208-4853-ADEB-B00D764D7467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05636DC-7E38-4605-AAB8-81C0AE37520A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624DF2F1-53FD-48D3-B93D-44E99C9C0C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2171C7C-311A-4405-B95F-3A54966FA844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE20A41-8B53-46FC-9002-69CC7495171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ED9DA0-E880-4CBB-B1AC-5AEE8A004718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5293C7F0-BF9F-4768-889A-876CE78903CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EB41B3-65F3-4B0E-8CCC-325B14AF605B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857B244C-2AFB-40C7-A893-7C6DE9871BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B732CE55-820A-40E0-A885-71BBB6CF8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0455A5F2-1515-4CD8-BA2F-74D28E91A661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29034B3A-BE9D-4D68-8C56-4465C03C3693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6249538E-FBCB-4130-91FB-DA78D7BA45DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E11B8A5-50A2-468F-BFB3-86DD9D28AC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EAE25A0-3828-46F1-AB30-88732CBC9F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1533A85C-2160-445D-8787-E624AEDC5A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87B9393-7EA4-43DA-900C-7E840AE2D4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1249E9-304F-4952-8DAB-8B79CE5E7D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FAF953-6A65-4FAB-BDB5-03B468CD1C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F8FF1F-A639-4161-9366-62528AAF4C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812AB429-379A-4EDE-9664-5BC2989053F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13DD791F-C4BD-4456-955A-92E84082AA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A17E442-45AA-4780-98B4-9BF764DCC1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AF544C-5F16-4434-B9FB-93B1B7318950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD9ED9-2412-44AE-9C55-0ED03A121B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CCE31B-ABDA-4F32-BAF1-B1AD0664B3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E66A332-ECD1-4452-B444-FB629022FDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD3D599-35E9-4590-B5E0-3AF04D344695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B6BFFB-7967-482C-9B49-4BD25C815299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1791BF6D-2C96-4A6E-90D4-2906A73601F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260DD751-4145-4B75-B892-5FC932C6A305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF4AD0D-2EC5-4CE8-B6B3-2EC8ED2FF118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB1CB85-0A9B-4816-B471-278774EE6D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3831AB03-4E7E-476D-9623-58AADC188DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABACE305-2F0C-4B59-BC5C-6DF162B450E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAC1B55-F492-484E-B837-E7745682DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D57914-B40A-462B-9C78-6433BE2B2DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.38.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A12DF7-62C5-46AD-9236-E2821C64156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C43697D-390A-4AC0-A5D8-62B6D22245BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52E9E9F-7A35-4CB9-813E-5A1D4A36415C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.41.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257291FB-969C-4413-BA81-806B5E1B40A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.42.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC6ED5-4C1A-4ED0-97BA-B245C4A236C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AA7383-3AA1-4A3B-BA46-BBA8FBDC10DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.43.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D8430-AA07-41B5-9F22-696C554CB277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.44.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3ED21E-7907-4248-A32F-BB3102A80DC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E41520-CA31-4BA0-B247-F1DCAAE98DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.46.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F2C633-D720-4FD9-9C75-2D4C57120357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F2FBC9-059A-4299-B59F-8EFD797E3704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.47.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FCC26-B458-46D8-B023-DB4C19A51718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21C08D5-7454-4292-A87C-900C9494E38B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B727926-90A2-4A7E-9905-70160C1E0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.49.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A247AE-B209-42BE-8BE7-865AE279D23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8429FF9B-D7EA-40E6-A6E8-961EA71F20C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D387194-720A-4D9C-928E-6FAF2EC6C33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2782D32-B023-47B1-A513-251D5093CE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8373A4E6-BA92-4B5B-9E97-E8C1E8C22C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.51.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084F63A4-64E4-48FC-8B8C-A4F3E7D39D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D4DFF0-9953-4AB8-8C24-3977448BFE64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.52.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5B274B-F232-47E8-9E8A-0EB08F97DE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E42C72-868A-4AE4-A33E-79F8190C94C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.53.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E2F3C4-5D88-4C16-BAA7-A34CF7687415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067EB50A-E70F-4C04-ACE7-67BD7E5A4344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.54.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1D4922-F424-45B1-AF98-B1DD33981110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100286",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170809B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170809B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`."
      }, {
        "lang" : "es",
        "value" : "curl es compatible con el \"globbing\" de URL, donde un usuario puede pasar un rango numérico para hacer que la herramienta itere sobre esos números para realizar una secuencia de transferencias. En la función de \"globbing\" que analiza sintácticamente el rango numérico, hay una omisión que hace que curl lea un byte más allá del fin de la URL si se proporciona una URL manipulada o simplemente mal escrita. La URL se almacena en un búfer basado en memoria dinámica (heap) para que se pueda hacer luego de tal manera que lea erróneamente otra cosa en vez de cerrarse inesperadamente. A continuación se muestra un ejemplo de una URL que desencadena este fallo: \"http://ur%20[0-60000000000000000000\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7E5201-24A0-4CEF-84D2-76DB195D3A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D558CC2-0146-4887-834E-19FCB1D512A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6931764D-16AB-4546-9CE3-5B4E03BC984A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC1313E-8DCB-4B29-A9BC-A27C8CB360E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27C2E02-5C0A-4A12-B0A6-5B1C0DFA94E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.38.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC7535F-B8C7-490F-A2F9-1DCFD41A3C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCBFE6D-F6A9-4394-9AF8-F830DC7E6A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEBBFCA-6A18-4F8F-B841-50255C952FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.41.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEAE437-A645-468B-B283-44799658F534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.42.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F7EE95-4EBE-4306-ADFE-A1A92CAD5F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F7AE71-7A18-4737-9C02-0A3343B3AD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.43.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC589DE6-773A-43E8-9393-3083DB545671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.44.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D735EA-04E3-47E7-A859-3CC1ED887E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C1A70-0869-4933-88D7-ECE7ACCF0F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.46.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B0A020-3DA1-4753-B810-C60E7CA06839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A18050-0DA7-400A-B564-AC9A020D57CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.47.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D168A62-A5B0-4BA8-8243-1AAF3B395567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D8B02D-5A97-4F9A-8EE8-D60D621E0B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DC2429-0B58-4D68-9337-0077C4493714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.49.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D5B7BD-2B9D-40AB-B13A-393FF0007A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AFED4D-0672-467F-999C-9D6C3722B8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.50.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDCCD2D-3D98-4FC3-BAB5-3D09A0CAD12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.50.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA228CD-70CF-41FC-98F6-38194466CC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.50.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFDE2415-78F8-4A36-AA9B-6EA8DCE399AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.51.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA05266-35B6-422D-AE73-4C934B4F5091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AB70F1-D6A9-4ADF-A506-4C9DEE8AE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.52.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2FDF0C-6493-4BE1-851E-0D8CE94E36B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA9D7F9-A972-41A8-9561-DB72E37184F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.53.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641ACFC8-BDE2-42AC-8B3D-EF78695AD750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8629C630-14E0-4C94-BBD1-B5203488A6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.54.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6D873-9770-4FD0-AC75-4D6C06FC4A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.55.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADB89B4-7218-4E2B-BB94-8CCEB79FB3F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100249",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039117",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170809A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170809A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view."
      }, {
        "lang" : "es",
        "value" : "La vista de Detalles de algunos plugins basados en herramientas de análisis estático es vulnerable a Cross-Site Scripting (XSS) persistente. Los usuarios maliciosos capaces de afectar las entradas a estos plugins, por ejemplo los valores de salida de la consola que se analizan para extraer avisos de builds (Warnings Plugin), podrían insertar código HTML arbitrario en esta vista."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:static_analysis_utilities:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.91",
            "matchCriteriaId" : "39FC25C9-7F0F-46AA-BD52-A7C255F637F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101061",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view."
      }, {
        "lang" : "es",
        "value" : "La vista de Detalles del plugin DRY basado en herramientas de análisis estático es vulnerable a Cross-Site Scripting (XSS) persistente. Los usuarios maliciosos capaces de influir en la entrada a este plugin podrían insertar código HTML arbitrario en esta vista."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:dry:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.48",
            "matchCriteriaId" : "E7CFAD86-39CC-4E19-A2D8-1942B80B560F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101061",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs directly that allowed viewing these files. Access to view these files now requires sufficient permissions to configure the provided files, view the configuration of the folder in which the configuration files are defined, or have Job/Configure permissions to a job able to use these files."
      }, {
        "lang" : "es",
        "value" : "El plugin Config File Provider se utiliza para gestionar de manera centralizada archivos de configuración que suelen incluir información secreta, como contraseñas. Los usuarios únicamente con acceso Overall/Read a Jenkins son capaces de acceder directamente a URL que permiten la visualización de estos archivos. El acceso para visualizar estos archivos necesita ahora permisos suficientes para configurar los archivos proporcionados, visualizar la configuración de la carpeta en la que están definidos los archivos de configuración o tener permisos Job/Configure para una tarea que pueda usar esos archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.16.1",
            "matchCriteriaId" : "A2DC94C7-A818-4D02-A180-CC0FC7A820C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient."
      }, {
        "lang" : "es",
        "value" : "El permiso opcional Run/Artifacts se puede habilitar definiendo una propiedad del sistema Java. Blue Ocean no comprueba este permiso antes de dar acceso a los artefactos archivados. El permiso Item/Read es suficiente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "D150C651-522E-42A1-ADCC-39BC617320D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "173912BD-BCCB-43D4-A95B-78294FCEA841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "449FD6D2-7B10-4C53-BBB5-06646D9E20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "29E8F3DB-C123-4ADE-AA61-5742D46E22C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. Its SCM content REST API supports the pipeline creation and editing feature in Blue Ocean. The SCM content REST API did not check the current user's authentication or credentials. If the GitHub organization folder was created via Blue Ocean, it retained a reference to its creator's GitHub credentials. This allowed users with read access to the GitHub organization folder to create arbitrary commits in the repositories inside the GitHub organization corresponding to the GitHub organization folder with the GitHub credentials of the creator of the organization folder. Additionally, users with read access to the GitHub organization folder could read arbitrary file contents from the repositories inside the GitHub organization corresponding to the GitHub organization folder if the branch contained a Jenkinsfile (which could be created using the other part of this vulnerability), and they could provide the organization folder name, repository name, branch name, and file name."
      }, {
        "lang" : "es",
        "value" : "Blue Ocean permite la creación de carpetas de organización de GitHub que están configuradas para escanear una organización de GitHub en busca de repositorios y ramas que contengan un archivo Jenkins y crear las correspondientes pipelines en Jenkins. Su API REST de contenido SCM es compatible con la característica de creación y edición de pipelines en Blue Ocean. La API REST de contenido SCM no chequea la autenticación o las credenciales del usuario actual. Si la carpeta de organización de GitHub se creó con Blue Ocean, entonces retiene una referencia a las credenciales de GitHub de su creador. Esto permite a los usuarios con acceso de lectura de la carpeta de organización de GitHub crear commits arbitrarios en los repositorios de dentro de la organización de GitHub correspondiente a la carpeta de organización de GitHub con las credenciales de GitHub del creador de dicha carpeta. Además, los usuarios con acceso de lectura a la carpeta de organización de GitHub podrían leer contenidos de archivos arbitrariamente de los repositorios de dentro de la organización de GitHub que corresponde a la carpeta de organización de GitHub si la rama contuviera un archivo Jenkinsfile (que se podría crear usando la otra parte de esta vulnerabilidad), y podrían proporcional el nombre de la carpeta de organización, del repositorio, de la rama y del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "D150C651-522E-42A1-ADCC-39BC617320D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C8C86EC1-0245-4520-B32F-FD3E7C87DA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DA52B765-C1B0-4B18-AF95-F69834DD8E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "8DB857A7-F54C-4F0F-98A0-26B229B65ACF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection."
      }, {
        "lang" : "es",
        "value" : "El plugin Script Security no aplica las restricciones de sandboxing para las invocaciones de constructores mediante listas de argumentos posicionales, invocaciones de superconstructores, referencias de métodos y expresiones de coerción de tipos. Esta vulnerabilidad se podría utilizar para invocar constructores y métodos arbitrarios, omitiendo la protección de sandboxing."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:script_security:1.30:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "536E2E0A-8532-4DBB-842B-D0255142015B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item/Build permission instead."
      }, {
        "lang" : "es",
        "value" : "Con respecto a Pipeline: El plugin Input Step por defecto permite que los usuarios con acceso Item/Read a un pipeline interactúen con el step para proporcionar entradas. Esto se ha modificado, por lo que ahora requiere que los usuarios tengan el permiso item/Build."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7A8D60FA-2439-4B91-BD14-51D9CFFFFD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "9CD79BAB-0442-463D-B71C-E0355F8A1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1D64E039-A1CC-49CC-B713-437637B7080B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6732CEF7-E473-4313-B151-7CD7B0AE93D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "9FC81D3F-C3C4-402B-8F1A-088B56CE4A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5DCA6F26-2E1A-49D0-9AD4-C14377BB45DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "1C046B4F-6D83-490F-9A08-BC0448BD42B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline-input-step:2.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "DCBCC3AE-02FB-4D38-9A76-C84C3BBE3F7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view."
      }, {
        "lang" : "es",
        "value" : "La vista Details personalizada del plugin OWASP Dependency-Check basado en Static Analysis Utilities era vulnerable a Cross-Site Scripting (XSS) persistente. Los usuarios maliciosos capaces de influenciar las entradas en este plugin podrían insertar HTML arbitrario en esta vista."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "FE428D65-2789-4FD0-AAAD-6B3C07BACC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "94D1D9E7-451D-4756-B9A4-C9744DBC715D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "31E1C69C-C417-4339-B962-90D1E392EA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "187EEC33-EF1B-4E56-8D06-9721E6EF6A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B1FFA96E-AB65-4427-8053-C15BBB991BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.4.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0BDA7EAA-BA4A-486A-ABDC-B07E5C162B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BB8439C6-DEE9-484F-A987-FD0139709891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "72496F9F-6392-46EA-9D40-99717775BCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.0.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "94488F71-6068-4D40-A489-E7A7CE9B819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "F7533C35-FC4A-4D53-BDDF-D877B05A038D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7D78D0F6-DE89-4456-9AA6-E569F7DD39C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5DC4746C-AA1F-4D9D-880C-76B42E253F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "34B2D8CD-C621-4A0A-82BC-E1415FD26C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "856328A7-BD25-4905-9D49-9B8E9DA67196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "14959CAC-8561-4BC1-978E-6B6B60F9C78A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D353EEE8-8C03-4F75-9A02-55F159E24B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.1.4.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2532B713-4F03-40A5-8549-EC465EDB7558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "563C0CFF-CA00-4E66-B0EA-631084164BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2DB6D211-2140-44DA-94F5-F40E84F32FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5CAC68EE-0509-4D50-85B6-D2143B31F6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "982C152C-54B8-4CE7-AB3F-242A69451735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.3.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "CF2A2C18-D3F7-4E08-8D06-6083E63A8853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.3.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2FE0020C-D1C4-4EA0-896E-D40301F7D54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4DC56E2F-AFDE-46FF-A971-0071B13CD57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "7C655E9A-E4FB-4A93-A700-12E73CB158DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "BA82EB1F-223A-43A8-85FF-6BDEC57EC96E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.7:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "EE5DFF68-55E3-474C-8AEC-9FA8FFEAB29B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.7.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "167B3711-E4F6-4F7A-A7D5-1AB306ABADAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.8:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D9734E28-3E4D-441B-9A25-010AF22EF2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.9:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "E0193375-C35E-4471-BFBF-323609286D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.10:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "A4714A4A-AB41-4E3B-B1FB-126876077209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.11:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "B32A175D-CC97-475E-BA84-0FD80190C550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.2.11.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "43F2EBBF-ACC5-45B8-A05A-AD33A087E4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "CF8D99B6-078E-4CB7-9C15-309269C9475E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "76448741-A34E-40CC-B29C-3AA807D8DA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5F7DD792-C2AC-4C7D-B499-2139AEC95D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.1.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4B24A3BA-34F4-47C2-9102-72A7242C373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "0FC17478-320A-40E5-A6A9-269B5B0E78FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "797EC1B7-B003-436A-A16D-38C17D24E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "454D7BAC-360D-4484-9806-06398D7D81B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C363C3E1-06CC-4241-8BDC-D897F1A36CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.3.6:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D30FA350-D520-4569-87C3-DCAD6B476932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.4.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "CAA3F171-2461-4AB1-B943-158C397917EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.4.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6AAF4F60-365C-45B2-A35A-4249E24741FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.4.2:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "5ABC369B-7051-447F-8BAA-54E5A25CB489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.4.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "6BA1E839-43E6-400A-9848-8A56FB8B87E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.4.4:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "8ABF8C5E-4131-4C53-86B8-B44D65749C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:1.4.5:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "9A5F226A-69A0-43E3-8F1F-B332C5BDFCA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:2.0.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "435597BF-F804-4A1E-A781-AEB432A5B5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:2.0.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "C111631F-92EC-4F0F-AD09-7DE270A5C1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-check:2.0.1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D926C362-4745-4D29-8C35-E558D8DC976A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100227",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check the current user's authentication and authorization when configuring existing GitHub organization folders. This allowed users with read access to the GitHub organization folder to reconfigure it, including changing the GitHub API endpoint for the organization folder to an attacker-controlled server to obtain the GitHub access token, if the organization folder was initially created using Blue Ocean."
      }, {
        "lang" : "es",
        "value" : "Blue Ocean permite la creación de carpetas de organización GitHub que se configuran para escanear una organización de GitHub para repositorios y ramas que contengan un archivo Jenkins y crear las pipelines correspondientes en Jenkins. No verifica adecuadamente la autenticación y autorización del usuario actual al configurar las carpetas de organización de GitHub existentes. Esto permite que los usuarios con acceso de lectura a la carpeta de organización GitHub la reconfiguren, incluyendo el cambio del endpoint de la API de GitHub para la carpeta de organización a un servidor controlado por el atacante para obtener el token de acceso a GitHub, si la carpeta de organización se había creado inicialmente con Blue Ocean."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "D150C651-522E-42A1-ADCC-39BC617320D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta-1:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "173912BD-BCCB-43D4-A95B-78294FCEA841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta-2:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "449FD6D2-7B10-4C53-BBB5-06646D9E20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:blue_ocean:1.2.0:beta-3:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "29E8F3DB-C123-4ADE-AA61-5742D46E22C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW."
      }, {
        "lang" : "es",
        "value" : "Linux kernel: lectura fuera de límites en los sockets AF_PACKET. Este nuevo problema es análogo a CVE-2016-8655. En ambos casos, una opción del socket que cambia su estado podría ejecutarse con comprobaciones de seguridad en packet_set_ring. Anteriormente ocurría con PACKET_VERSION. Ahora con PACKET_RESERVE. La solución es similar: bloquear el socket para la actualización. Es posible que se pueda explotar esta vulnerabilidad, pero no hay ningún exploit conocido. Como este problema afecta a los sockets PF_PACKET, requiere CAP_NET_RAW en el espacio de nombres de proceso. Pero hay que tener en cuenta que, con los espacios de nombres de usuario habilitados, cualquier proceso puede crear un espacio de nombres que contenga CAP_NET_RAW."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndExcluding" : "3.2.92",
            "matchCriteriaId" : "860F313E-7C12-471B-A90A-432B550B1053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.47",
            "matchCriteriaId" : "1B863019-9BE4-4D3F-907A-B5BFDEEE975E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.65",
            "matchCriteriaId" : "15A3222E-681C-4561-B7DF-C1D36FE3773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.44",
            "matchCriteriaId" : "C2695139-BE23-4BAC-97F1-4CD2A6240BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.82",
            "matchCriteriaId" : "D2DEF2AD-9A8A-49DB-AD40-338D23A2C218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.43",
            "matchCriteriaId" : "FE7B437E-2829-4956-BBB4-79F150CABB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.7",
            "matchCriteriaId" : "9186C944-947B-4F51-8956-925591EFF822"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100267",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039132",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3200",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-1000111",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-1000111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb->len becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev->len - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 (\"[IPv4/IPv6]: UFO Scatter-gather approach\") on Oct 18 2005."
      }, {
        "lang" : "es",
        "value" : "Linux kernel: Existe una corrupción de memoria explotable debida al cambio de ruta de UFO a no UFO. Al crear un paquete UFO con MSG_MORE, __ip_append_data() llama a ip_ufo_append_data() para que se anexe. Sin embargo, entre dos llamadas send(), la ruta anexa puede cambiarse de UFO a no UFO, lo que lleva a una corrupción de memoria. Si la longitud del paquete UFO sobrepasa el MTU, copy = maxfraglen - skb->len se convierte en negativo en la ruta no UFO y se toma una rama para asignar un nuevo skb. Esto desencadena la fragmentación y el cálculo de fraggap = skb_prev->len - maxfraglen. fraggap puede exceder el MTU, lo que provoca que copy = datalen - transhdrlen - fraggap se vuelva negativo. En consecuencia, skb_copy_and_csum_bits() escribe fuera de límites. Existe un problema similar en el código IPv6. Este error fue introducido en e89e9cf539a2 (\"[IPv4/IPv6]: UFO Scatter-gather approach\") el 18 de octubre de 2005."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.15",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "C3FE348E-5745-49CF-B0F6-52AA3E4F3A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.47",
            "matchCriteriaId" : "1B863019-9BE4-4D3F-907A-B5BFDEEE975E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.65",
            "matchCriteriaId" : "15A3222E-681C-4561-B7DF-C1D36FE3773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.4.82",
            "matchCriteriaId" : "BCC5E165-3BA3-42E8-A9B4-BAC5C9C90365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.43",
            "matchCriteriaId" : "FE7B437E-2829-4956-BBB4-79F150CABB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.7",
            "matchCriteriaId" : "9186C944-947B-4F51-8956-925591EFF822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/277",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039162",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3200",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1931",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1932",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4159",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-1000112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45147/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-1000112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45147/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Deploy to container Plugin stored passwords unencrypted as part of its configuration. This allowed users with Jenkins master local file system access, or users with Extended Read access to the jobs it is used in, to retrieve those passwords. The Deploy to container Plugin now integrates with Credentials Plugin to store passwords securely, and automatically migrates existing passwords."
      }, {
        "lang" : "es",
        "value" : "El plugin Deploy to container almacenaba las contraseñas sin cifrar como parte de su configuración. Esto permitía que los usuarios con acceso al sistema de archivos local de Jenkins o los usuarios con acceso Extended Read a las tareas en las que se usa recuperen esas contraseñas. El plugin Deploy to container ahora se integra con el plugin Credentials para almacenar las contraseñas de forma segura y migra automáticamente las contraseñas existentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:deploy:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "65AD6881-BF45-4CE2-8C3D-0A011953841F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser extensions or cross-site scripting vulnerabilities. The Datadog Plugin now encrypts the API key transmitted to administrators viewing the global configuration form."
      }, {
        "lang" : "es",
        "value" : "El plugin Datadog almacena una clave API para acceder al servicio Datadog en la configuración global de Jenkins. Mientras la clave API se almacena cifrada en el disco, se transmitía en texto plano como parte del formulario de configuración. Esto podría provocar la exposición de la clave API, por ejemplo mediante extensiones de navegadores o vulnerabilidades de Cross-Site Scripting (XSS). Ahora el plugin Datadog cifra la clave API que se transmite a los administradores que están viendo el formulario de configuración global."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:datadog:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.5.6",
            "matchCriteriaId" : "2AC9981F-EB61-4D20-A5A2-31A94529223D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100223",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-08-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository"
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 4.3 de Mercurial son vulnerables a una falta de comprobación de symlink. Los repositorios maliciosos pueden aprovecharse de esto para modificar archivos fuera del repositorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurial:mercurial:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "C8A4E3DF-ABE5-4C9E-8D09-0B36887A59E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3963",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100290",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2489",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-18",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 4.3 de Mercurial no sanitizaban adecuadamente los nombres de host pasados a ssh, lo que conducía a posibles ataques de inyección de shell."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurial:mercurial:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "C8A4E3DF-ABE5-4C9E-8D09-0B36887A59E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3963",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100290",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2489",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-18",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious third-party can give a crafted \"ssh://...\" URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running \"git clone --recurse-submodules\" to trigger the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Un tercero malicioso puede proporcionar una URL \"ssh://...\" manipulada a una víctima desprevenida y un intento de visita a la URL puede resultar en que se ejecute cualquier programa que exista en la máquina de la víctima. Dicha URL podría colocarse en el archivo .gitmodules de un proyecto malicioso y una víctima desprevenida podría ser engañada para que ejecute \"git clone --recurse-submodules\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.5",
            "matchCriteriaId" : "84CB932E-3257-479A-B954-04E7FE3492AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9896397E-782E-4DFE-827F-B90B6B03180F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "724E4EFF-3852-4393-BA02-C539931086AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2029A919-F374-4BBD-9600-39CF3362FF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBFE569-7A79-4DA2-A0D5-692F8979586D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFB1D30-65A7-41AF-90EB-724DC43E863E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723F9CFF-5DF8-4C67-BB1B-8D466BFBBD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09AD7972-8B47-46B3-BA30-B231BEE61CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10D5AB3-4282-446D-BCA7-478E1E8BD023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7F6D0D-28C2-47FD-B558-AFD1EE62892C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498161A8-6E94-4B87-9501-A350832CE537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A07BE55-D467-49CE-8450-80033A620065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "584B9BC8-5780-467F-BEA8-4629179EF512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4ED0D4-8845-4D9B-8FDD-9C5B0669820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "498C3970-FD12-4DE7-8B29-F1A523411CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F564229-0A0E-4C3D-A78A-000DCB0160EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7595ECD-7BFD-4581-A995-FEE5E5217CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75D4CF-A398-4E01-829D-C940C6332B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A5029C-C798-4D78-B3B7-D05B58EEE9AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2EE715-5F6B-4418-B126-2B4479A6AACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F01B79C-94C3-4612-A75A-916B21A908C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "01432EC1-B91A-435C-A678-1095C1B05C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F15B4DD5-820D-4B20-8C05-63C29DBC442B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFD4F3-99A3-40A2-A479-F3B2EAAD5106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0CFE5D-8865-4D6A-A170-54C23BA3D29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F3C6A-2603-4B1B-9122-7B0E53EB0550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97E04C0-465C-4A2D-8FD5-FC75094E3736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "EB78402D-3DCA-48DE-838F-89C89361D8F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3C8084-7FEA-427C-9948-75DAC2914006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E8743E90-7C05-4656-B758-36052C926925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F79B3A03-B0A5-4A00-A7A8-332D8ACB3799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA24D16-84C8-4DF6-B4E1-288A3C991518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA9C323-AEAA-4A55-849B-B0E731709AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CAC635-62EE-49EC-A5AA-5B4D8A1C6AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "BB756061-0242-48DE-B784-0868703B1CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE21911-882D-4718-9808-05DDB50C9143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F34AACB-1089-47E1-9BA7-DFD80B716552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BF6D70-E21E-4E47-A41E-C063659A7786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDA604D-2901-4AF2-9411-80681B445F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EC96D3-BD11-4E2A-9E7B-276F4311EF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE0CA61-E0C2-432C-9095-DEDC2DDA32E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "2580E25C-EF78-4DAD-8EEB-E35BD584DD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C879263-ACFB-429C-A8ED-22CDE21AF993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "658946E0-1DC0-4911-B92A-167D5CD284AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF7CD32-A6BB-474A-A356-C2BFBBE9910A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6945B1B-75CF-42F5-A93E-D077CA1ED9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3A3F02-578A-4C96-B0A8-AED9204B8872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B08345-AE7F-4130-AD09-A5BA2F2C2F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FFDA48-13E9-4918-BA44-EE3BCF670B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.14.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7828B4-C9D5-4F30-B03E-1A2584F270DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE005D5-216B-4266-ABE4-265B66B65F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100283",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039131",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42599/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42599/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service"
      }, {
        "lang" : "es",
        "value" : "Akka HTTP en su versión 10.0.5 y anteriores tiene una vulnerabilidad en Illegal Media Range en Accept Header que causa un error de desbordamiento de pila que desemboca en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akka:http_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.5",
            "matchCriteriaId" : "261E47C6-0A53-448A-938D-3A3EBA66A9CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://doc.akka.io/docs/akka-http/10.0.6/security/2017-05-03-illegal-media-range-in-accept-header-causes-stackoverflowerror.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://doc.akka.io/docs/akka-http/10.0.6/security/2017-05-03-illegal-media-range-in-accept-header-causes-stackoverflowerror.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server."
      }, {
        "lang" : "es",
        "value" : "La build 412 de October CMS es vulnerable a la ejecución de código PHP en la funcionalidad de subida de archivos, lo que resulta en el compromiso del sitio y, probablemente, otras aplicaciones en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:1.0.412:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02967BBB-D1D7-4B34-B96C-4CC1147F0655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://octobercms.com/support/article/rn-8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://octobercms.com/support/article/rn-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter."
      }, {
        "lang" : "es",
        "value" : "[ERPNext][Frappe en versiones iguales o anteriores a la 7.1.27] Una vulnerabilidad de inyección SQL en frappe.share.get_users permite que usuarios autenticados remotos ejecuten comandos SQL arbitrarios mediante el parámetro fields."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.27",
            "matchCriteriaId" : "441CDA52-92DF-4748-B45D-B7147712A349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tech.mantz-it.com/2016/12/sql-injection-in-frappe-framework.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://tech.mantz-it.com/2016/12/sql-injection-in-frappe-framework.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:04.790",
      "lastModified" : "2025-10-22T00:16:00.823",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the \"gap\" between the stack and the binary."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en las distribuciones de Linux que no han parcheado sus kernels de largo mantenimiento con https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (confirmada el 14 de abril de 2015). Esta vulnerabilidad en los kernels se parcheó en abril de 2015 por el commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (aplicado a Linux 3.10.77 en mayo de 2015), pero no se reconoció como amenaza de seguridad. Con CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE habilitado y una estrategia vertical normal de asignación de direcciones, load_elf_binary() intentará mapear un binario PIE en un rango de direcciones inmediatamente inferior a mm->mmap_base. Por desgracia, load_elf_ binary() no tiene en cuenta la necesidad de asignar el suficiente espacio para todo el binario, lo que significa que, estando el primer segmento PT_LOAD está mapeado bajo mm->mmap_base, los siguientes segmentos PT_LOAD acaban mapeados sobre mm->mmap_base en el área que debería ser el \"hueco\" entre la pila y el binario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2024-09-09",
      "cisaActionDue" : "2024-09-30",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Linux Kernel PIE Stack Buffer Corruption Vulnerability ",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1C5E1D-21F5-46FA-89F6-A9B7E4BC94EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E5124-9EC1-4C73-997B-212D9DDC5949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3652270-3566-49BF-9235-EE041EF87E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE1DFBF-E5FF-42B1-B58C-34C94A8AB65F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CA16D1-B633-4E1A-A769-1587B4DFE09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D880E621-F60A-4EDB-B3A5-93411DDF0E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA91BDF-A89A-4EE1-AED9-9523B5C1DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444146DF-7ACE-4D4A-AA39-CD17D4ADDD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FE5EA8-A978-464D-89E1-1AD187C92D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9420109A-E62E-40F9-9B82-EF9D5431680C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:7.1406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A0A2BB-D332-428B-AE50-3A5EC0551C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:7.1503:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE32F8A2-B456-40CF-A6C0-27B8B9096A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:7.1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25459148-714C-4322-847A-FFF4D9B37EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centos:centos:7.1611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB71F04-DF1E-48CE-BC2F-3A6A47C025BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5A165C-3721-4A87-839F-BD4F6778DA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1F55A9-FAAF-4751-BA6A-93CDB31B11C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9045284A-C762-4913-B5AF-8499235F969C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905EC4D0-7604-476A-8176-9FFCEB1DC6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "564DCCFD-77BF-4FB1-A0A0-96104B154282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A831E-C63B-476F-A71F-8FB52556BC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FF61DF-D634-4FB5-8DF1-01F631BE1A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243980B8-4044-4776-B521-F9D709E68CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A7795D-CFD3-4643-A7A1-7AD7629B5511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266EA1B3-526F-4D12-873E-08CE3861AEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4DC974-235F-4655-966F-2490A4C4E490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99A2411-7F6A-457F-A7BF-EB13C630F902"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.25",
            "versionEndExcluding" : "3.2.70",
            "matchCriteriaId" : "64B31F8B-955E-437A-BD1C-8FDBC53CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.4.109",
            "matchCriteriaId" : "6548E1CE-CC24-4E01-A277-1424BE536777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5",
            "versionEndExcluding" : "3.10.77",
            "matchCriteriaId" : "F018224B-768E-407A-AEA6-5CEFAC65534C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.12.43",
            "matchCriteriaId" : "3677661A-9F24-4A1D-A66A-DF9330DF6DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "3.14.41",
            "matchCriteriaId" : "E439BE91-83E3-4795-9E2D-C174EE1B84F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.15",
            "versionEndExcluding" : "3.16.35",
            "matchCriteriaId" : "7DC4BA70-B111-4D2E-BC78-6601CED68F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.14",
            "matchCriteriaId" : "0BB16F9A-A3E5-4CAC-905D-F60426BBAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "3.19.7",
            "matchCriteriaId" : "25099C5E-E14E-44D4-8482-0F87E1A22572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0.2",
            "matchCriteriaId" : "AB190AE4-287F-40B5-AC62-0B1E50DBE00D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101010",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039434",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2793",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2795",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2796",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2797",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2798",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2799",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2800",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2801",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2802",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-1000253",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12728",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T01:29:05.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the context of the current system services."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de gestión incorrecta de privilegios en SpiderControl SCADA Web Server en versiones 2.02.0007 y anteriores. Los usuarios locales autenticados y no administradores pueden alterar los ejecutables del servicio con sus privilegios escalados, lo que podría permitir que un atacante ejecute código arbitrario en el contexto de los servicios del sistema actuales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidercontrol:scada_webserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.02.0007",
            "matchCriteriaId" : "6261CB37-89DE-482F-82E1-3B11F2F3A773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100668",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-250-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-250-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13993",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T01:29:05.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. This vulnerability does not affect the connected blood glucose monitor and would not impact delivery of therapy to the patient."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento o ruta de búsqueda no controlados en i-SENS SmartLog Diabetes Management Software en la versión 2.4.0 y anteriores. Se ha identificado una vulnerabilidad no controlada del elemento de ruta de acceso que de hecho podría explotarse colocando un archivo DLL especialmente manipulado en la ruta de búsqueda. Si el DLL malicioso se carga antes que el DLL válido, un atacante podría ejecutar código arbitrario en el sistema. Esta vulnerabilidad no afecta al monitor de glucosa en sangre conectado y no impacta en el tratamiento al paciente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-sens:smartlog_diabetes_management_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "236385AB-1254-41A1-B996-051893D6CB78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100659",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13995",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T01:29:05.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. The webserver does not properly authenticate users, which may allow a malicious attacker to access sensitive information such as HMI pages or modify PLC variables."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en iniNet Solutions iniNet Webserver en todas las versiones anteriores a la V2.02.0111. El servidor web no autentica correctamente a los usuarios, lo que podría permitir que un atacante malicioso acceda a información sensible como las páginas HMI o que modifiquen variables PLC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidercontrol:ininet_webserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.02.0000",
            "matchCriteriaId" : "24FF91D4-FA32-41D0-8B22-21BE1DA8B74B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100951",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14000",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T01:29:05.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en Ctek SkyRouter Series 4200 y 4400 en todas las versiones anteriores a la V6.00.11. Al acceder a una URL en concreto en el servidor web, un usuario malicioso es capaz de acceder a la aplicación sin autenticarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ctekproducts:skyrouter_z4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.00.05",
            "matchCriteriaId" : "3FF9C185-46DE-436C-8C31-6F118F8C04E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctekproducts:skyrouter_z4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8A4CA1-CDB5-4904-9C9F-624033621125"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ctekproducts:skyrouter_z4400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.00.05",
            "matchCriteriaId" : "AD4B1F7A-9486-44AC-ABC7-A978CF649509"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctekproducts:skyrouter_z4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EBA756-EE29-4C24-BEAA-5890FF7412F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100953",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-264-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:05.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en PDFDelegatesMessage en coders/pdf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/724",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:05.963",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en ReadEnhMetaFile en coders/emf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/725",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en ReadOneMNGImag en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/723",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c."
      }, {
        "lang" : "es",
        "value" : "LAME versiones 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 y 3.98 tiene una vulnerabilidad de sobrelectura de búfer basada en memoria dinámica (heap) al gestionar un archivo malformado en k_34_4 en vbrquantize.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273D17B6-6A7E-481F-9D74-2291D1A5F9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.98.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B02D92-F4A8-4DED-9F96-1886B4308C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.98.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3CCB2C-8CF4-426A-A463-E895566656A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB9E6A4-8E11-450C-9E6B-D163FE3BE738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7868941A-2AA5-408B-977D-B40F0149D40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF12FBD4-55FA-48C5-BEF2-716DC97D31ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB3E17A-D56A-4AD2-A79A-D63A86F9FF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8058DE3-84AA-4CD1-9DDC-6C54D81D29DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/lame/bugs/480/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/480/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call."
      }, {
        "lang" : "es",
        "value" : "LAME 3.99.5 tiene una desreferencia de puntero NULL en la función hip_decode_init en libmp3lame/mpglib_interface.c mediante un archivo mpg mal formado debido a una llamada calloc incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/lame/bugs/477/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/477/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "dwarf1.c en la biblioteca Binary File Descriptor (BFD) (también llamada libbfd), tal y como se distribuye en GNU Binutils 2.29, no gestiona correctamente los punteros. Esto permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, otro tipo de impacto sin especificar mediante un archivo ELF. Esto se relaciona con parse_die y parse_line_table, tal y como demuestra una sobrelectura de búfer basada en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-heap-based-buffer-overflow-in-parse_die-dwarf1-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22202",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=1da5c9a485f3dcac4c45e96ef4b7dae5948314b5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-heap-based-buffer-overflow-in-parse_die-dwarf1-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=1da5c9a485f3dcac4c45e96ef4b7dae5948314b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32."
      }, {
        "lang" : "es",
        "value" : "La función bfd_get_debug_link_info_1 en opncls.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29, permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basado en pila y cierre inesperado de la aplicación) mediante un archivo ELF manipulado, relacionado con bfd_getl32."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-heap-based-buffer-overflow-in-bfd_getl32-opncls-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22197",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=52b36c51e5bf6d7600fdc6ba115b170b0e78e31d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-heap-based-buffer-overflow-in-bfd_getl32-opncls-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=52b36c51e5bf6d7600fdc6ba115b170b0e78e31d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit."
      }, {
        "lang" : "es",
        "value" : "La función dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29, no valida el tipo de dato DW_AT_name, que permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL bfd_hash_hash o acceso fuera de límites y cierre inesperado de la aplicación) mediante un archivo ELF manipulado, relacionado con scan_unit_for_symbols y parse_comp_unit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-null-pointer-dereference-in-bfd_hash_hash-hash-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22201",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=11855d8a1f11b102a702ab76e95b22082cccf2f8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-null-pointer-dereference-in-bfd_hash_hash-hash-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=11855d8a1f11b102a702ab76e95b22082cccf2f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename."
      }, {
        "lang" : "es",
        "value" : "read_formatted_entries en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29, no valida correctamente el contador de formato, que permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo ELF manipulado, relacionado con concat_filename."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22200",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c361faae8d964db951b7100cada4dcdc983df1bf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c361faae8d964db951b7100cada4dcdc983df1bf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "find_abstract_instance_name en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29, permite que atacantes remotos provoquen una denegación de servicio (recursión infinita y cierre inesperado de la aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-infinite-loop-in-find_abstract_instance_name-dwarf2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=52a93b95ec0771c97e26f0bb28630a271a667bd2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-infinite-loop-in-find_abstract_instance_name-dwarf2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=52a93b95ec0771c97e26f0bb28630a271a667bd2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T01:29:06.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "decode_line_info en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29, permite que atacantes remotos provoquen una denegación de servicio (error de división entre cero y cierre inesperado de la aplicación) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-divide-by-zero-in-decode_line_info-dwarf2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22186",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d8010d3e75ec7194a4703774090b27486b742d48",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/03/binutils-divide-by-zero-in-decode_line_info-dwarf2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d8010d3e75ec7194a4703774090b27486b742d48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9628",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T01:29:06.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD firmware versions prior to 1.28.16 or 1.24.69. In certain circumstances, the device pads Ethernet frames with memory contents."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de divulgación de información en Saia Burgess Controls PCD Controllers con firmware PCD en versiones anteriores a 1.28.16 o 1.24.69. En algunas circunstancias, el dispositivo llena los frames Ethernet con contenido de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:saia_burgess_controls:pcd_controllers_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24.67",
            "matchCriteriaId" : "12EC27CC-70E2-43E4-A960-1DBEDC4F3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:saia_burgess_controls:pcd_controllers_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.28.11",
            "matchCriteriaId" : "27BF95F9-DD4E-4E4A-AE95-D9B5A76636F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:saia_burgess_controls:pcd_controllers:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32778BC6-7FA7-475A-8493-EC209CB1EBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100949",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12244",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service (DoS) condition because the Snort process restarts unexpectedly. The vulnerability is due to improper input validation of the fields in the IPv6 extension header packet. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to the detection engine on the targeted device. An exploit could allow the attacker to cause a DoS condition if the Snort process restarts and traffic inspection is bypassed or traffic is dropped. This vulnerability is specific to IPv6 traffic only. This vulnerability affects Cisco Firepower System Software Releases 6.0 and later when the software has one or more file action policies configured and is running on any of the following Cisco products: 3000 Series Industrial Security Appliances (ISR), Adaptive Security Appliance (ASA) 5500-X Series with FirePOWER Services, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances, Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower Threat Defense for Integrated Services Routers (ISRs), Firepower 2100 Series Security Appliances, Firepower 4100 Series Security Appliances, Firepower 9300 Series Security Appliances, Virtual Next-Generation Intrusion Prevention System (NGIPSv) for VMware. Cisco Bug IDs: CSCvd34776."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el análisis del motor de detección de paquetes IPv6 para Cisco Firepower System Software podría permitir que un atacante remoto no autenticado provoque un uso intensivo de la CPU o una denegación de servicio (DoS) debido a que el proceso Snort se reinicia de forma inesperada. Esta vulnerabilidad se debe a una validación incorrecta de las entradas de los campos en el paquete de cabeceras con extensión IPv6. Un atacante podría explotar esta vulnerabilidad enviando un paquete IPv6 malicioso al motor de detección del dispositivo objetivo. Un exploit podría permitir que el atacante provoque una condición DoS si el proceso Snort se reinicia y se omite o se anula la inspección de tráfico. Esta vulnerabilidad es específica solo para el tráfico IPv6. Esta vulnerabilidad afecta a las versiones 6.0 y siguientes de Cisco Firepower System Software cuando el software tiene configuradas una o más políticas de acción de archivo y se ejecuta sobre uno de los siguientes productos Cisco: 3000 Series Industrial Security Appliances (ISR), Adaptive Security Appliance (ASA) 5500-X Series con servicios FirePOWER, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) para redes, 7000 Series Appliances, Advanced Malware Protection (AMP) para redes, 8000 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower Threat Defense para routers de servicios integrados (ISR), Firepower 2100 Series Security Appliances, Firepower 4100 Series Security Appliances, Firepower 9300 Series Security Appliances, Virtual Next-Generation Intrusion Prevention System (NGIPSv) para VMware. Cisco Bug IDs: CSCvd34776."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E4035-E8E2-4964-A6F4-7292E1804E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF40DB44-C213-466E-B473-B07B30A42B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FD6283-CC58-4864-AA24-F6C6DDE630FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1AFAC1-419D-4ADB-868B-1544BED58B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D184D6D-D695-48D5-90E6-95185C1D397D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6614ED6C-E77E-4C0D-AA96-0BEE84BE2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F564C9-DE1F-413B-AECA-BA04024AD730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7EE32-7575-415D-BEC1-3C9C459AF650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEB9A40-0062-406D-B56D-3163CBBE08D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C748E1-1011-4DA3-B910-C4773DC18D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4A52EA-D464-4855-ABEC-FD98E0F3BD97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5233F7-5743-467C-9C59-F5C51B47184A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101119",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-fpsnort",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-fpsnort",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12245",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory, aka a Firepower Detection Engine SSL Decryption Memory Consumption Denial of Service vulnerability. If this memory leak persists over time, a denial of service (DoS) condition could develop because traffic can cease to be forwarded through the device. The vulnerability is due to an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and notifications to and from the Adaptive Security Appliance (ASA) handler. An attacker could exploit this vulnerability by sending a steady stream of malicious Secure Sockets Layer (SSL) traffic through the device. An exploit could allow the attacker to cause a DoS condition when the device runs low on system memory. This vulnerability affects Cisco Firepower Threat Defense (FTD) Software Releases 6.0.1 and later, running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Firepower 2100 Series Security Appliances, Firepower 4100 Series Security Appliances, Firepower 9300 Series Security Appliances. Cisco Bug IDs: CSCve02069."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el descifrado de tráfico SSL para Cisco Firepower Threat Defense (FTD) Software podría permitir que un atacante remoto no autenticado provoque el vaciado de la memoria del sistema. Esto también se conoce como Firepower Detection Engine SSL Decryption Memory Consumption Denial of Service vulnerability. Si este filtrado de memoria se mantiene durante mucho tiempo, se podría provocar una denegación de servicio (DoS), ya que el tráfico podría dejar de ser reenviado a través del dispositivo. La vulnerabilidad se debe a un error en la forma en que Firepower Detection Snort Engine gestiona el descifrado del tráfico SSL y las notificaciones a y desde el controlador Adaptive Security Appliance (ASA). Un atacante podría explotar esta vulnerabilidad enviando un flujo constante de tráfico SSL (Secure Sockets Layer) a través del dispositivo. Un exploit podría permitir que el atacante provocase una condición DoS cuando el dispositivo se ejecuta con poca memoria del sistema. Esta vulnerabilidad afecta a las versiones 6.0.1 y siguientes de Cisco Firepower Threat Defense (FTD) Software que se ejecuten en cualquiera de estos productos Cisco: Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Firepower 2100 Series Security Appliances, Firepower 4100 Series Security Appliances, Firepower 9300 Series Security Appliances. Cisco Bug IDs: CSCve02069."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1AFAC1-419D-4ADB-868B-1544BED58B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D184D6D-D695-48D5-90E6-95185C1D397D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6614ED6C-E77E-4C0D-AA96-0BEE84BE2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F564C9-DE1F-413B-AECA-BA04024AD730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7EE32-7575-415D-BEC1-3C9C459AF650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEB9A40-0062-406D-B56D-3163CBBE08D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C748E1-1011-4DA3-B910-C4773DC18D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4A52EA-D464-4855-ABEC-FD98E0F3BD97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5233F7-5743-467C-9C59-F5C51B47184A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101118",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ftd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ftd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12246",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to the local IP address of an affected device. A successful exploit could allow the attacker to cause the affected device to reload. This vulnerability affects Cisco Adaptive Security Appliance (ASA) Software that is running on the following Cisco products: ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, ASA 1000V Cloud Firewall, Adaptive Security Virtual Appliance (ASAv), Firepower 4110 Security Appliance, Firepower 9300 ASA Security Module, ISA 3000 Industrial Security Appliance. Cisco Bug IDs: CSCvd59063."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la característica de autenticación directa en Cisco Adaptive Security Appliance (ASA) Software podría permitir que un atacante remoto no autenticado provoque un reinicioinesperado de un dispositivo afectado, lo que resultaría en una denegación de servicio (DoS). Esta vulnerabilidad se debe a la incompleta validación de entrada de la cabecera HTTP. Un atacante podría explotar la vulnerabilidad mediante el envío de de una petición HTTP manipulada a la dirección IP local de un dispositivo afectado. Con el exploit correcto, el atacante podría provocar el reinicio del dispositivo afectado. Esta vulnerabilidad afecta a las versiones de Cisco Adaptive Security Appliance (ASA) Software que se ejecutan en los siguientes productos de Cisco: ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module para Cisco Catalyst 6500 Series Switches y Cisco 7600 Series Routers, ASA 1000V Cloud Firewall, Adaptive Security Virtual Appliance (ASAv), Firepower 4110 Security Appliance, Firepower 9300 ASA Security Module, ISA 3000 Industrial Security Appliance. Cisco Bug IDs: CSCvd59063."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9591D44C-CE04-423F-9916-7B9D97CEC952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC899A70-483D-4BC0-9950-8EEE521EECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8\\(0.56\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE568B84-42ED-47FA-A6FD-ABDA190EB2A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101165",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039503",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-asa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-asa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12256",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device. The vulnerability is due to certain file-handling inefficiencies of the affected system. An attacker could exploit this vulnerability by directing client systems to access a corrupted file that the client systems cannot decompress correctly. A successful exploit could allow the attacker to cause the affected device to crash or hang unexpectedly and result in a DoS condition that may require manual intervention to regain normal operating conditions. Cisco Bug IDs: CSCve82472."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica Akamai Connect de Cisco Wide Area Application Services (WAAS) Appliances podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad se debe a ciertas ineficiencias a la hora de gestionar archivos del sistema afectado. Un atacante podría explotar esta vulnerabilidad haciendo que los sistemas cliente accedan a un archivo corrupto que los sistemas cliente no pueden descomprimir correctamente. Con el exploit adecuado, el atacante podría provocar que el dispositivo afectado se cierre o se bloquee inesperadamente. Esto conduciría a una condición DoS que podría necesitar de una intervención manual para recuperar las condiciones normales de operatividad. Cisco Bug IDs: CSCve82472."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C3321F-C785-42BA-BD47-4CEFF29DA014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101180",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12257",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve96608."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Cisco WebEx Meetings Server podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que entre a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Si se explota esta vulnerabilidad con éxito, el atacante podría ejecutar código de script arbitrario en el contexto de la interfaz web afectada o permitir que el atacante pueda acceder a información confidencial del navegador. Cisco Bug IDs: CSCve96608."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE5F3F6-C7AE-4384-B58D-F0506719E35C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101167",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-wms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-wms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12258",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames (iframes). An attacker could exploit this vulnerability by directing a user of the affected software to an attacker-controlled web page that contains a malicious HTML inline frame. A successful exploit could allow the attacker to conduct click-jacking or other types of client-side browser attacks. Cisco Bug IDs: CSCve60993."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de usuario de Cisco Unified Communications Manager podría permitir que un atacante remoto no autenticado ejecute un ataque de Cross-Frame Scripting (XFS). La vulnerabilidad existe debido a que el software afectado no proporciona suficientes medidas de protección para los frames inline de HTML (iframes). Un atacante podría explotar esta vulnerabilidad dirigiendo a un usuario del software afectado a una página web controlada por el atacante que contenga un frame inline de HTML malicioso. Con el exploit adecuado, el atacante podría llevar a cabo un ataque de clic-jacking u otro tipo de ataques al navegador del cliente. Cisco Bug IDs: CSCve60993."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395232C7-93D5-4877-A726-32E5BAFAF812"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101172",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039505",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12263",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. An exploit could allow the attacker to view application files that may contain sensitive information. Cisco Bug IDs: CSCvd83577."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web del software Cisco License Manager podría permitir que un atacante remoto no autenticado descargue y visualice archivos en la aplicación que deberían estar restringidos. Esto también se conoce como salto de directorios. Este problema se debe a la incorrecta sanitización de las entradas proporcionadas por el usuario en parámetros de peticiones HTTP que describen nombres de archivo. Un atacante podría explotar esta vulnerabilidad empleando técnicas de salto de directorio para enviar una ruta a la localización de archivo que prefiera. Un exploit podría permitir que el atacante visualizase archivos de aplicación que pueden contener información sensible. Cisco Bug IDs: CSCvd83577."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:license_manager:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66B88B7-BE46-4E33-B3C8-2F1AAD2715F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101169",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-clm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-clm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12264",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient bound checks performed by the affected software. An attacker could exploit this vulnerability by sending a malicious HTTP packet to the affected system. A successful exploit could allow the attacker to cause a reload of the Web Admin Server. Cisco Bug IDs: CSCve89149."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administrador web de Cisco Meeting Server podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS). Esta vulnerabilidad también se debe a la insuficiente comprobación de límites por parte del software afectado. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete HTTP malicioso al sistema afectado. Con el exploit adecuado, el atacante podría provocar el reinicio de la interfaz de administrador web. Cisco Bug IDs: CSCve89149."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E079EB0-0218-468B-9F92-82758756188E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101148",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039506",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12265",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka HREF XSS. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. The vulnerability exists in the Cisco Adaptive Security Appliance (ASA) Software when the WEBVPN feature is enabled. Cisco Bug IDs: CSCve91068."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Adaptive Security Appliance (ASA) podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado. Esto también se conoce como HREF XSS. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Con el exploit adecuado, el atacante podría ejecutar código de script arbitrario en el contexto de la interfaz o permitir que el atacante pueda acceder a información sensible del navegador. La vulnerabilidad existe en Cisco Adaptive Security Appliance (ASA) Software cuando la característica WEBVPN está habilitada. Cisco Bug IDs: CSCve91068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34931C89-BF35-4DC2-9838-3C145575ECDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101170",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039502",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-asa1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-asa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12266",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL files before they are loaded. An attacker could exploit this vulnerability by installing a crafted DLL file in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to those of Cisco Meeting App. The attacker would need valid user credentials to exploit this vulnerability. Cisco Bug IDs: CSCvd77907."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la rutina que carga archivos DLL en Cisco Meeting App para Windows podría permitir que un atacante local autenticado ejecute un archivo ejecutable con privilegios equivalentes a los de Cisco Meeting App. La vulnerabilidad se debe a una validación incompleta de la entrada del nombre de ruta para archivos DLL antes de que se carguen. Un atacante podría explotar esta vulnerabilidad instalando un archivo DLL manipulado en un directorio del sistema específico. Con el exploit adecuado, el atacante podría ejecutar comandos en el host de Microsoft Windows subyacente con privilegios equivalentes a los de Cisco Meeting App. El atacante necesitaría credenciales de usuario válidas para explotar esta vulnerabilidad. Cisco Bug IDs: CSCvd77907."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_app:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38FC7D4-0DC6-44E6-A272-A97816C4AE1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101158",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cma",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cma",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12267",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an ICA application optimization-related process to restart, resulting in a partial denial of service (DoS) condition. The vulnerability is due to improperly aborting a connection when an unexpected protocol packet is received. An attacker could exploit this vulnerability by sending a crafted ICA traffic through the targeted device. A successful exploit could allow the attacker to cause a DoS condition that is due to a process unexpectedly restarting. The Cisco WAAS could drop ICA traffic while the process is restarting. This vulnerability affects Cisco Wide Area Application Services (WAAS) and Cisco Virtual Wide Area Application Services (vWAAS). Cisco Bug IDs: CSCve74457."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de aceleración de ICA (Independent Computing Architecture) para WAAS (Wide Area Application Services) de Cisco podría permitir que un atacante remoto no autenticado provoque que un proceso relacionado con la optimización de una aplicación ICA se reinicie, generando una denegación de servicio (DoS) parcial en consecuencia. La vulnerabilidad se debe a una cancelación incorrecta de una conexión cuando se recibe un paquete de protocolo no esperado. Un atacante podría explotar esta vulnerabilidad mediante el envío de un tráfico ICA manipulado a través del dispositivo objetivo. Una explotación con éxito podría permitir que el atacante cause una denegación de servicio provocada por el reinicio inesperado de un proceso. Los WAAS de Cisco podrían sufrir una caída del tráfico ICA mientras se reinicia el proceso. La vulnerabilidad afecta a WAAS (Wide Area Application Services) y vWAAS (Virtual Wide Area Application Services). Cisco Bug IDs: CSCve74457."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtual_wide_area_application_services:6.2\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF892160-8D27-49E4-9B57-9D9D4C209AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:6.2\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D019E94-056D-479E-9C72-667B46893B3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101176",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12268",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple network adapters, aka a Dual-Homed Interface vulnerability. The vulnerability is due to insufficient NAM policy enforcement. An attacker could exploit this vulnerability by manipulating network interfaces of the device to allow multiple active network interfaces. A successful exploit could allow the attacker to send traffic over a non-authorized network interface. Cisco Bug IDs: CSCvf66539."
      }, {
        "lang" : "es",
        "value" : "Un vulnerabilidad en el NAM (Network Access Manager) de Cisco AnyConnect Secure Mobility Client podría permitir que un atacante local autenticado habilite múltiples adaptadores de red. Esta vulnerabilidad también se conoce como \"Dual-Home Interface Vulnerability\". Esta vulnerabilidad se debe a la falta de mecanismos suficientes para el cumplimiento de políticas NAM. Un atacante podría explotar esta vulnerabilidad manipulando las interfaces de red del dispositivo para permitir que haya varias activas al mismo tiempo. Una explotación con éxito podría permitir que el atacante envíe tráfico a través de una interfaz de red que no está autorizada. Cisco Bug IDs: CSCvf66539."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\\(822\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1DAD51-466B-4D98-8A77-5E29BD30A3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101157",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039507",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-anam",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-anam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12269",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this vulnerability by injecting XSS content into the web UI of the affected software. A successful exploit could allow the attacker to force a user to execute code of the attacker's choosing or allow the attacker to retrieve sensitive information from the user. Cisco Bug IDs: CSCvf70587, CSCvf70592."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en la interfaz de usuario web de Cisco Spark Messaging Software que podría permitir que un atacante remoto autenticado realice un ataque de Cross-Site Scripting (XSS) persistente Esta vulnerabilidad se debe a que los mecanismos de validación de entradas de la interfaz de usuario web del software afectado son insuficientes. Un atacante podría explotar esta vulnerabilidad inyectando contenidos XSS en la interfaz de usuario web del software afectado. Una explotación con éxito podría permitir que el atacante fuerce a un usuario para que ejecute código de la elección del atacante o que el atacante recupere información sensible del usuario. Cisco Bug IDs: CSCvf70587, CSCvf70592."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:spark:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA6299B-601E-4D25-A402-7F2AC8C2AB84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101150",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-sprk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-sprk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12270",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-05T07:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the emsd service stops. The vulnerability is due to the software's inability to process HTTP/2 packets. An attacker could exploit this vulnerability by sending a malformed HTTP/2 frame to the affected device. A successful exploit could allow the attacker to create a DoS condition when the emsd service stops. Cisco Bug IDs: CSCvb99388."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código gRPC de Cisco IOS XR Software para los routers Network Convergence System (NCS) de la serie 5500 de Cisco podría permitir que un atacante remoto no autenticado provoque una denegación de servicio (DoS) cuando el servicio emsd se detiene. Esta vulnerabilidad se debe a que el software no es capaz de procesar paquetes HTTP/2. Un atacante podría explotar esta vulnerabilidad enviando un frame HTTP/2 mal formado al dispositivo afectado. Una explotación con éxito podría permitir que el atacante provoque una denegación de servicio cuando el servicio emsd se detenga. Cisco Bug IDs: CSCvb99388."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92587AA0-BDB6-4594-8F14-DC2A91FA4CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101171",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039504",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ncs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ncs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T07:29:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-2 tiene una vulnerabilidad de fuga de memoria en ReadYCBCRImage en coders/ycbcr.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/241988ca28139ad970c1d9717c419f41e360ddb0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/241988ca28139ad970c1d9717c419f41e360ddb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T07:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-2 tiene una vulnerabilidad de fuga de memoria en ReadYUVImage in coders/yuv.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/ef8f40689ac452398026c07da41656a7c87e4683",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/ef8f40689ac452398026c07da41656a7c87e4683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T07:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash)."
      }, {
        "lang" : "es",
        "value" : "EmTec PyroBatchFTP en versiones anteriores a la 3.18 permite que los servidores remotos provoquen una denegación de servicio (cierre inesperado de la aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emtec:pyrobatchftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.17",
            "matchCriteriaId" : "2DBD3140-BE77-4C1E-8AA3-02CC76DC906F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.7elements.co.uk/resources/technical-advisories/pyrobatchftp-buffer-overflow-seh-overwrite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.emtec.com/downloads/pyrobatchftp/pyrobatchftp318_changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42962/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.7elements.co.uk/resources/technical-advisories/pyrobatchftp-buffer-overflow-seh-overwrite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.emtec.com/downloads/pyrobatchftp/pyrobatchftp318_changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42962/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T07:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p->t_name strings to lack a final '\\0' character."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD hasta la versión 11.1, la función smb_strdupin en sys/netsmb/smb_subr.c tiene una condición de carrera con una lectura fuera de límites porque puede hace que les falten el carácter \"\\0\" a las cadenas t2p->t_name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1",
            "matchCriteriaId" : "AC86D315-0ED7-406A-8B21-FB83CDD1157C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222687",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://svnweb.freebsd.org/base?view=revision&revision=324102",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://svnweb.freebsd.org/base?view=revision&revision=324102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14353",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-05T15:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución remota de código en HP UCMDB Foundation Software en sus versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32 y 10.33 que podrían explotarse de forma remota para permitir la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1125157-FC5F-4F07-81A7-D2AD2B7957AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF124634-2A30-4B07-A33E-BB4FDBC4E9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78860693-A83D-401F-9517-C60D9097AE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2717F1C2-8E27-4181-B5C0-6D3932EDBDF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CB4F73-6839-4370-A49E-E08D0D604947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBABCE4D-D4D7-46FD-8244-5FD65D61C558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1718D3-3166-4523-A2FF-4B9D9EF0F589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A7BB86-AB7E-413E-B263-D28A8D978293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CF09FB-4AE6-4780-A08E-41317BD47700"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101251",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02977984",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/53150",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-32",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02977984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/53150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14354",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-05T15:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) remoto en HP UCMDB Foundation Software en sus versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32 y 10.33, que podrían explotarse de forma remota para permitir que se realicen ataques de Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1125157-FC5F-4F07-81A7-D2AD2B7957AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF124634-2A30-4B07-A33E-BB4FDBC4E9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78860693-A83D-401F-9517-C60D9097AE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2717F1C2-8E27-4181-B5C0-6D3932EDBDF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CB4F73-6839-4370-A49E-E08D0D604947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBABCE4D-D4D7-46FD-8244-5FD65D61C558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1718D3-3166-4523-A2FF-4B9D9EF0F589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A7BB86-AB7E-413E-B263-D28A8D978293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_foundation_software:10.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CF09FB-4AE6-4780-A08E-41317BD47700"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101254",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02977984",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/53150",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-32",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02977984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/53150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1201",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-05T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) almacena credenciales de usuario en texto claro, lo que hace que cualquier usuario local las pueda leer. IBM X-Force ID: 123676."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_security_compliance_analytics:1.9.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856DDF50-8334-4F35-9629-473B9876297D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008114",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123676",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1301",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-05T17:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect 7.1 y 8.1 podría permitir que un atacante local realice un ataque symlink. IBM Spectrum Protect Backup-archive Client crea archivos temporales de manera no segura. Un atacante local podría explotar esta vulnerabilidad creando un enlace simbólico de un archivo temporal a varios archivos del sistema, lo que podría permitir que el atacante sobrescriba archivos arbitrarios en el sistema con privilegios elevados. IBM X-Force ID: 125163."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11F79C4-D61F-481B-9BDC-ADEDE1494AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3F3288-4280-43DA-B6E4-8240137105AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10524DD7-E9F2-498C-93F1-54F2C47AAEBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863D87DB-64FD-4C97-9CAD-48ED2A298FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295AD957-904D-4917-BCDD-27E5E4AD9E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7DA554-D2AE-45FF-AEB9-551F9AD9C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05C02E3-24CC-496C-912E-951A1541F7AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45172E20-5E12-435E-815F-D543C9B6BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9625017C-311D-423A-BFF8-AEB4CE7766FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3538EBB1-A960-4CE7-B07D-17CAFF9F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A53C1A-0B43-4EB8-B489-742AAD1D4379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92592FF3-70F2-4C48-A2A0-C5C8E8DCC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A543F-FD79-42C8-9DAF-2DD549926DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A018347-E8E9-4CCC-B118-247D9064D768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D406098E-B724-4E5F-8B47-60B4FAE1B6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3707B2DD-1855-4094-B0B5-C1204EBB221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122C35D5-BF80-4DE4-861D-C7D6D4D56777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581F420E-BBA2-4302-B8A1-ED8BFE78155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CE2C13-53F7-4A4D-9DDC-0E00B0263858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEFCB76-C69E-4168-9A2E-A258B7E44F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7687A0AB-E864-4E23-8A5F-54AD38A69B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35C20CF-CB82-46D7-A4D0-FFD277B7ECB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27F038-ADB0-4052-8264-C0816194DB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8E5AD5-EDF3-432E-A7F8-0D3E9ED91033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9340DA0-29B3-4173-B2FB-F5FC5E99AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC9CE1A-7416-4F41-8699-693C161D8EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F85BEAE-8583-4499-A06D-741C7528DFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8092D853-0E6D-4104-B85B-92132D925DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD1F7B4-13EF-4CE4-807E-95249EAA3C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF714DF6-15DF-4BFD-A4F9-E9E9E333CFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069216F4-33F0-404C-8D39-B9D07F9CB4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAF55EE-E8B0-4715-B350-1A359B58AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906D67F5-DEC8-464D-BC4D-BAF223E72C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A60ADB-D0D9-413D-96A7-4BFDF494CC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B26BB-0A19-41EB-811C-04C765374E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1..5.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C934CA2-8606-479E-AA9F-AB70E7BB30FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CF0089-B81D-4738-85AC-E728DF77FBAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF39AAEE-2FC3-4ACC-AEF7-6E12EEEF0BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71F01C8-C1BB-4E93-8AE8-A1B5131310B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59C16BD-1CB8-47BB-8352-B1609798BB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3B365E-0505-4A43-90A6-811D39BB6262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B880E34D-A9B4-4A64-B734-71ADC0588761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A07C8F-4DD0-4767-8A8F-A1721EBDE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D972077-A132-430D-97E6-8F0F8B0F79B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC78448-7AD8-438B-8AFC-79B31FB706D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B578C6-A29A-41B6-A9B6-F7A08D9BE34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC3FEDA-B353-4C31-A349-1A12F4FAF465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8CA94D1-06FB-4C94-83FB-2BC52676BBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302756E5-F3E8-4F5E-90EA-A81A88DB55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92EDDEE-1135-4EE7-972E-19471352E0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C980FE7-8B2D-4ED4-A5BF-78615AD0F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD269C39-1070-44C3-B7FC-968C12A344E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AACC13-50CF-4229-B204-E30523A38721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC65208-F124-4D28-B5D8-3A3C774C82A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E782420B-2A62-4537-88EB-1169C73AC21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998D4B2B-7563-4885-994F-D9F56D62F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE445AF2-0110-4BC0-B123-CC4C24F974B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6D9FD2-9DD0-40E1-AD3D-A5ACBF7601DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C818A4D8-7F9C-417C-BA94-14F5A8692C1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006248",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101107",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125163",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1339",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-05T17:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247."
      }, {
        "lang" : "es",
        "value" : "El servidor de IBM Spectrum Protect 7.1 y 8.1 (anteriormente Tivoli Storage Manager) utiliza un cifrado de contraseña débil. Un administrador de la base de datos podría descifrar la contraseña del cliente o administrador de IBM Spectrum Protect, pudiendo provocar que se divulgue información o una denegación de servicio (DoS). IBM X-Force ID: 126247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11F79C4-D61F-481B-9BDC-ADEDE1494AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3F3288-4280-43DA-B6E4-8240137105AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10524DD7-E9F2-498C-93F1-54F2C47AAEBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863D87DB-64FD-4C97-9CAD-48ED2A298FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295AD957-904D-4917-BCDD-27E5E4AD9E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7DA554-D2AE-45FF-AEB9-551F9AD9C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05C02E3-24CC-496C-912E-951A1541F7AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45172E20-5E12-435E-815F-D543C9B6BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9625017C-311D-423A-BFF8-AEB4CE7766FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3538EBB1-A960-4CE7-B07D-17CAFF9F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A53C1A-0B43-4EB8-B489-742AAD1D4379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92592FF3-70F2-4C48-A2A0-C5C8E8DCC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A543F-FD79-42C8-9DAF-2DD549926DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A018347-E8E9-4CCC-B118-247D9064D768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D406098E-B724-4E5F-8B47-60B4FAE1B6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3707B2DD-1855-4094-B0B5-C1204EBB221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122C35D5-BF80-4DE4-861D-C7D6D4D56777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581F420E-BBA2-4302-B8A1-ED8BFE78155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CE2C13-53F7-4A4D-9DDC-0E00B0263858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEFCB76-C69E-4168-9A2E-A258B7E44F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7687A0AB-E864-4E23-8A5F-54AD38A69B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35C20CF-CB82-46D7-A4D0-FFD277B7ECB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27F038-ADB0-4052-8264-C0816194DB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8E5AD5-EDF3-432E-A7F8-0D3E9ED91033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9340DA0-29B3-4173-B2FB-F5FC5E99AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC9CE1A-7416-4F41-8699-693C161D8EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F85BEAE-8583-4499-A06D-741C7528DFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8092D853-0E6D-4104-B85B-92132D925DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD1F7B4-13EF-4CE4-807E-95249EAA3C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF714DF6-15DF-4BFD-A4F9-E9E9E333CFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069216F4-33F0-404C-8D39-B9D07F9CB4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAF55EE-E8B0-4715-B350-1A359B58AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906D67F5-DEC8-464D-BC4D-BAF223E72C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A60ADB-D0D9-413D-96A7-4BFDF494CC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B26BB-0A19-41EB-811C-04C765374E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1..5.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C934CA2-8606-479E-AA9F-AB70E7BB30FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CF0089-B81D-4738-85AC-E728DF77FBAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF39AAEE-2FC3-4ACC-AEF7-6E12EEEF0BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71F01C8-C1BB-4E93-8AE8-A1B5131310B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59C16BD-1CB8-47BB-8352-B1609798BB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3B365E-0505-4A43-90A6-811D39BB6262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B880E34D-A9B4-4A64-B734-71ADC0588761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A07C8F-4DD0-4767-8A8F-A1721EBDE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D972077-A132-430D-97E6-8F0F8B0F79B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC78448-7AD8-438B-8AFC-79B31FB706D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B578C6-A29A-41B6-A9B6-F7A08D9BE34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC3FEDA-B353-4C31-A349-1A12F4FAF465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8CA94D1-06FB-4C94-83FB-2BC52676BBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302756E5-F3E8-4F5E-90EA-A81A88DB55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92EDDEE-1135-4EE7-972E-19471352E0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C980FE7-8B2D-4ED4-A5BF-78615AD0F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD269C39-1070-44C3-B7FC-968C12A344E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AACC13-50CF-4229-B204-E30523A38721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC65208-F124-4D28-B5D8-3A3C774C82A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E782420B-2A62-4537-88EB-1169C73AC21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998D4B2B-7563-4885-994F-D9F56D62F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EBEBA-70E1-4089-A064-6BBFAD50D1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.7.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4717F07E-B1B0-4F90-9ECF-DD08E3E94D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.7.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B7B79B-C85C-4CF6-BBBF-DB00D857BC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6D9FD2-9DD0-40E1-AD3D-A5ACBF7601DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB2B65F-A847-47E9-85D9-C42EC7F7F901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0587F4BC-4B77-42A1-BA13-296C6CD41355"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007936",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101113",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039498",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126247",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1378",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-05T17:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect 7.1 y 8.1 (anteriormente Tivoli Storage Manager) revela las credenciales sin cifrar de inicio de sesión de Vmware vCenter en la salida de la traza de la aplicación, las cuales las puede obtener un usuario local. IBM X-Force ID: 126875."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11F79C4-D61F-481B-9BDC-ADEDE1494AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3F3288-4280-43DA-B6E4-8240137105AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10524DD7-E9F2-498C-93F1-54F2C47AAEBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863D87DB-64FD-4C97-9CAD-48ED2A298FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295AD957-904D-4917-BCDD-27E5E4AD9E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7DA554-D2AE-45FF-AEB9-551F9AD9C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05C02E3-24CC-496C-912E-951A1541F7AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45172E20-5E12-435E-815F-D543C9B6BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9625017C-311D-423A-BFF8-AEB4CE7766FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3538EBB1-A960-4CE7-B07D-17CAFF9F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A53C1A-0B43-4EB8-B489-742AAD1D4379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92592FF3-70F2-4C48-A2A0-C5C8E8DCC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A543F-FD79-42C8-9DAF-2DD549926DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A018347-E8E9-4CCC-B118-247D9064D768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D406098E-B724-4E5F-8B47-60B4FAE1B6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3707B2DD-1855-4094-B0B5-C1204EBB221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122C35D5-BF80-4DE4-861D-C7D6D4D56777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581F420E-BBA2-4302-B8A1-ED8BFE78155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CE2C13-53F7-4A4D-9DDC-0E00B0263858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEFCB76-C69E-4168-9A2E-A258B7E44F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7687A0AB-E864-4E23-8A5F-54AD38A69B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35C20CF-CB82-46D7-A4D0-FFD277B7ECB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B27F038-ADB0-4052-8264-C0816194DB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8E5AD5-EDF3-432E-A7F8-0D3E9ED91033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9340DA0-29B3-4173-B2FB-F5FC5E99AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC9CE1A-7416-4F41-8699-693C161D8EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F85BEAE-8583-4499-A06D-741C7528DFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8092D853-0E6D-4104-B85B-92132D925DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD1F7B4-13EF-4CE4-807E-95249EAA3C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF714DF6-15DF-4BFD-A4F9-E9E9E333CFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069216F4-33F0-404C-8D39-B9D07F9CB4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAF55EE-E8B0-4715-B350-1A359B58AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906D67F5-DEC8-464D-BC4D-BAF223E72C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A60ADB-D0D9-413D-96A7-4BFDF494CC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B26BB-0A19-41EB-811C-04C765374E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1..5.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C934CA2-8606-479E-AA9F-AB70E7BB30FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CF0089-B81D-4738-85AC-E728DF77FBAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF39AAEE-2FC3-4ACC-AEF7-6E12EEEF0BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71F01C8-C1BB-4E93-8AE8-A1B5131310B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59C16BD-1CB8-47BB-8352-B1609798BB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3B365E-0505-4A43-90A6-811D39BB6262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B880E34D-A9B4-4A64-B734-71ADC0588761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A07C8F-4DD0-4767-8A8F-A1721EBDE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D972077-A132-430D-97E6-8F0F8B0F79B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC78448-7AD8-438B-8AFC-79B31FB706D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3B578C6-A29A-41B6-A9B6-F7A08D9BE34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC3FEDA-B353-4C31-A349-1A12F4FAF465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8CA94D1-06FB-4C94-83FB-2BC52676BBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302756E5-F3E8-4F5E-90EA-A81A88DB55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92EDDEE-1135-4EE7-972E-19471352E0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C980FE7-8B2D-4ED4-A5BF-78615AD0F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD269C39-1070-44C3-B7FC-968C12A344E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AACC13-50CF-4229-B204-E30523A38721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC65208-F124-4D28-B5D8-3A3C774C82A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E782420B-2A62-4537-88EB-1169C73AC21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998D4B2B-7563-4885-994F-D9F56D62F888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AE11FE-5D3C-4103-B756-254BBB744C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6D9FD2-9DD0-40E1-AD3D-A5ACBF7601DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C818A4D8-7F9C-417C-BA94-14F5A8692C1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006215",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126875",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1522",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-05T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129832."
      }, {
        "lang" : "es",
        "value" : "IBM Content Navigator CMIS, en sus versiones 2.0.3, 3.0.0 y 3.0.1, es vulnerable a ataques Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 129832."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:2.0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA906C7B-FD7E-4F7B-AFB8-645EBCB3AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC6DC-5F0D-46E8-85F9-BC9EA5244D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018B5713-4F70-4AE5-8AE3-CDFC0789F56B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008162",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129832",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12106",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-10-05T19:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria en la funcionalidad de análisis sintáctico de archivos TGA de Computerinsel Photoline 20.02. Un archivo .TGA especialmente manipulado podría provocar una escritura fuera de límites, desembocando en una posible ejecución de código. Un atacante puede enviar un archivo .TGA específico para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pl32:photoline:20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60D6566-A566-4FC8-BEA9-7EFC7E8721A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101189",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0458",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2880",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-10-05T19:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria en la funcionalidad de análisis sintáctico de los archivos .gif en la versión 20.02 de Computerinsel Photoline. Un archivo .gif especialmente manipulado puede provocar una vulnerabilidad que podría dar lugar a la ejecución de código. Un atacante puede enviar un archivo .gif específico para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pl32:photoline:20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60D6566-A566-4FC8-BEA9-7EFC7E8721A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101188",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2920",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-10-05T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la funcionalidad de análisis sintáctico de etiquetas de LibOFX 0.9.11. Un archivo OFX especialmente manipulado puede provocar una escritura fuera de límites que dé lugar a un desbordamiento de búfer en la pila. Un atacante puede crear un archivo OFX malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pl32:photoline:20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60D6566-A566-4FC8-BEA9-7EFC7E8721A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101186",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/libofx/libofx/commit/a70934eea95c76a7737b83773bffe8738935082d",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-26",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0427",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/libofx/libofx/commit/a70934eea95c76a7737b83773bffe8738935082d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12732",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T21:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en GE CIMPLICITY en versiones 1.6.30.144 y anteriores. Un función lee un paquete para indicar la longitud del siguiente paquete. Dicha longitud no se verifica, permitiendo que se sobrescriba el búfer provocando una ejecución remota de código arbitrario en consecuencia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\\/scada_cimplicity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "B564FF18-1D4F-4891-86D2-BEF68550B5B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101174",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-278-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-278-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13992",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T21:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad relacionada con una entropía insuficiente en las versiones anteriores a 6.2.0 de LOYTEC LVIS-3ME. La aplicación no genera números lo suficientemente aleatorios para el mecanismo de autenticación de la interfaz web, lo que puede permitir que se ejecute código de manera remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:loytec:lvis-3me_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "1420D89A-7473-467E-92D5-5B338A3F124A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:loytec:lvis-3me:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB324A4A-8D41-41AE-A7E0-92A8A8ABD0E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13994",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T21:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de Cross-Site Scripting en las versiones anteriores a 6.2.0 de LOYTEC LVIS-3ME. La interfaz web carece de un esquema de validación de peticiones web correcto, lo que puede permitir que se produzcan ataques de Cross-Site Scripting (XSS) si se engaña a un usuario autenticado de la interfaz web para que acceda a un enlace malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:loytec:lvis-3me_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "1420D89A-7473-467E-92D5-5B338A3F124A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:loytec:lvis-3me:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB324A4A-8D41-41AE-A7E0-92A8A8ABD0E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13996",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T21:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de salto de directorio relativo en las versiones anteriores a 6.2.0 de LOYTEC LVIS-3ME La interfaz de usuario web no consigue bloquear el acceso a archivos críticos que los usuarios administrativos no deberían tener acceso, lo que puede permitir que un atacante cree o modifique archivos o ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:loytec:lvis-3me_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "1420D89A-7473-467E-92D5-5B338A3F124A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:loytec:lvis-3me:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB324A4A-8D41-41AE-A7E0-92A8A8ABD0E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13998",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-05T21:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de protección insuficiente de credenciales en las versiones anteriores a la 6.2.0 de LOYTEC LVIS-3ME. La aplicación no ofrece una protección suficiente para la información sensible contra accesos no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:loytec:lvis-3me_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "1420D89A-7473-467E-92D5-5B338A3F124A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:loytec:lvis-3me:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB324A4A-8D41-41AE-A7E0-92A8A8ABD0E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T21:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Go before 1.8.4 and 1.9.x before 1.9.1 allows \"go get\" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git checkout in its pkg2 directory and some other work is done to ensure the proper ordering of operations, \"go get\" can be tricked into reusing this Git checkout for the fetch of code from pkg2. If the Subversion repository's Git checkout has malicious commands in .git/hooks/, they will execute on the system running \"go get.\""
      }, {
        "lang" : "es",
        "value" : "Go, en sus versiones 1.8.4 y versiones 1.9.x anteriores a la 1.9.1, permite que se ejecuten comandos \"go get\" de manera remota. Mediante el uso de dominios personalizados, es posible organizar los elementos de forma que example.com/pkg1 apunte a un repositorio Subversion, pero example.com/pkg1/pkg2 apunta a un repositorio Git. Si el repositorio Subversion incluye una rama activada de Git en su directorio pkg2 y se realiza algún otro trabajo para asegurar que el orden de las operaciones es correcto, se puede engañar al comando \"go get\" para que vuelva a utilizar esta rama de Git para que recupere código de pkg2. Si la rama Git del repositorio Subversion contiene comandos maliciosos en .git/hooks/, se ejecutarán en el sistema que esté ejecutando \"go get\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.3",
            "matchCriteriaId" : "49921821-1359-4B19-BDB2-7FBA767804A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "541A479C-519E-4220-97FE-23CDAB9924E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:developer_tools:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60937D60-6B78-400F-8D30-7FCF328659A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1995855A-1883-412D-B629-5436E881FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC88059E-CCFD-4AFD-9982-41DF225FB840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101196",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3463",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/issues/22125",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68022",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68190",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/golang-dev/RinSE3EiJBI/kYL7zb07AgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/issues/22125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/golang-dev/RinSE3EiJBI/kYL7zb07AgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-05T21:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de texto en claro no planeado en la versión 1.8.4 y versiones 1.9.x anteriores a la 1.9.4 de Go. La RFC 4954 requiere que durante la autenticación SMTP, el esquema de autenticación PLAIN solo se use en conexiones de red protegidas con TLS. La implementación original de smtp.PlainAuth en Go 1.0 aseguraba el cumplimiento de este requisito y se documentó que esto se llevase a cabo. En 2013, problema upstream #5184, esto se modificó para que el servidor pudiera decidir si se acepta PLAIN. El resultado es que si un usuario crea un servidor SMTP Man-in-the-Middle (MitM) que no anuncia STARTTLS pero sí anuncia que la autenticación PLAIN es OK, la implementación smtp.PlainAuth envía el nombre de usuario y contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.3",
            "matchCriteriaId" : "49921821-1359-4B19-BDB2-7FBA767804A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596E7CD-6863-4933-A9FB-74CF0ECF918F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101197",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/golang/go/issues/22134",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68023",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/golang-dev/RinSE3EiJBI/kYL7zb07AgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/golang/go/issues/22134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://golang.org/cl/68210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/golang-dev/RinSE3EiJBI/kYL7zb07AgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14083",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Trend Micro OfficeScan 11.0 y XG permite que usuarios remotos autenticados con acceso al sistema descarguen el archivo de cifrado OfficeScan."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14083-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-ENCRYPTION-KEY-DISCLOSURE.txt",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144398/TrendMicro-OfficeScan-11.0-XG-12.0-Encryption-Key-Disclosure.html",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/90",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541273/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42889/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14083-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-ENCRYPTION-KEY-DISCLOSURE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144398/TrendMicro-OfficeScan-11.0-XG-12.0-Encryption-Key-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541273/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42889/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14084",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad potencial de ataque Man-in-the-Middle (MitM) en Trend Micro OfficeScan 11.0 y XG permite a los atacantes ejecutar código arbitrario en instalaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/87",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541264/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541275/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101072",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42891/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541264/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541275/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42891/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14085",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de divulgación de información en Trend Micro OfficeScan 11.0 y XG pueden permitir que los usuarios con acceso al servidor OfficeScan consulten el dominio NT o los módulos y la versión PHP del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/85",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541281/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42893/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541281/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42893/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14086",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de proceso remoto de inicio de preautorización en Trend Micro OfficeScan 11.0 y XG puede permitir que usuarios no autenticados con acceso al servidor OfficeScan ejecuten el archivo fcgiOfcDDA.exe o provoquen una potencial corrupción de archivos ini. Esto podría dar lugar a que el espacio de disco del servidor se consuma con archivos de volcados de peticiones HTTP continuas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txt",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.html",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/88",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541274/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42892/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541274/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42892/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14087",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de cabecera Host en Trend Micro OfficeScan XG (12.0) que puede permitir que un atacante suplante una cabecera Host específica, lo que le permitiría incluir enlaces arbitrarios que apunten a un sitio web malicioso con páginas web de cabeceras Host envenenadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB164BF-12B5-450F-9DDB-9A3FBD544F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/86",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541267/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101074",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42895/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42895/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14088",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de escalado de privilegios de corrupción de memoria en Trend Micro OfficeScan 11.0 y XG permiten que atacantes remotos ejecuten código arbitrario y escalen privilegios a recursos que, normalmente, están reservados para el kernel. Esto es posible en instalaciones vulnerables explotando tmwfp.sys. En primer lugar, un atacante debe poder ejecutar código que requiere privilegios bajos en el sistema objetivo para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan_xg:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDB5AE-D9F6-4972-B63F-E674489A93D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101070",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-828",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-829",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14089",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-10-06T01:29:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de corrupción de memoria no autorizada en Trend Micro OfficeScan 11.0 y XG puede permitir que usuarios remotos no autenticados con acceso al servidor OfficeScan utilicen el archivo cgiShowClientAdm.exe y provoquen problemas de corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFB25C1-828D-49C4-825D-43AF1A2B7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78EAEA-1C69-4EAA-A994-C12DD477A49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144464/TrendMicro-OfficeScan-11.0-XG-12.0-Memory-Corruption.html",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/91",
        "source" : "security@trendmicro.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541271/100/0/threaded",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42920/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144464/TrendMicro-OfficeScan-11.0-XG-12.0-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42920/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12730",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-06T04:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad relacionada con la ausencia de comillas en una ruta de búsqueda en mySCADA myPRO en versiones 7.0.26 y anteriores. Los servicios de la aplicación utilizan elementos de rutas de búsqueda sin comillas, lo que podría permitir que un atacante ejecute código arbitrario con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.26",
            "matchCriteriaId" : "B8529CFC-9476-416B-A148-50DE54F67137"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100815",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T04:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410."
      }, {
        "lang" : "es",
        "value" : "LAME versiones 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 y 3.98 tiene una sobrelectura del búfer basada en la pila en fill_buffer en libmp3lame/util.c, relacionada con lame_encode_buffer_sample_t en libmp3lame/lame.c, una vulnerabilidad diferente a CVE-2017-9410"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2017-15045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/478/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2017-15045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T04:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412."
      }, {
        "lang" : "es",
        "value" : "LAME versiones 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 y 3.97 presentan un desbordamiento de búfer basado en pila en unpack_read_samples en frontend/get_audio.c, una vulnerabilidad diferente a la de CVE-2017-9412"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EEC160-8913-4ABD-8942-D9D5CE3BEC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273D17B6-6A7E-481F-9D74-2291D1A5F9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.98.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B02D92-F4A8-4DED-9F96-1886B4308C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.98.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3CCB2C-8CF4-426A-A463-E895566656A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8058DE3-84AA-4CD1-9DDC-6C54D81D29DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44D1E7-4C8B-4E05-BE28-D463760C0ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/lame/bugs/479/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/lame/bugs/479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T04:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging \"limited access to the machine.\""
      }, {
        "lang" : "es",
        "value" : "La función clusterLoadConfig en cluster.c en Redis 4.0.2 permite que atacantes remotos provoquen una denegación de servicio (indexación de arrays fuera de límites y cierre inesperado de la aplicación) o, probablemente, causar cualquier otro tipo de impacto mediante un acceso limitado a la máquina."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB44D3-FD3B-4C93-A0D5-6B9A65628FFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/antirez/redis/issues/4278",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202008-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/antirez/redis/issues/4278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202008-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T07:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack()."
      }, {
        "lang" : "es",
        "value" : "p_lx_elf.cpp en UPX 3.94 no gestiona correctamente las cabeceras ELF, lo que permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o que provoquen otro impacto sin especificar mediante un archivo binario manipulado, tal y como demuestra una lectura de puntero inválida en PackLinuxElf64::unpack()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upx:upx:3.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0516EFAC-8970-4005-8F19-A8EE583412A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/upx/upx/issues/128",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T07:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are CSRF vulnerabilities in Subrion CMS 4.1.x through 4.1.5, and before 4.2.0, because of a logic error. Although there is functionality to detect CSRF, it is called too late in the ia.core.php code, allowing (for example) an attack against the query parameter to panel/database."
      }, {
        "lang" : "es",
        "value" : "Existen vulnerabilidades de Cross-Site Request Forgery (CSRF) en Subrion CMS en versiones 4.1.x hasta la 4.1.5 y en versiones anteriores a la 4.2.0 debido a un error de lógica. Aunque existen funcionalidades para detectar CSRF, se llaman demasiado tarde en el código ia.core.php, lo que permite (por ejemplo), un ataque contra el parámetro query en panel/database."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.5",
            "matchCriteriaId" : "6B85D0B5-A4C7-4405-BE56-E90E20F3678E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intelliants/subrion/issues/547",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/570",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T13:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote."
      }, {
        "lang" : "es",
        "value" : "libcurl podría leer fuera de un búfer asignado en la memoria dinámica (heap) cuando realiza FTP. Cuando libcurl se conecta a un servidor FTP y logra iniciar sesión correctamente (de forma anónima o no), pregunta al servidor por el directorio actual con el comando \"PWD\". El servidor contesta con una respuesta 257 que contiene la ruta (dentro de comillas dobles). El nombre de ruta devuelto lo almacena libcurl para usos posteriores. Debido a un error en el analizador sintáctico de cadenas para este nombre de directorio, un nombre de directorio pasado de esta forma pero sin una comilla doble de cierre desembocaría en que libcurl no añade un byte NUL final al búfer que sostiene el nombre. Cuando libcurl accede a la cadena, podría leer más allá del búfer de memoria dinámica (heap) asignado y cerrarse inesperadamente o acceder erróneamente a datos más allá del búfer, creyendo que forma parte de la ruta. Un servidor malicioso podría aprovechar este hecho y evitar que clientes de libcurl lo empleen - el comando PWD siempre se emite en nuevas conexiones FTP y el error tiene una gran posibilidad de provocar una violación de acceso. El hecho de que este problema se ha mantenido sin conocer durante tanto tiempo podría indicar que las respuestas PWD mal formadas son raras en nuevos servidores. No se tiene constancia de exploits de este fallo. Este bug fue introducido en el commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7) en marzo de 2005. En la versión 7.46.0 de libcurl, el analizador sintáctico siempre finaliza la cadena en cero, pero también la rechaza si no se finaliza correctamente con una comilla doble final."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB30E8CE-57AD-4225-8BC1-0C496A8A3D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F884BEE7-8AD7-4C39-B955-85578ADA7E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C70D1DF-E117-409F-A4DE-8602AFCF9F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E546224C-AA58-4025-B921-8D5ED1365FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8360A6AE-9735-4019-9A24-A5045D528455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EDD6A3-9D85-4E54-96BB-3A8055EB286C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE48C5C5-DF42-495D-A5A7-D189AE873CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF611F14-AC9A-4D7E-BF95-2D00D880C40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C378EDAB-0D0C-4A63-B230-0DC8EB74C5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D6717E-CB09-493D-AD86-7D5C7782CE12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF87C3C-1AF9-4015-A794-C160AD3128D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDAFF2D-1F8C-45CD-BADC-8CBCEC27A8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EDAFA2-030E-438B-B83A-CF78A409D382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE2A761-2015-4E52-B284-02DC7ED03636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BF3E1B-2F71-4142-A2A5-EA859D806094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72EBCE6C-E0B9-4119-AD71-BF5CD3730D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBB2456-4B56-48CC-8A5C-55D5F9CC770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE20AFEE-7287-4BCE-AE29-32E967FF8F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1060ADF7-99EF-46B1-A999-106E86DC0562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CFF54-F18B-4B82-A39D-99F1D53B6357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7E1B7D-45B3-4803-B490-FDE40F018738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1F9453-1FB6-4CA7-9285-A243E56667B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79828BB-2412-46AD-BE3C-A51B48E191AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D0F13F-D56F-4C1C-A3CF-2E4E704817CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A4F2E2-1B43-470E-8935-CB32F12A0124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797DF5C7-509E-48FD-BD04-C66E01748728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BD868A-CE3B-4E39-A588-C4EDA3265A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2EE400-1C36-40F4-A9D1-9AB432F168BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E3CB14-FB16-4F4E-9AD9-A02DC727FF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCC42C-C881-4AEA-9348-E8317C54D62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC4EF5A-C8CB-4F33-B4D1-E4192B179D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81CEF54A-9668-4031-926F-9B978DD5CDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45068C90-8915-4D19-B36B-993980E28D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24543011-2458-47B5-984A-901E70084902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB482A9C-D577-4AEE-A08F-CAFA6586B51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AF9B86-A555-4D5E-B24E-9EBF78BCD8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BBDF07-DB97-433E-B542-EFEBE45550DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8BE3F8-82ED-4DD7-991E-979E950C98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AA231-4694-46E8-B559-1594263A9987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E1F171-B887-499A-BF4F-538EBF347811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07AA276A-0EBA-4DC9-951C-8F8159FAC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEEF534-9AD2-4439-9D69-E91D062C4647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63643BE1-C978-4CD2-8ED1-2B979DB0676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FA04A0-9258-4654-ABCF-F41340B1FA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE829230-AFDB-4131-9C6A-D9D7A66C5B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E8BA30-8087-48D4-AE1B-48326FF826B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47970EFF-2F51-4875-A6BD-E30614E13278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C9B668-3204-41C5-A82E-262BDFA541DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C8EE1E-E186-42D6-8B12-05865C73F261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3D88B-41B9-4D79-B47D-B3D6058C0C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C80901-D48E-4C2A-9BED-A40007A11C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331A51E4-AA73-486F-9618-5A83965F2436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB32DF2C-9208-4853-ADEB-B00D764D7467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05636DC-7E38-4605-AAB8-81C0AE37520A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624DF2F1-53FD-48D3-B93D-44E99C9C0C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2171C7C-311A-4405-B95F-3A54966FA844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE20A41-8B53-46FC-9002-69CC7495171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ED9DA0-E880-4CBB-B1AC-5AEE8A004718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5293C7F0-BF9F-4768-889A-876CE78903CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EB41B3-65F3-4B0E-8CCC-325B14AF605B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857B244C-2AFB-40C7-A893-7C6DE9871BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B732CE55-820A-40E0-A885-71BBB6CF8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0455A5F2-1515-4CD8-BA2F-74D28E91A661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29034B3A-BE9D-4D68-8C56-4465C03C3693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6249538E-FBCB-4130-91FB-DA78D7BA45DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E11B8A5-50A2-468F-BFB3-86DD9D28AC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EAE25A0-3828-46F1-AB30-88732CBC9F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1533A85C-2160-445D-8787-E624AEDC5A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87B9393-7EA4-43DA-900C-7E840AE2D4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1249E9-304F-4952-8DAB-8B79CE5E7D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FAF953-6A65-4FAB-BDB5-03B468CD1C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F8FF1F-A639-4161-9366-62528AAF4C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812AB429-379A-4EDE-9664-5BC2989053F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13DD791F-C4BD-4456-955A-92E84082AA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A17E442-45AA-4780-98B4-9BF764DCC1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AF544C-5F16-4434-B9FB-93B1B7318950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD9ED9-2412-44AE-9C55-0ED03A121B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CCE31B-ABDA-4F32-BAF1-B1AD0664B3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E66A332-ECD1-4452-B444-FB629022FDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD3D599-35E9-4590-B5E0-3AF04D344695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B6BFFB-7967-482C-9B49-4BD25C815299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1791BF6D-2C96-4A6E-90D4-2906A73601F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260DD751-4145-4B75-B892-5FC932C6A305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF4AD0D-2EC5-4CE8-B6B3-2EC8ED2FF118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB1CB85-0A9B-4816-B471-278774EE6D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3831AB03-4E7E-476D-9623-58AADC188DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABACE305-2F0C-4B59-BC5C-6DF162B450E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAC1B55-F492-484E-B837-E7745682DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.37.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D57914-B40A-462B-9C78-6433BE2B2DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.38.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A12DF7-62C5-46AD-9236-E2821C64156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C43697D-390A-4AC0-A5D8-62B6D22245BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52E9E9F-7A35-4CB9-813E-5A1D4A36415C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.41.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257291FB-969C-4413-BA81-806B5E1B40A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.42.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC6ED5-4C1A-4ED0-97BA-B245C4A236C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AA7383-3AA1-4A3B-BA46-BBA8FBDC10DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.43.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003D8430-AA07-41B5-9F22-696C554CB277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.44.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3ED21E-7907-4248-A32F-BB3102A80DC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E41520-CA31-4BA0-B247-F1DCAAE98DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.46.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F2C633-D720-4FD9-9C75-2D4C57120357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F2FBC9-059A-4299-B59F-8EFD797E3704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.47.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FCC26-B458-46D8-B023-DB4C19A51718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21C08D5-7454-4292-A87C-900C9494E38B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.49.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B727926-90A2-4A7E-9905-70160C1E0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.49.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A247AE-B209-42BE-8BE7-865AE279D23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8429FF9B-D7EA-40E6-A6E8-961EA71F20C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D387194-720A-4D9C-928E-6FAF2EC6C33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2782D32-B023-47B1-A513-251D5093CE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.50.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8373A4E6-BA92-4B5B-9E97-E8C1E8C22C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.51.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084F63A4-64E4-48FC-8B8C-A4F3E7D39D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D4DFF0-9953-4AB8-8C24-3977448BFE64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.52.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5B274B-F232-47E8-9E8A-0EB08F97DE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.53.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E42C72-868A-4AE4-A33E-79F8190C94C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.53.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E2F3C4-5D88-4C16-BAA7-A34CF7687415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.54.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067EB50A-E70F-4C04-ACE7-67BD7E5A4344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.54.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1D4922-F424-45B1-AF98-B1DD33981110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.55.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43503F62-A348-4098-9121-214468EADF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.55.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B474D572-D1BE-45E1-A22E-309CB358A365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039509",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://curl.haxx.se/673d0cd8.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20171004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/673d0cd8.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20171004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002153",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2017-10-06T17:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission."
      }, {
        "lang" : "es",
        "value" : "La versión 1.13.0 de Koji no valida correctamente las rutas SCM, lo que permite que un atacante evite las rutas bloqueadas para el envío de builds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koji_project:koji:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECECE389-C19B-4AE8-9B50-5EAC716F1468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pagure.io/koji/issue/563",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://pagure.io/koji/issue/563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13068",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-10-06T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack."
      }, {
        "lang" : "es",
        "value" : "QNAP ya ha parcheado esta vulnerabilidad. Este problema de seguridad permite que un atacante remoto realice una inyección SQL en la aplicación y obtenga información sobre la aplicación Helpdesk. No es necesario que un atacante remoto tenga privilegios para llevar a cabo este ataque con éxito."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:qts_helpdesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.12",
            "matchCriteriaId" : "65A54D71-AE48-4BC5-8802-5BCBA6A878C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201709-29",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201709-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:00.463",
      "lastModified" : "2023-11-07T02:39:19.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:00.637",
      "lastModified" : "2023-11-07T02:39:19.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:00.713",
      "lastModified" : "2023-11-07T02:39:19.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:00.963",
      "lastModified" : "2023-11-07T02:39:19.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.353",
      "lastModified" : "2023-11-07T02:39:19.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.417",
      "lastModified" : "2023-11-07T02:39:19.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.463",
      "lastModified" : "2023-11-07T02:39:19.387",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.493",
      "lastModified" : "2023-11-07T02:39:19.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.573",
      "lastModified" : "2023-11-07T02:39:19.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.777",
      "lastModified" : "2023-11-07T02:39:19.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:01.933",
      "lastModified" : "2023-11-07T02:39:19.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:02.010",
      "lastModified" : "2023-11-07T02:39:19.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:02.260",
      "lastModified" : "2023-11-07T02:39:19.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:02.683",
      "lastModified" : "2023-11-07T02:39:19.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T17:29:02.713",
      "lastModified" : "2023-11-07T02:39:19.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue associated with the originally named downstream provider.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9272",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-06T17:29:02.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "El controlador bidireccional en IDM 4.5 en versiones anteriores a la 4.0.3.0 podría ser susceptible a un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:bi-directional_driver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2.0",
            "matchCriteriaId" : "B7A93F71-A60A-4DA7-BC80-BFA94A257C61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microfocus:identity_manager:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1CBBF7-F30D-4B31-B98B-427CA7F1C0C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.microfocus.com/Download?buildid=SRL-_pc5pR8",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.microfocus.com/Download?buildid=SRL-_pc5pR8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9273",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-06T17:29:02.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes."
      }, {
        "lang" : "es",
        "value" : "El controlador bidireccional en IDM 4.5 en versiones anteriores a la 4.0.3.0 podría ser susceptible a cambios de la configuración del registro sin autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:bi-directional_driver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2.0",
            "matchCriteriaId" : "B7A93F71-A60A-4DA7-BC80-BFA94A257C61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microfocus:identity_manager:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1CBBF7-F30D-4B31-B98B-427CA7F1C0C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.microfocus.com/Download?buildid=SRL-_pc5pR8",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.microfocus.com/Download?buildid=SRL-_pc5pR8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13069",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-10-06T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS."
      }, {
        "lang" : "es",
        "value" : "QNAP ha descubierto una serie de vulnerabilidades de inyección de comandos en Music Station en las versiones 4.8.6 (para QTS 4.2.x), 5.0.7 (para QTS 4.3.x) y anteriores. Si se explotan, estas vulnerabilidades podrían permitir que un atacante remoto ejecute comandos arbitrarios en el NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "90775D6D-5C57-4449-BFCE-445359612DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.7",
            "matchCriteriaId" : "D755DEE6-D0A3-48CB-BE6C-B3A731C201C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201710-05",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201710-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal."
      }, {
        "lang" : "es",
        "value" : "El plugin Smush Image Compression and Optimization en versiones anteriores a la 2.7.6 para WordPress permite el salto de directorios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmudev:smush_image_compression_and_optimization:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.7.5",
            "matchCriteriaId" : "6FF49030-F911-4D68-BDBB-7234B2D36118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wp-smushit/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Product", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/support/topic/file-transversal-bug/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-smushit/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Product", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/support/topic/file-transversal-bug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-06T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de usuario en Rapid7 Metasploit en versiones anteriores a la 4.14.1-20170828 permite el CSRF al cerrar sesión. Esto también se conoce como R7-2017-22."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.1",
            "matchCriteriaId" : "E58A0315-5147-460D-8FE9-CB0834F3FF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/10/06/vulnerabilities-affecting-four-rapid7-products-fixed/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/10/06/vulnerabilities-affecting-four-rapid7-products-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-09T05:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel spreadsheet, and the attacker-controller server receives the victim's NetNTLMv2 hash."
      }, {
        "lang" : "es",
        "value" : "Infocus Mondopad 2.2.08 es vulnerable a una revelación de credenciales con hash. El atacante proporciona un documento de Microsoft Office manipulado que contiene un nombre de ruta UNC asociado a un servidor controlado por el atacante. En un escenario específico, el atacante proporcionaría una hoja de cálculo de Excel y el servidor controlado por el atacante recibiría el hash NetNTLMv2 de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infocuscorp:infocus_mondopad:2.2.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4389A0-09A2-4773-9E0F-B06FDB21E7A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14971",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-09T05:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file."
      }, {
        "lang" : "es",
        "value" : "InFocus Mondopad 2.2.08 es vulnerable a una omisión de autenticación cuando se accede a archivos subidos por medio del atajo Control+Alt+Supr y utilizando entonces el Gestor de tareas para seleccionar un archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infocus:mondopad:2.2.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E645827-4F79-4965-BDD4-49A1BDD8C181"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-09T05:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user page)."
      }, {
        "lang" : "es",
        "value" : "IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) es vulnerable a Cross-Site Scripting (XSS) persistente mediante el campo de notas en /~user_handler?file=logged_in.shtm (también conocido como la página de usuario de edición)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:identicard:two-reader_controller_configuration_manager:1.18.8_\\(396\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F6F34B-B1FE-4B1D-9F42-BECDA898AFE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/IDenticard%20Two-Reader%20Controller%20%3C%201.18.8%20-%20CVE-2017-14973",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/IDenticard%20Two-Reader%20Controller%20%3C%201.18.8%20-%20CVE-2017-14973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-09T05:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "plugins/ogg.c en Libmp3splt 0.9.2 llama a la función libvorbis vorbis_block_clear con datos no inicializados tras una detección de valores de entrada no válidos. Esto permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) de la aplicación utilizando un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmp3splt_project:libmp3splt:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B51E61-EB45-4D08-8943-9A7CA31F2056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/82",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/?id=18f018cd774cb931116ce06a520dc0c5f9443932",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts/2017/09/msg00115.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42399/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Jul/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/?id=18f018cd774cb931116ce06a520dc0c5f9443932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts/2017/09/msg00115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42399/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T01:30:21.377",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 1.19.4 de X.Org Server (también llamado xserver y xorg-server) un atacante autenticado en un servidor X con la extensión de memoria compartida X habilitada puede provocar cancelaciones del servidor X o reemplazar segmentos de memoria compartida de otros clientes X en la misma sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.3",
            "matchCriteriaId" : "9C274A00-CD58-40E2-A8E6-FAE26782DE48"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4000",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/04/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101238",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2017-October/002808.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/04/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2017-October/002808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T01:30:21.407",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 1.19.4 de X.Org Server (también llamado xserver y xorg-server) un atacante autenticado en el servidor X podría provocar un desbordamiento de búfer global, causando cierres inesperados del servidor X o dando lugar a otros posibles problemas mediante la inyección de átomos relacionados con XKB grandes o mal formados y accediendo a ellos mediante xkbcomp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.3",
            "matchCriteriaId" : "9C274A00-CD58-40E2-A8E6-FAE26782DE48"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4000",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/04/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2017-October/002808.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/04/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2017-October/002808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T01:30:21.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the \"nat\" and \"symmetric_rtp\" options allow redirecting where Asterisk sends the next RTCP report."
      }, {
        "lang" : "es",
        "value" : "En Asterisk enversiones 11.x anteriores a la 11.25.3, versiones 13.x anteriores a la 13.17.2 y versiones 14.x anteriores a la 14.6.2; y en Certified Asterisk en versiones 11.x anteriores a la 11.6-cert18 y versiones 13.x anteriores a la 13.13-cert6, una validación insuficiente de paquetes RTCP podría permitir la lectura de contenidos obsoletos del búfer y, cuando se combina con las opciones \"nat\" y \"symmetric_rtp\", permite las redirecciones en las que Asterisk envía el siguiente informe RTCP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "E7D1238A-A8D2-485E-81FD-46038A883EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E93A7967-9A04-424A-BDDB-A2B8289B9AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F75C9FF-6F95-4F6A-B683-FE2BEDE3AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "68226156-42ED-4F0E-93E1-02DD57E582B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EB385E-28B5-4259-9431-99E1F32D61B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C0FF1B-6188-4181-A139-1806328762BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "890EBB8C-989B-4344-AC03-62B399076008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121EACD3-D5E3-4691-8024-95996865BB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136D6508-660E-410D-829A-7DD452BF8819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B23D17-7356-4D37-8C73-E87896D1335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8A6CB-D236-4AB3-8476-C2D34DB7EF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599833A2-CBE9-479B-8A6E-AF79C5EED1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B55719B3-7325-47E1-8D16-3F34B1F44385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B870B3B7-E8DC-45A2-8FA4-657D005D00E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C91E9A3B-54EB-4819-94DD-30F7D0C90047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47189DF9-8E57-4BA6-9F52-B7A8229AE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84AAFA3C-3CCD-4615-9725-169C303CF18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C39FA-EF1A-4F2B-87A0-A00BAE73C6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D1211-0B07-47B9-AB7A-E820E2B29561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84202BAF-29E1-472B-B11F-B73F6A8891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7120D-E6A0-4801-A1CC-3E143896EE72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF2A83D-D9AE-441D-8D4E-335BF9D28A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5C1479-A540-4B7D-B00C-BD35EEC83BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC12556C-5E82-47D7-87E5-FBDC01A920DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461C1D2D-C4C1-4FF8-8231-38A2505F3523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66595711-8573-4A9B-A8FE-4943E3097AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FE3D4-A0B9-475A-9B89-B0222283A6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9670B5AC-CBD1-484C-90F8-69B1A60B6054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5794B6-246C-415E-8E20-56447F152488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E726CA39-A763-4422-B59E-E9E12518EA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96EB57-835A-45B4-82F5-31F925A85629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206F1DC9-9E8F-4497-A354-4A14711993DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D428364-E2AD-4BC6-9329-71793BC0EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08963910-E0BD-4487-B669-60E0BFA79863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B16D04-3808-4380-8F64-0C36B185C1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BD16A9-24BC-4FC1-81BA-A6D1FEF38D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BAAD53-DE75-41CA-BF60-C0363029D3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC383B3-27EF-4C37-94BE-F0D41B34CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7824B34-06C3-403B-B6F3-C850D54438EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17E86941-98F6-45A5-8646-6876F74D909F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB27C0-C74E-4E6A-AA63-09CFE73C2EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C443A3B-DF96-4A68-B046-DE13689CA974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3AC9AE-288C-4F0E-BF15-C3F4AF09D8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "796A6021-9FCA-4354-A47C-7500C363C168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9D073-195F-4C2A-932E-7F027710DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604E58C8-9B81-4992-8993-4A6CB876EE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077C4CB8-1FDE-45D3-82E6-CE09A22809B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDB96CA-5AAE-4B39-8E01-2E72E3B476AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB33EC3-CDE0-40BD-B269-512AE074D278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363FA95F-03EF-4D6A-A40D-76D285D16255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA96DC31-4BAC-4C5A-923C-EBBFFC7ABB52"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C949D5F5-6C0B-4B17-85B6-3A77D08CF967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D413741-BDB7-496D-A01B-75E2A98FDB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "29130F7F-DE00-43E1-A4A6-8F1F95D5CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E94EC0-F577-4B2B-8B11-DC76278CDD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "101AD474-9B89-483D-84E8-08012677C55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57E41F6-C2CF-4183-A78A-9531A88FB65D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F9BB8-F951-427E-B770-69C2ACEBDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4CE405-E923-4C9C-849A-D1031C4DB493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C039C0CE-9C9C-4D85-8D7C-574DCF9D920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B2F2CC-18C3-46E7-8E7F-970622A710C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04ECDFF1-9718-4FAE-B45B-4F8CCA82829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C4DA60-5701-4BD0-B2F9-D93B9E64111F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B12834D-2AF1-4AD1-AB23-859CAA5D3210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89036D04-EA04-4041-9694-6768478D35F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19070D3-9F03-43C7-9F31-9A54BD5F2441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BAA74-50A8-4087-8FF8-7C5922121319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D29C253-B403-4B00-A626-3E3A920DC018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9D8FA2-21EA-4384-8001-118DA7C959F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3368DE88-7009-46A0-93F4-4D52BAD3D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "26586127-B68B-4476-8182-C49B1B1DCDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EFDCC-983E-4227-9FD5-456C16610BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA7DBAD-BCA6-47D1-A92E-4EB7941F55F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "02C6C827-97A6-4287-8B3E-DE29054242B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4F7C1-BB82-44BA-BBFD-9F660330EC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FCA146-5A72-4746-BE23-63271FBC4D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C90BB-C3FE-4A75-B739-0236C4256F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BD9466-0BC9-4B4D-928F-240CD46D306C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06F456AD-19D3-49EF-82B1-07370F6499AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24A9997E-D0DC-45B0-B4DB-308667FA820E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26202E79-98E0-4533-B4AE-1ABB2477F5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:14.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7384F-DF1B-4ED7-B1D5-885B95774DDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53B8453-F35A-49BE-8129-774BADF71BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB0C07E-DA2F-4169-848D-C3315CDC1CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "410C43E6-5912-4C22-A592-7CF94402EEB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D50A355E-1B55-4DD2-8100-EB81AA6FC40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF4230-EFEB-45EC-9C96-0262B4A3E459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5234531C-F69A-4B94-A480-147734206C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321C1066-6800-4488-A7C4-BE91FF738453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B51588-50A2-40B2-A007-06F57D38C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE2B00C-6AC0-4166-8A25-EFC42CE7F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD404B4-2B0A-4D7A-8CF6-E2C6B4BACBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "617FC4AF-D152-4EE1-828D-C2A6AD0DFD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3FE6DC-17FD-4CEE-BDFB-9D4685640381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEB6C2-0A6D-4434-8446-CB8605CD3B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1548C574-CD51-49F6-91B1-B06C504000E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE4127D-8123-4408-86D3-08168A4501B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8836F348-66DF-43BC-9962-946018D13127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1453BB31-D674-4A05-AB2A-2502D127C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868865A1-E074-4DB0-A119-D24C5C53FEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1794440C-7068-4673-9142-6221B8A39E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CF286B-3377-4AE9-A7B9-8535641D639A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3D89C7-909F-419A-9EE8-A1F0D02934EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EC8D9D-3483-4080-8000-496343BC8BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6695F632-6AC4-400F-B513-280304ABC1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A3423C40-240A-4237-8B0F-A4B4ED421C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03298D9F-CFB8-48F9-BD0C-8A0BEB0760C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "87FCBE6A-C1CD-48EF-A435-4CEADD46C917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "42E0E639-70A2-41EE-9B34-A9223D1958AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32E84D64-0CB8-46BF-BD3F-8CA2E0CE4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70420A8-8571-4528-98E1-72BE00270C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A276363F-F897-4E6D-9D55-5F5AA73DEE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "38230656-6242-4D24-AA67-F42A6FA2FC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "20ED9FC3-5E56-4AE7-903F-267CAE7F2CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "84F88075-9935-45BF-88B7-21ACE8AAB314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB16D9D6-A2F6-4C4B-B364-1B63B1FFB5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "283793E4-0AE8-48D9-ABCF-70E44FE55C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F79D5F-EB28-417A-86DF-053D6EDBA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A036F91-70E0-4E97-9896-EEE97BE3C20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92ECBCD-1EE3-498A-B3A4-22BF8EFD2EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EABFC3-24FA-4441-9F2B-650D90AE5CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA61A22-3DD0-46A3-8C13-F25F4F03FD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2026FD07-103C-4691-AFA4-88C490382F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "791700CD-E007-489E-9BC6-37025CAA8144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65607103-4284-430A-8212-AC1DCFFFA778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4061B4C7-8315-450C-866A-C4F3A6BCB1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EA7154-7F08-4E43-9270-E617632230AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00099DC9-D437-429B-9D08-F0DFA4942A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "4149F36C-D455-415F-93D7-F92EEE41419D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC51129-8F38-4505-90FB-4FFDED45BABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA571E0-B513-47AA-95BE-EB4DD2AA91E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89504BDC-82F7-4813-9C1E-456C9ACC6FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118C550E-79A8-431E-BADB-710EEEEDC6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "96C7950F-41D1-46B5-BA62-E8450CB81244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A32ECC-E208-4834-8EF7-FEF7A3495041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6BC60-23F5-46A1-83F8-F4BCDEF196EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3E0D41-2E6E-4294-8E56-1A738A7F9AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D16109B8-4CDF-46FC-9AD9-A158E532791B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCAA174-3CA3-49DB-BA19-D2BCF4F8953F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4D1A5A-99A3-4D23-B40C-BBE11EA5B325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5EE428-98FF-42BC-9F61-311327B8F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2FD08-D761-410F-9804-A76F0DD77349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74B34C21-D90B-4E32-BBA6-7773DB663F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "90996D49-5731-4F7D-9DBE-D0599A5D85A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C91C8D-707D-443D-985F-FA3EDB181208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400EA2E1-B178-467F-BBC2-1B2ECEDE662A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E00A6C7-D3CF-40B5-A586-06E09C5AA1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E25D043-EE0D-49A5-A468-03EDD9CFE0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.22.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA17630B-444D-4AE4-B582-F8106C4EEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A20D6B-62FE-440D-BC58-F764AAA5562B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AE880B-2FA2-42BB-BEBF-771E18FDA141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC982D1B-B018-474E-94BE-2157C21276C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26815C8-8E43-4C26-947B-986EFFF0ACE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8213E-650F-4C95-B9E5-753E7784EF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B8F794-A7F2-4B8F-B36C-55E61DC6939A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:11.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7FC3A1-AFB0-4280-BFC5-68F61CFD0AF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "322694EF-B086-4BE7-A9F0-41D3A9C245FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "781AC882-80DD-4176-8E4F-220343B15F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "770CCEEA-B121-454B-BD36-3FC1B262998A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEBE67E-A3E5-4BC9-8740-4F51123CC9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:*:*:*:*",
            "matchCriteriaId" : "CD094E25-5E10-4564-9A4D-BE5A14C2815F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert12:*:*:*:*:*:*",
            "matchCriteriaId" : "B6873174-0109-402F-ADCA-B1635F441FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert13:*:*:*:*:*:*",
            "matchCriteriaId" : "B529CD2F-2958-44E6-839A-3E4FE392B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14:*:*:*:*:*:*",
            "matchCriteriaId" : "B961BF46-DEF7-4804-AF9A-D13F160FA213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC801D4-7A69-4855-8757-24ACE70D784B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "60C2B8F0-7722-48B5-89AA-435F52CBC0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert15:*:*:*:*:*:*",
            "matchCriteriaId" : "B9305CA8-835C-4DFF-9CD8-C1072BACED42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert16:*:*:*:*:*:*",
            "matchCriteriaId" : "B3729EA6-3949-4854-80D4-DC5587161FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "013B1940-C45D-4FE2-8B49-D92B8F1A9048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "A98B11B5-B8E2-4903-B4F7-3AC23751AE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D60B24-C509-49C3-87A9-49D05CB44183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1F9978-44E7-4D39-BEC6-5C6DB7F893E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "69BA61A8-2A95-4800-BB4E-692BA4321A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "C481D8B0-622D-491D-B292-717B0369B507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8390D4-F339-43FF-9F2B-71331D4ECB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:*:*:*:*",
            "matchCriteriaId" : "4490B76B-FA41-43DB-9A31-6B3F220F1907"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "0449B393-FA4E-4664-8E16-BE6B94E4872F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED8E415-64FA-4E77-A423-3478E606E58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E13CA1DD-B384-4408-B4EC-1AA829981016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE28BD0A-EA30-4265-A5D6-0390F3558D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F82048D-C65F-4439-BBE4-2D4A9B07EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "6447B77F-3770-4703-9188-B7344ED98E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "5C103924-1D61-4090-8ED5-4731371B2B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "08F87B09-3867-4CAE-BAD7-2206CD6CAF97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3990",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27274",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T01:30:21.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en la consola Visor GUI de GridGain en versiones anteriores a la 1.7.16, versiones 1.8.x anteriores a la 1.8.12, versiones 1.9.x anteriores a la 1.9.7 y versiones 8.x anteriores a la 8.1.5 permite que usuarios autenticados remotos lean archivos arbitrarios en nodos de clúster remotos mediante una ruta manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.0:ea1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE026BE-B861-45D6-948E-909BC374B03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.0:ea2:*:*:*:*:*:*",
            "matchCriteriaId" : "567AE911-AABC-4367-8542-410079FED48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.0:ea3:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7656B1-21E9-4848-94F2-1E39B20E1A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.0:ea4:*:*:*:*:*:*",
            "matchCriteriaId" : "05A94CCD-E824-4D7C-BDF3-ACF945B291CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.0:ea5:*:*:*:*:*:*",
            "matchCriteriaId" : "55F832FC-F534-4DC9-9164-24B3F64C0900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837DEF09-1970-47F8-91A2-BB99C86270A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea1:*:*:*:*:*:*",
            "matchCriteriaId" : "404FE7FF-F949-4ED4-8934-72877B9397A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea2:*:*:*:*:*:*",
            "matchCriteriaId" : "68CBDF33-68BF-40C8-863E-FB28859C06D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea3:*:*:*:*:*:*",
            "matchCriteriaId" : "5396510A-ABF4-44C8-B158-199289B2A49F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8D9C68-5A63-4115-BF7B-9A618C3C4E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea5:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9D01D4-7B55-48A3-B723-B5212DA7C614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea6:*:*:*:*:*:*",
            "matchCriteriaId" : "D599A9AA-D7F1-4BAC-9912-FEFD20CF8F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea7:*:*:*:*:*:*",
            "matchCriteriaId" : "F13D33AF-3A67-4C1A-BF32-EC4D87E43B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea8:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C02CD3-16E7-4D69-B88A-190B20C90AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.1:ea9:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9D3AE3-0AE1-4BC0-AB69-33470A59DBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.2:ea1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF00818E-7760-48BC-B3BE-DB7ECE74548C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.2:ea2:*:*:*:*:*:*",
            "matchCriteriaId" : "67448CF4-086C-4E1C-9CB7-C858A4A2A26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.2:ea3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4C7C75-A3B3-4C4B-B591-E8274CCBB11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA1ADF6-84C8-4E8D-89FA-64B8405EF6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea10:*:*:*:*:*:*",
            "matchCriteriaId" : "454E3093-A1B0-4ADE-8502-AA20E29A1B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea11:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9D21FD-630A-40A2-B926-38DE9B1B3F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea12:*:*:*:*:*:*",
            "matchCriteriaId" : "014A03DD-E456-49F6-904E-226AE6B6A4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea13:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8D2EE9-2975-42E5-9E9D-0EE0191E656A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea14:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE5C6CB-B574-4E1D-B109-D791E0610681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea15:*:*:*:*:*:*",
            "matchCriteriaId" : "75CA572A-040C-4EC2-B9C7-8B251B9773A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea16:*:*:*:*:*:*",
            "matchCriteriaId" : "3C129537-040D-493C-950A-363753858D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea2:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F248E-EF59-42D5-9EC5-5CB73FC597C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea3:*:*:*:*:*:*",
            "matchCriteriaId" : "BF36FEA1-5043-4DE9-B0C6-E921B6BDBEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea4:*:*:*:*:*:*",
            "matchCriteriaId" : "694C284B-FB35-4EEC-B5D2-47EFB797DEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea5:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B57D14-EDA9-490E-A8DC-EB0F97FA1944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea6:*:*:*:*:*:*",
            "matchCriteriaId" : "4465392E-3A19-44D4-9A94-06694C003166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea7:*:*:*:*:*:*",
            "matchCriteriaId" : "D00BBEBF-4BA5-4900-9F26-D59D8E28CD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea8:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBE292F-3E39-4003-A83E-729A80D1A2BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.3:ea9:*:*:*:*:*:*",
            "matchCriteriaId" : "F93FAE54-5BA1-4C0B-B60B-0AF2D53B991D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.0.4:ea1:*:*:*:*:*:*",
            "matchCriteriaId" : "11A753C1-A7D1-4350-BCB7-59C6F4ECA150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0669B37-D33A-43F2-B6DF-E103D3124EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82AE91AD-529D-4917-9E2D-45C0B9B44CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EF0C8F-6F7B-464D-92F3-84E056C0E8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.3:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7756B5B-9C0F-432B-9A3F-32024AAC452F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.3:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6478DCD7-140F-45D8-94AC-C4073E5790B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.3:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "FFFD1396-E045-4CCF-BF1F-7A631F4CD392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.3:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "374C883B-A463-4F06-BAF2-A5C8774A32E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.3:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "7C70AFDA-0E9A-4BC2-8018-1C94B259BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CAF1B8-7D55-47D6-8848-11A9679B8B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "F516C9D0-C623-495D-BAC8-128E8773A5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "83059703-476C-4319-95CC-A1D2E786C003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:8.1.4:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A870CE2-787D-43C7-9245-644E71BBFFE6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0350A5-3515-4F32-8FD3-57E41A33FD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B95F28-C70E-4330-91C7-6DD7D2668DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101B7478-A7C7-4743-9A2F-BD42581603EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084DE79-3480-4923-A97D-9E72ECCAB2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F647F0AB-C9AA-428E-873E-4D824CADC710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87992D8-B0EC-4447-8DA0-B7C9DC54983F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1647DCC-E58C-4440-BEBD-C3E99427427F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72958D44-1C80-4DB3-90A7-2A110D428458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1FDC52-6C37-47B6-B0F9-5E0B36A7CA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184592C2-FA6B-41ED-A9CF-04411B067890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BEF2F5-E451-474C-A989-4CC1C39B0FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358317C3-0549-4834-9B1D-7C86835553DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C788A7-422E-4F50-B8DE-F350E3B15957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E77D43-C72C-45A0-98E0-0337210CCB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9493CF1-1F27-45BF-B005-232538E3FA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87160D9-0CBC-4835-88D9-B1D095F64D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444AD396-1D44-4477-8FAF-C6AAB113285F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gridgain:gridgain:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.15",
            "matchCriteriaId" : "1693679A-1AE5-4586-8908-F89D37F4425F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/05/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T01:30:22.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la versión 10.0.28 de Sync Breeze Enterprise permite que atacantes remotos provoquen un impacto no especificado mediante el uso de un parámetro username largo en /login."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:10.0.28:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "080D2272-4C32-4EC4-93C5-B634F0F2D364"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T01:30:22.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función v9fs_xattrwalk en hw/9pfs/9p.c en QEMU (también conocido como Quick Emulator) permite que los usuarios de sistemas operativos invitados locales obtengan información sensible de la memoria dinámica (heap) mediante vectores relacionados con la lectura de atributos extendidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.1",
            "matchCriteriaId" : "6B8E599C-1E63-4D90-9BE4-9ADA35192912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg00729.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg00729.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5637",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-10T01:30:22.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Two four letter word commands \"wchp/wchc\" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later."
      }, {
        "lang" : "es",
        "value" : "Dos comandos con palabras de cuatro letras \"wchp/wchc\" provocan un gran consumo de CPU y podrían dar lugar a que se alcance el máximo uso de CPU en el servidor Apache ZooKeeper si se abusa de ellos, lo que da lugar a que el servidor quede deshabilitado para servir a peticiones de clientes legítimos. Las versiones de la 3.4.9 a la 3.5.2 de Apache ZooKeeper tienen este problema, que fue solucionado en las versiones 3.4.10, 3.5.3 y posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E65AF7-9D19-4B31-9BE0-4EB07B2853F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FFE2B9-6744-4198-946E-89D78EC5E72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075AF151-A8A1-48BC-BD8B-E123ACAD5A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7A6DB3-2F19-4155-B019-2325A3D1186F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7346C4C9-7788-4686-A9D3-0225CA1A5B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA6B730-25E1-489D-BBB7-18F9251EF20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCF90EA-9BD7-42FE-A1C2-0C04D53543DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E981E8B-0BEF-4644-919F-0BF7549D70E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10957A4F-4A07-4777-A92B-525C0AF9D99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2732FE0E-9F19-46BE-BE05-3DF6ED7AC222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BC9FC3-2BFE-40D1-A647-801AC49CA0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DA0549-5FD8-427E-995F-49B26854CB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7974A08-51CA-4E28-A914-F2C5173E0C76"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3871",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98814",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2477",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3354",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3355",
        "source" : "security@apache.org"
      }, {
        "url" : "https://issues.apache.org/jira/browse/ZOOKEEPER-2693",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/58170aeb7a681d462b7fa31cae81110cbb749d2dc83c5736a0bb8370%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/jira/browse/ZOOKEEPER-2693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/58170aeb7a681d462b7fa31cae81110cbb749d2dc83c5736a0bb8370%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T06:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the \"webwatch.(REDACTED).com\" server mentioned in the reference."
      }, {
        "lang" : "es",
        "value" : "Trapeze TransitMaster es vulnerable a divulgación de información (emails/contraseñas con hash) mediante un campo userID modificado en datos JSON en ManageSubscriber.aspx/GetSubscriber. NOTA: este software se despliega de manera independiente en múltiples sistemas de tránsito municipales, no se encuentra exclusivamente en el servidor \"webwatch.(REDACTED).com\" mencionado en la referencia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trapezegroup:transitmaster:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8C9B0E-9B84-4343-8EAC-36D3EA15CE56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/TransitMaster%20%3E%20Information%20Disclosure%20-%20CVE-2017-14943",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/TransitMaster%20%3E%20Information%20Disclosure%20-%20CVE-2017-14943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T13:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Epson \"EasyMP\" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded \"backdoor\" code (2270), which authenticates to all devices."
      }, {
        "lang" : "es",
        "value" : "El software \"EasyMP\" de Epson está diseñado para transmitir remotamente la computadora de un usuario hacia proyectores compatibles. Estos dispositivos se autentican con un código único de 4 dígitos, que es mostrado en la pantalla, lo que garantiza solo a aquellos que pueden visualizarlo estar transmitiendo. Adicionalmente a la contraseña, cada proyector tiene un código de \"puerta trasera\" codificado (2270), que se autentica en todos los dispositivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epson:easymp:2.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836F1E8F-B45D-4824-A717-513601F230B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T13:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Epson \"EasyMP\" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the \"EasyMP\" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device"
      }, {
        "lang" : "es",
        "value" : "El software EasyMP de Epson se ha diseñado para proyectar de forma remota el ordenador de un usuario a proyectores compatibles. Estos dispositivos se autentican empleando un código de 4 dígitos, que se muestra en pantalla (asegurando que están proyectando solo aquellos que pueden verlo). Todos los proyectores de Epson compatibles con el software EasyMP son vulnerables a una vulnerabilidad de fuerza bruta, permitiendo que cualquier atacante en la red pueda controlar de forma remota y proyectar en el dispositivo vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epson:easymp:2.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836F1E8F-B45D-4824-A717-513601F230B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T13:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery (SSRF) attacks, conduct internal port scans, or have unspecified other impact via an XML request, aka bug #572705."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XEE (XML External Entity) en la funcionalidad de importación de paquetes del módulo deployment en Lansweeper en versiones anteriores a la 6.0.100.67 permite que usuarios autenticados remotos obtengan información sensible, provoquen una denegación de servicio, realicen ataques SSRF (Server-Side Request Forgery), realicen escaneos de puertos internos o provoquen otro impacto no especificado mediante una petición XML. Esta vulnerabilidad también se conoce como bug #572705."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lansweeper:lansweeper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.100.29",
            "matchCriteriaId" : "0E62F9A0-D77A-4C0F-9488-3E5F8E250E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144527/Lansweeper-6.0.100.29-XXE-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.lansweeper.com/changelog.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144527/Lansweeper-6.0.100.29-XXE-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.lansweeper.com/changelog.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12623",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-10T18:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release."
      }, {
        "lang" : "es",
        "value" : "Un usuario autorizado podría subir una plantilla que contenga código malicioso y que acceda a archivos sensibles mediante un ataque XEE (XML External Entity). La solución para manejar entidades externas XML se aplicó en la distribución 1.4.0 de Apache NiFi. Los usuarios que ejecuten una distribución 1.x anterior deben actualizarla a la distribución adecuada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C028889E-44E8-4E54-9585-BF9B0EED5A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D38C76-98D2-41F1-9F0B-CEE05215AB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B8572D-CA8D-4A41-B94A-A393A22B5B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FDA5E5-6A45-4979-9317-75623A59089F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1BEC26-CB83-4209-893D-5EA6E08A0C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A509533F-ACD6-4290-BE2E-3EDBED60D43B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A169A8CB-29A5-4C44-AEF9-8995C9239874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-12623",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-12623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T18:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js."
      }, {
        "lang" : "es",
        "value" : "MISP en versiones anteriores a 2.4.81 tiene XSS reflejado potencial en una acción quickDelete que se usa para borrar un sighting, relacionado con app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp y app/webroot/js/misp.js."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.80",
            "matchCriteriaId" : "31450B49-0A96-4705-911C-11AC08ED0534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/ca6f4a783a6ba65532dc8767446bda44773ec627",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.misp.software/Changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/ca6f4a783a6ba65532dc8767446bda44773ec627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.misp.software/Changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13675",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-10-10T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network."
      }, {
        "lang" : "es",
        "value" : "Un ataque de denegación de servicio (DoS) en Symantec Endpoint Encryption en versiones anteriores a SEE 11.1.3HF2 permite a atacantes remotos que hagan que una máquina o un recurso de red en particular deje de estar disponible para los usuarios que deberían tener acceso a dicho recurso interrumpiendo servicios de un host específico en una red de manera temporal o indefinida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.3",
            "matchCriteriaId" : "B57B9730-DAC6-47DC-B87D-124F91E689E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101089",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13679",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-10-10T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network."
      }, {
        "lang" : "es",
        "value" : "Un ataque de denegación de servicio (DoS) en Symantec Encryption Desktop en versiones anteriores a SED 10.4.1 MP2HF1 permite a atacantes remotos que hagan que una máquina o un recurso de red en particular deje de estar disponible para los usuarios que deberían tener acceso a dicho recurso interrumpiendo servicios de un host específico en una red de manera temporal o indefinida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:encryption_desktop:*:mp2:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.1",
            "matchCriteriaId" : "307C6348-9B61-4C9A-A2A3-BDCBF13879AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101090",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11046",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se llama a un manipulador de llamadas IOCTL de controladores de audio, podría ocurrir una escritura de kernel fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11048",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a display driver function, a Use After Free condition can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en una función de controlador de pantalla, puede ocurrir una condición de uso de memoria previamente liberada (User After Free)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11050",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when the pktlogconf tool gives a pktlog buffer of size less than the minimal possible source data size in the host driver, a buffer overflow can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando la herramienta pktlogconf proporciona un búfer pktlog de un tamaño inferior al tamaño de datos de origen mínimo posible en el controlador del host, puede ocurrir un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11051",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, information disclosure is possible in function __wlan_hdd_cfg80211_testmode since buffer hb_params is not initialized to zero."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, es posible que se produzca una divulgación de información en la función __wlan_hdd_cfg80211_testmode ya que el búfer hb_params no se inicializa en cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11052",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor command a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 especialmente manipulado, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11053",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when qos map set IE of length less than 16 is received in association response or in qos map configure action frame, a buffer overflow can potentially occur in ConvertQosMapsetFrame()."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se recibe un QoS map set IE de longitud inferior a 16 en una respuesta de asociación o en un frame de acción de configuración de QoS map, puede ocurrir un desbordamiento de búfer en ConvertQosMapsetFrame()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101117",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11054",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted cfg80211 vendor command, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante cfg80211 especialmente manipulado, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11055",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_SET_WIFI_CONFIGURATION cfg80211 vendor command, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_SET_WIFI_CONFIGURATION cfg80211 especialmente manipulado, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11056",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while doing sha and cipher operations, a userspace buffer is directly accessed in kernel space potentially leading to a page fault."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, al realizar operaciones sha y de cifrado, se accede directamente a un búfer userspace en el espacio del kernel, lo que podría provocar un fallo de página."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11057",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in compatibility mode, flash_data from 64-bit userspace may cause disclosure of kernel memory or a fault due to using a userspace-provided address."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en modo compatibilidad, flash_data de userespace de 64 bits puede provocar que se revele la memoria del kernel o un fallo debido al uso de una dirección proporcionada por el userspace."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11059",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, setting the HMAC key by different threads during SHA operations may potentially lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, definir la clave HMAC con hilos diferentes durante las operaciones SHA puede provocar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11060",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 vendor commands in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_passpoint_fill_network_list function respectively. Android ID: A-36817548. References: QC-CR#2058447, QC-CR#2054770."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se observa una sobrelectura de búfer mientras se procesan comandos de fabricante ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST y QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 en las funciones __wlan_hdd_cfg80211_set_passpoint_list y hdd_extscan_passpoint_fill_network_list respectivamente. Android ID: A-36817548. Referencias: QC-CR#2058447, QC-CR#2054770."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11061",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing cfg80211 vendor sub command QCA_NL80211_VENDOR_SUBCMD_ROAM, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un subcomando de fabricante cfg80211 QCA_NL80211_VENDOR_SUBCMD_ROAM, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11062",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently attributes are not validated in __wlan_hdd_cfg80211_do_acs which can potentially lead to a buffer overread."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, los atributos no se validan actualmente en _wlan_hdd_cfg80211_do_acs, lo que puede provocar una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11063",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, as a result of a race condition between two userspace processes that interact with the driver concurrently, a null pointer dereference can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, como resultado de una condición de carrera entre dos procesos userspace que interactúan con el controlador de manera concurrente, puede ocurrir una desreferencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11064",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 vendor commands in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_passpoint_fill_network_list function respectively. Android ID: A-36815952. References: QC-CR#2054770, QC-CR#2058447, QC-CR#2066628, QC-CR#2087785"
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se observa una sobrelectura de búfer mientras se procesan comandos de fabricante ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST y QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 en las funciones __wlan_hdd_cfg80211_set_passpoint_list y hdd_extscan_passpoint_fill_network_list respectivamente. Android ID: A-36815952. Referencias: QC-CR#2054770, QC-CR#2058447, QC-CR#2066628, QC-CR#2087785"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11067",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the Athdiag procfs entry does not have a proper address sanity check which may potentially lead to the use of an out-of-range pointer offset."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la entrada procfs de Athdiag no realiza una comprobación correcta del estado de la dirección, lo que puede derivar en el uso de un offset de puntero fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T20:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-2 tiene una fuga de memoria en ReadSGIImage en coders/sgi.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101231",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/759",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T20:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-2 tiene una fuga de memoria en ReadOneJNGImage en coders/png.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101233",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/760",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9683",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:00.993",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a meta image, an integer overflow can occur, if user-defined image offset and size values are too large."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, mientras se flashea una imagen meta, puede ocurrir un desbordamiento de enteros si los valores definidos por el usuario de desplazamiento de imagen y tamaño son demasiado grandes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101117",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9686",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possible double free/use after free in the SPS driver when debugfs logging is used."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, hay una posible doble liberación (double free)/uso de memoria previamente liberada en el controlador SPS cuando se usa el registro debugfs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9687",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of \"0\" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipc_log_context_destroy(). Another issue is the Use-After-Free which can happen due to the race condition when the ipc log is deallocated via the debugfs call during a log print."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, dos hilos/procesos concurrentes pueden escribir el valor de \"0\" en el archivo debugfs que controla el registro ipa ipc, que llevará a una doble liberación (double free) en ipc_log_context_destroy(). Otro problema es el uso de memoria previamente liberada, que puede ocurrir debido a la condición de carrera cuando el registro ipc se desasigna mediante la llamada debugfs durante una impresión de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9697",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while reading command registration table entries in diag_dbgfs_read_table."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, una condición de carrera puede permitir el acceso a memoria ya liberada mientras lee entradas de la tabla de registro en diag_dbgfs_read_table."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9706",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially occur in a display driver."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, puede ocurrir un acceso fuera de límites a un array en un driver de pantalla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9714",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an out of bound memory access may happen in limCheckRxRSNIeMatch in case incorrect RSNIE is received from the client in assoc request."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, un acceso a la memoria fuera de límites puede ocurrir en limCheckRxRSNIeMatch si se recibe un RSNIE incorrecto por parte del cliente en una petición assoc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101117",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9715",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a vendor command, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, al procesar un comando vendor, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9717",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-10-10T20:29:01.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing Netlink attributes, a buffer overread can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, al analizar sintácticamente atributos Netlink, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-10-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1503",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-10T21:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 es vulnerable a ataques de división de respuestas HTTP. Un atacante remoto podría explotar esta vulnerabilidad utilizando una URL especialmente manipulada para provocar que el servidor devuelva una respuesta dividida una vez que se hacer clic en la URL. Esto permitiría que el atacante realice más ataques como el envenenamiento de la memoria caché web, Cross-Site Scripting (XSS) y posiblemente la obtención de información sensible. IBM X-Force ID: 129578."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22006815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101234",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039521",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129578",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22006815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T21:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements."
      }, {
        "lang" : "es",
        "value" : "En Wireshark, desde la versión 2.4.0 hasta la 2.4.1, el disector DOCSIS podría entrar en un bucle infinito. Esto se trató en plugins/docsis/packet-docsis.c añadiendo decrementos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101228",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14080",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=625bab309d9dd21db2d8ae2aa3511810d32842a8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-46.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=625bab309d9dd21db2d8ae2aa3511810d32842a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T21:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by correcting the scope of a variable."
      }, {
        "lang" : "es",
        "value" : "En Wireshark, desde la versión 2.4.0 hasta la 2.4.1, el disector RTSP podría cerrarse inesperadamente. Esto se trató en epan/dissectors/packet-rtsp.c corrigiendo el alcance de una variable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101229",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14077",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23635",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e27870eaa6efa1c2dac08aa41a67fe9f0839e6e0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e27870eaa6efa1c2dac08aa41a67fe9f0839e6e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T21:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length."
      }, {
        "lang" : "es",
        "value" : "En Wireshark, desde la versión 2.4.0 hasta la 2.4.1, desde la 2.2.0 hasta la 2.2.9 y desde la 2.0.0 hasta la 2.0.15, el disector DMP podría cerrarse de manera inesperada. Esto se trató en epan/dissectors/packet-dmp.c validando la longitud de un string."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.15",
            "matchCriteriaId" : "9CEF4F20-B61A-428F-85E8-C0CF9D6AFBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.9",
            "matchCriteriaId" : "FBB1D83C-48C9-4D32-B2AF-CC827DF5A991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "DBA2E0A2-C1A0-4155-8979-A03C4F55FE39"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101227",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14068",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dbb21dfde14221dab09b6b9c7719b9067c1f06e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-44.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dbb21dfde14221dab09b6b9c7719b9067c1f06e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-44.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T21:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level."
      }, {
        "lang" : "es",
        "value" : "En Wireshark desde la versión 2.4.0 hasta la 2.4.1 y desde la 2.2.0 hasta la 2.2.9, el disector BT ATT podría cerrarse inesperadamente. Esto se abordó en epan/dissectors/packet-btatt.c considerando un caso en el que no todos los paquetes BTATT tienen el mismo nivel de encapsulación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405C0606-46BB-4932-BBE4-6ADC12C1FE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639FCB7A-7D1B-4F6B-8CC5-E246961E4321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101235",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14049",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3689dc1db36037436b1616715f9a3f888fc9a0f6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-42.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3689dc1db36037436b1616715f9a3f888fc9a0f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T21:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach."
      }, {
        "lang" : "es",
        "value" : "En Wireshark desde la versión 2.4.0 hasta la 2.4.1 y desde la 2.2.0 hasta la 2.2.9, el disector MBIM podría cerrarse inesperadamente o agotar la memoria del sistema. Esto se abordó en epan/dissectors/packet-mbim.c cambiando el enfoque de asignación de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405C0606-46BB-4932-BBE4-6ADC12C1FE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639FCB7A-7D1B-4F6B-8CC5-E246961E4321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101240",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14056",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=afb9ff7982971aba6e42472de0db4c1bedfc641b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-43.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/23537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=afb9ff7982971aba6e42472de0db4c1bedfc641b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-43.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T21:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description field."
      }, {
        "lang" : "es",
        "value" : "La aplicación dotCMS 4.1.1 es vulnerable a Cross-Site Scripting (XSS) persistente, afectando al campo Title de vanity-urls, al campo Description de containers y al campo Description de templates."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B242F55-9EC7-46B3-AC09-F0D57BC2B5AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/dotCMS%20%3E%204.1.1%20-%20Stored%20XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/dotCMS%20%3E%204.1.1%20-%20Stored%20XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1538",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-10T21:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735."
      }, {
        "lang" : "es",
        "value" : "IBM Financial Transaction Manager para ACH Services para Multi-Platform 3.0.2 puede permitir que un usuario autenticado obtenga información sensible de una URL sin documentar. IBM X-Force ID: 130735."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "84CBA4CA-B6A0-46A0-90A1-31ACB24DEA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.1:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "BD4E52FE-E3DE-433D-93F6-D05AB9DBA462"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "42617C4F-7BF4-41D2-AB91-B3A6E2188024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.1:*:*:*:*:check_services:*:*",
            "matchCriteriaId" : "342EADE4-F46A-4143-9DF9-9920A794FBF8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "97879C5D-9C1A-472E-A310-58A4BD641F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.1:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "253C89EC-8F0E-42CE-A614-7DF0851E3D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008385",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101198",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130735",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8994",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2017-10-10T21:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación de entradas en el producto HPE Operations Orchestration en todas las versiones anteriores a 10.80 permite la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:operations_orchestration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.70",
            "matchCriteriaId" : "9C59E889-60BE-4343-9F38-34D464FAC25B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100588",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03767en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-25",
        "source" : "security-alert@hpe.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-28",
        "source" : "security-alert@hpe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03767en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T23:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "_bfd_dwarf2_cleanup_debug_info en dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29, permite que atacantes remotos provoquen una denegación de servicio (fuga de memoria) mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22212",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b55ec8b676ed05d93ee49d6c79ae0403616c4fb0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b55ec8b676ed05d93ee49d6c79ae0403616c4fb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-10T23:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Zyxel NBG6716 V1.00(AAKG.9)C0 permiten la inyección de comandos en el componente ozkerz debido a que beginIndex y endIndex se usan directamente en una llamada popen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg6716_firmware:1.00\\(aakg.9\\)c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A1AA0C-AF77-4402-BEE4-F68750001B16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg6716:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F9C5E-A554-4EFF-837D-18B074E09730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5700",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-11T00:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage."
      }, {
        "lang" : "es",
        "value" : "Insuficiente protección del almacenamiento de contraseñas en el firmware del sistema para Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH en versiones BN0049 e inferiores permite que atacantes locales omitan las contraseñas Administrator y User mediante el acceso al almacenamiento de contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E7338F-E97C-4C2A-8320-0BAEA1FB365C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A1F20D-B5A6-4010-B94B-399329B426FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D356830-1DBB-43DE-A7E9-6A777EE39FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311F7D11-90D4-4702-9767-2C8540783937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6F051E-D237-4F87-B802-0DC0579E242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F63727-A885-4D30-AF0D-7041160D807F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A0DD6-9FA9-4116-BB65-DC92F67412C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B87539-80FB-4204-82AF-5284B6E16190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776638A5-1CB9-4706-A8DD-8DBEEC0F0A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775C4FDA-94EE-47D7-8940-0FECC60DB1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C540E10-88AA-4EFF-99DE-4BE606A1C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AC578B-5063-47D7-887C-040B7DDAE41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF95B5C-C4EF-4CF3-84C7-4789F79F7AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8293A0-3A36-41BF-AC70-CC48C5A93B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAE844D-523B-45EA-83D9-B97810245819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2C1007-EC35-4624-9EF7-325EFB9D51A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3DCB3E-C437-428C-AAFB-C5D57DD1443E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA87C97F-FC0B-42E2-8EBC-C39C778BD36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E5D240-4014-44BC-8440-C92FABCB4417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA85BEE-61CB-4033-B6B4-6A32AD1F2C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8FFEF7-5140-44F6-91CD-B9468F20692F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C0B75D-2A2C-4437-AE72-35BFB2C6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F074D06A-B828-49EA-B1C2-0FCF71A83E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF75171-EF1D-4ADF-9125-4C9B4EF347CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28D8E17-7A98-4C5E-A9AB-5B56826460DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A87F9-9C0B-4CD9-82EB-C7220F02BED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316FA59-3FAB-4D68-8016-F82649AA56A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C9EEAE-8DA8-485F-ACFE-062F8062DCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4DEB05-EC57-465F-9721-BA2D82955982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468CF14F-D5F7-47EB-BCD1-628BBEBFD648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265BB588-1CB8-4F2C-B716-58FF6A6B0EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF91B19-0FA1-4CE8-B729-A09612466725"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0367FBB9-1E31-4BED-8E6F-AF4275D372AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361A20E-EB65-4C6C-9977-6A988D7414D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0777E301-8278-4937-9B9C-0560985A1B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE5A99-12CA-400F-9B7A-CCC477FF5192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509EE9C7-C13E-4EEC-ABC1-403B15A6DED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE740CB3-7D90-4B00-B3FF-116B74EA5249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE67A7F-9ABB-47D9-A576-4FE7E665477E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CBBF36-F05A-4190-9C11-6DA2B7CA503F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE611A09-0D29-4163-8616-7A7CC12C6ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7143E57A-504B-414B-B22C-F1C8FB929E22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5EC4E6-B529-48DC-9251-73633807E4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB889-967C-4924-8B5C-92B2D561E55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED1ABBA-E6F0-4E1C-A327-220508EBE960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6915BBE5-8F58-4652-A5EC-B0153628F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B550844-0CFE-465C-B383-05FA21253F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80B6A2B-A318-4A6C-9EDE-C749019E911B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E0F74B-EEA3-4656-8CF2-318E0EA42183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A860E39-FB9A-4288-99B0-2692995BCD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F212139-E8B6-4CFE-856B-BCD9E2EBC1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A017F978-9BD3-4830-85EC-538F0E513F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA512D48-426B-4C13-809A-719AA2B241FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101241",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5701",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-11T00:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery."
      }, {
        "lang" : "es",
        "value" : "Configuración de la plataforma insegura en el firmware del sistema para Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH en versiones BN0049 e inferiores permite que un atacante con presencia física ejecute código arbitrario mediante la modificación sin autorización del firmware durante BIOS Recovery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E7338F-E97C-4C2A-8320-0BAEA1FB365C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A1F20D-B5A6-4010-B94B-399329B426FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D356830-1DBB-43DE-A7E9-6A777EE39FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311F7D11-90D4-4702-9767-2C8540783937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6F051E-D237-4F87-B802-0DC0579E242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F63727-A885-4D30-AF0D-7041160D807F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A0DD6-9FA9-4116-BB65-DC92F67412C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B87539-80FB-4204-82AF-5284B6E16190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776638A5-1CB9-4706-A8DD-8DBEEC0F0A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775C4FDA-94EE-47D7-8940-0FECC60DB1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C540E10-88AA-4EFF-99DE-4BE606A1C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AC578B-5063-47D7-887C-040B7DDAE41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF95B5C-C4EF-4CF3-84C7-4789F79F7AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8293A0-3A36-41BF-AC70-CC48C5A93B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAE844D-523B-45EA-83D9-B97810245819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2C1007-EC35-4624-9EF7-325EFB9D51A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3DCB3E-C437-428C-AAFB-C5D57DD1443E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA87C97F-FC0B-42E2-8EBC-C39C778BD36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E5D240-4014-44BC-8440-C92FABCB4417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA85BEE-61CB-4033-B6B4-6A32AD1F2C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8FFEF7-5140-44F6-91CD-B9468F20692F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C0B75D-2A2C-4437-AE72-35BFB2C6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F074D06A-B828-49EA-B1C2-0FCF71A83E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF75171-EF1D-4ADF-9125-4C9B4EF347CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28D8E17-7A98-4C5E-A9AB-5B56826460DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A87F9-9C0B-4CD9-82EB-C7220F02BED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316FA59-3FAB-4D68-8016-F82649AA56A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C9EEAE-8DA8-485F-ACFE-062F8062DCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4DEB05-EC57-465F-9721-BA2D82955982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468CF14F-D5F7-47EB-BCD1-628BBEBFD648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265BB588-1CB8-4F2C-B716-58FF6A6B0EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF91B19-0FA1-4CE8-B729-A09612466725"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0367FBB9-1E31-4BED-8E6F-AF4275D372AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361A20E-EB65-4C6C-9977-6A988D7414D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0777E301-8278-4937-9B9C-0560985A1B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE5A99-12CA-400F-9B7A-CCC477FF5192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509EE9C7-C13E-4EEC-ABC1-403B15A6DED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE740CB3-7D90-4B00-B3FF-116B74EA5249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE67A7F-9ABB-47D9-A576-4FE7E665477E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CBBF36-F05A-4190-9C11-6DA2B7CA503F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE611A09-0D29-4163-8616-7A7CC12C6ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7143E57A-504B-414B-B22C-F1C8FB929E22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5EC4E6-B529-48DC-9251-73633807E4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB889-967C-4924-8B5C-92B2D561E55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED1ABBA-E6F0-4E1C-A327-220508EBE960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6915BBE5-8F58-4652-A5EC-B0153628F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B550844-0CFE-465C-B383-05FA21253F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80B6A2B-A318-4A6C-9EDE-C749019E911B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E0F74B-EEA3-4656-8CF2-318E0EA42183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A860E39-FB9A-4288-99B0-2692995BCD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F212139-E8B6-4CFE-856B-BCD9E2EBC1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A017F978-9BD3-4830-85EC-538F0E513F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA512D48-426B-4C13-809A-719AA2B241FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101257",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5721",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-11T00:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory."
      }, {
        "lang" : "es",
        "value" : "Insuficiente validación de entradas en el firmware del sistema para Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH en versiones BN0049 e inferiores permite que atacantes locales ejecuten código arbitrario mediante la manipulación de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E7338F-E97C-4C2A-8320-0BAEA1FB365C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A1F20D-B5A6-4010-B94B-399329B426FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D356830-1DBB-43DE-A7E9-6A777EE39FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311F7D11-90D4-4702-9767-2C8540783937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6F051E-D237-4F87-B802-0DC0579E242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F63727-A885-4D30-AF0D-7041160D807F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A0DD6-9FA9-4116-BB65-DC92F67412C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B87539-80FB-4204-82AF-5284B6E16190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776638A5-1CB9-4706-A8DD-8DBEEC0F0A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775C4FDA-94EE-47D7-8940-0FECC60DB1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C540E10-88AA-4EFF-99DE-4BE606A1C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AC578B-5063-47D7-887C-040B7DDAE41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF95B5C-C4EF-4CF3-84C7-4789F79F7AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8293A0-3A36-41BF-AC70-CC48C5A93B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAE844D-523B-45EA-83D9-B97810245819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2C1007-EC35-4624-9EF7-325EFB9D51A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3DCB3E-C437-428C-AAFB-C5D57DD1443E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA87C97F-FC0B-42E2-8EBC-C39C778BD36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E5D240-4014-44BC-8440-C92FABCB4417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA85BEE-61CB-4033-B6B4-6A32AD1F2C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8FFEF7-5140-44F6-91CD-B9468F20692F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C0B75D-2A2C-4437-AE72-35BFB2C6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F074D06A-B828-49EA-B1C2-0FCF71A83E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF75171-EF1D-4ADF-9125-4C9B4EF347CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28D8E17-7A98-4C5E-A9AB-5B56826460DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A87F9-9C0B-4CD9-82EB-C7220F02BED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316FA59-3FAB-4D68-8016-F82649AA56A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C9EEAE-8DA8-485F-ACFE-062F8062DCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4DEB05-EC57-465F-9721-BA2D82955982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468CF14F-D5F7-47EB-BCD1-628BBEBFD648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265BB588-1CB8-4F2C-B716-58FF6A6B0EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF91B19-0FA1-4CE8-B729-A09612466725"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0367FBB9-1E31-4BED-8E6F-AF4275D372AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361A20E-EB65-4C6C-9977-6A988D7414D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0777E301-8278-4937-9B9C-0560985A1B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE5A99-12CA-400F-9B7A-CCC477FF5192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509EE9C7-C13E-4EEC-ABC1-403B15A6DED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE740CB3-7D90-4B00-B3FF-116B74EA5249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE67A7F-9ABB-47D9-A576-4FE7E665477E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CBBF36-F05A-4190-9C11-6DA2B7CA503F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE611A09-0D29-4163-8616-7A7CC12C6ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7143E57A-504B-414B-B22C-F1C8FB929E22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5EC4E6-B529-48DC-9251-73633807E4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB889-967C-4924-8B5C-92B2D561E55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED1ABBA-E6F0-4E1C-A327-220508EBE960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6915BBE5-8F58-4652-A5EC-B0153628F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B550844-0CFE-465C-B383-05FA21253F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80B6A2B-A318-4A6C-9EDE-C749019E911B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E0F74B-EEA3-4656-8CF2-318E0EA42183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A860E39-FB9A-4288-99B0-2692995BCD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F212139-E8B6-4CFE-856B-BCD9E2EBC1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A017F978-9BD3-4830-85EC-538F0E513F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA512D48-426B-4C13-809A-719AA2B241FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5722",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-11T00:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage."
      }, {
        "lang" : "es",
        "value" : "Cumplimiento incorrecto de políticas en el firmware del sistema para Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH en versiones BN0049 e inferiores permite que atacantes con acceso local o físico omitan el cumplimiento de protecciones de integridad mediante la manipulación del almacenamiento del firmware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E7338F-E97C-4C2A-8320-0BAEA1FB365C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A1F20D-B5A6-4010-B94B-399329B426FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D356830-1DBB-43DE-A7E9-6A777EE39FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311F7D11-90D4-4702-9767-2C8540783937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6F051E-D237-4F87-B802-0DC0579E242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F63727-A885-4D30-AF0D-7041160D807F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44A0DD6-9FA9-4116-BB65-DC92F67412C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B87539-80FB-4204-82AF-5284B6E16190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776638A5-1CB9-4706-A8DD-8DBEEC0F0A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i7bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775C4FDA-94EE-47D7-8940-0FECC60DB1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C540E10-88AA-4EFF-99DE-4BE606A1C734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46AC578B-5063-47D7-887C-040B7DDAE41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF95B5C-C4EF-4CF3-84C7-4789F79F7AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8293A0-3A36-41BF-AC70-CC48C5A93B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAE844D-523B-45EA-83D9-B97810245819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2C1007-EC35-4624-9EF7-325EFB9D51A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3DCB3E-C437-428C-AAFB-C5D57DD1443E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA87C97F-FC0B-42E2-8EBC-C39C778BD36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E5D240-4014-44BC-8440-C92FABCB4417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA85BEE-61CB-4033-B6B4-6A32AD1F2C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8FFEF7-5140-44F6-91CD-B9468F20692F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C0B75D-2A2C-4437-AE72-35BFB2C6F41A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F074D06A-B828-49EA-B1C2-0FCF71A83E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF75171-EF1D-4ADF-9125-4C9B4EF347CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28D8E17-7A98-4C5E-A9AB-5B56826460DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A87F9-9C0B-4CD9-82EB-C7220F02BED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316FA59-3FAB-4D68-8016-F82649AA56A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C9EEAE-8DA8-485F-ACFE-062F8062DCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4DEB05-EC57-465F-9721-BA2D82955982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468CF14F-D5F7-47EB-BCD1-628BBEBFD648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i5bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265BB588-1CB8-4F2C-B716-58FF6A6B0EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF91B19-0FA1-4CE8-B729-A09612466725"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0367FBB9-1E31-4BED-8E6F-AF4275D372AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361A20E-EB65-4C6C-9977-6A988D7414D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0777E301-8278-4937-9B9C-0560985A1B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE5A99-12CA-400F-9B7A-CCC477FF5192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509EE9C7-C13E-4EEC-ABC1-403B15A6DED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE740CB3-7D90-4B00-B3FF-116B74EA5249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE67A7F-9ABB-47D9-A576-4FE7E665477E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CBBF36-F05A-4190-9C11-6DA2B7CA503F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE611A09-0D29-4163-8616-7A7CC12C6ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7143E57A-504B-414B-B22C-F1C8FB929E22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5EC4E6-B529-48DC-9251-73633807E4A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB889-967C-4924-8B5C-92B2D561E55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED1ABBA-E6F0-4E1C-A327-220508EBE960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6915BBE5-8F58-4652-A5EC-B0153628F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B550844-0CFE-465C-B383-05FA21253F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80B6A2B-A318-4A6C-9EDE-C749019E911B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E0F74B-EEA3-4656-8CF2-318E0EA42183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A860E39-FB9A-4288-99B0-2692995BCD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F212139-E8B6-4CFE-856B-BCD9E2EBC1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A017F978-9BD3-4830-85EC-538F0E513F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc7i3bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA512D48-426B-4C13-809A-719AA2B241FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101236",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admin_device/index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la interfaz web de EyesOfNetwork (también conocida como eonweb) 5.1-0 permite que administradores remotos autenticados inyecten scripts web o HTML arbitrarios mediante el parámetro hosts array en module/admin_device/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_device_index%20stored%20XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_device_index%20stored%20XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page."
      }, {
        "lang" : "es",
        "value" : "include/global_session.php en Cacti 1.1.25 tiene XSS relacionado con (1) la URI o (2) la acción refresh page."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20820A0-E201-4CD6-9E4B-61426B5E2107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039569",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1010",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar calles de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar columnas de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir una nueva categoría a un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar una categoría de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar metadatos de un proyecto privado de otro usuario, tal y como demuestra Name, Email, Identifier y Description."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir una nueva tarea a un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar etiquetas de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar columnas de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar categorías de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir acciones automáticas a un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede descargar adjuntos de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir un enlace interno a un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:54.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar tareas de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar acciones automáticas de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar adjuntos de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede ver miniaturas de imágenes de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir un enlace interno a un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user."
      }, {
        "lang" : "es",
        "value" : "En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede, por lo menos, ver los nombres de etiquetas de un proyecto privado de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FFA667-B2E5-464E-9B11-3B98283AD2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F126BD8-B6F8-43BF-96CF-B11F2E9CB9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3507C156-EB3B-470C-B895-F71845D2368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0902C1-DECB-4183-B369-511E2768D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA633272-8FA7-407C-9B3E-2D876B7271F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B306B73B-15B3-4B8B-9095-3642F8B47924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA40036-AC79-4367-BACB-B0B1451C5BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86BF2C5-D92F-41B4-B381-6D21BAA2D913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62EF43A-C147-4C11-BD6E-82CF941AEBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958B6A4D-C466-4361-AA0A-5EB3D111C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C42F62-CD96-4727-9CD0-C3BD81418E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970266EC-8452-4A06-81AC-05CF336D3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE55D52-992D-4E67-BB6C-2E80299D22E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE0BBFF-553F-4518-809B-BF136B7ABC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFAF36-875E-41DB-BFB8-45846E29903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1333058-CD6D-4F7D-8C07-D4352D2FA9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3952635-F178-4AC0-8FE7-1034E0078AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7512FB30-BE2A-4CDA-8B77-44234223B578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971C5D44-1406-4446-BEFE-20EF9ECDFFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0045683B-30D9-4A04-A3A4-4DB903245380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF439AC-B790-45D7-9C25-1C9195924ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FDBF54-282B-49A1-8095-811A5B998EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F650F14A-6A3E-4FD2-BCA1-6AF29278B827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C4B000-72B1-4E5F-814E-FBE2CEC602A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9249BDDA-4E2D-421D-8285-926FC400AC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8946D-2BF0-47FD-BEA0-0C2C74126142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0315865-561D-4EA2-B361-FDB6D03FF5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0FC480-9E2A-4A76-92FF-60E6239CE89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA990B5-D038-4E5E-8FAF-035460BD4146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070A3295-AFD7-473F-A9DA-ACF84C33274E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0B924E-76CE-412D-A47A-417B7C5E3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B48D3D-556D-4942-99E6-E6135400B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "08E6DE90-A247-4B72-A05C-61C9496E0D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.31:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D496D1-DF37-4B06-BAE5-485D5141E1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6332E7-A86D-4B09-93B3-815797E92A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8AE758-147C-4786-89CE-D2876C23BA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.32:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4781CBDB-35CA-43BC-B031-34DB66B16D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F193B8-C859-47A5-9D1C-510925E9478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF622DE0-35C4-4F04-B74A-4127A885395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B3CDED-1284-45F7-93E2-F3CBFD2BB79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4CD995-FEF9-47DE-A5AB-671471773DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60825078-59BC-45AD-B644-B23973233B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695EEFA-1098-4741-A4C5-39D613880091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD1826-5FC0-4773-AFFB-EAE3CFA4AC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5033EDD4-9217-467E-91E9-8805B3667E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04963CA-D17A-4847-B022-187D33134A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868722FE-E626-427A-8B24-58A8214824A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2AF76B-C4CA-40D1-829C-E80560E14FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D7AE61-C248-4E95-8878-903A188B41C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A191D-9A57-4B53-AD41-30CF317AA102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:1.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41590AFF-2DB4-4D37-8CF8-84FCF85BB75B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/04/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kanboard.net/news/version-1.0.47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or email_address field to themes/CleanFS/templates/common.editallusers.tpl."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) persistente en Flyspray en versiones anteriores a 1.0-rc6 permite que un usuario autenticado inyecte JavaScript para obtener privilegios de administrador mediante los campos real_name o email_address en themes/CleanFS/templates/common.editallusers.tpl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspray:flyspray:*:rc4:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "DADD112F-F7E0-4884-B439-813880F7BCFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/07/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/commit/754ec5d04348ef7ecb8cb02ade976dc412b031f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/commit/754ec5d04348ef7ecb8cb02ade976dc412b031f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users (including unauthenticated users), via the name, title, or id parameter to plugins/dokuwiki/lib/plugins/changelinks/syntax.php."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) persistente en Flyspray en versiones anteriores a 1.0-rc6 permite que un usuario autenticado inyecte JavaScript para obtener privilegios de administrador y también ejecute JavaScript contra otros usuarios (incluyendo a los que no se hayan autenticado) mediante los parámetros name, title o id en plugins/dokuwiki/lib/plugins/changelinks/syntax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspray:flyspray:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "26A4FBFF-F162-49A9-9373-6DE517B6264E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/07/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/commit/00cfae5661124f9d67ac6733db61b2bfee34dccc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/commit/00cfae5661124f9d67ac6733db61b2bfee34dccc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T01:32:55.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can (for example) take over the admin session or change global settings or add/delete links. It is also possible to execute JavaScript against unauthenticated users."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) reflejado permite que un atacante sin identificar inyecte JavaScript mediante el parámetro searchtags en index.php. Si la víctima es un administrador, un atacante puede (por ejemplo) tomar el control de la sesión de administrador o cambiar configuraciones globales o añadir/borrar enlaces. También es posible ejecutar JavaScript contra usuarios sin autenticar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shaarli_project:shaarli:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8064EA18-3EAA-45D1-81EC-B7C52DD85D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/shaarli/Shaarli/pull/987",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shaarli/Shaarli/releases/tag/v0.9.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/shaarli/Shaarli/pull/987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shaarli/Shaarli/releases/tag/v0.9.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T03:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file."
      }, {
        "lang" : "es",
        "value" : "libjpeg-turbo 1.5.2 tiene una desreferencia de puntero NULL en jdpostct.c y jquant1.c mediante un archivo JPEG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF70D31B-3A3B-4653-B792-3A24CA1C4CD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libjpeg-turbo/libjpeg-turbo/pull/182",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/mozjpeg/issues/268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3706-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libjpeg-turbo/libjpeg-turbo/pull/182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/mozjpeg/issues/268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3706-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T03:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename."
      }, {
        "lang" : "es",
        "value" : "El módulo File Manager (gollem) 3.0.11 en Horde Groupware 5.2.21 permite que atacantes remotos omitan la autenticación de Horde para descargas de archivos mediante un parámetro fn manipulado que corresponde al nombre de archivo exacto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7054862-3FC5-4F4D-8596-3E9CF7E9D793"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3454",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00050.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T03:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config* files and extendword.txt."
      }, {
        "lang" : "es",
        "value" : "Cámaras Tiandy IP 5.56.17.120 no restringen correctamente cierto protocolo propietario, lo que permite que atacantes remotos lean configuraciones mediante una petición manipulada al puerto TCP 3001, demostrado por los archivos config* y extendword.txt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tiandy:tiandy_ip_camera_firmware:5.56.17.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46132A12-C0D9-4BBD-9D44-8D0CEEFBA0DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tiandy:tiandy_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998F731C-B47D-4231-AB58-08203169ECFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3444",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T03:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, related to ReadJNGImage."
      }, {
        "lang" : "es",
        "value" : "ReadOneJNGImage en coders/png.c en GraphicsMagick 1.3.26 tiene un problema de uso de memoria previamente liberada cuando el ancho o el alto es cero, relacionado con ReadJNGImage."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=93bdb9b30076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=df946910910d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/469/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=93bdb9b30076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=df946910910d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/469/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T06:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the \"host\" parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) persistente en la versión 4.7.6 de Pure Storage Purity permite que usuarios autenticados remotos inyecten scripts web o HTML arbitrarios mediante el parámetro \"host\" en la pantalla 'System > Configuration > SNMP > Add SNMP Trap Manager'"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purestorage:purity:4.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EE26DD-39A6-49C5-94BE-68DD433E61B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arthrocyber.com/research#finding_3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://arthrocyber.com/research#finding_3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T13:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Flexense VX Search Enterprise 10.1.12 es vulnerable a un desbordamiento de búfer mediante una petición POST vacía a una URI larga que comienza con una subcadena /../. Esto permite que atacantes remotos ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:vx_search:10.1.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "849529F1-2F54-44E4-AAA4-6E4663642132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42973/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42973/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12188",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-11T15:29:00.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an \"MMU potential stack buffer overrun.\""
      }, {
        "lang" : "es",
        "value" : "arch/x86/kvm/mmu.c en el kernel de Linux hasta 4.13.5, cuando se utiliza la virtualización anidada, no atraviesa adecuadamente las entradas de la tabla de páginas invitadas para resolver una dirección virtual invitada, lo que permite a los usuarios del sistema operativo invitado L1 ejecutar código arbitrario en el sistema operativo host o provocar una denegación de servicio (índice incorrecto durante el recorrido de la página y falla del sistema operativo host), también conocido como \"potencial desbordamiento de búfer en la región stack de la memoria de MMU\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.9.57",
            "matchCriteriaId" : "F0E25B55-0789-46C4-B6CE-566CA50BB866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.8",
            "matchCriteriaId" : "0CD397D8-C278-45DC-A0B3-ABBC73A74ED7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101267",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0395",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500380",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9996579/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9996587/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9996579/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9996587/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T17:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\\0' characters are incorrectly skipped in situations involving ? characters."
      }, {
        "lang" : "es",
        "value" : "En la función PatternMatch en fontfile/fontdir.c en libXfont, en versiones hasta la 1.5.2 y versiones 2.x hasta la 2.0.2, un atacante con acceso a una conexión X puede provocar una sobrelectura de búfer durante una comparación de patrones de fuentes, lo que da lugar a una revelación de información o cierre inesperado (denegación de servicio). Esto ocurre porque se omiten de manera incorrecta los caracteres \"\\0\" en situaciones en las que existen caracteres ?."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxfont:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "94159B28-552B-449D-BAD5-AED275362D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxfont:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D9133B-6806-4947-B43F-F13FE6FA1FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxfont:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F2E32E-A188-4EB6-929D-CF74271011C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500690",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1054285",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d1e670a4a8704b8708e493ab6155589bcd570608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1054285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d1e670a4a8704b8708e493ab6155589bcd570608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T17:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server."
      }, {
        "lang" : "es",
        "value" : "En la función pcfGetProperties en bitmap/pcfread.c en libXfont, en versiones hasta la 1.5.2 y versiones 2.x hasta la 2.0.2, atacantes autenticados en un servidor X podrían utilizar la falta de una comprobación de límites (para archivos PCF) para llevar a cabo una sobrelectura de búfer con el fin de conseguir que se produzca una revelación de información o un cierre inesperado del servidor X."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxfont:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "94159B28-552B-449D-BAD5-AED275362D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxfont:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D9133B-6806-4947-B43F-F13FE6FA1FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxfont:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F2E32E-A188-4EB6-929D-CF74271011C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500693",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049692",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=672bb944311392e2415b39c0d63b1e1902905bcd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=672bb944311392e2415b39c0d63b1e1902905bcd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T17:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate."
      }, {
        "lang" : "es",
        "value" : "En GNU Libextractor 1.4, hay una vulnerabilidad de división entre cero en EXTRACTOR_wav_extract_method en wav_extractor.c a través de una tasa de muestreo cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E4746A-DBC3-4EC1-BE84-B6AE934CDB9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/11/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101271",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1499599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1499599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T17:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c."
      }, {
        "lang" : "es",
        "value" : "En GNU Libextractor 1.4, existe una desreferencia de puntero NULL en flac_metadata en flac_extractor.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E4746A-DBC3-4EC1-BE84-B6AE934CDB9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/11/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101272",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1499600",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1499600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0903",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-10-11T18:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de RubyGems entre la 2.0.0 y la 2.6.13 son vulnerables a una posible vulnerabilidad de ejecución remota de código. La deserialización YAML de especificaciones de gemas puede omitir listas blancas de clases. Es posible que se utilicen objetos serializados especialmente manipulados para escalar a ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D82506-3FB5-41BA-8704-CC324C0B0DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.0:preview2:*:*:*:*:*:*",
            "matchCriteriaId" : "28EF4773-AA97-4209-951F-942286A92413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.0:preview2.1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3D3005-679A-4761-AC38-CAE1C1CB20AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.0:preview2.2:*:*:*:*:*:*",
            "matchCriteriaId" : "344FF6A4-8041-4652-A0EA-F18BB0FCFB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CC620F-8E83-4256-9872-CCCDF5A4ED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F22B79F6-5CA1-4E5C-9223-345A39EDD507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260A155C-ED09-44E7-8279-5B94A4AC8CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E0506F-F2E6-45A2-B637-576C341A71B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EC4513-B653-438A-A1E4-406D055FC160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FDF363-24FA-45D2-879B-B1CF9B667AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A81F55-2B6B-467C-9281-AA11ED31220F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8143D88-890D-4C87-9120-46B33D7D63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5608F5-AC8A-4368-9323-A2CC09F18AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ACEEB4D-D21D-4D89-881A-9FC33121F69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3D1495-E577-492F-ADE1-B8E8FB7F241A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD623FF-E72B-4C63-B9E6-AFCDEFDD760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA1E4C2-29CA-48C2-AFFA-5357B36655FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB358B7A-D258-4B86-BBD9-09388109653A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C608597-03F7-4F01-803F-0E2B1E9E1D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C95ABA-1949-4B56-B9E3-44B4AF90274D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD319AE0-3D8C-40DF-857D-C38EAFA88C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34709EF4-D695-4184-816A-F51FD9DF8AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5722DC3C-A813-4F02-AC78-47292BAC5A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B50C72-C84A-4B4B-9E62-EB78E50DD19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.0.rc.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A1FFCC-3966-4ADD-AF87-7128814ED326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.0.rc.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BA31E0-D32D-41B4-B663-7747BABC826B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360BB3DB-FC9E-4791-AF2F-D331267E1603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FE3A27-39D4-4D73-9E04-81AB02736435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3FFBBD-D379-4C00-B8B7-2B21B7E8C6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5987FA3A-4C1B-45DC-909A-2B475917CC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FA3A47-708F-4CE1-99A8-886C93A2E29B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D707C58B-7AD8-4590-863D-858612AC93C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34F8D8D-8D29-4EB8-94F5-702017BB41E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D9F639-3F53-4ED5-A0EF-19955D253D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E18301D-C1A2-45CD-9136-8995E0477592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFCB861-5386-48B8-B644-7029FEAD2030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D70F6E5-EAF2-4C0E-9E20-5FCC30310862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672CC7FA-188C-4F34-B10D-7E0C4E7857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.0.preiew.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E52DC21-4720-4271-80CD-0E5AB75E69C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.0.rc.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E453C7-9EBC-4A5F-A37D-2D53F81F7095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCFF897-E65B-4D58-BA4D-B08FEF1201B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6D0730-F774-4E29-9871-3FF4BA89981E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D692C10-A24E-48EA-887C-7333C772744C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDB36D4-FB34-4FAB-8549-AF7D5244CCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EFBBB5-2A80-4BF0-BF5F-67219AB41046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29225B01-225B-47A1-B48B-67FEACCA99CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD153C-B0C3-4A91-8B09-839341FA4434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D0BF47-C818-4834-BFA2-23DD25386CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F54C49A-12CE-4AC5-A94A-9C5921414AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFF3F39-EF40-4D73-965F-98A51C39C02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BCB8FC-EE9C-4AA4-A4A0-E20A3E557129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B90365-2172-43E3-870B-A16F9FB45FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4932202-9EEA-4B95-A24A-637678837179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE86B4DE-776B-460F-B5C3-02C691243820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EAA024-49AB-4EDB-8578-72F802F39409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B81760-1F5F-4E0B-9B98-1C1E646F2DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9639274-4E24-47D2-B94C-EDEF5C855C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964790F3-B248-4F0C-85F3-1B4DC82FC41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF4340-5BD1-4230-858A-3CE781DD7967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3C972A-88C7-46A3-81AF-6D49D3622068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2E59F5-D72A-4027-9F1D-D4A986C5B442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51870568-D16C-4367-855D-CB5C41173109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCFBE7B-2445-499D-8A16-72E3DA07C7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378AD8DD-C912-42CC-BB3B-6955A08B0893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E22C451-6EEA-4104-99DB-3741F57AFE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0EE70C-9AFE-4DB0-8257-24D2B44C9D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560B7561-53C5-4796-8EFF-1A666BB3155B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975D930C-13A8-4A9D-9EA7-55A17B9A3955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE10321-B685-4688-AB4E-6D3C7DCC8C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2660E82-55D1-4C5D-AC9C-B914E482B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0119E0AA-F472-49EE-9130-6EE83229B4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubygems:rubygems:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF07EBF-4FAF-4DF5-8C74-CB33CC1BDBD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.rubygems.org/2017/10/09/2.6.14-released.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101275",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/510b1638ac9bba3ceb7a5d73135dafff9e5bab49",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/274990",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3553-1/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/10/09/2.6.14-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubygems/rubygems/commit/510b1638ac9bba3ceb7a5d73135dafff9e5bab49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/274990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3553-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14587",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-10-11T18:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the uname parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso de borrado de usuarios de administración en Atlassian Fisheye y Crucible en versiones anteriores a la 4.4.2 permite a los atacantes remotos inyectar HTML o JavaScript arbitrarios a través de una vulnerabilidad de Cross-Site Scripting (XSS)  en el parámetro uname"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.1",
            "matchCriteriaId" : "490C796D-2703-4299-B466-44C87938BF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.1",
            "matchCriteriaId" : "40B09403-2209-4C47-A0EB-BDF9236173C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101266",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8112",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6933",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14588",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-10-11T18:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en Atlassian Fisheye y Crucible en versiones anteriores a la 4.4.2 permiten a los atacantes remotos inyectar HTML o JavaScript arbitrarios a través de una vulnerabilidad de cross site scripting (XSS) en el parámetro de diálogo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.1",
            "matchCriteriaId" : "490C796D-2703-4299-B466-44C87938BF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.1",
            "matchCriteriaId" : "40B09403-2209-4C47-A0EB-BDF9236173C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101268",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8113",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6935",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:01.193",
      "lastModified" : "2023-11-07T02:39:19.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1642.  Reason: This candidate is a reservation duplicate of CVE-2009-1642.2.  Notes: All CVE users should reference CVE-2009-1642 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:01.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000040db4.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 - 32bit, con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000040db4.\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15239",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132cef.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132cef\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15240",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:01.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000000929f5.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000000929f5\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15241",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:02.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a \"User Mode Write AV starting at PDF!xmlGetGlobalState+0x0000000000031abe.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at PDF!xmlGetGlobalState+0x0000000000031abe\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15242",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x00000000000568a4.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x00000000000568a4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15243",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:02.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to an \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15244",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:02.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at PDF!xmlGetGlobalState+0x0000000000057b76.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at PDF!xmlGetGlobalState+0x0000000000057b76\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15245",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:02.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a \"Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x000000000001515b.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x000000000001515b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15246",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:02.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000001168a1.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000001168a1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15247",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:03.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to \"Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x0000000000063ca6.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x0000000000063ca6\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15248",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:03.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to \"Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x00000000000668d6.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x00000000000668d6\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15249",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:03.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132e19.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132e19\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15250",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:03.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to \"Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x00000000000e7326.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x00000000000e7326\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15251",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:03.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a \"Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x00000000000158cb.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x00000000000158cb\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15252",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:03.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a \"User Mode Write AV starting at PDF!xmlGetGlobalState+0x000000000007dff2.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at PDF!xmlGetGlobalState+0x000000000007dff2\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Read Access Violation starting at PDF!xmlGetGlobalState+0x000000000007dfa5.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at PDF!xmlGetGlobalState+0x000000000007dfa5\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15254",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Read Access Violation starting at PDF!xmlParserInputRead+0x00000000001601b0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at PDF!xmlParserInputRead+0x00000000001601b0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15255",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x0000000000019fc8.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x0000000000019fc8\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15256",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to \"Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x000000000009174a.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x000000000009174a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15257",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000161a9c.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000161a9c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15258",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x000000000011624a.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x000000000011624a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15259",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000129a59.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000129a59\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15260",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a \"Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x0000000000057b35.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x0000000000057b35\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15261",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to \"Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x0000000000048d0c.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x0000000000048d0c\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to \"Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x00000000000166c4.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit), con la versión del plugin PDF 4.43, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .pdf manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x00000000000166c4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:pdf:4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF85102B-9D56-470B-B839-76F96598F85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15263",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-11T18:29:04.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at image00000000_00400000+0x00000000000236e4.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.44 (32bit) permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .tif manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at image00000000_00400000+0x00000000000236e4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.44:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "88778CE0-192D-42EA-8644-9BF65D383A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15264",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2887",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-10-11T18:29:04.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la funcionalidad de manejo de propiedades XCF de SDL_image 2.0.1. Un archivo xcf especialmente manipulado podría provocar un desbordamiento de búfer basado en pila, que resultaría en una posible ejecución de código. Un atacante puede enviar un archivo XCF especialmente manipulado para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A612BA9E-1E1D-4497-9199-9B384D8D6F2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101215",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0394",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2888",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-10-11T18:29:05.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de enteros cuando se crea una nueva superficie RGB en SDL 2.0.5. Un archivo especialmente manipulado puede causar un desbordamiento de enteros en un espacio asignado demasiado pequeño, lo que puede provocar un desbordamiento de búfer y una posible ejecución de código. Un atacante puede enviar un archivo de imagen especialmente manipulado para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:simple_directmedia_layer:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDC19F-F567-4730-9582-7623C64EE75D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD783B0C-9246-47D9-A937-6144FE8BFF0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101215",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00031.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4143-1/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4143-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14003",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-11T19:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, which, if exploited, would allow an attacker with the same IP address to bypass authentication by accessing a specific uniform resource locator."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de omisión de autenticación por suplantación en LAVA Ether-Serial Link (ESL) que ejecuten versiones de firmware 6.01.00/29.03.2007 y anteriores. Se ha identificado una vulnerabilidad de autenticación incorrecta que, si se explotase, podría permitir que un atacante con la misma dirección IP omitiese la autenticación accediendo a un localizador de recurso uniforme específico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lavalink:ether-serial_link_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.01.00\\/29.03.2007",
            "matchCriteriaId" : "BED529A9-ED44-4288-88AE-68641CEAF58E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lavalink:ether-serial_link:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82B75CC-092B-401E-B857-FA8A6462442B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101226",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-283-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-283-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14369",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A low privileged RSA Archer user may potentially exploit this vulnerability to elevate their privileges and export certain application records."
      }, {
        "lang" : "es",
        "value" : "La plataforma RSA Archer GRC en versiones anteriores a la 6.2.0.5 se ve afectada por una vulnerabilidad de escalado de privilegios. Un usuario de RSA Archer con un bajo nivel de privilegios podría explotar esta vulnerabilidad para elevar sus privilegios y exportar los registros de alguna aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:archer_grc_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0.4",
            "matchCriteriaId" : "92B67F9C-3802-49AB-9B9F-CAC941B96E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14370",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application."
      }, {
        "lang" : "es",
        "value" : "La plataforma RSA Archer GRC en versiones anteriores a la 6.2.0.5 se ve afectada por un Cross-Site Scripting (XSS) persistente mediante el campo Source Asset ID. Un atacante autenticado podría explotarlo para ejecutar HTML arbitrario en la sesión del buscador del usuario, en el contexto de una aplicación RSA Archer afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:archer_grc_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0.4",
            "matchCriteriaId" : "92B67F9C-3802-49AB-9B9F-CAC941B96E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14371",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application."
      }, {
        "lang" : "es",
        "value" : "La plataforma RSA Archer GRC en versiones anteriores a la 6.2.0.5 se ve afectada por un Cross-Site Scripting (XSS) reflejado mediante la URL de petición. Los atacantes podrían explotarlo para ejecutar HTML arbitrario en la sesión del buscador del usuario, en el contexto de una aplicación RSA Archer afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:archer_grc_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0.4",
            "matchCriteriaId" : "92B67F9C-3802-49AB-9B9F-CAC941B96E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14372",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application."
      }, {
        "lang" : "es",
        "value" : "La plataforma RSA Archer GRC en versiones anteriores a la 6.2.0.5 se ve afectada por vulnerabilidades de Cross-Site Scripting (XSS) reflejado mediante ciertas páginas de ayuda de RSA Archer. Los atacantes podrían explotarlo para ejecutar código HTML arbitrario en la sesión del buscador del usuario, en el contexto de una aplicación RSA Archer afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:archer_grc_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0.4",
            "matchCriteriaId" : "92B67F9C-3802-49AB-9B9F-CAC941B96E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8016",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application."
      }, {
        "lang" : "es",
        "value" : "La plataforma RSA Archer GRC en versiones anteriores a la 6.2.0.5 se ve afectada por Cross-Site Scripting (XSS) persistente mediante el campo Questionnaire ID. Un atacante autenticado podría explotarlo para ejecutar código HTML arbitrario en la sesión del navegador del usuario en el contexto de la aplicación RSA Archer afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:archer_grc_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0.4",
            "matchCriteriaId" : "51ED3BC3-0839-407E-B2BA-4787BAED9DFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8017",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x y 9.4.2.x se ve afectado por una vulnerabilidad de Cross-Site Scripting (XSS) reflejado que podría ser explotada por usuarios maliciosos para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5898D8B-A49B-4B4E-B7E0-D4901C0C52C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1230B15-B5CA-4C0E-B6C7-4DA2FD83E18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A611CEC3-D330-4385-A2AD-28F40B16BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:smarts_network_configuration_manager:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE535D78-B893-4909-8AF5-EDFC2430B6F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/11",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101194",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039517",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8025",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-11T19:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to upload malicious files via attachments to arbitrary paths on the web server."
      }, {
        "lang" : "es",
        "value" : "La plataforma RSA Archer GRC en versiones anteriores a la 6.2.0.5 se ve afectada por una vulnerabilidad de subida de archivos arbitrarios. Un atacante remoto no autenticado podría explotar esta vulnerabilidad para subir archivos maliciosos mediante archivos adjuntos a rutas arbitrarias en el servidor web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:archer_grc_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0.4",
            "matchCriteriaId" : "51ED3BC3-0839-407E-B2BA-4787BAED9DFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5789",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2017-10-11T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "HPE LoadRunner en versiones anteriores a la 12.53 parche 4 y HPE Performance Center en versiones anteriores a la 12.53 parche 4 permite que atacantes remotos ejecuten código arbitrario mediante vectores no especificados. Al menos en LoadRunner, esto es un desbordamiento de búfer basado en memoria dinámica (heap) de libxdrutil.dll mxdr_string."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:loadrunner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.53",
            "matchCriteriaId" : "0458950F-9181-4A1A-8CEF-E41425A347AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:performance_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.53",
            "matchCriteriaId" : "0A1D654F-0D62-46CB-BEBC-3BB68A097FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101224",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96774",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038028",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-160/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03712en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-13",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-160/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03712en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5791",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2017-10-11T21:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI."
      }, {
        "lang" : "es",
        "value" : "El método doFilter en UrlAccessController en HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 permite la omisión remota de autenticación mediante cadenas no especificadas en una URI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center_plat:7.2:e0403p06:*:*:*:*:*:*",
            "matchCriteriaId" : "57B1C8C3-FC1E-459B-A9FA-A0224652EEF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101224",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96815",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037983",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-161/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03716en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-161/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03716en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12192",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-12T00:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation."
      }, {
        "lang" : "es",
        "value" : "La función keyctl_read_key en security/keys/keyctl.c en el subcomponente Key Management en el kernel de Linux en versiones anteriores a la 4.13.5 no considera correctamente que se puede tener una clave instanciada negativamente, lo que permite que los usuarios locales provoquen una denegación de servicio (OOPS y cierre inesperado del sistema) mediante una operación KEYCTL_READ manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.4",
            "matchCriteriaId" : "928AB8DD-8573-4425-803D-1B164491BF77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1493435",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/9/18/764",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1493435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/9/18/764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T00:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192."
      }, {
        "lang" : "es",
        "value" : "security/keys/keyctl.c en el kernel de Linux en versiones anteriores a la 4.11.5 no tiene en cuenta el caso de una carga útil NULL junto con un valor de longitud que no sea cero, lo que permite a usuarios locales provocar una denegación de servicio (desreferencia de puntero NULL and OOPS) mediante una llamada de sistema add_key o keyctl manipulada. Esta es una vulnerabilidad diferente a CVE-2017-12192."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.4",
            "matchCriteriaId" : "CEAAE4E7-00CF-47FC-8331-A5B82622BB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101292",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1045327",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9781573/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5649645d725c73df4302428ee4e02c869248b4c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1045327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5649645d725c73df4302428ee4e02c869248b4c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9781573/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette."
      }, {
        "lang" : "es",
        "value" : "ReadGIFImage en coders/gif.c en ImageMagick 7.0.6-1 y GraphicsMagick 1.3.26 deja sin inicializar la paleta cuando se procesa un archivo GIF que no tiene ni una paleta global ni una local. Si el producto afectado se utiliza como una librería cargada en un proceso que opera en datos de interés, estos datos pueden filtrarse a veces mediante la paleta no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A6252A-35A7-4D74-AF0E-0A7B4B12B146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/9fd10cf630832b36a588c1545d8736539b2f1fb5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/592",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/neex/gifoeb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/9fd10cf630832b36a588c1545d8736539b2f1fb5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/neex/gifoeb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto Cross-Site Scripting (XSS) en TeamPass en versiones anteriores a la 2.1.27.9. Esta vulnerabilidad existe por un filtrado insuficiente de datos (en /sources/folders.queries.php). Un atacante podría ejecutar código script y HTML arbitrario en un navegador en el contexto del sitio web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.27.8",
            "matchCriteriaId" : "9FABC017-C09E-40C2-96EF-667CEF2F9FFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/f5a765381f051fe624386866ddb1f6b5e7eb929b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/releases/tag/2.1.27.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/f5a765381f051fe624386866ddb1f6b5e7eb929b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/releases/tag/2.1.27.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the \"page name\" (aka nodename) parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and Umbraco.Web/umbraco.presentation/umbraco/dialogs/notifications.aspx.cs."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en Umbraco CMS en versiones anteriores a la 7.7.3 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro \"page name\" (también conocido como nodename) durante la creación de una nueva página. Esto está relacionado con Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs y Umbraco.Web/umbraco.presentation/umbraco/dialogs/notifications.aspx.cs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.2",
            "matchCriteriaId" : "ED6DB680-A447-45E3-9DA7-F1B4FB25C557"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.umbraco.org/issue/U4-10497",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/umbraco/Umbraco-CMS/commit/fe2b86b681455ac975b294652064b2718d4e2ba2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://issues.umbraco.org/issue/U4-10497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/umbraco/Umbraco-CMS/commit/fe2b86b681455ac975b294652064b2718d4e2ba2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts (aka SSRF), related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XEE (XML External Entity) en Umbraco CMS en versiones anteriores 7.7.3 permite que atacantes obtengan información sensible leyendo archivos en el servidor o enviando peticiones TCP a hosts de la intranet (también conocido como SSRF). Esto está relacionado con Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.2",
            "matchCriteriaId" : "ED6DB680-A447-45E3-9DA7-F1B4FB25C557"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.umbraco.org/issue/U4-10506",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/umbraco/Umbraco-CMS/commit/5dde2efe0d2b3a47d17439e03acabb7ea2befb64",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://issues.umbraco.org/issue/U4-10506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/umbraco/Umbraco-CMS/commit/5dde2efe0d2b3a47d17439e03acabb7ea2befb64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to \"Conditional jump or move depends on uninitialised value(s).\""
      }, {
        "lang" : "es",
        "value" : "ReadPSDImage en coders/psd.c en ImageMagick 7.0.7-6 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de aplicación) o posiblemente produzca otro impacto no especificado mediante un archivo manipulado. Esto está relacionado con \"Conditional jump or move depends on uninitialised value(s)\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06181770-7500-4FEE-BB32-F677752AFEBC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101276",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/832",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) en OctoberCMS 1.0.425 (también conocido como Build 425), permitiendo que un usuario con los privilegios más bajos suba un archivo SVG que contenga código malicioso como el Avatar para el perfil. Cuando el Admin lo abre, provoca que se ejecute código JavaScript en el contexto de la cuenta Admin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:1.0.425:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F823D-1B29-490D-9C02-3D26A45C1BEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/library/commit/3bbbbf3da469f457881b5af902eb0b89b95189a2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144587/OctoberCMS-1.0.425-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42978/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/octobercms/library/commit/3bbbbf3da469f457881b5af902eb0b89b95189a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144587/OctoberCMS-1.0.425-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42978/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails to check remote file extensions before saving locally. This vulnerability can be exploited by anyone with Vendor access or higher. One attack methodology is to upload an image file in the Attachments section of a product catalog, upload a .php file with an \"Add File Via URL\" action, and change the image's Description URL to reference the .php URL in the attachments/ directory."
      }, {
        "lang" : "es",
        "value" : "X-Cart 5.2.23, 5.3.1.9, 5.3.2.13 y 5.3.3 es vulnerable a la ejecución remota de código. Esta vulnerabilidad existe porque la aplicación no consigue chequear las extensiones de archivos remotos antes de guardarlos localmente. Esta vulnerabilidad la puede explotar cualquiera con acceso Vendor o superior. Una metodología de ataque es subir un archivo de imagen en la sección Attachments de un catálogo de productos, subir un archivo .php con una acción \"Add File Via URL\" y cambiar la URL de descripción de la imagen para que haga referencia a la URL .php en el directorio attachments/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:5.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E903FF-8AB1-4B3D-B0A4-303E14CC343C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:5.3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A18495-7945-4A70-BC1C-F955A2EB010F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:5.3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC932CA-D539-4D75-A101-F5892FEE1A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:5.3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2B8FB-B386-431C-9321-36A71AECC891"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sxcurity.github.io/PHP%20Code%20Injection%20in%20X-Cart.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sxcurity.github.io/PHP%20Code%20Injection%20in%20X-Cart.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T08:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized."
      }, {
        "lang" : "es",
        "value" : "SQLite 3.20.1 tiene una desreferencia de puntero NULL en tableColumnList en shell.c porque ignora determinados casos en donde `sqlite3_step(pStmt)==SQLITE_ROW es falso y una estructura de datos nunca se inicializa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlite:sqlite:3.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDBAFB4-A76C-4DAF-B346-57E0524BBE98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101285",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9514",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-10-12T13:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a YAML file and did not sufficiently restrict which classes could be loaded. An attacker who can log in to Bamboo as a user is able to exploit this vulnerability to execute Java code of their choice on systems that have vulnerable versions of Bamboo."
      }, {
        "lang" : "es",
        "value" : "Bamboo en versiones anteriores a la 6.0.5, 6.1.x anteriores a la 6.1.4 y 6.2.x anteriores a la 6.2.1 tenía un endpoint REST que analizaba sintácticamente un archivo YAML y no restringía suficientemente qué clases se podían cargar. Un atacante que pueda iniciar sesión en Bamboo como un usuario sería capaz de explotar esta vulnerabilidad para ejecutar código Java de su elección en sistemas que tienen versiones vulnerables de Bamboo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DACC3EE-5898-457C-B9FE-DCBA2634DE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BEBCA5-8704-4557-8119-AF4C0799394E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451870E0-326D-424F-86E9-B04A177B7D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E39376-B888-40C9-9DC6-036D5C573823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F1CF26-C2CA-4BEB-B3E1-45B280FE4F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374EF21B-238E-4173-AABB-771B4CC636B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D8E6A7-EA13-474B-B7DD-3EC9F05438D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5E64B2-EA6A-433A-ACF7-540F8273CFE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101269",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-10-11-938843921.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-10-11-938843921.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10857",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-12T14:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via \"Cabinet\" function."
      }, {
        "lang" : "es",
        "value" : "Cybozu Office desde la versión 10.0.0 hasta 10.6.1 permite que atacantes no autenticados omitan restricciones de acceso para realizar acciones arbitrarias mediante la función Cabinet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02CF334-548D-4B9B-8732-A85D97E003C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A968E493-5C74-45FB-BA4E-C21D66613480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D06E58-28D5-43E9-87CD-9534DF3CA6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86DD19B-9DD2-412D-B259-9D2677C9CC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664B383F-3C96-406C-B0B9-041F26F1F5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA465B8-3852-4630-B16C-120F77DB1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178094DD-30C6-49BF-A42A-4264FA5A61D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59E18AD-EF62-48F6-8BFB-9598B3118301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:10.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB43B837-6C4B-4FDE-99F8-6446378750AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN14658424/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9811",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN14658424/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.cybozu.com/ja-jp/article/9811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10862",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-12T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token."
      }, {
        "lang" : "es",
        "value" : "jwt-scala en versiones 1.2.2 y anteriores no consigue verificar las firmas de los tokens correctamente, lo que puede provocar que un atacante pueda pasar datos JWT especialmente manipulados como un token firmado correctamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:really:jwt-scala:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "E704360C-DB42-4EA2-B7C9-482786E7B715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/reallylabs/jwt-scala",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU90916766/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/reallylabs/jwt-scala",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU90916766/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10863",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-12T14:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Note this is a separate vulnerability from CVE-2017-10865."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en el programa HIBUN Confidential File Decryption en versiones anteriores a la 10.50.0.5 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado. Esta vulnerabilidad es diferente de CVE-2017-10865."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi-solutions:confidential_file_decryption:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DEE3AF-F901-457A-8F26-DEE2A6C039DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN58909026/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN58909026/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10864",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-12T14:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en el instalador de HIBUN Confidential File Viewer en versiones anteriores a la 11.20.0001 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi-solutions:confidential_file_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE748B9-0EDB-4B94-A128-DA398BB8D46F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN94056834/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN94056834/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10865",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-12T14:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Note this is a separate vulnerability from CVE-2017-10863."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en el programa HIBUN Confidential File Decryption en versiones anteriores a la 10.50.0.5 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado. Esta vulnerabilidad es diferente de CVE-2017-10863."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi-solutions:confidential_file_decryption:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DEE3AF-F901-457A-8F26-DEE2A6C039DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN55516206/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN55516206/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T15:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks."
      }, {
        "lang" : "es",
        "value" : "Discrepancia de respuestas en los formularios de reinicio de contraseña y login en SilverStripe CMS en versiones anteriores a la 3.5.5 y versiones 3.6.x anteriores a la 3.6.1 permite que atacantes remotos enumeren usuarios mediante ataques de sincronización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.4",
            "matchCriteriaId" : "9553463E-D9EB-406E-A8A3-D2A6FA62AE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CDF0C5-0B31-4870-BD3E-53992DCBE311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.silverstripe.org/download/security-releases/ss-2017-005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/ss-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T15:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c."
      }, {
        "lang" : "es",
        "value" : "Qemu hasta la versión 2.10.0 permite que atacantes remotos causen una fuga de memoria desencadenando operaciones lentas de lectura de canales de datos. Esto está relacionado con io/channel-websock.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.0",
            "matchCriteriaId" : "A356C3C5-70B1-4F1B-8355-CB6866F5AF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/qemu/+bug/1718964",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02278.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/qemu/+bug/1718964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02278.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T15:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the \"Name des Bouquets\" field, or the file parameter to the /file URI."
      }, {
        "lang" : "es",
        "value" : "Hay XSS en BouquetEditor WebPlugin para dispositivos Dream Multimedia Dreambox, tal y como lo demuestra el campo \"Name des Bouquets\" o el parámetro file en la URI /file."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bouqueteditor_project:bouqueteditor:2.0.0:*:*:*:*:dreambox:*:*",
            "matchCriteriaId" : "D4E227F5-26EF-4DB3-8A44-AA8E8989FEA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fireshellsecurity.team/assets/pdf/Vulnerability-XSS-Dreambox.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42986/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fireshellsecurity.team/assets/pdf/Vulnerability-XSS-Dreambox.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42986/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-12T16:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality."
      }, {
        "lang" : "es",
        "value" : "Mirasys Video Management System (VMS) en versiones 6.x anteriores a la 6.4.6, 7.x anteriores a la 7.5.15 y 8.x anteriores a la 8.1.1 tiene un proceso de login en el que se envían datos en texto en claro desde un servidor a un cliente y no se necesitan todos estos datos para la funcionalidad del cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F946DC9E-BD7E-44C4-8FCE-2AA372EB6FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88139F70-5A95-4FCC-990F-F787555EABFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DA96C9-49C5-4576-8579-F3E375FFDE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA2BF8-9539-45AC-B06A-31F389377284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309509BA-9272-49F7-AD4B-969251D033F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FA0AEA-2078-4402-9EBB-96A86600691D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DFE30D0-E36A-4159-9BDF-8064ADFBE33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:7.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3A4DD3-C9A0-4A6A-B64A-A3DE72271885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA5C447-376D-4189-AEFC-A3986BDB1DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirasys:video_management_system:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89381DA-7A12-48D4-80CE-9A1318D061C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ipvm.com/forums/video-surveillance/topics/mirasys-happy-with-bad-security-unless-hit-with-bad-press",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dropbox.com/s/un43q74ie55wtpe/mirasys-vms-leak-2017.zip?dl=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ipvm.com/forums/video-surveillance/topics/mirasys-happy-with-bad-security-unless-hit-with-bad-press",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dropbox.com/s/un43q74ie55wtpe/mirasys-vms-leak-2017.zip?dl=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11762",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka \"Microsoft Graphics Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-11763."
      }, {
        "lang" : "es",
        "value" : "El componente Microsoft Graphics en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código en la manera en la que gestiona fuentes embebidas especialmente manipuladas. Esto también se conoce como \"Microsoft Graphics Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-11763."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101108",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11762",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11763",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka \"Microsoft Graphics Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-11763."
      }, {
        "lang" : "es",
        "value" : "El componente Microsoft Graphics en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código en la manera en la que gestiona fuentes embebidas especialmente manipuladas. Esto también se conoce como \"Microsoft Graphics Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-11763."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101109",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11763",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11765",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11784, CVE-2017-11785, and CVE-2017-11814."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11784, CVE-2017-11785 y CVE-2017-11814."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101111",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11765",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11769",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles loading dll files, aka \"TRIE Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente TRIE de Microsoft Windows en Microsoft Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código por la manera en la que gestiona la carga de archivos dll. Esto también se conoce como \"TRIE Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101112",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039535",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11769",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11771",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka \"Windows Search Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Microsoft Windows Search en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, y 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando no gestiona correctamente respuestas DNS. Esto también se conoce como \"Windows Search Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101114",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11771",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11772",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure when it fails to properly handle objects in memory, aka \"Microsoft Search Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Microsoft Windows Search en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Search Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101116",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11772",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11774",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.427",
      "lastModified" : "2025-10-22T00:16:02.093",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook 2010 SP2, Outlook 2013 SP1 y RT SP1 y Outlook 2016 permite a un atacante ejecutar comandos arbitrarios por la manera en la que Microsoft Office gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Outlook Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Outlook Security Feature Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "8D513A61-6427-4F85-AADF-99D6F223AF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "DDA98A76-D0D1-4BFA-BEAC-1C2313F7B859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101098",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039542",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11774",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11775",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka \"Microsoft Office SharePoint XSS Vulnerability\". This CVE ID is unique from CVE-2017-11777 and CVE-2017-11820."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Enterprise Server 2013 SP1 y Microsoft SharePoint Enterprise Server 2016 permiten que un atacante explote una vulnerabilidad Cross-Site Scripting (XSS) enviando una petición especialmente manipulada a un servidor SharePoint afectado, Esto ocurre debido a la manera en la que el servidor SharePoint sanitiza las peticiones web. Esto también se conoce como \"Microsoft Office SharePoint XSS Vulnerability\". El ID de este CVE es diferente de CVE-2017-11777 y CVE-2017-11820."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101105",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039540",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11775",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11776",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka \"Microsoft Outlook Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Outlook 2016 permite a un atacante obtener el contenido de los emails de un usuario por cómo Outlook 2016 muestra el contenido de los emails de los usuarios. Esto también se conoce como \"Microsoft Outlook Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101106",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039542",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11776",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11777",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka \"Microsoft Office SharePoint XSS Vulnerability\". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11820."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Enterprise Server 2013 SP1 y Microsoft SharePoint Enterprise Server 2016 permiten que un atacante explote una vulnerabilidad Cross-Site Scripting (XSS) enviando una petición especialmente manipulada a un servidor SharePoint afectado, Esto ocurre debido a la manera en la que el servidor SharePoint sanitiza las peticiones web. Esto también se conoce como \"Microsoft Office SharePoint XSS Vulnerability\". El ID de este CVE es diferente de CVE-2017-11775 y CVE-2017-11820."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101155",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039540",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11777",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11779",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka \"Windows DNSAPI Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Domain Name System (DNS) DNSAPI.dll en Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando no gestiona correctamente respuestas DNS. Esto también se conoce como \"Windows DNSAPI Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101166",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039533",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11779",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11780",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly handle certain requests, aka \"Windows SMB Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Server Message Block 1.0 (SMBv1) en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, y 1703, y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando no gestiona correctamente determinadas peticiones. Esto también se conoce como \"Windows SMB Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101110",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11781",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a denial of service vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Block Message (SMB) en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite una vulnerabilidad de denegación de servicio cuando un atacante envía peticiones especialmente manipuladas al servidor, lo que también se conoce como \"Windows SMB Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101140",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11782",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Block Message (SMB) en Microsoft Windows 10 1607 y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios cuando un atacante envía peticiones especialmente manipuladas al servidor, lo que también se conoce como \"Windows SMB Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101143",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11783",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka \"Windows Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten una vulnerabilidad de elevación de privilegios por la forma en la que gestionan llamadas a Advanced Local Procedure Call (ALPC), lo que también se conoce como \"Windows Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101144",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11784",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11765, CVE-2017-11785, and CVE-2017-11814."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria, lo que también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11765, CVE-2017-11785 y CVE-2017-11814."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101147",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11784",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11785",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11765, CVE-2017-11784, and CVE-2017-11814."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria, lo que también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11765, CVE-2017-11784 y CVE-2017-11814."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101149",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11785",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43001/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11786",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka \"Skype for Business Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Skype for Business en Microsoft Lync 2013 SP1 y Skype for Business 2016 permiten que un atacante robe un hash de autenticación que puede reutilizarse en otro sitio, debido a la forma en la que Skype for Business gestiona las peticiones de autenticación, lo que también se conoce como \"Skype for Business Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B854E18-7CB0-43F7-9EBF-E356FA176B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499807D-91F3-447D-B9F0-D612898C9339"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101156",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039530",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11790",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handles objects in memory, aka \"Internet Explorer Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante obtenga información para comprometer aun más el sistema del usuario debido a cómo gestiona Internet Explorer los objetos en la memoria, lo que también se conoce como \"Internet Explorer Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11790",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11792",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1703 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101078",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11792",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11793",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a cómo gestiona el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101141",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11793",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43368/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43368/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11794",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8726 and CVE-2017-11803."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante obtenga información para comprometer aun más el sistema del usuario debido a la forma en la que Microsoft Edge gestiona objetos en la memoria, lo que también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-8726 y CVE-2017-11803."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11794",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11796",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1703 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11796",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11797",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting de ChakraCore gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101145",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11798",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101125",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11798",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11799",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101126",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11799",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42998/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42998/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11800",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101127",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11800",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11801",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting de ChakraCore gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101146",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11801",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11802",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101130",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11802",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43000/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11804",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101131",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11804",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11805",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1703 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101132",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11805",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11806",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1703 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101133",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11806",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11807",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1703 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101134",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11807",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11808",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101135",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11808",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11809",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101137",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11809",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42999/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42999/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11810",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a cómo gestiona el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "8A89D644-5676-47E1-826D-CE343B4A5B14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101081",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11810",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43131/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43131/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11811",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "B76E9279-B4B7-48D3-9F2B-BDEE22527B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11811",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43152/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43152/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11812",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812, and CVE-2017-11821."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1511, 1607, 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812 y CVE-2017-11821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101139",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11812",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11813",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11822."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1 y Windows Server 2012 R2 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que Internet Explorer gestiona objetos en la memoria, lo que también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11822."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101083",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11813",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11814",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11765, CVE-2017-11784, and CVE-2017-11785."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria, lo que también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11765, CVE-2017-11784 y CVE-2017-11785."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101093",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11814",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11815",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability in the way that it handles certain requests, aka \"Windows SMB Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Server Block Message (SMB) en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información por la forma en la que gestiona ciertas peticiones, lo que también se conoce como \"Windows SMB Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101136",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11815",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11816",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka \"Windows GDI Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Graphics Device Interface (GDI) en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información por la forma en la que gestiona objetos en la memoria, lo que también se conoce como \"Windows GDI Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11816",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11817",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly validates objects in memory, aka \"Windows Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no valida correctamente los objetos en la memoria, lo que también se conoce como \"Windows Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11817",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11818",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass vulnerability when it fails to validate an integrity-level check, aka \"Windows Storage Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Microsoft Windows Storage en Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de omisión de la característica de seguridad cuando no valida una comprobación a nivel de integridad, lo que también se conoce como \"Windows Storage Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11819",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka \"Windows Shell Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los navegadores de Microsoft gestionan objetos en la memoria, lo que también se conoce como \"Windows Shell Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101121",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039537",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11820",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka \"Microsoft Office SharePoint XSS Vulnerability\". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11777."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Enterprise Server 2013 SP1 y Microsoft SharePoint Enterprise Server 2016 permiten que un atacante explote una vulnerabilidad de Cross-Site Scripting (XSS) enviando una petición especialmente manipulada a un servidor SharePoint afectado debido a cómo sanitiza el servidor SharePoint las peticiones web, lo que también se conoce como \"Microsoft Office SharePoint XSS Vulnerability\". El ID de este CVE es diferente de CVE-2017-11775 y CVE-2017-11777."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101097",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039540",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11820",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11821",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, and CVE-2017-11812."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 1703 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting gestiona objetos en la memoria, lo que también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811 y CVE-2017-11812."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "883B10C3-3939-41B5-BC1A-C25F592C0D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101123",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11821",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11822",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11813."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a cómo gestiona Internet Explorer objetos en la memoria, lo que también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11813."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101122",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11822",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11823",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:01.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka \"Microsoft Windows Security Feature Bypass\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Device Guard en Microsoft Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite una omisión de la característica de seguridad por la forma en la que gestiona sesiones de Windows PowerShell, lo que también se conoce como \"Microsoft Windows Security Feature Bypass\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101102",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11823",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42997/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42997/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11824",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles objects in memory, aka \"Windows Graphics Component Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Graphics Component en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que gestiona objetos en la memoria, lo que también se conoce como \"Windows Graphics Component Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101099",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11824",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11825",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2016 Click-to-Run (C2R) y Microsoft Office 2016 para Mac permiten que un atacante emplee un archivo especialmente manipulado para ejecutar acciones en el contexto de seguridad del usuario actual debido a cómo gestiona Microsoft Office los objetos en la memoria, lo que también se conoce como \"Microsoft Office Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*",
            "matchCriteriaId" : "E74CB3D6-B0D7-4A6C-ABAA-170C7710D856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_for_mac:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE41A84-9FE6-4227-87FA-6D909A6CA161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101124",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039539",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11825",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11826",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.067",
      "lastModified" : "2025-10-22T00:16:02.280",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 y 2013, Word Viewer, Word 2007, 2010, 2013 y 2016, Word Automation Services y Office Online Server permiten la ejecución remota de código cuando el software no gestiona correctamente objetos en la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C0BD17-4324-4DFF-9804-1825C4C182A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "84149DF3-54BA-4738-9386-6C29B4E9448F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "D7A48E44-F01A-40AD-B8AF-8FE368248003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101219",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039541",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11826",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11829",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 10 permite una vulnerabilidad de elevación de privilegios cuando Windows Update Delivery Optimization no impone correctamente el cumplimiento de los permisos para compartir archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101213",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8689",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8694."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Kernel Mode Driver en Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite que se produzca una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria, lo que también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8694."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101128",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8689",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8693",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka \"Microsoft Graphics Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Graphics Component en Microsoft Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de divulgación de información debido a la forma en la que gestiona objetos en la memoria, lo que también se conoce como \"Microsoft Graphics Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101096",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8693",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8694",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-8689."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Kernel Mode Driver en Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite que se produzca una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria, lo que también se conoce como \"Win32k Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2017-8689."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101100",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8694",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8703",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles objects in memory, aka \"Windows Subsystem for Linux Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El subsistema de Microsoft Windows para Linux en Microsoft Windows 10 1703 permite una vulnerabilidad de denegación de servicio cuando gestiona incorrectamente objetos en la memoria. Esto también se conoce como \"Windows Subsystem for Linux Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101164",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039534",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8703",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8715",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka \"Windows Security Feature Bypass\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Device Guard en Microsoft Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite una omisión de la característica de seguridad por la forma en la que gestiona sesiones de Windows PowerShell, lo que también se conoce como \"Windows Security Feature Bypass\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101163",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8715",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8717",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka \"Microsoft JET Database Engine Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8718."
      }, {
        "lang" : "es",
        "value" : "Microsoft JET Database Engine en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante tome el control de un sistema afectado debido a cómo gestiona objetos en la memoria, lo que también se conoce como\"Microsoft JET Database Engine Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-8718."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101161",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039527",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8717",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8718",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka \"Microsoft JET Database Engine Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8717."
      }, {
        "lang" : "es",
        "value" : "Microsoft JET Database Engine en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante tome el control de un sistema afectado debido a cómo gestiona objetos en la memoria, lo que también se conoce como\"Microsoft JET Database Engine Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-8717."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101162",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039527",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8718",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8726",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how affected Microsoft scripting engines handle objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11794 and CVE-2017-11803."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a cómo gestionan objetos en la memoria los motores de scripting Microsoft afectados, lo que también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11794 y CVE-2017-11803."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101084",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8726",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8727",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-10-13T13:29:02.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Windows Text Services Framework handles objects in memory, aka \"Windows Shell Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que Microsoft Windows Text Services Framework gestiona objetos en la memoria. Esto también se conoce como \"Windows Shell Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101142",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039537",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-13T16:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server (anteriormente conocido como EMC Documentum Content Server) hasta la versión 7.3 no valida correctamente la entrada del comando RPC PUT_FILE, lo que permite que cualquier usuario autenticado secuestre un archivo arbitrario del sistema de archivos Content Server; debido a que algunos de los archivos del sistema de archivos son confidenciales, esto conduce a un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "78887F85-A395-41C2-AED8-2857620518A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-13T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server stores information about uploaded files in dmr_content objects, which are queryable and \"editable\" (before release 7.2P02, any authenticated user was able to edit dmr_content objects; now any authenticated user may delete a dmr_content object and then create a new one with the old identifier) by authenticated users; this allows any authenticated user to replace the content of security-sensitive dmr_content objects (for example, dmr_content related to dm_method objects) and gain superuser privileges."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server (anteriormente conocido como EMC Documentum Content Server) hasta la versión 7.3 contiene el siguiente fallo de diseño, que permite que un usuario autenticado gane privilegios de superuser: Content Server almacena información sobre archivos subidos en objetos dmr_content, los cuales son consultables y \"editables\" (antes de la distribución 7.2P02, cualquier usuario autenticado podía editar objetos dmr_content; ahora cualquier usuario autenticado puede borrar objetos dmr_content y, a continuación, crear uno nuevo con el antiguo identificador) por usuarios autenticados. Esto permite que cualquier usuario autenticado reemplace el contenido de objetos dmr_content sensibles (por ejemplo, contenido dmr_content relacionado con objetos dm_method objects) y obteniendo privilegios de superuser."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "78887F85-A395-41C2-AED8-2857620518A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43004/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-13T16:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows authenticated users to download arbitrary content files regardless of the attacker's repository permissions: When an authenticated user uploads content to the repository, he performs the following steps: (1) calls the START_PUSH RPC-command; (2) uploads the file to the content server; (3) calls the END_PUSH_V2 RPC-command (here, Content Server returns a DATA_TICKET integer, intended to identify the location of the uploaded file on the Content Server filesystem); (4) creates a dmr_content object in the repository, which has a value of data_ticket equal to the value of DATA_TICKET returned at the end of END_PUSH_V2 call. As the result of this design, any authenticated user may create his own dmr_content object, pointing to already existing content in the Content Server filesystem."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server (anteriormente conocido como EMC Documentum Content Server) hasta la versión 7.3 contiene el siguiente fallo de diseño, que permite que usuarios autenticados descarguen archivos de contenido arbitrario, independientemente de los permisos de repositorio del atacante: Cuando un usuario autenticado sube contenido al repositorio, lleva a cabo los siguientes pasos: (1) llama al comando RCP START_PUSH; (2) sube el archivo al servidor de contenido; (3) llama al comando RCP END_PUSH_V2 (aquí, Content Server devuelve un entero DATA_TICKET que debería identificar la localización del archivo subido en el sistema de archivos Content Server); (4) crea un objeto dmr_content en el repositorio, el cual tiene un valor de data_ticket igual al valor de DATA_TICKET devuelto al final de una llamada END_PUSH_V2. Como resultado de este diseño, cualquier usuario autenticado puede crear su propio objeto dmr_content, apuntando a contenido que ya existe en el sistema de archivos Content Server."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "78887F85-A395-41C2-AED8-2857620518A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43005/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-13T16:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Server fails to verify the contents of an archive, which causes a path traversal vulnerability via symlinks. Because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "OpenText Documentum Content Server (anteriormente conocido como EMC Documentum Content Server) hasta la versión 7.3 contiene el siguiente fallo de diseño, que permite que un usuario autenticado gane privilegios de superuser: Content Server permite la subida de contenidos usando lotes (archivos TAR). Al desempaquetar archivos TAR, Content Server no puede verificar el contenido de un archivo, lo que provoca una vulnerabilidad de salto de directorio mediante vínculos simbólicos. Debido a que algunos archivos en el sistema de archivos Content Server son confidenciales, esto lleva a un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:documentum_content_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "78887F85-A395-41C2-AED8-2857620518A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43002/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Oct/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10606",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Version 4.40 of the TPM (Trusted Platform Module) firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 Series to encrypt sensitive configuration data. While other products also ship with a TPM, no other products or platforms are affected by this vulnerability. Customers can confirm the version of TPM firmware via the 'show security tpm status' command. This issue was discovered by an external security researcher. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "La versión 4.40 de firmware del TPM (Trusted Platform Module) en la serie SRX300 de Juniper Networks tiene una vulnerabilidad a la hora de generar claves criptográficas que podría permitir que un atacante descifre información sensible en los productos de la serie SRX300. El TPM se utiliza en la serie SRX300 para cifrar datos de configuración sensibles. Aunque otros productos también dan servicio con un TPM, no existen otros productos o plataformas que se vean afectados por esta vulnerabilidad. Los clientes pueden confirmar la versión del firmware del TPM mediante el comando \"show security tpm status\". Un investigador de seguridad externo descubrió este problema. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:trusted_platform_module_firmware:4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31C77A3-3CDB-4393-A6CC-7B1F54CF27E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10809",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10607",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this issue can only be triggered by a packet sent directly to the IP address of the router. Repeated crashes of the rpd daemon can result in an extended denial of service condition. This issue only affects devices running Junos OS 16.1R1 and services releases based off of 16.1R1 (e.g. 16.1R1-S1, 16.1R1-S2, 16.1R1-S3). No prior versions of Junos OS are affected by this vulnerability, and this issue was resolved in Junos OS 16.2 prior to 16.2R1. No other Juniper Networks products or platforms are affected by this issue. This issue was found during internal product security testing."
      }, {
        "lang" : "es",
        "value" : "Juniper Networks Junos OS 16.1R1 y distribuciones de servicios basados en la versión 16.1R1 son vulnerables a la recepción de un PDU (Protocol Data Unit) BGP enviado directamente al router, lo que puede provocar que el proceso de enrutamiento de RPD se cierre de manera inesperada y se reinicie. A diferencia de los BGP UPDATE, que son transitivos por naturaleza, este problema solo se puede desencadenar por un paquete enviado directamente a la dirección IP del router. El cierre inesperado de manera repetida del demonio rpd puede resultar en una condición extendida de denegación de servicio (DoS). Este problema solo afecta a los dispositivos que ejecuten Junos OS 16.1R1 y distribuciones de servicios basadas en la versión 16.1R1 (por ejemplo, 16.1R1-S1, 16.1R1-S2, 16.1R1-S3). No hay versiones anteriores de Junos OS que se vean afectadas por esta vulnerabilidad y este problema se resolvió en Junos OS 16.2 anterior a 16.2R1. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema. Se encontró el problema durante un análisis de seguridad interno del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10810",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10608",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target. Repeated traffic in a cluster may cause repeated flip-flop failure operations or full failure to the flowd daemon halting traffic on all nodes. Only IPv6 traffic is affected by this issue. IPv4 traffic is unaffected. This issues is not seen with to-host traffic. This issue has no relation with HA services themselves, only the ALG service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55 on SRX; 12.1X47 prior to 12.1X47-D45 on SRX; 12.3X48 prior to 12.3X48-D32, 12.3X48-D35 on SRX; 15.1X49 prior to 15.1X49-D60 on SRX."
      }, {
        "lang" : "es",
        "value" : "Cualquier dispositivo de Juniper Networks de la serie SRX con uno o más ALG (Application Layer Gateways) habilitados puede experimentar un cierre inesperado de flowd cuando el tráfico se procesa por los ALG Sun/MS-RPC. Esta vulnerabilidad en el componente de servicios ALG Sun/MS-RPC de Junos OS permite que un atacante cause repetidas denegaciones de servicio contra el objetivo. Un tráfico repetido en un clúster puede causar operaciones de error flip-flop o el fallo completo del demonio flowd, deteniendo el tráfico en todos los nodos. Solo el tráfico IPv6 se ve afectado por este problema. El tráfico IPv4 no se ve afectado. Este problema no se ha observado con tráfico al host. Este problema no tiene ninguna relación con los servicios de alta disponibilidad, solo con el servicio de ALG. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema. Las distribuciones afectadas son: Juniper Networks Junos OS 12.1X46 anteriores a 12.1X46-D55 en SRX; 12.1X47 anteriores a 12.1X47-D45 en SRX; 12.3X48 anteriores a 12.3X48-D32, 12.3X48-D35 en SRX; 15.1X49 anteriores a 15.1X49-D60 en SRX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB3DE56-1B04-4A53-B4A4-93286FC98463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "181C0D30-4476-48EE-A4A4-3B2461F4AC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "63F559A2-2744-4771-9420-C70AA87496A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "040A6307-236E-4FAA-9A74-676F1DB0CF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "350A0F1E-1057-4A8E-AB0B-7615B3877858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "898DF03B-0E72-4E9A-8C93-926FC01A87DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x47:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE85C83-E6FC-42DE-9857-A1FFA3A1B82A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10811",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10610",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D71, 12.3X48 prior to 12.3X48-D55, 15.1X49 prior to 15.1X49-D100 on SRX Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "En dispositivos de la serie SRX, un paquete ICMP manipulado embebido en un túnel NAT64 IPv6 a IPv4 puede provocar que el proceso flowd se cierre de manera inesperada. El cierre inesperado repetido del proceso flowd constituye una condición de denegación de servicio extendida para los dispositivos de la serie SRX. Este problema solo ocurre si NAT64 está configurado. Las distribuciones afectadas son: Juniper Networks Junos OS 12.1X46 anteriores a 12.1X46-D71, 12.3X48 anteriores a 12.3X48-D55, 15.1X49 anteriores a 15.1X49-D100 en SRX Series. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4661E4F-2C41-4B57-AE57-FF2596A35A02"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4661E4F-2C41-4B57-AE57-FF2596A35A02"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx_series:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4661E4F-2C41-4B57-AE57-FF2596A35A02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10813",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/nat-stateful-nat64-configuring.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/nat-stateful-nat64-configuring.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10611",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended denial of service condition. This issue only affects the following platforms: (1) EX2200, EX3300, XRE200 (2) MX Series routers with MPC7E/8E/9E PFEs installed, and only if 'extended-statistics' are enabled under the [edit chassis] configuration. Affected releases are Juniper Networks Junos OS 14.1 prior to 14.1R8-S5, 14.1R9 on MX Series; 14.1X53 prior to 14.1X53-D46, 14.1X53-D50 on EX2200, EX3300, XRE200; 14.2 prior to 14.2R7-S9, 14.2R8 on MX Series; 15.1 prior to 15.1F5-S8, 15.1F6-S8, 15.1R5-S3, 15.1R6 on MX Series; 16.1 prior to 16.1R4-S5, 16.1R5, 16.1R6 on MX Series; 16.1X65 prior to 16.1X65-D45 on EX2200, EX3300, XRE200; 16.2 prior to 16.2R2-S1, 16.2R3 on MX Series; 17.1 prior to 17.1R2-S2, 17.1R3 on MX Series; 17.2 prior to 17.2R1-S3, 17.2R2 on MX Series; 17.2X75 prior to 17.2X75-D50 on MX Series; 17.3 prior to 17.3R1-S1, 17.3R2 on MX Series. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Si se habilitan las estadísticas extendidas mediante \"set chassis extended-statistics\", cuando se ejecute cualquier operación que recoja estadísticas de interfaz, incluyendo (pero sin limitarse a) peticiones GET SNMP, el proceso pfem o el FPC podrían cerrarse de manera inesperada y reiniciarse. El cierre inesperado de manera repetida del procesamiento de PFE puede resultar en una condición extendida de denegación de servicio (DoS). Este problema solo afecta a las siguientes plataformas: Routers (1) EX2200, EX3300, XRE200 (2) de la serie MX con MPC7E/8E/9E PFE instalado, y solo si \"extended-statistics\" está habilitado bajo la configuración [edit chassis]. Las distribuciones afectadas son: Juniper Networks Junos OS 14.1 anteriores a 14.1R8-S5, 14.1R9 en MX Series; 14.1X53 anteriores a 14.1X53-D46, 14.1X53-D50 en EX2200, EX3300, XRE200; 14.2 anteriores a 14.2R7-S9, 14.2R8 en MX Series; 15.1 anteriores a 15.1F5-S8, 15.1F6-S8, 15.1R5-S3, 15.1R6 en MX Series; 16.1 anteriores a 16.1R4-S5, 16.1R5, 16.1R6 en MX Series; 16.1X65 anteriores a 16.1X65-D45 en EX2200, EX3300, XRE200; 16.2 anteriores a 16.2R2-S1, 16.2R3 en MX Series; 17.1 anteriores a 17.1R2-S2, 17.1R3 en MX Series; 17.2 anteriores a 17.2R1-S3, 17.2R2 en MX Series; 17.2X75 anteriores a 17.2X75-D50 en MX Series; 17.3 anteriores a 17.3R1-S1, 17.3R2 en MX Series. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0B8539-31FF-4AE9-91D6-47E6305D9EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D4F71-8476-4F0D-A976-A308D6483D6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC326549-217D-4194-8310-AB398D6FF3F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:xre200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5542E06B-EC81-47A8-AB09-55DBE0560D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1x65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA096D02-3E65-4D84-AB38-DE6DC7270097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1x65:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "2A347C15-3ABC-4B11-A9BB-5DF1C73538EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1x65:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCD72E3-22CE-4E9E-9CC5-686C4B163116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1x65:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "46A11513-B901-4E12-8AA7-54D4794595D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D4F71-8476-4F0D-A976-A308D6483D6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC326549-217D-4194-8310-AB398D6FF3F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:xre200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5542E06B-EC81-47A8-AB09-55DBE0560D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D571B57-4F4C-4232-9D3B-B2F7AAAB220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11BD757A-99BC-44E8-A95B-2CDDA638E469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B47EC5-0276-4799-B536-12B33B5F003B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EB45C0-E3BD-4C0D-9E97-1DB726D66401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A3F26-3C6E-4B5A-9D40-E6ABC2BFA7AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:vmx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4940BB-3715-4FAD-89FE-D876F957A098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10814",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10612",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Site Scripting persistente en Juniper Networks Junos Space permite a los usuarios que pueden cambiar determinadas configuraciones implantar código JavaScript o HTML malicioso que se puede utilizar para robar información o realizar acciones como otros usuarios o administradores de Junos Space. Las distribuciones afectadas son: Juniper Networks Junos Space en todas sus versiones anteriores a la 17.1R1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1r3",
            "matchCriteriaId" : "2C33A563-C4E1-403D-95DF-DD0067C467E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101256",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10826",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10613",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined action, to hang the kernel. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55; 12.3X48 prior to 12.3X48-D35; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.2 prior to 14.2R4-S9, 14.2R7-S8, 14.2R8; 15.1 prior to 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un comando de acción de filtro de loopback específico, procesado en un orden lógico específico de operación, en un configuración activa en Juniper Networks Junos OS, permite que un atacante con acceso CLI y la capacidad para iniciar sesiones remotas a la interfaz loopback con la acción definida cuelgue el kernel. Las distribuciones afectadas son: Juniper Networks Junos OS 12.1X46 anteriores a 12.1X46-D55; 12.3X48 anteriores a 12.3X48-D35; 14.1 anteriores a 14.1R8-S4, 14.1R9; 14.1X53 anteriores a 14.1X53-D40; 14.2 anteriores a 14.2R4-S9, 14.2R7-S8, 14.2R8; 15.1 anteriores a 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 anteriores a 15.1X49-D60; 15.1X53 anteriores a 15.1X53-D47; 16.1 anteriores a 16.1R2. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F9A9D-2804-4704-BC6A-1399E88B91A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10816",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10614",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D45; 12.3X48 prior to 12.3X48-D30; 14.1 prior to 14.1R4-S9, 14.1R8; 14.2 prior to 14.2R6; 15.1 prior to 15.1F5, 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D232, 15.1X53-D47."
      }, {
        "lang" : "es",
        "value" : "Un vulnerabilidad en el servicio telnetd en Junos OS permite a un atacante remoto provocar un ataque de denegación de servicio por limitación de memoria o consumo de recursos de CPU. Se encontró el problema durante un análisis de seguridad interno del producto. Las distribuciones afectadas son: Juniper Networks Junos OS 12.1X46 anteriores a 12.1X46-D45; 12.3X48 anteriores a 12.3X48-D30; 14.1 anteriores a 14.1R4-S9, 14.1R8; 14.2 anteriores a 14.2R6; 15.1 anteriores a 15.1F5, 15.1R3; 15.1X49 anteriores a 15.1X49-D40; 15.1X53 anteriores a 15.1X53-D232, 15.1X53-D47."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0B8539-31FF-4AE9-91D6-47E6305D9EDF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10817",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10615",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el PAM (Pluggable Authentication Module) de Juniper Networks Junos OS podría permitir a un atacante no autenticado en la red que ejecute código arbitrario o cierre de manera inesperada demonios, como telnetd o sshd, que utilicen PAM. Las distribuciones afectadas de Juniper Networks Junos OS son: 14.1 desde la 14.1R5 y anteriores a 14.1R8-S4, 14.1R9; 14.1X53 anteriores a 14.1X53-D50 en series EX y QFX; 14.2 desde la 14.2R3 y anteriores a la14.2R7-S8, 14.2R8. No existen otras distribuciones de Junos OS que estén afectadas por este problema. No hay ningún otro producto de Juniper Networks que se vea afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7A20FC-A19F-4881-A0E8-C440E9FE60D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC326549-217D-4194-8310-AB398D6FF3F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9B26-8BF0-4C56-A9BF-D9BBAEA50506"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53269C69-3D1E-4F05-8EF6-81743D7A699E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4200-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F54ADF-7C13-4AA6-B61E-627D4DBB1CF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303ADB06-5CB5-44DA-8387-39FACC539EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEE8AE4-B393-442C-AD68-4AC43E76A8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4500-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D842407-7A13-47C7-BBC9-FB0E978221CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E98077-92AF-4E3E-96F0-2E6F9D6343D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4550-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B84C72A-C314-46FB-8DD8-1DF29C6C4B0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ECB975-D1A0-4318-9C5E-752A3C98F76F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CC1C89-B37F-4C5F-9F79-12997C79711D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFE829C-325D-4E66-A6A2-A81BE8BCAB72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8200-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74B12A6-1CE2-4293-ABA5-E3F23E15485C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040039",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA10818",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.juniper.net/JSA10818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10616",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "El servicio ifmap que viene incorporado en las distribuciones de Juniper Networks Contrail utiliza credenciales embebidas. Las distribuciones afectadas son Contrail 2.2 anteriores a la 2.21.4; 3.0 anteriores a la 3.0.3.4; 3.1 anteriores a la 3.1.4.0; 3.2 anteriores a la 3.2.5.0. CVE-2017-10616 y CVE-2017-10617 se pueden agrupar y tienen una puntuación CVSSv3 combinada de 5.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D768A0-E869-4FB9-AAC1-DD570F276D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33081EFF-406E-4E46-892B-F6E282EB4478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D6D198-F6DC-4D08-97E3-DB8CD9D5A4EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A239421-26E2-4B3D-964E-899F4C533FC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-qx9c-49m4-f3vj",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10819",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-qx9c-49m4-f3vj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10617",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "El servicio ifmap que viene incorporado en las distribuciones de Contrail tienen una vulnerabilidad XEE (XML External Entity) que puede permitir a un atacante recuperar archivos sensibles del sistema. Las distribuciones afectadas son Juniper Networks Contrail 2.2 anteriores a la 2.21.4; 3.0 anteriores a la 3.0.3.4; 3.1 anteriores a la 3.1.4.0; 3.2 anteriores a la 3.2.5.0. CVE-2017-10616 y CVE-2017-10617 se pueden agrupar y tienen una puntuación CVSSv3 combinada de 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "2.21.4",
            "matchCriteriaId" : "7D26DCE2-684A-4858-9653-772EDD3F3BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.3.4",
            "matchCriteriaId" : "03137F32-2484-4769-819B-7D567E4F2B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.4.0",
            "matchCriteriaId" : "431F61FF-C509-4C56-AF8E-9F83B1E78987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.5.0",
            "matchCriteriaId" : "E0B6EB25-9E80-459C-8FFD-8569DB12E315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-wjp8-8qf6-vqmc",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10819",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-wjp8-8qf6-vqmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10618",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When the 'bgp-error-tolerance' feature &#xe2;&#x80;\" designed to help mitigate remote session resets from malformed path attributes &#xe2;&#x80;\" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that do not have 'bgp-error-tolerance' configured are not vulnerable to this issue. Affected releases are Juniper Networks Junos OS 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F5-S8, 15.1F6-S7, 15.1R5-S6, 15.1R6-S2, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R5; 16.2 prior to 16.2R1-S5, 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S2, 17.2R2; 17.2X75 prior to 17.2X75-D50. No other Juniper Networks products or platforms are affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Cuando 'bgp-error-tolerance' feature #xe2;#x80;\", que está diseñado para ayudar a mitigar reinicios de sesiones remotas de atributos de ruta mal formados #xe2;#x80, está habilitado, un BGP UPDATE que contenga una serie de atributos transitivos especialmente manipulados podría provocar que el proceso de enrutamiento de RPD se cierre de manera inesperada y se reinicie. Los dispositivos con BPG activado que no tengan \"bgp-error-tolerance\" configurado no son vulnerables a este problema. Las distribuciones afectadas son: Juniper Networks Junos OS 13.3 anteriores a 13.3R10-S2; 14.1 anteriores a 14.1R8-S4, 14.1R9; 14.1X50 anteriores a 14.1X50-D185; 14.1X53 anteriores a 14.1X53-D45, 14.1X53-D50; 14.2 anteriores a 14.2R7-S7, 14.2R8; 15.1 anteriores a 15.1F5-S8, 15.1F6-S7, 15.1R5-S6, 15.1R6-S2, 15.1R7; 15.1X49 anteriores a 15.1X49-D100; 15.1X53 anteriores a 15.1X53-D64, 15.1X53-D70; 16.1 anteriores a 16.1R3-S4, 16.1R4-S3, 16.1R5; 16.2 anteriores a 16.2R1-S5, 16.2R2; 17.1 anteriores a 17.1R1-S3, 17.1R2; 17.2 anteriores a 17.2R1-S2, 17.2R2; 17.2X75 anteriores a 17.2X75-D50. No hay ningún otro producto o plataforma de Juniper Networks que se vea afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF5DAA-62F5-491F-A9CE-098970671D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "CA058F8A-01BE-48EA-9E67-98FF069E78D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2E537B-9504-4912-B231-0D83F4459469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCB3837-DCBC-4997-B63E-E47957584709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C88E2B1-469B-442B-9FC0-7C9408CE3917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB5A368-E582-4DFD-87B4-C887DA908E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED0B93-2CFC-474F-B199-F78E1C67E8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D270B6-1681-4EC5-9BC2-1312A50C8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB14FA-0D58-4AE4-9324-310290F1F0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "5617BE56-FAB0-4A26-B311-E4A6C506DE80"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0B8539-31FF-4AE9-91D6-47E6305D9EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104A7E60-EDE5-43E6-82FA-93016265CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x50:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C31E6C-0CF5-4DCA-9CAC-317C179711D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d44:*:*:*:*:*:*",
            "matchCriteriaId" : "81BEA7EA-FF95-425B-9245-21927E1F30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "D58997E6-96B4-4930-A29D-B49D06DFA9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB887FD-D3FB-439F-9A89-CC367A74DB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d52:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA46912-D173-49C5-A0A1-64BD0889D3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEE4EE4-18D9-4FA9-9A02-917240B851AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d57:*:*:*:*:*:*",
            "matchCriteriaId" : "188FED65-8A81-4BB0-B10B-8CA17B4F71CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D571B57-4F4C-4232-9D3B-B2F7AAAB220B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B47EC5-0276-4799-B536-12B33B5F003B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EB45C0-E3BD-4C0D-9E97-1DB726D66401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A3F26-3C6E-4B5A-9D40-E6ABC2BFA7AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10820",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/concept/bgp-error-handling-overview.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/bgp-error-tolerance.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/concept/bgp-error-handling-overview.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/bgp-error-tolerance.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10619",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from flowing through the device and triggering RG1+ (data-plane) fail-over to the secondary node. Repeated crashes of the flowd process may constitute an extended denial of service condition. This service is not enabled by default and is only supported in high-end SRX platforms. Affected releases are Juniper Networks Junos OS 12.3X48 prior to 12.3X48-D45, 15.1X49 prior to 15.1X49-D80 on SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800."
      }, {
        "lang" : "es",
        "value" : "Cuando Express Path (antes conocido como \"service offloading\") se configura en Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 en modo de configuración de clústeres en alta disponibilidad, algunos paquetes multicast podrían causar que el proceso flowd se cierre de manera inesperada, deteniendo o interrumpiendo el trafico que atraviesa el dispositivo y desencadenando un fail-over RG1+ (data-plane) en el nodo secundario. El cierre inesperado de manera repetida del proceso flowd puede resultar en una condición extendida de denegación de servicio (DoS). Este servicio no está habilitado por defecto y solo es compatible en plataformas SRX de gama alta. Las distribuciones afectadas son: Juniper Networks Junos OS 12.3X48 anteriores a 12.3X48-D45, 15.1X49 anteriores a 15.1X49-D80 en SRX1400, SRX3400, SRX3600, SRX5400, SRX5600 y SRX5800."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10821",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10620",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D55; 15.1X49 prior to 15.1X49-D110;"
      }, {
        "lang" : "es",
        "value" : "Juniper Networks Junos OS en dispositivos de la serie SRX no verifica el certificado del servidor HTTPS antes de descargar actualizaciones de antivirus. Esto puede permitir que un atacante Man-in-the-Middle (MitM) inyecte firmas falsas para causar disrupciones de servicio o hacer que el dispositivo no detecte ciertos tipos de ataques. Las distribuciones afectadas Junos OS son: 12.1X46 anteriores a 12.1X46-D71; 12.3X48 anteriores a 12.3X48-D55; 15.1X49 anteriores a 15.1X49-D110."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB89F64-16BB-4A14-9084-B338668D7FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B6215F-76BF-473F-B325-0975B0EB101E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "50E7FD07-A309-48EC-A520-C7F0FA35865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F868948A-04D7-473B-971F-721302653633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "830A9EBA-88F1-4277-B98F-75AC52A60824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD32D8A-7531-4691-B45D-9EACC69A23D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "76DFA52F-5B2E-47DA-9A8E-7D17A7413929"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "6B65EF51-ED97-4973-94C4-8F66C553F190"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10822",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10621",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D50; 14.1 prior to 14.1R8-S5, 14.1R9; 14.1X53 prior to 14.1X53-D50; 14.2 prior to 14.2R7-S9, 14.2R8; 15.1 prior to 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D90; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R4-S1, 16.1R5; 16.2 prior to 16.2R1-S3, 16.2R2;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio (DoS) en el servicio telnetd en Juniper Networks Junos OS permite que atacantes remotos no autenticados provoquen una denegación de servicio (DoS). Las distribuciones afectadas Junos OS son: 12.1X46 anteriores a 12.1X46-D71; 12.3X48 anteriores a 12.3X48-D50; 14.1 anteriores a 14.1R8-S5, 14.1R9; 14.1X53 anteriores a 14.1X53-D50; 14.2 anteriores a 14.2R7-S9, 14.2R8; 15.1 anteriores a 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6; 15.1X49 anteriores a 15.1X49-D90; 15.1X53 anteriores a 15.1X53-D47; 16.1 anteriores a 16.1R4-S1, 16.1R5; 16.2 anteriores a 16.2R1-S3, 16.2R2;"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E747970-4C27-4B46-9163-964252CB98F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7192552C-7D4A-4D95-BA79-CDF465E27D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6237291A-B861-4D53-B7AA-C53A44B76896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC40ABB-E364-46C9-A904-C0ED02806250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D571B57-4F4C-4232-9D3B-B2F7AAAB220B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10817",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10622",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3. This issue was found by an external security researcher."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en Juniper Networks Junos Space Network Management Platform puede permitir a un atacante remoto no autenticado en la red iniciar sesión como cualquier usuario privilegiado. Este problema solo afecta a Junos Space Network Management Platform 17.1R1 sin Patch v1 y las distribuciones 16.1 anteriores a la 16.1R3. Un investigador de seguridad externo descubrió este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFF54CC-E24F-42B4-B908-AECD1139146B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7481D0BF-0B4E-41E1-9DC7-0CBEE8375A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "882C4D7A-293C-4587-84B1-822F63D53D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4A98BA3F-35BD-4C8D-80B4-B85C3B32F5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101258",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10824",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10623",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1."
      }, {
        "lang" : "es",
        "value" : "Falta de autenticación y autorización de mensajes de clústeres en Juniper Networks Junos Space podría permitir que un tipo de atacante Man-in-the-Middle (MitM) intercepte, inyecte o interrumpa las operaciones de los clústeres de Junos Space entre dos nodos. Las distribuciones afectadas son: Juniper Networks Junos Space en todas sus versiones anteriores a la 17.1R1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.2",
            "matchCriteriaId" : "2722006A-B98F-4FBC-956B-39FC4D1051AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA10826",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10624",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2017-10-13T17:29:01.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1."
      }, {
        "lang" : "es",
        "value" : "Verificación insuficiente de los certificados de los nodos en Juniper Networks Junos Space puede permitir que un tipo de atacante Man-in-the-Middle (MitM) realice modificaciones no autorizadas a la base de datos Space o añada nodos. Las distribuciones afectadas son: Juniper Networks Junos Space en todas sus versiones anteriores a la 17.1R1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.1",
            "matchCriteriaId" : "5CAE38A6-2DC8-41A1-A36B-F17457099600"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101255",
        "source" : "sirt@juniper.net",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10826",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.juniper.net/JSA10826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6223",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2017-10-13T17:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Ruckus Wireless Zone Director Controller en distribuciones de firmware ZD9.9.x, ZD9.10.x y ZD9.13.0.x anteriores a 9.13.0.0.232 contiene vulnerabilidades de inyección de comandos del sistema operativo en la característica ping que podrían permitir que usuarios locales autenticados ejecuten comandos arbitrarios con privilegios en el sistema operativo subyacente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckus:zonedirector_firmware:zd9.9.0.0.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E471ED42-71CE-49C0-8527-13945905E42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckus:zonedirector_firmware:zd9.9.0.0.212:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8272A4-16A5-4F56-BAEF-69EFD491F947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckus:zonedirector_firmware:zd9.9.0.0.216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6706B16-A872-45BC-8B72-606E1F0E5846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckus:zonedirector_firmware:zd9.10.0.0.218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BADE4E-C7EA-4502-803F-89AB583B5FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckus:zonedirector_firmware:zd9.13.0.0.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722C7407-5914-4F37-A40F-E3F0125A5A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckus:zonedirector_firmware:zd9.13.0.0.209:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6173E7EB-D93C-43EA-B4CD-7F9D74B22924"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckus:zonedirector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01BE442-3DF1-44F1-BEBD-A96E511DBDE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt",
        "source" : "sirt@brocade.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6224",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2017-10-13T17:29:01.160",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request."
      }, {
        "lang" : "es",
        "value" : "Ruckus Wireless Zone Director Controller en distribuciones de firmware ZD10.0.0.x, ZD10.0.1.x (anteriores a la distribución 10.0.1.0.17 MR1) y Ruckus Wireless Unleashed AP Firmware, distribuciones 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x., contienen vulnerabilidades de inyección de comandos del sistema operativo que podrían permitir que usuarios locales autenticados ejecuten comandos arbitrarios con privilegios en el sistema operativo subyacente anexando esos comandos en el campo Common Name en Certificate Generation Request."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_firmware:zd9.9.0.0.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0379B3F-72FA-4F1C-A17A-AA0DE0AB9FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_firmware:zd9.9.0.0.212:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E25F-EA06-42F6-9583-06102ABA2180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_firmware:zd9.9.0.0.216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D203A397-7577-4532-8060-52DF61104C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_firmware:zd9.10.0.0.218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87309EB0-29CC-49A7-ACBA-7A2E1D0CB899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_firmware:zd9.13.0.0.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8B4C85-F587-4AFA-9BF3-2237DB69FBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_firmware:zd9.13.0.0.209:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834C35BC-614D-4D54-9D17-1616CCE6E206"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zonedirector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC847897-E9C7-4247-BC22-E999847E1110"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:unleashed_firmware:200.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70338506-5D84-4EAE-BCF7-9BBF8733E3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:unleashed_firmware:200.1.9.12.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C71FBC-6AE3-45CA-A902-84038AC85B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:unleashed_firmware:200.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F01DD9-8F5D-4B2D-B4C2-115CA36E0178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:unleashed_firmware:200.3.9.13.228:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ABFF81D-CB46-4836-A37F-7ECEDE373427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:unleashed_firmware:200.4.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59125C79-B03D-43FF-AC5A-402C6EC60D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:unleashed_firmware:200.4.9.13.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13DDB043-55FE-4D47-BE51-58E434767D6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:unleashed:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1920DC-DC78-4708-9D0C-BE6BB73AA8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt",
        "source" : "sirt@brocade.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-14T22:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk."
      }, {
        "lang" : "es",
        "value" : "Git, en versiones hasta la 2.14.2 gestiona de manera incorrecta capas de objetos tipo árbol, lo que permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un repositorio manipulado. Esto también se conoce como bombas Git (Git bomb). Esto también puede causar un impacto de consumo de disco; sin embargo, un proceso afectado normalmente no sobreviviría a este intento de construir la estructura de datos en la memoria antes de escribir en el disco."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.14.2",
            "matchCriteriaId" : "B122112C-041C-4E35-A95B-09A6FEB34E66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Katee/git-bomb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kate.io/blog/git-bomb/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3829-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Katee/git-bomb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kate.io/blog/git-bomb/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3829-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12629",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-14T23:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr."
      }, {
        "lang" : "es",
        "value" : "Ocurre una ejecución remota de código en Apache Solr en versiones anteriores a la 7.1 con Apache Lucene en versiones anteriores a la 7.1 explotando XXE junto con el uso de un comando add-listener de la API de configuración para alcanzar la clase RunExecutableListener. Elasticsearch, a pesar de que emplea Lucene, NO es vulnerable a esto. Es destacable que la vulnerabilidad de XML external entity expansion ocurre en el analizador sintáctico de consulta de XML que está disponible, por defecto, para cualquier petición de consulta con parámetros deftype=xmlparser y puede ser explotado para subir datos maliciosos al manipulador de peticiones /upload o como XXE ciego empleando un contenedor ftp para leer archivos locales arbitrarios del servidor Solr. También hay que tener en cuenta el hecho de que la segunda vulnerabilidad está relacionada con la ejecución remota de código empleando la clase RunExecutableListener disponible en todas las versiones afectadas de Solr."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.4",
            "matchCriteriaId" : "6D6F404C-2EE9-4A14-9293-AB2DEB3D3BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.6.1",
            "matchCriteriaId" : "B8614312-907C-4617-82BC-256A8CB85CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.1",
            "matchCriteriaId" : "729484B3-0906-4B46-8649-51405630D270"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/13/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101261",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3123",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3124",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3244",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3451",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3452",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r26c996b068ef6c5e89aa59acb769025cfd343a08e63fbe9e7f3f720f%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00028.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s.apache.org/FJDl",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/ApacheSolr/status/918731485611401216",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/joshbressers/status/919258716297420802",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/searchtools_avi/status/918904813613543424",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4259-1/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4124",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43009/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r26c996b068ef6c5e89aa59acb769025cfd343a08e63fbe9e7f3f720f%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s.apache.org/FJDl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/ApacheSolr/status/918731485611401216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/joshbressers/status/919258716297420802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/searchtools_avi/status/918904813613543424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4259-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-14T23:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call."
      }, {
        "lang" : "es",
        "value" : "El subsistema de claves KEYS en el kernel Linux hasta la versión 4.13.7 gestiona de manera incorrecta el uso de add_key para una clave que ya existe, pero no se ha probado, lo que permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) o que tengan un impacto sin especificar mediante una llamada del sistema manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.6",
            "matchCriteriaId" : "90F3E159-291B-49D0-ACC2-11046DE3849B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1498016",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://marc.info/?t=150654188100001&r=1&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=150783958600011&r=1&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3798-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3798-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1499828.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1498016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://marc.info/?t=150654188100001&r=1&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=150783958600011&r=1&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3798-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3798-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1499828.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-15T03:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a \"Cookie: PHPSESSID=\" header. This can be used to achieve persistent access to the admin panel even after an admin password change."
      }, {
        "lang" : "es",
        "value" : "/bin/login.php en el panel web de la llave (dongle) Airtame HDMI con firmware anterior a 3.0 permite que un atacante establezca su propio id de sesión mediante una cabecera \"Cookie: PHPSESSID=\". Esto se puede utilizar para conseguir acceso persistente al panel admin incluso después de que una contraseña admin cambie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:airtame:hdmi_dongle_firmware:*:b1:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "C5F3CB19-F170-4C2E-85C8-A8BA2BE771F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:airtame:hdmi_dongle:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A851C9-901E-4CFC-B0F9-4AA668AD8DDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-15T03:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php."
      }, {
        "lang" : "es",
        "value" : "Existe cross-Site Scripting (XSS) en NexusPHP 1.5 mediante el parámetro keyword en messages.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A906BE10-1029-460E-8BB1-94D0DBCA258E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.recorday.cn/about/xss2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/C0der1iu/Nexusphppoc/blob/master/xss2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.recorday.cn/about/xss2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/C0der1iu/Nexusphppoc/blob/master/xss2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-15T08:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as \"GET / HTTP/1.1\"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port."
      }, {
        "lang" : "es",
        "value" : "Las estadísticas de extracción de la API HTTP en EWBF Cuda Zcash Miner versión 0.3.4b mantienen conexiones TCP hasta que se realice algún tipo de petición (como \"GET / HTTP/1.1\"), lo que permite un ataque de denegación de servicio (DoS) que evita que un usuario visualice sus estadísticas de extracción por parte de un atacante que abre una sesión con telnet o netcat y se conecta al extractor o miner en el puerto de la API HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ewbf:cuda_zcash_miner:0.3.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8752DB-6191-4819-AAE4-DD9F6FE22C1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.legacysecuritygroup.com/cve-2017-15300.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.legacysecuritygroup.com/cve-2017-15300.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-15T17:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script."
      }, {
        "lang" : "es",
        "value" : "La versión 17.3.33.2830 de PRTG Network Monitor es vulnerable a Cross-Site Scripting (XSS) persistente en todos los nombres de grupos creados. Esto está relacionado con una mala gestión de errores para un script HTML codificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:17.3.33.2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50563838-FE5C-4B0F-BBFE-6D6D8072077D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-15T19:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en public/examples/resources/getsource.php en Luracast Restler, hasta la versión 3.0.0, como se utiliza en la extensión de restler anterior a la versión 1.7.1 para TYPO3, permite que atacantes remotos lean archivos arbitrarios mediante el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luracast:restler:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "CED3CE79-D532-48F3-8DA5-7C2492B31FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luracast:restler:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "D6D50873-28E2-402C-A8BA-AD8F37BC0D3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extensions.typo3.org/extension/download/restler/1.7.1/zip/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://extensions.typo3.org/extension/restler/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://extensions.typo3.org/extension/download/restler/1.7.1/zip/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://extensions.typo3.org/extension/restler/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-15T19:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. NOTE: This has been disputed and it is argued that this is not present in version 1.1.0."
      }, {
        "lang" : "es",
        "value" : "La función foreach en ext/ccsv.c en Ccsv 1.1.0 permite que atacantes remotos provoquen una denegación de servicio (liberación doble y cierre inesperado de la aplicación) o, probablemente, provocar cualquier otro tipo de problema mediante un archivo modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccsv_project:ccsv:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717C7DC2-3E0F-49B9-9549-FC4396B83FE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/evan/ccsv/commit/24e0b9b94c44a15b23475e821366239d53764dbd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/evan/ccsv/commit/c59d960ffa6b742a0616a209442618462142e6c1#diff-e39824a4819928ff248d5e90a12d1b311db2923907171cdc0ad7058da12244d9R224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/evan/ccsv/issues/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/evan/ccsv/issues/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T01:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on the system (Windows), including sandboxed users, can issue an ioctl to this driver without any validation. Furthermore, the driver can map any physical page on the system and returns the allocated map page address to the user: that results in an information leak and EoP. NOTE: the vendor indicates that the arbitrary read itself is intentional behavior (for ACPI scan functionality); the security issue is the lack of an ACL."
      }, {
        "lang" : "es",
        "value" : "En CPUID CPU-Z hasta la versión 1.81, hay derechos de acceso incorrectos al controlador del modo kernel (ej.: cpuz143_x64.sys para la versión 1.43) que pueden dar como resultado una revelación de información o una elevación de privilegios, debido a una lectura arbitraria de cualquier dirección física mediante una llamada IOCTL 0x9C402604. Cualquier aplicación que se ejecute en el sistema (Windows), incluidos los usuarios en sandbox, puede realizar una llamada IOCTL a este controlador sin ninguna validación. Además, el controlador puede asignar cualquier página física en el sistema y devolver al usuario la dirección de la página de asignación asignada. Esto desemboca en una revelación de información y una elevación de privilegios. NOTA: el fabricante indica que la lectura arbitraria en sí es un comportamiento intencionado (para la funcionalidad de escaneo ACPI). El problema de seguridad es la falta de una lista de control de acceso o ACL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpuid:cpu-z:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "1.81",
            "matchCriteriaId" : "3862479F-3E2F-444B-A942-C6EBAE876E3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T01:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41)."
      }, {
        "lang" : "es",
        "value" : "En CPUID CPU-Z en versiones anteriores a la 1.43, hay una escritura arbitraria de memoria que resulta directamente en una elevación de privilegios, ya que cualquier programa que se ejecute en la máquina local (mientras CPU-Z se está ejecutando) puede lanzar una llamada IOCTL 0x9C402430 al controlador del modo kernel (e.g., cpuz141_x64.sys para la versión 1.41)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpuid:cpu-z:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "1.42",
            "matchCriteriaId" : "724B35A9-E952-4D5B-BFAC-BFC764561A5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15303/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15303/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T01:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176."
      }, {
        "lang" : "es",
        "value" : "osTicket 1.10.1 permite la ejecución de código JavaScript arbitrario en el lado del cliente en víctimas que hagan clic en un enlace manipulado support/scp/tickets.php?status=, lo que también se conoce como Cross-Site Scripting (XSS). Como consecuencia, pueden tener lugar el robo de ID de sesión y de datos, así como la posibilidad de que se omitan protecciones CSRF, la inyección de iframes para establecer canales de comunicación, etc. Esta vulnerabilidad está presente después del inicio de sesión en la aplicación. Esto afecta a un archivo tickets.php diferente de CVE-2015-1176."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD9CB41-1BE8-4825-998E-9A204D5C2D35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T01:29:01.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call."
      }, {
        "lang" : "es",
        "value" : "La función wasm_dis en libr/asm/arch/wasm/wasm.c en radare2 2.0.0 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basado en pila y cierre inesperado de la aplicación) o, probablemente, causar cualquier otro tipo de impacto mediante un archivo WASM manipulado que realiza una llamada r_hex_bin2str incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C49AD01-18A2-44A6-BA89-2C8280EF719C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/52b1526443c1f433087928291d1c3d37a5600515",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8673",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/52b1526443c1f433087928291d1c3d37a5600515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T01:29:01.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service (Fitz fz_drop_imp use-after-free and application crash) or possibly have unspecified other impact via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "La función build_filter_chain en pdf/pdf-stream.c en Artifex MuPDF, en versiones anteriores al 2017-09-25, gestiona de manera incorrecta un caso específico en el que una variable podría encontrarse en un registro, lo que permite que atacantes remotos provoquen una denegación de servicio (uso de memoria después de su liberación o use-after-free de Fitz fz_drop_imp y cierre inesperado de la aplicación) o, probablemente, provocar otro tipo de impacto mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11",
            "matchCriteriaId" : "E4AEC7EC-1559-463B-9A1A-0807F3C78C38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=c2663e51238ec8256da7fc61ad580db891d9fe9a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698592",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=c2663e51238ec8256da7fc61ad580db891d9fe9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en memoria dinámica (heap) en la función ImaExpandS de ima_rw.c en la versión 14.4.2 de Sound eXchange (SoX). Se podría realizar un ataque de denegación de servicio con unos valores de entrada especialmente manipulados durante la conversión de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500554",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file."
      }, {
        "lang" : "es",
        "value" : "Hay una cancelación de aserción alcanzable en la función sox_append_comment() en formats.c en Sound eXchange (SoX) 14.4.2. Se podría realizar un ataque de denegación de servicio con unos valores de entrada especialmente manipulados durante la conversión de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en la función lsx_ms_adpcm_block_expand_i de adpcm.c en la versión 14.4.2 de Sound eXchange (SoX). Se podría realizar un ataque de denegación de servicio con unos valores de entrada especialmente manipulados durante la conversión de un archivo de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area)."
      }, {
        "lang" : "es",
        "value" : "E-Sic 1.0 permite inyección SQL mediante el parámetro q en esiclivre/restrito/inc/lkpcep.php (también conocido como el área privada de búsqueda)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D5FF9-DFB2-4B4E-9153-6FAA22BA3484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://k33r0k.wordpress.com/2017/10/12/e-sic-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42979/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://k33r0k.wordpress.com/2017/10/12/e-sic-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42979/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the customer and orders section of the backend. The execution occurs in the administrator backend listing when processing a preview of the customers (kunden) or orders (bestellungen). The injection can be performed interactively via user registration or by manipulation of the order information inputs. The issue can be exploited by low privileged user accounts against higher privileged (admin or moderator) accounts."
      }, {
        "lang" : "es",
        "value" : "Shopware v5.2.5 - v5.3 es vulnerable a Cross-Site Scripting (XSS) en la sección \"customer and order\", en los módulos del backend del sistema de gestión de contenidos. Los atacantes remotos pueden inyectar código script malicioso en los campos de entrada \"firstname\", \"lastname\" u \"order\" para provocar ejecución persistente en el backend de la sección \"customer and orders\". La ejecución tiene lugar en el listado del backend del administrador cuando se procesa una previsualización de los clientes (kunden) o pedidos (bestellungen). La inyección se puede llevar a cabo de manera interactiva mediante el registro de un usuario o la manipulación de la información de entrada del pedido. Este problema puede explotarse mediante cuentas de usuario con bajo nivel de privilegios contra cuentas de usuario con un alto nivel de privilegios (admin o moderador)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98C81BA-C02A-4922-A2C9-5F9B0C44F66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71AF028-D8FB-4EE5-8837-902266746B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A52730-1F2E-4E7C-9DD6-779359B940B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE43F26-A702-475D-93D5-EF1E31F4A696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F578B155-0829-4893-896C-63AC246B93FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05329E79-7E98-4292-8302-107A7272245B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A6127A-6CE8-413A-959B-FAB967E9E128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487BB1D2-BE19-4898-974D-310FF3E6A70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B7F4A3-AA6A-4D07-A53F-D94D47741F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BE6A0C-EAA5-46BC-A1F2-FB009C43EA7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F3354D-3474-469C-9F76-C47F5D110333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31796263-22D2-414E-9FC5-581A1578DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1117F7-3895-4FFC-9CE4-438F4FF82026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21704EBC-F4ED-4498-9BC4-1CA5F0D71FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AD4596-25BF-497F-BEAD-6F1D0DB685C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C554CFEF-E2D0-407D-8188-4AC462C577AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC3DA7-E018-4730-813A-73CD87763DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87015926-3E86-49FD-B2FE-D08AE7388FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B57EFF-119A-4B44-B9DD-127A2C71A542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E707EAF-ECC4-4DC7-A14B-EE29DFE2DF79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77D2421-CBAF-4352-8043-6E90C3D9309E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149CD512-F467-4D7E-AFB0-FAFBC9EE5C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11008C2-B39D-43AA-AC60-A2626255AE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9C290F-3849-414C-BF6E-4FB0CCC8B1B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43849/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=1922",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43849/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=1922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application for WordPress. The vulnerabilities are located in the `query` and `id` parameters of the `wpjb-email`, `wpjb-job`, `wpjb-application`, and `wpjb-membership` modules. Remote attackers are able to inject malicious script code to hijack admin session credentials via the backend, or to manipulate the backend on client-side performed requests. The attack vector is non-persistent and the request method to inject is GET. The attacker does not need a privileged user account to perform a successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Se han descubierto múltiples vulnerabilidades de Cross-Site Scripting (XSS) en el lado del cliente en la aplicación web WpJobBoard v4.5.1 para WordPress. Las vulnerabilidades se encuentran en los parámetros \"id\" y \"query\" de los módulos \"wpjb-email\", \"wpjb-job\", \"wpjb-application\", y \"wpjb-membership\". Los atacantes remotos pueden inyectar código script malicioso para secuestrar credenciales de sesión admin por medio del backend o para manipular el backend en peticiones realizadas en el lado del cliente. El vector de ataque es no persistente y el método de petición para inyectar es GET. El atacante no necesita una cuenta de usuario con privilegios para conseguir una explotación exitosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpjobboard:wpjobboard:4.5.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1E03D2BF-B176-45D9-B2FE-AE088CC970FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=1941",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T04:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23."
      }, {
        "lang" : "es",
        "value" : "El servicio TELNET en Mobatek MobaXterm 10.4 no requiere autenticación, lo que permite que atacantes remotos ejecuten comandos arbitrarios mediante el puerto 23 de TCP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobatek:mobaxterm:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F571AE-CEB2-4761-9004-02522C7ECB73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T16:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a \"redundant UVector entry clean up function call\" issue."
      }, {
        "lang" : "es",
        "value" : "Doble liberación (double free) en i18n/zonemeta.cpp en International Components for Unicode (ICU) para C/C++ hasta la versión 59.1 permite que atacantes remotos ejecuten código arbitrario mediante una cadena manipulada. Esto también se conoce como \"redundant UVector entry clean up function call\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*",
            "versionEndIncluding" : "59.1",
            "matchCriteriaId" : "D014CA1A-E812-43A8-BA9B-4CEBD3D57109"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T16:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064."
      }, {
        "lang" : "es",
        "value" : "Xpress Server en SAP POS no requiere autenticación para las operaciones de lectura y borrado de archivos, apagado del demonio, operaciones de lectura del terminal, o ciertos ataques sobre credenciales. Esto corresponde con SAP Security Note 2520064."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:point_of_sale_xpress_server:1020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5C1170-F8AD-4D69-976B-AC4A73095E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:point_of_sale_xpress_server:1030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323D5C2D-1F41-4DBA-A718-43CE661951CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100713",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/research/hacking-sap-pos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/100713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/research/hacking-sap-pos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T16:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964."
      }, {
        "lang" : "es",
        "value" : "La consola de administración Java en SAP CRM tiene XSS. Esto corresponde con SAP Security Note 2478964."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082053C1-23F5-43E1-B2FD-5ECDE3EFC101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1827CD2E-82B5-4D80-B606-ECEA9977905E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C39D15-9A98-4051-A086-A08EB3E3776D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33C8A97-75A2-4204-BCB5-A659507E0021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656B4713-912E-4ACF-A519-81756935089C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:732:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DBF50A-1E14-4FAF-B615-78B30281F830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:733:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDA3E3C-4FD7-4389-8D9C-4BA54C3546B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907B43A3-DCDD-4F59-9A50-B56055FFB5AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99532",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-035-xss-crm-administration-console-java/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-035-xss-crm-administration-console-java/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T16:29:01.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064."
      }, {
        "lang" : "es",
        "value" : "Xpress Server en SAP POS no requiere autenticación para el acceso de lectura/escritura/borrado de archivos. Esto corresponde con SAP Security Note 2520064."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:point_of_sale_xpress_server:1020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5C1170-F8AD-4D69-976B-AC4A73095E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:point_of_sale_xpress_server:1030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323D5C2D-1F41-4DBA-A718-43CE661951CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://erpscan.io/research/hacking-sap-pos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://erpscan.io/research/hacking-sap-pos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T16:29:01.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964."
      }, {
        "lang" : "es",
        "value" : "El componente Java en SAP CRM tiene CSRF. Esto corresponde con SAP Security Note 2478964."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082053C1-23F5-43E1-B2FD-5ECDE3EFC101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1827CD2E-82B5-4D80-B606-ECEA9977905E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C39D15-9A98-4051-A086-A08EB3E3776D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33C8A97-75A2-4204-BCB5-A659507E0021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656B4713-912E-4ACF-A519-81756935089C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:732:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DBF50A-1E14-4FAF-B615-78B30281F830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:733:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDA3E3C-4FD7-4389-8D9C-4BA54C3546B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907B43A3-DCDD-4F59-9A50-B56055FFB5AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-036-csrf-sap-java-crm/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-036-csrf-sap-java-crm/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T16:29:01.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993."
      }, {
        "lang" : "es",
        "value" : "SAP Hostcontrol no requiere autenticación para el extremo de SOAP SAPControl. Esto corresponde con SAP Security Note 2442993."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:host_agent:7.21:*:*:*:*:hostcontrol:*:*",
            "matchCriteriaId" : "00AA2D06-719C-4194-B8C2-74C3B83A6B9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99528",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-034-sap-hostcontrol-unprotected-web-method-dos/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://erpscan.io/advisories/erpscan-17-034-sap-hostcontrol-unprotected-web-method-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS."
      }, {
        "lang" : "es",
        "value" : "La librería Infineon RSA 1.02.013 en firmware Infineon Trusted Platform Module (TPM) como las versiones anteriores a la 0000000000000422 - 4.34, anteriores a la 000000000000062b - 6.43 y anteriores a la 0000000000008521 - 133.33, gestiona de manera incorrecta la generación de claves RSA, lo que hace que sea más fácil para los atacantes superar varios mecanismos de protección criptográfica mediante ataques dirigidos, conocido como ROCA. Ejemplos de las tecnologías afectadas son BitLocker con TPM 1.2, la generación de claves PGP con YubiKey 4 (en versiones anteriores a la 4.3.5) y la característica de cifrado Cached User Data en Chrome OS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:infineon:trusted_platform_firmware:4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D825C88-A5D7-4C1F-B09B-FF63FCE1B5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:infineon:trusted_platform_firmware:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C08FA98-E0C2-4382-94BD-5C40DECD1DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:infineon:trusted_platform_firmware:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4751A17-AD4C-4F50-B0DD-4E02427BBA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:infineon:trusted_platform_firmware:133.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8A144B-1859-4C49-8AC4-10EB0FD740F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:c720_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878D0151-EE41-4EF6-A424-DA855C18986A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebase:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57181990-1011-424B-8B0D-4FCBEE35E888"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebase_24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A4C072-B9A0-47ED-8060-AA0159AF0020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_c730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088996B8-E506-4A50-8EB0-5A1258D681AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_c730e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50E8CCB-3B69-42E4-8AEE-88D0D7B9EB2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_c735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F326698-B295-4807-A4B4-0BAA9B66589E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_c740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAE0DD7-5608-4556-9978-EE7E01023DA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_c771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7D2911-0265-4B37-8CD8-42DCEC7EABDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_c771t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DD548B-AD54-4C47-9134-6B7A2398160B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_11_n7_c731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADB4F13-0684-424B-AA6B-8A7018777984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_13_cb5-311:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295D21FA-D8D2-4C19-A5B6-50D7281B2A59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_14_cb3-431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08683AB6-D690-408C-A5C7-9EF32A40876D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_14_for_work_cp5-471:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47665085-66B9-4E11-9D20-3A5A73352D91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_15_cb3-531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6973F7-0B85-4064-8879-543A243D8A8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_15_cb3-532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BE3BCF-6FE8-46F1-B774-60916DE234CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_15_cb5-571:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0413E176-3B87-4333-A9FB-A0727015ACDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_r11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075859B8-D6BE-45BB-81A0-C89792743BB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebook_r13_cb5-312t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A25AC3-0FB5-4F01-9865-0938E3976D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D33132B-CC32-4640-8BF7-F8FCF80F6EC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acer:chromebox_cxi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA85C38-CDBC-4163-8105-4E902ADD747A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aopen:chromebase:-:*:commercial:*:*:*:*:*",
            "matchCriteriaId" : "A5821187-153C-48BD-802B-89FD159755D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aopen:chromebase:-:*:mini:*:*:*:*:*",
            "matchCriteriaId" : "6D656A2B-6234-4BB2-A5CC-54B4EBA59FE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aopen:chromebox:-:*:commercial:*:*:*:*:*",
            "matchCriteriaId" : "589B967C-3EF0-42DF-9FEF-C3411AC38B4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aopen:chromeboxi:-:*:mini:*:*:*:*:*",
            "matchCriteriaId" : "3CB7F169-02A0-44B4-816B-0135DFD46905"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asi:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF33E72-2E47-4D41-9B05-8D13B26694F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebit_cs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B8BACC-0F84-41A6-BBE0-3987B1E56A8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_c200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280E26E9-5075-469C-A1B1-0CC833B32520"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_c201pa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F1DF93-A998-4528-9C82-721D16698FA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_c202sa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADFFC94-7F7A-40CF-817B-483BBDCCB66D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_c300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7EA3C8-8B68-4BE1-9C2D-FAFC4AF8EA7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_c300sa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB44E8-A520-4291-9D48-5ED4BD2B9FB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_c301sa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6530E801-A924-4B0D-9602-92D320828C75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_flip_c100pa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4C201C-3C87-4FC6-A48E-1428EA481195"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebook_flip_c302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9716ED-3AEA-439B-9148-C66CC98D0D6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebox_cn60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE2D4E6-CD1A-4336-9C1A-7B8FA5377CB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:chromebox_cn62:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A308E84E-1044-41EC-A7A2-2A0E5A5DAD02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bobicus:chromebook_11:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEB2859-2C44-410C-85F9-B37339161245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctl:j2_chromebook:-:*:*:*:*:education:*:*",
            "matchCriteriaId" : "48E098F9-7EFD-452B-9A9C-383039BF8150"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctl:j4_chromebook:-:*:*:*:*:education:*:*",
            "matchCriteriaId" : "51F47A6C-430C-4635-BF8F-E837F37673FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctl:j5_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FBD6167-984D-492E-AA47-468678051CEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctl:n6_chromebook:-:*:*:*:*:education:*:*",
            "matchCriteriaId" : "0E93EBE6-B016-42C1-A65A-4B14038DA0A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ctl:nl61_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7987CC19-4679-47A6-B2B9-8D0A9F804925"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chromebook_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D5DB45-A37D-48BE-9F00-C2108D47A4D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chromebook_11_3120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36AB1C2-6B81-49F7-998A-4E5A0692C161"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chromebook_11_3189:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F0D7C4-DB72-41CC-A163-BF9CA4315BCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chromebook_11_model_3180:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187CCE09-CC6D-455A-96A7-91667C22FCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chromebook_13_3380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BE3D28-7E3F-419C-84E3-A29D858AADEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chromebox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455A3086-A52F-49DC-993F-E3FA17A3BE15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edugear:chromebook_k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8534D121-1A3A-42C1-BC0E-B37012A5F7C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edugear:chromebook_m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF753670-DD77-415D-BD4B-17D41F975A0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edugear:chromebook_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0E191E-A0D9-4B8C-929B-012DF95A1FE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edugear:cmt_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE234602-9C70-425B-A677-382775EDC564"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edxis:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C5FAF4-1B36-4379-A530-6AB0509E69DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edxis:education_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8676FD39-8386-42D7-B551-A794B83268D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epik:chromebook_elb1101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B403CE-EDC1-426F-94A4-B19FAEEAC8EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:google:pixel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17D3A78-87DD-44CD-AB11-3E42AEB1A1D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:haier:chromebook_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D228FA-C7BD-4FA9-9885-4E2331E81966"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:haier:chromebook_11_c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2A4B85-5CA1-4D00-9F39-841FB6DE94EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:haier:chromebook_11_g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8833B8E1-E49E-4DA9-988C-B0615468DDFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:haier:chromebook_11e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EAD51FB-53D2-44BA-8C0B-70305E5C264E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hexa:chromebook_pi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DA08F6-67F6-4577-8959-19290EF58553"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hisense:chromebook_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29036285-F6EB-4BCA-A338-0266F10A4B13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook:-:*:*:*:*:meetings:*:*",
            "matchCriteriaId" : "106D11AE-4322-455C-B10E-FD4F2992B4DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11-vxxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE44E53F-383A-43E0-9B67-F736749764B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_1100-1199:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E87B3E-5E9D-419F-BFF6-C550A26B9D31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_2000-2099:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E336A5-8C90-405B-846F-003856AF8336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_2100-2199:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613BB633-7F07-4F3F-9327-B308E542FB6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_2200-2299:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD37DD3-C729-4851-ACBE-D72848FDBAB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F027B0-FC37-4F25-BAF2-78C8E695C9E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433AC4ED-752F-4B33-A294-CF2A82D8C12C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC8BDF0-F181-491D-88E7-8DD1FB5DC217"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_g4\\/g4_ee:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50F3009-FD55-454D-8BBB-C8CC7B692092"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_g5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A8ECDE-FA43-42C8-A866-24909A2ACA1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_11_g5_ee:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C827F6-3C93-48DB-B8EE-4C8B715CC66C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_13_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC73A69B-777B-498E-B7C9-2D98D26E4864"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB89A0E-A308-4FAC-8FF6-83B3A932D549"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_14_ak000-099:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808093B3-07B4-48DE-9784-0ABA100187F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_14_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8B82E0-BE77-4A6F-B867-AE51E775146D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_14_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00BDBE-F0D2-4B8C-BD8E-C1E52CBE216E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebook_14_x000-x999:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4233E3FD-B9A5-43BF-9C7F-80BF7446CD5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebox_cb1-\\(000-099\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DB5A7A-310D-442F-BE25-41A573EC8341"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:chromebox_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71390570-8953-493B-9EF7-78D4A9AD0156"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:100s_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DD500A-CF2D-491A-AD2E-6201899840AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n20_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17AAE58-B621-4737-8045-4ACD5FCB1090"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n21_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B3EEBB-44DC-4923-AABB-FF3633C570BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n22_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC42851D-E264-40C4-B44C-3CF3AAB3AE41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n23_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED745A48-294A-4FB7-A845-8B99D3848F54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n23_flex_11_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59891EF1-7733-4E02-A3D7-F48ECECACF6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n23_yoga_11_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612C3ED3-1A90-4E35-A69A-87336107D2FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:n42_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F6E4D71-085F-4CF0-A95C-F6A139A7BDD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_chromebox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5580DCA1-A57C-4A49-99C7-4C31910E8C66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAE0B2B-A078-4E08-BD4D-2E27E72061B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_13_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B481236-6FD6-47CC-925A-1580894DED37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lg:chromebase_22cb25s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE1EB6A-BCE0-443B-843C-83A4A74480FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lg:chromebase_22cv241:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE08B38-D2E4-46FF-BDBF-101516B7F760"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:medion:akoya_s2013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F934EA3-1BEB-4E0F-88BA-2A8519891D1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:medion:chromebook_s2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9737D5FA-076F-45CF-BE72-4AC92A16ACE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercer:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F7E626-C417-4164-93E8-86FF2CA81210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercer:v2_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C6DD3A-6622-41B3-B716-9020DE5674A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ncomputing:chromebook_cx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D02136-E17B-4D4F-9773-14B0E3CF674A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nexian:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993BF4EC-0564-47D8-A920-37D4D2FF1F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pcmerge:chromebook_pcm-116t-432b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E3E313-4177-4791-A405-36A9E20023E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:poin2:chromebook_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1EABBA-125A-48D2-A851-CAF5AEB3FF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:poin2:chromebook_14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92963A3-720A-495E-8EEF-D96B782CF4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:positivo:chromebook_ch1190:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62BD4DE-D78E-4C70-A54C-7655E1418073"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prowise:entry_line_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5803975-6443-49F0-B2E2-2CE362F15B0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prowise:proline_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5510D58D-A29E-426B-98B8-D3FF0DF05728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rgs:education_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29D3147-8560-4380-8940-AC2B1CE76B95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:chromebook_2_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4116587-2E83-4ABA-8B9A-E0A80C3B6A1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:chromebook_2_11_xe500c12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813366C6-684F-4A0E-BCDE-C8A4A389B905"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:chromebook_2_13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F0A50F-4D99-434E-B198-3AE48B5E7413"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:chromebook_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9246074B-C1F2-494D-B4BB-0F7BB3CAF688"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:chromebook_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF56D6E5-4F7B-45E4-A35A-0AD13B045580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:chromebook_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881D9BFA-8ACA-4188-A72A-BE48AFEED4F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sector-five:e1_rugged_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9041D-FA9A-4FDF-B5CF-DC479FA982A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:senkatel:c1101_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E5D8DD-4BC2-4E5A-854F-E24AE48B1FE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7535529-897C-4D66-87FF-638DA60D7E3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:chromebook_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42996DF5-8D88-4D65-827E-59AC8FAE90EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toshiba:chromebook_2:-:*:2015:*:*:*:*:*",
            "matchCriteriaId" : "BA9D7740-2232-4ACC-861F-58CD3F4ABCDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:true:idc_chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF68C69-3504-4209-BE16-33F7537C7D1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:true:idc_chromebook_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AEFDE24-B175-4DA2-AD5A-37F42DF3AF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:videonet:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2C8ABD-12F1-4710-B6D6-DF8ADCC37CED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:videonet:chromebook_bl10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAB3D5B-99CF-48C8-A543-2672AEAB1362"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:viglen:chromebook_11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D42B185-D644-4149-8616-DC292A8D3AF2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:viglen:chromebook_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75761B52-09E9-4B04-8E6A-0928439E429C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xolo:chromebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65407B5D-E6DD-4994-813C-BD5543111FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infineon:rsa_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02.013",
            "matchCriteriaId" : "43DDE644-1B5C-4B9E-9E91-1F9F2A1185D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.lenovo.com/us/en/product_security/LEN-15552",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101484",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.cr.yp.to/20171105-infineon.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-470231.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://crocs.fi.muni.cz/public/papers/rsa_ccs17",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://dan.enigmabridge.com/roca-vulnerability-impact-on-gemalto-idprime-net-smart-cards/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/crocs-muni/roca",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iadgov/Detect-CVE-2017-15361-TPM",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-058-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://keychest.net/roca",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://monitor.certipath.com/rsatest",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171024-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03789en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03801en_us",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00104.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00148.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307015",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.yubico.com/support/security-advisories/ysa-2017-01/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://support.lenovo.com/us/en/product_security/LEN-15552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.cr.yp.to/20171105-infineon.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-470231.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crocs.fi.muni.cz/public/papers/rsa_ccs17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://dan.enigmabridge.com/roca-vulnerability-impact-on-gemalto-idprime-net-smart-cards/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/crocs-muni/roca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iadgov/Detect-CVE-2017-15361-TPM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-058-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://keychest.net/roca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://monitor.certipath.com/rsatest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171024-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03789en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03801en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00148.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.yubico.com/support/security-advisories/ysa-2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T17:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\\Nero directory."
      }, {
        "lang" : "es",
        "value" : "Nero 7.10.1.0 tiene BINARY_PATH_NAME sin comillas para NBService, explotable mediante un archivo troyano Nero.exe en el directorio %PROGRAMFILES(x86)%\\Nero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nero:nero:7.10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461D0C91-6FF2-4759-B9F8-58DF45FCFD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2016110092",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/139658/Nero-7.10.1.0-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2016110092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/139658/Nero-7.10.1.0-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T17:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action."
      }, {
        "lang" : "es",
        "value" : "rate-me.php en Rate Me 1.0 tiene XSS mediante el campo id en una acción rate."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpjabbers:rate_me:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05E8E00-ACBA-4AF5-89F4-8457C1AC78E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2016110122",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/139696/ratemephp-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2016110122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/139696/ratemephp-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T18:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324."
      }, {
        "lang" : "es",
        "value" : "ASX to MP3 converter 3.1.3.7.2010.11.05 tiene un desbordamiento de búfer mediante un archivo M3U manipulado. Esto se relaciona con CVE-2009-1324."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asx_to_mp3_converter_project:asx_to_mp3_converter:3.1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B68F66-661C-44D7-B7D5-0CB8E22DEBAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144590/ASX-To-MP3-3.1.3.7-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154788/ASX-To-MP3-Converter-3.1.3.7-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42974/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144590/ASX-To-MP3-3.1.3.7-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154788/ASX-To-MP3-Converter-3.1.3.7-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42974/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T18:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el subsistema ALSA en el kernel de Linux en versiones anteriores a la 4.13.8 permite que usuarios locales provoquen una denegación de servicio (uso de memoria previamente liberada) o posiblemente otro impacto mediante llamadas ioctl /dev/snd/seq ioctl manipuladas. Esto está relacionado con sound/core/seq/seq_clientmgr.c y sound/core/seq/seq_ports.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "CB9D6AAF-DF4B-4EE1-A638-DFBDC249789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.76",
            "matchCriteriaId" : "126AB064-7A35-4C32-BED7-382E0F13F147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.93",
            "matchCriteriaId" : "C2F83CFA-B098-45DE-9391-BEA047F41BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.57",
            "matchCriteriaId" : "D07BF343-265B-4842-9149-E4B7B8943A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.8",
            "matchCriteriaId" : "0CD397D8-C278-45DC-A0B3-ABBC73A74ED7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/11/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101288",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2390",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3822",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3823",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1062520",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71105998845fb012937332fe2e806d443c09e026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1062520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/71105998845fb012937332fe2e806d443c09e026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T18:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation."
      }, {
        "lang" : "es",
        "value" : "Las funciones de escritura mode4and5 en hw/display/cirrus_vga.c en Qemu permiten que usuarios del sistema operativo invitados con privilegios provoquen una denegación de servicio (acceso de lectura fuera de límites y cierre inesperado del proceso Qemu) mediante vectores relacionados con el cálculo dst."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "DE828526-81EF-4807-8E73-E0FC56034D8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/12/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3368",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3369",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0516",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501290",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02557.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/12/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02557.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0316",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-10-16T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "En GeForce Experience (GFE) en versiones 3.x anteriores a la 3.10.0.55, NVIDIA Installer Framework contiene una vulnerabilidad en NVISystemService64 donde un valor pasado desde un usuario al controlador se usa sin validación, lo que podría conducir a una denegación de servicio o una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.10.0.55",
            "matchCriteriaId" : "5454038C-F1F0-4061-8B5C-04A8CF1658C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4560",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9367",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-10-16T21:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en BlackBerry Workspaces Server podría permitir que un atacante ejecute o suba archivos arbitrarios, o que revele el contenido de archivos arbitrarios en cualquier parte del servidor web manipulando una URL con una petición POST manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F375EEB-9B67-4E8C-B59D-5E45D5744AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBC4987-A09A-44AD-B691-59AB62ACC9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449009A5-0F54-41D5-BE49-EADE65F77CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79496E2E-38D9-4707-987D-521FD417ABC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA490F11-2C67-4A29-A831-BB218E52779F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED290A07-6623-49F1-BC2F-58696CEE45F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F68629-73B5-41FB-8ABE-3B49FCCF3841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AFC2FF-5093-4761-B72A-8D22601A965F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FAC0CA-253B-4013-B89A-B180D95E3310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D6DDE0-5DEE-406B-B96A-6C7A203BB368"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964BBFE6-AFCC-4577-8F84-D4F71D507060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "416765A7-911E-4327-80F0-3CA4B2A09B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB80B3C-3EF0-427C-B9FE-DD54F248DD13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF721FB8-0BA8-4792-B409-CE71CDCF5ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F96B35-BF5D-4254-A9EA-972997DD70CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D0A794-854B-40FE-A95B-776D469F426E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A47B0C9-6C09-4A5F-A473-C82618822041"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_appliance-x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.2",
            "matchCriteriaId" : "693F0340-B3E0-48B5-8DFF-E77CC8E70315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9368",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-10-16T21:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en BlackBerry Workspaces Server podría resultar en un atacante obteniendo acceso al código fuente para las aplicaciones del lado del servidor manipulando una petición para archivos específicos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F375EEB-9B67-4E8C-B59D-5E45D5744AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBC4987-A09A-44AD-B691-59AB62ACC9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449009A5-0F54-41D5-BE49-EADE65F77CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79496E2E-38D9-4707-987D-521FD417ABC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA490F11-2C67-4A29-A831-BB218E52779F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED290A07-6623-49F1-BC2F-58696CEE45F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F68629-73B5-41FB-8ABE-3B49FCCF3841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AFC2FF-5093-4761-B72A-8D22601A965F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FAC0CA-253B-4013-B89A-B180D95E3310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D6DDE0-5DEE-406B-B96A-6C7A203BB368"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964BBFE6-AFCC-4577-8F84-D4F71D507060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "416765A7-911E-4327-80F0-3CA4B2A09B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB80B3C-3EF0-427C-B9FE-DD54F248DD13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF721FB8-0BA8-4792-B409-CE71CDCF5ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F96B35-BF5D-4254-A9EA-972997DD70CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D0A794-854B-40FE-A95B-776D469F426E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_vapp:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A47B0C9-6C09-4A5F-A473-C82618822041"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:workspaces_appliance-x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.2",
            "matchCriteriaId" : "693F0340-B3E0-48B5-8DFF-E77CC8E70315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96542",
        "source" : "secure@blackberry.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-16T22:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 invalid write and application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función store_versioninfo_gnu_verdef en libr/bin/format/elf/elf.c en radare2 2.0.0 permite que atacantes remotos provoquen una denegación de servicio (escritura inválida en r_read_le16 y cierre inesperado de la aplicación) o, probablemente, otro impacto sin especificar mediante un archivo ELF modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C49AD01-18A2-44A6-BA89-2C8280EF719C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/21a6f570ba33fa9f52f1bba87f07acc4e8c178f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8685",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/21a6f570ba33fa9f52f1bba87f07acc4e8c178f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13077",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T02:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) permite la reinstalación de la clave temporal (TK) PTK (Pairwise Transient Key) durante la negociación en cuatro pasos, haciendo que un atacante que se sitúe entro del radio responda, descifre o suplante frames."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-003",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13078",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) permite la reinstalación de la clave temporal GTK (Group Temporal Key) durante la negociación en cuatro pasos, haciendo que un atacante en el rango de radio reproduzca frames desde los puntos de acceso hasta los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-003",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13079",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) que soporte IEEE 802.11w permite la reinstalación de la clave temporal IGTK (Integrity Group Temporal Key) durante la negociación en cuatro pasos, haciendo que un atacante en el rango de radio suplante frames desde los puntos de acceso hasta los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13080",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) permite la reinstalación de la clave temporal GTK (Group Temporal Key) durante la negociación de la clave de grupo, haciendo que un atacante que se sitúe dentro del radio reproduzca frames desde los puntos de acceso hasta los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039572",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-003",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13081",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) que soporte IEEE 802.11w permite la reinstalación de la clave temporal IGTK (Integrity Group Temporal Key) durante el handshake de clave de grupo, haciendo que un atacante en el rango de radio suplante frames desde los puntos de acceso hasta los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13082",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) que soporte IEEE 802.11r permite la reinstalación de la clave temporal PTK (Pairwise Transient Key) durante la negociación de la transmisión rápida (FT) BSS, haciendo que un atacante en el rango de radio reproduzca, descifre o suplante frames."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039570",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039571",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://github.com/vanhoefm/krackattacks-test-ap-ft",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-299-02",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vanhoefm/krackattacks-test-ap-ft",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-299-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13084",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) permite la reinstalación de la clave STK (Transient Key) STSL (Station-To-Station-Link) durante la negociación PeerKey, haciendo que un atacante que se sitúe dentro del radio reproduzca, descifre o suplante frames."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13086",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) permite la reinstalación de la clave TPK (Peer Key) TDLS (Tunneled Direct-Link Setup) durante la negociación TDLS, haciendo que un atacante que se sitúe dentro del radio reproduzca, descifre o suplante frames."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13087",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) que soporte IEEE 802.11r permite la reinstalación de la clave GTK (Group Temporal Key) cuando se procesa un frame Wireless Network Management (WNM) Sleep Mode Response, haciendo que un atacante que se sitúe dentro del radio reproduzca frames desde los puntos de acceso hasta los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13088",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-17T13:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients."
      }, {
        "lang" : "es",
        "value" : "Wi-Fi Protected Access (WPA y WPA2) que soporte IEEE 802.11v permite la reinstalación de la clave temporal GTK (Integrity Group Temporal Key) cuando se procesa un frame Wireless Network Management (WNM) Sleep Mode Response, haciendo que un atacante que se sitúe dentro del radio reproduzca frames desde los puntos de acceso hasta los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B9266-A927-4F62-8742-721CE9A4C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602D3280-2974-4809-BE70-1EA9437AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5753931-556B-4EEC-B510-751BA3613CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2095C863-1FB0-4016-81FF-3CAB44E77FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7AAFCB-AB64-4B39-87AA-936E386A82C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5512-B60E-48D7-B136-ADF19E5E74BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21324D89-B634-4D6B-987B-4AD29079373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB43314-8725-48A0-8902-864567808AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3D0E-C483-4575-8209-DE643A3FEC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1212B910-E4A5-47A1-A263-4E1C13CF3EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A6A99E-5129-4E8D-A0AF-61755BDA3565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC42F782-63CB-4960-BF65-4856776CFBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212B0353-4AEF-4861-A054-6193CAA05390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E702507-5BA0-4A12-80C6-A729F32A6A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24810936-DABC-485D-B952-22F16C3016FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF46881-4484-4ABB-AC0C-152664E2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CBDD7-BFEC-48F6-8C4C-D300143B6571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B9643D-4046-4034-8B68-18F59154CD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C458F-D1BD-48DA-86C7-BA714F5AA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057F722-1A8E-4D75-B049-E3632AC8EF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F53FDB-7136-444E-AB03-9D8A6A31E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AB46C0-2F00-4805-84A9-323BA4E594DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06119A43-B1CA-4021-87D2-C67BE6125423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D16AF-3A8B-47DD-A499-948A73062AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BECC3EF-2777-4FF9-9750-93D1245A9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D07095-6331-4079-BD86-E414CEE35624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4681FC-44F4-4E86-8431-8EDAD65492D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FB535-AFFF-4083-AF1D-9E1ED504158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74105F9-E729-47BA-A96F-4D15947B673A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F7411-0B32-4041-8235-2B1AEC186FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9191D783-4390-4603-9C4D-F673270E63C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F3308-EABA-451F-90E1-65919450A809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F6680B-7015-4EB0-AABC-A4DD50894CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAFF5E3-EA27-4688-87AD-1648003D3D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476C3ED0-B77C-490F-AF1E-BC4C7D52D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1972B5-F896-419C-9FFA-FB583B114B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E84533-EB76-4A8F-90ED-E9342EAF3427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B55A4-2488-44D1-991F-C142C3527F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90102D17-8D03-4F59-811B-FBFB98D627C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9381F69-1633-44DD-967F-D29587B67079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BDAC-6207-4B6A-8EF3-D52DED1A9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E17E03-53C6-4E74-91A8-4C4363666291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643762E2-969E-4531-B79E-961697E5DA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AD871-2091-48E9-B801-3E3D5CF8E594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701BF31-B3FC-4590-9787-3BA94ECB8D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB96005-E214-4C60-865E-B693115527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF264-2315-43CE-B2A6-4234B394854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EF53AD-F985-446E-89B8-4BFECE00AD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A11DBFA-9F0E-4358-8541-E5371C11FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AEB08-FF7D-4DC3-AB14-B8F2B9474810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C5523-16E4-417E-A159-F5D0F9E83C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB93C2FC-6913-448E-8B93-EEB2229EC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA3172-7088-4B5E-923D-37B155729BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FD6B1B-7555-449D-9CCB-1487FAEE8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9726F4DE-8037-49AD-A092-7EF9D5BF99EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "086BF5C5-255C-4E2E-83D3-A8B83AED6B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
            "matchCriteriaId" : "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "cret@cert.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/228519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3455-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/kracks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.krackattacks.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-17T18:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rt_sigreturn() system call, allowing local users to read the FPU registers of other processes on the system, related to arch/x86/kernel/fpu/regset.c and arch/x86/kernel/fpu/signal.c."
      }, {
        "lang" : "es",
        "value" : "El subsistema x86/fpu (Floating Point Unit) en el kernel de Linux en versiones anteriores a la 4.13.5, cuando un procesador soporta la característica xsave pero no la xsaves, no gestiona correctamente los intentos de establecer bits reservados en la cabecera xstate mediante las llamadas de sistema ptrace() o rt_sigreturn(), lo que permite que usuarios locales lean los registros FPU de otros procesos en el sistema, relacionado con arch/x86/kernel/fpu/regset.c y arch/x86/kernel/fpu/signal.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.4",
            "matchCriteriaId" : "928AB8DD-8573-4425-803D-1B164491BF77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=814fb7bb7db5433757d76f4c4502c96fc53b0b5e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/814fb7bb7db5433757d76f4c4502c96fc53b0b5e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=814fb7bb7db5433757d76f4c4502c96fc53b0b5e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/814fb7bb7db5433757d76f4c4502c96fc53b0b5e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8805",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-10-17T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror."
      }, {
        "lang" : "es",
        "value" : "ftpsync en Debian anterior a 20171017 no utiliza la opción --safe-links de rsync, lo que permite que atacantes remotos realicen ataques de salto de directorio mediante un mirror upstream manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:ftpsync:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20171016",
            "matchCriteriaId" : "8B8024AB-7EA8-4C64-8C1F-2E1A61541908"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/17/2",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/mirror/archvsync.git/commit/?id=d1ca2ab2210990b6dfb664cd6776a41b71c48016",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-mirrors/2017/10/msg00017.html",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/17/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/mirror/archvsync.git/commit/?id=d1ca2ab2210990b6dfb664cd6776a41b71c48016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-mirrors/2017/10/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-17T20:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) persistente en el componente Media Objects de ILIAS en versiones anteriores a 5.1.21 y 5.2.x anteriores a 5.2.9 permite que un usuario autenticado inyecte JavaScript para obtener privilegios de administrador, relacionado con la función setParameter en Services/MediaObjects/classes/class.ilMediaItem.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.21",
            "matchCriteriaId" : "2FCDD5A5-A108-4618-AB21-B6846FF59472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.9",
            "matchCriteriaId" : "516BEB53-5FE4-465E-992D-9033DC4664E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/17/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ILIAS-eLearning/ILIAS/commit/b2a4660afec1e87d41c83c8e381f549bc6dfc70f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.ilias.de/pipermail/ilias-admins/2017-October/000053.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ilias.de/docu/goto_docu_pg_75377_35.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ilias.de/docu/goto_docu_pg_75378_1719.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ILIAS-eLearning/ILIAS/commit/b2a4660afec1e87d41c83c8e381f549bc6dfc70f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.ilias.de/pipermail/ilias-admins/2017-October/000053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ilias.de/docu/goto_docu_pg_75377_35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ilias.de/docu/goto_docu_pg_75378_1719.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3758",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-10-17T20:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution."
      }, {
        "lang" : "es",
        "value" : "Controles de acceso incorrectos en varios componentes de Android en la aplicación Lenovo Service Framework se pueden explotar para permitir ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4A00A993-C187-471B-B5A4-66B69C86FC6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3759",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-10-17T20:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution."
      }, {
        "lang" : "es",
        "value" : "La aplicación Lenovo Service Framework de Android acepta algunas respuestas del servidor sin una validación correcta. Esto expone la aplicación a ataques Man-in-the-Middle (MitM), pudiendo provocar que se ejecute código de manera remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4A00A993-C187-471B-B5A4-66B69C86FC6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3760",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-10-17T20:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution."
      }, {
        "lang" : "es",
        "value" : "La aplicación Lenovo Service Framework de Android utiliza una serie de credenciales no seguras cuando se realiza la verificación de integridad de las aplicaciones o datos descargados. Esto expone la aplicación a ataques Man-in-the-Middle (MitM), pudiendo provocar que se ejecute código de manera remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4A00A993-C187-471B-B5A4-66B69C86FC6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3761",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-10-17T20:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "La aplicación Lenovo Service Framework de Android ejecuta algunos comandos de sistema sin sanitizar correctamente las entradas externas. En algunos casos, esto puede provocar una inyección de comandos que, a su vez, puede resultar en una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4A00A993-C187-471B-B5A4-66B69C86FC6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5531",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-10-17T20:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications."
      }, {
        "lang" : "es",
        "value" : "Despliegues de TIBCO Managed File Transfer Command Center en versiones 8.0.0 y 8.0.1 y TIBCO Managed File Transfer Internet Server en versiones 8.0.0 y 8.0.1 que habilitan el servicio administrador se pueden ver afectados por una vulnerabilidad que puede permitir a cualquier usuario autenticado obtener control administrativo de las aplicaciones web Managed File Transfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:managed_file_transfer_command_center:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC7F565-F7F7-4120-919B-66B106CBACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:managed_file_transfer_command_center:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A629F1-437C-44C8-9A76-99B83B35FFB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:managed_file_transfer_internet_server:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF76DCF-71CD-46C3-AFC6-40B495C88253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:managed_file_transfer_internet_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A45C66B-F7B5-4DBD-AAE2-7A7D14605AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101545",
        "source" : "security@tibco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6273",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-10-17T20:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA ADSP Firmware contiene una vulnerabilidad en el componente ADSP Loader en la que es posible escribir en un espacio de la memoria que está fuera de los límites esperados del búfer, lo que puede provocar una denegación de servicio (DoS) o un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:adsp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB851B1-A2FE-4ECE-9574-C3D97F1A4256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:tegra_jetson_l4t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F73AE3-1578-43D2-967F-2DCE8445BCF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-17T21:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php."
      }, {
        "lang" : "es",
        "value" : "Existe inyección SQL en zorovavi/blog hasta 2017-10-17 mediante el parámetro id a recept.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zorovavi\\/blog_project:zorovavi\\/blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-10-17",
            "matchCriteriaId" : "65621943-6F42-4871-BDF0-5627EDDA837C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/imsebao/404team/blob/master/zorovavi-blog-sql-injection.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/imsebao/404team/blob/master/zorovavi-blog-sql-injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13999",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in which the application does not verify string size before copying to memory; the attacker may then be able to crash the application or run arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Un problema de desbordamiento de búfer basado en pila se ha descubierto en WECON LEVI Studio HMI Editor v1.8.1 y anteriores. Múltiples vulnerabilidades de desbordamiento de búfer basado en pila se han identificado en las que la aplicación no verifica el tamaño de cadena antes de copiarla en la memoria; el atacante podría ser capaz de cerrar inesperadamente la aplicación o de ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:we-con:levi_studio_hmi_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.1",
            "matchCriteriaId" : "3F1FF8C9-1F55-48F7-A895-CCFE27C9519D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101250",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102493",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14005",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the application does not require the user to know the original password. An attacker who is authenticated could change a user's password, enabling future access and possible configuration changes."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de cambio de contraseña sin verificación en la interfaz web de ProMinent MultiFLEX M10a Controller. Cuando se establece una nueva contraseña para un usuario, la aplicación no requiere que el usuario conozca la contraseña original. Un atacante autenticado podría cambiar una contraseña de usuario, permitiendo futuros accesos y posibles cambios de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prominent:multiflex_m10a_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9BF155-29F4-45CD-8F53-957AAB24FA2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prominent:multiflex_m10a_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFF952-BF09-4A00-934A-F03D49D95E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14007",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization."
      }, {
        "lang" : "es",
        "value" : "Un problema de expiración insuficiente de sesión se ha descubierto en la interfaz web de ProMinent MultiFLEX M10a Controller. La sesión de usuario está disponible durante un largo periodo más allá de la última actividad, permitiendo que un atacante reutilice una sesión vieja para la autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prominent:multiflex_m10a_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9BF155-29F4-45CD-8F53-957AAB24FA2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prominent:multiflex_m10a_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFF952-BF09-4A00-934A-F03D49D95E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14009",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature on the application, the current password for the user is specified in plaintext. This may allow an attacker who has been authenticated to gain access to the password."
      }, {
        "lang" : "es",
        "value" : "Un problema de divulgación de información se ha descubierto en la interfaz web de ProMinent MultiFLEX M10a Controller. Cuando un usuario autenticado usa la característica Change Password en la aplicación, la contraseña actual para el usuario se especifica en texto plano. Esto podría permitir que un atacante que se haya autenticado obtenga acceso a la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prominent:multiflex_m10a_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9BF155-29F4-45CD-8F53-957AAB24FA2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prominent:multiflex_m10a_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFF952-BF09-4A00-934A-F03D49D95E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14011",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device."
      }, {
        "lang" : "es",
        "value" : "Un problema de Cross-Site Request Forgery (CSRF) se ha descubierto en la interfaz web de ProMinent MultiFLEX M10a Controller. La aplicación no verifica suficientemente las peticiones, haciendo que sea susceptible a Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute código sin autorización, resultando en cambios en la configuración del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prominent:multiflex_m10a_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9BF155-29F4-45CD-8F53-957AAB24FA2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prominent:multiflex_m10a_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFF952-BF09-4A00-934A-F03D49D95E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14013",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user."
      }, {
        "lang" : "es",
        "value" : "Un problema de cumplimiento del lado del cliente de la seguridad del lado del servidor se ha descubierto en la interfaz web de ProMinent MultiFLEX M10a Controller. La función log out en la aplicación elimina la sesión de usuario solo del lado del cliente. Esto podría permitir que un atacante omita los mecanismos de protección, obtener privilegios o asumir la identidad de un usuario autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prominent:multiflex_m10a_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9BF155-29F4-45CD-8F53-957AAB24FA2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prominent:multiflex_m10a_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFF952-BF09-4A00-934A-F03D49D95E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-17T22:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "En Poppler 0.59.0, existe una desreferencia de puntero NULL en la función GfxImageColorMap::getGrayLine() en GfxState.cc mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.59.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B23F71-9304-4434-92CE-489B893E833C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9625",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-17T22:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de autenticación incorrecta en Envitech EnviDAS Ultimate en versiones anteriores a la v1.0.0.5. La aplicación web carece de autenticación correcta, lo que puede permitir que un atacante visualice información y modifique configuraciones o ejecute código remotamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envitech:envidas_ultimate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.4",
            "matchCriteriaId" : "4959666A-4E1D-45B2-854F-95DB0D84A2A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101249",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.8, 3.3.x en versiones anteriores a la 3.3.5 y 3.4.x en versiones anteriores a la 3.4.3, existe XSS en app/helpers/application_helper.rb mediante un campo de múltiples valores con un valor manipulado que se gestiona de manera incorrecta durante la representación del historial de problemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.7",
            "matchCriteriaId" : "506353CE-8310-44AC-B47C-4F3752DB7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF69D6-449E-4845-811D-D588B4D05665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAD6AFD-E3DE-4E0F-A2C8-78A1CD316A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FD314E-A7E6-4073-BC98-452B9C5826E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6982CC59-BE97-400C-A653-47AD6802C3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6A2E76-528B-48FA-89A4-B6BEE20E901A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redmine/redmine/commit/94f7cfbf990028348b9262578acbc53a94fce448",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/94f7cfbf990028348b9262578acbc53a94fce448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.8, 3.3.x en versiones anteriores a la 3.3.5 y 3.4.x en versiones anteriores a la 3.4.3, existe XSS en app/helpers/queries_helper.rb mediante un campo de múltiples valores con un valor manipulado que se gestiona de manera incorrecta durante la representación del historial de problemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.7",
            "matchCriteriaId" : "506353CE-8310-44AC-B47C-4F3752DB7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF69D6-449E-4845-811D-D588B4D05665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAD6AFD-E3DE-4E0F-A2C8-78A1CD316A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FD314E-A7E6-4073-BC98-452B9C5826E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6982CC59-BE97-400C-A653-47AD6802C3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6A2E76-528B-48FA-89A4-B6BEE20E901A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.8, 3.3.x en versiones anteriores a la 3.3.5 y 3.4.x en versiones anteriores a la 3.4.3, existe XSS en app/views/timelog/_list.html.erb mediante datos de columna manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.7",
            "matchCriteriaId" : "506353CE-8310-44AC-B47C-4F3752DB7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF69D6-449E-4845-811D-D588B4D05665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAD6AFD-E3DE-4E0F-A2C8-78A1CD316A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FD314E-A7E6-4073-BC98-452B9C5826E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6982CC59-BE97-400C-A653-47AD6802C3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6A2E76-528B-48FA-89A4-B6BEE20E901A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redmine/redmine/commit/1a0976417975a128b0a932ba1552c37e9414953b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/1a0976417975a128b0a932ba1552c37e9414953b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.8, 3.3.x en versiones anteriores a la 3.3.5 y 3.4.x en versiones anteriores a la 3.4.3, existe XSS en app/views/issues/_list.html.erb mediante datos de columna manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.7",
            "matchCriteriaId" : "506353CE-8310-44AC-B47C-4F3752DB7D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF69D6-449E-4845-811D-D588B4D05665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAD6AFD-E3DE-4E0F-A2C8-78A1CD316A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FD314E-A7E6-4073-BC98-452B9C5826E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6982CC59-BE97-400C-A653-47AD6802C3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6A2E76-528B-48FA-89A4-B6BEE20E901A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redmine/redmine/commit/273dd9cb3bcfb1e0a0b90570b3b34eafa07d67aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/273dd9cb3bcfb1e0a0b90570b3b34eafa07d67aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.6 y 3.3.x en versiones anteriores a la 3.3.3, atacantes remotos pueden obtener información sensible (tokens de reestablecimiento de contraseña) leyendo un registro Referer, ya que account/lost_password no emplea una redirección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "220736DC-879E-4ECD-A37A-C512D2DC4E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/24416",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/24416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.6 y 3.3.x en versiones anteriores a la 3.3.3, existe XSS porque se gestiona de manera incorrecta la revisión en el contenido de la wiki."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "220736DC-879E-4ECD-A37A-C512D2DC4E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/25503",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/25503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.6 y 3.3.x en versiones anteriores a la 3.3.3, es posible que se realice Cross-Site Scripting (XSS) persistente empleando un documento SVG como adjunto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "220736DC-879E-4ECD-A37A-C512D2DC4E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/24199",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/24199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.6 y 3.3.x en versiones anteriores a la 3.3.3, Redmine.pm no tiene verificación para cuando el módulo Repository está habilitado en la configuración de un proyecto, lo que podría permitir que atacantes remotos obtengan diferente información sensible o provoquen otro impacto sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "220736DC-879E-4ECD-A37A-C512D2DC4E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/24307",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/24307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Redmine en versiones anteriores a la 3.2.6 y 3.3.x en versiones anteriores a la 3.3.3 gestiona de manera incorrecta la presentación Time Entry en vistas de actividad, lo que permite que atacantes remotos obtengan información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "220736DC-879E-4ECD-A37A-C512D2DC4E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/23803",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/23803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Redmine en versiones anteriores a la 3.2.6 y 3.3.x en versiones anteriores a la 3.3.3 gestiona de manera incorrecta la presentación de enlaces wiki, lo que permite que atacantes remotos obtengan información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "220736DC-879E-4ECD-A37A-C512D2DC4E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/23793",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/23793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php."
      }, {
        "lang" : "es",
        "value" : "En PHPSUGAR PHP Melody en versiones anteriores a la 2.7.3, existe inyección SQL mediante el parámetro image en admin/edit_category.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsugar:php_melody:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.2",
            "matchCriteriaId" : "204C8A82-17FB-4DB6-89E1-EB93CAFEF852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T02:29:00.703",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php."
      }, {
        "lang" : "es",
        "value" : "En PHPSUGAR PHP Melody en versiones anteriores a la 2.7.3, existe inyección SQL mediante una cookie aa_pages_per_page en una acción playlist en watch.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsugar:php_melody:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.2",
            "matchCriteriaId" : "204C8A82-17FB-4DB6-89E1-EB93CAFEF852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file."
      }, {
        "lang" : "es",
        "value" : "El servidor web embebido en dispositivos ABB Fox515T 1.0 es vulnerable a Local File Inclusion. Acepta un parámetro que especifica un archivo para mostrar o emplear como plantilla. El nombre de archivo no se valida, por lo que un atacante podría recuperar cualquier archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:fox515t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r.1.0_ics10",
            "matchCriteriaId" : "8FAA18B6-D3B6-441E-8406-A350F7AC713A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:fox515t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1F4870-AED2-4DBC-ABC5-419A11F865D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un desbordamiento de enteros en pdf_read_new_xref_section en pdf/pdf-xref.c en Artifex MuPDF 1.11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F18A1A-67A7-471B-AD7A-29F65DF4F2BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=82df2631d7d0446b206ea6b434ea609b6c28b0e8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=d18bc728e46c5a5708f14d27c2b6c44e1d0c3232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=82df2631d7d0446b206ea6b434ea609b6c28b0e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 PV ejecuten código arbitrario en el sistema operativo host debido a una condición de carrera que puede provocar una entrada TLB obsoleta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101490",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-241.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-241.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 HMV obtengan información sensible del sistema operativo host (o un sistema operativo invitado arbitrario) debido a que las operaciones I/O interceptadas pueden provocar la escritura de datos de la memoria de pila del hipervisor no inicializado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101496",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-239.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-239.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 provoquen una denegación de servicio (cierre inesperado del hipervisor) o que puedan obtener privilegios debido a que se gestionó de manera incorrecta la asignación MSI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101500",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-237.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-237.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen desde las versiones 4.5.x hasta las versiones 4.9.x que permite que atacantes (que controlan un kernel de dominio de zona stub o una pila de herramientas) para provocar una denegación de servicio (cierre inesperado del sistema operativo host) debido a la falta de una comparación (del principio al final del rango) en la implementación de la asignación/no asignación DMOP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CCECD0-C0F9-45A8-8699-64428637EBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED340C-6746-471E-9F2D-19D62D224B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DA3D28-EAE7-4EC9-977C-444A46CBD9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14442705-D243-4250-A486-E70989946D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D58EAB-3FEB-4D5A-B998-D77EC90FDFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DD0255-9127-4C7F-9C02-42198820363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E971A9F-18CB-4264-AF71-CCB32B7325B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D52712-AD95-459D-943C-936F90B828B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-238.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 HMV provoquen una denegación de servicio (cierre inesperado del hipervisor) o que puedan obtener privilegios debido a que se gestiona de manera incorrecta los mapeados autolineares de shadow para los invitados traducidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-243.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 PV provoquen una denegación de servicio (fuga de memoria) debido a que se gestiona de manera incorrecta el recuento de referencias."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-242.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-242.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotplugging."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 SVM PV provoquen una denegación de servicio (cierre inesperado del hipervisor) o que puedan obtener privilegios debido a que se gestionó de manera incorrecta la configuración IDT durante la conexión directa a la CPU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-244.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-244.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo x86 PV provoquen una denegación de servicio (recursión infinita consumo de pila y cierre inesperado del hipervisor) o que puedan obtener privilegios mediante el apilamiento manipulado de tablas de paginación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "7F6BF42B-66A0-4659-9FDC-BE30CE3801CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43014/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-240.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX228867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43014/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T08:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen desde las versiones 4.4.x hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo ARM provoquen una denegación de servicio (imposibilidad de emplear los recursos físicos de la CPU) debido a la gestión incorrecta de los bloqueos al detectarse un error add-to-physmap."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1044792C-D544-457C-9391-4F3B5BAB978D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CF23B21B-594A-42E2-AF90-D5C4246B39A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56098514-62BA-459C-8C57-D0244CB74C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98E8917-CC31-4FB9-9C1F-486695F5C6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D55EE1-63FC-4976-9317-C45F8B97DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "200D1632-9B8A-4EB6-AD06-9C852B5F4FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A1754-96B0-4C20-848E-99F3D1DDBF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD9AD01-50B7-4951-8A73-A6CF4801A487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E433CFA0-CDF7-481C-B473-016FD7F36615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F79C4E65-744F-4955-AE27-3F64B36EA28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1395C03A-8706-4B36-BBDA-ADD8E91B85F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5A252B3E-138B-4AA9-82CF-DEE8855496E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75615D84-9CA1-456C-816D-768E37B074A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D73C84-2851-4757-A84F-0C2AB51D553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB87384-A1F8-4136-A242-441C655D9364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CCECD0-C0F9-45A8-8699-64428637EBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "44E4D82A-38BE-4A55-8674-7E1015DE1193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "54298927-59C7-4874-8BF0-DFC29B159AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "509FD169-40CE-48C5-A16E-2E86537D7F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "3D527BD4-042C-4AAD-B0C7-289DA8F24D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED340C-6746-471E-9F2D-19D62D224B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6EE404-E3F7-4E78-8DF9-06F4D0D81F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C9123E3C-5B19-48CF-AF50-2DAC104FA776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEECC14B-9AE8-486A-A39D-78CF3557DB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DA3D28-EAE7-4EC9-977C-444A46CBD9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6F7CE9-C409-4D88-9A99-B21420633F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C43C0833-91A7-425F-8E3F-01C7006CCA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9B19A4-41C0-4368-8108-0BBC7E31DDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "23B39006-5533-4A9F-BC11-79075A619DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6C4D1D-5ACA-4776-99B3-8E44209FCACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "3527A7C8-4D34-49EC-94A9-C0965EC8A80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B814C381-4991-495A-B530-7543F977B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE1F484-23B4-4CCC-AD23-6F8BDC312CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14442705-D243-4250-A486-E70989946D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB7BAFE-9CB4-40D2-908C-55307728116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD42E21-EA9E-41EB-AC7E-478CCEEEBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D58EAB-3FEB-4D5A-B998-D77EC90FDFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DD0255-9127-4C7F-9C02-42198820363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8542BB4C-41BC-42E0-A6CB-2F82AE8F9ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC37E2E-EA20-4535-BB9E-CE4329328D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "87E645EA-7D20-4948-BF68-617415CCBD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A832A521-69C2-4DFB-B6D9-893B3E49F0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EA7BE2-A26E-4D92-BFEE-9748AC73AEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EA9833-49EA-483D-BD42-912760261861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDFDDA0-51D2-4995-9B4D-48047C940FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E971A9F-18CB-4264-AF71-CCB32B7325B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D52712-AD95-459D-943C-936F90B828B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4447FA6-EDE7-4915-8238-2EA4CE782E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "83EAE814-B1E1-414C-AEC7-49E5FAD797C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "557B3D57-8CC0-4087-9931-12DCE5557919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B8FAAF-0A64-42BF-81AC-0F4F2FE36DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E37030-9027-4AA5-B274-7186CE44894C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE02321-85BE-4E59-831D-ACF90A5923C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBF3285-9B3A-44EF-8E75-9F3B0BBDCA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DAC074-09E5-4C4D-A7DB-DC62FAAA9DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "638A1D40-1D41-4051-9A1D-AA10B33DF655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6804DA-1A77-47BF-803A-30AC602F8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62A1F06-264C-4064-9F42-9C0572773777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCF3F8-86AB-4BCD-A4E0-9C751E8BF8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA052701-FBA9-4035-A0D8-AE0F97894D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "49660948-499C-45F6-8965-62E7CEF7F553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc1.2:*:*:*:*:*:*",
            "matchCriteriaId" : "EB63119A-4406-4A84-9C01-F6654505068C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E261BD4D-5C97-4AD8-B952-B274304ABC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "8A97DA39-8777-44F6-A53D-A6320AAB1A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0730E33C-ACF5-4E91-AE80-CCEE41DFD9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "418CEF01-F45D-4DC4-A15F-46821E591E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF9A4-8D24-45ED-B30D-4AF72DE89C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F78F47F0-F473-444B-81DE-BD7144F64463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "417009FF-A1B4-41B4-8207-BC47652B238C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.9.0:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "78E4BD5E-212B-4E3A-9D46-043D71339F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-235.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-235.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8024",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-18T09:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Isilon OneFS (versiones anteriores a la 8.1.0.1, 8.0.1.2 y 8.0.0.6 y en versiones 7.2.1.x) se ha visto afectado por una vulnerabilidad de Cross-Site Scripting reflejado que podría ser explotada por usuarios maliciosos para comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1B998-AEEE-4123-82F3-72D84EF681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0828B061-28B4-4AEE-BBB9-AF287B90713C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064C487D-517E-4F7B-A182-5DF287477652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600B1F-C307-457B-BC84-73339A64DF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2687A1-97EC-4777-9CC1-164D525C56E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C3C4C1-505B-4171-831B-7FD7EB34B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE48C73-7CFE-454F-A4EF-0B12C49FD993"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1.0.0",
            "matchCriteriaId" : "356662DF-BE65-4CFD-9BE3-353BAC206693"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0.5",
            "matchCriteriaId" : "9A91B9F8-9096-49BB-BC41-358595C12EAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1.1",
            "matchCriteriaId" : "133E612C-59F3-4B4A-AD3F-74D179176A8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/34",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13083",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-18T13:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code"
      }, {
        "lang" : "es",
        "value" : "Akeo Consulting Rufus en versiones anteriores a la 2.17.1187 no valida adecuadamente la integridad de las actualizaciones descargadas a través de HTTP, permitiendo que un atacante convenza fácilmente a un usuario para que ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cret@cert.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        }, {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rufus_project:rufus:*:b1186:*:*:*:*:*:*",
            "versionEndIncluding" : "2.17",
            "matchCriteriaId" : "A51D8048-F607-4816-8EC0-629877B6B1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/403768",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100516",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pbatard/rufus/commit/c3c39f7f8a11f612c4ebf7affce25ec6928eb1cb",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pbatard/rufus/issues/1009",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/403768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pbatard/rufus/commit/c3c39f7f8a11f612c4ebf7affce25ec6928eb1cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pbatard/rufus/issues/1009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8022",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-18T15:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The Server service (nsrd) is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on vulnerable installations of the software, or cause a denial of service, depending on the target system's platform."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC NetWorker (versiones anteriores a la 8.2.4.9, todas las versiones 9.0.x con soporte, las anteriores a la 9.1.1.3 y las anteriores a la 9.2.0.4). El servicio Server (nsrd) se ha visto afectado por una vulnerabilidad de desbordamiento de búfer. Un atacante remoto no autenticado podría explotar esta vulnerabilidad para ejecutar código arbitrario en instalaciones vulnerables del software o provocar una denegación de servicio, dependiendo de la plataforma del sistema objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4.8",
            "matchCriteriaId" : "504CDC85-F6DE-4995-B19E-4E29D0B004A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320CDE7C-254C-465E-AB1C-EB2705098A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973EACF3-9A27-4384-A32B-AF3C94E2C016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A694E8-43C7-4521-BB4F-69874553F495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D29803-7F5B-4A55-AE34-B77B49AAB3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643079B8-7074-40DB-A8CC-D15E8408E34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4282310-F646-485D-82F3-26D5F545A999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922E6EAD-B2EE-4593-8B92-0496FFB7E40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3193D3-5B8F-4D6B-9904-29F231D48574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F04FD-B8B7-4A44-B0F1-F6E999E66937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F604839-43F3-4F85-B45E-EE63924E1A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C00A1A-2E11-45D7-9E83-D64F24F81299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DF1A99-B5D8-46C4-A291-D3CB55A95E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A9C4B4-CE28-45A8-93DD-9CD833082237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C648EF3C-1C68-4A6E-A9F4-C0EE10FDE9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E715F74F-EEE5-45AB-B7D0-FEBB23F029CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2870EA3-D157-4584-9052-D8BD84FBFB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BAC60D-694D-4D82-B8F8-3E12F7B54DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1740DEF3-E880-4D0A-8FB3-919108AC79CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DF4BA6-AD34-48E2-80ED-1FD60ABD41C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA35C1C-42F8-4DDF-B946-23BB751E8BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FF8B7F-4E88-4903-87BC-9381BE7753A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01B7004-6EC2-4D97-B416-9F878C8BBB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C26184C-AC7A-4B13-8774-8F5385D3487A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E05EA1-EBD2-4A56-A0DF-670442FCDD2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/35",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039583",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T18:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value."
      }, {
        "lang" : "es",
        "value" : "La función encargada de verificar si el usuario ya ha iniciado sesión en init.php en Interspire Email Marketer (IEM) en versiones anteriores a la 6.1.6 permite que atacantes remotos omitan la autenticación y obtengan acceso administrativo empleando la cookie IEM_CookieLogin con un valor especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:email_marketer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.5",
            "matchCriteriaId" : "587E7A9D-44EB-44A3-828F-F9E182D981C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.infoteam.ch/en/blog/posts/narrative-of-an-incident-response-from-compromise-to-the-publication-of-the-weakness.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44513/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.infoteam.ch/en/blog/posts/narrative-of-an-incident-response-from-compromise-to-the-publication-of-the-weakness.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44513/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T18:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the \"/ossim/report/wizard_email.php\" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks."
      }, {
        "lang" : "es",
        "value" : "AlienVault USM v5.4.2 y anteriores ofrece a los usuarios autenticados la funcionalidad de exportar informes generados mediante el script \"/ossim/report/wizard_email.php\". Además de ofrecer la exportación mediante una descarga local, el script también ofrece la posibilidad de enviar cualquier informe por correo electrónico a una dirección determinada (en formato PDF o XLS). Ya que no hay tokens anti-CSRF que protejan esta funcionalidad, es vulnerable a ataques Cross-Site Request Forgery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2",
            "matchCriteriaId" : "A88AF8DA-4BD6-40AB-8465-30B34A5E4F88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144617/AlienVault-USM-5.4.2-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541342/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101284",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42988/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.rcesecurity.com/2017/10/cve-2017-14956-alienvault-usm-leaks-sensitive-compliance-information-via-csrf/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144617/AlienVault-USM-5.4.2-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541342/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42988/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.rcesecurity.com/2017/10/cve-2017-14956-alienvault-usm-leaks-sensitive-compliance-information-via-csrf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T18:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: \"/api/RecordingList/DownloadRecord?file=\" and \"/api/SupportInfo?file=\" are the vulnerable parameters. An attacker must be authenticated to exploit this issue to access sensitive information to aid in subsequent attacks."
      }, {
        "lang" : "es",
        "value" : "En 3CX Phone System 15.5.3554.1, la consola de gestión suele escuchar al puerto 5001 y es propenso a un ataque de salto de directorio: \"/api/RecordingList/DownloadRecord?file=\" y \"/api/SupportInfo?file=\" son los parámetros vulnerables. Un atacante debe estar autenticado para explotar este problema y acceder a información sensible que pueda resultar de ayuda en futuros ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:15.5.3554.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37C9411-04A8-4414-A7C3-994C2FEE79CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/37",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42991/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42991/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T21:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c."
      }, {
        "lang" : "es",
        "value" : "En GNU Libextractor 1.4, hay una desreferencia de puntero NULL en la función EXTRACTOR_nsf_extract_method de plugins/nsf_extractor.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E4746A-DBC3-4EC1-BE84-B6AE934CDB9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T21:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup."
      }, {
        "lang" : "es",
        "value" : "En GNU Libextractor 1.4, hay un desbordamiento de búfer basado en memoria dinámica (heap) en la función EXTRACTOR_png_extract_method en plugins/png_extractor.c, relacionado con processiTXt y stndup."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E4746A-DBC3-4EC1-BE84-B6AE934CDB9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-18T21:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size."
      }, {
        "lang" : "es",
        "value" : "En GNU Libextractor 1.4, hay un error en la propiedad signedness de un número entero para el tamaño de fragmento en la función EXTRACTOR_nsfe_extract_method en plugins/nsfe_extractor.c, lo que conduce a un bucle infinito para un tamaño manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E4746A-DBC3-4EC1-BE84-B6AE934CDB9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12251",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console. An attacker could exploit this vulnerability by browsing to one of the hosted VMs' URLs in Cisco CSP and viewing specific patterns that control the web application's mechanisms for authentication control. An exploit could allow the attacker to access a specific VM on the CSP, which causes a complete loss of the system's confidentiality, integrity, and availability. This vulnerability affects Cisco Cloud Services Platform (CSP) 2100 running software release 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, or 2.2.2. Cisco Bug IDs: CSCve64690."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la consola web de Cisco Cloud Services Platform (CSP) 2100 podría permitir que un atacante remoto autenticado interactúe con fines maliciosos con los servicios o máquinas virtuales que operan remotamente en un dispositivo CSP afectado. La vulnerabilidad se debe a una debilidad en la generación de ciertos mecanismos de autenticación en la URL de la consola web. Un atacante podría explotar esta vulnerabilidad navegando por una de las URL de las máquinas virtuales alojadas en Cisco CSP y visualizando patrones específicos que controlan los mecanismos de la aplicación web para el control de autenticación. Un exploit podría permitir que el atacante acceda a una máquina virtual específica en el CSP, lo que provoca una pérdida completa de la confidencialidad, integridad y disponibilidad del sistema. Esta vulnerabilidad afecta a Cisco Cloud Services Platform (CSP) 2100 cuando ejecuta las distribuciones de software 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1 o 2.2.2. Cisco Bug IDs: CSCve64690."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_platform_2100:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1970EA0-E541-4594-84A9-39A4242FAB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_platform_2100:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29718258-B19E-44F4-B7CA-534371926004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_platform_2100:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF022130-6341-4F33-9793-FF90B86F3C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_platform_2100:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07544450-7C3E-40A9-A619-1544120FB6B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_platform_2100:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8E19BA-5E10-4E3D-A63C-BB5643F3BBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_platform_2100:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4170C700-6EE6-49B9-B994-4523EE6583E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101487",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039613",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ccs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ccs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12259",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of SIP request messages by an affected device. An attacker could exploit this vulnerability by sending malformed SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. This vulnerability affects Cisco Small Business SPA51x Series IP Phones that are running Cisco SPA51x Firmware Release 7.6.2SR1 or earlier. Cisco Bug IDs: CSCvc63982."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la funcionalidad Session Initiation Protocol (SIP) en Cisco Small Business SPA51x Series IP Phones podría permitir que un atacante remoto sin autenticar haga que el dispositivo afectado no responda, lo que da como resultado una condición de denegación de servicio (DoS). Esta vulnerabilidad se debe a un manejo incorrecto de los mensajes de petición SIP por parte de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad enviando mensajes SIP mal formados a un dispositivo afectado. Un exploit con éxito, podría permitir que el atacante consiga que el dispositivo afectado no responda, lo que da como resultado una condición de DoS que persista hasta que el dispositivo se reinicie manualmente. Esta vulnerabilidad afecta a Cisco Small Business SPA51x Series IP Phones que ejecuten la distribución 7.6.2SR1 o anterior del firmware Cisco SPA51x. Cisco Bug IDs: CSCvc63982."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_ip_phone_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "110DABED-231C-41CB-9B5D-AD469A026DED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_ip_phone:spa510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCE9FC0-7FF3-4A6D-95E5-88430B2034B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101488",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039615",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12260",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of SIP request messages by an affected device. An attacker could exploit this vulnerability by using formatted specifiers in a SIP payload that is sent to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. This vulnerability affects Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones that are running firmware release 7.6.2SR1 or earlier. Cisco Bug IDs: CSCvc63986."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la funcionalidad Session Initiation Protocol (SIP) en Cisco Small Business SPA50x, SPA51x y SPA52x Series IP Phones podría permitir que un atacante remoto sin autenticar haga que el dispositivo afectado no responda, lo que da como resultado una condición de denegación de servicio (DoS). Esta vulnerabilidad se debe a un manejo incorrecto de los mensajes de petición SIP por parte de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad utilizando especificadores formateados en un payload SIP que se envían a un dispositivo afectado. Un exploit con éxito, podría permitir que el atacante consiga que el dispositivo afectado no responda, lo que da como resultado una condición de DoS que persista hasta que el dispositivo se reinicie manualmente. Esta vulnerabilidad afecta a Cisco Small Business SPA50x, SPA51x, y SPA52x Series IP Phones que ejecutan la distribución de firmware 7.6.2SR1 o anterior. Cisco Bug IDs: CSCvc63986."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_501g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "3BDD5305-DBCE-44E2-8246-C45C9AF04A88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_501g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A258316-4DB6-47AC-90C0-CB9EF777E151"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_502g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "B4B42E9A-3803-4359-8736-8629169F35F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_502g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DF893E-7E9E-419B-8E7C-E846333646BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_504g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "2287FB05-3FDD-4B80-8537-67F80B851119"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_504g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F78AAB2-8ECD-4FAA-8A2A-9035F5C59597"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_508g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "B6EE4CB0-E332-4261-B92A-F8DB1E571AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_508g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26A21E-CD32-4DED-8A31-4CCA1C4DD642"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_509g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "241D9468-FB18-4E5F-B55C-04C4D2554E16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_509g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4373DD-753A-46A6-BB96-0488EA52157E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_512g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "B955A49C-EB75-428C-A7CC-AC58604B635B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_512g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBA0C4D-4BB6-455D-8355-F4FACC5D721C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_514g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "95DF4D27-49DC-4F57-9E3D-E28E5D23AFA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_514g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97551DEA-85F9-4A38-A8AC-F477CB7ABC2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa_525g_firmware:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "B726AAE8-6556-48D9-ACB7-83538F9FE653"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa_525g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAD4489-26BB-4FF4-8D7A-0805CFDD0F31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101495",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039616",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-sip1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12271",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCuz88421, CSCuz91356, CSCve56308."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco SPA300 y SPA500 Series IP Phones podría permitir que un atacante remoto no autenticado ejecute acciones no deseadas en un dispositivo afectado. La vulnerabilidad se debe a la ausencia de medidas de protección contra ataques de Cross-Site Request Forgery (CSRF). Un atacante podría explotar esta vulnerabilidad engañando al usuario de una aplicación web para que ejecute una acción adversa. Cisco Bug IDs: CSCuz88421, CSCuz91356, CSCve56308."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "54E8EE6D-95F2-4113-B4A7-E4AD08802FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:spa500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "2D315F30-406A-4709-828B-15FDE52A5BFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa300_series_ip_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1724247B-F079-4891-AB4E-ACF9DE54749C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:spa500_series_ip_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E692DA66-21B8-448A-B3A3-2FA764DD7FB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101524",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039621",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-spa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-spa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12272",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by convincing a user of the web interface to access a malicious link or by intercepting a user request for the affected web interface and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvb09516."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código del framework web del software Cisco IOS XE podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de la interfaz web del software afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web del software afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de la interfaz web para que acceda a un enlace malicioso o interceptando una petición de usuario para la web afectada e inyectando código malicioso en la petición. Un exploit con éxito, podría permitir que el atacante ejecute código de script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Cisco Bug IDs: CSCvb09516."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC820348-1E2E-4791-BF56-419749F02162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08E919C-BC85-49A4-B8FD-21B4C4A10B5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101494",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039627",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12284",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanisms in the system. An attacker could exploit this vulnerability by issuing specific commands after authenticating to the system. A successful exploit could allow the attacker to view profile information where only certain parameters should be visible. Cisco Bug IDs: CSCve14401."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Jabber para el cliente Windows podría permitir que un atacante local autenticado recupere información del perfil de usuario, lo que podría dar lugar a la revelación de información confidencial. Esta vulnerabilidad se debe una la falta de mecanismos comprobación de entradas y validaciones en el sistema. Un atacante podría explotar esta vulnerabilidad enviando comandos específicos después de autenticarse en el sistema. Un exploit con éxito podría permitir que el atacante visualizase información del perfil donde solo deberían ser visibles ciertos parámetros. Cisco Bug IDs: CSCve14401."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.8\\(.4\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "BBB7C384-FB7E-4DC5-BBC8-B0E50DC02F75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101501",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039624",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12285",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that it receives and the software does not apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to delete arbitrary files from the affected system. Cisco Bug IDs: CSCvf41365."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web del software Cisco Network Analysis Module podría permitir que un atacante remoto no autenticado elimine archivos arbitrarios de un sistema afectado. Esto también se conoce como salto de directorio. Esta vulnerabilidad existe porque el software afectado no realiza una correcta validación de entradas de las peticiones HTTP que recibe y el software no aplica controles de acceso basados en roles (RBAC) a URL HTTP solicitadas. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP manipulada al software afectado. Un exploit con éxito podría permitir que el atacante elimine archivos arbitrarios del sistema afectado. Cisco Bug IDs: CSCvf41365."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_network_analysis_module:6.2\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E8BA60-1368-4199-8068-43BCEAAA4CF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101527",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039623",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-nam",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-nam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12286",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affected software, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input and validation checks in the affected software. An attacker could exploit this vulnerability by authenticating locally to an affected system and then issuing specific commands to the affected software. A successful exploit could allow the attacker to view all profile information for a user instead of only certain Jabber parameters that should be visible. This vulnerability affects all releases of Cisco Jabber prior to Release 1.9.31. Cisco Bug IDs: CSCve52418."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Jabber podría permitir que un atacante local autenticado recupere información del perfil de usuario del software afectado, lo que podría dar lugar a la revelación de información confidencial. Esta vulnerabilidad se debe una la falta de comprobaciones de entradas y validaciones en el software afectado. Un atacante podría explotar esta vulnerabilidad autenticándose de manera local en el sistema afectado y enviando entonces comandos específicos al software afectado. Un exploit con éxito podría permitir que el atacante visualizase toda la información del perfil donde solo deberían ser visibles ciertos parámetros de Jabber. Esta vulnerabilidad afecta a todas las distribuciones de Cisco Jabber anteriores a la distribución 1.9.31. Cisco Bug IDs: CSCve52418."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:1.9.30:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "DFE62F58-04B1-4FA8-9C64-3E37E8CFF98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:1.9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749526DD-4A7B-4E91-979D-570AE9EFEB26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101515",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039625",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12287",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, remote attacker to cause the CDB process on an affected system to restart unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability is due to incomplete input validation of URL requests by the REST API of the affected software. An attacker could exploit this vulnerability by sending a crafted URL to the REST API of the affected software on an affected system. A successful exploit could allow the attacker to cause the CDB process on the affected system to restart unexpectedly, resulting in a temporary DoS condition. Cisco Bug IDs: CSCve77571."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de gestión de bases de datos de clúster (CBD) del software Cisco Expressway Series y el software Cisco TelePresence Video Communication Server (VCS) podría permitir que un atacante autenticado remoto provocase que el proceso de CBD en un sistema afectado se reiniciase de manera inesperada, lo que daría lugar a una condición de denegación de servicio (DoS) temporal. Esta vulnerabilidad también se debe a la validación incompleta de peticiones URL por la API REST del software afectado. Un atacante podría explotar esta vulnerabilidad mediante el envío de una URL a la API REST del software afectado del sistema afectado. Un exploit con éxito podría permitir que el atacante provoque el reinicio inesperado del proceso CBD en el sistema afectado, lo que daría como resultado una condición de DoS temporal. Cisco Bug IDs: CSCve77571."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:expressway:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8431726E-6D4E-498B-B613-90140F52E9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_conductor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5850CBB-F75A-4EBA-8F20-11D36FE827A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_video_communication_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D59522-B24B-4AC9-B345-CF4DEB2E9E43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101525",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039626",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-expressway-tp-vcs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-expressway-tp-vcs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12288",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf09173."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Unified Contact Center Express podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace malicioso. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o que pueda acceder a información sensible del navegador. Cisco Bug IDs: CSCvf09173."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4941884A-2DC7-4C24-A2FE-D09C57D736D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101514",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039620",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ucce",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ucce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12289",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attacker to display sensitive IPsec information in the system log file. The vulnerability is due to incorrect implementation of IPsec conditional, verbose debug logging that causes sensitive information to be written to the log file. This information should be restricted. An attacker who has valid administrative credentials could exploit this vulnerability by authenticating to the device and enabling conditional, verbose debug logging for IPsec and viewing the log file. An exploit could allow the attacker to access sensitive information related to the IPsec configuration. Cisco Bug IDs: CSCvf12081."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el registro de depuración detallado, condicional para la funcionalidad IPsec del software Cisco IOS XE podría permitir que un atacante local autenticado muestre información sensible de IPsec en el archivo de registro del sistema La vulnerabilidad se debe a la incorrecta implementación del registro de depuración detallado, condicional que da lugar a que se escriba información sensible en el archivo de registro. Esta información debería estar restringida. Un atacante que tenga credenciales de administrador válidas podría explotar esta vulnerabilidad autenticándose en el dispositivo y habilitando el registro de depuración detallado, condicional para IPsec y visualizando el archivo de registro. Un exploit podría permitir que el atacante acceda a información sensible relacionada con la configuración de IPsec. Cisco Bug IDs: CSCvf12081"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.7.1",
            "matchCriteriaId" : "DEA741AC-86FB-42C8-AA2E-D984CB975710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101509",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039628",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12293",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. An attacker could exploit this vulnerability by opening multiple connections to the server and exhausting server resources. A successful exploit could cause the server to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf41006."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir que un atacante remoto no autenticado provoque una condición de denegación de servicio (DoS). La vulnerabilidad se debe a limitaciones insuficientes del número de conexiones que se pueden realizar al software afectado. Un atacante podría explotar esta vulnerabilidad abriendo múltiples conexiones al servidor y agotando sus recursos. Un exploit con éxito podría dar lugar a que el servidor se recargarse, provocando una condición de DoS. Cisco Bug IDs: CSCvf41006."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAAD0CF-0CAA-4D8B-A12F-9BAF1DC3CD6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101492",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039618",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12296",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf51241, CSCvf51261."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario del sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Un exploit con éxito podría permitir que el atacante ejecute código script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Cisco Bug IDs: CSCvf51241, CSCvf51261."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3AA626-3B37-434B-A6CB-7CA233B8FC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAAD0CF-0CAA-4D8B-A12F-9BAF1DC3CD6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F45B035-EFA7-4D61-999F-F7ED4C0497F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101489",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039617",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wms1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wms1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12298",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78615, CSCvf78628."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meeting Center podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de un sistema afectado. La vulnerabilidad se debe a una validación de entradas insuficiente de algunos parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Un exploit con éxito podría permitir que el atacante ejecute código script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Cisco Bug IDs: CSCvf78615, CSCvf78628."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D89AB9C-3475-4BC9-B3B1-6F13D07BA290"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101491",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039619",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wmc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wmc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12301",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient sanitization of user-supplied parameters that are passed to certain Python functions within the scripting sandbox of the affected device. An attacker could exploit this vulnerability to escape the scripting sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. To exploit this vulnerability, an attacker must have local access and be authenticated to the targeted device with administrative or Python execution privileges. These requirements could limit the possibility of a successful exploit. This vulnerability affects the following Cisco products if they are running Cisco NX-OS Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCvb86832, CSCvd86474, CSCvd86479, CSCvd86484, CSCvd86490, CSCve97102, CSCvf12757, CSCvf12804, CSCvf12815, CSCvf15198."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de scripting en Python del software Cisco NX-OS podría permitir que un atacante local sin autenticar escape el analizador Python y obtenga acceso no autorizado al sistema operativo del dispositivo. La vulnerabilidad existe debido a la sanitización insuficiente de parámetros proporcionados por el usuario que se pasan a ciertas funciones Python en la sandbox de scripting del dispositivo afectado. Un atacante podría explotar esta vulnerabilidad para escapar la sandbox de scripting y ejecutar comandos arbitrarios en el sistema operativo en el que se ejecuta con los privilegios de un usuario autenticado. Para explotar esta vulnerabilidad, un atacante debe tener acceso local y estar autenticado en el dispositivo objetivo del ataque con privilegios de administrador o de ejecución de Python. Estos requisitos podrían limitar la posibilidad de que un exploit tenga éxito. Esta vulnerabilidad afecta a los siguientes productos de Cisco que ejecutan el software Cisco NX-OS: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards y Fabric Modules. Cisco Bug IDs: CSCvb86832, CSCvd86474, CSCvd86479, CSCvd86484, CSCvd86490, CSCve97102, CSCvf12757, CSCvf12804, CSCvf12815, CSCvf15198."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DA113F-3706-4FF3-88F9-5D3CD48F8CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:multilayer_director:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0D93AC-2631-40CB-97CD-E50FD12958F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2FDB70-C681-4927-97F4-2B466E718859"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4E8EE4-031D-47D3-A12E-EE5F792172EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDD8C3-67D5-4E9F-9D48-A77B55DB0AB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1073F-D374-4311-8F12-AD8C72FAA293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF5AF71-15DF-4151-A1CF-E138A7103FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088C0323-683A-44F5-8D42-FF6EC85D080E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC8699E-81C0-4374-B827-71B3916B910D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4379-68F6-4B34-B99B-107DFE0DBD63"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A58223F-3B15-420B-A6D4-841451CF0380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F182AD1-6E51-456A-A8F7-8F3B92DBE4D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22B3865-30E9-4B5A-A37D-DC33F1150FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459A7F11-52BF-4AD6-B495-4C4D6C050493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBEBA5B-5589-417B-BF3B-976083E9FE54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9500_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE07E8D4-376D-4341-A656-F8440368A8A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)d1\\(0.21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5A0215-EC63-4DCD-842A-106225F3CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(0.74\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79EFE75-8674-4D5D-892F-D24A8D43098A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C83E090-7C99-465A-A477-C2949B137720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.70\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC6B471-BE9B-4301-BEE7-3FF50DC94937"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22B3865-30E9-4B5A-A37D-DC33F1150FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459A7F11-52BF-4AD6-B495-4C4D6C050493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310856A9-CA62-4C1A-A4C9-B6EECC36F496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(6.213\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B9D603-75C0-4241-BD4B-3C891A2C5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FFC5E8-CC5A-4D31-A63A-19E72EC442AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528ED62B-D739-4E06-AC64-B506FD73BBAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D402AB0-BCFB-4F42-8C50-5DC930AEEC8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4E8EE4-031D-47D3-A12E-EE5F792172EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDD8C3-67D5-4E9F-9D48-A77B55DB0AB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BCA11-7B09-43A3-A589-59D48402F564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2B1E07-8519-4F58-9048-81ABA12E01DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275D31F-4FA1-428E-AB4A-D2802FF0CF1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5010p_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD1E96B-1927-42DC-A47B-5632CED2D40F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039622",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ppe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-ppe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T08:29:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets."
      }, {
        "lang" : "es",
        "value" : "Octopus, en versiones anteriores a la 3.17.7, permite a los atacantes obtener información sensible en texto en claro leyendo un archivo JSON variable en ciertas situaciones en que impliquen la opción de despliegue de paquetes a objetivos sin conexión, llamada Offline Drop Targets."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.17.6",
            "matchCriteriaId" : "AA706900-9DF4-4051-96D9-512465DEC0AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3868",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T08:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Octopus before 3.17.7. When the special Guest user account is granted the CertificateExportPrivateKey permission, and Guest Access is enabled for the Octopus Server, an attacker can sign in as the Guest account and export Certificates managed by Octopus, including the private key."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 3.17.7 de Octopus. Cuando se le dan permisos CertificateExportPrivateKey a una cuenta de usuario de invitado especial y se habilita el acceso de invitado (Guest Access) para el servidor Octopus, un atacante puede iniciar sesión como la cuenta del invitado y exportar certificados gestionados por Octopus, incluida la clave privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.17.6",
            "matchCriteriaId" : "AA706900-9DF4-4051-96D9-512465DEC0AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3869",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T08:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserInvite) can invite users to teams with escalated privileges."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 3.17.7 de Octopus, un usuario autenticado al que se le ha otorgado explícitamente el permiso para invitar a nuevos usuarios (también conocido como UserInvite) puede invitar usuarios a equipos con privilegios escalados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.17.6",
            "matchCriteriaId" : "AA706900-9DF4-4051-96D9-512465DEC0AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3864",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T08:29:00.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\\nscript:) or a crafted email address, related to the escape and autolink functions."
      }, {
        "lang" : "es",
        "value" : "Mistune.py en Mistune 0.7.4 permite Cross-Site Scripting (XSS) mediante una nueva línea inesperada (como en java\\nscript:) o una dirección de email manipulada. Esto está relacionado con las funciones escape y autolink."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mistune_project:mistune:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37437A5A-2424-449E-AB8F-BD3334DF77D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lepture/mistune/pull/140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lepture/mistune/pull/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3883",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-19T08:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA processes prevent the NX-OS System Manager from receiving keepalive messages when an affected device receives a high rate of login attempts, such as in a brute-force login attack. System memory can run low on the FXOS devices under the same conditions, which could cause the AAA process to unexpectedly restart or cause the device to reload. An attacker could exploit this vulnerability by performing a brute-force login attack against a device that is configured with AAA security services. A successful exploit could allow the attacker to cause the affected device to reload. This vulnerability affects the following Cisco products if they are running Cisco FXOS or NX-OS System Software that is configured for AAA services: Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System (UCS) 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCuq58760, CSCuq71257, CSCur97432, CSCus05214, CSCux54898, CSCvc33141, CSCvd36971, CSCve03660."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de autenticación, autorización y contabilidad (AAA) de Cisco Firepower Extensible Operating System (FXOS) y NX-OS System Software podría permitir que un atacante remoto no autenticado provoque que un dispositivo afectado vuelva a cargar. Esta vulnerabilidad ocurre porque los procesos de AAA evitan que el System Manager de NX-OS reciba mensajes de keepalive cuando un dispositivo afectado recibe una alta tasa de intentos de inicio de sesión, como en el caso de un ataque de inicio de sesión por fuerza bruta. La memoria del sistema puede ser insuficiente en los dispositivos FXOS bajo las mismas condiciones, lo que puede causar que el proceso AAA se reinicie de manera inesperada o que el dispositivo se vuelva a cargar. Un atacante podría explotar esta vulnerabilidad realizando un ataque de inicio de sesión por fuerza bruta contra un dispositivo que está configurado con servicios de seguridad AAA. Un exploit con éxito podría permitir que el atacante consiga que el dispositivo afectado se vuelva a cargar. Esta vulnerabilidad afecta a los siguientes productos de Cisco que ejecutan Cisco FXOS o NX-OS System Software que esté configurado para servicios AAA: Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System (UCS) 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCuq58760, CSCuq71257, CSCur97432, CSCus05214, CSCux54898, CSCvc33141, CSCvd36971, CSCve03660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "BAF74CE3-3B64-48C8-B93C-6435EE737049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9552E6-0B9B-4B32-BE79-90D4E3887A7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:fxos:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22ED1121-D317-4CD9-9333-0E0C00687ED9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DAFDDA-718B-4B69-A524-B0CEB80FE960"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258F95C6-34C6-489D-95E0-5E90DAA518CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF1AF20-C6CE-4956-8129-FA68E3B03E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2916F0FF-F34C-45FD-8628-63030D166FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9501608B-3811-4C33-BDA1-721045284C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F363BEDD-A8AC-4FB6-87DC-708F97F8375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D9097-C95A-4813-9DEE-89CA75820524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD00AB9-F2DD-4D07-8DFF-E7B34824D66A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "BCF681A9-9991-4994-88DD-A1DC5BE0F4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258F95C6-34C6-489D-95E0-5E90DAA518CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E705638-8D0A-40D6-9A51-4FDB6C03F71E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1100v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFC494B-ADBB-43FA-8A8C-58C5BE5CFAE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "6CEDB8CD-7E33-490C-A75A-E70E73B68ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD5791-E4D3-475C-84B0-E642ACFC5EB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FFC5E8-CC5A-4D31-A63A-19E72EC442AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528ED62B-D739-4E06-AC64-B506FD73BBAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D402AB0-BCFB-4F42-8C50-5DC930AEEC8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4E8EE4-031D-47D3-A12E-EE5F792172EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDD8C3-67D5-4E9F-9D48-A77B55DB0AB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC49A1-91FC-4D55-BD74-42C918CCFDC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1073F-D374-4311-8F12-AD8C72FAA293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF5AF71-15DF-4151-A1CF-E138A7103FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088C0323-683A-44F5-8D42-FF6EC85D080E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "4832A094-92DB-402F-AF05-34B3A7C7CA0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2FDB70-C681-4927-97F4-2B466E718859"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2B1E07-8519-4F58-9048-81ABA12E01DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275D31F-4FA1-428E-AB4A-D2802FF0CF1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5010p_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD1E96B-1927-42DC-A47B-5632CED2D40F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC8699E-81C0-4374-B827-71B3916B910D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4379-68F6-4B34-B99B-107DFE0DBD63"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A58223F-3B15-420B-A6D4-841451CF0380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F182AD1-6E51-456A-A8F7-8F3B92DBE4D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9BC24B-BEB3-4D55-93C8-8334B8BC0BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22B3865-30E9-4B5A-A37D-DC33F1150FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459A7F11-52BF-4AD6-B495-4C4D6C050493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FED959-8185-46B8-863E-1C29B2B6D729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD5791-E4D3-475C-84B0-E642ACFC5EB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBEBA5B-5589-417B-BF3B-976083E9FE54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD5791-E4D3-475C-84B0-E642ACFC5EB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9500_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE36419-D07D-404F-A6B7-E482A4D8462A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "C20C0402-5039-4898-B401-E2269747A169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88EE7313-8FF9-4D23-B5BB-373B98FF664C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA3ABB8-F62E-4343-B445-7CE99B523918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0037167E-8F61-4481-B19C-93509C524353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B13F63-BD27-4CEF-8AAB-C5B26B9C78AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337F7900-D4F9-433A-9501-763EBAB48744"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B96E5C-CC27-4020-93CE-413B95DCABB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BCF41B-A617-4563-8D14-E906411354FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101493",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039614",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03846en_us",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-aaavty",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03846en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-aaavty",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T13:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell."
      }, {
        "lang" : "es",
        "value" : "Un binario contenedor de suid inseguro en el plugin HashiCorp Vagrant VMware Fusion (también conocido como vagrant-vmware-fusion), en la versión 4.0.24 y anteriores, permite que un usuario no root obtenga un shell root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.24",
            "matchCriteriaId" : "D5FEC914-FA13-4191-BAB4-3C7E9B4C9D2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201712579-local-root-privesc-in-hashicorp-vagrantvmwarefusion-4024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43223/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201712579-local-root-privesc-in-hashicorp-vagrantvmwarefusion-4024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43223/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10014",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Hotel Mobile. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 3.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Hotel Mobile de Oracle Hospitality Applications (subcomponente: Suite8/RESTAPI). La versión compatible afectada es la 1.1. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Hotel Mobile. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Hospitality Hotel Mobile. CVSS 3.0 Base Score 3.5 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_hotel_mobile:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB46D614-C880-41F7-ABCC-707C0F127F84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101299",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10026",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle SOA Suite accessible data as well as unauthorized update, insert or delete access to some of Oracle SOA Suite accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle SOA Suite de Oracle Fusion Middleware (subcomponente: Fabric Layer). La versión compatible afectada es la 11.1.1.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle SOA Suite. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle SOA Suite, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle SOA Suite; así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle SOA Suite. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:soa_suite:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356BA147-CF62-4EAF-9790-DD6851B93126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101318",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10033",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. Note: Please refer to Doc ID <a href=\"http://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=2318213.1\">My Oracle Support Note 2318213.1 for instructions on how to address this issue. CVSS 3.0 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Sites de Oracle Fusion Middleware (subcomponente: Support Tools). Las versiones compatibles que se han visto afectadas son la 11.1.1.8.0 y la 12.2.1.2.0. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar y con inicio de sesión en la infraestructura en la que se ejecuta Oracle WebCenter Sites comprometa la seguridad de Oracle WebCenter Sites. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle WebCenter Sites, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle WebCenter Sites. Nota: Consulte Doc ID \n<a href=\"http://support.oracle.com/CSP/main/article?cmd=showtype=NOTid=2318213.1\" rel=\"nofollow\"> My Oracle Support Note 2318213.1 para obtener instrucciones sobre cómo afrontar este problema. CVSS 3.0 Base Score 4.0 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).</a>"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB4709C-6373-43CC-918C-876A6569865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6CBF69-21D9-4FA9-B60A-3A7CA04611C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101408",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44757/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44757/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10034",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle BI Publisher de Oracle Fusion Middleware (subcomponente: Core Formatting API). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0 y la 11.1.1.9.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle BI Publisher. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle BI Publisher, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle BI Publisher, así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle BI Publisher. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101307",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101405",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10037",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle BI Publisher de Oracle Fusion Middleware (subcomponente: Web Service API). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0 y la 11.1.1.9.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle BI Publisher. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle BI Publisher. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88732E-A07D-4E53-A304-255561C11AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101334",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10050",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). Las versiones compatibles que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Suite8, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Hospitality Suite8, así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101363",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10051",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 5.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Outside In Technology de Oracle Fusion Middleware (subcomponente: Outside In Filters). La versión compatible afectada es la 8.5.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y con acceso al segmento de comunicación física conectado al hardware en el que se ejecuta Oracle Outside In Technology comprometa la seguridad de Oracle Outside In Technology. Los ataques exitosos de esta vulnerabilidad pueden resultar en la habilidad no autorizada para provocar un bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de Oracle Outside In Technology. Nota: Outside In Technology es una suite de kits de desarrollo de software (SDK). El protocolo y el CVSS score dependen del software que emplee el código de Outside in Technology. El CVSS score asume que el software pasa datos recibidos por una red directamente al código de Outside in Technology, pero si los datos no se reciben a través de una red, el CVSS score podría ser más bajo. CVSS 3.0 Base Score 5.7 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E641F594-9A34-4AA5-8C3F-E44B0C35A625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101377",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10054",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMS). The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Cruise Materials Management executes to compromise Oracle Hospitality Cruise Materials Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Materials Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Materials Management accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Materials Management de Oracle Hospitality Applications (subcomponente: MMS). La versión compatible afectada es la 7.30.564.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality Cruise Materials Management comprometa la seguridad de Oracle Hospitality Cruise Materials Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Cruise Materials Management, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Materials Management. CVSS 3.0 Base Score 5.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_materials_management:7.30.564.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2124E849-979F-40FA-A477-655C1211BDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101456",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10055",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The supported version that is affected is 7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iPlanet Web Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iPlanet Web Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iPlanet Web Server accessible data as well as unauthorized read access to a subset of Oracle iPlanet Web Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iPlanet Web Server de Oracle Fusion Middleware (subcomponente: Admin Graphical User Interface). La versión compatible afectada es la 7.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle iPlanet Web Server. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iPlanet Web Server, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle iPlanet Web Server, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle iPlanet Web Server. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:iplanet_web_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A972CA67-3909-4E9A-B8FC-7AAE5126528A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101374",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039605",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10060",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (subcomponente: Analytics Web General). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Business Intelligence Enterprise Edition. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Business Intelligence Enterprise Edition, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Business Intelligence Enterprise Edition; así como en en acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D18D8F82-D325-402B-BF46-3C5C27C95091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "523CD57C-43D4-4C79-BA00-A9A65C6588E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3E422CC6-EFD7-4350-911E-43C55C46B128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "61CE24F5-4D90-4F06-89FC-D7C2915C6FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101310",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10065",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Point-of-Service. While the vulnerability is in Oracle Retail Point-of-Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Point-of-Service accessible data as well as unauthorized read access to a subset of Oracle Retail Point-of-Service accessible data. CVSS 3.0 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Point-of-Service de Oracle Retail Applications (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 13.2, 13.3, 13.4, 14.0 y la 14.1. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso en red por HTTP comprometa la seguridad de Oracle Retail Point-of-Service. Aunque la vulnerabilidad está presente en Oracle Retail Point-of-Service, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de datos de un nivel de importancia crítico o de todos los datos accesibles de Oracle Retail Point-of-Service, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Retail Point-of-Service. CVSS 3.0 Base Score 8.5 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB5390F-09F8-4A69-8B41-6B5AB2E5DC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DE7329-611F-447A-A6FB-083F98A91FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F7E1BB-DC7A-492C-9413-50E18EE41C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E60D20-6667-4A43-BF4D-B1A4B04EABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C35D60-63DA-41B6-B585-DE529C9CFF6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02BE56E-821C-498B-A045-CB5B7273763B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:6.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44AE6115-AA67-4FFC-AABF-961170CD0D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEC7079-6449-43C0-B52F-3865323BF338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F5949C-F27C-48CD-8FBE-7DAD8FD496A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A7CBF3-A71B-4E6F-AB0D-2B9092D6EB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65EA1FE-0579-49C3-A0CF-C286FE7444E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF170C32-848E-4D64-BC89-1A1BA2F5A91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD66DD9-26BB-47F1-A286-0197B220FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A87897-B024-4477-9CF7-8ED41F41D1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D77E0D-125B-4876-BF8D-6811F1D8B769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC492A7-594C-4FBB-B645-6F36F229DAF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79604628-84BC-4695-BC41-F2B5B8B03B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFA1A8B-904B-4EB2-B12B-78B7BA84B20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4546AF-5A7E-4FA1-9250-E41D4292B848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB47284-80E9-4681-820B-960699C7D468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46C1B40-CC7E-49C3-BFA0-BFABB0B51552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0672170D-C18A-4B04-931D-28625DAED0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8684DF-548F-4698-9BA7-9906C81102E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A7514B6-6793-46D1-A294-03FEE33C3CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:16.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3BA7720-7632-4477-914E-B77B853FBA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:16.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D7D3C6-1CE6-4AA6-97EA-CC5E9B2FFB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_point-of-service:16.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BA1385-49DD-4A32-A17B-F3406E92573B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101359",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10066",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications Technology Stack en Oracle E-Business Suite (subcomponente: Oracle Forms). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Applications Technology Stack. Los ataques exitosos de esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Applications Technology Stack. CVSS 3.0 Base Score 5.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48370325-DAE0-48AD-ADAC-AFCD6CE85B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C2C4B5-148E-4AED-8F75-FD36781CABAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B70B0D-B049-43FF-A258-F806C97D1D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447F0A48-EFB6-451B-9D75-CCFE02AF65E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F868F2E7-C2F5-40B7-8118-AED189A49D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5FDEA2-F043-4106-BE35-A20351DEE90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101398",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10077",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications DBA en Oracle E-Business Suite (subcomponente: AD Utilities). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Applications DBA. Los ataques exitosos a esta vulnerabilidad pueden resultar en la creación, supresión o modificación sin autorización de información crítica o de todos los datos accesibles de Oracle Applications DBA, así como el acceso sin autorización a datos críticos o a todos los datos accesibles de Oracle Applications DBA. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E064D5-BDE1-4040-BC83-9BECED3299DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479AF1FF-B81F-4FAE-866B-70EDDA900EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5A8EFC-607E-40E5-A732-51B23C1D7460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC89B9D8-3C9F-44E1-83F7-246AC0F06918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007AA843-EE17-4B19-969B-CA7749EB2ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39322650-6772-450F-8D33-17016F64E817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101389",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10099",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where SPARC M7, T7, S7 based Servers executes to compromise SPARC M7, T7, S7 based Servers. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of SPARC M7, T7, S7 based Servers. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Servers basado en SPARC M7, T7, S7 de Oracle Sun Systems Products Suite (subcomponente: Firmware). La versión compatible afectada es anterior a la 9.7.6.b. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecutan los Servers basados en SPARC M7, T7, S7 comprometa la seguridad de los Servers basados en SPARC M7, T7, S7. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de los Servers basado en SPARC M7, T7, S7. CVSS 3.0 Base Score 4.4 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sparc-sun_system_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.7.5.e",
            "matchCriteriaId" : "FAF5CF5A-A650-4DB2-A973-080517440C91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10152",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Container). Las versiones compatibles que se han visto afectadas son la 10.3.6.0.0 y la 12.1.3.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101351",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10153",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (Gson)). Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Communications WebRTC Session Controller. While the vulnerability is in Oracle Communications WebRTC Session Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications WebRTC Session Controller. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Communications WebRTC Session Controller de Oracle Communications Applications (subcomponente: Security (Gson)). Las versiones compatibles que se han visto afectadas son la 7.0.,7.1 y la 7.2. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Oracle Communications WebRTC Session Controller. Aunque la vulnerabilidad está presente en Oracle Communications WebRTC Session Controller, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la habilidad no autorizada para provocar un bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de Oracle Communications WebRTC Session Controller. CVSS 3.0 Base Score 6.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFDB5ADE-F4DF-4054-8628-5EF6C5DB864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C4F882-5B42-43E6-9CCC-D2AB23117A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726DB59B-00C7-444E-83F7-CB31032482AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101432",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039590",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10154",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Access Manager de Oracle Fusion Middleware (subcomponente: Web Server Plugin). La versión compatible afectada es la 11.1.2.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Access Manager. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Access Manager. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEAFEDC-2D0F-4A5F-99A0-BD41DD6DC017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101386",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039607",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10155",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Pluggable Auth). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 7.5 (Impactos de disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0089EDF-4806-417D-A4F1-63FF03C5AEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898A5CD5-83A5-4335-835F-759F82862753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C851FA0E-357E-4B9E-A441-9C74B3526B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12FA18C-AB93-4522-AA2C-303342452E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD31981-E3ED-41D0-92EB-ABA7490D60E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E918FF1-8B40-4DC3-9269-1D3BFD18C58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCD7C2D-49E9-4D78-90CF-F747A1584269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7956E471-E98A-4527-A5F4-863210E09D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F499A-5C33-4E79-80FA-9A1453D8A3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40EA2-F432-4F89-9E59-0DB4D415CA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41494A2D-4BBC-4C3B-841F-878C2430A444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62DA4D8-27B4-4026-9035-75AC35F58439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DF5346-DC9A-4615-BEAC-2F5FD57C3B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E948C884-E747-4E7C-B111-4A8DA22E421C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F933CF3-A850-4D3F-A16D-8129E246BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D17E1-2932-4D47-A748-F8A1D46B6721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9028492-4114-4C9A-9E88-4B6C4FA6CC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B844437C-3D19-4F50-8FBC-B1D0BDDEC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F96B5EE-782E-444F-8CA2-D178CD26FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5798742F-986C-4A46-8815-48003192EE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081F919-3653-465F-8171-80FA4E5D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB0F1D5-7355-4160-8C31-B109C6BA9BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF1373B-0F2A-402F-A402-D56CAEFB98EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0F977-D5B8-4528-9B57-4A9DEB500F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1775D2BE-117C-447C-B934-3F24E387F981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D8DCD5-9E5C-433A-9737-5EA50B48EA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D4C576-99EB-4890-B0BD-58F0DF60963E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5037477B-FE67-4474-930A-50A2EE72E2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A47740-11D4-4C1C-9AD7-0DF600BD3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB0B03F-A264-4113-8961-41C28333503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88127FDE-4695-4AC9-B6BA-F57149B2770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034D7BE0-14EA-4CCB-91DF-3B1A4A8AA78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD09E3CF-B900-4B0A-BFE7-8BADA709AD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006CE9D3-B3EC-4E4A-91AB-DCD2A32A271F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112BF532-FD22-4EFD-9D53-8999CB91FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52D0C21-DDA9-43BC-BA88-38CAC12907F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99FD46-71DF-464C-9E78-4B6F125B52BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD8C71-3CE1-43D7-A7FE-33B39726262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2149A153-FB6A-4833-B382-39B762249BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3238F3F7-13F0-49FE-BA3E-B6F6570A46EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E583CD-F1D5-43C0-9195-940BBB0C8650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440D9A94-D9E8-41C7-8ADC-9EA7CA4001E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C2EBC1-A32C-4866-8B19-2612DCA74A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B320-E2C0-4B6B-846D-FCE5F65E4DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A107-9B65-43C0-9EBA-69D83987F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304EA995-F08B-4401-8736-515583E1027C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B3F4DB-9290-448F-A41F-4ACE1802EB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA58E346-4DEE-4429-9B57-41C05EE258F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62601284-98D9-403F-8270-300AE1AB8A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B210C1E-8220-40DA-9976-2BFE209DD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69905126-C49A-4C38-8C31-6E34CA4E8322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82934F3-6C0D-4002-9E77-22A88DECE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EF3DE1-DEF2-4AC0-8B36-0897402520A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101402",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10158",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Core). Las versiones compatibles que se han visto afectadas son la 8.54.,8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101469",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10159",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Portal, CMP). Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Policy Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Policy Management accessible data as well as unauthorized read access to a subset of Oracle Communications Policy Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Communications Policy Management de Oracle Communications Applications (subcomponente: Portal, CMP). Las versiones compatibles que se han visto afectadas son la 11.5 y las 12.x. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Communications Policy Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Communications Policy Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Communications Policy Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Communications Policy Management. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6234C878-15CE-4B71-B825-DA088554A2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858A9C1D-B099-4573-82EA-AB175D9A11E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101425",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039590",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10161",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services Security). Supported versions that are affected are 6.1.3.0 and 6.2.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Engineering Data Management accessible data as well as unauthorized read access to a subset of Oracle Engineering Data Management accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Engineering Data Management de Oracle Supply Chain Products Suite (subcomponente: Web Services Security). Las versiones compatibles que se han visto afectadas son la 6.1.3.0 y la 6.2.2.0. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Engineering Data Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Engineering Data Management, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Engineering Data Management. CVSS 3.0 Base Score 4.8 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_engineering_data_management:6.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3FE26-AC47-4DDA-8E3E-AF6B214C0CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A348CDD-4ECA-45E5-B7A2-4DD280B190AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101395",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10162",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server Framework accessible data as well as unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel Core - Server Framework de Oracle Siebel CRM (subcomponente: Services). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Siebel Core - Server Framework. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Siebel Core - Server Framework, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Siebel Core - Server Framework. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core-server_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A14AF13-C632-48AB-A8B6-67A4073C44A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core-server_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF403FF-EFCD-48E2-8F4F-D8173E98861E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101416",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10163",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. Note: Please refer to Doc ID <a href=\"http://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=2310021.1\">My Oracle Support Note 2310021.1 for instructions on how to address this issue. CVSS 3.0 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (subcomponente: Analytics Web General). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Business Intelligence Enterprise Edition. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de creación, supresión o modificación de datos de nivel de importancia crítico o de todos los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition. Nota: Consulte Doc ID \n<a href=\"http://support.oracle.com/CSP/main/article?cmd=showtype=NOTid=2310021.1\" rel=\"nofollow\"> My Oracle Support Note 2310021.1 para obtener instrucciones sobre cómo afrontar este problema. CVSS 3.0 Base Score 6.3 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N).</a>"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D18D8F82-D325-402B-BF46-3C5C27C95091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "523CD57C-43D4-4C79-BA00-A9A65C6588E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3E422CC6-EFD7-4350-911E-43C55C46B128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "61CE24F5-4D90-4F06-89FC-D7C2915C6FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101357",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10164",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FSCM de Oracle PeopleSoft Products (subcomponente: Staffing Front Office). La versión compatible afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise FSCM. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise FSCM. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_staffing_front_office:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BAB5A1-4831-4159-BEFF-BC1AA3D4E1FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101479",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10165",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Replication). Las versiones compatibles que se han visto afectadas son la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "704E3016-B2FE-45FF-A8E8-A67001667D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101424",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10166",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Security Service accessible data. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Security Service de Oracle Fusion Middleware (subcomponente: C Oracle SSL API). Las versiones compatibles que se han visto afectadas son FMW: 11.1.1.9.0 y 12.1.3.0.0. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTPS comprometa la seguridad de Oracle Security Service. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Security Service. CVSS 3.0 Base Score 3.7 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:security_service:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495ADD0F-AF15-495D-8E07-171CCF71DBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:security_service_fmw:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D850FC64-61D7-4A1B-94C0-0416FF4C863B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101412",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10167",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "704E3016-B2FE-45FF-A8E8-A67001667D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101433",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10190",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Create Procedure privilege with logon to the infrastructure where Java VM executes to compromise Java VM. While the vulnerability is in Java VM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java VM de Oracle Database Server. Las versiones compatibles que se han visto afectadas son la 11.2.0.4, 12.1.0.2 y la 12.2.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con privilegios Create Session, Create Procedure e inicio de sesión en la infraestructura en la que se ejecuta Java VM comprometa la seguridad de Java VM. Aunque la vulnerabilidad está presente en Java VM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java VM. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E221FD4B-190F-4752-9617-FB0C704E7AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101335",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10194",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Integrated Lights Out Manager (ILOM) accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Integrated Lights Out Manager (ILOM) de Oracle Sun Systems Products Suite (subcomponente: System Management). La versión compatible afectada es anterior a la 3.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Integrated Lights Out Manager (ILOM). Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 2.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "8F3C5184-B911-4600-9A32-A95CA32B6DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101445",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10197",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios). The supported version that is affected is 5.4.2.x through 5.5.1.x. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (subcomponente: Folios). Las versiones compatibles afectada incluyen desde las 5.4.2.x hasta las 5.5.1.x. Una vulnerabilidad fácilmente explotable permite el acceso físico, lo que compromete la seguridad de Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos confidenciales o un acceso completo a todos los datos accesibles de Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 4.6 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E38734-2EB8-4048-9530-B27CC09FD10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393A0BE6-5B95-4D01-B78F-0BFB567B08E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101459",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10203",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Connectors de Oracle MySQL (subcomponente: Connector/Net). Las versiones compatibles que se han visto afectadas son la 6.9.9 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Connectors. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de MySQL Connectors. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connector\\/net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9",
            "matchCriteriaId" : "9988B461-DD8F-42C5-8712-05B110C34FA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101324",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10227",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.37",
            "matchCriteriaId" : "2756511A-C54C-49FE-BD24-868457C8B9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "21B280C8-532C-4C12-98DA-75E8254AB1E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101337",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10259",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Access Manager de Oracle Fusion Middleware (subcomponente: Web Server Plugin). La versión compatible afectada es la 11.1.2.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Access Manager. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Access Manager. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coreid_access:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3E2C2-7003-47F1-A8BE-21004723151C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101331",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039607",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10260",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Integrated Lights Out Manager (ILOM) de Oracle Sun Systems Products Suite (subcomponente: System Management). La versión compatible afectada es la anterior a la 3.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Integrated Lights Out Manager (ILOM). Los ataques exitosos a esta vulnerabilidad pueden resultar en la habilidad no autorizada para provocar un bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "8F3C5184-B911-4600-9A32-A95CA32B6DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101426",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10261",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML Database executes to compromise XML Database. While the vulnerability is in XML Database, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all XML Database accessible data. Note: This score is for Windows platform version 11.2.0.4 of Database. For Windows platform version 12.1.0.2 and Linux, the score is 5.5 with scope Unchanged. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente XML Database de Oracle Database Server. Las versiones compatibles que se han visto afectadas son la 11.2.0.4 y la 12.1.0.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga privilegios Create Session e inicio de sesión en la infraestructura en la que se ejecuta XML Database comprometa la seguridad de XML Database. Aunque la vulnerabilidad está presente en XML Database, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de XML Database. Nota: Esta puntuación es para la plataforma Windows, versión 11.2.0.4 de Database. Para la versión 11.2.0.4 de la plataforma Windows y Linux, la puntuación es 5.5 con scope Unchanged. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101344",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10263",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel UI Framework accessible data as well as unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: UIF Open UI). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Siebel UI Framework. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Siebel UI Framework, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Siebel UI Framework, así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Siebel UI Framework. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA9E9A6-D9EF-4FA7-AB0B-8D2194483188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB54846-455E-4112-A8BD-7A9BC9BFD3BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101421",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10264",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel UI Framework. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: UIF Open UI). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Siebel UI Framework. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Siebel UI Framework. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA9E9A6-D9EF-4FA7-AB0B-8D2194483188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB54846-455E-4112-A8BD-7A9BC9BFD3BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101411",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10265",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Integrated Lights Out Manager (ILOM) accessible data as well as unauthorized read access to a subset of Oracle Integrated Lights Out Manager (ILOM) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Integrated Lights Out Manager (ILOM) de Oracle Sun Systems Products Suite (subcomponente: System Management). La versión compatible afectada es la anterior a la 3.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Integrated Lights Out Manager (ILOM). Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Integrated Lights Out Manager (ILOM), así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Integrated Lights Out Manager (ILOM) y la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "8F3C5184-B911-4600-9A32-A95CA32B6DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101431",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10268",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Replication). Las versiones compatibles que se han visto afectadas son la 5.5.57 y anteriores, 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta MySQL Server comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de MySQL Server. CVSS 3.0 Base Score 4.1 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.57",
            "matchCriteriaId" : "4E699C4A-5A59-47DD-B929-E5BE01D72E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.37",
            "matchCriteriaId" : "2756511A-C54C-49FE-BD24-868457C8B9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "21B280C8-532C-4C12-98DA-75E8254AB1E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.58",
            "matchCriteriaId" : "1FDD13AB-E86E-424B-80C8-6C917BDD62D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.33",
            "matchCriteriaId" : "2DBC4735-30CE-48A2-8D6D-5C291A00162B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.29",
            "matchCriteriaId" : "53B3CC39-BD71-4104-8CC6-7B92B2EFEC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.10",
            "matchCriteriaId" : "9CAD3CAD-7960-408C-B159-D514A6584D41"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101390",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1258",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4341",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10270",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory). The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Identity Manager Connector. CVSS 3.0 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Identity Manager Connector de Oracle Fusion Middleware (subcomponente: Microsoft Active Directory). La versión compatible afectada es la 9.1.1.5.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Identity Manager Connector comprometa la seguridad de Oracle Identity Manager Connector. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Identity Manager Connector, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso de creación, supresión o modificación de datos críticos o un acceso completo a todos los datos accesibles de Oracle Identity Manager Connector y la capacidad sin autorización para provocar un bloqueo o un cierre inesperado frecuente (DOS completo) de Oracle Identity Manager Connector. CVSS 3.0 Base Score 8.2 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager_connector:9.1.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916ADA4-C451-42F4-A22B-EC9C986DA9D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101313",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10271",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.747",
      "lastModified" : "2025-10-22T00:16:01.457",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: WLS Security). Las versiones compatibles que se ven impactadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 y 12.2.1.2.0. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de T3 comprometer a Oracle WebLogic Server. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server. CVSS 3.0 Puntuación Base 7.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-02-10",
      "cisaActionDue" : "2022-08-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Oracle Corporation WebLogic Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101304",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/c0mmand3rOpSec/CVE-2017-10271",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43458/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43924/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/c0mmand3rOpSec/CVE-2017-10271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43458/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43924/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-10271",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10274",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Smart Card IO). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de datos críticos o de todos los datos accesibles de Java SE, así como el acceso sin autorización a datos confidenciales o todos los datos accesibles de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de aislado Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 6.8 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101333",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10275",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). The supported version that is affected is AK 2013. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit (AK) executes to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Sun ZFS Storage Appliance Kit (AK) de Oracle Sun Systems Products Suite (subcomponente: Filesystem). La versión compatible afectada es la AK 2013. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Sun ZFS Storage Appliance Kit (AK) comprometa la seguridad de Sun ZFS Storage Appliance Kit (AK). Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la habilidad no autorizada para provocar un bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 5.0 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris_ak:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB60363A-4E56-4DAF-AF8E-9F886829594F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101437",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10276",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: FTS). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red mediante múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0089EDF-4806-417D-A4F1-63FF03C5AEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898A5CD5-83A5-4335-835F-759F82862753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C851FA0E-357E-4B9E-A441-9C74B3526B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12FA18C-AB93-4522-AA2C-303342452E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD31981-E3ED-41D0-92EB-ABA7490D60E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E918FF1-8B40-4DC3-9269-1D3BFD18C58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCD7C2D-49E9-4D78-90CF-F747A1584269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7956E471-E98A-4527-A5F4-863210E09D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F499A-5C33-4E79-80FA-9A1453D8A3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40EA2-F432-4F89-9E59-0DB4D415CA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41494A2D-4BBC-4C3B-841F-878C2430A444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62DA4D8-27B4-4026-9035-75AC35F58439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DF5346-DC9A-4615-BEAC-2F5FD57C3B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E948C884-E747-4E7C-B111-4A8DA22E421C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F933CF3-A850-4D3F-A16D-8129E246BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D17E1-2932-4D47-A748-F8A1D46B6721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9028492-4114-4C9A-9E88-4B6C4FA6CC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B844437C-3D19-4F50-8FBC-B1D0BDDEC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F96B5EE-782E-444F-8CA2-D178CD26FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5798742F-986C-4A46-8815-48003192EE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081F919-3653-465F-8171-80FA4E5D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB0F1D5-7355-4160-8C31-B109C6BA9BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF1373B-0F2A-402F-A402-D56CAEFB98EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0F977-D5B8-4528-9B57-4A9DEB500F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1775D2BE-117C-447C-B934-3F24E387F981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D8DCD5-9E5C-433A-9737-5EA50B48EA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D4C576-99EB-4890-B0BD-58F0DF60963E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5037477B-FE67-4474-930A-50A2EE72E2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A47740-11D4-4C1C-9AD7-0DF600BD3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB0B03F-A264-4113-8961-41C28333503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88127FDE-4695-4AC9-B6BA-F57149B2770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034D7BE0-14EA-4CCB-91DF-3B1A4A8AA78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD09E3CF-B900-4B0A-BFE7-8BADA709AD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006CE9D3-B3EC-4E4A-91AB-DCD2A32A271F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112BF532-FD22-4EFD-9D53-8999CB91FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52D0C21-DDA9-43BC-BA88-38CAC12907F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99FD46-71DF-464C-9E78-4B6F125B52BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD8C71-3CE1-43D7-A7FE-33B39726262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2149A153-FB6A-4833-B382-39B762249BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3238F3F7-13F0-49FE-BA3E-B6F6570A46EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E583CD-F1D5-43C0-9195-940BBB0C8650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440D9A94-D9E8-41C7-8ADC-9EA7CA4001E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C2EBC1-A32C-4866-8B19-2612DCA74A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B320-E2C0-4B6B-846D-FCE5F65E4DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A107-9B65-43C0-9EBA-69D83987F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304EA995-F08B-4401-8736-515583E1027C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B3F4DB-9290-448F-A41F-4ACE1802EB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA58E346-4DEE-4429-9B57-41C05EE258F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62601284-98D9-403F-8270-300AE1AB8A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B210C1E-8220-40DA-9976-2BFE209DD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69905126-C49A-4C38-8C31-6E34CA4E8322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82934F3-6C0D-4002-9E77-22A88DECE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EF3DE1-DEF2-4AC0-8B36-0897402520A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101441",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10277",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:01.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Connectors de Oracle MySQL (subcomponente: Connector/Net). Las versiones compatibles que se han visto afectadas son la 6.9.9 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Connectors. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de MySQL Connectors, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de MySQL Connectors. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connector\\/net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.9",
            "matchCriteriaId" : "9988B461-DD8F-42C5-8712-05B110C34FA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10279",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.6.36 y anteriores, y la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.36",
            "matchCriteriaId" : "F9A9FC3B-124C-4AFD-B957-7017A0BD509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101316",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10280",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Test Framework). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o en un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101468",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10281",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB92D2-A529-4912-9D59-40EAC3F5D674"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101378",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10283",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Performance Schema). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0089EDF-4806-417D-A4F1-63FF03C5AEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898A5CD5-83A5-4335-835F-759F82862753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C851FA0E-357E-4B9E-A441-9C74B3526B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12FA18C-AB93-4522-AA2C-303342452E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD31981-E3ED-41D0-92EB-ABA7490D60E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E918FF1-8B40-4DC3-9269-1D3BFD18C58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCD7C2D-49E9-4D78-90CF-F747A1584269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7956E471-E98A-4527-A5F4-863210E09D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F499A-5C33-4E79-80FA-9A1453D8A3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40EA2-F432-4F89-9E59-0DB4D415CA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41494A2D-4BBC-4C3B-841F-878C2430A444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62DA4D8-27B4-4026-9035-75AC35F58439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DF5346-DC9A-4615-BEAC-2F5FD57C3B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E948C884-E747-4E7C-B111-4A8DA22E421C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F933CF3-A850-4D3F-A16D-8129E246BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D17E1-2932-4D47-A748-F8A1D46B6721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9028492-4114-4C9A-9E88-4B6C4FA6CC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B844437C-3D19-4F50-8FBC-B1D0BDDEC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F96B5EE-782E-444F-8CA2-D178CD26FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5798742F-986C-4A46-8815-48003192EE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081F919-3653-465F-8171-80FA4E5D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB0F1D5-7355-4160-8C31-B109C6BA9BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF1373B-0F2A-402F-A402-D56CAEFB98EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0F977-D5B8-4528-9B57-4A9DEB500F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1775D2BE-117C-447C-B934-3F24E387F981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D8DCD5-9E5C-433A-9737-5EA50B48EA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D4C576-99EB-4890-B0BD-58F0DF60963E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5037477B-FE67-4474-930A-50A2EE72E2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A47740-11D4-4C1C-9AD7-0DF600BD3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB0B03F-A264-4113-8961-41C28333503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88127FDE-4695-4AC9-B6BA-F57149B2770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034D7BE0-14EA-4CCB-91DF-3B1A4A8AA78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD09E3CF-B900-4B0A-BFE7-8BADA709AD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006CE9D3-B3EC-4E4A-91AB-DCD2A32A271F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112BF532-FD22-4EFD-9D53-8999CB91FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52D0C21-DDA9-43BC-BA88-38CAC12907F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99FD46-71DF-464C-9E78-4B6F125B52BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD8C71-3CE1-43D7-A7FE-33B39726262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2149A153-FB6A-4833-B382-39B762249BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3238F3F7-13F0-49FE-BA3E-B6F6570A46EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E583CD-F1D5-43C0-9195-940BBB0C8650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440D9A94-D9E8-41C7-8ADC-9EA7CA4001E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C2EBC1-A32C-4866-8B19-2612DCA74A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B320-E2C0-4B6B-846D-FCE5F65E4DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A107-9B65-43C0-9EBA-69D83987F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304EA995-F08B-4401-8736-515583E1027C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B3F4DB-9290-448F-A41F-4ACE1802EB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA58E346-4DEE-4429-9B57-41C05EE258F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62601284-98D9-403F-8270-300AE1AB8A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B210C1E-8220-40DA-9976-2BFE209DD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69905126-C49A-4C38-8C31-6E34CA4E8322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82934F3-6C0D-4002-9E77-22A88DECE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EF3DE1-DEF2-4AC0-8B36-0897402520A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101420",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10284",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Stored Procedure). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Stored Procedure). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101385",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10285",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: RMI). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de aislado Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_worksation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403EECF4-3047-4BBE-90A5-DD2F2E4802D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_worksation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09953EF-7E14-4200-9C77-002841927CB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAA19EC-9A21-4084-A914-CF12171F940A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101319",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10286",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: InnoDB). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.4 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.37",
            "matchCriteriaId" : "2756511A-C54C-49FE-BD24-868457C8B9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "21B280C8-532C-4C12-98DA-75E8254AB1E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.32",
            "matchCriteriaId" : "C2A1395D-DD3D-4470-A881-AC2F7A443BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.26",
            "matchCriteriaId" : "639D0A69-301F-4C14-9A98-AF208CD31F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101397",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10287",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FSCM de Oracle PeopleSoft Products (subcomponente: Strategic Sourcing). La versión compatible afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise FSCM. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise FSCM. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_strategic_sourcing:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B732E320-417F-40CE-9458-F80C9AE6AE1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101480",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10292",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create User privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS Security accessible data. CVSS 3.0 Base Score 2.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente RDBMS Security de Oracle Database Server. Las versiones compatibles que se han visto afectadas son la 11.2.0.4, 12.1.0.2 y la 12.2.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios, con privilegios Create User e inicio de sesión en la infraestructura en la que se ejecuta RDBMS Security comprometa la seguridad de RDBMS Security. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de RDBMS Security. CVSS 3.0 Base Score 2.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E221FD4B-190F-4752-9617-FB0C704E7AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101350",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10293",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Javadoc). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Java SE, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de aislado Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101338",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10294",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0089EDF-4806-417D-A4F1-63FF03C5AEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898A5CD5-83A5-4335-835F-759F82862753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C851FA0E-357E-4B9E-A441-9C74B3526B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12FA18C-AB93-4522-AA2C-303342452E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD31981-E3ED-41D0-92EB-ABA7490D60E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E918FF1-8B40-4DC3-9269-1D3BFD18C58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCD7C2D-49E9-4D78-90CF-F747A1584269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7956E471-E98A-4527-A5F4-863210E09D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F499A-5C33-4E79-80FA-9A1453D8A3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40EA2-F432-4F89-9E59-0DB4D415CA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41494A2D-4BBC-4C3B-841F-878C2430A444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62DA4D8-27B4-4026-9035-75AC35F58439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DF5346-DC9A-4615-BEAC-2F5FD57C3B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E948C884-E747-4E7C-B111-4A8DA22E421C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F933CF3-A850-4D3F-A16D-8129E246BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D17E1-2932-4D47-A748-F8A1D46B6721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9028492-4114-4C9A-9E88-4B6C4FA6CC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B844437C-3D19-4F50-8FBC-B1D0BDDEC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F96B5EE-782E-444F-8CA2-D178CD26FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5798742F-986C-4A46-8815-48003192EE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081F919-3653-465F-8171-80FA4E5D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB0F1D5-7355-4160-8C31-B109C6BA9BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF1373B-0F2A-402F-A402-D56CAEFB98EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0F977-D5B8-4528-9B57-4A9DEB500F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1775D2BE-117C-447C-B934-3F24E387F981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D8DCD5-9E5C-433A-9737-5EA50B48EA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D4C576-99EB-4890-B0BD-58F0DF60963E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5037477B-FE67-4474-930A-50A2EE72E2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A47740-11D4-4C1C-9AD7-0DF600BD3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB0B03F-A264-4113-8961-41C28333503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88127FDE-4695-4AC9-B6BA-F57149B2770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034D7BE0-14EA-4CCB-91DF-3B1A4A8AA78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD09E3CF-B900-4B0A-BFE7-8BADA709AD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006CE9D3-B3EC-4E4A-91AB-DCD2A32A271F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112BF532-FD22-4EFD-9D53-8999CB91FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52D0C21-DDA9-43BC-BA88-38CAC12907F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99FD46-71DF-464C-9E78-4B6F125B52BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD8C71-3CE1-43D7-A7FE-33B39726262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2149A153-FB6A-4833-B382-39B762249BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3238F3F7-13F0-49FE-BA3E-B6F6570A46EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E583CD-F1D5-43C0-9195-940BBB0C8650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440D9A94-D9E8-41C7-8ADC-9EA7CA4001E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C2EBC1-A32C-4866-8B19-2612DCA74A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B320-E2C0-4B6B-846D-FCE5F65E4DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A107-9B65-43C0-9EBA-69D83987F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304EA995-F08B-4401-8736-515583E1027C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B3F4DB-9290-448F-A41F-4ACE1802EB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA58E346-4DEE-4429-9B57-41C05EE258F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62601284-98D9-403F-8270-300AE1AB8A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B210C1E-8220-40DA-9976-2BFE209DD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69905126-C49A-4C38-8C31-6E34CA4E8322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82934F3-6C0D-4002-9E77-22A88DECE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EF3DE1-DEF2-4AC0-8B36-0897402520A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101444",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10295",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Networking). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Aunque la vulnerabilidad está presente en Java SE, Java SE Embedded y JRockit, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 4.0 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB92D2-A529-4912-9D59-40EAC3F5D674"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101384",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10296",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DML). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "DE7974ED-AFE6-44A8-B89C-BB19F6DCD1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101373",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10299",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.483",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Agile PLM. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101387",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10300",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Siebel Business Service Issues). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Desktop. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Desktop accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel CRM Desktop de Oracle Siebel CRM (subcomponente: Siebel Business Service Issues). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Siebel CRM Desktop. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Siebel CRM Desktop. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_customer_relationship_management_desktop:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940EE9B5-2FD0-43BA-8E95-C0BFD0B19FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_customer_relationship_management_desktop:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6A6DD9-6694-4189-BA98-9E3A7CBE2B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101400",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10302",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: UIF Open UI). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Siebel UI Framework. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Siebel UI Framework, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Siebel UI Framework, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Siebel UI Framework. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA9E9A6-D9EF-4FA7-AB0B-8D2194483188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB54846-455E-4112-A8BD-7A9BC9BFD3BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101419",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10303",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Setup). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Interaction Center Intelligence. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Interaction Center Intelligence, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Interaction Center Intelligence accessible data as well as unauthorized update, insert or delete access to some of Oracle Interaction Center Intelligence accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Interaction Center Intelligence en Oracle E-Business Suite (subcomponente: Setup). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2 y la 12.1.3. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Interaction Center Intelligence. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Interaction Center Intelligence, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información confidencial o en un acceso completo a todos los datos accesibles de Oracle Interaction Center Intelligence, así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Interaction Center Intelligence. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_center_intelligence:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827135AA-8187-49EB-98EB-00CB6EA9D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_center_intelligence:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C97DA04-F5A4-499D-B413-4CE7A80BAA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:interaction_center_intelligence:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B842BF7A-6E36-4ECE-A95A-CE7CFE2B93C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101327",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10304",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise HCM de Oracle PeopleSoft Products (subcomponente: Security). La versión compatible afectada es la 9.2. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso en red via HTTP comprometa la seguridad de PeopleSoft Enterprise HCM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise HCM, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise HCM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise HCM. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_human_resources:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344A3A9E-3113-4096-B9F8-CA0AD705242B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101477",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10306",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise HCM de Oracle PeopleSoft Products (subcomponente: Security). La versión compatible afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise HCM. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise HCM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de PeopleSoft Enterprise HCM. CVSS 3.0 Base Score 4.6 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_human_resources:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344A3A9E-3113-4096-B9F8-CA0AD705242B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10308",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.700",
      "lastModified" : "2025-05-08T18:13:51.353",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows physical access to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 3.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Agile PLM de Oracle Supply Chain Products Suite (subcomponente: Performance). Las versiones compatibles que se han visto afectadas son la 9.3.5 y la 9.3.6. Una vulnerabilidad fácilmente explotable permite el acceso físico, lo que compromete la seguridad de Oracle Agile PLM. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Agile PLM, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Agile PLM. CVSS 3.0 Base Score 3.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101379",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10309",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: Deployment). Las versiones compatibles que se han visto afectadas son Java SE: 8u144 y 9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Java SE, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Java SE y la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox de aislado Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101328",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43103/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43103/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10310",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hyperion Financial Reporting de Oracle Hyperion (subcomponente: Security Models). La versión compatible afectada es la 11.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Hyperion Financial Reporting. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Hyperion Financial Reporting. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ACF6ED-134C-449C-8522-EB04EF251B00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101302",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10311",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: FTS). Las versiones compatibles que se han visto afectadas son la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "704E3016-B2FE-45FF-A8E8-A67001667D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101446",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10312",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion BI+ accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion BI+ accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hyperion BI+ de Oracle Hyperion (subcomponente: UI and Visualization). La versión compatible afectada es la 11.1.2.4. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hyperion BI+. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica en o un acceso completo a todos los datos accesibles de Oracle Hyperion BI+, así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hyperion BI+. CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_bi\\+:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B16841-10F8-488E-AED9-066710A50C22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101309",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10313",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Group Replication GCS). Las versiones compatibles que se han visto afectadas son la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "704E3016-B2FE-45FF-A8E8-A67001667D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101448",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10314",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Memcached). Las versiones compatibles que se han visto afectadas son la 5.6.37 y anteriores, y la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0089EDF-4806-417D-A4F1-63FF03C5AEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898A5CD5-83A5-4335-835F-759F82862753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C851FA0E-357E-4B9E-A441-9C74B3526B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12FA18C-AB93-4522-AA2C-303342452E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD31981-E3ED-41D0-92EB-ABA7490D60E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E918FF1-8B40-4DC3-9269-1D3BFD18C58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCD7C2D-49E9-4D78-90CF-F747A1584269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7956E471-E98A-4527-A5F4-863210E09D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F499A-5C33-4E79-80FA-9A1453D8A3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD40EA2-F432-4F89-9E59-0DB4D415CA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41494A2D-4BBC-4C3B-841F-878C2430A444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62DA4D8-27B4-4026-9035-75AC35F58439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DF5346-DC9A-4615-BEAC-2F5FD57C3B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E948C884-E747-4E7C-B111-4A8DA22E421C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F933CF3-A850-4D3F-A16D-8129E246BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D17E1-2932-4D47-A748-F8A1D46B6721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9028492-4114-4C9A-9E88-4B6C4FA6CC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B844437C-3D19-4F50-8FBC-B1D0BDDEC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F96B5EE-782E-444F-8CA2-D178CD26FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5798742F-986C-4A46-8815-48003192EE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081F919-3653-465F-8171-80FA4E5D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB0F1D5-7355-4160-8C31-B109C6BA9BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF1373B-0F2A-402F-A402-D56CAEFB98EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0F977-D5B8-4528-9B57-4A9DEB500F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1775D2BE-117C-447C-B934-3F24E387F981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D8DCD5-9E5C-433A-9737-5EA50B48EA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D4C576-99EB-4890-B0BD-58F0DF60963E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5037477B-FE67-4474-930A-50A2EE72E2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A47740-11D4-4C1C-9AD7-0DF600BD3A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB0B03F-A264-4113-8961-41C28333503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88127FDE-4695-4AC9-B6BA-F57149B2770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034D7BE0-14EA-4CCB-91DF-3B1A4A8AA78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD09E3CF-B900-4B0A-BFE7-8BADA709AD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006CE9D3-B3EC-4E4A-91AB-DCD2A32A271F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112BF532-FD22-4EFD-9D53-8999CB91FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52D0C21-DDA9-43BC-BA88-38CAC12907F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99FD46-71DF-464C-9E78-4B6F125B52BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD8C71-3CE1-43D7-A7FE-33B39726262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2149A153-FB6A-4833-B382-39B762249BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3238F3F7-13F0-49FE-BA3E-B6F6570A46EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E583CD-F1D5-43C0-9195-940BBB0C8650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440D9A94-D9E8-41C7-8ADC-9EA7CA4001E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C2EBC1-A32C-4866-8B19-2612DCA74A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B320-E2C0-4B6B-846D-FCE5F65E4DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA6A107-9B65-43C0-9EBA-69D83987F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304EA995-F08B-4401-8736-515583E1027C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B3F4DB-9290-448F-A41F-4ACE1802EB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA58E346-4DEE-4429-9B57-41C05EE258F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62601284-98D9-403F-8270-300AE1AB8A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B210C1E-8220-40DA-9976-2BFE209DD6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69905126-C49A-4C38-8C31-6E34CA4E8322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82934F3-6C0D-4002-9E77-22A88DECE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EF3DE1-DEF2-4AC0-8B36-0897402520A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101314",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10315",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: UIF Open UI). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Siebel UI Framework. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Siebel UI Framework, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Siebel UI Framework, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Siebel UI Framework. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA9E9A6-D9EF-4FA7-AB0B-8D2194483188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB54846-455E-4112-A8BD-7A9BC9BFD3BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101417",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10316",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:02.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). Las versiones compatibles que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101346",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10317",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). Las versiones soportadas que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado consiga conectarse a la infraestructura en la que se ejecuta Oracle Hospitality Suite8 para comprometer la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 4.0 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101454",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10318",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). Las versiones soportadas que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Suite8, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101343",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10319",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: Leisure). Las versiones soportadas que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101312",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10320",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: InnoDB). Las versiones compatibles que se han visto afectadas son la 5.7.19 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en la habilidad no autorizada para provocar un cuelgue o cierre inesperado frecuente (DOS completo) de MySQL Server. CVSS 3.0 Base Score 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "21B280C8-532C-4C12-98DA-75E8254AB1E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101410",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10321",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create session privilege with logon to the infrastructure where Core RDBMS executes to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Core RDBMS. Note: This score is for Windows platform version 11.2.0.4 of Database. For Windows platform version 12.1.0.2 and Linux, the score is 7.8 with scope Unchanged. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Core RDBMS de Oracle Database Server. Las versiones compatibles que se han visto afectadas son la 11.2.0.4, 12.1.0.2 y la 12.2.0.1. Esta vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y con el privilegio de sesión Create con permisos de inicio de sesión en la infraestructura en la que se ejecuta Core RDBMS comprometa la seguridad de Core RDBMS. Aunque la vulnerabilidad está presente en Core RDBMS los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Core RDBMS. Nota: La puntuación es para la versión 11.2.0.4 de Database para Windows. Para la versión 12.1.0.2 de la plataforma Windows y Linux, la puntuación es 7.8 con el alcance \"Unchanged\". CVSS 3.0 Base Score 8.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5100F5C8-D5F8-466B-AABE-E42B3770B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C58EE-B36B-4081-A307-0FE9B52D8E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E221FD4B-190F-4752-9617-FB0C704E7AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101329",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10322",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications Calendar de Oracle E-Business Suite (subcomponente: Applications Calendar). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Common Applications Calendar. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Common Applications Calendar. CVSS 3.0 Base Score 5.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42766E4E-53EB-4D0A-B5C0-22C837358B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CE5B14-73FD-4CA5-BAE2-691751921914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB2E201-4BCD-42D6-B778-2066C81935B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C6B688-FF28-4BB5-9E46-2E5C2255C236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A7ABEA-5F19-4B68-8B4B-82CDCACE7CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25AE28-BDDA-4721-B8C2-98B566B91E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDED105C-76AC-440F-AD93-8E997F862E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AD5D9C-9146-472F-A435-86B5E144AF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101401",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10323",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Web Applications Desktop Integrator de Oracle E-Business Suite (subcomponente: Application Service). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red mediante HTTP comprometa la seguridad de Oracle Web Applications Desktop Integrator. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Web Applications Desktop Integrator, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Web Applications Desktop Integrator, así como en el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Web Applications Desktop Integrator. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3C26BB-15FB-47FD-AD1E-E9654392BF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE37DDD-CE8C-42E9-9A84-677684B9B88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D02DB9B-FE13-46E8-979C-EACE98743B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50126ABE-2A09-465B-ADB5-4D20B6081893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B2675A-6862-4643-A6BC-2100AC8E42F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441C83A8-BB1A-4353-A9C2-764AB8E1908D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A47D97-6BEC-478B-83D0-9DFEB8FB75DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101367",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10324",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Applications Technology Stack en Oracle E-Business Suite (subcomponente: Oracle Forms). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Applications Technology Stack. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Applications Technology Stack. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48370325-DAE0-48AD-ADAC-AFCD6CE85B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C2C4B5-148E-4AED-8F75-FD36781CABAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B70B0D-B049-43FF-A258-F806C97D1D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447F0A48-EFB6-451B-9D75-CCFE02AF65E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F868F2E7-C2F5-40B7-8118-AED189A49D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5FDEA2-F043-4106-BE35-A20351DEE90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101393",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10325",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications Calendar, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications Calendar de Oracle E-Business Suite (subcomponente: Applications Calendar). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Common Applications Calendar. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Common Applications Calendar, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Common Applications Calendar, así como acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Common Applications Calendar. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42766E4E-53EB-4D0A-B5C0-22C837358B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CE5B14-73FD-4CA5-BAE2-691751921914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB2E201-4BCD-42D6-B778-2066C81935B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C6B688-FF28-4BB5-9E46-2E5C2255C236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A7ABEA-5F19-4B68-8B4B-82CDCACE7CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25AE28-BDDA-4721-B8C2-98B566B91E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDED105C-76AC-440F-AD93-8E997F862E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AD5D9C-9146-472F-A435-86B5E144AF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101311",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10326",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications Calendar, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications Calendar de Oracle E-Business Suite (subcomponente: Applications Calendar). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Common Applications Calendar. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Common Applications Calendar, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Common Applications Calendar, así como acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Common Applications Calendar. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42766E4E-53EB-4D0A-B5C0-22C837358B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CE5B14-73FD-4CA5-BAE2-691751921914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB2E201-4BCD-42D6-B778-2066C81935B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C6B688-FF28-4BB5-9E46-2E5C2255C236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A7ABEA-5F19-4B68-8B4B-82CDCACE7CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25AE28-BDDA-4721-B8C2-98B566B91E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDED105C-76AC-440F-AD93-8E997F862E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AD5D9C-9146-472F-A435-86B5E144AF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101325",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10327",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Query). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101472",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10328",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Object Library de Oracle E-Business Suite (subcomponente: Diagnostics). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Application Object Library. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Oracle Application Object Library. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BD1423-F7EE-4B53-AE4B-DFA784F685C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95FED83-21C8-4035-BB1B-3C8A93D4645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411C3C4C-5513-4F7D-8D58-A39F21F43637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703E9DDC-8399-460B-95C3-90602BE65989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101372",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10329",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite (subcomponent: Reschedule Sales Orders). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Global Order Promising. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Global Order Promising accessible data as well as unauthorized access to critical data or complete access to all Oracle Global Order Promising accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Global Order Promising en Oracle E-Business Suite (subcomponente: Reschedule Sales Orders). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Global Order Promising. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de creación, supresión o modificación de datos de suma importancia o de todos los datos accesibles de Oracle Global Order Promising, así como el acceso sin autorización a datos de nivel de importancia crítico o todos los datos accesibles de Oracle Global Order Promising. CVSS 3.0 Base Score 9.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976EAED0-1E52-49A1-93F5-4AC273AE0C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234836D-25F1-4102-B08C-A3BEAE1EF5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C911FFD-A225-4079-9DCA-E2F7CF691735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7975826-4398-495A-9E3C-E1806F3C14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDD8245-8A6E-4A4E-B502-248AC120B68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD8DEB-A946-4592-8565-27A0D8A39FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867297D8-B5E0-4C82-A729-20CECD188EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_order_promising:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A411DD79-6113-438E-82D9-FB1CA383440C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101300",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10330",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications accessible data as well as unauthorized access to critical data or complete access to all Oracle Common Applications accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Common Applications de Oracle E-Business Suite (subcomponente: Gantt Server). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Common Applications. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de creación, supresión o modificación de datos de suma importancia o de todos los datos accesibles de Oracle Common Applications, así como el acceso sin autorización a datos de nivel de importancia crítico o todos los datos accesibles de Oracle Common Applications. CVSS 3.0 Base Score 9.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F4DED6-1E2A-4DD4-8D90-BD319DF993AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27227D-8844-4D2E-979D-91AAA657155E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5C9C61-EFCD-41CD-8EFB-A9ECBD7DCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20D8C53-46D2-409B-B24A-B6023F6DF4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0505D42-88E5-4DB5-BB6E-473522DF2B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5A3B47-AFA8-4912-AC55-22395873CEE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101298",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10331",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Object Library de Oracle E-Business Suite (subcomponente: Diagnostics). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Application Object Library. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Application Object Library. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BD1423-F7EE-4B53-AE4B-DFA784F685C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95FED83-21C8-4035-BB1B-3C8A93D4645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411C3C4C-5513-4F7D-8D58-A39F21F43637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3118706C-CD62-4E5A-9846-F083ECA5B799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703E9DDC-8399-460B-95C3-90602BE65989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101391",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10332",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Universal Work Queue en Oracle E-Business Suite (subcomponente: Administration). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Universal Work Queue. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Universal Work Queue. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933006D7-EF09-4CB5-BEA0-248625F74FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F917BA76-6DC0-431B-915A-E29AD635A316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2769037E-6154-47BF-BF90-03DA704706E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91551403-6301-417C-B0E5-89819163D28D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60045D6-BDDB-4EA7-9406-72D9522C7523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3194BAB-4DA8-4465-9D2D-4C5F1D598F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A46E76-BF9A-43C9-A95F-7BD59EF2C6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EC03D0-68A5-4FBE-8A7D-6ACF23B7399A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101376",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10333",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. While the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel UI Framework. CVSS 3.0 Base Score 7.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Siebel UI Framework de Oracle Siebel CRM (subcomponente: EAI). Las versiones compatibles que se han visto afectadas son la 16.0 y la 17.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un nivel bajo de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Siebel UI Framework. Aunque la vulnerabilidad está presente en Siebel UI Framework, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Siebel UI Framework, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Siebel UI Framework. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Siebel UI Framework. CVSS 3.0 Base Score 7.4 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA9E9A6-D9EF-4FA7-AB0B-8D2194483188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB54846-455E-4112-A8BD-7A9BC9BFD3BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101423",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10334",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Container). Las versiones soportadas que se han visto afectadas son la 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 y 12.2.1.2.0. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 4.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10335",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PT PeopleTools de Oracle PeopleSoft Products (subcomponente: Elastic Search). Las versiones compatibles que se han visto afectadas son la 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PT PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101458",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10336",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: Web Container). Las versiones soportadas que se han visto afectadas son la 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 y 12.2.1.2.0. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de Oracle WebLogic Server. CVSS 3.0 Base Score 5.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10337",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: Leisure). Las versiones soportadas que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Suite8. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101326",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10338",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Enterprise Portal). La versión compatible afectada es la 9.1.00. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub; así como en el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF0FC60-C5A5-4F4E-8BC4-26076B19E693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101464",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10339",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: WebConnect). Las versiones soportadas que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.9 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101352",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10340",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Import/Export). Las versiones compatibles que se han visto afectadas son la 2.8 y la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Simphony, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99805023-76DA-44A5-912E-74074E04B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101356",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10341",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión soportada afectada es Java Advanced Management Console: 2.7. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java Advanced Management Console. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Java Advanced Management Console. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 3.7 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C43ED75-1991-4137-8577-B5D02AC25E91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101451",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10342",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Advanced Management Console. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión soportada afectada es Java Advanced Management Console: 2.7. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso a la red mediante múltiples protocolos comprometa la seguridad de Java Advanced Management Console. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java Advanced Management Console. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C43ED75-1991-4137-8577-B5D02AC25E91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101428",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10343",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Import/Export). Las versiones compatibles que se han visto afectadas son la 2.8 y la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99805023-76DA-44A5-912E-74074E04B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101409",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10344",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Import/Export). Las versiones compatibles que se han visto afectadas son la 2.8 y la 2.9. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Hospitality Simphony, así como el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99805023-76DA-44A5-912E-74074E04B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101414",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10345",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:03.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) en Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 3.1 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB92D2-A529-4912-9D59-40EAC3F5D674"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101396",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10346",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Hotspot). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java SE y Java SE Embedded, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101315",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10347",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes JRockit y Java SE de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) en Java SE, JRockit. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101382",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10348",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Libraries). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) en Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101354",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10349",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: JAXP). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) en Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101348",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10350",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: JAX-WS). Las versiones compatibles que se han visto afectadas son Java SE: 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101341",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10351",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PT PeopleTools de Oracle PeopleSoft Products (subcomponente: Application Server). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado y con permisos de inicio de sesión en la infraestructura en la que se ejecuta PeopleSoft Enterprise PT PeopleTools comprometa la seguridad de PeopleSoft Enterprise PT PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 6.2 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101463",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10352",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebLogic Server de Oracle Fusion Middleware (subcomponente: WLS - Web Services). La versión compatible que se ven impactadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 y 12.2.1.3.0. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle WebLogic Server. Si bien la vulnerabilidad se encuentra en Oracle WebLogic Server, los ataques pueden tener un impacto significativo en productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle WebLogic Server, así como también una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle WebLogic Server y el acceso de lectura no autorizado a un Subconjunto de datos accesibles de Oracle WebLogic Server. CVSS 3.0 Puntuación Base 9.9 (Impactos de confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F4C533-DE42-463B-9D80-5D4C85BF1A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1728D5-E03B-49A0-849C-B722197AF054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102442",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10353",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Hotel Mobile accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Hotel Mobile. CVSS 3.0 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Hotel Mobile de Oracle Hospitality Applications (subcomponente: Suite8/RESTAPI). La versión compatible afectada es la 1.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Hotel Mobile. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Hospitality Hotel Mobile, así como en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Hotel Mobile. CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_hotel_mobile:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB46D614-C880-41F7-ABCC-707C0F127F84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101305",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10354",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Enterprise Portal). La versión compatible afectada es la 9.1.00. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PRTL Interaction Hub, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub; así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_prtl_interaction_hub:9.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF0FC60-C5A5-4F4E-8BC4-26076B19E693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101465",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10355",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Networking). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r28.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB92D2-A529-4912-9D59-40EAC3F5D674"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101369",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10356",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a la infraestructura en la que se ejecutan Java SE, Java SE Embedded, JRockit comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos de suma importancia o un acceso completo a todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. También puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a través de un servicio web. CVSS 3.0 Base Score 6.2 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101413",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10357",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por múltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Java SE y Java SE Embedded. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan código que no es de confianza (por ejemplo, código proveniente de internet) y que confían en la sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan código de confianza (por ejemplo, código instalado por un administrador). CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101355",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10358",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. While the vulnerability is in Oracle Hyperion Financial Reporting, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hyperion Financial Reporting de Oracle Hyperion (subcomponente: Workspace). La versión compatible afectada es la 11.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hyperion Financial Reporting. Aunque la vulnerabilidad está presente en Oracle Hyperion Financial Reporting, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hyperion Financial Reporting, así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hyperion Financial Reporting. CVSS 3.0 Base Score 6.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ACF6ED-134C-449C-8522-EB04EF251B00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101306",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10359",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion BI+ accessible data as well as unauthorized read access to a subset of Oracle Hyperion BI+ accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hyperion BI+ de Oracle Hyperion (subcomponente: UI and Visualization). La versión compatible afectada es la 11.1.2.4. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hyperion BI+. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hyperion BI+, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hyperion BI+. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_bi\\+:11.1.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194E285E-9DE0-4F3E-A505-974DFB2D1A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101317",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10360",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle WebCenter Content de Oracle Fusion Middleware (subcomponente: Content Server). Las versiones compatibles que se han visto afectadas son la 11.1.1.9.0, 12.2.1.1.0 y la 12.2.1.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle WebCenter Content. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle WebCenter Content, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de datos críticos o de todos los datos accesibles de Oracle WebCenter Content, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle WebCenter Content. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB7ABDC-88C1-465B-9C9B-301AB02F2487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0CC508-1DB4-4429-94BA-1AD7C4BC963F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_content:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6093FA14-1827-418D-882C-E53985CD6C42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101322",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10361",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. While the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Shipboard Property Management System de Oracle Hospitality Applications (subcomponente: OHC DRS). La versión compatible afectada es la 8.0.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Shipboard Property Management System. Aunque la vulnerabilidad está presente en Oracle Hospitality Cruise Shipboard Property Management System, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Shipboard Property Management System, además de en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 6.4 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_shipboard_property_management_system:8.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AAF638-8CC8-4E62-AC2F-CB667C79FA97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101418",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10362",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Sawbridge). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools, además de la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.2 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101467",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10363",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security). Supported versions that are affected are 11.3, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. Note: Contact Support for fixes. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 1.3, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 y la 12.4.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle FLEXCUBE Universal Banking. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle FLEXCUBE Universal Banking; así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle FLEXCUBE Universal Banking. Nota: Contacte con el equipo de soporte para las resoluciones. CVSS 3.0 Base Score 7.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE887AA-12E1-4923-8847-AE7AE4A58EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4703D070-2171-4501-9EF1-A417AB111D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501D0455-4A7E-496A-9D92-CD2A0E9ECC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B84AB-C16F-48B4-BFCE-DB87D607EC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C313ED-A2A5-4BD2-B88F-F8F5DA2DAFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4050-D40E-4D2E-91B9-5387B2464208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA52AE9-989E-40B4-A9CF-9E45EABEB54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DAFCA5-2BAD-4382-8AEB-862E10B87161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:12.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D55FB5-8ED8-4797-B5BC-545477AF7347"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101297",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039594",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10364",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Environment Mgmt). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Updates Environment Mgmt). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios con acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de creación, supresión o modificación de información crítica o de todos los datos accesibles de PeopleSoft Enterprise PeopleTools, así como en el acceso sin autorización a datos críticos o acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 8.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101466",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10365",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: InnoDB). Las versiones compatibles que se han visto afectadas son la 5.7.18 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de MySQL Server además de en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de MySQL Server. CVSS 3.0 Base Score 3.8 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.18",
            "matchCriteriaId" : "CBCF2BEB-1EE9-4A81-9660-0682D6AB2E71"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101429",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10366",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PT PeopleTools de Oracle PeopleSoft Products (subcomponente: Performance Monitor). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PT PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 9.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101455",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43594/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43594/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10367",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Engagement). Las versiones compatibles que se han visto afectadas son la 2.8 y la 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Simphony, así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99805023-76DA-44A5-912E-74074E04B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101422",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10368",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). Supported versions that are affected are 9.1.00 and 9.2.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise SCM eProcurement, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise SCM eProcurement de Oracle PeopleSoft Products (subcomponente: Manage Requisition Status). Las versiones compatibles que se han visto afectadas son la 9.1.00 y la 9.2.00. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise SCM eProcurement. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise SCM eProcurement, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise SCM eProcurement; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise SCM eProcurement. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:9.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11848EEB-CBAB-4BD2-9425-1151F5C88045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:9.2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DF15A1-89D5-4FED-819B-4CDF749C6949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101476",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10369",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Virtual Directory. Successful attacks of this vulnerability can result in takeover of Oracle Virtual Directory. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Virtual Directory de Oracle Fusion Middleware (subcomponente: Virtual Directory Server). Las versiones compatibles que se han visto afectadas son la 11.1.1.7.0 y la 11.1.1.9.0. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Virtual Directory. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Oracle Virtual Directory. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:virtual_directory:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107268A5-D6D6-4DF2-BBA0-AF5B5854887E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:virtual_directory:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0353A60E-9D18-45D9-AE01-DB645EABB764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101301",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10370",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Guest Access, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Guest Access accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Base). Las versiones compatibles que se han visto afectadas son la 4.2.0 y la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Guest Access. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Guest Access, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Hospitality Guest Access, así como el acceso sin autorización de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 6.9 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3DC116-2844-47A1-BEC2-D0675DD97148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101430",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10372",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. While the vulnerability is in Oracle Hospitality Guest Access, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Guest Access accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Guest Access. CVSS 3.0 Base Score 8.7 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Base). Las versiones soportadas que se han visto afectadas son la 4.2.0 y la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Guest Access. Aunque la vulnerabilidad está presente en Oracle Hospitality Guest Access, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado de creación, supresión o modificación de datos críticos o de todos los datos accesibles de Oracle Hospitality Guest Access, así como en la capacidad no autorizada de provocar el bloqueo o cierre inesperado, con frecuencia y de manera repetida (DoS completo) de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 8.7 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3DC116-2844-47A1-BEC2-D0675DD97148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101427",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10373",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:04.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Health Center). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PT PeopleTools de Oracle PeopleSoft Products (subcomponente: Health Center). Las versiones compatibles que se han visto afectadas son la 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PT PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101460",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10375",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data as well as unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Base). Las versiones compatibles que se han visto afectadas son la 4.2.0 y la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Guest Access. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Guest Access, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 4.6 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3DC116-2844-47A1-BEC2-D0675DD97148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101434",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10378",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: Optimizer). Las versiones compatibles que se han visto afectadas son la 5.5.57 y anteriores, 5.6.37 y anteriores, y la 5.7.11 y anteriores. Un vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.57",
            "matchCriteriaId" : "4E699C4A-5A59-47DD-B929-E5BE01D72E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.37",
            "matchCriteriaId" : "2756511A-C54C-49FE-BD24-868457C8B9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.11",
            "matchCriteriaId" : "04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.58",
            "matchCriteriaId" : "1FDD13AB-E86E-424B-80C8-6C917BDD62D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.33",
            "matchCriteriaId" : "2DBC4735-30CE-48A2-8D6D-5C291A00162B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.29",
            "matchCriteriaId" : "53B3CC39-BD71-4104-8CC6-7B92B2EFEC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.10",
            "matchCriteriaId" : "9CAD3CAD-7960-408C-B159-D514A6584D41"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101375",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1258",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4341",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10379",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Client programs). Las versiones compatibles que se han visto afectadas son la 5.5.57 y anteriores, 5.6.37 y anteriores, y la 5.7.19 y anteriores. Un vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.57",
            "matchCriteriaId" : "4E699C4A-5A59-47DD-B929-E5BE01D72E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.37",
            "matchCriteriaId" : "2756511A-C54C-49FE-BD24-868457C8B9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "21B280C8-532C-4C12-98DA-75E8254AB1E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.57",
            "matchCriteriaId" : "A0CDB8FC-7764-4218-AF71-29300E292B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.32",
            "matchCriteriaId" : "C2A1395D-DD3D-4470-A881-AC2F7A443BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.26",
            "matchCriteriaId" : "639D0A69-301F-4C14-9A98-AF208CD31F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101415",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10380",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión compatible afectada es Java Advanced Management Console: 2.7. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a la red por HTTP comprometa la seguridad de Java Advanced Management Console. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java Advanced Management Console, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Java Advanced Management Console; así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Java Advanced Management Console. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C43ED75-1991-4137-8577-B5D02AC25E91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101450",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10381",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: PIA Core Technology). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101470",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10382",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: PIA Core Technology). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 4.7 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101475",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10383",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Interface). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Guest Access de Oracle Hospitality Applications (subcomponente: Interface). Las versiones compatibles que se han visto afectadas son la 4.2.0 y la 4.2.1. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Guest Access. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Guest Access. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3DC116-2844-47A1-BEC2-D0675DD97148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101436",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10384",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Server: DDL). Las versiones compatibles que se han visto afectadas son la 5.5.57 y anteriores, 5.6.37 y anteriores y la 5.7.19 y anteriores. Un vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre frecuente y repetido (DoS completo) de MySQL Server. CVSS 3.0 Base Score 6.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.57",
            "matchCriteriaId" : "4E699C4A-5A59-47DD-B929-E5BE01D72E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.37",
            "matchCriteriaId" : "2756511A-C54C-49FE-BD24-868457C8B9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.19",
            "matchCriteriaId" : "21B280C8-532C-4C12-98DA-75E8254AB1E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.57",
            "matchCriteriaId" : "A0CDB8FC-7764-4218-AF71-29300E292B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.32",
            "matchCriteriaId" : "C2A1395D-DD3D-4470-A881-AC2F7A443BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.26",
            "matchCriteriaId" : "639D0A69-301F-4C14-9A98-AF208CD31F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.8",
            "matchCriteriaId" : "F782A66A-6419-4124-8B0E-5F2BCCF209E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101406",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10385",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Web Container). Las versiones compatibles que se han visto afectadas son la 3.0.1 y la 3.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle GlassFish Server. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle GlassFish Server; así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle GlassFish Server, además de en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Oracle GlassFish Server. CVSS 3.0 Base Score 6.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101360",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10386",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java Advanced Management Console de Oracle Java SE (subcomponente: Server). La versión soportada afectada es Java Advanced Management Console: 2.7. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Java Advanced Management Console. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Java Advanced Management Console, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Java Advanced Management Console, así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Java Advanced Management Console. CVSS 3.0 Base Score 4.8 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_advanced_management_console:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C43ED75-1991-4137-8577-B5D02AC25E91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101443",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10387",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle CRM Technical Foundation de Oracle E-Business Suite (subcomponente: Preferences). Las versiones compatibles que se han visto afectadas son la 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle CRM Technical Foundation. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle CRM Technical Foundation. CVSS 3.0 Base Score 4.3 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA1DB0-002D-4237-89C5-C5A80468641B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA70943-1CEE-4520-A304-1DAA26EAF4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6436020A-CEFD-4197-8DEF-9DE173B8F2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6481EF2E-3030-4162-B142-97FF254FA581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18AC792-50EE-4EC7-8449-089D3D790D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_relationship_management_technical_foundation:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098D6CD0-398D-43B8-902D-AD205BF786C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101404",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10388",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Libraries). Las versiones compatibles que se han visto afectadas son Java SE: 6u161, 7u151, 8u144 y 9; Java SE Embedded: 8u144. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por Kerberos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE y Java SE Embedded. Nota: Esto afecta al cliente de Kerberos de Java SE. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7037AEF9-403D-43EC-ABBB-B46619241586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "B781F1F7-DE18-41F7-83C1-8690B0884DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "6D36F2A6-1329-4D74-BADC-C22D46CF7CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270968EC-7662-41E1-BA9B-D259BEC53A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "71219100-B476-4062-A40A-13F1B8C7DAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC055BA-0D21-4D2B-AC9B-B81B8468860C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66910F84-DDFD-4BA8-BE7F-44EB5E3F9C3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.3",
            "matchCriteriaId" : "BD075607-09B7-493E-8611-66D041FFDA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.5",
            "matchCriteriaId" : "0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*",
            "matchCriteriaId" : "280520BC-070C-4423-A633-E6FE45E53D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC59D-6182-4B5E-96B5-226FCD343916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "E32A4C2E-3DA6-4BE5-9D95-9F800B01ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "7.1",
            "matchCriteriaId" : "1A79A7B7-2CE9-4F5E-B76D-01A882C66226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
            "matchCriteriaId" : "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "6BF60DAD-DAA2-4543-B82E-8E17F7B1DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "1E35D95E-CCBF-4335-A4DB-02218BA172DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "13270F58-E106-48CE-9933-E68AABBBFC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923F6B82-6A8B-4994-89F6-C430775D5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "7.2",
            "matchCriteriaId" : "B7B42CB6-3C14-4183-AFA8-C3682F8B54AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "2AA40F7F-504D-47A9-9778-EC4CE46EB8BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101321",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10389",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: PMS). Las versiones compatibles que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que consiga iniciar sesión en la infraestructura en la que se ejecuta Oracle Hospitality Suite8 comprometa la seguridad de Oracle Hospitality Suite8. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Suite8, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Suite8; así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Suite8, además de en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.7 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.7,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101457",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10391",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Administration). Las versiones compatibles que se han visto afectadas son la 3.0.1 y la 3.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle GlassFish Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle GlassFish Server; así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle GlassFish Server, además de en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Oracle GlassFish Server. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101347",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10392",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.30. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado, frecuente y repetido (DoS completo) de Oracle VM VirtualBox, así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:5.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97DAF25C-3AD3-4E31-B312-5C4430483E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101368",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10393",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Web Container). Las versiones compatibles que se han visto afectadas son la 3.0.1 y la 3.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle GlassFish Server. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle GlassFish Server; así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle GlassFish Server, además de en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) en Oracle GlassFish Server. CVSS 3.0 Base Score 6.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101364",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10394",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios con acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools; así como en la capacidad no autorizada de provocar provocar una denegación de servicio parcial (DoS parcial) de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.4 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101474",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10395",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Fleet Management de Oracle Hospitality Applications (subcomponente: GangwayActivityWebApp). La versión compatible afectada es la 9.0.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Fleet Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Cruise Fleet Management; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A33B6F-3CCA-4103-9DE2-6C7A4AFA21C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101438",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10396",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere). Supported versions that are affected are 2.2.5.0, 2.2.6.0 and 2.2.7.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise AffairWhere executes to compromise Oracle Hospitality Cruise AffairWhere. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Cruise AffairWhere, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Cruise AffairWhere. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise AffairWhere de Oracle Hospitality Applications (subcomponente: AffairWhere). Las versiones compatibles que se han visto afectadas son la 2.2.5.0, 2.2.6.0 y la 2.2.7.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality Cruise AffairWhere comprometa la seguridad de Oracle Hospitality Cruise AffairWhere. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Cruise AffairWhere, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la toma de control de Oracle Hospitality Cruise AffairWhere. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_affairwhere:2.2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7AD96-8A38-407D-983B-F0766678EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_affairwhere:2.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771E0C34-9888-4094-A894-ECB063D2CE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_affairwhere:2.2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E9DA71-6D2A-49C5-8CE0-8AA0631EB70B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101440",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10397",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Cruise Fleet Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Fleet Management de Oracle Hospitality Applications (subcomponente: BaseMasterPage). La versión compatible afectada es la 9.0.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Fleet Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Cruise Fleet Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Hospitality Cruise Fleet Management; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 6.1 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A33B6F-3CCA-4103-9DE2-6C7A4AFA21C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101447",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10398",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Fleet Management executes to compromise Oracle Hospitality Cruise Fleet Management. While the vulnerability is in Oracle Hospitality Cruise Fleet Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Fleet Management de Oracle Hospitality Applications (subcomponente: BaseMasterPage). La versión compatible afectada es la 9.0.2.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality Cruise Fleet Management comprometa la seguridad de Oracle Hospitality Cruise Fleet Management. Aunque la vulnerabilidad está presente en Oracle Hospitality Cruise Fleet Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la creación, supresión o modificación sin autorización de datos críticos o de todos los datos accesibles de Oracle Hospitality Cruise Fleet Management, así como el acceso sin autorización a datos críticos o a todos los datos accesibles de Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 8.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A33B6F-3CCA-4103-9DE2-6C7A4AFA21C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101452",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10399",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp). The supported version that is affected is 9.0.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Fleet Management de Oracle Hospitality Applications (subcomponente: GangwayActivityWebApp). La versión compatible afectada es la 9.0.2.0. Una vulnerabilidad difícilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Cruise Fleet Management. Los ataques exitosos a esta vulnerabilidad pueden resultar en la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 3.1 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A33B6F-3CCA-4103-9DE2-6C7A4AFA21C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101449",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10400",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle GlassFish Server de Oracle Fusion Middleware (subcomponente: Administration Graphical User Interface). La versión compatible afectada es la 3.1.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle GlassFish Server. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle GlassFish Server; así como en el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle GlassFish Server. CVSS 3.0 Base Score 5.4 (impactos en la confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8196D0-06A9-4A0B-8864-AA8E8CF2DDB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101383",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10401",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMSUpdater). The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Materials Management executes to compromise Oracle Hospitality Cruise Materials Management. While the vulnerability is in Oracle Hospitality Cruise Materials Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Cruise Materials Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Materials Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Cruise Materials Management. CVSS 3.0 Base Score 8.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Cruise Materials Management de Oracle Hospitality Applications (subcomponente: MMSUpdater). La versión compatible afectada es la 7.30.564.0. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle Hospitality Cruise Materials Management comprometa la seguridad de Oracle Hospitality Cruise Materials Management. Aunque la vulnerabilidad está presente en Oracle Hospitality Cruise Materials Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado de creación, supresión o modificación de datos críticos o de todos los datos accesibles de Oracle Hospitality Cruise Materials Management; así como en el acceso no autorizado a un subconjunto de datos accesibles de Oracle Hospitality Cruise Materials Management y la capacidad no autorizada de provocar un bloqueo o un cierre inesperado, con frecuencia y de manera repetida (DoS completo) de Oracle Hospitality Cruise Materials Management. CVSS 3.0 Base Score 8.7 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_materials_management:7.30.564.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2124E849-979F-40FA-A477-655C1211BDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101453",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10402",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: Report). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Aunque la vulnerabilidad está presente en Oracle Hospitality Reporting and Analytics, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la toma de control de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 10.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101407",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10403",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). Supported versions that are affected are 8.5.1 and 9.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: iQuery). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad difícilmente explotable permite que un atacante con pocos privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Hospitality Reporting and Analytics, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la toma de control de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101399",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10404",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: iQuery). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Aunque la vulnerabilidad está presente en Oracle Hospitality Reporting and Analytics, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la toma de control de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101403",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10405",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Reporting and Analytics de Oracle Hospitality Applications (subcomponente: Report). Las versiones compatibles que se han visto afectadas son la 8.5.1 y la 9.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Reporting and Analytics. Aunque la vulnerabilidad está presente en Oracle Hospitality Reporting and Analytics, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Hospitality Reporting and Analytics, así como la capacidad no autorizada de provocar un bloqueo o un cierre inesperado, con frecuencia y de manera repetida (DOS completo) de Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.2 (impactos en la confidencialidad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2764A9-963E-484B-B992-1F9BCC85403F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57D620E-1E9A-495A-989F-D657B0701D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101394",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10406",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:05.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: PIA Core Technology). Las versiones compatibles que se han visto afectadas son la 8.54, 8.55 y 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en PeopleSoft Enterprise PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.1 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101471",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10407",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.30. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.28",
            "matchCriteriaId" : "2F31E204-91B3-49E4-A937-9B51479F323E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101370",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10408",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.30. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a la capacidad no autorizada de provocar el bloqueo o cierre inesperado repetido (DoS completo) de Oracle VM VirtualBox, así como la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle VM VirtualBox. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.28",
            "matchCriteriaId" : "2F31E204-91B3-49E4-A937-9B51479F323E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101371",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10409",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Merchant UI). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: Merchant UI). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle iStore. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iStore, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle iStore; así como al acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle iStore. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0050E830-3AB1-4D5B-BEB4-A46EC6418599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101332",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10410",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: Search). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Knowledge Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Knowledge Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Knowledge Management; así como en la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Knowledge Management. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFD2181-F646-41B6-A871-0FDF45F81F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFDEB88-9F68-406C-96A6-F1335D06AFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EDFAFC-0252-4BCA-BA73-6B4DDF0D86F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE0F6C7-5CE2-411E-832D-D5E450E12F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C18FB1-61B8-4C0B-B434-138E2BE75363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101340",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10411",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Knowledge Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Knowledge Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Knowledge Management; así como en la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Knowledge Management. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFD2181-F646-41B6-A871-0FDF45F81F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFDEB88-9F68-406C-96A6-F1335D06AFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EDFAFC-0252-4BCA-BA73-6B4DDF0D86F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE0F6C7-5CE2-411E-832D-D5E450E12F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C18FB1-61B8-4C0B-B434-138E2BE75363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101345",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10412",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Knowledge Management de Oracle E-Business Suite (subcomponente: User Interface). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Knowledge Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Knowledge Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Knowledge Management; así como en la actualización, inserción o eliminación sin autorización de algunos de los datos accesibles de Oracle Knowledge Management. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0231892-2983-4811-8987-8AADD602B1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C81FB17-E715-4B6C-A6D4-01438798559E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1B5BAE-472F-4279-8FF9-84B34CB6073E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFD2181-F646-41B6-A871-0FDF45F81F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFDEB88-9F68-406C-96A6-F1335D06AFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EDFAFC-0252-4BCA-BA73-6B4DDF0D86F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE0F6C7-5CE2-411E-832D-D5E450E12F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C18FB1-61B8-4C0B-B434-138E2BE75363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101349",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10413",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Multiplatform Based on HTML5). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Mobile Field Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Field Service accessible data as well as unauthorized update, insert or delete access to some of Oracle Mobile Field Service accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Mobile Field Service de Oracle E-Business Suite (subcomponente: Multiplatform Based on HTML5). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vunerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Mobile Field Service. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Mobile Field Service, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Mobile Field Service; así como en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Mobile Field Service. CVSS 3.0 Base Score 8.2 (Impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01F6997-6176-4F33-B678-B21E8A9A1272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED2BD99-133B-4776-8B7C-45E4AFA8952B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF26E95A-C965-4488-9824-04007CCD705A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB5D188-2A4E-4F18-92B1-0367E1D9154F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D4751B-EB9D-40A5-AA64-A1C1DDDC2825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C130219-F5A1-4FFD-B99E-1FD33D967A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162B4CBD-DCD4-4C93-8DE7-B50D49C3F1E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897BB026-C2E4-42DE-89A5-29E6392079C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101353",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10414",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Checkout and Order Placement). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iStore de Oracle E-Business Suite (subcomponente: Checkout and Order Placement). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle iStore. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iStore, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle iStore; así como al acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle iStore. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F97E907-8C38-44D8-8787-E7BD95B3ACE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC7EAC-DC83-466B-BEC7-459E82DF014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B70A22F-D67A-4BF6-AF17-686BF3A9BCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355653B-79DD-4DCB-83CA-066BE4D8D9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91551D-F3E4-4852-A333-733A28F49CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E501CF6-0457-4160-9FD9-14B903219DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E835828-6E56-472F-B497-DB5D90FF49F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0050E830-3AB1-4D5B-BEB4-A46EC6418599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101330",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10415",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Others). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle iSupport de Oracle E-Business Suite (subcomponente: Otros). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 y la 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle iSupport. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle iSupport, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iSupport; así como en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle iSupport. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C39B616-E8F9-4478-9402-962E55FDDB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922FFA2-7265-4AA1-9AFB-792F28EE665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8596ADA1-FA00-461B-87B4-D44C0FD1387F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8983A006-E184-4E74-9032-7070CF7E666E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A49365-DADC-46B6-AD8F-51BD82508039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CEE9EB-A0DD-4344-8420-31CF673AB9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89183608-9229-4AB1-BCFB-DF318D02EC34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079226AF-0F3A-4CC5-8772-C4F1EC145E34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101336",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10416",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration). Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: Setup and Configuration). Las versiones compatibles que se han visto afectadas son la 12.2.3, 12.2.4, 12.2.5, 12.2.6 y 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Advanced Outbound Telephony. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Advanced Outbound Telephony, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony; así como en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Advanced Outbound Telephony. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4B9A71-8D45-4221-A2C0-46E8F8F3552E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101303",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10417",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration). Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Advanced Outbound Telephony de Oracle E-Business Suite (subcomponente: Setup and Configuration). Las versiones compatibles que se han visto afectadas son la 12.2.3, 12.2.4, 12.2.5, 12.2.6 y 12.2.7. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Advanced Outbound Telephony. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Advanced Outbound Telephony, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Advanced Outbound Telephony; así como en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Advanced Outbound Telephony. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15AB8DB-60DD-4FD7-9F97-8F0459B1FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56861AF1-AFA5-4329-98C7-B92353F33F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9720F7-DDB2-4357-B4CE-B53A0473F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E684AD-56C2-4424-B42E-90577DCEF203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_outbound_telephony:12.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4B9A71-8D45-4221-A2C0-46E8F8F3552E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101308",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10418",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. While the vulnerability is in PeopleSoft Enterprise PT PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PT PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PT PeopleTools de Oracle PeopleSoft Products (subcomponente: PeopleSoft CDA). La versión compatible afectada es la 8.56. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PT PeopleTools. Aunque la vulnerabilidad está presente en PeopleSoft Enterprise PT PeopleTools, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de PeopleSoft Enterprise PT PeopleTools; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 6.4 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101462",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10419",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: PMS). Las versiones compatibles que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado que consiga iniciar sesión en la infraestructura en la que se ejecuta Oracle Hospitality Suite8 comprometa la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Hospitality Suite8; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.1 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10420",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. While the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Suite8. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: Leisure). Las versiones compatibles que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Aunque la vulnerabilidad está presente en Oracle Hospitality Suite8, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Hospitality Suite8; así como en la capacidad no autorizada de provocar provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Suite8. CVSS 3.0 Base Score 6.4 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101323",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10421",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Suite8 de Oracle Hospitality Applications (subcomponente: Leisure). Las versiones compatibles que se han visto afectadas son la 8.10.1 y la 8.10.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Suite8. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5076C-8011-434B-B352-A8CF77022DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA65DE-5727-49DC-8D50-DA81DB3E8841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101320",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10422",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft Products (subcomponente: Updates Change Assistant). La versión compatible afectada es la 8.54. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.9 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD82442-3535-4BB9-8888-F61A35B900AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101473",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10423",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Back Office. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Back Office, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Back Office accessible data as well as unauthorized read access to a subset of Oracle Retail Back Office accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Back Office de Oracle Retail Applications (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 13.2, 13.3, 13.4, 14.0 y la 14.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Retail Back Office. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Retail Back Office, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Retail Back Office; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Retail Back Office. CVSS 3.0 Base Score 5.4 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2864BB3F-7D66-4BA1-A8F2-5C25B1AACCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56745BD2-4BAE-407F-A926-396614CED669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8341F73-256B-4FB8-B02D-CCCDACC63662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C7EEA3-AA72-48DA-A112-2923DBB37773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0735989-13BD-40B3-B954-AC0529C5B53D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101342",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101380",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10424",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Web). Supported versions that are affected are 3.2.8.2223 and earlier, 3.3.4.3247 and earlier and 3.4.2.4181 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente MySQL Enterprise Monitor de Oracle MySQL (subcomponente: Monitoring: Web). Las versiones compatibles que se han visto afectadas son la 3.2.8.2223 y anteriores, 3.3.4.3247 y anteriores, y 3.4.2.4181 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de MySQL Enterprise Monitor. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.8 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2522B9B6-8531-4F62-A0CB-7D530126EA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D1A084-0E6F-42C4-BFB5-A73A3B239C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCDCF3-537E-4DF6-ABFB-C82ABC1827A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAE8792-A771-41EF-8B55-331CDD371583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA1C856-8C8A-4F1E-AF5D-1089BBD8DA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63443FA-9B7D-4953-B6D5-B28679979152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABDC2B7E-CED9-4E8D-B026-629429A81723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460F26CF-5D62-4132-8311-38B1512F50CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8A48C0-98A9-4B4B-BEC8-376A3FA38484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AB9578-36ED-4F7F-9BB7-FD3D5A567157"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1049B5-ABFB-46A8-8683-CF54E81F92F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5564F5D5-AFA7-4718-98A6-0B21919BB482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B584B54-55D1-4915-BD42-6FDA1B6645F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D88D80-A57E-4EF6-B469-566B642E6344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A956452-7FF0-418C-B550-65E9C37D010C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC623CA8-99D0-4F66-9869-FE6802959864"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E87C6E9-D134-4328-9093-B005281A974C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C85E25-47B3-4BC8-95FB-760EF3BC203B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44330E8E-FF3A-41D6-AF2A-AAD0E5579539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516BDF1C-3C84-4E95-8A23-5655F893E311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101381",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171019-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10425",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host). Supported versions that are affected are 2.6, 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Hospitality Simphony de Oracle Hospitality Applications (subcomponente: Service Host). Las versiones compatibles que se han visto afectadas son la 2.6, 2.7 , 2.7 y 2.9. Una vulnerabilidad fácilmente explotable permite que un atacante con un nivel bajo de privilegios que tenga acceso a red por HTTP comprometa la seguridad de Oracle Hospitality Simphony. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Hospitality Simphony; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.4 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B2EA67-461A-4C8C-8317-3BA26C1A6D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "960FBF0B-6439-4108-9C7D-28D2D7EAFC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99805023-76DA-44A5-912E-74074E04B6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48F8FA7-0019-4D40-A9C9-9E02229399AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101366",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10426",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise FSCM de Oracle PeopleSoft Products (subcomponente: Staffing Front Office). La versión compatible afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios que tenga acceso a red por HTTP comprometa la seguridad de PeopleSoft Enterprise FSCM. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización de un subconjunto de datos accesibles de PeopleSoft Enterprise FSCM. CVSS 3.0 Base Score 2.7 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_staffing_front_office:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406D9847-F366-4177-B5CC-A104200489AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101481",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10427",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. While the vulnerability is in Oracle Retail Xstore Point of Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Point of Service accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Retail Xstore Point of Service de Oracle Retail Applications (subcomponente: Point of Sale). Las versiones compatibles que se han visto afectadas son la 6.0.11, 6.5.11, 7.0.6, 7.1.6 y 15.0.1. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Retail Xstore Point of Service. Aunque la vulnerabilidad está presente en Oracle Retail Xstore Point of Service, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle Retail Xstore Point of Service; así como en el acceso de lectura sin autorización de un subconjunto de datos accesibles de Oracle Retail Xstore Point of Service y la capacidad no autorizada de provocar una denegación de servicio parcial (DOS parcial) de Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.5 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A0E714-AC23-49B5-A36C-D10FA4699561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1223C57-DA2C-42C0-9DCC-6124DF3AE67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B3354D-3929-4AEC-AAE0-7F573341FD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55901EF7-B71C-40B3-B276-FDA6381F051F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385D40CC-5AA0-4DAB-A2E7-F3A3CFF95BA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101339",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101388",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10428",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle VM VirtualBox de Oracle Virtualization (subcomponente: Core). La versión compatible afectada es anterior a la 5.1.30. Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle VM VirtualBox comprometa la seguridad de Oracle VM VirtualBox. Aunque la vulnerabilidad está presente en Oracle VM VirtualBox, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o eliminación de algunos de los datos accesibles de Oracle VM VirtualBox, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Hospitality Simphony. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.7,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.28",
            "matchCriteriaId" : "2F31E204-91B3-49E4-A937-9B51479F323E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101362",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3444",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Trade Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Trade Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Trade Management accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Trade Management de Oracle E-Business Suite (subcomponente: User Interface). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Trade Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Trade Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Trade Management; así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Trade Management. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17330DA-F5A0-44D5-B13B-10FABC1E380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567A0B2A-C3C0-4ED3-8056-0E969C0E04BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052E5398-3C7A-4B39-BC3D-4F41153E50FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582482AE-EA46-4358-A5D6-3626AEEC7214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4288D1D-472D-4745-A8FE-B60CEECB5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78496FA-33CF-4458-882D-3B66D4F5C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B3A842-8598-4822-A3FD-4C3A3416E22F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101358",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3445",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Trade Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Trade Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Trade Management accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Trade Management de Oracle E-Business Suite (subcomponente: User Interface). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Trade Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Trade Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Trade Management; así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Trade Management. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17330DA-F5A0-44D5-B13B-10FABC1E380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567A0B2A-C3C0-4ED3-8056-0E969C0E04BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052E5398-3C7A-4B39-BC3D-4F41153E50FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582482AE-EA46-4358-A5D6-3626AEEC7214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4288D1D-472D-4745-A8FE-B60CEECB5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78496FA-33CF-4458-882D-3B66D4F5C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B3A842-8598-4822-A3FD-4C3A3416E22F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101361",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3446",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:06.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Trade Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Trade Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Trade Management accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Trade Management de Oracle E-Business Suite (subcomponente: User Interface). Las versiones compatibles que se han visto afectadas son la 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 y la 12.2.6. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTP comprometa la seguridad de Oracle Trade Management. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Trade Management, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Trade Management; así como en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle Trade Management. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17330DA-F5A0-44D5-B13B-10FABC1E380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567A0B2A-C3C0-4ED3-8056-0E969C0E04BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052E5398-3C7A-4B39-BC3D-4F41153E50FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582482AE-EA46-4358-A5D6-3626AEEC7214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4288D1D-472D-4745-A8FE-B60CEECB5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78496FA-33CF-4458-882D-3B66D4F5C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:12.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B3A842-8598-4822-A3FD-4C3A3416E22F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101365",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3588",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-19T17:29:07.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris Cluster accessible data as well as unauthorized access to critical data or complete access to all Solaris Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris Cluster. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Solaris Cluster de Oracle Sun Systems Products Suite (subcomponente: HA for MySQL). Las versiones compatibles que se han visto afectadas son la 3.3 y la 4.3. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado que tenga permisos de inicio de sesión en la infraestructura en la que se ejecuta Solaris Cluster comprometa la seguridad de Solaris Cluster. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de creación, supresión o modificación de datos críticos o de todos los datos accesibles de Solaris Cluster; así como en el acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Solaris Cluster, además de la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Solaris Cluster. CVSS 3.0 Base Score 7.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:solaris_cluster:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FFE725-7FE0-4236-82D1-3025EFCD0190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:solaris_cluster:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39081BA5-E70C-4ACB-B98C-E264AAEFD6C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101435",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039601",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10955",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-19T19:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by default. When parsing the preScript parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM. Was ZDI-CAN-4697. NOTE: Dell EMC disputes that this is a vulnerability"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de EMC Data Protection Advisor 6.3.0. Se requiere autenticación para explotar esta vulnerabilidad. El fallo específico existe en el servicio EMC DPA Application que escucha en el puerto TCP 9002 por defecto. Cuando se analiza sintácticamente el parámetro preScript, el proceso no valida correctamente una cadena proporcionada por el usuario antes de emplearla para ejecutar una llamada del sistema. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del sistema. Anteriormente era ZDI-CAN-4697. NOTA: Dell EMC discute que esto sea una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:data_protection_advisor:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF0EB8B-2808-4853-BF33-F8BA3115E772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101008",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-812",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T19:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the \"draggable feeds\" feature."
      }, {
        "lang" : "es",
        "value" : "tasks/feed/readRSS.cfm en el CMS de Mura, en versiones anteriores a la 6.2, permite que los atacantes omitan restricciones de acceso previstas aprovechando la característica \"draggable feeds\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getmura:mura_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "35B8DF0D-B93A-4F7D-A39A-8E9D50FB3E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.getmura.com/blog/critical-security-update-for-mura-cms-version-6-1-and-earlier/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101603",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43045/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.getmura.com/blog/critical-security-update-for-mura-cms-version-6-1-and-earlier/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43045/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T19:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file."
      }, {
        "lang" : "es",
        "value" : "En lsx_aiffstartread en aiff.c en Sound eXchange (SoX), versión 14.4.2, hay una vulnerabilidad de uso de memoria previamente liberada, desencadenada mediante un archivo AIFF mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99FA8E2-5333-47D1-AC0D-5C3FF7DF8D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/sox/bugs/297/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/sox/bugs/298/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/sox/bugs/297/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/sox/bugs/298/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5635",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-19T20:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the \"anonymous\" user."
      }, {
        "lang" : "es",
        "value" : "En Apache NiFi, en versiones anteriores a la 0.7.2 y versiones 1.x, anteriores a la 1.1.2, en un entorno de clúster, si se copia la petición de un usuario anónimo a otro nodo, se utiliza la identidad del nodo que la originó en lugar de la del usuario \"anónimo\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453452AE-C26A-4213-B688-82459159A5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1A5996-DFC3-4C9E-ABE0-CAF6FCEEF177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B8572D-CA8D-4A41-B94A-A393A22B5B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FDA5E5-6A45-4979-9317-75623A59089F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96730",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-5635",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-5635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5636",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-19T20:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node."
      }, {
        "lang" : "es",
        "value" : "En Apache NiFi, en versiones anteriores a la 0.7.2 y versiones 1.x, anteriores a la 1.1.2, en un entorno de clúster, la serialización o deserialización de la cadena proxy es vulnerable a un ataque de inyección en el que un nombre de usuario cuidadosamente manipulado podría suplantar a otro usuario y obtener sus permisos en una petición copiada a otro nodo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453452AE-C26A-4213-B688-82459159A5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1A5996-DFC3-4C9E-ABE0-CAF6FCEEF177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B8572D-CA8D-4A41-B94A-A393A22B5B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FDA5E5-6A45-4979-9317-75623A59089F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96731",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-5636",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-5636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10933",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2017-10-19T21:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones anteriores a la V2.06.00.00 de ZTE ZXDT22 SF01, un sistema de monitorización de ZTE energy product, se ven afectadas por una vulnerabilidad de salto de directorio que permite que atacantes remotos lean archivos arbitrarios en el sistema mediante un nombre de ruta completo después de la dirección del host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxdt22_sf01_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v2.06.00.00",
            "matchCriteriaId" : "BF0B856D-169F-4622-9271-BB738AE84961"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxdt22_sf01:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF580C7-ADB1-4E89-8012-BB7652669EEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008582",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client to initiate an update transaction by modifying an update field within an HTTP 200 response, so that it refers to a nonexistent update. The attacker then modifies the HTTP 404 response so that it specifies a successfully found update, with a Trojan horse executable file (e.g., guardxup.exe) and the correct CRC32 checksum for that file."
      }, {
        "lang" : "es",
        "value" : "Un atacante de red activo (Man in the Middle o MiTM) puede conseguir la ejecución remota de código en una máquina que ejecute IKARUS Anti Virus, versión 2.16.7. IKARUS AV para Windows utiliza HTTP en texto no cifrado para actualizaciones, junto con una suma de comprobación CRC32 y un valor de actualización para la verificación de los archivos descargados. Primero, el atacante fuerza al cliente a iniciar una operación de actualización modificando un campo de actualización en una respuesta HTTP 200, de forma que haga referencia a una actualización inexistente. Entonces, el atacante modifica la respuesta HTTP 400 para que especifique que se ha encontrado una actualización con éxito, con un archivo ejecutable troyano (ej.: guardxup.exe) y la suma de comprobación CRC32 correcta para este archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:ikarus_antivirus:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14789BE5-F4C5-463D-9335-058C2FBC341D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000."
      }, {
        "lang" : "es",
        "value" : "Existe SSRF en Webmin 1.850 mediante PATH_INFO a tunnel/link.cgi, como se ha demostrado por una petición GET para tunnel/link.cgi/http://INTRANET-IP:8000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.850",
            "matchCriteriaId" : "A946EA8C-A37B-497C-96F0-68F5AD312139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/0c58892732ee7610a7abba5507614366d382c9c9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/0c58892732ee7610a7abba5507614366d382c9c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Existe CSRF en Webmin 1.850. Enviando una petición GET a at/create_job.cgi que contenga dir=/cmd= en la URI, un atacante puede ejecutar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.850",
            "matchCriteriaId" : "A946EA8C-A37B-497C-96F0-68F5AD312139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/0c58892732ee7610a7abba5507614366d382c9c9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/0c58892732ee7610a7abba5507614366d382c9c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager' menu, there is a 'Download from remote URL' option to download a file from a remote server. After setting up a malicious server, one can wait for a file download request and then send an XSS payload that will lead to Remote Code Execution, as demonstrated by an OS command in the value attribute of a name='cmd' input element."
      }, {
        "lang" : "es",
        "value" : "Webmin, en versiones anteriores a la 1.860, tiene XSS que puede resultar en la ejecución remota de código. En el menú \"Others/File Manager\", hay una opción \"Download from remote URL\" (descarga desde URL remota) para descargar un archivo desde un servidor remoto. Después de establecer un servidor malicioso, el atacante puede esperar una petición de descarga de archivo y entonces enviar un payload XSS que dará lugar a la ejecución remota de código. Esto ha sido demostrado por un comando de sistema operativo en el atributo valor de un elemento de entrada name='cmd'."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.850",
            "matchCriteriaId" : "A946EA8C-A37B-497C-96F0-68F5AD312139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/0c58892732ee7610a7abba5507614366d382c9c9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/0c58892732ee7610a7abba5507614366d382c9c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value."
      }, {
        "lang" : "es",
        "value" : "En routers FiberHome, existe salto de directorio en /cgi-bin/webproc, mediante el parámetro getpage junto con un valor manipulado var:page."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:routerfiberhome_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219124-8B2D-4D4C-A08C-AE50D027FDE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.7.3 de PHPSUGAR PHP Melody, page_manager.php tiene XSS mediante el parámetro page_title."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsugar:php_melody:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.2",
            "matchCriteriaId" : "204C8A82-17FB-4DB6-89E1-EB93CAFEF852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T22:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346."
      }, {
        "lang" : "es",
        "value" : "net/packet/af_packet.c en versiones anteriores a la 4.13.6 del kernel de Linux permite que usuarios locales obtengan privilegios mediante llamadas manipuladas al sistema que dan lugar a una gestión incorrecta de las estructuras de datos packet_fanout. Esto se debe a una condición de carrera (que afecta a fanout_add y packet_do_bind) que da lugar a un uso de memoria previamente liberada. Esta vulnerabilidad es diferente de CVE-2017-6346."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.5",
            "matchCriteriaId" : "8CBA5FF4-3406-4A63-9242-E6597219C011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=008ba2a13f2d04c947adc536d19debb8fe66f110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4971613c1639d8e5f102c4e797c3bf8f83a5a69e",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/813945/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/818726/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101573",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3484",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/008ba2a13f2d04c947adc536d19debb8fe66f110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4971613c1639d8e5f102c4e797c3bf8f83a5a69e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=008ba2a13f2d04c947adc536d19debb8fe66f110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4971613c1639d8e5f102c4e797c3bf8f83a5a69e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/813945/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/818726/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/008ba2a13f2d04c947adc536d19debb8fe66f110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4971613c1639d8e5f102c4e797c3bf8f83a5a69e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14017",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-19T23:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de elemento de ruta de búsqueda no controlado en Progea Movicon en la versión 11.5.1181 y anteriores. Se ha identificado una vulnerabilidad de elemento de ruta de búsqueda no controlado, lo que podría permitir que un atacante remoto sin privilegios ejecute código arbitrario mediante un archivo DLL malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progea:movicon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1181",
            "matchCriteriaId" : "877BEABC-BB29-45FF-96BF-354EA88E6DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101483",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14019",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-19T23:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento o ruta de búsqueda sin entrecomillar en Progea Movicon en la versión 11.5.1181 y anteriores. Se ha identificado una vulnerabilidad de elemento o ruta de búsqueda sin entrecomillar, lo que puede permitir que un usuario local autorizado inserte código arbitrario en la ruta de servicio no entrecomillada y escale sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progea:movicon:11.5.1181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD23F226-832B-4497-A5BE-68756D6414F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101483",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-19T23:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query."
      }, {
        "lang" : "es",
        "value" : "musl libc, en versiones anteriores a la 1.1.17, tiene un desbordamiento de búfer mediante respuestas DNS manipuladas, debido a que dns_parse_callback en network/lookup_name.c no restringe el número de direcciones y, por lo tanto, un atacante puede proporcionar un número inesperado enviando registros A en una respuesta a una consulta AAAA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.6",
            "matchCriteriaId" : "34F11B91-B1D7-4E6F-B275-FBF4E04AA7FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.musl-libc.org/cgit/musl/commit/?id=45ca5d3fcb6f874bf5ba55d0e9651cef68515395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.musl-libc.org/cgit/musl/tree/WHATSNEW",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://git.musl-libc.org/cgit/musl/commit/?id=45ca5d3fcb6f874bf5ba55d0e9651cef68515395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.musl-libc.org/cgit/musl/tree/WHATSNEW",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-20T00:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message."
      }, {
        "lang" : "es",
        "value" : "PRTG Network Monitor 17.3.33.2830 permite que administradores remotos autenticados ejecuten código arbitrario subiendo un archivo .exe y procediendo, a pesar del mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:17.3.33.2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50563838-FE5C-4B0F-BBFE-6D6D8072077D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2131",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-20T11:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access restrictions to view the configuration menu via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos de seguridad y control Panasonic KX-HJB1000 con firmware GHX1YG 14.50 o HJB1000_4.47 permiten que un atacante omita las restricciones de acceso y vea el menú de configuración mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:kx-hjb1000_firmware:ghx1yg_14.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C6F75-8A48-41C6-A5B6-3B7A7B5F959D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:kx-hjb1000_firmware:hjb1000_4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1B072B-E7BB-464F-ACED-E2FF318639AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:panasonic:kx-hjb1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF390800-5699-4E5E-B8CF-2F46C873E522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101581",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54795166/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54795166/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2132",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-20T11:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary files in a specific directory via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Panasonic KX-HJB1000 Home con firmware GHX1YG 14.50 o HJB1000_4.47 permiten que un atacante elimine archivos arbitrarios en un directorio específico mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:kx-hjb1000_firmware:ghx1yg_14.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C6F75-8A48-41C6-A5B6-3B7A7B5F959D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:kx-hjb1000_firmware:hjb1000_4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1B072B-E7BB-464F-ACED-E2FF318639AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:panasonic:kx-hjb1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF390800-5699-4E5E-B8CF-2F46C873E522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101584",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54795166/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54795166/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2133",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-10-20T11:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en dispositivos de seguridad y control Panasonic KX-HJB1000 con firmware GHX1YG 14.50 o HJB1000_4.47 permite que atacantes autenticados ejecuten comandos SQL arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:kx-hjb1000_firmware:ghx1yg_14.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C6F75-8A48-41C6-A5B6-3B7A7B5F959D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:kx-hjb1000_firmware:hjb1000_4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1B072B-E7BB-464F-ACED-E2FF318639AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:panasonic:kx-hjb1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF390800-5699-4E5E-B8CF-2F46C873E522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101583",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54795166/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54795166/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-20T14:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (or the OBD connector). This affects the airbag control units (aka pyrotechnical control units or PCUs) of unspecified passenger vehicles manufactured in 2014 or later, when the ignition is on and the speed is less than 6 km/h. Specifically, there are only 256 possible key pairs, and authentication attempts have no rate limit. In addition, at least one manufacturer's interpretation of the ISO 26021 standard is that it must be possible to calculate the key directly (i.e., the other 255 key pairs must not be used). Exploitation would typically involve an attacker who has already gained access to the CAN bus, and sends a crafted Unified Diagnostic Service (UDS) message to detonate the pyrotechnical charges, resulting in the same passenger-injury risks as in any airbag deployment."
      }, {
        "lang" : "es",
        "value" : "El algoritmo de detonación del airbag permite que los ocupantes de un turismo sufran heridas mediante datos Security Access (SA) predecibles en el bus CAN (o el conector OBD). Esto afecta a las unidades de control de airbag (también llamadas unidades de control de elementos pirotécnicos o PCU) de vehículos de pasajeros sin especificar fabricados en 2014 o posteriores, cuando la ignición está encendida y la velocidad es inferior a 6 km/h. Específicamente, solo hay 256 pares de claves posibles, mientras que los intentos de autenticación no tienen límite de tasa. Además, la interpretación de al menos un fabricante del estándar ISO 26021 es que debe ser posible calcular la clave directamente (esto es, los otros 255 pares de claves no deben ser utilizados). Su explotación implicaría a un atacante que ha obtenido acceso al bus CAN y que envía un mensaje Unified Diagnostic Service (USD) manipulado para detonar las cargas pirotécnicas. Esto resulta en el mismo riesgo de heridas para el pasajero como en cualquier implementación de airbag."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:pcu:pcu:2014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF912B0-66E7-4377-876E-368E191F109B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mmt.hs-karlsruhe.de/downloads/IEEM/Schwachstellen/PCU_Vulnerability_Description_HsKA.PDF",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/db/modules/post/hardware/automotive/pdt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.researchgate.net/publication/321183727_Security_Evaluation_of_an_Airbag-ECU_by_Reusing_Threat_Modeling_Artefacts",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mmt.hs-karlsruhe.de/downloads/IEEM/Schwachstellen/PCU_Vulnerability_Description_HsKA.PDF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/db/modules/post/hardware/automotive/pdt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.researchgate.net/publication/321183727_Security_Evaluation_of_an_Airbag-ECU_by_Reusing_Threat_Modeling_Artefacts",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12628",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-20T15:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation. Release 3.0.1 upgrades the incriminated library."
      }, {
        "lang" : "es",
        "value" : "El servidor JMX embebido en Apache James, también empleado por el cliente de línea de comandos, está expuesto a un problema de deserialización de Java, por lo que puede emplearse para ejecutar comandos arbitrarios. Debido a que James expone el socket JMP por defecto sólo en local-host, esta vulnerabilidad solo puede emplearse para escalar privilegios. La versión 3.0.1 actualiza la biblioteca implicada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:james_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "A3793679-700A-4315-B657-DAEF68360C79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101532",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mail-archive.com/server-user%40james.apache.org/msg15633.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mail-archive.com/server-user%40james.apache.org/msg15633.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6141",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-20T15:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM y WebSafe 12.1.0 hasta la 12.1.2, ciertos valores en una negociación abreviada TLS al emplear un perfil de cliente SSL con la opción Session Ticket habilitada pueden causar la interrupción del servicio al Traffic Management Microkernel (TMM). Por defecto, la opción Session Ticket está deshabilitada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A05340-0AE2-49CA-903F-44383421577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K21154730",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K21154730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6144",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-20T15:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in BIG-IP PEM for Device Type and OS (DTOS) and Tethering detection. Customers not using BIG-IP PEM, not configuring downloads of TAC database files, or not using HTTP for that download are not affected."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP PEM 12.1.0 hasta la versión 12.1.2, al descargar el archivo de base de datos Type Allocation Code (TAC) mediante HTTPS, el certificado del servidor no se verifica. Atacantes en una posición privilegiada de la red podrían ser capaces de lanzar un ataque Man-in-the-Middle (MitM) contra estas conexiones. Las bases de datos TAC se emplean en BIG-IP PEM para la detección de tipo de dispositivo y sistema operativo (DTOS) y Tethering. Los clientes que no emplean BIG-IP PEM, no configuran descargas de archivos de base de datos TAC o que no empleen HTTP para esa descarga no están afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K81601350",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K81601350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6145",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-20T15:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens."
      }, {
        "lang" : "es",
        "value" : "iControl REST en F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM y WebSafe 12.0.0 hasta la versión 12.1.2 y 13.0.0 incluye un servicio para convertir las cookies de autorización BIGIPAuthCookie en tokens X-F5-Auth-Token. Este servicio no revalida correctamente las cookies cuando se realiza la conversión, permitiendo que cookies que fueron válidas otrora, pero que ahora han caducado, se conviertan en tokens válidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77192AFB-B612-4BAA-916C-3DF8E851CC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE295AF6-2B35-467F-8501-B5753CDDE16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C03B68-914F-4DB0-A832-B626B8746524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD7394-BD0A-42FD-A367-827F35397A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98509F74-301A-4D1F-A2B4-B01B80CEFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F72B2-84F2-4FA2-9B53-E98344235EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A05340-0AE2-49CA-903F-44383421577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K22317030",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K22317030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6165",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-20T15:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the \"/var/log/ltm\" log file."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y WebSafe 11.5.1 HF6 hasta la versión 11.5.4 HF4, 11.6.0 hasta la versión 11.6.1 HF1 y 12.0.0 hasta la versión 12.1.2 solo en plataformas VIPRION, el script que sincroniza elementos de configuración SafeNet External Network HSM entre hojas en una implementación agrupada registrará la contraseña de partición HSM en texto en claro en el archivo de registro \"/var/log/ltm\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E574F6-34B6-45A6-911D-E5347DA22F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF94129-8779-4D68-8DD4-B828CA633746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2E88AA-0523-48D0-8664-6AFDBCB6C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA244A7D-F65D-4114-81C8-CE811959EA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA9F72C-8344-4370-B511-31BEC8BA63E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CF015E-C74B-4215-9103-8087BC1D12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4DB00-433D-414A-A1CE-E507B9BB809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B2082-E040-4799-A260-BA687ED8614E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85766A4-2181-4719-ADCF-4FEA0031DB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E93EE3-DB73-468E-87CA-4D277F283648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB01A61-1924-417F-8A75-9FDF8F14F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70D2BD5-8E3F-4B57-84EF-3AF40F6378F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A065BC0-56BD-4665-A860-EBA37F1A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EDB8E9-E6FB-406E-B1D3-C620F114804C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77192AFB-B612-4BAA-916C-3DF8E851CC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE295AF6-2B35-467F-8501-B5753CDDE16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5A17AD-9016-492A-8BA5-64A3724DF71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855E91A4-0A0C-4E5C-8019-FB513A793803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC2092-E109-4FF6-9B85-6C9434269851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923BB93-96C1-417B-9172-4A81E731EBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E34BF-82A5-4D9E-BC72-202193A47A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A2F26E-DE81-4455-9125-111A7A74ADC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5A5899-D70C-4F66-A758-7BA1820C0A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0F189B-07C3-4557-A322-D2BBF7253847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF96ADCB-2D07-4951-BEB9-B333EBCEC740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67B3922-08D2-4DB0-8FD8-9C7A3DD601C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E6EC85-AEDB-41DB-95A9-5514980C2C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524B2D05-508C-47FF-94A0-6CC42060E638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD7394-BD0A-42FD-A367-827F35397A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98509F74-301A-4D1F-A2B4-B01B80CEFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3BA6-6F60-45CA-8F52-687B671B077A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B6870-718C-4F8D-9BAB-7ED6385BF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6A3691-ADC4-44BC-8A11-D855B13EF128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D7863D-B064-4D7A-A66B-C3D3523425FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BB6DB-B2D1-4855-A65C-F0799E034358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D161F9-D198-4DA0-BF95-19472A0495A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E2C448-F279-476E-9F54-185582BEE9E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5943AAEF-A816-4F95-A91F-023A226D6459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E78A8D-6CB6-49F9-9288-9C2EEF41441A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB017D7A-3290-4EF5-9647-B488771A5F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F316C54-FAE4-48D8-9E40-ED358C30BF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAC4C7-AB42-4BBD-98B5-0AE8B032CCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F86EB5-D581-4103-A802-44D968BA8D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06224D59-35F8-4168-80C5-CF5B17E99050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A13328-66C1-4D9D-8E46-754401D5F457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94FCC0F-5505-4123-B3FA-ACB90DDE276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A30CF4-7D0D-46A6-A2F4-8DC0C1AA4480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38245250-AE45-456F-9C40-A073AED930C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228D5DA1-C78A-4E05-997A-50F6C1B59593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452C59B8-230D-4FC0-B76D-FA6E381E3713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE1EEA6-1E25-4A90-91A1-386D19808557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A05340-0AE2-49CA-903F-44383421577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_application_delivery_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2D4AC7-23E8-4C93-8618-42AB8F6E9DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101543",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039638",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K74759095",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K74759095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-20T17:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary web script or HTML via the Description field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en la página Wireless MAC Filtering en los routers inalámbricos TP-LINK TL-MR3220 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el campo Description."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B4A99D-75F9-4A21-A330-74E22387C0A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-mr3220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1862BC95-987F-4E10-9967-FBF5FDC7875B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fireshellsecurity.team/assets/pdf/Router-TP-LINK-TL-MR3220-Vulnerability-XSS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43023/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fireshellsecurity.team/assets/pdf/Router-TP-LINK-TL-MR3220-Vulnerability-XSS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43023/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-20T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string."
      }, {
        "lang" : "es",
        "value" : "La biblioteca GNU C (también llamada glibc o libc6) en versiones anteriores a la 2.27 contiene un error por un paso que conduce a un desbordamiento de búfer basado en memoria dinámica (heap) en la función glob en glob.c. Esto se relaciona con el procesamiento de directorios principales empleando el operador ~ seguido por una larga cadena."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.26",
            "matchCriteriaId" : "495E9424-0BBA-4820-B793-031DDAC80417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22320",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-20T17:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak)."
      }, {
        "lang" : "es",
        "value" : "La función glob en glob.c en la biblioteca GNU C (también llamada glibc o libc6) en versiones anteriores a la 2.27, cuando se invoca con GLOB_TILDE, podría omitir la liberación de memoria asignada cuando procesa el operador ~ con un nombre de usuario largo, conduciendo potencialmente a una denegación de servicio (fuga de memoria)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.26",
            "matchCriteriaId" : "495E9424-0BBA-4820-B793-031DDAC80417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22325",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-20T18:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "La aplicación VIP.com para IOS y Android permite que atacantes remotos obtengan información sensible y secuestren la autenticación de usuarios mediante un punto de acceso no autorizado y un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vip:vip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0381B400-1EFF-47DE-AB7F-43C919046E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ibreakthings.com/2017/10/13/cve-2017-13127-security-teams-care/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ibreakthings.com/2017/10/13/cve-2017-13127-security-teams-care/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12317",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-10-22T18:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904."
      }, {
        "lang" : "es",
        "value" : "La aplicación Cisco AMP For Endpoints permite que un atacante local autenticado acceda a un valor estático de clave almacenado en el software de la aplicación local. La vulnerabilidad se debe al uso de un valor estático de clave almacenado en la aplicación que se emplea para codificar la contraseña de protección del conector. Un atacante podría explotar esta vulnerabilidad obteniendo acceso local administrativo a un host de Windows y deteniendo el servicio Cisco AMP for Endpoints. Cisco Bug IDs: CSCvg42904."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:3.1\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC552AE2-958F-4508-8A18-0F8374208531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:3.1\\(15\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C534C2C-D0D1-4A86-A9E1-E8327B93DCFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.0\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F77CA23-9C21-4149-BF87-F719E3C2FCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B43163-EBC4-46DA-9537-2FEFCE8622EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA265977-1948-4FDD-8431-9D2904D8D697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7448EF5-8CCE-41D6-B926-780396A30F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4918BE41-30C3-4BDD-BD26-4B1D199BD062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F651A64-B2D7-4536-9B8E-539724CA7E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.2\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C0356D-5A02-463F-906F-EE591B1B1EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF9771F-2EAB-479D-AA78-C8AFC3AB4DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.3\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9115445E-58A9-4F5D-B246-1E4138CDC0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F195F11D-A44D-4FDD-BBC6-299DB63EE79F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.4\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AB9F91-075A-4541-8BC7-51F5E53FC091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B513CB76-597A-432B-9B9D-6E869E772912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF27510-6D6F-4D67-997E-0A4B75F29F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:4.4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE7785C-8820-4241-84E9-0BCC34AEB246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A023FE-824C-47E2-8523-FEFB07296B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D54C61-6E1D-4EB1-B88A-E33FA97FCF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E428D60B-1F49-489C-AE56-9876A8027D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.0\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EE257B-7207-4452-BD40-708FFEC72061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.0\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77ECEBF-DC16-4D6B-9AF3-469CEFD583D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09799FA5-06FA-41E2-BB55-79FF544BC11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83A07CD-D240-4D33-8D0D-1E58217A54AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBCB13D-8EA3-46F9-A79F-54349331DC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B610FB-D459-4D66-A730-749CE36CBF5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87B79C5-A079-4EAE-BD3E-EC4CE9E958FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CDF0AA0-B261-4B76-B95E-FCE413B4CA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:5.1\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6B2298-FF45-4AE1-AE50-3339739BDA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AC52E2-473E-44BA-B050-A128125A20F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101520",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171020-ampfe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171020-ampfe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Scripting (XSS) persistente mediante un adjunto HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/5c3e4f96ff0ef6b91a3f0aa64eb28197c5cf5435",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43063/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/5c3e4f96ff0ef6b91a3f0aa64eb28197c5cf5435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Scripting (XSS) persistente mediante metaDescription o metaKeywords."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/2d2a85b59e058869d7cbcfe2d73fed4a282f2e5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/2d2a85b59e058869d7cbcfe2d73fed4a282f2e5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) al añadir un glosario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/867618110feb836e168435548d6c2cbb7c65eda3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/867618110feb836e168435548d6c2cbb7c65eda3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) en admin/stat.ratings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/cce47f94375bb0102ab4f210672231dbb854dd0d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43064/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/cce47f94375bb0102ab4f210672231dbb854dd0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43064/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) en admin/stat.adminlog.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/fadb9a70b5f7624a6926b8834d5c6001c210f09c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/fadb9a70b5f7624a6926b8834d5c6001c210f09c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) en admin/news.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/ec8b3cc37d05b6625e24916b8f7253f830015b5f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/ec8b3cc37d05b6625e24916b8f7253f830015b5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) en admin/ajax.attachment.php y admin/att.main.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/ef5a66df4bcfacc7573322af33ce10c30e0bb896",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/ef5a66df4bcfacc7573322af33ce10c30e0bb896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) en admin/stat.main.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/fa26c52384b010edaf60c525ae5b040f05da9f77",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/fa26c52384b010edaf60c525ae5b040f05da9f77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary."
      }, {
        "lang" : "es",
        "value" : "En phpMyFAQ en versiones anteriores a la 2.9.9 hay Cross-Site Request Forgery (CSRF) al modificar un glosario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/867618110feb836e168435548d6c2cbb7c65eda3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/867618110feb836e168435548d6c2cbb7c65eda3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T18:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) (persistente) en SPIP en versiones anteriores a la 3.1.7 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante una cadena manipulada, tal y como demuestra un campo PGP, relacionado con prive/objets/contenu/auteur.html y ecrire/inc/texte_mini.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.6",
            "matchCriteriaId" : "BE1CFB17-F737-46CE-9DC7-32FD7AB482AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://core.spip.net/projects/spip/repository/revisions/23701",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://usn.ubuntu.com/4536-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://core.spip.net/projects/spip/repository/revisions/23701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://usn.ubuntu.com/4536-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11292",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-10-22T19:29:00.237",
      "lastModified" : "2025-10-22T00:16:01.620",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player en sus versiones 27.0.0.159 y anteriores tiene un procedimiento de verificación de código de bytes con errores, lo que permite que un valor que no es de confianza se emplee en el cálculo de un índice de arrays. Esto puede llevar a una confusión de tipos, y la explotación con éxito podría desembocar en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "The impacted product is end-of-life and should be disconnected if still in use.",
      "cisaVulnerabilityName" : "Adobe Flash Player Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.159",
            "matchCriteriaId" : "BE22B5D8-0B12-4058-A369-AC20E57630B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.130",
            "matchCriteriaId" : "B06EC24D-217E-4362-90A6-F07C03765797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "27.0.0.130",
            "matchCriteriaId" : "0C270BC4-E41E-4DBE-B2CC-22A6626F7C56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.159",
            "matchCriteriaId" : "31607166-57B0-4CA2-A05A-DF30F0A70EB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101286",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039582",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2899",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-32.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-22",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11292",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.283",
      "lastModified" : "2023-11-07T02:40:23.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.317",
      "lastModified" : "2023-11-07T02:40:23.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.347",
      "lastModified" : "2023-11-07T02:40:23.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.377",
      "lastModified" : "2023-11-07T02:40:23.680",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.423",
      "lastModified" : "2023-11-07T02:40:23.710",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.457",
      "lastModified" : "2023-11-07T02:40:23.740",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.487",
      "lastModified" : "2023-11-07T02:40:23.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.517",
      "lastModified" : "2023-11-07T02:40:23.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.550",
      "lastModified" : "2023-11-07T02:40:23.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.597",
      "lastModified" : "2023-11-07T02:40:23.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.627",
      "lastModified" : "2023-11-07T02:40:23.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResSearchResourceInsideDirectory+0x000000000000029e.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dll manipulado que se gestiona de manera incorrecta durante un intento de representar el icono DLL. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResSearchResourceInsideDirectory+0x000000000000029e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15801",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to \"Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dll manipulado que se gestiona de manera incorrecta durante un intento de representar el icono DLL. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15802",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T19:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dll manipulado que se gestiona de manera incorrecta durante un intento de representar el icono DLL. Esta vulnerabilidad está relacionada con \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15803",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on."
      }, {
        "lang" : "es",
        "value" : "Irssi en versiones anteriores a la 1.0.5, mientras espera por la sincronización de canal, puede fracasar a la hora de eliminar canales destruidos de la lista de consultas. Esto resulta en condiciones de uso de memoria previamente liberada cuando posteriormente se actualiza el estado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "9E81D7B5-7308-446B-A190-AB9D9813C33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string."
      }, {
        "lang" : "es",
        "value" : "Irssi en versiones anteriores a la 1.0.5, cuando instala temas con secuencias de formato de color indeterminado, podría acceder a datos más allá del fin de la cadena."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "9E81D7B5-7308-446B-A190-AB9D9813C33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468."
      }, {
        "lang" : "es",
        "value" : "En Irssi en versiones anteriores a la 1.0.5, ciertos mensajes DCC CTCP con formato incorrecto podrían provocar una desreferencia de puntero NULL. Este es un problema aparte, pero similar a CVE-2017-9468."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "9E81D7B5-7308-446B-A190-AB9D9813C33F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string."
      }, {
        "lang" : "es",
        "value" : "En ciertos casos, Irssi en versiones anteriores a la 1.0.5 podría fracasar a la hora de verificar si un ID de canal seguro es lo suficientemente largo, provocando lecturas más allá del final de la cadena."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "9E81D7B5-7308-446B-A190-AB9D9813C33F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message."
      }, {
        "lang" : "es",
        "value" : "En Irssi en versiones anteriores a la 1.0.5, los objetivos o nicks demasiado largos pueden resultar en una desreferencia de puntero NULL cuando se divide el mensaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "9E81D7B5-7308-446B-A190-AB9D9813C33F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/22/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2017_10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADIMAGE+0x00000000003d246f.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at CADIMAGE+0x00000000003d246f\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15737",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADIMAGE+0x00000000003d22d8.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at CADIMAGE+0x00000000003d22d8\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls subsequent Write Address starting at CADIMAGE+0x00000000000042d5.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at CADIMAGE+0x00000000000042d5\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15739",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls Code Flow starting at CADIMAGE+0x000000000033228e.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at CADIMAGE+0x000000000033228e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15740",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADIMAGE+0x00000000003d2328.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at CADIMAGE+0x00000000003d2328\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15742",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15743",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15744",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "97E93298-30AD-4D93-8DE9-DCD17477E4FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15746",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15747",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV starting at CADIMAGE+0x000000000000613a.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at CADIMAGE+0x000000000000613a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15748",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15749",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15750",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009f39.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009f39\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15751",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d6b0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d6b0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15752",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029c2.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029c2\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15753",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000013968.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000013968\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15754",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.040",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15755",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d7c4.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d7c4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15756",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029ba.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029ba\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15757",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d75b.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d75b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15758",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.180",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15759",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ce82.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ce82\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ecaa.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ecaa\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15761",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15762",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001eca0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001eca0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15763",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15764",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f0a0.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f0a0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:babacad4image:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FA51C0-E089-4077-B5AE-2E6C82F93F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:cadimage:12.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFA3F8-D18B-4D9B-AD4B-617C59D8112C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to \"Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .tif manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection comenzando en image000007f7_42060000+0x0000000000094113\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15768",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to \"Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22.\""
      }, {
        "lang" : "es",
        "value" : "IrfanView 4.50 - 64bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dds manipulado. Esta vulnerabilidad está relacionada con \"Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.50:*:*:*:*:x64:*:*",
            "matchCriteriaId" : "0A4CB258-075C-4559-B7A0-001DC1E1206B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.587",
      "lastModified" : "2023-11-07T02:40:23.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.617",
      "lastModified" : "2023-11-07T02:40:23.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15772",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADImage+0x0000000000285d79.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado, relacionado con \"Read Access Violation starting at CADImage+0x0000000000285d79\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15774",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection comenzando en CADImage+0x0000000000259aa4\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15776",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV near NULL starting at CADImage+0x0000000000288750.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"User Mode Write AV near NULL starting at CADImage+0x0000000000288750\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15777",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADImage+0x0000000000285de7.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado, relacionado con \"Read Access Violation starting at CADImage+0x0000000000285de7\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15778",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.900",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to \"Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.930",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADImage+0x0000000000285dad.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado, relacionado con \"Read Access Violation starting at CADImage+0x0000000000285dad\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15780",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:01.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15781",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV starting at CADImage+0x00000000000032eb.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"User Mode Write AV starting at CADImage+0x00000000000032eb\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15782",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to \"Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con \"Data from Faulting Address controls Branch Selection comenzando en CADImage+0x0000000000285ce1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an \"Illegal Instruction Violation starting at xnview+0x0000000000370074.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"Illegal Instruction Violation starting at xnview+0x0000000000370074\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15784",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15785",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a \"Read Access Violation starting at CADImage+0x00000000001a78db.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado, relacionado con \"Read Access Violation starting at CADImage+0x00000000001a78db\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15786",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"Data Execution Prevention Violation starting at xnview+0x0000000000580063.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"Data Execution Prevention Violation starting at xnview+0x0000000000580063\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV starting at CADImage+0x0000000000002d83.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"User Mode Write AV starting at CADImage+0x0000000000002d83\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15788",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a \"User Mode Write AV starting at CADImage+0x00000000000048e7.\""
      }, {
        "lang" : "es",
        "value" : "XnView Classic para Windows en su versión 2.43 permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado, relacionado con \"User Mode Write AV starting at CADImage+0x00000000000048e7\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xnview:xnview:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51F98D4-FEA4-4587-96A2-EFF5A8412D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15789",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-22T20:29:02.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator."
      }, {
        "lang" : "es",
        "value" : "La función glob en glob.c en la biblioteca GNU C (también llamada glibc o libc6) en versiones anteriores a la 2.27 contiene un desbordamiento de búfer durante la eliminación del escape de nombres de usuario con el operador ~."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.26",
            "matchCriteriaId" : "495E9424-0BBA-4820-B793-031DDAC80417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22332",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=a159b53fa059947cc2548e3b0d5bdcf7b9630ba8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=a159b53fa059947cc2548e3b0d5bdcf7b9630ba8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7072",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"iBooks\" component. It allows remote attackers to cause a denial of service (persistent outage) via a crafted iBooks file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"iBooks\". Permite que atacantes remotos provoquen una denegación de servicio (interrupción persistente) mediante un archivo iBooks manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7074",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"AppSandbox\" component. It allows attackers to cause a denial of service via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"AppSandbox\". Permite que atacantes remotos provoquen una denegación de servicio mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7076",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \"ld64\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se ha visto afectado Xcode en versiones anteriores a la 9. El problema implica el componente \"ld64\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un archivo Mach-O manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7077",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"IOFireWireFamily\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"IOFireWireFamily\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7078",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue involves the \"Mail Drafts\" component. It allows remote attackers to obtain sensitive information by reading unintended cleartext transmissions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11 y las versiones de macOS anteriores a la 10.13. El problema implica el componente \"Mail Drafts\". Permite que atacantes remotos obtengan información sensible leyendo transmisiones en texto claro accidentales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100999",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7079",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the \"Data Sync\" component. It allows attackers to access iOS backups (written by iTunes) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iTunes anteriores a la 12.7. El problema implica el componente \"Data Sync\". Permite que atacantes accedan a las copias de seguridad de iOS (escritas por iTunes) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100983",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208140",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7080",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Security\" component. It allows remote attackers to bypass intended certificate-trust restrictions via a revoked X.509 certificate."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Security\". Permite que atacantes remotos omitan las restricciones de certificados de confianza planeadas mediante un certificado X.509 revocado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100992",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7081",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100985",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7082",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Screen Lock\" component. It allows physically proximate attackers to read Application Firewall prompts."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"Screen Lock\". Permite que atacantes físicamente cercanos lean avisos de Application Firewall."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7083",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"CFNetwork Proxies\" component. It allows remote attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"CFNetwork Proxies\". Permite que atacantes remotos provoquen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100992",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7084",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Application Firewall\" component. It allows remote attackers to bypass intended settings in opportunistic circumstances by leveraging incorrect handling of a denied setting after an upgrade."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"Application Firewall\". Permite que atacantes remotos omitan las configuraciones planeadas en circunstancias oportunistas aprovechando la gestión incorrecta de una opción denegada tras una actualización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7085",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se ha visto afectado Safari en versiones anteriores a la 11. El problema implica el componente \"Safari\". Permite que atacantes remotos suplanten la barra de direcciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100895",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7086",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"libc\" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted string that is mishandled by the glob function."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"libc\". Permite que atacantes remotos provoquen una denegación de servicio (consumo de recursos) mediante una cadena manipulada que la función glob gestiona de manera incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100990",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7087",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100985",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7088",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Exchange ActiveSync\" component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1 session during the setup of an Exchange account."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Exchange ActiveSync\". Permite que atacantes remotos eliminen un dispositivo en circunstancias oportunistas secuestrando una sesión AutoDiscover V1 en texto claro durante la configuración de una cuenta de Exchange."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7089",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:11.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11 y las versiones de iCloud para Windows anteriores a la 7.0. El problema implica el componente \"WebKit\". Permite que atacantes remotos lleven a cabo ataques de XSS Universal (UXSS) mediante un sitio web manipulado que se gestiona de manera incorrecta durante el procesado de parent-tab."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100893",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7090",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive cookie information via a custom URL scheme."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos omitan la Política del Mismo Origen y obtengan información sensible de las cookies mediante un esquema URL manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7091",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7092",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7093",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7094",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7095",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7096",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7097",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Mail MessageUI\" component. It allows attackers to cause a denial of service (memory corruption) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Mail MessageUI\". Permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria) mediante una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100929",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7098",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100998",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7099",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "A3C488D8-C822-45CB-811D-610F764D86E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100998",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7100",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7102",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7103",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante tráfico Wi-Fi manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1302",
        "source" : "product-security@apple.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7104",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7105",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante tráfico Wi-Fi manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1305",
        "source" : "product-security@apple.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7106",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the \"WebKit\" component. It allows remote attackers to spoof the address bar."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11 y las versiones de iCloud para Windows anteriores a la 7.0. El problema implica el componente \"WebKit\". Permite que atacantes remotos suplanten la barra de direcciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100893",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7107",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7108",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante tráfico Wi-Fi manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1312",
        "source" : "product-security@apple.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7109",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via crafted web content that incorrectly interacts with the Application Cache policy."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Una vulnerabilidad de Cross-Site Scripting (XSS) permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante contenidos web manipulados que interactúan de forma incorrecta con la política Application Cache."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101005",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7110",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante tráfico Wi-Fi manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1313",
        "source" : "product-security@apple.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7111",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100986",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7112",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante tráfico Wi-Fi manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1314",
        "source" : "product-security@apple.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7114",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100990",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7115",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:12.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic that leverages a race condition."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11 y las versiones de tvOS anteriores a la 11. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante tráfico Wi-Fi manipulado que aprovecha una condición de carrera."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100924",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1317",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42996/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42996/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7116",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Wi-Fi\" component. It might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"Wi-Fi\". Podría permitir que atacantes remotos lean datos de localizaciones de la memoria del kernel mediante tráfico Wi-Fi manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1318",
        "source" : "product-security@apple.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7117",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.033",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42955/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42955/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7118",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Messages\" component. It allows remote attackers to cause a denial of service (crash) via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Messages\". Permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado) mediante una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7119",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.110",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"IOFireWireFamily\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"IOFireWireFamily\". Permite que atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7120",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se han visto afectadas las versiones de Safari anteriores a la 11, las versiones de iCloud anteriores a la 7.0 en Windows, las versiones de iTunes anteriores a la 12.7 en Windows y las versiones de tvOS anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.1",
            "matchCriteriaId" : "BEA8E202-B73B-4CC4-8B69-E3741C0DB420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.6.2",
            "matchCriteriaId" : "993011BA-088E-48A0-B1F6-5D49DE84EFAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7121",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party \"file\" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el producto de terceros \"file\". Las versiones anteriores a la 5.30 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7122",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party \"file\" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el producto de terceros \"file\". Las versiones anteriores a la 5.30 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7123",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party \"file\" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el producto de terceros \"file\". Las versiones anteriores a la 5.30 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7124",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party \"file\" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el producto de terceros \"file\". Las versiones anteriores a la 5.30 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7125",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party \"file\" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el producto de terceros \"file\". Las versiones anteriores a la 5.30 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7126",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party \"file\" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el producto de terceros \"file\". Las versiones anteriores a la 5.30 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038249",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7127",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"SQLite\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de iCloud para Windows anteriores a la 7.0, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el componente \"SQLite\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:6.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930451E2-E4C7-4D82-A2CC-B17F98D9BD9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100990",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7128",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party \"SQLite\" product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el producto de terceros \"SQLite\". Las versiones anteriores a la 3.19.3 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100987",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7129",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party \"SQLite\" product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el producto de terceros \"SQLite\". Las versiones anteriores a la 3.19.3 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100987",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7130",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party \"SQLite\" product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema implica el producto de terceros \"SQLite\". Las versiones anteriores a la 3.19.3 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, cualquier otro tipo de problema sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "B83AE012-4180-4C56-9173-C87749B8D284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "5BCFA9C5-836B-44AE-AD05-F44EC544F937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100987",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7131",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to obtain sensitive Contact card information via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Bluetooth\". Permite que atacantes remotos obtengan información sensible de la tarjeta de contacto mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7133",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"MobileBackup\" component. It allows remote attackers to obtain sensitive cleartext information in opportunistic circumstances by leveraging read access to a backup archive that was supposed to have been encrypted."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"MobileBackup\". Permite que atacantes remotos obtengan información sensible en texto claro en circunstancias oportunistas aprovechando el acceso de lectura a un archivo de copia de seguridad que se supone que estaba codificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7134",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \"ld64\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple.. Se ha visto afectado Xcode en versiones anteriores a la 9. El problema implica el componente \"ld64\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un archivo Mach-O manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.3",
            "matchCriteriaId" : "A73E6F97-AB4F-4408-8BF3-97765C7A1C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7135",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \"ld64\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se ha visto afectado Xcode en versiones anteriores a la 9. El problema implica el componente \"ld64\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un archivo Mach-O manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.3",
            "matchCriteriaId" : "A73E6F97-AB4F-4408-8BF3-97765C7A1C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7136",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \"ld64\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple.. Se ha visto afectado Xcode en versiones anteriores a la 9. El problema implica el componente \"ld64\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un archivo Mach-O manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.3",
            "matchCriteriaId" : "A73E6F97-AB4F-4408-8BF3-97765C7A1C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7137",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \"ld64\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple.. Se ha visto afectado Xcode en versiones anteriores a la 9. El problema implica el componente \"ld64\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante un archivo Mach-O manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.3",
            "matchCriteriaId" : "A73E6F97-AB4F-4408-8BF3-97765C7A1C88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7138",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.783",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Directory Utility\" component. It allows local users to discover the Apple ID of the computer's owner."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"Directory Utility\". Permite que usuarios locales descubran el ID de Apple del propietario del ordenador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7139",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Phone\" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred during a locking action."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Phone\". Permite que atacantes remotos obtengan información sensible aprovechando un error de tiempos para leer una captura de contenido seguro que ocurrió durante una acción de bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7140",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Keyboard Suggestions\" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Keyboard Suggestions\". Permite que atacantes remotos obtengan información sensible leyendo sugerencias de autocorrección de teclado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7141",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Mail\" component. It allows remote attackers to bypass an intended off value of the \"Load remote content in messages\" setting, and consequently discover an e-mail recipient's IP address, via an HTML email message."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"Mail\". Permite que atacantes remotos omitan un valor off de la opción \"Load remote content in messages\" y, consecuentemente, averiguar la dirección IP del destinatario de un correo electrónico mediante un mensaje de correo electrónico en HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7142",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the \"WebKit Storage\" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple.. Se ha visto afectado Safari en versiones anteriores a la 11. El problema implica el componente \"WebKit Storage\". Permite que atacantes omitan el mecanismo de protección Safari Private Browsing y, consecuentemente, obtengan información sensible sobre sitios web visitados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100996",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7143",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Captive Network Assistant\" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal browser, which has a UI error that can lead to cleartext transmission without the user's awareness."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema implica el componente \"Captive Network Assistant\". Permite que atacantes remotos descubran contraseñas en texto claro en circunstancias oportunistas esnifando la red durante el uso de un navegador de portal cautivo, el cual tiene un error de interfaz de usuario que puede conducir a una transmisión en texto claro sin que el usuario sea consciente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7144",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:13.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. Se ha visto afectado Safari en versiones anteriores a la 11. El problema implica el componente \"WebKit\". Permite que atacantes remotos rastreen usuarios de Safari Private Browsing aprovechando la gestión incorrecta de cookies."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.2",
            "matchCriteriaId" : "318ED418-97A3-4370-B1C1-16D69C3546EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100991",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7145",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:14.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Time\" component. The \"Setting Time Zone\" feature mishandles the possibility of using location data."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Time\". La característica \"Setting Time Zone\" gestiona de manera incorrecta la posibilidad de emplear la información de localización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7146",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:14.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Security\" component. It allows attackers to track users across installs via a crafted app that leverages Keychain data mishandling."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Security\". Permite que atacantes rastreen usuarios a través de instalaciones mediante una app manipulada que aprovecha la gestión incorrecta de datos de Keychain."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "B3F24ECA-0CD0-4F42-84C7-ED651C2C981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7147",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:14.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is affected. The issue involves the \"Analytics\" component. It allows remote attackers to obtain sensitive analytics information by leveraging its presence in a cleartext HTTP transmission to an Adobe Marketing Cloud server operated for Apple, as demonstrated by information about the installation date and time."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple.. Se ha visto afectada la versión de la app Apple Support para iOS anterior a 1.2. El problema implica el componente \"Analytics\". Permite que atacantes remotos obtengan información sensible de análisis aprovechando su presencia en una transmisión en un HTTP en texto claro a un servidor Adobe Marketing Cloud gestionado para Apple. Esto se demuestra mediante la información sobre la fecha y hora de instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:apple_support:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "4F6ECBE8-86D5-4D69-A257-2D841D9849EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101533",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208201",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Apple-Support.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Apple-Support.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7148",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:14.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Location Framework\" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11. El problema implica el componente \"Location Framework\". Permite que atacantes obtenga información sensible de localización mediante una app manipulada que lee la variable de localización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E55F33-01A3-4390-95AE-AC78A1D23CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7149",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:14.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the \"StorageKit\" component. It allows attackers to discover passwords for APFS encrypted volumes by reading Disk Utility hints, because the stored hint value was accidentally set to the password itself, not the entered hint value."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13 Supplemental Update. El problema implica el componente \"StorageKit\". Permite que atacantes averigüen las contraseñas para volúmenes codificados por APFS leyendo sugerencias de Disk Utility debido a que el valor de sugerencia almacenado se ha establecido accidentalmente como la propia contraseña, no como el valor de sugerencia introducido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13",
            "matchCriteriaId" : "458CC776-A0BA-4229-BD11-EF6B7125F390"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101178",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039513",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackernoon.com/new-macos-high-sierra-vulnerability-exposes-the-password-of-an-encrypted-apfs-container-b4f2f5326e79",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nakedsecurity.sophos.com/2017/10/05/urgent-update-your-mac-again-right-now/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208165",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.theregister.co.uk/2017/10/05/apple_patches_password_hint_bug_that_revealed_password/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackernoon.com/new-macos-high-sierra-vulnerability-exposes-the-password-of-an-encrypted-apfs-container-b4f2f5326e79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nakedsecurity.sophos.com/2017/10/05/urgent-update-your-mac-again-right-now/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.theregister.co.uk/2017/10/05/apple_patches_password_hint_bug_that_revealed_password/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7150",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-10-23T01:29:14.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the \"Security\" component. It allows attackers to bypass the keychain access prompt, and consequently extract passwords, via a synthetic click."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13 Supplemental Update. El problema implica el componente \"Security\". Permite que atacantes omitan el aviso de acceso keychain y, consecuentemente, extraigan contraseñas mediante un clic sintético."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.6",
            "matchCriteriaId" : "28DF1801-0B0E-4238-BEBA-B6530288980B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101177",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039430",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208165",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T04:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system commands by crafting malicious XML payloads, as demonstrated by a single admin/reports/reportSchemaXml.form request."
      }, {
        "lang" : "es",
        "value" : "Reporting Compatibility Add On en versiones anteriores a la 2.0.4 para OpenMRS, tal y como se distribuye en OpenMRS Reference Application en versiones anteriores a la 2.6.1, no autentica usuarios cuando deserializa entradas XML en objetos ReportSchema. El resultado es que usuarios remotos no autenticados pueden ejecutar comandos del sistema operativo manipulando cargas útiles XML maliciosas, tal y como demuestra una única petición admin/reports/reportSchemaXml.form."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmrs:openmrs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "CC2390B4-BFC2-454E-8A9C-705E364A507D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://isears.github.io/jekyll/update/2017/10/21/openmrs-rce.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://talk.openmrs.org/t/critical-security-advisory-2017-09-12/13291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.openmrs.org/display/RES/Release+Notes+2.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://isears.github.io/jekyll/update/2017/10/21/openmrs-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://talk.openmrs.org/t/critical-security-advisory-2017-09-12/13291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.openmrs.org/display/RES/Release+Notes+2.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Extreme EXOS en versiones 16.x, 21.x y 22.x permite que los administradores lean archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4413DB-0B93-4111-B5A4-E6F35D7C6BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6EAFB3-3747-4F28-A3E7-EE6BB32E82E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CD1A1D-86F8-4421-9728-2C150562576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FA8F0C-C560-4E34-BBA1-3DB8793458A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477D6932-555D-4563-BCB8-FDDB537E1FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9DBA4C-46D8-4094-B0AB-2682E77FBE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C73AFB-C826-4370-BC69-AFE3C1575465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1409DBBE-EADF-4237-BD2D-32EE2D28C985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9311A95-4875-4ED7-A78B-62187A1D4DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E0D1F6-B4D9-4C9D-A840-AA1460B8FEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC4F9FE-D10C-4967-A1AA-273835DE8876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF9EDE-448B-40DF-95B9-0924D590B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA527BE-C0CD-4CA5-9713-58371D8F1F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F71B7-A9CA-4B07-9550-64761ED94433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3232567C-B89C-46EA-96DB-FAB08181BC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A18321A-679E-4890-ACEA-CBD9231E3E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot."
      }, {
        "lang" : "es",
        "value" : "Extreme EXOS en versiones 15.7, 16.x, 21.x y 22.x permite que atacantes remotos desencadenen un desbordamiento de buffer que provocará un reinicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A3F12F-B2C4-430C-A17C-1D7E644DA1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A283E599-F0C2-4BD2-8399-CA585FEB70DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D896B881-7A90-4050-B5F0-6659AE9D6E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:patch1-1:*:*:*:*:*:*",
            "matchCriteriaId" : "768DEBAD-D270-4B30-AAF2-FDE52003EA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:patch1-4:*:*:*:*:*:*",
            "matchCriteriaId" : "023233F6-776E-4576-AFCF-34C0B3D3DE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B169334E-EFB5-42C1-B667-F41A8FD41318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-11:*:*:*:*:*:*",
            "matchCriteriaId" : "AB232698-5890-4062-8D00-2F4463700C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC13DCF8-2CBA-490B-A318-517E0E834AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-4:*:*:*:*:*:*",
            "matchCriteriaId" : "B5228883-019A-4D33-A86C-2851F9FE64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "73231113-B85E-49F8-B9C6-ED3F9ABD3108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-8:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4731C6-2BAA-44C6-8547-67CCC67AF4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-9:*:*:*:*:*:*",
            "matchCriteriaId" : "791274A9-9FA2-464F-9F16-4D58E7932856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAA9453-ECBE-430D-BDD5-43CBF4CDF68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-10:*:*:*:*:*:*",
            "matchCriteriaId" : "E0207BA0-1339-4F13-931B-65B384D47E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBA3ADC-0B9D-4AD9-9DCC-57772648C427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7A8383-3923-4895-A357-8EF38DFE2E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-9:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C3EED-DC34-445A-ADF2-E8676273C365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6CDD7F-BFDE-4441-9AFD-151D847A3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FA8F0C-C560-4E34-BBA1-3DB8793458A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A0643834-1CDC-4E2C-BAF0-CAE0285787ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "C39B6A31-E6E6-431F-942B-3A004176A4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F0438D0D-1F11-4A24-B806-DA1B3BA5F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-12:*:*:*:*:*:*",
            "matchCriteriaId" : "5A307526-278F-4BEE-AD49-FFB602AE4B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-13:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4F38DF-D490-483B-A17A-E9E077C7F492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-14:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE3E7B8-C6CB-4CF5-8A3B-15EBF9A0AEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "2B21A0EA-C128-4C0A-91C1-5AAC53859DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-6:*:*:*:*:*:*",
            "matchCriteriaId" : "5EAC6A52-4715-43A6-920D-A041380B8C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CE40F69C-D695-40AE-93AB-1F6F601E986A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBF68E1-F7E4-4420-B7BF-168B0629D43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-5:*:*:*:*:*:*",
            "matchCriteriaId" : "1549E41A-7910-4B0A-B7DF-5F7B28CBE3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-6:*:*:*:*:*:*",
            "matchCriteriaId" : "12A50E84-35D1-4572-8E3E-AC784BAD0CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-8:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C4DFBF-3050-4135-B16D-FFD7EAA701F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F457CF-992D-495C-8447-87F9EE49E6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-10:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C533D3-EE52-481C-BCFB-B0F6CD03FD9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-11:*:*:*:*:*:*",
            "matchCriteriaId" : "9D276ADB-BA9F-4F7C-980B-9B5DFD35393A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-12:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C93397-269B-45A6-B4D1-75D70A60231E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-13:*:*:*:*:*:*",
            "matchCriteriaId" : "505A9FDE-FB70-46FA-9DF0-EB6464CBBA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-15:*:*:*:*:*:*",
            "matchCriteriaId" : "DC388E6D-BC13-4CFF-AACE-774FBEF4C377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "0944ACF4-8180-4384-880D-303892924FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F58BC83-E4D2-412E-A422-6F3C2CAAA52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "9C50878F-5A99-4347-8F98-BB226B2BB07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1409DBBE-EADF-4237-BD2D-32EE2D28C985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:patch1-2:*:*:*:*:*:*",
            "matchCriteriaId" : "07DA2C14-D290-4D63-BBE7-46FBB1B164DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:patch1-5:*:*:*:*:*:*",
            "matchCriteriaId" : "F48C2113-CF55-4F3C-A8A4-E2422DAA26B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C99159D6-85D9-45CC-B66D-77FD67FA01AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:patch1-2:*:*:*:*:*:*",
            "matchCriteriaId" : "A1EE7B57-F860-431F-883E-29EEADC87F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C068A97F-2557-411F-A5A9-7B6037C0BF74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:patch1-4:*:*:*:*:*:*",
            "matchCriteriaId" : "78FDF23A-72EA-4950-90BD-52AA062ECBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B34A42-1A7B-4581-87E2-F7B23AA1F462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE985DF-5384-439B-9C2A-227A970CCBD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB31F5A-86B7-457B-85FA-544F89DB2B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-6:*:*:*:*:*:*",
            "matchCriteriaId" : "137D5D7F-505F-4449-9954-B9826F69A4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8DBB60-A56F-4FC9-AFDD-DBEDB6C482FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D16DAB02-670E-4D89-9CAA-33A9684C9068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-2:*:*:*:*:*:*",
            "matchCriteriaId" : "4012D8CE-E93A-44A6-BB06-FE8FD95606F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-5:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA21439-F4C6-4FD5-AFB9-FE15AE5BE068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "E38D64C7-7AE4-46EC-A327-38FB2A78F357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-9:*:*:*:*:*:*",
            "matchCriteriaId" : "B123DCBF-C228-4A3C-ADC1-C9806B53CE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA527BE-C0CD-4CA5-9713-58371D8F1F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F71B7-A9CA-4B07-9550-64761ED94433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2.1:patch1-4:*:*:*:*:*:*",
            "matchCriteriaId" : "0426C921-182A-4F3F-BAAF-97F2E47C940D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3232567C-B89C-46EA-96DB-FAB08181BC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F98AFE-F0A5-49CB-8701-9574583038B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "12C92134-4FEF-46F6-9DAD-71DDE332EA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-8:*:*:*:*:*:*",
            "matchCriteriaId" : "079B185C-C6BA-4B96-8A4B-FB921800DEBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1cc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "D2497289-6434-4ED1-97A3-F8001369D583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A18321A-679E-4890-ACEA-CBD9231E3E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4.1:patch1-2:*:*:*:*:*:*",
            "matchCriteriaId" : "F90244BE-C87B-4D69-B247-BA711DCDE130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4.1:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DDC313-20AA-437B-BABD-AFED6684E428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE46451-0692-4DFB-A256-33CC1790122B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-2:*:*:*:*:*:*",
            "matchCriteriaId" : "B27EE463-A425-4496-9669-5F8E2C0BF55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-3:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB07AB2-512D-4FC4-A08E-5AC6DB34FDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-7:*:*:*:*:*:*",
            "matchCriteriaId" : "0E688D75-82CF-489B-9C61-FF5750FFC1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-9:*:*:*:*:*:*",
            "matchCriteriaId" : "5B75F283-B37E-4915-86AF-674E6248AFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6B6E07-60F4-4142-A23E-A825F4476C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.6.1:patch1-1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1C7D33-D00E-44D2-8D9D-30092C61FCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017765",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell."
      }, {
        "lang" : "es",
        "value" : "Extreme EXOS en versiones 16.x, 21.x y 22.x permite que los administradores obtengan un shell root mediante vectores que involucren un shell de depuracion exsh."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A3F12F-B2C4-430C-A17C-1D7E644DA1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4413DB-0B93-4111-B5A4-E6F35D7C6BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6EAFB3-3747-4F28-A3E7-EE6BB32E82E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CD1A1D-86F8-4421-9728-2C150562576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FA8F0C-C560-4E34-BBA1-3DB8793458A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477D6932-555D-4563-BCB8-FDDB537E1FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9DBA4C-46D8-4094-B0AB-2682E77FBE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C73AFB-C826-4370-BC69-AFE3C1575465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1409DBBE-EADF-4237-BD2D-32EE2D28C985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9311A95-4875-4ED7-A78B-62187A1D4DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E0D1F6-B4D9-4C9D-A840-AA1460B8FEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC4F9FE-D10C-4967-A1AA-273835DE8876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF9EDE-448B-40DF-95B9-0924D590B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA527BE-C0CD-4CA5-9713-58371D8F1F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F71B7-A9CA-4B07-9550-64761ED94433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3232567C-B89C-46EA-96DB-FAB08181BC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A18321A-679E-4890-ACEA-CBD9231E3E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process."
      }, {
        "lang" : "es",
        "value" : "Extreme EXOS en versiones 16.x, 21.x y 22.x permite que los administradores obtengan un shell root mediante vectores que involucren un proceso privilegiado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A3F12F-B2C4-430C-A17C-1D7E644DA1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4413DB-0B93-4111-B5A4-E6F35D7C6BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6EAFB3-3747-4F28-A3E7-EE6BB32E82E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CD1A1D-86F8-4421-9728-2C150562576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FA8F0C-C560-4E34-BBA1-3DB8793458A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477D6932-555D-4563-BCB8-FDDB537E1FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9DBA4C-46D8-4094-B0AB-2682E77FBE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C73AFB-C826-4370-BC69-AFE3C1575465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1409DBBE-EADF-4237-BD2D-32EE2D28C985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9311A95-4875-4ED7-A78B-62187A1D4DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E0D1F6-B4D9-4C9D-A840-AA1460B8FEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC4F9FE-D10C-4967-A1AA-273835DE8876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF9EDE-448B-40DF-95B9-0924D590B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA527BE-C0CD-4CA5-9713-58371D8F1F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F71B7-A9CA-4B07-9550-64761ED94433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3232567C-B89C-46EA-96DB-FAB08181BC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A18321A-679E-4890-ACEA-CBD9231E3E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the \"exsh restricted shell\" protection mechanism and obtain an interactive shell."
      }, {
        "lang" : "es",
        "value" : "Extreme EXOS en versiones 16.x, 21.x y 22.x permite que los administradores omitan el mecanismo de protección \"exsh restricted shell\" y obtener un shell interactivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A3F12F-B2C4-430C-A17C-1D7E644DA1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4413DB-0B93-4111-B5A4-E6F35D7C6BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6EAFB3-3747-4F28-A3E7-EE6BB32E82E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CD1A1D-86F8-4421-9728-2C150562576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FA8F0C-C560-4E34-BBA1-3DB8793458A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477D6932-555D-4563-BCB8-FDDB537E1FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9DBA4C-46D8-4094-B0AB-2682E77FBE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C73AFB-C826-4370-BC69-AFE3C1575465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1409DBBE-EADF-4237-BD2D-32EE2D28C985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9311A95-4875-4ED7-A78B-62187A1D4DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E0D1F6-B4D9-4C9D-A840-AA1460B8FEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC4F9FE-D10C-4967-A1AA-273835DE8876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF9EDE-448B-40DF-95B9-0924D590B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA527BE-C0CD-4CA5-9713-58371D8F1F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F71B7-A9CA-4B07-9550-64761ED94433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3232567C-B89C-46EA-96DB-FAB08181BC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A18321A-679E-4890-ACEA-CBD9231E3E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values."
      }, {
        "lang" : "es",
        "value" : "Extreme EXOS en versiones 15.7, 16.x, 21.x y 22.x permite que atacantes secuestren sesiones determinando valores SessionID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A3F12F-B2C4-430C-A17C-1D7E644DA1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4413DB-0B93-4111-B5A4-E6F35D7C6BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6EAFB3-3747-4F28-A3E7-EE6BB32E82E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CD1A1D-86F8-4421-9728-2C150562576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FA8F0C-C560-4E34-BBA1-3DB8793458A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477D6932-555D-4563-BCB8-FDDB537E1FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9DBA4C-46D8-4094-B0AB-2682E77FBE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:16.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C73AFB-C826-4370-BC69-AFE3C1575465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1409DBBE-EADF-4237-BD2D-32EE2D28C985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9311A95-4875-4ED7-A78B-62187A1D4DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E0D1F6-B4D9-4C9D-A840-AA1460B8FEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC4F9FE-D10C-4967-A1AA-273835DE8876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:21.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF9EDE-448B-40DF-95B9-0924D590B8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA527BE-C0CD-4CA5-9713-58371D8F1F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F71B7-A9CA-4B07-9550-64761ED94433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3232567C-B89C-46EA-96DB-FAB08181BC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A18321A-679E-4890-ACEA-CBD9231E3E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017765",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://extremeportal.force.com/ExtrArticleDetail?n=000017765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3000 by default)."
      }, {
        "lang" : "es",
        "value" : "En Suricata en versiones anteriores a las 4.x, era posible desencadenar numerosos chequeos redundantes en el contenido del trafico de red manipulado con una firma especifica a causa de DetectEngineContentInspection en detect-engine-content-inspection.c. El motor de busqueda no se detiene cuando deberí­a despues de que no se encuentre ninguna coincidencia. En su lugar, solo se detiene al llegar al lí­mite de recursión de inspecciónn (3000 por defecto)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openinfosecfoundation:suricata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.4",
            "matchCriteriaId" : "DA496538-972D-4CF8-822E-F1F4BE498669"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/b9579fbe7dd408200ef03cbe20efddb624b73885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/2231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/b9579fbe7dd408200ef03cbe20efddb624b73885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/2231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI)."
      }, {
        "lang" : "es",
        "value" : "Existe inyección SQL en el parámetro de reinicio de contraseña de E-Sic 1.0 (también conocido como parámetro cpfcnpj en la URI /reset)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D5FF9-DFB2-4B4E-9153-6FAA22BA3484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://whiteboyz.xyz/esic-software-publico-sql-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42981/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://whiteboyz.xyz/esic-software-publico-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42981/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password."
      }, {
        "lang" : "es",
        "value" : "Existe una omisión de autenticación en la URI /index (conocido como login) de E-Sic 1.0 mediante valores '=''or' para el nombre de usuario y la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D5FF9-DFB2-4B4E-9153-6FAA22BA3484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://whiteboyz.xyz/esic-software-publico-autentication-bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42980/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://whiteboyz.xyz/esic-software-publico-autentication-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42980/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in the E-Sic 1.0 /cadastro/index.php URI (aka the requester's registration area) via the nome parameter."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) en la URI cadastro/index.php (conocido como el área de registro del solicitante) en E-Sic 1.0 mediante el parámetro nome."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D5FF9-DFB2-4B4E-9153-6FAA22BA3484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://whiteboyz.xyz/esic-software-publico-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42983/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://whiteboyz.xyz/esic-software-publico-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42983/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php (aka the zip code search script)."
      }, {
        "lang" : "es",
        "value" : "Existe inyección SQL en E-Sic 1.0 mediante el parámetro f en esiclivre/restrito/inc/buscacep.php (conocido como el script de búsqueda de códigos zip)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D5FF9-DFB2-4B4E-9153-6FAA22BA3484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42982/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42982/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors.  NOTE: the vendor disputes this because there is no command shell in the product or in the associated SDK"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El componente de importación de certificados en los dispositivos IDEMIA (anteriormente Morpho) MorphoSmart 1300 Series (también conocidos como MSO 1300 Series) permite que los usuarios locales obtengan un shell de comandos y, en consecuencia, obtengan privilegios mediante vectores sin especificar. NOTA: el fabricante discute esto debido a que no hay ningún shell de comandos en el producto o en el SDK asociado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:idemia:mso_1300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB16DC5-ECE7-4C54-ADE6-4009D92F01F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:idemia:mso_1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FA320A-CCD5-42B9-AE18-613953B089A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content."
      }, {
        "lang" : "es",
        "value" : "osTicket 1.10.1 proporciona una funcionalidad para subir archivos html con formatos asociados. Sin embargo, no valida correctamente los contenidos de los archivos subidos y por lo tanto acepta cualquier tipo de archivo, como en el caso de una petición tickets.php que se modifica con una extensión .html cambiada a una extensión .exe. Un atacante podría utilizar esta vulnerabilidad para subir archivos arbitrarios que contengan contenidos maliciosos a la aplicación web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD9CB41-1BE8-4825-998E-9A204D5C2D35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://0day.today/exploits/28864",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nakedsecurity.com/cve/CVE-2017-15580/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://becomepentester.blogspot.com/2017/10/osTicket-File-Upload-Restrictions-Bypassed-CVE-2017-15580.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017100187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144747/osticket1101-shell.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cyber-security.ro/blog/2017/10/25/osticket-1-10-1-shell-upload/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45169/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://0day.today/exploits/28864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nakedsecurity.com/cve/CVE-2017-15580/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://becomepentester.blogspot.com/2017/10/osTicket-File-Upload-Restrictions-Bypassed-CVE-2017-15580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017100187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144747/osticket1101-shell.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cyber-security.ro/blog/2017/10/25/osticket-1-10-1-shell-upload/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45169/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) basado en DOM en Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0 y 7.9.1 mediante una URI manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A98455A-9D85-4FD7-B082-67BE570D4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC58FD1F-81C3-470A-8F2D-6A03380BE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D7F90E-861B-4FD7-826F-F8C1458B011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0652BC-A3BD-426F-8826-0DA9CB9E4D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053C94CB-81A6-44F7-8504-DB1B5DF18609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49326972-58BD-4B7D-87CF-0A8AD2A11B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1787609A-E390-495E-9631-DEDC5FA3676F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fireshellsecurity.team/assets/pdf/DOM-Based-Cross-Site-Scripting-_XSS_-Logitech-Media-Server.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43024/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fireshellsecurity.team/assets/pdf/DOM-Based-Cross-Site-Scripting-_XSS_-Logitech-Media-Server.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43024/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T08:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Cisco Small Business SA520 y SA540 con firmware 2.1.71 y 2.2.0.7 permiten el salto de directorio ../ en scgi-bin/platform.cgi mediante el parámetro thispage para leer archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_sa520_firmware:2.1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F993E2BF-1DE6-4005-9282-4D90E645DB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_sa520_firmware:2.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D0E5FA-D864-4E03-95C9-8A9E48B2524C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_sa520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EA6A59-BD84-43DB-8F32-C89FF5023F6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_sa540_firmware:2.1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F60A9B1-93FF-4CB6-9BAE-FCBAEC6A4F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:small_business_sa540_firmware:2.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86337DB-CD72-4174-9A85-624BF75F8830"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:small_business_sa540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DED956A-BD58-4BE0-A227-A9E1E6F52A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.fwhibbit.es/lfi-en-cisco-small-business-sa500-series-cuando-la-seguridad-de-tu-red-esta-hecha-un-cisco",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.fwhibbit.es/lfi-en-cisco-small-business-sa500-series-cuando-la-seguridad-de-tu-red-esta-hecha-un-cisco",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9946",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-10-23T08:29:00.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Siemens APOGEE PXC y TALON TC BACnet Automation Controllers en todas las versiones anteriores a la V3.5. Un atacante con acceso de red al servidor web integrado (80/tcp y 443/tcp) podría omitir la autenticación y descargar información sensble del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "2449F533-CA42-44D4-B69E-B7B9F3A4EAD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:apogee_pxc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73DAA70-4CFB-4E63-ADC7-EC8A93E0BBBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "B1604D4C-3E06-46D0-8D39-0A5BC7CE5A1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9485F0B-03E0-4442-B615-2DA91AE1CD00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "23756E05-4AD6-4888-AC07-C8E906CA5722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D32EF0-8AEC-4594-8928-45F34DC60600"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "AB1AF7BE-295B-4386-81F3-B08A1E15DD5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C647D8-1725-42FA-8042-6C413EE67573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101248",
        "source" : "productcert@siemens.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9947",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-10-23T08:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server (80/tcp and 443/tcp) to obtain information on the structure of the file system of the affected devices."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Siemens APOGEE PXC y TALON TC BACnet Automation Controllers en todas las versiones anteriores a la V3.5. Una vulnerabilidad de salto de directorio podría permitir a un atacante remoto con acceso de red al servidor web integrado (80/tcp y 443/tcp) obtener información de la estructura del sistema de archivos de los dispositivos afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "2449F533-CA42-44D4-B69E-B7B9F3A4EAD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:apogee_pxc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73DAA70-4CFB-4E63-ADC7-EC8A93E0BBBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "B1604D4C-3E06-46D0-8D39-0A5BC7CE5A1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9485F0B-03E0-4442-B615-2DA91AE1CD00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "23756E05-4AD6-4888-AC07-C8E906CA5722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D32EF0-8AEC-4594-8928-45F34DC60600"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "AB1AF7BE-295B-4386-81F3-B08A1E15DD5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C647D8-1725-42FA-8042-6C413EE67573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101248",
        "source" : "productcert@siemens.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T17:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php."
      }, {
        "lang" : "es",
        "value" : "En phpMyFaq en versiones anteriores a la 2.9.9, existe Cross-Site Request Forgery (CSRF) en admin/ajax.config.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-15808.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/a249b4645fb86f6a9fbe5d2344ab1cbdb906b75c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/a249b4645fb86f6a9fbe5d2344ab1cbdb906b75c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T17:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag."
      }, {
        "lang" : "es",
        "value" : "En phpMyFaq en versiones anteriores a la 2.9.9, existe Cross-Site Scripting (XSS) en admin/tags.main.php mediante una etiqueta manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "1D0B1C07-83F7-4DB0-976C-51483D7DF516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/cb648f0d5690b81647dd5c9efe942ebf6cce7da9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/cb648f0d5690b81647dd5c9efe942ebf6cce7da9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T17:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "El plugin PopCash.Net Code Integration Tool en versiones anteriores a la 1.1 para WordPress tiene Cross-Site Scripting (XSS) mediante el parámetro tab en wp-admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popcash:popcash.net_code_integration_tool:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "B06FDB21-A472-4AA6-B1B0-E6980F3E3162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144583/WordPress-PopCash.Net-Publisher-Code-Integration-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/popcashnet-code-integration-tool/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8936",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144583/WordPress-PopCash.Net-Publisher-Code-Integration-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/popcashnet-code-integration-tool/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T17:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php."
      }, {
        "lang" : "es",
        "value" : "El plugin Pootle Button en versiones anteriores a la 1.2.0 para WordPress tiene Cross-Site Scripting (XSS) mediante el parámetro assets_url en assets/dialog.php, explotable a través de wp-admin/admin-ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pootlepress:pootle_button:1.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BC87313C-99EE-4853-A226-BBAEBF461BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pootlepress:pootle_button:1.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B4A5620A-66C7-41B4-BE5C-4FECB996A8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pootlepress:pootle_button:1.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C91E225E-C764-4817-A869-233C3953CC1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144582/WordPress-Pootle-Button-1.1.1-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1745805/pootle-button/tags/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144582/WordPress-Pootle-Button-1.1.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1745805/pootle-button/tags/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T17:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel."
      }, {
        "lang" : "es",
        "value" : "El plugin Easy Appointments en versiones anteriores a la 1.12.0 para WordPress tiene Cross-Site Scripting (XSS) a través de los valores de Settings en el panel de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-appointments:easy_appointments:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.11.7",
            "matchCriteriaId" : "EDC2C505-E82D-4E0F-B00F-CE70469FDC40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/easy-appointments/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8937",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/easy-appointments/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-23T18:29:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en routers WiFi TP-Link WR940N con la versión 4 de hardware permiten que usuarios autenticados remotos ejecuten código arbitrario mediante (1) el parámetro ping_addr en PingIframeRpm.htm o (2) el parámetro dnsserver2 en WanStaticIpV6CfgRpm.htm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wr940n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B954DE5B-3D99-43B6-8BC2-67E37581E911"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wr940n:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E81ED78-04AA-497E-9E38-087B9AB3701D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43022/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43022/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13682",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-10-23T20:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code."
      }, {
        "lang" : "es",
        "value" : "En Symantec Encryption Desktop en versiones anteriores a SED 10.4.1 MP2HF1, una fuga de memoria de kernel es un tipo de fuga de recursos que puede ocurrir cuando un programa informático gestiona incorrectamente asignaciones de memoria de manera que la memoria que ya no se necesite no se libere. En programación orientada a objetos, puede ocurrir una fuga de memoria cuando un objeto se almacena en la memoria pero el código que se ejecuta no puede acceder a él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:encryption_desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.4.1",
            "matchCriteriaId" : "F56EA450-B324-4016-B461-772CFCF28E1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101497",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13683",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-10-23T20:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code."
      }, {
        "lang" : "es",
        "value" : "En Symantec Endpoint Encryption en versiones anteriores a SEE 11.1.3HF3, una fuga de memoria de kernel es un tipo de fuga de recursos que puede ocurrir cuando un programa informático gestiona incorrectamente asignaciones de memoria de manera que la memoria que ya no se necesite no se libere. En programación orientada a objetos, puede ocurrir una fuga de memoria cuando un objeto se almacena en la memoria pero el código que se ejecuta no puede acceder a el."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B133DD-A711-4E02-9FE5-770E8F081364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C94A7CB-DB16-4079-AD12-B7852623D127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDD7ACA-241C-42A8-B7AC-B58113A3F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5CDC0C-0549-4F3D-984F-D503C39D41C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101498",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12613",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-24T01:29:02.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input."
      }, {
        "lang" : "es",
        "value" : "Cuando las funciones apr_time_exp*() o apr_os_exp_time*() se invocan con un valor del campo no válido en Apache Portable Runtime APR 1.6.2 y anteriores, se podría acceder a la memoria fuera de límites convirtiendo este valor en un valor apr_time_exp_t, revelando potencialmente el contenido de otro valor de memoria dinámica estática. También podría desembocar en la terminación del programa, representando una vulnerabilidad de divulgación de información o de denegación de servicio en aplicaciones que llaman a esas funciones APR con entradas externas no validadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "7C450F13-ADED-49A6-A018-EF2EDD2ECF36"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B453CF7-9AA6-4B94-A003-BF7AE0B82F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2466282-51AB-478D-9FF4-FA524265ED2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2F2F98-DB90-43F6-8F28-3656207B6188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7EE4B6-A6EC-4B9B-91DF-79615796673F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967EC28A-607F-48F4-AD64-5E3041C768F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF83BB87-B203-48F9-9D06-48A5FE399050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E6D998-B41D-4B49-9E00-8336D2E40A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E02156-E748-4820-B76F-7074793837E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.apache.org/dist/apr/Announcement1.x.html",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/08/23/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101560",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3270",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0316",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1253",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/12489f2e4a9f9d390235c16298aca0d20658789de80d553513977f13%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339%40%3Ccommits.apr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2868b53339a6af65577146ad87016368c138388b09bff9d2860f50e%40%3Cdev.apr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra38094406cc38a05218ebd1158187feda021b0c3a1df400bbf296af8%40%3Cdev.apr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb1f3c85f50fbd924a0051675118d1609e57957a02ece7facb723155b%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc48a0acebbd74bbdeebc02ff228bb72c0631b21823fffe27d4691e9%40%3Ccommits.apr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00005.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00023.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://svn.apache.org/viewvc?view=revision&revision=1807976",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/Announcement1.x.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/08/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/12489f2e4a9f9d390235c16298aca0d20658789de80d553513977f13%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339%40%3Ccommits.apr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2868b53339a6af65577146ad87016368c138388b09bff9d2860f50e%40%3Cdev.apr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra38094406cc38a05218ebd1158187feda021b0c3a1df400bbf296af8%40%3Cdev.apr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb1f3c85f50fbd924a0051675118d1609e57957a02ece7facb723155b%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcc48a0acebbd74bbdeebc02ff228bb72c0631b21823fffe27d4691e9%40%3Ccommits.apr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://svn.apache.org/viewvc?view=revision&revision=1807976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12618",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-10-24T01:29:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Apache Portable Runtime Utility (APR-util) en versiones 1.6.0 y anteriores falla a la hora de validar la integridad de los archivos de la base de datos SDBM utilizados por la función apr_sdbm*(), resultando en un posible acceso de lectura fuera de límites. Un usuario local con acceso de escritura en la base de datos puede hacer que un programa o proceso que utilicen estas funciones se cierren de manera inesperada y provocque una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6999D3C8-5137-4421-9D56-F5D928349F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A141AE-0294-4C29-B296-789E8DCE5A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "502E78DE-6DE1-496C-B56F-3C133188D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2513B46B-C33F-40F9-9E1E-59841FBD02BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03590FE-F169-4081-9D69-100A78C5D24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798AEC88-A045-420B-A33D-A7D6F9994F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17B6205-04E3-4851-A21B-E21323F01BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F3A5AD-26C2-4D00-9CB8-49D594DE9266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909AAAEE-36C3-491C-921A-31942F0971D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EE5091-4EA0-4F7B-B429-C1A4A7072C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049C5194-3DA8-4E8F-905F-0CC841FC59FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C64010-7206-49D9-AEB4-5D28130B04FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B7DF6D-5DB4-4944-8E89-C0CC891AF62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA33281-303F-4583-9F4F-498E9018B3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E7546E-780A-41B2-B4F4-A54D25898A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5DD3B2-335B-4C44-8D42-D59161C69518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC85F3C-C7E0-4095-9195-4B7E9A37A073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC095A23-B074-43AD-B521-7B4DDCADA7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:0.9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BF5033-A025-43CB-BA6F-EFC75872CF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994D3DD2-32C7-4895-A0C6-F226C075E157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9982D865-1DAF-43D0-AABD-B63DF110365A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3657917A-EC7E-479D-A9AF-9144CA52FA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E56077C-EB5A-4D20-8E99-848D67DDB08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "224AB48D-4A8A-4906-AEEC-0BBC95E15A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CE5EE3-3FB1-4865-832E-25FADA08BBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4018BC8-50E9-4484-9BA0-3D17D1DA2390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02252670-6741-4152-87DA-AACA8EB25C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEBC8CE-7539-4C55-B746-B5CD77E1A90C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37DAF48-76E4-4821-98B0-1F88AD89D6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "988C50F7-18C7-4AF8-8320-6C88984B8D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850B8AF7-8453-4B9B-89E4-676CF906C0AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A68887-E0CB-4391-AFFF-A6BAF60818BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C390948-577A-4AD3-8FF2-63BE9B2C99FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B4182-54D7-4142-A89B-2925FE46451F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDE5E59-018B-49E3-AB91-1E5591DD0C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0A02D3-003F-4D01-B603-52CC616C51A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2323E7B-5244-4BAD-AC0C-12FFD4E00A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8411ABE9-E69B-4AFF-B83D-BEA179CDA5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E3A-CEA3-4F4A-9C66-CEA01C68A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BE72E7-4BF7-4D79-BD15-39167A58B20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660373C8-6312-427E-863F-86A9AD4E851D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12548A72-7EC3-4C09-B084-D5969DCE01F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F567995-C953-45E5-93C6-21F5C1B05E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120FB645-84B8-4F2C-8AA1-94E1E7191486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DAF92B-714B-4802-98A5-159634BF603A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAE9FC8-A998-4C63-A9C1-ED6325FA4C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B066694-6BBD-4B14-A75A-ECAAC4535CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82343260-40A9-4827-9898-A30B59DA6B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1CC96-3E96-457E-884C-0E1B20BCB69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22FDB88-2929-42FB-926C-F020DED5CEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F2572E-D753-4102-8402-E11288FADC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E395A237-55FE-48AD-BB57-A768D5D18494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A6A57-BEE0-43A1-B3DB-C969FB1CF748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7626B58-0014-4989-AC3B-A529002100AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89F5EAE7-D9F4-4A9F-BBE5-B538FB6AA5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D0B846-13BE-4558-9F79-473E33892A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EA9B77-196C-40E2-8126-63DB1EA31677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EBED8CC-19EB-4942-B898-4A6BC7B9BEB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime_utility:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A778C8-567A-4AF6-9087-40E3FC80E3F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101558",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T06:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php."
      }, {
        "lang" : "es",
        "value" : "En PHPSUGAR PHP Melody CMS 2.6.1, existe inyección SQL mediante el parámetro playlist en playlists.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsugar:php_melody:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9959A78-2D5F-4D68-88C7-80F06E66DCAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://w00troot.blogspot.in/2017/10/php-melody-2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/7Xjm8Wqt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43062/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://w00troot.blogspot.in/2017/10/php-melody-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/7Xjm8Wqt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43062/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en la validación minion id en SaltStack Salt en versiones anteriores a la 2016.3.8, en versiones 2016.11.x anteriores a la 2016.11.8 y versiones 2017.7.x anteriores a la 2017.7.2 permite que minions remotos con credenciales incorrectas se autentiquen en un master mediante un ID minion manipulado. NOTA: Esta vulnerabilidad existe debido a una solución incompleta para CVE-2017-12791."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016.3.7",
            "matchCriteriaId" : "CC5250DF-593F-42C2-A64F-47CE0E65070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689B37E8-7274-4B5A-9419-538A9AB7B99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B7EDF4-414F-429A-BD20-0B967737598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594339CF-8192-425D-9C8C-AA51342D9477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "80E02A57-EA6E-4729-8E4E-4F444DA0A88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6110046D-0532-41DB-9DF0-BB1BD1447D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54FADCE-5311-4C8A-9527-1623F9AAC69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E904BB7-706A-43E0-96CE-2A9E671E4FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0338B627-4E56-4B47-87BA-CE9446CB6345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB77EB21-90F0-4E5F-8C2F-2973460A1E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536FF3D1-C16D-4F40-8E80-D5956FC6693F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED0077F-8C9D-4043-B15E-61547A0EE58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F54D0CC-68F0-44E0-B565-BB9EFFE56817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "97BDE3E9-E1C7-4D8D-B886-A3CE617BF12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ABC6C6-5E17-4732-B24C-032767D6EBC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500748",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T17:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request."
      }, {
        "lang" : "es",
        "value" : "SaltStack Salt en versiones anteriores a la 2016.3.8, en versiones 2016.11.x anteriores a la 2016.11.8 y versiones 2017.7.x anteriores a la 2017.7.2 permite que atacantes remotos provoquen una denegación de servicio (DoS) mediante una petición de autenticación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016.3.7",
            "matchCriteriaId" : "CC5250DF-593F-42C2-A64F-47CE0E65070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689B37E8-7274-4B5A-9419-538A9AB7B99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B7EDF4-414F-429A-BD20-0B967737598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594339CF-8192-425D-9C8C-AA51342D9477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "80E02A57-EA6E-4729-8E4E-4F444DA0A88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6110046D-0532-41DB-9DF0-BB1BD1447D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54FADCE-5311-4C8A-9527-1623F9AAC69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E904BB7-706A-43E0-96CE-2A9E671E4FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0338B627-4E56-4B47-87BA-CE9446CB6345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB77EB21-90F0-4E5F-8C2F-2973460A1E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536FF3D1-C16D-4F40-8E80-D5956FC6693F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2016.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED0077F-8C9D-4043-B15E-61547A0EE58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F54D0CC-68F0-44E0-B565-BB9EFFE56817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "97BDE3E9-E1C7-4D8D-B886-A3CE617BF12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:2017.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ABC6C6-5E17-4732-B24C-032767D6EBC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500742",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T17:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de liberación doble (double free) en FFmpeg 3.3.4 y anteriores permite que atacantes remotos provoquen una denegación de servicio mediante un archivo AVI manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.4",
            "matchCriteriaId" : "D0168D4A-552C-41F3-A4C2-159C9BE75EDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/20/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101518",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/20/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T17:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer en Ayukov NFTPD 2.0 y anteriores permite que atacantes remotos ejecuten código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nftp_project:nftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "0E502D5C-0221-4843-9F5E-3B3D05DD7365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101602",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43025/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43448/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/46070/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43025/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43448/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/46070/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T17:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources (memory consumption) via unspecified vectors, possibly triggering an infinite loop."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio (DoS) en ArGoSoft Mini Mail Server 1.0.0.2 y anteriores permite que los atacantes agoten los recursos de la CPU (consumo de memoria) mediante vectores no especificados, posiblemente desencadenando un bucle infinito."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:mini_mail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.2",
            "matchCriteriaId" : "5E0FB155-2506-4052-BD9B-1ED4E272CB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43026/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43026/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T18:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php."
      }, {
        "lang" : "es",
        "value" : "Existe Cross Site Scripting (XSS) en el plugin wp-noexternallinks en versiones anteriores a la 3.5.19 para WordPress mediante el parámetro date1 o date 2 en wp-admin/options-general.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_no_external_links_project:wp_no_external_links:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.5.18",
            "matchCriteriaId" : "6B37B58B-D691-4DCF-A7A1-D0FD4FBCC9DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.openwall.net/full-disclosure/2017/06/02/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-noexternallinks/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.openwall.net/full-disclosure/2017/06/02/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-noexternallinks/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, (3) user_id, (4) username, (5) country_name, (6) browser, (7) operating_system, or (8) ip_address parameter to admin/partials/listing/listing.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) en el plugin user-login-history hasta la versión 1.5.2 para WordPress permiten que atacantes remotos inyecten scripts web o HTML arbitrarios a través del parámetro (1) date_from, (2) date_to, (3) user_id, (4) username, (5) country_name, (6) browser, (7) operating_system o (8) ip_address en admin/partials/listing/listing.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:user-login-history_project:user-login-history:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "663E678B-F260-4F59-9288-E90DB5BFED6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a61741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8939",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a61741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T20:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression \"function()\" substring, as demonstrated by a \"function(){console.log(\" call or a simple infinite loop. NOTE: the vendor agrees that denial of service can occur but notes that deserialize is explicitly listed as \"harmful\" within the README.md file"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La función deserialize en serialize-to-js hasta la versión 1.1.1 permite a los atacantes provocar una denegación de servicio (DoS) mediante vectores que involucren una subcadena de una función IIFE (Immediately Invoked Function Expression), tal y como se demuestra en una llamada \"function(){console.log(\" o un simple bucle infinito. NOTA: el fabricante está de acuerdo con que puede ocurrir la denegación de servicio, pero puntualiza que la función deserialize está explícitamente listada como \"dañina\" en el archivo README.md."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serialize-to-js_project:serialize-to-js:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "B15C493D-01B9-4575-A4BD-390437BB3842"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/commenthol/serialize-to-js/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/cve-2017-15871-dos-through-iife/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/commenthol/serialize-to-js/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/cve-2017-15871-dos-through-iife/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T20:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field."
      }, {
        "lang" : "es",
        "value" : "phpwcms 1.8.9 tiene Cross-Site Scripting (XSS) en include/inc_tmpl/admin.edituser.tmpl.php y include/inc_tmpl/admin.newuser.tmpl.php mediante el campo username (conocido como new_login)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwcms:phpwcms:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C4F140-5AA7-4A89-A99F-1ADF02BCF6B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slackero/phpwcms/commit/62c7c4a7a7de5effa0a82c89e77e53795a82e11d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/slackero/phpwcms/commit/90ee94a474b37919161f8112f9e36c53ad70492f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/slackero/phpwcms/commit/62c7c4a7a7de5effa0a82c89e77e53795a82e11d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/slackero/phpwcms/commit/90ee94a474b37919161f8112f9e36c53ad70492f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T20:29:00.280",
      "lastModified" : "2025-06-09T16:15:26.423",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation."
      }, {
        "lang" : "es",
        "value" : "La función get_next_block en archival/libarchive/decompress_bunzip2.c en BusyBox 1.27.2 tiene un desbordamiento de enteros que puede provocar una infracción de acceso de escritura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0039465-D53E-48B7-A583-294E0B6E6082"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.busybox.net/show_bug.cgi?id=10431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.busybox.net/busybox/commit/?id=0402cb32df015d9372578e3db27db47b33d5c7b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3935-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.busybox.net/show_bug.cgi?id=10431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.busybox.net/busybox/commit/?id=0402cb32df015d9372578e3db27db47b33d5c7b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3935-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T20:29:00.327",
      "lastModified" : "2025-06-09T16:15:26.680",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation."
      }, {
        "lang" : "es",
        "value" : "archival/libarchive/decompress_unlzma.c en BusyBox 1.27.2 tiene un subdesbordamiento de enteros que da lugar a una infracción de acceso de lectura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0039465-D53E-48B7-A583-294E0B6E6082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.busybox.net/show_bug.cgi?id=10436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.busybox.net/show_bug.cgi?id=10436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1209",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849."
      }, {
        "lang" : "es",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 y 5.0.2 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 123849."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "CE271ACB-648A-4117-91CB-95ABE6CBD598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "D516AA91-8C4D-4CFB-B7DF-1D520AAC13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "E63FCFEB-CBEF-43A0-987E-AA4551B3C7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "D8BB9447-81BD-4E24-9D6A-2C06EC306B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "89511A39-7BF6-4D39-B967-61B4222935B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "B08CA954-1BF8-47FC-B481-FB364A36F891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "0778E670-DEEB-41B7-938C-4D8D5309420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "EF76FC43-E44A-4F58-B28A-F0179D2F2E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E284F5BD-F566-4AAC-832F-788E52CBBFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "F215079D-209C-4ABE-BF5F-440AF895A772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008010",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123849",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1210",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850."
      }, {
        "lang" : "es",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 y 5.0.2 podría permitir que un atacante no autenticado inyecte datos en archivos de log manipulados para que parezcan legítimos. IBM X-Force ID: 123850."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "CE271ACB-648A-4117-91CB-95ABE6CBD598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "D516AA91-8C4D-4CFB-B7DF-1D520AAC13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "E63FCFEB-CBEF-43A0-987E-AA4551B3C7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "D8BB9447-81BD-4E24-9D6A-2C06EC306B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "89511A39-7BF6-4D39-B967-61B4222935B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "B08CA954-1BF8-47FC-B481-FB364A36F891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "0778E670-DEEB-41B7-938C-4D8D5309420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "EF76FC43-E44A-4F58-B28A-F0179D2F2E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E284F5BD-F566-4AAC-832F-788E52CBBFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "F215079D-209C-4ABE-BF5F-440AF895A772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008009",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123850",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1211",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851."
      }, {
        "lang" : "es",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 y 5.0.2 podría revelar información sensible a un usuario local si el registro está activado. IBM X-Force ID: 123851."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "CE271ACB-648A-4117-91CB-95ABE6CBD598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "D516AA91-8C4D-4CFB-B7DF-1D520AAC13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "E63FCFEB-CBEF-43A0-987E-AA4551B3C7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "D8BB9447-81BD-4E24-9D6A-2C06EC306B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "89511A39-7BF6-4D39-B967-61B4222935B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "B08CA954-1BF8-47FC-B481-FB364A36F891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "0778E670-DEEB-41B7-938C-4D8D5309420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "EF76FC43-E44A-4F58-B28A-F0179D2F2E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E284F5BD-F566-4AAC-832F-788E52CBBFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "F215079D-209C-4ABE-BF5F-440AF895A772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008011",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101526",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123851",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1212",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852."
      }, {
        "lang" : "es",
        "value" : "IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 y 5.0.2 es vulnerable a una denegación de servicio (DoS) a la hora de visualizar o abrir un archivo grande. IBM X-Force ID: 123852."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "CE271ACB-648A-4117-91CB-95ABE6CBD598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "D516AA91-8C4D-4CFB-B7DF-1D520AAC13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "E63FCFEB-CBEF-43A0-987E-AA4551B3C7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "D8BB9447-81BD-4E24-9D6A-2C06EC306B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "89511A39-7BF6-4D39-B967-61B4222935B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "B08CA954-1BF8-47FC-B481-FB364A36F891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "0778E670-DEEB-41B7-938C-4D8D5309420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.1:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "004CBE54-BAD6-41FA-9F0C-2330128BDC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F782CCD4-60C9-4967-812C-CFD15260E80C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:daeja_viewone:5.0.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "61E8C3A9-8096-4BD5-A354-6B7B2DDA59F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007466",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123852",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22007466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1375",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868."
      }, {
        "lang" : "es",
        "value" : "IBM System Storage Storwize V7000 Unified (V7000U) 1.5 y 1.6 utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 126868."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:storwize_unified_v7000_software:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCCCC34-6BED-4B5E-B751-3D46170F58F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:storwize_unified_v7000_software:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E3848D-D4BD-450F-A8BF-B1229659A408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010657",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101561",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126868",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1523",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Master Data Management - Collaborative Edition 11.5 podría permitir que un usuario no autorizado descargue informes sin autenticación. IBM X-Force ID: 129892."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_master_data_management:11.5:*:*:*:collaborative:*:*:*",
            "matchCriteriaId" : "C2EFEE45-891A-4DC6-AB29-1D16A462736E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101566",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129892",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22009633",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22009633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1583",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-24T21:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (IBM Liberty for Java para Bluemix 3.13) podría permitir que un atacante remoto obtenga información sensible debido a una gestión incorrecta de los errores por parte de MyFaces en JSF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:liberty:3.13:*:*:*:*:bluemix:*:*",
            "matchCriteriaId" : "A9A700C8-709B-49B9-A8F9-10B608C75387"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009704",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101522",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039695",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132342",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T21:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en fields/types/markdown/MarkdownType.js en KeystoneJS en versiones anteriores a la 4.0.0-beta.7 mediante la característica Contact Us."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:*:beta7:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "5CFD17D2-14DC-40F3-8699-283A25281E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101541",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144756/KeystoneJS-4.0.0-beta.5-Unauthenticated-Stored-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43054/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144756/KeystoneJS-4.0.0-beta.5-Unauthenticated-Stored-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43054/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T21:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export."
      }, {
        "lang" : "es",
        "value" : "Existe inyección de CSV (también conocido como Excel Macro Injection or Formula Injection) en admin/server/api/download.js y lib/list/getCSVData.js en KeystoneJS en versiones anteriores a la 4.0.0-beta.7 mediante un valor que no se gestiona de manera correcta en una exportación de CSV."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:*:beta5:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "7F1B9DD7-9603-44E7-99F8-7CA1199D0F8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144755/KeystoneJS-4.0.0-beta.5-Unauthenticated-CSV-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43053/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144755/KeystoneJS-4.0.0-beta.5-Unauthenticated-CSV-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T22:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php (for insert_group and update_group)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la interfaz web de EyesOfNetwork (también conocido como eonweb) 5.1-0 permite que administradores autenticados remotos ejecuten comandos SQL arbitrarios mediante el parámetro group_name en module/admin_group/add_modify_group.php (para insert_group y update_group)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php%20SQLi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php-update_group-SQL%20injection%20vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php%20SQLi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php-update_group-SQL%20injection%20vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-24T22:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the \"content brief\" or \"content extended\" field, a different vulnerability than CVE-2017-15878."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en KeystoneJS en versiones anteriores a la 4.0.0-beta.7 permite que administradores autenticados remotos inyecten scripts web o HTML arbitrarios mediante el campo \"content brief\" o \"content extended\". Esta es una vulnerabilidad diferente de CVE-2017-15878."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.3.22",
            "matchCriteriaId" : "C32D3468-09D8-4515-B8B4-CBECED5C6EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:4.0.0:-:*:*:*:node.js:*:*",
            "matchCriteriaId" : "939A5AB7-633A-4013-9A5F-FE793D6CDBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:4.0.0:beta1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DA566AA1-50F8-4A8C-9D50-FD6C98C24702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:4.0.0:beta2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AFE82BBF-FAD3-4A0F-BF9C-A6B735CE9C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:4.0.0:beta3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B01C0065-8918-42E1-A7FF-002C0C088B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:4.0.0:beta4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "709083AB-14C2-4DDD-ADC2-436587ECBBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:4.0.0:beta5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "872696B2-6C8F-406E-AD2E-A862BE2985EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101541",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/issues/4437",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/issues/4437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-25T06:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214."
      }, {
        "lang" : "es",
        "value" : "XSS reflejado en el portal de administración web en la versión 2.03 de la cámara de red Axis 2100 permite que un atacante ejecute código JavaScript arbitrario mediante el parámetro conf_Layout_OwnTitle en view/view.shtml. NOTA: esta vulnerabilidad puede solaparse con CVE-2007-5214"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:2100_network_camera_firmware:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D5C82E-FF00-4A8F-813F-5F17BC03AF96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:2100_network_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5525-00CD-4ED8-9C62-B027D1D4F730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12705",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-10-25T07:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer overflow, which may crash the process and allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en memoria dinámica (heap) en Advantech WebOP. Un archivo de proyecto manipulado con fines maliciosos puede desencadenar un desbordamiento de búfer basado en memoria dinámica (heap), lo que puede provocar el cierre inesperado del proceso y permitir que un atacante ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webop:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F492C0B4-54CC-40BE-A367-1FD87DC51598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99476",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-227-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-227-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1164",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-25T12:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 123036."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101586",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123036",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1169",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-25T12:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188."
      }, {
        "lang" : "es",
        "value" : "DOORS Siguiente generación de IBM (DNG/RRC) es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 123188."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101593",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123188",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1241",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-25T12:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en aplicaciones basadas en Jazz Foundation de IBM podría permitir que se muestre información de la traza de pila a un atacante. IBM X-Force ID: 124523."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101599",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124523",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1295",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-25T12:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157."
      }, {
        "lang" : "es",
        "value" : "RSA DM de IBM incluye una vulnerabilidad no especificada en aplicaciones CLM que podría dar lugar al filtrado de información. IBM X-Force ID: 125157."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101616",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125157",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1363",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-25T12:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856."
      }, {
        "lang" : "es",
        "value" : "Team Concert (RTC) de IBM es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126856."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101587",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126856",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T03:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files."
      }, {
        "lang" : "es",
        "value" : "La función process_open en sftp-server.c en OpenSSH, en versiones anteriores a la 7.6, no evita correctamente las operaciones de escritura en el modo readonly, lo que permite que los atacantes creen archivos de longitud cero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6",
            "matchCriteriaId" : "AD490B42-DD19-477D-B3C0-B9CE4D14FB16"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517A2282-C254-49EB-A52D-FC2B45E70ADD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4D418D-B526-46B9-B439-E1963BF88C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.7",
            "matchCriteriaId" : "9DBEE506-E864-4FC6-B5D3-7E134438592C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "B92F025C-D612-4A64-B138-E6B4B113B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "493789AC-966C-48F4-900B-949EFA689E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.7",
            "matchCriteriaId" : "5E73AC99-34AC-4D4B-A946-34F33AAEC4A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.7",
            "matchCriteriaId" : "D4BE7695-11DB-4F04-A469-91A29A83B358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:9.6:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3B82868F-6BBC-40D7-B410-1BCFF2C70B4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB30733E-68FC-49C4-86C0-7FEE75C366BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6361DAC6-600F-4B15-8797-D67F298F46FB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101552",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-05",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180423-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssh.com/txt/release-7.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180423-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssh.com/txt/release-7.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DGS-1500 Ax en versiones anteriores a la 2.51B021 tienen una contraseña embebida, lo que permite que atacantes remotos obtengan acceso al shell."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dgs-1500_firmware:2.10.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B836107-357D-440F-8662-4461B3DC534B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dgs-1500_firmware:2.50.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653F5564-C4C8-4DD1-A1AD-DC8AF3C415AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dgs-1500_firmware:2.51.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B2AF8A-28CB-4466-A894-9439984B0592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dgs-1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5C435C-E77D-4FFA-89EE-0011B7A7A7A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-20/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-28/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-28P/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-52/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-20/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-28/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-28P/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-52/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T05:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android allows remote attackers to cause a denial of service (application crash) via a large VPN server-list file."
      }, {
        "lang" : "es",
        "value" : "La aplicación London Trust Media Private Internet Access (PIA), en versiones anteriores a la 1.3.3.1 para Android permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante un archivo de lista de servidores VPN de gran tamaño."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:londontrustmedia:private_internet_access:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "1.3.3.1",
            "matchCriteriaId" : "D7E8E29D-D58B-48D9-8CD4-CFCD25C9C500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/10/25/advisory-pia-android-app-cve-2017-15882/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/10/25/advisory-pia-android-app-cve-2017-15882/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T05:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en phpCollab, en su versión 2.5.1 y anteriores, permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro id en newsdesk/newsdesk.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcollab:phpcollab:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "9D34B563-0710-4247-B8E3-0110FD3775EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sstrunk.com/cve/phpCollab_newsdesk.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.sstrunk.com/cve/phpCollab_newsdesk.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7335",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-10-26T13:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters \"refresh\" and \"branchtotable\" present in HTTP POST requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiWLC en versiones 6.1-x (6.1-2, 6.1-4 y 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); y 8.x (8.0, 8.1, 8.2 y 8.3.0-8.3.2) permite que un usuario autenticado inyecte scripts web o HTML arbitrarios mediante parámetros \"refresh\" y \"branchtotable\" no sanitizados presentes en peticiones HTTP POST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:6.1-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87F7FFB-1E43-4CEE-8F5C-85A6F87AF447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:6.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D90FE1-EDA4-40F6-ADB0-969CAB8645F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:6.1-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "347BFB74-E014-4C31-B292-08BC6B96B2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:7.0-7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C562DA6-693C-4C16-A69A-17293C010D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:7.0-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5005218E-1CE5-49D9-BBF8-07DC6BDE1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:7.0-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "224292C5-AA1F-4ECE-A89A-08DD0BD5CDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:7.0-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743234D6-C2B9-4980-969D-C6811142CAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03C8D2-C2DC-42FA-BB60-AAE542646B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBAC292-6C47-41BC-92A0-2038280D3FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5B0F43-DFFF-4603-AAB3-742F9E9F7ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138354E5-2281-422B-95D9-879D900DFF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6300548E-1D1B-4F9D-9894-0C4D2906E2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C337BE-93A1-4AC4-87D3-4F620A05AF1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101287",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-106",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7341",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-10-26T13:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos de sistema operativo en la interfaz de usuario web para la descarga de scripts en el punto de acceso al gestor de archivo ene Fortinet FortiWLC, desde la versión 6.1-2 hasta la 6.1-5, desde la 7.0-7 hasta la 7.0-10, la 8.0 hasta la 8.2 y la 8.3.0 hasta la 8.3.2 permite que un usuario administrador autenticado ejecute comandos arbitrarios de la consola del sistema mediante peticiones HTTP manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1-2",
            "versionEndIncluding" : "6.1-5",
            "matchCriteriaId" : "32B5AEE4-D578-49CB-82B8-BB234EC09F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0-7",
            "versionEndIncluding" : "7.0-10",
            "matchCriteriaId" : "C743E7EB-4C55-482D-B39A-51EF4E1AF19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "6413A393-8FFC-46BC-92F1-DEA776815122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0",
            "versionEndIncluding" : "8.3.2",
            "matchCriteriaId" : "5210AB0C-6778-42D9-8353-ABD2E4C1C2AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101273",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-119",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7732",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-10-26T13:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en la página de inicio de sesión preautenticación al webmail personalizada de Fortinet FortiMail 5.1 y anteriores, desde la versión 5.2.0 hasta la 5.2.9 y la versión 5.3.0 hasta la 5.3.9 permite que un atacante inyecte scripts web o HTML arbitrarios mediante peticiones HTTP manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2822C6B9-7FD5-4E1B-907B-F324F28A82A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB89536-8E1E-4E83-9DFA-C9BFF8B310C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178BB7DA-C703-40E7-8070-D2D001700585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8102D2F0-A12F-4B02-B48A-D7C0790DD3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA17336-50C1-404F-92E4-8107CFAB4D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E85921-4280-44AE-8A94-1158620E9728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B65F87F-6896-4DC5-99CC-C900E37ADDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A59FA3B-CF8B-4088-A27F-C4939873E552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A60D9-64F5-4DF2-B0FE-3AA4CCD85D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6386E32B-365F-4DC8-AA77-14579BB84CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7FD9C8-F970-4949-B497-01FB3C1A2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90956836-650E-45B3-8BFE-46AD5FBC484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B901768-B13B-456F-9909-E19103A5CAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D819B2A1-0A5C-45E7-A4B6-395670EFE0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9DB8EF-E990-429A-839C-9E178DA92A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5B9F82-F87C-47E1-AA75-1B7F001CC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F946FB0-E890-41C3-BFDC-D7734CE3DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2C95E3-0E29-49D9-A9ED-657BC2B05CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CF2645-2997-4939-B9C0-D7A42ECAFEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4D9FF8-64D0-4EF3-A165-C86A68B36BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6699A9-6EBD-42B9-87E8-AF4D3A124679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5984C-2DD3-486F-96F3-B248B4ED0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED77E9D-0865-4BCE-B28B-222971AD198A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A21B130-63A1-459B-A726-B47643A02AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F85C06C-2EFE-404B-9DB0-A9FC3B307BCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3885FE-A0FE-4204-A7C3-2E339B430D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E004F2-4B2D-4BB7-9B37-CB4E00B7EA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B586E3F-520C-4842-A18C-C2F44E747569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD12406-E31F-416E-B65A-1486B5E9F86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EF9338-DEB2-4F15-B26B-48B3D7D08659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5421E516-3C05-409F-B6D8-6215223EBB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39660F44-9613-496D-BA2B-1FFAB528B6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6909D1FB-6E23-4CE6-BA70-F2109ACACCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A724687-46DC-4CE3-A11E-45D504C97907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A7E80F-DA0D-4A6B-937E-292E02611FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimail:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A50BAA-4DAC-4435-89D1-F213EE1BA65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101278",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039584",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-099",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T14:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service."
      }, {
        "lang" : "es",
        "value" : "En systemd 223 hasta 235, un servidor DNS remoto puede responder con un registro de recurso DNS NSEC manipulado de forma personalizada para desencadenar un bucle infinito en la función dns_packet_read_type_window() del servicio \"systemd-resolved\" y provocar una denegación de servicio en el servicio afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299693FA-4A78-4FBC-8F1B-4057D33048DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2B3298-9E3C-4065-90B2-C286DF9B19C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD47B5C2-9331-41A5-BC6D-7E9CDD4F78FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20F0DE8-891A-46E7-A5B5-0227E1AA5C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272F36CE-50AF-4E57-9D9C-082D72EF26FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15362470-BF82-4CDB-988A-E077251B8673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DD52ED-400F-4E9C-B9C3-907DE5ABCBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647F0C03-CD32-4E38-9F9B-5567620A0019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4247C36B-6791-48FA-80E9-C2180EDE0FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD161270-1B4E-4B42-938F-8105291FA0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D906C008-68C8-4B10-8EF0-72D2289144A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75AE9AA-3786-49E2-AF6A-1ED56BC86BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B87290B-5011-450A-8E1F-53DE2853E661"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101600",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039662",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1725351",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/pull/7184",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3558-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1725351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/pull/7184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3558-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12158",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-26T17:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que Keycloak podría aceptar una URL de cabecera HOST en la consola de administración y emplearla para determinar localizaciones de recursos web. Un atacante podría usar este fallo contra un usuario autenticado para lograr un XSS reflejado mediante un servidor malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign_on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1B9058-6085-456E-B86B-59C5B6169768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign_on:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FE6021-DBE7-4FFD-B021-F97EF80BDEEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D4D3F-5768-4F93-9337-3D82B7E0C118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489161",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12159",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-26T17:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la cookie empleada para la prevención de CSRF en Keycloak no era única para cada sesión. Un atacante podría usar este fallo para obtener acceso a una sesión de un usuario autenticado, conduciendo a una posible divulgación de información o a más ataques."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign_on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1B9058-6085-456E-B86B-59C5B6169768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign_on:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FE6021-DBE7-4FFD-B021-F97EF80BDEEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D4D3F-5768-4F93-9337-3D82B7E0C118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484111",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12160",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-26T17:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission revocation. An attacker on an already compromised resource could use this flaw to grant himself continued permissions and possibly conduct further attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el protocolo oauth en Keycloak permitiría que un recurso autenticado obtenga un par de tokens de acceso/actualización del servidor de autenticación, permitiendo su uso indefinido en caso de anulación de permisos. Un atacante en un recurso ya comprometido podría utilizar este fallo para concederse permisos continuados y, posiblemente, llevar a cabo más ataques."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0DE4E1-5D8D-40F3-8AC8-C7F736966158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484154",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15096",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-10-26T17:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en versiones anteriores a la 3.10 de GlusterFS. Una desreferencia de puntero NULL en la función send_brick_req en glusterfsd/src/gf_attach.c podría emplearse para provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.0",
            "matchCriteriaId" : "4E400E3C-66C2-43AD-83C5-C17DF478059B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1504255",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1504255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T17:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Admin Console in Ignite Realtime Openfire Server before 4.1.7 allows arbitrary client-side JavaScript code execution on victims who click a crafted setup/setup-host-settings.jsp?domain= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application."
      }, {
        "lang" : "es",
        "value" : "La consola de administrador en Ignite Realtime Openfire Server en versiones anteriores a la 4.1.7 permite la ejecución arbitraria de código JavaScript del lado del cliente en víctimas que hagan clic en un enlace setup/setup-host-settings.jsp?domain= manipulado. Esto también se conoce como XSS. El robo de ID o datos de sesión podría ocurrir a continuación, así como la posibilidad de omitir las protecciones anti CSRF, la inyección de iframes para establecer canales de comunicación, etc. La vulnerabilidad está presente tras iniciar sesión en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.6",
            "matchCriteriaId" : "E8D07190-AD0B-4C85-A458-010881DD711D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://becomepentester.blogspot.ae/2017/10/Cross-Site-Scripting-Openfire-4.1.6-CVE-2017-15911.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.igniterealtime.org/browse/OF-1417",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://becomepentester.blogspot.ae/2017/10/Cross-Site-Scripting-Openfire-4.1.6-CVE-2017-15911.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.igniterealtime.org/browse/OF-1417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T17:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server."
      }, {
        "lang" : "es",
        "value" : "En Paessler PRTG Network Monitor 17.3.33.2830, es posible crear un mapa como usuario de solo lectura falsificando una petición y enviándola al servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:17.3.33.2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50563838-FE5C-4B0F-BBFE-6D6D8072077D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3771",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-10-26T17:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process."
      }, {
        "lang" : "es",
        "value" : "No se ha asegurado adecuadamente el proceso de arranque del sistema en Lenovo E95 y ThinkCentre M710s/M710t debido a que los sistemas salían de fábrica sin haber completado el proceso de inicialización BIOS/UEFI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m710s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "m16kt40a",
            "matchCriteriaId" : "FFF5309A-4F76-49B6-A1D0-C1F140094B2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m710s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226E471D-D956-4F0A-8B5F-4D12ACB840DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkcentre_m710t_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "m16kt40a",
            "matchCriteriaId" : "290AB415-0743-4A82-9D18-C673AC64E8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkcentre_m710t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D36621-D244-4A52-A229-3BDF001E8527"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:aio_e95_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "m16kt40a",
            "matchCriteriaId" : "913D227D-10A0-4E36-A256-24A855F5459B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:aio_e95:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5250500A-6D1F-456D-8844-0B6E2CB7E8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17417",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-17417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T18:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php."
      }, {
        "lang" : "es",
        "value" : "El plugin ultimate-form-builder-lite en versiones anteriores a la 1.3.7 para WordPress tiene Inyección SQL, con inyección de objetos PHP como resultado, mediante wp-admin/admin-ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:ultimate-form-builder-lite:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.6",
            "matchCriteriaId" : "319739CC-67F2-4925-8451-BFD3DA68D081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101604",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/ultimate-form-builder-lite/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8935",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2017/10/zero-day-vulnerability-ultimate-form-builder-lite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/ultimate-form-builder-lite/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2017/10/zero-day-vulnerability-ultimate-form-builder-lite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T18:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c."
      }, {
        "lang" : "es",
        "value" : "En GNU Libextractor 1.4, existe una lectura fuera de límites en la función EXTRACTOR_dvi_extract_method function en plugins/dvi_extractor.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E4746A-DBC3-4EC1-BE84-B6AE934CDB9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101595",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T18:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\\ProgramData permissions."
      }, {
        "lang" : "es",
        "value" : "El agente en Bomgar Remote Support en versiones 15.2.x anteriores a la 15.2.3, las 16.1.x anteriores a la 16.1.5, y las 16.2.x anteriores a la 16.2.4 permite el secuestro de DLL debido al uso de permisos %SYSTEMDRIVE%\\ProgramData débiles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:15.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1363EEB2-56F2-44C4-BAFA-24C3AC2B4F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:15.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE44DBD-8640-4865-86F3-96606753C48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C952A3D0-FC19-4EAF-8718-23C5D7573842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF00A6B7-0A0B-40C2-9B8D-95029EBF26C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12372348-DDE7-4B20-AEF4-E15F2C8B1809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:16.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6BABD5-F669-4F2B-8CB4-7CC2B51C317B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA76DE81-E01A-4588-ACF9-5FEECED40D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A2B1D-DB15-4253-A74B-B788F33C3373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039679",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vsecurity.com/download/advisories/20171026-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vsecurity.com/download/advisories/20171026-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-26T20:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devices (if no firewall is present) or the NDoc server itself. Once the password is known to an attacker, local access is not required."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 8.0 de Thornberry NDoc, los clientes de ordenador portátil y el servidor tienen usuarios por defecto de la base de datos (Cache) establecidos con una única contraseña. La contraseña se deja en un archivo de registro en texto claro durante la instalación del cliente en ordenadores portátiles. La contraseña puede emplearse para obtener el acceso total admin/system a dispositivos cliente (si no existe firewall) o al propio servidor de NDoc. Una vez que un atacantes sepa una contraseña, no es necesario acceder de forma local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ndocsoftware:ndoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4",
            "matchCriteriaId" : "0796F6AC-5A92-4A1B-A24F-0DF3197D6C7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/emptythevoid/84248daccce8737f1cdd5b395cf6f32c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/emptythevoid/84248daccce8737f1cdd5b395cf6f32c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1220",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123860."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) revela información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 123860."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123860",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1222",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) no realiza chequeos de autenticación para un recurso o funcionalidad críticos, permitiendo que los usuarios anónimos accedan a áreas protegidas. IBM X-Force ID: 123862."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123862",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1225",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) almacena información sensible en parámetros URL. Esto puede llevar a una revelación de información si terceros no autorizados acceden a las URL mediante registros del servidor, cabeceras referrer o el historial del navegador. IBM X-Force ID: 123904."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123904",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1226",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) genera un mensaje de error en registros de error que incluye información sensible sobre su entorno que podría emplearse en más ataques contra el sistema. IBM X-Force ID: 123905."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123905",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1228",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) podría permitir que un atacante remoto obtenga información sensible, debido a que no se habilita correctamente el atributo de cookie \"secure\". Un atacante podría explotar esta vulnerabilidad para obtener información sensible empleando técnicas Man-in-the-Middle (MitM). IBM X-Force ID: 123907."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123907",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1230",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) emplea números o valores aleatorios insuficientes en un contexto de seguridad que depende de números impredecibles. Esta debilidad podría permitir que atacantes expongan información sensible adivinando tokens o identificadores. IBM X-Force ID: 123909."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123909",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1232",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 y 9.5) transmite datos sensibles o críticos para la seguridad en texto claro en un canal de comunicación que puede ser rastreado por actores no autorizados. IBM X-Force ID: 123911."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123911",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1521",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-10-26T21:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 y 9.5) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 129831."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129831",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5052",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting."
      }, {
        "lang" : "es",
        "value" : "Una hipótesis incorrecta sobre la estructura en bloques en Blink en Google Chrome, en versiones anteriores a la 57.0.2987.133 para Mac, Windows y Linux y a la versión 57.0.2987.132 para Android, permitía que un atacante remoto pudiese explotar una corrupción de memoria mediante una página HTML manipulada que desencadena un envío incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.133",
            "matchCriteriaId" : "4A8B17BD-A476-46F7-B451-7A7BF4C31720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.132",
            "matchCriteriaId" : "A4847D14-393F-4DC9-9E19-BD8799F01C05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/662767",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/662767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5053",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf."
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera de límites en V8 en Google Chrome, en versiones anteriores a la 57.0.2987.133 para Linux, Windows y Mac y a la 57.0.2987.132 para Android, permitía que un atacante remoto ejecutase código arbitrario en un espacio aislado o sandbox mediante una página HTML manipulada. Esto está relacionado con Array.prototype.indexOf."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.133",
            "matchCriteriaId" : "4A8B17BD-A476-46F7-B451-7A7BF4C31720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.132",
            "matchCriteriaId" : "A4847D14-393F-4DC9-9E19-BD8799F01C05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-462/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/702058",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-17-462/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/702058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5054",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera de límites en V8 en Google Chrome, en versiones anteriores a la 57.0.2987.133 para Linux, Windows y Mac y a la 57.0.2987.132 para Android, permitía que un atacante remoto obtenga el contenido de la memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.133",
            "matchCriteriaId" : "4A8B17BD-A476-46F7-B451-7A7BF4C31720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.132",
            "matchCriteriaId" : "A4847D14-393F-4DC9-9E19-BD8799F01C05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/699166",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/699166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5055",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en printing en Google Chrome, en versiones anteriores a la 57.0.2987.133 para Linux y Windows, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.133",
            "matchCriteriaId" : "4A8B17BD-A476-46F7-B451-7A7BF4C31720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97221",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/698622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/698622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5056",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en Blink en Google Chrome, en versiones anteriores a la 57.0.2987.133 para Linux, Windows y Mac y a la 57.0.2987.132 para Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.133",
            "matchCriteriaId" : "4A8B17BD-A476-46F7-B451-7A7BF4C31720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2987.132",
            "matchCriteriaId" : "A4847D14-393F-4DC9-9E19-BD8799F01C05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/705445",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/705445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5057",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Verificaciones insuficientes de consistencia en la manipulación de firmas en la pila de red en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Mac, Windows y Linux y a la 58.0.3029.83 para Android, permitían que un atacante remoto aceptase un certificado X.509 mal formado mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/695826",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/695826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5058",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en PrintPreview en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Windows, permitía que un atacante remoto pudiese realizar un acceso a la memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/694382",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/694382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5059",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en Blink en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Linux, Windows y Mac y a la 58.0.3029.83 para Android, permitía que un atacante remoto pudiese ejecutar código mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/684684",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/684684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5060",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome en versiones anteriores a la 58.0.3029.81 para Mac, Windows y Linux y a la 58.0.3029.83 para Android, permitía que un atacante remoto realizase una suplantación de dominio mediante homografías de IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/683314",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/683314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5061",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en navigation en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Linux, Windows y Mac, permitía que un atacante remoto suplantase el contenido de la Omnibox (barra de direcciones) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/672847",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/672847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5062",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en Chrome Apps en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Mac, Windows y Linux y a la 58.0.3029.83 para Android, permitía que un atacante remoto pudiese realizar un acceso a la memoria fuera de límites mediante una extensión de Chrome manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/702896",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/702896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5063",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento numérico en Skia en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Linux, Windows y Mac y a la 58.0.3029.83 para Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/700836",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/700836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5064",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una gestión incorrecta de cambios de DOM en Blink en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Windows, permitía que un atacante remoto explotase una corrupción de la memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/693974",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/693974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5065",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La falta de una acción adecuada en la navegación de páginas en Blink en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Windows y Mac, permitía que un atacante remoto pudiese confundir a un usuario para que realizase una decisión en materia de seguridad incorrecta mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/704560",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/704560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5066",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Verificaciones insuficientes de consistencia en la manipulación de firmas en la pila de red en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Mac, Windows y Linux y a la 58.0.3029.83 para Android, permitían que un atacante remoto aceptase un certificado X.509 mal formado mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/690821",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/690821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5067",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un temporizador guardián deficiente en navigation en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Linux, Windows y Mac, permitía que un atacante remoto suplantase el contenido de la Omnibox (barra de direcciones) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/648117",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/648117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5068",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una gestión incorrecta del ID de imagen en WebRTC en Google Chrome, en versiones anteriores a la 58.0.3029.96 para Mac, Windows y Linux, permitía que un atacante remoto desencadenase una condición de carrera mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.96",
            "matchCriteriaId" : "19640514-8416-4DAC-915C-67435BD5F14A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98288",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1228",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/05/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/679306",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/05/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/679306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5069",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un tipo MIME incorrecto de informes XSS-Protection en Blink en Google Chrome, en versiones anteriores a la 58.0.3029.81 para Linux, Windows y Mac y a la 58.0.3029.83 para Android, permitía que un atacante remoto sortease las comprobaciones Cross-Origin Resource Sharing mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.81",
            "matchCriteriaId" : "BE8D9B93-C713-498E-9B9A-5146018A975D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.0.3029.83",
            "matchCriteriaId" : "9F2FB224-205B-47A0-9441-975EB7ADF664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/691726",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/691726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5070",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.847",
      "lastModified" : "2025-10-22T00:16:06.463",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en V8 en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux, Windows y Mac y a la 59.0.3071.92 para Android, permitía que un atacante remoto ejecutase código arbitrario dentro de un espacio aislado o sandbox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium V8 Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/722756",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/722756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5070",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5071",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.893",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una validación insuficiente de entradas no fiables en V8 en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux, Windows y Mac y a la 59.0.3071.92 para Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/715582",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/715582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5072",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Omnibox en Google Chrome, en versiones anteriores a la 59.0.3071.92 para Android, permitía que un atacante remoto realizase una suplantación de dominio con caracteres RTL mediante una página URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/709417",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/709417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5073",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en la vista previa de impresión en Blink en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux, Windows y Mac y a la 59.0.3071.92 para Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/716474",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/716474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5074",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en Chrome Apps en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Windows, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada. Esto está relacionado con Bluetooth."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/700040",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/700040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5075",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en la creación de informes de CSP en Blink en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux, Windows y Mac y a la 59.0.3071.92 para Android, permitía que un atacante remoto obtuviese el valor de fragmentos de URL mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/678776",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/678776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5076",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome en versiones anteriores a la 59.0.3071.86 para Mac, Windows y Linux y a la 59.0.3071.92 para Android, permitía que un atacante remoto realizase una suplantación de dominio mediante homografías de IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/719199",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/719199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5077",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Validación insuficiente de entradas no fiables en Skia en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux, Windows y Mac y a la 59.0.3071.92 para Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/716311",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/716311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5078",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument."
      }, {
        "lang" : "es",
        "value" : "Validación insuficiente de entradas no fiables en la manipulación de mailto: de Blink en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux, Windows y Mac, permitía que un atacante remoto realizase una inyección de comandos mediante una página HTML manipulada. Este problema es similar al de CVE-2004-0121. Por ejemplo, caracteres como * interactúan incorrectamente con xdg-email en xdg-utils y un carácter de espacio puede emplearse enfrente de un argumento de la línea de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/711020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/711020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5079",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Blink en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Mac, Windows y Linux y a la 59.0.3071.92 para Android, permitía que un atacante remoto mostrase la interfaz de usuario en una pestaña no controlada por el atacante mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/713686",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/713686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5080",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en el autocompletado de tarjeta de crédito en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Linux y Windows, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/708819",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/708819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5081",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files."
      }, {
        "lang" : "es",
        "value" : "Una falta de verificación de la carpeta locale de una extensión en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Mac, Windows y Linux y a la 59.0.3071.92 para Android, permitía que un atacante con acceso de escritura local modificase extensiones mediante la modificación de archivos de extensión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/672008",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/672008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5082",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un fallo a la hora de aprovechar las mitigaciones disponibles en el autocompletado de tarjeta de crédito en Google Chrome, en versiones anteriores a la 59.0.3071.92 para Android, permitía que un atacante local realizase capturas de pantalla de linformación de tarjetas de crédito mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/721579",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/27/chrome-for-android-didnt-use-flag_secure-for-credit-card-prefill-settings-cve-2017-5082/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/721579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2017/07/27/chrome-for-android-didnt-use-flag_secure-for-credit-card-prefill-settings-cve-2017-5082/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5083",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en Blink en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Mac, Windows y Linux y a la 59.0.3071.92 para Android, permitía que un atacante remoto mostrase la interfaz de usuario en una pestaña no controlada por el atacante mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "942DEDE8-09D5-4567-96CB-5552BB5DCA8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/714849",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/714849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5084",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read local files via dbus-send commands to a BurnImage D-Bus endpoint."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en image-burner en Google Chrome OS, en versiones anteriores a la 59.0.3071.92, permitía que un atacante local leyese archivos locales mediante comandos dbus-send a un endpoint BurnImage D-Bus."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.92",
            "matchCriteriaId" : "6DA00C1F-CBBA-44E0-AA3B-90350B511E36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98986",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-chrome-os.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/702030",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-chrome-os.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/702030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5085",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en Bookmarks en Google Chrome, en versiones anteriores a la 59 para iOS, permitía que un atacante remoto que hubiese convencido a un usuario para realizar ciertas operaciones ejecutase código JavaScript en páginas chrome:// mediante un marcador manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:chrome:58.0.3029:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571F80C0-46D3-4338-A085-B350DCC74AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/692378",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/692378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5086",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 59.0.3071.86 para Windows y Mac, permitía que un atacante remoto realizase una suplantación de dominio mediante homografías de IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.86",
            "matchCriteriaId" : "86929D83-6C2A-4871-8896-2FB15466A0F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/722639",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/722639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5087",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en Blink en Google Chrome, en versiones anteriores a la 59.0.3071.104 para Mac, Windows y Linux y a la 59.0.3071.117 para Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada. Esto también se conoce como escape de espacio aislado o sandbox IndexedDB."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.104",
            "matchCriteriaId" : "30D0F292-E5B7-4263-80B4-C7E34480BBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.117",
            "matchCriteriaId" : "39B83909-5688-4B55-9482-93EC6190E75C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99096",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038765",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1495",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/725032",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/725032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5088",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una validación insuficiente de entradas no fiables en V8 en Google Chrome, en versiones anteriores a la 59.0.3071.104 para Mac, Windows y Linux y a la 59.0.3071.117 para Android, permitía que un atacante remoto realizase un acceso a la memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.104",
            "matchCriteriaId" : "30D0F292-E5B7-4263-80B4-C7E34480BBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.117",
            "matchCriteriaId" : "39B83909-5688-4B55-9482-93EC6190E75C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99096",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038765",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1495",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/729991",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/729991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5089",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 59.0.3071.104 para Mac, permitía que un atacante remoto realizase una suplantación de dominio mediante un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.104",
            "matchCriteriaId" : "30D0F292-E5B7-4263-80B4-C7E34480BBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99096",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1038765",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1495",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/714196",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1038765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop_15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/714196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5090",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name containing a U+0620 character, aka Apple rdar problem 32458012."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 59.0.3071.115 para Mac, permitía que un atacante remoto realizase una suplantación de dominio mediante un nombre de dominio manipulado que contiene un carácter U+0620. Esto también se conoce como Apple rdar problem 32458012."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "59.0.3071.115",
            "matchCriteriaId" : "3A5ED1C0-7A9F-4C51-A33A-F331D3A28757"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101591",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/725660",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/725660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5091",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en IndexedDB en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Android, Windows y Mac, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/728887",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/728887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5092",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Validación insuficiente de entradas no fiables en PPAPI Plugins en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Windows, permitía que un atacante remoto pudiese realizar un escape de espacio aislado o sandbox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/733549",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/733549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5093",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en la manipulación de diálogos modal en Blink en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto evitase que se mostrase una advertencia en pantalla completa mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/550017",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/550017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5094",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en extensions JavaScript bindings en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto pudiese modificar objetos con fines maliciosos mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/702946",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/702946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5095",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila en PDFium en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto explotase una corrupción de pila mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/732661",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/732661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5096",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas durante la navegación entre diferentes temas en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Android, permitía que un atacante remoto realizase una descarga de cross origin content mediante una página HTML manipulada. Esto está relacionado con intents."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/714442",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/714442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5097",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una validación insuficiente de entradas no fiables en Skia en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.76",
            "matchCriteriaId" : "CCBB207E-E469-4651-8F8F-291CF4DCFF66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/740789",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/740789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5098",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en V8 en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/740803",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/740803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5099",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Validación insuficiente de entradas no fiables en PPAPI Plugins en Google Chrome en versiones anteriores a la 60.0.3112.78 para Mac permitía que un atacante remoto pudiese obtener una elevación de privilegios mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.76",
            "matchCriteriaId" : "CCBB207E-E469-4651-8F8F-291CF4DCFF66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/733548",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/733548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5100",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.910",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en Apps en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Windows, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/718292",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/718292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5101",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en Omnibox en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto suplantase el contenido de Omnibox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/681740",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/681740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5102",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:01.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El uso de un valor no inicializado en Skia en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto obtuviese información sensible de la memoria de procesos mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/727678",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/727678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5103",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El uso de un valor no inicializado en Skia en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto obtuviese información sensible de la memoria de procesos mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/726199",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/726199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5104",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en interstitials en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, permitía que un atacante remoto suplantase el contenido de Omnibox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/729105",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/729105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5105",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto realizase una suplantación de dominio mediante homografías de IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/729979",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/729979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5106",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto realizase una suplantación de dominio mediante homografías de IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "60.0.3112.78",
            "matchCriteriaId" : "6E6FC5B1-DB09-4BF0-88CA-E5E2C42FAA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/714628",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/714628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5107",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un ataque basado en tiempo en SVG rendering en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto extrajese valores de píxel desde una página cross-origin a la que se le está incrustando iframes mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/686253",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/686253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5108",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en PDFium en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto pudiese modificar objetos con fines maliciosos mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/695830",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/695830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5109",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de la gestión del manipulador de descargas en solicitudes de permisos en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto mostrase la interfaz de usuario en una pestaña no controlada por el atacante mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/710400",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/710400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5110",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta de la API de pagos web en las combinaciones blob: y data: en Web Payments en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto suplantase el contenido de Omnibox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "60.0.3112.78",
            "matchCriteriaId" : "6AF730E5-4522-4911-872D-9AA01FC6BA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/717476",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/717476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5111",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en PDFium en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Linux, Windows y Mac, permitía que un atacante remoto pudiese explotar una corrupción de memoria mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/737023",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/737023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5112",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en WebGL en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Windows, permitía que un atacante remoto ejecutase código arbitrario en un espacio aislado o sandbox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/740603",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/740603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5113",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento aritmético en Skia en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Mac, windows y Linux y a la 61.0.3163.81 para Android, permitía que un atacante remoto pudiese explotar una corrupción de la memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.81",
            "matchCriteriaId" : "0EC32DC3-614B-43A4-B096-73D6D1AFEF99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/747043",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/747043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5114",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "El uso incorrecto de asignaciones de particiones en PDFium en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Linux, Windows y Mac y a la 61.0.3163.81 para Android, permitía que un atacante remoto pudiese explotar una corrupción de memoria mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.81",
            "matchCriteriaId" : "0EC32DC3-614B-43A4-B096-73D6D1AFEF99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/752829",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/752829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5115",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en V8 en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Windows, permitía que un atacante remoto pudiese explotar una corrupción de objetos mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/744584",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/744584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5116",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en V8 en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Mac, Windows y Linux y a la 61.0.3163.81 para Android, permitía que un atacante remoto ejecutase código arbitrario dentro de un espacio aislado o sandbox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.81",
            "matchCriteriaId" : "0EC32DC3-614B-43A4-B096-73D6D1AFEF99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/759624",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/759624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5117",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El uso de un valor no inicializado en Skia en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Linux y Windows, permitía que un atacante remoto pudiese obtener información sensible de la memoria de procesos mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/739190",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/739190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5118",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Blink en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Mac, Windows y Linux y a la 61.0.3163.81 para Android, no propagaba correctamente las restricciones CSP para páginas de temas JavaScript, lo que permitía que un atacante remoto omitiese la política de seguridad de contenido (CSP) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.81",
            "matchCriteriaId" : "0EC32DC3-614B-43A4-B096-73D6D1AFEF99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/747847",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/747847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5119",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El uso de un valor no inicializado en Skia en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Mac, Windows y Linux y a la 61.0.3163.81 para Android, permitía que un atacante remoto pudiese obtener información sensible de la memoria de procesos mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.100",
            "matchCriteriaId" : "64FCCC92-D2D4-43D9-86F1-FC3349E5A780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/725127",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/725127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5120",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial \"www.\" substring)."
      }, {
        "lang" : "es",
        "value" : "El uso incorrecto de redirecciones no coincidentes de www en la navegación por el explorador en Google Chrome, en versiones anteriores a la 61.0.3163.79 para Mac, Windows y Linux y a la 61.0.3163.81 para Android, permitía que un atacante remoto degradase las peticiones HTTPS a HTTP mediante una página HTML manipulada. En otras palabras, Chrome podría transmitir texto en claro incluso aunque el usuario hubiese introducido una URL https. Esto se debe a un método alternativo mal diseñado para los casos en los que el nombre de dominio en una URL casi coincide con el nombre de dominio en un certificado del servidor X.509 (pero difiere en la subcadena \"www.\" inicial)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "B97D9FB8-01EE-43BC-A2F5-878995E75A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.81",
            "matchCriteriaId" : "0EC32DC3-614B-43A4-B096-73D6D1AFEF99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/718676",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/718676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5121",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase."
      }, {
        "lang" : "es",
        "value" : "El uso inapropiado de la optimización JIT en V8 en Google Chrome, en versiones anteriores a la 61.0.3163.100 para Linux, Windows y Mac, permitía que un atacante remoto ejecutase código arbitrario en un espacio aislado o sandbox mediante una página HTML manipulada. Esto está relacionado con la fase de análisis de escape."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.100",
            "matchCriteriaId" : "64FCCC92-D2D4-43D9-86F1-FC3349E5A780"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100947",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039497",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://blogs.technet.microsoft.com/mmpc/2017/10/18/browser-security-beyond-sandboxing/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765433",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-25",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.technet.microsoft.com/mmpc/2017/10/18/browser-security-beyond-sandboxing/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5122",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2017-10-27T05:29:02.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El uso incorrecto de la manipulación de tamaños de tabla en V8 en Google Chrome, en versiones anteriores a la 61.0.3163.100 para Windows, permitía que un atacante remoto desencadenase un acceso fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.100",
            "matchCriteriaId" : "64FCCC92-D2D4-43D9-86F1-FC3349E5A780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/100947",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039497",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2792",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/752423",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-25",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/100947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/752423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14182",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-10-27T13:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio (DoS) en Fortinet FortiOS desde la versión 5.4.0 hasta la 5.4.5 permite que un usuario autenticado haga que la interfaz gráfica de usuario web no responda temporalmente, pasando una carga útil especialmente manipulada al parámetro \"params\" de la API web JSON."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/10/patch-your-fortinet-cve-2017-14182.html",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101559",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039678",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-206",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/10/patch-your-fortinet-cve-2017-14182.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7733",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-10-27T13:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary javascript code via webUI \"Login Disclaimer\" redir parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiOS desde la versión 5.4.0 a la 5.4.5 y en la versión 5.6.0 permite que un atacante remoto no autenticado ejecute código JavaScfript arbitrario mediante el parámetro de redirección \"Login Disclaimer\" en la interfaz gráfica de usuario web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101563",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039677",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-113",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0303",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y Websafe en sus versiones de software 13.0.0, de la 12.0.0 a la 12.1.2 y de la 11.5.1 a la 11.6.1, y bajo ciertas circunstancias, las conexiones gestionadas por un servidor virtual con un perfil SOCKS asociado puede que no se limpien correctamente, pudiendo provocar que se agotan los recursos. Las conexiones se pueden dejar en la tabla de conexiones, pudiendo solo eliminarse reiniciando el TMM. Con el tiempo, esto puede hacer que el BIG-IP no pueda procesar más conexiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F86EB5-D581-4103-A802-44D968BA8D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06224D59-35F8-4168-80C5-CF5B17E99050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DB51A2-727F-469D-9C53-7E3EBE7FC56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0450EF1-FA99-4552-8790-C16A1CC0D486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3755740D-F1DC-4910-ADDD-9D491515201C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA244A7D-F65D-4114-81C8-CE811959EA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA9F72C-8344-4370-B511-31BEC8BA63E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CF015E-C74B-4215-9103-8087BC1D12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4DB00-433D-414A-A1CE-E507B9BB809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D062ED-6A53-4402-A00B-F80722CD6624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0312FC-8178-46DE-B4EE-00F2895073BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E574F6-34B6-45A6-911D-E5347DA22F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF94129-8779-4D68-8DD4-B828CA633746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2E88AA-0523-48D0-8664-6AFDBCB6C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C77AA08-113B-4DF3-BFCD-61F77574DACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD2C1D2-103E-4B0F-84AA-999F01E695F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855E91A4-0A0C-4E5C-8019-FB513A793803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC2092-E109-4FF6-9B85-6C9434269851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923BB93-96C1-417B-9172-4A81E731EBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E34BF-82A5-4D9E-BC72-202193A47A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAAE358-497F-4108-821B-AA3604D7308A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB017D7A-3290-4EF5-9647-B488771A5F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F316C54-FAE4-48D8-9E40-ED358C30BF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAC4C7-AB42-4BBD-98B5-0AE8B032CCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAED537-070D-4600-B6E1-C03D021BB647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72099A8A-CFA4-4D58-859E-C51FE3E07DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6556BF-A50D-4872-BF81-9397A7ECEC9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101612",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039674",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K30201296",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K30201296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6157",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an unauthenticated, remote attack that allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote command execution on the BIG-IP system."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y Websafe en sus versiones de software de la 12.0.0 a la 12.1.1, de la 11.6.0 a la 11.6.1 y de la 11.5.0 a la 11.5.4, los servidores virtuales con una configuración que utiliza la funcionalidad HTTP Explicit Proxy y/o el perfil SOCKS son vulnerables a un ataque remoto no autenticado que permite que se modifique la configuración del sistema BIG-IP, se extraigan archivos sensibles del sistema y se puedan ejecutar comandos remotamente en el sistema BIG-IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "ACDEDBC9-73B5-409D-A228-7106AFB705DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "EA9C9391-E577-4A88-BA53-4DDAE6D3CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "B786919A-15D8-4A17-B0BE-3E4313CCFF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "7ADD8BEA-9FFF-467F-92E9-C855B439936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "6E722C9E-034C-4905-8C6F-48DB78DEFCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "4BA07A5E-D649-4725-9E2B-5BF496296151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "8A89726B-93EB-4F49-B395-017CA90F1399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228D5DA1-C78A-4E05-997A-50F6C1B59593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452C59B8-230D-4FC0-B76D-FA6E381E3713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE1EEA6-1E25-4A90-91A1-386D19808557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A05340-0AE2-49CA-903F-44383421577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101634",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039672",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02692210",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02692210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6159",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic."
      }, {
        "lang" : "es",
        "value" : "F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe en sus versiones de software de la 12.0.0 a la 12.1.2 y de la 11.6.0 a la 11.6.1 son vulnerables a un ataque de denegación de servicio (DoS) cuando la opción MPTCP está habilitada en un servidor virtual. El plano de datos es vulnerable cuando se utiliza la opción MPTCP de un perfil TCP. No hay ninguna exposición del plano de control. Un atacante podría interrumpir los servicios haciendo que el TMM se reinicie, haciendo que no se pueda procesar el tráfico temporalmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6556BF-A50D-4872-BF81-9397A7ECEC9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101633",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039669",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K10002335",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K10002335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6160",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. This issue is exposed on virtual servers using a Policy Enforcement profile or a Web Acceleration profile. Systems that do not have BIG-IP AAM module provisioned are not vulnerable. The Traffic Management Microkernel (TMM) may restart and temporarily fail to process traffic. Systems that do not have BIG-IP AAM or PEM module provisioned are not vulnerable."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP AAM y PEM en sus versiones de software de la 12.0.0 a la 12.1.1, de la 11.6.0 a la 11.6.1 y de la 11.4.1 a la 11.5.4, un atacante remoto puede crear peticiones HTTP manipuladas maliciosas para hacer que el TMM (Traffic Management Microkernel) se reinicie y deje de procesar el tráfico temporalmente. El problema se expone en servidores virtuales utilizando un perfil Policy Enforcement o Web Acceleration. Los sistemas que no estén provistos de un módulo BIG-IP AAM no son vulnerables. El TMM (Traffic Management Microkernel) podría reiniciarse y dejar de procesar el tráfico temporalmente. Los sistemas que no estén provistos de un módulo BIG-IP AAM o PEM no son vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974C5213-99F7-4E8A-AC6A-8759697F19C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E288D50B-7EFA-4FC8-938B-EE3765FFA24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0450EF1-FA99-4552-8790-C16A1CC0D486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AA5127-5314-4026-905D-937B7B62473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E42DAA-700D-487C-9238-F7F3D75A8C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72099A8A-CFA4-4D58-859E-C51FE3E07DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101632",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039670",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K19430431",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K19430431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6161",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator en versiones de software de la 12.0.0 a la 12.1.2, de la 11.6.0 a la 11.6.1, de la 11.4.0 a la 11.5.4 y en la versión 11.2.1, cuando ConfigSync está configurado, los atacantes en redes adyacentes pueden omitir las protecciones TLS, normalmente utilizadas para cifrar y autenticar conexiones al mcpd. Esta vulnerabilidad podría permitir que atacantes remotos provoquen un ataque de denegación de servicio (DoS) mediante el agotamiento de recursos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "ACDEDBC9-73B5-409D-A228-7106AFB705DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "EA9C9391-E577-4A88-BA53-4DDAE6D3CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "B786919A-15D8-4A17-B0BE-3E4313CCFF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "7ADD8BEA-9FFF-467F-92E9-C855B439936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "6E722C9E-034C-4905-8C6F-48DB78DEFCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "4BA07A5E-D649-4725-9E2B-5BF496296151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "8A89726B-93EB-4F49-B395-017CA90F1399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "B665A630-6F88-437B-876F-0FEE9D624F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE6A792-9D75-4BAF-A8BA-DC5879948BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67B3922-08D2-4DB0-8FD8-9C7A3DD601C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E6EC85-AEDB-41DB-95A9-5514980C2C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524B2D05-508C-47FF-94A0-6CC42060E638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD7394-BD0A-42FD-A367-827F35397A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98509F74-301A-4D1F-A2B4-B01B80CEFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A68381-C065-48D4-8FE4-8CB31216D70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C660E2-2B4D-40A2-9111-19A15307724A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917BA1D9-2C47-41BE-80AF-05F5AC855945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A75D8-A712-4075-B4C2-F2AB36892619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB83BA4-2C5B-4742-8AD8-9541EB04CED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5B11F8-1F6A-4A41-BEDE-F03BD179C443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E38A7F6-B7DB-4F25-95A8-7D1DD6711FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1277379D-D837-494B-ACB5-26176A411360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF86B6C1-643B-4556-98B9-41DEEE631390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BA400B-F025-4DB9-BA37-53D7A393994D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C88F1A8-9396-4439-B4DA-C04A31C4ADF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E320DA-476A-4C16-B970-A2619E9848EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C15929A-8038-4BFF-A035-C48FEB0FF4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E760533-14D1-4549-8448-DAF37C05EEE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84452450-77FA-4708-9C86-5464D541C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4CC3E0-F9B8-433F-A2B0-2306144F9B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8993275-E17E-4A69-8D95-A8229E0E88D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0594DBC5-8470-416C-A5EA-E04F5AB2C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3BA6-6F60-45CA-8F52-687B671B077A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B6870-718C-4F8D-9BAB-7ED6385BF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6A3691-ADC4-44BC-8A11-D855B13EF128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D7863D-B064-4D7A-A66B-C3D3523425FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BB6DB-B2D1-4855-A65C-F0799E034358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D161F9-D198-4DA0-BF95-19472A0495A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E2C448-F279-476E-9F54-185582BEE9E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5943AAEF-A816-4F95-A91F-023A226D6459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E78A8D-6CB6-49F9-9288-9C2EEF41441A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C804A448-2911-4F56-B8AC-574504E7C84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2672446D-CDB1-4EB0-8319-843AAD1A99BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47077D8-80F4-4919-913B-AC6B7CA1CEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A860AAB-4E19-42C4-B37D-6043C24A3E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D62C27-F5CE-455A-A683-1F71E3275183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF200B2-C3A2-4A64-BDB7-62BA4BD865EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B2FD88-64B9-4B51-BB79-0C075CAA8362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E82D861-4AEC-49B1-9B92-C55109CA000B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB9AC84-D862-456D-A34E-14C3A6A1F869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8894E5E8-FC08-48E5-BF06-6F5AC814CBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F83577A-E8CD-4956-8700-F4AA9983740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB00BC5F-0456-4B65-8CD4-DB4529038824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E10E98-9010-45A6-B8B0-23654951105D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9522967-4502-482E-AAEF-4D4C4B306BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF1300A-6B4D-4BEF-9295-EDE60C496A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101636",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039675",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039676",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K62279530",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K62279530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6162",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe en versiones de software de la 12.0.0 a la 12.1.2, de la 11.6.0 a la 11.6.1, de la 11.4.0 a la 11.5.4 y en la versión 11.2.1, en algunos casos, TMM podría cerrarse de manera inesperada cuando procesa tráfico TCP. Esta vulnerabilidad afecta al TMM mediante un servidor virtual configurado con perfil TCP. El procesamiento del tráfico se interrumpe mientras el TMM (Traffic Management Microkernel) se reinicia. Si el sistema BIG-IP afectado está configurado para formar parte de un grupo de dispositivos, desencadenará una conmutación por error en el dispositivo del mismo grupo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "ACDEDBC9-73B5-409D-A228-7106AFB705DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "EA9C9391-E577-4A88-BA53-4DDAE6D3CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "B786919A-15D8-4A17-B0BE-3E4313CCFF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "7ADD8BEA-9FFF-467F-92E9-C855B439936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "6E722C9E-034C-4905-8C6F-48DB78DEFCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "4BA07A5E-D649-4725-9E2B-5BF496296151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "8A89726B-93EB-4F49-B395-017CA90F1399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6556BF-A50D-4872-BF81-9397A7ECEC9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101635",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039673",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K13421245",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K13421245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6163",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-10-27T14:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a number of concurrent streams beyond the advertised limit can cause a disruption of service. Remote client initiating stream beyond the advertised limit can cause a disruption of service. The Traffic Management Microkernel (TMM) data plane is exposed to this issue; the control plane is not exposed."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM en versiones de software de la 12.0.0 a la 12.1.2, de la 11.6.0 a la 11.6.1 y de la 11.4.0 a la 11.5.4, cuando un servidor virtual utiliza la configuración estándar de los perfiles SPDY o HTTP/2 con un perfil Client SSL y el cliente inicia un número de transmisiones concurrentes superior al límite establecido, se puede provocar una interrupción del servicio. El cliente remoto que inicia una transmisión más allá del límite establecido puede provocar una interrupción del servicio. El plano de datos del TMM (Traffic Management Kernel) está expuesto a este problema. El plano de control no está expuesto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndIncluding" : "11.5.3",
            "matchCriteriaId" : "D5D5E66B-9666-4B6D-BB8B-B640188968E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "DBBAEB39-4C78-483E-B60D-CE3607C65389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "26066159-46E1-4D70-A03A-EB9A167ABC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "7ADD8BEA-9FFF-467F-92E9-C855B439936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "6E722C9E-034C-4905-8C6F-48DB78DEFCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "4BA07A5E-D649-4725-9E2B-5BF496296151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDEC701-DAB3-4D92-AA67-B886E6693E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "8A89726B-93EB-4F49-B395-017CA90F1399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "11.4.0",
            "versionEndIncluding" : "11.5.4",
            "matchCriteriaId" : "8D95A60B-FD05-4701-A2F8-CA675416A41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A04AE2-1877-49DC-ACF2-FE741CBF9A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B012CDE-BE1C-4F32-8500-B9E221CC53D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E717BBE7-F15A-4B41-BEF8-43FC5E9F4E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8574970-8827-4332-93AA-791AC582294E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E608782B-6330-4B14-8E40-4C906E9D6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBDC10C-6594-4554-ABF8-A5F6B7576676"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101606",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039671",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K22541983",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K22541983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T16:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions."
      }, {
        "lang" : "es",
        "value" : "En manager.c en ss-manager en shadowsocks-libev 3.1.0, un análisis sintáctico incorrecto permite que se inyecten comandos mediante metacaracteres shell en una petición de configuración JSON recibida mediante tráfico UDP 127.0.0.1. Esto está relacionado con las funciones add_server, build_config y construct_command_line."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262748CE-0CD9-44C2-AB0F-1A294CE0AA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858C9955-84A0-46A3-B59A-F6BD2C9D25F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFAD798C-521E-4521-B340-3B543F5CDB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB12F9EF-7ACC-46E2-B218-0C0E1E38BB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C350C3D-5F7F-4F4B-B8A3-B08FDAB2618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C49FC33-3806-42ED-893C-232C141E5140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92225501-B713-4DBD-8EBD-8D56B6AD0872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01559F24-751D-42C8-9648-CC604E514B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30AB75A-4553-453B-A711-7FFA6EB448FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602BCBCB-7B57-4037-ADC0-01090B7EBC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4158AB78-5C3A-48E5-8B42-7103D4D95FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC3B37C-5AC7-4785-82F3-FB0D4CD4B777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBBA7A1-2183-4435-8064-2841597DBD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CBF205-2399-4661-AD93-FFCCD757A2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D20FECE-568E-4991-A869-23789B18A8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB2C3F3-A4DB-4C04-8F65-3C24B61E524D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B825E3-F934-4D1D-B307-7196C61BDA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8FECA-EE5C-4058-873C-F65C91642FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236849B1-4DAE-482C-B75E-912C1CE5F9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACBD11A-4C3E-47CA-A9CD-333318A855C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2340582-1281-408A-AF05-4A71E78DB847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06182273-F0E4-4F7E-A563-121AD2FAC441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0279A0FD-292B-45BC-B56A-1E12EDAACB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A36328CB-2DDF-40C4-AA52-98A7B4BDBCB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C85600-1F7F-476D-B060-FBE25545300D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E66FC1-612B-488C-A6D4-9E73CBD9DE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BAF98-48E9-4440-A492-60778999BEAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA20F57-5234-43D9-B33E-6AA49A6FCBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D60ABD-1D9F-4D27-9D2D-48F10AF6D4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89BD126-AD55-4EF8-A48E-BA737A89F8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECDF224-ADA3-4025-9E09-E9EF3B43444F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31D2E50-FB42-4082-BC86-6662D8706A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C12C316-6F4C-4475-AA98-285AFC4E2B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E51B2F2-1838-4A6A-96AB-EE9EEB995A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21421755-6E64-4FF5-BF57-EDB768D26AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AF0932-F04A-4E8A-AFD3-52F006F85FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F689FB4-2B30-452D-BE8B-96DF84C00960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79909DAF-3264-4828-8E36-887FF5173541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46166314-7AAC-42D6-A676-840D5EF872D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E490DD4-4FD8-410E-8BD7-2B1E081A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403B82B9-53F8-4BA9-8EE8-93EC5B970DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFBDE8F-0977-4917-AFF3-031C40CB9E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058DF5B7-AF32-48FA-8EFE-3ED1E4130C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D65CEA2-205A-4527-8255-25317FFDE336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDD3327-5537-4792-9B02-13D1BC6892A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A9C44E-C7FA-4364-A5B6-684A1084073E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEB57E4-A7D2-42C5-84A6-ABD50FA2B91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675CBFEF-AF81-4EF4-9E18-13B41C1F89F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FED856A-2144-4D7D-B574-F67793DAA251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A99F5F-FEDF-457A-B274-4702214ADD6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2CBF01-5961-4294-A0CC-D0B274879FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0043DF8-3531-4B34-A0C7-0F58F8C90667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F18204-8AD4-4807-A859-410D55ABFBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8144FE-9F00-4B83-909A-9147CE8D7819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652369C8-9B12-409E-975F-17F3C05B4981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AD1670-0B5E-419D-A29F-5230C9DD1175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B030384-DB8E-469D-AAFB-4F7D9ECA5CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBBED6A-744D-4010-815F-4C1FE454B2A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562B9AEF-8F59-4634-B4E5-AA3B447C414C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4C4BAC-756E-41EA-A13D-8AB96F1C1DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E25A0F-8EA6-426C-8992-41F0065BBE9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E1528A-610A-4DF9-A5A2-E65DE99B8C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9062913-8F01-45E8-AB15-18BAC8A71249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDDF0A6-A17D-44A7-ACE5-55E0E378BC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA1D19-8123-4898-AAD4-3C672B7B296F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86EE26E9-C5D6-43BF-9882-5B1AB5F19D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C05CFCD-5136-440C-B0C2-E03D281A5A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916FEC4D-DFB6-4194-960A-8EACD3C374C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DF4CAE-A6CD-4AC7-9376-01939ED9F19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5295170-CCB0-452A-B6B7-14CA5D2A6F0B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6911EEBB-541E-4448-B028-2F473903B24E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/10/13/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4009",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadowsocks/shadowsocks-libev/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadowsocks/shadowsocks-libev/issues/1734",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-010-shadowsocks-libev/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/10/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadowsocks/shadowsocks-libev/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadowsocks/shadowsocks-libev/issues/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-010-shadowsocks-libev/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T17:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated \"Ox should handle the error more gracefully\" but has not confirmed a security implication."
      }, {
        "lang" : "es",
        "value" : "En la gema Ox 2.8.0 para Ruby, el proceso se cierra de manera inesperada con un fallo de segmentación cuando se proporciona una entrada manipulada a parse_obj. NOTA: el fabricante declara que \"Ox debería gestionar el error de manera más eficaz\", pero no ha confirmado ninguna implicación de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ox_project:ox:2.8.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "61AD5333-B85F-4469-817A-EA766BC83970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ohler55/ox/issues/194",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/ox/versions/2.8.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ohler55/ox/issues/194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/ox/versions/2.8.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T18:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer."
      }, {
        "lang" : "es",
        "value" : "En ReadOneJNGImage en coders/png.c en GraphicsMagick 1.3.26, ocurre una desreferencia de puntero NULL cuando se transfieren scanlines JPEG. Esta vulnerabilidad está relacionada con un puntero PixelPacket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=6fc54b6d2be8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=da135eaedc3b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101607",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/518/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=6fc54b6d2be8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=da135eaedc3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/518/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T18:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems."
      }, {
        "lang" : "es",
        "value" : "En radare2 2.0.1, existe una excepción de enteros (número negativo que provoca un acceso de memoria no válido) en store_versioninfo_gnu_verneed() en libr/bin/format/elf/elf.c mediante archivos ELF manipulados en sistemas de 32 bits."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B4DFB4-18C8-413E-8953-1E7359DAC6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/radare/radare2/commit/c6d0076c924891ad9948a62d89d0bcdaf965f0cd",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/radare/radare2/commit/c6d0076c924891ad9948a62d89d0bcdaf965f0cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T18:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems."
      }, {
        "lang" : "es",
        "value" : "En radare2 2.0.1, existe una excepción de enteros (número negativo que provoca un acceso de memoria no válido) en store_versioninfo_gnu_verdef() en libr/bin/format/elf/elf.c mediante archivos ELF manipulados cuando se analiza la versión ELF en sistemas de 32 bits."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B4DFB4-18C8-413E-8953-1E7359DAC6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/radare/radare2/commit/44ded3ff35b8264f54b5a900cab32ec489d9e5b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8743",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/radare/radare2/commit/44ded3ff35b8264f54b5a900cab32ec489d9e5b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13089",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-27T19:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument."
      }, {
        "lang" : "es",
        "value" : "Se llama a la función http.c:skip_short_body() en ciertas circunstancias, como cuando se procesan redirecciones. Cuando la respuesta se envía fragmentada en wget en versiones anteriores a la 1.19.2, el analizador de fragmentos utiliza srtol() para leer la longitud de cada fragmento, pero no comprueba si esta longitud es un número no negativo. El código entonces intenta saltarse el fragmento en partes de 512 bytes utilizando la macro MIN(), pero acaba pasando la longitud negativa del fragmento a connect.c:fd_read(). Ya que fd_read() toma un argumento int, los 32 bits de la longitud del fragmento se descartan, dejando fd_read() con un argumento de longitud controlado por completo por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cret@cert.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.1",
            "matchCriteriaId" : "BB992E4D-6D7A-421F-BC30-123E4ADD2D82"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4008",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101592",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039661",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3075",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://github.com/r1b/CVE-2017-13089",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-06",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/r1b/CVE-2017-13089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13090",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-10-27T19:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer."
      }, {
        "lang" : "es",
        "value" : "Se llama a la función retr.c:fd_read_body() cuando se procesan las respuestas OK. Cuando la respuesta se envía fragmentada en wget en versiones anteriores a la 1.19.2, el analizador de fragmentos utiliza srtol() para leer la longitud de cada fragmento, pero no comprueba si esta longitud es un número no negativo. El código entonces intenta leer el fragmento en partes de 8192 bytes utilizando la macro MIN(), pero acaba pasando la longitud negativa del fragmento a retr.c:fd_read(). Ya que fd_read() toma un argumento int, los 32 bits de la longitud del fragmento se descartan, dejando fd_read() con un argumento de longitud controlado por completo por el atacante. El atacante puede corromper metadatos malloc después del búfer asignado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cret@cert.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.1",
            "matchCriteriaId" : "BB992E4D-6D7A-421F-BC30-123E4ADD2D82"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4008",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101590",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039661",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3075",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-06",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T19:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacity_per_device/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la interfaz web de EyesOfNetwork (también conocido como eonweb) 5.1-0 permite que administradores autenticados remotos ejecuten comandos SQL arbitrarios mediante el parámetro host en module/capacity_per_device/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101615",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_device_index.php-SQL%20injection%20vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_device_index.php-SQL%20injection%20vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T20:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the \"Diary with lock\" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, despite the documentation that the product is intended for \"a personal journal of ... secrets and feelings,\" which allows remote attackers to obtain sensitive information by sniffing the network during LoginActivity or NoteActivity execution."
      }, {
        "lang" : "es",
        "value" : "En la aplicación \"Diary with lock\" (también conocida como WriteDiary) en su versión 4.72 para Android, no se utiliza ni HTTPS ni otro cifrado para transmitir los datos, a pesar de la documentación para la que se ha creado el producto \"un diario personal de... secretos y sentimientos\", lo que permite que atacantes remotos obtengan información sensible rastreando la red durante la ejecución de LoginActivity o NoteActivity."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:writediary:diary_with_lock:4.72:*:*:*:*:android:*:*",
            "matchCriteriaId" : "5BB6A5D8-4DA9-4860-9FA2-AA5989508EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T20:29:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In net.MCrypt in the \"Diary with lock\" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries."
      }, {
        "lang" : "es",
        "value" : "En net.MCrypt en la aplicación \"Diary with lock\" (también conocida como WriteDiary) en su versión 4.72 para Android, las variables embebidas SecretKey e iv se utilizan para los parámetros AES, lo que hace que sea mas fácil para los atacantes obtener las entradas de los diarios almacenadas en texto claro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:writediary:diary_with_lock:4.72:*:*:*:*:android:*:*",
            "matchCriteriaId" : "5BB6A5D8-4DA9-4860-9FA2-AA5989508EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T20:29:01.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter."
      }, {
        "lang" : "es",
        "value" : "Artica Pandora FMS 7.0 es vulnerable a Cross-Site Scripting (XSS) persistente en el parámetro map name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEE4B3-B2D2-4823-B626-214B2ED406DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T20:29:01.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file."
      }, {
        "lang" : "es",
        "value" : "Artica Pandora FMS 7.0 es vulnerable a la ejecución remota de código PHP mediante la función manager files. Esto solo es explotable por administradores que suban un archivo PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEE4B3-B2D2-4823-B626-214B2ED406DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T20:29:01.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed."
      }, {
        "lang" : "es",
        "value" : "En Artica Pandora FMS 7.0, un atacante con permiso de escritura puede crear un agente con una carga útil XSS. Cuando un usuario entre en la página de definiciones del agente, el script se ejecutará."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEE4B3-B2D2-4823-B626-214B2ED406DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T20:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX)."
      }, {
        "lang" : "es",
        "value" : "Artica Pandora FMS 7.0 fuga un nombre completo de ruta de instalación mediante datos GET cuando se intercepta la llamada a la gráfica de la página principal. Esto también implica la fuga de la información general del sistema operativo (por ejemplo, un nombre de ruta /var/www pathname suele indicar que es Linux o UNIX)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEE4B3-B2D2-4823-B626-214B2ED406DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T21:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash)."
      }, {
        "lang" : "es",
        "value" : "dwarf2.c en la librería Binary File Descriptor (BFD) (también conocida como libbfd), tal y como viene distribuido en GNU Binutils 2.29, calcula de manera incorrecta las referencias de entradas de información de depuración de DW_FORM_ref_addr en el caso de un archivo objeto reubicable, lo que permite que atacantes remotos provoquen una denegación de servicio (lectura de memoria no válida en find_abstract_instance_name, fallo de segmentación y cierre inesperado de la aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/24/binutils-invalid-memory-read-in-find_abstract_instance_name-dwarf2-c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22209",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=1b86808a86077722ee4f42ff97f836b12420bb2a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/24/binutils-invalid-memory-read-in-find_abstract_instance_name-dwarf2-c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=1b86808a86077722ee4f42ff97f836b12420bb2a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T21:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023."
      }, {
        "lang" : "es",
        "value" : "dwarf2.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, gestiona de manera incorrecta archivos NULL en una tabla de archivos debug_line, lo que permite a atacantes remotos provocar una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de aplicación) mediante un archivo ELF manipulado, relacionado con concat_filename. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2017-15023."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/24/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c-incomplete-fix-for-cve-2017-15023/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22205",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a54018b72d75abf2e74bf36016702da06399c1d9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.gentoo.org/ago/2017/10/24/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c-incomplete-fix-for-cve-2017-15023/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a54018b72d75abf2e74bf36016702da06399c1d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-27T21:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link."
      }, {
        "lang" : "es",
        "value" : "Los scripts de instalación en los paquetes dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster y dev-db/mariadb-galera de Gento en versiones anteriores a 2017-09-29 tiene llamadas chown para árboles de directorios modificables por los usuarios, lo que puede permitir que los usuarios locales obtengan privilegios aprovechando el acceso a la cuenta mysql para la creación de un enlace."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:r1:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.30",
            "matchCriteriaId" : "1666B9B6-FF52-479D-85D3-8750BDF4387A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:*:r1:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.36",
            "matchCriteriaId" : "AFB191C0-7262-43E1-A28A-102EA7DAD55B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92121D8A-529E-454A-BC8D-B6E0017E615D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/630822",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/630822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T00:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET."
      }, {
        "lang" : "es",
        "value" : "En el componente com_tag 1.7.6 para Joomla!, se encuentra una vulnerabilidad de inyección SQL en el parámetro \"tag\" en index.php. El método request que se ejecuta es GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:selfget:tag_meta:1.7.6:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "E4D523E6-B8E6-4D7D-8E45-E2974FA603CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T00:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp."
      }, {
        "lang" : "es",
        "value" : "Simple ASC Content Management System v1.2 es vulnerable a XSS en el campo location en la función sign. Esto está relacionado con guestbook.asp, formgb.asp y msggb.asp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspsource:simple_asc_content_management_system:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66071F6F-7F32-43A7-A9E1-6F6192C1C279"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T00:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account."
      }, {
        "lang" : "es",
        "value" : "Perch Content Management System 3.0.3 permite que se suban archivos sin restricción (con un XSS resultante) mediante el campo Asset Title junto con el campo Select File. Esto es explotable con una cuenta Limited Admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgeofmyseat:perch:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0474C787-B7DA-4229-9063-D1527118E8FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2067",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T00:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php."
      }, {
        "lang" : "es",
        "value" : "Xavier PHP Management Panel 2.4 permite inyección SQL mediante el parámetro usertoedit en admin/adminuseredit.php o el parámetro log_id en admin/editgroup.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angry-frog:xavier:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30696C00-CEC8-45B3-BC92-66C26A5B8A13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2076",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T02:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the \"negative\" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls."
      }, {
        "lang" : "es",
        "value" : "El subsistema KEYS en el kernel de Linux en versiones anteriores a la 4.13.10 no sincroniza correctamente las acciones de actualización con las de detección de una clave en el estado \"negative\" para evitar una condición de carrera, lo que permite que los usuarios locales provoquen una denegación de servicio (DoS) o, posiblemente, cause otro impacto no especificado mediante llamadas al sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4",
            "versionEndExcluding" : "4.4.95",
            "matchCriteriaId" : "4397FA2C-1EE8-4F42-9823-2D85B8C20976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.59",
            "matchCriteriaId" : "D6690C73-23A3-4475-97D0-8CB96812E2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.10",
            "matchCriteriaId" : "86038BA0-0886-479E-AD71-D78363937D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101621",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/363b02dab09b3226f3bd1420dad9c72b79a42a76",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/363b02dab09b3226f3bd1420dad9c72b79a42a76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T21:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE (.cue) file."
      }, {
        "lang" : "es",
        "value" : "bchunk (relacionado con BinChunker) 1.2.0 y 1.2.1 es vulnerable a desbordamiento de búfer basado en memoria dinámica (heap) y se cierra de manera inesperada cuando procesa un archivo CUE (.cue) mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bchunk_project:bchunk:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1D4984-E355-490C-9ECB-3FD3467EDBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bchunk_project:bchunk:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3300B9A-2FAD-4C30-8CF6-997301B44CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/extramaster/bchunk/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hessu/bchunk/issues/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4026",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/extramaster/bchunk/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hessu/bchunk/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T21:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file."
      }, {
        "lang" : "es",
        "value" : "bchunk (relacionado con BinChunker) 1.2.0 y 1.2.1 es vulnerable a desbordamiento de búfer basado en memoria dinámica o heap (con una liberación no válida en consecuencia) y se cierra de manera inesperada cuando procesa un archivo CUE (.cue) mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bchunk_project:bchunk:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1D4984-E355-490C-9ECB-3FD3467EDBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bchunk_project:bchunk:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3300B9A-2FAD-4C30-8CF6-997301B44CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/extramaster/bchunk/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hessu/bchunk/issues/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4026",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/extramaster/bchunk/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hessu/bchunk/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-28T21:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an \"Access violation near NULL on destination operand\" and crash when processing a malformed CUE (.cue) file."
      }, {
        "lang" : "es",
        "value" : "bchunk (relacionado con BinChunker) 1.2.0 y 1.2.1 es vulnerable a una violación de acceso cerca de NULL en un operando de destino y se cierra de manera inesperada cuando se procesa un archivo CUE (.cue) mal formado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bchunk_project:bchunk:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1D4984-E355-490C-9ECB-3FD3467EDBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bchunk_project:bchunk:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3300B9A-2FAD-4C30-8CF6-997301B44CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/extramaster/bchunk/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hessu/bchunk/issues/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4026",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/extramaster/bchunk/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hessu/bchunk/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php."
      }, {
        "lang" : "es",
        "value" : "ConverTo Video Downloader & Converter 1.4.1 permite la subida de archivos arbitrarios mediante el parámetro token en download.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:converto_video_downloader_\\&_converter_project:converto_video_downloader_\\&_converter:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD1371C-AB89-471E-ADAC-4A6A0E750335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144456/ConverTo-Video-Downloader-And-Converter-1.4.1-Arbitrary-File-Download.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144456/ConverTo-Video-Downloader-And-Converter-1.4.1-Arbitrary-File-Download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file."
      }, {
        "lang" : "es",
        "value" : "my_profile.php en Ingenious School Management System 2.3.0 permite que un estudiante o profesor suba un archivo arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ingenious_school_management_system_project:ingenious_school_management_system:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05816F7-355E-4DF9-8AA8-0CF7A0146F00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144431/Ingenious-School-Management-System-2.3.0-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43102/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144431/Ingenious-School-Management-System-2.3.0-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43102/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php."
      }, {
        "lang" : "es",
        "value" : "D-Park Pro Domain Parking Script 1.0 permite que se inyecte SQL mediante el parámetro username en admin/loginform.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:domainzaar:d-park_pro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70E5655-072F-4AB6-A649-7DEFCCE0D35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43101/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43101/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-2007-6576."
      }, {
        "lang" : "es",
        "value" : "Adult Script Pro 2.2.4 permite que se produzca inyección SQL mediante PATH_INFO en un URI /download. Esta es una vulnerabilidad diferente de CVE-2007-6576."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adultscriptpro:adultscriptpro:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BBCB8-E836-44E1-A5ED-175779A43BE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144428/Adult-Script-Pro-2.2.4-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43100/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144428/Adult-Script-Pro-2.2.4-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43100/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php."
      }, {
        "lang" : "es",
        "value" : "Article Directory Script 3.0 permite que se produzca inyección SQL mediante el parámetro id en author.php o category.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourarticlesdirectory:article_directory_script:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53098CFE-BB83-4F26-A9F9-33AFFAD0E092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144429/Article-Directory-Script-3.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43099/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144429/Article-Directory-Script-3.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43099/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "iProject Management System 1.0 permite que se produzca inyección SQL mediante el parámetro ID en index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iproject_management_system_project:iproject_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6875C031-A962-4AD3-A8FA-0B952DF61EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144432/iProject-Management-System-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43098/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144432/iProject-Management-System-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43098/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iStock Management System 1.0 allows Arbitrary File Upload via user/profile."
      }, {
        "lang" : "es",
        "value" : "iStock Management System 1.0 permite la subida de archivos arbitrarios mediante user/profile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:istock_management_system_project:istock_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC894C1A-405B-4C9C-9E55-A3E5605D64A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144433/iStock-Management-System-1.0-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43097/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144433/iStock-Management-System-1.0-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43097/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter."
      }, {
        "lang" : "es",
        "value" : "iTech Gigs Script 1.21 permite que se produzca inyección SQL mediante el parámetro sc en browse-scategory.php o el parámetro ser en service-provider.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:gigs_script:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D0A74B-85E6-466E-BBC4-337493A72635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144434/iTech-Gigs-Script-1.21-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43096/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144434/iTech-Gigs-Script-1.21-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43096/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI."
      }, {
        "lang" : "es",
        "value" : "Job Board Script Software permite que se produzca inyección SQL mediante PATH_INFO en el URI /job-details."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicephpscripts:job_board_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E1B628-0AD9-4B51-B421-9E6AF1DC889A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144082/Job-Board-Software-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43095/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144082/Job-Board-Software-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43095/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action."
      }, {
        "lang" : "es",
        "value" : "El componente NS Download Shop (también conocido como com_ns_downloadshop) 2.2.6 para Joomla! permite que se produzca inyección SQL mediante el parámetro id en una acción invoice.create."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nswd:ns_download_shop:2.2.6:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "F1A786FB-1428-4488-9782-DAD95BDCDDBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101624",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144435/Joomla-NS-Download-Shop-2.2.6-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43094/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144435/Joomla-NS-Download-Shop-2.2.6-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43094/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "El componente Zh YandexMap (también conocido como com_zhyandexmap) 6.1.1.0 para Joomla! permite que se produzca inyección SQL mediante el parámetro placemarklistid en index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zh_yandexmap_project:zh_yandexmap:6.1.1.0:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "1CAC3B22-EF08-4050-98CA-C42DDC6306CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101694",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144436/Joomla-Zh-YandexMap-6.1.1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43093/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144436/Joomla-Zh-YandexMap-6.1.1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43093/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template."
      }, {
        "lang" : "es",
        "value" : "Mailing List Manager Pro 3.0 permite que se produzca inyección SQL mediante el parámetro edit en admin/users en una acción sort=login o el parámetro edit en admin/template."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailing-manager:mailing_list_manager_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC38E8E4-1028-4EB4-91D3-128A5FD28A71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144437/Mailing-List-Manager-Pro-3.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43092/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144437/Mailing-List-Manager-Pro-3.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43092/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter."
      }, {
        "lang" : "es",
        "value" : "MyBuilder Clone 1.0 permite que se produzca inyección SQL mediante el parámetro subcategory en phpsqlsearch_genxml.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contractorscripts:mybuildersite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED0DD15-9A5B-4581-B5DC-0065F6B61F95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144438/MyBuilder-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43091/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144438/MyBuilder-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43091/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_catalog/category."
      }, {
        "lang" : "es",
        "value" : "PG All Share Video 1.0 permite que se produzca inyección SQL mediante PATH_INFO en search/tag, friends/index, users/profile o video_catalog/category."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pilotgroup:allsharevideo:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50970CED-337D-41C0-AF81-7950E1F9319A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144439/PG-All-Share-Video-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43090/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144439/PG-All-Share-Video-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43090/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter."
      }, {
        "lang" : "es",
        "value" : "PHP CityPortal 2.0 permite que se produzca inyección SQL mediante el parámetro nid en index.php en una acción page=news o el parámetro cat."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcityportal:phpcityportal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EEEA77-EA3A-43DF-9986-A475F4BB3F83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144440/PHP-CityPortal-2.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43089/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144440/PHP-CityPortal-2.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43089/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972."
      }, {
        "lang" : "es",
        "value" : "Same Sex Dating Software Pro 1.0 permite que se produzca inyección SQL mediante el parámetro profid en viewprofile.php, el parámetro sender_id en viewmessage.php o el campo Email en /admin. Este problema está relacionado con CVE-2017-15972."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softdatepro:same_date_pro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12347BF7-F0A5-4CA4-AAC6-0FFF988E2373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144441/Same-Sex-Dating-Software-Pro-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43088/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144441/Same-Sex-Dating-Software-Pro-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43088/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971."
      }, {
        "lang" : "es",
        "value" : "SoftDatepro Dating Social Network 1.3 permite que se produzca inyección SQL mediante el parámetro profid en viewprofile.php, el parámetro sender_id en viewmessage.php o el campo Email en /admin. Este problema está relacionado con CVE-2017-15971."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softdatepro:dating_software:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5F2277-79B8-4587-AF09-BB1434BD3186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144442/SoftDatepro-Dating-Social-Network-1.3-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43087/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144442/SoftDatepro-Dating-Social-Network-1.3-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43087/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php."
      }, {
        "lang" : "es",
        "value" : "Sokial Social Network Script 1.0 permite que se produzca inyección SQL mediante el parámetro id en admin/members_view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sokial:sokial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F575A45D-2669-4989-AC05-4A2A047AB6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144443/Sokial-Social-Network-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43086/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144443/Sokial-Social-Network-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43086/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php."
      }, {
        "lang" : "es",
        "value" : "tPanel 2009 permite que se produzca inyección SQL para omitir la autenticación mediante 'or 1=1 or \"=' en login.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datacomponents:tpanel:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304A6FFA-FB88-4759-B13C-7D3ABD9EA5B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144444/tPanel-2009-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43085/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144444/tPanel-2009-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43085/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461."
      }, {
        "lang" : "es",
        "value" : "Vastal I-Tech Dating Zone 0.9.9 permite que se produzca inyección SQL mediante \"product_id\" en add_to_cart.php. Esta es una vulnerabilidad diferente de CVE-2008-4461."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal:dating_zone:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF3F120-F2AA-4882-B8D9-665B45C283B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144445/Vastal-I-Tech-Dating-Zone-0.9.9-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43084/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144445/Vastal-I-Tech-Dating-Zone-0.9.9-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43084/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:01.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604."
      }, {
        "lang" : "es",
        "value" : "ZeeBuddy 2x permite que se produzca inyección SQL mediante el parámetro groupid en admin/editadgroup.php. Esta es una vulnerabilidad diferente de CVE-2008-3604."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeescripts:zeebuddy:2x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9942A1A8-FF87-4C27-9F2F-DE1DE223B45A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144446/ZeeBuddy-2x-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43083/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144446/ZeeBuddy-2x-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43083/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T06:29:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects."
      }, {
        "lang" : "es",
        "value" : "rsync 3.1.3-development en versiones anteriores al 24/10/2017 gestiona de manera incorrecta las sumas de verificación arcaicas, lo que hace que sea más fácil para los atacantes remotos omitir las restricciones de acceso establecidas. NOTA: la rama de desarrollo rsync tiene un uso importante más allá de los desarrolladores rsync; por ejemplo, el código se ha copiado para su uso en varios proyectos en GitHub."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "F490A8DC-BDAF-4AD0-95E3-F98D5BDA75B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=7b8a4ecd6ff9cdf4e5d3850ebf822f1e989255b3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=9a480deec4d20277d8e20bc55515ef0640ca1e55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=c252546ceeb0925eb8a4061315e3ff0a8c55b48b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=7b8a4ecd6ff9cdf4e5d3850ebf822f1e989255b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=9a480deec4d20277d8e20bc55515ef0640ca1e55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=c252546ceeb0925eb8a4061315e3ff0a8c55b48b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T17:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a \"buffer overflow on fuzzed archive header,\" related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions."
      }, {
        "lang" : "es",
        "value" : "elfcomm.c en readelf en GNU Binutils 2.29 permite que atacantes remotos provoquen una denegación de servicio (asignación de memoria excesiva) o, posiblemente, causen otro impacto no especificado mediante un archivo ELF manipulado que desencadene un desbordamiento de búfer en la cabecera del archivo atacado. Esto está relacionado con una variable no inicializada, un salto de condición incorrecto y con las funciones get_archive_member_name, process_archive_index_and_symbols y setup_archive."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD1DE6-27E3-47BF-955F-8803A0063F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101608",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22361",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d91f0b20e561e326ee91a09a76206257bde8438b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d91f0b20e561e326ee91a09a76206257bde8438b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T17:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the \"NQ Contacts Backup & Restore\" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML file."
      }, {
        "lang" : "es",
        "value" : "En la aplicación NQ Contacts Backup & Restore 1.1 para Android, el cifrado RC4 se emplea para proteger la contraseña de usuario almacenada localmente en las preferencias compartidas. Ya que hay una clave RC4 estática, un atacante puede obtener acceso a las credenciales de usuario accediendo al archivo de preferencias XML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nq:contacts_backup_\\&_restore:1.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A459EF7F-A85D-4ADC-A69D-CD5582703075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T17:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the \"NQ Contacts Backup & Restore\" application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "En la aplicación NQ Contacts Backup & Restore 1.1 para Android, se utiliza el cifrado DES con una clave estática para proteger los datos de contacto transmitidos. Esto hace que sea más fácil para los atacantes remotos obtener información en texto claro rastreando la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nq:contacts_backup_\\&_restore:1.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A459EF7F-A85D-4ADC-A69D-CD5582703075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T17:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the \"NQ Contacts Backup & Restore\" application 1.1 for Android, no HTTPS is used for transmitting login and synced user data. When logging in, the username is transmitted in cleartext along with an SHA-1 hash of the password. The attacker can either crack this hash or use it for further attacks where only the hash value is required."
      }, {
        "lang" : "es",
        "value" : "En la aplicación NQ Contacts Backup & Restore 1.1 para Android, no se utiliza HTTPS para transmitir los datos de usuario sincronizados y de inicio de sesión. A la hora de iniciar sesión, el nombre de usuario se transmite en texto claro junto con un hash SHA-1 de la contraseña. El atacante puede o bien comprometer el hash o utilizarlo para más ataques en donde solo se necesita el valor del hash."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nq:contacts_backup_\\&_restore:1.1:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A459EF7F-A85D-4ADC-A69D-CD5582703075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T17:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacity_per_label/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la interfaz web de EyesOfNetwork (también conocida como eonweb) 5.1-0 permite que administradores autenticados remotos ejecuten comandos SQL arbitrarios mediante el parámetro graph en module/capacity_per_label/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6B2C4-8E76-495D-A002-FB3091CBA86E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_label_index.php-SQL%20injection%20vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_label_index.php-SQL%20injection%20vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message."
      }, {
        "lang" : "es",
        "value" : "La función aspath_put en bgpd/bgp_aspath.c en Quagga en versiones anteriores a la 1.2.2 permite que los atacantes remotos provoquen una denegación de servicio (caída de sesión) mediante mensajes BGP Update, ya que el cálculo del tamaño de AS_PATH cuanta una serie de bytes dos veces y en consecuencia construye un menaje no válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "8A77B501-67FE-43AE-9A3B-53B9DF5865C9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.savannah.gnu.org/releases/quagga/quagga-1.2.2.changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4011",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/879474",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://download.savannah.gnu.org/releases/quagga/quagga-1.2.2.changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/879474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-29T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117."
      }, {
        "lang" : "es",
        "value" : "Dulwich en versiones anteriores a la 0.18.5, cuando se utiliza un subproceso SSH, perote que atacantes remotos ejecuten comandos arbitrarios mediante una URL ssh con un carácter guión inicial en el nombre del host. Esta vulnerabilidad está relacioada con CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dulwich_project:dulwich:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.18.4",
            "matchCriteriaId" : "9358D52F-0A29-4343-8F98-FC6575BAB78E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tracker.debian.org/news/882440",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dulwich.io/code/dulwich/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tracker.debian.org/news/882440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dulwich.io/code/dulwich/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T14:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10.  An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product.  By uploading a wallpaper with a specially crafted name, an HTML injection can be triggered as special characters are not neutralized before output."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Barco ClickShare con firmware CSM-1 anterior a v1.7.0.3 y firmware CSC-1 anterior a v1.10.0.10. Un usuario autenticado puede gestionar la colección de fondos de pantalla en la interfaz de usuario web para que se muestre como fondo en el producto ClickShare. Mediante la subida de un fondo de pantalla con un nombre especialmente manipulado, se puede desencadenar una inyección HTML, ya que los caracteres especiales no se neutralizan antes de la salida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barco:clickshare_csm-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0.3",
            "matchCriteriaId" : "153A768C-A1C0-4E5D-81CE-C0760019C3F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barco:clickshare_csm-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6332071-FA97-4220-AC19-0C62C6593BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.0.10",
            "matchCriteriaId" : "A9E89FB2-F4E3-4F89-AF1D-AF3D207BEE87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barco:clickshare_csc-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A88BAB0-B290-46CB-91BD-F6872C838FC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.barco.com/en/Support/software/R33050037",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.barco.com/en/support/knowledge-base/KB5169",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.barco.com/en/support/software/R33050020",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.barco.com/en/Support/software/R33050037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.barco.com/en/support/knowledge-base/KB5169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.barco.com/en/support/software/R33050020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T14:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying domain, the assumption turns out wrong. A malicious guest administrator can cause hypervisor memory corruption, most likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x. El código copiado por la función GRANT asumía que cualquier Grant Pin estaría acompañado de una referencia de página adecuada. Sin embargo, otras fragmentos de código no coincidieron con esta suposición. Cuando esta operación de copia de autorización se realiza en una tabla grant de un dominio obsoleto, la suposición se vuelve errónea. Un administrador invitado malicioso puede provocar la corrupción de la memoria del hipervisor, lo que probablemente resulte en el cierre inesperado del host y una denegación de servicio. El escalado de privilegios y las fugas de información no pueden descartarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:rc7:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "4FE0E8DB-FAAA-4516-88F5-594F625A008C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/24/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101564",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039653",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-236.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX229057",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/24/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX229057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T14:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by malicious users through the REST API interface, and this can be exploited to inject arbitrary PHP objects into the application scope, allowing an attacker to perform a variety of attacks (including but not limited to Remote Code Execution)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Enalean Tuleap en versiones 9.6 y anteriores. La vulnerabilidad existe debido a que el método User::getRecentElements() está empleando la función unserialize() con un valor de preferencia que puede ser manipulado de forma arbitraria por usuarios maliciosos mediante la interfaz REST de API. Esto puede ser explotado para inyectar objetos PHP arbitrarios en el ámbito de la aplicación, lo que permite que un atacante realice una serie de ataques (incluyendo, pero no limitados a la ejecución remota de código)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6",
            "matchCriteriaId" : "FD98D768-7810-4483-BFBA-FCB7D9CBF67D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://karmainsecurity.com/KIS-2017-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144716/Tuleap-9.6-Second-Order-PHP-Object-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/53",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/23/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=10118",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43374/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://karmainsecurity.com/KIS-2017-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144716/Tuleap-9.6-Second-Order-PHP-Object-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/23/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=10118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43374/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T14:29:00.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una inyección de comandos en dispositivos Barco ClickShare Base Unit con firmware CSM-1 en versiones anteriores a la 1.7.0.3 y firmware CSC-1 en versiones anteriores a la 1.10.0.10. Un atacante que tenga acceso a la API web del producto puede explotar esta vulnerabilidad para comprometer de forma total el dispositivo vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barco:clickshare_csm-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0.3",
            "matchCriteriaId" : "153A768C-A1C0-4E5D-81CE-C0760019C3F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barco:clickshare_csm-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6332071-FA97-4220-AC19-0C62C6593BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.0.10",
            "matchCriteriaId" : "A9E89FB2-F4E3-4F89-AF1D-AF3D207BEE87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barco:clickshare_csc-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A88BAB0-B290-46CB-91BD-F6872C838FC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101617",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.barco.com/en/Support/software/R33050037",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.barco.com/en/support/software/R33050020",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.contextis.com/resources/advisories/cve-2017-9377",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.barco.com/en/Support/software/R33050037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.barco.com/en/support/software/R33050020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.contextis.com/resources/advisories/cve-2017-9377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T14:29:00.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Amazon Web Services (AWS) CloudFormation bootstrap tools package (aka aws-cfn-bootstrap) before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 1.4-19.10 del paquete de herramientas de arranque Amazon Web Services (AWS) CloudFormation, también conocido como aws-cfn-bootstrap, permiten que usuarios locales ejecuten código arbitrario con privilegios root aprovechando la habilidad para crear archivos en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:amazon_web_services_cloudformation_bootstrap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4-19.10",
            "matchCriteriaId" : "FC79BA3A-2AD0-4CEC-9B01-44AED70DB04E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99972",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://alas.aws.amazon.com/ALAS-2017-861.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sintonen.fi/advisories/aws-cfn-bootstrap-local-code-execution-as-root.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/99972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://alas.aws.amazon.com/ALAS-2017-861.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sintonen.fi/advisories/aws-cfn-bootstrap-local-code-execution-as-root.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated."
      }, {
        "lang" : "es",
        "value" : "En Watchdog Anti-Malware 2.74.186.150 y Online Security Pro 2.74.186.150, el controlador zam32.sys contiene una vulnerabilidad de desreferencia de puntero NULL que se desencadena al enviar una operación a una llamada IOCTL 0x80002054. Esto se debe a que el búfer de entrada es NULL o a que el tamaño del búfer de entrada es 0, ya que no están validados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchdogdevelopment:anti-malware:2.74.186.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07900B32-FF65-4A67-A6B6-12D6C345A61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchdogdevelopment:online_security_pro:2.74.186.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29CBB9A-2EFA-47AE-9FBC-1F1ABD01B7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43058/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43058/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T15:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated."
      }, {
        "lang" : "es",
        "value" : "En Watchdog Anti-Malware 2.74.186.150 y Online Security Pro 2.74.186.150, el controlador zam32.sys contiene una vulnerabilidad de desreferencia de puntero NULL que se desencadena al enviar una operación a una llamada IOCTL 0x80002010. Esto se debe a que el búfer de entrada es NULL o a que el tamaño del búfer de entrada es 0, ya que no están validados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchdogdevelopment:anti-malware:2.74.186.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07900B32-FF65-4A67-A6B6-12D6C345A61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchdogdevelopment:online_security_pro:2.74.186.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29CBB9A-2EFA-47AE-9FBC-1F1ABD01B7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43058/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43058/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15888",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-10-30T18:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Custom Internet Radio List in Synology Audio Station before 6.3.0-3260 allows remote authenticated attackers to inject arbitrary web script or HTML via the NAME parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en Custom Internet Radio List en Synology Audio Station en versiones anteriores a la 6.3.0-3260 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro NAME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:audio_station:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.0-3260",
            "matchCriteriaId" : "4C6245ED-E5C3-456D-A3C6-20264A939B5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_61_Audio_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_61_Audio_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T19:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter."
      }, {
        "lang" : "es",
        "value" : "Node.js en versiones anteriores a la 4.8.5, las versiones 6.x anteriores a la 6.11.5 y las versiones 8.x anteriores a la 8.8.0 permiten que atacantes remotos provoquen una denegación de servicio (excepción no detectada y cierre inesperado) aprovechando un cambio en el módulo zlib, versión 1.2.9, que hace que 8 sea un valor no válido para el parámetro windowsBits."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C38CBB-154F-4842-B783-86DE1700A59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A52ABF-EAB6-4B14-8DF2-49E0D93F0737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:4.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E962F4B0-258F-40FB-859A-148FF37A539B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96903DD4-70B8-4F30-AE8D-B5BF4235EC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F1B8C-B2A2-46F0-A46B-543876382BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4E9F52-DAAA-4E7E-B37A-A8612DDF6717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33314D49-3EDD-458F-9DC6-71AC0C1BF2D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415E86EC-4452-4299-B579-3A07FC7FB21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82584464-558A-4627-8A6B-2A019ED9C8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D047DFA7-CCBE-44A6-BBDC-A372C96E32AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710CFCCF-7086-472E-90A9-ACE36A8F8AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35B2D35-798E-4186-8C17-4AC717777668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC765BA6-CDB8-4C3B-9D23-64996F38027A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35BB2AB-7E3E-450D-A135-A0A8020F0BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710334-6ADA-4BF3-A4A8-F1EF1CC07674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5412B7B9-4844-4E18-B671-7CA2BB98CD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDB9B89-EEEB-49D4-A55C-E7381DB00FE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1730EB6-426D-49A4-88D1-61D1EBF2AD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D86DC4-5972-40C9-B535-8D79DCAF9EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F004FD3-3D34-4424-8BE0-75664F0EBA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B4767-BFBC-4595-90A6-64927ADEE378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8CB363-1B02-4B72-91B6-859F7BE53CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:8.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F525E136-B5A0-4247-9630-6ABEF09C3264"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101881",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodejs.org/en/blog/release/v4.8.5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/release/v6.11.5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/release/v8.8.0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/oct-2017-dos/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodejs.org/en/blog/release/v4.8.5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/release/v6.11.5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/release/v8.8.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/oct-2017-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T19:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit."
      }, {
        "lang" : "es",
        "value" : "En admin/write-post.php en Typecho hasta la versión 1.1, se puede iniciar sesión en la página background, escribir un nuevo artículo y añadir un payload en el contenido del artículo. Esto resulta en un XSS mediante index.php/action/contents-post-edit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typecho:typecho:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "6FB6BF63-85C6-44A4-99F8-BD8332D1B677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SQYY/CVE/blob/master/Typecho.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SQYY/CVE/blob/master/Typecho.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-30T20:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception (interrupt), and use the r1 value *from the signal frame* as the kernel stack pointer. As part of the exception entry the content of the signal frame is written to the kernel stack, allowing an attacker to overwrite arbitrary locations with arbitrary values. The exception handling does produce an oops, and a panic if panic_on_oops=1, but only after kernel memory has been over written. This flaw was introduced in commit: \"5d176f751ee3 (powerpc: tm: Enable transactional memory (TM) lazily for userspace)\" which was merged upstream into v4.9-rc1. Please note that kernels built with CONFIG_PPC_TRANSACTIONAL_MEM=n are not vulnerable."
      }, {
        "lang" : "es",
        "value" : "Cuando Linux se ejecuta en hardware PowerPC (Power8 o posterior), un proceso de usuario puede manipular un frame de señal y, a continuación, realizar un sigreturn para que el kernel tome un excepción (interrupt) y emplee el valor r1 (desde el frame de señal) como el puntero de la pila del kernel. Como parte de la entrada de excepción, el contenido del frame de señal está escrito en la pila del kernel, permitiendo que un atacante sobrescriba localizaciones arbitrarias con valores arbitrarios. La manipulación de excepciones produce un error OOPS y pánico si panic_on_oops=1, pero solo una vez se haya sobrescrito la memoria de la pila. Este fallo fue introducido en el commit con ID: \"5d176f751ee3 (powerpc: tm: Enable transactional memory (TM) lazily for userspace)\" que se ha combinado de forma ascendente en v4.9-rc1. Se debe tener en cuenta que los kernels compilados con CONFIG_PPC_TRANSACTIONAL_MEM=n no son vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:powerpc_power8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "939AB0E7-045F-4AD8-900A-816A91B43AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:powerpc_power9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60B30EF-F7A2-49FA-AF1C-17D47C0DB2BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101264",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000255",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10151",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-10-30T20:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Default Account). Supported versions that are affected are 11.1.1.7, 11.1.2.3 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Identity Manager de Oracle Fusion Middleware (subcomponente: Default Account). Las versiones compatibles que se han visto afectadas son la 11.1.1.7, 11.1.2.3 y la 12.2.1.3. Esta vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por HTTP comprometa la seguridad de Oracle Identity Manager. Aunque la vulnerabilidad está presente en Oracle Identity Manager, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Oracle Identity Manager. CVSS 3.0 Base Score 10.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373AA296-34E7-4E96-94E3-60C4D9CE33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3E3387-CD3C-47B9-8DF6-0B390FE2E418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B5DF3D-AFF7-4B94-A779-8DEE44846EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33916011-E0BF-44CA-B17E-466F170716FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA05ECC-B845-44D3-95DD-F307DACC6B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:12.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB94BA6D-3486-4EE3-97DF-96DCA2215063"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10151-4016513.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101619",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039690",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10151-4016513.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14373",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-10-31T07:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC RSA Authentication Manager 8.2 SP1 P4 y anteriores contiene una vulnerabilidad de Cross-Site Scripting (XSS) reflejado que podría ser explotada por usuarios maliciosos con el fin de comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "8A7D03E1-0EEF-4E76-ADEF-39A302C6DD13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/62",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101605",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039680",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Protected Links - Expiring Download Links 1.0 permite que se produzca inyección SQL mediante el parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:protectedlinks:expiring_download_links:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47900C8-FE41-4755-BEAE-ED42F8DD3D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43082/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43082/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter."
      }, {
        "lang" : "es",
        "value" : "AROX School ERP PHP Script 1.0 permite que se produzca inyección SQL mediante el parámetro id office_admin/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arox:school_erp_php_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC77F89-F41A-4BDD-8E62-F4E3A44C7163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43081/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43081/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter."
      }, {
        "lang" : "es",
        "value" : "Shareet - Photo Sharing Social Network 1.0 permite que se produzca inyección SQL mediante el parámetro photo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odallated:shareet:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9201104-CB4D-4D3A-B390-7CEB4E10B321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43080/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43080/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter."
      }, {
        "lang" : "es",
        "value" : "US Zip Codes Database Script 1.0 permite que se produzca inyección SQL mediante el parámetro state."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rowindex:us_zip_codes_database_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F751FA-5F55-46E4-B20A-19C073D51CC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43079/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43079/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing."
      }, {
        "lang" : "es",
        "value" : "Responsive Newspaper Magazine & Blog CMS 1.0 permite que se produzca inyección SQL mediante el parámetro id en admin/admin_process.php para la edición de formularios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geniusocean:newspaper:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFB0AC9-B598-4C16-ABFD-7F9DC258C004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43078/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43078/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing."
      }, {
        "lang" : "es",
        "value" : "Dynamic News Magazine & Blog CMS 1.0 permite que se produzca inyección SQL mediante el parámetro id en admin/admin_process.php para la edición de formularios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geniusocean:news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E19082-152D-4320-B76A-8B03CCE9366C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43077/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43077/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing."
      }, {
        "lang" : "es",
        "value" : "MyMagazine Magazine & Blog CMS 1.0 permite que se produzca inyección SQL mediante el parámetro id en admin/admin_process.php para la edición de formularios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geniusocean:mymagazine_magazine_\\&_blog_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA7567A-AA3B-4576-98D5-0EAB3ED81AF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43076/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43076/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Creative Management System (CMS) Lite 1.4 permite que se produzca inyección SQL mediante el parámetro S en index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bekirk:creative_management_system_lite:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556A85DC-4527-4417-BDE3-88D7662C8887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43075/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43075/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter."
      }, {
        "lang" : "es",
        "value" : "Basic B2B Script permite que se produzca inyección SQL mediante el parámetro pid o id en product_view1.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymadeb2bscript:basic_b2b_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5F11A3-C6A6-444A-9F87-FB5C41D14C98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43074/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43074/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CPA Lead Reward Script allows SQL Injection via the username parameter."
      }, {
        "lang" : "es",
        "value" : "CPA Lead Reward Script permite que se produzca inyección SQL mediante el parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpa_lead_reward_script_project:cpa_lead_reward_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034F5FD6-1E16-4298-B63C-502614FE8124"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43073/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43073/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter."
      }, {
        "lang" : "es",
        "value" : "Fake Magazine Cover Script permite que se produzca inyección SQL mediante el parámetro value en rate.php o el parámetro id content.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fake_magazine_cover_script_project:fake_magazine_cover_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1E153D-3CB5-4A8A-B93F-D537B5E20EFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43072/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43072/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525."
      }, {
        "lang" : "es",
        "value" : "Nice PHP FAQ Script permite que se produzca inyección SQL mediante el parámetro nice_theme en index.php. Esta vulnerabilidad es diferente de CVE-2008-6525."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicephpscripts:nice_php_faq_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7B00A8-FD2B-4F2F-A9B3-9FDC3BB94479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43071/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43071/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action."
      }, {
        "lang" : "es",
        "value" : "Online Exam Test Application permite que se produzca inyección SQL mediante el parámetro sort en resources.php en una acción category."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_exam_test_application_project:online_exam_test_application:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2598AE-4898-43C8-9F36-93716D606895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43070/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43070/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/."
      }, {
        "lang" : "es",
        "value" : "Php Inventory & Invoice Management System permite la subida de archivos arbitrarios mediante dashboard/edit_myaccountdetail/."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savsofteproducts:phpinventory:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6417ADF0-944C-4DC2-A3C7-12E545FCDF3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43069/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43069/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and CVE-2012-0982."
      }, {
        "lang" : "es",
        "value" : "Vastal I-Tech Agent Zone (también conocido como The Real Estate Script) permite que se produzca inyección SQL en searchCommercial.php mediante los parámetros property_type, city o posted_by, o en searchResidential.php mediante los parámetros property_type, city o bedroom. Esta vulnerabilidad es diferente de CVE-2008-3951, CVE-2009-3497 y CVE-2012-0982."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal:agent_zone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE803EEB-FD1C-410E-892B-41A4B88F3F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43068/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43068/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php."
      }, {
        "lang" : "es",
        "value" : "Website Broker Script permite que se produzca inyección SQL mediante el parámetro status_id en status_list.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_broker_script_project:website_broker_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC60DA93-6306-4AD0-AEB0-0A2C75F5C5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43067/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43067/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T07:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter."
      }, {
        "lang" : "es",
        "value" : "Zomato Clone Script permite que se produzca inyección SQL mediante el parámetro resid en restaurant-menu.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zomato_clone_script_project:zomato_clone_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26759410-4D1D-41D2-9596-13986935564F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43066/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43066/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T14:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the \"Destination directory\" field, either within an XML document or through use of passive mode."
      }, {
        "lang" : "es",
        "value" : "Flexense SyncBreeze Enterprise, en su versión 10.1.16, es vulnerable a un desbordamiento de búfer que puede ser explotado para ejecutar código arbitrario. El error se desencadena introduciendo una entrada larga en el campo \"Destination directory\", ya sea con un documento XML o con el uso del modo pasivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:10.1.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ADC6E48B-D67D-424F-98DC-ACB0F6571DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/64",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3933",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-31T14:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de incrustación de script (XSS) en cabeceras HTTP en versiones 9.3.x de McAfee Network Data Loss Prevention (NDLP) que permite que usuarios autenticados remotos visualicen información confidencial mediante un ataque Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C779EE6-F793-4E35-9841-05E99D8AA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C0C317-D63A-4E89-BF10-6827BB8EB09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90206971-FBAF-43DF-8EE5-73C8EA9F481A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C37E558-1ED5-4F9F-B07A-66D0427A303C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBA2394-C4D3-4970-8E38-99034B5A3F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101628",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3934",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-31T14:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falta de información de estado de la seguridad de transporte estricto HTTP en el servidor en versiones 9.3.x de McAfee Network Data Loss Prevention (NDLP) permite que atacantes Man-in-the-Middle (MitM) expongan información confidencial mediante archivos de lectura en el servidor web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "DABB617F-203F-4074-82D2-B975C15221F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101695",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3935",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-10-31T14:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type."
      }, {
        "lang" : "es",
        "value" : "Network Data Loss Prevention es vulnerable a espionaje de tipos MIME, lo que permite que versiones anteriores de Internet Explorer realicen espionaje de MIME en el cuerpo de respuesta, lo que podría dar lugar a que el cuerpo de respuesta se interprete y se muestre como un tipo de contenido diferente del previsto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "6272CAF0-8FB9-4244-B857-89D108446E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T15:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libvirt version 2.3.0 and later is vulnerable to a bad default configuration of \"verify-peer=no\" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default."
      }, {
        "lang" : "es",
        "value" : "libvirt en sus versiones 2.3.0 y posteriores es vulnerable a una mala configuración por defecto de \"verify-peer=no\" que libvirt pasa a QEMU. Esto da lugar a un error a la hora de validar certificados SSL/TLS por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "3.9.0",
            "matchCriteriaId" : "67508AF4-AD2C-496D-9EEB-4D691CC20DB5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4003",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000256",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1556251.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/libvirt-announce/2017-October/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-1000256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1556251.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/libvirt-announce/2017-October/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14356",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-31T15:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en HP ArcSight ESM y HP ArcSight ESM Express, en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o versión 6.11.0 Patch 1. Esta vulnerabilidad podría explotarse de forma remota para permitir una inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7A49FD-F9B7-4881-8AEE-0A9315E79F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101627",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02996760",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/54166",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02996760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/54166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14357",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-31T15:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) persistente y reflejado en HP ArcSight ESM y HP ArcSight ESM Express, en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o versión 6.11.0 Patch 1. Esta vulnerabilidad podría explotarse de forma remota para permitir Cross-Site Scripting (XSS) persistente y reflejado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D8141-F1E7-4C63-A22D-F33BE733EBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7A49FD-F9B7-4881-8AEE-0A9315E79F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.hpe.com/km/KM02996760",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/54166",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02996760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/54166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14358",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-10-31T15:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección de URL a un sitio no fiable en HP ArcSight ESM y HP ArcSight ESM Express, en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o versión 6.11.0 Patch 1. Esta vulnerabilidad podría explotarse de forma remota para permitir una redirección de URL a un sitio no fiable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78B3322-5139-498E-881E-107A316BF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC0FEF9-75FC-4B80-949F-0D1BFFC77AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6AAF29-51F6-424A-BE5A-AE886F12A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "10842D30-C2A4-48B5-BC1E-45A4B8C8D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A63A99-5FC1-4235-A390-3EAE61154B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E11A80-D28D-47B9-83F3-045F33983797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41658ED4-D03A-471C-9E83-A71B19229910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB25793-D70A-4AC8-947A-3C2E153BDE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3F4F0A-B866-4DBC-8F83-5D558FF55E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902FDA0-B001-4C9A-82B8-2DA0554A599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8F1C31-174C-473C-BF0C-E2B25D35EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53F2315-90FE-4722-99BF-ACD068E14837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7662BB37-2990-4B2E-9444-DA2EC5EEA7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04F201-32A6-43CA-A4D2-72E5D16B664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC6544-94EA-407A-B2DE-B72FEB0D6B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EDBBF-A5E5-4142-9436-4203CF00AA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A65366-9D30-47A3-914F-32E7D31442CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7802C5-9294-4BD7-A0E6-8A240BC73EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9423B736-E39D-4FDE-A53D-F59D1A5F75FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.5c:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA543C-A5CB-48B8-A0FD-4909330E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5112A04D-B67A-4006-87E2-8B59A05E0749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E444EC-4DFE-48A5-88E2-551D062C3A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7A49FD-F9B7-4881-8AEE-0A9315E79F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836D66B2-2D0D-4AA6-8D26-1FB4B7136C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "24F1751D-5B62-4634-9619-7C572DC14C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF52F9B-3A0E-42CE-A8E2-C6325041D2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.9.1c:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D855C29-8407-4E77-8E25-6D4AA03F0859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:arcsight_enterprise_security_manager_express:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AC0017-DBCA-4E8A-ACA0-34E845802D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.hpe.com/km/KM02996760",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/54166",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/km/KM02996760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.auscert.org.au/bulletins/54166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T18:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Mahara, en versiones anteriores a la 15.04.14, versiones 16.x anteriores a la 16.04.8, versiones 16.10.x anteriores a la 16.10.5 y versiones 17.x anteriores a la 17.04.3. Cuando un usuario cierra el navegador sin cerrar sesión en Mahara, no se elimina el valor en la tabla usr_session. Si alguien fuese a abrir un navegador, visitar el sitio de Mahara y ajustar la cookie \"Mahara\" al valor antiguo, podría obtener acceso a la cuenta del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FF82A5-DF51-4719-9940-85A0E4AF4626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3605A76D-1C09-4998-B387-FE7BED77B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB396B0-459E-4C15-9813-980F35C4C44D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BD9F88-E643-4CF5-A426-82B2D6133F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F2D3A9-81B1-42E3-AF72-FBA985C48650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D050E953-88B1-40F7-98A8-B6A026292B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CDBF96-CFA2-4941-A9D9-C618A2A1D08D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DF3D9-A46D-4933-84FB-8179651C5B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D642FA0-D977-4157-B379-3BBA86D80D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D2BD22-57F7-4594-AE5F-426AA1D74BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5712D88-9218-4E7D-977C-07755D1B0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA26090-2ED4-453D-85AA-46ED4E00DFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F2B552-479F-4EEA-858B-2920E14BF5C0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4968B1-0D09-4449-B2A8-22B8C4B4346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "68A1A68E-704F-49C9-B07A-23C1B69A0966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262C2C07-CFDB-42A0-8896-758F1FF5BE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265120A4-CD21-425B-9272-06EB68654A80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1701978",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1701978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T18:29:00.297",
      "lastModified" : "2023-11-07T02:38:54.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T18:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.15, versiones 16.04 anteriores a la 16.04.9, versiones 16.10 anteriores a la 16.10.6 y versiones 17.04 anteriores a la 17.04.4, es vulnerable a que un usuario envíe un payload potencialmente peligroso (por ejemplo, código XSS) para que se guarde como su nombre, apellido o el nombre para mostrar en los campos de perfil. Esto puede dar lugar a problemas como el escalado de privilegios o a la ejecución desconocida de código malicioso cuando se responde a mensajes en Mahara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FF82A5-DF51-4719-9940-85A0E4AF4626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3605A76D-1C09-4998-B387-FE7BED77B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB396B0-459E-4C15-9813-980F35C4C44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451AFC9-F666-4DB9-A72C-3A9B525F6C75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BD9F88-E643-4CF5-A426-82B2D6133F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F2D3A9-81B1-42E3-AF72-FBA985C48650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D050E953-88B1-40F7-98A8-B6A026292B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CDBF96-CFA2-4941-A9D9-C618A2A1D08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5065A264-DB58-4A3F-984D-D3B45195F4B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DF3D9-A46D-4933-84FB-8179651C5B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D642FA0-D977-4157-B379-3BBA86D80D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D2BD22-57F7-4594-AE5F-426AA1D74BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5712D88-9218-4E7D-977C-07755D1B0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA26090-2ED4-453D-85AA-46ED4E00DFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F2B552-479F-4EEA-858B-2920E14BF5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F7A0FD-5C12-4A49-B5FE-E8C8C88C2496"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4968B1-0D09-4449-B2A8-22B8C4B4346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "68A1A68E-704F-49C9-B07A-23C1B69A0966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262C2C07-CFDB-42A0-8896-758F1FF5BE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265120A4-CD21-425B-9272-06EB68654A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2D1CB-72FA-445B-BDF2-88ED633B19D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1719491",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1719491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T18:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.15, versiones 16.04 anteriores a la 16.04.9, versiones 16.10 anteriores a la 16.10.6 y versiones 17.04 anteriores a la 17.04.4, es vulnerable a que un usuario envíe un payload potencialmente peligroso (como código XSS) para que se guarde como títulos en artefactos internos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FF82A5-DF51-4719-9940-85A0E4AF4626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3605A76D-1C09-4998-B387-FE7BED77B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB396B0-459E-4C15-9813-980F35C4C44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EC92CA-00D6-482A-94FE-3FA0A962B6C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BD9F88-E643-4CF5-A426-82B2D6133F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F2D3A9-81B1-42E3-AF72-FBA985C48650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D050E953-88B1-40F7-98A8-B6A026292B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CDBF96-CFA2-4941-A9D9-C618A2A1D08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5065A264-DB58-4A3F-984D-D3B45195F4B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DF3D9-A46D-4933-84FB-8179651C5B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D642FA0-D977-4157-B379-3BBA86D80D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D2BD22-57F7-4594-AE5F-426AA1D74BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5712D88-9218-4E7D-977C-07755D1B0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA26090-2ED4-453D-85AA-46ED4E00DFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F2B552-479F-4EEA-858B-2920E14BF5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F7A0FD-5C12-4A49-B5FE-E8C8C88C2496"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4968B1-0D09-4449-B2A8-22B8C4B4346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "68A1A68E-704F-49C9-B07A-23C1B69A0966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262C2C07-CFDB-42A0-8896-758F1FF5BE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265120A4-CD21-425B-9272-06EB68654A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2D1CB-72FA-445B-BDF2-88ED633B19D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1719472",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1719480",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1720034",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1719472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1719480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1720034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T18:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges."
      }, {
        "lang" : "es",
        "value" : "En el plugin Vagrant VMware Fusion de HashiCorp (también conocido como vagrant-vmware-fusion) 5.0.0, un atacante local o malware pueden alterar el proceso de actualización del plugin con el fin de conseguir un escalado de privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF4AA72-A16A-44F4-A812-721F0C06BF1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201715884-local-root-privesc-in-hashicorp-vagrantvmwarefusion-500.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43222/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://m4.rkw.io/blog/cve201715884-local-root-privesc-in-hashicorp-vagrantvmwarefusion-500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43222/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10940",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf (e469cf49-4de3-4658-8419-ab42837916ad). An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the docker API. The process does not properly validate user-supplied data which can allow for the upload of arbitrary files. An attacker can leverage this vulnerability to execute arbitrary code under the context of root. Was ZDI-CAN-3853."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Joyent Smart Data Center anteriores a agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf (e469cf49-4de3-4658-8419-ab42837916ad). En primer lugar, un atacante debe obtener la capacidad de ejecutar código de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad. Este error en concreto existe en la API de docker. El proceso no valida correctamente los datos proporcionados por el usuario, lo que puede permitir la subida de archivos arbitrarios. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto de root. Anteriormente era ZDI-CAN-3853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joyent:triton_datacenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE196DC-9DBB-49A3-B54A-93AEF4A1C70F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99510",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://help.joyent.com/hc/en-us/articles/115009649927-Security-Advisory-ZDI-CAN-3853-Docker-File-Overwrite-Vulnerability",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-453",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://help.joyent.com/hc/en-us/articles/115009649927-Security-Advisory-ZDI-CAN-3853-Docker-File-Overwrite-Vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10941",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFParseDateEx function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4816."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la función AFParseDateEx. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4816."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-454",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10942",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4737."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de archivos PDF. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4737."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-455",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10943",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4738."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de archivos PDF. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4738."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-456",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10944",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ObjStm objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-4846."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de objetos ObjStm. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código arbitrario en el contexto del actual proceso. Anteriormente era ZDI-CAN-4846."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-457",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10945",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.alert function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4855."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la función app.alert. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4855."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-458",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10946",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setItem function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4721."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.2.1.6871. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la función setItem. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del actual proceso. Anteriormente era ZDI-CAN-4721."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.2.1.6871:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B296C6D-68E4-4B76-A722-1CFF57EA22ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-459",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10947",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the print function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4722."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.2.1.6871. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la función print. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4722."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.2.1.6871:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B296C6D-68E4-4B76-A722-1CFF57EA22ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-460",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10948",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.execMenuItem function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4723."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.2.1.6871. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la función app.execMenuItem. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4723."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.2.1.6871:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B296C6D-68E4-4B76-A722-1CFF57EA22ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101670",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-461",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10953",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the gotoURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5030."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.0.14878. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método gotoURL. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para ejecutar una llamada del sistema. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5030."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.0.14878:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9206F8-24D9-4BDD-B6AB-3254423BD417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100682",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-718",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10954",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-10-31T19:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within pdf.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-4361."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Bitdefender Internet Security Internet Security 2018 anteriores a la build 7.72918. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en pdf.xmd. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado un desbordamiento de enteros antes de asignar un búfer. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del sistema. Anteriormente era ZDI-CAN-4361."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:internet_security_2018:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.72918",
            "matchCriteriaId" : "86361E8D-883F-4A07-B146-81C3D8EEE786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100676",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-717",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T20:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file (\"[ORIGINAL_FILENAME].swp\") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary."
      }, {
        "lang" : "es",
        "value" : "VIM en la versión 8.0.1187 (y, muy probablemente, en otras versiones) ignora la máscara de usuario cuando se crea un archivo swap (\"[ORIGINAL_FILENAME].swp\"), lo que da como resultado archivos que podrían ser legibles por cualquier usuario o accesibles de formas no planeadas por el usuario que ejecuta el binario vi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1187",
            "matchCriteriaId" : "9D16775B-69BF-4F10-915E-FCF9D1BE4B6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=120",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/31/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/31/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T20:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file (\"[ORIGINAL_FILENAME]~\") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary."
      }, {
        "lang" : "es",
        "value" : "GNU Emacs en la versión 25.3.1 (y, muy probablemente, en otras versiones) ignora la máscara de usuario cuando se crea un archivo de guardado de copia de seguridad (\"[ORIGINAL_FILENAME]~\"), lo que da como resultado archivos que podrían ser legibles por cualquier usuario o accesibles de formas no planeadas por el usuario que ejecuta el binario de emacs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.3.0",
            "matchCriteriaId" : "BD011634-56BE-4D2A-B6CC-320C6DB7FC9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/31/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101671",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/10/31/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-10-31T21:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded."
      }, {
        "lang" : "es",
        "value" : "Una línea de respuesta IMAP FETCH indica el tamaño de los datos devueltos en número de bytes. Cuando una respuesta indica que el tamaño de los datos es cero bytes, libcurl pasaría esos datos (inexistentes) con un puntero y el tamaño (cero) a la función deliver-data. La función deliver-data de libcurl trata el cero como un número mágico e invoca strlen() en los datos para adivinar la longitud. Se llama a strlen() en un búfer basado en memoria dinámica (heap) que podría no terminar en cero, por lo que libcurl podría leer más allá del final del búfer en cualquier memoria en la que se encuentre después (o simplemente provocar un cierre inesperado) y entregar los datos a la aplicación como si en realidad se hubieran descargado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.20.0",
            "versionEndIncluding" : "7.56.0",
            "matchCriteriaId" : "A472460B-2EE1-49F4-BF4F-CFFB6EDDEE8A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2017/dsa-4007",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101519",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039644",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20171023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-4007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20171023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14375",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-01T01:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) contain an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC Unisphere para VMAX Virtual Appliance (vApp) en versiones anteriores a la 8.4.0.15, EMC Solutions Enabler Virtual Appliance en versiones anteriores a la 8.4.0.15, EMC VASA Virtual Appliance en versiones anteriores a la 8.4.0.512, y EMC VMAX Embedded Management (eManagement) en su versión 1.4 y anteriores (Enginuity Release 5977.1125.1125 y anteriores) contiene una vulnerabilidad de omisión de autenticación que podría ser explotada por usuarios maliciosos con el fin de comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_unisphere:*:*:*:*:*:vmax:*:*",
            "versionEndExcluding" : "8.4.0.15",
            "matchCriteriaId" : "C1FC69FD-C0C7-4849-95C9-7EFDCCE57B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:solutions_enabler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.4.0.15",
            "matchCriteriaId" : "33F51A90-95C2-4577-BAAA-CDF32AD7EEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:vasa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.4.0.512",
            "matchCriteriaId" : "7E7F2982-31F7-4027-A856-1517195597CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:vmax_emanagement:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "EC2E457F-F761-4617-B47D-F9B77373621C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/70",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101673",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039704",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14376",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-01T01:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "EMC AppSync Server, en versiones anteriores a la 3.5.0.1, contiene cuentas de bases de datos con contraseñas embebidas, lo que podría ser explotado por usuarios maliciosos con el fin de comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:appsync:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.0.1",
            "matchCriteriaId" : "527E7EAF-21FB-4804-B948-088CD56DCA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/68",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101626",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Oct/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T01:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory."
      }, {
        "lang" : "es",
        "value" : "MongoDB, en versiones 3.4.x anteriores a la 3.4.10, y desarrollos 3.5.x, tiene un ajuste de configuración deshabilitado por defecto, networkMessageCompressors (también conocido como wire protocol compression), que expone una vulnerabilidad cuando se habilita que podría ser explotada por atacantes maliciosos con el fin de provocar una denegación de servicio o modificar memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.10",
            "matchCriteriaId" : "BC15E8B4-0238-40AE-9BF2-C18DEB922790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101689",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.mongodb.org/browse/SERVER-31273",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.mongodb.org/browse/SERVER-31273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T01:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account. The attack bypasses a protection mechanism involving X-CSRF headers and CSRF tokens via a certain _handler postback variable."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Request Forgery (CSRF) en OctoberCMS 1.0.426 (también conocido como Build 426) debido a la validación incorrecta de tokens CSRF para la gestión de postback, lo que permite que un atacante consiga controlar la cuenta de la víctima. El ataque omite un mecanismo de protección que implica cabeceras X-CSRF y tokens CSRF mediante una determinada variable de postback _handler."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:1.0.426:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07538645-52CC-4A5F-BF22-4B653C34DC6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/commit/4a6e0e1e0e2c3facebc17e0db38c5b4d4cb05bd0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43106/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/octobercms/october/commit/4a6e0e1e0e2c3facebc17e0db38c5b4d4cb05bd0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43106/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T01:29:01.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character."
      }, {
        "lang" : "es",
        "value" : "El módulo Catalyst-Plugin-Static-Simple en versiones anteriores a la 0.34 para Perl permite que atacantes remotos lean archivos arbitrarios si hay un caracter \".\" en cualquier parte del nombre de ruta, lo que difiere de la política prevista que solo permite el acceso cuando el nombre de archivo en sí contiene un caracter \".\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:catalyst-plugin-static-simple_project:catalyst-plugin-static-simple:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "0.34",
            "matchCriteriaId" : "8DA2AA35-00DF-4102-857E-93CB9EF9B91F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/880458",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://metacpan.org/changes/distribution/Catalyst-Plugin-Static-Simple",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://rt.cpan.org/Public/Bug/Display.html?id=120558",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/880458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://metacpan.org/changes/distribution/Catalyst-Plugin-Static-Simple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://rt.cpan.org/Public/Bug/Display.html?id=120558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14021",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-01T02:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de clave criptográfica embebida en Korenix JetNet JetNet5018G versión 1.4, JetNet5310G versión 1.4a, JetNet5428G-2G-2FX versión 1.4, JetNet5628G-R versión 1.4, JetNet5628G versión 1.4, JetNet5728G-24P versión 1.4, JetNet5828G versión 1.1d, JetNet6710G-HVDC versión 1.1e y JetNet6710G versión 1.1. Un atacante puede conseguir acceder a certificados y claves privadas embebidos, lo que le permite realizar ataques Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5018g_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AF5B4D-4368-4477-9185-0EAE1901F3AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5018g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CB2958-84F6-4461-9AD3-F40FCD457C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5310g_firmware:1.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D4746F-B4CC-45E8-95DC-FE20408EA92F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5310g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A3D8A9-E142-498A-B4E8-B4B197E62F55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5428g-2g-2fx_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C71939E-E045-43B9-B546-FC8E649C54E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5428g-2g-2fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6497F848-1268-48E2-8DC3-840F9D44049E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5628g_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B64D2DE-4448-4212-8072-115DDDEC557E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5628g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD60DF22-585E-49DF-9D90-119A5C5DD8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:korenix:jetnet5628g-r_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF101FB-1FE3-425E-B70B-83D258B40B1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5628g-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88DB5A5-4F43-4AE1-B3F6-8E1810276423"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:korenix:jetnet5728g-24p_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C41AD-A7AA-40BE-9CA1-01155DFC9983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5728g-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81174238-9B97-46F3-9FAD-AE594480CB29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:korenix:jetnet5828g_firmware:1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3266110D-5FF3-4322-870A-96AF8BC5C88C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5828g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C4DA7B-4E69-4831-B380-A65BE8EE8B10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet6710g_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDDB42E-5D8B-413B-A476-ACD6FC84E59B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_6710g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B2A2F8-FC5A-4FF8-8E08-F7FF198963FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet6710g-hvdc_firmware:11e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4467DE80-26D4-4D02-81C4-C1CD33F76FBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_6710g-hvdc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD53579F-A44B-48C6-98EF-4C3D597C9E17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101598",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14027",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-01T02:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. The software uses undocumented hard-coded credentials that may allow an attacker to gain remote access."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de credenciales embebidaa en Korenix JetNet JetNet5018G versión 1.4, JetNet5310G versión 1.4a, JetNet5428G-2G-2FX versión 1.4, JetNet5628G-R versión 1.4, JetNet5628G versión 1.4, JetNet5728G-24P versión 1.4, JetNet5828G versión 1.1d, JetNet6710G-HVDC versión 1.1e y JetNet6710G versión 1.1. El software utiliza credenciales embebidas no documentadas que podrían permitir que un atacante obtuviese acceso remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5018g_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AF5B4D-4368-4477-9185-0EAE1901F3AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5018g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CB2958-84F6-4461-9AD3-F40FCD457C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5310g_firmware:1.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D4746F-B4CC-45E8-95DC-FE20408EA92F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5310g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A3D8A9-E142-498A-B4E8-B4B197E62F55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5428g-2g-2fx_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C71939E-E045-43B9-B546-FC8E649C54E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5428g-2g-2fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6497F848-1268-48E2-8DC3-840F9D44049E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet5628g_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B64D2DE-4448-4212-8072-115DDDEC557E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5628g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD60DF22-585E-49DF-9D90-119A5C5DD8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:korenix:jetnet5628g-r_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF101FB-1FE3-425E-B70B-83D258B40B1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5628g-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88DB5A5-4F43-4AE1-B3F6-8E1810276423"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:korenix:jetnet5728g-24p_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C41AD-A7AA-40BE-9CA1-01155DFC9983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5728g-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81174238-9B97-46F3-9FAD-AE594480CB29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:korenix:jetnet5828g_firmware:1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3266110D-5FF3-4322-870A-96AF8BC5C88C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_5828g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C4DA7B-4E69-4831-B380-A65BE8EE8B10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet6710g_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDDB42E-5D8B-413B-A476-ACD6FC84E59B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_6710g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B2A2F8-FC5A-4FF8-8E08-F7FF198963FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetnet6710g-hvdc_firmware:11e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4467DE80-26D4-4D02-81C4-C1CD33F76FBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetnet_6710g-hvdc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD53579F-A44B-48C6-98EF-4C3D597C9E17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101598",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T13:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure"
      }, {
        "lang" : "es",
        "value" : "La versión 2.4.2 y anteriores del plugin Git Client de Jenkins crean un archivo temporal con permisos inseguros, lo que resulta en la revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:git_client:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.4.2",
            "matchCriteriaId" : "C60CF6AC-3447-4AC5-BE62-42C7D2C33B01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-27/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T13:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites"
      }, {
        "lang" : "es",
        "value" : "La versión 2.1.4. y anteriores del plugin Favorite en Jenkins no realizan comprobaciones de permisos cuando se cambia el estado favorito, lo que permite que cualquier usuario establezca los favoritos de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:favorite_plugin:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "9EDC3D69-51E8-48AE-91B0-1C473001CBCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-06-06/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-06-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T13:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification"
      }, {
        "lang" : "es",
        "value" : "La versión 2.2.0 y anteriores del plugin Favorite en Jenkins es vulnerable a Cross-Site Request Forgery (CSRF), lo que tiene como resultado la modificación de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:favorite:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "530E63A8-A92E-4AFD-B3E8-6B7BEAF6A038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101943",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-06-06/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-06-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T13:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file."
      }, {
        "lang" : "es",
        "value" : "El plugin SSH almacena credenciales, lo que permite que las tareas accedan a servidores remotos mediante el protocolo SSH. Las contraseñas de usuarios así como las frases utilizadas como contraseñas para claves SSH cifradas se almacenan en texto plano en un archivos de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:ssh:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "95F39216-19F3-4B85-82F2-7212473E6CD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-07-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12625",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-01T13:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns."
      }, {
        "lang" : "es",
        "value" : "Apache Hive, en versiones 2.1.x anteriores a la 2.1.2, versiones 2.2.x anteriores a la 2.2.1 y versiones 2.3.x anteriores a la 2.3.1 expone una interfaz en la que las políticas de enmascaramiento pueden definirse en tablas o vistas. Por ejemplo, utilizando Apache Ranger. Cuando se crea una vista en una determinada tabla, no se lleva a cabo correctamente el cumplimiento de políticas en la tabla para las columnas enmascaradas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hive:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D220DC-2FC4-478E-904D-7E525CEE3220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hive:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC7E998-E232-4F9F-A410-A62DC7849D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hive:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5C3B01-D22C-49BD-AD7B-E19E7AA4D498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hive:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4A04E3-9831-4D44-933C-A480573D6799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/hive-user/201710.mbox/%3C3791103E-80D5-4E75-AF23-6F8ED54DDEBE%40apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101686",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/hive-user/201710.mbox/%3C3791103E-80D5-4E75-AF23-6F8ED54DDEBE%40apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the \"Display visual image directory\" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 es vulnerable a un desbordamiento de búfer basado en memoria dinámica (heap) que se ha encontrado en la característica \"Display visual image directory\" de la función DescribeImage() del archivo magick/describe.c. Una forma posible de desencadenar esta vulnerabilidad es ejecutar el comando identify en un archivo de formato MIFF especialmente manipulado con el indicador de detalle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=7292230dd185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101658",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43111/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=7292230dd185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43111/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containing the vulnerability is responsible for printing the IPTC Profile information contained in the image. This vulnerability can be triggered with a specially crafted MIFF file. There is an out-of-bounds buffer dereference because certain increments are never checked."
      }, {
        "lang" : "es",
        "value" : "GraphicsMagick 1.3.26 es vulnerable a una revelación de información de memoria que se ha encontrado en la función DescribeImage del archivo magick/describe.c debido a una sobrelectura de búfer basada en memoria dinámica (heap). La porción del código que contiene la vulnerabilidad es responsable de imprimir la información de perfil IPTC incluida en la imagen. Esta vulnerabilidad se puede desencadenar mediante un archivo MIFF especialmente manipulado. Hay una desreferencia de búfer fuera de limites debido a que nunca se verifican ciertos incrementos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=e4e1c2a581d8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101653",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43111/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=e4e1c2a581d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4232-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43111/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1001001",
      "sourceIdentifier" : "46fe6300-5254-4a98-9594-a9567bec8179",
      "published" : "2017-11-01T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "PluXml versión 5.6 es vulnerable a Cross-Site Scripting (XSS) persistente en la página de creación de artículos, lo que puede dar como resultado un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB586C0-F857-4A69-B8B0-A28B07176046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pluxml/PluXml/issues/253",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/pluxml/PluXml/issues/253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing."
      }, {
        "lang" : "es",
        "value" : "Una falta de verificación en Docker-CE (también conocido como Moby), en versiones 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0 y anteriores, permite que un atacante remoto provoque una denegación de servicio (DoS) mediante un payload de capa de imagen modificado. Esto también se conoce como gzip bombing."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "1.10.3",
            "matchCriteriaId" : "EE591C14-3685-468F-82F6-66D8C8345A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:1.12.6-0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "F8C5AD32-AF7A-434D-A60A-E2EF8A696D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.03.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "57021B99-94F4-40BD-9E2F-BD27904C98A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.03.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "45128BF6-D780-42F3-8C1C-57D037616A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.03.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "3A15C4D3-3DBE-4C6B-89B9-9BDA6B8645FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.06.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "47671AEE-DE9E-4BC4-99B2-C3356DCEE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.06.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "FCFBF621-562E-4CC6-9F56-BB764B9DAD40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.06.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "EAA1799F-F848-47BF-99D8-87E0A142DBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:17.09.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BCA8B266-883A-482E-B756-1F0F8A4BFF46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.cloudpassage.com/2017/10/13/discovering-docker-cve-2017-14992/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/moby/moby/issues/35075",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://blog.cloudpassage.com/2017/10/13/discovering-docker-cve-2017-14992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/moby/moby/issues/35075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution."
      }, {
        "lang" : "es",
        "value" : "Existe una gestión de variables de entorno SPANK insegura en SchedMD Slurm, en versiones anteriores a la 16.05.11, versiones 17.x anteriores a la 17.02.9 y versiones 17.11.x anteriores a la 17.11.0rc2. Esto permite un escalado de privilegios a root durante la ejecución de Prolog o Epilog."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.05.11",
            "matchCriteriaId" : "5BFABE2A-5F54-4E6E-BA81-D3298204871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.02.0",
            "versionEndExcluding" : "17.2.09",
            "matchCriteriaId" : "F0DAD19E-E89C-4A3C-88CE-FFE3C0A26A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schedmd:slurm:17.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "90A8166F-855F-4159-9736-E22D87942B6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101675",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4023",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.schedmd.com/news.php?id=193#OPT_193",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.schedmd.com/news.php?id=193#OPT_193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T17:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks."
      }, {
        "lang" : "es",
        "value" : "Sera 1.2 almacena la contraseña del usuario en texto plano en su directorio de usuario. Esto facilita el escalado de privilegios y expone, asimismo, el usuario y las cadenas de claves del sistema a atacantes locales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ignitum:sera:1.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "BE43FE90-4E40-46C8-B2CA-BE738C116BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ignitum:sera:1.2:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "14A77631-06A7-421E-9DFA-4CC102D24176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43221/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43221/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T17:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria en radare 2.0.1 en store_versioninfo_gnu_verdef() y store_versioninfo_gnu_verneed() en libr/bin/format/elf/elf.c, como se ha demostrado por una liberación no válida. Este error se debe a la validación incorrecta de sh_size a la hora de asignar memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B4DFB4-18C8-413E-8953-1E7359DAC6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/0b973e28166636e0ff1fad80baa0385c9c09c53a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/0b973e28166636e0ff1fad80baa0385c9c09c53a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T17:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In radare 2.0.1, an out-of-bounds read vulnerability exists in string_scan_range() in libr/bin/bin.c when doing a string search."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de lectura fuera de límites en radare 2.0.1 en string_scan_range() en libr/bin/bin.c cuando se realiza una búsqueda de cadena."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B4DFB4-18C8-413E-8953-1E7359DAC6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/d31c4d3cbdbe01ea3ded16a584de94149ecd31d9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8748",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/d31c4d3cbdbe01ea3ded16a584de94149ecd31d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T17:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de envoltura de puntero (pointer wraparound) en radare 2.0.1 en store_versioninfo_gnu_verdef() en libr/bin/format/elf/elf.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B4DFB4-18C8-413E-8953-1E7359DAC6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/62e39f34b2705131a2d08aff0c2e542c6a52cf0e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/d21e91f075a7a7a8ed23baa5c1bb1fac48313882",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/fbaf24bce7ea4211e4608b3ab6c1b45702cb243d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/62e39f34b2705131a2d08aff0c2e542c6a52cf0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/d21e91f075a7a7a8ed23baa5c1bb1fac48313882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/fbaf24bce7ea4211e4608b3ab6c1b45702cb243d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T21:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products."
      }, {
        "lang" : "es",
        "value" : "La capa UNIX IPC en WebKit, incluido WebKitGTK+ en versiones anteriores a la 2.16.3, no valida correctamente los metadatos de tamaño mensajes, lo que permite que un proceso secundario comprometido desencadene un desbordamiento de enteros y, como consecuencia, un desbordamiento de búfer en el proceso de la interfaz de usuario. Esta vulnerabilidad no afecta a productos Apple."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://trac.webkit.org/changeset/217126/webkit",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://webkitgtk.org/security/WSA-2017-0007.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://trac.webkit.org/changeset/217126/webkit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-01T21:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products."
      }, {
        "lang" : "es",
        "value" : "La capa UNIX IPC en WebKit, incluido WebKitGTK+ en versiones anteriores a la 2.16.3, no valida correctamente ciertos metadatos de los mensajes, lo que permite que un proceso secundario comprometido provoque una denegación de servicio (aserción de distribución) del proceso de la interfaz de usuario. Esta vulnerabilidad no afecta a productos Apple."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.3",
            "matchCriteriaId" : "1DA72FCA-BC36-46FE-89F4-087C01633348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://trac.webkit.org/changeset/217206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webkitgtk.org/security/WSA-2017-0007.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://trac.webkit.org/changeset/217206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1147",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122200."
      }, {
        "lang" : "es",
        "value" : "La plataforma OpenPages GRC de IBM 7.1, 7.2 y 7.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 122200."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1371BD-17B2-4FA4-B5AA-B5A35F283277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D85B86-EC7C-419C-9612-F869CC1FA243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF38915-A265-4B38-B40F-455D36690647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45448B60-3854-48EC-9675-E34C2B0A0C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BD759E-E782-4FB5-91FE-48EAEF181644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285AFA31-E4C0-406D-9DC7-95A452F64515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A19D8D-254D-4CB2-BBDB-BC470AC99CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB9C6E8-68A1-4EA6-BEA6-2C64ACCB1159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851C762-82A7-42B8-982B-AAAD9B467826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997685",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101663",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122200",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1148",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be used in further attacks against the system. IBM X-Force ID: 122201."
      }, {
        "lang" : "es",
        "value" : "La plataforma OpenPages GRC de IBM 7.2 y 7.3 con la aplicación OpenPages Loss Event Entry (LEE) podría permitir que un usuario obtenga información sensible, incluidas API privadas, que podrían utilizarse en otros ataques contra el sistema. IBM X-Force ID: 122201."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1371BD-17B2-4FA4-B5AA-B5A35F283277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D85B86-EC7C-419C-9612-F869CC1FA243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF38915-A265-4B38-B40F-455D36690647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45448B60-3854-48EC-9675-E34C2B0A0C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BD759E-E782-4FB5-91FE-48EAEF181644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285AFA31-E4C0-406D-9DC7-95A452F64515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A19D8D-254D-4CB2-BBDB-BC470AC99CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB9C6E8-68A1-4EA6-BEA6-2C64ACCB1159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851C762-82A7-42B8-982B-AAAD9B467826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009717",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101668",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/122201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1290",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125151."
      }, {
        "lang" : "es",
        "value" : "La plataforma OpenPages GRC de IBM 7.1, 7.2 y 7.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1371BD-17B2-4FA4-B5AA-B5A35F283277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D85B86-EC7C-419C-9612-F869CC1FA243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF38915-A265-4B38-B40F-455D36690647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45448B60-3854-48EC-9675-E34C2B0A0C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BD759E-E782-4FB5-91FE-48EAEF181644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285AFA31-E4C0-406D-9DC7-95A452F64515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A19D8D-254D-4CB2-BBDB-BC470AC99CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB9C6E8-68A1-4EA6-BEA6-2C64ACCB1159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851C762-82A7-42B8-982B-AAAD9B467826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009770",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101684",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125151",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1300",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 125162."
      }, {
        "lang" : "es",
        "value" : "La plataforma OpenPages GRC de IBM, en sus versiones 7.1, 7.2 y 7.3 es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 125162."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1371BD-17B2-4FA4-B5AA-B5A35F283277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D85B86-EC7C-419C-9612-F869CC1FA243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF38915-A265-4B38-B40F-455D36690647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45448B60-3854-48EC-9675-E34C2B0A0C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BD759E-E782-4FB5-91FE-48EAEF181644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285AFA31-E4C0-406D-9DC7-95A452F64515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A19D8D-254D-4CB2-BBDB-BC470AC99CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB9C6E8-68A1-4EA6-BEA6-2C64ACCB1159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851C762-82A7-42B8-982B-AAAD9B467826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009684",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101939",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125162",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1333",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241."
      }, {
        "lang" : "es",
        "value" : "La plataforma OpenPages GRC de IBM, en sus versiones 7.1, 7.2 y 7.3 podría permitir que un usuario no autenticado obtenga información sensible sobre el servidor que podría utilizarse en futuros ataques contra el sistema. IBM X-Force ID: 126241."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1371BD-17B2-4FA4-B5AA-B5A35F283277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D85B86-EC7C-419C-9612-F869CC1FA243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF38915-A265-4B38-B40F-455D36690647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45448B60-3854-48EC-9675-E34C2B0A0C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BD759E-E782-4FB5-91FE-48EAEF181644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285AFA31-E4C0-406D-9DC7-95A452F64515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A19D8D-254D-4CB2-BBDB-BC470AC99CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB9C6E8-68A1-4EA6-BEA6-2C64ACCB1159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851C762-82A7-42B8-982B-AAAD9B467826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997796",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101656",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126241",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1340",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455."
      }, {
        "lang" : "es",
        "value" : "Jazz Reporting Service (JRS) de IBM 6.0.4 podría permitir que un usuario autenticado obtenga información de otro usuario con el que interactúa el creador de informes . IBM X-Force ID: 126455."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC88614B-EEB1-41C5-B28A-4E3E35008855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009973",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101880",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126455",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1552",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 131396."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere BigInsights en sus versiones 4.2.0 y 4.2.5 es vulnerable a inyección de enlaces. Al persuadir a una víctima para que haga clic en un enlace de URL especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para llevar a cabo varios ataques contra el sistema, incluidos el Cross-Site Scripting (XSS), envenenamiento de caché o secuestro de sesión. IBM X-Force ID: 131396."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66AAEFB-4A7F-4B32-A784-1BC6A5510B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A2B213-A4C2-479A-B1E3-8DC2036D5F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009192",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101588",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131396",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1553",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131397."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere BigInsights en sus versiones 4.2.0 y 4.2.5 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131397."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66AAEFB-4A7F-4B32-A784-1BC6A5510B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A2B213-A4C2-479A-B1E3-8DC2036D5F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009192",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101588",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131397",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1554",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-01T21:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131398."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere BigInsights en sus versiones 4.2.0 y 4.2.5 podría permitir que un atacante remoto secuestre los clics de la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clicado de la víctima y, probablemente, lanzar más ataques contra la víctima. IBM X-Force ID: 131398."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66AAEFB-4A7F-4B32-A784-1BC6A5510B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A2B213-A4C2-479A-B1E3-8DC2036D5F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009192",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101588",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131398",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10825",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-02T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no fiable en el instalador de Flets Easy Setup Tool Ver1.2.0 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flets-w:flets_easy_setup_tool:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2605ABBF-7CC3-4899-BEFB-12035726DCED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flets-w.com/topics/setup_tool_vulnerability/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN97243511/278948/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://flets-w.com/topics/setup_tool_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN97243511/278948/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10870",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-02T15:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de corrupción de memoria en Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) y Rakuraku Hagaki Select para Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 e Ichitaro 2017 Trial version) permite que atacantes ejecuten código arbitrario con privilegios de la aplicación mediante archivos especialmente manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:easy_postcard_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B95CF5-78D5-491B-90FD-B43002411DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:easy_postcard_2017:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551A08CF-E245-44CC-92CF-9BE62A7CACA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:easy_postcard_2018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E79413C-AA61-4B2B-AFE9-B1F893F156CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F17F103-DC14-4D8B-8A32-CF7ED342ECD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_2017:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "106BB10B-1A4F-499A-A991-AD00D05C6B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_2017_trial_version:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC06A952-DA96-4EC8-9D24-EDA7E165213C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_2018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2699F59E-EA1D-4993-A7F2-B38422F22337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_government_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A9CFDA-35F0-4137-BFCA-FFEF838C1F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_government_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7EB947-83F9-4A48-91A1-A213740E53F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_government_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E401B098-6551-4101-9906-19C2AB7A5504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242FF195-E6D8-4C22-B03E-00775A8ED5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_pro_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3E1067-0D4D-4E60-AEDB-0C76BF91A6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_pro_2011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DF91C4-4444-4F6A-9B72-FB4DD490A84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_pro_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AE4633-5418-4009-B51D-4A1F542B1A88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU93703434/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.justsystems.com/jp/info/js17003.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU93703434/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.justsystems.com/jp/info/js17003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10873",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-02T15:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider."
      }, {
        "lang" : "es",
        "value" : "OpernAM (Open Source Edition) permite que un atacante omita la autenticación y acceda a contenidos no autorizados mediante vectores no especificados. Nótese que esta vulnerabilidad afecta a las implementaciones de OpenAM (Open Source Edition) configuradas como SAML 2.0ldP y cambia los métodos de autenticación en base a las peticiones AuthnContext enviadas desde el proveedor del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osstech:openam:*:*:*:*:open_source:*:*:*",
            "versionStartIncluding" : "9.5.5",
            "versionEndIncluding" : "9.5.5-41",
            "matchCriteriaId" : "92D277D6-F0B8-4CA0-9413-3873D4412EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osstech:openam:*:*:*:*:open_source:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.0-112",
            "matchCriteriaId" : "861FEB9D-6CBF-4AA8-8A18-811CDC9C8C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osstech:openam:*:*:*:*:open_source:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndIncluding" : "13.0.0-73",
            "matchCriteriaId" : "7E1CC3FF-812B-4562-A2C7-04CF6086EA79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN79546124/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cs.themistruct.com/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.osstech.co.jp/support/am2017-2-1-en",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN79546124/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cs.themistruct.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.osstech.co.jp/support/am2017-2-1-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12243",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The vulnerability is due to improper validation of string input in the shell application. An attacker could exploit this vulnerability through the use of malicious commands. A successful exploit could allow the attacker to obtain root shell privileges on the device. Cisco Bug IDs: CSCvf20741, CSCvf60078."
      }, {
        "lang" : "es",
        "value" : "Un vulnerabilidad en Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) y Cisco Firepower 9300 Security Appliance podría permitir que un atacante local autenticado obtenga privilegios root shell en el dispositivo. Esta vulnerabilidad también se conoce como Command Injection. La vulnerabilidad se debe a una validación inadecuada de valores de entrada de una cadena en la aplicación shell. Un atacante podría explotar esta vulnerabilidad mediante el uso de comandos maliciosos. Un exploit exitoso podría permitir que el atacante obtenga privilegios root shell en el dispositivo. Cisco Bug IDs: CSCvf20741, CSCvf60078."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_computing_system_manager_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0933D49C-E079-4071-A69F-60DCBD5E88F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_computing_system_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9380E9-30C8-4CD2-BA77-EE61EA490F3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_9300_security_appliance_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD314E64-ECA6-4200-BB6B-880DB07F19ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0574E77C-18C6-4621-B73A-DCDD6D1B5E37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_4100_next-generation_firewall_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A99DA5-0087-4F62-8A12-DAC826311530"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC4B991-7160-4C32-9A8E-778602FDE349"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB5299D-3948-474C-B977-8FD2A849945D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161EEC9B-419D-4C88-B546-04931D0037E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEAEC97-05AC-4E8B-A9A5-14800AAF1EB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101652",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039719",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-arce",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-arce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12261",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI commands issued at the restricted shell. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. An attacker would need valid user credentials to the device to exploit this vulnerability. The vulnerability affects the following Cisco Identity Services Engine (ISE) products running Release 1.4, 2.0, 2.0.1, 2.1.0: ISE, ISE Express, ISE Virtual Appliance. Cisco Bug IDs: CSCve74916."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el shell restringido de Cisco Identity Services Engine (ISE) que es accesible por SSH podría permitir que un atacante local autenticado ejecute comandos de la interfaz de línea de comandos con privilegios elevados. La vulnerabilidad se debe a la validación incompleta de los valores de entrada del usuario para los comandos de la interfaz de línea de comandos enviados al shell restringido. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo objetivo y ejecutando comandos que podrían conseguir privilegios elevados. Un atacante necesitaría credenciales de usuario válidas para el dispositivo para que se pueda explotar esta vulnerabilidad. La vulnerabilidad afecta a los siguientes productos de Cisco Identity Services Engine (ISE) que ejecuten la distribución 1.4, 2.0, 2.0.1 o 2.1.0: ISE, ISE Express e ISE Virtual Appliance. Cisco Bug IDs: CSCve74916."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F5FB19-E192-4643-9BDE-C0E66944A8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F903F456-43EA-43C6-9B64-AE4BDB3DF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1AABC0-CD5A-48B7-8D84-5F45FDCCAD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BE917C-E637-4995-8B1E-8E7E089986CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_express:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FF8217-3050-4F40-97D8-02D183B3E2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_express:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCA280B-C878-4977-8AE6-ADB32B032012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_express:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC6F32F-8642-4E14-BFA1-439B88EEFDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_express:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2556DB81-E4B9-4ABB-A4F5-D95626C49600"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_virtual_appliance:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0398332-1FF4-4B6E-A74B-EA665762825F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_virtual_appliance:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0045384-C4CC-4060-B7BC-5B456DCB652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_virtual_appliance:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27573DE2-D1E5-4F8F-916E-85CA49383D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_virtual_appliance:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89035D8-93A4-457C-A721-F83CAA7335BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101641",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039717",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-ise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-ise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12262",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is due to an incorrect firewall rule on the device. The misconfiguration could allow traffic sent to the public interface of the device to be forwarded to the internal virtual network of the APIC-EM. An attacker that is logically adjacent to the network on which the public interface of the affected APIC-EM resides could leverage this behavior to gain access to services listening on the internal network with elevated privileges. This vulnerability affects appliances or virtual devices running Cisco Application Policy Infrastructure Controller Enterprise Module prior to version 1.5. Cisco Bug IDs: CSCve89638."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la configuración del firewall en Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) podría permitir que un atacante adyacente sin autenticar obtenga acceso privilegiado a servicios que solo están disponibles en la red interna del dispositivo. La vulnerabilidad se debe a una regla de firewall incorrecta en el dispositivo. Esta mala configuración podría permitir que el tráfico se envíe a la interfaz pública del dispositivo y que se reenvíe a la red virtual interna del APIC-EM. Un atacante que es adyacente de manera lógica a la red en la que reside la interfaz pública del APIC-EM podría utilizar este comportamiento para obtener acceso a servicios que están escuchando en la red interna con privilegios elevados. Esta vulnerabilidad afecta equipos o dispositivos virtuales que ejecuten las versiones anteriores a la 1.5 de Cisco Application Policy Infrastructure Controller Enterprise Module. Cisco Bug IDs: CSCve89638."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "0B97EEB5-77E0-44D8-88FD-437BC3E92584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101647",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039716",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-apicem",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-apicem",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12273",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient frame validation of the 802.11 association request. An attacker could exploit this vulnerability by sending a malformed 802.11 association request to the targeted device. An exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. This vulnerability affects the following Cisco products running either the Lightweight AP Software or Mobility Express image: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSCve12189."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de tramas de peticiones de asociación 802.11 para Cisco Aironet 1560, 2800 y 3800 Series Access Points podría permitir que un atacante adyacente sin autenticar en la frecuencia de radio de Capa 2 provoque que el punto de acceso se reinicie, resultando en una denegación de servicio (DoS). Esta vulnerabilidad también se debe a la validación insuficiente de los frames de la petición de asociación 802.11. Un atacante podría explotar esta vulnerabilidad enviando una petición de asociación 802.11 mal formada al dispositivo objetivo. Si se explota con éxito, podría permitir que el atacante consiga que el punto de acceso se reinicie, provocando una denegación de servicio cuando se reinicie el punto de acceso. Esta vulnerabilidad afecta a los siguientes productos de Cisco que ejecuten la imagen Lightweight AP Software o Mobility Express: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points y Aironet 3800 Series Access Points. Nota: El dispositivo Cisco Aironet 1560 Series Access Point cuenta con soporte para la versión 8.3.112.0. Cisco Bug IDs: CSCve12189."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_1562_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690CFBF9-1E62-4197-A9BC-7BE2A306C6E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D717945-EE41-4D0F-86EF-90826EBE9C3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EAEA92-6589-4DFB-BC4B-8CBA425452D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27AB201-342D-4517-9E05-6088598F4695"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_2800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD27F3F-961F-4F44-AD2D-CF9EAD04E2B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098A82FF-95F7-416A-BADD-C57CE81ACD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D5813-9223-4B3F-9DE2-F3EF854FC927"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_3800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFE3575-DDAF-433E-8D77-4CCADADC99B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101655",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039714",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12274",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of the EAP frame. An attacker could exploit this vulnerability by sending a malformed EAP frame to the targeted device. A successful exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. It may be necessary to manually power cycle the device in order for it to recover. This vulnerability affects the following Cisco products running either the Lightweight AP Software or Mobility Express image: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSCve18935."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de tramas del puerto entrante de EAP (Extensible Authentication Protocol) para Cisco Aironet 1560, 2800 y 3800 Series Access Points podría permitir que un atacante adyacente sin autenticar en la frecuencia de radio de Capa 2 provoque que el punto de acceso se reinicie, resultando en una denegación de servicio (DoS). Esta vulnerabilidad se debe a la validación insuficiente de tramas EAP. Un atacante podría explotar esta vulnerabilidad enviando una trama EAP mal formada al dispositivo objetivo. Si se explota con éxito, podría permitir que el atacante consiga que el punto de acceso se reinicie, provocando una denegación de servicio cuando se reinicie el punto de acceso. Puede que sea necesario desconectar el dispositivo de la corriente y después volver a conectarlo para que se recupere. Esta vulnerabilidad afecta a los siguientes productos de Cisco que ejecuten la imagen Lightweight AP Software o Mobility Express: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points y Aironet 3800 Series Access Points. Nota: El dispositivo Cisco Aironet 1560 Series Access Point cuenta con soporte para la versión 8.3.112.0. Cisco Bug IDs: CSCve18935."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_1562_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690CFBF9-1E62-4197-A9BC-7BE2A306C6E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D717945-EE41-4D0F-86EF-90826EBE9C3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EAEA92-6589-4DFB-BC4B-8CBA425452D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27AB201-342D-4517-9E05-6088598F4695"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_2800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD27F3F-961F-4F44-AD2D-CF9EAD04E2B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098A82FF-95F7-416A-BADD-C57CE81ACD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D5813-9223-4B3F-9DE2-F3EF854FC927"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_3800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFE3575-DDAF-433E-8D77-4CCADADC99B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101648",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039715",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12275",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of 802.11v BSS Transition Management Response packets that an affected device receives from wireless clients. An attacker could exploit this vulnerability by sending a malformed 802.11v BSS Transition Management Response packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. Cisco Bug IDs: CSCvb57803."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la funcionalidad 802.11v Basic Service Set (BSS) Transition Management en Cisco Wireless LAN Controllers podría permitir que un atacante adyacente sin autenticar provoque que el dispositivo afectado se reinicie de manera inesperada, resultando en una denegación de servicio (DoS). La vulnerabilidad se debe a una validación insuficiente de los valores entrantes de los paquetes 802.11v de BSS Transition Management Response que un dispositivo afectado recibe de los clientes inalámbricos. Un atacante podría explotar esta vulnerabilidad enviando un paquete 802.11v BSS Transition Management Response mal formado a un dispositivo afectado. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie de manera inesperada, provocando una denegación de servicio. Cisco Bug IDs: CSCvb57803."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80814232-C66F-434C-B441-99133FFBD415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6C4735-49D1-46CB-AED8-4DDFC5014FB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101657",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039713",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12276",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. The attacker could read or write information from the SQL database. The vulnerability is due to a lack of proper validation on user-supplied input within SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application. An exploit could allow the attacker to determine the presence of certain values and write malicious input in the SQL database. The attacker would need to have valid user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.3. Cisco Bug IDs: CSCvf47935."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código framework web para la interfaz de base de datos SQL de la aplicación Cisco Prime Collaboration Provisioning podría permitir que un atacante remoto autenticado provoque un impacto en la confidencialidad e integridad de la aplicación ejecutando consultas SQL arbitrarias. Esto también se conoce como inyección SQL. El atacante podría leer o escribir información de la base de datos SQL. Esta vulnerabilidad se debe a la falta de validación de los valores de entrada proporcionados por el usuario en las consultas SQL. Un atacante podría explotar esta vulnerabilidad mediante el envío de URL modificadas que incluyan instrucciones SQL maliciosas a la aplicación afectada. Un exploit podría permitir al atacante determinar la presencia de algunos valores y escribir valores de entrada maliciosos en la base de datos SQL. El atacante podría necesitar tener credenciales de usuario válidas. La vulnerabilidad afecta a las distribuciones anteriores a la 12.3 de Cisco Prime Collaboration Provisioning Software. Cisco Bug IDs: CSCvf47935."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.3",
            "matchCriteriaId" : "EE3318F1-2A5C-4F04-A625-740F6004EA74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101640",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039711",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12277",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability is due to insufficient input validation of certain Smart Licensing configuration parameters. An authenticated attacker could exploit the vulnerability by configuring a malicious URL within the affected feature. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. This vulnerability affects the following Cisco Firepower Security products running FX-OS code trains 1.1.3, 1.1.4, and 2.0.1 (versions 2.1.1, 2.2.1, and 2.2.2 are not affected): Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance. Cisco Bug IDs: CSCvb86863."
      }, {
        "lang" : "es",
        "value" : "Un vulnerabilidad en el servicio Smart Licensing Manager de Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) y Firepower 9300 Security Appliance podría permitir que un atacante remoto autenticado inyecte comandos que se podrían ejecutar con privilegios root. Esta vulnerabilidad se debe a la validación insuficiente de los valores de entrada de algunos parámetros de configuración de Smart Licensing. Un atacante autenticado podría explotar la vulnerabilidad configurando un URL malicioso en la característica afectada. Un exploit con éxito podría permitir que el atacante ejecute comandos arbitrarios con privilegios root. Esta vulnerabilidad afecta a los siguientes productos de Cisco Firepower Security que ejecuten las versiones de código de FX-OS 1.1.3, 1.1.4 y 2.0.1 (las versiones 2.1.1, 2.2.1 y 2.2.2 no están afectadas): Firepower 4100 Series Next-Generation Firewall y Firepower 9300 Security Appliance. Cisco Bug IDs: CSCvb86863."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.3",
            "matchCriteriaId" : "874CB53B-A760-4298-8434-D5CC7B56D8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD3529C-F92B-45AD-B03D-011B6FE4E79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156BCE34-6E6D-4C75-AA38-B24E77FBDD7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC4B991-7160-4C32-9A8E-778602FDE349"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB5299D-3948-474C-B977-8FD2A849945D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161EEC9B-419D-4C88-B546-04931D0037E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150_next-generation_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEAEC97-05AC-4E8B-A9A5-14800AAF1EB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0574E77C-18C6-4621-B73A-DCDD6D1B5E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101661",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-fpwr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-fpwr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12278",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a memory leak that occurs on an affected device after the device fails to deallocate a buffer that is used when certain MIBs are polled. An attacker who knows the SNMP Version 2 SNMP Read string or has valid SNMP Version 3 credentials for an affected device could repeatedly poll the affected MIB object IDs (OIDs) and consume available memory on the device. When memory is sufficiently depleted on the device, the device will restart, resulting in a DoS condition. Cisco Bug IDs: CSCvc71674."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema Simple Network Management Protocol (SNMP) de Cisco Wireless LAN Controllers podría permitir que un atacante remoto autenticado provoque que el dispositivo afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. La vulnerabilidad se debe a una fuga de memoria que ocurre en un dispositivo afectado después de que el dispositivo falle a la hora de desasignar un búfer que se utiliza cuando algunas MIB están encuestadas. Un atacante que conozca la cadena SNMP Read Versión 2 o tenga credenciales SNMP Versión 3 para un dispositivo afectado podría encuestar repetidamente los ID de los objetos (OID) MIB afectados y consumir la memoria disponible en el dispositivo. Cuando la memoria se agota lo suficiente en el dispositivo, el dispositivo se reiniciará, provocando una denegación de servicio (DoS). Cisco Bug IDs: CSCvc71674."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80814232-C66F-434C-B441-99133FFBD415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6C4735-49D1-46CB-AED8-4DDFC5014FB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101642",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039712",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12279",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to insufficient condition checks that are performed by the affected device when the device adds padding to egress packets. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. A successful exploit could allow the attacker to retrieve content from memory on the affected device, which could lead to the disclosure of confidential information. Cisco Bug IDs: CSCvc21581."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el código de procesamiento de paquetes de Cisco IOS Software para Cisco Aironet Access Points podría permitir que un atacante adyacente sin autenticar recupere contenidos de la memoria en un dispositivo afectado, lo que podría provocar que se revele información confidencial. La vulnerabilidad se debe a las verificaciones insuficientes de condiciones que se realizan en el dispositivo afectado cuando dicho dispositivo añade contenido de relleno en los paquetes de salida. Un atacante podría explotar esta vulnerabilidad enviando un paquete IP manipulado al dispositivo afectado. Una explotación exitosa podría permitir que el atacante recupere contenido de la memoria en un dispositivo afectado, lo que podría provocar que se revele información confidencial. Cisco Bug IDs: CSCvc21581."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_ap_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDC0FA6-4CB0-49E7-A5C3-C15144CE9354"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78BDAFC-331A-4509-AC72-AE136EFEF536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101643",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039720",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-iosap",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-iosap",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12280",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of fields in CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending crafted CAPWAP Discovery Request packets to an affected device. A successful exploit could allow the attacker to cause the affected device to restart unexpectedly, resulting in a DoS condition. Cisco Bug IDs: CSCvb95842."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de análisis sintáctico de Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request podría permitir que un atacante remoto sin autenticar provoque que el dispositivo afectado se reinicie de manera inesperada, resultando en una denegación de servicio (DoS). Esta vulnerabilidad se debe a la validación incompleta de los valores de entrada de los campos en los paquetes CAPWAP Discovery Request por parte del dispositivo afectado. Un atacante podría explotar esta vulnerabilidad enviando paquetes CAPWAP Discovery Request manipulados al dispositivo afectado. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie de manera inesperada, provocando una denegación de servicio. Cisco Bug IDs: CSCvb95842."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80814232-C66F-434C-B441-99133FFBD415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6C4735-49D1-46CB-AED8-4DDFC5014FB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101646",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039723",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12281",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. The vulnerability exists because the affected device uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could exploit this vulnerability by attempting to connect to an affected device. A successful exploit could allow the attacker to bypass authentication and connect to the affected device. This vulnerability affects Cisco Aironet 1800, 2800, and 3800 Series Access Points that are running a vulnerable software release and use WLAN configuration settings that include FlexConnect local switching and central authentication with MAC filtering. Cisco Bug IDs: CSCvd46314."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la funcionalidad Protected Extensible Authentication Protocol (PEAP) para las configuraciones independientes de Cisco Aironet 1800, 2800, and 3800 Series Access Points podría permitir que un atacante adyacente sin autenticar omita la autenticación y se conecte a un dispositivo afectado. La vulnerabilidad existe porque el dispositivo afectado utiliza una configuración por defecto incorrecta en la que se queda abierto después de que falle cuando se ejecuta en modo independiente. Un atacante podría explotar esta vulnerabilidad intentando conectarse a un dispositivo afectado. Un exploit exitoso podría permitir que el atacante omita la autenticación y se conecte al dispositivo afectado. Esta vulnerabilidad afecta a Cisco Aironet 1800, 2800, and 3800 Series Access Points que estén ejecutando una distribución de software vulnerable y utilicen la configuración WLAN que incluye la conmutación local FlexConnect y la autenticación central con filtrado MAC. Cisco Bug IDs: CSCvd46314."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_1800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BDAFC3-940F-40C4-896E-99B6DABA9E3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4590D445-B4B6-48E6-BF55-BEA6BA763410"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1830i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848CC5CD-1982-4F31-A626-BD567E1C19F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E47788-9B54-42C5-AD83-428B22674575"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1850i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A333CD0B-4729-4E64-8B52-A3F5138F5B70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_2800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD27F3F-961F-4F44-AD2D-CF9EAD04E2B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098A82FF-95F7-416A-BADD-C57CE81ACD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D5813-9223-4B3F-9DE2-F3EF854FC927"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_3800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFE3575-DDAF-433E-8D77-4CCADADC99B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101649",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039725",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12282",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of ANQP query frames by the affected device. An attacker could exploit this vulnerability by sending a malformed ANQP query frame to an affected device that is on an RF-adjacent network. A successful exploit could allow the attacker to cause the affected device to restart unexpectedly, resulting in a DoS condition. This vulnerability affects Cisco Wireless LAN Controllers that are running a vulnerable release of Cisco WLC Software and are configured to support Hotspot 2.0. Cisco Bug IDs: CSCve05779."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de procesamiento de tramas entrantes de Access Network Query Protocol (ANQP) de Cisco Wireless LAN Controllers podría permitir que un atacante no autenticado adyacente a la frecuencia de radio de Capa 2 provoque que el dispositivo afectado se reinicie de manera inesperada, provocando una denegación de servicio (DoS) en consecuencia. Esta vulnerabilidad se debe a la validación incompleta de los valores de entrada de las tramas de consulta ANQP por parte del dispositivo afectado. Un atacante podría explotar esta vulnerabilidad enviando una trama de consulta ANQP mal formada al dispositivo afectado. que esté en la red adyacente a la frecuencia de radio. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie de manera inesperada, provocando una denegación de servicio. La vulnerabilidad afecta a Cisco Wireless LAN Controllers que ejecuten una distribución vulnerable de Cisco WLC Software y que estén configurados para ser compatibles con Hotspot 2.0. Cisco Bug IDs: CSCve05779."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80814232-C66F-434C-B441-99133FFBD415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6C4735-49D1-46CB-AED8-4DDFC5014FB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101650",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039724",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12283",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected device does not properly validate 802.11w PAF disassociation and deauthentication frames that it receives. An attacker could exploit this vulnerability by sending a spoofed 802.11w PAF frame from a valid, authenticated client on an adjacent network to an affected device. A successful exploit could allow the attacker to terminate a single valid user connection to the affected device. This vulnerability affects Access Points that are configured to run in FlexConnect mode. Cisco Bug IDs: CSCvc20627."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la gestión de 802.11w Protected Management Frames (PAF) por parte de Cisco Aironet 3800 Series Access Points podría permitir que un atacante adyacente sin autenticar que finalice una conexión válida de un usuario a un dispositivo afectado. Esto también se conoce como denegación de servicio (DoS). Esta vulnerabilidad existe porque el dispositivo afectado no valida correctamente las tramas de desautenticación y desasociación 802.11w PAF que recibe. Un atacante podría explotar esta vulnerabilidad enviando una trama 802.11w PAF falsa desde un cliente válido autenticado en una red adyacente al dispositivo afectado. Un exploit exitoso podría permitir que el atacante finalice una conexión válida de un usuario al dispositivo afectado. La vulnerabilidad afecta a los puntos de acceso que están configurados para ejecutarse en modo FlexConnect. Cisco Bug IDs: CSCvc20627."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:aironet_3800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFE3575-DDAF-433E-8D77-4CCADADC99B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101645",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039718",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12294",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf85562."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir que un atacante remoto autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario del sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Un exploit con éxito podría permitir que el atacante ejecute código script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Cisco Bug IDs: CSCvf85562."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE5F3F6-C7AE-4384-B58D-F0506719E35C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101654",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039721",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-webex1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-webex1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12295",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-02T16:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to the HTTP header reply from the Cisco WebEx Meetings Server to the client, which could include internal network information that should be restricted. An attacker could exploit the vulnerability by attempting to use the HTTP protocol and looking at the data in the HTTP responses from the Cisco WebEx Meetings Server. An exploit could allow the attacker to discover sensitive data about the application. Cisco Bug IDs: CSCve65818."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir que un atacante remoto no autenticado acceda a datos sensibles sobre la aplicación. Un atacante podría explotar esta vulnerabilidad para obtener información para llevar a cabo ataques de reconocimiento adicionales. La vulnerabilidad se debe a la respuesta de la cabecera HTTP desde Cisco WebEx Meetings Server al cliente, la cual podría incluir información sobre la red interna que se debería restringir. Un atacante podría explotar la vulnerabilidad tratando de emplear el protocolo HTTP y mirando los datos en las respuestas HTTP provenientes de Cisco WebEx Meetings Server. Un exploit podría permitir que el atacante encuentre información sensible sobre la aplicación. Cisco Bug IDs: CSCve65818."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE5F3F6-C7AE-4384-B58D-F0506719E35C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101651",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039722",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-webex2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-webex2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-02T16:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as demonstrated by a \"double prepare\" approach, a different vulnerability than CVE-2017-14723."
      }, {
        "lang" : "es",
        "value" : "WordPress en versiones anteriores a la 4.8.3 se ve afectado por un problema en el que $wpdb->prepare() puede crear consultas inseguras e inesperadas que podrían provocar una inyección SQL (SQLi) en plugins y temas, tal y como se ve en el enfoque \"double prepare\". Esta es una vulnerabilidad diferente a CVE-2017-14723."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.2",
            "matchCriteriaId" : "55C0F562-AB38-493B-87D6-0DC9465F4E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101638",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.8.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/a2693fd8602e3263b5925b9d799ddd577202167d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8941",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.8.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/a2693fd8602e3263b5925b9d799ddd577202167d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11508",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2017-11-02T17:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Las versiones 5.5.0, 5.5.1 y 5.5.2 de SecurityCenter contienen una vulnerabilidad de inyección SQL que podría explotarse por un usuario autenticado con los privilegios suficientes para ejecutar análisis de diagnóstico. Un atacante podría explotar esta vulnerabilidad introduciendo una consulta SQL manipulada en el campo password de un análisis de diagnóstico en SecurityCenter. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante obtenga acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:securitycenter:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF94F84-FB02-465F-AA4F-A731C2523843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:securitycenter:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED13C8B-C78F-44E3-80E8-0D168E57E981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:securitycenter:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A4C5DB-D941-46BC-A845-32BFF2011F46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039804",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-13",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3736",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-11-02T17:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."
      }, {
        "lang" : "es",
        "value" : "Existe un error de propagación de dígito (carry propagation) en el procedimiento de elevación al cuadrado de x86_64 Montgomery en OpenSSL en versiones anteriores a la 1.0.2m y 1.1.0 anteriores a la 1.1.0g. Ningún algoritmo EC se ha visto afectado. El análisis sugiere que los ataques contra RSA y DSA como resultado de este defecto serían muy difíciles de realizar y no se ve probable. Los ataques contra DH se consideran simplemente factibles (aunque muy difíciles) porque la mayoría del trabajo necesario para deducir la información sobre una clave privada se puede realizar offline. La cantidad de recursos necesarios para este ataque sería muy elevada y lo más probable es que solo sea accesible para un número limitado de atacantes. Un atacante necesitaría acceso online a un sistema sin parchear que utilice la clave privada objetivo en una situación con parámetros DH persistentes y una clave privada que se comparte entre múltiples clientes. Esto solo afecta a los procesadores que son compatibles con las extensiones BMI1, BMI2 y ADX como Intel Broadwell (5ª generación) y posteriores o AMD Ryzen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2m",
            "matchCriteriaId" : "C1069D78-287A-4623-9721-FD9E26135354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.1.0g",
            "matchCriteriaId" : "28E0F2BE-8EDA-4C09-B251-C35352A621D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101666",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039727",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0998",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2568",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2575",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2713",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171107-0002/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0002/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4017",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4018",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171102.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-14",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-15",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171107-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171102.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11767",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-02T19:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "ChakraCore permite que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que el motor de scripting de ChakraCore maneja los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100838",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039369",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T05:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C."
      }, {
        "lang" : "es",
        "value" : "En Vir.IT eXplorer Anti-Virus en versiones anteriores a la 8.5.42, el archivo de controlador (VIAGLT64.SYS) contiene una vulnerabilidad de escritura arbitraria porque no se validan los valores de entrada de las llamadas IOCTL 0x8273007C."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.42",
            "matchCriteriaId" : "DD4C1B3F-6555-4AD3-AE7F-F39AF88198A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101851",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43109/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43109/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T15:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729."
      }, {
        "lang" : "es",
        "value" : "Ipswitch WS_FTP Professional en versiones anteriores a la 12.6.0.3 incluye desbordamientos de búfer en el campo de búsqueda local y el campo de localizaciones de copias de seguridad. Esto también se conoce como WSCLT-1729."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:professional:*:*:*",
            "versionEndExcluding" : "12.6.0.3",
            "matchCriteriaId" : "02DEA318-E3F7-4283-AD1C-84F100282A3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.ipswitch.com/WS_FTP126/ReleaseNotes/English/index.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.7elements.co.uk/resources/technical-advisories/ipswitch-ws_ftp-professional-local-buffer-overflow-seh-overwrite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43115/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.ipswitch.com/WS_FTP126/ReleaseNotes/English/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.7elements.co.uk/resources/technical-advisories/ipswitch-ws_ftp-professional-local-buffer-overflow-seh-overwrite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43115/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T15:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating and potentially a denial of service."
      }, {
        "lang" : "es",
        "value" : "En la gema yajl-ruby 1.3.0 para Ruby, cuando se envía un archivo JSON manipulado a Yajl::Parser.new.parse, todo el proceso de ruby sufre un cierre inesperado con un SIGABRT en la función yajl_string_decode en yajl_encode.c. Esto tiene como resultado que todo el proceso de ruby finalice y posiblemente se provoque una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yajl-ruby_project:yajl-ruby:1.3.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "2E9E3559-5BA2-4944-8D4B-3D7BD8395090"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/brianmario/yajl-ruby/issues/176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rubygems.org/gems/yajl-ruby",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brianmario/yajl-ruby/issues/176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rubygems.org/gems/yajl-ruby",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 y DSL-100HN-T1 ES_113WJY0b16 permiten que usuarios autenticados remotos obtengan acceso root especificando /bin/sh como comando para ejecutar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitrastar:gpt-2541gnac_firmware:1.00\\(vnj0\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185F8439-BF14-4A2F-BF5C-685D711134AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitrastar:gpt-2541gnac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25404C09-9939-4280-887B-B1AABB7348D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitrastar:dsl-100hn-t1_firmware:es_113wjy0b16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A42CC87-AFC2-4E2A-AF93-4F7771A6F30E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitrastar:dsl-100hn-t1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDDF0308-23D8-4B3F-90DB-F2B046D8C64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144805/MitraStar-DSL-100HN-T1-GPT-2541GNAC-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43061/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144805/MitraStar-DSL-100HN-T1-GPT-2541GNAC-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43061/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T17:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 y DSL-100HN-T1 ES_113WJY0b16 tienen una contraseña zyad1234 para la cuenta zyad1234, lo que es equivalente a root y no documentado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitrastar:gpt-2541gnac_firmware:1.00\\(vnj0\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185F8439-BF14-4A2F-BF5C-685D711134AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitrastar:gpt-2541gnac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25404C09-9939-4280-887B-B1AABB7348D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitrastar:dsl-100hn-t1_firmware:es_113wjy0b16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A42CC87-AFC2-4E2A-AF93-4F7771A6F30E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitrastar:dsl-100hn-t1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDDF0308-23D8-4B3F-90DB-F2B046D8C64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101672",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144805/MitraStar-DSL-100HN-T1-GPT-2541GNAC-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43061/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144805/MitraStar-DSL-100HN-T1-GPT-2541GNAC-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43061/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara account even when they have been logged out of Moodle (when using MNet) as Mahara did not properly implement one of the MNet SSO API functions."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a que los usuarios permanezcan con la sesión iniciada en su cuenta de Mahara incluso cuando hayan cerrado sesión en Moodle (cuando se utiliza MNet), debido a que Mahara no implementaba correctamente una de las funciones de la API de SSO MNet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1084336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1084336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a que archivos .swf creados con fines maliciosos ejecuten su código cuando un usuario intenta descargar el archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1190788",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1190788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a que, en algunas circunstancias, un usuario provoque que se incluyan los artefactos de otro usuario en una exportación Leap2a de sus propias páginas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1234615",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1234615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to the group files they uploaded if another group member changes the access permissions on them."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.6, versiones 1.9 anteriores a la 1.9.4, versiones 1.10 anteriores a la 1.10.1 y versiones 15.04 anteriores a la 15.04.0, es vulnerable debido a que los miembros del grupo pueden perder acceso a los archivos del grupo que subieron si otro miembro cambia sus permisos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1267686",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1267686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable as logged-in users can stay logged in after the institution they belong to is suspended."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable debido a que los usuarios que han iniciado sesión pueden permanecer con la sesión iniciada después de que se suspenda la institución a la que pertenecen"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1348024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1348024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sessions not being invalidated after a password change."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.6, versiones 1.9 anteriores a la 1.9.4, versiones 1.10 anteriores a la 1.10.1 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a que no se invaliden las sesiones antiguas después de un cambio de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1363873",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1363873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboard (rather than drag and drop)."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.10 anteriores a la 1.10.0 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a un posible Cross-Site Scripting (XSS) cuando se añade un bloque de texto a una página utilizando el teclado (en lugar de arrastrando y soltando)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1375092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1375092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/dropping files into a collection if the file has Javascript code in its title."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.10 anteriores a la 1.10.0 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a un posible Cross-Site Scripting (XSS) cuando se arrastran/sueltan archivos a una colección si el archivo tiene código JavaScript en el título."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1377736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1377736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a ataques de Server-Side Request Forgery debido a que no se verifican con una lista blanca o lista negra todos los procesos de redirección curl. El uso de SafeCurl previene estos problemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1397736",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1397736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .xml file that can have its code executed when user tries to download the file."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a que un archivo .xml creado con fines maliciosos ejecute su código cuando un usuario intenta descargar el archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1404117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1404117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a que los usuarios puedan borrar la página que han enviado mediante la manipulación de URL"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1425306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1425306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.8 anteriores a la 1.8.7, versiones 1.9 anteriores a la 1.9.5, versiones 1.10 anteriores a la 1.10.3 y versiones 15.04 anteriores a la 15.04.0, es vulnerable a que los usuarios reciban notificaciones de lista de actividades sobre páginas a las que ya no tienen acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46815EDD-C3F1-4B87-AC7F-9CCB9DDFF5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E3A2C-80F5-477E-BAC3-8217A71A367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795681EE-1AE9-4451-9C65-7EDF39D8D92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F877AEB-A0F7-48D6-9094-09F12709D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37164355-787F-43A0-A9BD-F4E56762940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0EE103-8CDB-43CF-975F-A07762F0E958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD8ADD1-C3AE-47DE-9FE2-48094ABDE3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871F1DFC-3977-4C6A-80AA-7E4131678215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C9686-29B7-4212-9BAD-E04FE0EB8B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1429647",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1429647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.9 before 1.9.6 and 1.10 before 1.10.4 and 15.04 before 15.04.1 are vulnerable to a site admin or institution admin being able to place HTML and Javascript into an institution display name, which will be displayed to other users unescaped on some Mahara system pages."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.9 anteriores a la 1.9.6, versiones 1.10 anteriores a la 1.10.4 y versiones 15.04 anteriores a la 15.04.1, es vulnerable a que un administrador del sitio o de la institución pueda incluir código HTML y JavaScript en el nombre visible de una institución, que se mostrará sin escape en algunas páginas del sistema de Mahara a otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8531F69-D7E5-403D-877C-6360C87F9C6D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A2AF4C-CF93-458D-9FBF-B89BF5425BD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1447377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1447377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.9 anteriores a la 1.9.7, versiones 1.10 anteriores a la 1.10.5 y versiones 15.04 anteriores a la 15.04.2, es vulnerable a que se puedan incluir comentarios anónimos en páginas de detalles de artefactos, incluso cuando el administrador del sitio no permite comentarios anónimos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8531F69-D7E5-403D-877C-6360C87F9C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C68FBF-5176-4FE9-BAEF-43AE316F4B00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A2AF4C-CF93-458D-9FBF-B89BF5425BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBAB23C-F0F7-4267-8803-9B8ED17145B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1460368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1460368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Javascript in the browser of a logged-in user because the title of the portfolio page was not being properly escaped in the AJAX script that updates the Add/remove watchlist link on artefact detail pages."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.9 anteriores a la 1.9.7, versiones 1.10 anteriores a la 1.10.5 y versiones 15.04 anteriores a la 15.04.2, es vulnerable a la ejecución arbitraria de código JavaScript en el navegador de un usuario que haya iniciado sesión, debido a que el título del portfolio no se escapó correctamente en el script AJAX que actualiza el enlace Add/remove (Añadir/eliminar) de la lista de actividades en páginas de detalles de artefactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8531F69-D7E5-403D-877C-6360C87F9C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C68FBF-5176-4FE9-BAEF-43AE316F4B00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A2AF4C-CF93-458D-9FBF-B89BF5425BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBAB23C-F0F7-4267-8803-9B8ED17145B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1472439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1472439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.9 anteriores a la 1.9.8, versiones 1.10 anteriores a la 1.10.6 y versiones 15.04 anteriores a la 15.04.3, es vulnerable a que se realicen ataques Cross-Site Request Forgery (CSRF) en la herramienta de subida incluida en el widget de búsqueda de archivos de Mahara. Esto podría permitir que un atacante engañe a un usuario de Mahara para que suba archivos maliciosos a su cuenta de Mahara sin saberlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9375A9FA-C9B9-4406-937E-1FE1EC1EC3EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B93CE4-1D7F-49AF-AC56-8DFF01609099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FE6330-10AD-4B30-AF0A-71635AB99B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F4BFE6-A72F-4FAB-B975-EF1878767595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D937990-6958-4CD6-B976-E23C20567559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3852023-B803-418C-BA1D-9545C9FDC44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8531F69-D7E5-403D-877C-6360C87F9C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C68FBF-5176-4FE9-BAEF-43AE316F4B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE66FC6-5D7F-4B4F-BB55-1F9D4F29CC4C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A2AF4C-CF93-458D-9FBF-B89BF5425BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBAB23C-F0F7-4267-8803-9B8ED17145B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A1F9F0-2585-4A7D-8C78-3E935CC78E67"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1480329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Patch" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1480329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass portions of the XML through the PHP \"unserialize()\" function when importing a skin from an XML file."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a la ejecución de código PHP, debido a que Mahara pasaría fragmentos del código XML mediante la función PHP \"unserialize()\" cuando se importa una máscara desde un archivo XML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1508684",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1508684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS due to window.opener (target=\"_blank\" and window.open())"
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 1.10 anteriores a la 1.10.9, versiones 15.04 anteriores a la 15.04.6 y versiones 15.10 anteriores a la 15.10.2, es vulnerable a XSS debido a window.opener (target=\"_blank\" and window.open())"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B1304-EDDD-4DF0-A06A-77E4D086BF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74223CFD-B317-48A4-A085-CAF77422D51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF92381-863A-4D44-84B3-6116B15A6FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFBD79-ECF1-4AB2-8AA9-93E001AF5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23092107-1709-43B2-AC94-3A53474CBEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5925E46-8A92-4A67-A8F6-7DF05C34BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A2AF4C-CF93-458D-9FBF-B89BF5425BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBAB23C-F0F7-4267-8803-9B8ED17145B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A1F9F0-2585-4A7D-8C78-3E935CC78E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA92FA6-5AC2-43A6-8D36-F4AB8A00F098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1635B26-478B-4617-964B-1DC73A7910FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702EFF99-3629-461C-8E2E-BB72958DB931"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1558361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1558361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.7 y versiones 15.10 anteriores a la 15.10.3, es vulnerable a que se evite que los ID de sesión se regeneren en el inicio o el cierre de sesión. Esto hace que los usuarios del sitio sean más vulnerables a ataques de fijación de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1567784",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1567784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.9, versiones 15.10 anteriores a la 15.10.5 y versiones 16.04 anteriores a la 16.04.3, es vulnerable a que se pasen contraseñas u otra información sensible por parámetros inusuales para que terminen en un registro de error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04E216C-E51E-44FE-85F0-23C0F1EA9928"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1570221",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1570221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separate computer as the same session ID is served. This situation can occur when a user takes an action that forces another user to be logged out of Mahara, such as an admin changing another user's account settings."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.7 y versiones 15.10 anteriores a la 15.10.3 que ejecuten PHP 5.3, es vulnerable a que un usuario inicie sesión como otro usuario en un ordenador diferente debido a que se sirve el mismo ID de sesión. Esta situación puede tener lugar cuando un usuario realiza una acción que fuerza a que otro usuario cierre sesión en Mahara. Por ejemplo, si un administrador modifica los ajustes de cuenta de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1570744",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1570744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.10, versiones 15.10 anteriores a la 15.10.6 y versiones 16.04 anteriores a la 16.04.4, es vulnerable a un control de acceso incorrecto debido a que, después de que se envíe el enlace de restauración de contraseña por correo y el usuario modifique su correo por defecto, Mahara no invalida correctamente el enlace antiguo. Como consecuencia, el enlace del correo se puede utilizar para conseguir acceso a la cuenta del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04E216C-E51E-44FE-85F0-23C0F1EA9928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB9ABF0-E574-4694-A78A-4131D128D895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1577251",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1577251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in login form, still allowing users to log in even if their institution was expired or suspended."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a ciertos métodos de autenticación que no utilizan los formularios de inicio de sesión integrados en Mahara, lo que permite que los usuarios puedan iniciar sesión incluso cuando su institución ha caducado o se ha suspendido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1580399",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1580399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:01.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not they were currently selected as the \"default\" or used in any pages."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a que se acceda a fotos de perfil sin ninguna verificación de control de acceso. Como consecuencia, esto permite que cualquier usuario pueda visualizar las fotos de perfil subidas por los otros usuarios, tanto si están establecidas como foto por defecto, como si se utilizan en cualquier página."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1600069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1600069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.9, versiones 15.10 anteriores a la 15.10.5 y versiones 16.04 anteriores a la 16.04.3, es vulnerable a que cualquier miembro de un grupo pueda editar la página de configuración del grupo, incluso si este no tiene el rol de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609A3054-6DA9-44A8-9927-29E181D4D07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E8584F-8CD3-415C-BFC0-DC825089CA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023729FA-BEA6-4D89-87B3-C91A7FBDDD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04E216C-E51E-44FE-85F0-23C0F1EA9928"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1609200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1609200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on."
      }, {
        "lang" : "es",
        "value" : "Mahara, en versiones 15.04 anteriores a la 15.04.13, versiones 16.04 anteriores a la 16.04.7, versiones 16.10 anteriores a la 16.10.4 y versiones 17.04 anteriores a la 17.04.2 es vulnerable a que se guarden contraseñas en texto plano en la tabla event_log durante el proceso de creación de un usuario, si el registro de eventos completo estaba activado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6932E7F9-BA51-4099-8987-8944E0284B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7031-54EF-484C-B076-15C4342532E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFB08C5-151E-49D2-AC13-1018FF402569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E7231-70C7-4A1F-817F-E43D78BCB060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E14503-4E8B-44F5-9CAB-EF074CA71862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00782DDD-90C9-410F-A810-F5632AD25132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FF82A5-DF51-4719-9940-85A0E4AF4626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3605A76D-1C09-4998-B387-FE7BED77B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7261F-8712-4405-A1C0-C36FD9BE64EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6F378F-9282-46B4-BF84-B08418C2B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E5C4FE-5195-40FA-8580-2AF84D370B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5A96D5-CF12-470B-8ADE-183F09D57262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BD9F88-E643-4CF5-A426-82B2D6133F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F2D3A9-81B1-42E3-AF72-FBA985C48650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D050E953-88B1-40F7-98A8-B6A026292B2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DF3D9-A46D-4933-84FB-8179651C5B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D642FA0-D977-4157-B379-3BBA86D80D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D2BD22-57F7-4594-AE5F-426AA1D74BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5712D88-9218-4E7D-977C-07755D1B0D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA26090-2ED4-453D-85AA-46ED4E00DFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4968B1-0D09-4449-B2A8-22B8C4B4346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "68A1A68E-704F-49C9-B07A-23C1B69A0966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262C2C07-CFDB-42A0-8896-758F1FF5BE93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1692749",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1692749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-03T18:29:01.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text."
      }, {
        "lang" : "es",
        "value" : "Mahara Mobile en versiones anteriores a la 1.2.1 es vulnerable a que se envíen contraseñas al registro de acceso de Mahara en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara_mobile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "8C0E8ADF-3614-42A0-9371-0897691CD190"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MaharaProject/mahara-mobile/issues/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MaharaProject/mahara-mobile/issues/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14359",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-11-03T18:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad en las versiones 12.20 de HPE Performance Center. La vulnerabilidad se podría explotar de forma remota para permitir que se produzca Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:performance_center:12.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C4FF06-0718-4A93-B224-3698D541CF68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101659",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02996754",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02996754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup."
      }, {
        "lang" : "es",
        "value" : "La función usb_serial_console_disconnect en drivers/usb/serial/console.c en el kernel de Linux, en versiones anteriores a la 4.13.8, permite que los usuarios locales provoquen una denegación de servicio (uso de memoria previamente liberada y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas. Esto está relacionado con desconexión y fallo de instalación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.18",
            "versionEndExcluding" : "3.2.96",
            "matchCriteriaId" : "E33F062A-0BFE-4205-9524-9B272B08E2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.51",
            "matchCriteriaId" : "BAAAA568-5D07-4E86-9D02-6BBE17BE11F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.76",
            "matchCriteriaId" : "126AB064-7A35-4C32-BED7-382E0F13F147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.93",
            "matchCriteriaId" : "C2F83CFA-B098-45DE-9391-BEA047F41BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.57",
            "matchCriteriaId" : "D07BF343-265B-4842-9149-E4B7B8943A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.8",
            "matchCriteriaId" : "0CD397D8-C278-45DC-A0B3-ABBC73A74ED7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102028",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "drivers/uwb/uwbd.c en el kernel de Linux, en versiones anteriores a la 4.13.6, permite que los usuarios locales provoquen una denegación de servicio (fallo de protección general y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.97",
            "matchCriteriaId" : "3B86887F-D4E3-4F47-98BC-697EE11A74CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "B97C01AC-F470-4190-AC38-30DE3DFDCCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.75",
            "matchCriteriaId" : "E04E29B0-31A7-4409-B175-5BA76E2D139A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.92",
            "matchCriteriaId" : "2E3DFF40-9172-40DC-B4F3-ED473E3EF79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.55",
            "matchCriteriaId" : "6D4234C0-2CB9-42EA-A1B2-9A2FB26B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.6",
            "matchCriteriaId" : "5B059C9D-19AF-467F-AA41-2433849FDCA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/bbf26183b7a6236ba602f4d6a2f7cade35bba043",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/zROBxKXzHDk/5I6aZ3O2AgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bbf26183b7a6236ba602f4d6a2f7cade35bba043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/zROBxKXzHDk/5I6aZ3O2AgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "sound/usb/mixer.c en el kernel de Linux, en versiones anteriores a la 4.13.8, permite que los usuarios locales provoquen una denegación de servicio (uso de memoria previamente liberada snd_usb_mixer_interrupt y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "5A53989A-9D64-4F5D-AC0F-115A2A72785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.76",
            "matchCriteriaId" : "126AB064-7A35-4C32-BED7-382E0F13F147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.93",
            "matchCriteriaId" : "C2F83CFA-B098-45DE-9391-BEA047F41BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.57",
            "matchCriteriaId" : "D07BF343-265B-4842-9149-E4B7B8943A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.8",
            "matchCriteriaId" : "0CD397D8-C278-45DC-A0B3-ABBC73A74ED7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/124751d5e63c823092060074bd0abaae61aaa9c4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/jf7GTr_g2CU/iVlLhMciCQAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/124751d5e63c823092060074bd0abaae61aaa9c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/jf7GTr_g2CU/iVlLhMciCQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "sound/core/seq_device.c en el kernel de Linux, en versiones anteriores a la 4.13.4, permite que los usuarios locales provoquen una denegación de servicio (uso de memoria previamente liberada snd_rawmidi_dev_seq_free y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.47",
            "matchCriteriaId" : "8B69ADB4-1D58-48EB-8B97-013FD5D1A7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.99",
            "matchCriteriaId" : "99213BBC-5F34-4CFD-8DB5-818D88641A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.63",
            "matchCriteriaId" : "98B1AE8E-C792-42B6-B1CF-6F1F838B3028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.4",
            "matchCriteriaId" : "5472D318-0478-439F-913A-FEEF5FF59A57"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/fc27fe7e8deef2f37cba3f2be2d52b6ca5eb9d57",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/kuZzDHGkQu8/5du20rZEAAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fc27fe7e8deef2f37cba3f2be2d52b6ca5eb9d57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/kuZzDHGkQu8/5du20rZEAAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función snd_usb_create_streams en sound/usb/card.c en el kernel de Linux, en versiones anteriores a la 4.13.6, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "5A53989A-9D64-4F5D-AC0F-115A2A72785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.75",
            "matchCriteriaId" : "E04E29B0-31A7-4409-B175-5BA76E2D139A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.92",
            "matchCriteriaId" : "2E3DFF40-9172-40DC-B4F3-ED473E3EF79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.55",
            "matchCriteriaId" : "6D4234C0-2CB9-42EA-A1B2-9A2FB26B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.6",
            "matchCriteriaId" : "5B059C9D-19AF-467F-AA41-2433849FDCA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103284",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bfc81a8bc18e3c4ba0cbaa7666ff76be2f998991",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/rDzv5RP_f2M/M5au06qmAwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bfc81a8bc18e3c4ba0cbaa7666ff76be2f998991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/rDzv5RP_f2M/M5au06qmAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c."
      }, {
        "lang" : "es",
        "value" : "El controlador uas en el kernel de Linux, en versiones anteriores a la 4.13.6, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas. Esto está relacionado con drivers/usb/storage/uas-detect.h y drivers/usb/storage/uas.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "AF28BC26-3813-4695-A195-FA4113468860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.75",
            "matchCriteriaId" : "E04E29B0-31A7-4409-B175-5BA76E2D139A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.92",
            "matchCriteriaId" : "2E3DFF40-9172-40DC-B4F3-ED473E3EF79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.55",
            "matchCriteriaId" : "6D4234C0-2CB9-42EA-A1B2-9A2FB26B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.6",
            "matchCriteriaId" : "5B059C9D-19AF-467F-AA41-2433849FDCA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/pCswO77gRlM/VHuPOftgAwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/pCswO77gRlM/VHuPOftgAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:36.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor."
      }, {
        "lang" : "es",
        "value" : "drivers/usb/core/config.c en el kernel de Linux, en versiones anteriores a la 4.13.6, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas que utilizan un descriptor USB_DT_INTERFACE_ASSOCIATION."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.75",
            "matchCriteriaId" : "44B0408D-B3E7-4F0A-9CC1-A0F4253405A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.75",
            "matchCriteriaId" : "E04E29B0-31A7-4409-B175-5BA76E2D139A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.92",
            "matchCriteriaId" : "2E3DFF40-9172-40DC-B4F3-ED473E3EF79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.55",
            "matchCriteriaId" : "6D4234C0-2CB9-42EA-A1B2-9A2FB26B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.6",
            "matchCriteriaId" : "5B059C9D-19AF-467F-AA41-2433849FDCA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102025",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bd7a3fe770ebd8391d1c7d072ff88e9e76d063eb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/hP6L-m59m_8/Co2ouWeFAwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bd7a3fe770ebd8391d1c7d072ff88e9e76d063eb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/hP6L-m59m_8/Co2ouWeFAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función get_endpoints en drivers/usb/misc/usbtest.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "5A53989A-9D64-4F5D-AC0F-115A2A72785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.82",
            "matchCriteriaId" : "038B2E18-5117-49D3-ADBE-BB89B30E1260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.47",
            "matchCriteriaId" : "8B69ADB4-1D58-48EB-8B97-013FD5D1A7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.99",
            "matchCriteriaId" : "99213BBC-5F34-4CFD-8DB5-818D88641A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.63",
            "matchCriteriaId" : "98B1AE8E-C792-42B6-B1CF-6F1F838B3028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.14",
            "matchCriteriaId" : "1DE009D1-12C6-4B66-A783-639F8529DF7D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/l3870gs3LhA/y79DYQdFBAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/l3870gs3LhA/y79DYQdFBAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función usbhid_parse en drivers/hid/usbhid/hid-core.c en el kernel de Linux, en versiones anteriores a la 4.13.8, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.95",
            "matchCriteriaId" : "FE34D8B6-10FA-4EBC-863E-F996C0D35F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.50",
            "matchCriteriaId" : "5A53989A-9D64-4F5D-AC0F-115A2A72785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.76",
            "matchCriteriaId" : "126AB064-7A35-4C32-BED7-382E0F13F147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.46",
            "matchCriteriaId" : "8E07836D-67CD-47C8-9E8C-7AA3DBCAEFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.93",
            "matchCriteriaId" : "C2F83CFA-B098-45DE-9391-BEA047F41BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.57",
            "matchCriteriaId" : "D07BF343-265B-4842-9149-E4B7B8943A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.8",
            "matchCriteriaId" : "0CD397D8-C278-45DC-A0B3-ABBC73A74ED7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102026",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f043bfc98c193c284e2cd768fefabe18ac2fed9b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/CxkJ9QZgwlM/O3IOvAaGAwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/f043bfc98c193c284e2cd768fefabe18ac2fed9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/CxkJ9QZgwlM/O3IOvAaGAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función cdc_parse_cdc_header en drivers/usb/core/message.c en el kernel de Linux, en versiones anteriores a la 4.13.6, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4",
            "versionEndExcluding" : "4.4.92",
            "matchCriteriaId" : "E2AEC101-F58A-4717-AF45-5ECB38C1389C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.55",
            "matchCriteriaId" : "6D4234C0-2CB9-42EA-A1B2-9A2FB26B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.6",
            "matchCriteriaId" : "5B059C9D-19AF-467F-AA41-2433849FDCA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2e1c42391ff2556387b3cb6308b24f6f65619feb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/nXnjqI73uPo/6sUyq6kqAgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2e1c42391ff2556387b3cb6308b24f6f65619feb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/nXnjqI73uPo/6sUyq6kqAgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función usb_get_bos_descriptor en drivers/usb/core/config.c en el kernel de Linux, en versiones anteriores a la 4.13.10, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.9",
            "matchCriteriaId" : "3259E528-10D8-4E5E-99CE-AE8E7A8AC898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1c0edc3633b56000e18d82fc241e3995ca18a69e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/tzdz2fTB1K0/OvjIgLSTAgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1c0edc3633b56000e18d82fc241e3995ca18a69e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/tzdz2fTB1K0/OvjIgLSTAgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función cx231xx_usb_probe en drivers/media/usb/cx231xx/cx231xx-cards.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://groups.google.com/d/msg/syzkaller/WlUAVfDvpRk/1V1xuEA4AgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/patch/9963527/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/WlUAVfDvpRk/1V1xuEA4AgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/patch/9963527/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función imon_probe en drivers/media/rc/imon.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.7",
            "matchCriteriaId" : "11C6B206-8716-4A16-81BD-F3B8C8ACBE19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://groups.google.com/d/msg/syzkaller/bBFN8imrjjo/-5jCl8EiCQAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/patch/9994017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/bBFN8imrjjo/-5jCl8EiCQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/patch/9994017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T01:29:37.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timing (dm04_lme2510_frontend_attach versus dm04_lme2510_tuner)."
      }, {
        "lang" : "es",
        "value" : "drivers/media/usb/dvb-usb-v2/lmedm04.c en el kernel de Linux hasta la versión 4.13.10 permite que los usuarios locales provoquen una denegación de servicio (fallo de protección general y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante llamadas del sistema manipuladas. Esto está relacionado con la falta de una comprobación de arranque en caliente y una sincronización incorrecta de attach (dm04_lme2510_frontend_attach versus dm04_lme2510_tuner)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/XwNidsl4X04/ti6I2IaRBAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.linuxtv.org/patch/44566/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.linuxtv.org/patch/44567/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3631-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3631-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/XwNidsl4X04/ti6I2IaRBAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.linuxtv.org/patch/44566/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.linuxtv.org/patch/44567/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3631-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3631-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveraging Docker container access to write a \"scsi remove-single-device\" line to /proc/scsi/scsi, aka SCSI MICDROP."
      }, {
        "lang" : "es",
        "value" : "La función DefaultLinuxSpec en oci/defaults.go en Docker Moby en versiones hasta la 17.03.2-ce no bloquea nombres de ruta /proc/scsi, lo que permite que los atacantes provoquen una pérdida de información (cuando se utilizan ciertos kernels de Linux más antiguos) aprovechando el acceso al contenedor Docker para escribir una línea \"scsi remove-single-device\" en /proc/scsi/scsi. Esto también se conoce como SCSI MICDROP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.03.2",
            "matchCriteriaId" : "147B0438-E92F-488A-A86F-9489FE88E0CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moby/moby/pull/35399",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/35399/commits/a21ecdf3c8a343a7c94e4c4d01b178c87ca7aaa1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-scsi&m=150985062200941&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-scsi&m=150985455801444&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/ewindisch/status/926443521820774401",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/35399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/35399/commits/a21ecdf3c8a343a7c94e4c4d01b178c87ca7aaa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-scsi&m=150985062200941&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-scsi&m=150985455801444&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/ewindisch/status/926443521820774401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T18:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected."
      }, {
        "lang" : "es",
        "value" : "El navegador Tor en versiones anteriores a la 7.0.9 en macOS y Linux permite que atacantes remotos sin omitan las características de anonimato previstas y descubran una dirección IP de cliente mediante vectores que impliquen un sitio web manipulado que aproveche la mala gestión de file:// en Firefox. Esto también se conoce como TorMoil. NOTA: Tails no se ha visto afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "AFA8BD30-17FD-4657-83DA-FCD87911419C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101665",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041610",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2692",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2693",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3403",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3458",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/tor-browser-709-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1412081",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/24052",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4327",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/tor-browser-709-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1412081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.torproject.org/projects/tor/ticket/24052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-04T19:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for cloning an existing OpenEMR site to an arbitrary attacker-controlled MySQL server via vectors involving a crafted state parameter."
      }, {
        "lang" : "es",
        "value" : "OpenEMR en versiones anteriores a la 5.0.0 Patch 5 permite la copia remota sin autenticar de bases de datos debido a que setup.php expone la funcionalidad de clonado para un sitio OpenEMR existente a un servidor arbitrario controlado por el atacante, mediante vectores que implican un parámetro de estado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:patch_5:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.0",
            "matchCriteriaId" : "1CABE5C0-3C7D-4FE8-A367-870981FB6EBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.open-emr.org/wiki/index.php/OpenEMR_Patches",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://isears.github.io/jekyll/update/2017/10/28/openemr-database-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.open-emr.org/wiki/index.php/OpenEMR_Patches",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://isears.github.io/jekyll/update/2017/10/28/openemr-database-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-05T17:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 antes de la build 13500 permite una inyección SQL postautenticación mediante el parámetro name en una petición manageApplications.do?method=insert."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/sql-injection-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43129/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16542.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/sql-injection-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43129/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16542.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-05T17:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager versión 13 anterior a build 13500, permite la inyección SQL por medio del archivo GraphicalView.do, como es demostrado por un campo creado yCanvas de ViewProps o un parámetro viewid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/sql-injection-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43129/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16543.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/sql-injection-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43129/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-05T22:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application crash) or possibly have unspecified other impact via a malformed WPG image."
      }, {
        "lang" : "es",
        "value" : "La función ReadWPGImage en coders/wpg.c en GraphicsMagick 1.3.26 no valida correctamente las imágenes cuyos colores corresponden a un mapa de color, lo que permite que atacantes remotos provoquen una denegación de servicio (escritura no válida de ImportIndexQuantumType y cierre inesperado de la aplicación) o, posiblemente, causen otros impactos no especificados mediante una imagen WPG mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/e8086faa52d0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/519/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/e8086faa52d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/519/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-05T22:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file."
      }, {
        "lang" : "es",
        "value" : "La función ReadWPGImage en coders/wpg.c en ImageMagick 7.0.7-9 no valida correctamente el índice de mapa de colores en una paleta WPG, lo que permite que atacantes remotos provoquen una denegación de servicio (uso de datos no inicializados o asignación de memoria no válida) o, posiblemente, causen otros impactos no especificados mediante un archivo WPG mal formada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8B911-FC57-45F7-81E6-A7C8A24B57F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e04cf3e9524f50ca336253513d977224e083b816",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/851",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e04cf3e9524f50ca336253513d977224e083b816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T05:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service (negative strncpy and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función DrawImage en magick/render.c en GraphicsMagick 1.3.26 no busca correctamente palabras clave pop que estén asociadas a palabras clave push, lo que permite que atacantes remotos provoquen una denegación de servicio (strncpy negativo y cierre inesperado de la aplicación) o, posiblemente, causen otros impactos no especificados mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/785758bbbfcc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/517/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/785758bbbfcc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/517/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T05:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon."
      }, {
        "lang" : "es",
        "value" : "La función receive_xattr en xattrs.c en rsync 3.1.2 y 3.1.3-development no comprueba un carácter final '\\0' en un nombre xattr, lo que permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o, posiblemente, causen otros impactos no especificados enviando datos manipulados al demonio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "2.6.9",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "2C851A23-4E75-4796-9DC4-9897E4A433E6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=13112",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3543-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3543-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4068",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=13112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3543-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3543-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) en Zurmo 3.2.1.57987acc3018 mediante una URL data: en el parámetro redirectUrl en app/index.php/meetings/default/createMeeting."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zurmo:zurmo_crm:3.2.1.57987acc3018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16487B-866A-4B10-AF87-18D4A7EEB6BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/432/cross-site-scripting",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/432/cross-site-scripting",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI."
      }, {
        "lang" : "es",
        "value" : "Web Viewer 1.0.0.193 en dispositivos Samsung SRN-1670D sufre de una vulnerabilidad de subida de archivos sin restricción: \"network_ssl_upload.php\" permite que atacantes remotos autenticados suban y ejecuten código PHP arbitrario mediante un nombre de archivo con extensión .php al cual se accede a través de una petición directa al archivo en el directorio upload/. Para autenticarse para este ataque, se pueden obtener credenciales de la interfaz web en texto claro aprovechando la vulnerabilidad existente de lectura de archivos locales referenciada como CVE-2015-8279, lo que permite que atacantes remotos lean las credenciales de la interfaz web mediante una petición para la URI cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hanwhasecurity:web_viewer:1.0.0.193:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3219C8-6C69-4B8F-92EB-B83C37C0D36C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:srn-1670d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6911846A-7E2D-46CF-BDD3-E5502308136B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/realistic-security/CVE-2017-16524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43138/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/realistic-security/CVE-2017-16524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43138/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to modify settings, related to cgi-bin/update."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Request Forgery (CSRF) en la pantalla Basic Settings en dispositivos Vonage (Grandstream) HT802 permite que atacantes modifiquen la configuración. Esto se relaciona con cgi-bin/update."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:ht802_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3D7120-1595-4888-BEE7-021931C3AEB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:ht802:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44D9054-2A04-4A48-A270-4B56CD8BA7DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users to inject arbitrary web script or HTML via the DHCP vendor class ID field (P148)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en /cgi-bin/config2 en dispositivos Vonage (Grandstream) HT802 permite que usuarios remotos autenticados inyecten scripts web o HTML arbitrarios mediante el campo ID de clase de proveedor DHCP (P148)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:ht802_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3D7120-1595-4888-BEE7-021931C3AEB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:ht802:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44D9054-2A04-4A48-A270-4B56CD8BA7DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using the default password of 123 and submit arbitrary requests."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Request Forgery (CSRF) en /cgi-bin/login en dispositivos Vonage (Grandstream) HT802 permite que atacantes autentiquen a un usuario mediante la pantalla de login empleando la contraseña por defecto 123 y enviando peticiones arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:ht802_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3D7120-1595-4888-BEE7-021931C3AEB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:ht802:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44D9054-2A04-4A48-A270-4B56CD8BA7DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de redirección abierta de URL en Zurmo 3.2.1.57987acc3018 mediante una URL http: en el parámetro redirectUrl en app/index.php/meetings/default/createMeeting."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zurmo:zurmo_crm:3.2.1.57987acc3018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16487B-866A-4B10-AF87-18D4A7EEB6BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/431/open-url-redirects-unvalidated-redirects",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/431/open-url-redirects-unvalidated-redirects",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T08:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header."
      }, {
        "lang" : "es",
        "value" : "KeystoneJS en versiones anteriores a la 4.0.0-beta.7 permite la omisión CSRF de la aplicación mediante la eliminación del parámetro y el valor CSRF. Esto también se conoce como SecureLayer7 issue number SL7_KEYJS_03. En otras palabras, fracasa a la hora de rechazar peticiones que no cuenten con una cabecera x-csrf-token."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystonejs:keystone:*:beta7:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "5CFD17D2-14DC-40F3-8699-283A25281E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/issues/4437",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43922/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/issues/4437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keystonejs/keystone/pull/4478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43922/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "TRITON AP-EMAIL 8.2 anterior a la versión 8.2 IB no restringe correctamente el acceso a archivos en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websense:triton_ap_email:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CFCD86-CA71-44D7-A214-A8E55FB05657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.forcepoint.com/KBArticle?id=000014490",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.forcepoint.com/KBArticle?id=000014490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "La función read_header en libavcodec/ffv1dec.c en FFmpeg versión 2.4 y 3.3.4 y anteriores permite que atacantes remotos provoquen un impacto sin especificar mediante un archivo MP4 manipulado que desencadena una lectura fuera de límites"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.4",
            "matchCriteriaId" : "D0168D4A-552C-41F3-A4C2-159C9BE75EDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c20f4fcb74da2d0432c7b54499bb98f48236b904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/03/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101690",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/d893253fcd93d11258e98857175e93be7d158708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4049",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c20f4fcb74da2d0432c7b54499bb98f48236b904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/03/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/d893253fcd93d11258e98857175e93be7d158708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T17:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges."
      }, {
        "lang" : "es",
        "value" : "En el plugin Vagrant VMware Fusion de HashiCorp (también conocido como vagrant-vmware-fusion) 5.0.1, un atacante local o malware pueden alterar el proceso de actualización del plugin con el fin de conseguir un escalado de privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant:5.0.1:*:*:*:*:vmware_fusion:*:*",
            "matchCriteriaId" : "1C423A80-E744-4B6E-9710-B60162DB46B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201716001-local-root-privesc-in-hashicorp-vagrantvmwarefusion-501.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43220/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://m4.rkw.io/blog/cve201716001-local-root-privesc-in-hashicorp-vagrantvmwarefusion-501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43220/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7425",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-11-06T17:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples problemas potenciales de XSS reflejado en NetIQ iManager en versiones anteriores a la 2.7.7 Patch 10 HF2 y 3.0.3.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:*:patch_10:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.7",
            "matchCriteriaId" : "32DC4B54-DDD2-4841-B235-42E0F23C6427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BB70E3-58EA-43EC-BB10-A382A7405601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.netiq.com/documentation/imanager-3/imanager3032_releasenotes/data/imanager3032_releasenotes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/imanager/imanager27710hf2readme/data/imanager27710hf2readme.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7021423",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/imanager-3/imanager3032_releasenotes/data/imanager3032_releasenotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/imanager/imanager27710hf2readme/data/imanager27710hf2readme.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7021423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T18:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm."
      }, {
        "lang" : "es",
        "value" : "La función kvm_vm_ioctl_check_extension en arch/powerpc/kvm/powerpc.c en el kernel de Linux, en versiones anteriores a la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) mediante una llamada ioctl KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM a /dev/kvm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.10",
            "matchCriteriaId" : "161E8E77-A2DB-482D-95FB-5DB45ABDECB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac64115a66c18c01745bbd3c47a36b124e5fd8c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/06/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101693",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ac64115a66c18c01745bbd3c47a36b124e5fd8c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac64115a66c18c01745bbd3c47a36b124e5fd8c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/06/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ac64115a66c18c01745bbd3c47a36b124e5fd8c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12719",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-06T22:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desreferencia de puntero no fiable en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Un atacante remoto puede ejecutar código para desreferenciar un puntero en el programa, provocando que la aplicación deje de estar disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2_20170817",
            "matchCriteriaId" : "808E95DD-A22A-42F8-9707-760D53FD3C46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101685",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14016",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-06T22:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en Advantech WebAccess en versiones anteriores a la V8.2_20170817. La aplicación no posee una validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en pila. Esto podría permitir que un atacante ejecute código arbitrario bajo el contexto del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2_20170817",
            "matchCriteriaId" : "808E95DD-A22A-42F8-9707-760D53FD3C46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101685",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43340/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/101685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43340/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14023",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-06T22:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de validación incorrecta de entradas en Siemens SIMATIC PCS 7 V8.1 en versiones anteriores a V8.1 SP1 con WinCC V7.3 Upd 13 y V8.2 en todas las versiones. Se ha identificado la vulnerabilidad de validación incorrecta de entradas, que podría permitir que un atacante remoto autenticado que sea miembro del grupo de administradores provoque el cierre inesperado de servicios mediante el envío de mensajes especialmente manipulados a la interfaz DCOM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_pcs7:8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0D964D2E-63D5-4793-B772-E61CE0586B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc:7.3:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CB472A4C-E0FA-42E7-96C2-1C9FD2B1A8B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_pcs7:8.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A67CAAE5-FDF6-4F19-B7C8-73CAF5A6E303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101680",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039729",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14025",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-06T22:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrieve any file on the server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación incorrecta en ABB FOX515T en su versión 1.0. Se ha identificado una vulnerabilidad de validación incorrecta de entradas, que permite que un atacante local proporcione un parámetro malicioso al script que no es validado por la aplicación. Esto podría permitir que el atacante recupere cualquier archivo del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:fox515t_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B75DFA6-562D-4F25-BE4D-7B92978EDF77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:fox515t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1F4870-AED2-4DBC-ABC5-419A11F865D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101662",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-304-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-304-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14029",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-06T22:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de elemento de ruta de búsqueda no controlado en Trihedral VTScada en la versión 11.3.03 y anteriores. El programa ejecutará archivos dll maliciosos especialmente manipulados en la máquina objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.03",
            "matchCriteriaId" : "00E89749-F4C5-4044-928B-E8D3658E9CB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14031",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-06T22:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de control de acceso incorrecto en Trihedral VTScada en la versión 11.3.03 y anteriores. Un usuario local no administrador tiene privilegios para leer y escribir en el sistema de archivos de la máquina objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.03",
            "matchCriteriaId" : "00E89749-F4C5-4044-928B-E8D3658E9CB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T22:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the `TWG Explorer` item listing. The request method to inject is POST and the attack vector is located on the application-side of the service. The injection point is the add/create input field and the execution point occurs in the item listing after the add or create."
      }, {
        "lang" : "es",
        "value" : "En TinyWebGallery v2.4, una vulnerabilidad XSS se localiza en los parámetros \"mkname\", \"mkitem\" e \"item\" del módulo \"Add/Create\". Los atacantes remotos con cuentas de usuario con pocos privilegios para el acceso backend son capaces de inyectar códigos script maliciosos en el listado de ítems \"TWG Explorer\". El método de petición que se tendría que inyectar es POST y el vector de ataque se sitúa en el lado de la aplicación del servicio. El punto de inyección es el campo de entrada add/create y el punto de ejecución ocurre en el listado de ítems tras la adición o la creación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41219AB-64EB-43BF-90E9-B86EB115998E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=1997",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=1997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T22:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via editor is GET. To save the editor context, the followup POST method request must be processed to perform the attack via the application side. The basic validation of the editor does not allow injecting script codes and blocks the context. Attackers can inject the code by using an editor tag that is not recognized by the basic validation. Thus allows a restricted user account to inject malicious script code to perform a persistent attack against higher privilege web-application user accounts."
      }, {
        "lang" : "es",
        "value" : "En Bludit v1.5.2 y v2.0.1, una vulnerabilidad de XSS se localiza en el contexto del mensaje de cuerpo new page, new category y edit post. Los atacantes remotos son capaces de omitir la validación básica del editor para desencadenar Cross-Site Scripting. El XSS es persistente y el método de petición que se debe emplear para inyectar a través del editor es GET. Para guardar el contexto del editor, la petición de método POST de seguimiento debe ser procesada para realizar el ataque mediante el lado de la aplicación. La validación básica del editor no permite la inyección de código script y bloquea el contexto. Los atacantes pueden inyectar el código mediante el uso de un editor de etiquetas que o¡no está reconocido por la validación básica. Esto permitiría que una cuenta de usuario restringida inyecte código script malicioso para realizar un ataque persistente contra cuentas de usuario con mayores privilegios basados en web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bludit:bludit:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B340CA-98FF-4CCF-9FE3-C928576CCB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bludit:bludit:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B07315-A0FC-4855-BBA5-052E1A839E7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T22:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a \"FrmAdvancedProtection\" crash. Although the mechanism malfunctions and an error occurs during the runtime with the stack trace being issued, the software process is not properly terminated. The software client is still attempting to maintain the connection even though the network connection information is being reset live. In that insecure mode, the \"FrmAdvancedProtection\" component crashes, but the process continues to run with different errors and process corruptions. This local corruption vulnerability can be exploited by local attackers."
      }, {
        "lang" : "es",
        "value" : "En Vectura Perfect Privacy VPN Manager v1.10.10 y v1.10.11, al restablecer los datos de la red mediante el cliente del software con una conexión VPN en activo, ocurre un error crítico que conduce a un cierre inesperado de \"FrmAdvancedProtection\". Aunque el mecanismo no funciona correctamente y el error ocurre durante el tiempo de ejecución con la emisión del seguimiento de la pila, el proceso del software no se finaliza correctamente. El cliente del software sigue intentando mantener la conexión incluso aunque la conexión a la red se está restableciendo al mismo tiempo. En ese modo inseguro, el componente \"FrmAdvancedProtection\" se cierra inesperadamente, pero el proceso continúa ejecutándose con diferentes errores y corrupciones del proceso. Esta vulnerabilidad de corrupción local puede ser explotada por atacantes locales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perfect-privacy:vpn_manager:1.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30A71D5-4154-484F-9FF6-DA76F7D77E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perfect-privacy:vpn_manager:1.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C53D0ED-0C58-49DB-91C4-EBE679312AC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://board.perfect-privacy.com/threads/reporting-a-security-bug-in-vpn-software-client-for-windows.2223/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2102",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://board.perfect-privacy.com/threads/reporting-a-security-bug-in-vpn-software-client-for-windows.2223/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13680",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-06T23:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a SEP 12.1 RU6 MP9 SEP 14 RU1, el endpoint Symantec Endpoint Protection Windows puede encontrarse con una situación en la que un atacante podría emplear la interfaz de usuario del producto para realizar borrados no autorizados de archivos en el sistema de archivos residente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:*:m9:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1",
            "matchCriteriaId" : "EBD6152B-C741-406F-A5DB-D32ED6DF9AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29CE970E-FEF1-402A-94C9-6D944E9DF17C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101503",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039775",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13681",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-06T23:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack."
      }, {
        "lang" : "es",
        "value" : "Symantec Endpoint Protection, en versiones anteriores a SEP 12.1 RU6 MP9, podría ser susceptible a una vulnerabilidad de escalado de privilegios. Este tipo de problema permite que un usuario obtenga accesos elevados a recursos que, normalmente, suelen estar protegidos en niveles de acceso más bajos. En las circunstancias de este problema, la capacidad de este exploit está limitada por la necesidad de realizar varias escrituras de archivos y directorios al sistema de archivos local y, por lo tanto, no es posible en un ataque estándar de tipo drive-by."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:*:m9:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1",
            "matchCriteriaId" : "EBD6152B-C741-406F-A5DB-D32ED6DF9AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101504",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039775",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-06T23:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the \"qemu\" group to gain root privileges by creating a hard link in a directory on which \"chown\" is called recursively by the OpenRC service script."
      }, {
        "lang" : "es",
        "value" : "El paquete de Gentoo net-misc/vde en versiones anteriores a la 2.3.2-r4 podría permitir que miembros del grupo \"qemu\" obtengan privilegios root mediante la creación de un vínculo físico en un directorio en el que \"chown\" es llamado recursivamente por el script de servicio OpenRC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vde_project:vde:*:r4:*:*:*:gentoo:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "8109690A-D695-4D1C-8C7A-CBD004CA9888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/603382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/603382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6331",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-06T23:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a SEP 14 RU1, el producto Symantec Endpoint Protection puede encontrarse con un problema de omisión de protección contra manipulaciones, que es un tipo de ataque que omite la protección en tiempo real para la aplicación que se ejecuta en servidores y clientes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "4AE67053-C23D-4C83-943C-9A15C5A1A1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101502",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039775",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43134/",
        "source" : "secure@symantec.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43134/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15887",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-11-07T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de restricción indebida de intentos excesivos de autenticación en /principals en Synology CardDAV Server en versiones anteriores a la 6.0.7-0085 permite que atacantes remotos obtengan credenciales de usuario mediante un ataque de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:carddav_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.7-0085",
            "matchCriteriaId" : "F90A6F2E-35C8-4667-8438-99D724AEA3B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_64_CardDAV_Server",
        "source" : "security@synology.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_64_CardDAV_Server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12083",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de divulgación de información en el demonio apid de Circle with Disney con firmware 2.0.1. Un conjunto de paquetes especialmente manipulados puede hacer que Disney Circle vuelque cadenas de una base de datos interna en una respuesta HTTP. Un atacante necesita conectividad de red en Internet para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0435",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12084",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de puerta trasera en la funcionalidad de control remoto de Circle with Disney con firmware 2.0.1. Un conjunto específico de paquetes de red puede iniciar remotamente un servidor SSH en el dispositivo, lo que resulta en una puerta trasera persistente. Un atacante puede enviar una llamada API para habilitar el servidor SSH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0436",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12085",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de enrutamiento en la infraestructura en la nube de Circle with Disney. Un paquete especialmente manipulado puede hacer que la nube de Circle enrute un paquete a cualquier dispositivo Circle. Un atacante necesita conectividad de red en Internet para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0437",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12094",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reachable by the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en el análisis sintáctico de WiFi Channel de Circle with Disney con firmware 2.0.1. Un SSID especialmente manipulado puede provocar que el dispositivo ejecute comandos sed arbitrarios. Un atacante necesita configurar un punto de acceso alcanzable por el dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12096",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of spoofed \"deauth\" packets to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la gestión de wifi de Circle with Disney. Un punto de acceso manipulado con el mismo nombre que el legítimo puede emplearse para hacer que Circle se conecte a una red no fiable. Un atacante necesita configurar un punto de acceso alcanzable por el dispositivo y enviar una serie de paquetes \"deauth\" suplantados para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0448",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2864",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de generación de tokens de autenticación en Circle with Disney. Los paquetes de red especialmente manipulados pueden provocar que un token de autenticación válido sea devuelto al atacante, resultando en una omisión de autenticación. Un atacante puede enviar una serie de paquetes para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0370",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2865",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de actualización de firmware de Circle with Disney. Los paquetes de red especialmente manipulados pueden provocar que el producto ejecute un script shell proporcionado por el atacante. Un atacante puede interceptar y alterar el tráfico de red para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2866",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad /api/CONFIG/backup de Circle with Disney. Los paquetes de red especialmente manipulados pueden provocar una inyección de comandos de sistema operativo. Un atacante puede enviar una petición HTTP para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0372",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2881",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de actualización de torlist de Circle with Disney con firmware 2.0.1. Los paquetes de red especialmente manipulados pueden provocar que el producto ejecute un script shell proporcionado por el atacante. Un atacante puede interceptar y alterar el tráfico de red para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0388",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2882",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de actualización de servidores de Circle with Disney con firmware 2.0.1. Los paquetes de red especialmente manipulados pueden provocar que el dispositivo sobrescriba archivos sensibles, resultando en una ejecución de código. Un atacante necesita suplantar un servidor remoto para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0389",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2883",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de actualización de base de datos de Circle with Disney con firmware 2.0.1. Los paquetes de red especialmente manipulados pueden provocar que el dispositivo ejecute código arbitrario. Un atacante necesita suplantar un servidor remoto para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0390",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2884",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de actualización de foto de usuario de Circle with Disney con firmware 2.0.1. Un conjunto repetido de llamadas API especialmente manipuladas puede provocar que el dispositivo corrompa memoria esencial, resultando en el bloqueo (brick) del dispositivo. Un atacante necesita conectividad de red al dispositivo para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0391",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2889",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio en el demonio API de Circle with Disney con firmware 2.0.1. Una gran cantidad de conexiones TCP simultáneas provoca que el demonio APID se bifurque de manera repetida, provocando que el demonio se quede sin memoria y resulte en el reinicio del dispositivo. Un atacante necesita conectividad de red al dispositivo para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0396",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2890",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad /api/CONFIG/restore de Circle with Disney con firmware 2.0.1. Los paquetes de red especialmente manipulados pueden provocar una inyección de comandos de sistema operativo. Un atacante puede enviar una petición HTTP para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0397",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2891",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de uso de memoria previamente liberada en la implementación del servidor HTTP de Cesanta Mongoose 6.8. Una petición POST HTTP normal con un objetivo CGI puede provocar que un puntero previamente liberado se vuelva a utilizar, resultando en una ejecución remota de código. Un atacante necesita enviar esta petición HTTP a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0398",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2892",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de lectura de memoria en la funcionalidad de análisis sintáctico de paquetes MQTT de Cesanta Mongoose 6.8. Un paquete MQTT especialmente manipulado puede provocar una lectura y escritura de memoria fuera de límites, lo que podría resultar en una divulgación de información, denegación de servicio y la ejecución remota de código. Un atacante necesita enviar un paquete MQTT especialmente manipulado a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0399",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2893",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desreferencia de puntero NULL en la funcionalidad de análisis sintáctico de paquetes MQTT de Cesanta Mongoose 6.8. Un paquete MQTT SUBSCRIBE puede provocar una desreferencia de puntero NULL que conduce al cierre inesperado del servidor y a una denegación de servicio. Un atacante necesita enviar un paquete MQTT especialmente manipulado a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2894",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en pila en la funcionalidad de análisis sintáctico de paquetes MQTT de Cesanta Mongoose 6.8. Un paquete MQTT SUBSCRIBE especialmente manipulado puede provocar un desbordamiento de búfer basado en pila que daría lugar a la ejecución remota de código. Un atacante necesita enviar un paquete MQTT especialmente manipulado a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2895",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de lectura de memoria arbitraria en la funcionalidad de análisis sintáctico de paquetes MQTT de Cesanta Mongoose 6.8. Un paquete MQTT SUBSCRIBE especialmente manipulado puede provocar una lectura de memoria fuera de límites, lo que podría resultar en una divulgación de información y una denegación de servicio. Un atacante necesita enviar un paquete MQTT especialmente manipulado a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0402",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2898",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la verificación de firmas de la funcionalidad de actualización de firmware de Circle with Disney. Los paquetes de red especialmente manipulados pueden provocar que se instale un firmware sin firma en el dispositivo, resultando en la ejecución de código arbitrario. Un atacante puede enviar una serie de paquetes para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2909",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un error de programación de bucle infinito en la funcionalidad del servidor DNS en la biblioteca Cesanta Mongoose 6.8. Una petición DNS especialmente manipulada puede provocar un bucle infinito, resultando en un gran uso de CPU y una denegación de servicio. Un atacante puede enviar un paquete a través de la red para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2911",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de control remoto de Circle with Disney con firmware 2.0.1. Los certificados SSL para nombres de dominio específicos pueden provocar que el demonio rclient acepte un certificado distinto al planeado. Un atacante puede hospedar un servidor HTTPS con este certificado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-297"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0418",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2912",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:00.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de control remoto de Circle with Disney con firmware 2.0.1. Los certificados SSL para nombres de dominio específicos pueden provocar que el demonio goclient acepte un certificado distinto al planeado. Un atacante puede hospedar un servidor HTTPS con este certificado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-297"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0419",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2913",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de filtrado de Circle with Disney. Los certificados SSL para nombres de dominio específicos pueden provocar que la biblioteca Bluecoat acepte un certificado distinto al planeado. Un atacante puede hospedar un servidor HTTPS con este certificado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0420",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2914",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de omisión de autenticación en el demonio API de Circle with Disney con firmware 2.0.1. Un token especialmente manipulado puede omitir la rutina de autenticación del binario Apid, provocando que el dispositivo proporcione acceso administrativo no deseado. Un atacante necesita conectividad de red al dispositivo para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0421",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2915",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de configuración de wifi de Circle with Disney con firmware 2.0.1. Un SSID especialmente manipulado puede provocar que el dispositivo ejecute comandos shell arbitrarios. Un atacante necesita enviar un par de peticiones HTTP y configurar un punto de acceso alcanzable por el dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0422",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2916",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad /api/CONFIG/restore de Circle with Disney con firmware 2.0.1. Los paquetes de red especialmente manipulados pueden provocar que se sobrescriba un archivo arbitrario. Un atacante puede enviar una petición HTTP para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2917",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de notificaciones de Circle with Disney con firmware 2.0.1. Los paquetes de red especialmente manipulados pueden provocar una inyección de comandos de sistema operativo. Un atacante puede enviar una petición HTTP para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9661BDE9-416C-40BF-B65C-E9979F511FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0424",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2921",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de corrupción de memoria en la implementación del protocolo Websocket de Cesanta Mongoose 6.8. Un paquete websocket especialmente manipulado puede provocar un desbordamiento de enteros que conduciría a un desbordamiento de búfer basado en memoria dinámica (heap). Esto resulta en una denegación de servicio y una potencial ejecución de código remoto. Un atacante necesita enviar un paquete websocket especialmente manipulado a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2922",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-07T16:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause a buffer to be allocated while leaving stale pointers which leads to a use-after-free vulnerability which can be exploited to achieve remote code execution. An attacker needs to send a specially crafted websocket packet over the network to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de corrupción de memoria en la implementación del protocolo Websocket de Cesanta Mongoose 6.8. Un paquete websocket especialmente manipulado puede provocar que un búfer se asigne dejando punteros obsoletos. Esto conduce a una vulnerabilidad de uso de memoria previamente liberada, que puede ser explotada para lograr una ejecución remota de código. Un atacante necesita enviar un paquete websocket especialmente manipulado a través de la red para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1164ED0F-EE6F-4D14-8227-9EDC2D3EB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0429",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T20:29:00.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php."
      }, {
        "lang" : "es",
        "value" : "lib/rrd.php en Cacti 1.1.27 permite que administradores remotos autenticados ejecuten comandos de sistema operativo arbitrarios mediante el parámetro path_rrdtool en una petición action=save en settings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B513DA-BA6E-4BE9-B299-F02F3784262C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cacti/cacti/issues/1057",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T21:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145."
      }, {
        "lang" : "es",
        "value" : "En PHP, en versiones anteriores a la 5.6.32, versiones 7.x anteriores a la 7.0.25 y versiones 7.1.x anteriores a la 7.1.11, un error en la manipulación de timelib_meridian de la extensión de fecha de las directivas \"front of\" y \"back of\" podría ser empleado por atacantes capaces de proporcionar cadenas de fechas para filtrar información del intérprete. Esto está relacionado con lecturas fuera de límites de ext/date/lib/parse_date.c que afectan a la función php_parse_date. NOTA: este problema es diferente de CVE-2017-11145."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.32",
            "matchCriteriaId" : "6029D86B-258B-4BCB-A7F4-2D8AAB6BF986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.25",
            "matchCriteriaId" : "6FED5332-FB60-4EC7-9018-14E7DE0FF72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.11",
            "matchCriteriaId" : "52497E39-05A7-4C19-96FF-27449D146E3B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED6CAE-D97F-49E0-9D00-1642A3A427B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=75055",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/derickr/timelib/commit/aa9156006e88565e1f1a5f7cc088b18322d57536",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181123-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3566-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43133/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://php.net/ChangeLog-7.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=75055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/derickr/timelib/commit/aa9156006e88565e1f1a5f7cc088b18322d57536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181123-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3566-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43133/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T22:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request."
      }, {
        "lang" : "es",
        "value" : "/view/friend_profile.php en Ingenious School Management System 2.3.0 es vulnerable a una inyección SQL basada en booleanos y en tiempo en el parámetro \"friend_index\" de una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ingenious_school_management_system_project:ingenious_school_management_system:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05816F7-355E-4DF9-8AA8-0CF7A0146F00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43108/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43108/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función parse_hid_report_descriptor en drivers/input/tablet/gtco.c en el kernel de Linux, en versiones anteriores a la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a50829479f58416a013a4ccca791336af3c584c7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/McWFcOsA47Y/3bjtBBgaBAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a50829479f58416a013a4ccca791336af3c584c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/McWFcOsA47Y/3bjtBBgaBAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función hdpvr_probe en drivers/media/usb/hdpvr/hdpvr-core.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (gestión incorrecta de errores y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/ngC5SLvxPm4/gduhCARhAwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9966135/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/ngC5SLvxPm4/gduhCARhAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9966135/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función ims_pcu_get_cdc_union_desc en drivers/input/misc/ims-pcu.c en el kernel de Linux, en versiones anteriores a la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (lectura fuera de límites de ims_pcu_parse_cdc_data y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101768",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ea04efee7635c9120d015dcdeeeb6988130cb67a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/q6jjr1OhqO8/WcA99AVFBAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ea04efee7635c9120d015dcdeeeb6988130cb67a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/q6jjr1OhqO8/WcA99AVFBAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "drivers/media/usb/dvb-usb/dib0700_devices.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (error y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/-d6ilzbVu_g/OBy8_62mAwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.linuxtv.org/patch/45291/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/-d6ilzbVu_g/OBy8_62mAwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.linuxtv.org/patch/45291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "drivers/net/usb/asix_devices.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/_9a6pd-p_0E/OnmnplQuAgAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/834686/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/_9a6pd-p_0E/OnmnplQuAgAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/834686/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free."
      }, {
        "lang" : "es",
        "value" : "La función dvb_frontend_free en drivers/media/dvb-core/dvb_frontend.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (uso de memoria previamente liberada y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado. NOTA: la función fue posteriormente renombrada como __dvb_frontend_free."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101758",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/0HJQqTm0G_g/T931ItskBAAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/10046189/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/0HJQqTm0G_g/T931ItskBAAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/10046189/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función usbnet_generic_cdc_bind en drivers/net/usb/cdc_ether.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (error de división por cero y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101761",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/834771/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3822-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3822-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/834771/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3822-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3822-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-07T23:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función qmi_wwan_bind en drivers/net/usb/qmi_wwan.c en el kernel de Linux, en versiones hasta la 4.13.11, permite que los usuarios locales provoquen una denegación de servicio (error de división por cero y cierre inesperado del sistema) o, posiblemente, causen otros impactos no especificados mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101791",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/834770/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/834770/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T03:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de análisis sintáctico de YAML en el método parse_yaml_query en parser.py en MLAlchemy, en versiones anteriores a la 0.2.2. Al procesar consultas basadas en YAML para buscar datos, un analizador sintáctico de YAML puede ejecutar comandos Python arbitrarios. Esto resulta en una ejecución de comandos, ya que se emplea load en lugar de safe_load. Un atacante puede insertar código python en el YAML cargado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlalchemy_project:mlalchemy:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF209D6-FC75-4ED2-A89D-068843645922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlalchemy_project:mlalchemy:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFE880C-90C5-48BD-A703-08C3468F5FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlalchemy_project:mlalchemy:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB87D83-2523-49D7-9BB7-AA21B7C066A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlalchemy_project:mlalchemy:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79EBE1E-2E95-462D-9422-F21739F098ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlalchemy_project:mlalchemy:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D446CA75-06CA-4E1D-9662-247B52D54E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thanethomson/MLAlchemy/commit/bc795757febdcce430d89f9d08f75c32d6989d3c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/thanethomson/MLAlchemy/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16615-critical-restful-web-applications-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thanethomson/MLAlchemy/commit/bc795757febdcce430d89f9d08f75c32d6989d3c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/thanethomson/MLAlchemy/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16615-critical-restful-web-applications-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T03:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de análisis sintáctico de YAML en el método YAMLParser en Interfaces.py en PyAnyAPI, en versiones anteriores a la 0.6.1. Un analizador sintáctico de YAML puede ejecutar comandos Python arbitrarios. Esto resulta en una ejecución de comandos, ya que se emplea load en lugar de safe_load. Un atacante puede insertar código python en el YAML cargado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyanyapi_project:pyanyapi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "D701AC95-B321-4345-94BF-EB630385AF8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Stranger6667/pyanyapi/issues/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Stranger6667/pyanyapi/releases/tag/0.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16616-yamlparser-in-pyanyapi/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.python.org/pypi/pyanyapi/0.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Stranger6667/pyanyapi/issues/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Stranger6667/pyanyapi/releases/tag/0.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16616-yamlparser-in-pyanyapi/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.python.org/pypi/pyanyapi/0.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T03:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A \"Load YAML\" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de carga de archivos YAML de util.py en OwlMixin, en versiones anteriores a la 2.0.0a12. Una cadena o archivo \"Load YAML\" (también conocido como load_yaml o load_yamlf) puede ejecutar comandos Python arbitrarios. Esto resulta en una ejecución de comandos, ya que se emplea load en lugar de safe_load. Un atacante puede insertar código python en el YAML cargado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "B0A7378E-9FA2-45B9-96ED-E62ABAA06163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D100D4D-0C94-469E-8C68-A97C56078BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha10:*:*:*:*:*:*",
            "matchCriteriaId" : "E7020E5D-7F7D-4EFB-A0EB-7CC04E5226FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha11:*:*:*:*:*:*",
            "matchCriteriaId" : "383F3284-EA54-48FF-83E5-25F64E0D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF06035-79B8-4E6F-B13F-0B818E031A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DFF14D-9FDA-4D7F-ACE8-767CCB123AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDA9CE6-B074-46EF-BD50-EC1E2F742210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBA654D-41BE-4388-8F51-C12750D65400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha6:*:*:*:*:*:*",
            "matchCriteriaId" : "981BC8E3-0144-4A11-B140-894EFCA99AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha7:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA28E1D-9B21-4DE1-8CC6-D6D0D3E14700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha8:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EC30F7-1C22-4E5C-8441-2780591293B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owlmixin_project:owlmixin:2.0.0:alpha9:*:*:*:*:*:*",
            "matchCriteriaId" : "706DCA46-9503-4ECB-A334-17CBF0FF22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tadashi-aikawa/owlmixin/commit/5d0575303f6df869a515ced4285f24ba721e0d4e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tadashi-aikawa/owlmixin/issues/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16618-convert-through-owlmixin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tadashi-aikawa/owlmixin/commit/5d0575303f6df869a515ced4285f24ba721e0d4e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tadashi-aikawa/owlmixin/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16618-convert-through-owlmixin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T05:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script."
      }, {
        "lang" : "es",
        "value" : "El paquete mail-filter/assp de Gentoo en su versión 1.9.8.13030 y anteriores permite que usuarios locales obtengan privilegios aprovechando el acceso a la cuenta de usuario assp para instalar un script troyano /usr/share/assp/assp.pl."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anti-spam_smtp_proxy_project:anti-spam_smtp_proxy:*:*:*:*:*:gentoo:*:*",
            "versionEndIncluding" : "1.9.8.13030",
            "matchCriteriaId" : "DAC9FFE1-CAF7-40CF-BD73-7205D8186086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/629442",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/629442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T05:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header."
      }, {
        "lang" : "es",
        "value" : "La versión 1.1.27 de Cacti permite que administradores remotos autenticados lleven a cabo ataques de ejecución remota de código colocando la ruta de acceso a registros bajo la raíz web y, a continuación, realizando una petición remote_agent-php que contenga código PHP en una cabecera Client-ip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B513DA-BA6E-4BE9-B299-F02F3784262C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cacti/cacti/issues/1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T05:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd."
      }, {
        "lang" : "es",
        "value" : "Cacti 1.1.27 permite que administradores remotos autenticados lean archivos arbitrarios colocando la ruta de acceso a registros en un directorio privado y, a continuación, realizando una petición clog.php?filename=, tal y como demuestra filename=passwd (con una ruta de acceso a registros bajo /etc) para leer /etc/passwd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B513DA-BA6E-4BE9-B299-F02F3784262C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cacti/cacti/issues/1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T06:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because \"width * height\" multiplications occur unsafely."
      }, {
        "lang" : "es",
        "value" : "En sam2p 0.49.4, hay desbordamiento de enteros (con desbordamientos de búfer basados en memoria dinámica o heap resultantes) en input-bmp.ci en la función ReadImage porque las multiplicaciones \"ancho * altura\" no se realizan de manera segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sam2p_project:sam2p:0.49.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE79927B-648D-46F8-ACDF-5E96440FDD02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pts/sam2p/issues/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/pts/sam2p/issues/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12824",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-11-08T14:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Special crafted InPage document leads to arbitrary code execution in InPage reader."
      }, {
        "lang" : "es",
        "value" : "Documento InPage especialmente manipulado desencadena la ejecución de código arbitrario en InPage reader."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inpage:inpage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D790BD1-9E40-4937-A93F-11B29BA2B04D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/94548",
        "source" : "vulnerability@kaspersky.com"
      }, {
        "url" : "https://securelist.com/inpage-zero-day-exploit-used-to-attack-financial-institutions-in-asia/76717/",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/94548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://securelist.com/inpage-zero-day-exploit-used-to-attack-financial-institutions-in-asia/76717/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14360",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-11-08T14:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service (DoS)."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en lHPE Content Manager Workgroup Service v9.00. La vulnerabilidad se podría explotar de forma remota para permitir que se produzca una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:content_manager:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5626E8-8939-436A-9B5C-0B5EC08EDEEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101792",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03006302",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03006302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF."
      }, {
        "lang" : "es",
        "value" : "Los analizadores sintácticos XML en iText, en versiones anteriores a la 5.5.12 y en versiones 7.x anteriores a la 7.0.3, no desactivan las entidades externas, lo que podría permitir a atacantes remotos realizar ataques XEE (XML External Entity) mediante un PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itextpdf:itext:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.12",
            "matchCriteriaId" : "26DB62A8-97FA-403C-9B6D-C34FEF05EDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itextpdf:itext:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB713D0-721F-4D4E-80D3-0A3F13520934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itextpdf:itext:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7B6C29-BFAF-41D8-9187-88F841429F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itextpdf:itext:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0B8E76-72BB-4785-AE55-EE105A2B49B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541483/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541483/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL."
      }, {
        "lang" : "es",
        "value" : "RemObjects Remoting SDK 9 1.0.0.0 para Delphi es vulnerable a un ataque de Cross-Site Scripting (XSS) reflejado mediante el parámetro service a la URI /soap, desencadenando un intento no válido de generar WSDL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remobjects:remoting_sdk_9:1.0.0.0.:*:*:*:*:delphi:*:*",
            "matchCriteriaId" : "EFBA569B-539A-4A83-9F9A-4D4B5F8DC3B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talk.remobjects.com/t/reflected-cross-site-scripting-xss-vulnerability/14662",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://talk.remobjects.com/t/reflected-cross-site-scripting-xss-vulnerability/14662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft an unreadable file with a specific name to run arbitrary shell commands."
      }, {
        "lang" : "es",
        "value" : "backintime (también conocido como Back in Time) en versiones anteriores a la 1.1.24 escapaba/entrecomillaba incorrectamente las rutas de archivo utilizadas como argumentos para el comando \"notify-send\", haciendo que algunas partes de las rutas de archivo se ejecutasen como comandos shell en una llamada os.system en qt4/plugins/notifyplugin.py. Esto podría permitir a un atacante manipular un archivo ilegible con un nombre específico para ejecutar comandos shell arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backintime_project:backintime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.24",
            "matchCriteriaId" : "E76CCBC2-482C-43CF-A249-57DC0CA622E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bit-team/backintime/commit/cef81d0da93ff601252607df3db1a48f7f6f01b3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bit-team/backintime/issues/834",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bit-team/backintime/releases/tag/v1.1.24",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bit-team/backintime/commit/cef81d0da93ff601252607df3db1a48f7f6f01b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bit-team/backintime/issues/834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bit-team/backintime/releases/tag/v1.1.24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15085",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-08T19:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que la solución para CVE-2017-12150 no se subió correctamente en la errata RHSA-2017:2858 para Red Hat Gluster Storage 3.3 para RHEL 6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:gluster_storage:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BB9950-E52D-42B4-911E-B00FC97B1C26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3110",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15085",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15086",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-08T19:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que la solución para CVE-2017-12151 no se subió correctamente en la errata RHSA-2017:2858 para Red Hat Gluster Storage 3.3 para RHEL 6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:gluster_storage:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BB9950-E52D-42B4-911E-B00FC97B1C26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101555",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3110",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15087",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-08T19:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que la solución para CVE-2017-12163 no se subió correctamente en la errata RHSA-2017:2858 para Red Hat Gluster Storage 3.3 para RHEL 6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:gluster_storage:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BB9950-E52D-42B4-911E-B00FC97B1C26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101556",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3110",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15087",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-08T20:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492)."
      }, {
        "lang" : "es",
        "value" : "bgpd en FRRouting (FRR) en versiones anteriores a la 2.0.2 y versiones 3.x anteriores a la 3.0.2, tal y como se usa en Cumulus Linux en versiones anteriores a la 3.4.3 y en otros productos, permite que atacantes remotos obtengan información sensible mediante un paquete BGP UPDATE mal formado desde un peer conectado, lo que desencadena la transmisión de hasta miles de bytes no planeados por culpa de la longitud de un atributo gestionado de manera incorrecta. Esta vulnerabilidad también se conoce como RN-690 (CM-18492)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "2C954F09-489E-427F-A321-9D3C06863E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5AA58D-657C-419D-8DED-9623585BF3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:3.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "4C02CBC5-37AE-4CB8-9E6F-24DC7A907758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "75F37C2C-D289-4CF4-A5A8-57F0C9BD0085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A52F4064-17F9-4452-9C7D-4C773E4DF814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE721D6-0B22-4C34-B9D6-14D6FC5612D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frrouting:frrouting:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD2A2B4-0C7A-476F-9061-7EA71143BE4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:cumulusnetworks:cumulus_linux:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.3",
            "matchCriteriaId" : "8B9B233D-29C3-4C72-9BFD-897D15276234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://frrouting.org/community/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://frrouting.org/community/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11511",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2017-11-08T22:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files."
      }, {
        "lang" : "es",
        "value" : "ManageEngine ServideDesk 9.3.9328 es vulnerable a la descarga de archivos arbitrarios debido a restricciones incorrectas del nombre de ruta utilizado en el parámetro filepath para la URL download-file. Un atacante remoto no autenticado puede utilizar esta vulnerabilidad para descargar archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manageengine:servicedesk:9.3.9328:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511FE55A-1087-4CEB-8CA9-1FB020C0AC85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101788",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-31",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11512",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2017-11-08T22:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files."
      }, {
        "lang" : "es",
        "value" : "ManageEngine ServideDesk 9.3.9328 es vulnerable a la descarga de archivos arbitrarios debido a restricciones incorrectas del nombre de ruta utilizado en el parámetro name para la URL download-snapshot. Un atacante remoto no autenticado puede utilizar esta vulnerabilidad para descargar archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manageengine:servicedesk:9.3.9328:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511FE55A-1087-4CEB-8CA9-1FB020C0AC85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101789",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-31",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T00:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c."
      }, {
        "lang" : "es",
        "value" : "coders/wpg.c en GraphicsMagick 7.0.6 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de aplicación) o, probablemente, causen cualquier otro tipo de problema mediante un archivo manipulado. Esto está relacionado con la función AcquireCacheNexus en magick/pixel_cache.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/135bdcb88b8d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/1b9e64a8901e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/2a21cda3145b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/2b7c826d36af",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/3dc7b4e3779d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/75245a215fff",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/e8086faa52d0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/fcd3ed3394f6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101795",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/450/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/135bdcb88b8d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/1b9e64a8901e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/2a21cda3145b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/2b7c826d36af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/3dc7b4e3779d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/75245a215fff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/e8086faa52d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/fcd3ed3394f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/450/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T00:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrarily large string and write past the end of the user field storage buffer. NOTE: this is different from CVE-2017-7617, which was only about the Party A buffer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer se descubrió en Asterisk Open Source en versiones 13 anteriores a la 13.18.1, versiones 14 anteriores a la 14.7.1 y versiones 15 antes de la 15.1.1 y en Certified Asterisk 13.13 en versiones anteriores a la 13.13-cert7. No se realizan chequeos de tamaño cuando se configura el campo user para Party B en un CDR. Por ello, es posible que alguien utilice una cadena arbitraria con una longitud larga y escriba más allá del final del búfer de almacenamiento del campo user. NOTA: esta vulnerabilidad es diferente de CVE-2017-7617, que solo trataba del búfer Party A."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.18.1",
            "matchCriteriaId" : "88EDB1A9-AC31-4A47-A222-0C4E17274A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.7.1",
            "matchCriteriaId" : "5861B3BC-A35A-4617-A24E-F88D27DBE3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "651DC4FA-A4EF-40DC-9B54-3ED928A7531A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7233B5A2-E1CE-4B7E-99FA-26369B892B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "F051FE7D-0695-4552-BC1C-836076825606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9DFD7C-9ED1-4561-8AFF-69D98E8E398D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8BFAC6-17A7-4B80-B436-0FFA4B9EA22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "954376A0-A03C-47D9-BC5E-14B005DB3940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "07BB081F-504D-42E3-9CDE-4005572CA0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F379170-DC3B-41B8-B950-7E0E1E6002AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "338BFA7B-AA84-483F-B298-BC932728E0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4D417F-485E-4CAD-8542-A22BBA2869E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "61F70CD2-1727-4955-A81B-8927AEF468ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "A9437455-90FB-4F90-B246-A37E558C9CE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27337",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T00:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully established. When this happens the session object never gets destroyed. Eventually Asterisk can run out of memory and crash."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Asterisk Open Source en versiones 13 anteriores a la 13.18.1, versiones 14 anteriores a la 14.7.1 y versiones 15 antes de la 15.1.1 y en Certified Asterisk 13.13 en versiones anteriores a la 13.13-cert7. Ocurre una fuga de memoria cuando un objeto de sesión pjsip de Asterisk se crea y la llamada se rechaza antes de que la sesión se establezca por completo. Cuando esto ocurre, el objeto de sesión nunca se destruye. Asterisk podría quedarse sin memoria y cerrarse de manera inesperada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.18.1",
            "matchCriteriaId" : "88EDB1A9-AC31-4A47-A222-0C4E17274A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.7.1",
            "matchCriteriaId" : "5861B3BC-A35A-4617-A24E-F88D27DBE3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "651DC4FA-A4EF-40DC-9B54-3ED928A7531A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7233B5A2-E1CE-4B7E-99FA-26369B892B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "F051FE7D-0695-4552-BC1C-836076825606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9DFD7C-9ED1-4561-8AFF-69D98E8E398D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8BFAC6-17A7-4B80-B436-0FFA4B9EA22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "954376A0-A03C-47D9-BC5E-14B005DB3940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "07BB081F-504D-42E3-9CDE-4005572CA0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F379170-DC3B-41B8-B950-7E0E1E6002AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "338BFA7B-AA84-483F-B298-BC932728E0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4D417F-485E-4CAD-8542-A22BBA2869E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "61F70CD2-1727-4955-A81B-8927AEF468ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13.0:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "A9437455-90FB-4F90-B246-A37E558C9CE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101765",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27345",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T04:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to \"pair\" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified \"specific information\" by which the agent identifies a network device that is \"appearing to be a valid Datto.\""
      }, {
        "lang" : "es",
        "value" : "Datto Backup Agent en versiones 1.0.6.0 y anteriores no autentica las conexiones entrantes. Esto permite que un atacante suplante Datto Backup Appliance para \"emparejarse\" con el agente y envíe peticiones a dicho agente, si el atacante puede alcanzar el agente en el puerto TCP 25566 o 25568 y enviar \"información concreta\" no especificada por la cual el agente identifica un dispositivo de red que \"parece que es un Datto válido\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datto:backup_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6.0",
            "matchCriteriaId" : "04C8ADE2-6DB1-4425-9B57-B92988E022BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.datto.com/partner-security-update-nov2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.datto.com/partner-security-update-nov2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T04:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent (DWA) 1.0.5.0 and earlier. In other words, an attacker could combine this \"primary/secondary\" attack with the CVE-2017-16673 \"rogue pairing\" attack to achieve unauthenticated access to all agent machines running these older DWA versions."
      }, {
        "lang" : "es",
        "value" : "Datto Windows Agent permite la ejecución remota de comandos sin autenticar mediante un comando modificado junto con la explotación de CVE-2017-16673; es decir, un ataque con un comando primario en lista blanca mal formado y un comando secundario que no está en una lista blanca. Esto afecta a Datto Windows Agent (DWA) 1.0.5.0 y anteriores. En otras palabras, un atacante podría combinar este ataque \"primario/secundario\" con el ataque de emparejamiento malicioso CVE-2017-16673 para conseguir acceso no autenticado a todas las máquinas agentes que ejecutan estas versiones antiguas de DWA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datto:windows_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.5.0",
            "matchCriteriaId" : "A133E54A-1945-4BF7-8827-1FB03CB61715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.datto.com/partner-security-update-nov2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.datto.com/partner-security-update-nov2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T14:29:00.267",
      "lastModified" : "2025-10-22T00:16:05.177",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests."
      }, {
        "lang" : "es",
        "value" : "Roundcube Webmail, en versiones anteriores a la 1.1.10, versiones 1.2.x anteriores a la 1.2.7 y y versiones 1.3.x anteriores a la 1.3.3, permite el acceso no autorizado a archivos arbitrarios en el sistema de archivos del host, incluyendo archivos de configuración, tal y como se explotó en Noviembre 2017 pero sin publicar ninguna prueba de concepto oficial. El atacante debe ser capaz de autenticarse en el sistema objetivo con un nombre de usuario y una contraseña válidos, ya que el ataque necesita una sesión activa. El problema está relacionado con los plugins para adjuntar archivos y las peticiones _task=settings_action=upload-display_from=timezone."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Roundcube Webmail File Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "5F9E6CBE-8E6F-4BE0-8DBD-521527119EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6556D4DF-FFF9-4EE0-91EA-84314D7CF071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A43C92-1266-47DB-B3D9-A12CFE271EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFDA8E6-5BD6-4A20-8B67-C9597B67DABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB074D9-E258-471F-9FF7-CABE43E763DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2B08B4-5484-440C-AB40-CAAB41508920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D7F18F-FFA7-4D10-B1F6-1499D6F8DB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C112540F-4CCC-48A9-A30D-D5E808151D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4913F9D6-868C-4AB3-A4CC-03257A417573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975DDE40-CE7F-4425-B2F0-523D36894010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FBA242-E194-49DE-A740-7216BBFE2039"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161226/Roundcube-Webmail-1.2-File-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101793",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/issues/6026",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.1.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.2.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.3.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00039.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://roundcube.net/news/2017/11/08/security-updates-1.3.3-1.2.7-and-1.1.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4030",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161226/Roundcube-Webmail-1.2-File-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/issues/6026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.1.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.2.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.3.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://roundcube.net/news/2017/11/08/security-updates-1.3.3-1.2.7-and-1.1.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-16651",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T18:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) because of extractDefinitions in lib/readers/swf.c and fill_line_bitmap in lib/devices/render.c, as demonstrated by swfrender."
      }, {
        "lang" : "es",
        "value" : "La función swf_DefineLosslessBitsTagToImage en lib/modules/swfbits.c en SWFTools 0.9.2 gestiona de manera incorrecta un fallo de descompresión, lo que permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) a causa de extractDefinitions en lib/readers/swf.c y fill_line_bitmap en lib/devices/render.c, tal y como lo demuestra swfrender."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101797",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/46",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T21:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file."
      }, {
        "lang" : "es",
        "value" : "Hola VPN 1.34 tiene permisos débiles (Everyone:F) bajo %PROGRAMFILES%, lo que permite que los usuarios locales obtengan privilegios mediante un archivo troyano 7za.exe u hola.exe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hola:vpn:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED2D4A8-9CF0-438F-8590-72DB3A8634B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T22:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the \"access_token\" parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en admin/partials/uif-access-token-display.php en el plugin Ultimate Instagram Feed, en versiones anteriores a la 1.3, para WordPress permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro access_token."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_instagram_feed_project:ultimate_instagram_feed:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "760FDC13-FEA8-472E-8646-A3BBB770A59D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144921/WordPress-Ultimate-Instagram-Feed-1.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1758562/ultimate-instagram-feed",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8947",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144921/WordPress-Ultimate-Instagram-Feed-1.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1758562/ultimate-instagram-feed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-09T22:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php."
      }, {
        "lang" : "es",
        "value" : "El proceso de instalación en LibreNMS, en versiones anteriores a 2017-08-18, permite que atacantes remotos lean archivos arbitrarios. Esto está relacionado con html/install.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.30",
            "matchCriteriaId" : "77691BD8-54D4-4323-B5A8-CAAAFB90F923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.librenms.org/2017/08/22/librenms-security-fix-during-the-installation-process/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/librenms/librenms/commit/7887b2e1c7158204ac69ca43beafce66e4d3a3b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/librenms/librenms/commit/d3094fa6578b29dc34fb5a7d0bd6deab49ecc911",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/7184",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.librenms.org/2017/08/22/librenms-security-fix-during-the-installation-process/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/librenms/librenms/commit/7887b2e1c7158204ac69ca43beafce66e4d3a3b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/librenms/librenms/commit/d3094fa6578b29dc34fb5a7d0bd6deab49ecc911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/7184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:16.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el cliente de SoftConsole en Avaya IP Office en versiones anteriores a la 10.1.1 permite que servidores remotos ejecuten código arbitrario mediante una respuesta larga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "329DE43E-B046-40E3-845B-6640C2F8F2D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.avaya.com/css/P8/documents/101044086",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-SOFT-CONSOLE-REMOTE-BUFFER-OVERFLOW-0DAY.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/144883/Avaya-IP-Office-IPO-10.1-Soft-Console-Remote-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101674",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43121/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://downloads.avaya.com/css/P8/documents/101044086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-SOFT-CONSOLE-REMOTE-BUFFER-OVERFLOW-0DAY.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/144883/Avaya-IP-Office-IPO-10.1-Soft-Console-Remote-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43121/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11461",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2017-11-10T02:29:16.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or \"UI redress attack\" which could be used to cause a user to perform an unintended action in the user interface."
      }, {
        "lang" : "es",
        "value" : "NetApp OnCommand Unified Manager para 7-mode (core package) en versiones anteriores a la 5.2.1 es susceptible al secuestro de clics o \"UI redress attack\", lo que se podría utilizar para provocar que un usuario realice una acción no planeada en la interfaz de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "368769EB-FC64-4A59-9F46-8037ED0DD5F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101778",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171107-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171107-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función Node_GetData en corec/corec/node/node.c en mkvalidator 0.5.1 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función ReadData en ebmlstring.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (liberación no válida y cierre inesperado de la aplicación) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función EBML_BufferToID en ebmlelement.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función ReadData en ebmlmaster.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (fallo de aserción) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función ReadDataFloat en ebmlnumber.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (fallo de aserción) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función EBML_FindNextElement en ebmlmain.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función UpdateDataSize en ebmlmaster.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (fallo de aserción) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función EBML_IntegerValue en ebmlnumber.c en libebml2 hasta 2012-08-26 permite que atacantes remotos provoquen una denegación de servicio (fallo de aserción) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-08-26",
            "matchCriteriaId" : "23B02C72-B394-40B2-970B-53F968DD0A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D16D6-ABE7-446C-9A1D-CFCD11C310F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file."
      }, {
        "lang" : "es",
        "value" : "La función Node_ValidatePtr en corec/corec/node/node.c en mkclean 0.8.9 permite que atacantes remotos provoquen una denegación de servicio (fallo de aserción) mediante un archivo mkv manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69894DD-399E-4638-B78C-037352AFC588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/foundation-source/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:17.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control ViewerCtrlLib.ViewerCtrl de ActiveX en Avaya IP Office Contact Center, en versiones anteriores a la 10.1.1, permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria dinámica o heap y cierre inesperado) o ejecuten código arbitrario mediante una cadena larga para el método open."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1:sp11:*:*:*:*:*:*",
            "matchCriteriaId" : "D59361D7-B017-4CE2-81A5-291C53CC0E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5C2AE6-BC1B-4448-8CCE-4F282A4C6959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1.0.2209.1540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46DB486-88EC-49F3-AA9E-3E8755D61AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADE5F08-A329-4083-A02A-BA3447F32991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0E24C0-8DAF-4199-A18A-625B50CA9369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA134E8-52E4-4CD9-9ABF-C5A6F9E5C272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:9.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5575DC-1A36-40AE-9A98-480C5A7C8BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203590C4-9B69-470B-8BF5-E436CE680A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:10.0.0.3-8600.1705:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912179E1-137C-4DEC-A915-CF4BDD5AE11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:ip_office_contact_center:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54AE4793-6525-4BCD-8883-681406784F39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.avaya.com/css/P8/documents/101044091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101667",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43120/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://downloads.avaya.com/css/P8/documents/101044091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43120/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for _rpc_ services."
      }, {
        "lang" : "es",
        "value" : "El paquete SuSEfirewall2 en versiones anteriores a la 3.6.312-2.13.1 en SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2 y Server para Raspberry Pi 12 SP2; en versiones anteriores a la 3.6.312.333-3.10.1 en SLE Desktop 12 SP3 y Server 12 SP3; en versiones anteriores a la 3.6_SVNr208-2.18.3.1 en SLE Server 11 SP4; en versiones anteriores a la 3.6.312-5.9.1 en openSUSE Leap 42.2 y en versiones anteriores a la 3.6.312.333-7.1 en openSUSE Leap 42.3 podría permitir que atacantes remotos omitan las restricciones de acceso planeadas en el servicio portmap aprovechando la ausencia de una restricción de red de origen para servicios _rpc_."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:susefirewall2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A285BB5-22CD-460E-88AE-A0B068DC38C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F84B2729-7B52-4505-9656-1BD31B980705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "631BB7F0-5F27-4244-8E72-428DA824C75B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server_for_raspberry_pi:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4605D055-EA6E-4C90-9277-AC067E1BD02D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-11/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2017-11/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic."
      }, {
        "lang" : "es",
        "value" : "El servidor http incorporado de Debut contiene una denegación de servicio explotable remotamente donde una única solicitud POST HTTP malformada puede hacer que el servidor se bloquee hasta que finalmente responda (en aproximadamente 300 segundos) con un error HTTP 500. Mientras el servidor está colgado, los trabajos de impresión por medio de la red están bloqueados y la interfaz web es inaccesible. Un atacante puede enviar continuamente esta solicitud malformada para mantener inaccesible el dispositivo para el tráfico legítimo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brother:dcp-j132w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.20",
            "matchCriteriaId" : "2122DA8C-32E7-42D5-936D-99CBFF02F107"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brother:dcp-j132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0948AA1-005C-4A4F-8980-70F2953DF5E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43119/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43119/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the \"admin\" username, allows remote attackers to bypass authentication and obtain administrative access via a \"true\" value for the up_auto_log parameter in the QUERY_STRING to the default URI."
      }, {
        "lang" : "es",
        "value" : "El plugin UserPro en versiones anteriores a la 4.9.17.1 para WordPress, cuando se utiliza en una página con el nombre de usuario \"admin\", permite que atacantes remotos omitan la autenticación y obtengan acceso administrativo mediante un valor \"true\" para el parámetro up_auto_log en QUERY_STRING en la URI por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:userproplugin:userpro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.9.17.1",
            "matchCriteriaId" : "6ED33337-4B34-442C-8DC4-38F541272963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681?s_rank=9",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8950",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43117/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681?s_rank=9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the \"Favorites\" feature. This vulnerability allows remote attackers to inject and permanently store malicious JavaScript payloads, which are executed when users access the affected functionality. Exploitation of this vulnerability can lead to Session Hijacking and Credential Theft, Execution of unauthorized actions on behalf of users, and Exfiltration of sensitive data. This vulnerability presents a potential risk for widespread exploitation in connected IoT environments."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) en Logitech Media Server 7.9.0 permite que atacantes remotos inyecten scripts web o HTML arbitrarios a través de \"favorite\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49326972-58BD-4B7D-87CF-0A8AD2A11B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43122/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43122/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the \"Radio\" functionality. This vulnerability allows attackers to inject malicious JavaScript payloads, which become permanently stored on the server and execute when a user plays the compromised radio stream. Exploitation of this vulnerability can lead to Session hijacking and unauthorized access, Persistent manipulation of web content within the application, and Phishing or malicious redirects to external domains. This vulnerability can be exploited to manipulate media server behavior in enterprise and home network environments."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) en Logitech Media Server 7.9.0 permite que atacantes remotos inyecten scripts web o HTML arbitrarios a través de una URL radio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logitech:media_server:7.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49326972-58BD-4B7D-87CF-0A8AD2A11B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43123/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43123/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users."
      }, {
        "lang" : "es",
        "value" : "En Joomla! en versiones anteriores a la 3.8.2, un error de lógica en com_fields exponía información de solo lectura sobre los campos personalizados de una página a usuarios no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "75C3A00D-815F-4B62-8904-82848641E40A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101702",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039757",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/715-20171103-core-information-disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/715-20171103-core-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:18.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method."
      }, {
        "lang" : "es",
        "value" : "En Joomla! en versiones anteriores a la 3.8.2, un error permitía a terceras partes omitir el método de autenticación de doble factor de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "2707E636-7813-4665-ACF2-15621B980EA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101701",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039757",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/713-20171102-core-2-factor-authentication-bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/713-20171102-core-2-factor-authentication-bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:19.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php."
      }, {
        "lang" : "es",
        "value" : "Bolt en versiones anteriores a la 3.3.6 no restringe correctamente el acceso a rutas _profiler. Esto está relacionado con EventListener/ProfilerListener.php y Provider/EventListenerServiceProvider.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boltcms:bolt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.5",
            "matchCriteriaId" : "9BDA7A6E-31EB-4DC2-840E-83E11B32E4E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101777",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/bolt/bolt/commit/aa21787241945457a2e4abc8b079672935fe0840",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bolt/bolt/releases/tag/v3.3.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/bolt/bolt/commit/aa21787241945457a2e4abc8b079672935fe0840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bolt/bolt/releases/tag/v3.3.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:19.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064."
      }, {
        "lang" : "es",
        "value" : "NetApp Clustered Data ONTAP en versiones anteriores a la 8.3.2P8 y 9.0 anteriores a P2 permite que usuarios autenticados remotos obtengan información sensible del clúster y del tenant mediante vectores no especificados. Esta vulnerabilidad es diferente de CVE-2016-3064."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:*:p8:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3.2",
            "matchCriteriaId" : "F69AE8B0-6842-48F5-8C0F-6626A0D8DF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B366386A-9899-47EB-9494-25ECFD065CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BDAA-F5FC-4442-9923-F60B86DB61F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101776",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170809-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170809-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T02:29:20.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka \"Inaudible Subversion.\""
      }, {
        "lang" : "es",
        "value" : "Los paquetes de controladores Savitech para Windows instalan silenciosamente un certificado autofirmado en el almacén Trusted Root Certification Authorities. Esto también se conoce como \"subversión inaudible\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savitech-ic:savitech_driver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.0.3",
            "matchCriteriaId" : "EA9B85C7-24EE-485F-B370-9FBF645084BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101700",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/446847",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://zeroday.hitcon.org/vulnerability/ZD-2017-00386",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/446847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://zeroday.hitcon.org/vulnerability/ZD-2017-00386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T09:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 5.8.2 de Inedo BuildMaster, se utilizó XslTransform donde se debería haber empleado XslCompiledTransform."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:buildmaster:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.2",
            "matchCriteriaId" : "D65CF03B-940F-4885-B9AC-7FD9374C44A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/buildmaster/versions#v5.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3108",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/buildmaster/versions#v5.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/EDO-3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T09:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inedo BuildMaster before 5.8.2 has XSS."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 5.8.2 de Inedo BuildMaster tienen Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:buildmaster:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.2",
            "matchCriteriaId" : "D65CF03B-940F-4885-B9AC-7FD9374C44A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3100",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T09:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redirección abierta en Inedo BuildMaster en versiones anteriores a la 5.8.2 permite que atacantes remotos redireccionen usuarios a sitios web arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:buildmaster:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.2",
            "matchCriteriaId" : "D65CF03B-940F-4885-B9AC-7FD9374C44A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/buildmaster/versions#v5.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/buildmaster/versions#v5.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T09:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 0.5.1 de Sanic permiten la lectura de archivos arbitrarios con salto de directorio, tal y como se demuestra con la subcadena /static/..%2f."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sanic_project:sanic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "67986753-2441-4012-B464-11D28F96D310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/channelcat/sanic/issues/633",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/channelcat/sanic/releases/tag/0.5.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/channelcat/sanic/issues/633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/channelcat/sanic/releases/tag/0.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T09:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from \"~/.confire.yaml\" using the yaml.load function, a YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de análisis sintáctico YAML en config.py en Confire 0.2.0. Debido a la carga de la configuración específica de usuario en \"~/.confire.yaml\" empleando la función yaml.load, un analizador sintáctico YAML puede ejecutar comandos Python arbitrarios. Esto tiene como resultado la ejecución de comandos. Un atacante puede insertar código python en el YAML cargado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:confire_project:confire:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00ABD23A-66F4-43F0-B7A5-05089D622888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bbengfort/confire/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bbengfort/confire/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T09:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la funcionalidad de análisis sintáctico de YAML en el método read_yaml_file en io_utils.py en django_make_app 0.1.3. Un analizador sintáctico YAML puede ejecutar comandos python arbitrarios, lo que resulta en la ejecución de comandos. Un atacante puede insertar código python en el YAML cargado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:django_make_app_project:django_make_app:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0E3904-6C2C-40FA-930D-9794D3784334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/illagrenan/django-make-app/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/illagrenan/django-make-app/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) en dispositivos D-Link DWR-933 1.00(WW)B17 mediante cgi-bin/gui.cgi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-933_firmware:1.00\\(ww\\)b17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A283CA-DE97-468F-A28F-351148F6617B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-933:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1923E84-3FC4-452E-AE90-D741D89D7722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/shiham101/d8f98d4ce302c12576f39af2ad2448ca",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/shiham101/d8f98d4ce302c12576f39af2ad2448ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T23:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file."
      }, {
        "lang" : "es",
        "value" : "El instalador en MyBB en versiones anteriores a la 1.8.13 permite que atacantes remotos ejecuten código arbitrario escribiendo en el archivo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.12",
            "matchCriteriaId" : "52EEFACF-D046-478B-801D-CC39CAAD6555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43136/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43136/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T23:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer in MyBB before 1.8.13 has XSS."
      }, {
        "lang" : "es",
        "value" : "El instalador en MyBB en versiones anteriores a la 1.8.13 tiene Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.12",
            "matchCriteriaId" : "52EEFACF-D046-478B-801D-CC39CAAD6555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43137/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43137/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T23:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS."
      }, {
        "lang" : "es",
        "value" : "En las versiones anteriores a la 0.57 de Home Assistant, es posible inyectar código JavaScript en una notificación persistente mediante texto Markdown manipulado. Esto también se conoce como Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:home-assistant:home-assistant:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.56.2",
            "matchCriteriaId" : "DD34D9B6-C32E-4190-A641-C4E5EBDCFA78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/home-assistant/home-assistant-polymer/pull/514",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/home-assistant/home-assistant-polymer/pull/514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T23:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter."
      }, {
        "lang" : "es",
        "value" : "En CMS Made Simple 2.1.6, existe inyección de plantillas del lado del servidor mediante el parámetro cntnt01detailtemplate."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC308C-C925-443C-94D1-E0D3B6E6BBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/159690/CMS-Made-Simple-2.1.6-Server-Side-Template-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-17-032-server-side-template-injection-vulnerability-in-cms-made-simple/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/159690/CMS-Made-Simple-2.1.6-Server-Side-Template-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-17-032-server-side-template-injection-vulnerability-in-cms-made-simple/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T23:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter."
      }, {
        "lang" : "es",
        "value" : "En CMS Made Simple 2.2.2, existe Cross-Site Scripting (XSS) reflejado mediante el parámetro cntnt01detailtemplate."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374F6E2F-C2A4-46D4-9932-FCE2FFFFAB07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-17-031-reflected-xss-vulnerability-in-cms-made-simple/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-17-031-reflected-xss-vulnerability-in-cms-made-simple/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-10T23:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php."
      }, {
        "lang" : "es",
        "value" : "Cacti 1.1.27 tiene XSS reflejado mediante PATH_INFO en host.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B513DA-BA6E-4BE9-B299-F02F3784262C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039774",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Cacti/cacti/issues/1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-11T00:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 5.8.2 de Inedo BuildMaster no restringen correctamente la creación de escuchas de eventos RequireManageAllPrivileges."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:buildmaster:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.2",
            "matchCriteriaId" : "D65CF03B-940F-4885-B9AC-7FD9374C44A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/buildmaster/versions#v5.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/blog/buildmaster-582-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/buildmaster/versions#v5.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/BM-3107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-12T05:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (incorrect malloc and heap-based buffer overflow) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función wav_convert2mono en lib/wav.c en SWFTools 0.9.2 no valida correctamente los datos WAW, lo que permite que atacantes remotos causen una denegación de servicio (malloc incorrecto y desbordamiento de búfer basado en memoria dinámica o heap) o posiblemente otro impacto no especificado mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-12T05:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf."
      }, {
        "lang" : "es",
        "value" : "La función png_load en lib/png.c en SWFTools 0.9.2 no valida correctamente una multiplicación de valores de ancho y de bits-por-pixel, lo que permite que atacantes remotos causen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de la aplicación), tal y como demuestra una llamada png_load incorrecta que ocurre debido a los tipos de datos de enteros incorrectos en png2swf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-12T18:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service (invalid write and application crash) or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file."
      }, {
        "lang" : "es",
        "value" : "En SWFTools 0.9.2, la función png_load en lib/png.c no comprueba el valor de retorno de una llamada realloc, lo que permite a los atacantes remotos provocar una denegación de servicio (escritura no válida y cierre inesperado de la aplicación) o, posiblemente, otro impacto no especificado mediante vectores que afectan a una etiqueta IDAT en un archivo PNG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/51",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-12T18:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file."
      }, {
        "lang" : "es",
        "value" : "En SWFTools 0.9.2, la función png_load en lib/png.c no valida correctamente una multiplicación de alloclen_64 entre los valores de anchura y altura, lo que permite a los atacantes remotos provocar una denegación de servicio (desbordamiento de enteros, desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o, posiblemente, otro impacto no especificado mediante un archivo PNG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/51",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-12T18:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a \"php\" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by .phtml, .pht, .html, or .svg."
      }, {
        "lang" : "es",
        "value" : "En CMS Made Simple 2.2.3.1, la función is_file_acceptable en modules/FileManager/action.upload.php solo bloquea las extensiones de archivo que empiezan o finalizan con una subcadena \"php\", lo que permite a los atacantes remotos omitir las restricciones de acceso planeadas o desencadenar Cross-Site Scripting (XSS) mediante otras extensiones, tal y como se demostró con .phtml, .pht, .html o .svg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A968051-0C53-434A-9EAF-9348D4B66C44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bsmali4/cve/blob/master/CMS%20Made%20Simple%20UPLOAD%20FILE%20XSS.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bsmali4/cve/blob/master/CMS%20Made%20Simple%20UPLOAD%20FILE%20XSS.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-12T18:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882."
      }, {
        "lang" : "es",
        "value" : "En CMS Made Simple 2.2.3.1, en modules/New/action.addcategory.php, Cross-Site Scripting (XSS) persistente es posible mediante el parámetro m1_name en admin/moduleinterface.php a la hora de añadir una categoría. Esta es una vulnerabilidad relacionada con CVE-2010-3882."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cmsmadesimple:2.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95E4AD1-0B1D-41E3-9F03-8FA5BFF2FC29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bsmali4/cve/blob/master/CMS%20Made%20Simple%20Stored%20XSS.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bsmali4/cve/blob/master/CMS%20Made%20Simple%20Stored%20XSS.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13782",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtrace_dif_variable and dtrace_getarg functions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.1. El problema afecta al componente \"Kernel\". Permite que atacantes omitan las restricciones planeadas de lectura de memoria mediante un ataque /dev/dtracehelper que implica las funciones dtrace_dif_variable y dtrace_getarg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172827/Apple-XNU-Kernel-Memory-Exposure.html",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lgtm.com/blog/apple_xnu_dtrace_CVE-2017-13782",
        "source" : "product-security@apple.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172827/Apple-XNU-Kernel-Memory-Exposure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lgtm.com/blog/apple_xnu_dtrace_CVE-2017-13782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13783",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43172/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43172/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13784",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43171/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43171/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13785",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43170/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43170/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13786",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"APFS\" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.1. El problema afecta al componente \"APFS\". No restringe correctamente el tiempo de asignación DMA de los búfers de descifrado FileVault, lo que permite que atacantes lean datos APFS en texto claro mediante un adaptador Thunderbolt manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13788",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13789",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple.. Se ha visto afectado Safari en versiones anteriores a la 11.0.1. El problema afecta al componente \"Safari\". Permite que atacantes remotos suplanten la barra de direcciones mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "FE96E49D-D659-48B4-A706-CD20497E468C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039706",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13790",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the \"Safari\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple.. Se ha visto afectado Safari en versiones anteriores a la 11.0.1. El problema afecta al componente \"Safari\". Permite que atacantes remotos suplanten la barra de direcciones mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "FE96E49D-D659-48B4-A706-CD20497E468C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039706",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13791",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43176/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43176/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13792",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43167/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43167/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13793",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13794",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11,1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43174/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43174/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13795",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43169/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43169/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13796",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43166/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43166/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13797",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43168/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43168/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13798",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43175/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43175/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13799",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.863",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1, las versiones de macOS anteriores a la 10.13.1, las versiones de tvOS anteriores a la 11.1 y las versiones de watchOS anteriores a la 4.1. El problema afecta al componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "ED3E7513-7096-4DD8-9D63-2F6C1AEE2DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13800",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"APFS\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.1. El problema afecta al componente \"APFS\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13801",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Dictionary Widget\" component. It allows attackers to read local files if pasted text is used in a search."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.1. El problema afecta al componente \"Dictionary Widget\". Permite que atacantes lean archivos locales si el texto pegado se emplea en una búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13802",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43173/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43173/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13803",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. Se han visto afectadas las versiones de Safari anteriores a la 11.0.1, las versiones de iCloud anteriores a la 7.1 en Windows, las versiones de iTunes anteriores a la 12.7.1 en Windows y las versiones de tvOS anteriores a la 11.1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "8EE2A2AE-D82B-445B-B6A8-9FDF42C16C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "92D311BC-5FC4-4988-9342-BC1A5D11E4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.1",
            "matchCriteriaId" : "2624D608-6934-4279-BBCA-60963736C0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13804",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the \"StreamingZip\" component. It allows remote attackers to write to unintended pathnames via a crafted ZIP archive."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1, las versiones de macOS anteriores a la 10.13.1, las versiones de tvOS anteriores a la 11.1 y las versiones de watchOS anteriores a la 4.1. El problema afecta al componente \"StreamingZip\". Permite que atacantes remotos escriban a nombres de ruta no planeados mediante un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "ED3E7513-7096-4DD8-9D63-2F6C1AEE2DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13805",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the \"Siri\" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been available in the lock-screen state."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.1. El problema afecta al componente \"Siri\". Permite que atacantes físicamente cercanos obtengan información sensible mediante una petición Siri a notificaciones de contenido privado que no deberían haber estado disponibles en estado de pantalla de bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13807",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Audio\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted QuickTime file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.1. El problema afecta al componente \"Audio\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (consumo de memoria) mediante un archivo QuickTime manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13808",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Remote Management\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Remote Management\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante un app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13809",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"AppleScript\" component. It allows remote attackers to execute arbitrary code via a crafted AppleScript file that is mishandled by osadecompile."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"AppleScript\". Permite que los atacantes remotos ejecuten código arbitrario mediante un archivo AppleScript manipulado que osadecompile gestiona de manera incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13810",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows local users to obtain sensitive information by leveraging an error in packet counters."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los usuarios locales obtengan información sensible al aprovechar un error en los contadores de paquetes"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13811",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"fsck_msdos\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"fsck_msdos\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13812",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"libarchive\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted archive file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"libarchive\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria o cierre inesperado de la aplicación) mediante un archivo comprimido manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13813",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"libarchive\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted archive file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"libarchive\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (desbordamiento de búfer o cierre inesperado de la aplicación) mediante un archivo comprimido manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13814",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"ImageIO\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"ImageIO\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria o cierre inesperado de la aplicación) mediante un archivo de imagen manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13815",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party \"file\" product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al producto tercero \"file\". Las versiones anteriores a la 5.31 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13816",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"libarchive\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted archive file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"libarchive\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (desbordamiento de búfer o cierre inesperado de la aplicación) mediante un archivo comprimido manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13817",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows local users to bypass intended memory-read restrictions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de lectura fuera de límites en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los usuarios locales omitan las restricciones de lectura de memoria planeadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13818",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13819",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"HelpViewer\" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML by bypassing the Same Origin Policy for quarantined HTML documents."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"HelpViewer\". Una vulnerabilidad Cross-Site Scripting (XSS) permite que atacantes remotos inyecten scripts web o HTML arbitrarios omitiendo la política del mismo origen para los documentos HTML en cuarentena."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13820",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"ATS\" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted font."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"ATS\". Permite a los atacantes remotos obtener información sensible de la memoria del proceso o provocar una denegación de servicio (corrupción de memoria) mediante una fuente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13821",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"CFString\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"CFString\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13822",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Quick Look\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Quick Look\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13823",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"QuickTime\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"QuickTime\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13824",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Open Scripting Architecture\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted AppleScript file that is mishandled by osadecompile."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Open Scripting Architecture\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria) mediante un archivo AppleScript manipulado que osadecompile gestiona de manera incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13825",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted font file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"CoreText\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (consumo de memoria) mediante un archivo de fuentes manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13826",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.850",
      "lastModified" : "2023-11-07T02:38:43.793",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-10140.  Reason: This candidate is a reservation duplicate of CVE-2017-10140.  Notes: All CVE users should reference CVE-2017-10140 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13828",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Fonts\" component. It allows remote attackers to spoof the user interface via crafted text."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Fonts\". Permite que los atacantes remotos suplanten la interfaz de usuario mediante un texto manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13829",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"CFNetwork\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"CFNetwork\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13830",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:01.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"HFS\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"HFS\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13831",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"ImageIO\" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"ImageIO\". Permite a los atacantes remotos obtener información sensible o provocar una denegación de servicio mediante una imagen manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13832",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"802.1X\" component. It allows attackers to have an unspecified impact by leveraging TLS 1.0 support."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"802.1X\". Permite que los atacantes causen un impacto no especificado aprovechando la compatibilidad con TLS 1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13833",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"CFNetwork\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"CFNetwork\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13834",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted mach binary."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, otro impacto no especificado mediante un binario mach manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13836",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13838",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Sandbox\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Sandbox\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13840",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13841",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13842",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13843",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13844",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the \"Messages\" component. It allows physically proximate attackers to view arbitrary photos via a Reply With Message action in the lock-screen state."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.1 se han visto afectadas. El problema afecta al componente \"Messages\". Permite que los atacantes próximos físicamente visualicen fotos arbitrarias mediante una acción Reply With Message en el estado de bloqueo de pantalla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13846",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party \"PCRE\" product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al producto tercero \"PCRE\". Las versiones anteriores a la 8.40 permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13849",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to cause a denial of service (application crash) via a crafted text file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.1, las versiones de tvOS anteriores a la 11.1 y las versiones de watchOS anteriores a la 4.1 se han visto afectadas. El problema afecta al componente \"CoreText\". Permite que los atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante un archivo de texto manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "ED3E7513-7096-4DD8-9D63-2F6C1AEE2DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101691",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43161/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43161/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13852",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the \"Kernel\" component. It allows attackers to monitor arbitrary apps via a crafted app that accesses process information at a high rate."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.1, las versiones de macOS anteriores a la 10.13.1, las versiones de tvOS anteriores a la 11.1 y las versiones de watchOS anteriores a la 4.1 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes monitoricen apps arbitrarias mediante una app manipulada que accede a la información de procesamiento a gran velocidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "40887CF6-2E86-4D09-BBEB-2D24D6179531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "ED3E7513-7096-4DD8-9D63-2F6C1AEE2DBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208219",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7113",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the \"UIKit\" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.1 se han visto afectadas. El problema afecta al componente \"UIKit\". Permite que los atacantes omitan las restricciones de lectura planeadas planeadas para los campos de texto seguros mediante vectores que involucran un evento focus-change."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "CC194892-4EE5-4F92-93CB-19FB6E0BE235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7132",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-13T03:29:02.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Quick Look\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted Office document."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Quick Look\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (consumo de memoria) mediante un documento Office manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.13.0",
            "matchCriteriaId" : "7423593E-2B13-4369-A525-377AF02C01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0908",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-13T09:29:00.200",
      "lastModified" : "2023-11-07T02:37:48.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-16510.  Reason: This candidate is a reservation duplicate of CVE-2017-16510.  Notes: All CVE users should reference CVE-2017-16510 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T09:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by leveraging a guest/user/normal account to submit a modified privilege parameter to /form2userconfig.cgi."
      }, {
        "lang" : "es",
        "value" : "Una escalada de privilegios en dispositivos iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 permite que usuarios remotos autenticados obtengan privilegios root aprovechando una cuenta guest/user/normal para enviar un parámetro privilege modificado a /form2userconfig.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iball:ib-wra300n3gt_firmware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C1DB5E-ADF4-4A14-8D33-CA079D560E9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iball:ib-wra300n3gt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300772D8-55FE-4D77-9410-077527BF5A73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.uniquish.tech/2017/11/privelege-escalation-in-iball-ib.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.uniquish.tech/2017/11/privelege-escalation-in-iball-ib.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T09:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Kickbase GmbH \"Kickbase Bundesliga Manager\" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to a credentials leak due to transmitting a username and password in cleartext from client to server during registration and authentication."
      }, {
        "lang" : "es",
        "value" : "La app \"Kickbase Bundesliga Manager\" de Kickbase GmbH en versiones anteriores a la 2.2.1 (también llamada kickbase-bundesliga-manager/id678241305) para iOS es vulnerable a un filtrado de credenciales debido a la transmisión de un nombre de usuario y contraseña en texto claro del cliente al servidor durante el registro y la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kickbase:bundesliga_manager:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "6D39E046-B063-4E3D-838F-FCB5DD1B8B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T09:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting (XSS) vulnerability in \"geminabox\" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the \"homepage\" value of a \".gemspec\" file, related to views/gem.erb and views/index.erb."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en \"geminabox\" (Gem in a Box) en versiones anteriores a la 0.13.10 permite que atacantes inyecten scripts web arbitrarios mediante el valor \"homepage\" de un archivo \".gemspec\". Esto se relaciona con views/gem.erb y views/index.erb."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geminabox_project:geminabox:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "0.13.10",
            "matchCriteriaId" : "2D7AAB65-577C-4393-A7FB-1EE2A60DF95B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://rubygems.org/gems/geminabox/versions/0.13.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://rubygems.org/gems/geminabox/versions/0.13.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T09:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbitrary web script or HTML via the Step Template Name parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en versiones anteriores a la 3.7.0-3.17.13 (solucionado en la 3.17.14) de Octopus Deploy permite que usuarios remotos autenticados inyecten scripts web o HTLM arbitrarios mediante el parámetro Step Template Name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndIncluding" : "3.17.3",
            "matchCriteriaId" : "7CD4567E-B7CB-4540-95B3-84E329E6266D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3915",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8806",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-13T09:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local denial of service by overwriting arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Los scripts de Debian pg_ctlcluster, pg_createcluster y pg_upgradecluster, tal y como se distribuyen en el paquete de Debian postgresql-common anterior a 181+deb9u1 para PostgreSQL (y otros paquetes relacionados con Debian y Ubuntu), manipularon vínculos simbólicos de forma no segura, lo que podría desembocar en una denegación de servicio local sobrescribiendo archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC070DF-4131-43BA-B975-907023E0D39F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metadata.ftp-master.debian.org/changelogs/main/p/postgresql-common/postgresql-common_181+deb9u1_changelog",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101810",
        "source" : "security@debian.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3476-1/",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4029",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://metadata.ftp-master.debian.org/changelogs/main/p/postgresql-common/postgresql-common_181+deb9u1_changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3476-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10871",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-13T14:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en NTT DOCOMO Wi-Fi STATION L-02F con software versión L02F-MDM9625-V10h-JUN-23-2017-DCM-JP y anteriores permiten que un atacante ejecute código arbitrario mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nttdocomo:wi-fi_station_l-02f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "l02f-mdm9625-v10h-jun-23-2017-dcm-jp",
            "matchCriteriaId" : "962D8560-EBAE-4BB1-A3A2-4411997236EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nttdocomo:wi-fi_station_l-02f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9DC948-D3C0-4D1C-B190-0253054243FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN23367475/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN23367475/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10875",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-13T14:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "I-O DATA DEVICE LAN DISK Connect Ver2.02 y anteriores permite que un atacante provoque una denegación de servicio en la aplicación mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:lan_disk_connect_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.02",
            "matchCriteriaId" : "4460AACD-9446-4CEA-85C7-38CD715F828C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:lan_disk_connect:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B5A342-A194-47CA-B16B-3901BA38400F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN87886530/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/ld-connect/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN87886530/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.iodata.jp/support/information/2017/ld-connect/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10885",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-13T14:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo ruta de búsqueda no fiable en HYPER SBI Ver. 2.2 y anteriores permite que un atacante obtenga privilegios mediante un DLL troyano en un directorio sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sbisec:hyper_sbi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "8A695E0B-E18A-4417-9ECB-082D6237F9A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN71284826/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN71284826/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3166",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-13T14:29:00.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization mechanism, that file will be stored in a world-readable location and can be shared freely with any application that requests to localize that file."
      }, {
        "lang" : "es",
        "value" : "En Apache Hadoop, en versiones 2.6.1 a 2.6.5, 2.7.0 a 2.7.3 y 3.0.0-alpha1, si un archivo en una zona de cifrado con permisos de acceso que lo hacen legible para todos los usuarios se localiza mediante el mecanismo de localización de YARN, ese archivo será almacenado en una localización legible por todos los usuarios y puede ser compartido libremente con cualquier aplicación que solicite localizar ese archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "569A25D2-6BAE-4AF3-B5A4-E578F5BF4000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0303DDA4-A5C1-4358-A4DC-F85C1B2E3254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F54CBB-0D44-4F8F-A45D-330213E0C349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B60011-6E60-4DBC-957B-C1F1CBB2B777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F6B3B1-8C97-42F4-B5C0-B821B0866D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E1BC92-93DF-479F-8C05-672ADF348565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CACFCC5-8A44-4DAE-A83F-139B488509A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE605CB-8A00-45EC-9DAA-775D4E9F5B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9437CAB-BAA4-40E1-9A24-2A801AA132F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "C33530ED-6093-4B4C-AFDB-4DB5EB5878E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/2e16689b44bdd1976b6368c143a4017fc7159d1f2d02a5d54fe9310f%40%3Cgeneral.hadoop.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/2e16689b44bdd1976b6368c143a4017fc7159d1f2d02a5d54fe9310f%40%3Cgeneral.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7739",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-11-13T14:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting reflejado en las páginas web de respuesta a mensajes de proxies web en Fortinet FortiOS en versiones 5.6.0, 5.4.0 a la 5.4.5 y la 5.2.0 a la 5.2.11 permite que un atacante sin autenticar inyecte scripts web o HTML arbitrarios en el contexto del navegador de la víctima enviando una URL maliciosamente manipulada a la víctima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E627C59-7C16-44F0-800D-A2E8A766B26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233236FA-BB13-4261-BE2E-3E617406DC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27844CC9-498B-4A65-91AC-AC130222EE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B4C672-7ED5-4113-87AE-5774D1263C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CB7A90-91BC-49AF-9B5C-EBD212484C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D3221-177B-43CE-BD7D-CB14A110268E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C186D6-6AC5-49EB-A701-C91358B4A25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC9F6C4-F887-4F25-87BD-383F6CF39806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8558962-7A19-4F4A-BED0-9CB5D4CFC422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC63D521-EC88-4B13-BC73-3284F3FCF3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB756AF8-F9D2-472E-867B-C04D11F62FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668AE14-D9A4-4B7D-BC3F-75885792875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A2F0B-2A58-4C2C-B546-3178B353484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBDFD4-45A0-47CC-817E-48E84F945402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101679",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039741",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-168",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added."
      }, {
        "lang" : "es",
        "value" : "En la función sharingGroupPopulateOrganisations en app/webroot/js/misp.js en MISP 2.4.82 existe XSS mediante un nombre de organización añadido manualmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:misp:2.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E69BD26-5502-463A-B63F-C48E0A90506B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3767",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-11-13T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de escalado de privilegios en las versiones anteriores a la 6.0.1.8224 del controlador de audio Realtek en productos Lenovo ThinkPad. Un atacante con privilegios locales podría ejecutar código con privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:realtek:audio_driver_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.1.8224",
            "matchCriteriaId" : "C5CB6C7A-AC02-466E-A751-95E5D7DC05A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D70BE2-1945-4164-ACE8-8BBCDE1D6D67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247E4294-2547-4A1D-942A-170DA5DDB388"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAD24C2-BA08-4827-A19A-33C4D71C573F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A581500-3F97-4B68-92F9-0EE9182603CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE4E9C-5296-4FB5-A2FD-363D4682E6D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l470_kbl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D7F96-0F40-411A-9EE9-7640E9B7E8C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l470_skl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C86E79D-F40D-4151-A5CA-C797A40D7ADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A146DB0-4E3D-491B-8D30-EBF0F3BC17B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F583B121-A68C-463B-9D72-06061F74D007"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1669BD8-C96F-4302-8E80-53D90EA719CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50A012-EFAE-485E-AADB-7D0AADEF21AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA5DC9E-8AC7-4A57-979A-09B93FADF461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39513D4D-DE8B-4D9C-BB79-EFAD6E3226B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_yoga_12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52944176-C48C-4439-B0F5-9584491867CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546EB3DE-4A03-4C52-A00C-FDCBFBD21EB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A4F2A0-BA6D-48F7-8805-7CE17AEE6DE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A6E989-646D-4B08-A475-BFF70B6286F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF1A0BA-A517-4BDA-9B10-07284A572577"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D943E973-EEAF-48E6-BD8A-05C61EA4FD0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t450s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB7FFCD-F586-4846-9053-B56EA599D4EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86FD3AD-D731-4C30-8A72-EC1A45B203F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t460p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E6AE13-913E-4FD7-A0DC-F554605F81B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E38817-144F-41B9-9EE5-2A78F4DBC718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8796BA28-2705-4798-A95C-A821BB941A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470s_skl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B71CE5D-B293-452A-919E-F55857AFD7C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E207A025-49AB-4886-BDD9-36D624D40D6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D79966D-08A3-428F-B4EC-CAAC8F4CF435"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84478711-E030-42CD-9B8A-0C54C8DB8128"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC1A912-C9FA-4D12-97A3-1D53B8209314"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A51FFE-257C-4609-BC14-C0DE0969E7F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23267973-5F08-43C5-9C92-F429B84D3245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9E7845-CEA3-43A4-8978-F447A45E0E53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_tablet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C63844-B6F1-46B4-9267-361D7B94FD8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45044ABC-76BF-475E-9B12-A77901172E5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F037D95-3E77-49DF-9E06-A30A94A499AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E250F0-9F11-4BD6-A71A-4D2C82F193B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2462DB48-9AC0-4E1F-A925-2DFC0CB54BB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA076E5-D554-4570-B5E3-FE78CEC024B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08393A13-D68E-4042-B223-EF80E581EEBC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x270_kbl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C5691D-3050-4436-B5E6-2D0D2FBF8A10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x270_skl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014780DC-38B1-45B0-A94C-85B80C784758"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C2E66F-B45C-4850-8C19-2AD84939173C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15759",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-15759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9314",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2017-11-13T16:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de autenticación en Dahua NVR, modelos NVR50XX, NVR52XX, NVR54XX y NVR58XX con software anterior a DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Un atacante podría explotar esta vulnerabilidad para obtener acceso a operaciones adicionales por medio de la falsificación de un mensaje json."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5464-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5464_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "455F6166-5B57-454D-A129-4ABBEB5864DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5464-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BA97ED-5AA5-4E99-B649-ED2D99653AB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5208-8p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5208_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "45C9867A-473C-428C-A87B-61B6872780A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5208-8p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9994EC-1551-4A42-8325-117EB4C6923C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5432-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5432_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "7FBD4C04-2192-459E-B02F-2078CF5FDDDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5432-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08ECF8EA-390C-4644-851E-97B874365D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5416-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5416_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "93624BD5-40D0-44B6-B45D-E242D0B56D09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5416-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80334423-F891-46CC-9C8C-9E6F7DCD9740"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5464-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5464_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "1ADE0E10-92C2-4637-89AD-AE53720F02D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5464-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B76D8A-B8E8-4E52-9F89-BACD01DDC002"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5432-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5432_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "0466CAEE-4A95-498B-9783-7AE74836496C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5432-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3D1489-0D42-4703-9BC9-29F2BC50F70B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5416-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5416_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "5613E723-2392-48FA-904A-D6D3E503981C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5416-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8831C88-C677-457C-95E1-4B4847C29F66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5232-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5232_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "32B736CB-8C01-4132-B519-BF3B72892855"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5232-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382E45C1-AF5A-4854-B2B7-BB5A1223E9B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5216-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5216_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "CE28E463-8D68-4C63-A0EC-CE3E6CA43CF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5216-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB7E42B-E55A-44D6-96A0-20F23653632D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5232-8p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5232_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "42F709B9-74BA-479C-9244-9BD86FAECBB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5232-8p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5824B3C-B3B5-47CC-A1FD-4893F1C370E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5216-8p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5216_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "55DC2D7F-1813-4040-8574-9ABBA2119738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5216-8p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38D0C2C-5DA2-463C-9A24-76258BEBBC34"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5232-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5232_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "375A2910-9C6B-4845-AC33-881303E7ABBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5232-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBE5CA4-D72C-4FF9-B79C-B3CA36A0D667"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5216-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5216_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "F0D80BE0-017F-40CF-9D95-E6395AA4BE9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5216-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215376BF-5B2F-4861-91AD-9AD3A46269AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5208-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5208_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "042DB071-CBD0-49DA-9CD3-64954C9F9B8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5208-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7553572-28F2-497E-98A3-4ADF48F2E55B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5816-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5816_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "795A9CA6-E751-4F81-BBC2-B80CE49CA192"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5816-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B05BDB-F36F-4A17-B674-1EE387001611"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5832-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5832_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "0FE444BD-11DE-4300-909A-01BA1BE5CC71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5832-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A994E24-6790-4F2F-A192-CE917C75A11D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5864-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5864_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "640EFAAF-9EB5-4695-8FCF-F440752E6BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5864-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8453598C-8D1F-46CA-B7B7-BFB71BE4A114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5864-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5864_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "08996536-306E-4163-BD8B-33475193E95D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5864-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D84CA1-8136-4150-BB85-0161D75A63F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5832-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5832_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "336AD790-9979-4A94-9DFA-654542B01702"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5832-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A140230F-F5EB-4CEA-9996-0DA9EDEA2267"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5816-16p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5816_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "0726A0A7-C0E9-4347-9316-2F2354B52E69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5816-16p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B32FAD-9DFD-4B27-9E2D-070362C32635"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5424-24p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5424_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "7DE4D8DE-1A09-4A95-81B5-6AE3516C450E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5424-24p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2620A8D6-5B24-4E93-AD91-0D2DF78722D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr5224-24p-4ks2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_nvr5224_eng_p_v2.616.0000.0.r.20171102",
            "matchCriteriaId" : "2BD642C4-4039-45F2-B9CF-98575B24C353"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr5224-24p-4ks2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80484CC-016E-4FED-8F86-8D5CFC1CBD69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html",
        "source" : "cybersecurity@dahuatech.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0889",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-13T17:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources."
      }, {
        "lang" : "es",
        "value" : "La gema de Ruby Paperclip en su versión 3.1.4 y siguientes sufre de una vulnerabilidad Server-Side Request Forgery (SSRF) en la clase Paperclip::UriAdapter. Los atacantes podrían ser capaces de acceder a información sobre recursos de la red interna."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thoughtbot:paperclip:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "3.1.4",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "36D3092D-A988-486C-99A8-B0D53FA84A32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thoughtbot/paperclip/pull/2435",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/209430",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://hackerone.com/reports/713",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thoughtbot/paperclip/pull/2435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/209430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://hackerone.com/reports/713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0904",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-13T17:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery."
      }, {
        "lang" : "es",
        "value" : "La gema de Ruby private_address_check en versiones anteriores a la 0.4.0 es vulnerable a una omisión debido al uso del método de Ruby Resolv.getaddresses, que depende del sistema operativo y del que no se debería depender para aplicar medidas de seguridad, como cuando se emplea para bloquear direcciones de red privadas para evitar Server-Side Rrequest Forgery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-242"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:private_address_check_project:private_address_check:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "0201F942-329A-43A4-B384-8A3257C7D6F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://edoverflow.com/2017/ruby-resolv-bug/",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jtdowney/private_address_check/issues/1",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/287245",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/287835",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://edoverflow.com/2017/ruby-resolv-bug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jtdowney/private_address_check/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/287245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/287835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0905",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-13T17:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the \"Resource#find\" method that could result in compromise of API keys or other critical resources."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de Ruby Recurly Client en versiones anteriores a la 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4 y 2.11.3 es vulnerable a Server-Side Request Forgery en el método \"Resource#find\" que podría conllevar el compromiso de las claves API o de otros recursos críticos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2111C93-1F01-4B79-B731-14E639037521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0E6539-B427-4F49-8F7D-9D7778E2174B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DCAD09-8071-4965-88B6-64D83F9FEDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A049E-4B43-4FF8-9AFC-803A85ABF7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1515F4-4B33-4A04-8448-A2E4397B1581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5215C59F-D763-41F4-9673-77B64481DF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667CAF6A-2F8D-498A-9797-CEB2C457F967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78812028-9678-48FF-83B4-C6BA0DA5ED95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC2ABD2-E685-45E4-A423-909DF3C8FABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1169885A-59C3-40B8-AC53-625A20A40295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B660902B-353C-4917-A607-3DEBB076B130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE4D650-30B2-461C-BB58-E56112B21E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429B0B74-B230-428A-BF7D-FDE45FACBA7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D6ED01-8289-4F93-ADC6-0E5C5E8BD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.0:c:*:*:*:*:*:*",
            "matchCriteriaId" : "13ABB028-6997-40DC-B61E-27238BEF99A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3746FE6C-CE9F-4267-871D-D585CD404305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F725D5E4-E81F-4DB7-AE22-F9A36872CC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29351445-7C64-4409-9B5E-5AEBB96FC4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8516A98B-AE81-48A9-BBBA-9F050FE0AD60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6F5715-A3D5-4CCC-9645-AFB56E26FD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD7D5EB-4C42-4966-ACAA-185DA5ECB72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C65414F-75FC-4C15-8265-F73E9BFAB067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16944240-53F2-4F7D-9C29-DF2B0CA5C763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1A64D2-F06A-490B-8D59-B6F9B83E9152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58881236-C96F-461C-BFE0-5880039C1203"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC547D0F-E1FB-4C19-A3D0-D3FC48E4EDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AFBA9B-BFA3-494C-90B9-55F3D18604DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066D3983-6BF1-4416-B87E-725122DF82EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FBEB10-5B34-47F6-85BC-8995CE77AC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869018B3-4286-4D34-B69F-4749A61DC1A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95919D64-1B0F-4005-BDF8-C390DBA181E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8A6E88-C153-440B-AEC6-EBA2BFD3E2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8F03AC-BD84-4D2A-B6DC-94BF509C3C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E288DC42-7D2E-404D-85FF-CA02CFD16164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E53C11E-E506-4113-95D8-C526E70A2AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BC2A4D-D523-4B82-872C-EF2D1F70992D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33692513-74D9-472C-B3D3-54F06C835832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09210851-79D4-49B5-994E-07E40C489D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021F44A-CD23-4D15-9411-20F0E28C7D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C5ADAE-E620-4440-8C3D-D071A279FB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A810DF15-CCDF-4D5E-A3A2-4DF852D9CBF4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D427209-016F-4115-9447-7F96875A7D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D5AD56-959D-4990-9B43-170D9083CDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78789F09-77A2-4A86-882D-DEA4E52ED6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0737A57D-411D-4BB5-83FC-15900B0D9150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633161B1-1E51-40E9-8EE2-9EDCDDA653D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2CC4EA-8D08-42D8-A822-78042CD7946D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91083CF3-8A5C-4178-A91A-BB6DE3C2BAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC8E96-C437-4016-8A22-F402BF6B8E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E8AD18-59DF-45BD-AB25-F62CAEC223FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BDD100-4A8E-4700-9377-22AB1483E76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E580467-9DC2-43CC-8C00-92BCFC4DA49A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01596D40-6039-4626-AF32-FE4C217EE120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED738A23-EB6C-4BAF-9CDF-209C6EF8E70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26315E34-0869-4A18-B9E7-4E3306FAB4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881A7D1C-769C-4B10-9034-E017CD300280"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4775539-0309-4FEA-BE79-2D45FE4E0B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E684118-BCA4-4A8F-A49C-87B06294523F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24E0F3B-EA8D-4D67-B16E-244E8954155F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF8F56B-BEF3-4276-9B38-C8C1A0867B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A41F7A0-B271-4060-80F2-8E6B2B6051E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE24079A-61D1-411E-BAA7-6B75251CAAC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81EFB16F-267E-417A-AF3E-E20E674FC59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C6786-1E84-4906-BE56-938FEC02E7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928F451E-6416-455C-8F3E-56FC918A3AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C38ACD-05EB-4EDE-8BDC-CDEA4EDF4C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0148307A-7F03-4B83-BAC5-A090B534DD9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665A2524-FA33-4BF1-B496-160964DB71D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4373D8-DBC3-4B3C-A911-2EEC94668694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "50F53821-6B2E-47B5-898A-72BA03DE9889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429C418A-A716-4A8D-A8FD-5A895F4BBA11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE4E79E-5DD5-48D7-8254-14CF61EEAA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF88DD8B-3243-484E-9ED5-BF5C99D69D25"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD6D773-CF96-4E8C-82FC-187116AEE584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA30686-C9AA-4031-B2F9-C5779B34D8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FFF737-4974-43C8-8C2F-475BFB05CA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BACB549-4C65-4B09-8C0F-ABC662B52016"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1607963B-FBC3-4A32-A2D8-9ACBAFD97962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002E6140-C28B-4CDE-8EFF-90CB4768F4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_ruby:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C509480-F8E5-4A7D-ADA7-235D5F2C8A94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.recurly.com/page/ruby-updates",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/recurly/recurly-client-ruby/commit/1bb0284d6e668b8b3d31167790ed6db1f6ccc4be",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288635",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://dev.recurly.com/page/ruby-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/recurly/recurly-client-ruby/commit/1bb0284d6e668b8b3d31167790ed6db1f6ccc4be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0906",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-13T17:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the \"Resource.get\" method that could result in compromise of API keys or other critical resources."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de Python Recurly Client en versiones anteriores a la 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1 y 2.6.2 es vulnerable a Server-Side Request Forgery en el método \"Resource.get\" que podría conllevar el compromiso de las claves API o de otros recursos críticos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "557D1B51-6392-4527-B1E3-2090E32CA9EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndIncluding" : "2.1.15",
            "matchCriteriaId" : "40615C43-B326-44B4-A5AE-E2F70A44B8C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.21",
            "matchCriteriaId" : "E6EB0197-8002-48CC-AC2F-86C81F75BB96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703E03AB-A209-427E-AF2A-733AE854C038"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.4",
            "matchCriteriaId" : "29D290C7-CC59-4AA8-9CFD-936ED5E388B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D506D9-3FE7-4775-BA47-EF65D67ACF25"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D3D568-796D-4AAC-B44B-E01DBF470E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_python:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EA0F95-0F90-4B0A-9CDB-E2EB8E4773A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.recurly.com/page/python-updates",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/recurly/recurly-client-python/commit/049c74699ce93cf126feff06d632ea63fba36742",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288635",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://dev.recurly.com/page/python-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/recurly/recurly-client-python/commit/049c74699ce93cf126feff06d632ea63fba36742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0907",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-13T17:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of \"Uri.EscapeUriString\" that could result in compromise of API keys or other critical resources."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de .NET Recurly Client en versiones anteriores a la 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1 y 1.8.1 es vulnerable a Server-Side Request Forgery en el método \"Uri.EscapeUriString\" que podría conllevar el compromiso de las claves API o de otros recursos críticos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F2D2A1-3C64-4CAA-B2A2-C254C95A49C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3DDFA06-B2FD-4AB9-8423-4C76BC9FAE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7A613-E55F-49EB-87E8-9CB83EF3DDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "4765C91E-5DCB-4B54-AD73-907CC374C7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "95C307C3-F550-49A3-9FD5-2418AB484C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA86E3D-2D2C-4750-8BBC-0EAE302DF47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3802F42-F46A-4BB6-B8C7-7625E2846488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66235403-14C1-4AF5-AB74-748B95E85CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8A19AA-7D3C-416F-BBFC-5A91DAB6583D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDF496-99E4-4330-B064-5FBB58E36D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A04580-65DE-4D17-9195-E5B83C9F498C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E14FE3-8E6A-4F4F-83FB-792BCBA320C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4082835-F0C2-4580-ACBE-80E0F7CB0E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC035AE8-1922-406B-86C2-25FE8C132A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F7A853-7A45-4B0A-A800-716065682ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9989A7-8F01-43DE-8811-2B132829AE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E128EAA-909C-41C2-A4B1-517A7BE79881"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9608C6-524B-4511-91CD-4B30E482B1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CF4244-145B-4C16-AC5E-9C2286E10E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63D2400-E9D2-4FA2-AB6F-ECA8809CF4B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930D66DD-FD21-4E5E-8502-21489B74E32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8642A6-8181-4B76-8E1F-2FF0420B2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B780FA8-EA5E-4D4E-A9D7-40963AB676F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76037C8-C915-491E-BDDE-E69C7720C898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1604EB87-941B-490E-B7CD-0827D7DB0382"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAD3042-2278-4B7F-B1F3-FFEEB8406C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFB2017-5596-41BD-A6B1-2C947CF6269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7ABDA3-A5F5-4830-A245-1AF2923D81B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B36C09-CA2A-4F2E-A3CA-7E5A1D2ECB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8DB124-C085-4C82-9B0C-9B50180FE1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B638025-55AF-4E10-8689-1934F393EACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C753D4-1973-4A6B-BDCF-859A265E2693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8D5C9E-97DD-43BE-BEF3-389EF3A26684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F875658-9A48-4E5B-9B02-8481A0F6DA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B2B38-8C74-47B7-93FF-5C165776A9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E021CE8-FCA0-48F5-B8A1-B0B1F2F82A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E1780C-E158-494F-B13A-283CA1AEDEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3873854-6D94-4864-8334-1546D9222638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF70745E-F60D-4187-B88F-42F85A910AC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC33AF32-C64D-49EE-82FA-DB8F84581DD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25ED87A-E450-453E-A9A9-F11C36665BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB8A73-CA7E-482E-B30C-E6E40DC2D864"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B6C617-FED1-4303-A38A-6FD791DA059C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recurly:recurly_client_.net:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97CE0391-24BA-4AAF-B600-2B153D95F272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.recurly.com/page/net-updates",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288635",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://dev.recurly.com/page/net-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14388",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-13T17:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. For example, this could allow an attacker to provide an image layer that GrootFS would consider to be the Ubuntu base layer."
      }, {
        "lang" : "es",
        "value" : "La distribución GrootFS de Cloud Foundry Foundation GrootFS en versiones 0.3.x anteriores a la 0.30.0 no valida DiffIDs, permitiendo que imágenes especialmente manipuladas dañen la memoria caché del volumen de grootfs. Por ejemplo, esto podría permitir que un atacante proporcione una capa de imagen que GrootFS consideraría que es la capa base de Ubuntu."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C45C9A7-1893-41C0-B223-CE52EB9BC89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC40825D-0D84-473F-A773-A4BCD8ADD170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B7A818-F04D-414D-A77D-DF6E94AB8DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E03D0A-99CE-4F24-A270-60D0B26C8E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE254721-5886-4E34-A584-AE28076311BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93FCC50-28B4-4583-894D-BF251011BAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95145C1C-56A5-4618-B9B1-AE7A85C8A79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D095614D-3618-4D2A-A549-209B4049695E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54412F2F-3010-417F-8CC4-AD15C2C8071E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAD5A48-35EB-4FE8-BE35-FFF54A245BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D682F2-A07D-4A74-85FA-7EC7167F0A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D289904-787F-4FDD-B47A-244605A0FE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FCDF2-B6E5-4B6A-9A94-44C51A0D2160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CAAFF8-DC90-482A-BC21-8939457F5ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1D757F-ACEE-4FCB-B91F-879B2E9637C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEF0E08-9AF7-4F8D-84D3-171DD1F0C566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842FBDD9-0624-4446-951D-9C601F4F9ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB454D66-E728-408F-84DB-8C6846010A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849E56E0-CE7F-4CB2-8D96-596F51A943DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735C5982-6227-42B4-B055-AFF64148CDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB90CD2-9DD6-4699-BEAF-9CAD0E5C6750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81FF68C-FD88-41D0-A94F-D656FC268DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA6188A-D1E4-439E-BD97-818500CB2A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1195F98-3BAA-4AEB-B6E2-6021C686E7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81485A7B-111E-4134-A4EC-70964DAB7042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8145EB-1C5C-4A2D-B0E2-C61BC453CF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:grootfs:0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D11AD9-0B68-4BA8-A2C5-1743D6A4F07D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-14388/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-14388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T17:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream."
      }, {
        "lang" : "es",
        "value" : "En Libav hasta la versión 11.11 y las versiones 12.x hasta la 12.1, la función smacker_decode_tree en libavcodec/smacker.c no restringe correctamente la recursión de árbol, lo que permite que atacantes remotos provoquen una denegación de servicio (lectura fuera de límites de bitstream.c:build_table() y cierre inesperado de la aplicación) mediante una transmisión Smacker manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.11",
            "matchCriteriaId" : "D64C7955-5796-4434-8FC0-4486FE1E2AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26A9134-C152-46A4-83AB-F61EF54A69B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99846C93-A0F8-459D-AC79-A79CDE487505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1098",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/libav/libav/commit/cd4663dc80323ba64989d0c103d51ad3ee0e9c2f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/libav/libav/commit/cd4663dc80323ba64989d0c103d51ad3ee0e9c2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14020",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-13T20:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application."
      }, {
        "lang" : "es",
        "value" : "En AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) en versiones 2.10 y anteriores; C-More Programming Software (Part Number EA9-PGMSW) en versiones 6.30 y anteriores; C-More Micro (Part Number EA-PGMSW) en versiones 4.20.01.0 y anteriores; Do-more Designer Software (Part Number DM-PGMSW) en versiones 2.0.3 y anteriores; GS Drives Configuration Software (Part Number GSOFT) en versiones 4.0.6 y anteriores; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) en versiones 1.1.0.5 y anteriores y DirectSOFT Programming Software en versiones 6.1 y anteriores, se ha identificado una vulnerabilidad de elemento de ruta de búsqueda no controlado (secuestro de DLL). Para explotar esta vulnerabilidad, un atacante podría renombrar un DLL malicioso para cumplir los criterios de la aplicación y esta no verificaría que el DLL es correcto. Una vez es cargado por la aplicación, el DLL podría ejecutar código malicioso al nivel de privilegios de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:automationdirect:click_plc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10",
            "matchCriteriaId" : "17150C6A-62A1-46BE-BBC2-4FDE9C2C7FE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:automationdirect:click_plc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B2940-104B-4ED2-B8DD-2B35A427A624"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:automationdirect:c-more_plc_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.30",
            "matchCriteriaId" : "AE0EACAD-45F4-41C6-A931-AB663F9B3820"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:automationdirect:c-more_plc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396C2928-5895-40CC-BCF2-3B8D607B34BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:automationdirect:c-more_micro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.20.01.0",
            "matchCriteriaId" : "AD7929CC-AE1E-461E-AD6D-EF3BD50E6AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:automationdirect:c-more_micro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE71D4F-EC67-4567-8BCB-653931016C99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:automationdirect:gs_drives_fimware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "A615B38E-7FA3-4DD6-8544-8002C13615C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:automationdirect:gs_drives:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCEE1F6B-325F-414B-884D-8781D1F53B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:automationdirect:sl-soft_solo_temperature_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0.5",
            "matchCriteriaId" : "EC734917-5626-4917-B16E-737650077234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:automationdirect:sl-soft_solo_temperature_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1849FB-D169-4610-A246-5DC6BC063234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101780",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14024",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-13T20:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de desbordamiento de búfer basado en pila en Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 o anterior y en InTouch Machine Edition v8.0 SP2 Patch 1 o anterior. La vulnerabilidad de desbordamiento de búfer basado en pila ha sido identificada. Podría permitir la ejecución remota de código con altos privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_indusoft_web_studio:*:sp2:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "909E4BF0-FD67-4F8B-B577-57E8E5F7A686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:wonderware_intouch:*:sp2:*:*:machine:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "F51870FA-9C46-4C8B-83B0-3C32B0722581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101779",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T20:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages."
      }, {
        "lang" : "es",
        "value" : "En Redmine en versiones anteriores a la 3.2.7 y las versiones 3.3.x anteriores a la 3.3.4, la función reminders en app/models/mailer.rb no comprueba si un problema es visible, lo que permite que usuarios remotos autenticados obtengan información sensible leyendo mensajes de recordatorio de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.7",
            "matchCriteriaId" : "C34F71DA-BA2C-4595-B702-FF2CB4229C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CF994-54D8-4E36-B37E-EAF1CC108F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE4FC9C-3291-4344-81D5-83BA91D52FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E1F17B-7B25-48B3-8953-18C47D99B443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF69D6-449E-4845-811D-D588B4D05665"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redmine/redmine/commit/0f09f161f64f4190a52166675ff380a15b72a8bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/25713",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/0f09f161f64f4190a52166675ff380a15b72a8bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/25713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to r_bin_dwarf_parse_comp_unit in dwarf.c and sdb_set_internal in shlr/sdb/src/sdb.c."
      }, {
        "lang" : "es",
        "value" : "En radare2 2.0.1, libr/bin/dwarf.c permite que atacantes remotos provoquen una denegación de servicio (lectura inválida y cierre inesperado de la aplicación) mediante un archivo ELF manipulado, relacionado con r_bin_dwarf_parse_comp_unit en dwarf.c y sdb_set_internal en shlr/sdb/src/sdb.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B4DFB4-18C8-413E-8953-1E7359DAC6EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radare/radare2/commit/2ca9ab45891b6ae8e32b6c28c81eebca059cbe5d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8813",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/radare/radare2/commit/2ca9ab45891b6ae8e32b6c28c81eebca059cbe5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/radare/radare2/issues/8813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T21:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal."
      }, {
        "lang" : "es",
        "value" : "La función Process en RemoteTaskServer/WebServer/HttpServer.cs en Ulterius en versiones anteriores a la 1.9.5.0 permite el salto de directorio HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulterius:ulterius_server:1.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A5AC4C-59AE-4604-8209-70CE6F28877F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulterius:ulterius_server:1.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10AC2-4E18-46B3-8F57-EC022767DA4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ulterius/server/commit/770d1821de43cf1d0a93c79025995bdd812a76ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43141/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Ulterius/server/commit/770d1821de43cf1d0a93c79025995bdd812a76ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43141/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T21:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en Kirby Panel en versiones anteriores a la 2.3.3, las versiones 2.4.x anteriores a la 2.4.2 y las versiones 2.5.x anteriores a la 2.5.7 al mostrar un documento SVG especialmente preparado que ha sido subido como archivo de contenido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkirby:panel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "3947BC1B-DABD-4C47-8ABF-67BE5A600184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkirby:panel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.2",
            "matchCriteriaId" : "52462CD3-5747-44CC-B883-B1D1EF86C6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkirby:panel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.7",
            "matchCriteriaId" : "4E60861D-13E9-4A06-8854-F299BE01D029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://getkirby.com/changelog/kirby-2-5-7",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144965/KirbyCMS-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43140/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://getkirby.com/changelog/kirby-2-5-7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144965/KirbyCMS-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-13T21:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c."
      }, {
        "lang" : "es",
        "value" : "tcpdump en versiones anteriores a la 4.9.3 tiene una lectura en exceso del búfer en la región heap de la memoria relacionada con aoe_print en print-aoe.c y lookup_emem en addrtoname.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FBA366-800E-4163-8E22-A652750C4F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/154710/Slackware-Security-Advisory-tcpdump-Updates.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Dec/26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/issues/645",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Dec/23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Oct/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/kb/HT210788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4252-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4252-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/154710/Slackware-Security-Advisory-tcpdump-Updates.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Dec/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/issues/645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Dec/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Oct/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT210788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4252-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4252-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15525",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-13T22:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service (DoS) attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network."
      }, {
        "lang" : "es",
        "value" : "Symantec Endpoint Encryption, en versiones anteriores a SEE v11.1.3MP1, puede ser susceptible a un ataque de denegación de servicio (DoS), que es un tipo de ataque en el que el perpetrador intenta hacer que un recurso de red o de máquina en particular deje de estar disponible para los usuarios que deberían tener acceso a dicho recurso interrumpiendo servicios de un host específico en una red de manera temporal o indefinida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 5.5,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.3",
            "matchCriteriaId" : "B57B9730-DAC6-47DC-B87D-124F91E689E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101697",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171113_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171113_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15526",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-13T22:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario."
      }, {
        "lang" : "es",
        "value" : "Symantec Endpoint Encryption, en versiones anteriores a SEE v11.1.3MP1, puede ser susceptible a un problema de desreferencia de puntero null, que puede resultar en una NullPointerException que conduzca a un escenario de escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_encryption:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.3",
            "matchCriteriaId" : "B57B9730-DAC6-47DC-B87D-124F91E689E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101698",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171113_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171113_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1221",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-13T23:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix 9.2 y 9.5) no requiere que los usuarios tengan contraseñas fuertes por defecto, lo que facilita que los atacantes comprometan las cuentas de usuario. IBM X-Force ID: 123861."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010177",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101683",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123861",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1229",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-13T23:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Endpoint Manager (IBM BigFix 9.2 y 9.5) podría permitir que un atacante remoto obtenga información sensible, provocado por la imposibilidad de habilitar correctamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información sensible empleando técnicas man-in-the-Middle (MitM). IBM X-Force ID: 123908."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59DD27-6637-4D89-867B-650AAD2F14B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123908",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1453",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-13T23:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 128372."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Manager Virtual Appliance en su versión 9.0.3 podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el sistema. Mediante el envío de una petición especialmente manipulada, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema. IBM X-Force ID: 128372."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31996D9-CFCE-4FC3-8F3B-57A795D5C5CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009242",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128372",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1477",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-13T23:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612."
      }, {
        "lang" : "es",
        "value" : "La versión 9.0.3 de IBM Security Access Manager Appliance es vulnerable a un ataque de XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 128612."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31996D9-CFCE-4FC3-8F3B-57A795D5C5CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009240",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128612",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1710",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-13T23:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Service Assistant GUI en IBM Storwize V7000 (2076) 8.1 podría permitir que un atacante remoto realice un escalado de privilegios. IBM X-Force ID: 134531."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v7000_firmware:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0F9CE9-D622-49F7-8D2C-4C4A7E9E6DBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2ED020-4C7B-4303-ABE6-74D46D127556"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:storwize_v5000_firmware:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834DC12B-18ED-4D1A-869D-727A226FDD58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B69C8D-32A4-449F-9BFC-F1587C7FA8BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flashsystem_v9000_firmware:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB7116F-7DF8-4FF5-B982-FA08604B3BCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flashsystem_v9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9C13EA-8C4C-42C5-A451-611FF0904AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:san_volume_controller_firmware:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F6CF13-51C2-4943-9658-F72FADE4B37A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:san_volume_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D84487-CEBA-48A0-9B15-A0300D992E3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010788",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101770",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039776",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134531",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-14T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en la pestaña All Variables de Octopus Deploy, en versiones anteriores a la 3.4.0-3.13.6 (solucionado en la 3.13.7), permite que atacantes remotos inyecten scripts web o HTLM arbitrarios mediante el parámetro Variable Set Name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndIncluding" : "3.13.6",
            "matchCriteriaId" : "FC9810C6-C864-4859-BEE9-3BD39AD2A5D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3919",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/3919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12624",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-14T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property \"attachment-max-header-size\"."
      }, {
        "lang" : "es",
        "value" : "Apache CXF es compatible con el envío y la recepción de archivos adjuntos mediante las especificaciones JAX-WS o JAX-RS. Es posible manipular una cabecera de adjunto de mensaje que podría conducir a un ataque de denegación de servicio (DoS) en un proveedor de servicios web de CXF. Tanto los servicios JAX-WS como JAX-RS son vulnerables a este ataque. Desde las versiones 3.2.1 y 3.1.14 de Apache CXF, la cabeceras de adjunto de mensaje de más de 300 caracteres se rechazarán por defecto. Este valor puede configurarse mediante la propiedad \"attachment-max-header-size\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "3AF21E3A-7B39-438D-84FF-E7D433734AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.14",
            "matchCriteriaId" : "8ECCC99D-79CD-4B6C-9A46-521155BDDA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "13FC7274-9967-4648-9FF5-1DA1518BC6DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-12624.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101859",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040486",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2423",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2424",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2425",
        "source" : "security@apache.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2428",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.apache.org/security-advisories.data/CVE-2017-12624.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6274",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-11-14T16:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-34705801. References: N-CVE-2017-6274."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en Thermal Driver, donde una falta de verificación de límites en el controlador de limitación térmica puede provocar una escritura fuera de límites en el kernel. Este problema se ha clasificado como moderado. Producto: Pixel. Versión: N/A. Android ID: A-34705801. Referencias: N-CVE-2017-6274."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01#announcements",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01#announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6275",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-11-14T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a read from an arbitrary kernel address. This issue is rated as moderate. Product: Pixel. Versions: N/A. Android ID: A-34702397. References: N-CVE-2017-6275."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en Thermal Driver, donde una falta de verificación de límites en el controlador termal podría permitir una lectura desde una dirección de kernel arbitraria. Este problema se ha clasificado como moderado. Producto: Pixel. Versiones: N/A. Android ID: A-34702397. Referencias: N-CVE-2017-6275."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4804",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01#announcements",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01#announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-14T17:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3."
      }, {
        "lang" : "es",
        "value" : "En OpenStack Nova hasta la versión 14.0.9, 15.x hasta la versión 15.0.7 y 16.x hasta la versión 16.0.2, al reconstrur una instancia, un usuario autenticado podría saltarse el Filter Scheduler omitiendos los filtros impuestos (por ejemplo, ImagePropertiesFilter o IsolatedHostsFilter). Todas las configuraciones que utilizan Nova Filter Scheduler se ven afectadas. Dada la regresión descrita en Launchpad Bug #1732947, la solución preferida es una versión 14.x posterior a la 14.0.10, una 15.x posterior a la 15.0.8 o una versión 16.x posterior a la 16.0.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.0.9",
            "matchCriteriaId" : "B6D59D57-690B-47DB-BABE-C6B3270543D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CACA5B-1C6D-4048-B744-D14B00BFEAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4675B0D5-9944-4F0A-9FBC-8C1A3AE6E82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADBCCE8-EFB3-4EC9-9B51-C59CAAA715E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41376DB5-5370-45C7-A7E5-1BD00930B2A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184DFB6F-F8F1-4CC0-BA4B-23011D6509E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA03C25-5C3C-45AD-8103-29816334A750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F61E6431-A221-4AB2-9C7F-DBBC81BF0D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:15.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46668A2-8AC7-4112-A885-D41E615B4FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76E3B63-4BE8-4A18-9962-41A4FBAA0B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:16.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB93C6E-7AFD-46C5-BBEC-E6FA771808ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:16.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB190BC-5442-48E1-881C-944FAF0FB0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101950",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/1664931",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.openstack.org/ossa/OSSA-2017-005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/1664931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.openstack.org/ossa/OSSA-2017-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6264",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-11-14T17:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute arbitrary code within the context of a privileged process. Product: Android. Version: N/A. Android ID: A-34705430. References: N-CVE-2017-6264."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador NVIDIA GPU (gm20b_clk_throt_set_cdev_state), en el que una lectura de memoria fuera de límites se emplea como puntero de función. Esta vulnerabilidad podría desembocar en la ejecución de código en el kernel. Este problema se ha clasificado como alto debido a que podría permitir que una aplicación local maliciosa ejecute código arbitrario en el contexto de un proceso con privilegios. Producto: Android. Versión: N/A. Android ID: A-34705430. Referencias: N-CVE-2017-6264."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101744",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-14T17:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the (1) \"paramFile\" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or (2) \"paramFile\" parameter to /Site/Troubleshooting/SpeedTest.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de Cross-Site Scripting (XSS) en Kodak InSite entre las versiones 6.5 y 8.0 permiten que atacantes remotos inyecten scripts web arbitrarios mediante el (1) parámetro \"paramFile\" en /Site/Troubleshooting/DiagnosticReport.asp o el (2) parámetro \"paramFile\" en /Site/Troubleshooting/SpeedTest.asp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kodak:insite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "8B40532C-ECA9-4E76-BDDF-D6E6D07D71E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/142587/Kodak-InSite-8.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142587/Kodak-InSite-8.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-14T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values \"url_new\" (/wp-content/plugins/duplicator/installer/build/view.step4.php) and \"logging\" (wp-content/plugins/duplicator/installer/build/view.step2.php) are not filtered correctly."
      }, {
        "lang" : "es",
        "value" : "installer.php en el plugin Snap Creek Duplicator (WordPress Site Migration Backup) en versiones anteriores a la 1.2.30 para WordPress contiene XSS debido a que los valores \"url_new\" (/wp-content/plugins/duplicator/installer/build/view.step4.php) y \"logging\" (wp-content/plugins/duplicator/installer/build/view.step2.php) no se filtran correctamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snapcreek:duplicator:1.2.28:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3534045E-6107-4484-A81B-6C3B369286AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144914/WordPress-Duplicator-Migration-1.2.28-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://snapcreek.com/duplicator/docs/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144914/WordPress-Duplicator-Migration-1.2.28-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://snapcreek.com/duplicator/docs/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12635",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-14T20:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents with duplicate keys for 'roles' used for access control within the database, including the special case '_admin' role, that denotes administrative users. In combination with CVE-2017-12636 (Remote Code Execution), this can be used to give non-admin users access to arbitrary shell commands on the server as the database system user. The JSON parser differences result in behaviour that if two 'roles' keys are available in the JSON, the second one will be used for authorising the document write, but the first 'roles' key is used for subsequent authorization for the newly created user. By design, users can not assign themselves roles. The vulnerability allows non-admin users to give themselves admin privileges."
      }, {
        "lang" : "es",
        "value" : "Debido a las diferencias en el analizador sintáctico de JSON basado en Erlang y el el analizador sintáctico de JSON basado en JavaScript, es posible que, en versiones anteriores a la 1.7.0 y en las versiones 2.x anteriores a la 2.1.1 de Apache CouchDB, se puedan enviar documentos _users con claves duplicadas para \"roles\" empleados para el control de acceso en la base de datos, incluyendo el caso especial del rol \"_admin\", que denota a los usuarios administrativos. Esto puede utilizarse conjuntamente con CVE-2017-12636 (ejecución remota de código) para dar acceso a usuarios no administradores a comandos shell arbitrarios en el servidor como el usuario del sistema de la base de datos. Las diferencias entre analizadores sintácticos de JSON resultan en un comportamiento por el cual, si dos claves \"roles\" están disponibles en el JSON, la segunda se empleará para autorizar la escritura del documento, pero la primera clave \"roles\" se emplea para la subsecuente autorización para el usuario recientemente creado. Por diseño, los usuarios no pueden asignase roles a sí mismos. La vulnerabilidad permite que usuarios no administradores se autoasignen privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "DCEE0A7F-2D9E-4B71-AB1D-F7E51FAF8839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C28D397-7FB6-472F-A602-C2E7E4CCC7D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "20694545-A117-4327-9704-E4E9C26C0A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53337458-D551-42E3-825D-1E94AB8409D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6848350-0CDC-4CB1-B6DB-1A47227F10AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2A820A52-9170-4E32-B224-1C9E7F48A6D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101868",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-16",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44498/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45019/",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44498/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45019/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12636",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-14T20:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet."
      }, {
        "lang" : "es",
        "value" : "Los usuarios administrativos de CouchDB pueden configurar el servidor de la base de datos mediante HTTP(S). Algunas de las opciones de configuración incluyen rutas para operar binarios a nivel de sistema que son iniciados subsecuentemente por CouchDB. Esto permite que un usuario administrador en versiones anteriores a la 1.7.0 y versiones 2.x anteriores a la 2.1.1 de Apache CouchDB ejecuten comandos shell arbitrarios como el usuario CouchDB, incluyendo la descarga y ejecución de scripts del internet público."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "DCEE0A7F-2D9E-4B71-AB1D-F7E51FAF8839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C28D397-7FB6-472F-A602-C2E7E4CCC7D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "20694545-A117-4327-9704-E4E9C26C0A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53337458-D551-42E3-825D-1E94AB8409D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6848350-0CDC-4CB1-B6DB-1A47227F10AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:couchdb:2.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2A820A52-9170-4E32-B224-1C9E7F48A6D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-16",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44913/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45019/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/44913/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45019/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-14T21:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact)."
      }, {
        "lang" : "es",
        "value" : "La función csnmp_read_table en snmp.c en el plugin SNMP en collectd, en versiones anteriores a la 5.6.3, es susceptible a una doble liberación (double free) en un cierto caso de error, lo que podría conducir a un cierre inesperado (o, potencialmente, provocar otro impacto)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collectd:collectd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.3",
            "matchCriteriaId" : "D0C6B755-5FC2-403F-8EB8-CFC784BBA56C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/881757",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/collectd/collectd/issues/2291",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/collectd/collectd/releases/tag/collectd-5.6.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/881757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/collectd/collectd/issues/2291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/collectd/collectd/releases/tag/collectd-5.6.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3891",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-11-14T21:29:00.620",
      "lastModified" : "2025-08-22T15:15:30.053",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to access local and remote files or take ownership of files on other QNX nodes regardless of permissions by executing commands targeting arbitrary nodes from a secondary QNX 6.6.0 QNet node."
      }, {
        "lang" : "es",
        "value" : "En BlackBerry QNX Software Development Platform (SDP) 6.6.0, una vulnerabilidad de elevación de privilegios en la configuración por defecto del QNX SDP con QNet habilitado en redes formadas por dos o más nodos QNet podría permitir que un atacante acceda a archivos locales y remotos, así como a asumir la propiedad de archivos o de otros nodos QNX, independientemente de los permisos. Esto se logra ejecutando comandos que tengan como objetivo nodos arbitrarios de un nodo QNet QNX 6.6.0 secundario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@blackberry.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@blackberry.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-923"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1D7FB0-C40B-4DD6-B3C5-D90FBCCBAF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "secure@blackberry.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.midnightbluelabs.com/blog/2017/12/8/elevation-of-privilege-vulnerability-in-qnx-qnet",
        "source" : "secure@blackberry.com"
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.midnightbluelabs.com/blog/2017/12/8/elevation-of-privilege-vulnerability-in-qnx-qnet",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3892",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-11-14T21:29:00.653",
      "lastModified" : "2025-08-26T18:15:30.620",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout that could be used in a blended attack by executing commands targeting procfs resources."
      }, {
        "lang" : "es",
        "value" : "En BlackBerry QNX Software Development Platform (SDP) 6.6.0, una vulnerabilidad de divulgación de información en la configuración por defecto del QNX SDP podría permitir que un atacante obtenga información relacionada con el diseño de la memoria que podría emplearse en un ataque combinado mediante la ejecución de comandos cuyo objetivo son los recursos procfs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@blackberry.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@blackberry.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1D7FB0-C40B-4DD6-B3C5-D90FBCCBAF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3893",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-11-14T21:29:00.747",
      "lastModified" : "2025-07-22T16:15:24.910",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks."
      }, {
        "lang" : "es",
        "value" : "En BlackBerry QNX Software Development Platform (SDP) 6.6.0, la configuración por defecto del sistema QNX SDP no evitaba en todas las circunstancias que los atacantes modificase las tablas GOT o PLT con ataques de desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@blackberry.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@blackberry.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1D7FB0-C40B-4DD6-B3C5-D90FBCCBAF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9369",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-11-14T21:29:00.967",
      "lastModified" : "2025-08-26T18:15:33.990",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout of higher privileged processes by manipulating environment variables that influence the loader."
      }, {
        "lang" : "es",
        "value" : "En BlackBerry QNX Software Development Platform (SDP) 6.6.0 y 6.5.0 SP1 y anteriores, una vulnerabilidad de divulgación de información en la configuración por defecto de la plataforma QNX SDP podría permitir que un atacante obtenga información relacionada con el diseño de la memoria de procesos con mayores privilegios mediante la manipulación de variables de entorno que influyen en el cargador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@blackberry.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@blackberry.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766E1E7-19FE-45A5-8191-BA0CF84BB768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "11F2C680-2F44-4CBC-BC7E-B608726302D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1D7FB0-C40B-4DD6-B3C5-D90FBCCBAF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "secure@blackberry.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000046674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9371",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2017-11-14T21:29:01.167",
      "lastModified" : "2025-08-22T15:15:30.517",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation."
      }, {
        "lang" : "es",
        "value" : "En BlackBerry QNX Software Development Platform (SDP) 6.6.0 y 6.5.0 SP1 y anteriores, una vulnerabilidad de pérdida de integridad en la configuración por defecto de la plataforma QNX SDP podría permitir que un atacante sea capaz de reducir la entropía del PRNG, haciendo que otros ataques combinados sean más prácticos mediante la obtención del control sobre factores del entorno que influyen en la generación de semillas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@blackberry.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@blackberry.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-332"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-332"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766E1E7-19FE-45A5-8191-BA0CF84BB768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "11F2C680-2F44-4CBC-BC7E-B608726302D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:qnx_software_development_platform:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1D7FB0-C40B-4DD6-B3C5-D90FBCCBAF23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000046674",
        "source" : "secure@blackberry.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000046674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9394",
      "sourceIdentifier" : "vuln@ca.com",
      "published" : "2017-11-14T21:29:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la versión 12.6 de CA Identity Governance permite que atacantes remotos autenticados muestren HTML o ejecuten scripts en el contexto de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "vuln@ca.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:identity_governance:12.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04968F57-437F-4D2D-AFDE-CD339B41CAD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101849",
        "source" : "vuln@ca.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20171114-01--security-notice-for-ca-identity-governance.html",
        "source" : "vuln@ca.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20171114-01--security-notice-for-ca-identity-governance.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10266",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-11-14T23:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Tuxedo accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Tuxedo de Oracle Fusion Middleware (subcomponente: Core). Las versiones compatibles que se han visto afectadas son la 11.1.1, 12.1.1, 12.1.3 y 12.2.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por Jolt comprometa la seguridad de Oracle Tuxedo. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle Tuxedo. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC8521F-4B80-4520-9D0B-CC7575F0A999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D2543A-F84F-4D63-9C7B-D8AC072CCFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC28867-E828-4ABC-BE7B-3E5C2E826879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E96BEA-7D76-4C72-9936-1DAE75EF2F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101852",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10267",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-11-14T23:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Tuxedo accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Tuxedo de Oracle Fusion Middleware (subcomponente: Core). Las versiones compatibles que se han visto afectadas son la 11.1.1, 12.1.1, 12.1.3 y 12.2.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por Jolt comprometa la seguridad de Oracle Tuxedo. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Tuxedo. CVSS 3.0 Base Score 7.5 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC8521F-4B80-4520-9D0B-CC7575F0A999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D2543A-F84F-4D63-9C7B-D8AC072CCFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC28867-E828-4ABC-BE7B-3E5C2E826879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E96BEA-7D76-4C72-9936-1DAE75EF2F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101875",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10269",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-11-14T23:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the vulnerability is in Oracle Tuxedo, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Tuxedo accessible data as well as unauthorized access to critical data or complete access to all Oracle Tuxedo accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Tuxedo. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Tuxedo de Oracle Fusion Middleware (subcomponente: Core). Las versiones compatibles que se han visto afectadas son la 11.1.1, 12.1.1, 12.1.3 y 12.2.2. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar con acceso a red por Jolt comprometa la seguridad de Oracle Tuxedo. Aunque la vulnerabilidad está presente en Oracle Tuxedo, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de creación, supresión o modificación de datos críticos o de todos los datos accesibles de Oracle Tuxedo; así como en el acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Tuxedo, además de la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Oracle Tuxedo. CVSS 3.0 Base Score 10.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC8521F-4B80-4520-9D0B-CC7575F0A999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D2543A-F84F-4D63-9C7B-D8AC072CCFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC28867-E828-4ABC-BE7B-3E5C2E826879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E96BEA-7D76-4C72-9936-1DAE75EF2F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101841",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10272",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-11-14T23:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While the vulnerability is in Oracle Tuxedo, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Tuxedo accessible data as well as unauthorized access to critical data or complete access to all Oracle Tuxedo accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Tuxedo. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Tuxedo de Oracle Fusion Middleware (subcomponente: Core). Las versiones compatibles que se han visto afectadas son la 11.1.1, 12.1.1, 12.1.3 y 12.2.2. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso en red por Jolt comprometa la seguridad de Oracle Tuxedo. Aunque la vulnerabilidad está presente en Oracle Tuxedo, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de creación, supresión o modificación de datos críticos o de todos los datos accesibles de Oracle Tuxedo; así como en el acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Tuxedo, además de la capacidad no autorizada de provocar una denegación de servicio parcial (DoS parcial) de Oracle Tuxedo. CVSS 3.0 Base Score 9.9 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC8521F-4B80-4520-9D0B-CC7575F0A999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D2543A-F84F-4D63-9C7B-D8AC072CCFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC28867-E828-4ABC-BE7B-3E5C2E826879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E96BEA-7D76-4C72-9936-1DAE75EF2F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101871",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10278",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2017-11-14T23:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Tuxedo accessible data as well as unauthorized update, insert or delete access to some of Oracle Tuxedo accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Tuxedo. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Tuxedo de Oracle Fusion Middleware (subcomponente: Security). Las versiones compatibles que se han visto afectadas son la 11.1.1, 12.1.1, 12.1.3 y 12.2.2. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a la red por Jolt comprometa la seguridad de Oracle Tuxedo. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso total a todos los datos accesibles de Oracle Tuxedo, así como la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle Tuxedo. Además, puede dar lugar a que el atacante consiga provocar una denegación de servicio (DoS parcial) de Oracle Tuxedo. CVSS 3.0 Base Score 7.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC8521F-4B80-4520-9D0B-CC7575F0A999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D2543A-F84F-4D63-9C7B-D8AC072CCFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC28867-E828-4ABC-BE7B-3E5C2E826879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tuxedo:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E96BEA-7D76-4C72-9936-1DAE75EF2F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101870",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11768",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a specially crafted application. due to the way Windows Media Player discloses file information, aka \"Windows Media Player Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows Media Player en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que atacantes remotos realicen pruebas en busca de archivos en el disco mediante una aplicación especialmente manipulada. Esto se debe a la manera en la que Windows Media Player revela información de los archivos. Esta vulnerabilidad también se conoce como \"Windows Media Player Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDD85BA-0CDA-4EF2-A447-84A4F7B94B3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101705",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039794",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11768",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11770",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka \".NET CORE Denial Of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : ".NET Core 1.0, 1.1 y 2.0 permite que un atacante no autenticado provoque un ataque de denegación de servicio (DoS) de forma remota contra una aplicación web de .NET Core analizando incorrectamente datos de certificados. Existe una vulnerabilidad de denegación de servicio (DoS) cuando .NET Core gestiona de manera incorrecta en análisis sintáctico de datos de certificados. Esta vulnerabilidad también se conoce como \".NET CORE Denial Of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aspnetcore:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931E8C70-B5A4-43BA-8878-12DCE3BB7887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aspnetcore:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE520B3-FDFE-44DC-B299-F78934491AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aspnetcore:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C2F277-29BA-4E33-B2FF-2DA5CE744DFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101710",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039787",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3248",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11770",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11788",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows server, version 1709 allows an unauthenticated attacker to remotely send specially crafted messages that could cause a denial of service against the system due to improperly handing objects in memory, aka \"Windows Search Denial of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows Search en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante no autenticado envíe de manera remota mensajes especialmente manipulados que podrían provocar una denegación de servicio (DoS) en el sistema porque se gestionan de manera incorrecta los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Windows Search Denial of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101711",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039792",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11788",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11791",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11834."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga información para después comprometer el sistema del usuario Esto se debe a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11834."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101715",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039796",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11791",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11803",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11833 and CVE-2017-11844."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 y 1709, y Windows Server en su versión 1709 permite que un atacante obtenga información para comprometer aun más la seguridad del sistema del usuario debido a la forma en la que Microsoft Edge gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11833 y CVE-2017-11844."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101704",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11803",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11827",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka \"Microsoft Browser Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2; y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual. Esto se debe a la manera en la que los navegadores de Microsoft gestionan los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Microsoft Browser Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101703",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11827",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11830",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka \"Device Guard Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Device Guard en Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante haga que un archivo sin firma aparezca como que sí tiene firma a causa de la omisión de una característica de seguridad. Esta vulnerabilidad también se conoce como \"Device Guard Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101714",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039790",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43162/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43162/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11831",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted application that can compromise the user's system due to how the Windows kernel initializes memory, aka \"Windows Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11880."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016, y Windows Server en su versión 1709 permite que un atacante acceda al sistema afectado y ejecute una aplicación especialmente manipulada que pueda comprometer el sistema del usuario. Esto se debe a la manera en la que el kernel de Windows inicializa la memoria. Esta vulnerabilidad también se conoce como \"Windows Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11880."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101721",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11831",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43165/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43165/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11832",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Windows embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially crafted embedded fonts, aka \"Windows EOT Font Engine Information Disclosure Vulnerability.\" This CVE ID is unique from CVE-2017-11835."
      }, {
        "lang" : "es",
        "value" : "El motor de fuentes embebidas OpenType (EOT) de Microsoft Windows en Windows 7 SP1, Windows Server 2008 SP2 y 2008 R2 SP1 y Windows Server 2012 permite que un atacante pueda leer datos que no se deberían revelar. Esto se debe a la manera en la que el motor analiza sintácticamente las fuentes embebidas especialmente manipuladas. Esta vulnerabilidad también se conoce como \"Windows EOT Font Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11835."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101726",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11832",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11833",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante determine el origen de todas las páginas web en el navegador afectado por la manera en la que Microsoft Edge gestiona las peticiones de orígenes cruzados. Esta vulnerabilidad también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11803 y CVE-2017-11844."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101706",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11834",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11791."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante obtenga información para después comprometer el sistema del usuario. Esto se debe a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11791."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101725",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039796",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11834",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11835",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType (EOT) font engine parses specially crafted embedded fonts, aka \"Windows EOT Font Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11832."
      }, {
        "lang" : "es",
        "value" : "Microsoft graphics en Windows 7 SP1 y Windows Server 2008 SP2 y R2 SP1 permite que un atacante pueda leer datos que no se deberían revelar por la manera en la que el motor de fuentes embebidas OpenType (EOT) de Microsoft Windows analiza sintácticamente las fuentes embebidas especialmente manipuladas. Esta vulnerabilidad también se conoce como \"Windows EOT Font Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11832."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101736",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11836",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante tome el control de un sistema afectado debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11836",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11837",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101722",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11837",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11838",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101737",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11838",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11839",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante tome el control de un sistema afectado debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101735",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11839",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43180/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43180/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11840",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101734",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11840",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43183/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43183/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11841",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101733",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11841",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43181/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11842",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11849, CVE-2017-11851, and CVE-2017-11853."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 8.1 y RT 8.1, Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante acceda y ejecute una aplicación especialmente manipulada debido a la manera en la que el kernel de Windows inicializa incorrectamente una dirección de memoria. Esta vulnerabilidad también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11849, CVE-2017-11851 y CVE-2017-11853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101719",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11842",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11843",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101740",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11843",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11844",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11833."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 y 1709, y Windows Server en su versión 1709 permite que un atacante obtenga información para comprometer aun más la seguridad del sistema del usuario debido a la forma en la que Microsoft Edge gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11803 y CVE-2017-11833."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101707",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11844",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11845",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que Microsoft Edge gestiona los objetos en la memoria. Esto también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101708",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11845",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11846",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101741",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11846",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11847",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:00.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view, change or delete data, and create new accounts with full user rights due to improperly handing objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016, y Windows Server en su versión 1709 permite que un atacante ejecute código arbitrario en modo kernel; instale programas; visualice, cambie o elimine datos; y cree nuevas cuentas con todos los derechos de usuario debido a que se gestionan de manera incorrecta los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Windows Kernel Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "34B5FE78-4F33-4FAF-B90C-2D41284D2904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101729",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11847",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11848",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to detect the navigation of the user leaving a maliciously crafted page, due to how page content is handled by Internet Explorer, aka \"Internet Explorer Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante detecte la navegación del usuario que abandona una página manipulada con fines maliciosos debido a la manera en la que Internet Explorer gestiona los contenidos de la página. Esta vulnerabilidad también se conoce como \"Internet Explorer Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101709",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039796",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11849",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11842, CVE-2017-11851, and CVE-2017-11853."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT 8.1, Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante acceda y ejecute una aplicación especialmente manipulada por la manera en la que el kernel de Windows inicializa incorrectamente una dirección de memoria. Esta vulnerabilidad también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11842, CVE-2017-11851 y CVE-2017-11853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "34B5FE78-4F33-4FAF-B90C-2D41284D2904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101762",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11850",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka \"Microsoft Graphics Component Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente Microsoft Graphics en Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante acceda a un sistema afectado y ejecute una aplicación especialmente manipulada debido a que se manipulan incorrectamente los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Microsoft Graphics Component Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101738",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11851",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows kernel component on Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709, allows an information disclosure vulnerability when it improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11853."
      }, {
        "lang" : "es",
        "value" : "El componente kernel de Windows en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold 1511, 1607, 1709 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria. Esto también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11842, CVE-2017-11849 y CVE-2017-11853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101763",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11852",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka \"Windows GDI Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "El componente GDI de Microsoft en Windows 7 SP1 y Windows Server 2008 SP2 y R2 SP1 permite que un atacante acceda a un sistema afectado y ejecute una aplicación especialmente manipulada para comprometer el sistema del usuario debido a que se revelan incorrectamente direcciones de la memoria del kernel. Esta vulnerabilidad también se conoce como \"Windows GDI Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101739",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11853",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka \"Windows Kernel Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11851."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT 8.1, Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante acceda y ejecute una aplicación especialmente manipulada por la manera en la que el kernel de Windows inicializa incorrectamente una dirección de memoria. Esta vulnerabilidad también se conoce como \"Windows Kernel Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11842, CVE-2017-11849 y CVE-2017-11851."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "34B5FE78-4F33-4FAF-B90C-2D41284D2904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101764",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11854",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Word Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2 y Microsoft Office Compatibility Pack Service Pack 3 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual al no gestionar correctamente los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Microsoft Word Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "7D006508-BFB0-4F21-A361-3DA644F51D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101746",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039795",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11854",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11855",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11856."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual debido a la manera en la que Internet Explorer gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11856."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101751",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11855",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43371/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43371/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11856",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11855."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server 1709 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que Internet Explorer gestiona los objetos en la memoria. Esto también se conoce como \"Internet Explorer Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11855."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101753",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11858",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2; y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que los navegadores de Microsoft gestionan los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101716",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11861",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Windows 10 1607, 1703, 1709, Windows Server 2016 y Windows Server 1709 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que el motor de scripting gestiona los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101723",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43153/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43153/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11862",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1709 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que el motor de scripting gestiona los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101724",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11862",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11863",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server 1709 permite que un atacante engañe a un usuario para que cargue una página que contenga contenido malicioso, debido a la forma en la que la política de seguridad de contenido (CSP) de Edge valida documentos. Esto también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es diferente de CVE-2017-11872 y CVE-2017-11874."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101748",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039801",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11866",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que el motor de scripting gestiona los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6872EB28-0456-421E-810E-67C17778168C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101732",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11866",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11869",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server 1709 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que los navegadores Microsoft gestionan los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11870, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101742",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11869",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11870",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11871, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1703, 1709 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que el motor de scripting gestiona los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11871 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101731",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11870",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43182/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43182/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11871",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11873."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1703, 1709 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que el motor de scripting gestiona los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870 y CVE-2017-11873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101730",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11871",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11872",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11874."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1607, 1703 y Windows Server 2016 permite que un atacante fuerce que el navegador envíe datos que, de otra forma, estarían restringidos, a una página web de destino a elección del atacante, debido a la forma en la que Microsoft Edge gestiona las peticiones de redirección. Esto también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es diferente de CVE-2017-11863 y CVE-2017-11874."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD5B232-95EA-4F8E-8C7D-7976877AD243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101749",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039801",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11872",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11873",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11871."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual, debido a la forma en la que el motor de scripting gestiona los objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870 y CVE-2017-11871."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101728",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11873",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43154/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43154/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11874",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka \"Microsoft Edge Security Feature Bypass Vulnerability\". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 1703, 1709, Windows Server 1709 y ChakraCore permiten que un atacante eluda el Control Flow Guard (CFG) para ejecutar código arbitrario en un sistema objetivo, debido a la forma en la que Microsoft Edge gestiona los accesos a la memoria en código compilado por el compilador Edge Just-In-Time (JIT). Esto también se conoce como \"Microsoft Edge Security Feature Bypass Vulnerability\". El ID de este CVE es diferente de CVE-2017-11863 y CVE-2017-11872."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3889F-978A-4F39-9A0D-E633A887059B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101750",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039801",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11876",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka \"Microsoft Project Server Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Project Server y Microsoft SharePoint Enterprise Server 2016 permiten que un atacante emplee Cross-Site Forgery para leer contenido para el que no tiene permiso, emplee la identidad de la víctima para realizar acciones en la aplicación web en su nombre (como cambiar permisos y eliminar contenido) e inyecte contenido malicioso en el navegador de la víctima. Esto también se conoce como \"Microsoft Project Server Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "597153BC-B8A7-45E5-AE3F-D897FAE4C7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101754",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039788",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039789",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11876",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11877",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac allow a security feature bypass by not enforcing macro settings on an Excel document, aka \"Microsoft Excel Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3 y Microsoft Excel 2016 para Mac permiten la omisión de una característica de seguridad debido a que no se impone la configuración de macros en un documento de Excel. Esto también se conoce como \"Microsoft Excel Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A70D659-F648-4870-852A-4E86D1F4B646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BF87B2-CE8F-4977-9436-9BE5821CF1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0390EFCA-87B4-42D6-817A-603765F49816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "DAD067D0-3EE7-4E65-98FF-95277E98DE85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4635DA5-27DA-43FF-92AC-A9F80218A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101747",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11877",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11878",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Excel Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3 y Microsoft Excel Viewer 2007 Service Pack 3 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando no se gestionan correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Excel Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A70D659-F648-4870-852A-4E86D1F4B646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BF87B2-CE8F-4977-9436-9BE5821CF1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0390EFCA-87B4-42D6-817A-603765F49816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E4635DA5-27DA-43FF-92AC-A9F80218A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF058A-2E5D-4B11-88DB-8903C64B13C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101756",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11878",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11879",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka \"ASP.NET Core Elevation Of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "ASP.NET Core 2.0 permite que un atacante robe información de inicio de sesión, como cookies o tokens de autenticación mediante una URL especialmente manipulada. Esto también se conoce como \"ASP.NET Core Elevation Of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345222C2-CD5B-4613-9FF3-9D034974D54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101713",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039793",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11879",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11880",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to run a specially crafted application and obtain information to further compromise the user's system due to the Windows kernel improperly initializing objects in memory, aka \"Windows Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11831."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permite que un atacante ejecute una aplicación especialmente manipulada y obtenga información para comprometer aún más el sistema del usuario, debido a la forma en la que el kernel de Windows inicializa incorrectamente los objetos en la memoria. Esto también se conoce como \"Windows Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11831."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11880",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11882",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.890",
      "lastModified" : "2025-10-22T00:16:02.450",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1 y Microsoft Office 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual al no gestionar correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11884."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Memory Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEECD12A-5BEF-4675-B62E-86CF4A7474D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101757",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0x09AL/CVE-2017-11882-metasploit",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedi/CVE-2017-11882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rxwx/CVE-2017-11882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unamer/CVE-2017-11882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43163/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/421280",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0x09AL/CVE-2017-11882-metasploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedi/CVE-2017-11882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rxwx/CVE-2017-11882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unamer/CVE-2017-11882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43163/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/421280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11882",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11883",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka \".NET CORE Denial Of Service Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : ".NET Core 1.0, 1.1 y 2.0 permiten que un atacante sin autenticar provoque un ataque remoto de denegación de servicio (DoS) contra una aplicación web de .NET Core al gestionar incorrectamente los objetos en la memoria. Esto también se conoce como \".NET CORE Denial Of Service Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aspnetcore:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931E8C70-B5A4-43BA-8878-12DCE3BB7887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aspnetcore:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE520B3-FDFE-44DC-B299-F78934491AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aspnetcore:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C2F277-29BA-4E33-B2FF-2DA5CE744DFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101835",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039793",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11884",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:01.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11882."
      }, {
        "lang" : "es",
        "value" : "Click-to-Run (C2R) de Microsoft Excel 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual al no gestionar correctamente los objetos en la memoria. Esto también se conoce como \"Microsoft Office Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11882."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:click-to-run:*:*:*",
            "matchCriteriaId" : "14F42778-339E-4949-A43D-6E74FA9C0F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11884",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T03:29:02.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid."
      }, {
        "lang" : "es",
        "value" : "b3log Symphony (también conocido como Sym) 2.2.0 contiene XSS en processor/AdminProcessor.java en la consola de administrador, tal y como demuestra una cabecera HTTP X-Forwarded-For manipulada que se gestiona de manera incorrecta durante la muestra de la dirección IP de un cliente en /admin/user/userid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:symphony:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4186EFC0-B101-4B14-801A-36F714606078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/b3log/symphony/issues/503",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b3log/symphony/issues/503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8700",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-11-15T03:29:02.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka \"ASP.NET Core Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "ASP.NET Core 1.0, 1.1 y 2.0 permiten que un atacante omita las configuraciones Cross-Origin Resource Sharing (CORS) y recupere contenidos normalmente restringidos de una aplicación web. Esto también se conoce como \"ASP.NET Core Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0913F82A-985A-401D-89F6-191684A8AB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8256236D-D4F0-4207-B82D-18B0135CEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345222C2-CD5B-4613-9FF3-9D034974D54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101712",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039793",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8700",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12737",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-11-15T08:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to obtain sensitive device information over the network."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en los módulos SM-2556 COM de las unidades terminal remotas SICAM de Siemens con las variantes de firmware ENOS00, ERAC00, ETA2, ETLS00, MODi00 y DNPi00. El servidor web integrado (puerto 80/tcp) de los dispositivos afectados podría permitir que los atacantes remotos no autenticados obtengan información sensible del dispositivo a través de la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:dnpi00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5101E6-6539-4764-AA69-04F231B579F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:enos00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03424AF-2BF9-4F1D-98A2-A98D9D413ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:erac00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407642BA-53E7-4D3E-8068-0817BB490953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:eta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972FB974-D711-475F-88F1-5617929D7319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:etls00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5FF04-9652-464E-A7CB-490538BE26E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:modi00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8337D2-8A9C-4554-8B2C-808F59D7F35B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sm-2556:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7A2477-9462-47A8-A91F-8771F82B6615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101884",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12738",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-11-15T08:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into clicking on a malicious link."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en los módulos SM-2556 COM de las unidades terminal remotas SICAM de Siemens con las variantes de firmware ENOS00, ERAC00, ETA2, ETLS00, MODi00 y DNPi00. El servidor web integrado (puerto 80/tcp) de los dispositivos afectados podría permitir ataques Cross-Site Scripting (XSS) si los usuarios incautos son engañados para que accedan a un enlace malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:dnpi00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5101E6-6539-4764-AA69-04F231B579F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:enos00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03424AF-2BF9-4F1D-98A2-A98D9D413ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:erac00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407642BA-53E7-4D3E-8068-0817BB490953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:eta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972FB974-D711-475F-88F1-5617929D7319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:etls00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5FF04-9652-464E-A7CB-490538BE26E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:modi00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8337D2-8A9C-4554-8B2C-808F59D7F35B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sm-2556:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7A2477-9462-47A8-A91F-8771F82B6615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101884",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12739",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-11-15T08:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to execute arbitrary code on the affected device."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en los módulos SM-2556 COM de las unidades terminal remotas SICAM de Siemens con las variantes de firmware ENOS00, ERAC00, ETA2, ETLS00, MODi00 y DNPi00. El servidor web integrado (puerto 80/tcp) de los dispositivos afectados podría permitir que los atacantes remotos no autenticados ejecuten código arbitrario en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:dnpi00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5101E6-6539-4764-AA69-04F231B579F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:enos00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03424AF-2BF9-4F1D-98A2-A98D9D413ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:erac00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407642BA-53E7-4D3E-8068-0817BB490953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:eta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972FB974-D711-475F-88F1-5617929D7319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:etls00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5FF04-9652-464E-A7CB-490538BE26E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sm-2556_firmware:modi00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8337D2-8A9C-4554-8B2C-808F59D7F35B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sm-2556:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7A2477-9462-47A8-A91F-8771F82B6615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101884",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file."
      }, {
        "lang" : "es",
        "value" : "La función coff_slurp_line_table en coffcode.h en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 permite que atacantes remotos provoquen una denegación de servicio (acceso a la memoria no válido y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar mediante un archivo PE manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22376",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a67d66eb97e7613a38ffe6622d837303b3ecd31d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a67d66eb97e7613a38ffe6622d837303b3ecd31d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función aout_get_external_symbols en aoutx.h en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 permite que atacantes remotos provoquen una denegación de servicio (liberación no válida de slurp_symtab y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0301ce1486b1450f219202677f30d0fa97335419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0301ce1486b1450f219202677f30d0fa97335419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame."
      }, {
        "lang" : "es",
        "value" : "La función display_debug_frames en dwarf.c en GNU Binutils 2.29.1 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de enteros, sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de la aplicación) o, probablemente, provocar cualquier otro tipo de impacto mediante un archivo ELF modificado, relacionado con print_debug_frame."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bf59c5d5f4f5b8b4da1f5f605cfa546f8029b43d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bf59c5d5f4f5b8b4da1f5f605cfa546f8029b43d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_elf_parse_gnu_properties en elf-properties.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 no previene los punteros negativos, lo que permite que atacantes remotos provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22307",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=cf54ebff3b7361989712fd9c0128a9b255578163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=cf54ebff3b7361989712fd9c0128a9b255578163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "La función GNU Binutils en readelf.c en GNU Binutils 2.29.1 no tiene protección contra desbordamientos de enteros en plataformas de 32 bits, lo que permite que atacantes remotos provoquen una denegación de servicio (violación de segmentación y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar mediante un archivo ELF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101941",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6ab2c4ed51f9c4243691755e1b1d2149c6a426f4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6ab2c4ed51f9c4243691755e1b1d2149c6a426f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file."
      }, {
        "lang" : "es",
        "value" : "coffgen.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 no valida el recuento de símbolos, lo que permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de enteros y cierre inesperado de la aplicación o asignación excesiva de memoria) o, posiblemente, otro impacto sin especificar mediante un archivo PE manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6cee897971d4d7cd37d2a686bb6d2aa3e759c8ca",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6cee897971d4d7cd37d2a686bb6d2aa3e759c8ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file."
      }, {
        "lang" : "es",
        "value" : "La función pe_bfd_read_buildid en peicode.h en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 no valida los valores de tamaño y desplazamiento en el diccionario de datos, lo que permite que atacantes remotos provoquen una denegación de servicio (violación de segmentación y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar mediante un archivo PE manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0bb6961f18b8e832d88b490d421ca56cea16c45b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0bb6961f18b8e832d88b490d421ca56cea16c45b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T08:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos D-Link DCS-936L con firmware en versiones anteriores a la 1.05.07 tienen un mecanismo de protección CSRF inadecuado que requiere que la dirección IP del dispositivo sea una subcadena de la cabecera HTTP Referer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dcs-936l:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.05.07",
            "matchCriteriaId" : "B52E4BB4-3715-438F-8E4E-81C2F14CF198"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-936l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28203D6B-3BAD-4317-A43E-FB4F7DF6EB6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DCS-936L/REVA/BETA/DCS-936L_REVA_RELEASE_NOTES_v1.05.07_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/26/qsa-2017-03-26/qsa-2017-03-26.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp2.dlink.com/PRODUCTS/DCS-936L/REVA/BETA/DCS-936L_REVA_RELEASE_NOTES_v1.05.07_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/03/26/qsa-2017-03-26/qsa-2017-03-26.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8808",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping."
      }, {
        "lang" : "es",
        "value" : "MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2 tiene XSS cuando la configuración $wgShowExceptionDetails es falso y el navegador envía un escape de URL no estándar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8809",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability."
      }, {
        "lang" : "es",
        "value" : "api.php en MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2 tiene una vulnerabilidad de descarga de archivos reflejada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8810",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests."
      }, {
        "lang" : "es",
        "value" : "MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2, cuando se ha configurado una wiki privada, proporciona diferentes mensajes de error para intentos de inicio de sesión fallidos dependiendo de si existe el nombre de usuario. Esto permite que atacantes remotos enumeren nombres de cuentas y lleven a cabo ataques de fuerza bruta mediante una serie de peticiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8811",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks."
      }, {
        "lang" : "es",
        "value" : "La implementación de la expansión del parámetro raw message en MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2 permite ataques de decoración HTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8812",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline."
      }, {
        "lang" : "es",
        "value" : "MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2 permite que atacantes remotos inyecten caracteres > (mayor que) mediante el atributo id de un encabezado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8814",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.780",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by \"a lot of junk.\""
      }, {
        "lang" : "es",
        "value" : "El convertidor de lenguaje en MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2 permite que atacantes reemplacen texto dentro de etiquetas mediante una definición de reglas seguida por mucho contenido innecesario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8815",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-15T08:29:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules."
      }, {
        "lang" : "es",
        "value" : "El convertidor de lenguaje en MediaWiki en versiones anteriores a la 1.27.4; las versiones 1.28.x anteriores a la 1.28.3 y las versiones 1.29.x anteriores a la 1.29.2 permiten ataques de inyección de atributos mediante reglas de glosario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.3",
            "matchCriteriaId" : "2825F885-DD77-4822-B659-D5AFB56C6B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B837B-D085-4EE4-9556-D25BFA9BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA5659C-9DEA-494E-BB32-E6573E180C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A457BE6-9F2F-45C9-A650-46F7E4B77E20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T09:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the \"homepage\" value of a \".gemspec\" file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Gemirro en versiones anteriores a la 0.16.0 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante una URL JavaScript manipulada en el valor \"homepage\" de un archivo \".gemspec\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gemirro_project:gemirro:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "0.16.0",
            "matchCriteriaId" : "A3E3307D-BE64-43A1-A196-1DF5247636F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12633",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-15T15:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws."
      }, {
        "lang" : "es",
        "value" : "El componente camel-hessian en Apache Camel en versiones 2.x anteriores a la 2.19.4 y las versiones 2.20.x anteriores a la 2.20.1 es vulnerable a una deserialización de objetos Java. La deserialización de datos no fiables puede conducir a fallos de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.19.4",
            "matchCriteriaId" : "54ED7637-2D7F-44DB-A113-DB40AC77DBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.20.0",
            "versionEndExcluding" : "2.20.1",
            "matchCriteriaId" : "0A7E4867-63F4-4840-A93D-C49669EFD4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-12633.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101874",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/CAMEL-11923",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-12633.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/CAMEL-11923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12634",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-15T15:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws."
      }, {
        "lang" : "es",
        "value" : "El componente camel-castor en Apache Camel en versiones 2.x anteriores a la 2.19.4 y las versiones 2.20.x anteriores a la 2.20.1 es vulnerable a una deserialización de objetos Java. La deserialización de datos no fiables puede conducir a fallos de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.19.4",
            "matchCriteriaId" : "54ED7637-2D7F-44DB-A113-DB40AC77DBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:2.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D605B884-CC2D-413B-8602-443A35517B00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-12634.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101876",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/CAMEL-11929",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://camel.apache.org/security-advisories.data/CVE-2017-12634.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/CAMEL-11929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c."
      }, {
        "lang" : "es",
        "value" : "En la versión 2.16.7 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de IOCtl 0x8300000c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27358FF0-795E-4D5B-91F2-81B540EC5901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43139/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43139/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using \"nmap -b\" and allow performing scans via the FTP server."
      }, {
        "lang" : "es",
        "value" : "El servidor PSFTPd 10.0.4 Build 729 no evita los escaneos de salto de FTP por defecto. Estos pueden realizarse empleando \"nmap -b\" y permitiendo la realización de escaneos mediante el servidor FTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psftp:psftpd:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13806B-8D82-4705-8390-002602BDA270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to hide data in the Graphical User Interface (GUI) view and create arbitrary entries to a certain extent. Special characters such as '\"' and ',' and '\\r' are not escaped and can be used to add new entries to the log."
      }, {
        "lang" : "es",
        "value" : "El servidor PSFTPd 10.0.4 Build 729 no escapa datos correctamente antes de escribirlos en un archivo CSV (Comma Separated Values). Esto puede ser empleado por atacantes para ocultar datos en la vista de interfaz gráfica de usuario (GUI) y crear entradas arbitrarias hasta cierto extremo. Los caracteres especiales como las comillas (\"), las comas (,) y los saltos de carro (\\r)no se escapan, por lo que pueden emplearse para añadir nuevas entradas al registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psftp:psftpd:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13806B-8D82-4705-8390-002602BDA270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43144/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43144/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By sending a crafted SSH identification / version string to the server, a NULL pointer dereference could be caused, apparently because of a race condition in the window message handling, performing the cleanup for invalid connections. This incorrect cleanup code has a use-after-free."
      }, {
        "lang" : "es",
        "value" : "Podría desencadenarse de forma remota un problema de uso de memoria previamente liberada en el componente SFTP de PSFTPd 10.0.4 Build 729. Este problema podría desencadenarse antes de la autenticación. El servidor PSFTPd no se reinició correctamente, lo que permitió que atacantes llevasen a cabo un ataque DoS muy efectivo contra este servicio. Al enviar una cadena SSH de identificación/versión manipulada al servidor, podría provocarse una desreferencia de puntero NULL, aparentemente debido a una condición de carrera en la manipulación de la ventana de mensaje, realizando la limpieza para conexiones no válidas. Este código incorrecto de limpieza tiene un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psftp:psftpd:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13806B-8D82-4705-8390-002602BDA270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43144/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43144/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password \"ITsILLEGAL\"; however, this password is not required to extract the data. Cleartext is used for a user password."
      }, {
        "lang" : "es",
        "value" : "El servidor PSFTPd 10.0.4 Build 729 almacena su configuración en el archivo PSFTPd.dat. Este archivo es de tipo Microsoft Access Database y puede ser extraído. La aplicación establece la marca de cifrado con la contraseña \"ITsILLEGAL\"; sin embargo, esta contraseña no se requiere para extraer los datos. Se emplea texto en claro para una contraseña de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psftp:psftpd:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13806B-8D82-4705-8390-002602BDA270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges."
      }, {
        "lang" : "es",
        "value" : "El demonio de compilación en Scala en versiones anteriores a la 2.10.7, las versiones 2.11.x anteriores a la 2.11.12 y las versiones 2.12.x anteriores a la 2.14.4 emplea permisos débiles para archivos privados en /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, lo que permite que usuarios locales escriban en archivos de clase arbitrarios y, consecuentemente, obtengan privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scala-lang:scala:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.7",
            "matchCriteriaId" : "A36AA17F-93CC-41AB-96E7-97A42E7C0A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scala-lang:scala:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.11.0",
            "versionEndExcluding" : "2.11.12",
            "matchCriteriaId" : "8B0777ED-C2D7-49C8-AB69-574661C650D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scala-lang:scala:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.12.0",
            "versionEndExcluding" : "2.12.4",
            "matchCriteriaId" : "F9FEB67F-9152-4566-A565-719CB2E8EFA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://scala-lang.org/news/security-update-nov17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/scala/scala/pull/6108",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scala/scala/pull/6120",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scala/scala/pull/6128",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r10dd8e5b3bbe3bb531aa4a65472ce56f91efbb77ea9fe04bb8272e2c%40%3Cjira.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r18a05115cfa078c0f4e5c1ea2e8d64804f63e0095aa2174a3afecc0f%40%3Cjira.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1d51eae81ceb7bfd1780936a48b460ab31d53ff2ed526a88a7f60fe4%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r32e0b1d5ff43ac3ed4b179a4e663022d1c5ccac77884a99ea149e633%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r33665e9213cc6df1e48c3d99d1b0c7a3203e9bd0ef4fc4ba838bcb04%40%3Cjira.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3f10022ec972c8df29a950d1a591c16562eeddd9194d3010e46b9b76%40%3Cjira.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5a1418a4f5101f5af3fc14bf358c54f2c7200e6a3701de2e2f581e1b%40%3Cdev.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r628ea3ea2fed4d9c1c5232a0b1ed108a15abc9fd2f0aaca1e8cc9164%40%3Cdev.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re72f4d04dfc398aae0e38dbfeccf44780df2782623a610cbfcec6f3a%40%3Cjira.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf57e4d7211b30e51803911304f3b7b54393f7a4bd60bb0784c31eec1%40%3Cjira.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scala-lang.org/news/security-update-nov17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/scala/scala/pull/6108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scala/scala/pull/6120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scala/scala/pull/6128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r10dd8e5b3bbe3bb531aa4a65472ce56f91efbb77ea9fe04bb8272e2c%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r18a05115cfa078c0f4e5c1ea2e8d64804f63e0095aa2174a3afecc0f%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1d51eae81ceb7bfd1780936a48b460ab31d53ff2ed526a88a7f60fe4%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r32e0b1d5ff43ac3ed4b179a4e663022d1c5ccac77884a99ea149e633%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r33665e9213cc6df1e48c3d99d1b0c7a3203e9bd0ef4fc4ba838bcb04%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3f10022ec972c8df29a950d1a591c16562eeddd9194d3010e46b9b76%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5a1418a4f5101f5af3fc14bf358c54f2c7200e6a3701de2e2f581e1b%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r628ea3ea2fed4d9c1c5232a0b1ed108a15abc9fd2f0aaca1e8cc9164%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re72f4d04dfc398aae0e38dbfeccf44780df2782623a610cbfcec6f3a%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf57e4d7211b30e51803911304f3b7b54393f7a4bd60bb0784c31eec1%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing \"-X/path/to/wwwroot/file.php.\""
      }, {
        "lang" : "es",
        "value" : "La función send en la clase ezcMailMtaTransport en Zeta Components Mail en versiones anteriores a la 1.8.2 no restringe correctamente el conjunto de caracteres empleados en la propiedad de ezcMail returnPath, lo que podría permitir que atacantes remotos ejecuten código arbitrario mediante una dirección de correo electrónico manipulada, tal y como demuestra una que contenga \"-X/path/to/wwwroot/file.php\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zetacomponents:mail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.2",
            "matchCriteriaId" : "927EE589-CA16-4708-B79F-DD7881B590F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101866",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zetacomponents/Mail/issues/58",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zetacomponents/Mail/releases/tag/1.8.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-yuan-cheng-dai-ma-zhi-xing-lou-dong/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43155/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zetacomponents/Mail/issues/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zetacomponents/Mail/releases/tag/1.8.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-yuan-cheng-dai-ma-zhi-xing-lou-dong/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-15T16:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service (crash) via vectors related to parsing of IRC color formatting codes."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.4.x, 1.5.x, 1.6.x y las versiones 1.7.x anteriores a la 1.7.3 de Konversation permiten que atacantes remotos provoquen una denegación de servicio (cierre inesperado) mediante vectores relacionados con el análisis sintáctico de códigos IRC de formato de color."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konversation:konversation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "4B9AC227-C4D9-44AC-9B10-86B9E3A99FDC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cgit.kde.org/konversation.git/commit/?h=1.7&id=6a7f59ee1b9dbc6e5cf9e5f3b306504d02b73ef0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://konversation.kde.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4033",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.kde.org/konversation.git/commit/?h=1.7&id=6a7f59ee1b9dbc6e5cf9e5f3b306504d02b73ef0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://konversation.kde.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15102",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-15T21:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "La función tower_probe en drivers/usb/misc/legousbtower.c en el kernel de Linux en versiones anteriores a la 4.8.1 permite que usuarios locales (que estén tan cerca físicamente como para insertar un dispositivo USB manipulado) obtengan privilegios aprovechando una condición de write-what-where que ocurre tras una condición de carrera y una desreferencia de puntero NULL"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.1",
            "matchCriteriaId" : "52C1E6B2-1581-4CD7-B5FB-8DF3438E93C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2fae9e5a7babada041e2e161699ade2447a01989",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/238",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1505905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2fae9e5a7babada041e2e161699ade2447a01989",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2fae9e5a7babada041e2e161699ade2447a01989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1505905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2fae9e5a7babada041e2e161699ade2447a01989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15115",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-15T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls."
      }, {
        "lang" : "es",
        "value" : "La función sctp_do_peeloff en net/sctp/socket.c en el kernel de Linux en versiones anteriores a la 4.14 no comprueba si el netns planeado se emplea en una acción peel-off, lo que permite que usuarios locales provoquen una denegación de servicio (uso de memoria previamente liberada y cierre inesperado del sistema) o, posiblemente, otro impacto sin especificar mediante llamadas del sistema manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.96",
            "matchCriteriaId" : "4428FEB0-683A-4D39-8032-AE7548DEE30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.51",
            "matchCriteriaId" : "395E1A49-C343-44A0-B27D-6144C5736F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.84",
            "matchCriteriaId" : "DB67DFF9-D1AD-49F9-AC6A-2BBFE1619CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.47",
            "matchCriteriaId" : "8B69ADB4-1D58-48EB-8B97-013FD5D1A7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.100",
            "matchCriteriaId" : "CA904B37-FF1D-49F0-8D5A-1037F781DDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.65",
            "matchCriteriaId" : "3518FFAF-87EE-4923-9061-5BD0131ADF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.16",
            "matchCriteriaId" : "6524421B-E3B0-46A0-8C5D-743F64578526"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df80cd9b28b9ebaa284a41df611dbf3a2d05ca74",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/282",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101877",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1513345",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/df80cd9b28b9ebaa284a41df611dbf3a2d05ca74",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/827077/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-3/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df80cd9b28b9ebaa284a41df611dbf3a2d05ca74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1513345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/df80cd9b28b9ebaa284a41df611dbf3a2d05ca74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.ozlabs.org/patch/827077/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5532",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-11-15T21:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0 and below, TIBCO Jaspersoft Studio 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, and TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.4.0 and below."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de renderización de informes en TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio y TIBCO Jaspersoft Studio for ActiveMatrix BPM podría permitir que un subconjunto de usuarios autorizados lleve a cabo ataques de Cross-Site Scripting (XSS) persistente. Las versiones afectadas son TIBCO JasperReports Server 6.2.3 y anteriores; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 y anteriores, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 y anteriores, TIBCO JasperReports Library 6.2.3 y anteriores; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 y anteriores, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 y anteriores, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0 y anteriores, TIBCO Jaspersoft Studio 6.2.3 y anteriores; 6.3.0; 6.3.1; 6.3.2; 6.4.0 y TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.4.0 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.3",
            "matchCriteriaId" : "40E067D3-B67C-4C55-B8C1-CF24054B0788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF00ED7-2B4C-4043-A061-84ADFB785C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D911254B-1935-4971-93E9-4052EC0E83B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B0408C-9F3F-48A7-A8B4-379B90557E95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B714B874-89AD-49AD-8B8D-2EEDF6804E1C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:community:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "EFA592CF-0110-4061-AFA7-7B6AA80EBF6B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:activematrix_bpm:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "C0DD94A0-6896-4CA3-A105-16DB5B8421C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.3",
            "matchCriteriaId" : "B350CC3F-74B9-4980-86A2-578A2591AE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEEB975-7721-436C-A8EF-62C91A67D5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C58FDCA-1A2D-48E3-B2C4-6BD60EDEE3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77C998E-10BD-49CE-AA25-57D24DE782B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FF909-232C-4C5E-981D-BD5438FD0D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FE5644-D4B9-404D-9169-2AAF87721234"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_library:*:*:*:*:*:activematrix_bpm:*:*",
            "versionEndIncluding" : "6.4.1",
            "matchCriteriaId" : "F1A009EF-E826-4F37-BEA4-85CE465358F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft:*:*:*:*:*:aws_with_multi-tenancy:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "D4795717-92FE-49F3-AF81-5397B138DE40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics:*:*:*:*:*:aws:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "11DD3FD5-270F-4450-8847-E1E910C4101C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.3",
            "matchCriteriaId" : "51CC312D-5DC5-479C-8A17-69AE2BCA3285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D22C6F-FF80-4154-AC3D-2D27987E7ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA38684-1870-41E1-B466-470C01E55926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE165BF-269E-4964-8051-1AE06A911851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D48582-55FC-4D7F-8B01-A649A19A1E9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_studio:*:*:*:*:*:activematrix_bpm:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "762ACA9A-592C-408E-82CC-2064F25249BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101873",
        "source" : "security@tibco.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-2017-5532",
        "source" : "security@tibco.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-2017-5532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5533",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-11-15T21:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la caché de contenido del servidor de TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy y TIBCO Jaspersoft Reporting and Analytics for AWS contiene una vulnerabilidad que fracasa a la hora de evitar el acceso remoto a todos los contenidos de la aplicación web, incluyendo archivos clave de configuración. Las versiones afectadas son TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 y TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B714B874-89AD-49AD-8B8D-2EEDF6804E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.4.0:*:*:*:*:activematrix_bpm:*:*",
            "matchCriteriaId" : "39F03159-32D4-4DED-A5C5-281CFA618CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jasperreports_server:6.4.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "202888F1-FDED-471B-8155-16A0CD225FDF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft:6.4.0:*:*:*:*:aws_with_multi-tenancy:*:*",
            "matchCriteriaId" : "19FE9491-C9C0-42F7-BFC2-4DDB14FC381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics:6.4.0:*:*:*:*:aws:*:*",
            "matchCriteriaId" : "55E37992-950A-4C31-84BC-9BD60C3B8B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101878",
        "source" : "security@tibco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017",
        "source" : "security@tibco.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "security@tibco.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T02:29:05.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account."
      }, {
        "lang" : "es",
        "value" : "En PNP4Nagios hasta la versión 0.6.26, /usr/bin/npcd y npcd.cfg son propiedad de una cuenta sin privilegios, pero la ejecución de código root depende de estos archivos. Esto permite que usuarios locales obtengan privilegios aprovechando el acceso a esta cuenta sin privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnp4nagios:pnp4nagios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.26",
            "matchCriteriaId" : "6D8D29FE-3B5E-431E-926A-CE7F6215C566"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lingej/pnp4nagios/issues/140",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201806-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/lingej/pnp4nagios/issues/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201806-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T02:29:05.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Arris TG1682G con software Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT permiten Cross-Site Scripting (XSS) persistente no autenticado mediante el parámetro de servicio actionHandler/ajax_managed_services.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.59.sip.pc20.ct:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECC2B1B-0C50-42D2-B62D-D53A2520C77C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2AFAD9-07CD-4960-801F-A602CB31BD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/38657/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/38657/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T02:29:05.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers."
      }, {
        "lang" : "es",
        "value" : "Ciertos punteros de función en Trusted Boot (tboot) hasta la versión 1.9.6 no se validan y pueden provocar la ejecución de código arbitrario. Esto permite que usuarios locales sobrescriban los PCR dinámicos de Trusted Platform Module (TPM) enlazando estos punteros de función."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trusted_boot_project:trusted_boot:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCD6682-6DCC-4A70-AA1A-B61585A62068"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/tboot/code/ci/521c58e51eb5be105a29983742850e72c44ed80e/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/usenixsecurity18/presentation/han",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/tboot/code/ci/521c58e51eb5be105a29983742850e72c44ed80e/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/usenixsecurity18/presentation/han",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8807",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-16T02:29:05.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in certain circumstances involving -sfile Stevedore transient objects."
      }, {
        "lang" : "es",
        "value" : "vbf_stp_error en bin/varnishd/cache/cache_fetch.c en Varnish HTTP Cache en versiones 4.1.x anteriores a la 4.1.9 y las versiones 5.x anteriores a la 5.2.1 permite que atacantes remotos obtengan información sensible de la memoria de procesos debido a que un búfer VFP_GetStorage es más grande de lo planeado en ciertas circunstancias relacionadas con objetos transitorios -sfile Stevedore."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.9",
            "matchCriteriaId" : "0870F626-489C-4652-9D6E-6914226A1ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "4E9ADE7F-7963-4A1A-9C57-1880888D23EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://varnish-cache.org/security/VSV00002.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101886",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/881808",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/varnishcache/varnish-cache/commit/176f8a075a963ffbfa56f1c460c15f6a1a6af5a7",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/varnishcache/varnish-cache/pull/2429",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4034",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://varnish-cache.org/security/VSV00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/881808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/varnishcache/varnish-cache/commit/176f8a075a963ffbfa56f1c460c15f6a1a6af5a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/varnishcache/varnish-cache/pull/2429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T03:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx."
      }, {
        "lang" : "es",
        "value" : "La versión 6.0.100.75 de LanSweeper tiene XSS mediante el parámetro description en /Calendar/CalendarActions.aspx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lansweeper:lansweeper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.100.94",
            "matchCriteriaId" : "D6B12B7A-ED0F-49B1-889E-C07DD441AA1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43149/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.linkedin.com/pulse/lansweeper-bug-miguel-angel-mendez-oscp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43149/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.linkedin.com/pulse/lansweeper-bug-miguel-angel-mendez-oscp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T03:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en admin/google_search_console/class-gsc-table.php en el plugin Yoast SEO en versiones anteriores a la 5.8.0 para WordPress permite que atacantes remotos inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoast:wordpress_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.8.0",
            "matchCriteriaId" : "8D25091F-F24F-4586-8A5D-FB517FA4AA94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145080/WordPress-Yoast-SEO-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1766831/wordpress-seo/trunk/admin/google_search_console/class-gsc-table.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wordpress-seo/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145080/WordPress-Yoast-SEO-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1766831/wordpress-seo/trunk/admin/google_search_console/class-gsc-table.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wordpress-seo/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T04:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en VideoLAN x265, tal y como se emplea en libbpg 0.9.7 y otros productos, ya que la función CUData::initialize en common/cudata.cpp gestiona de manera incorrecta el fallo de asignación de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101929",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ebel34/bpg-web-encoder/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ebel34/bpg-web-encoder/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T04:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "La función image_alloc en bpgenc.c en libbpg 0.9.7 tiene un desbordamiento de enteros con un malloc inválido resultante y una desreferencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ebel34/bpg-web-encoder/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ebel34/bpg-web-encoder/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T04:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "La función restore_tqb_pixels en hevc_filter.c en libavcodec, tal y como se emplea en libbpg 0.9.7 y otros productos, no calcula correctamente una dirección de destino de memcpy. Esto permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ebel34/bpg-web-encoder/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ebel34/bpg-web-encoder/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12290",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE69791-D6D3-4523-8B9F-6E9EC4914C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0-038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD106DD-EF4F-4FAE-93BC-5790838DC668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12291",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podrían permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE69791-D6D3-4523-8B9F-6E9EC4914C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0-038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD106DD-EF4F-4FAE-93BC-5790838DC668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12292",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE69791-D6D3-4523-8B9F-6E9EC4914C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0-038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD106DD-EF4F-4FAE-93BC-5790838DC668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12299",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP management traffic. The vulnerability is due to an implementation error that exists in the process of creating default IP blocks when the device is initialized, and the way in which those IP blocks interact with user-configured filters for local IP management traffic (for example, SSH to the device). An attacker could exploit this vulnerability by sending traffic to the local IP address of the targeted device. A successful exploit could allow the attacker to connect to the local IP address of the device even when there are filters configured to deny the traffic. Cisco Bug IDs: CSCvd97962."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el proceso de creación de bloques de IP por defecto durante la inicialización del dispositivo para Cisco ASA Next-Generation Firewall Services que podría permitir que un atacante remoto no autenticado envíe tráfico a la dirección IP local del dispositivo, omitiendo cualquier filtro que esté configurado para denegar el tráfico de gestión de IP locales. La vulnerabilidad se debe a un error de implementación que existe en el proceso de creación de bloques de IP por defecto cuando se inicializa el dispositivo, así como la manera en la que estos bloques de IP interactúan con filtros configurados por el usuario para el tráfico de gestión de IP locales (por ejemplo, conexiones por SSH al dispositivo). Un atacante podría explotar esta vulnerabilidad enviando tráfico a la dirección IP local del dispositivo objetivo. Un exploit con éxito podría permitir que el atacante se conecte a la dirección IP local del dispositivo incluso cuando hay filtros configurados para denegar el tráfico. Cisco Bug IDs: CSCvd97962."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:2.2\\(1.58\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "440987CD-5D97-4B45-BBA5-FB60094F1460"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101915",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12300",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 (SMB2) protocol. The vulnerability is due to the incorrect detection of an SMB2 file when the detection is based on the length of the file. An attacker could exploit this vulnerability by sending a crafted SMB2 transfer request through the targeted device. A successful exploit could allow the attacker to bypass filters that are configured to block SMB2 traffic. Cisco Bug IDs: CSCve58398."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el motor de detección SNORT de Cisco Firepower System Software podría permitir que un atacante remoto sin autenticar omita una política de archivos que esté configurada para bloquear el protocolo Server Message Block Version 2 (SMB2). La vulnerabilidad se debe a la incorrecta detección de un archivo SMB2 cuando la detección se basa en la longitud del archivo. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición de transferencia de SMB2 manipulada al dispositivo objetivo. Un exploit con éxito podría permitir que el atacante omita filtros que están configurados para bloquear el tráfico SMB2. Cisco Bug IDs: CSCve58398."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40CC4B82-5F54-49E3-921B-AB1A66D264A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB04A5E-4DEA-48F8-9819-3232C5CEB9DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEAF14A-431F-43A0-9E7E-1B8039D5B954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8532C989-889B-4DEE-8687-6C67F173E50D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101862",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12302",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The vulnerability is due to a lack of input validation on user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected system. An exploit could allow the attacker to determine the presence of certain values in the database. Cisco Bug IDs: CSCvf36682."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de la base de datos de Cisco Unified Communications Manager SQL podría permitir que un atacante remoto autenticado afecte a la confidencialidad del sistema ejecutando consultas SQL arbitrarias. Esto también se conoce como inyección SQL. Esta vulnerabilidad se debe a la falta de mecanismos de validación de los valores de entrada proporcionados por el usuario en consultas SQL. Un atacante podría explotar esta vulnerabilidad mediante el envío de URL modificadas que incluyan instrucciones SQL maliciosas al sistema afectado. Un exploit podría permitir que el atacante determine la presencia de ciertos valores en la base de datos. Cisco Bug IDs: CSCvf36682."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_domain_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F90C679-F576-4A22-AE67-026D5FC3A485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_domain_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "816DA16D-AF01-4357-939A-DBF9A3689496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_domain_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A87159B-CC9A-4A81-B4EF-FA37AF212044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_domain_manager:12.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "51875F36-397B-4A89-ABE7-E5B7707955C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101853",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039826",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12303",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured AMP file filtering rule. The file types affected are zipped or archived file types. The vulnerability is due to incorrect and different file hash values when AMP scans the file. An attacker could exploit this vulnerability by sending a crafted email file attachment through the targeted device. An exploit could allow the attacker to bypass a configured AMP file filter. Cisco Bug IDs: CSCvf52943."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de filtrado de archivos Advanced Malware Protection (AMP) de Cisco AsyncOS Software para Cisco Web Security Appliance (WSA) podría permitir que un atacante remoto sin autenticar omita una regla de filtrado de archivos AMP configurada. Los tipos de archivo que se han visto afectados son los comprimidos o zip. La vulnerabilidad se debe a los valores hash de archivo incorrectos y diferentes cuando AMP escanea el archivo. Un atacante podría explotar esta vulnerabilidad mediante el envío de un archivo adjunto de correo electrónico manipulado al dispositivo objetivo. Un exploit podría permitir que el atacante omita un filtro de archivos AMP configurado. Cisco Bug IDs: CSCvf52943."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:10.1.1-234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CDDB37-3A0A-4F80-8356-32DDB95050A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:10.1.1-235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC59E598-B7FE-4C19-B840-7E40C75A8F89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101932",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039828",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-wsa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-wsa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12304",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface on an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the web-based management interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf60862."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web del demonio IOS (IOSd) en Cisco IOS e IOS XW Software podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de la interfaz de gestión web en un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entradas de parte del usuario en la interfaz de gestión web. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en la interfaz de gestión web o que pueda acceder a información sensible del navegador. Cisco Bug IDs: CSCvf60862."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(2.0z\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F797FF56-9748-4976-A94C-D7BDE68A4F78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101856",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039825",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ios",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ios",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12305",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands, aka Debug Shell Command Injection. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting additional command input to the affected parameter in the debug shell. Cisco Bug IDs: CSCvf80034."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de depuración de Cisco IP Phone 8800 series podría permitir que un atacante local autenticado ejecute comandos arbitrarios. Esto también se conoce como Debug Shell Command Injection. Esta vulnerabilidad se debe a una validación de entradas insuficiente. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo y enviando entradas de comandos adicionales al parámetro afectado en el shell de depuración. Cisco Bug IDs: CSCvf80034."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8800_series_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03817EE-30B6-468D-96C9-D5C2CA99DD4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101869",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039829",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ipp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ipp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12306",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an unverified upgrade package, aka Signature Verification Bypass. The vulnerability is due to insufficient upgrade package validation. An attacker could exploit this vulnerability by providing the upgrade process with an upgrade package that the attacker controls. An exploit could allow the attacker to install custom firmware to the Spark Board. Cisco Bug IDs: CSCvf84502."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de actualización de Cisco Spark Board podría permitir que un atacante local autenticado instale un paquete de actualización no verificado. Esto también se conoce como Signature Verification Bypass. Esta vulnerabilidad se debe a una validación de paquetes de actualización insuficiente. Un atacante podría explotar esta vulnerabilidad proporcionando al proceso de actualización un paquete de actualización controlado por el atacante. Un exploit podría permitir que el atacante instale firmware personalizado en Spark Board. Cisco Bug IDs: CSCvf84502."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:conference_director:2017-08-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3AEA6C-29FC-456A-B3A6-276C3C7CBD2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101914",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-spark",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-spark",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12309",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses. An exploit could allow the attacker to perform cross-site scripting attacks, cross-user defacement, web cache poisoning, and similar exploits. Cisco Bug IDs: CSCvf16705."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Email Security Appliance (ESA) podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de separación de respuestas HTTP. La vulnerabilidad se debe a que la aplicación o su entorno fracasan a la hora de sanitizar los valores de entrada. Un atacante podría explotar esta vulnerabilidad inyectando cabeceras HTTP maliciosas, controlando el cuerpo de la respuesta o dividiendo la respuesta en múltiples respuestas. Un exploit podría permitir que el atacante realice ataques de Cross-Site Scripting, desfiguración cruzada de usuario, envenenamiento de caché DNS o exploits similares. Cisco Bug IDs: CSCvf16705."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.2-020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A537FC65-B185-42DB-98F9-14148F83160E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:email_security_appliance_firmware:11.0.0-105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AD6E6E-7DA1-4256-971F-2293B8094C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101928",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039831",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-esa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-esa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12311",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulnerability is triggered by an H.264 frame that has an invalid picture parameter set (PPS) value. An attacker could exploit this vulnerability by sending a malformed H.264 frame to the targeted device. An exploit could allow the attacker to cause a denial of service (DoS) condition because the media process could restart. The media session should be re-established within a few seconds, during which there could be a brief interruption in service. Cisco Bug IDs: CSCvg12559."
      }, {
        "lang" : "es",
        "value" : "La función de descodificación H.264 de Cisco Meeting Server podría permitir que un atacante remoto sin autenticar provoque que un proceso multimedia de Cisco Meeting Server se reinicie de forma inesperada cuando recibe una tramaH.264 ilegal. Esta vulnerabilidad es desencadenada por una trama H.264 que tiene un valor de PPS (picture parameter set) inválido. Un atacante podría explotar esta vulnerabilidad enviando una trama H.264 mal formada al dispositivo afectado. Su explotación podría permitir a un atacante provocar una denegación de servicio por el reinicio inesperado del proceso multimedia. La sesión multimedia debería restablecerse en unos pocos segundos, durante los cuales podría haber una breve interrupción del servicio. Cisco Bug IDs: CSCvg12559."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0F4CF7-87D8-43D2-9C66-717A2939C374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B310B39B-7D5D-4533-9FE6-5F47985E35B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E377BED5-DC33-44C4-A75E-73971A13C211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90BAA6-4623-4AFB-B0D0-14CD2CDB6968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101855",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039827",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12312",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory where a crafted DLL has been placed by an attacker. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. An attacker would need valid user credentials to exploit this vulnerability. Cisco Bug IDs: CSCvf23928."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable (también conocida como precarga de DLL) en el instalador antimalware Cisco Immunet podría permitir que un atacante local autenticado ejecute código arbitrario mediante el secuestro de DLL si un usuario local con privilegios administrativos ejecuta el instalador en el directorio de trabajo actual en donde un atacante ha situado un DLL manipulado. La vulnerabilidad se debe a una validación incompleta de los nombres de ruta y archivo de un archivo DLL antes de que se carguen. Un atacante podría explotar esta vulnerabilidad creando un archivo DLL malicioso e instalándolo en un directorio del sistema específico. Un exploit con éxito podría permitir que el atacante ejecute comandos en el host subyacente de Microsoft Windows con privilegios equivalentes a los de una cuenta SYSTEM. Un atacante necesitaría credenciales de usuario válidas para explotar esta vulnerabilidad. Cisco Bug IDs: CSCvf23928."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEF67CE-61F8-4C09-AF2B-E51C78108C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101930",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-iami",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-iami",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12313",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory where a crafted DLL has been placed by an attacker. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. An attacker would need valid user credentials to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable (también conocida como precarga de DLL) en el software Cisco Network Academy Packet podría permitir que un atacante local autenticado ejecute código arbitrario mediante el secuestro de DLL si un usuario local con privilegios administrativos ejecuta el instalador en el directorio de trabajo actual en donde un atacante ha situado un DLL manipulado. La vulnerabilidad se debe a una validación incompleta de los nombres de ruta y archivo de un archivo DLL antes de que se carguen. Un atacante podría explotar esta vulnerabilidad creando un archivo DLL malicioso e instalándolo en un directorio del sistema específico. Un exploit con éxito podría permitir que el atacante ejecute comandos en el host subyacente de Microsoft Windows con privilegios equivalentes a los de una cuenta SYSTEM. Un atacante necesitaría credenciales de usuario válidas para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:packet_tracer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA68F45D-747E-492F-9E48-7F8AFA14B89D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101858",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cpt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cpt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12314",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity, aka Insecure Library Loading. The vulnerability is due to the application loading a malicious copy of a specific, nondefined DLL file instead of the DLL file it was expecting. An attacker could exploit this vulnerability by placing an affected DLL within the search path of the host system. An exploit could allow the attacker to load a malicious DLL file into the system, thus partially compromising confidentiality, integrity, and availability on the device. Cisco Bug IDs: CSCvf37955."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco FindIT Network Discovery Utility podría permitir que un atacante local autenticado realice un ataque de precarga de DLL, pudiendo causar un impacto parcial en la disponibilidad, confidencialidad e integridad del dispositivo. Esto también se conoce como Insecure Library Loading. Esta vulnerabilidad se debe a que la aplicación carga una copia maliciosa de un DLL específico pero no definido en vez del archivo DLL esperado. Un atacante podría explotar esta vulnerabilidad ubicando un DLL afectado en una ruta de búsqueda del sistema anfitrión. Su explotación podría permitir que el atacante cargue un archivo DLL malicioso en el sistema, comprometiendo parcialmente la disponibilidad, confidencialidad e integridad del dispositivo. Cisco Bug IDs: CSCvf37955."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:findit_network_discovery_utility:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954FBF98-23B7-404D-BBA9-A0B1EA135AB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101896",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-findit",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-findit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12315",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvg31472."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el inicio de sesión del sistema cuando se está configurando la replicación en Cisco HyperFlex System podría permitir que un atacante local autenticado vea información sensible que debería estar restringida en los archivos de registro del sistema. El atacante tendría que estar autenticado como usuario administrativo para llevar a cabo este ataque. La vulnerabilidad se debe a la falta de enmascaramiento de información sensible en archivos de registro del sistema. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo objetivo y viendo el archivo de registro del sistema. Un exploit podría permitir que el atacante vea información sensible del sistema que debería estar restringida. El atacante podría utilizar esta información para llevar a cabo ataques de reconocimiento adicionales. Cisco Bug IDs: CSCvg31472."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:2.6\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D56AD98-9D0D-4ECA-8766-4F19A33F954D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101864",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-hyperflex",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-hyperflex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12316",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform multiple login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side login attempt limit enforcement. An attacker could exploit this vulnerability by sending modified login attempts to the Guest Portal login page. An exploit could allow the attacker to perform brute-force password attacks on the ISE Guest Portal. Cisco Bug IDs: CSCve98518."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la página de inicio de sesión de Guest Portal en Cisco Identity Services Engine (ISE) podría permitir que un atacante remoto sin autenticar realice múltiples intentos de inicio de sesión excediendo el límite de intentos de inicio de sesión configurado. La vulnerabilidad se debe a la aplicación insuficiente de límite de inicios de sesión del lado del servidor. Un atacante podría explotar esta vulnerabilidad enviando intentos de inicio de sesión modificados a la página de inicio de sesión de Guest Portal. Un exploit podría permitir que el atacante lleve a cabo ataques de contraseña por fuerza bruta en el Guest Portal de ISE. Cisco Bug IDs: CSCve98518."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine_software:2.1\\(0.229\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5198CA68-1A6C-444D-A28A-6C8C89088E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101931",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039830",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ise",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ise",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12318",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video (SDV) or video on demand (VoD) streams, resulting in a denial of service (DoS) condition. The vulnerability is due to a processing error with TCP connections to the affected device. An attacker could exploit this vulnerability by establishing a large number of TCP connections to an affected device and not actively closing those TCP connections. A successful exploit could allow the attacker to prevent the affected device from delivering SDV or VoD streams to set-top boxes. Cisco Bug IDs: CSCvf19887."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la máquina de estado TCP de dispositivos Cisco RF Gateway 1 podría permitir que un atacante remoto no autenticado evite que un dispositivo afectado realice transmisiones de SDV (Switched Digital Video) o Video on Demand (VoD), resultando en una condición de denegación de servicio (DoS). La vulnerabilidad se debe a un error de procesamiento con conexiones TCP en el dispositivo afectado. Un atacante podría explotar esta vulnerabilidad estableciendo un gran número de conexiones TCP en un dispositivo afectado y no cerrando activamente dichas conexiones TCP. Un exploit con éxito podría permitir que el atacante evite que el dispositivo afectado realice transmisiones SDV o VoD a decodificadores de televisión. Cisco Bug IDs: CSCvf19887."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rf_gateway_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791C9FD4-AE6B-4FFD-A861-569659460C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rf_gateway_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5E622-0FCB-452A-9897-0A9756729C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101854",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-rf-gateway-1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-rf-gateway-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12320",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podrían permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:registered_envelope_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0C4D0C-C00C-4433-9090-6575B00E8A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12321",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podrían permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:registered_envelope_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0C4D0C-C00C-4433-9090-6575B00E8A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12322",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podrían permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_encryption:5.3.0-038:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD106DD-EF4F-4FAE-93BC-5790838DC668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12323",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz web de Cisco Registered Envelope Service (un servicio basado en la nube) podrían permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) o redirija a un usuario del servicio afectado a una página web no deseada. Las vulnerabilidades se deben a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web del servicio afectado. Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario para que haga clic en un enlace malicioso o enviando una petición HTTP que podría provocar que el servicio afectado redirija la petición a una URL maliciosa en específico. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz web del sistema afectado o que pueda acceder a información sensible del navegador en el sistema afectado. Este tipo de exploit también podría emplearse en ataques de phishing que envían a usuarios a páginas web maliciosas sin su conocimiento. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:registered_envelope_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0C4D0C-C00C-4433-9090-6575B00E8A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12337",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:01.023",
      "lastModified" : "2025-07-31T15:03:24.870",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration is performed on an affected device. When a refresh upgrade or PCD migration is completed successfully, an engineering flag remains enabled and could allow root access to the device with a known password. If the vulnerable device is subsequently upgraded using the standard upgrade method to an Engineering Special Release, service update, or a new major release of the affected product, this vulnerability is remediated by that action. Note: Engineering Special Releases that are installed as COP files, as opposed to the standard upgrade method, do not remediate this vulnerability. An attacker who can access an affected device over SFTP while it is in a vulnerable state could gain root access to the device. This access could allow the attacker to compromise the affected system completely. Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, CSCvg68797."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el mecanismo de actualización de productos de colaboración de Cisco basados en la plataforma de software Cisco Voice Operating System podría permitir que un atacante remoto no autenticado obtenga acceso elevado no autorizado a un dispositivo afectado. La vulnerabilidad ocurre cuando un refresh upgrade (RU) o una migración Prime Collaboration Deployment (PCD) se realiza en un dispositivo afectado. Cuando un refresh upgrade o una migración PCD se completa con éxito, una marca de ingeniería se mantiene habilitada y podría permitir el acceso root al dispositivo con una contraseña conocida. Si el dispositivo vulnerable se actualiza empleando el método de actualización estándar a un Engineering Special Release, la actualización del servicio o una nueva actualización del producto afectado, esta vulnerabilidad se remedia mediante tal acción. Nota: Los Engineering Special Release que se instalan como archivos COP, a diferencia del método de actualización estándar, no remedian esta vulnerabilidad. Un atacante que pueda acceder a un dispositivo afectado mediante SFTP mientras se encuentre en un estado vulnerable podría obtener acceso root al dispositivo. Este acceso podría permitir que el atacante comprometa completamente el sistema afectado. Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, CSCvg68797."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3342DE3-F98B-48CF-9416-FA8D7F062E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F343F98-1100-489F-B34C-480F7898A240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_solution:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A8E190-1846-44ED-9572-D80D71A433DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:mediasense:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0A2D56-3667-438C-A367-4DB74F72507B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_license_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE11E45-1A8C-497C-A1B1-ED695E812CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:socialminer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A9B36-D4E2-4578-9BB9-3CCD008AE628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395232C7-93D5-4877-A726-32E5BAFAF812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:-:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "863C456D-EE60-49F8-AFB0-795EA29CD93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16991CD6-A32F-4891-B6B6-41D050FC1412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F1581-0CD5-40B9-8C9E-0E428E6D75C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3270ADFF-27F5-4972-AB44-FA2882486B16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0368C678-72A4-4F48-B31D-77A6BDAAC4DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101865",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039813",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039814",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039815",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039816",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039817",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039818",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039819",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039820",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12350",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-16T07:29:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker could exploit this vulnerability by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in to an affected virtual appliance. A successful exploit could allow the attacker to log in to the affected appliance with root privileges. Cisco Bug IDs: CSCvg31220."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Umbrella Insights Virtual Appliances 2.1.0 y anteriores podría permitir que un atacante local autenticado inicie sesión en una máquina virtual afectada con privilegios root. La vulnerabilidad se debe a la presencia de credenciales estáticas de usuario por defecto para una máquina virtual afectada. Un atacante podría explotar esta vulnerabilidad empleando la consola del hipervisor para conectarse de forma local a un sistema afectado y, a continuación, empleando las credenciales estáticas para iniciar sesión en una máquina virtual afectada. Un exploit con éxito podría permitir que el atacante consiga iniciar sesión en el aparato afectado con privilegios root. Cisco Bug IDs: CSCvg31220."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:umbrella_insights_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "28086565-F8BB-4F22-8FB3-FF36BAD5E598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101879",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5738",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-16T14:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker with network access to cause a denial of service and/or information disclosure."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de privilegios en el portal administrador para Intel Unite App en sus versiones 3.1.32.12, 3.1.41.18 y 3.1.45.26 permite que un atacante con acceso a red provoque una denegación de servicio y/o revele información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:unite:3.1.32.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FA236-62CE-4F14-B2E4-0ACA1F5F6EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:unite:3.1.41.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68BDC18-00E7-486B-A3F5-99B37C0A0BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:unite:3.1.45.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750E1391-CE68-4CA2-8E7E-410D92C2322B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101888",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00092&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00092&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T15:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password."
      }, {
        "lang" : "es",
        "value" : "En Agent Frontend en Open Ticket Request System (OTRS) en sus versiones 3.3.x hasta la 3.3.18, con una URL manipulada es posible obtener información como el usuario y la contraseña de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.18",
            "matchCriteriaId" : "4A1B0746-7E65-4E11-B7E4-2FBA6BFC1F33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4047",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-06-security-update-otrs-3-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-06-security-update-otrs-3-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T15:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes."
      }, {
        "lang" : "es",
        "value" : "SanDisk Secure Access 3.01 descifra y copia archivos cifrados en una carpeta temporal, donde pueden permanecer indefinidamente en determinadas situaciones. por ejemplo, si el archivo se está editando cuando el usuario sale de la aplicación o si la aplicación se cierra de manera inesperada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandisk:secureaccess:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CDB42-5AE7-4FBE-AFD3-16D85D33AD11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40esterling_/cve-2017-16560-sandisk-secure-access-leaves-plain-text-copies-of-files-on-disk-4eabeca6bdbc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40esterling_/cve-2017-16560-sandisk-secure-access-leaves-plain-text-copies-of-files-on-disk-4eabeca6bdbc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T15:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root."
      }, {
        "lang" : "es",
        "value" : "Si el plugin HashiCorp Vagrant de VMware Fusion (también conocido como vagrant-vmware-fusion) 5.0.3 está instalado, pero VMware Fusion no, un atacante local podría crear un directorio de aplicación falso y explotar el asistente de suid sudo para escalar a root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant:5.0.3:*:*:*:*:vmware_fusion:*:*",
            "matchCriteriaId" : "AD695FDE-78FD-487D-AF88-85691CEFD05F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201716777-local-root-privesc-in-hashicorp-vagrantvmwarefusion-503.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43219/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://m4.rkw.io/blog/cve201716777-local-root-privesc-in-hashicorp-vagrantvmwarefusion-503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43219/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T15:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en la función loadbuf en formisc.c en formail en la versión 3.22 de procmail permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de aplicación) o, posiblemente, ejecuten código arbitrario mediante un mensaje de email manipulado debido a un tamaño de realloc embebido. Esta es una vulnerabilidad diferente de CVE-2014-3618."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:procmail:procmail:3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D9766A-7700-4D2D-9E4B-6C515230B6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039844",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3269",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4041",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 antes de la build 13530 permite una inyección SQL mediante el parámetro haid en /manageApplications.do?method=AddSubGroup."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16846.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16846.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 antes de la build 13530 permite una inyección SQL mediante el parámetro resourceid en /showresource.do en una acción showPlasmaView."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16847.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16847.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 permite inyección SQL mediante el parámetro groupname en /manageConfMons.do."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 antes de la build 13530 permite una inyección SQL mediante el parámetro forpage en /MyPage.do?method=viewDashBoard."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16849.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16849.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 antes de la build 13530 permite una inyección SQL mediante el parámetro resourceid en /showresource.do en una acción getResourceProfiles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16850.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16850.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Applications Manager 13 antes de la build 13530 permite una inyección SQL mediante el parámetro widgetid en /MyPage.do."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BC473D-B091-41C9-8C0F-D397B16F0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16851.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16851.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763."
      }, {
        "lang" : "es",
        "value" : "shibsp/metadata/DynamicMetadataProvider.cpp en el plugin Dynamic MetadataProvider en Shibboleth Service Provider, en versiones anteriores a la 2.6.1, no se configura correctamente con los plugins MetadataFilter y no realiza las verificaciones de seguridad críticas como la verificación de firmas, cumplimiento de los periodos de validez y otras comprobaciones específicas de despliegues. Esta vulnerabilidad también se conoce como SSPCPP-763."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shibboleth:service_provider:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "1F67D503-A8E8-49F1-B7CE-D02331092340"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/881857",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=b66cceb0e992c351ad5e2c665229ede82f261b16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20171115.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4038",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/881857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=b66cceb0e992c351ad5e2c665229ede82f261b16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20171115.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T17:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105."
      }, {
        "lang" : "es",
        "value" : "La clase DynamicMetadataProvider en saml/saml2/metadata/impl/DynamicMetadataProvider.cpp en OpenSAML-C en OpenSAML, en versiones anteriores a la 2.6.1, no se configura correctamente con los plugins MetadataFilter y no realiza las verificaciones de seguridad críticas como la verificación de firmas, cumplimiento de los periodos de validez y otras comprobaciones específicas de despliegues. Esta vulnerabilidad también se conoce como CPPOST-105."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shibboleth:opensaml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "056B1868-F286-400A-AD93-69B15BB90E84"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/881856",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-opensaml.git%3Ba=commit%3Bh=6182b0acf2df670e75423c2ed7afe6950ef11c9d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20171115.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4039",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/881856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-opensaml.git%3Ba=commit%3Bh=6182b0acf2df670e75423c2ed7afe6950ef11c9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20171115.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T18:29:00.197",
      "lastModified" : "2023-11-07T02:40:56.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-8638.  Reason: This candidate is a reservation duplicate of CVE-2016-8638.  Notes: All CVE users should reference CVE-2016-8638 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1086",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2017-11-16T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack of the thread is possible from the debugger. As a result, some bytes from the kernel stack of the thread using ptrace (PT_LWPINFO) call can be observed in userspace."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD, en versiones anteriores a 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3 y 10.3-RELEASE-p24, no toda la información en el struct ptrace_lwpinfo es relevante para el estado de los hilos y el kernel no rellena los bytes no relevantes o cadenas cortas. Dado que la estructura que rellena el kernel se asigna a la pila del kernel y se copia al espacio de usuario, es posible que se produzca una fuga de información de la pila del kernel del hilo desde el depurador. Como resultado, algunos bytes de la pila del kernel del hilo que utiliza la llamada ptrace (PT_LWPINFO) se podrían observar en el espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101861",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039809",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1087",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2017-11-16T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one jail can read and modify the content of POSIX shared memory objects created by a process in another jail or the host system. As a result, a malicious user that has access to a jailed system is able to abuse shared memory by injecting malicious content in the shared memory region. This memory region might be executed by applications trusting the shared memory, like Squid. This issue could lead to a Denial of Service or local privilege escalation."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD en versiones 10.x anteriores a 10.4-STABLE, 10.4-RELEASE-p3 y 10.3-RELEASE-p24, las rutas nombradas tienen alcance global, lo que significa que un proceso localizado en una jaula puede leer y modificar el contenido de los objetos de la memoria compartida de POSIX creados por un proceso en otra jaula o el sistema host. Como resultado, un usuario malicioso que tenga acceso al sistema enjaulado puede vulnerar la memoria compartida inyectando contenidos maliciosos en la región de memoria compartida. Esta región de memoria podría ser ejecutada por aplicaciones que confíen en la memoria compartida, como Squid. Este problema podría provocar una denegación de servicio (DoS) o un escalado de privilegios locales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101867",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039810",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:09.shm.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:09.shm.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1088",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2017-11-16T20:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not properly clear the memory of the kld_file_stat structure before filling the data. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information from the kernel stack is possible. As a result, some bytes from the kernel stack can be observed in userspace."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD en versiones anteriores a 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3 y 10.3-RELEASE-p24, el kernel no limpia correctamente la memoria de la estructura kld_file_stat antes de rellenar los datos. Dado que la estructura que rellena el kernel se asigna a la pila del kernel y se copia al espacio de usuario, es posible que se produzca una fuga de información desde la pila del kernel. Como resultado, algunos bytes de la pila del kernel se podrían observar en el espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101857",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039811",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:10.kldstat.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:10.kldstat.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14028",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-16T21:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount of TCP SYN packets."
      }, {
        "lang" : "es",
        "value" : "Un problema de agotamiento de recursos se descubrió en Moxa NPort 5110 2.2, NPort 5110 2.4, NPort 5110 2.6, NPort 5110 2.7, NPort 5130 3.7 y anteriores, y NPort 5150 3.7 y anteriores. Un atacante podría agotar los recursos de la memoria enviando un a gran cantidad de paquetes TCP SYN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA640858-27A0-474E-A90C-AF61EB5D07D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EEFB08-1A1C-41E0-9A9A-DE88F82D97CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ABA135-2EB9-47A1-AFE9-1EAA96BAD220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34FCCC1-FD11-4734-BEAB-1577510DDA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D28B00-C0BD-4B70-B871-9D18F37DCBE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "D10C4E5F-1F08-409D-BECA-115BC44D4E56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5507650-F3BF-45AF-AA54-06CF3EAF7DDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5150_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "46E00EAC-F4D4-47F7-825C-35F9722DB51D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD7B68B-128D-4AB0-AE9E-A8B9329D67C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101885",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16715",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-16T21:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame padding that may allow for information exposure."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de exposición de información en Moxa NPort 5110 2.2, NPort 5110 2.4, NPort 5110 2.6, NPort 5110 2.7, NPort 5130 3.7 y anteriores, y NPort 5150 3.7 y anteriores. Un atacante podría explotar un defecto en cómo se manipula el relleno de tramas Ethernet que podría provocar una exposición de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA640858-27A0-474E-A90C-AF61EB5D07D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EEFB08-1A1C-41E0-9A9A-DE88F82D97CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ABA135-2EB9-47A1-AFE9-1EAA96BAD220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34FCCC1-FD11-4734-BEAB-1577510DDA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D28B00-C0BD-4B70-B871-9D18F37DCBE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "D10C4E5F-1F08-409D-BECA-115BC44D4E56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5507650-F3BF-45AF-AA54-06CF3EAF7DDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5150_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "46E00EAC-F4D4-47F7-825C-35F9722DB51D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD7B68B-128D-4AB0-AE9E-A8B9329D67C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101885",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16719",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-11-16T21:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availability of the device."
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de inyección en Moxa NPort 5110 2.2, NPort 5110 2.4, NPort 5110 2.6, NPort 5110 2.7, NPort 5130 3.7 y anteriores, y NPort 5150 3.7 y anteriores. Un atacante podría inyectar paquetes que pudieran interrumpir la disponibilidad del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA640858-27A0-474E-A90C-AF61EB5D07D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EEFB08-1A1C-41E0-9A9A-DE88F82D97CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ABA135-2EB9-47A1-AFE9-1EAA96BAD220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5110_firmware:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34FCCC1-FD11-4734-BEAB-1577510DDA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D28B00-C0BD-4B70-B871-9D18F37DCBE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "D10C4E5F-1F08-409D-BECA-115BC44D4E56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5507650-F3BF-45AF-AA54-06CF3EAF7DDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_5150_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "46E00EAC-F4D4-47F7-825C-35F9722DB51D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_5150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD7B68B-128D-4AB0-AE9E-A8B9329D67C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101885",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T21:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Vonage VDV-23 115 3.2.11-0.9.40 tienen Cross-Site Scripting persistente mediante el campo NewKeyword o NewDomain en /goform/RgParentalBasic."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vonage:vdv-23_firmware:3.2.11-0.9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3375A486-9EE5-4201-BC74-66335A82F0C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vonage:vdv-23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1A9FD-5E80-4C1D-815E-936A40AF647E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gh0s7.net/vonage/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43150/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gh0s7.net/vonage/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43150/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T21:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting (XSS) in core/M_Controller.php via the DR_URI field."
      }, {
        "lang" : "es",
        "value" : "dayrui FineCms 5.2.0 con fecha anterior al 16/11/2017 tiene Cross Site Scripting (XSS) en core/M_Controller.php mediante el campo DR_URI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2F501-A47B-4CB5-94A2-492681FD9755"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/dayrui/finecms/commit/09d4f3c1a1b8598ce8967e158b16b9fe44936c50",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitee.com/dayrui/finecms/commit/09d4f3c1a1b8598ce8967e158b16b9fe44936c50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-16T21:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house for unfilmed activities or (2) attackers to freeze a camera and enter a house if a delivery driver failed to ensure a locked door before leaving."
      }, {
        "lang" : "es",
        "value" : "Amazon Key hasta el 16/11/2017 gestiona de manera incorrecta las tramas de desautenticación de 802.11 de Cloud Cam durante el proceso de entrega, lo que hace que tengan más facilidad (1) los repartidores para congelar una cámara y volver a entrar en una casa para realizar actividades sin que las cámaras graben o (2) los atacantes para congelar una cámara y entrar en una casa si el repartidor no se asegura de que la puerta está bien cerrada antes de marcharse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amazon:amazon_key_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-11-16",
            "matchCriteriaId" : "C3BB31A2-6499-48F4-8F5E-670F328D2B9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amazon:amazon_key:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA53EDE1-9149-46B6-9EA9-771211229EF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101899",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.engadget.com/2017/11/16/amazon-key-hack-cloud-cam/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.theverge.com/2017/11/16/16665064/amazon-key-camera-disable",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wired.com/story/amazon-key-flaw-let-deliverymen-disable-your-camera/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.engadget.com/2017/11/16/amazon-key-hack-cloud-cam/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.theverge.com/2017/11/16/16665064/amazon-key-camera-disable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wired.com/story/amazon-key-flaw-let-deliverymen-disable-your-camera/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4930",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-16T21:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL."
      }, {
        "lang" : "es",
        "value" : "VMware AirWatch Console en versiones 9.x anteriores a la 9.2.0 contiene una vulnerabilidad que podría permitir que un usuario AWC autenticado añada una URL maliciosa en la página \"Links\" de un dispositivo registrado. Una explotación exitosa de este problema podría provocar que se redirija un usuario AWC desprevenido a una URL maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "C68AA4C8-EFF0-44C6-979E-0F75B2355A1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101772",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039750",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4931",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-16T21:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content."
      }, {
        "lang" : "es",
        "value" : "VMware AirWatch Console en versiones 9.x anteriores a la 9.2.0 contiene una vulnerabilidad que podría permitir que un usuario AWC autenticado añada datos maliciosos en los archivos de log de un dispositivo registrado. Una explotación exitosa de esta vulnerabilidad podría provocar que un usuario AWC desprevenido abra un archivo CSV que contenga contenidos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "C68AA4C8-EFF0-44C6-979E-0F75B2355A1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101772",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039750",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4932",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-16T21:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privilege from the launcher UI context menu to native UI functionality and privilege. Successful exploitation of this issue could result in an escalation of privilege."
      }, {
        "lang" : "es",
        "value" : "VMware AirWatch Launcher para Android en versiones anteriores a la 3.2.2 contiene una vulnerabilidad que podría permitir un escalado de privilegios desde el menú contextual de la interfaz de usuario del launcher al componente y privilegio nativo de la interfaz de usuario. Una explotación exitosa de esta vulnerabilidad podría resultar en un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch_launcher:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "7845A83C-4330-4A45-9693-E01A6E7AAC42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101771",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039750",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0866",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T22:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866."
      }, {
        "lang" : "es",
        "value" : "En una vulnerabilidad de elevación de privilegios en la infraestructura de representación Direct de NVIDIA Tegra X1, una entrada no confirmada del espacio de usuario se pasa como puntero a kfree. Esto podría llevar a una corrupción de memoria y a una posible ejecución de código. Este problema se ha clasificado como moderado, Producto: Pixel. Versión: N/A. Android ID: A-38415808. Referencias: N-CVE-2017-0866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:tegra_x1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2A0E1D-5A10-476F-8F82-DFA39428421A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:tegra_x1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AFE28A-FD0B-4923-BD20-1F6C21378732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01#announcements",
        "source" : "security@android.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01#announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0909",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-16T22:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery."
      }, {
        "lang" : "es",
        "value" : "La gema de Ruby private_address_check en versiones anteriores a la 0.4.1 es vulnerable a una lista negra incompleta de direcciones comunes privadas/locales empleadas para evitar que se produzcan ataques Server-Side Request Forgery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:private_address_check_project:private_address_check:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "0.4.1",
            "matchCriteriaId" : "08FA22BB-481C-4785-AB7D-53F287143CEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jtdowney/private_address_check/pull/3",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288950",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jtdowney/private_address_check/pull/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11012",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 vendor command a stack-based buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 especialmente manipulado, puede ocurrir un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11013",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset (in function UnpackCore) is increased for each loop, while there is no boundary check against \"pIe->arraybound\"."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, countOffset (en la función UnpackCore) se incrementa con cada bucle, ya que no hay ningún chequeo de límites en \"ple->arraybound\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11014",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing a Measurement Request IE in a Roam Neighbor Action Report, a buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se analiza sintácticamente un Measurement Request IE en un Roam Neighbor Action Report, puede ocurrir una desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11015",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128 which may result in buffer overflow since the frame parser allows challenge text of length up to 253 bytes, but the driver can not handle challenge text larger than 128 bytes."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el valor actual de SIR_MAC_AUTH_CHALLENGE_LENGTH está definido en 128, lo que podría provocar un desbordamiento de búfer ya que el analizador de tramas permite que el texto challenge ocupe hasta 253 bytes, pero el controlador no puede manipular textos challenge mayores de 128 bytes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11017",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a specially crafted UBI image, it is possible to corrupt memory, or access uninitialized memory."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se \"flashea\" una imagen UBI especialmente manipulada, se podría corromper la memoria o acceder a la memoria no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11018",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, array access out of bounds may occur in the camera driver in the kernel"
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un acceso de array fuera de límites en el controlador de la cámara en el kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11022",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the probe requests originated by this DUT. Hence, control the presence of information elements using ini file."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, las peticiones de sondeo creadas desde el teléfono del usuario contiene los elementos de información que especifican las características de wifi compatibles. Esto impactaría en la privacidad del usuario si alguien rastrease las peticiones de sondeo originadas por esta DUT. Por consiguiente, controlar la presencia de los elementos de información utilizando un archivo ini."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11023",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of out-of-bound buffer accesses due to no synchronization in accessing global variables by multiple threads."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, existe la posibilidad de que ocurran accesos a búfer fuera de límites debido a la falta de sincronización en el acceso a las variables globales por parte de múltiples hilos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11024",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in the rmnet USB control driver can potentially lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una condición de carrera en el driver de control USB rmnet puede provocar una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11025",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the function audio_effects_shared_ioctl(), memory corruption can occur."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, debido a una condición de carrera en la función audio_effects_shared_ioctl(), puede ocurrir una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11026",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing FRP partition using reference FRP unlock, authentication method can be compromised for static keys."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se \"flashea\" una partición FRP mediante el desbloqueo de FRP, el método de autenticación se puede comprometer para las claves estáticas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11027",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se \"flashea\" una imagen UBI, el tamaño no se valida por ser más pequeño que el tamaño mínimo de la cabecera, provocando una vulnerabilidad de acceso a datos no inicializados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11028",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the ISP Camera driver, the contents of an arbitrary kernel address can be leaked to userspace by the function msm_isp_get_stream_common_data()."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el controlador de la cámara ISP, la función msm_isp_get_stream_common_data() puede filtrar el contenido de una dirección de kernel arbitraria al espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11029",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers \"user-memory-access\" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked userspace value (ioctl_ptr->len) is used to copy contents to a kernel buffer which can lead to kernel buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la aplicación de cámara desencadena un problema de acceso a la memoria de usuario (\"user-memory-access\") ya que el controlador de Linux del módulo CPP de la cámara accede directamente al búfer proporcionado por la aplicación, el cual reside en el espacio de usuario. Un valor userspace sin chequear (ioctl_ptr->len) se utiliza para copiar contenidos al búfer del kernel, lo que puede provocar un desbordamiento de búfer del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11032",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a double free can occur when kmalloc fails to allocate memory for pointers resp/req in the service-locator driver function service_locator_send_msg()."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir una doble liberación (double free) cuando kmalloc no asigna correctamente memoria para los punteros resp/resq en el controlador service-locator de la función service_locator_send_msg()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11035",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, possible buffer overflow or information leak in the functions \"sme_set_ft_ies\" and \"csr_roam_issue_ft_preauth_req\" due to incorrect initialization of WEXT callbacks and lack of the checks for buffer size."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, es posible que se produzca un desbordamiento de búfer o una fuga de información en las funciones \"sme_set_ft_ies\" y \"csr_roam_issue_ft_preauth_req\" debido a la inicialización incorrecta de las devoluciones de llamadas WEXT y a la falta de comprobaciones del tamaño del búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11038",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the boot image header, range checks can be bypassed by supplying different versions of the header at the time of check and use."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa la cabecera de la imagen de arranque, los chequeos de alcance se pueden omitir proporcionando diferentes versiones de la cabecera en el momento del chequeo y de su uso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11058",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted cfg80211 vendor command, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante cfg80211 especialmente manipulado, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11073",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qcacld pktlog allows mapping memory via /proc/ath_pktlog/cld to user space."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, qcacld pktlog permite que se mapee la memoria mediante proc/ath_pktlog/cld al espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11085",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an integer overflow leading to a buffer overflow due to improper bound checking in msm_audio_effects_virtualizer_handler, file msm-audio-effects-q6-v2.c"
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se puede originar un desbordamiento de enteros que provoque un desbordamiento de búfer debido a los controles incorrectos de límites en msm_audio_effects_virtualizer_handler en el archivo msm-audio-effects-q6-v2.c"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11089",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed in nl80211_set_station when user space application sends attribute NL80211_ATTR_LOCAL_MESH_POWER_MODE with data of size less than 4 bytes"
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se observa una sobrelectura de búfer en nl80211_set_station cuando la aplicación del espacio de usuario envía el atributo NL80211_ATTR_LOCAL_MESH_POWER_MODE con datos de un tamaño inferior a 4 bytes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11090",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed in __wlan_hdd_cfg80211_set_pmksa when user space application sends PMKID of size less than WLAN_PMKID_LEN bytes."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se observa una sobrelectura de búfer en __wlan_hdd_cfg80211_set_pmksa cuando la aplicación del espacio de usuario envía PMKID de un tamaño inferior a los bytes de WLAN_PMKID_LEN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11091",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function mdss_rotator_ioctl in the driver /dev/mdss_rotator, a Use-After-Free condition can potentially occur due to a fence being installed too early."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la función mdss_rotator_ioctl en el controlador /dev/mdss_rotator, puede ocurrir una condición de uso de memoria previamente liberada debido a un límite instalado demasiado temprano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11092",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgsl_ioctl_gpu_command, a Use After Free condition can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la función kgsl_ioctl_gpu_command del controlador KGSL, puede ocurrir una condición de uso de memoria previamente liberada (User After Free)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11093",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer Over-read in Display due to the lack of an upper-bound validation when reading \"num_of_cea_blocks\" from the untrusted source (EDID), kernel memory can be exposed."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, existe una sobrelectura de búfer en Display debido a la falta de una validación de los límites superiores a la hora de leer \"num_of_cea_blocks\" del origen no fiable (EDID), por lo que la memoria del kernel se puede ver expuesta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15516",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2017-11-16T22:29:01.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface."
      }, {
        "lang" : "es",
        "value" : "NetApp SnapCenter Server desde la versión 1.1 hasta las 2.x es susceptible a Cross-Site Request Forgery (CSRF), vulnerabilidad que se podría utilizar para provocar una acción autenticada no deseada en la interfaz de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter_server:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4881A1A3-567D-4D8A-A2F6-E724A86840A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC04C9B-7ECE-40D2-84E2-D99F19D1DB23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20171114-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171114-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8279",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition protection while updating msg mask table can lead to buffer over-read. Also access to freed memory can happen while updating msg_mask information."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, no existe ninguna protección contra condiciones de carrera cuando se actualiza la tabla de máscara msg, lo que puede provocar una sobrelectura de búfer. También se podría acceder a memoria liberada mientras se actualiza la información de msg_mask."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9690",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en un manipulador de llamadas ioctl gbt1000, un chequeo incorrecto de tamaño de búfer tiene una vulnerabilidad de desbordamiento de enteros que podría provocar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9696",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver function msm_isp_stop_stats_stream. Variable stream_cfg_cmd->num_streams is from userspace, and it is not checked against \"MSM_ISP_STATS_MAX\"."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, es posible una sobrelectura de búfer en la función msm_isp_stop_stats_stream del controlador de la cámara. La variable stream_cfg_cmd->num_streams es del espacio de usuario y no se chequea contra \"MSM_ISP_STATS_MAX\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9701",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing OEM unlock/unlock-go fastboot commands data leak may occur, resulting from writing uninitialized stack structure to non-volatile memory."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, podría ocurrir una fuga de datos mientras se procesan los comandos de arranque rápido OEM unlock/unlock-go debido a la escritura de la estructura de la pila no inicializada a memoria no volátil."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9702",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a user-space pointer is directly accessed in a camera driver."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se accede directamente a un puntero de espacio de usuario en un controlador de cámara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9719",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a buffer overflow can occur in HDMI CEC parsing if frame size is out of range."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el driver MDSS del kernel, puede ocurrir un desbordamiento de búfer en el análisis sintáctico de CEC HDMI si el tamaño de la trama sale fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9721",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-11-16T22:29:01.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur while parsing the splash image."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el cargador de arranque, puede ocurrir un desbordamiento de búfer cuando se analiza sintácticamente la imagen splash."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0830",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android framework (device policy client). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (device policy client). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101775",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0831",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android framework (window manager). Product: Android. Versions: 8.0. Android ID: A-37442941."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (window manager). Producto: Android. Versiones: 8.0. Android ID: A-37442941."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101775",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0832",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62887820."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62887820."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0833",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62896384."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62896384."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0834",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63125953."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63125953."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0835",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316832."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316832."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0836",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0838",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (libstagefright). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0839",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64478003."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libeffects). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64478003."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0840",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62948670."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libstagefright). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62948670."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0841",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el sistema Android (libutils). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101718",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0842",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de Android (bluetooth). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101718",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0843",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek ccci. Product: Android. Versions: Android kernel. Android ID: A-62670819. References: M-ALPS03361488."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el ccci de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-62670819. Referencias: M-ALPS03361488."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0845",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android framework (syncstorageengine). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35028827."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el framework de Android (syncstorageengine). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35028827."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0847",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product: Android. Versions: 8.0. Android ID: A-65540999."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el media framework de Android (mediaanalytics). Producto: Android. Versiones: 8.0. Android ID: A-65540999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0848",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libeffects). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0849",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62688399."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62688399."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0850",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libstagefright). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0851",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0852",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libhevc). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0853",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0854",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0857",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0858",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0859",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0860",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de Android (inputdispatcher). Producto: Android. Versiones: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0861",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en la función snd_pcm_info en el subsistema ALSA en el kernel de Linux permite que atacantes obtengan privilegios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102329",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2390",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2020:0036",
        "source" : "security@android.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229",
        "source" : "security@android.com"
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0861",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2020:0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0862",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el kernel Upstream del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-36006779."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0863",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador de video Upstream del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-37950620."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0864",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el ioctl de MediaTek (flashlight). Producto: Android. Versiones: Android kernel. Android ID: A-37277147. Referencias: M-ALPS03394571."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0865",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-11-16T23:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador del SoC de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-65025090. Referencias: M-ALPS02973195."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-11-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T00:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LightFTP version 1.1 is vulnerable to a buffer overflow in the \"writelogentry\" function resulting a denial of services or a remote code execution."
      }, {
        "lang" : "es",
        "value" : "LightFTP 1.1 es vulnerable a un desbordamiento de búfer en la función \"writelogentry\", lo que resulta en una denegación de servicio (DoS) o en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightftp_project:lightftp:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9F8CEC-C5CD-44B9-8948-1D3168DA34FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hfiref0x/LightFTP/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hfiref0x/LightFTP/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T00:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user"
      }, {
        "lang" : "es",
        "value" : "npm/KyleRoss windows-cpu en todas sus versiones, es vulnerable a la inyección de comandos, lo que provoca la ejecución de código como usuario de Node.js."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows-cpu_project:windows-cpu:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCABBC34-C2C1-40B4-91AA-A7779A8FF83B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows-cpu_project:windows-cpu:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F13660-A45F-40ED-A0EA-720076BB4681"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T00:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin"
      }, {
        "lang" : "es",
        "value" : "Cross-Site Request Forgery (CSRF) en YouTube (plugin de WordPress) podría permitir que un atacante no autenticado cambie cualquier configuración en el plugin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedplus:youtube:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "11.8.1",
            "matchCriteriaId" : "0D4C5535-3BA3-43CC-8CF8-0F6DAF447018"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.dxw.com/advisories/csrf-in-youtube-plugin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.dxw.com/advisories/csrf-in-youtube-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15517",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2017-11-17T00:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution."
      }, {
        "lang" : "es",
        "value" : "AltaVault OST Plug-in en versiones anteriores a la 1.2.2 podría permitir que los atacantes obtengan información sensible mediante vectores no especificados. Se recomienda a todos los usuarios migrar a una versión corregida y cambiar las contraseñas utilizadas por Veritas NetBackup para acceder a las acciones OST en NetApp AltaVault como medida de precaución."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:altavault_ost_plug-in:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "CD05967C-3EC0-4C3E-A123-1313C34EF162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20171116-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171116-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools, an address access exception was found in swfdump swf_GetBits()."
      }, {
        "lang" : "es",
        "value" : "En SWFTools, se ha encontrado una excepción de acceso de dirección en swfdump swf_GetBits()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E27E60-6223-457B-BF90-E747C9C5DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools, a memcpy buffer overflow was found in swfc."
      }, {
        "lang" : "es",
        "value" : "En SWFTools, se ha encontrado un desbordamiento de búfer memcpy en swfc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E27E60-6223-457B-BF90-E747C9C5DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools, a memory leak was found in wav2swf."
      }, {
        "lang" : "es",
        "value" : "En SWFTools, se ha encontrado una fuga de memoria en wav2swf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E27E60-6223-457B-BF90-E747C9C5DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools, a memcpy buffer overflow was found in gif2swf."
      }, {
        "lang" : "es",
        "value" : "En SWFTools, se ha encontrado un desbordamiento de búfer memcpy en gif2swf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E27E60-6223-457B-BF90-E747C9C5DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools, a stack overflow was found in pdf2swf."
      }, {
        "lang" : "es",
        "value" : "En SWFTools, se ha encontrado un desbordamiento de pila en pdf2swf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E27E60-6223-457B-BF90-E747C9C5DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF()"
      }, {
        "lang" : "es",
        "value" : "En SWFTools, se ha encontrado una excepción de acceso de dirección en pdf2swf. FoFiTrueType::writeTTF()"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E27E60-6223-457B-BF90-E747C9C5DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack"
      }, {
        "lang" : "es",
        "value" : "picoTCP (versiones 1.7.0-1.5.0) es vulnerable a desbordamiento de búfer basado en pila, lo que resulta en un ataque de ejecución de código o de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD584C9-40FA-4BD1-80F1-CF6EFD701FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F26B98-5468-403F-8212-9BAAED3D6D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD03B2D-4862-4DF3-BBD3-F48053084E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C88FB0-EE92-4935-AADF-7BCBF5076737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD0252C-8A0A-4F5F-8BA1-5486D495A980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C046F8-FCA0-45F2-B036-8246BA5E124D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tass-belgium/picotcp/pull/473",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tass-belgium/picotcp/pull/473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WBCE v1.1.11 is vulnerable to reflected XSS via the \"begriff\" POST parameter in /admin/admintools/tool.php?tool=user_search"
      }, {
        "lang" : "es",
        "value" : "WBCE v1.1.11 es vulnerable a Cross-Site Scripting (XSS) reflejado mediante el parámetro POST \"begriff\" en /admin/admintools/tool.php?tool=user_search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wbce:wbce_cms:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273EA09D-7128-4021-935D-DB18205C0D2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WBCE/WBCE_CMS/commit/0da620016aec17ac2d2f3a22c55ab8c2b55e691e#diff-7b380285e285160d0070863099baabe0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WBCE/WBCE_CMS/commit/0da620016aec17ac2d2f3a22c55ab8c2b55e691e#diff-7b380285e285160d0070863099baabe0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T01:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution"
      }, {
        "lang" : "es",
        "value" : "soyuka/pidusage en sus versiones 1.1.4 y anteriores es vulnerable a la inyección de comandos en el módulo, lo que resulta en la ejecución de comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidusage_project:pidusage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "35D0A783-1091-4D9D-BC0E-FE9CCD18046C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/356",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser."
      }, {
        "lang" : "es",
        "value" : "La build 412 de October CMS es vulnerable a inyección de contenidos web, también conocido como Cross-Site Scripting (XSS), en el nombre de la imagen del logo de la marca, lo que resulta en una ejecución de código JavaScript en el navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.412",
            "matchCriteriaId" : "32339647-7D72-4BBC-980F-ECE91A7B856C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-66d6dfe5e11488e1afefcb69b8bdaabfR31",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-66d6dfe5e11488e1afefcb69b8bdaabfR31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server."
      }, {
        "lang" : "es",
        "value" : "La build 412 de October CMS es vulnerable a la modificación de configuraciones de Apache mediante el componente file upload, lo que resulta en el compromiso del sitio y, probablemente, de otras aplicaciones en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.412",
            "matchCriteriaId" : "32339647-7D72-4BBC-980F-ECE91A7B856C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server."
      }, {
        "lang" : "es",
        "value" : "La build 412 de October CMS es vulnerable a inyección de objetos PHP en el componente asset move, lo que resulta en la posibilidad de borrar archivos limitados por permisos de archivo en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.412",
            "matchCriteriaId" : "32339647-7D72-4BBC-980F-ECE91A7B856C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server."
      }, {
        "lang" : "es",
        "value" : "La build 412 de October CMS es vulnerable a la ejecución de código PHP en el componente asset manager, lo que resulta en el compromiso del sitio y, probablemente, de otras aplicaciones en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.412",
            "matchCriteriaId" : "32339647-7D72-4BBC-980F-ECE91A7B856C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R49",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server."
      }, {
        "lang" : "es",
        "value" : "La build 412 de October CMS es vulnerable a modificación de rutas de archivo en el componente asset move, lo que resulta en la creación de archivos maliciosos en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.412",
            "matchCriteriaId" : "32339647-7D72-4BBC-980F-ECE91A7B856C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-eef90a4e3585febf6489916dc242d0ceR241",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-eef90a4e3585febf6489916dc242d0ceR241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of service"
      }, {
        "lang" : "es",
        "value" : "tcmu-runner daemon desde la versión 0.9.0 hasta la 1.2.0 es vulnerable a referencias de memoria no válidas en el manipulador handler_glfs.so, lo que resulta en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A222981-AB11-435B-9F57-DFE9A585F2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0761D8-4B45-436F-B16B-4D56E70EEA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC44B-5269-4A55-8DFA-AF4D89F5A86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04E2BFF-DDA0-4CCE-9DE5-6736C703BC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1D1E9F-CCA6-4D16-9986-8D799289C284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388F3BC0-E99E-44F4-9FF4-4792DEA57C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60BA1B4-3502-4667-96EA-988D382BFEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C160773C-5CA9-4D6C-B500-DEEFB3E34B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C099CE8-FE61-4613-9521-BA2CB65B8154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0F823-B77A-454A-BB7F-64DB9AD46D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A4AFAD-5A0B-4179-BF06-9718F0C5540D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/commit/61bd03e600d2abf309173e9186f4d465bb1b7157",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/commit/61bd03e600d2abf309173e9186f4d465bb1b7157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges."
      }, {
        "lang" : "es",
        "value" : "tcmu-runner daemon desde la versión 0.9.1hasta la 1.2.0 es vulnerable a divulgación de información en handler_qcow.so, resultando en que los usuarios no privilegiados puedan comprobar la existencia de algún archivo con privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0761D8-4B45-436F-B16B-4D56E70EEA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC44B-5269-4A55-8DFA-AF4D89F5A86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04E2BFF-DDA0-4CCE-9DE5-6736C703BC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1D1E9F-CCA6-4D16-9986-8D799289C284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388F3BC0-E99E-44F4-9FF4-4792DEA57C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60BA1B4-3502-4667-96EA-988D382BFEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C160773C-5CA9-4D6C-B500-DEEFB3E34B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C099CE8-FE61-4613-9521-BA2CB65B8154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0F823-B77A-454A-BB7F-64DB9AD46D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A4AFAD-5A0B-4179-BF06-9718F0C5540D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/issues/194",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/issues/194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resulting in denial of service"
      }, {
        "lang" : "es",
        "value" : "tcmu-runner desde la versión 1.0.5 hasta la 1.2.0 es vulnerable a una desreferencia de puntero NULL desencadenada por dbus en la función on_unregister_handler() del demonio tcmu-runner, lo que resulta en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388F3BC0-E99E-44F4-9FF4-4792DEA57C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60BA1B4-3502-4667-96EA-988D382BFEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C160773C-5CA9-4D6C-B500-DEEFB3E34B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C099CE8-FE61-4613-9521-BA2CB65B8154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0F823-B77A-454A-BB7F-64DB9AD46D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A4AFAD-5A0B-4179-BF06-9718F0C5540D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/pull/200/commits/bb80e9c7a798f035768260ebdadffb6eb0786178",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/pull/200/commits/bb80e9c7a798f035768260ebdadffb6eb0786178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack"
      }, {
        "lang" : "es",
        "value" : "El demonio tcmu-runner en tcmu-runnerdesde la versión 1.0.5 hasta la 1.2.0 es vulnerable a un ataque de denegación de servicio (DoS) local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388F3BC0-E99E-44F4-9FF4-4792DEA57C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60BA1B4-3502-4667-96EA-988D382BFEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C160773C-5CA9-4D6C-B500-DEEFB3E34B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C099CE8-FE61-4613-9521-BA2CB65B8154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0F823-B77A-454A-BB7F-64DB9AD46D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A4AFAD-5A0B-4179-BF06-9718F0C5540D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/pull/200/commits/e2d953050766ac538615a811c64b34358614edce",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/pull/200/commits/e2d953050766ac538615a811c64b34358614edce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:01.050",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen (<= 2.2.2) and can lead to arbitrary code being executed when these commands are used on a well-crafted yaml specification."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de análisis sintáctico de yaml de Swagger-Parser (versión 1.0.30 y anteriores) resulta en la ejecución de código arbitrario cuando se analiza sintácticamente una especificación Open-API de yaml manipulada de manera maliciosa. En este caso en particular, afecta a los comandos \"generate\" y \"validate\" en swagger-codegen (versiones 2.2.2 y anteriores) y puede provocar que se ejecute código arbitrario cuando se utilicen estos comandos en una especificación de yaml especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swagger:swagger-codegen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "19533E03-1A1C-4341-850D-1B521E22A1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swagger:swagger-parser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.30",
            "matchCriteriaId" : "20F013ED-574E-4E3D-9320-386127494259"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swagger-api/swagger-parser/releases/tag/v1.0.31",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-parser/releases/tag/v1.0.31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T02:29:01.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate."
      }, {
        "lang" : "es",
        "value" : "El cliente nv-websocket-client de Java WebSocket no verifica que el nombre del servidor coincida con en nombre de un dominio en el campo subjectAltName o en el nombre común (CN) del sujeto del certificado X.509, lo que permite que los atacantes Man-in-the-Middle (MitM) suplanten los servidores SSL/TLS mediante un certificado válido arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nv-websocket-client_project:nv-websocket-client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "577BC96C-DB65-4001-9FBF-6B643779C4F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TakahikoKawasaki/nv-websocket-client/pull/107",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TakahikoKawasaki/nv-websocket-client/pull/107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravity_lexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free condition."
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity Versión: 1.0 posible ejecución de código de uso de memoria previamente liberada. Se ha liberado un ejemplo de uso de memoria dinámica (heap) previamente liberada tras el puntero \"sublexer\". Línea 542 de gravity_lexer.c. \"lexer\" se emplea para acceder a una variable, pero \"lexer\" ya se había liberado, creando una condición de uso de memoria dinámica (heap) previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/144",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow."
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity Versión: 1.0 posible ejecución de código y desbordamiento de memoria dinámica (heap). Al crear un gran bucle mientras se envían datos a un búfer, se puede romper la comprobación fuera de límites de ese búfer. Cuando se llama a list.join en los datos, se hará una acción de lectura que irá más allá de los límites del búfer,r provocando un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/172",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection"
      }, {
        "lang" : "es",
        "value" : "ejs de nodejs en versiones anteriores a la 2.5.5 es vulnerable a Cross-Site Scripting (XSS) en la función ejs.renderFile(), provocando una inyección de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ejs:ejs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.5",
            "matchCriteriaId" : "CDD07DBF-3C84-4096-9711-16FB3112F848"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()"
      }, {
        "lang" : "es",
        "value" : "ejs de nodejs en versiones anteriores a la 2.5.5 es vulnerable a denegación de servicio (DoS) debido a una validación débil de entrada en la función ejs.renderFile()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ejs:ejs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.5",
            "matchCriteriaId" : "CDD07DBF-3C84-4096-9711-16FB3112F848"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101893",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function"
      }, {
        "lang" : "es",
        "value" : "ejs de nodejs en versiones anteriores a la 2.5.3 es vulnerable a ejecución remota de código debido a una validación débil de entrada en la función ejs.renderFile()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ejs:ejs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "918974EF-F662-48A6-BE54-77BF40EBFB64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101897",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://snyk.io/vuln/npm:ejs:20161128",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://snyk.io/vuln/npm:ejs:20161128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the webserver. It is possible for an attacker to upload a script which is able to compromise the webserver."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane 1.4.10 es vulnerable a la subida de archivos arbitrarios, haciendo que un usuario autenticado pueda subir un archivo malicioso al servidor web. Un atacante podría subir un script que pueda comprometer el servidor web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414430A9-CF75-41E0-A403-8FDCF1AFE1F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170523-0_InvoicePlane_Upload_arbitrary_files_stored_XSS_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170523-0_InvoicePlane_Upload_arbitrary_files_stored_XSS_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script which will be executed in the browser of users if they visit the manipulated site."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane 1.4.10 es vulnerable a Cross-Site Scripting (XSS) persistente, haciendo que un usuario autenticado sea capaz de inyectar scripts maliciosos del lado del cliente que se ejecutarán en el navegador de los usuarios si visitan el sitio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414430A9-CF75-41E0-A403-8FDCF1AFE1F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170523-0_InvoicePlane_Upload_arbitrary_files_stored_XSS_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170523-0_InvoicePlane_Upload_arbitrary_files_stored_XSS_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "La aplicación OpenEMR se ve afectada por múltiples vulnerabilidades de Cross-Site Scripting (XSS) reflejado que afectan a las versiones 5.0.0 y anteriores. Estas vulnerabilidades podrían permitir que atacantes remotos autenticados inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.0",
            "matchCriteriaId" : "C711232D-CB78-436D-ADFE-37CA3D80E83F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T03:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators."
      }, {
        "lang" : "es",
        "value" : "La aplicación OpenEMR en versiones 5.0.0, 5.0.1-dev y anteriores se ve afectada por una vulnerabilidad de escalado vertical de privilegios. Esta vulnerabilidad puede permitir que los usuarios no administradores autenticados visualicen y modifiquen información a la que solo los administradores pueden acceder."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:dev:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.1",
            "matchCriteriaId" : "0B7DF96B-9B1B-432D-851A-3C9F1FF296A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-004",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Technical Description" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de doble liberación (double free) en parse.c en ldns 1.7.0 provoca un impacto y origina vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:ldns:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643F3409-3F32-4CAC-875A-4D63CEDFF472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1256",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de doble liberación (double free) en str2host.c en ldns 1.7.0 provoca un impacto y origina vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:ldns:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643F3409-3F32-4CAC-875A-4D63CEDFF472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1257",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating directories simply by navigating through the \"dir\" parameter"
      }, {
        "lang" : "es",
        "value" : "I, Librarian en versiones 4.6 y anteriores y 4.7 es vulnerable a la enumeración de directorios en jqueryFileTree.php, lo que provoca que el atacante enumere directorios simplemente con navegar a través del parámetro \"dir\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "00088D65-FCD9-4E3A-B6AC-68324027BCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB62F5E-1565-4E11-BDFE-868ABE30AD8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised."
      }, {
        "lang" : "es",
        "value" : "I, Librarian en versiones 4.6 y anteriores y 4.7 es vulnerable a la inyección de comandos de sistema operativo en batchimport.php, haciendo que el servidor web vea comprometido por completo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "00088D65-FCD9-4E3A-B6AC-68324027BCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB62F5E-1565-4E11-BDFE-868ABE30AD8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site."
      }, {
        "lang" : "es",
        "value" : "I, Librarian en versiones 4.6 y anteriores y 4.7 es vulnerable a Cross-Site Scripting (XSS) reflejado en temp.php, haciendo que un atacante sea capaz de inyectar scripts maliciosos del lado del cliente que se ejecutarán en el navegador de los usuarios si visitan el sitio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "00088D65-FCD9-4E3A-B6AC-68324027BCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB62F5E-1565-4E11-BDFE-868ABE30AD8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user's password."
      }, {
        "lang" : "es",
        "value" : "I, Librarian en versiones 4.6 y anteriores y 4.7 es vulnerable a Server-Side Request Forgery en ajaxsupplement.php, haciendo que el atacante pueda reiniciar la contraseña de cualquier usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "00088D65-FCD9-4E3A-B6AC-68324027BCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-librarian:i_librarian:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB62F5E-1565-4E11-BDFE-868ABE30AD8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data."
      }, {
        "lang" : "es",
        "value" : "El paquete pysaml2 de Python en versiones 4.4.0 y anteriores reutiliza el vector de inicialización a lo largo de los cifrados en el servidor IDP, provocando un cifrado débil de los datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pysaml2_project:pysaml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.0",
            "matchCriteriaId" : "A295FE59-C165-4BD4-89D8-A531122BED19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rohe/pysaml2/issues/417",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rohe/pysaml2/issues/417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws."
      }, {
        "lang" : "es",
        "value" : "British Columbia Institute of Technology CodeIgniter 3.1.3 es vulnerable a la inyección de cabeceras HTTP en la función común set_status_header() en Apache, provocando errores de inyección de cabeceras HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeigniter:codeigniter:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E1E59D-BCC7-44AE-925C-E7A49CC074F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeigniter.com/userguide3/changelog.html#version-3-1-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeigniter.com/userguide3/changelog.html#version-3-1-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T04:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis"
      }, {
        "lang" : "es",
        "value" : "Redis-store en versiones 1.3.0 y anteriores permite que se carguen objetos no seguros desde redis."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis-store:redis-store:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "F553F145-44C6-4148-85BD-DAB1A627E557"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis-store/redis-store/commit/e0c1398d54a9661c8c70267c3a925ba6b192142e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis-store/redis-store/commit/e0c1398d54a9661c8c70267c3a925ba6b192142e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell."
      }, {
        "lang" : "es",
        "value" : "Codiad (la versión completa) es vulnerable a la escritura de archivos de configuración arbitrarios en el proceso de instalación, provocando que se suba un webshell."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codiad:codiad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1FCEA63-4D01-432A-8E2F-45C266766B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.jianshu.com/p/b09d20af2374",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.jianshu.com/p/b09d20af2374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure"
      }, {
        "lang" : "es",
        "value" : "Serendipity 2.0.3 es vulnerable a una inyección de SQL en el componente blog, lo que resulta en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A04581-75DE-43E4-9BF4-04431DD3D3F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.s9y.org/archives/269-Serendipity-2.0.4-and-2.1-beta2-released.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.s9y.org/archives/269-Serendipity-2.0.4-and-2.1-beta2-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)"
      }, {
        "lang" : "es",
        "value" : "CPython (también conocido como Python) hasta la versión 2.7.13 es vulnerable a un desbordamiento de enteros en la función PyString_DecodeEscape en stringobject.c, lo que resulta en un desbordamiento de búfer basado en memoria dinámica (heap) y, posiblemente, la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.15",
            "matchCriteriaId" : "B3B9C8F1-930A-4904-BA58-CD71AEA6F041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "7100BA3C-4470-4326-A3B2-16C0DF8B7FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.5",
            "matchCriteriaId" : "2525C259-8A44-4DB5-939F-D5B808470669"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039890",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.python.org/issue30657",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230216-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4307",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.python.org/issue30657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230216-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.313",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection"
      }, {
        "lang" : "es",
        "value" : "EllisLab ExpressionEngine 3.4.2 es vulnerable a Cross-Site Scripting, lo que da lugar a una inyección de código PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F76D20-E9BD-486C-ADCA-52093B49BFA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.expressionengine.com/latest/about/changelog.html#version-3-4-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.expressionengine.com/latest/about/changelog.html#version-3-4-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation"
      }, {
        "lang" : "es",
        "value" : "Tine 2.0 versión 2017.02.4 es vulnerable a XSS en Addressbook, resultando en una ejecución de código y un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tine20:tine_2.0:2017.02.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A98BD3B-2D6F-4E65-A1D0-16687BE8FA9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forge.tine20.org/view.php?id=13228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://forge.tine20.org/view.php?id=13228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an escalation of privileges providing complete administrative control over the CMS."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de contenidos web (WCI) almacenada, también conocida como Cross-Site Scripting (XSS), está presente en MODX Revolution CMS en versiones 2.5.6 y anteriores. Un usuario autenticado con permisos para editar usuarios puede guardar código JavaScript malicioso como un nombre de grupo de usuarios y podría tomar el control de las cuentas de las víctimas. Esto puede conducir a un escalado de privilegios, concediendo el control administrativo completo sobre el sistema de gestión de contenidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "0FF6AE40-778B-4441-8D9E-A5F7D059A9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/modxcms/revolution/v2.5.7-pl/core/docs/changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/modxcms/revolution/v2.5.7-pl/core/docs/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can"
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) reflejado en Relevanssi Premium 1.14.8, cuando se utiliza la función relevanssi_didyoumean(), podría permitir que un atacante no autenticado haga prácticamente todo lo que puede hacer un administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:relevanssi:relevanssi:1.14.8:*:*:*:premium:wordpress:*:*",
            "matchCriteriaId" : "450698F4-B348-4AD6-8470-5C0C39CA6523"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.dxw.com/advisories/reflected-xss-in-relevanssi-premium-when-using-relevanssi_didyoumean-could-allow-unauthenticated-attacker-to-do-almost-anything-an-admin-can/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.dxw.com/advisories/reflected-xss-in-relevanssi-premium-when-using-relevanssi_didyoumean-could-allow-unauthenticated-attacker-to-do-almost-anything-an-admin-can/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stop User Enumeration 1.3.8 allows user enumeration via the REST API"
      }, {
        "lang" : "es",
        "value" : "Stop User Enumeration 1.3.8 permite la enumeración de usuarios mediante la API REST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworks:stop_user_enumeration:1.3.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E90CAA80-B800-450F-A8CF-704252957DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.dxw.com/advisories/stop-user-enumeration-rest-api/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.dxw.com/advisories/stop-user-enumeration-rest-api/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T05:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service."
      }, {
        "lang" : "es",
        "value" : "Un fallo de desbordamiento de enteros en la función minitiff_read_info() de optipng 0.7.6 permite que un atacante ejecute código de manera remota o provoque una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:optipng_project:optipng:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B95311-98CB-44DE-91AE-73B33E20D2BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/optipng/bugs/65/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4058",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/optipng/bugs/65/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T09:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service (integer overflow and NULL pointer dereference) via a crafted WAV file."
      }, {
        "lang" : "es",
        "value" : "En SWFTools 0.9.2, la función wav_convert2mono en lib/wav.c no restringe correctamente una multiplicación en una llamada malloc, lo que permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de enteros y desreferencia de puntero NULL) mediante un archivo WAV manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T09:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated \"there is no security implication whatsoever."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** p_mach.cpp en UPX 3.94 permite que atacantes remotos provoquen una denegación de servicio (acceso no válido a la memoria y cierre inesperado de la aplicación) o, probablemente, causen otros impactos no especificados mediante un archivo Mach-O. Esto está relacionado con la funciones canPack y unpack. NOTA: el fabricante ha afirmado que \"no hay ninguna implicación de seguridad en absoluto\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upx:upx:3.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0516EFAC-8970-4005-8F19-A8EE583412A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/upx/upx/issues/146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T09:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El plugin UpdraftPlus hasta la versión 1.13.12 para WordPress contiene SSRF en la función updraft_ajax_handler en /wp-content/plugins/updraftplus/admin.php mediante una subacción httpget. NOTA: el fabricante informa de que esto no cruza un límite de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:updraftplus:updraftplus:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.13.12",
            "matchCriteriaId" : "DDF77B5D-B119-4AE0-A84B-24D3DAF99489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LoRexxar/CVE_Request/tree/master/wordpress%20plugin%20updraftplus%20vulnerablity#authenticated-ssrf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LoRexxar/CVE_Request/tree/master/wordpress%20plugin%20updraftplus%20vulnerablity#authenticated-ssrf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T09:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/updraftplus/admin.php has a race condition before deleting a file associated with the name parameter. NOTE: the vendor reports that this does not cross a privilege boundary"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El plugin UpdraftPlus hasta la versión 1.13.12 para WordPress permite la ejecución remota de código PHP debido a que la función plupload_action en /wp-content/plugins/updraftplus/admin.php contiene una condición de carrera antes de eliminar un archivo asociado con el parámetro name. NOTA: el fabricante informa de que esto no cruza un límite de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:updraftplus:updraftplus:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.13.12",
            "matchCriteriaId" : "DDF77B5D-B119-4AE0-A84B-24D3DAF99489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LoRexxar/CVE_Request/tree/master/wordpress%20plugin%20updraftplus%20vulnerablity#authenticated--upload-file-and-php-code-execution",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LoRexxar/CVE_Request/tree/master/wordpress%20plugin%20updraftplus%20vulnerablity#authenticated--upload-file-and-php-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T09:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, port, etc.) all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted back to strings, a buffer overrun. This will lead to a potential exploit using carefully crafted invalid values."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en Teluu pjproject (pjlib y pjlib-util) en PJSIP, en versiones anteriores a la 2.7.1. Analizando los campos de cabeceras numéricas en un mensaje SIP (como cseq, ttl, port, etc.), todos tienen el potencial de causar una saturación de búfer, ya sea haciendo que se capturen valores no planeados o si los valores se volvieron a convertir a cadenas posteriormente. Esto dará lugar a que un posible exploit utilice valores no válidos manipulados cuidadosamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "CAB3B334-A3A7-4794-9418-209E403323F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://trac.pjsip.org/repos/milestone/release-2.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://trac.pjsip.org/repos/ticket/2056",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.pjsip.org/repos/milestone/release-2.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://trac.pjsip.org/repos/ticket/2056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10886",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-17T14:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en CS-Cart Japanese Edition v4.3.10 y versiones anteriores (excepto v2 y v3) y CS-Cart Multivendor Japanese Edition v4.3.10 y versiones anteriores (excepto v2 y v3) que permite que un atacante inyecte scripts web o HTML arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.0.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "7CEDDB5F-0042-4F91-A374-72F6EA9FE8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.0.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "09888B17-F813-4B09-971A-5EE64C84B223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.0.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "A4586C46-0266-4D02-A218-11E9B6C75258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "1795D3A8-F3B7-4B00-8221-62F597888DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "060D0460-2ECD-41E5-934F-EDC39D75AF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "34F92804-A076-4877-A35A-3C6E9ABCC60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.1.4:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "5689776B-779D-4C83-B837-FC97F53A3F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "36C1D456-0A84-4A7A-9CDF-CC25013EA2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "215F550E-3946-4FC1-A53D-2159FB085C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "DEBEC0F2-04BC-4EDC-B406-8566EBA6BFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.2.4:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "6696CFF2-8CA3-476C-93C4-26DD2DD03EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "1AAFC419-F733-4513-8C91-09752D8D59F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "42F2E657-E293-4375-A9DA-10427E805A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "01132E65-36E4-46BF-92B8-8C650A809C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.4:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "7B7A9A8F-7429-44C3-92DA-A7FE24731F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.5:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "AC17365C-07EB-468F-9645-C9F17BE39129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.6:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "44A94CAE-30F6-414E-806B-721FE65AFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.7:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "BAA8F0F8-3EB4-4D5E-88E1-F92B8A36977F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.8:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "00CAB998-2FF9-4352-90ED-A6102BFA0223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.9:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0E0F42A0-15F9-4587-A608-52D9F9EB18D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:4.3.10:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "BA6DD97F-4315-4483-9540-868E4EF479A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.0.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "5ADC7033-B392-46DB-B04B-2B7AB514AFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.0.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "D2531207-2B53-4CEF-9724-A3D958DC38D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.0.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "BDC2FD45-31E7-4838-85A9-3C184DDA68C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "0B3B4C1C-B63E-451D-BC9A-CB45C3A5A4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "03A50D9D-4321-48C7-B362-D7D02768E30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "178E2618-9FED-452F-B379-36D50D544BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.1.4:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "2C822C02-3E28-4412-803D-10F2D5AC4D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "5B43CD84-D885-4006-BADA-7E1A3012608C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "CD843B2F-A3D5-49A5-B9F0-B8FC146931AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "01C42531-506B-41FF-ADD8-BFE4C492E5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.2.4:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "3BE29145-9836-4A10-AF2D-BB1EE63820C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.1:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "8F33ECEC-3011-4131-AE8F-E44DF85F33ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.2:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "4C2FEE8A-DB91-43E6-9DC1-AB78DE23FF81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.3:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "FD83A201-9C79-47BA-BA15-145A46FEEBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.4:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "4A03FAC1-4E22-4344-95E1-87A409C98507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.5:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "1CC2EBD9-05B5-402C-B650-33BB86FC6043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.6:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "1D9545E8-20E6-46E1-BBDB-662D07DB1E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.7:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "637065FC-883A-4E51-94B5-8F38F0574BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.8:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "5EBCC962-D3B4-4588-87EA-988CBD8EE7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.9:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "39E7A002-9015-4D75-AF02-21964DE6C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart_multivendor:4.3.10:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "14591AE4-58B9-4F71-BA5E-A1C897979A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tips.cs-cart.jp/fix-jvn-29602086.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29602086/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://tips.cs-cart.jp/fix-jvn-29602086.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29602086/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10887",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-17T14:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en BOOK WALKER para Windows, versión 1.2.9 y anteriores, permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookwalker:book_walker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.9",
            "matchCriteriaId" : "FBDCF295-A371-45FC-97BB-92B507528E65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bookwalker.jp/info/message20171113_pc_app/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18420340/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bookwalker.jp/info/message20171113_pc_app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18420340/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10888",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-17T14:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "BOOK WALKER para Windows, versión 1.2.9 y anteriores, y BOOK WALKER para Mac, versión 1.2.5 y anteriores, permiten que un atacante acceda a archivos locales mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookwalker:book_walker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.9",
            "matchCriteriaId" : "FBDCF295-A371-45FC-97BB-92B507528E65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookwalker:book_walker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "7413C411-6927-41E2-87F1-E629AD4BA910"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bookwalker.jp/info/message20171113_pc_app/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18420340/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bookwalker.jp/info/message20171113_pc_app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18420340/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10889",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-17T14:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "TablePress, en versiones anteriores a la 1.8.1, permite que un atacante realice ataques XML External Entity (XXE) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tablepress:tablepress:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "A846E47A-04CA-4952-AB01-E7B49F11FCCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN05398317/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/tablepress/#developers",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN05398317/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/tablepress/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10890",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-11-17T14:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un error de gestión de sesiones en RX-V200 con versiones de firmware anteriores a la 09.87.17.09, RX-V100 con versiones de firmware anteriores a la 03.29.17.09, RX-CLV1-P con versiones de firmware anteriores a la 79.17.17.09, RX-CLV2-B con versiones de firmware anteriores a la 89.07.17.09 y RX-CLV3-N con versiones de firmware anteriores a la 91.09.17.10 permite que un atacante en la misma red LAN realice operaciones arbitrarias o acceda a información mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sharp:rx-v200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "09.87.17.09",
            "matchCriteriaId" : "F93BE0D7-93F2-416A-95D2-5572ABDA476E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sharp:rx-v200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213C19FE-D159-402C-A07C-AE9F5A9B6F1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sharp:rx-v100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "03.29.17.09",
            "matchCriteriaId" : "F4FAD03A-268C-4F47-93FC-00D37556C290"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sharp:rx-v100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C4910-D1AC-4052-A058-08944AD251C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sharp:rx-clv1-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "79.17.17.09",
            "matchCriteriaId" : "65CD9A51-48D4-4668-9260-129F03EDF01F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sharp:rx-clv1-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018AA4E8-9986-4C45-8181-01AA43C81077"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sharp:rx-clv2-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.07.17.09",
            "matchCriteriaId" : "7C528EF4-E644-4357-8A14-B39527FFB21C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sharp:rx-clv2-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D3526B-D7D8-4D0C-AA1D-85566A3C442A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sharp:rx-clv3-n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "91.09.17.10",
            "matchCriteriaId" : "EEA165C4-40B8-4681-ADF5-C2B020299B83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sharp:rx-clv3-n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21766F38-1FF6-45FA-BE4F-04DD132DD3A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN76382932/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN76382932/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4927",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server (en versiones 6.5 anteriores a la 6.5 U1 y versiones 6.0 anteriores a la 6.0 U3c) no gestiona correctamente paquetes de red LDAP especialmente manipulados, lo que puede permitir que se provoque una denegación de servicio de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0_u3c",
            "matchCriteriaId" : "4916113B-4E8D-435B-829B-6E4449117F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5_u1",
            "matchCriteriaId" : "3401DF9F-5606-4ABA-A84F-4909405F6955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101786",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039759",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0017.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4928",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure."
      }, {
        "lang" : "es",
        "value" : "vSphere Web Client basado en flash(en versiones 6.0 anteriores a la 6.0 U3c y versiones 5.5 anteriores a la 5.5 U3f), es decir, no el nuevo vSphere Client basado en HTML5, contiene problemas de inyección SSRF y CRLF debido a una neutralización incorrecta de URL. Un atacante puede explotar estos errores enviando una petición POST con cabeceras modificadas a servicios internos, lo que da lugar a una revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B12523A-5C1E-408F-BB4B-98EF32C7D676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "C06379AA-13C0-41FB-B63C-0C46D6DD0462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0080A4-A72E-4F7F-AB4C-168F957EAE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "26AAFC76-9CB6-4F22-880C-0102BECEE04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:1c:*:*:*:*:*:*",
            "matchCriteriaId" : "AD83F1CE-CD2A-49B3-858D-8CE3F715DC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "8339BAB3-D6C9-426A-9C1D-9F2AB946BF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:2b:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA978D2-DEA4-4EC9-8945-A6AEA5AA87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:2d:*:*:*:*:*:*",
            "matchCriteriaId" : "455C1162-56F5-457A-97D1-B98CFD5F27CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:2e:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B794EE-70C2-4271-B946-202AB21CA477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE11C9F-D31E-4E9F-ABC6-FFA1BD56DEEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "23D847E4-5869-476A-B85F-29D8D5FDB68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8CC145-0D3F-4E42-BA46-403586EC608A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:3d:*:*:*:*:*:*",
            "matchCriteriaId" : "279E7753-5CA1-4622-8B9E-10FF3004941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:3e:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7A5CA2-6F73-4250-B3C8-DCA0F34AB405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:b:*:*:*:*:*:*",
            "matchCriteriaId" : "551415D9-20A2-4F1B-A954-ED97849FBD29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:5.5:c:*:*:*:*:*:*",
            "matchCriteriaId" : "12EED8B4-FC24-4E6A-A6ED-4BF10B65C049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7499E57A-1F9C-45F0-93F8-F3FB7B0F990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "43BEE461-85B7-4C19-8FBA-4460186DC58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "E8249B2E-251F-4ED9-836F-E5D4C90D4EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED78D4B1-5959-46F1-8DEE-7DE3BE38BAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:2a:*:*:*:*:*:*",
            "matchCriteriaId" : "04B290DB-03A4-4BA0-93FE-4BD9BC5ED8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:2m:*:*:*:*:*:*",
            "matchCriteriaId" : "6C722953-08D7-4763-84CB-144D40D99EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "D97ADC1A-5382-4CA0-AA1F-B460205B397C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "22F7C55C-877C-4DA2-869D-96FAA7527C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "01214586-9344-4CB7-BE76-174EA3234654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:a:*:*:*:*:*:*",
            "matchCriteriaId" : "74EE8EE5-54F0-4359-898B-C57C5B2AE7C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "F83AAB8E-F129-4D1C-A4BC-4CC2C1777F5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101785",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039759",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0017.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4929",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "VMware NSX Edge (en versioens 6.2.x anteriores a la 6.2.9 y versiones 6.3.x anteriroes a la 6.3.5) contiene un error de Cross-Site Scripting (XSS) moderado que puede dar lugar a una revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5DF0C-BE28-4CC3-84B9-0A3736889596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3375D9F8-37F5-4C56-8E6C-3034C63CC4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74191A3C-A634-4081-A96A-C0695468B9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9201E3-B2DB-4D36-A04B-93B178FD3F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C33A3-12A7-470E-BE75-FE427880B6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DB7D2E-0A49-40D1-B7B9-DA1BA38D1BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79301149-DDCF-42CE-B189-797F03452D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D79CE7-95C5-4A50-945D-FD66C0672753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D19EDF-55B6-427A-A6C9-46F2910889FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBEC973-D0B3-4BC3-9EC1-7741500304AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050AD395-0B86-4DE1-B4DC-3DC5A1778088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8C4EC5-FF42-49EA-8032-1946E916CBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76495E92-4CEE-454C-AE4A-FBBED5CFF0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx_edge:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA75F81-6E13-4621-AE5D-31B9CB92B4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101891",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039837",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0019.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4934",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Fusion (en versiones 8.x anteriores a la 8.5.9) contienen una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap) en el dispositivo VMNAT. Este problema puede permitir que un invitado ejecute código en el host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BBD4C7-C851-4D40-B6DD-92873319CD28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6759F732-8E65-49F7-B46C-B1E3F856B11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C182F-A8D2-4ABF-B202-261056EF93D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768A4D3B-CC19-4A3A-91D5-9C974F7F0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C5D443-A330-40DF-939B-10597147CE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BF8A2A-295D-44D6-A38E-D4C35437F380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574DB25B-51E1-466A-8089-5108DB5D6FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF7F09F-D8B3-40AF-9111-E7C14832C5A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555DD10F-7EA8-4107-A31F-2C7CED41058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4888B-156C-48BC-8035-3A0424CB6037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4DA202-3D18-4DDC-89E4-81FFF68EDFD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101903",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4935",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View Client."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Horizon View Client para Windows (en versiones 4.x anteriores a la 4.6.1) contienen una vulnerabilidad de escritura fuera de límites en el analizador JPEG2000 en TPView.dll. En Workstation, esto puede permitir que un invitado ejecute código o provoque una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que una opción \"Ver escritorio\" ejecute código o provoque una denegación de servicio en el sistema operativo que ejecuta Horizon View Client. Solo es posible que se explote esta vulnerabilidad si se ha habilitado la impresión virtual. Esta característica no está habilitada por defecto en Workstation, pero sí lo está en Horizon View Client."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "FACC8634-05E5-44D6-8020-5148E66C2434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "D67A6B2F-D6BD-41C9-81DF-B28AEACB4435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "291360AF-C8C5-4E99-9FAE-E3BFFD50C18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "A6FB33DA-7A42-4383-9061-228C24AACF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "524D0D00-7E4D-4400-870C-033180282C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.4:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "075928E9-A640-4612-800E-2D24ADA1F541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.5:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "6EF0E241-64D2-439C-8B34-42A8FC1A218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.6:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "C06AE4BF-C2A0-477B-A88D-5E9EA482F775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101902",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039836",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4936",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Horizon View Client para Windows (en versiones 4.x anteriores a la 4.6.1) contienen una vulnerabilidad de lectura fuera de límites en el analizador JPEG2000 en TPView.dll. En Workstation, esto puede permitir que un invitado ejecute código o provoque una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que una opción \"Ver escritorio\" ejecute código o provoque una denegación de servicio en el sistema operativo que ejecuta Horizon View Client."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "FACC8634-05E5-44D6-8020-5148E66C2434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "D67A6B2F-D6BD-41C9-81DF-B28AEACB4435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "291360AF-C8C5-4E99-9FAE-E3BFFD50C18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "A6FB33DA-7A42-4383-9061-228C24AACF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "524D0D00-7E4D-4400-870C-033180282C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.4:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "075928E9-A640-4612-800E-2D24ADA1F541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.5:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "6EF0E241-64D2-439C-8B34-42A8FC1A218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.6:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "C06AE4BF-C2A0-477B-A88D-5E9EA482F775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101892",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039836",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4937",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View Client."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Horizon View Client para Windows (en versiones 4.x anteriores a la 4.6.1) contienen una vulnerabilidad de lectura fuera de límites en el analizador JPEG2000 en TPView.dll. En Workstation, esto puede permitir que un invitado ejecute código o provoque una denegación de servicio en el sistema operativo Windows que ejecuta Workstation. En el caso de Horizon View Client, esto puede permitir que una opción \"Ver escritorio\" ejecute código o provoque una denegación de servicio en el sistema operativo que ejecuta Horizon View Client. Solo es posible que se explote esta vulnerabilidad si se ha habilitado la impresión virtual. Esta característica no está habilitada por defecto en Workstation, pero sí lo está en Horizon View Client."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "FACC8634-05E5-44D6-8020-5148E66C2434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.0.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "D67A6B2F-D6BD-41C9-81DF-B28AEACB4435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "291360AF-C8C5-4E99-9FAE-E3BFFD50C18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.2:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "A6FB33DA-7A42-4383-9061-228C24AACF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.3:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "524D0D00-7E4D-4400-870C-033180282C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.4:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "075928E9-A640-4612-800E-2D24ADA1F541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.5:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "6EF0E241-64D2-439C-8B34-42A8FC1A218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:4.6:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "C06AE4BF-C2A0-477B-A88D-5E9EA482F775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101892",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039836",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4938",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T14:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Fusion (en versiones 8.x anteriores a la 8.5.9) contienen una vulnerabilidad de desreferencia de puntero NULL en una llamada de un usuario invitado. Una explotación exitosa de este error puede permitir que atacantes con privilegios de usuario normal cierren de forma inesperada sus máquinas virtuales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BBD4C7-C851-4D40-B6DD-92873319CD28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6759F732-8E65-49F7-B46C-B1E3F856B11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C182F-A8D2-4ABF-B202-261056EF93D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768A4D3B-CC19-4A3A-91D5-9C974F7F0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C5D443-A330-40DF-939B-10597147CE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BF8A2A-295D-44D6-A38E-D4C35437F380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574DB25B-51E1-466A-8089-5108DB5D6FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF7F09F-D8B3-40AF-9111-E7C14832C5A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555DD10F-7EA8-4107-A31F-2C7CED41058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4888B-156C-48BC-8035-3A0424CB6037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4DA202-3D18-4DDC-89E4-81FFF68EDFD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101887",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T15:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution"
      }, {
        "lang" : "es",
        "value" : "ROOT en versiones 6.9.03 y anteriores es vulnerable a una inyección de metacaracteres shell con autenticación en el demonio rootd que tiene como resultado una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:root:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.9.03",
            "matchCriteriaId" : "75C36037-69F7-4A39-AC1C-DB3EFF6B60FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/root-project/root/commit/88ccff152604e0f1012653a596d802ff7ede3145#diff-6cd6f6c31bac70116b7ca7abdc8e517e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/root-project/root/commit/88ccff152604e0f1012653a596d802ff7ede3145#diff-6cd6f6c31bac70116b7ca7abdc8e517e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T15:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution"
      }, {
        "lang" : "es",
        "value" : "La librería htslib de samtools en su versión 1.4.0 y anteriores es vulnerable a un desbordamiento de búfer en el códec CRAM rANS que da lugar a una la posible ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htslib:htslib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "1C45D526-BA33-4499-9700-CEAA89D763B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/samtools/htslib/blob/1.4.1/NEWS",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/samtools/htslib/blob/1.4.1/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T15:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself."
      }, {
        "lang" : "es",
        "value" : "Lynx en versiones anteriores a la 2.8.9dev.16 es vulnerable a un uso de memoria previamente liberada en el analizador HTML, lo que resulta en una fuga de información, ya que HTML_put_string() puede acoplarse un fragmento de información (chunk)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lynx_project:lynx:2.8.9:dev15:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAE2892-65FB-44DC-8A93-578AD9C8F480"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lynx.invisible-island.net/current/CHANGES.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ThomasDickey/lynx-snapshots/commit/280a61b300a1614f6037efc0902ff7ecf17146e9",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lynx.invisible-island.net/current/CHANGES.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ThomasDickey/lynx-snapshots/commit/280a61b300a1614f6037efc0902ff7ecf17146e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T15:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code."
      }, {
        "lang" : "es",
        "value" : "El plugin vim para Elixir, alchemist.vim, es vulnerable a una ejecución remota de código en el servidor agrupado alchemist. Un sitio web malicioso puede ejecutar peticiones contra un puerto efímero en un host local que se evalúan como código elixir."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alchemist-elixir:alchemist-server:-:*:*:*:*:vim:*:*",
            "matchCriteriaId" : "A076ED95-9AF0-4450-A5A4-1D39CB98AED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tonini/alchemist-server/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tonini/alchemist-server/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T16:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en Teluu pjproject (pjlib y pjlib-util) en PJSIP, en versiones anteriores a la 2.7.1. El componente ioqueue puede enviar una anulación del registro de una clave doble después de que un atacante inicie una conexión de socket con ajustes y secuencias específicos. Esta anulación de registro de clave doble desencadenará un desbordamiento de enteros, lo que puede provocar que los backends de ioqueue rechacen futuros registros de claves."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "CAB3B334-A3A7-4794-9418-209E403323F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://trac.pjsip.org/repos/milestone/release-2.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://trac.pjsip.org/repos/ticket/2055",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://trac.pjsip.org/repos/milestone/release-2.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://trac.pjsip.org/repos/ticket/2055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS."
      }, {
        "lang" : "es",
        "value" : "Jooldesde la versión 3.5.0 hasta la 3.5.1 es vulnerable a un paquete de bloqueo de kernel que da como resultado una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jool:jool:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EDD902-375E-4973-98FF-1F63BFB4A56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jool:jool:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7527E58-A60B-4A2B-944F-6E2553FF0D32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NICMx/Jool/issues/232",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NICMx/Jool/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T17:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information."
      }, {
        "lang" : "es",
        "value" : "Cygnux sysPass en su versión 2.1.7 y anteriores es vulnerable a una inclusión local de archivos en la funcionalidad de inclusión de archivos JavaScript. El atacante puede leer los archivos de configuración que contienen la contraseña y el usuario de la base de datos, la clave privada de cifrado y otros datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygnux:syspass:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.7",
            "matchCriteriaId" : "69554657-C5B9-4B3A-A2CE-D10BD3A142EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T17:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employee details page (/employee.html) that is then reflected in multiple pages where that field data is utilized, resulting in session hijacking and possible elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting persistente en el reloj de fichar en de Icon Time Systems RTC-1000 v2.5.7458 y anteriores permite que atacantes remotos inyecten código JavaScript arbitrario en el campo nameFirst (también conocido como First Name) para la página de detalles de empleados (/employee.html) que se refleja en múltiples paginas en las que se utilizan esos datos de campo. Esto da como resultado un secuestro de sesión y una posible elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:icontime:rtc-1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.7458",
            "matchCriteriaId" : "64E61FF4-AC97-4D37-BD84-373734C5FDAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:icontime:rtc-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AEFC81-420E-454E-8678-1C5BBB704F12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43158/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.keiththome.com/rtc-1000-vuln/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43158/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.keiththome.com/rtc-1000-vuln/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T17:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "ZEIT Next.js en versiones anteriores a la 2.4.1 contiene salto de directorio en el espacio de nombre de petición /_next y /static, lo que permite que los atacantes obtengan información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "AEA4AA2E-BA69-427D-BE80-A17A105F0835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/zeit/next.js/releases/tag/2.4.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/zeit/next.js/releases/tag/2.4.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys"
      }, {
        "lang" : "es",
        "value" : "En sodiumoxide en su versión 0.0.13 y anteriores, scalarmult() es vulnerable a la degeneración de claves públicas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sodiumoxide_project:sodiumoxide:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.13",
            "matchCriteriaId" : "0E10C21C-EA13-40AA-B486-A6AFBC37998D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnaq/sodiumoxide/issues/154",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dnaq/sodiumoxide/issues/154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lead to the complete takeover of the server hosting QuickerBB."
      }, {
        "lang" : "es",
        "value" : "QuickerBB en versiones anteriores a la 0.7.2 es vulnerable a escrituras de archivos arbitrarios, lo que puede dar lugar a la ejecución remota de código. Esto puede dar como resultado el control completo del servidor que hospeda QuickerBB."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickerbb_project:quickerbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.2",
            "matchCriteriaId" : "17AE7926-09A8-4508-88FD-F2DE1C5D6F4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/halojoy/QuickerBB/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/halojoy/QuickerBB/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jqueryFileTree 2.1.5 and older Directory Traversal"
      }, {
        "lang" : "es",
        "value" : "Salto de directorio en jqueryFileTree 2.1.5 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jqueryfiletree_project:jqueryfiletree:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.5",
            "matchCriteriaId" : "04376F6A-84E9-439C-8BB9-3D3C7B521648"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tree-1.6.6-Path-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jqueryfiletree/jqueryfiletree/issues/66",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tree-1.6.6-Path-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jqueryfiletree/jqueryfiletree/issues/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.327",
      "lastModified" : "2023-11-07T02:37:55.807",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.357",
      "lastModified" : "2023-11-07T02:37:55.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11667.  Reason: This candidate is a reservation duplicate of CVE-2017-11667.  Notes: All CVE users should reference CVE-2017-11667 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la build 16072215 de los dispositivos MOXA EDS-G512E 5.1. Existe XSS en la interfaz de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:eds-g512e_firmware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F267F1-E99B-4FF2-8CE6-43DB70F66DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:eds-g512e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89398E6-21CC-49D9-AD9B-343AD58A69FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la build 16072215 de los dispositivos MOXA EDS-G512E 5.1. Las cookies se pueden robar, manipular y reutilizar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:eds-g512e_firmware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F267F1-E99B-4FF2-8CE6-43DB70F66DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:eds-g512e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89398E6-21CC-49D9-AD9B-343AD58A69FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T18:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la build 16072215 de los dispositivos MOXA EDS-G512E 5.1. Puede ocurrir una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:eds-g512e_firmware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F267F1-E99B-4FF2-8CE6-43DB70F66DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:eds-g512e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89398E6-21CC-49D9-AD9B-343AD58A69FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T19:29:00.173",
      "lastModified" : "2023-11-07T02:37:54.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6168",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-11-17T19:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server's private key itself, aka a ROBOT attack."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP en las versiones desde la 11.6.0 hasta la 11.6.2 (solucionado en la versión 11.6.2 HF1), desde la 12.0.0 hasta la 12.1.2 HF1 (solucionado en la versión 12.1.2 HF2) o desde la 13.0.0 hasta la 13.0.0 HF2 (solucionado en la versión 13.0.0 HF3) un servidor virtual configurado con un perfil SSL de cliente puede ser vulnerable a un ataque adaptativo de texto cifrado escogido (también conocido como ataque Bleichenbacher) contra RSA. Cuando se explota este ataque, puede dar lugar a la recuperación de texto plano de mensajes cifrados y/o a un ataque Man-in-the-middle (MiTM), a pesar de que el atacante no haya obtenido acceso a la propia clave privada del servidor. Esto también se conoce como ataque ROBOT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ltm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "D1BD6762-15E4-495A-BB93-66EBF5F81C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ltm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A8E03DAF-41DD-45C6-BD69-EAD1423BEFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ltm:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8201185-406F-4769-8690-9734C3DA2B48"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "6932A666-B5B2-463F-922E-303E95BEF9F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "39E45CF5-C9E4-4AB9-A6D5-66F8336DDB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_afm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "FF5BC5CE-AD6C-4225-B45A-71E6D709F9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_afm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "FEFC0AC4-E0A9-4EAE-B573-F70F5B5375DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_afm:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A138CE-D1E3-4331-89F6-717539F1B59F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "95131361-AFA7-43CA-9426-4F9A6644D337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "25944BCA-3EEB-4396-AC8F-EF58834BC47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_apm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "DB69EC13-3CDB-44C9-9328-7BE4F7E0013A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_apm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "BC0762B8-793F-4619-9BA6-F98654F05B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_apm:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66DDC7E-1DFA-45C0-AA78-C44EE39352E0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_asm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "465D4268-5052-4FF1-936F-813E8971A72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_asm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A00C9178-7218-483B-8280-5B5F39695772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_asm:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795163B3-60B2-4C3B-AFF9-14B19D728811"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "3938A3B7-CF57-477D-9C88-478B75D720B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C4A5CD9B-D257-4EC9-8C57-D9552C2FFFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_pem:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "DA238C0E-74F9-4395-ACE0-0B3266ED12C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_pem:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "E2E02B0B-3539-467A-9A2D-0D0B24C60ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_pem:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4700490-894F-4CCD-92A4-595043F38B7F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "28F486A3-129D-470E-94B7-7ED06E3740A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:websafe:11.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186C996F-8E31-493B-BC0F-C5D831AB0BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2175D656-06F7-4708-9DC0-E859BABD3CC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101901",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039839",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K21905460",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K21905460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T20:29:00.247",
      "lastModified" : "2023-11-07T02:37:55.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9920.  Reason: This candidate is a reservation duplicate of CVE-2016-9920.  Notes: All CVE users should reference CVE-2016-9920 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T20:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution"
      }, {
        "lang" : "es",
        "value" : "ROOT xrootd en su versión 4.6.0 y anteriores es vulnerable a una inyección de comandos shell sin autenticación que tiene como resultado una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xrootd:xrootd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.0",
            "matchCriteriaId" : "2BE6F995-C9F7-42E9-94EE-8B4EFEFC2EA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xrootd/xrootd/blob/befa2e627a5a33a38c92db3e57c07d8246a24acf/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc#L85",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xrootd/xrootd/blob/v4.6.1/docs/ReleaseNotes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xrootd/xrootd/commit/befa2e627a5a33a38c92db3e57c07d8246a24acf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xrootd/xrootd/blob/befa2e627a5a33a38c92db3e57c07d8246a24acf/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc#L85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xrootd/xrootd/blob/v4.6.1/docs/ReleaseNotes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xrootd/xrootd/commit/befa2e627a5a33a38c92db3e57c07d8246a24acf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T20:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements."
      }, {
        "lang" : "es",
        "value" : "La función de inicio de sesión en la estación de trabajo en Philips IntelliSpace Cardiovascular (ISCV) en sus versiones 2.3.0 y anteriores y en Xcelera en versiones R4.1L1 y anteriores registra credenciales de autenticación de dominio. Si se obtiene acceso a estos datos, se permitiría que un atacante utilice credenciales para acceder a la aplicación o que obtenga otros privilegios de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:intellispace_cardiovascular:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "53695467-C883-4602-92F9-1D3BE724C447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:xcelera:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r4.1l1",
            "matchCriteriaId" : "DC7B42FA-43AB-4599-BE34-997D251F5A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101850",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-318-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usa.philips.com/healthcare/about/customer-support/product-security",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-318-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usa.philips.com/healthcare/about/customer-support/product-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T20:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access."
      }, {
        "lang" : "es",
        "value" : "hw/input/ps2.c en Qemu no valida los valores \"rptr\" y \"count\" durante la migración de invitado, lo que da lugar a un acceso fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.2",
            "matchCriteriaId" : "809CA527-CA2A-41A5-8592-95C8ACAA0F2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101923",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3649-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3649-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T21:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks."
      }, {
        "lang" : "es",
        "value" : "El framework Phoenix, en sus versiones 1.0.0 hasta la 1.0.4, versiones 1.1.0 hasta la 1.1.6, versiones 1.2.0, 1.2.2 y 1.3.0-rc.0, es vulnerable a una redirección de URL no validada, lo que puede resultar en ataques de phishing o de ingeniería social."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4672C6D3-0746-4835-A3A1-15997F2089BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6762474-3D59-4852-A446-5A58422B25C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587B60D6-46F5-4207-9497-BD5F5832793A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8D04D5-395B-4DBD-9F40-3695E3F686A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFAB065-FBA9-4F4E-AC14-43BD5BDFF913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D831398-6BA5-48FD-917C-C4CE1326FEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25556CB0-C34C-40E4-B145-206D4F2C531A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A86738F-D932-408E-A7F8-EBCAB17826C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD417AB-F92D-49E6-8ACA-B3AF39BD9189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC84FA4-C91E-42BC-91BA-242285BDDF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A7714C-EB75-431C-BC11-419D881F2EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FEAA80-9311-48E3-8DC5-C97521CA64F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA612EA-4120-4F0C-997C-BB94BB14C110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0EE2D32-1627-4ACB-8E4B-EB01BD378AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixframework:phoenix:1.3.0-rc.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E56E38-3DEC-4398-A403-DD7C205B4768"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://elixirforum.com/t/security-releases-for-phoenix/4143",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://elixirforum.com/t/security-releases-for-phoenix/4143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T21:29:00.277",
      "lastModified" : "2025-09-12T20:08:07.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on."
      }, {
        "lang" : "es",
        "value" : "SimpleXML (en su última versión 2.7.1) es vulnerable a XEE (XML External Entity) que resulta en SSRF, revelación de información, DoS, etc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13290D6-7F1A-4761-9C44-984F3E280201"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplexml_project:simplexml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "DEBC8EA1-1E85-41D8-B81E-03663BE9404F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ngallagher/simplexml/issues/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8c4ef27e2c0218f29e785990dc919266855aea137c958f10d242cb36%40%3Cdev.lucene.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ngallagher/simplexml/issues/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8c4ef27e2c0218f29e785990dc919266855aea137c958f10d242cb36%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T21:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can"
      }, {
        "lang" : "es",
        "value" : "XSS persistente en Salutation Responsive WordPress + BuddyPress Theme en su versión 3.0.15 podría permitir que los usuarios autenticados realicen casi todas las acciones que puede levar a cabo un administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallelus:salutation:3.0.15:*:*:*:*:buddypress:*:*",
            "matchCriteriaId" : "E43D49C9-83B1-45A4-81D3-337FF6932360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallelus:salutation:3.0.15:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1E1B0B66-8D45-4AB1-8DA7-BD651A49C22D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.dxw.com/advisories/stored-xss-salutation-theme/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.dxw.com/advisories/stored-xss-salutation-theme/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T21:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack."
      }, {
        "lang" : "es",
        "value" : "El servidor Snap7 en su versión 1.4.1 puede sufrir un cierre inesperado cuando se proporciona valores de entrada inesperados en el campo ItemCount de las funciones ReadVar o WriteVar de la implementación del protocolo S7 en Snap7, , lo que da lugar a un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snap7_project:snap7_server:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3071328F-CF81-409E-8213-133FF2CACCB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/snap7/discussion/bugfix/thread/2d2d085c/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/snap7/discussion/bugfix/thread/2d2d085c/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T21:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS."
      }, {
        "lang" : "es",
        "value" : "La función dump en Util/TemplateHelper.php en versiones anteriores a la 2.1.13 de filp whoops contiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoops_project:whoops:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.13",
            "matchCriteriaId" : "34DC2BC9-B5AB-43F1-B5F8-AFE240455832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4939",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-11-17T21:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "El instalador de VMware Workstation (en versiones 12.x anteriores a la 12.5.8) contiene un error de secuestro de DLL que existe debido a que la aplicación carga algunos archivos DLL de manera incorrecta. Este error puede permitir que un atacante cargue un archivo DLL elegido por él que podría ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EF613B-3436-4951-8F4D-9F22144E06CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101890",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T22:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "exiv2 0.26 contains a Stack out of bounds read in webp parser"
      }, {
        "lang" : "es",
        "value" : "exiv2 0.26 contiene una vulnerabilidad de lectura de pila fuera de límites en el analizador webp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T22:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 0.26 contains a heap buffer overflow in tiff parser"
      }, {
        "lang" : "es",
        "value" : "Exiv2 0.26 contiene un desbordamiento de búfer basado en memoria dinámica (heap) en el analizador tiff."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T22:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser"
      }, {
        "lang" : "es",
        "value" : "Exiv2 0.26 contiene una vulnerabilidad de lectura de pila fuera de límites en el analizador JPEG2000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T22:29:00.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0."
      }, {
        "lang" : "es",
        "value" : "Opencast en su versión 2.3.2 y anteriores es vulnerable a inyecciones de scripts mediante datos multimedia y metadatos en el reproductor y el módulo multimedia, lo que da como resultado una ejecución de código arbitrario, fija en 2.3.3 y 3.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencast:opencast:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "36E25A94-7BA7-4F75-9595-70EDB27FCAB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T22:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role ROLE_USER will have access to recordings published only for ROLE_USER_X."
      }, {
        "lang" : "es",
        "value" : "En Opencast 2.2.3 y versiones anteriores, si se solapan nombres de usuario, el servicio de búsqueda de Opencast empleado para la publicación en los módulos multimedia gestionará el control de acceso de manera incorrecta, de forma que solo será necesario que los nombres de usuario correspondan con parte del nombre de usuario utilizado para la restricción de acceso. Por ejemplo, un usuario con el rol ROLE_USER tendrá acceso a las grabaciones publicadas solo para ROLE_USER_X."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apereo:opencast:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "209B249E-1076-4B5B-B238-DD720B0F9E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://opencast.jira.com/browse/MH-11862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://opencast.jira.com/browse/MH-11862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-17T23:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication (such as passwd and shadow). This can be abused to take full root level control of the device."
      }, {
        "lang" : "es",
        "value" : "En dispositivos On Jooan IP Camera A5 2.3.36, un servidor FTP inseguro no requiere autenticación, lo que permite que atacantes remotos lean o reemplacen archivos del sistema central, incluidos los que se emplean en la autenticación (como passwd y shadow). Se puede aprovechar esto para tomar el control total del dispositivo a nivel root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qacctv:jooan_a5_ip_camera_firmware:2.3.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CBDD62-0271-45C3-9BC6-C85C90AACAB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qacctv:jooan_a5_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F9EBE6-F16C-4E14-9E09-9A2F7CFABD63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://siggyd.github.io/Advisories/CVE-2017-16566",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://siggyd.github.io/Advisories/CVE-2017-16566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-18T01:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php."
      }, {
        "lang" : "es",
        "value" : "Inyección HTML en Securimage 3.6.4 y anteriores permite que atacantes remotos inyecten código HTML arbitrario en el cuerpo de un mensaje de correo electrónico mediante el parámetro $_SERVER['HTTP_USER_AGENT'] en example_form.ajax.php o example_form.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcaptcha:securimage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.4",
            "matchCriteriaId" : "690EE392-FC68-440F-9433-AC72E631D323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2017-4223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.checkmarx.com/advisories/html-injection-securimage/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2017-4223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.checkmarx.com/advisories/html-injection-securimage/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-18T13:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java."
      }, {
        "lang" : "es",
        "value" : "b3log Symphony (también conocido como Sym) 2.2.0 no gestiona correctamente los XSS en objetos JSON, como ha sido demostrado por un valor userAvatarURL manipulado en /settings/avatar. Esto está relacionado con processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java y service/CommentQueryService.java."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symphony_project:symphony:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F31DEF7-5EAE-44F9-9143-850A1760F78E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/b3log/symphony/issues/504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b3log/symphony/issues/504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-18T18:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account, a related issue to CVE-2017-14312. This also affects bin/icingastats, bin/ido2db, and bin/log2ido."
      }, {
        "lang" : "es",
        "value" : "Icinga Core hasta la versión 1.14.0 ejecuta inicialmente bin/icinga como root, pero es compatible con opciones de configuración en las cuales este archivo es propiedad de una cuenta sin root (y, de forma similar, puede poseer etc/icinga.cfg sin root), lo que permite que usuarios locales obtengan privilegios aprovechando el acceso a esta cuenta sin root. Este problema está relacionado con CVE-2017-14312. Esto también afecta a bin/icingastats, bin/ido2db y bin/log2ido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.0",
            "matchCriteriaId" : "8B9C2B74-B6C4-4B46-AF41-14EF9D58D674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Icinga/icinga-core/issues/1601",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-31",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Icinga/icinga-core/issues/1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-18T18:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file."
      }, {
        "lang" : "es",
        "value" : "La función outputSWF_TEXT_RECORD en util/outputscript.c en libming, en versiones anteriores a la 0.4.8, es vulnerable a una desreferencia de puntero NULL, lo que puede permitir que los atacantes provoquen una denegación de servicio mediante un archivo swf manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:libming:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.8",
            "matchCriteriaId" : "47C3E495-3E11-4C91-B3B9-C479BF492011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libming/libming/issues/77",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libming/libming/issues/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-19T17:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Bftpd before 4.7, there is a memory leak in the file rename function."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 4.7 de Bftpd hay una fuga de memoria en la función de cambio de nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bftpd_project:bftpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "037C1AE5-F9C8-4EB1-BDFA-6C1984EE2E10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bftpd.sourceforge.net/downloads/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bftpd.sourceforge.net/news.html#032390",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bftpd.sourceforge.net/downloads/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bftpd.sourceforge.net/news.html#032390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T01:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting the .env permissions. The .env filename is not used exclusively by Laravel framework."
      }, {
        "lang" : "es",
        "value" : "En el framework Laravel hasta la versión 5.5.21, los atacantes remotos pueden obtener información sensible (como contraseñas de uso externo) mediante una petición directa para la URI /.env. NOTA: este CVE solo trata de la función writeNewEnvironmentFileWith del framework Laravel en src/Illuminate/Foundation/Console/KeyGenerateCommand.php que utiliza file_put_contents sin restringir los permisos .env. El nombre de archivo .env no es de uso exclusivo del framework Laravel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.21",
            "matchCriteriaId" : "A8C7A7F1-FA13-4CC6-A7C0-8D40775CB404"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://whiteboyz.xyz/laravel-env-file-vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://twitter.com/finnwea/status/967709791442341888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://whiteboyz.xyz/laravel-env-file-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://twitter.com/finnwea/status/967709791442341888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15110",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-20T14:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students."
      }, {
        "lang" : "es",
        "value" : "En las versiones 3.x de Moodle, los estudiantes pueden averiguar las direcciones de correo electrónico de otros estudiantes en el mismo curso. Empleando la búsqueda en la página Participants, los estudiantes podrían buscar las direcciones de correo electrónico de todos los participantes, independientemente de la visibilidad del correo electrónico. Esto permite la enumeración y la adivinación de correos electrónicos de otros estudiantes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "AEE2C318-E06D-4270-836A-48F07562EE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.8",
            "matchCriteriaId" : "83BC3C5B-EDCF-4838-B271-715E37F4ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "C7325E47-944C-4D40-B679-28CD6EDD64BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndIncluding" : "3.3.2",
            "matchCriteriaId" : "6303BBDF-8425-4BA5-981A-0553CAA88106"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101909",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=361784",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=361784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T15:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en las versiones anteriores a la 03.2.00 de Belden Hirschmann Tofino Xenon Security Appliance. Una firma incompleta del firmware permite que un atacante local actualice el equipamiento (kernel, sistema de archivo) con datos no firmados controlados por el atacante. Esto ocurre debido a que el archivo appliance_config está firmado, pero el archivo .tar.sec no lo está."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "9FD9B53A-9BC6-4851-B75F-C491B1802A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden:tofino_xenon_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957DB06-C01D-4325-81B7-45FA93040101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T15:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en las versiones anteriores a la 03.2.00 de Belden Hirschmann Tofino Xenon Security Appliance. La manipulación incorrecta del campo mbap.length de paquetes ModBus en el filtro ModBus DPI permite que un atacante envíe paquetes mal formados/manipulados a un activo protegido, omitiendo el filtrado de códigos de función."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "9FD9B53A-9BC6-4851-B75F-C491B1802A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden:tofino_xenon_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957DB06-C01D-4325-81B7-45FA93040101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T15:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en las versiones anteriores a la 03.2.00 de Belden Hirschmann Tofino Xenon Security Appliance. Los fallos de diseño en módulos OPC classic y netfilter personalizados permiten que un atacante active remotamente las reglas en el firewall y se conecte a cualquier puerto TCP de un activo protegido, eludiendo el firewall. La metodología de ataque es un cambio de puertos OPC dinámicos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "9FD9B53A-9BC6-4851-B75F-C491B1802A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belden:tofino_xenon_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957DB06-C01D-4325-81B7-45FA93040101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T15:29:00.387",
      "lastModified" : "2025-06-09T16:15:26.850",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks."
      }, {
        "lang" : "es",
        "value" : "En la función add_match en libbb/lineedit.c en BusyBox hasta la versión 1.27.2, la característica de autocompletar pestañas del shell, empleada para obtener una lista de nombres de archivo en un directorio, no inmuniza los nombres de archivo. Esto conduce a la ejecución de cualquier secuencia de escape en el terminal. Esto podría resultar en la ejecución de código, escrituras arbitrarias de archivos u otros ataques."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.2",
            "matchCriteriaId" : "37287FA9-D061-4C33-AA55-BFF45D880108"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC77ADEA-F0B8-4E5D-B965-39397F823075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D5E67-78C9-495E-91F0-AF94871E5FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "6D35CDFE-F0E7-43F7-A307-E3BDDE5AEAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC13026-3B5A-4BF0-BDEC-B77338E427E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA70BA-FFCD-4D2D-AD26-95CC62748937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*",
            "matchCriteriaId" : "4C92DD8B-8AB8-40D4-8E86-12FEB055D37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*",
            "matchCriteriaId" : "C58D77F5-CDB2-47DA-A879-BABEBE2E1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C324FB-3989-4A4A-BF5B-C40CA698DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7AC58E-D1F8-4FDF-9A28-61CF6158330A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*",
            "matchCriteriaId" : "489EE0F6-5510-470E-8711-DC08B4AFB4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*",
            "matchCriteriaId" : "6719ED6F-CBC3-4B1E-9343-23DC3BA15FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAA48A9-9319-4104-B151-D529E5EBF0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "D16CD918-5075-4975-8B1E-21D8AD35A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "7A38CD8E-494D-4E0E-A300-8550FC81FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40ABE8-8DED-4633-A34C-00DF5D510E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "1736B975-089B-413C-8CA0-5524B957EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4DCBF6-7189-497A-B923-08574443172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "16FBA646-0B5E-44A7-BB12-29D5C611AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "29F57497-7B48-4D0C-B8F5-8D33062BECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE96C7-C489-4D14-990B-8524627A23D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "AD82C093-FD98-45DE-9EE6-A05E81A1FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "08789F9E-CDC7-4F89-B925-92C9E3AE5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "26ABB84C-B4BF-424E-8F4C-D2B6BE0AC79E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "621C203B-4B66-49CC-A35D-D7703109BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "3261BDEF-D89C-41D9-A360-EC36EAB17490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*",
            "matchCriteriaId" : "5170A4F6-02B7-4225-B944-73DB5A4D332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*",
            "matchCriteriaId" : "62A97DBA-A56B-4F0B-B9C4-44B5166681AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*",
            "matchCriteriaId" : "806C8BE6-A2BE-45BE-BEF2-396BEB16FCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6211E-134A-484E-8444-FBB5070B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7B05B3-4076-4A44-B9A6-A44419F175C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1636B4-6E79-42D7-AA62-5EE43412B43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0377D0-BBED-41BF-80C5-58414ED413EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*",
            "matchCriteriaId" : "6495283C-D18A-4DDA-852E-46F2273D6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "09DEFEE5-5E9E-4F3A-A245-3E8E2B291339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A97A3-65DB-4697-9CF1-B4F5E4E4132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*",
            "matchCriteriaId" : "17A84E0A-1429-467F-9EE1-FCA062392DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*",
            "matchCriteriaId" : "C591163D-64BC-403B-A460-5B2258EC2F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*",
            "matchCriteriaId" : "ED932B89-D34D-4398-8F79-AF98987CAFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD365A0-0B09-4EC2-9973-691144C99507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE64DC7-A9D1-416F-89BF-D9F8DD8174AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*",
            "matchCriteriaId" : "0E198AE4-A6A3-4875-A7DA-44BE9E1B280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD5BA0-8180-484D-8308-B0862B6E9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EB9A-A908-42D1-A6BC-E38E861BBECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*",
            "matchCriteriaId" : "651EDCAA-D785-464D-AE41-425A69F6FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3C704C-9D60-4F72-B482-07F209985E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFE956-4391-4B71-BD0B-96A008A624B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "409778CD-9AB3-4793-A5F5-8D8657F81442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA75DB-B6BE-4E75-89B6-C69E96CBD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC45A8B-6DE0-465F-9644-B75A09394F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "7A265671-BCB0-401A-A1E8-500F9D41492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "83168067-1E43-4186-9B15-3FC702C6583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*",
            "matchCriteriaId" : "8C122DB4-8410-4C4E-87BE-EB3175CE182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*",
            "matchCriteriaId" : "C76ED78D-0778-4269-938E-BB7586C1E44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F78C5-E995-4E37-83C5-5B6A1D39E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E842D-AF37-4641-AD05-B91F250E7487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EAC87-32FD-4553-B71D-181F2C66AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F0D62-4C51-46D6-A6C4-E479BE6B2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*",
            "matchCriteriaId" : "865D3042-68ED-44B9-A036-9433F7463D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4FEF78-D2DA-4CCE-BB81-7E2090ED545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*",
            "matchCriteriaId" : "11AE3F61-9655-4B20-96E1-92112BE2BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE35166-3019-450B-9C69-484E4EDE5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*",
            "matchCriteriaId" : "D892B066-381B-4F46-8363-7BA1647BBCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*",
            "matchCriteriaId" : "710DB381-5504-4493-8D0A-17AB8E5A903B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*",
            "matchCriteriaId" : "42AAA3B7-B74D-4B67-8BD3-1D9B5ED1E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*",
            "matchCriteriaId" : "33CBCA55-010E-4E84-B2F8-F9B53D5A3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*",
            "matchCriteriaId" : "95A73B4B-F9B3-4D66-9668-902902C73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*",
            "matchCriteriaId" : "8D14D51D-E2EA-4826-8C6E-AF1C15F12384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*",
            "matchCriteriaId" : "BED100A1-9D59-48BE-91D4-0C8F2D678E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*",
            "matchCriteriaId" : "660B51F2-DFE0-49F6-AD2A-6E94B20F4019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF80536-348A-468E-AC1C-DA53632FCC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABF302-AC32-4507-BDD9-314854DE55BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDE020F-4FB1-4F1D-B434-6745045702D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1538B9-E860-46CE-A4CA-1393ECA20D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706401:*:*:*:*:*:*",
            "matchCriteriaId" : "386A6805-6167-47BA-A02F-073DC7E0FE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706402:*:*:*:*:*:*",
            "matchCriteriaId" : "03BA15D8-F7A2-428C-8104-BCEBDE7C1EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706403:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFCFE7B-37E5-4C64-9B43-4F693F227231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201710301:*:*:*:*:*:*",
            "matchCriteriaId" : "02CFAE22-37DB-4787-96FB-9E0F8EF671E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201811001:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC70488-A435-43BE-AEF4-30CBA36CBC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201811401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B37DC7D-A1C6-468F-A42E-160CE226FF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201903001:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0A3263-193B-4725-BF20-08A2B2F3BB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201905001:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C6287E-C24E-4291-8DE7-4413993577F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201909001:*:*:*:*:*:*",
            "matchCriteriaId" : "AA74FDE2-4656-446D-9215-77326C7EC62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAFF86-C65F-4723-8A63-BACE2F797937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC31DE3-ACFE-422F-B253-2FE4AAFE3954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*",
            "matchCriteriaId" : "B30B3EA4-495F-4915-B6E3-5FB9277C2DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA9E337-B4F3-4895-BA58-962F8CDEE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*",
            "matchCriteriaId" : "830B0BC1-A368-49AC-B6C9-B000972EF92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*",
            "matchCriteriaId" : "614394F3-3BEE-4E12-AABF-436D54A04313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*",
            "matchCriteriaId" : "350FD3CE-8B64-4FCF-82DE-BE941156F4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*",
            "matchCriteriaId" : "C9EAE177-6C7E-4C1B-ADEE-2C036F731272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFEEC31-8462-4DF9-A1DA-D7057C209CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC6BC16-0A1D-44B3-BA68-63EA05EDD54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*",
            "matchCriteriaId" : "942DAD67-9455-4D02-BD3B-BFD2DE7A7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACC1A72-F6B6-430A-AB89-AB0A11587F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*",
            "matchCriteriaId" : "45111C74-BF6F-4C05-A0D3-CE325AD0C02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CE5849-01B1-4E36-83E8-496A3F328C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*",
            "matchCriteriaId" : "A879BA05-3A80-4EBC-AA9D-9B53695425B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*",
            "matchCriteriaId" : "3D65A0E8-A1E0-42F3-B77D-2F32979278BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*",
            "matchCriteriaId" : "80C10150-39BA-4818-B48F-8645D4A0D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*",
            "matchCriteriaId" : "9792B986-86EF-40E0-9427-A45F858717E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*",
            "matchCriteriaId" : "37EDD688-C91A-4A35-913A-82E156ADD242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC1AC0E-8D3F-46C0-BDA9-EB9DC9971F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*",
            "matchCriteriaId" : "47DA50DA-7CA4-4B76-8B3B-A5732509F71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*",
            "matchCriteriaId" : "76EB1A04-0645-4909-AEF9-33D6FADA4793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A35723-D968-42D6-89EB-86CA550516E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AC8A19-F98E-48F1-A1EA-EAA1C7208335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A3952-8429-4762-8701-47D7C1F05A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*",
            "matchCriteriaId" : "5B007609-C312-469B-BACF-04D6D80DADF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*",
            "matchCriteriaId" : "514F2ECD-FC55-42A5-BEE4-DA7641CC93A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*",
            "matchCriteriaId" : "3594E391-19CD-4803-8285-FA11BE63AB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEC248D-502E-4A8D-8786-CD72A2E3AB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*",
            "matchCriteriaId" : "4F08529C-B14C-45FB-AEA1-77D12C88CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*",
            "matchCriteriaId" : "617835F5-49DA-4B42-8C7B-C122D7363A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DF3ED7-FA3F-4EBC-99AC-B7AD20E85927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED86C29-2EA6-41DD-ACCB-1E02F9CB747E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1372AD-2853-4BED-BB71-6BACB28B95C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E684DF-9E45-459E-AB75-6B4653E5C7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201903001:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DDD3E9-186F-472C-BA76-C2A363206792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201905001:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E9914-DB27-41EF-B55D-5B79ECD1DA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B2792D06-A73E-4A56-A152-82E1AD4E707D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE9D758-2170-4ACD-965C-C76BDA693466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4A373B-2AC6-4193-9C34-1E4EEB552A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*",
            "matchCriteriaId" : "E75F4E15-2C5F-4667-B8A4-0EE9895FAEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*",
            "matchCriteriaId" : "8B75B45F-E25A-4362-856D-465A9F8B70DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA4AE4C-3BA8-472D-950A-3C8684565CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA3617D-B911-4BC5-B544-B31D4F43D2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC6E0F6-83DF-4670-8D04-A41C7DC1B881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*",
            "matchCriteriaId" : "047A71B3-CDFB-41F3-B2DE-11360DAE5744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*",
            "matchCriteriaId" : "F88691FD-F263-4B75-BF21-481BC1623C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A47CDA-D3DD-4E0F-8268-32A188EA1D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*",
            "matchCriteriaId" : "36A67476-2E8E-4104-9F10-7AE42F82508F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*",
            "matchCriteriaId" : "ED029F1A-96D0-4EF2-9148-FC98E8B8FDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*",
            "matchCriteriaId" : "E2283675-582F-44A8-833B-B5B439CBFA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*",
            "matchCriteriaId" : "94C4A188-6B00-48C4-B7E2-9F70811BF618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*",
            "matchCriteriaId" : "F82943E9-E2D0-49F4-BD32-40E84BA1957E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACB68F5-EC73-4C30-8FD3-F6647F9BCCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*",
            "matchCriteriaId" : "B854BA24-11FD-4D0C-9EFD-A88E64FED4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*",
            "matchCriteriaId" : "554434AB-763F-4E95-B616-F7594041D511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*",
            "matchCriteriaId" : "CE56E7AC-F63D-4A4B-9B45-0E623973B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*",
            "matchCriteriaId" : "36664142-0111-42F5-A371-AD2C0DF211EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*",
            "matchCriteriaId" : "49EA78B6-8208-4351-88F9-103CA01EF3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*",
            "matchCriteriaId" : "27AC575F-9AC4-4AA1-A71C-BF9F752295F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0F47F3-0509-45AC-8EA9-37246E4E6095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*",
            "matchCriteriaId" : "CE103301-6AEF-4348-8F36-833021739AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*",
            "matchCriteriaId" : "8D92B2FF-8962-41F9-B019-D83AAAD188FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6D5227-3421-412F-9BE0-583AA768446D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2F52AF-D7EF-4F57-8F04-B0C6CD3FED63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*",
            "matchCriteriaId" : "82BA9EB1-4EFB-4649-92C7-2C307966956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*",
            "matchCriteriaId" : "2133378D-8DFD-48B9-83A1-9FA7DDC68902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*",
            "matchCriteriaId" : "57BF8703-0C83-4BA5-B0F7-FB6E45229685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*",
            "matchCriteriaId" : "DAADDD62-2F6E-4D12-A49F-3D38ACF488E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*",
            "matchCriteriaId" : "B5834F35-6D9A-48E5-BB5C-3A7D6CCE36D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*",
            "matchCriteriaId" : "27FA0C0E-B5A2-4619-998B-CFB45496D895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*",
            "matchCriteriaId" : "B98EDBA4-0BA4-4894-B6F6-681117A5C5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*",
            "matchCriteriaId" : "8E756914-2C2A-4999-AAEA-2F6835A29C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC0C89B-26A3-40F7-855F-5F6B36B77F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2FE18-A90E-429A-98D1-9A97DD0464B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*",
            "matchCriteriaId" : "92289D85-0652-41D1-A6BA-D4B8C7EE1F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*",
            "matchCriteriaId" : "CF41887D-B145-4D01-9AEF-2E36479B2FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEAF0ED-BD20-4BA6-BB23-1C978B823A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*",
            "matchCriteriaId" : "36234CE1-FA7E-4534-9720-410435E2BAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE65721-57C0-4748-B159-F6D97CE8CAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1889D7-3313-4004-AA42-7879E8551413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*",
            "matchCriteriaId" : "494E0B07-CE16-46D4-A89B-4F12A6CECDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*",
            "matchCriteriaId" : "DD046237-16D7-4A57-9F09-2A6A649368C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*",
            "matchCriteriaId" : "8343E8DB-1D54-4B82-9254-2E2AFC548609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201903001:*:*:*:*:*:*",
            "matchCriteriaId" : "F853B5B8-E8F8-4EA2-90EB-0603F4AADAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904001:*:*:*:*:*:*",
            "matchCriteriaId" : "0169E032-F47A-45E0-BC33-B7DF54EC11BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redlion:n-tron_702-w_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7E2A2E-13BA-46CF-A98D-CC855C381834"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:redlion:n-tron_702-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30885167-CD8F-4026-ADCB-2E07E772ECD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redlion:n-tron_702m12-w_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6633FE15-2CF0-4F83-91AB-6B090684C284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:redlion:n-tron_702m12-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F253CC-A9DC-463A-93F0-71DD4FC190FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Jun/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Sep/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Aug/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Mar/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Sep/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Aug/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/Jun/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2019-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Sep/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://usn.ubuntu.com/3935-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Jun/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Sep/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Aug/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Mar/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Sep/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Aug/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/Jun/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2019-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Sep/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://usn.ubuntu.com/3935-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T16:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter."
      }, {
        "lang" : "es",
        "value" : "Existe una inyección SQL en classes/handler/public.php en el componente forgotpass de Tiny Tiny RSS 17.4 mediante el parámetro login."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tt-rss:tiny_tiny_rss:17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBB4A0C-539F-41B5-BD86-0A720F03CA20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T17:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264."
      }, {
        "lang" : "es",
        "value" : "La función printMP3Headers en util/listmp3.c en libming v0.4.8 o anteriores es vulnerable a un desbordamiento de búfer global, que podría permitir que atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado. Esta vulnerabilidad es diferente de CVE-2016-9264."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libming:libming:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.8",
            "matchCriteriaId" : "47C3E495-3E11-4C91-B3B9-C479BF492011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libming/libming/issues/75",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/libming/libming/issues/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9806",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-20T17:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el analizador sintáctico de archivos DOC de OpenOffice Writer en versiones anteriores a la 4.1.4, específicamente en WW8Fonts Constructor, permite que atacantes manipulen documentos maliciosos que provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación), resultando potencialmente en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.4",
            "matchCriteriaId" : "68F90E01-2715-4874-88C0-33695A7917EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openoffice.org/security/cves/CVE-2017-9806.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101585",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2017-9806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T18:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c."
      }, {
        "lang" : "es",
        "value" : "Un error de índice de arrays en el programa fig2dev en Xfig 3.2.6a permite que atacantes remotos provoquen un ataque de denegación de servicio (DoS) o de divulgación de información con un archivo de formato Fig manipulado. Esto se relaciona con un valor de fuente negativo en dev/gentikz.c y con las funciones read_textobject en read.c y read1_3.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfig_project:xfig:3.2.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2846C0-81F3-40B4-9DF9-A5C40FF7B92F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881143",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T18:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot."
      }, {
        "lang" : "es",
        "value" : "En el enrutador principal Vonage VDV-23 115 3.2.11-0.9.40, el envío de una larga cadena de caracteres en los campos loginPassword y/o loginUsername en goform/login provoca que el enrutador se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vonage:vdv-23_firmware:3.2.11-0.9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3375A486-9EE5-4201-BC74-66335A82F0C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vonage:vdv-23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1A9FD-5E80-4C1D-815E-936A40AF647E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gh0s7.net/vonage2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43164/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://gh0s7.net/vonage2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43164/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12607",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-20T19:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el analizador sintáctico de archivos PPT de OpenOffice en versiones anteriores a la 4.1.4, específicamente en PPTStyleSheet, permite que atacantes manipulen documentos maliciosos que provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación), resultando potencialmente en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.4",
            "matchCriteriaId" : "68F90E01-2715-4874-88C0-33695A7917EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101585",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039732",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039734",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00017.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4022",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openoffice.org/security/cves/CVE-2017-12607.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openoffice.org/security/cves/CVE-2017-12607.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15527",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-20T19:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient security validation / sanitization of user-supplied input file names, such that characters representing \"traverse to parent directory\" are passed through to the file APIs."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a ITMS 8.1 RU4, Symantec Management Console puede ser susceptible a un exploit de salto de directorio, que es un tipo de ataque que puede ocurrir cuando hay una validación de seguridad o inmunización insuficiente de entradas de nombres de archivo proporcionadas por el usuario, de manera que los caracteres que representan \"salto al directorio primario\" se pasan a las API de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:management_console:*:ru4:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1",
            "matchCriteriaId" : "2F5F1398-C498-406A-BF38-7AE374E5AD12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101743",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171120_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171120_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T19:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php."
      }, {
        "lang" : "es",
        "value" : "LvyeCMS hasta la versión 3.1 permite que atacantes remotos suban y ejecuten código PHP arbitrario mediante secuencias de salto de directorio en el parámetro dir, en conjunto con código PHP en el parámetro content, dentro de una petición de adición de plantilla Style en index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lvyecms_project:lvyecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "F92ABB92-641B-4C21-84E2-A7237DA0F3AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SQYY/CVE/blob/master/Lvyecms_G.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/SQYY/CVE/blob/master/Lvyecms_G.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T19:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator."
      }, {
        "lang" : "es",
        "value" : "La característica Public tologin en admin.php en LvyeCMS hasta la versión 3.1 permite XSS mediante un nombre de usuario manipulado que se gestiona de manera incorrecta durante la posterior visualización de registros por parte de un administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lvyecms_project:lvyecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "F92ABB92-641B-4C21-84E2-A7237DA0F3AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SQYY/CVE/blob/master/Lvyecms_X.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SQYY/CVE/blob/master/Lvyecms_X.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12608",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-20T20:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el analizador sintáctico de archivos DOC de OpenOffice Writer en versiones anteriores a la 4.1.4, específicamente en ImportOldFormatStyles, permite que atacantes manipulen documentos maliciosos que provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación), resultando potencialmente en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.4",
            "matchCriteriaId" : "68F90E01-2715-4874-88C0-33695A7917EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101585",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039733",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039735",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00017.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4022",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openoffice.org/security/cves/CVE-2017-12608.html",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openoffice.org/security/cves/CVE-2017-12608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T20:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a \"Calendar -> New Event\" action."
      }, {
        "lang" : "es",
        "value" : "En Horde Groupware 5.2.19-5.2.22, existe XSS mediante el campo URL en una acción \"Calendar -> New Event\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.19",
            "versionEndIncluding" : "5.2.22",
            "matchCriteriaId" : "19922FDE-5ACF-4BDA-A569-E8579F047E60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/kronolith/commit/09d90141292f9ec516a7a2007bf828ce2bbdf60d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/starnightcyber/Miscellaneous/blob/master/Horde/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00049.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/kronolith/commit/09d90141292f9ec516a7a2007bf828ce2bbdf60d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/starnightcyber/Miscellaneous/blob/master/Horde/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T20:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action."
      }, {
        "lang" : "es",
        "value" : "En Horde Groupware 5.2.19 y 5.2.21, existe XSS mediante el campo Color en una acción Create Task List."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E509D906-4D06-4404-B420-523CE6313855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7054862-3FC5-4F4D-8596-3E9CF7E9D793"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00046.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00047.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-20T20:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the CVE-2015-7984 CSRF protection mechanism can then be bypassed."
      }, {
        "lang" : "es",
        "value" : "En Horde Groupware 5.2.19, existe XSS mediante el campo Name durante la creación de un nuevo recurso. Esto puede aprovecharse para ejecutar código de forma remota tras comprometer una cuenta de administrador, ya que se puede omitir el mecanismo de protección CSRF relacionado con CVE-2015-7984."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:5.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E509D906-4D06-4404-B420-523CE6313855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00048.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3157",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-20T20:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back."
      }, {
        "lang" : "es",
        "value" : "Mediante la explotación de la forma en la que las versiones anteriores a la 4.1.4 de Apache OpenOffice renderizan objetos embebidos, un atacante podría manipular un documento que permite leer en un archivo del sistema de archivos del usuario. El atacante podría recuperar información mediante el uso de, por ejemplo, secciones ocultas para almacenar la información, engañando al usuario para que guarde el documento y convenciéndolo para que envíe de nuevo el documento al atacante. La vulnerabilidad se mitiga por la necesidad del atacante de conocer la ruta de archivo precisa en el sistema objetivo y la necesidad de engañar al usuario para que guarde el documento y lo envíe de vuelta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.3",
            "matchCriteriaId" : "99FD1AA4-A5B4-4D80-8EB4-CA6451B41AC2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96402",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037893",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0914",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0979",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3792",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openoffice.org/security/cves/CVE-2017-3157.html",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openoffice.org/security/cves/CVE-2017-3157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12110",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-20T22:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de enteros en la función xls_appendSST de libxls 1.4. Un archivo XLS especialmente manipulado puede provocar la corrupción de memoria, resultando en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D591F1-0D14-4A24-92A7-239B872148ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0462",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12111",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-20T22:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable fuera de límites en la función xls_addCell de libxls 1.4. Un archivo XLS especialmente manipulado con un registro de fórmulas puede provocar la corrupción de memoria que podría dar lugar a la ejecución de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D591F1-0D14-4A24-92A7-239B872148ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0463",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2896",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-20T22:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable fuera de límites en la función xls_mergedCells de libxls 1.4. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D591F1-0D14-4A24-92A7-239B872148ED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0403",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2897",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-20T22:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable fuera de límites en la función read_MSAT de libxls 1.4. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478735AA-A37F-46A0-86A9-DA9F84AF9EAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0404",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2919",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-11-20T22:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en pila en la función xls_getfcell de libxls 1.3.4. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA07D9C-851E-464B-834A-B24542E24EB4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0426",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T08:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c."
      }, {
        "lang" : "es",
        "value" : "El codificador VC-2 Video Compression en FFmpeg versión 3.0 y 3.4 permite que los atacantes remotos provoquen una denegación de servicio (lectura fuera de límites) debido a un relleno incorrecto del búfer para wavelets que no son de Haar. Esto está relacionado con libavcodec/vc2enc.c y libavcodec/vc2enc_dwt.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E85AA0-559E-4EC5-AF61-100732EF0643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDA7F5-FE3F-4D4A-AE46-43251194C127"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=a94cb36ab2ad99d3a1331c9f91831ef593d94f74",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/94e538aebbc9f9c529e8b1f2eda860cfb8c473b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4049",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=a94cb36ab2ad99d3a1331c9f91831ef593d94f74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/94e538aebbc9f9c529e8b1f2eda860cfb8c473b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T08:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter."
      }, {
        "lang" : "es",
        "value" : "MapOS en versiones 3.1.11 y anteriores tiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente en /clientes/visualizar, lo que permite a los atacantes remotos inyectar scripts web o HTML arbitrarios mediante un parámetro description manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mapos_project:mapos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.11",
            "matchCriteriaId" : "4F2E31D7-C0EE-411B-8AA5-D3911F02E449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RamonSilva20/mapos/issues/81",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/RamonSilva20/mapos/issues/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T13:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by modifying text. The default installation is unsafe because the server listens on the network interface, not the localhost interface."
      }, {
        "lang" : "es",
        "value" : "La instalación por defecto del servidor DocuWare Fulltext Search hasta la versión 6.11 permite que los usuarios remotos se conecten y descarguen texto que se podría buscar desde el servicio Solr embebido, omitiendo las características de control de acceso de la API y las interfaces de usuario de DocuWare. Un atacante también podría obtener privilegios modificando el texto. La instalación por defecto es insegura porque el servidor escucha en la interfaz de red, no en la interfaz del host local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docuware:fulltext_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.11",
            "matchCriteriaId" : "50E35843-D942-4477-BC36-3AACFBF71C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T13:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allows attackers to bypass authentication by inserting a token into an X-Auth-Token header of a new request. NOTE: github.com/openstack/swauth URLs do not mean that Swauth is maintained by an official OpenStack project team."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en middleware.py en OpenStack Swauth hasta la versión 1.2.0 cuando se utiliza con OpenStack Swift hasta la versión 2.15.1. El servidor proxy y el almacén de objetos de Swift guardan los tokens (sin los hashes correspondientes) que se recuperan del mecanismo de autenticación de middleware de Swauth en un archivo de log como parte de una URI GET. Esto permite que los atacantes omitan la autenticación insertando un token en una cabecera X-Auth-Token de una nueva petición. NOTA: las URL de github.com/openstack/swauth no quieren decir que hay un equipo oficial del proyecto OpenStack que mantenga Swauth."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:swauth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "569523A9-D620-4EBF-A80E-F920C81D96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:swift:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.15.1",
            "matchCriteriaId" : "DC9FBBDE-80EF-4E50-B65B-D2EB7FAF3CF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882314",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/swift/+bug/1655781",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openstack/swauth/commit/70af7986265a3defea054c46efc82d0698917298",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4044",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/swift/+bug/1655781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openstack/swauth/commit/70af7986265a3defea054c46efc82d0698917298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T13:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php."
      }, {
        "lang" : "es",
        "value" : "v5/config/system.php en dayrui FineCms 5.2.0 tiene un valor SYS_KEY por defecto y no requiere la regeneración de la clave para cada instalación, lo que permite que los atacantes remotos suban archivos .php arbitrarios mediante una acción member api swfupload en index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms:finecms:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2F501-A47B-4CB5-94A2-492681FD9755"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/dayrui/finecms/commit/ff4b7ad3c3fbd3245b3bb7bc774d20c9705d9882",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://user-images.githubusercontent.com/31153532/33065202-21b536f2-cee3-11e7-997a-c7d4f1b00ca7.jpg",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/dayrui/finecms/commit/ff4b7ad3c3fbd3245b3bb7bc774d20c9705d9882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://user-images.githubusercontent.com/31153532/33065202-21b536f2-cee3-11e7-997a-c7d4f1b00ca7.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T14:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation."
      }, {
        "lang" : "es",
        "value" : "Existe inyección de código en Kernel/System/Spelling.pm en Open Ticket Request System (OTRS) 5 en versiones anteriores a la5.0.24; 4 en versiones anteriores a la 4.0.26 y 3.3 en versiones anteriores a la 3.3.20. En la interfaz del agente, un atacante remoto autenticado puede ejecutar comandos shell como el servidor web mediante la manipulación de URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.20",
            "matchCriteriaId" : "0E0D69D3-7B07-440E-BEB9-40F6A66EE9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.26",
            "matchCriteriaId" : "B7619EE4-7588-462F-84FA-4FDB7BC3E11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.24",
            "matchCriteriaId" : "A79B79E5-3AE7-490D-9D06-456C809BD8B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4047",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-07-security-update-otrs-framework/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-07-security-update-otrs-framework/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-21T14:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to execute arbitrary OS commands via a crafted cgi-bin/luci/usbeject?dev_name= GET request from the LAN. This occurs because the \"sub_A6E8 usbeject_process_entry\" function executes a system function with untrusted input."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos en app_data_center en dispositivos Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01 y Ac18 ac18_kf_V15.03.05.19(6318_)_cn permite que los atacantes remotos no autenticados ejecuten comandos de sistema operativo arbitrarios mediante una petición GET cgi-bin/luci/usbeject?dev_name= manipulada desde la red LAN. Esto ocurre porque la función \"sub_A6E8 usbeject_process_entry\" ejecuta una función del sistema con valores de entrada no fiables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac9_firmware:us_ac9v1.0br_v15.03.05.14_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892AC99-F24B-4E0F-B3F0-CDBE1F4AD446"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac9_firmware:ac9_kf_v15.03.05.19\\(6318_\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512EB7D7-B12E-4219-8270-9EFCC8F6F366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.18_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51B455-6ABD-4827-B948-7341D353C05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.19_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9535D5AC-FCE6-40A9-BA55-10DFE110BBBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:us_ac18v1.0br_v15.03.05.05_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D8463B-CC09-4C38-9881-4D7E3EC2B635"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:ac18_kf_v15.03.05.19\\(6318_\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C6CF57-11B7-4A11-AA61-248ACAFE624C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Iolop/Poc/tree/master/Router/Tenda",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Iolop/Poc/tree/master/Router/Tenda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5705",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el kernel en Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 permiten que un atacante con acceso local al sistema ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411DC559-E8A9-4BC4-96C6-EA753E54543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DF7F6-F649-4C57-893A-6775F07C31A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2380C5D8-8A58-4279-A3D9-7234C7B1D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EB2D65-90F2-4866-A886-F64DB9C7D2FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EF0C50-F104-47CE-89E7-BC37FE1A5717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D764C7C-2C49-4149-9586-5D0140CE00FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101917",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/PTsecurity_UK/status/938447926128291842",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/PTsecurity_UK/status/938447926128291842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5706",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el kernel en Intel Server Platform Services Firmware 4.0 permiten que un atacante con acceso local al sistema ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:server_platform_services_firmware:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64BD5-329C-422F-AAB5-B4C0FA3E73D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101906",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039955",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "Tool Signature" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://twitter.com/PTsecurity_UK/status/938447926128291842",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "Tool Signature" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://twitter.com/PTsecurity_UK/status/938447926128291842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5707",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el kernel en Trusted Execution Engine Firmware 3.0 permiten que un atacante con acceso local al sistema ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:trusted_execution_engine_firmware:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B920FA0F-9A2B-4678-9085-7B27361698A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101919",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/PTsecurity_UK/status/938447926128291842",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/PTsecurity_UK/status/938447926128291842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5708",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector."
      }, {
        "lang" : "es",
        "value" : "Múltiples escalados de privilegios en el kernel en Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 permiten que un proceso no autorizado acceda a contenidos privilegiados mediante un vector no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411DC559-E8A9-4BC4-96C6-EA753E54543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DF7F6-F649-4C57-893A-6775F07C31A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2380C5D8-8A58-4279-A3D9-7234C7B1D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EB2D65-90F2-4866-A886-F64DB9C7D2FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EF0C50-F104-47CE-89E7-BC37FE1A5717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D764C7C-2C49-4149-9586-5D0140CE00FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101921",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5709",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector."
      }, {
        "lang" : "es",
        "value" : "Múltiples escalados de privilegios en el kernel en Intel Server Platform Services Firmware 4.0 permiten que un proceso no autorizado acceda a contenidos privilegiados mediante un vector no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:server_platform_services_firmware:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64BD5-329C-422F-AAB5-B4C0FA3E73D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101906",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039955",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5710",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecified vector."
      }, {
        "lang" : "es",
        "value" : "Múltiples escalados de privilegios en el kernel en Intel Trusted Execution Engine Firmware 3.0 permiten que un proceso no autorizado acceda a contenidos privilegiados mediante un vector no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:trusted_execution_engine_firmware:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B920FA0F-9A2B-4678-9085-7B27361698A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101922",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5711",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el kernel en Active Management Technology (AMT) en Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 permiten que un atacante con acceso local al sistema ejecute código arbitrario con el privilegio de ejecución AMT."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.1.71.3608",
            "matchCriteriaId" : "BCE880E2-5E1F-40F5-AD2F-A266A95C51B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.1.41.3024",
            "matchCriteriaId" : "139DA53F-A603-490F-A4E5-44D7A0071CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0.0",
            "versionEndIncluding" : "10.0.55.3000",
            "matchCriteriaId" : "BFA876A3-88C1-43D8-92E0-B21E16D37736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411DC559-E8A9-4BC4-96C6-EA753E54543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DF7F6-F649-4C57-893A-6775F07C31A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2380C5D8-8A58-4279-A3D9-7234C7B1D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EB2D65-90F2-4866-A886-F64DB9C7D2FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EF0C50-F104-47CE-89E7-BC37FE1A5717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D764C7C-2C49-4149-9586-5D0140CE00FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F41472A-BC3D-4226-88AC-975E523C3678"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-premium_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AEFB41-300D-4541-90EC-6F736A06A404"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-premium:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54563F87-598C-4301-95C5-A582A78E3D64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-deluxe_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF442E72-096E-40C0-9258-3E2474545E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-deluxe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54781F85-88B1-488F-A33F-442947CDA125"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EEE05D-D9C8-44C0-A8BD-D6A262A79CF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9606205C-88D0-44BB-8052-1E78C512DEB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE25BF7-37DE-4F90-81FD-D95A2A3031BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C71F90-C6E8-49D8-AC7E-1BC2FF49BFA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-ar_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A4CC55-E868-4174-8FC1-23FBF75A973F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-ar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9CE58F-3A49-41B8-B9EC-F901AB83D861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277B4C76-D04F-467B-8367-E51F74E21ABE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DC9901-B4D7-4FD6-86BB-B75FF30CB11A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6701855F-2D7F-4559-A8D1-CF8A8C999B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B1596-8BAA-4805-8D49-9C42E270B219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F7656-9A1F-409C-BA46-BD1B979C25F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7EB86B-7BC7-4D34-9EDE-04564FEFEDAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2357072-5ED5-4DC9-BF2A-AE6F85C6C240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC3417D-44A9-489F-A440-8D3E75DD3586"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01833F6B-F38D-439A-B84A-047DBC75F71F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89756DDE-8EA9-4135-BBA8-0707FE3D81B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-p_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1249DEA2-CEF8-4009-B6BF-E0DCA5032B75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-p_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7D4616-0DCA-4168-8CF4-7055AA922E2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170m-e_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BB2B24-1B03-46DE-B4F9-CCDDD83FA28C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170m-e_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F309D3DC-E2C2-406C-B742-71CAD9E4A568"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:sabertooth_z170_mark_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42A2157-8724-4CF2-88F0-048231320354"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:sabertooth_z170_mark_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283B693A-D720-411C-96C9-91E356A97FD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:sabertooth_z170_s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7868F0B3-ED86-4C00-A227-CFD8A14A0790"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:sabertooth_z170_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45195F20-5E26-426A-A272-5B6342BD06C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_extreme_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77678DA-7926-4688-BFC6-9C989985C633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_extreme:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C33821F-3755-4301-B808-806F918FF06F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_ranger_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0AF7AF-0416-4E40-9F18-74B89E0E0F47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_ranger:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD49CDD-10C4-4795-BCEF-132FDB6A25CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_formula_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1763A28F-2ED5-4309-9C02-0587DD2435CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_formula:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334D6552-C4E3-4F13-ACD1-3BE6312E9FEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_hero_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF49D87-4566-404D-908D-3C5A02B0BE7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_hero:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCE5FB6-2F8D-4707-BE1E-26DE66C7740A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_hero_alpha_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13578BDF-A38D-4357-AD35-41BA988E286B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_hero_alpha:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F716322D-6778-45FD-A4F0-A773A28EA3F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_gene_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D318FB-16E1-4B5D-817A-2A13DF88A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_gene:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E968C4AB-61B0-435C-BAC5-A70EC78EAD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_impact_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054E1398-AE98-46AB-B7A6-703F342CC847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_impact:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5667A1-AFB2-4ABF-B9C8-CB24EBFF16C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170i_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC1CDA2-B140-45FE-8FE5-2FAC5B3907E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170i_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8DCBFE-9482-40F6-9C8F-E4A472767FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02FA657-FC01-4795-8246-B777A7A5BCAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5CBA9-E946-4F22-A0E9-40A63380E260"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170_pro_gaming\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F814D5CE-2F35-4631-BC6C-857CBBD9DC72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170_pro_gaming\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3FF12D-3EA0-4738-9B36-ED5461C9D0C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BE8D64-A47B-4412-AF8A-354D01DB719C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F273293C-6EDA-485E-AA38-A4FE41822171"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150_pro_gaming\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C23914-2AB4-4D6F-A438-F1762F235D92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150_pro_gaming\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CB8991-762A-46B5-8759-AF453E21FD95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150i_pro_gaming\\/wifi\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ED630E-C695-47DD-AABA-39603766CE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150i_pro_gaming\\/wifi\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B17C450-C8E8-4255-8E23-4ABBC8664366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150i_pro_gaming\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7800E86-9FAF-4D42-8029-97A22AF87E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150i_pro_gaming\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF81798D-F241-499D-84BC-AE647D7DA06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552BBFAA-A268-4DF9-AC1B-9A99FD5BAA83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBDF56E-375F-439E-A1A7-1D94523C6DF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06F70FB-E259-4957-9D86-88805F8C0753"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91597904-8647-4109-864D-5EC577A22C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-a_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C912D-CF86-4A1B-B440-E61B3B24886C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-a_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232EA20-A6BB-4CC9-88FE-F91BE7EFFCFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-c_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B8A7AC-953B-4CEE-8DF5-6B5787918CC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-c_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B266B9C5-DB7D-41B4-BD43-F50A45B8688C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109745AA-5210-49EE-93E2-2660FE605273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3990C807-1EA1-42FD-9C38-7B28E99B9630"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDA852-209E-49BB-9793-F2E26FAE785F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60AB4DAC-E806-4772-96C8-F7C68930AA24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6011C6-C8CC-426A-BBB3-AA2698A191DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6C34D6-D42F-4FA3-A9A3-985F6F49704A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638CA839-0DB1-4F26-AC1F-3B65BB2DA0C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E4F53F-65C2-4254-AB16-51EB04CF10DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-f_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0F3C11-8700-4472-ADD5-462EAC571A5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-f_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6381EE22-DFF3-4197-96C6-1B448D6AC9C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BC083C-2DD2-40C5-9B5F-6CB524FD71DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC8BB48-0826-45F6-B5E5-06FB66995E69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-v_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82068A08-B5D9-4A79-B81E-2249543175D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-v_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723BF580-21B0-4FD4-8F43-F609AFD53B0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150m-v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81507B7-3C02-4AA4-B9E3-4F1DF9E9465A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150m-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94BE221-3E91-492F-9BCB-2538B6812400"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150m-v3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FD9041-A1BF-4483-B9C2-70F8AB00C162"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150m-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A763DB3-F4AB-4696-B49B-9EC929E4B17A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150m-v5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B7BF90-6D37-4211-9AC5-27F82D6DAE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150m-v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3A85B3-0576-4D31-A088-EBBEF429B2F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150-v7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D7220B-8CF7-459E-9C93-FE2ED3AACC5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150-v7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65B38A3-43EE-4EF8-AC46-8725EB3B4E69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C4E73F-2B93-4CAE-ABDB-AF1C6C3E1763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F37D51-6D2D-4325-BB0D-3FE2D5D1F2C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-a\\/m.2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF463BA-68F0-46C5-A948-EA233A7B493E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-a\\/m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10021E63-ED8B-4C5D-9559-93DA26469611"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6BEA-C713-4394-A894-AC40053E4FD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3202BBE4-8BC9-4266-89E1-02EC58034284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-c\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09432C60-8EC9-4FF9-9633-FF8779A5F9B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-c\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49991ED2-1D79-4148-8F05-DE224ADC5181"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pio-b150m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30643353-C9AC-494F-B34D-4226042910CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pio-b150m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B96870-A832-46FF-AF3F-169C486464B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:trooper_b150_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "820B589F-9D3E-4D9C-8112-C11E28F9271E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:trooper_b150_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8645FCEC-625F-4540-843D-CB56FBFABDBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-plus_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF89B32-1A7C-4BDA-9A45-1FFC1F38DE29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-plus_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE36CBA-3C04-463E-A21A-1F489D755896"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150_pro_gaming_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6625FD9F-41FA-450E-9CD0-AC8C237C4D4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150_pro_gaming_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21888815-D392-4E6D-A831-F2C170E4BE8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-k_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B7FD9B-4FD1-4B60-8394-F51A8446D901"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-k_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72749164-D3A3-4F10-80FC-331FB6705899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-pro_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24FA1-BB23-4FB3-A35B-6BD05BA45EC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-pro_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFFAE60-468F-4861-AED3-76EAF9676E19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-h110m-v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8ADE34C-4A5E-49CA-83CB-119703C5C2B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-h110m-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFC293D-73DA-4048-A89D-92092D7BE42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-h110m-v3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5847BEF-CD8B-4B2C-A015-847CE9611EB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-h110m-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1D362C-359D-455E-BBEF-9B77838419B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110i-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B21217-FC88-4AA0-A4AA-49E98A30122C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110i-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18DCD2A-3F80-461A-A04D-7BF084438E07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a\\/dp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A70E8F-6058-4776-85D7-7FBA0D6B33B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a\\/dp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14544DF1-2E6E-4A8B-9B86-2E10B5FE4282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9229F19B-E8A3-44A0-862C-BE7DE7264018"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49098E76-F811-451A-8D7F-1B40491A2278"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE58681-7681-4729-A9AC-FB1317FE1168"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B400E0-1526-4C46-A60D-84D468B1911E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c\\/hdmi_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1204092-3B5B-4243-A0F6-B16C5C661F77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c\\/hdmi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71E3A13-644B-491C-97AA-688DA9214561"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c\\/ps_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8AD0F1-8E0E-46C2-9F32-F34F16CFE491"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c\\/ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38472135-237B-4EE1-8D66-D94B6F3FCFD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F4CBF7-CBA2-438A-A997-ACDB83322F2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767EE0C3-16EC-4D40-A86D-B14586EF9AD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c2\\/tf_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B122984-8F1E-4CBE-A127-2C7AA5BE1178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c2\\/tf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE17F92F-990E-4080-BEE0-9549FBDAAE0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-cs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D9955B-57E0-404B-B677-0F0CBAB17606"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-cs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D30CDF-60B0-40B6-8F3E-4C68AD2F507C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-cs_x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CFCE10-117B-4596-9EC8-0FD763D83445"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-cs_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801129A7-C8A2-4D90-9C54-13FAC9B96762"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-cs\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E870D6C-4C0F-4C70-A432-FD02CE45AEA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-cs\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA55C126-A4D3-48D5-A277-772923EAA7DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-d\\/exper\\/si_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927D8CBD-EF57-48E2-A80C-E27907E72CED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-d\\/exper\\/si:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6DF281-4E33-4DE5-B5F5-9FEA95885ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-k_x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A74624-952E-4342-BABF-9E59DE71A633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-k_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CC4DAA-79B1-4747-BE1E-69C194E6BCDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-ks_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B2CA4-B41E-4900-8F85-80A472670868"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-ks:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE12AD23-6AC5-4F08-B1B1-E59F728E9668"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-ks_r1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B532EC-7D68-4F05-9C84-EB074A85A764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-ks_r1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97E501F-0C7F-4BA0-B04C-C8A623F7156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-p\\/dvi_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E4DEB7-3F0F-4C62-991B-5A75B27696AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-p\\/dvi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9810952-332C-4849-BB12-1253AF76E1BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-ts_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3779667-7513-44D8-B2E5-1925594AD3E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C795E996-2996-4731-A78E-FFA9585DCD31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2058E0D4-EAEB-4CD1-AD89-BC69858B734A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558AF38E-674A-49B5-A023-2043C89714E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110s1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E83F44-B421-4B24-BE8D-561D57883E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110s1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AAA664-8BC3-413F-BB92-8BB6B3690EDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110s2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CB2BDF-E9BF-4049-8D44-FD660AC60AAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110s2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F53F8B-379A-416E-A44D-38ED9499A120"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110t_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C47313A-2FBA-49AD-AD68-5F817411D994"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0232650-B917-4734-B322-D12ADB06B435"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110t-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BC9BDF-0562-44FE-B2A5-F8B26B98D94D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A3F2A5-56BF-41E8-959B-0AFFCC130361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a\\/m.2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A88EE-9112-40B0-8A11-4841550B5C3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a\\/m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A4787E-F9CA-45F2-B43A-3C9BAD580204"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D757A98E-209C-4391-9B7B-2CD60D5A4FB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12979DE-AEC4-4D51-8E0A-E714C85F6D7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC08CFA-0254-41A0-8599-7F1033782B2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6367721C-A009-45AC-B272-8290A8331284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-e\\/m.2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9617970B-9C4B-47D3-982D-8200BC52D0E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-e\\/m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1915CF-2419-4C1B-80B9-8D29D379E1FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179BC9DB-AA35-4A54-8EB3-1DB295727997"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B8722E-E334-47F3-A3BE-B9AB798A5305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E65AAA6-B29F-4859-9A99-591F6BD1371C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D182935F-8629-4F9D-925D-A166007B446B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54A67BA-C862-4BA0-94D2-13362FF2F26B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975830EE-92F4-4614-9AE8-E9D5DBADE414"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:trooper_h110_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12B0228-80F1-466D-86F2-57F7E7BA4095"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:trooper_h110_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B75FEA3-D643-4348-9FA8-07D3127C8D88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6C8818-47EC-47B5-980F-5109C56C5C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4C230-C8B3-496E-9012-5CF032D420E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7952968-C3A8-40CA-8000-74B23C112AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C05633B-3CD2-429B-9239-DB6F189C8C79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h110m2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D53057-61DA-498B-B76D-6FB0FD50BF61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h110m2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E222A3E-2E1E-4B46-A6DC-E91831CEA856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h110m2\\/fpt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7A40AA-4A94-4DB5-ACE5-048E7E1C998D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h110m2\\/fpt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D149B106-67CF-49A1-AE7D-CE3F3BC3F266"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h110m-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC93A9D-E01B-40CD-95C8-A82085358E16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h110m-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D7210-68E7-4D3D-B65A-F7C200C07A95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-k_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F82466-28C5-4495-876C-4697AC0834E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-k_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2BCE6-8BA3-4A11-B030-F571346AB3B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137F1817-ED86-4371-8553-70D415802E23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB077E96-C7D6-4314-92B3-52ED4B6C10BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF58ED92-6E4B-4130-BAB0-81DA31518E6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B037D858-125F-4762-8DA2-09BA7807898D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170i-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC8AEFC-6BF0-497B-8BAF-7DA3EFB8FBD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170i-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1297573C-0F72-477A-B85C-0ED65412E893"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFFDE24-215A-43B8-9B3F-D73B52ECFD15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED2A131-07A0-4E8B-8015-9E55DC1C6BF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513A1D93-DE0D-4455-95C8-FC7AF72677D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B4013A-5F8E-47AD-80D5-526A68281515"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170-pro\\/usb_3.1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982E919B-4936-4BE3-955C-82FFEE504807"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170-pro\\/usb_3.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7415EB-47BE-4F88-8310-9BB1CF0EF299"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DD6014-6CF9-45AC-8A2E-0AD946B811C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE848FF-BB23-4D4F-AFFF-45EC87315A67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170-plus_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756F0FED-9E9B-4540-A425-F7534C4BE070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170-plus_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918AB13E-43F3-47F2-98FA-56FE89CFB1FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170m-e_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C797373-3D39-45AC-BF51-4D0FF6471D83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170m-e_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7EC3FF-81AF-40F4-98D0-4A1DFB937222"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250-v7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D72C50-E023-44FE-B44A-EBB96883F234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250-v7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895AA24B-1419-4E66-8BE1-7D3439496FCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250_mining_expert_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF02AB1-1C94-48A1-BCBD-A50F049DCA97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250_mining_expert:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A2E62F-94DC-4F76-BFB5-96B45E8E3364"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFF834F-54FD-4427-86BC-59CACB5720EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFFE0FB6-3E57-420E-BAFD-89C67EC8798C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC5BA59-2868-4066-B557-A337FCBEBAEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D54BCF0-396D-4AE9-BF98-408A30C23DFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712F55B3-C78D-4BB1-AC61-C6789997F830"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE19287-8C71-4161-94C5-B31A2CA907FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-j_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD1F89C-B419-43B7-8CEC-BBA00C0A33B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-j:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E868B563-75A7-4E94-875F-BC0EA7AA228A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DA489C-E6A4-4F30-9CBF-D532D4DC4934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0A4463-96F7-4516-B91C-DFAFA98358D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42625B8C-5163-43B9-9DC8-E8AB1E1A6CF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6721CA1E-EEAC-4CF0-BB0C-4AE44049CDC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB59C47E-47B5-41C4-A142-E818589D86A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4512943B-7794-454B-A0AD-D1F7C23D00BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB07DCB-5D90-4BDA-8277-99211DBB3BF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4EC730-8E50-4274-99F8-B6A57C843546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4A7BB6-6E6D-48BD-9539-E01C801E2CF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89865346-0EC6-4C1C-92CC-231ECE6AF73F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250g_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70AAD95-7460-49EE-BA18-4A9826658CDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250g_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C326D51-0C5D-48CE-AF7B-73DF1BD08F67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250h_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900ECAD1-0290-490E-BB94-82667C13B829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250h_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760F2E1-5A01-40FC-9A2A-05C769D05986"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20419867-19A3-41D0-AD4E-866B47035EF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D572B8-0F2C-48A9-B397-DA1FE92844B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250m-c_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E49CE82-A630-4BBA-AE5B-35E1D7FF299B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250m-c_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE24086-8BC1-4B7C-BB2A-D4623A2841C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250m-f_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9941B2B-CE46-4669-947D-2BA09DEF6B1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250m-f_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE77E05B-54E7-4691-AF93-ADC24AE07D9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250-mr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DA5C31-71E8-4CEF-AEFD-0BD468E98870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250-mr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118522B5-3E87-4D27-9FC3-13F3AE4651BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C02BD4-E46B-467A-8441-633933EE57E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A270BEB2-4073-457B-9E7A-041F25B00A70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250m-v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4494A410-658A-4DC7-85C6-3792D4A4636D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250m-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5BAFA0-2A5C-47A4-BA7F-B5C6A0436A5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250m-v3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6928685-947A-444F-B242-55B30F2BD495"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250m-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0170DE0A-DF4E-4881-9C66-9BF005897F12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250m-v5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F713C93B-03CC-4688-8590-81C84C52D10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250m-v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5135C-B68A-4D60-89A7-AA3FF6DC8508"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pio-b250i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F194921-25DA-40AD-AC77-A5C886E653DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pio-b250i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DB8D6C-64B9-4F5C-AFBB-EF32A2EF1949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E1D43-964F-4AC3-B0AA-E7D30F2135B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E50A677-E925-4E60-8F81-FB8E4A8CCBF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD09D5B3-575A-4941-99DF-C1CCB324EF0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A7A86F-A63B-4F2C-AE2C-7F321CA7E017"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h270-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894292B4-B683-4AE1-ACA0-07E14A7CAB04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h270-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B312D0-771C-4C55-92E7-E19A82201B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h270-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A889C5B-AA38-4BEC-B9D9-C20BCD51ED34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h270-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8466D0-3102-4301-8F34-69FDF5E2F760"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_h270i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C297BE7C-ED2C-4E7C-888D-78C9246D3F4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_h270i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92BB8F1-1C5D-4DDE-8A35-CFC96EEE2A7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_h270f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DB8A91-69F2-4028-AC04-B0FFCCFDD882"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_h270f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85379BD-1976-43A2-87D0-B690B4A9440F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h270m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369BF713-2229-493B-902C-D23F3DFE504A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h270m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB699E7-4212-46C0-BBA0-A3A08AD6C225"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_extreme_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C399C14-6B6D-4CFC-AB98-94FCA8B982EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_extreme:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32D2A1B-DA72-4FF2-A1FD-804B1A3671B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_formula_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072786FB-D929-48A9-BBB7-7EC3899DC9A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_formula:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA041A0-8103-4742-BA97-FD28DD2EDEE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_code_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C5F146-C7FD-4479-8E11-7443DCEA38ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA3A7B7-27CF-467A-B387-1B5D6120C0B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_apex_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCB7188-8D72-4619-9779-73B6586A18E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_apex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B48FFA-7FFE-44AB-9528-0681F631C1FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_hero_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D402D3D7-319F-45D7-A5A2-8D1972D92F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_hero:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D75118-242F-454C-97B6-9C50330E82BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F905D6-74DD-4547-82CF-AB43E3DD5AA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84124C1-41B9-4963-9E2E-F84E356D2EC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-ar_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D56403-47C2-4321-BEB9-E08D392AE2CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-ar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A522350E-2FCE-4DFA-A660-7FA0CD1462C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270e_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED821805-43F4-4594-8B34-9369A4A51919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270e_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E59CD1D-24F8-40DD-BC34-1798B9BFD142"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B55966-2BE6-43B7-B3B1-5AC2E476029D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80FE467-6745-462E-9602-D99EEFE4496F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270g_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D51FA0-90A9-479D-9F0A-D0A8BFC5C6E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270g_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D0B584-4C98-4C58-B098-153A07FA7B7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270h_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D33D60-DE04-4189-A8E6-B453F566970A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270h_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122BD789-E195-48C4-8043-E7C911809AF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z270_mark_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5C6507-2A00-4BEE-A2B0-9D0099DF4EC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z270_mark_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52653418-2D8C-464A-806A-0E5BB7C70C58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z270_mark_2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AB056A-3C43-4C1A-8ECB-C8ACF645FFB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z270_mark_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098C6278-2B15-4D35-BDAD-6EABB5DE4A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270h_gaming\\/k1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE33B2CC-C64B-4983-928A-BE8332458922"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270h_gaming\\/k1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DD3BFB-3AC5-43E8-AF3D-AA9DDC0E0B68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63602AEB-A984-4556-B7B4-906BF0B1C4CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CACC60-EF0C-417B-8927-CBFDB90DE31D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D434C2FA-C27E-477F-A82E-4DB6B29F3162"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBCF0D7-EACE-4368-AE89-F4B70BD583F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7FA773-033A-4502-A675-25AA640A9C61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD3456D-04D8-4269-9971-D9245185FB63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AE1333-6F84-4D66-B5D0-C4FE8A3360A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801BA881-11C2-4042-87A1-6FDC643F2F39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7710F47C-C723-4F97-8A17-1BA8F1005255"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B6459E-CE0C-4344-8D63-C0116AB32796"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B69866D-4F3C-42B3-9B20-62137551CE9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B346C94B-7A59-47A1-B2F6-A888968B7FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m-cm-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F09095A-1795-4FDB-A1B5-5FC584E1191F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m-cm-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88504A31-F003-4344-BD7E-A1D5F0970FB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170s1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D61D6C5-4FB2-410D-A74D-1792054C6C04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170s1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5650BA0D-6066-42A2-8062-3FF81009E10B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170t_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3B9CE8-C405-4C88-A6B1-5D5A3414096D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF01DCA7-9A31-4B2F-A34A-FA45E97522F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170t_v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F596F0-6418-4D20-86C5-B48B027EC265"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170t_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F40FF26-207F-41C7-8E82-7AD6681AE0DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E33941-7E24-4FC8-941C-CC62B6B58822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B670DE-DB47-418B-A2C4-E68C49C2FAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m2\\/cdm\\/si_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69369624-8D90-4A2A-8B85-8884AC5CBD28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m2\\/cdm\\/si:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A851E8E1-B1F0-4083-AFA8-3F59779F0206"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_q270m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD61F9CE-68E5-481C-9711-B40343FF90CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_q270m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E41F36-3579-4AE4-8E7E-20D81962EA79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q270m-cm-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233065C5-57E6-40E5-8A52-AE6D6F7196AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q270m-cm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A571EB0-25AB-4450-8847-042749CE5F7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q270-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8030ED2-0286-420A-B514-AC986C2700BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q270-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E56764-2A59-4B73-89A1-9D391FE33D5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_j3355i-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B4BF-4363-4747-86A9-5D481927CF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_j3355i-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94719387-576F-4949-AA4D-6C8453085EBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_hero_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F854F8A-CD36-4721-A1D2-5E6EC5D9FF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_hero:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9820DF03-00B5-4363-AAE7-9D8F2FCBA91B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_formula_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA24153A-AE9B-4F76-9DFF-E00AB46744BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_formula:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DEDFC2-7A73-40F6-BDCB-8E135BFC4EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_code_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53223DBA-DAA1-4942-92D1-68B7647D07AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E633481-0AD2-4291-8653-FEB3DA5DA279"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_apex_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272713A3-B88D-405B-AF30-FC6E90F2E3DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_apex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE784AA-CC5A-4995-92AC-28073BABD832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z370-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8260D7C-031B-489F-A7B9-1DEFC846BCD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z370-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A56C38-B2C6-4F19-806A-9346190BD7AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z370-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1536F2E-3181-4897-8ABD-AB2B939DF992"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z370-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD78127D-4BCD-4733-ABC1-D8558BE07C3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z370-pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1419951-3645-4CBF-8EE0-209DC1727E92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z370-pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78CF821-AFD7-4E76-BB94-A45495ABEC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z370-plus_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060358B9-3630-421B-9366-F726D19C15D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z370-plus_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8678C89-35A9-4256-AF4A-CC3A11BDB540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-g_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1579A407-454F-4838-8850-8D4057507C8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-g_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A138826-DC79-4620-9142-2B7030DFCEAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-e_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050E14C-429C-421D-A01C-CC8E1DB40769"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-e_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087C89AA-9876-4754-B2B1-CAE4F86D1375"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62BFA52-B89C-410E-9FC6-B6F39825515A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B49B4BB-6D24-43A1-81DF-E786DFA600F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-h_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EBFFF2-0AF5-43F7-AAC2-89F4625F9185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-h_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271701A1-CFD4-4781-9F81-3255D90F8EE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6681601-99E9-492B-86BF-9C3BE23D1E9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A2D55-C766-4E90-BB0E-2D912F17C768"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "A15E9E54-0414-4C67-9DCD-181FCF2EE838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6127C45-E91E-46B7-A806-FC0068575DB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.01.06",
            "matchCriteriaId" : "A4487A96-6AF1-4F41-9FF7-ED711FB89FA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADAD919-32C1-49D2-A419-C9A803DB6250"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.01.04",
            "matchCriteriaId" : "0E79A718-EEED-4C35-8B3A-8BDEFBC55282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506DEE00-30D2-4E29-9645-757EB8778C0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "EC70C5D2-748E-4D6C-ADC9-ED098541C8F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74F55B7-DE3D-4D74-A7E7-9BCB8F7B114A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87041DE-EA8D-4DC1-BD7C-03C42C6EE7FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc427d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CC8AFE-ED6C-4A50-AC80-D2309E03FAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.07",
            "matchCriteriaId" : "FDFE3D1F-F8B4-4682-BBCC-2CBD3CFFFBD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40D0CDB-7BE6-491F-B730-3B4E10CA159A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631AF2A2-F925-45CB-82DE-39053016F5B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A6744-5194-4A99-BD3B-944A8707C80F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477d_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7F6E0-9D8F-40CF-BC30-43505FE0CC16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA84FF5-0C2A-48DE-94A5-ACB5B01E03EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.07",
            "matchCriteriaId" : "90723D2B-49B7-4F70-9DD1-DE9F602E8DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF9D4C3-1892-48FA-95B4-835B636A4005"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.91.3272",
            "matchCriteriaId" : "42E364B9-1FC7-418A-860D-DD0E73DD930E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCF5972-C72D-4DE9-8B73-3C497D54596B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "2CD389CE-AA26-445D-8D2B-27D3D06C3B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DD4A97-1648-4C7F-A5A0-6899BD13A617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "BBC1791E-E3B5-4B75-B816-9EE20F44D9D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1A57A9-F6E5-4672-BD22-09EF5522CA10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "042B60E7-0614-4EB3-8B47-07DEE5B5E274"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AD120-3465-4C00-AAB3-B6F6ED708B51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "6E9D150F-BCE4-4FB6-BBDE-4A55F12DBC37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E752006C-6D94-4B14-B3A5-C9BB94141BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "A9EE1C2A-FCDB-42AF-8B3E-A805F12A74C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EF28FB-BAB3-4710-9D25-25F67ACADC60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "4F0583DE-EBB9-41C7-92C9-4E4E259F28B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057D9947-CE4A-4B4C-B721-4B29FB71350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "3C5DA136-7541-44E4-B8DF-065CEE065A99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc827c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFD2D72-5464-4B86-BACB-61F55A081C3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "6C37BC27-C5B9-4740-BDFE-9439FB248CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc827d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D87239-40C1-4038-B734-D77AC4DDD571"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "B5C3B3FD-7CF7-4172-87EC-11C129D5508A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687E1212-EC5A-47BA-ACAB-74F6C98B7C34"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "E4EAE137-9336-43D6-AF8A-9161F236BD14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F37D88-E086-4060-8420-BD0F8D8FF580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.01.03",
            "matchCriteriaId" : "D2F29FED-7876-4801-B0B1-BC06A30B1310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187C6D51-5B86-484D-AE0F-26D1C9465580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_p320-4s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.02.06.83.1",
            "matchCriteriaId" : "3AD2CE43-B3B3-480B-A607-BB5817B43256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion_p320-4s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49883F4-8360-4895-8E9E-B274A35BDE57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_pcu50.5-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "BF57DC28-0EF6-4610-8B3C-587B79740D25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_pcu50.5-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E921D034-33C4-4526-8F94-98D580922409"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "578D9CB9-6831-41C5-99C3-E1940562F118"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_pcu50.5-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE0F71E-62D3-463E-9CE2-E088D6D3F05A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101918",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5712",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el kernel en Active Management Technology (AMT) en Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 permite que un atacante con acceso local al sistema ejecute código arbitrario con el privilegio de ejecución AMT."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.1.71.3608",
            "matchCriteriaId" : "BCE880E2-5E1F-40F5-AD2F-A266A95C51B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.1.41.3024",
            "matchCriteriaId" : "139DA53F-A603-490F-A4E5-44D7A0071CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0.0",
            "versionEndIncluding" : "10.0.55.3000",
            "matchCriteriaId" : "BFA876A3-88C1-43D8-92E0-B21E16D37736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411DC559-E8A9-4BC4-96C6-EA753E54543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DF7F6-F649-4C57-893A-6775F07C31A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2380C5D8-8A58-4279-A3D9-7234C7B1D668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EB2D65-90F2-4866-A886-F64DB9C7D2FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EF0C50-F104-47CE-89E7-BC37FE1A5717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D764C7C-2C49-4149-9586-5D0140CE00FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F41472A-BC3D-4226-88AC-975E523C3678"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-premium_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AEFB41-300D-4541-90EC-6F736A06A404"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-premium:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54563F87-598C-4301-95C5-A582A78E3D64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-deluxe_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF442E72-096E-40C0-9258-3E2474545E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-deluxe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54781F85-88B1-488F-A33F-442947CDA125"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EEE05D-D9C8-44C0-A8BD-D6A262A79CF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9606205C-88D0-44BB-8052-1E78C512DEB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE25BF7-37DE-4F90-81FD-D95A2A3031BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C71F90-C6E8-49D8-AC7E-1BC2FF49BFA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-ar_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A4CC55-E868-4174-8FC1-23FBF75A973F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-ar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9CE58F-3A49-41B8-B9EC-F901AB83D861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277B4C76-D04F-467B-8367-E51F74E21ABE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DC9901-B4D7-4FD6-86BB-B75FF30CB11A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6701855F-2D7F-4559-A8D1-CF8A8C999B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B1596-8BAA-4805-8D49-9C42E270B219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1F7656-9A1F-409C-BA46-BD1B979C25F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7EB86B-7BC7-4D34-9EDE-04564FEFEDAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2357072-5ED5-4DC9-BF2A-AE6F85C6C240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC3417D-44A9-489F-A440-8D3E75DD3586"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01833F6B-F38D-439A-B84A-047DBC75F71F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89756DDE-8EA9-4135-BBA8-0707FE3D81B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170-p_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1249DEA2-CEF8-4009-B6BF-E0DCA5032B75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170-p_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7D4616-0DCA-4168-8CF4-7055AA922E2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170m-e_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BB2B24-1B03-46DE-B4F9-CCDDD83FA28C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170m-e_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F309D3DC-E2C2-406C-B742-71CAD9E4A568"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:sabertooth_z170_mark_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42A2157-8724-4CF2-88F0-048231320354"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:sabertooth_z170_mark_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283B693A-D720-411C-96C9-91E356A97FD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:sabertooth_z170_s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7868F0B3-ED86-4C00-A227-CFD8A14A0790"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:sabertooth_z170_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45195F20-5E26-426A-A272-5B6342BD06C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_extreme_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77678DA-7926-4688-BFC6-9C989985C633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_extreme:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C33821F-3755-4301-B808-806F918FF06F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_ranger_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0AF7AF-0416-4E40-9F18-74B89E0E0F47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_ranger:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD49CDD-10C4-4795-BCEF-132FDB6A25CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_formula_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1763A28F-2ED5-4309-9C02-0587DD2435CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_formula:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334D6552-C4E3-4F13-ACD1-3BE6312E9FEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_hero_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF49D87-4566-404D-908D-3C5A02B0BE7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_hero:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCE5FB6-2F8D-4707-BE1E-26DE66C7740A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_hero_alpha_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13578BDF-A38D-4357-AD35-41BA988E286B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_hero_alpha:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F716322D-6778-45FD-A4F0-A773A28EA3F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_gene_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D318FB-16E1-4B5D-817A-2A13DF88A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_gene:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E968C4AB-61B0-435C-BAC5-A70EC78EAD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_viii_impact_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054E1398-AE98-46AB-B7A6-703F342CC847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_viii_impact:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5667A1-AFB2-4ABF-B9C8-CB24EBFF16C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170i_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC1CDA2-B140-45FE-8FE5-2FAC5B3907E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170i_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8DCBFE-9482-40F6-9C8F-E4A472767FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02FA657-FC01-4795-8246-B777A7A5BCAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5CBA9-E946-4F22-A0E9-40A63380E260"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z170_pro_gaming\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F814D5CE-2F35-4631-BC6C-857CBBD9DC72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z170_pro_gaming\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3FF12D-3EA0-4738-9B36-ED5461C9D0C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BE8D64-A47B-4412-AF8A-354D01DB719C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F273293C-6EDA-485E-AA38-A4FE41822171"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150_pro_gaming\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C23914-2AB4-4D6F-A438-F1762F235D92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150_pro_gaming\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CB8991-762A-46B5-8759-AF453E21FD95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150i_pro_gaming\\/wifi\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ED630E-C695-47DD-AABA-39603766CE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150i_pro_gaming\\/wifi\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B17C450-C8E8-4255-8E23-4ABBC8664366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150i_pro_gaming\\/aura_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7800E86-9FAF-4D42-8029-97A22AF87E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150i_pro_gaming\\/aura:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF81798D-F241-499D-84BC-AE647D7DA06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552BBFAA-A268-4DF9-AC1B-9A99FD5BAA83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBDF56E-375F-439E-A1A7-1D94523C6DF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06F70FB-E259-4957-9D86-88805F8C0753"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91597904-8647-4109-864D-5EC577A22C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-a_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C912D-CF86-4A1B-B440-E61B3B24886C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-a_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0232EA20-A6BB-4CC9-88FE-F91BE7EFFCFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-c_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B8A7AC-953B-4CEE-8DF5-6B5787918CC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-c_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B266B9C5-DB7D-41B4-BD43-F50A45B8688C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109745AA-5210-49EE-93E2-2660FE605273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3990C807-1EA1-42FD-9C38-7B28E99B9630"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFDA852-209E-49BB-9793-F2E26FAE785F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60AB4DAC-E806-4772-96C8-F7C68930AA24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6011C6-C8CC-426A-BBB3-AA2698A191DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6C34D6-D42F-4FA3-A9A3-985F6F49704A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638CA839-0DB1-4F26-AC1F-3B65BB2DA0C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E4F53F-65C2-4254-AB16-51EB04CF10DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-f_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0F3C11-8700-4472-ADD5-462EAC571A5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-f_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6381EE22-DFF3-4197-96C6-1B448D6AC9C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BC083C-2DD2-40C5-9B5F-6CB524FD71DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC8BB48-0826-45F6-B5E5-06FB66995E69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-v_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82068A08-B5D9-4A79-B81E-2249543175D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-v_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723BF580-21B0-4FD4-8F43-F609AFD53B0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150m-v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81507B7-3C02-4AA4-B9E3-4F1DF9E9465A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150m-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94BE221-3E91-492F-9BCB-2538B6812400"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150m-v3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FD9041-A1BF-4483-B9C2-70F8AB00C162"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150m-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A763DB3-F4AB-4696-B49B-9EC929E4B17A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150m-v5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B7BF90-6D37-4211-9AC5-27F82D6DAE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150m-v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3A85B3-0576-4D31-A088-EBBEF429B2F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b150-v7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D7220B-8CF7-459E-9C93-FE2ED3AACC5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b150-v7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65B38A3-43EE-4EF8-AC46-8725EB3B4E69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C4E73F-2B93-4CAE-ABDB-AF1C6C3E1763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F37D51-6D2D-4325-BB0D-3FE2D5D1F2C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-a\\/m.2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF463BA-68F0-46C5-A948-EA233A7B493E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-a\\/m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10021E63-ED8B-4C5D-9559-93DA26469611"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6BEA-C713-4394-A894-AC40053E4FD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3202BBE4-8BC9-4266-89E1-02EC58034284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-c\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09432C60-8EC9-4FF9-9633-FF8779A5F9B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-c\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49991ED2-1D79-4148-8F05-DE224ADC5181"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pio-b150m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30643353-C9AC-494F-B34D-4226042910CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pio-b150m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B96870-A832-46FF-AF3F-169C486464B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:trooper_b150_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "820B589F-9D3E-4D9C-8112-C11E28F9271E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:trooper_b150_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8645FCEC-625F-4540-843D-CB56FBFABDBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-plus_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF89B32-1A7C-4BDA-9A45-1FFC1F38DE29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-plus_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE36CBA-3C04-463E-A21A-1F489D755896"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150_pro_gaming_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6625FD9F-41FA-450E-9CD0-AC8C237C4D4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150_pro_gaming_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21888815-D392-4E6D-A831-F2C170E4BE8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150m-k_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B7FD9B-4FD1-4B60-8394-F51A8446D901"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150m-k_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72749164-D3A3-4F10-80FC-331FB6705899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b150-pro_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24FA1-BB23-4FB3-A35B-6BD05BA45EC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b150-pro_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFFAE60-468F-4861-AED3-76EAF9676E19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-h110m-v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8ADE34C-4A5E-49CA-83CB-119703C5C2B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-h110m-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFC293D-73DA-4048-A89D-92092D7BE42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-h110m-v3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5847BEF-CD8B-4B2C-A015-847CE9611EB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-h110m-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1D362C-359D-455E-BBEF-9B77838419B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110i-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B21217-FC88-4AA0-A4AA-49E98A30122C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110i-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18DCD2A-3F80-461A-A04D-7BF084438E07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a\\/dp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A70E8F-6058-4776-85D7-7FBA0D6B33B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a\\/dp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14544DF1-2E6E-4A8B-9B86-2E10B5FE4282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9229F19B-E8A3-44A0-862C-BE7DE7264018"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49098E76-F811-451A-8D7F-1B40491A2278"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE58681-7681-4729-A9AC-FB1317FE1168"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B400E0-1526-4C46-A60D-84D468B1911E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c\\/hdmi_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1204092-3B5B-4243-A0F6-B16C5C661F77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c\\/hdmi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71E3A13-644B-491C-97AA-688DA9214561"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c\\/ps_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8AD0F1-8E0E-46C2-9F32-F34F16CFE491"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c\\/ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38472135-237B-4EE1-8D66-D94B6F3FCFD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F4CBF7-CBA2-438A-A997-ACDB83322F2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767EE0C3-16EC-4D40-A86D-B14586EF9AD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-c2\\/tf_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B122984-8F1E-4CBE-A127-2C7AA5BE1178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-c2\\/tf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE17F92F-990E-4080-BEE0-9549FBDAAE0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-cs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D9955B-57E0-404B-B677-0F0CBAB17606"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-cs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D30CDF-60B0-40B6-8F3E-4C68AD2F507C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-cs_x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CFCE10-117B-4596-9EC8-0FD763D83445"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-cs_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801129A7-C8A2-4D90-9C54-13FAC9B96762"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-cs\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E870D6C-4C0F-4C70-A432-FD02CE45AEA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-cs\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA55C126-A4D3-48D5-A277-772923EAA7DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-d\\/exper\\/si_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927D8CBD-EF57-48E2-A80C-E27907E72CED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-d\\/exper\\/si:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6DF281-4E33-4DE5-B5F5-9FEA95885ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-k_x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A74624-952E-4342-BABF-9E59DE71A633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-k_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CC4DAA-79B1-4747-BE1E-69C194E6BCDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-ks_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B2CA4-B41E-4900-8F85-80A472670868"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-ks:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE12AD23-6AC5-4F08-B1B1-E59F728E9668"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-ks_r1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B532EC-7D68-4F05-9C84-EB074A85A764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-ks_r1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97E501F-0C7F-4BA0-B04C-C8A623F7156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-p\\/dvi_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E4DEB7-3F0F-4C62-991B-5A75B27696AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-p\\/dvi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9810952-332C-4849-BB12-1253AF76E1BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-ts_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3779667-7513-44D8-B2E5-1925594AD3E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C795E996-2996-4731-A78E-FFA9585DCD31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2058E0D4-EAEB-4CD1-AD89-BC69858B734A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558AF38E-674A-49B5-A023-2043C89714E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110s1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E83F44-B421-4B24-BE8D-561D57883E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110s1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AAA664-8BC3-413F-BB92-8BB6B3690EDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110s2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CB2BDF-E9BF-4049-8D44-FD660AC60AAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110s2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F53F8B-379A-416E-A44D-38ED9499A120"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110t_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C47313A-2FBA-49AD-AD68-5F817411D994"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0232650-B917-4734-B322-D12ADB06B435"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110t-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BC9BDF-0562-44FE-B2A5-F8B26B98D94D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A3F2A5-56BF-41E8-959B-0AFFCC130361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a\\/m.2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A88EE-9112-40B0-8A11-4841550B5C3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a\\/m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A4787E-F9CA-45F2-B43A-3C9BAD580204"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D757A98E-209C-4391-9B7B-2CD60D5A4FB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12979DE-AEC4-4D51-8E0A-E714C85F6D7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC08CFA-0254-41A0-8599-7F1033782B2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6367721C-A009-45AC-B272-8290A8331284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-e\\/m.2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9617970B-9C4B-47D3-982D-8200BC52D0E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-e\\/m.2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1915CF-2419-4C1B-80B9-8D29D379E1FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179BC9DB-AA35-4A54-8EB3-1DB295727997"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B8722E-E334-47F3-A3BE-B9AB798A5305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E65AAA6-B29F-4859-9A99-591F6BD1371C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D182935F-8629-4F9D-925D-A166007B446B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54A67BA-C862-4BA0-94D2-13362FF2F26B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975830EE-92F4-4614-9AE8-E9D5DBADE414"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:trooper_h110_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12B0228-80F1-466D-86F2-57F7E7BA4095"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:trooper_h110_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B75FEA3-D643-4348-9FA8-07D3127C8D88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6C8818-47EC-47B5-980F-5109C56C5C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4C230-C8B3-496E-9012-5CF032D420E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7952968-C3A8-40CA-8000-74B23C112AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C05633B-3CD2-429B-9239-DB6F189C8C79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h110m2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D53057-61DA-498B-B76D-6FB0FD50BF61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h110m2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E222A3E-2E1E-4B46-A6DC-E91831CEA856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h110m2\\/fpt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7A40AA-4A94-4DB5-ACE5-048E7E1C998D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h110m2\\/fpt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D149B106-67CF-49A1-AE7D-CE3F3BC3F266"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h110m-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC93A9D-E01B-40CD-95C8-A82085358E16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h110m-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D7210-68E7-4D3D-B65A-F7C200C07A95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-k_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F82466-28C5-4495-876C-4697AC0834E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-k_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2BCE6-8BA3-4A11-B030-F571346AB3B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h110m-a_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137F1817-ED86-4371-8553-70D415802E23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h110m-a_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB077E96-C7D6-4314-92B3-52ED4B6C10BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF58ED92-6E4B-4130-BAB0-81DA31518E6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B037D858-125F-4762-8DA2-09BA7807898D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170i-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC8AEFC-6BF0-497B-8BAF-7DA3EFB8FBD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170i-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1297573C-0F72-477A-B85C-0ED65412E893"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170_pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFFDE24-215A-43B8-9B3F-D73B52ECFD15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170_pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED2A131-07A0-4E8B-8015-9E55DC1C6BF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513A1D93-DE0D-4455-95C8-FC7AF72677D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B4013A-5F8E-47AD-80D5-526A68281515"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170-pro\\/usb_3.1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982E919B-4936-4BE3-955C-82FFEE504807"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170-pro\\/usb_3.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7415EB-47BE-4F88-8310-9BB1CF0EF299"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DD6014-6CF9-45AC-8A2E-0AD946B811C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE848FF-BB23-4D4F-AFFF-45EC87315A67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170-plus_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756F0FED-9E9B-4540-A425-F7534C4BE070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170-plus_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918AB13E-43F3-47F2-98FA-56FE89CFB1FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:h170m-e_d3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C797373-3D39-45AC-BF51-4D0FF6471D83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:h170m-e_d3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7EC3FF-81AF-40F4-98D0-4A1DFB937222"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250-v7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D72C50-E023-44FE-B44A-EBB96883F234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250-v7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895AA24B-1419-4E66-8BE1-7D3439496FCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250_mining_expert_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF02AB1-1C94-48A1-BCBD-A50F049DCA97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250_mining_expert:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A2E62F-94DC-4F76-BFB5-96B45E8E3364"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFF834F-54FD-4427-86BC-59CACB5720EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFFE0FB6-3E57-420E-BAFD-89C67EC8798C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC5BA59-2868-4066-B557-A337FCBEBAEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D54BCF0-396D-4AE9-BF98-408A30C23DFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712F55B3-C78D-4BB1-AC61-C6789997F830"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE19287-8C71-4161-94C5-B31A2CA907FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-j_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD1F89C-B419-43B7-8CEC-BBA00C0A33B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-j:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E868B563-75A7-4E94-875F-BC0EA7AA228A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DA489C-E6A4-4F30-9CBF-D532D4DC4934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0A4463-96F7-4516-B91C-DFAFA98358D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42625B8C-5163-43B9-9DC8-E8AB1E1A6CF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6721CA1E-EEAC-4CF0-BB0C-4AE44049CDC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB59C47E-47B5-41C4-A142-E818589D86A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4512943B-7794-454B-A0AD-D1F7C23D00BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB07DCB-5D90-4BDA-8277-99211DBB3BF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4EC730-8E50-4274-99F8-B6A57C843546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4A7BB6-6E6D-48BD-9539-E01C801E2CF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89865346-0EC6-4C1C-92CC-231ECE6AF73F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250g_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70AAD95-7460-49EE-BA18-4A9826658CDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250g_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C326D51-0C5D-48CE-AF7B-73DF1BD08F67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250h_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900ECAD1-0290-490E-BB94-82667C13B829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250h_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760F2E1-5A01-40FC-9A2A-05C769D05986"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_b250f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20419867-19A3-41D0-AD4E-866B47035EF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_b250f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D572B8-0F2C-48A9-B397-DA1FE92844B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250m-c_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E49CE82-A630-4BBA-AE5B-35E1D7FF299B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250m-c_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE24086-8BC1-4B7C-BB2A-D4623A2841C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250m-f_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9941B2B-CE46-4669-947D-2BA09DEF6B1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250m-f_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE77E05B-54E7-4691-AF93-ADC24AE07D9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250-mr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DA5C31-71E8-4CEF-AEFD-0BD468E98870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250-mr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "118522B5-3E87-4D27-9FC3-13F3AE4651BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:b250-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C02BD4-E46B-467A-8441-633933EE57E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:b250-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A270BEB2-4073-457B-9E7A-041F25B00A70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250m-v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4494A410-658A-4DC7-85C6-3792D4A4636D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250m-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5BAFA0-2A5C-47A4-BA7F-B5C6A0436A5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250m-v3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6928685-947A-444F-B242-55B30F2BD495"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250m-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0170DE0A-DF4E-4881-9C66-9BF005897F12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ex-b250m-v5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F713C93B-03CC-4688-8590-81C84C52D10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ex-b250m-v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5135C-B68A-4D60-89A7-AA3FF6DC8508"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pio-b250i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F194921-25DA-40AD-AC77-A5C886E653DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pio-b250i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DB8D6C-64B9-4F5C-AFBB-EF32A2EF1949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E1D43-964F-4AC3-B0AA-E7D30F2135B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E50A677-E925-4E60-8F81-FB8E4A8CCBF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_b250m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD09D5B3-575A-4941-99DF-C1CCB324EF0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_b250m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A7A86F-A63B-4F2C-AE2C-7F321CA7E017"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h270-pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894292B4-B683-4AE1-ACA0-07E14A7CAB04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h270-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B312D0-771C-4C55-92E7-E19A82201B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h270-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A889C5B-AA38-4BEC-B9D9-C20BCD51ED34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h270-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8466D0-3102-4301-8F34-69FDF5E2F760"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_h270i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C297BE7C-ED2C-4E7C-888D-78C9246D3F4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_h270i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92BB8F1-1C5D-4DDE-8A35-CFC96EEE2A7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_h270f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DB8A91-69F2-4028-AC04-B0FFCCFDD882"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_h270f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85379BD-1976-43A2-87D0-B690B4A9440F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_h270m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369BF713-2229-493B-902C-D23F3DFE504A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_h270m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB699E7-4212-46C0-BBA0-A3A08AD6C225"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_extreme_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C399C14-6B6D-4CFC-AB98-94FCA8B982EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_extreme:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32D2A1B-DA72-4FF2-A1FD-804B1A3671B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_formula_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072786FB-D929-48A9-BBB7-7EC3899DC9A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_formula:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA041A0-8103-4742-BA97-FD28DD2EDEE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_code_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C5F146-C7FD-4479-8E11-7443DCEA38ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA3A7B7-27CF-467A-B387-1B5D6120C0B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_apex_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCB7188-8D72-4619-9779-73B6586A18E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_apex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B48FFA-7FFE-44AB-9528-0681F631C1FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_ix_hero_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D402D3D7-319F-45D7-A5A2-8D1972D92F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_ix_hero:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D75118-242F-454C-97B6-9C50330E82BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F905D6-74DD-4547-82CF-AB43E3DD5AA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84124C1-41B9-4963-9E2E-F84E356D2EC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-ar_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D56403-47C2-4321-BEB9-E08D392AE2CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-ar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A522350E-2FCE-4DFA-A660-7FA0CD1462C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270e_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED821805-43F4-4594-8B34-9369A4A51919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270e_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E59CD1D-24F8-40DD-BC34-1798B9BFD142"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B55966-2BE6-43B7-B3B1-5AC2E476029D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80FE467-6745-462E-9602-D99EEFE4496F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270g_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D51FA0-90A9-479D-9F0A-D0A8BFC5C6E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270g_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D0B584-4C98-4C58-B098-153A07FA7B7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270h_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D33D60-DE04-4189-A8E6-B453F566970A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270h_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122BD789-E195-48C4-8043-E7C911809AF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z270_mark_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5C6507-2A00-4BEE-A2B0-9D0099DF4EC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z270_mark_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52653418-2D8C-464A-806A-0E5BB7C70C58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z270_mark_2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AB056A-3C43-4C1A-8ECB-C8ACF645FFB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z270_mark_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098C6278-2B15-4D35-BDAD-6EABB5DE4A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270h_gaming\\/k1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE33B2CC-C64B-4983-928A-BE8332458922"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270h_gaming\\/k1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DD3BFB-3AC5-43E8-AF3D-AA9DDC0E0B68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-k_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63602AEB-A984-4556-B7B4-906BF0B1C4CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CACC60-EF0C-417B-8927-CBFDB90DE31D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D434C2FA-C27E-477F-A82E-4DB6B29F3162"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBCF0D7-EACE-4368-AE89-F4B70BD583F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z270i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7FA773-033A-4502-A675-25AA640A9C61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z270i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD3456D-04D8-4269-9971-D9245185FB63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270m-plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AE1333-6F84-4D66-B5D0-C4FE8A3360A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270m-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801BA881-11C2-4042-87A1-6FDC643F2F39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z270m-plus\\/br_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7710F47C-C723-4F97-8A17-1BA8F1005255"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z270m-plus\\/br:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B6459E-CE0C-4344-8D63-C0116AB32796"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B69866D-4F3C-42B3-9B20-62137551CE9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B346C94B-7A59-47A1-B2F6-A888968B7FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m-cm-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F09095A-1795-4FDB-A1B5-5FC584E1191F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m-cm-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88504A31-F003-4344-BD7E-A1D5F0970FB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170s1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D61D6C5-4FB2-410D-A74D-1792054C6C04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170s1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5650BA0D-6066-42A2-8062-3FF81009E10B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170t_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3B9CE8-C405-4C88-A6B1-5D5A3414096D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF01DCA7-9A31-4B2F-A34A-FA45E97522F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170t_v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F596F0-6418-4D20-86C5-B48B027EC265"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170t_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F40FF26-207F-41C7-8E82-7AD6681AE0DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E33941-7E24-4FC8-941C-CC62B6B58822"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B670DE-DB47-418B-A2C4-E68C49C2FAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q170m2\\/cdm\\/si_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69369624-8D90-4A2A-8B85-8884AC5CBD28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q170m2\\/cdm\\/si:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A851E8E1-B1F0-4083-AFA8-3F59779F0206"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_q270m-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD61F9CE-68E5-481C-9711-B40343FF90CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_q270m-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E41F36-3579-4AE4-8E7E-20D81962EA79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q270m-cm-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233065C5-57E6-40E5-8A52-AE6D6F7196AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q270m-cm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A571EB0-25AB-4450-8847-042749CE5F7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:q270-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8030ED2-0286-420A-B514-AC986C2700BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:q270-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E56764-2A59-4B73-89A1-9D391FE33D5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_j3355i-c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0520B4BF-4363-4747-86A9-5D481927CF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_j3355i-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94719387-576F-4949-AA4D-6C8453085EBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_hero_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F854F8A-CD36-4721-A1D2-5E6EC5D9FF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_hero:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9820DF03-00B5-4363-AAE7-9D8F2FCBA91B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_formula_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA24153A-AE9B-4F76-9DFF-E00AB46744BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_formula:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DEDFC2-7A73-40F6-BDCB-8E135BFC4EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_code_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53223DBA-DAA1-4942-92D1-68B7647D07AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E633481-0AD2-4291-8653-FEB3DA5DA279"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_maximus_x_apex_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272713A3-B88D-405B-AF30-FC6E90F2E3DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_maximus_x_apex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE784AA-CC5A-4995-92AC-28073BABD832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z370-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8260D7C-031B-489F-A7B9-1DEFC846BCD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z370-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A56C38-B2C6-4F19-806A-9346190BD7AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:prime_z370-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1536F2E-3181-4897-8ABD-AB2B939DF992"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:prime_z370-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD78127D-4BCD-4733-ABC1-D8558BE07C3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z370-pro_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1419951-3645-4CBF-8EE0-209DC1727E92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z370-pro_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78CF821-AFD7-4E76-BB94-A45495ABEC37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:tuf_z370-plus_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060358B9-3630-421B-9366-F726D19C15D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:tuf_z370-plus_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8678C89-35A9-4256-AF4A-CC3A11BDB540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-g_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1579A407-454F-4838-8850-8D4057507C8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-g_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A138826-DC79-4620-9142-2B7030DFCEAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-e_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050E14C-429C-421D-A01C-CC8E1DB40769"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-e_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087C89AA-9876-4754-B2B1-CAE4F86D1375"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-f_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62BFA52-B89C-410E-9FC6-B6F39825515A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-f_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B49B4BB-6D24-43A1-81DF-E786DFA600F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-h_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EBFFF2-0AF5-43F7-AAC2-89F4625F9185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-h_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271701A1-CFD4-4781-9F81-3255D90F8EE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rog_strix_z370-i_gaming_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6681601-99E9-492B-86BF-9C3BE23D1E9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rog_strix_z370-i_gaming:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A2D55-C766-4E90-BB0E-2D912F17C768"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "A15E9E54-0414-4C67-9DCD-181FCF2EE838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6127C45-E91E-46B7-A806-FC0068575DB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.01.06",
            "matchCriteriaId" : "A4487A96-6AF1-4F41-9FF7-ED711FB89FA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADAD919-32C1-49D2-A419-C9A803DB6250"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.01.04",
            "matchCriteriaId" : "0E79A718-EEED-4C35-8B3A-8BDEFBC55282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506DEE00-30D2-4E29-9645-757EB8778C0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "EC70C5D2-748E-4D6C-ADC9-ED098541C8F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74F55B7-DE3D-4D74-A7E7-9BCB8F7B114A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87041DE-EA8D-4DC1-BD7C-03C42C6EE7FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc427d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CC8AFE-ED6C-4A50-AC80-D2309E03FAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.07",
            "matchCriteriaId" : "FDFE3D1F-F8B4-4682-BBCC-2CBD3CFFFBD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40D0CDB-7BE6-491F-B730-3B4E10CA159A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631AF2A2-F925-45CB-82DE-39053016F5B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A6744-5194-4A99-BD3B-944A8707C80F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477d_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7F6E0-9D8F-40CF-BC30-43505FE0CC16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA84FF5-0C2A-48DE-94A5-ACB5B01E03EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.01.07",
            "matchCriteriaId" : "90723D2B-49B7-4F70-9DD1-DE9F602E8DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF9D4C3-1892-48FA-95B4-835B636A4005"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.91.3272",
            "matchCriteriaId" : "42E364B9-1FC7-418A-860D-DD0E73DD930E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCF5972-C72D-4DE9-8B73-3C497D54596B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "2CD389CE-AA26-445D-8D2B-27D3D06C3B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc547e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DD4A97-1648-4C7F-A5A0-6899BD13A617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "BBC1791E-E3B5-4B75-B816-9EE20F44D9D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1A57A9-F6E5-4672-BD22-09EF5522CA10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "042B60E7-0614-4EB3-8B47-07DEE5B5E274"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AD120-3465-4C00-AAB3-B6F6ED708B51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "6E9D150F-BCE4-4FB6-BBDE-4A55F12DBC37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E752006C-6D94-4B14-B3A5-C9BB94141BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "A9EE1C2A-FCDB-42AF-8B3E-A805F12A74C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EF28FB-BAB3-4710-9D25-25F67ACADC60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "4F0583DE-EBB9-41C7-92C9-4E4E259F28B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057D9947-CE4A-4B4C-B721-4B29FB71350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "3C5DA136-7541-44E4-B8DF-065CEE065A99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc827c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFD2D72-5464-4B86-BACB-61F55A081C3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "6C37BC27-C5B9-4740-BDFE-9439FB248CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc827d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D87239-40C1-4038-B734-D77AC4DDD571"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "B5C3B3FD-7CF7-4172-87EC-11C129D5508A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687E1212-EC5A-47BA-ACAB-74F6C98B7C34"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.41.3024",
            "matchCriteriaId" : "E4EAE137-9336-43D6-AF8A-9161F236BD14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F37D88-E086-4060-8420-BD0F8D8FF580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.01.03",
            "matchCriteriaId" : "D2F29FED-7876-4801-B0B1-BC06A30B1310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187C6D51-5B86-484D-AE0F-26D1C9465580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_p320-4s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.02.06.83.1",
            "matchCriteriaId" : "3AD2CE43-B3B3-480B-A607-BB5817B43256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion_p320-4s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49883F4-8360-4895-8E9E-B274A35BDE57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_pcu50.5-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "BF57DC28-0EF6-4610-8B3C-587B79740D25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_pcu50.5-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E921D034-33C4-4526-8F94-98D580922409"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.61.3535",
            "matchCriteriaId" : "578D9CB9-6831-41C5-99C3-E1940562F118"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_pcu50.5-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE0F71E-62D3-463E-9CE2-E088D6D3F05A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101920",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171120-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/News/wzeltG5CjYaIwGJ0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5719",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Intel Deep Learning Training Tool Beta 1 permite que un atacante de red ejecute código de manera remota como un usuario local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:deep_learning_training_tool:-:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F20521FC-4ED6-4A11-A00A-5299E8ABFD40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00100&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00100&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5729",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-11-21T14:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de reproducción de tramas en el subsistema Wi-Fi en productos Intel Dual-Band y Tri-Band Wireless-AC permite que un atacante remoto reproduzca tramas mediante un ataque Man-in-the-Middle (MitM) basado en canales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_3160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6011F809-FD13-458A-9DBF-89499A3D60D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_3160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F7C3F-7685-45F0-B4E6-C2CE4248B5B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166B009B-E62A-4377-A624-CB90E2909571"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0002E3FA-3A2D-47DF-BD9A-62C80DD750E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-n_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F0A534-7CC5-477F-AC5A-5F3C16481884"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-n_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141446CB-9BBF-451B-A8F9-67A4A301579B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:wireless-n_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F3AFD4-764C-4D33-924E-62B322D56450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:wireless-n_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC86AE37-F425-4CD7-B061-2B784BC6778D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166B009B-E62A-4377-A624-CB90E2909571"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0002E3FA-3A2D-47DF-BD9A-62C80DD750E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DD6C9E-E0AA-4A52-A4F6-3B4355CCB916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA712BE4-ADA2-4907-B813-D21C6E89629F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33E597F-1CD3-462F-9F0F-EA5D98D0A903"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F727FF41-F05C-42D5-B39C-9C97D90DE9FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D460DFD-0726-45B8-BF00-3F5AEE9B3024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE338FD-FCA9-4725-AAE7-E12FA7B197B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D3A26C-22CF-43C5-90D1-E4B4AEDCB629"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1729F4-7CCA-404A-903E-F0F6C1F9302B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DD6C9E-E0AA-4A52-A4F6-3B4355CCB916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA712BE4-ADA2-4907-B813-D21C6E89629F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33E597F-1CD3-462F-9F0F-EA5D98D0A903"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F727FF41-F05C-42D5-B39C-9C97D90DE9FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D460DFD-0726-45B8-BF00-3F5AEE9B3024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:wireless-n_7265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE338FD-FCA9-4725-AAE7-E12FA7B197B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2333DD-4F31-4056-B0C4-C5C13FCB563D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3F3AC3-7774-44DE-82C3-531D874D6175"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:tri-band_wireless-ac_17265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1622BAB2-9B31-417B-A89D-89A3E9E95DA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:tri-band_wireless-ac_17265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620E5F09-EEA6-4093-82E2-7A28C7E7DD9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6154064-485F-47F7-BB1A-5AD773C7E98D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5900B9-D8E3-4928-B587-955BCAE07460"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:tri-band_wireless-ac_18260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A485AB-75ED-4E42-A24C-2F19DF98CF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:tri-band_wireless-ac_18260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15745BD1-2362-4747-8C45-21AF5309BE3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F55A6BA-2963-4EA1-BB5F-07C990D80D5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89ED6FDA-BE47-4E7D-A449-439A917119DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:tri-band_wireless-ac_18265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E0621E-A491-4345-BD3F-14CC2C806706"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:tri-band_wireless-ac_18265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1868F499-00F3-4393-890B-6C8BE3E4A8AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:wireless-ac_9260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16E7E98-9047-44A4-8C19-69FF07699333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4900842A-56C4-4F09-BBD4-080EC7CEBF33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:wireless-ac_9260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16E7E98-9047-44A4-8C19-69FF07699333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4900842A-56C4-4F09-BBD4-080EC7CEBF33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.8.50.3420",
            "matchCriteriaId" : "8C27BBB6-B4B7-43E4-8F42-42097C3BFE3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00093&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00093&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7550",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-21T17:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the \"params\" argument, and noting this in the module documentation."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la manera en la que Ansible (en versiones 2.3.x anteriores a la 2.3.3 y versiones 2.4.x anteriores a la 2.4.1) pasaba algunos parámetros al módulo jenkins_plugin. Los atacantes remotos podrían utilizar este fallo para exponer información sensible de los logs de un host remoto. Este fallo se solucionó no permitiendo que se especifiquen las contraseñas en el argumento \"params\" y anotando esto en la documentación del módulo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "97808ABA-37DE-4764-93C7-C005BFEFFEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "32FE5F5F-9A2F-43B8-B50B-57709B4F3DD4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2966",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473645",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ansible/ansible/issues/30874",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1473645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ansible/ansible/issues/30874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T08:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount."
      }, {
        "lang" : "es",
        "value" : "Ohcount 3.0.0 es propenso a una inyección de comandos mediante nombres de archivo especialmente manipulados que contienen metacaracteres shell. Estos pueden ser explotados por un atacante (proporcionando un árbol de origen para el procesamiento de Ohcount) para ejecutar código arbitrario como el usuario que está ejecutando Ohcount."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohcount_project:ohcount:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A818FBAA-C8A5-4E00-A44F-742DB5561E92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/882372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/882372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T08:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a \"GET // HTTP/1.1\" request."
      }, {
        "lang" : "es",
        "value" : "Divulgación de información mediante el listado de directorios en Cohu 3960HD permite a un atacante visualizar y descargar código fuente, archivos de registro y otra información sensible del dispositivo mediante una petición web especialmente manipulada con un carácter / extra, como una petición \"GET // HTTP/1.1\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cohuhd:3960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C809F4-F28D-489D-8FA4-99561319185D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12C134-3F1E-44FC-88B7-8F6E9BEF96D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T08:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets."
      }, {
        "lang" : "es",
        "value" : "Falta de autenticación para el puerto de configuración remota 1236/tcp en Cohu 3960HD permite a un atacante cambiar parámetros de configuración como la dirección IP y el nombre de usuario/contraseña mediante paquetes SOAP XML especialmente manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cohuhd:3960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C809F4-F28D-489D-8FA4-99561319185D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12C134-3F1E-44FC-88B7-8F6E9BEF96D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T08:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with \"root\" privileges."
      }, {
        "lang" : "es",
        "value" : "La función webupgrade en Cohu 3960HD no verifica los archivos o procesos de actualización del firmware, permitiendo a un atacante cargar un archivo postinstall.sh especialmente manipulado que se ejecutará con privilegios \"root\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cohuhd:3960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C809F4-F28D-489D-8FA4-99561319185D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12C134-3F1E-44FC-88B7-8F6E9BEF96D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T08:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser."
      }, {
        "lang" : "es",
        "value" : "Fuga de información del código fuente .esp en Cohu 3960 permite que un atacante visualice información sensible como la lógica de la aplicación con un simple navegador web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cohuhd:3960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C809F4-F28D-489D-8FA4-99561319185D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12C134-3F1E-44FC-88B7-8F6E9BEF96D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T08:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side \"if (!passwordsAreEqual())\" test."
      }, {
        "lang" : "es",
        "value" : "El cumplimiento del lado del cliente utilizando el código JavaScript de las opciones de seguridad del lado del servidor en Cohu 3960HD permite que un atacante manipule las opciones enviadas a la cámara y provoque que no funcione bien o que ejecute código, tal y como se puede comprobar en una prueba \"if (!passwordsAreEqual())\" del lado del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cohuhd:3960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C809F4-F28D-489D-8FA4-99561319185D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12C134-3F1E-44FC-88B7-8F6E9BEF96D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6166",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-11-22T16:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device."
      }, {
        "lang" : "es",
        "value" : "En el software BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM y WebSafe desde la versión 12.0.0 a la 12.1.1, en algunos casos, el componente Traffic Management Microkernel (TMM) podría cerrarse inesperadamente al procesar paquetes fragmentados. Esta vulnerabilidad afecta al TMM mediante un servidor virtual configurado con perfil FastL4. El procesamiento del tráfico se interrumpe mientras el TMM (Traffic Management Microkernel) se reinicia. Si el sistema BIG-IP afectado está configurado como parte de un grupo de dispositivos, desencadenará una conmutación por error en el dispositivo del mismo nivel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_afm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "55477759-BD0D-45A9-812B-E3E227DCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "9A9F024E-74B6-4D90-AD0E-869BD0AF8BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_apm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "A84C593D-7A8C-49F4-A490-4D330D8BCBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "10DAFC58-80B6-4BB6-9B74-8D4B122F5797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_asm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "FF47AC2C-F267-4B16-98E0-7D6676D55CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "EE031CCC-7CD0-44DE-B101-EB9181036775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "6B42DCF7-9DCD-4091-8553-8FF5D9417D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ltm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "CB56B6D2-4BAB-4C20-B971-67CAF45FD08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_pem:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "B5A49CA8-47F8-4FF2-9ECD-5B1A2B444ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:f5_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "2BC666CC-14CC-4CCB-BD0E-88FDB18D298C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:linerate:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndIncluding" : "2.6.2",
            "matchCriteriaId" : "E83ABC2C-AF58-423C-944D-8127881E2408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102264",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039949",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K65615624",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K65615624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13071",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-11-22T17:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier."
      }, {
        "lang" : "es",
        "value" : "QNAP ya ha parcheado esta vulnerabilidad. Este problema de seguridad permite que un atacante remoto ejecute comandos arbitrarios en QNAP Video Station 5.1.3 (para QTS 4.3.3), 5.2.0 (para QTS 4.3.4) y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:video_station:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50AED96-C185-47D6-A5D5-9ADCF0484CC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:video_station:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E686341-0753-4C6A-8C16-68C157BC9520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C7D2D4-769F-4297-89F4-75366FFA7618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201711-21",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201711-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15098",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-22T17:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory."
      }, {
        "lang" : "es",
        "value" : "Las llamadas de función json_populate_recordset o jsonb_populate_recordset inválidas en PostgreSQL en versiones 10.x anteriores a la 10.1; versiones 9.6.x anteriores a la 9.6.6, versiones 9.5.x anteriores a la 9.5.10; versiones 9.4.x anteriores a la 9.4.15 y versiones 9.3.x anteriores a la 9.3.20 pueden provocar el cierre inesperado del servidor o divulgar unos pocos bytes de memoria del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB6018C-3FC5-4D4E-BA7C-07C0A3B47976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EC8B10-6556-4235-B3DC-C47C13675894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE02C19-1FFE-474F-8098-D6A09A34667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ED9A2E-8169-4470-AE61-54829B11BDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA755AFD-C904-4CDE-9B28-D7E5C4AAA550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B5D56C-5F3D-455E-82C3-B661E7809AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9671475-BC67-436F-B2B1-5128347B3C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC098A3-1989-4AA5-B8D5-E061A618519D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ABACB8-F4B0-4635-8FC7-4B0F5B723241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FEF31-B528-46A8-AAA8-63B30D5A10EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35D61BD-50A7-4ACF-BA62-8F56C0740DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546FEA34-A6D9-47C4-A5B2-F492E1457F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D02ADF5-706F-42B7-B88A-8BC6DEC8DC4A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039752",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2511",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4027",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4028",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1801/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/support/security/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1801/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/support/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7736",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-11-22T17:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la página de visualización de certificados de la interfaz web de usuario en Fortinet FortiWeb, en versiones 5.8.0, 5.7.1 y anteriores, permite que los atacantes inyecten scripts web o HTML arbitrarios mediante importaciones de certificados maliciosos especialmente manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.1",
            "matchCriteriaId" : "17A29045-7C4B-4006-8855-38310732DB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A04244D-B1B2-4A77-8A2B-B7889190336A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101916",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-131",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12190",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-22T18:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition."
      }, {
        "lang" : "es",
        "value" : "Las funciones bio_map_user_iov y bio_unmap_user en block/bio.c en el kernel de Linux en versiones anteriores a la 4.13.8 realizan un refcount no equilibrado cuando un vector SCSI I/O tiene búferes pequeños consecutivos que pertenecen a la misma página. La función bio_add_pc_page los combina en uno solo, pero la referencia de la página nunca se anula. Esto provoca una fuga de memoria y un posible bloqueo del sistema (explotable contra el host del sistema operativo por un usuario invitado del sistema operativo, si se pasa un disco SCSI a una máquina virtual) debido a una condición de falta de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.7",
            "matchCriteriaId" : "11C6B206-8716-4A16-81BD-F3B8C8ACBE19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/52",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101911",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1495089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/95d78c28b5a85bacbc29b8dba7c04babb9b0d467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://support.f5.com/csp/article/K93472064?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1495089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/95d78c28b5a85bacbc29b8dba7c04babb9b0d467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K93472064?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12193",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-22T18:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations."
      }, {
        "lang" : "es",
        "value" : "La función assoc_array_insert_into_terminal_node en lib/assoc_array.c en el kernel de Linux en versiones anteriores a la 4.13.11 gestiona de manera incorrecta la división de nodos, lo que permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y pánico) mediante una aplicación manipulada, tal y como demuestra el tipo de clave de conjunto de claves, así como las operaciones de suma de claves y creación de enlaces."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13.11",
            "matchCriteriaId" : "DAB98E23-155F-4466-8A60-D988039C3147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea6789980fdaa610d7eb63602c746bf6ec70cd2b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101678",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ea6789980fdaa610d7eb63602c746bf6ec70cd2b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3698-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea6789980fdaa610d7eb63602c746bf6ec70cd2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ea6789980fdaa610d7eb63602c746bf6ec70cd2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3698-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3698-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15099",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-22T18:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege."
      }, {
        "lang" : "es",
        "value" : "Los comandos INSERT ... ON CONFLICT DO UPDATE en PostgreSQL en versiones 10.x anteriores a la 10.1, las versiones 9.6.x anteriores a la 9.6.6 y las versiones 9.5.x anteriores a la 9.5.10 revelan el contenido de la tabla y quien invoca estos comandos puede leerla, aunque no tiene privilegios de lectura para ello. Estos exploits solo afectan a tablas en las que el atacante no tiene acceso total de lectura, pero sí privilegios INSERT y UPDATE. Los exploits omiten las políticas de seguridad a nivel de filas y la falta de privilegios SELECT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9671475-BC67-436F-B2B1-5128347B3C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC098A3-1989-4AA5-B8D5-E061A618519D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ABACB8-F4B0-4635-8FC7-4B0F5B723241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FEF31-B528-46A8-AAA8-63B30D5A10EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35D61BD-50A7-4ACF-BA62-8F56C0740DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546FEA34-A6D9-47C4-A5B2-F492E1457F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97465EF2-1B00-4210-9F58-643A2C6198D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039752",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2511",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4028",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1801/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/support/security/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1801/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/support/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15528",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-11-22T18:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the public key of an attacker to the domain name of the target."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 7.6, el producto Install Norton Security (INS) puede ser susceptible a una vulnerabilidad de suplantación de certificados. En este ataque, un certificado adquirido de manera maliciosa enlaza la clave pública de un atacante al nombre de dominio del objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norton:install_norton_security:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "7.6",
            "matchCriteriaId" : "AAD9D1A9-9A7F-4804-977F-338D57154818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101796",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Norton-Security.html",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171121_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Norton-Security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171121_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12172",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-22T19:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server."
      }, {
        "lang" : "es",
        "value" : "PostgreSQL, en versiones 10.x anteriores a la 10.1; versiones 9.6.x anteriores a la 9.6.6; versiones 9.5.x anteriores a la 9.5.10; versiones 9.4.x anteriores a la 9.4.15, versiones 9.3.x anteriores a la 9.3.20 y versiones 9.2.x anteriores a la 9.2.24, se ejecuta en una cuenta del sistema operativo no root. Los superusuarios de la base de datos pueden ejecutar código arbitrario bajo esa cuenta del sistema. PostgreSQL proporciona un script para iniciar el servidor de la base de datos durante el arranque del sistema. Los paquetes de PostgreSQL para muchos sistemas operativos proporcionan sus propias implementaciones de inicio creadas por el empaquetador. Varias implementaciones emplean un nombre de archivo de registro que el superusuario de la base de datos puede remplazar por un enlace simbólico. Como root, pueden utilizar open(), chmod() y/o chown() para este nombre de archivo de registro. Esto suele ser suficiente para que el superusuario de la base de datos escale sus privilegios a root cuando el root inicia el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD27648F-E2FF-4779-97F9-2632DCC6B16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFB4916-8B59-4534-804C-CF9DA1B18508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3413A3AB-45A3-48E1-9B30-1194C4E7D49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5760CE83-4802-42A0-9338-E1E634882450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41009E-4028-4D82-B8D0-8B949EDC0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832F3EBE-A92C-4FB3-BF3C-0E7B750F966B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1571EE80-55A6-4F91-909B-C46BA19EC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2848E3BC-293A-4A75-BEB7-C2F1637AD3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC9133E-94FC-4199-BD69-BBB46CF3799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200172CE-40AB-49E3-93D1-9947E3CBFFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90B21A9-19A7-4DCB-A2FE-C558CCB6BBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924D1F84-EC50-44C3-A156-DC8E3A5E3909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5EAF3B-B148-4B57-8E4E-0B5365003DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CE8DB4-CD97-4F60-9080-9FB093BD60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5AA780-4378-4959-9256-510C65E6E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C9EB31-5D8E-4583-BC95-700F53854964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3700FF66-108C-47C2-B4C2-1CB0B5575EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239F26B4-CFB2-4D7A-939E-0215A336A490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C32070D-D751-4D3E-9457-5B1D1C551E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADABD34-25A1-46D3-AEFB-249E912A723A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53E81C9-5693-4929-BC19-DEBAEF686E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B92B02-44DD-40D4-94F7-A3EE4621D854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF332B-0391-410E-9F92-DAE1329E0031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9D0339-16F8-4E26-87B5-2543E860B77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B890251-95EB-44F3-A6A7-F718F3C807B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E5BD02-8C3D-4687-88DE-1C00366270E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709F5DF9-9F3A-42C3-890B-521B13118C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D85A34-C897-4E52-8F97-18CA51C5461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40DAD2B-A6D4-43D8-B282-A3C672356D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2FE391-9414-480E-A9B1-CF70280E315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B6A4ED-FA3B-4251-BF82-755F95277CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7142DF3-124D-43D7-ADD9-70F4F7298557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DEA438-A0ED-49DC-AE51-4E9D8D4B6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B184F-6FB8-48D8-A569-F47BA43C4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064BF155-7E2D-47B9-BD2B-C6E9FC06F5FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676A81BD-7EEE-4770-B9AC-451B09844D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F23D38-BDD6-48E6-A6B2-29CD962EED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89833234-3890-4E2E-8FCF-09925D83ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3ACC3-CB15-47E3-A511-E1D1F75E797F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6FD785-7C9F-4302-B7ED-93CA04473ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1BA72C-3A6E-450B-A3DE-3898DEAA9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB6018C-3FC5-4D4E-BA7C-07C0A3B47976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EC8B10-6556-4235-B3DC-C47C13675894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE02C19-1FFE-474F-8098-D6A09A34667E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D1323D-3096-4D0F-823A-ECAC9017646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A587AF3-5E70-4455-8621-DFD048207DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526AFF26-B3EC-41C3-AC4C-85BFA3F99AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2CAB7-C3D9-4F21-B902-2E498D00EFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88797795-8B1C-455F-8C52-6169B2E47D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDE0CC8-F1DF-4723-8FCB-9A33EA8B12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F13667-019B-49DF-929C-3D376FCDE6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E20AA3-C0D3-492C-AF3B-9F61550E6983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251C78CA-EEC0-49A8-A3D2-3C86D16CCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB443A75-2466-4164-A71B-9203933CB0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02839D4-EE7D-4D42-8934-322E46B643D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BAE807-A21F-4980-B64E-911F5E9B16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ED9A2E-8169-4470-AE61-54829B11BDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA755AFD-C904-4CDE-9B28-D7E5C4AAA550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B5D56C-5F3D-455E-82C3-B661E7809AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7FC5B-C9E3-4109-B3D6-9AC06F75DCB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C15A86-9ED9-492E-877B-86963DAA761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74623-EF0E-455D-ADEB-9E336B539D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACD7AB7-34E9-4DFC-A788-7B9BF745D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E8AEBB-9968-458D-8EE4-2725BBE1A53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECC17E6-C5FF-4B63-807A-26E5E6932C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB72357-B16D-488A-995C-2703CCEC1D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9671475-BC67-436F-B2B1-5128347B3C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC098A3-1989-4AA5-B8D5-E061A618519D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ABACB8-F4B0-4635-8FC7-4B0F5B723241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7040466B-2A7D-4E75-8E4F-FA70D4A7E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44887DE9-506B-46E3-922C-7B3C14B0AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1250F15-7A05-452A-8958-3B1B32B326E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18FEF31-B528-46A8-AAA8-63B30D5A10EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35D61BD-50A7-4ACF-BA62-8F56C0740DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:9.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546FEA34-A6D9-47C4-A5B2-F492E1457F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D02ADF5-706F-42B7-B88A-8BC6DEC8DC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039752",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3402",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3403",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3404",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3405",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1801/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/support/security/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/about/news/1801/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.postgresql.org/support/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2690",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition."
      }, {
        "lang" : "es",
        "value" : "SoftCo con software V200R003C20; eSpace U1910 con software V200R003C00, V200R003C20 y V200R003C30; eSpace U1911 con software V200R003C20 y V200R003C30; eSpace U1930 con software V200R003C20 y V200R003C30; eSpace U1960 con software V200R003C20 y V200R003C30; eSpace U1980 con software V200R003C20 y V200R003C30; y eSpace U1981 con software V200R003C20 y V200R003C30 tienen una vulnerabilidad de denegación de servicio (DoS). Esta permite que un atacante con permisos específicos manipule un archivo que contenga datos maliciosos y lo suba al dispositivo para agotar la memoria, provocando una condición DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:softco_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF191AC7-EB37-46BE-85EF-642D675BFC36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:softco:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0BB461-988A-4E55-BEFC-C5BB8245E751"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F279F7E4-0792-49EF-8350-6BCEAC47EC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092A87B2-9DDC-4E0E-8E24-ABEF302237C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B8443A-558E-4A88-8C2D-9864698B1861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D34B75B-37AD-4BDB-8443-2488A1724A36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1911_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAB4306-2BED-4D72-B749-0560F43343B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1911_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623B6384-EC71-433F-B847-9C3EBB6245BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DCB864-FE1B-4807-9E33-A704BFBAA7F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1930_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314A8BD9-6E5C-427D-AF90-957CAA63509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1930_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3707B5-2AE7-4A9C-8E55-3E86AB6B9CE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAD666B-4533-4A31-BADC-2D7469407BC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CA9B1-9650-4F3B-A0F3-52238CE58719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A48568-D28E-459B-86D3-0BF350D0168C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A9E39-A256-461D-BFD5-F9B6629089D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1980_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E59FD0-FA4F-4C38-9B3F-557FD7097DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1980_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20683E6D-7C66-4240-B322-372DF2D3B4E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EB7F3-F04C-4838-A866-3417850FED65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-parser-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95382",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-parser-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2691",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot."
      }, {
        "lang" : "es",
        "value" : "Huawei P9 en versiones anteriores a la EVA-AL10C00B373, anteriores a la EVA-CL00C92B373, anteriores a la EVA-DL00C17B373 y anteriores a la EVA-TL00C01B373 tiene una vulnerabilidad de omisión de pantalla de bloqueo. Un atacante sin autenticar podría forzar a que el teléfono entre en el modo fastboot y eliminar el archivo de contraseñas del usuario durante el proceso de reinicio y, a continuación, iniciar el móvil sin contraseña de bloqueo de pantalla tras el reinicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl00c01b373",
            "matchCriteriaId" : "6673B5F2-C31D-4B3C-88DC-A2DCACCB8872"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl00c17b373",
            "matchCriteriaId" : "E1AA8AF4-484E-4511-8B82-5EA0F3045E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl00c92b373",
            "matchCriteriaId" : "6F398894-34C7-4D09-BD0C-15408F6702DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b373",
            "matchCriteriaId" : "E6D9BF45-6BA9-4F4A-A69B-350E6D492087"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95658",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2692",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and earlier versions,CRR-L09C432B180 and earlier versions,CRR-TL00C01B172 and earlier versions,CRR-UL00C00B172 and earlier versions,CRR-UL20C432B171 and earlier versions,GRA-CL00C92B230 and earlier versions,GRA-L09C432B222 and earlier versions,GRA-TL00C01B230SP01 and earlier versions,GRA-UL00C00B230 and earlier versions,GRA-UL00C10B201 and earlier versions,GRA-UL00C432B220 and earlier versions,H60-L04C10B523 and earlier versions,H60-L04C185B523 and earlier versions,H60-L04C636B527 and earlier versions,H60-L04C900B530 and earlier versions,PLK-AL10C00B220 and earlier versions,PLK-AL10C92B220 and earlier versions,PLK-CL00C92B220 and earlier versions,PLK-L01C10B140 and earlier versions,PLK-L01C185B130 and earlier versions,PLK-L01C432B187 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C636B130 and earlier versions,PLK-TL00C01B220 and earlier versions,PLK-TL01HC01B220 and earlier versions,PLK-UL00C17B220 and earlier versions,ATH-AL00C00B210 and earlier versions,ATH-AL00C92B200 and earlier versions,ATH-CL00C92B210 and earlier versions,ATH-TL00C01B210 and earlier versions,ATH-TL00HC01B210 and earlier versions,ATH-UL00C00B210 and earlier versions,RIO-AL00C00B220 and earlier versions,RIO-CL00C92B220 and earlier versions,RIO-TL00C01B220 and earlier versions,RIO-UL00C00B220 and earlier versions have a privilege elevation vulnerability. An attacker may exploit it to launch command injection in order to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "La aplicación Keyguard en versiones ALE-L02C635B140 y anteriores; ALE-L02C636B140 y anteriores; ALE-L21C10B150 y anteriores; ALE-L21C185B200 y anteriores; ALE-L21C432B214 y anteriores; ALE-L21C464B150 y anteriores; ALE-L21C636B200 y anteriores; ALE-L23C605B190 y anteriores; ALE-TL00C01B250 y anteriores; ALE-UL00C00B250 y anteriores; MT7-L09C605B325 y anteriores; MT7-L09C900B339 y anteriores; MT7-TL10C900B339 y anteriores; CRR-CL00C92B172 y anteriores; CRR-L09C432B180 y anteriores; CRR-TL00C01B172 y anteriores; CRR-UL00C00B172 y anteriores; CRR-UL20C432B171 y anteriores; GRA-CL00C92B230 y anteriores; GRA-L09C432B222 y anteriores; GRA-TL00C01B230SP01 y anteriores; GRA-UL00C00B230 y anteriores; GRA-UL00C10B201 y anteriores; GRA-UL00C432B220 y anteriores; H60-L04C10B523 y anteriores; H60-L04C185B523 y anteriores; H60-L04C636B527 y anteriores; H60-L04C900B530 y anteriores; PLK-AL10C00B220 y anteriores; PLK-AL10C92B220 y anteriores; PLK-CL00C92B220 y anteriores; PLK-L01C10B140 y anteriores; PLK-L01C185B130 y anteriores; PLK-L01C432B187 y anteriores; PLK-L01C432B190 y anteriores; PLK-L01C432B190 y anteriores; PLK-L01C636B130 y anteriores; PLK-TL00C01B220 y anteriores; PLK-TL01HC01B220 y anteriores; PLK-UL00C17B220 y anteriores; ATH-AL00C00B210 y anteriores; ATH-AL00C92B200 y anteriores; ATH-CL00C92B210 y anteriores; ATH-TL00C01B210 y anteriores; ATH-TL00HC01B210 y anteriores; ATH-UL00C00B210 y anteriores; RIO-AL00C00B220 y anteriores; RIO-CL00C92B220 y anteriores; RIO-TL00C01B220 y anteriores y versiones RIO-UL00C00B220 y anteriores tiene una vulnerabilidad de elevación de privilegios. Un atacante podría explotarla para ejecutar una inyección de comandos para elevar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l02c635b140",
            "matchCriteriaId" : "7724AF7A-50BA-4CE0-9A9A-D27566F58B25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l02c636b140",
            "matchCriteriaId" : "83EB021A-25B6-4AC2-9889-1909024FDAEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c10b150",
            "matchCriteriaId" : "424CDED4-35A8-4C0C-8FF4-DB7BF75DDEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c185b200",
            "matchCriteriaId" : "A5199B31-EA26-4372-81B2-887A420D2E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c432b214",
            "matchCriteriaId" : "05436D77-3853-4F10-8E1C-7218512145A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c464b150",
            "matchCriteriaId" : "83678841-1D5A-4705-BC1E-D7F3154B8750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c636b200",
            "matchCriteriaId" : "7A1A2384-3E3A-47B0-8CAE-ABEE549E5AAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l23c605b190",
            "matchCriteriaId" : "7CFEE6AE-7603-4F03-AA2F-346B705115AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-tl00c01b250",
            "matchCriteriaId" : "E1207235-5EF1-4819-9A86-10E224A58E81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-ul00c00b250.",
            "matchCriteriaId" : "F6245F2E-0B7E-467D-891F-D9C7B71F2CE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mt7-l09c605b325",
            "matchCriteriaId" : "4DA0EC91-816E-40EF-A00E-567487007EB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6375-B6FF-4530-9A56-A171BC1E7E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mt7-l09c900b339",
            "matchCriteriaId" : "B546D881-033E-401E-ABCE-B452E061ADEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6375-B6FF-4530-9A56-A171BC1E7E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mt7-tl10c900b339",
            "matchCriteriaId" : "4F7F2091-2CC8-4D24-85F6-0EEA3008568D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6375-B6FF-4530-9A56-A171BC1E7E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-cl00c92b172",
            "matchCriteriaId" : "54076A31-2149-4AE0-88B5-FF863E374FB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-l09c432b180",
            "matchCriteriaId" : "1046A30D-EE1B-40B3-85E2-388B11C9F7FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-tl00c01b172",
            "matchCriteriaId" : "0386E551-C55D-47ED-AC2B-AB2489B0A000"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-ul00c00b172",
            "matchCriteriaId" : "F9A7DF2F-0A33-43BC-A426-0CF667905F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-ul20c432b171",
            "matchCriteriaId" : "FC1AC9D1-179E-480F-93CF-7F24E3A74CB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-cl00c92b230",
            "matchCriteriaId" : "8E2A1E69-7C2B-421F-8805-4E456576E1F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-l09c432b222",
            "matchCriteriaId" : "59B044F2-678D-4FCE-A16A-0A04F0106F0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-tl00c01b230sp01",
            "matchCriteriaId" : "EFBFE18F-4C50-4D01-8FA3-C9A24A0107CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-ul00c00b230",
            "matchCriteriaId" : "31D6B0CD-AFAC-45B9-B354-C056DC191D9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-ul00c10b201",
            "matchCriteriaId" : "4C533D39-CB45-44A8-94BC-9FB3538EA248"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-ul00c432b220",
            "matchCriteriaId" : "90DAA207-3B9B-4777-9713-FBF1F98A4550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c10b523",
            "matchCriteriaId" : "A916265A-0B07-4D16-87E4-EE91B0C7AA17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c185b523",
            "matchCriteriaId" : "E8EEC73F-65D0-4718-BFEB-63FB67587876"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c636b527",
            "matchCriteriaId" : "6EF243FA-FD01-4C9F-B678-7A9C0B6DA8A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c900b530",
            "matchCriteriaId" : "D7466C98-A8A9-4576-8F2F-C2E261CFC49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-al10c00b220",
            "matchCriteriaId" : "1315DA87-F09A-424D-8CB1-539E37051448"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-al10c92b220",
            "matchCriteriaId" : "9A6C3C2F-B6FB-40E7-BB95-90BB2285CFDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-cl00c92b220",
            "matchCriteriaId" : "F6E1E6DE-CDDF-4150-9FED-CE4E493ACA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c10b140",
            "matchCriteriaId" : "F6D9D85B-620A-423E-965A-FA84670F5F26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c10b140",
            "matchCriteriaId" : "F6D9D85B-620A-423E-965A-FA84670F5F26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c432b187",
            "matchCriteriaId" : "2EF4498F-D552-4CDD-AF89-69B743E7586A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c432b190",
            "matchCriteriaId" : "4DF2083D-2C5A-48C9-8FE5-754D76E67E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c636b130",
            "matchCriteriaId" : "50C66FB1-5300-4641-9E43-ED4348CCDDFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-tl00c01b220",
            "matchCriteriaId" : "BFF29417-0F7D-44AC-9190-9A33C44B9116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-tl01hc01b220",
            "matchCriteriaId" : "1370B7E9-6661-47BF-9774-D039B4600E9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-ul00c17b220",
            "matchCriteriaId" : "409EE9E2-DB91-408D-AC1C-FBD2FD012D74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-al00c92b200",
            "matchCriteriaId" : "AF7B4A1A-9085-499E-BC8D-8F6CB397DDC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-cl00c92b210",
            "matchCriteriaId" : "F65A7370-8647-4579-967C-973C71A5BF2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-tl00c01b210",
            "matchCriteriaId" : "7D8A24BA-DA72-4600-8379-325D5C301A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-tl00hc01b210",
            "matchCriteriaId" : "F981C7C9-0BDE-4BFB-B7C1-817232AB90B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-ul00c00b210",
            "matchCriteriaId" : "D1DC7ACF-D9F9-4838-B2D2-B76BE6A371CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-al00c00b220",
            "matchCriteriaId" : "EFE9B2A2-D817-45E8-8275-074F9D7B4FE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-al00c00b210",
            "matchCriteriaId" : "C8D73F80-CE84-4EE9-B265-F98964260847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-al00c00b220",
            "matchCriteriaId" : "3527A237-6376-4627-A751-2FB1DA21056B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-cl00c92b220",
            "matchCriteriaId" : "FE61DCD9-C662-4DB6-B730-E92525F0B910"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-tl00c01b220",
            "matchCriteriaId" : "1651C17D-C3B2-45D3-B683-5F097A8A2E76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-ul00c00b220",
            "matchCriteriaId" : "184349A3-3974-4273-9A92-30019FAFFAC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-emui-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95919",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-emui-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2693",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and earlier versions,CRR-L09C432B180 and earlier versions,CRR-TL00C01B172 and earlier versions,CRR-UL00C00B172 and earlier versions,CRR-UL20C432B171 and earlier versions,GRA-CL00C92B230 and earlier versions,GRA-L09C432B222 and earlier versions,GRA-TL00C01B230SP01 and earlier versions,GRA-UL00C00B230 and earlier versions,GRA-UL00C10B201 and earlier versions,GRA-UL00C432B220 and earlier versions,H60-L04C10B523 and earlier versions,H60-L04C185B523 and earlier versions,H60-L04C636B527 and earlier versions,H60-L04C900B530 and earlier versions,PLK-AL10C00B220 and earlier versions,PLK-AL10C92B220 and earlier versions,PLK-CL00C92B220 and earlier versions,PLK-L01C10B140 and earlier versions,PLK-L01C185B130 and earlier versions,PLK-L01C432B187 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C636B130 and earlier versions,PLK-TL00C01B220 and earlier versions,PLK-TL01HC01B220 and earlier versions,PLK-UL00C17B220 and earlier versions,ATH-AL00C00B210 and earlier versions,ATH-AL00C92B200 and earlier versions,ATH-CL00C92B210 and earlier versions,ATH-TL00C01B210 and earlier versions,ATH-TL00HC01B210 and earlier versions,ATH-UL00C00B210 and earlier versions,RIO-AL00C00B220 and earlier versions,RIO-CL00C92B220 and earlier versions,RIO-TL00C01B220 and earlier versions,RIO-UL00C00B220 and earlier versions have a path traversal vulnerability. An attacker may exploit it to decompress malicious files into a target path."
      }, {
        "lang" : "es",
        "value" : "Versiones ALE-L02C635B140 y anteriores; ALE-L02C636B140 y anteriores; ALE-L21C10B150 y anteriores; ALE-L21C185B200 y anteriores; ALE-L21C432B214 y anteriores; ALE-L21C464B150 y anteriores; ALE-L21C636B200 y anteriores; ALE-L23C605B190 y anteriores; ALE-TL00C01B250 y anteriores; ALE-UL00C00B250 y anteriores; MT7-L09C605B325 y anteriores; MT7-L09C900B339 y anteriores; MT7-TL10C900B339 y anteriores; CRR-CL00C92B172 y anteriores; CRR-L09C432B180 y anteriores; CRR-TL00C01B172 y anteriores; CRR-UL00C00B172 y anteriores; CRR-UL20C432B171 y anteriores; GRA-CL00C92B230 y anteriores; GRA-L09C432B222 y anteriores; GRA-TL00C01B230SP01 y anteriores; GRA-UL00C00B230 y anteriores; GRA-UL00C10B201 y anteriores; GRA-UL00C432B220 y anteriores; H60-L04C10B523 y anteriores; H60-L04C185B523 y anteriores; H60-L04C636B527 y anteriores; H60-L04C900B530 y anteriores; PLK-AL10C00B220 y anteriores; PLK-AL10C92B220 y anteriores; PLK-CL00C92B220 y anteriores; PLK-L01C10B140 y anteriores; PLK-L01C185B130 y anteriores; PLK-L01C432B187 y anteriores; PLK-L01C432B190 y anteriores; PLK-L01C432B190 y anteriores; PLK-L01C636B130 y anteriores; PLK-TL00C01B220 y anteriores; PLK-TL01HC01B220 y anteriores; PLK-UL00C17B220 y anteriores; ATH-AL00C00B210 y anteriores; ATH-AL00C92B200 y anteriores; ATH-CL00C92B210 y anteriores; ATH-TL00C01B210 y anteriores; ATH-TL00HC01B210 y anteriores; ATH-UL00C00B210 y anteriores; RIO-AL00C00B220 y anteriores; RIO-CL00C92B220 y anteriores; RIO-TL00C01B220 y anteriores y versiones RIO-UL00C00B220 tiene una vulnerabilidad de salto de ruta. Un atacante podría explotarlo para descomprimir archivos maliciosos en una ruta de destino."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l02c635b140",
            "matchCriteriaId" : "7724AF7A-50BA-4CE0-9A9A-D27566F58B25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l02c636b140",
            "matchCriteriaId" : "83EB021A-25B6-4AC2-9889-1909024FDAEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c10b150",
            "matchCriteriaId" : "424CDED4-35A8-4C0C-8FF4-DB7BF75DDEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c185b200",
            "matchCriteriaId" : "A5199B31-EA26-4372-81B2-887A420D2E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c432b214",
            "matchCriteriaId" : "05436D77-3853-4F10-8E1C-7218512145A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c464b150",
            "matchCriteriaId" : "83678841-1D5A-4705-BC1E-D7F3154B8750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l21c636b200",
            "matchCriteriaId" : "7A1A2384-3E3A-47B0-8CAE-ABEE549E5AAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-l23c605b190",
            "matchCriteriaId" : "7CFEE6AE-7603-4F03-AA2F-346B705115AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-tl00c01b250",
            "matchCriteriaId" : "E1207235-5EF1-4819-9A86-10E224A58E81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ale-ul00c00b250.",
            "matchCriteriaId" : "F6245F2E-0B7E-467D-891F-D9C7B71F2CE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mt7-l09c605b325",
            "matchCriteriaId" : "4DA0EC91-816E-40EF-A00E-567487007EB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6375-B6FF-4530-9A56-A171BC1E7E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mt7-l09c900b339",
            "matchCriteriaId" : "B546D881-033E-401E-ABCE-B452E061ADEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6375-B6FF-4530-9A56-A171BC1E7E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mt7-tl10c900b339",
            "matchCriteriaId" : "4F7F2091-2CC8-4D24-85F6-0EEA3008568D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6375-B6FF-4530-9A56-A171BC1E7E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-cl00c92b172",
            "matchCriteriaId" : "54076A31-2149-4AE0-88B5-FF863E374FB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-l09c432b180",
            "matchCriteriaId" : "1046A30D-EE1B-40B3-85E2-388B11C9F7FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-tl00c01b172",
            "matchCriteriaId" : "0386E551-C55D-47ED-AC2B-AB2489B0A000"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-ul00c00b172",
            "matchCriteriaId" : "F9A7DF2F-0A33-43BC-A426-0CF667905F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "crr-ul20c432b171",
            "matchCriteriaId" : "FC1AC9D1-179E-480F-93CF-7F24E3A74CB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-cl00c92b230",
            "matchCriteriaId" : "8E2A1E69-7C2B-421F-8805-4E456576E1F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-l09c432b222",
            "matchCriteriaId" : "59B044F2-678D-4FCE-A16A-0A04F0106F0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-tl00c01b230sp01",
            "matchCriteriaId" : "EFBFE18F-4C50-4D01-8FA3-C9A24A0107CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-ul00c00b230",
            "matchCriteriaId" : "31D6B0CD-AFAC-45B9-B354-C056DC191D9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-ul00c10b201",
            "matchCriteriaId" : "4C533D39-CB45-44A8-94BC-9FB3538EA248"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gra-ul00c432b220",
            "matchCriteriaId" : "90DAA207-3B9B-4777-9713-FBF1F98A4550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c10b523",
            "matchCriteriaId" : "A916265A-0B07-4D16-87E4-EE91B0C7AA17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c185b523",
            "matchCriteriaId" : "E8EEC73F-65D0-4718-BFEB-63FB67587876"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c636b527",
            "matchCriteriaId" : "6EF243FA-FD01-4C9F-B678-7A9C0B6DA8A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "h60-l04c900b530",
            "matchCriteriaId" : "D7466C98-A8A9-4576-8F2F-C2E261CFC49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE24C63-66F2-4647-B32D-ADA1EAC7F23E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-al10c00b220",
            "matchCriteriaId" : "1315DA87-F09A-424D-8CB1-539E37051448"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-al10c92b220",
            "matchCriteriaId" : "9A6C3C2F-B6FB-40E7-BB95-90BB2285CFDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-cl00c92b220",
            "matchCriteriaId" : "F6E1E6DE-CDDF-4150-9FED-CE4E493ACA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c10b140",
            "matchCriteriaId" : "F6D9D85B-620A-423E-965A-FA84670F5F26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c10b140",
            "matchCriteriaId" : "F6D9D85B-620A-423E-965A-FA84670F5F26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c432b187",
            "matchCriteriaId" : "2EF4498F-D552-4CDD-AF89-69B743E7586A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c432b190",
            "matchCriteriaId" : "4DF2083D-2C5A-48C9-8FE5-754D76E67E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-l01c636b130",
            "matchCriteriaId" : "50C66FB1-5300-4641-9E43-ED4348CCDDFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-tl00c01b220",
            "matchCriteriaId" : "BFF29417-0F7D-44AC-9190-9A33C44B9116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-tl01hc01b220",
            "matchCriteriaId" : "1370B7E9-6661-47BF-9774-D039B4600E9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "plk-ul00c17b220",
            "matchCriteriaId" : "409EE9E2-DB91-408D-AC1C-FBD2FD012D74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-al00c92b200",
            "matchCriteriaId" : "AF7B4A1A-9085-499E-BC8D-8F6CB397DDC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-cl00c92b210",
            "matchCriteriaId" : "F65A7370-8647-4579-967C-973C71A5BF2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-tl00c01b210",
            "matchCriteriaId" : "7D8A24BA-DA72-4600-8379-325D5C301A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-tl00hc01b210",
            "matchCriteriaId" : "F981C7C9-0BDE-4BFB-B7C1-817232AB90B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-ul00c00b210",
            "matchCriteriaId" : "D1DC7ACF-D9F9-4838-B2D2-B76BE6A371CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-al00c00b220",
            "matchCriteriaId" : "EFE9B2A2-D817-45E8-8275-074F9D7B4FE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ath-al00c00b210",
            "matchCriteriaId" : "C8D73F80-CE84-4EE9-B265-F98964260847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FFA51A-9148-4BFD-8A69-F2629F3769BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-al00c00b220",
            "matchCriteriaId" : "3527A237-6376-4627-A751-2FB1DA21056B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-cl00c92b220",
            "matchCriteriaId" : "FE61DCD9-C662-4DB6-B730-E92525F0B910"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-tl00c01b220",
            "matchCriteriaId" : "1651C17D-C3B2-45D3-B683-5F097A8A2E76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rio-ul00c00b220",
            "matchCriteriaId" : "184349A3-3974-4273-9A92-30019FAFFAC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB64C25-4F52-423D-A163-B1C248754B1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-emui-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95919",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-emui-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2694",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience."
      }, {
        "lang" : "es",
        "value" : "El componente AlarmService en HwVmall con software en versiones anteriores a la 1.5.2.0 no tiene control sobre los permisos de llamada, permitiendo que cualquier tercero llame. Un atacante podría construir una aplicación maliciosa para llamarla. Consecuentemente, sonará de repente una música de alerta, comprometiendo la experiencia de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:vmall:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2.0",
            "matchCriteriaId" : "13DBABD6-A494-46B0-8A6D-07747DE2F385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95915",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2695",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application."
      }, {
        "lang" : "es",
        "value" : "TIT-AL00C583B211 tiene una vulnerabilidad de salto de directorio que permite que un atacante obtenga los archivos en la aplicación de email."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tit-al00_firmware:c583b211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5B46B8-45B2-47CF-B5F7-139F3DE3F70D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tit-al00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3A89C1-FEAC-40BB-BE4A-F39B534C1D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2696",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege."
      }, {
        "lang" : "es",
        "value" : "El controlador emerg_data en CAM-L21C10B130 y versiones anteriores y CAM-L21C185B141 y versiones anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root del sistema Android puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar parámetros al smartphone para que el sistema se cierre inesperadamente o se escalen privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:y6ii_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cam-l21c185b141",
            "matchCriteriaId" : "65F18D59-6FEC-4C7D-96DE-F8C54933764D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:y6ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34634B10-87F0-4BE5-A116-DD399A06611A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:y6ii_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cam-l21c10b130",
            "matchCriteriaId" : "B5F578FF-9F11-49CB-98D2-023178C1343D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:y6ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34634B10-87F0-4BE5-A116-DD399A06611A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2697",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege."
      }, {
        "lang" : "es",
        "value" : "El controlador goldeneye en NMO-L31C432B120 y versiones anteriores; NEM-L21C432B100 y anteriores; NEM-L51C432B120 y anteriores; KNT-AL10C746B160 y anteriores; VNS-L21C185B142 y anteriores; CAM-L21C10B130 y anteriores y CAM-L21C185B141 y versiones anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root del sistema Android puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar parámetros al smartphone para que el sistema se cierre inesperadamente o se escalen privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:gt3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nmo-l31c432b120",
            "matchCriteriaId" : "6A664EAA-CB7E-4170-B9EA-83C958EF8657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:gt3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC216CD0-0BF1-4082-820E-D597CA1C2840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nem-l51c432b120",
            "matchCriteriaId" : "F84B142D-0AD1-4B52-829E-7F66A6D82564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:knt_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "knt-al10c746b160",
            "matchCriteriaId" : "DAD2A7EF-97FD-415E-9FBC-54A01BE9CCFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:knt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DE4358-AFCC-4B61-9FEE-5F054C06BECC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "vns-l21c185b142",
            "matchCriteriaId" : "BDD94F90-3A1D-4C69-9AE0-20A4729024AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:y6ii_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cam-l21c10b130",
            "matchCriteriaId" : "B5F578FF-9F11-49CB-98D2-023178C1343D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:y6ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34634B10-87F0-4BE5-A116-DD399A06611A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nem-l51c432b120",
            "matchCriteriaId" : "F84B142D-0AD1-4B52-829E-7F66A6D82564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:y6ii_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "cam-l21c185b141",
            "matchCriteriaId" : "65F18D59-6FEC-4C7D-96DE-F8C54933764D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:y6ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34634B10-87F0-4BE5-A116-DD399A06611A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2698",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege."
      }, {
        "lang" : "es",
        "value" : "El controlador ddr_devfreq en versiones anteriores a la GRA-UL00C00B197 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root del sistema Android puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar parámetros al smartphone para que el sistema se cierre inesperadamente o se escalen privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "gra-ul00c00b197",
            "matchCriteriaId" : "7DEF9367-EAA9-4EAD-9DBE-E47E215A088B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-04-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95664",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-04-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2699",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Huawei Themes APP en versiones anteriores a la PLK-UL00C17B385; versiones anteriores a la CRR-L09C432B380 y versiones anteriores a la LYO-L21C577B128 tiene una vulnerabilidad de elevación de privilegios. Un atacante podría explotar esta vulnerabilidad para subir paquetes de temas que contengan archivos maliciosos y engañar a los usuarios para que instalen los paquetes de temas. Esto conduce a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "plk-ul00c17b385",
            "matchCriteriaId" : "07635BE0-7F45-4CA5-8EE3-F899B98536F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24270E44-CD62-44D4-86F9-5519AA00FA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "crr-l09c432b380",
            "matchCriteriaId" : "D1B7AB43-145E-4708-B75B-87005B275803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:lyo-l21_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lyo-l21c577b128",
            "matchCriteriaId" : "59329DF4-B8B7-4E53-89E6-1C9CB2B5E998"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:lyo-l21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0231E0AD-6E51-4D02-94FF-59D0F28AB9F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170222-01-theme-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96424",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170222-01-theme-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2700",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks."
      }, {
        "lang" : "es",
        "value" : "AC6005 con software V200R006C10 y AC6605 con software V200R006C10 tienen una vulnerabilidad de denegación de servicio (DoS). Un atacante puede enviar paquetes mal formados al dispositivo, lo que provoca que el dispositivo filtre memoria. Esto conduce a ataques DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ac6005_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B6EC7E-0805-41D3-9E33-A9E181748BC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ac6005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3681DA94-7184-4DC6-BD73-FCE2DB808F07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ac6605_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1561D14-78A9-480C-A67F-B06D8375ADA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E5AE5-EBB2-4E05-A3C7-E2CA54205FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170517-01-ac-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102166",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170517-01-ac-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2701",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable."
      }, {
        "lang" : "es",
        "value" : "Mate 9 con software MHA-AL00AC00B125 tiene una vulnerabilidad de denegación de servicio (DoS). Un atacante engaña a un usuario para que instale una aplicación maliciosa. Debido a que el sistema no verifica el mensaje de transmisión de la aplicación, podría ser explotada para hacer que algunas funciones del sistema no estén disponibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:mha-al00ac00b125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F4BCA1-8EB9-42FA-9A16-0D8789F6A6CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcasting-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcasting-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2702",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone."
      }, {
        "lang" : "es",
        "value" : "Puede eludirse Phone Finder en versiones anteriores a la MHA-AL00C00B170. Un atacante puede eludir Phone Finder mediante pasos especiales y obtener la titularidad del teléfono."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00c00b170",
            "matchCriteriaId" : "08130A58-5038-4D7B-98FE-A869845B2A56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2703",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting."
      }, {
        "lang" : "es",
        "value" : "Puede eludirse Phone Finder en versiones anteriores a la MHA-AL00BC00B156; anteriores a la MHA-CL00BC00B156; anteriores a la MHA-DL00BC00B156; anteriores a la MHA-TL00BC00B156; anteriores a la EVA-AL10C00B373; anteriores a la EVA-CL10C00B373; anteriores a la EVA-DL10C00B373 y versiones anteriores a la EVA-TL10C00B373. Un atacante puede eludir Phone Finder mediante pasos especiales y entrar en la configuración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00bc00b156",
            "matchCriteriaId" : "CE3C7F2E-D3F8-4D8A-A156-07F99329C9BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-cl00bc00b156",
            "matchCriteriaId" : "EC783EF1-0595-4734-BB6D-000274D52D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-dl00bc00b156",
            "matchCriteriaId" : "4562F553-AA92-49C4-AF96-AA5D639AB57F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-tl00bc00b156",
            "matchCriteriaId" : "4F7F4EC8-BFB0-44C3-9883-88EF066AC4A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b373",
            "matchCriteriaId" : "E6D9BF45-6BA9-4F4A-A69B-350E6D492087"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl10c00b373",
            "matchCriteriaId" : "A2798A59-2ED6-4F6E-B52A-B08DF9453E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl10c00b373",
            "matchCriteriaId" : "316C3B8D-AB9F-4A85-8535-639A0021F97A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl10c00b373",
            "matchCriteriaId" : "8CD87CDC-1C69-4506-8D5A-B106DBAD1EBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95657",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2704",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure."
      }, {
        "lang" : "es",
        "value" : "Smarthome 1.0.2.364 y versiones anteriores, HiAPP 7.3.0.303 y anteriores, HwParentControl 2.0.0 y anteriores, HwParentControlParent 5.1.0.12 y anteriores, Crowdtest 1.5.3 y anteriores, HiWallet 8.0.0.301 y anteriores, Huawei Pay 8.0.0.300 y anteriores, Skytone 8.1.2.300 y anteriores, HwCloudDrive(EMUI6.0) 8.0.0.307 y anteriores, HwPhoneFinder(EMUI6.0) 9.3.0.310 y anteriores, HwPhoneFinder(EMUI5.1) 9.2.2.303 y anteriores, HiCinema 8.0.2.300 y anteriores, HuaweiWear 21.0.0.360 y anteriores y HiHealthApp 3.0.3.300 y anteriores tienen una vulnerabilidad de divulgación de información. Las claves de cifrado están almacenadas en el sistema. El atacante puede utilizar ingeniería inversa para obtener las claves de cifrado, provocando una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:smarthome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.364",
            "matchCriteriaId" : "FEF1E07C-5A28-4A01-B739-23EF517C6E11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hiapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.0.303",
            "matchCriteriaId" : "1036F83E-18BA-4560-B796-878F05D976F2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hwparentcontrol:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "AD364E0F-4CF9-481D-AAD1-696BEEF8CA9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hwparentcontrolparent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0.12",
            "matchCriteriaId" : "69572083-6CA3-4FCD-A8F7-460F184BE9A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:crowdtest:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3",
            "matchCriteriaId" : "DD498317-5E9B-4605-A41C-AF411A3F0436"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hiwallet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0.301",
            "matchCriteriaId" : "D7ACF69D-3555-4989-A237-EA3F06575E04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:huawei_pay:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0.300",
            "matchCriteriaId" : "643D1BE6-9017-4DFE-A733-9772E06BAB5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:skytone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1.2.300",
            "matchCriteriaId" : "8FC601A7-493E-4AE4-B26D-21B09CC31D3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hwclouddrive\\(emui6.0\\):*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0.307",
            "matchCriteriaId" : "6416700B-4AC4-40E1-AA67-070055AC810B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hwphonefinder\\(emui6.0\\):*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0.310",
            "matchCriteriaId" : "53B56850-D4CE-4679-B894-3F9F8237125A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hwphonefinder\\(emui5.1\\):*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.2.303",
            "matchCriteriaId" : "4F537415-D418-48AE-ACFB-CD6F41073492"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hicinema:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.2.300",
            "matchCriteriaId" : "279C86EF-784F-4B46-8E72-5DAFD02C1030"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:huaweiwear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.0.360",
            "matchCriteriaId" : "01416564-940A-4842-ADAC-0CA9F53890DB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hihealthapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3.300",
            "matchCriteriaId" : "090BA6B7-A16E-4B26-A720-B70D95675369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2705",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei P9 con versiones de software anteriores a la EVA-AL10C00B365, anteriores a la EVA-AL00C00B365, anteriores a la EVA-CL00C92B365, anteriores a la EVA-DL00C17B365 y versiones anteriores a la EVA-TL00C01B365 tienen una vulnerabilidad de omisión de activación del teléfono. Un exploit exitoso podría permitir que un atacante no autenticado omita la activación del teléfono en la página de configuración del teléfono."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al00c00b365",
            "matchCriteriaId" : "A3EE763A-E94A-409E-B18E-1C3D8B019A31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b365",
            "matchCriteriaId" : "9AC0DE37-8554-4991-8635-88C8142CEE2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl00c92b365",
            "matchCriteriaId" : "9E42B312-E33B-43F6-AEAF-48D45FBCE02D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl00c17b365",
            "matchCriteriaId" : "C236BA60-0F13-41C2-B264-764E99521920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl00c01b365",
            "matchCriteriaId" : "D12D80E6-161A-45F8-BE8D-E3F156C722C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95661",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2706",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Mate 9 con software MHA-AL00AC00B125 tienen una vulnerabilidad de salto de directorio en el módulo Push. Debido a que el sistema no verifica el nombre de archivo durante la descompresión, los directorios del sistema se saltan. Esto podría explotarse para provocar que el atacante remplace archivos y afecte al servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mha-al00ac00b125",
            "matchCriteriaId" : "08FFF678-6E91-419D-8F9D-505C56453542"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-01-push-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-01-push-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2707",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Mate 9 con software MHA-AL00AC00B125 tienen una vulnerabilidad de escalado de privilegios en el módulo Push. Un atacante engaña a un usuario para que guarde medios enriquecidos (rich media) en un mensaje del smartphone, lo que podría ser explotado para provocar que el atacante elimine mensajes o engañe al usuario para que envíe un mensaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mha-al00ac00b125",
            "matchCriteriaId" : "08FFF678-6E91-419D-8F9D-505C56453542"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-02-push-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-02-push-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2708",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally."
      }, {
        "lang" : "es",
        "value" : "La función \"Find Phone\" en smartphones Nice con versiones de software anteriores a Nice-AL00C00B0135 tiene una vulnerabilidad de omisión de autenticación. Un atacante no autenticado podría borrar y restablecer la configuración de fábrica del teléfono realizando pasos especiales. Debido a la falta de autenticación de la función \"Find Phone\", un atacante podría explotar la vulnerabilidad para omitir la función \"Find Phone\" para utlizar el teléfono con normalidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nice_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b0135",
            "matchCriteriaId" : "4EA1550B-65F0-4CEB-AE81-94D822419135"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nice:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF599F2-82C9-4AD3-AF99-DAF84946C145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95911",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2709",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service."
      }, {
        "lang" : "es",
        "value" : "HiGame con software en versiones anteriores a la 7.3.0 y SkyTone con software en versiones anteriores a la 8.1.1 tienen una vulnerabilidad de denegación de servicio. Un atacante engaña a un usuario para que instale una aplicación maliciosa en el smartphone, permitiendo que el atacante envíe paquetes mal formados al dispositivo. Esto se debe a una falta de validación de entradas adecuada de las APP, lo que provoca la denegación de servicio de las APP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:higame:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.0",
            "matchCriteriaId" : "14C1785D-B40B-47D4-8098-2DE3CC5B7978"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:skytone:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "392B6B1E-30A9-4965-83D2-9F19B1960A6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-appdos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-appdos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2710",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 versions, earlier than CRR-L09C432B390 versions, earlier than CRR-L09C605B355CUSTC605D003 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can perform some operations to update the Google account. As a result, the FRP function is bypassed."
      }, {
        "lang" : "es",
        "value" : "BTV-W09C229B002CUSTC229D005, BTV-W09C233B029, versiones anteriores a la BTV-W09C100B006CUSTC100D002, anteriores a la BTV-W09C128B003CUSTC128D002, anteriores a la BTV-W09C199B002CUSTC199D002, anteriores a la BTV-W09C209B005CUSTC209D001, anteriores a la BTV-W09C331B002CUSTC331D001, anteriores a la CRR-L09C432B390 y las versiones anteriores a la CRR-L09C605B355CUSTC605D003 tienen una vulnerabilidad de segurida de omisión de Factory Reset Protection (FRP). Al reconfigurar el teléfono móvil empleando la función factory reset protection (FRP), un atacante puede realizar algunas operaciones para actualizar la cuenta de Google. Como resultado, se omite la función FRP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:btv-w09c229b002custc229d005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929EB58C-7E30-47A0-A660-EF4532395BF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:btv-w09c233b029:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637164D2-0F09-4077-B952-A918CF11D15F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "btv-w09c100b006custc100d002",
            "matchCriteriaId" : "A8AC1C1F-10A4-4B2D-A5DB-8A44AF38EC3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "btv-w09c128b003custc128d002",
            "matchCriteriaId" : "05FD4EDF-B5C2-4FCE-ADF9-6240571FC754"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "btv-w09c199b002custc199d002",
            "matchCriteriaId" : "6E5462AB-7C87-451B-B01C-4BDE9C3AFC73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "btv-w09c209b005custc209d001",
            "matchCriteriaId" : "6C9C3E58-2B26-4AE0-9351-6E9CF55A4412"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:beethoven-w09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "btv-w09c331b002custc331d001",
            "matchCriteriaId" : "212B7634-E057-41AE-B24F-8A7C37327698"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:beethoven-w09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C3359-8792-48EF-BF72-540A65B5A535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:crr-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "crr-l09c432b390",
            "matchCriteriaId" : "F048E2DD-1138-4A7E-B65F-347F3C46E1C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:crr-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA595177-C2DC-4573-BE82-A4626E308F3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:crr-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "crr-l09c605b355custc605d003",
            "matchCriteriaId" : "6FDB7E0B-D284-49CA-8752-5631AD172BD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:crr-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA595177-C2DC-4573-BE82-A4626E308F3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170524-01-frp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98712",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170524-01-frp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2711",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:00.973",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system."
      }, {
        "lang" : "es",
        "value" : "Los smartphones P9 Plus con software en versiones anteriores a la VIE-AL10C00B352 tienen una vulnerabilidad de validación de entradas en el controlador de la pantalla táctil. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar parámetros al smartphone para que el sistema se cierre inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-al10c00b352",
            "matchCriteriaId" : "97FD3192-A029-474E-B23F-20E4C6DF665A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-03-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95663",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-03-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2712",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping."
      }, {
        "lang" : "es",
        "value" : "S3300 V100R006C05 tiene una vulnerabilidad de oscilación de Ethernet in the First Mile (EFM) debido a la falta de comprobación de consistencia de tiempo-longitud-valor (TLV). Un atacante podría manipular paquetes mal formados y enviarlos a un dispositivo para provocar la oscilación EFM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s3300_firmware:v100r006c05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBB1A49-B169-40F4-B611-C739896A2A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1410A1-ADCC-474F-ABEE-F0FE48E4CD7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-vrp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95662",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-vrp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2713",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei P9 con versiones de software anteriores a la EVA-AL00C00B365, anteriores a la EVA-L09C636B380, anteriores a la VIE-L09C432B370 y versiones anteriores a la VIE-L29C636B370 tienen una vulnerabilidad de validación de entradas insuficiente. Un atacante podría explotar esta vulnerabilidad para alterar los mensajes de señalización de interfaz aérea y obtener información de comunicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c432b383",
            "matchCriteriaId" : "4B03331B-9950-4E4E-AEE9-410A240DAA04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c636b380",
            "matchCriteriaId" : "19035021-5B60-4150-843C-B0CB8A565FAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l09c432b370",
            "matchCriteriaId" : "8008681F-6BEA-4342-9542-CC2800AE624A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l29c636b370",
            "matchCriteriaId" : "C95F01C4-248E-42FB-98F1-2547C088617D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2714",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS) condition in the affected system."
      }, {
        "lang" : "es",
        "value" : "GaussDB en FusionSphere OpenStack V100R005C10SPC705 y anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante autenticado en la red LAN puede explotar esta vulnerabilidad para ejecutar código arbitrario o provocar una condición de denegación de servicio (DoS) en el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v100r005c10spc705",
            "matchCriteriaId" : "976E5A22-9C34-4EF9-89BE-E1E9C7DC1342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170420-01-gaussdb-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170420-01-gaussdb-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2715",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to information leak."
      }, {
        "lang" : "es",
        "value" : "Files APP en su versión 7.1.1.309 y anteriores en algunos teléfonos móviles Huawei tiene una vulnerabilidad de descifrado de contraseñas por fuerza bruta debido al diseño inadecuado de la base de datos de Safe key. Un atacante no autorizado podría acceder a información sensible de la base de datos y podría descifrar las contraseñas Safe de los usuarios, lo que conduce a un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:files:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1.309",
            "matchCriteriaId" : "BC4CA7CB-4ABD-4B9A-8F5E-7F8AAC485DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2716",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter to the driver of the smart phone, causing a system crash or privilege escalation."
      }, {
        "lang" : "es",
        "value" : "El controlador camerafs en Mate 9 en versiones anteriores a la MHA-AL00BC00B173 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante engaña a un usuario para que instale una aplicación maliciosa que tiene el privilegio de sistema del sistema de Android y envía un parámetro específico al controlador del smartphone, provocando el cierre inesperado del sistema o un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00bc00b173",
            "matchCriteriaId" : "3E697C36-C2AB-483B-8020-A489F9DEA89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2717",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an integer overflow and restart the modem system."
      }, {
        "lang" : "es",
        "value" : "Honor 8 Pro con software Duke-L09C10B120 y anteriores, Duke-L09C432B120 y anteriores y Duke-L09C636B120 y anteriores tiene una vulnerabilidad de desbordamiento de enteros. El atacante envía un mensaje de respuesta al dispositivo, que contiene un campo length ilegal. Esto podría provocar un desbordamiento de enteros y reiniciar el sistema de módem."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "duke-l09c10b120",
            "matchCriteriaId" : "B8F0EC61-EEE3-4F09-8715-90E7E3DA92EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FAD273-D46F-43B9-AC4E-BA1B61F16078"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "duke-l09c432b120",
            "matchCriteriaId" : "7F99BBD3-84D9-4907-8DAD-A7546C37A2A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FAD273-D46F-43B9-AC4E-BA1B61F16078"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "duke-l09c636b120",
            "matchCriteriaId" : "7FE35DDA-303B-4CAE-93F9-F50AA159EA5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FAD273-D46F-43B9-AC4E-BA1B61F16078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-nas-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-nas-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2718",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00 y V100R006C10RC2 tiene dos vulnerabilidades de inyección de comandos debido a la validación de entradas insuficiente en un puerto. Un atacante puede explotar las vulnerabilidades para obtener privilegios root mediante el envío de algunos mensajes con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E30BCE00-531D-43BA-932C-ABA73E16DB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2719",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00 y V100R006C10RC2 tiene dos vulnerabilidades de inyección de comandos debido a la validación de entradas insuficiente en un puerto. Un atacante puede explotar las vulnerabilidades para obtener privilegios root mediante el envío de algunos mensajes con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D748184C-0EC7-45B2-A19E-D6CC1B0A116F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2720",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00 tiene una vulnerabilidad de divulgación de información. El software emplea claves criptográficas embebidas para cifrar mensajes entre ciertos componentes. Esto incrementa significativamente las posibilidades de que los datos cifrados se recuperen y se dé como resultado una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2721",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software Berlin-L21C10B130, Berlin-L21C185B133, Berlin-L21HNC10B131, Berlin-L21HNC185B140, Berlin-L21HNC432B151, Berlin-L22C636B160, Berlin-L22HNC636B130, Berlin-L22HNC675B150CUSTC675D001, Berlin-L23C605B131, Berlin-L24HNC567B110, FRD-L02C432B120, FRD-L02C635B130, FRD-L02C675B170CUSTC675D001, FRD-L04C567B162,FRD-L04C605B131, FRD-L09C10B130, FRD-L09C185B130, FRD-L09C432B131, FRD-L09C636B130, FRD-L14C567B162, FRD-L19C10B130, FRD-L19C432B131 y FRD-L19C636B130 tienen una vulnerabilidad de seguridad de omisión de Factory Reset Protection (FRP). Al reconfigurar el teléfono móvil empleando la función factory reset protection (FRP), un atacante puede iniciar sesión en el flow de configuración de Swype Keyboard y realizar algunas operaciones para actualizar la cuenta de Google. Como resultado, se omite la función FRP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c10b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D190578-F8E6-42A0-81B4-C33AC051370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c185b133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA23A15-22A5-4424-904F-0D11B865D457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723516F-04EB-48E5-9057-7FB1DACB5D28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21hn_firmware:berlin-l21hnc10b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFE0AB8-C343-49D9-A8FA-62A716054321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21hn_firmware:berlin-l21hnc185b140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA9E3BF-4F10-4181-9BA8-1260BCD76771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21hn_firmware:berlin-l21hnc432b151:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D67B5C-C1BC-4D95-8F14-19A0A6CDB14B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l21hn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E8FDB9-B279-4D37-BBC3-9625AB5E42DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c636b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD33173D-04F8-42B5-845A-649BE0BC1FE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l22:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1D3863-B8D9-4D1B-BA06-C88E65FFF74F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l22hn_firmware:berlin-l22hnc636b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA42835-4E1B-48EF-A479-AF4C87C8FBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l22hn_firmware:berlin-l22hnc675b150custc675d001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F16F024-D188-407C-8EAA-B25748251543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l22hn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7CE4AF-0685-4F25-9A81-09D2428C0684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23c605b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D149B33F-FDEE-40C6-BC7E-463F53A443F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA727F8-6B56-43B2-A7A1-D143CB966244"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l24hn_firmware:berlin-l24hnc567b110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85173B7-8D3A-4FC2-8AFE-A44B708506F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l24hn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5F797F-5F22-4B2A-82E5-B26EBAA786AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l02_firmware:frd-l02c432b120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDE951B-421D-4648-BD77-833E6EA8CBC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l02_firmware:frd-l02c635b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F596F50-62B4-4D0F-B794-B416748B00F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l02_firmware:frd-l02c675b170custc675d001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013058BA-B3A9-4A17-8E6A-9C2898580BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:frd-l02:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4523530C-316E-418A-B30B-5D28C25C3D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l04_firmware:frd-l04c567b162:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04516652-36D6-45DB-99F3-B4EF0A3C674E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l04_firmware:frd-l04c605b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD73846E-EF3A-428C-80AE-02B82262D77B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:frd-l04:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6431578F-6072-4B6F-8D7A-58C93CDBB464"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l09_firmware:frd-l09c10b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079EED-57FE-4792-A39B-CEC4E624B062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l09_firmware:frd-l09c185b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF9EA6-2420-4008-AC72-A610079AC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l09_firmware:frd-l09c432b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B53D2F3-38F8-4F8F-B397-65D14CF164AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l09_firmware:frd-l09c636b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C95304A-332E-401B-A40E-111DB80D07F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:frd-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467AE133-1883-4E8B-AEB8-AAD5E953B285"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l14_firmware:frd-l14c567b162:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22544D7-0E95-4C5F-8C49-EA04DBCAAB91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:frd-l14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1AE8A5-460B-4251-A009-03DCCC8083BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l19_firmware:frd-l19c10b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F0F5CA-B8C5-4A60-94F8-2EAE638DDA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l19_firmware:frd-l19c432b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB6E5E2-9FC7-4F02-B4DB-5F393BD92B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:frd-l19_firmware:frd-l19c636b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D012FA-499B-4205-B21A-2D6D330D4784"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:frd-l19:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8AB22BF-628A-4A5F-9813-D7D931E6BD93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2722",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "DP300 V500R002C00, TE60 con software V100R001C01, V100R001C10, V100R003C00, V500R002C00 y V600R006C00, TP3106 con software V100R001C06 y V100R002C00, ViewPoint 9030 con software V100R011C02 y V100R011C03, eCNS210_TD con software V100R004C10, eSpace 7950 con software V200R003C00 y V200R003C30, eSpace IAD con software V300R001C07SPCa00 y V300R002C01SPCb00, eSpace U1981 con software V100R001C20, V100R001C30, V200R003C00, V200R003C20 y V200R003C30 tienen una vulnerabilidad de validación de entradas. Un atacante remoto podría explotar esta vulnerabilidad manipulando un paquete mal formado y enviándolo al dispositivo. Un exploit exitoso podría permitir que el atacante provoque una denegación de servicio o ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13F79BF-2919-45A3-9AB0-9D501DDA94B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r001c06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AFC9C8-548B-4A63-BE1D-98685E353434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C6245A-D192-4D02-BB4E-285ABD2BB328"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ecns210_td:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FCDC81-B742-4D42-BD52-52BBDDDD4BE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_7950_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A2334D-1724-42B5-8DD2-0BA191BA5F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4523A712-FF77-4BDA-B213-0AE2BDC4152C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185783AE-3135-471E-8D55-4BAB3A187F21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_iad_firmware:v300r001c07spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF01DA4-5E45-4CCC-A8C8-B2DC4E625441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_iad_firmware:v300r002c01spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA246C5-B5BB-415F-821C-4E2B4CFFE8D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_iad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C8CF3B-2907-4E9C-8CA9-6FECDDC68812"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DFCB81-F308-4EEC-AD5D-5225D025C167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-pse-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-pse-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2723",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak."
      }, {
        "lang" : "es",
        "value" : "Files APP en su versión 7.1.1.308 y anteriores, en algunos teléfonos móviles de Huawei, tiene una vulnerabilidad de almacenamiento de las contraseñas Safe de los usuarios en texto plano. Un atacante con el privilegio root de un sistema Android podría falsificar las contraseñas Safe en texto plano de los usuarios Safe to read, desencadenando un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:files:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.1.308",
            "matchCriteriaId" : "4246AE40-5772-466D-8DFC-239EDB32C550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-files-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-files-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2724",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Bastet en smartphones P10 Plus y P10 con software VKY-AL00C00B123 y anteriores y VTR-AL00C00B123 y anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root de un sistema Android podría engañar a un usuario para que instale una APP maliciosa. La APP puede modificar datos concretos para provocar un desbordamiento de búfer en el siguiente reinicio del sistema, provocando el reinicio continuo del sistema o la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b123",
            "matchCriteriaId" : "E89DD90E-5048-4BC0-B8D0-672FCB3FF531"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b123",
            "matchCriteriaId" : "5C1E211E-D19F-468E-971D-DA5976FE8502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97696",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2725",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Bastet en smartphones P10 Plus y P10 con software VKY-AL00C00B123 y anteriores y VTR-AL00C00B123 y anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root de un sistema Android podría engañar a un usuario para que instale una APP maliciosa. La APP puede modificar datos concretos para provocar un desbordamiento de búfer en el siguiente reinicio del sistema, provocando el reinicio continuo del sistema o la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b123",
            "matchCriteriaId" : "E89DD90E-5048-4BC0-B8D0-672FCB3FF531"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b123",
            "matchCriteriaId" : "5C1E211E-D19F-468E-971D-DA5976FE8502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97696",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2726",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Bastet en smartphones P10 Plus y P10 con software VKY-AL00C00B123 y anteriores y VTR-AL00C00B123 y anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root de un sistema Android podría engañar a un usuario para que instale una APP maliciosa. La APP puede modificar datos concretos para provocar un desbordamiento de búfer en el siguiente reinicio del sistema, provocando el reinicio continuo del sistema o la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b123",
            "matchCriteriaId" : "E89DD90E-5048-4BC0-B8D0-672FCB3FF531"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b123",
            "matchCriteriaId" : "5C1E211E-D19F-468E-971D-DA5976FE8502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97696",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2727",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei P9 con versiones de software anteriores a la EVA-AL00C00B365, anteriores a la EVA-AL10C00B365, anteriores a la EVA-CL00C92B365, anteriores a la EVA-DL00C17B365 y versiones anteriores a la EVA-TL00C01B365 tienen una vulnerabilidad de escalado de privilegios. Un atacante no autenticado puede omitir la activación del teléfono en la página de gestión de usuarios del teléfono y crear un nuevo usuario. Un exploit exitoso puede permitir que el atacante opere parte de las funciones del teléfono."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al00c00b365",
            "matchCriteriaId" : "A3EE763A-E94A-409E-B18E-1C3D8B019A31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b365",
            "matchCriteriaId" : "9AC0DE37-8554-4991-8635-88C8142CEE2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl00c92b365",
            "matchCriteriaId" : "9E42B312-E33B-43F6-AEAF-48D45FBCE02D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl00c17b365",
            "matchCriteriaId" : "C236BA60-0F13-41C2-B264-764E99521920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl00c01b365",
            "matchCriteriaId" : "D12D80E6-161A-45F8-BE8D-E3F156C722C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170209-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170209-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2728",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unlock function, an attacker can impersonate the user's Bluetooth device to unlock the user's mobile phone screen.uawei mobile phones have a Bluetooth unlock bypassing vulnerability due to the lack of validation on Bluetooth devices. If a user has enabled the smart unlock function, an attacker can impersonate the user's Bluetooth device to unlock the user's mobile phone screen."
      }, {
        "lang" : "es",
        "value" : "Algunos teléfonos móviles Huawei Honor 6X Berlin-L22C636B150 y versiones anteriores tienen una vulnerabilidad de omisión de desbloqueo Bluetooth. Si un usuario ha habilitado la función smart unlock, un atacante puede suplantar el dispositivo Bluetooth del usuario para desbloquear la pantalla del teléfono móvil del usuario. Los móviles Huawei tienen una vulnerabilidad de omisión de desbloqueo Bluetooth debido a la falta de validación en dispositivos Bluetooth. Si un usuario ha habilitado la función smart unlock, un atacante puede suplantar el dispositivo Bluetooth del usuario para desbloquear la pantalla del teléfono móvil del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "berlin-l22c636b150",
            "matchCriteriaId" : "78EF2CC9-FB88-4047-A077-DB408118D0E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170323-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97042",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170323-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2729",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Los cargadores de arranque en smartphones Honor 5A con versiones de software anteriores a CAM-TL00C01B193, CAM-TL00HC00B193 y CAM-UL00C00B193 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root de un sistema Android podría engañar a un usuario para que instale una APP maliciosa. La APP puede modificar datos concretos para provocar un desbordamiento de búfer en el siguiente reinicio del sistema, provocando el reinicio continuo del sistema o la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cam-tl00c01b193",
            "matchCriteriaId" : "F2841D57-9DC1-4D20-B5E8-B3CA08BD43A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28042D7B-7395-4CC4-BEFB-1752D4540148"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cam-tl00hc00b193",
            "matchCriteriaId" : "6C4A8594-8917-4265-B2C6-CD634F7E8D83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28042D7B-7395-4CC4-BEFB-1752D4540148"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cam-ul00c00b193",
            "matchCriteriaId" : "8E9FF695-31F6-45E8-91C5-2508919A6A24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28042D7B-7395-4CC4-BEFB-1752D4540148"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l02c635b568",
            "matchCriteriaId" : "AA09A04F-2C0A-4FA9-84A2-349FB9F9914A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l21c10b541",
            "matchCriteriaId" : "41AC27F5-5A2E-4A69-9B33-51F8BF4D8396"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l21c185b568",
            "matchCriteriaId" : "60AE4F52-C33D-4FB2-87CF-B7EB5C786568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l21c432b596",
            "matchCriteriaId" : "AB0C6A79-59C6-4AF3-A08D-BC54CD083EE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l21c464b595",
            "matchCriteriaId" : "CACAD809-168A-48C6-B234-4BC3AA93ABB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l21c636b568",
            "matchCriteriaId" : "ABFAFC11-0CED-4D6E-8730-42FE7B3C9E6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l23c605b535",
            "matchCriteriaId" : "7A404597-DDB4-4D39-94FF-92FF64A37AE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170302-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96526",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170302-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2730",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version."
      }, {
        "lang" : "es",
        "value" : "HUAWEI HiLink APP (para IOS) en versiones anteriores a la 5.0.25.306 y HUAWEI Tech Support APP (para IOS) en versiones anteriores a la 5.0.0 tienen una vulnerabilidad de filtrado de información. Cuando un iPhone con estas apps instaladas accede al hotspot wifi establecido por el atacante, el atacante puede recopilar la información sobre el modelo y la versión de firmware del iPhone."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hilink:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.25.306",
            "matchCriteriaId" : "1B82D912-DFCD-4030-A927-CA66AAB92B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:tech_support:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.0",
            "matchCriteriaId" : "1BCF4E24-7B92-4094-B6FE-60A82F477920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170310-01-hilinkapp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170310-01-hilinkapp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2731",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone vibrator service interface to crash the system."
      }, {
        "lang" : "es",
        "value" : "El servicio de vibración en smartphones P9 Plus con versiones de software anteriores a la VIE-AL10C00B386 tiene una vulnerabilidad de denegación de servicio (DoS). Un atacante puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar parámetros a la interfaz del servicio de vibración del smartphone para que el sistema se cierre inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-al10c00b386",
            "matchCriteriaId" : "BC80B147-E2EB-4356-AD7D-01E27303AB36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170315-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170315-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2732",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data."
      }, {
        "lang" : "es",
        "value" : "Huawei Hilink APP en versiones anteriores a la 5.0.25.306 tiene una vulnerabilidad de filtrado de información. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa y que esta pueda acceder a los datos de Hilink."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hilink:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.25.306",
            "matchCriteriaId" : "1B82D912-DFCD-4030-A927-CA66AAB92B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-hilinkapp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-hilinkapp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2733",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Honor 6x con versiones de software anteriores a la BLN-AL10C00B357 y a la BLN-AL20C00B357 tienen una vulnerabilidad de filtrado de información debido a la configuración incorrecta de permisos de archivo. Un atacante engaña a un usuario para que instale una aplicación maliciosa en el smartphone; la aplicación puede conseguir el archivo que guarda el texto cifrado del PIN de la tarjeta SIM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "bln-al10c00b357",
            "matchCriteriaId" : "73933B58-0208-43ED-8F9B-7208E29F2154"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "bln-al20c00b357",
            "matchCriteriaId" : "B8E15137-F44A-4A8C-B583-48F8C205C5DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97700",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2734",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large number of memory allocation and the smart phone will be crash for memory exhaustion."
      }, {
        "lang" : "es",
        "value" : "Los smartphones P9 Plus con versiones de software anteriores a la VIE-AL10BC00B386 tienen una vulnerabilidad de denegación de servicio (DoS). Un atacante engaña a un usuario para que instale una aplicación maliciosa en el smartphone y la aplicación puede enviar parámetros a una interfaz específica. Esto provoca que se asigne una gran cantidad de memoria y que el smartphone se cierre inesperadamente debido al agotamiento de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-al10bc00b386",
            "matchCriteriaId" : "9F612DBF-80F4-431B-9AB0-E2B27570A5F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2735",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user into installing a malicious application to call the interface and modify the system properties."
      }, {
        "lang" : "es",
        "value" : "Los smartphones TIT-AL00 con versiones de software anteriores a la TIT-AL00C583B214 tienen una vulnerabilidad de exposición de la interfaz del sistema. El software proporciona una interfaz del sistema para interactuar con aplicaciones externas, pero las llamadas a la interfaz no están restringidas correctamente. Un atacante podría engañar al usuario para que instale una aplicación maliciosa para llamar a la interfaz y modificar las propiedades del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:y6_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tit-al00c583b214",
            "matchCriteriaId" : "12CA77C0-F399-4D12-91A3-023B9A8E7459"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:y6_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F54999-3926-438D-BF21-8417C6B7A175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97224",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2736",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack."
      }, {
        "lang" : "es",
        "value" : "VCM5010 con versiones de software anteriores a la V100R002C50SPC100 tiene una vulnerabilidad de inyección de comandos. Esto se debe a una validación insuficiente de las entradas del usuario. Un atacante autenticado podría realizar un ataque de inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vcm5010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v100r002c50spc100",
            "matchCriteriaId" : "6969FA3C-0452-4C0F-BA42-9B5152C6E669"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vcm5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B3EC85-DDD0-4AB6-9048-5C192F1D8251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97231",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2737",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:01.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system."
      }, {
        "lang" : "es",
        "value" : "VCM5010 con versiones de software anteriores a la V100R002C50SPC100 tiene una vulnerabilidad de subida de archivos arbitrarios. El software no valida los archivos que se suben. Un atacante autenticado podría subir archivos arbitrarios en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vcm5010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v100r002c50spc100",
            "matchCriteriaId" : "6969FA3C-0452-4C0F-BA42-9B5152C6E669"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vcm5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B3EC85-DDD0-4AB6-9048-5C192F1D8251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97231",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2738",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system."
      }, {
        "lang" : "es",
        "value" : "VCM5010 con versiones de software anteriores a la V100R002C50SPC100 tiene una vulnerabilidad de omisión de autenticación. Esto se debe a la implementación inadecuada de la autenticación para acceder a páginas web. Un atacante no autenticado podría omitir la autenticación enviando una petición HTTP manipulada. 5010 con versiones de software anteriores a la V100R002C50SPC100 tiene una vulnerabilidad de subida de archivos arbitrarios. El software no valida los archivos que se suben. Un atacante autenticado podría subir archivos arbitrarios en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vcm5010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v100r002c50spc100",
            "matchCriteriaId" : "6969FA3C-0452-4C0F-BA42-9B5152C6E669"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vcm5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B3EC85-DDD0-4AB6-9048-5C192F1D8251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97231",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2739",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications."
      }, {
        "lang" : "es",
        "value" : "El paquete de actualización de Huawei Vmall APP en versiones anteriores a HwVmall 1.5.3.0 se transfiere mediante HTTP. Un atacante Man-in-the-Middle (MitM) puede falsificar el paquete de actualización de Huawei Vmall APP e introducir las aplicaciones maliciosas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:vmall:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.3.0",
            "matchCriteriaId" : "86DD9EE2-FE89-4380-8959-6418E1B616CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-01-vmall-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-01-vmall-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8117",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8118",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de filtrado de información. Un atacante podría explotarla para obtener información sensible, provocando un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8119",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8120",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8121",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de filtrado de información. Un atacante podría explotarla para obtener información sensible, provocando un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8122",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101961",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8123",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8124",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8125",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de Cross-Site Scripting (XSS) debido a una validación de entradas insuficiente. Un atacante podría manipular enlaces o scripts maliciosos para lanzar ataques de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8126",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8127",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 tiene una vulnerabilidad de Cross-Site Scripting (XSS) debido a una validación de entradas insuficiente. Un atacante podría manipular enlaces o scripts maliciosos para lanzar ataques de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8128",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8129",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de elevación de privilegios debido a una validación insuficiente o al procesamiento incorrecto de parámetros. Un atacante podría manipular paquetes específicos para explotar estas vulnerabilidades y obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8130",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak."
      }, {
        "lang" : "es",
        "value" : "El producto UMA con software V200R001 y V300R001 tiene una vulnerabilidad de filtrado de información. Un atacante podría explotarla para obtener información sensible, provocando un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v200r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79DB985-9103-4B95-A435-FA2AE3C57496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:uma:v300r001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B540927-20DA-4B1F-BF8E-2B7D06D2A32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8131",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00 y V100R006C10 tiene una vulnerabilidad de inyección de comandos debido a la validación de entradas insuficiente en cuatro puertos TCP en escucha. Un atacante no autenticado puede explotar las vulnerabilidades para obtener privilegios root mediante el envío de algunos mensajes con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F554A-5943-4449-9FF8-A7F7BC4E02CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8132",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00 y V100R006C10 tiene una vulnerabilidad de inyección de comandos debido a la validación de entradas insuficiente en cuatro puertos TCP en escucha. Un atacante no autenticado puede explotar las vulnerabilidades para obtener privilegios root mediante el envío de algunos mensajes con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F554A-5943-4449-9FF8-A7F7BC4E02CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8133",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a high privileged user could execute, causing the files to be tampered with or deleted."
      }, {
        "lang" : "es",
        "value" : "Huawei iManager NetEco con software V600R008C00 y V600R008C10 tiene una vulnerabilidad de inyección de comandos. Un atacante remoto autenticado podría explotar esta vulnerabilidad para enviar paquetes maliciosos a un dispositivo objetivo. La explotación con éxito podría permitir que un usuario con bajos privilegios ejecute comandos que podría ejecutar un usuario con altos privilegios. Esto permitiría que los archivos se falsificasen o eliminasen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:neteco:v600r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85C104D-93B2-45D5-8DDD-41EC92ED5952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:neteco:v600r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9529E6-D8FB-475F-A309-DE87564E3C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-neteco-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-neteco-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8134",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00 y V100R006C10 tiene una vulnerabilidad de inyección de comandos debido a la validación de entradas insuficiente en cuatro puertos TCP en escucha. Un atacante no autenticado puede explotar las vulnerabilidades para obtener privilegios root mediante el envío de algunos mensajes con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F554A-5943-4449-9FF8-A7F7BC4E02CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8135",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00 y V100R006C10 tiene una vulnerabilidad de inyección de comandos debido a la validación de entradas insuficiente en cuatro puertos TCP en escucha. Un atacante no autenticado puede explotar las vulnerabilidades para obtener privilegios root mediante el envío de algunos mensajes con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F554A-5943-4449-9FF8-A7F7BC4E02CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102262",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8136",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak."
      }, {
        "lang" : "es",
        "value" : "HedEx en versiones anteriores a la V200R006C00 tiene una vulnerabilidad de descarga de archivos arbitrarios. Un atacante podría explotarla para descargar archivos arbitrarios en un dispositivo objetivo para provocar un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hedex_lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v200r006c00",
            "matchCriteriaId" : "51F1E6A4-56B8-4945-8E99-0129D975816D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8137",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking."
      }, {
        "lang" : "es",
        "value" : "HedEx en versiones anteriores a la V200R006C00 tiene una vulnerabilidad de secuestro de librería DLL (dynamic link library) debido a la llamada a un archivo DLL accediendo a una ruta relativa. Un atacante podría explotar esta vulnerabilidad para falsificar el archivo DLL, lo que conduce a un secuestro de DLL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hedex_lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v200r006c00",
            "matchCriteriaId" : "51F1E6A4-56B8-4945-8E99-0129D975816D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8138",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services."
      }, {
        "lang" : "es",
        "value" : "HedEx en versiones anteriores a la V200R006C00 tiene una vulnerabilidad de Cross-Site Request Forgery (CSRF). Un atacante podría engañar a un usuario para que acceda a un sitio web que contiene scripts maliciosos, lo que podría falsificar las configuraciones e interrumpir los servicios normales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hedex_lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v200r006c00",
            "matchCriteriaId" : "51F1E6A4-56B8-4945-8E99-0129D975816D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8139",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users."
      }, {
        "lang" : "es",
        "value" : "HedEx en versiones anteriores a la V200R006C00 tiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente. Los atacantes pueden explotar la vulnerabilidad para colocar scripts maliciosos en el archivo de configuración e interrumpir los servicios de usuarios legítimos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hedex_lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v200r006c00",
            "matchCriteriaId" : "51F1E6A4-56B8-4945-8E99-0129D975816D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8140",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:02.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador soundtrigger en smartphones P9 Plus con versiones de software anteriores a la VIE-AL10BC00B353 tiene una vulnerabilidad de doble liberación de memoria (double free). Un atacante engaña a un usuario para que instale una aplicación maliciosa; la aplicación puede comenzar múltiples hilos e intentar liberar memoria específica. Esto podría desencadenar una doble liberación (double free) y provocar un cierre inesperado del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-al10bc00b353",
            "matchCriteriaId" : "6E6B437D-1362-4879-B6F9-A61AD7521F5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170605-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170605-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8141",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador Touch Panel (TP) en smartphones P10 Plus con versiones de software anteriores a la VKY-AL00C00B153 tiene una vulnerabilidad de doble liberación de memoria (double free). Un atacante con el privilegio root del sistema Android engaña a un usuario para que instale una aplicación maliciosa; la aplicación puede comenzar múltiples hilos e intentar liberar memoria específica. Esto podría desencadenar una doble liberación (double free) y provocar un cierre inesperado del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b153",
            "matchCriteriaId" : "FC3C0ECD-E675-4947-BF4E-38F8D0106633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8142",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to create and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador del módulo Trusted Execution Environment (TEE) de los smartphones Mate 9 y Mate 9 Pro con versiones de software anteriores a MHA-AL00BC00B221 y LON-AL00BC00B221 tiene una vulnerabilidad de uso de memoria previamente liberada (UAF). Un atacante engaña a un usuario para que instale una aplicación maliciosa; la aplicación puede comenzar múltiples hilos e intentar crear y liberar memoria específica. Esto podría desencadenar un acceso a la memoria previamente liberada y provocar un cierre inesperado del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00bc00b221",
            "matchCriteriaId" : "043A9ACB-C72C-4785-9022-3B7D2E9704EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00bc00b221",
            "matchCriteriaId" : "E1992CBF-BD7C-4589-A902-41C218A35464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170615-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170615-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8143",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system."
      }, {
        "lang" : "es",
        "value" : "El controlador Wi-Fi de los smartphones Huawei Honor 5C y P9 Lite con versiones de software anteriores a la NEM-L21C432B351 y a la VNS-L21C10B381 tiene una vulnerabilidad de DoS. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa que pueda acceder a una dirección inválida del controlador para provocar el cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-l21c432b351",
            "matchCriteriaId" : "AC150003-0912-417D-8639-D6349563ABDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vns-l21c10b381",
            "matchCriteriaId" : "C63C0AED-03FD-4BE7-AAD8-CAAE3B30BA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99256",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8144",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor 5A, Honor 8 Lite, Mate9, Mate9 Pro, P10 y P10 Plus con software en versiones anteriores a la CAM-L03C605B143CUSTC605D003, la Prague-L03C605B161, la Prague-L23C605B160, la MHA-AL00C00B225, la LON-AL00C00B225, la VTR-AL00C00B167, la VTR-TL00C01B167, la VKY-AL00C00B167 y la VKY-TL00C01B167 tienen una vulnerabilidad de agotamiento de recursos debido a la configuración de las opciones. Un atacante engaña a un usuario para que instale una aplicación maliciosa; la aplicación podría encender la linterna del dispositivo y descargar rápidamente la batería."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-920"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cam-l03c605b143custc605d003",
            "matchCriteriaId" : "C583A067-57E6-4789-95CF-459AA2436FC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28042D7B-7395-4CC4-BEFB-1752D4540148"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-l03c605b161",
            "matchCriteriaId" : "6ADD5FBC-F096-45AA-A165-81674CCA29E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A76E53-8352-4639-97D4-EC8CB1BED996"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-l23c605b160",
            "matchCriteriaId" : "CD2ACFBC-5642-4A27-85F9-AE47A6FA102B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A76E53-8352-4639-97D4-EC8CB1BED996"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00c00b225",
            "matchCriteriaId" : "BAC136D1-7DB7-4FBC-90B7-D8CD55FD7507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00c00b225",
            "matchCriteriaId" : "96FD5904-D024-4F9F-A375-00F698A9C7D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b167",
            "matchCriteriaId" : "AEB5A659-F5AF-42C6-A566-F2A2612D04CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-tl00c01b167",
            "matchCriteriaId" : "1D353EFD-BABD-4D35-A90C-312E9F43D20F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b167",
            "matchCriteriaId" : "B1262860-E63E-429F-9D8C-419CAEE30CAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-tl00c01b167",
            "matchCriteriaId" : "A748C158-C76C-4B43-BE2C-A3E76813B916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8145",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process."
      }, {
        "lang" : "es",
        "value" : "El módulo de llamada de smartphones P10 y P10 Plus con versiones de software anteriores a VTR-AL00C00B167, VTR-TL00C01B167, VKY-AL00C00B167 y VKY-TL00C01B167 tiene una vulnerabilidad de denegación de servicio. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa y la aplicación puede enviar un parámetro dado al módulo de llamada para cerrar inesperadamente la llamada y el proceso de comunicación de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b167",
            "matchCriteriaId" : "AEB5A659-F5AF-42C6-A566-F2A2612D04CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b167",
            "matchCriteriaId" : "B1262860-E63E-429F-9D8C-419CAEE30CAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-tl00c01b167",
            "matchCriteriaId" : "1D353EFD-BABD-4D35-A90C-312E9F43D20F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-tl00c01b167",
            "matchCriteriaId" : "A748C158-C76C-4B43-BE2C-A3E76813B916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8146",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process."
      }, {
        "lang" : "es",
        "value" : "El módulo de llamada de smartphones P10 y P10 Plus con versiones de software anteriores a VTR-AL00C00B167, VTR-TL00C01B167, VKY-AL00C00B167 y VKY-TL00C01B167 tiene una vulnerabilidad de denegación de servicio. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa y la aplicación puede enviar un parámetro dado al módulo de llamada para cerrar inesperadamente la llamada y el proceso de comunicación de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b167",
            "matchCriteriaId" : "AEB5A659-F5AF-42C6-A566-F2A2612D04CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b167",
            "matchCriteriaId" : "B1262860-E63E-429F-9D8C-419CAEE30CAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-tl00c01b167",
            "matchCriteriaId" : "1D353EFD-BABD-4D35-A90C-312E9F43D20F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-tl00c01b167",
            "matchCriteriaId" : "A748C158-C76C-4B43-BE2C-A3E76813B916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8147",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack."
      }, {
        "lang" : "es",
        "value" : "AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 con software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 con software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 con software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 con software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 con software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 con software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 con software V100R006C00, V200R001C00,E600 V200R008C00,S12700 con software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 con software V100R006C00, V100R007C00, V200R006C00,S2300 con software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 con software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 con software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 con software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 con software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 con software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 con software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 con software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 con software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00 y Secospace USG6600 V500R001C00SPC050 tienen una vulnerabilidad MaxAge LSA debido a una implementación OSPF incorrecta. Cuando el dispositivo recibe paquetes LSA especiales, la propiedad age del LS (Link Status) sería igual al de MaxAge, 3600 segundos. Un atacante podría explotar esta vulnerabilidad para envenenar la tabla de rutas y lanzar un ataque de denegación de servicio (Dos)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ac6005_firmware:v200r006c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC214387-5475-4906-9DB0-37904F155D3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ac6005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3681DA94-7184-4DC6-BD73-FCE2DB808F07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ac6605_firmware:v200r006c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E1DFD0-E93F-4603-A0BD-0A9BB47FEF83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E5AE5-EBB2-4E05-A3C7-E2CA54205FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c10cp0582t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C83A896-DBC0-4BF1-8FE8-1A69229C0AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c10hp0581t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50006839-F220-4076-A90C-3DC021E318E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c20spc026t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC958A4F-DE8B-452C-B8BB-F905E8FCE81B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r005c20spc026t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B375CF5B-F667-4C55-A0FA-A3341D07DC10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c20spc026t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B21485-192C-43E2-9F3A-26248F6EE3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB5929-1526-4910-BE22-07FCDDA06D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58D7203-2EE3-412A-B39C-94D82B0BBB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EF4F82-092F-4D19-832B-A174F7D47477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2DACA5-0AA6-419B-AC6A-8CC19326758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4492E892-7BE5-413A-AD53-2D39BD6626F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8A2875-0F7E-4790-A925-5999396B7578"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90200F0F-FF1A-42D9-A4EF-8DD5F6DB6BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B93684-6903-4A54-B631-15873D3D3744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDAAAC-0585-406F-B547-FB71C5352209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916288E9-1DAB-40BE-9C29-3E8603FC0F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1573B4A5-A78B-4A17-8E1B-673A11D18221"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42246DF-E736-4D98-AF73-3F5B731485D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31AD6C5-E687-47C9-8473-2486A6864128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A10D-8B77-4F43-87A9-803ED9855AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E574B02-F89A-4D5C-B462-3AF56F1C0A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5BEF58-456D-4983-B1CA-A53CE5C4E24E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374AD269-B0F4-4534-ABAC-D08343B2CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A6E23-962D-4A92-B14D-949B01489F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B676B444-6128-4A04-B3E7-421F74FA9CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6985E0-9375-4DE2-A879-AAACF923381C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FFE8C7-6E03-45ED-A581-779C75A5C432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_8800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494F5272-28A3-4CE8-BB15-A7532C6DBA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_8800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397A2479-E943-401D-80AA-CD647E4AD451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102751EB-C284-4983-BDFA-BFB634CB2CEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:e600_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE665712-0AF8-4671-9C3B-E2361B67A115"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:e600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021DF9A0-E7A9-4BB4-B8FA-49702D5F9E17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81469B-EC6C-493D-B632-4DF821A1F304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F2C4C7-3438-42B8-8999-C17E45C8CF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293C2F9D-AD5B-4BEA-AA5F-42867723A3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v100r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF14270-0AB9-425D-BB3C-53580F0E9568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37009595-4D24-4679-93B7-3DCB6812E904"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D875DDE-A38C-4C96-BE75-1CC5EAB7127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7CB90-6F2C-4012-8E57-F3B85F9D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v100r006c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFF6D05-BC82-4943-9D79-95CBEDD5CD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v100r006c05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B863F3A-38C5-4E36-8E71-713B12EE6889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6CC00C-1056-426B-9828-1A886F2C8D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEB211D-DF38-446D-8188-A1BA2B5055EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72A58FB-F7F5-4A4E-9B6A-F58A81B95040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C82DA6-8D95-45D2-B54C-CFE1AA9CC1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84857AE5-BCD7-4CD7-B1E0-EED6160189DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA81D41-E5C2-4788-A8EF-634B6273C454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r005c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47744E0-DAA5-41F5-8983-76457145029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F982369-1A22-4F39-90AD-ABB824845774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FA2FDA-DB2D-47D9-8017-0E5D4EC8D620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40EFA43-E71F-464D-829C-8D4C60A57765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17566603-275F-4E6B-B5D9-4A716EEC03DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39637990-2BCB-4429-B9FF-E24305D689B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02401EA6-28B6-4424-B182-C20CD081FFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v100r006c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA85312-3C8F-4F1F-8138-1A091C453193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v100r006c05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7D9357-D179-4B24-A073-17BA09AEC7E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9888DCAA-118C-4091-8425-8FBEE3AAABC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D75511-AFE2-4F56-BD35-38196442B369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3B89B7-1EA4-4597-BE48-67D0F79DB482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED7DFC5-846F-4F90-91A8-13E9E805C9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBB2862-B8A8-4723-AB8C-2F703204B4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8A7075-264D-4AD7-92AE-10EADC4F2CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r005c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA1D0A3-F955-4E7A-B52C-E9B483FB87DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193FCE7A-C793-446B-9C39-20597FA7BC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0090CFFF-364F-436E-AA48-4AF6DCE852CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5A65B0-66CC-456D-B356-FBF4B24E2EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v100r006c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E13B90-A465-4FBB-9D40-8EE380EB6CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD6E677-2031-4AC4-A5FE-DED60F789127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BAE79D-445C-4234-B520-A00073750161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD118E1-317E-4903-A4D0-51EBCFA58C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD601FFF-E623-4ADC-B286-D11B8004D7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5A6744-9B7F-4FF4-BE1B-AB6E6249ECE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA51B28-0130-4643-B45D-F2A74A08C9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EAEF900-7C8C-4569-B74B-A802F951CC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C2E728-E8F2-461D-A069-4BEC88B94FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6B13D4-07F3-4CB5-8194-89781E685A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5454BC21-A04F-4B3D-8533-2414B6E1BC8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFEF08E-54C5-4D60-AFF0-37B00D6E2DDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C60179-9ADC-4C50-8973-0767F295A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D3E8A8-0D1E-40E7-8F94-81BACD476750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v100r006c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F89C2BA-E029-4D8E-93FB-F72322B21450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336AA440-AEF4-482B-A037-8976DC38BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228D261C-DB88-4AEE-91D3-772DD28E4CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DE9FE-5EC9-462E-86F0-EE772C944DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4907FBB8-5157-460D-9240-DD7D610C0FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2898D6C5-77AB-4C1F-8134-B2DBD13EDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914C959A-3A3B-4B9C-BEF6-9EE129042C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF23DAE-1215-41B2-88C5-4436D846266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6B86F2-833E-4F41-A310-FC75A21D8241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A680CFA-9C46-453D-A5BC-8ED1EBD45C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCEA87EC-B795-41BB-AC08-2E2F4D77BEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B67169-BF28-4493-89E9-9AAB895D9456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C330A14-C941-4B28-AA9C-B78A96A9011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73AC184-24AF-4DE8-BDFC-D646475C21F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F94C9F0-CBB9-4F5C-8D5C-8DD1B420C0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6818ECD-730B-40D6-9108-B8540CC4BF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "939C73D9-E0E9-47A5-970E-6C84F5ECD2D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3C8988-A1FC-4B04-9134-F2BDDADEAFB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ECAC9C-B545-4DA7-9DC7-6B661B3465BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7B7285-F4C6-415C-A948-D7612750A77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD40F46-5E04-43F0-A2DB-0ACBEC92C53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6DC0AF-017E-41BC-A19D-F9AA055F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD08A9D-8391-4F67-A61B-D80950079CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC63F52-B7FE-4F43-9A70-ECB2D3621195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD4718F-473A-490E-8DFC-6A09FECDDD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4AF711-D921-4261-A459-2A0780EA951F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C306E48F-EE09-4C7D-9084-484245A1A9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8061AC8-1A89-4D3D-A95A-305EE65900A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49D3EAD-1EB3-4C62-80BA-4C9C3CE0408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65902ABB-3EF2-4C8B-BAC1-84BC585019BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75B012-A57D-4C6D-AB26-51D2ECC02F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DFF0C0-AA17-4AA1-A418-4759D1A58852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F05D5-BA7D-485B-91C2-273349335CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E180AC6-B8CA-4733-82A1-8BA7D0B0B683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937381A6-259E-4FC3-837D-686ECCB4957F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1C2351-2403-4259-9113-031DD4AE39BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E38DC13-7D02-4C04-9569-FC6365A06F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F37BC5-3B25-4E30-A1CA-5ACFA46119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC83D96A-728C-40C1-97F5-BE079A39D724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473B6E52-E60F-4D3C-9028-E362DF2A8327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632DC1D-0CB9-4493-9270-436139C88623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8AE44D-1924-4C01-B4B9-CC5BF485A3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886E9D1F-25FA-41FA-A64B-E42B9910D2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7DB9D3-BB34-49BE-8302-A054D79FE8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9300_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ACAD052-796D-428E-95B1-65099952B773"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EC926-50C6-4CBE-BB6F-56F3A6287DEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F0B3D-1923-42C3-A3DB-03D11BE059D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB6ED15-477B-4BB5-AA94-0D7897FBD962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AD9ACA-E0C3-4096-BE50-94E717CDA318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325D6523-A07A-48D4-AD44-CF838BD77432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170720-01-ospf-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170720-01-ospf-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8148",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the race condition cause null pointer accessing during the application access shared resource, which make the system reboot."
      }, {
        "lang" : "es",
        "value" : "El controlador de audio en los smartphones P9 con versiones de software anteriores a EVA-AL10C00B389 tiene una vulnerabilidad de denegación de servicio (DoS). Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphonne y una condición de carrera causaría el acceso a un puntero nulo cuando la aplicación accede a los recursos compartidos, lo que haría que se reinicie el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b389",
            "matchCriteriaId" : "6D00EE44-7EB9-4B40-ACB2-473550BDFC8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8149",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system reboot, causing out-of-bounds memory read which can continuous system reboot."
      }, {
        "lang" : "es",
        "value" : "Los cargadores de arranque de los móviles Huawei P10 y P10 Plus con versiones de software anteriores a Victoria-L09AC605B162, Victoria-L29AC605B162 y Vicky-L29AC605B162 tienen una vulnerabilidad de acceso a memoria fuera de límites debido a la falta de validación de parámetros. Un atacante con privilegios root de un sistema Android podría engañar a un usuario para que instale una app maliciosa. La app puede modificar datos específicos para provocar un desbordamiento de búfer en el próximo reinicio del sistema, provocando una lectura de memoria fuera de límites, lo que puede da lugar a que el sistema se reinicie continuamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-l09ac605b162",
            "matchCriteriaId" : "4015216C-FA85-4D24-BE10-DC6AF9E4B0B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-l29ac605b162",
            "matchCriteriaId" : "FC987861-3185-43C3-BE63-D25C01174945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-l29ac605b162",
            "matchCriteriaId" : "5D22A313-6919-4719-92EB-BEE566464720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8150",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Los cargadores de arranque de los móviles Huawei P10 y P10 Plus con versiones de software anteriores a Victoria-L09AC605B162, Victoria-L29AC605B162 y Vicky-L29AC605B162 tienen una vulnerabilidad de escritura de memoria arbitraria debido a la falta de validación de parámetros. Un atacante con privilegios root de un sistema Android podría engañar a un usuario para que instale una app maliciosa. La app puede modificar datos específicos para provocar una escritura de memoria en el siguiente reinicio lo que puede provocar que el sistema se reinicie continuamente o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-l09ac605b162",
            "matchCriteriaId" : "4015216C-FA85-4D24-BE10-DC6AF9E4B0B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-l29ac605b162",
            "matchCriteriaId" : "FC987861-3185-43C3-BE63-D25C01174945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-l29ac605b162",
            "matchCriteriaId" : "5D22A313-6919-4719-92EB-BEE566464720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ale-l21c113b566",
            "matchCriteriaId" : "6278E712-BBC7-4481-858C-44D1F2F0E65A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2B9076-0E47-461F-BD6C-69FAB7572701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c432b391",
            "matchCriteriaId" : "9B903510-A6AF-4650-A7BC-40D8C8052D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c576b386",
            "matchCriteriaId" : "FFCD40B3-E3DE-496D-9A69-419E00D59092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c605b390",
            "matchCriteriaId" : "ED4A4D14-2305-4CDB-97AF-53BB2F47D8D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c635b387",
            "matchCriteriaId" : "63E9FEC1-EF28-45B6-B826-77CB19DCEF0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c636b388",
            "matchCriteriaId" : "CF80DCC9-7AA7-443A-BE95-F399E7088D01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c10b390",
            "matchCriteriaId" : "B3EABC75-30C8-4E46-8F48-57560111B190"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c432b388",
            "matchCriteriaId" : "17F71652-73C4-4CEC-8B45-A98FE74E7396"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c605b390",
            "matchCriteriaId" : "08B08602-B43E-4C14-A0CF-7BCD1F8C7C4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c636b391",
            "matchCriteriaId" : "70D315BD-B01D-4006-B0B8-F7741F2CE5F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8151",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without authentication."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor 5S con versiones de software anteriores a TAG-TL00C01B173 tienen una vulnerabilidad de omisión de autenticación debido a un diseño incorrecto de algunos componentes. Un atacante podría conseguir el smartphone de un usuario e instalar apps maliciosas que le permitan reiniciar la contraseña y la huella dactilar del teléfono sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tag-tl00c01b173",
            "matchCriteriaId" : "1695FDF9-90BE-4923-8EE3-1D7BF86F168A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867F1870-C9B8-402A-99AB-D321EEB564C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-03-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-03-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8152",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit this vulnerability to restore the phone to factory settings."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor 5S con versiones de software anteriores a TAG-TL00C01B173 tiene una vulnerabilidad de seguridad de omisión de Factory Reset Protection (FRP) debido a un diseño incorrecto. Un atacante puede acceder a la página de restablecimiento a datos de fábrica sin autorización con tan solo introducir un código especial. El atacante puede explotar esta vulnerabilidad para restaurar el teléfono a la configuración de fábrica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tag-tl00c01b173",
            "matchCriteriaId" : "1695FDF9-90BE-4923-8EE3-1D7BF86F168A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867F1870-C9B8-402A-99AB-D321EEB564C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8153",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access permission. Successful exploit could lead to resource occupation or information leak."
      }, {
        "lang" : "es",
        "value" : "Huaweii VMall para Android en versiones anteriores a la 1.5.8.5 tiene una vulnerabilidad de elevación de privilegios debido a un diseño incorrecto. Un atacante podría engañar a los usuarios para que instale una app maliciosa que envíe peticiones HTTP y ejecute código JavaScript en páginas web sin obtener el permiso de acceso a internet. Un exploit exitoso podría provocar la ocupación de recursos o fugas de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:vmall:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "1.5.8.5",
            "matchCriteriaId" : "B106CD65-7676-4F56-B1CD-55EB8A6A9A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8155",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and execute them without authentication. Successful exploit could allow the attacker to take control over the outdoor unit."
      }, {
        "lang" : "es",
        "value" : "La unidad externa del producto CPE (Customer Premise Equipment) B2338-168 V100R001C00 tiene una vulnerabilidad de falta de autenticación en un puerto determinado. Después de acceder a la red entre las unidades internas y las unidades externas del CPE, un atacante puede enviar comandos a un puerto determinado de la unidad externa y ejecutarlos sin autenticación. Una explotación exitosa podría permitir que el atacante tome el control de la unidad externa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:b2338-168_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD789B64-6402-4D02-80F8-8B4AE3AD4D45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:b2338-168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2FBFF5-2AE7-4F3C-9D1D-111C07F75717"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8156",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow the attacker to take control over the outdoor unit."
      }, {
        "lang" : "es",
        "value" : "La unidad externa del producto CPE (Customer Premise Equipment) B2338-168 V100R001C00 tiene una vulnerabilidad de falta de autenticación en el puerto en serie. Un atacante podría acceder al puerto en serie de la placa base de la unidad externa e iniciar sesión en el CPE sin autenticación. Un exploit exitoso podría permitir que el atacante tome el control de la unidad externa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:b2338-168_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD789B64-6402-4D02-80F8-8B4AE3AD4D45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:b2338-168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2FBFF5-2AE7-4F3C-9D1D-111C07F75717"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8157",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "OceanStor 5800 V3 con software V300R002C00 y V300R002C10, OceanStor 6900 V3 V300R001C00 tiene una vulnerabilidad de fuga de información. Los productos utilizan TLS1.0 para cifrar. Los atacantes podrían explotar las vulnerabilidades del TLS1.0 para descifrar datos y así obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F238EE9F-FDA9-4A95-84DA-CE2A5E8D3F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC607F8-2E3C-4B6C-AA44-A3FD66644D93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_5800_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524A38D1-1A6A-4969-8DAB-D7A3809F0E62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_6900_v3_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3DCBCB-33A8-46E8-944C-3CFAE33BF390"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_6900_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF2739C-77B6-48A9-AB95-4B4F9BF87F72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8158",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine. An authenticated attacker could create a large number of virtual machine (VM) processes to exhaust system resources. Successful exploit could make new VMs unavailable."
      }, {
        "lang" : "es",
        "value" : "FusionCompute V100R005C00 y V100R005C10 tiene una vulnerabilidad de autorización incorrecta debido a una configuración de permisos incorrecta para un archivo determinado en la máquina host. Un atacante autenticado podría crear un gran número de procesos de máquina virtual para agotar los recursos del sistema. Un exploit exitoso podría hacer que las nuevas máquinas virtuales no estén disponibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:fusioncompute:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F40C57C-331D-4ED6-98A2-47AB5272EB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:fusioncompute:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FBF1BD-8FB0-4C5B-A05E-1FD26F4C4466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170927-01-dos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170927-01-dos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8159",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but it later accesses that variable using a type that is different with the original type when do certain register operation. Successful exploit could result in buffer overflow then may cause malicious code execution."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software AGS-L09C233B019, AGS-W09C233B019, KOB-L09C233B017 o KOB-W09C233B012 tienen una vulnerabilidad de confusión de tipos. El programa inicializa una variable utilizando un tipo, pero luego accede a esa variable utilizando un tipo diferente del original cuando realiza determinadas operaciones de registro. Un exploit exitoso podría resultar en un desbordamiento de búfer que podría causar la ejecución de código malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:agassi-l09hn_firmware:ags-l09c233b019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C80E3F6-CAAB-4E42-A263-C3B133040FE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:agassi-l09hn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3498A696-E831-453C-ABCE-77A9908E96F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:agassi-w09hn_firmware:ags-w09c233b019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8DE54A-E45A-4676-BD89-28C36DA471C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:agassi-w09hn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF342830-41FF-4E16-9090-2AB68DD822A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:kobe-l09ahn_firmware:kob-l09c233b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE753F-E19D-4F36-93E6-DFBD5BC9EF31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:kobe-l09ahn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C4B423-90C0-4A6E-A246-1A8BB7282AC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:kobe-w09chn_firmware:kob-w09c233b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643CA10D-515D-4D24-A1A5-D31DEA91D05C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:kobe-w09chn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAF9F7-A010-4349-BC8B-B3D6D37C3460"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171018-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171018-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8160",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172 versions,Vicky-AL00CC768B122,Vicky-TL00AC01B167,Earlier than Victoria-AL00AC00B172 versions,Victoria-TL00AC00B123,Victoria-TL00AC01B167 has a use after free (UAF) vulnerability. An attacker can trick a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador Madapt de determinados smartphones Huawei con software anterior a las versiones Vicky-AL00AC00B172, Vicky-AL00CC768B122, Vicky-TL00AC01B167, anterior a las versiones Victoria-AL00AC00B172 ,Victoria-TL00AC00B123 y Victoria-TL00AC01B167 tiene una vulnerabilidad de uso de memoria previamente liberada. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa con un nivel alto de privilegios para explotar esta vulnerabilidad. Una explotación exitosa podría provocar la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-al00ac00b172",
            "matchCriteriaId" : "474F668F-5F41-4214-AD34-455AB7250C53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vicky-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014F48F-8F37-41FA-A7DE-F281B3BFFA99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00c_firmware:vicky-al00cc768b122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3916C89C-940E-4B44-AAB0-91F50D32EC27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vicky-al00c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D76C82-BFC2-42A0-94FF-BD81B9F7644B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-tl00a_firmware:vicky-tl00ac01b167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362616DC-D15C-4AC9-A629-2BE63BFAA43B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vicky-tl00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4CEA52-F123-43B2-BB57-3C893C73356E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:victoria-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-al00ac00b172_",
            "matchCriteriaId" : "DE7E5CE1-EA78-40F1-A2A3-E0BA0EC5F5B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:victoria-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A7F7F64-E8ED-4D47-8FA5-54A3F9965E3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:victoria-tl00a_firmware:victoria-tl00ac00b123:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6179F679-DD1F-44D1-AC41-25D9614497FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:victoria-tl00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A28FFD6-9D49-4962-A508-E208E915326A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:victoria-tl00a_firmware:victoria-tl00ac01b167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B5D06B-EBB2-4F62-A2CA-B9DC573378D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:victoria-tl00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A28FFD6-9D49-4962-A508-E208E915326A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8161",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions have Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Swype and can perform some operations to update the Google account. As a result, the FRP function is bypassed."
      }, {
        "lang" : "es",
        "value" : "Los smartphones EVA-L09 con software anterior a las versiones EVA-L09C25B150CUSTC25D003, EVA-L09C440B140, EVA-L09C464B361 y EVA-L09C675B320CUSTC675D004 tienen una vulnerabilidad de omisión de Factory Reset Protection (FRP). Cuando se reconfigura el teléfono móvil utilizando la función Factory Reset Protection (FRP), un atacante puede iniciar sesión en Swype y realizar determinadas operaciones para actualizar la cuenta de Google. El resultado es que la función FRP se omite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c25b150custc25d003",
            "matchCriteriaId" : "BEA0A8C6-485E-49D4-A924-2671F594EB7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c440b140",
            "matchCriteriaId" : "3A6644E1-0919-4B43-B2CE-9C05A42726B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c464b361",
            "matchCriteriaId" : "5BB54335-DBFD-4062-BDA3-D595BA872DA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "l09c675b320custc675d004",
            "matchCriteriaId" : "D09445B1-BEBB-47B2-8270-613E9DE14897"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171013-01-frpbypass-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171013-01-frpbypass-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8162",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have a DoS vulnerability. Due to incorrect malformed message processing logic, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause stack overflow and make a service unavailable."
      }, {
        "lang" : "es",
        "value" : "AR120-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 con software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 con software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 con software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 con software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 con software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 con software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 con software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; NetEngine16EX con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; SMC2.0 con software V100R003C10, V100R005C00, V500R002C00, V600R006C00; SRG1300 con software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 con software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; y SRG3300 con software V200R006C10, V200R007C00, V200R008C20, V200R008C30 tienen una vulnerabilidad de denegación de servicio (DoS). A causa de una lógica de procesamiento de mensajes mal formados incorrecta, un atacante remoto autenticado podría enviar un mensaje especialmente manipulado al dispositivo objetivo. Una explotación exitosa de esta vulnerabilidad podría provocar un desbordamiento de pila y hacer que un servicio no esté disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F5C31-6000-48C4-A9CA-D3F91A0549E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611E69A3-AB62-4584-B611-93583D84FCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E7481E-B5B8-481C-AC35-A8029AA2DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E7CCC4-60A8-48FA-A9EA-7A327B3A29B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8163",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause out-of-bounds read and system crash."
      }, {
        "lang" : "es",
        "value" : "AR120-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 con software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 con software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 con software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 con software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 con software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 con software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 con software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; NetEngine16EX con software V200R006C10, V200R007C00, V200R008C20, V200R008C30; SMC2.0 con software V100R003C10, V100R005C00, V500R002C00, V600R006C00; SRG1300 con software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 con software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; y SRG3300 con software V200R006C10, V200R007C00, V200R008C20, V200R008C30 tienen una vulnerabilidad de lectura fuera de límites. A causa de una validación de entradas insuficiente, un atacante remoto autenticado podría enviar un mensaje especialmente manipulado al dispositivo objetivo. Una explotación exitosa de esta vulnerabilidad podría provocar una lectura fuera de límites y el cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F5C31-6000-48C4-A9CA-D3F91A0549E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611E69A3-AB62-4584-B611-93583D84FCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E7481E-B5B8-481C-AC35-A8029AA2DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E7CCC4-60A8-48FA-A9EA-7A327B3A29B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8166",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor V9 con versiones de software anteriores a Duke-AL20C00B195 tienen una vulnerabilidad de omisión de App Lock. Un atacante podría realizar operaciones específicas para omitir App Lock para utilizar apps en el teléfono objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-al20c00b195",
            "matchCriteriaId" : "0B2A62C1-15D6-4DC8-AEE3-C9E3A5766697"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171019-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171019-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8167",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device to restart."
      }, {
        "lang" : "es",
        "value" : "Los productos de firewall de Huawei USG9500 V500R001C50 tienen una vulnerabilidad de denegación de servicio (DoS). Un atacante remoto que controle el dispositivo emparejado podría explotar la vulnerabilidad enviando paquetes IKE mal formados al dispositivo objetivo. Una explotación exitosa de la vulnerabilidad podría hacer que el dispositivo se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-firewall-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-firewall-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8168",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item, the information transmitted by a transmission channel is not encrypted. An attacker accessing the internal network may obtain sensitive information transmitted."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack con software V100R006C00SPC102(NFV) y V100R006C10 tiene una vulnerabilidad de fuga de información. Debido a un elemento de configuración incorrecto, la información transmitida por un canal de transmisión no está cifrada. Un atacante que acceda a la red interna puede obtener la información sensible que se transmita."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F554A-5943-4449-9FF8-A7F7BC4E02CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-openstack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-openstack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8169",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software anterior a las versiones VIE-L09C40B360 tienen una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root. La app podría enviar un parámetro específico al smartphone, provocando que este se reinicie o que se ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l09c40b360",
            "matchCriteriaId" : "15D295EA-86C2-4EE2-801E-E5F3A46E8B3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vie-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65CF98-06E4-46F7-BC6D-56F16667F2B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8170",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:03.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software anterior a las versiones VIE-L09C40B360 tienen una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root. La app podría enviar un parámetro específico al smartphone, provocando que este se reinicie o que se ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l09c40b360",
            "matchCriteriaId" : "15D295EA-86C2-4EE2-801E-E5F3A46E8B3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vie-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65CF98-06E4-46F7-BC6D-56F16667F2B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8171",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to bypass the Google account verification. As a result, the FRP function is bypassed."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software anterior a las versiones Vicky-AL00AC00B172D tienen una vulnerabilidad de seguridad de omisión de Factory Reset Protection (FRP). Cuando se reconfigura el teléfono móvil utilizando la función Factory Reset Protection (FRP), un atacante puede iniciar sesión en modo Talkback y realizar determinadas operaciones para omitir la verificación de la cuenta de Google. El resultado es que la función FRP se omite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-al00ac00b172d",
            "matchCriteriaId" : "B12113B9-205F-41D3-BCE0-ECFD17F96294"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-frpbypass-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-frpbypass-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8172",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart."
      }, {
        "lang" : "es",
        "value" : "El servicio Isub en los smartphones P10 Plus y P10 en versiones anteriores a VKY-AL00C00B157 y VTR-AL00C00B157 tiene una vulnerabilidad de denegación de servicio (DoS). Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone que pueda enviar un parámetro dado a una interfaz determinada, lo que puede provocar un acceso a arrays fuera de límites que resultaría en el reinicio del smartphone."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b157",
            "matchCriteriaId" : "0732A1BD-984A-40C4-B425-9751A4B3CD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-al00c00b157",
            "matchCriteriaId" : "BA6D9C87-08D3-4133-8AA2-F382F26C5A6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE8B6F1-FD2D-489A-86CE-53945949D362"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99370",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8173",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B151 versions,earlier than VTR-L29C10B151 versions,earlier than Vicky-AL00AC00B162 versions,earlier than Victoria-AL00AC00B167 versions,earlier than Warsaw-AL00C00B200 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by some secret code and can perform some operations to update the Google account. As a result, the FRP function is bypassed."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Maya-L02, VKY-L09, VTR-L29, Vicky-AL00A, Victoria-AL00A, Warsaw-AL00 con versiones de software anteriores a Maya-L02C636B126, VKY-L29C10B151, VTR-L29C10B151, Vicky-AL00AC00B162, Victoria-AL00AC00B167 y Warsaw-AL00C00B200 tienen una vulnerabilidad de omisión de Factory Reset Protection (FRP). Cuando se reconfigura el teléfono móvil utilizando la función Factory Reset Protection (FRP), un atacante puede conectarse al flujo de configuración mediante algún código secreto y realizar determinadas operaciones para actualizar la cuenta de Google. El resultado es que la función FRP se omite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:maya-l02_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "maya-l02c636b126",
            "matchCriteriaId" : "EA691AD9-7B27-45D7-9597-68AC69BABCE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:maya-l02:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCAE98E-0882-4B83-A4B2-9EBFAFBC875A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vky-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-l29c10b151",
            "matchCriteriaId" : "2BB957C5-EE90-4A85-ACB0-C4FBD1AB93EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vky-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315A5851-5BEE-4393-8530-A5E3E17BAEB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vky-l29_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vtr-l29c10b151",
            "matchCriteriaId" : "97108578-607F-4FEF-B8BB-4CC88BFE9B38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vky-l29:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582BA871-A84E-4629-8B1C-19FC1B430FB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-al00ac00b162",
            "matchCriteriaId" : "46F21261-B04E-40FE-BE5F-71A9752A8EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vicky-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014F48F-8F37-41FA-A7DE-F281B3BFFA99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:victoria-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-al00ac00b167",
            "matchCriteriaId" : "0BCE3E06-33A9-4F4F-89B5-BAC1E825CBE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:victoria-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A7F7F64-E8ED-4D47-8FA5-54A3F9965E3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:warsaw-al00_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "warsaw-al00c00b200",
            "matchCriteriaId" : "43550C96-8F74-4952-9B59-631BB5714EA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:warsaw-al00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72345E1-8472-4EF0-9B97-A0E0CFB6CA58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170715-01-frpbypass-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170715-01-frpbypass-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8174",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.130",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on the transmission links."
      }, {
        "lang" : "es",
        "value" : "Huawei USG6300 V100R001C30SPC300 y USG6600 con versiones de software V100R001C30SPC500, V100R001C30SPC600, V100R001C30SPC700 y ,V100R001C30SPC800 tiene una vulnerabilidad de algoritmo débil. Los atacantes podrían explotar esta vulnerabilidad de algoritmo débil para descifrar el texto cifrado y provocar fugas de información confidencial en los enlaces de transmisión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFA27DF-1E1A-4BD3-B8AB-44380DC96914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD690C0B-5478-4198-B439-65A3BCD715D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC8712D-57B8-4840-9A64-52D0C2C947D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF27A0E-D1EA-40F0-8105-7F2AC934D170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8FAC44-6E1C-4345-BDE9-1BF138D079AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8175",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot."
      }, {
        "lang" : "es",
        "value" : "El controlador Bastet de algunos smartphones Huawei con software anterior a las versiones Vicky-AL00AC00B167, Victoria-AL00AC00B167 y Warsaw-AL00C00B191 tiene una vulnerabilidad de validación insuficiente de valores de entrada debido a la falta de validación de parámetros. Un atacante podría engañar a un usuario para que instale una app maliciosa. La app puede modificar un parámetro específico para hacer que el sistema se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:vicky-al00a:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-al00ac00b167",
            "matchCriteriaId" : "45D4D70E-9172-4F75-ACF7-C956481473B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:victoria-al00a:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "victoria-al00ac00b167",
            "matchCriteriaId" : "1B948367-9009-439D-846D-6F6BBDB57D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:warsaw-al00:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "warsaw-al00c00b191",
            "matchCriteriaId" : "1C09AC24-0D9F-41BE-A527-99A1D06C651B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8177",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking."
      }, {
        "lang" : "es",
        "value" : "La app HiWallet de Huawei en versiones anteriores a la 5.0.3.100 no es compatible con la verificación de firmas para los archivos APK. Un atacante podría explotar esta vulnerabilidad para secuestrar la APK y subir un archivo APK modificado. Una explotación exitosa podría conducir al secuestro de la app."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hiwallet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.3.100",
            "matchCriteriaId" : "7F61BDD5-307E-4C61-9766-F231DC299FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-app-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-app-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8178",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to send email that storing malicious code to a smartphone and waiting for a user to access this email that triggers execution of the code. An exploit could allow the attacker to execute arbitrary script code on the affected device."
      }, {
        "lang" : "es",
        "value" : "La app Email de Huawei para los smartphones Vicky-AL00 con versiones de software anteriores a VKY-AL00C00B171 tiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente. Un atacante remoto podría explotar esta vulnerabilidad para enviar un email que contenga código malicioso a un smartphone y esperar a que el usuario abra ese email y ejecutar así el código. Un exploit exitoso podría permitir que el atacante ejecute código script arbitrario en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vky-al00c00b171",
            "matchCriteriaId" : "B49B9DD8-EDA2-4BFF-A861-79DF05787634"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vicky-al00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D59283D-61A6-4ABC-830F-F551591D88E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170908-01-email-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170908-01-email-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8179",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation."
      }, {
        "lang" : "es",
        "value" : "El controlador de la cámara de la plataforma MTK en los smartphones Huawei con versiones de software anteriores a Nice-AL00C00B155 tiene una vulnerabilidad de desbordamiento de búfer. Debido a la verificación insuficiente de los valores de entrada, un atacante podría engañar a un usuario para que instale una aplicación maliciosa que tenga un privilegio especial y envíe un parámetro específico al controlador del smartphone, provocando un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b155",
            "matchCriteriaId" : "5A82687F-6DD5-454B-B816-8423C55E4E2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101956",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8180",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation."
      }, {
        "lang" : "es",
        "value" : "El controlador de la cámara de la plataforma MTK en los smartphones Huawei con versiones de software anteriores a Nice-AL00C00B155 tiene una vulnerabilidad de desbordamiento de búfer. Debido a la verificación insuficiente de los valores de entrada, un atacante podría engañar a un usuario para que instale una aplicación maliciosa que tenga un privilegio especial y envíe un parámetro específico al controlador del smartphone, provocando un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b155",
            "matchCriteriaId" : "5A82687F-6DD5-454B-B816-8423C55E4E2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8181",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation."
      }, {
        "lang" : "es",
        "value" : "El controlador de la cámara de la plataforma MTK en los smartphones Huawei con versiones de software anteriores a Nice-AL00C00B155 tiene una vulnerabilidad de escritura de memoria arbitraria. Debido a la verificación insuficiente de los valores de entrada, un atacante podría engañar a un usuario para que instale una aplicación maliciosa que tenga un privilegio especial y envíe un parámetro específico al controlador del smartphone, provocando un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b155",
            "matchCriteriaId" : "5A82687F-6DD5-454B-B816-8423C55E4E2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8182",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memory out-of-bound read."
      }, {
        "lang" : "es",
        "value" : "La plataforma MTK en los smartphones Huawei con versiones de software anteriores a Nice-AL00C00B160 y Nice-AL10C00B140 tiene una vulnerabilidad de lectura fuera de límites. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar un parámetro dado y así provocar una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al10c00b140",
            "matchCriteriaId" : "DE20C519-375B-4F63-9C58-B21B555698C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b160",
            "matchCriteriaId" : "18483DD5-EF71-4072-9F15-F2C2D074D1EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8183",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage."
      }, {
        "lang" : "es",
        "value" : "La plataforma MTK en los smartphones Huawei con versiones de software anteriores a Nice-AL00C00B160 y Nice-AL10C00B140 tiene una vulnerabilidad de acceso a cualquier memoria. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar un parámetro dado y así provocar una vulnerabilidad de acceso a cualquier memoria, conduciendo a una fuga de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al10c00b140",
            "matchCriteriaId" : "DE20C519-375B-4F63-9C58-B21B555698C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b160",
            "matchCriteriaId" : "18483DD5-EF71-4072-9F15-F2C2D074D1EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8184",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage."
      }, {
        "lang" : "es",
        "value" : "La plataforma MTK en los smartphones Huawei con versiones de software anteriores a Nice-AL00C00B160 y Nice-AL10C00B140 tiene una vulnerabilidad de acceso a cualquier memoria. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar un parámetro dado y así provocar una vulnerabilidad de acceso a cualquier memoria, conduciendo a una fuga de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al10c00b140",
            "matchCriteriaId" : "DE20C519-375B-4F63-9C58-B21B555698C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nice-al00c00b160",
            "matchCriteriaId" : "18483DD5-EF71-4072-9F15-F2C2D074D1EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05921642-7BB4-4E98-8F6E-FEB142BD2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8185",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "ME906s-158 en versiones anteriores a ME906S_Installer_13.1805.10.3 tiene una vulnerabilidad de elevación de privilegios. Un atacante podría explotar esta vulnerabilidad para modificar la información de configuración para que contenga archivos maliciosos y engañar a los usuarios para que ejecuten esos archivos, provocando la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:me906s-158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "me906s_installer_13.1805.10.3",
            "matchCriteriaId" : "B8F063E7-F6B1-4744-ADFD-58C0C3B5DEB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:me906s-158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D183D335-6EB8-4168-99F8-AA7CE766D319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8186",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot."
      }, {
        "lang" : "es",
        "value" : "El controlador Bastet de algunos smartphones Huawei con versiones de software anteriores a MHA-AL00BC00B231 tiene una vulnerabilidad de denegación de servicio (DoS) debido a la falta de validación de parámetros. Un atacante podría engañar a un usuario para que instale una app maliciosa. La app puede modificar un parámetro específico para hacer que el sistema se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:mha-al00a:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00bc00b231",
            "matchCriteriaId" : "BCD56404-D408-4E21-B979-3184201A44B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-dos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-dos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8188",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de inyección de comandos. Dada la ausencia de validación, un atacante con privilegios elevados podría inyectar código malicioso en algún módulo de los productos afectados, provocando la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8189",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de salto de directorio. A causa de la validación insuficiente de directorios, un atacante con privilegios elevados podría explotar esta vulnerabilidad para sobrescribir archivos, haciendo que los servicios funcionen de manera anormal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8190",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de verificación incorrecta de firma criptográfica. Este software no verifica la firma criptográfica. Un atacante con privilegios elevados podría explotar esta vulnerabilidad para inyectar software malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8191",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de algoritmo criptográfico débil. Los atacantes podría explotar esta vulnerabilidad para descifrar el texto cifrado y provocar fugas de información en los enlaces de transmisión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102282",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8192",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00 tiene una vulnerabilidad de autorización incorrecta. Debido a esta autorización incorrecta, un atacante con privilegios bajos podría explotar esta vulnerabilidad para obtener la autorización de operación de determinados directorios, provocando el escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1DB1F-5CAC-486C-AECF-59E9793F50AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-fustionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-fustionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8193",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de inyección de comandos. Debido a la validación insuficiente de los valores de entrada en un puerto, un atacante local autenticado podría explotar la vulnerabilidad para obtener privilegios root enviando un mensaje con comandos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8194",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de autenticación incorrecta. Debido a la autenticación incorrecta en un puerto, un atacante remoto autenticado podría explotar esta vulnerabilidad para ejecutar más operaciones enviando un mensaje REST manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-02-OpenStack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102209",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-02-OpenStack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8195",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message."
      }, {
        "lang" : "es",
        "value" : "FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de autenticación incorrecta. Debido a la autenticación incorrecta en un puerto, un atacante remoto autenticado podría explotar esta vulnerabilidad para ejecutar más operaciones enviando un mensaje REST manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D904308-A2C2-4777-ABA5-B2B11CE14E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8196",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable."
      }, {
        "lang" : "es",
        "value" : "FusionSphere V100R006C00SPC102(NFV) tiene una vulnerabilidad de autorización incorrecta. Un atacante autenticado podría ejecutar comandos que no debería tener permiso para realizar, pudiendo consultar, modificar y eliminar determinados datos del servicio y hacer que el servicio no esté disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6C5C1-9597-4644-BB52-A464CDF976A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8197",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch a command injection attack and execute system commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere V100R006C00SPC102(NFV) tiene una vulnerabilidad de inyección de comandos. Un atacante remoto autenticado podría manipular paquetes con cadenas maliciosas y enviarlos a un dispositivo objetivo. Su explotación exitosa podría permitir que el atacante lance un ataque de inyección de comandos y ejecute comandos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6C5C1-9597-4644-BB52-A464CDF976A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8198",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands."
      }, {
        "lang" : "es",
        "value" : "FusionSphere V100R006C00SPC102(NFV) tiene una vulnerabilidad de inyección SQL. Un atacante remoto autenticado podría manipular mensajes de la interfaz incorporando sentencias SQL maliciosas y enviarlos a un dispositivo objetivo. Su explotación exitosa podría permitir que el atacante lance un ataque de inyección SQL y ejecute comandos SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6C5C1-9597-4644-BB52-A464CDF976A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8199",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:04.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot."
      }, {
        "lang" : "es",
        "value" : "MAX PRESENCE V100R001C00, TP3106 V100R002C00 y TP3206 V100R002C00 tiene una vulnerabilidad de lectura fuera de límites en el protocolo H323. Un atacante podría iniciar sesión en el sistema como un usuario y enviar paquetes manipulados a los productos afectados. Dada la verificación insuficiente de los paquetes, una explotación exitosa haría que el proceso se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101951",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8200",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot."
      }, {
        "lang" : "es",
        "value" : "MAX PRESENCE V100R001C00, TP3106 V100R002C00 y TP3206 V100R002C00 tiene una vulnerabilidad de lectura fuera de límites en el protocolo H323. Un atacante podría iniciar sesión en el sistema como un usuario y enviar paquetes manipulados a los productos afectados. Dada la verificación insuficiente de los paquetes, una explotación exitosa haría que el proceso se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101948",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8201",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a memory leak and eventual denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "MAX PRESENCE V100R001C00, TP3106 V100R002C00 y TP3206 V100R002C00 tiene una vulnerabilidad de fuga de memoria en el protocolo H323. Un atacante podría iniciar sesión en el sistema como un usuario y enviar paquetes manipulados a los productos afectados. Dado la verificación insuficiente de los paquetes, una explotación exitosa podría provocar una fuga de memoria y acabar con una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101952",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8202",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot."
      }, {
        "lang" : "es",
        "value" : "El controlador CameraISP de determinados smartphones Huawei con versiones de software anteriores a Prague-AL00AC00B205, Prague-AL00BC00B205, Prague-AL00CC00B205, Prague-TL00AC01B205 y Prague-TL10AC01B205 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante podría engañar a un usuario para que instale una app maliciosa que envíe un parámetro específico al controlador CameraISP del smartphone, provocando el reinicio del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-al00ac00b205",
            "matchCriteriaId" : "0BBFB499-51B9-4AE4-980E-79A00FB0D1B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E54AE0-CB98-47D2-AF52-516EADEF1F5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-al00bc00b205",
            "matchCriteriaId" : "F0FDB5A5-E2FA-49D9-A90A-5610E80FC52E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C5A77-355C-4797-8B3F-706C9A7C2F1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-al00cc00b205",
            "matchCriteriaId" : "DB9A057F-E073-49CE-B5C8-8AB6C1D86E0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BB6D0A-0545-456D-85CC-9A302BAC9A0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-tl00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-tl00ac01b205",
            "matchCriteriaId" : "13716CDC-BF66-441C-B9AC-2E0DE386F850"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-tl00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338F548C-DA7E-4EA4-9D54-7DDF1D5F99B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-tl10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-tl10ac01b205",
            "matchCriteriaId" : "6514DCDB-A643-4270-88D9-5464CAD82D77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-tl10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248688D-F679-42E9-BAA4-34187D5EC5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101959",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8203",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador Bastet de los smartphones Huawei Nova 2 Plus, Nova 2 con versiones de software anteriores a BAC-AL00C00B173 y PIC-AL00C00B173 tiene una vulnerabilidad de uso de memoria previamente liberada. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa con un nivel alto de privilegios para explotar esta vulnerabilidad. Una explotación exitosa podría causar la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "pic-al00c00b173",
            "matchCriteriaId" : "D88C2E8F-6B51-46AE-98E4-CBB1CB355F9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB1B51-6801-4C1C-ABBC-417295A4A280"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "bac-al00c00b173",
            "matchCriteriaId" : "F513F828-79FB-4CAA-812C-13D230A48055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101960",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8204",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution"
      }, {
        "lang" : "es",
        "value" : "El controlador Bastet de los smartphones Huawei Honor 9 con versiones de software anteriores a Stanford-AL10C00B175 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root. La app podría enviar un parámetro específico al controlador del smartphone, provocando la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-al10c00b175",
            "matchCriteriaId" : "09F80677-BA85-4301-AAE6-661E66EFF359"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101962",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8205",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador Bastet de los smartphones Huawei Honor 9 con versiones de software anteriores a Stanford-AL10C00B175 tiene una vulnerabilidad de desbordamiento de enteros debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root. La app podría enviar un parámetro específico al controlador del smartphone, provocando la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-al10c00b175",
            "matchCriteriaId" : "09F80677-BA85-4301-AAE6-661E66EFF359"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101963",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8206",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily."
      }, {
        "lang" : "es",
        "value" : "Los teléfonos móviles Honor 7 con versiones de software anteriores a NEM-L21C432B352 tienen una vulnerabilidad de omisión de App Lock. Un atacante podría realizar operaciones específicas para omitir App Lock para utilizar apps en el teléfono objetivo de manera temporal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_7_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-l21c432b352",
            "matchCriteriaId" : "8DF44611-5A84-4BEB-B433-2BD4338C2D76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_7_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E46255-44A2-407E-A0E6-2C2FCEFF4306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170829-01-applock-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170829-01-applock-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8207",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de los smartphones Huawei Honor 5C y Honor 6x con versiones de software anteriores a NEM-AL10C00B356 y Berlin-L21HNC432B360 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root del sistema Android. La app podría enviar un parámetro específico al controlador del smartphone, provocando el reinicio del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-al10c00b356",
            "matchCriteriaId" : "4FFA4D07-20C1-4D38-96A4-1A9963D884C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "berlin-l21hnc432b360",
            "matchCriteriaId" : "1C7B6ECD-6116-4604-B2AC-6BD605CADA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8208",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de los smartphones Huawei Honor 5C y Honor 6x con versiones de software anteriores a NEM-AL10C00B356 y Berlin-L21HNC432B360 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root del sistema Android. La app podría enviar un parámetro específico al controlador del smartphone, provocando el reinicio del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-al10c00b356",
            "matchCriteriaId" : "4FFA4D07-20C1-4D38-96A4-1A9963D884C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "berlin-l21hnc432b360",
            "matchCriteriaId" : "1C7B6ECD-6116-4604-B2AC-6BD605CADA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8209",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de los smartphones Huawei Honor 5C y Honor 6x con versiones de software anteriores a NEM-AL10C00B356 y Berlin-L21HNC432B360 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root del sistema Android. La app podría enviar un parámetro específico al controlador del smartphone, provocando el reinicio del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-al10c00b356",
            "matchCriteriaId" : "4FFA4D07-20C1-4D38-96A4-1A9963D884C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "berlin-l21hnc432b360",
            "matchCriteriaId" : "1C7B6ECD-6116-4604-B2AC-6BD605CADA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8210",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de los smartphones Huawei Honor 5C y Honor 6x con versiones de software anteriores a NEM-AL10C00B356 y Berlin-L21HNC432B360 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root del sistema Android. La app podría enviar un parámetro específico al controlador del smartphone, provocando el reinicio del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-al10c00b356",
            "matchCriteriaId" : "4FFA4D07-20C1-4D38-96A4-1A9963D884C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "berlin-l21hnc432b360",
            "matchCriteriaId" : "1C7B6ECD-6116-4604-B2AC-6BD605CADA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8211",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de los smartphones Huawei Honor 5C y Honor 6x con versiones de software anteriores a NEM-AL10C00B356 y Berlin-L21HNC432B360 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root del sistema Android. La app podría enviar un parámetro específico al controlador del smartphone, provocando el reinicio del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-al10c00b356",
            "matchCriteriaId" : "4FFA4D07-20C1-4D38-96A4-1A9963D884C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "berlin-l21hnc432b360",
            "matchCriteriaId" : "1C7B6ECD-6116-4604-B2AC-6BD605CADA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8212",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de los smartphones Huawei Honor 5C y Honor 6x con versiones de software anteriores a NEM-AL10C00B356 y Berlin-L21HNC432B360 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante puede engañar a un usuario para que instale una app maliciosa que tiene privilegios root del sistema Android. La app podría enviar un parámetro específico al controlador del smartphone, provocando el reinicio del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nem-al10c00b356",
            "matchCriteriaId" : "4FFA4D07-20C1-4D38-96A4-1A9963D884C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A135A0A-CBDE-4CFB-83EC-F1169D5AE71F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "berlin-l21hnc432b360",
            "matchCriteriaId" : "1C7B6ECD-6116-4604-B2AC-6BD605CADA21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07006372-CA98-4256-9C07-A2152A8D2BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8213",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module."
      }, {
        "lang" : "es",
        "value" : "Huawei SMC 2.0 con software V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00 y V600R006C00 tiene una vulnerabilidad de validación de entradas al gestionar una negociación TLS y DTLS con un certificado. Debido a la insuficiente validación de los certificados PKI recibidos, los atacantes remotos pueden explotar esta vulnerabilidad para cerrar inesperadamente el módulo TLS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F5C31-6000-48C4-A9CA-D3F91A0549E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2075745B-5A7D-47AC-8E3B-98F2AF49381B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc101b001t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F838DA-3682-47DC-9058-ABAA6327885F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A94E752-CF8C-40EF-9499-309616765C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C4F484-8300-4793-AE06-EC8D8730B93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F6D278-95B6-4451-A252-AD870F61026C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc201t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2AFB6B-038E-4F72-9875-7AC320ECB68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E7481E-B5B8-481C-AC35-A8029AA2DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E7CCC4-60A8-48FA-A9EA-7A327B3A29B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8214",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor 8, Honor V8, Honor 9, Honor V9, Nova 2, Nova 2 Plus, P9, P10 Plus y Toronto con versiones de software anteriores a FRD-AL00C00B391, FRD-DL00C00B391, KNT-AL10C00B391, KNT-AL20C00B391, KNT-UL10C00B391, KNT-TL10C00B391, Stanford-AL00C00B175, Stanford-AL10C00B175, Stanford-TL00C01B175, Duke-AL20C00B191, Duke-TL30C01B191, Picasso-AL00C00B162, Picasso-TL00C01B162 , Barca-AL00C00B162, Barca-TL00C00B162, EVA-AL10C00B396SP03, EVA-CL00C92B396, EVA-DL00C17B396, EVA-TL00C01B396 , Vicky-AL00AC00B172, Toronto-AL00AC00B191 y Toronto-TL10C01B191 tienen una vulnerabilidad de omisión de verificación de código de desbloqueo. Un atacante con privilegios root de un móvil puede explotar esta vulnerabilidad para omitir la verificación del código de desbloqueo y desbloquear el cargador de arranque del teléfono móvil."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "frd-al00c00b391",
            "matchCriteriaId" : "194C8907-447B-4DCF-B412-1213EF9F1B23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72889681-6793-4451-B97F-F12B4B28372A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "frd-dl00c00b391",
            "matchCriteriaId" : "52F0EA2A-1026-41A4-84FF-0F9AE952ED07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72889681-6793-4451-B97F-F12B4B28372A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-al10c00b391",
            "matchCriteriaId" : "8726C588-5828-455A-BEE8-9DCC3F125F17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-al20c00b391",
            "matchCriteriaId" : "552AAA4E-B600-4CF9-B8A9-F1668F3D8A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-ul10c00b391",
            "matchCriteriaId" : "70ADD029-1A6E-41AD-8861-086DD06895BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-tl10c00b391",
            "matchCriteriaId" : "426A0167-5C96-4FB8-B2B7-6F6DF9499321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-al00c00b175",
            "matchCriteriaId" : "39942200-B302-4029-8398-B91A874C4185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-al10c00b175",
            "matchCriteriaId" : "09F80677-BA85-4301-AAE6-661E66EFF359"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-tl00c01b175",
            "matchCriteriaId" : "D1FD34EB-8972-4023-878E-08FCBADF97C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-al20c00b191",
            "matchCriteriaId" : "4FCC1F75-1B2B-4553-A73F-5631BC24F959"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-tl30c01b191",
            "matchCriteriaId" : "A350B04E-5411-46E1-83EE-23427F7E2478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "picasso-al00c00b162",
            "matchCriteriaId" : "B4F0500A-D9E3-46EB-AF66-87E62BC85021"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB1B51-6801-4C1C-ABBC-417295A4A280"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "picasso-tl00c01b162",
            "matchCriteriaId" : "E54D5FC2-A42B-4290-9CEA-99E1B22CB7D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB1B51-6801-4C1C-ABBC-417295A4A280"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "barca-al00c00b162",
            "matchCriteriaId" : "996C1EC9-F251-444F-B447-7D8FB46C293C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "barca-tl00c00b162",
            "matchCriteriaId" : "29C5BF15-67AE-4B91-A0AA-354FB85E0D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b396sp03",
            "matchCriteriaId" : "AD504F2F-FCB5-4E3E-88FB-3D5F164EC26A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl00c92b396",
            "matchCriteriaId" : "FDF40632-4AB0-46FA-B36F-C7795A28F94B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl00c17b396",
            "matchCriteriaId" : "1C864183-BD7C-46B5-AD94-3281B8044D31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl00c01b396",
            "matchCriteriaId" : "827596A6-E033-46C7-BEC9-A78CDA411875"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-al00ac00b172",
            "matchCriteriaId" : "0BE42535-6A21-4993-8F8B-2C54CE17F515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:toronto_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "toronto-al00ac00b191",
            "matchCriteriaId" : "DAF16468-2C98-4D95-8700-3CE1A533928B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:toronto:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD56AE7F-3CE7-4F9B-A187-77B074B1D4D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:toronto_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "toronto-tl10c01b191",
            "matchCriteriaId" : "66A9C781-A1AA-4F25-BC38-588BA8D3B4F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:toronto:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD56AE7F-3CE7-4F9B-A187-77B074B1D4D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8215",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have a permission control vulnerability. An attacker with the system privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor 8, Honor V8, Honor 9, Honor V9, Nova 2, Nova 2 Plus, P9, P10 Plus y Toronto con versiones de software anteriores a FRD-AL00C00B391, FRD-DL00C00B391, KNT-AL10C00B391, KNT-AL20C00B391, KNT-UL10C00B391, KNT-TL10C00B391, Stanford-AL00C00B175, Stanford-AL10C00B175, Stanford-TL00C01B175, Duke-AL20C00B191, Duke-TL30C01B191, Picasso-AL00C00B162, Picasso-TL00C01B162 , Barca-AL00C00B162, Barca-TL00C00B162, EVA-AL10C00B396SP03, EVA-CL00C92B396, EVA-DL00C17B396, EVA-TL00C01B396 , Vicky-AL00AC00B172, Toronto-AL00AC00B191 y Toronto-TL10C01B191 tienen una vulnerabilidad de control de permisos. Un atacante con privilegios de sistema de un móvil puede explotar esta vulnerabilidad para omitir la verificación del código de desbloqueo y desbloquear el cargador de arranque del teléfono móvil."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "frd-al00c00b391",
            "matchCriteriaId" : "194C8907-447B-4DCF-B412-1213EF9F1B23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72889681-6793-4451-B97F-F12B4B28372A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "frd-dl00c00b391",
            "matchCriteriaId" : "52F0EA2A-1026-41A4-84FF-0F9AE952ED07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72889681-6793-4451-B97F-F12B4B28372A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-al10c00b391",
            "matchCriteriaId" : "8726C588-5828-455A-BEE8-9DCC3F125F17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-al20c00b391",
            "matchCriteriaId" : "552AAA4E-B600-4CF9-B8A9-F1668F3D8A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-ul10c00b391",
            "matchCriteriaId" : "70ADD029-1A6E-41AD-8861-086DD06895BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "knt-tl10c00b391",
            "matchCriteriaId" : "426A0167-5C96-4FB8-B2B7-6F6DF9499321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61143255-9662-480E-BE01-07DB21B70D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-al00c00b175",
            "matchCriteriaId" : "39942200-B302-4029-8398-B91A874C4185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-al10c00b175",
            "matchCriteriaId" : "09F80677-BA85-4301-AAE6-661E66EFF359"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "stanford-tl00c01b175",
            "matchCriteriaId" : "D1FD34EB-8972-4023-878E-08FCBADF97C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804A493E-A0C3-41F7-AB1C-AE58F7473C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-al20c00b191",
            "matchCriteriaId" : "4FCC1F75-1B2B-4553-A73F-5631BC24F959"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-tl30c01b191",
            "matchCriteriaId" : "A350B04E-5411-46E1-83EE-23427F7E2478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "picasso-al00c00b162",
            "matchCriteriaId" : "B4F0500A-D9E3-46EB-AF66-87E62BC85021"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB1B51-6801-4C1C-ABBC-417295A4A280"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "picasso-tl00c01b162",
            "matchCriteriaId" : "E54D5FC2-A42B-4290-9CEA-99E1B22CB7D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB1B51-6801-4C1C-ABBC-417295A4A280"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "barca-al00c00b162",
            "matchCriteriaId" : "996C1EC9-F251-444F-B447-7D8FB46C293C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "barca-tl00c00b162",
            "matchCriteriaId" : "29C5BF15-67AE-4B91-A0AA-354FB85E0D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b396sp03",
            "matchCriteriaId" : "AD504F2F-FCB5-4E3E-88FB-3D5F164EC26A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl00c92b396",
            "matchCriteriaId" : "FDF40632-4AB0-46FA-B36F-C7795A28F94B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl00c17b396",
            "matchCriteriaId" : "1C864183-BD7C-46B5-AD94-3281B8044D31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl00c01b396",
            "matchCriteriaId" : "827596A6-E033-46C7-BEC9-A78CDA411875"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vicky-al00ac00b172",
            "matchCriteriaId" : "0BE42535-6A21-4993-8F8B-2C54CE17F515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:toronto_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "toronto-al00ac00b191",
            "matchCriteriaId" : "DAF16468-2C98-4D95-8700-3CE1A533928B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:toronto:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD56AE7F-3CE7-4F9B-A187-77B074B1D4D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:toronto_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "toronto-tl10c01b191",
            "matchCriteriaId" : "66A9C781-A1AA-4F25-BC38-588BA8D3B4F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:toronto:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD56AE7F-3CE7-4F9B-A187-77B074B1D4D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8216",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-11-22T19:29:05.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a permission control vulnerability. Due to improper authorization on specific processes, an attacker with the root privilege of a mobile Android system can exploit this vulnerability to obtain some information of the user."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Warsaw con versiones de software anteriores a Warsaw-AL00C00B180 y Warsaw-TL10C01B180 tienen una vulnerabilidad de control de permisos. Debido a la autorización incorrecta en procesos específicos, un atacante con el privilegio root de un sistema móvil Android puede explotar esta vulnerabilidad para obtener determinada información del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_lite_firmware:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "warsaw-al00c00b180",
            "matchCriteriaId" : "7B8E8E62-91BA-4AF8-B164-B41285E970D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D112ADEB-1A57-48FF-B823-9B9A0D0572D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p10_lite_firmware:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "warsaw-tl10c01b180",
            "matchCriteriaId" : "4F236D8D-DB87-4156-B9D5-43BF5DA84FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p10_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D112ADEB-1A57-48FF-B823-9B9A0D0572D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170614-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102190",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170614-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-22T22:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función _nc_write_entry en tinfo/write_entry.c en ncurses en la versión 6.0 permite que los atacantes provoquen una denegación de servicio (cierre inesperado de la aplicación) o posiblemente ejecuten código arbitrario mediante un archivo terminfo manipulado, tal y como demuestra tic."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA10CE0-F4B6-4775-A4C2-1077350DB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://invisible-island.net/ncurses/NEWS.html#t20171125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145045/GNU-ncurses-6.0-tic-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/viewAlert.x?alertId=57695",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://invisible-island.net/ncurses/NEWS.html#t20171125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145045/GNU-ncurses-6.0-tic-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/viewAlert.x?alertId=57695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7501",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-22T22:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que las versiones de rpm anteriores a la 4.13.0.2 emplean archivos temporales con nombres predecibles al instalar un RPM. Un atacante que pueda escribir en un directorio en el que se instalarán archivos podría crear enlaces simbólicos en una localización arbitraria y modificar contenido y, probablemente, permisos en archivos arbitrarios. Esto podría emplearse para provocar una denegación de servicio o un posible escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13.0.3",
            "matchCriteriaId" : "ED564028-B312-4A22-812A-8928BBBB4E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rpm-software-management/rpm/commit/404ef011c300207cdb1e531670384564aae04bdc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-22",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/404ef011c300207cdb1e531670384564aae04bdc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-23T06:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream."
      }, {
        "lang" : "es",
        "value" : "La función scp_v0s_accept en sesman/libscp/libscp_v0.c en el administrador de sesión en xrdp hasta la versión 0.9.4 emplea un entero no fiable como longitud de escritura. Esto permite que usuarios locales provoquen una denegación de servicio (desbordamiento de búfer y cierre inesperado de la aplicación) o que, posiblemente, causen otro impacto sin especificar mediante un flujo de entrada manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neutrinolabs:xrdp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.4",
            "matchCriteriaId" : "E99C1E0E-5014-4730-AA30-963C9C2A708D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/neutrinolabs/xrdp/pull/958",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/xrdp-devel/PmVfMuy_xBA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/neutrinolabs/xrdp/pull/958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/xrdp-devel/PmVfMuy_xBA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15088",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-23T17:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat."
      }, {
        "lang" : "es",
        "value" : "plugins/preauth/pkinit/pkinit_crypto_openssl.c en MIT Kerberos 5 (también conocido como krb5) hasta la versión 1.15.2 gestiona de manera incorrecta los campos Distinguished Name (DN). Esto permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (desbordamiento de búfer y cierre inesperado de la aplicación) en situaciones relacionadas con datos X.509 no fiables. Esto se relaciona con las funciones get_matching_data y X509_NAME_oneline_ex. NOTA: esto es relevante para la seguridad solo en casos externos a la distribución de MIT Kerberos, por ejemplo, el uso de get_matching_data en el código del plugin KDC certauth específico de Red Hat."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.2",
            "matchCriteriaId" : "921811CC-66B8-4F08-8203-4C080DC629CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101594",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871698",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1504045",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/commit/fbb687db1088ddd894d975996e5f6a4252b9a2b4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1504045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/commit/fbb687db1088ddd894d975996e5f6a4252b9a2b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-23T21:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them against a production switch that has the default keys embedded."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la build 16072215 de los dispositivos MOXA EDS-G512E 5.1. Un atacante podría extraer las claves públicas y privadas de la imagen de firmware disponible en el sitio web de MOXA y emplearlas contra un switch de producción que tiene embebidas las claves por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:eds-g512e_firmware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F267F1-E99B-4FF2-8CE6-43DB70F66DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:eds-g512e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89398E6-21CC-49D9-AD9B-343AD58A69FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-23T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent in cleartext as a POST parameter. An attacker could reverse the password encryption algorithm to retrieve it."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la build 16072215 de los dispositivos MOXA EDS-G512E 5.1. El método de codificación de contraseñas puede ser recuperado desde el firmware. El método de codificación se basa en un valor chall que se envía en texto claro como parámetro POST. Un atacante podría invertir el algoritmo de codificación de contraseña para recuperarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:eds-g512e_firmware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F267F1-E99B-4FF2-8CE6-43DB70F66DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:eds-g512e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89398E6-21CC-49D9-AD9B-343AD58A69FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-23T21:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en la build 16072215 de los dispositivos MOXA EDS-G512E 5.1. El archivo de copia de seguridad contiene información sensible de forma no segura. No hay una sal para el hasheo de contraseñas. Las contraseñas se almacenan sin ser cifradas con un método de cifrado con marca de tiempo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:eds-g512e_firmware:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F267F1-E99B-4FF2-8CE6-43DB70F66DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:eds-g512e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89398E6-21CC-49D9-AD9B-343AD58A69FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101966",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-23T21:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name."
      }, {
        "lang" : "es",
        "value" : "parser.c en libxml2 en versiones anteriores a la 2.9.5 gestiona de manera incorrecta las referencias de entidades de parámetro debido a que la macro NEXTL llama a la función xmlParserHandlePEReference en caso de que haya un carácter \"%\" en un nombre DTD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.4",
            "matchCriteriaId" : "8CC4875D-A4B2-4A7C-B020-7C2E86412B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xmlsoft.org/news.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=766956",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/GNOME/libxml2/commit/e26630548e7d138d2c560844c43820b6767251e3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xmlsoft.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=766956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/GNOME/libxml2/commit/e26630548e7d138d2c560844c43820b6767251e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-23T21:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities."
      }, {
        "lang" : "es",
        "value" : "parser.c en libxml2 en versiones anteriores a la 2.9.5 no evita la recursión infinita en las entidades de parámetro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.4",
            "matchCriteriaId" : "8CC4875D-A4B2-4A7C-B020-7C2E86412B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xmlsoft.org/news.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=759579",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/GNOME/libxml2/commit/899a5d9f0ed13b8e32449a08a361e0de127dd961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3739-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xmlsoft.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=759579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/GNOME/libxml2/commit/899a5d9f0ed13b8e32449a08a361e0de127dd961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3739-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-24T05:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link."
      }, {
        "lang" : "es",
        "value" : "etc/initsystem/prepare-dirs en Icinga en versiones 2.x hasta la 2.8.1 tiene una llamada chown para un nombre de usuario en un directorio que puede ser escrito por el usuario. Esto permite que usuarios locales ganen privilegios aprovechando el acceso a la cuenta $ICINGA2_USER para crear un enlace."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.8.0",
            "matchCriteriaId" : "C5BD6EE3-A926-4109-AD1F-32D89291FEA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Icinga/icinga2/issues/5793",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Icinga/icinga2/issues/5793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-24T07:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a \"<%%25call system.exec:\" string in the passwd parameter."
      }, {
        "lang" : "es",
        "value" : "El servidor web en dispositivos DBL DBLTek permite que atacantes remotos ejecuten comandos arbitrarios del sistema operativo obteniendo la contraseña de administrador mediante una petición frame.html?content=/dev/mtdblock/5 y, a continuación, empleando esta contraseña para la autenticación de acceso básica HTTP necesaria para una petición change_password.csp, que es compatible con una cadena \"<%%25call system.exec:\" en el parámetro passwd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbltek:web_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8072BD87-25F5-41AD-806A-5F6911C433C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3437",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-24T07:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account details via a users/search.json request, and then modifying the account via an editUser request."
      }, {
        "lang" : "es",
        "value" : "Ametys en versiones anteriores a la 4.0.3 solo requiere autenticación para URI que contienen una subcadena /cms/. Esto permite que atacantes remotos omitan las restricciones de acceso planeadas mediante una petición directa a /plugins/core-ui/servercomm/messages.xml, tal y como demuestra el cambio de la contraseña de administrador obteniendo los detalles de la cuenta mediante una petición users/search.json y modificando la cuenta mediante una petición editUser."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ametys:ametys:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "A37995E5-E1D7-46A1-B9E9-D9D274FD9801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.ametys.org/browse/RUNTIME-2582",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.ametys.org/browse/RUNTIME-2582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-24T07:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to read arbitrary files via a cgi-bin/luci/request?op=1&path= URI that uses directory traversal sequences after a /usb/ substring."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en app_data_center en dispositivos Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01 y Ac18 ac18_kf_V15.03.05.19(6318_)_cn permite que atacantes remotos no autenticados lean archivos arbitrarios mediante un URI cgi-bin/luci/request?op=1path= que emplea secuencias de salto de directorio tras una subcadena /usb/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac9_firmware:us_ac9v1.0br_v15.03.05.14_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892AC99-F24B-4E0F-B3F0-CDBE1F4AD446"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac9_firmware:ac9_kf_v15.03.05.19\\(6318_\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512EB7D7-B12E-4219-8270-9EFCC8F6F366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.18_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51B455-6ABD-4827-B948-7341D353C05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.19_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9535D5AC-FCE6-40A9-BA55-10DFE110BBBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:us_ac18v1.0br_v15.03.05.05_multi_td01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D8463B-CC09-4C38-9881-4D7E3EC2B635"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:ac18_kf_v15.03.05.19\\(6318_\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C6CF57-11B7-4A11-AA61-248ACAFE624C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Iolop/Poc/tree/master/Router/Tenda",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Iolop/Poc/tree/master/Router/Tenda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-24T07:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer global en OptiPNG 0.7.6 permite que atacantes remotos provoquen un ataque de denegación de servicio (DoS) u otro impacto sin especificar con un archivo maliciosamente manipulado de formato GIF. Esto se relaciona con un bucle no controlado en la función LZWReadByte del archivo gifread.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:optipng_project:optipng:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B95311-98CB-44DE-91AE-73B33E20D2BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00042.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/optipng/bugs/69/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/optipng/bugs/69/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-24T10:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages."
      }, {
        "lang" : "es",
        "value" : "La implementación de políticas de volcado XFRM en net/xfrm/xfrm_user.c en el kernel de Linux en versiones anteriores a la 4.13.11 permite que usuarios locales obtengan privilegios o provoquen una denegación de servicio (uso de memoria previamente liberada) mediante una llamada del sistema a setsockopt con la opción SO_RCVBUF junto con mensajes Netlink XFRM_MSG_GETPOLICY."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.28",
            "versionEndExcluding" : "3.2.97",
            "matchCriteriaId" : "8ED4911A-BC31-4BE2-AB28-01A181E6CA96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "B97C01AC-F470-4190-AC38-30DE3DFDCCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.86",
            "matchCriteriaId" : "159A9F92-7961-4484-A763-73C78B0FE4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.48",
            "matchCriteriaId" : "F6D0F391-2072-4A4A-8DD7-8C58CA241DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.104",
            "matchCriteriaId" : "AB6B77AA-92C6-4FB4-B93B-19C017F14869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.60",
            "matchCriteriaId" : "494CCDDA-0579-4913-A3B1-BDD14CF5ED75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13.11",
            "matchCriteriaId" : "2CAB99C0-B195-4A8D-A2E5-3D1BCA2E03F4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1137b5e2529a8f5ca8ee709288ecba3e68044df2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Technical Description" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101954",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1318",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1355",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1069702",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1137b5e2529a8f5ca8ee709288ecba3e68044df2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Technical Description" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1069702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-25T05:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October CMS through 1.0.428 does not prevent use of .htaccess in themes, which allows remote authenticated users to execute arbitrary PHP code by downloading a theme ZIP archive from /backend/cms/themes, and then uploading and importing a modified archive with two new files: a .php file and a .htaccess file. NOTE: the vendor says \"I don't think [an attacker able to login to the system under an account that has access to manage/upload themes] is a threat model that we need to be considering."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** October CMS hasta la versión 1.0.428 no evita el uso de .htaccess en los temas, lo que permite que usuarios autenticados remotos ejecuten código PHP arbitrario mediante la descarga de un archivo ZIP de temas de /backend/cms/themes y, a continuación, subiendo e importando un archivo modificado con dos nuevos archivos: un archivo .php y un archivo .htaccess. NOTA: el  fabricante dice: \"No creo que [un atacante capaz de iniciar sesión en el sistema bajo una cuenta que tiene acceso para gestionar/subir temas] sea un modelo de amenaza que necesitemos tener en consideración\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.428",
            "matchCriteriaId" : "90A9C91F-B238-4D53-B638-63A977A99FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/issues/3257",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/october/issues/3257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-25T17:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "En libsndfile 1.0.25 (solucionado en 1.0.26), existe un error de división entre cero en la función wav_w64_read_fmt_chunk() en wav_w64.c, lo que puede provocar una denegación de servicio cuando se reproduzca un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsndfile_project:libsndfile:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B807C-1C00-41C6-AB2B-63E520C71DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erikd/libsndfile/issues/341",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/erikd/libsndfile/issues/341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4013-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-25T17:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands."
      }, {
        "lang" : "es",
        "value" : "La función receive_msg en receive.c en el demonio SMTP en Exim 4.88 y 4.89 permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (uso de memoria previamente liberada) mediante vectores relacionados con comandos BDAT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:-:*:*:*:*:*:*",
            "matchCriteriaId" : "144B3769-7408-4C7C-94EB-108CD2B238E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B52AB04-BA19-42D7-811E-61BBABD0735F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039872",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4053",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-25T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the bdat_getc function."
      }, {
        "lang" : "es",
        "value" : "La función receive_msg en receive.c en el demonio SMTP en Exim 4.88 y 4.89 permite que atacantes remotos provoquen una denegación de servicio (bucle infinito y agotamiento de pila) mediante vectores relacionados con comandos BDAT y una comprobación infinita para un carácter \".\" que implique el fin del contexto. Esto se relaciona con la función bdat_getc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8BC538-1714-4D9D-A97F-FCA2EA745DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:4.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F1EE32-946A-4C57-B672-0127E012FC8D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039873",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4053",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43184/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-25T18:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which allows admins to discover a hashed password by reading the audit log."
      }, {
        "lang" : "es",
        "value" : "La función admin_edit en app/Controller/UsersController.php en MISP 2.4.82 gestiona de manera incorrecta el campo enable_password, lo que permite que administradores descubran una contraseña hasheada mediante la lectura del registro de auditoría."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F07B278-2608-43FD-9831-C1B62719EA31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/7d5890b2fc63285f010d5845913894dd71cf232c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/7d5890b2fc63285f010d5845913894dd71cf232c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-26T21:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730008 DeviceIoControl request to \\\\.\\Viragtlt."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL) o, posiblemente, otro impacto sin especificar mediante un valor NULL en una petición 0x82730008 DeviceIoControl a \\\\.\\Viragtlt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerReference1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerReference1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14176",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2017-11-27T10:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117."
      }, {
        "lang" : "es",
        "value" : "Bazaar hasta la versión 2.7.0, cuando se utiliza un subproceso SSH, perote que atacantes remotos ejecuten comandos arbitrarios mediante una URL bzr+ssh con un carácter guión inicial en el nombre del host. Esta vulnerabilidad está relacionada con CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116 y CVE-2017-1000117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:bazaar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.0",
            "matchCriteriaId" : "2D747C60-C3A8-4CCE-A7D2-A5E58CA48C2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14176.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-3411-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874429",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/bzr/+bug/1710979",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486685",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1058214",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4052",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-3411-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/874429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/bzr/+bug/1710979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1486685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1058214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14390",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog-drain causes logs to be drained to unintended locations."
      }, {
        "lang" : "es",
        "value" : "En Cloud Foundry Foundation cf-deployment v0.35.0, un error de configuración con Loggregator y syslog-drain provoca que los informes se purguen en localizaciones no planeadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:cf-deployment:0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594D753A-C8BA-42D3-A39C-58683A728D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101972",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-14390/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-14390/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the \"keyword\" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el plugin InLinks hasta la versión 1.1 para WordPress permite que usuarios autenticados ejecuten comandos SQL arbitrarios mediante el parámetro \"keyword\" en /wp-admin/options-general.php?page=inlinks/inlinks.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inlinks_project:inlinks:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "85F35587-BE11-4D90-A442-E44C7D136743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145059/WordPress-In-Link-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8962",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145059/WordPress-In-Link-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title."
      }, {
        "lang" : "es",
        "value" : "b3log Symphony (también conocido como Sym) 2.2.0 permite un ataque XSS enviando una carta privada con un determinado URI /article y una segunda carta privada con un título modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symphony_project:symphony:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F31DEF7-5EAE-44F9-9143-850A1760F78E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/b3log/symphony/issues/509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b3log/symphony/issues/509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo iface de un comando admin/diagnostic en cgi-bin/luci. Esto se relaciona con la función zone_get_effect_devices en /usr/lib/lua/luci/controller/admin/diagnostic.lua en uhttpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDDAFFA-F3A4-4B22-A4A1-E1490116F253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1D08E9-5E86-4007-9ABA-1A3DEE54DEAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD6098D-9452-4ADA-96F9-A7A6E9B63551"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52299E24-CBCA-49F8-90FD-D1D8E21D78FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F740E87-DEB3-4DD7-90A0-08FF079F7242"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA306AC-0231-4359-8794-BFA81D085410"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB72835B-95E0-4C65-997C-6FE3656F5584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17DD853-7548-4037-A4F4-E93F4E667829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8B9526-0627-4DF2-8273-E51A4595AA9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982AFFBC-52BC-4921-87BB-8F0F1C31558C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B867C51B-FD51-40E1-BFFC-A9DA8A3606B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583550-1D76-45E8-89A9-CD1D843BB93E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85C46-24B2-498E-AB6F-6329EF0F3B84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F3557E-AA91-4123-847A-79BB67A6571D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C676B3-372D-4247-995A-FF025F32FDD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7137CE99-9E89-4E49-A1F4-4458D723B4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10038567-EC6B-40CA-94A5-302D37956EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C4F2B2-F886-43ED-A29D-20865AA31B55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403F67A7-7E54-4255-9838-CDD6B9AA8266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE9545C-EC9B-47B0-BEA9-3B2D5109F970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFFF84-D7E5-475B-99E6-C93E3844CA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBB236-C33A-4FD7-888F-0BA9EB162B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D9121-35E3-479C-BE19-7E67DA2332C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B71C67-E001-4722-8B51-A4BB3B6ED841"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7087925-7984-44DD-A20A-8B3C87802E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2896BBB8-BA92-4B36-9BB7-E9397CDBB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C817C4-0B32-402D-909A-1DC9CA39DA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E532F4-3E42-4C9F-A01A-E7EFB7B48804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE1FA23-A3C7-4F9D-B466-624448BDC9B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FD7E97-3478-4F42-BB4A-5A1E1DD53877"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DAF676-8D9B-4689-A6AD-189E44161410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A167020D-FEB5-42E0-8815-B7F2501D6C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F2966-FD95-4B94-A7FB-8021782AD170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7355D93-F480-4E24-A0CD-CAC3AADE454F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D950C88-8CAA-430A-A5BB-B65E4FF13074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC78CAB2-0C24-4FF8-B758-AADDB3F24989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBD997E-88FC-4D23-B762-331A63A29C83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AB3B41-D8B1-4A0C-A5DD-5254D96D0655"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A26160-2484-4517-B223-40A329DAEDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6A8BD-0012-48FA-B5D0-A6F03097FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6AE4D9-A750-4770-A07A-FC87DCA4E840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87876AD9-B258-4E8E-ABF6-6704F6EEE468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E888A70B-984E-4D7C-B324-2F0E9C8E57C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4EF035-D38D-478C-BCAA-EE96EBEC9D80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3210g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECE364D-6F3C-4378-9D26-03C551F8CF54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3210g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B525A04A-6596-482F-82B6-46B61B9D6F84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C32F019-BC0A-4BD4-8DE7-59C8FFEAC943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E23FA7-5DB6-4F61-B925-C027769DDAB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE6F205-6017-4855-9D3A-CCCAAF4CD326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F14A9A-4134-4569-ACB9-DFB23D7DBB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD2CC06-2AC5-4D79-8DAB-B4D4DDEB659C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0E248-0844-4F67-B014-0D91097D2892"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAAB2CB-8519-435A-8AA9-58D87BB3F50E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38918CA2-1DA6-4167-9442-F61AA3A468CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241C9669-8C6A-48D4-92D6-618828968B43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A0CE7-DF8D-4875-870F-0C511CE4350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504894B1-8B2B-40D3-B242-2451649FCEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDF4CBE-1393-4FA3-BEC5-D70DA65FEDAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57181C9C-4B60-4108-A414-6F2DEC8B2AD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAC5781-46C5-4377-A558-6FA575611E29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C871734-EAEC-4E7B-A846-1BF63E6D5061"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91196457-19D1-4A9D-93CF-31A90CA72B18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF6DB66-3477-4BF6-A61D-6208B33CA00A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531FB326-A000-4E69-86FC-8BC6C3B93401"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E8F807-DF8E-46FF-864C-127853898595"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F823CD5-ABBD-41DD-9BB7-93208A3558B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er7520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2885417-FA1E-46DA-A674-7ACAECD38DF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er7520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3D607F-B64A-4E11-AA80-15CF41818FB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBB8783-8C6F-4492-9F71-560925E7A011"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E26F55-3EFF-4EF6-A78E-637F846DC81A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1B1DAE-DEFF-4D88-AE89-81C7B9EEA262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAADD27-C0F7-42E0-AA3F-EA1B0E711D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A207AE5-DE94-4EBF-B755-B2341FA569B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C69293-1D3F-4965-A464-1820D5DC16C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB4A127-4E83-47B5-B101-3AB12D7484B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C62FAE-1F41-497D-B165-1A472E8311A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572D875D-6EE8-4FF7-88B6-E44CFA1DEA5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD88F070-5506-466E-B886-587A161143A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E0F546-6FF6-4E7B-9776-B6E6722E6673"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0AA0C7-21F6-4059-A622-3274F3C666D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC48B20-C2B6-445D-9563-488BA4F7A8F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF23D6-775E-45F5-B25F-64DDCFABA456"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDAB34C-0C90-44E3-9B6B-2B4AFD5EB1C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E568C0-E4DF-4FDD-B8DB-327247EAAE14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38ED07-6E35-4836-95B3-9B20D6D6A6ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3D6F5-F551-41A3-8756-CD276D935C5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026AD2C7-73E8-44AD-A9EE-F21386F88246"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gpe-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9891A83F-56E5-421B-A0DC-65B5B0A82979"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F749A0-3A0A-4C63-8068-EC378A02C63E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BC0024-4F65-4DA2-A5AB-E843466AF79B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EB95CB-10D9-4BE0-AD4C-093984A1D1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25742B52-BE00-4BFA-BD0A-B366F12E8829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5983B67B-609F-4127-AEBD-5AF7E486034E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DBB40A-A190-4398-A4C8-DF042767A317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1235A816-60EC-4979-838B-C3E825475758"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E999611-39E1-48C1-99CB-581FF0451FD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00708B72-B811-4711-8CB5-F2916C2572CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE46823-8AB2-40B1-9765-37F645147218"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EEA260-A8AE-4B6E-A452-680F21A1206E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D112855-1041-479E-ABCC-CEB0BCFDF651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101968",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo t_bindif de un comando admin/bridge en cgi-bin/luci. Esto se relaciona con la función get_device_byif en /usr/lib/lua/luci/controller/admin/bridge.lua en uhttpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDDAFFA-F3A4-4B22-A4A1-E1490116F253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1D08E9-5E86-4007-9ABA-1A3DEE54DEAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD6098D-9452-4ADA-96F9-A7A6E9B63551"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52299E24-CBCA-49F8-90FD-D1D8E21D78FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F740E87-DEB3-4DD7-90A0-08FF079F7242"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA306AC-0231-4359-8794-BFA81D085410"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB72835B-95E0-4C65-997C-6FE3656F5584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17DD853-7548-4037-A4F4-E93F4E667829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8B9526-0627-4DF2-8273-E51A4595AA9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982AFFBC-52BC-4921-87BB-8F0F1C31558C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B867C51B-FD51-40E1-BFFC-A9DA8A3606B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583550-1D76-45E8-89A9-CD1D843BB93E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85C46-24B2-498E-AB6F-6329EF0F3B84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F3557E-AA91-4123-847A-79BB67A6571D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C676B3-372D-4247-995A-FF025F32FDD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7137CE99-9E89-4E49-A1F4-4458D723B4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10038567-EC6B-40CA-94A5-302D37956EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C4F2B2-F886-43ED-A29D-20865AA31B55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403F67A7-7E54-4255-9838-CDD6B9AA8266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE9545C-EC9B-47B0-BEA9-3B2D5109F970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFFF84-D7E5-475B-99E6-C93E3844CA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBB236-C33A-4FD7-888F-0BA9EB162B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D9121-35E3-479C-BE19-7E67DA2332C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B71C67-E001-4722-8B51-A4BB3B6ED841"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7087925-7984-44DD-A20A-8B3C87802E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2896BBB8-BA92-4B36-9BB7-E9397CDBB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C817C4-0B32-402D-909A-1DC9CA39DA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E532F4-3E42-4C9F-A01A-E7EFB7B48804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE1FA23-A3C7-4F9D-B466-624448BDC9B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FD7E97-3478-4F42-BB4A-5A1E1DD53877"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DAF676-8D9B-4689-A6AD-189E44161410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A167020D-FEB5-42E0-8815-B7F2501D6C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F2966-FD95-4B94-A7FB-8021782AD170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7355D93-F480-4E24-A0CD-CAC3AADE454F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D950C88-8CAA-430A-A5BB-B65E4FF13074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC78CAB2-0C24-4FF8-B758-AADDB3F24989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBD997E-88FC-4D23-B762-331A63A29C83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AB3B41-D8B1-4A0C-A5DD-5254D96D0655"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A26160-2484-4517-B223-40A329DAEDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6A8BD-0012-48FA-B5D0-A6F03097FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6AE4D9-A750-4770-A07A-FC87DCA4E840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87876AD9-B258-4E8E-ABF6-6704F6EEE468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E888A70B-984E-4D7C-B324-2F0E9C8E57C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4EF035-D38D-478C-BCAA-EE96EBEC9D80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3210g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECE364D-6F3C-4378-9D26-03C551F8CF54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3210g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B525A04A-6596-482F-82B6-46B61B9D6F84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C32F019-BC0A-4BD4-8DE7-59C8FFEAC943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E23FA7-5DB6-4F61-B925-C027769DDAB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE6F205-6017-4855-9D3A-CCCAAF4CD326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F14A9A-4134-4569-ACB9-DFB23D7DBB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD2CC06-2AC5-4D79-8DAB-B4D4DDEB659C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0E248-0844-4F67-B014-0D91097D2892"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAAB2CB-8519-435A-8AA9-58D87BB3F50E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38918CA2-1DA6-4167-9442-F61AA3A468CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241C9669-8C6A-48D4-92D6-618828968B43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A0CE7-DF8D-4875-870F-0C511CE4350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504894B1-8B2B-40D3-B242-2451649FCEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDF4CBE-1393-4FA3-BEC5-D70DA65FEDAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57181C9C-4B60-4108-A414-6F2DEC8B2AD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAC5781-46C5-4377-A558-6FA575611E29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C871734-EAEC-4E7B-A846-1BF63E6D5061"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91196457-19D1-4A9D-93CF-31A90CA72B18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF6DB66-3477-4BF6-A61D-6208B33CA00A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531FB326-A000-4E69-86FC-8BC6C3B93401"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E8F807-DF8E-46FF-864C-127853898595"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F823CD5-ABBD-41DD-9BB7-93208A3558B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er7520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2885417-FA1E-46DA-A674-7ACAECD38DF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er7520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3D607F-B64A-4E11-AA80-15CF41818FB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBB8783-8C6F-4492-9F71-560925E7A011"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E26F55-3EFF-4EF6-A78E-637F846DC81A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1B1DAE-DEFF-4D88-AE89-81C7B9EEA262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAADD27-C0F7-42E0-AA3F-EA1B0E711D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A207AE5-DE94-4EBF-B755-B2341FA569B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C69293-1D3F-4965-A464-1820D5DC16C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB4A127-4E83-47B5-B101-3AB12D7484B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C62FAE-1F41-497D-B165-1A472E8311A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572D875D-6EE8-4FF7-88B6-E44CFA1DEA5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD88F070-5506-466E-B886-587A161143A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E0F546-6FF6-4E7B-9776-B6E6722E6673"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0AA0C7-21F6-4059-A622-3274F3C666D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC48B20-C2B6-445D-9563-488BA4F7A8F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF23D6-775E-45F5-B25F-64DDCFABA456"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDAB34C-0C90-44E3-9B6B-2B4AFD5EB1C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E568C0-E4DF-4FDD-B8DB-327247EAAE14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38ED07-6E35-4836-95B3-9B20D6D6A6ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3D6F5-F551-41A3-8756-CD276D935C5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026AD2C7-73E8-44AD-A9EE-F21386F88246"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gpe-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9891A83F-56E5-421B-A0DC-65B5B0A82979"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F749A0-3A0A-4C63-8068-EC378A02C63E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BC0024-4F65-4DA2-A5AB-E843466AF79B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EB95CB-10D9-4BE0-AD4C-093984A1D1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25742B52-BE00-4BFA-BD0A-B366F12E8829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5983B67B-609F-4127-AEBD-5AF7E486034E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DBB40A-A190-4398-A4C8-DF042767A317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1235A816-60EC-4979-838B-C3E825475758"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E999611-39E1-48C1-99CB-581FF0451FD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00708B72-B811-4711-8CB5-F2916C2572CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE46823-8AB2-40B1-9765-37F645147218"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EEA260-A8AE-4B6E-A452-680F21A1206E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D112855-1041-479E-ABCC-CEB0BCFDF651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkBridgeAuthenticatedRCE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkBridgeAuthenticatedRCE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the set_sysinfo and get_sysinfo functions in /usr/lib/lua/luci/controller/locale.lua in uhttpd."
      }, {
        "lang" : "es",
        "value" : "La característica locale en cgi-bin/luci en dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permite que usuarios autenticados remotos examinen la existencia de archivos arbitrarios haciendo una petición operation=write;locale=%0d y, a continuación, haciendo una petición operation=read con una cabecera HTTP Accept-Language manipulada. Esto se relaciona con las funciones set_sysinfo y get_sysinfo en /usr/lib/lua/luci/controller/locale.lua en uhttpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDDAFFA-F3A4-4B22-A4A1-E1490116F253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1D08E9-5E86-4007-9ABA-1A3DEE54DEAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD6098D-9452-4ADA-96F9-A7A6E9B63551"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52299E24-CBCA-49F8-90FD-D1D8E21D78FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F740E87-DEB3-4DD7-90A0-08FF079F7242"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA306AC-0231-4359-8794-BFA81D085410"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB72835B-95E0-4C65-997C-6FE3656F5584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17DD853-7548-4037-A4F4-E93F4E667829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8B9526-0627-4DF2-8273-E51A4595AA9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982AFFBC-52BC-4921-87BB-8F0F1C31558C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B867C51B-FD51-40E1-BFFC-A9DA8A3606B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583550-1D76-45E8-89A9-CD1D843BB93E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85C46-24B2-498E-AB6F-6329EF0F3B84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F3557E-AA91-4123-847A-79BB67A6571D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C676B3-372D-4247-995A-FF025F32FDD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7137CE99-9E89-4E49-A1F4-4458D723B4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10038567-EC6B-40CA-94A5-302D37956EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C4F2B2-F886-43ED-A29D-20865AA31B55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403F67A7-7E54-4255-9838-CDD6B9AA8266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE9545C-EC9B-47B0-BEA9-3B2D5109F970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFFF84-D7E5-475B-99E6-C93E3844CA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBB236-C33A-4FD7-888F-0BA9EB162B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D9121-35E3-479C-BE19-7E67DA2332C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B71C67-E001-4722-8B51-A4BB3B6ED841"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7087925-7984-44DD-A20A-8B3C87802E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2896BBB8-BA92-4B36-9BB7-E9397CDBB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C817C4-0B32-402D-909A-1DC9CA39DA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E532F4-3E42-4C9F-A01A-E7EFB7B48804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE1FA23-A3C7-4F9D-B466-624448BDC9B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FD7E97-3478-4F42-BB4A-5A1E1DD53877"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DAF676-8D9B-4689-A6AD-189E44161410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A167020D-FEB5-42E0-8815-B7F2501D6C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F2966-FD95-4B94-A7FB-8021782AD170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7355D93-F480-4E24-A0CD-CAC3AADE454F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D950C88-8CAA-430A-A5BB-B65E4FF13074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC78CAB2-0C24-4FF8-B758-AADDB3F24989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBD997E-88FC-4D23-B762-331A63A29C83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AB3B41-D8B1-4A0C-A5DD-5254D96D0655"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A26160-2484-4517-B223-40A329DAEDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6A8BD-0012-48FA-B5D0-A6F03097FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6AE4D9-A750-4770-A07A-FC87DCA4E840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87876AD9-B258-4E8E-ABF6-6704F6EEE468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E888A70B-984E-4D7C-B324-2F0E9C8E57C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4EF035-D38D-478C-BCAA-EE96EBEC9D80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3210g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECE364D-6F3C-4378-9D26-03C551F8CF54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3210g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B525A04A-6596-482F-82B6-46B61B9D6F84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C32F019-BC0A-4BD4-8DE7-59C8FFEAC943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E23FA7-5DB6-4F61-B925-C027769DDAB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE6F205-6017-4855-9D3A-CCCAAF4CD326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F14A9A-4134-4569-ACB9-DFB23D7DBB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD2CC06-2AC5-4D79-8DAB-B4D4DDEB659C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0E248-0844-4F67-B014-0D91097D2892"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAAB2CB-8519-435A-8AA9-58D87BB3F50E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38918CA2-1DA6-4167-9442-F61AA3A468CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241C9669-8C6A-48D4-92D6-618828968B43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A0CE7-DF8D-4875-870F-0C511CE4350C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504894B1-8B2B-40D3-B242-2451649FCEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDF4CBE-1393-4FA3-BEC5-D70DA65FEDAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57181C9C-4B60-4108-A414-6F2DEC8B2AD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAC5781-46C5-4377-A558-6FA575611E29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C871734-EAEC-4E7B-A846-1BF63E6D5061"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91196457-19D1-4A9D-93CF-31A90CA72B18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF6DB66-3477-4BF6-A61D-6208B33CA00A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531FB326-A000-4E69-86FC-8BC6C3B93401"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E8F807-DF8E-46FF-864C-127853898595"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F823CD5-ABBD-41DD-9BB7-93208A3558B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er7520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2885417-FA1E-46DA-A674-7ACAECD38DF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er7520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3D607F-B64A-4E11-AA80-15CF41818FB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBB8783-8C6F-4492-9F71-560925E7A011"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E26F55-3EFF-4EF6-A78E-637F846DC81A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1B1DAE-DEFF-4D88-AE89-81C7B9EEA262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAADD27-C0F7-42E0-AA3F-EA1B0E711D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A207AE5-DE94-4EBF-B755-B2341FA569B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C69293-1D3F-4965-A464-1820D5DC16C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB4A127-4E83-47B5-B101-3AB12D7484B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C62FAE-1F41-497D-B165-1A472E8311A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572D875D-6EE8-4FF7-88B6-E44CFA1DEA5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD88F070-5506-466E-B886-587A161143A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E0F546-6FF6-4E7B-9776-B6E6722E6673"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0AA0C7-21F6-4059-A622-3274F3C666D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC48B20-C2B6-445D-9563-488BA4F7A8F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF23D6-775E-45F5-B25F-64DDCFABA456"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDAB34C-0C90-44E3-9B6B-2B4AFD5EB1C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E568C0-E4DF-4FDD-B8DB-327247EAAE14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38ED07-6E35-4836-95B3-9B20D6D6A6ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3D6F5-F551-41A3-8756-CD276D935C5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026AD2C7-73E8-44AD-A9EE-F21386F88246"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gpe-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9891A83F-56E5-421B-A0DC-65B5B0A82979"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F749A0-3A0A-4C63-8068-EC378A02C63E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BC0024-4F65-4DA2-A5AB-E843466AF79B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EB95CB-10D9-4BE0-AD4C-093984A1D1C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25742B52-BE00-4BFA-BD0A-B366F12E8829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5983B67B-609F-4127-AEBD-5AF7E486034E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DBB40A-A190-4398-A4C8-DF042767A317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1235A816-60EC-4979-838B-C3E825475758"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E999611-39E1-48C1-99CB-581FF0451FD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00708B72-B811-4711-8CB5-F2916C2572CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE46823-8AB2-40B1-9765-37F645147218"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EEA260-A8AE-4B6E-A452-680F21A1206E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D112855-1041-479E-ABCC-CEB0BCFDF651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkLocalePathDisclosure.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkLocalePathDisclosure.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo t_bindif de un comando admin/interface en cgi-bin/luci. Esto se relaciona con la función get_device_byif en /usr/lib/lua/luci/controller/admin/interface.lua en uhttpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5510g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24328C0-9611-4789-93B5-B60268A58238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5510g:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D6B49A-76DE-4F4D-8769-6B57F0F07FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5520g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F462B7E8-30CA-43B7-B0AD-6BFF31390FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5520g:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CDB038-0534-472F-8900-1209E460B3AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6120g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E2DC44-0319-4268-8912-25AD0F9FE867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6520g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E523045C-0C72-4C15-A777-CD80D01C9C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6520g:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024E082F-16C4-4393-9B7D-60B2C0BC8FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4239g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DEC78BE-3E4A-40D8-8064-A5B05AE50341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4299g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D70E3D-9214-4446-AFE1-31F6B9AE5F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DA7575-DE2E-4025-8FD5-403EE32C516F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478:v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D854EDA-5393-43CA-B088-6132EE0550F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478\\+:v7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85E0A1B-A7AF-4E29-A7CE-B48B4D41EC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g\\+:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5A5A9E-8D88-4AFE-8EB9-F7196C934923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C14007-6D98-4F55-9D7B-6B14E951DA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r483g:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986C07E3-9DE4-485B-BC5E-67F266C6E5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-r488:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEFEFB8-AED4-4C83-86D3-CE9502C5B36A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr300:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A96652E8-10EA-4B5E-BD64-1853672696B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr302:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE70EF0-508C-4F34-829C-0B30FAA96E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450g:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473671D0-D0C9-4D36-AE5E-E63A5EBA0C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900g:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8344CA75-15D5-4106-80DF-4772C1C0D3B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F740E87-DEB3-4DD7-90A0-08FF079F7242"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA306AC-0231-4359-8794-BFA81D085410"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB72835B-95E0-4C65-997C-6FE3656F5584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982AFFBC-52BC-4921-87BB-8F0F1C31558C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B867C51B-FD51-40E1-BFFC-A9DA8A3606B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583550-1D76-45E8-89A9-CD1D843BB93E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85C46-24B2-498E-AB6F-6329EF0F3B84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F3557E-AA91-4123-847A-79BB67A6571D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F47FC91-5861-465F-BF05-8C666B818722"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C4F2B2-F886-43ED-A29D-20865AA31B55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403F67A7-7E54-4255-9838-CDD6B9AA8266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE9545C-EC9B-47B0-BEA9-3B2D5109F970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFFF84-D7E5-475B-99E6-C93E3844CA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBB236-C33A-4FD7-888F-0BA9EB162B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D9121-35E3-479C-BE19-7E67DA2332C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45A711-B6FD-48A4-B455-286F80DE221B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7087925-7984-44DD-A20A-8B3C87802E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB1C13D-F1B7-40E4-8C70-3DBFBF17671B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2896BBB8-BA92-4B36-9BB7-E9397CDBB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C817C4-0B32-402D-909A-1DC9CA39DA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E532F4-3E42-4C9F-A01A-E7EFB7B48804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE1FA23-A3C7-4F9D-B466-624448BDC9B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FD7E97-3478-4F42-BB4A-5A1E1DD53877"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DAF676-8D9B-4689-A6AD-189E44161410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A167020D-FEB5-42E0-8815-B7F2501D6C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F2966-FD95-4B94-A7FB-8021782AD170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7355D93-F480-4E24-A0CD-CAC3AADE454F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D950C88-8CAA-430A-A5BB-B65E4FF13074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC78CAB2-0C24-4FF8-B758-AADDB3F24989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBD997E-88FC-4D23-B762-331A63A29C83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AB3B41-D8B1-4A0C-A5DD-5254D96D0655"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A26160-2484-4517-B223-40A329DAEDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6A8BD-0012-48FA-B5D0-A6F03097FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6AE4D9-A750-4770-A07A-FC87DCA4E840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87876AD9-B258-4E8E-ABF6-6704F6EEE468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E888A70B-984E-4D7C-B324-2F0E9C8E57C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4EF035-D38D-478C-BCAA-EE96EBEC9D80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3210g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECE364D-6F3C-4378-9D26-03C551F8CF54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3210g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B525A04A-6596-482F-82B6-46B61B9D6F84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er3220g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6FA6F6-2417-47D9-A4B8-E764C052A723"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er3220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E23FA7-5DB6-4F61-B925-C027769DDAB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE6F205-6017-4855-9D3A-CCCAAF4CD326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F14A9A-4134-4569-ACB9-DFB23D7DBB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD2CC06-2AC5-4D79-8DAB-B4D4DDEB659C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0E248-0844-4F67-B014-0D91097D2892"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504894B1-8B2B-40D3-B242-2451649FCEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDF4CBE-1393-4FA3-BEC5-D70DA65FEDAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6220g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C871734-EAEC-4E7B-A846-1BF63E6D5061"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6220g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91196457-19D1-4A9D-93CF-31A90CA72B18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er6510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF6DB66-3477-4BF6-A61D-6208B33CA00A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er6510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531FB326-A000-4E69-86FC-8BC6C3B93401"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-er7520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2885417-FA1E-46DA-A674-7ACAECD38DF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-er7520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3D607F-B64A-4E11-AA80-15CF41818FB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1B1DAE-DEFF-4D88-AE89-81C7B9EEA262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAADD27-C0F7-42E0-AA3F-EA1B0E711D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A207AE5-DE94-4EBF-B755-B2341FA569B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C69293-1D3F-4965-A464-1820D5DC16C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E70455-DFCC-49C1-9754-0422DB8AB12C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB4A127-4E83-47B5-B101-3AB12D7484B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0AA0C7-21F6-4059-A622-3274F3C666D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC48B20-C2B6-445D-9563-488BA4F7A8F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0AA0C7-21F6-4059-A622-3274F3C666D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC48B20-C2B6-445D-9563-488BA4F7A8F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E568C0-E4DF-4FDD-B8DB-327247EAAE14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38ED07-6E35-4836-95B3-9B20D6D6A6ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F175E34-8561-40EB-A299-A38F03F5B6CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3D6F5-F551-41A3-8756-CD276D935C5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026AD2C7-73E8-44AD-A9EE-F21386F88246"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r479gpe-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9891A83F-56E5-421B-A0DC-65B5B0A82979"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1235A816-60EC-4979-838B-C3E825475758"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E999611-39E1-48C1-99CB-581FF0451FD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process request with a crafted _tags[] parameter that is mishandled in a later admin/ajax/dashboard/approve-change request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en core/inc/auto-modules.php en BigTree CMS hasta la versión 4.2.19 permite que atacantes remotos autenticados obtengan información en el contexto del usuario empleado por la aplicación para recuperar datos de la base de datos. El atacante emplea una petición admin/trees/add/process con un parámetro _tags[] manipulado que se gestiona de manera incorrecta en un petición admin/ajax/dashboard/approve-change posterior."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.19",
            "matchCriteriaId" : "1AEF2D8C-985C-4948-8E75-382B335E7C4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/323",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigtreecms/BigTree-CMS/issues/323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T10:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a crafted Outlook.com calendar (aka Hotmail Calendar) invitation, (3) e-mail granting access to a directory that has JavaScript in its name, (4) JavaScript in a note name, (5) JavaScript in a task name, or (6) HTML e-mail that is mishandled in the Inbox component."
      }, {
        "lang" : "es",
        "value" : "Los componentes WebMail (Crystal, pronto y pronto4) en CommuniGate Pro en versiones anteriores a la 6.2.1 tienen vulnerabilidades de Cross-Site Scripting (XSS) persistente mediante (1) los campos location o details de una invitación de Google Calendar, (2) una invitación del calendario de Outlook (también conocida como Hotmail Calendar) manipulada, (3) un correo electrónico que proporciona acceso a un directorio que tiene JavaScript en su nombre, (4) JavaScript en un nombre de nota, (5) JavaScript en un nombre de tarea o (6) un correo electrónico HTML que se gestiona de manera incorrecta en el componente Inbox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:communigate:communigate_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.1",
            "matchCriteriaId" : "DB24D0BF-8A3C-42B6-81A6-FADBD720D616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145095/communigatepro-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43177/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145095/communigatepro-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43177/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4995",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring Security 5.0.0.M1. When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known \"deserialization gadgets.\" Spring Security configures Jackson with global default typing enabled, which means that (through the previous exploit) arbitrary code could be executed if all of the following is true: (1) Spring Security's Jackson support is being leveraged by invoking SecurityJackson2Modules.getModules(ClassLoader) or SecurityJackson2Modules.enableDefaultTyping(ObjectMapper); (2) Jackson is used to deserialize data that is not trusted (Spring Security does not perform deserialization using Jackson, so this is an explicit choice of the user); and (3) there is an unknown (Jackson is not blacklisting it already) \"deserialization gadget\" that allows code execution present on the classpath. Jackson provides a blacklisting approach to protecting against this type of attack, but Spring Security should be proactive against blocking unknown \"deserialization gadgets\" when Spring Security enables default typing."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE y Spring Security 5.0.0.M1. Al estar configurado para habilitar la escritura por defecto, Jackson contenía una vulnerabilidad de deserialización que podría conducir a la ejecución de código arbitrario. Jackson solucionó esta vulnerabilidad poniendo los \"deserialization gadgets\" conocidos en una lista negra. Spring Security configura Jackson con la escritura global habilitada por defecto , lo que significa que (a través del exploit anterior) se podría ejecutar código arbitrario si lo siguiente es cierto: (1) La compatilibidad de Spring Security con Jackson se aprovecha invocando SecurityJackson2Modules.getModules(ClassLoader) o SecurityJackson2Modules.enableDefaultTyping(ObjectMapper); (2) Jackson se usa para deserializar datos no fiables (Spring Security no realiza la deserialización con Jackson, por lo que esta es una elección explícita del usuario); y (3) hay un \"deserialization gadget\" desconocido (Jackson aún no lo ha puesto en su lista negra) que permite la ejecución de código presente en classpath. Jackson proporciona un enfoque de listas negras para protegerse contra este tipo de ataque, pero Spring Security debería ser proactivo contra el bloqueo de \"deserialization gadgets\" desconocidos cuando Spring Security habilita la escritura por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:4.2.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "338A64C7-7CF3-4E9C-AA2E-7EEB4B4446EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:4.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "38B442B7-B032-482B-853A-02B9C7E265B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:4.2.2:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C578BCAA-6E53-4F55-A6EC-76E966093FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:5.0.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EDB685-4E0A-4587-8464-B25A671E218D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99080",
        "source" : "security_alert@emc.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4995",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pivotal.io/security/cve-2017-4995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8028",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting userSearch, authentication is allowed with an arbitrary password when the username is correct. This occurs because some LDAP vendors require an explicit operation for the LDAP bind to take effect."
      }, {
        "lang" : "es",
        "value" : "En Pivotal Spring-LDAP en versiones 1.3.0 - 2.3.1, al conectarse a algunos servidores LDAP, cuando no se enlazan atributos adicionales y cuando se emplea LDAP BindAuthenticator con org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy como la estrategia de autenticación y configurando userSearch, se permite la autenticación con una contraseña arbitraria cuando el nombre de usuario es correcto. Esto ocurre porque algunos fabricantes LDAP requieren una operación explícita para que el enlace LDAP tenga efecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC866712-BC66-4BC1-8B0D-F7C720E22371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED876F6-06EF-4E9A-9996-3089A399FBD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:1.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "24CF0E02-78CC-4D09-8603-90A67E3CE49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDB87D6-A0A3-49BB-855C-A91EA81DA25D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F280CB3A-E0B4-46BB-81BF-5D2691FC4DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C1922C-CE23-4959-9FB7-45B7C7768A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9822DE9D-3695-4F9B-B666-71F1DDC12EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC26950-5BCF-471D-A764-E70DC0EF0071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536E8BB-2F49-40D8-B93C-D7B9EAAC3800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB55B4E0-7E77-4A52-AC51-FE1E2D1FE2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97DB63AC-74B6-44E4-9EA9-580258E6FC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F609347-C1C9-4F7C-992B-3BF8E0978E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF230338-8128-4A0A-BF85-FA7EB37B3630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring-ldap:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8E937E-3D6C-4029-8B3B-308D6657D194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00026.html",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8028",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4046",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8031",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1). In some cases, the UAA allows an authenticated user for a particular client to revoke client tokens for other users on the same client. This occurs only if the client is using opaque tokens or JWT tokens validated using the check_token endpoint. A malicious actor could cause denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Cloud Foundry Foundation cf-release (todas las versiones anteriores a v279) y UAA (versiones 30.x anteriores a la 30.6; versiones 45.x anteriores a la 45.4 y versiones 52.x anteriores a la 52.1). En algunos casos, UAA permite que un usuario autenticado para un cliente particular revoque tokens de cliente para otros usuarios en el mismo cliente. Esto solo ocurre si el cliente está usando tokens opacos o tokens JWT validados empleando el extremo check_token. Un actor malicioso podría provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "278",
            "matchCriteriaId" : "7AE35B61-A146-432F-80F9-BCB030184FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:uaa-release:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "30",
            "versionEndExcluding" : "30.6",
            "matchCriteriaId" : "722E4FAD-80A1-4705-86FF-A10933424862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:uaa-release:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "45",
            "versionEndExcluding" : "45.4",
            "matchCriteriaId" : "B8052FE7-3370-4227-8970-36BABECDADD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:uaa-release:52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591ACEBD-5EA8-4856-B42E-268CD0C0E8B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101967",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8031/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8031/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8038",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.813",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation."
      }, {
        "lang" : "es",
        "value" : "En Cloud Foundry Foundation Credhub-release versión 1.1.0, las listas de control de acceso (ACL) se aplican si un usuario autenticado puede realizar una operación en una credencial. Para las instalaciones que emplean ACL, el ACL fue omitido para el extremo interpolado CredHub, permitiendo que aplicaciones autenticadas vean cualquier credencial en la instalación CredHub."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:credhub-release:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92803362-0523-424D-9950-E19E0FED5493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-8038/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-8038/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8039",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. NOTE: this issue exists because of an incomplete fix for CVE-2017-4971."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Pivotal Spring Web Flow hasta la versión 2.4.5. Las aplicaciones que no cambian el valor de la propiedad MvcViewFactoryCreator useSpringBinding, que está deshabilitada por defecto (esto es, marcada como \"false\"), pueden ser vulnerables a expresiones EL maliciosas en estados de vista que procesan envíos de formulario pero que no tienen un subelemento para declarar asignaciones explícitas de propiedades enlazadas con datos. NOTA: este problema existe debido a una solución incompleta para CVE-2017-4971."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59073ACA-F7C5-4C50-85E7-80073ED4358A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2CF5C8-DA12-4778-9072-27F27BACAF8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B5074F-2E48-4A4E-AA19-D8883775A818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB71B411-A6F7-4EE3-BE6C-91DFF15DA656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring_web_flow:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46305F3-4B00-491E-9066-5750A375CA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100849",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8039",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8044",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks."
      }, {
        "lang" : "es",
        "value" : "En Pivotal Single Sign-On para PCF (versiones 1.3.x anteriores a la 1.3.4 y versiones 1.4.x anteriores a la 1.4.3), ciertas páginas permiten que se inyecte código en el entorno DOM mediante parámetros de consulta, que conducen a ataques XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637F500-B290-4E67-9479-DDD225596E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57579759-CA64-4722-BAEC-6B111BB23BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDE1123-0E6A-4293-A84A-6C7D5E87C60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2075D6CD-CC36-42C7-8F4D-E14E9B946367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C6E42F-0C08-4F77-8D42-1BEA8CCD38DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100618",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8044",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8045",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-27T10:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack."
      }, {
        "lang" : "es",
        "value" : "En Pivotal Spring AMQP, en versiones anteriores a la 1.7.4, 1.6.11 y 1.5.7, org.springframework.amqp.core.Message podría deserializarse de forma insegura al convertirse en cadena. Una carga útil maliciosa podría manipularse para explotar esto y permitir un ataque de ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACFBB63-5DF2-4CFE-9F37-B4F91BAF210C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0434AC-A22B-410C-BD47-5416ED236D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "01C1A0C8-5881-4D45-9BAE-47342892610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE1950B-E677-4B62-80D6-DAD8AA90D74B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56444AA0-79FF-4E96-A06A-5DE099D26F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06313540-F311-4F45-BD93-A318D0773354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8111C7-D43F-4CE3-AD94-7A0A09036E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49EC65-236E-4831-A8C0-9AEF1B308ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176DD4C4-21E3-4E17-AE78-298325AE7FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A38607-63FD-4270-9BCC-EFCCEDDD4496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B334BA4-4CBA-48A0-B347-3E23FA003DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "64170B60-0D44-4F98-B57F-9A2A05E62ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6643CB-F480-462C-9C54-4F2D9F78ADD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9B6464-C6E5-4944-8745-02605C068D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C88C739-8DBC-4719-B0FD-A18FA598184B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485FE522-130B-49EB-A84F-E30E70D866FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D636C03C-420A-4997-9C01-2019EF481AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E00506B-2BE4-48D6-8E7C-4A719521FC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC55C720-3B3B-456E-9E03-BE2BEB85C211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C87474-4BC3-4EDE-B54D-B91154826224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA632EBE-06AA-4A6E-A1DF-5C71F88A3EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAA749F-46DF-4176-ABF0-904F8F506FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBB0442-EE82-4AEA-B370-58AFFA2656DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4138AE8A-DA42-404F-A5FA-5B99891B0A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDF3851-F41B-473E-BDBE-3F45A476ECAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCC4621-0BF1-4869-AC68-AA14B645458B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E48B94-9D63-47CB-BB04-DC4DCC19950B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100936",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8045",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T14:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitPHP by xiphux is vulnerable to OS Command Injections"
      }, {
        "lang" : "es",
        "value" : "GitPHP de xiphux es vulnerable a inyecciones de comandos del sistema operativo"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D41971-B5C1-4F64-BA1C-D080191F8546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1EB2FC-647C-4DDE-B890-D57084DA370E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5811AB-2EC7-4170-A748-F8697CB1BF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEBDDA5-87F2-462C-9F41-39810F3F816A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384FB52A-0DC1-47DD-B92E-207B0407F847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5748E5D-4F37-41E0-BA2A-10B1FEBB3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "144FDAB1-0BDF-44CD-9FBF-9072EE4EC532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07A0D2B-338C-48F2-A7C8-78F065454042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA70BDC3-B16D-46BE-8BCF-C874978A6D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4215457-A562-4C77-9C41-C4BBDE96CF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5775D31F-D33F-44D2-9F85-B94281D5CBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D075FE60-C002-400D-963A-4298B5A833CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA07C2-9D87-4BFE-8E8D-1E176558EE91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DFEFBF-8F83-451E-995A-5A844CC5B13F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitphp_project:gitphp:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BC69FF-8C34-4588-AEE1-66A40E6E5015"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Enalean/gitphp/commit/160621785ee812d6d90e20878bd6175e42c13c94",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiphux/gitphp/pull/37",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/Enalean/gitphp/commit/160621785ee812d6d90e20878bd6175e42c13c94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiphux/gitphp/pull/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1001002",
      "sourceIdentifier" : "46fe6300-5254-4a98-9594-a9567bec8179",
      "published" : "2017-11-27T14:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 3.17.0 de math.js tenían una vulnerabilidad de ejecución de código arbitrario en el motor de JavaScript. La creación de una función escrita con código JavaScript en el nombre podría resultar en la ejecución arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mathjs:math.js:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.17.0",
            "matchCriteriaId" : "CAA4C359-CEFC-48E5-ADD9-42689961238F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1001003",
      "sourceIdentifier" : "46fe6300-5254-4a98-9594-a9567bec8179",
      "published" : "2017-11-27T14:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 3.17.0 de math.js tenían un problema por el cual las propiedades privadas como un constructor podían remplazarse empleando caracteres unicode al crear un objeto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mathjs_project:mathjs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.17.0",
            "matchCriteriaId" : "F1B8015C-31BB-48C5-9028-AD85F11DBF6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/josdejong/mathjs/commit/a60f3c8d9dd714244aed7a5569c3dccaa3a4e761",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/josdejong/mathjs/commit/a60f3c8d9dd714244aed7a5569c3dccaa3a4e761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1001004",
      "sourceIdentifier" : "46fe6300-5254-4a98-9594-a9567bec8179",
      "published" : "2017-11-27T14:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 0.10.6 de typed-function tenían una vulnerabilidad de ejecución de código arbitrario en el motor de JavaScript La creación de una función escrita con código JavaScript en el nombre podría resultar en la ejecución arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typed_function_project:typed_function:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.6",
            "matchCriteriaId" : "BE759593-BF10-4875-8C88-AD101A08C6E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/josdejong/typed-function/blob/master/HISTORY.md#2017-11-18-version-0106",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/josdejong/typed-function/commit/6478ef4f2c3f3c2d9f2c820e2db4b4ba3425e6fe",
        "source" : "46fe6300-5254-4a98-9594-a9567bec8179"
      }, {
        "url" : "https://github.com/josdejong/typed-function/blob/master/HISTORY.md#2017-11-18-version-0106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/josdejong/typed-function/commit/6478ef4f2c3f3c2d9f2c820e2db4b4ba3425e6fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15100",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-27T14:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the \"chart\" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page."
      }, {
        "lang" : "es",
        "value" : "Un atacante que envíe hechos que contienen HTML al servidor Foreman puede provocar Cross-Site Scripting (XSS) persistente en ciertas páginas: (1) La página Facts, al hacer clic en el botón \"chart\" y desplazándose sobre el gráfico; (2) la página Trends, al comprobar el gráfico para una tendencia basada en un hecho; (3) la página Statistics, para los hechos que se agregan en esta página."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "ADC9D85F-FD01-4772-8F97-9DCFDDE8D399"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB283C80-F7AF-4776-8432-655E50D7D65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite_capsule:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461407B5-C167-4DE1-A934-FD5ADFB4AD4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.theforeman.org/issues/21519",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theforeman/foreman/pull/4967",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://projects.theforeman.org/issues/21519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theforeman/foreman/pull/4967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T15:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91."
      }, {
        "lang" : "es",
        "value" : "Inyección de comandos en evince mediante un nombre de archivo al imprimir a PDF. Esto afecta a versiones anteriores a la 3.25.91."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evince:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.25.91",
            "matchCriteriaId" : "7F533281-25A0-4CD5-88FA-E8384254B157"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=784947",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00013.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://seclists.org/bugtraq/2020/Feb/18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=784947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://seclists.org/bugtraq/2020/Feb/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T15:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen (<= 2.2.2) and can lead to arbitrary code being executed when these commands are used on a well-crafted yaml specification."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de análisis sintáctico yaml en versiones iguales o anteriores a la 1.0.30 de Swagger-Parser y las versiones iguales o anteriores a la 2.2.2 de Swagger codegen resulta en la ejecución de código arbitrario cuando se analiza una especificación yaml Open-API maliciosamente manipulada. En este caso en particular, afecta a los comandos \"generate\" y \"validate\" en swagger-codegen (versiones 2.2.2 y anteriores) y puede provocar que se ejecute código arbitrario cuando se utilicen estos comandos en una especificación de yaml especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swagger:swagger-codegen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "19533E03-1A1C-4341-850D-1B521E22A1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swagger:swagger-parser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.30",
            "matchCriteriaId" : "20F013ED-574E-4E3D-9320-386127494259"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swagger-api/swagger-parser/pull/481",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-parser/pull/481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0910",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2017-11-27T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm."
      }, {
        "lang" : "es",
        "value" : "En Zulip Server en versiones anteriores a la 1.7.1, en un servidor con múltiples dominios, una vulnerabilidad en el sistema de invitación deja que un usuario autorizado de un dominio del servidor cree un usuario en cualquier otro dominio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "5DAE3C15-00D9-4490-B4C2-A61BF637A7D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14585",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-11-27T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affected by this vulnerability. Versions of Hipchat Data Center starting with 3.0.0 and before 3.1.0 are affected."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de SSRF (Server-Side Request Forgery) podría conducir a la ejecución remota de código para administradores autenticados. Este problema fue introducido en la versión 2.2.0 de Hipchat Server y la versión 3.0.0 de Hipchat Data Center. Las versiones de Hipchat Server desde la 2.2.0 y anteriores a la 2.2.6 se han visto afectadas por esta vulnerabilidad. Las versiones de Hipchat Data Center desde la 3.0.0 y anteriores a la 3.1.0 se han visto afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:hipchat_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "17952B42-10DC-4976-A065-8E3B88ED49CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:hipchat_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.6",
            "matchCriteriaId" : "1727D04A-D980-4931-B412-EEC339A193E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101945",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-3526",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-3526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14586",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-11-27T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "El cliente de escritorio Hipchat para Mac es vulnerable a ejecución remota de código de parte del cliente mediante el análisis sintáctico de enlaces de videollamada. Los clientes de escritorio Hipchat para Mac en versiones iguales o superiores a la 4.0 y anteriores a la versión 4.30 se han visto afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:hipchat:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.30",
            "matchCriteriaId" : "534D0985-9162-43C8-9B33-A634A1187FB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101947",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-3473",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HCPUB-3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15114",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-27T16:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes."
      }, {
        "lang" : "es",
        "value" : "Cuando libvirtd es configurado por OSP director (tripleo-heat-templates) para usar el transporte TLS, vuelve por defecto a la misma autoridad de certificado que todos los servicios que no pertenecen a libvirtd. Como no se configura autenticación adicional, esto permite que esos servicios se conecten a libvirtd (lo que equivale al acceso root). Si existe una vulnerabilidad en otro servicio podría, combinado con este error, explotarse para escalar privilegios y tomar el control de los nodos de cálculo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack_platform:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01711B3A-E194-44A5-A034-A5B819A35787"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101971",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15117",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-27T16:29:00.357",
      "lastModified" : "2023-11-07T02:39:20.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9316",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2017-11-27T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de autenticación de actualización de firmware en Dahua IPC-HDW4300S y algunos productos IP. La vulnerabilidad fue provocada por la función interna de depuración. Esta función en particular fue empleada para analizar problemas y ajustar el rendimiento durante la fase de desarrollo del producto. Permitía que el dispositivo reciba solo datos específicos (una dirección, sin transmitir) y, por lo tanto, no estaba implicada en ninguna instancia de recolección de datos privados del usuario o de permisión de ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.0.r.20150206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5669BA-5C1F-4F52-9D79-8776282E5A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.1.r.20150420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA79412C-1BC8-4655-8436-E1A5717E6350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.2.r.20150715:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F2F333-8891-4D55-90C4-6313276DE7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.3.r.20150921:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B600A3-09B2-4ABD-B186-BCFBF515D246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.5.r.20160409:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C03BAA9-3FC9-469A-B1E5-62707976CBAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.5.r.20160603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45C75C6-8C05-4329-A90F-0230E92B2ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.5.r.20160803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33CB1BFB-1D29-4D39-948E-099D1CB4A154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.5.r.20161226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF362C3-DA4A-4E7C-85D9-05940C69BBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.5.r.20170305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44881D9-EB60-477B-8B63-DE76F2E2EF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:nvr11hs_firmware:3.210.0000.5.r.20170321:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D728DCB-8F1F-44F1-9F7D-E8D9C4D15A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:nvr11hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E897BE3B-42DC-4818-974E-E0B4888E8C13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.240.0009.0.r.20131015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B986666-C017-4F6E-81B4-00CB607BFA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.400.0000.0.r.20131231:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130851B8-3EF5-4E9B-91F2-BBC2637854DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0000.0.r.20140419:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8B4DD7-BFA0-4702-85EC-DDF6204B110C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0002.0.r.20140621:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB77D367-6AB0-4D4C-9499-F4B1EB7CB45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0002.0.r.20140724:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480879F4-B4CE-47B6-AEB3-3F2A3352764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0005.0.r.20141205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACE8717-A584-4744-8ED6-189EE125B45D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7E4FC4-9552-48BA-9A9D-4489CA923D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0007.0.r.20150409:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42228E00-D80B-4B4C-A006-022EFC141B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4300s_firmware:2.420.0008.0.r.20150710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC6C72D-7C18-4072-8498-A5264A9D81F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw4300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4DEAC6-BAE1-4591-A687-008DBBC148D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw4x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1070CF92-6AC4-4D1A-8122-2347468DE160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw4x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B48283-EC41-49E4-A6C6-B4FF3A9F0AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hfw4x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0B291B-A24A-4A4F-8449-872103F12B14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B77F7-BE17-4DE3-844D-5D528B916261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07D98F00-29B6-41A6-A8FD-4FA4C19338E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw4x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF19BD61-B331-4EAF-8F08-EB9DCFEF01ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw4x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DCC8E6-3623-4A19-9434-2219ECEE52C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw4x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2F64D9-6DA0-4088-BC44-FBD0562B0995"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw4x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54666037-AEE9-4AA4-8FDE-AC7944D91FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hf5x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA374D52-FB4F-433B-8841-5886D13F9C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hf5x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A6D3CD-E051-4DD5-88FD-3674A9347A27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hf5x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253995B9-6787-4F11-A949-AA5FFAEF7119"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw5x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C6F49-6687-40A8-A24B-324B13ED6ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw5x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D1B4E9-F520-4A80-9BD0-148B958997A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hfw5x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390E4C77-C40D-416B-8BED-260E444A0271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw5x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B25302A-0E7D-4BD7-98FC-5E7B6832A660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw5x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5827DC8-D95E-409A-AA40-59B3306FB115"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw5x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BA234-BE9C-40B4-AF21-EC0DC2E40F8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw5x00_firmware:2.400.0000.3.r.20150312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC30B4-19EA-4D2F-8E44-1795D118A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw5x00_firmware:2.420.0006.0.r.20150311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F0821A-852B-4EC7-A5F8-6536400F9237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw5x00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC94754-E15D-42C8-A8B2-C5D1C3595DA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html",
        "source" : "cybersecurity@dahuatech.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T19:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stored cross-site scripting (XSS) vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the (1) URL value of an item or (2) user log history. To exploit the vulnerability, the attacker must be first authenticated to the application. For the first one, the attacker has to simply inject XSS code within the URL field of a shared item. For the second one however, the attacker must prepare a payload within its profile, and then ask an administrator to modify its profile. From there, whenever the administrator accesses the log, it can be XSS'ed."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de Cross-Site Scripting (XSS) persistente en TeamPass en versiones anteriores a la 2.1.27.9 permiten que atacantes remotos inyecten scripts web o HTML arbitrarios mediante (1) el valor URL de un elemento o (2) el historial de registros del usuario. Para explotar esta vulnerabilidad, el atacante debe estar primero autenticado en la aplicación. Para el primero, el atacante solo tiene que inyectar código XSS en el campo URL de un elemento compartido. Sin embargo, para el segundo, el atacante debe preparar una carga útil en su perfil y, a continuación, pedir a un administrador que modifique su perfil. Desde aquí, cada vez que el administrador accede al registro, puede sufrir XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.27.9",
            "matchCriteriaId" : "35D9C25C-1C7F-404B-B27E-00B1BC77A868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T19:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user (including admin), or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the \"id\" parameter when invoking \"delete_user\" on users.queries.php."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 2.1.27.9 de TeamPass no aplican correctamente el control de acceso de managers al solicitar users.queries.php. En ese caso, es posible que un usuario manager elimine un usuario arbitrario (incluyendo a un administrador) o que modifique atributos de cualquier usuario arbitrario excepto un administrador. Para explotar la vulnerabilidad, un atacante autenticado debe tener los derechos de manager de la aplicación y alterar las peticiones enviadas directamente, por ejemplo cambiando el parámetro \"id\" al invocar \"delete_user\" en users.queries.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.27.9",
            "matchCriteriaId" : "35D9C25C-1C7F-404B-B27E-00B1BC77A868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/8f2d51dd6c24f76e4f259d0df22cff9b275f2dd1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/8f2d51dd6c24f76e4f259d0df22cff9b275f2dd1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T19:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the \"id\" parameter when invoking \"delete_role\" on roles.queries.php."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 2.1.27.9 de TeamPass no aplican correctamente el control de acceso de managers al solicitar roles.queries.php. Es posible para un usuario manager modificar o eliminar cualquier rol arbitrario en la aplicación.. Para explotar la vulnerabilidad, un atacante autenticado debe tener los derechos de manager de la aplicación y alterar las peticiones enviadas directamente, por ejemplo cambiando el parámetro \"id\" al invocar \"delete_role\" en roles.queries.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.27.9",
            "matchCriteriaId" : "35D9C25C-1C7F-404B-B27E-00B1BC77A868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/ef32e9c28b6ddc33cee8a25255bc8da54434af3e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/ef32e9c28b6ddc33cee8a25255bc8da54434af3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T19:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in order to select the correct branch and be able to upload any arbitrary file. From there, it can simply access the file to execute code on the server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de subida de archivos arbitrarios, presente en versiones anteriores a la 2.1.27.9 de TeamPass, permite que usuarios autenticados remotos suban archivos arbitrarios conduciendo a la ejecución remota de comandos. Para explotar esta vulnerabilidad, un atacante autenticado tiene que alterar los parámetros de una petición en upload.files.php para seleccionar la rama correcta y ser capaz de subir cualquier archivo arbitrario. Desde ahí, puede simplemente acceder al archivo para ejecutar código en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.27.9",
            "matchCriteriaId" : "35D9C25C-1C7F-404B-B27E-00B1BC77A868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/9811c9d453da4bd1101ff7033250d1fbedf101fc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/9811c9d453da4bd1101ff7033250d1fbedf101fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T19:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, edit any item within a read-only directory, delete an arbitrary item, delete the file attachments of an arbitrary item, copy the password of an arbitrary item to the copy/paste buffer, access the history of an arbitrary item, and edit attributes of an arbitrary directory. To exploit the vulnerability, an authenticated attacker must tamper with the requests sent directly, for example by changing the \"item_id\" parameter when invoking \"copy_item\" on items.queries.php."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 2.1.27.9 de TeamPass no aplican correctamente el control de acceso de elementos al solicitar items.queries.php. Es posible copiar cualquier elemento arbitrario en un directorio controlado por el atacante, editar cualquier elemento en un directorio de solo lectura, eliminar un elemento arbitrario, eliminar los archivos adjuntos de un elemento arbitrario, copiar la contraseña de un elemento arbitrario en el búfer copy/paste, acceder al historial de un elemento arbitrario y editar los atributos de un directorio arbitrario. Para explotar la vulnerabilidad, un atacante autenticado debe alterar las peticiones enviadas directamente, por ejemplo cambiando el parámetro \"item_id\" al invocar \"copy_item\" en items.queries.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.27.9",
            "matchCriteriaId" : "35D9C25C-1C7F-404B-B27E-00B1BC77A868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://blog.amossys.fr/teampass-multiple-cve-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T19:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call."
      }, {
        "lang" : "es",
        "value" : "La función walk_hugetlb_range en mm/pagewalk.c en el kernel de Linux en versiones anteriores a la 4.14.2 gestiona de manera incorrecta los agujeros en los rangos hugetlb, lo que permite que usuarios locales obtengan información sensible de la memoria del kernel no inicializada mediante el uso manipulado de la llamada del sistema mincore()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.2",
            "matchCriteriaId" : "8BFBFB82-9C5E-45C1-AD36-05E379DAE87F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101969",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43178/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43178/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1240",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359."
      }, {
        "lang" : "es",
        "value" : "Los productos IBM Rhapsody DM podrían revelar información sensible en respuestas HTTP 500 - Error interno del servidor. IBM X-Force ID: 124359."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7E81B-DA97-4545-9C78-962E5FE9202D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D790D42-7B73-40A6-BF0E-630099FB97E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABBECCB-F0B9-4D45-9372-6F313F841FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C98336-97F8-4263-A801-D6F5673CB17A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0477D24-56F7-46A2-A08A-C20A90E6E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0514FAC-52CE-41F6-B255-E2D83E71F3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746190AA-6D21-446F-80F5-4C98F5BF74A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08125E1B-FE2B-436C-A69F-067BC1B5C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CE7D3E-BF02-44DA-ADAE-5CB0E22492AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46883130-F370-406C-A8E8-213399F2EE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13CE71-BEC0-4DEC-9CF7-183672F6729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2451D-F31E-4CF6-8E61-2970A4FB174D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAF452F-94AB-4857-BCD6-AE5251C61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596E71E-4507-4EFC-ABF9-41D8FD338CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B201E3D-1028-4955-AFE2-AF8C14CAA182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C966E0-6372-4CA5-902E-DEE17FC139E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12D7433-30F0-427F-BF82-0AAD492CE35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF2E53-3618-4610-AC36-602584DB26EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF978C93-8747-416A-890B-09575EF0BA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BEB8AD-ACD5-4F5B-8C95-8C1EA8BFE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57DF8BD-34A6-481A-902A-8E1D190201FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B450B35-5169-4B41-B928-0F22DF55A28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1DD60E-3E2C-4F42-9892-B031CB3B570D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6504477B-9BF5-49F6-8E3A-9B07B30895B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C4948B-69C4-4CAF-808E-426483ED0622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C297440-406F-4508-9D8D-92F79DF91C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C416F89-7E5E-4FE7-A532-F13843AA1771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2654BDE-3134-4653-B472-995B02E9B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9800CBFC-3169-42CA-BB36-22C34F222FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010512",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101976",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124359",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1251",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no revelada en aplicaciones CLM podría resultar en que algunos parámetros de implementación administrativa se muestren al atacante. IBM X-Force ID: 124631."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7E81B-DA97-4545-9C78-962E5FE9202D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D790D42-7B73-40A6-BF0E-630099FB97E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABBECCB-F0B9-4D45-9372-6F313F841FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C98336-97F8-4263-A801-D6F5673CB17A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0477D24-56F7-46A2-A08A-C20A90E6E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0514FAC-52CE-41F6-B255-E2D83E71F3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746190AA-6D21-446F-80F5-4C98F5BF74A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08125E1B-FE2B-436C-A69F-067BC1B5C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CE7D3E-BF02-44DA-ADAE-5CB0E22492AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46883130-F370-406C-A8E8-213399F2EE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13CE71-BEC0-4DEC-9CF7-183672F6729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2451D-F31E-4CF6-8E61-2970A4FB174D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAF452F-94AB-4857-BCD6-AE5251C61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596E71E-4507-4EFC-ABF9-41D8FD338CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B201E3D-1028-4955-AFE2-AF8C14CAA182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C966E0-6372-4CA5-902E-DEE17FC139E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12D7433-30F0-427F-BF82-0AAD492CE35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF2E53-3618-4610-AC36-602584DB26EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF978C93-8747-416A-890B-09575EF0BA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BEB8AD-ACD5-4F5B-8C95-8C1EA8BFE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57DF8BD-34A6-481A-902A-8E1D190201FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B450B35-5169-4B41-B928-0F22DF55A28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1DD60E-3E2C-4F42-9892-B031CB3B570D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6504477B-9BF5-49F6-8E3A-9B07B30895B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C4948B-69C4-4CAF-808E-426483ED0622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C297440-406F-4508-9D8D-92F79DF91C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C416F89-7E5E-4FE7-A532-F13843AA1771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2654BDE-3134-4653-B472-995B02E9B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9800CBFC-3169-42CA-BB36-22C34F222FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010682",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124631",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1283",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144."
      }, {
        "lang" : "es",
        "value" : "Las versiones 8.0 y 9.0 de IBM WebSphere MQ podrían permitir que un usuario autenticado provoque una fuga de memoria compartida por aplicaciones MQ empleando consultas dinámicas, lo que podría conducir a una falta de recursos para otras aplicaciones MQ. IBM X-Force ID: 125144."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6617F-85DF-49FE-B713-148624DC87A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018595DD-9AAD-44C7-9A46-BC78AF1F6C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF68ED28-0999-4622-A923-624284229F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003852",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125144",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22003852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1461",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128460."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128460."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "8B3D3092-A570-45DE-9CD4-72E01787D189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "008561A7-B37F-4F11-8635-B29726FFEFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128460",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1484",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Commerce Enterprise, Professional, Express y Developer 7.0 y 8.0 podrían permitir que un atacante autenticado obtenga información como los datos personales de usuario. IBM X-Force ID: 128622."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2E7243-19A2-47B2-905E-47219F08F4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C534568E-A611-472C-9399-15FC66D875C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF3D419-A12C-4A21-9796-DBB73D638E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87504CD1-92DA-4847-BDA7-013622CA7AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625E1896-9035-46F3-957B-83FB128F90F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3AC68C-CCA2-495D-AE21-04C937CD5340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56CE80F-A7E1-4BE0-9679-BB4F94362B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3C8F33-D613-4183-ABE1-5A3A08C16BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5F593-BE92-4E37-9EE9-42C05FA87DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D19E4D-A256-44D5-A8D8-7C9F3A64B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12961C31-63AD-4AA8-8267-E003F985CE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9D8DAA-285C-4ED1-A602-412725FD79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75B5188-E337-4240-9834-92C11DCE9DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2E3F22-60F9-4B70-9485-6DDAC7FE4496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8902699B-AE6A-44A4-838A-28F3EB62881B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50A02C-E75F-4602-BDAA-FA4CBEE9CB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC536A-498B-439F-927E-B72314F8B0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0A8CAD-D5DD-45DE-900F-046673002D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC353B83-4053-4762-8E90-9E96AA30F04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A3EBB9-C6B1-4A2D-A4E5-2D3E53A1CF02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1895E-384D-4EF3-A395-7AFFC22E46CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438E93D2-502F-4569-AB8A-EFECA403798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64287718-D7AD-425B-B7B7-A6442BFD5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1523569-2A23-4689-BE59-F74E678A8B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F4B2FD-14BA-46D9-B09F-1DABBA88FF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B22C48-3347-422C-9730-0A9442645D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDA8ACF-4134-434E-A5FD-39A587DE27FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFB25F3-6FD7-45C9-AFCF-FAB034107E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BCC81A-B7DA-40B9-B883-A00DF9CE585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8C98FD-E4AB-4BC8-9729-652294B1DF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F938475-91A7-4FE8-AD38-6D4C0377865B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C13D23-08C9-4836-A204-5168C8B019AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE36EB64-A7C6-42F2-876D-B7DBAF7C83BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF019C2-CD66-406D-9469-BEAB38248474"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A754F0-1328-48EF-B3C6-8435EC11D680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3DF211-CE2D-47AE-BADA-A75F28B6961C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DB29B-5FC7-496A-B20E-99A644D8A073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038D04C7-A19F-4EB6-91AE-A8890F8FFEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72243D91-19BC-4D66-8DF0-AD615E5CAE9E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73151B02-88BC-43BE-A725-02759A33BD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8D520C-4724-4622-80AE-0F9F39DB8AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DABD4B-DD76-4E73-A85E-7E1515BD3DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E7F742-FA1B-4224-A528-71FC2F2056BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45802520-DA5B-4BD8-AED7-E60455B0E1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB0C3F5-A39F-43C4-A007-C0EF362A3FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EA3685-96CE-43CB-8D21-CCCA668559FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9775AF83-13CA-4C15-864E-4079F8B02927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:8.0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F88032-7020-4BDD-AFF0-D75D50D5301A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_8:*:*:*:*:*:*",
            "matchCriteriaId" : "7C20CB96-9E05-4702-94F1-E6C7439FAA13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010103",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101894",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128622",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1560",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131759."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131759."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "8B3D3092-A570-45DE-9CD4-72E01787D189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "008561A7-B37F-4F11-8635-B29726FFEFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131759",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1570",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852."
      }, {
        "lang" : "es",
        "value" : "Los productos IBM Jazz Foundation podrían permitir que un usuario autenticado obtenga información sensible de seguimientos de pila. IBM X-Force ID: 131852."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7E81B-DA97-4545-9C78-962E5FE9202D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D790D42-7B73-40A6-BF0E-630099FB97E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABBECCB-F0B9-4D45-9372-6F313F841FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C98336-97F8-4263-A801-D6F5673CB17A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0477D24-56F7-46A2-A08A-C20A90E6E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0514FAC-52CE-41F6-B255-E2D83E71F3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746190AA-6D21-446F-80F5-4C98F5BF74A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08125E1B-FE2B-436C-A69F-067BC1B5C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CE7D3E-BF02-44DA-ADAE-5CB0E22492AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46883130-F370-406C-A8E8-213399F2EE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13CE71-BEC0-4DEC-9CF7-183672F6729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2451D-F31E-4CF6-8E61-2970A4FB174D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAF452F-94AB-4857-BCD6-AE5251C61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596E71E-4507-4EFC-ABF9-41D8FD338CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B201E3D-1028-4955-AFE2-AF8C14CAA182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C966E0-6372-4CA5-902E-DEE17FC139E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12D7433-30F0-427F-BF82-0AAD492CE35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF2E53-3618-4610-AC36-602584DB26EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF978C93-8747-416A-890B-09575EF0BA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BEB8AD-ACD5-4F5B-8C95-8C1EA8BFE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57DF8BD-34A6-481A-902A-8E1D190201FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B450B35-5169-4B41-B928-0F22DF55A28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1DD60E-3E2C-4F42-9892-B031CB3B570D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6504477B-9BF5-49F6-8E3A-9B07B30895B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C4948B-69C4-4CAF-808E-426483ED0622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C297440-406F-4508-9D8D-92F79DF91C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C416F89-7E5E-4FE7-A532-F13843AA1771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2654BDE-3134-4653-B472-995B02E9B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9800CBFC-3169-42CA-BB36-22C34F222FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010512",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102020",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131852",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1593",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132494."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132494."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "8B3D3092-A570-45DE-9CD4-72E01787D189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "008561A7-B37F-4F11-8635-B29726FFEFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132494",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1607",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132927."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132927",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1628",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.627",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager 8.6.0.0 permite que usuarios autenticados detengan y reanuden el gestor de eventos llamando a una API REST con comprobaciones de autorización incorrectas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324A0484-C50D-4400-B6FD-23D793F032AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009496",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101900",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039777",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133126",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1650",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133260."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133260."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133260",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1678",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134000."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134000."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "8B3D3092-A570-45DE-9CD4-72E01787D189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "008561A7-B37F-4F11-8635-B29726FFEFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134000",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1688",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.753",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134063."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134063",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1689",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-11-27T21:29:00.800",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134064."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134064",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T22:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en las versiones 4.x de Samba anteriores a la 4.7.3 permiten que atacantes remotos ejecuten código arbitrario mediante una petición SMB1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.5.0",
            "matchCriteriaId" : "A1C39045-A8B1-4EA4-B6AB-55F32EE2EDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.15",
            "matchCriteriaId" : "0CEB7EE5-8413-412F-B709-72FF4EAE3936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.11",
            "matchCriteriaId" : "4ECEC5E5-52C3-4772-BB7D-62294F59BF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7.0",
            "versionEndExcluding" : "4.7.3",
            "matchCriteriaId" : "5FA896BE-8FFF-4C6F-ABD3-EC1720A80DFE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101907",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3486-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3260",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3261",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4043",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-14746.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_72_Samba",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3486-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-14746.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_72_Samba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-27T22:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 4.7.3 de Samba podrían permitir que atacantes remotos obtengan información sensible aprovechando el error del servidor para borrar la memoria dinámica (heap) asignada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "4.5.15",
            "matchCriteriaId" : "31B2811F-CB85-4C6D-A72A-62777E22098B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.11",
            "matchCriteriaId" : "4ECEC5E5-52C3-4772-BB7D-62294F59BF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7.0",
            "versionEndExcluding" : "4.7.3",
            "matchCriteriaId" : "5FA896BE-8FFF-4C6F-ABD3-EC1720A80DFE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101908",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039855",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3486-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3486-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3260",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3261",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4043",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-15275.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_72_Samba",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3486-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3486-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-15275.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_72_Samba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14379",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-28T07:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 8.2 SP1 P6 de EMC RSA Authentication Manager contienen una vulnerabilidad de Cross-Site Scripting (XSS) que podría ser explotada por usuarios maliciosos con el fin de comprometer el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "BE983093-7B76-4EBC-92E2-5A0EBC90E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/34",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101925",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039853",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14389",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-28T07:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). The Cloud Controller does not prevent space developers from creating subdomains to an already existing route that belongs to a different user in a different org and space, aka an \"Application Subdomain Takeover.\""
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Cloud Foundry Foundation capi-release (todas las versiones anteriores a la 1.45.0), cf-release (todas las versiones anteriores a la v280) y cf-deployment (todas las versiones anteriores a la v1.0.0). Cloud Controller no evita que los desarrolladores de un espacio creen subdominios a una ruta que ya existe y que pertenece a un usuario diferente en una organización y un espacio diferentes. Esto también se conoce como \"Application Subdomain Takeover\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.45.0",
            "matchCriteriaId" : "DD7E701F-4E99-4ADB-997A-9F544E48B4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "477E4243-21F9-401B-8B99-0A328C28D1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "280",
            "matchCriteriaId" : "9347168F-C207-45C8-B161-BD459A53AAE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/cve-2017-14389/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/cve-2017-14389/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8001",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-28T07:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC ScaleIO en las versiones 2.0.1.x. En un entorno Linux, uno de los scripts de soporte guarda las credenciales del usuario ScalelO MDM que ejecutó el script en texto claro en archivos de registro temporales. Los archivos temporales podrían ser leídos por un usuario sin privilegios con acceso al servidor en donde se ejecutó el script para recuperar las credenciales expuestas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_scaleio:2.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D942B6-E6B3-48F5-B217-9A2580D38617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_scaleio:2.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278703C1-9ED9-42D1-B13C-A96C2B369DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_scaleio:2.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929B8633-45F2-47BC-82AD-D9174DE59C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_scaleio:2.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8718133-AB94-4DC5-90B0-E669098CE9EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/35",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101997",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8019",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-28T07:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentially allow an unauthenticated remote attacker to send specifically crafted packets to stop ScaleIO services and cause a denial of service situation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC ScaleIO 2.0.1.x. Una vulnerabilidad en los analizadores sintácticos de mensajes (MDM, SDS y LIA) podría permitir que un atacante remoto no autenticado envíe paquetes especialmente manipulados para detener los servicios de ScaleIO y provocar una situación de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E578EC-E7F8-4E4E-98ED-AD1F000DF8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C514B774-4EC0-42EE-8421-970C85CF398C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C41DD1-C7DE-4BC3-8184-DC1DFDCFEE2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B7D777-73FB-427C-8D0F-E1D81A55D015"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/35",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101991",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8020",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-28T07:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC ScaleIO 2.0.1.x. Una vulnerabilidad en el servicio SDBG podría permitir que un atacante remoto no autenticado ejecute comandos arbitrarios con privilegios root en un servidor afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E578EC-E7F8-4E4E-98ED-AD1F000DF8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C514B774-4EC0-42EE-8421-970C85CF398C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C41DD1-C7DE-4BC3-8184-DC1DFDCFEE2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:scaleio:2.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B7D777-73FB-427C-8D0F-E1D81A55D015"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/35",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101995",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page."
      }, {
        "lang" : "es",
        "value" : "La función files en la sección de administración en CS-Cart 4.6.2 y anteriores permite que atacantes ejecuten código PHP arbitrario mediante vectores relacionados con una página personalizada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.2",
            "matchCriteriaId" : "469021A1-1D58-45D5-9BC9-0A5656D0F71D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145096/CSC-Cart-4.6.2-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145096/CSC-Cart-4.6.2-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T15:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file."
      }, {
        "lang" : "es",
        "value" : "Winamp Pro 5.66 Build 3512 permite que atacantes remotos provoquen una denegación de servicio (DoS) mediante un archivo WAV, WMV, AU, ASF, AIFF o AIF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiovalley:winamp_pro:5.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D84C94-EF51-4899-B2F9-4BCB7DCD67AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43186/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43186/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T15:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file."
      }, {
        "lang" : "es",
        "value" : "KMPlayer 4.2.2.4 permite que atacantes remotos provoquen una denegación de servicio mediante un archivo NSV manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmplayer:kmplayer:4.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A5CFDA-CD09-4E58-BF90-1B54E4A5FE86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43185/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43185/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9315",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2017-11-28T19:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker."
      }, {
        "lang" : "es",
        "value" : ">Los clientes de las cámaras Dahua IP o IP PTZ podrían enviar información relevante del dispositivo para recibir una contraseña temporal limitada temporalmente por un distribuidor autorizado de Dahua para restablecer la contraseña de administrador. El algoritmo empleado en este mecanismo está potencialmente en riesgo de verse comprometido y, consecuentemente, empleado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE24E587-F024-434C-8896-963EF6365DFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95768203-C18D-48A4-ABFD-B0CBB1089542"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2744338-2C47-4AE2-A357-B111413DA3C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4B5CB1-F578-4A34-9134-909EB47A6A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw1xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3365390-933F-4C20-99E9-F37BF1801757"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw1xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F39A03-A875-42D4-9F7B-3C8304A47F75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B165D7E8-4076-44F2-AF5C-B080BB8DFC99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hfw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F6509-E1DE-43B5-934C-12A922B41DDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384003F9-F87D-4E60-B30B-C46AB14CE0E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB77CAA7-8DD8-40F2-9E51-F89684D6A529"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw2xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD52A575-189E-45CD-8409-60FCFA9C9104"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw2xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1C5CFD-4478-4A4E-8EFC-831DC6D024A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAF151C-A17E-4285-A67C-4BD0C92DC7BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hfw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFDC39A-E3C1-44F5-B7C8-DF8CADBFD164"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4505B8FD-484F-469B-A107-E19D6ACA370C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48919159-9AB6-4E6C-9F52-3DA0C20AD311"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw4xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D448B1-4DEA-417F-A481-8508EC93CE6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5855375E-7076-4673-ABD6-68D52AC6E3AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hf5xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF482D7C-2E93-484F-B2CF-83A1CD90391A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hf5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA32590-DDA8-4AF7-9726-3AE948169F2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw5xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901EB778-1C4C-4263-B7BA-C23FA30F83FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hfw5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F950CB-744F-41FF-8AB9-B04D9DD98137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdw5xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCB56DD-7E27-497F-89F3-608FB0EEF1A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdw5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F73AB75-CA0C-4637-833F-321E734379AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw5xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CB6549-619B-4073-9285-4D814D5C41DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4F9A7-6E9E-4081-8028-3AF07BC3984C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hf8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8956722A-BBF6-4894-A54D-A30719023CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hf8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CCA2F9-11FA-4628-ABA5-BBDF2AD1B381"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hfw8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75682D0-F7CE-4C7A-A976-26FB9CB57C6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hfw8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF4396B-731D-4974-A637-DB5DD6BBC118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884D3DF3-D215-4F40-844E-EFDA911ECC4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D317690B-8B4F-4AA6-ACFE-6AD0FBF83019"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-ebw8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897B0D4B-CFBB-48FB-8E0A-DC2E8AB2C9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-ebw8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5974C7A-BDB8-4D70-839E-0610B4CF3ED5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-pfw8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9E916E-27B1-474F-B8A5-75648C47B10E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-pfw8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A9D46F-B7AA-4676-81E3-270E1F75B2FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-sd2xxxxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B62AED-E282-4ABB-BE4C-0CA0B220B745"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-sd2xxxxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0121F6-C477-4807-A363-559D458DF338"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-pdbw8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEBCB12-C48A-48E3-BADC-796CEBF78D47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-pdbw8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9482CF5F-E64F-47BF-BC88-D031E954B574"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hum8xxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85237D9-2BB8-4C90-A7F7-F4BDE0C8A023"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hum8xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59624353-3DC1-4836-8880-CC8C036400C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:psd8xxxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55BC8BF-6AEE-498B-8103-557678D6AAF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:psd8xxxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CC924F-869B-4441-AECC-62B6F86D6B7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-sd4xxxxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A48D20-0206-4D9E-AB6F-5AB5F437012E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-sd4xxxxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072DC6D9-0089-4A4C-8457-D40E8C189930"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-sd5xxxxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D6FAE3-3FC2-4E60-98F9-9BE5B3C6001E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-sd5xxxxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E0E2DE-11AB-4564-A2C9-A39467688379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:dh-sd6xxxxx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E998E1F-6DF3-49C7-9A03-9C2FCBA3FB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:dh-sd6xxxxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9E2C4E-4D99-4CB7-B332-EACB5504A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html",
        "source" : "cybersecurity@dahuatech.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T20:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files."
      }, {
        "lang" : "es",
        "value" : "lib/yard/core_ext/file.rb en el servidor en YARD en versiones anteriores a la 0.9.11 no bloquea las rutas relativas con una secuencia ../ inicial. Esto permite que atacantes lleven a cabo ataques de salto de directorio y lean archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yardoc:yard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.11",
            "matchCriteriaId" : "FEC09169-9EA2-4AA0-A45D-D989DEBACD04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b1682506333335975e62b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b1682506333335975e62b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T22:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter \"post\" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly."
      }, {
        "lang" : "es",
        "value" : "La versión 1.0.0 del plugin Emag Marketplace Connector para WordPress tiene XSS reflejado debido a que el parámetro \"post\" en /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php no se filtra correctamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitec:emag_marketplace_connector:1.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CC9AC5C4-A573-45BA-A153-09B9DB5DD2F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145060/wpemagmc10-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/support/topic/wordpress-emag-marketplace-connector-1-0-cross-site-scripting-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8964",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145060/wpemagmc10-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/support/topic/wordpress-emag-marketplace-connector-1-0-cross-site-scripting-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T23:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta la versión 4.9.x que permite que los usuarios invitados HVM del sistema operativo provoquen una denegación de servicio (bucle infinito y bloqueo del host del sistema operativo) aprovechando la gestión incorrecta de errores PoD (Populate on Demand)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102008",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1039878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-246.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T23:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta la versión 4.9.x que permite que los usuarios invitados HVM del sistema operativo obtengan privilegios en el host del sistema operativo, obtengan información sensible o provoquen una denegación de servicio (error y cierre inesperado del host del sistema operativo) aprovechando la gestión incorrecta de errores PoD (Populate on Demand) P2M (Physical-to-Machine)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102013",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039879",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-247.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX230138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-28T23:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta la versión 4.9.x en la plataforma ARM que permite que usuarios invitados del sistema operativo obtengan información sensible del DRAM tras un reinicio, ya que se gestionan de manera incorrecta los bloques no contiguos y las direcciones físicas que no empiezan en cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-245.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T03:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\\\.\\Viragtlt."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL) o, posiblemente, otro impacto sin especificar mediante un valor NULL en una petición 0x82730010 DeviceIoControl a \\\\.\\Viragtlt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerReference_0x82730010",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerReference_0x82730010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T03:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\\\.\\Viragtlt."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL) o, posiblemente, otro impacto sin especificar mediante un valor NULL en una petición 0x82730020 DeviceIoControl a \\\\.\\Viragtlt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerDereference_0x82730020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerDereference_0x82730020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program."
      }, {
        "lang" : "es",
        "value" : "La función mm_init en kernel/fork.c en el kernel de Linux en versiones anteriores a la 4.12.10 no elimina el miembro ->exe_file del mm_struct de un nuevo proceso. Esto permite que un atacante local logre un uso de memoria previamente liberada o que, posiblemente, tenga otro impacto sin especificar ejecutando un programa especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7",
            "versionEndExcluding" : "4.9.46",
            "matchCriteriaId" : "838B9038-52BF-4099-86BB-AB2A3A8E62B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.10",
            "matchCriteriaId" : "228B0872-5ADF-4033-B9EE-75A0E0E3D4D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b7e8665b4ff51c034c55df3cff76518d1a9ee3a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102009",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2b7e8665b4ff51c034c55df3cff76518d1a9ee3a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b7e8665b4ff51c034c55df3cff76518d1a9ee3a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2b7e8665b4ff51c034c55df3cff76518d1a9ee3a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T03:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when forking a new process, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program. This vulnerability only affected kernels built with CONFIG_MODIFY_LDT_SYSCALL=y."
      }, {
        "lang" : "es",
        "value" : "La función init_new_context en arch/x86/include/asm/mmu_context.h en el kernel de Linux en versiones anteriores a la 4.12.10 no gestiona errores de asignación de tablas LDT al bifurcar un nuevo proceso. Esto permite que un atacante local logre un uso de memoria previamente liberada o que, posiblemente, tenga otro impacto sin especificar ejecutando un programa especialmente manipulado. Esta vulnerabilidad solo afecta a los kernels construidos con CONFIG_MODIFY_LDT_SYSCALL=y."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.144",
            "versionEndExcluding" : "4.4.153",
            "matchCriteriaId" : "2A1EB29A-4793-4527-8D94-4736FFCD695B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.9.46",
            "matchCriteriaId" : "3415528F-A245-41FE-92D4-953ACB5977FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.10",
            "matchCriteriaId" : "228B0872-5ADF-4033-B9EE-75A0E0E3D4D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccd5b3235180eef3cfec337df1c8554ab151b5cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102010",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ccd5b3235180eef3cfec337df1c8554ab151b5cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccd5b3235180eef3cfec337df1c8554ab151b5cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ccd5b3235180eef3cfec337df1c8554ab151b5cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T07:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "En aubio 0.4.6, existe un error de división entre cero en la función new_aubio_source_wavread() en source_wavread.c, lo que puede provocar una denegación de servicio cuando se reproduce un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aubio:aubio:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6B8243-7020-49C0-B599-F69F3CE6705C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aubio/aubio/issues/148",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aubio/aubio/issues/148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T07:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory. NOTE: a software maintainer indicates that Directory Traversal is not possible because all of the template files have \"if (!defined('ABSPATH')) {exit;}\" code"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El plugin WooCommerce hasta la versión 3.x para WordPress contiene una vulnerabilidad de salto de directorio mediante un URI /wp-content/plugins/woocommerce/templates/emails/plain/ que accede a un directorio principal. NOTA: un mantenedor de software indica que no es posible que se produzca un salto de directorio debido a que todos los archivos de template contienen código \"if (!defined('ABSPATH')) {exit;}\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "B3228D91-08A4-449F-8EF3-D9A478F47EB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/woocommerce/woocommerce/issues/17964",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43196/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/ghdb/4613/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/woocommerce/woocommerce/issues/17964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43196/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/ghdb/4613/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13872",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-11-29T17:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the \"Directory Utility\" component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS High Sierra anteriores a la actualización de seguridad 2017-001 se han visto afectadas. El problema implica el componente \"Directory Utility\". Esto permite que los atacantes obtengan acceso de administrador sin contraseña mediante ciertas interacciones relacionadas con la entrada del nombre de usuario root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3DDB99-A585-427A-9236-9ACC85660116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2B9E19-1CC5-4168-9B1F-0068384C10D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101981",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039875",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/",
        "source" : "product-security@apple.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9302",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://objective-see.com/blog/blog_0x24.html",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208315",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43201/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43248/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://www.wired.com/story/macos-update-undoes-apple-root-bug-patch/",
        "source" : "product-security@apple.com",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://objective-see.com/blog/blog_0x24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43201/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43248/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wired.com/story/macos-update-undoes-apple-root-bug-patch/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-29T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to amtyThumbPostsAdminPg.php."
      }, {
        "lang" : "es",
        "value" : "Existe XSS en el plugin amtyThumb amty-thumb-recent-post (también conocido como amtyThumb posts o wp-thumb-post) en su versión 8.1.3 para WordPress mediante la cadena de consulta en amtyThumbPostsAdminPg.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amtythumb_project:amtythumb:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "8.1.3",
            "matchCriteriaId" : "EC3CCE35-A7FF-491D-A94D-0D42CAA061B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NaturalIntelligence/wp-thumb-post/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145044/WordPress-amtyThumb-8.1.3-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/wp-thumb-post/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145044/WordPress-amtyThumb-8.1.3-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14377",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-29T18:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass."
      }, {
        "lang" : "es",
        "value" : "RSA Authentication Agent for Web: Apache Web Server en su versión 8.0 y RSA Authentication Agent for Web: Apache Web Server en su versión 8.0.1 anterior a la Build 618 de EMC tienen una vulnerabilidad de seguridad que podría conducir a una omisión de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:8.0:*:*:*:*:apache_web_server:*:*",
            "matchCriteriaId" : "1455E2C9-0102-48F3-8625-8CCEF216C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:authentication_agent_for_web:8.0.1:*:*:*:*:apache_web_server:*:*",
            "matchCriteriaId" : "1E504A52-AEA1-4627-AA9B-C6B7D9D98577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/46",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101980",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039876",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14378",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-11-29T18:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an \"Error Handling Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "RSA Authentication Agent API 8.5 para C y RSA Authentication Agent SDK 8.6 para C de EMC permiten que atacantes omitan la autenticación. Esto se conoce como \"Error Handling Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_agent_api_for_c:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEB585B-1490-4F90-8D36-8FE5470AF818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_agent_sdk_for_c:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB724EA-BF65-465C-8D6F-1B46BB4640CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/48",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101979",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039877",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8816",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-29T18:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields."
      }, {
        "lang" : "es",
        "value" : "La característica de autenticación NTLM en curl y libcurl en versiones anteriores a la 7.57.0 en plataformas de 32-bits permite que los atacantes provoquen una denegación de servicio (desbordamiento de enteros y desbordamiento de búfer resultante, y cierre inesperado de la aplicación) o que, posiblemente, causen otro tipo de impacto sin especificar mediante vectores relacionados con campos user y password largos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "7.36.0",
            "versionEndIncluding" : "7.56.1",
            "matchCriteriaId" : "A0B36AFF-B48F-4C92-9E65-5BEE2A988057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.36.0",
            "versionEndIncluding" : "7.56.1",
            "matchCriteriaId" : "116D6861-406B-451F-8CE1-43BFBB818783"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=161",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101998",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039896",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040608",
        "source" : "security@debian.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "security@debian.org"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_2017-12e7.html",
        "source" : "security@debian.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4051",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_2017-12e7.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8817",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-29T18:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character."
      }, {
        "lang" : "es",
        "value" : "La función FTP wildcard en curl y libcurl en versiones anteriores a la 7.57.0 permite que atacantes remotos provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado de aplicación) o, probablemente, causen cualquier otro tipo de impacto mediante una cadena que termina con un carácter \"[\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.21.0",
            "versionEndIncluding" : "7.56.1",
            "matchCriteriaId" : "3BCB2317-5B06-4816-A663-6BFF785F85DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "7.21.0",
            "versionEndIncluding" : "7.56.1",
            "matchCriteriaId" : "49BD7E26-FEED-44B0-A752-DD768B42447D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=162",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102057",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039897",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "security@debian.org"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_2017-ae72.html",
        "source" : "security@debian.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html",
        "source" : "security@debian.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "security@debian.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4051",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://curl.haxx.se/docs/adv_2017-ae72.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8818",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-11-29T18:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library."
      }, {
        "lang" : "es",
        "value" : "curl y libcurl en versiones anteriores a la 7.57.0 en plataformas de 32 bits permiten que los atacantes provoquen una denegación de servicio (acceso fuera de límites y cierre inesperado de la aplicación) o, posiblemente, provoquen otro impacto porque se asigna demasiado poca memoria para interconectarse con una librería SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.56.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A7C2E4-1DE8-40DE-AB2B-930E7435D005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.56.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2AD970-AD25-4711-8D3C-B42F7616A36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.56.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD56C515-5B37-4408-A909-ED45E6BAD643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.56.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3467CA-68E0-4604-A107-586ECC27497F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=163",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102014",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039898",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_2017-af0a.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_2017-af0a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14186",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-11-29T19:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim's browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site Scripting (XSS) en Fortinet FortiOS versión 6.0.0 hasta 6.0.4, versión 5.6.0 hasta 5.6.7, versión 5.4 e inferiores, en el portal web SSL VPN permite a un usuario remoto inyectar scripting web o HTML arbitrarias en el contexto del navegador de la víctima por medio del parámetro redir login. Un ataque de redirección de URL también puede ser posible inyectando una URL externa mediante el parámetro afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "349C6B08-DCD2-4118-AEC0-3EAA159135BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.2.0",
            "versionEndIncluding" : "5.2.12",
            "matchCriteriaId" : "4BA0FBCD-AA4D-4AB1-9911-EC978FDCFC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.6",
            "matchCriteriaId" : "85E4F0E9-9CB3-46D6-854C-B5E374900B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.2",
            "matchCriteriaId" : "C44E69B8-A1E8-437B-ADA3-10DE256B3368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101955",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039891",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-242",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14189",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-11-29T19:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso incorrecto en Fortinet FortiWebManager 5.8.0 permite que cualquiera que pueda acceder a la interfaz de usuario web de administrador pueda iniciar sesión correctamente, independientemente de la contraseña introducida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb_manager:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEA6CF5-2CF1-4127-89EB-2F60CC47DDAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101953",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039892",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-248",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14591",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-11-29T21:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software."
      }, {
        "lang" : "es",
        "value" : "Atlassian Fisheye y Crucible en versiones anteriores a la 4.3 y la versión 4.5.0 son vulnerables a una inyección de argumentos mediante nombres de archivo en repositorios Mercurial. Esto permite que los atacantes ejecuten código arbitrario en un sistema que ejecute el software afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "8D3D670E-B0C7-4D4F-8E9B-C74BC2400146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86BAE07-084C-411C-AAD9-676E8FC50703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "DE9E2E63-BA2B-487D-90C2-45D0DDBED383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4FA7F3-F6C3-4976-9E2A-2C7A6FE8329D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102194",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/x/plcGO",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/x/plcGO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T02:29:03.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files outside of the bridged path to be confirmed."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Squiz Matrix desde la versión 5.3 hasta la 5.3.6.1 y en la versión 5.4.1.3. Una divulgación de información provocada por un problema de salto de directorio en el plugin \"File Bridge\" permitió que existiesen archivos fuera de la ruta puente que se va a confirmar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0.0",
            "versionEndIncluding" : "5.3.6.1",
            "matchCriteriaId" : "D9159EBE-EC8A-448C-98B7-56D85B6554F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BC8818-209D-4412-86FA-A3371B5132E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T02:29:03.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Squiz Matrix en versiones anteriores a la 5.3.6.1 y en las versiones 5.4.x anteriores a la 5.4.1.3. Existen múltiples problemas de Cross-Site Scripting (XSS) reflejado en los plugins Matrix WYSIWYG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6.0",
            "matchCriteriaId" : "4A072E91-8282-4B7B-88A6-C095EE619FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87353502-6E5B-4585-8D05-A4D7F7EE024A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC13DDC-2FD0-4DB9-B610-E41C1C1E3B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77662713-C823-487A-99A7-A4B6A1C69EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5116B470-D7EA-4A41-A64B-7873EBB3ACD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D53865-6489-4A2B-85F3-23608494AD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B08862-94D5-4B59-A2E0-93BD8CF0CD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1AE05-4671-432F-A5DB-AC45D47192B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T02:29:03.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Squiz Matrix en versiones anteriores a la 5.3.6.1 y en las versiones 5.4.x anteriores a la 5.4.1.3. Los usuarios autenticados con permisos para editar activos de diseño pueden provocar la ejecución remota de código mediante una etiqueta time_format manipulada con fines maliciosas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.6.0",
            "matchCriteriaId" : "4A072E91-8282-4B7B-88A6-C095EE619FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87353502-6E5B-4585-8D05-A4D7F7EE024A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC13DDC-2FD0-4DB9-B610-E41C1C1E3B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77662713-C823-487A-99A7-A4B6A1C69EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5116B470-D7EA-4A41-A64B-7873EBB3ACD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D53865-6489-4A2B-85F3-23608494AD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B08862-94D5-4B59-A2E0-93BD8CF0CD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:matrix:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1AE05-4671-432F-A5DB-AC45D47192B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T02:29:04.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks."
      }, {
        "lang" : "es",
        "value" : "Splunk Web en Splunk Enterprise en versiones 7.0.x anteriores a la 7.0.0.1; versiones 6.6.x anteriores a la 6.6.3.2; versiones 6.5.x anteriores a la 6.5.6; versiones 6.4.x anteriores a la 6.4.9 y versiones 6.3.x anteriores a la 6.3.12, cuando SAML authType está habilitado, gestiona SAML de manera incorrecta, lo que permite que atacantes remotos omitan las restricciones de acceso planeadas o lleven a cabo ataques de suplantación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.12",
            "matchCriteriaId" : "0DC2CE50-FE85-4233-8168-BE69CAE09DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.9",
            "matchCriteriaId" : "B170D956-8A73-4064-8E7C-B1D1491AC9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.5.6",
            "matchCriteriaId" : "236F5D81-4E27-4297-8C50-1507B2C1123C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.3.2",
            "matchCriteriaId" : "66560908-CC8B-499A-843F-9C4E88945FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.0.1",
            "matchCriteriaId" : "D2D94E76-3EB1-4B9D-9AEF-C52AC68DF03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102005",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAP3K",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAP3K",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12297",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a \"URL Redirection Vulnerability.\" The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meeting Center podría permitir a un atacante remoto autenticado iniciar conexiones con hosts arbitrarios. Esta vulnerabilidad también se conoce como \"URL Redirection Vulnerability\". La vulnerabilidad se debe a un control insuficiente de acceso para el tráfico HTTP dirigido a Cisco WebEx Meeting Center. Un atacante podría explotar esta vulnerabilidad enviando una URL maliciosa a Cisco WebEx Meeting Center. Esta vulnerabilidad podría permitir que el atacante se conecte a hosts arbitrarios. Cisco Bug IDs: CSCvf63843."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "DA104A3D-5A22-4D3B-8EE2-28BE7A5E6325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "05BBAE9B-0492-4B37-8667-4953E8951D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30:sp9:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BA459F-ECD3-4C44-B9C6-46004661F6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t31:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "EADA51E0-90A1-441B-B494-06ABBA8D590A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t31:sp9:*:*:*:*:*:*",
            "matchCriteriaId" : "93331589-0F03-4AC1-86A9-39DD7EBCFF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2F2F01-6B6B-4F77-95C6-4200325B2174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B8881E-69C5-454F-920D-762A0D2EA876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12B18B6-CFDE-438F-89E9-17ED31426A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC231A3B-FA47-4275-9051-A5CCD91A5FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D068D92A-9D26-41DF-AC1F-4880FF26FFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A79EEB2-6702-4EE5-A888-9124ED101E65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101985",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039919",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12328",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the SIP process unexpectedly restarts. All active phone calls are dropped as the SIP process restarts. The vulnerability is due to incomplete input validation of the SIP packet header. An attacker could exploit this vulnerability by sending a malformed SIP packet to a targeted phone. An exploit could allow the attacker to cause a DoS condition because all phone calls are dropped when the SIP process unexpectedly restarts. Cisco Bug IDs: CSCvc62590."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la manipulación de llamadas SIP (Session Initiation Protocol) de los dispositivos de la serie 8800 de Cisco IP Phone podría permitir que un atacante remoto no autenticado provoque una denegación de servicio (DoS) porque el proceso SIP se reinicia de manera inesperada. Todas las llamadas telefónicas activas se colgarían al reiniciarse el proceso SIP. Esta vulnerabilidad se debe a la incompleta validación de entradas de la cabecera de los paquetes SIP. Un atacante podría explotar esta vulnerabilidad enviando un paquete SIP mal formado al teléfono objetivo. El atacante podría utilizar un exploit para provocar una denegación de servicio (DoS) porque todas las llamadas telefónicas se cuelgan cuando el proceso SIP se reinicia de manera inesperada. Cisco Bug IDs: CSCvc62590."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8800_series_firmware:11.0\\(0.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3EA97A-DBC1-487B-919F-4F4E69607A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102003",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039922",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ipp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ipp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12329",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs), this vulnerability could allow the attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco FXOS or NX-OS System Software: Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System Manager. Cisco Bug IDs: CSCve51700, CSCve93833, CSCve93860, CSCve93863, CSCve93864, CSCve93880."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de Cisco Firepower Extensible Operating System (FXOS) y NX-OS System Software podría permitir que un atacante local autenticado realice un ataque de inyección de comandos. La vulnerabilidad se debe a una validación de entradas insuficiente de los argumentos de comandos en el analizador sintáctico de la interfaz de línea de comandos. Un atacante podría explotar esta vulnerabilidad inyectando argumentos de comando manipulados en un comando vulnerable de la interfaz de línea de comandos. El atacante podría utilizar un exploit para ejecutar comandos arbitrarios al nivel de privilegios del usuario. En los productos compatibles con múltiples contextos de dispositivos virtuales (VDC), esta vulnerabilidad podría permitir que el atacante ejecute comandos al nivel de privilegios del usuario fuera del entorno del usuario. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco FXOS o NX-OS System Software: Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches ien modo NX-OS independiente, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules y Unified Computing System Manager. Cisco Bug IDs: CSCve51700, CSCve93833, CSCve93860, CSCve93863, CSCve93864, CSCve93880."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)sv3\\(2.8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "650B2C45-A7F4-4104-BF7A-7C4E18CFA225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C83E090-7C99-465A-A477-C2949B137720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.2\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E4AB94-0FC0-4E6B-AAE6-EF37C0ABB548"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB194AF-51E8-4379-B416-34049BF03754"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102015",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039928",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-fxnx",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-fxnx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12330",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command and gaining unauthorized access to the underlying operating system of the device. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs), this vulnerability could allow an attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve99902, CSCvf14879."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de NX-OS System Software podría permitir que un atacante local autenticado realice un ataque de inyección de comandos. La vulnerabilidad se debe a una validación de entradas insuficiente de los argumentos de comandos en el analizador sintáctico de la interfaz de línea de comandos. Un atacante podría explotar esta vulnerabilidad inyectando argumentos de comandos manipulados en un comando vulnerable de la interfaz de línea de comandos y obteniendo acceso no autorizado al sistema operativo subyacente del dispositivo. El atacante podría utilizar un exploit para ejecutar comandos arbitrarios al nivel de privilegios del usuario. En los productos compatibles con múltiples contextos de dispositivos virtuales (VDC), esta vulnerabilidad podría permitir que un atacante ejecute comandos al nivel de privilegios del usuario fuera del entorno del usuario. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS modey y Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve99902, CSCvf14879."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BCA11-7B09-43A3-A589-59D48402F564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102012",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039929",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nss",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12331",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch. The vulnerability is due to insufficient NX-OS signature verification for software patches. An authenticated, local attacker could exploit this vulnerability to bypass signature verification and load a crafted, unsigned software patch on a targeted device. The attacker would need valid administrator credentials to perform this exploit. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Unified Computing System Manager. Cisco Bug IDs: CSCvf16494, CSCvf23655."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco NX-OS System Software podría permitir a un atacante local autenticado omitir la verificación de firmas cuando se carga un parche de software. La vulnerabilidad se debe a una verificación de firmas NX-OS insuficiente para parches de software. Un atacante local autenticado podría explotar esta vulnerabilidad para omitir la verificación de firmas y cargar un parche de software manipulado y sin firma en un dispositivo objetivo. El atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches y Unified Computing System Manager. Cisco Bug IDs: CSCvf16494, CSCvf23655."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102159",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039930",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12332",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restrictions in the patch installation process. An attacker could exploit this vulnerability by installing a crafted patch image on an affected device. The vulnerable operation occurs prior to patch activation. An exploit could allow the attacker to write arbitrary files on an affected system as root. The attacker would need valid administrator credentials to perform this exploit. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Unified Computing System Manager. Cisco Bug IDs: CSCvf16513, CSCvf23794, CSCvf23832."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la instalación de parches de Cisco NX-OS System Software podría permitir que un atacante local autenticado escriba un archivo en ubicaciones arbitrarias. La vulnerabilidad se debe a restricciones insuficientes en el proceso de instalación de parches. Un atacante podría explotar esta vulnerabilidad instalando una imagen de parche manipulada en un dispositivo afectado. La operación vulnerable ocurre antes de la activación del parche. Un exploit podría permitir que un atacante modifique archivos arbitrarios en un sistema afectado como root. El atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches y Unified Computing System Manager. Cisco Bug IDs: CSCvf16513, CSCvf23794, CSCvf23832."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102160",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039931",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12333",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX-OS signature verification for software images. An authenticated, local attacker could exploit this vulnerability to bypass signature verification and load a crafted, unsigned software image on a targeted device. The attacker would need valid administrator credentials to perform this exploit. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Unified Computing System Manager. Cisco Bug IDs: CSCvf25045, CSCvf31495."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco NX-OS System Software podría permitir a un atacante local autenticado omitir la verificación de firmas cuando se carga una imagen de software. La vulnerabilidad se debe a una verificación de firmas NX-OS insuficiente para imágenes de software. Un atacante local autenticado podría explotar esta vulnerabilidad para omitir la verificación de firmas y cargar una imagen de software manipulada y sin firma en un dispositivo objetivo. El atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches y Unified Computing System Manager. Cisco Bug IDs: CSCvf25045, CSCvf31495."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102161",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039933",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12334",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to execute arbitrary commands as root. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System Manager. Cisco Bug IDs: CSCvf15113, CSCvf15122, CSCvf15125, CSCvf15131, CSCvf15143, CSCvg04088."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de NX-OS System Software podría permitir que un atacante local autenticado realice un ataque de inyección de comandos. Un atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad. La vulnerabilidad se debe a una validación de entradas insuficiente de los argumentos de comandos. Un atacante podría explotar esta vulnerabilidad inyectando argumentos de comando manipulados en un comando vulnerable de la interfaz de línea de comandos. El atacante podría utilizar un exploit para ejecutar comandos arbitrarios como root. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules y Unified Computing System Manager. Cisco Bug IDs: CSCvf15113, CSCvf15122, CSCvf15125, CSCvf15131, CSCvf15143, CSCvg04088."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310856A9-CA62-4C1A-A4C9-B6EECC36F496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BCA11-7B09-43A3-A589-59D48402F564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.59\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE02C4C6-1DDE-4EAE-BF67-CB8B120E6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102162",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039934",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12335",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command and gain unauthorized access to the underlying operating system of the device. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs), this vulnerability could allow an attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System Manager. Cisco Bug IDs: CSCvf14923, CSCvf14926, CSCvg04095."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de NX-OS System Software podría permitir que un atacante local autenticado realice un ataque de inyección de comandos. La vulnerabilidad se debe a una validación de entradas insuficiente de los argumentos de comandos. Un atacante podría explotar esta vulnerabilidad inyectando argumentos de comandos manipulados en un comando vulnerable de la interfaz de línea de comandos y obteniendo acceso no autorizado al sistema operativo subyacente del dispositivo. El atacante podría utilizar un exploit para ejecutar comandos arbitrarios al nivel de privilegios del usuario. En los productos compatibles con múltiples contextos de dispositivos virtuales (VDC), esta vulnerabilidad podría permitir que un atacante ejecute comandos al nivel de privilegios del usuario fuera del entorno del usuario. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules y Unified Computing System Manager. Cisco Bug IDs: CSCvf14923, CSCvf14926, CSCvg04095."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BCA11-7B09-43A3-A589-59D48402F564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102165",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039935",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12336",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient input validation of user-supplied files passed to the interactive TCL shell of the affected device. An attacker could exploit this vulnerability to escape the scripting sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. To exploit this vulnerability, an attacker must have local access and be authenticated to the targeted device with administrative or tclsh execution privileges. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System Manager. Cisco Bug IDs: CSCve93750, CSCve93762, CSCve93763, CSCvg04127."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de scripting TCL de Cisco NX-OS System Software podría permitir que un atacante local autenticado escape el shell TCL interactivo y obtenga acceso no autorizado al sistema operativo subyacente del dispositivo. La vulnerabilidad se debe a la validación insuficiente de archivos entrantes proporcionados por el usuario que se pasan al shell TCL interactivo del dispositivo afectado. Un atacante podría explotar esta vulnerabilidad para escapar la sandbox de scripting y ejecutar comandos arbitrarios en el sistema operativo en el que se ejecuta con los privilegios del usuario autenticado. Para explotar esta vulnerabilidad, un atacante debe tener acceso local y estar autenticado en el dispositivo objetivo del ataque con privilegios de administrador o de ejecución de tclsh. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches - Standalone, NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules y Unified Computing System Manager. Cisco Bug IDs: CSCve93750, CSCve93762, CSCve93763, CSCvg04127."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310856A9-CA62-4C1A-A4C9-B6EECC36F496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C83E090-7C99-465A-A477-C2949B137720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.2\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E4AB94-0FC0-4E6B-AAE6-EF37C0ABB548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.59\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE02C4C6-1DDE-4EAE-BF67-CB8B120E6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C0438A-0275-49B1-91BF-437917F3A4BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102168",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039936",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12338",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted command on the CLI. An exploit could allow the attacker unauthorized access to read arbitrary files on the underlying local file system. On products that support multiple virtual device contexts (VDCs), this vulnerability could allow an attacker to read files from any VDC. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, Unified Computing System Manager. Cisco Bug IDs: CSCve51707, CSCve93961, CSCve93964, CSCve93965, CSCve93968, CSCve93974, CSCve93976."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de NX-OS System Software podría permitir que un atacante local autenticado lea los contenidos de archivos arbitrarios. La vulnerabilidad se debe a una validación de entradas insuficiente para un comando específico de la interfaz de línea de comandos. Un atacante podría explotar esta vulnerabilidad enviando un comando manipulado en la interfaz de línea de comandos. El atacante podría utilizar un exploit para acceder de manera no autorizada para leer archivos arbitrarios en el sistema de archivos local subyacente. En productos que son compatibles con múltiples contextos de dispositivos virtuales (VDC), esta vulnerabilidad podría permitir que un atacante lea archivos desde cualquier VDC. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Fabric Switches en modo Application Centric Infrastructure (ACI), Nexus 9000 Series Switches en modo standalone NX-OS, Nexus 9500 R-Series Line Cards and Fabric Modules y Unified Computing System Manager. Cisco Bug IDs: CSCve51707, CSCve93961, CSCve93964, CSCve93965, CSCve93968, CSCve93974, CSCve93976."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C83E090-7C99-465A-A477-C2949B137720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:lan_switch_software:12.2\\(1.107\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A0321-C075-4B9A-A71F-8C69122A954C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039937",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12339",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs), this vulnerability could allow the attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode, Nexus 9000 Series Switches in standalone NX-OS mode, and Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve99925, CSCvf15164, CSCvf15167, CSCvf15170, CSCvf15173."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de NX-OS System Software podría permitir que un atacante local autenticado realice un ataque de inyección de comandos. La vulnerabilidad se debe a una validación de entradas insuficiente de los argumentos de comandos en el analizador sintáctico de la interfaz de línea de comandos. Un atacante podría explotar esta vulnerabilidad inyectando argumentos de comando manipulados en un comando vulnerable de la interfaz de línea de comandos. El atacante podría utilizar un exploit para ejecutar comandos arbitrarios al nivel de privilegios del usuario. En los productos compatibles con múltiples contextos de dispositivos virtuales (VDC), esta vulnerabilidad podría permitir que el atacante ejecute comandos al nivel de privilegios del usuario fuera del entorno del usuario. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Fabric Switches en modo Application Centric Infrastructure (ACI), Nexus 9000 Series Switches en modo standalone NX-OS y Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve99925, CSCvf15164, CSCvf15167, CSCvf15170, CSCvf15173."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BCA11-7B09-43A3-A589-59D48402F564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C83E090-7C99-465A-A477-C2949B137720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:lan_switch_software:12.2\\(1.107\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A0321-C075-4B9A-A71F-8C69122A954C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102198",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1039938",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos7",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1039938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12340",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash shell is disabled on the system. The vulnerability is due to insufficient sanitization of user-supplied parameters that are passed to certain functions of the Python scripting sandbox of the affected system. An attacker could exploit this vulnerability to escape the scripting sandbox and enter the Bash shell of the operating system with the privileges of the authenticated user for the affected system. To exploit this vulnerability, the attacker must have local access to the affected system and be authenticated to the affected system with administrative or Python execution privileges. Cisco Bug IDs: CSCvd86513."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco NX-OS System Software que se ejecute en Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches y Cisco Nexus 7700 Series Switches podría permitir que un atacante local autenticado acceda al shell Bash del sistema operativo de un dispositivo afectado, incluso si el shell Bash está deshabilitado en el sistema. La vulnerabilidad se debe a la sanitización insuficiente de parámetros proporcionados por el usuario que se pasan a algunas funciones del sandbox de scripting de Python del dispositivo afectado. Un atacante podría explotar esta vulnerabilidad para escapar la sandbox de scripting y ejecutar el shell Bash del sistema operativo con los privilegios del usuario autenticado para el sistema afectado. Para explotar esta vulnerabilidad, el atacante debe tener acceso local al sistema afectado y estar autenticado en el sistema afectado con privilegios de administrador o de ejecución de Python. Cisco Bug IDs: CSCvd86513."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.70\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC6B471-BE9B-4301-BEE7-3FF50DC94937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102069",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-switch",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-switch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12341",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation during the installation of a software patch. An attacker could exploit this vulnerability by installing a crafted patch image with the vulnerable operation occurring prior to patch activation. An exploit could allow the attacker to execute arbitrary commands on an affected system as root. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Unified Computing System Manager. Cisco Bug IDs: CSCvf23735, CSCvg04072."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de línea de comandos de NX-OS System Software podría permitir que un atacante local autenticado realice un ataque de inyección de comandos. Un atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad. Esta vulnerabilidad se debe a la insuficiente validación de entradas durante la instalación de un parche de software. Un atacante podría explotar esta vulnerabilidad instalando una imagen de parche manipulada. La operación vulnerable tiene lugar antes de la activación del parche. Un exploit podría permitir que un atacante ejecute comandos arbitrarios en el sistema afectado como root. Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Multilayer Director Switches, Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches y Unified Computing System Manager. Cisco Bug IDs: CSCvf23735, CSCvg04072."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5154CDB-F7D6-44DA-B118-3DF12EFA2067"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0.59\\)s0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE02C4C6-1DDE-4EAE-BF67-CB8B120E6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039939",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos8",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12342",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature. An attacker could exploit this vulnerability by crafting specific packets for communication on the device-internal network. A successful exploit could allow the attacker to run code on the underlying host operating system. OAC is not enabled by default. For a device to be vulnerable, an administrator would need to install and activate this feature. This vulnerability affects the following Cisco Nexus Series Switches: Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches. Cisco Bug IDs: CSCve53542, CSCvf36621."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica OAC (Open Agent Container) de Cisco Nexus Series Switches podría permitir que un atacante local no autenticado lea y envíe paquetes fuera del alcance del OAC. La vulnerabilidad se debe a las medidas insuficientes de seguridad interna en la característica OAC. Un atacante podría explotar esta vulnerabilidad manipulando paquetes específicos para la comunicación en la red interna del dispositivo. Una explotación exitosa podría permitir que un atacante ejecute código en el sistema operativo del host subyacente. OAC no está habilitado por defecto. Para que un dispositivo sea vulnerable, un administrador necesitaría instalar y activar esta característica. Esta vulnerabilidad afecta a los siguientes productos Cisco Nexus Series Switches: Nexus 2000 Series Fabric Extenders, Nexus 5000 Series Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches y Nexus 7700 Series Switches. Cisco Bug IDs: CSCve53542, CSCvf36621."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)hsk\\(0.357\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7BCA11-7B09-43A3-A589-59D48402F564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102027",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039940",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12343",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Data Center Network Manager (DCNM) de Cisco podrían permitir que un atacante remoto inyecte valores arbitrarios en los parámetros de configuración de DCNM, redirija un usuario a una página web maliciosa, inyecte contenido malicioso en una interfaz de cliente de DCNM o realice un ataque Cross-Site Scripting (XSS) contra un usuario del software afectado. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:10.3\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7281CEFC-603E-4FDB-B0E3-ADA9DE4E02EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12344",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Data Center Network Manager (DCNM) de Cisco podrían permitir que un atacante remoto inyecte valores arbitrarios en los parámetros de configuración de DCNM, redirija un usuario a una página web maliciosa, inyecte contenido malicioso en una interfaz de cliente de DCNM o realice un ataque Cross-Site Scripting (XSS) contra un usuario del software afectado. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:10.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154160E-82B7-45B7-BF01-641471B436B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12345",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Data Center Network Manager (DCNM) de Cisco podrían permitir que un atacante remoto inyecte valores arbitrarios en los parámetros de configuración de DCNM, redirija un usuario a una página web maliciosa, inyecte contenido malicioso en una interfaz de cliente de DCNM o realice un ataque Cross-Site Scripting (XSS) contra un usuario del software afectado. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:10.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154160E-82B7-45B7-BF01-641471B436B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12346",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.853",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Data Center Network Manager (DCNM) de Cisco podrían permitir que un atacante remoto inyecte valores arbitrarios en los parámetros de configuración de DCNM, redirija un usuario a una página web maliciosa, inyecte contenido malicioso en una interfaz de cliente de DCNM o realice un ataque Cross-Site Scripting (XSS) contra un usuario del software afectado. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:10.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154160E-82B7-45B7-BF01-641471B436B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12347",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Data Center Network Manager (DCNM) de Cisco podrían permitir que un atacante remoto inyecte valores arbitrarios en los parámetros de configuración de DCNM, redirija un usuario a una página web maliciosa, inyecte contenido malicioso en una interfaz de cliente de DCNM o realice un ataque Cross-Site Scripting (XSS) contra un usuario del software afectado. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:10.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154160E-82B7-45B7-BF01-641471B436B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12348",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de gestión web de Cisco UCS Central Software podría permitir que un atacante remoto lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de la interfaz web o que secuestre un ID de sesión válido de un usuario del software afectado. Cisco Bug IDs: CSCvf71978, CSCvf71986."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_central_software:2.2\\(1a\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E338E0C7-7529-4F8E-9E4F-D26953591F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102018",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039924",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ucs-central",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ucs-central",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12349",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.963",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de gestión web de Cisco UCS Central Software podría permitir que un atacante remoto lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de la interfaz web o que secuestre un ID de sesión válido de un usuario del software afectado. Cisco Bug IDs: CSCvf71978, CSCvf71986."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_central_software:2.2\\(1a\\)a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E338E0C7-7529-4F8E-9E4F-D26953591F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102018",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039924",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ucs-central",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ucs-central",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12351",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest shell container. An attacker would need valid administrator credentials to perform this attack. The vulnerability is due to insufficient internal security measures in the guest shell feature. An attacker could exploit this vulnerability by sending or receiving packets on the device-internal network outside of the guest shell container, aka \"Unauthorized Internal Interface Access.\" This vulnerability affects the following products running Cisco NX-OS System Software: Nexus 3000 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCvf33038."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de shell invitado de Cisco NX-OS System Software podría permitir que un atacante local autenticado lea y envíe paquetes fuera del rango del contenedor del shell invitado. Un atacante necesitaría credenciales de administrador válidas para realizar el ataque. La vulnerabilidad se debe a la insuficiencia de medidas internas de seguridad en la característica de shell invitado. Un atacante podría explotar esta vulnerabilidad enviando o recibiendo paquetes en la red interna del dispositivo fuera del contenedor del shell invitado. Esto también se conoce como \"Unauthorized Internal Interface Access\". Esta vulnerabilidad afecta a los siguientes productos que ejecutan Cisco NX-OS System Software: Nexus 3000 Series Switches, Nexus 9000 Series Switches en modo NX-OS independiente, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCvf33038."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9388C2C-75F4-487F-A7D8-4E17FD39A166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(0\\)bd\\(0.20\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66360CD-CCCF-4DE7-86F1-996175B4503C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102019",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039932",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos10",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-nxos10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12352",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient validation of user-controlled input that is supplied to certain script files of an affected system. An attacker could exploit this vulnerability by submitting crafted input to a script file on an affected system. A successful exploit could allow the attacker to gain elevated privileges and execute arbitrary commands with root privileges on the affected system. To exploit this vulnerability, the attacker would need to authenticate to the affected system by using valid administrator credentials. Cisco Bug IDs: CSCvf57274."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en determinados archivos script del sistema que están instalados en tiempo de arranque en Cisco Application Policy Infrastructure Controllers podría permitir que un atacante local autenticado obtenga privilegios elevados y ejecute comandos arbitrarios con privilegios root en un host del sistema operativo afectado. La vulnerabilidad se debe a la validación insuficiente de entradas controladas por el usuario proporcionadas a ciertos archivos script de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad enviando entradas manipuladas a un archivo script de un dispositivo afectado. Un exploit con éxito podría permitir que el atacante obtenga privilegios elevados y ejecute comandos arbitrarios con privilegios root en el sistema afectado. Para explotar esta vulnerabilidad, el atacante necesitaría autenticarse en el sistema afectado empleando credenciales de administrador válidas. Cisco Bug IDs: CSCvf57274."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\\(1f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "956BE54B-D4BF-472E-BA3C-3A5D62B07478"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101993",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039925",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-apic",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-apic",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12353",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a malformed MIME header in an email attachment. An attacker could exploit this vulnerability by sending an email with a crafted MIME attachment. For example, a successful exploit could allow the attacker to bypass configured user filters to drop the email. The malformed MIME headers may not be RFC compliant. However, some mail clients could still allow users to access the attachment, which may not have been properly filtered by the device. Cisco Bug IDs: CSCvf44666."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el escáner Multipurpose Internet Mail Extensions (MIME) de Cisco AsyncOS Software para Cisco Email Security Appliances (ESA) podría permitir que un atacante remoto no autenticado omita los filtros de usuario configurados en el dispositivo. La vulnerabilidad se debe a la gestión incorrecta de errores de una cabecera MIME en un archivo adjunto de correo electrónico. Un atacante podría explotar esta vulnerabilidad mediante el envío de un correo electrónico con un archivo adjunto MIME manipulado. Por ejemplo, un exploit exitoso podría permitir que el atacante omita los filtros de usuario configurados para enviar el correo electrónico. Las cabeceras MIME podrían no ser compatibles con RFC. Sin embargo, algunos clientes de correo electrónico podrían seguir permitiendo que los usuarios accedan al archivo adjunto, que tal vez no haya sido correctamente filtrado por el dispositivo. Cisco Bug IDs: CSCvf44666."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87AA6AB8-12B9-4810-9D06-01EEBF7B01C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102002",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039917",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-esa",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-esa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12354",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect system software version information when the software responds to HTTP requests that are sent to the web-based interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based interface of the affected software. A successful exploit could allow the attacker to view sensitive information about the software, which the attacker could use to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvf66155."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Secure Access Control System (ACS) podría permitir que un atacante remoto no autenticado vea información sensible en un sistema afectado. La vulnerabilidad existe debido a que el software afectado no protege la información de versión del sistema lo suficiente cuando el software responde a peticiones HTTP que se envían a la interfaz web del sistema. Un atacante podría explotar esta vulnerabilidad enviando peticiones HTTP manipuladas a la interfaz de usuario web del software afectado. Un exploit con éxito podría permitir que el atacante vea información sensible sobre el software, que podría emplear para realizar ataques de reconocimiento adicionales. Cisco Bug IDs: CSCvf66155."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_system:5.8\\(0.32\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B43728B-EB99-4574-A8BD-6A5DD8AA075C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101986",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039923",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-acs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-acs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12355",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service (DoS) condition. The vulnerability is due to incomplete LPTS frame validation by the affected software. An attacker could exploit this vulnerability by sending crafted XML requests to the management interface of an affected system. A successful exploit could allow the attacker to cause one of the LPTS processes on the affected system to restart unexpectedly, which would impact LPTS traffic and cause a brief DoS condition while the process restarts. Cisco Bug IDs: CSCvf76332."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica de procesamiento de frames de entrada Local Packet Transport Services (LPTS) de Cisco IOS XR Software podría permitir que un atacante remoto no autenticado haga que uno de los procesos LPTS en un sistema afectado se reinicie de forma inesperada. Esto resulta en una breve condición de denegación de servicio (DoS). Esta vulnerabilidad también se debe a la validación incompleta de frames LPTS por parte del software afectado. Un atacante podría explotar esta vulnerabilidad enviando peticiones XML manipuladas a la interfaz de gestión de un sistema afectado. Un exploit con éxito podría permitir que el atacante provoque que uno de los procesos LPTS en el sistema afectado se reinicie inesperadamente, lo que impactaría el tráfico LPTS y provocaría una breve condición de DoS mientras se reinicia el proceso. Cisco Bug IDs: CSCvf76332."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.4.1_base:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38049ED5-06B0-48C8-8493-7D4AE582165D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101989",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039927",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ios-xr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ios-xr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12356",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf50378, CSCvg56018."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Jabber para Windows, Mac, Android e iOS podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o que pueda acceder a información sensible del navegador. Cisco Bug IDs: CSCvf50378, CSCvg56018."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "11A29002-5FF7-4EA6-900B-911A11C0F037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D970D574-7408-4FFF-B83E-FADA46ACFD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:-:*:*:*:*:mac:*:*",
            "matchCriteriaId" : "20DF2673-1892-4191-8F66-5B0B8C4E93DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:10.5\\(2\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "39256864-89CE-49B6-BC14-DB4299A9275E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.9\\(1\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "FD0C846B-144C-41D7-9A57-360CAA5BD1E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101990",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039914",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12357",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf79346."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Unified Communications Manager podría permitir que un atacante remoto autenticado lleve a cabo un ataque de cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace manipulado. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o que pueda acceder a información sensible del navegador. Cisco Bug IDs: CSCvf79346."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA185BB-D78F-4F4E-B248-9AF550F0C4E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101988",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039916",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cucm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cucm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12358",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf79080, CSCvf79088."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión web de Cisco Jabber para Windows, Mac, Android e iOS podría permitir que un atacante remoto autenticado lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de dicha interfaz en un dispositivo afectado. La vulnerabilidad se debe a la validación insuficiente de entrada de datos de parte del usuario en la interfaz de gestión web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que un usuario de la interfaz haga clic en un enlace malicioso. Un exploit con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o que pueda acceder a información sensible del navegador. Cisco Bug IDs: CSCvf79080, CSCvf79088."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "11A29002-5FF7-4EA6-900B-911A11C0F037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "D970D574-7408-4FFF-B83E-FADA46ACFD9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:-:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "4DFFE9AE-26D0-48E8-B771-F57CCBF106A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.9\\(0\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "1E3E763A-3520-439E-8A49-F0FBED433FA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101992",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12359",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convincing the user to launch the file. Exploitation of this vulnerability could allow arbitrary code execution on the system of the targeted user. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCve10729, CSCve10771, CSCve10779, CSCve11521, CSCve11543."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (.arf) podría permitir que un atacante ejecute código arbitrario en un sistema. Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo .arf malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. La explotación de esta vulnerabilidad podría permitir la ejecución de código arbitrario en el sistema del usuario objetivo. Esta vulnerabilidad afecta a sitios de reunión Cisco WebEx Business Suite, Cisco WebEx Meetings, Cisco WebEx Meetings Server y a los reproductores Cisco WebEx ARF. Cisco Bug IDs: CSCve10729, CSCve10771, CSCve10779, CSCve11521, CSCve11543."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BA5D45-3F53-4D9A-8D5C-6ADEC17BE474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6684FF-C2D7-440F-9FCF-9002F78A4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4B95A9-34C9-4C3D-B68C-A48E7A190EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2F2F01-6B6B-4F77-95C6-4200325B2174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8745FD6-B0B3-46A9-9254-7B13877D7080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C96C95-6BBA-4D4D-96E1-3102029905D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102186",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12360",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to open the file. A successful exploit could cause an affected player to crash, resulting in a DoS condition. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, and Cisco WebEx WRF players. Cisco Bug IDs: CSCve30294, CSCve30301."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Network Recording Player para archivos WebEx Recording Format (WRF) podría permitir que un atacante provoque una condición de denegación de servicio (DoS). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo WRF malicioso mediante correo electrónico o URL y convenciéndolo para que abra el archivo. Un exploit con éxito podría dar lugar a que un reproductor afectado se cierre inesperadamente, provocando una condición de DoS. Esta vulnerabilidad afecta a sitios de reunión Cisco WebEx Business Suite, Cisco WebEx Meetings y a los reproductores Cisco WebEx WRF. Cisco Bug IDs: CSCve30294, CSCve30301."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BA5D45-3F53-4D9A-8D5C-6ADEC17BE474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6684FF-C2D7-440F-9FCF-9002F78A4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4B95A9-34C9-4C3D-B68C-A48E7A190EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2F2F01-6B6B-4F77-95C6-4200325B2174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102001",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12361",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber for Windows handles random number generation for file folders. An attacker could exploit the vulnerability by fixing the random number data used to establish Secure Sockets Layer (SSL) connections between clients. An exploit could allow the attacker to decrypt secure communications made by the Cisco Jabber for Windows client. Cisco Bug IDs: CSCve44806."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Jabber para Windows podría permitir que un atacante local sin autenticar acceda a comunicaciones sensibles realizadas por el cliente Jabber. Un atacante podría explotar esta vulnerabilidad para obtener información y realizar ataques adicionales. La vulnerabilidad se debe a la forma en la que Cisco Jabber para Windows gestiona la generación aleatoria de números para las carpetas de archivos. Un atacante podría explotar la vulnerabilidad corrigiendo los datos de números aleatorios empleados para establecer conexiones SSL (Secure Sockets Layer) entre clientes. Un exploit podría permitir que el atacante descodifique comunicaciones seguras realizadas por el cliente Cisco Jabber para Windows. Cisco Bug IDs: CSCve44806."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.8\\(0\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "DDEB6284-44C2-40E2-8129-D53D4A2B6953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.8\\(1\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "6650E280-C791-4EB4-B27F-F7D1FB7CCB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.8\\(2\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B53EFD64-0B19-48D0-AE0F-7BD03B8D6465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:11.8\\(3\\):*:*:*:*:windows:*:*",
            "matchCriteriaId" : "D24F25C2-BC6C-49D5-BB36-290F3C8A97C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101994",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039915",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-jabber2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12362",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to video calls being made on systems with a particular configuration. An attacker could exploit this by knowing a valid URI that directs to a Cisco Meeting Server. An attacker could then make a video call and cause the system to reload. Cisco Bug IDs: CSCve65931."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las versiones anteriores a la 2.2.2 de Cisco Meeting Server podría permitir que un atacante remoto autenticado provoque que el sistema se recargue, resultando en una condición de denegación de servicio (DoS). La vulnerabilidad se debe a que se realizan videollamadas en sistemas con una configuración en particular. Un atacante podría explotar esto conociendo un URI válido que lo dirija a un Cisco Meeting Server. Un atacante podría realizar una videollamada y provocar que el sistema se recargue. Cisco Bug IDs: CSCve65931."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "4439A950-F1A9-46EE-85B3-77DA5653A201"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101987",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039913",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cms",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12363",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the welcome message to a meeting. A successful exploit could allow the attacker to modify the welcome message of any known meeting. Cisco Bug IDs: CSCvf68695."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meeting Server podría permitir que un atacante remoto sin autenticar modifique el mensaje de bienvenida de una reunión en un sistema afectado. Esta vulnerabilidad se debe a la falta de opciones de seguridad en las reuniones. Un atacante podría aprovechar esta vulnerabilidad modificando el mensaje de bienvenida en una reunión. Un exploit con éxito podría permitir que el atacante modifique el mensaje de bienvenida de cualquier reunión conocida. Cisco Bug IDs: CSCvf68695."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4139ACAA-A316-40DE-9170-2080D892AF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAAD0CF-0CAA-4D8B-A12F-9BAF1DC3CD6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102000",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039921",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12364",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Structured Query Language (SQL) queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An attacker could exploit this vulnerability by sending a crafted SQL statement to an affected system. Successful exploitation could allow the attacker to read entries in some database tables. Cisco Bug IDs: CSCvg30333."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el framework web de Cisco Prime Service Catalog podría permitir que un atacante remoto no autenticado ejecute consultas SQL (Structured Query Language) no autorizadas. Esto se debe a la imposibilidad de validar entradas proporcionadas por el usuario empleadas en consultas SQL. Un atacante podría explotar esta vulnerabilidad enviando una instrucción SQL manipulada a un dispositivo afectado. La explotación con éxito podría permitir que el atacante lea entradas en algunas tablas de bases de datos. Cisco Bug IDs: CSCvg30333."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_service_catalog:11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01615DA-643D-4576-BC1E-2274741FA79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_service_catalog:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B14BBE-9BF7-4D8C-BB45-F6785A13748D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_service_catalog:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC32B55-0C76-4669-8EAD-DCC16355E887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102004",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039926",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-prime",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-prime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12365",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance. Cisco Bug IDs: CSCvg33629."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Event Center podría permitir que un atacante remoto autenticado vea información no listada de reuniones. La vulnerabilidad se debe a un fallo de diseño en el producto. Un atacante puede ejecutar una consulta en un sitio Event Center para ver las reuniones programadas. Una consulta con éxito mostraría tanto las reuniones listadas como las no listadas en la información visualizada. Un atacante podría emplear esta información para asistir a reuniones que no tienen disponibles. Cisco Bug IDs: CSCvg33629."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC231A3B-FA47-4275-9051-A5CCD91A5FDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101999",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039920",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12366",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78635,, CSCvg52440."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco WebEx Meeting Center podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) contra un usuario de un sistema afectado. La vulnerabilidad se debe a una validación de entradas insuficiente de algunos parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Un exploit con éxito podría permitir que el atacante ejecute código script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Cisco Bug IDs: CSCvf78635, CSCvg52440."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meeting_center:t32.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC231A3B-FA47-4275-9051-A5CCD91A5FDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101984",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039918",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12367",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco WebEx Network Recording Player Denial of Service Vulnerability\" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve11545, CSCve02843, CSCve11548."
      }, {
        "lang" : "es",
        "value" : "Existe una \"Cisco WebEx Network Recording Player Denial of Service Vulnerability\" en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (ARF) y WebEx Recording Format (WRF). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo ARF o WRF malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. Su explotación podría provocar que un reproductor afectado se cierre inesperadamente y, en algunos casos, podría permitir la ejecución de código arbitrario en el sistema de un usuario objetivo. Cisco Bug IDs: CSCve11545, CSCve02843, CSCve11548."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:t29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "619F972D-71C4-4763-AFE4-3CB23F9E2CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FF2FBD-B219-4273-B619-C41C2EEE1632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:t31.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF73B54-70CC-463F-85B7-A05500E0BF07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12368",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve10584, CSCve10591, CSCve11503, CSCve10658, CSCve11507, CSCve10749, CSCve10744, CSCve11532, CSCve10762, CSCve10764, CSCve11538."
      }, {
        "lang" : "es",
        "value" : "Existe una \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (ARF) y WebEx Recording Format (WRF). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo ARF o WRF malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. Su explotación podría provocar que un reproductor afectado se cierre inesperadamente y, en algunos casos, podría permitir la ejecución de código arbitrario en el sistema de un usuario objetivo. Cisco Bug IDs: CSCve10584, CSCve10591, CSCve11503, CSCve10658, CSCve11507, CSCve10749, CSCve10744, CSCve11532, CSCve10762, CSCve10764, CSCve11538."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248B8D80-F316-4A9D-BCB9-F3308E52F611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804E27-323D-438F-912A-EFBE76F7ED4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD55EC-37E6-4E00-97CA-CBCA430AA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D55BE2-8399-4B10-9430-BEB0036800C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3AA626-3B37-434B-A6CB-7CA233B8FC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAAD0CF-0CAA-4D8B-A12F-9BAF1DC3CD6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12369",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability\" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve30208, CSCve30214, CSCve30268."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad \"Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability\" en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (ARF) y WebEx Recording Format (WRF). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo ARF o WRF malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. Su explotación podría provocar que un reproductor afectado se cierre inesperadamente y, en algunos casos, podría permitir la ejecución de código arbitrario en el sistema de un usuario objetivo. Cisco Bug IDs: CSCve30208, CSCve30214, CSCve30268."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248B8D80-F316-4A9D-BCB9-F3308E52F611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804E27-323D-438F-912A-EFBE76F7ED4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD55EC-37E6-4E00-97CA-CBCA430AA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D55BE2-8399-4B10-9430-BEB0036800C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12370",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCvf38060, CSCvg54836, CSCvf38077, CSCvg54843, CSCvf38084, CSCvg54850."
      }, {
        "lang" : "es",
        "value" : "Existe una \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (ARF) y WebEx Recording Format (WRF). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo ARF o WRF malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. Su explotación podría provocar que un reproductor afectado se cierre inesperadamente y, en algunos casos, podría permitir la ejecución de código arbitrario en el sistema de un usuario objetivo. Cisco Bug IDs: CSCvf38060, CSCvg54836, CSCvf38077, CSCvg54843, CSCvf38084, CSCvg54850."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804E27-323D-438F-912A-EFBE76F7ED4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD55EC-37E6-4E00-97CA-CBCA430AA711"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12371",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCvf49650, CSCvg54853, CSCvg54856, CSCvf49697, CSCvg54861, CSCvf49707, CSCvg54867."
      }, {
        "lang" : "es",
        "value" : "Existe una \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (ARF) y WebEx Recording Format (WRF). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo ARF o WRF malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. Su explotación podría provocar que un reproductor afectado se cierre inesperadamente y, en algunos casos, podría permitir la ejecución de código arbitrario en el sistema de un usuario objetivo. Cisco Bug IDs: CSCvf49650, CSCvg54853, CSCvg54856, CSCvf49697, CSCvg54861, CSCvf49707, CSCvg54867."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804E27-323D-438F-912A-EFBE76F7ED4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD55EC-37E6-4E00-97CA-CBCA430AA711"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12372",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-11-30T09:29:01.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCvf57234, CSCvg54868, CSCvg54870."
      }, {
        "lang" : "es",
        "value" : "Existe una \"Cisco WebEx Network Recording Player Remote Code Execution Vulnerability\" en Cisco WebEx Network Recording Player para archivos Advanced Recording Format (ARF) y WebEx Recording Format (WRF). Un atacante podría explotar esta vulnerabilidad proporcionándole a un usuario un archivo ARF o WRF malicioso mediante correo electrónico o URL y convenciéndolo para que ejecute el archivo. Su explotación podría provocar que un reproductor afectado se cierre inesperadamente y, en algunos casos, podría permitir la ejecución de código arbitrario en el sistema de un usuario objetivo. Cisco Bug IDs: CSCvf57234, CSCvg54868, CSCvg54870."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3AA626-3B37-434B-A6CB-7CA233B8FC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAAD0CF-0CAA-4D8B-A12F-9BAF1DC3CD6D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248B8D80-F316-4A9D-BCB9-F3308E52F611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74804E27-323D-438F-912A-EFBE76F7ED4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t31.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E425A87-ECFD-4F30-AB93-0B8B91FB445E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12631",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-11-30T14:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3 and Spring 4 plugins in versions before 1.4.3 and 1.3.3. The vulnerability can result in a security context that is set up using a malicious client's roles for the given enduser."
      }, {
        "lang" : "es",
        "value" : "Apache CXF Fediz se envía con un número de plugins específicos del contenedor para habilitar WS-Federation para aplicaciones. Se ha encontrado una vulnerabilidad de estilo CSRF (Cross Style Request Forgery) en los plugins Spring 2, Spring 3 y Spring 4 en versiones anteriores a la 1.4.3 y la 1.3.3. Esta vulnerabilidad puede resultar en un contexto de seguridad que se establece empleando los roles de un cliente malicioso para el usuario final dado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.3",
            "matchCriteriaId" : "B59BDA5E-8088-43DD-9634-EC2C883CCBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEC56EB-6EFF-4AEA-8299-2A941D313C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650960C1-D8BB-442E-B895-8ABC15199353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf_fediz:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DB717A-64B8-4A70-A601-DC1BCF2A7B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cxf.547215.n5.nabble.com/Apache-CXF-Fediz-1-4-3-and-1-3-3-released-with-a-new-security-advisory-CVE-2017-12631-td5785868.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102127",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040487",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://cxf.547215.n5.nabble.com/Apache-CXF-Fediz-1-4-3-and-1-3-3-released-with-a-new-security-advisory-CVE-2017-12631-td5785868.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T17:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a denial of service (device crash) or possibly have unspecified other impact by sending a sufficiently long string in the password field of the HTTP Basic Authentication section of the HTTP request."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos D-Link DIR-605L Model B en versiones anteriores a la FW2.11betaB06_hbrf. Esto se relaciona con el código que gestiona los valores de autenticación para HNAP. Un atacante puede provocar una denegación de servicio (cierre inesperado del dispositivo) o, posiblemente, otro tipo de impacto sin especificar mediante el envío de una cadena lo suficientemente larga en el campo password de la sección HTTP Basic Authentication de la petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_model_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "fw2.11betab06_hbrf",
            "matchCriteriaId" : "7F7EBED7-D14E-4E7A-BBDA-8C40BA6AD199"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l_model_b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E006579-02BA-487D-B78E-24A9777AA697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_FIRMWARE_PATCH_NOTES_2.11betaB06_HBRF_EN.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_FIRMWARE_PATCH_NOTES_2.11betaB06_HBRF_EN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T18:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 2.3.11 de Restlet Framework, al emplear SimpleXMLProvider, permiten que atacantes remotos acedan a archivos arbitrarios mediante un ataque de XXE en una petición HTTP de la API REST. Esto afecta al uso de la extensión Jax-rs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:restlet:restlet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.11",
            "matchCriteriaId" : "896C5633-1671-4F2B-8B9A-469AA0AD832B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/restlet/restlet-framework-java/issues/1286",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lgtm.com/blog/restlet_CVE-2017-14868",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/restlet/restlet-framework-java/issues/1286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lgtm.com/blog/restlet_CVE-2017-14868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T18:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 2.3.12 de Restlet Framework permiten que atacantes remotos accedan a archivos arbitrarios mediante una petición HTTP de la API REST que lleva a cabo un ataque XXE. Esto se debe a que solo las entidades externas (no entidades externas de parámetro) se consideran debidamente. Esto se relaciona con XmlRepresentation, DOMRepresentation, SaxRepresentation y JacksonRepresentation."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:restlet:restlet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.12",
            "matchCriteriaId" : "F5A418FB-877B-4517-AEF9-848443A73680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lgtm.com/blog/restlet_CVE-2017-14949",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lgtm.com/blog/restlet_CVE-2017-14949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15116",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-11-30T18:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference)."
      }, {
        "lang" : "es",
        "value" : "La función rngapi_reset en crypto/rng.c en el kernel de Linux en versiones anteriores a la 4.2 permite que atacantes provoquen una denegación de servicio (desreferencia de puntero NULL)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "8AD4F6C2-134F-40FD-BBA3-BAEB0AF3D8A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485815",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1514609",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1485815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1514609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3764",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2017-11-30T19:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Lenovo XClarity Administrator (LXCA) en versiones anteriores a la 1.4.0 en la que los nombres de cuentas de usuario LXCA podrían verse expuestos a usuarios no autenticados que tengan acceso a la interfaz de usuario web de LXCA. No se expone la información sobre contraseñas de las cuentas de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "070219DA-DDD4-4E8A-A23B-3E46E4CB37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16335",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T21:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart)."
      }, {
        "lang" : "es",
        "value" : "OpenDaylight Karaf 0.6.1-Carbon no limpia la memoria caché después de un cambio de contraseña, permitiendo el uso de la contraseña antigua hasta que la memoria caché Karaf se limpie manualmente (por ejemplo, mediante reinicio)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:karaf:0.6.1-carbon:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C997D199-86BB-44F2-82E8-38FB0A7D3C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q4/320",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.opendaylight.org/gerrit/#/q/topic:AAA-151",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.opendaylight.org/browse/AAA-151",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.opendaylight.org/gerrit/#/q/topic:AAA-151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.opendaylight.org/browse/AAA-151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service (bfd_getl32 heap-based buffer over-read and application crash) via a crafted object file, related to elfcore_grok_netbsd_procinfo, elfcore_grok_openbsd_procinfo, and elfcore_grok_nto_status."
      }, {
        "lang" : "es",
        "value" : "elf.c en la biblioteca Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1, no valida los tamaños de las notas core, lo que permite a atacantes remotos provocar una denegación de servicio (sobrelectura de búfer basado en memoria dinámica o heap en bfd_getl32 y cierre inesperado de la aplicación) mediante un archivo object manipulado, relacionado con elfcore_grok_netbsd_procinfo, elfcore_grok_openbsd_procinfo y elfcore_grok_nto_status."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22421",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file."
      }, {
        "lang" : "es",
        "value" : "La función gmc_mmx en libavcodec/x86/mpegvideodsp.c en FFmpeg versión 2.3 y 3.4 no valida correctamente los anchos y altos. Esto permite que atacantes remotos provoquen una denegación de servicio (error en la propiedad signedness de un número entero y lectura fuera de array) mediante un archivo MPEG manipulado"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDA7F5-FE3F-4D4A-AE46-43251194C127"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3516#c1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/27f8d386829689c346ff0cef00d3af57b9fb8903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/58cf31cee7a456057f337b3102a03206d833d5e8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2017-November/219748.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3516#c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/27f8d386829689c346ff0cef00d3af57b9fb8903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/58cf31cee7a456057f337b3102a03206d833d5e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2017-November/219748.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-11-30T22:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original \"Dirty cow\" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux desde la versión 2.6.38 hasta la 4.14 presenta un uso problemático de pmd_mkdirty() en la función touch_pmd() dentro de la implementación THP. Se puede llegar a touch_pmd() con get_user_pages(). En ese caso, el pmd se ensuciaría. Este escenario rompe la nueva lógica de can_follow_write_pmd(). pmd puede contaminarse sin pasar por un ciclo COW. Este fallo no es tan severo como el error original \"Dirty COW\" porque un archivo ext4 (o cualquier otro archivo normal) no puede ser mapeado usando THP. Sin embargo, permite sobrescribir huge pages de solo lectura. Por ejemplo, los archivos shmem sellados y huge pages con ceros pueden sobrescribirse (ya que se pueden mapear con THP). Tenga en cuenta que después del primer error de escritura de página en la página con cero, se reemplazará por un nuevo thp (y con ceros)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.87",
            "versionEndExcluding" : "3.3",
            "matchCriteriaId" : "EDF220AE-D4D3-4C0B-BFCA-4DDB897A81FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.106",
            "versionEndExcluding" : "3.11",
            "matchCriteriaId" : "37623D83-3245-418B-AA79-7FFB56124AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.12.73",
            "versionEndExcluding" : "3.13",
            "matchCriteriaId" : "AB8D1C8F-5DE4-4255-B35E-85BEE71D518A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.16.42",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "6D8C2C4B-81CA-4D5D-9B18-6D93FC1B1B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18.55",
            "versionEndExcluding" : "3.18.86",
            "matchCriteriaId" : "B38F58F2-22F3-41A2-B43D-FD9027FD2A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.41",
            "versionEndExcluding" : "4.1.48",
            "matchCriteriaId" : "871C0EA3-24B8-4D57-A72C-42F66AEED6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.70",
            "versionEndExcluding" : "4.4.104",
            "matchCriteriaId" : "FCBEC938-9743-47A8-B536-D7B935A453A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.7",
            "versionEndExcluding" : "4.9.67",
            "matchCriteriaId" : "1D4E9DE9-EA55-48F6-88BB-DBF18E65D76A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.4",
            "matchCriteriaId" : "526A67F6-8D42-4C55-99BE-B68231777244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102032",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0180",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/bindecy/huge-dirty-cow-cve-2017-1000405-110eca132de0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43199/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/bindecy/huge-dirty-cow-cve-2017-1000405-110eca132de0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43199/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11281",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player tiene una vulnerabilidad de corrupción de memoria explotable en la función de manipulación de texto. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. Esto afecta a las versiones 26.0.0.151 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "666ECC0A-39CF-45AD-A9EE-56073576BA96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "8E53B870-34FC-489E-B00A-DA725C8C6298"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "81773DC3-4284-4AC2-9390-9862B081A957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "DC549782-3E71-44AE-B7C0-361726255585"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100710",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039314",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2702",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42781/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42782/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=CvmnUeza9zw",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42781/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42782/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=CvmnUeza9zw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11282",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier."
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player tiene una vulnerabilidad de corrupción de memoria explotable en el analizador sintáctico de átomos MP4. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. Esto afecta a las versiones 26.0.0.151 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "666ECC0A-39CF-45AD-A9EE-56073576BA96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "8E53B870-34FC-489E-B00A-DA725C8C6298"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "81773DC3-4284-4AC2-9390-9862B081A957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "26.0.0.151",
            "matchCriteriaId" : "DC549782-3E71-44AE-B7C0-361726255585"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100716",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039314",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2702",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1323",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42783/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=6iZnIQbRf5M",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42783/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=6iZnIQbRf5M",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11283",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion tiene una vulnerabilidad de deserialización de datos no fiables. Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E217CE63-07DC-4A88-8877-181F33A21C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4BD25E-6856-40EC-98A8-ACB540992487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE18FEA-271A-42FE-8C24-19731DEB5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "15F7DCF1-D9F2-45C0-B089-E37C91579729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "82F81CF8-1482-4731-AD34-677B8D6B930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "827CB550-5078-4FD5-8B1F-616C06912AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "31F22450-F26C-4797-9292-66CA444C0D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "72450205-B4F4-4B44-9991-F4876D829BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100708",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11284",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion tiene una vulnerabilidad de deserialización de datos no fiables. Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E217CE63-07DC-4A88-8877-181F33A21C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4BD25E-6856-40EC-98A8-ACB540992487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE18FEA-271A-42FE-8C24-19731DEB5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "15F7DCF1-D9F2-45C0-B089-E37C91579729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "82F81CF8-1482-4731-AD34-677B8D6B930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "827CB550-5078-4FD5-8B1F-616C06912AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "31F22450-F26C-4797-9292-66CA444C0D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "72450205-B4F4-4B44-9991-F4876D829BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100708",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11285",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion tiene una vulnerabilidad de Cross-Site Scripting (XSS). Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E217CE63-07DC-4A88-8877-181F33A21C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4BD25E-6856-40EC-98A8-ACB540992487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE18FEA-271A-42FE-8C24-19731DEB5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "15F7DCF1-D9F2-45C0-B089-E37C91579729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "82F81CF8-1482-4731-AD34-677B8D6B930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "827CB550-5078-4FD5-8B1F-616C06912AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "31F22450-F26C-4797-9292-66CA444C0D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "72450205-B4F4-4B44-9991-F4876D829BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100711",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11286",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion tiene una vulnerabilidad de inyección de XEE (XML External Entity). Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E217CE63-07DC-4A88-8877-181F33A21C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4BD25E-6856-40EC-98A8-ACB540992487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE18FEA-271A-42FE-8C24-19731DEB5444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "15F7DCF1-D9F2-45C0-B089-E37C91579729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "82F81CF8-1482-4731-AD34-677B8D6B930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "827CB550-5078-4FD5-8B1F-616C06912AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "31F22450-F26C-4797-9292-66CA444C0D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "72450205-B4F4-4B44-9991-F4876D829BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100715",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T08:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181."
      }, {
        "lang" : "es",
        "value" : "Inedo Otter en versiones anteriores a la 1.7.4 tiene una vulnerabilidad de salto de directorio en los rafts basados en el sistema de archivos mediante vectores que incluyen caracteres \"/\" o caracteres iniciales \".\". Esta vulnerabilidad también se conoce como OT-181."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:otter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.4",
            "matchCriteriaId" : "500C391A-224F-4967-9A75-39FF0222FDF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://inedo.com/blog/otter-174-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/OT-181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/blog/otter-174-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/OT-181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T08:29:00.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0 a 2.4.2 y 2.2.0 a 2.2.10, el disector NetBIOS podía cerrarse inesperadamente. Esto se solucionó en epan/dissectors/packet-netbios.c asegurando que las operaciones de escritura estaban limitadas al principio de un búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405C0606-46BB-4932-BBE4-6ADC12C1FE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639FCB7A-7D1B-4F6B-8CC5-E246961E4321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D7EE58-97DF-4C08-923C-9263254C13A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBC1F5E-36D0-41E6-8B5F-4C833074E20B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102029",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14249",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=79768d63d14fbce6bf7fb4d4a1c86be0c5205eb3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-48.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=79768d63d14fbce6bf7fb4d4a1c86be0c5205eb3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-48.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T08:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0 a 2.4.2 y 2.2.0 a 2.2.10, el disector IWARP_MPA podía cerrarse inesperadamente. Esto se trató en epan/dissectors/packet-iwarp-mpa.c validando la longitud de una ULPDU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405C0606-46BB-4932-BBE4-6ADC12C1FE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639FCB7A-7D1B-4F6B-8CC5-E246961E4321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D7EE58-97DF-4C08-923C-9263254C13A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBC1F5E-36D0-41E6-8B5F-4C833074E20B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102030",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14236",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8502fe94ef9e431860921507e1a351c5e3f5c634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-47.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8502fe94ef9e431860921507e1a351c5e3f5c634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T08:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length."
      }, {
        "lang" : "es",
        "value" : "En Wireshark 2.4.0 a 2.4.2 y 2.2.0 a 2.2.10, el disector CIP Safety podía cerrarse inesperadamente. Esto se trató en epan/dissectors/packet-cipsafety.c validando la longitud del paquete."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F65580-D1F4-4ABC-A358-545BF29D8089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC9883C-4B22-4C81-8C51-932BBF2CB3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0E7715-61FE-404D-834F-3EFC75423292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF360E-2CE4-4722-83E6-08B811852422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B1F0CD-ACD8-4583-AEF6-6EEEFBE397C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405C0606-46BB-4932-BBE4-6ADC12C1FE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639FCB7A-7D1B-4F6B-8CC5-E246961E4321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D7EE58-97DF-4C08-923C-9263254C13A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999B2C81-6C7D-443F-9FE8-F250D9C99735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354F160E-7CA9-4D8E-A447-42E500922EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBC1F5E-36D0-41E6-8B5F-4C833074E20B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102071",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14250",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f5939debe96e3c3953c6020818f1fbb80eb83ce8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43233/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-49.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f5939debe96e3c3953c6020818f1fbb80eb83ce8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2017-49.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T08:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Indeo Otter through 1.7.4 mishandles a \"</script>\" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor."
      }, {
        "lang" : "es",
        "value" : "Inedo Otter hasta la versión 1.7.4 gestiona de manera incorrecta una subcadena \"/script\" en una carga útil DP inicial, lo que permite que los atacantes remotos causen una denegación de servicio (DoS) o posiblemente otro impacto no especificado, tal y como se demuestra con Plan Editor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:otter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.4",
            "matchCriteriaId" : "FB2C09B6-266B-4064-A717-A0A762FDAC29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/ILIB-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T08:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382."
      }, {
        "lang" : "es",
        "value" : "fileio.c en Vim en versiones anteriores a la 8.0.1263 establece la propiedad de grupo de un archivo .swp en el grupo primario del editor (que puede ser diferente de la propiedad de grupo del archivo original), lo que permite a los usuarios locales obtener información sensible aprovechando una membresía de grupo aplicable, tal y como lo demuestra el hecho de que /etc/shadow es propiedad de root:shadow mode 0640, pero /etc/.shadow.swp es propiedad de root:users mode 0640. Esta es una vulnerabilidad diferente a CVE-2017-1000382."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.1263",
            "matchCriteriaId" : "CF7D04AC-59B5-42A7-B95E-4F54D6ABDB16"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/11/27/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=166",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4582-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/11/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4582-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3104",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2."
      }, {
        "lang" : "es",
        "value" : "Adobe RoboHelp tiene una vulnerabilidad de Cross-Site Scripting (XSS). Esto afecta a las versiones anteriores a la versión RH12.0.4.460 y RH2017 anteriores a la RH2017.0.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.0.1",
            "matchCriteriaId" : "79AC4CB6-CA05-4A25-861B-55A306678FD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.4.460",
            "matchCriteriaId" : "E87EA8FD-DFC8-4821-B846-A45BF0B8061F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100707",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039319",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/robohelp/apsb17-25.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/robohelp/apsb17-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3105",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-01T08:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2."
      }, {
        "lang" : "es",
        "value" : "Adobe RoboHelp tiene una vulnerabilidad de redirección abierta Esto afecta a las versiones anteriores a la versión RH12.0.4.460 y RH2017 anteriores a la RH2017.0.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.0.1",
            "matchCriteriaId" : "79AC4CB6-CA05-4A25-861B-55A306678FD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.4.460",
            "matchCriteriaId" : "E87EA8FD-DFC8-4821-B846-A45BF0B8061F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100709",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039319",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/robohelp/apsb17-25.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/robohelp/apsb17-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10861",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en QND Advance/Standard permite que un atacante lea archivos arbitrarios mediante un comando especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualitysoft:qnd_advance\\/standard:*:sp3:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3i",
            "matchCriteriaId" : "E252E134-A896-47AA-810E-E5C6015EFE30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.qualitysoft.com/qnd_vulnerabilities",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94198685/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.qualitysoft.com/qnd_vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94198685/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10874",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks."
      }, {
        "lang" : "es",
        "value" : "PWR-Q200 no utiliza valores aleatorios para los puertos de origen de los paquetes de consultas DNS, lo que permite que los atacantes remotos realicen ataques de envenenamiento de la memoria caché DNS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ntt-east:pwr-q200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B28C389-C239-4F37-B8CA-8525FEC38799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ntt-east:pwr-q200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0BFD2-7A8F-4270-AAB3-DA5AB9C83655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web116.jp/shop/hikari_p/q200/q200_00.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73141967/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://web116.jp/shop/hikari_p/q200/q200_00.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73141967/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10891",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en la versión 3.2.0.191 y anteriores de Media Go permite a los atacantes conseguir privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:media_go:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0.191",
            "matchCriteriaId" : "1CAF5FE2-20EE-4182-ACB3-AD45C0EBDC4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN08517069/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN08517069/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10892",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en Music Center for PC en sus versiones 1.0.00 permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:music_center:1.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2E2944-6F6E-4ABB-9705-95BF656EF58D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN08517069/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN08517069/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10894",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StreamRelay.NET.exe ver2.14.0.7 and earlier allows remote attackers to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "StreamRelay.NET.exe en sus versiones 2.14.0.7 y anteriores permite que los atacantes remotos provoquen una denegación de servicio mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:streamrelay:streamrelay:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.14.0.7",
            "matchCriteriaId" : "FACCC313-52DE-435A-9E9C-22213D7457FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN71291160/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN71291160/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10895",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sDNSProxy.exe ver1.1.0.0 and earlier allows remote attackers to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "sDNSProxy.exe en sus versiones 1.1.0.0 y anteriores permite que los atacantes remotos provoquen una denegación de servicio mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sdnsproxy_project:sdnsproxy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0.0",
            "matchCriteriaId" : "6990AA9E-2A65-4B87-82D6-525CAAACCA0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN71291160/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN71291160/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10898",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en A-Member y A-Member para MT cloud en versiones 3.8.6 y anteriores permite que un atacante ejecute comandos SQL arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ark-web:a-member:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.6",
            "matchCriteriaId" : "65AC93C0-1B26-4C43-8586-B5CAB49F0CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ark-web:a-member:*:*:*:*:*:movabletype:*:*",
            "versionEndIncluding" : "3.8.6",
            "matchCriteriaId" : "BF6C392C-36CC-453D-9482-89B8EA39F4B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN78501037/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN78501037/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10899",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en A-Reserve y A-Reserve para MT cloud en versiones 3.8.6 y anteriores permite que un atacante ejecute comandos SQL arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ark-web:a-reserve:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.6",
            "matchCriteriaId" : "8D0FB76C-2B95-403B-8275-74D9FC9F3CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ark-web:a-reserve:*:*:*:*:*:movabletype:*:*",
            "versionEndIncluding" : "3.8.6",
            "matchCriteriaId" : "3F8E9283-6B01-424B-B162-FB5E725867FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN78501037/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN78501037/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10900",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "PTW-WMS1 con versión de firmware 2.000.012 permite que los atacantes remotos omitan restricciones de acceso para obtener o borrar datos en el disco mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:princeton:ptw-wms1_firmware:2.000.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788289A-F80D-4C43-B0F3-620FB4D061A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:princeton:ptw-wms1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96741396-A914-452E-A06F-85076F511C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10901",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en PTW-WMS1 con versión de firmware 2.000.012 permite que los atacantes remotos realicen ataques de denegación de servicio (DoS) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:princeton:ptw-wms1_firmware:2.000.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788289A-F80D-4C43-B0F3-620FB4D061A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:princeton:ptw-wms1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96741396-A914-452E-A06F-85076F511C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10902",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "PTW-WMS1 con versión de firmware 2.000.012 permite que los atacantes remotos ejecuten comandos de sistema operativo arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:princeton:ptw-wms1_firmware:2.000.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788289A-F80D-4C43-B0F3-620FB4D061A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:princeton:ptw-wms1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96741396-A914-452E-A06F-85076F511C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10903",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-01T14:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Problema de autenticación incorrecta en PTW-WMS1 con versión de firmware 2.000.012 permite que los atacantes remotos inicien sesión en el dispositivo con privilegios root y realicen operaciones arbitrarias mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:princeton:ptw-wms1_firmware:2.000.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788289A-F80D-4C43-B0F3-620FB4D061A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:princeton:ptw-wms1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96741396-A914-452E-A06F-85076F511C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98295787/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15701",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-01T15:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventually terminate. Older AMQP protocols are not affected."
      }, {
        "lang" : "es",
        "value" : "En Apache Qpid Broker-J versiones 6.1.0 hasta 6.1.4 (inclusive), el broker no impone apropiadamente un tamaño máximo de trama en tramas AMQP versión 1.0. Un atacante remoto no autenticado podría explotar esto para hacer que el broker agote toda la memoria disponible y finalmente termine. Los protocolos AMQP más antiguos no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:qpid_broker-j:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndIncluding" : "6.1.4",
            "matchCriteriaId" : "84271735-DF9D-4AAF-B123-88403028D2A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102041",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/QPID-7947",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4054e1c90993f337eeea24a312841c0661653e673c0ff8e2cd9520fe%40%3Cdev.qpid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://qpid.apache.org/cves/CVE-2017-15701.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/QPID-7947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4054e1c90993f337eeea24a312841c0661653e673c0ff8e2cd9520fe%40%3Cdev.qpid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://qpid.apache.org/cves/CVE-2017-15701.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15702",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-01T15:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Qpid Broker-J 0.18 through 0.32, if the broker is configured with different authentication providers on different ports one of which is an HTTP port, then the broker can be tricked by a remote unauthenticated attacker connecting to the HTTP port into using an authentication provider that was configured on a different port. The attacker still needs valid credentials with the authentication provider on the spoofed port. This becomes an issue when the spoofed port has weaker authentication protection (e.g., anonymous access, default accounts) and is normally protected by firewall rules or similar which can be circumvented by this vulnerability. AMQP ports are not affected. Versions 6.0.0 and newer are not affected."
      }, {
        "lang" : "es",
        "value" : "En las versiones 0.18 a 0.32 de Broker-J de Apache Qpid, si el broker está configurado con diferentes proveedores de autenticación en diferentes puertos (uno de ellos es un puerto HTTP), un atacante remoto no autenticado puede engañar al broker conectándose al puerto HTTP para que utilice un proveedor de autenticación que se configuró en un puerto diferente. El atacante aún necesitaría credenciales válidas con el proveedor de autenticación en el puerto suplantado. Esto es un problema cuando el puerto suplantado tiene una protección de autenticación más débil (por ejemplo, acceso anónimo, cuentas por defecto, etc.) y normalmente se protege con reglas de firewall o similares que pueden ser omitidos con esta vulnerabilidad. Los puertos AMQP no se ven afectados. Las versiones 6.0.0 y posteriores no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:qpid_broker-j:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.18",
            "versionEndIncluding" : "0.32",
            "matchCriteriaId" : "78C295BD-3BF5-44E3-B0A6-14A060C1042D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102040",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/QPID-8039",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/59d241e30db23b8b0af26bb273f789aa1f08515d3dc1a3868d3ba090%40%3Cdev.qpid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://qpid.apache.org/cves/CVE-2017-15702.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/QPID-8039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/59d241e30db23b8b0af26bb273f789aa1f08515d3dc1a3868d3ba090%40%3Cdev.qpid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://qpid.apache.org/cves/CVE-2017-15702.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15707",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-01T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload."
      }, {
        "lang" : "es",
        "value" : "El plugin REST en Apache Struts desde la versión 2.5 hasta la 2.5.14 emplea una librería JSON-lib desactualizada vulnerable y que permite llevar a cabo un ataque de denegación de servicio utilizando una petición maliciosa con una carga útil JSON especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5",
            "versionEndIncluding" : "2.5.14",
            "matchCriteriaId" : "351976F7-D1E8-4EAE-9F2A-46122E9D7424"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm_framework:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB44079-8054-48BC-A8B5-B637AD1F9DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E97F04-00ED-48E9-AB40-7A02B3419641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCE5A11-39E7-4BBB-9E1A-BA4B754103BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DECBF5C-6C87-424F-A116-DD534EC5946C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3469C84E-50F3-4461-864C-E59174DDC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "402B8642-7ACC-4F42-87A9-AB4D3B581751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_lifecycle_management_opatchauto:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A877F1B-4B25-48E2-B473-0E76ED3948A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C2A2A4-285B-40A1-B9AD-42219D742DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1223C57-DA2C-42C0-9DCC-6124DF3AE67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B3354D-3929-4AEC-AAE0-7F573341FD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55901EF7-B71C-40B3-B276-FDA6381F051F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385D40CC-5AA0-4DAB-A2E7-F3A3CFF95BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D81AE2-9ABF-4C1B-B7F5-0549C8DFBBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A11496F-FECC-46C5-B914-F2B32423BEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE3D682-1434-4789-8B43-679AE86533FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF04EF-B1C3-4601-878A-35EA6A15EF0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102021",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039946",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-054",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171214-0001/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171214-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key."
      }, {
        "lang" : "es",
        "value" : "Exposición de clave de cifrado en firmware en versiones 2.2.4.8 y anteriores de iSmartAlarm CubeOne permite que los atacantes descifren archivos de log mediante una clave expuesta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ismartalarm:cubeone_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4.8",
            "matchCriteriaId" : "7746FA8E-AB10-4A96-A2BC-812BE3101409"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675B613E-FA9B-49A4-854E-A60CADBD8634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file."
      }, {
        "lang" : "es",
        "value" : "Exposición de archivos de contraseña en versiones 2.2.4.8 y anteriores de iSmartAlarm CubeOne permite que los atacantes ejecuten comandos arbitrarios con privilegios de administrador recuperando las credenciales de este archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ismartalarm:cubeone_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4.8",
            "matchCriteriaId" : "7746FA8E-AB10-4A96-A2BC-812BE3101409"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675B613E-FA9B-49A4-854E-A60CADBD8634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Vibease Wireless Remote Vibrator app for Android and the Vibease Chat app for iOS use cleartext to exchange messages with other apps and the PLAIN SASL mechanism to send auth tokens to Vibease servers, which allows remote attackers to obtain user credentials, messages, and other sensitive information by sniffing the network for XMPP traffic."
      }, {
        "lang" : "es",
        "value" : "La app Vibease Wireless Remote Vibrator para Android y la app Vibease Chat para iOS utilizan texto en claro para intercambiar mensajes con otras apps y el mecanismo PLAIN SASL para enviar tokens de autenticación a los servidores de Vibease, lo que permite que los atacantes remotos obtengan credenciales de usuario, mensajes y otra información sensible rastreando la red para el tráfico XMPP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vibease:chat:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "ED3E2D21-505A-48FB-8308-ED2E87EECDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vibease:wireless_remote_vibrator:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "F1B55833-A15A-45E8-B829-560C399514BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OhMiBod Remote app for Android and iOS allows remote attackers to impersonate users by sniffing network traffic for search responses from the OhMiBod API server and then editing the username, user_id, and token fields in data/data/com.ohmibod.remote2/shared_prefs/OMB.xml."
      }, {
        "lang" : "es",
        "value" : "La app OhMiBod Remote para Android e iOS permite que los atacantes remotos suplanten usuarios rastreando el tráfico de red para buscar respuestas del servidor de la API OhMiBod y luego editando los campos username, user_id y token en ata/data/com.ohmibod.remote2/shared_prefs/OMB.xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohmibod:ohmibod_remote:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.50.37",
            "matchCriteriaId" : "0FE8C8C3-E681-4E75-963C-08F2BC51E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohmibod:ohmibod_remote:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "2.50.37",
            "matchCriteriaId" : "0A3E20F6-F9D0-4219-A3E7-EFF06D4108D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an increase to the attack surface of the product"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Las cámaras IP HikVision, cuando se utilizan en una configuración por cable, permiten que los atacantes cercanos físicamente desencadenen la asociación con un punto de acceso arbitrario utilizando un SSID por defecto sin cifrado o autenticación de wifi. NOTA: El vendedor afirma que esto no es una vulnerabilidad, sino más bien un aumento de la superficie de ataque del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-2cd2432f-iw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.5",
            "matchCriteriaId" : "21201840-02CF-4E86-B6C1-770773EA71BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-2cd2432f-iw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C6812E-65E0-4459-85E9-504BFCB09C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145131/HikVision-Wi-Fi-IP-Camera-Wireless-Access-Point-State.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/43",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145131/HikVision-Wi-Fi-IP-Camera-Wireless-Access-Point-State.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Nov/43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself."
      }, {
        "lang" : "es",
        "value" : "La función setpermissions en la herramienta de actualización automática en Arq en versiones anteriores a la 5.9.7 para Mac permite que los usuarios locales obtengan privilegios root mediante un ataque de symlink en el propio archivo binario del actualizador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arqbackup:arq:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "5.9.7",
            "matchCriteriaId" : "F5609F1B-0840-4F5D-8E79-DCD3845792EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201715357-local-root-privesc-in-arq-backup--596.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arqbackup.com/download/arq5_release_notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43218/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201715357-local-root-privesc-in-arq-backup--596.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arqbackup.com/download/arq5_release_notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files."
      }, {
        "lang" : "es",
        "value" : "En libXfont en versiones anteriores a la 1.5.4 y libXfont2 en versiones anteriores a la 2.0.3, un atacante local puede abrir (pero no leer) archivos en el sistema como root, desencadenando rebobinados de cinta, watchdogs o mecanismos similares que se pueden desencadenar abriendo archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.5.4",
            "matchCriteriaId" : "2EF948B6-54AC-420B-8AB1-FE7457BFDA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "6C5EEDFA-B5A6-488D-9C54-DC21842C861D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=155",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3500-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1050459",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3500-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1050459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0."
      }, {
        "lang" : "es",
        "value" : "libXcursor en versiones anteriores a la 1.1.15 tiene varios desbordamientos de enteros que podrían provocar desbordamientos de búfer basados en memoria dinámica (heap) cuando se procesan cursores maliciosos, por ejemplo, con programas como GIMP. También es posible que exista un vector de ataque contra el código relacionado en cursor/xcursor.c en Wayland hasta la versión 1.14.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x:libxcursor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "B4D07A4E-CFE6-4C51-AD12-F66CDCE729DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=156",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3501-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1065386",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/wayland/wayland/commit/?id=5d201df72f3d4f4cb8b8f75f980169b03507da38",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=4794b5dd34688158fb51a2943032569d3780c4b8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.freedesktop.org/archives/wayland-devel/2017-November/035979.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://marc.info/?l=freedesktop-xorg-announce&m=151188036018262&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3622-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3501-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1065386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Tool Signature", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/wayland/wayland/commit/?id=5d201df72f3d4f4cb8b8f75f980169b03507da38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=4794b5dd34688158fb51a2943032569d3780c4b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.freedesktop.org/archives/wayland-devel/2017-November/035979.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://marc.info/?l=freedesktop-xorg-announce&m=151188036018262&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3622-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. tags.php is affected: values of the edit_list parameters are not sanitized; these are used to construct an SQL query and retrieve a list of registered users into the application."
      }, {
        "lang" : "es",
        "value" : "La aplicación Piwigo se ve afectada por una vulnerabilidad de inyección SQL en la versión 2.9.2 y posiblemente en las anteriores. Esta vulnerabilidad permite que los atacantes remotos autenticados obtengan información en el contexto del usuario utilizado por la aplicación para recuperar datos de la base de datos. tags.php se ve afectado: los valores de los parámetros edit_list no están sanitizados; se utilizan para construir una consulta SQL y recuperar una lista de usuarios registrados en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.2",
            "matchCriteriaId" : "A17106BD-7461-4A08-AFAC-E79CFC54268C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/issues/804",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet."
      }, {
        "lang" : "es",
        "value" : "Las apps auxiliares (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer y (5) arqs3glacierrestorer en Arq 5.x en versiones anteriores a la 5.10 para Mac permiten que los usuarios locales obtengan privilegios root mediante un paquete de datos manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arqbackup:arq:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "5.0.0.65",
            "versionEndExcluding" : "5.10",
            "matchCriteriaId" : "54571CBF-AEC2-46FD-9D44-42E0671DF1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201716895-local-root-privesc-in-arq-backup--597.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.arqbackup.com/blog/arq-mac-import-security-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43216/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201716895-local-root-privesc-in-arq-backup--597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.arqbackup.com/blog/arq-mac-import-security-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-01T17:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request."
      }, {
        "lang" : "es",
        "value" : "connoppp.cgi en dispositivos ZTE ZXDSL 831CII no requiere autenticación básica HTTP, lo que permite que los atacantes remotos modifiquen la configuración PPPoE o realicen una configuración maliciosa mediante una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxdsl_831cii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97A1690-1D5B-4E98-9E7A-5B039A2F3686"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxdsl_831cii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A650E89-071F-4151-A113-A68B43092ECF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145121/ZTE-ZXDSL-831-Unauthorized-Configuration-Access-Bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43188/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145121/ZTE-ZXDSL-831-Unauthorized-Configuration-Access-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43188/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6679",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-12-01T17:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established."
      }, {
        "lang" : "es",
        "value" : "Cisco Umbrella Virtual Appliance en sus versiones 2.0.3 y anteriores contenían un túnel de soporte remoto cifrado sin documentar (SSH) que se iniciaba automáticamente desde la máquina del cliente a los hubs SSH de Cisco en los CPD de Umbrella. Estos túneles se utilizaban en principio para proporcionar soporte remoto y permitían al personal autorizado/autenticado del equipo de Cisco Umbrella para que accediesen a la máquina remotamente y obtuvieses el control total sin la aprobación explícita del cliente. Para resolver esta vulnerabilidad, la versión 2.1.0 de Umbrella Virtual Appliance ahora necesita la aprobación explícita del cliente antes de que se pueda establecer un túnel SSH desde la máquina virtual al servidor destino de Cisco."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:umbrella:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "04CE73AE-5B74-4159-B36E-A6A6F22D2985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101567",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-tunnel-gJw5thgE",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://support.umbrella.com/hc/en-us/articles/115004154423",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-Vulnerability-due-to-always-on-SSH-Tunnel-RESOLVED-2017-09-15",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Cisco-Umbrella.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-tunnel-gJw5thgE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.umbrella.com/hc/en-us/articles/115004154423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-Vulnerability-due-to-always-on-SSH-Tunnel-RESOLVED-2017-09-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/Cisco-Umbrella.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-02T00:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en chan_skinny.c en Asterisk Open Source en versiones 13.18.2 y anteriores, 14.7.2 y anteriores y 15.1.2 y anteriores y en Certified Asterisk 13.13-cert7 y anteriores. Si el controlador de canal chan_skinny (también conocido como protocolo SCCP) se inunda a base de determinadas peticiones, puede provocar que el proceso de asterisk utilice cantidades excesivas de memoria virtual, finalmente provocando que asterisk deje de procesar cualquier tipo de peticiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.13",
            "matchCriteriaId" : "DF0E7AD0-0B51-47BC-8746-CAC7C63F8AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "0449B393-FA4E-4664-8E16-BE6B94E4872F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED8E415-64FA-4E77-A423-3478E606E58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E13CA1DD-B384-4408-B4EC-1AA829981016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE28BD0A-EA30-4265-A5D6-0390F3558D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F82048D-C65F-4439-BBE4-2D4A9B07EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "6447B77F-3770-4703-9188-B7344ED98E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "5C103924-1D61-4090-8ED5-4731371B2B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "08F87B09-3867-4CAE-BAD7-2206CD6CAF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "0D12B31E-C30C-442A-9BD8-504CF7EB1321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "B43DA484-83DC-4489-9037-B85B845078E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "D8740005-0BCF-4B76-A600-25A9BF0F3C42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.8.2",
            "matchCriteriaId" : "BA00E078-97B8-4C2D-BD07-DB2A25908303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.7.2",
            "matchCriteriaId" : "8BE71990-160B-413F-AB66-C29C7C1CC82F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.1.2",
            "matchCriteriaId" : "D39329BD-4A6B-48DB-AFDB-DC58154CBDD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102023",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27452",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43992/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-02T06:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restrictions by entering this string."
      }, {
        "lang" : "es",
        "value" : "wp-admin/user-new.php en WordPress en versiones anteriores a la 4.9.1 establece la clave newbloguser a una cadena que se puede derivar directamente del ID de usuario, lo que permite que los atacantes remotos omitan las restricciones de acceso planeadas introduciendo esta cadena."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9",
            "matchCriteriaId" : "2837120C-9A7F-401D-BE5D-32F50F82A9FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/eaf1cfdc1fe0bdffabd8d879c591b864d833326c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8969",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/eaf1cfdc1fe0bdffabd8d879c591b864d833326c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-02T06:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted file."
      }, {
        "lang" : "es",
        "value" : "wp-includes/functions.php en WordPress en versiones anteriores a la 4.9.1 no necesita la capacidad de unfiltered_html para subir archivos .js, lo que puede permitir que los atacantes remotos realicen ataques Cross-Site Scripting (XSS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.1",
            "matchCriteriaId" : "8FA2AAEC-F362-4B60-B814-F77AB2636E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/67d03a98c2cae5f41843c897f206adde299b0509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8966",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/67d03a98c2cae5f41843c897f206adde299b0509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-02T06:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language setting of a site."
      }, {
        "lang" : "es",
        "value" : "wp-includes/general-template.php en WordPress en versiones anteriores a la 4.9.1 no restringe correctamente el atributo lang de un elemento HTML, lo que puede permitir que los atacantes realicen ataques Cross-Site Scripting (XSS) mediante la configuración de idioma de un sitio web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.1",
            "matchCriteriaId" : "8FA2AAEC-F362-4B60-B814-F77AB2636E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8968",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-02T06:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "wp-includes/feed.php en WordPress en versiones anteriores a la 4.9.1 no restringe contenedores en los campos RSS y Atom, lo que puede permitir que los atacantes realicen ataques Cross-Site Scripting (XSS) mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.1",
            "matchCriteriaId" : "8FA2AAEC-F362-4B60-B814-F77AB2636E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/f1de7e42df29395c3314bf85bff3d1f4f90541de",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8967",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://codex.wordpress.org/Version_4.9.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/commit/f1de7e42df29395c3314bf85bff3d1f4f90541de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-02T06:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file."
      }, {
        "lang" : "es",
        "value" : "tools/pal2rgb.c en pal2rgb en LibTIFF 4.0.7 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap de TIFFSetupStrips y cierre inesperado de la aplicación) o, probablemente, causen otros impactos no especificados mediante un archivo TIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27374BA0-7A61-4BDC-9F92-C09E99A9AB81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/30/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102124",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43322/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/30/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43322/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-03T07:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292."
      }, {
        "lang" : "es",
        "value" : "Existe Cross-Site Scripting (XSS) en versiones anteriores a la 2017-06-13 de SAP Business Objects Financial Consolidation, también conocido como SAP Security Note 2422292."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_financial_consolidation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5762B04C-D1CF-44E2-AD25-34B467825618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.sap.com/2017/06/13/sap-security-patch-day-june2017/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blogs.sap.com/2017/06/13/sap-security-patch-day-june2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-03T07:29:00.257",
      "lastModified" : "2023-11-07T02:41:10.250",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8819",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-03T07:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue."
      }, {
        "lang" : "es",
        "value" : "En Tor, en versiones anteriores a la 0.2.5.16; de la versión 0.2.6 hasta la 0.2.8 anterior a la 0.2.8.17; versiones 0.2.9 anteriores a la 0.2.9.14; versiones 0.3.0 anteriores a la 0.3.0.13 y versiones 0.3.1 anteriores a la 0.3.1.9, el mecanismo de protección del caché de reproducción no funciona para servicios onion v2. Esto también se conoce como TROVE-2017-009. Un atacante puede enviar múltiples celdas INTRODUCE2 para desencadenar este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5.16",
            "matchCriteriaId" : "067DE048-F786-4E63-98E6-6FD6415DD3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.6",
            "versionEndExcluding" : "0.2.8.17",
            "matchCriteriaId" : "5372249B-59F8-4866-B4D3-F52980FCC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.9",
            "versionEndExcluding" : "0.2.9.14",
            "matchCriteriaId" : "E0739CCD-DE8F-4A44-91CD-986C4644045F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.3.0.13",
            "matchCriteriaId" : "E623D0FC-453C-4D7A-8328-C4C252EEC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.1",
            "versionEndExcluding" : "0.3.1.9",
            "matchCriteriaId" : "249879F0-6A12-41C2-9559-020021080696"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24244",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8820",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-03T07:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause a denial of service (NULL pointer dereference and application crash) against directory authorities via a malformed descriptor, aka TROVE-2017-010."
      }, {
        "lang" : "es",
        "value" : "En Tor, en versiones anteriores a la 0.2.5.16; de la versión 0.2.6 hasta la 0.2.8 anterior a la 0.2.8.17, versiones 0.2.9 anteriores a la 0.2.9.14; versiones 0.3.0 anteriores a la 0.3.0.13 y versiones 0.3.1 anteriores a la 0.3.1.9, los atacantes remotos pueden provocar una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) contra autoridades de directorio mediante un descriptor mal formado. Esto también se conoce como TROVE-2017-010."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5.16",
            "matchCriteriaId" : "067DE048-F786-4E63-98E6-6FD6415DD3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.6",
            "versionEndExcluding" : "0.2.8.17",
            "matchCriteriaId" : "5372249B-59F8-4866-B4D3-F52980FCC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.9",
            "versionEndExcluding" : "0.2.9.14",
            "matchCriteriaId" : "E0739CCD-DE8F-4A44-91CD-986C4644045F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.3.0.13",
            "matchCriteriaId" : "E623D0FC-453C-4D7A-8328-C4C252EEC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.1",
            "versionEndExcluding" : "0.3.1.9",
            "matchCriteriaId" : "249879F0-6A12-41C2-9559-020021080696"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24245",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8821",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-03T07:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers an attempt by the OpenSSL library to ask the user for the password, aka TROVE-2017-011."
      }, {
        "lang" : "es",
        "value" : "En Tor, en versiones anteriores a la 0.2.5.16; de la versión 0.2.6 hasta la 0.2.8 anterior a la 0.2.8.17; versiones 0.2.9 anteriores a la 0.2.9.14; versiones 0.3.0 anteriores a la 0.3.0.13 y versiones 0.3.1 anteriores a la 0.3.1.9, un atacante puede provocar una denegación de servicio (bloqueo de la aplicación) mediante una entrada PEM manipulada que represente una clave pública que requiera una contraseña. Esto da lugar a que la biblioteca Open SSLE intente preguntar la contraseña al usuario. Esto también se conoce como TROVE-2017-011."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5.16",
            "matchCriteriaId" : "067DE048-F786-4E63-98E6-6FD6415DD3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.6",
            "versionEndExcluding" : "0.2.8.17",
            "matchCriteriaId" : "5372249B-59F8-4866-B4D3-F52980FCC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.9",
            "versionEndExcluding" : "0.2.9.14",
            "matchCriteriaId" : "E0739CCD-DE8F-4A44-91CD-986C4644045F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.3.0.13",
            "matchCriteriaId" : "E623D0FC-453C-4D7A-8328-C4C252EEC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.1",
            "versionEndExcluding" : "0.3.1.9",
            "matchCriteriaId" : "249879F0-6A12-41C2-9559-020021080696"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24246",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8822",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-03T07:29:00.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012."
      }, {
        "lang" : "es",
        "value" : "En Tor, en versiones anteriores a la 0.2.5.16; de la versión 0.2.6 hasta la 0.2.8 anterior a la 0.2.8.17; versiones 0.2.9 anteriores a la 0.2.9.14; versiones 0.3.0 anteriores a la 0.3.0.13 y versiones 0.3.1 anteriores a la 0.3.1.9, los relays (que contienen descriptores descargados de forma incompleta) pueden escogerse a sí mismos en una ruta, lo que da lugar a una degradación de anonimato. Esto también se conoce como TROVE-2017-012."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5.16",
            "matchCriteriaId" : "067DE048-F786-4E63-98E6-6FD6415DD3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.6",
            "versionEndExcluding" : "0.2.8.17",
            "matchCriteriaId" : "5372249B-59F8-4866-B4D3-F52980FCC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.9",
            "versionEndExcluding" : "0.2.9.14",
            "matchCriteriaId" : "E0739CCD-DE8F-4A44-91CD-986C4644045F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.3.0.13",
            "matchCriteriaId" : "E623D0FC-453C-4D7A-8328-C4C252EEC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.1",
            "versionEndExcluding" : "0.3.1.9",
            "matchCriteriaId" : "249879F0-6A12-41C2-9559-020021080696"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/21534",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24333",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/21534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8823",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-03T07:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013."
      }, {
        "lang" : "es",
        "value" : "En Tor, en versiones anteriores a la 0.2.5.16; de la versión 0.2.6 hasta la 0.2.8 anterior a la 0.2.8.17: versiones 0.2.9 anteriores a la 0.2.9.14; versiones 0.3.0 anteriores a la 0.3.0.13 y versiones 0.3.1 anteriores a la 0.3.1.9, existe un uso de memoria previamente liberada en el servicio onion v2 durante la expiración del nodo de entrada, debido a que la lista de expiración se gestiona de manera incorrecta en ciertos casos de error. Esto también se conoce como TROVE-2017-013."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5.16",
            "matchCriteriaId" : "067DE048-F786-4E63-98E6-6FD6415DD3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.6",
            "versionEndExcluding" : "0.2.8.17",
            "matchCriteriaId" : "5372249B-59F8-4866-B4D3-F52980FCC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.9",
            "versionEndExcluding" : "0.2.9.14",
            "matchCriteriaId" : "E0739CCD-DE8F-4A44-91CD-986C4644045F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.3.0.13",
            "matchCriteriaId" : "E623D0FC-453C-4D7A-8328-C4C252EEC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.1",
            "versionEndExcluding" : "0.3.1.9",
            "matchCriteriaId" : "249879F0-6A12-41C2-9559-020021080696"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24313",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24430",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/24430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-03T19:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-site scripting (XSS) en el plugin Content Cards en versiones anteriores a la 0.9.7 para WordPress permite que atacantes remotos inyecten código JavaScript arbitrario mediante datos OpenGraph manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:content_cards_project:content_cards:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.9.7",
            "matchCriteriaId" : "1BE4CB2D-AA4B-43FB-A51E-14D97F814151"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/content-cards/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8971",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/content-cards/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-03T21:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer basado en SEH sin autenticación en el servidor HTTP de Flexense SyncBreeze Enterprise v10.1.16. Cuando se envía una petición GET de una longitud excesiva, es posible que un usuario malicioso sobrescriba el registro SEH y ejecute un payload que se ejecutaría bajo la cuenta SYSTEM de Windows."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:10.1.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ADC6E48B-D67D-424F-98DC-ACB0F6571DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144586/Sync-Breeze-Enterprise-10.1.16-SEH-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42984/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144586/Sync-Breeze-Enterprise-10.1.16-SEH-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42984/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS 2.0.7 tiene una inyección SQL en /system/site.php mediante $_REQUEST['link']."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS 2.0.7 tiene una inyección SQL en /apps/app_user/sys_user.php mediante $_POST[name] o $_POST[email]. Esta vulnerabilidad puede llevar a una escalada de privilegios de usuario normal a administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name']."
      }, {
        "lang" : "es",
        "value" : "Fiyo CMS 2.0.7 tiene una vulnerabilidad de lectura de archivos arbitrarios en dapur/apps/app_theme/libs/check_file.php mediante $_GET['src'] o $_GET['name']."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fiyo:fiyo_cms:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92FABA6-C9D2-44D6-938F-B596AA09CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiyoCMS/FiyoCMS/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.373",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "ntguard_x64.sys 0.18780.0.0 en IKARUS anti.virus 2.16.15 tiene una vulnerabilidad de corrupción de grupos mediante una petición 0x83000058 DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B91D64-AEF5-4E77-894C-D6A7FA11F505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Pool_Corruption_1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Pool_Corruption_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "ntguard_x64.sys 0.18780.0.0 en IKARUS anti.virus 2.16.15 tiene una vulnerabilidad de desreferencia de puntero NULL mediante una petición 0x830000c4 DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B91D64-AEF5-4E77-894C-D6A7FA11F505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Null_Pointer_Dereference_1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Null_Pointer_Dereference_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "ntguard.sys y ntguard_x64.sys 0.18780.0.0 en IKARUS anti.virus 2.16.15 tiene una vulnerabilidad de corrupción de memoria mediante una petición 0x83000084 DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B91D64-AEF5-4E77-894C-D6A7FA11F505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Memory_Corruption_1_0x83000084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Memory_Corruption_1_0x83000084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section."
      }, {
        "lang" : "es",
        "value" : "La biblioteca Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1, permite que atacantes remotos provoquen una denegación de servicio (acceso a la memoria no autorizado) o, posiblemente, causen otro tipo de impacto sin especificar mediante un binario COFF en el cual una reubicación se refiere a una ubicación tras el final de la sección que se va a reubicar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22506",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b23dc97fe237a1d9e850d7cbeee066183a00630b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b23dc97fe237a1d9e850d7cbeee066183a00630b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file."
      }, {
        "lang" : "es",
        "value" : "La función dump_relocs_in_section en objdump.c en GNU Binutils 2.29.1 no busca desbordamientos de conteo de enteros reloc, lo que permite que atacantes remotos causen una denegación de servicio (asignación excesiva de memoria o desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o posiblemente otro impacto no especificado mediante un archivo PE manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22508",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d785b7d4b877ed465d04072e17ca19d0f47d840f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d785b7d4b877ed465d04072e17ca19d0f47d840f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file."
      }, {
        "lang" : "es",
        "value" : "La función coff_slurp_reloc_table en coffcode.h en la biblioteca Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo manipulado basado en COFF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4581a1c7d304ce14e714b27522ebf3d0188d6543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4581a1c7d304ce14e714b27522ebf3d0188d6543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary."
      }, {
        "lang" : "es",
        "value" : "La función _bfd_coff_read_string_table en coffgen.c en la biblioteca Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29.1 no valida correctamente el tamaño de la tabla de cadenas externas, lo que permite que atacantes remotos provoquen una denegación de servicio (consumo excesivo de memoria y cierre inesperado de la aplicación) o, posiblemente, otro impacto sin especificar mediante un binario COFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b0029dce6867de1a2828293177b0e030d2f0f03c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b0029dce6867de1a2828293177b0e030d2f0f03c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file."
      }, {
        "lang" : "es",
        "value" : "nm.c y objdump.c en GNU Binutils 2.29.1 gestionan de manera incorrecta ciertos símbolos globales, lo que permite que atacantes remotos provoquen una denegación de servicio (sobrelectura del búfer _bfd_elf_get_symbol_version_string y cierre inesperado de la aplicación) o, probablemente, causen otro impacto sin especificar mediante un archivo ELF modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=160b1a618ad94988410dc81fce9189fcda5b7ff4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=160b1a618ad94988410dc81fce9189fcda5b7ff4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers."
      }, {
        "lang" : "es",
        "value" : "La función load_debug_section en readelf.c en GNU Binutils 2.29.1 permite que atacantes remotos provoquen una denegación de servicio (acceso no válido a la memoria y cierre inesperado de aplicación) o, probablemente, provocar cualquier otro tipo de impacto mediante un archivo ELF que no tiene cabeceras de sección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A0A80E-11FE-4454-996C-9D4299602569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22510",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=f425ec6600b69e39eb605f3128806ff688137ea8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=f425ec6600b69e39eb605f3128806ff688137ea8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función vc1_decode_frame en libavcodec/vc1dec.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1099",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://deb.freexian.com/extended-lts/tracker/CVE-2017-17127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://deb.freexian.com/extended-lts/tracker/CVE-2017-17127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.733",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función h264_slice_init en libavcodec/h264_slice.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (fallo de segmentación y cierre inesperado de la aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.763",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función ff_vc1_mc_4mv_chroma4 en libavcodec/vc1_mc.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (fallo de segmentación y cierre inesperado de la aplicación) o, posiblemente, causen otro impacto sin especificar mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T08:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to vc1_decode_i_blocks_adv."
      }, {
        "lang" : "es",
        "value" : "La función ff_free_picture_tables en libavcodec/mpegpicture.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o, probablemente, causen cualquier otro tipo de impacto mediante un archivo modificado, relacionado con vc1_decode_i_blocks_adv."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1100",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T14:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password component, reachable via the old_password, new_password1, and new_password2 parameters to the /accounts/password_change/ URI. An attacker takes advantage of this scenario and creates a crafted CSRF link to add himself as an administrator to the ZKTime Web Software. He then uses social engineering methods to trick the administrator into clicking the forged HTTP request. The request is executed and the attacker becomes the Administrator of the ZKTime Web Software. If the vulnerability is successfully exploited, then an attacker (who would be a normal user of the web application) can escalate his privileges and become the administrator of ZKTime Web Software."
      }, {
        "lang" : "es",
        "value" : "ZKTime Web Software 2.0.1.12280 permite que el administrador eleve los privilegios del usuario de la aplicación empleando una función \"password_change()\" del componente Modify Password, alcanzable mediante los parámetros old_password, new_password1 y new_password2 en el URI /accounts/password_change/. Un atacante se aprovecha de este escenario y crea un enlace CSRF manipulado para añadirse a sí mismo como administrador de ZKTime Web Software. Después, emplea métodos de ingeniería social para engañar al administrador y que haga clic en la petición HTTP falsificada. La petición se ejecuta y el atacante se convierte en el Administrador de ZKTime Web Software. Si la vulnerabilidad se explota con éxito, un atacante (que sería un usuario normal de la aplicación web) puede escalar sus privilegios y convertirse en el administrador de ZKTime Web Software."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zkteco:zktime_web:2.0.1.12280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A66D7A-0989-48D3-A4C7-FF847300A6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145160/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102007",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145160/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-04T14:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied data in the 'Range' field of the 'Department' module in a Personnel Advanced Query. A remote attacker can execute arbitrary HTML and script code in the browser in the context of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de XSS reflejado en ZKTime Web 2.0.1.12280. La vulnerabilidad existe debido a la filtración insuficiente de datos proporcionados por el usuario en el campo \"Range\" del módulo \"Department\" en una consulta Personnel Advanced Query. Un atacante remoto puede ejecutar scripts y código HTML arbitrarios en el navegador en el contexto de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zkteco:zktime_web:2.0.1.12280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A66D7A-0989-48D3-A4C7-FF847300A6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145159/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102006",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145159/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16721",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-04T15:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Scripting (XSS) en Geovap Reliance SCADA versión 4.7.3 Update 2 y anteriores. Esta vulnerabilidad podría permitir que un atacante no autenticado inyecte código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "59F8B332-8519-4857-A26D-57A68E71332A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:4.7.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8845136F-890E-45EF-8B17-A10A4605015F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:4.7.2:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF4AE3A-F7AE-4539-B172-0C83A85BCEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:4.7.2:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F68BF20-73E7-4039-96B7-2F4EE27A0CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:4.7.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9B5E7B-3638-4FB6-B683-99196CC62300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:4.7.3:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D85376-A73F-441E-8DB8-7AF4B4AE1E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovap:reliance-scada:4.7.3:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE781807-FE39-4B87-AF0A-EAE951B016A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102031",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-334-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-334-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12079",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-04T19:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via prog_id field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de archivos o directorios accesibles para terceros en picasa.php en Synology Photo Station en versiones anteriores a la 6.8.1-3458 y a la 6.3-2970 permite que atacantes remotos obtengan archivos arbitrarios mediante el campo prog_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8",
            "versionEndExcluding" : "6.8.1-3458",
            "matchCriteriaId" : "3E77F1B7-8AD1-42F5-BA8A-9F278100756B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.3-2970",
            "matchCriteriaId" : "CDA4ECA6-0266-475F-8D42-508B7F4F12EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12080",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-04T19:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain sensitive system information via .htaccess file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de exposición de información en el archivo de configuración HTTP por defecto en Synology Photo Station en versiones anteriores a la 6.8.1-3458 y a la 6.3-2970 permite que atacantes remotos obtengan información sensible del sistema mediante el archivo .htaccess."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.3-2970",
            "matchCriteriaId" : "CDA4ECA6-0266-475F-8D42-508B7F4F12EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8",
            "versionEndExcluding" : "6.8.1-3458",
            "matchCriteriaId" : "3E77F1B7-8AD1-42F5-BA8A-9F278100756B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15889",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-04T19:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos en smart.cgi en Synology DiskStation Manager (DSM) en versiones anteriores a la 5.2-5967-5 permite que usuarios autenticados remotos ejecuten comandos arbitrarios mediante el campo disk."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2-5967-5",
            "matchCriteriaId" : "0F7A55E2-58E1-4A66-A057-AF0379252EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/157807/Synology-DiskStation-Manager-smart.cgi-Remote-Command-Execution.html",
        "source" : "security@synology.com"
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_65_DSM",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/157807/Synology-DiskStation-Manager-smart.cgi-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_65_DSM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T09:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the pathname to miner_file or miner_getfile."
      }, {
        "lang" : "es",
        "value" : "La interfaz de gestión remota en el extractor Claymore Dual GPU 10.1 es vulnerable a un salto de directorio con autenticación que se puede explotar mediante el envío de una petición especialmente manipulada. Esto permite que un atacante remoto lea o escriba archivos arbitrarios. Esto puede ser explotado mediante secuencias ../ en el nombre de ruta en miner_file o miner_getfile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:N",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claymore_dual_miner_project:claymore_dual_miner:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0F773-0125-4BE6-8074-1E9DBDB056C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/04/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16929",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43231/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/04/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43231/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T09:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging."
      }, {
        "lang" : "es",
        "value" : "La interfaz de gestión remota en el extractor Claymore Dual GPU 10.1 permite que un atacante remoto no autenticado ejecute código arbitrario debido a un desbordamiento de búfer basado en pila en el manipulador de peticiones. Esto puede ser explotado mediante una petición API larga que se gestiona de manera incorrecta durante el registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claymore_dual_miner_project:claymore_dual_miner:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0F773-0125-4BE6-8074-1E9DBDB056C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/04/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43231/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/04/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43231/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T09:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug."
      }, {
        "lang" : "es",
        "value" : "Las implementaciones prealfa (1) i2pd en versiones anteriores a la 2.17 y (2) kovri del protocolo de enrutamiento I2P no gestionan correctamente los paquetes Garlic DeliveryTypeTunnel. Esto permite que atacantes remotos obtengan información sensible de la memoria de procesos mediante paquetes manipulados que desencadenan una sobrelectura de búfer, tal y como se demuestra leyendo memoria del router sensible. Esto también se conoce como GarlicRust bug."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkovri:kovri:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41546D7E-37FF-4D83-BDCC-F440F80282D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i2pd:i2pd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.0",
            "matchCriteriaId" : "2FF146B8-76FA-41DC-9678-995B56073E01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/291489",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/291489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8824",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-05T09:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state."
      }, {
        "lang" : "es",
        "value" : "La función dccp_disconnect en net/dccp/proto.c en el kernel de Linux hasta la versión 4.14.3 permite que usuarios locales obtengan privilegios o provoquen una denegación de servicio (uso de memoria previamente liberada) mediante una llamada del sistema de conexión AF_UNSPEC durante el estado DCCP_LISTEN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.14",
            "versionEndExcluding" : "3.2.97",
            "matchCriteriaId" : "0EE29C7C-2B97-4ADE-8107-3D6CD2D6F0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "B97C01AC-F470-4190-AC38-30DE3DFDCCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.95",
            "matchCriteriaId" : "6D9DDFC3-3F5C-4CD5-B455-A5DA514D251F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.50",
            "matchCriteriaId" : "F71F6650-13B4-486F-80AC-20D871806D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.116",
            "matchCriteriaId" : "C0E70F51-89D3-49B7-B9ED-84B7BA7C348A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.82",
            "matchCriteriaId" : "9C29059A-15D9-49B9-91E3-69C7231D3B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.20",
            "matchCriteriaId" : "3AD76FEC-F149-4ADA-ADF7-D5BCA1508854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.openwall.net/netdev/2017/12/04/224",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/05/1",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102056",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0399",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1216",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3822",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-3/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43234/",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.openwall.net/netdev/2017/12/04/224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43234/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16856",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-12-05T16:29:00.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme."
      }, {
        "lang" : "es",
        "value" : "La macro RSS Feed en Atlassian Confluence en versiones anteriores a la 6.5.2 permite que atacantes remotos inyecten código HTML o JavaScript arbitrario mediante vulnerabilidades de Cross-Site Scripting (XSS) en varias propiedades rss, que fueron empleadas como enlaces sin restricciones en su combinación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.2",
            "matchCriteriaId" : "D25A9B06-1960-4297-B1B9-E93D331EAF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102094",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54395",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16857",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-12-05T16:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories. This affects all versions of the auto-unapprove plugin, however since the auto-unapprove plugin is not bundled with Bitbucket Server it does not affect any particular version of Bitbucket."
      }, {
        "lang" : "es",
        "value" : "Es posible omitir el plugin bitbucket auto-unapprove mediante fuerza bruta mínima, ya que depende de eventos asíncronos en el back end. Esto permite que un atacante combine cualquier código en repositorios no planeados. Esto afecta a todas las versiones del plugin auto-unapprove; sin embargo, debido a que el plugin auto-unapprove no está agrupado con Bitbucket Server, no afecta a ninguna versión en particular de Bitbucket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97911FE2-5F86-4BE3-AB28-9816EB9CAEDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:1.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "53F394B8-F666-4D37-9AC9-7F5397A405E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6786304B-5EC4-4EA8-88AB-7DC3518DACB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4C63A4-4315-4083-902D-4C5AA056AE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8830EDAD-E6B0-4A27-A455-97E14374AF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84B6B9F-E2F9-44E9-AA13-B59F975991A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607F4C07-6457-4D97-A9AB-1D0EF98B035C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A0B68D-5682-40A8-9755-D85902BCDD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1035851A-D3DF-4A66-B807-1BF85BDF4260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E4D548-247D-41D7-AEEC-606C3A1E0AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket_auto_unapprove_plugin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35951C11-94DF-4620-9007-D5F3665502EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/BSERV-10439",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11016",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in create_cal_block stale pointers are left uncleared."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando la asignación de memoria falla al crear un bloque de calibración en create_cal_block, los punteros obsoletos se dejan sin liquidar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11019",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the fd allocated during the get_metadata was not closed even though the buffer allocated to the fd was freed. This resulted in a failure during exit sequence."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el fd asignado durante get_metadata no se cierra incluso aunque el búfer asignado al fd se haya liberado. Esto resultó en un error durante la secuencia de salida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11030",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the HDMI video driver function hdmi_edid_sysfs_rda_res_info(), userspace can perform an arbitrary write into kernel memory."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la función hdmi_edid_sysfs_rda_res_info() del controlador de vídeo HDMI, el espacio de usuario puede realizar una escritura arbitraria en la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11031",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOC_G_SDE_ROTATOR_FENCE ioctl command can be used to cause a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el comando ioctl VIDIOC_G_SDE_ROTATOR_FENCE puede emplearse para provocar un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11033",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, a simultaneous read and enable of the ETR device after changing the buffer size may result in a Use After Free condition of the previous buffer."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el controlador coresight-tmc, una lectura simultánea y la habilitación del dispositivo ETR tras cambiar el tamaño del búfer podría desembocar en un uso de memoria previamente liberada (Use After Free) del búfer anterior."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11042",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsExt AIDL APIs are not subject to access control."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, las API AIDL ImsService y IQtiImsExt no están sujetas al control de acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11044",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a race condition exists which can lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en una función del controlador KGSL, existe una condición de carrera que puede desembocar en un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11045",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition exists which can lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en una función del controlador de cámara, existe una condición de carrera que puede desembocar en un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11047",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a graphics driver ioctl handler, the lack of copy_from_user() function calls may result in writes to kernel memory."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en un manipulador de llamadas IOCTL del controlador de gráficos, la falta de llamadas de función copy_from_user() podría resultar en escrituras en la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11049",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.580",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a video driver, a race condition exists which can potentially lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en un controlador de vídeo, existe una condición de carrera que puede desembocar en un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14896",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation without a length field validation in the mobicore driver which can result in an undersize buffer allocation. Ultimately this can result in a kernel memory overwrite."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, existe asignación de memoria sin una validación del campo length en el controlador mobicore, que puede desembocar en una asignación de búfer de tamaño pequeño. En última instancia, esto puede resultar en una sobrescritura de memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14898",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE contains fewer than 1 byte, a buffer overrun occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE, en el que el atributo QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE contiene menos de 1 byte, ocurre una saturación del búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14899",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.690",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, a buffer overrun occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB, en el que el atributo QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contiene menos de 1 byte, ocurre una saturación del búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14900",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_GET_CHAIN_RSSI vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_MAC_ADDR contains fewer than 6 bytes, a buffer overrun occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_GET_CHAIN_RSSI, en el que el atributo QCA_WLAN_VENDOR_ATTR_MAC_ADDR contiene menos de 6 bytes, ocurre una saturación del búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14901",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE contains fewer than 1 byte, a buffer overrun occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE, en el que el atributo QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE contiene menos de 1 byte, ocurre una saturación del búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14903",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the SENDACTIONFRAME IOCTL, a buffer over-read can occur if the payload length is less than 7."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa el IOCTL SENDACTIONFRAME, puede ocurrir una sobrelectura de búfer si la longitud de la carga útil es menor que 7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14905",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted cfg80211 vendor command, a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa un comando de fabricante cfg80211 especialmente manipulado, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14907",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is reduced while deriving disk encryption key."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la fuerza criptográfica se reduce al derivar la clave de cifrado de disco."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15813",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur while reading firmware logs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un desbordamiento de búfer cuando se leen registros del firmware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T17:29:00.940",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check."
      }, {
        "lang" : "es",
        "value" : "La función malloc en GNU C Library (también conocida como glibc o libc6) 2.26 podría devolver un bloque de memoria demasiado pequeño si se intenta asignar un objeto cuyo tamaño se acerca a SIZE_MAX. Esto podría conducir a un desbordamiento de memoria dinámica (heap). Esto ocurre debido a que la característica de caché per-thread (también conocida como tcache) habilita una ruta de código a la que le falta una comprobación de desbordamiento de enteros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1B17E4-66FB-48F1-A417-2B502955257A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22375",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=34697694e8a93b325b18f25f7dcded55d6baeaf6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=34697694e8a93b325b18f25f7dcded55d6baeaf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9698",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:00.987",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/size values for a submission command could cause a math operation to overflow and could result in an access to arbitrary memory. The combined pointer will overflow and possibly pass further checks intended to avoid accessing unintended memory."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, los valores offset/size incorrectamente especificados para un comando submission podrían provocar que una operación matemática se desborde. Esto podría resultar en un acceso a la memoria arbitraria. El puntero combinado se desbordará y, posiblemente, pasará más comprobaciones planeadas para evitar el acceso a memoria no planeada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9700",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer overwrite is possible in fw_name_store if image name is 64 characters."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, es posible una sobrescritura de búfer en fw_name_store si el nombre de imagen es de 64 caracteres."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9703",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.047",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver can lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una condición de carrera en un controlador de cámara puede provocar un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9708",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the camera driver, the function \"msm_ois_power_down\" is called without a mutex and a race condition can occur in variable \"*reg_ptr\" of sub function \"msm_camera_config_single_vreg\"."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el controlador de cámara, la función \"msm_ois_power_down\" se llama sin un mutex y puede ocurrir una condición de carrera en la variable \"*reg_ptr\" de la subfunción \"msm_camera_config_single_vreg\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9709",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a privilege escalation vulnerability exists in telephony."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, existe una vulnerabilidad de escalado de privilegios en telephony."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9710",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la interfaz IOCTL para enviar mensajes QMI NOTIFY REQ puede llamarse desde múltiples contextos, lo que puede derivar en un desbordamiento de búfer de la caché msg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9718",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a multimedia driver can potentially lead to a buffer overwrite."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una condición de carrera en un controlador multimedia puede provocar una sobrescritura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9722",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T17:29:01.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID (hdmi_tx_sysfs_wta_edid), if edid_size, which is controlled by userspace, is too large, a buffer overflow occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, al actualizar el EDID (hdmi_tx_sysfs_wta_edid) personalizado, si edid_size (controlado por el espacio de usuario) es demasiado grande, ocurre un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T18:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el FilterScheduler por defecto en OpenStack Nova 16.0.3. Mediante la reconstrucción repetida de una instancia con nuevas imágenes, un usuario autenticado podría consumir recursos no seguidos en un host de hipervisor, lo que conduce a una denegación de servicio (DoS). Esto también se conoce como dobles asignaciones de recursos. Esta regresión fue introducida con el fix para OSSA-2017-005 (CVE-2017-16239); sin embargo, solo las implementaciones Nova stable/pike o siguientes con dicho fix aplicado y dependientes del FilterScheduler se han visto afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:16.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585F4861-2E60-4D7D-8AE4-52B4E58344FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102102",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1732976",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/521662",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/523214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.openstack.org/ossa/OSSA-2017-006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/1732976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/521662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/523214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.openstack.org/ossa/OSSA-2017-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11005",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un uso de memoria previamente liberada durante una ruta de desinicialización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11006",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un uso de memoria previamente liberada durante el posicionamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11007",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of stack corruption due to buffer overflow of Partition name while converting ascii string to unicode string in function HandleMetaImgFlash."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, existe la posibilidad de que se corrompa la pila debido a un desbordamiento de búfer del nombre de partición mientras se convierten cadenas ascii en cadenas unicode en la función HandleMetaImgFlash."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11043",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a WiFI driver function, an integer overflow leading to heap buffer overflow may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en una función de controlador wifi, puede ocurrir un desbordamiento de enteros que desemboque en un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14895",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, after a subsystem reset, iwpriv is not giving correct information."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, tras un reinicio del subsistema, iwpriv no está entregando la información correcta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-672"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14897",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while handling the QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND, a userspace buffer is directly accessed in kernel space."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, al manipular QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND, se accede directamente en el espacio del kernel a un búfer del espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14902",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the GLink kernel driver, a Use After Free condition can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, debido a una condición de carrera en el controlador del kernel GLink, puede ocurrir un uso de memoria previamente liberada (User After Free)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14904",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an arbitrary unmap in MediaServer."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una petición de enlace manipulada puede provocar una anulación de asignación arbitraria en MediaServer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14908",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the number of blocks to verify."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la aplicación de prueba SafeSwitch no valida correctamente el número de bloques que hay que verificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14909",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, no se valida correctamente un valor de cálculo que se lee de un archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14914",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, las manipulaciones en la estructura global del cliente pueden quedarse obsoletas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14916",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, no se validan correctamente los tamaños de búfer en la interfaz de paso de mensajes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14917",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.680",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, no se validan correctamente los tamaños de búfer en la interfaz de paso de mensajes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14918",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition can occur."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la interfaz de localización inalámbrica GPS, puede ocurrir un uso de memoria previamente liberada (User After Free)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6211",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of a downlink supplementary services message, a buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, al procesar un mensaje descendiente de servicios suplementarios, puede ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9716",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2017-12-05T19:29:00.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el controlador qbt1000 implementa un canal alternativo para que las aplicaciones de modo de usuario hablen con las aplicaciones QSEE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14355",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-12-05T21:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability could be exploited locally to allow escalation of privilege."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad en las versiones 8.6 y 8.8.6 de HPE Connected Backup. La vulnerabilidad podría explotarse localmente para permitir la escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:connected_backup:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F672C7E5-A002-49F3-A196-344F9750CABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:connected_backup:8.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90BF7EE-4C0A-4580-8F89-42373EE3716E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Oct/23",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101270",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02987868",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43857/",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Oct/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02987868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43857/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T21:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765."
      }, {
        "lang" : "es",
        "value" : "GeniXCMS 1.1.5 tiene XSS mediante los parámetros from, id, lang, menuid, mod, q, status, term, to o token. NOTA: esto podría solaparse con CVE-2017-14761, CVE-2017-14762 o CVE-2017-14765."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8635EE36-92ED-4C4F-B6D5-D870B23000CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code610.blogspot.com/2017/12/modus-operandi-genixcms-115.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://code610.blogspot.com/2017/12/modus-operandi-genixcms-115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4920",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-12-05T21:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement (LSA). A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop or loss of connectivity."
      }, {
        "lang" : "es",
        "value" : "La implementación del protocolo OSPF en VMware NSX-V Edge en versiones 6.2.x anteriores a la 6.2.8 y NSX-V Edge en versiones 6.3.x anteriores a la 6.3.3 no gestiona correctamente el LSA (link-state advertisement). Un LSA no autorizado podría explotar este problema, resultando en el envío continuo de LSA entre dos routers, lo que acabaría por provocar un bucle o la pérdida de la conectividad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx-v_edge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.8",
            "matchCriteriaId" : "925CD5F5-66D2-4F56-A165-191F04FF7430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:nsx-v_edge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.3",
            "matchCriteriaId" : "203CDE09-854A-49B3-B38B-29D1AB6F4A32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100277",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0014.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14018",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-05T23:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación indebida en Johnson Ethicon Endo-Surgery Generator Gen11, en todas las versiones lanzadas antes del 29 de noviembre de 2017. El mecanismo de autenticación de seguridad empleado en Ethicon Endo-Surgery Generator Gen11 y en productos de uso para un solo paciente puede omitirse, permitiendo que dispositivos sin autorización se conecten al generador. Esto puede resultar en una pérdida de integridad o disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ethicon:endo-surgery_generator_gen11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BE40E0-3AE7-498C-BEE9-F9B8886A0FC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ethicon:endo-surgery_generator_gen11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F123F258-704F-47C6-9089-5BC358649C03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101978",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-332-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-332-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-05T23:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application."
      }, {
        "lang" : "es",
        "value" : "La función bnep_add_connection en net/bluetooth/bnep/core.c en el kernel de Linux en versiones anteriores a la 3.19 no garantiza que un socket l2cap esté disponible. Esto permite que usuarios locales obtengan privilegios mediante una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.97",
            "matchCriteriaId" : "0E548A9D-D419-485E-A8A5-7B6A5BD88B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "BB7B220A-ADA7-4252-9A20-10117ED0F9DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.64",
            "matchCriteriaId" : "226BE74E-0154-4F65-B5DC-E4C7AA03D270"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71bb99a02b32b4cc4265118e85f6035ca72923f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/71bb99a02b32b4cc4265118e85f6035ca72923f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9882449/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71bb99a02b32b4cc4265118e85f6035ca72923f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/71bb99a02b32b4cc4265118e85f6035ca72923f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/patch/9882449/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14374",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-12-06T00:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance)."
      }, {
        "lang" : "es",
        "value" : "El servicio SMI-S en Dell Storage Manager en versiones anteriores a la 16.3.20 (también conocida como 2016 R3.20) está protegido mediante el uso de una contraseña embebida. Un usuario remoto que conozca la contraseña podría deshabilitar el servicio SMI-S mediante peticiones HTTP. Esto afectaría a la gestión de contraseñas y a la funcionalidad de monitorización mediante la interfaz SMI-S. Este problema, también conocido como DSM-30415, solo afecta a la instalación de Windows del recopilador de datos (no aplicable a la aplicación virtual)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.20",
            "matchCriteriaId" : "DC143803-C9B4-4054-B171-9FBD2E77209B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf",
        "source" : "security_alert@emc.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T00:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or application crash) via crafted fields, as demonstrated by an integer underflow and assertion failure for a small MTU value."
      }, {
        "lang" : "es",
        "value" : "OpenAFS en versiones 1.x anteriores a la 1.6.22 no valida paquetes Rx ack correctamente, lo que permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado del sistema o de la aplicación) mediante campos manipulados, tal y como demuestra un subdesbordamiento de enteros y fallo de aserción para un valor MTU pequeño."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.6.22",
            "matchCriteriaId" : "68679623-B0CD-4643-9890-1D01D6570BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/883602",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4067",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openafs.org/pages/security/OPENAFS-SA-2017-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/883602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openafs.org/pages/security/OPENAFS-SA-2017-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T03:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a filename in the daemon_filter_list data structure, which allows remote attackers to bypass intended access restrictions."
      }, {
        "lang" : "es",
        "value" : "La función recv_files en receiver.c en el demonio en rsync 3.1.2 y 3.1.3-development en versiones anteriores a la 2017-11-03 continúa ciertas actualizaciones de metadatos de archivos antes de buscar un nombre de archivo en la estructura de datos daemon_filter_list. Esto permite que atacantes remotos omitan las restricciones de acceso planeadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D2DD08-019F-4F8A-8325-067F467F4507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=169",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4068",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1522874#c4",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T03:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data structure (in the recv_files function in receiver.c) and also does not apply the sanitize_paths protection mechanism to pathnames found in \"xname follows\" strings (in the read_ndx_and_attrs function in rsync.c), which allows remote attackers to bypass intended access restrictions."
      }, {
        "lang" : "es",
        "value" : "El demonio en rsync 3.1.2 y 3.1.3-development en versiones anteriores a la 2017-11-03 no busca nombres de archivo fnamecmp en la estructura de datos daemon_filter_list (en la función recv_files en receiver.c) y tampoco aplica el mecanismo de protección sanitize_paths a los nombres de ruta hallados en cadenas \"xname follows\" (en la función read_ndx_and_attrs en rsync.c). Esto permite que atacantes remotos omitan las restricciones de acceso planeadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "F490A8DC-BDAF-4AD0-95E3-F98D5BDA75B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4068",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.cucumberlinux.com/security/details.php?id=170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file."
      }, {
        "lang" : "es",
        "value" : "ActiveSetupN.exe en Amazon Audible para Windows en versiones anteriores a noviembre de 2017 permite que atacantes ejecuten código DLL arbitrario si ActiveSetupN.exe se ejecuta desde un directorio en el que un atacante ya haya creado un archivo troyano dwmapi.dll."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:audible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "november2017",
            "matchCriteriaId" : "528F3699-B1C2-411C-9B6E-B72536206369"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102044",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145202/Amazon-Audible-DLL-Hijacking.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/LionHeartRoxx/status/936338288314540032",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145202/Amazon-Audible-DLL-Hijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/LionHeartRoxx/status/936338288314540032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T05:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624."
      }, {
        "lang" : "es",
        "value" : "Jenkins hasta la versión 2.93 permite que administradores remotos no autenticados lleven a cabo ataques de XSS mediante un nombre de herramienta manipulado en un formulario de configuración de trabajos, tal y como demuestra la herramienta JDK en Jenkins core y la herramienta Ant en el plugin Ant. Esto también se conoce como SECURITY-624."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.93",
            "matchCriteriaId" : "1495B238-BB54-48C4-A3DF-C988AAA2612E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://vsintelli.com/portal/blog/23-security-advisory-2017-12-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-12-05/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vsintelli.com/portal/blog/23-security-advisory-2017-12-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-12-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0837",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64340921."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework multimedia de Android (libaudiopolicymanager). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64340921."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0870",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (libminikin). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62134807."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102131",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0871",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework de Android (framework base). Producto: Android. Versiones: 8.0. Android ID: A-65281159."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102131",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0872",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.410",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el framework multimedia de Android (libskia). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65290323."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0873",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63316255."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el framework multimedia de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316255."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0874",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el framework multimedia en Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63315932."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0876",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el framework multimedia de Android (libavc). Producto: Android. Versiones: 6.0. Android ID: A-64964675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0877",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el framework multimedia de Android (libavc). Producto: Android. Versiones: 6.0. Android ID: A-66372937."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0878",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el framework multimedia de Android (libhevc). Producto: Android. Versiones: 8.0. Android ID: A-65186291."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0879",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el framework multimedia de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65025028."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0880",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el framework multimedia de Android (libskia). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2. Android ID: A-65646012."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13148",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65717533."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el framework multimedia de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65717533."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13149",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el framework multimedia de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65719872."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13150",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.817",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-38328132."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el framework multimedia de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38328132."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13151",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.847",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63874456."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el framework multimedia de Android (libmpeg2). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63874456."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13152",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62872384."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el framework multimedia de Android (libmedia drm). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872384."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13153",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android media framework (libaudioservice). Product: Android. Versions: 8.0. Android ID A-65280854."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework multimedia de Android (libaudioservice). Producto: Android. Versiones: 8.0. Android ID: A-65280854."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13154",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:00.957",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63666573."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el framework multimedia de Android (libstagefright). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63666573."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13156",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.003",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de Android (art). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64211847."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/155189/Android-Janus-APK-Signature-Bypass.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/155189/Android-Janus-APK-Signature-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13157",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32990341."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (activitymanagerservice). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32990341."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13158",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.067",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879915."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (activitymanagerservice). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32879915."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13159",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.113",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879772."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (activitymanagerservice). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32879772."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13160",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el sistema de Android (bluetooth). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37160362."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13161",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. Android ID A-63930471. References: BC-V2017092501."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador inalámbrico de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-63930471. Referencias: BC-V2017092501."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13162",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-64216036."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el binder del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-64216036."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102107",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13163",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Android ID A-37429972."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador de usb mtp del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-37429972."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13164",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: Android kernel. Android ID A-36007193."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el controlador del binder del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-36007193."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13165",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.333",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android ID A-31269937."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de archivos del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-31269937."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13166",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador de vídeo v4l2 del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-34624167."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "security@android.com"
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4120",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13167",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el temporizador de sonido del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-37240993"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13168",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador SCSI del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-65023233."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3753-1/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3753-2/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3820-1/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3820-2/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3820-3/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3822-1/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3822-2/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3753-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3753-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3820-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3820-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3820-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3822-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3822-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13169",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android ID A-37512375."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en servidor de cámara del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-37512375."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13170",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador de pantalla de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-36102397. Referencias: M-ALPS03359280."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102108",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13171",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References: M-ALPS03479086."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el servicio de rendimiento de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-64316572. Referencias: M-ALPS03479086."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102108",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13172",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References: M-ALPS03495791."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador de bluetooth de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-36493287. Referencias: M-ALPS03495791."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13173",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el servidor del sistema de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-28067350. Referencias: M-ALPS02672361."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102108",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13174",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en la edl del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-63100473."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102107",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13175",
      "sourceIdentifier" : "security@android.com",
      "published" : "2017-12-06T14:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Android kernel. Android ID A-64339309. References: N-CVE-2017-13175."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en libwilhelm de NVIDIA. Producto: Android. Versiones: Android kernel. Android ID: A-64339309. Referencias: N-CVE-2017-13175."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T15:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c."
      }, {
        "lang" : "es",
        "value" : "En Heimdal hasta la versión 7.4 atacantes remotos no autenticados pueden provocar el cierre inesperado del KDC enviando un paquete UDP manipulado que contenga campos de datos vacíos para el nombre del cliente o para el realm. En ese caso, el analizador sintáctico desreferenciará punteros NULL incondicionalmente, lo que dará lugar a un fallo de segmentación. Esto está relacionado con la función _kdc_as_rep en kdc/kerberos5.c y la función der_length_visible_string function en lib/asn1/der_length.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.0",
            "matchCriteriaId" : "6CFD4426-D9E3-4F45-8E0C-EC2DC17F5C00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h5l.org/advisories.html?show=2017-12-08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h5l.org/pipermail/heimdal-announce/2017-December/000008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h5l.org/pipermail/heimdal-discuss/2017-August/000259.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878144",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/commit/1a6a6e462dc2ac6111f9e02c6852ddec4849b887",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/issues/353",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4055",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h5l.org/advisories.html?show=2017-12-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h5l.org/pipermail/heimdal-announce/2017-December/000008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h5l.org/pipermail/heimdal-discuss/2017-August/000259.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/commit/1a6a6e462dc2ac6111f9e02c6852ddec4849b887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heimdal/heimdal/issues/353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T17:29:00.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTOR_xm_extract_method function in plugins/xm_extractor.c."
      }, {
        "lang" : "es",
        "value" : "GNU Libextractor 1.6 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID o XM (eXtended Module) manipulado, como se ha demostrado por la función EXTRACTOR_xm_extract_method en plugins/xm_extractor.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libextractor:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BEDB35-1F7B-4F7A-8871-480E61BA8DE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102116",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/883528#35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gnunet.org/git/libextractor.git/commit/?id=7cc63b001ceaf81143795321379c835486d0c92e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.debian.org/883528#35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gnunet.org/git/libextractor.git/commit/?id=7cc63b001ceaf81143795321379c835486d0c92e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6262",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-12-06T18:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID: A-38045794. References: N-CVE-2017-6262."
      }, {
        "lang" : "es",
        "value" : "El controlador de NVIDIA contiene una vulnerabilidad en la que puede ocurrir un mal funcionamiento de uso de memoria previamente liberada debido a una condición de carrera. Esto podría permitir la ejecución de código no autorizada y, posiblemente, dar lugar a una elevación de privilegios. Este problema se ha clasificado como importante. Producto: Android. Versión: N/A. Android ID: A-38045794. Referencias: N-CVE-2017-6262."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102106",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6263",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-12-06T18:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel macro which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID: A-38046353. References: N-CVE-2017-6263."
      }, {
        "lang" : "es",
        "value" : "El controlador de NVIDIA contiene una vulnerabilidad en la que puede ocurrir un mal funcionamiento de uso de memoria previamente liberada debido a un uso incorrecto de la macro list_for_each del kernel. Esto podría permitir la ejecución de código no autorizada y, posiblemente, dar lugar a una elevación de privilegios. Este problema se ha clasificado como importante. Producto: Android. Versión: N/A. Android ID: A-38046353. Referencias: N-CVE-2017-6263."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102106",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6276",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2017-12-06T18:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276."
      }, {
        "lang" : "es",
        "value" : "El servidor multimedia de NVIDIA contiene una vulnerabilidad en la que puede ocurrir un mal funcionamiento de uso de memoria previamente liberada debido a una comprobación incorrecta de límites. Esto podría permitir la ejecución de código no autorizada y, posiblemente, dar lugar a una elevación de privilegios. Este problema se ha clasificado como importante. Producto: Android. Versión: N/A. Android: A-63802421. Referencias: N-CVE-2017-6276."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102106",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T19:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with auth0.popup.callback()."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de cross origin u origen cruzado en la biblioteca auth0.js en Auth0 que afecta a versiones anteriores a la 8.12. Esta vulnerabilidad permite que un atacante remoto adquiera tokens de usuarios autenticados e invoque servicios en nombre de un usuario si el sitio o la aplicación objetivos utilizan una página emergente o popup de devolución de llamada con auth0.popup.callback()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth0:auth0.js:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.12",
            "matchCriteriaId" : "7C47C4F3-7FAF-445F-8B30-EFE037CF5454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://appcheck-ng.com/appcheck-discovers-vulnerability-auth0-library-cve-2017-17068/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://auth0.com/docs/security/bulletins/cve-2017-17068",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://appcheck-ng.com/appcheck-discovers-vulnerability-auth0-library-cve-2017-17068/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://auth0.com/docs/security/bulletins/cve-2017-17068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-06T19:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service (application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función Mem_File_Reader::read_avail en Data_Reader.cpp en la bilbioteca Game_Music_Emu (también conocida como game-music-emu) 0.6.1 no asegura un tamaño que no tenga valores negativos, lo que permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:game-music-emu_project:game-music-emu:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5DCB39-D807-43B5-BC50-2157836E75B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/mpyne/game-music-emu/issues/14/addresssanitizer-negative-size-param-size",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/883691",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bitbucket.org/mpyne/game-music-emu/issues/14/addresssanitizer-negative-size-param-size",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/883691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T00:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unlock any safe in this product line without a valid PIN code. Even though the phone application requires it and there is a field to supply the PIN code in an authorization request, the safe does not check the PIN code, so an attacker can obtain authorization using any value. Once an attacker sees the Bluetooth Low Energy (BLE) advertisement for the safe, they need only to write a BLE characteristic to enable notifications, and send a crafted getAuthor packet that returns a temporary key, and an unlock packet including that temporary key. The safe then opens after the unlock packet is processed, with no verification of PIN or other credentials."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en el software en productos Vaultek Gun Safe VT20i, también conocidos como BlueSteal. Un atacante podría desbloquear de manera remota cualquier caja fuerte en esta línea de productos sin necesidad de un código PIN válido. Incluso aunque la aplicación lo requiera y haya un campo que reemplace el código PIN de seguridad en una petición de autorización, la caja fuerte no verifica el código PIN, por lo que un atacante puede obtener autorización utilizando cualquier valor. Una vez que el atacante observa el anuncio del Bluetooth de baja energía (Bluetooth LE) para la caja fuerte, solo necesita sobrescribir una característica Bluetooth LE para habilitar las notificaciones, enviar un paquete getAuthor manipulado que devuelva una clave temporal y desbloquear el paquete que incluye esa clave temporal. Entonces, la caja fuerte se abre cuando se procesa el paquete de desbloqueo sin verificación de PIN u otro tipo de credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vaulteksafe:vt20i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDBDB6F-0A1D-41A1-880F-5792AF4D192F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vaulteksafe:vt20i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86037AA2-62CF-41E7-815D-FDA28558F0E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vaulteksafe.com/index.php/cve-2017-17435/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twosixlabs.com/bluesteal-popping-gatt-safes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vaulteksafe.com/index.php/cve-2017-17435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twosixlabs.com/bluesteal-popping-gatt-safes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T00:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session between the Android application and the safe. The website and marketing materials advertise that this communication channel is encrypted with \"Highest Level Bluetooth Encryption\" and \"Data transmissions are secure via AES256 bit encryption.\" These claims, however, are not true. Moreover, AES256 bit encryption is not supported in the Bluetooth Low Energy (BLE) standard, so it would have to be at the application level. This lack of encryption allows an individual to learn the passcode by eavesdropping on the communications between the application and the safe."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en el software en productos Vaultek Gun Safe VT20i. No se cifra la sesión entre la aplicación de Android y la caja fuerte. Los materiales de marketing así como el sitio web anuncian que este canal está cifrado con \"un cifrado Bluetooth del más alto nivel\" y que \"las transmisiones de datos se realizan de forma segura mediante el cifrado de bits AES256\". Sin embargo, estas afirmaciones no son ciertas. Además, los cifrados de bits AES256 no son compatibles con el estándar Bluetooth de baja energía (Bluetooth LE), por lo que tendría que serlo a nivel de aplicación. Esta falta de cifrado permite que un usuario aprenda el código de acceso espiando las comunicaciones entre la aplicación y la caja fuerte."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vaulteksafe:vt20i_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDBDB6F-0A1D-41A1-880F-5792AF4D192F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vaulteksafe:vt20i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86037AA2-62CF-41E7-815D-FDA28558F0E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vaulteksafe.com/index.php/cve-2017-17435/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.twosixlabs.com/bluesteal-popping-gatt-safes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vaulteksafe.com/index.php/cve-2017-17435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.twosixlabs.com/bluesteal-popping-gatt-safes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T00:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces."
      }, {
        "lang" : "es",
        "value" : "net/netfilter/nfnetlink_cthelper.c en el kernel de Linux hasta la versión 4.14.4 no requiere la capacidad CAP_NET_ADMIN para operaciones \"new\", \"get\" y \"del\", lo que permite que usuarios locales omitan las restricciones de acceso establecidas debido a que la estructura de datos nfnl_cthelper_list se comparte entre todos los espacios de nombres de la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.4",
            "matchCriteriaId" : "73A9E8BB-A037-453D-8A98-A22D9B0A0020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102117",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/patch/10089373/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/patch/10089373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T00:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system."
      }, {
        "lang" : "es",
        "value" : "La función __netlink_deliver_tap_skb en net/netlink/af_netlink.c en el kernel de Linux hasta la versión 4.14.4, cuando CONFIG_NLMON está habilitado, no restringe las observaciones de mensajes Netlink a un espacio de nombres de red único, lo que permite que usuarios locales obtengan información sensible utilizando la capacidad CAP_NET_ADMIN para rastrear una interfaz nlmon para toda la actividad Netlink en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.4",
            "matchCriteriaId" : "73A9E8BB-A037-453D-8A98-A22D9B0A0020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102122",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lkml.org/lkml/2017/12/5/950",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lkml.org/lkml/2017/12/5/950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T00:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces."
      }, {
        "lang" : "es",
        "value" : "net/netfilter/xt_osf.c en el kernel de Linux hasta la versión 4.14.4 no requiere la capacidad CAP_NET_ADMIN para operaciones \"add_callback\" y \"remove_callback\", lo que permite que usuarios locales omitan las restricciones de acceso establecidas debido a que la estructura de datos xt_osf_fingers se comparte entre todos los espacios de nombres de la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.4",
            "matchCriteriaId" : "73A9E8BB-A037-453D-8A98-A22D9B0A0020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/12/5/982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/12/5/982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T00:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Mailster en versiones anteriores a la 1.5.5 para WordPress contiene XSS en el manipulador unsubscribe mediante el parámetro mes en view/subscription/unsubscribe2.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmailster:wp_mailster:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.5",
            "matchCriteriaId" : "B5A2E12E-7BA7-48B2-BE23-1E385F8FF775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145222/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-mailster/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8973",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145222/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-mailster/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15121",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-12-07T02:29:13.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary."
      }, {
        "lang" : "es",
        "value" : "Un usuario sin privilegios puede montar un sistema de archivos en el espacio de usuario (FUSE) en RHEL 6 o 7 y provocar el cierre inesperado del sistema si una aplicación hace un agujero en un archivo que no termina alineado con un límite de página."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102128",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1520893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K42142782?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1520893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K42142782?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T02:29:13.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en MistServer en versiones anteriores a la 2.13 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores relacionados con alertas de peticiones de autenticación fallidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mistserver:mistserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13",
            "matchCriteriaId" : "B0106A15-4BAA-450F-A6CD-0ADB69CC0F8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MIST-SERVER-v2.12-UNAUTHENTICATED-PERSISTENT-XSS-CVE-2017-16884.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145182/MistServer-2.12-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://news.mistserver.org/news/78/Stable+release+2.13+now+available%21",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43205/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/MIST-SERVER-v2.12-UNAUTHENTICATED-PERSISTENT-XSS-CVE-2017-16884.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145182/MistServer-2.12-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://news.mistserver.org/news/78/Stable+release+2.13+now+available%21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43205/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T02:29:13.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php."
      }, {
        "lang" : "es",
        "value" : "Artica Web Proxy, en versiones anteriores a la 3.06.112911, permite que atacantes remotos ejecuten código arbitrario como root realizando un ataque de Cross-Site Scripting (XSS) que implique el uso del parámetro username-form-id en freeradius.users.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:articatech:artica_proxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.06.112911",
            "matchCriteriaId" : "6F87136A-5F5D-4BFB-B526-BC41B20D83D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/ARTICA-WEB-PROXY-v3.06-REMOTE-CODE-EXECUTION-CVE-2017-17055.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145183/Artica-Web-Proxy-3.06.112216-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43206/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/ARTICA-WEB-PROXY-v3.06-REMOTE-CODE-EXECUTION-CVE-2017-17055.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145183/Artica-Web-Proxy-3.06.112216-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43206/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T02:29:13.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings."
      }, {
        "lang" : "es",
        "value" : "La implementación Virtio Vring en QEMU permite que usuarios invitados del sistema operativo local provoquen una denegación de servicio (división entre cero y cierre inesperado del proceso QEMU) anulando la alineación de vring mientras se actualizan los los \"rings\" de Virtio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "DE828526-81EF-4807-8E73-E0FC56034D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.11.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "825D2100-E1E3-4D47-89A0-DBC99DDF0F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2548B145-0516-479D-A199-29E7ADE13A8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.11.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4080D9B2-C7C5-4EBB-B01A-1001EF283C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.11.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C56D5BFA-4379-4AC5-8505-79DCD5C3BD6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/05/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T08:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.x de ISPConfig anteriores a la 3.1.9 permiten que usuarios remotos autenticados obtengan acceso root mediante la creación de un trabajo cron manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB25A272-8550-4177-AF5B-8243C209C9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654B0006-9E49-49C7-BA08-FED043C919F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1F2D5F-0D31-428F-89C9-5665DEA6E7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.2.2:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3B442C-458B-43AB-ADC1-695C6746CB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F0E1A2-66F5-4F49-9676-D27968E0C826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "D82F151B-56E7-4E53-97AD-67AB6F82678D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE133D3-E31D-4D86-9927-DF9D388610CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0578B899-4214-4C50-AB54-E2E46E8C3B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F975883-EADD-46BE-9F3C-F5173600C4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD1EA7C-0F97-4D22-91B8-913C7CE23BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CADD4B-CFD2-4B18-9203-4839B14B5BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1220B372-EB56-46F7-A424-8E03610DD69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E508104E-6611-42CF-866C-C7501B8DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.3.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD721C0-B264-41B3-8525-7C1E19434267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B30E68-F7F3-4739-978C-04403942B6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "592ECA84-36B6-4DA3-A203-1ABDC6A92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60D6A69-5C58-4CCC-B9B7-D14956897383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A7EA07-E26C-4245-9870-107595A00568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "57A57710-0BDF-4AC1-9573-39ADDC5099B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44566CD-5451-4398-9303-2A5D5D7EED44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5B2C25-A23E-45E0-BE5F-A98A887723C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C59EBF7-774A-4A65-B809-CC2032D102F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.4.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4553523A-16EE-435D-9C1F-654D26295604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB98EF2E-2D54-41CA-8CCF-4A96D27FAC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "CE83DD0B-0C6A-4B24-AAE3-7F318FBC5A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "A269AD48-3078-4D71-B636-7DA6BE707B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F265805-54AE-41C2-ACC0-853B4D11C1A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A95965C7-11BA-4691-8DCD-5D1D26157240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C1F4F7-B594-453E-863B-2F4A50FFEF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8055A41-F81A-4E94-9D5C-F14B67B4DE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01827-D853-4EF6-B624-5238028003E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE14FBE1-A644-432B-BD3D-F8A09A497CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "27AA0130-E143-4D11-939E-705E0C175A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB17B921-DFBA-4735-B3AB-96B704EAC92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "CE557601-14F3-42DD-8487-50902F4686B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD681B66-C8EB-4304-9B02-310A5693E348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "88192600-7EA6-4E1B-A7D9-A132753FAC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE1C7E3-4771-4E8D-AB2F-DC40D98FAD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "163D851E-E31E-4E7E-96EB-AAFA482F8E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC97E41-8DF3-467A-BBFC-C5887B1A5B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "EE933601-92FE-40CD-8E09-4871AB874CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6DDEA2-AF2B-436C-B33B-30F3F987BDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDCA26A-2072-45BD-874C-8EBC3C2B0899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.0.5.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E0342434-F3F8-4FF9-9734-0190E050A834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F328ACFE-3AD0-4E72-8F0E-66035A815C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82B95BC-8335-4D62-9519-7AAECE87761F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "27F7C0BA-A455-4B86-AFEC-BEDD539B628A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029CB7C5-1E3D-4827-BD13-D868097653AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3BF948-DE6F-4D62-92EE-8AB37460D82F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49EE881-A769-4F56-8B74-1C8644FD1CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69199AD0-CD4B-4537-B230-7BD4B325B08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298E737E-F605-42F9-B126-4D722336A6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15940226-5EFF-4799-8CF6-6488BB359FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.7:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "55213C96-60DD-418A-B148-D8D8132C4143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B485EAF7-439C-413E-8FB4-5EDA155C5E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:3.1.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CBEF4C-67F6-47D7-A774-7F38D1BF650E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ispconfig.org/blog/ispconfig-3-1-9-released-important-security-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ispconfig.org/blog/ispconfig-3-1-9-released-important-security-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T08:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to execute arbitrary commands via the web interface."
      }, {
        "lang" : "es",
        "value" : "Sangoma NetBorder / Vega Session Controller en versiones anteriores a la 2.3.12-80-GA permite que atacantes remotos ejecuten comandos arbitrarios mediante la interfaz web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sangoma:netborder\\/vega_session_firmware:2.3.11-78-ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863B9676-439A-410F-9754-31F4B2660024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sangoma:netborder\\/vega_session:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E92C06-25BF-48B6-AFAE-2EA59D00FB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sangoma.com/nsc/2.3/Changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.sangoma.com/nsc/2.3/Changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T08:29:00.303",
      "lastModified" : "2023-11-07T02:41:43.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T08:29:00.333",
      "lastModified" : "2023-11-07T02:41:43.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1271",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 124746."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 9.0, 9.1 y 9.5 da la posibilidad de que múltiples actores interactúen y les permite negociar qué algoritmo se debería utilizar como mecanismo de protección (por ejemplo, el cifrado o la autenticación), pero no selecciona el algoritmo más robusto que esté disponible para ambas partes. IBM X-Force ID: 124746."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C62744-22BD-4038-8257-822ADDAC370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EA5CC2-F4BE-4F22-AC85-1956EFA88B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37342DD2-055B-429C-9231-2D9FE70B5AE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010435",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102034",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039961",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124746",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1336",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID: 126244."
      }, {
        "lang" : "es",
        "value" : "IBM Infosphere BigInsights 4.2.0 podría permitir que un atacante inyecte código que le podría dar acceso a datos y archivos restringidos. IBM X-Force ID: 126244."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_biginsights:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66AAEFB-4A7F-4B32-A784-1BC6A5510B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010812",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102061",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126244",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1341",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. IBM X-Force ID: 126456."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 8.0 y 9.0 podría permitir, bajo circunstancias especiales, que un usuario no autorizado acceda a un objeto para el que no deberían contar con acceso. IBM X-Force ID: 126456."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6617F-85DF-49FE-B713-148624DC87A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018595DD-9AAD-44C7-9A46-BC78AF1F6C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005400",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102042",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126456",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1342",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457."
      }, {
        "lang" : "es",
        "value" : "IBM Insights Foundation for Energy 2.0 podría revelar información sensible en mensajes de error a usuarios autenticados que podría ser empleada para llevar a cabo más ataques. IBM X-Force ID: 126457."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:insights_foundation_for_energy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB4D213-76D8-4731-918A-95CA4A80BF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009039",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126457",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1353",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting user clicks on unsafe third-party links. IBM X-Force ID: 126680."
      }, {
        "lang" : "es",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 podría permitir que un atacante sin autenticar obtenga información sensible cuando un usuario desprevenido hace clic en enlaces de terceros inseguros. IBM X-Force ID: 126680."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E3A3C8-7B7C-4BC8-B3BF-B5AE24E6B725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EF447D-F279-49AF-9F94-8044FF1ADF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED72F10-0F20-473B-B2DC-F3F3214FC5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240398E0-2B39-402C-8B4B-1B114D260252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA5CE00-DFF6-40DE-99B8-A4161BB4A23A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126680",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005827",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1354",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126681."
      }, {
        "lang" : "es",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126681."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E3A3C8-7B7C-4BC8-B3BF-B5AE24E6B725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EF447D-F279-49AF-9F94-8044FF1ADF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED72F10-0F20-473B-B2DC-F3F3214FC5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240398E0-2B39-402C-8B4B-1B114D260252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA5CE00-DFF6-40DE-99B8-A4161BB4A23A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126681",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005828",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1355",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682."
      }, {
        "lang" : "es",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 almacena información sensible en parámetros URL. Esto podría llevar a una divulgación de información si partes no autorizadas tienen acceso a las URL mediante registros del servidor, cabeceras referrer o el historial del navegador. IBM X-Force ID: 126682."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E3A3C8-7B7C-4BC8-B3BF-B5AE24E6B725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EF447D-F279-49AF-9F94-8044FF1ADF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED72F10-0F20-473B-B2DC-F3F3214FC5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240398E0-2B39-402C-8B4B-1B114D260252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA5CE00-DFF6-40DE-99B8-A4161BB4A23A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102016",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126682",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005836",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1356",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126683."
      }, {
        "lang" : "es",
        "value" : "IBM Atlas eDiscovery Process Management 6.0.3 es vulnerable a una inyección SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 126683."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E3A3C8-7B7C-4BC8-B3BF-B5AE24E6B725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EF447D-F279-49AF-9F94-8044FF1ADF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED72F10-0F20-473B-B2DC-F3F3214FC5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240398E0-2B39-402C-8B4B-1B114D260252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA5CE00-DFF6-40DE-99B8-A4161BB4A23A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102033",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126683",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005835",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22005835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1433",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.907",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which would cause it to restart. IBM X-Force ID: 127803."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 7.5, 8.0 y 9.0 podría permitir que un usuario autenticado inserte mensajes con una cabecera RFH corrupta en el canal, lo que provocaría su reinicio. IBM X-Force ID: 127803."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164DC456-433C-4C47-91F9-1B57C2DFBF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0343E94F-6DE2-4E27-AFC5-D4650A4519F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA4EE08-D531-4957-BF2A-C5A9ABB0F38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BF695-E27A-4D9F-9190-84A7BCD5E268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1EF24-9710-4C4A-8059-917C02185CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC257545-44A3-4659-951D-F4DFF3B87CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD4E86C-0E58-4A91-A18C-534464BC197A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4B1F7A-8989-4B4E-A75E-037B38ED7536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FEC2B-14F4-48EF-A7D2-DA4451EBD402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6617F-85DF-49FE-B713-148624DC87A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005525",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102163",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127803",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1465",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:00.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464."
      }, {
        "lang" : "es",
        "value" : "IBM TRIRIGA 3.2, 3.3, 3.4 y 3.5 podría permitir que un atacante remoto realizase un secuestro de clic a la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clic de la víctima y, probablemente, lanzar más ataques contra esta. IBM X-Force ID: 128464."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6282A028-3DB7-4CE3-8479-2B254EE20C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D387C439-0C1C-4419-9115-F830414AC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316ED-571F-4E4B-BC02-CED0E09D175E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422964C-DAC7-4896-9368-AFDC6BE64F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E156E1-EA1D-463B-AC55-964D1897BB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CFF6D9D-633A-414B-9A81-9627F1006F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A818249-26BA-4575-9805-3AC8C038B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC985F26-E915-49CA-951A-7E3FE59E5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD18A13-F399-4E83-9976-B7C6FB41B236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E748299-7540-4141-B5DC-97C5C18FF162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00554970-B211-438A-A51C-5CF618431886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220168B8-68E8-45CA-A351-7A07415495CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B392C124-E469-4955-B11E-8B281557C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F93CE-B0E1-4904-8051-67A18692CB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B09F8-666C-4D29-B415-7488DC54CD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAC901-11B6-4754-A4FB-955CAB39D938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60154DE9-997F-4ABD-8E22-A8D006FB6931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F536558A-18B4-44C6-8921-4BE3C385CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD95904E-647A-499E-AE3C-E742BAE1EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349582F6-EBBA-4AA8-88F4-A708A1472859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679228D7-1FF0-44E9-AB51-A3436CC550AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C5243-DEA5-453B-BD7E-4561A5F012A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE6DEDE-0FC4-4264-8B83-5B6E564D41AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006184",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128464",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1481",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:01.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 permite que un usuario vea información sensible que pertenece a otro usuario. IBM X-Force ID: 128619."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010761",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102043",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128619",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1482",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:01.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128620."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition 5.2 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128620."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805BA3A-178D-416E-9DED-4258F71A17C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010762",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102035",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128620",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1487",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:01.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway 2.2 podría permitir que un atacante autenticado obtenga información sensible, como los ID de inicio de sesión en el sistema. IBM X-Force ID: 128626."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1554D69E-D68E-46CA-B1F7-C24CAABF58E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010552",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102036",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128626",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1497",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:01.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway 2.2 podría permitir que un usuario no autorizado vea archivos a los que no debería tener acceso, siempre y cuando conozcan la ubicación del directorio del archivo. IBM X-Force ID: 128695."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1554D69E-D68E-46CA-B1F7-C24CAABF58E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010738",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102187",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128695",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1498",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-07T15:29:01.330",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020."
      }, {
        "lang" : "es",
        "value" : "IBM Connections 5.5 es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 129020."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B309632B-7039-4E34-8766-96ECF00D5F34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006286",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102048",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129020",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3737",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-12-07T16:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected."
      }, {
        "lang" : "es",
        "value" : "OpenSSL 1.0.2 (comenzando desde la versión 1.0.2b) introdujo un mecanismo de \"error state\" (estado de error). La intención era que, si ocurría un error fatal durante una negociación, OpenSSL entraría en el estado de error y fallaría automáticamente si se intentase continuar la negociación. Esto funciona tal y como se ha diseñado para las funciones de negociación explícitas (SSL_do_handshake(), SSL_accept() y SSL_connect()); sin embargo, debido a un error, no funciona correctamente si se llama directamente a SSL_read() o a SSL_write(). En ese caso, si la negociación fracasa, se devolverá un error fatal en la llamada de función inicial. Si, posteriormente, la aplicación llama a SSL_read()/SSL_write() para el mismo objeto SSL, tendrá éxito y los datos se pasarán sin cifrarse/descifrarse directamente desde la capa de registro SSL/TLS. Para explotar esta vulnerabilidad, debería existir un error de aplicación que resulte en una llamada a SSL_read()/SSL_write() que se realiza una vez ya se ha recibido un error fatal. Las versiones 1.0.2b-1.0.2m de OpenSSL se han visto afectadas. Se ha solucionado en OpenSSL 1.0.2n. OpenSSL 1.1.0 no se ha visto afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B89180B-FB68-4DD8-B076-16E51CC7FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C986592-4086-4A39-9767-EF34DBAA6A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B23181C-03DB-4E92-B3F6-6B585B5231B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D9EC1C-4843-4026-9B05-E060E9391734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036FB24F-7D86-4730-8BC9-722875BEC807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF148A3-1AA7-4F27-85AB-414C609C626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15B749E-6808-4788-AE42-7A1587D8697E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B78EDF-6BB7-42C4-9423-9332C62C6E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2354F82-A01B-43D2-84F4-4E94B258E091"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102103",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039978",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0998",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171208-0001/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0002/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180419-0002/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4065",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-16",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171208-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180419-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3738",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2017-12-07T16:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository."
      }, {
        "lang" : "es",
        "value" : "Existe un error de desbordamiento en el procedimiento de multiplicación AVX2 Montgomery empleado en la exponenciación con módulos de 1024 bits. Los algoritmos EC no se han visto afectados. Los análisis sugieren que los ataques contra RSA y DSA como resultado de este defecto serían muy difíciles de realizar y se cree que son improbables. Los ataques contra DH102 se consideran solo posibles, ya que la mayor parte del trabajo necesario para deducir información sobre una clave privada puede realizarse sin conexión. La cantidad de recursos necesarios para realizar tal ataque sería significativa. Sin embargo, para que un ataque sobre TLS sea significativo, el servidor tendría que compartir la clave privada DH1024 entre múltiples clientes, lo que ya no es una opción desde CVE-2016-0701. Esto solo afecta a procesadores compatibles con la extensión AVX2, pero no la ADX, como Intel Haswell (cuarta generación). Nota: El impacto de este problema es similar a CVE-2017-3736, CVE-2017-3732 y CVE-2015-3193. Se han visto afectadas las versiones 1.0.2-1.0.2m y 1.1.0-1.1.0g de OpenSSL. Se ha solucionado en OpenSSL 1.0.2n. Debido a la baja gravedad de este problema, no se va a lanzar una nueva versión de OpenSSL 1.1.0 en este momento. La corrección se aplicará en OpenSSL 1.1.0h cuando esté disponible. La corrección también estará disponible en el commit con ID e502cc86d en el repositorio Git de OpenSSL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "18797BEE-417D-4959-9AAD-C5A7C051B524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAA3C31-BD9D-45A9-A502-837FECA6D479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "6455A421-9956-4846-AC7C-3431E0D37D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F946FD-F564-49DA-B043-5943308BA9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B89180B-FB68-4DD8-B076-16E51CC7FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C986592-4086-4A39-9767-EF34DBAA6A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B23181C-03DB-4E92-B3F6-6B585B5231B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D9EC1C-4843-4026-9B05-E060E9391734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036FB24F-7D86-4730-8BC9-722875BEC807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF148A3-1AA7-4F27-85AB-414C609C626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15B749E-6808-4788-AE42-7A1587D8697E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B78EDF-6BB7-42C4-9423-9332C62C6E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2354F82-A01B-43D2-84F4-4E94B258E091"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73104834-5810-48DD-9B97-549D223853F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC70262-0DCD-4B46-9C96-FD18D0207511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E07A34-08A0-4765-AF81-46A3BDC5648A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B0A3D8-60C7-4F42-9DD6-C535F983D98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD08E859-BB6D-4909-A873-C2609FA2821A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BF7D67-EAF4-4D01-9185-0DB69F2C543B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.1.0g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179144A7-D263-4BD8-A019-35DE39C777FC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "A47FC4F7-1F77-4314-B4B3-3C5D8E335379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.8.7",
            "matchCriteriaId" : "3818E441-8DC4-42E6-8D11-E58D195CBE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.8.1",
            "matchCriteriaId" : "D107EC29-67E7-40C3-8E5A-324C9105C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.12.2",
            "matchCriteriaId" : "BEA03114-7288-4E7C-9220-C0ABCD5F0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "74FB695D-2C76-47AB-988E-5629D2E695E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "8.9.0",
            "versionEndExcluding" : "8.9.3",
            "matchCriteriaId" : "C45E9D50-CD3D-480B-B9B8-451ADFF26505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.1",
            "matchCriteriaId" : "82FDBB10-3298-4C9A-9CC0-D34643AEC868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102118",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039978",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0998",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171208-0001/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4065",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4157",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20180327.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-16",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2018-04",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2018-06",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2018-07",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201712-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171208-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20171207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20180327.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2018-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2018-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2018-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11937",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-07T17:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Malware Protection Engine que se ejecute en Microsoft Forefront y Microsoft Defender en Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703, 1709 y Windows Server 2016; Windows Server versión 1709 y Microsoft Exchange Server 2013 y 2016, no escanea correctamente un archivo especialmente manipulado, lo que conduce a la ejecución remota de código. Esto también se conoce como \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14306.0",
            "matchCriteriaId" : "918454C3-BB41-4468-9024-F44F1CEB6123"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16F88D-63BC-4EAA-8CA7-8B5DC54235E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7B17EA-856C-492A-861F-6932A1BDF9BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43383FAA-0CD9-4D86-B957-814FE226D1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102070",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039972",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11937",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T18:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically."
      }, {
        "lang" : "es",
        "value" : "En Mercurial, en versiones anteriores a la 4.4.1, es posible que un repositorio especialmente mal formado provoque que los subrepositorios Git ejecuten código arbitrario en la forma de un script .git/hooks/post-update verificado en el repositorio. El uso habitual de Mercurial evita la construcción de tales repositorios, pero pueden crearse programáticamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurial:mercurial:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1",
            "matchCriteriaId" : "AE2530E4-4470-4A2F-8CE8-34B4FC22F33E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bz.mercurial-scm.org/show_bug.cgi?id=5730",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00027.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00041.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mercurial-scm.org/pipermail/mercurial-devel/2017-November/107333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4.1_.282017-11-07.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bz.mercurial-scm.org/show_bug.cgi?id=5730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mercurial-scm.org/pipermail/mercurial-devel/2017-November/107333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4.1_.282017-11-07.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T18:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117."
      }, {
        "lang" : "es",
        "value" : "http_transport.c en Fossil en versiones anteriores a la 2.4, cuando se utiliza el protocolo SSH sync, permite que atacantes remotos asistidos por un usuario ejecuten comandos arbitrarios mediante una URL ssh con un carácter guión inicial en el nombre del host. Esta vulnerabilidad está relacionada con CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116 y CVE-2017-1000117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fossil_scm:fossil:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4",
            "matchCriteriaId" : "CB721A45-F5C2-4BA2-9971-DACD592709FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.opensuse.org/show_bug.cgi?id=1071709",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BLAFCQGE7C5UMX75LESNUMKTXTURUVQM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.fossil-scm.org/xfer/doc/trunk/www/changes.wiki#v2_4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.fossil-scm.org/xfer/info/1f63db591c77108c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.opensuse.org/show_bug.cgi?id=1071709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BLAFCQGE7C5UMX75LESNUMKTXTURUVQM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.fossil-scm.org/xfer/doc/trunk/www/changes.wiki#v2_4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.fossil-scm.org/xfer/info/1f63db591c77108c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-07T19:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes)."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux en su versión 3.3-rc1 y siguientes se ha visto afectado por una vulnerabilidad en el procesamiento de comandos L2CAP entrantes - ConfigRequest y mensajes ConfigResponse. Este filtrado de información es el resultado de variables de la pila sin inicializar que podrían ser devueltas a un atacante en su estado no inicializado. Al manipular los flujos de código que preceden la gestión de estos mensajes de configuración, un atacante también podría obtener algún tipo de control sobre qué datos se mantendrán en las variables de pila sin inicializar. Esto también puede permitirle omitir KASLR y la protección de valores controlados de pila, ya que tanto los punteros como los valores controlados de pila podrían haberse filtrado de esta forma. La combinación de esta vulnerabilidad, por ejemplo, con la vulnerabilidad RCE previamente revelada en el análisis sintáctico de la configuración L2CAP (CVE-2017-1000251) podría permitir que un atacante explote el RCE contra kernels construidos con las mitigaciones anteriores. Estos son los detalles de esta vulnerabilidad: En las funciones l2cap_parse_conf_rsp y l2cap_parse_conf_req, la siguiente variable se declara sin inicialización: struct l2cap_conf_efs efs. Además, al analizar sintácticamente los parámetros de configuración de entradas en ambas funciones, el switch case para manipular elementos EFS podría omitir la llamada memcpy que escribirá en la variable efs: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(efs, (void *)val, olen); ... El olen en el if anterior está controlado por el atacante e, independientemente de ese if, en ambas funciones la variable efs se añadiría finalmente a la petición saliente de configuración que se está construyendo: l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) efs). Por lo tanto, al enviar una petición de configuración o una respuesta que contenga un elemento L2CAP_CONF_EFS, pero con una longitud de elemento que no es sizeof(efs), el memcpy en la variable efs no inicializada puede omitirse y la variable no inicializada se devolvería al atacante (16 bytes)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.2",
            "versionEndExcluding" : "4.15",
            "matchCriteriaId" : "0A35EAE4-2910-43D7-BF72-2D76B363D32B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EF6556-06A6-4700-B61F-533167096BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "69A04496-EA26-42E0-A553-413BF2A78AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "14E8986E-B317-40EA-B0B5-5D2922D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC4657A-0239-47DF-B582-87D8DFA69439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1F48A9-9185-4554-9265-22CEC01D18FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "639D2465-65E0-40E2-B7A8-BEA9E221DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "A282AD0B-2D63-4F05-8F89-109A0975B423"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28F9AF-3D06-4532-B397-96D7E4792503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q4/357",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102101",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3933-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3933-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3933-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3933-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14386",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-12-07T19:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website."
      }, {
        "lang" : "es",
        "value" : "La interfaz de usuario web de las impresoras láser multifunción Dell 2335dn y 2355dn, con versiones de firmware anteriores a la V2.70.06.26 A13 y a la V2.70.45.34 A10 respectivamente, se ven afectadas por una vulnerabilidad de Cross-Site Scripting (XSS). Los atacantes podrían explotar esta vulnerabilidad para ejecutar HTML o código JavaScript arbitrarios en la sesión del buscador del usuario, en el contexto de la página web afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:2355dn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.70.45.34_a10",
            "matchCriteriaId" : "D667F590-F2E9-49BD-8B4F-78D794DFA3A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:2355dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3CDAD04-B6C6-421B-8E81-622DE5F9C55D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:2335dn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.70.06.26_a13",
            "matchCriteriaId" : "3295BA2E-32B7-4054-A3DB-DF69BF8DFDAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:2335dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F3DDB0-4163-4D43-909A-21852E71ECFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55V",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55V",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T04:29:00.187",
      "lastModified" : "2023-11-07T02:41:43.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T05:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and psk_wepkey fields."
      }, {
        "lang" : "es",
        "value" : "Los módems Vivo permiten que atacantes remotos obtengan información sensible leyendo el código fuente HTML index.cgi?page=wifi, tal y como demuestran los campos ssid y psk_wepkey."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vivo:modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5189A07F-6A37-4C9F-BC09-05F2574E8603"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vivo:modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F918E189-0ED0-4D11-A603-A9F0DFF280D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mateeuslinno/viv0n",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mateeuslinno/viv0n",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T05:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "K7Sentry.sys 15.1.0.59 en K7 Antivirus 15.1.0309 tiene una vulnerabilidad de desreferencia de puntero NULL mediante una petición DeviceIoControl 0x95002570."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:15.1.0309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C887F-3F9A-451F-B400-7C4B42BADB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T05:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "K7Sentry.sys 15.1.0.59 en K7 Antivirus 15.1.0309 tiene una vulnerabilidad de desreferencia de puntero NULL mediante una petición DeviceIoControl 0x95002574."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:15.1.0309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C887F-3F9A-451F-B400-7C4B42BADB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002574",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730088."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales obtengan privilegios o provoquen una denegación de servicio (escritura arbitraria) mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730088."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730088",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730074."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730074."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730020, a different vulnerability than CVE-2017-17050."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales obtengan privilegios o provoquen una denegación de servicio (escritura arbitraria) mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730020. Esta vulnerabilidad es diferente de CVE-2017-17050."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730008, a different vulnerability than CVE-2017-16948."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730008. Esta vulnerabilidad es diferente de CVE-2017-16948."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730054."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730054."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82732140."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82732140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82732140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82732140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730030."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730030."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730050."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730050."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730050",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730070."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82730070."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730070",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T07:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82736068."
      }, {
        "lang" : "es",
        "value" : "TG Soft Vir.IT eXplorer Lite 8.5.42 permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar mediante una petición DeviceIoControl \\\\.\\Viragtlt de 0x82736068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82736068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82736068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11940",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-08T14:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\". This is different than CVE-2017-11937."
      }, {
        "lang" : "es",
        "value" : "Microsoft Malware Protection Engine, tal y como se ejecuta en Microsoft Forefront y Microsoft Defender en Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703, 1709 y Windows Server 2016; Windows Server versión 1709 y Microsoft Exchange Server 2013 y 2016, no escanea correctamente un archivo especialmente manipulado. Esto conduce a la ejecución remota de código. Esto también se conoce como \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de CVE-2017-11937."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14306.0",
            "matchCriteriaId" : "918454C3-BB41-4468-9024-F44F1CEB6123"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16F88D-63BC-4EAA-8CA7-8B5DC54235E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7B17EA-856C-492A-861F-6932A1BDF9BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43383FAA-0CD9-4D86-B957-814FE226D1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102104",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039972",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11940",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10893",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-08T15:29:00.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in The Public Certification Service for Individuals \"The JPKI user's software\" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en The Public Certification Service for Individuals \"The JPKI user's software\", versión 3.1 y anteriores, permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:j-lis:the_public_certification_service_for_individuals:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "1084028B-475E-4206-B047-7B4914F3BBD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN30352845/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN30352845/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10896",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-08T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en los routers de banda ancha Buffalo BBR-4HG y BBR-4MG con firmware 1.00 a 1.48 y 2.00 a 2.07 permite que un atacante inyecte scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4mg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "1.48",
            "matchCriteriaId" : "30C41CE6-534D-405E-8BFE-F255095BF176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4mg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.00",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "1F13A88E-6955-4D65-B637-40A6FDFDDC58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bbr-4mg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EA9B7A-13F2-42F3-8707-3AEC4854DD18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4hg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "1.48",
            "matchCriteriaId" : "86BF1D9A-2BD0-45CA-BF09-4B823367FD79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4hg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.00",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "7D4B17ED-6B51-4247-B475-A5DF328821F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bbr-4hg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38DF446-A597-4D5F-AAC8-B6B96793C446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buffalo.jp/support_s/s20171201.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65994435/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://buffalo.jp/support_s/s20171201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65994435/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10897",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-08T15:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un problema de validación de entradas en los routers de banda ancha Buffalo BBR-4HG y BBR-4MG con firmware 1.00 a 1.48 y 2.00 a 2.07 permite que un atacante provoque que el dispositivo no responda utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 5.5,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4mg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "1.48",
            "matchCriteriaId" : "30C41CE6-534D-405E-8BFE-F255095BF176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4mg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.00",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "1F13A88E-6955-4D65-B637-40A6FDFDDC58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bbr-4mg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EA9B7A-13F2-42F3-8707-3AEC4854DD18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4hg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "1.48",
            "matchCriteriaId" : "86BF1D9A-2BD0-45CA-BF09-4B823367FD79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bbr-4hg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.00",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "7D4B17ED-6B51-4247-B475-A5DF328821F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bbr-4hg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38DF446-A597-4D5F-AAC8-B6B96793C446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buffalo.jp/support_s/s20171201.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65994435/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://buffalo.jp/support_s/s20171201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN65994435/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10906",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-08T15:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de secuencias de escape en Fluentd en las versiones 0.12.29 hasta la 0.12.40 podría permitir que un atacante cambie la interfaz de usuario del terminal o ejecute comandos arbitrarios en el dispositivo mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E239F1C0-FF43-4BAA-9D5B-3B7E9FEA327C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2086C8D1-DDC8-4074-95E5-82865839DCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC7FD40-1F7D-4A02-98DC-08A076DDD927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F62B56-8953-4EE8-94B8-64E354EC60D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC5C48D-08B0-4477-AB11-168429985D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F12BEC-8EDE-47B2-ADBF-EAF5FDB56E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27DE234-F139-4964-A0C2-6AFEB48E3712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4257D676-4D0B-4470-BEA6-437CE56DF3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35209FD8-F148-446B-8FE9-36AD908D9A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCDBCBA-8F48-47E0-8E04-D69890CAC887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3BAA6D-4AB9-4323-A799-D5B2DAA65785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentd:fluentd:0.12.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89D4AAD-EE06-4485-A2F7-04B8222B6968"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704CFA1A-953E-4105-BFBE-406034B83DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2225",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluentd/pull/1733",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU95124098/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluentd/pull/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU95124098/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T15:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user."
      }, {
        "lang" : "es",
        "value" : "En OTRS en versiones 6.0.x hasta e incluyendo 6.0.1; OTRS 5.0.x hasta e incluyendo 5.0.24 y OTRS 4.0.x hasta e incluyendo 4.0.26, un atacante que haya iniciado sesión en OTRS como agente puede manipular los parámetros de formulario (relacionados con PGP) y ejecutar comandos shell arbitrarios con los permisos del usuario OTRS o del servidor web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD316D98-1DC4-4DC7-A488-851E94CC5263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9B81FE-4BA6-46B5-B390-1B05CB33C648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E38191D-DD62-476D-BB4A-80094B0FFD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875C5002-3E08-47A4-825C-282E6476507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE3222C-1C90-43D1-9E06-A9F867880900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6257D3-FD70-486D-B11A-77FE5904FFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6C894-111B-4432-B93B-989C8007CB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADCDD21-3665-4460-845F-DE9851607673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB52A359-2564-4E8D-929A-5402D04CDED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE86BC8-E092-4436-B632-8D117980D242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C2FF70-9B69-43FD-872D-8E6F1CD59634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2661294-7039-4C6A-8BFA-D790E93415C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B3DBFC-A962-44C3-810D-A9538E328E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DFB908-1877-4C6F-BAFB-45B3B17CBE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B96AE1B-9B8B-40D9-99AA-797859FA0EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C427B-DC2B-41F7-B3FC-BF0D51706F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B4648D-E3C7-4C5D-897C-CC27F8082AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908263DC-2F85-4ED9-AF4A-884609B2A3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F64E91-CF0C-4C48-94F0-0474A3D484F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974BFF95-01AC-454D-97CC-A82CA8823FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654C711F-2C10-4E7A-BFFF-9AD911576CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF723BA-E772-48F8-8B45-753CD372DCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00DD7D5-EBB4-4E7F-8669-FA96FF9E6B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906E3FE6-2516-474C-9F91-539A77E0085C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDBC4C4-2FCF-46DE-B5DF-60933563AB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA65E992-3401-4DE0-AB45-68D59063814F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E34A190-EFB8-4746-AECF-6309FE803A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8B3028-82F5-4B21-81B9-408533C7F524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA73A62B-BFA7-4793-96E6-BB832418A259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE138E72-61A0-4495-86CE-4342B93049CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C473A55A-677C-4D0B-9C0D-D1B3857AE8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D977D160-7B24-4ADD-9818-4C93A9E7D865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "472ACCD4-1B3D-4468-B084-D4E98032FF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8838C987-53ED-4E05-99D1-57A56A899C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C00BB3-3349-4DB3-B753-B36B88E1B9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D567DC5-332F-4F95-BA0B-B076661AB14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361E43E-9140-49DC-9F06-865BDFC3A60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DF625C-C5B1-4B7F-BDB4-34F751093104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0124AD54-B58F-4D36-B45F-B836C321067F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D36D023-BE8C-47EF-934E-4E808FA3C0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D7CD3E-A98A-4FBD-B267-E69E1711B741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08621604-0098-45F9-9684-85973F4C3058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2209CD7C-0539-4A36-B40A-D437F6926444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F821217-A3A1-4CAC-9904-80543FD17808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE3BC26-B6CE-4A47-87EE-ABF098D0D553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B352C86-4538-4266-8FDE-AA8F4FD173AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E569B83B-4DDF-48FE-9143-57CE2D0EBA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B103C-3B32-4BD9-BE83-6E8B8D43F51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0052F432-313F-416F-A655-BB5E3E880915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E464C4-60E9-43C5-A42E-371B332C859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B011E9D-C067-4362-9181-EB568C59944D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0FD254-B891-4911-9DBC-C55E67F13C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE23C83-B4A3-4996-82A5-E19D6D43E0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA401F3-9ADF-4725-825F-7E94AF6589BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91E306F-59EC-43AC-8208-38FBBB6D2989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0B0D2F-29F9-4648-BB4D-81A70E429872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5496643A-DCC8-472F-8BDB-D11A76E0B6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:5.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4256A6A4-A692-4709-98D4-B805E6078A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD3ED863-6A35-4774-90BD-C7CEC377D5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7F16FD-2DA4-4C52-8B43-724250EED343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "416C5325-B3B7-49C6-8CB9-C40965456A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9D448F-0BF4-4A8B-A845-503DEA6CA85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3771FD9B-C1C4-42D2-AB37-ED177482BCDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "6E997CBD-3D10-4E08-9AA6-1A4DD5A5C796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6EDA86-F295-4DB6-83D7-A54886F39F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4F8D76-ADD7-41F6-816F-43CED6AFB061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2491453A-3458-4D07-94A0-80A1AB8AF0DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162295/OTRS-6.0.1-Remote-Command-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4066",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43853/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-09-security-update-otrs-framework/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162295/OTRS-6.0.1-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43853/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-09-security-update-otrs-framework/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12823",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2017-12-08T16:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation."
      }, {
        "lang" : "es",
        "value" : "La corrupción del grupo de memoria del kernel en uno de los controladores en Kaspersky Embedded Systems Security 1.2.0.300 conduce a una escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:embedded_systems_security:1.2.0.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A081C0F-617F-40EE-97D1-9CE93534BD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:embedded_systems_security:2.0.0.385:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC319BC-2093-46A9-A657-367A62C4C8AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102141",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.kaspersky.com/vulnerability.aspx?el=12430#091017",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.kaspersky.com/vulnerability.aspx?el=12430#091017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15891",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-08T16:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control de acceso indebido en SYNO.Cal.EventBase en Synology Calendar en versiones anteriores a la 2.0.1-0242 permite que usuarios remotos autenticados modifiquen eventos del calendario mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:calendar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.1-0242",
            "matchCriteriaId" : "3C533652-085B-41D0-91C1-4F27CB70D0C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_68_Calendar",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_68_Calendar",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15893",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-08T16:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en SYNO.FileStation.Extract en Synology File Station en versiones anteriores a la 1.1.1-0099 permite que usuarios remotos autenticados escriban archivos arbitrarios mediante el parámetro dest_folder_path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:file_station:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1-0099",
            "matchCriteriaId" : "EBE27F97-C824-4043-9AB1-A5C816CE0558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_69_File_Station",
        "source" : "security@synology.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_69_File_Station",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15894",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-08T16:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en SYNO.FileStation.Extract en Synology DiskStation Manager (DSM) en versiones 6.0.x anteriores a la 6.0.3-8754-3 y anteriores a la 5.2-5967-6 permite que usuarios remotos autenticados escriban archivos arbitrarios mediante el parámetro dest_folder_path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2-5967-6",
            "matchCriteriaId" : "24C4D386-9FB9-47A4-8C28-9358C7FCFE88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.3-8754-3",
            "matchCriteriaId" : "D7632773-253C-4796-8F0C-78A20E102A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_70_DSM",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_70_DSM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15895",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-08T16:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en SYNO.FileStation.Extract en Synology Router Manager (SRM) en versiones anteriores a la 1.1.5-6542-4 permite que usuarios remotos autenticados escriban archivos arbitrarios mediante el parámetro dest_folder_path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5-6542-4",
            "matchCriteriaId" : "C6697561-D0C9-47EC-BEB3-16683E230A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_71_SRM",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_71_SRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T17:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets."
      }, {
        "lang" : "es",
        "value" : "En Open Ticket Request System (OTRS) hasta la versión 3.3.20; en las versiones 4 hasta la 4.0.26; en las versiones 5 hasta la 5.0.24 y en las versiones 6 hasta la 6.0.1, un atacante que ha iniciado sesión como cliente puede emplear el formulario de búsqueda de tickets para revelar información interna de artículos de sus tickets de cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.20",
            "matchCriteriaId" : "991EB652-4321-40E7-80C1-5D1B5A3DC7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndIncluding" : "4.0.26",
            "matchCriteriaId" : "0D6558F1-B580-4119-BF84-73972353FC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.24",
            "matchCriteriaId" : "D4BF1881-7552-47E4-B8F5-64D83BDC8311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "9702AE18-7F8E-4B92-9D94-DFB63B3714BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4066",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-08-security-update-otrs-framework/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-08-security-update-otrs-framework/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11480",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-12-08T18:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 5.6.4 de Packetbeat se han visto afectadas por un fallo de denegación de servicio en el manipulador del protocolo PostgreSQL. Si Packetbeat está escuchando el tráfico PostgreSQL y un usuario es capaz de enviar tráfico de la red arbitrario al puerto monitorizado, el atacante podría evitar que Packetbeat registre correctamente otro tráfico PostgreSQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:packetbeat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.4",
            "matchCriteriaId" : "126517DF-98B0-4115-897D-3424BB9850A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/beats-5-6-4-security-update/106739",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/beats-5-6-4-security-update/106739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11481",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-12-08T18:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 6.0.1 y 5.6.5 de Kibana presentan una vulnerabilidad de tipo Cross-Site Scripting (XSS) en campos URL que podrían permitir a un atacante obtener información sensible o realizar acciones destructivas en nombre de otros usuarios de Kibana."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C22151C-45AD-44DB-B3E0-178BC93CC8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EAB4F2B-26A1-4F1C-BA4D-1B1D2DAFC8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEC2D6D-D18A-4E5A-999F-46101D21EE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FED321-3988-4E5E-993B-C205F772D41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29554EC2-EC90-4EDA-B3BB-705BDF446A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A7247C-F032-4A8A-A854-9119020AEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC1C2A2-509F-4C21-9D82-862146EA6B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9A41CB-1852-4BF2-AC39-A92E2EAAB9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "804F2D2F-9A4A-4179-B774-14B7B293C6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC11C2B1-EB71-4D19-A592-99452D4E5285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAE3FEE-A2F1-41C8-9C38-ECA9B3203B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "335B93D1-893F-494A-8F0D-176585DDD53A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11482",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2017-12-08T18:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la corrección de Kibana para CVE-2017-8451 está incompleta. Con X-Pack instalado, las versiones anteriores a la 6.0.1 y 5.6.5 de Kibana tienen una vulnerabilidad de redirección abierta en la página de inicio de sesión que podrían permitir que un atacante cree un enlace que redirija a un sitio web arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C22151C-45AD-44DB-B3E0-178BC93CC8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EAB4F2B-26A1-4F1C-BA4D-1B1D2DAFC8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEC2D6D-D18A-4E5A-999F-46101D21EE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FED321-3988-4E5E-993B-C205F772D41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29554EC2-EC90-4EDA-B3BB-705BDF446A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A7247C-F032-4A8A-A854-9119020AEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC1C2A2-509F-4C21-9D82-862146EA6B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9A41CB-1852-4BF2-AC39-A92E2EAAB9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "804F2D2F-9A4A-4179-B774-14B7B293C6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC11C2B1-EB71-4D19-A592-99452D4E5285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAE3FEE-A2F1-41C8-9C38-ECA9B3203B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:6.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "335B93D1-893F-494A-8F0D-176585DDD53A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T19:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution."
      }, {
        "lang" : "es",
        "value" : "En OpenJPEG 2.3.0, se ha descubierto un desbordamiento de búfer basado en pila en la función pgxtoimage en jpwl/convert.c. Esta vulnerabilidad tiene como consecuencia una escritura fuera de límites, lo que podría dar lugar a una denegación de servicio remota o a una posible ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459BFDFA-A27B-4C47-A966-9E99E022BD04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/uclouvain/openjpeg/issues/1044",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-08T19:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution."
      }, {
        "lang" : "es",
        "value" : "En OpenJPEG 2.3.0, se ha descubierto un desbordamiento de búfer basado en pila en la función pgxtovolume en jp3d/convert.c. Esta vulnerabilidad tiene como consecuencia una escritura fuera de límites, lo que podría dar lugar a una denegación de servicio remota o a una posible ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459BFDFA-A27B-4C47-A966-9E99E022BD04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/uclouvain/openjpeg/issues/1044",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4109-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2019/dsa-4405",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4109-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2019/dsa-4405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11213",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized transparent or opaque bitmap image. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Flash Player 27.0.0.183 y anteriores. Esta vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del final del búfer objetivo debido a un desbordamiento de enteros; el cálculo forma parte de la abstracción que crea una imagen bitmap transparente u opaca con un tamaño arbitrario. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "B92F9D5E-D9ED-4077-828C-25FEFB6F0751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "E950A9CA-E24E-45C4-A771-38AE1B928AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "414E47D7-9E32-4972-BA92-4969250A8179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:intenet_explorer_11:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "A4002A3B-F27B-4726-9EF4-B24B4E5AEC0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11215",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Flash Player en versiones 27.0.0.183 y anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el SDK Primetime. La no coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "B92F9D5E-D9ED-4077-828C-25FEFB6F0751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "E950A9CA-E24E-45C4-A771-38AE1B928AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "414E47D7-9E32-4972-BA92-4969250A8179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:intenet_explorer_11:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "A4002A3B-F27B-4726-9EF4-B24B4E5AEC0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11225",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Flash Player 27.0.0.183 y anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el SDK Primetime. La no coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "B92F9D5E-D9ED-4077-828C-25FEFB6F0751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "E950A9CA-E24E-45C4-A771-38AE1B928AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "414E47D7-9E32-4972-BA92-4969250A8179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:intenet_explorer_11:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "A4002A3B-F27B-4726-9EF4-B24B4E5AEC0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11273",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could lead to sensitive information disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Digital Editions 4.5.6 y anteriores. Adobe Digital Editions analiza sintácticamente archivos XML manipulados de forma no segura, lo que podría conducir a una divulgación de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.6",
            "matchCriteriaId" : "CCF683F3-9B84-4B91-82FC-4980C3A1205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11287",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Connect 9.6.2 y anteriores. Existe una vulnerabilidad de Cross-Site Scripting reflejado que podría desembocar en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.2",
            "matchCriteriaId" : "46D29F17-C542-4A74-BC07-D8D0D7757140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11288",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Connect 9.6.2 y anteriores. Existe una vulnerabilidad de Cross-Site Scripting reflejado que podría desembocar en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.2",
            "matchCriteriaId" : "46D29F17-C542-4A74-BC07-D8D0D7757140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11289",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Connect 9.6.2 y anteriores. Existe una vulnerabilidad de Cross-Site Scripting reflejado que podría desembocar en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.2",
            "matchCriteriaId" : "46D29F17-C542-4A74-BC07-D8D0D7757140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11290",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Connect 9.6.2 y anteriores. Existe una vulnerabilidad de secuestro de clicks (clickjacking o UI Redress). Este problema ha sido resuelto añadiendo una característica que permite que los administradores Connect protejan a los usuarios ante ataques de secuestro de clic (clickjacking o UI Redress)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.2",
            "matchCriteriaId" : "46D29F17-C542-4A74-BC07-D8D0D7757140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11291",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Connect 9.6.2 y anteriores. Existe una vulnerabilidad de Server-Side Request Forgery (SSRF) que podría ser aprovechada para omitir los controles de acceso a la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.2",
            "matchCriteriaId" : "46D29F17-C542-4A74-BC07-D8D0D7757140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb17-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11293",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Existe una vulnerabilidad de corrupción de memoria explotable. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/aspb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/aspb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11294",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Shockwave 12.2.9.199 y anteriores. Existe una vulnerabilidad de corrupción de memoria explotable. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.2.9.199",
            "matchCriteriaId" : "42E94E37-7D15-4C3F-B14B-EC738440DB74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101836",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039784",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/shockwave/apsb17-40.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/shockwave/apsb17-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11295",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe DNG Converter 9.12.1 y anteriores. Existe una vulnerabilidad de corrupción de memoria explotable. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dng_converter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.12.1",
            "matchCriteriaId" : "75603C08-629C-44E7-97D7-5582038C522B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101828",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dng-converter/apsb17-37.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dng-converter/apsb17-37.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11296",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Experience Manager 6.3, 6.2, 6.1 y 6.0. Se ha resuelto una vulnerabilidad de Cross-Site Scripting en Apache Sling Servlets Post 2.3.20 en Adobe Experience Manager."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0791D620-1EE8-44C8-92D7-3790B546C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8996F27-91F0-42ED-963A-D46C91EC5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0056F65-B0CA-4939-815D-560687E16710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172715D3-F7E0-4889-920E-286B1B8F3FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101844",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039800",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11297",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Digital Editions 4.5.6 y anteriores. Existe una vulnerabilidad explotable de corrupción de memoria que podría conducir a la divulgación de direcciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.6",
            "matchCriteriaId" : "CCF683F3-9B84-4B91-82FC-4980C3A1205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11298",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Digital Editions 4.5.6 y anteriores. Existe una vulnerabilidad explotable de corrupción de memoria que podría conducir a la divulgación de direcciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.6",
            "matchCriteriaId" : "CCF683F3-9B84-4B91-82FC-4980C3A1205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11299",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Digital Editions 4.5.6 y anteriores. Existe una vulnerabilidad explotable de corrupción de memoria que podría conducir a la divulgación de direcciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.6",
            "matchCriteriaId" : "CCF683F3-9B84-4B91-82FC-4980C3A1205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11300",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Digital Editions 4.5.6 y anteriores. Existe una vulnerabilidad explotable de corrupción de memoria que podría conducir a la divulgación de direcciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.6",
            "matchCriteriaId" : "CCF683F3-9B84-4B91-82FC-4980C3A1205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11301",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Digital Editions 4.5.6 y anteriores. Existe una vulnerabilidad explotable de corrupción de memoria que podría conducir a la divulgación de direcciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.6",
            "matchCriteriaId" : "CCF683F3-9B84-4B91-82FC-4980C3A1205C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11302",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe InDesign 12.1.0 y anteriores. Existe una vulnerabilidad de corrupción de memoria explotable. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.1.0",
            "matchCriteriaId" : "0DC1051E-075F-4B27-A565-9109CB8D3FEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101840",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039785",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb17-38.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb17-38.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11303",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Photoshop 18.1.1 (2017.1.1) y anteriores. Existe una vulnerabilidad de corrupción de memoria explotable. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.1.1",
            "matchCriteriaId" : "5AA166B4-D4E4-4EB6-8DE3-E80F1C9F5192"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101829",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039786",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-34.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11304",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Photoshop 18.1.1 (2017.1.1) y anteriores. Existe una vulnerabilidad de uso de memoria previamente liberada. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.1.1",
            "matchCriteriaId" : "5AA166B4-D4E4-4EB6-8DE3-E80F1C9F5192"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101829",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039786",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-34.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb17-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16360",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the MakeAccessible plugin, when creating an internal data structure. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el plugin MakeAccesible, al crear una estructura de datos interna. La no coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16361",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability when handling XFDF files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de omisión de seguridad al manipular archivos XFDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101830",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16362",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of an out of bounds read vulnerability in the MakeAccesible plugin, when handling font data. It causes an out of bounds memory access, which sometimes triggers an access violation exception. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, writes, or frees, potentially leading to code corruption, control-flow hijack, or an information leak attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de lectura fuera de límites en el plugin MakeAccesible, al manipular datos de fuentes. Provoca un acceso a la memoria fuera de límites, lo que, a veces, desencadena una excepción de violación de acceso. Los atacantes pueden explotar esta vulnerabilidad empleando el acceso fuera de límites para lecturas, escrituras o liberaciones no planeadas. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o un ataque de filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16363",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for certain textual representations. Invalid input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a una sobrelectura de búfer en el módulo que manipula los códigos de carácter para ciertas representaciones textuales. Las entradas no válidas conducen a un cálculo en el que la aritmética de punteros resulta en una ubicación fuera de las ubicaciones de memoria válidas pertenecientes al búfer. Un ataque puede ser empleado para obtener información sensible, como direcciones de la memoria dinámica (heap) del objeto, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16364",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference when handling number format dictionary entries. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Este problema se debe a una desreferencia de puntero no fiable al manipular entradas de diccionario con formato de número. En este caso, la entrada se crea de forma que el cálculo resulte en punteros en ubicaciones de memoria que no pertenecen al espacio de dirección relevante del proceso. La operación de desreferencia es una operación de lectura; un ataque puede resultar en la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16365",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupted cmap table input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a una sobrelectura de búfer en el módulo de análisis sintáctico True Type2 Font. Una entrada de tabla cmap corrupta conduce a un cálculo en el que la aritmética de punteros resulta en una ubicación fuera de las ubicaciones de memoria válidas pertenecientes al búfer. Un ataque puede ser empleado para obtener información sensible, como direcciones de la memoria dinámica (heap) del objeto, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16366",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability in the AcroPDF plugin."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de omisión de seguridad en el plugin AcroPDF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101830",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16367",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion overflow vulnerability. The vulnerability leads to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads or writes -- potentially leading to code corruption, control-flow hijack, or an information leak attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de desbordamiento por confusión de tipos. La vulnerabilidad conduce a un acceso a la memoria fuera de límites. Los atacantes pueden explotar esta vulnerabilidad empleando el acceso fuera de límites para lecturas o escrituras involuntarias. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o un ataque de filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16368",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.227",
      "lastModified" : "2025-05-06T15:15:51.173",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability leads to a stack-based buffer overflow condition in the internal Unicode string manipulation module. It is triggered by an invalid PDF file, where a crafted Unicode string causes an out of bounds memory access of a stack allocated buffer, due to improper checks when manipulating an offset of a pointer to the buffer. Attackers can exploit the vulnerability and achieve arbitrary code execution if they can effectively control the accessible memory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad conduce a un desbordamiento de búfer basado en pila en el módulo de manipulación de cadenas Unicode internas. Se desencadena por medio de un archivo PDF inválido, en el que una cadena Unicode manipulada provoca un acceso a la memoria fuera de límites de un búfer asignado a la pila. Esto se debe a las comprobaciones incorrectas al manipular un offset de un puntero en un búfer. Los atacantes pueden explotar esta vulnerabilidad y lograr la ejecución de código arbitrario si pueden controlar de manera efectiva la memoria accesible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101816",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16369",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a Same Origin Policy security bypass vulnerability, affecting files on the local system, etc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de una omisión de seguridad de la política del mismo origen (Same Origin Policy) que afecta a los archivos en el sistema local, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101820",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16370",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript engine. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre debido a un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del motor JavaScript. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16371",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Este problema se debe a una desreferencia de puntero no fiable en el motor JavaScript. En este caso, la entrada se crea de forma que el cálculo resulte en punteros en ubicaciones de memoria que no pertenecen al espacio de dirección relevante del proceso. La operación de desreferencia es una operación de lectura; un ataque puede resultar en la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16372",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to untrusted pointer dereference in the JavaScript API engine. In this scenario, the JavaScript input is crafted in way that the computation results with pointer to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result with sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Este problema se debe a una desreferencia de puntero no fiable en el motor API de JavaScript. En este caso, la entrada JavaScript se crea de forma que el cálculo resulte en punteros en ubicaciones de memoria que no pertenecen al espacio de dirección relevante del proceso. La operación de desreferencia es una operación de lectura; un ataque puede resultar en la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16373",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Este problema se debe a una desreferencia de puntero no fiable. En este caso, la entrada se crea de forma que el cálculo resulte en punteros en ubicaciones de memoria que no pertenecen al espacio de dirección relevante del proceso. La operación de desreferencia es una operación de lectura; un ataque puede resultar en la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16374",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 input code stream leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a una sobrelectura de búfer en el módulo JPEG 2000. Un flujo de código de entrada JPEG 2000 inválido conduce a un cálculo en el que la aritmética de punteros resulta en una ubicación fuera de las ubicaciones de memoria válidas pertenecientes al búfer. Un ataque puede ser empleado para obtener información sensible, como direcciones de la memoria dinámica (heap) del objeto, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16375",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaSscript API engine. In this scenario, the JavaScript input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Este problema se debe a una desreferencia de puntero no fiable en el motor API de JavaScript API. En este caso, la entrada JavaScript se crea de forma que el cálculo resulte en punteros en ubicaciones de memoria que no pertenecen al espacio de dirección relevante del proceso. La operación de desreferencia es una operación de lectura; un ataque puede resultar en la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16376",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the MakeAccessible plugin. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del plugin MakeAccesible. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16377",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is due to a computation that accesses a pointer that has not been initialized in the main DLL. In this case, a computation defines a read from an unexpected memory location. Therefore, an attacker might be able to read sensitive portions of memory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que accede a un puntero que no se ha inicializado en el DLL principal. En este caso, un cálculo define una lectura desde una ubicación de memoria inesperada. Por lo tanto, un atacante podría ser capaz de leer secciones de memoria sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101821",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16378",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.570",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is due to a computation that accesses a pointer that has not been initialized; the computation occurs during internal AST thread manipulation. In this case, a computation defines a read from an unexpected memory location. Therefore, an attacker might be able to read sensitive portions of memory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que accede a un puntero que no se ha inicializado; el cálculo ocurre durante la manipulación interna de hilos AST. En este caso, un cálculo define una lectura desde una ubicación de memoria inesperada. Por lo tanto, un atacante podría ser capaz de leer secciones de memoria sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101821",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16379",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion overflow vulnerability in the graphics rendering engine."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de desbordamiento por confusión de tipos en el motor de renderizado de gráficos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16380",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability for a certain file-type extension. Acrobat maintains both a blacklist and whitelist (the user can specify an allowed attachment). However, any file extensions that are neither on the blacklist nor the whitelist can still be opened after displaying a warning prompt."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de omisión de seguridad para cierta extensión de tipo de archivo. Acrobat mantiene tanto una lista negra como una blanca (el usuario puede especificar un adjunto permitido). Sin embargo, cualquier extensión de archivo que no esté ni en la lista negra ni en la blanca puede ser abierto tras mostrar un mensaje de advertencia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101814",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16381",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value when processing TIFF files embedded within an XPS document. Crafted TIFF image input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un acceso al búfer con un valor de longitud incorrecto al procesar archivos TIFF embebidos en un documento XPS. La entrada de imágenes TIFF puede provocar una disparidad entre el tamaño de búfer asignado y el acceso permitido por el cálculo. Si un atacante puede controlar adecuadamente la memoria accesible, esta vulnerabilidad puede ser aprovechada para lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16382",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo de conversión de imagen. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16383",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability when processing a JPEG file embedded within an XPS document."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de un desbordamiento de memoria dinámica (heap) al procesar un archivo JPEG embebido en un documento XPS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101823",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16384",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file (during XPS conversion). Invalid input leads to a computation where pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a una sobrelectura de búfer en el módulo de procesamiento exif para un archivo PNG (durante la conversión XPS). Las entradas no válidas conducen a un cálculo en el que la aritmética de punteros resulta en una ubicación fuera de las ubicaciones de memoria válidas pertenecientes al búfer. Un ataque puede ser empleado para obtener información sensible, como direcciones de la memoria dinámica (heap) del objeto, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16385",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.820",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in TIFF parsing during XPS conversion. Crafted TIFF image input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un acceso al búfer con un valor de longitud incorrecto en el análisis sintáctico de TIFF durante la conversión XPS. La entrada de imágenes TIFF puede provocar una disparidad entre el tamaño de búfer asignado y el acceso permitido por el cálculo. Si un atacante puede controlar adecuadamente la memoria accesible, esta vulnerabilidad puede ser aprovechada para lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16386",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the XPS2PDF conversion engine. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del motor de conversión XPS2PDF. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16387",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.883",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the JPEG2000 codec. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del códec JPEG2000. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16388",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el motor API de JavaScript. La falta de coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16389",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el motor JavaScript. La disparidad entre un objeto nuevo y uno viejo puede proporcionarle a un atacante acceso a la memoria no planeado. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16390",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:01.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine API. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el motor API de JavaScript. La falta de coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16391",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.037",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the printing functionality. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es el resultado de entradas no fiables que se emplean para calcular un índice de arrays: el cálculo ocurre en la funcionalidad de impresión. La vulnerabilidad conduce a una operación que puede escribir en una ubicación de memoria fuera de las direcciones de memoria asignadas para la estructura de datos. Este escenario específico da lugar a un acceso de escritura a una ubicación de memoria que no pertenece al espacio de direcciones de proceso relevante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101819",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16392",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the JPEG processing module. Crafted input with an unexpected JPEG file segment size causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un acceso al búfer con un valor de longitud incorrecto en el módulo de procesamiento JPEG. La entrada manipulada con un tamaño de segmento de archivo JPEG inesperado provoca una disparidad entre el tamaño de búfer asignado y el acceso permitido por el cálculo. Si un atacante puede controlar adecuadamente la memoria accesible, esta vulnerabilidad puede ser aprovechada para lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16393",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.117",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el motor JavaScript. La falta de coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16394",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the WebCapture module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo WebCapture. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16395",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the image conversion module when processing Enhanced Metafile Format (EMF). Crafted EMF input (EMR_STRETCHDIBITS) causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un acceso al búfer con un valor de longitud incorrecto en el módulo de conversión de imágenes al procesar el formato Enhanced Metafile Format (EMF). Las entradas EMF manipuladas (EMR_STRETCHDIBITS) pueden provocar una disparidad entre el tamaño de búfer asignado y el acceso permitido por el cálculo. Si un atacante puede controlar adecuadamente la memoria accesible, esta vulnerabilidad puede ser aprovechada para lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16396",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the TIFF processing module. Crafted input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un acceso al búfer con un valor de longitud incorrecto en el módulo de procesamiento TIFF. La entrada manipulada puede provocar una disparidad entre el tamaño de búfer asignado y el acceso permitido por el cálculo. Si un atacante puede controlar adecuadamente la memoria accesible, esta vulnerabilidad puede ser aprovechada para lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16397",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of Enhanced Metafile Format (EMF) processing within the image conversion module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del procesamiento del formato Enhanced Metafile Format (EMF) en el módulo de conversión de imagen. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16398",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Esta vulnerabilidad es un ejemplo de una vulnerabilidad de uso de memoria previamente liberada en el motor JavaScript. La falta de coincidencia entre un objeto nuevo y otro viejo puede proporcionarle a un atacante acceso a la memoria no planeado. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o en un ataque de filtrado de información. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16399",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.320",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the XPS parsing module. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. Este problema se debe a una desreferencia de puntero no fiable en el módulo de análisis sintáctico XPS. En este caso, la entrada se crea de forma que el cálculo resulte en punteros en ubicaciones de memoria que no pertenecen al espacio de dirección relevante del proceso. La operación de desreferencia es una operación de lectura; un ataque puede resultar en la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16400",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the JPEG 2000 parser. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del analizador sintáctico JPEG 2000. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16401",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of an image conversion, specifically in Enhanced Metafile Format Plus (EMF +) processing modules. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte de una conversión de imágenes, específicamente, en los módulos de procesamiento del formato Enhanced Metafile Format Plus (EMF +). El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16402",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.413",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JPEG 2000 module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo JPEG 2000. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16403",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that processes Enhanced Metafile Format Plus (EMF+) data. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte de un módulo de conversión de imágenes que procesa datos en formato Enhanced Metafile Format Plus (EMF +). El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16404",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of processing Enhanced Metafile Format Plus (EMF+). The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que escribe datos más allá del final del búfer planeado; el cálculo forma parte del procesamiento del formato Enhanced Metafile Format Plus (EMF+). La vulnerabilidad es el resultado de un offset de puntero fuera de rango que se emplea para acceder a subelementos de una estructura de datos interna. Un atacante podría aprovechar esta vulnerabilidad para corromper datos sensibles o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16405",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.523",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of Acrobat's page display functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte de la funcionalidad de visualización de página de Acrobat. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16406",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion vulnerability in the EMF processing module. The issue causes the program to access an object using an incompatible type, leading to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, writes, or frees -- potentially leading to code corruption, control-flow hijack, or information leak attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es un ejemplo de confusión de tipos en el módulo de procesamiento EMF. El problema provoca que el programa acceda a un objeto empleando un tipo no compatible, desembocando en un acceso a la memoria fuera de límites. Los atacantes pueden explotar esta vulnerabilidad empleando el acceso fuera de límites para lecturas, escrituras o liberaciones no planeadas. Esto podría desembocar en la corrupción de código, secuestro del flujo de control o un ataque de filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101815",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16407",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of handling an EMF EMR_BITBLT record. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que escribe datos más allá del final del búfer planeado; el cálculo forma parte de la manipulación de un registro EMF EMR_BITBLT. La vulnerabilidad es el resultado de un offset de puntero fuera de rango que se emplea para acceder a subelementos de una estructura de datos interna. Un atacante podría aprovechar esta vulnerabilidad para corromper datos sensibles o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16408",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.633",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the WebCapture module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo WebCapture. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16409",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the Adobe graphics module responsible for displaying textual data. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo de gráficos de Adobe responsable de mostrar datos textuales. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16410",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the image conversion module, when processing GIF files. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad es el resultado de entradas no fiables que se emplean para calcular un índice de arrays: el cálculo ocurre en el módulo de conversión de imagen al procesar archivos GIF. La vulnerabilidad conduce a una operación que puede escribir en una ubicación de memoria fuera de las direcciones de memoria asignadas para la estructura de datos. Este escenario específico conduce a un acceso de escritura a una ubicación de memoria que no pertenece al espacio de direcciones de proceso relevante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101819",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16411",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.727",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the WebCapture module, related to an internal hash table implementation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo WebCapture, relacionado con una implementación de tabla hash interna. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16412",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is part of the XPS conversion module, when handling a JPEG resource. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre debido a un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo de conversión XPS, al manipular un recurso JPEG. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16413",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.787",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the XPS to PDF conversion module, when processing TIFF files. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que escribe datos más allá del final del búfer planeado; el cálculo forma parte del módulo de conversión XPS a PDF, al procesar archivos TIFF. La vulnerabilidad es el resultado de un offset de puntero fuera de rango que se emplea para acceder a subelementos de una estructura de datos interna. Un atacante podría aprovechar esta vulnerabilidad para corromper datos sensibles o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16414",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript API module responsible for form field computation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo API JavaScript responsable del cálculo de campos de formulario. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16415",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.867",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is a part of the functionality that handles font encodings. The vulnerability is a result of out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que escribe datos más allá del final del búfer planeado; el cálculo forma parte de la funcionalidad que se encarga de la codificación de fuentes. La vulnerabilidad es el resultado de un offset de puntero fuera de rango que se emplea para acceder a subelementos de una estructura de datos interna. Un atacante podría aprovechar esta vulnerabilidad para corromper datos sensibles o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16416",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that handles Enhanced Metafile Format Plus (EMF+) data. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad se debe a un cálculo que escribe datos más allá del final del búfer planeado; el cálculo forma parte del módulo de conversión de imágenes que manipula datos en formato Enhanced Metafile Format Plus (EMF+). La vulnerabilidad es el resultado de un offset de puntero fuera de rango que se emplea para acceder a subelementos de una estructura de datos interna. Un atacante podría aprovechar esta vulnerabilidad para corromper datos sensibles o ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16417",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the font parsing module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo de análisis sintáctico de fuentes. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16418",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the image conversion module that handles XPS files. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del módulo de conversión de imagen que manipula archivos XPS. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16419",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:02.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The issue is a stack exhaustion problem within the JavaScript API, where the computation does not correctly control the amount of recursion that can happen with respect to system resources."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. El problema es un agotamiento de pila en la API JavaScript, en el que el cálculo no controla correctamente la cantidad de recursión que puede ocurrir con respecto a los recursos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101817",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16420",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:03.023",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is in the part of the JavaScript engine that handles annotation abstraction. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Acrobat y Reader: 2017.012.20098 y versiones anteriores, 2017.011.30066 y versiones anteriores, 2015.006.30355 y versiones anteriores y 11.0.22 y versiones anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte del motor JavaScript que gestiona la abstracción de anotaciones. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "43C26AAA-3620-4229-AEFC-78AB3B2AAACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "2AD1E919-28D9-4C88-B8F9-95E062E9F9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "43E90FF1-8078-4B18-A492-507E6129D10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "E45BE50E-04BE-49BE-8AFD-DFFAE6D11538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "FA8E1E9D-FE27-4916-9BB3-D3E92BBB5641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30066",
            "matchCriteriaId" : "9346604B-ADB0-471B-9F81-8560E3F516AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "-",
            "versionEndIncluding" : "17.012.20098",
            "matchCriteriaId" : "2A50612A-DC1B-4F64-BF9F-748A15EC6610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.006.30355",
            "matchCriteriaId" : "394E8F26-2B1C-47ED-85F9-32BC5E04EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3109",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:03.070",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Experience Manager 6.3, 6.2, 6.1 y 6.0. Adobe Experience Manager tiene una vulnerabilidad de Cross-Site Scripting reflejado en HtmlRendererServlet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0791D620-1EE8-44C8-92D7-3790B546C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8996F27-91F0-42ED-963A-D46C91EC5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0056F65-B0CA-4939-815D-560687E16710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172715D3-F7E0-4889-920E-286B1B8F3FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101834",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039800",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3111",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:03.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Sensitive tokens are included in http GET requests under certain circumstances."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Experience Manager 6.3, 6.2, 6.1 y 6.0. Los tokens sensibles se incluyen en peticiones http GET bajo ciertas circunstancias."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8996F27-91F0-42ED-963A-D46C91EC5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0056F65-B0CA-4939-815D-560687E16710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101843",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039800",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3112",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:03.133",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Flash Player 27.0.0.183 y anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte de los metadatos AdobePSDK. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "B92F9D5E-D9ED-4077-828C-25FEFB6F0751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "E950A9CA-E24E-45C4-A771-38AE1B928AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "414E47D7-9E32-4972-BA92-4969250A8179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer_11:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "6E40B198-11F4-4FF9-AD78-5F902549402E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3114",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-09T06:29:03.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Adobe Flash Player 27.0.0.183 y anteriores. La vulnerabilidad ocurre como resultado de un cálculo que lee datos más allá del búfer objetivo; el cálculo forma parte de la funcionalidad específica de idioma, región o país. El uso de un puntero inválido (fuera de rango) durante el acceso a los campos de la estructura de datos interna provoca esta vulnerabilidad. Un ataque con éxito podría conducir a la exposición de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "B92F9D5E-D9ED-4077-828C-25FEFB6F0751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "E950A9CA-E24E-45C4-A771-38AE1B928AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "414E47D7-9E32-4972-BA92-4969250A8179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:intenet_explorer_11:*:*",
            "versionEndIncluding" : "27.0.0.183",
            "matchCriteriaId" : "A4002A3B-F27B-4726-9EF4-B24B4E5AEC0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-10T01:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and STD App 2461 01.00) enables remote attackers to execute door controller commands (e.g., lock, unlock, add ID card value) by sending unauthenticated requests to the affected devices via Serial over TCP/IP, as demonstrated by a Ud command."
      }, {
        "lang" : "es",
        "value" : "El control de acceso incorrecto en AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 y STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 y STD App 2461 01.00) permite que atacantes remotos ejecuten comandos de controlador de puertas (por ejemplo, lock, unlock, add ID card value) mediante el envío de peticiones no autenticadas a los dispositivos afectados mediante Serial por TCP/IP, tal y como demuestra un comando Ud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amag:en-1dbc_firmware:03.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B31B9E-2F5F-4906-B9BD-944AA8C7326C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amag:en-1dbc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549C9CA6-CB0A-476C-B8FF-5FA011DDB3CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amag:std_firmware:03.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDC2299-8EDC-4DDB-9CB3-6B0C0695B834"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amag:std:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACC405-3471-408A-ADAB-86AF96664FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amag:en-2dbc_firmware:03.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDAF16C-D1E0-4EDA-A7B4-F8D79C17B640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amag:en-2dbc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A5D338-FFFC-41BF-9DD6-D41BB3A451CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amag:std_firmware:01.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4353787-C479-406C-B645-2124922DA7EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amag:std:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACC405-3471-408A-ADAB-86AF96664FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lixmk/Concierge",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://hushcon.com/schedule.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.secureworks.com/research/advisory-2017-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lixmk/Concierge",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://hushcon.com/schedule.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.secureworks.com/research/advisory-2017-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-10T20:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC."
      }, {
        "lang" : "es",
        "value" : "La función ucnv_UTF8FromUTF8 en ucnv_u8.cpp en International Components for Unicode (ICU) para C/C++ hasta la versión 60.1 gestiona de manera incorrecta las llamadas ucnv_convertEx para la conversión UTF-8 a UTF-8. Esto permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en pila y cierre inesperado de la aplicación) o, posiblemente, causen otro impacto sin especificar mediante una cadena manipulada, tal y como demuestra ZNC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*",
            "versionEndIncluding" : "60.1",
            "matchCriteriaId" : "1A1E199C-0283-4005-A917-28E7B62394E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/znc/znc/issues/1459",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/attachment/ticket/13490/poc.cpp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/changeset/40714",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/changeset/40715",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/ticket/13490",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/ticket/13510",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/znc/znc/issues/1459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/attachment/ticket/13490/poc.cpp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/changeset/40714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/changeset/40715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/ticket/13490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://ssl.icu-project.org/trac/ticket/13510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-10T22:29:00.217",
      "lastModified" : "2023-11-07T02:41:43.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-10T22:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the \"children of the head\" processing feature is modified in the loop without validating the new value."
      }, {
        "lang" : "es",
        "value" : "En Tidy 5.7.0, la función prvTidyTidyMetaCharset en clean.c permite que atacantes provoquen una denegación de servicio (fallo de segmentación), debido a que la variable currentNode en la característica de procesamiento \"children of the head\" se modifica en el bucle sin validar el nuevo valor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htacg:tidy:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492CCB5E-B6FC-408A-B8A1-DCAD17B2FE9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/htacg/tidy-html5/issues/656",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/htacg/tidy-html5/issues/656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the web interface."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en Integration Matters nJAMS 3 en versiones anteriores a la 3.2.0 Hotfix 7, tal y como se usa en TIBCO BusinessWorks Process Monitor hasta la versión 3.0.1.3 y otros productos, permite que administradores remotos autenticados inyecten scripts web o HTML arbitrarios mediante el panel de gestión de usuarios de la interfaz web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:integrationmatters:njams:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38407470-E3D1-47BD-B51E-14AE09CA7CC1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:businessworks_process_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1.3",
            "matchCriteriaId" : "1F8691CB-B60C-4539-8456-DC8B43626294"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/AxvP1v2Z",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.integrationmatters.com/cms/upload/Resources/nJAMS_SecurityUpdate_CVE-2017-16789.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_njams3_-_cve-2017-16789.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pastebin.com/AxvP1v2Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.integrationmatters.com/cms/upload/Resources/nJAMS_SecurityUpdate_CVE-2017-16789.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_njams3_-_cve-2017-16789.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Integration Matters",
        "comment" : "The reported vulnerability was fixed in version 3.2.0 Hotfix 3 of the affected product. The new version was made available on June-28-2017 to all customers.<br />\nWe encourage all customers to upgrade to at least the mentioned hot fix level. Reference web sites: <br />\nhttps://www.integrationmatters.com/downloads/software/<br />\nhttps://support.integrationmatters.com",
        "lastModified" : "2018-01-18T12:45:02.540"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "WritePNMImage en coders/pnm.c en GraphicsMagick 1.3.26 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap en bit_stream.c MagickBitStreamMSBWrite y cierre inesperado de la aplicación) o, probablemente, causen cualquier otro tipo de impacto mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f1c418ef0260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102158",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/525/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/f1c418ef0260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/525/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.650",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp."
      }, {
        "lang" : "es",
        "value" : "ImageMagick en versiones anteriores a la 6.9.9-24 y versiones 7.x anteriores a la 7.0.7-12 presenta un uso de memoria previamente liberada en Magick::Image::read en Magick++/lib/Image.cpp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.7-12",
            "matchCriteriaId" : "81CA2875-2F5B-47F1-B11D-AA12EBFA2714"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-24",
            "matchCriteriaId" : "FEC98FC3-4BC6-46B5-B119-343C31BC559A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102155",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/8c35502217c1879cb8257c617007282eee3fe1cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/dd96d671e4d5ae22c6894c302e8996c13f24c45a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=33078&sid=5fbb164c3830293138917f9b14264ed1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/8c35502217c1879cb8257c617007282eee3fe1cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/dd96d671e4d5ae22c6894c302e8996c13f24c45a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=33078&sid=5fbb164c3830293138917f9b14264ed1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.697",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file."
      }, {
        "lang" : "es",
        "value" : "ReadRGBImage en coders/rgb.c en GraphicsMagick 1.3.26 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en magick/import.c ImportRGBQuantumType mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/1366f2dd9931",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102164",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/523/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/1366f2dd9931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/523/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file."
      }, {
        "lang" : "es",
        "value" : "WriteOnePNGImage en coders/png.c en GraphicsMagick 1.3.26 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en magick/import.c ImportRGBQuantumType mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/5b8414c0d0c4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102185",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/526/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/5b8414c0d0c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/526/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file."
      }, {
        "lang" : "es",
        "value" : "ReadCMYKImage en coders/cmyk.c en GraphicsMagick 1.3.26 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en magick/import.c ImportCMYKQuantumType mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/a9c425688397",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/521/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/a9c425688397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/521/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file."
      }, {
        "lang" : "es",
        "value" : "ReadGRAYImage en coders/gray.c en GraphicsMagick 1.3.26 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en magick/import.c ImportGrayQuantumType mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/460ef5e858ad",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/522/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.code.sf.net/p/graphicsmagick/code/rev/460ef5e858ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/522/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T02:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage."
      }, {
        "lang" : "es",
        "value" : "ImageMagick en versiones anteriores a la 7.0.7-12 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en coders/png.c Magick_png_read_raw_profile mediante un archivo manipulado, relacionado con ReadOneMNGImage."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-24",
            "matchCriteriaId" : "FEC98FC3-4BC6-46B5-B119-343C31BC559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.7-12",
            "matchCriteriaId" : "81CA2875-2F5B-47F1-B11D-AA12EBFA2714"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T03:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file."
      }, {
        "lang" : "es",
        "value" : "En HDF5 1.10.1, hay una desreferencia de puntero NULL en la función H5O_pline_decode en el archivo H5Opline.c en libhdf5.a. Por ejemplo, h5dump se cerraría inesperadamente cuando alguien abriese un archivo hdf5 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hdfgroup:hdf5:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448E192C-0858-4E4B-8D03-B7684C97EFBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T03:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file."
      }, {
        "lang" : "es",
        "value" : "En HDF5 1.10.1, hay una vulnerabilidad de lectura fuera de límites en la función H5Opline_pline_decode en H5Opline.c en libhdf5.a. Por ejemplo, h5dump se cerraría inesperadamente cuando alguien abriese un archivo hdf5 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndIncluding" : "1.10.1",
            "matchCriteriaId" : "D6A139D8-EA25-44A3-9A7B-67CCE650579E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T03:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file."
      }, {
        "lang" : "es",
        "value" : "En HDF5 1.10.1, hay una vulnerabilidad de lectura fuera de límites en la función H5T_conv_struct_opt en H5Tconv.c en libhdf5.a. Por ejemplo, h5dump se cerraría inesperadamente cuando alguien abriese un archivo hdf5 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hdfgroup:hdf5:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448E192C-0858-4E4B-8D03-B7684C97EFBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T03:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file."
      }, {
        "lang" : "es",
        "value" : "En HDF5 1.10.1, hay una vulnerabilidad de división entre cero en la función H5T_set_loc en el archivo H5T.c en libhdf5.a. Por ejemplo, h5dump se cerraría inesperadamente cuando alguien abriese un archivo hdf5 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hdfgroup:hdf5:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448E192C-0858-4E4B-8D03-B7684C97EFBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T03:29:00.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file."
      }, {
        "lang" : "es",
        "value" : "En HDF5 1.10.1, hay una vulnerabilidad de escritura fuera de límites en la función H5G__ent_decode_vec en H5Gcache.c en libhdf5.a. Por ejemplo, h5dump se cerraría inesperadamente o provocaría otro tipo de impacto sin especificar cuando alguien abriese un archivo hdf5 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hdfgroup:hdf5:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448E192C-0858-4E4B-8D03-B7684C97EFBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T06:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. In other words, a normal user can send requests to a specific URI with the target user's username in an HTTP payload in order to retrieve a key/token and use it to access/update objects belonging to other users. Such objects could be user profiles, tickets, incidents, etc."
      }, {
        "lang" : "es",
        "value" : "En Ivanti Service Desk (anteriormente LANDESK Management Suite) entre las versiones 2016.3 y 2017.3, una referencia directa a objetos no restringida conduce a la referencia/actualización de objetos que pertenecen a otros usuarios. En otras palabras, un usuario normal puede enviar peticiones a un URI específico con el nombre de usuario del usuario objetivo en una carga útil HTTP para recuperar una clave/token y emplearla para acceder/actualizar objetos pertenecientes a otros usuarios. Dichos objetos podrían ser perfiles, tickets, incidentes, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2016.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B26FE2-0C8A-4C51-81CC-90A9C128B0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2017.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41392D7B-D79D-4682-B8D8-0B770FE1C3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2017.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA6FEF1-C2E1-438B-A2A4-C4210E6EB3C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ivanti.com/docs/DOC-66252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/lazyhack3r/439e92419c552b5dc82b2f5e832c8bfb",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://community.ivanti.com/docs/DOC-66252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/lazyhack3r/439e92419c552b5dc82b2f5e832c8bfb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T06:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument."
      }, {
        "lang" : "es",
        "value" : "sensible-browser en sensible-utils en versiones anteriores a la 0.0.11 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto permite que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada, tal y como demuestra un argumento --proxy-pac-file."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensible-utils_project:sensible-utils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.11",
            "matchCriteriaId" : "8E13B72C-3BEE-4516-AF6B-97B7CA42A6DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils/sensible-utils_0.0.11_changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/881767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00012.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3584-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4071",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils/sensible-utils_0.0.11_changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/881767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3584-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T06:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument."
      }, {
        "lang" : "es",
        "value" : "lilypond-invoke-editor en LilyPond en versiones anteriores a la 2.19.80 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto permite que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada, tal y como demuestra un argumento --proxy-pac-file."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lilypond:lilypond:2.19.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0EA6A0-EE84-4596-A9D9-CC16C0CBFB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/881767",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/884136",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/testlilyissues/issues/5243/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugs.debian.org/881767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/884136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/testlilyissues/issues/5243/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T07:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring."
      }, {
        "lang" : "es",
        "value" : "Phabricator, en versiones anteriores a la 2017-11-10, no bloquea las marcas --config y --debugger en el programa hg de Mercurial. Esto permite que atacantes remotos ejecuten código arbitrario empleando la interfaz web de usuario para navegar por una rama cuyo nombre comienza por una subcadena --config= o --debugger=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phacility:phabricator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-11-10",
            "matchCriteriaId" : "587BDB2D-2C29-4B61-87A9-09E8F5276F33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/288704",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://secure.phabricator.com/T13012",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/288704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://secure.phabricator.com/T13012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15708",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-11T15:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version."
      }, {
        "lang" : "es",
        "value" : "En Apache Synapse, no se requiere por defecto autenticación para Java Remote Method Invocation (RMI). Por lo tanto, Apache Synapse 3.0.1 o todas las versiones anteriores (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2 y 1.1.1) permite ataques de ejecución remota de código que pueden realizarse inyectando objetos serializados especialmente manipulados. La presencia de Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) o versiones previas en la distribución Synapse lo hace explotable. Para mitigar este problema, es necesario limitar el acceso RMI solo a usuarios de confianza. La actualización a la versión 3.0.1 eliminará el riesgo de tener dicha versión de Commons Collection. En Synapse 3.0.1, Commons Collection se ha actualizado a la versión 3.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CDE3B8-4925-4432-A392-91FE14E26A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEA6B13-3CAE-4062-9204-039176C4C5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7647E5A8-F6A3-465E-8269-DACD7D69D9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458A586F-9BC5-4B12-8700-9162B1A90516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF877C1-C68B-416D-9F8C-488AC8473625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A110F340-084D-463A-8EF0-48B743EA8741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7ACC01A-13FE-4E89-8C0A-572EE3E3863C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:synapse:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D8CFF0-B33B-4544-BB41-C2A4B373E186"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D5112-4055-4F89-A5B3-0DCB109481B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D262848E-AA24-4057-A747-6221BA22ADF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102154",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/77f2accf240d25d91b47033e2f8ebec84ffbc6e6627112b2f98b66c9%40%3Cdev.synapse.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0fb289cd38c915b9a13a3376134f96222dd9100f1ef66b41631865c6%40%3Ccommits.doris.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-37",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/77f2accf240d25d91b47033e2f8ebec84ffbc6e6627112b2f98b66c9%40%3Cdev.synapse.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0fb289cd38c915b9a13a3376134f96222dd9100f1ef66b41631865c6%40%3Ccommits.doris.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11507",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2017-12-11T16:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en Check_MK en versiones 1.2.8x anteriores a la 1.2.8p25 y versiones 1.4.0x anteriores a la 1.4.0p9. Esto permite que un atacante no autenticado inyecte código HTML o JavaScript arbitrario mediante el parámetro output_format y el parámetro username de intentos de autenticación HTTP basica fallidos, que se devuelve no codificado en una página de error interno del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8092DB19-E0BA-4B15-A0F7-1A3C5231509E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "EFDD2029-57C2-44A7-8A74-996E9B75C9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b10:*:*:*:*:*:*",
            "matchCriteriaId" : "E371EF4B-C98B-4C51-9834-CF438FFCEE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b11:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF6FFAA-2102-44B7-B960-F26A7FD5727A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFC978-8EC9-44ED-A878-7B7E783F46EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3CCAEE-A1F6-4BD2-B2B6-13A47856AB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5E7D5B-E8E6-4999-98FB-C2C5F2070A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD3577-F4F6-4BB4-ACA0-944E29D4CF91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74A6D5-FF40-406F-B333-B579E0025452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "326517F9-5F02-4904-9780-BE8A8E8C0F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "D59191F1-BC21-4561-B096-675541F4C0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0155A1-18A1-4207-B6C6-D05C452469F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "21117E27-5C65-4F56-9C09-A4F970BB53B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2470DF-9ACF-4617-9DDE-21F389A72BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB49A12-5CA7-4ED8-A8C3-DB7F36D9ABD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "1745717B-C28E-4F46-ABCB-E0FF405C838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DFD63E-F095-460A-AEAB-96469916CBA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "08EDA08F-1E24-476F-84AC-7C882F3B269A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEA59F3-F5A1-4568-AA66-120089E8949D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "2B22DEB7-EC72-4F0C-9122-0A79A970E887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB16980-3EEB-43A1-B338-D36E15CC709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1C3599-E105-4908-B3BA-62271631265E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "98308132-2372-4CB0-A480-802C2ECC68F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEE1C41-6C2C-4AF4-B037-120F5A3671D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8116B1-2BC6-49B6-AC40-1DECBAB96EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "E840BCD2-FFA3-4DE8-8AEF-267BC0E51F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "D58D7ACE-21F5-48DF-8504-27724C6037D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "67BBD37F-7591-4230-A583-A133D6449F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D1E69-A1C6-4F3D-9883-ABE3666A4622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "8C61B022-5C8C-467A-B495-4DFB6AED6C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA69A23-76BA-4CC6-B74C-4D0E6B8727C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "C91EEE8B-626F-4BAB-B2BC-FBABECA7D269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "708FA58F-CFB6-4F56-929D-2AFA7D46D937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3D69AC-37D8-44EB-A28D-71512F635308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE11B082-31C3-469E-81E6-546E85B23FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "10C0D1A0-5619-42AE-98F5-0B50AAABC689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "754CA39C-8818-4AB1-9A34-1D5F615268FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3877AA7-4BAF-4C0E-B157-ED2473ACC72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "72598B63-90F9-4E9E-9526-33E7E4349F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "46374508-99AB-45F1-99A6-705CE25CAF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B282B7A3-ECDA-4110-A434-6C7F33564DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA2F31D-CE39-4B20-BAC8-9B3D4D5BFAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B11BD1-1E1A-49C3-AA76-47E255889FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBD03C9-57CD-47B6-A054-BABF063F8819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "B49E4EE5-980B-4774-B449-F299D28449D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD224CB-B9DF-42BB-B488-B7484EABCE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "99935D23-5F86-40D0-AEB7-48966245940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF31D012-B7D8-4218-8DF0-9497287FC3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "0022EF65-24D5-403E-8824-75BC928FC88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "8F375250-FC89-4FEE-BE18-5724136EF89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "91C50D90-64F3-45EF-B5D8-DA689D4FC0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "39911FDF-8755-425E-937C-9AA6E4A3BA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "F490BFD8-0616-4685-9D8A-923265511FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "D007BC56-DEF4-4BB2-89D9-6BF24F167BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "F567D291-1B96-4475-A5B6-191C59162E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:check_mk_project:check_mk:1.4.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "B9820F0D-682C-45DC-AC9C-78F5C75EFE8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mathias-kettner.com/check_mk_werks.php?werk_id=7661",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-20",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://mathias-kettner.com/check_mk_werks.php?werk_id=7661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13070",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-11T16:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro de DLL en QNAP Qsync para Windows (exe) en su versión 4.2.2.0724 y anteriores podría permitir que atacantes remotos ejecuten código arbitrario en máquinas de Windows."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:qsync:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "4.2.2.0724",
            "matchCriteriaId" : "8A126DD2-D615-4E97-B697-F2BAF53D6C45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-08",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16723",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-11T16:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH (running firmware versions prior to 1.99, 2.20, or 2.40). The cross-site scripting vulnerability has been identified, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Cross-Site Scripting en PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485 y PSI-MODEM/ETH (ejecutando firmware en versiones anteriores a la 1.99, 2.20 o 2.40). La vulnerabilidad de Cross-Site Scripting (XSS) se ha identificado, la cual podría permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_basic_232_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081CA4C1-545F-426B-A940-E2CD8B129739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_basic_232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A788C822-BAAE-4B34-89F0-0BAFCAB657EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_uni_422_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F7F87F-6848-4D96-BB43-79506C77BE2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_uni_422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF623AA-5DA9-46B1-AEF1-47DDEC848257"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_bas_485-t_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB35907-990C-4A93-8D7C-FBAA264C0CC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_bas_485-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC84DA94-5FAE-4481-96DA-968F7C5B06FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_com_server_rs232_firmware:1.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D452E08-C6CD-4F2A-85B5-23C985F38CCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_com_server_rs232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA5C995-B9B7-40CE-A144-E00C12579601"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_com_server_rs485_firmware:1.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6ABF4D6-2902-4704-AA2B-E2A914FCE2D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_com_server_rs485:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4E1125-7EFF-49D8-AA0C-FC46EE6D614D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:psi-modem\\/eth_firmware:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C578559C-D404-4AE5-9CBE-3A21C0C243F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:psi-modem\\/eth:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E2511A-53C9-4EA8-9FAF-E5CC01AB3F46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_basic_422_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB3F915-5C96-4A1A-AC9F-78BECE280BA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_basic_422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3EC5C98-27C1-46E9-B121-6C9401F832AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_basic_485_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2124E060-3182-49A0-A7F7-C0861868C99E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_basic_485:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24B76B3-709D-44F0-B617-257181D6CDCF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_uni_485-t_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C821C1CE-0A18-41C8-813C-E6763D7DBC01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_uni_485-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C42753-9D0D-4174-BB62-6F4B590CBC14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_uni_485_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B0C8E5-D36C-404A-8355-C49B7FC107CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_uni_485:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1870C39-50CD-4206-A6DF-2694651767AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_uni_232_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DBAC3DD-245E-4092-97CB-F0F5F966382C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_uni_232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE602B3C-A730-4DB9-B12B-81540D7E6C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_bas_422_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D984EA9-7C6E-424B-B3A7-42E7CA192E23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_bas_422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C95904-C8C1-4F1D-B844-F36849FA8EA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_comserver_bas_232_firmware:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11EA5BED-B64E-404A-8614-AFF644B8BB63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_comserver_bas_232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE9C2BC-397C-4A2F-9F66-130A50076781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102111",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert.vde.com/de-de/advisories/vde-2017-004",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-341-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert.vde.com/de-de/advisories/vde-2017-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-341-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms."
      }, {
        "lang" : "es",
        "value" : "Perspective ICM Investigation Case 5.1.1.16 permite que usuarios autenticados remotos modifiquen los permisos de nivel de acceso y, consecuentemente, obtengan privilegios aprovechando la insuficiencia de los métodos de validación y la falta de mecanismos de comprobaciones de servidores cruzados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resolver:perspective:5.1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8653CB-7902-42E2-947B-43F473102986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43210/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43210/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving \"image path execution hijacking.\""
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks GlobalProtect Agent en versiones anteriores a la 4.0.3 permite que atacantes con permisos de administración en la estación local obtengan privilegios SYSTEM mediante vectores relacionados con \"image path execution hijacking\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:mac_os_x:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "A82EF876-A5E2-4693-BECF-288BACFA5756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102083",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El componente de gestión de captura de paquetes de la interfaz web en Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.19; versiones 7.0.x anteriores a la 7.0.19; versiones 7.1.x anteriores a la 7.1.14 y versiones 8.0.x anteriores a la 8.0.6 permite que usuarios autenticados remotos ejecuten código arbitrario mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.19",
            "matchCriteriaId" : "D9199DB2-573F-4086-A0C0-FEBBD1650B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.19",
            "matchCriteriaId" : "20F87408-643D-463F-A324-869E18B1A284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.14",
            "matchCriteriaId" : "D6D96D17-3C39-46B2-A5B8-8715A4C2B213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.6",
            "matchCriteriaId" : "76408D65-38FD-413E-B022-5042D3F80336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102076",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040006",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.19; versiones 7.0.x anteriores a la 7.0.19; versiones 7.1.x anteriores a la 7.1.13 y versiones 8.0.x anteriores a la 8.0.6 permite que atacantes remotos provoquen una denegación de servicio (DoS) mediante vectores relacionados con la interfaz de gestión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.19",
            "matchCriteriaId" : "D9199DB2-573F-4086-A0C0-FEBBD1650B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.19",
            "matchCriteriaId" : "20F87408-643D-463F-A324-869E18B1A284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.13",
            "matchCriteriaId" : "C5C47987-CBAC-4994-89EE-073A38632113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.6",
            "matchCriteriaId" : "76408D65-38FD-413E-B022-5042D3F80336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102075",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040004",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities."
      }, {
        "lang" : "es",
        "value" : "La importación de archivos de configuración para las funcionalidades de objetos de aplicaciones, spyware y vulnerabilidades en la interfaz web en Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.19; versiones 7.0.x anteriores a la 7.0.19 y versiones 7.1.x anteriores a la 7.1.14 permite que atacantes remotos lleven a cabo ataques de SSRF (Server-Side Request Forgery) y, consecuentemente, obtengan información sensible mediante vectores relacionados con el análisis sintáctico de entidades externas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.19",
            "matchCriteriaId" : "D9199DB2-573F-4086-A0C0-FEBBD1650B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.19",
            "matchCriteriaId" : "20F87408-643D-463F-A324-869E18B1A284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.14",
            "matchCriteriaId" : "D6D96D17-3C39-46B2-A5B8-8715A4C2B213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040005",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.490",
      "lastModified" : "2025-10-22T00:16:05.023",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.19; versiones 7.0.x anteriores a la 7.0.19; versiones 7.1.x anteriores a la 07/01/2014 y versiones 8.0.x anteriores a la 8.0.6 permite que atacantes remotos ejecuten código arbitrario mediante vectores relacionados con la interfaz de gestión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-08-18",
      "cisaActionDue" : "2022-09-08",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.19",
            "matchCriteriaId" : "D9199DB2-573F-4086-A0C0-FEBBD1650B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.19",
            "matchCriteriaId" : "20F87408-643D-463F-A324-869E18B1A284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.14",
            "matchCriteriaId" : "D6D96D17-3C39-46B2-A5B8-8715A4C2B213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.6",
            "matchCriteriaId" : "76408D65-38FD-413E-B022-5042D3F80336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102079",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040007",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43342/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44597/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43342/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44597/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-15944",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request."
      }, {
        "lang" : "es",
        "value" : "Techno Portfolio Management Panel 1.0 permite que un atacante inyecte comandos SQL mediante una petición single.php?id=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_-_portfolio_management_panel_project:techno_-_portfolio_management_panel:2017-11-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EC5B41-2C4C-494E-88B1-F73D06070C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145231/Techno-Portfolio-Management-Panel-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43211/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145231/Techno-Portfolio-Management-Panel-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43211/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T17:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request."
      }, {
        "lang" : "es",
        "value" : "Posty Readymade Classifieds Script 1.0 permite que un atacante inyecte comandos SQL mediante una petición listings.php?catid= o ads-details.php?ID=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scubez:posty_readymade_classifieds:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A0D91A-AB50-4306-8714-F4B6AA3AB4B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scubez:posty_readymade_classifieds:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A0D91A-AB50-4306-8714-F4B6AA3AB4B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145237/Readymade-Classifieds-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43212/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145237/Readymade-Classifieds-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43212/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T18:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability allows an attacker to overwrite a specific executable in the Dolphin Browser's data directory with a crafted malicious executable. Every time the Dolphin Browser is launched, it will attempt to run the malicious executable from disk, thus executing the attacker's code."
      }, {
        "lang" : "es",
        "value" : "La característica Backup and Restore en Mobotap Dolphin Browser 12.0.2 para Android tiene una vulnerabilidad de escritura de archivos arbitrarios cuando intenta restaurar la configuración del navegador de un archivo de copia de seguridad de Dolphin Browser malicioso. Esta vulnerabilidad de escritura de archivos arbitrarios permite que un atacante sobrescriba un ejecutable específico en el directorio de datos de Dolphin Browser con un ejecutable manipulado malicioso. Cada vez que se inicia Dolphin Browser, intentará abrir el ejecutable desde el disco. Por lo tanto, se ejecutará el código del atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changyou:dolphin:12.0.2:*:*:*:*:android:*:*",
            "matchCriteriaId" : "24474279-C36C-41C9-BFAE-2CB095DBC35F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T21:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux en versiones 2.6.32 y posteriores se ha visto afectado por una denegación de servicio (DoS): al inundar el puerto de diagnóstico 0x80 puede ocurrir una excepción que conduce a una situación de pánico del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28F9AF-3D06-4532-B397-96D7E4792503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.32",
            "versionEndExcluding" : "4.15",
            "matchCriteriaId" : "1DCA55E8-CDA6-4F6D-A94E-D9043550A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EF6556-06A6-4700-B61F-533167096BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "69A04496-EA26-42E0-A553-413BF2A78AD7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/04/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102038",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-1000407",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg159809.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/04/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-1000407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg159809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1507",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation Products podría revelar información sensible durante un escaneo que podría conducir a más ataques contra el sistema. IBM X-Force ID: 129619."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443530AE-4F33-4453-826A-8D705DFB7C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364E7E8D-D988-4546-9E61-CD2D1A6F0728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0AA277-39E7-441C-9AF2-18848FD4C9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4938F063-34AF-4C5F-AF43-534C3D052720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902033E-35AB-4358-9D07-AF8C59A9621A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F2747-175E-4B85-9020-162F019860EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B31F581-9E7A-4882-A915-FE4784FDC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7E81B-DA97-4545-9C78-962E5FE9202D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D790D42-7B73-40A6-BF0E-630099FB97E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABBECCB-F0B9-4D45-9372-6F313F841FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DF445D-E457-4FA5-A2BE-F05828F8F799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CE1A44-9F74-4405-AAB4-E38487FBD91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29160905-BBD7-486C-A4E0-5778717389E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A538D21-6F83-4F01-AB4F-788A89F922CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6472E-AC94-431C-B8EA-8A3ED1828E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B323BB-9966-4BBF-B5EE-44CD9A769A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C98336-97F8-4263-A801-D6F5673CB17A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0477D24-56F7-46A2-A08A-C20A90E6E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0514FAC-52CE-41F6-B255-E2D83E71F3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746190AA-6D21-446F-80F5-4C98F5BF74A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08125E1B-FE2B-436C-A69F-067BC1B5C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2431038-D838-4AB0-B614-EDC1D4D203E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CE7D3E-BF02-44DA-ADAE-5CB0E22492AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46883130-F370-406C-A8E8-213399F2EE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13CE71-BEC0-4DEC-9CF7-183672F6729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2451D-F31E-4CF6-8E61-2970A4FB174D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAF452F-94AB-4857-BCD6-AE5251C61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596E71E-4507-4EFC-ABF9-41D8FD338CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B201E3D-1028-4955-AFE2-AF8C14CAA182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C966E0-6372-4CA5-902E-DEE17FC139E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12D7433-30F0-427F-BF82-0AAD492CE35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF2E53-3618-4610-AC36-602584DB26EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF978C93-8747-416A-890B-09575EF0BA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BEB8AD-ACD5-4F5B-8C95-8C1EA8BFE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57DF8BD-34A6-481A-902A-8E1D190201FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B450B35-5169-4B41-B928-0F22DF55A28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1DD60E-3E2C-4F42-9892-B031CB3B570D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6504477B-9BF5-49F6-8E3A-9B07B30895B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C4948B-69C4-4CAF-808E-426483ED0622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C297440-406F-4508-9D8D-92F79DF91C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C416F89-7E5E-4FE7-A532-F13843AA1771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2654BDE-3134-4653-B472-995B02E9B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9800CBFC-3169-42CA-BB36-22C34F222FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A61935D-D657-4DD8-936D-D9D956F49131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4A9A99-C26E-4476-934E-24AADFBDB8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22AC9CB-44C3-43E1-B29A-3D06A421E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51998570-6EFF-436C-9297-601B17A31788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D944BB64-73C5-402C-9D14-077B8FC9DB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010627",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129619",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1536",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733."
      }, {
        "lang" : "es",
        "value" : "IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 y 9.0) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130733."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853E2D77-FE89-4F4E-9C06-861BB3385B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE1E2EF-A079-4A67-AA50-0712D2E330F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97CDB5F-2EA4-41E8-857B-5D76004C60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC1C53-61B8-41EC-B99D-1100D29F3992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008031",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102183",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130733",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1548",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 131288."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway 2.2 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias \"punto punto\" (/../) para visualizar archivos arbitrarios en el sistema. IBM X-Force ID: 131288."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1554D69E-D68E-46CA-B1F7-C24CAABF58E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010738",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102187",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131288",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1549",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway 2.2 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131289."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1554D69E-D68E-46CA-B1F7-C24CAABF58E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010759",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102037",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131289",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1550",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway 2.2 podría permitir que un usuario autenticado cambie las contraseñas de otros usuarios. IBM X-Force ID: 131290."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1554D69E-D68E-46CA-B1F7-C24CAABF58E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010758",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102184",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131290",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15896",
      "sourceIdentifier" : "cve-request@iojs.org",
      "published" : "2017-12-11T21:29:00.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption."
      }, {
        "lang" : "es",
        "value" : "Node.js se ha visto afectado por una vulnerabilidad de OpenSSL (CVE-2017-3737) en relación con el uso de SSL_read() debido a un error en la negociación TLS. El resultado era que un atacante de una red activa podría enviar datos de la aplicación a Node.js empleando los módulos TLS o HTTP2 de forma que omitan la autenticación y codificación TLS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "A47FC4F7-1F77-4314-B4B3-3C5D8E335379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.8.7",
            "matchCriteriaId" : "3818E441-8DC4-42E6-8D11-E58D195CBE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.8.1",
            "matchCriteriaId" : "D107EC29-67E7-40C3-8E5A-324C9105C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.12.2",
            "matchCriteriaId" : "BEA03114-7288-4E7C-9220-C0ABCD5F0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "74FB695D-2C76-47AB-988E-5629D2E695E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "8.9.0",
            "versionEndExcluding" : "8.9.3",
            "matchCriteriaId" : "C45E9D50-CD3D-480B-B9B8-451ADFF26505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.1",
            "matchCriteriaId" : "82FDBB10-3298-4C9A-9CC0-D34643AEC868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
        "source" : "cve-request@iojs.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15897",
      "sourceIdentifier" : "cve-request@iojs.org",
      "published" : "2017-12-11T21:29:00.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, \"This is not correctly encoded\", \"hex\");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases."
      }, {
        "lang" : "es",
        "value" : "Node.js tenía un bug en las versiones 8.X y 9.X que provocaba que los búfers no se inicializasen cuando la codificación para el valor de relleno no coincidía con la codificación especificada. Por ejemplo, \"Buffer.alloc(0x100, \"This is not correctly encoded\", \"hex\");\" La implementación del búfer se actualizó de tal forma que el búfer se inicializará con todo ceros en esos casos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "74FB695D-2C76-47AB-988E-5629D2E695E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "8.9.0",
            "versionEndExcluding" : "8.9.3",
            "matchCriteriaId" : "C45E9D50-CD3D-480B-B9B8-451ADFF26505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.1",
            "matchCriteriaId" : "82FDBB10-3298-4C9A-9CC0-D34643AEC868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
        "source" : "cve-request@iojs.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1606",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 132926."
      }, {
        "lang" : "es",
        "value" : "IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) en versiones 3.0.0.0 hasta la 3.0.0.7 es vulnerable a una inyección SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 132926."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD984921-7567-4A54-B23C-40D5250114DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C86EED-775D-432C-8A61-F48DA9C24141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8EAF4A-4E1B-4A72-ACFB-C4AA57A0022D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2494FAE-330D-4B5C-A8FE-2AC1360B5346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E73AD5-25AC-4DA2-937F-9F49B4F541C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9BE993-EE68-4241-BD18-7CEBF07B9E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBD5522-4BB4-4E61-9F13-CBED919E8938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F523B22-1C7E-4211-A481-F855BD7E6A55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011179",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102049",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132926",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1613",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to non-sensitive Engagement Center template data. IBM X-Force ID: 132954."
      }, {
        "lang" : "es",
        "value" : "IBM Connections 6.0 podría permitir que un atacante remoto no autenticado obtenga acceso sin autenticar o sin autorizar a datos de la plantilla de Engagement Center no sensibles. IBM X-Force ID: 132954."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8200F7F9-94B4-4F72-82F0-E4AFC5D49CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010690",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102051",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132954",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1632",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling File Gateway 2.2 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133178."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1554D69E-D68E-46CA-B1F7-C24CAABF58E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010549",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102191",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133178",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1683",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.720",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134005."
      }, {
        "lang" : "es",
        "value" : "IBM Connections Engagement Center 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134005."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections_engagement_center:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA986F43-A55F-42DB-9539-3319761124E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010690",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102051",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134005",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1760",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-11T21:29:00.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. IBM X-Force ID: 126454."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 7.5, 8.0 y 9.0 podría permitir que un usuario local provoque el cierre inesperado del hilo del agente del gestor de cola y exponer información sensible. IBM X-Force ID: 126454."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164DC456-433C-4C47-91F9-1B57C2DFBF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0343E94F-6DE2-4E27-AFC5-D4650A4519F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA4EE08-D531-4957-BF2A-C5A9ABB0F38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BF695-E27A-4D9F-9190-84A7BCD5E268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1EF24-9710-4C4A-8059-917C02185CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC257545-44A3-4659-951D-F4DFF3B87CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD4E86C-0E58-4A91-A18C-534464BC197A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4B1F7A-8989-4B4E-A75E-037B38ED7536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FEC2B-14F4-48EF-A7D2-DA4451EBD402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018595DD-9AAD-44C7-9A46-BC78AF1F6C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005392",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126454",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T21:29:00.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device."
      }, {
        "lang" : "es",
        "value" : "Los juguetes inteligentes CogniToys Dino de Elemental Path hasta la versión de firmware 0.0.794 no proporcionan protecciones suficientes contra ataques de captura por reproducción. Esto permite que un atacante en la red reproduzca el tráfico VoIP entre un dispositivo Dino y el servidor remoto a cualquier otro dispositivo Dino."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cognitoys:stemosaur_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.794",
            "matchCriteriaId" : "88EDB973-E374-4A07-985D-EA8138D2ECBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cognitoys:stemosaur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8C9518-FB3F-4DD6-841F-D653B70470D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.acm.org/citation.cfm?id=3139947",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://dl.acm.org/citation.cfm?id=3139947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T21:29:00.827",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server."
      }, {
        "lang" : "es",
        "value" : "Los juguetes inteligentes CogniToys Dino de Elemental Path hasta la versión de firmware 0.0.794 comparten un pequeño grupo fijo de claves embebidas. Esto permite que un atacante remoto emplee un dispositivo Dino diferente para descodificar el tráfico VoIP entre el Dino de un niño y el servidor remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cognitoys:stemosaur_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.794",
            "matchCriteriaId" : "88EDB973-E374-4A07-985D-EA8138D2ECBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cognitoys:stemosaur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8C9518-FB3F-4DD6-841F-D653B70470D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.acm.org/citation.cfm?id=3139947",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://dl.acm.org/citation.cfm?id=3139947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-11T21:29:00.860",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a malicious user to map encrypted traffic to a particular AES key index and gaining further access to eavesdrop on privacy-sensitive voice communication of a child and their Dino device."
      }, {
        "lang" : "es",
        "value" : "Los juguetes inteligentes CogniToys Dino de Elemental Path hasta la versión de firmware 0.0.794 emplean AES-128 con modo ECB para codificar el tráfico de voz entre el dispositivo y el servidor remoto. Esto permite que un usuario malicioso asigne tráfico codificado a un índice de claves AES particular y obtenga un mayor acceso para espiar la comunicación por voz sensible para la privacidad entre un niño y su dispositivo Dino."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cognitoys:stemosaur_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.794",
            "matchCriteriaId" : "88EDB973-E374-4A07-985D-EA8138D2ECBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cognitoys:stemosaur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8C9518-FB3F-4DD6-841F-D653B70470D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.acm.org/citation.cfm?id=3139947",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://dl.acm.org/citation.cfm?id=3139947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2886",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2017-12-11T22:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria en la funcionalidad de análisis sintáctico de archivos .PSD de ACDSee Ultimate 10.0.0.292. Un archivo .PSD especialmente manipulado podría provocar una vulnerabilidad de escritura fuera de límites, desembocando en una posible ejecución de código. Un atacante puede enviar un archivo .PSD específico para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acdsee:ultimate:10.0.0.292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF5D03C-1592-4134-B494-F539F091E5C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102133",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0393",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T00:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser."
      }, {
        "lang" : "es",
        "value" : "Dolphin Browser 12.0.2 para Android tiene una implementación insegura del análisis sintáctico de la combinación de la intent del URI. Esta vulnerabilidad podría permitir que atacantes abusasen de esta implementación mediante una intent de URI para invocar actividades privadas en el Dolphin Browser."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changyou:dolphin:12.0.2:*:*:*:*:android:*:*",
            "matchCriteriaId" : "24474279-C36C-41C9-BFAE-2CB095DBC35F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-002.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-002.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T01:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función aubio_source_avcodec_readframe en io/source_avcodec.c en aubio 0.4.6, que podría llevar a DoS al reproducir un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aubio:aubio:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6B8243-7020-49C0-B599-F69F3CE6705C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20%20aubio_source_avcodec_readframe%20of%20aubio.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20%20aubio_source_avcodec_readframe%20of%20aubio.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T01:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función swri_audio_convert en audioconvert.c en FFmpeg libswresample hasta 3.0.101, tal y como se emplea en FFmpeg 3.4.1, aubio 0.4.6 y otros productos, permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación) mediante un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aubio:aubio:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6B8243-7020-49C0-B599-F69F3CE6705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CB354E-5D72-467C-AA98-F7DB2BB79191"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:libswresample:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.101",
            "matchCriteriaId" : "75069034-B429-4F7F-95E9-1300706D0822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16678",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Server Side Request Forgery (SSRF) en SAP NetWeaver Knowledge Management Configuration Service, EPBC y EPBC2 desde la versión 7.00 hasta la 7.02 y KMC-BC 7.30, 7.31, 7.40 y 7.50, que permite que un atacante manipule la aplicación vulnerable para que envíe peticiones manipuladas en nombre de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management_configuration_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675BFE11-5E88-402C-863D-71F7A879201A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:epbc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.00",
            "versionEndIncluding" : "7.02",
            "matchCriteriaId" : "D9D3A6EA-0E15-4F33-B281-664837B68166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:epbc2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.00",
            "versionEndIncluding" : "7.02",
            "matchCriteriaId" : "C13F5F2E-3908-4D44-9947-0E66F02ACB3F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:kmc-bc:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37EE16A4-4E4F-4670-A66D-C83091B622CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:kmc-bc:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9ECC26B-B53B-431F-85A2-BD85A7CC6DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:kmc-bc:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F149B-7BF5-4D71-8B60-4D2AB70B5424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:kmc-bc:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AE82C-77F9-4DB8-8DA0-92FD6A1A4F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102149",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2457562",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2457562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16679",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección de URL en SAP Startup Service; SAP KERNEL 32 NUC; SAP KERNEL 32 Unicode; SAP KERNEL 64 NUC; SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 y 7.22EXT y SAP KERNEL 7.21, 7.22, 7.45, 7.49 y 7.52, que permite que un atacante redirija usuarios a un sitio malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157D157A-6B01-478F-A7B9-D0FAD0636DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.21ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A2F363-A557-429E-97B2-0DFBC93F2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB51CE2C-7E65-4214-B14B-19593BE9F26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41CD116-6BDD-432D-A194-316AB42A6ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42A1C8B-C830-4DA0-BEE6-04E3FF744FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF72873D-9926-40CA-B33E-8AF0FAAFF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sap:sap_kernel:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D5F7BF-A95A-49AE-A962-DBF53181E2E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102157",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2520995",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2520995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16680",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Two potential audit log injections in SAP HANA extended application services 1.0, advanced model: 1) Certain HTTP/REST endpoints of controller service are missing user input validation which could allow unprivileged attackers to forge audit log lines. Hence the interpretation of audit log files could be hindered or misdirected. 2) User Account and Authentication writes audit logs into syslog and additionally writes the same audit entries into a log file. Entries in the log file miss escaping. Hence the interpretation of audit log files could be hindered or misdirected, while the entries in syslog are correct."
      }, {
        "lang" : "es",
        "value" : "Dos potenciales inyecciones de registro de auditoria en los servicios de aplicación extendidos de SAP HANA 1.0, modelo avanzado: 1) Algunos extremos HTTP/REST del servicio del controlador no cuentan con validación de entradas de usuario. Esto podría permitir que atacantes sin privilegios falsifiquen líneas del registro de auditoría. Por consiguiente, podría entorpecerse o dirigirse erróneamente la interpretación de los archivos de registro de auditoría. 2) User Account y Authentication escriben registros de auditoría en syslog y, adicionalmente, escribe las mismas entradas de auditoría en un archivo de registro. A las entradas en el archivo de registro les falta el escape. Por lo tanto, podría entorpecerse o dirigirse erróneamente la interpretación de los archivos de registro de auditoría, aunque las entradas en syslog sean correctas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_extended_application_services:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F314AEB2-7F5C-4CD8-8DD5-359B75FCD9C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102138",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2522510",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2522510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16681",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20 y 4.30, ya que las entradas controladas por el usuario no se codifican lo suficiente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_intelligence_promotion_management_application:4.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7425257C-385E-43F1-9786-16B2B157E3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_intelligence_promotion_management_application:4.20:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA035731-F395-486D-A354-A0433C84A7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_intelligence_promotion_management_application:4.30:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EBAE26DF-829B-4DB2-AE66-E7B094C14BA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102142",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2523913",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2523913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16682",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Internet Transaction Server (ITS), SAP Basis desde la versión 7.00 hasta la 7.02, 7.30, 7.31 y 7.40 y desde la versión 7.50 hasta la 7.52, permite que un atacante con credenciales de administrador inyecte código que puede ser ejecutado por la aplicación y así controlar el comportamiento de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_internet_transaction_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD79C3-7B56-4065-B2B3-8FC54EB46CF0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.00",
            "versionEndIncluding" : "7.02",
            "matchCriteriaId" : "CF38D1E1-E07F-4E51-AE76-E27E7CE4F55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.50",
            "versionEndIncluding" : "7.52",
            "matchCriteriaId" : "D90BE6E0-559E-4509-95EA-CB820611E16D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990D5985-7828-4D8C-9463-CA077AB3881E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341C07C1-2B4A-475D-B200-1021EB6B1F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D80CC30-EE05-439F-BF2C-1267837137DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102143",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2526781",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2526781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16683",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a service."
      }, {
        "lang" : "es",
        "value" : "Denegación de servicio (DoS) en SAP Business Objects Platform, Enterprise 4.10 y 4.20, que podría permitir que un atacante evite que usuarios legítimos accedan a un servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects:4.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7ADB0FE4-5D58-48A6-AD46-313BC180D286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects:4.20:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5F12136F-1B99-4008-BB16-0BD933B09A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102146",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2531656",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2531656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16684",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity."
      }, {
        "lang" : "es",
        "value" : "SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20 y 4.30, no realiza comprobaciones de autenticación para funcionalidades que requieren la identidad del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_intelligence_promotion_management_application:4.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7425257C-385E-43F1-9786-16B2B157E3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_intelligence_promotion_management_application:4.20:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FA035731-F395-486D-A354-A0433C84A7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_intelligence_promotion_management_application:4.30:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EBAE26DF-829B-4DB2-AE66-E7B094C14BA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102147",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2537152",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2537152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16685",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site scripting (XSS) in SAP Business Warehouse Universal Data Integration, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to insufficient encoding of user controlled inputs."
      }, {
        "lang" : "es",
        "value" : "Cross-Site scripting (XSS) en SAP Business Warehouse Universal Data Integration, desde la versión 7.10 hasta la 7.11, 7.20, 7.30, 7.31, 7.40 y 7.50, debido a la codificación insuficiente de entradas controladas por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBA2913-7FFE-4B08-9A1D-90460796E996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272AA3C7-2D5C-473B-A61E-E5B304639373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4CC294-A71E-4CC8-BAE9-ED90B6E7F581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7B02D5-409A-421D-937E-37054084B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27888D53-69EB-49BE-979B-F67E5296B917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5507BE7D-90F6-433F-9674-853760D32020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse_universal_data_integration:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6857312D-673B-476F-9335-70CCE1905DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102148",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2537545",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2537545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16687",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username is valid."
      }, {
        "lang" : "es",
        "value" : "Las herramientas de autoservicio del usuario de los servicios extendidos de la aplicación SAP HANA, que forman parte de SAP HANA Database en sus versiones 1.00 y 2.00, pueden ser empleadas erróneamente para enumerar cuentas de usuario válidas e inválidas. Un usuario no autenticado podría emplear los mensajes de error para determinar si un nombre de usuario dado es válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_database:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C05CB-315F-465C-8C25-EF85AA7D19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6CA542-7071-48B6-B135-3AE9B4BB1DC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102152",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2549983",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2549983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16689",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL from 7.21 to 7.22, 7.45, 7.49, can be established to a different client or a different user on the same system, although no explicit Trusted/Trusting Relation to the same system has been defined."
      }, {
        "lang" : "es",
        "value" : "Una conexión RFC fiable en SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL desde la versión 7.21 hasta la 7.22, 7.45, 7.49, puede establecerse para un cliente o usuario diferentes en el mismo sistema aunque no se haya definido una relación Trusted/Trusting explícita con el mismo sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DB2B37-EC52-4FE6-9861-A98A9E365B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.21ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "168D38D8-CE37-4FF4-B089-DCBB0D5A3387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D1ECE8-0465-4B82-A0B7-BC55438FFC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56247321-E033-4097-A176-BE71DEBD5920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517E04CB-B712-477E-8F64-B35F9D0D932B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018F8061-43B6-4F29-B914-C779569C58CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102144",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2449757",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2449757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16690",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAPSetup / NwSapSetup.exe loads system DLLs like DWMAPI.dll (located in your Syswow64 / System32 folder) from the folder the executable is in and not from the system location. The desired behavior is that system dlls are only loaded from the system folders. If a dll with the same name as the system dll is located in the same folder as the executable, this dll is loaded and code is executed."
      }, {
        "lang" : "es",
        "value" : "Es posible un ataque de precarga de DLL malicioso en NwSapSetup y en el programa autoextraíble de instalación para SAP Plant Connectivity 2.3 y 15.0. Es posible que SAPSetup/NwSapSetup.exe cargue DLL del sistema como DWMAPI.dll (ubicado en la carpeta Syswow64/System32) desde la carpeta en la que se encuentra el ejecutable en lugar de desde la ubicación del sistema. El comportamiento deseable es que los dll del sistema solo se carguen desde las carpetas del sistema. Si un dll con el mismo nombre que el dll del sistema está ubicado en la misma carpeta que el ejecutable, se carga este dll y se ejecuta código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:plant_connectivity:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E09741C-6F09-49D9-B7B9-CAA281A4E6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:plant_connectivity:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA72890-BA1B-4103-ACB4-E5DAB7D6198D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102145",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2529480",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2529480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16691",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2017-12-12T14:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Note Assistant tool (SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52) supports upload of digitally signed note file of type 'SAR'. The digital signature verification is done together with the extraction of note file contained in the SAR archive. It is possible to append a tampered file to the SAR archive using SAPCAR tool and during the extraction, digital signature verification fails but the tampered file is extracted."
      }, {
        "lang" : "es",
        "value" : "\"La herramienta SAP Note Assistant \nSAP Note Assistant tool (SAP BASIS desde la versión 7.00 hasta la 7.02; desde la versión 7.10 hasta la 7.11, 7.30, 7.31 y 7.40 y desde la versión 7.50 hasta la 7.52) es compatible con la subida de archivos note firmados digitalmente de tipo \"\"SAR\"\". La verificación de firma digital se realiza conjuntamente con la extracción del archivo note contenido en el archivo SAR. Es posible anexar un archivo falsificado al archivo SAR empleando la herramienta SAPCAR. Durante la extracción, la verificación de firma digital fracasa, pero el archivo falsificado se extrae.\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E134E2C-5C0D-40D7-AB0F-A38CAAC4D9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D7FB26-58C9-45A9-979D-62F42D75B294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE21E08-659C-46FD-A727-AF0A0F2FCD00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F8C457-3B41-4FAB-80BF-8C34C41B9590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEF9CCF-90F4-4CE0-839C-B4FA32AAD434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990D5985-7828-4D8C-9463-CA077AB3881E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341C07C1-2B4A-475D-B200-1021EB6B1F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D80CC30-EE05-439F-BF2C-1267837137DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8774E4DD-6F98-4DAF-9BDF-FDA00D542798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B23697-D4DC-44B0-B430-F15F0F6BCB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_application_software_integrated_solution:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF9B1FD-826E-4DF2-ABED-4D9D093910AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101822",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "cna@sap.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2546220",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2546220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T15:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device."
      }, {
        "lang" : "es",
        "value" : "La función usb_destroy_configuration en drivers/usb/core/config.c en el subsistema del núcleo USB en el kernel de Linux hasta la versión 4.14.5 no considera el máximo número de configuraciones e interfaces antes de intentar liberar recursos. Esto permite que usuarios locales provoquen una denegación de servicio (acceso de escritura fuera de límites) o, posiblemente, tengan otro tipo de impacto sin especificar mediante un dispositivo USB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.5",
            "matchCriteriaId" : "3775142E-8FB2-450A-98BC-B61DD3C99007"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:extra:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1AEFA5-9D43-4DD2-9088-7B37D5F220C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/12/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163644.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/12/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163644.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en los dispositivos Western Digital MyCloud PR4100 2.30.172. El componente de administración web, /web/jquery/uploader/multi_uploadify.php, proporciona una funcionalidad de subida multiparte accesible sin autenticación. Esta característica puede emplearse para colocar un archivo en cualquier parte del sistema de archivos del dispositivo. Esto permite que un atacante pueda subir un shell PHP en el dispositivo y ejecutar código arbitrario como root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:2.30.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46F01D7-29EE-4A9E-907C-A820C100955C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0C2FD9-4792-4DA2-9698-E53109A499EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.exploitee.rs/file/generic/Exploiteers-DEFCON25.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9248",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43356/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://download.exploitee.rs/file/generic/Exploiteers-DEFCON25.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43356/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T18:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with data/admin/ping.php."
      }, {
        "lang" : "es",
        "value" : "SeaCMS 6.56 permite que administradores autenticados remotos ejecuten código PHP arbitrario mediante un campo de token manipulado en admin/admin_ping.php, que interactúa con data/admin/ping.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seacms_project:seacms:6.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8BE6BC-FFBD-44B7-B7E9-32D98903864F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.jianshu.com/p/35af80b97ee6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/WangYihang/9507e2efdceb67a5bc2761200f19f213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.jianshu.com/p/35af80b97ee6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/WangYihang/9507e2efdceb67a5bc2761200f19f213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T19:29:00.207",
      "lastModified" : "2025-10-22T00:16:05.330",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0."
      }, {
        "lang" : "es",
        "value" : "Embedthis GoAhead en versiones anteriores a la 3.6.5 permite la ejecución remota de código si CGI está habilitado y se enlaza dinámicamente un programa CGI. Esto es el resultado de inicializar el entorno de scripts CGI bifurcados empleando parámetros de petición HTTP no fiables en la función cgiHandler en cgi.c. Al combinarse con el enlazador dinámico glibc, se puede abusar de este comportamiento para ejecutar código de manera remota mediante nombres de parámetro especiales como LD_PRELOAD. Un atacante puede realizar POST con su carga útil de objeto compartido en el cuerpo de la petición y referenciarla empleando /proc/self/fd/0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-12-10",
      "cisaActionDue" : "2022-06-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Embedthis GoAhead Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "C4A4F059-2004-44EE-9E6D-2DD0EAB2C2EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:integrated_lights_out_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB44C83-4B33-49BF-9610-90203176FD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:integrated_lights_out_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8150F44B-7603-4F06-96B9-265B9BC5C751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040702",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/elttam/advisories/tree/master/CVE-2017-17562",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/commit/6f786c123196eb622625a920d54048629a7caa74",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/issues/249",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.elttam.com.au/blog/goahead/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43360/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43877/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/elttam/advisories/tree/master/CVE-2017-17562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/commit/6f786c123196eb622625a920d54048629a7caa74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/issues/249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.elttam.com.au/blog/goahead/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43360/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43877/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-17562",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12155",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-12-12T20:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de permisos de recursos en el paquete openstack-tripleo-heat-templates donde se crea ceph.client.openstack.keyring con el permiso world-readable. Un atacante local con acceso a la clave podría leer o modificar datos en los pools de memoria del clúster de Cepth para OpenStack como si el atacante fuera el servicio OpenStack, pudiendo leer o modificar datos en un volumen de OpenStack Block Storage."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ceph:ceph:-:*:*:*:*:openstack:*:*",
            "matchCriteriaId" : "5CF5A09E-C354-401D-8415-B6BA994C857E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1593",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1627",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.launchpad.net/tripleo/+bug/1720787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/tripleo/+bug/1720787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1489360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5717",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2017-12-12T20:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access."
      }, {
        "lang" : "es",
        "value" : "Confusión de tipos en Content Protection HECI Service en Intel Graphics Driver permite que usuarios sin privilegios eleven privilegios mediante acceso local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E953C915-AE8C-41FC-910A-E7E753BE80AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6587FA95-482E-460A-8528-9A14F6D011C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF36FB24-B964-4BDE-A86C-28FBEE7DA539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AF58D2-4CE6-46CC-AFF9-4CD28C38E8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D47F52-E22F-4879-8FF0-9BD223911948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D3A073-86D2-4876-97FE-58BECF6F6D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F56E35-3B47-4133-91A5-9EFC90181B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00095&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43373/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00095&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack)."
      }, {
        "lang" : "es",
        "value" : "El servidor TLS en Erlang/OTP responde con alertas TLS diferentes a los diferentes tipos de error en el relleno RSA PKCS #1 1.5. Esto permite que un atacante descifre contenido o firme mensajes con la clave privada del servidor (esta es una variación del ataque Bleichenbacher)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erlang:erlang\\/otp:18.3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDBB4D0-83D2-4E45-B610-2E2185A30CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erlang:erlang\\/otp:19.3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1333ABAF-7DD7-4990-AB9B-CA143F6F80F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erlang:erlang\\/otp:20.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8567201B-AFAD-41B3-9FBB-ED03D10D8882"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://erlang.org/pipermail/erlang-questions/2017-November/094255.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://erlang.org/pipermail/erlang-questions/2017-November/094256.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://erlang.org/pipermail/erlang-questions/2017-November/094257.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102197",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://robotattack.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3571-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4057",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://erlang.org/pipermail/erlang-questions/2017-November/094255.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://erlang.org/pipermail/erlang-questions/2017-November/094256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://erlang.org/pipermail/erlang-questions/2017-November/094257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://robotattack.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3571-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11885",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and Remote Access service handles requests, aka \"Windows RRAS Service Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server, en su versión 1709 tienen una vulnerabilidad de ejecución remota de código por la manera en la que el servicio Routing and Remote Access gestiona las peticiones. Esta vulnerabilidad también se conoce como \"Windows RRAS Service Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "B320A104-9037-487E-BC9A-62B4A6B49FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102055",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039987",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11885",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44616/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44616/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11886",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual por como gestiona Internet Explorer los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102062",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11886",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11887",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:00.977",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handle objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11906 and CVE-2017-11919."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server 2016 permite que un atacante obtenga información para después comprometer el sistema del usuario por la manera en la que Internet Explorer gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11906 y CVE-2017-11919."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102063",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039993",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11887",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11888",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka \"Microsoft Edge Memory Corruption Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Edge en Microsoft Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que Microsoft Edge manipula objetos en la memoria. Esto también se conoce como \"Microsoft Edge Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102065",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11888",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11889",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11889",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11890",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.087",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual por como gestiona Internet Explorer los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11890",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43369/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43369/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11893",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102081",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11893",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43466/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43466/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11894",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and and Internet Explorer adn Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server 1709 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102053",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11894",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11895",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server 2016 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102054",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11895",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11899",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka \"Microsoft Windows Security Feature Bypass Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Device Guard en Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server en su versión 1709 permite que se produzca una vulnerabilidad de omisión de la característica de seguridad por la manera en la que los archivos no fiables se gestionan. Esta vulnerabilidad también se conoce como \"Microsoft Windows Security Feature Bypass Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039992",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11899",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11901",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server en su versión 2016 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que Internet Explorer gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102046",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11901",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11903",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server en su versión 2016 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que Internet Explorer gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102047",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11903",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43367/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43367/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11905",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102050",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11905",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11906",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11919."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server 2016 permite que un atacante obtenga información para después comprometer el sistema del usuario por la manera en la que Internet Explorer gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11887 y CVE-2017-11919."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7519928D-0FF2-4584-8058-4C7764CD5671"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102078",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039993",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11906",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43372/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43372/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11907",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server en su versión 2016 permite que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que Internet Explorer gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102045",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11907",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43370/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43370/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11908",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Windows 10 1709 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102052",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11908",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11909",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore en Windows 10 1511, 1607, 1703 y 1709 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102085",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11909",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43467/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43467/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11910",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore en Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102086",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11910",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11911",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore en Windows 10 1511, 1607, 1703 y 1709 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que el motor de scripting manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102087",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11911",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43468/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43468/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11912",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2 y Microsoft Edge e Internet Explorer en Windows 10 Gold, 1511, 1607, 1703, 1709 y Windows Server 2016 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102092",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11912",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11913",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual por como gestiona Internet Explorer los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5808661-A082-4CBE-808C-B253972487B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102091",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11913",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11914",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11916, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102088",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11914",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43713/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43713/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11916",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.743",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11918, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que ChakraCore manipula objetos en la memoria. Esto también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11918 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102090",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11916",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11918",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.790",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, and CVE-2017-11930."
      }, {
        "lang" : "es",
        "value" : "ChakraCore y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante obtenga los mismos derechos de usuario que el usuario actual por la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916 y CVE-2017-11930."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102089",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11918",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43469/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43469/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11919",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11906."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 y Microsoft Edge en Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante obtenga información para después comprometer el sistema del usuario por la manera en la que el motor de scripting gestiona los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2017-11887 y CVE-2017-11906."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102093",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039993",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11919",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11927",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines the zone of a request, aka \"Microsoft Windows Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server, en su versión 1709 tienen una vulnerabilidad de información por la manera en la que el manipulador de protocolos its:// de Windows determina la zona de una petición. Esta vulnerabilidad también se conoce como \"Microsoft Windows Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197E82CB-81AF-40F1-A55C-7B596891A783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2817831-8725-4149-B694-44870F2B6938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB5690-B20F-457A-A202-FBADAA17E05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039997",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11927",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11930",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, and CVE-2017-11916."
      }, {
        "lang" : "es",
        "value" : "ChakraCore e Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual por como gestiona el motor de scripting los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". El ID de este CVE es diferente de CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914 y CVE-2017-11916."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "1DE6B927-50A9-498D-BA27-70A58665FB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232581CC-130A-4C62-A7E9-2EC9A9364D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE2E768-0F45-46E1-B6D7-087917109D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B14968-3985-43C3-ACE5-8307196EFAE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102058",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11930",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11932",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka \"Microsoft Exchange Spoofing Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange Server 2016 CU5 y Microsoft Exchange Server 2016 CU5 permiten una vulnerabilidad de suplantación por la manera en la que Outlook Web Access (OWA) valida las peticiones web. Esta vulnerabilidad también se conoce como \"Microsoft Exchange Spoofing Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC34516-D7E7-4AD9-9B45-5474831548E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "5211792E-5292-41C0-B7E9-8AA63EC606EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102060",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039996",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11932",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11934",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:01.993",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka \"Microsoft Office Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1 y Microsoft Office 2016 permiten que se produzca una vulnerabilidad de divulgación de información por la manera en la que algunas funciones gestionan los objetos en la memoria. Esta vulnerabilidad también se conoce como \"Microsoft Office Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "04435803-F25B-4384-8ADD-001E87F5813A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:c2r:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1DD13C-1F8C-4583-B267-36907732F2C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102064",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039998",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11935",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:02.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka \"Microsoft Excel Remote Code Execution Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2016 Click-to-Run (C2R) permite una vulnerabilidad de ejecución remota de código por la manera en la que los archivos se gestionan en la memoria. Esta vulnerabilidad también se conoce como \"Microsoft Excel Remote Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:c2r:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1DD13C-1F8C-4583-B267-36907732F2C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102067",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039989",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11935",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11936",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:02.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka \"Microsoft SharePoint Elevation of Privilege Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft SharePoint Enterprise Server 2016 permite que se produzca una vulnerabilidad de elevación de privilegios por la manera en la que se gestionan las peticiones web. Esta vulnerabilidad también se conoce como \"Microsoft SharePoint Elevation of Privilege Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102068",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039995",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11939",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2017-12-12T21:29:02.103",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka \"Microsoft Office Information Disclosure Vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2016 Click-to-Run (C2R) permite que se produzca una vulnerabilidad de divulgación de información por la manera en la que Microsoft Office asegura los permisos de copiado/pegado de DRM. Esta vulnerabilidad también se conoce como \"Microsoft Office Information Disclosure Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:c2r:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1DD13C-1F8C-4583-B267-36907732F2C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102105",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039994",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11939",
        "source" : "secure@microsoft.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T23:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo provoquen una denegación de servicio (cierre inesperado del host del sistema operativo) u obtengan privilegios del host del sistema operativo aprovechando una comprobación de desbordamiento de máscara incorrecta para conteo de referencias en modo shadow."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1040769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-249.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-249.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T23:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios invitados del sistema operativo provoquen una denegación de servicio (cierre inesperado del host del sistema operativo) u obtengan privilegios del host del sistema operativo aprovechando la manipulación incorrecta de errores para el conteo de referencias en modo shadow."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1040770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-250.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-250.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T23:29:00.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen, hasta las versiones 4.9.x, que permite que los usuarios PV invitados del sistema operativo provoquen una denegación de servicio (cierre inesperado del host del sistema operativo) si se han establecido los modos shadow y log-dirty. Esto se debe a una aserción incorrecta relacionada con M2P."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1040771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-251.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-251.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-12T23:29:00.533",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Xen hasta las versiones 4.9.x que permite que usuarios PV invitados del sistema operativo provoquen una denegación de servicio (cierre inesperado del host del sistema operativo) u obtengan privilegios del host del sistema operativo en modo shadow asignando cierta página auxiliar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "216B1C01-EDB2-43CA-822C-F4959DA6D76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1040768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-248.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX232096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-248.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13098",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-13T01:29:00.280",
      "lastModified" : "2025-05-12T17:37:16.527",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as \"ROBOT.\""
      }, {
        "lang" : "es",
        "value" : "BouncyCastle TLS, en versiones anteriores a la 1.0.3 cuando está configurado para utilizar la JCE (Java Cryptography Extension) para funciones criptográficas, proporciona un oráculo de Bleichenbacher débil cuando se negocia una suite de cifrado TLS que utiliza un intercambio de claves RSA. Un atacante puede recuperar la clave privada desde una aplicación vulnerable. Esta vulnerabilidad es conocida como \"ROBOT\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cret@cert.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.59",
            "matchCriteriaId" : "F597AE42-F2B3-4039-81DA-C881EA1D43EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/144389",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102195",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5c",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171222-0001/",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4072",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171222-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13099",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-13T01:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as \"ROBOT.\""
      }, {
        "lang" : "es",
        "value" : "wolfSSL en versiones anteriores a la 3.12.2 proporciona un oráculo de Bleichenbacher débil cuando se negocia una suite de cifrado TLS que utiliza un intercambio de claves RSA. Un atacante puede recuperar la clave privada desde una aplicación wolfSSL vulnerable. Esta vulnerabilidad es conocida como \"ROBOT\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cret@cert.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.12.2",
            "matchCriteriaId" : "1C2A9A14-1B1B-4DE6-8FED-52D9AB890B80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3.0.1",
            "matchCriteriaId" : "50A40BE1-05C5-4755-BDE9-17BA6A4F1953"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.4.6",
            "matchCriteriaId" : "1985B038-1E77-4629-A52C-F0ACD78AF7FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-002.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/144389",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102174",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-464260.pdf",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/pull/1229",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-464260.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/pull/1229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14361",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-12-13T01:29:00.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Man-in-the-Middle (MitM) en Micro Focus Project and Portfolio Management Center 9.32. Esto podría ser explotado para permitir ataques Man-in-the-Middle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:project_and_portfolio_management:9.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07AD255-320F-4029-8CBF-F2D364168D15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040088",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14362",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-12-13T01:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Request Forgery (CSRF) en Micro Focus Project and Portfolio Management Center 9.32. Esto podría ser explotado para permitir ataques Cross-Site Forgery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:project_and_portfolio_management:9.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07AD255-320F-4029-8CBF-F2D364168D15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040088",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4942",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-12-13T02:29:11.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator."
      }, {
        "lang" : "es",
        "value" : "VMware AirWatch Console (AWC) contiene una vulnerabilidad de control de acceso roto. La explotación con éxito de este problema podría desembocar en la revelación de detalles del dispositivo del usuario final a un administrador no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.2.2.0",
            "matchCriteriaId" : "3E12528D-A1E2-4B57-9885-EFA134FC4208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102171",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040003",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0020.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5530",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-12-13T02:29:11.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0."
      }, {
        "lang" : "es",
        "value" : "Los componentes tibbr web server de tibbr Community y tibbr Enterprise contienen errores de manipulación de protocolo SAML que podrían permitir que usuarios autorizados suplanten a otros usuarios y, por lo tanto, escalen privilegios. Las versiones afectadas son tibbr Community 5.2.1 y anteriores; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 y anteriores; 6.0.0; 6.0.1; 7.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "32716CA0-AC00-40B2-BBF7-898E69712A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "72376148-EE12-40BD-9333-F62157FA456A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6A3693AF-9265-4F5C-8B5E-7DC1633E8193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:7.0.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C7E5DE4E-D81B-4EE5-AC6D-EB570ED0F1F8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "304DD405-595E-47C9-8465-724E89CA0AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "357596C7-3A7F-4A57-846B-4B042A6BB482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3145EF91-6E73-4BD5-9492-12ABDAFDE5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:7.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "89BCF16F-E353-4531-B3D4-4D5E92790E76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5534",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2017-12-13T02:29:11.187",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0."
      }, {
        "lang" : "es",
        "value" : "Los componentes tibbr user profiles de tibbr Community y tibbr Enterprise exponen una debilidad en un componente de terceros incorrectamente analizado en un sandbox. Las versiones afectadas son TIBCO Software Inc. tibbr Community 5.2.1 y anteriores; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 y anteriores; 6.0.0; 6.0.1; 7.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "32716CA0-AC00-40B2-BBF7-898E69712A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "72376148-EE12-40BD-9333-F62157FA456A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.1:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6A3693AF-9265-4F5C-8B5E-7DC1633E8193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:7.0.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "C7E5DE4E-D81B-4EE5-AC6D-EB570ED0F1F8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "304DD405-595E-47C9-8465-724E89CA0AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "357596C7-3A7F-4A57-846B-4B042A6BB482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:6.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "3145EF91-6E73-4BD5-9492-12ABDAFDE5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:tibbr:7.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "89BCF16F-E353-4531-B3D4-4D5E92790E76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5534",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MikroTik v6.40.5 permite que atacantes remotos provoquen una denegación de servicio mediante una inundación de paquetes ICMP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:router_firmware:6.40.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F30E642-7A1B-45C8-B790-6A6656E316F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mikrotik:router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5222D003-C72E-48CA-84C7-07FD7A07F5D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43317/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43317/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter."
      }, {
        "lang" : "es",
        "value" : "Scubez Posty Readymade Classifieds tiene una inyección SQL mediante el parámetro de ID en admin/user_activate_submit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scubez:posty_readymade_classifieds:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59164D46-BD53-4F24-8CB3-6F0AE8DAAE2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request."
      }, {
        "lang" : "es",
        "value" : "Scubez Posty Readymade Classifieds tiene control de acceso incorrecto por visitar admin/user_activate_submit.php (también conocido como script PHP backend). Esto podría permitir que atacantes remotos obtengan información sensible mediante una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scubez:posty_readymade_classifieds:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59164D46-BD53-4F24-8CB3-6F0AE8DAAE2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter."
      }, {
        "lang" : "es",
        "value" : "Scubez Posty Readymade Classifieds tiene XSS mediante el parámetro ID en admin/user_activate_submit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scubez:posty_readymade_classifieds:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59164D46-BD53-4F24-8CB3-6F0AE8DAAE2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter."
      }, {
        "lang" : "es",
        "value" : "FS Expedia Clone 1.0 tiene una inyección SQL mediante el parámetro ID en pages.php o content.php; o los parámetros fl_orig o fl_dest en show-flight-result.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expedia_clone_project:expedia_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4858236D-FF21-4CC9-8D80-D39B76B0624A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145297/FS-Expedia-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43261/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145297/FS-Expedia-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43261/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter."
      }, {
        "lang" : "es",
        "value" : "FS Foodpanda Clone 1.0 tiene una inyección SQL mediante el parámetro /food keywords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foodpanda_clone_project:foodpanda_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B464867-3880-4475-B080-F1FFBEDB366D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145298/FS-Foodpanda-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43262/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145298/FS-Foodpanda-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari."
      }, {
        "lang" : "es",
        "value" : "FS Amazon Clone 1.0 tiene una inyección SQL mediante el parámetro PATH_INFO en /VerAyari."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon_clone_project:amazon_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F48A7F-71EF-44B8-A927-388C93E08821"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145303/FS-Amazon-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43259/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145303/FS-Amazon-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43259/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter."
      }, {
        "lang" : "es",
        "value" : "FS Ebay Clone 1.0 tiene una inyección SQL mediante el parámetro ID en product.php; o los parámetros de search.php category_id o sub_category_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortunescripts:ebay_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F67616-667B-4776-9C9A-847C94C40692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145319/FS-Ebay-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43256/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145319/FS-Ebay-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43256/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter."
      }, {
        "lang" : "es",
        "value" : "FS Care Clone 1.0 tiene una inyección SQL mediante los parámetros de searchJob.php jobType o jobFrequency."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:care_clone_project:care_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169F4FEB-1970-4EF8-A9C8-66DF5365EBD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145302/FS-Care-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43258/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145302/FS-Care-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43258/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter."
      }, {
        "lang" : "es",
        "value" : "FS Groupon Clone 1.0 tiene una inyección SQL mediante el parámetro id item_details; o el parámetro ID en vendor_details.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groupon_clone_project:groupon_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A2A675E-155F-425E-A42C-E9C7D568CB36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145315/FS-Groupon-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43253/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145315/FS-Groupon-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43253/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter."
      }, {
        "lang" : "es",
        "value" : "FS Gigs Script 1.0 permite que se produzca inyección SQL mediante el parámetro cat en browse-scategory.php o el parámetro ser en service-provider.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gigs_script_project:gigs_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E275597-EF9C-492D-99C5-4C491EEA0701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145316/FS-Gigs-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43254/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145316/FS-Gigs-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43254/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter."
      }, {
        "lang" : "es",
        "value" : "FS Trademe Clone 1.0 tiene una inyección SQL mediante el parámetro search en search_item.php; o el parámetro id en general_item_details.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trademe_clone_project:trademe_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8EE26D-31FB-4F7B-8ABE-10D56ED810FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145296/FS-Trademe-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43260/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145296/FS-Trademe-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43260/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.747",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter."
      }, {
        "lang" : "es",
        "value" : "FS Foodpanda Clone 1.0 tiene una inyección SQL mediante el parámetro id en latest_news_details.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crowdfunding_script_project:crowdfunding_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40805BE4-2CAA-4761-9EC2-FD7DE393B659"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145301/FS-Crowdfunding-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43257/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145301/FS-Crowdfunding-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43257/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter."
      }, {
        "lang" : "es",
        "value" : "FS Freelancer Clone 1.0 tiene una inyección SQL mediante el parámetro u en profile.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freelancer_clone_project:freelancer_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A94D354-8CD4-4465-90FB-2E1E5A21B913"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145317/FS-Freelancer-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43255/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145317/FS-Freelancer-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43255/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter."
      }, {
        "lang" : "es",
        "value" : "FS Linkedin Clone 1.0 tiene una inyección SQL mediante el parámetro grid en group.php, el parámetro fid en profile.php; o el parámetro id en company_details.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkedin_clone_project:linkedin_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F06FA66-CE9D-4CC5-A277-7C7099CDDFA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145307/FS-Linkedin-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43249/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145307/FS-Linkedin-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43249/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter."
      }, {
        "lang" : "es",
        "value" : "FS Quibids Clone 1.0 tiene una inyección SQL mediante el parámetro productid en itechd.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quibids_clone_project:quibids_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E4383E-CE5A-47C8-B2C5-C7BEABF3C14B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145253/FS-Quibids-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43243/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145253/FS-Quibids-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43243/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter."
      }, {
        "lang" : "es",
        "value" : "FS Grubhub Clone 1.0 tiene una inyección SQL mediante el parámetro /food keywords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grubhub_clone_project:grubhub_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E869C4-DDDA-49A7-9B31-BD806063E411"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145314/FS-Grubhub-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43252/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145314/FS-Grubhub-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43252/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.933",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter."
      }, {
        "lang" : "es",
        "value" : "FS Shutterstock Clone 1.0 tiene una inyección SQL mediante el parámetro /Category keywords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shutterstock_clone_project:shutterstock_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4664B0F1-F2DE-4EE8-97CA-152036E87DDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145252/FS-Shutterstock-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43242/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145252/FS-Shutterstock-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43242/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter."
      }, {
        "lang" : "es",
        "value" : "FS Makemytrip Clone 1.0 tiene una inyección SQL mediante los parámetros fl_orig o fl_dest en show-flight-result.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:makemytrip_clone_project:makemytrip_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F908AB1C-8627-4A52-AEBA-7ECDB54AA1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145289/FS-Makemytrip-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43246/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145289/FS-Makemytrip-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43246/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter."
      }, {
        "lang" : "es",
        "value" : "FS Monster Clone 1.0 tiene una inyección SQL mediante el parámetro id en Employer_Details.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monster_clone_project:monster_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0FE828-9A31-4306-B263-4F72510444FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145255/FS-Monster-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43245/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145255/FS-Monster-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43245/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter."
      }, {
        "lang" : "es",
        "value" : "FS Olx Clone 1.0 tiene una inyección SQL mediante el parámetro scat en subpage.php; o el parámetro pid en message.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olx_clone_project:olx_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A31DC0-4D6E-4820-B6A1-94D9C418BB0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145254/FS-Olx-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43244/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145254/FS-Olx-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43244/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter."
      }, {
        "lang" : "es",
        "value" : "FS Indiamart Clone 1.0 tiene una inyección SQL mediante el parámetro token en catcompany.php, el parámetro id en buyleads-details.php; o el parámetro c en company/index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indiamart_clone_project:indiamart_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809FBA1C-EB68-4F70-9357-3D9CC8BE6758"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145308/FS-Indiamart-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43250/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145308/FS-Indiamart-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43250/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter."
      }, {
        "lang" : "es",
        "value" : "FS IMDB Clone 1.0 tiene una inyección SQL mediante el parámetro f en movie.php, el parámetro s en tvshow.php; o el parámetro id en show_misc_video.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imdb_clone_project:imdb_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80BCED6-5D41-4F3B-96D7-297561DD72A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145313/FS-IMDB-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43251/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145313/FS-IMDB-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43251/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter."
      }, {
        "lang" : "es",
        "value" : "FS Thumbtack Clone 1.0 tiene una inyección SQL mediante el parámetro cat en browse-category.php o el parámetro sc en browse-scategory.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thumbtack_clone_project:thumbtack_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2A3042-01E6-4887-9EDA-2892B1AC8262"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145250/FS-Thumbtack-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43240/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145250/FS-Thumbtack-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter."
      }, {
        "lang" : "es",
        "value" : "FS Stackoverflow Clone 1.0 tiene una inyección SQL mediante el parámetro /question keywords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackoverflow-clone_project:stackoverflow-clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DB0454-7CD0-4D4F-96F8-344242094882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145251/FS-Stackoverflow-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43241/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145251/FS-Stackoverflow-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43241/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter."
      }, {
        "lang" : "es",
        "value" : "Realestate Crowdfunding Script 2.7.2 tiene una inyección SQL mediante el parámetro pid en single-cause.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realestate_crowdfunding_script_project:realestate_crowdfunding_script:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DC5A13-130E-41F4-A23B-8005E96A5038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145249/Realestate-Crowdfunding-Script-2.7.2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43239/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145249/Realestate-Crowdfunding-Script-2.7.2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43239/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter."
      }, {
        "lang" : "es",
        "value" : "Website Auction Marketplace 2.0.5 tiene una inyección SQL mediante el parámetro cat_id en search.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_auction_marketplace_project:website_auction_marketplace:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2AA2F3-8797-4B88-971C-B16F45DC115A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145248/Website-Auction-Marketplace-2.0.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43238/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145248/Website-Auction-Marketplace-2.0.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43238/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/."
      }, {
        "lang" : "es",
        "value" : "Simple Chatting System 1.0 permite la subida de archivos arbitrarios mediante view/my_profile.php, que coloca los archivos en uploads/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_chatting_system_project:simple_chatting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311033E4-1E6F-4373-950A-E4E837464491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145247/Simple-Chatting-System-1.0.0-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43237/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145247/Simple-Chatting-System-1.0.0-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43237/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter."
      }, {
        "lang" : "es",
        "value" : "DomainSale PHP Script 1.0 tiene una inyección SQL mediante el parámetro id en domain.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:domainsale_php_script_project:domainsale_php_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ADCEF4-9D3D-4B1E-A347-32D018A118CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145246/DomainSale-PHP-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43235/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145246/DomainSale-PHP-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43235/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter."
      }, {
        "lang" : "es",
        "value" : "Beauty Parlour Booking Script 1.0 tiene una inyección SQL mediante los parámetros gender o city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beauty_parlour_booking_script_project:beauty_parlour_booking_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA49854-AE87-4A20-BB6C-68669F499468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145309/Beauty-Parlour-Booking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43267/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145309/Beauty-Parlour-Booking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43267/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter."
      }, {
        "lang" : "es",
        "value" : "Entrepreneur Job Portal Script 2.0.6 tiene una inyección SQL mediante el parámetro rid1 en jobsearch_all.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entrepreneur_job_portal_script_project:entrepreneur_job_portal_script:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A0D10-1301-4756-87DC-514AD5E91DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145311/Entrepreneur-Job-Portal-Script-2.0.6-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43275/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145311/Entrepreneur-Job-Portal-Script-2.0.6-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter."
      }, {
        "lang" : "es",
        "value" : "Nearbuy Clone Script 3.2 tiene una inyección SQL mediante el parámetro search en category_list.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nearbuy_clone_script_project:nearbuy_clone_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885C80D-90B3-4218-83BA-72BDEFDC3FCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145290/Nearbuy-Clone-Script-3.2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43268/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145290/Nearbuy-Clone-Script-3.2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43268/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter."
      }, {
        "lang" : "es",
        "value" : "Affiliate MLM Script 1.0 tiene una inyección SQL mediante el parámetro key en product-category.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:affiliate_mlm_script_project:affiliate_mlm_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64052D3-A887-4F32-A87A-D83D5EC15C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145304/Affiliate-MLM-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43265/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145304/Affiliate-MLM-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43265/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.543",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter."
      }, {
        "lang" : "es",
        "value" : "Advance Online Learning Management Script 3.1 tiene una inyección SQL mediante los parámetros subcatid o popcourseid en courselist.php"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advance_online_learning_management_script_project:advance_online_learning_management_script:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C49B77-2323-484A-8751-4B08270A38AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145300/Advance-Online-Learning-Management-Script-3.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43264/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145300/Advance-Online-Learning-Management-Script-3.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43264/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.590",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter."
      }, {
        "lang" : "es",
        "value" : "Basic B2B Script 2.8 tiene una inyección SQL mediante el parámetro id en product_details.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_b2b_script_project:basic_b2b_script:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2C7597-8484-4166-9095-AC0DCB40189D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145318/Basic-B2B-Script-2.0.8-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43266/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145318/Basic-B2B-Script-2.0.8-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43266/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter."
      }, {
        "lang" : "es",
        "value" : "Cab Booking Script 1.0 tiene una inyección SQL mediante el parámetro city en /service-list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cab_booking_script_project:cab_booking_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A82370-24C0-4B52-AFAA-AEB1E591F343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145291/Cab-Booking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43269/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145291/Cab-Booking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter."
      }, {
        "lang" : "es",
        "value" : "Advance B2B Script 2.1.3 tiene una inyección SQL mediante el parámetro show_id en tradeshow-list-detail.php o el parámetro pid en view-product.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advance_b2b_script_project:advance_b2b_script:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6298B7A-376B-4AEF-8F35-3D2E84109D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145299/Advance-B2B-Script-2.1.3-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43263/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145299/Advance-B2B-Script-2.1.3-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43263/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.700",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter."
      }, {
        "lang" : "es",
        "value" : "Advanced Real Estate Script 4.0.7 tiene una inyección SQL mediante los parámetros Projectmain, proj_type, searchtext, sell_price o maxprice en search-results.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_real_estate_script_project:advanced_real_estate_script:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6114ABA7-C6B4-4E1F-8434-52983721AC18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145345/Advanced-Real-Estate-Script-4.0.7-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43304/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145345/Advanced-Real-Estate-Script-4.0.7-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43304/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter."
      }, {
        "lang" : "es",
        "value" : "Entrepreneur Bus Booking Script 3.0.4 tiene una inyección SQL mediante el parámetro sourcebus en booker_details.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entrepreneur_bus_booking_script_project:entrepreneur_bus_booking_script:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9829D71C-A433-4C9E-B43A-11ABD0FFC40C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145346/Entrepreneur-Bus-Booking-Script-3.0.4-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43305/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145346/Entrepreneur-Bus-Booking-Script-3.0.4-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43305/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter."
      }, {
        "lang" : "es",
        "value" : "Consumer Complaints Clone Script 1.0 tiene una inyección SQL mediante el parámetro id en other-user-profile.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:consumer_complaints_clone_script_project:consumer_complaints_clone_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE901300-A77C-4FB5-A4BC-1F66E0240F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145310/Consumer-Complaints-Clone-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43274/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145310/Consumer-Complaints-Clone-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43274/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.807",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter."
      }, {
        "lang" : "es",
        "value" : "Co-work Space Search Script 1.0 tiene una inyección SQL mediante el parámetro city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:co-work_space_search_script_project:co-work_space_search_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727A77F0-D7D3-44CC-B867-54615C3F73F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145292/Co-work-Space-Search-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43273/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145292/Co-work-Space-Search-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43273/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail."
      }, {
        "lang" : "es",
        "value" : "CMS Auditor Website 1.0 tiene una inyección SQL mediante el parámetro PATH_INFO en /news-detail."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms_auditor_website_project:cms_auditor_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6D08CC-841F-44AE-A33D-5F2B7B0B13BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43272/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43272/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Child Care Script 1.0 has SQL Injection via the /list city parameter."
      }, {
        "lang" : "es",
        "value" : "Child Care Script 1.0 tiene una inyección SQL mediante el parámetro city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kindergarten_-_elementary_school_listing_script_project:kindergarten_-_elementary_school_listing_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5221157-ABB4-46D1-A969-A330E8CA7CDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145294/Child-Care-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43271/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145294/Child-Care-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43271/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter."
      }, {
        "lang" : "es",
        "value" : "Chartered Accountant Booking Script 1.0 tiene una inyección SQL mediante el parámetro city en /service-list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chartered_accountant_booking_script_project:chartered_accountant_booking_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722F4BF8-7303-42E6-91E1-2BD0902DD5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145295/Chartered-Accountant-Booking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43270/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145295/Chartered-Accountant-Booking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43270/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter."
      }, {
        "lang" : "es",
        "value" : "E-commerce MLM Software 1.0 tiene una inyección SQL mediante el parámetro pid en service_detail.php, el parámetro eventid en event_detail.php; o el parámetro newid en news_detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-commerce_mlm_software_project:e-commerce_mlm_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0198F47D-9BF2-4C16-9F16-9BFDF3440B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145305/E-commerce-MLM-Software-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43277/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145305/E-commerce-MLM-Software-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43277/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:01.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Doctor Search Script 1.0 has SQL Injection via the /list city parameter."
      }, {
        "lang" : "es",
        "value" : "Doctor Search Script 1.0 tiene una inyección SQL mediante el parámetro city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_search_script_project:doctor_search_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8068FC9A-40CE-4B70-AC83-C993E59ED972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145312/Doctor-Search-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43276/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145312/Doctor-Search-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43276/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter."
      }, {
        "lang" : "es",
        "value" : "Hot Scripts Clone 3.1 tiene una inyección SQL mediante los parámetros subctid o mctid en /categories."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hot_scripts_clone_project:hot_scripts_clone:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E585EAD7-FBD2-4F13-8DC3-48CCAEB1455B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145324/Hot-Scripts-Clone-3.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43284/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43916/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145324/Hot-Scripts-Clone-3.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43284/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43916/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter."
      }, {
        "lang" : "es",
        "value" : "Freelance Website Script 2.0.6 tiene una inyección SQL mediante el parámetro pr_id en jobdetails.php o el parámetro catid en searchbycat_list.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freelance_website_script_project:freelance_website_script:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA12834B-963B-4E1B-91BF-A5703E3D075F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145323/Freelance-Website-Script-2.0.6-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43283/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145323/Freelance-Website-Script-2.0.6-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43283/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Food Order Script 1.0 has SQL Injection via the /list city parameter."
      }, {
        "lang" : "es",
        "value" : "Food Order Script 1.0 tiene una inyección SQL mediante el parámetro city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotel_restaurant_reviews_and_feedback_script_project:hotel_restaurant_reviews_and_feedback_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA632104-DD41-4D66-B6AA-E798F50C00C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145321/Food-Order-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43281/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145321/Food-Order-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43281/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter."
      }, {
        "lang" : "es",
        "value" : "Facebook Clone Script 1.0 tiene una inyección SQL mediante el parámetro id en friend-profile.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook_clone_script_project:facebook_clone_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951D9558-162B-49F0-AF68-EA2A302F2C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145320/Facebook-Clone-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43280/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145320/Facebook-Clone-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43280/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Event Search Script 1.0 has SQL Injection via the /event-list city parameter."
      }, {
        "lang" : "es",
        "value" : "Event Search Script 1.0 tiene una inyección SQL mediante el parámetro city en /event-list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:event_calendar_category_script_project:event_calendar_category_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912B045-5A4A-4168-9F46-4BDD50E0D444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145306/Event-Search-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43279/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145306/Event-Search-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43279/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter."
      }, {
        "lang" : "es",
        "value" : "Foodspotting Clone Script 1.0 tiene una inyección SQL mediante el parámetro q en quicksearch.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foodspotting_clone_script_project:foodspotting_clone_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDB168D-415E-46CC-9AF1-CE204529CCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145325/Foodspotting-Clone-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43285/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145325/Foodspotting-Clone-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43285/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter."
      }, {
        "lang" : "es",
        "value" : "Kickstarter Clone Script 2.0 tiene una inyección SQL mediante el parámetro projid en investcalc.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kickstarter_clone_script_project:kickstarter_clone_script:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DE6FA5-1A6C-4AA1-BD1F-BF562BA80483"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145326/Kickstarter-Clone-Script-2.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43286/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145326/Kickstarter-Clone-Script-2.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43286/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laundry Booking Script 1.0 has SQL Injection via the /list city parameter."
      }, {
        "lang" : "es",
        "value" : "Laundry Booking Script 1.0 tiene una inyección SQL mediante el parámetro city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laundry_booking_script_project:laundry_booking_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E532FD-0A3F-451D-B2AC-7DD7989FBD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145328/Laundry-Booking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145330/Laundry-Booking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43288/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145328/Laundry-Booking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145330/Laundry-Booking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43288/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter."
      }, {
        "lang" : "es",
        "value" : "Lawyer Search Script 1.1 tiene una inyección SQL mediante el parámetro city en /lawyer-list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lawyer_search_script_project:lawyer_search_script:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70FE28D-9056-43DB-B78F-F13CFB90693E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145332/Lawyer-Search-Script-1.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43289/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145332/Lawyer-Search-Script-1.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43289/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI."
      }, {
        "lang" : "es",
        "value" : "Multivendor Penny Auction Clone Script 1.0 tiene una inyección SQL mediante el parámetro PATH_INFO en el URI /detail."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multivendor_penny_auction_clone_script_project:multivendor_penny_auction_clone_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B467DB-526C-4353-A2F3-8A06C008B300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145331/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145333/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43290/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145331/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145333/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43290/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter."
      }, {
        "lang" : "es",
        "value" : "Online Exam Test Application Script 1.6 tiene una inyección SQL mediante el parámetro sort en exams.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_exam_test_application_script_project:online_exam_test_application_script:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD15EF4B-E860-4677-BECA-5747A1A7CE88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145329/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145334/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43291/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145329/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145334/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter."
      }, {
        "lang" : "es",
        "value" : "Opensource Classified Ads Script 3.2 tiene una inyección SQL mediante el parámetro keyword en advance_result.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensource_classified_ads_script_project:opensource_classified_ads_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0DC3BF-495C-4194-B509-7A73B46975DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43292/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43292/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.497",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Multivendor Ecommerce 1.0 tiene una inyección SQL mediante el parámetro sid en single_detail.php o los parámetros searchcat o chid1 en category.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30EC01D-4A63-4FF6-B7D1-61CB6763842C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43293/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43293/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Professional Service Script 1.0 has SQL Injection via the service-list city parameter."
      }, {
        "lang" : "es",
        "value" : "Professional Service Script 1.0 tiene una inyección SQL mediante el parámetro city en service-list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:on_demand_marketplace_script_project:on_demand_marketplace_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095615BE-96DC-418F-BBB5-728791ADA913"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43294/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43294/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter."
      }, {
        "lang" : "es",
        "value" : "Readymade PHP Classified Script 3.3 tiene una inyección SQL mediante los parámetros subctid o mctid en /categories."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymade_php_classified_script_project:readymade_php_classified_script:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C56360-1D97-44AC-ABF2-6AE228C0BF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145338/Readymade-PHP-Classified-Script-3.3-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43295/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145338/Readymade-PHP-Classified-Script-3.3-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43295/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter."
      }, {
        "lang" : "es",
        "value" : "Readymade Video Sharing Script 3.2 tiene una inyección SQL mediante el parámetro del array en single-video-detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymade_video_sharing_script_project:readymade_video_sharing_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F6D40-69EB-4193-A891-23C60F9FC423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145339/Readymade-Video-Sharing-Script-3.2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43296/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145339/Readymade-Video-Sharing-Script-3.2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43296/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter."
      }, {
        "lang" : "es",
        "value" : "Responsive Realestate Script 3.2 tiene una inyección SQL mediante el parámetro tbud en property-list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:responsive_realestate_script_project:responsive_realestate_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3337652-BB1F-4647-B6DB-F09F0A42E8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145340/Responsive-Realestate-Script-3.2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43297/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145340/Responsive-Realestate-Script-3.2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43297/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter."
      }, {
        "lang" : "es",
        "value" : "Secure E-commerce Script 2.0.1 tiene una inyección SQL mediante los parámetros searchmain o searchcat en category.php; o el parámetro sid en single_detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_e-commerce_script_project:secure_e-commerce_script:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A62621-ECBC-4CC9-AF0E-B2682CF81A23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43287/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43287/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yoga Class Script 1.0 has SQL Injection via the /list city parameter."
      }, {
        "lang" : "es",
        "value" : "Yoga Class Script 1.0 tiene una inyección SQL mediante el parámetro city en /list."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_script_project:yoga_class_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D744A19-48E3-4040-9E84-403C8D0A64F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145322/Yoga-Class-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43282/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145322/Yoga-Class-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43282/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter."
      }, {
        "lang" : "es",
        "value" : "Multireligion Responsive Matrimonial 4.7.2 tiene una inyección SQL mediante el parámetro succid en success-story.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multireligion_responsive_matrimonial_project:multireligion_responsive_matrimonial:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9690979B-19E8-4BF5-963B-6709AECD28A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145341/Multireligion-Responsive-Matrimonial-4.7.2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43299/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145341/Multireligion-Responsive-Matrimonial-4.7.2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43299/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter."
      }, {
        "lang" : "es",
        "value" : "Responsive Events And Movie Ticket Booking Script 3.2.1 tiene una inyección SQL mediante el parámetro q en findcity.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:responsive_events_and_movie_ticket_booking_script_project:responsive_events_and_movie_ticket_booking_script:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8CCADE-4AF6-41FC-B673-91AF6A75C0A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145342/Responsive-Events-And-Movie-Ticket-Booking-Script-3.2.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43300/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145342/Responsive-Events-And-Movie-Ticket-Booking-Script-3.2.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43300/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter."
      }, {
        "lang" : "es",
        "value" : "Multiplex Movie Theater Booking Script 3.1.5 tiene una inyección SQL mediante el parámetro moid en trailer-detail.php; o el parámetro eid en event-detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multiplex_movie_theater_booking_script_project:multiplex_movie_theater_booking_script:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCE9F7C-6196-4184-8E54-8DA60E910754"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145343/Multiplex-Movie-Theater-Booking-Script-3.1.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43301/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145343/Multiplex-Movie-Theater-Booking-Script-3.1.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43301/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter."
      }, {
        "lang" : "es",
        "value" : "Single Theater Booking Script 3.2.1 tiene una inyección SQL mediante el parámetro q en findcity.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:single_theater_booking_script_project:single_theater_booking_script:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF6B2C7-1F0B-472D-A43D-C90D8984DF3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43302/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43302/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter."
      }, {
        "lang" : "es",
        "value" : "MLM Forex Market Plan Script 2.0.4 tiene una inyección SQL mediante el parámetro newid en news_detail.php o el parámetro eventid en event_detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlm_forex_market_plan_script_project:mlm_forex_market_plan_script:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCE9953-CF57-4602-A61C-4628BCD69EFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145347/MLM-Forex-Market-Plan-Script-2.0.4-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43306/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145347/MLM-Forex-Market-Plan-Script-2.0.4-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter."
      }, {
        "lang" : "es",
        "value" : "MLM Forced Matrix 2.0.9 tiene una inyección SQL mediante el parámetro newid en news-detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlm_forced_matrix_project:mlm_forced_matrix:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E817E3BD-80BA-425C-B374-7D289F492A15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145348/MLM-Forced-Matrix-2.0.9-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43307/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145348/MLM-Forced-Matrix-2.0.9-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43307/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:02.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter."
      }, {
        "lang" : "es",
        "value" : "Car Rental Script 2.0.4 tiene una inyección SQL mediante el parámetro val en countrycode1.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:car_rental_script_project:car_rental_script:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8BC90F-8CC0-4822-891D-D1EE43EA4D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145349/Car-Rental-Script-2.0.4-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43308/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145349/Car-Rental-Script-2.0.4-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43308/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:03.013",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter."
      }, {
        "lang" : "es",
        "value" : "Groupon Clone Script 3.01 tiene una inyección SQL mediante el parámetro state_id en city_ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groupon_clone_script_project:groupon_clone_script:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2125DB-20AB-4513-B37E-8ADC58D96ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145350/Groupon-Clone-Script-3.01-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43309/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145350/Groupon-Clone-Script-3.01-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43309/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:03.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter."
      }, {
        "lang" : "es",
        "value" : "Muslim Matrimonial Script 3.02 tiene una inyección SQL mediante el parámetro succid en success-story.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51523D5B-8D84-4DEF-975C-3EF66ED9B609"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145351/Muslim-Matrimonial-Script-3.02-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43310/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145351/Muslim-Matrimonial-Script-3.02-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43310/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:03.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter."
      }, {
        "lang" : "es",
        "value" : "Advanced World Database 2.0.5 tiene una inyección SQL mediante los parámetros country o state en city.php; o el parámetro country en state.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_world_database_project:advanced_world_database:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "935222E9-5781-4AA6-BCEE-CEA9D069E992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145352/Advanced-World-Database-2.0.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43311/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145352/Advanced-World-Database-2.0.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43311/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:03.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter."
      }, {
        "lang" : "es",
        "value" : "Resume Clone Script 2.0.5 tiene una inyección SQL mediante el parámetro id en preview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume_clone_script_project:resume_clone_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D8EC16-A532-4EAC-877F-86ABAC4DE456"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145353/Resume-Clone-Script-2.0.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43312/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145353/Resume-Clone-Script-2.0.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43312/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T09:29:03.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job."
      }, {
        "lang" : "es",
        "value" : "Basic Job Site Script 2.0.5 tiene una inyección SQL mediante el parámetro keyword en /job."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_job_site_script_project:basic_job_site_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCB0C14-4812-4DA3-95B5-669E3930B962"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145354/Basic-Job-Site-Script-2.0.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43314/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145354/Basic-Job-Site-Script-2.0.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43314/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14589",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-12-13T15:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker who has restricted administration rights to Bamboo or who hosts a website that a Bamboo administrator visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Bamboo. All versions of Bamboo before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Era posible que ocurriese una evaluación doble de OGNL en las plantillas de FreeMarker con etiquetas Struts FreeMarker. Un atacante que cuente con derechos restringidos de administración en Bamboo o que aloje un sitio web que visite un administrador de Bamboo es capaz de explotar esta vulnerabilidad para ejecutar el código Java que elija en sistemas que ejecuten una versión vulnerable de Bamboo. Todas las versiones de Bamboo anteriores a la 6.1.6 (la versión corregida para 6.1.x) y desde la 6.2.0 anteriores a la 6.2.5 (la versión corregida para 6.2.x) se han visto afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.6",
            "matchCriteriaId" : "45F6525F-033C-4BD3-85D4-0770A2177A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.5",
            "matchCriteriaId" : "1EF607C7-BC76-4660-B9F6-C8D56D19BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102188",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-18842",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-18842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14590",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2017-12-13T15:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan that has a non-linked Mercurialrepository, create or edit a plan when there is at least one linked Mercurial repository that the attacker has permission to use, or commit to a Mercurial repository used by a Bamboo plan which has branch detection enabled can execute code of their choice on systems that run a vulnerable version of Bamboo Server. Versions of Bamboo starting with 2.7.0 before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Bamboo no comprobó que el nombre de una rama en un repositorio de Mercurial contenía parámetros de argumento. Un atacante que tiene permiso para crear un repositorio en Bamboo, editar un plan existente que tenga un repositorio de Mercurial no enlazado, crear o editar un plan en el que haya al menos un repositorio de Mercurial enlazado para el que el atacante tenga permiso de utilización, o commit con ID en un repositorio de Mercurial empleado por un plan Bamboo con la detección de ramas habilitada puede ejecutar el código que elija en sistemas que ejecuten una versión vulnerable de Bamboo Server. Las versiones de Bamboo que comienzan por 2.7.0 anteriores a la 6.1.6 (la versión corregida para 6.1.x) y desde la 6.2.0 anteriores a la 6.2.5 (la versión corregida para 6.2.x) se han visto afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "6.1.6",
            "matchCriteriaId" : "D05A0A86-3C17-4983-B592-C95CC753A2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.5",
            "matchCriteriaId" : "1EF607C7-BC76-4660-B9F6-C8D56D19BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102193",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-18843",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-18843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T16:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack."
      }, {
        "lang" : "es",
        "value" : "Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.5 anteriores a la build 67.13, 11.0 anteriores a la build 71.22, 11.1 anteriores a la build 56.19 y 12.0 anteriores a la build 53.22 podría permitir que atacantes remotos descifren datos de texto cifrado TLS aprovechando un oráculo de relleno RSA Bleichenbacher. Esto también se conoce como ataque ROBOT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE459BE-DA8F-4DFB-B901-5F294C6311F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49454F7D-77B5-46DF-B95C-312AF2E68EAD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102173",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039985",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/ctx230238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/ctx230238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T16:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack (\"Bleichenbacher attack\"). This allows an attacker to decrypt observed traffic that has been encrypted with the RSA cipher and to perform other private key operations."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Radware Alteon con versiones de firmware entre 31.0.0.0-31.0.3.0 son vulnerables a un ataque de texto cifrado elegido adaptativo, también conocido como \"ataque Bleichenbacher\". Esto permite que un atacante descifre tráfico observado que ha sido cifrado con el método RSA y realice otras operaciones con la clave privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:radware:alteon_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "31.0.0.0",
            "versionEndIncluding" : "31.0.3.0",
            "matchCriteriaId" : "08ABFCE7-E014-4D08-A1AF-D4D2D608C951"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:radware:alteon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8BE92A-842C-4723-9D1C-81F602CA3C5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102199",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://support.radware.com/app/answers/answer_view/a_id/1010361/~/cve-2017-17427-adaptive-chosen-ciphertext-attack-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://robotattack.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://support.radware.com/app/answers/answer_view/a_id/1010361/~/cve-2017-17427-adaptive-chosen-ciphertext-attack-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T16:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\\0' characters, possibly related to DNS."
      }, {
        "lang" : "es",
        "value" : "MikroTik RouterBOARD v6.39.2 y v6.40.5 permite que un atacante remoto no autenticado provoque una denegación de servicio conectándose al puerto TCP 53 y enviando datos que comiencen por muchos caracteres \"\\0\". Esto podría estar relacionado con DNS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routerboard:6.39.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C6DD18-1C14-476E-8D9E-B8F6D8F47EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routerboard:6.40.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8550E2A-D5AB-4C3E-B37B-4737AA617E46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mikrotik:routerboard:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BA880F-D07B-4279-AF56-E2B20DF5A603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43200/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43200/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T16:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemeral (DHE) key exchange."
      }, {
        "lang" : "es",
        "value" : "Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.5 anteriores a la build 67.13, 11.0 anteriores a la build 71.22, 11.1 anteriores a la build 56.19 y 12.0 anteriores a la build 53.22 permiten que atacantes remotos obtengan información sensible de la negociación TLS del cliente del backend aprovechando el uso de TLS con certificados del cliente y un intercambio de claves Diffie-Hellman Ephemeral (DHE)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE459BE-DA8F-4DFB-B901-5F294C6311F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49454F7D-77B5-46DF-B95C-312AF2E68EAD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102177",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/ctx230612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.citrix.com/article/ctx230612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T16:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter."
      }, {
        "lang" : "es",
        "value" : "Entrepreneur Dating Script 2.0.1 tiene una inyección SQL mediante los parámetros marital, gender, country o profileid en search_result.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entrepreneur_dating_script_project:entrepreneur_dating_script:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC85490-EBEF-45F8-8BF8-1435F0976DF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1421",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-13T18:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "IBM iNotes es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DD8CB4-AA92-41D8-B3E6-B29D8DC1E5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B12255-AA8B-4450-8859-6925E1BB09BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0FE386-25E0-452F-A0E4-C54901C8870B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6832CDA7-2D26-4E1B-96B7-31B4CD0131E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F15C5B-D465-4AE6-B70B-E03EE32A0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B100002-E6E8-4FB8-A1A8-02BFBB37A126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9457616-9115-4AAB-9B77-2AE93F420B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFF2543-619A-49EA-909C-49C82397A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D498E559-82B7-44FB-8129-97A9CFCCDC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E04AADE-5E62-4DFD-A88E-F78DB06ED505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4C11BF-8A63-4ED9-871D-C3366D766CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005234",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102153",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040015",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127411",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1546",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-13T18:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130915."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130915."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F93-4A02-4A60-94F1-A6D9A80A4889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3894CB-8DF7-4011-B47F-36485A2A6E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8158D2-ECB0-4F89-BE73-568CA213D9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638AED13-42EE-4CAE-A891-8E8F27BDCF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93778FE9-8ED2-471D-BEC8-EF7D7E5AFC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F403652E-333E-4828-A3A6-FED1DF447AA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130915",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1558",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-13T18:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 131548."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Asset Management en sus versiones 7.5 y 7.6 podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 131548."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B773C7-9386-4704-B85F-748578DBC242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598EAB6C-7D41-46FE-BB32-D31014CA01D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010595",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102211",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131548",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1635",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-13T18:29:00.363",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Monitoring V6 6.2.2.x podría permitir que un atacante remoto ejecute código arbitrario en el sistema, provocado por un error de uso de memoria previamente liberada. Un atacante remoto podría explotar esta vulnerabilidad para ejecutar código arbitrario en el sistema o provocar que la aplicación se cierre inesperadamente. IBM X-Force ID: 133243."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E20435-C3A0-4A57-B82A-595A48BB0991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7299B1C8-7BC2-4F42-B19E-4D0D2E599D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC98EF0-EDCA-47D8-A4CE-083E3AA0376C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6522CFEE-4368-4596-8DB9-18247AB19C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E386E16-9F8F-4444-A190-EF964CA339F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC24B012-A887-4A3F-A32C-80435C64BC10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B310DC-21E5-4A0D-A3D6-B0FD21C6C4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499FAEEF-0533-44FE-8249-AE40C6233E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8B4310-F5D2-4448-89C1-E6D656351E7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010554",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101905",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133243",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1716",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-13T18:29:00.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Workload Scheduler 8.6.0, 9.1.0 y 9.2.0 podría revelar información sensible a un atacante local debido a una configuración con permisos indebidos. IBM X-Force ID: 134638."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_workload_scheduler:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D6C926-E67F-4F66-B4C7-490BF4716009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_workload_scheduler:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CB57E8-3E14-4369-83F9-E6E493279126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_workload_scheduler:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3E04BA-F4FB-4A3D-95A2-C9BA7BD56BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22010947",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101974",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134638",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22010947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15529",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-12-13T19:29:00.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular device unavailable to its intended user by temporarily or indefinitely disrupting services of a specific host within a network."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.4.1.10, Norton Family Android App puede ser susceptible a un exploit de Denegación de servicio (DoS). Durante un ataque DoS, el infractor intenta hacer que un dispositivo en concreto se vuelva inutilizable para su usuario planeado mediante la interrupción temporal o indefinida de un host específico en una red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_family:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "4.4.1.10",
            "matchCriteriaId" : "11181A75-E828-474B-9315-0A5F16D13A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102119",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15530",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-12-13T19:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that may seem out of place or any bit of information they can use to their advantage such as error messages, system information, user data, version numbers, component names, URL paths, or even simple typos and misspellings."
      }, {
        "lang" : "es",
        "value" : "Antes de la versión 4.4.1.10, Norton Family Android App puede ser susceptible a un problema de filtrado de información. El filtrado de información es un problema muy común que los atacantes intentarán explotar como un primer paso en la aplicación. Mientras sondean la aplicación, tomarán nota de cualquier cosa que parezca estar fuera de lugar o de cualquier tipo de información que pueden utilizar a su favor, como los mensajes de error, información del sistema, datos de usuario, números de versión, nombres de componentes, rutas de URL o, incluso, simples erratas y faltas de ortografía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_family:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "4.4.1.10",
            "matchCriteriaId" : "11181A75-E828-474B-9315-0A5F16D13A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102120",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14380",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-12-13T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode."
      }, {
        "lang" : "es",
        "value" : "En EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x y 7.1.1.x, un usuario con una cuenta de compliance admin (compadmin) puede explotar una vulnerabilidad en los scripts de mantenimiento isi_get_itrace o isi_get_profile para ejecutar cualquier script shell como root del sistema en un clúster en modo compliance. Esto podría conducir a una elevación de privilegios para el usuario compadmin y vulnerar el modo compliance."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDB97FE-6470-4AFE-A3B0-B664F132A190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A669BE6B-726F-4F34-A009-798E32FF6895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE74624-A44D-4837-AD36-DBF3E93D5ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CBA2E5-6E46-4922-B56B-3F8C578074B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C22C93-9069-406E-9A14-03F20AD34D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD30754-489E-42BA-8B51-1FEB5DC30912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F551F88-3176-4E92-AE7A-FCAB3A220A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26144325-6722-48C1-A0C2-BB78EF9BDE60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87E8EEE-42AA-48B3-ABBE-9CE7FD2C275B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F09B14D-2C84-47F2-8F7F-6F8DAEFFF106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6E200D-49D6-492C-8B38-CBED90CA8118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1B998-AEEE-4123-82F3-72D84EF681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0828B061-28B4-4AEE-BBB9-AF287B90713C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064C487D-517E-4F7B-A182-5DF287477652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600B1F-C307-457B-BC84-73339A64DF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2687A1-97EC-4777-9CC1-164D525C56E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:7.2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C3C4C1-505B-4171-831B-7FD7EB34B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB53E775-7A57-41D2-A93D-5F96D72622D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F44A3-8C09-49EE-8545-51C57F36B801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DF0A4B-702E-4E6B-AD2D-086F76B6DBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80042980-E2BB-49F0-A3DB-BE22ECF820C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217B6DC1-07E4-4A1E-8867-85C258778E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847B0C10-6DCA-49FE-836C-F547B573A647"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/41",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102210",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T20:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de cierre inesperado remoto en Asterisk Open Source en versiones 13.x anteriores a la 13.18.4; versiones 14.x anteriores a la 14.7.4 y las versiones 15.x anteriores a la 15.1.4, así como Certified Asterisk en versiones anteriores a la 13.13-cert9. Ciertos paquetes compuestos RTCP pueden provocar un cierre inesperado en la pila RTCP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.18.4",
            "matchCriteriaId" : "86CE0074-C728-4A0C-AF7B-E5F095C7AD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.7.4",
            "matchCriteriaId" : "8A023AEF-773E-4DD8-B860-5B1D4E061F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.4",
            "matchCriteriaId" : "8300EA07-CDDD-49C2-8F73-BBE6749000CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.13",
            "matchCriteriaId" : "DF0E7AD0-0B51-47BC-8746-CAC7C63F8AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "0449B393-FA4E-4664-8E16-BE6B94E4872F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED8E415-64FA-4E77-A423-3478E606E58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E13CA1DD-B384-4408-B4EC-1AA829981016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE28BD0A-EA30-4265-A5D6-0390F3558D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F82048D-C65F-4439-BBE4-2D4A9B07EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "6447B77F-3770-4703-9188-B7344ED98E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "5C103924-1D61-4090-8ED5-4731371B2B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "08F87B09-3867-4CAE-BAD7-2206CD6CAF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "0D12B31E-C30C-442A-9BD8-504CF7EB1321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "B43DA484-83DC-4489-9037-B85B845078E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "D8740005-0BCF-4B76-A600-25A9BF0F3C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.13:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "4298EEE5-3F0E-4227-ACF8-CEE18868055F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102201",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040009",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27382",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27429",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2017-012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T20:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access."
      }, {
        "lang" : "es",
        "value" : "En Octopus Deploy en versiones anteriores a la 4.1.3, el proceso de actualización de la máquina no comprueba que el usuario tenga acceso a todos los entornos. Esto permite la omisión del control de acceso debido a que el conjunto de entornos en los que se encuentra podrían incluir entornos en los que el usuario no tienen acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "9DE7088D-B0F4-46AA-A121-E7427D3EBAC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/Issues/issues/4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11305",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2017-12-13T21:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data."
      }, {
        "lang" : "es",
        "value" : "Una regresión que afecta a Adobe Flash Player en su versión 27.0.0.187 (y anteriores) provoca el restablecimiento accidental del archivo de preferencias de configuraciones globales cuando un usuario borra los datos del navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
            "versionEndIncluding" : "27.0.0.187",
            "matchCriteriaId" : "41094F1E-580A-42B1-8EBD-B301172A1F3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
            "versionEndIncluding" : "27.0.0.187",
            "matchCriteriaId" : "B82891FB-EE85-4440-8F60-5CC8D512D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
            "versionEndIncluding" : "27.0.0.187",
            "matchCriteriaId" : "A87C86E3-680F-46F8-B311-9AC901D7CD5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "27.0.0.187",
            "matchCriteriaId" : "9724D696-B64A-4598-8771-5D49837D8E83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102139",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039986",
        "source" : "psirt@adobe.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0081",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-42.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/flash-player/apsb17-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-13T22:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basada en memoria dinámica (heap) en la función Exiv2::Internal::PngChunk::keyTXTChunk de pngchunk_int.cpp en la versión 0.26 de Exiv2. Un archivo PNG manipulado conducirá a un ataque remoto de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/issues/187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3852-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7738",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-12-13T22:29:00.283",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Fortinet FortiOS de la versión 5.6.0 a la 5.6.2; 5.4.0 a la 5.4.5 y la versión 5.2 y anteriores permite que un usuario administrador con privilegios super_admin vea la información de sesión del portal web SSL VPN, que podría contener credenciales a través del comando CLI fnsysctl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "2BAFDAFC-2B2B-4681-A709-CD703FFCFD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.5",
            "matchCriteriaId" : "AA53FD84-6F7B-462B-AFBF-D0F9D0E04639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.2",
            "matchCriteriaId" : "ED9B0663-F69B-4F14-90B7-DF906CD0130A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102151",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-172",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T00:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname, and because ../ traversal is blocked but ..\\ traversal is not blocked. For example, an attacker can make an invalid HTTP request containing PHP code, and then make an index.php?routestring= request with enough instances of \"..\" to reach an Apache HTTP Server log file."
      }, {
        "lang" : "es",
        "value" : "vBulletin hasta las versiones 5.3.x en Windows permite la ejecución remota de código PHP debido a que una llamada require_once es alcanzable con una petición que puede incluir secuencias de salto de directorio para especificar un nombre de ruta arbitrario y porque el salto ../ está bloqueado, pero el salto ..\\ no lo está. Por ejemplo, un atacante puede realizar una petición HTTP inválida que contiene código PHP y, a continuación, realizar una petición index.php?routestring= con las suficientes instancias de \"..\" para alcanzar un archivo de registro de Apache HTTP Server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1",
            "versionEndIncluding" : "5.3.3",
            "matchCriteriaId" : "17BE6DA7-79B5-4002-855B-FA6DD322E5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_11:*:*:*:*:*:*",
            "matchCriteriaId" : "68126BD0-05AD-4702-843B-E17FA39BD3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_28:*:*:*:*:*:*",
            "matchCriteriaId" : "342AD6B6-0447-4E44-BEF6-C5CE7C134C4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T00:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates."
      }, {
        "lang" : "es",
        "value" : "En vBulletin hasta las versiones 5.3.x, hay una vulnerabilidad de deserialización no autenticada que conduce al borrado de archivos arbitrarios y, en ciertas circunstancias, la ejecución de código, debido al uso no seguro de unserialize() de PHP en la función cacheTemplates() de vB_Library_Template, que es una API expuesta públicamente expuesta. Esto se explota con el parámetro templateidlist en ajax/api/template/cacheTemplates."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1",
            "versionEndIncluding" : "5.3.3",
            "matchCriteriaId" : "17BE6DA7-79B5-4002-855B-FA6DD322E5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_11:*:*:*:*:*:*",
            "matchCriteriaId" : "68126BD0-05AD-4702-843B-E17FA39BD3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.0.0:beta_28:*:*:*:*:*:*",
            "matchCriteriaId" : "342AD6B6-0447-4E44-BEF6-C5CE7C134C4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43362/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43362/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T06:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadXPMImage en coders/xpm.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen xpm manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "60DE94B4-6F6F-4B10-949B-7B44473455B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102203",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/873",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T06:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de bucle infinito en ImageMagick 7.0.7-12 Q16 en la función ReadPSDChannelZip en coders/psd.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de CPU) mediante un archivo de imagen psd manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "60DE94B4-6F6F-4B10-949B-7B44473455B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T06:29:00.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de bucle grande en ImageMagick 7.0.7-12 Q16 en la función ExtractPostscript en coders/wpg.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de CPU) mediante un archivo de imagen wpg manipulado que desencadena una llamada ReadWPGImage."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "60DE94B4-6F6F-4B10-949B-7B44473455B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102202",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/870",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T06:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\\\.\\PSMEMDriver DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "Panda Global Protection 17.0.1 permite el cierre inesperado del sistema mediante una petición 0xb3702c44 \\\\.\\PSMEMDriver DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pandasecurity:panda_global_protection:17.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BCEA62-170A-4A19-B7B1-FD1D6B0A93E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c44",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T06:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\\\.\\PSMEMDriver DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "Panda Global Protection 17.0.1 permite el cierre inesperado del sistema mediante una petición 0xb3702c04 \\\\.\\PSMEMDriver DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pandasecurity:panda_global_protection:17.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BCEA62-170A-4A19-B7B1-FD1D6B0A93E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c04_",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c04_",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5663",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-14T15:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to the query."
      }, {
        "lang" : "es",
        "value" : "En Apache Fineract 0.4.0-incubating, 0.5.0-incubating y 0.6.0-incubating, un usuario autenticado con permisos de lectura en client/loan/center/staff/group es capaz de inyectar SQL malicioso en consultas SELECT. El parámetro \"sqlSearch\"en una serie de extremos no se limpia y se anexa directamente en la consulta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:fineract:0.4.0-incubating:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFAFE2-5ED6-426E-A425-AA1250883D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:fineract:0.5.0-incubating:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323B9753-8A53-4484-A308-D143C9201189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:fineract:0.6.0-incubating:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2FE2ED-0B9B-49B1-A181-400B7357200D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/757feeffe45a75d3c0d08b551e71fabdae5d352543be2342b6ba2c93%40%3Cdev.fineract.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/757feeffe45a75d3c0d08b551e71fabdae5d352543be2342b6ba2c93%40%3Cdev.fineract.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to prefs.c and worldgui.c."
      }, {
        "lang" : "es",
        "value" : "KildClient 3.1.0 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. Esto se relaciona con prefs.c y worldgui.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kildclient:kildclient:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415D51B6-1603-4674-AA9B-789C209E1289"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17511",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua."
      }, {
        "lang" : "es",
        "value" : "TeX Live hasta la versión 20170524 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. Esto se relaciona con linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua y texmf-dist/tex/luatex/lualibs/lualibs-os.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tug:tex_live:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20170524",
            "matchCriteriaId" : "E415D269-A9E4-4AF1-8AC6-F9561DA44917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that this product does not use the BROWSER environment variable"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** boxes.c en nip2 8.4.0 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto permite que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: un desarrollador de software indica que este producto no utiliza la variable de entorno BROWSER."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nip2_project:nip2:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0E0BF5-B4FB-47EE-AB19-E92E452F48E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jcupitt/nip2/issues/70",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17514",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jcupitt/nip2/issues/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.447",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** etc/ObjectList en Metview 4.7.3 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto permite que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: un tercero ha indicado que el código que accede a esta variable de entorno no está activado en el producto publicado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecmwf:metview:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A803C12-1AEB-4266-B12E-8A8EC0DC3C13"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17515",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "scripts/inspect_webbrowser.py en Reddit Terminal Viewer (RTV) 1.19.0 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reddit_terminal_viewer_project:reddit_terminal_viewer:1.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF01324-4B6F-4BD7-AB70-674C0E7D3089"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17516",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "libsylph/utils.c en Sylpheed 3.6 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed_project:sylpheed:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "2445176B-614F-4906-A1DA-9798FA888878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17517",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "swt/motif/browser.c in White_dune (aka whitedune) 0.30.10 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: This issue is being disputed as not being a vulnerability because “the current version of white_dune (1.369 at https://wdune.ourproject.org/) do not use a \"BROWSER environment variable\". Instead, the \"browser\" variable is read from the $HOME/.dunerc file (or from the M$Windows registry). It is configurable in the \"options\" menu. The default is chosen in the ./configure script, which tests various programs, first tested is \"xdg-open\"."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA** swt / motif / browser.c en White_dune (también conocido como whitedune) 0.30.10 no valida las cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER, lo que podría permitir a los atacantes remotos realizar ataques de inyección de argumentos a través de un dispositivo diseñado URL NOTA: Este problema se discute por no ser una vulnerabilidad porque “la versión actual de white_dune (1.369 en https://wdune.ourproject.org/) no utiliza una\" variable de entorno NAVEGADOR \". En cambio, la variable \"navegador\" se lee del archivo $ HOME / .dunerc (o del registro M $ Windows). Es configurable en el menú \"opciones\". El valor predeterminado se elige en el script ./configure, que prueba varios programas, primero probado es \"xdg-open\" \"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:white_dune_project:white_dune:0.30.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB11C3B-4EA2-42F2-92DC-65B4A20BA1AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17518",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "batteriesConfig.mlp en OCaml Batteries Included (también conocido como ocaml-batteries) 2.6 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml_batteries_project:ocaml_batteries:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04282DCB-644F-453A-BA4F-37162A6A203E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17519",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior, because the documentation states \"url_handler.pl was designed to work together with tin which only issues shell escaped absolute URLs."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** tools/url_handler.pl en TIN 2.4.1 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: un tercero ha reportado que este comportamiento es intencionado, ya que la documentación especifica que \"url_handler.pl ha sido diseñado para trabajar junto con tin, que solo emite URL absolutas escapadas en shell\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:tin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038292B2-50D8-4E07-9316-AFA52D3EE8E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17520",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17534."
      }, {
        "lang" : "es",
        "value" : "uiutil.c en FontForge hasta la versión 20170731 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. Esta vulnerabilidad es diferente de CVE-2017-17534."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fontforge:fontforge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20170731",
            "matchCriteriaId" : "00766E1A-6BF6-473E-9FD8-44271F7BBBDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17521",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Lib/webbrowser.py en Python hasta la versión 3.6.3 no valida las cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: el mantenedor del software indica que es imposible la explotación de esta vulnerabilidad debido a que el código confía en subprocess.Popen y el ajuste por defecto shell=False."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.3",
            "matchCriteriaId" : "6BC31A8A-1EA3-4C8C-832F-3C2E5A8F5B69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102207",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.python.org/issue32367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17522",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.python.org/issue32367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.760",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "library/www_browser.pl en SWI-Prolog 7.2.3 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swi-prolog:swi-prolog:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0F8D56-1FB3-46B1-9178-6AE894D36536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17524",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.793",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "guiclient/guiclient.cpp en xTuple PostBooks 4.7.0 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtuple:postbooks:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA4989E-A944-4A0D-A3EF-AFF3420276E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17525",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.837",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Input.cc en Bernard Parisse Giac 1.2.3.57 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giac_project:giac:1.2.3.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB9CB9C5-5A57-47A0-A457-F5064A3779D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17526",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.887",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer has indicated that the code referencing the BROWSER environment variable is never used"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** delphi_gui/WWWBrowserRunnerDM.pas en PasDoc 0.14 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto permite que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: un desarrollador de software ha indicado que el código que hace referencia a la variable de entorno BROWSER no se ha usado nunca."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pasdoc_project:pasdoc:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC2EB59-13DF-4C26-B137-E6D833E7C08B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17527",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "backends/platform/sdl/posix/posix.cpp en ScummVM 1.9.0 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scummvm:scummvm:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71D69E5-1F06-4E7D-86A4-B2C6D088409B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17528",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.947",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "af/util/xp/ut_go_file.cpp en AbiWord 3.0.2-2 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abisource:abiword:3.0.2-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A90561D-14FA-49E6-BEB0-CF3C300920E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17529",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:00.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: this is disputed by a third party because no untrusted input can be used for the injection"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** common/help.c en Geomview 1.9.5 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: esto es discutido por un tercero porque no se puede usar una entrada no confiable para la inyección.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geomview:geomview:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B7CF9A-1300-425C-8BEB-6C4C45EA33A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/650894#c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17530",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/650894#c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "gozilla.c en GNU GLOBAL 4.8.6 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:global:4.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B74462-BC15-4315-B057-EAC24D8E7BD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17531",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202008-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202008-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:01.057",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "examples/framework/news/news3.py en Kiwi 1.9.22 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwi_project:kiwi:1.9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC712E9-317D-496E-B355-6BB56AAEFC0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17532",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:01.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "default.tcl in Tkabber 1.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the attack cannot occur because of the argument-parsing behavior of the Tcl exec function"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** default.tcl en Tkabber 1.1 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. NOTA: un tercero ha indicado que el ataque no puede ocurrir por cómo se comporta la función Tcl exec al analizar argumentos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkabber_project:tkabber:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C026F75-3622-469D-A41D-A64E3392A797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17533",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:01.150",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uiutil.c in Mensis 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17521."
      }, {
        "lang" : "es",
        "value" : "uiutil.c en Mensis 0.0.080507 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada. Esta vulnerabilidad es diferente de CVE-2017-17521."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mensis_project:mensis:0.0.080507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4079499-9CC4-42A3-AB42-0BDD17E36FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17534",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T16:29:01.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "lib/gui.py en Bob Hepple gjots2 2.4.1 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto podría permitir que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gjots2_project:gjots2:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A28044-32B9-46BF-AFEF-47E3BC760909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17535",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-17535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7344",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-12-14T18:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows \"security alert\" dialog thereby popping up when the \"VPN before logon\" feature is enabled and an untrusted certificate chain."
      }, {
        "lang" : "es",
        "value" : "Una escalada de privilegios en Fortinet FortiClient Windows en versiones 5.4.3 y anteriores, así como la versión 5.6.0, permite que un atacante consiga privilegios explotando el diálogo de Windows \"security alert\" que aparece cuando la característica \"VPN before logon\" está habilitada y se conecta un certificado no fiable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "5.4.3",
            "matchCriteriaId" : "3FA54405-BA2E-4B8D-A333-1CD47CCE784A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:5.6.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "4A0005D2-3558-414D-97AC-ACAD11C0FD10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102176",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-070",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5264",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-14T21:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated Actions administrative web application, and are susceptible to a cross-site request forgery (CSRF) attack."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Nexpose anteriores a la 6.4.66 no validan adecuadamente el origen de peticiones HTTP destinadas a la aplicación web administrativa Automated Actions, siendo vulnerables ante un ataque de Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:nexpose:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.66",
            "matchCriteriaId" : "A5ACBC23-9538-42B7-8C9D-54137C2BE8C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102208",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://help.rapid7.com/nexpose/en-us/release-notes/archive/2017/12/#6.4.66",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43911/",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://help.rapid7.com/nexpose/en-us/release-notes/archive/2017/12/#6.4.66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43911/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-14T22:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml."
      }, {
        "lang" : "es",
        "value" : "En agent/Core/SpawningKit/Spawner.h en Phusion Passenger 5.1.10 (corregido en Passenger Open Source 5.1.11 y Passenger Enterprise 5.1.10), si Passenger se está ejecutando como root, es posible listar el contenido de archivos arbitrarios en un sistema vinculando simbólicamente un archivo llamado REVISION de la carpeta root de la aplicación a un archivo de libre elección y consultando passenger-status --show=xml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phusion:passenger:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.0.10",
            "versionEndExcluding" : "5.1.10",
            "matchCriteriaId" : "7E734B94-2D51-47B0-9AEF-E736969D2E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phusion:passenger:*:*:*:*:open_source:*:*:*",
            "versionStartIncluding" : "5.0.10",
            "versionEndExcluding" : "5.1.11",
            "matchCriteriaId" : "285B15FA-D517-437D-8C69-D7C6CBAB9468"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Mar/34",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2019/dsa-4415",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Mar/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2019/dsa-4415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution."
      }, {
        "lang" : "es",
        "value" : "Ruby en versiones anteriores a la 2.4.3 permite la inyección de comandos Net::FTP. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile y puttextfile emplean Kernel#open para abrir un archivo local. Si el argumento localfile empieza por el carácter \"|\", el comando que lo siga se ejecutará. El valor por defecto de localfile es File.basename(remotefile), por lo que servidores FTP maliciosos podrían provocar la ejecución de comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndIncluding" : "2.2.8",
            "matchCriteriaId" : "B35C3AD5-0AFB-481C-A14C-74FE4E9D4075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3",
            "versionEndIncluding" : "2.3.5",
            "matchCriteriaId" : "1D4CCCBF-2BC7-4F93-ABD5-E8A979DD6FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4",
            "versionEndIncluding" : "2.4.2",
            "matchCriteriaId" : "175826D2-3602-48AE-A3B9-5764E8FC8834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.5.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "1A059BF9-B9CA-4468-ABCD-0B8BD0C67FEF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0584",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4259",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43381/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-4-3-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43381/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-4-3-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation."
      }, {
        "lang" : "es",
        "value" : "En VideoLAN VLC media player, hasta la versión 2.2.8, hay una vulnerabilidad de conversión de tipos en modules/demux/mp4/libmp4.c en el módulo MP4 demux que conduce a una liberación no válida. Esto se debe a que el tipo de una caja podría cambiarse entre una operación de lectura y una de liberación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.8",
            "matchCriteriaId" : "BB3504B1-D1E2-40BC-B565-C5390061580B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/12/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102214",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040938",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4203",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delete requests that remove feedback."
      }, {
        "lang" : "es",
        "value" : "Techno - Portfolio Management Panel hasta la versión 2017-11-16 no comprueba la autorización para peticiones panel/portfolio.php?action=delete que eliminan el feedback."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_-_portfolio_management_panel_project:techno_-_portfolio_management_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-11-16",
            "matchCriteriaId" : "DE5D8CD5-7E76-4D48-8205-1743EEE393F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter."
      }, {
        "lang" : "es",
        "value" : "Techno - Portfolio Management Panel hasta la versión 2017-11-16 permite XSS mediante el parámetro s en panel/search.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_-_portfolio_management_panel_project:techno_-_portfolio_management_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-11-16",
            "matchCriteriaId" : "DE5D8CD5-7E76-4D48-8205-1743EEE393F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.360",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter."
      }, {
        "lang" : "es",
        "value" : "Techno - Portfolio Management Panel hasta la versión 2017-11-16 permite la inyección SQL mediante el parámetro s en panel/search.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_-_portfolio_management_panel_project:techno_-_portfolio_management_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-11-16",
            "matchCriteriaId" : "DE5D8CD5-7E76-4D48-8205-1743EEE393F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php."
      }, {
        "lang" : "es",
        "value" : "Techno - Portfolio Management Panel hasta la versión 2017-11-16 permite la revelación de rutas mediante un parámetro s inválido en panel/search.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_-_portfolio_management_panel_project:techno_-_portfolio_management_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-11-16",
            "matchCriteriaId" : "DE5D8CD5-7E76-4D48-8205-1743EEE393F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T09:29:00.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping."
      }, {
        "lang" : "es",
        "value" : "La función Ping() en ui/api/target.go en Harbor hasta la versión 1.3.0-rc4 tiene SSRF mediante el parámetro endpoint en /api/targets/ping."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:harbor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "AFA993FF-65EA-4E68-A42D-DC90BF6EB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:harbor:1.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D81B7-F0CF-48A6-9609-3F9E99BB2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:harbor:1.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3431146-523A-406B-BA09-D87ADE1A366B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:harbor:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8132A2-22DD-4AFE-946B-CCE77A269CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:harbor:1.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "477AE0D2-7564-4DCC-9A13-DD6830B3EF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:harbor:1.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "92BBA071-38DE-410C-92CA-B626F768BA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vmware/harbor/issues/3755",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/harbor/issues/3755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T10:29:00.210",
      "lastModified" : "2023-11-07T02:37:56.623",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15890",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-15T15:29:00.197",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en Disclaimer en Synology MailPlus Server en versiones anteriores a la 1.4.0-0415 permite que atacantes remotos autenticados inyecten scripts web o HTML arbitrarios mediante el parámetro NAME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:mailplus_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0-0415",
            "matchCriteriaId" : "D85384E1-7397-4D4B-8217-75741E077975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_75",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security researcher found an XML External Entity (XXE) vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable service allows for arbitrary file read access to the local file system as well as the transmittal of the application service's account hashed credentials to a remote attacker."
      }, {
        "lang" : "es",
        "value" : "Un investigador de seguridad ha encontrado una vulnerabilidad de XEE (XML External Entity) en la solución para archivos Conserus Image Repository, versión 2.1.1.105, de McKesson Medical Imaging Company, que ahora es una compañía de Change Healthcare. Un usuario no autenticado que proporcione una petición HTTP SOAP modificada al servicio vulnerable permite el acceso de lectura de archivos arbitrarios al sistema de archivos local, así como la transmisión de las credenciales hasheadas de la cuenta del servicio de la aplicación a un atacante remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changehealthcare:conserus_image_repository:2.1.1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D912905-0033-4E12-BF01-DA0CCEB3E009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://technical.nttsecurity.com/post/102emjg/conserus-image-repository-xml-external-entity-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://technical.nttsecurity.com/post/102emjg/conserus-image-repository-xml-external-entity-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T18:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Security researchers discovered an authentication bypass vulnerability in version 2.0.2 of the Conserus Workflow Intelligence application by McKesson Medical Imaging Company, which is now a Change Healthcare company. The attacker must send a malicious HTTP GET request to exploit the vulnerability. The vulnerability allows an attacker to bypass authentication and escalate privileges of valid users. An unauthenticated attacker can exploit the vulnerability and be granted limited access to other accounts. An authenticated attacker can exploit the vulnerability and be granted access reserved for higher privilege users."
      }, {
        "lang" : "es",
        "value" : "Investigadores de seguridad han descubierto una vulnerabilidad de omisión de autenticación en la versión 2.0.2 de la aplicación Conserus Workflow Intelligence de McKesson Medical Imaging Company, que ahora es una compañía de Change Healthcare. El atacante debe enviar una petición HTTP GET para explotar la vulnerabilidad. Esta permite que un atacante omita la autenticación y escale los privilegios de los usuarios válidos. Un atacante no autenticado puede explotar la vulnerabilidad y obtener acceso limitado a otras cuentas. Un atacante autenticado puede explotar la vulnerabilidad y obtener acceso reservado a usuarios con mayores privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mckesson:conserus_workflow_intelligence:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93410276-479C-436F-83E7-204FE21D42C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://technical.nttsecurity.com/post/102emjm/conserus-workflow-intelligence-authentication-bypass-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://technical.nttsecurity.com/post/102emjm/conserus-workflow-intelligence-authentication-bypass-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T18:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access."
      }, {
        "lang" : "es",
        "value" : "Web Configuration Utility en dispositivos Meinberg LANTIME con versiones de firmware anteriores a la 6.24.004 permite que los atacantes remotos lean archivos arbitrarios aprovechando que no se puede restringir el acceso a URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.24.004",
            "matchCriteriaId" : "CAFD08D8-B842-4BDD-B0F9-DC7EA88360B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:meinbergglobal:lantime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED54E91A-7B59-4E86-B06A-EE133E24CC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43332/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43332/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T18:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the \"Upload Groupkey\" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access to write to arbitrary files and consequently gain root privileges by uploading a file, as demonstrated by storing a file in the cron.d directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en la funcionalidad \"Upload Groupkey\" en Web Configuration Utility en dispositivos Meinberg LANTIME con firmware en versiones anteriores a la 6.24.004 permite que usuarios autenticados remotos con acceso Admin-User escriban en archivos arbitrarios y, consecuentemente, obtengan privilegios root subiendo un archivo, tal y como demuestra el almacenamiento de un archivo en el directorio cron.d."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.24.004",
            "matchCriteriaId" : "CAFD08D8-B842-4BDD-B0F9-DC7EA88360B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:meinbergglobal:lantime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED54E91A-7B59-4E86-B06A-EE133E24CC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T19:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys."
      }, {
        "lang" : "es",
        "value" : "Una herramienta de depuración en controladores Synaptics TouchPad permite que usuarios locales con acceso de administrador obtengan información sensible sobre códigos de escaneo de teclado mediante la modificación de claves de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:synaptics_touchpad_driver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066AC820-3B48-442F-9848-5F9EA503F0C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05827409",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synaptics.com/company/blog/touchpad-security-brief",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://zwclose.github.io/HP-keylogger/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05827409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synaptics.com/company/blog/touchpad-security-brief",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://zwclose.github.io/HP-keylogger/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T19:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) has reflected XSS in SearchResult.ec and BulkAccessControlView.ec."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Password Manager Pro 9 en versiones anteriores a la 9.4 (9400) tiene XSS reflejado en SearchResult.ec y BulkAccessControlView.ec."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.4",
            "matchCriteriaId" : "69EDE305-759A-43B5-9103-3A08F0038DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com/products/passwordmanagerpro/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/passwordmanagerpro/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12373",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2017-12-15T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions. Cisco Bug IDs: CSCvg97652."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del protocolo TLS de dispositivos heredados Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540 y 5550)podría permitir que un atacante remoto no autenticado acceda a información sensible. Esto también se conoce como ataque ROBOT (Return of Bleichenbacher's Oracle Threat). Un atacante podría consultar repetidamente un servidor que ejecuta una implementación de la pila TLS vulnerable para realizar operaciones criptoanalíticas que podrían permitir la descodificación de sesiones TLS previamente capturadas. Cisco Bug IDs: CSCvg97652."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5505_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804FAA4B-1F4A-45F2-83B0-0C8B5377F4FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC84224-8B1A-4D92-9FBD-813F6C857A77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5510_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1BA0E9-B3E1-48A3-88BA-362B61127232"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF7123A-5538-48AF-BD7A-A0D7962CB10E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5520_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06904DC-FEE6-4DB0-9DA8-08A52E5EAE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35954D5D-F767-485F-94AB-0CD8B58F6352"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5540_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8749102F-8AF6-4FF8-9804-BFC4544BEFA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCBF299-D6F5-4D00-8616-9EDE7EAFAC28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A33CBA0-FEE5-40CA-A85D-D9F07B800138"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24537C8-4F9C-4979-BB1A-466ADA6C3FF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102170",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher",
        "source" : "psirt@cisco.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T20:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025ac DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "K7Sentry.sys 15.1.0.59 en K7 Antivirus 15.1.0309 tiene una vulnerabilidad de desreferencia de puntero NULL mediante una petición 0x950025ac DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:15.1.0309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C887F-3F9A-451F-B400-7C4B42BADB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mmmxny/K7-Antivirus/tree/master/cve3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mmmxny/K7-Antivirus/tree/master/cve3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T20:29:00.270",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025a4 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "K7Sentry.sys 15.1.0.59 en K7 Antivirus 15.1.0309 tiene una vulnerabilidad de desreferencia de puntero NULL mediante una petición 0x950025a4 DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:15.1.0309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C887F-3F9A-451F-B400-7C4B42BADB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mmmxny/K7-Antivirus/tree/master/cve1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mmmxny/K7-Antivirus/tree/master/cve1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-15T20:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025c8 DeviceIoControl request."
      }, {
        "lang" : "es",
        "value" : "K7Sentry.sys 15.1.0.59 en K7 Antivirus 15.1.0309 tiene una vulnerabilidad de desreferencia de puntero NULL mediante una petición 0x950025c8 DeviceIoControl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:15.1.0309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C887F-3F9A-451F-B400-7C4B42BADB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mmmxny/K7-Antivirus/tree/master/cve2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mmmxny/K7-Antivirus/tree/master/cve2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14184",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2017-12-15T21:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información en Fortinet FortiClient for Windows 5.6.0 y anteriores, FortiClient for Mac OSX 5.6.0 y anteriores y FortiClient SSLVPN Client for Linux 4.4.2334 y anteriores permite que usuarios regulares vean las credenciales de autenticación de VPN de otros usuarios. Esto se debe a las ubicaciones de almacenamiento indebidamente aseguradas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "FF770657-32BD-4CE2-BB3E-50A9AD8BFD18"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "AF2D5D8E-4658-486E-836F-2F7B98109F82"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "4.4.2334",
            "matchCriteriaId" : "4D0218F0-8C34-4F8A-B435-74B1F2C484AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102123",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-214",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-16T01:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges."
      }, {
        "lang" : "es",
        "value" : "La función raw_sendmsg() en net/ipv4/raw.c en el kernel de Linux hasta la versión 4.14.6 tiene una condición de carrera en inet->hdrincl que conduce al uso de un puntero de pila no inicializado. Esto permite que un usuario local ejecute código y obtenga privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.52",
            "matchCriteriaId" : "DC20C495-C297-4CEE-9034-4FE81754FE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.109",
            "matchCriteriaId" : "E7BEC3D4-7038-49AD-B148-012F960F2B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.74",
            "matchCriteriaId" : "5EED08F2-CAB9-4270-8714-16E9C8FAE7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.11",
            "matchCriteriaId" : "C9DFD0E4-9A4A-40D5-9DC5-D8DD9F99AC93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f659a03a0ba9289b9aeb9b4470e6fb263d6f483",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0502",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8f659a03a0ba9289b9aeb9b4470e6fb263d6f483",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f659a03a0ba9289b9aeb9b4470e6fb263d6f483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8f659a03a0ba9289b9aeb9b4470e6fb263d6f483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10904",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-16T02:29:07.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Qt para Android en versiones anteriores a la 5.9.0 permite que los atacantes remotos ejecuten comandos de sistema operativo arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "9815918D-C797-4ED8-B408-A2AD28F4CC50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN67389262/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN67389262/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10905",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-16T02:29:07.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en aplicaciones creadas mediante Qt para Android en versiones anteriores a la 5.9.3 permite que atacantes alteren variables del entorno mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "5.9.3",
            "matchCriteriaId" : "F88F399C-A111-4C03-8D1B-9F280F9F4BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN27342829/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN27342829/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11397",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-12-16T02:29:07.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de precarga de DLL en Trend Micro Encryption for Email en versiones 5.6 y anteriores podría permitir que un atacante remoto no autenticado ejecute código arbitrario en un sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:encryption_for_email:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.0.1073",
            "matchCriteriaId" : "808012B7-6760-458D-97C7-964A85C143CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-079",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118796",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-17-079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14090",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-12-16T02:29:09.010",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en Trend Micro ScanMail for Exchange 12.0 en la que algunas comunicaciones con los servidores de actualización no están codificadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:scanmail:12.0:*:*:*:*:microsoft_exchange:*:*",
            "matchCriteriaId" : "5602BD80-ECA4-47FB-B3CB-258F7D1BD323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14091",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-12-16T02:29:09.043",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the ScanMail for Exchange directory."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en Trend Micro ScanMail for Exchange 12.0 en la que ciertas instalaciones específicas que emplean una característica poco común (Other Update Sources) podrían ser explotadas para sobrescribir archivos sensibles en el directorio ScanMail for Exchange."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:scanmail:12.0:*:*:*:*:microsoft_exchange:*:*",
            "matchCriteriaId" : "5602BD80-ECA4-47FB-B3CB-258F7D1BD323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14092",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-12-16T02:29:09.073",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain."
      }, {
        "lang" : "es",
        "value" : "La falta de tokens Anti-CSRF en os formularios de la interfaz web de Trend Micro ScanMail for Exchange 12.0 podría permitir que un atacante envíe peticiones autenticadas cuando un usuario autenticado navega por un dominio controlado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:scanmail:12.0:*:*:*:*:microsoft_exchange:*:*",
            "matchCriteriaId" : "5602BD80-ECA4-47FB-B3CB-258F7D1BD323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14093",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2017-12-16T02:29:09.120",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks."
      }, {
        "lang" : "es",
        "value" : "Las páginas Log Query y Quarantine Query en Trend Micro ScanMail for Exchange 12.0 son vulnerables a ataques de Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:scanmail:12.0:*:*:*:*:microsoft_exchange:*:*",
            "matchCriteriaId" : "5602BD80-ECA4-47FB-B3CB-258F7D1BD323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3184",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the http://x.x.x.x/setup/setup_maintain_firmware-default.html page. This will allow an attacker to perform a factory reset on the device, leading to a denial of service condition or the ability to make use of default credentials (CVE-2017-3186)."
      }, {
        "lang" : "es",
        "value" : "Las cámaras ACTi (incluyendo series D, B, I y E) con firmware versión A1D-500-V6.11.31-AC no restringen correctamente el acceso a la página de restablecimiento de fábrica. Un atacante remoto no autenticado puede explotar esta vulnerabilidad accediendo directamente a la página http://x.x.x.x/setup/setup_maintain_firmware-default.html. Esto permitirá que un atacante realice un restablecimiento de fábrica en el dispositivo, que conducirá a una denegación de servicio (DoS) o a la capacidad de utilizar las credenciales por defecto (CVE-2017-3186)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:acti:camera_firmware:a1d-500-v6.11.31-ac:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A530FE-C83D-4CAA-9C23-8C9A8F96B34A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96720/info",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/Hfuhs/status/839252357221330944",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/hack3rsca/status/839599437907386368",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/355151",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96720/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/Hfuhs/status/839252357221330944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/hack3rsca/status/839599437907386368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/355151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3185",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources."
      }, {
        "lang" : "es",
        "value" : "Las cámaras ACTi, incluidas las series D, B, I y E, que utilizan la versión de firmware A1D-500-V6.11.31-AC tienen una aplicación web que utiliza el método GET para procesar peticiones que contienen información sensible como el nombre de la cuenta y la contraseña del usuario, lo que puede exponer esa información mediante el historial del navegador, referers, logs web y otros orígenes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:acti:camera_firmware:a1d-500-v6.11.31-ac:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A530FE-C83D-4CAA-9C23-8C9A8F96B34A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96720/info",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/Hfuhs/status/839252357221330944",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/hack3rsca/status/839599437907386368",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/355151",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96720/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/Hfuhs/status/839252357221330944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/hack3rsca/status/839599437907386368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/355151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3186",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials."
      }, {
        "lang" : "es",
        "value" : "Las cámaras ACTi, incluidas las series D, B, I y E, que utilizan la versión de firmware A1D-500-V6.11.31-AC usan credenciales por defecto no aleatorias en todos los dispositivos. Un atacante remoto puede tomar el control total de un dispositivo que esté utilizando credenciales de administrador por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:acti:camera_firmware:a1d-500-v6.11.31-ac:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A530FE-C83D-4CAA-9C23-8C9A8F96B34A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96720/info",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/Hfuhs/status/839252357221330944",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://twitter.com/hack3rsca/status/839599437907386368",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/355151",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96720/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/Hfuhs/status/839252357221330944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://twitter.com/hack3rsca/status/839599437907386368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/355151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3190",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks."
      }, {
        "lang" : "es",
        "value" : "La versión 1.7.9 de Flash Seats Mobile App para Android y las versiones 1.9.51 y anteriores para iOS no consigue validar correctamente los certificados SSL proporcionados por las conexiones HTTPS, lo que puede permitir a un atacante realizar ataques Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axs:flash_seats:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "1.9.51",
            "matchCriteriaId" : "2C8B36E3-988F-4D5F-A01B-9AD129F8527C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axs:flash_seats:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.7.9",
            "matchCriteriaId" : "54B084CA-7F1E-4CED-BCF7-3035DD95CD89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96719",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/247016",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/247016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3191",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials."
      }, {
        "lang" : "es",
        "value" : "La versión de firmware 1.23 de DIR-130 y la versión de firmware 1.12 de DIR-330 de D-Link son vulnerables a la omisión de autenticación de la página de inicio de sesión remoto. Un atacante remoto que pueda acceder a la página de inicio de sesión del área de administración remota puede manipular la petición POST de tal manera que pueda acceder a determinadas páginas permitidas solo para los administradores como tools_admin.asp sin credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-130_firmware:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5800812B-C749-4D9C-8E2C-BF8EFE56FFF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAD83C8-CA60-4E7A-985A-89967A321D6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-330_firmware:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635BCAA5-F5F4-4387-A8C4-8C7605B8CF88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21B7018-6D23-4698-8B0F-7C34DCDCF0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123293",
        "source" : "cret@cert.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/553503",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553/",
        "source" : "cret@cert.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://www.wilderssecurity.com/threads/d-link-dir-130-and-dir-330-are-vulnerable-to-authentication-bypass-and-do-not-protect-credentials.392703/",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/553503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://www.wilderssecurity.com/threads/d-link-dir-130-and-dir-330-are-vulnerable-to-authentication-bypass-and-do-not-protect-credentials.392703/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3192",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator password in base64 encoding in the returned web page. A remote attacker with access to this page (potentially through a authentication bypass such as CVE-2017-3191) may obtain administrator credentials for the device."
      }, {
        "lang" : "es",
        "value" : "La versión de firmware 1.23 de DIR-130 y la versión de firmware 1.12 de DIR-330 de D-Link no protegen suficientemente las credenciales de administrador. La página tools_admin.asp revela la contraseña del administrador en codificación base64 en la página web de retorno. Un atacante remoto con acceso a esta página (pudiendo ser mediante una omisión de autenticación como CVE-2017-3191) puede obtener credenciales de administrador para el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-130_firmware:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5800812B-C749-4D9C-8E2C-BF8EFE56FFF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAD83C8-CA60-4E7A-985A-89967A321D6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dir-330_firmware:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635BCAA5-F5F4-4387-A8C4-8C7605B8CF88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21B7018-6D23-4698-8B0F-7C34DCDCF0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123292",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/553503",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wilderssecurity.com/threads/d-link-dir-130-and-dir-330-are-vulnerable-to-authentication-bypass-and-do-not-protect-credentials.392703/",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/553503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wilderssecurity.com/threads/d-link-dir-130-and-dir-330-are-vulnerable-to-authentication-bypass-and-do-not-protect-credentials.392703/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3193",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service."
      }, {
        "lang" : "es",
        "value" : "Múltiples dispositivos D-Link, incluidos DIR-850L con versiones 1.13B07 y 2.07.B05 contienen una vulnerabilidad de desbordamiento de búfer basado en pila en la interfaz de administración web del servicio HNAP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:1.14b07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F53477-8CF3-48DC-BC1E-B6C19E878FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-850l_firmware:2.07.b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3B7CA2-E60A-48D3-AA8F-38E0809B1614"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607DDB44-0E4E-4606-8909-B624345688D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96747",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/viewAlert.x?alertId=52967",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/NCCGroupInfosec/status/845269159277723649",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/305448",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "https://www.nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisories",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/viewAlert.x?alertId=52967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/NCCGroupInfosec/status/845269159277723649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/305448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "https://www.nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3194",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 8.3.2 de la app Pandora para iOS no consiguen validar correctamente los certificados SSL proporcionados por las conexiones HTTPS, lo que puede permitir a un atacante realizar ataques Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pandora:pandora:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "8.3.2",
            "matchCriteriaId" : "D175CA77-E927-452E-A519-8FD0158B0298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97158",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/collection/XFTAS-Daily-Threat-Assessment-for-March-29-2017-0d704f6eb8163d995bbaf57bbf35a018",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/342303",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/collection/XFTAS-Daily-Threat-Assessment-for-March-29-2017-0d704f6eb8163d995bbaf57bbf35a018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/342303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3195",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Commvault Edge Communication Service (cvd) en su versión 11 SP7 o la versión 11 SP6 con hotfix 590 es vulnerable a un desbordamiento de búfer basado en pila, lo que puede conducir a una ejecución de código arbitrario con privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F02BA3-8D57-402A-9574-3C13D2BEB3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:service_pack1:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC6B185-B3E2-41DF-8317-E02DFF74DE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:service_pack2:*:*:*:*:*:*",
            "matchCriteriaId" : "E5EFF9BD-DB8D-4E26-A2AB-E0A122489E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:service_pack3:*:*:*:*:*:*",
            "matchCriteriaId" : "3623D97D-E940-45EB-A600-CB54C29CA1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:service_pack4:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4625D2-D983-41D7-9C44-E1E8725D7393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:service_pack5:*:*:*:*:*:*",
            "matchCriteriaId" : "926387BA-0A76-459B-9887-37B2FA09ACC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:edge:11.0.0:service_pack6:*:*:*:*:*:*",
            "matchCriteriaId" : "495FFD14-6151-4778-B5F6-979F48A79394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.commvault.com/article/SEC0013",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://redr2e.com/commvault-edge-cve-2017-3195/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96941",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41823/",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/214283",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://kb.commvault.com/article/SEC0013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://redr2e.com/commvault-edge-cve-2017-3195/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41823/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/214283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3196",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2017-12-16T02:29:10.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "El framework Rawether de PCAUSA no valida correctamente los datos BPF, permitiendo que un programa BPF malicioso manipulado realice operaciones en la memoria fuera de los límites habituales cuando el controlador recibe los paquetes de red. Los atacantes locales pueden explotar esta vulnerabilidad para ejecutar código arbitrario con privilegios SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rawether_project:rawether:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C48077B-9B99-40AC-8854-35CBFC927E6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.rewolf.pl/blog/?p=1778",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96993/discuss",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/600671",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://blog.rewolf.pl/blog/?p=1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96993/discuss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/600671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-16T19:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected XSS Vulnerability affects the forgotten password page of Maplesoft Maple T.A. 2016.0.6 (Customer Hosted) via the emailAddress parameter to passwordreset/PasswordReset.do, aka Open Bug Bounty ID OBB-286688."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) afecta a la página de contraseña olvidada de Maplesoft Maple T.A. 2016.0.6 (Customer Hosted) mediante el parámetro emailAddress en passwordreset/PasswordReset.do. Esta vulnerabilidad también se conoce como Open Bug Bounty ID OBB-286688."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maplesoft:maple_t.a.:2016.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65919A08-9F88-4E8B-97EF-EC9DB4D7F78A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.openbugbounty.org/reports/286688/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openbugbounty.org/reports/286688/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-16T19:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonstrated by writing to tgnet.dat or tgnet.dat.bak."
      }, {
        "lang" : "es",
        "value" : "El método saveFile en MediaController.java en la aplicación Telegram Messenger en versiones anteriores a 2017-12-08 para Android permite un salto de directorio a través de un nombre de ruta obtenido en una petición de transferencia de archivos desde un peer remoto, tal y como se demuestra escribiendo en tgnet.dat o tgnet.dat.bak."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram_messenger:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2017-12-08",
            "matchCriteriaId" : "F13D3BE6-42E8-48D7-BC57-05CD1E55B8B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1470",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-16T20:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter."
      }, {
        "lang" : "es",
        "value" : "Trape en versiones anteriores a 2017-11-05 tiene una vulnerabilidad de inyección SQL mediante el parámetro red en /nr , el parámetro vld en /nr, la cabecera HTTP User-Agent en /register, el parámetro country en /register , el parámetro countryCode en /register , el parámetro cpu en /register, el parámetro isp en /register , el parámetro lat en /register, el parámetro lon en /register , el parámetro org en /register, el parámetro query en /register, el parámetro region en /register, el parámetro regionName en /register, el parámetro timezone en /register, el parámetro vId en /register, el parámetro zip en /register o el parámetro id en /tping."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boxug:trape:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-11-05",
            "matchCriteriaId" : "19D0D8F3-049F-4BF7-92C2-6D0FAE44C2DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=RWw1UTeZee8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Txp6IwR24jY",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=efmvL235S-8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=RWw1UTeZee8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Txp6IwR24jY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=efmvL235S-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-16T20:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter."
      }, {
        "lang" : "es",
        "value" : "Trape en versiones anteriores a 2017-11-05 tiene una vulnerabilidad de Cross-Site Scripting (XSS) mediante el parámetro red en /nr , el parámetro vld en /nr, la cabecera HTTP User-Agent en /register, el parámetro country en /register , el parámetro countryCode en /register , el parámetro cpu en /register, el parámetro isp en /register , el parámetro lat en /register, el parámetro lon en /register , el parámetro org en /register, el parámetro query en /register, el parámetro region en /register, el parámetro regionName en /register, el parámetro timezone en /register, el parámetro vId en /register, el parámetro zip en /register o el parámetro id en /tping."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boxug:trape:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-11-05",
            "matchCriteriaId" : "19D0D8F3-049F-4BF7-92C2-6D0FAE44C2DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Txp6IwR24jY",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Txp6IwR24jY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-17T05:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en UrBackup Server en versiones anteriores a la 2.1.20 permite que atacantes remotos autenticados inyecten scripts web o HTLM arbitrarios mediante el parámetro actions."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urbackup:urbackup_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.20",
            "matchCriteriaId" : "7907AB4F-FADB-474A-9B4C-B26F4E6984A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.urbackup.org/2017/11/30/urbackup-server-2.1.20.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.urbackup.org/server_changelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.urbackup.org/2017/11/30/urbackup-server-2.1.20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.urbackup.org/server_changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-17T17:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was mentioned in the 9.4 release announcement. This issue occurred because code was not merged. This is related to use of the omniauth-ldap library and the gitlab_omniauth-ldap gem."
      }, {
        "lang" : "es",
        "value" : "GitLab en versiones 9.4.x anteriores a la 9.4.2 no es compatible con la verificación de certificados SSL LDAP, pero se mencionó la opción LDAP verify_certificates en el anuncio del lanzamiento de la versión 9.4. Este problema ocurrió porque el código no se combinó. Esto está relacionado con el uso de la biblioteca omniauth-ldap y la gema gitlab_omniauth-ldap."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF21323-20AC-42E8-BD90-4D4930E2AB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4CA9C-115A-4D84-A416-B7FBF660DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "65FCBAEE-15CD-4701-972B-DD00CAEF6436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "00436DEC-8B1B-428C-A516-4B7734C85117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7EA1F7-E01F-4140-9616-44164C248BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CC3C7C-300A-43BC-8B1F-C466E186AE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "392BCD31-E28B-49E5-8B36-39986106F9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCACA5A4-C284-4B93-AB74-A6E28C6C95C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2017/07/22/gitlab-9-4-released/#security---add-ldap-ssl-certificate-verification",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2017/07/28/gitlab-9-dot-4-dot-2-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/30420",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2017/07/22/gitlab-9-4-released/#security---add-ldap-ssl-certificate-verification",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2017/07/28/gitlab-9-dot-4-dot-2-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/30420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-17T17:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature."
      }, {
        "lang" : "es",
        "value" : "Sonatype Nexus Repository Manager hasta la versión 2.14.5 tiene un cifrado de contraseñas débil con un valor CMMDwoV embebido en la característica de integración LDAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.14.5",
            "matchCriteriaId" : "97E31358-11D3-4E17-8D6A-913F762022F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/12/17/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Release Notes" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-17T21:29:00.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation."
      }, {
        "lang" : "es",
        "value" : "La gema Net::LDAP (también conocido como net-ldap) en versiones anteriores a la 0.16.0 para Ruby carece de validación de certificados SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.0.5:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "065A1BE3-812A-4995-BB8E-145B4B5ECBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.1.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "A81D3DAD-B938-4AB0-A0FE-E95AA5A2E5B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.1.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "ECC4C7C4-A752-40B2-A3B0-233B5817E0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.2:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "E7F8C2DA-4747-48CA-8561-FFE3B9E29D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.2.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "A057AB7E-1E42-4BB0-A731-2E3FD539970A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.2.2:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "BB768214-33FC-47BB-9377-BB579848D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.3.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "CB46CE74-A4DA-4C81-8AEF-8C3F5C3C853D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.3.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "53EE87A5-887D-4A9E-8B6F-58F314222E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.5.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "EADAE269-CA7B-4201-A941-5CAB299D4B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.6.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "459157AE-B237-4F9B-9569-68E20B8CA929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.6.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "35AF5490-1638-470B-8D75-17C6D5841E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.7.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "B8B6C501-19A7-42FD-8343-F691524EB3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.8.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "2138CE9F-E5D5-4740-892F-F60DD07C293B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.9.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "1FC0F1B0-549E-43CE-8F51-072E4FAD59CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.10.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "51824986-092B-455F-ABA9-B04FBEC59BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.10.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "FE5D9888-BA0D-49E5-817C-BF6817E3D347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.11:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "AFFDE85D-5A83-4CFA-94DE-11C5F4E82BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.12.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "5566CA0E-DB52-41E0-9D1E-D5CDC899A061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.12.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "55F2AF42-97DA-442A-BC3E-C9D145F6E812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.13.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "349F733F-79B6-433F-B098-6F5BC9E23225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.14.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "E4E0253E-6DE3-4247-8C41-74218056B430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-ldap_project:net-ldap:0.15.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "2424B530-F232-4EBB-BA17-656087545139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2017/12/17/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ruby-ldap/ruby-net-ldap/issues/258",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ruby-ldap/ruby-net-ldap/pull/279",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/17/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ruby-ldap/ruby-net-ldap/issues/258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ruby-ldap/ruby-net-ldap/pull/279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16997",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-18T01:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \"./\" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution."
      }, {
        "lang" : "es",
        "value" : "elf/dl-load.c en la biblioteca GNU C (también llamada glibc o libc6) desde la versión 2.19 hasta la 2.26 manipula incorrectamente RPATH y RUNPATH que contienen $ORIGIN para un programa privilegiado (setuid o AT_SECURE), lo que permite que los usuarios locales obtengan privilegios mediante una librería con malware troyano en el directorio actual. Esto está relacionado con las funciones fillin_rpath y decompose_rpath. Esto se asocia con la interpretación incorrecta de un token RPATH/RUNPATH vacío como el directorio \"./\". NOTA: esta configuración de RPATH/RUNPATH para un programa privilegiado es aparentemente muy poco común. Lo más probable es que este programa no se provea con una distribución de Linux común."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829B291-7B55-4B4A-9CA4-8784932935B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D625EEF2-DB23-4DFE-AF1C-BEE2DD38C54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C2E388-06A8-4AD0-9511-749FD10D2936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB1928D-6A44-4B2D-A9BB-4656AF47317B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32938018-220F-4444-984C-2D0CACFAAD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AD162E-4C9C-48A5-B2BF-9C0B4BDD5822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1B17E4-66FB-48F1-A417-2B502955257A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102228",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2019:0327",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3092",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/884615",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22625",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/ml/libc-alpha/2017-12/msg00528.html",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2019:0327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/884615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/ml/libc-alpha/2017-12/msg00528.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T05:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php."
      }, {
        "lang" : "es",
        "value" : "DedeCMS hasta la versión 5.6 permite la subida de archivos arbitrarios y la ejecución de código PHP embebiendo el código PHP en un archivo .jpg que se usa en el parámetro templet en member/article_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6",
            "matchCriteriaId" : "3A09FF5C-F555-4F4E-9A2D-C5851D7BDCB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.seebug.org/vuldb/ssvid-20050",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seebug.org/vuldb/ssvid-20050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T05:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php."
      }, {
        "lang" : "es",
        "value" : "DedeCMS hasta la versión 5.7 tiene una vulnerabilidad de inyección SQL mediante el parámetro logo en plus/flink_add.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "101C6495-13E8-41A5-AB1A-6E2401014ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://0day5.com/archives/1542/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://0day5.com/archives/1542/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T05:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php."
      }, {
        "lang" : "es",
        "value" : "DedeCMS hasta la versión 5.7 tiene una vulnerabilidad de inyección SQL mediante la superglobal $_FILES en plus/recommend.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "101C6495-13E8-41A5-AB1A-6E2401014ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://0day5.com/archives/1346/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://0day5.com/archives/1346/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T05:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request."
      }, {
        "lang" : "es",
        "value" : "Maccms 8.x permite la ejecución remota de comandos mediante el parámetro wd en una petición index.php?m=vod-search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maccms:maccms:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D75918-25B5-4D87-8C9E-112C215DDEE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.0day5.com/archives/4383/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.0day5.com/archives/4383/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T06:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple (CMSMS) en versiones anteriores a la 2.2.5 no almacena en caché correctamente la información de inicio de sesión en las sesiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.5",
            "matchCriteriaId" : "F5942A21-0255-482E-896C-E6248A3C93C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-Wawa",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-Wawa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T06:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple (CMSMS) en versiones anteriores a la 2.2.5 no almacena en caché correctamente la información de inicio de sesión en las cookies."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.5",
            "matchCriteriaId" : "F5942A21-0255-482E-896C-E6248A3C93C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-Wawa",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-Wawa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T06:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html."
      }, {
        "lang" : "es",
        "value" : "El dispositivo BrightSign Digital Signage (4k242)(firmware 6.2.63 y anterior) tiene una vulnerabilidad de Cross-Site Scripting (XSS) mediante el parámetro REF en /network_diagnostics.html o /storage_info.html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brightsign:4k242_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.63",
            "matchCriteriaId" : "82EA334D-2F6D-4ED6-9C25-707BFB52A55B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brightsign:4k242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A7CE79-D3DA-4F59-92F6-2EBBF69EFB82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.information-paradox.net/2017/12/brightsign-multiple-vulnerablities-cve.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43364/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.information-paradox.net/2017/12/brightsign-multiple-vulnerablities-cve.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T06:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html."
      }, {
        "lang" : "es",
        "value" : "El dispositivo BrightSign Digital Signage (4k242)(firmware 6.2.63 y anterior) permite que se renombren y modifiquen los archivos a través de /tools.html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brightsign:4k242_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.63",
            "matchCriteriaId" : "82EA334D-2F6D-4ED6-9C25-707BFB52A55B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brightsign:4k242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A7CE79-D3DA-4F59-92F6-2EBBF69EFB82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.information-paradox.net/2017/12/brightsign-multiple-vulnerablities-cve.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43364/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.information-paradox.net/2017/12/brightsign-multiple-vulnerablities-cve.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T06:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files."
      }, {
        "lang" : "es",
        "value" : "El dispositivo BrightSign Digital Signage (4k242)(firmware 6.2.63 y anterior) tiene un salto de directorio a través del parámetro rp en /storage.html, permitiendo que un atacante lea o escriba en archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brightsign:4k242_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.63",
            "matchCriteriaId" : "82EA334D-2F6D-4ED6-9C25-707BFB52A55B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:brightsign:4k242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A7CE79-D3DA-4F59-92F6-2EBBF69EFB82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.information-paradox.net/2017/12/brightsign-multiple-vulnerablities-cve.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43364/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.information-paradox.net/2017/12/brightsign-multiple-vulnerablities-cve.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T06:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation."
      }, {
        "lang" : "es",
        "value" : "contrib/slapd-modules/nops/nops.c en OpenLDAP hasta la versión 2.4.45, cuando el módulo nops y la capa memberof están activados, intenta liberar un búfer que se había asignado en la pila, lo que permite que los atacantes remotos provoquen una denegación de servicio (cierre inesperado de slapd) mediante una operación member MODDN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.45",
            "matchCriteriaId" : "00A6E51B-52B6-4190-BB10-3622D575A7D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E78106-58E6-4D59-990F-75DA575BFAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.2",
            "matchCriteriaId" : "D0DBC938-A782-433F-8BF1-CA250C332AA7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:policy_auditor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.1",
            "matchCriteriaId" : "CB739B3A-20BB-4118-82DD-7ACFE5881FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/index.cgi/Incoming?id=8759",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openldap.org/its/index.cgi/Incoming?id=8759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T08:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h."
      }, {
        "lang" : "es",
        "value" : "La implementación KVM en el kernel de Linux hasta la versión 4.14.7 permite que atacantes remotos obtengan información potencialmente sensible de la memoria del kernel. Esto también se conoce como una lectura fuera de límites basada en pila write_mmio y está relacionado con arch/x86/kvm/x86.c e include/trace/events/kvm.h."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.7",
            "matchCriteriaId" : "CCF53DC7-5CFD-4A54-AABC-71D623665F85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg160796.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg160796.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T09:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/."
      }, {
        "lang" : "es",
        "value" : "FS Lynda Clone 1.0 tiene una una vulnerabilidad de inyección SQL mediante el parámetro keywords en tutorial/."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lynda_clone_project:lynda_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10DD6A4-0079-41C2-96BE-8AFD11B55FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145444/FS-Lynda-Clone-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43335/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145444/FS-Lynda-Clone-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43335/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T09:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Bus Booking Script 1.0 tiene una vulnerabilidad de inyección SQL mediante el parámetro txtname en admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpautoclassifiedscript:bus_booking_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BB1C8D-4C5B-49E7-B2A5-3F121EC34F85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145445/Bus-Booking-Script-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43336/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145445/Bus-Booking-Script-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43336/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T09:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter."
      }, {
        "lang" : "es",
        "value" : "Readymade Video Sharing Script 3.2 tiene una vulnerabilidad de inyección HTML mediante el parámetro comment en single-video-detail.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymade_video_sharing_script_project:readymade_video_sharing_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F6D40-69EB-4193-A891-23C60F9FC423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145438/Readymade-Video-Sharing-Script-3.2-HTML-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43333/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145438/Readymade-Video-Sharing-Script-3.2-HTML-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43333/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T09:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter."
      }, {
        "lang" : "es",
        "value" : "Paid To Read Script 2.0.5 tiene una vulnerabilidad de inyección SQL mediante el parámetro uid en admin/userview.php, el parámetro fnum en admin/viewemcamp.php o el parámetro fn en admin/viewvisitcamp.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paid_to_read_script_project:paid_to_read_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8197E171-CB10-43CF-8E38-96CC2D026D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145439/Paid-To-Read-Script-2.0.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43334/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145439/Paid-To-Read-Script-2.0.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43334/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12630",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-18T14:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards."
      }, {
        "lang" : "es",
        "value" : "En Apache Drill 1.11.0 y anteriores, cuando se envía el formulario desde la página Query, los usuarios son capaces de pasar scritps o HTML arbitrarios que surtirían efecto después en la página Profile. Ejemplo: después de enviar el script especial que devuelve información de cookies de la página Query, el usuario malicioso podría obtener después esta información de la página Profile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:drill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.0",
            "matchCriteriaId" : "E0C6BA6F-33ED-478D-9A5F-D9AA9814665B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/608658a55d09e16542db41121a0a972c97448214cdc04071fd4db923%40%3Cdev.drill.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/608658a55d09e16542db41121a0a972c97448214cdc04071fd4db923%40%3Cdev.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T14:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in SMB environments."
      }, {
        "lang" : "es",
        "value" : "NetApp Clustered Data ONTAP en versiones 9.x anteriores a 9.1P10 y 9.2P2 son susceptibles a una vulnerabilidad que permite que un atacante provoque una denegación de servicio (DoS) en entornos SMB."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "0AA19921-6DF9-4227-9CDC-207FC33FC797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7FAB3E-9537-4C91-86ED-AB6F2C2FB51F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20171215-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171215-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-18T16:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter."
      }, {
        "lang" : "es",
        "value" : "CWEBNET/WOSummary/List en ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 permite que se produzca una inyección SQL mediante los parámetros tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno o workorderstatus."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zuuse:beims_contractorweb_.net:5.18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C043A24-24E7-4F1C-A35B-83E84EEE0567"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://0day.today/exploit/29277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://becomepentester.blogspot.com/2017/12/ZUUSE-BEIMS-ContractorWeb-SQLInjection-CVE-2017-17721.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017120155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/145511/BEIMS-ContractorWeb-5.18.0.0-SQL-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.cyber-security.ro/blog/2017/12/20/beims-contractorweb-5-18-0-0-sql-injection/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43379/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://0day.today/exploit/29277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://becomepentester.blogspot.com/2017/12/ZUUSE-BEIMS-ContractorWeb-SQLInjection-CVE-2017-17721.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017120155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://packetstormsecurity.com/files/145511/BEIMS-ContractorWeb-5.18.0.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.cyber-security.ro/blog/2017/12/20/beims-contractorweb-5-18-0-0-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43379/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15103",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-12-18T19:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de chequeo de seguridad en la manera en la que la API del servidor de Heketi 5 gestionaba las peticiones de los usuarios. Un usuario de Heketi autenticado podría enviar peticiones especialmente manipuladas al servidor Heketi, resultando en la ejecución remota de comandos como usuario que ejecuta el servidor de Heketi y, posiblemente, un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heketi_project:heketi:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834F48B7-0961-476F-8315-92A93210BDA7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15103",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1510147",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1510147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15104",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2017-12-18T19:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de acceso en Heketi 5, donde el archivo de configuración heketi.json puede ser leído por cualquier usuario. Un atacante que tenga acceso local al servidor Heketi podría leer contraseñas en texto plano del archivo heketi.json."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heketi_project:heketi:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295217EA-588B-49B5-AA83-E0FCC641CBFF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15104",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1510149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heketi/heketi/releases/tag/v5.0.1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1510149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heketi/heketi/releases/tag/v5.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15700",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-18T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el método org.apache.sling.auth.core.AuthUtil#isRedirectValid en Apache Sling Authentication Service 1.4.0 permite que un atacante engañe a una víctima para que envíe sus credenciales a través del formulario de inicio de sesión de Sling."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_authentication_service:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBA9B7C-D1E6-4428-BA32-57ECD6EC4E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/182bed1dd6933824a81cc5f07639eeb813fbd8f2cc49d51b452ab621%40%3Cdev.sling.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/182bed1dd6933824a81cc5f07639eeb813fbd8f2cc49d51b452ab621%40%3Cdev.sling.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.080",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de fijación de sesión en MT4 Networks SenhaSegura Web Application 2.2.23.8 a través de login_if.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mt4:senhasegura:2.2.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD8664A-D48E-4D59-BB0D-6C3F230D192C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/ajKErVTP",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/ajKErVTP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.127",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request."
      }, {
        "lang" : "es",
        "value" : "El componente Application Firewall Pack (AFP, también conocido como Web Application Firewall) en los dispositivos Kemp Load Balancer con versiones de software anteriores a la 7.2.40.1 permite que se omita la característica de seguridad mediante una petición HTTP POST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kemptechnologies:web_application_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.40",
            "matchCriteriaId" : "860C1FEE-B1CF-4005-8047-C73FAA7663CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://kemptechnologies.com/files/assets/documentation/7.2/release-notes/Release_Notes-LoadMaster.pdf?pdf-file-view=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pallas.com/advisories/cve_2017_15524_kemp_afp_waf_bug_on_post_data",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kemptechnologies.com/files/assets/documentation/7.2/release-notes/Release_Notes-LoadMaster.pdf?pdf-file-view=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pallas.com/advisories/cve_2017_15524_kemp_afp_waf_bug_on_post_data",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.177",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the \"checkemail\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Password Recovery en GPWeb 8.4.61 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"checkemail\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sistemagpweb:gpweb:8.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A119973-93B4-4B55-9ACB-873F88FEDC37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.223",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en GPWeb 8.4.61 permite que los usuarios autenticados remotos suban cualquier tipo de archivo, incluyendo un shell PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sistemagpweb:gpweb:8.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A119973-93B4-4B55-9ACB-873F88FEDC37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de permisos no seguros en el archivo db.php en GPWeb 8.4.61 permite que atacantes remotos visualicen la base de datos de contraseñas y usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sistemagpweb:gpweb:8.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A119973-93B4-4B55-9ACB-873F88FEDC37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en el plugin AccessKeys AccessPress Anonymous Post Pro hasta la versión 3.1.9 para WordPress. Un saneamiento de entradas incorrecto permite que el atacante invalide la configuración para las extensiones de archivo permitidas y la subida de archivos. Esto está relacionado con inc/cores/file-uploader.php y file-uploader/file-uploader-class.php. Esto permite que el atacante suba lo que quiera al servidor, tal y como se demuestra con una petición action=ap_file_upload_actionallowedExtensions[]=php a /wp-admin/admin-ajax.php que resulta en la subida de un archivo .php y en la ejecución de código PHP como resultado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:anonymous_post_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.9",
            "matchCriteriaId" : "E29CDBBA-B67F-4434-9105-A2CC646CAA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43324/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43324/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a cgi-bin/iptest.cgi?cmd=iptest.cgi&-time=\"1504225666237\"&-url=$(reboot) request."
      }, {
        "lang" : "es",
        "value" : "Las cámaras web Zivif PR115-204-P-RS  versión V2.3.4.2103 y versión V4.7.4.2121 (y posiblemente entre las versiones intermedias) son vulnerables a la inyección de comandos ciegos y sin autenticación por medio de scripts CGI utilizados como parte de la interfaz web, demostrado por una petición.cgi-bin/iptest.cgi?cmd=iptest.cgi&-time=\"1504225666237\"&-url=$(reboot)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zivif:pr115-204-p-rs_firmware:2.3.4.2103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA8E02-9468-44CB-B5AF-FDD1D38229F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zivif:pr115-204-p-rs_firmware:4.7.4.2121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A56966F-BFBF-4B84-A251-919CCB9F8897"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zivif:pr115-204-p-rs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1E6678-0AB9-4E39-81C9-87A7EE4599E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/158120/Zivif-Camera-2.3.4.2103-iptest.cgi-Blind-Remote-Command-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/silascutler/status/938052460328968192",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/158120/Zivif-Camera-2.3.4.2103-iptest.cgi-Blind-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/silascutler/status/938052460328968192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages."
      }, {
        "lang" : "es",
        "value" : "Un atacante remoto no autenticado puede obtener las credenciales para las cámaras web PR115-204-P-RS V2.3.4.2103 de Zivif mediante el uso de una petición HTTP /cgi-bin/hi3510/param.cgi?cmd=getuse en una web estándar. Esta vulnerabilidad existe porque faltan chequeos de autenticación en las peticiones a las páginas CGI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zivif:pr115-204-p-rs_firmware:2.3.4.2103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA8E02-9468-44CB-B5AF-FDD1D38229F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zivif:pr115-204-p-rs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1E6678-0AB9-4E39-81C9-87A7EE4599E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/silascutler/status/938052460328968192",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/silascutler/status/938052460328968192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T02:29:41.643",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session."
      }, {
        "lang" : "es",
        "value" : "Las cámaras web PR115-204-P-RS V2.3.4.2103 de Zivif contiene una contraseña cat1029 embebida para el usuario root. La configuración del sistema operativo SONIX hace que esta contraseña no se pueda cambiar y que se pueda utilizar para acceder al dispositivo mediante una sesión TELNET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zivif:pr115-204-p-rs_firmware:2.3.4.2103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA8E02-9468-44CB-B5AF-FDD1D38229F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zivif:pr115-204-p-rs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1E6678-0AB9-4E39-81C9-87A7EE4599E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/silascutler/status/938052460328968192",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/silascutler/status/938052460328968192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T07:29:00.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/wportal.lua in uhttpd."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TL-WVR y TL-WAR de TP-Link permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo interface de un comando admin/wportal en cgi-bin/luci. Esto se relaciona con la función get_device_byif en /usr/lib/lua/luci/controller/admin/wportal.lua en uhttpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB72835B-95E0-4C65-997C-6FE3656F5584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583550-1D76-45E8-89A9-CD1D843BB93E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85C46-24B2-498E-AB6F-6329EF0F3B84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C4F2B2-F886-43ED-A29D-20865AA31B55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403F67A7-7E54-4255-9838-CDD6B9AA8266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE9545C-EC9B-47B0-BEA9-3B2D5109F970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFFF84-D7E5-475B-99E6-C93E3844CA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBB236-C33A-4FD7-888F-0BA9EB162B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7087925-7984-44DD-A20A-8B3C87802E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB1C13D-F1B7-40E4-8C70-3DBFBF17671B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2896BBB8-BA92-4B36-9BB7-E9397CDBB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C817C4-0B32-402D-909A-1DC9CA39DA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E532F4-3E42-4C9F-A01A-E7EFB7B48804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F2966-FD95-4B94-A7FB-8021782AD170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC78CAB2-0C24-4FF8-B758-AADDB3F24989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBD997E-88FC-4D23-B762-331A63A29C83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AB3B41-D8B1-4A0C-A5DD-5254D96D0655"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A26160-2484-4517-B223-40A329DAEDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6A8BD-0012-48FA-B5D0-A6F03097FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6AE4D9-A750-4770-A07A-FC87DCA4E840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87876AD9-B258-4E8E-ABF6-6704F6EEE468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E888A70B-984E-4D7C-B324-2F0E9C8E57C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4EF035-D38D-478C-BCAA-EE96EBEC9D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T07:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TL-WVR y TL-WAR de TP-Link permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo interface de un comando admin/dhcps en cgi-bin/luci. Esto se relaciona con la función zone_get_iface_bydev en /usr/lib/lua/luci/controller/admin/dhcps.lua en uhttpd."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB72835B-95E0-4C65-997C-6FE3656F5584"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1583550-1D76-45E8-89A9-CD1D843BB93E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85C46-24B2-498E-AB6F-6329EF0F3B84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C4F2B2-F886-43ED-A29D-20865AA31B55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403F67A7-7E54-4255-9838-CDD6B9AA8266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE9545C-EC9B-47B0-BEA9-3B2D5109F970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFFF84-D7E5-475B-99E6-C93E3844CA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBB236-C33A-4FD7-888F-0BA9EB162B9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7087925-7984-44DD-A20A-8B3C87802E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB1C13D-F1B7-40E4-8C70-3DBFBF17671B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2896BBB8-BA92-4B36-9BB7-E9397CDBB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C817C4-0B32-402D-909A-1DC9CA39DA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E532F4-3E42-4C9F-A01A-E7EFB7B48804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F2966-FD95-4B94-A7FB-8021782AD170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC78CAB2-0C24-4FF8-B758-AADDB3F24989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBD997E-88FC-4D23-B762-331A63A29C83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AB3B41-D8B1-4A0C-A5DD-5254D96D0655"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A26160-2484-4517-B223-40A329DAEDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6A8BD-0012-48FA-B5D0-A6F03097FEA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6AE4D9-A750-4770-A07A-FC87DCA4E840"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87876AD9-B258-4E8E-ABF6-6704F6EEE468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E888A70B-984E-4D7C-B324-2F0E9C8E57C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4EF035-D38D-478C-BCAA-EE96EBEC9D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T07:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service)."
      }, {
        "lang" : "es",
        "value" : "Conarc iChannel permite que los atacantes remotos obtengan información sensible, modifiquen la configuración o causen una denegación de servicio (eliminando la configuración) a través de una solicitud wc.dll?wwMaint~EditConfig (que llega a una versión anterior de un servicio HTTP de West Wind Web Connection)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conarc:ichannel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF37B45-87B9-4E18-98B7-F5DE06C39935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.information-paradox.net/2017/12/conarc-ichannel-unauthenticated.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43377/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.information-paradox.net/2017/12/conarc-ichannel-unauthenticated.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43377/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T15:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el binario ZoomLauncher del cliente Zoom para Linux en versiones anteriores a la 2.0.115900.1201 permite que atacantes remotos ejecuten código arbitrario aprovechando el controlador de esquemas zoommtg://."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "2.0.115900.1201",
            "matchCriteriaId" : "6BF4E5E2-D96D-4B1E-AF50-C40B11116026"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145452/Zoom-Linux-Client-2.0.106600.0904-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/46",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/convisoappsec/advisories/blob/master/2017/CONVISO-17-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43355/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145452/Zoom-Linux-Client-2.0.106600.0904-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/convisoappsec/advisories/blob/master/2017/CONVISO-17-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T15:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler."
      }, {
        "lang" : "es",
        "value" : "El binario ZoomLauncher en el cliente Zoom para Linux en versiones anteriores a la 2.0.115900.1201 no sanea adecuadamente las entradas de usuarios al construir un comando shell, lo que permite que los atacantes remotos ejecuten código arbitrario aprovechando el controlador de esquemas zoommtg://."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "2.0.115900.1201",
            "matchCriteriaId" : "6BF4E5E2-D96D-4B1E-AF50-C40B11116026"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145453/Zoom-Linux-Client-2.0.106600.0904-Command-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/convisoappsec/advisories/blob/master/2017/CONVISO-17-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43354/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145453/Zoom-Linux-Client-2.0.106600.0904-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/convisoappsec/advisories/blob/master/2017/CONVISO-17-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43354/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T15:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the \"file\" schema in the firmware update functionality."
      }, {
        "lang" : "es",
        "value" : "Web Configuration Utility en dispositivos Meinberg LANTIME con firmware en versiones anteriores a la 6.24.004 permite que usuarios autenticados remotos con ciertos privilegios lean archivos arbitrarios mediante (1) el parámetro ntpclientcounterlogfile en cgi-bin/mainv2 o (2) vectores relacionados con la compatibilidad curl del esquema \"file\" en la funcionalidad de actualización de firmware."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.24.003",
            "matchCriteriaId" : "988C7D38-899A-41F5-AD4D-C9682E52E94E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2541CE93-F4C4-453E-83AC-ED39D83571DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35F4190-89B4-4F14-89C9-C7A4E61FB300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C58392-64BE-4A64-9B43-F599D03CBD3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FCA50A-2C6A-41ED-8E9D-38BA52C8428B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DF47-1C04-4111-9C2B-3B6F9396ED5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5EFBE-3C3F-4386-A469-E190611A5A34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058F2582-3447-4B8B-8B50-44C1B971CE88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F4C7AA-30BB-402B-A21C-6FEEC919853C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164CB3CF-F979-4591-8DF8-972123E216B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T15:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service."
      }, {
        "lang" : "es",
        "value" : "La versión Enterprise de SyncBreez en versiones 10.2.12 y anteriores se ve afectada por una vulnerabilidad de denegación de servicio remota. El servidor web no comprueba los límites cuando lee peticiones de servidor en la cabecera del host al realizar una conexión, lo que resulta en un desbordamiento de búfer clásico que causa una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "10.2.12",
            "matchCriteriaId" : "884E0F5F-B14E-4E3D-8D84-6580BC606330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145435/Sync-Breeze-10.2.12-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/45",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43344/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145435/Sync-Breeze-10.2.12-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43344/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T20:29:00.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the result_message parameter to includes/concours_page.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en el plugin wp-concours hasta la versión 1.1 para WordPress permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro result_message en includes/concours_page.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olyos:wp-concours:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "D784F815-2152-4DDB-8192-23D7DF261F5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/71",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T20:29:00.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter to view/advancedsettings.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en el plugin custom-map hasta la versión 1.1 para WordPress permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro map_id en view/advancedsettings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdesi9:custom_map:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "114AB468-35B2-4B5A-AB26-E561A0B6DA9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/72",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8982",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T20:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the esb-csv-import-export plugin through 1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cie_type, (2) cie_import, (3) cie_update, or (4) cie_ignore parameter to includes/admin/views/esb-cie-import-export-page.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) en el plugin esb-csv-import-export hasta la versión 1.1 para WordPress permite que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante los parámetros (1) cie_type, (2) cie_import, (3) cie_update o (4) cie_ignore en includes/admin/views/esb-cie-import-export-page.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csv-import-export_project:csv-import-export:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "EABA0DA6-3606-4BBD-820C-67DBBB15C027"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/73",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T21:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Ichano AtHome IP Camera devices. The device runs the \"noodles\" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the \"system\" XML element for specifying the command. For example, a <system>id</system> command results in a <system_ack>ok</system_ack> response."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos AtHome IP Camera de Ichano. El dispositivo ejecuta el binario \"noodles\", un servicio en el puerto 1300 que permite a un usuario remoto (LAN) no autenticado ejecutar comandos arbitrarios. Este binario necesita el elemento XML \"system\" para especificar el comando. Por ejemplo,un comando id resulta en una respuesta ok."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ichano:athome_ip_camera_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149BDE71-9015-4EA6-B344-4DE5622DE671"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ichano:athome_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A16BF4-D9D9-447E-A287-5A52E1481A30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3576",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-19T23:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, which makes it easier for remote attackers to send crafted files, as demonstrated by APK injection."
      }, {
        "lang" : "es",
        "value" : "SuperBeam hasta la versión 4.1.3, cuando se utiliza la función de LAN o WiFi Direct Share, no utiliza HTTPS ni ningún mecanismo de protección de integridad para la transferencia de archivos, lo que facilita a los atacantes remotos el envío de archivos manipulados, tal y como lo demuestra la inyección de APK."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liveqos:superbeam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.3",
            "matchCriteriaId" : "1E724D9A-A949-440A-9DAC-CD048FC957FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thinktanksec.github.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://thinktanksec.github.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/configuration.php in Piwigo 2.9.2 has CSRF."
      }, {
        "lang" : "es",
        "value" : "admin/configuration.php en Piwigo 2.9.2 tiene una vulnerabilidad Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/issues/822",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request."
      }, {
        "lang" : "es",
        "value" : "Piwigo tiene una vulnerabilidad de Cross-Site Scripting (XSS) mediante el parámetro name en una petición admin.php?page=album-3-properties."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter."
      }, {
        "lang" : "es",
        "value" : "Paid To Read Script 2.0.5 tiene una vulnerabilidad de revelación de ruta completa a través de un parámetro uid inválido en admin/userview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paid_to_read_script_project:paid_to_read_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8197E171-CB10-43CF-8E38-96CC2D026D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter."
      }, {
        "lang" : "es",
        "value" : "Paid To Read Script 2.0.5 tiene un vulnerabilidad de omisión de autenticación en el panel de administración a través de una petición directa, tal y como lo demuestran el parámetro fn en admin/viewvisitcamp.php y el parámetro uid en admin/userview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paid_to_read_script_project:paid_to_read_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8197E171-CB10-43CF-8E38-96CC2D026D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter."
      }, {
        "lang" : "es",
        "value" : "Paid To Read Script 2.0.5 tiene una vulnerabilidad de Cross-Site Scripting (XSS) a través del parámetro tier en referals.php o el parámetro uid en admin/userview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paid_to_read_script_project:paid_to_read_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8197E171-CB10-43CF-8E38-96CC2D026D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter."
      }, {
        "lang" : "es",
        "value" : "Paid To Read Script 2.0.5 tiene una inyección SQL mediante el parámetro id en referrals.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paid_to_read_script_project:paid_to_read_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8197E171-CB10-43CF-8E38-96CC2D026D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T03:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Clockwork SMS clockwork-test-message.php component has XSS via a crafted \"to\" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Booking Calendar - Clockwork SMS 1.0.5, Contact Form 7 - Clockwork SMS 2.3.0, Fast Secure Contact Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2, and WP e-Commerce - Clockwork SMS 2.0.5."
      }, {
        "lang" : "es",
        "value" : "El componente clockwork-test-message.php en Clockwork SMS tiene una vulnerabilidad Cross-Site Scripting (XSS) a través de un parámetro \"to\" manipulado en una petición clockwork-test-message en wp-admin/admin.php. Este código de componente se encuentra en los siguientes plugins de WordPress: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Booking Calendar - Clockwork SMS 1.0.5, Contact Form 7 - Clockwork SMS 2.3.0, Fast Secure Contact Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2 y WP e-Commerce - Clockwork SMS 2.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:booking_calendar_sms:1.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4C9BC167-7819-44BD-930D-C74F1994E485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:clockwork_sms_notfications:2.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2F02FBF0-D546-4E09-AC4F-FF1024954089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:contact_form_7_sms:2.3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "ACA06C65-8A76-4333-9CAC-01B33E247FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:fast_secure_contact_form_sms:2.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BCC91481-9ABD-4119-9BA4-6F4FE9F72B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:formidable:1.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "70394F55-7CD7-4FDE-AB27-620CDC2AAD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:gravity_forms:2.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0FE1E86E-8BBD-4690-959D-603AD8D9A920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:two-factor_authentication:1.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4643968B-EA48-49B8-AACC-EEBA690A3E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:wp_e-commerce:2.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B8B63822-6EFA-4FB1-BF3A-05ED2B9FB333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145469/Clockwork-SMS-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1781424/clockwork-two-factor-authentication/trunk/templates/clockwork-test-message.php?old=706348&old_path=clockwork-two-factor-authentication%2Ftrunk%2Ftemplates%2Fclockwork-test-message.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145469/Clockwork-SMS-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1781424/clockwork-two-factor-authentication/trunk/templates/clockwork-test-message.php?old=706348&old_path=clockwork-two-factor-authentication%2Ftrunk%2Ftemplates%2Fclockwork-test-message.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:00.443",
      "lastModified" : "2023-11-07T02:41:45.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs chunk allocation."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.3.27a, hay una sobrelectura de búfer basada en memoria dinámica (heap) en ReadOneJNGImage en coders/png. c. Esto está relacionado con la asignación de chunks oFFs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.27a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A572B71E-39A0-411C-A9BE-3E310B70C9C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=8e3d2264109c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/530/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=8e3d2264109c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/530/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:00.757",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.3.27a, existe una sobrelectura de búfer en ReadPALMImage en coders/palm.c cuando QuantumDepth es 8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.27a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A572B71E-39A0-411C-A9BE-3E310B70C9C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=60932931559a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/529/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=60932931559a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/529/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4248-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:00.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data."
      }, {
        "lang" : "es",
        "value" : "En GIMP 2.8.22, existe una sobrelectura de búfer basada en memoria dinámica (heap) en load_image en plug-ins/common/file-gbr.c en el analizador import gbr. Esto está relacionado con la gestión incorrecta de datos UTF-8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD66A4-EDB2-4A93-865F-DE5A44D3E04A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102899",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790784",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:00.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c."
      }, {
        "lang" : "es",
        "value" : "En GIMP 2.8.22, existe un desbordamiento de búfer basado en memoria dinámica (heap) en la función fli_read_brun en plug-ins/file-fli/fli.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD66A4-EDB2-4A93-865F-DE5A44D3E04A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=739133",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=739133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image."
      }, {
        "lang" : "es",
        "value" : "En GIMP 2.8.22, existe una sobrelectura de búfer basada en memoria dinámica (heap) en ReadImage en plug-ins/common/file-tga.c (relacionado con bgr2rgb.part.1) mediante un valor bits-per-pixel no esperado para una imagen RGBA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD66A4-EDB2-4A93-865F-DE5A44D3E04A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102765",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=739134",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=739134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c."
      }, {
        "lang" : "es",
        "value" : "En GIMP 2.8.22, existe una sobrelectura de búfer basada en memoria dinámica (heap) en read_creator_block en plug-ins/common/file-psp.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD66A4-EDB2-4A93-865F-DE5A44D3E04A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790853",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\\0' character after the version string."
      }, {
        "lang" : "es",
        "value" : "En GIMP 2.8.22, existe una sobrelectura de búfer basada en pila en xcf_load_stream en app/xcf/xcf.c cuando no hay un carácter \"\\0\" después de la cadena version."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD66A4-EDB2-4A93-865F-DE5A44D3E04A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790783",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c."
      }, {
        "lang" : "es",
        "value" : "En GIMP 2.8.22, existe un desbordamiento de búfer basado en memoria dinámica (heap) en read_channel_data en plug-ins/common/file-psp.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD66A4-EDB2-4A93-865F-DE5A44D3E04A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=790849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3539-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely."
      }, {
        "lang" : "es",
        "value" : "La función lazy_initialize en lib/resolv.rb en Ruby hasta la versión 2.4.3 utiliza Kernel#open, lo que podría permitir ataques de inyección de comandos, tal y como demuestra un argumento Resolv::Hosts::new que comience con un carácter \"|\". Esta es una vulnerabilidad diferente a CVE-2017-17405. NOTA: es altamente improbable que se den situaciones con entradas no fiables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndIncluding" : "2.2.8",
            "matchCriteriaId" : "B35C3AD5-0AFB-481C-A14C-74FE4E9D4075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3",
            "versionEndIncluding" : "2.3.5",
            "matchCriteriaId" : "1D4CCCBF-2BC7-4F93-ABD5-E8A979DD6FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4",
            "versionEndIncluding" : "2.4.2",
            "matchCriteriaId" : "175826D2-3602-48AE-A3B9-5764E8FC8834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.5.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "1A059BF9-B9CA-4468-ABCD-0B8BD0C67FEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ruby/ruby/pull/1777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ruby/ruby/pull/1777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a comment."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en la función markup_clean_href en inc/conv.php en BlogoText hasta la versión 3.7.6 permite que los atacantes remotos inyecten código JavaScript arbitrario mediante un comentario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogotext_project:blogotext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "D0375519-1423-42DC-BFF4-8250FEDDF0E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlogoText/blogotext/commit/7c6f74e43008b2397160775696c67acbab87911d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/345",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/commit/7c6f74e43008b2397160775696c67acbab87911d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en creer_fichier_zip en admin/maintenance.php en BlogoText hasta la versión 3.7.6 permite a los atacantes remotos evadir un mecanismo de protección de aleatorización de nombres de archivo y leer archivos de copia de seguridad en servidores Windows, proporcionando el nombre archiv~1.zip (también conocido como un nombre de archivo 8.3)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogotext_project:blogotext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "D0375519-1423-42DC-BFF4-8250FEDDF0E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/345",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field."
      }, {
        "lang" : "es",
        "value" : "validate_form_preferences en admin/preferences.php en BlogoText hasta la versión 3.7.6 permite a los atacantes omitir las restricciones de acceso previstas a través de vectores relacionados con un campo de dirección de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogotext_project:blogotext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "D0375519-1423-42DC-BFF4-8250FEDDF0E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlogoText/blogotext/commit/256041d8cab2fdc50678f4d49d916fea25cdb4fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/345",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/commit/256041d8cab2fdc50678f4d49d916fea25cdb4fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BlogoText/blogotext/issues/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:01.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088."
      }, {
        "lang" : "es",
        "value" : "En IKARUS anti.virus 2.16.20, el archivo del controlador (ntguard.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x83000088."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23909AB-FC52-45DA-89DE-0954253EAE75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000088",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x827300A4."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.65, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x827300A4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer_lite:8.5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A5E41E-B286-402B-BD86-9B75C6BBFB75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x827300A4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x827300A4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058."
      }, {
        "lang" : "es",
        "value" : "En IKARUS anti.virus 2.16.20, el archivo del controlador (ntguard.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x83000058."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23909AB-FC52-45DA-89DE-0954253EAE75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.42, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x8273A0A0. Esta es una vulnerabilidad diferente de CVE-2017-17800."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.42:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "53E0DB63-5253-4F1B-AF09-C41059932E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x8273A0A0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x8273A0A0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.65, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x82730068."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.65:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "D3BE1B14-10A1-45A5-BF81-AF71140329B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x82730068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x82730068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.65, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x8273A0A0. Esta es una vulnerabilidad diferente de CVE-2017-17798."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.65:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "D3BE1B14-10A1-45A5-BF81-AF71140329B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273A0A0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273A0A0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E060."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.65, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x8273E060."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.65:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "D3BE1B14-10A1-45A5-BF81-AF71140329B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273E060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273E060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E080."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.65, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x8273E080."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.65:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "D3BE1B14-10A1-45A5-BF81-AF71140329B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273E080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273E080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475."
      }, {
        "lang" : "es",
        "value" : "En TG Soft Vir.IT eXplorer Lite 8.5.65, el archivo del controlador (VIRAGTLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x82736068. Esta es una vulnerabilidad diferente de CVE-2017-17475."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:8.5.65:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "D3BE1B14-10A1-45A5-BF81-AF71140329B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x82736068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x82736068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T09:29:02.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084."
      }, {
        "lang" : "es",
        "value" : "En IKARUS anti.virus 2.16.20, el archivo del controlador (ntguard.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o, posiblemente, otro impacto sin especificar porque no se validan los valores de entrada de las llamadas IOCTL 0x83000084."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:2.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23909AB-FC52-45DA-89DE-0954253EAE75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10956",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the tile index member of SOT markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4978."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el miembro del íncide tile de los marcadores SOT. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4978."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-858",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10957",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the arrowEnd attribute of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4979."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo arrowEnd de objetos Annotation. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4979."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-859",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10958",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the value attribute of Field objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4980."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo value de objetos Field. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4980."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-860",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10959",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setAction method of Link objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4981."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método setAction de objetos Link. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4981."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-861",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14818",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.647",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4982."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen instalaciones sensibles o vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de imágenes JPEG2000 embebidas en archivos PDF. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4982."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-862",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14819",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the channel number member of the cdef box. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5011."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el miembro del número de canal de la caja cdef. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5011."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-863",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14820",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the tile index of the SOT marker in JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5012."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el miembro del índice tile del marcador SOT en imágenes JPEG2000. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5012."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-864",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14821",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the xTsiz member of SIZ markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5013."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis del miembro xTsiz de los marcadores SIZ. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5013."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-865",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14822",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the xOsiz member of SIZ markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5014."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis del miembro xOsiz de los marcadores SIZ. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5014."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-866",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14823",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.913",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the signer method of XFA's Signature objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-5015."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método signer de objetos Signature de XFA. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5015."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-867",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14824",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:00.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the insert method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5016."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método insert de objetos XFAScriptObject. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-868",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14825",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:01.020",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the remove method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5017."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método remove de objetos XFAScriptObject. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5017."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-869",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14826",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:01.850",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the formNodes method of XFA Node objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5018."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método formNodes de objetos XFA Node. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5018."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-870",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14827",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:01.897",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the append method of XFA Node objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5019."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método append de objetos XFA Node. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5019."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-871",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14828",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:01.943",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the w method of XFA Layout objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5020."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método w de objetos XFA Layout. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5020."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-872",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14829",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:01.990",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the openList method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5021."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método openList de objetos XFAScriptObject. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5021."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-873",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14830",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setFocus method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5022."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método setFocus de objetos XFAScriptObject. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5022."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-874",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14831",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.100",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the author attribute of Circle Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5023."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo author de objetos Circle Annotation. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5023."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-875",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14832",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.163",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the style attribute of Caret Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5024."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo style de objetos Caret Annotation. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5024."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-876",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14833",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the style attribute of Text Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5025."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo style de objetos Text Annotation. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5025."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-877",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14834",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the style attribute of FileAttachment annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5026."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo style de objetos FileAttachment Annotation. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5026."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-878",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14835",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the page method of XFA Layout objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5027."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método page de objetos XFA Layout. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5027."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-879",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14836",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the modDate attribute of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5028."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo modDate de objetos Annotation. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5028."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B9BB24-9172-4958-8B00-81B3042B8843"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-880",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14837",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the pageSpan method of XFA Layout objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5029."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método pageSpan de objetos XFA Layout. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5029."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-881",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16571",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of references to the app object from FormCalc. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5072."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en la manipulación de referencias en el objeto app de FormCalc. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5072."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-882",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16572",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FormCalc's closeDoc method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5073."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método closeDoc de FormCalc. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5073."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-883",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16573",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LZWDecode filters. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5078."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de filtros LZWDecode. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5078."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-884",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16574",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.583",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Image filters. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5079."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de filtros Image. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5079."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-885",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16575",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA's bind element. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5091."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el elemento bind de XFA. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5091."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-886",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16576",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XFA's field element. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5092."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el elemento field de XFA. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5092."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-887",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16577",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.710",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the alignment attribute of Field objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5094."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo alignment de objetos Field. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5094."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-888",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16578",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the picture elements within XFA forms. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5216."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en los elementos picture de formularios XFA. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5216."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-889",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16579",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.803",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5244."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis de imágenes JPEG2000. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5244."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-890",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16580",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.833",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ImageField node of XFA forms. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5281."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el nodo ImageField de los formularios XFA. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5281."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-891",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16581",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.880",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the author attribute of the Document object. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5282."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el atributo author del objeto Document. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5282."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-892",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16582",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.927",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the clearItems XFA method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5288."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método XFA clearItems. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado una condición de confusión de tipos. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5288."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-893",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16583",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:02.960",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the datasets element of XFA forms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5289."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el elemento datasets de los formularios XFA. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5289."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-894",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16584",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:03.007",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within util.printf. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5290."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en util.printf. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5290."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-895",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16585",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:03.053",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.response method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5294."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método app.response. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5294."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-896",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16586",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:03.083",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addAnnot method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5295."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método addAnnot. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5295."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-897",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16587",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:03.147",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5296."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Foxit Reader 8.3.2.25013. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el método removeField. El problema deriva de la falta de validación de la existencia de un objeto previa a la realización de operaciones sobre el objeto. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-5296."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665DD228-6A9C-476D-8720-3B4E491E1D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-898",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16588",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:03.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SOT markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4976."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis marcadores SOT. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4976."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-856",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16589",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-20T14:29:03.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the yTsiz member of SIZ markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4977."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Foxit Reader 8.3.1.21155. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el análisis del miembro yTsiz de los marcadores SIZ. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la lectura más allá del final de un objeto asignado. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-4977."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:8.3.1.21155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957522E-0100-44FC-8E77-EEF3A0AC3ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-857",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4933",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-12-20T15:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall."
      }, {
        "lang" : "es",
        "value" : "VMware ESXi (6.5 anteriores a ESXi650-201710401-BG), Workstation (12.x anteriores a la 12.5.8) y Fusion (8.x anteriores a la 8.5.9) contienen una vulnerabilidad que podría permitir que una sesión VNC autenticada provoque un desbordamiento de memoria dinámica (heap) mediante una serie específica de paquetes VNC, resultando en una corrupción de memoria dinámica. La explotación exitosa de esta vulnerabilidad podría resultar en la ejecución remota de código en una máquina virtual mediante la sesión VNC autenticada. Nota: Para que sea posible la explotación en ESXi, VNC debe estar habilitado manualmente en un archivo de configuración .vmx de la máquina virtual. Además, ESXi se debe configurar para permitir el tráfico VNC a través del firewall incorporado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.8",
            "matchCriteriaId" : "FE8FC688-FBC8-4BBF-BEC6-D8B85B61C3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC8B7E0-C0D4-416C-B9BD-011B0DCE9A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation_pro:14.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5AECF4-F516-4FB8-906D-E8608D331C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAFF86-C65F-4723-8A63-BACE2F797937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC31DE3-ACFE-422F-B253-2FE4AAFE3954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*",
            "matchCriteriaId" : "B30B3EA4-495F-4915-B6E3-5FB9277C2DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA9E337-B4F3-4895-BA58-962F8CDEE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*",
            "matchCriteriaId" : "830B0BC1-A368-49AC-B6C9-B000972EF92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*",
            "matchCriteriaId" : "614394F3-3BEE-4E12-AABF-436D54A04313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*",
            "matchCriteriaId" : "350FD3CE-8B64-4FCF-82DE-BE941156F4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*",
            "matchCriteriaId" : "C9EAE177-6C7E-4C1B-ADEE-2C036F731272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFEEC31-8462-4DF9-A1DA-D7057C209CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC6BC16-0A1D-44B3-BA68-63EA05EDD54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*",
            "matchCriteriaId" : "942DAD67-9455-4D02-BD3B-BFD2DE7A7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACC1A72-F6B6-430A-AB89-AB0A11587F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*",
            "matchCriteriaId" : "45111C74-BF6F-4C05-A0D3-CE325AD0C02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CE5849-01B1-4E36-83E8-496A3F328C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*",
            "matchCriteriaId" : "A879BA05-3A80-4EBC-AA9D-9B53695425B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*",
            "matchCriteriaId" : "3D65A0E8-A1E0-42F3-B77D-2F32979278BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*",
            "matchCriteriaId" : "80C10150-39BA-4818-B48F-8645D4A0D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*",
            "matchCriteriaId" : "9792B986-86EF-40E0-9427-A45F858717E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*",
            "matchCriteriaId" : "37EDD688-C91A-4A35-913A-82E156ADD242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC1AC0E-8D3F-46C0-BDA9-EB9DC9971F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*",
            "matchCriteriaId" : "47DA50DA-7CA4-4B76-8B3B-A5732509F71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*",
            "matchCriteriaId" : "76EB1A04-0645-4909-AEF9-33D6FADA4793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A35723-D968-42D6-89EB-86CA550516E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AC8A19-F98E-48F1-A1EA-EAA1C7208335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A3952-8429-4762-8701-47D7C1F05A5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.9",
            "matchCriteriaId" : "20740117-8BC1-47B8-AA10-8ADF91F1CA86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040024",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040025",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4940",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-12-20T15:29:00.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client."
      }, {
        "lang" : "es",
        "value" : "El ESXi Host Client en VMware ESXi (6.5 anteriores a la ESXi650-201712103-SG, 5.5 anteriores a la ESXi600-201711103-SG y 5.5 anteriores a la ESXi550-201709102-SG) contiene una vulnerabilidad que podría contener Cross-Site Scripting (XSS) persistente. Un atacante puede explotar esta vulnerabilidad inyectando código JavaScript que podría ejecutarse cuando otros usuarios acceden a Host Client."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC223AC-EB3D-48CF-A6CC-D35E00A38394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "75C8E87E-A869-49F8-89F9-DE64A45CDB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F8878C-F73D-4549-9607-74880176D2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
            "matchCriteriaId" : "E47D369F-13B2-42B3-BB74-60AAD0954B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:*",
            "matchCriteriaId" : "45551873-2E14-4324-9946-C22079F7D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D5E67-78C9-495E-91F0-AF94871E5FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "6D35CDFE-F0E7-43F7-A307-E3BDDE5AEAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC13026-3B5A-4BF0-BDEC-B77338E427E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA70BA-FFCD-4D2D-AD26-95CC62748937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*",
            "matchCriteriaId" : "4C92DD8B-8AB8-40D4-8E86-12FEB055D37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*",
            "matchCriteriaId" : "C58D77F5-CDB2-47DA-A879-BABEBE2E1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C324FB-3989-4A4A-BF5B-C40CA698DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7AC58E-D1F8-4FDF-9A28-61CF6158330A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*",
            "matchCriteriaId" : "489EE0F6-5510-470E-8711-DC08B4AFB4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*",
            "matchCriteriaId" : "6719ED6F-CBC3-4B1E-9343-23DC3BA15FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAA48A9-9319-4104-B151-D529E5EBF0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "D16CD918-5075-4975-8B1E-21D8AD35A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "7A38CD8E-494D-4E0E-A300-8550FC81FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40ABE8-8DED-4633-A34C-00DF5D510E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "1736B975-089B-413C-8CA0-5524B957EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4DCBF6-7189-497A-B923-08574443172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "16FBA646-0B5E-44A7-BB12-29D5C611AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "29F57497-7B48-4D0C-B8F5-8D33062BECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE96C7-C489-4D14-990B-8524627A23D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "AD82C093-FD98-45DE-9EE6-A05E81A1FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "08789F9E-CDC7-4F89-B925-92C9E3AE5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "26ABB84C-B4BF-424E-8F4C-D2B6BE0AC79E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "621C203B-4B66-49CC-A35D-D7703109BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "3261BDEF-D89C-41D9-A360-EC36EAB17490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*",
            "matchCriteriaId" : "5170A4F6-02B7-4225-B944-73DB5A4D332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*",
            "matchCriteriaId" : "62A97DBA-A56B-4F0B-B9C4-44B5166681AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*",
            "matchCriteriaId" : "806C8BE6-A2BE-45BE-BEF2-396BEB16FCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6211E-134A-484E-8444-FBB5070B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7B05B3-4076-4A44-B9A6-A44419F175C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1636B4-6E79-42D7-AA62-5EE43412B43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0377D0-BBED-41BF-80C5-58414ED413EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*",
            "matchCriteriaId" : "6495283C-D18A-4DDA-852E-46F2273D6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "09DEFEE5-5E9E-4F3A-A245-3E8E2B291339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A97A3-65DB-4697-9CF1-B4F5E4E4132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*",
            "matchCriteriaId" : "17A84E0A-1429-467F-9EE1-FCA062392DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*",
            "matchCriteriaId" : "C591163D-64BC-403B-A460-5B2258EC2F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*",
            "matchCriteriaId" : "ED932B89-D34D-4398-8F79-AF98987CAFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD365A0-0B09-4EC2-9973-691144C99507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE64DC7-A9D1-416F-89BF-D9F8DD8174AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*",
            "matchCriteriaId" : "0E198AE4-A6A3-4875-A7DA-44BE9E1B280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD5BA0-8180-484D-8308-B0862B6E9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EB9A-A908-42D1-A6BC-E38E861BBECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*",
            "matchCriteriaId" : "651EDCAA-D785-464D-AE41-425A69F6FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3C704C-9D60-4F72-B482-07F209985E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFE956-4391-4B71-BD0B-96A008A624B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "409778CD-9AB3-4793-A5F5-8D8657F81442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA75DB-B6BE-4E75-89B6-C69E96CBD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC45A8B-6DE0-465F-9644-B75A09394F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "7A265671-BCB0-401A-A1E8-500F9D41492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "83168067-1E43-4186-9B15-3FC702C6583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*",
            "matchCriteriaId" : "8C122DB4-8410-4C4E-87BE-EB3175CE182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*",
            "matchCriteriaId" : "C76ED78D-0778-4269-938E-BB7586C1E44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F78C5-E995-4E37-83C5-5B6A1D39E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E842D-AF37-4641-AD05-B91F250E7487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EAC87-32FD-4553-B71D-181F2C66AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F0D62-4C51-46D6-A6C4-E479BE6B2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*",
            "matchCriteriaId" : "865D3042-68ED-44B9-A036-9433F7463D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4FEF78-D2DA-4CCE-BB81-7E2090ED545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*",
            "matchCriteriaId" : "11AE3F61-9655-4B20-96E1-92112BE2BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE35166-3019-450B-9C69-484E4EDE5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*",
            "matchCriteriaId" : "D892B066-381B-4F46-8363-7BA1647BBCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*",
            "matchCriteriaId" : "710DB381-5504-4493-8D0A-17AB8E5A903B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*",
            "matchCriteriaId" : "42AAA3B7-B74D-4B67-8BD3-1D9B5ED1E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*",
            "matchCriteriaId" : "33CBCA55-010E-4E84-B2F8-F9B53D5A3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*",
            "matchCriteriaId" : "95A73B4B-F9B3-4D66-9668-902902C73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*",
            "matchCriteriaId" : "8D14D51D-E2EA-4826-8C6E-AF1C15F12384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*",
            "matchCriteriaId" : "BED100A1-9D59-48BE-91D4-0C8F2D678E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*",
            "matchCriteriaId" : "660B51F2-DFE0-49F6-AD2A-6E94B20F4019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF80536-348A-468E-AC1C-DA53632FCC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABF302-AC32-4507-BDD9-314854DE55BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDE020F-4FB1-4F1D-B434-6745045702D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1538B9-E860-46CE-A4CA-1393ECA20D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706401:*:*:*:*:*:*",
            "matchCriteriaId" : "386A6805-6167-47BA-A02F-073DC7E0FE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706402:*:*:*:*:*:*",
            "matchCriteriaId" : "03BA15D8-F7A2-428C-8104-BCEBDE7C1EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706403:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFCFE7B-37E5-4C64-9B43-4F693F227231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201710301:*:*:*:*:*:*",
            "matchCriteriaId" : "02CFAE22-37DB-4787-96FB-9E0F8EF671E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAFF86-C65F-4723-8A63-BACE2F797937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC31DE3-ACFE-422F-B253-2FE4AAFE3954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*",
            "matchCriteriaId" : "B30B3EA4-495F-4915-B6E3-5FB9277C2DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA9E337-B4F3-4895-BA58-962F8CDEE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*",
            "matchCriteriaId" : "830B0BC1-A368-49AC-B6C9-B000972EF92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*",
            "matchCriteriaId" : "614394F3-3BEE-4E12-AABF-436D54A04313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*",
            "matchCriteriaId" : "350FD3CE-8B64-4FCF-82DE-BE941156F4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*",
            "matchCriteriaId" : "C9EAE177-6C7E-4C1B-ADEE-2C036F731272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFEEC31-8462-4DF9-A1DA-D7057C209CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC6BC16-0A1D-44B3-BA68-63EA05EDD54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*",
            "matchCriteriaId" : "942DAD67-9455-4D02-BD3B-BFD2DE7A7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACC1A72-F6B6-430A-AB89-AB0A11587F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*",
            "matchCriteriaId" : "45111C74-BF6F-4C05-A0D3-CE325AD0C02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CE5849-01B1-4E36-83E8-496A3F328C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*",
            "matchCriteriaId" : "A879BA05-3A80-4EBC-AA9D-9B53695425B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*",
            "matchCriteriaId" : "3D65A0E8-A1E0-42F3-B77D-2F32979278BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*",
            "matchCriteriaId" : "80C10150-39BA-4818-B48F-8645D4A0D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*",
            "matchCriteriaId" : "9792B986-86EF-40E0-9427-A45F858717E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*",
            "matchCriteriaId" : "37EDD688-C91A-4A35-913A-82E156ADD242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC1AC0E-8D3F-46C0-BDA9-EB9DC9971F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*",
            "matchCriteriaId" : "47DA50DA-7CA4-4B76-8B3B-A5732509F71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*",
            "matchCriteriaId" : "76EB1A04-0645-4909-AEF9-33D6FADA4793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A35723-D968-42D6-89EB-86CA550516E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AC8A19-F98E-48F1-A1EA-EAA1C7208335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A3952-8429-4762-8701-47D7C1F05A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*",
            "matchCriteriaId" : "5B007609-C312-469B-BACF-04D6D80DADF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040024",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4941",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-12-20T15:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a stack overflow via a specific set of VNC packets. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall."
      }, {
        "lang" : "es",
        "value" : "VMware ESXi (6.0 anteriores a ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x anteriores a la 12.5.8) y Fusion (8.x anteriores a la 8.5.9) contienen una vulnerabilidad que podría permitir que una sesión VNC autenticada provoque un desbordamiento de pila mediante una serie específica de paquetes VNC. La explotación exitosa de esta vulnerabilidad podría resultar en la ejecución remota de código en una máquina virtual mediante la sesión VNC autenticada. Nota: Para que sea posible la explotación en ESXi, VNC debe estar habilitado manualmente en un archivo de configuración .vmx de la máquina virtual. Además, ESXi se debe configurar para permitir el tráfico VNC a través del firewall incorporado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.9",
            "matchCriteriaId" : "20740117-8BC1-47B8-AA10-8ADF91F1CA86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.8",
            "matchCriteriaId" : "133DFB76-70D7-4480-B409-2A657DF3B6AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:*",
            "matchCriteriaId" : "45551873-2E14-4324-9946-C22079F7D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5:550-20170904001:*:*:*:*:*:*",
            "matchCriteriaId" : "5D578101-DDC8-4A23-9FDC-259802D1895F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
            "matchCriteriaId" : "52403C80-3022-4E5B-B16A-24B116D1E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
            "matchCriteriaId" : "FBECED2E-05FD-492E-8B57-9BB8ADA82444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
            "matchCriteriaId" : "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
            "matchCriteriaId" : "9159F6E1-6A36-4D3C-85B1-2205B90CD244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D5E67-78C9-495E-91F0-AF94871E5FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "6D35CDFE-F0E7-43F7-A307-E3BDDE5AEAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC13026-3B5A-4BF0-BDEC-B77338E427E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA70BA-FFCD-4D2D-AD26-95CC62748937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*",
            "matchCriteriaId" : "4C92DD8B-8AB8-40D4-8E86-12FEB055D37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*",
            "matchCriteriaId" : "C58D77F5-CDB2-47DA-A879-BABEBE2E1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C324FB-3989-4A4A-BF5B-C40CA698DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7AC58E-D1F8-4FDF-9A28-61CF6158330A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*",
            "matchCriteriaId" : "489EE0F6-5510-470E-8711-DC08B4AFB4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*",
            "matchCriteriaId" : "6719ED6F-CBC3-4B1E-9343-23DC3BA15FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAA48A9-9319-4104-B151-D529E5EBF0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "D16CD918-5075-4975-8B1E-21D8AD35A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "7A38CD8E-494D-4E0E-A300-8550FC81FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40ABE8-8DED-4633-A34C-00DF5D510E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "1736B975-089B-413C-8CA0-5524B957EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4DCBF6-7189-497A-B923-08574443172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "16FBA646-0B5E-44A7-BB12-29D5C611AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "29F57497-7B48-4D0C-B8F5-8D33062BECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE96C7-C489-4D14-990B-8524627A23D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "AD82C093-FD98-45DE-9EE6-A05E81A1FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "08789F9E-CDC7-4F89-B925-92C9E3AE5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "26ABB84C-B4BF-424E-8F4C-D2B6BE0AC79E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "621C203B-4B66-49CC-A35D-D7703109BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "3261BDEF-D89C-41D9-A360-EC36EAB17490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*",
            "matchCriteriaId" : "5170A4F6-02B7-4225-B944-73DB5A4D332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*",
            "matchCriteriaId" : "62A97DBA-A56B-4F0B-B9C4-44B5166681AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*",
            "matchCriteriaId" : "806C8BE6-A2BE-45BE-BEF2-396BEB16FCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6211E-134A-484E-8444-FBB5070B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7B05B3-4076-4A44-B9A6-A44419F175C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1636B4-6E79-42D7-AA62-5EE43412B43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0377D0-BBED-41BF-80C5-58414ED413EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*",
            "matchCriteriaId" : "6495283C-D18A-4DDA-852E-46F2273D6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "09DEFEE5-5E9E-4F3A-A245-3E8E2B291339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A97A3-65DB-4697-9CF1-B4F5E4E4132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*",
            "matchCriteriaId" : "17A84E0A-1429-467F-9EE1-FCA062392DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*",
            "matchCriteriaId" : "C591163D-64BC-403B-A460-5B2258EC2F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*",
            "matchCriteriaId" : "ED932B89-D34D-4398-8F79-AF98987CAFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD365A0-0B09-4EC2-9973-691144C99507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE64DC7-A9D1-416F-89BF-D9F8DD8174AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*",
            "matchCriteriaId" : "0E198AE4-A6A3-4875-A7DA-44BE9E1B280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD5BA0-8180-484D-8308-B0862B6E9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EB9A-A908-42D1-A6BC-E38E861BBECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*",
            "matchCriteriaId" : "651EDCAA-D785-464D-AE41-425A69F6FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3C704C-9D60-4F72-B482-07F209985E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFE956-4391-4B71-BD0B-96A008A624B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "409778CD-9AB3-4793-A5F5-8D8657F81442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA75DB-B6BE-4E75-89B6-C69E96CBD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC45A8B-6DE0-465F-9644-B75A09394F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "7A265671-BCB0-401A-A1E8-500F9D41492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "83168067-1E43-4186-9B15-3FC702C6583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*",
            "matchCriteriaId" : "8C122DB4-8410-4C4E-87BE-EB3175CE182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*",
            "matchCriteriaId" : "C76ED78D-0778-4269-938E-BB7586C1E44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F78C5-E995-4E37-83C5-5B6A1D39E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E842D-AF37-4641-AD05-B91F250E7487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EAC87-32FD-4553-B71D-181F2C66AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F0D62-4C51-46D6-A6C4-E479BE6B2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*",
            "matchCriteriaId" : "865D3042-68ED-44B9-A036-9433F7463D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4FEF78-D2DA-4CCE-BB81-7E2090ED545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*",
            "matchCriteriaId" : "11AE3F61-9655-4B20-96E1-92112BE2BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE35166-3019-450B-9C69-484E4EDE5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*",
            "matchCriteriaId" : "D892B066-381B-4F46-8363-7BA1647BBCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*",
            "matchCriteriaId" : "710DB381-5504-4493-8D0A-17AB8E5A903B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*",
            "matchCriteriaId" : "42AAA3B7-B74D-4B67-8BD3-1D9B5ED1E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*",
            "matchCriteriaId" : "33CBCA55-010E-4E84-B2F8-F9B53D5A3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*",
            "matchCriteriaId" : "95A73B4B-F9B3-4D66-9668-902902C73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*",
            "matchCriteriaId" : "8D14D51D-E2EA-4826-8C6E-AF1C15F12384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*",
            "matchCriteriaId" : "BED100A1-9D59-48BE-91D4-0C8F2D678E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*",
            "matchCriteriaId" : "660B51F2-DFE0-49F6-AD2A-6E94B20F4019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF80536-348A-468E-AC1C-DA53632FCC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABF302-AC32-4507-BDD9-314854DE55BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDE020F-4FB1-4F1D-B434-6745045702D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1538B9-E860-46CE-A4CA-1393ECA20D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706401:*:*:*:*:*:*",
            "matchCriteriaId" : "386A6805-6167-47BA-A02F-073DC7E0FE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706402:*:*:*:*:*:*",
            "matchCriteriaId" : "03BA15D8-F7A2-428C-8104-BCEBDE7C1EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706403:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFCFE7B-37E5-4C64-9B43-4F693F227231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201710301:*:*:*:*:*:*",
            "matchCriteriaId" : "02CFAE22-37DB-4787-96FB-9E0F8EF671E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040024",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040025",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4943",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2017-12-20T15:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS."
      }, {
        "lang" : "es",
        "value" : "VMware vCenter Server Appliance (vCSA) (6.5 anteriores a 6.5 U1d) contiene una vulnerabilidad de escalado de privilegios locales mediante el plugin showlog. La explotación exitosa de esta vulnerabilidad podría resultar en que un usuario poco privilegiado obtenga privilegios a nivel de root en el sistema operativo base de la máquina."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7DDB0C-3C07-4B5E-8B8A-0542FEE72877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD16169-A7DF-4604-888C-156A60018E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*",
            "matchCriteriaId" : "46FC9F34-C8FA-4AFE-9F4A-7CF9516BD4D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*",
            "matchCriteriaId" : "D26534EB-327B-4ED6-A3E1-005552CB1F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*",
            "matchCriteriaId" : "786CDD50-7E18-4437-8DB9-2D0ADECD436E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE8DAE-0E78-4004-983D-1ECD8855EC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E51F433-1152-4E94-AF77-970230B1A574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*",
            "matchCriteriaId" : "0064D104-E0D8-481A-9029-D3726A1A9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4D3F61-6CD9-411F-A205-EB06A57EBB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040026",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2017-0021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T16:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4."
      }, {
        "lang" : "es",
        "value" : "Ability Mail Server 3.3.2 tiene una vulnerabilidad Cross Site Scripting (XSS) a través del cuerpo de un mensaje de correo electrónico, con código JavaScript que se ejecuta en la pantalla Read Mail (también conocida como /_readmail URI). Esto se ha corregido en la versión 4.2.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codecrafters:ability_mail_server:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D313B55-4F69-4601-BB99-675FB95D28B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43378/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43378/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T17:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging \"full\" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h."
      }, {
        "lang" : "es",
        "value" : "RADOS Gateway en Ceph desde la versión 12.1.0 hasta la 12.2.1 permite que los usuarios autenticados remotos provoquen una denegación de servicio (fallo de aserción y salida de la aplicación) utilizando privilegios \"full\" (no necesariamente admin) para publicar un perfil no válido en la API admin. Esto está relacionado con rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h y rgw/rgw_iam_types.h."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "2263DE64-5503-471D-BBD1-F678E58F008D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEACBFF-6D05-4B69-BF7A-F7E539D9BF6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1515872",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ceph/ceph/commit/b3118cabb8060a8cc6a01c4e8264cb18e7b1745a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6VJA32U7HKGDRJQDJVM7JBYWD4T7BJL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1515872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ceph/ceph/commit/b3118cabb8060a8cc6a01c4e8264cb18e7b1745a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6VJA32U7HKGDRJQDJVM7JBYWD4T7BJL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T17:29:00.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Ticket Request System (OTRS) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email."
      }, {
        "lang" : "es",
        "value" : "Open Ticket Request System (OTRS) en versiones 4.0.x anteriores a la 4.0.28, 5.0.x anteriores a la 5.0.26 y 6.0.x anteriores a la 6.0.3, cuando el soporte de cookies está desactivado, podría permitir a los atacantes remotos secuestrar las sesiones web y ganar privilegios en consecuencia mediante un email manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.28",
            "matchCriteriaId" : "87E8447E-0679-4520-9E24-25344DD01390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.26",
            "matchCriteriaId" : "D7A78367-51C1-4680-AA0B-E38029FC5DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "7F6B61B6-7466-4B85-AB4E-4D34657262A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OTRS/otrs/commit/26707eaaa791648e6c7ad6aeaa27efd70e7c66eb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OTRS/otrs/commit/36e3be99cfe8a9e09afa1b75fdc39f3e28f561fc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OTRS/otrs/commit/720c73fbf53e476ca7dfdf2ae1d4d3d2aad2b953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4069",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-10-security-update-otrs-framework/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OTRS/otrs/commit/26707eaaa791648e6c7ad6aeaa27efd70e7c66eb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OTRS/otrs/commit/36e3be99cfe8a9e09afa1b75fdc39f3e28f561fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OTRS/otrs/commit/720c73fbf53e476ca7dfdf2ae1d4d3d2aad2b953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.otrs.com/security-advisory-2017-10-security-update-otrs-framework/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12072",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-20T18:29:00.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en PixlrEditorHandler.php en Synology Photo Station en versiones anteriores a la 6.8.0-3456 permite que atacantes remotos autenticados inyecten scripts web o HTML arbitrarios mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.0-3456",
            "matchCriteriaId" : "13AF904B-9CBE-4125-8201-1B2FE1C0ADFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_80",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1257",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 124684."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 divulga información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 124684."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010431",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102308",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124684",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1261",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 124736."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 almacena información potencialmente sensible en archivos de registro que pueden ser leídos por un usuario local. IBM X-Force ID: 124736."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010437",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124736",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1262",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 124737."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 es vulnerable a ataques de separación de respuesta HTTP. Un atacante remoto podría explotar esta vulnerabilidad utilizando una URL especialmente manipulada para provocar que el servidor devuelva una respuesta dividida una vez que se pincha en la URL. Esto permitiría que el atacante realice más ataques como el envenenamiento de la memoria caché web, Cross-Site Scripting (XSS) y posiblemente la obtención de información sensible. IBM X-Force ID: 124737."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010438",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124737",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1266",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 124741."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 especifica permisos para un recurso crítico para la seguridad de forma que permite que ese recurso sea leído o modificado por actores no planeados. IBM X-Force ID: 124741."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011516",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124741",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1270",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 no renueva una variable de sesión tras una autenticación exitosa. Esto podría desembocar en una vulnerabilidad de fijación/secuestro de sesión. Esto podría forzar a un usuario a emplear una cookie que podría ser conocida para un atacante. IBM X-Force ID: 124745."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010439",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124745",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1423",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal 8.5 y 9.0 expone URL del backend del servidor que están configuradas para ser empleadas por el componente Web Application Bridge. IBM X-Force ID: 127476."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF6533-4FE9-4A9B-ABF6-CEDD30402A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040017",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127476",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22011400",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22011400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1494",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128692."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager 8.5 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128692."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7021B830-3EE4-446D-8D87-BBD2097A023E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3C32B-7397-434D-B084-E92C7C6E2FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*",
            "matchCriteriaId" : "6131DC1F-CBA6-4025-B5A5-98307274FA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*",
            "matchCriteriaId" : "439A4F14-76E6-4A21-A23C-D3DA243585A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E245DD24-5C1E-4CF0-993D-0D79A5152594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2016.06:*:*:*:*:*:*",
            "matchCriteriaId" : "51A3D3D0-45DE-4B42-8766-181793090845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2016.09:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3CB0E7-437F-4EFB-94AE-9325D2CC6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2016.12:*:*:*:*:*:*",
            "matchCriteriaId" : "79A27F7F-9EAE-4E2B-B5E8-2C82380D9C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2017.03:*:*:*:*:*:*",
            "matchCriteriaId" : "3F268A9C-9E13-4573-A75E-308CA3193836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2017.06:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1024F5-71EE-4484-8F78-525EE9FF2CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102218",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040355",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128692",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura fuera de límites debido a que no valida valores de entrada de una llamada IOCtl 0x83000058. Este problema es diferente de CVE-2017-17112."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.653",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000058."
      }, {
        "lang" : "es",
        "value" : "En la versión 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de IOCtl 0x83000058."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300005c."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de IOCtl 0x8300005c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.730",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000cc."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de IOCtl 0x830000cc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.777",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c0."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de IOCtl 0x830000c0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.840",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000080."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de IOCtl 0x83000080."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c4, a related issue to CVE-2017-17113."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de una llamada IOCtl 0x830000c4. Este problema es diferente de CVE-2017-17113."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T18:29:00.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000084, a related issue to CVE-2017-17114."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 2.16.18 de IKARUS anti.virus, el controlador ntguard.sys contiene una vulnerabilidad de escritura arbitraria debido a que no valida valores de entrada de una llamada IOCtl 0x83000084. Este problema es diferente de CVE-2017-17114."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikarussecurity:anti.virus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.18",
            "matchCriteriaId" : "6E9F55F1-6FB0-48A2-BD1A-7FF455B70DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.greyhathacker.net/?p=995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15532",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2017-12-20T18:29:00.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also known as directory traversal). These types of attacks aim to access files and directories that are stored outside the web root folder. By manipulating variables, it may be possible to access arbitrary files and directories stored on the file system including application source code or configuration and critical system files."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 10.6.4, Symantec Messaging Gateway podría ser susceptible a un ataque de salto de ruta (también conocido como salto de directorio). Este tipo de ataque intenta acceder a archivos y directorios que están almacenados fuera de la carpeta web root. Al manipular variables, sería posible acceder a archivos y directorios arbitrarios almacenados en el sistema de archivos, incluyendo el código fuente de la aplicación o archivos críticos o de configuración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 5.5,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.4",
            "matchCriteriaId" : "E12A8B76-E165-4E00-AA9F-856AD83C38AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102096",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171220_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171220_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1595",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:00.980",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor podría permitir que un atacante local obtenga información altamente sensible mediante vectores sin especificar. IBM X-Force ID: 132549."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009629",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132549",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1596",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132550."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor podría permitir que un atacante local obtenga información altamente sensible mediante vectores sin especificar. IBM X-Force ID: 132550."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009625",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1598",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.077",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 132611."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009621",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132611",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1600",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132613."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 Database Activity Monitor es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132613."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009622",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132613",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1631",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133140."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 133140."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_for_service_management:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D61491-0785-4193-A828-2177AFB81380"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011307",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133140",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1694",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.200",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165."
      }, {
        "lang" : "es",
        "value" : "IBM Integration Bus 9.0 y 10.0 transmite credenciales de usuario en texto claro y plano que podrían ser leídas por un atacante que utilice técnicas Man-in-the-Middle (MitM). IBM X-Force ID: 134165."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D627B445-2980-4AC2-B674-CA4C472AB214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725E3F95-4096-497D-8F2A-02C185ACF8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576FE339-BD08-4994-B31A-15BC521650E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C319D81D-E66B-47E6-A731-D5074314B94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DF80F1-4163-46E0-A304-BD01C11EA658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4106EAED-FA38-48C7-A4AD-7B718DB53C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E7A0A-47BD-42EC-A66C-E1F64AD6CA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6309A833-9490-494A-BE3A-BA79133BD6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97486673-4740-4F4F-8956-73C06B477096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E917E9-DE5E-482A-9A20-823DF475BE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC25F42C-82EC-44EE-94AC-E85F428460D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3797766-D2E5-4645-A793-ABA12A10CF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1486EFCC-5D66-4172-9D57-55AB25C77B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3770768C-96D0-4D8E-8AB5-0347DBE01AF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011695",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102215",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134165",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1696",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.247",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 134178."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar en sus versiones 7.2 y 7.3 podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el sistema. Mediante el envío de una petición especialmente manipulada, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema. IBM X-Force ID: 134178."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "42F11A77-21A8-422B-B7DD-923D5CD13A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "FD495FC8-875D-44AF-9FEF-D73BDC1C6F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E548AFF-D367-4977-9C6F-2B4B4DF80A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "0599B400-019A-4786-9C84-5ABC7040BA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAF9164-7AC9-4A5A-B13F-A55B832A7C18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011730",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134178",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1746",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 135519."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_for_service_management:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D61491-0785-4193-A828-2177AFB81380"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011308",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135519",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1751",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.387",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135546."
      }, {
        "lang" : "es",
        "value" : "IBM Robotic Process Automation with Automation Anywhere 10.0.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 135546."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_with_automation_anywhere:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE117244-068C-4157-9DAD-DEB52F5E5660"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011185",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102217",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135546",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1757",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-20T18:29:01.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 es vulnerable a inyecciones SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 135858."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60EABED-C8D2-4D84-9EE2-80397057DBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011554",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102300",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135858",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16717",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-20T19:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de desbordamiento de búfer basado en memoria dinámica (heap) en WECON LeviStudio HMI. Se ha identificado la vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap), lo que podría provocar una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:we-con:levi_studio_hmi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D54F887-4DC3-4820-981D-76ED596AC785"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16725",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-20T19:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de desbordamiento de búfer basado en pila en cámaras IP y DVR de Xiongmai Technology que utilizan la interfaz web de NetSurveillance. Se ha identificado la vulnerabilidad de desbordamiento de búfer basado en pila que puede permitir que un atacante ejecute código remotamente o provoque el cierre inesperado del dispositivo. Después de reiniciar, el dispositivo se restaura a un estado más vulnerable en el que Telnet es accesible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008f8-h_firmware:4.02.r11.3070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CA6BA2-E8C1-4B51-9400-B87217D93741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008f8-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C548EF-20C3-4E68-AB93-500CA83B179E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008f4-h_firmware:4.02.r11.3070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5074E0-D949-4042-8276-9A256C11AD13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008f4-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBFF1A6-7DE5-4A6E-A9BE-1421CA848635"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008f2-h_firmware:4.02.r11.3070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D8AFD3-8193-45FD-9671-69A19AAC429B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008f2-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9628AA1A-370E-4C28-A3D0-147F18B5EB52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-mh-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD2BFBF-1116-4C98-A552-309FED3E8E74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-mh-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF088E7-3524-457F-8EEA-701D47E8B74D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-mh-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF60A37-EE56-4D55-BFB5-AEA5088435F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-mh-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F217C3E-2ED3-4C25-8A52-5562FF93672F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-h-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81B8821-E014-4B05-BDFB-64E032C34BD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-h-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4FB2F9-234A-48B0-92AC-1BAA20DA196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t-lm-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6691751-9E07-441E-A3F0-96A8F0F005AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t-lm-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7901086E-B2A8-4C21-A133-282C5C0ECBCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-lm-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8EDF83-276D-4B51-8324-764EE0A8525E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-lm-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D807C098-F763-4CEE-8CAB-91B161045CF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t4-mh-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D91F4EE-A8E3-418B-BE66-5CC792493B3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t4-mh-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0892E2F-48CE-40AE-B628-9DC4D88A7E83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t-mh-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04F5C97-6B46-4F0D-943B-71D1C54B3419"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t-mh-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1FC1D7-5231-4204-8FD1-1731DC697EDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t4-h-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7D4086-E984-474A-A297-5C91BFC84FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t4-h-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6756FF-1EB3-4DEA-B1AB-421A2503A59E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-h-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1B8589-A013-44BE-90D0-E6957CF1CE71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-h-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF74584-F541-43B8-B60C-9FF1D239CFB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t4-h-v2:_firmware:4.02.r11.7601:*:*:*:*:*:*",
            "matchCriteriaId" : "74F9D899-26A1-4715-9867-A2CEAABDD625"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t4-h-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6756FF-1EB3-4DEA-B1AB-421A2503A59E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-h-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1B8589-A013-44BE-90D0-E6957CF1CE71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-h-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF74584-F541-43B8-B60C-9FF1D239CFB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f8-lm-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1BC617-02D0-4DF9-A80A-AD598FD8B405"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f8-lm-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EA84DF-BA54-4433-BAC4-84A06F2E8E7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f4-lm-v2_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBBDB7D-74DD-44AD-B40B-182B0D2A3781"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f4-lm-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFFA616-64FC-41BE-B0CD-D1878F6314B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7808r-ms-v3_firmware:4.02.r11.nat.onvifc.20170327:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E10FF79-F9F9-49F9-8D53-61F32AA7BE04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7808r-ms-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3E3980-A161-4A1A-884C-F7C836D264DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7804r-ms-v3_firmware:4.02.r11.nat.onvifc.20170327:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C7003B-F7E7-48EC-8549-C47DB4BA533B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7804r-ms-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA749731-7DEB-4FD8-822C-61BD48D26B24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t-lm-v3_firmware:4.02.r11.3070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF367C2-5827-43DF-B85C-8D15117AEB1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD87DCA-730C-4761-8055-23FFEC0A9CEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-lm-v3_firmware:4.02.r11.3070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E9C9AB-0948-437D-8CBD-D67887D8F69A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9DDC04-0700-4876-AE59-C58B744A820E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-lm-v3_firmware:4.02.r11.3070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661334D1-3780-498C-9065-648B41F075B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F61F642D-0794-48DE-B7AB-3B3A4ECE14F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t4-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE8489A-EBA4-458A-8DA0-B3B012AA31E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t4-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A1874E-24AB-4B82-8FF0-2796F3BC5218"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0BC635-918B-4118-A900-5E5FDEEFD7C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D4C99D-A5CD-4450-935B-12BADAAB0D60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A51EE38-D832-407B-BC3E-F80EDF7A2C5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77079252-E0AD-4841-BFDD-CA2B5E9E9D78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5547ED25-7C0D-4188-A710-7723BE44C4AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D77B1-01D8-4E9D-920A-F7B1A352301F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t-mh-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1C227B-2286-41DF-9841-99D8206B08FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t-mh-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB94AB32-BEF6-4452-B80F-FA15BDCF4715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-mh-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B66B350-19EE-4665-AD53-9977E4DBFF59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-mh-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610EC6A4-DF89-4F95-9726-4B432D555DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-mh-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C922E048-07BA-4DDD-B433-2A3598FEC564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-mh-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0D02B2-61AA-4E1A-9FBE-189A0EA61EC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-gl-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826C017F-5335-4A80-8A85-3E73FA07EFF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-gl-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7ED8407-A478-4B7F-BBCF-44E8B8206D70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-gl-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF13AE44-7886-43DB-9F8B-74A59151FF83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-gl-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1D4227-3D4F-4C7E-A216-DA5A7C2CEE97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-g-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB5A98D-90A6-4FAE-80AC-981277B88BA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-g-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A75FB5-B90E-4AF4-BC93-AAD63F42880E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016f8-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C1176D-E310-4A16-879C-A631ACF6B3D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016f8-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E53165B-7B40-46A6-A87F-350497FDE959"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016f8-gl-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71985B02-0532-4603-8362-1684D2678C15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016f8-gl-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E363398-8C2D-4761-8005-F7C83F808355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016f4-gl-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98C8A35-7D9A-4D14-A94F-DF899AD627EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016f4-gl-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCCB890-96E4-4DE1-9DF5-3B5B134D8BA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016f2-gl-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "244ECC7F-9BD5-4972-A123-49DDC87A0D90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016f2-gl-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B78663-113B-4D7B-95A3-31E451DE1526"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7808r-lm-v3_firmware:4.02.r11.nat.onvifc.20171120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D3F2F-9125-4153-B9AC-2DEB82C10A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7808r-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B954DE-69A0-4713-8829-77F9F6666BD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7804r-lm-v3_firmware:4.02.r11.nat.onvifc.20171120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4236D5C-810B-4215-84D8-899B3042695E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7804r-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4D6054-9875-4DFF-A253-EEE67327DC60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7804r-lms-v3_firmware:4.02.r11.nat.onvifc.20171019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00F967B-FDC3-4332-83C2-36BB8C86E473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7804r-lms-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1EC6A0-108A-48FA-9C99-B1464D1BEFBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008f8-g-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED593B6-7D4F-417A-8CF9-F6582B2E0F2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008f8-g-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75566AC2-6FF3-4B11-9649-2065E0850D6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008f4-g-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB99F5B0-056E-41BF-9FDF-52FD925E97FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008f4-g-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270FEA4F-6692-443D-A228-E030569C81C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008f2-g-v4_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DED2C7A-B48C-4EAF-B2D5-0E88D517BC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008f2-g-v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A676FC-2398-4F30-83F3-3DBCF50BF51D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f4-lm-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A8F582-9BA8-4755-9978-289CA421EAA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f4-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BA4EA9-1381-41FC-B94C-D3A74510693F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f2-lm-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E316FC4-5AFB-44E0-9902-96601E7F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f2-lm-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F548F8ED-F77B-46EA-B30F-7D0F3ECBF901"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f8-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C1D7B1-723E-42E7-8736-6EAE9B0B3BAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f8-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC608B8-5CCC-48EA-90A4-9967DC081A9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f4-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2715DE12-72DA-43CF-8DEA-F45E83A94750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f4-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF50CB7-F259-4480-8326-3FF6BD061164"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7032f2-gs-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E2FD86-D2A1-495E-B440-B2F40B5E8110"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7032f2-gs-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F1FE5C-B554-4525-8EEF-3D1591F30058"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7016t-lme-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79934673-7FB9-4CCC-8C8C-572F4585DD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7016t-lme-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649D2FA6-5701-41EF-915D-878553EC6C72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7008t-lme-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B4A071-CE3A-4621-945D-5B6E16E02C6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7008t-lme-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CA36C7-9234-41E6-B6D6-89B2E4BCB374"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7004t-lme-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19EECFE-C959-4B9C-9017-5F7F0EBAD12D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7004t-lme-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED524332-50C7-4650-8180-C071638C4EFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7808r-mh-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2616AB10-31F8-484E-94F5-EB918D6A5D83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7808r-mh-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CED598A-F658-4E92-B37A-B5A93F0BC2BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v3_firmware:4.02.r11.7601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5E7367-BEA3-46FF-8BD5-1C93B5854771"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ahb7804r-mh-v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC60720-4F01-4AD6-8219-72E7F366891B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pl-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523809FA-A0B5-45D1-90B1-C38E1E09890B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pl-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA473AB-74ED-435E-9FC4-45BFD581548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pl-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89F4CB35-D25E-4230-8483-40A8D961250B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pl-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F6B92A-9AB8-41AF-B4BB-FCAB499F750A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pl-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF84337A-F078-440B-8256-9B2900C1C3B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pl-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B353ACF-8BFD-4F66-A1D6-DDA6B08A4B4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pl-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4022DEDA-B4FA-4806-9FE6-A76381F4B307"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pl-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE84C4A-FE21-4FA1-9888-C86120A329B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-52h10pl-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA0F898-D0B3-4991-AC35-8A92593436AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-52h10pl-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F543650-66A2-4FE6-B9CD-35CD6FF27A44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-52h10pl-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA83363A-7C3A-4297-AC2C-C40E39EBCACB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-52h10pl-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B405D8C2-C71A-4306-AAE8-67A86726EDEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pet-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B04425-56FD-45D9-B1D0-9FAD4B196D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pet-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90940AFB-35A9-4E38-BDD4-88BBCC9A72D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pls-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55FCBF2-861E-4875-A148-932A8F16F471"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pls-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED66172-5393-4CAA-9CA2-31ED9A9B09D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pes-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453796B8-A1FC-4F31-A42F-70210BB623FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pes-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044F1808-FCBD-40B4-9C56-0ACEAA70F7C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pes-sl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DAA9C4-EE2C-448D-A956-EF87297C2E2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pes-sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF510E27-7984-491D-9543-4C08EA76482B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pl-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045B4188-F864-4431-9F28-9A78D6A27370"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pl-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529AFD81-1D3B-4FB8-98F7-51D99746E203"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pl-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3F017F-39F2-4EEA-9D32-71EC478A8E63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pl-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014BF8AF-6F7D-41B0-8FC7-10CC2B515FD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pl-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABADC65C-6952-4A9C-9639-5E7BE76E378B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pl-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3760C546-93A1-438D-B8F1-FC0CFC3BE9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pl-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BDBAD1-CFE0-4CDB-B267-016A34C10908"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pl-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9574FDE5-8795-4DDF-9F87-567D6C593123"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13p-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C724C3C1-C5EF-492D-BE90-B55D87BD065C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13p-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72010CC4-5857-4300-BBBC-07C178CBC829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13p-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55836CA3-64E3-44DD-8EA8-34D8670F1CF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13p-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085AB412-3F38-47C2-816C-38E96487C0EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13p-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2F4604-590D-44C1-A3FB-A2C67C93EB70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13p-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A54270-E4D4-42F5-84F5-6AA596182FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13p-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B94A86-5E01-4395-9771-FA704EC3B109"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CFF407-9532-4585-9101-93E0748FF983"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h40pl-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9924794-EFBA-412E-BD35-A911B192B639"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h40pl-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AC057D-CBFB-470C-8CFE-59766BCEDC48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h40pl-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC657B5-EE7F-456F-B901-442CB7CB6A4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h40pl-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE807058-A65B-4B45-B814-6F995A7BD369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h50p-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F44A5B0-C612-461F-8D41-2E87854E8C37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h50p-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE5A80-BE70-4029-B324-FA19E4C38CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h50p-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24421CDA-8331-4A71-B01D-2F811206378B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h50p-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC065BA-7D2B-4557-95DF-CDA66B5FB446"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h10pe-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C743AD0-01AA-4CEE-95D7-B20E0576687E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h10pe-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B75A310-B2A9-401A-BDC7-49CE56995607"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pe-sl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEC805F-8C0D-49CB-B02A-DD9493519E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pe-sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7572D7E7-22D2-467E-9316-16B5CD070B6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pe-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F29C9A3-3F1A-4616-9BE7-FBB7517371BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pe-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001ACF01-BFDA-4BA2-9B9C-E9C9CE34CBAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50hv10pt-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3DA153-D6BC-4069-AF69-C6E72BF708C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50hv10pt-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0316084B-1A46-4EEA-8468-A275C68C1BD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50v10pl-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F258A9DD-AB52-4332-809C-8A106CAB06B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50v10pl-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD7D17F-2B9E-4FF5-989F-40345A88F612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50h10pe-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B746AFC-2601-4FA3-B5BD-709F11BF1490"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50h10pe-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46661DD6-A263-4910-BAAD-6100516E82BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-54h13pe-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3618DCB4-0E7E-4CED-BBD8-6D9E71984A27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-54h13pe-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B3FD4E-FFD6-42AD-A3CE-65C809B20BE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-54h20pl-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D89060-5D2B-4080-8DCC-5F478041E700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-54h20pl-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716612B4-CB01-4289-B5FE-6843ADC5357C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pl-r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A889CE-C9FA-46AD-A90A-E55D981E21BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pl-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24241C41-EC88-43F7-8BEA-B38A74758931"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-54h20pl-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D89060-5D2B-4080-8DCC-5F478041E700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-54h20pl-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716612B4-CB01-4289-B5FE-6843ADC5357C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50h10pe-o\\(r\\)_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C684E016-250E-44DB-9C26-B6A786CBF657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50h10pe-o\\(r\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AF730D-B49E-4BFA-875B-88A9BB5448D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pl-r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689CC004-9AB6-4A5C-86DC-D64BF7924BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pl-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233389BD-E0B8-4441-808A-A6517190518D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pe-wp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBF08B7-B4F7-4DFA-AFAC-96C1D1FB2C09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pe-wp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4152714E-6D66-49F3-B69C-84C9B9963B8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv10pt-wp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B47431E-B87D-406F-B0EB-8FDE4F8C8D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv10pt-wp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D97BFBA-61D9-422B-9219-655C6B190525"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53hv13pa-wp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3858F49B-DE56-4E4C-AAB8-301D51FE5CB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53hv13pa-wp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F299606E-F2A5-42DC-B681-F4DB4821AC52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pe-wp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AD305C-2B06-4AFE-8CE2-21EEE50E1036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pe-wp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B24224-4E40-4E46-8421-490147C86AC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h20pl-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACF0E98-5707-4C56-9EE9-4BCBBE40FA33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h20pl-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0306A941-BB59-459B-97F3-12C23AB6C09D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h20pl-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB24505-43ED-46F2-9FC4-50A61BAA7762"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h20pl-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D1B903-76E7-4456-90D9-588467C1C93E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h20pl-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165FFC9C-6D97-4B2C-B706-563DCEED37D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h20pl-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB986BAA-9328-4497-A204-398A801D0FF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h20pl-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015A5228-E311-46D4-8F40-5A3F5A3D8DF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h20pl-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CF63F8-64EF-48D5-B517-6DEB70FD703C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv20pet-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369A470B-C4F4-4B66-9369-A7B2E2208E5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv20pet-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D839FB-A8CC-4765-A8F0-97C47BC36846"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv20pet-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863FA3CD-2C26-4C77-80BD-4CDA3E04B6FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv20pet-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECA70C5-3774-4071-983A-2AC9CC471A9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv20pes-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A743EBE8-9A6B-4374-8456-33C4103D5C72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv20pes-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FF634B-F06F-4AFA-95FD-748220705C7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pe-wk_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635D4212-2D25-4C17-B5A2-5FF637FEC270"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pe-wk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC0E121-DED6-491A-89E9-DA9FBFBF393E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pe-wk_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C2270A-435E-4D53-A05E-61202125EE26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pe-wk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232A4345-0A8B-45BD-A9C6-D62EFA065AF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pe-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81376067-DE68-47CC-928B-790A5984D4F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pe-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BDBB4F-4171-4DE4-8559-E59A87F89A20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50h10pe-wrm_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FBF18C-A673-499D-9169-BF7755F1CFF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50h10pe-wrm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E3DE15-19EC-48ED-BC10-1462EA504189"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-53h13pe-wrm_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44E764D3-778F-4D1D-AB83-95EB4C2DEFEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-53h13pe-wrm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D018D4-FFB5-41E1-BBFF-A999B6BF17EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h40af_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C7D205-B2FA-4069-AF4F-6DFC7668948F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h40af:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A37B93-6DE9-4D16-91D0-02B18546BD04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50v10pl-wrc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B588C4CC-7095-473B-B841-1CAEC45DDF91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h40af:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A37B93-6DE9-4D16-91D0-02B18546BD04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50h10pe-wrc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5820CE-815D-4AAA-9069-FCDBC55F33D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50h10pe-wrc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B45843-B38C-42E4-AC50-89C315CF4BED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50x10pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A0F03D-8E7C-48EC-ACF4-7E516F3F8533"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50x10pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E2F29-E291-43BE-95C6-EDAC74E5E1CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50x10pe-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239FFAD4-6ADC-4DF7-A6AE-87B1546EEC74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50x10pe-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FB9C4D-8CD1-45BF-AD32-E234FE9DC570"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53x13pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A3C7D9-504B-45A2-B500-6CCB40CD0821"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53x13pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D6997E-4678-4F6D-8E9E-D060966038B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53x13pa-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A3B68B-60EE-4C8E-87C0-0571F652FE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53x13pa-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB35844-D03C-4D28-AB7B-35A7E642E4F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53x13pe-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED32FE2-28E9-452A-A06A-D5162DBF2908"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53x13pe-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813BF4E5-4144-41F0-8BAF-B3C16F9D3FD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-53h13pe-wrc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8433FB8-F655-4A59-9333-99BCA95CB78D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-53h13pe-wrc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04618B4-01E4-4FAA-BD25-70A2E5AAF81A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-53hv13pe-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8DAE9F-1F62-4BB5-8F04-63523BF3AF88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-53hv13pe-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C3B8A-0E39-4339-BD70-D7907B05B19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-53v13pl-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7BDA253-EF87-4A16-92C0-3ACF1F094C12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-53v13pl-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C352F0E1-F8F2-4492-AE7A-117A259664EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-53h13pe-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9071ECDF-0315-47C0-A5C8-37F77F2FC585"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-53h13pe-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD9BD0B-1C5B-408A-9DBD-1A30CD241C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h10pe-wk-2f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C899E42-249E-4D4A-9640-72A18C2F281C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h10pe-wk-2f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F9E0C-4C77-4E45-A6F3-5BD5809C54AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h20pl-p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFAA996-93D6-4F71-AD05-2B9A9FB56923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h20pl-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8317F16-27EE-4A27-97F8-099B3A2623FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h20pl-b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE7855B-5655-4803-B9B0-D43922A1182E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h20pl-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20962D3D-0F9D-4367-B805-CA5C11AC0B38"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53hv13pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D96FBC-8E7A-463F-A617-5A60F3B42826"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53hv13pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BE6B09-EE32-4E4A-B42A-C007D3E9E734"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53hv13pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D96FBC-8E7A-463F-A617-5A60F3B42826"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53hv13pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BE6B09-EE32-4E4A-B42A-C007D3E9E734"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53hv13pa-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DF6EA9-46C0-447A-89B6-25FBAFC154ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53hv13pa-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D607BA6-3541-4E0A-9593-38A63259DAC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53hv13pa-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA2D3C0-75CC-4D24-AEA8-8F7D71F4BDAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53hv13pa-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99D64F-24E2-406F-9255-7BF3D9B877CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipm-50hv20pe-wr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A523E517-4B0C-4471-9C64-670CF16862F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipm-50hv20pe-wr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE14970C-C988-4468-A8FC-6DC5132462CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv10pt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F6CDA6-B2C3-4C5C-A8E0-4C081481E468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv10pt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEE4C45-39C2-4550-B6D6-6DA2DDB7718D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv10pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAD8C1F-101B-41F4-9BE3-F451650A7D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv10pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC322D3B-F849-4E0B-A285-139346AFF447"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv10pv-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF6695A-0ADC-4048-80BC-74D10D289C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv10pv-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6090F1DE-C9A9-49EC-805E-0272A11530E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv10pv-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF888DA-38BA-4FBB-A9AD-206F0E565E80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv10pv-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A0D5B3-7408-4317-A4B5-4312E86A592F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-80h20pt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09BA28D-8C13-4C19-B3C1-EBAF806E44CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-80h20pt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA7479A-2271-4DCC-AD50-3ED982903AE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-80h20pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA67088E-53EA-44FA-B705-3BC81DB83607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-80h20pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE431F4-2D5A-42BD-B807-0755839BB436"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50h20pt-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC500C1-1342-4F9B-8E2F-F535CC24C2D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50h20pt-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CB1C17-6F8B-4408-9ABB-FBAB029787CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h20py-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F87C37C-87EB-4F77-BA86-2515DD9D2D84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h20py-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE40DF3-1BB1-472D-8DA2-5A0F69519C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-53h13pe-wk-4f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0293063A-6AAD-4843-8417-69FCF2BCD932"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-53h13pe-wk-4f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7F0DEC-17A7-4A6E-BCCC-877DA338400F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h20pa-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A5C1A-F921-4019-B454-9A73BB19944B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h20pa-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CD1EFE-4DF4-4A96-9A26-37999B52A6BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-83h20pa-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF56E73-1604-4128-845F-3FC0940F9F61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-83h20pa-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF7CC0D-9797-4AE2-B16E-0D79AA7F08DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv20psa-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73536E17-B99B-4A8E-99F0-65650D54B2FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv20psa-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3694DF76-1A5D-4E31-BB64-5C701786493C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv20psb-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70603BD2-AECE-4C68-A3D8-FD5F569D6E25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv20psb-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE99D683-330B-4931-9457-3A5F8B61F731"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-50hv20psb-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB8DD13-36B7-43B6-A4A9-4CB8D4B55F3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-50hv20psb-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C27637-1CA7-42D2-9BB4-982FA2AD73BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ivg-hp203y-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EA0F3-2D5D-4C28-8C5D-C44CD7DB94CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ivg-hp203y-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330178EF-CE0E-4099-B0F0-BF6F66F9919A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ivg-hp203y-se_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BC4C97-8A69-463F-8C8C-CE43D4A0B47C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ivg-hp203y-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE75EB32-8546-42F0-B7C8-4337ECAB73A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-hp500nr-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAE5227-0D2C-458C-BAA6-A4514AE2033E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-hp500nr-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93822F8-6928-488C-BE99-280E52E6D0BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xiongmaitech:ipg-80he20ps-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174FC3B1-A330-4BA1-99B8-9F3F36CE30F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xiongmaitech:ipg-80he20ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE78E97-8B02-4430-91C3-D0369D78BAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102125",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-341-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-341-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16731",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-20T19:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de transporte de credenciales sin protección en ABB Ellipse 8.3 hasta la versión 8.9 de Ellipse publicada antes de diciembre de 2017 (incluyendo Ellipse Select). Existe una vulnerabilidad en la autenticación de Ellipse a LDAP/AD utilizando el protocolo LDAP. Un atacante podría explotar la vulnerabilidad rastreando el tráfico de red local, permitiendo la detección de credenciales de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-523"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachienergy:ellipse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0",
            "versionEndIncluding" : "8.9.0",
            "matchCriteriaId" : "E063B944-8782-4CDB-9FE7-703103CCA8FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16733",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-20T19:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which an attacker can leverage to disclose sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en Ecava IntegraXor en versiones 6.1.1030.1 y anteriores. Se ha identificado la vulnerabilidad de inyección SQL que puede permitir que un atacante revele información sensible desde la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1030.1",
            "matchCriteriaId" : "10FBF440-3FE4-4155-90BA-6891D1D9BD17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16735",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-20T19:29:00.350",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which generates an error in the database log."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en Ecava IntegraXor en versiones 6.1.1030.1 y anteriores. Se ha identificado la vulnerabilidad de inyección SQL, la cual genera un error en el registro de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1030.1",
            "matchCriteriaId" : "10FBF440-3FE4-4155-90BA-6891D1D9BD17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T20:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote attackers to submit arbitrary java script via the 'sysName' parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en system_name_set.cgi en TP-Link TL-SG108E 1.0.0 permite que atacantes remotos envíen scripts java arbitrarios mediante el parámetro sysName."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A722886-ED58-4E1D-8924-C8ABD6EAD0FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537907B5-7EAE-453A-81C6-8CF10498E7EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T20:29:00.340",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the authentication applies to the IP address of the NAT gateway, and any user behind that NAT gateway is also treated as authenticated."
      }, {
        "lang" : "es",
        "value" : "Métodos de control de acceso deficientes en TP-Link TL-SG108E 1.0.0 permiten que cualquier usuario de una red NAT con un administrador autenticado acceda al dispositivo sin introducir credenciales de usuario. El registro de autenticación se almacena en el dispositivo; por lo tanto, si un administrador se autentica desde una red NAT, la autenticación se aplica a la dirección IP de la pasarela NAT y cualquier usuario que se encuentre detrás de esa pasarela NAT también se trata como autenticado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A722886-ED58-4E1D-8924-C8ABD6EAD0FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9031702B-008F-4392-83DF-447B3E3DBD0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED6E4D1-F88C-48E6-B63F-3BE91914E6F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CEEDDA-EA51-4D5A-A03B-A20F42961B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T20:29:00.467",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call the logout functionality, triggering a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Controles de acceso débiles en la funcionalidad de cierre de sesión del dispositivo en TP-Link TL-SG108E v1.0.0 permiten a los atacantes remotos llamar a la funcionalidad de cierre de sesión, desencadenando una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg108e_firmware:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A722886-ED58-4E1D-8924-C8ABD6EAD0FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9031702B-008F-4392-83DF-447B3E3DBD0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED6E4D1-F88C-48E6-B63F-3BE91914E6F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg108e:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CEEDDA-EA51-4D5A-A03B-A20F42961B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T20:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain \"chk\" value (48bit) derived from the MAC. The algorithm used to compute the \"chk\" was disclosed by reverse engineering the CPE's firmware. As a result, it is possible to forge valid \"chk\" values for any given MAC address and therefore receive the configuration settings of other subscribers' CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2."
      }, {
        "lang" : "es",
        "value" : "Los CPE utilizados por los suscriptores en la red de acceso reciben su configuración individual desde una instancia GAPS central. Un CPE se identifica por la dirección MAC de su interfaz WAN y un valor determinado \"chk\" (48bit) derivado del MAC. El algoritmo utilizado para calcular el \"chk\" fue revelado mediante ingeniería inversa en el firmware del CPE. Como resultado, es posible forjar valores \"chk\" válidos para cualquier dirección MAC dada y por lo tanto recibir los ajustes de configuración de CPE de otros suscriptores. Los ajustes de configuración suelen contener valores sensibles, por ejemplo, credenciales (nombre de usuario/contraseña) para servicios VoIP. Esta situación afecta a Genexis B. V. GAPS hasta la versión 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genexis:gaps:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "B390447F-1540-4A24-AD01-57E95DF00953"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5254",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for other accounts, including admin, after disabling a client-side protection mechanism."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 3.5 y anteriores de Cambium Networks ePMP, los usuarios no administrativos \"installer\" y \"home\" pueden cambiar contraseñas para otras cuentas, incluyendo la cuenta admin, después de desactivar un mecanismo de protección del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "C34AD2DB-DB83-4A97-9754-4EED41AB7738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DBFE3B-C808-4CE0-A100-860EC50EFED0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "EAB69F4D-5CE6-4ED9-A93C-F79FEB0EE6A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD13A30-1185-4F9F-BE71-54520BC857BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5255",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 3.5 y anteriores de Cambium Networks ePMP, la falta de saneamiento de valores de entrada para determinados parámetros en la consola de gestión web permite que cualquier usuario autenticado (incluyendo el usuario de privilegios bajos readonly) inyecte metacaracteres shell como parte de una petición POST especialmente manipulada en la función get_chart y ejecute comandos a nivel de sistema operativo de manera efectiva como root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "C34AD2DB-DB83-4A97-9754-4EED41AB7738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DBFE3B-C808-4CE0-A100-860EC50EFED0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "EAB69F4D-5CE6-4ED9-A93C-F79FEB0EE6A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD13A30-1185-4F9F-BE71-54520BC857BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43413/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43413/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5256",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting (XSS) injection."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 3.5 y anteriores de Cambium Networks ePMP, todos los usuarios autenticados pueden actualizar los campos Device Name y System Description en la consola de administración web. Esos campos son vulnerables a inyección Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "C34AD2DB-DB83-4A97-9754-4EED41AB7738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DBFE3B-C808-4CE0-A100-860EC50EFED0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "EAB69F4D-5CE6-4ED9-A93C-F79FEB0EE6A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD13A30-1185-4F9F-BE71-54520BC857BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5257",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.433",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) community string can insert XSS strings in certain SNMP OIDs which will execute in the context of the currently-logged on user."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 3.5 y anteriores de Cambium Networks ePMP, un atacante que sepa o adivine la cadena de comunidad RW (lectura y escritura) SNMP podría insertar cadenas XSS en determinados OID SNMP que se ejecutarían en el contexto del usuario actualmente conectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "C34AD2DB-DB83-4A97-9754-4EED41AB7738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DBFE3B-C808-4CE0-A100-860EC50EFED0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "EAB69F4D-5CE6-4ED9-A93C-F79FEB0EE6A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD13A30-1185-4F9F-BE71-54520BC857BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5258",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using the attacker's supplied config file, including the inserted XSS strings."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 3.5 y anteriores de Cambium Networks ePMP, un atacante que sepa o adivine la cadena de comunidad RW (lectura y escritura) podría proporcionar una URL para un archivo de configuración en SNMP con cadenas XSS en determinados OID SNMP, servirla mediante HTTP y que el dispositivo afectado restaure la configuración utilizando el archivo de configuración proporcionado por el atacante, incluyendo las cadenas XSS insertadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "C34AD2DB-DB83-4A97-9754-4EED41AB7738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DBFE3B-C808-4CE0-A100-860EC50EFED0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "EAB69F4D-5CE6-4ED9-A93C-F79FEB0EE6A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD13A30-1185-4F9F-BE71-54520BC857BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5259",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.510",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 4.3 2-R4 y anteriores de Cambium Networks cnPilot, está disponible un shell web de administración con privilegios root no documentado utilizando la ruta HTTP https:///adm/syscmd.asp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-489"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190v_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "87AFE671-F9B3-4FCE-B659-BF3EB3623A94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E6A303-C3EF-46EB-AE4B-C5236CA28B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e410_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "02EB86EE-5DBE-4AFD-9A97-54064EF70B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7C383-DCE9-4A3B-A410-7C35B9AB2366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "1E4DDF69-A4C3-485E-9BB4-33C6322F5F18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5D1CBD-0489-4F54-B4A4-EDD1B2FE8A4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "A7C6997D-FFDB-4490-9DDD-A7DAACD9431E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFC8235-EF5B-4E8C-8FFD-A0A344C3DEBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "9C30EEBA-96E3-4382-9BE4-C5116EA66923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D0A961-FA16-4151-ABA5-5F401ACE27FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5260",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.557",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessible via direct object reference (DRO) at http://<device-ip-or-hostname>/goform/down_cfg_file by this otherwise low privilege 'user' account."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 4.3 2-R4 y anteriores de Cambium Networks cnPilot, aunque la opción para acceder al archivo de configuración no está disponible en la consola de administración web normal para la cuenta \"user\", se puede acceder al archivo de configuración mediante DRO (referencia de objeto directa) en http:///goform/down_cfg_file por esta cuenta 'user' de privilegios bajos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190v_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "87AFE671-F9B3-4FCE-B659-BF3EB3623A94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E6A303-C3EF-46EB-AE4B-C5236CA28B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e410_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "02EB86EE-5DBE-4AFD-9A97-54064EF70B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7C383-DCE9-4A3B-A410-7C35B9AB2366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "1E4DDF69-A4C3-485E-9BB4-33C6322F5F18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5D1CBD-0489-4F54-B4A4-EDD1B2FE8A4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "A7C6997D-FFDB-4490-9DDD-A7DAACD9431E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFC8235-EF5B-4E8C-8FFD-A0A344C3DEBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "9C30EEBA-96E3-4382-9BE4-C5116EA66923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D0A961-FA16-4151-ABA5-5F401ACE27FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5261",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.603",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 4.3 2-R4 y anteriores de Cambium Networks cnPilot, las funciones 'ping' y 'traceroute' de la consola administrativa web exponen una vulnerabilidad de salto de directorio de archivo, accesible para todos los usuarios autenticados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190v_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "87AFE671-F9B3-4FCE-B659-BF3EB3623A94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E6A303-C3EF-46EB-AE4B-C5236CA28B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e410_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "02EB86EE-5DBE-4AFD-9A97-54064EF70B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7C383-DCE9-4A3B-A410-7C35B9AB2366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "1E4DDF69-A4C3-485E-9BB4-33C6322F5F18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5D1CBD-0489-4F54-B4A4-EDD1B2FE8A4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "A7C6997D-FFDB-4490-9DDD-A7DAACD9431E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFC8235-EF5B-4E8C-8FFD-A0A344C3DEBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "9C30EEBA-96E3-4382-9BE4-C5116EA66923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D0A961-FA16-4151-ABA5-5F401ACE27FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5262",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 4.3 2-R4 y anteriores de Cambium Networks cnPilot, la cadena de comunidad de solo lectura SNMP tiene acceso a información sensible por referencia OID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190v_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "87AFE671-F9B3-4FCE-B659-BF3EB3623A94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E6A303-C3EF-46EB-AE4B-C5236CA28B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e410_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "02EB86EE-5DBE-4AFD-9A97-54064EF70B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7C383-DCE9-4A3B-A410-7C35B9AB2366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "1E4DDF69-A4C3-485E-9BB4-33C6322F5F18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5D1CBD-0489-4F54-B4A4-EDD1B2FE8A4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "A7C6997D-FFDB-4490-9DDD-A7DAACD9431E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFC8235-EF5B-4E8C-8FFD-A0A344C3DEBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "9C30EEBA-96E3-4382-9BE4-C5116EA66923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D0A961-FA16-4151-ABA5-5F401ACE27FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5263",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2017-12-20T22:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones."
      }, {
        "lang" : "es",
        "value" : "En versiones de firmware 4.3 2-R4 y anteriores de Cambium Networks cnPilot, no tiene controles Cross-Site Request Forgery (CSRF) que puedan mitigar los efectos de los ataques CSRF, los cuales se suelen implementar como tokens pre-sesión aleatorizados asociados con cualquier función de aplicación web, especialmente las destructivas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190v_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "87AFE671-F9B3-4FCE-B659-BF3EB3623A94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E6A303-C3EF-46EB-AE4B-C5236CA28B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e410_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "02EB86EE-5DBE-4AFD-9A97-54064EF70B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7C383-DCE9-4A3B-A410-7C35B9AB2366"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_r190n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "1E4DDF69-A4C3-485E-9BB4-33C6322F5F18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_r190n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5D1CBD-0489-4F54-B4A4-EDD1B2FE8A4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "A7C6997D-FFDB-4490-9DDD-A7DAACD9431E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFC8235-EF5B-4E8C-8FFD-A0A344C3DEBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cambiumnetworks:cnpilot_e600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2-r4",
            "matchCriteriaId" : "9C30EEBA-96E3-4382-9BE4-C5116EA66923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cambiumnetworks:cnpilot_e600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D0A961-FA16-4151-ABA5-5F401ACE27FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14385",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-12-20T23:29:00.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1; and EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2. EMC Data Domain DD OS contains a memory overflow vulnerability in SMBv1 which may potentially be exploited by an unauthenticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication. This may also allow remote code injection and execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la familia de productos EMC Data Domain DD OS 5.7, en versiones anteriores a la 5.7.5.6; la familia de productos EMC Data Domain DD OS 6.0, en versiones anteriores a la 6.0.2.9; la familia de productos EMC Data Domain DD OS 6.1, en versiones anteriores a la 6.1.0.21; la familia de productos EMC Data Domain Virtual Edition 2.0 en todas sus versiones; la familia de productos EMC Data Domain Virtual Edition 3.0, en versiones anteriores a la 3.0 SP2 Update 1 y la familia de productos EMC Data Domain Virtual Edition 3.1, en versiones anteriores a la 3.1 Update 2. EMC Data Domain DD OS contiene una vulnerabilidad de desbordamiento de memoria en SMBv1, que podría ser explotada por un atacante remoto no autenticado. Un atacante podría cerrar por completo tanto la autenticación del directorio activo como del servicio SMB. Esto también podría permitir la inyección y ejecución remotas de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain:2.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "FE5EFDEC-E166-42F7-938D-7CBC49B5D361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain:3.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "F7A08866-1116-44F9-BF45-61E70A87E81E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain:3.0:sp2:*:*:virtual:*:*:*",
            "matchCriteriaId" : "AAE9E614-362E-438F-A152-E68E658D499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain:3.1:update_2:*:*:virtual:*:*:*",
            "matchCriteriaId" : "2AA14F6E-2C1E-41AF-A45A-150F43D33F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7",
            "versionEndExcluding" : "5.7.5.6",
            "matchCriteriaId" : "FDDB5769-1D52-4AAC-8868-39B87BEDE34D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2.9",
            "matchCriteriaId" : "3321CCE6-9D7F-47CC-AD21-C7D97C39F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:data_domain_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.0.21",
            "matchCriteriaId" : "F96D132F-05B7-4126-83A6-42A63AE3FA34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/79",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102289",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040027",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14387",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2017-12-20T23:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings (including the NFS export security flavor for authentication) that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly propagate changes made to the default security flavor to all new and existing NFS exports that are configured to use default NFS export settings and that are mounted after those changes are made. This flaw may potentially allow NFS clients to access affected NFS exports using the default and potentially weaker security flavor even if a more secure one was selected to be used by the OneFS administrator, aka an \"NFS Export Security Setting Fallback Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El servicio NFS en EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1 y 8.0.0.0 - 8.0.0.4 mantiene las opciones de exportación NFS por defecto (incluyendo la parte especifica de seguridad del \"NFS export\" para autenticación) que puede aprovecharse para exportaciones NFS actuales y futuras. El servicio NFS contenía un error que no propagaba correctamente los cambios realizados en la parte específica de seguridad para todas las exportaciones NFS nuevas y existentes que están configuradas para emplear opciones de exportación NFS por defecto y están montadas una vez se han realizado esos cambios. Este error podría permitir que clientes NFS accedan a exportaciones NFS afectadas empleando la parte específica de seguridad por defecto y, potencialmente, más débil, incluso aunque se haya seleccionado una más segura para ser empleada por el administrador OneFS. Esto también se conoce como \"NFS Export Security Setting Fallback Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB53E775-7A57-41D2-A93D-5F96D72622D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F44A3-8C09-49EE-8545-51C57F36B801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DF0A4B-702E-4E6B-AD2D-086F76B6DBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80042980-E2BB-49F0-A3DB-BE22ECF820C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217B6DC1-07E4-4A1E-8867-85C258778E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:emc:isilon_onefs:8.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847B0C10-6DCA-49FE-836C-F547B573A647"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/78",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102292",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T23:29:00.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable."
      }, {
        "lang" : "es",
        "value" : "El algoritmo de cifrado Salsa20 en el kernel de Linux en versiones anteriores a la 4.14.8 no maneja correctamente las entradas de longitud cero, lo que permite a un atacante local capaz de utilizar la interfaz skcipher basada en AF_ALG (CONFIG_CRYPTO_USER_API_SKCIPHER) provocar una denegación de servicio (liberación de memoria no inicializada y fallo del kernel) o provocar otro impacto no especificado ejecutando una secuencia manipulada de llamadas al sistema que utilizan la API blkcipher_walk. Tanto la implementación genérica (crypto/salsa20_generic.c) como la implementación x86 (arch/x86/crypto/salsa20_glue.c) de Salsa20 eran vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.25",
            "versionEndExcluding" : "3.2.97",
            "matchCriteriaId" : "9C38EF6C-BEB1-4C3B-965F-1BA7A9E0F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "B97C01AC-F470-4190-AC38-30DE3DFDCCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.89",
            "matchCriteriaId" : "BBA93779-9E2C-4161-9DC3-569588ECB754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "F3C1F309-D954-4BB7-AC02-30FC58BE76F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.107",
            "matchCriteriaId" : "EEE9C869-86BF-4DBF-8EBB-FC14AD5A7019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.71",
            "matchCriteriaId" : "A25E81B4-C400-4932-8841-3116C21DF3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.8",
            "matchCriteriaId" : "342F6BB8-126D-4E05-915F-4CDC362F5C51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse_project:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CD4569-8BFA-4654-9CAB-2882D4CAE57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:extra:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1AEFA5-9D43-4DD2-9088-7B37D5F220C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F84B2729-7B52-4505-9656-1BD31B980705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "631BB7F0-5F27-4244-8E72-428DA824C75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server_for_raspberry_pi:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4605D055-EA6E-4C90-9277-AC067E1BD02D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102291",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2473",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T23:29:00.377",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization."
      }, {
        "lang" : "es",
        "value" : "La implementación HMAC (crypto/hmac.c) en el kernel de Linux en versiones anteriores a la 4.14.8 no valida que el algoritmo de hash criptográfico subyacente no tenga clave, lo que permite que un atacante local capaz de utilizar la interfaz hash basada en AF_ALG (CONFIG_CRYPTO_USER_API_HASH) y el algoritmo hash basado en SHA-3 (CONFIG_CRYPTO_SHA3) provoque un desbordamiento de búfer de pila de kernel ejecutando una secuencia manipulada de llamadas al sistema para encontrar una inicialización SHA-3 ausente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.97",
            "matchCriteriaId" : "3B86887F-D4E3-4F47-98BC-697EE11A74CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.52",
            "matchCriteriaId" : "B97C01AC-F470-4190-AC38-30DE3DFDCCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.89",
            "matchCriteriaId" : "BBA93779-9E2C-4161-9DC3-569588ECB754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "F3C1F309-D954-4BB7-AC02-30FC58BE76F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.107",
            "matchCriteriaId" : "EEE9C869-86BF-4DBF-8EBB-FC14AD5A7019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.71",
            "matchCriteriaId" : "A25E81B4-C400-4932-8841-3116C21DF3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.8",
            "matchCriteriaId" : "342F6BB8-126D-4E05-915F-4CDC362F5C51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse_project:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CD4569-8BFA-4654-9CAB-2882D4CAE57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:extra:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1AEFA5-9D43-4DD2-9088-7B37D5F220C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F84B2729-7B52-4505-9656-1BD31B980705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "631BB7F0-5F27-4244-8E72-428DA824C75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server_for_raspberry_pi:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4605D055-EA6E-4C90-9277-AC067E1BD02D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102293",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T23:29:00.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's \"default request-key keyring\" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c."
      }, {
        "lang" : "es",
        "value" : "El subsistema KEYS en el kernel de Linux en versiones anteriores a la 4.14.6 omitía una comprobación de control de acceso cuando se agregaba una clave al \"llavero de acceso por defecto\" de la tarea actual mediante la llamada al sistema request_key(), permitiendo a un usuario local utilizar una secuencia de llamadas de sistema manipuladas para añadir claves a un llavero solo con permiso de búsqueda (no de escritura) a ese llavero. Esto está relacionado con construct_get_dest_keyring() en security/keys/request_key.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.6",
            "matchCriteriaId" : "4A92C99D-2B24-49B6-AFB9-2C47AFC49D0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4dca6ea1d9432052afb06baf2e3ae78188a4410b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102301",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4dca6ea1d9432052afb06baf2e3ae78188a4410b",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Release Notes" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4dca6ea1d9432052afb06baf2e3ae78188a4410b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4dca6ea1d9432052afb06baf2e3ae78188a4410b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-20T23:29:00.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forcing the VyprVPN application to load a malicious dynamic library every time a new connection is made."
      }, {
        "lang" : "es",
        "value" : "En Golden Frog VyprVPN en versiones anteriores a la 2.15.0.5828 para macOS, el demonio de arranque vyprvpnservice tiene un servicio XPC sin protección que permite a los atacantes actualizar la configuración OpenVPN subyacente y los argumentos pasados al binario OpenVPN cuando se ejecuta. Un atacante puede aprovecharse de esta vulnerabilidad obligando a la aplicación VyprVPN a cargar una biblioteca dinámica maliciosa cada vez que se realiza una nueva conexión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goldenfrog:vyprvpn:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "2.15.0.5828",
            "matchCriteriaId" : "CB2728E6-572C-4548-B3DC-FAE8C81A40D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-007.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VerSprite/research/blob/master/advisories/VS-2017-007.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a \"SEGV on unknown address\" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe un \"SEGV en dirección desconocida\" que provocaría un ataque de denegación de servicio remoto, porque asm/preproc.c maneja incorrectamente las llamadas macro que tienen el número incorrecto de argumentos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://repo.or.cz/nasm.git/commit/59ce1c67b16967c652765e62aa130b7e43f21dd4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://repo.or.cz/nasm.git/commit/59ce1c67b16967c652765e62aa130b7e43f21dd4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe un desbordamiento de búfer basado en memoria dinámica (heap) que podría provocar un ataque de denegación de servicio (DoS) remoto, relacionado con un strcpy en paste_tokens en asm/preproc.c. Esta es una vulnerabilidad parecida a CVE-2017-11111."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una sobrelectura de búfer basada en memoria dinámica (heap) en la función detoken() en asm/preproc.c que podría provocar un ataque de denegación de servicio (DoS) remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://repo.or.cz/nasm.git/commit/9b7ee09abfd426b99aa1ea81d19a3b2818eeabf9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392424",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://repo.or.cz/nasm.git/commit/9b7ee09abfd426b99aa1ea81d19a3b2818eeabf9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.317",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una vulnerabilidad de uso de memoria previamente liberada en la función pp_list_one_macro en asm/preproc.c que podría provocar una denegación de servicio (DoS) remota. Esto está relacionado con la gestión incorrecta de errores de sintaxis de líneas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.367",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una vulnerabilidad de uso de memoria previamente liberada en do_directive en asm/preproc.c que podría provocar un ataque de denegación de servicio (DoS) remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe un acceso ilegal a direcciones en is_mmacro() en asm/preproc.c que podría provocar un ataque de denegación de servicio remoto debido a la ausencia de un control para la relación entre los valores de los parámetros minimum y maximum."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://repo.or.cz/nasm.git/commit/c9244eaadd05b27637cde06021bac3fa1d920aa3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://repo.or.cz/nasm.git/commit/c9244eaadd05b27637cde06021bac3fa1d920aa3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una vulnerabilidad de uso de memoria previamente liberada en pp_getline en asm/preproc.c que podría provocar un ataque de denegación de servicio (DoS) remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.477",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una vulnerabilidad de uso de memoria previamente liberada en pp_verror en asm/preproc.c que podría provocar un ataque de denegación de servicio (DoS) remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392427",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una sobrelectura de búfer basada en memoria dinámica (heap) que podría provocar un ataque de denegación de servicio (DoS) remoto, relacionado con un bucle while en paste_tokens en asm/preproc.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392428",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe un acceso ilegal a direcciones en la función find_cc() en asm/preproc.c que podría provocar un ataque de denegación de servicio remoto porque los punteros asociados con las llamadas skip_white_ no están validados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://repo.or.cz/nasm.git/commit/7524cfd91492e6e3719b959498be584a9ced13af",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392435",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Tool Signature", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://repo.or.cz/nasm.git/commit/7524cfd91492e6e3719b959498be584a9ced13af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Tool Signature", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.600",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors."
      }, {
        "lang" : "es",
        "value" : "En Netwide Assembler (NASM) 2.14rc0, existe una vulnerabilidad de uso de memoria previamente liberada en pp_list_one_macro en asm/preproc.c que podría provocar una denegación de servicio (DoS) remota. Esto está relacionado con la gestión incorrecta de errores de tipo de operandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC75A3FA-6176-41ED-80B7-79D69671FF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.nasm.us/show_bug.cgi?id=3392433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3694-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T03:29:00.630",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because it calls the FastBitVectorWordOwner::resizeSlow function (in WTF/wtf/FastBitVector.cpp) for a purpose other than initializing a bitvector size, and resizeSlow mishandles cases where the old array length is greater than the new array length."
      }, {
        "lang" : "es",
        "value" : "WTF/wtf/FastBitVector.h en WebKit, tal y como viene distribuido en Safari Technology Preview Release 46, permite que los atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer) o posiblemente otro impacto porque llama a la función FastBitVectorWordOwner::resizeSlow (en WTF/wtf/FastBitVector.cpp) para un propósito diferente que inicializar un tamaño bitvector, y resizeSlow gestiona de manera incorrecta los casos en los que la longitud antigua del array es mayor que la nueva."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:46:*:*:*:technology_preview:*:*:*",
            "matchCriteriaId" : "D0B3F3F3-4D70-47BD-A6D7-24A20B0FFB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=181020",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/dwfault/PoCs/blob/master/WebKit%20Misuse%20of%20WTF:wtf:FastBitVector%20result%20in%20potential%20BOF/WebKit%20Misuse%20of%20WTF:wtf:FastBitVector%20result%20in%20potential%20BOF.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=181020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/dwfault/PoCs/blob/master/WebKit%20Misuse%20of%20WTF:wtf:FastBitVector%20result%20in%20potential%20BOF/WebKit%20Misuse%20of%20WTF:wtf:FastBitVector%20result%20in%20potential%20BOF.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T04:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/user_list_backend.php sSortDir_0 parameter. An attacker can exploit this to gain access to the data in a connected MySQL database."
      }, {
        "lang" : "es",
        "value" : "La API List Users de Piwigo 2.9.2 es vulnerable a inyección SQL mediante el parámetro sSortDir_0 en /admin/user_list_backend.php. Un atacante puede explotarlo para obtener acceso a la información en una base de datos MySQL conectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/commit/33a03e9afb8fb00c9d8f480424d549311fe03d40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/823",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Multiple%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/33a03e9afb8fb00c9d8f480424d549311fe03d40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Multiple%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T04:29:00.307",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/configuration.php order_by array parameter. An attacker can exploit this to gain access to the data in a connected MySQL database."
      }, {
        "lang" : "es",
        "value" : "El componente Configuration de Piwigo 2.9.2 es vulnerable a inyección SQL mediante el parámetro de array order_by en admin/configuration.php. Un atacante puede explotarlo para obtener acceso a los datos en una base de datos MySQL conectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/commit/91ef7909a5c51203f330cbecf986472900b60983",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/826",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Multiple%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/91ef7909a5c51203f330cbecf986472900b60983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Multiple%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T04:29:00.353",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/batch_manager_unit.php element_ids parameter in unit mode. An attacker can exploit this to gain access to the data in a connected MySQL database."
      }, {
        "lang" : "es",
        "value" : "El componente Batch Manager de Piwigo 2.9.2 es vulnerable a inyección SQL mediante el parámetro element_ids en admin/batch_manager_unit.php en modo unit. Un atacante puede explotarlo para obtener acceso a los datos en una base de datos MySQL conectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/commit/f7c8e0a947a857ff5d31dafd03842df41959b84c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/825",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Multiple%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/f7c8e0a947a857ff5d31dafd03842df41959b84c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Multiple%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T04:29:00.400",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Batch Manager component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via tags-* array parameters in an admin.php?page=batch_manager&mode=unit request. An attacker can exploit this to hijack a client's browser along with the data stored in it."
      }, {
        "lang" : "es",
        "value" : "El componente Batch Manager de Piwigo 2.9.2 es vulnerable a Cross-Site Scripting (XSS) persistente mediante los parámetros de array tags-* en una petición admin.php?page=batch_managermode=unit. Un atacante puede explotarlo para secuestrar el navegador de un cliente junto con los datos almacenados en él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Stored%20XSS%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Stored%20XSS%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T04:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via the gallery_title parameter in an admin.php?page=configuration&section=main request. An attacker can exploit this to hijack a client's browser along with the data stored in it."
      }, {
        "lang" : "es",
        "value" : "El componente Configuration de Piwigo 2.9.2 es vulnerable a Cross-Site Scripting (XSS) persistente mediante el parámetro gallery_title en una petición admin.php?page=configurationsection=main. Un atacante puede explotarlo para secuestrar el navegador de un cliente junto con los datos almacenados en él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Stored%20XSS%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Stored%20XSS%20Vulnerabilities%20in%20Piwigo%202.9.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T04:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration&section=main or /admin.php?page=batch_manager&mode=unit. An attacker can exploit this to coerce an admin user into performing unintended actions."
      }, {
        "lang" : "es",
        "value" : "Piwigo 2.9.2 es vulnerable a Cross-Site Request Forgery (CSRF) mediante /admin.php?page=configurationsection=main o /admin.php?page=batch_managermode=unit. Un atacante puede explotarlo para forzar a un usuario admin para que realice acciones no esperadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB83CB5C-D31C-42B7-B011-72AE25409448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/Piwigo/commit/c3b4c6f7f0ddeaea492080fb8211d7b4cfedaf6f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/822",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Cross%20Site%20Request%20Forgery%20in%20Piwigo%202.9.2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/commit/c3b4c6f7f0ddeaea492080fb8211d7b4cfedaf6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sahildhar/sahildhar.github.io/blob/master/research/reports/Piwigo_2.9.2/Cross%20Site%20Request%20Forgery%20in%20Piwigo%202.9.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T05:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter."
      }, {
        "lang" : "es",
        "value" : "Bus Booking Script tiene una vulnerabilidad de Cross-Site Scripting (XSS) mediante el parámetro datepicker en results.php o el parámetro spemail en admin/new_master.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doditsolutions:busbooking-script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6FA076-B794-4D32-9E83-8060A30B37C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T05:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter."
      }, {
        "lang" : "es",
        "value" : "Bus Booking Script tiene una vulnerabilidad de inyección SQL mediante el parámetro sp_id en admin/view_seatseller.php o el parámetro memid en admin/view_member.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doditsolutions:bus_booking_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A42E69-A68D-40C7-9BD6-F21399F66B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T05:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bus Booking Script has CSRF via admin/new_master.php."
      }, {
        "lang" : "es",
        "value" : "Bus Booking Script tiene una vulnerabilidad Cross-Site Request Forgery (CSRF) en admin/new_master.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doditsolutions:bus_booking_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A42E69-A68D-40C7-9BD6-F21399F66B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T06:29:00.243",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a \"url =\" line in a .lfsconfig file within a repository."
      }, {
        "lang" : "es",
        "value" : "GitHub Git LFS en versiones anteriores a la 2.1.1 permite que los atacantes remotos ejecuten comandos arbitrarios mediante una URL ssh con un carácter guión inicial en el nombre del host, que se encuentra en una línea \"url =\" en un archivo .lfsconfig dentro de un repositorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_large_file_storage_project:git_large_file_storage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "2CB1FD8B-89A9-43CF-ACE1-140365A40C46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.recurity-labs.com/2017-08-10/scm-vulns",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/pull/2242",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/releases/tag/v2.1.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.recurity-labs.com/2017-08-10/scm-vulns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/pull/2242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/releases/tag/v2.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17408",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-21T14:29:00.397",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5101."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Bitdefender Internet Security 2018. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en cevakrnl.xmd. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado un desbordamiento de enteros antes de asignar un búfer. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del sistema. Anteriormente era ZDI-CAN-5101."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:internet_security_2018:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "73447",
            "matchCriteriaId" : "6123C13A-87BF-48A5-854B-DBBF93684E8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-942",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17409",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-21T14:29:00.443",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within emulator 0x10A in cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5102."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Bitdefender Internet Security 2018. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el emulador 0x10A en cevakrnl.xmd. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado un desbordamiento de enteros antes de escribir en la memoria. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del sistema. Anteriormente era ZDI-CAN-5102."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:internet_security_2018:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73456",
            "matchCriteriaId" : "280D19B6-9B51-43DE-90AE-A690A2367C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-943",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17410",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-21T14:29:00.473",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within emulator 0x102 in cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5116."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Bitdefender Internet Security 2018. Se requiere de interacción del usuario para explotar esta vulnerabilidad en la que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. Este error en concreto existe en el emulador 0x102 en cevakrnl.xmd. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la escritura más allá del final de un objeto asignado. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del sistema. Anteriormente era ZDI-CAN-5116."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:internet_security_2018:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73456",
            "matchCriteriaId" : "280D19B6-9B51-43DE-90AE-A690A2367C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-944",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17411",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2017-12-21T14:29:00.520",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web management portal. The issue lies in the lack of proper validation of user data before executing a system call. An attacker could leverage this vulnerability to execute code with root privileges. Was ZDI-CAN-4892."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Linksys WVBR0. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en el portal web de gestión. El problema deriva de la falta de validación correcta de datos de usuario antes de ejecutar una llamada del sistema. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código con privilegios root. Anteriormente era ZDI-CAN-4892."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linksys:wvbr0_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.41",
            "matchCriteriaId" : "89C14B79-5C23-4DF4-8607-C5B14DAC75EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:linksys:wvbr0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1129E8A-FAF1-4B2D-829C-B01DC003F04C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102212",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9336",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43363/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43429/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-973",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43363/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43429/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17027",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en el servicio FTP de QNAP QTS, en sus versiones 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que atacantes remotos ejecuten código arbitrario en dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17028",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.457",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la función del dispositivo externo en QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que los atacantes remotos ejecuten código arbitrario en los dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17029",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la función de inicio de sesión en QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que los atacantes remotos ejecuten código arbitrario en los dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17030",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la función de inicio de sesión en QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que los atacantes remotos ejecuten código arbitrario en los dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17031",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.597",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la función de contraseña en QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que los atacantes remotos ejecuten código arbitrario en los dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17032",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.737",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la función de contraseña en QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que los atacantes remotos ejecuten código arbitrario en los dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17033",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2017-12-21T15:29:00.770",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en la función de contraseña en QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 y anteriores podría permitir que los atacantes remotos ejecuten código arbitrario en los dispositivos NAS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.3.0378",
            "matchCriteriaId" : "743F5071-0DE8-432A-9A85-81A4519A6DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D560B30D-6A9F-4A44-B83B-4FAB02A94830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB33269-7F69-45DA-9CF0-B0322FFC577D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3CABE783-B9CA-4E15-8DC2-75C39F214600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B39FE2-79A9-478C-AE83-8D9664A6D1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA6AF09-BCB3-45EE-A59F-5A6CEFE8CBAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201712-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0301",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP APM, en sus versiones 1.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 y 12.1.2, las peticiones de acceso al portal BIG-IP APM no devuelven los recursos esperados en algunos casos. Esto puede permitir el acceso a recursos internos de BIG-IP APM. Sin embargo, los recursos de aplicación y los servidores backend no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0312FC-8178-46DE-B4EE-00F2895073BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E574F6-34B6-45A6-911D-E5347DA22F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF94129-8779-4D68-8DD4-B828CA633746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2E88AA-0523-48D0-8664-6AFDBCB6C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040040",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K54358225",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K54358225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0304",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección SQL en la interfaz de usuario de gestión de BIG-IP AFM en versiones 12.0.0, 12.1.0, 12.1.1, 12.1.2 y 13.0.0 que podría permitir que se manipule una copia de las reglas de firewall para que provoque un impacto en Configuration Utility hasta que se vuelvan a sincronizar las reglas. El procesamiento del tráfico y las reglas de firewall activas no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102332",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040041",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K39428424",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K39428424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6129",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.293",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a \"flow not in use\" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP APM, en sus versiones 13.0.0 y 12.1.2 en determinadas circunstancias, el tráfico de la VPN conectada con APM puede provocar que un connflow VPN/PPP se libere de manera prematura o hacer que TMM deje de responder con una aserción \"flow not in use\". Un atacante podría interrumpir el tráfico o provocar que el sistema BIG-IP delegue en otro dispositivo dentro del grupo de dispositivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040047",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K20087443",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K20087443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6132",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners (primary and/or secondary IP) may cause TMM to restart."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y Websafe, en versiones de software 13.0.0, de la 12.0.0 a la 12.1.2, de la 11.6.0 a la 11.6.1 y de la 11.5.0 a la 11.5.4, una secuencia no revelada de paquetes enviada a los mirror listeners de estado de BIG-IP High Availability (IP primaria y/o secundaria) podría hacer que se reinicie TMM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "2A113DC2-B084-48C2-8ECF-F0281AC34246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C1F5FF67-5D17-4760-AFDC-4234EC1E6306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F86EB5-D581-4103-A802-44D968BA8D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06224D59-35F8-4168-80C5-CF5B17E99050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "2AC4ECCE-9343-4462-872C-FA4860998B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "39E45CF5-C9E4-4AB9-A6D5-66F8336DDB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "55D59D80-4DC5-4A84-BF42-A5AC2D39CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "93212B86-21EA-4340-9149-E58F65285C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3755740D-F1DC-4910-ADDD-9D491515201C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA244A7D-F65D-4114-81C8-CE811959EA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA9F72C-8344-4370-B511-31BEC8BA63E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CF015E-C74B-4215-9103-8087BC1D12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4DB00-433D-414A-A1CE-E507B9BB809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "857B3A62-F808-4CA9-BFAD-C133D94CF531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "25944BCA-3EEB-4396-AC8F-EF58834BC47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D226F1-6513-4233-BE20-58D7AB24978F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B2082-E040-4799-A260-BA687ED8614E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85766A4-2181-4719-ADCF-4FEA0031DB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E93EE3-DB73-468E-87CA-4D277F283648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB01A61-1924-417F-8A75-9FDF8F14F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "DDE31583-1329-468C-87C9-BBB8FB5132B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "0ACC0695-E62E-4748-AA8A-46772EB8C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0312FC-8178-46DE-B4EE-00F2895073BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E574F6-34B6-45A6-911D-E5347DA22F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF94129-8779-4D68-8DD4-B828CA633746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2E88AA-0523-48D0-8664-6AFDBCB6C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "C8FF324E-8533-403A-BEA9-617A28033CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "7CB146EF-CCAB-4194-9735-F8909E283308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD2C1D2-103E-4B0F-84AA-999F01E695F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855E91A4-0A0C-4E5C-8019-FB513A793803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC2092-E109-4FF6-9B85-6C9434269851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923BB93-96C1-417B-9172-4A81E731EBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E34BF-82A5-4D9E-BC72-202193A47A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "E097889C-175C-40A6-9DCF-2C03981D9349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "24B9912B-31F0-4265-8D61-0E6D46DA33DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E142B175-0E9D-4051-A6B1-FF9E7583DFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B131043-3C02-47CE-8D1C-BB29A20113E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE4ACE8-1309-4631-9E34-A6032009B702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70560C5-AEB5-4144-A0AA-10A63527B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2CE884-45CD-4EB8-8568-B3AEAB017361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "80E2E5FE-217F-4267-AEB9-719E376D2FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "5EF737FD-7706-4536-912A-C22E0B2FE3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0594DBC5-8470-416C-A5EA-E04F5AB2C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3BA6-6F60-45CA-8F52-687B671B077A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B6870-718C-4F8D-9BAB-7ED6385BF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6A3691-ADC4-44BC-8A11-D855B13EF128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "48D3CF2B-1D30-461B-836D-A16EAA15F5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C4A5CD9B-D257-4EC9-8C57-D9552C2FFFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB017D7A-3290-4EF5-9647-B488771A5F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F316C54-FAE4-48D8-9E40-ED358C30BF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAC4C7-AB42-4BBD-98B5-0AE8B032CCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "A5AB7A86-4C18-4FCA-90A0-BA9116FF31C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "BDE77CCE-7F97-48EA-A9D3-090B1481616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "8552AED4-DC7B-4DA1-AD49-9AD856A69DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "57010E5E-5940-4DDA-AD56-D646D54084AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F50EB-D059-4251-AF03-DEC2F306C74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A13328-66C1-4D9D-8E46-754401D5F457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94FCC0F-5505-4123-B3FA-ACB90DDE276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A30CF4-7D0D-46A6-A2F4-8DC0C1AA4480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38245250-AE45-456F-9C40-A073AED930C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102333",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040049",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K12044607",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K12044607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6133",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM y WebSafe, en versiones 13.0.0 y de la 12.1.0 a la 12.1.2, las peticiones HTTP no reveladas podrían provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A7E33F47-378B-4077-AA3E-6EBED04D3609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "D90D84D6-E4EF-4686-A7D9-52FF577251D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48B5CC4A-32F1-474A-A89B-A6C7E56513D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102467",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040048",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K25033460",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K25033460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6134",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.403",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y WebSafe, en versiones de software 13.0.0, de la 12.1.0 a la 12.1.2 y de la 11.5.1 a la 11.6.1, una secuencia de paquetes no revelada cuyo origen es una red adyacente podría hacer que TMM se cierre de manera inesperada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "993AD7D2-DBC5-40B6-9CBE-1BA9590FCCC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "8E8D6DC6-FE8D-4C73-930B-99E2B3FB18ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "13EDBCE3-05FD-4B5B-926B-0B5B18199083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "B62C49F2-DAAD-467A-B27C-20E2A014787B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A7E33F47-378B-4077-AA3E-6EBED04D3609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "83DC910C-4396-4945-8635-E9C8038BE872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "EAB57533-B744-4A2F-8AE0-7D8037CBA70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "65F88F93-D566-44FC-969D-B11C51B4261E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "D90D84D6-E4EF-4686-A7D9-52FF577251D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "5F5F1D95-D705-4715-B844-52E8ECBB266D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "528457E0-A8CA-454B-AC01-C55630E2FA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "BC21461D-B2B2-4FD2-B24F-DCAF525847EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "C73A1C36-0F0F-4EDD-99C6-321F9367FF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "6E27FFA2-D2AC-4838-A4C6-58964794977C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48B5CC4A-32F1-474A-A89B-A6C7E56513D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102466",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040044",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040045",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K37404773",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K37404773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6135",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.450",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6 packets sent to BIG-IP management port or self IP addresses may lead to out of memory (OOM) conditions."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y WebSafe en su versión 13.0.0, una fuga de memoria lenta producida por paquetes IPv4 e IPv6 no revelados enviados al puerto de gestión de BIG-IP o a sus propias direcciones IP puede provocar condiciones de agotamiento de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040050",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K43322910",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K43322910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6136",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.480",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause a disruption of service to the Traffic Management Microkernel (TMM)."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y WebSafe, en versiones 13.0.0 y de la 12.0.0 a la 12.1.2, los patrones de tráfico no revelados que se envían a los servidores virtuales de BIG-IP con las opciones TCP Fast Open y Tail Loss Probe activadas en el perfil TCP asociado, pueden interrumpir el servicio al TMM (Traffic Management Microkernel)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A7E33F47-378B-4077-AA3E-6EBED04D3609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "D90D84D6-E4EF-4686-A7D9-52FF577251D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "528457E0-A8CA-454B-AC01-C55630E2FA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48B5CC4A-32F1-474A-A89B-A6C7E56513D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040046",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K81137982",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K81137982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6138",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.527",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default \"normalize URI\" configuration options used in iRules and/or BIG-IP LTM policies."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y WebSafe, en versiones de software 13.0.0 y de la 12.1.0 a la 12.1.2, las peticiones maliciosas enviadas al servidor virtual con un perfil HTTP puede provocar que el TMM se reinicie. El problema está presente en perfiles BIG-IP APM, independientemente de su configuración. Este problema también está presente en las opciones de configuración \"normalize URI\" utilizadas en las políticas BIG-IP LTM y/o iRules."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A7E33F47-378B-4077-AA3E-6EBED04D3609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "D90D84D6-E4EF-4686-A7D9-52FF577251D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "528457E0-A8CA-454B-AC01-C55630E2FA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48B5CC4A-32F1-474A-A89B-A6C7E56513D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040051",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K34514540",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K34514540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6139",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP APM, en versiones 13.0.0 y 12.1.2 en condiciones poco frecuentes, el systema BIG-IP APM adjunta detalles de los logs cuando responde a las peticiones del cliente. Los detalles del archivo de log pueden variar. Los clientes que inicien sesión con BIG-IP APM en modo depuración son los que están más en riesgo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106186",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040055",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K45432295",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K45432295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6140",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services."
      }, {
        "lang" : "es",
        "value" : "En los productos BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800 y los blades VIPRION 4450 en versiones 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 o 12.1.2 de BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM o PEM, una secuencia de paquetes no revelada enviada a los servidores virtuales con perfiles SSL de cliente o servidor pueden hacer que se interrumpan los servicios de plano de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F86EB5-D581-4103-A802-44D968BA8D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06224D59-35F8-4168-80C5-CF5B17E99050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82C7B1C-E195-4D94-B604-78FB464C4F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B5ED-0600-4756-93E5-692987068596"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B40837-EC2B-41FB-ACC3-806054EAF28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3755740D-F1DC-4910-ADDD-9D491515201C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA244A7D-F65D-4114-81C8-CE811959EA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA9F72C-8344-4370-B511-31BEC8BA63E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CF015E-C74B-4215-9103-8087BC1D12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4DB00-433D-414A-A1CE-E507B9BB809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B276E4DF-69FC-4158-B93A-781A45605034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532AAF54-64EF-4852-B4F1-D5E660463704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC827031-CA39-4081-8CE0-30EAC78DF756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569903B-3A15-4A10-863B-6828337DD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45825991-D17D-42F1-87B4-7DF86B098B45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D226F1-6513-4233-BE20-58D7AB24978F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B2082-E040-4799-A260-BA687ED8614E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85766A4-2181-4719-ADCF-4FEA0031DB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E93EE3-DB73-468E-87CA-4D277F283648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB01A61-1924-417F-8A75-9FDF8F14F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70D2BD5-8E3F-4B57-84EF-3AF40F6378F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A065BC0-56BD-4665-A860-EBA37F1A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EDB8E9-E6FB-406E-B1D3-C620F114804C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77192AFB-B612-4BAA-916C-3DF8E851CC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE295AF6-2B35-467F-8501-B5753CDDE16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C03B68-914F-4DB0-A832-B626B8746524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD2C1D2-103E-4B0F-84AA-999F01E695F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855E91A4-0A0C-4E5C-8019-FB513A793803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC2092-E109-4FF6-9B85-6C9434269851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923BB93-96C1-417B-9172-4A81E731EBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E34BF-82A5-4D9E-BC72-202193A47A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475F0EF8-42CB-4099-9C4A-390F946C4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B0A70A-D101-443E-A543-5EC35E23D66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24A3C71-0075-4738-B114-267337D050CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E142B175-0E9D-4051-A6B1-FF9E7583DFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B131043-3C02-47CE-8D1C-BB29A20113E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE4ACE8-1309-4631-9E34-A6032009B702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70560C5-AEB5-4144-A0AA-10A63527B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2CE884-45CD-4EB8-8568-B3AEAB017361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAEC7D0-4BE1-42EE-91CA-56204FEAD048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510C2966-F495-49BB-99D6-53468FD95832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE97E4B1-88D7-4B3E-BEA3-0AD2A01347FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E3AE25-2F4F-4CE5-8842-E02346162D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCC6CA6-2BE8-40D4-AC55-94AF8F5BEDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FE0213-787C-49CB-96B8-EAC9DE0977EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0594DBC5-8470-416C-A5EA-E04F5AB2C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3BA6-6F60-45CA-8F52-687B671B077A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B6870-718C-4F8D-9BAB-7ED6385BF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6A3691-ADC4-44BC-8A11-D855B13EF128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D7863D-B064-4D7A-A66B-C3D3523425FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BB6DB-B2D1-4855-A65C-F0799E034358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D161F9-D198-4DA0-BF95-19472A0495A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E2C448-F279-476E-9F54-185582BEE9E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5943AAEF-A816-4F95-A91F-023A226D6459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E78A8D-6CB6-49F9-9288-9C2EEF41441A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09D38C-6314-48DF-82DB-68ED2AA2A87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_2200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE3D3C8-2B7C-4336-A237-7022949B3883"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A481AA79-5A01-4051-9F3D-ACC203CC9398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_4200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDCC56-7608-4856-8945-3D06155150AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_4450_blades:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4ADE44-5E90-411D-B11F-941B1122B9CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040042",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K55102452",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K55102452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6151",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.637",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the \"HTTP/2 profile\" may result in a disruption of service to TMM."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator y WebSafe, en su versión 13.0.0, las solicitudes no reveladas enviadas a los servidores virtuales BIG-IP que utilizan el perfil HTTP/2 pueden provocar una interrupción del servicio en el TMM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3374BE-6A37-48B5-83D4-D61558A8433E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E703FAB-BFCD-47A1-94BD-DD63879DE883"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040052",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K07369970",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K07369970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6164",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.683",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator y WebSafe en las versiones de software 13.0.0, de la 12.0.0 a la 12.1.2, de la 11.6.0 a la 11.6.1 y de la 11.5.0 a la 11.5.5.4, en algunas circunstancias, Traffic Management Microkernel (TMM) no maneja correctamente determinados registros TLS1.2 mal formados, lo que permite a los atacantes remotos causar una denegación de servicio (DoS) o, posiblemente, ejecutar comandos remotos en el sistema BIG-IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "2A113DC2-B084-48C2-8ECF-F0281AC34246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C1F5FF67-5D17-4760-AFDC-4234EC1E6306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F86EB5-D581-4103-A802-44D968BA8D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06224D59-35F8-4168-80C5-CF5B17E99050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "2AC4ECCE-9343-4462-872C-FA4860998B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "39E45CF5-C9E4-4AB9-A6D5-66F8336DDB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4489382-0668-4CFB-BA89-D54762937CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9850D0AA-B173-47B2-9B69-75E6D1FAF490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40994EB4-4D31-4697-964D-1F0B09864DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "55D59D80-4DC5-4A84-BF42-A5AC2D39CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "93212B86-21EA-4340-9149-E58F65285C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3755740D-F1DC-4910-ADDD-9D491515201C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA244A7D-F65D-4114-81C8-CE811959EA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA9F72C-8344-4370-B511-31BEC8BA63E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CF015E-C74B-4215-9103-8087BC1D12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE4DB00-433D-414A-A1CE-E507B9BB809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "857B3A62-F808-4CA9-BFAD-C133D94CF531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "25944BCA-3EEB-4396-AC8F-EF58834BC47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D226F1-6513-4233-BE20-58D7AB24978F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B2082-E040-4799-A260-BA687ED8614E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85766A4-2181-4719-ADCF-4FEA0031DB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E93EE3-DB73-468E-87CA-4D277F283648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB01A61-1924-417F-8A75-9FDF8F14F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "DDE31583-1329-468C-87C9-BBB8FB5132B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "0ACC0695-E62E-4748-AA8A-46772EB8C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0312FC-8178-46DE-B4EE-00F2895073BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E574F6-34B6-45A6-911D-E5347DA22F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF94129-8779-4D68-8DD4-B828CA633746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2E88AA-0523-48D0-8664-6AFDBCB6C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "C8FF324E-8533-403A-BEA9-617A28033CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "7CB146EF-CCAB-4194-9735-F8909E283308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD2C1D2-103E-4B0F-84AA-999F01E695F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855E91A4-0A0C-4E5C-8019-FB513A793803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCC2092-E109-4FF6-9B85-6C9434269851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923BB93-96C1-417B-9172-4A81E731EBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E34BF-82A5-4D9E-BC72-202193A47A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "E097889C-175C-40A6-9DCF-2C03981D9349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "24B9912B-31F0-4265-8D61-0E6D46DA33DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E142B175-0E9D-4051-A6B1-FF9E7583DFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B131043-3C02-47CE-8D1C-BB29A20113E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE4ACE8-1309-4631-9E34-A6032009B702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70560C5-AEB5-4144-A0AA-10A63527B5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2CE884-45CD-4EB8-8568-B3AEAB017361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "80E2E5FE-217F-4267-AEB9-719E376D2FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "5EF737FD-7706-4536-912A-C22E0B2FE3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0594DBC5-8470-416C-A5EA-E04F5AB2C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3BA6-6F60-45CA-8F52-687B671B077A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B6870-718C-4F8D-9BAB-7ED6385BF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6A3691-ADC4-44BC-8A11-D855B13EF128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "48D3CF2B-1D30-461B-836D-A16EAA15F5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C4A5CD9B-D257-4EC9-8C57-D9552C2FFFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB017D7A-3290-4EF5-9647-B488771A5F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F316C54-FAE4-48D8-9E40-ED358C30BF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAC4C7-AB42-4BBD-98B5-0AE8B032CCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "A5AB7A86-4C18-4FCA-90A0-BA9116FF31C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "BDE77CCE-7F97-48EA-A9D3-090B1481616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D379372-A226-4230-B1F3-04C696518BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FAC35D-2803-49B0-9382-F14594B88FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C72257B-FF99-4707-A0E3-316D538B1CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "8552AED4-DC7B-4DA1-AD49-9AD856A69DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "57010E5E-5940-4DDA-AD56-D646D54084AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F50EB-D059-4251-AF03-DEC2F306C74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A13328-66C1-4D9D-8E46-754401D5F457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94FCC0F-5505-4123-B3FA-ACB90DDE276E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A30CF4-7D0D-46A6-A2F4-8DC0C1AA4480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38245250-AE45-456F-9C40-A073AED930C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "C6A378E8-5AD0-4640-A236-1B4655D2CDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "2669BE56-A3EF-4080-A6FE-4565A85BD954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917BA1D9-2C47-41BE-80AF-05F5AC855945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A75D8-A712-4075-B4C2-F2AB36892619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB83BA4-2C5B-4742-8AD8-9541EB04CED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5B11F8-1F6A-4A41-BEDE-F03BD179C443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E38A7F6-B7DB-4F25-95A8-7D1DD6711FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3374BE-6A37-48B5-83D4-D61558A8433E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "E84D701A-96D1-43A8-B87C-0BAA6912F16E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "2C4A4202-DBAD-4717-80E5-B6818551B20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47077D8-80F4-4919-913B-AC6B7CA1CEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A860AAB-4E19-42C4-B37D-6043C24A3E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D62C27-F5CE-455A-A683-1F71E3275183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF200B2-C3A2-4A64-BDB7-62BA4BD865EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B2FD88-64B9-4B51-BB79-0C075CAA8362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E703FAB-BFCD-47A1-94BD-DD63879DE883"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040054",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02714910",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02714910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6167",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2017-12-21T17:29:00.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM y WebSafe, en versiones 13.0.0 y de la 12.1.0 a la 12.1.2, las condiciones de carrera en iControl REST pueden conducir a la ejecución de comandos con niveles de privilegios diferentes a los esperados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "A7E33F47-378B-4077-AA3E-6EBED04D3609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "D90D84D6-E4EF-4686-A7D9-52FF577251D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "48B5CC4A-32F1-474A-A89B-A6C7E56513D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040053",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K24465120",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K24465120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-21T19:29:00.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property."
      }, {
        "lang" : "es",
        "value" : "Samsung Internet Browser 5.4.02.3 permite que atacantes remotos omitan la política del mismo origen (SOP) y obtengan información sensible mediante código JavaScript manipulado que redirige a una pestaña secundaria y reescribe la propiedad innerHTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:internet_browser:5.4.02.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44756B42-2064-46DE-8AEB-2EB5BF4B60C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145510/Samsung-Internet-Browser-SOP-Bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://datarift.blogspot.in/p/samsung-interent-browser-sop-bypass-cve.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/samsung_browser_sop_bypass.rb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43376/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145510/Samsung-Internet-Browser-SOP-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://datarift.blogspot.in/p/samsung-interent-browser-sop-bypass-cve.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/samsung_browser_sop_bypass.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43376/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14363",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2017-12-21T22:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad Cross-Site Scripting (XSS) en Micro Focus Operations Manager i en las versiones 10.60, 10.61 y 10.62. La vulnerabilidad se podría explotar de forma remota para permitir que se produzca Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_manager_i:10.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FF5A51-83C2-4964-9850-CC57D1A1C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_manager_i:10.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E0A392-4756-4AEB-ABE3-435298D61BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_manager_i:10.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF75EB-5105-433D-8350-D692658EC262"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03060545",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03060545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16727",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-22T02:29:15.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely compromise the confidentiality and integrity of the wireless traffic."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de gestión de credenciales en Moxa NPort W2150A en versiones anteriores a la 1.11 y NPort W2250A en versiones anteriores a la 1.11. La contraseña por defecto está vacía en el dispositivo. Un usuario no autorizado puede acceder al dispositivo sin una contraseña. Un usuario no autorizado puede comprometer por completo la confidencialidad e integridad del tráfico de red inalámbrica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_w2150a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11",
            "matchCriteriaId" : "ED96B77F-29F2-48EB-871D-B8DB3EC4378C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_w2150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4BE331-7243-4BBC-BEFD-213B5C33441F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:nport_w2250a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11",
            "matchCriteriaId" : "EF1412DF-5C9C-490A-8F6B-C8FF29079A12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:nport_w2250a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6E4427-6FD7-412F-B2EC-5A0E99A5E343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102254",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10868",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-22T14:29:12.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header."
      }, {
        "lang" : "es",
        "value" : "H2O en sus versiones 2.2.2 y anteriores permite que atacantes remotos provoquen una denegación de servicio (DoS) en el servidor mediante cabeceras HTTP/1 especialmente manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "67F38DCD-7FC3-477F-8C35-307315175D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h2o/h2o/issues/1459",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/h2o/h2o/issues/1459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10869",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-22T14:29:12.517",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en las versiones 2.2.2 y anteriores de H2O permite que atacantes remotos provoquen una denegación de servicio (DoS) en el servidor mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "C040C5D3-9503-45E5-A01E-A94658BC7079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h2o/h2o/issues/1460",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/h2o/h2o/issues/1460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10872",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-22T14:29:12.563",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "H2O en sus versiones 2.2.3 y anteriores permite que atacantes remotos provoquen una denegación de servicio (DoS) en el servidor mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-118"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "68843412-E10F-4137-8BAE-2E26A7BB699E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h2o/h2o/issues/1543",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/h2o/h2o/issues/1543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10907",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-22T14:29:12.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en OneThird CMS Show Off en su versión 1.85 y anteriores. Show Off, hasta la versión 1.85 en, permite que un atacante lea archivos arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiqe:onethird_cms_show_off:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.85",
            "matchCriteriaId" : "5F439D4C-01B7-4A42-8729-8A0E9C617E9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN93333702/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://onethird.net/en/p1307.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN93333702/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://onethird.net/en/p1307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10908",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-22T14:29:12.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header."
      }, {
        "lang" : "es",
        "value" : "H2O en sus versiones 2.2.3 y anteriores permite que atacantes remotos provoquen una denegación de servicio (DoS) en el servidor mediante cabeceras HTTP/2 especialmente manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "68843412-E10F-4137-8BAE-2E26A7BB699E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h2o/h2o/issues/1544",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/h2o/h2o/issues/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84182676/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10909",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-22T14:29:12.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en Music Center for PC en sus versiones 1.0.01 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:music_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.01",
            "matchCriteriaId" : "E4DFE301-9822-4AAD-8EF5-6A5242BCDE64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN60695371/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN60695371/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16766",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-22T14:29:13.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso incorrecto en synodsmnotify en Synology DiskStation Manager (DSM), en versiones anteriores a la 6.1.4-15217 y anteriores a la 6.0.3-8754-6, permite que usuarios locales inyecten scripts web o HTML arbitrarios mediante la opción -fn."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3-8754-6",
            "matchCriteriaId" : "1C8FA193-8413-412E-BA6C-3FD0334000A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.4-15217",
            "matchCriteriaId" : "9F862E85-4ADD-4CB8-9762-00859F2A5ACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_74",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15307",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:12.830",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor 8 con versiones de software anteriores a FRD-L04C567B389 y anteriores a la FRD-L14C567B389 tienen una vulnerabilidad de control de permisos debido a una configuración incorrecta de autorizaciones en información específica del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "frd-l04c567b389",
            "matchCriteriaId" : "D6A27C55-0028-43E5-AA9E-22227342C1EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72889681-6793-4451-B97F-F12B4B28372A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "frd-l14c567b389",
            "matchCriteriaId" : "8637BD71-29CE-4776-AF28-C84D041CCE06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72889681-6793-4451-B97F-F12B4B28372A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171030-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171030-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15308",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:12.923",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data. An attacker can control app access and load malicious websites created by the attacker, and the code in webpages would be loaded and run."
      }, {
        "lang" : "es",
        "value" : "La aplicación Huawei iReader en versiones anteriores a la 8.0.2.301 tiene una vulnerabilidad de validación de entradas debida a una validación insuficiente en la URL empleada para cargar datos de red. Un atacante puede controlar el acceso a la aplicación y cargar sitios web maliciosos creados por él. Así, el código de estas páginas web se cargaría y ejecutaría."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:ireader:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.2.301",
            "matchCriteriaId" : "F2028F4E-4042-40E1-9A67-84D18B5EED35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15309",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:12.970",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory."
      }, {
        "lang" : "es",
        "value" : "La aplicación Huawei iReader en versiones anteriores a la 8.0.2.301 tiene una vulnerabilidad de salto de directorio debida a una validación insuficiente en las rutas de almacenamiento de archivos. Un atacante puede explotar esta vulnerabilidad para almacenar archivos maliciosos descargados en un directorio arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:ireader:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.2.301",
            "matchCriteriaId" : "F2028F4E-4042-40E1-9A67-84D18B5EED35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15310",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. An attacker can exploit this vulnerability to delete specific files from the SD card."
      }, {
        "lang" : "es",
        "value" : "La aplicación Huawei iReader en versiones anteriores a la 8.0.2.301 tiene una vulnerabilidad de borrado de archivos arbitrarios debida a falta de validación de entradas. Un atacante puede explotar esta vulnerabilidad para eliminar archivos específicos de la tarjeta SD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:ireader:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.2.301",
            "matchCriteriaId" : "F2028F4E-4042-40E1-9A67-84D18B5EED35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171120-01-hwreader-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15311",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.063",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module."
      }, {
        "lang" : "es",
        "value" : "Los módulos baseband de los smartphones Huawei Mate 10, Mate 10 Pro, Mate 9 y Mate 9 Pro con versiones de software anteriores a ALP-AL00 8.0.0.120(SP2C00), anteriores a BLA-AL00 8.0.0.120(SP2C00), anteriores a MHA-AL00B 8.0.0.334(C00) y anteriores a LON-AL00B 8.0.0.334(C00) incluyen una vulnerabilidad de desbordamiento de pila debido a una falta de validación de parámetros. Un atacante podría enviar paquetes maliciosos a los smartphones dentro del rango de radio mediante dispositivos inalámbricos especiales. Esto da lugar a un desbordamiento de pila cuando el módulo baseband manipula estos paquetes. El atacante podría explotar esta vulnerabilidad para realizar un ataque de denegación de servicio (DoS) o para ejecutar código de manera remota en el módulo baseband."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-al00_8.0.0.120\\(sp2c00\\)",
            "matchCriteriaId" : "F7E91ECD-963D-4547-8712-912A68678E04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "bla-al00_8.0.0.120\\(sp2c00\\)",
            "matchCriteriaId" : "70F576DC-ADE1-4DE1-BDBA-617013F4DAD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC0AD4F-0368-4F29-ACCF-B948B8C6BE05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00b_8.0.0.334\\(c00\\)",
            "matchCriteriaId" : "B9640332-F80C-4360-A67E-C00C99D807D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.334\\(c00\\)",
            "matchCriteriaId" : "1C983B9F-8A7B-4FF1-8073-7C397714991A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15312",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.097",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device."
      }, {
        "lang" : "es",
        "value" : "Huawei SmartCare V200R003C10 contiene un vulnerabilidad de Cross-Site Scripting (XSS) persistente en el módulo dashboard. Un atacante remoto autenticado podría explotar esta vulnerabilidad para inyectar scripts maliciosos en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:smartcare:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77936C52-AC9D-4B6A-B550-62D15EE9F2B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15313",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.143",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated attacker could inject malicious CSV expression to the affected device."
      }, {
        "lang" : "es",
        "value" : "Huawei SmartCare V200R003C10 contiene una vulnerabilidad de inyección de CSV. Un atacante remoto autenticado podría inyectar expresiones CSV maliciosas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:smartcare:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77936C52-AC9D-4B6A-B550-62D15EE9F2B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15316",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.173",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which triggers double free and causes a system crash or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de unidad de procesamiento gráfico o GPU de los smartphones Mate 9de Huawei con software anterior a MHA-AL00B 8.0.0.334(C00) y Mate 9 Pro de Huawei con software anterior a LON-AL00B 8.0.0.334(C00) contiene una vulnerabilidad de doble liberación (double free) de memoria. Un atacante engaña a un usuario para que instale una aplicación maliciosa que puede llamar a una API especial. Esto desencadena una doble liberación (double free) y provoca el cierre inesperado del sistema o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00b_8.0.0.334\\(c00\\)",
            "matchCriteriaId" : "B9640332-F80C-4360-A67E-C00C99D807D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.334\\(c00\\)",
            "matchCriteriaId" : "1C983B9F-8A7B-4FF1-8073-7C397714991A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15317",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.220",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart."
      }, {
        "lang" : "es",
        "value" : "AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20 y V200R008C30 tienen una vulnerabilidad de validación de entradas en múltiples productos Huawei. Debido a una validación de entradas insuficiente, un atacante remoto no autenticado puede manipular un paquete Stream Control Transmission Protocol (SCTP) mal formado y enviarlo al dispositivo. Esto provoca que el dispositivo realice una lectura fuera de límites y se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15318",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system."
      }, {
        "lang" : "es",
        "value" : "RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00 y V600R006C00 tienen vulnerabilidades de lectura fuera de límites en algunos productos Huawei. Debido a una validación de entradas insuficiente, un atacante remoto podría explotar estas vulnerabilidades enviando paquetes relacionados con SS7 especialmente manipulados a los dispositivos objetivo. Una explotación exitosa provocaría una lectura fuera de límites y, posiblemente, el cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15319",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system."
      }, {
        "lang" : "es",
        "value" : "RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00 y V600R006C00 tienen vulnerabilidades de lectura fuera de límites en algunos productos Huawei. Debido a una validación de entradas insuficiente, un atacante remoto podría explotar estas vulnerabilidades enviando paquetes relacionados con SS7 especialmente manipulados a los dispositivos objetivo. Una explotación exitosa provocaría una lectura fuera de límites y, posiblemente, el cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15320",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system."
      }, {
        "lang" : "es",
        "value" : "RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00 y V600R006C00 tienen vulnerabilidades de lectura fuera de límites en algunos productos Huawei. Debido a una validación de entradas insuficiente, un atacante remoto podría explotar estas vulnerabilidades enviando paquetes relacionados con SS7 especialmente manipulados a los dispositivos objetivo. Una explotación exitosa provocaría una lectura fuera de límites y, posiblemente, el cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15321",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.393",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak."
      }, {
        "lang" : "es",
        "value" : "Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) contiene una vulnerabilidad de fuga de información debida al uso de un protocolo de transmisión en versiones antiguas por defecto. Un atacante podría interceptar paquetes transferidos por un dispositivo objetivo. Una explotación exitosa podía provocar una fuga de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:fusionsphere_openstack:v100r006c000spc102_\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A988CAC-A3EA-4CD3-80F9-9AAE28464102"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15322",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.423",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software de BGO-L03C158B003CUSTC158D001 y BGO-L03C331B009CUSTC331D001 contienen una vulnerabilidad de DoS debida a una validación de entradas insuficiente. Un atacante podría explotar esta vulnerabilidad mediante el envío de mensajes NFC especialmente manipulados al dispositivo objetivo. Una explotación exitosa podría provocar el cierre inesperado de un servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:baggio-l03a_firmware:bgo-l03c158b003custc158d001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD8D84-1203-44E2-A1EC-57B9DB028A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:baggio-l03a_firmware:bgo-l03c331b009custc331d001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95F753B-C655-41E2-8A2A-3C9BA919EA2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:baggio-l03a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC40DA7-38EB-4A2D-A569-8FF48D84ACF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15324",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.470",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart."
      }, {
        "lang" : "es",
        "value" : "Huawei S5700 y S6700 con software V200R005C00 tienen una vulnerabilidad de DoS debido a una validación insuficiente de los paquetes Network Quality Analysis (NQA). Un atacante remoto podría explotar esta vulnerabilidad enviando paquetes NQA mal formados al dispositivo objetivo. La explotación exitosa de esta vulnerabilidad puede provocar el reinicio del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF23DAE-1215-41B2-88C5-4436D846266C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15328",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2017-12-22T17:29:13.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can access a specific URL of the affect product. Due to improper verification of the privilege, successful exploitation may cause information leak."
      }, {
        "lang" : "es",
        "value" : "Huawei HG8245H en versiones anteriores a la V300R018C00SPC110 contiene una vulnerabilidad de omisión de autenticación. Un atacante puede acceder a un URL específica del producto afectado. Debido a una verificación incorrecta de los privilegios, una explotación exitosa podría dar lugar a una fuga de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hg8245h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v300r018c00spc110",
            "matchCriteriaId" : "BD6C81D0-8C6B-4BBE-BE29-A0B45E767E30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hg8245h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7D61F0-543D-4087-A112-FDA4DDEC0C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.huawei.com/carrier/docview%21docview?nid=DOC1000441394&path=PBI1-7275726/PBI1-7275742/PBI1-7912539/PBI1-22318696/PBI1-8952133/PBI1-8957546/PBI1-22412232/PBI1-22412234/PBI1-22807623",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "https://hacked0x90.wordpress.com/2017/11/30/hg8245h-authentication-bypass/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.huawei.com/carrier/docview%21docview?nid=DOC1000441394&path=PBI1-7275726/PBI1-7275742/PBI1-7912539/PBI1-22318696/PBI1-8952133/PBI1-8957546/PBI1-22412232/PBI1-22412234/PBI1-22807623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hacked0x90.wordpress.com/2017/11/30/hg8245h-authentication-bypass/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14022",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2017-12-23T00:29:13.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP (the history archiver service), causing the service to either stall or terminate."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de validación de entrada incorrecta en Rockwell Automation FactoryTalk Alarms and Events, versión 2.90 y anteriores. Un atacante sin autenticar con acceso remoto a red y con FactoryTalk Alarms and Events puede enviar un paquete que incluya un grupo de paquetes manipulados al puerto 403/TCP (el servicio archivador de historiales), lo que provocaría que el servicio se bloquease o se cerrase."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:factorytalk_alarms_and_events:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.90",
            "matchCriteriaId" : "91F93E49-1C0C-4655-8D26-82857D65D36D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102114",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-341-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-341-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13847",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:13.870",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the \"IOKit\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.2 y las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"IOKit\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43326/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43326/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13848",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:13.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"IOKit\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"IOKit\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13855",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:13.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app that triggers type confusion."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada, lo que da lugar a una confusión de tipos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43318/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43318/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13856",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:13.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13858",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"IOKit\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"IOKit\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13860",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.090",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the \"Mail Drafts\" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.2 y las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Mail Drafts\". Permite que atacantes de Man-in-the-Middle (MitM) lean el contenido de correos electrónicos aprovechando la gestión incorrecta del cifrado de credenciales S/MIME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13861",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.137",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"IOSurface\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"IOSurface\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102134",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43320/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43320/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13862",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.167",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13864",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the \"APNs Server\" component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iCloud anteriores a la 7.2 en Windows y las versiones de iTunes anteriores a la 12.7.2 en Windows. El problema afecta al componente \"APNs Server\". Permite que atacantes de Man-in-the-Middle (MitM) rastreen usuarios aprovechando la gestión incorrecta de certificados de cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102192",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13865",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43321/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43321/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13866",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13867",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.513",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43328/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43328/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13868",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bazad.github.io/2018/03/a-fun-xnu-infoleak/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bazad/ctl_ctloutput-leak",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bazad.github.io/2018/03/a-fun-xnu-infoleak/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bazad/ctl_ctloutput-leak",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13869",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.823",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43319/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43319/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13870",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.903",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13871",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.950",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Mail\" component. It allows remote attackers to read cleartext e-mail content (for which S/MIME encryption was intended) by leveraging the lack of installation of an S/MIME certificate by the recipient."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Mail\". Permite que atacantes remotos lean contenido de correos electrónicos en texto claro (para lo que se usa el cifrado S/MIME) aprovechando que el destinatario no tiene un certificado S/MIME instalado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13874",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:14.997",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the \"Mail\" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. El problema afecta al componente \"Mail\". Podría permitir que atacantes remotos omitan el mecanismo de protección de cifrado planeado aprovechando la selección incorrecta del certificado S/MIME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13875",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:15.027",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (lectura fuera de límites) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43327/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13876",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:15.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43325/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43325/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13878",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:15.107",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Intel Graphics Driver\". Permite que usuarios locales omitan las restricciones de lectura de memoria planeadas o provoquen una denegación de servicio (lectura fuera de límites y cierre inesperado del sistema)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 5.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43780/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43780/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13879",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:15.153",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the \"IOMobileFrameBuffer\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. El problema afecta al componente \"IOMobileFrameBuffer\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13883",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:15.183",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13903",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-25T21:29:15.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the \"HomeKit\" component. It allows remote attackers to modify the application state by leveraging incorrect message handling, as demonstrated by use of an Apple Watch to obtain an encryption key and unlock a door."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.2.1 y las versiones de tvOS anteriores a la 11.2.1. El problema afecta al componente \"HomeKit\". Permite que atacantes remotos modifiquen el estado de la aplicación aprovechando la gestión incorrecta de mensajes, como se ha demostrado con el uso de un Apple Watch para obtener una clave de cifrado y desbloquear una puerta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2.1",
            "matchCriteriaId" : "792B7713-C885-443C-8D5F-0CACD7E2A4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2.1",
            "matchCriteriaId" : "3CBC7775-11DD-4FB5-AA32-7618496BAFCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102182",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040008",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208357",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208359",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.engadget.com/2017/12/21/apple-ignored-a-major-homekit-security-flaw-for-six-weeks/",
        "source" : "product-security@apple.com",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.engadget.com/2017/12/21/apple-ignored-a-major-homekit-security-flaw-for-six-weeks/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12736",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-12-26T04:29:13.643",
      "lastModified" : "2025-08-12T12:15:26.210",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.\r\n\r\nThis could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en RUGGEDCOM ROS para los dispositivos RSL910 (todas las versiones anteriores a ROS V5.0.1), RUGGEDCOM ROS para todos los demás dispositivos (todas las versiones anteriores a ROS V4.3.4), SCALANCE XB-200/XC-200/XP-200/XR300-WG (Todas las versiones entre V3.0 (incluido) y V3.0.2 (excluyendo), SCALANCE XR-500/XM-400 (Todas las versiones entre V6.1 (incluido) y V6.1.1 (excluyendo). Después de la configuración inicial, el Ruggedcom Discovery Protocol (RCDP) aún puede escribir hacia el dispositivo bajo ciertas condiciones, esto potencialmente permite que los usuarios ubicados en la red adyacente del dispositivo destino realicen acciones administrativas no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "matchCriteriaId" : "DA12DF53-5DB1-4279-9E46-6031258ACE68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB3CC2D-CBF0-4F53-A412-01BBC39E34C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "matchCriteriaId" : "5501093A-B4A4-4E9C-AE5A-38A012B81E07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7719E194-EE3D-4CE8-8C85-CF0D82A553AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "matchCriteriaId" : "6F5B80A4-0EFC-4488-A569-574B942FC7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F962FC7-0616-467F-8CCA-ADEA224B5F7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr300-wg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "matchCriteriaId" : "0DEF3486-F27F-4FC3-ADE5-A5BCAD477C47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr300-wg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C240D0-5169-4800-B336-A2B889475CD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr-500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "matchCriteriaId" : "8C6310FD-6DD7-4420-BE94-C791D18CA1E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96EA9D9A-AD86-4983-8FD2-33B1E447D7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "matchCriteriaId" : "CF503997-A9E6-4722-A774-D3089B3468B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798E900F-5EF9-4B39-B8C2-79FAE659E7F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_ros:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.1",
            "matchCriteriaId" : "F8AEFEF0-6AA1-4C07-BE94-0FBD7CECA354"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom_rsl910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0C8879-659D-4A28-BA72-7BE05B5215CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_ros:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.4",
            "matchCriteriaId" : "CF1FAD6D-C62C-46CF-A752-E0844A496344"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EABA893-37F5-4877-BC13-3557C654857E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101041",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039463",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039464",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-856721.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12740",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-12-26T04:29:13.673",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while performing a Man-in-the-Middle (MitM) attack."
      }, {
        "lang" : "es",
        "value" : "Siemens LOGO! Soft Comfort en todas las versiones anteriores a la V8.2 carece de verificación de integridad de los paquetes de software descargados mediante un canal de comunicación sin protección. Esto podría permitir que un atacante remoto manipulase el paquete de software mientras realiza un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:logo\\!_soft_comfort:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "DF69C737-B070-464E-B256-50BCE0106A11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-888929.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-888929.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12741",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-12-26T04:29:13.707",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Development/Evaluation Kits para PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200P, SIMATIC Compact Field Unit, SIMATIC ET200AL, SIMATIC ET200M (incluidas las variantes SIPLUS), SIMATIC ET200MP IM155-5 PN BA (incluidas las variantes SIPLUS), SIMATIC ET200MP IM155-5 PN HF (incluidas las variantes SIPLUS), SIMATIC ET200MP IM155-5 PN ST (incluidas las variantes SIPLUS), SIMATIC ET200S (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN BA (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HA (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HF (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN HS (incluidas las variantes SIPLUS), SIMATIC ET200SP IM155-6 PN ST (incluidas las variantes SIPLUS), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200pro, SIMATIC PN/PN Coupler (incluidas las variantes SIPLUS NET), familia SIMATIC S7-1200 CPU (incluidas las variantes SIPLUS), familia SIMATIC S7-1500 CPU (incluyendo las variantes relacionadas ET200 CPUs y SIPLUS), SIMATIC S7-1500 Software Controller, SIMATIC S7-200 SMART, familia SIMATIC S7-300 CPU (incluyendo las variantes relacionadas ET200 CPUs y SIPLUS), SIMATIC S7-400 H V6 CPU familia y posteriores (incluidas las variantes SIPLUS), SIMATIC S7-400 PN/DP V6 CPU familia y posteriores (incluidas las variantes SIPLUS), familia SIMATIC S7-400 PN/DP V7 CPU (incluidas las variantes SIPLUS), familia SIMATIC S7-410 V8 CPU (incluidas las variantes SIPLUS), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX (F) 2010, SIMOCODE pro V EIP (incluidas las variantes SIPLUS), SIMOCODE pro V PN (incluidas las variantes SIPLUS), SIMOTION C, SIMOTION D (incluidas las variantes SIPLUS), SIMOTION D4xx V4.4 para SINAMICS SM150i-2 w. PROFINET (incluidas las variantes SIPLUS), SIMOTION P V4.4 and V4.5, SIMOTION P V5, SINAMICS DCM w. PN, SINAMICS DCP w. PN, SINAMICS G110M w. PN, SINAMICS G120(C/P/D) w. PN (incluidas las variantes SIPLUS), SINAMICS G130 V4.7 w. PN, SINAMICS G130 V4.8 w. PN, SINAMICS G150 V4.7 w. PN, SINAMICS G150 V4.8 w. PN, SINAMICS GH150 V4.7 w. PROFINET, SINAMICS GL150 V4.7 w. PROFINET, SINAMICS GM150 V4.7 w. PROFINET, SINAMICS S110 w. PN, SINAMICS S120 V4.7 SP1 w. PN (incluidas las variantes SIPLUS), SINAMICS S120 V4.7 w. PN (incluidas las variantes SIPLUS), SINAMICS S120 V4.8 w. PN (incluidas las variantes SIPLUS), SINAMICS S120 prior to V4.7 w. PN (incluidas las variantes SIPLUS), SINAMICS S150 V4.7 w. PN, SINAMICS S150 V4.8 w. PN, SINAMICS SL150 V4.7.0 w. PROFINET, SINAMICS SL150 V4.7.4 w. PROFINET, SINAMICS SL150 V4.7.5 w. PROFINET, SINAMICS SM120 V4.7 w. PROFINET, SINAMICS V90 w. PN, SINUMERIK 840D sl, SIRIUS Soft Starter 3RW44 PN. Los paquetes especialmente creados enviados al puerto 161/UDP podrían generar una condición de denegación de servicio. Los dispositivos afectados deben reiniciarse manualmente"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.03.01",
            "matchCriteriaId" : "9E1170E1-3978-4B26-AE20-0B2E8F4C379B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD1D073-B29D-42CE-AF5E-B1AEF3DF09E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-400pn_v6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.6",
            "matchCriteriaId" : "E9296EA6-7EB3-4661-9024-C5E435E5E5DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-400pn_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA55DDD2-92C5-4A73-A75D-F13A7B720A22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-400h_v6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.8",
            "matchCriteriaId" : "A0DF482D-78BF-418E-8299-45E7C11C0F64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-400h_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D082EB6-3C13-40C1-9949-179DC59037C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-400pn\\/dp_v7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29A41A6-33ED-4E2E-9613-13FF0A521C1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-400pn\\/dp_v7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E6070F-9180-4FBC-A0DB-6AC8C242CADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-410_v8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F211D16-8C72-4720-BD72-8273DB73BBA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-410_v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926D9DCF-A7EA-416A-9A07-122D1FCA027B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C096137-C1E3-4D19-87A9-BEB7A081DD1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD4E99-5C66-443F-8B6F-FA01C895DE78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5187EF42-3E86-4C73-A435-E5D5710B6999"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC545350-FD53-4B2E-886F-E20F12260C9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "32221F56-8BA2-4DAE-BBCB-B5EDC2813674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DDEA9B-E1BF-4572-8E12-D13C54603E77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1500_controller_firmware:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C92AE0F-3688-4DE7-8805-8C2B7E57A97A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1500_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E324C78-6911-412E-87D4-36A5BCA856EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_f_2010_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA451CA-78D2-46D8-A3BA-419ACCB2E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_winac_rtx_f_2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61527333-0741-42DE-9A68-BBC288526DD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200al_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD5A211-517E-40BE-B306-FE29F9CD3F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C17B00-34B5-4A15-9333-252BE2975F37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D281D261-AF1E-417B-9D86-2BC11B5D1231"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0259EAE9-0CA0-49A5-A573-8339604A181B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BED0F6-86D0-43E0-AD49-F4F111245F39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200mp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF6E7E6-B323-4576-92AF-33FF3E5F3CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA8715-D671-4D8F-A870-E61960A5AFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BAFDDB1-7AF3-4665-B1AE-ED893245890A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0CE2EC-9A73-4576-A389-A19893D47B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C194763-8D3D-490D-BF6C-B881581BB13B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1EC40E7-F004-446C-B5C9-0AB9911105E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_et_200sp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238BF3F4-3680-4138-A1F0-4034A614A41B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691CA334-4394-4ED6-B417-F67FC92228AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED030D86-261F-446C-A7AA-1B2CD3C0BF09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "D4EE8C83-8D16-447C-AF7C-4CF52438E932"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB75CD44-5223-40A7-A835-111BF3C25D23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ek-ertec_200pn_io_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37947E71-645B-408D-B45B-A03214B46CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ek-ertec_200pn_io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AA2F7C-ABCF-4F43-A595-49F8BDAD6336"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "5532645E-7937-4B07-8DE1-5CA04A57A852"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion_d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F736C6F1-98CE-4C94-9457-4E1278B66C05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "E5DFA690-68F5-461E-BD0E-E9813F0103D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion_c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8EBFB0-47DE-495A-9971-B762BB519E0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotion_p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "A71DD5C2-3127-48CC-A02E-3BD6C66DB8B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotion_p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA14B83E-1438-46B9-B05E-DB9165DF9274"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcm_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4004A6FB-C40C-484F-A0A2-485B6B617FF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A43D34-ECA3-4330-B85F-02BDD1D22149"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_dcp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713658D1-059F-478F-A950-3969EDD2EC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g110m\\/g120pn_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7",
            "matchCriteriaId" : "22FF232D-AA38-481F-BA05-94BCD80A0E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g110m\\/g120pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD9F256-8342-45D2-9758-C24484CBE19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D52C517-17D7-467A-A021-9832DC8906F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373DBE44-AC28-4D04-93BB-35CD8C60E899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_g150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9EA116-C2EF-487F-A9CD-8526B014AA77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2296CA65-0E89-4BCB-8003-E7212BF1F585"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s110pn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA2F893-58D9-4445-9653-564291014A54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s110pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763325DC-F62B-4F61-8A05-CA5C836EC990"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s120_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA8B933-D7E3-4E3B-AA1D-75AFC89EA730"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A824BD-935F-4E53-8313-C5544B0489C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s150_v4.7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F961DB8C-4602-4B25-8CBC-F61413F48C40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s150_v4.7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D975BB-137E-415B-9D0A-C3B68C3FD16A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_s150_v4.8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DC04F5-D4C9-4FD7-BA26-ACD9B6B6E91B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_s150_v4.8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FA0B11-B161-4516-9D4F-9D3CEABB71BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_v90pn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B06805-BAAA-46A8-9FCD-03876ED5D079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_v90pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB3D335-F7F5-4CEA-82E0-FF56762E984C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705AA5C8-E884-479D-972E-C779B6D0542B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765286DF-07EC-4C7A-AB8C-09559CD977EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_compact_field_unit_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18BCB76-61B2-4573-8EBF-EB61B597B7E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_compact_field_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933FF731-95FA-4A32-80DC-47CD806144D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pn\\/pn_coupler_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6086ACE6-B396-4954-80E8-EDD167DF2021"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB85F8-7D45-433E-805B-360725F2980C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD292574-20C0-432B-8BE7-3893077DC3FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352651A0-F7CE-4689-8597-15F3764707A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sirius_soft_starter_3rw44pn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C18078-18D3-445F-B67B-B21BE6B6A44B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sirius_soft_starter_3rw44pn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336625A5-CADB-4F33-B49F-ACA4D4B4EDEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-141614.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-346262.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-546832.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://www.securityfocus.com/bid/101964",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-141614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-346262.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-546832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.securityfocus.com/bid/101964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1191",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-27T16:29:13.917",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661."
      }, {
        "lang" : "es",
        "value" : "Es posible que una vulnerabilidad no revelada en las aplicaciones CLM (incluido IBM Rational Collaborative Lifecycle Management 4.0, 5.0 y 6.0) no restrinja el acceso URL. IBM X-Force ID: 123661."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "D974C0B2-5C29-4298-8AD7-28794B5ED473"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "92A37B81-7F7D-4942-8FAB-CDAAAA00C524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "4EB5653C-C3DD-471B-B644-6E3128CA7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "FB171CCC-251B-42DD-BFE5-FA0193B2111F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E3F0FEE7-6D74-494E-9081-D4942FE17CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "909CD52D-BC7A-467F-A88B-15150C6A41ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "1DA2EE62-E164-4725-8FCE-8438C835735F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "F5C09499-13C3-4F91-A68D-C8FEB77B18DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "B5EE3277-D8B8-44B6-8FBF-131B655F72AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "8BABC587-0E98-4CE1-AD8C-4045D3CA2941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "1A9B6E48-DF7B-4E10-A1AF-B3008ECE08E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "06626B42-DA20-4266-B4B8-F98E5525C2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "3A1EBFE0-1EA4-46A9-866B-3ED2E1187612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "4E4B3B3C-85EA-418E-9F2B-7E40AC8CB6A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "EC9DA362-C185-4467-B0BC-20703EAE5D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED534E3-80EF-40AF-927A-20D59DA7B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123661",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1365",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-27T16:29:14.230",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858."
      }, {
        "lang" : "es",
        "value" : "IBM Team Concert (RTC incluido IBM Rational Collaborative Lifecycle Management 4.0, 5.0 y 6.0) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 126858."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "D974C0B2-5C29-4298-8AD7-28794B5ED473"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "92A37B81-7F7D-4942-8FAB-CDAAAA00C524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "4EB5653C-C3DD-471B-B644-6E3128CA7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "FB171CCC-251B-42DD-BFE5-FA0193B2111F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E3F0FEE7-6D74-494E-9081-D4942FE17CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "909CD52D-BC7A-467F-A88B-15150C6A41ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "1DA2EE62-E164-4725-8FCE-8438C835735F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "F5C09499-13C3-4F91-A68D-C8FEB77B18DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "B5EE3277-D8B8-44B6-8FBF-131B655F72AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "8BABC587-0E98-4CE1-AD8C-4045D3CA2941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "1A9B6E48-DF7B-4E10-A1AF-B3008ECE08E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "06626B42-DA20-4266-B4B8-F98E5525C2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "3A1EBFE0-1EA4-46A9-866B-3ED2E1187612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "4E4B3B3C-85EA-418E-9F2B-7E40AC8CB6A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "EC9DA362-C185-4467-B0BC-20703EAE5D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED534E3-80EF-40AF-927A-20D59DA7B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126858",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:17.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en la biblioteca passport-wsfed-saml2 en Auth0 que afecta a versiones anteriores a la 3.0.5. Esta vulnerabilidad permite que un atacante suplante a otro usuario y que, posiblemente, eleve sus privilegios si el proveedor de identidad de SAML no firma la respuesta SAML completa (por ejemplo, solo firma la aserción en la respuesta)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth0:passport-wsfed-saml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.5",
            "matchCriteriaId" : "DDC96B2E-1DEF-4C71-A58F-64F7372D455D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://auth0.com/docs/security/bulletins/cve-2017-16897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://auth0.com/docs/security/bulletins/cve-2017-16897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1698",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2017-12-27T17:08:17.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal 7.0, 8.0, 8.5 y 9.0 podría revelar información sensible en un mensaje de error, lo que podría dar lugar a más ataques contra el sistema. IBM X-Force ID: 124390."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF6533-4FE9-4A9B-ABF6-CEDD30402A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011519",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102281",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040043",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134390",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16995",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-27T17:08:17.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension."
      }, {
        "lang" : "es",
        "value" : "La función check_alu_op en kernel/bpf/verifier.c en el kernel de Linux, hasta la versión 4.4, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una extensión de señal incorrecta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.9.72",
            "matchCriteriaId" : "8F90DFFB-7662-456E-B026-70B6266F2672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "138E3219-AF76-4219-A5E1-8EF8548D50A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102288",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1454",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3633-1/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44298/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45010/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45058/",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3633-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44298/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45058/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16996",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2017-12-27T17:08:17.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una mala gestión del truncamiento de registros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102267",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1454",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17010",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-27T17:08:17.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no fiable en Content Manager Assistant para PlayStation en sus versiones 3.55.7671.0901 y anteriores permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:content_manager_assistant:*:*:*:*:*:*:playstation:*",
            "versionEndIncluding" : "3.55.7671.0901",
            "matchCriteriaId" : "6E4DB9CF-F8AF-41D6-B133-8B37A231F95F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN95423049/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN95423049/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settings_SMS_ALERT_TYPE parameter, and JavaScript can be executed on settings-save.html (the Settings - SMS Alerts page)."
      }, {
        "lang" : "es",
        "value" : "ServersCheck Monitoring Software en versiones anteriores a la 14.2.3 es propenso a vulnerabilidades de tipo Cross-Site Scripting (XSS) debido a que los datos proporcionados por el usuario no se validan o sanean cuando se pasan en el parámetro settings_SMS_ALERT_TYPE y se puede ejecutar JavaScript en settings-save.html (la página Settings - SMS Alerts)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverscheck:monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.3",
            "matchCriteriaId" : "3DDD05F4-3119-4075-9D70-3A64A8AD92A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145517/ServersCheck-Monitoring-Software-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://serverscheck.com/monitoring-software/release.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145517/ServersCheck-Monitoring-Software-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://serverscheck.com/monitoring-software/release.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones hasta la 2.0.875 de Open-iSCSI. Un atacante local puede provocar que el servidor iscsiuio se interrumpa o, posiblemente, ejecute código mediante el envío de mensajes con longitudes incorrectas. Debido a la falta de verificación, esto puede dar lugar a desbordamientos de búfer que den como resultado interrupciones (con la verificación de desbordamiento activada) o ejecución de código. La función process_iscsid_broadcast en iscsiuio/src/unix/iscsid_ipc.c no valida la longitud de la carga útil antes de una operación de escritura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-iscsi_project:open-iscsi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.875",
            "matchCriteriaId" : "D0807E98-96E5-420F-8197-15F381454CC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/13/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.opensuse.org/show_bug.cgi?id=1072312",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.opensuse.org/show_bug.cgi?id=1072312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, because incorrect regular expressions are used for extraction of an e-mail address from a comma-separated list, as demonstrated by a modified Full Name field and a homograph attack, aka TBE-01-002."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Enigmail, en versiones anteriores a la 1.9.9, que permite que atacantes remotos activen el uso de una clave pública planeada para el cifrado, debido a que se utilizan expresiones regulares incorrectas para la extracción de una dirección de email de una lista separada por comas. Esto se ha demostrado por el campo Full Name modificado y un ataque homógrafo, también conocido como TBE-01-002."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "FB028A65-2C8A-4D9C-88F8-78BAE49E77C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block (that the attacker cannot directly decrypt) to a victim, and relying on the victim to automatically decrypt that block and then send it back to the attacker as quoted text, aka the TBE-01-005 \"replay\" issue."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 1.9.9 de Enigmail. Un atacante remoto puede obtener contenido en texto claro enviando un bloque de datos cifrados (que no puede descifrar directamente) a una víctima y confiando en que la víctima descifre automáticamente el bloque y luego lo devuelva al atacante como texto citado. Esto también se conoce como problema \"replay\" TBE-01-005."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "FB028A65-2C8A-4D9C-88F8-78BAE49E77C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by pretty Easy privacy (pEp), aka TBE-01-001."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 1.9.9 de Enigmail. Ocurre una generación incorrecta de secretos aleatorios debido a que pretty Easy privacy (pEp) utiliza Math.Random(). Esto también se conoce como TBE-01-001."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "FB028A65-2C8A-4D9C-88F8-78BAE49E77C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attempts to match arbitrarily long strings, aka TBE-01-003."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 1.9.9 de Enigmail. Se explotan expresiones regulares para provocar una denegación de servicio (DoS) debido a los intentos de combinar cadenas largas de manera arbitraria. Esto también se conoce como TBE-01-003."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "FB028A65-2C8A-4D9C-88F8-78BAE49E77C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.873",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish between an attachment signature, and a signature that applies to the entire containing message, aka TBE-01-021. This is demonstrated by an e-mail message with an attachment that is a signed e-mail message in message/rfc822 format."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 1.9.9 de Enigmail. Se puede dar una suplantación de firma debido a que la interfaz de usuario no distingue correctamente entre una firma adjunta y una firma que aplica a todo el mensaje. Esto también se conoce como TBE-01-021. Esto se demuestra con un mensaje de correo electrónico con un adjunto que es un mensaje de correo firmado en formato message/rfc822."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "FB028A65-2C8A-4D9C-88F8-78BAE49E77C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/enigmail/bugs/709/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/enigmail/bugs/709/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/enigmail-users%40enigmail.net/msg04280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipart/related messages because a signed message part can be referenced with a cid: URI but not actually displayed. In other words, the entire containing message appears to be signed, but the recipient does not see any of the signed text."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 1.9.9 de Enigmail. En una variante de CVE-2017-17847, se puede dar la suplantación de firma para mensajes multipart/related debido a que se puede hacer referencia a una parte del mensaje firmado con un id de contenido cid: URI, pero no se puede mostrar. En otras palabras, todo el contenido del mensaje aparece como firmado, pero el destinatario no visualiza nada del texto firmado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "FB028A65-2C8A-4D9C-88F8-78BAE49E77C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Apr/38",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/04/30/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RUB-NDS/Johnny-You-Are-Fired",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/enigmail/bugs/709/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Apr/38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/04/30/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RUB-NDS/Johnny-You-Are-Fired",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-security-announce/2017/msg00333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/enigmail/bugs/709/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:19.967",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en GetGo Download Manager 5.3.0.2712 y anteriores podría permitir que servidores HTTP remotos ejecuten código arbitrario en dispositivos NAS mediante una respuesta larga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getgosoft:getgo_download_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.2712",
            "matchCriteriaId" : "0C197831-C732-492E-A186-1BD3BBD27BCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145530/GetGo-Download-Manager-5.3.0.2712-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43391/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45087/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/145530/GetGo-Download-Manager-5.3.0.2712-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43391/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45087/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and the PJSIP channel driver was used, Asterisk would crash. The severity of this vulnerability is somewhat mitigated if authentication is enabled. If authentication is enabled, a user would have to first be authorized before reaching the crash point."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Asterisk en versiones 13.18.4 y anteriores, 14.7.4 y anteriores, 15.1.4 y anteriores y 13.18-cert1 y anteriores. Un conjunto de mensajes SIP seleccionados crean un diálogo en Asterisk. Estos mensajes SIP deben contener una cabecera contact. Para estos mensajes, si la cabecera no estuviera presente y se utilizase el controlador de canal PJSIP, Asterisk se cerraría de forma inesperada. La gravedad de esta vulnerabilidad se mitiga en cierta medida habilitando la autenticación. Si se habilita la autenticación, un usuario tendría que estar autorizado antes de alcanzar el punto de cierre inesperado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndIncluding" : "13.18.4",
            "matchCriteriaId" : "FEE78C41-D7BE-4910-BB77-3DFB63690382"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.7.4",
            "matchCriteriaId" : "A845013E-DD73-45F2-A962-6F0A580A4E95"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndIncluding" : "15.1.4",
            "matchCriteriaId" : "09447B7F-89BA-4FD5-8E6F-A166681A22F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F68ED1E-8D2B-4AEE-B5DE-FD50338BA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9F296A-4932-4EA4-8B38-80856A9D6374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B40673A6-2980-440A-B78E-D5C7095E3FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:13.8:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "38E19C8E-9FD6-4A44-81C6-EEC91BC2CB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040056",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27480",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2017-014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-27480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una mala gestión de las operaciones de la unidad aritmética lógica (ALU) de 32 bits."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=468f6eafa6c44cb2c5d8aad35e12f06c240a812a",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/468f6eafa6c44cb2c5d8aad35e12f06c240a812a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=468f6eafa6c44cb2c5d8aad35e12f06c240a812a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/468f6eafa6c44cb2c5d8aad35e12f06c240a812a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect BPF_RSH signed bounds calculations."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando cálculos incorrectos de límites BPF_RSH firmados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4374f256ce8182019353c0c639bb8d0695b4c941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4374f256ce8182019353c0c639bb8d0695b4c941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4374f256ce8182019353c0c639bb8d0695b4c941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4374f256ce8182019353c0c639bb8d0695b4c941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveraging unrestricted integer values for pointer arithmetic."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (desbordamiento de enteros y corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando valores de enteros sin restricción para aritmética de punteros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb7f0f989ca7de1153bd128a40a71709e339fa03",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bb7f0f989ca7de1153bd128a40a71709e339fa03",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb7f0f989ca7de1153bd128a40a71709e339fa03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/bb7f0f989ca7de1153bd128a40a71709e339fa03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando un uso incorrecto de punteros en lugar de escalares."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=179d1c5602997fef5a940c6ddcf31212cbfebd14",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/179d1c5602997fef5a940c6ddcf31212cbfebd14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=179d1c5602997fef5a940c6ddcf31212cbfebd14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/179d1c5602997fef5a940c6ddcf31212cbfebd14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the lack of stack-pointer alignment enforcement."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando la falta de aplicación de la alineación del puntero de pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a5ec6ae161d72f01411169a938fa5f8baea16e8f",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a5ec6ae161d72f01411169a938fa5f8baea16e8f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a5ec6ae161d72f01411169a938fa5f8baea16e8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/a5ec6ae161d72f01411169a938fa5f8baea16e8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations."
      }, {
        "lang" : "es",
        "value" : "La función check_stack_boundary en kernel/bpf/verifier.c en el kernel de Linux, en versiones anteriores a la 4.14.8, permite que los usuarios locales provoquen una denegación de servicio (corrupción de memoria) o, posiblemente, causen otros impactos no especificados aprovechando una gestión incorrecta de operaciones de lectura de pila variable no válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.9",
            "matchCriteriaId" : "4FBC3D92-C940-441E-AF85-454AB6B8D4D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea25f914dc164c8d56b36147ecc86bc65f83c469",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ea25f914dc164c8d56b36147ecc86bc65f83c469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea25f914dc164c8d56b36147ecc86bc65f83c469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/12/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/ea25f914dc164c8d56b36147ecc86bc65f83c469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.390",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside XSLT data in one part of an MHTML file. Specifically, JavaScript code in another part of this MHTML file does not have a document.domain value corresponding to the domain that is hosting the MHTML file, but instead has a document.domain value corresponding to an arbitrary URL within the content of the MHTML file."
      }, {
        "lang" : "es",
        "value" : "Samsung Internet Browser 6.2.01.12 permite que atacantes remotos omitan la política del mismo origen (SOP) y lleven a cabo ataques UXSS para obtener información sensible mediante vectores que incluyen un elemento IFRAME dentro de los datos XSLT en una parte de un archivo MHTML. En concreto, el código JavaScript en otra parte de este archivo MHTML no tiene un valor document.domain que corresponda con el dominio en el que se aloja el archivo MHTML. Por el contrario, tiene un valor document.domain que corresponde con una URL arbitraria en el contenido del archivo MHTML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:internet_browser:6.2.01.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE5036A-0145-47A8-ABE0-9391744D807B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.437",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux hasta la versión 4.14.8 ignora el código inalcanzable, incluso aunque sea procesado por compiladores en tiempo de ejecución o JIT. Este comportamiento, que también se considera un problema de lógica de poda de ramas incorrecta, podría ser utilizado por usuarios locales para provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.8",
            "matchCriteriaId" : "4DD5F65B-785C-436C-9177-6C16E228C08D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c131187db2d3fa2f8bf32fdf4e9a4ef805168467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102325",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040057",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-fix-branch-pruning-logic.patch?h=stretch-security",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c131187db2d3fa2f8bf32fdf4e9a4ef805168467",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable/msg206984.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c131187db2d3fa2f8bf32fdf4e9a4ef805168467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-fix-branch-pruning-logic.patch?h=stretch-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c131187db2d3fa2f8bf32fdf4e9a4ef805168467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable/msg206984.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.483",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service (integer overflow or invalid memory access) or possibly have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux, en versiones 4.9.x hasta la 4.9.71, no verifica la relación entre los valores de punteros y la pila BPF, lo que permite que los usuarios locales provoquen una denegación de servicio (desbordamiento de enteros o acceso a la memoria no válido) o, posiblemente, causar otros impactos no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndIncluding" : "4.9.71",
            "matchCriteriaId" : "EB1AD707-AFE4-469F-813C-90DD787DEC95"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040058",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-reject-out-of-bounds-stack-pointer-calculation.patch?h=stretch-security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3523-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable/msg206985.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-reject-out-of-bounds-stack-pointer-calculation.patch?h=stretch-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3523-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable/msg206985.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.560",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentially sensitive address information, aka a \"pointer leak.\""
      }, {
        "lang" : "es",
        "value" : "kernel/bpf/verifier.c en el kernel de Linux hasta la versión 4.14.8 gestiona de manera incorrecta las comparaciones states_equal entre el tipo de datos del puntero y el tipo de datos UNKNOWN_VALUE, lo que permite que usuarios locales obtengan información de direcciones sensible. Esto también se conoce como \"pointer leak\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.8",
            "matchCriteriaId" : "4DD5F65B-785C-436C-9177-6C16E228C08D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102320",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040059",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/commit/?h=stretch-security&id=ad775f6ff7eebb93eedc2f592bc974260e7757b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-verifier-fix-states_equal-comparison-of-pointer-and-unknown.patch?h=stretch-security",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/commit/?h=stretch-security&id=ad775f6ff7eebb93eedc2f592bc974260e7757b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-verifier-fix-states_equal-comparison-of-pointer-and-unknown.patch?h=stretch-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.640",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "pdf/pdf-write.c en Artifex MuPDF en versiones anteriores a la 1.12.0 gestiona de manera incorrecta determinados cambios de longitud cuando tiene lugar una operación de reparación durante una operación de limpieza. Esto permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer y cierre inesperado de la aplicación) o, posiblemente, causen otros impactos mediante un documento PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12.0",
            "matchCriteriaId" : "742A4A62-B35B-4DB8-BFB0-868C97E3418C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ghostscript.com/cgi-bin/findgit.cgi?520cc26d18c9ee245b56e9e91f9d4fcae02be5f0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698699",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4334",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ghostscript.com/cgi-bin/findgit.cgi?520cc26d18c9ee245b56e9e91f9d4fcae02be5f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag."
      }, {
        "lang" : "es",
        "value" : "En Liferay Portal 6.1.0, la selección de etiquetas contiene CSS mediante un valor Public Render Parameter (p_r_p), tal y como lo demuestra p_r_p_564233524_tag."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB2CD12-1878-45DA-9B67-51BC1A369568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2017120169",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017120169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin mgl-instagram-gallery para WordPress contiene XSS mediante el parámetro multimedia single-gallery.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mgl-instagram-gallery_project:mgl-instagram-gallery:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C9798B1F-A8C4-48B3-806D-B3937E20DFC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2017120183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017120183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action."
      }, {
        "lang" : "es",
        "value" : "La extensión JBuildozer 1.4.1 para Joomla! incluye inyección SQL mediante el parámetro appid en una acción entriessearch."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbuildozer:jbuildozer:1.4.1:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "32DAFC84-C888-4873-BCB1-C791F687DD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43323/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43323/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.810",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"JEXTN Question And Answer\" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter."
      }, {
        "lang" : "es",
        "value" : "La extensión \"JEXTN Question And Answer\" 3.1.0 para Joomla! contiene inyección SQL mediante el parámetro an en una acción view=tags, o el parámetro ques-srch."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jextn:jextn_question_and_answer:3.1.0:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "9081EC1B-8684-4ED4-8445-A11DD8E8B0E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43329/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43329/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.857",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action."
      }, {
        "lang" : "es",
        "value" : "La extensión JEXTN Video Gallery 3.0.5 para Joomla! incluye inyección SQL mediante el parámetro id en una acción view=category."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jextn:jextn_video_gallery:3.0.5:*:*:*:*:joomla:*:*",
            "matchCriteriaId" : "F395F3D5-F9F7-4828-A73B-95D52232AFB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43330/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43330/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI."
      }, {
        "lang" : "es",
        "value" : "Vanguard Marketplace Digital Products PHP 1.4 incluye inyección SQL mediante el parámetro PATH_INFO en el URI /p."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanguard_project:marketplace_digital_products_php:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D299DFA0-69C6-4CED-B0BA-781C225ADFF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43316/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43316/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an \"Add a new product\" or \"Add a product preview\" action, which can make a .php file accessible under a uploads/ URI."
      }, {
        "lang" : "es",
        "value" : "Vanguard Marketplace Digital Products PHP 1.4 permite la subida de archivos arbitrarios mediante una acción \"Add a new product\" o \"Add a product preview\", lo que puede hacer que un archivo .php sea accesible bajo un URI uploads/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanguard_project:marketplace_digital_products_php:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D299DFA0-69C6-4CED-B0BA-781C225ADFF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43315/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43315/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:20.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action."
      }, {
        "lang" : "es",
        "value" : "La extensión JEXTN FAQ Pro 4.0.0 para Joomla! incluye inyección SQL mediante el parámetro id en una acción view=category."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jextn:jextn_faq_pro:4.0.0:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "81740254-C936-4E62-9E3E-FA12999A364B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43393/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43393/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.030",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System 3.0 permite que atacantes remotos omitan las restricciones de lectura de archivos planeadas mediante una petición user=download con un nombre de ruta en el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:shift:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14591B87-EFB0-46FF-A510-C1A137B93EB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43394/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43394/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.060",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la build 643 de Valve Steam Link. Cuando el demonio SSH está activado para desarrollo local, el dispositivo está disponible públicamente mediante el puerto 22 de TCP IPv6 en internet (con una autoconfiguración de dirección sin estado) por defecto. Esto facilita a los atacantes remotos obtener acceso adivinando 24 bits de la dirección MAC e intentando iniciar sesión como root. Esto se puede explotar junto con CVE-2017-17878."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:valvesoftware:steam_link_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "644",
            "matchCriteriaId" : "E520167E-6F54-473E-9839-C47814137C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:valvesoftware:steam_link:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAF46A5-190A-4578-8010-23DE5E75C898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk#ssh-access",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk/issues/119",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk#ssh-access",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk/issues/119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.140",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES (aka the CONFIG_FEATURE_DEFAULT_PASSWD_ALGO=\"des\" setting)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la build 643 de Valve Steam Link. Las contraseñas root que sobrepasen los 8 caracteres se truncan debido al uso de DES por defecto (también conocido como el ajuste CONFIG_F EATURE_DEFAULT_PASSWD_ALGO=\"des\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:valvesoftware:steam_link_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "644",
            "matchCriteriaId" : "E520167E-6F54-473E-9839-C47814137C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:valvesoftware:steam_link:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAF46A5-190A-4578-8010-23DE5E75C898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogger.davidmanouchehri.com/2017/12/steam-link-security-truncated-password.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk/issues/101",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk/issues/110",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blogger.davidmanouchehri.com/2017/12/steam-link-security-truncated-password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk/issues/101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ValveSoftware/steamlink-sdk/issues/110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, existe una sobrelectura de búfer basada en memoria dinámica (heap) en ReadOneMNGImage en coders/png.c. Esto está relacionado con el cálculo de longitud y causado por un error por un paso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102305",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/906",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.250",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, existe una sobrelectura de búfer basada en pila en WriteWEBPImage en coders/webp.c. Esto está relacionado con una comprobación WEBP_DECODER_ABI_VERSION."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/907",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen MAT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/878",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.327",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadXPMImage en coders/xpm.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen XPM manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/880",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadPGXImage en coders/pgx.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PGX manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/877",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.420",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-16 Q16 en la función WriteOnePNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PNG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/902",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadPICTImage en coders/pict.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PICT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/879",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadPSDChannelZip en coders/psd.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PSD manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/874",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-16 Q16 en la función GetImagePixelCache en magick/cache.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen MNG manipulado que es procesado por ReadOneMNGImage."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/903",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA, and ASCON DY WebServer devices, allows remote authenticated users to execute arbitrary OS commands via crafted multipart/form-data content, a different vulnerability than CVE-2017-9097."
      }, {
        "lang" : "es",
        "value" : "gi-bin/write.cgi en Anti-Web hasta la versión 3.8.7, como se utilizaba en dispositivos NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA y ASCON DY WebServer, permite que usuarios autenticados remotos ejecuten comandos arbitrarios de sistema operativo mediante contenidos tipo multipart/form-data manipulados. Esta vulnerabilidad es diferente de CVE-2017-9097."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.7",
            "matchCriteriaId" : "1E1A03EF-D59E-4045-9A1C-022BE576FA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoytech:antiweb:3.0.7:hms2:*:*:*:*:*:*",
            "matchCriteriaId" : "E69C56A5-2A87-45C8-BC6A-7663AC417BA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ezelf/AntiWeb_testing-Suite/tree/master/RCE",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seebug.org/vuldb/ssvid-96555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=HdkZA1DO08Y",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ezelf/AntiWeb_testing-Suite/tree/master/RCE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.seebug.org/vuldb/ssvid-96555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=HdkZA1DO08Y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.623",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Video Sharing Script has CSRF via user-profile-edit.php."
      }, {
        "lang" : "es",
        "value" : "Readymade Video Sharing Script contiene CSRF mediante user-profile-edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymade_video_sharing_script_project:readymade_video_sharing_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F6D40-69EB-4193-A891-23C60F9FC423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.670",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter."
      }, {
        "lang" : "es",
        "value" : "Readymade Video Sharing Script contiene inyección SQL mediante el parámetro chnlid en viewsubs.php o el parámetro search en search_video.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymade_video_sharing_script_project:readymade_video_sharing_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F6D40-69EB-4193-A891-23C60F9FC423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter."
      }, {
        "lang" : "es",
        "value" : "Readymade Video Sharing Script contiene XSS mediante el parámetro search en search_video.php, el parámetro chnlid en viewsubs.php o el parámetro fname en user-profile-edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readymade_video_sharing_script_project:readymade_video_sharing_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F6D40-69EB-4193-A891-23C60F9FC423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.750",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Job Site Script has CSRF via the /job URI."
      }, {
        "lang" : "es",
        "value" : "Readymade Job Site Script contiene CSRF mediante el URI /job."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_job_site_script_project:basic_job_site_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055E018E-D9CB-41CC-8219-0C991FC515F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI."
      }, {
        "lang" : "es",
        "value" : "Readymade Job Site Script contiene inyección SQL mediante el parámetro array location_name en el URI /job."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_job_site_script_project:basic_job_site_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055E018E-D9CB-41CC-8219-0C991FC515F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Readymade Job Site Script has XSS via the keyword parameter to the /job URI."
      }, {
        "lang" : "es",
        "value" : "Readymade Job Site Script contiene XSS mediante el parámetro keyword en el URI /job."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_job_site_script_project:basic_job_site_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055E018E-D9CB-41CC-8219-0C991FC515F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en comm/multiprix.php en Dolibarr ERP/CRM versión 6.0.4 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D63C77-0B7E-4C05-8775-09180DB394ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.937",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM versión 6.0.4 no bloquea peticiones directas en archivos *.tpl.php, lo que permite que atacantes remotos obtengan información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D63C77-0B7E-4C05-8775-09180DB394ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/6a62e139604dbbd5729e57df2433b37a5950c35c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/6a62e139604dbbd5729e57df2433b37a5950c35c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:21.983",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en adherents/subscription/info.php en Dolibarr ERP/CRM versión 6.0.4 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro rowid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D63C77-0B7E-4C05-8775-09180DB394ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.017",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en fourn/index.php en Dolibarr ERP/CRM versión 6.0.4 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro socid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D63C77-0B7E-4C05-8775-09180DB394ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.093",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel."
      }, {
        "lang" : "es",
        "value" : "FS Lynda Clone contiene CSRF mediante user/edit_profile, como se ha demostrado añadiendo contenido al panel de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortunescripts:lynda_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2F018-A66B-40E8-A254-5B35FD83C158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.123",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile."
      }, {
        "lang" : "es",
        "value" : "FS Lynda Clone contiene XSS mediante el parámetro keywords en tutorial/ o el parámetro edit_profile_first_name en user/edit_profile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortunescripts:lynda_clone:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2F018-A66B-40E8-A254-5B35FD83C158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.170",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Car Rental Script contiene CSRF mediante admin/sitesettings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:car_rental_script_project:car_rental_script:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C99B4AF-ABD0-49A1-A0DF-367D91DCAF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Car Rental Script contiene inyección SQL mediante el parámetro carid en admin/carlistedit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:car_rental_script_project:car_rental_script:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C99B4AF-ABD0-49A1-A0DF-367D91DCAF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.267",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Car Rental Script contiene XSS mediante el parámetro carid en admin/areaedit.php o el parámetro websitename en admin/sitesettings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:car_rental_script_project:car_rental_script:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C99B4AF-ABD0-49A1-A0DF-367D91DCAF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.310",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Responsive Realestate Script contiene CSRF mediante admin/general."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:responsive_realestate_script_project:responsive_realestate_script:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2100D444-C671-4C95-B33E-C5062E5317FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.357",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Responsive Realestate Script contiene XSS mediante el parámetro gplus en admin/general.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:responsive_realestate_script_project:responsive_realestate_script:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2100D444-C671-4C95-B33E-C5062E5317FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503."
      }, {
        "lang" : "es",
        "value" : "packages/core/contact.php en Archon 3.21 rev-1 contiene XSS en el parámetro referer en una petición index.php?p=core/contact. Esto también se conoce como Open Bug Bounty ID OBB-278503."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archon:archon:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1F0366-FA23-45EE-AF33-EF1FA0D074A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.openbugbounty.org/reports/278503/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openbugbounty.org/reports/278503/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.4 snapshot-20171217 Q8, existe una sobrelectura de búfer basada en memoria dinámica (heap) en ReadNewsProfile en coders/tiff.c, donde LocaleNCompare lee datos de la memoria dinámica más allá de la región asignada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80787A12-691F-421F-94D5-4B130FC98A96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/0d871e813a4f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/533/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/0d871e813a4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/533/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.4 snapshot-20171217 Q8, existe una sobrelectura de búfer basada en pila en WriteWEBPImage en coders/webp.c. Esto está relacionado con una incompatibilidad con las versiones 0.5.0 y posteriores de libwebp, que emplean un tipo de estructura diferente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80787A12-691F-421F-94D5-4B130FC98A96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/6dda3c33f35f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/536/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/6dda3c33f35f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/536/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.530",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en ImageMagick 7.0.7-16 Q16 en la función ReadOnePNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (bucle ReadOneMNGImage de gran tamaño) mediante un archivo de imagen mng manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/908",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.577",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached."
      }, {
        "lang" : "es",
        "value" : "En GraphicsMagick 1.4 snapshot-20171217 Q8, existe una sobrelectura de búfer basada en memoria dinámica (heap) en ReadMNGImage en coders/png.c. Esto está relacionado con el acceso a un byte antes de probar si se ha alcanzado un límite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80787A12-691F-421F-94D5-4B130FC98A96"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/1721f1b7e67a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/535/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/1721f1b7e67a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/535/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.607",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script permite que atacantes remotos obtengan información sensible de ruta completa mediante el parámetro id en admin/review_userwise.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script contiene XSS mediante el parámetro website_title en admin/general_settingupd.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.687",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script contiene una URL de registro predecible que facilita a los atacantes remotos el registro con una dirección de correo electrónico suplantada o no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.717",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script permite que atacantes remotos obtengan información sensible de ruta completa mediante un parámetro PATH-INFO manipulado en service-list/category/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.767",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script contiene inyección SQL mediante el parámetro id en admin/review.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.797",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script contiene XSS mediante el parámetro view en admin/bannerview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.843",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Professional Service Script contiene CSRF mediante admin/general_settingupd.php, como se ha demostrado mediante la modificación de un ajuste en el panel de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A744B011-A180-4350-8E57-9EC9A85B5AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.890",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Resume Clone Script contiene inyección SQL mediante el parámetro username en forget.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resume_clone_script_project:resume_clone_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D8EC16-A532-4EAC-877F-86ABAC4DE456"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Resume%20Clone%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Resume%20Clone%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.920",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-17 Q16 x86_64 tiene filtrados de memoria en coders/msl.c. Esto está relacionado con MSLPopImage y ProcessMSLScript, y se asocia a una mala gestión de llamadas MSLPushImage."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD42E2C-FF78-4128-8B42-A8C201472823"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102314",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/920",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:08:22.953",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line."
      }, {
        "lang" : "es",
        "value" : "La función File_read_line en epan/wslua/wslua_file.c en Wireshark hasta la versión 2.2.11 no elimina correctamente caracteres \"\\n\", lo que permite que atacantes remotos provoquen una denegación de servicio (subdesbordamiento de búfer y cierre inesperado de la aplicación) mediante un paquete manipulado que da lugar al intento de procesamiento de una línea vacía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.11",
            "matchCriteriaId" : "811B37E3-6A76-462A-B61C-E532F6C958B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102311",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14295",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/24997/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=137ab7d5681486c6d6cc8faac4300b7cd4ec0cf1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/24997/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=137ab7d5681486c6d6cc8faac4300b7cd4ec0cf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7152",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.157",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the \"Mail Message Framework\" component. It allows remote attackers to spoof the address bar via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. El problema afecta al componente \"Mail Message Framework\". Permite que atacantes remotos suplanten la barra de direcciones mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/49",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/54",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/56",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT210721",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/kb/HT210722",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/kb/HT210724",
        "source" : "product-security@apple.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT210721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT210722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT210724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7154",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.203",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the \"Kernel\" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (system crash)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2 y las versiones de tvOS anteriores a la 11.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que usuarios locales omitan las restricciones de lectura de memoria planeadas o provoquen una denegación de servicio (cierre inesperado del sistema)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 5.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103134",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43521/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43521/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7155",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.233",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7156",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.280",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7157",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7158",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.407",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Screen Sharing Server\" component. It allows attackers to obtain root privileges for reading files by leveraging screen-sharing access."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Screen Sharing Server\". Este problema permite que los atacantes obtengan privilegios root para leer archivos aprovechando el acceso de pantalla compartida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7159",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.453",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"IOAcceleratorFamily\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"IOAcceleratorFamily\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7160",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.500",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119EBD6-A1CC-4121-BADD-555437E911FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7162",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.547",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"IOKit\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"IOKit\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7163",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2017-12-27T17:08:24.593",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Intel Graphics Driver\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.2. El problema afecta al componente \"Intel Graphics Driver\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9944",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2017-12-27T17:08:25.000",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en el gestor de datos (7KT1260) 7KT PAC1200 de Siemens, en todas las versiones anteriores a la V2.03. El servidor web integrado (puerto 80/tcp) de los dispositivos afectados podría permitir que un atacante remoto no autenticado realice operaciones administrativas a través de la red."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:7kt_pac1200_data_manager_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.03",
            "matchCriteriaId" : "C248B6B6-0C07-40ED-882B-CC07F3FC03C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:7kt_pac1200_data_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069F6E95-B8DD-4727-B89E-613A8BBF21B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101184",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T17:29:00.277",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "La función launchURL en PDF-XChange Viewer 2.5 (Build 314.0) podría permitir que atacantes remotos ejecuten código arbitrario mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tracker-software:pdf-xchange_viewer:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B10625F-4F1D-4C00-AC17-ECBD4A6DEB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143912/PDF-XChange-Viewer-2.5-Build-314.0-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/143912/PDF-XChange-Viewer-2.5-Build-314.0-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16768",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-27T17:29:00.323",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en el editor de políticas de usuario, User Policy, en Synology MailPlus Server, en versiones anteriores a la 1.4.0-0415 permite que usuarios autenticados remotos inyecten código HTML arbitrario mediante el parámetro name."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:mailplus_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0-0415",
            "matchCriteriaId" : "D85384E1-7397-4D4B-8217-75741E077975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_81",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T19:29:00.503",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en la función alloc_segs en lib/dbm/src/hash.c en Mozilla Network Security Services (NSS) permite que atacantes dependientes del contexto provoquen un impacto no especificado empleando un archivo cert8.db manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF36FE92-B3FB-4ABB-82C4-E18CF98D1A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T19:29:00.567",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en la función __hash_open en lib/dbm/src/hash.c en Mozilla Network Security Services (NSS) permite que atacantes dependientes del contexto provoquen un impacto no especificado empleando un archivo cert8.db manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF36FE92-B3FB-4ABB-82C4-E18CF98D1A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T19:29:00.613",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file."
      }, {
        "lang" : "es",
        "value" : "La función __hash_open en hash.c:229 en Mozilla Network Security Services (NSS) permite que atacantes dependientes del contexto provoquen una denegación de servicio (excepción de punto flotante y cierre inesperado) mediante un archivo cert8.db manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF36FE92-B3FB-4ABB-82C4-E18CF98D1A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T19:29:00.660",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en la función __get_page en lib/dbm/src/h_page.c en Mozilla Network Security Services (NSS) permite que atacantes dependientes del contexto provoquen un impacto no especificado empleando un archivo cert8.db manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF36FE92-B3FB-4ABB-82C4-E18CF98D1A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Aug/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeknik.net/9brdqk6xu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-27T19:29:00.723",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file."
      }, {
        "lang" : "es",
        "value" : "El decodificador dnxhd en FFmpeg, en versiones anteriores a la 3.2.6 y versiones 3.3.x anteriores a la 3.3.3, permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante un archivo mov manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.6",
            "matchCriteriaId" : "79E6BF1B-8118-4FE5-A59D-A44F74222822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "BE5FCA41-BE51-4901-B83E-CC9717EC3560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/14/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100348",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/0a709e2a10b8288a0cc383547924ecfe285cef89",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/31c1c0b46a7021802c3d1d18039fca30dba5a14e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/611b35627488a8d0763e75c25ee0875c5b7987dd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3957",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/08/15/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/0a709e2a10b8288a0cc383547924ecfe285cef89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/31c1c0b46a7021802c3d1d18039fca30dba5a14e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FFmpeg/FFmpeg/commit/611b35627488a8d0763e75c25ee0875c5b7987dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10910",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2017-12-28T02:29:03.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "En MQTT.js en versiones 2.x.x anteriores a la 2.15.0 existe un problema en el manejo de tickets PUBLISH que puede dar lugar a que un atacante provoque una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mqtt.js_project:mqtt.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.15.0",
            "matchCriteriaId" : "E8A5F4E8-D3B1-4F28-A0BB-74EC1F975F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mqttjs/MQTT.js/commit/403ba53b838f2d319a0c0505a045fe00239e9923",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mqttjs/MQTT.js/releases/tag/v2.15.0",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45494523/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mqttjs/MQTT.js/commit/403ba53b838f2d319a0c0505a045fe00239e9923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mqttjs/MQTT.js/releases/tag/v2.15.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45494523/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer en MediaServer.exe en ALLPlayer ALLMediaServer, versiones 0.95 y anteriores, que podría permitir que atacantes remotos ejecuten código arbitrario y/o provoquen una denegación de servicio (DoS) en la máquina/ordenador de la víctima mediante una cadena de gran tamaño en el puerto TCP 888."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allmediaserver:allmediaserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95",
            "matchCriteriaId" : "C2146DA0-FA8E-403C-8A20-498298FA15F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43406/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43407/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43523/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43406/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43407/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43523/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.253",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vanguard Marketplace Digital Products PHP has CSRF via /search."
      }, {
        "lang" : "es",
        "value" : "Vanguard Marketplace Digital Products PHP contiene CSRF mediante /search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanguard_project:marketplace_digital_products_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "659AE1D3-DF99-4D11-9357-9D543EDFF1B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.300",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search."
      }, {
        "lang" : "es",
        "value" : "Vanguard Marketplace Digital Products PHP contiene XSS mediante el parámetro phps_query en /search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanguard_project:marketplace_digital_products_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "659AE1D3-DF99-4D11-9357-9D543EDFF1B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.347",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Single Theater Booking contiene XSS mediante el parámetro theatreid en admin/viewtheatre.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:single_theater_booking_script_project:single_theater_booking_script:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05323A5-1952-4404-92C0-5F24F9734A5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.380",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Single Theater Booking contiene CSRF mediante admin/sitesettings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:single_theater_booking_script_project:single_theater_booking_script:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05323A5-1952-4404-92C0-5F24F9734A5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.440",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Single Theater Booking contiene XSS mediante el parámetro title en admin/sitesettings.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:single_theater_booking_script_project:single_theater_booking_script:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05323A5-1952-4404-92C0-5F24F9734A5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.487",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Single Theater Booking contiene inyección SQL mediante el parámetro movieid en admin/movieview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:single_theater_booking_script_project:single_theater_booking_script:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05323A5-1952-4404-92C0-5F24F9734A5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T06:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.9, hay una sobrelectura de búfer basada en memoria dinámica (heap) en la función PackBitsEncode en tif_packbits.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27374BA0-7A61-4BDC-9F92-C09E99A9AB81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102312",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15711",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-28T14:29:00.183",
      "lastModified" : "2023-11-07T02:40:22.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15886",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-28T15:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Server-Side Request Forgery (SSRF) en Link Preview en Synology Chat en versiones anteriores a la 2.0.0-1124 permite que usuarios remotos autenticados descarguen archivos locales arbitrarios mediante un URI manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0-1124",
            "matchCriteriaId" : "43BB93DC-2D6F-4D53-95C6-E64D8EF2068D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_78",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15892",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2017-12-28T15:29:00.257",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de Cross-Site Scripting (XSS) en Slash Command Creator en Synology Chat, en versiones anteriores a la 2.0.0-1124 permiten que usuarios remotos autenticados inyecten scripts web o HTML arbitrarios mediante los parámetros (1) COMMAND, (2) COMMANDS INSTRUCTION o (3) DESCRIPTION."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0-1124",
            "matchCriteriaId" : "43BB93DC-2D6F-4D53-95C6-E64D8EF2068D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_78",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5641",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2017-12-28T15:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution."
      }, {
        "lang" : "es",
        "value" : "Versiones previas de Apache Flex BlazeDS (4.7.2 y anteriores) no restringían qué tipos se permitían para la deserialización de objetos AMF(X) por defecto. Durante el proceso de deserialización, se ejecutaba código que tenía efectos colaterales no deseados para numerosos tipos conocidos. Otros tipos no conocidos también podían mostrar comportamientos similares. Existe un vector en la biblioteca estándar de Java que puede permitir que un atacante realice otras deserializaciones explotables de datos no fiables en Java. Se pueden emplear otros vectores conocidos en bibliotecas de terceros para realizar una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:flex_blazeds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.2",
            "matchCriteriaId" : "8D00416D-BE10-4E35-B639-451DF4ABD824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:xp_command_view_advanced_edition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.3-00",
            "matchCriteriaId" : "FF246B0D-2E4C-4B1E-9BCC-1BAC0AC58AFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/flex-dev/201703.mbox/%3C6B86C8D0-6E36-48F5-AC81-4AB3978F6746%40c-ware.de%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97383",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038273",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/FLEX-35290",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03823en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-22-506/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-22-507/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/flex-dev/201703.mbox/%3C6B86C8D0-6E36-48F5-AC81-4AB3978F6746%40c-ware.de%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/FLEX-35290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03823en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-22-506/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-22-507/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T17:29:00.207",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9221."
      }, {
        "lang" : "es",
        "value" : "En Flexense SysGauge Server 3.6.18, el protocolo de control (Control Protocol) sufre denegación de servicio (DoS). El vector de ataque es un paquete SERVER_GET_INFO manipulado enviado al puerto de control 9221."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:sysgauge:3.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD90437-0D41-426F-AC8C-90D66882B845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43403/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43403/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request."
      }, {
        "lang" : "es",
        "value" : "Cells Blog 3.5 contiene XSS mediante el parámetro jfdname en una petición act=showpic."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cells:blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B227C5A-882E-4CB0-9029-5F02671C28A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.260",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter."
      }, {
        "lang" : "es",
        "value" : "Cells Blog 3.5 contiene XSS mediante el parámetro fmid en pub_readpost.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cells:blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B227C5A-882E-4CB0-9029-5F02671C28A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.290",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter."
      }, {
        "lang" : "es",
        "value" : "Cells Blog 3.5 contiene inyección SQL mediante el parámetro ptid en pub_readpost.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cells:blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B227C5A-882E-4CB0-9029-5F02671C28A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene inyección SQL mediante el parámetro cusid en shopping-cart.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.370",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene una URL de registro predecible que facilita a los atacantes remotos el registro con una dirección de correo electrónico suplantada o no válida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.417",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene XSS mediante el parámetro chid1 en category.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.463",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene XSS mediante el parámetro usid en seller-view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.493",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene XSS mediante el parámetro cusid en shopping-cart.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.540",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene XSS mediante el parámetro companyname en admin/sellerupd.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.573",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene inyección SQL mediante el parámetro fid en my_wishlist.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.620",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene XSS mediante el parámetro fid en my_wishlist.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.667",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene inyección SQL mediante el parámetro usid en seller-view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T18:29:00.713",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall PHP Multivendor Ecommerce contiene CSRF mediante admin/sellerupd.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_multivendor_ecommerce_project:php_multivendor_ecommerce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A154B6C-FEDF-4569-8498-54F2158B2679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-28T19:29:00.210",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482."
      }, {
        "lang" : "es",
        "value" : "Pptreader.dll en Kingsoft WPS Office 10.1.0.6930 permite que atacantes remotos provoquen una denegación de servicio (DoS) mediante un archivo PPT manipulado. Esto también se conoce como CNVD-2017-35482."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ksosoft:wps_office:10.1.0.6930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F413E4-4D9B-4C87-828B-D3F5749BE57F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cnvd.org.cn/flaw/show/1169328",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cnvd.org.cn/flaw/show/1169328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T15:29:00.610",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the \"key\" argument."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en la función _keyify en mistune.py en Mistune en versiones anteriores a la 0.8.1 permite que atacantes remotos inyecten scripts web o HTML aprovechando el error a la hora de escapar el argumento \"key\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mistune_project:mistune:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.1",
            "matchCriteriaId" : "F6FBDFBB-71EA-4E0D-B014-CABC98A1FEDC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524596",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/lepture/mistune/blob/master/CHANGES.rst",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lepture/mistune/commit/5f06d724bc05580e7f203db2d4a4905fc1127f98",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NUR3GMHQBMA3UC4PFMCK6GCLOQC4LQQC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/lepture/mistune/blob/master/CHANGES.rst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lepture/mistune/commit/5f06d724bc05580e7f203db2d4a4905fc1127f98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NUR3GMHQBMA3UC4PFMCK6GCLOQC4LQQC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T15:29:00.657",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en NetTransport.exe en NetTransport Download Manager 2.96L y anteriores podría permitir que los servidores HTTP remotos ejecuten código arbitrario en dispositivos NAS mediante una respuesta HTTP larga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xi-soft:nettransport_download_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.96l",
            "matchCriteriaId" : "4E4A84DF-6D93-4526-8A61-C6C1C087E014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43408/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43408/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T16:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA** Vulnerabilidad de inyección SQL en el método \"find_by\" en Ruby on Rails 5.1.4 y anteriores permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"name\". NOTA: El fabricante rechaza este problema porque la documentación indica que este método no está destinado a utilizarse con datos de entrada no fiables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.4",
            "matchCriteriaId" : "7808D558-05FB-404B-8E69-40EFE66BC057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T16:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Vulnerabilidad de inyección SQL en el método \"where\" en Ruby on Rails 5.1.4 y anteriores permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"id\". NOTA: El proveedor defiende que la documentación indica que este método no está diseñado para ser utilizado con datos no confiables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.4",
            "matchCriteriaId" : "7808D558-05FB-404B-8E69-40EFE66BC057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T16:29:00.297",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA** Vulnerabilidad de inyección SQL en el método \"order\" en Ruby on Rails 5.1.4 y anteriores permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"id desc\". NOTA: El fabricante rechaza este problema porque la documentación indica que este método no esta destinado a utilizarse con datos de entrada no fiables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.4",
            "matchCriteriaId" : "F46C1792-F008-4AF6-A46D-1E2B262EC13F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T16:29:00.343",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La vulnerabilidad de inyección SQL en el método 'reorder' de Ruby on Rails 5.1.4 y anteriores permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro 'name'. NOTA: El proveedor no está de acuerdo con este punto porque la documentación indica que este método no está diseñado para ser utilizado con datos no confiables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.4",
            "matchCriteriaId" : "F46C1792-F008-4AF6-A46D-1E2B262EC13F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kay-malwarebenchmark.github.io/blog/ruby-on-rails-arbitrary-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T18:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used."
      }, {
        "lang" : "es",
        "value" : "OpenCV 3.3.1 tiene un desbordamiento de búfer en la función cv::PxMDecoder::readData en grfmt_pxm.cpp, debido a que se emplea un valor de tamaño incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B46F4619-7303-4FFB-A818-16233657A129"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/10351",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/pull/10369/commits/7bbe1a53cfc097b82b1589f7915a2120de39274c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/10351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/pull/10369/commits/7bbe1a53cfc097b82b1589f7915a2120de39274c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T18:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter."
      }, {
        "lang" : "es",
        "value" : "cgi/surgeftpmgr.cgi (también conocido como la interfaz de gestión web en los puertos TCP 7021 o 9021) en NetWin SurgeFTP versión 23f2 tiene XSS mediante los parámetros classid, domainid o username."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:surgeftp:23f2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A50B40A-FD4D-4B24-95EA-15BB523F7F52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145572/NetWin-SurgeFTP-23f2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145572/NetWin-SurgeFTP-23f2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T18:29:00.553",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS."
      }, {
        "lang" : "es",
        "value" : "La función test_sql_and_script_inject en htdocs/main.inc.php en Dolibarr ERP/CRM 6.0.4 bloquea algunos atributos de evento, pero no bloquea onclick ni onscroll. Esto permite Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D63C77-0B7E-4C05-8775-09180DB394ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/issues/8000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/issues/8000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T19:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The interception of the one-time pairing process is specifically not required. Due to use of AES-128 with an initial static random value and static data vector (all of this static information is the same across different customers' installations), the attacker can easily derive the utilized encryption key and decrypt the intercepted packet. The key can be verified by decrypting the intercepted packet and checking for known plaintext. Subsequently, an attacker can create arbitrary radio frames with the correct encryption key to control BiSecur garage and entrance gate operators and possibly other BiSecur systems as well (\"wireless cloning\"). To conduct the attack, a low cost Software Defined Radio (SDR) is sufficient. This affects Hoermann Hand Transmitter HS5-868-BS, HSE1-868-BS, and HSE2-868-BS devices."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Hoermann BiSecur anteriores a 2018, se puede explotar una vulnerabilidad grabando una única transmisión de radio. Un atacante puede interceptar una trama de radio arbitrario intercambiado entre un transmisor BiSecur y un recibidor para obtener el paquete cifrado y el número de serie de 32 bits. No se requiere específicamente que se intercepte el proceso de emparejamiento por única vez. Debido al uso de AES-128 con un valor inicial estático aleatorio y un vector de datos estático (toda esta información estática es la misma en las instalaciones de diferentes clientes), el atacante puede derivar fácilmente la clave de cifrado empleada y descifrar el paquete interceptado. La clave puede ser verificada mediante el descifrado del paquete interceptado y buscando texto plano conocido. Posteriormente, un atacante puede crear tramas de radio arbitrarios con la clave de cifrado correcta para controlar los operadores de garaje y puerta de entrada de BiSecur y, posiblemente, también otros sistemas BiSecur (\"clonado inalámbrico\"). Para llevar a cabo el ataque, es suficiente con un SDR (Software Defined Radio) de bajo coste. Esto afecta a los dispositivos Hoermann Hand Transmitter HS5-868-BS, HSE1-868-BS y HSE2-868-BS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hoermann:hs5-868-bs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE0922C-0F62-48C9-8734-DE25CACD3FAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hoermann:hs5-868-bs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59215ABD-F0FE-4237-9513-DB3F44AAAA89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hoermann:hse2-868-bs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B4FA76-297B-43A6-AC1B-9DFFFD8BF216"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hoermann:hse2-868-bs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B366C77A-2C10-44BF-BD30-9A2BE88207B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hoermann:hse1-868-bs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD07F87-C943-496F-B404-1A5F399CBC4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hoermann:hse1-868-bs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C930EACE-548B-418B-B638-571F28E53E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.wixstatic.com/ugd/28ba71_6ecc3158975a484d827e935edda4fa17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustworks.at/publications",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.wixstatic.com/ugd/28ba71_6ecc3158975a484d827e935edda4fa17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustworks.at/publications",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T21:29:00.190",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** En LibTIFF 4.0.8, hay un uso de memoria dinámica (heap) previamente liberada en la función t2p_writeproc en tiff2pdf.c. NOTA: hay un informe de terceros que establece que es imposible reproducir este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102331",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1074318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1530912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=1074318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1530912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T21:29:00.237",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account."
      }, {
        "lang" : "es",
        "value" : "BA SYSTEMS BAS Web en dispositivos BAS920 (con Firmware 01.01.00*, HTTPserv 00002 y Script 02.*) y ISC2000 permite que atacantes remotos obtengan información sensible mediante una petición a isc/get_sid_js.aspx o isc/get_sid.aspx, tal y como se demuestra obteniendo acceso administrativo empleando ulteriormente la información de credenciales para la cuenta Supervisor/Administrator."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:basystems:bas920_firmware:01.01.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01041B98-330D-47BE-8D6C-938A3507E6DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:basystems:bas920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ADFDDE-374C-4A3C-AC31-61A73E24AF66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:basystems:isc2000_firmware:01.01.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BBF686-8368-4571-9EBB-866B0A3AD3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:basystems:isc2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D54BD94-6B60-426F-A48A-215C6043326C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://misteralfa-hack.blogspot.cl/2017/12/ba-system-improper-access-control.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ezelf/baCK_system",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://misteralfa-hack.blogspot.cl/2017/12/ba-system-improper-access-control.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ezelf/baCK_system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-29T22:29:00.677",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets with a TTL of 1."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ZyXEL P-660HW v3 permite que atacantes remotos provoquen una denegación de servicio (consumo de CPU) mediante una inundación de paquetes IP con un TTL de 1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p-660hw_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F42D6B-308D-4C89-90C4-8A344CD6B5E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p-660hw:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D860BDA-9792-4D21-A9D5-5097F8F223E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145548/ZyXEL-P-660HW-TTL-Expiry-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zyxel.com/support/announcement_denial_of_service.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/145548/ZyXEL-P-660HW-TTL-Expiry-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zyxel.com/support/announcement_denial_of_service.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T01:29:00.877",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and free this data structure."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria previamente liberada en la función usbtv_probe en drivers/media/usb/usbtv/usbtv-core.c en el kernel de Linux hasta la versión 4.14.10 permite que atacantes provoquen una denegación de servicio (cierre inesperado del sistema) o, posiblemente, causen otro tipo de impacto sin especificar desencadenando un error de registro de audio. Esto se debe a que un kfree de la estructura de datos usbtv ocurre durante una llamada usbtv_video_free, pero el código de la etiqueta usbtv_video_fail intenta acceder y liberar esta estructura de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14.10",
            "matchCriteriaId" : "4110B01F-9664-4CAA-8C2B-F5EECA7365FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linuxtesting.org/pipermail/ldv-project/2017-November/001008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3654-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3654-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3656-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linuxtesting.org/pipermail/ldv-project/2017-November/001008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3654-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3654-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3656-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene XSS mediante el parámetro edit_id en admin/slider_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.227",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene CSRF mediante admin/subadmin_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.273",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene inyección SQL mediante el parámetro mem_id en view-profile.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.303",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene XSS mediante el parámetro edit_id en admin/event_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.337",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene XSS mediante el parámetro cou_id en admin/state_view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene XSS mediante el parámetro comm_id en admin/caste_view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.427",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script permite la subida de archivos arbitrarios mediante admin/mydetails_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.507",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter."
      }, {
        "lang" : "es",
        "value" : "PHP Scripts Mall Muslim Matrimonial Script tiene XSS mediante el parámetro event_title en admin/event_add.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muslim_matrimonial_script_project:muslim_matrimonial_script:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F522E8E-AC20-4CBF-93B6-B25DC6B2CBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System tiene XSS mediante el parámetro holiday_name en index.php en una acción edit_holiday."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.587",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System tiene CSRF mediante index.php en una acción edit_holiday."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.617",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System tiene XSS mediante el parámetro expense_name en una petición index.php?user=expenses."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.663",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System permite la descarga de archivos arbitrarios mediante secuencias de salto de directorio en el parámetro form_file_name en index.php en una acción download_form."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.693",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System tiene XSS mediante el parámetro amount en una petición index.php?user=addition_deduction."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.740",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System tiene XSS mediante el parámetro criteria en una petición index.php?user=competency_criteria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T04:29:00.773",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request."
      }, {
        "lang" : "es",
        "value" : "Biometric Shift Employee Management System tiene XSS mediante el parámetro Last_Name en una petición index.php?user=ajax."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB10C02-4197-4C22-B037-AA7E09CF82C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.210",
      "lastModified" : "2023-11-07T02:37:57.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-16227. Reason: This candidate is a reservation duplicate of CVE-2017-16227. Notes: All CVE users should reference CVE-2017-16227 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.240",
      "lastModified" : "2023-11-07T02:37:57.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14975. Reason: This candidate is a reservation duplicate of CVE-2017-14975. Notes: All CVE users should reference CVE-2017-14975 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.273",
      "lastModified" : "2023-11-07T02:37:57.183",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14976. Reason: This candidate is a reservation duplicate of CVE-2017-14976. Notes: All CVE users should reference CVE-2017-14976 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.320",
      "lastModified" : "2023-11-07T02:37:57.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-15954. Reason: This candidate is a reservation duplicate of CVE-2017-15954. Notes: All CVE users should reference CVE-2017-15954 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.350",
      "lastModified" : "2023-11-07T02:37:57.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-15955. Reason: This candidate is a reservation duplicate of CVE-2017-15955. Notes: All CVE users should reference CVE-2017-15955 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.383",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel."
      }, {
        "lang" : "es",
        "value" : "PHP Newsletter Script 4.2 de PHP Jabbers tiene una vulnerabilidad de Cross Site Scripting (XSS) persistente en las listas del panel de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stivasoft:phpjabbers_newsletter_script:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D956856E-2F1A-47B9-8269-0D2A1733C098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/raw/QYxSkH1g",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/raw/QYxSkH1g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.430",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item."
      }, {
        "lang" : "es",
        "value" : "Star Rating Script 4.0 de PHPJabbers tiene una vulnerabilidad de Cross Site Scripting (XSS) persistente mediante un elemento rating."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stivasoft:phpjabbers_star_rating_script:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23FE2E3-82C6-4615-A6E3-886E4568ECE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/raw/G1gyUSSa",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/raw/G1gyUSSa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.460",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab."
      }, {
        "lang" : "es",
        "value" : "Night Club Booking Software de PHP Jabbers tiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente en el parámetro name en la pestaña de reservas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stivasoft:phpjabbers_night_club_booking_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DE864-26EA-4394-9A60-E7671335D9F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/raw/ysWZsJHH",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/raw/ysWZsJHH",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.490",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section."
      }, {
        "lang" : "es",
        "value" : "File Sharing Script 1.0 de PHP Jabbers tiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la sección de comentarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stivasoft:phpjabbers_file_sharing_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED77DC3-F94F-4A4E-84C2-340608DA602A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/raw/LTZFaL5x",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/raw/LTZFaL5x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T07:29:00.537",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343."
      }, {
        "lang" : "es",
        "value" : "En Wireshark, en versiones anteriores a la 2.2.12, el disector MRDISC emplea de forma incorrecta un puntero NULL y se cierra inesperadamente. Esto se trató en epan/dissectors/packet-mrdisc.c validando la longitud de una dirección IPv4. Esta vulnerabilidad es similar a CVE-2017-9343."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.11",
            "matchCriteriaId" : "811B37E3-6A76-462A-B61C-E532F6C958B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14299",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/25063/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=80a695869c9aef2fb473d9361da068022be7cb50",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2018-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/#/c/25063/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=80a695869c9aef2fb473d9361da068022be7cb50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2018-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T17:29:00.217",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42."
      }, {
        "lang" : "es",
        "value" : "Los paneles HMI de Red Lion permiten que los atacantes remotos provoquen una denegación de servicio (excepción de software) mediante una petición HTTP POST a un URI largo que no existe, tal y como se demuestra en la versión HMI 2.41 PLC 2.42."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redlion:hmi_panel_firmware:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE68EA8-54CF-4DB6-B03B-F1DD44C62DFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:redlion:hmi_panel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81335E6-7374-44A0-9641-BC0C9A45D722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-30T17:29:00.263",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality."
      }, {
        "lang" : "es",
        "value" : "custom/run.cgi en Webmin en versiones anteriores a la 1.870 permite que los administradores autenticados remotos realicen ataques de Cross-Site Scripting (XSS) mediante el campo description en la funcionalidad de comando personalizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.860",
            "matchCriteriaId" : "EC6BA8D6-7E87-4C91-97C3-094D30EF55F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102339",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/a9c97eea6c268fb83d93a817d58bac75e0d2599e",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/webmin/webmin/commit/a9c97eea6c268fb83d93a817d58bac75e0d2599e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-31T02:29:01.550",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode and restarts with the fixed IV, leading to replay attacks of entire messages. There is no authentication of messages beyond the use of the fixed AES key, so message forgery is also possible."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbloqueo de puertas en dispositivos Software House iStar Ultra hasta la versión 6.5.2.20569 cuando se usan en conjunto con IP-ACM Ethernet Door Module. Las comunicaciones entre el IP-ACM y el iStar Ultra se cifran empleando una clave AES fija e IV. Cada mensaje se cifra en modo CBC y reinicia con el IV fijo, lo que conduce a ataques de reproducción de mensajes completos. No hay autenticación de mensajes más allá del uso de la clave AES fija, por lo que también es posible falsificar mensajes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:swhouse:istar_ultra_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.2.20569",
            "matchCriteriaId" : "C002C3CB-08E5-462B-A1AF-9F6D1EAFF13B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:swhouse:istar_ultra:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFA68B8-C638-46B7-AE97-661D45712B76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-31T19:29:00.193",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI."
      }, {
        "lang" : "es",
        "value" : "Trustwave Secure Web Gateway (SWG) hasta la versión 11.8.0.27 permite que los atacantes remotos anexen una clave pública arbitraria a los datos de claves SSH autorizadas del dispositivo y obtener acceso root remoto en consecuencia mediante el parámetro publicKey al URI /sendKey."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustwave:secure_web_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.8.0.27",
            "matchCriteriaId" : "286831E9-2623-4FFF-851F-E3EC8C9AB596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3550",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44047/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44047/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-31T19:29:00.240",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint."
      }, {
        "lang" : "es",
        "value" : "Zurmo 3.2.3 permite Cross Site Scripting (XSS) mediante los parámetros latitude o longitude en maps/default/mapAndPoint."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zurmo:zurmo_crm:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA03CFF8-A46F-4FD4-AE87-9ACDB3C420B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/436/to-report-a-xss-security-vulnerability-in",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/zurmo/zurmo/issues/436/to-report-a-xss-security-vulnerability-in",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2017-12-31T19:29:00.287",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file."
      }, {
        "lang" : "es",
        "value" : "Exiv2 0.26 tiene una desreferencia de puntero NULL en la función Exiv2::DataValue::toLong en value.cpp. Esto está relacionado con metadatos manipulados en un archivo TIFF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/issues/168",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T00:29:00.213",
      "lastModified" : "2025-04-20T01:37:25.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447."
      }, {
        "lang" : "es",
        "value" : "netpub/server.np en Extensis Portfolio NetPublish tiene Cross Site Scripting (XSS) en el parámetro quickfind. Esta vulnerabilidad también se conoce como Open Bug Bounty ID OBB-290447."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extensis:portfolio_netpublish:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3FABAC-0BE8-4943-A1BB-C6E674BE0619"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.openbugbounty.org/reports/290447/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.cvedetails.com/cve/CVE-2017-18006/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.security-database.com/detail.php?alert=CVE-2017-18006",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openbugbounty.org/reports/290447/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T08:29:00.207",
      "lastModified" : "2024-11-21T03:19:08.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-17 Q16 tiene una fuga de memoria en ReadPWPImage en coders/pwp.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD42E2C-FF78-4128-8B42-A8C201472823"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102346",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/921",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T08:29:00.283",
      "lastModified" : "2024-11-21T03:19:09.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp."
      }, {
        "lang" : "es",
        "value" : "En OpenCV 3.3.1, una sobrelectura de búfer basada en memoria dinámica (heap) existe en la función cv::HdrDecoder::checkSignature en modules/imgcodecs/src/grfmt_hdr.cpp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B46F4619-7303-4FFB-A818-16233657A129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106945",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/10479",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/10479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T08:29:00.330",
      "lastModified" : "2024-11-21T03:19:09.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Smart Marketing SMS and Newsletters Forms en versiones anteriores a la 2.0.0 de E-goi para WordPress tiene Cross Site Scripting (XSS) mediante el parámetro url en admin/partials/custom/egoi-for-wp-form_egoi.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-goi:smart_marketing_sms_and_newsletters_forms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E410B0D7-9EE0-495F-ACC0-C324B0B97B33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/smart-marketing-for-wp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8974",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/smart-marketing-for-wp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T08:29:00.377",
      "lastModified" : "2024-11-21T03:19:09.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php border_color parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Affiliate Ads for Clickbank Products hasta la versión 1.6 de MyCBGenie para WordPress tiene Cross Site Scripting (XSS) mediante el parámetro border_color en text_ads_ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clickbank:affiliate_ads_for_clickbank_products:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "96D357D8-9AEC-4982-A0E2-F775719E9932"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/144978/WordPress-Affiliate-Ads-For-Clickbank-Products-1.3-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/support/topic/affiliate-ads-for-clickbank-products-1-3-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8989",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144978/WordPress-Affiliate-Ads-For-Clickbank-Products-1.3-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/support/topic/affiliate-ads-for-clickbank-products-1-3-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T08:29:00.423",
      "lastModified" : "2024-11-21T03:19:09.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Z-URL Preview 1.6.1 para WordPress tiene Cross-Site Scripting mediante el parámetro url en class.zlinkpreview.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:z-url_preview_project:z-url_preview:1.6.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1EDDD5B9-E964-4E7A-8D76-CBCB45556D92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145218/WordPress-Z-URL-Preview-1.6.1-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.svn.wordpress.org/z-url-preview/trunk/readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/z-url-preview/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/support/topic/z-url-preview-1-6-1-cross-site-scripting/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8990",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145218/WordPress-Z-URL-Preview-1.6.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.svn.wordpress.org/z-url-preview/trunk/readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/z-url-preview/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/support/topic/z-url-preview-1-6-1-cross-site-scripting/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-01T08:29:00.470",
      "lastModified" : "2024-11-21T03:19:09.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash."
      }, {
        "lang" : "es",
        "value" : "En LibTIFF 4.0.9, existe una desreferencia de puntero NULL en la función TIFFPrintDirectory en tif_print.c, tal y como se demuestra con un cierre inesperado de tiffinfo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27374BA0-7A61-4BDC-9F92-C09E99A9AB81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2770",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102345",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/commit/c6f41df7b581402dfba3c19a1e3df4454c551a01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00034.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/commit/c6f41df7b581402dfba3c19a1e3df4454c551a01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3602-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3606-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T03:29:00.220",
      "lastModified" : "2024-11-21T03:19:10.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Share This Image en versiones anteriores a la 1.04 de ILLID para WordPress tiene Cross-Site Scripting mediante el parámetro url en sharer.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-unit:share_this_image:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.04",
            "matchCriteriaId" : "F3243164-21EA-4798-854C-56DE7FC8CE95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/145464/WordPress-Share-This-Image-1.03-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/share-this-image/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/support/topic/share-this-image-1-03-cross-site-scripting/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8991",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/145464/WordPress-Share-This-Image-1.03-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wordpress.org/plugins/share-this-image/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/support/topic/share-this-image-1-03-cross-site-scripting/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9964",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-01-02T03:29:00.267",
      "lastModified" : "2024-11-21T03:37:15.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de salto de directorio en todas las versiones anteriores a la 2.1 de Schneider Electric Pelco VideoXpert Enterprise. Al rastrear las comunicaciones, una persona no autorizada puede ejecutar un ataque de salto de directorio, resultando en una omisión de autenticación o de secuestro de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:pelco_videoxpert:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "81B30BAF-370B-44F2-AB13-FFDFBB6F32F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102338",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9965",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-01-02T03:29:00.300",
      "lastModified" : "2024-11-21T03:37:15.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de exposición de información sensible en Schneider Electric's Pelco VideoXpert Enterprise, en versiones 2.0 y anteriores. Mediante un ataque de salto de directorio, una persona sin autorización podría ver archivos del servidor web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:pelco_videoxpert:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "81B30BAF-370B-44F2-AB13-FFDFBB6F32F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102338",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9966",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-01-02T03:29:00.330",
      "lastModified" : "2024-11-21T03:37:16.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de escalado de privilegios en Schneider Electric's Pelco VideoXpert Enterprise, en versiones 2.0 y anteriores. Al reemplazar ciertos archivos, un usuario no autorizado podría obtener privilegios del sistema; por lo tanto, el código insertado se ejecutaría a un nivel de privilegios elevado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:pelco_videoxpert:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "81B30BAF-370B-44F2-AB13-FFDFBB6F32F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102338",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T14:29:00.193",
      "lastModified" : "2024-11-21T03:04:44.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace"
      }, {
        "lang" : "es",
        "value" : "Passbolt API, en su versión 1.6.4 y anteriores, es vulnerable a XSS en el campo url del espacio de trabajo de la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:passbolt:passbolt_api:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "491377FB-DE99-4396-83A8-A06F9EC65E87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.passbolt.com/incidents/20170914_xss_on_resource_urls",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.passbolt.com/release/notes#September",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.passbolt.com/incidents/20170914_xss_on_resource_urls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.passbolt.com/release/notes#September",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T14:29:00.240",
      "lastModified" : "2024-11-21T03:04:44.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code execution in the browser."
      }, {
        "lang" : "es",
        "value" : "Eleix Openhacker, en su versión 0.1.47, es vulnerable a XSS en el componente bank transactions. Esto resulta en la ejecución de código arbitrario en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openhacker_project:openhacker:0.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C98FB3A-5280-4653-912B-29E0506EE53F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Eleix/openhacker/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Eleix/openhacker/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T15:29:00.217",
      "lastModified" : "2024-11-21T03:04:44.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information disclosure and remote code execution"
      }, {
        "lang" : "es",
        "value" : "Eleix Openhacker, en su versión 0.1.47, es vulnerable a una inyección SQL en el componente account registration and login. Esto resulta en una divulgación de información y ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openhacker_project:openhacker:0.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C98FB3A-5280-4653-912B-29E0506EE53F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Eleix/openhacker/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Eleix/openhacker/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T15:29:00.263",
      "lastModified" : "2024-11-21T03:04:45.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service"
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-1 y anteriores es vulnerable a una desreferencia de puntero NULL en el componente MagickCore. Esto podría desembocar en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.9-15",
            "matchCriteriaId" : "205D67A3-0BE9-4659-8898-92B913CB3836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndIncluding" : "7.0.7-1",
            "matchCriteriaId" : "A8F33BD2-CEAB-4E93-B813-62214C546E27"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102368",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/775",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T15:29:00.293",
      "lastModified" : "2024-11-21T03:17:28.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to the admin, which makes it easier for remote attackers to obtain access by predicting this new password. This is related to the use of gmdate for password creation in fn_connect.php."
      }, {
        "lang" : "es",
        "value" : "gps-server.net GPS Tracking Software (autoalojada) 2.x tiene un procedimiento de restablecimiento de contraseña que restablece inmediatamente contraseñas en una petición no autenticada y, a continuación, envía un email con una contraseña predecible (basada en datos) al administrador. Esto facilita que atacantes remotos obtengan acceso prediciendo esta nueva contraseña. Esto está relacionado con el uso de gmdate para crear contraseñas en fn_connect.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37D32FDC-4E0E-4D4F-A925-723354B67346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED2A968-FFA4-4A48-A343-BAD5138CC05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DC108F-06B8-4842-AA5A-E76215148765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49F1BFE-6610-488B-A5CA-9B6B3E27A573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DEEEE7-1E25-4577-858C-015F577C9E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEA6F6F-D6AB-421C-88EF-73571EBA0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FF5F24-AD52-4903-AC85-6318CF9D5DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F366D-3535-4AFB-AC1C-74490AAC928C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C30E1D-5774-4494-9333-51F6E535BF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D5A45-E48F-4327-98AF-594D9934D8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891AE0EC-AECF-4F80-A1B2-683E9FFA84D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAC1506-95C3-4807-881C-4B14BFD89267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA06369-2BAA-4206-B195-B7D6D792EC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B4DBB6-112B-4125-8431-EDC3A38FED97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE9173-962C-4185-8520-F9F2326D4001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14AB766B-0856-4E34-B8F0-AEC9372C423D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6864D09-771A-48D8-A30E-957E34187261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC66FF2E-6A17-42A8-A94D-C2CA60614E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F395A15-8CB8-4B7B-A351-64B82339F356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC5E32A-CFA0-4800-ABE4-5752A7880D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65ABBF2-F58E-47AC-B396-53C5CFF28350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D222D4CF-2AB8-41E9-A6B6-4C923D365E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39F7509-D72D-4479-A0AB-F5E9E9D2A18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189AFBF0-67D6-4F81-B845-98235C089646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B285616-5530-449D-BC51-F994BA3F4525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A52204-3842-488D-985D-55677B3BDAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F8F310-3649-496F-B310-FEBFEE764927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3221F37-C787-4DDB-9358-CB3A01D88567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4321076A-15CD-4D5C-8499-028DD7E78760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E32A8C0-314D-4698-B7B2-FF3A205B67B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD4C15D-E786-4B08-888B-B10886512807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784E2B80-6473-4380-B669-BD7BE217B5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:2.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40709D43-841E-40D8-9A0F-E32584099E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://s1.gps-server.net/changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43431/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://s1.gps-server.net/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43431/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T15:29:00.327",
      "lastModified" : "2024-11-21T03:17:29.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log viewing, as demonstrated by <?php system($_GET[cmd]); ?> in a login request."
      }, {
        "lang" : "es",
        "value" : "La función writeLog en fn_common.php en gps-server.net GPS Tracking Software (autoalojada) hasta la versión 3.0 permite que atacantes remotos inyecten código PHP arbitrario mediante una petición manipulada que se gestiona de manera incorrecta durante la vista de registros de administrador, tal y como demuestra  en una petición de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gps-server:gps_tracking_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "4BB2C086-61E2-4FC2-B30F-584113CB7E06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://s1.gps-server.net/changelog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43431/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://s1.gps-server.net/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43431/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.227",
      "lastModified" : "2024-11-21T03:04:40.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key."
      }, {
        "lang" : "es",
        "value" : "La solución TEE de código libre de Linaro llamada OP-TEE, en su versión 2.4.0 y anteriores, es vulnerable al ataque bellcore en el código LibTomCrypt. Esto resulta en el compromiso de la clave RSA privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linaro:op-tee:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "E9CFF694-CDA4-4F19-B9C8-A83D516B2F8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OP-TEE/optee_os/pull/1610",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.op-tee.org/security-advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OP-TEE/optee_os/pull/1610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.op-tee.org/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.290",
      "lastModified" : "2024-11-21T03:04:41.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key."
      }, {
        "lang" : "es",
        "value" : "La solución TEE de código libre de Linaro llamada OP-TEE, en su versión 2.4.0 y anteriores, es vulnerable a un ataque de sincronización en las partes Montgomery de libMPA en OP-TEE. Esto resulta en el compromiso de la clave RSA privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linaro:op-tee:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "E9CFF694-CDA4-4F19-B9C8-A83D516B2F8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OP-TEE/optee_os/pull/1610",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.op-tee.org/security-advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OP-TEE/optee_os/pull/1610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.op-tee.org/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.337",
      "lastModified" : "2024-11-21T03:04:45.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosing information about the remote host."
      }, {
        "lang" : "es",
        "value" : "Structured Data Linter, en sus versiones 2.4.1 y anteriores, es vulnerable a un ataque de salto de directorio en el campo de inserción de URL. Esto posibilita la divulgación de información sobre el host remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:structured-data:structured_data_linter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "0DFF2B17-2040-4FFC-99DC-F899A0C9B85B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/structured-data/linter/issues/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/structured-data/linter/issues/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.383",
      "lastModified" : "2023-11-07T02:37:57.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.417",
      "lastModified" : "2024-11-21T03:04:45.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier."
      }, {
        "lang" : "es",
        "value" : "En opencv/modules/imgcodecs/src/utils.cpp, las funciones FillUniColor y FillUniGray no comprueban la longitud de la entrada, lo que puede conducir a un desbordamiento de enteros. Si la imagen proviene de una fuente remota, podría provocar la ejecución remota de código o una denegación de servicio. Esto afecta a Opencv 3.3 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "74A9D1D1-1C36-42FF-90CE-C8557C5F9E6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9723",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencv/opencv/issues/9723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.557",
      "lastModified" : "2024-11-21T03:04:45.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec."
      }, {
        "lang" : "es",
        "value" : "fs-git es un sistema de archivos tipo api para git repository. El módulo fs-git, en su versión 1.0.1, depende de child_process.exec. Sin embargo, el método buildCommand empleado para construir cadenas exec no sanea datos correctamente y es vulnerable a la inyección de comandos en todos los métodos que lo emplean y llaman a exec."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fs-git_project:fs-git:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "BF60E4C5-0583-438B-B348-DA2704614653"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/360",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.697",
      "lastModified" : "2024-11-21T03:04:45.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de XML Signature Wrapping en Samlify 2.2.0 y anteriores, así como en su predecesor Express-saml2. Esto podría permitir que atacantes suplanten a usuarios arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samlify_project:samlify:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "955CDE58-CCDE-4C2F-B5DC-071DC5CD2F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tngan/samlify/releases/tag/v2.3.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitehats.nl/blog/xml-signature-wrapping-samlify",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tngan/samlify/releases/tag/v2.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitehats.nl/blog/xml-signature-wrapping-samlify",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.820",
      "lastModified" : "2024-11-21T03:04:45.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple, en sus versiones 2.1.6 y 2.2, es vulnerable a una inyección de plantillas de Smarty en algunos módulos centrales. Esto resulta en la ejecución de código PHP sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2",
            "matchCriteriaId" : "E59CF8ED-9017-4EB7-8589-1FE1CD19CA3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.1",
            "matchCriteriaId" : "B9987056-FC95-4810-B117-3FFE580BBDE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cmsmadesimple.org/2017/06/Announcing-CMSMS-2-2-1-Hearts-Desire/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cmsmadesimple.org/2017/06/Announcing-CMSMS-2-2-1-Hearts-Desire/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:00.963",
      "lastModified" : "2024-11-21T03:04:46.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1"
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple 2.1.6, 2.2 y 2.2.1 es vulnerable a una inyección de plantillas de Smarty en algunos componentes centrales. Esto resulta en la lectura de archivos locales en versiones anteriores a la 2.2 y en la inclusión de archivos locales desde la versión 2.2.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2",
            "matchCriteriaId" : "E59CF8ED-9017-4EB7-8589-1FE1CD19CA3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.1",
            "matchCriteriaId" : "B9987056-FC95-4810-B117-3FFE580BBDE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cmsmadesimple.org/2017/07/Announcing-CMSMS-2.2.2-Hearts-Content",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cmsmadesimple.org/2017/07/Announcing-CMSMS-2.2.2-Hearts-Content",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T17:29:01.023",
      "lastModified" : "2024-11-21T03:04:46.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GuixSD prior to Git commit 5e66574a128937e7f2fcf146d146225703ccfd5d used POSIX hard links incorrectly, leading the creation of setuid executables in \"the store\", violating a fundamental security assumption of GNU Guix."
      }, {
        "lang" : "es",
        "value" : "GuixSD, antes del commit de Git con ID 5e66574a128937e7f2fcf146d146225703ccfd5d, empleaba vínculos físicos POSIX incorrectamente. Esto conducía a la creación de ejecutables setuid en \"la tienda\", infringiendo un supuesto de seguridad fundamental de GNU Guix."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:guixsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.13.0",
            "matchCriteriaId" : "CFB910E4-CB98-4844-AC50-E7037C7FDF4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.gnu.org/archive/html/guix-devel/2017-10/msg00090.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/guix-devel/2017-10/msg00090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1557",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-02T17:29:01.070",
      "lastModified" : "2024-11-21T03:22:04.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 8.0 y 9.0 podría permitir que un usuario autenticado con autoridad envíe una petición especialmente manipulada que podría provocar que un proceso de canal deje de procesar más peticiones. IBM X-Force ID: 131547."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6617F-85DF-49FE-B713-148624DC87A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018595DD-9AAD-44C7-9A46-BC78AF1F6C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004378",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102418",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131547",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22004378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T18:29:00.200",
      "lastModified" : "2024-11-21T03:04:41.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función WildMidi_Open en WildMIDI desde el commit con ID d8a466829c67cacbb1700beded25c448d99514e5 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de la aplicación) o, probablemente, provocar cualquier otro tipo de problema mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindwerks:wildmidi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.1",
            "matchCriteriaId" : "67A12CD0-A1B6-4A62-A727-EC0EEB829F15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mindwerks/wildmidi/issues/178",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mindwerks/wildmidi/issues/178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T18:29:00.247",
      "lastModified" : "2024-11-21T03:04:46.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations."
      }, {
        "lang" : "es",
        "value" : "freedesktop.org libpoppler 0.60.1 fracasa a la hora de validar límites en TextPool::addWord, lo que conduce a un desbordamiento de los cálculos posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:0.60.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204B7040-9839-4994-9871-89D1D0430732"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103116",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4097",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T18:29:00.293",
      "lastModified" : "2024-11-21T03:04:46.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Help.aspx in mojoPortal version 2.5.0.0 allows remote attackers to inject arbitrary web script or HTML via the helpkey parameter. Exploitation requires authenticated reflected cross-site scripting for user accounts assigned either the \"Administrators\" or \"Content Administrators\" role."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en Help.aspx en mojoPortal en su versión 2.5.0.0 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro helpkey. La explotación requiere de Cross-Site Scripting (XSS) reflejado autenticado para cuentas de usuario que tengan asignadas los roles de \"Administrators\" o \"Content Administrators\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoportal:mojoportal:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6499B1-E927-44AE-BCE6-A9D4637F57BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/i7MEDIA/mojoportal/commit/5ea8129f74c80cbf1f68b9083c745cc8a685485d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.mojoportal.com/mojoportal-2-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal/commit/5ea8129f74c80cbf1f68b9083c745cc8a685485d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.mojoportal.com/mojoportal-2-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T18:29:00.323",
      "lastModified" : "2024-11-21T03:04:46.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service (crash) and possibly other exploitation."
      }, {
        "lang" : "es",
        "value" : "Bro, en versiones anteriores a Bro v2.5.2 es vulnerable a una escritura fuera de límites en el analizador ContentLine. Esto permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado) y, posiblemente, otros tipos de explotación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bro:bro:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91682419-A7AE-417D-B2CC-36A3D4FBD1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bro-tracker.atlassian.net/browse/BIT-1856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bro/bro/commit/6c0f101a62489b1c5927b4ed63b0e1d37db40282",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bro-tracker.atlassian.net/browse/BIT-1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bro/bro/commit/6c0f101a62489b1c5927b4ed63b0e1d37db40282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T19:29:00.207",
      "lastModified" : "2024-11-21T03:04:41.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially attacking such internal services via the web application."
      }, {
        "lang" : "es",
        "value" : "phpBB, en su versión 3.2.0, es vulnerable a SSRF en la función Remote Avatar. Esto permite que un atacante realice un escaneo de puertos, solicitando contenido interno y atacando potencialmente tales servicios internos a través de la aplicación web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:phpbb:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4ADB41-770D-41ED-A347-3EF025A9DFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.phpbb.com/community/viewtopic.php?f=14&p=14782136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/phpbb-server-side-request-forgery-vulnerability/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.phpbb.com/community/viewtopic.php?f=14&p=14782136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/phpbb-server-side-request-forgery-vulnerability/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T19:29:00.257",
      "lastModified" : "2024-11-21T03:04:42.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite"
      }, {
        "lang" : "es",
        "value" : "Syncthing, en su versión 0.14.33 y anteriores, es vulnerable a un salto de vínculo simbólico, lo que resulta en la sobrescritura de archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syncthing:syncthing:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.14.33",
            "matchCriteriaId" : "C25E3C37-5AFA-42A1-8168-2E9ABC4AD6C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/syncthing/syncthing/issues/4286",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syncthing/syncthing/issues/4286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T19:29:00.300",
      "lastModified" : "2024-11-21T03:04:42.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution"
      }, {
        "lang" : "es",
        "value" : "Gifsicle gifview 1.89 y anteriores es vulnerable a un uso de memoria previamente liberada en la función read_gif, lo que da lugar a una potencial ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lcdf:gifsicle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.89",
            "matchCriteriaId" : "747001C2-6A5E-4B95-B051-6210646500F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kohler/gifsicle/issues/114",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kohler/gifsicle/issues/114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T20:29:00.190",
      "lastModified" : "2024-11-21T03:04:42.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution"
      }, {
        "lang" : "es",
        "value" : "Gnome gdk-pixbuf 2.36.8 y anteriores es vulnerable a varios desbordamientos de enteros en la función gif_get_lzw. Esto resulta en la corrupción de memoria y la potencial ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.36.8",
            "matchCriteriaId" : "6314A320-A981-4295-B55D-FF9CACDE7268"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=785973",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3532-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4088",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=785973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3532-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T20:29:00.237",
      "lastModified" : "2024-11-21T03:04:42.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup."
      }, {
        "lang" : "es",
        "value" : "b2evolution, de las versiones 6.6.0 a la 6.8.10, es vulnerable a la validación de entradas (escape de barra diagonal inversa y comilla simple) en la funcionalidad de instalación básica. Esto provoca que un atacante no autenticado pueda ejecutar código PHP en la instalación de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndIncluding" : "6.8.10",
            "matchCriteriaId" : "FE461FC8-ECB9-437D-BB0D-52CB353E3C17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/b2evolution/b2evolution/commit/0096a3ebc85f6aadbda2c4427cd092a538b161d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/b899d654d931f3bf3cfbbdd71e0d1a0f3a16d04c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/0096a3ebc85f6aadbda2c4427cd092a538b161d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/commit/b899d654d931f3bf3cfbbdd71e0d1a0f3a16d04c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T20:29:00.283",
      "lastModified" : "2024-11-21T03:04:42.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control."
      }, {
        "lang" : "es",
        "value" : "Github Electron, de las versiones 1.6.4 a la 1.6.11 y 1.7.0 a 1.7.5, es vulnerable a un problema de suplantación de URL al abrir PDF en PDFium. Esto resulta en la carga de PDF arbitrarios que pueden ser controlados por un hacker."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atom:electron:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.4",
            "versionEndIncluding" : "1.6.11",
            "matchCriteriaId" : "50D4B7C1-A160-4445-87B0-098A80B0919B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atom:electron:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "D1B607DA-0C93-460F-B70A-5B80D2BDAECF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/electron/electron/pull/10008",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electron/electron/pull/10008/files",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electron/electron/pull/10008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electron/electron/pull/10008/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T20:29:00.313",
      "lastModified" : "2024-11-21T03:04:43.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf' and 'encode_config' functions"
      }, {
        "lang" : "es",
        "value" : "rust-base64, en versiones iguales o anteriores a la 0.5.1, es vulnerable a un desbordamiento de búfer al calcular el tamaño de un búfer para emplearlo al cifrar base64 mediante las funciones \"encode_config_buf\" y \"encode_config\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-base64_project:rust-base64:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.1",
            "matchCriteriaId" : "0C966553-81F2-4A6F-82DD-1A013D4A930B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RustSec/advisory-db/blob/master/crates/base64/RUSTSEC-2017-0004.toml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RustSec/advisory-db/blob/master/crates/base64/RUSTSEC-2017-0004.toml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T20:29:00.360",
      "lastModified" : "2024-11-21T03:04:43.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials."
      }, {
        "lang" : "es",
        "value" : "eZ Systems eZ Publish, de las versiones 5.4.0 a la 5.4.9 y 5.3.12 y anteriores, es vulnerable a un problema de XSS en el módulo search. Esto resulta en el riesgo de que los atacantes inyecten scripts que podrían, por ejemplo, robar credenciales de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.9",
            "matchCriteriaId" : "02B2C3E4-0A7A-4F90-8807-C1CE0EB3CF66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.12",
            "matchCriteriaId" : "57B51848-D593-4522-808E-D47D23961A26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://share.ez.no/community-project/security-advisories/ezsa-2017-005-xss-issue-in-search",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://share.ez.no/community-project/security-advisories/ezsa-2017-005-xss-issue-in-search",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T21:29:00.203",
      "lastModified" : "2024-11-21T03:04:42.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure."
      }, {
        "lang" : "es",
        "value" : "MapProxy, en su versión 1.10.3 y anteriores, es vulnerable a un ataque de Cross-Site Scripting (XSS) en el servicio demo. Esto resulta en una posible divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omniscale:mapproxy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.3",
            "matchCriteriaId" : "7041229F-84E8-4562-93C8-3D67E8F79177"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mapproxy/mapproxy/issues/322",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mapproxy/mapproxy/issues/322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.210",
      "lastModified" : "2024-11-21T03:04:42.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the \"movie\" parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en la página /html/portal/flash.jsp en Liferay Portal CE 7.0 GA4 y anteriores permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante un URI javascript: en el parámetro \"movie\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "7.0.3_ga4",
            "matchCriteriaId" : "C731DAF9-91B5-4C31-B12A-87CB6A688051"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/cst-7030-multiple-xss-vulnerabilities-in-7-0-ce-ga4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/liferay/liferay-portal/commit/9435af4ef8a90b5333da925a5ec860a43d18c031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/cst-7030-multiple-xss-vulnerabilities-in-7-0-ce-ga4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/liferay/liferay-portal/commit/9435af4ef8a90b5333da925a5ec860a43d18c031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.257",
      "lastModified" : "2024-11-21T03:04:43.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser."
      }, {
        "lang" : "es",
        "value" : "marked, en su versión 0.3.6 y anteriores, es vulnerable a un ataque de XSS en el analizador sintáctico de URI data:."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marked_project:marked:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.6",
            "matchCriteriaId" : "940F9815-5C32-4569-B027-F0AC0405EBE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://snyk.io/vuln/npm:marked:20170112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://snyk.io/vuln/npm:marked:20170112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.303",
      "lastModified" : "2024-11-21T03:04:43.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access"
      }, {
        "lang" : "es",
        "value" : "Vanilla Forums, en versiones anteriores a la 2.1.5, se ha visto afectado por CSRF. Esto conduce a la eliminación de temas y comentarios de los foros con acceso Admin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanillaforums:vanilla_forums:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.5",
            "matchCriteriaId" : "DF8BEF7A-6506-42AE-B970-9407C0A68F30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://open.vanillaforums.com/discussion/28337/vanilla-2-1-5-released-and-2-0-18-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43462/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://open.vanillaforums.com/discussion/28337/vanilla-2-1-5-released-and-2-0-18-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43462/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.337",
      "lastModified" : "2024-11-21T03:04:44.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password."
      }, {
        "lang" : "es",
        "value" : "pysaml2, en su versión 4.4.0 y anteriores, acepta cualquier contraseña cuando se ejecuta con las optimizaciones de python habilitadas. Esto permite que atacantes inicien sesión como cualquier usuario sin conocer su contraseña."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pysaml2_project:pysaml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "24F2FB4E-4F43-4B09-B01C-1B3FCB88AB2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rohe/pysaml2/issues/451",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rohe/pysaml2/issues/451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.383",
      "lastModified" : "2024-11-21T03:04:44.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));"
      }, {
        "lang" : "es",
        "value" : "El plugin de Wordpress Furikake, en su versión 0.1.0, es vulnerable a una redirección abierta. El parámetro furikake-redirect en una página permite la redirección a una página controlada por el atacante en classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:furikake_project:furikake:0.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A06219F1-73CC-4F87-864D-8889822940A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cjc.im/advisories/0008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8992",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cjc.im/advisories/0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.430",
      "lastModified" : "2024-11-21T03:04:44.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "Creolabs Gravity 1.0 contiene un desbordamiento de búfer basado en pila en la función operator_string_add. Esto resulta en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creolabs:gravity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52708A02-0E70-4A28-AA88-B34E57F419B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marcobambini/gravity/issues/186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marcobambini/gravity/issues/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-02T23:29:00.460",
      "lastModified" : "2024-11-21T03:04:44.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data."
      }, {
        "lang" : "es",
        "value" : "En OMERO 5.3.3 o anteriores, un usuario podría crear un OriginalFile y ajustar su ruta para que ahora señale al archivo de otro usuario en el sistema de archivos subyacente y, después, manipular los datos del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmicroscopy:omero:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.3",
            "matchCriteriaId" : "4632D8F8-A39A-438A-AFD4-955EF6A1A189"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.openmicroscopy.org/security/advisories/2017-SV5-filename-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openmicroscopy.org/security/advisories/2017-SV5-filename-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T00:29:00.217",
      "lastModified" : "2024-11-21T03:04:46.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes"
      }, {
        "lang" : "es",
        "value" : "Leanote, en versiones iguales o anteriores a 2.5, es vulnerable a XSS debido a las entradas no saneadas en las notas markdown."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leanote:leanote:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "FDA62AF1-EA12-4C15-B4E4-C5A02F1EC1A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leanote/leanote/issues/676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leanote/leanote/issues/676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T00:29:00.247",
      "lastModified" : "2024-11-21T03:04:47.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Leafpub versión 1.2.0-beta6 es vulnerable a Cross-Site Scripting (XSS) persistente en la página edit blog post. Esto puede resultar en la interrupción del servicio y la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leafpub:leafpub:1.2.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "93D4C469-4C09-4C34-865C-BDCF15D21D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Leafpub/leafpub/issues/125",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Leafpub/leafpub/issues/125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T01:29:00.220",
      "lastModified" : "2024-11-21T03:04:47.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Invoice Ninja versión 3.8.1 es vulnerable a Cross-Site Scripting (XSS) persistente en la página invoice creation. Esto puede resultar en la interrupción del servicio y la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceninja:invoice_ninja:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874EA22A-5B16-452D-A879-BFDA0DCCE7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/invoiceninja/invoiceninja/issues/1727",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/invoiceninja/invoiceninja/issues/1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T01:29:00.250",
      "lastModified" : "2024-11-21T03:04:51.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration."
      }, {
        "lang" : "es",
        "value" : "Shiba markdown live preview app 1.1.0 es vulnerable to XSS, que conduce a la ejecución de código debido a la integración de nodos habilitada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shiba_project:shiba:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90ECFE2-B2E2-4A73-8947-EA0882D805A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rhysd/Shiba/issues/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rhysd/Shiba/issues/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T01:29:00.313",
      "lastModified" : "2024-11-21T03:04:51.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration"
      }, {
        "lang" : "es",
        "value" : "Leanote-desktop v2.5 es vulnerable to XSS, que conduce a la ejecución de código debido a la integración de nodos habilitada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leanote:desktop:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F995F91D-AF29-465F-B0B3-F230F0CCFD8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leanote/desktop-app/commit/a2ed226637f8e66c9b089784b5e58eccf2e2fb30",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/leanote/leanote/issues/695",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leanote/desktop-app/commit/a2ed226637f8e66c9b089784b5e58eccf2e2fb30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/leanote/leanote/issues/695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T01:29:00.343",
      "lastModified" : "2024-11-21T03:04:51.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover"
      }, {
        "lang" : "es",
        "value" : "Rocket.Chat Server, en su versión 0.59 y anteriores, es vulnerable a una inyección NoSQL que conduce a la toma de control de la cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.59",
            "matchCriteriaId" : "46499A06-D98B-412B-8089-778E3587BE06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.sbarbeau.fr/2018/03/nosql-injection-leading-to.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RocketChat/Rocket.Chat/pull/8408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.sbarbeau.fr/2018/03/nosql-injection-leading-to.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RocketChat/Rocket.Chat/pull/8408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T06:29:00.517",
      "lastModified" : "2025-01-03T12:15:25.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action."
      }, {
        "lang" : "es",
        "value" : "La función tcpmss_mangle_packet en net/netfilter/xt_TCPMSS.c en el kernel de Linux, en versiones anteriores a la 4.11 y en versiones 4.9.x anteriores a la 4.9.36, permite que atacantes remotos provoquen una denegación de servicio (uso de memoria previamente liberada y corrupción de memoria) o, posiblemente, otro tipo de impacto sin especificar aprovechando la presencia de xt_TCPMSS en una acción iptables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.99",
            "matchCriteriaId" : "1CC1F4D9-8598-423F-8BD7-D59F42CDE503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.54",
            "matchCriteriaId" : "B63FE1A7-0BFF-48C4-8DBA-262DCBC568BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.60",
            "matchCriteriaId" : "0B36DEBD-E96A-4602-85F4-D47720E48DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "5F6B255F-0933-4983-B3F6-AD5B128A8F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.76",
            "matchCriteriaId" : "8816B066-19C8-4CC5-BAB9-77545B026381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.36",
            "matchCriteriaId" : "50810A89-82C2-467A-9026-E695C66E09CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11",
            "matchCriteriaId" : "28FFE753-2608-40BE-A218-483B3D8C0241"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:4.20.1fx-virtual-router:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4E30BA-8F44-46F5-B237-8062BCEEF2B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:arx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "2ADBC8C8-BEA1-464A-BB79-0ADA584DC406"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:caas_platform:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40285076-B38C-4993-8AD2-2FC279E664A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "58D3B6FD-B474-4B09-B644-A8634A629280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F892F1B0-514C-42F7-90AE-12ACDFDC1033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_module_for_public_cloud:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8F4626-6942-4A79-BF25-C8AD33A82034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC411C9-9A8A-49D0-B704-2207674778CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:openstack_cloud:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53945BEC-81F5-44F8-8035-7A4E5E2DA5B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_high_availability:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4F47F0-A116-4844-8A2C-B1D8FD18B27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_high_availability:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "55C27484-294A-4BF6-B320-1F218E6F0F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "68B0C0E7-98BD-48F8-8F6A-B3B8A820C427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_live_patching:12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA7DD36-7B56-4749-8850-C351593BEB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_live_patching:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "29A2ED76-6702-4C1D-909A-F4F1EB57EEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "99A38379-DBD3-4BF6-9A8F-95A3F553AD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "154A0D00-12A6-41FD-BF96-43CA3C40F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C1E27D-480B-48DF-B9F5-57C5418B5E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B12243B2-D726-404C-ABFF-F1AB51BA1783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
            "matchCriteriaId" : "B2F3699A-38E4-4E9D-9414-411F71D9E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:sap:*:*",
            "matchCriteriaId" : "CFE323D0-8720-45B2-BAF3-6184B8FC00CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:ltss:*:*:*",
            "matchCriteriaId" : "0651347C-AE16-4155-98EF-A0A2C63A37A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F84B2729-7B52-4505-9656-1BD31B980705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*",
            "matchCriteriaId" : "F2681D87-58A9-4A56-BE97-B00C5061CA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:-:-:*:*",
            "matchCriteriaId" : "47FB0003-EFE7-4E9A-8772-27576A771884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A798E-0D69-43C7-9A63-1E5921138EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F150BD9-4B94-42D3-9E14-58665B7FF220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B779A4B4-0721-4F4C-B3BD-C640BEAB2463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "85F85F45-1290-44BF-9480-2165A4B40A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B71882EC-6A1E-4394-B4EC-33B9D3440AB8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:cloud_magnum_orchestration:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27A3E24-7BC2-4EA9-BFAD-987C2CDEF8DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mrg_realtime:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0FFE3-4BE1-4024-BCC6-1B87074DE2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807C024A-F8E8-4B48-A349-4C68CD252CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B15608-BABC-4663-A58F-B74BD2D1A734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E85B24-30F2-42AB-9F68-8668C0FCC5E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/746618/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102367",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3583-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3583-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1737",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/2/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K18352029",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2638fd0f92d4397884fd991d8f4925cb3f081901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/746618/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3583-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3583-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1739765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2638fd0f92d4397884fd991d8f4925cb3f081901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lkml.org/lkml/2017/4/2/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20250103-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K18352029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3583-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisories/4577-security-advisory-34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T14:29:00.207",
      "lastModified" : "2024-11-21T03:04:51.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de variable de pila no inicializada en NameValueParserEndElt (upnpreplyparse.c) en miniupnpd en versiones posteriores a la 2.0 permite que un atacante provoque una denegación de servicio (fallo de segmentación y corrupción de memoria) o que, posiblemente, cause otro tipo de impacto sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniupnp_project:miniupnpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "AA580243-5EA5-4BC3-AAF8-75A6E941801E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miniupnp/miniupnp/commit/7aeb624b44f86d335841242ff427433190e7168a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/miniupnp/miniupnp/issues/268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00045.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3562-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/miniupnp/miniupnp/commit/7aeb624b44f86d335841242ff427433190e7168a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/miniupnp/miniupnp/issues/268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3562-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T14:29:00.237",
      "lastModified" : "2024-11-21T03:04:51.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's account"
      }, {
        "lang" : "es",
        "value" : "La versión 2.0.0 de QuickApps CMS es vulnerable a Cross-Site Scripting (XSS) persistente en el campo de nombre real de usuario, lo que puede desembocar en una denegación de servicio y en la realización de acciones no autorizadas con una cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickappscms:quickapps_cms:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E12D472-80CB-4D3D-AEC4-CD97AA92F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quickapps/cms/issues/183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/quickapps/cms/issues/183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T14:29:00.283",
      "lastModified" : "2024-11-21T03:04:52.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code."
      }, {
        "lang" : "es",
        "value" : "Commsy versión 9.0.0 es vulnerable a ataques de XXE en la funcionalidad de importación de configuración, lo que resulta en una denegación de servicio y, posiblemente, la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commsy:commsy:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01420578-6DBB-44C0-AB2A-774DA6D42F23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/commsy/commsy/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/commsy/commsy/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T14:29:00.317",
      "lastModified" : "2024-11-21T03:04:52.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution"
      }, {
        "lang" : "es",
        "value" : "Pepperminty-Wiki versión 0.15 es vulnerable a ataques de XXE en la función getsvgsize, lo que resulta en una denegación de servicio y, posiblemente, la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pepperminty-wiki_project:pepperminty-wiki:0.15:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE5E63D-88C5-485A-8E23-E591B83A251B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sbrl/Pepperminty-Wiki/issues/152",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sbrl/Pepperminty-Wiki/issues/152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T14:29:00.363",
      "lastModified" : "2024-11-21T03:04:52.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution"
      }, {
        "lang" : "es",
        "value" : "AndroidSVG versión 1.2.2 es vulnerable a ataques de XXE en el componente de análisis SVG, lo que resulta en una denegación de servicio y, posiblemente, la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:androidsvg_project:androidsvg:1.2.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CD715759-A4C0-46F7-8A9F-01C702C72A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BigBadaboom/androidsvg/issues/122",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BigBadaboom/androidsvg/issues/122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T14:29:00.410",
      "lastModified" : "2024-11-21T03:04:52.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc."
      }, {
        "lang" : "es",
        "value" : "Las versiones 4.7.x (anteriores a 4.7.6.1/4.7.7) de phpMyAdmin son vulnerables a una debilidad Cross-Site Request Forgery (CSRF). Al engañar a un usuario para que haga clic en una URL manipulada, es posible realizar operaciones dañinas para la base de datos, como el borrado de registros, anulación/truncado de tablas, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7.0",
            "versionEndExcluding" : "4.7.7",
            "matchCriteriaId" : "B002D7A7-970B-451D-B851-0E23214AD0CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cyberworldmirror.com/vulnerability-phpmyadmin-lets-attacker-perform-drop-table-single-click/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040163",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45284/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-9/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://cyberworldmirror.com/vulnerability-phpmyadmin-lets-attacker-perform-drop-table-single-click/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45284/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-9/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T15:29:00.187",
      "lastModified" : "2024-11-21T03:04:47.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "LavaLite versión 5.2.4 es vulnerable a Cross-Site Scripting (XSS) persistente en la página blog creation. Esto puede resultar en la interrupción del servicio y la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lavalite:lavalite:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E77128-B16C-44FA-BD9F-5118688797B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LavaLite/cms/issues/209",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LavaLite/cms/issues/209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T15:29:00.250",
      "lastModified" : "2023-11-07T02:37:57.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12161.  Reason: This candidate is a reservation duplicate of CVE-2017-12161.  Notes: All CVE users should reference CVE-2017-12161 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T15:29:00.283",
      "lastModified" : "2024-11-21T03:04:52.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the \"config\" and \"migrate\" parameters resulting in unauthenticated remote code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.6 y anteriores de Awstats son vulnerables a un error de salto de directorio en la manipulación de los parámetros \"config\" y \"migrate\", lo que resulta en la ejecución remota de código sin autenticar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.0",
            "matchCriteriaId" : "386B814D-4746-43AD-BF60-7D9BC930FBDC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.awstats.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/eldy/awstats/commit/06c0ab29c1e5059d9e0279c6b64d573d619e1651",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eldy/awstats/commit/cf219843a74c951bf5986f3a7fffa3dcf99c3899",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-37",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4092",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.awstats.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/eldy/awstats/commit/06c0ab29c1e5059d9e0279c6b64d573d619e1651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eldy/awstats/commit/cf219843a74c951bf5986f3a7fffa3dcf99c3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14391",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.330",
      "lastModified" : "2023-11-07T02:38:59.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14392",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.360",
      "lastModified" : "2023-11-07T02:38:59.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14393",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.390",
      "lastModified" : "2023-11-07T02:38:59.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15540",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.437",
      "lastModified" : "2023-11-07T02:40:14.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15541",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.470",
      "lastModified" : "2023-11-07T02:40:14.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15542",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.500",
      "lastModified" : "2023-11-07T02:40:14.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15543",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.533",
      "lastModified" : "2023-11-07T02:40:15.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15544",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.580",
      "lastModified" : "2023-11-07T02:40:15.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15545",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.610",
      "lastModified" : "2023-11-07T02:40:15.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15556",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.687",
      "lastModified" : "2023-11-07T02:40:17.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15557",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.720",
      "lastModified" : "2023-11-07T02:40:17.623",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15558",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.767",
      "lastModified" : "2023-11-07T02:40:17.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15559",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.797",
      "lastModified" : "2023-11-07T02:40:18.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15560",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.830",
      "lastModified" : "2023-11-07T02:40:18.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15561",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.860",
      "lastModified" : "2023-11-07T02:40:18.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15562",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.890",
      "lastModified" : "2023-11-07T02:40:18.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15563",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.923",
      "lastModified" : "2023-11-07T02:40:19.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15564",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:00.970",
      "lastModified" : "2023-11-07T02:40:19.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2769",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.000",
      "lastModified" : "2023-11-07T02:43:57.597",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2770",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.017",
      "lastModified" : "2023-11-07T02:43:57.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2771",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.063",
      "lastModified" : "2023-11-07T02:43:58.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2772",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.093",
      "lastModified" : "2023-11-07T02:43:58.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2774",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.127",
      "lastModified" : "2023-11-07T02:43:58.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4956",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.157",
      "lastModified" : "2023-11-07T02:48:23.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4957",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.203",
      "lastModified" : "2023-11-07T02:48:24.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4958",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.237",
      "lastModified" : "2023-11-07T02:48:24.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4968",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.283",
      "lastModified" : "2023-11-07T02:48:24.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4993",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.313",
      "lastModified" : "2023-11-07T02:48:25.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8008",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.343",
      "lastModified" : "2023-11-07T02:50:18.623",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8009",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.377",
      "lastModified" : "2023-11-07T02:50:18.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8026",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.423",
      "lastModified" : "2023-11-07T02:50:19.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8027",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.453",
      "lastModified" : "2023-11-07T02:50:19.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8029",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.487",
      "lastModified" : "2023-11-07T02:50:20.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8030",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.533",
      "lastModified" : "2023-11-07T02:50:20.497",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8042",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.563",
      "lastModified" : "2023-11-07T02:50:20.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8043",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.593",
      "lastModified" : "2023-11-07T02:50:21.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8049",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-03T15:29:01.640",
      "lastModified" : "2023-11-07T02:50:21.353",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T16:29:00.183",
      "lastModified" : "2024-11-21T03:04:50.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form."
      }, {
        "lang" : "es",
        "value" : "Mautic, de la versión 2.1.0 a la 2.11.0, es vulnerable a un ataque en línea de JS XSS al emplear formularios Mautic en una página de aterrizaje mediante parámetros GET para prerrellenar el formulario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E491B-4306-43D8-9884-D26D557B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067FE5C3-BD71-4F6F-9777-9429FBCD2669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352CCA25-B7E2-4878-83CD-D444DE1A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F537D29E-267F-41DA-A7D6-EAE8F2F1D0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6295440-4EB3-45EE-86B7-A06041580114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE8140-C008-4271-862A-02D8338E7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F69C10-F74A-4399-9665-75C62AF1ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2343A267-12F1-4720-B548-74201E57CC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CE6166-E6FA-40D7-9EA7-C329DA8396D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0E77CC-1C9E-47A1-A48D-1A098537F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4E6411-EF70-4AFA-A5EA-B4B31E3B87FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49602924-B1C2-40AB-9711-582B910C5135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF326AC-1598-4E5D-9138-74C9BB07D217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59461408-E345-40BE-8E0F-F6A6963B3815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AFF4D-A70A-4AEB-A4F6-01146BD7DAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.9.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "578537AC-BF31-43D7-B80A-B5AD235882A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477202B1-9A31-4C8A-9B22-B296BC413838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.10.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "AF978F65-E884-4814-8C37-38F699720069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D68FA7-8E9C-4F94-89AC-05389DB5FC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.11.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B650408E-4D7E-48C0-AF62-3C79DD5ACD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEC05DD-9E41-4D78-9EDB-F086DFD0FD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ECE904-F0B8-4194-B35B-1A7404602CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09011058-0F31-4D8E-B1BB-3E3DC4437955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A48919-3F8F-41FC-9831-45766D3C3478"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/releases/tag/2.12.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mautic/mautic/releases/tag/2.12.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T17:29:00.197",
      "lastModified" : "2024-11-21T03:04:51.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address"
      }, {
        "lang" : "es",
        "value" : "Mautic, de la versión 2.0.0 a la 2.11.0, con un plugin SSO instalado podría permitir que un usuario deshabilitado pueda seguir iniciando sesión mediante una dirección de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3570E4D0-3F19-4343-B8D6-570693C231BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183F886-F921-4B41-B4F4-BCADD1D82490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E491B-4306-43D8-9884-D26D557B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067FE5C3-BD71-4F6F-9777-9429FBCD2669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352CCA25-B7E2-4878-83CD-D444DE1A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F537D29E-267F-41DA-A7D6-EAE8F2F1D0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6295440-4EB3-45EE-86B7-A06041580114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE8140-C008-4271-862A-02D8338E7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F69C10-F74A-4399-9665-75C62AF1ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2343A267-12F1-4720-B548-74201E57CC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CE6166-E6FA-40D7-9EA7-C329DA8396D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0E77CC-1C9E-47A1-A48D-1A098537F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4E6411-EF70-4AFA-A5EA-B4B31E3B87FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49602924-B1C2-40AB-9711-582B910C5135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF326AC-1598-4E5D-9138-74C9BB07D217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59461408-E345-40BE-8E0F-F6A6963B3815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AFF4D-A70A-4AEB-A4F6-01146BD7DAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.9.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "578537AC-BF31-43D7-B80A-B5AD235882A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477202B1-9A31-4C8A-9B22-B296BC413838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.10.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "AF978F65-E884-4814-8C37-38F699720069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D68FA7-8E9C-4F94-89AC-05389DB5FC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.11.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B650408E-4D7E-48C0-AF62-3C79DD5ACD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEC05DD-9E41-4D78-9EDB-F086DFD0FD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ECE904-F0B8-4194-B35B-1A7404602CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09011058-0F31-4D8E-B1BB-3E3DC4437955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A48919-3F8F-41FC-9831-45766D3C3478"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/releases/tag/2.12.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mautic/mautic/releases/tag/2.12.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T17:29:00.243",
      "lastModified" : "2024-11-21T03:04:51.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to."
      }, {
        "lang" : "es",
        "value" : "Mautic, de la versión 1.0.0 a la 2.11.0, es vulnerable a permitir que cualquier sesión de usuario autorizada de Mautic (debe haber iniciado sesión) utilice el Filemanager para descargar cualquier archivo del servidor al que tenga acceso el usuario web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E592D4D5-0E5A-4B39-AC04-088B824D3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B41915-93B3-4FFE-968A-615D008EA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D769331C-B1F6-49BD-A6C2-AC02D3129BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA550469-F69F-4622-926B-FD4A537B21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425F698F-CCD6-4A05-A31F-5F8BFEF60F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FD252B-7E86-4275-BF02-E33FA91CD5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FE419F-CE46-4DB2-9581-2DA2E10C2E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0705A45D-2B1C-440D-8019-D404046591F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA5F6FC-DFD2-4E62-B420-25E0ECABE7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C728C7F3-2C0C-4486-80F4-A9548C535C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF32567-BCCE-4817-A4D9-345D408B9DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366161CC-8FF1-44B8-A16A-00D2D828AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996A31B6-3FC4-4347-9BC7-6B0E3252443A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B17CC51-A2F1-4D54-BAED-12E0578CF59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16DB243-0658-4354-B63C-47BE02F3702B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F328D42-C524-4B27-A0AD-25A12DE7C506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC913822-C3C3-42D2-B804-DA960E2DA12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A252C2D-156A-4ED7-B0D3-4FC66BC10916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3570E4D0-3F19-4343-B8D6-570693C231BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8183F886-F921-4B41-B4F4-BCADD1D82490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E491B-4306-43D8-9884-D26D557B85C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067FE5C3-BD71-4F6F-9777-9429FBCD2669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352CCA25-B7E2-4878-83CD-D444DE1A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F537D29E-267F-41DA-A7D6-EAE8F2F1D0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6295440-4EB3-45EE-86B7-A06041580114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE8140-C008-4271-862A-02D8338E7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F69C10-F74A-4399-9665-75C62AF1ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2343A267-12F1-4720-B548-74201E57CC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CE6166-E6FA-40D7-9EA7-C329DA8396D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0E77CC-1C9E-47A1-A48D-1A098537F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4E6411-EF70-4AFA-A5EA-B4B31E3B87FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49602924-B1C2-40AB-9711-582B910C5135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF326AC-1598-4E5D-9138-74C9BB07D217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59461408-E345-40BE-8E0F-F6A6963B3815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504AFF4D-A70A-4AEB-A4F6-01146BD7DAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.9.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "578537AC-BF31-43D7-B80A-B5AD235882A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477202B1-9A31-4C8A-9B22-B296BC413838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.10.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "AF978F65-E884-4814-8C37-38F699720069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D68FA7-8E9C-4F94-89AC-05389DB5FC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:2.11.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B650408E-4D7E-48C0-AF62-3C79DD5ACD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F663D5-2240-41BD-A450-AA6F5C329255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635041AC-ADB0-4B87-8C0C-DE2CC7E758C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEC05DD-9E41-4D78-9EDB-F086DFD0FD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ECE904-F0B8-4194-B35B-1A7404602CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09011058-0F31-4D8E-B1BB-3E3DC4437955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A48919-3F8F-41FC-9831-45766D3C3478"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/releases/tag/2.12.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mautic/mautic/releases/tag/2.12.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.197",
      "lastModified" : "2024-11-21T03:04:49.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de CPU en ImageMagick 7.0.7-12 Q16 en la función ReadPDBImage en coders/dds.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "60DE94B4-6F6F-4B10-949B-7B44473455B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102428",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/867",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.243",
      "lastModified" : "2024-11-21T03:04:49.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks."
      }, {
        "lang" : "es",
        "value" : "XMLBundle, en su versión 0.1.7, es vulnerable a ataques de XEE (XML External Entity), lo que puede desembocar en ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlbundle_project:xmlbundle:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E836E-3ADF-4296-AA4B-DD7136B2B183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pravednik/xmlBundle",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pravednik/xmlBundle/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pravednik/xmlBundle",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pravednik/xmlBundle/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.277",
      "lastModified" : "2024-11-21T03:04:49.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service."
      }, {
        "lang" : "es",
        "value" : "ELabftw, versión 1.7.8, es vulnerable a Cross-Site Scripting (XSS) persistente en el componente experiment infos. Esto resulta en la ejecución arbitraria de JavaScript y en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elabftw:elabftw:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3EBDF58-E219-4EB4-B1BD-AF5CC24B78B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/elabftw/elabftw/issues/531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elabftw/elabftw/issues/531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.323",
      "lastModified" : "2024-11-21T03:04:49.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set. This is fixed in 2.4.2-RELEASE. OPNsense, a 2015 fork of pfSense, was not vulnerable since version 16.1.16 released on June 06, 2016. The unprotected web form was removed from the code during an internal security audit under \"possibly insecure\" suspicions."
      }, {
        "lang" : "es",
        "value" : "pfSense, en sus versiones 2.4.1 y anteriores, es vulnerable a ataques de secuestro de clics en la página de error CSRF. Esto resulta en la ejecución con privilegios de código arbitrario. Consulte la primera URL de referencia para más detalles. Los créditos corresponden a Yorick Koster.  OPNsense, una copia (fork) del 2015 de pfSense, no fue vulnerable desde la versión 16.1.16 publicada el 6 de junio de 2016. El formulario web desprotegido se eliminó del código durante una auditoría interna de seguridad bajo sospechas de \"probablemente inseguro\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgate:pfsense:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "5C006D21-FD1F-4F0F-85CD-55537E0FE33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opnsense_project:opnsense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.1.16",
            "matchCriteriaId" : "FDCCA97B-00DB-43AC-BC67-BBCB357B9986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/22/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://doc.pfsense.org/index.php/2.4.2_New_Features_and_Changes",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opnsense/core/commit/d218b225",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pfsense/pfsense/commit/386d89b07",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netgate.com/blog/pfsense-2-4-2-release-p1-and-2-3-5-release-p1-now-available.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.securify.nl/en/advisory/SFY20171101/clickjacking-vulnerability-in-csrf-error-page-pfsense.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/22/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://doc.pfsense.org/index.php/2.4.2_New_Features_and_Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opnsense/core/commit/d218b225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pfsense/pfsense/commit/386d89b07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netgate.com/blog/pfsense-2-4-2-release-p1-and-2-3-5-release-p1-now-available.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.securify.nl/en/advisory/SFY20171101/clickjacking-vulnerability-in-csrf-error-page-pfsense.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.370",
      "lastModified" : "2024-11-21T03:04:49.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name."
      }, {
        "lang" : "es",
        "value" : "Smarty 3, en versiones anteriores a la 3.1.32, es vulnerable a una inyección de código PHP al llamar a las funciones fetch() o display() en recursos personalizados que no sanean el nombre de la plantilla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.32",
            "matchCriteriaId" : "079D6950-7B16-4224-A87F-3858874D9FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/smarty-php/smarty/blob/master/change_log.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00023.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/smarty-php/smarty/blob/master/change_log.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.400",
      "lastModified" : "2024-11-21T03:04:49.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on a specially crafted link. You would login, and get redirected to the site of the attacker, letting you think that you are still on the original Plone site. Or some javascript of the attacker could be executed. Most of these types of attacks are already blocked by Plone, using the `isURLInPortal` check to make sure we only redirect to a page on the same Plone site. But a few more ways of tricking Plone into accepting a malicious link were discovered, and fixed with this hotfix."
      }, {
        "lang" : "es",
        "value" : "Cuando visitas una página en la que necesitas iniciar sesión, Plone 2.5-5.1rc1 te envía al formulario de inicio de sesión con un parámetro \"came_from\" establecido para la url anterior. Tras iniciar sesión, se te redirige a la página que intentabas ver antes. Un atacante podría intentar provecharse de esto dejando que hagas clic en un enlace especialmente manipulado. Al iniciar sesión, se te redirigiría al sitio del atacante, dejando que creas que sigues en el sitio de Plone original. O se podría ejecutar también JavaScript del atacante. La mayoría de estos ataques ya están bloqueados por Plone, empleando la comprobación \"isURLInPortal\" para asegurarse de que solo redirigimos a una página en el mismo sitio de Plone. Sin embargo, se han descubierto más formas de engañar a Plone para que acepte un enlace malicioso, que se han solucionado con este hotfix."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B635DAD-AC53-4484-8750-200B662DAFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC93803-6506-4382-A013-18010EE7E06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65977FD-A880-4D16-B56B-94A72774F42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA5B4F8-2155-403D-97D8-1272285D508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CA2943-77E5-4384-A019-415BBCE62F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FF63F6-F1DC-4A97-A2E6-11CF613A31E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538A3519-5B04-4FE5-A3C0-FD26EFA32705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858CBC5A-C241-475C-8125-C5EA351B12A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3306D84-0F5B-46BA-9BCC-DCD0A1CDD604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08F4534-A588-463F-A745-39E559AB1CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64341BA-5722-415E-9771-9837168AB7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2929227-AE19-428D-9AC3-D312A559039B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6DC866-0FEE-475B-855C-A69E004810CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50BF3E8E-152C-4E89-BAA2-A952D10F4611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F88BF6-9058-4CB8-A2D6-5653860CF489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3FA2-15C3-444A-8810-5EF3E0E84D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F3B15A-CD0F-4CC5-A76F-E62637B30E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D913FCA7-4DAE-4E9A-9146-9AFA8472B04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C44B53B-953B-4522-A5B4-11573850D2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8883023-113A-420A-97B6-A4A9B29CF7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF4D113-8D9D-4DA3-A177-64783352F608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F9B699-D1A4-425C-84ED-6A8FD29BE7F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47321B60-67DA-4543-B173-D629A9569B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B36EB2-723F-4E25-8018-EEB2BE806D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7962EF74-6AC1-424C-A202-163AFDADA971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1818BB-E23A-4136-898D-1D0C80C08728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB06627-133A-40D1-8816-E31E0A9BAD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7E448A-2C0C-4DE0-89EA-904718CB6C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E727C5C-9E54-49F7-B92C-2492069AAE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD68465-4CDC-4788-8932-41335B5C4AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B739E0-FB73-401C-AB1A-E3C1434AA2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC8B987-5173-4C61-8DE6-B70C18EE6FD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA31E8-77EC-478B-BC6E-E2F145A8B9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE168A35-1A46-4A6F-8A08-25CDD886066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE0FC06-369B-46CF-9B1E-BAF7AF87E950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56571585-E9A2-4B78-B2B1-5D8EADED522A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDF8A15-401C-453E-8D09-8D4CDD4766DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B0B1CE-C0D9-495C-B4E7-E52A50BD6D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043B3CBE-DEA2-474D-AA57-1830A470B621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A6842B-B479-4D91-928A-1CCE1DCB936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875A368A-F1D6-4795-99CF-A96DBCD1D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5962C24-BC35-4E27-B81B-E2D21F83FB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BCE259-700F-4E39-8565-99E4DFDA6F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0755E5-2001-499F-90EA-6C2133D116D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5893527F-D365-4A39-9104-1B478804F0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBF50C9-1710-48F6-ADD7-E23C10385726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8DAC05-E1F0-4791-9B98-2AC0A370E885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191E3004-2D6C-4F15-99C5-6E9B78606712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C6DFBF-5CC6-49A7-BC83-E8F686815F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF9FB6C-134F-4653-8771-1BF46AB39344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E22BA768-96DE-408F-8979-4CC58B50A09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1672268D-2EFB-4D9E-99D4-AAEFEA659091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74DD4-27BB-4881-B324-B53336EF0648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6962EC-8398-4564-9840-AECB3E3D697D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE89FE6-DBF6-4CDD-BBA3-B34AEEAE6BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D341D6-AB11-444F-88FD-22303D1E3F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8A5BB-2F6A-474F-9DCE-0AF9E8E1D1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58165598-70DB-48AD-BD6E-793B103DC15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CCC319-0F03-4DD4-8D99-32402A1E2B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31894A8-1122-4212-8521-2E741321B6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862A10FA-5E6F-4AEB-89E9-279DEDE9F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "39E8A13F-B8F8-490D-AB5D-E8FF5EA0490B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD34F775-A365-4B65-8F60-F09EDD57B2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBCFF87-68FE-4A1B-90AE-DB0ABC814A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "811AB79A-14F9-46A1-BF30-8BFA65E555F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "F592B13B-6AC0-4E0F-9860-E7A9EC994EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCF80F-A850-4050-8540-99D9B514D6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plone.org/security/hotfix/20171128/open-redirection-on-login-form",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://plone.org/security/hotfix/20171128/open-redirection-on-login-form",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.447",
      "lastModified" : "2024-11-21T03:04:49.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page."
      }, {
        "lang" : "es",
        "value" : "Un miembro del sitio de Plone 2.5-5.1rc1 podría introducir JavaScript en la propiedad home_page de su perfil, y hacer que se ejecute cuando un visitante hace clic en el enlace de la página de inicio en la página del autor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "971A623D-32CD-41A2-9659-2A73787863AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "39E8A13F-B8F8-490D-AB5D-E8FF5EA0490B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD34F775-A365-4B65-8F60-F09EDD57B2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBCFF87-68FE-4A1B-90AE-DB0ABC814A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "811AB79A-14F9-46A1-BF30-8BFA65E555F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "F592B13B-6AC0-4E0F-9860-E7A9EC994EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCF80F-A850-4050-8540-99D9B514D6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T18:29:00.493",
      "lastModified" : "2024-11-21T03:04:50.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5."
      }, {
        "lang" : "es",
        "value" : "Acceso a contenido privado mediante str.format plantillas y scripts a través de la web en Plone 2.5-5.1rc1. Esto mejora un hotfix anterior. Debido a que el método format se introdujo en Python 2.6, esta parte del hotfix solo es relevante para Plone 4 y 5."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B635DAD-AC53-4484-8750-200B662DAFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC93803-6506-4382-A013-18010EE7E06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65977FD-A880-4D16-B56B-94A72774F42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA5B4F8-2155-403D-97D8-1272285D508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CA2943-77E5-4384-A019-415BBCE62F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FF63F6-F1DC-4A97-A2E6-11CF613A31E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538A3519-5B04-4FE5-A3C0-FD26EFA32705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858CBC5A-C241-475C-8125-C5EA351B12A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3306D84-0F5B-46BA-9BCC-DCD0A1CDD604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08F4534-A588-463F-A745-39E559AB1CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64341BA-5722-415E-9771-9837168AB7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2929227-AE19-428D-9AC3-D312A559039B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6DC866-0FEE-475B-855C-A69E004810CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50BF3E8E-152C-4E89-BAA2-A952D10F4611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F88BF6-9058-4CB8-A2D6-5653860CF489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3FA2-15C3-444A-8810-5EF3E0E84D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F3B15A-CD0F-4CC5-A76F-E62637B30E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D913FCA7-4DAE-4E9A-9146-9AFA8472B04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C44B53B-953B-4522-A5B4-11573850D2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8883023-113A-420A-97B6-A4A9B29CF7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF4D113-8D9D-4DA3-A177-64783352F608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F9B699-D1A4-425C-84ED-6A8FD29BE7F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47321B60-67DA-4543-B173-D629A9569B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B36EB2-723F-4E25-8018-EEB2BE806D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7962EF74-6AC1-424C-A202-163AFDADA971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1818BB-E23A-4136-898D-1D0C80C08728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB06627-133A-40D1-8816-E31E0A9BAD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7E448A-2C0C-4DE0-89EA-904718CB6C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E727C5C-9E54-49F7-B92C-2492069AAE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD68465-4CDC-4788-8932-41335B5C4AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B739E0-FB73-401C-AB1A-E3C1434AA2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC8B987-5173-4C61-8DE6-B70C18EE6FD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA31E8-77EC-478B-BC6E-E2F145A8B9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE168A35-1A46-4A6F-8A08-25CDD886066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE0FC06-369B-46CF-9B1E-BAF7AF87E950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56571585-E9A2-4B78-B2B1-5D8EADED522A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDF8A15-401C-453E-8D09-8D4CDD4766DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B0B1CE-C0D9-495C-B4E7-E52A50BD6D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043B3CBE-DEA2-474D-AA57-1830A470B621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A6842B-B479-4D91-928A-1CCE1DCB936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875A368A-F1D6-4795-99CF-A96DBCD1D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5962C24-BC35-4E27-B81B-E2D21F83FB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BCE259-700F-4E39-8565-99E4DFDA6F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0755E5-2001-499F-90EA-6C2133D116D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5893527F-D365-4A39-9104-1B478804F0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBF50C9-1710-48F6-ADD7-E23C10385726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8DAC05-E1F0-4791-9B98-2AC0A370E885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191E3004-2D6C-4F15-99C5-6E9B78606712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C6DFBF-5CC6-49A7-BC83-E8F686815F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF9FB6C-134F-4653-8771-1BF46AB39344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E22BA768-96DE-408F-8979-4CC58B50A09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1672268D-2EFB-4D9E-99D4-AAEFEA659091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74DD4-27BB-4881-B324-B53336EF0648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6962EC-8398-4564-9840-AECB3E3D697D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE89FE6-DBF6-4CDD-BBA3-B34AEEAE6BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D341D6-AB11-444F-88FD-22303D1E3F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8A5BB-2F6A-474F-9DCE-0AF9E8E1D1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58165598-70DB-48AD-BD6E-793B103DC15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CCC319-0F03-4DD4-8D99-32402A1E2B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31894A8-1122-4212-8521-2E741321B6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862A10FA-5E6F-4AEB-89E9-279DEDE9F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C7460-03B8-4F38-9DD8-404299F10E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "39E8A13F-B8F8-490D-AB5D-E8FF5EA0490B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD34F775-A365-4B65-8F60-F09EDD57B2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBCFF87-68FE-4A1B-90AE-DB0ABC814A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "811AB79A-14F9-46A1-BF30-8BFA65E555F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "F592B13B-6AC0-4E0F-9860-E7A9EC994EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCF80F-A850-4050-8540-99D9B514D6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plone.org/security/hotfix/20171128/sandbox-escape",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://plone.org/security/hotfix/20171128/sandbox-escape",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.220",
      "lastModified" : "2024-11-21T03:04:46.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_golomb(&gb) is called on an uninitialized get_bits context, which causes a NULL deref exception."
      }, {
        "lang" : "es",
        "value" : "En la línea libavcodec/h264dec.c:500 en libav (v13_dev0), ffmpeg (n3.4) y chromium (56 anterior al 13 de febrero de 2017), el valor de retorno de init_get_bits se ignora y se llama a get_ue_golomb (gb) en un contexto get_bits no inicializado. Esto desemboca en una excepción NULL deref."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:13_dev0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3C7FE1-23F0-4FB6-BDE7-1229B529D1DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDA7F5-FE3F-4D4A-AE46-43251194C127"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2924",
            "matchCriteriaId" : "B6487496-0D7D-47A1-9E6D-9D850A15B7E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=952",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://chromium.googlesource.com/chromium/third_party/ffmpeg/+/8e313ca08800178efce00045e07dc494d437b70c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.ffmpeg.org/pipermail/ffmpeg-cvslog/2017-January/104221.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://chromium.googlesource.com/chromium/third_party/ffmpeg/+/8e313ca08800178efce00045e07dc494d437b70c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.ffmpeg.org/pipermail/ffmpeg-cvslog/2017-January/104221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.283",
      "lastModified" : "2024-11-21T03:04:47.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the \"JS fingerprinting blocking\" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the browser intends to block)."
      }, {
        "lang" : "es",
        "value" : "Las versiones 0.19.73 y anteriores de Brave Browser, de Brave Software, son vulnerables a un problema de control de acceso incorrecto en el componente \"JS fingerprinting blocking\". Esto resulta en que un sitio web malicioso es capaz de acceder a la funcionalidad del navegador asociada a la huella digital, que el navegador intenta bloquear."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brave:browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.19.73",
            "matchCriteriaId" : "D6EA5995-B1D3-4A25-9316-AFC2CD4F92E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/brave/browser-laptop/issues/11683#issuecomment-339835601",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/browser-laptop/issues/11683#issuecomment-339835601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.313",
      "lastModified" : "2024-11-21T03:04:47.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "BookStack versión 0.18.4 es vulnerable a Cross-Site Scripting (XSS) persistente en la página page creation. Esto puede resultar en la interrupción del servicio y la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookstackapp:bookstack:0.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB0589A-8B75-4BCD-BE78-B709DE5E4B67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BookStackApp/BookStack/issues/575",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BookStackApp/BookStack/issues/575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.360",
      "lastModified" : "2024-11-21T03:04:47.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the \"add repo\" component resulting in arbitrary code execution as root user."
      }, {
        "lang" : "es",
        "value" : "Cobbler, en versiones hasta la 2.8.2, es vulnerable a inyección de comandos en el componente \"add repo\". Esto resulta en la ejecución de código arbitrario como usuario root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cobbler_project:cobbler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.2",
            "matchCriteriaId" : "0DCEB2CE-DA14-4FC9-902B-8B0ACD154C4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cobbler/cobbler/issues/1845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cobbler/cobbler/issues/1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.393",
      "lastModified" : "2024-11-21T03:04:48.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener resulting in denial of service."
      }, {
        "lang" : "es",
        "value" : "EmbedThis GoAhead Webserver, en versiones 4.0.0 y anteriores, es vulnerable a un desbordamiento de enteros en el agente de escucha HTTP. Esto resulta en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead_web_server:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1611E8-A324-48D0-84E5-1D23C703762E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/embedthis/goahead/commit/adeb4abc6c998c19524e09fde20c02b4a26765a3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/pull/258",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/commit/adeb4abc6c998c19524e09fde20c02b4a26765a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/pull/258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.453",
      "lastModified" : "2024-11-21T03:04:48.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service."
      }, {
        "lang" : "es",
        "value" : "EmbedThis GoAhead Webserver, versión 4.0.0, es vulnerable a una desreferencia de puntero NULL en el manipulador CGI. Esto resulta en una corrupción de memoria o denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedthis:goahead:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A44EBE0-D62A-445A-8D02-7CDBDFB70B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/embedthis/goahead/commit/5e6be61e42448f503e75e287dc332b1ecbf2a665#diff-7c9c60c790648b06210f57b9e2f53ca7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/pull/258",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/commit/5e6be61e42448f503e75e287dc332b1ecbf2a665#diff-7c9c60c790648b06210f57b9e2f53ca7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embedthis/goahead/pull/258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.487",
      "lastModified" : "2024-11-21T03:04:48.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a \"file path injection vulnerability\"."
      }, {
        "lang" : "es",
        "value" : "La función ZipCommon::isValidPath() en Zip/src/ZipCommon.cpp en POCO C++ Libraries, en versiones anteriores a la 1.8, no restringe adecuadamente el valor filename en la cabecera ZIP. Esto permite que atacantes lleven a cabo ataques de salto de directorio absoluto durante la descompresión ZIP y que, probablemente, creen o sobrescriban archivos arbitrarios mediante un archivo ZIP manipulado. Esto está relacionado con una vulnerabilidad de inyección de rutas de archivo (\"file path injection vulnerability\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pocoproject:poco:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8",
            "matchCriteriaId" : "18891BF5-075F-46ED-ABD5-A53CBEF562CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pocoproject/poco/issues/1968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00013.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4083",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pocoproject/poco/issues/1968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.533",
      "lastModified" : "2024-11-21T03:04:48.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code execution on the server, potentially as root."
      }, {
        "lang" : "es",
        "value" : "Linux Dash, hasta la versión v2, es vulnerable a múltiples inyecciones de comandos por la forma en la que se analizan y luego ejecutan los nombres de módulo. Esto resulta en una ejecución de código en el servidor, potencialmente como root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-dash_project:linux-dash:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "4FF0A2F6-0329-4C74-A295-143BD9E4F2D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/afaqurk/linux-dash/issues/447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/afaqurk/linux-dash/issues/447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.580",
      "lastModified" : "2024-11-21T03:04:50.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don't want to make it too easy for attackers by spelling it out here.)"
      }, {
        "lang" : "es",
        "value" : "Al enlazar a una URL específica en Plone 2.5-5.1rc1 con un parámetro, un atacante podría enviarte a su propia página web. Por sí mismo, no es tan malo: al atacante le resultaría más sencillo enlazar directamente a su propio sitio web. Pero, en combinación con otro ataque, podrías ser enviado al formulario de inicio de sesión de Plone, iniciar la sesión, ser redirigido a la URL específica y volver a ser redireccionado al sitio web del atacante. (La URL específica puede verse inspeccionando el código del hotfix, pero no queremos ponérselo fácil a los atacantes poniéndolo por aquí)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B635DAD-AC53-4484-8750-200B662DAFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC93803-6506-4382-A013-18010EE7E06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65977FD-A880-4D16-B56B-94A72774F42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA5B4F8-2155-403D-97D8-1272285D508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CA2943-77E5-4384-A019-415BBCE62F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FF63F6-F1DC-4A97-A2E6-11CF613A31E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538A3519-5B04-4FE5-A3C0-FD26EFA32705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858CBC5A-C241-475C-8125-C5EA351B12A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3306D84-0F5B-46BA-9BCC-DCD0A1CDD604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08F4534-A588-463F-A745-39E559AB1CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64341BA-5722-415E-9771-9837168AB7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2929227-AE19-428D-9AC3-D312A559039B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6DC866-0FEE-475B-855C-A69E004810CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50BF3E8E-152C-4E89-BAA2-A952D10F4611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F88BF6-9058-4CB8-A2D6-5653860CF489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AA3FA2-15C3-444A-8810-5EF3E0E84D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F3B15A-CD0F-4CC5-A76F-E62637B30E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D913FCA7-4DAE-4E9A-9146-9AFA8472B04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C44B53B-953B-4522-A5B4-11573850D2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8883023-113A-420A-97B6-A4A9B29CF7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF4D113-8D9D-4DA3-A177-64783352F608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F9B699-D1A4-425C-84ED-6A8FD29BE7F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47321B60-67DA-4543-B173-D629A9569B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B36EB2-723F-4E25-8018-EEB2BE806D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7962EF74-6AC1-424C-A202-163AFDADA971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1818BB-E23A-4136-898D-1D0C80C08728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB06627-133A-40D1-8816-E31E0A9BAD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7E448A-2C0C-4DE0-89EA-904718CB6C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E727C5C-9E54-49F7-B92C-2492069AAE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD68465-4CDC-4788-8932-41335B5C4AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B739E0-FB73-401C-AB1A-E3C1434AA2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC8B987-5173-4C61-8DE6-B70C18EE6FD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA31E8-77EC-478B-BC6E-E2F145A8B9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE168A35-1A46-4A6F-8A08-25CDD886066D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE0FC06-369B-46CF-9B1E-BAF7AF87E950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56571585-E9A2-4B78-B2B1-5D8EADED522A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDF8A15-401C-453E-8D09-8D4CDD4766DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B0B1CE-C0D9-495C-B4E7-E52A50BD6D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043B3CBE-DEA2-474D-AA57-1830A470B621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A6842B-B479-4D91-928A-1CCE1DCB936E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875A368A-F1D6-4795-99CF-A96DBCD1D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5962C24-BC35-4E27-B81B-E2D21F83FB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BCE259-700F-4E39-8565-99E4DFDA6F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0755E5-2001-499F-90EA-6C2133D116D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5893527F-D365-4A39-9104-1B478804F0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBF50C9-1710-48F6-ADD7-E23C10385726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8DAC05-E1F0-4791-9B98-2AC0A370E885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:4.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191E3004-2D6C-4F15-99C5-6E9B78606712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C6DFBF-5CC6-49A7-BC83-E8F686815F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF9FB6C-134F-4653-8771-1BF46AB39344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E22BA768-96DE-408F-8979-4CC58B50A09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1672268D-2EFB-4D9E-99D4-AAEFEA659091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF74DD4-27BB-4881-B324-B53336EF0648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6962EC-8398-4564-9840-AECB3E3D697D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE89FE6-DBF6-4CDD-BBA3-B34AEEAE6BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D341D6-AB11-444F-88FD-22303D1E3F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8A5BB-2F6A-474F-9DCE-0AF9E8E1D1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58165598-70DB-48AD-BD6E-793B103DC15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CCC319-0F03-4DD4-8D99-32402A1E2B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31894A8-1122-4212-8521-2E741321B6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862A10FA-5E6F-4AEB-89E9-279DEDE9F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "39E8A13F-B8F8-490D-AB5D-E8FF5EA0490B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD34F775-A365-4B65-8F60-F09EDD57B2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBCFF87-68FE-4A1B-90AE-DB0ABC814A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "811AB79A-14F9-46A1-BF30-8BFA65E555F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "F592B13B-6AC0-4E0F-9860-E7A9EC994EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCF80F-A850-4050-8540-99D9B514D6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.610",
      "lastModified" : "2024-11-21T03:04:50.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations."
      }, {
        "lang" : "es",
        "value" : "Nylas Mail Lives 2.2.2 emplea permisos 0755 para $HOME/.nylas-mail, lo que permite que usuarios locales obtengan información sensible de autenticación mediante operaciones estándar del sistema de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nylas_mail_lives_project:nylas_mail:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7A13E3-4884-4D70-8833-AC29B8EB79A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nylas-mail-lives/nylas-mail/issues/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nylas-mail-lives/nylas-mail/issues/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.643",
      "lastModified" : "2025-11-05T19:24:34.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution"
      }, {
        "lang" : "es",
        "value" : "Primetek Primefaces 5.x es vulnerable a un fallo de cifrado débil que resulta en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-10",
      "cisaActionDue" : "2022-07-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Primetek Primefaces Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:primetek:primefaces:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.24",
            "matchCriteriaId" : "9549E2A9-FA6C-49A3-9611-B91B383DD46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:primetek:primefaces:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.2.21",
            "matchCriteriaId" : "12489DFB-092E-473F-9AD3-76C21B056651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:primetek:primefaces:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3",
            "versionEndExcluding" : "5.3.8",
            "matchCriteriaId" : "25D57E05-0BCB-4737-BB8B-1495BD9CE3EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.mindedsecurity.com/2016/02/rce-in-oracle-netbeans-opensource.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cryptosense.com/weak-encryption-flaw-in-primefaces/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/primefaces/primefaces/issues/1152",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43733/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.mindedsecurity.com/2016/02/rce-in-oracle-netbeans-opensource.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cryptosense.com/weak-encryption-flaw-in-primefaces/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/primefaces/primefaces/issues/1152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43733/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-1000486",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-03T20:29:00.703",
      "lastModified" : "2024-11-21T03:04:50.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings."
      }, {
        "lang" : "es",
        "value" : "Plexus-utils, en versiones anteriores a la 3.0.16, es vulnerable a inyección de comandos debido a que no procesa correctamente el contenido de cadenas con dobles comillas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codehaus-plexus:plexus-utils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "7214D6BD-75D5-4F16-905C-98F8890BD888"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/codehaus-plexus/plexus-utils/commit/b38a1b3a4352303e4312b2bb601a0d7ec6e28f41",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2e94f72f53df432302d359fd66cfa9e9efb8d42633d54579a4377e62%40%3Cdev.avro.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9584c4304c888f651d214341a939bd264ed30c9e3d0d30fe85097ecf%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4149",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/codehaus-plexus/plexus-utils/commit/b38a1b3a4352303e4312b2bb601a0d7ec6e28f41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2e94f72f53df432302d359fd66cfa9e9efb8d42633d54579a4377e62%40%3Cdev.avro.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9584c4304c888f651d214341a939bd264ed30c9e3d0d30fe85097ecf%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-04T04:29:00.190",
      "lastModified" : "2025-06-09T16:15:27.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R -L\" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition."
      }, {
        "lang" : "es",
        "value" : "En GNU Coreutils hasta la versión 8.29, chown-core.c en chown y chgrp no evita que se sustituya un archivo plano con un symlink mientras se utilizan las opciones POSIX \"-R -L\", lo que permite a los usuarios locales modificar la propiedad de archivos arbitrarios mediante una condición de carrera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.29",
            "matchCriteriaId" : "219E71D0-3876-4C58-862F-F3565DA44179"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-04T04:29:00.220",
      "lastModified" : "2024-11-21T03:19:10.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory. Similarly, the product crashes upon a \\\\.\\K7Sentry DeviceIoControl call with an invalid kernel pointer."
      }, {
        "lang" : "es",
        "value" : "En K7 Total Security en versiones anteriores a la 15.1.0.305, las entradas controladas por el usuario en el dispositivo K7Sentry no están suficientemente saneadas: las entradas controladas por el usuario se pueden utilizar para comparar una dirección de memoria arbitraria con un valor fijo, que a su vez se puede usar para leer contenidos de memoria arbitraria. De manera similar, el producto se cierra de manera inesperada después de que se realice una llamada \\\\.\\K7Sentry DeviceIoControl con un puntero de kernel no válido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0.305",
            "matchCriteriaId" : "81F96360-A226-4B7B-8EC1-C7478205424C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3435",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14383",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-04T06:29:00.200",
      "lastModified" : "2024-11-21T03:12:40.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary HTML code in the user's browser session in the context of the affected web application."
      }, {
        "lang" : "es",
        "value" : "En Dell EMC en versiones VNX2 anteriores a Operating Environment for File 8.1.9.217 y VNX1 en versiones anteriores a Operating Environment for File 7.1.80.8, una página de error del servidor web en VNX Control Station se ve afectada por una vulnerabilidad Cross-Site Scripting (XSS) reflejado. Un atacante remoto no autenticado podría explotar esta vulnerabilidad para ejecutar código HTML arbitrario en la sesión del buscador del usuario, en el contexto de la aplicación web afectada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_vnx2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.9.217",
            "matchCriteriaId" : "2818A98E-B31B-4243-B85E-DD236199E4F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:emc_vnx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF905D70-D7F1-460E-ADB4-5CBC545F0852"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_vnx1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.80.8",
            "matchCriteriaId" : "5311A6A2-CC90-4EE0-8E1E-540C50273E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:emc_vnx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F02128F-AC91-431F-84AD-5D42281640E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/87",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Dec/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-04T06:29:00.263",
      "lastModified" : "2024-11-21T03:19:11.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598."
      }, {
        "lang" : "es",
        "value" : "En dispositivos móviles Samsung con software L (5.x), M (6.x) y N (7.x) y chipsets Exynos, los atacantes pueden ejecutar código arbitrario en el cargador de arranque porque S Boot omite una verificación de tamaño durante una copia de los datos ramfs a la memoria. El ID de Samsung es SVE-2017-10598."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13E2E2D-41E2-4CF7-A019-6B462A614271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99CD57-C55D-4812-8F9C-5ACE7555C086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A993DFAA-9353-4F25-A86E-F1522B2D4A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD6EA64-6B65-4487-914F-9EF9CBB78211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86CCF16-38D3-4453-AA5A-B51743692579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4422C-42D0-47CA-A8B7-0DFF0652363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088A46CD-DA84-4DFA-ABCB-95E6D82DCE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F08AFFF-8310-4CCE-97A1-872CAA97E26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:samsung_mobile:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC76BE55-8569-4C11-BDF7-DB9AD2783313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8046",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-04T06:29:00.307",
      "lastModified" : "2024-11-21T03:33:12.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code."
      }, {
        "lang" : "es",
        "value" : "Las peticiones PATCH maliciosas enviadas a servidores que utilizan versiones Spring Data REST anteriores a la 2.6.9 (Ingalls SR9), versiones anteriores a la 3.0.1 (Kay SR1) y versiones Spring Boot anteriores a la 1.5.9, 2.0 M6 pueden utilizar datos JSON especialmente diseñados para ejecutar código Java arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.9",
            "matchCriteriaId" : "2D178DD5-5C7C-4954-AE5C-7805EEE0869B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:2.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "141F2C99-AD34-4003-81D4-689F3F1A53ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:2.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "D7929E66-FCA2-4D1B-B29F-55BF70AF70C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:2.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B93CDA-E5D9-4955-910A-22B38779F23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:2.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "F324F68E-CF50-4F2E-90E4-3620CE05A944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:2.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "C120785F-A827-4870-B33B-679367A9EB20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.9",
            "matchCriteriaId" : "D9D3B917-F9C9-417C-830E-475DBFB58D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3CC672-C90E-40FD-890F-93C4F5338513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "360B3EDD-18D5-44D7-A998-89F55DD9F5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "95140537-ECA9-4A68-BD05-AEE47C36DD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:m3:*:*:*:*:*:*",
            "matchCriteriaId" : "47F7A32E-5F18-4651-842D-968FE380AA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:m4:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCDFF26-CF5B-44A6-8EDE-0A5353C669DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D52612-B862-4B71-A7CA-03A32CB3B0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE7C06-D620-4AB2-8388-4A9CCC6C5A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC56E79-77CE-4AFA-AF93-1B9FADE9F3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100948",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2405",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8046",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44289/",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pivotal.io/security/cve-2017-8046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44289/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5715",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-01-04T13:29:00.227",
      "lastModified" : "2025-05-06T15:15:51.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."
      }, {
        "lang" : "es",
        "value" : "Los sistemas con microprocesadores con ejecución especulativa y predicción indirecta de ramas podrían permitir la revelación no autorizada de información al atacante con acceso de usuario local mediante un análisis de un canal lateral."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD028C10-FD07-4206-A732-CCAC1B6D043D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2316:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704FAA50-1B7D-4917-AC4A-4C58785340F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B95D3-75BD-4826-BFBE-9701CC0FF052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66E31A6-EA01-40C8-8718-CE2C1F45EEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBE3B05-2063-49DE-A1D3-9D0A62E0CF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F2CBE-EFB1-4962-AC91-D25AAB057DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2516:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C05CD9-551B-46EE-85F8-D18FF878FE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCCB5A5-20E3-4EC5-956C-EA7C0F33A026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C38C609-242E-4923-A81F-DAFBE7B6A927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2538:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB08B5-7CBA-479A-A41B-FD8A6D9E0875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C4FDD7-F2EC-4EDB-ACC9-3D6B9152C855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51DD0B-1EED-4BE9-B0A7-BE2E91CCA84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2718:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AC7C56-2205-4121-99E2-001A7488E0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1677313-FF8F-493B-9DA3-C78F87581A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2738:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2A3CCE-FA57-43B5-B7DE-CFD0CC2ECD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CA4444-5103-4451-8A7C-F6BBE714BBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1EB745-46D7-4088-93C6-E7156520B144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93010C0-33B3-438F-94F6-8DA7A9D7B451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A988A78-6B3D-4599-A85C-42B4A294D86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7C5EF4-3A92-4AF7-9B11-62B4FFDC5128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3538:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246AA1B0-B6C8-406B-817D-26113DC63858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE5B42-FF05-447C-BACC-0E650E773E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3708:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0779CC9-BD39-4E0B-B523-A6C69F9EBB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F0E3C4-7E9B-435F-907E-4BF4F12AF314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D616C72-0863-478C-9E87-3963C83B87E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC333B0D-3A0E-4629-8016-68C060343874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655535C-FF64-4F9E-8168-253AABCC4F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EDEA1E-9A19-4B3F-806E-D770D1AB4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3858:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD68F3F-7E38-40B9-A20B-B9BB45E8D042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EACEF19-83BC-4579-9274-BE367F914432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3955:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC73291-AA6F-40B0-860A-1F2E6AB1E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24128A7F-2B0B-4923-BA9E-9F5093D29423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0990DD71-9E83-499D-9DAF-A466CF896CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7FEDEF-9772-4FB1-9261-020487A795AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3825:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B0F72-DEDF-40C4-887C-83725C52C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3826:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9568C222-9816-4520-B01C-C1DC2A79002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3827:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2F8FAD-1688-4369-BB4B-9FA9F30A80A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3845:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A1F23D-7226-4479-B51F-36376CC80B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB245C8-9918-41A0-9DFB-A11E4185C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3200rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9990DD08-BD81-4BFA-B3D4-0DECBF8CCC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3205rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F752A3C8-18ED-4765-B6EC-C664154EB701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3230rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F31C3F-7C0D-4D95-B4B9-89FD38076913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3235rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEEE36E-E735-4A33-80B7-9407D072F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3265rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB3D3DE-21BE-40C7-A510-AC97C92390DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3295rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9A9545-38A3-460D-AB1A-8B03BEB405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3405:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1860D932-777D-41F2-94A2-D14AB1494AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3445:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75165A10-2FD5-4370-814C-B60FDE339AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x5-e3930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454AC633-5F1C-47BB-8FA7-91A5C29A1DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x5-e3940:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2394E8C-58D9-480B-87A7-A41CD7697FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x7-e3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9AC02B-D3AE-4FAF-836E-55515186A462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AAC7A7-77CA-4C6C-BD96-92A253512F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD16C07-0050-495A-8722-7AC46F5920F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01423706-C82C-4457-9638-1A2380DE3826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A881E2D3-A668-465F-862B-F8C145BD5E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5B9B98-0EF0-4ACD-B378-F9DE5AB36CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDC6806-E4FC-4A6E-A6BB-88C18E47ABFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6602DD69-E59A-417D-B19F-CA16B01E652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C493EE-EF9F-47E2-8F88-86DF6C5F1FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40010DAE-DD1A-4A81-B6E9-EDC1B0DDCAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED96AC16-12CC-43F6-ACC8-009A06CDD8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9DC29-C192-4553-AF29-D39290976F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F625E647-B47E-404C-9C5B-72F3EB1C46F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AF3279-89E7-4C91-8C5F-5AD5937CD0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5878612-9825-4737-85A5-8227BA97CBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F453D348-28CE-402B-9D40-A29436A24ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36322F4B-83D7-468A-BB34-1C03729E9BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD22811-C3C6-4B5E-98D5-D3F2240E6C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C7D0BA-8F07-42AD-8BB9-C65472BE41C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3736f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A2A50E-94FA-44E9-A45D-3016750CFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3736g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5625CAD8-4A62-4747-B6D9-90E56F09B731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A234CE-D6AA-4A32-8425-1A4DDA0F6B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3740d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE1A01-3AEF-41E6-97EE-CB93429C4A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3745:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410184AF-B932-4AC9-984F-73FD58BB4CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3745d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B265F073-9E0A-4CA0-8296-AB52DEB1C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F664223-1CBC-4D8A-921B-F03AACA6672B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3770d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987A8470-08BA-45DE-8EC0-CD2B4451EECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3775:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBC9542-FB77-4769-BF67-D42829703920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3775d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74FDC18B-4662-422E-A86A-48FE821C056F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3785:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB4AA2C-D1D9-44D8-9471-66EBDE9DC66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3795:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA3E7AE-CB74-48A8-A2B8-9FCADB6E40D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E4461B-72F8-4F3D-A405-4AFA99EC8A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663DDC1C-E48A-4E84-A6CC-B46FC45D6A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEC75B-10CE-4B7E-BA5F-6D661EC07FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEDED56-9387-4DAC-BF52-C32ECCB7D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA13F31C-BBD9-48C7-8499-92D0B5CA8CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57A9B28-734B-401D-B24C-A295F364D8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3355:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02289DF-4A02-4602-89B7-E9148236EE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723E7155-493D-4B5A-99E2-AB261838190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j4005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E37264-E4BA-4D9D-92E7-56DE6B5F918F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j4105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8704BE6D-2857-4328-9298-E0273376F2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731F1E65-1D53-443B-8E2F-8AF11191AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2806:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A83822-822D-4A4D-B29B-A5BE6367A7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C32738-F08E-469C-8DE0-2708F30574A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B292187E-8EAD-49D2-B469-B14CA0656035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D131E1-24C1-48CF-B3DD-46B09A718FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABF1231-73CF-4D1B-860C-E76CD26A645E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F88E38-4EC4-41DB-A59D-800997440C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FD6647-4101-4B36-9A9A-F70C29997148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2840:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D248D668-A895-43B3-ADEF-1B22EE7DC76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858411B5-E904-45FA-8B33-5CC73B915B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2920:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB9336C-C893-4AB0-9402-868CE9960058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4695F94-7AAE-4219-9EF6-CE6D0838192D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2940:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A0991-73F0-410D-855C-BFC88A66E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF5CF9A-B3F2-4686-B933-7DB13AD2CF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9858EAC3-C1CE-449B-A605-FFA337DA825D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8F905-A4C6-4EC6-B9E8-800948350B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565B48E3-1406-4E3C-B4A5-35865C5614E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B6C4D7-B0A2-4DF1-B8DE-19C806D5FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB82A90-C0BC-4BA8-88CA-4967BC3A4A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A094B-E354-4767-AD43-87CE140BF851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1289B9E-5725-42EF-8848-F545421A29E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n4000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238A21CB-F8C5-468B-B523-6D014E2EA8AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n4100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC52CDD-614D-4EA0-8DA8-D71189C42E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4229DB2-8BBC-49F8-87A8-2E7D56EFD310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBA7322-4D95-4E70-B6A5-E0D8F1B5D7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E91F46-D950-4894-BACF-05A70C7C6F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:350m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E12B40B-5221-48A6-B2A6-D44CD5636BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:370m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCB77C9-ABE3-44A0-B377-7D7035E8A11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:380m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06639F5-5EE8-44F4-B48A-5694383154DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:380um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9662C9-59D3-4B3E-A4DA-4F1EE16FC94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:390m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637C3687-FBCC-41A0-BFE6-823BAE45FB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2350A197-193F-4B22-80E8-3275C97C78EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734C7A7E-ACCA-4B34-BF38-0FAED988CC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9ABAFC-B3B5-449D-A48E-2E978563EDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99019EA0-6576-4CE7-B60A-975D418AA917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E846AEF-751D-40AD-84B5-EFDC9CF23E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9DD909-B2AC-46BA-B057-D239D0773CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F5C355-FDFC-4E71-93AA-218389EF10E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A1CA1E-971D-4F67-864E-2E772C1E736B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2115c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5F8391-D974-49AC-8550-ADB3FA6C0535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8302BF58-9E54-40DA-BCFE-59CA52C460D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2120t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCDE9EF-037B-4650-8131-4D57BE141277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BA9DA8-F690-4E3C-AEF6-6A5C7BAA6F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8253DA-9A04-40D6-84C1-C682B4023D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2310e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF6D175-85C3-4C72-AD9F-31B47EF43154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5FC594-2092-4240-9538-235BBE236DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2312m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D95F00-EA89-4FDE-991C-56636B8E0331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2328m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C40D38-F7F2-4A48-ADAA-6A8BBD6A1A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2330e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4158561F-8270-42D1-91D8-E063CE7F5505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0DEA96-0202-41EB-BDC3-24E2FC4415B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2340ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BACE1C-5D66-4FBC-8F86-30215A623A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2348m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF707146-0D64-4F3A-AE22-956EA1CB32B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2350m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8118C3F9-0853-4E87-9E65-86E1398B2780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2357m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A298501-C4D7-48D4-90F9-15AFA59DED48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2365m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE1B07B-3D92-4D2D-8667-D902F002277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2367m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F05CB19-1059-4C4D-BFD7-9F51A22A4F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2370m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5588732F-7F1A-4C24-B35F-30532107FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2375m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A127DD5D-426D-4F24-A8C5-DC9DAC94B91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2377m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EE0BBD-3982-4B0F-82F6-D58E077C75DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEEC918-EA25-4B38-B5C3-85899D3EBE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3115c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813965F4-3BDA-4478-8E6A-0FD52723B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3120m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5EA2F4-F3EF-4305-B1A1-92F636ED688F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3120me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04384319-EE8C-45B4-8BDD-414502E7C02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3130m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52528CE-4F31-4E5F-8255-E576B20F3043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C3F422-F865-4160-AA24-1DAFAE63729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3217u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D034E7F-4D17-49D7-BDB2-90CB4C709B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3217ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C18E6B4-E947-403B-80FB-7095420D482B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2814CC9F-E027-4C5A-93AF-84EA445E6C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3220t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A470C3-AAAA-4A6E-B738-FEB69DB78B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3225:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1236944-4942-40E4-9BA1-029FEAE94BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3227u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086CAB4B-A10A-4165-BC33-33CADCD23C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3229y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A6A1EB-B3AB-4CB4-827E-CCAAD783F8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFB6B30-BFB0-4397-9E16-37D1A772E639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3240t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCB9D7B-7D0A-435D-8499-C16BE09E19FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3245:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64277594-9713-436B-8056-542CFA9F4CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589BB170-7CBA-4F28-99E3-9242B62E2918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3250t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9C4D9-DA09-4377-9DCD-225857BD9FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4000m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D0265F-840B-45A1-90BD-9ED8846A9F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BAC0EC-2B38-4553-A399-4BD5483C4753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4477EBA6-F0A7-452B-96E8-BA788370CCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1285D817-B5B8-4940-925D-FCDD24810AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4012y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D289F7B4-27CD-4433-BB45-06AF98A59B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4020y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00168903-6012-4414-87D1-2EE52AA6D78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4025u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE8D524-577E-4994-8A4B-D15022C84D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75977B0B-C44D-43BC-8D7A-AF966CDB1901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7F5D52-9F41-49A4-B941-E0D777203FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B5B3FD-5BEA-4DE8-B010-55FED1547167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167B1B04-5823-4038-A019-3975A3B447C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C7A4EA-0B5E-47CD-8924-3B1B60EB4BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA096E0-5480-47CB-822B-D11D7E20F69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30357469-0B8F-4385-A282-2F50181EA442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE70772-7796-4594-880A-6AAD046E4D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4112e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9E2F8D-2974-4833-9EC2-233CEE257C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4120u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EE3078-454F-48F8-B201-3847DB40D5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE32C500-55C2-41A7-8621-14EBF793BF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D3DF52-501A-4656-98F1-8DD51D04F31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA603AD-6CF1-44B2-876D-6F1C0B7EF2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578301-CF39-4C24-951A-535743E277EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4158u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4D14AA-7DBF-4B73-BDEF-6248EF5C0F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A65F303-96C8-4884-8D6F-F439B86BA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E046105-9DF5-425F-A97E-16081D54613C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2987BCF-39E6-49B6-8DEE-963A38F12B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEDE2B7-9AA2-4A14-8A02-9A2BFF0DDCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD92AD8-033A-4AAD-91E5-CB446CCE9732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0E73A-F1B4-4E70-B9F1-EE97785B8891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D6E3CC-79B1-4995-9A76-41683C7F254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CEB2B1-BD1A-4B89-8E03-4F90F04A0F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE5773D-3CD1-4E63-8983-E0105C46D185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7C307A-6576-4A0A-8F4E-0981C9EE2901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B3A53B-902C-46A5-8CE7-B55102703278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB843479-729A-4E58-8027-0FC586F051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5A233-1E77-49FD-AC2C-60D185481E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18519CF2-B0DA-42DD-8A3E-9084298C210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329D5FCF-7EC5-4471-906B-3619A180BD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD43EAA-F3A5-4748-9187-A6E6707ACD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F3C14D-4BFC-4205-8781-95E6B28C83C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5015u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20942AD8-ADB7-4A50-BDBE-DB36249F4F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5020u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC6ED02-134B-4322-AB72-75A0AB22701E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA74EEE-54CC-4F80-B1D3-99F7771335ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B859F7-0373-4ADD-92B3-0FAB42FCF23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC76F31-00A5-4719-AA50-92F773919B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49996F5A-51B2-4D4E-AE04-E98E093A76CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8406B0-D1E5-4633-B17E-53DC99FE7622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D49435C-7C33-454B-9F43-9C10F28A28A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17E1A0F-1150-4899-81BC-BE84E4EF5FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADD98AE-BAB0-440D-AB9F-2D76BE5109E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED44A404-8548-4EDC-8928-4094D05A6A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6E4AA3-BEBC-4B14-9A52-A8F8B2954D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AAD8F0-0D31-4806-8A88-A30E5BE43630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8164EE5F-6ABA-4365-8718-2F98C2E57A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7110AF9-A407-4EE2-9C46-E5F1E3638E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A06696D-37F0-427D-BFC5-1606E7441C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F8A5FC-5EFE-42EC-A49B-D3A312FB5F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:8100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A76015-0A05-4EC7-B136-DC13B55D881F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:8350k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C352DCE8-E8D9-40D3-AFE9-B5FB84F7ED33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:430m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54464F6C-9B2D-46BA-AC44-506389F3EE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:430um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA11017-EA58-45EE-8408-FCCCF7183643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:450m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5098A5-E4E8-47E4-8CD0-F607FF0C0C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:460m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442AD778-D56F-4C30-BBF8-749D6AAC4737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:470um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7D3F31-AF4D-4C50-8590-A763AAC7AF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:480m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445BFC2E-38FA-4130-8550-0866EC4EDA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DC2746-CE41-40C9-8CFA-23231BBCAE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3A8976-5E4D-490A-A87D-A47D1B2B903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8535E6-220E-4747-8992-45B6EAFC555C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7479B49-F484-4DF2-86CB-E52EE89FA238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:540um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D68512-746D-4E95-857B-13A0B6313C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:560m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4312BA84-F9A0-4BD4-8438-058E1E7D6C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:560um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E52DF5-C713-4BC4-B587-FF6BDA8509CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:580m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304ADCAC-9E49-42BD-BC92-58D9B2AD52E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB02172-B9A7-4801-88F2-98BF5843184A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:655k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5141380E-BD18-47C1-A84C-384BA821773D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE6C49E-2359-4E44-9979-7D34F8460E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:661:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C004B75F-37AF-4E61-98F3-1B09A7062DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7126D19-C6D9-43CB-8809-647B1A20E7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC98503-A80A-4114-8BF2-E016659BE84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E6F4A7-24BE-4AA0-9CDD-84FBC56FE9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:750s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3821412D-B010-49C4-A7B4-6C5FB6C603B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CA5CC-9EB1-4063-8B9D-3F566C1EFF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEB5D2D-FF54-4BDB-9E9C-8C1B2719FC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD5B51A-AEA0-4DA2-BA60-94A2D5605352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C6CA0-434D-428F-B629-A971C2937628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2380p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301AB72A-A6F2-42C8-A931-94EF2271443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2390t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59414B5A-05B8-49AF-A197-2A31729DDB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFDD380-692F-41D7-996F-F97FC74DC7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2400s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49602828-2BFC-4571-9F05-6210FD263DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2405s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E03978-E16D-4A9B-8AE7-9F4F1171C14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2410m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03096A9A-5758-47E6-81E2-BCFE847C41F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2430m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150CC865-7975-45EC-BFF7-A94146442BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2435m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FA1308-589B-432B-80F9-9A499D083ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2450m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED2453E-30E1-4620-BEC5-21B0083449E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2450p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE8DD05-D700-4F89-9B01-D489029DF7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2467m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050957CA-6191-4F9F-9D07-48B342B3B1B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACBF998-8B11-45C7-9017-486AED4FAE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F2F3C4-FC94-414A-A208-913A43D57D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641152EC-F4B4-4E5E-B396-AC4CAAB805BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4911E332-B8BA-4336-A448-3F70D2BBB147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2510e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330EC403-3174-4543-9BBE-CEC0ABC1575D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2515e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF585D0-507E-491E-9C3B-78EE26F2F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD00F7C6-6762-4DC9-9F6C-5EAC4ACB1C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2537m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5D885A-85C4-4A11-B061-61EFF6B6E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0502B59F-933C-4E25-A2EC-9296B197E139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2550k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D9C0A9-2DFF-4760-8FED-AC2DA7968E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2557m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A1BAEC-18BF-4607-BFB7-48102E75186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49ED138-F42D-4451-A350-0B2DD5AB9444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3230m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED91472-90FC-4AC8-96D5-1550A8502411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3317u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57CEEFA6-CEED-4CA3-8DDC-B6601D69FB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3320m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD25ECD-0605-4CD7-9DC5-294ACD7EF1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784E2AF-A5E5-4960-830C-B3EFB84043D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3330s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9112FA50-5527-4B20-80F5-2DE9E66D09F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3337u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CE4E2E-B2BF-409E-B18C-D67DA810FE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3339y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B84D67-0B1D-4B74-BC85-AF8F933D8429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA05A18-1523-4EED-9D2E-0A258A33F24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34E70EB-92F0-43F6-8883-FE422BE1A3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D301F1-20C2-4756-9A90-37F14835CE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3350p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EEC8B5-1CAB-4FBE-BBA2-D2FFA3EF9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3360m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA63B803-4D48-42E8-A793-F92ABCB8BFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3380m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129DB9CB-E878-4856-A954-15FFE1428636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3427u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730DB4AA-FD7D-40C6-8D7F-19937832EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3437u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E86978-4820-422A-8C7C-FF0697DAED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3439y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7A9DB5-F544-4FD8-A9CC-0BD6257516AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF813AD9-D296-4915-861C-8DE929E45FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3450s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A65469-083F-40B5-86C5-A2EAE5B2F00A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1AA82E-BD86-40F5-B417-71DF6AF53A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71A6DB0-5EB0-4712-8480-CF427F521D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8223D5A1-ADF1-43C6-AF91-EE5C413BCB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3475s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD69605-F52B-4623-921A-983A5A408ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D5685F-6FFE-4A6A-9FF8-940C8DA36499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3550s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94062D9-8DDA-4B4A-B3B5-07F71F5B97E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3832D0A6-419D-4876-B5C4-920578F713F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA5C8A-83A8-4F96-9D7C-7A50ADDB2341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404E38E6-9EB3-41D0-97A7-DC579688BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E4A921-AB28-47B7-B5A3-EB82193D15BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3610me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0357E48-2300-47B4-B9E5-9FE813A2FC09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CC28B6-57D1-4919-AA55-A262CC16AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB4C54D-1265-425A-B507-E1099844875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97362147-3A71-430D-9064-4435D45C3B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89212CF3-4E99-4389-94CE-F4211DDCA01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4202y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEA4DA3-0AFB-4FCE-92DB-5B316775BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611C0A0A-1FA3-42F9-82E8-BFCB71A077DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F027D9-DCB4-4A3D-8987-41F2941DBD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BCEC9-2BFB-4B41-9A7A-18B1347C6202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4924CE39-A846-4DB4-9547-6322FC5AD6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4220y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9E2C9A-94A1-456B-90D5-54932DF64C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC04C652-B2D8-4002-A50E-8AFE83204A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4258u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D413F0-CDBC-4A63-B9A7-9E7725BA1E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A8826-59F7-4A71-B74B-737BE9C7DE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4278u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB6BDA-6825-489B-AB39-7729BA45DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4288u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7913F57E-E600-4767-AF51-D045E1898E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3783F4-5A05-45AA-9791-A681011FD78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3114D-31D2-4DBF-A664-F4049D8B6266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EE6578-981D-470C-BB24-4960B3CB1478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4302y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3320D50-C5C9-4D75-BF1A-5BB7BCBFE2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4308u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE59839-8EB9-47FE-88E2-F0D54BE787A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75694A3D-080A-4AA7-97DF-5A5833C9D9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C5E27D-BBAB-4395-8FC6-8E3D4FB9A1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E996176-3DEA-46E6-93B7-9C0DF32B59D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4417007D-126A-478B-87EA-039D088A4515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78C2825-F6A3-4188-9D25-59EAEC8A7B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2FA85D-B117-410D-B247-8C5A3479319A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4400e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A041D27-132C-4B15-976F-1750C039A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D495E06-BF2B-4C5A-881D-94C93CD2BA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C31DFB8-8D8C-47D6-AAFF-BAE829A3D965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4410e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088BC395-06D5-4156-85EB-63C4A9552898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4422e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A220A2-A6D2-46A7-B168-607400EEDCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E79232F-7196-440B-82D4-165885251232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED866954-77AB-4CA8-8AED-4252C595FC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A1F516-B180-45D4-8EB1-754B7497CB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36758A04-64D3-4150-A004-CF042FA31CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E01752E-F1DD-400A-A917-216CAF15B0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD47EC58-F776-4F59-8F15-4B208904CF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3781F4-2123-4FA1-8AF5-D0D1E6C1A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94565E35-8A58-4CB6-A489-C796DCB97FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49964D35-5323-4412-BD54-661630F9A8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A37E7D-1BF6-4A2A-BF52-5F0EC4B4F341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F66468-87D0-41FC-934B-5924BE2956CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E0F93E1-4607-4DF4-AC6E-4B7254D4A8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C0D99E-443E-4AB1-A07A-900A09FE177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D0FD76-C1FB-43D0-8511-FC0BA6DA7960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DAEE52-09C3-4A09-9958-9D6807B2700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97690D4-E814-4D40-B170-BE56D7AE2C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89804F2C-D32D-4444-ABEA-5B241153D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAAAF9C-B29B-4020-BAFF-C87B1A08294A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE60E1E-AB8D-46E4-A779-A54F2D20B5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB958A28-7C9A-4BD0-B002-4E1A65CDB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C27B318-2AC1-423D-B0C8-583BB1800D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E58E3D0-1154-4B13-BA16-67CE67DF0637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D2ACB3-B906-4944-A021-03C4645965BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFF834A-D7F0-4E48-AD3D-DD0BCE6DEC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1A41BA-A1D6-484A-BAD2-68DF85598354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11260C9D-69A9-4D81-9CCF-2E116DD75F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5257u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C020F06-FD27-46E3-A48F-3F60F33BB969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C74F10-6A7F-4F68-8A34-E981E1760DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24741B98-8D0E-4307-AAEF-A14B2531DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4FA4BA-4304-4A70-9F86-120F2A3D8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367FC8BA-F046-4264-A049-49E933E7698F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5575r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9B68D3-1DFB-4468-85C4-AC13E6CBC111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C966A016-B650-44D9-B8C4-1ED50AB318DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC448FF0-6D3F-4609-864B-4191905EE2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC246FE-4CA6-4B2D-83C3-D50A386C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758A14DB-1BAF-442A-BA7C-5E9C67847BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61309100-CFA7-4607-A236-8910838AA057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D76265-7BD0-4C51-AE77-22B22524DE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38B195-BB8D-4747-881D-E8033760B4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA8BE76-168D-48A3-8DF6-E91F44600408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B656975-5D71-4712-9820-BDB7BC248AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA045267-114D-4587-B6D7-E273C28DC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77018415-E122-406E-896D-1BC6CF790BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADF37F1-546B-4EF0-8DEC-DC3B9F5309FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7469256-1A64-46FF-8F5A-A8E9E3CF5BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9069B9-9FE3-4AD5-9A8E-55C0F73BD756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E1C012-3E05-44DB-B6D2-BFD619C034B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D689D6-8594-42F2-8EEF-DCAEBA885A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6446000-0494-4DC5-ABAA-F20A44546068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B94EEC-6690-45D0-B086-F4A5B25C25CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B767B6E-B3E6-4424-97A6-89A7E7EB0EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832AB3CD-E3A1-4CCB-A210-287973563D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A26C0CC-68AD-40F5-96B8-87E6C643F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C4221A-9994-43B3-9C7A-E13815A50A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20070B1D-B91C-40BA-A9D8-E80170A2933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70129C9-371F-4542-A388-C095869E593A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4DE25F-168A-4C67-8B66-09F61F072BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58157F24-D89E-4552-8CE6-2F01E98BD1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7FFD78-1E1C-4246-BBD3-73FAC06AA46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ACBBEA-EC95-4F3E-B585-893DB6D21A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEC55DF-1950-45E5-A5F2-B5604AFA1CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:610e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A5EC79-1B21-4BB3-8791-73507BC8D4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB4AFC3-FE30-4F46-ADC1-D03EB14E757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0387587-AAB6-4284-8516-4DA3E3582D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A238C975-9196-449F-9C15-ABB2E9FD1D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F17F4A5-120B-4E00-97C8-8A85841ACBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2537F047-64C9-4E73-B82C-310253184183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A55857C-649D-46CE-AEDA-6E553E554FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA4892D-AFDF-4441-821E-5EBF7F64C9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327E06A3-7F0E-4498-8811-10C8D15398FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1624E6D6-858E-4085-B0B9-362B819EFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D61F4A-40F0-477C-8326-7359D3626E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1455B4DE-7F1C-4CF2-AE02-2EDD20025D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:680um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B215788-860B-46CD-9A08-43AFF98FAEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B92FAD5-CA6E-48F7-9613-3A4CE90F5F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:740qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EB132B-000C-4A17-AFB3-19F40A73D2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4815AE-B635-4545-83C2-5EC4E0128337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:840qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0046C06-E3E6-4674-A4D1-332DD29D9552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C191851-3DC3-41C7-AD89-81F091CCC83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:860s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21126922-8E81-47F4-82D4-CBCDDACEC4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209E18B0-BBB5-4C65-B336-44340F7740DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:870s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C867C0B8-91A4-482A-B7DD-54AB9599AE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:875k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F03843-8A51-4CE1-BE6C-994BDE3A8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:880:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09854948-2657-4261-A32A-0523058F072E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:920:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13904A5-266D-481C-A42A-734C3823A238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:920xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC82FCB-0541-45C4-8B7E-CB612D7F702A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C18BD84-5E9C-4C9E-B0AA-2CEB0D7A58C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:940:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5ABC7E-C4E0-4850-A1E6-07EBCF4A87D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:940xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501E9355-0CDD-4951-BCC3-47962788BCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D976D9-62F0-43C3-8359-E51E26B6CD87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:960:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02AFBCD0-9B4B-4CA3-8FA9-D8B6ECB24894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:965:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ADE9AF-196F-4E0B-BC66-7DE0183F9032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:970:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90CCA48-1705-4564-AAF9-271201BD5113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:975:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B82BAFF-17F5-465C-8032-67D5ECAB2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:980:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F694FEC-B97D-4BDA-ADFA-751E8BFB7CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:980x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F831371E-7437-48D7-8281-1F406215041B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:990x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4F06B5-615A-464A-A0C4-7AABEE8530CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AF503A-A2B1-4FC3-858B-264049ADF0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E702C7EC-B1D9-4BDF-B334-2004CD76B52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39F31D6-DC4B-46FE-BE5D-EA612D915A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2610ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CB8036-5F36-4CD4-9B3E-D2401F2E64F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2617m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9849BA3-3990-4E30-B99B-ADD043314CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2620m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20FB18A-D3DA-4DE9-BEFF-75B7AB9B9A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2629m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A67CD6F-5E4F-4E69-A2A9-A4033DCE08EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2630qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A22E92-1EA7-45D9-AC86-EC3D9664C294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2635qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA2911-6561-47BF-BEE8-DDA31642C346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2637m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA6CA23-6F2B-44D5-B2DA-4F142BA3E48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2640m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F829DED-4D92-401A-BD80-C070DE57FC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2649m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F560575C-FD8E-485D-B50A-572604BBE903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2655le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED8C51B-AE59-46DC-85F9-6D3B2891CB3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2657m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A38D00A-B9DC-44DF-8247-70355FF9A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2670qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381EFC43-D5D9-4D10-90BE-4C333A9BA074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2675qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEDED18-2755-4C55-A1A1-04B4D5F40276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2677m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04B57EC-0731-40C8-939F-1C686A65A0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB301FB-EB3E-4F5F-868D-5B66CC7E1E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2710qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D28F9-B135-441B-A9BF-792DD356E374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2715qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D01CE3E-5C89-4FC0-9097-CAC483ACD441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDD55C4-AFCD-4DF2-921C-DDC1D7556DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2760qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F52334F-BE6A-4FD4-9F63-AE9BB017115B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C9BCC3-B9A6-4195-BF2F-E7BBCE8DC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2860qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4DFFA7-AA0E-4D7E-97B8-13389FD47D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2920xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707F6671-57AC-4DF4-8024-444502E5C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2960xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1FCE07-F9E8-4B14-95CE-01784D472128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3517u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C208711F-FC06-46C8-8849-27054DC1B264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3517ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AB8041-F201-4BB3-AAD9-199B06697DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C474C-D5EF-42D6-9B2A-A504BEFCB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3537u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F566CD3-3649-492B-B0AB-A107E51675B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9F3D74-AE72-4FC5-83E9-890781AF3093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3555le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8EA6A7-4AB8-487E-B5DD-9989CC5F1CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3610qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF63DDC8-A0C1-482B-92F2-CF6135E8C2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3610qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69918C6-7AAD-4AA5-AB72-C275367B1008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3612qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06155B0B-A5AD-4A82-8C02-D264981687A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3612qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76C19A4-FA26-432A-9443-9F92B2A946EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3615qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BEE9BE-E49A-489B-B333-95D0993F8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3615qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7427A678-EC47-4030-B905-619DD95F5A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3630qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86749716-1C9F-4C2A-B2A7-E62DEC10EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3632qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD000B53-06DA-4ED4-B0EE-9CB201B75C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3635qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8424463-C329-4BAA-8AA1-25CD8B63292E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3667u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52727E62-0048-4C56-BC8C-B3450D257B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3687u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8223AA-F077-45FD-A7E3-3C2C1A8F6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3689y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA34B50-2330-4D77-BF1A-6F05F3EF222C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6421F69-1076-43D2-B273-DE80FB2D5F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3740qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EDA9E2-CFE7-4917-BE48-A83208BDF0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A34E7FC-93A4-45F2-A7B6-4A8ABFCAB0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E611EDD-D44C-4311-B681-431D7C574528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E1B6AA-2F9A-43A8-9147-2BD9474E54C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1886D007-85B6-4E5A-968D-A1FD476A08A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDDCB65-4404-49BC-9515-ECECD58A667F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3840qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8D3E00-64C3-407A-9B00-8B6E383F73FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1B00A1-9C15-47C2-9F57-66586DEACC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4510u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5BF932-459F-4DD2-B160-5FE0371C7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ACE96-F1BE-4261-8F94-FC3C6E7C7561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4558u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783D6EA7-C016-4314-A87B-4FED1DC7114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4578u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD0176F-FFAE-4A85-9327-CE72FE059E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56970C7-F8D3-41B2-A78B-0C7F4A2A4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D4CE1F-86C8-4E48-9146-9DB57BF540FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7F9D65-5537-4C25-B02B-2393F60D1299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09C8A92-820D-4572-A797-180E17A7DEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7D77A2-0D9A-4D0D-B0DC-152757917BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07D3F1A-16CE-461F-A2F4-80FE5F841CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C04557A-C508-4FAD-A535-1C0AEFF08075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAE489-6679-4705-BF9C-BB6D385A1DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429A99C8-BC55-4887-893C-7124C1A5DB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A2B709-CC19-4116-A5BE-5DB5C8B45A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79DAC74-1F28-4EC8-B417-3FAFFB74C4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F1377-6220-43FB-BEF9-BAA7B0158147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18422CA8-3000-46B1-9065-2369E6B0BE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D558C66-E80E-4FC7-A0DF-485466390C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EA9AE-9E70-47B5-AD9B-0DF13A0939E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F22F6-4C87-47C5-965E-02A1AFF41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4720hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A2CA86-BFA8-4C78-987D-AD26F32622F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4722hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF64E0A-CDB0-427E-A96F-095EFEBA0A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425F6D34-EE60-464B-8EA6-8116EDAA1219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4760hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB9F657-1239-4424-A2E8-F8BD98C0095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4765t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631403C-0A67-42CB-815C-133EB87E0C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4A5A57-B1A2-4BBA-AC36-7EA7DF9CDE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0453C0EA-BA67-49D5-964F-35493F97D905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4D237E-ACB7-4382-AF5B-D27E634BF867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5461EB2-2958-4923-86AF-C74D449120B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C22141-E698-4E38-AF50-9CE04C1168FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D0E470-427D-4A68-AFD2-982A4F7CE2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB50F3-14AC-44BD-B7F0-A683C5FD1A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713C4B7A-C38A-4818-A258-D07DEDEC906E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4785t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59740BE-FC30-4400-B978-1DB41282971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839728F0-5F23-462F-B493-C37EE4C874F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B47DA-BA53-4D7A-9B5B-582238D5E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D452F1BF-1FA5-463C-8F13-6357509FB5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D1F4C-B396-468C-BA32-9367A68C95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4800mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76A812F-D77A-49C8-B7A5-0C08258D4BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4810mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E001AAB-07EC-47BF-BDE9-BB927872781D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF11F5-61E8-4A98-86C8-49D6B3224FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4860hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED153E7-99A2-4C02-B81B-C3DDF8FAE1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4870hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D024802A-EA60-4D9B-B04C-027A0703EABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4900mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA731F3C-1F04-4EE2-83EC-9486F5032903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4910mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544A59F6-E731-43C8-8455-69256933E71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624258EE-7FFF-4432-9B6D-4D60AA73CD9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4960hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A2701A-35A8-4268-B9CF-40BA3219373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4980hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E671F6-8DED-4735-BE97-58A60E5B5C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC68B2A-8570-4311-BB60-49DBBDAF7430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9826FA02-937E-4323-B9D5-8AE059ADBE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5557u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8630BB-48AA-4688-A6F0-212C1BB4D14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC98D35-D7D5-4C24-B47E-EDE2A80B2B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F8ABCB-12C3-4C45-844E-B07F77DA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326105AC-3926-437E-8AFF-916960107050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E1275-7541-4B80-8FDF-53246A204C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E190929D-D3CC-46E1-A903-0848829061DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E4EBCB-B660-4F6A-AD73-81B9D8964162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D58CC5-CB46-464D-93B8-6AD5A19AF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16541D3E-EBBD-4D92-96D8-F169733377AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F08D257-F570-4D39-A6E8-0F60E55472E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20ED667-2BFB-41C7-82BA-9F0C0044DA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6158ED8A-007E-48B7-99BF-8BA03BF584BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA7096A-F321-49A0-911A-F9683ABE6E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A471395-7F8F-4BA5-962D-4D8F271FAB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9484380-92B9-44DB-8E20-DC8DE02D1CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8010808D-805D-4CA3-9EA2-55EB1E57964C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FE9F-A056-42A3-A241-F2FE37A6386A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73422A3-ECA0-4C41-9AA5-CF7D77885CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A96A5AF-C9EF-4DED-AE25-4540A2B02915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5115B12-053A-4866-A833-D6EC88D8F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5619D4D-9685-4595-8A5F-A18273FE4213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77E00E7-0EA4-4E32-A693-0E0F66BA4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA3457E-7E1A-4878-9752-79382E954A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68630C63-4457-4E12-B7BD-AD456B237FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FB5695-2950-4CEC-81B4-FD280F835330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F340AF8-508F-449D-9AFA-4E55F069B4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E944410E-D674-4141-B50C-9F55090325FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6438E07-0AC0-4BF9-B0F2-9072CA9639D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5079AA70-C864-4AE2-809C-52B50632F2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D124BCB-D8C3-49F5-B05C-E09B3CEBEBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A86291B-C986-4320-BCEF-9F5AD8B309D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1227659F-1393-4189-978B-CC3DC53BF407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2DB843-638F-41EF-B486-409318AA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0004D8A-A186-4DA2-A7AB-18A6456438FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B6BE9F-F113-4976-951D-53F2E183A95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:6y30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB005F1-9719-4985-B9D9-2140C962ADD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:7y30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94D0C1B-F30F-4724-915E-192C53FAE58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:7y32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F247860-1D2C-415C-AFBD-26BD875AAF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m5:6y54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9697EDCD-A742-4AC6-876E-1080AD684207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m5:6y57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E73924A-875B-44D0-8F7C-A822B0488126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m7:6y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03751B92-EE07-4F16-A476-BD25561810BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j2850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A630E1-6CAE-4809-AB18-5002F158AE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67750FF-EF4B-414F-8ED4-299CAF33B0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j3710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A82D885-82F5-4755-BC11-5899E28CEE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j4205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AF1366-8A14-4741-8146-886C31D8D347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD75301-E29C-47DC-B53F-DC44EA0C1885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C944024-BEAA-43AF-A339-FD69C75E8240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435C69D1-3932-4379-8D18-B1E12D558325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3572B700-73C0-41D1-95FD-FE9D5B0C1F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A40DC9-0D4E-4C91-8D1B-3CED95B3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FB3E4B-05F8-411A-8C86-4ACE03815553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n4200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E55EBC1-6F96-47CD-9503-7855EFB07240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5502:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4208DBA1-7F85-4876-9B6C-D1B43EAAB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5503:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ADC8E5-1CE7-4481-A9B5-61BFC6B4FF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5504:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1789924-FADB-4076-8874-120B29EE6B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC246667-2F6F-4024-9EAA-2CE3018235C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21BA7F8-D4B5-4E6B-8FCE-04BBD3501AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1341A5D4-A5CE-4D31-A178-01C3069D7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A5C199-92E5-435C-AC40-175849285104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67589F54-0A54-4DE7-9A47-A73DD05F7965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC34C8E-1BB9-43CC-9D89-9E6DC435B7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE5163E-9BCF-4BF8-BCB9-B48C4E7E1564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C5DC8C-3318-440B-8B29-4827F343927B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5620:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECC47D8-F602-4CEA-B19A-209CE76C9D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7514ADD3-DECC-4CC2-9421-A609E526FDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED2EC97-8B2D-47A9-8EC7-D1E0ACBB6C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5645:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691097C3-F91B-499B-BAEB-4E7E9C43B517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5649:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3DB1ED-017B-43EF-92A3-A8A88669FBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e6510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A49AAF-0F08-4151-8F74-4EF9C3415B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e6540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7A2018-BB4D-4DC1-813D-A4AA3F270893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95D91C4-C539-4458-A6C9-8AE17207AE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F9D218-8198-42C7-88FE-7C5382138324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8FDD81-95EE-4241-93C8-925085A4CE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5509:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614D9E35-10E0-4CCB-B817-C7C8C3947BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5539:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F987E-F4DB-46FF-B048-21B4A4C07B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05376F2C-30B6-406D-90F7-6C2E00E85171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l3406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDD3DF6-24BF-4C13-8F07-AF07327E5622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l3426:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1520A64-2157-45D7-A135-F900798C4EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A30F85-5367-4369-B7A5-176D71279FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8803FF9-48D7-4AB0-8A17-4590CABD0BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC63B6B-5D6D-477B-9125-007F835981B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF385AC9-963E-4670-95A6-BE1EBC3890B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943FA088-2902-45A9-A1BA-D612B46A50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C80902D-9A6C-47D4-B56F-35C378FC0E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5618:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100B46C-8485-4048-BFF8-2BAB311EC04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9E1646-E154-41BA-B9FA-0839A898023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F4C8E6-0043-41A8-94EA-EEBAA1A081E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C10985-CBF7-4717-A7D6-2594887D7CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l7545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C49886C-B6A0-4D95-8533-329FE5A66F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l7555:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0788CF23-3FAF-44C9-9AAA-96E4818A1AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:lc5518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF7001-64D1-4BFB-9280-0BA0FAD97A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:lc5528:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E420E-16DA-4FB1-9968-C93E229614FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07469E04-B3D2-41FE-A2E4-E25A977026CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FF402E-5E4F-414A-A3AB-149548303616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E2B875-A270-45C0-A1B1-041264E5B290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w5580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C828C8C-7ECB-4167-87A9-0F522C400C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w5590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2C887F-1EF7-468A-A6AE-440793C78DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F3D7F-D884-4ACD-A103-060F57A9867B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1FCAAD-7072-45EC-9ACB-08556458BAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4446224-40E8-4AD0-8197-921D3473E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA159D9-8C7F-4BE5-9093-A21C7D00F7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92B68FD-771A-4401-8B1D-B1A252356F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B933941-0BE3-4EEB-8FDD-2DAA63343EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D060EF0-B29C-4B54-86A0-FD5CFF7B80BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F737C1-6011-42D2-9690-CA81EA0A283C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CA7EB6-D1C9-48D9-A69A-2618800A6CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5647:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA1F3E5-ED7F-4E4C-AD0D-0EEC542A9E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6E3C9B-A661-4B37-B76D-A3F7BD638D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C909B0-8FB2-4220-AF93-EECB8D650CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5667:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF36BAD0-A762-4F84-BE0B-060FE666ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007337CD-94FB-4ED9-B4A3-9E0EC52D79B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5672:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDFA137-F1FC-46BD-9872-D62671B1434D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5675:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6DBCB3-E912-43A1-914B-5C7CCFAADE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5677:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCF36E2-0B42-4F23-97D6-9E79ECCA8FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C67312-E128-4833-A91E-D7A9F96A7AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5687:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F19F408-FABD-4A68-8CDC-C763F0321FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A06EC2-E491-4CD5-9904-61A88EBB7FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x6550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789A8CAE-8D9E-4244-880D-FBE28EC53AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7542:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F901EE11-D0C9-46F6-8316-D8F4F1D50260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E549F600-B9CE-4843-A772-2DACC528903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F28E733-87ED-4610-A8EE-BD37BED7685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_bronze_3104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB488DD-D97C-4E21-A055-E6CECBBBC34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_bronze_3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC12C97-9966-40E2-8B23-B4453EC9EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e-1105c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2832E8BF-7AC7-444C-B297-66F770860571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44AA72FB-E78D-419E-AA82-B0538C6504D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687C3BF3-D71A-49AD-8A05-EAC07CBCD949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AF90D9-16C4-4F8A-9868-3E2823E3445C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C063C53-8970-45B1-85F8-FB2080BF4695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64596ED7-794A-4D23-987B-D9AD59D48EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E52BA6-2F2F-4CD2-A601-5B0ADDE5E23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1565l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDA48F0-0F35-4A8F-8117-B0B28E00AB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1575m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A561A8E8-79E2-4071-B57D-590C22EF86A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1578l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E46658-60AB-4758-9236-3AC0E6464383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1585_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8FBA-E2FF-485A-9AD9-E604AE0FB903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1585l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F99640-C753-40BE-A0A1-4C2D92E7DB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1105c_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1EC6D3-01CD-4CAB-817D-AE2E72FD0D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1125c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F98247B-1839-4676-855B-827A4B6C016B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1125c_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBA35BD-1048-4B6E-96B2-1CFF615EB49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CEEEE2-D6A2-4342-8A73-934093948824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979FEE9F-A957-43B6-BB6D-1A851D6FA11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7AF59D-D05E-47F9-B493-B5CD6781FDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF7EC93-0170-45A9-86C7-5460320B2AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7B1C2-D2CE-485A-9376-27E14F3FA05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_12201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F803AC-DCC7-43FC-BEB3-AA7984E0506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_12201_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560993AA-299D-42B7-B77F-1BD0D2114CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C582B1C-1DAC-48FD-82DD-7334C10A2175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7862B0C-2C44-4110-A62A-083116129612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048C5996-F719-4338-B148-0DD1C13E02FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0196DA2F-CFA7-44D0-BDF5-37C7403E3B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9FF7FB-AB5A-4549-8C15-E69458C649E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEF6608-B650-4C77-9823-0AD57B3484F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1226_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE6A2D7-901C-45F9-B487-D674047D522E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFCAC5E-6CF1-4EC1-A24C-688DD1016A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADCB509-5B0E-4592-8B23-EC25A3F79D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB51691F-089F-4016-B25E-238074B06C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBAAC728-6A0F-4675-9677-AAF7DD5D38ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3BFEFD-3D0D-48B0-A5AE-6F3C2D791CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7E1AFD-9BCE-4487-A8DE-F9C60529CA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1231_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA37503-FD3D-4220-933C-234631D6EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72992831-2A76-456B-A80C-944BDD8591E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1235l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79C2131-5566-4CC2-B6ED-38E3F6964500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BFDAA6-3DFC-4908-BC33-B05BAB462F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6266056-770A-4E2D-A4FC-F1475257648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929AA8F3-8BDF-4614-9806-6D4231735616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605D7552-8184-4B11-96FD-FE501A6C97DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3144BBDE-CC96-4408-AA02-ECC3BF902A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BA77A-34E3-4B9E-822A-7B7A90D35790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7165B43-ED22-4714-8FA4-1E201D1BFA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1241_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CFB133-FAF0-431A-9765-8A9738D6D87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2975B0F2-DB7C-4257-985A-482ED2725883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70221E07-3C2E-4A82-8259-AD583EB5CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427DFD78-56CD-43C4-948E-F53AF9D669F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3E6F5F-6B82-43D9-BD6E-D22F9B991DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75AD7649-3FEA-4971-9886-6C9312B937A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1246_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE972C-6BAE-4342-BA01-1D685487F9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1258l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CDFE3B-C064-49A9-BD43-3F7612257A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1260l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD0EEC1-D695-41A5-8CD6-9E987A547CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1260l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35AA9AC-28B3-49C2-A9B5-5D26DFEDB723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF25B8-D474-4C6B-8E45-F57DDC7074E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF18FD1-6670-4C3C-8000-A079C69D575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D760EEAF-5CF5-4F25-8FA2-D4F75F4F5A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1268l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921EB5A5-F911-4FCE-A6F1-C66818B34678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1268l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13878C13-1C7C-4B83-AF27-4998E8F659DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023063E1-2DD7-487C-A8A7-939FAEE666A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77255CE6-D7B7-4B48-993C-7100A1170BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40AC368-3A14-4EFF-A8D0-7EFB4C83045D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3472AA7B-C0CF-4D65-8A6C-B1D52D27F0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07E80D5-70A5-49C9-9044-D683C7ECCFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1271_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63668AF4-F29C-4424-8EC5-2F0A5950DD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86616FE-0C3F-4984-A364-8A6A9F01DAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C1C7CD-538D-4D7A-A81C-10DF5376A479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5922F749-2B23-44B8-8A46-F31BCAEAD279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48BBAF-6B27-43D6-B86B-40CD8E7BA056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75D0EEB-707C-4C86-A569-E91E9F00BA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FB0E20-0243-40A1-8DEF-37150791222E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1276_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CFF26D-8AD3-4179-9E4C-F06D7C858C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1278l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7541572C-229F-4963-B7F0-06EB3323E53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DE669C-27FD-4196-8B8C-1DA4EE4C1D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479F7C77-D16F-4E40-9026-3EB8422E0401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A242AC2-9AA6-43FD-90F4-5BF6E80DBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB08C8-0018-4A8E-A206-097BDDF83B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7193E85-30BE-42D5-A26B-3F88817F3574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1281_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446E8515-45FC-4B8B-8D12-60643D64C07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBDF6B2-D388-4639-87D8-064AA3F6B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB8B6-B614-4EAA-BA90-C5326CB5D07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A371DF9-E224-404F-99C2-C2A4607E62D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F40E356-365D-44B7-8C38-A0C89DDD6D3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3132029-89F8-4359-A0DC-A275785266A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1286_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02F5685-0636-48AB-B222-434CA1F3B336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1286l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51FDD60-88E5-4A86-BB8E-4C2D7EDEFA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED4693C-DECF-4434-90C0-56158F102E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1290_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB408A6B-0842-43DA-9180-B0A299FCBCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1501l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6215EBAC-7C75-4647-9970-482120897F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1501m_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3357FCAC-B6C4-4E3E-A40B-AB5084A7F9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1BD2B6-1AF6-4AD4-94FA-94B453A21908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1FD6E8-80EC-461F-9ED1-CE5912399E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96F585E-BDEF-45EE-B0AB-94FE23753AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2650l_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3279C067-3058-4D46-A739-05404FD0E9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4DF0A7-8BC2-48AE-9036-FED6EEC57DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0855225-F501-486A-BD03-2A86FD252B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214C7B0C-C438-4000-9F9B-6D83294243AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C91AA2E-4BB2-49C8-9364-4E363DF42CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658a_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA26781F-5A1C-4DA5-835E-D984D697F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEA4222-F25D-4457-80AA-6D05CA918D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3E60D1-5CF9-4F96-9EDB-D87F8CF57272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D321BC-6B1D-4C71-8E16-5A1319CEFD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC35-9D1F-4153-94AC-B25627D730E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2665:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F063F4-8994-4E46-BA7B-A12A112009BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6F2DE5-AF11-439A-8D37-30CB882ECD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E213DD86-5419-42C8-BF38-7795DDB3C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A972291E-5231-439D-873B-2F87BCAF800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C089CC54-3229-43D7-AA15-73CFA1A43EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF268D83-C15D-4559-A46F-844E1D9264F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE97C0D-3EA1-4314-A74A-7845C7778FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34293F29-F327-4ADD-BF62-78F63F79BB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C0A46-1CC4-4882-985A-0BB41525BC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643F3522-A452-4927-944D-532574EC4243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F40B78-4DBA-44EE-8420-086789EFF53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "423BFD8F-4B50-43DA-9979-75FD18FBC953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2683_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAD4A68-0481-476F-BBBD-3D515331368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2683_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838CEB7C-7C4C-416C-86CE-6E8DD47EF25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7D021F-3C97-45B3-B1F7-0AC26959F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A31AEF3-448D-417B-9589-4BA0A06F2FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A1D96F-7FFD-413F-ABCE-4530C3D63040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB2B08B-D3C7-4B82-B170-471D6CDEFAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8343FE-1320-40AE-A37F-70EF1A4AC4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD42BA5A-7DA0-409D-8685-E43CF9B61D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FF80E9-CF28-4EF6-9CFE-4B500A434674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7896A6C6-5918-4C27-85AF-6FEEFC7F8FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647B77A4-2F49-4989-AF43-961D69037370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "805B1E33-F279-4303-9DF3-C81039A40C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B971EA9E-AE5C-4A1D-AD55-8241F7B38C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7E0AAE-6539-4024-9055-BE0BAD702143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1A8828-0765-4799-AD6C-143F45FAAD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D34618-1CCA-405B-A49C-EB384A09C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697a_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D6061-66BC-4862-BC84-ECD82D436E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2698_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B6EE64-1AD4-46B2-BA65-BB6282E56EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2698_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11650B45-0BDA-42BF-AEF3-83B48DD6A71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3C92BA-827B-48AF-BBB3-FB60A9053C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC097E24-F6C9-40D9-95E9-7EFDFA61AFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699a_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB44CA7-DFE6-4B1A-9A63-97AE30017E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699r_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B305EFA-6226-412C-90EE-F0691F2DDDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3874FA-63CB-4B5D-8B64-CE920320A4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4603_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0800ED17-50E4-43F3-B46C-591DFA818BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46B0405-F301-4209-8766-6E12EAFAD157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4607_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F9F1F-A967-4884-96CF-4488102DC0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B37AD-4599-425B-B39F-E571F4975266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A5F1CF-A1E6-45F1-8B09-36566778DB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C8A49-888B-4675-B3B0-25EDE2FD515E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D98F97-8EF4-48B5-84BE-C3CC27031FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B473D1FA-909B-492E-9C5B-94B0E20E1C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5EA7E-322E-4CE6-89D4-7DB1055C9034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67836379-4E1A-45CD-9506-7D3F612E47C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1BBC61-8664-4452-93A7-DDB4D2E4C802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F1B50C-FC5F-47F4-87BC-60E1BD3DD1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4624l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044F0375-DF2F-4D9B-AD7E-473D34165E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEE9B72-5C4C-40C0-A8A7-9DF11655DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0655CA-A88C-4632-9A18-560E3F63B2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1454DD-DA51-4CBC-8BB2-09D5AB5777DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4628l_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6965851-3B29-4C21-9556-97FD731EAA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52984FD2-44E0-4E91-B290-0376737EEF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D92E2-E718-4247-BA5D-DFE86C0F6AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF933366-7503-4F8D-B7AA-F6A16210EC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2DAF5D-5BB7-49C6-8426-8B547505B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4648_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EABB21D-D021-434B-B147-CAF687097A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7609424D-95F1-4493-A20C-B1BA4EC6439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966DC636-C802-4D9F-8162-652AFB931203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75794EB-A5AF-43F0-985F-D9E36F04C6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C2CFF0-98FD-4A0D-8949-D554B2FE53D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F9217F-5028-4659-AA8E-F60548DE4D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4655_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC769DC-CF2E-4A3C-A610-264F024E6279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4655_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2B1CBF-D155-49BC-81A4-4172F177A5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4657l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370B2B32-519E-4373-8A04-5C5025D688BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4660_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D9B562-C279-4A55-A347-F28FC4F9CD12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4660_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8C2BA0-48A8-4107-8681-A7C34C553D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4667_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B009DE-A82F-4569-9B42-EC1EC4DA8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4667_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B6E83-37FF-4F9B-915F-059EBB29DB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4669_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E218718F-4BE6-48B0-A204-9DD4A932A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4669_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0AB327-B60A-473C-9D36-97766EE62D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA249EE-4786-4E27-8787-5E8B88C2AEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBD0529-1CF3-44E5-85B3-19A3323C9493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D664EE97-07EC-410F-94C3-AEAB2C6A627D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31DB981-03B1-4A84-8D87-CD407C3C149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD155D-89D9-4677-A621-4D7613BE65C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02BD0D4-FFFD-4355-97D8-170362F10B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6635781A-2651-4EF2-A5AC-AEEEE63FDE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1630_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DCE6930-760A-48C0-B964-1E3ED6A8517C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1630_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E52DE90-DF96-4CE7-B8D1-226BA50E4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EB40E7-9B91-4106-B303-2B70AF395BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB0D5CD-8AF3-409D-96A7-718641D4B90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E420B0B-0CD5-41C7-B25A-3DB856055F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0C295B-0D63-4BE7-830D-D927E00C301C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605C340D-2220-4669-B827-9009CB099E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8791879D-2908-4F57-8DB3-6D24100A9108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBEDBBA-0427-4DE0-BA8D-737DE7DF80E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E823DC5B-98BE-4656-BFBF-3A7018F8F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1680_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E8D558-ADE0-4358-9C76-7BD77BF23AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1680_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7973B3D0-F244-4E26-88F5-A2D9BF2E4503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2403:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E6BAB9-CBA4-4362-BC82-00D2C5CC6FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2403_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3F4BFF-3CBE-4E4B-8B29-B203F99CFD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2407:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5CB567-4F86-4466-BE4D-BFF557ACAE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2407_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A52611B-6583-4660-90D7-C9472728072B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2408l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80C6E89-B57C-47BB-8B95-50C03DFB3B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB685B-FEE1-41EF-A046-1B34619E12A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9F6724-967A-4AF0-9896-12BF6164B2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1116BF-12D7-47CC-98DB-18B200CF9C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBB28DE-726B-4AF0-88A5-35987E1E648B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2420_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA1DB22-8FBF-4CF6-AA96-5B68EE28877D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1880E2B8-5E0E-4603-8D17-3ABA43D28179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFBB92-1917-4238-832B-195FBE418271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DFDF3F-9A3F-42B8-99A1-A3F76B198358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8778F972-BF34-482F-9FA7-71A77F6138E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F288BB0-FE7A-4900-B227-BE80E4F4AADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8DC53A-90C6-47FE-89F1-A1FE8B1C07A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E16338-A094-4CA9-B77F-6FE42D3B422C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2438l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E07AB33-5351-487D-9602-495489C7C0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22115ED6-1707-4840-B0D1-AD36BC0C75A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2440_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C633BC-831F-4CB7-9D62-16693444B216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2448l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF5EE7E-F41B-44EC-9F69-7963B1BF1FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2448l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD501E1-E78F-44C6-8A13-C29337B07EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9085BA0B-B7E2-4908-90C0-B4183891C718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2267CB8-0EE9-4DBD-AD5F-8A13BB62673C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81971C2F-137A-4F11-8C93-3B99D4CD1B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E0BDAC-398E-406B-B2DB-AE049D6E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB66D7E-B465-4A8B-8CBD-7E93CCA2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2470_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AFDE6C-DE58-4C4D-882E-474EF6C3D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950C6BF9-AA47-4287-AC01-D183237490FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2355181D-D8EE-4F80-8280-13D5CBCF4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5209343F-66B0-4DC0-9111-E2E64CFF7409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720109A6-B79E-48E1-9AE7-7708B154788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2608l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FF0DBD-AE13-4232-80F7-F4C2E2CC9721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2608l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E944ED-8C02-46B8-BF95-0CE4C352753B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77AEA3D1-4846-46E2-9B80-20B19F00DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1576978F-E93D-4A47-90B6-6A4E3A7DE558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D339FE5-001F-4005-88A5-CFFE37F9B63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDABA86-497E-497E-A5BA-46F913A4840A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD886F4C-DB6F-4DDD-9807-8BCBB625C226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E16912A-7F6A-4A2B-B70F-D1FCD34BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C454B7-E5F4-4AAE-B577-FD71FA002C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BE2781-3A06-4D62-AC8B-68B721DA526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE4EA5-B8C8-4AE2-9614-F9DBDB4D79DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA23772-2EB8-4BEE-8703-26D967EC4503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DC766A-B1F9-4B83-9F9B-CF603EE476BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2623_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA594740-43C5-4F42-BA5B-00CA8AE7BB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2623_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572B16E2-8118-43A0-9A80-5D96831D55FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB5C551-BADC-4A3A-93E5-2EBCA0704C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5383B7A3-1569-4FEB-B299-B87CE8C8A87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05BBDE0-6C47-4489-9455-7DA7D230ECA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1789AA69-EA31-44D1-82E6-228E48E18586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A7D5FF-3B1F-4C64-BB81-7A349765520D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93A92E9-C8D2-4F6E-A5CA-E8AFFEEC7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0498B3-393A-4C32-B338-E6014B956755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C451F752-6869-4AFA-BAE5-5C9A54427BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83710FD1-099B-436D-9640-061D515E10BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B71CE-6156-40E1-B068-A2B733E205E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DEEEE5-5055-4CE1-962C-C5F075F4CC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8718DDAB-3208-48CF-9BCE-54DA1257C16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1AA901-E822-4240-9D82-C9311E4F87B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CDE3DF-8E79-4997-94EB-B517FFCAE55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A0DE13-EB0B-493B-BC84-3AEB3D454776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1727697B-1F59-4E29-B036-C32E9076C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69E827C-C0D0-46C7-913A-1C1E02CEAACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2528F3F9-34DC-41DA-8926-382CB3EF5560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E452C262-5A8D-4D97-BC7F-A4F5FF53A659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D57BF69-D750-4278-98AA-976B0D28E347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76ADAE30-6CAD-4F5B-B6F7-C18953144C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A25D792-E21D-43EE-8B9D-67DE066DE5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C669783-C058-4B4F-BB9A-84B2C4682247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "159B088B-9A85-4CAA-854A-AA080E528F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE74A94-FE8F-4749-A35A-AB7D57E24913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990AC341-0E67-4A81-87E9-EE3EFD9E847E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BC18B0-58F1-4477-9978-CA7383C197FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474992FB-842D-4661-A565-44AF2CD78693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476E1B79-5342-4895-96D7-E97DFC1F5334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD318D5-89A6-4E28-939C-C5B61396806B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981AD3FF-1D14-4ECD-8B6F-BCEB7F2409AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C7E89-32ED-4328-9313-FA7D3DDBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2792EED8-2CBD-478E-BC09-05FE830B3147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B1AF2F-6E48-4DBD-A60E-3088CA4C3771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E1691D-65B3-45E4-A544-8B29E38D569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42F2703-B8AB-410E-AF7B-CD0BE777F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31244C94-00A3-499C-A91A-1BEF2FB0E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878FF6E8-8A6D-44CE-9DD1-2C912AB8A193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5078A95B-2BD8-4A37-A356-F53D1A53CB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFE67CD-DE53-4C4E-8245-35902AEFA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F231D31-3AAD-4C5D-A225-D2DF94486718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5998DF5D-E785-45EC-B8D0-1F4EC4F96D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADFD013-0BFB-427C-98E6-F9E4774DCBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58620B10-FEA6-456D-B6B5-2745F5DBE82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F698B1-D9CF-4FE5-933D-EFCEA3056E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4858A1F0-97F2-4258-AB98-027BF1EC5117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C961A8B-EAFD-4F66-9432-BCC0D154ECCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052DE6CD-A1E7-4E81-B476-66EF451061C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1AE1E-6FC0-41D8-857C-C5A99CAF5823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751B3AC8-D45E-46B6-83D5-311B693F3C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9588277A-0B97-4408-9CF7-11271CDAADD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FE854-85E5-4ED0-BFAF-2618C9053082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E048B9BF-77C8-49F7-9F2D-9999F79BA264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD16D4D-E816-486D-96F4-5A2BF75B959F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169C558E-1A83-47D5-A66B-035BD1DD56FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D683E509-3FB2-4175-BCAB-4EB1B5C04958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCFA915-5445-4732-9F8F-D7561BA4177F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A9FD98-C22D-48F6-87A1-60791C818A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F99F24-1783-4E6E-BE61-04C2E80356ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CC7EB9-3F59-4C0A-B3A1-984BCCFB25BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85289E4C-C813-4677-867D-EE8E98F4A1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4860_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C8150F-BEFA-406D-9F0D-E7CB187E26AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E807F90-819F-4103-B1F7-4CE46971BD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD93203F-71B9-4F87-B5D8-FD273451C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E652C74-C48D-4F29-9E85-09325632443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99158191-3013-4182-8A53-5DFCA1E2C60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E39A3E-7EAE-47C9-930B-58A980B73FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8837:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFDA54BA-C00D-4890-9B7F-328257607B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5EFB1E-334C-4B55-8E2E-6AE19B34774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8260DCA-2F0C-45F7-B35F-D489AF5639F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8857_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7778F81B-6D05-4666-B1D4-53DB0EC16858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC6706A-61F7-4AA0-B2FF-0FFDF739A644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF1B16B-02F2-4ECA-938E-B5CDCFC67816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5501D8-1B0D-4F5A-AFD7-C63181D3281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1751F0CE-A0D3-40E2-8EEC-D31141FE33A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF9AFA7-BBE8-4229-94CB-5A9596728BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23A777F-68A4-4217-A75A-4D8A27E6451A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA27DFB-CDD1-4F52-86B3-DB2320A9C7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392A4337-11F6-4980-A138-4FDBCAD0EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E9BB67-F1FF-4190-889F-78B965CCE934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4185A70-5D10-448E-A9AB-AA9D5CDF0FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35607317-0928-4297-A33E-D44BEE1BBEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48323B1-7FEB-451F-A064-23E7CE7F6403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EF4E8A-EF37-4DCC-B5D4-DA89AF31DD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5763189-7980-4A72-92C9-1908FE9E15EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880l_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53ACD49-DA21-4DDE-A0AA-FCCD59D29886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4326D350-EBC2-48E6-A2C6-0499F6826CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8594E6FE-B6DB-4343-B3DD-AEC19923DAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCADA00-E453-414D-9933-FCB43D21BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62212D9-F707-4A8E-AB2A-A3985E7A4049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561755A8-8AAD-4F41-8266-747EFDAF2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F4BB0F-DAF4-479B-B78A-7929C151AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A207312E-1D35-4464-A111-22C4C793E146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B16E32-07D5-445B-BAA5-4E4A0881BFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF08F6B-2ECB-414C-82D7-C06085BF8B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8894_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21032BE3-74D8-4C3F-B461-158F475B6853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9AC992-59B7-44EE-9FF3-567AC48938AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44B3BFF-649A-4C1E-9564-EFA007FA2BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5119t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04EDD71-15B3-4085-828C-BB7A43DBDCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1BA7AC-989B-4093-841A-C6D5978BF17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5120t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F848-B15B-4369-A164-5FA11D2B9AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E46F934-9765-43ED-88A7-A4778C99A976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380A8F4F-7D1F-4F79-B555-E5AE18EF9F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D5217E-9520-4FDB-9330-C8DC2CDDAA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B206674F-1A34-470B-820C-05F9C37792CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AE2051-9F8E-4477-8E1E-38A1E06AD247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B39281F-990C-4AA3-9287-CCB5BA7E8AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDC0FCF-BD22-42AD-8044-9A64215B91CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0ED8AA-56D8-4CB6-A765-706BE87C9E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA890C07-7940-4DF4-96FB-8F71A2EFE5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95A34F0-0B74-4031-BC9E-CBC93665BE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6134m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD3CF38-0DDD-4C1C-B420-4DE0B1C932CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB22DF7-15CE-4340-A05F-BD39FCA41F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA72DC8-2E4E-453A-A3FB-20F31D32B973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758E45B6-7C7A-432D-891D-CB99077AE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B3CDFF-B055-4BB4-98FB-DFF4B2E63A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7A401-BCE1-4673-93C9-67F009B75A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6140m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E62119B-2A65-4473-B570-F118614B0ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5319E0-909C-4688-AAA6-6A0B5D19FFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F83F9F9-D2DB-4D40-AD61-29E66B050B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BE6238-312E-4CF7-9E74-48CB5603B0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC09EB6D-7FAC-4B61-83A5-B0DC18D54EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BA1BE0-0A78-4E94-A619-35735C913180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6148:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDD838C-8037-49E1-BAB4-C1D7D29BB9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6148f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CA40FE-80C5-4A20-8219-CEF51F3162FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10305C5-0C2C-48B7-A0AD-2B24AD722EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E8F127-6EAE-4302-BD52-7C3FCCA307D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D675EA9-33E7-45ED-B6A9-7117AD2FEE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E468FE-73BE-4B20-B774-58EC7CD20CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7210f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF6B19B-7D45-44B3-8524-407253B93EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B803FAD-E54D-49FE-A078-029B8FFBBB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7230f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC511505-ED67-45B4-B76C-56AB750C4408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A430C232-79EB-4264-AE24-41D4A2A5D990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9E3D4B-A3DF-4858-8C64-0316B6E57435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7250f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19108672-E1AA-41CC-B86C-061D3721C8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200D36CF-AEDE-4183-8C54-748E6E5A3218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF13A44-5163-4282-8EE8-7DC05499B5E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7290f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827C12CE-D87D-489D-ABA7-BE0405EC33D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AA78F7-520B-4FFC-838C-DC74FEE8E13F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8153:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB2949C-4699-49EF-83EB-31199E0CE2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C169DC-EEFE-4DE6-A3D0-65B606527240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD28227A-8888-43B2-BC41-8D54B49DA58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7984BAEA-4518-4E17-830E-B34D09648BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2214E5-491E-448F-A4B6-A497FB44D722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE93013-C262-46A5-8E77-D647881EE632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B53CEC-943F-4966-8EC1-CB2C6AD6A15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8164:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAC04A3-EBE3-406B-B784-A3547162ECE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15720FFE-B2A4-4347-BCD7-DFA6774C0B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F46B0E-C746-44B4-B343-E3DCAB4B98DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8170m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE30903-4F75-4D71-A8BB-44D1099E9837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98311EAA-26C8-4092-8BE5-4E7BEAA68DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8CF348-811C-4342-ACB9-AFCABCC34331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71998EC5-EC0F-496C-B658-3CD91D824944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F19B2A-E7A1-4B97-AC40-02B0D3673555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6387C9-C0A8-4B26-BC62-802775CD0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4109t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEB0164-77C2-4EC2-92FD-5FCE246119CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB20210-337C-4220-8CA1-F4B2BC54EBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F699569F-4F52-4CC0-90D9-CC4CBC32428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAED22B-D097-49C4-ADDF-4B3F3E1262D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4114t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF5C3C2-EE69-4DE7-A76C-C797192EE7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7756B588-5A63-4508-8BDD-92DB8CB0F4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4116t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316E26AE-67A5-4E75-8F9B-ECF4A03AED51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51E86F5-8F94-4E7C-9A63-DAA3FCBE0438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001AB619-157E-40B4-B86C-5DB18245D62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1221FB4F-488A-4A52-8788-82ECBF92113B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D51E27-28A3-47A1-9C36-1A223858E352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "365DF3EF-E7D1-41FC-8382-D3B095542D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B2B122-34A9-4534-A996-8FEAACA71A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C850453B-CDB1-490D-B551-9AC0B27D8A67"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7447BC-F315-4298-A822-549942FC118B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7151A19C-0AE5-4F66-9E3D-8BF675A8430C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEB72F4-AE57-49DD-8876-1BCA7B805692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "7929F123-AC76-4F49-940F-558CABC25E75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\)_2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6034789-ABD1-4035-8378-F0BA7157B087"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9317C01-22AA-452B-BBBF-5FAFFFB8BEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4534CF9-D9FD-4936-9D8C-077387028A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60384BD-284C-4A68-9EEF-0FAFDF0C21F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA8DD5B-8A34-4CB3-B0FB-F82C73B25007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.32",
            "matchCriteriaId" : "C403C49F-3779-4A7A-8D12-B4A32BFD77CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.6",
            "matchCriteriaId" : "0AEC1DE4-F01C-4D21-8FB6-A0D4460D6CD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "secure@intel.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html",
        "source" : "secure@intel.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584653",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102376",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040071",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-254.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0292",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-002",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-003",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/36",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Nov/16",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-06",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180104-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5715",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spectreattack.com/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX231399",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K91229003",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-18282",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3531-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3531-3/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3540-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3541-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3542-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3549-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3560-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3561-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3580-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3594-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3690-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3777-3/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3516-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4120",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43427/",
        "source" : "secure@intel.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/180049",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_01",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0007.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-254.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Nov/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180104-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-5715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spectreattack.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX231399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K91229003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3531-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3531-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3540-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3541-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3542-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3549-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3560-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3561-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3580-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3581-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3582-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3594-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3620-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3690-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3777-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3516-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/180049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5753",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-01-04T13:29:00.257",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."
      }, {
        "lang" : "es",
        "value" : "Los sistemas con microprocesadores con ejecución especulativa y predicción de ramas podrían permitir la revelación no autorizada de información al atacante con acceso de usuario local mediante un análisis de un canal lateral."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD028C10-FD07-4206-A732-CCAC1B6D043D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2316:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704FAA50-1B7D-4917-AC4A-4C58785340F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B95D3-75BD-4826-BFBE-9701CC0FF052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66E31A6-EA01-40C8-8718-CE2C1F45EEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBE3B05-2063-49DE-A1D3-9D0A62E0CF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F2CBE-EFB1-4962-AC91-D25AAB057DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2516:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C05CD9-551B-46EE-85F8-D18FF878FE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCCB5A5-20E3-4EC5-956C-EA7C0F33A026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C38C609-242E-4923-A81F-DAFBE7B6A927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2538:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB08B5-7CBA-479A-A41B-FD8A6D9E0875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C4FDD7-F2EC-4EDB-ACC9-3D6B9152C855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51DD0B-1EED-4BE9-B0A7-BE2E91CCA84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2718:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AC7C56-2205-4121-99E2-001A7488E0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1677313-FF8F-493B-9DA3-C78F87581A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2738:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2A3CCE-FA57-43B5-B7DE-CFD0CC2ECD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CA4444-5103-4451-8A7C-F6BBE714BBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1EB745-46D7-4088-93C6-E7156520B144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93010C0-33B3-438F-94F6-8DA7A9D7B451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A988A78-6B3D-4599-A85C-42B4A294D86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7C5EF4-3A92-4AF7-9B11-62B4FFDC5128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3538:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246AA1B0-B6C8-406B-817D-26113DC63858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE5B42-FF05-447C-BACC-0E650E773E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3708:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0779CC9-BD39-4E0B-B523-A6C69F9EBB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F0E3C4-7E9B-435F-907E-4BF4F12AF314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D616C72-0863-478C-9E87-3963C83B87E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC333B0D-3A0E-4629-8016-68C060343874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655535C-FF64-4F9E-8168-253AABCC4F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EDEA1E-9A19-4B3F-806E-D770D1AB4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3858:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD68F3F-7E38-40B9-A20B-B9BB45E8D042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EACEF19-83BC-4579-9274-BE367F914432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3955:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC73291-AA6F-40B0-860A-1F2E6AB1E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24128A7F-2B0B-4923-BA9E-9F5093D29423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0990DD71-9E83-499D-9DAF-A466CF896CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7FEDEF-9772-4FB1-9261-020487A795AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3825:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B0F72-DEDF-40C4-887C-83725C52C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3826:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9568C222-9816-4520-B01C-C1DC2A79002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3827:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2F8FAD-1688-4369-BB4B-9FA9F30A80A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3845:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A1F23D-7226-4479-B51F-36376CC80B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB245C8-9918-41A0-9DFB-A11E4185C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3200rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9990DD08-BD81-4BFA-B3D4-0DECBF8CCC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3205rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F752A3C8-18ED-4765-B6EC-C664154EB701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3230rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F31C3F-7C0D-4D95-B4B9-89FD38076913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3235rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEEE36E-E735-4A33-80B7-9407D072F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3265rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB3D3DE-21BE-40C7-A510-AC97C92390DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3295rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9A9545-38A3-460D-AB1A-8B03BEB405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3405:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1860D932-777D-41F2-94A2-D14AB1494AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3445:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75165A10-2FD5-4370-814C-B60FDE339AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x5-e3930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454AC633-5F1C-47BB-8FA7-91A5C29A1DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x5-e3940:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2394E8C-58D9-480B-87A7-A41CD7697FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x7-e3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9AC02B-D3AE-4FAF-836E-55515186A462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AAC7A7-77CA-4C6C-BD96-92A253512F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD16C07-0050-495A-8722-7AC46F5920F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01423706-C82C-4457-9638-1A2380DE3826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A881E2D3-A668-465F-862B-F8C145BD5E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5B9B98-0EF0-4ACD-B378-F9DE5AB36CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDC6806-E4FC-4A6E-A6BB-88C18E47ABFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6602DD69-E59A-417D-B19F-CA16B01E652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C493EE-EF9F-47E2-8F88-86DF6C5F1FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40010DAE-DD1A-4A81-B6E9-EDC1B0DDCAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED96AC16-12CC-43F6-ACC8-009A06CDD8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9DC29-C192-4553-AF29-D39290976F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F625E647-B47E-404C-9C5B-72F3EB1C46F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AF3279-89E7-4C91-8C5F-5AD5937CD0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5878612-9825-4737-85A5-8227BA97CBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F453D348-28CE-402B-9D40-A29436A24ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36322F4B-83D7-468A-BB34-1C03729E9BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD22811-C3C6-4B5E-98D5-D3F2240E6C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C7D0BA-8F07-42AD-8BB9-C65472BE41C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3736f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A2A50E-94FA-44E9-A45D-3016750CFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3736g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5625CAD8-4A62-4747-B6D9-90E56F09B731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A234CE-D6AA-4A32-8425-1A4DDA0F6B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3740d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE1A01-3AEF-41E6-97EE-CB93429C4A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3745:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410184AF-B932-4AC9-984F-73FD58BB4CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3745d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B265F073-9E0A-4CA0-8296-AB52DEB1C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F664223-1CBC-4D8A-921B-F03AACA6672B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3770d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987A8470-08BA-45DE-8EC0-CD2B4451EECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3775:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBC9542-FB77-4769-BF67-D42829703920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3775d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74FDC18B-4662-422E-A86A-48FE821C056F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3785:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB4AA2C-D1D9-44D8-9471-66EBDE9DC66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3795:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA3E7AE-CB74-48A8-A2B8-9FCADB6E40D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E4461B-72F8-4F3D-A405-4AFA99EC8A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663DDC1C-E48A-4E84-A6CC-B46FC45D6A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEC75B-10CE-4B7E-BA5F-6D661EC07FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEDED56-9387-4DAC-BF52-C32ECCB7D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA13F31C-BBD9-48C7-8499-92D0B5CA8CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57A9B28-734B-401D-B24C-A295F364D8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3355:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02289DF-4A02-4602-89B7-E9148236EE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723E7155-493D-4B5A-99E2-AB261838190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j4005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E37264-E4BA-4D9D-92E7-56DE6B5F918F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j4105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8704BE6D-2857-4328-9298-E0273376F2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731F1E65-1D53-443B-8E2F-8AF11191AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2806:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A83822-822D-4A4D-B29B-A5BE6367A7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C32738-F08E-469C-8DE0-2708F30574A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B292187E-8EAD-49D2-B469-B14CA0656035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D131E1-24C1-48CF-B3DD-46B09A718FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABF1231-73CF-4D1B-860C-E76CD26A645E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F88E38-4EC4-41DB-A59D-800997440C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FD6647-4101-4B36-9A9A-F70C29997148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2840:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D248D668-A895-43B3-ADEF-1B22EE7DC76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858411B5-E904-45FA-8B33-5CC73B915B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2920:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB9336C-C893-4AB0-9402-868CE9960058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4695F94-7AAE-4219-9EF6-CE6D0838192D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2940:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A0991-73F0-410D-855C-BFC88A66E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF5CF9A-B3F2-4686-B933-7DB13AD2CF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9858EAC3-C1CE-449B-A605-FFA337DA825D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8F905-A4C6-4EC6-B9E8-800948350B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565B48E3-1406-4E3C-B4A5-35865C5614E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B6C4D7-B0A2-4DF1-B8DE-19C806D5FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB82A90-C0BC-4BA8-88CA-4967BC3A4A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A094B-E354-4767-AD43-87CE140BF851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1289B9E-5725-42EF-8848-F545421A29E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n4000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238A21CB-F8C5-468B-B523-6D014E2EA8AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n4100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC52CDD-614D-4EA0-8DA8-D71189C42E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4229DB2-8BBC-49F8-87A8-2E7D56EFD310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBA7322-4D95-4E70-B6A5-E0D8F1B5D7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E91F46-D950-4894-BACF-05A70C7C6F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:350m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E12B40B-5221-48A6-B2A6-D44CD5636BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:370m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCB77C9-ABE3-44A0-B377-7D7035E8A11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:380m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06639F5-5EE8-44F4-B48A-5694383154DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:380um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9662C9-59D3-4B3E-A4DA-4F1EE16FC94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:390m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637C3687-FBCC-41A0-BFE6-823BAE45FB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2350A197-193F-4B22-80E8-3275C97C78EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734C7A7E-ACCA-4B34-BF38-0FAED988CC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9ABAFC-B3B5-449D-A48E-2E978563EDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99019EA0-6576-4CE7-B60A-975D418AA917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E846AEF-751D-40AD-84B5-EFDC9CF23E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9DD909-B2AC-46BA-B057-D239D0773CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F5C355-FDFC-4E71-93AA-218389EF10E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A1CA1E-971D-4F67-864E-2E772C1E736B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2115c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5F8391-D974-49AC-8550-ADB3FA6C0535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8302BF58-9E54-40DA-BCFE-59CA52C460D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2120t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCDE9EF-037B-4650-8131-4D57BE141277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BA9DA8-F690-4E3C-AEF6-6A5C7BAA6F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8253DA-9A04-40D6-84C1-C682B4023D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2310e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF6D175-85C3-4C72-AD9F-31B47EF43154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5FC594-2092-4240-9538-235BBE236DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2312m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D95F00-EA89-4FDE-991C-56636B8E0331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2328m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C40D38-F7F2-4A48-ADAA-6A8BBD6A1A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2330e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4158561F-8270-42D1-91D8-E063CE7F5505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0DEA96-0202-41EB-BDC3-24E2FC4415B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2340ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BACE1C-5D66-4FBC-8F86-30215A623A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2348m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF707146-0D64-4F3A-AE22-956EA1CB32B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2350m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8118C3F9-0853-4E87-9E65-86E1398B2780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2357m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A298501-C4D7-48D4-90F9-15AFA59DED48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2365m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE1B07B-3D92-4D2D-8667-D902F002277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2367m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F05CB19-1059-4C4D-BFD7-9F51A22A4F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2370m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5588732F-7F1A-4C24-B35F-30532107FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2375m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A127DD5D-426D-4F24-A8C5-DC9DAC94B91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2377m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EE0BBD-3982-4B0F-82F6-D58E077C75DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEEC918-EA25-4B38-B5C3-85899D3EBE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3115c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813965F4-3BDA-4478-8E6A-0FD52723B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3120m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5EA2F4-F3EF-4305-B1A1-92F636ED688F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3120me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04384319-EE8C-45B4-8BDD-414502E7C02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3130m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52528CE-4F31-4E5F-8255-E576B20F3043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C3F422-F865-4160-AA24-1DAFAE63729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3217u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D034E7F-4D17-49D7-BDB2-90CB4C709B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3217ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C18E6B4-E947-403B-80FB-7095420D482B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2814CC9F-E027-4C5A-93AF-84EA445E6C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3220t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A470C3-AAAA-4A6E-B738-FEB69DB78B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3225:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1236944-4942-40E4-9BA1-029FEAE94BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3227u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086CAB4B-A10A-4165-BC33-33CADCD23C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3229y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A6A1EB-B3AB-4CB4-827E-CCAAD783F8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFB6B30-BFB0-4397-9E16-37D1A772E639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3240t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCB9D7B-7D0A-435D-8499-C16BE09E19FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3245:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64277594-9713-436B-8056-542CFA9F4CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589BB170-7CBA-4F28-99E3-9242B62E2918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3250t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9C4D9-DA09-4377-9DCD-225857BD9FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4000m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D0265F-840B-45A1-90BD-9ED8846A9F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BAC0EC-2B38-4553-A399-4BD5483C4753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4477EBA6-F0A7-452B-96E8-BA788370CCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1285D817-B5B8-4940-925D-FCDD24810AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4012y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D289F7B4-27CD-4433-BB45-06AF98A59B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4020y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00168903-6012-4414-87D1-2EE52AA6D78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4025u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE8D524-577E-4994-8A4B-D15022C84D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75977B0B-C44D-43BC-8D7A-AF966CDB1901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7F5D52-9F41-49A4-B941-E0D777203FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B5B3FD-5BEA-4DE8-B010-55FED1547167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167B1B04-5823-4038-A019-3975A3B447C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C7A4EA-0B5E-47CD-8924-3B1B60EB4BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA096E0-5480-47CB-822B-D11D7E20F69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30357469-0B8F-4385-A282-2F50181EA442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE70772-7796-4594-880A-6AAD046E4D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4112e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9E2F8D-2974-4833-9EC2-233CEE257C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4120u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EE3078-454F-48F8-B201-3847DB40D5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE32C500-55C2-41A7-8621-14EBF793BF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D3DF52-501A-4656-98F1-8DD51D04F31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA603AD-6CF1-44B2-876D-6F1C0B7EF2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578301-CF39-4C24-951A-535743E277EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4158u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4D14AA-7DBF-4B73-BDEF-6248EF5C0F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A65F303-96C8-4884-8D6F-F439B86BA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E046105-9DF5-425F-A97E-16081D54613C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2987BCF-39E6-49B6-8DEE-963A38F12B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEDE2B7-9AA2-4A14-8A02-9A2BFF0DDCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD92AD8-033A-4AAD-91E5-CB446CCE9732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0E73A-F1B4-4E70-B9F1-EE97785B8891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D6E3CC-79B1-4995-9A76-41683C7F254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CEB2B1-BD1A-4B89-8E03-4F90F04A0F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE5773D-3CD1-4E63-8983-E0105C46D185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7C307A-6576-4A0A-8F4E-0981C9EE2901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B3A53B-902C-46A5-8CE7-B55102703278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB843479-729A-4E58-8027-0FC586F051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5A233-1E77-49FD-AC2C-60D185481E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18519CF2-B0DA-42DD-8A3E-9084298C210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329D5FCF-7EC5-4471-906B-3619A180BD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD43EAA-F3A5-4748-9187-A6E6707ACD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F3C14D-4BFC-4205-8781-95E6B28C83C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5015u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20942AD8-ADB7-4A50-BDBE-DB36249F4F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5020u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC6ED02-134B-4322-AB72-75A0AB22701E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA74EEE-54CC-4F80-B1D3-99F7771335ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B859F7-0373-4ADD-92B3-0FAB42FCF23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC76F31-00A5-4719-AA50-92F773919B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49996F5A-51B2-4D4E-AE04-E98E093A76CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8406B0-D1E5-4633-B17E-53DC99FE7622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D49435C-7C33-454B-9F43-9C10F28A28A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17E1A0F-1150-4899-81BC-BE84E4EF5FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADD98AE-BAB0-440D-AB9F-2D76BE5109E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED44A404-8548-4EDC-8928-4094D05A6A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6E4AA3-BEBC-4B14-9A52-A8F8B2954D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AAD8F0-0D31-4806-8A88-A30E5BE43630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8164EE5F-6ABA-4365-8718-2F98C2E57A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7110AF9-A407-4EE2-9C46-E5F1E3638E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A06696D-37F0-427D-BFC5-1606E7441C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F8A5FC-5EFE-42EC-A49B-D3A312FB5F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:8100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A76015-0A05-4EC7-B136-DC13B55D881F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:8350k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C352DCE8-E8D9-40D3-AFE9-B5FB84F7ED33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:430m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54464F6C-9B2D-46BA-AC44-506389F3EE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:430um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA11017-EA58-45EE-8408-FCCCF7183643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:450m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5098A5-E4E8-47E4-8CD0-F607FF0C0C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:460m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442AD778-D56F-4C30-BBF8-749D6AAC4737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:470um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7D3F31-AF4D-4C50-8590-A763AAC7AF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:480m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445BFC2E-38FA-4130-8550-0866EC4EDA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DC2746-CE41-40C9-8CFA-23231BBCAE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3A8976-5E4D-490A-A87D-A47D1B2B903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8535E6-220E-4747-8992-45B6EAFC555C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7479B49-F484-4DF2-86CB-E52EE89FA238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:540um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D68512-746D-4E95-857B-13A0B6313C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:560m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4312BA84-F9A0-4BD4-8438-058E1E7D6C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:560um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E52DF5-C713-4BC4-B587-FF6BDA8509CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:580m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304ADCAC-9E49-42BD-BC92-58D9B2AD52E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB02172-B9A7-4801-88F2-98BF5843184A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:655k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5141380E-BD18-47C1-A84C-384BA821773D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE6C49E-2359-4E44-9979-7D34F8460E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:661:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C004B75F-37AF-4E61-98F3-1B09A7062DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7126D19-C6D9-43CB-8809-647B1A20E7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC98503-A80A-4114-8BF2-E016659BE84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E6F4A7-24BE-4AA0-9CDD-84FBC56FE9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:750s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3821412D-B010-49C4-A7B4-6C5FB6C603B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CA5CC-9EB1-4063-8B9D-3F566C1EFF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEB5D2D-FF54-4BDB-9E9C-8C1B2719FC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD5B51A-AEA0-4DA2-BA60-94A2D5605352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C6CA0-434D-428F-B629-A971C2937628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2380p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301AB72A-A6F2-42C8-A931-94EF2271443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2390t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59414B5A-05B8-49AF-A197-2A31729DDB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFDD380-692F-41D7-996F-F97FC74DC7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2400s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49602828-2BFC-4571-9F05-6210FD263DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2405s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E03978-E16D-4A9B-8AE7-9F4F1171C14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2410m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03096A9A-5758-47E6-81E2-BCFE847C41F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2430m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150CC865-7975-45EC-BFF7-A94146442BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2435m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FA1308-589B-432B-80F9-9A499D083ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2450m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED2453E-30E1-4620-BEC5-21B0083449E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2450p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE8DD05-D700-4F89-9B01-D489029DF7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2467m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050957CA-6191-4F9F-9D07-48B342B3B1B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACBF998-8B11-45C7-9017-486AED4FAE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F2F3C4-FC94-414A-A208-913A43D57D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641152EC-F4B4-4E5E-B396-AC4CAAB805BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4911E332-B8BA-4336-A448-3F70D2BBB147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2510e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330EC403-3174-4543-9BBE-CEC0ABC1575D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2515e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF585D0-507E-491E-9C3B-78EE26F2F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD00F7C6-6762-4DC9-9F6C-5EAC4ACB1C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2537m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5D885A-85C4-4A11-B061-61EFF6B6E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0502B59F-933C-4E25-A2EC-9296B197E139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2550k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D9C0A9-2DFF-4760-8FED-AC2DA7968E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2557m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A1BAEC-18BF-4607-BFB7-48102E75186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49ED138-F42D-4451-A350-0B2DD5AB9444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3230m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED91472-90FC-4AC8-96D5-1550A8502411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3317u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57CEEFA6-CEED-4CA3-8DDC-B6601D69FB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3320m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD25ECD-0605-4CD7-9DC5-294ACD7EF1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784E2AF-A5E5-4960-830C-B3EFB84043D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3330s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9112FA50-5527-4B20-80F5-2DE9E66D09F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3337u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CE4E2E-B2BF-409E-B18C-D67DA810FE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3339y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B84D67-0B1D-4B74-BC85-AF8F933D8429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA05A18-1523-4EED-9D2E-0A258A33F24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34E70EB-92F0-43F6-8883-FE422BE1A3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D301F1-20C2-4756-9A90-37F14835CE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3350p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EEC8B5-1CAB-4FBE-BBA2-D2FFA3EF9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3360m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA63B803-4D48-42E8-A793-F92ABCB8BFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3380m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129DB9CB-E878-4856-A954-15FFE1428636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3427u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730DB4AA-FD7D-40C6-8D7F-19937832EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3437u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E86978-4820-422A-8C7C-FF0697DAED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3439y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7A9DB5-F544-4FD8-A9CC-0BD6257516AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF813AD9-D296-4915-861C-8DE929E45FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3450s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A65469-083F-40B5-86C5-A2EAE5B2F00A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1AA82E-BD86-40F5-B417-71DF6AF53A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71A6DB0-5EB0-4712-8480-CF427F521D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8223D5A1-ADF1-43C6-AF91-EE5C413BCB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3475s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD69605-F52B-4623-921A-983A5A408ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D5685F-6FFE-4A6A-9FF8-940C8DA36499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3550s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94062D9-8DDA-4B4A-B3B5-07F71F5B97E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3832D0A6-419D-4876-B5C4-920578F713F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA5C8A-83A8-4F96-9D7C-7A50ADDB2341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404E38E6-9EB3-41D0-97A7-DC579688BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E4A921-AB28-47B7-B5A3-EB82193D15BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3610me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0357E48-2300-47B4-B9E5-9FE813A2FC09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CC28B6-57D1-4919-AA55-A262CC16AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB4C54D-1265-425A-B507-E1099844875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97362147-3A71-430D-9064-4435D45C3B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89212CF3-4E99-4389-94CE-F4211DDCA01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4202y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEA4DA3-0AFB-4FCE-92DB-5B316775BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611C0A0A-1FA3-42F9-82E8-BFCB71A077DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F027D9-DCB4-4A3D-8987-41F2941DBD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BCEC9-2BFB-4B41-9A7A-18B1347C6202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4924CE39-A846-4DB4-9547-6322FC5AD6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4220y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9E2C9A-94A1-456B-90D5-54932DF64C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC04C652-B2D8-4002-A50E-8AFE83204A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4258u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D413F0-CDBC-4A63-B9A7-9E7725BA1E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A8826-59F7-4A71-B74B-737BE9C7DE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4278u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB6BDA-6825-489B-AB39-7729BA45DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4288u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7913F57E-E600-4767-AF51-D045E1898E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3783F4-5A05-45AA-9791-A681011FD78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3114D-31D2-4DBF-A664-F4049D8B6266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EE6578-981D-470C-BB24-4960B3CB1478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4302y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3320D50-C5C9-4D75-BF1A-5BB7BCBFE2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4308u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE59839-8EB9-47FE-88E2-F0D54BE787A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75694A3D-080A-4AA7-97DF-5A5833C9D9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C5E27D-BBAB-4395-8FC6-8E3D4FB9A1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E996176-3DEA-46E6-93B7-9C0DF32B59D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4417007D-126A-478B-87EA-039D088A4515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78C2825-F6A3-4188-9D25-59EAEC8A7B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2FA85D-B117-410D-B247-8C5A3479319A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4400e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A041D27-132C-4B15-976F-1750C039A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D495E06-BF2B-4C5A-881D-94C93CD2BA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C31DFB8-8D8C-47D6-AAFF-BAE829A3D965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4410e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088BC395-06D5-4156-85EB-63C4A9552898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4422e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A220A2-A6D2-46A7-B168-607400EEDCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E79232F-7196-440B-82D4-165885251232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED866954-77AB-4CA8-8AED-4252C595FC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A1F516-B180-45D4-8EB1-754B7497CB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36758A04-64D3-4150-A004-CF042FA31CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E01752E-F1DD-400A-A917-216CAF15B0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD47EC58-F776-4F59-8F15-4B208904CF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3781F4-2123-4FA1-8AF5-D0D1E6C1A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94565E35-8A58-4CB6-A489-C796DCB97FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49964D35-5323-4412-BD54-661630F9A8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A37E7D-1BF6-4A2A-BF52-5F0EC4B4F341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F66468-87D0-41FC-934B-5924BE2956CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E0F93E1-4607-4DF4-AC6E-4B7254D4A8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C0D99E-443E-4AB1-A07A-900A09FE177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D0FD76-C1FB-43D0-8511-FC0BA6DA7960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DAEE52-09C3-4A09-9958-9D6807B2700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97690D4-E814-4D40-B170-BE56D7AE2C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89804F2C-D32D-4444-ABEA-5B241153D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAAAF9C-B29B-4020-BAFF-C87B1A08294A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE60E1E-AB8D-46E4-A779-A54F2D20B5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB958A28-7C9A-4BD0-B002-4E1A65CDB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C27B318-2AC1-423D-B0C8-583BB1800D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E58E3D0-1154-4B13-BA16-67CE67DF0637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D2ACB3-B906-4944-A021-03C4645965BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFF834A-D7F0-4E48-AD3D-DD0BCE6DEC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1A41BA-A1D6-484A-BAD2-68DF85598354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11260C9D-69A9-4D81-9CCF-2E116DD75F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5257u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C020F06-FD27-46E3-A48F-3F60F33BB969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C74F10-6A7F-4F68-8A34-E981E1760DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24741B98-8D0E-4307-AAEF-A14B2531DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4FA4BA-4304-4A70-9F86-120F2A3D8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367FC8BA-F046-4264-A049-49E933E7698F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5575r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9B68D3-1DFB-4468-85C4-AC13E6CBC111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C966A016-B650-44D9-B8C4-1ED50AB318DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC448FF0-6D3F-4609-864B-4191905EE2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC246FE-4CA6-4B2D-83C3-D50A386C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758A14DB-1BAF-442A-BA7C-5E9C67847BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61309100-CFA7-4607-A236-8910838AA057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D76265-7BD0-4C51-AE77-22B22524DE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38B195-BB8D-4747-881D-E8033760B4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA8BE76-168D-48A3-8DF6-E91F44600408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B656975-5D71-4712-9820-BDB7BC248AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA045267-114D-4587-B6D7-E273C28DC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77018415-E122-406E-896D-1BC6CF790BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADF37F1-546B-4EF0-8DEC-DC3B9F5309FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7469256-1A64-46FF-8F5A-A8E9E3CF5BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9069B9-9FE3-4AD5-9A8E-55C0F73BD756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E1C012-3E05-44DB-B6D2-BFD619C034B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D689D6-8594-42F2-8EEF-DCAEBA885A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6446000-0494-4DC5-ABAA-F20A44546068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B94EEC-6690-45D0-B086-F4A5B25C25CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B767B6E-B3E6-4424-97A6-89A7E7EB0EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832AB3CD-E3A1-4CCB-A210-287973563D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A26C0CC-68AD-40F5-96B8-87E6C643F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C4221A-9994-43B3-9C7A-E13815A50A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20070B1D-B91C-40BA-A9D8-E80170A2933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70129C9-371F-4542-A388-C095869E593A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4DE25F-168A-4C67-8B66-09F61F072BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58157F24-D89E-4552-8CE6-2F01E98BD1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7FFD78-1E1C-4246-BBD3-73FAC06AA46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ACBBEA-EC95-4F3E-B585-893DB6D21A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEC55DF-1950-45E5-A5F2-B5604AFA1CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:610e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A5EC79-1B21-4BB3-8791-73507BC8D4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB4AFC3-FE30-4F46-ADC1-D03EB14E757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0387587-AAB6-4284-8516-4DA3E3582D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A238C975-9196-449F-9C15-ABB2E9FD1D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F17F4A5-120B-4E00-97C8-8A85841ACBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2537F047-64C9-4E73-B82C-310253184183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A55857C-649D-46CE-AEDA-6E553E554FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA4892D-AFDF-4441-821E-5EBF7F64C9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327E06A3-7F0E-4498-8811-10C8D15398FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1624E6D6-858E-4085-B0B9-362B819EFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D61F4A-40F0-477C-8326-7359D3626E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1455B4DE-7F1C-4CF2-AE02-2EDD20025D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:680um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B215788-860B-46CD-9A08-43AFF98FAEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B92FAD5-CA6E-48F7-9613-3A4CE90F5F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:740qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EB132B-000C-4A17-AFB3-19F40A73D2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4815AE-B635-4545-83C2-5EC4E0128337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:840qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0046C06-E3E6-4674-A4D1-332DD29D9552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C191851-3DC3-41C7-AD89-81F091CCC83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:860s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21126922-8E81-47F4-82D4-CBCDDACEC4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209E18B0-BBB5-4C65-B336-44340F7740DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:870s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C867C0B8-91A4-482A-B7DD-54AB9599AE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:875k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F03843-8A51-4CE1-BE6C-994BDE3A8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:880:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09854948-2657-4261-A32A-0523058F072E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:920:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13904A5-266D-481C-A42A-734C3823A238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:920xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC82FCB-0541-45C4-8B7E-CB612D7F702A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C18BD84-5E9C-4C9E-B0AA-2CEB0D7A58C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:940:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5ABC7E-C4E0-4850-A1E6-07EBCF4A87D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:940xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501E9355-0CDD-4951-BCC3-47962788BCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D976D9-62F0-43C3-8359-E51E26B6CD87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:960:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02AFBCD0-9B4B-4CA3-8FA9-D8B6ECB24894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:965:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ADE9AF-196F-4E0B-BC66-7DE0183F9032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:970:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90CCA48-1705-4564-AAF9-271201BD5113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:975:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B82BAFF-17F5-465C-8032-67D5ECAB2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:980:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F694FEC-B97D-4BDA-ADFA-751E8BFB7CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:980x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F831371E-7437-48D7-8281-1F406215041B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:990x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4F06B5-615A-464A-A0C4-7AABEE8530CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AF503A-A2B1-4FC3-858B-264049ADF0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E702C7EC-B1D9-4BDF-B334-2004CD76B52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39F31D6-DC4B-46FE-BE5D-EA612D915A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2610ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CB8036-5F36-4CD4-9B3E-D2401F2E64F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2617m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9849BA3-3990-4E30-B99B-ADD043314CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2620m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20FB18A-D3DA-4DE9-BEFF-75B7AB9B9A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2629m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A67CD6F-5E4F-4E69-A2A9-A4033DCE08EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2630qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A22E92-1EA7-45D9-AC86-EC3D9664C294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2635qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA2911-6561-47BF-BEE8-DDA31642C346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2637m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA6CA23-6F2B-44D5-B2DA-4F142BA3E48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2640m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F829DED-4D92-401A-BD80-C070DE57FC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2649m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F560575C-FD8E-485D-B50A-572604BBE903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2655le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED8C51B-AE59-46DC-85F9-6D3B2891CB3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2657m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A38D00A-B9DC-44DF-8247-70355FF9A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2670qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381EFC43-D5D9-4D10-90BE-4C333A9BA074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2675qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEDED18-2755-4C55-A1A1-04B4D5F40276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2677m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04B57EC-0731-40C8-939F-1C686A65A0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB301FB-EB3E-4F5F-868D-5B66CC7E1E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2710qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D28F9-B135-441B-A9BF-792DD356E374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2715qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D01CE3E-5C89-4FC0-9097-CAC483ACD441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDD55C4-AFCD-4DF2-921C-DDC1D7556DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2760qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F52334F-BE6A-4FD4-9F63-AE9BB017115B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C9BCC3-B9A6-4195-BF2F-E7BBCE8DC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2860qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4DFFA7-AA0E-4D7E-97B8-13389FD47D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2920xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707F6671-57AC-4DF4-8024-444502E5C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2960xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1FCE07-F9E8-4B14-95CE-01784D472128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3517u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C208711F-FC06-46C8-8849-27054DC1B264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3517ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AB8041-F201-4BB3-AAD9-199B06697DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C474C-D5EF-42D6-9B2A-A504BEFCB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3537u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F566CD3-3649-492B-B0AB-A107E51675B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9F3D74-AE72-4FC5-83E9-890781AF3093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3555le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8EA6A7-4AB8-487E-B5DD-9989CC5F1CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3610qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF63DDC8-A0C1-482B-92F2-CF6135E8C2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3610qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69918C6-7AAD-4AA5-AB72-C275367B1008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3612qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06155B0B-A5AD-4A82-8C02-D264981687A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3612qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76C19A4-FA26-432A-9443-9F92B2A946EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3615qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BEE9BE-E49A-489B-B333-95D0993F8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3615qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7427A678-EC47-4030-B905-619DD95F5A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3630qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86749716-1C9F-4C2A-B2A7-E62DEC10EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3632qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD000B53-06DA-4ED4-B0EE-9CB201B75C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3635qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8424463-C329-4BAA-8AA1-25CD8B63292E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3667u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52727E62-0048-4C56-BC8C-B3450D257B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3687u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8223AA-F077-45FD-A7E3-3C2C1A8F6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3689y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA34B50-2330-4D77-BF1A-6F05F3EF222C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6421F69-1076-43D2-B273-DE80FB2D5F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3740qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EDA9E2-CFE7-4917-BE48-A83208BDF0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A34E7FC-93A4-45F2-A7B6-4A8ABFCAB0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E611EDD-D44C-4311-B681-431D7C574528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E1B6AA-2F9A-43A8-9147-2BD9474E54C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1886D007-85B6-4E5A-968D-A1FD476A08A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDDCB65-4404-49BC-9515-ECECD58A667F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3840qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8D3E00-64C3-407A-9B00-8B6E383F73FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1B00A1-9C15-47C2-9F57-66586DEACC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4510u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5BF932-459F-4DD2-B160-5FE0371C7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ACE96-F1BE-4261-8F94-FC3C6E7C7561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4558u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783D6EA7-C016-4314-A87B-4FED1DC7114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4578u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD0176F-FFAE-4A85-9327-CE72FE059E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56970C7-F8D3-41B2-A78B-0C7F4A2A4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D4CE1F-86C8-4E48-9146-9DB57BF540FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7F9D65-5537-4C25-B02B-2393F60D1299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09C8A92-820D-4572-A797-180E17A7DEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7D77A2-0D9A-4D0D-B0DC-152757917BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07D3F1A-16CE-461F-A2F4-80FE5F841CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C04557A-C508-4FAD-A535-1C0AEFF08075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAE489-6679-4705-BF9C-BB6D385A1DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429A99C8-BC55-4887-893C-7124C1A5DB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A2B709-CC19-4116-A5BE-5DB5C8B45A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79DAC74-1F28-4EC8-B417-3FAFFB74C4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F1377-6220-43FB-BEF9-BAA7B0158147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18422CA8-3000-46B1-9065-2369E6B0BE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D558C66-E80E-4FC7-A0DF-485466390C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EA9AE-9E70-47B5-AD9B-0DF13A0939E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F22F6-4C87-47C5-965E-02A1AFF41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4720hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A2CA86-BFA8-4C78-987D-AD26F32622F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4722hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF64E0A-CDB0-427E-A96F-095EFEBA0A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425F6D34-EE60-464B-8EA6-8116EDAA1219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4760hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB9F657-1239-4424-A2E8-F8BD98C0095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4765t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631403C-0A67-42CB-815C-133EB87E0C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4A5A57-B1A2-4BBA-AC36-7EA7DF9CDE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0453C0EA-BA67-49D5-964F-35493F97D905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4D237E-ACB7-4382-AF5B-D27E634BF867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5461EB2-2958-4923-86AF-C74D449120B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C22141-E698-4E38-AF50-9CE04C1168FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D0E470-427D-4A68-AFD2-982A4F7CE2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB50F3-14AC-44BD-B7F0-A683C5FD1A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713C4B7A-C38A-4818-A258-D07DEDEC906E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4785t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59740BE-FC30-4400-B978-1DB41282971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839728F0-5F23-462F-B493-C37EE4C874F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B47DA-BA53-4D7A-9B5B-582238D5E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D452F1BF-1FA5-463C-8F13-6357509FB5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D1F4C-B396-468C-BA32-9367A68C95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4800mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76A812F-D77A-49C8-B7A5-0C08258D4BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4810mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E001AAB-07EC-47BF-BDE9-BB927872781D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF11F5-61E8-4A98-86C8-49D6B3224FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4860hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED153E7-99A2-4C02-B81B-C3DDF8FAE1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4870hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D024802A-EA60-4D9B-B04C-027A0703EABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4900mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA731F3C-1F04-4EE2-83EC-9486F5032903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4910mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544A59F6-E731-43C8-8455-69256933E71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624258EE-7FFF-4432-9B6D-4D60AA73CD9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4960hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A2701A-35A8-4268-B9CF-40BA3219373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4980hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E671F6-8DED-4735-BE97-58A60E5B5C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC68B2A-8570-4311-BB60-49DBBDAF7430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9826FA02-937E-4323-B9D5-8AE059ADBE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5557u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8630BB-48AA-4688-A6F0-212C1BB4D14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC98D35-D7D5-4C24-B47E-EDE2A80B2B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F8ABCB-12C3-4C45-844E-B07F77DA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326105AC-3926-437E-8AFF-916960107050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E1275-7541-4B80-8FDF-53246A204C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E190929D-D3CC-46E1-A903-0848829061DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E4EBCB-B660-4F6A-AD73-81B9D8964162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D58CC5-CB46-464D-93B8-6AD5A19AF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16541D3E-EBBD-4D92-96D8-F169733377AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F08D257-F570-4D39-A6E8-0F60E55472E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20ED667-2BFB-41C7-82BA-9F0C0044DA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6158ED8A-007E-48B7-99BF-8BA03BF584BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA7096A-F321-49A0-911A-F9683ABE6E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A471395-7F8F-4BA5-962D-4D8F271FAB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9484380-92B9-44DB-8E20-DC8DE02D1CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8010808D-805D-4CA3-9EA2-55EB1E57964C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FE9F-A056-42A3-A241-F2FE37A6386A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73422A3-ECA0-4C41-9AA5-CF7D77885CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A96A5AF-C9EF-4DED-AE25-4540A2B02915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5115B12-053A-4866-A833-D6EC88D8F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5619D4D-9685-4595-8A5F-A18273FE4213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77E00E7-0EA4-4E32-A693-0E0F66BA4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA3457E-7E1A-4878-9752-79382E954A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68630C63-4457-4E12-B7BD-AD456B237FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FB5695-2950-4CEC-81B4-FD280F835330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F340AF8-508F-449D-9AFA-4E55F069B4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E944410E-D674-4141-B50C-9F55090325FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6438E07-0AC0-4BF9-B0F2-9072CA9639D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5079AA70-C864-4AE2-809C-52B50632F2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D124BCB-D8C3-49F5-B05C-E09B3CEBEBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A86291B-C986-4320-BCEF-9F5AD8B309D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1227659F-1393-4189-978B-CC3DC53BF407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2DB843-638F-41EF-B486-409318AA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0004D8A-A186-4DA2-A7AB-18A6456438FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B6BE9F-F113-4976-951D-53F2E183A95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:6y30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB005F1-9719-4985-B9D9-2140C962ADD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:7y30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94D0C1B-F30F-4724-915E-192C53FAE58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:7y32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F247860-1D2C-415C-AFBD-26BD875AAF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m5:6y54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9697EDCD-A742-4AC6-876E-1080AD684207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m5:6y57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E73924A-875B-44D0-8F7C-A822B0488126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m7:6y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03751B92-EE07-4F16-A476-BD25561810BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j2850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A630E1-6CAE-4809-AB18-5002F158AE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67750FF-EF4B-414F-8ED4-299CAF33B0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j3710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A82D885-82F5-4755-BC11-5899E28CEE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j4205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AF1366-8A14-4741-8146-886C31D8D347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD75301-E29C-47DC-B53F-DC44EA0C1885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C944024-BEAA-43AF-A339-FD69C75E8240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435C69D1-3932-4379-8D18-B1E12D558325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3572B700-73C0-41D1-95FD-FE9D5B0C1F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A40DC9-0D4E-4C91-8D1B-3CED95B3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FB3E4B-05F8-411A-8C86-4ACE03815553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n4200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E55EBC1-6F96-47CD-9503-7855EFB07240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5502:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4208DBA1-7F85-4876-9B6C-D1B43EAAB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5503:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ADC8E5-1CE7-4481-A9B5-61BFC6B4FF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5504:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1789924-FADB-4076-8874-120B29EE6B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC246667-2F6F-4024-9EAA-2CE3018235C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21BA7F8-D4B5-4E6B-8FCE-04BBD3501AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1341A5D4-A5CE-4D31-A178-01C3069D7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A5C199-92E5-435C-AC40-175849285104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67589F54-0A54-4DE7-9A47-A73DD05F7965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC34C8E-1BB9-43CC-9D89-9E6DC435B7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE5163E-9BCF-4BF8-BCB9-B48C4E7E1564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C5DC8C-3318-440B-8B29-4827F343927B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5620:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECC47D8-F602-4CEA-B19A-209CE76C9D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7514ADD3-DECC-4CC2-9421-A609E526FDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED2EC97-8B2D-47A9-8EC7-D1E0ACBB6C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5645:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691097C3-F91B-499B-BAEB-4E7E9C43B517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5649:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3DB1ED-017B-43EF-92A3-A8A88669FBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e6510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A49AAF-0F08-4151-8F74-4EF9C3415B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e6540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7A2018-BB4D-4DC1-813D-A4AA3F270893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95D91C4-C539-4458-A6C9-8AE17207AE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F9D218-8198-42C7-88FE-7C5382138324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8FDD81-95EE-4241-93C8-925085A4CE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5509:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614D9E35-10E0-4CCB-B817-C7C8C3947BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5539:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F987E-F4DB-46FF-B048-21B4A4C07B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05376F2C-30B6-406D-90F7-6C2E00E85171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l3406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDD3DF6-24BF-4C13-8F07-AF07327E5622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l3426:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1520A64-2157-45D7-A135-F900798C4EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A30F85-5367-4369-B7A5-176D71279FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8803FF9-48D7-4AB0-8A17-4590CABD0BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC63B6B-5D6D-477B-9125-007F835981B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF385AC9-963E-4670-95A6-BE1EBC3890B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943FA088-2902-45A9-A1BA-D612B46A50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C80902D-9A6C-47D4-B56F-35C378FC0E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5618:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100B46C-8485-4048-BFF8-2BAB311EC04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9E1646-E154-41BA-B9FA-0839A898023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F4C8E6-0043-41A8-94EA-EEBAA1A081E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C10985-CBF7-4717-A7D6-2594887D7CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l7545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C49886C-B6A0-4D95-8533-329FE5A66F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l7555:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0788CF23-3FAF-44C9-9AAA-96E4818A1AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:lc5518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF7001-64D1-4BFB-9280-0BA0FAD97A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:lc5528:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E420E-16DA-4FB1-9968-C93E229614FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07469E04-B3D2-41FE-A2E4-E25A977026CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FF402E-5E4F-414A-A3AB-149548303616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E2B875-A270-45C0-A1B1-041264E5B290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w5580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C828C8C-7ECB-4167-87A9-0F522C400C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w5590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2C887F-1EF7-468A-A6AE-440793C78DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F3D7F-D884-4ACD-A103-060F57A9867B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1FCAAD-7072-45EC-9ACB-08556458BAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4446224-40E8-4AD0-8197-921D3473E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA159D9-8C7F-4BE5-9093-A21C7D00F7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92B68FD-771A-4401-8B1D-B1A252356F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B933941-0BE3-4EEB-8FDD-2DAA63343EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D060EF0-B29C-4B54-86A0-FD5CFF7B80BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F737C1-6011-42D2-9690-CA81EA0A283C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CA7EB6-D1C9-48D9-A69A-2618800A6CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5647:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA1F3E5-ED7F-4E4C-AD0D-0EEC542A9E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6E3C9B-A661-4B37-B76D-A3F7BD638D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C909B0-8FB2-4220-AF93-EECB8D650CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5667:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF36BAD0-A762-4F84-BE0B-060FE666ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007337CD-94FB-4ED9-B4A3-9E0EC52D79B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5672:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDFA137-F1FC-46BD-9872-D62671B1434D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5675:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6DBCB3-E912-43A1-914B-5C7CCFAADE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5677:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCF36E2-0B42-4F23-97D6-9E79ECCA8FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C67312-E128-4833-A91E-D7A9F96A7AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5687:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F19F408-FABD-4A68-8CDC-C763F0321FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A06EC2-E491-4CD5-9904-61A88EBB7FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x6550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789A8CAE-8D9E-4244-880D-FBE28EC53AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7542:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F901EE11-D0C9-46F6-8316-D8F4F1D50260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E549F600-B9CE-4843-A772-2DACC528903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F28E733-87ED-4610-A8EE-BD37BED7685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_bronze_3104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB488DD-D97C-4E21-A055-E6CECBBBC34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_bronze_3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC12C97-9966-40E2-8B23-B4453EC9EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e-1105c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2832E8BF-7AC7-444C-B297-66F770860571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44AA72FB-E78D-419E-AA82-B0538C6504D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687C3BF3-D71A-49AD-8A05-EAC07CBCD949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AF90D9-16C4-4F8A-9868-3E2823E3445C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C063C53-8970-45B1-85F8-FB2080BF4695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64596ED7-794A-4D23-987B-D9AD59D48EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E52BA6-2F2F-4CD2-A601-5B0ADDE5E23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1565l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDA48F0-0F35-4A8F-8117-B0B28E00AB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1575m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A561A8E8-79E2-4071-B57D-590C22EF86A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1578l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E46658-60AB-4758-9236-3AC0E6464383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1585_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8FBA-E2FF-485A-9AD9-E604AE0FB903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1585l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F99640-C753-40BE-A0A1-4C2D92E7DB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1105c_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1EC6D3-01CD-4CAB-817D-AE2E72FD0D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1125c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F98247B-1839-4676-855B-827A4B6C016B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1125c_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBA35BD-1048-4B6E-96B2-1CFF615EB49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CEEEE2-D6A2-4342-8A73-934093948824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979FEE9F-A957-43B6-BB6D-1A851D6FA11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7AF59D-D05E-47F9-B493-B5CD6781FDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF7EC93-0170-45A9-86C7-5460320B2AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7B1C2-D2CE-485A-9376-27E14F3FA05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_12201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F803AC-DCC7-43FC-BEB3-AA7984E0506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_12201_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560993AA-299D-42B7-B77F-1BD0D2114CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C582B1C-1DAC-48FD-82DD-7334C10A2175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7862B0C-2C44-4110-A62A-083116129612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048C5996-F719-4338-B148-0DD1C13E02FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0196DA2F-CFA7-44D0-BDF5-37C7403E3B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9FF7FB-AB5A-4549-8C15-E69458C649E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEF6608-B650-4C77-9823-0AD57B3484F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1226_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE6A2D7-901C-45F9-B487-D674047D522E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFCAC5E-6CF1-4EC1-A24C-688DD1016A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADCB509-5B0E-4592-8B23-EC25A3F79D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB51691F-089F-4016-B25E-238074B06C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBAAC728-6A0F-4675-9677-AAF7DD5D38ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3BFEFD-3D0D-48B0-A5AE-6F3C2D791CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7E1AFD-9BCE-4487-A8DE-F9C60529CA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1231_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA37503-FD3D-4220-933C-234631D6EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72992831-2A76-456B-A80C-944BDD8591E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1235l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79C2131-5566-4CC2-B6ED-38E3F6964500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BFDAA6-3DFC-4908-BC33-B05BAB462F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6266056-770A-4E2D-A4FC-F1475257648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929AA8F3-8BDF-4614-9806-6D4231735616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605D7552-8184-4B11-96FD-FE501A6C97DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3144BBDE-CC96-4408-AA02-ECC3BF902A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BA77A-34E3-4B9E-822A-7B7A90D35790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7165B43-ED22-4714-8FA4-1E201D1BFA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1241_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CFB133-FAF0-431A-9765-8A9738D6D87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2975B0F2-DB7C-4257-985A-482ED2725883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70221E07-3C2E-4A82-8259-AD583EB5CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427DFD78-56CD-43C4-948E-F53AF9D669F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3E6F5F-6B82-43D9-BD6E-D22F9B991DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75AD7649-3FEA-4971-9886-6C9312B937A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1246_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE972C-6BAE-4342-BA01-1D685487F9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1258l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CDFE3B-C064-49A9-BD43-3F7612257A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1260l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD0EEC1-D695-41A5-8CD6-9E987A547CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1260l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35AA9AC-28B3-49C2-A9B5-5D26DFEDB723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF25B8-D474-4C6B-8E45-F57DDC7074E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF18FD1-6670-4C3C-8000-A079C69D575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D760EEAF-5CF5-4F25-8FA2-D4F75F4F5A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1268l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921EB5A5-F911-4FCE-A6F1-C66818B34678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1268l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13878C13-1C7C-4B83-AF27-4998E8F659DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023063E1-2DD7-487C-A8A7-939FAEE666A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77255CE6-D7B7-4B48-993C-7100A1170BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40AC368-3A14-4EFF-A8D0-7EFB4C83045D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3472AA7B-C0CF-4D65-8A6C-B1D52D27F0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07E80D5-70A5-49C9-9044-D683C7ECCFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1271_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63668AF4-F29C-4424-8EC5-2F0A5950DD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86616FE-0C3F-4984-A364-8A6A9F01DAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C1C7CD-538D-4D7A-A81C-10DF5376A479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5922F749-2B23-44B8-8A46-F31BCAEAD279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48BBAF-6B27-43D6-B86B-40CD8E7BA056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75D0EEB-707C-4C86-A569-E91E9F00BA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FB0E20-0243-40A1-8DEF-37150791222E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1276_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CFF26D-8AD3-4179-9E4C-F06D7C858C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1278l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7541572C-229F-4963-B7F0-06EB3323E53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DE669C-27FD-4196-8B8C-1DA4EE4C1D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479F7C77-D16F-4E40-9026-3EB8422E0401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A242AC2-9AA6-43FD-90F4-5BF6E80DBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB08C8-0018-4A8E-A206-097BDDF83B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7193E85-30BE-42D5-A26B-3F88817F3574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1281_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446E8515-45FC-4B8B-8D12-60643D64C07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBDF6B2-D388-4639-87D8-064AA3F6B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB8B6-B614-4EAA-BA90-C5326CB5D07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A371DF9-E224-404F-99C2-C2A4607E62D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F40E356-365D-44B7-8C38-A0C89DDD6D3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3132029-89F8-4359-A0DC-A275785266A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1286_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02F5685-0636-48AB-B222-434CA1F3B336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1286l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51FDD60-88E5-4A86-BB8E-4C2D7EDEFA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED4693C-DECF-4434-90C0-56158F102E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1290_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB408A6B-0842-43DA-9180-B0A299FCBCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1501l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6215EBAC-7C75-4647-9970-482120897F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1501m_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3357FCAC-B6C4-4E3E-A40B-AB5084A7F9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1BD2B6-1AF6-4AD4-94FA-94B453A21908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1FD6E8-80EC-461F-9ED1-CE5912399E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96F585E-BDEF-45EE-B0AB-94FE23753AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2650l_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3279C067-3058-4D46-A739-05404FD0E9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4DF0A7-8BC2-48AE-9036-FED6EEC57DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0855225-F501-486A-BD03-2A86FD252B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214C7B0C-C438-4000-9F9B-6D83294243AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C91AA2E-4BB2-49C8-9364-4E363DF42CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658a_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA26781F-5A1C-4DA5-835E-D984D697F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEA4222-F25D-4457-80AA-6D05CA918D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3E60D1-5CF9-4F96-9EDB-D87F8CF57272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D321BC-6B1D-4C71-8E16-5A1319CEFD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC35-9D1F-4153-94AC-B25627D730E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2665:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F063F4-8994-4E46-BA7B-A12A112009BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6F2DE5-AF11-439A-8D37-30CB882ECD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E213DD86-5419-42C8-BF38-7795DDB3C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A972291E-5231-439D-873B-2F87BCAF800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C089CC54-3229-43D7-AA15-73CFA1A43EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF268D83-C15D-4559-A46F-844E1D9264F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE97C0D-3EA1-4314-A74A-7845C7778FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34293F29-F327-4ADD-BF62-78F63F79BB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C0A46-1CC4-4882-985A-0BB41525BC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643F3522-A452-4927-944D-532574EC4243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F40B78-4DBA-44EE-8420-086789EFF53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "423BFD8F-4B50-43DA-9979-75FD18FBC953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2683_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAD4A68-0481-476F-BBBD-3D515331368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2683_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838CEB7C-7C4C-416C-86CE-6E8DD47EF25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7D021F-3C97-45B3-B1F7-0AC26959F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A31AEF3-448D-417B-9589-4BA0A06F2FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A1D96F-7FFD-413F-ABCE-4530C3D63040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB2B08B-D3C7-4B82-B170-471D6CDEFAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8343FE-1320-40AE-A37F-70EF1A4AC4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD42BA5A-7DA0-409D-8685-E43CF9B61D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FF80E9-CF28-4EF6-9CFE-4B500A434674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7896A6C6-5918-4C27-85AF-6FEEFC7F8FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647B77A4-2F49-4989-AF43-961D69037370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "805B1E33-F279-4303-9DF3-C81039A40C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B971EA9E-AE5C-4A1D-AD55-8241F7B38C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7E0AAE-6539-4024-9055-BE0BAD702143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1A8828-0765-4799-AD6C-143F45FAAD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D34618-1CCA-405B-A49C-EB384A09C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697a_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D6061-66BC-4862-BC84-ECD82D436E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2698_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B6EE64-1AD4-46B2-BA65-BB6282E56EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2698_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11650B45-0BDA-42BF-AEF3-83B48DD6A71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3C92BA-827B-48AF-BBB3-FB60A9053C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC097E24-F6C9-40D9-95E9-7EFDFA61AFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699a_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB44CA7-DFE6-4B1A-9A63-97AE30017E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699r_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B305EFA-6226-412C-90EE-F0691F2DDDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3874FA-63CB-4B5D-8B64-CE920320A4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4603_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0800ED17-50E4-43F3-B46C-591DFA818BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46B0405-F301-4209-8766-6E12EAFAD157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4607_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F9F1F-A967-4884-96CF-4488102DC0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B37AD-4599-425B-B39F-E571F4975266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A5F1CF-A1E6-45F1-8B09-36566778DB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C8A49-888B-4675-B3B0-25EDE2FD515E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D98F97-8EF4-48B5-84BE-C3CC27031FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B473D1FA-909B-492E-9C5B-94B0E20E1C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5EA7E-322E-4CE6-89D4-7DB1055C9034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67836379-4E1A-45CD-9506-7D3F612E47C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1BBC61-8664-4452-93A7-DDB4D2E4C802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F1B50C-FC5F-47F4-87BC-60E1BD3DD1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4624l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044F0375-DF2F-4D9B-AD7E-473D34165E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEE9B72-5C4C-40C0-A8A7-9DF11655DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0655CA-A88C-4632-9A18-560E3F63B2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1454DD-DA51-4CBC-8BB2-09D5AB5777DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4628l_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6965851-3B29-4C21-9556-97FD731EAA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52984FD2-44E0-4E91-B290-0376737EEF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D92E2-E718-4247-BA5D-DFE86C0F6AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF933366-7503-4F8D-B7AA-F6A16210EC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2DAF5D-5BB7-49C6-8426-8B547505B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4648_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EABB21D-D021-434B-B147-CAF687097A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7609424D-95F1-4493-A20C-B1BA4EC6439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966DC636-C802-4D9F-8162-652AFB931203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75794EB-A5AF-43F0-985F-D9E36F04C6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C2CFF0-98FD-4A0D-8949-D554B2FE53D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F9217F-5028-4659-AA8E-F60548DE4D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4655_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC769DC-CF2E-4A3C-A610-264F024E6279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4655_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2B1CBF-D155-49BC-81A4-4172F177A5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4657l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370B2B32-519E-4373-8A04-5C5025D688BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4660_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D9B562-C279-4A55-A347-F28FC4F9CD12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4660_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8C2BA0-48A8-4107-8681-A7C34C553D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4667_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B009DE-A82F-4569-9B42-EC1EC4DA8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4667_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B6E83-37FF-4F9B-915F-059EBB29DB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4669_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E218718F-4BE6-48B0-A204-9DD4A932A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4669_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0AB327-B60A-473C-9D36-97766EE62D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA249EE-4786-4E27-8787-5E8B88C2AEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBD0529-1CF3-44E5-85B3-19A3323C9493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D664EE97-07EC-410F-94C3-AEAB2C6A627D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31DB981-03B1-4A84-8D87-CD407C3C149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD155D-89D9-4677-A621-4D7613BE65C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02BD0D4-FFFD-4355-97D8-170362F10B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6635781A-2651-4EF2-A5AC-AEEEE63FDE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1630_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DCE6930-760A-48C0-B964-1E3ED6A8517C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1630_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E52DE90-DF96-4CE7-B8D1-226BA50E4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EB40E7-9B91-4106-B303-2B70AF395BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB0D5CD-8AF3-409D-96A7-718641D4B90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E420B0B-0CD5-41C7-B25A-3DB856055F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0C295B-0D63-4BE7-830D-D927E00C301C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605C340D-2220-4669-B827-9009CB099E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8791879D-2908-4F57-8DB3-6D24100A9108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBEDBBA-0427-4DE0-BA8D-737DE7DF80E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E823DC5B-98BE-4656-BFBF-3A7018F8F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1680_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E8D558-ADE0-4358-9C76-7BD77BF23AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1680_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7973B3D0-F244-4E26-88F5-A2D9BF2E4503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2403:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E6BAB9-CBA4-4362-BC82-00D2C5CC6FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2403_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3F4BFF-3CBE-4E4B-8B29-B203F99CFD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2407:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5CB567-4F86-4466-BE4D-BFF557ACAE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2407_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A52611B-6583-4660-90D7-C9472728072B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2408l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80C6E89-B57C-47BB-8B95-50C03DFB3B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB685B-FEE1-41EF-A046-1B34619E12A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9F6724-967A-4AF0-9896-12BF6164B2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1116BF-12D7-47CC-98DB-18B200CF9C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBB28DE-726B-4AF0-88A5-35987E1E648B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2420_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA1DB22-8FBF-4CF6-AA96-5B68EE28877D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1880E2B8-5E0E-4603-8D17-3ABA43D28179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFBB92-1917-4238-832B-195FBE418271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DFDF3F-9A3F-42B8-99A1-A3F76B198358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8778F972-BF34-482F-9FA7-71A77F6138E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F288BB0-FE7A-4900-B227-BE80E4F4AADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8DC53A-90C6-47FE-89F1-A1FE8B1C07A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E16338-A094-4CA9-B77F-6FE42D3B422C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2438l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E07AB33-5351-487D-9602-495489C7C0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22115ED6-1707-4840-B0D1-AD36BC0C75A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2440_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C633BC-831F-4CB7-9D62-16693444B216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2448l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF5EE7E-F41B-44EC-9F69-7963B1BF1FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2448l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD501E1-E78F-44C6-8A13-C29337B07EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9085BA0B-B7E2-4908-90C0-B4183891C718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2267CB8-0EE9-4DBD-AD5F-8A13BB62673C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81971C2F-137A-4F11-8C93-3B99D4CD1B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E0BDAC-398E-406B-B2DB-AE049D6E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB66D7E-B465-4A8B-8CBD-7E93CCA2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2470_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AFDE6C-DE58-4C4D-882E-474EF6C3D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950C6BF9-AA47-4287-AC01-D183237490FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2355181D-D8EE-4F80-8280-13D5CBCF4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5209343F-66B0-4DC0-9111-E2E64CFF7409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720109A6-B79E-48E1-9AE7-7708B154788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2608l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FF0DBD-AE13-4232-80F7-F4C2E2CC9721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2608l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E944ED-8C02-46B8-BF95-0CE4C352753B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77AEA3D1-4846-46E2-9B80-20B19F00DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1576978F-E93D-4A47-90B6-6A4E3A7DE558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D339FE5-001F-4005-88A5-CFFE37F9B63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDABA86-497E-497E-A5BA-46F913A4840A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD886F4C-DB6F-4DDD-9807-8BCBB625C226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E16912A-7F6A-4A2B-B70F-D1FCD34BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C454B7-E5F4-4AAE-B577-FD71FA002C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BE2781-3A06-4D62-AC8B-68B721DA526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE4EA5-B8C8-4AE2-9614-F9DBDB4D79DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA23772-2EB8-4BEE-8703-26D967EC4503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DC766A-B1F9-4B83-9F9B-CF603EE476BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2623_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA594740-43C5-4F42-BA5B-00CA8AE7BB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2623_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572B16E2-8118-43A0-9A80-5D96831D55FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB5C551-BADC-4A3A-93E5-2EBCA0704C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5383B7A3-1569-4FEB-B299-B87CE8C8A87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05BBDE0-6C47-4489-9455-7DA7D230ECA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1789AA69-EA31-44D1-82E6-228E48E18586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A7D5FF-3B1F-4C64-BB81-7A349765520D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93A92E9-C8D2-4F6E-A5CA-E8AFFEEC7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0498B3-393A-4C32-B338-E6014B956755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C451F752-6869-4AFA-BAE5-5C9A54427BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83710FD1-099B-436D-9640-061D515E10BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B71CE-6156-40E1-B068-A2B733E205E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DEEEE5-5055-4CE1-962C-C5F075F4CC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8718DDAB-3208-48CF-9BCE-54DA1257C16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1AA901-E822-4240-9D82-C9311E4F87B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CDE3DF-8E79-4997-94EB-B517FFCAE55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A0DE13-EB0B-493B-BC84-3AEB3D454776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1727697B-1F59-4E29-B036-C32E9076C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69E827C-C0D0-46C7-913A-1C1E02CEAACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2528F3F9-34DC-41DA-8926-382CB3EF5560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E452C262-5A8D-4D97-BC7F-A4F5FF53A659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D57BF69-D750-4278-98AA-976B0D28E347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76ADAE30-6CAD-4F5B-B6F7-C18953144C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A25D792-E21D-43EE-8B9D-67DE066DE5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C669783-C058-4B4F-BB9A-84B2C4682247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "159B088B-9A85-4CAA-854A-AA080E528F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE74A94-FE8F-4749-A35A-AB7D57E24913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990AC341-0E67-4A81-87E9-EE3EFD9E847E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BC18B0-58F1-4477-9978-CA7383C197FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474992FB-842D-4661-A565-44AF2CD78693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476E1B79-5342-4895-96D7-E97DFC1F5334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD318D5-89A6-4E28-939C-C5B61396806B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981AD3FF-1D14-4ECD-8B6F-BCEB7F2409AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C7E89-32ED-4328-9313-FA7D3DDBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2792EED8-2CBD-478E-BC09-05FE830B3147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B1AF2F-6E48-4DBD-A60E-3088CA4C3771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E1691D-65B3-45E4-A544-8B29E38D569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42F2703-B8AB-410E-AF7B-CD0BE777F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31244C94-00A3-499C-A91A-1BEF2FB0E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878FF6E8-8A6D-44CE-9DD1-2C912AB8A193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5078A95B-2BD8-4A37-A356-F53D1A53CB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFE67CD-DE53-4C4E-8245-35902AEFA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F231D31-3AAD-4C5D-A225-D2DF94486718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5998DF5D-E785-45EC-B8D0-1F4EC4F96D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADFD013-0BFB-427C-98E6-F9E4774DCBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58620B10-FEA6-456D-B6B5-2745F5DBE82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F698B1-D9CF-4FE5-933D-EFCEA3056E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4858A1F0-97F2-4258-AB98-027BF1EC5117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C961A8B-EAFD-4F66-9432-BCC0D154ECCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052DE6CD-A1E7-4E81-B476-66EF451061C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1AE1E-6FC0-41D8-857C-C5A99CAF5823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751B3AC8-D45E-46B6-83D5-311B693F3C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9588277A-0B97-4408-9CF7-11271CDAADD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FE854-85E5-4ED0-BFAF-2618C9053082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E048B9BF-77C8-49F7-9F2D-9999F79BA264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD16D4D-E816-486D-96F4-5A2BF75B959F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169C558E-1A83-47D5-A66B-035BD1DD56FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D683E509-3FB2-4175-BCAB-4EB1B5C04958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCFA915-5445-4732-9F8F-D7561BA4177F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A9FD98-C22D-48F6-87A1-60791C818A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F99F24-1783-4E6E-BE61-04C2E80356ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CC7EB9-3F59-4C0A-B3A1-984BCCFB25BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85289E4C-C813-4677-867D-EE8E98F4A1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4860_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C8150F-BEFA-406D-9F0D-E7CB187E26AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E807F90-819F-4103-B1F7-4CE46971BD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD93203F-71B9-4F87-B5D8-FD273451C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E652C74-C48D-4F29-9E85-09325632443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99158191-3013-4182-8A53-5DFCA1E2C60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E39A3E-7EAE-47C9-930B-58A980B73FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8837:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFDA54BA-C00D-4890-9B7F-328257607B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5EFB1E-334C-4B55-8E2E-6AE19B34774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8260DCA-2F0C-45F7-B35F-D489AF5639F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8857_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7778F81B-6D05-4666-B1D4-53DB0EC16858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC6706A-61F7-4AA0-B2FF-0FFDF739A644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF1B16B-02F2-4ECA-938E-B5CDCFC67816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5501D8-1B0D-4F5A-AFD7-C63181D3281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1751F0CE-A0D3-40E2-8EEC-D31141FE33A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF9AFA7-BBE8-4229-94CB-5A9596728BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23A777F-68A4-4217-A75A-4D8A27E6451A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA27DFB-CDD1-4F52-86B3-DB2320A9C7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392A4337-11F6-4980-A138-4FDBCAD0EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E9BB67-F1FF-4190-889F-78B965CCE934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4185A70-5D10-448E-A9AB-AA9D5CDF0FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35607317-0928-4297-A33E-D44BEE1BBEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48323B1-7FEB-451F-A064-23E7CE7F6403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EF4E8A-EF37-4DCC-B5D4-DA89AF31DD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5763189-7980-4A72-92C9-1908FE9E15EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880l_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53ACD49-DA21-4DDE-A0AA-FCCD59D29886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4326D350-EBC2-48E6-A2C6-0499F6826CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8594E6FE-B6DB-4343-B3DD-AEC19923DAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCADA00-E453-414D-9933-FCB43D21BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62212D9-F707-4A8E-AB2A-A3985E7A4049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561755A8-8AAD-4F41-8266-747EFDAF2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F4BB0F-DAF4-479B-B78A-7929C151AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A207312E-1D35-4464-A111-22C4C793E146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B16E32-07D5-445B-BAA5-4E4A0881BFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF08F6B-2ECB-414C-82D7-C06085BF8B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8894_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21032BE3-74D8-4C3F-B461-158F475B6853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9AC992-59B7-44EE-9FF3-567AC48938AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44B3BFF-649A-4C1E-9564-EFA007FA2BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5119t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04EDD71-15B3-4085-828C-BB7A43DBDCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1BA7AC-989B-4093-841A-C6D5978BF17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5120t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F848-B15B-4369-A164-5FA11D2B9AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E46F934-9765-43ED-88A7-A4778C99A976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380A8F4F-7D1F-4F79-B555-E5AE18EF9F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D5217E-9520-4FDB-9330-C8DC2CDDAA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B206674F-1A34-470B-820C-05F9C37792CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AE2051-9F8E-4477-8E1E-38A1E06AD247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B39281F-990C-4AA3-9287-CCB5BA7E8AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDC0FCF-BD22-42AD-8044-9A64215B91CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0ED8AA-56D8-4CB6-A765-706BE87C9E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA890C07-7940-4DF4-96FB-8F71A2EFE5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95A34F0-0B74-4031-BC9E-CBC93665BE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6134m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD3CF38-0DDD-4C1C-B420-4DE0B1C932CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB22DF7-15CE-4340-A05F-BD39FCA41F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA72DC8-2E4E-453A-A3FB-20F31D32B973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758E45B6-7C7A-432D-891D-CB99077AE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B3CDFF-B055-4BB4-98FB-DFF4B2E63A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7A401-BCE1-4673-93C9-67F009B75A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6140m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E62119B-2A65-4473-B570-F118614B0ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5319E0-909C-4688-AAA6-6A0B5D19FFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F83F9F9-D2DB-4D40-AD61-29E66B050B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BE6238-312E-4CF7-9E74-48CB5603B0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC09EB6D-7FAC-4B61-83A5-B0DC18D54EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BA1BE0-0A78-4E94-A619-35735C913180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6148:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDD838C-8037-49E1-BAB4-C1D7D29BB9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6148f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CA40FE-80C5-4A20-8219-CEF51F3162FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10305C5-0C2C-48B7-A0AD-2B24AD722EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E8F127-6EAE-4302-BD52-7C3FCCA307D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D675EA9-33E7-45ED-B6A9-7117AD2FEE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E468FE-73BE-4B20-B774-58EC7CD20CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7210f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF6B19B-7D45-44B3-8524-407253B93EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B803FAD-E54D-49FE-A078-029B8FFBBB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7230f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC511505-ED67-45B4-B76C-56AB750C4408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A430C232-79EB-4264-AE24-41D4A2A5D990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9E3D4B-A3DF-4858-8C64-0316B6E57435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7250f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19108672-E1AA-41CC-B86C-061D3721C8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200D36CF-AEDE-4183-8C54-748E6E5A3218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF13A44-5163-4282-8EE8-7DC05499B5E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7290f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827C12CE-D87D-489D-ABA7-BE0405EC33D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AA78F7-520B-4FFC-838C-DC74FEE8E13F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8153:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB2949C-4699-49EF-83EB-31199E0CE2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C169DC-EEFE-4DE6-A3D0-65B606527240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD28227A-8888-43B2-BC41-8D54B49DA58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7984BAEA-4518-4E17-830E-B34D09648BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2214E5-491E-448F-A4B6-A497FB44D722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE93013-C262-46A5-8E77-D647881EE632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B53CEC-943F-4966-8EC1-CB2C6AD6A15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8164:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAC04A3-EBE3-406B-B784-A3547162ECE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15720FFE-B2A4-4347-BCD7-DFA6774C0B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F46B0E-C746-44B4-B343-E3DCAB4B98DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8170m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE30903-4F75-4D71-A8BB-44D1099E9837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98311EAA-26C8-4092-8BE5-4E7BEAA68DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8CF348-811C-4342-ACB9-AFCABCC34331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71998EC5-EC0F-496C-B658-3CD91D824944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F19B2A-E7A1-4B97-AC40-02B0D3673555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6387C9-C0A8-4B26-BC62-802775CD0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4109t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEB0164-77C2-4EC2-92FD-5FCE246119CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB20210-337C-4220-8CA1-F4B2BC54EBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F699569F-4F52-4CC0-90D9-CC4CBC32428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAED22B-D097-49C4-ADDF-4B3F3E1262D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4114t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF5C3C2-EE69-4DE7-A76C-C797192EE7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7756B588-5A63-4508-8BDD-92DB8CB0F4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4116t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316E26AE-67A5-4E75-8F9B-ECF4A03AED51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:local_service_management_system:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668E2252-2290-41B5-95AB-95FB6092FF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:local_service_management_system:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD9A6A2-3AE0-46A5-A953-1ADC280C16E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:local_service_management_system:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7511381A-142F-4EC4-9399-86BA8218A6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A602C5-61FE-47BA-9786-F045B6C6DBA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1",
            "versionEndExcluding" : "1.1.7-6941-1",
            "matchCriteriaId" : "521AB96C-3C60-44E1-935E-C6037343A3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C997777-BE79-4F77-90D7-E1A71D474D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:virtual_machine_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2-23739",
            "matchCriteriaId" : "2F53AB67-1CFA-467B-B2B1-D2447886FECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "6.2.2-24922",
            "matchCriteriaId" : "4FB76C76-94F1-4109-9BA0-2390112816B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs360hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FC24F8-1B82-40EC-856A-2EA1736FFE5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs360hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E2100A-F6C2-4B86-A4D0-08D998BEC86B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C04C1B2-B0C7-402D-B79E-B0157E011B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6334AF0-79FD-444D-BD41-DC8BF90A4109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "41E76620-EC14-4D2B-828F-53F26DEA5DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7ED7DD-A7D2-4A71-8415-26103530AB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*",
            "matchCriteriaId" : "CE80FF2C-0075-4F00-938F-C2C267E950D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF98D6C-3C80-4A42-B14B-22D69BC1F4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "50E90625-DEB3-49D3-89B6-E9EEFFABD975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24E90D-6E89-439A-8418-440910C3F07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "33AFC27C-16AF-4742-9891-2240A73C6602"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-r7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C10475-AE35-4134-BB87-45544A62C942"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-r7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044039A3-2AC7-4685-B671-C9B9FFD4ED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-r8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477B6938-2314-487E-BB35-354B335AC642"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-r8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F2C6D-3F41-4C42-81E2-01A52AD035B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44EBD85-6140-41CD-8D26-29554CD2FBA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BC54A8-6CF9-453F-9008-72CBA8C62BC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a9_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DD7CB1-76E8-41C3-86B8-E43ECBB5E6CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4437E468-F93D-4CE3-A156-06F631030A41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a12_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03311F2A-30E6-474E-824A-281ED3DE86AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B4D5CE-8DC1-4300-BCF0-71CFB4331B71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a15_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23EADA1F-73E8-4E70-AF90-CE8D26552687"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FDE279-49C3-452A-B9B0-36199C221F95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a17_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D591F3BE-13BB-4006-BE46-E975779DE5E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D90DFDC-0B90-4431-9A23-194A5BC651F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a57_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D895EC-B0A9-4292-AC64-60673F72C765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a57:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00CD88D-5649-403F-A55A-BD49427D30FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a72_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38768B2B-F1A3-4A76-8716-9520CA075F3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E23102-964E-485D-8EFF-4B1BBFE6EDE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a73_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7173A6DC-4D4E-424C-A922-C16D67627834"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a73:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B1374D-59E8-4FE5-AC6C-0323AB1DD60D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a75_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A891447-2F1D-48B4-AA47-3CB7EA4FDC7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1DF922-1F46-41A6-A367-E56DD8C4163D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a76_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CC4E5E-2794-4893-9B45-E14A3F4CF159"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a76:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4FCA77-71D3-495E-BA2A-2953369E5DCC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pepperl-fuchs:visunet_rm_shell:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926EFFA-6C44-4D99-B1EB-C9EAB63B6768"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:btc12_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F44360-2B5D-4154-9D58-8ACEEF99DF15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:btc12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1574ACD1-F5EC-47C9-97C5-A456E2C1D7F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:btc14_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD89499-E4BE-4ACD-878C-06EB2BD59FC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:btc14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9111BA3B-6A12-4974-9B94-548F6968BB8C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E548F-62E9-40CB-85DA-FDAA0F0096C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAE5EC4-9BB6-42EB-9B20-9CC3FADB1C8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74B2ACC-6043-40F3-AAEC-BAEC804C7C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc12_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE50478-AEA1-4DE3-9032-289DC6955634"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc12_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDAE7D8-7902-46C6-AE2B-8AA76E84417F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc15_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D8E919-CFBD-466A-A519-9B509A4E3663"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc15_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA09162-3331-49F6-A183-DDBE51C7F0FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc17_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB43A6C2-20DD-437D-AE6C-00A20C760CFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc17_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F230367-F012-459C-AA19-38B2856C12A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_bpc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C44C9C-BA5D-42DD-968C-7D75795A1ABC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_bpc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51A0C40-1A6E-4955-A498-F94EBDCCE0A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_bpc_2001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91424832-CC0F-454D-A77B-3D438D17CAB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_bpc_2001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9544FE3-45A5-4803-A682-305C7BE488E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_bpc_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2498F2D-5A4B-4893-84E3-1144C6A16F01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_bpc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE01550-016B-4BBA-9E56-FC18F0D52C82"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_bpc_3001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B39DD6E-EB5B-46AE-9F7E-C3AB8744DC33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_bpc_3001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA86326-3959-40AE-8984-F01B6C49C846"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc15_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34215265-15D4-4662-9D8A-20E8F48560BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc15_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE66F952-2BDD-4700-AA3B-6CEF7EFBA4F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc17_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EF7D36-9416-4634-AC9F-4115560E450F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc17_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4D7BA0-3715-4E91-A63F-AEA251BA35F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_bpc_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F9519E-5640-45EF-8D4D-65E81797B967"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_bpc_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5A7C1F-3F46-4374-9F62-DC7B28020D86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_bpc_7001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236A1006-7E56-4D2A-A9AF-C11E98EFBA56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_bpc_7001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED51E38-43DC-4214-8011-A223D6C03486"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9901BBE2-F9C3-4F5E-82FF-9C84691BF148"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E67487D-73DA-4105-B4F8-41A1D54640DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc15_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772FFDA5-B054-4F97-A399-9A8E4B4830FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc15_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DB741-F0D0-4607-A40B-4A9BB97231BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_ppc17_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B647A88-B245-4796-BE42-EEE78D06F500"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_ppc17_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3622D879-BA40-48B1-89D5-608AA99333A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_rackmount_2u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624F92AA-903D-4ADC-83BE-35B4EAE7F740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_rackmount_2u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783D5428-AC98-4C58-AD6F-0D518B695529"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl_rackmount_4u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69097B1F-C3EC-42FA-8C69-32D9DC430611"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl_rackmount_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F1000E-ECF5-4952-BE18-53DEB7BA8135"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl2_bpc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12165D80-E3BA-4254-A3C0-F9785ECEE6A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl2_bpc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8631B12E-CE9A-41D2-BE3E-1C2FAF513468"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl2_ppc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2378F6D3-FF9D-45AD-932C-9ED4B3FE8CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl2_ppc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9E21E1-C9C6-4790-9C8F-153A0AA2120C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl2_bpc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F999652C-BCCA-4EFC-B859-4D6D995267D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl2_bpc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4BAB42-0A0A-480D-9DF2-7E99E45A12E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl2_ppc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F3E671-D5BC-4FDC-9878-A6FB248E2D1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl2_ppc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E838BFB-784F-4E36-990E-F50F554FCD15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl2_bpc_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9E5307-7E77-4002-95EF-7FE4AB32EBCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl2_bpc_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A537819A-95AD-406A-960B-A56DF4199B0A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:bl2_ppc_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962E3CCD-39B6-43DB-A922-CBFE1CA5431D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:bl2_ppc_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F097E450-3E21-429E-8EDE-A20A32E205E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:dl_ppc15_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030678-EC0C-4B4C-97DF-8B8EBE1DED97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:dl_ppc15_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2FE4D0-D0BB-407E-9270-88269BE962C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:dl_ppc15m_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012D6DF0-E257-48B0-AF01-3226E6065590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:dl_ppc15m_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EFEB19-FCBB-4B6B-BAD2-786608E95E07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:dl_ppc18.5m_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FDD77C-F607-48A0-9D03-29CC232213D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:dl_ppc18.5m_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21D272B-5DA1-48C4-9C29-60FD1DA3B560"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:dl_ppc21.5m_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFF99F0-4651-4CC4-8CD5-01DF8929B10E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:dl_ppc21.5m_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C2D96C-0AC1-476A-9674-957745E134C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:el_ppc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06CE4B7-C9DE-4EAF-8F94-2381AC559959"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:el_ppc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EF7960-4750-4ADA-B0A6-5B454A6A77E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:el_ppc_1000\\/wt_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC378F8-533D-4F7C-99A3-0C2394C99172"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:el_ppc_1000\\/wt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A942215-96BB-4E0C-AFBE-3FF70719B15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:el_ppc_1000\\/m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8559D73D-1275-4275-93FD-77E252C5E4C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:el_ppc_1000\\/m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F8F8B95-79EB-437E-A9CB-B5C0A9E395F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:valueline_ipc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525798C3-7035-43D1-99FE-653797DECA3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:valueline_ipc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9797EACE-8534-486F-A48B-7509F7906CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl_bpc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658A8B84-8735-4CB8-9E9F-702786DD630B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl_bpc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC14F03D-4C8C-4EB5-A4B9-D1D7364796D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl_bpc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B25B0B2-FFA4-43E4-B61B-EC322E39B084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl_bpc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92563152-F7DF-456A-828A-F225271F4B43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl_ppc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC1465C-D4E4-40A8-BC36-FC5FD3F84EB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl_ppc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717629B0-0981-4233-89AB-AF234847B639"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl_bpc_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3684354-FC1C-47A7-9AD7-00AF992B7605"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl_bpc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B804BA1-9CD7-45AE-B28D-01337A800213"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl_ppc_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054E26F9-188E-4F15-BB1A-8056639C69FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl_ppc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7A6530-9CBF-432D-BA7B-45772C325A02"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl_ipc_p7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE73860-B3B8-4A96-8129-9AF45686F966"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl_ipc_p7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68B1755-4154-4648-980E-3B998B9621C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_bpc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFA0714-60D4-4D6E-95A6-3195F84F3F2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_bpc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B811D9-EC0D-4623-AD5C-2757AD27604F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C25A38-9F53-4AB9-A11F-9DF08D7CC9E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2F5EFC-6FB1-44CC-A9FD-BAD6D6A29CD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_bpc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C712CB21-C5C6-47E3-9C6A-E5E280E87062"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_bpc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D201C6-1DFD-4A0A-BCD7-024E5ADAFA0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8CC783-4144-422D-A154-72CC83D83E14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FCEF736-BE5C-4BA9-80E0-304D55073F36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_bpc_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592BE162-B9B4-4CCD-A5CB-4C316B14BFB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_bpc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4548FEDD-22AF-4753-A805-0FAA8BA22410"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc_3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD2E38F-01EA-4396-AE9E-B723FFA0E8D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEB26DA-6CA5-4694-AB96-4E376C0D4018"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_bpc_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2EE280-6E1D-49C5-90B8-FA1940CC6E77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_bpc_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ED092A-9CCC-4794-B8CC-531572B32F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc_7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2596D20-A6F7-4FE7-9E94-11965188DB68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7632B9-340A-4249-91B3-0C93232B3108"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_bpc_9000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD42607-7668-4ACC-94F3-E4C1F510EE38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_bpc_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743E65-BFC2-4149-AB51-F529AB934296"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc_9000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0A1D10-B700-40A2-9A89-DDBD809294DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBED3056-BE7E-47DA-9818-4D57E29E7586"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc7_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B75497-625B-44D2-8552-F8AA597EA6D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc7_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9B7B72-413E-4B2E-A68C-D5A748CA4CBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc9_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766B3429-8B60-4774-BFCA-349F59846D6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc9_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC738BF-9BDB-4969-B00E-253D47C583D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:vl2_ppc12_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3452BB23-7A21-48F5-971F-9D8C92697B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:vl2_ppc12_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45335605-EBA7-4C20-A334-A427656FD261"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "766841A0-9E9F-48A6-B815-467734AD7D68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD355D0B-151A-457B-B0C9-7A6314315364"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "E1511A71-8E8B-4985-8A39-69C801D48BFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1500_pro:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D4A368-64AF-412B-B5BB-AD6BC84F95C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "13EA8C25-9918-456E-B0F5-206081207E98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1900:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070D8D5D-0703-41BC-8D44-8379409D7CFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "0D54BE23-10D8-4FD2-9C0F-49785E55E28D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1900_pro:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1402705D-BB4B-4639-92A8-B939B6AB3173"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "482C1848-4840-4CE4-B8C1-E387CA672AB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc2200:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41507D57-119A-4EE6-8F3C-7DB635298F1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "DDA0CBED-0140-4319-817C-CAE812EA5815"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc2200_pro:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DC92AC-246D-4DA2-85B3-B33EA5839310"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2010",
            "matchCriteriaId" : "E9C4333E-242B-472B-88A6-41669FCE48E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_2010_firmware:2010:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E84371B8-69B9-4C60-B1AE-9EA89E25961B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_2010_firmware:2010:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBC4304-6AD9-4C12-B814-76CCCF9EBF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_2010_firmware:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "222D35AE-B32B-4167-9A6D-E88CCF3C823C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\)_2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6034789-ABD1-4035-8378-F0BA7157B087"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.9",
            "matchCriteriaId" : "20740117-8BC1-47B8-AA10-8ADF91F1CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.8",
            "matchCriteriaId" : "133DFB76-70D7-4480-B409-2A657DF3B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B66C5256-6863-4B81-BC82-B76320467449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201312101:*:*:*:*:*:*",
            "matchCriteriaId" : "5D98B374-B2FC-47C3-8376-B9F45664C436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201312102:*:*:*:*:*:*",
            "matchCriteriaId" : "B75207AF-2BB8-4D6B-AF4C-BEB25895BA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201312401:*:*:*:*:*:*",
            "matchCriteriaId" : "4091C844-6778-46D2-B135-CD4E3FAA0714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201312402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3308A7-AF6A-4519-92E2-EF5FE6F9C78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403101:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2F377F-7260-47FE-9F50-40374EA1ED9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403102:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A27AE-5483-4F59-9D03-1E65CEFB5EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403201:*:*:*:*:*:*",
            "matchCriteriaId" : "67E6B861-B758-48C6-9B4E-CA348D4A8D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403202:*:*:*:*:*:*",
            "matchCriteriaId" : "25D9AB99-4AD7-4765-9832-44180E038BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403203:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB2650C-DF46-498E-AD6E-549649A20849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403204:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7D5CA7-2D77-4B44-AE53-DF07A9D3E43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403205:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9270E3-F4FC-43ED-BA80-67F321BF33C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403206:*:*:*:*:*:*",
            "matchCriteriaId" : "B687FC8F-DE82-446B-8EB1-3F3193735D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403207:*:*:*:*:*:*",
            "matchCriteriaId" : "1B710A10-5076-4473-88AE-CA4A9935DF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403208:*:*:*:*:*:*",
            "matchCriteriaId" : "432C66F0-03FA-4E0A-805F-7505B92C348B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403209:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0B6D86-60E9-4193-8E8B-F07DF7410746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403210:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F3263-3107-4785-BF6B-8A62A13FC720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201403211:*:*:*:*:*:*",
            "matchCriteriaId" : "5A86BD5F-3858-4E50-995A-CEBE0C0FC19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201404401:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB7F12A-3C70-41DC-B64F-990316118A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201404402:*:*:*:*:*:*",
            "matchCriteriaId" : "A1CF97B6-E3AE-47A6-A49F-3BFE66CB87F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201404403:*:*:*:*:*:*",
            "matchCriteriaId" : "A644757F-6A6F-49F5-9B81-06F10C5E34EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201404420:*:*:*:*:*:*",
            "matchCriteriaId" : "D84D5E4F-DDBA-42B7-974B-02DCB780E8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201406401:*:*:*:*:*:*",
            "matchCriteriaId" : "979169D0-0C6E-4B4A-8FEA-FEBE33B09D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407101:*:*:*:*:*:*",
            "matchCriteriaId" : "20EB85A2-0051-430F-85B8-C2DA446E0AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407102:*:*:*:*:*:*",
            "matchCriteriaId" : "12156ABC-3724-4F3E-9E38-7C2C896C48EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407401:*:*:*:*:*:*",
            "matchCriteriaId" : "BC573DAD-46D1-473A-B530-862DD301F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407402:*:*:*:*:*:*",
            "matchCriteriaId" : "08A9F95B-6B7A-4CDE-94AC-3235ED59B1E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407403:*:*:*:*:*:*",
            "matchCriteriaId" : "05F30A0A-DC59-4BDE-9060-BE25E35A21BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407404:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B31963-6FA3-4EC8-9F95-A999EB95B3F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201407405:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DE1928-2F1F-442C-9E10-080AD9BD8D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409101:*:*:*:*:*:*",
            "matchCriteriaId" : "D52E2286-239F-4486-9FB1-40ABF2C3A4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409201:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8617AE-22D6-4A9A-864B-6B104AE19826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409202:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE60429-3163-4621-9973-9569C489D0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409203:*:*:*:*:*:*",
            "matchCriteriaId" : "946564F5-90DF-47FB-B704-434222171F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409204:*:*:*:*:*:*",
            "matchCriteriaId" : "7B371375-2F70-4A5C-81A1-3D24236EE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409205:*:*:*:*:*:*",
            "matchCriteriaId" : "2D89D1FB-354B-4F47-9B68-BC88266C603D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409206:*:*:*:*:*:*",
            "matchCriteriaId" : "990EA9A7-AA65-41D9-BFC3-987DEB875AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201409207:*:*:*:*:*:*",
            "matchCriteriaId" : "45930839-7669-46B1-88A8-EC7448CFAA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410101:*:*:*:*:*:*",
            "matchCriteriaId" : "116EC72C-1639-4E89-8DA5-14F326D8E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410401:*:*:*:*:*:*",
            "matchCriteriaId" : "56ED6A51-50F6-4181-9FFB-411854102B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410402:*:*:*:*:*:*",
            "matchCriteriaId" : "013566F1-27AD-408A-9ADE-3D88865FC560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410403:*:*:*:*:*:*",
            "matchCriteriaId" : "B924FE54-CA68-4C95-A9DA-DD37F2B8D851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410404:*:*:*:*:*:*",
            "matchCriteriaId" : "953DC00C-C694-4AFF-AC8D-3EF8F7B2EA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410405:*:*:*:*:*:*",
            "matchCriteriaId" : "71726A09-D9DE-4063-8B83-35F5E1C15C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201410406:*:*:*:*:*:*",
            "matchCriteriaId" : "466ADBAF-9B8A-4F46-A061-3892CDFE0BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201501101:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E9B1C7-54CF-4761-ACC4-85D706ECE6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201501401:*:*:*:*:*:*",
            "matchCriteriaId" : "7870F2CD-247B-4F1F-BE7E-B0A73210CB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201501402:*:*:*:*:*:*",
            "matchCriteriaId" : "21D439E5-9283-41F2-A68E-48C27648A4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201501403:*:*:*:*:*:*",
            "matchCriteriaId" : "FE762CF7-9B71-4E79-AF1F-077FF2584F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201501404:*:*:*:*:*:*",
            "matchCriteriaId" : "A86BD94F-D60A-4E5C-808D-F129B2C221F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201501405:*:*:*:*:*:*",
            "matchCriteriaId" : "91CA06BB-2978-48E7-974C-AE588D0B773B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201502401:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC96D0F-56B5-4582-8519-5CFD59276221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201504201:*:*:*:*:*:*",
            "matchCriteriaId" : "D8285D4D-9962-42CC-95C6-F5452EA62B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201505101:*:*:*:*:*:*",
            "matchCriteriaId" : "C715C51F-F1FC-4B92-BF77-EC75882CFE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BA0B41-E7B7-469F-BEB1-73A6A3315BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201505402:*:*:*:*:*:*",
            "matchCriteriaId" : "26E44694-3121-4F50-9052-BAB42D6B45C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201505403:*:*:*:*:*:*",
            "matchCriteriaId" : "CF156298-D57B-4F30-8895-C3DCE5D8FA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201505404:*:*:*:*:*:*",
            "matchCriteriaId" : "2485CC85-A58A-41A3-A0C3-F52C82D772A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "3CB9206E-98ED-472F-8272-3DA2FEA82696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEB3AF-DB9D-4958-AC26-04C694F0416A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "62A760D9-FEA2-49AD-8250-3A830398ECD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "43E6E75D-D814-4DAA-9759-6948955501DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFD9527-F0CA-493B-A894-4BB26AB65F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC241D3-4352-4339-8C81-BA7878FD5062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E50F31-00DB-4724-982E-E39E55E75FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "1099C9B4-11A1-4545-8054-5CC247286617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "8F018232-8B68-4496-A38B-6E1B84F1AA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F66CE5-E0BD-41B4-9D36-1C626FFF2141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "08CB5270-1BD3-48D0-AB8C-B3CF0C52499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "EC263338-15D1-4F8C-8BE7-494971F31682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509211:*:*:*:*:*:*",
            "matchCriteriaId" : "061C95B9-845F-4235-9ABE-7BD5F555209C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509212:*:*:*:*:*:*",
            "matchCriteriaId" : "75EB3FC3-C4C1-4841-88E6-922CADC9B402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201509213:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0F78D7-2139-46AD-9C69-229BA94896D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "A630790E-2F77-4C05-91BD-06AB8894A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201512101:*:*:*:*:*:*",
            "matchCriteriaId" : "6A96EA60-16A8-4129-8E2E-B8B5C4F83D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201512102:*:*:*:*:*:*",
            "matchCriteriaId" : "A30EE76C-594A-4DD2-95D5-8E8D8B6D3185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201512401:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A31A47-DE48-42AA-B7CD-4661624A50A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201512402:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CC39CC-45DF-4461-9219-808CBE68592A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201512403:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAC6817-6316-4592-8510-02772D3EFF3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201512404:*:*:*:*:*:*",
            "matchCriteriaId" : "711F5017-AEC2-4649-AA8A-6A596591F11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "A12209C7-0027-46B1-A8D8-535A631A4FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "8D09CF29-38FD-487F-8597-518F206531BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "D35EAA15-0DEA-42D8-AEFE-F4CB6BC6CFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608102:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC12F16-071D-4648-A044-1274CBACE988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "0763BDFC-0D5D-43E0-BD3C-F6A7D41F53C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "57160A54-9049-4F31-AF1A-28A18F0EFF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "54AD4072-BFAE-4941-8CC3-6DE5E3222DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "9109EB3E-C635-4B99-9BE5-B9FD9C4B5D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "2E01FEF6-8D64-428E-AFB0-FFEB21CCDC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201609101:*:*:*:*:*:*",
            "matchCriteriaId" : "910B3A6A-F418-4A0E-B612-DECD4900BB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201609102:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B5E386-0BFC-4F1B-9D1A-E2F31C8A05BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201609401:*:*:*:*:*:*",
            "matchCriteriaId" : "29175BA1-3A31-4E9E-8B52-B078CC33F51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201609402:*:*:*:*:*:*",
            "matchCriteriaId" : "573A99EF-0B6B-41D6-B71F-1C21B1565A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201609403:*:*:*:*:*:*",
            "matchCriteriaId" : "209AD390-0ABA-4225-9168-A769ED7808DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201612101:*:*:*:*:*:*",
            "matchCriteriaId" : "C4553BE6-DEDE-4E16-A335-1F8DE5F7B9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201612102:*:*:*:*:*:*",
            "matchCriteriaId" : "5909ED7E-B49C-42D5-A634-788733D49FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201612401:*:*:*:*:*:*",
            "matchCriteriaId" : "21B55E0E-8923-4779-970F-A335C708CD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201612402:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B9CB8C-8072-46E3-8A6F-41FDB2365436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201703401:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2C8471-D52C-41DF-A96B-E6D0A1E7A070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201709101:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A9B43C-51F7-42C6-84CD-B882055915B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201709102:*:*:*:*:*:*",
            "matchCriteriaId" : "9F239FF7-CA1E-4711-A8A8-C1F945366E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201709103:*:*:*:*:*:*",
            "matchCriteriaId" : "7E696E99-6F94-4C74-911A-01162CA34B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201709401:*:*:*:*:*:*",
            "matchCriteriaId" : "0B18A0A1-F28F-4282-B871-06344A674EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201709402:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2DA304-2C7F-4F5A-A3D0-0DF15E442B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:5.5.0:550-201709403:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF8BCE8-567E-4392-AD10-4DC4EF93E5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8861F4-D390-4738-BBF0-9EE4684E9667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D5E67-78C9-495E-91F0-AF94871E5FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*",
            "matchCriteriaId" : "6D35CDFE-F0E7-43F7-A307-E3BDDE5AEAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC13026-3B5A-4BF0-BDEC-B77338E427E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA70BA-FFCD-4D2D-AD26-95CC62748937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*",
            "matchCriteriaId" : "4C92DD8B-8AB8-40D4-8E86-12FEB055D37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*",
            "matchCriteriaId" : "C58D77F5-CDB2-47DA-A879-BABEBE2E1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C324FB-3989-4A4A-BF5B-C40CA698DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7AC58E-D1F8-4FDF-9A28-61CF6158330A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*",
            "matchCriteriaId" : "489EE0F6-5510-470E-8711-DC08B4AFB4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*",
            "matchCriteriaId" : "6719ED6F-CBC3-4B1E-9343-23DC3BA15FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAA48A9-9319-4104-B151-D529E5EBF0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*",
            "matchCriteriaId" : "D16CD918-5075-4975-8B1E-21D8AD35A28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*",
            "matchCriteriaId" : "7A38CD8E-494D-4E0E-A300-8550FC81FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40ABE8-8DED-4633-A34C-00DF5D510E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*",
            "matchCriteriaId" : "1736B975-089B-413C-8CA0-5524B957EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4DCBF6-7189-497A-B923-08574443172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*",
            "matchCriteriaId" : "16FBA646-0B5E-44A7-BB12-29D5C611AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*",
            "matchCriteriaId" : "29F57497-7B48-4D0C-B8F5-8D33062BECEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE96C7-C489-4D14-990B-8524627A23D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*",
            "matchCriteriaId" : "AD82C093-FD98-45DE-9EE6-A05E81A1FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*",
            "matchCriteriaId" : "08789F9E-CDC7-4F89-B925-92C9E3AE5234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*",
            "matchCriteriaId" : "26ABB84C-B4BF-424E-8F4C-D2B6BE0AC79E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*",
            "matchCriteriaId" : "621C203B-4B66-49CC-A35D-D7703109BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*",
            "matchCriteriaId" : "3261BDEF-D89C-41D9-A360-EC36EAB17490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*",
            "matchCriteriaId" : "5170A4F6-02B7-4225-B944-73DB5A4D332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*",
            "matchCriteriaId" : "62A97DBA-A56B-4F0B-B9C4-44B5166681AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*",
            "matchCriteriaId" : "806C8BE6-A2BE-45BE-BEF2-396BEB16FCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA6211E-134A-484E-8444-FBB5070B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7B05B3-4076-4A44-B9A6-A44419F175C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1636B4-6E79-42D7-AA62-5EE43412B43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0377D0-BBED-41BF-80C5-58414ED413EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*",
            "matchCriteriaId" : "6495283C-D18A-4DDA-852E-46F2273D6DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*",
            "matchCriteriaId" : "09DEFEE5-5E9E-4F3A-A245-3E8E2B291339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5A97A3-65DB-4697-9CF1-B4F5E4E4132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*",
            "matchCriteriaId" : "17A84E0A-1429-467F-9EE1-FCA062392DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*",
            "matchCriteriaId" : "C591163D-64BC-403B-A460-5B2258EC2F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*",
            "matchCriteriaId" : "ED932B89-D34D-4398-8F79-AF98987CAFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD365A0-0B09-4EC2-9973-691144C99507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE64DC7-A9D1-416F-89BF-D9F8DD8174AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*",
            "matchCriteriaId" : "0E198AE4-A6A3-4875-A7DA-44BE9E1B280F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD5BA0-8180-484D-8308-B0862B6E9DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*",
            "matchCriteriaId" : "96A6EB9A-A908-42D1-A6BC-E38E861BBECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*",
            "matchCriteriaId" : "651EDCAA-D785-464D-AE41-425A69F6FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3C704C-9D60-4F72-B482-07F209985E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CFE956-4391-4B71-BD0B-96A008A624B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*",
            "matchCriteriaId" : "409778CD-9AB3-4793-A5F5-8D8657F81442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EA75DB-B6BE-4E75-89B6-C69E96CBD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC45A8B-6DE0-465F-9644-B75A09394F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*",
            "matchCriteriaId" : "7A265671-BCB0-401A-A1E8-500F9D41492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*",
            "matchCriteriaId" : "83168067-1E43-4186-9B15-3FC702C6583C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*",
            "matchCriteriaId" : "8C122DB4-8410-4C4E-87BE-EB3175CE182B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*",
            "matchCriteriaId" : "C76ED78D-0778-4269-938E-BB7586C1E44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F78C5-E995-4E37-83C5-5B6A1D39E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2E842D-AF37-4641-AD05-B91F250E7487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EAC87-32FD-4553-B71D-181F2C66AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F0D62-4C51-46D6-A6C4-E479BE6B2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*",
            "matchCriteriaId" : "865D3042-68ED-44B9-A036-9433F7463D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4FEF78-D2DA-4CCE-BB81-7E2090ED545C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*",
            "matchCriteriaId" : "11AE3F61-9655-4B20-96E1-92112BE2BEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE35166-3019-450B-9C69-484E4EDE5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*",
            "matchCriteriaId" : "D892B066-381B-4F46-8363-7BA1647BBCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*",
            "matchCriteriaId" : "710DB381-5504-4493-8D0A-17AB8E5A903B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*",
            "matchCriteriaId" : "42AAA3B7-B74D-4B67-8BD3-1D9B5ED1E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*",
            "matchCriteriaId" : "33CBCA55-010E-4E84-B2F8-F9B53D5A3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*",
            "matchCriteriaId" : "95A73B4B-F9B3-4D66-9668-902902C73CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*",
            "matchCriteriaId" : "8D14D51D-E2EA-4826-8C6E-AF1C15F12384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*",
            "matchCriteriaId" : "BED100A1-9D59-48BE-91D4-0C8F2D678E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*",
            "matchCriteriaId" : "660B51F2-DFE0-49F6-AD2A-6E94B20F4019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF80536-348A-468E-AC1C-DA53632FCC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:*",
            "matchCriteriaId" : "CFABF302-AC32-4507-BDD9-314854DE55BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDE020F-4FB1-4F1D-B434-6745045702D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1538B9-E860-46CE-A4CA-1393ECA20D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706401:*:*:*:*:*:*",
            "matchCriteriaId" : "386A6805-6167-47BA-A02F-073DC7E0FE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706402:*:*:*:*:*:*",
            "matchCriteriaId" : "03BA15D8-F7A2-428C-8104-BCEBDE7C1EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201706403:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFCFE7B-37E5-4C64-9B43-4F693F227231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.0:600-201710301:*:*:*:*:*:*",
            "matchCriteriaId" : "02CFAE22-37DB-4787-96FB-9E0F8EF671E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAFF86-C65F-4723-8A63-BACE2F797937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC31DE3-ACFE-422F-B253-2FE4AAFE3954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*",
            "matchCriteriaId" : "B30B3EA4-495F-4915-B6E3-5FB9277C2DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA9E337-B4F3-4895-BA58-962F8CDEE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*",
            "matchCriteriaId" : "830B0BC1-A368-49AC-B6C9-B000972EF92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*",
            "matchCriteriaId" : "614394F3-3BEE-4E12-AABF-436D54A04313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*",
            "matchCriteriaId" : "350FD3CE-8B64-4FCF-82DE-BE941156F4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*",
            "matchCriteriaId" : "C9EAE177-6C7E-4C1B-ADEE-2C036F731272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFEEC31-8462-4DF9-A1DA-D7057C209CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC6BC16-0A1D-44B3-BA68-63EA05EDD54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*",
            "matchCriteriaId" : "942DAD67-9455-4D02-BD3B-BFD2DE7A7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACC1A72-F6B6-430A-AB89-AB0A11587F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*",
            "matchCriteriaId" : "45111C74-BF6F-4C05-A0D3-CE325AD0C02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CE5849-01B1-4E36-83E8-496A3F328C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*",
            "matchCriteriaId" : "A879BA05-3A80-4EBC-AA9D-9B53695425B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*",
            "matchCriteriaId" : "3D65A0E8-A1E0-42F3-B77D-2F32979278BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*",
            "matchCriteriaId" : "80C10150-39BA-4818-B48F-8645D4A0D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*",
            "matchCriteriaId" : "9792B986-86EF-40E0-9427-A45F858717E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*",
            "matchCriteriaId" : "37EDD688-C91A-4A35-913A-82E156ADD242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC1AC0E-8D3F-46C0-BDA9-EB9DC9971F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*",
            "matchCriteriaId" : "47DA50DA-7CA4-4B76-8B3B-A5732509F71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*",
            "matchCriteriaId" : "76EB1A04-0645-4909-AEF9-33D6FADA4793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A35723-D968-42D6-89EB-86CA550516E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AC8A19-F98E-48F1-A1EA-EAA1C7208335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A3952-8429-4762-8701-47D7C1F05A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*",
            "matchCriteriaId" : "5B007609-C312-469B-BACF-04D6D80DADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a77_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155A0C39-4D0A-4264-B392-46002908939C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a77:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "514DE9F5-D826-42AA-B4CF-3EB09F4D3D5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a78_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AB8C81-F441-4563-B5E0-B738DF4D1C50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a78:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA3C472-D1E9-47B3-AFD0-BD274E3291F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-a78ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30BECA7-C45A-423D-9200-98D51BE9C84C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-a78ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E376B2A-430D-4D1D-BC28-92CD7E1E8564"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:neoverse_n1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4164A584-6F0D-4154-8FED-DC044CDE1FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:neoverse_n1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C9E6FC-9C40-4105-9FB0-17013E1ABBB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:neoverse_n2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B37176F-0AF4-4410-9C1F-4C5ED0051681"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:neoverse_n2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F2936E-A611-472E-8EF0-F336A19DF578"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:cortex-x1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D200C1F-1909-4952-824F-A2D279B9B37E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:cortex-x1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC9F68C-7D65-4D29-AAA1-BA43228C6208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html",
        "source" : "secure@intel.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584653",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102371",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040071",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-254.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0292",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdrdv2.intel.com/v1/dl/getContent/685359",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-002",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-003",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html",
        "source" : "secure@intel.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/36",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-06",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180104-0001/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spectreattack.com/",
        "source" : "secure@intel.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX231399",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K91229003",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-18282",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3540-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3540-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3541-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3541-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3542-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3542-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3549-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3580-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-2/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3516-1/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43427/",
        "source" : "secure@intel.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/180049",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_01",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-254.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdrdv2.intel.com/v1/dl/getContent/685359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180104-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spectreattack.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX231399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K91229003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3540-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3540-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3541-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3541-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3542-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3542-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3549-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3580-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3597-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3516-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/180049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5754",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-01-04T13:29:00.303",
      "lastModified" : "2024-11-21T03:28:19.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache."
      }, {
        "lang" : "es",
        "value" : "Los sistemas con microprocesadores con ejecución especulativa y predicción indirecta de ramas podrían permitir la revelación no autorizada de información al atacante con acceso de usuario local mediante un análisis de la caché de los datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD028C10-FD07-4206-A732-CCAC1B6D043D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2316:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704FAA50-1B7D-4917-AC4A-4C58785340F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B95D3-75BD-4826-BFBE-9701CC0FF052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66E31A6-EA01-40C8-8718-CE2C1F45EEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2358:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBE3B05-2063-49DE-A1D3-9D0A62E0CF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022F2CBE-EFB1-4962-AC91-D25AAB057DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2516:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C05CD9-551B-46EE-85F8-D18FF878FE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCCB5A5-20E3-4EC5-956C-EA7C0F33A026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C38C609-242E-4923-A81F-DAFBE7B6A927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2538:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB08B5-7CBA-479A-A41B-FD8A6D9E0875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C4FDD7-F2EC-4EDB-ACC9-3D6B9152C855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E51DD0B-1EED-4BE9-B0A7-BE2E91CCA84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2718:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AC7C56-2205-4121-99E2-001A7488E0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1677313-FF8F-493B-9DA3-C78F87581A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2738:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2A3CCE-FA57-43B5-B7DE-CFD0CC2ECD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CA4444-5103-4451-8A7C-F6BBE714BBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c2758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1EB745-46D7-4088-93C6-E7156520B144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93010C0-33B3-438F-94F6-8DA7A9D7B451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A988A78-6B3D-4599-A85C-42B4A294D86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7C5EF4-3A92-4AF7-9B11-62B4FFDC5128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3538:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246AA1B0-B6C8-406B-817D-26113DC63858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3558:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE5B42-FF05-447C-BACC-0E650E773E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3708:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0779CC9-BD39-4E0B-B523-A6C69F9EBB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F0E3C4-7E9B-435F-907E-4BF4F12AF314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D616C72-0863-478C-9E87-3963C83B87E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC333B0D-3A0E-4629-8016-68C060343874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655535C-FF64-4F9E-8168-253AABCC4F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EDEA1E-9A19-4B3F-806E-D770D1AB4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3858:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD68F3F-7E38-40B9-A20B-B9BB45E8D042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EACEF19-83BC-4579-9274-BE367F914432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3955:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC73291-AA6F-40B0-860A-1F2E6AB1E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_c:c3958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24128A7F-2B0B-4923-BA9E-9F5093D29423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0990DD71-9E83-499D-9DAF-A466CF896CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7FEDEF-9772-4FB1-9261-020487A795AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3825:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B0F72-DEDF-40C4-887C-83725C52C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3826:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9568C222-9816-4520-B01C-C1DC2A79002D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3827:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2F8FAD-1688-4369-BB4B-9FA9F30A80A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_e:e3845:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A1F23D-7226-4479-B51F-36376CC80B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB245C8-9918-41A0-9DFB-A11E4185C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3200rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9990DD08-BD81-4BFA-B3D4-0DECBF8CCC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3205rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F752A3C8-18ED-4765-B6EC-C664154EB701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3230rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F31C3F-7C0D-4D95-B4B9-89FD38076913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3235rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEEE36E-E735-4A33-80B7-9407D072F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3265rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB3D3DE-21BE-40C7-A510-AC97C92390DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3295rk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9A9545-38A3-460D-AB1A-8B03BEB405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3405:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1860D932-777D-41F2-94A2-D14AB1494AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_x3:c3445:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75165A10-2FD5-4370-814C-B60FDE339AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AAC7A7-77CA-4C6C-BD96-92A253512F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD16C07-0050-495A-8722-7AC46F5920F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01423706-C82C-4457-9638-1A2380DE3826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A881E2D3-A668-465F-862B-F8C145BD5E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5B9B98-0EF0-4ACD-B378-F9DE5AB36CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDC6806-E4FC-4A6E-A6BB-88C18E47ABFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z2760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6602DD69-E59A-417D-B19F-CA16B01E652C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C493EE-EF9F-47E2-8F88-86DF6C5F1FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40010DAE-DD1A-4A81-B6E9-EDC1B0DDCAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED96AC16-12CC-43F6-ACC8-009A06CDD8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9DC29-C192-4553-AF29-D39290976F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F625E647-B47E-404C-9C5B-72F3EB1C46F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AF3279-89E7-4C91-8C5F-5AD5937CD0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5878612-9825-4737-85A5-8227BA97CBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F453D348-28CE-402B-9D40-A29436A24ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36322F4B-83D7-468A-BB34-1C03729E9BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD22811-C3C6-4B5E-98D5-D3F2240E6C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3735g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C7D0BA-8F07-42AD-8BB9-C65472BE41C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3736f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A2A50E-94FA-44E9-A45D-3016750CFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3736g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5625CAD8-4A62-4747-B6D9-90E56F09B731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A234CE-D6AA-4A32-8425-1A4DDA0F6B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3740d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE1A01-3AEF-41E6-97EE-CB93429C4A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3745:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410184AF-B932-4AC9-984F-73FD58BB4CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3745d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B265F073-9E0A-4CA0-8296-AB52DEB1C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F664223-1CBC-4D8A-921B-F03AACA6672B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3770d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987A8470-08BA-45DE-8EC0-CD2B4451EECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3775:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBC9542-FB77-4769-BF67-D42829703920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3775d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74FDC18B-4662-422E-A86A-48FE821C056F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3785:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB4AA2C-D1D9-44D8-9471-66EBDE9DC66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:atom_z:z3795:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA3E7AE-CB74-48A8-A2B8-9FCADB6E40D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E4461B-72F8-4F3D-A405-4AFA99EC8A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663DDC1C-E48A-4E84-A6CC-B46FC45D6A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEC75B-10CE-4B7E-BA5F-6D661EC07FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j1900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEDED56-9387-4DAC-BF52-C32ECCB7D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA13F31C-BBD9-48C7-8499-92D0B5CA8CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57A9B28-734B-401D-B24C-A295F364D8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3355:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02289DF-4A02-4602-89B7-E9148236EE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j3455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723E7155-493D-4B5A-99E2-AB261838190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j4005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E37264-E4BA-4D9D-92E7-56DE6B5F918F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_j:j4105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8704BE6D-2857-4328-9298-E0273376F2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731F1E65-1D53-443B-8E2F-8AF11191AFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2806:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A83822-822D-4A4D-B29B-A5BE6367A7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C32738-F08E-469C-8DE0-2708F30574A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B292187E-8EAD-49D2-B469-B14CA0656035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D131E1-24C1-48CF-B3DD-46B09A718FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABF1231-73CF-4D1B-860C-E76CD26A645E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F88E38-4EC4-41DB-A59D-800997440C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FD6647-4101-4B36-9A9A-F70C29997148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2840:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D248D668-A895-43B3-ADEF-1B22EE7DC76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858411B5-E904-45FA-8B33-5CC73B915B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2920:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB9336C-C893-4AB0-9402-868CE9960058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4695F94-7AAE-4219-9EF6-CE6D0838192D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n2940:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A0991-73F0-410D-855C-BFC88A66E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF5CF9A-B3F2-4686-B933-7DB13AD2CF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9858EAC3-C1CE-449B-A605-FFA337DA825D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8F905-A4C6-4EC6-B9E8-800948350B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565B48E3-1406-4E3C-B4A5-35865C5614E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B6C4D7-B0A2-4DF1-B8DE-19C806D5FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB82A90-C0BC-4BA8-88CA-4967BC3A4A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191A094B-E354-4767-AD43-87CE140BF851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1289B9E-5725-42EF-8848-F545421A29E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n4000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238A21CB-F8C5-468B-B523-6D014E2EA8AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:celeron_n:n4100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC52CDD-614D-4EA0-8DA8-D71189C42E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4229DB2-8BBC-49F8-87A8-2E7D56EFD310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBA7322-4D95-4E70-B6A5-E0D8F1B5D7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:330um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E91F46-D950-4894-BACF-05A70C7C6F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:350m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E12B40B-5221-48A6-B2A6-D44CD5636BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:370m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCB77C9-ABE3-44A0-B377-7D7035E8A11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:380m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06639F5-5EE8-44F4-B48A-5694383154DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:380um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9662C9-59D3-4B3E-A4DA-4F1EE16FC94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:390m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637C3687-FBCC-41A0-BFE6-823BAE45FB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2350A197-193F-4B22-80E8-3275C97C78EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734C7A7E-ACCA-4B34-BF38-0FAED988CC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9ABAFC-B3B5-449D-A48E-2E978563EDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99019EA0-6576-4CE7-B60A-975D418AA917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E846AEF-751D-40AD-84B5-EFDC9CF23E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9DD909-B2AC-46BA-B057-D239D0773CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F5C355-FDFC-4E71-93AA-218389EF10E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A1CA1E-971D-4F67-864E-2E772C1E736B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2115c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5F8391-D974-49AC-8550-ADB3FA6C0535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8302BF58-9E54-40DA-BCFE-59CA52C460D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2120t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCDE9EF-037B-4650-8131-4D57BE141277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47BA9DA8-F690-4E3C-AEF6-6A5C7BAA6F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8253DA-9A04-40D6-84C1-C682B4023D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2310e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF6D175-85C3-4C72-AD9F-31B47EF43154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5FC594-2092-4240-9538-235BBE236DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2312m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D95F00-EA89-4FDE-991C-56636B8E0331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2328m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C40D38-F7F2-4A48-ADAA-6A8BBD6A1A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2330e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4158561F-8270-42D1-91D8-E063CE7F5505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0DEA96-0202-41EB-BDC3-24E2FC4415B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2340ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BACE1C-5D66-4FBC-8F86-30215A623A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2348m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF707146-0D64-4F3A-AE22-956EA1CB32B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2350m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8118C3F9-0853-4E87-9E65-86E1398B2780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2357m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A298501-C4D7-48D4-90F9-15AFA59DED48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2365m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE1B07B-3D92-4D2D-8667-D902F002277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2367m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F05CB19-1059-4C4D-BFD7-9F51A22A4F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2370m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5588732F-7F1A-4C24-B35F-30532107FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2375m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A127DD5D-426D-4F24-A8C5-DC9DAC94B91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:2377m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EE0BBD-3982-4B0F-82F6-D58E077C75DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEEC918-EA25-4B38-B5C3-85899D3EBE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3115c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813965F4-3BDA-4478-8E6A-0FD52723B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3120m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5EA2F4-F3EF-4305-B1A1-92F636ED688F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3120me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04384319-EE8C-45B4-8BDD-414502E7C02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3130m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52528CE-4F31-4E5F-8255-E576B20F3043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C3F422-F865-4160-AA24-1DAFAE63729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3217u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D034E7F-4D17-49D7-BDB2-90CB4C709B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3217ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C18E6B4-E947-403B-80FB-7095420D482B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2814CC9F-E027-4C5A-93AF-84EA445E6C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3220t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A470C3-AAAA-4A6E-B738-FEB69DB78B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3225:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1236944-4942-40E4-9BA1-029FEAE94BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3227u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086CAB4B-A10A-4165-BC33-33CADCD23C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3229y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A6A1EB-B3AB-4CB4-827E-CCAAD783F8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFB6B30-BFB0-4397-9E16-37D1A772E639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3240t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFCB9D7B-7D0A-435D-8499-C16BE09E19FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3245:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64277594-9713-436B-8056-542CFA9F4CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589BB170-7CBA-4F28-99E3-9242B62E2918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:3250t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9C4D9-DA09-4377-9DCD-225857BD9FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4000m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D0265F-840B-45A1-90BD-9ED8846A9F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BAC0EC-2B38-4553-A399-4BD5483C4753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4477EBA6-F0A7-452B-96E8-BA788370CCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1285D817-B5B8-4940-925D-FCDD24810AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4012y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D289F7B4-27CD-4433-BB45-06AF98A59B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4020y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00168903-6012-4414-87D1-2EE52AA6D78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4025u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE8D524-577E-4994-8A4B-D15022C84D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75977B0B-C44D-43BC-8D7A-AF966CDB1901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7F5D52-9F41-49A4-B941-E0D777203FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B5B3FD-5BEA-4DE8-B010-55FED1547167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167B1B04-5823-4038-A019-3975A3B447C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C7A4EA-0B5E-47CD-8924-3B1B60EB4BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA096E0-5480-47CB-822B-D11D7E20F69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30357469-0B8F-4385-A282-2F50181EA442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE70772-7796-4594-880A-6AAD046E4D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4112e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9E2F8D-2974-4833-9EC2-233CEE257C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4120u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EE3078-454F-48F8-B201-3847DB40D5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE32C500-55C2-41A7-8621-14EBF793BF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D3DF52-501A-4656-98F1-8DD51D04F31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA603AD-6CF1-44B2-876D-6F1C0B7EF2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578301-CF39-4C24-951A-535743E277EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4158u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4D14AA-7DBF-4B73-BDEF-6248EF5C0F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A65F303-96C8-4884-8D6F-F439B86BA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E046105-9DF5-425F-A97E-16081D54613C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2987BCF-39E6-49B6-8DEE-963A38F12B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEDE2B7-9AA2-4A14-8A02-9A2BFF0DDCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD92AD8-033A-4AAD-91E5-CB446CCE9732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0E73A-F1B4-4E70-B9F1-EE97785B8891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D6E3CC-79B1-4995-9A76-41683C7F254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CEB2B1-BD1A-4B89-8E03-4F90F04A0F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE5773D-3CD1-4E63-8983-E0105C46D185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7C307A-6576-4A0A-8F4E-0981C9EE2901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B3A53B-902C-46A5-8CE7-B55102703278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB843479-729A-4E58-8027-0FC586F051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5A233-1E77-49FD-AC2C-60D185481E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18519CF2-B0DA-42DD-8A3E-9084298C210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329D5FCF-7EC5-4471-906B-3619A180BD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD43EAA-F3A5-4748-9187-A6E6707ACD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F3C14D-4BFC-4205-8781-95E6B28C83C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5015u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20942AD8-ADB7-4A50-BDBE-DB36249F4F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5020u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC6ED02-134B-4322-AB72-75A0AB22701E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA74EEE-54CC-4F80-B1D3-99F7771335ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B859F7-0373-4ADD-92B3-0FAB42FCF23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC76F31-00A5-4719-AA50-92F773919B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49996F5A-51B2-4D4E-AE04-E98E093A76CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8406B0-D1E5-4633-B17E-53DC99FE7622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D49435C-7C33-454B-9F43-9C10F28A28A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17E1A0F-1150-4899-81BC-BE84E4EF5FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADD98AE-BAB0-440D-AB9F-2D76BE5109E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED44A404-8548-4EDC-8928-4094D05A6A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6E4AA3-BEBC-4B14-9A52-A8F8B2954D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AAD8F0-0D31-4806-8A88-A30E5BE43630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8164EE5F-6ABA-4365-8718-2F98C2E57A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7110AF9-A407-4EE2-9C46-E5F1E3638E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A06696D-37F0-427D-BFC5-1606E7441C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F8A5FC-5EFE-42EC-A49B-D3A312FB5F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:8100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A76015-0A05-4EC7-B136-DC13B55D881F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:8350k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C352DCE8-E8D9-40D3-AFE9-B5FB84F7ED33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:430m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54464F6C-9B2D-46BA-AC44-506389F3EE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:430um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA11017-EA58-45EE-8408-FCCCF7183643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:450m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5098A5-E4E8-47E4-8CD0-F607FF0C0C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:460m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442AD778-D56F-4C30-BBF8-749D6AAC4737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:470um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7D3F31-AF4D-4C50-8590-A763AAC7AF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:480m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445BFC2E-38FA-4130-8550-0866EC4EDA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DC2746-CE41-40C9-8CFA-23231BBCAE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3A8976-5E4D-490A-A87D-A47D1B2B903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:520um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8535E6-220E-4747-8992-45B6EAFC555C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7479B49-F484-4DF2-86CB-E52EE89FA238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:540um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D68512-746D-4E95-857B-13A0B6313C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:560m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4312BA84-F9A0-4BD4-8438-058E1E7D6C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:560um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E52DF5-C713-4BC4-B587-FF6BDA8509CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:580m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304ADCAC-9E49-42BD-BC92-58D9B2AD52E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB02172-B9A7-4801-88F2-98BF5843184A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:655k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5141380E-BD18-47C1-A84C-384BA821773D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE6C49E-2359-4E44-9979-7D34F8460E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:661:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C004B75F-37AF-4E61-98F3-1B09A7062DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7126D19-C6D9-43CB-8809-647B1A20E7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC98503-A80A-4114-8BF2-E016659BE84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E6F4A7-24BE-4AA0-9CDD-84FBC56FE9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:750s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3821412D-B010-49C4-A7B4-6C5FB6C603B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CA5CC-9EB1-4063-8B9D-3F566C1EFF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEB5D2D-FF54-4BDB-9E9C-8C1B2719FC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD5B51A-AEA0-4DA2-BA60-94A2D5605352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C6CA0-434D-428F-B629-A971C2937628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2380p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301AB72A-A6F2-42C8-A931-94EF2271443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2390t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59414B5A-05B8-49AF-A197-2A31729DDB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFDD380-692F-41D7-996F-F97FC74DC7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2400s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49602828-2BFC-4571-9F05-6210FD263DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2405s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E03978-E16D-4A9B-8AE7-9F4F1171C14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2410m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03096A9A-5758-47E6-81E2-BCFE847C41F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2430m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150CC865-7975-45EC-BFF7-A94146442BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2435m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FA1308-589B-432B-80F9-9A499D083ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2450m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED2453E-30E1-4620-BEC5-21B0083449E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2450p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE8DD05-D700-4F89-9B01-D489029DF7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2467m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050957CA-6191-4F9F-9D07-48B342B3B1B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACBF998-8B11-45C7-9017-486AED4FAE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F2F3C4-FC94-414A-A208-913A43D57D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641152EC-F4B4-4E5E-B396-AC4CAAB805BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4911E332-B8BA-4336-A448-3F70D2BBB147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2510e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330EC403-3174-4543-9BBE-CEC0ABC1575D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2515e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF585D0-507E-491E-9C3B-78EE26F2F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD00F7C6-6762-4DC9-9F6C-5EAC4ACB1C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2537m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5D885A-85C4-4A11-B061-61EFF6B6E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0502B59F-933C-4E25-A2EC-9296B197E139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2550k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D9C0A9-2DFF-4760-8FED-AC2DA7968E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:2557m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A1BAEC-18BF-4607-BFB7-48102E75186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49ED138-F42D-4451-A350-0B2DD5AB9444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3230m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED91472-90FC-4AC8-96D5-1550A8502411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3317u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57CEEFA6-CEED-4CA3-8DDC-B6601D69FB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3320m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD25ECD-0605-4CD7-9DC5-294ACD7EF1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784E2AF-A5E5-4960-830C-B3EFB84043D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3330s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9112FA50-5527-4B20-80F5-2DE9E66D09F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3337u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CE4E2E-B2BF-409E-B18C-D67DA810FE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3339y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B84D67-0B1D-4B74-BC85-AF8F933D8429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA05A18-1523-4EED-9D2E-0A258A33F24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34E70EB-92F0-43F6-8883-FE422BE1A3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3340s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D301F1-20C2-4756-9A90-37F14835CE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3350p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EEC8B5-1CAB-4FBE-BBA2-D2FFA3EF9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3360m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA63B803-4D48-42E8-A793-F92ABCB8BFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3380m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129DB9CB-E878-4856-A954-15FFE1428636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3427u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730DB4AA-FD7D-40C6-8D7F-19937832EF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3437u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E86978-4820-422A-8C7C-FF0697DAED05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3439y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7A9DB5-F544-4FD8-A9CC-0BD6257516AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF813AD9-D296-4915-861C-8DE929E45FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3450s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A65469-083F-40B5-86C5-A2EAE5B2F00A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1AA82E-BD86-40F5-B417-71DF6AF53A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71A6DB0-5EB0-4712-8480-CF427F521D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3470t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8223D5A1-ADF1-43C6-AF91-EE5C413BCB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3475s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD69605-F52B-4623-921A-983A5A408ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D5685F-6FFE-4A6A-9FF8-940C8DA36499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3550s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94062D9-8DDA-4B4A-B3B5-07F71F5B97E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3832D0A6-419D-4876-B5C4-920578F713F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA5C8A-83A8-4F96-9D7C-7A50ADDB2341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404E38E6-9EB3-41D0-97A7-DC579688BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E4A921-AB28-47B7-B5A3-EB82193D15BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:3610me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0357E48-2300-47B4-B9E5-9FE813A2FC09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CC28B6-57D1-4919-AA55-A262CC16AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB4C54D-1265-425A-B507-E1099844875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97362147-3A71-430D-9064-4435D45C3B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89212CF3-4E99-4389-94CE-F4211DDCA01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4202y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEA4DA3-0AFB-4FCE-92DB-5B316775BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611C0A0A-1FA3-42F9-82E8-BFCB71A077DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F027D9-DCB4-4A3D-8987-41F2941DBD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BCEC9-2BFB-4B41-9A7A-18B1347C6202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4924CE39-A846-4DB4-9547-6322FC5AD6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4220y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9E2C9A-94A1-456B-90D5-54932DF64C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC04C652-B2D8-4002-A50E-8AFE83204A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4258u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D413F0-CDBC-4A63-B9A7-9E7725BA1E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A8826-59F7-4A71-B74B-737BE9C7DE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4278u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB6BDA-6825-489B-AB39-7729BA45DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4288u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7913F57E-E600-4767-AF51-D045E1898E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3783F4-5A05-45AA-9791-A681011FD78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3114D-31D2-4DBF-A664-F4049D8B6266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EE6578-981D-470C-BB24-4960B3CB1478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4302y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3320D50-C5C9-4D75-BF1A-5BB7BCBFE2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4308u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE59839-8EB9-47FE-88E2-F0D54BE787A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75694A3D-080A-4AA7-97DF-5A5833C9D9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C5E27D-BBAB-4395-8FC6-8E3D4FB9A1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E996176-3DEA-46E6-93B7-9C0DF32B59D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4417007D-126A-478B-87EA-039D088A4515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78C2825-F6A3-4188-9D25-59EAEC8A7B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2FA85D-B117-410D-B247-8C5A3479319A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4400e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A041D27-132C-4B15-976F-1750C039A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D495E06-BF2B-4C5A-881D-94C93CD2BA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C31DFB8-8D8C-47D6-AAFF-BAE829A3D965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4410e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088BC395-06D5-4156-85EB-63C4A9552898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4422e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A220A2-A6D2-46A7-B168-607400EEDCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E79232F-7196-440B-82D4-165885251232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED866954-77AB-4CA8-8AED-4252C595FC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A1F516-B180-45D4-8EB1-754B7497CB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36758A04-64D3-4150-A004-CF042FA31CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E01752E-F1DD-400A-A917-216CAF15B0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD47EC58-F776-4F59-8F15-4B208904CF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3781F4-2123-4FA1-8AF5-D0D1E6C1A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94565E35-8A58-4CB6-A489-C796DCB97FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49964D35-5323-4412-BD54-661630F9A8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A37E7D-1BF6-4A2A-BF52-5F0EC4B4F341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F66468-87D0-41FC-934B-5924BE2956CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E0F93E1-4607-4DF4-AC6E-4B7254D4A8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C0D99E-443E-4AB1-A07A-900A09FE177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D0FD76-C1FB-43D0-8511-FC0BA6DA7960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DAEE52-09C3-4A09-9958-9D6807B2700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97690D4-E814-4D40-B170-BE56D7AE2C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89804F2C-D32D-4444-ABEA-5B241153D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAAAF9C-B29B-4020-BAFF-C87B1A08294A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE60E1E-AB8D-46E4-A779-A54F2D20B5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB958A28-7C9A-4BD0-B002-4E1A65CDB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C27B318-2AC1-423D-B0C8-583BB1800D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E58E3D0-1154-4B13-BA16-67CE67DF0637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D2ACB3-B906-4944-A021-03C4645965BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFF834A-D7F0-4E48-AD3D-DD0BCE6DEC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1A41BA-A1D6-484A-BAD2-68DF85598354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11260C9D-69A9-4D81-9CCF-2E116DD75F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5257u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C020F06-FD27-46E3-A48F-3F60F33BB969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C74F10-6A7F-4F68-8A34-E981E1760DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24741B98-8D0E-4307-AAEF-A14B2531DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4FA4BA-4304-4A70-9F86-120F2A3D8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367FC8BA-F046-4264-A049-49E933E7698F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5575r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9B68D3-1DFB-4468-85C4-AC13E6CBC111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C966A016-B650-44D9-B8C4-1ED50AB318DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC448FF0-6D3F-4609-864B-4191905EE2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC246FE-4CA6-4B2D-83C3-D50A386C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758A14DB-1BAF-442A-BA7C-5E9C67847BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61309100-CFA7-4607-A236-8910838AA057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D76265-7BD0-4C51-AE77-22B22524DE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38B195-BB8D-4747-881D-E8033760B4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA8BE76-168D-48A3-8DF6-E91F44600408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B656975-5D71-4712-9820-BDB7BC248AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA045267-114D-4587-B6D7-E273C28DC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77018415-E122-406E-896D-1BC6CF790BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADF37F1-546B-4EF0-8DEC-DC3B9F5309FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7469256-1A64-46FF-8F5A-A8E9E3CF5BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9069B9-9FE3-4AD5-9A8E-55C0F73BD756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E1C012-3E05-44DB-B6D2-BFD619C034B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D689D6-8594-42F2-8EEF-DCAEBA885A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6446000-0494-4DC5-ABAA-F20A44546068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B94EEC-6690-45D0-B086-F4A5B25C25CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B767B6E-B3E6-4424-97A6-89A7E7EB0EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832AB3CD-E3A1-4CCB-A210-287973563D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A26C0CC-68AD-40F5-96B8-87E6C643F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C4221A-9994-43B3-9C7A-E13815A50A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20070B1D-B91C-40BA-A9D8-E80170A2933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70129C9-371F-4542-A388-C095869E593A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4DE25F-168A-4C67-8B66-09F61F072BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58157F24-D89E-4552-8CE6-2F01E98BD1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7FFD78-1E1C-4246-BBD3-73FAC06AA46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:8600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ACBBEA-EC95-4F3E-B585-893DB6D21A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEC55DF-1950-45E5-A5F2-B5604AFA1CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:610e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A5EC79-1B21-4BB3-8791-73507BC8D4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB4AFC3-FE30-4F46-ADC1-D03EB14E757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0387587-AAB6-4284-8516-4DA3E3582D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A238C975-9196-449F-9C15-ABB2E9FD1D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F17F4A5-120B-4E00-97C8-8A85841ACBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:620um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2537F047-64C9-4E73-B82C-310253184183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A55857C-649D-46CE-AEDA-6E553E554FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA4892D-AFDF-4441-821E-5EBF7F64C9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:640um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327E06A3-7F0E-4498-8811-10C8D15398FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660lm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1624E6D6-858E-4085-B0B9-362B819EFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D61F4A-40F0-477C-8326-7359D3626E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:660um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1455B4DE-7F1C-4CF2-AE02-2EDD20025D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:680um:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B215788-860B-46CD-9A08-43AFF98FAEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B92FAD5-CA6E-48F7-9613-3A4CE90F5F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:740qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EB132B-000C-4A17-AFB3-19F40A73D2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4815AE-B635-4545-83C2-5EC4E0128337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:840qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0046C06-E3E6-4674-A4D1-332DD29D9552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C191851-3DC3-41C7-AD89-81F091CCC83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:860s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21126922-8E81-47F4-82D4-CBCDDACEC4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209E18B0-BBB5-4C65-B336-44340F7740DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:870s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C867C0B8-91A4-482A-B7DD-54AB9599AE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:875k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F03843-8A51-4CE1-BE6C-994BDE3A8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:880:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09854948-2657-4261-A32A-0523058F072E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:920:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13904A5-266D-481C-A42A-734C3823A238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:920xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC82FCB-0541-45C4-8B7E-CB612D7F702A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:930:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C18BD84-5E9C-4C9E-B0AA-2CEB0D7A58C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:940:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5ABC7E-C4E0-4850-A1E6-07EBCF4A87D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:940xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501E9355-0CDD-4951-BCC3-47962788BCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D976D9-62F0-43C3-8359-E51E26B6CD87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:960:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02AFBCD0-9B4B-4CA3-8FA9-D8B6ECB24894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:965:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64ADE9AF-196F-4E0B-BC66-7DE0183F9032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:970:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90CCA48-1705-4564-AAF9-271201BD5113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:975:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B82BAFF-17F5-465C-8032-67D5ECAB2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:980:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F694FEC-B97D-4BDA-ADFA-751E8BFB7CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:980x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F831371E-7437-48D7-8281-1F406215041B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:990x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4F06B5-615A-464A-A0C4-7AABEE8530CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AF503A-A2B1-4FC3-858B-264049ADF0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E702C7EC-B1D9-4BDF-B334-2004CD76B52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2600s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39F31D6-DC4B-46FE-BE5D-EA612D915A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2610ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CB8036-5F36-4CD4-9B3E-D2401F2E64F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2617m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9849BA3-3990-4E30-B99B-ADD043314CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2620m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20FB18A-D3DA-4DE9-BEFF-75B7AB9B9A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2629m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A67CD6F-5E4F-4E69-A2A9-A4033DCE08EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2630qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A22E92-1EA7-45D9-AC86-EC3D9664C294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2635qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA2911-6561-47BF-BEE8-DDA31642C346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2637m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA6CA23-6F2B-44D5-B2DA-4F142BA3E48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2640m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F829DED-4D92-401A-BD80-C070DE57FC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2649m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F560575C-FD8E-485D-B50A-572604BBE903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2655le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED8C51B-AE59-46DC-85F9-6D3B2891CB3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2657m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A38D00A-B9DC-44DF-8247-70355FF9A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2670qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381EFC43-D5D9-4D10-90BE-4C333A9BA074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2675qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEDED18-2755-4C55-A1A1-04B4D5F40276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2677m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04B57EC-0731-40C8-939F-1C686A65A0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB301FB-EB3E-4F5F-868D-5B66CC7E1E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2710qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D28F9-B135-441B-A9BF-792DD356E374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2715qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D01CE3E-5C89-4FC0-9097-CAC483ACD441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDD55C4-AFCD-4DF2-921C-DDC1D7556DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2760qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F52334F-BE6A-4FD4-9F63-AE9BB017115B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C9BCC3-B9A6-4195-BF2F-E7BBCE8DC269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2860qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4DFFA7-AA0E-4D7E-97B8-13389FD47D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2920xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707F6671-57AC-4DF4-8024-444502E5C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:2960xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1FCE07-F9E8-4B14-95CE-01784D472128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3517u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C208711F-FC06-46C8-8849-27054DC1B264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3517ue:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AB8041-F201-4BB3-AAD9-199B06697DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3520m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C474C-D5EF-42D6-9B2A-A504BEFCB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3537u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F566CD3-3649-492B-B0AB-A107E51675B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3540m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9F3D74-AE72-4FC5-83E9-890781AF3093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3555le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8EA6A7-4AB8-487E-B5DD-9989CC5F1CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3610qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF63DDC8-A0C1-482B-92F2-CF6135E8C2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3610qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69918C6-7AAD-4AA5-AB72-C275367B1008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3612qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06155B0B-A5AD-4A82-8C02-D264981687A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3612qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76C19A4-FA26-432A-9443-9F92B2A946EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3615qe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BEE9BE-E49A-489B-B333-95D0993F8FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3615qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7427A678-EC47-4030-B905-619DD95F5A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3630qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86749716-1C9F-4C2A-B2A7-E62DEC10EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3632qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD000B53-06DA-4ED4-B0EE-9CB201B75C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3635qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8424463-C329-4BAA-8AA1-25CD8B63292E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3667u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52727E62-0048-4C56-BC8C-B3450D257B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3687u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8223AA-F077-45FD-A7E3-3C2C1A8F6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3689y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA34B50-2330-4D77-BF1A-6F05F3EF222C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3720qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6421F69-1076-43D2-B273-DE80FB2D5F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3740qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EDA9E2-CFE7-4917-BE48-A83208BDF0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A34E7FC-93A4-45F2-A7B6-4A8ABFCAB0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E611EDD-D44C-4311-B681-431D7C574528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E1B6AA-2F9A-43A8-9147-2BD9474E54C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1886D007-85B6-4E5A-968D-A1FD476A08A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3820qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDDCB65-4404-49BC-9515-ECECD58A667F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:3840qm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8D3E00-64C3-407A-9B00-8B6E383F73FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1B00A1-9C15-47C2-9F57-66586DEACC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4510u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5BF932-459F-4DD2-B160-5FE0371C7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ACE96-F1BE-4261-8F94-FC3C6E7C7561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4558u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783D6EA7-C016-4314-A87B-4FED1DC7114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4578u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD0176F-FFAE-4A85-9327-CE72FE059E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56970C7-F8D3-41B2-A78B-0C7F4A2A4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D4CE1F-86C8-4E48-9146-9DB57BF540FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7F9D65-5537-4C25-B02B-2393F60D1299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09C8A92-820D-4572-A797-180E17A7DEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7D77A2-0D9A-4D0D-B0DC-152757917BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07D3F1A-16CE-461F-A2F4-80FE5F841CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C04557A-C508-4FAD-A535-1C0AEFF08075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAE489-6679-4705-BF9C-BB6D385A1DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429A99C8-BC55-4887-893C-7124C1A5DB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A2B709-CC19-4116-A5BE-5DB5C8B45A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79DAC74-1F28-4EC8-B417-3FAFFB74C4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F1377-6220-43FB-BEF9-BAA7B0158147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18422CA8-3000-46B1-9065-2369E6B0BE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D558C66-E80E-4FC7-A0DF-485466390C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EA9AE-9E70-47B5-AD9B-0DF13A0939E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F22F6-4C87-47C5-965E-02A1AFF41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4720hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A2CA86-BFA8-4C78-987D-AD26F32622F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4722hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF64E0A-CDB0-427E-A96F-095EFEBA0A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425F6D34-EE60-464B-8EA6-8116EDAA1219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4760hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB9F657-1239-4424-A2E8-F8BD98C0095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4765t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631403C-0A67-42CB-815C-133EB87E0C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4A5A57-B1A2-4BBA-AC36-7EA7DF9CDE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0453C0EA-BA67-49D5-964F-35493F97D905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4D237E-ACB7-4382-AF5B-D27E634BF867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5461EB2-2958-4923-86AF-C74D449120B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C22141-E698-4E38-AF50-9CE04C1168FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D0E470-427D-4A68-AFD2-982A4F7CE2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB50F3-14AC-44BD-B7F0-A683C5FD1A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713C4B7A-C38A-4818-A258-D07DEDEC906E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4785t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59740BE-FC30-4400-B978-1DB41282971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839728F0-5F23-462F-B493-C37EE4C874F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B47DA-BA53-4D7A-9B5B-582238D5E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D452F1BF-1FA5-463C-8F13-6357509FB5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D1F4C-B396-468C-BA32-9367A68C95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4800mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76A812F-D77A-49C8-B7A5-0C08258D4BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4810mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E001AAB-07EC-47BF-BDE9-BB927872781D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF11F5-61E8-4A98-86C8-49D6B3224FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4860hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED153E7-99A2-4C02-B81B-C3DDF8FAE1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4870hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D024802A-EA60-4D9B-B04C-027A0703EABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4900mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA731F3C-1F04-4EE2-83EC-9486F5032903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4910mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544A59F6-E731-43C8-8455-69256933E71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624258EE-7FFF-4432-9B6D-4D60AA73CD9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4960hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A2701A-35A8-4268-B9CF-40BA3219373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4980hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E671F6-8DED-4735-BE97-58A60E5B5C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC68B2A-8570-4311-BB60-49DBBDAF7430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9826FA02-937E-4323-B9D5-8AE059ADBE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5557u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8630BB-48AA-4688-A6F0-212C1BB4D14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC98D35-D7D5-4C24-B47E-EDE2A80B2B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F8ABCB-12C3-4C45-844E-B07F77DA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326105AC-3926-437E-8AFF-916960107050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E1275-7541-4B80-8FDF-53246A204C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E190929D-D3CC-46E1-A903-0848829061DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E4EBCB-B660-4F6A-AD73-81B9D8964162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D58CC5-CB46-464D-93B8-6AD5A19AF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16541D3E-EBBD-4D92-96D8-F169733377AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F08D257-F570-4D39-A6E8-0F60E55472E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20ED667-2BFB-41C7-82BA-9F0C0044DA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6158ED8A-007E-48B7-99BF-8BA03BF584BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA7096A-F321-49A0-911A-F9683ABE6E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A471395-7F8F-4BA5-962D-4D8F271FAB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9484380-92B9-44DB-8E20-DC8DE02D1CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8010808D-805D-4CA3-9EA2-55EB1E57964C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FE9F-A056-42A3-A241-F2FE37A6386A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73422A3-ECA0-4C41-9AA5-CF7D77885CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A96A5AF-C9EF-4DED-AE25-4540A2B02915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5115B12-053A-4866-A833-D6EC88D8F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5619D4D-9685-4595-8A5F-A18273FE4213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77E00E7-0EA4-4E32-A693-0E0F66BA4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA3457E-7E1A-4878-9752-79382E954A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68630C63-4457-4E12-B7BD-AD456B237FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FB5695-2950-4CEC-81B4-FD280F835330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F340AF8-508F-449D-9AFA-4E55F069B4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E944410E-D674-4141-B50C-9F55090325FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:8700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6438E07-0AC0-4BF9-B0F2-9072CA9639D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5079AA70-C864-4AE2-809C-52B50632F2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D124BCB-D8C3-49F5-B05C-E09B3CEBEBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A86291B-C986-4320-BCEF-9F5AD8B309D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1227659F-1393-4189-978B-CC3DC53BF407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2DB843-638F-41EF-B486-409318AA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0004D8A-A186-4DA2-A7AB-18A6456438FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m:5y71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B6BE9F-F113-4976-951D-53F2E183A95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:6y30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB005F1-9719-4985-B9D9-2140C962ADD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:7y30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A94D0C1B-F30F-4724-915E-192C53FAE58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m3:7y32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F247860-1D2C-415C-AFBD-26BD875AAF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m5:6y54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9697EDCD-A742-4AC6-876E-1080AD684207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m5:6y57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E73924A-875B-44D0-8F7C-A822B0488126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_m7:6y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03751B92-EE07-4F16-A476-BD25561810BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j2850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A630E1-6CAE-4809-AB18-5002F158AE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67750FF-EF4B-414F-8ED4-299CAF33B0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j3710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A82D885-82F5-4755-BC11-5899E28CEE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_j:j4205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AF1366-8A14-4741-8146-886C31D8D347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD75301-E29C-47DC-B53F-DC44EA0C1885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C944024-BEAA-43AF-A339-FD69C75E8240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435C69D1-3932-4379-8D18-B1E12D558325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3572B700-73C0-41D1-95FD-FE9D5B0C1F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A40DC9-0D4E-4C91-8D1B-3CED95B3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n3710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FB3E4B-05F8-411A-8C86-4ACE03815553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:pentium_n:n4200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E55EBC1-6F96-47CD-9503-7855EFB07240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5502:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4208DBA1-7F85-4876-9B6C-D1B43EAAB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5503:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ADC8E5-1CE7-4481-A9B5-61BFC6B4FF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5504:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1789924-FADB-4076-8874-120B29EE6B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC246667-2F6F-4024-9EAA-2CE3018235C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21BA7F8-D4B5-4E6B-8FCE-04BBD3501AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1341A5D4-A5CE-4D31-A178-01C3069D7A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A5C199-92E5-435C-AC40-175849285104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67589F54-0A54-4DE7-9A47-A73DD05F7965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC34C8E-1BB9-43CC-9D89-9E6DC435B7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE5163E-9BCF-4BF8-BCB9-B48C4E7E1564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C5DC8C-3318-440B-8B29-4827F343927B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5620:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECC47D8-F602-4CEA-B19A-209CE76C9D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7514ADD3-DECC-4CC2-9421-A609E526FDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED2EC97-8B2D-47A9-8EC7-D1E0ACBB6C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5645:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691097C3-F91B-499B-BAEB-4E7E9C43B517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e5649:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3DB1ED-017B-43EF-92A3-A8A88669FBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e6510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A49AAF-0F08-4151-8F74-4EF9C3415B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e6540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7A2018-BB4D-4DC1-813D-A4AA3F270893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95D91C4-C539-4458-A6C9-8AE17207AE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F9D218-8198-42C7-88FE-7C5382138324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:e7540:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8FDD81-95EE-4241-93C8-925085A4CE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5509:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614D9E35-10E0-4CCB-B817-C7C8C3947BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5539:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F987E-F4DB-46FF-B048-21B4A4C07B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:ec5549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05376F2C-30B6-406D-90F7-6C2E00E85171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l3406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDD3DF6-24BF-4C13-8F07-AF07327E5622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l3426:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1520A64-2157-45D7-A135-F900798C4EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A30F85-5367-4369-B7A5-176D71279FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8803FF9-48D7-4AB0-8A17-4590CABD0BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC63B6B-5D6D-477B-9125-007F835981B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF385AC9-963E-4670-95A6-BE1EBC3890B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943FA088-2902-45A9-A1BA-D612B46A50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C80902D-9A6C-47D4-B56F-35C378FC0E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5618:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100B46C-8485-4048-BFF8-2BAB311EC04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5630:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9E1646-E154-41BA-B9FA-0839A898023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F4C8E6-0043-41A8-94EA-EEBAA1A081E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l5640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C10985-CBF7-4717-A7D6-2594887D7CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l7545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C49886C-B6A0-4D95-8533-329FE5A66F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:l7555:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0788CF23-3FAF-44C9-9AAA-96E4818A1AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:lc5518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF7001-64D1-4BFB-9280-0BA0FAD97A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:lc5528:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E420E-16DA-4FB1-9968-C93E229614FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07469E04-B3D2-41FE-A2E4-E25A977026CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FF402E-5E4F-414A-A3AB-149548303616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w3690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E2B875-A270-45C0-A1B1-041264E5B290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w5580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C828C8C-7ECB-4167-87A9-0F522C400C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:w5590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2C887F-1EF7-468A-A6AE-440793C78DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F3D7F-D884-4ACD-A103-060F57A9867B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1FCAAD-7072-45EC-9ACB-08556458BAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4446224-40E8-4AD0-8197-921D3473E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA159D9-8C7F-4BE5-9093-A21C7D00F7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92B68FD-771A-4401-8B1D-B1A252356F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x3480:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B933941-0BE3-4EEB-8FDD-2DAA63343EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D060EF0-B29C-4B54-86A0-FD5CFF7B80BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F737C1-6011-42D2-9690-CA81EA0A283C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CA7EB6-D1C9-48D9-A69A-2618800A6CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5647:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA1F3E5-ED7F-4E4C-AD0D-0EEC542A9E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6E3C9B-A661-4B37-B76D-A3F7BD638D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C909B0-8FB2-4220-AF93-EECB8D650CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5667:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF36BAD0-A762-4F84-BE0B-060FE666ED67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007337CD-94FB-4ED9-B4A3-9E0EC52D79B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5672:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDFA137-F1FC-46BD-9872-D62671B1434D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5675:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6DBCB3-E912-43A1-914B-5C7CCFAADE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5677:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCF36E2-0B42-4F23-97D6-9E79ECCA8FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C67312-E128-4833-A91E-D7A9F96A7AD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5687:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F19F408-FABD-4A68-8CDC-C763F0321FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x5690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A06EC2-E491-4CD5-9904-61A88EBB7FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x6550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789A8CAE-8D9E-4244-880D-FBE28EC53AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7542:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F901EE11-D0C9-46F6-8316-D8F4F1D50260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7550:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E549F600-B9CE-4843-A772-2DACC528903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon:x7560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F28E733-87ED-4610-A8EE-BD37BED7685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_bronze_3104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB488DD-D97C-4E21-A055-E6CECBBBC34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_bronze_3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC12C97-9966-40E2-8B23-B4453EC9EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e-1105c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2832E8BF-7AC7-444C-B297-66F770860571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44AA72FB-E78D-419E-AA82-B0538C6504D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687C3BF3-D71A-49AD-8A05-EAC07CBCD949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AF90D9-16C4-4F8A-9868-3E2823E3445C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C063C53-8970-45B1-85F8-FB2080BF4695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64596ED7-794A-4D23-987B-D9AD59D48EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E52BA6-2F2F-4CD2-A601-5B0ADDE5E23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1565l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDA48F0-0F35-4A8F-8117-B0B28E00AB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1575m_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A561A8E8-79E2-4071-B57D-590C22EF86A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1578l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E46658-60AB-4758-9236-3AC0E6464383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1585_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8FBA-E2FF-485A-9AD9-E604AE0FB903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3:1585l_v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F99640-C753-40BE-A0A1-4C2D92E7DB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1105c_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1EC6D3-01CD-4CAB-817D-AE2E72FD0D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1125c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F98247B-1839-4676-855B-827A4B6C016B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1125c_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBA35BD-1048-4B6E-96B2-1CFF615EB49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CEEEE2-D6A2-4342-8A73-934093948824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979FEE9F-A957-43B6-BB6D-1A851D6FA11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7AF59D-D05E-47F9-B493-B5CD6781FDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF7EC93-0170-45A9-86C7-5460320B2AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7B1C2-D2CE-485A-9376-27E14F3FA05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_12201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F803AC-DCC7-43FC-BEB3-AA7984E0506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_12201_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560993AA-299D-42B7-B77F-1BD0D2114CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1220l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C582B1C-1DAC-48FD-82DD-7334C10A2175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7862B0C-2C44-4110-A62A-083116129612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048C5996-F719-4338-B148-0DD1C13E02FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0196DA2F-CFA7-44D0-BDF5-37C7403E3B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9FF7FB-AB5A-4549-8C15-E69458C649E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1225_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEF6608-B650-4C77-9823-0AD57B3484F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1226_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE6A2D7-901C-45F9-B487-D674047D522E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFCAC5E-6CF1-4EC1-A24C-688DD1016A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADCB509-5B0E-4592-8B23-EC25A3F79D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB51691F-089F-4016-B25E-238074B06C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBAAC728-6A0F-4675-9677-AAF7DD5D38ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3BFEFD-3D0D-48B0-A5AE-6F3C2D791CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1230l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7E1AFD-9BCE-4487-A8DE-F9C60529CA7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1231_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA37503-FD3D-4220-933C-234631D6EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72992831-2A76-456B-A80C-944BDD8591E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1235l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79C2131-5566-4CC2-B6ED-38E3F6964500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BFDAA6-3DFC-4908-BC33-B05BAB462F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6266056-770A-4E2D-A4FC-F1475257648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929AA8F3-8BDF-4614-9806-6D4231735616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605D7552-8184-4B11-96FD-FE501A6C97DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3144BBDE-CC96-4408-AA02-ECC3BF902A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8BA77A-34E3-4B9E-822A-7B7A90D35790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1240l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7165B43-ED22-4714-8FA4-1E201D1BFA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1241_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CFB133-FAF0-431A-9765-8A9738D6D87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2975B0F2-DB7C-4257-985A-482ED2725883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70221E07-3C2E-4A82-8259-AD583EB5CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427DFD78-56CD-43C4-948E-F53AF9D669F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3E6F5F-6B82-43D9-BD6E-D22F9B991DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1245_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75AD7649-3FEA-4971-9886-6C9312B937A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1246_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE972C-6BAE-4342-BA01-1D685487F9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1258l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CDFE3B-C064-49A9-BD43-3F7612257A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1260l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD0EEC1-D695-41A5-8CD6-9E987A547CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1260l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35AA9AC-28B3-49C2-A9B5-5D26DFEDB723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBF25B8-D474-4C6B-8E45-F57DDC7074E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF18FD1-6670-4C3C-8000-A079C69D575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1265l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D760EEAF-5CF5-4F25-8FA2-D4F75F4F5A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1268l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921EB5A5-F911-4FCE-A6F1-C66818B34678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1268l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13878C13-1C7C-4B83-AF27-4998E8F659DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023063E1-2DD7-487C-A8A7-939FAEE666A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77255CE6-D7B7-4B48-993C-7100A1170BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40AC368-3A14-4EFF-A8D0-7EFB4C83045D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3472AA7B-C0CF-4D65-8A6C-B1D52D27F0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1270_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07E80D5-70A5-49C9-9044-D683C7ECCFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1271_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63668AF4-F29C-4424-8EC5-2F0A5950DD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86616FE-0C3F-4984-A364-8A6A9F01DAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C1C7CD-538D-4D7A-A81C-10DF5376A479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5922F749-2B23-44B8-8A46-F31BCAEAD279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48BBAF-6B27-43D6-B86B-40CD8E7BA056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75D0EEB-707C-4C86-A569-E91E9F00BA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1275l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FB0E20-0243-40A1-8DEF-37150791222E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1276_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CFF26D-8AD3-4179-9E4C-F06D7C858C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1278l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7541572C-229F-4963-B7F0-06EB3323E53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DE669C-27FD-4196-8B8C-1DA4EE4C1D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479F7C77-D16F-4E40-9026-3EB8422E0401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A242AC2-9AA6-43FD-90F4-5BF6E80DBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB08C8-0018-4A8E-A206-097BDDF83B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1280_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7193E85-30BE-42D5-A26B-3F88817F3574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1281_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446E8515-45FC-4B8B-8D12-60643D64C07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBDF6B2-D388-4639-87D8-064AA3F6B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB8B6-B614-4EAA-BA90-C5326CB5D07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A371DF9-E224-404F-99C2-C2A4607E62D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F40E356-365D-44B7-8C38-A0C89DDD6D3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1285l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3132029-89F8-4359-A0DC-A275785266A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1286_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02F5685-0636-48AB-B222-434CA1F3B336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1286l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51FDD60-88E5-4A86-BB8E-4C2D7EDEFA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED4693C-DECF-4434-90C0-56158F102E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1290_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB408A6B-0842-43DA-9180-B0A299FCBCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1501l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6215EBAC-7C75-4647-9970-482120897F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1501m_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3357FCAC-B6C4-4E3E-A40B-AB5084A7F9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1BD2B6-1AF6-4AD4-94FA-94B453A21908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1FD6E8-80EC-461F-9ED1-CE5912399E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e3_1505m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96F585E-BDEF-45EE-B0AB-94FE23753AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2650l_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3279C067-3058-4D46-A739-05404FD0E9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4DF0A7-8BC2-48AE-9036-FED6EEC57DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0855225-F501-486A-BD03-2A86FD252B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214C7B0C-C438-4000-9F9B-6D83294243AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C91AA2E-4BB2-49C8-9364-4E363DF42CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2658a_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA26781F-5A1C-4DA5-835E-D984D697F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEA4222-F25D-4457-80AA-6D05CA918D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3E60D1-5CF9-4F96-9EDB-D87F8CF57272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D321BC-6B1D-4C71-8E16-5A1319CEFD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2660_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6777AC35-9D1F-4153-94AC-B25627D730E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2665:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F063F4-8994-4E46-BA7B-A12A112009BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6F2DE5-AF11-439A-8D37-30CB882ECD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E213DD86-5419-42C8-BF38-7795DDB3C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A972291E-5231-439D-873B-2F87BCAF800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2667_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C089CC54-3229-43D7-AA15-73CFA1A43EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF268D83-C15D-4559-A46F-844E1D9264F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE97C0D-3EA1-4314-A74A-7845C7778FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2670_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34293F29-F327-4ADD-BF62-78F63F79BB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C0A46-1CC4-4882-985A-0BB41525BC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643F3522-A452-4927-944D-532574EC4243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F40B78-4DBA-44EE-8420-086789EFF53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2680_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "423BFD8F-4B50-43DA-9979-75FD18FBC953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2683_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAD4A68-0481-476F-BBBD-3D515331368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2683_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838CEB7C-7C4C-416C-86CE-6E8DD47EF25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7D021F-3C97-45B3-B1F7-0AC26959F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A31AEF3-448D-417B-9589-4BA0A06F2FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A1D96F-7FFD-413F-ABCE-4530C3D63040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2687w_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB2B08B-D3C7-4B82-B170-471D6CDEFAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8343FE-1320-40AE-A37F-70EF1A4AC4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD42BA5A-7DA0-409D-8685-E43CF9B61D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FF80E9-CF28-4EF6-9CFE-4B500A434674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2690_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7896A6C6-5918-4C27-85AF-6FEEFC7F8FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647B77A4-2F49-4989-AF43-961D69037370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "805B1E33-F279-4303-9DF3-C81039A40C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2695_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B971EA9E-AE5C-4A1D-AD55-8241F7B38C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7E0AAE-6539-4024-9055-BE0BAD702143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1A8828-0765-4799-AD6C-143F45FAAD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D34618-1CCA-405B-A49C-EB384A09C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2697a_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D6061-66BC-4862-BC84-ECD82D436E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2698_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B6EE64-1AD4-46B2-BA65-BB6282E56EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2698_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11650B45-0BDA-42BF-AEF3-83B48DD6A71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3C92BA-827B-48AF-BBB3-FB60A9053C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC097E24-F6C9-40D9-95E9-7EFDFA61AFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699a_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB44CA7-DFE6-4B1A-9A63-97AE30017E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:2699r_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B305EFA-6226-412C-90EE-F0691F2DDDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3874FA-63CB-4B5D-8B64-CE920320A4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4603_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0800ED17-50E4-43F3-B46C-591DFA818BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46B0405-F301-4209-8766-6E12EAFAD157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4607_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99F9F1F-A967-4884-96CF-4488102DC0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B37AD-4599-425B-B39F-E571F4975266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A5F1CF-A1E6-45F1-8B09-36566778DB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698C8A49-888B-4675-B3B0-25EDE2FD515E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4610_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D98F97-8EF4-48B5-84BE-C3CC27031FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B473D1FA-909B-492E-9C5B-94B0E20E1C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD5EA7E-322E-4CE6-89D4-7DB1055C9034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67836379-4E1A-45CD-9506-7D3F612E47C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1BBC61-8664-4452-93A7-DDB4D2E4C802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4620_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F1B50C-FC5F-47F4-87BC-60E1BD3DD1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4624l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044F0375-DF2F-4D9B-AD7E-473D34165E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEE9B72-5C4C-40C0-A8A7-9DF11655DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0655CA-A88C-4632-9A18-560E3F63B2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4627_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1454DD-DA51-4CBC-8BB2-09D5AB5777DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4628l_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6965851-3B29-4C21-9556-97FD731EAA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52984FD2-44E0-4E91-B290-0376737EEF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5D92E2-E718-4247-BA5D-DFE86C0F6AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF933366-7503-4F8D-B7AA-F6A16210EC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4640_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2DAF5D-5BB7-49C6-8426-8B547505B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4648_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EABB21D-D021-434B-B147-CAF687097A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7609424D-95F1-4493-A20C-B1BA4EC6439D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966DC636-C802-4D9F-8162-652AFB931203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75794EB-A5AF-43F0-985F-D9E36F04C6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C2CFF0-98FD-4A0D-8949-D554B2FE53D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4650l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F9217F-5028-4659-AA8E-F60548DE4D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4655_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC769DC-CF2E-4A3C-A610-264F024E6279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4655_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2B1CBF-D155-49BC-81A4-4172F177A5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4657l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370B2B32-519E-4373-8A04-5C5025D688BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4660_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D9B562-C279-4A55-A347-F28FC4F9CD12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4660_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8C2BA0-48A8-4107-8681-A7C34C553D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4667_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B009DE-A82F-4569-9B42-EC1EC4DA8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4667_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B6E83-37FF-4F9B-915F-059EBB29DB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4669_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E218718F-4BE6-48B0-A204-9DD4A932A654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5:4669_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0AB327-B60A-473C-9D36-97766EE62D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA249EE-4786-4E27-8787-5E8B88C2AEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBD0529-1CF3-44E5-85B3-19A3323C9493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1428l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D664EE97-07EC-410F-94C3-AEAB2C6A627D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31DB981-03B1-4A84-8D87-CD407C3C149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD155D-89D9-4677-A621-4D7613BE65C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02BD0D4-FFFD-4355-97D8-170362F10B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1620_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6635781A-2651-4EF2-A5AC-AEEEE63FDE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1630_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DCE6930-760A-48C0-B964-1E3ED6A8517C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1630_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E52DE90-DF96-4CE7-B8D1-226BA50E4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EB40E7-9B91-4106-B303-2B70AF395BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB0D5CD-8AF3-409D-96A7-718641D4B90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E420B0B-0CD5-41C7-B25A-3DB856055F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1650_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0C295B-0D63-4BE7-830D-D927E00C301C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605C340D-2220-4669-B827-9009CB099E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8791879D-2908-4F57-8DB3-6D24100A9108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBEDBBA-0427-4DE0-BA8D-737DE7DF80E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1660_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E823DC5B-98BE-4656-BFBF-3A7018F8F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1680_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E8D558-ADE0-4358-9C76-7BD77BF23AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_1680_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7973B3D0-F244-4E26-88F5-A2D9BF2E4503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2403:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E6BAB9-CBA4-4362-BC82-00D2C5CC6FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2403_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3F4BFF-3CBE-4E4B-8B29-B203F99CFD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2407:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5CB567-4F86-4466-BE4D-BFF557ACAE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2407_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A52611B-6583-4660-90D7-C9472728072B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2408l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80C6E89-B57C-47BB-8B95-50C03DFB3B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB685B-FEE1-41EF-A046-1B34619E12A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9F6724-967A-4AF0-9896-12BF6164B2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2418l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1116BF-12D7-47CC-98DB-18B200CF9C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBB28DE-726B-4AF0-88A5-35987E1E648B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2420_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA1DB22-8FBF-4CF6-AA96-5B68EE28877D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1880E2B8-5E0E-4603-8D17-3ABA43D28179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFBB92-1917-4238-832B-195FBE418271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2428l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DFDF3F-9A3F-42B8-99A1-A3F76B198358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8778F972-BF34-482F-9FA7-71A77F6138E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F288BB0-FE7A-4900-B227-BE80E4F4AADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8DC53A-90C6-47FE-89F1-A1FE8B1C07A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2430l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E16338-A094-4CA9-B77F-6FE42D3B422C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2438l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E07AB33-5351-487D-9602-495489C7C0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22115ED6-1707-4840-B0D1-AD36BC0C75A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2440_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C633BC-831F-4CB7-9D62-16693444B216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2448l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF5EE7E-F41B-44EC-9F69-7963B1BF1FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2448l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD501E1-E78F-44C6-8A13-C29337B07EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9085BA0B-B7E2-4908-90C0-B4183891C718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2267CB8-0EE9-4DBD-AD5F-8A13BB62673C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81971C2F-137A-4F11-8C93-3B99D4CD1B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2450l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E0BDAC-398E-406B-B2DB-AE049D6E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB66D7E-B465-4A8B-8CBD-7E93CCA2CD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2470_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AFDE6C-DE58-4C4D-882E-474EF6C3D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950C6BF9-AA47-4287-AC01-D183237490FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2355181D-D8EE-4F80-8280-13D5CBCF4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5209343F-66B0-4DC0-9111-E2E64CFF7409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2603_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720109A6-B79E-48E1-9AE7-7708B154788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2608l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FF0DBD-AE13-4232-80F7-F4C2E2CC9721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2608l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E944ED-8C02-46B8-BF95-0CE4C352753B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77AEA3D1-4846-46E2-9B80-20B19F00DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1576978F-E93D-4A47-90B6-6A4E3A7DE558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D339FE5-001F-4005-88A5-CFFE37F9B63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2609_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDABA86-497E-497E-A5BA-46F913A4840A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD886F4C-DB6F-4DDD-9807-8BCBB625C226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E16912A-7F6A-4A2B-B70F-D1FCD34BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2618l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C454B7-E5F4-4AAE-B577-FD71FA002C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BE2781-3A06-4D62-AC8B-68B721DA526B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE4EA5-B8C8-4AE2-9614-F9DBDB4D79DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA23772-2EB8-4BEE-8703-26D967EC4503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2620_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DC766A-B1F9-4B83-9F9B-CF603EE476BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2623_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA594740-43C5-4F42-BA5B-00CA8AE7BB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2623_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572B16E2-8118-43A0-9A80-5D96831D55FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB5C551-BADC-4A3A-93E5-2EBCA0704C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5383B7A3-1569-4FEB-B299-B87CE8C8A87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2628l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05BBDE0-6C47-4489-9455-7DA7D230ECA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1789AA69-EA31-44D1-82E6-228E48E18586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A7D5FF-3B1F-4C64-BB81-7A349765520D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93A92E9-C8D2-4F6E-A5CA-E8AFFEEC7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0498B3-393A-4C32-B338-E6014B956755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C451F752-6869-4AFA-BAE5-5C9A54427BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83710FD1-099B-436D-9640-061D515E10BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B71CE-6156-40E1-B068-A2B733E205E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2630l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DEEEE5-5055-4CE1-962C-C5F075F4CC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8718DDAB-3208-48CF-9BCE-54DA1257C16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1AA901-E822-4240-9D82-C9311E4F87B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CDE3DF-8E79-4997-94EB-B517FFCAE55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2637_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A0DE13-EB0B-493B-BC84-3AEB3D454776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1727697B-1F59-4E29-B036-C32E9076C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69E827C-C0D0-46C7-913A-1C1E02CEAACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2528F3F9-34DC-41DA-8926-382CB3EF5560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2640_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E452C262-5A8D-4D97-BC7F-A4F5FF53A659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D57BF69-D750-4278-98AA-976B0D28E347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76ADAE30-6CAD-4F5B-B6F7-C18953144C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A25D792-E21D-43EE-8B9D-67DE066DE5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2643_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C669783-C058-4B4F-BB9A-84B2C4682247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "159B088B-9A85-4CAA-854A-AA080E528F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE74A94-FE8F-4749-A35A-AB7D57E24913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "990AC341-0E67-4A81-87E9-EE3EFD9E847E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2648l_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BC18B0-58F1-4477-9978-CA7383C197FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474992FB-842D-4661-A565-44AF2CD78693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476E1B79-5342-4895-96D7-E97DFC1F5334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD318D5-89A6-4E28-939C-C5B61396806B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981AD3FF-1D14-4ECD-8B6F-BCEB7F2409AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C7E89-32ED-4328-9313-FA7D3DDBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2792EED8-2CBD-478E-BC09-05FE830B3147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e5_2650l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B1AF2F-6E48-4DBD-A60E-3088CA4C3771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E1691D-65B3-45E4-A544-8B29E38D569D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42F2703-B8AB-410E-AF7B-CD0BE777F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31244C94-00A3-499C-A91A-1BEF2FB0E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878FF6E8-8A6D-44CE-9DD1-2C912AB8A193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5078A95B-2BD8-4A37-A356-F53D1A53CB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFE67CD-DE53-4C4E-8245-35902AEFA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F231D31-3AAD-4C5D-A225-D2DF94486718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5998DF5D-E785-45EC-B8D0-1F4EC4F96D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADFD013-0BFB-427C-98E6-F9E4774DCBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:2890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58620B10-FEA6-456D-B6B5-2745F5DBE82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F698B1-D9CF-4FE5-933D-EFCEA3056E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4858A1F0-97F2-4258-AB98-027BF1EC5117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C961A8B-EAFD-4F66-9432-BCC0D154ECCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4809_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052DE6CD-A1E7-4E81-B476-66EF451061C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1AE1E-6FC0-41D8-857C-C5A99CAF5823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751B3AC8-D45E-46B6-83D5-311B693F3C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9588277A-0B97-4408-9CF7-11271CDAADD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4820_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FE854-85E5-4ED0-BFAF-2618C9053082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E048B9BF-77C8-49F7-9F2D-9999F79BA264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD16D4D-E816-486D-96F4-5A2BF75B959F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169C558E-1A83-47D5-A66B-035BD1DD56FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4830_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D683E509-3FB2-4175-BCAB-4EB1B5C04958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCFA915-5445-4732-9F8F-D7561BA4177F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A9FD98-C22D-48F6-87A1-60791C818A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F99F24-1783-4E6E-BE61-04C2E80356ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4850_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CC7EB9-3F59-4C0A-B3A1-984BCCFB25BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85289E4C-C813-4677-867D-EE8E98F4A1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4860_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C8150F-BEFA-406D-9F0D-E7CB187E26AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E807F90-819F-4103-B1F7-4CE46971BD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD93203F-71B9-4F87-B5D8-FD273451C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E652C74-C48D-4F29-9E85-09325632443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:4890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99158191-3013-4182-8A53-5DFCA1E2C60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E39A3E-7EAE-47C9-930B-58A980B73FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8837:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFDA54BA-C00D-4890-9B7F-328257607B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8850:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5EFB1E-334C-4B55-8E2E-6AE19B34774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8850_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8260DCA-2F0C-45F7-B35F-D489AF5639F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8857_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7778F81B-6D05-4666-B1D4-53DB0EC16858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC6706A-61F7-4AA0-B2FF-0FFDF739A644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF1B16B-02F2-4ECA-938E-B5CDCFC67816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8860_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5501D8-1B0D-4F5A-AFD7-C63181D3281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1751F0CE-A0D3-40E2-8EEC-D31141FE33A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF9AFA7-BBE8-4229-94CB-5A9596728BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8867l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23A777F-68A4-4217-A75A-4D8A27E6451A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA27DFB-CDD1-4F52-86B3-DB2320A9C7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392A4337-11F6-4980-A138-4FDBCAD0EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E9BB67-F1FF-4190-889F-78B965CCE934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8870_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4185A70-5D10-448E-A9AB-AA9D5CDF0FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35607317-0928-4297-A33E-D44BEE1BBEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48323B1-7FEB-451F-A064-23E7CE7F6403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EF4E8A-EF37-4DCC-B5D4-DA89AF31DD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880l_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5763189-7980-4A72-92C9-1908FE9E15EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8880l_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53ACD49-DA21-4DDE-A0AA-FCCD59D29886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4326D350-EBC2-48E6-A2C6-0499F6826CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8594E6FE-B6DB-4343-B3DD-AEC19923DAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8890_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCADA00-E453-414D-9933-FCB43D21BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62212D9-F707-4A8E-AB2A-A3985E7A4049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561755A8-8AAD-4F41-8266-747EFDAF2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8891_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F4BB0F-DAF4-479B-B78A-7929C151AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A207312E-1D35-4464-A111-22C4C793E146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B16E32-07D5-445B-BAA5-4E4A0881BFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8893_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF08F6B-2ECB-414C-82D7-C06085BF8B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_e7:8894_v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21032BE3-74D8-4C3F-B461-158F475B6853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9AC992-59B7-44EE-9FF3-567AC48938AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44B3BFF-649A-4C1E-9564-EFA007FA2BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5119t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04EDD71-15B3-4085-828C-BB7A43DBDCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1BA7AC-989B-4093-841A-C6D5978BF17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5120t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F848-B15B-4369-A164-5FA11D2B9AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:5122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E46F934-9765-43ED-88A7-A4778C99A976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380A8F4F-7D1F-4F79-B555-E5AE18EF9F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D5217E-9520-4FDB-9330-C8DC2CDDAA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6126t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B206674F-1A34-470B-820C-05F9C37792CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AE2051-9F8E-4477-8E1E-38A1E06AD247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B39281F-990C-4AA3-9287-CCB5BA7E8AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDC0FCF-BD22-42AD-8044-9A64215B91CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0ED8AA-56D8-4CB6-A765-706BE87C9E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA890C07-7940-4DF4-96FB-8F71A2EFE5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6134:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95A34F0-0B74-4031-BC9E-CBC93665BE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6134m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD3CF38-0DDD-4C1C-B420-4DE0B1C932CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB22DF7-15CE-4340-A05F-BD39FCA41F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA72DC8-2E4E-453A-A3FB-20F31D32B973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758E45B6-7C7A-432D-891D-CB99077AE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6138t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B3CDFF-B055-4BB4-98FB-DFF4B2E63A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D7A401-BCE1-4673-93C9-67F009B75A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6140m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E62119B-2A65-4473-B570-F118614B0ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5319E0-909C-4688-AAA6-6A0B5D19FFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F83F9F9-D2DB-4D40-AD61-29E66B050B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6142m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BE6238-312E-4CF7-9E74-48CB5603B0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6144:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC09EB6D-7FAC-4B61-83A5-B0DC18D54EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BA1BE0-0A78-4E94-A619-35735C913180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6148:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDD838C-8037-49E1-BAB4-C1D7D29BB9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6148f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CA40FE-80C5-4A20-8219-CEF51F3162FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10305C5-0C2C-48B7-A0AD-2B24AD722EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E8F127-6EAE-4302-BD52-7C3FCCA307D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_gold:6154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D675EA9-33E7-45ED-B6A9-7117AD2FEE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E468FE-73BE-4B20-B774-58EC7CD20CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7210f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF6B19B-7D45-44B3-8524-407253B93EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7230:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B803FAD-E54D-49FE-A078-029B8FFBBB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7230f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC511505-ED67-45B4-B76C-56AB750C4408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A430C232-79EB-4264-AE24-41D4A2A5D990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9E3D4B-A3DF-4858-8C64-0316B6E57435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7250f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19108672-E1AA-41CC-B86C-061D3721C8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200D36CF-AEDE-4183-8C54-748E6E5A3218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF13A44-5163-4282-8EE8-7DC05499B5E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7290f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827C12CE-D87D-489D-ABA7-BE0405EC33D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_phi:7295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AA78F7-520B-4FFC-838C-DC74FEE8E13F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8153:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB2949C-4699-49EF-83EB-31199E0CE2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C169DC-EEFE-4DE6-A3D0-65B606527240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD28227A-8888-43B2-BC41-8D54B49DA58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7984BAEA-4518-4E17-830E-B34D09648BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2214E5-491E-448F-A4B6-A497FB44D722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE93013-C262-46A5-8E77-D647881EE632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B53CEC-943F-4966-8EC1-CB2C6AD6A15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8164:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAC04A3-EBE3-406B-B784-A3547162ECE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15720FFE-B2A4-4347-BCD7-DFA6774C0B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F46B0E-C746-44B4-B343-E3DCAB4B98DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8170m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE30903-4F75-4D71-A8BB-44D1099E9837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98311EAA-26C8-4092-8BE5-4E7BEAA68DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8CF348-811C-4342-ACB9-AFCABCC34331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8176m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71998EC5-EC0F-496C-B658-3CD91D824944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_platinum:8180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F19B2A-E7A1-4B97-AC40-02B0D3673555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6387C9-C0A8-4B26-BC62-802775CD0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4109t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEB0164-77C2-4EC2-92FD-5FCE246119CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB20210-337C-4220-8CA1-F4B2BC54EBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F699569F-4F52-4CC0-90D9-CC4CBC32428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAED22B-D097-49C4-ADDF-4B3F3E1262D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4114t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF5C3C2-EE69-4DE7-A76C-C797192EE7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7756B588-5A63-4508-8BDD-92DB8CB0F4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:xeon_silver:4116t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316E26AE-67A5-4E75-8F9B-ECF4A03AED51"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arm:cortex-a:75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C850453B-CDB1-490D-B551-9AC0B27D8A67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584653",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102378",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040071",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-254.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0292",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdrdv2.intel.com/v1/dl/getContent/685358",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-002",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-003",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://meltdownattack.com/",
        "source" : "secure@intel.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-06",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180104-0001/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://support.citrix.com/article/CTX231399",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://support.citrix.com/article/CTX234679",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://support.f5.com/csp/article/K91229003",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-18282",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3522-3/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3522-4/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3523-1/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3540-2/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3541-2/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3597-1/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/3597-2/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3516-1/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3522-2/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3524-2/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3525-1/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4078",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4120",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/180049",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_01",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id/1040071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-254.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdrdv2.intel.com/v1/dl/getContent/685358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2018-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://meltdownattack.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201810-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180104-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX231399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.citrix.com/article/CTX234679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K91229003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3522-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3522-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3523-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3540-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3541-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3583-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3597-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3597-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3516-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3522-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3523-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3524-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3525-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/180049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15714",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-04T15:29:00.210",
      "lastModified" : "2024-11-21T03:15:04.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code \"__format=%27;alert(%27xss%27)\" to the URL an alert window would execute."
      }, {
        "lang" : "es",
        "value" : "El plugin BIRT en Apache OFBiz de la versión 16.11.01 a la 16.11.03 no escapa la propiedad de la entrada de usuario pasada. Esto permite que se inyecte código pasando ese código a través de una URL. Por ejemplo, adjuntando este código \"__format=%27;alert(%27xss%27)\" a la URL se ejecuta una ventana de alerta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ofbiz:16.11.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21851FFA-CEEF-48E4-8DF6-75A28009A481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ofbiz:16.11.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C50A5-8B45-4627-8D41-74E181A54B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ofbiz:16.11.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCB8B08-4BC5-487C-A706-A722BB5B430C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://s.apache.org/UO3W",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://s.apache.org/UO3W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17837",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-04T15:29:00.240",
      "lastModified" : "2024-11-21T03:18:47.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1."
      }, {
        "lang" : "es",
        "value" : "El módulo Apache DeltaSpike-JSF 1.8.0 tiene un fuga de inyección Cross-Site Scripting (XSS) a la hora de manipular windowId. El tamaño por defecto del windowId se limita tras 10 caracteres (por defecto), por lo que el impacto puede ser limitado. La solución se aplicó y publicó en Apache deltaspike-1-8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:deltaspike:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5D5806-DB78-4A90-8D29-24C53C54E704"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git-wip-us.apache.org/repos/asf?p=deltaspike.git%3Bh=4e25023",
        "source" : "security@apache.org"
      }, {
        "url" : "https://issues.apache.org/jira/browse/DELTASPIKE-1307",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r17b326c0eb35d8c71c84c171eda83e3e1f011dc757781e34f2846018%40%3Cdev.deltaspike.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r78565f0f4ecb4ad32a6c405b45b9ee568dfc4729ba63e7d7cb6adf88%40%3Cdev.deltaspike.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://git-wip-us.apache.org/repos/asf?p=deltaspike.git%3Bh=4e25023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/jira/browse/DELTASPIKE-1307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r17b326c0eb35d8c71c84c171eda83e3e1f011dc757781e34f2846018%40%3Cdev.deltaspike.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r78565f0f4ecb4ad32a6c405b45b9ee568dfc4729ba63e7d7cb6adf88%40%3Cdev.deltaspike.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-04T17:29:00.263",
      "lastModified" : "2024-11-21T03:13:50.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection."
      }, {
        "lang" : "es",
        "value" : "xDashboard en OpenText Document Sciences xPression (anteriormente EMC Document Sciences xPression) v4.5SP1 Patch 13 tiene inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:document_sciences_xpression:*:sp1_p13:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "EF51F3BC-93F4-44A4-82EB-880D5F223D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102419",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43422/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43422/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1664",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.310",
      "lastModified" : "2024-11-21T03:22:11.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 133557."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE43784F-AEBE-4399-82C5-A339D9BCB676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012027",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102470",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133557",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1665",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.357",
      "lastModified" : "2024-11-21T03:22:11.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 133559."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE43784F-AEBE-4399-82C5-A339D9BCB676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012023",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133559",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1669",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.387",
      "lastModified" : "2024-11-21T03:22:11.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 almacena información sensible en parámetros URL. Esto podría llevar a una divulgación de información si partes no autorizadas tienen acceso a las URL mediante registros del servidor, cabeceras referrer o el historial del navegador. IBM X-Force ID: 133636."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE43784F-AEBE-4399-82C5-A339D9BCB676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997955",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102468",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133636",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg21997955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1672",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.437",
      "lastModified" : "2024-11-21T03:22:12.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133639."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.6 y 2.7 es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 133639."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012019",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133639",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1673",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.483",
      "lastModified" : "2024-11-21T03:22:12.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133640."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 es vulnerable a ataques Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133640."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE43784F-AEBE-4399-82C5-A339D9BCB676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012015",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102436",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133640",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1699",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.513",
      "lastModified" : "2024-11-21T03:22:14.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391."
      }, {
        "lang" : "es",
        "value" : "IBM MQ Managed File Transfer Agent 8.0 y 9.0 establece permisos no seguros en determinados archivos que crea. Un atacante local podría explotar esta vulnerabilidad para modificar o borrar datos contenidos en los archivos con un impacto no conocido. IBM X-Force ID: 134391."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018595DD-9AAD-44C7-9A46-BC78AF1F6C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010340",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134391",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1727",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-04T17:29:00.560",
      "lastModified" : "2024-11-21T03:22:16.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 revela información sensible en mensajes de error que podría ayudar a un atacante en futuros ataques contra el sistema. IBM X-Force ID: 134869."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE43784F-AEBE-4399-82C5-A339D9BCB676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012012",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102432",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-04T19:29:00.287",
      "lastModified" : "2024-11-21T03:18:51.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the /etc/uci-defaults directory was not being used to secure the OpenWrt configuration."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Inteno iopsys 2.0-3.14 y 4.0 permiten que los usuarios autenticados remotos ejecuten comandos de sistema operativo arbitrarios modificando el campo leasetrigger en la configuración de odhcpd para especificar un programa arbitrario, tal y como se demuestra con un programa ubicado en un almacén SMB. Este problema existía porque el directorio /etc/uci-defaults no se utilizaba para proteger la configuración OpenWrt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intenogroup:iopsys:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "3.14",
            "matchCriteriaId" : "0FE9F3C1-51F0-4D31-9836-484D56388E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intenogroup:iopsys:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB773D2-45EC-4E4B-9E1D-7C313096211E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://public.inteno.se/?p=feed-inteno-openwrt.git%3Ba=commit%3Bh=efcc985a721107e72a66da4db66891ec54441998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://neonsea.uk/blog/2017/12/23/rce-inteno-iopsys.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43428/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://public.inteno.se/?p=feed-inteno-openwrt.git%3Ba=commit%3Bh=efcc985a721107e72a66da4db66891ec54441998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://neonsea.uk/blog/2017/12/23/rce-inteno-iopsys.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43428/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16998",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.303",
      "lastModified" : "2023-11-07T02:41:04.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16999",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.337",
      "lastModified" : "2023-11-07T02:41:04.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17000",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.383",
      "lastModified" : "2023-11-07T02:41:05.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17001",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.413",
      "lastModified" : "2023-11-07T02:41:05.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17002",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.443",
      "lastModified" : "2023-11-07T02:41:05.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17003",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.490",
      "lastModified" : "2023-11-07T02:41:05.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17004",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.537",
      "lastModified" : "2023-11-07T02:41:06.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17005",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.570",
      "lastModified" : "2023-11-07T02:41:06.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17006",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.617",
      "lastModified" : "2023-11-07T02:41:06.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17007",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.663",
      "lastModified" : "2023-11-07T02:41:06.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17008",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.693",
      "lastModified" : "2023-11-07T02:41:07.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17009",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-01-04T20:29:00.727",
      "lastModified" : "2023-11-07T02:41:07.277",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16716",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-05T08:29:00.267",
      "lastModified" : "2024-11-21T03:16:50.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en WebAccess en versiones anteriores a la 8.3. WebAccess no sanea adecuadamente sus entradas para comandos SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2AC5D10A-0790-41AA-A570-200072ADB1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43928/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43928/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16720",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-05T08:29:00.317",
      "lastModified" : "2024-11-21T03:16:51.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de salto de directorio en WebAccess en versiones 8.3.2 y anteriores. Un atacante tiene acceso a archivos en la estructura de directorio del dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.2",
            "matchCriteriaId" : "30D328D2-B62E-4486-B4F4-0F884EB323F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44278/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-23",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-18-024/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44278/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16724",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-05T08:29:00.347",
      "lastModified" : "2024-11-21T03:16:51.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be written to a location on the stack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer basado en pila en Advantech WebAccess en versiones anteriores a la 8.3. Existen múltiples instancias de una vulnerabilidad que permiten que demasiados datos se escriban en una ubicación de la pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2AC5D10A-0790-41AA-A570-200072ADB1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16728",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-05T08:29:00.393",
      "lastModified" : "2024-11-21T03:16:52.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desreferencia de puntero no fiable en Advantech WebAccess en versiones anteriores a la 8.3. Hay múltiples vulnerabilidades que podrían permitir que un atacante haga que el programa emplee una dirección de memoria no válida, lo que resulta en un cierre inesperado del programa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2AC5D10A-0790-41AA-A570-200072ADB1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16753",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-05T08:29:00.427",
      "lastModified" : "2024-11-21T03:16:54.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de validación incorrecta de entradas en Advantech WebAccess en versiones anteriores a la 8.3. WebAccess permite algunas entradas que podrían provocar que el programa se cierre inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2AC5D10A-0790-41AA-A570-200072ADB1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-05T08:29:00.470",
      "lastModified" : "2024-11-21T03:17:13.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "Las versiones anteriores a la 1.0 de DuoLingo TinyCards para Android tiene un uso de HTTP sin cifrar. Esto permite que atacantes remotos suplanten contenido y, por consiguiente, logren la ejecución remota de código mediante un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duolingo:tinycards:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "9E5C4455-83DE-4594-8D43-F6160A51302C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/281605",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2018/01/04/rce-in-duolingos-tinycards-app-for-android-cve-2017-16905/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/281605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2018/01/04/rce-in-duolingos-tinycards-app-for-android-cve-2017-16905/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1811",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.233",
      "lastModified" : "2023-11-07T02:42:24.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1812",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.267",
      "lastModified" : "2023-11-07T02:42:24.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1813",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.297",
      "lastModified" : "2023-11-07T02:42:25.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1814",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.327",
      "lastModified" : "2023-11-07T02:42:25.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1815",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.360",
      "lastModified" : "2023-11-07T02:42:25.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1816",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.407",
      "lastModified" : "2023-11-07T02:42:25.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1817",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.437",
      "lastModified" : "2023-11-07T02:42:26.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1818",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.483",
      "lastModified" : "2023-11-07T02:42:26.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1819",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.517",
      "lastModified" : "2023-11-07T02:42:26.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1820",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.563",
      "lastModified" : "2023-11-07T02:42:26.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1821",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.593",
      "lastModified" : "2023-11-07T02:42:27.010",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1822",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.623",
      "lastModified" : "2023-11-07T02:42:27.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1823",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.670",
      "lastModified" : "2023-11-07T02:42:27.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1824",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.703",
      "lastModified" : "2023-11-07T02:42:27.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1825",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.733",
      "lastModified" : "2023-11-07T02:42:27.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1826",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.780",
      "lastModified" : "2023-11-07T02:42:28.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1827",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.813",
      "lastModified" : "2023-11-07T02:42:28.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1828",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.860",
      "lastModified" : "2023-11-07T02:42:28.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1829",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.890",
      "lastModified" : "2023-11-07T02:42:28.833",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1830",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.920",
      "lastModified" : "2023-11-07T02:42:29.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1831",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:00.967",
      "lastModified" : "2023-11-07T02:42:29.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1832",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.000",
      "lastModified" : "2023-11-07T02:42:29.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1833",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.047",
      "lastModified" : "2023-11-07T02:42:29.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1834",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.077",
      "lastModified" : "2023-11-07T02:42:30.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1835",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.110",
      "lastModified" : "2023-11-07T02:42:30.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1836",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.140",
      "lastModified" : "2023-11-07T02:42:30.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1837",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.187",
      "lastModified" : "2023-11-07T02:42:30.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1838",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.217",
      "lastModified" : "2023-11-07T02:42:31.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1839",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.267",
      "lastModified" : "2023-11-07T02:42:31.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1840",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.297",
      "lastModified" : "2023-11-07T02:42:31.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1841",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.327",
      "lastModified" : "2023-11-07T02:42:31.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1842",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.373",
      "lastModified" : "2023-11-07T02:42:32.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1843",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.407",
      "lastModified" : "2023-11-07T02:42:32.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1844",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.437",
      "lastModified" : "2023-11-07T02:42:32.507",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1845",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.483",
      "lastModified" : "2023-11-07T02:42:32.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1846",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.517",
      "lastModified" : "2023-11-07T02:42:32.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1847",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.547",
      "lastModified" : "2023-11-07T02:42:33.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1848",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.593",
      "lastModified" : "2023-11-07T02:42:33.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1849",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.623",
      "lastModified" : "2023-11-07T02:42:33.647",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1850",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.670",
      "lastModified" : "2023-11-07T02:42:33.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1851",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.703",
      "lastModified" : "2023-11-07T02:42:34.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1852",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.733",
      "lastModified" : "2023-11-07T02:42:34.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1853",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.780",
      "lastModified" : "2023-11-07T02:42:34.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1854",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.813",
      "lastModified" : "2023-11-07T02:42:35.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1855",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.860",
      "lastModified" : "2023-11-07T02:42:35.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1856",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.890",
      "lastModified" : "2023-11-07T02:42:35.663",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1857",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.920",
      "lastModified" : "2023-11-07T02:42:35.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1858",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:01.967",
      "lastModified" : "2023-11-07T02:42:36.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1859",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.000",
      "lastModified" : "2023-11-07T02:42:36.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1860",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.047",
      "lastModified" : "2023-11-07T02:42:37.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1861",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.077",
      "lastModified" : "2023-11-07T02:42:37.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1862",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.110",
      "lastModified" : "2023-11-07T02:42:37.993",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1863",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.157",
      "lastModified" : "2023-11-07T02:42:38.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1864",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.187",
      "lastModified" : "2023-11-07T02:42:38.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1865",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.217",
      "lastModified" : "2023-11-07T02:42:39.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1866",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.267",
      "lastModified" : "2023-11-07T02:42:39.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1867",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.297",
      "lastModified" : "2023-11-07T02:42:39.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1868",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.327",
      "lastModified" : "2023-11-07T02:42:40.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1869",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.373",
      "lastModified" : "2023-11-07T02:42:40.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1870",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.407",
      "lastModified" : "2023-11-07T02:42:41.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1871",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.437",
      "lastModified" : "2023-11-07T02:42:41.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1872",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.483",
      "lastModified" : "2023-11-07T02:42:41.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1873",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.517",
      "lastModified" : "2023-11-07T02:42:42.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1874",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.563",
      "lastModified" : "2023-11-07T02:42:42.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1875",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.593",
      "lastModified" : "2023-11-07T02:42:42.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1876",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.623",
      "lastModified" : "2023-11-07T02:42:43.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1877",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.670",
      "lastModified" : "2023-11-07T02:42:43.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1878",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.703",
      "lastModified" : "2023-11-07T02:42:43.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1879",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.733",
      "lastModified" : "2023-11-07T02:42:44.207",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1880",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.780",
      "lastModified" : "2023-11-07T02:42:44.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1881",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.813",
      "lastModified" : "2023-11-07T02:42:45.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1882",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.860",
      "lastModified" : "2023-11-07T02:42:45.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1883",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.890",
      "lastModified" : "2023-11-07T02:42:45.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1884",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.920",
      "lastModified" : "2023-11-07T02:42:46.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1885",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:02.967",
      "lastModified" : "2023-11-07T02:42:46.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1886",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.000",
      "lastModified" : "2023-11-07T02:42:46.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1887",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.030",
      "lastModified" : "2023-11-07T02:42:47.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1888",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.077",
      "lastModified" : "2023-11-07T02:42:47.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1889",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.110",
      "lastModified" : "2023-11-07T02:42:47.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1890",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.157",
      "lastModified" : "2023-11-07T02:42:48.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1891",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.187",
      "lastModified" : "2023-11-07T02:42:48.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1892",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.217",
      "lastModified" : "2023-11-07T02:42:48.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1893",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.250",
      "lastModified" : "2023-11-07T02:42:49.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1894",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.297",
      "lastModified" : "2023-11-07T02:42:49.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1895",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.327",
      "lastModified" : "2023-11-07T02:42:50.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1896",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.360",
      "lastModified" : "2023-11-07T02:42:50.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1897",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.390",
      "lastModified" : "2023-11-07T02:42:50.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1898",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.437",
      "lastModified" : "2023-11-07T02:42:50.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1899",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.467",
      "lastModified" : "2023-11-07T02:42:51.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1900",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.517",
      "lastModified" : "2023-11-07T02:42:51.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1901",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.547",
      "lastModified" : "2023-11-07T02:42:51.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1902",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.593",
      "lastModified" : "2023-11-07T02:42:51.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1903",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.623",
      "lastModified" : "2023-11-07T02:42:52.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1904",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.670",
      "lastModified" : "2023-11-07T02:42:52.277",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1905",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.703",
      "lastModified" : "2023-11-07T02:42:52.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1906",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.733",
      "lastModified" : "2023-11-07T02:42:52.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1907",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.813",
      "lastModified" : "2023-11-07T02:42:52.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1908",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.860",
      "lastModified" : "2023-11-07T02:42:53.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1909",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.890",
      "lastModified" : "2023-11-07T02:42:53.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1910",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.920",
      "lastModified" : "2023-11-07T02:42:53.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1911",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:03.967",
      "lastModified" : "2023-11-07T02:42:53.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1912",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.000",
      "lastModified" : "2023-11-07T02:42:54.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1913",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.030",
      "lastModified" : "2023-11-07T02:42:54.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1914",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.077",
      "lastModified" : "2023-11-07T02:42:54.680",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1915",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.110",
      "lastModified" : "2023-11-07T02:42:54.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1916",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.140",
      "lastModified" : "2023-11-07T02:42:55.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1917",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.187",
      "lastModified" : "2023-11-07T02:42:55.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1918",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.217",
      "lastModified" : "2023-11-07T02:42:55.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1919",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.250",
      "lastModified" : "2023-11-07T02:42:55.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1920",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.280",
      "lastModified" : "2023-11-07T02:42:56.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1921",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.327",
      "lastModified" : "2023-11-07T02:42:56.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1922",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.360",
      "lastModified" : "2023-11-07T02:42:56.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1923",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.407",
      "lastModified" : "2023-11-07T02:42:56.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1924",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.437",
      "lastModified" : "2023-11-07T02:42:57.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1925",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.467",
      "lastModified" : "2023-11-07T02:42:57.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1926",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.500",
      "lastModified" : "2023-11-07T02:42:57.517",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1927",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.547",
      "lastModified" : "2023-11-07T02:42:57.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1928",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.577",
      "lastModified" : "2023-11-07T02:42:57.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1929",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.623",
      "lastModified" : "2023-11-07T02:42:58.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1930",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.670",
      "lastModified" : "2023-11-07T02:42:58.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1931",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.703",
      "lastModified" : "2023-11-07T02:42:58.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1932",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.733",
      "lastModified" : "2023-11-07T02:42:58.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1933",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.780",
      "lastModified" : "2023-11-07T02:42:59.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1934",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.813",
      "lastModified" : "2023-11-07T02:42:59.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1935",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.860",
      "lastModified" : "2023-11-07T02:42:59.633",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1936",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.890",
      "lastModified" : "2023-11-07T02:42:59.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1937",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.920",
      "lastModified" : "2023-11-07T02:43:00.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1938",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:04.967",
      "lastModified" : "2023-11-07T02:43:00.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1939",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.000",
      "lastModified" : "2023-11-07T02:43:00.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1940",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.030",
      "lastModified" : "2023-11-07T02:43:00.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1941",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.063",
      "lastModified" : "2023-11-07T02:43:01.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1942",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.110",
      "lastModified" : "2023-11-07T02:43:01.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1943",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.140",
      "lastModified" : "2023-11-07T02:43:01.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1944",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.170",
      "lastModified" : "2023-11-07T02:43:01.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1945",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.217",
      "lastModified" : "2023-11-07T02:43:02.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1946",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.250",
      "lastModified" : "2023-11-07T02:43:02.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1947",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.280",
      "lastModified" : "2023-11-07T02:43:02.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1948",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.313",
      "lastModified" : "2023-11-07T02:43:02.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1949",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.360",
      "lastModified" : "2023-11-07T02:43:03.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1950",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.390",
      "lastModified" : "2023-11-07T02:43:03.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1951",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.420",
      "lastModified" : "2023-11-07T02:43:03.487",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1952",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.467",
      "lastModified" : "2023-11-07T02:43:03.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1953",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.500",
      "lastModified" : "2023-11-07T02:43:03.943",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1954",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.530",
      "lastModified" : "2023-11-07T02:43:04.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1955",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.577",
      "lastModified" : "2023-11-07T02:43:04.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1956",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.610",
      "lastModified" : "2023-11-07T02:43:04.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1957",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.640",
      "lastModified" : "2023-11-07T02:43:05.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1958",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.687",
      "lastModified" : "2023-11-07T02:43:05.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1959",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.717",
      "lastModified" : "2023-11-07T02:43:05.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1960",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.750",
      "lastModified" : "2023-11-07T02:43:05.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1961",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.797",
      "lastModified" : "2023-11-07T02:43:06.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1962",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.827",
      "lastModified" : "2023-11-07T02:43:06.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1963",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.873",
      "lastModified" : "2023-11-07T02:43:06.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1964",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.907",
      "lastModified" : "2023-11-07T02:43:06.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1965",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.937",
      "lastModified" : "2023-11-07T02:43:06.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1966",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:05.983",
      "lastModified" : "2023-11-07T02:43:07.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1967",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.017",
      "lastModified" : "2023-11-07T02:43:07.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1968",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.047",
      "lastModified" : "2023-11-07T02:43:07.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1969",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.093",
      "lastModified" : "2023-11-07T02:43:07.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1970",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.123",
      "lastModified" : "2023-11-07T02:43:08.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1971",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.157",
      "lastModified" : "2023-11-07T02:43:08.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1972",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.187",
      "lastModified" : "2023-11-07T02:43:08.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1973",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.233",
      "lastModified" : "2023-11-07T02:43:08.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1974",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.267",
      "lastModified" : "2023-11-07T02:43:09.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1975",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.297",
      "lastModified" : "2023-11-07T02:43:09.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1976",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.327",
      "lastModified" : "2023-11-07T02:43:09.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1977",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.373",
      "lastModified" : "2023-11-07T02:43:09.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1978",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.407",
      "lastModified" : "2023-11-07T02:43:10.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1979",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.437",
      "lastModified" : "2023-11-07T02:43:10.357",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1980",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.483",
      "lastModified" : "2023-11-07T02:43:10.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1981",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.517",
      "lastModified" : "2023-11-07T02:43:10.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1982",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.563",
      "lastModified" : "2023-11-07T02:43:11.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1983",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.593",
      "lastModified" : "2023-11-07T02:43:11.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1984",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.623",
      "lastModified" : "2023-11-07T02:43:11.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1985",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.670",
      "lastModified" : "2023-11-07T02:43:11.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1986",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.703",
      "lastModified" : "2023-11-07T02:43:12.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1987",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.750",
      "lastModified" : "2023-11-07T02:43:12.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1988",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.780",
      "lastModified" : "2023-11-07T02:43:12.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1989",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.813",
      "lastModified" : "2023-11-07T02:43:12.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1990",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.860",
      "lastModified" : "2023-11-07T02:43:13.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1991",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.890",
      "lastModified" : "2023-11-07T02:43:13.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1992",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.920",
      "lastModified" : "2023-11-07T02:43:13.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1993",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:06.967",
      "lastModified" : "2023-11-07T02:43:13.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1994",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.000",
      "lastModified" : "2023-11-07T02:43:13.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1995",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.030",
      "lastModified" : "2023-11-07T02:43:14.223",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1996",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.077",
      "lastModified" : "2023-11-07T02:43:14.453",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1997",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.110",
      "lastModified" : "2023-11-07T02:43:14.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1998",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.157",
      "lastModified" : "2023-11-07T02:43:15.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1999",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.187",
      "lastModified" : "2023-11-07T02:43:15.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2000",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.217",
      "lastModified" : "2023-11-07T02:43:26.207",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2001",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.267",
      "lastModified" : "2023-11-07T02:43:26.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2002",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.297",
      "lastModified" : "2023-11-07T02:43:26.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2003",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.327",
      "lastModified" : "2023-11-07T02:43:26.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2004",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.360",
      "lastModified" : "2023-11-07T02:43:27.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2005",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.390",
      "lastModified" : "2023-11-07T02:43:27.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2006",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.437",
      "lastModified" : "2023-11-07T02:43:27.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2007",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.467",
      "lastModified" : "2023-11-07T02:43:27.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2008",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.500",
      "lastModified" : "2023-11-07T02:43:28.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2009",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.530",
      "lastModified" : "2023-11-07T02:43:28.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2010",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.577",
      "lastModified" : "2023-11-07T02:43:28.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2011",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.610",
      "lastModified" : "2023-11-07T02:43:28.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2012",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.640",
      "lastModified" : "2023-11-07T02:43:29.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2013",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.670",
      "lastModified" : "2023-11-07T02:43:29.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2014",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.717",
      "lastModified" : "2023-11-07T02:43:29.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2015",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.750",
      "lastModified" : "2023-11-07T02:43:29.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2016",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.780",
      "lastModified" : "2023-11-07T02:43:29.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2017",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.813",
      "lastModified" : "2023-11-07T02:43:30.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2018",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.860",
      "lastModified" : "2023-11-07T02:43:30.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2019",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.907",
      "lastModified" : "2023-11-07T02:43:30.710",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2020",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.937",
      "lastModified" : "2023-11-07T02:43:30.943",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2021",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:07.967",
      "lastModified" : "2023-11-07T02:43:31.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2022",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.017",
      "lastModified" : "2023-11-07T02:43:31.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2023",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.047",
      "lastModified" : "2023-11-07T02:43:31.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2024",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.077",
      "lastModified" : "2023-11-07T02:43:31.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2025",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.123",
      "lastModified" : "2023-11-07T02:43:32.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2026",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.157",
      "lastModified" : "2023-11-07T02:43:32.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2027",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.187",
      "lastModified" : "2023-11-07T02:43:32.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2028",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.233",
      "lastModified" : "2023-11-07T02:43:32.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2029",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.267",
      "lastModified" : "2023-11-07T02:43:33.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2030",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.297",
      "lastModified" : "2023-11-07T02:43:33.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2031",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.343",
      "lastModified" : "2023-11-07T02:43:33.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2032",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.373",
      "lastModified" : "2023-11-07T02:43:33.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2033",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.407",
      "lastModified" : "2023-11-07T02:43:34.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2034",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.453",
      "lastModified" : "2023-11-07T02:43:34.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2035",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.483",
      "lastModified" : "2023-11-07T02:43:34.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2036",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.517",
      "lastModified" : "2023-11-07T02:43:34.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2037",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.547",
      "lastModified" : "2023-11-07T02:43:35.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2038",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.593",
      "lastModified" : "2023-11-07T02:43:35.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2039",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.623",
      "lastModified" : "2023-11-07T02:43:35.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2040",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.670",
      "lastModified" : "2023-11-07T02:43:35.833",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2041",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.703",
      "lastModified" : "2023-11-07T02:43:36.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2042",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.733",
      "lastModified" : "2023-11-07T02:43:36.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2043",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.780",
      "lastModified" : "2023-11-07T02:43:36.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2044",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.813",
      "lastModified" : "2023-11-07T02:43:36.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2045",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.843",
      "lastModified" : "2023-11-07T02:43:37.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2046",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.890",
      "lastModified" : "2023-11-07T02:43:37.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2047",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.920",
      "lastModified" : "2023-11-07T02:43:37.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2048",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:08.967",
      "lastModified" : "2023-11-07T02:43:37.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2049",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.000",
      "lastModified" : "2023-11-07T02:43:37.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2050",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.030",
      "lastModified" : "2023-11-07T02:43:38.220",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2051",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.063",
      "lastModified" : "2023-11-07T02:43:38.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2052",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.110",
      "lastModified" : "2023-11-07T02:43:38.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2053",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.140",
      "lastModified" : "2023-11-07T02:43:38.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2054",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.170",
      "lastModified" : "2023-11-07T02:43:39.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2055",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.217",
      "lastModified" : "2023-11-07T02:43:39.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2056",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.250",
      "lastModified" : "2023-11-07T02:43:39.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2057",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.280",
      "lastModified" : "2023-11-07T02:43:39.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2058",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.313",
      "lastModified" : "2023-11-07T02:43:40.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2059",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.343",
      "lastModified" : "2023-11-07T02:43:40.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2060",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.373",
      "lastModified" : "2023-11-07T02:43:40.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2061",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.407",
      "lastModified" : "2023-11-07T02:43:40.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2062",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.437",
      "lastModified" : "2023-11-07T02:43:41.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2063",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.467",
      "lastModified" : "2023-11-07T02:43:41.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2064",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.517",
      "lastModified" : "2023-11-07T02:43:41.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2065",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.547",
      "lastModified" : "2023-11-07T02:43:41.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2066",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.577",
      "lastModified" : "2023-11-07T02:43:42.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2067",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.623",
      "lastModified" : "2023-11-07T02:43:42.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2068",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.657",
      "lastModified" : "2023-11-07T02:43:42.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2069",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.687",
      "lastModified" : "2023-11-07T02:43:42.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2070",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.733",
      "lastModified" : "2023-11-07T02:43:43.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2071",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.767",
      "lastModified" : "2023-11-07T02:43:43.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2072",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.813",
      "lastModified" : "2023-11-07T02:43:43.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2073",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.843",
      "lastModified" : "2023-11-07T02:43:43.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2074",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.890",
      "lastModified" : "2023-11-07T02:43:43.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2075",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.920",
      "lastModified" : "2023-11-07T02:43:44.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2076",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:09.967",
      "lastModified" : "2023-11-07T02:43:44.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2077",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.000",
      "lastModified" : "2023-11-07T02:43:44.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2078",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.030",
      "lastModified" : "2023-11-07T02:43:44.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2079",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.077",
      "lastModified" : "2023-11-07T02:43:45.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2080",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.110",
      "lastModified" : "2023-11-07T02:43:45.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2081",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.140",
      "lastModified" : "2023-11-07T02:43:45.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2082",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.170",
      "lastModified" : "2023-11-07T02:43:45.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2083",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.217",
      "lastModified" : "2023-11-07T02:43:46.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2084",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.250",
      "lastModified" : "2023-11-07T02:43:46.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2085",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.280",
      "lastModified" : "2023-11-07T02:43:46.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2086",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.327",
      "lastModified" : "2023-11-07T02:43:46.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2087",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.360",
      "lastModified" : "2023-11-07T02:43:47.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2088",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.390",
      "lastModified" : "2023-11-07T02:43:47.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2089",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-05T14:29:10.437",
      "lastModified" : "2023-11-07T02:43:47.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4945",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-05T14:29:10.467",
      "lastModified" : "2024-11-21T03:26:44.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (14.x y 12.x) y Fusion (10.x y 8.x) contienen una vulnerabilidad de control de acceso invitado. Este problema podría permitir la ejecución de programas a través de Unity en máquinas virtuales de Windows bloqueadas. Se tiene que actualizar VMware Tools a la versión 10.2.0 para cada máquina virtual para resolver CVE-2017-4945. La versión 10.2.0 de VMware Tools viene por defecto en Workstation 14.1.0 y Fusion 10.1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EF613B-3436-4951-8F4D-9F22144E06CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A4B5F2-7123-40C5-BBB7-D3EA3EA3B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D95044-581B-4634-8A5A-D6167AE4E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB96DAF-5A43-4437-81BF-B47067336505"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B23099-25EB-44B6-A62B-2E46CD151994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6759F732-8E65-49F7-B46C-B1E3F856B11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55F26BA-4AFA-419A-BB0E-5C369F58F126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C182F-A8D2-4ABF-B202-261056EF93D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34B944F-073D-4B52-8B92-0620603885DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C5D443-A330-40DF-939B-10597147CE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BF8A2A-295D-44D6-A38E-D4C35437F380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574DB25B-51E1-466A-8089-5108DB5D6FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF7F09F-D8B3-40AF-9111-E7C14832C5A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555DD10F-7EA8-4107-A31F-2C7CED41058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4888B-156C-48BC-8035-3A0424CB6037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4DA202-3D18-4DDC-89E4-81FFF68EDFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9D03A0-1256-4394-81F2-31352B7C92D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:8.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6340A55-C86E-4DB3-B36E-2C5E9F74508C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A7D240-B003-4A48-95DA-F201EB3658D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E86224-4DF3-403D-9183-1435E0A018E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB49D1C-F166-4B8F-8EDF-0D1211119C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033109C6-28E8-44EE-AEDD-C3A2EDEA77D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102441",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040109",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040136",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4946",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-05T14:29:10.500",
      "lastModified" : "2024-11-21T03:26:44.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM."
      }, {
        "lang" : "es",
        "value" : "Los agentes de escritorio V4H y V4PA de VMware (6.x en versiones anteriores a la 6.5.1) contienen una vulnerabilidad de escalado de privilegios. La explotación exitosa de esta vulnerabilidad podría resultar en que un usuario de Windows poco privilegiado escale sus privilegios a SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_for_horizon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.5.1",
            "matchCriteriaId" : "DD233DEF-7B92-4021-A9E5-26716BC6539D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_for_published_applications:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.5.1",
            "matchCriteriaId" : "71875D33-82C9-46AB-8D21-C8AE0919DE02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gosecure.net/2018/01/10/vmware-horizon-v4h-v4pa-desktop-agent-privilege-escalation-vulnerability-cve-2017-4946/",
        "source" : "security@vmware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102441",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040136",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://gosecure.net/2018/01/10/vmware-horizon-v4h-v4pa-desktop-agent-privilege-escalation-vulnerability-cve-2017-4946/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4948",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-05T14:29:10.547",
      "lastModified" : "2024-11-21T03:26:44.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this issue in conjunction with other bugs may allow a View desktop to leak information from host or may allow for a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation (en versiones 14.x anteriores a la 14.1.0 y 12.x) y Horizon View Client (en versiones 4.x anteriores a la 4.7.0) contienen una vulnerabilidad de lectura fuera de límites en TPView.dll. En Workstation, este problema junto con otros errores podría permitir que un invitado filtre información del host o podría permitir que se produzca una denegación de servicio (DoS) en el sistema operativo de Windows que ejecuta Workstation. En el caso de Horizon View Client, esto junto con otros errores puede permitir que una opción \"Ver escritorio\" revele información del host o podría permitir que se produzca una denegación de servicio (DoS) en el sistema operativo de Windows que ejecuta Horizon View Client. Solo es posible que se explote esta vulnerabilidad si se ha habilitado la impresión virtual. Esta característica no está habilitada por defecto en Workstation, pero sí lo está en Horizon View."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38FB28D-8A42-4877-92AF-39EE04B14DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180E48AF-AD42-4A00-948A-9C1D70BE53F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C64A90-90A2-450A-8A79-AB69B5A939DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EF613B-3436-4951-8F4D-9F22144E06CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E293B67-98C3-4D8E-883C-2F2F774AE6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838C7C08-15ED-4379-8A5B-9419D13AE7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C064187-0870-4672-9D64-92D643FA9C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F08698-0194-4892-9A46-93C53C0C660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287275D4-E311-4A1B-BC5C-2FB3A64691E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED552760-4DB1-4E56-B6C1-23E053858055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A4B5F2-7123-40C5-BBB7-D3EA3EA3B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:12.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D95044-581B-4634-8A5A-D6167AE4E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB96DAF-5A43-4437-81BF-B47067336505"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:horizon_view:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "1750179A-D71E-408C-8B91-6E5E680E9AF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102441",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040108",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040109",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040136",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-05T16:29:00.417",
      "lastModified" : "2024-11-21T03:16:47.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file.  NOTE: this issue can be exploited without authentication by leveraging the user registration feature."
      }, {
        "lang" : "es",
        "value" : "Xplico en versiones anteriores a la 1.2.1 permite que usuarios autenticados remotos ejecuten comandos mediante metacaracteres shell en nombre de un archivo PCAP subido.  NOTA: este problema puede ser explotado sin autenticación aprovechando la característica de registro de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xplico:xplico:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "1CA135F1-10B0-4F32-87EF-9BEBE181EB47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.securityonion.net/2017/11/security-advisory-for-xplico-120.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145639/Xplico-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.rapid7.com/db/modules/exploit/linux/http/xplico_exec",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/advisory-xplico-unauthenticated-remote-code-execution-cve-2017-16666/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43430/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.xplico.org/archives/1538",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.securityonion.net/2017/11/security-advisory-for-xplico-120.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145639/Xplico-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.rapid7.com/db/modules/exploit/linux/http/xplico_exec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/advisory-xplico-unauthenticated-remote-code-execution-cve-2017-16666/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43430/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.xplico.org/archives/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15548",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-05T17:29:00.223",
      "lastModified" : "2024-11-21T03:14:45.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized root access to the affected systems."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x y EMC Integrated Data Protection Appliance 2.0. Un usuario remoto malicioso no autenticado puede omitir la autenticación de la aplicación y obtener acceso root no autorizado a los sistemas afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-21:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "323E56C6-6B78-451F-A80E-041D54099867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-145:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D107C2E-A98C-4242-9491-6E9D77C53AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E873853-D132-4395-8A88-1950741E4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CECC623-D5E1-491A-AE79-890BA83CEF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-32:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE64DDE-F009-442D-8287-C2985C7907CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E603320-F634-46D0-B3F3-27B43AD853C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381B1CF4-9A04-419C-97D1-7997E24D78EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-125:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E173EB-AA44-4C78-AE35-5A61120A3F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B1C79-59E3-4FCE-8268-1125E599CE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79B2E0-E227-4D30-9EC0-6E186C8E1F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB11FC4-D82F-4F15-A559-1B86D6FD262D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4-58:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE728F4-0944-4526-98A1-2610A94958AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4-242:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72F4EE3-DE40-4F99-8869-DDCA53E8FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.5-183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D008A0B-CB0F-4338-811C-02796C31F758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8896568-958B-45D3-893B-30E3D9E4ED5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "D4E32F32-86B3-4833-B437-DAA7875637C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "C8608852-5E06-45F1-86F5-EB5E77E6D699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.2:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "2D056AFC-8E7B-454D-A190-178ECA69D379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/17",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102352",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040070",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15549",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-05T17:29:00.253",
      "lastModified" : "2024-11-21T03:14:45.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x y EMC Integrated Data Protection Appliance 2.0. Un usuario remoto malicioso con bajos privilegios podría cargar archivos arbitrarios maliciosamente manipulados en cualquier ubicación del sistema de archivos del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-21:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "323E56C6-6B78-451F-A80E-041D54099867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-145:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D107C2E-A98C-4242-9491-6E9D77C53AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E873853-D132-4395-8A88-1950741E4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CECC623-D5E1-491A-AE79-890BA83CEF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-32:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE64DDE-F009-442D-8287-C2985C7907CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E603320-F634-46D0-B3F3-27B43AD853C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381B1CF4-9A04-419C-97D1-7997E24D78EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-125:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E173EB-AA44-4C78-AE35-5A61120A3F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B1C79-59E3-4FCE-8268-1125E599CE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79B2E0-E227-4D30-9EC0-6E186C8E1F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB11FC4-D82F-4F15-A559-1B86D6FD262D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4-58:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE728F4-0944-4526-98A1-2610A94958AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4-242:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72F4EE3-DE40-4F99-8869-DDCA53E8FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.5-183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D008A0B-CB0F-4338-811C-02796C31F758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8896568-958B-45D3-893B-30E3D9E4ED5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "D4E32F32-86B3-4833-B437-DAA7875637C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "C8608852-5E06-45F1-86F5-EB5E77E6D699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.2:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "2D056AFC-8E7B-454D-A190-178ECA69D379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/17",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102363",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040070",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15550",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-05T17:29:00.300",
      "lastModified" : "2024-11-21T03:14:45.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x y EMC Integrated Data Protection Appliance 2.0. Un usuario autenticado remoto malicioso con bajos privilegios podría acceder a archivos arbitrarios en el sistema de archivos del servidor en el contexto de la aplicación vulnerable en ejecución mediante un salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-21:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "323E56C6-6B78-451F-A80E-041D54099867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-145:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D107C2E-A98C-4242-9491-6E9D77C53AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E873853-D132-4395-8A88-1950741E4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.1-370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CECC623-D5E1-491A-AE79-890BA83CEF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-32:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE64DDE-F009-442D-8287-C2985C7907CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E603320-F634-46D0-B3F3-27B43AD853C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.2-401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381B1CF4-9A04-419C-97D1-7997E24D78EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-125:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E173EB-AA44-4C78-AE35-5A61120A3F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B1C79-59E3-4FCE-8268-1125E599CE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-226:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79B2E0-E227-4D30-9EC0-6E186C8E1F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.3-233:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB11FC4-D82F-4F15-A559-1B86D6FD262D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4-58:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE728F4-0944-4526-98A1-2610A94958AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.4-242:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72F4EE3-DE40-4F99-8869-DDCA53E8FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:avamar_server:7.5-183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D008A0B-CB0F-4338-811C-02796C31F758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8896568-958B-45D3-893B-30E3D9E4ED5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.0:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "D4E32F32-86B3-4833-B437-DAA7875637C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.1:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "C8608852-5E06-45F1-86F5-EB5E77E6D699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:networker:9.2:*:*:*:virtual:*:*:*",
            "matchCriteriaId" : "2D056AFC-8E7B-454D-A190-178ECA69D379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/17",
        "source" : "security_alert@emc.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102358",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040070",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-05T19:29:00.217",
      "lastModified" : "2024-11-21T03:19:11.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que QtPass, en versiones anteriores a la 1.2.1, al emplear el generador de contraseñas integrado, genera contraseñas predecibles y numerables. Esto solo aplica a la GUI de QtPass."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qtpass:qtpass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "26F3EB22-17CC-4F6A-A54E-65EC167B613B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IJHack/QtPass/issues/338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IJHack/QtPass/releases/tag/v1.2.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://qtpass.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/IJHack/QtPass/issues/338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IJHack/QtPass/releases/tag/v1.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://qtpass.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-05T19:29:00.277",
      "lastModified" : "2024-11-21T03:19:11.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c."
      }, {
        "lang" : "es",
        "value" : "ImageMagick 7.0.7-12 Q16 tiene una fuga de memoria en MontageImageCommand en MagickWand/montage.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102437",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/904",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-08T03:29:00.203",
      "lastModified" : "2024-11-21T03:15:26.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Installer in Whale allows DLL hijacking."
      }, {
        "lang" : "es",
        "value" : "El instalador en Whale permite que se produzca un ataque de secuestro de DLL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:navercorp:whale:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7BDBAD1-1D8D-458F-9573-8A3DF95779D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.whale.naver.com/en/halloffame",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cve.naver.com/detail/cve-2017-15913.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugbounty.whale.naver.com/en/halloffame",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cve.naver.com/detail/cve-2017-15913.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-08T05:29:00.257",
      "lastModified" : "2024-11-21T03:28:47.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en NewsBee CMS permite a atacantes remotos ejecutar comandos SQL arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsbee_project:newsbee:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE68F5-56A3-4489-8A45-5017F52BF653"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/41261/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41261/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-08T19:29:00.953",
      "lastModified" : "2024-11-21T03:15:24.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography."
      }, {
        "lang" : "es",
        "value" : "Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x y 10.x permite que los atacantes remotos omitan la autenticación y que provoquen una denegación de servicio (DoS) en consecuencia en las páginas con carga balanceada o obtengan privilegios mediante vectores relacionados con una criptografía débil."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7D51DC-4323-4688-909A-F7A91606AAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA4201A-5E74-4175-8CA7-14E1FF9C919F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1093AEA4-6171-4888-B459-4E556F795647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC0A55-CB11-4E94-8E47-0A01190B3306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0898F18C-75C2-49E4-A0D5-7F8A621BCDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B5D7A1-55C3-4019-B987-3DFB0890A016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90C068-F46A-404E-B8C0-61C66E3490E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC9C199-4B1D-475B-A230-382B79FF2E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5879E989-5FA5-4B7C-B408-D28BF9A6E475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A429147-D26F-4D00-82F8-0AB38787F058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3894214-0F21-4B1A-86B7-5C1C959CEBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5703FDB2-89F3-4A4D-8CE1-DAB5410364C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9765DA21-E412-4531-8414-5E9909DD7C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A3612F-4F13-496F-BCB7-443B28F83757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B539481B-721D-4711-8547-549D6BF4EFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E118E651-D5EA-4A3C-95D3-ABE7A7A410F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F361531-8E0F-42AB-8ECF-541A201438E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C5BD02-D8AA-4525-BACA-B4C6C0563A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF7E946-EBF1-45A9-99C7-AF38E5845CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252F8F5C-C395-40F6-808C-F278EB21E5A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://knowledgebase.progress.com/articles/Article/Sitefinity-Security-Advisory-for-cryptographic-vulnerability-CVE-2017-15883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mnemonic.no/news/2017/vulnerability-finding-sitefinity-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://knowledgebase.progress.com/articles/Article/Sitefinity-Security-Advisory-for-cryptographic-vulnerability-CVE-2017-15883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mnemonic.no/news/2017/vulnerability-finding-sitefinity-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-08T19:29:01.000",
      "lastModified" : "2024-11-21T03:33:07.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn parameter to webapp/users/prnow.jsp or show_month parameter to (2) webapp/users/blhistory.jsp or (3) webapp/users/prhistory.jsp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Gespage en versiones anteriores a la 7.4.9 permite que los atacantes remotos ejecuten comandos SQL arbitrarios mediante (1) el parámetro show_prn en webapp/users/prnow.jsp o el parámetro show_month en (2) webapp/users/blhistory.jsp o (3) webapp/users/prhistory.jsp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gespage:gespage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.9",
            "matchCriteriaId" : "A3E0B2DE-7447-49F7-BFF7-6DE8317A72ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2018-01-02-cve-2017-7997-gespage-sql-injection-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43447/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2018-01-02-cve-2017-7997-gespage-sql-injection-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43447/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-08T19:29:01.033",
      "lastModified" : "2024-11-21T03:33:07.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin panel or (2) username parameter to webapp/users/user_reg.jsp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) en Gespage en versiones anteriores a la 7.4.9 permiten que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante (1) el nombre de la impresora cuando se añade una impresora en el panel de administración o (2) el parámetro username en webapp/users/user_reg.jsp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gespage:gespage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.9",
            "matchCriteriaId" : "A3E0B2DE-7447-49F7-BFF7-6DE8317A72ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2018-01-02-cve-2017-7998-gespage-stored-cross-site-scripting-xss-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2018-01-02-cve-2017-7998-gespage-stored-cross-site-scripting-xss-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-09T03:29:00.190",
      "lastModified" : "2024-11-21T03:19:11.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with \"admin|\" to use the '|' metacharacter."
      }, {
        "lang" : "es",
        "value" : "cgi-bin/drknow.cgi en Innotube ITGuard-Manager 0.0.0.1 permite que atacantes remotos ejecuten comandos arbitrarios del sistema operativo mediante metacaracteres shell en el campo username, tal y como demuestra un nombre de usuario que comienza por \"admin|\" para emplear el metacarácter \"|\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:innotube:itguard_manager:0.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25907640-E0B5-49AC-8AB5-CA5387351480"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43343/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43343/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15129",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-09T19:29:00.217",
      "lastModified" : "2024-11-21T03:14:07.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en los nombres de espacio de red que afecta al kernel de Linux en versiones anteriores a la 4.14.11. La función get_net_ns_by_id() en net/core/net_namespace.c no verifica el valor net::count una vez que ha encontrado una red peer en el ids netns_ids, lo que podría conducir a una doble liberación (double free) y a una corrupción de memoria. Esta vulnerabilidad podría permitir que un usuario local sin privilegios provoque una corrupción de memoria en el sistema, desembocando en un cierre inesperado. Debido a la naturaleza del error, no puede descartarse totalmente el escalado de privilegios, aunque se cree que es improbable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.14.11",
            "matchCriteriaId" : "55CA5D5E-49D9-4AA4-B2AD-DA674E51B9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EF6556-06A6-4700-B61F-533167096BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "69A04496-EA26-42E0-A553-413BF2A78AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "14E8986E-B317-40EA-B0B5-5D2922D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC4657A-0239-47DF-B582-87D8DFA69439"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEACBFF-6D05-4B69-BF7A-F7E539D9BF6E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F97AEB-F4DB-4F1F-A69C-5EF8CBBFAFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83737173-E12E-4641-BC49-0BD84A6B29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566507B6-AC95-47F7-A3FB-C6F414E45F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C34DD8A-17C5-489C-9140-447784F27607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDCFF34-6F1D-45A1-BE37-6A0E17B04801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277E06A0-90F5-4F97-94EA-5A18E242B800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF307B8C-4548-47D9-9D2E-F61AE0BFAADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA3C94F-5FA1-4805-A3EC-6E27AE9AB10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E85B24-30F2-42AB-9F68-8668C0FCC5E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE1DC7-72C5-483C-8921-0B462C8284D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7E9628-0915-4C49-8929-F5E060A20CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2018/q1/7",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102485",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1946",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15129",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1531174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://marc.info/?l=linux-netdev&m=151370451121029&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=151370468900001&r=1&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2018/q1/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1531174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://marc.info/?l=linux-netdev&m=151370451121029&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?t=151370468900001&r=1&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3632-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-09T20:29:00.207",
      "lastModified" : "2024-11-21T03:04:41.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years."
      }, {
        "lang" : "es",
        "value" : "MatrixSSL 3.7.2 tiene una validación de rango de fecha UTCTime incorrecta en su proceso de validación del certificado X.509. Esto resulta en que algunos certificados amplían (retrasan) su año de expiración (comienzo) en 100 años."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrixssl:matrixssl:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE4A5B2-03D3-4F69-966B-D10643266C35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ieee-security.org/TC/SP2017/papers/231.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=FW--c_F_cY8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ieee-security.org/TC/SP2017/papers/231.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=FW--c_F_cY8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1493",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-09T20:29:00.240",
      "lastModified" : "2024-11-21T03:21:58.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691."
      }, {
        "lang" : "es",
        "value" : "IBM UrbanCode Deploy (UCD) 6.1 y 6.2 podría permitir que un usuario autenticado edite objetos a los que no debería tener acceso, debido a controles de acceso incorrectos. IBM X-Force ID: 128691."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF8BEEC-5F93-424B-94F6-622B9BA84CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59AC6D5-1F06-4EC4-BD36-6FA5221AE611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7ED1843-E659-4931-8E08-8867D4286A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BA86C9-0A31-4EBB-B73E-346D6C425988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E082B0-B404-4E5E-9FC7-2B0B6F363A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054A3ED4-290A-484D-9F51-93A71968CAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5B4753-3685-4088-A4B1-C4AE58C11F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32732445-6761-40F0-836B-E7EAC9B9239B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8034DC-C20D-4972-AFBA-D3EBF8664164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5409F075-5268-476E-BEFE-2B93C8BB2870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43800F6-328E-4481-B6AE-44A50F368314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3BCD23-4033-443D-B2D5-CAF69FCD22D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A72039-925C-48AE-8012-BA6AEE659D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A488B1-1221-46C4-B97D-B895368E3A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8D9BF8-E9DD-4967-86CE-DE2A6FF6DADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA01FF4-83A4-48FA-B82B-7C7C230352FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E7C93-6588-47B8-AED6-E5CF7F83E112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E04841-5463-4246-AFEB-8DEDCACF4102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD390D-531E-4BC7-B9D4-74208E153F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93406315-DD19-45E5-84EE-B5D8F0A903D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC97896-4190-4290-8176-00437F1E8864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA5D2B7-C228-4095-BD4F-E935175B4A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F991AF-CD34-4307-85B0-58107E4CE1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D704D2D-A935-4E01-8FCC-67150856BEB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10965BD8-F6EB-43D7-BFE9-CDB08A1E70CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456DB48D-39E4-4F66-BEC4-1B7B135214BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248B80C9-EF09-497E-8481-4BE687DF613D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E55B00-5117-4297-A17B-EEBD370D181B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADCBC87-4287-4646-9428-EDC2892EF2BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E3178D-CE44-4F78-8D56-4F712D268E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55891BF-C81C-4B02-A23A-9BB789B575A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC929A62-D0D0-4FBA-97EC-120DCAB8B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81D56D2-D22C-4CE7-AEE7-ADBA5743061C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03683053-D363-4F5D-AB6D-958D9F5B2195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31153960-56E6-4ADF-BE51-BC07D57D45B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:6.2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948D1BD4-C191-4039-962B-530C2B71DF77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000367",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102483",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128691",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1612",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-09T20:29:00.287",
      "lastModified" : "2024-11-21T03:22:08.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' user. IBM X-Force ID: 132953."
      }, {
        "lang" : "es",
        "value" : "El módulo de rastreo de servicios IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0 y 9.0 podría emplearse para ejecutar código no fiable bajo un usuario \"mqm\". IBM X-Force ID: 132953."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164DC456-433C-4C47-91F9-1B57C2DFBF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0343E94F-6DE2-4E27-AFC5-D4650A4519F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA4EE08-D531-4957-BF2A-C5A9ABB0F38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BF695-E27A-4D9F-9190-84A7BCD5E268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA1EF24-9710-4C4A-8059-917C02185CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC257545-44A3-4659-951D-F4DFF3B87CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD4E86C-0E58-4A91-A18C-534464BC197A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4B1F7A-8989-4B4E-A75E-037B38ED7536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FEC2B-14F4-48EF-A7D2-DA4451EBD402"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E60ABB-E703-4745-98F3-22609FF70F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC03B4D-98C2-4704-9BF9-47888489B9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E4EAA2-8842-41AB-B8E0-944CDF72C893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D71A8D2-C97E-4A0D-B4F7-19E0B24AC887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362B6A59-1FFD-4C11-8F86-0A5516A36385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5046C962-98D9-43C3-8D83-B144CE442A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A379F4E4-5A82-454A-B1D0-D4CAAD9E1457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECB8B77-BAB7-468E-8D22-57FE9F42F718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2BBC9-7772-48FF-BDE5-D61F9E16BB0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3E613F-20C4-448E-99C7-C03587B2AE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348B63-F62A-4F23-8BFC-EC6FDA057DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3E5E8C-E897-4720-8B79-3D670B3A3CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B533BC-8796-4ADA-B67D-0CA41CD8BA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04E17D8-2D2B-4EF6-B5F5-3B6C720A551A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACA359E-DA6D-4C5A-9605-124B0622C8B4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D7B6F3-69B4-497E-A579-F925A1CB0D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C711485-326F-47AC-A999-95F593B086B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84C0416-B334-45C1-9BA7-E66D9371BD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C38EE8-1F6D-4BCF-AA46-D71E6F3EDAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AC9713-B00C-4A51-AEFB-7927B675E977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFC891B-ECE0-44DD-A0AD-5CA4A263961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE71C30A-B8B5-42EA-9A90-44347FCC32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D862347-D638-41F6-94AA-E39B2F8E7010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B18B43-D978-4C2B-8B1F-96F637389091"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E10D4-4B01-4D52-9FFB-208C4745063E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5502347-56F2-400F-944B-A532A3A8DE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D800EA34-4826-4689-A3C0-03724290567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBDF404-693B-4500-80FA-90AE022BD5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFC3793-4880-4103-B7F6-06F96A17357B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3679D6F-1E3A-4546-A05B-5B4EA515B4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E6617F-85DF-49FE-B713-148624DC87A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A09DD4-FA46-474B-9801-404F42380570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7709DB51-2ED8-48D3-81EA-3127A39EA1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264056E7-2BF1-4AB2-A485-5AFFD4A886D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009918",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102479",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040175",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132953",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22009918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1666",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-09T20:29:00.317",
      "lastModified" : "2024-11-21T03:22:11.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 133540."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2.5, 2.6 y 2.7 de IBM Tivoli Key Lifecycle Manager son vulnerables a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 133540."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011970",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102434",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133560",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1668",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-09T20:29:00.363",
      "lastModified" : "2024-11-21T03:22:11.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 133562."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 133562."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012010",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102430",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133562",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1670",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-09T20:29:00.397",
      "lastModified" : "2024-11-21T03:22:11.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, y 2.7 es vulnerable a una inyección SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 133637."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012009",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102429",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133637",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1671",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-09T20:29:00.443",
      "lastModified" : "2024-11-21T03:22:11.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 133638."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Key Lifecycle Manager 2.5, 2.6 y 2.7 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias \"punto punto\" (/../) para visualizar archivos arbitrarios en el sistema. IBM X-Force ID: 133638."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0E836F-4C4E-4630-9999-91B166DEABA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57B0BB-2994-4A47-9C32-3DA982F23071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD5B68E-FB45-4985-96C7-6CFF3765E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF878AE8-D016-4546-84ED-5D65E21F833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E86F00-E597-4C98-9863-05A4BA84D0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE7F6BA-BB8E-4249-81EE-EC8C617B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA52325-CC9C-481A-8140-32C86608E2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F809CA96-9F05-4E58-91D0-9F05DC984D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96706B40-58F2-42C6-8BCF-C92F54438EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD90D4-0058-4DFB-8C72-DFBA3072C5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D107CCC-476F-4453-BF41-B83923E5D695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB2EF-C7E1-4A44-9096-C3694BD5EBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC75197-BBC8-4AA3-959D-4615410FC26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910F6230-F3C5-4993-B1E8-89FC07697A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD31336F-4D30-4419-BBEB-516BA6646C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1807C6DB-650B-4249-B1EE-0C3E672EE360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011967",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102487",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133638",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-09T21:29:00.217",
      "lastModified" : "2024-11-21T03:04:43.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php."
      }, {
        "lang" : "es",
        "value" : "rui Li finecms 5.0.10 es vulnerable a XSS reflejado en el archivo Weixin.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finecms_project:finecms:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF9F0DB-9D4D-45CC-BEA4-9F0C95ECCD0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lucifaer.com/index.php/archives/35/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lucifaer.com/index.php/archives/35/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12695",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-09T21:29:00.267",
      "lastModified" : "2024-11-21T03:10:02.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autenticación indebida en General Motors (GM) y Shanghai OnStar (SOS) SOS iOS Client 7.1. La explotación con éxito de esta vulnerabilidad podría permitir que un atacante subvierta los mecanismos de seguridad y restablezca la contraseña de una cuenta de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gm:shanghai_onstar:7.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "3E5C7CE3-29A9-4F2F-AA11-A4781179BD3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102481",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12697",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-09T21:29:00.297",
      "lastModified" : "2024-11-21T03:10:02.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de Man-in-the-Middle (MitM) en General Motors (GM) y Shanghai OnStar (SOS) SOS iOS Client 7.1. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante intercepte información sensible cuando el cliente se conecta al servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gm:shanghai_onstar:7.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "3E5C7CE3-29A9-4F2F-AA11-A4781179BD3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102481",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15124",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-09T21:29:00.343",
      "lastModified" : "2024-11-21T03:14:07.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la implementación del servidor VNC en Quick Emulator (QEMU) 2.11.0 y anteriores es vulnerable a un problema de asignación de memoria sin enlazar, ya que no limitó las actualizaciones de framebuffer enviadas a su cliente. Si el cliente no consume estas actualizaciones, el servidor de VNC asigna memoria que va creciendo para albergar estos datos. Un cliente VCN malicioso remoto podría emplear este fallo para provocar DoS en el host del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.0",
            "matchCriteriaId" : "D424025B-4108-494F-9F84-492EF5B4B5E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102295",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15131",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-09T21:29:00.373",
      "lastModified" : "2024-11-21T03:14:07.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que no se respeta la política system umask cuando se crean directorios de usuarios XDG, ya que Xsession obtiene xdg-user-dirs.sh antes de establecer la política umask. Esto solo afecta a xdg-user-dirs en versiones anteriores a la 0.15.5, tal y como se incluye en Red Hat Enterprise Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:xdg-user-dirs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.5",
            "matchCriteriaId" : "3702E1DD-0423-4313-A273-2324472BFB20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0842",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412762",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16740",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-09T21:29:00.420",
      "lastModified" : "2024-11-21T03:16:52.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer en Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B y C, en versiones 21.002 y anteriores. Se ha identificado una vulnerabilidad de desbordamiento de búfer basado en pila, lo que podría permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1766-l32bxba_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.002",
            "matchCriteriaId" : "7E9D1B7A-C310-4E73-884C-F0730294CF01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1766-l32bxba:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03C6CFA-F770-4BCA-BB74-BD0D43C250F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1766-l32awa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.002",
            "matchCriteriaId" : "8FC1BA3D-024D-490D-AFC0-6C5B624AD759"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1766-l32awa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2A03F-A665-4874-896C-B603110BADA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1766-l32bxb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.002",
            "matchCriteriaId" : "9B390FC5-BE0C-43B1-BCF3-07A3E98E910D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1766-l32bxb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BFF3BE-77D5-4D28-831A-13136D8E0B6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1766-l32bwaa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.002",
            "matchCriteriaId" : "25407193-4A83-40BD-988A-17A58864D57A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1766-l32bwaa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3250570F-0A69-4484-BD7F-012AC8A2DC7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1766-l32awaa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.002",
            "matchCriteriaId" : "F0C08079-98A4-409D-BBF4-6C47304B3955"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1766-l32awaa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E42B9C-4D13-48DE-A522-28B1FA1B943E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:1766-l32bwa_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.002",
            "matchCriteriaId" : "3D02BB40-75B6-4AD1-9FA4-1659028BBFE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:1766-l32bwa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF023FAE-BC4D-4DB7-830E-0A522C8E51CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102474",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-009-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1070883",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/102474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-009-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1070883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9663",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-09T21:29:00.453",
      "lastModified" : "2024-11-21T03:36:36.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow a remote attacker to access an encryption key that is stored in cleartext in memory."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de almacenamiento de información sensible en texto claro en General Motors (GM) y Shanghai OnStar (SOS) SOS iOS Client 7.1. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante remoto acceda a una clave de cifrado almacenada en texto claro en la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gm:shanghai_onstar:7.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "3E5C7CE3-29A9-4F2F-AA11-A4781179BD3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102481",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-09T22:29:00.210",
      "lastModified" : "2024-11-21T03:04:47.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Sulu-standard versión 1.6.6 es vulnerable a Cross-Site Scripting (XSS) persistente en la página page creation. Esto puede resultar en la interrupción del servicio y la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sulu:sulu-standard:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090DB222-7477-4B92-9447-D406D655D43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sulu/sulu-standard/issues/835",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sulu/sulu-standard/issues/835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T02:29:31.910",
      "lastModified" : "2024-11-21T03:04:43.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string."
      }, {
        "lang" : "es",
        "value" : "flatCore-CMS 1.4.6 es vulnerable a Cross-Site Scripting (XSS) reflejado en user_management.php debido al uso de $_SERVER['PHP_SELF'] para construir enlaces y XSS persistente en el panel de logs de administrador, especificando una cadena User-Agent mal formada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore-cms:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C6CFF9-BA31-4972-8D36-CDF6CD4FBDC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS/issues/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12622",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-10T03:29:00.187",
      "lastModified" : "2024-11-21T03:09:54.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges."
      }, {
        "lang" : "es",
        "value" : "Cuando un clúster de Apache Geode en versiones anteriores a la v1.3.0 está operando en modo seguro y un usuario autenticado se conecta a un cúster Geode mediante la herramienta gfsh con HTTP, el usuario puede conseguir información de estado y controlar a los miembros del clúster, incluso aunque no tenga privilegios CLUSTER:MANAGE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "1133221F-FDA6-4250-8D4E-EC2417DB6BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/560578479dabbdc93d0ee8746b7c857549202ef82f43aa22496aa589%40%3Cuser.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/560578479dabbdc93d0ee8746b7c857549202ef82f43aa22496aa589%40%3Cuser.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9795",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-10T03:29:00.237",
      "lastModified" : "2024-11-21T03:36:52.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Cuando un clúster de Apache Geode en versiones anteriores a la v1.3.0 está operando en modo seguro, un usuario con acceso de lectura a regiones específicas de un clúster Geode podría ejecutar consultas OQL que permiten acceso de lectura y escritura a objetos en regiones no autorizadas. Además, un usuario podría invocar métodos que permiten la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "1133221F-FDA6-4250-8D4E-EC2417DB6BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102488",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/0fc5ea3c1ea06fe7058a0ab56d593914b05f728a6c93c5a6755956c7%40%3Cuser.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/232d75150991820d2fe6ba6bd4265fb58b4fe4d9d8d62eb2fd97256c%40%3Cdev.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3a48163ca1fff757aefa4d9df24a251bb11ddd599a78cd85585abd00%40%3Cdev.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/0fc5ea3c1ea06fe7058a0ab56d593914b05f728a6c93c5a6755956c7%40%3Cuser.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/232d75150991820d2fe6ba6bd4265fb58b4fe4d9d8d62eb2fd97256c%40%3Cdev.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3a48163ca1fff757aefa4d9df24a251bb11ddd599a78cd85585abd00%40%3Cdev.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9796",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-10T03:29:00.283",
      "lastModified" : "2024-11-21T03:36:52.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions."
      }, {
        "lang" : "es",
        "value" : "Cuando un clúster de Apache Geode en versiones anteriores a la v1.3.0 está operando en modo seguro, un usuario con acceso de lectura a regiones específicas de un clúster Geode podría ejecutar consultas OQL que contienen un nombre de región como parámetro de enlace y que permiten acceso de lectura a objetos en regiones no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "1133221F-FDA6-4250-8D4E-EC2417DB6BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/e580d22195b6b61ff9cf866ac6dd6fe16e790ff0e14a3b1a22cd20b1%40%3Cuser.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e580d22195b6b61ff9cf866ac6dd6fe16e790ff0e14a3b1a22cd20b1%40%3Cuser.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T09:29:00.190",
      "lastModified" : "2024-11-21T03:19:11.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary commands (through the Mercurial adapter) via vectors involving a branch whose name begins with a --config= or --debugger= substring, a related issue to CVE-2017-17536."
      }, {
        "lang" : "es",
        "value" : "Redmine en versiones anteriores a la 3.2.9, 3.3.x anteriores a 3.3.6 y 3.4.x anteriores a 3.4.4 no bloquea los flags --config y --debugger en el programa Mercurial hg, lo que permite que los atacantes remotos ejecuten comandos arbitrarios (mediante el adaptador Mercurial) por medio de vectores que involucran una rama cuyo nombre empieza con una subcadena --config= o --debugger=. Esta vulnerabilidad está relacionada con CVE-2017-17536."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.9",
            "matchCriteriaId" : "57E15DAF-8ECD-442F-B197-79CEE2D81138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.6",
            "matchCriteriaId" : "209D5EFB-2B31-4671-95B2-F7652E479373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.4",
            "matchCriteriaId" : "C595C3F2-6738-4B76-BB16-F19697A846A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redmine/redmine/commit/58ed8655136ff2fe5ff7796859bf6a399c76c678",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/9d797400eaec5f9fa7ba9507c82d9c18cb91d02e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/ca87bf766cdc70179cb2dce03015d78ec9c13ebd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27516",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/58ed8655136ff2fe5ff7796859bf6a399c76c678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/9d797400eaec5f9fa7ba9507c82d9c18cb91d02e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redmine/redmine/commit/ca87bf766cdc70179cb2dce03015d78ec9c13ebd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/27516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15704",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-10T14:29:00.217",
      "lastModified" : "2023-11-07T02:40:21.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15717",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-10T14:29:00.263",
      "lastModified" : "2024-11-21T03:15:04.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 and Apache Sling XSS Protection API 2.0.0."
      }, {
        "lang" : "es",
        "value" : "Un defecto en la manera en la que se escapan y codifican las URL en org.apache.sling.xss.impl.XSSAPIImpl#getValidHref y org.apache.sling.xss.impl.XSSFilterImpl#isValidHref permite que se pasen URL especialmente manipuladas como válidas, aunque porten cargas útiles XSS. Las versiones afectadas son Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 y Apache Sling XSS Protection API 2.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_xss_protection_api:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "1.0.4",
            "versionEndIncluding" : "1.0.18",
            "matchCriteriaId" : "956A4CBC-C078-44B0-8280-28E1B7F65D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_xss_protection_api:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE953DD-F41F-489C-AA69-038EE9A64338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_xss_protection_api_compat:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CF40B5-0046-4F0B-B4CE-74FDEF2D947A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://s.apache.org/CVE-2017-15717",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://s.apache.org/CVE-2017-15717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12169",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-10T15:29:00.237",
      "lastModified" : "2024-11-21T03:08:58.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que FreeIPA, en versiones 4.2.0 y siguientes, podría revelar hashes de contraseña a los usuarios que tengan el permiso \"System: Read Stage Users\". Un atacante remoto autenticado podría emplear este error para revelar los hashes de contraseña que pertenecen a los usuarios Stage. Este problema de seguridad no resulta en la revelación de hashes de contraseña que pertenecen a usuarios estándar activos. NOTA: algunos desarrolladores creen que este informe es una sugerencia de cambio de diseño de la activación Stage User, no una declaración de vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "matchCriteriaId" : "8DE1D3DC-FBAA-4C81-91B2-1270D3ADA2C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1487697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1487697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7536",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-10T15:29:00.283",
      "lastModified" : "2024-11-21T03:32:06.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue()."
      }, {
        "lang" : "es",
        "value" : "En Hibernate Validator 5.2.x anteriores a 5.2.5 final, 5.3.x y 5.4.x, se ha detectado que cuando los permisos reflectivos del gestor de seguridad, el cual accede a los miembros privados de la clase, se conceden a Hibernate Validator, podría ocurrir un escalado de privilegios. Permitiendo que el código de llamada acceda a esos miembros privados sin ningún permiso, el atacante podría validar una instancia no válida y acceder al valor del miembro privado mediante ConstraintViolation#getInvalidValue()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-592"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-470"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:hibernate_validator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "AAEE4C54-B34B-43F7-9DB9-DA67F0B49191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:hibernate_validator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.6",
            "matchCriteriaId" : "E9F204C3-E83A-4E28-8AAD-2E9AB2DC305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:hibernate_validator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.2",
            "matchCriteriaId" : "500CF40F-5137-43C7-AE7F-405DD0DD7FD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB283C80-F7AF-4776-8432-655E50D7D65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite_capsule:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461407B5-C167-4DE1-A934-FD5ADFB4AD4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BF3B2C-B121-483A-AEF2-8082F6DA5310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7117F117-D439-45EB-BB95-397E5E52C9BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28F9AF-3D06-4532-B397-96D7E4792503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101048",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039744",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2808",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2809",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2810",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3141",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2740",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2741",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3817",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465573",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1465573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7559",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-10T15:29:00.317",
      "lastModified" : "2024-11-21T03:32:09.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in the query string and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own."
      }, {
        "lang" : "es",
        "value" : "En Undertow 2.x anteriores a 2.0.0.Alpha2, 1.4.x anteriores a 1.4.17.Final y 1.3.x anteriores a 1.3.31.Final, se ha descubierto que la solución para CVE-2017-2666 era incompleta y los caracteres no válidos todavía se permitían en la cadena de la consulta y en los parámetros de la ruta. Esto se podría explotar junto con un proxy que también permita los caracteres no válidos, pero con una interpretación diferente, para inyectar datos en la respuesta HTTP. Manipulando la respuesta HTTP, el atacante podría envenenar un web-cache, realizar un ataque Cross-Site Scripting (XSS) u obtener información sensible de peticiones que no sean las suyas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.31",
            "matchCriteriaId" : "6553EA3E-6D2E-4D2C-B89A-F4526D0B251E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.17",
            "matchCriteriaId" : "06F12B32-A552-4B7E-9798-DE867BB05EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "C560E34B-993B-47D9-BC10-910A518112B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7559",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.jboss.org/browse/UNDERTOW-1251",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.jboss.org/browse/UNDERTOW-1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T17:29:00.517",
      "lastModified" : "2023-11-07T02:37:57.153",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14601.  Reason: This candidate is a reservation duplicate of CVE-2017-14601.  Notes: All CVE users should reference CVE-2017-14601 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T17:29:00.623",
      "lastModified" : "2023-11-07T02:37:57.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14931.  Reason: This candidate is a reservation duplicate of CVE-2017-14931.  Notes: All CVE users should reference CVE-2017-14931 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1459",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-10T17:29:00.750",
      "lastModified" : "2024-11-21T03:21:54.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager Appliance 8.0.0 y 9.0.0 especifica permisos para un recurso crítico para la seguridad de forma que permite que ese recurso sea leído o modificado por actores no planeados. IBM X-Force ID: 128378."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD8955-4735-4FDC-906A-B404C4E36417"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5EBB4D-36F8-453C-9D2C-A63490144596"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6921A2CC-67D0-41B5-908B-F002C14AFD70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506C4B29-BC71-4C56-BAB1-06E63BEB1DD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B95177-2AA3-45D4-895D-56CA35B32813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012331",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040170",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128378",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1533",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-10T17:29:00.873",
      "lastModified" : "2024-11-21T03:22:01.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager Appliance 9.0.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B95177-2AA3-45D4-895D-56CA35B32813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012327",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102496",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040168",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130675",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1534",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-10T17:29:01.110",
      "lastModified" : "2024-11-21T03:22:02.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager Appliance en sus versiones 8.0.0 y 9.0.0 podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 130676."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB40FA5B-56C0-4F30-B1FF-4AE319342216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B5235B-7CB8-4BED-A621-A07E41DBC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E742D56D-85BB-4389-9852-8071437D4482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D66204-3C44-4CA6-996B-AD3BFD3370DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE0F597-8CD6-4E07-9F06-6F8471586D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585E5EC5-4614-47BD-8526-4E74B9F7FC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63033A8-07D0-49C0-9C52-004D0A531ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E4F115-166B-455C-A9F9-C41F2C1E7F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCC4761-86E0-44C8-A267-BB346CFFC1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "502A2DA1-6D96-4FF5-9879-A2872485CBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB020561-2D4E-4F20-99B0-E8E12E014284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A346626B-8FD3-46E5-A233-9B7481F5CB01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266A82C7-1172-417D-A7CA-0CA7C393347E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C0454A-1A09-4EED-8A94-F07F44B7A098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B93CED0-E8FA-4238-8963-46074D11A334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907BB0CF-D270-4493-8D61-9841E6C5FE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0801BD2-D95B-4703-9804-A555F9E7BA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525EF7EC-712E-4C84-A15C-B2A30BD11A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE90667-0C16-4E4B-98DC-A6AD7A073D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8844A0-17D5-4EE9-85C4-518DACE7C9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D646B2-7308-43A0-AE76-873946FB024E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1988E5-DFE6-4282-B9D3-6655297B481B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEF4063-73D7-416D-AD21-CDC1C0534677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DFC0D0-2326-40CA-B4CC-65194566DA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A180463-EDE0-47DB-A031-979E73AA2A33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9795ED-23D5-4792-A8E8-3014E48DC67F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEF9594-C2A9-4D2C-9D55-DBFDD5E5EC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C682FD-1176-4D21-AB41-6F3FDB6E5428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D58EA8-CB22-47AD-965E-35C46F2369AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42F3AC0-9DA3-4DEE-ADB7-0ED69FC77B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956D8D10-495A-4DF1-B014-87E7E2F57748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282521FB-EA6A-4BAA-8BBE-9A0D66AA2186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC9E6E2-005E-4EC3-87A0-AF1A7E7B3F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008936",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102509",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040169",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130676",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22008936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1623",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-10T17:29:01.250",
      "lastModified" : "2024-11-21T03:22:09.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133121."
      }, {
        "lang" : "es",
        "value" : "IBM Qradar 7.2 y 7.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133121."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C137959-2279-4459-8A10-43AFE09E2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D53329-E729-43C1-8C67-EFA4C3F7BFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4EDCA-DF37-4366-B944-F342FA55EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CA942D-70AD-4E0D-A28E-443FB7140A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8844C7-52E1-45A0-AC51-B6F6F14DE38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5382FD46-85CB-460F-8AA5-163EA26F34B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012344",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102476",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133121",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T17:29:01.390",
      "lastModified" : "2024-11-21T03:16:29.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) persistente almacenados persistentes en los archivos /wb/admin/admintools/tool.php (Droplet Description) e /install/index.php (Site Title) en WebsiteBaker 2.10.0 permiten que los atacantes inserten código JavaScript persistente que se refleja en los usuarios en múltiples áreas en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websitebaker:websitebaker:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429F1BCD-5F74-46FD-98BD-4F280CEF654D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/anonymous/13df19c04c7e86c0f5256b91376d593a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/anonymous/13df19c04c7e86c0f5256b91376d593a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:00.947",
      "lastModified" : "2024-11-21T03:14:58.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9123."
      }, {
        "lang" : "es",
        "value" : "En Flexense VX Search Enterprise v10.1.12, el protocolo de control tiene una vulnerabilidad de denegación de servicio (DoS). El vector de ataque es un paquete SERVER_GET_INFO manipulado enviado al puerto de control 9123."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:vx_search:10.1.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "849529F1-2F54-44E4-AAA4-6E4663642132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145764/VX-Search-Enterprise-10.1.12-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43451/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145764/VX-Search-Enterprise-10.1.12-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43451/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:00.993",
      "lastModified" : "2024-11-21T03:14:58.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9120."
      }, {
        "lang" : "es",
        "value" : "En Flexense Disk Pulse Enterprise v10.1.18, el protocolo de control tiene una vulnerabilidad de denegación de servicio (DoS). El vector de ataque es un paquete SERVER_GET_INFO manipulado enviado al puerto de control 9120."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:disk_pulse:10.1.18:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D3796084-158D-4C3A-82BA-81F05B72B39C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145763/Disk-Pulse-Enterprise-10.1.18-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43452/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43589/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145763/Disk-Pulse-Enterprise-10.1.18-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43452/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43589/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.027",
      "lastModified" : "2024-11-21T03:14:58.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9121."
      }, {
        "lang" : "es",
        "value" : "En Flexense Sync Breeze Enterprise v10.1.16, el protocolo de control tiene una vulnerabilidad de denegación de servicio (DoS). El vector de ataque es un paquete SERVER_GET_INFO manipulado enviado al puerto de control 9121."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:10.1.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "ADC6E48B-D67D-424F-98DC-ACB0F6571DE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145760/Sync-Breeze-Enterprise-10.1.16-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43453/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145760/Sync-Breeze-Enterprise-10.1.16-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43453/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.073",
      "lastModified" : "2024-11-21T03:14:58.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 8094."
      }, {
        "lang" : "es",
        "value" : "En Flexense DiskBoss Enterprise v8.5.12, el protocolo de control tiene una vulnerabilidad de denegación de servicio (DoS). El vector de ataque es un paquete SERVER_GET_INFO manipulado enviado al puerto de control 8094."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:diskboss:8.5.12:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4A217B93-A50E-4480-B50C-F5F74EBBEA52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145756/DiskBoss-Enterprise-8.5.12-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43454/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145756/DiskBoss-Enterprise-8.5.12-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.103",
      "lastModified" : "2024-11-21T03:15:29.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en Palo Alto Networks PAN-OS en versiones anteriores a 6.1.19, 7.0.x anteriores a 7.0.19, 7.1.x anteriores a 7.1.14 y 8.0.x anteriores a 8.0.7, cuando la puerta de enlace o portal GlobalProtect está configurado, permite que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.19",
            "matchCriteriaId" : "D9199DB2-573F-4086-A0C0-FEBBD1650B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.19",
            "matchCriteriaId" : "20F87408-643D-463F-A324-869E18B1A284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.14",
            "matchCriteriaId" : "D6D96D17-3C39-46B2-A5B8-8715A4C2B213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.7",
            "matchCriteriaId" : "1DB0F89A-683E-4847-86A0-395445EF4EBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102446",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040147",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-15941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.133",
      "lastModified" : "2024-11-21T03:17:09.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades Cross-Site Scripting (XSS) en la función Captive Portal en Palo Alto Networks PAN-OS en versiones anteriores a la 8.0.7 permiten que los atacantes remotos inyecten scripts web o HTML arbitrarios aprovechándose de una configuración no especificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.7",
            "matchCriteriaId" : "40BFBBAD-65CC-4A5B-ABF8-13D435FB816B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040148",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-16878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1040148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-16878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.167",
      "lastModified" : "2025-08-27T21:15:33.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath."
      }, {
        "lang" : "es",
        "value" : "FasterXML jackson-databind hasta la versión 2.8.10 y 2.9.x hasta la 2.9.3 permite que se ejecute código de manera remota y no autenticada debido a una solución incompleta de la vulnerabilidad de deserialización CVE-2017-7525. Esto es explotable enviando una entrada JSON manipulada maliciosamente al método readValue de ObjectMapper, omitiendo una lista negra que no es efectiva si las librerías Spring están disponibles en el classpath."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.7.3",
            "matchCriteriaId" : "1DF0B092-75D2-4A01-9CDC-B3AB2F4CF2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.9.2",
            "matchCriteriaId" : "5BBA4A48-37C7-4165-B422-652EFD99B05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.11",
            "matchCriteriaId" : "2D1029A9-A17E-43FE-BE78-DF2DEEBFBAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.9.0",
            "versionEndExcluding" : "2.9.4",
            "matchCriteriaId" : "603345A2-FA66-4B4C-9143-AE710EF6626F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7117F117-D439-45EB-BB95-397E5E52C9BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064E7BDD-4EF0-4A0D-A38D-8C75BAFEDCEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87326E-0B56-4356-A889-73D026DB1D4B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.60.3",
            "matchCriteriaId" : "BD1E9594-C46F-40D1-8BC2-6B16635B55C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F148EC-6D6D-4C4F-B57C-CFBCD3D32B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541652/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0116",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0342",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1447",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1448",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1451",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2930",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1782",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1797",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2858",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3149",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3892",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1855",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/irsl/jackson-rce-via-spel/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180201-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4114",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/irsl/jackson-rce-via-spel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180201-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.227",
      "lastModified" : "2024-11-21T03:18:25.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to read arbitrary files through a sequence of the form '.x./' or '....\\x/' where x is a pattern composed of one or more (zero or more for the second pattern) of either \\ or ..\\ -- for example a '.\\./', '....\\/' or '...\\./' sequence. For files with no extension, a single dot needs to be appended to ensure the HTTP server does not alter the request, e.g., a \"GET /.\\./.\\./.\\./.\\./.\\./.\\./.\\./windows/system32/drivers/etc/hosts.\" request."
      }, {
        "lang" : "es",
        "value" : "Salto de directorio en el servidor HTTP en dispositivos Yawcam desde la versión 0.2.6 hasta la 0.6.0 permite que los atacantes lean archivos arbitrarios a través de una secuencia de la forma \".x./\" o \"....\\x/\" donde x es un patrón compuesto de uno o más (cero o más para el segundo patrón) de \\ o ..\\ -- por ejemplo una secuencia \".\\./\", \"....\\/\" or \"...\\./\". Para archivos con ninguna extensión, se necesita poner un punto para asegurar que el servidor HTTP no altera la petición; es decir, una petición \"GET /.\\./.\\./.\\./.\\./.\\./.\\./.\\./windows/system32/drivers/etc/hosts.\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yawcam:yawcam:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.6",
            "versionEndIncluding" : "0.6.0",
            "matchCriteriaId" : "0D0A47F9-B512-4A84-95FA-B4297AE35C40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145770/Yawcam-0.6.0-Directory-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.yawcam.com/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145770/Yawcam-0.6.0-Directory-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.yawcam.com/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.260",
      "lastModified" : "2024-11-21T03:18:47.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack."
      }, {
        "lang" : "es",
        "value" : "Palo Alto Networks PAN-OS 6.1, 7.1 y 8.0.x anteriores a 8.0.7, cuando una interfaz implementa un descifrado SSL con RSA o alberga una puerta de enlace o portal GlobalProtect, podría permitir que los atacantes remotos descifren los datos del texto cifrado TLS aprovechándose de un oráculo de relleno RSA Bleichenbacher, también conocido como ataque ROBOT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E2F87A-AAF7-4DAC-836A-6EE632CCD121"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBFA14A-BFD0-4B87-9F98-86703BF81644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D166F248-CB7B-4C71-9A54-355CED04F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA169C5-66C2-4BA6-9515-2C1EF2D2B96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211E8BB6-F500-4BA7-9FB9-A744A04A90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512381C1-8457-4B63-BD7F-194A28446032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB7B7C3-456D-455E-8F8C-F5AA9F91F8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD8214D-3A05-43AA-9C0B-B5A5A98AD3BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A47526-2888-49CC-895F-F7361A35C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5715D2-8821-4704-B977-D3550E94DFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07023EC-3119-4D08-AB90-3CBF534B1B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA15F25E-B478-4C42-A07F-0A6F1EFE0C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADD1A4C-1270-48FA-8C3E-941DDD9730AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCE4A28-D7CD-4B1E-80E8-8D97F25D3437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BEFF94-9041-404A-B597-492C3F32E5C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102458",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040149",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-17841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2017-17841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.307",
      "lastModified" : "2024-11-21T03:19:11.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI."
      }, {
        "lang" : "es",
        "value" : "Office Tracker 11.2.5 tiene Cross-Site Scripting (XSS) en el parámetro logincount a la URI /otweb/OTPClientLogin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:officetracker:officetracker:11.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "416634F3-A404-4AC7-B9DA-0E4FD83B8B39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145775/Office-Tracker-11.2.5-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145775/Office-Tracker-11.2.5-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T18:29:01.337",
      "lastModified" : "2024-11-21T03:19:11.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1."
      }, {
        "lang" : "es",
        "value" : "AvantFAX 3.3.3 tiene Cross-Site Scripting (XSS) mediante un nombre de parámetro arbitrario en la URI por defecto, tal y como queda demostrado con un parámetro cuyo nombre contiene un elemento SCRIPT y cuyo valor es 1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avantfax:avantfax:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A339E687-F2B4-44AB-8C41-3D94519DC80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145776/AvantFAX-3.3.3-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145776/AvantFAX-3.3.3-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3765",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-01-10T18:29:01.383",
      "lastModified" : "2024-11-21T03:26:05.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as \"HP Backdoor\" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted."
      }, {
        "lang" : "es",
        "value" : "En Enterprise Networking Operating System (ENOS) en productos Lenovo, IBM RackSwitch y BladeCenter, se descubrió una omisión de autenticación conocida como \"HP Backdoor\" durante una auditaría de seguridad de Lenovo en las interfaces de la consola de serie, Telnet, SSH y Web. Se puede acceder al mecanismo de omisión cuando se realiza una autenticación local bajo ciertas circunstancias. Si se explota, se concede el acceso a nivel de administrador al switch."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:enterprise_network_operating_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.4.6.0",
            "matchCriteriaId" : "0B6FA22A-0EB1-4062-9E3E-5BCE507AB21A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_fabric_cn4093_10gb_converged_scalable_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD14D4A6-68F5-4B92-9D8D-4DC8496A39ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_fabric_en4093r_10gb_scalable_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5195330-F644-4E3E-83B2-8890DB80734C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_fabric_si4093_10gb_system_interconnect_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8554C433-4DDA-4A39-B01E-441A4692FA92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_si4091_system_interconnect_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140910FE-22A3-47C2-9FC7-E3093C0761A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g7028:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D163A9-605F-435C-870E-E28B386686F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g7052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C0D57-16DE-470F-B707-F7A704BFA36C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137C0A4F-A13B-4BFA-A323-3B8665C9EFA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8124e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD40C661-A1B6-4CA5-86AD-6901AFB65C8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8264:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E04854-B986-400B-BB67-E2821C96E220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8264cs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD9C184-F542-4111-9617-C39BA1D75861"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8AF1A2-AC14-46E3-BCF1-41C48F0D45BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8296:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C14274-E752-4FCF-96DE-8EE02D07BB48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:rackswitch_g8332:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D47782-1C9C-4C89-852C-637E09CB9E20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:enterprise_network_operating_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.4.6.0",
            "matchCriteriaId" : "0B6FA22A-0EB1-4062-9E3E-5BCE507AB21A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:1g_l2-7_slb_switch_for_bladecenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554F09B6-E3E9-4614-8B09-83B3D9CB2DAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_1\\:10g_uplink_ethernet_switch_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C516EA8F-AB20-41B0-8C73-320DC0E0D967"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_layer_2\\/3_copper_ethernet_switch_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55112B25-5F9A-46D3-85E2-9BB3F3A38A04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_virtual_fabric_10gb_switch_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A248A49B-838D-481E-903D-B184E0550522"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_en2092_1gb_ethernet_scalable_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FFDBDC-BC5B-4945-998B-EF7A84D05442"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_fabric_cn4093_10gb_converged_scalable_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62317AD-325B-43EE-BBEA-7577FFA0377B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_fabric_en4093\\/en4093r_10gb_scalable_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6132020-30E0-4D5F-913B-71EB74AFDC94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_fabric_si4093_10gb_system_interconnect_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E66FEC-BDD9-4B51-8DCB-76377C92EDBD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA45C1-84D8-44E4-8D53-D9E0A82E5890"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8124:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96901ABF-A65F-4A07-892E-445C6AE170A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8124e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAD3932-2C0A-4F08-91E0-8C6744570A80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8264:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4D033F-5B82-4C4A-BD12-D6AF3D9986AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8264cs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11929E3F-DE7A-44AD-9111-A573C0EB9AD5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8264t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BC18A3-A42E-4231-8F1C-175A5F17DDD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8316:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26833BE-762B-4124-A3E1-CCE50E80D35C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:rackswitch_g8332:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35153A7-35EF-4E95-B93B-FF38E7160336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040296",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16095",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-16095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11069",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T19:29:00.213",
      "lastModified" : "2024-11-21T03:07:02.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la manipulación de datos de SafeSwitch Image puede provocar un desbordamiento de memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102413",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12189",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-10T19:29:00.247",
      "lastModified" : "2024-11-21T03:09:01.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el script init jboss, tal y como se usa en Red Hat JBoss Enterprise Application Platform 7.0.7.GA, gestionaba archivos de manera no segura, lo que podría resultar en un escalado de privilegios local. Este problema es el resultado de una solución incompleta para CVE-2016-8656."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-282"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BF3B2C-B121-483A-AEF2-8082F6DA5310"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102407",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12189",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15849",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T19:29:00.277",
      "lastModified" : "2024-11-21T03:15:20.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in between Validate and Commit by the application resulting in a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, un LayerStack puede ser destruido entre Validate y Commit por la aplicación, resultando en una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102413",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-10T20:29:00.197",
      "lastModified" : "2024-11-21T03:19:01.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long \"Title name\" field in \"mail box\" data that is mishandled in an \"Open from mail box\" action."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en Handy Password 4.9.3 permite que los atacantes remotos ejecuten código arbitrario mediante un campo \"Title name\" largo en los datos \"mail box\" que se gestionan de manera incorrecta en una acción \"Open from mail box\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novosoft:handy_password:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DFB077-02D8-4D50-9289-93EE4859353F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/22",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sidechannel.tempestsi.com/password-manager-flaw-allows-for-arbitrary-command-execution-b6bb273206b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sidechannel.tempestsi.com/password-manager-flaw-allows-for-arbitrary-command-execution-b6bb273206b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11003",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.227",
      "lastModified" : "2024-11-21T03:06:55.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se actualiza una imagen de firmware, los datos se leen de flash a RAM sin comprobar si los datos caben en el espacio RAM asignado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11066",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.273",
      "lastModified" : "2024-11-21T03:07:02.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing ubi image an uninitialized memory could be accessed."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se \"flashea\" una imagen UBI, se podría acceder a la memoria no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11079",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.337",
      "lastModified" : "2024-11-21T03:07:03.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due to the lack of validation of sparse image block header size."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se procesan imágenes sparse, la memoria dinámica (heap) no inicializada se puede \"flashear\" debido a la falta de validación del tamaño de la cabecera del bloque de la imagen sparse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11080",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.383",
      "lastModified" : "2024-11-21T03:07:03.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a user supplied sparse image, a buffer overflow vulnerability could occur if the sparse header block size is equal to 4294967296."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se procesa una imagen sparse proporcionada por el usuario, puede ocurrir un desbordamiento de búfer si el tamaño del bloque de la cabecera sparse es igual a 4294967296."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11081",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.430",
      "lastModified" : "2024-11-21T03:07:03.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a potential buffer overflow vulnerability in hdd_parse_setrmcenable_command and hdd_parse_setrmcactionperiod_command APIs as buffers defined in this API can hold maximum 32 bytes but data more than 32 bytes can get copied."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, existe una vulnerabilidad potencial de desbordamiento de búfer en las API hdd_parse_setrmcenable_command y hdd_parse_setrmcactionperiod_command, ya que los búfers definidos en las API pueden retener hasta 32 bytes, pero los datos de más de 32 bytes se pueden copiar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14869",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.463",
      "lastModified" : "2024-11-21T03:13:40.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se realiza la actualización de la partición FOTA, los datos no inicializados se pueden desplazar a almacenamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14870",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.493",
      "lastModified" : "2024-11-21T03:13:40.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating the recovery message for eMMC devices, 1088 bytes of stack memory can potentially be leaked."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se actualiza el mensaje de recuperación para los dispositivos eMMC, se podrían filtrar 1088 bytes de la memoria de la pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14873",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.540",
      "lastModified" : "2024-11-21T03:13:40.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the pp_pgc_get_config() graphics driver function, a kernel memory overwrite can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la función del controlador de gráficos pp_pgc_get_config(), puede ocurrir una sobrescritura de memoria de kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14879",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.570",
      "lastModified" : "2024-11-21T03:13:41.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, by calling an IPA ioctl and searching for routing/filer/hdr rule handle from ipa_idr pointer using ipa_idr_find() function, the wrong structure pointer can be returned resulting in a slab out of bound access in the IPA driver."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, all llamar a una ioctl IPA y buscando un manipulador de reglas routing/filter/hdr desde el puntero ipa_idr mediante la función ipa_idr_find(), el puntero de estructura incorrecto se puede devolver resultando en un acceso a un slab fuera de límites en el driver IPA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15845",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.617",
      "lastModified" : "2024-11-21T03:15:19.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una entrada no válida de tamaño de firmware (valor negativo) del espacio de usuario puede provocar una fuga de memoria o un desbordamiento de búfer durante la operación WLAN cal data store."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15847",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.667",
      "lastModified" : "2024-11-21T03:15:19.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el controlador de kernel SPCom, existe una condición de carrera cuando se crea un canal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15848",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.743",
      "lastModified" : "2024-11-21T03:15:19.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el controlador de kernel fastrpc, podría existir una vulnerabilidad de desbordamiento de búfer en el espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15850",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.773",
      "lastModified" : "2024-11-21T03:15:20.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el espacio de usuario puede leer valores de los registros codec de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9689",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.807",
      "lastModified" : "2024-11-21T03:36:39.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se puede utilizar un mensaje HDMI CEC especialmente manipulado para provocar una corrupción de memoria de pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9705",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.837",
      "lastModified" : "2024-11-21T03:36:40.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read() operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in list_del() and list_add() overlapping and corrupting the next and previous pointers."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, las notificaciones rx concurrentes y operaciones read() en el controlador G-Link PKT pueden resultar en una condición de doble liberación (double free) por una ausencia de bloqueo resultante en list_del() y list_add(), superponiendo y corrompiendo los punteros posteriores y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9712",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-10T22:29:00.883",
      "lastModified" : "2024-11-21T03:36:41.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlan_hdd_cfg80211_set_ie, a buffer over-read occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, si el espacio de usuario proporciona una longitud IE demasiado larga en wlan_hdd_cfg80211_set_ie, ocurre un sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4949",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-11T14:29:00.213",
      "lastModified" : "2024-11-21T03:26:44.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation y Fusion contienen una vulnerabilidad de uso de memoria previamente liberada en el servicio VMware NAT cuando el modo IPv6 está habilitado. Este problema puede permitir que un invitado ejecute código en el host. Nota: El modo IPv6 para VMNAT no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.5.10",
            "matchCriteriaId" : "2EE84B0E-1550-4DE8-9454-AF2F51CDE208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "F7419FA0-119C-4C1C-A071-90A9F8ECDB32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5.9",
            "matchCriteriaId" : "AD8033E5-38A7-4262-8FB0-937534F4C41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.1.1",
            "matchCriteriaId" : "D13A3189-D26A-4F29-9C49-6083F5951B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102489",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040161",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0005.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4950",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-11T14:29:00.260",
      "lastModified" : "2024-11-21T03:26:44.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead to an out-of-bound read which can then be used to execute code on the host in conjunction with other issues. Note: IPv6 mode for VMNAT is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation y Fusion contienen una vulnerabilidad de desbordamiento de enteros en el servicio VMware NAT cuando el modo IPv6 está habilitado. Este problema podría conducir a una lectura fuera de límites, que podrá utilizarse para ejecutar código en el host en combinación con otros problemas. Nota: El modo IPv6 para VMNAT no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.5.10",
            "matchCriteriaId" : "2EE84B0E-1550-4DE8-9454-AF2F51CDE208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "F7419FA0-119C-4C1C-A071-90A9F8ECDB32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5.9",
            "matchCriteriaId" : "AD8033E5-38A7-4262-8FB0-937534F4C41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.1.1",
            "matchCriteriaId" : "D13A3189-D26A-4F29-9C49-6083F5951B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102490",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040161",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0005.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.407",
      "lastModified" : "2024-11-21T03:14:51.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-interface en el archivo cmxddns.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.470",
      "lastModified" : "2024-11-21T03:14:51.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-outif en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.517",
      "lastModified" : "2024-11-21T03:14:51.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable lcpechointerval en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.547",
      "lastModified" : "2024-11-21T03:14:51.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the phddns.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-interface en el archivo phddns.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.610",
      "lastModified" : "2024-11-21T03:14:52.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interface_wan.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable iface en el archivo interface_wan.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.643",
      "lastModified" : "2024-11-21T03:14:52.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-enable en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.690",
      "lastModified" : "2024-11-21T03:14:52.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable pptphellointerval en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.737",
      "lastModified" : "2024-11-21T03:14:52.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac_import.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-zone en el archivo ipmac_import.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.767",
      "lastModified" : "2024-11-21T03:14:52.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable olmode en el archivo interface_wan.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.813",
      "lastModified" : "2024-11-21T03:14:53.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-mppeencryption en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.860",
      "lastModified" : "2024-11-21T03:14:53.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_server.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-enable en el archivo pptp_server.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.893",
      "lastModified" : "2024-11-21T03:14:53.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptp_server.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-authtype en el archivo pptp_server.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.940",
      "lastModified" : "2024-11-21T03:14:53.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-olmode en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:00.970",
      "lastModified" : "2024-11-21T03:14:53.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp_server.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-bindif en el archivo pptp_server.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.017",
      "lastModified" : "2024-11-21T03:14:53.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-pns en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.047",
      "lastModified" : "2024-11-21T03:14:54.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_server.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable lcpechointerval en el archivo pptp_server.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.097",
      "lastModified" : "2024-11-21T03:14:54.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-tunnelname en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.157",
      "lastModified" : "2024-11-21T03:14:54.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-remotesubnet en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.190",
      "lastModified" : "2024-11-21T03:14:54.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-workmode en el archivo pptp_client.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.237",
      "lastModified" : "2024-11-21T03:14:54.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_server.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-mppeencryption en el archivo pptp_server.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.267",
      "lastModified" : "2024-11-21T03:14:54.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the session_limits.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-ipgroup en el archivo session_limits.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.313",
      "lastModified" : "2024-11-21T03:14:55.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable name en el archivo wportal.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.360",
      "lastModified" : "2024-11-21T03:14:55.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the max_conn variable in the session_limits.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable max_conn en el archivo session_limits.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.393",
      "lastModified" : "2024-11-21T03:14:55.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable new-time en el archivo webfilter.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.440",
      "lastModified" : "2024-11-21T03:14:55.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_server.lua file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link WVR, WAR y ER permiten que administradores autenticados remotos ejecuten comandos arbitrarios mediante inyección de comandos en la variable pptphellointerval en el archivo pptp_server.lua."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1EE64D-3AAB-45B5-AD01-7126FBF1B803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278C3643-B4AE-451A-965C-65BFAE8CECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EEA4ED-3527-46A5-8E55-8EC13ED2AE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF5119-F739-4B43-B261-CA52A0C2B5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86222303-5481-4546-AEED-C8ED5B73F8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1162E8-F5F2-4E7E-BF88-55D038994157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC6106-736E-48C7-ACAD-FE1ED383360C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432E9087-81C6-404C-8295-186DD3969C04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A589CE-C099-4C7D-A39C-BE0E332EA95C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9835925-CD44-413E-9983-2F30BE450CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD80754F-99F0-40E4-A2D3-C0F8517CDE56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F25CE-4D51-4F39-9496-3C47AC6ED5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B535BDE-E116-47CF-82F8-FE6CD078435B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D4BBA6-28C6-43D4-8620-B73ED839DA67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305BB772-44D2-4313-AE12-4006D6A62787"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE3100-8052-40CD-A1F3-2BE4B57CF06A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFDF620-5F58-4723-BE73-5FA2692F8AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB678C70-BEB9-4DE8-8CE7-8F9069599FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8E5D5-C09A-4A96-A094-82E055002376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2645D464-741A-430B-AB55-1D2CB210AE4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DFB48-8E2D-49B5-8AC9-4E44E02FB736"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497980B8-E82E-4454-B20A-3C87620EC1EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478g\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D91026-BE9A-46E6-B88C-1A51038A8372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478g\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1C4019-C3F1-47EF-916C-C200D236A2A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A470D0C1-1AEB-4DF7-A998-25293281526C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0590E940-8741-487D-ABA5-2135AE247AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r478\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C617DB5-DC64-4207-AFD1-4D303C8626F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r478\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA140175-7625-4AC8-B9F6-6B827C2B1007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6706D9-62C6-4BFE-81BA-9BB413167918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70787CE9-F74D-4824-BD32-9A062C40382C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4128E08C-186C-47AF-BE2A-0F46CB9123E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15680718-C107-489F-873B-BF71D26C4EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C7EA70-B7FE-4A71-B015-450513F33C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE9828-0F0A-4461-9873-6868DF577AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504C2C9E-FC30-4130-9641-AADD9CAD1B92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9ED6DC-305A-4330-BB07-E6AE5E819ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B9337-F576-4704-B870-58E0B99700D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B16A78-CCAA-4B5A-B789-0F91758AADCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B89777-33AD-479A-9B5E-A10960FF6333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93B8121-8665-46E1-927A-47614525C3BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD219F-41A2-4396-B31E-C77885EEFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4D6462-8FEB-468B-8DDE-36C93AB3F42E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A24D45-C8EE-41A7-A1C4-AC68BF25FFF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4965FF-4060-448B-A9AC-15E0A512D6CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636CD6F5-E9A0-41BB-8B8D-2EA3BEF251AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE63F6F3-2D20-4819-A933-02BF30A5AAAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E0FD9C-4A8E-4B58-ACEE-46FE8C4C35AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69C7A7D-4B01-47D9-9E9A-FECBE461B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F7401A-DF90-411C-B69A-412DBD22F679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73FC044-921B-4B71-A957-F7321D42433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E083809-6C9E-4616-B232-68B7E1EAA742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF26756D-F6E2-46E0-9EB7-8F9855571E79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAA658D-26D5-4F2C-9E81-51CCFEB68A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5CBD58-E84A-4A11-BCFC-1ECF338464B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D41070-B44C-414C-8E1C-3D814CC9F36B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780A3BE2-05DF-48A4-95C0-3F364C1677F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23169885-2D15-43F0-B2A9-373808A3B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE167A7B-904D-4D32-9EFA-B9C43D4CE041"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25221744-B24D-4715-8917-9B0BB25570AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CE3ACE-8426-4CC5-AB83-32E4FB50D5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9ACD18-0D23-4807-98F1-AF441F6DD8EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5804FA-0FA2-4A99-9C5F-CBD746581E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFD4F10-46B2-48C5-A3D0-82A3B26C097B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39465064-E577-48A6-A07D-73CD59DB05FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDA6DD1-48AB-410C-AFFA-CB275EEF8D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B368D55-BE86-4D62-9AA3-63BEDECB84B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A254389-F0A7-47EE-B4B8-E7A673794A50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A552C2B-2588-4F82-8DF6-7B3E4CB88687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428DF7F6-D8AD-411C-8670-741E9A3B33DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060E869-8B2E-40A0-8161-BB40FE49D647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1DED3A-BCDC-4550-A6C5-6CE5652BD7D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EAF688-0CE3-4044-8963-6863B13613D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DFBD9E-DD1C-41D2-8D06-A4DE287697ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D038724E-45EE-4CF3-91F8-B65D8BA84469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA42694D-F4DA-432A-9AFE-9E2ADDE31BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9C69EF-EFAC-45AB-A79C-1E0C5811B226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-11T16:29:01.487",
      "lastModified" : "2024-11-21T03:19:10.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website's token, which is not bound to an origin)."
      }, {
        "lang" : "es",
        "value" : "Parity Browser 1.6.10 y anteriores permite que atacantes remotos omitan la política del mismo origen y obtengan información sensible mediante peticiones a otros sitios por medio del motor web proxy de Parity (reutilizando el token de la página web actual, que no está enlazado a un origen)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parity:browser:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03806D4C-D3B4-499F-895F-7C8E2356657D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43499/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43499/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1478",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-11T17:29:00.197",
      "lastModified" : "2024-11-21T03:21:56.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 128613."
      }, {
        "lang" : "es",
        "value" : "La versión 9.0.0 de IBM Security Access Manager Appliance permite que las páginas web se almacenen localmente, lo que permite que sean leídas por otro usuario en el sistema. IBM X-Force ID: 128613."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5B6BD9-C0DF-4359-A6C1-F66E24912800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F18D4AF-43DE-42A0-898E-50FBA7ADDDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847598BF-977A-4592-A6A1-2C7F04F29FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95683B6-E2A5-43AF-A02E-B746DBE871D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E29AFB-FE70-4619-A09A-CE205374BFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E529E4C8-6B64-4B44-9194-76AE1471717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8A2F70-0467-47CC-856F-E42094F0FEE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465CFA08-AE0B-45CA-9A71-563BBEA02CA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012323",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102502",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040172",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128613",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1681",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-11T17:29:00.243",
      "lastModified" : "2024-11-21T03:22:12.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized access to read a file. IBM X-Force ID: 134003."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) podría permitir que un atacante local obtenga información sensible, provocado por la gestión incorrecta de peticiones de aplicación, lo que podría permitir acceso sin autorización para leer un archivo. IBM X-Force ID: 134003."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:liberty:*:*:*:*:*:bluemix:*:*",
            "versionEndIncluding" : "3.15",
            "matchCriteriaId" : "32A3F819-4B5D-4714-BDD9-D9D07FEF6AB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011863",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040357",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134003",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1739",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-11T17:29:00.290",
      "lastModified" : "2024-11-21T03:22:17.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134921."
      }, {
        "lang" : "es",
        "value" : "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0 y 7.0.1 es vulnerable a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134921."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17929DC8-0E48-4BF4-AAFE-6463C8540FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD3FF4C-C12A-4CBC-8983-85929C5D121E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE6D88C-92CF-415E-978C-0107C4C4C52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB928C52-91BB-43A6-B25F-F359F05F1388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE6951-4C91-4443-843C-805D416F4074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23EA1C1F-003F-4411-AC1D-F75811D6FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89D44FA-FE58-4A4E-8DB1-BA9667A16612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FCFA0-2443-4AE9-ACE6-394A67443808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A5540-525C-4F99-BA26-3B988B5A08D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5C061E-A4F5-4478-A9E4-D8BA156085B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A2D187-7B5D-44D1-A766-A972F257EF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1991AF-E483-4A6E-938B-D1B6796FF135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6695193E-0347-4E20-A991-038CC3BA6386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B972B5E-6825-4DD5-8BB6-851DFFBB5109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C202FC-EA69-429B-85C6-F58A093C901F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CB6F37-6F14-4313-82D8-7D1EF110852D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2470C8-C82E-4722-8106-DB95DB67683F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A3A8B1-8088-4FCC-A38C-96526201F159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666549A-5879-4141-A97F-347B52755092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808EF0E6-842C-4E81-8743-01230D32532C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7020B7F8-0C57-4533-B49F-559058A23CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5887540-4EBE-484E-9C5B-3EFA0950BE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FADA344-C7FE-413D-9DE6-1C6B265EB326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE932954-D562-4677-BE01-76EA26E98367"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E303C07-8CB1-4EF8-82F3-4C2B3C664812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2923B5C1-78A5-4A0D-B18E-DAC59B62EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58610A13-D6F7-49BA-A576-350DACC5C86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA53735-7E72-4717-9168-38286B5261E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB504DC-E137-4026-BB16-E862045BD380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB6406A-F797-45AB-82A9-B47D00B6C56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577FC56E-AFBE-4D13-B89B-A3CD757C75B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180CE3A7-BA57-49B4-8103-20E12CD37435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0DF071-1EB8-49FD-A279-A895A45B4679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A288D3A5-C1C0-4BD2-99D6-306B88CB0A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE7A96F-78F9-4922-B614-C0467D8DF7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9455D90F-9E44-4D64-9470-E80A5C06CE3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012366",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102492",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134921",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1740",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-11T17:29:00.337",
      "lastModified" : "2024-11-21T03:22:17.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922."
      }, {
        "lang" : "es",
        "value" : "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1 y 7.0.2 es vulnerable a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134922."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F30D0-82C1-4F88-9FDB-A8E6D6D39591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17929DC8-0E48-4BF4-AAFE-6463C8540FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD3FF4C-C12A-4CBC-8983-85929C5D121E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE6D88C-92CF-415E-978C-0107C4C4C52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB928C52-91BB-43A6-B25F-F359F05F1388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE6951-4C91-4443-843C-805D416F4074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23EA1C1F-003F-4411-AC1D-F75811D6FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89D44FA-FE58-4A4E-8DB1-BA9667A16612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FCFA0-2443-4AE9-ACE6-394A67443808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A5540-525C-4F99-BA26-3B988B5A08D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5C061E-A4F5-4478-A9E4-D8BA156085B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A2D187-7B5D-44D1-A766-A972F257EF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1991AF-E483-4A6E-938B-D1B6796FF135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6695193E-0347-4E20-A991-038CC3BA6386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B972B5E-6825-4DD5-8BB6-851DFFBB5109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C202FC-EA69-429B-85C6-F58A093C901F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CB6F37-6F14-4313-82D8-7D1EF110852D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2470C8-C82E-4722-8106-DB95DB67683F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A3A8B1-8088-4FCC-A38C-96526201F159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666549A-5879-4141-A97F-347B52755092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808EF0E6-842C-4E81-8743-01230D32532C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7020B7F8-0C57-4533-B49F-559058A23CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5887540-4EBE-484E-9C5B-3EFA0950BE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FADA344-C7FE-413D-9DE6-1C6B265EB326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE932954-D562-4677-BE01-76EA26E98367"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E303C07-8CB1-4EF8-82F3-4C2B3C664812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2923B5C1-78A5-4A0D-B18E-DAC59B62EBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58610A13-D6F7-49BA-A576-350DACC5C86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA53735-7E72-4717-9168-38286B5261E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB504DC-E137-4026-BB16-E862045BD380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB6406A-F797-45AB-82A9-B47D00B6C56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577FC56E-AFBE-4D13-B89B-A3CD757C75B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180CE3A7-BA57-49B4-8103-20E12CD37435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0DF071-1EB8-49FD-A279-A895A45B4679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A288D3A5-C1C0-4BD2-99D6-306B88CB0A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE7A96F-78F9-4922-B614-C0467D8DF7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9455D90F-9E44-4D64-9470-E80A5C06CE3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:curam_social_program_management:7.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A60216A-2DDA-4F91-B127-B8071BEBD040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012372",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102498",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134922",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16732",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T02:29:02.007",
      "lastModified" : "2024-11-21T03:16:52.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated attacker to specify an arbitrary address."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de memoria previamente liberada en Advantech WebAccess en versiones anteriores a la 8.3. WebAccess permite que un atacante no autenticado especifique una dirección arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2AC5D10A-0790-41AA-A570-200072ADB1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16736",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T02:29:02.037",
      "lastModified" : "2024-11-21T03:16:52.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de subida no restringida de archivos con tipo peligroso en Advantech WebAccess en versiones anteriores a la 8.3. WebAccess permite que un atacante remoto ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "2AC5D10A-0790-41AA-A570-200072ADB1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14594",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-12T14:29:00.353",
      "lastModified" : "2024-11-21T03:13:10.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso printable searchrequest issue en Atlassian Jira antes de la versión 7.2.12 y desde la versión 7.3.0 hasta la 7.6.1 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el parámetro query de jqlQuery."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.12",
            "matchCriteriaId" : "33C8BF5E-57A4-4D29-88A3-463565E934E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "B6AEDF84-4EF1-4275-AD6D-6A8F4A1E031C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66495",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16862",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-12T14:29:00.617",
      "lastModified" : "2024-11-21T03:17:07.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers to modify the \"incoming mail\" whitelist setting via a Cross-site request forgery (CSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "El recurso IncomingMailServers en Atlassian Jira, en versiones anteriores a la 7.6.2, permite que atacantes remotos modifiquen la configuración de lista blanca \"incoming mail\" mediante una vulnerabilidad de Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.2",
            "matchCriteriaId" : "9F620E90-A343-43FF-920C-EE0613D0B9EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102506",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66622",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16864",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-12T14:29:00.790",
      "lastModified" : "2024-11-21T03:17:07.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso issue search en Atlassian Jira, en versiones anteriores a la 7.4.2, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el parámetro orderby."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.2",
            "matchCriteriaId" : "EDD6DC6B-5B0E-4408-BDD4-308576F382D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102505",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66624",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2158",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2018-01-12T14:29:00.930",
      "lastModified" : "2024-11-21T03:23:00.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive."
      }, {
        "lang" : "es",
        "value" : "La versificación indebida al expandir archivos ZPI64 en Lhaplus, versiones 1.73 y anteriores, podría conducir a que contenidos no planeados se extraigan de un archivo ZIP64 especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lhaplus_project:lhaplus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.3",
            "matchCriteriaId" : "457FB373-EB9B-455E-A38B-95DAE6067796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www7a.biglobe.ne.jp/~schezo/JVN57842148.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57842148/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www7a.biglobe.ne.jp/~schezo/JVN57842148.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57842148/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0869",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T15:29:00.210",
      "lastModified" : "2024-11-21T03:03:47.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869."
      }, {
        "lang" : "es",
        "value" : "El controlador NVIDIA contiene una vulnerabilidad de desbordamiento de enteros que podría provocar un uso de memoria previamente liberada y, posiblemente, desembocar en una elevación de privilegios que permite la ejecución de código como proceso privilegiado. Este problema se ha clasificado como grave, Versión: N/A. Android ID: A-37776156. Referencias: N-CVE-2017-0869."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102374",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T17:29:00.897",
      "lastModified" : "2024-11-21T03:17:10.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware ID, Connected users to device along their MAC Addresses, etc."
      }, {
        "lang" : "es",
        "value" : "La gestión indebida de permisos en el portal en dispositivos FiberHome LM53Q1 VH519R05C01S38 (diseñados para obtener información sobre el uso de Internet, cambiar contraseñas, etc.) permite que atacantes remotos busquen la información sin autenticarse. Esta información incluye la versión del dispositivo, el ID del firmware, los usuarios que están conectados al dispositivo junto con sus direcciones MAC, etc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:lm53q1_firmware:vh519r05c01s38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE0B4C9-DF2A-4DB8-9925-FD2659D0D0D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:lm53q1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A459B20-2F60-4CB2-BDEE-925DD450636C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43460/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43460/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T17:29:00.943",
      "lastModified" : "2024-11-21T03:17:10.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal."
      }, {
        "lang" : "es",
        "value" : "El portal en FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 emplea servicios web basados en SOAP para interactuar con el portal. El acceso sin autorización a servicios web mediante CSRF puede resultar en el cambio sin autorización del nombre de usuario o la contraseña del administrador del portal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:lm53q1_firmware:vh519r05c01s38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE0B4C9-DF2A-4DB8-9925-FD2659D0D0D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:lm53q1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A459B20-2F60-4CB2-BDEE-925DD450636C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43460/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43460/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T17:29:00.990",
      "lastModified" : "2024-11-21T03:17:10.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password."
      }, {
        "lang" : "es",
        "value" : "El portal en FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 emplea servicios web basados en SOAP para interactuar con el portal. El acceso sin autorización a los servicios web puede resultar en una divulgación de la clave/contraseña WLAN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:lm53q1_firmware:vh519r05c01s38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE0B4C9-DF2A-4DB8-9925-FD2659D0D0D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:lm53q1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A459B20-2F60-4CB2-BDEE-925DD450636C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43460/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43460/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T17:29:01.023",
      "lastModified" : "2024-11-21T03:19:04.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to login.php; the (2) season_id parameter to themes/flixer/ajax/load_season.php; the (3) movie_id parameter to themes/flixer/ajax/get_rating.php; the (4) rating or (5) movie_id parameter to themes/flixer/ajax/update_rating.php; or the (6) id parameter to themes/flixer/ajax/set_player_source.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Muviko 1.1 permiten que atacantes remotos ejecuten comandos SQL arbitrarios mediante el (1) parámetro email en login.php; el (2) parámetro season_id en themes/flixer/ajax/load_season.php; the (3) parámetro movie_id en themes/flixer/ajax/get_rating.php; los parámetros (4) rating o (5) movie_id en themes/flixer/ajax/update_rating.php; o el (6) parámetro id en themes/flixer/ajax/set_player_source.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muvikoscript:muviko:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B148741D-0BF9-4B55-8CD3-C3118FEEF718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145834/Muviko-1.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43477/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145834/Muviko-1.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43477/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T17:29:01.070",
      "lastModified" : "2024-11-21T03:19:09.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page (Control Center -> Log Viewer -> in the filter option \"Web Server Protection\") in the webadmin interface, and execute any action available to the webadmin of the firewall (e.g., creating a new user, enabling SSH, or adding an SSH authorized key). The WAF log page will execute the \"User-Agent\" parameter in the HTTP POST request."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema NC-25986 en el subsistema de informes de Sophos XG Firewall with SFOS en versiones anteriores a la 17.0.3 MR3. Un usuario sin autenticar puede desencadenar una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la página de informes WAF (Control Center -> Log Viewer -> en el filtro opción \"Web Server Protection\") en la interfaz webadmin y ejecutar cualquier acción disponible para el webadmin del firewall (por ejemplo, crear un nuevo usuario, habilitar SSH o añadir la clave SSH autorizada). La página de informes WAF ejecutará el parámetro \"User-Agent\" en la petición HTTP POST."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sophos:sfos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.0",
            "matchCriteriaId" : "7EF76A45-D3EB-4EF4-BA42-1B5F4232DAB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sophos:xg_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9628D079-44BD-479E-BE63-9BEF824B4E4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sophos:sfos:17.0:mr1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA675D4-9074-48F2-B417-CC3B25F3F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sophos:sfos:17.0:mr2:*:*:*:*:*:*",
            "matchCriteriaId" : "92CF1684-2AFD-4887-8904-8A628E5D8800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sophos:sfos:17.0:mr3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC00A5F7-E60E-43B7-BBBE-DA333763B09B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sophos:xg_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9628D079-44BD-479E-BE63-9BEF824B4E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3612",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.sophos.com/kb/en-us/128024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-17-0-3-mr3-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.sophos.com/kb/en-us/128024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-17-0-3-mr3-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14030",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T20:29:00.213",
      "lastModified" : "2024-11-21T03:12:00.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Moxa MXview v2.8 y anteriores. La vulnerabilidad de escalado de ruta de servicio sin entrecomillar podría permitir que un usuario autorizado con acceso de archivo escale privilegios insertando código arbitrario en la ruta del servicio sin entrecomillar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxa:mxview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "2EEDD818-CBD7-47E3-A450-71C43EFF3204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102494",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16737",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T20:29:00.260",
      "lastModified" : "2024-11-21T03:16:52.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file may be able to cause a heap-based buffer overflow vulnerability when opened by a user."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en WECON LEVI Studio HMI Editor v1.8.29 y anteriores. Un archivo malicioso especialmente manipulado podría ser capaz de provocar una vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap) al ser abierto por un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:we-con:levistudio_hmi_editor_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.29",
            "matchCriteriaId" : "6D21EDC2-A4B0-42BF-AA93-C1263AFC3D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:we-con:levistudio_hmi_editor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA208A1-58AD-4397-BF4F-E1218A035F6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102493",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16739",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T20:29:00.307",
      "lastModified" : "2024-11-21T03:16:52.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en WECON LEVI Studio HMI Editor v1.8.29 y anteriores. Archivos maliciosos especialmente manipulados podrían ser capaces de provocar vulnerabilidades de desbordamiento de búfer basado en pila, lo que podría permitir la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:we-con:levistudio_hmi_editor_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.29",
            "matchCriteriaId" : "6D21EDC2-A4B0-42BF-AA93-C1263AFC3D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:we-con:levistudio_hmi_editor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA208A1-58AD-4397-BF4F-E1218A035F6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102493",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16741",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T20:29:00.340",
      "lastModified" : "2024-11-21T03:16:53.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de exposición de información en productos PHOENIX CONTACT FL SWITCH 3xxx, 4xxx y 48xxx Series que ejecutan las versiones de firmware 1.0 a 1.32. Un atacante remoto no autenticado podría emplear Monitor Mode en el dispositivo para leer información de diagnóstico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "6F748030-ECA1-4013-89EE-58FB506E302A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD6E20C-23E3-4D04-879B-2AC6EF428947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "4FEE18F6-5F4C-4CB1-9B38-CA376D71612C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378D94CF-D885-42D4-8A0E-21CD748F6807"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "77DCA24C-FCB8-4979-B54B-A2A098711C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9C98D8-21D3-45C1-B060-A9A9E2F3C097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "50E01B45-DD15-41E4-945F-123B73360120"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741E125-4A42-49D9-B042-F9CE55635AAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "EB35B6F8-5D90-4604-884E-5C9B89AF2B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6CE354-013E-4F95-BC30-1C9B319EBED2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3C25D258-044B-47AE-A668-AAD287D8974D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AABEF33-10A0-4799-B838-56EDD19DA0C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "49A89D53-44D8-4023-B064-B7B448181A2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183345F0-1A43-4721-99C1-6F1A7DF951C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "CB79BD9B-F638-44A4-B48A-35FCB11A9F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745B393D-B1D4-49B3-B869-54B103DDC09E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "B27A1E3E-5286-44B0-832E-7DE36973537B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E73E8DE-CCC4-43EC-8DD5-B8F75EA06A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "326D8451-B4FA-4888-9CA9-BD9695C825F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE50CC4-384B-499F-BC7D-E66AB2B8D42F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "BFEE95D9-F800-4620-A772-79999997C8D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5BBAFE-2229-4472-BED8-30A5A2547746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "9948A68E-C0FA-4F57-9F33-C3D754A70247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E4B7B8-0BCF-4A6D-A1D6-D76D7B67277D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "0BDE07BD-7F3B-4708-8CA9-E8D0BFA75192"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94001A55-C569-4FD3-BB74-9EC7D85C1473"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "9CD96136-0226-4C50-AB20-23D43A59E6A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDDB1D7-3E0C-4C06-B19F-A2FE8F6CC541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3384E849-9456-4BC2-97F7-F451302D607F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB83F75C-61AD-4161-B7FC-815BB79DD84C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "95C6B3B8-C472-4891-BFB4-0D8BD2FB3EA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A8884E-A04E-4A52-9CE6-8EE210F6CA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "90EC16BB-4437-4F6D-AF6F-98DEDC88B3A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2ACFB7-4685-48F2-8741-AD0ECFC8804E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "95548922-A0F4-4820-8F0B-D1A9FB65783C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640ECB9C-3D8C-4BCD-A0AF-AA79DE508FD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "5D422D38-9E5A-418E-B0BF-152B703968D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24767260-220D-40D2-82D4-944DD1557C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "07A20C94-DC20-4CC7-9DFC-2F57DCE3A2EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1D7163-5489-47A3-B6DF-13C2C137CD39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "34E26731-B310-47D8-99CC-752074944397"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CF1D6-AEB2-4A75-959A-81F70FE7A634"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "68E7EE37-9E84-4722-AE22-25AF3D402FA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A11C522-B022-4F38-9DE9-189BAB367CA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "DC5F84EB-9E88-4958-9ECD-E8D428715495"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8A0E7B-0B6D-496C-81A4-077C4D1BA2BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "487FB566-6913-4535-A74F-2244A0E2F288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F3A41E-72FA-4876-B29C-810A83237E74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "FA669231-0327-4D71-976C-50961CCFFBD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AF48CE-231F-42F9-BF50-B3E8FB49D0F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "81C8FF1E-3FF5-47FA-83FA-3A74DA5BAA87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5516A419-3B65-4866-91AD-7824C7D93A1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3535FEAD-26DA-46EA-BE51-119A8F7F152E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8EBCA-D4C9-4698-B0A6-78796228ABD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3535FEAD-26DA-46EA-BE51-119A8F7F152E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8EBCA-D4C9-4698-B0A6-78796228ABD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3B487717-1253-4A30-8936-507039003258"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3012e-2fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13750CC-A1ED-4AC5-BE05-C70B0A8E697D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3D440E3E-FF36-4584-ACC9-C3DAE50930E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4000t-8poe-2sfp-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C8DB2C-0647-42FC-A401-264A6A00621E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-006",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16743",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-12T20:29:00.387",
      "lastModified" : "2024-11-21T03:16:53.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de autorización indebida en productos PHOENIX CONTACT FL SWITCH 3xxx, 4xxx y 48xxx Series que ejecutan las versiones de firmware 1.0 a 1.32. Un atacante remoto no autenticado podría manipular peticiones HTTP especiales que permiten que un atacante omita la autenticación del servicio web. Esto permitiría que el atacante obtenga privilegios de administrador en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "6F748030-ECA1-4013-89EE-58FB506E302A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD6E20C-23E3-4D04-879B-2AC6EF428947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "4FEE18F6-5F4C-4CB1-9B38-CA376D71612C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378D94CF-D885-42D4-8A0E-21CD748F6807"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "77DCA24C-FCB8-4979-B54B-A2A098711C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9C98D8-21D3-45C1-B060-A9A9E2F3C097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "50E01B45-DD15-41E4-945F-123B73360120"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7741E125-4A42-49D9-B042-F9CE55635AAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "EB35B6F8-5D90-4604-884E-5C9B89AF2B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6CE354-013E-4F95-BC30-1C9B319EBED2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3C25D258-044B-47AE-A668-AAD287D8974D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AABEF33-10A0-4799-B838-56EDD19DA0C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "49A89D53-44D8-4023-B064-B7B448181A2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183345F0-1A43-4721-99C1-6F1A7DF951C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "CB79BD9B-F638-44A4-B48A-35FCB11A9F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745B393D-B1D4-49B3-B869-54B103DDC09E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "B27A1E3E-5286-44B0-832E-7DE36973537B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E73E8DE-CCC4-43EC-8DD5-B8F75EA06A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "326D8451-B4FA-4888-9CA9-BD9695C825F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE50CC4-384B-499F-BC7D-E66AB2B8D42F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "BFEE95D9-F800-4620-A772-79999997C8D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5BBAFE-2229-4472-BED8-30A5A2547746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "9948A68E-C0FA-4F57-9F33-C3D754A70247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E4B7B8-0BCF-4A6D-A1D6-D76D7B67277D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "0BDE07BD-7F3B-4708-8CA9-E8D0BFA75192"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94001A55-C569-4FD3-BB74-9EC7D85C1473"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "9CD96136-0226-4C50-AB20-23D43A59E6A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDDB1D7-3E0C-4C06-B19F-A2FE8F6CC541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3384E849-9456-4BC2-97F7-F451302D607F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB83F75C-61AD-4161-B7FC-815BB79DD84C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "95C6B3B8-C472-4891-BFB4-0D8BD2FB3EA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A8884E-A04E-4A52-9CE6-8EE210F6CA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "90EC16BB-4437-4F6D-AF6F-98DEDC88B3A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2ACFB7-4685-48F2-8741-AD0ECFC8804E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "95548922-A0F4-4820-8F0B-D1A9FB65783C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640ECB9C-3D8C-4BCD-A0AF-AA79DE508FD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "5D422D38-9E5A-418E-B0BF-152B703968D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24767260-220D-40D2-82D4-944DD1557C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "07A20C94-DC20-4CC7-9DFC-2F57DCE3A2EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1D7163-5489-47A3-B6DF-13C2C137CD39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "34E26731-B310-47D8-99CC-752074944397"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CF1D6-AEB2-4A75-959A-81F70FE7A634"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "68E7EE37-9E84-4722-AE22-25AF3D402FA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A11C522-B022-4F38-9DE9-189BAB367CA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "DC5F84EB-9E88-4958-9ECD-E8D428715495"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8A0E7B-0B6D-496C-81A4-077C4D1BA2BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "487FB566-6913-4535-A74F-2244A0E2F288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F3A41E-72FA-4876-B29C-810A83237E74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "FA669231-0327-4D71-976C-50961CCFFBD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AF48CE-231F-42F9-BF50-B3E8FB49D0F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "81C8FF1E-3FF5-47FA-83FA-3A74DA5BAA87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5516A419-3B65-4866-91AD-7824C7D93A1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3535FEAD-26DA-46EA-BE51-119A8F7F152E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8EBCA-D4C9-4698-B0A6-78796228ABD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3535FEAD-26DA-46EA-BE51-119A8F7F152E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8EBCA-D4C9-4698-B0A6-78796228ABD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3B487717-1253-4A30-8936-507039003258"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_3012e-2fx_sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13750CC-A1ED-4AC5-BE05-C70B0A8E697D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "3D440E3E-FF36-4584-ACC9-C3DAE50930E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:fl_switch_4000t-8poe-2sfp-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C8DB2C-0647-42FC-A401-264A6A00621E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-006",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2017-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T20:29:00.417",
      "lastModified" : "2024-11-21T03:19:12.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-1 Q16 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E11CC8-738C-4B10-85E9-25EF4B48B3CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T20:29:00.450",
      "lastModified" : "2024-11-21T03:19:12.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.7-1 Q16 en la función ReadTIFFImage en coders/tiff.c. Esta vulnerabilidad permite que los atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E11CC8-738C-4B10-85E9-25EF4B48B3CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-12T20:29:00.497",
      "lastModified" : "2024-11-21T03:19:12.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-10 Q16 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes remotos provoquen una denegación de servicio mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-10:q16:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4006A7-46F8-4C97-BC18-71B11BE3F591"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102519",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/691",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0846",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.233",
      "lastModified" : "2024-11-21T03:03:45.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el framework de Android (clipboardservice). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0855",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.267",
      "lastModified" : "2024-11-21T03:03:46.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64452857."
      }, {
        "lang" : "es",
        "value" : "En MPEG4Extractor.cpp, hay varios lugares en los que las funciones se devuelven pronto sin limpiar los búfers internos, lo que podría conducir a fugas de memoria. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64452857."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13176",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.313",
      "lastModified" : "2024-11-21T03:11:05.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68341964."
      }, {
        "lang" : "es",
        "value" : "En la función parseURL de URLStreamHandler, hay una validación de entradas indebida del campo host. Esto podría conducir a una elevación remota de privilegios que podría permitir la omisión del requerimiento de interacción de usuario sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68341964."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102422",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13177",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.343",
      "lastModified" : "2024-11-21T03:11:06.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68320413."
      }, {
        "lang" : "es",
        "value" : "En varias funciones de libhevc, no se mantienen los registros NEON. Esto podría llevar a una ejecución remota de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68320413."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13178",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.390",
      "lastModified" : "2024-11-21T03:11:06.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969281."
      }, {
        "lang" : "es",
        "value" : "En la función initDecoder de SoftAVCDec, hay una posible escritura fuera de límites en mCodecCtx debido a un uso de memoria previamente liberada cuando fracasa la asignación de búfer. Esto podría llevar a una ejecución remota de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969281."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13179",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.420",
      "lastModified" : "2024-11-21T03:11:06.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both ps_codec_obj and ps_create_op->s_ivd_create_op_t.pv_handle point to the same memory and ps_codec_obj could be freed without clearing ps_create_op->s_ivd_create_op_t.pv_handle. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969193."
      }, {
        "lang" : "es",
        "value" : "En las funciones ihevcd_allocate_static_bufs y ihevcd_create de SoftHEVC, hay una posible escritura fuera de límites debido a un uso de memoria previamente liberada. Tanto ps_codec_obj como ps_create_op->s_ivd_create_op_t.pv_handle señalan a la misma memoria y ps_codec_obj podría liberarse sin limpiar ps_create_op->s_ivd_create_op_t.pv_handle. Esto podría llevar a una ejecución remota de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969193."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13180",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.467",
      "lastModified" : "2024-11-21T03:11:06.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the decoder to get caught in a loop while another thread frees the memory it's accessing. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969349."
      }, {
        "lang" : "es",
        "value" : "En la función onQueueFilled de SoftAVCDec, hay una posible escritura fuera de límites debido a un uso de memoria previamente liberada si una mala recuperación provoca que el descodificador se vea envuelto en un bucle mientras otro hilo libera la memoria a la que está accediendo. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969349."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13181",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.500",
      "lastModified" : "2024-11-21T03:11:06.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67864232."
      }, {
        "lang" : "es",
        "value" : "En las funciones doGetThumb y getThumbnail de MtpServer, existe una posible doble liberación (double free) debido a que un puntero liberado no se marca como NULL. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67864232."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13182",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.547",
      "lastModified" : "2024-11-21T03:11:06.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds write. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67737022."
      }, {
        "lang" : "es",
        "value" : "En la función sendFormatChange de ACodec, hay un posible desbordamiento de enteros que podría conducir a una escritura fuera de límites. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-67737022."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13183",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.577",
      "lastModified" : "2024-11-21T03:11:06.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.1. Android ID: A-38118127."
      }, {
        "lang" : "es",
        "value" : "En las funciones OMXNodeInstance::useBuffer y IOMX::freeBuffer, hay un posible uso de memoria previamente liberada debido a una condición de carrera si el usuario libera el búfer mientras se emplea en otro hilo. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.1. Android ID: A-38118127."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102421",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13184",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.623",
      "lastModified" : "2024-11-21T03:11:06.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-65483324."
      }, {
        "lang" : "es",
        "value" : "En la función enableVSyncInjections de SurfaceFlinger, hay un posible uso de memoria previamente liberada de mVSyncInjector. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-65483324."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13185",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.657",
      "lastModified" : "2024-11-21T03:11:06.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libhevc). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/2b9fb0c2074d370a254b35e2489de2d94943578d",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/2b9fb0c2074d370a254b35e2489de2d94943578d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13186",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.703",
      "lastModified" : "2024-11-21T03:11:07.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el framework media de Android (libavc) relacionado con el uso incorrecto de parámetros mmco. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/6c327afb263837bc90760c55c6605b26161a4eb9",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/6c327afb263837bc90760c55c6605b26161a4eb9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13187",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.733",
      "lastModified" : "2024-11-21T03:11:07.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65034175."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libhevc). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65034175."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/7c9be319a279654e55a6d757265f88c61a16a4d5",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/7c9be319a279654e55a6d757265f88c61a16a4d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13188",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.780",
      "lastModified" : "2024-11-21T03:11:07.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (aac). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/aac/+/8e3be529372892e20ccf196809bc73276c822189",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/aac/+/8e3be529372892e20ccf196809bc73276c822189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13189",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.813",
      "lastModified" : "2024-11-21T03:11:07.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68300072."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el framework media de Android (libavc) relacionado con la gestión de los fallos de asignación de memoria de dec_hdl. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68300072."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/5acaa6fc86c73a750e5f4900c4e2d44bf22f683a",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/5acaa6fc86c73a750e5f4900c4e2d44bf22f683a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13190",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.857",
      "lastModified" : "2024-11-21T03:11:07.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el framework media de Android (libhevc) relacionado con la gestión de los fallos de asignación de memoria de ps_codec_obj. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/3ed3c6b79a7b9a60c475dd4936ad57b0b92fd600",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libhevc/+/3ed3c6b79a7b9a60c475dd4936ad57b0b92fd600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13191",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.907",
      "lastModified" : "2024-11-21T03:11:07.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380403."
      }, {
        "lang" : "es",
        "value" : "En la función ihevcd_decode de ihevcd_decode.c, hay un bucle infinito debido a un error de frames incompletos. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380403."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13192",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.937",
      "lastModified" : "2024-11-21T03:11:07.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380202."
      }, {
        "lang" : "es",
        "value" : "En la función ihevcd_parse_slice_header de ihevcd_parse_slice_header.c, una dirección de segmento de cero tras el primer segmento podría resultar en un bucle infinito. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380202."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13193",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:00.967",
      "lastModified" : "2024-11-21T03:11:07.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65718319."
      }, {
        "lang" : "es",
        "value" : "En ihevcd_decode.c, hay un posible bucle infinito debido a los byes para un aps de resolución no soportada que resulta en que el mismo sps se alimenta una y otra vez. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65718319."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13194",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.017",
      "lastModified" : "2024-11-21T03:11:08.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el framework media de Android (libvpx) relacionado con un ancho de frame extraño. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libvpx/+/55cd1dd7c8d0a3de907d22e0f12718733f4e41d9",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00025.html",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4199-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/4199-2/",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4132",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libvpx/+/55cd1dd7c8d0a3de907d22e0f12718733f4e41d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4199-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4199-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13195",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.063",
      "lastModified" : "2024-11-21T03:11:08.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative indexes which could lead to an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65398821."
      }, {
        "lang" : "es",
        "value" : "En la función ihevcd_parse_sps de ihevcd_parse_headers.c, varios valores de parámetro podrían ser negativos, lo que puede conducir a índices negativos, que a su vez podrían desembocar en un bucle infinito. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65398821."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13196",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.093",
      "lastModified" : "2024-11-21T03:11:08.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63522067."
      }, {
        "lang" : "es",
        "value" : "En varios lugares de ihevcd_decode.c, podría ocurrir un bucle muerto debido a frames incompletos, que pueden conducir a fugas de memoria. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63522067."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13197",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.140",
      "lastModified" : "2024-11-21T03:11:08.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64784973."
      }, {
        "lang" : "es",
        "value" : "En la función ihevcd_parse_slice.c, los hilos esclavos no se unen si hay un error. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64784973."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13198",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.170",
      "lastModified" : "2024-11-21T03:11:08.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399117."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el framework media de Android (ex) relacionado con la composición de frames a los que les falta un mapa de color. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/frameworks/ex/+/ede8f95361dcbf9757aaf6d25ce59fa3767344e3",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/ex/+/ede8f95361dcbf9757aaf6d25ce59fa3767344e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13199",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.217",
      "lastModified" : "2024-11-21T03:11:08.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-33846679."
      }, {
        "lang" : "es",
        "value" : "En Bitmap.ccp, si Bitmap.nativeCreate falla, no se lanza una excepción de memoria, lo que conduce más adelante a un java.io.IOException. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-33846679."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13200",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.250",
      "lastModified" : "2024-11-21T03:11:08.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (av), relacionado con la sincronización id3. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/dd3ca4d6b81a9ae2ddf358b7b93d2f8c010921f5",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/frameworks/av/+/dd3ca4d6b81a9ae2ddf358b7b93d2f8c010921f5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13201",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.297",
      "lastModified" : "2024-11-21T03:11:08.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63982768."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (mediadrm). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63982768."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102529",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13202",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.327",
      "lastModified" : "2024-11-21T03:11:09.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67647856."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libeffects). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67647856."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102521",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13203",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.373",
      "lastModified" : "2024-11-21T03:11:09.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63122634."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libavc). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63122634."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/e86d3cfd2bc28dac421092106751e5638d54a848",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/e86d3cfd2bc28dac421092106751e5638d54a848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13204",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.407",
      "lastModified" : "2024-11-21T03:11:09.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380237."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el media framework de Android (libavc). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380237."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/42cf02965b11c397dd37a0063e683cef005bc0ae",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libavc/+/42cf02965b11c397dd37a0063e683cef005bc0ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13205",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.453",
      "lastModified" : "2024-11-21T03:11:09.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64550583."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libmpeg2). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64550583."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/29a78a11844fc027fa44be7f8bd8dc1cf8bf89f6",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libmpeg2/+/29a78a11844fc027fa44be7f8bd8dc1cf8bf89f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13206",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.500",
      "lastModified" : "2024-11-21T03:11:09.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65025048."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (aacdec). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65025048."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102523",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13207",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.547",
      "lastModified" : "2024-11-21T03:11:09.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37564426."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (stagefright mpeg4writer). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37564426."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102526",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13208",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.577",
      "lastModified" : "2024-11-21T03:11:09.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67474440."
      }, {
        "lang" : "es",
        "value" : "En receive_packet de libnetutils/packet.c, hay una posible escritura fuera de límites debido a una comprobación fallida de límites en la respuesta DHCP. Esto podría llevar a una ejecución remota de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67474440."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13209",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.607",
      "lastModified" : "2024-11-21T03:11:09.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217907."
      }, {
        "lang" : "es",
        "value" : "En la función ServiceManager::add en el gestor de servicio hardware, hay una comprobación no segura de permisos basado en el PID del llamante. Esto podría permitir que una aplicación o servicio remplace un servico HAL con su propio servicio. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-68217907."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43513/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43513/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13210",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.657",
      "lastModified" : "2024-11-21T03:11:10.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67782345."
      }, {
        "lang" : "es",
        "value" : "En CameraDeviceClient::submitRequestList de CameraDeviceClient.cpp, hay una escritura fuera de límites si metadataSize es demasiado pequeño. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67782345."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13211",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.687",
      "lastModified" : "2024-11-21T03:11:10.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0. Android ID: A-65174158."
      }, {
        "lang" : "es",
        "value" : "En bta_scan_results_cb_impl de btif_ble_scanner.cc, hay un posible agotamiento de recursos si se recibe un gran número de resultados repetidos de escaneo BLE. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0. Android ID: A-65174158."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13212",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.733",
      "lastModified" : "2024-11-21T03:11:10.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el sistema de Android (systemui). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13213",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.767",
      "lastModified" : "2024-11-21T03:11:10.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References: B-V2017081501."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador bcmdhd de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-63374465. Referencias: B-V2017081501."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13214",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.797",
      "lastModified" : "2024-11-21T03:11:10.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38495900."
      }, {
        "lang" : "es",
        "value" : "En el decodificador HEVC de hardware, algunos archivos multimedia podrían provocar un fallo en la página. Esto podría llevar a una denegación de servicio remota de un proceso crítico del sistema sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-38495900."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102416",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13215",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.857",
      "lastModified" : "2024-11-21T03:11:10.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el skcipher Upstream del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-64386293. Referencias: Upstream kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102390",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2384",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2395",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "security@android.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13216",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.890",
      "lastModified" : "2024-11-21T03:11:10.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-66954097."
      }, {
        "lang" : "es",
        "value" : "En ashmem_ioctl de ashmem.c, hay una escritura fuera de límites debido a un bloqueo insuficiente al acceder a asma. Esto podría llevar a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-66954097."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102390",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43464/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43464/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13217",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.937",
      "lastModified" : "2024-11-21T03:11:10.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-68269077."
      }, {
        "lang" : "es",
        "value" : "En DisplayFtmItem en el bootloader, hay una escritura fuera de límites debido a la lectura de una cadena sin verificar que se ha finalizado con null. Esto podría llevar a una omisión del arranque seguro y a una elevación local de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-68269077."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102423",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13218",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:01.967",
      "lastModified" : "2024-11-21T03:11:10.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845."
      }, {
        "lang" : "es",
        "value" : "Podría emplearse el acceso a CNTVCT_EL0 en Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear para ataques de canal lateral, lo que podría conducir a una divulgación de información local sin que se necesiten privilegios de ejecución adicionales en FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835 y SD 845."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102390",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin",
        "source" : "security@android.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13219",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:02.017",
      "lastModified" : "2024-11-21T03:11:11.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) en el controlador synaptics del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-62800865."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13220",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:02.047",
      "lastModified" : "2024-11-21T03:11:11.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el bluez del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-63527053."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1536155",
        "source" : "security@android.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1076537",
        "source" : "security@android.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51bda2bca53b265715ca1852528f38dc67429d9a",
        "source" : "security@android.com"
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-13220.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-13220",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "security@android.com"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "security@android.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "security@android.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1536155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1076537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51bda2bca53b265715ca1852528f38dc67429d9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-13220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-13220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13221",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:02.077",
      "lastModified" : "2024-11-21T03:11:11.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador wifi del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-64709938."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13222",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:02.123",
      "lastModified" : "2024-11-21T03:11:11.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el kernel Upstream del kernel. Producto: Android. Versiones: Android kernel. Android ID: A-38159576."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13225",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:02.157",
      "lastModified" : "2024-11-21T03:11:11.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38308024. References: M-ALPS03495789."
      }, {
        "lang" : "es",
        "value" : "Hay un posible desbordamiento de búfer basado en memoria dinámica (heap) en libMtkOmxVdec.so. Esto podría llevar a una elevación remota de privilegios que permite la ejecución de código como proceso privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-38308024. Referencias: M-ALPS03495789."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102420",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13226",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-01-12T23:29:02.203",
      "lastModified" : "2024-11-21T03:11:11.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03149184."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el mtk de MediaTek. Producto: Android. Versiones: Android kernel. Android ID: A-32591194. Referencias: M-ALPS03149184."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15126",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-14T06:29:00.217",
      "lastModified" : "2024-11-21T03:14:07.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put()."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo de uso de memoria previamente liberada en fs/userfaultfd.c en el kernel de Linux en versiones anteriores a la 4.13.6. El problema se relaciona con la gestión del error de bifurcación al gestionar mensajes de evento. El error al bifurcar correctamente puede llevar a una situación en la que un evento fork se eliminará de una lista ya liberada de eventos con userfaultfd_ctx_put()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11",
            "versionEndExcluding" : "4.13.6",
            "matchCriteriaId" : "6AA05A17-8B2B-40D5-A8FD-3B328291D06B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1523481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1523481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15127",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-14T06:29:00.263",
      "lastModified" : "2024-11-21T03:14:07.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG)."
      }, {
        "lang" : "es",
        "value" : "Se encontró un error en la función hugetlb_mcopy_atomic_pte en mm/hugetlb.c en el kernel de Linux en versiones anteriores a la 4.13. Un desbloqueo superfluo implícito de página para la representación hugetlbfs de VM_SHARED podría desembocar una denegación de servicio local (error)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-460"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2894F22-5448-4402-AE27-6E43BD08E14E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60FA8B1-1802-4522-A088-22171DCF7A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102517",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15127",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15128",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-14T06:29:00.297",
      "lastModified" : "2024-11-21T03:14:07.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG)."
      }, {
        "lang" : "es",
        "value" : "Se encontró un error en la función hugetlb_mcopy_atomic_pte en mm/hugetlb.c en el kernel de Linux en versiones anteriores a la 4.13.12. La falta de comprobación de tamaño podría provocar una denegación de servicio (error)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13.11",
            "matchCriteriaId" : "3AB470D9-2EFD-4F2C-838A-EF9815166D69"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60FA8B1-1802-4522-A088-22171DCF7A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15128",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525222",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-15128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T09:29:00.217",
      "lastModified" : "2025-03-21T16:07:09.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php."
      }, {
        "lang" : "es",
        "value" : "El plugin download-manager en versiones anteriores a la 2.9.52 para WordPress tiene XSS mediante el parámetro id en una acción wpdm_generate_password en wp-admin/admin-ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3eden:download_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9.52",
            "matchCriteriaId" : "AC2FF09D-B16F-445A-8138-D5C97103F924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.dxw.com/advisories/xss-download-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/download-manager/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://security.dxw.com/advisories/xss-download-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/download-manager/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11072",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-01-16T16:29:00.220",
      "lastModified" : "2024-11-21T03:07:03.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, mientras se calcula CRC para campos de cabecera GPT con entradas de partición mayores que 16384, ocurre un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.027",
      "lastModified" : "2024-11-21T03:16:33.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales escriban en ubicaciones aleatorias de la memoria y, consecuentemente, obtengan privilegios mediante un conjunto específico de llamadas IOCTL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/Knowledgebase/Article/View/173/41/advisory-issued-on-6th-november-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/Knowledgebase/Article/View/173/41/advisory-issued-on-6th-november-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.057",
      "lastModified" : "2024-11-21T03:16:34.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales escriban en ubicaciones aleatorias de la memoria y, consecuentemente, obtengan privilegios mediante un conjunto específico de llamadas IOCTL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.107",
      "lastModified" : "2024-11-21T03:16:34.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales obtengan privilegios mediante el envío de una llamada IOCTL específica tras configurar la memoria de una forma en particular."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.150",
      "lastModified" : "2024-11-21T03:16:34.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales escriban en ubicaciones aleatorias de la memoria y, consecuentemente, obtengan privilegios mediante un conjunto específico de llamadas IOCTL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.197",
      "lastModified" : "2024-11-21T03:16:34.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales obtengan privilegios mediante el envío de una llamada IOCTL específica tras configurar la memoria de una forma en particular."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.247",
      "lastModified" : "2024-11-21T03:16:34.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales escriban en ubicaciones aleatorias de la memoria y, consecuentemente, obtengan privilegios mediante un conjunto específico de llamadas IOCTL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.293",
      "lastModified" : "2024-11-21T03:16:34.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales obtengan privilegios mediante el envío de una llamada IOCTL específica tras configurar la memoria de una forma en particular."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.340",
      "lastModified" : "2024-11-21T03:16:34.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations."
      }, {
        "lang" : "es",
        "value" : "En K7 Antivirus Premium en versiones anteriores a la 15.1.0.53, las entradas controladas por el usuario pueden emplearse para permitir que usuarios locales escriban en ubicaciones arbitrarias de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/2nd-Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/2nd-Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.400",
      "lastModified" : "2024-11-21T03:16:35.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way."
      }, {
        "lang" : "es",
        "value" : "K7 Antivirus Premium en versiones anteriores a la 15.1.0.53 permite que usuarios locales obtengan privilegios mediante el envío de una llamada IOCTL específica tras configurar la memoria de una forma en particular."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/3rd-Advisory-issued-on-6th-November-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.433",
      "lastModified" : "2024-11-21T03:17:55.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL."
      }, {
        "lang" : "es",
        "value" : "En K7 Antivirus Premium en versiones anteriores a la 15.1.0.53, las entradas controladas por el usuario en el dispositivo K7Sentry no se autentican lo suficiente: un usuario local con un proceso de BAJA integridad puede acceder a un disco duro en formato raw mediante el envío de una llamada IOCTL específica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*",
            "versionEndExcluding" : "15.1.0.53",
            "matchCriteriaId" : "081BB6A6-F61D-4620-B7E3-D8D75D6FF45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "15.1.0308",
            "matchCriteriaId" : "E5B80AE6-80A8-4DD1-B80A-41376D5F4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.0137",
            "matchCriteriaId" : "6E3C2065-FF01-4782-8737-AB7319D62F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0297",
            "matchCriteriaId" : "853D8531-FDA6-480D-846B-DC7239D534FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "6EE981E5-381A-4532-8EBD-5A404E72F8EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*",
            "versionEndExcluding" : "16.0.0131",
            "matchCriteriaId" : "6EC3E1A9-9A05-42BA-B614-125BE4B63436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0324",
            "matchCriteriaId" : "FA207B19-FD5F-4CF5-9C77-74BBFEA49845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T19:29:01.480",
      "lastModified" : "2024-11-21T03:34:44.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the \"Show Snippet\" functionality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en Zimbra Collaboration Suite (también conocido como ZCS) en versiones anteriores a la 8.8.0 Beta2 puede permitir que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores relacionados con la funcionalidad \"Show Snippet\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synocor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.11",
            "matchCriteriaId" : "289718C8-9E62-419A-A882-252CFCB152D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synocor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C23673FA-DC03-4586-A175-690B3328E7B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541661/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=107925",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-001_zimbra_stored_xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541661/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=107925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-001_zimbra_stored_xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-16T21:29:00.250",
      "lastModified" : "2024-11-21T03:19:02.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure (PPS) before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL parameters not being sanitized. Exploitation does require the user to be logged in as administrator; the issue is not applicable to the end user portal."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema de Cross-Site Scripting (XSS) en custompage.cgi en Pulse Secure Pulse Connect Secure (PCS) en versiones anteriores a la 8.0R17.0, versiones 8.1.x anteriores a la 8.1R13, 8.2.x anteriores a la 8.2R9 y versiones 8.3.x anteriores a la 8.3R3 y en Pulse Policy Secure (PPS) en versiones anteriores a la 5.2R10, versiones 5.3.x anteriores a la 5.3R9 y versiones 5.4.x anteriores a la 5.4R3 debido a que uno de los parámetros de la URL no se sanea. Su explotación requiere que un usuario inicie sesión como administrador; este problema no es aplicable al portal del usuario final."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0r17.0",
            "matchCriteriaId" : "466C6257-D50B-4F56-A694-763AC8452EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1",
            "versionEndExcluding" : "8.1r13",
            "matchCriteriaId" : "2154398D-9469-4E8B-BDD3-05682E6B4A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2",
            "versionEndIncluding" : "8.2r9",
            "matchCriteriaId" : "718AA2C5-CD1C-4873-B6B7-6E9F08FB2114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3",
            "versionEndExcluding" : "8.3r3",
            "matchCriteriaId" : "D7034C3B-ACC5-42FA-A2BB-802DF753C67C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16865",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-17T14:29:00.217",
      "lastModified" : "2024-11-21T03:17:07.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF). When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access credentials and other potentially confidential information."
      }, {
        "lang" : "es",
        "value" : "El importador Trello en Atlassian Jira, en versiones anteriores a la 7.6.1, permite que atacantes remotos accedan al contenido de recursos de red internos mediante Server Side Request Forgery (SSRF). Cuando se ejecuta en un entorno como Amazon EC2, este error puede emplearse para acceder a un recurso de metadatos que proporciona credenciales de acceso y otro tipo de información potencialmente confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "A2F243B1-7B91-4254-8F09-A516329EE956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66642",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5696",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-01-18T01:29:00.617",
      "lastModified" : "2024-11-21T03:28:14.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access."
      }, {
        "lang" : "es",
        "value" : "Una ruta de búsqueda no fiable en Intel Graphics Driver 15.40.x.x, 15.45.x.x y 21.20.x.x permite que un usuario sin privilegios eleve sus privilegios mediante acceso local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.20.16.4860",
            "matchCriteriaId" : "8D838FFC-C618-4AC2-B761-0CE558EDEF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.1.64.4256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2024D-1B35-44CD-8918-3549D92D8B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.4.64.4256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A142D12-514E-4B13-A77E-A63D2525A2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.7.64.4279:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE08572D-F0E3-4F5E-A5E1-D69486E87129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.14.4352:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B59E90-097C-4BF8-BCDE-321C810D1389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.26.4474:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E584F3-65D0-4D38-ABBB-83C86CDF169D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB6338-23B0-4C1D-97C2-345A22EDCFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7C8297-0E65-4659-8049-34401194D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D10DEC-49BC-4226-83CE-0C4B805CD296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A67F6-415F-4B0E-AA2B-40286CC492A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B637567-0958-488D-ACCA-E5A61D71433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9579A4DB-D506-4570-9C40-1CB4BD666A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F53D97-D600-4AB1-8898-2491AC8B90A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00080&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00080&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10068",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2018-01-18T02:29:16.037",
      "lastModified" : "2024-11-21T03:05:17.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Dashboards). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (subcomponente: Analytics Web Dashboards). La versión compatible afectada es la 12.2.1.3.0. Esta vulnerabilidad fácilmente explotable permite que un atacante no autenticado que tenga acceso a red por HTTP comprometa la seguridad de Oracle Business Intelligence Enterprise Edition. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle Business Intelligence Enterprise Edition, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Business Intelligence Enterprise Edition; así como en la actualización, inserción o supresión sin autorización de algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition. CVSS 3.0 Base Score 8.2 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102535",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040207",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10262",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2018-01-18T02:29:16.070",
      "lastModified" : "2024-11-21T03:05:46.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Access Manager de Oracle Fusion Middleware (subcomponente: Web Server Plugin). La versión compatible afectada es la 11.1.2.3.0. Una vulnerabilidad difícilmente explotable permite que un atacante sin autenticar que tenga acceso a red por HTTPS comprometa la seguridad de Oracle Access Manager. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a información crítica o un acceso completo a todos los datos accesibles de Oracle Access Manager. CVSS 3.0 Base Score 5.9 (impactos en la confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEAFEDC-2D0F-4A5F-99A0-BD41DD6DC017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102562",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040211",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10273",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2018-01-18T02:29:16.130",
      "lastModified" : "2024-11-21T03:05:48.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Deployment). Supported versions that are affected are 11.1.1.7.0, 11.1.1.7.1, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to compromise Oracle JDeveloper. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle JDeveloper, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle JDeveloper accessible data as well as unauthorized read access to a subset of Oracle JDeveloper accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle JDeveloper. CVSS 3.0 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle JDeveloper de Oracle Fusion Middleware (subcomponente: Deployment). Las versiones soportadas que se han visto afectadas son la 11.1.1.7.0, 11.1.1.7.1, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 y la 12.2.1.2.0 Una vulnerabilidad difícilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta Oracle JDeveloper comprometa la seguridad de Oracle JDeveloper. Para que los ataques tengan éxito, se necesita la participación de otra persona diferente del atacante y, aunque la vulnerabilidad está presente en Oracle JDeveloper, los ataques podrían afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado de actualización, inserción o supresión de algunos de los datos accesibles de Oracle JDeveloper, así como el acceso de lectura sin autorización a un subconjunto de datos accesibles de Oracle JDeveloper. Además, esto podría dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Oracle JDeveloper. CVSS 3.0 Base Score 4.7 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EF593B-376C-4367-B9FB-1F429062576C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9124B7-0F2C-4018-B5B5-5BA659333933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7506589-9B3B-49BA-B826-774BFDCC45B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:11.1.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70A973-A5C5-4E51-B93C-C22888E24FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042C243F-EDFE-4A04-AB0B-26E73CC34837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdeveloper:12.2.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739DC3EA-E25A-449B-8468-9A65AECC47C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102569",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040207",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43848/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43848/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10282",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2018-01-18T02:29:16.163",
      "lastModified" : "2024-11-21T03:05:49.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Core RDBMS. CVSS 3.0 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Core RDBMS de Oracle Database Server. Las versiones compatibles que se han visto afectadas son la 12.1.0.2 y la 12.2.0.1. Una vulnerabilidad fácilmente explotable permite que un atacante con un alto nivel de privilegios y con permisos Create Session y Execute Catalog Role que tenga acceso a red por medio de Oracle Net comprometa la seguridad de Core RDBMS. Aunque la vulnerabilidad está presente en Core RDBMS, los ataques podrían afectar ligeramente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Core RDBMS. CVSS 3.0 Base Score 9.1 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102534",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040196",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10301",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2018-01-18T02:29:16.210",
      "lastModified" : "2024-11-21T03:05:51.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente PeopleSoft Enterprise PRTL Interaction Hub de Oracle PeopleSoft Products (subcomponente: Enterprise Portal). La versión compatible afectada es la 9.1.00. Esta vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios con acceso en red via HTTP comprometa la seguridad de PeopleSoft Enterprise PRTL Interaction Hub. Los ataques exitosos a esta vulnerabilidad pueden resultar en la creación, supresión o modificación sin autorización de datos de suma importancia o de todos los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub, así como el acceso sin autorización a datos de nivel de importancia crítico o todos los datos accesibles de PeopleSoft Enterprise PRTL Interaction Hub. CVSS 3.0 Base Score 8.1 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:9.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC20375-ADA5-47EB-A97D-BA5A64FCA55C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102599",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040204",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5699",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-01-18T02:29:17.210",
      "lastModified" : "2024-11-21T03:28:14.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Input validation error in Intel MinnowBoard 3 Firmware versions prior to 0.65 allow local attacker to cause denial of service via UEFI APIs."
      }, {
        "lang" : "es",
        "value" : "Error de validación de entradas en Intel MinnowBoard 3 con versiones de firmware anteriores a la 0.65 permiten que un atacante local provoque una denegación de servicio mediante API UEFI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:minnowboard_3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.65",
            "matchCriteriaId" : "6558913C-5D12-4BC1-A91D-06BA219D0CD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:minnowboard_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1ED7B0-6ADC-4E7E-942B-9D2D50E1EF14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://edk2-docs.gitbooks.io/security-advisory/content/uefi-variable-deletioncorruption.html",
        "source" : "secure@intel.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://edk2-docs.gitbooks.io/security-advisory/content/uefi-variable-deletioncorruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12307",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-18T06:29:00.207",
      "lastModified" : "2024-11-21T03:09:16.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting and injecting code into a user request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches, Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvg24637."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Cisco Small Business Managed Switches Software podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de Cross-Site Scripting (XSS) reflejado contra un usuario de dicha interfaz en el sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando e inyectando código en una petición de usuario. Un exploit con éxito podría permitir que el atacante ejecute código script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Esta vulnerabilidad afecta a los siguientes productos de Cisco Small Business 300 and 500 Series Managed Switches: Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches, Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches y Cisco ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvg24637."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "E62A8CD6-FD0B-4F93-A521-A574470806AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79843C24-2CE8-4040-9C04-79902D8F741D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "2E28746B-DDAF-48C3-98D2-6DF02F10402B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD650E51-E248-4CFD-8163-72717B66D675"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "7DB647C6-4F49-44B3-B5DC-1CB4B2808809"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B36A173-5C14-4B38-B3DD-CD83B19AF94B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg355-10p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D42E184D-0BB9-4632-A910-7223EF5846DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg355-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4432E33-8F3C-4C51-8AE3-C53333A867E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "4D9AE8D4-8324-47DE-8A1B-002F04791CF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F9351-FA0C-4648-A2A6-ACFF6C8FD157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "4D3EAE27-6D3D-427E-B94B-E65FF60A477F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8122322F-6104-4978-9E00-40437365FF67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1FA8309E-218A-4EBB-86CB-53568F87AE03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11548FB9-ADB1-4281-B89B-6D61836072DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "18D13620-A801-4837-A2D9-D8BB5EC67C8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF58ED1-AECE-435C-8F8F-6053C44E01C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FC203EBF-AADC-4536-A3A8-8FAD7EF49F66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BE66F3-51C8-42D8-927A-5BA0B9B072EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3250E1B1-3478-4089-8D4D-210CF5382396"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DE3B15-DD70-445E-936C-0C9D5C3F1450"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-2f10_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1C40A90E-B0CC-4713-858A-CE98FA73A59A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-2f10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C65522C-E250-408C-8A89-AFE4909804D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-24f_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "CA0176C1-1AC1-4A05-B2C7-E1E4C76A61FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620FE5-567B-4B78-910D-14819E2CDE3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-24t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "59267A4D-846E-4E07-9158-7AB7AE6A8754"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-24t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEA8A38-C545-49AA-812F-8668EED9B23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-48t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FCFACA27-EBA0-44A2-ADDB-16701EE476A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-48t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F986FD6-A139-43CA-9D83-40CAA8D62B32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "8CB0A209-D8D2-48E9-9A83-A4EFFD5EBDC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB21D371-D443-40FE-8DFF-3DD4A9655471"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "BE38A4A5-81FC-4A79-8E8F-F6B288ED2283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FC4FC7-5DF4-4FE5-87A5-3B897FAFD72E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "B981B6EB-AAEE-4B4E-86B1-005E11D1DB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9879BE9-D4FA-4EEA-8852-B972299220E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3D496D2D-84AF-47A4-BC5E-607C7E5E6DF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613300D2-A079-415A-B9F7-178B8048AA61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "19A38D74-522F-4001-97C8-8F3D33AC9DC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA11905-1953-4EEB-95CE-3BDB619D0F72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "03436FAE-7FBF-4C4A-9EE4-3FD94316ED25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D1DE6B-6E09-40CF-9507-867ECB183A30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-16ft_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "6961B4DB-F152-43A6-9440-6655BCAD379F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-16ft:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D9BEB5-78FE-49EB-92BE-6597E7608E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24ft_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "2E912AC1-B82E-406B-8480-720223F2FD74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24ft:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDE246-7DF9-486D-A5B9-5596FE0AC582"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-12f_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "438E02A3-D177-4476-80DA-0C95C783B161"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52D0E9C-FC04-4A45-81D5-A335B30F725E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24f_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "CA6AE9A9-61D3-4CE4-B1D3-029734397956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CAD50CE-8D02-4FD9-965A-7C14D146B52D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "142DCA4A-57D6-48C0-ADD9-749E9B8464D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39E214D-A4B7-460C-9402-8F94336B30A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D7CEC74C-D5FE-45CA-83A1-15F771958993"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297A662D-BD11-4021-8F19-946CA4BCF8D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "46470295-0C82-4D37-A9CE-722CAEED6008"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADB1D69-CBDC-4045-A806-087878560EF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "9162932E-4570-4A6C-8634-1D756EF42C7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B88075-F579-492C-B87C-5E4291D269B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FAB16572-975A-473E-8EDA-757BE49CDFCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605B8DE5-56EB-4FFF-BC04-1B3A38762727"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "662D1FD6-5DBB-4DC3-A11E-00AA87A3DF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C940275E-41A8-470D-AD97-AB6EC5A75CEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F584E122-98B8-4F6F-92F1-4A6C83C3B934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235AAB5A-9D0A-4864-89E2-D69D1D8A79D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F6B8D73B-BEF3-4006-9ED4-5C8F98B479D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DCE55-B7D5-4D63-9693-B42FAA9243B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F96925BF-73FC-454B-9B00-632EB2A1E1E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA6BED3-2564-4A7C-91DC-F843E301A35E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "752F1EF7-FA82-4B8E-B8B6-5939270DB705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C2EAA-CD47-4D76-BBC6-C59D531AB1D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FB932882-F8F9-44ED-A673-9A07211D5D7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDF26D7-B3B5-47CA-94E9-B14BEFE02318"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "857756BD-B680-43EE-9FDB-F5FD56D7A1AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC0655-0F02-4397-881F-CFB6DAC3AA3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "28F46707-41BD-4118-933D-1FF48045880E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C374EB87-A4C6-43FB-B42E-DEA973375EC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "37DB9ADA-FCCF-407A-A18D-530FF0815551"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903E59DA-DE59-4CD4-BE32-B91DDA1DA07D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A4B89E91-97B0-47EE-BC1E-D0A0098C8C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6AFC45-9ECC-4D4A-80BF-20F49C83A57A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-350g-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "50CB4BA4-E815-4506-A6FE-21B1F41EEEDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-350g-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6812853E-C083-4841-A467-91130ED194BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-350g-52dc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "666E6BEC-32C1-4361-AF78-3B5739D38378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-350g-52dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A7AB18-C75F-4C63-9132-140EFC46E3C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "5803FD62-086B-4316-BDFC-331156C208FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B70093-E9FE-410A-973E-CE847F08F43A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-550x-48dc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "4015A3F7-5706-40E9-84AD-A81D9205B2CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-550x-48dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3503F68-CF84-468E-9A40-9F98875DD1C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "98827546-CA39-4D4E-9C0F-D3B020BE08D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFEF3C3-0C7C-4359-A45F-00152ACAB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D4B42742-D701-4AE9-A833-189FB6708FC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19890DBE-F1B9-4454-8738-AC2AC6704C75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D3E798EF-99B0-4D76-B0F2-6FB9499FCF8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1772C3-48DB-4BEF-9F12-CDCC3BBFA0E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3A289E57-D99E-4A61-BEE3-91A43F156030"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD7CDE3-7247-4EA9-8A72-7ABC961BD895"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A415AFE8-B965-45B7-B01F-E3F8F79F8EDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7B70CB-9D7A-4637-8A51-634157F7AC85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "AD23FB5D-9A7F-4A03-A269-A6FE486677D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5248F85-411D-4ED9-983C-A28A90C8FC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "61764001-8BCD-4D43-9324-9ADED2F2890C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F6741-AA56-47EA-998C-78FD7F6B01CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A61B9373-76C9-4EFC-B4AF-EB8833310750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C96B794-16D3-46FE-8A2B-262BD38994E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "58E2227C-F7C1-424A-B5C5-5C4BDF052521"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5307DEF-DCD1-417A-B649-FF4DCE66193E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3E2BDD45-5A8B-494A-A9BE-597ABD9B16D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F6D7AC-2ACB-4693-AB8E-C700B99C5BF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "B8982BA5-8ABD-4235-8D24-90F4C949C583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9054C3D1-BA1A-4BAC-8834-88673B804E4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FDB31016-63A8-4436-A4A5-605E79071A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B44981-5C59-4328-A7DB-FBF50F9C92C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1BC8B43A-27FD-4188-9247-11796701FF22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D5109D-C78B-4362-B000-0AA073FCC843"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "6F611F78-9D39-4970-B43B-D634203D6F2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D909B9-5B11-401E-8484-D6CD39D64142"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "49E144D2-93D7-4F19-8C96-50CB5BA0FBCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8124725E-8340-43BC-BEBB-BC39E3AE7368"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F0D8F03D-511A-42FC-8A89-0C69A4BC0D13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74DB8D8-B79B-4DAE-BF88-98C1F518E76D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "DA114A88-569D-4B50-A908-2CD30EF15D74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765DECDB-4234-4444-B78F-01C1DCBAD8FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "DC685D61-7F81-4877-A5A4-E1AE0D2298BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A677CE-4360-4780-ABF9-466C45CB19E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "CE87339F-65FC-4BFA-9C5F-6E1E7CA08E2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C97D56-2E3C-4F36-89E2-BC169AED3CC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "B2D46DE3-626E-407D-A5CA-B05E32F1B6C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E26EE1D-763F-4893-9997-F4C1CE7A1089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F600F290-8723-42BE-9E6A-587132ECE8F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C324F7E3-2088-452F-B049-519A9D25C9B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F1E85841-5E82-4D66-B7E7-C8AE8A11E1BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04042998-72B6-4215-9264-CC563E51D9CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1BCAC9EF-CCF9-4BD2-AADD-A3F48B95B52C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4882366A-9450-47BE-BE70-CC3A9D2F5275"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F214C861-ECCF-4734-9866-E237F5CC5D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B402FBC0-91FC-471D-9D8A-C71F4FECF338"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "6791A301-2164-4F44-8B03-91B96BE2CDD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2B761-E591-42B6-B62F-63A6D41F4FAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "03FF785B-6274-4092-9E43-3396F4FE8CAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9DF9C4-9D06-4449-8AF0-8322C6B77F6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "0C38DF13-3C4A-4CB5-9205-74670FC0C8E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C3B5A2-CAE6-4E75-A1A3-4FCB1C62A7A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "76E523C7-CF2B-430B-829E-D803AA1CDE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6035EA-0F55-4C76-9E2F-DD4938576D1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "ADCEE83B-369D-4F38-AE97-9ABD11A20DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E534B2-12EA-489B-A939-4F1965B5EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500xg-8f8t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "54B4BEBC-BC5E-4003-9B34-E2A6896F509D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500xg-8f8t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FE0E3E-5AB4-4BBA-A787-072799BF3EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "0CF964C5-4CA9-4D81-B60E-2BEDEF47E571"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0F8958-8059-411B-86C8-40B1073C80C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "30B99E44-30D9-4AF1-97D5-EA2DCAF6E825"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218D6018-551C-46B8-AE27-F88E6052F37B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "41879534-43D0-476A-931C-2E8B187D456E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB8DE78-E398-458B-98EF-EEEB6E219BAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "975C54C6-B3B0-4C89-9C35-05BBEF6E75C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E443C685-F000-4F89-ADEA-7084138018D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A1DC345D-BEB3-409A-803C-D7FE72EFB073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0779C5EE-C145-4C28-8F60-EE692409102D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "23C93EF7-4851-4E4E-A600-BAD62254D707"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D4AD6-C5FD-40D8-B002-2B784EC88B89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D89D488C-0582-4338-8848-EEA8DB6AC2DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40273E59-7C60-4094-B9FC-A633A2F23E61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "00F8E3E4-55D4-43A7-8564-167A2A32DED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A201E5-0603-4C96-8F4B-87934B7B99D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1BA5FC05-98F4-4A8C-91E0-703784F5970C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9D4D4-EF09-4862-B62A-94913AEFA2BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A55371BC-B4A3-4E56-AE2E-63BD3D5835D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0093FE2A-3D4C-4435-AE35-D213C9700771"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A7C44E0B-336B-466C-85E0-F92626456CED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D71EE-64CC-4966-98D1-C0697816120A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "7E12126E-E0E3-479D-B5FA-578683C70050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E99C3C2-0B98-4108-8102-80132BF47A32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102718",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb1",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12308",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-18T06:29:00.267",
      "lastModified" : "2024-11-21T03:09:16.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el framework web de Cisco Small Business Managed Switches Software podría permitir que un atacante remoto sin autenticar lleve a cabo un ataque de separación de respuesta HTTP contra un usuario de dicha interfaz en el sistema afectado. La vulnerabilidad se debe a una validación de entrada insuficiente de algunos parámetros que se pasan al servidor web del sistema afectado. Un atacante podría explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petición de usuario e inyectando código malicioso en la petición. Un exploit con éxito podría permitir que el atacante ejecute código script arbitrario en el contexto de la interfaz web afectada o que acceda a información sensible del navegador. Esta vulnerabilidad afecta a los siguientes productos de Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches y Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "E62A8CD6-FD0B-4F93-A521-A574470806AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79843C24-2CE8-4040-9C04-79902D8F741D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "2E28746B-DDAF-48C3-98D2-6DF02F10402B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD650E51-E248-4CFD-8163-72717B66D675"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-10mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "7DB647C6-4F49-44B3-B5DC-1CB4B2808809"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-10mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B36A173-5C14-4B38-B3DD-CD83B19AF94B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg355-10p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D42E184D-0BB9-4632-A910-7223EF5846DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg355-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4432E33-8F3C-4C51-8AE3-C53333A867E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "4D9AE8D4-8324-47DE-8A1B-002F04791CF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500F9351-FA0C-4648-A2A6-ACFF6C8FD157"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "4D3EAE27-6D3D-427E-B94B-E65FF60A477F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8122322F-6104-4978-9E00-40437365FF67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350-28mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1FA8309E-218A-4EBB-86CB-53568F87AE03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350-28mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11548FB9-ADB1-4281-B89B-6D61836072DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "18D13620-A801-4837-A2D9-D8BB5EC67C8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF58ED1-AECE-435C-8F8F-6053C44E01C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FC203EBF-AADC-4536-A3A8-8FAD7EF49F66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BE66F3-51C8-42D8-927A-5BA0B9B072EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf350-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3250E1B1-3478-4089-8D4D-210CF5382396"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf350-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DE3B15-DD70-445E-936C-0C9D5C3F1450"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-2f10_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1C40A90E-B0CC-4713-858A-CE98FA73A59A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-2f10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C65522C-E250-408C-8A89-AFE4909804D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-24f_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "CA0176C1-1AC1-4A05-B2C7-E1E4C76A61FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9620FE5-567B-4B78-910D-14819E2CDE3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-24t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "59267A4D-846E-4E07-9158-7AB7AE6A8754"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-24t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEA8A38-C545-49AA-812F-8668EED9B23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350xg-48t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FCFACA27-EBA0-44A2-ADDB-16701EE476A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350xg-48t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F986FD6-A139-43CA-9D83-40CAA8D62B32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "8CB0A209-D8D2-48E9-9A83-A4EFFD5EBDC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB21D371-D443-40FE-8DFF-3DD4A9655471"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "BE38A4A5-81FC-4A79-8E8F-F6B288ED2283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FC4FC7-5DF4-4FE5-87A5-3B897FAFD72E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "B981B6EB-AAEE-4B4E-86B1-005E11D1DB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9879BE9-D4FA-4EEA-8852-B972299220E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3D496D2D-84AF-47A4-BC5E-607C7E5E6DF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613300D2-A079-415A-B9F7-178B8048AA61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "19A38D74-522F-4001-97C8-8F3D33AC9DC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA11905-1953-4EEB-95CE-3BDB619D0F72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg350x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "03436FAE-7FBF-4C4A-9EE4-3FD94316ED25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg350x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D1DE6B-6E09-40CF-9507-867ECB183A30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-16ft_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "6961B4DB-F152-43A6-9440-6655BCAD379F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-16ft:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D9BEB5-78FE-49EB-92BE-6597E7608E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24ft_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "2E912AC1-B82E-406B-8480-720223F2FD74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24ft:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDE246-7DF9-486D-A5B9-5596FE0AC582"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-12f_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "438E02A3-D177-4476-80DA-0C95C783B161"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52D0E9C-FC04-4A45-81D5-A335B30F725E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24f_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "CA6AE9A9-61D3-4CE4-B1D3-029734397956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CAD50CE-8D02-4FD9-965A-7C14D146B52D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "142DCA4A-57D6-48C0-ADD9-749E9B8464D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39E214D-A4B7-460C-9402-8F94336B30A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sx550x-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D7CEC74C-D5FE-45CA-83A1-15F771958993"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sx550x-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297A662D-BD11-4021-8F19-946CA4BCF8D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "46470295-0C82-4D37-A9CE-722CAEED6008"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADB1D69-CBDC-4045-A806-087878560EF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "9162932E-4570-4A6C-8634-1D756EF42C7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B88075-F579-492C-B87C-5E4291D269B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FAB16572-975A-473E-8EDA-757BE49CDFCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605B8DE5-56EB-4FFF-BC04-1B3A38762727"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-24mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "662D1FD6-5DBB-4DC3-A11E-00AA87A3DF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-24mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C940275E-41A8-470D-AD97-AB6EC5A75CEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F584E122-98B8-4F6F-92F1-4A6C83C3B934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235AAB5A-9D0A-4864-89E2-D69D1D8A79D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F6B8D73B-BEF3-4006-9ED4-5C8F98B479D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DCE55-B7D5-4D63-9693-B42FAA9243B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg550x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F96925BF-73FC-454B-9B00-632EB2A1E1E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg550x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA6BED3-2564-4A7C-91DC-F843E301A35E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "752F1EF7-FA82-4B8E-B8B6-5939270DB705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C2EAA-CD47-4D76-BBC6-C59D531AB1D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FB932882-F8F9-44ED-A673-9A07211D5D7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDF26D7-B3B5-47CA-94E9-B14BEFE02318"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "857756BD-B680-43EE-9FDB-F5FD56D7A1AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC0655-0F02-4397-881F-CFB6DAC3AA3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "28F46707-41BD-4118-933D-1FF48045880E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C374EB87-A4C6-43FB-B42E-DEA973375EC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "37DB9ADA-FCCF-407A-A18D-530FF0815551"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903E59DA-DE59-4CD4-BE32-B91DDA1DA07D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf550x-48mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A4B89E91-97B0-47EE-BC1E-D0A0098C8C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf550x-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6AFC45-9ECC-4D4A-80BF-20F49C83A57A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-350g-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "50CB4BA4-E815-4506-A6FE-21B1F41EEEDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-350g-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6812853E-C083-4841-A467-91130ED194BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-350g-52dc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "666E6BEC-32C1-4361-AF78-3B5739D38378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-350g-52dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A7AB18-C75F-4C63-9132-140EFC46E3C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-550x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "5803FD62-086B-4316-BDFC-331156C208FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-550x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B70093-E9FE-410A-973E-CE847F08F43A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:esw2-550x-48dc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "4015A3F7-5706-40E9-84AD-A81D9205B2CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw2-550x-48dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3503F68-CF84-468E-9A40-9F98875DD1C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "98827546-CA39-4D4E-9C0F-D3B020BE08D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFEF3C3-0C7C-4359-A45F-00152ACAB545"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D4B42742-D701-4AE9-A833-189FB6708FC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19890DBE-F1B9-4454-8738-AC2AC6704C75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D3E798EF-99B0-4D76-B0F2-6FB9499FCF8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1772C3-48DB-4BEF-9F12-CDCC3BBFA0E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3A289E57-D99E-4A61-BEE3-91A43F156030"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD7CDE3-7247-4EA9-8A72-7ABC961BD895"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A415AFE8-B965-45B7-B01F-E3F8F79F8EDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7B70CB-9D7A-4637-8A51-634157F7AC85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "AD23FB5D-9A7F-4A03-A269-A6FE486677D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5248F85-411D-4ED9-983C-A28A90C8FC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "61764001-8BCD-4D43-9324-9ADED2F2890C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6F6741-AA56-47EA-998C-78FD7F6B01CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A61B9373-76C9-4EFC-B4AF-EB8833310750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C96B794-16D3-46FE-8A2B-262BD38994E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "58E2227C-F7C1-424A-B5C5-5C4BDF052521"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5307DEF-DCD1-417A-B649-FF4DCE66193E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "3E2BDD45-5A8B-494A-A9BE-597ABD9B16D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F6D7AC-2ACB-4693-AB8E-C700B99C5BF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "B8982BA5-8ABD-4235-8D24-90F4C949C583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9054C3D1-BA1A-4BAC-8834-88673B804E4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "FDB31016-63A8-4436-A4A5-605E79071A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B44981-5C59-4328-A7DB-FBF50F9C92C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1BC8B43A-27FD-4188-9247-11796701FF22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D5109D-C78B-4362-B000-0AA073FCC843"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "6F611F78-9D39-4970-B43B-D634203D6F2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D909B9-5B11-401E-8484-D6CD39D64142"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "49E144D2-93D7-4F19-8C96-50CB5BA0FBCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8124725E-8340-43BC-BEBB-BC39E3AE7368"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F0D8F03D-511A-42FC-8A89-0C69A4BC0D13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74DB8D8-B79B-4DAE-BF88-98C1F518E76D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "DA114A88-569D-4B50-A908-2CD30EF15D74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765DECDB-4234-4444-B78F-01C1DCBAD8FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "DC685D61-7F81-4877-A5A4-E1AE0D2298BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A677CE-4360-4780-ABF9-466C45CB19E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "CE87339F-65FC-4BFA-9C5F-6E1E7CA08E2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C97D56-2E3C-4F36-89E2-BC169AED3CC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "B2D46DE3-626E-407D-A5CA-B05E32F1B6C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E26EE1D-763F-4893-9997-F4C1CE7A1089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F600F290-8723-42BE-9E6A-587132ECE8F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C324F7E3-2088-452F-B049-519A9D25C9B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F1E85841-5E82-4D66-B7E7-C8AE8A11E1BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04042998-72B6-4215-9264-CC563E51D9CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1BCAC9EF-CCF9-4BD2-AADD-A3F48B95B52C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4882366A-9450-47BE-BE70-CC3A9D2F5275"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "F214C861-ECCF-4734-9866-E237F5CC5D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B402FBC0-91FC-471D-9D8A-C71F4FECF338"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "6791A301-2164-4F44-8B03-91B96BE2CDD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB2B761-E591-42B6-B62F-63A6D41F4FAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "03FF785B-6274-4092-9E43-3396F4FE8CAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9DF9C4-9D06-4449-8AF0-8322C6B77F6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "0C38DF13-3C4A-4CB5-9205-74670FC0C8E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C3B5A2-CAE6-4E75-A1A3-4FCB1C62A7A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "76E523C7-CF2B-430B-829E-D803AA1CDE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6035EA-0F55-4C76-9E2F-DD4938576D1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "ADCEE83B-369D-4F38-AE97-9ABD11A20DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E534B2-12EA-489B-A939-4F1965B5EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500xg-8f8t_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "54B4BEBC-BC5E-4003-9B34-E2A6896F509D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500xg-8f8t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FE0E3E-5AB4-4BBA-A787-072799BF3EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "0CF964C5-4CA9-4D81-B60E-2BEDEF47E571"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0F8958-8059-411B-86C8-40B1073C80C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "30B99E44-30D9-4AF1-97D5-EA2DCAF6E825"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218D6018-551C-46B8-AE27-F88E6052F37B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "41879534-43D0-476A-931C-2E8B187D456E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB8DE78-E398-458B-98EF-EEEB6E219BAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "975C54C6-B3B0-4C89-9C35-05BBEF6E75C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E443C685-F000-4F89-ADEA-7084138018D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A1DC345D-BEB3-409A-803C-D7FE72EFB073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0779C5EE-C145-4C28-8F60-EE692409102D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "23C93EF7-4851-4E4E-A600-BAD62254D707"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D4AD6-C5FD-40D8-B002-2B784EC88B89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "D89D488C-0582-4338-8848-EEA8DB6AC2DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40273E59-7C60-4094-B9FC-A633A2F23E61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "00F8E3E4-55D4-43A7-8564-167A2A32DED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A201E5-0603-4C96-8F4B-87934B7B99D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "1BA5FC05-98F4-4A8C-91E0-703784F5970C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9D4D4-EF09-4862-B62A-94913AEFA2BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-24p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A55371BC-B4A3-4E56-AE2E-63BD3D5835D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0093FE2A-3D4C-4435-AE35-D213C9700771"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "A7C44E0B-336B-466C-85E0-F92626456CED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D71EE-64CC-4966-98D1-C0697816120A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.7.0",
            "versionEndExcluding" : "1.4.9.4",
            "matchCriteriaId" : "7E12126E-E0E3-479D-B5FA-578683C70050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E99C3C2-0B98-4108-8102-80132BF47A32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-18T14:29:00.303",
      "lastModified" : "2024-11-21T03:15:22.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en knowledgebase.php en LiveZilla en versiones anteriores a la 7.0.8.9 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro search-for."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livezilla:livezilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.8.9",
            "matchCriteriaId" : "A34612D4-25DA-47F6-9249-3CE026EEA953"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541688/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.livezilla.net/changelog/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pallas.com/advisories/cve-2017-15869-livezilla-xss-knowledgebase",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541688/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.livezilla.net/changelog/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pallas.com/advisories/cve-2017-15869-livezilla-xss-knowledgebase",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18033",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-18T14:29:00.383",
      "lastModified" : "2024-11-21T03:19:12.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery (CSRF) vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Jira-importers-plugin en Atlassian Jira en versiones anteriores a la 7.6.1 permite que atacantes remotos creen nuevos proyectos y anulen la importación de un sistema externo en ejecución mediante varias vulnerabilidades de Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "A2F243B1-7B91-4254-8F09-A516329EE956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102744",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66643",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15520",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-01-18T17:29:00.237",
      "lastModified" : "2023-11-07T02:40:13.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15521",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-01-18T17:29:00.283",
      "lastModified" : "2023-11-07T02:40:13.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15522",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-01-18T17:29:00.347",
      "lastModified" : "2023-11-07T02:40:13.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15523",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-01-18T17:29:00.440",
      "lastModified" : "2023-11-07T02:40:13.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17838",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-18T17:29:00.487",
      "lastModified" : "2023-11-07T02:41:46.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17839",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-18T17:29:00.550",
      "lastModified" : "2023-11-07T02:41:47.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16863",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-18T18:29:00.340",
      "lastModified" : "2024-11-21T03:17:07.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a project or filter."
      }, {
        "lang" : "es",
        "value" : "El gadget PieChart en Atlassian Jira en versiones anteriores a la 7.5.3 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) mediante el nombre de un proyecto o filtro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.5.3",
            "matchCriteriaId" : "477C1D5A-7CB7-44C9-B6B9-6686D6D7BBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102732",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66623",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12729",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-18T19:29:00.237",
      "lastModified" : "2024-11-21T03:10:06.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección SQL en Moxa SoftCMS Live Viewer hasta la versión 1.6. Se ha identificado una vulnerabilidad de neutralización indebida de elementos especiales usada en un comando SQL (\"inyección SQL\"). Los atacantes pueden explotar esta vulnerabilidad para acceder a SoftCMS sin conocer la contraseña de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxa:softcms_lab_view:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "BD892AF4-0CA2-49FA-8E36-AF25E2504604"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-243-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-243-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5170",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-01-18T19:29:00.283",
      "lastModified" : "2024-11-21T03:27:11.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. The attacker needs to have administrative access to the default install location in order to plant the insecure DLL. Once loaded by the application, the DLL could run malicious code at the privilege level of the application."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de elemento de ruta de búsqueda no controlado en Moxa SoftNVR-IA Live Viewer en la versión 3.30.3122 y anteriores. Se ha identificado una vulnerabilidad de elemento de ruta de búsqueda no controlado (DLL hijacking). Para explotar esta vulnerabilidad, un atacante podría renombrar un DLL malicioso para que cumpla con los criterios de la aplicación, que no verificaría si el DLL es correcto. El atacante necesita contar con acceso administrativo a la ubicación de instalación por defecto para colocar el DLL inseguro. Una vez haya sido cargado por la aplicación, el DLL podría ejecutar código malicioso al nivel privilegiado de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moxa:softnvr-ia_live_view:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3",
            "matchCriteriaId" : "80B926DA-CECE-4B4E-B4A4-8083B82DF74D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100208",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-220-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-220-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3158",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-18T20:29:00.257",
      "lastModified" : "2024-11-21T03:24:56.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en el emulador de terminal Guacamole en versiones 0.9.5 hasta la versión 0.9.10-incubating podría permitir que se solapen escrituras de bloques de datos impresos. Estas escrituras solapadas podrían provocar que los datos del paquete se lean de forma incorrecta como la longitud del paquete, lo que resultaría en que los datos que quedan se escribirían más allá del final de un búfer asignado estáticamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:guacamole:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.9",
            "matchCriteriaId" : "7CA16CBF-F157-4C52-9B9C-7FCF4E8F2B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:guacamole:0.9.10-incubating:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FD0727-B3B1-462B-8D32-6EAAD3C4A348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12197",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-18T21:29:00.203",
      "lastModified" : "2024-11-21T03:09:02.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que las versiones hasta, e incluyendo, la 1.8 de libpam4j no validan adecuadamente las cuentas de usuario al autenticarse, Un usuario con una contraseña válida para una cuenta deshabilitada podría omitir las restricciones de seguridad y acceder a información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpam4j_project:libpam4j:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E3678B86-AEC8-4A8A-BADE-AD121B139877"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1503103",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4025",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1503103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-18T22:29:00.233",
      "lastModified" : "2024-11-21T03:18:50.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone"
      }, {
        "lang" : "es",
        "value" : "En productos Samsung Gear, la clave de enlace Bluetooth se actualiza en la clave diferente, que es igual a la clave de enlace del atacante. Puede atacarse sin la intención del usuario solo si el atacante puede revelar la dirección Bluetooth del dispositivo objetivo y el smartphone emparejado del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:gear_s2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E04318-D715-4263-A869-C9203EB7CE75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:gear_s3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6F5890-C7A5-45B2-BADE-118B53BE2667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/open?id=0B5L-0MoH_v7fcGljUS1SYnlkOHM",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/open?id=0B5L-0MoH_v7fcGljUS1SYnlkOHM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1693",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-19T14:29:00.213",
      "lastModified" : "2024-11-21T03:22:13.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164."
      }, {
        "lang" : "es",
        "value" : "IBM Integration Bus 9.0 y 10.0 podría permitir que un atacante que haya capturado un id de sesión válido secuestre la sesión de otro usuario durante una pequeña franja de tiempo antes de que la sesión expire. IBM X-Force ID: 134164."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D627B445-2980-4AC2-B674-CA4C472AB214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725E3F95-4096-497D-8F2A-02C185ACF8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576FE339-BD08-4994-B31A-15BC521650E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C319D81D-E66B-47E6-A731-D5074314B94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:9.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DF80F1-4163-46E0-A304-BD01C11EA658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E6A5C9-29C2-458D-AA67-E74945E2012F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E7A0A-47BD-42EC-A66C-E1F64AD6CA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6309A833-9490-494A-BE3A-BA79133BD6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97486673-4740-4F4F-8956-73C06B477096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E917E9-DE5E-482A-9A20-823DF475BE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC25F42C-82EC-44EE-94AC-E85F428460D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3797766-D2E5-4645-A793-ABA12A10CF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1486EFCC-5D66-4172-9D57-55AB25C77B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:10.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3770768C-96D0-4D8E-8AB5-0347DBE01AF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012642",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102760",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134164",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6142",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-01-19T14:29:00.290",
      "lastModified" : "2024-11-21T03:29:08.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X509 certificate verification was not correctly implemented in the early access \"user id\" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP."
      }, {
        "lang" : "es",
        "value" : "No se implementó correctamente la versificación de certificados X509 en la característica de acceso temprano \"user id\" en F5 BIG-IP Advanced Firewall Manager, en versiones 13.0.0, 12.1.0-12.1.2 y 11.6.0-11.6.2 y, por lo tanto, ni validó correctamente la identidad del servidor remoto en ciertas versiones de BIG-IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "CCE526AF-E3CA-4C29-9043-2838AED9FC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040255",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K20682450",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K20682450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15713",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-19T17:29:00.210",
      "lastModified" : "2024-11-21T03:15:04.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Apache Hadoop 0.23.x, 2.x en versiones anteriores a la 2.7.5, 2.8.x en versiones anteriores a la 2.8.3 y 3.0.0-alpha hasta la versión 3.0.0-beta1 permite que un usuario del clúster exponga archivos privados en propiedad del usuario que ejecuta el proceso del servidor de historial de jobs MapReduce. El usuario malicioso puede construir un archivo de configuración que contiene directivas XML que referencian archivos sensibles en el host del servidor de historial de jobs MapReduce."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.23.0",
            "versionEndIncluding" : "0.23.11",
            "matchCriteriaId" : "2361D3C0-C442-4FBD-A860-F5708E991EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.8.2",
            "matchCriteriaId" : "47B637FE-CA00-45E7-AF2D-D55DE9C758CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "227941BD-D769-45AD-9D61-7FCA3C2264FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF490A-0865-47C0-A143-0991B40BD259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E091799F-203D-4C52-839E-E798770C0287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "80E53689-C56C-4104-B510-CB4116B898CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "591921C3-F7EA-402E-9C36-2EADF0417C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA774A9-81B3-4303-B254-C802B4DC8004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "877CAAE8-5E57-4D0D-A8EB-8CA696D0CE3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "25DB127F-4293-4847-A8C4-C7F6B74762EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AE3E25-0726-4039-A3A8-B53F7CF0E638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "C33530ED-6093-4B4C-AFDB-4DB5EB5878E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "38BCF20D-169E-4847-8880-A223467B8639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "336DADCF-3302-423D-BFDC-72C031AD1CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "689B619C-04C4-43C6-B103-DDAAA9C9CC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:3.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E457B6F-5F01-45C5-8568-7AF598721AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91%40%3Cgeneral.hadoop.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91%40%3Cgeneral.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-19T17:29:00.413",
      "lastModified" : "2024-11-21T03:19:14.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject commands that will be executed on the target operating system. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is a different vulnerability than CVE-2017-3195."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de inyección de comandos en ContentStore/Base/CVDataPipe.dll en Commvault en versiones anteriores a v11 SP6. Cierta función de análisis de mensajes en el servicio Commvault no valida correctamente la entrada de una cadena entrante antes de pasarla a CreateProcess. Como resultado, un mensaje especialmente manipulado puede inyectar comandos que se ejecutarán en el sistema operativo objetivo. La explotación de esta vulnerabilidad no requiere autenticación y puede conducir a privilegios de nivel SYSTEM en cualquier sistema que ejecute el demonio cvd. Esta vulnerabilidad es diferente de CVE-2017-3195."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:commvault:11.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB3CF87-5FB3-4EFD-914C-CC24FD105BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:commvault:11.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC54F2D-EC04-4D7D-B4FB-AD8029486A19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:commvault:11.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A33C3E0B-2F74-4DC6-BD6F-36C6E513037E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:commvault:11.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0F73B6D1-ED63-4198-81A7-68DF152F5944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:commvault:11.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "EADDF944-1512-4636-94EB-56A9B855555D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "36E83C06-C216-4E7B-A4E0-9C706CD89AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9340",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9389",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.securifera.com/advisories/sec-2017-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/9389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.securifera.com/advisories/sec-2017-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7325",
      "sourceIdentifier" : "browser-security@yandex-team.ru",
      "published" : "2018-01-19T17:29:00.477",
      "lastModified" : "2024-11-21T03:31:38.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open."
      }, {
        "lang" : "es",
        "value" : "Yandex Browser, en versiones anteriores a la 16.9.0, permite que atacantes remotos suplanten la barra de direcciones mediante window.open."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yandex:yandex_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.9.0",
            "matchCriteriaId" : "9E68E8AC-2E6D-474B-AEED-4A909A093B0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://browser.yandex.com/security/changelogs/fixed-in-version-16-9",
        "source" : "browser-security@yandex-team.ru",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://browser.yandex.com/security/changelogs/fixed-in-version-16-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7326",
      "sourceIdentifier" : "browser-security@yandex-team.ru",
      "published" : "2018-01-19T17:29:00.523",
      "lastModified" : "2024-11-21T03:31:38.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page"
      }, {
        "lang" : "es",
        "value" : "Un problema de condición de carrera en Yandex Browser for Android, en versiones anteriores a la 17.4.0.16, permitía que un atacante remoto explotase potencialmente una corrupción de memoria mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yandex:yandex_browser:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "85143647-4C03-4D61-811A-C6029A1A9B04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://browser.yandex.com/security/changelogs/fixed-in-version-17-4",
        "source" : "browser-security@yandex-team.ru",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://browser.yandex.com/security/changelogs/fixed-in-version-17-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7327",
      "sourceIdentifier" : "browser-security@yandex-team.ru",
      "published" : "2018-01-19T17:29:00.570",
      "lastModified" : "2024-11-21T03:31:38.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll."
      }, {
        "lang" : "es",
        "value" : "Yandex Browser installer for Desktop en versiones anteriores a la 17.4.1 tiene una vulnerabilidad de secuestro de DLL debido a que se emplea una ruta de búsqueda no fiable para dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll o profapi.dll."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yandex:yandex_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "17.4.0.16",
            "matchCriteriaId" : "32A7E9CA-77CE-4BD3-956C-A2D942389061"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://browser.yandex.com/security/changelogs/fixed-in-version-17-4",
        "source" : "browser-security@yandex-team.ru",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://browser.yandex.com/security/changelogs/fixed-in-version-17-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11398",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2018-01-19T19:29:00.280",
      "lastModified" : "2024-11-21T03:07:42.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro de sesión mediante divulgación de logs en Trend Micro Smart Protection Server (Standalone), en versiones 3.2 y anteriores, podría permitir que un atacante no autenticado secuestre sesiones activas de usuario para realizar peticiones autenticadas en un sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-534"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "20F6330B-124B-4702-BC1E-7A27F24CF5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12098",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T19:29:00.357",
      "lastModified" : "2024-11-21T03:08:49.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) explotable en la funcionalidad add filter de la gema de rails rails_admin en su versión 1.2.0. Una URL especialmente manipulada puede provocar un error de XSS, lo que lleva a que un atacante pueda ejecutar JavaScript arbitrario en el navegador de la víctima. Un atacante puede suplantar a un usuario autenticado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rails_admin_project:rails_admin:1.2.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "BFC9A003-83C3-47E2-B221-1A6B87680CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102486",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0450",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14082",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2018-01-19T19:29:00.420",
      "lastModified" : "2024-11-21T03:12:06.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información de puntero no inicializado en Trend Micro Mobile Security (Enterprise) en versiones 9.7 y anteriores podría permitir que un atacante remoto no autenticado revele información sensible en un sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:mobile_security:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "9.7",
            "matchCriteriaId" : "75377571-A277-4F06-8A97-AFD55E9CF295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102216",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-972/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118993",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-17-972/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14094",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2018-01-19T19:29:00.467",
      "lastModified" : "2024-11-21T03:12:07.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Trend Micro Smart Protection Server (Standalone), en versiones 3.2 y anteriores, podría permitir que un atacante realice la ejecución remota de comandos mediante una inyección cron job en un sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "20F6330B-124B-4702-BC1E-7A27F24CF5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14095",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2018-01-19T19:29:00.517",
      "lastModified" : "2024-11-21T03:12:07.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Trend Micro Smart Protection Server (Standalone), en versiones 3.2 y anteriores, podría permitir que un atacante realice la ejecución remota de comandos mediante una inclusión de archivos locales en un sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "20F6330B-124B-4702-BC1E-7A27F24CF5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14096",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2018-01-19T19:29:00.577",
      "lastModified" : "2024-11-21T03:12:08.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en Trend Micro Smart Protection Server (Standalone) en versiones 3.2 y anteriores podría permitir que un atacante ejecute una carga útil maliciosa en sistemas vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "20F6330B-124B-4702-BC1E-7A27F24CF5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14097",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2018-01-19T19:29:00.657",
      "lastModified" : "2024-11-21T03:12:08.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso incorrecto en Trend Micro Smart Protection Server (Standalone) en versiones 3.2 y anteriores podría permitir que un atacante descifre el contenido de una base de datos con información que podría emplearse para acceder a un sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:smart_protection_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "20F6330B-124B-4702-BC1E-7A27F24CF5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "security@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/1118992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43388/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12097",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T20:29:00.250",
      "lastModified" : "2024-11-21T03:08:49.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Scripting (XSS) explotable en la funcionalidad filter de la gema de rails delayed_job_web en su versión 1.4. Una URL especialmente manipulada puede provocar un error de XSS, lo que lleva a que un atacante pueda ejecutar JavaScript arbitrario en el navegador de la víctima. Un atacante puede suplantar a un usuario autenticado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delayed_job_web_project:delayed_job_web:1.4:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "1CD63FB5-A55B-4B26-978F-9F6C44137661"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12112",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T22:29:00.187",
      "lastModified" : "2024-11-21T03:08:51.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API admin_addPeer del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Una petición JSON puede provocar un acceso a la funcionalidad restringida, lo que resultaría en una omisión de autenticación. Un atacante puede enviar JSON para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0464",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12114",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T22:29:00.250",
      "lastModified" : "2024-11-21T03:08:51.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API admin_peers del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Una petición JSON puede provocar un acceso a la funcionalidad restringida, lo que resultaría en una omisión de autenticación. Un atacante puede enviar JSON para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0466",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12115",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T22:29:00.297",
      "lastModified" : "2024-11-21T03:08:51.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API miner_setEtherbase del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Una petición JSON puede provocar un acceso a la funcionalidad restringida, lo que resultaría en una omisión de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0467",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12117",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T22:29:00.343",
      "lastModified" : "2024-11-21T03:08:51.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API miner_start del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Una petición JSON puede provocar un acceso a la funcionalidad restringida, lo que resultaría en una omisión de autenticación. Un atacante puede enviar JSON para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0469",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12113",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T23:29:00.237",
      "lastModified" : "2024-11-21T03:08:51.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API admin_nodeInfo del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Una petición JSON puede provocar un acceso a la funcionalidad restringida, lo que resultaría en una omisión de autenticación. Un atacante puede enviar JSON para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0465",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12116",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T23:29:00.300",
      "lastModified" : "2024-11-21T03:08:51.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API miner_setGasPrice del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Una petición JSON puede provocar un acceso a la funcionalidad restringida, lo que resultaría en una omisión de autenticación. Un atacante puede enviar JSON para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:aleth:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7290B69E-BCEE-4A91-AE5B-59319ABECF7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0468",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12118",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T23:29:00.347",
      "lastModified" : "2024-11-21T03:08:51.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). An attacker can send JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de autorización indebida en la API miner_stop del JSON-RPC de cpp-ethereum (commit con ID 4e1015743b95821849d001618a7ce82c7c073768). Un atacante puede enviar JSON para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0470",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12119",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T23:29:00.410",
      "lastModified" : "2024-11-21T03:08:52.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de excepción no manipulada en múltiples API del JSON-RPC de cpp-ethereum. Las peticiones JSON especialmente manipuladas pueden provocar una excepción no manipulada, lo que resulta en una denegación de servicio (DoS). Un atacante puede enviar JSON malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E55B68-7499-48B6-A9F8-3A99DDBFC90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0471",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14457",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T23:29:00.473",
      "lastModified" : "2024-11-21T03:12:49.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker can create/send malicious a smart contract to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de fuga de información/denegación de servicio (DoS) en el manipulador opcode \"create2\" de libevm (Ethereum Virtual Machine) en CPP-Ethereum. Un código smart contract especialmente manipulado puede permitir una lectura fuera de límites, que conduce a una revelación de memoria o a una denegación de servicio (DoS). Un atacante puede crear/enviar un smart contract malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:ethereum_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBA3E0A-4163-4D11-9E87-86D27D138EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0503",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14460",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-19T23:29:00.520",
      "lastModified" : "2024-11-21T03:12:50.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent JSON object to JSON-RPC endpoint can trigger this vulnerability. A victim needs to visit a malicious website to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de lista blanca de dominio cruzado demasiado permisivo (CORS) en el JSON-RPC del cliente Parity Ethereum en su versión 1.7.8. Un objeto JSON enviado automáticamente al extremo JSON-RPC puede desencadenar esta vulnerabilidad. Una víctima debe visitar un sitio web malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parity:ethereum_client:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F7016E-D349-4BEC-8247-5753EC85BEE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0508",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12130",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-01-20T00:29:00.280",
      "lastModified" : "2024-11-21T03:08:53.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library dereference a NULL pointer leading to a server crash and denial of service. An attacker needs to send a DNS query to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una desreferencia de puntero NULL en la biblioteca tinysvcmdns en su versión 2017-11-05. Un paquete especialmente manipulado puede hacer que la biblioteca desreferencie un puntero NULL, lo que conduce a un cierre inesperado del servidor y a una denegación de servicio (DoS). Un atacante debe enviar una consulta DNS para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinysvcmdns_project:tinysvcmdns:2017-11-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57145365-CC0C-4201-8367-94DA3E7BC0E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102795",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14803",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-01-20T00:29:00.343",
      "lastModified" : "2024-11-21T03:13:32.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system."
      }, {
        "lang" : "es",
        "value" : "En NetIQ Access Manager 4.3 y 4.4, existe un error en Identity Server al acceder a un conector SSO básico y descargar los plugins BasicSSO connector en IE11, donde un atacante puede ejecutar código arbitrario en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51430A7A-F79D-445D-ABF8-A8B4ADE98FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A890D3-618E-4060-9349-36BA7F7B4240"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022443",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15108",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-20T00:29:00.407",
      "lastModified" : "2024-11-21T03:14:05.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed."
      }, {
        "lang" : "es",
        "value" : "spice-vdagent, hasta e incluyendo la versión 0.17.0, no escapa correctamente el directorio de guardado antes de pasarlo al shell, lo que permite que un atacante local con acceso a la sesión en la que se ejecuta el agente inyecte comandos arbitrarios para su ejecución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice-space:spice-vdagent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.17.0",
            "matchCriteriaId" : "E5F25358-F588-4126-94CC-5A96ECB0E88A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cgit.freedesktop.org/spice/linux/vd_agent/commit/?id=8ba174816d245757e743e636df357910e1d5eb61",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-09",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/spice/linux/vd_agent/commit/?id=8ba174816d245757e743e636df357910e1d5eb61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15111",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-20T00:29:00.467",
      "lastModified" : "2024-11-21T03:14:05.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link."
      }, {
        "lang" : "es",
        "value" : "keycloak-httpd-client-install, en versiones anteriores a la 0.8, crea archivos temporales de forma insegura, lo que permite que atacantes locales sobrescriban otros archivos mediante un enlace simbólico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak-httpd-client-install_project:keycloak-httpd-client-install:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8",
            "matchCriteriaId" : "AD338DCE-487F-49A6-B72F-90037280ACAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/jdennis/keycloak-httpd-client-install/commit/07f26e213196936fb328ea0c1d5a66a09d8b5440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jdennis/keycloak-httpd-client-install/commit/07f26e213196936fb328ea0c1d5a66a09d8b5440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15112",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-20T00:29:00.517",
      "lastModified" : "2024-11-21T03:14:05.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users."
      }, {
        "lang" : "es",
        "value" : "keycloak-httpd-client-install, en versiones anteriores a la 0.8, permite que los usuarios pasen la contraseña de forma no segura a través de la línea de comandos, filtrándola mediante el historial de comandos y procesen la información a otros usuarios locales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak-httpd-client-install_project:keycloak-httpd-client-install:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8",
            "matchCriteriaId" : "AD338DCE-487F-49A6-B72F-90037280ACAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/jdennis/keycloak-httpd-client-install/commit/c3121b271abaaa1a76de2b9ae89dacde0105cd75",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jdennis/keycloak-httpd-client-install/commit/c3121b271abaaa1a76de2b9ae89dacde0105cd75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-21T07:29:00.210",
      "lastModified" : "2024-11-21T03:19:14.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request."
      }, {
        "lang" : "es",
        "value" : "JBMC DirectAdmin, en versiones anteriores a la 1.52, cuando la configuración email_ftp_password_change no es cero, permite que atacantes remotos obtengan acceso o provoquen una denegación de servicio (segfault) mediante una petición sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.52",
            "matchCriteriaId" : "02C40760-7DC2-4F74-AB8E-A69BB3840F07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.directadmin.com/features.php?id=2036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.directadmin.com/features.php?id=2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-21T22:29:00.290",
      "lastModified" : "2024-11-21T03:19:14.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login_action.cgi (aka cgipage.cgi)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en dispositivos Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 y 3.03p2-1146 permite que atacantes remotos ejecuten código arbitrario mediante una petición POST larga en la función login_action en /cgi-bin/login_action.cgi (también conocido como cgipage.cgi)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dasannetworks:h640x_firmware:2.77p1-1124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CACD4F2D-9A70-4979-BEEF-94180B47BC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dasannetworks:h640x_firmware:3.03p2-1146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70991234-BDA1-4D38-8AD2-C65CEF9049AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dasannetworks:h640x_firmware:12.02-01121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0A1D5D-8733-46BC-9351-73F58A1779ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dasannetworks:h640x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518FD01C-1169-4091-ABA9-5C843B7407E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3552",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/Yxd9S46A",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://twitter.com/ankit_anubhav/status/982261670394249216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/Yxd9S46A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://twitter.com/ankit_anubhav/status/982261670394249216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-22T04:29:00.267",
      "lastModified" : "2024-11-21T03:19:14.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el cliente FTP en LabF nfsAxe 3.7 permite que los servidores FTP remotos ejecuten código arbitrario mediante una respuesta larga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:labf:nfsaxe:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB233AB-B65A-4799-8B1D-D7C432223F67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42011/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43236/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43518/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43236/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43518/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-22T15:29:00.210",
      "lastModified" : "2024-11-21T03:18:50.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en la función ensure_solid_xref en pdf/pdf-xref.c en Artifex MuPDF 1.12.0 permite que un atacante remoto pueda ejecutar código arbitrario mediante un archivo PDF manipulado. Esto se debe a que los números de objeto de subsección xref no están restringidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F503888C-29F3-4111-9549-9CD541EAC242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Ba=commit%3Bh=55c3f68d638ac1263a386e0aaa004bb6e8bde731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698819",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/mzet-/Security-Advisories/blob/master/mzet-adv-2017-01.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Ba=commit%3Bh=55c3f68d638ac1263a386e0aaa004bb6e8bde731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/mzet-/Security-Advisories/blob/master/mzet-adv-2017-01.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-22T23:29:00.207",
      "lastModified" : "2024-11-21T03:04:41.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050."
      }, {
        "lang" : "es",
        "value" : "axTLS en su versión 1.5.3 tiene un error de código en el analizador ASN.1, lo que provoca que el año (19)50 en UTCTime se malinterprete como 2050."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axtls_project:axtls:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B8162B-7877-4EC0-A108-B29E16E035AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ieee-security.org/TC/SP2017/papers/231.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=FW--c_F_cY8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ieee-security.org/TC/SP2017/papers/231.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=FW--c_F_cY8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-22T23:29:00.270",
      "lastModified" : "2024-11-21T03:04:41.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g. in ExtKeyUsage extension) on X.509 certificates."
      }, {
        "lang" : "es",
        "value" : "MatrixSSL\tCVE-2017-1000417\tMatrixSSL en su versión 3.7.2 adopta una lógica de comparación OID propensa a colisión, lo que resulta en una posible suplantación de OIDs (por ejemplo, en una extensión ExtKeyUsage) en los certificados X.509."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrixssl:matrixssl:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE4A5B2-03D3-4F69-966B-D10643266C35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrixssl/matrixssl/blob/master/doc/CHANGES.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ieee-security.org/TC/SP2017/papers/231.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=FW--c_F_cY8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrixssl/matrixssl/blob/master/doc/CHANGES.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ieee-security.org/TC/SP2017/papers/231.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=FW--c_F_cY8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16590",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.273",
      "lastModified" : "2024-11-21T03:16:39.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to bypass authentication on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. User interaction is required to exploit this vulnerability. The specific flaw exists within the MainFilter servlet. The issue results from the lack of proper string matching inside the doFilter method. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of Administrator. Was ZDI-CAN-5099."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos omitan la autenticación en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.699 build 1001. Se requiere interacción del usuario para explotar esta vulnerabilidad. Este error en concreto existe en el servlet MainFilter. El problema resulta de la falta de coincidencia de cadenas en el método doFilter. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código arbitrario en el contexto del Administrador. Anteriormente era ZDI-CAN-5099."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-289"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.699:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F921-80F2-43D3-9219-B2DB1CBB9232"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-955",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16591",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.337",
      "lastModified" : "2024-11-21T03:16:39.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.restore.download_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5100."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.699 build 1001. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.restore.download_005fdo_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5100."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.699:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F921-80F2-43D3-9219-B2DB1CBB9232"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-956",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16592",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.380",
      "lastModified" : "2024-11-21T03:16:39.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the common.download_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5103."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet common.download_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5103."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-957",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16593",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.427",
      "lastModified" : "2024-11-21T03:16:39.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.restore.del_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filenames parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete any files accessible to the Administrator user. Was ZDI-CAN-5104."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos eliminen archivos sensibles en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.restore.del_005fdo_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filenames, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante puede aprovechar esta vulnerabilidad para borrar cualquier archivo accesible para el usuario Administrador. Anteriormente era ZDI-CAN-5104."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-958",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16594",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.490",
      "lastModified" : "2024-11-21T03:16:39.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.db.save_005fimage_jsp servlet, which listens on TCP port 8081 by default. When parsing the id parameter, the process does not properly validate user-supplied data, which can allow for the upload of files. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5117."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos creen archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.db.save_005fimage_jsp, que escucha en el puerto TCP 8081 por defecto. Al analizar el parámetro id, el proceso no valida correctamente los datos proporcionados por el usuario, lo que puede permitir la subida de archivos. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5117."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-959",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16595",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.553",
      "lastModified" : "2024-11-21T03:16:39.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.export_005fdownload_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5118."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.reports.export_005fdownload_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5118."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-960",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16596",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.600",
      "lastModified" : "2024-11-21T03:16:40.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.designer.script_005fsamples_jsp servlet, which listens on TCP port 8081 by default. When parsing the type parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5119."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.designer.script_005fsamples_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro type, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5119."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-961",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16597",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.630",
      "lastModified" : "2024-11-21T03:16:40.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of WRQ requests. When parsing the Filename field, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5137."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en el procesamiento de peticiones WRQ. Cuando se analiza sintácticamente el campo Filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5137."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-962",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16598",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.693",
      "lastModified" : "2024-11-21T03:16:40.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.tools.snmpwalk.snmpwalk_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the ip parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5138."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código sobrescribiendo archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.tools.snmpwalk.snmpwalk_005fdo_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro ip, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5138."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-963",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16599",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.740",
      "lastModified" : "2024-11-21T03:16:40.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.misc.sample_jsp servlet, which listens on TCP port 8081 by default. When parsing the type parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5190."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos eliminen archivos sensibles en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.reports.templates.misc.sample_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro type, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovecharse de esta vulnerabilidad y otras para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5190."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-964",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16600",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.787",
      "lastModified" : "2024-11-21T03:16:40.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.network.traffic_005freport_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5191."
      }, {
        "lang" : "es",
        "value" : "NetGain Systems Enterprise Manager\tCVE-2017-16600\tEsta vulnerabilidad permite que atacantes remotos sobrescriban archivos en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.reports.templates.network.traffic_005freport_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante puede aprovechar esta vulnerabilidad para sobrescribir cualquier archivo accesible para el Administrador. Anteriormente era ZDI-CAN-5191."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102528",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-965",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16601",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.867",
      "lastModified" : "2024-11-21T03:16:40.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.service.service_005ffailures_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5192."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos sobrescriban archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.reports.templates.service.service_005ffailures_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante puede aprovechar esta vulnerabilidad para sobrescribir cualquier archivo accesible para el Administrador. Anteriormente era ZDI-CAN-5192."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-966",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16602",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.913",
      "lastModified" : "2024-11-21T03:16:40.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.tools.exec_jsp servlet, which listens on TCP port 8081 by default. When parsing the command parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5193."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.tools.exec_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro command, el proceso no valida correctamente una cadena proporcionada por el usuario antes de emplearla para ejecutar una llamada del sistema. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5193."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-967",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16603",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:00.960",
      "lastModified" : "2024-11-21T03:16:40.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.settings.upload_005ffile_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate user-supplied data, which can allow for the upload of files. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5194."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código creando archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.settings.upload_005ffile_005fdo_jsp, que escucha en el puerto TCP 8081 por defecto. Al analizar el parámetro filename, el proceso no valida correctamente los datos proporcionados por el usuario, lo que puede permitir la subida de archivos. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5194."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-968",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16604",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.023",
      "lastModified" : "2024-11-21T03:16:40.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.cnnic.asset.deviceReport.deviceReport_005fexport_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5195."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos sobrescriban archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.cnnic.asset.deviceReport.deviceReport_005fexport_005fdo_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante puede aprovechar esta vulnerabilidad para sobrescribir cualquier archivo accesible para el Administrador. Anteriormente era ZDI-CAN-5195."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-969",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16605",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.070",
      "lastModified" : "2024-11-21T03:16:41.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet, which listens on TCP port 8081 by default. When parsing the id parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5196."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos sobrescriban archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp.db.save_005fattrs_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro id, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante puede aprovechar esta vulnerabilidad para sobrescribir cualquier archivo accesible para el Administrador. Anteriormente era ZDI-CAN-5196."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102512",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-970",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16606",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.147",
      "lastModified" : "2024-11-21T03:16:41.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp._3d.add_005f3d_005fview_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5197."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código creando archivos arbitrarios en instalaciones vulnerables de NetGain Systems Enterprise Manager 7.2.730 build 1034. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente se puede omitir. El fallo específico existe en el servlet org.apache.jsp.u.jsp._3d.add_005f3d_005fview_005fdo_jsp, que escucha en el puerto TCP 8081 por defecto. Cuando se analiza sintácticamente el parámetro filename, el proceso no valida correctamente una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del Administrador. Anteriormente era ZDI-CAN-5197."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946ECBA4-21CE-470C-8B38-F1553FB66D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-971",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16607",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.210",
      "lastModified" : "2024-11-21T03:16:41.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download heap memory dump. An attacker can leverage this in conjunction with other vulnerabilities to disclose sensitive information in the context of the current process. Was ZDI-CAN-4718."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Netgain Enterprise Manager. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en heapdumps.jsp. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para descargar un volcado de memoria dinámica (heap). Un atacante podría aprovecharse de esta vulnerabilidad y otras para reveñar información sensible en el contexto del actual proceso. Anteriormente era ZDI-CAN-4718."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.766",
            "matchCriteriaId" : "DCAF3357-3AD7-4E1B-BFF9-E008D6C1D826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102219",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-949",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16608",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.257",
      "lastModified" : "2024-11-21T03:16:41.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4749."
      }, {
        "lang" : "es",
        "value" : "Netgain Enterprise Manager\tCVE-2017-16608\tEsta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Netgain Enterprise Manager. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en exec.jsp. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para ejecutar una llamada del sistema. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual usuario. Anteriormente era ZDI-CAN-4749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.766",
            "matchCriteriaId" : "DCAF3357-3AD7-4E1B-BFF9-E008D6C1D826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-950",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16609",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.303",
      "lastModified" : "2024-11-21T03:16:41.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download a file. An attacker can leverage this vulnerability to expose sensitive information. Was ZDI-CAN-4750."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos revelen información sensible en instalaciones vulnerables de Netgain Enterprise Manager. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en download.jsp. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para descargar un archivo. Un atacante puede aprovechar esta vulnerabilidad para exponer información sensible. Anteriormente era ZDI-CAN-4750."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-39"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.766",
            "matchCriteriaId" : "DCAF3357-3AD7-4E1B-BFF9-E008D6C1D826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-951",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16610",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.380",
      "lastModified" : "2024-11-21T03:16:41.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Netgain Enterprise Manager. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en upload_save_do.jsp. El problema deriva de la falta de validación correcta de una ruta proporcionada por el usuario antes de emplearla en operaciones de archivo. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual usuario. Anteriormente era ZDI-CAN-4751."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.766",
            "matchCriteriaId" : "DCAF3357-3AD7-4E1B-BFF9-E008D6C1D826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-952",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17406",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.460",
      "lastModified" : "2024-11-21T03:17:52.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry, which listens on TCP ports 1800 and 1850 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process. Was ZDI-CAN-4753."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Netgain Enterprise Manager. No se requiere autenticación para explotar esta vulnerabilidad. El fallo específico existe en un registro RMI expuesto, que escucha en los puertos TCP 1800 y 1850 por defecto. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la deserialización de datos no fiables. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del actual proceso. Anteriormente era ZDI-CAN-4753."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.766",
            "matchCriteriaId" : "DCAF3357-3AD7-4E1B-BFF9-E008D6C1D826"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-953",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17407",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-01-23T01:29:01.523",
      "lastModified" : "2024-11-21T03:17:52.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the content parameter provided to the script_test.jsp endpoint. A crafted content request parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code under the context of the web service. Was ZDI-CAN-5080."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de NetGain Systems Enterprise Manager v7.2.699 build 1001. No se requiere autenticación para explotar esta vulnerabilidad. Este problema en concreto existe en la manipulación del parámetro content proporcionado al extremo script_test.jsp. Un parámetro de petición de contenido manipulado puede desencadenar la ejecución de una llamada del sistema compuesta de una cadena proporcionada por el usuario. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del servicio web. Anteriormente era ZDI-CAN-5080."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgain-systems:enterprise_manager:7.2.699:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F921-80F2-43D3-9219-B2DB1CBB9232"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-954",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-23T06:29:00.213",
      "lastModified" : "2024-11-21T03:19:14.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not."
      }, {
        "lang" : "es",
        "value" : "Monstra CMS 3.0.4 permite que los usuarios suban archivos arbitrarios, lo que conduce a la ejecución remota de comandos en el servidor, por ejemplo, debido a que .php (minúscula) está bloqueado pero .PHP (mayúscula) no lo está."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monstra:monstra:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13838C95-223E-4896-AA83-B437EFD45660"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.securiteam.com/index.php/archives/3559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monstra-cms/monstra/issues/426",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43348/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blogs.securiteam.com/index.php/archives/3559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monstra-cms/monstra/issues/426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43348/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-23T06:29:00.277",
      "lastModified" : "2024-11-21T03:19:15.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the \"First Name\" field of a user's /myprofile page."
      }, {
        "lang" : "es",
        "value" : "En la característica de exportación CSV de SilverStripe, en versiones anteriores a la 3.5.6, versiones 3.6.x anteriores a la 3.6.3 y versiones 4.x anteriores a la 4.0.1, es posible que los valores de salida contengan macros y scripts, que podrían ejecutarse si se importan sin sanear en software común (incluyendo Microsoft Excel). Por ejemplo, los datos CSV podrían contener entradas de usuario no fiables del campo \"First Name\" de la página /myprofile de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.5",
            "matchCriteriaId" : "3ED2EE6E-6402-425B-8B91-6D2A327B24B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.2",
            "matchCriteriaId" : "5CA0F665-3686-4BEE-B33C-ED7A2D603B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC46066-F374-4F81-8F79-0608681B98A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43396/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/ss-2017-007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43396/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/ss-2017-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15090",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T15:29:00.213",
      "lastModified" : "2024-11-21T03:14:03.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el componente de validación DNSSEC de PowerDNS Recursor, desde la versión 4.0.0 hasta la versión 4.0.6, también incluida, en el que las firmas podrían haber sido aceptadas como válidas incluso aunque los datos firmados no estuvieran en el territorio del DNSKEY empleado para firmarlo. Esto permite que un atacante en posición Man-in-the-Middle (MitM) altere el contenido de los registros enviando una firma válida para los registros manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "94094CC8-C228-40FF-BA81-FD93082D99A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-03.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15091",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T15:29:00.277",
      "lastModified" : "2024-11-21T03:14:03.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly keyword. This missing check allows an attacker with valid API credentials to flush the cache, trigger a zone transfer or send a NOTIFY."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el componente API de PowerDNS Authoritative 4.x hasta e incluyendo la versión 4.0.4 y en versiones 3.x hasta la 3.4.11, también incluida, donde algunas operaciones que provocan un impacto en el estado del servidor siguen estando permitidas incluso aunque la API se haya configurado como solo lectura por medio de la palabra clave api-readonly. Esta falta de comprobación permite que un atacante con credenciales API válidas vacíe la caché, desencadene una trasferencia de zona o envíe un NOTIFY."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.4.11",
            "matchCriteriaId" : "3363780D-5618-4CFD-980F-8272A454914C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.4",
            "matchCriteriaId" : "EE9E02BF-B8D0-4E88-BA4A-360E5A6F35B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2017-04.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2017-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15092",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T15:29:00.323",
      "lastModified" : "2024-11-21T03:14:03.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema de Cross-Site Scripting (XSS) en la interfaz web de PowerDNS Recursor, desde la versión 4.0.0 hasta la versión 4.0.6, también incluida, en la que el qname de las consultas DNS se mostraba sin escape. Esto permitía que un atacante remoto inyecte código HTML y JavaScript en la interfaz web, alterando el contenido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "94094CC8-C228-40FF-BA81-FD93082D99A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-05.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15093",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T15:29:00.383",
      "lastModified" : "2024-11-21T03:14:03.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor's configuration."
      }, {
        "lang" : "es",
        "value" : "Cuando a api-config-dir se le asigna un valor no vacío, lo que no ocurre por defecto, la API en PowerDNS Recursor 4.x hasta e incluyendo la versión 4.0.6 y en versiones 3.x hasta la 3.7.4, también incluida, permite que un usuario autorizado actualice la lista de control de acceso de Recursor añadiendo y eliminando máscaras de red y configure zonas de redirección. Se ha descubierto que las nuevas máscaras de red y las direcciones IP de las zonas redireccionadas no se validaban lo suficiente, lo que permite que un usuario autenticado inyecte nuevas directivas de configuración en la configuración de Recursor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.7.4",
            "matchCriteriaId" : "26A2DE9E-6667-41DF-9BFA-CC0688094368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "94094CC8-C228-40FF-BA81-FD93082D99A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-06.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15094",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T15:29:00.417",
      "lastModified" : "2024-11-21T03:14:03.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default)."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema en el código de análisis DNSSEC de PowerDNS Recursor, desde la versión 4.0.0 hasta la 4.0.6, también incluida, lo que conduce a una fuga de memoria al analizar claves DNSSEC ECDSA especialmente manipuladas. Estas claves solo se analizan cuando la validación está habilitada mediante la configuración de dnssec a un valor distinto de off o process-no-validate (por defecto)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "94094CC8-C228-40FF-BA81-FD93082D99A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-07.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15105",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T16:29:00.273",
      "lastModified" : "2024-11-21T03:14:05.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error en la forma en la que unbound, en versiones anteriores a la 1.6.8, validaba los registros NSEC sintetizados con caracteres comodín. Un registro con caracteres comodín NSEC validado incorrectamente podría emplearse para probar la falta (respuesta NXDOMAIN) de un registro de caracteres comodín, o engañar a unbound para que acepte una prueba NODATA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.8",
            "matchCriteriaId" : "BAE9EA21-B784-4BCD-A0D6-8C474E6AEDCB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102817",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00039.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://unbound.net/downloads/CVE-2017-15105.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3673-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://unbound.net/downloads/CVE-2017-15105.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3673-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15107",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-23T16:29:00.477",
      "lastModified" : "2024-11-21T03:14:05.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en la implementación de DNSSEC en Dnsmasq hasta la versión 2.78, también incluida. Los registros NSEC sintetizados con caracteres comodín podrían interpretarse erróneamente para probar la falta de nombres de host que existen de verdad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.78",
            "matchCriteriaId" : "440717BE-EAFE-4FB2-B33B-FDC89BA94E5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102812",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2740",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:00.647",
      "lastModified" : "2024-11-21T03:24:05.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad en el shell de línea de comandos del sistema operativo HP ThinPro 6.1, 5.2.1, 5.2, 5.1, 5.0 y 4.4. La vulnerabilidad podría resultar en una elevación de privilegios locales sin autorización en un dispositivo cliente HP thin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:thinpro:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3E8CB9-C977-4B86-8984-5F7585434EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:thinpro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A43F43-940D-4DF3-8DBF-36B8334828EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:thinpro:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517F75B9-02A2-4085-8856-DBDA2FBF0526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:thinpro:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E93AA95-2DB8-4DAD-B2B7-3A434B8AC8BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:thinpro:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8252B8D-6743-4F8D-AAAD-65B1C637A56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:thinpro:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC121F9-D429-4E58-B486-2C6441826A1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05379294",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05379294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2741",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:00.787",
      "lastModified" : "2024-11-21T03:24:05.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad en HP PageWide Printers y HP OfficeJet Pro Printers, con firmware en versiones anteriores a 1708D. Esta vulnerabilidad podría ser explotada para ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9v82a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "E16E51E1-CB0E-4A7E-8ED3-3C6075962325"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9v82a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C32078-2873-4B07-B218-DF2937C8E581"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9v82b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "B5CCEE5E-65BD-4A71-BFFA-DB844F370FA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9v82b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CFD9FB-F7D6-4C6E-AEE5-F5D6B9F8256D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9v82c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "6CF18789-5DEE-4B73-945A-1EC1218296DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9v82c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6320087E-87F8-4640-9088-1E45ADC1DE20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9v82d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "C9BDF4FC-6AAF-4D95-94B5-A01A21F982AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9v82d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1184E875-E054-4D88-BBD8-93237C24B371"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6u55a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "538359B1-65DA-4E48-991D-0534B001959E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6u55a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1600E28F-767B-4495-8063-A66984484C94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6u55b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "AABA86F0-F5E5-494D-A1CB-AF312EF8F261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6u55b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DB217A-410F-4CCE-9759-09CF7B54908E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6u55c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "2400BE8F-FA3C-4FCB-97AD-8DE21545DE31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6u55c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14269867-819F-40CC-85F3-C848C89AF944"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6u55d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "81666537-11C4-463B-9483-DC738838E371"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6u55d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DDBE01-B5D4-4FA4-9A90-234FAE9DC6D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k9z76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "900ABA96-6BE5-47B4-826E-EB4A2B49B1D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k9z76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C5DD0B-4C8C-45DE-AEBA-6942CE4B6E93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k9z76d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "8E5EEA21-485A-41B2-B15F-5A1A02FEF6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k9z76d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB96063-CC55-4EA7-87E5-34A68322E7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q17a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "01AA6A3C-8500-4A30-90F5-A048735CAFF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q17a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6FBBEA7-14B6-4B35-8A72-08FB3DD8F93D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q17c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "2B05671D-381D-4008-9EF7-6FB623164A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q17c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB6CEBE-AEA6-410A-94DA-05C77C323F4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q17d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "9A3B225E-0464-4D50-B4FF-1AC73E184A23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q17d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D110EEE-2A44-4BC5-90DB-C3D146EF08D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q21a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "DF50E026-AB5E-4C27-95A0-5004F1926A83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q21a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0541BF3-4A4B-424F-AC23-7026C7E35AB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q21c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "D11E905E-C112-41DF-B9D5-85EEBCDF1EE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q21c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491BE10D-F37A-4FF7-8789-D0BA442F1E28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q21d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "48D5DFA0-F2CF-44BA-9A22-72E3E7095408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q21d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35AE3072-B57E-4CEB-A0C7-C4B87B194C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q20a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "89AB0004-21CF-482A-BE83-3813F2B7E971"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q20a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61942DC4-E95F-4A0F-95B1-304CEE7B569C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q20b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "41EC626C-31FA-45C0-86BD-74F2857CDFD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q20b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A96E5227-0B40-493A-BC97-0944A88A3C52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q20c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "60AF2C52-21C1-4172-9CD0-B7F7F145FFD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q20c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2A84C2-DA6E-4C0A-86D4-185452936C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q20d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "786B02D7-AA5B-48D3-B84F-5A383C885E8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q20d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC594695-B974-447F-8430-2928DE7D4C62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q16a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "824A5EF8-7A0F-4B58-B9CE-1B71E8BD35C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q16a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAC8056-DE49-4FE0-8BE0-EB4E22C03AED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q16b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "CD05F7BE-20D0-41A6-9711-D3C90C3E4612"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q16b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5526A737-41CB-4D71-A6DD-A40940C681E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q16c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "11871F21-66A5-42FC-8763-BC94F851870D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q16c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71A518C-1A3D-47C7-B787-F0D447C80846"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q16d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "F91D2B5B-06EE-46F1-9113-682411F95145"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q16d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0155AB-8D9E-4822-86B1-6702FD3A1F21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q19a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "3C6CF2A9-F127-47FD-9EE6-5A9232339680"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q19a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54254FBD-2197-4A39-9BD0-1D51C711046C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q19d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "59B93473-F933-418A-8448-F0DF2970E528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q19d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A43BA0-2C47-4A57-BBE6-9A57ABB37212"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q15a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "68F8A7FD-EB7B-43C8-941A-8518D89CB788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q15a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8C5DC9-7082-4732-AF3F-599E595185D9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q15b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "E746B7F9-C85D-4F47-89AA-35651388232F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q15b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C048F3-0EA5-4C7E-BCD4-8A6E6F9F218B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3q15d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "22EFC171-74EC-49F2-BA96-7CB4A4252D20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3q15d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA6A88E-B1ED-40EC-898E-490D803E1273"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9v80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "FF39569A-86A6-4BEA-BEB8-292C9A1A8316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9v80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F26E4A0-0CA3-4A2B-A2C1-9E6866FCD6AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9v80b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "315E270E-D457-4210-A066-AA9C350347F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9v80b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2B7993-1C87-4305-BFF9-98639CECBD3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6u57b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "D387EFFF-1CE9-4A20-9615-02762975E95A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6u57b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB02B60-DA6C-4775-8D73-389E30961432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "5A36889F-2532-4E34-9047-9E7358358942"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l20a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E77AC9-8C07-4D01-AAD8-1B5F9D4946BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "EBE66BDC-E6EB-4AE8-B9B6-ED2C4E85E3D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l21a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AE586A-78D6-4485-8AF1-CF2656BEF857"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "BA6156FE-AB5A-4016-A46D-90AA5F7AD445"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70003792-C31A-413D-A797-1ECD47DB40F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "CC0A88A6-D2B1-4DA4-BCD7-32506CDF9993"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l64a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579CB9CB-AA44-4761-BB9A-F17648F08810"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "44099E3F-91F0-437D-A056-0757A16DD21B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE2DE16-2E4D-4111-958C-611F1F8DA9C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1708d",
            "matchCriteriaId" : "3C03226E-6928-4961-962B-21532BC418F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j3p68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC3438C-2004-4F7A-990E-7BF9AEEFBC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05462914",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42176/",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45273/",
        "source" : "hp-security-alert@hp.com"
      }, {
        "url" : "https://support.hp.com/us-en/document/c05462914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42176/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45273/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2742",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:00.943",
      "lastModified" : "2024-11-21T03:24:05.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad en las versiones anteriores a la 10.4 SR2 de HP Web Jetadmin. Esta vulnerabilidad podría explotarse para crear una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:web_jetadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "D003C0B6-BDEA-4D5E-845F-13E1B00DCDD5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:web_jetadmin:10.4:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4D4B8B-896B-4301-9B56-7488593F531E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038760",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05541534",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05541534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2743",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:01.087",
      "lastModified" : "2024-11-21T03:24:05.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack."
      }, {
        "lang" : "es",
        "value" : "HP ha identificado una vulnerabilidad de seguridad potencial con HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS en versiones anteriores a la 2308214_000901, 2308214_000900, y otras versiones de firmware. Esto podría ser explotado para realizar un ataque de Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc419a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000901",
            "matchCriteriaId" : "674370FA-A9E3-4034-A50D-D21E47573F40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc419a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F45F60-5168-4492-A784-AFBBDA8AC4E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc420a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000901",
            "matchCriteriaId" : "B00A960E-77A1-408F-AF2B-472C02EB8F4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc420a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A200BA-0D92-49C6-B628-D847D725B25A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc421a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000901",
            "matchCriteriaId" : "21AF8233-150C-45B9-AA82-BD7B4741F855"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc421a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2572621C-EF37-4872-89E1-15F0E7B76535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce709a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000900",
            "matchCriteriaId" : "0F4AF788-B08F-40EC-91F0-C2F2CF4144A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce709a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E99DDDD-9BFA-40AB-8872-33A85C795185"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce708a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000900",
            "matchCriteriaId" : "6D1E48F9-985E-41F8-AE2A-B23FAA11F044"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce708a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C41BE5-5BEB-40FB-925B-24B48ADB7E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce707a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000900",
            "matchCriteriaId" : "BF0A7EE8-1E86-4B75-ADD6-4AAC3160B619"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce707a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C972F12C-7301-4405-9E48-69716C25709E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce503a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000904",
            "matchCriteriaId" : "A6C44D38-898A-4156-BE4A-CC8A5D4FC716"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce503a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5F848D-802D-4564-AFCA-E5874FF48AC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce504a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000904",
            "matchCriteriaId" : "C35DDB6C-F9D8-42CE-85E6-53E82E76C42C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce504a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1E21D2-C86C-4B15-AFBE-ACC7AD885E01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce738a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000904",
            "matchCriteriaId" : "0B38A0E2-5D51-4875-8AA1-2CD467AF48CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce738a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3224DFD3-759A-4AE5-A3D0-A86A91FB2221"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce989a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "07A7B2B8-74F1-4E44-88FB-9048573AF0D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce989a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A54EDB-CC34-4BC4-A20A-0EA30FC798DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce990a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "AC64B21F-E52B-44D0-86FF-7E02FCA50097"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce990a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD99E74-A75F-44B8-86F3-22850CEBEA9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce991a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "A43FD9C0-FF21-4132-B484-D434C49C4F6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce991a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8412130-F79B-45BF-A8CF-9F24FF5F777A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce992a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "A4E4960E-0D27-452A-A6F0-B9A88A6C0DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce992a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2765F303-BA92-4BE1-A672-62CAF0ECC201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce993a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "B07AC1AD-923A-4584-8E86-A33C48AD3B13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce993a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C58820-E294-4BE6-9565-78B0EAEE0CF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce994a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "D53B990C-030F-4C18-AD23-EEE25549EDB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce994a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB2F91-FCAA-4A92-A7DC-9637C901FB53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce995a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "79C16D31-E0C7-4D9E-A516-625F47BBA37E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce995a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6798D2-FD42-44F9-A45D-AA49228F672B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce996a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000926",
            "matchCriteriaId" : "5ADA3234-DA58-42FD-AEAD-2399D2DE4428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce996a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F40E086-FFDE-4E4E-9DB0-F537F7CEB6E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf081a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000927",
            "matchCriteriaId" : "B665149E-4086-4F1D-86B3-35D9CBAC697C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf081a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF19F65-3CD4-46C3-9AFD-1C5EA0942B7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf082a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000927",
            "matchCriteriaId" : "289E0D3C-9EAF-4BEB-8B78-F495082EB850"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf082a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64646EAE-4CFF-4184-BA59-DCD59C18C217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf083a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000927",
            "matchCriteriaId" : "A990FECE-3273-4669-A860-9FA64FEE9F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf083a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FBCD353-9942-4B5C-BEAB-BF818B22962C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l2717a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000903",
            "matchCriteriaId" : "79F6BE63-A802-40D0-B974-8258E5FABE08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l2717a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0F4EBC-B52F-40C5-A17E-19FBC9253C33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd644a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000925",
            "matchCriteriaId" : "31685CA3-6AE9-4861-9A97-C677601B1B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9F0833-1CFB-4425-9C66-ACA8680545B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd645a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000925",
            "matchCriteriaId" : "04F19750-E2D8-4B8E-AEB4-8C6DE2B2FED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9F0833-1CFB-4425-9C66-ACA8680545B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf116a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000913",
            "matchCriteriaId" : "366D6F88-1CF0-4C13-BA03-73B9691E6E84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf116a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBA452B-6812-48FA-8DEE-AA72F6FFCCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf117a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000913",
            "matchCriteriaId" : "BA746D12-8144-4F1A-828B-21F5FF5A8243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf117a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA39F69-75F0-4574-A8B9-435AE52890D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc522a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000932",
            "matchCriteriaId" : "413D1BC0-670D-4B57-9ADC-7B273C4E423F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc522a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C1ADE6-B1A1-4A47-9D1E-C99BB70D389D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc523a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000932",
            "matchCriteriaId" : "DCC04562-4FC5-4387-8582-4EF4A19ED92A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc523a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03F6C70-DCF2-437A-B4C5-1D0110FB79EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc524a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000932",
            "matchCriteriaId" : "05FDBF30-E334-4254-9039-F2383A877F8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc524a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D48163-079E-4928-A090-7E0A30FB6B4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf235a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000922",
            "matchCriteriaId" : "F36EB0AA-48E3-4404-9B5B-4522A983750E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf235a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCEAD56-073F-423B-B1AA-7DE21DFC1DA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf236a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000922",
            "matchCriteriaId" : "E3EE213F-CA35-4198-B158-319621BC1F85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf236a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D83788-6F36-4826-BA2C-1FFDB83192A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf238a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000922",
            "matchCriteriaId" : "D71516E5-247D-4C36-AB6F-4CEED4E3E03A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf238a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EC7506-7169-4B99-BAD5-91E3150B8EB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd646a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000925",
            "matchCriteriaId" : "80F60CD0-4DA3-4171-96D4-81BC989E9442"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd646a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A1C170-BC7D-49EC-B1EF-D56D4469590E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf118a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000913",
            "matchCriteriaId" : "F7B9E53A-7246-495D-A68C-66B3F75F70E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf118a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA28619-6BDC-4167-8DEA-67FF748D2453"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf066a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000921",
            "matchCriteriaId" : "A6817C87-8F0A-4CB9-8D09-89C137E9E7AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf066a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7284308-1FC8-474E-8DE0-AB358B6D0ED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf067a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000921",
            "matchCriteriaId" : "C714EB1B-2210-4A50-8025-1FDDC59FFDE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf067a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3D1195-AF78-4B87-BB61-AD551E8DCD1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf068a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000921",
            "matchCriteriaId" : "E35AE2CE-544E-409D-B7FD-F4D1CDC50C51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf068a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DB7025-7AD5-4C4F-B6BA-7EA1874D2B5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf069a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000921",
            "matchCriteriaId" : "21EA3D16-7774-4B0C-AE71-405FC266B611"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf069a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8711CE56-C7CD-4C92-B18B-4AE9CDD11BAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3l08a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000931",
            "matchCriteriaId" : "A0106521-8C6F-48EE-B164-1C66FA970BFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3l08a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A251D48-87A8-48FC-AF78-C0B777544F3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3l09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000931",
            "matchCriteriaId" : "60C84B42-EDB4-4732-B67F-E4D05607F0F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3l09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6821F1D6-64E5-4455-BC1E-5D44DDBF7B0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3l10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000931",
            "matchCriteriaId" : "1F6C4D6E-6023-4DA2-8F0A-0C1AD5A0D8D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3l10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D50185D-D324-4396-975D-1F2ED909F1A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000930",
            "matchCriteriaId" : "83377AFE-38C2-4DAA-87B3-BAB75EC54C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BA1E17-7260-4BE9-A8D0-FF62A47EA988"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000930",
            "matchCriteriaId" : "84E229EB-F769-4988-9174-3CE280EC282C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A66E28-F591-4105-8F5C-658047CB28AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000930",
            "matchCriteriaId" : "5FE76E5F-E651-4E89-834E-73812F170E80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A56760E-BDBF-455D-892B-27B3A309E53D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000928",
            "matchCriteriaId" : "111B6094-357A-4AD4-B781-5DDD1BD279BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42266438-FCAA-4626-A5E6-EA675BC6CED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w75a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000928",
            "matchCriteriaId" : "990541DE-DC5C-4EAC-8A86-091B6F35BF16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w75a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21E6919-1D0C-44DA-AFF5-77486213E98A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000928",
            "matchCriteriaId" : "6F12B254-24EB-4B8A-BFA5-40011AB247C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B03873D-9DF5-43E3-AB2B-8161CB111509"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000928",
            "matchCriteriaId" : "DE11FB48-629B-4E96-84B0-21BD880D2120"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CF9EF0-4DA6-41B6-B3FD-B56C7A28918A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf367a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000916",
            "matchCriteriaId" : "EADAC122-CEE3-4F01-94A3-F1EDAE7082BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf367a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915BCAF3-F2C4-46F9-80EF-08C49E3C19CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz244a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000920",
            "matchCriteriaId" : "57C99919-551E-4E3B-AD8E-ADFE7D84C603"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz244a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9491218A-2F33-4FE4-993E-D72769CFC469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz245a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000920",
            "matchCriteriaId" : "6FFEF1EA-E228-4805-A6E9-F87253EAC5D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz245a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308131FB-9BF5-46B9-B049-EB277E53794A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l04a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000902",
            "matchCriteriaId" : "AC2FE49A-1144-4DE1-90F4-E083EA1E1D7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l04a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDB3A97-FB33-4723-BE10-B08D604DCB8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l05a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000902",
            "matchCriteriaId" : "EBCBEE0E-0342-49AB-BE4E-004137348DC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l05a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6655F2-5E0E-45DF-A331-CACED3A39EB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l07a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000902",
            "matchCriteriaId" : "01DFE4FD-36C5-499F-A619-806C5B191BDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l07a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9A2E2C-422A-4D51-A6C0-F2253F7BE5C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:c2s11a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000906",
            "matchCriteriaId" : "39B9C4F1-767E-439D-8946-0C2999780EDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:c2s11a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1D946-FA61-43D6-867C-B1FA207F2532"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:c2s12a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000906",
            "matchCriteriaId" : "021378AC-0D7C-49B2-BBC2-26D23DD12591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:c2s12a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333BE27C-8E3B-494D-A630-CBF0EC7078BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7x28a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "_2308214_000912",
            "matchCriteriaId" : "2A5BF47A-246D-41ED-AC33-5D311AF29751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7x28a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF983EC0-D722-406D-90A9-A012056C7520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l23a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000907",
            "matchCriteriaId" : "98E5FD2C-F5DB-4024-873A-F68D3E4230CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l23a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD1CDCE-AFFD-45EA-B93E-5CDE9FF770A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l24a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000907",
            "matchCriteriaId" : "A664F32C-E971-4AA0-BDED-D6E4EC1B6FF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l24a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544AC169-58D0-44C7-A24E-8EFFFB69A76D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l25a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000907",
            "matchCriteriaId" : "D932A3D4-84A8-4B9C-B281-10F89A063B69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l25a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910E96AE-68FB-403A-A87F-8B1D2CDF38FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000907",
            "matchCriteriaId" : "288ABE74-2AD7-445F-B14E-E0314AD2FFED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59748F44-B402-47B3-BE18-F9370BEEF6EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b67a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000908",
            "matchCriteriaId" : "C72C6C81-9D42-477E-AAD0-78D6A3FD5930"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b67a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B500726-273A-4E56-B2BC-C8F8AB023679"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000908",
            "matchCriteriaId" : "ECFE18EC-4954-468B-8B8F-36705C97EC8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA0B77B-033E-434A-B068-CE05B8129923"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b69a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000908",
            "matchCriteriaId" : "C57A003D-A9F3-41BA-95F8-2F5273905E21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b69a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358B965C-3C5C-4A34-A11F-AE939151B7FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000908",
            "matchCriteriaId" : "A0AEA1CB-E910-4225-82C5-9F6FE522D2A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEB3D90-682B-4C88-88E5-5605C1D8753B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "_2308214_000908",
            "matchCriteriaId" : "659C8B4F-DC60-41EC-ADB5-30F525513268"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075C3066-8F38-4FD9-B198-6C26E6DD2B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b72a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000908",
            "matchCriteriaId" : "D57A42D9-77F8-4392-9147-82D652725B4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b72a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D238BD4-FF77-42D0-92DC-C0FCE2F65B9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b73a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000908",
            "matchCriteriaId" : "A54EF604-1965-41AC-893E-4DAB0C059710"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b73a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967E2679-CC7B-4809-9A87-9F4654AFA418"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g85a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000912",
            "matchCriteriaId" : "C27A7FF0-3399-4D1B-9B85-FAF907DC3CB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g85a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480FED5-85AA-4D6A-805B-995A6BCE70C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000909",
            "matchCriteriaId" : "4AFD2D78-CB58-4390-961F-1415255C03A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079A4D1F-49F2-42C4-979D-6D7B176A2C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000909",
            "matchCriteriaId" : "BED7D2CF-842A-4C79-B0B7-FB1810A039F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E43FA4-6AFF-4915-BE06-89CD04256CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000909",
            "matchCriteriaId" : "42F8EE3F-B139-43EE-ADA6-D9CE1906E339"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BC58CE-E6D1-46E1-9E0C-4C9C7A8408B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:2a68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000911",
            "matchCriteriaId" : "49FE59EB-30E4-4013-BBB7-474393FEACAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:2a68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475D8E43-9D76-4A16-9FE7-D1424911AEB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:2a69a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000911",
            "matchCriteriaId" : "786BE192-8A58-4049-B7FC-6AC55EE03ADB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:2a69a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFBE17E-97E8-4263-8FFA-017EBD1B0775"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:2a70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000911",
            "matchCriteriaId" : "00746513-284A-4D95-8ADA-2943397EA71B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:2a70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8494A9E5-4138-4D7F-B416-E69FA91525AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:2a71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000911",
            "matchCriteriaId" : "EEC81DFA-74A4-40E1-ADA5-D90B313E023F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:2a71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FE1E73-F398-4434-A73F-AEEC0B194E66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000905",
            "matchCriteriaId" : "6901880F-78DD-463A-B6DF-6CA4738889C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63821F28-E598-4C1A-99EE-5A238DB65DB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000905",
            "matchCriteriaId" : "AC0E5B2C-E265-4F45-9730-B44BC25421A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2982F8-D7A0-4E9F-8EDB-FC7F0621DB79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000905",
            "matchCriteriaId" : "7E7D81B1-2D66-4A96-A213-E449EF32CE4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646D0AD9-E6ED-41CF-AE1A-6C675C420F37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000910",
            "matchCriteriaId" : "ED503CD2-4719-4398-9035-2CD5FCBCB519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C9820D-A9F0-49B0-9DA5-003CF890615C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w46v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000910",
            "matchCriteriaId" : "358241D7-9D80-4BE0-8E73-8186541843D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w46v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F642702-AA3B-4C40-A9F5-4163B6E24167"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000910",
            "matchCriteriaId" : "F42C1105-6243-4097-AF4C-D0520AA90229"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A567779-4A98-4F57-9D55-CF334E4453A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w47v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000910",
            "matchCriteriaId" : "DD9C39A5-73BC-4DCD-AE74-F35C63A0E10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w47v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE9DF77-AA4C-41A4-9E13-F1AA6142D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u44a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000910",
            "matchCriteriaId" : "E0DEE660-8CDA-46AE-B56C-9E76D5B8D2DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u44a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87146EA2-C52D-4E1C-B7BB-74020B7524FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000923",
            "matchCriteriaId" : "901779A3-63C7-42B4-8CC3-56EEE1FAF8BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF1E39-04C5-4B06-BCCC-D9298119B0EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w39a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000923",
            "matchCriteriaId" : "EBCD47FF-06B7-4C19-8812-37BCA3F01D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w39a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3914A2C-5339-49D9-931D-9CA66099E657"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000923",
            "matchCriteriaId" : "D727F64E-9566-442B-AF41-B843280D779A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4DC4816-8C7D-4867-BA33-83AB206860E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000923",
            "matchCriteriaId" : "2F4065D5-C363-42EF-81CA-0CEE33A42F71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2286B17-D12D-4B23-894D-E45F7FC8012F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u42a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308214_000923",
            "matchCriteriaId" : "8E3966F7-57DE-4291-83EF-35A9F4E3FDCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u42a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A91233F-1FA2-43A4-9A4C-9E05278A16D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05541569",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05541569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2744",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:01.240",
      "lastModified" : "2024-11-21T03:24:06.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad permite que un atacante extraiga binarios en ubicaciones protegidas del sistema de archivos en HP Support Assistant en versiones anteriores a la 12.7.26.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:support_assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.26.1",
            "matchCriteriaId" : "8262EDF0-7C0F-45BF-BB69-5A1574E921E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05648974",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05648974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2745",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:01.380",
      "lastModified" : "2024-11-21T03:24:06.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser."
      }, {
        "lang" : "es",
        "value" : "Se han identificado vulnerabilidades de seguridad potenciales con HP JetAdvantage Security Manager en versiones anteriores a la 3.0.1. La vulnerabilidad podría explotarse para permitir Cross-Site Scripting (XSS) persistente, que permitiría que un hacker ejecute scripts en el navegador de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:jetadvantage_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "8C387225-C3F5-4B48-9A1D-583FC4FE866D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05639510",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05639510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2746",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:01.523",
      "lastModified" : "2024-11-21T03:24:06.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to create a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se han identificado vulnerabilidades de seguridad potenciales con HP JetAdvantage Security Manager en versiones anteriores a la 3.0.1. Las vulnerabilidades podrían explotarse para permitir Cross-Site Scripting (XSS) persistente, que permitiría que un hacker cree una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:jetadvantage_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "8C387225-C3F5-4B48-9A1D-583FC4FE866D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05639510",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05639510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2747",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:01.570",
      "lastModified" : "2024-11-21T03:24:06.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers."
      }, {
        "lang" : "es",
        "value" : "HP ha identificado una vulnerabilidad potencial de seguridad en versiones anteriores a la IG_11_00_00.10 para DesignJet T790, T795, T1300 y T2300; en versiones anteriores a la MRY_04_05_00.5 para DesignJet T920, T930, T1500, T1530, T2500 y T2530; en versiones anteriores a la AENEAS_03_04_00.9 para DesignJet T3500; en versiones anteriores a la NEXUS_01_12_00.11 para Latex 310, 330, 360 y 370; en versiones anteriores a la NEXUS_03_12_00.15 para Latex 315, 335, 365 y 375; en versiones anteriores a la STORM_00_05_01.6 para Latex 560, 570 y Latex 110 que podría exponer las credenciales del servidor SMTP configurado para recibir y procesar emails generados por las impresoras."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t790_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ig_11_00_00.09",
            "matchCriteriaId" : "4C00C928-3362-4177-BA49-75F2BFC8D16F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t790:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00246A8F-7B86-403E-8AA8-1688F3C7C83F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t795_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ig_11_00_00.09",
            "matchCriteriaId" : "C868619A-744F-4CE6-913F-27323C4BBF4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t795:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36355C24-96D8-4AD0-9E3D-4CEB774A4120"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t1300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ig_11_00_00.09",
            "matchCriteriaId" : "4D96CF5A-30C1-439E-A134-8AEA547B449A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D36A600-608E-4898-9424-1CB03018C9CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t2300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ig_11_00_00.09",
            "matchCriteriaId" : "9DA063B8-B14C-475D-B610-95351536907B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED6D1E1-38E6-45F8-8921-1C97D3AB64A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t920_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mry_04_05_00.4",
            "matchCriteriaId" : "89B870D9-1CA0-4F0B-B6BA-5529953F0A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28AA042-BF48-4415-9747-B066602B4E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t930_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mry_04_05_00.4",
            "matchCriteriaId" : "F36E3938-3931-472E-A49F-E1740C4B3A25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C11195-AB6D-43F3-8D11-325B29BB6ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mry_04_05_00.4",
            "matchCriteriaId" : "388CAACB-3295-4ECC-B1D4-BEB17A56AD82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C541BDA-2DB6-4DC0-B554-8A7E8168E4E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t1530_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mry_04_05_00.4",
            "matchCriteriaId" : "A9FF5FBC-B140-4CF4-91A1-668D3F2BC99B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t1530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24305406-99AB-4DB9-99FF-C77F6E754B58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t2500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mry_04_05_00.4",
            "matchCriteriaId" : "3A444FBA-4CB3-4DDE-9E88-F22FF1F319F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DED692A-7C16-4874-A88B-9E90A62B9388"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t2530_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "mry_04_05_00.4",
            "matchCriteriaId" : "CACD235F-0793-4E91-B604-BECBCE440AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t2530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2377CEE-ED57-41F3-9B06-09C710DD509D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t3500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "aeneas_03_04_00.8",
            "matchCriteriaId" : "E2442D4B-F1FE-42CE-AA8D-74836CB4E810"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93193C66-82F3-4A33-94D6-698759FD6EB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:110_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_00_04_53.8",
            "matchCriteriaId" : "860D25D9-91E5-42A3-91D8-CA08DD636CAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E003DD3-0EF6-4CB4-BE56-115B11A62D48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:310_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_01_12_00.10",
            "matchCriteriaId" : "80AC891F-7AC5-422A-9C7F-04A673171F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8825250-8BB9-4AF4-8240-6AA4930709ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:330_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_01_12_00.10",
            "matchCriteriaId" : "C5838818-E65B-4C1D-A25B-4FB3A40A9D36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A17B5C-FD32-403F-A897-366EBDF32855"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:360_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_01_12_00.10",
            "matchCriteriaId" : "708B2110-6426-4407-A2AD-722655D26BBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9795B5A-0920-44AA-A12C-07A90523739F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:370_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_01_12_00.10",
            "matchCriteriaId" : "B5A3D791-6599-4BC0-A13B-2896D1605CB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5478829C-2F62-4D03-9CC8-F9A7209866A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:315_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_03_12_00.14",
            "matchCriteriaId" : "7FD23F58-FFA9-4FB8-9963-D6875B4525C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:315:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869E4D36-FCD3-46DC-B04D-7656393A2015"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:335_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_03_12_00.14",
            "matchCriteriaId" : "01C532BA-6862-40C6-BB74-E6AED7F039AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5463ECB-F269-4921-9300-A6828FBF7BF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:365_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_03_12_00.14",
            "matchCriteriaId" : "9746DD9D-C6F8-43D5-BCE0-3912FD09AB63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00DA81E-B41B-41CE-B2CA-BFEB4F4C1D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:375_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nexus_03_12_00.14",
            "matchCriteriaId" : "6A2867DD-B36A-4EA4-8594-48AFA62AC48E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD53B891-6000-4D9C-A34C-5A404D5BA941"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:560_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "storm_00_05_01.5",
            "matchCriteriaId" : "737EBBB0-1CBF-4057-96C9-F8C94CEE7C2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA189B68-34A3-46E8-A4D2-844B9024A1D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:570_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "storm_00_05_01.5",
            "matchCriteriaId" : "40D4AA72-6235-4CC0-AFB9-1F388A249620"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F2909-E2C4-45E9-A5DD-D7ACFE1AF621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05624457",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05624457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2750",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-01-23T16:29:01.600",
      "lastModified" : "2024-11-21T03:24:06.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions."
      }, {
        "lang" : "es",
        "value" : "Una validación insuficiente de firmas de soluciones DLL permite la ejecución potencial de código arbitrario en impresoras HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed y HP OfficeJet Enterprise en versiones anteriores a la 2308937_578479, 2405087_018548 y otras."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l2683a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018552",
            "matchCriteriaId" : "EC404CA0-A7FA-4365-81E7-FDA20B91DED2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l2683a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1127621-A4E5-49C1-9D00-1A2500746C61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l2717a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578486",
            "matchCriteriaId" : "C563011A-06B9-40B6-A902-9710B8760176"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l2717a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0F4EBC-B52F-40C5-A17E-19FBC9253C33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l2762a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "5F487EE2-88AF-47C9-A106-9B8F1074D6FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l2762a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413E10D-9F23-4EA4-BF9F-EA5D4B9A6BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l2762a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018553",
            "matchCriteriaId" : "4A5857D8-3B4D-4E56-AFA1-97DD53316188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l2762a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413E10D-9F23-4EA4-BF9F-EA5D4B9A6BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z13a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "405E99EA-89D0-4BA3-9002-81BFDDC903C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z13a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEABCB5-C705-48AF-98B5-2EEB3E861ABB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:z5g79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "8D6E2E55-7C4E-4291-9151-4F0778C94B84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:z5g79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "011B02E2-A3D9-4027-A56A-3E81EFC3D073"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u42a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "01C0D424-4A98-4F9C-843B-73781CF3F105"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u42a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A91233F-1FA2-43A4-9A4C-9E05278A16D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u42a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "5A6AB110-047A-4E5E-82DC-48C1FDBDCAB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u42a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A91233F-1FA2-43A4-9A4C-9E05278A16D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z08a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "3587F5CE-E54F-49A0-9C78-C3A8CA8E6873"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z08a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89B9511-1B21-4BEF-9AAF-3E4048D45FFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z14a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "E86E0DFC-1B97-4258-8B1B-BC9C70C1C723"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z14a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB9B11A-F5BE-4D37-8B36-C9BDDE8ACE22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:z5g77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "8FF58098-039B-42FF-A75E-FA7B521032AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:z5g77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEA3E24-75EA-422C-AE49-2ADE13414137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z03a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "BE9B4422-956B-44AE-AD43-FBED0BBF489B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z03a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04A4C21-13A6-4F76-83B3-418211770E30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z07a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "97E27C4E-2837-4B7B-BFA6-AAB825DE6C77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z07a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35097350-DB1F-4C01-8F07-995F59BCB050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z05a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "67DEABFE-1CD2-47A0-9955-D4C623B1D0B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z05a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C9E22-0717-4C6A-B622-2B12F9537917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "FFB7E1CD-0B67-4062-A65B-C6EF2BA6F94E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2286B17-D12D-4B23-894D-E45F7FC8012F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "7840D32C-BB91-4004-B5DD-60969EC2210A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2286B17-D12D-4B23-894D-E45F7FC8012F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "E0F57D0D-71D9-40CC-A55A-8123268C9C2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4DC4816-8C7D-4867-BA33-83AB206860E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w41v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "2913E295-F0BB-49E0-814C-29F29EDDF78F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w41v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9782730B-3FAF-4968-A02A-6FD3882D5927"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w41v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "487A3868-D276-49AD-B454-780CF33EE3C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w41v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9782730B-3FAF-4968-A02A-6FD3882D5927"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "F2EEF323-5639-4F62-AA02-7846951074D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4DC4816-8C7D-4867-BA33-83AB206860E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z06a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018564",
            "matchCriteriaId" : "3C878C2A-1FFF-44D3-BEF1-9CD3FEB3F790"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z06a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB02034-9090-4867-92AA-B6FB95DA44FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000051",
            "matchCriteriaId" : "FD0F00E3-7F32-4CDA-800F-BA8F55C8DD94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C9820D-A9F0-49B0-9DA5-003CF890615C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w46v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000051",
            "matchCriteriaId" : "EE69D136-CA74-490D-B92B-D0EFBA21EA8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w46v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F642702-AA3B-4C40-A9F5-4163B6E24167"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w47v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000051",
            "matchCriteriaId" : "315FAE3A-1E3A-4D25-B6BF-9EFBFAE42DF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w47v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE9DF77-AA4C-41A4-9E13-F1AA6142D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u44a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000051",
            "matchCriteriaId" : "E0E7B11D-2C7A-45B3-902C-F6C02E14CAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u44a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87146EA2-C52D-4E1C-B7BB-74020B7524FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578491",
            "matchCriteriaId" : "063B431F-4D8E-4E21-97BB-B81C904A2796"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C9820D-A9F0-49B0-9DA5-003CF890615C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w46v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578491",
            "matchCriteriaId" : "F3F8F0B6-D1FD-4F72-B50F-6AD17344DD8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w46v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F642702-AA3B-4C40-A9F5-4163B6E24167"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578491",
            "matchCriteriaId" : "2516FBA4-D3F6-43DC-AF30-BEC086DBA2FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A567779-4A98-4F57-9D55-CF334E4453A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w47v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578491",
            "matchCriteriaId" : "24787C3A-35CD-409A-86EB-16327E5D3679"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w47v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE9DF77-AA4C-41A4-9E13-F1AA6142D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u44a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578491",
            "matchCriteriaId" : "012F7E6E-0910-498B-8B6F-6AC86B4FF2B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u44a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87146EA2-C52D-4E1C-B7BB-74020B7524FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "0C8A25F7-D83E-4BFF-9FF7-E60569FD29A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3560804-6362-4B4F-ADCC-702757A18ACB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "A7218A45-9236-443F-9C6B-B09AB08B5473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCB5A6B-8ABA-4396-B995-3A2C711093F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z11a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "83507218-76AC-4E23-B366-18A20F93A7D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z11a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3FBAC9-F612-436F-B0D0-8293576F94E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z12a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018548",
            "matchCriteriaId" : "881C9061-94FC-4CBB-8F64-637BB77CD740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z12a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8857B4D-9FBC-4093-BBB3-8263D9CD96A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w39a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "1400CC84-F29A-4C7C-AE6C-43012DA848B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w39a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3914A2C-5339-49D9-931D-9CA66099E657"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w39v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "4C378C37-BEEB-458D-9C43-693DC28D2139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w39v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC31F28-2E88-4049-9F3C-0CDA1FE267A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "61B96251-D8D2-404E-BE4A-CEC6C256AFDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF1E39-04C5-4B06-BCCC-D9298119B0EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w40v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000066",
            "matchCriteriaId" : "7131BDD8-182C-4A8F-A02B-0869D0D27930"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w40v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129411F8-0A91-44B6-9959-3BA09DB209FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w39a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "64FCE535-B8D6-4A8C-A528-BC2502832AAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w39a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3914A2C-5339-49D9-931D-9CA66099E657"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w39v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "F93F1FEE-D3E0-483F-90EC-734996C4E5D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w39v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC31F28-2E88-4049-9F3C-0CDA1FE267A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "3A40E4A8-2344-4410-BFE0-E2CC641397F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF1E39-04C5-4B06-BCCC-D9298119B0EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g1w40v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578492",
            "matchCriteriaId" : "CA134927-4181-4757-A85F-E39C96065770"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g1w40v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129411F8-0A91-44B6-9959-3BA09DB209FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z04a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405087_018564",
            "matchCriteriaId" : "AAC6BFD2-ACCC-4905-B029-81228A4C62D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z04a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8438D19A-7087-416A-9F77-E9E3895B2E78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:c2s11a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578482",
            "matchCriteriaId" : "47B9790E-4F45-4BCC-BDD4-0AC4C657E6F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:c2s11a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1D946-FA61-43D6-867C-B1FA207F2532"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:c2s12a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578482",
            "matchCriteriaId" : "27A87CE6-8761-44A7-BF92-DE320BC53FD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:c2s12a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333BE27C-8E3B-494D-A630-CBF0EC7078BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:c2s11v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578482",
            "matchCriteriaId" : "5C57A31F-5327-40E4-9932-E282217172BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:c2s11v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC7127B-CBEF-48F1-BC55-8E861AAE98DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:c2s12v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578482",
            "matchCriteriaId" : "624817BC-EFE5-4D86-8A9A-F1709A9930A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:c2s12v-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D789497-8C3E-46E1-B004-51120F959A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l1h45a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578482",
            "matchCriteriaId" : "DC5EEF50-A4B1-4429-BB65-668994B00646"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l1h45a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B57815-2EEB-4862-8FF3-1ABF8C57E93E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l06a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "6349A177-05BD-4382-B686-12F9D4A35210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l06a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759FF9E0-D28A-49E6-B1E7-69AC9155E4E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l06v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "42C356F6-A6AC-4070-8CA7-5DCE9E045E53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l06v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DBA29D-27A4-459E-9C39-DBCD227A8C8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l07a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "FFD4E3C2-5454-4F16-90DD-C429409EE4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l07a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9A2E2C-422A-4D51-A6C0-F2253F7BE5C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l04a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "1BE49D37-B502-4247-B8FD-441D433271FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l04a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDB3A97-FB33-4723-BE10-B08D604DCB8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l05a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "CAE520C5-8D15-4863-A598-04136B25A643"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l05a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6655F2-5E0E-45DF-A331-CACED3A39EB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l04v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "0B28358C-B61E-4600-AC81-990AB1B5F0B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l04v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A65A733-5D33-4E5B-85B2-10016827E7AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l05v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "3BA6BA1D-C01E-43EA-B69B-95A6E1AB4B26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l05v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA66022-6C4E-417F-89B5-8B316130DB20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "DF22BF14-6D9E-4E26-9BA0-617F2CB1D68D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2334461-8471-44CB-A0FA-AF86FF4F711F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000050",
            "matchCriteriaId" : "7AE7F23C-3BAD-483B-A2CD-76D766BCE8D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CDEDD9-5C4D-47CB-A76C-196816ABDB80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l06a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "2FC19827-75B2-49AA-8E65-99A2F726FC3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l06a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759FF9E0-D28A-49E6-B1E7-69AC9155E4E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l06v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "0585FBB7-BA3C-4A19-AA23-DDB50A81D81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l06v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DBA29D-27A4-459E-9C39-DBCD227A8C8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l07a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "38B88BD0-C05A-4933-B693-4605C9203C53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l07a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9A2E2C-422A-4D51-A6C0-F2253F7BE5C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l04a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "EC0A9EAA-03FF-46FB-9825-EB617635D4A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l04a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDB3A97-FB33-4723-BE10-B08D604DCB8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l04v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "56CBE9F1-8465-452B-93CA-E93DD0C438A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l04v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A65A733-5D33-4E5B-85B2-10016827E7AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l05a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "C0F1C8FF-54A2-4A11-9A45-02918B194C88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l05a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6655F2-5E0E-45DF-A331-CACED3A39EB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l05v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "74C264F8-A6BF-4224-A501-45797FC33651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l05v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA66022-6C4E-417F-89B5-8B316130DB20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "3BF2C0E1-D355-4298-8B6D-6AB52EF8AAC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2334461-8471-44CB-A0FA-AF86FF4F711F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578483",
            "matchCriteriaId" : "C40AFF7F-1FC4-4AAC-929A-444F77FEE853"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CDEDD9-5C4D-47CB-A76C-196816ABDB80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j74a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "EBFD3F83-1E59-4EBE-8C3A-027117921E4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j74a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FD1B43-E9B3-4C02-9ABF-09801CD36588"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "E48499D1-6462-4ADC-89B2-7E03A76B365A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F314FA-E614-4E2D-9E26-47CD0F7064A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "2F422F89-5BA4-4A0C-90C1-A0A32495DC3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09569C3F-3AC6-4B6B-A558-9D1D3CFE5BA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "51003A52-F3C3-4475-B3A0-790B077A2B19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9393BBCE-58C5-45FE-BBCA-01B0B148C829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j73a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "C6A3B8BC-E290-4D49-B641-A67ACC459F05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j73a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC41C1E-9FDC-4DFC-8FAE-CD1EF8613639"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m0p33a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "15F5594A-4768-483E-83C4-A2E030A06B98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m0p33a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0694781A-60F0-4AC9-8662-0609C3463821"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m0p35a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "A8FF261B-84EA-4752-8A00-D371A1764801"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m0p35a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5F053-BA50-48D8-B6FC-2EEB1722FABC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m0p36a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "C1A2D5D8-9B6D-4B38-BCDA-54D564C228C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m0p36a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70790C2B-73B7-477D-93C7-E98BEAF4268D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m0p40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "58473E11-E7DB-498D-898E-0365F32677B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m0p40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB6B1B3-7C0A-471E-A570-945DA29593F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m0p39a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "B3382C65-4DC6-4400-8A6A-C049808B01DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m0p39a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DBD1FF9-B5A6-46E6-B591-76C10B15FF6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf066a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000058",
            "matchCriteriaId" : "A0200EC0-A32D-4416-B9B9-53734C404150"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf066a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7284308-1FC8-474E-8DE0-AB358B6D0ED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf067a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000058",
            "matchCriteriaId" : "61DB530F-88B2-45BA-BAA8-3BF007DB40E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf067a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3D1195-AF78-4B87-BB61-AD551E8DCD1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf068a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000058",
            "matchCriteriaId" : "1CD5C0F5-5EA5-48F0-8B1B-1438D699D9AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf068a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DB7025-7AD5-4C4F-B6BA-7EA1874D2B5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf069a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000058",
            "matchCriteriaId" : "B3516576-F73D-4A91-A78C-72F76EFD8DF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf069a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8711CE56-C7CD-4C92-B18B-4AE9CDD11BAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf066a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578498",
            "matchCriteriaId" : "5F62B249-C938-4A80-A5C4-58505BB70387"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf066a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7284308-1FC8-474E-8DE0-AB358B6D0ED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf067a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578498",
            "matchCriteriaId" : "03C54FCC-2FBA-467D-9858-678866CD06C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf067a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3D1195-AF78-4B87-BB61-AD551E8DCD1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf068a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578498",
            "matchCriteriaId" : "F1C50C89-D546-4937-8AFB-1E1011F36030"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf068a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DB7025-7AD5-4C4F-B6BA-7EA1874D2B5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf069a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578498",
            "matchCriteriaId" : "FE4E7F6B-DD18-4F73-AD66-278BCBD8D5BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf069a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8711CE56-C7CD-4C92-B18B-4AE9CDD11BAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "4EAE005B-E9E9-4348-88AA-CEB4A506B2E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C630D65-4128-47A3-8C67-C2E47251F867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "280FE5E3-F2DE-49AA-A994-4D6D210F4403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB6806B-29D7-400D-A72B-F4F8E3C86864"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "ED4E51FC-574B-4B92-9DC9-827542C9386B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FC0141-4722-4C4F-BE57-5AD1852D3637"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j63a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "0FFC210D-504C-4FFF-A5A8-693F911778FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A74773D-3628-4D22-8A45-3ABB7C4CE4E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "D568D0DB-686A-43FB-A2D7-58923843BF7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEFDF61D-01E1-4D1D-9784-4256ADE367A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g84a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000040",
            "matchCriteriaId" : "B1866EF8-DEE0-40F3-B3AD-550F47D023B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g84a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57213C2F-F526-49D1-8DEF-B00EAECF03FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g86a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000040",
            "matchCriteriaId" : "A58CD6A3-ADD6-4AD4-8AC4-FC67748D0A7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g86a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE047AC-5287-40EA-B717-21C82F988DB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7x28a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000040",
            "matchCriteriaId" : "CA687E86-C218-4376-914A-82C75F21DAC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7x28a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF983EC0-D722-406D-90A9-A012056C7520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7x28a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578479",
            "matchCriteriaId" : "3EFBBD08-88EE-4B54-8A0B-EDE42C57C275"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7x28a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF983EC0-D722-406D-90A9-A012056C7520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g84a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578479",
            "matchCriteriaId" : "D1E2904A-F2B9-478E-B0E7-84158074C8F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g84a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57213C2F-F526-49D1-8DEF-B00EAECF03FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g86a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578479",
            "matchCriteriaId" : "AB4A7902-744B-4A42-8356-1990966679D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g86a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE047AC-5287-40EA-B717-21C82F988DB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz244a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578500",
            "matchCriteriaId" : "D9BA6059-48A0-4F45-8D1F-F794D68C35DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz244a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9491218A-2F33-4FE4-993E-D72769CFC469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz245a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578500",
            "matchCriteriaId" : "ED797A7E-F252-484A-8D83-82C7D9AB155F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz245a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308131FB-9BF5-46B9-B049-EB277E53794A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz244a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000059",
            "matchCriteriaId" : "CD7FF9EF-DD11-4958-9966-1EF94AFC285D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz244a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9491218A-2F33-4FE4-993E-D72769CFC469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz245a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000059",
            "matchCriteriaId" : "F519A306-5A68-45E6-B768-8A84E6959D96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz245a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308131FB-9BF5-46B9-B049-EB277E53794A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q20a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "E10A77D4-F400-49CB-AF8A-1966805D7DF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q20a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2CE81D-B1BD-4CBE-B422-338970705B43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q21a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "D3E19B10-7E18-4D0A-AA65-7D9AFA7F1BD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q21a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC57D13-C5A3-4CFD-8DC7-1A77F1CEDB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q22a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "1EB57F34-E455-4ED6-B811-844312C8F913"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q22a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E45E28-A22D-4C3F-AE76-E02670E4B112"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q17a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "CA521C04-E622-4458-9659-E05524094A73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q17a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D6946A-306F-4F67-B46D-12705BF8F643"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q19a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "5291B693-94EF-4528-A1AA-A6E98BB38FB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q19a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD96CD6E-3E09-4560-98AC-81216ED48AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q18a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "C5676B56-70D5-4A07-89B7-785CD7FEA633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q18a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A8278B-0774-4CA3-A89C-C0F034796516"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q14a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "4096E99D-4956-473E-9BDD-F1D29DB27873"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q14a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716F690A-6918-4277-8249-B3E5EAD04C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k0q15a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000069",
            "matchCriteriaId" : "085DFCA8-D81C-45F0-BF20-97320DB716B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k0q15a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786A3A6C-E2A0-44D4-A72F-5AE73FA25AAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b72a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "54881C0B-78D5-4522-A270-877313065491"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b72a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D238BD4-FF77-42D0-92DC-C0FCE2F65B9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b73a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "BCBEBF2A-09F1-4776-A18A-0425B9A3CB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b73a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967E2679-CC7B-4809-9A87-9F4654AFA418"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b69a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "11184DC5-6EAC-49C4-BFB6-E7B98310188D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b69a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "358B965C-3C5C-4A34-A11F-AE939151B7FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "479A0D3E-40CC-48E3-8BA2-879070DD83F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEB3D90-682B-4C88-88E5-5605C1D8753B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "1002D65D-E289-4034-8168-94F7C9D01E1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075C3066-8F38-4FD9-B198-6C26E6DD2B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b67a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "2FF70ED8-367A-49BD-9007-6998D2873F06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b67a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B500726-273A-4E56-B2BC-C8F8AB023679"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:e6b68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578490",
            "matchCriteriaId" : "6FD3DFC9-26B2-4C9E-9EB7-3F127C348AD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:e6b68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA0B77B-033E-434A-B068-CE05B8129923"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000039",
            "matchCriteriaId" : "C664A8FE-32C1-4387-ADC3-62624EF17AF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63821F28-E598-4C1A-99EE-5A238DB65DB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000039",
            "matchCriteriaId" : "DBFD60E6-D732-4C02-A470-4C8C8766D389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2982F8-D7A0-4E9F-8EDB-FC7F0621DB79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000039",
            "matchCriteriaId" : "24775575-422F-42BB-BD61-9EF332320254"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646D0AD9-E6ED-41CF-AE1A-6C675C420F37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578485",
            "matchCriteriaId" : "931F03FB-BC5F-4343-9740-4A875C96809F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63821F28-E598-4C1A-99EE-5A238DB65DB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578485",
            "matchCriteriaId" : "5DFB5760-6667-44F0-8063-0DD22C206FA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2982F8-D7A0-4E9F-8EDB-FC7F0621DB79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578485",
            "matchCriteriaId" : "C245853A-CE45-4610-86C4-F0213F2C6938"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646D0AD9-E6ED-41CF-AE1A-6C675C420F37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578489",
            "matchCriteriaId" : "6F28F669-D173-4FD4-82B5-1C7DFBF89FEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36605F3-61F2-4AE1-8459-BB7C6A5A8912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a69a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578489",
            "matchCriteriaId" : "1F80D2C9-75CF-4E9A-BBB2-E315646E68E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a69a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51626349-C529-4840-A036-CF19A68FD448"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578489",
            "matchCriteriaId" : "566E133C-A6BF-4DC6-B322-F46C88C90FFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A5DDD3-0056-45E3-AAEE-84CB0D804F83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:f2a71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578489",
            "matchCriteriaId" : "247EC9E5-4059-4E56-B0E6-11960F0337E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:f2a71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83CD0F3-938F-461A-B9BC-349B484CBDB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce503a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578484",
            "matchCriteriaId" : "D4C0C0C7-DAC5-4D28-9114-66BC8DD550F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce503a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5F848D-802D-4564-AFCA-E5874FF48AC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce504a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578484",
            "matchCriteriaId" : "A26EE794-72E3-4794-8531-491D17854FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce504a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1E21D2-C86C-4B15-AFBE-ACC7AD885E01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce738a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578484",
            "matchCriteriaId" : "84DF737B-ACFA-4C53-99F7-493597701038"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce738a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3224DFD3-759A-4AE5-A3D0-A86A91FB2221"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j64a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "617DCD99-4AE4-46AF-88D9-C37C8008BC57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j64a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0F9E02-C57A-483B-84DD-EED5F231CED6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j72a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "8728B0B1-C2D0-4A1D-B5C6-A7433103E0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j72a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA570A-35D0-4A28-B80F-C98195B013F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j72a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "8728B0B1-C2D0-4A1D-B5C6-A7433103E0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j72a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA570A-35D0-4A28-B80F-C98195B013F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8j78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000041",
            "matchCriteriaId" : "C2AA71D1-3F0D-46B0-B0C4-9CB58C1AA292"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8j78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05532D1-7275-485E-9D2B-EEF65ABDB51E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g85a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578479",
            "matchCriteriaId" : "2A053248-B49F-4DA8-9EF9-6925CFFC1038"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g85a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480FED5-85AA-4D6A-805B-995A6BCE70C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b3g85a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000040",
            "matchCriteriaId" : "FFAB6CE3-8136-4E14-85E8-02C71A35B975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b3g85a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480FED5-85AA-4D6A-805B-995A6BCE70C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf118a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000048",
            "matchCriteriaId" : "60D6C283-A142-4E5C-A524-1D12908EE744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf118a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA28619-6BDC-4167-8DEA-67FF748D2453"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf118a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578493",
            "matchCriteriaId" : "A28113A3-DF6A-4FCB-B9CD-D9597F4E44DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf118a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA28619-6BDC-4167-8DEA-67FF748D2453"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf367a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000060",
            "matchCriteriaId" : "77741053-5EF1-42AC-A34A-3A3CDAB76AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf367a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915BCAF3-F2C4-46F9-80EF-08C49E3C19CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf367a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578495",
            "matchCriteriaId" : "A376757D-9959-4C7F-AE5F-AF07E4297292"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf367a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915BCAF3-F2C4-46F9-80EF-08C49E3C19CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd646a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000045",
            "matchCriteriaId" : "EBC321EC-3DCD-4C78-8A52-12E6A0E58720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd646a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A1C170-BC7D-49EC-B1EF-D56D4469590E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd646a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578502",
            "matchCriteriaId" : "55788444-C77B-40CD-8662-AD5135C63A8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd646a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A1C170-BC7D-49EC-B1EF-D56D4469590E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf081a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578506",
            "matchCriteriaId" : "C351B9EB-58D1-4789-9F72-076D44FA8C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf081a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF19F65-3CD4-46C3-9AFD-1C5EA0942B7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf082a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578506",
            "matchCriteriaId" : "58756484-E0F2-4EAF-85C6-048A850BA766"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf082a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64646EAE-4CFF-4184-BA59-DCD59C18C217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf083a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578506",
            "matchCriteriaId" : "221FF28C-9A43-46B1-9B25-F8C93DBA5D6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf083a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FBCD353-9942-4B5C-BEAB-BF818B22962C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "4B2BDD98-3C7A-48EC-BC10-46E436F9BD59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42266438-FCAA-4626-A5E6-EA675BC6CED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w75a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "EDE4517C-A53E-46AD-82E4-AC61A1C2FCF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w75a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21E6919-1D0C-44DA-AFF5-77486213E98A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p71v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "A977042B-594A-4FDA-8D2B-6193DBC9B121"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p71v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF79E523-42D2-44E6-8539-749245011ADB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "DD533EC0-158E-4C96-8F4C-B9C79534C6F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CF9EF0-4DA6-41B6-B3FD-B56C7A28918A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "3751B104-D6BA-434A-8393-7BFC229E61F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B493D74-36C7-4E26-B9FB-2945461FA820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u51a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "63D1D8E5-C372-4D8C-8C10-F45CB3DD1616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u51a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272B4C76-38E6-4325-AF41-C1685EE7FB1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u52a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "5955C893-145D-4496-82FF-A6A17BAF8D4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u52a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CECD2D0-CBF1-4091-AABE-B86A696ADB57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000054",
            "matchCriteriaId" : "DD3C0952-DE91-43C1-A18F-165D0645490D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D37084-8449-47CA-86BA-EF4D9291C6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "ACC251CE-B560-4C4D-97DD-E9DC296854F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42266438-FCAA-4626-A5E6-EA675BC6CED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w75a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "5FDE7033-D70F-4069-82AC-3C80072A65C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w75a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21E6919-1D0C-44DA-AFF5-77486213E98A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p71v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "6D51D308-6C89-4D52-A0CC-44209F5A5A27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p71v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF79E523-42D2-44E6-8539-749245011ADB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p71a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "AA003E1D-463C-445C-B46D-F68D0FF39CCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p71a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CF9EF0-4DA6-41B6-B3FD-B56C7A28918A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "15EA695D-1AF6-4A23-81A6-A65271F9B530"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B493D74-36C7-4E26-B9FB-2945461FA820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u51a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "D89FF02B-DF92-488B-B89F-2E4F275551A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u51a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272B4C76-38E6-4325-AF41-C1685EE7FB1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u52a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "150BBC70-11D5-4A47-AD74-1534E3E9BF63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u52a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CECD2D0-CBF1-4091-AABE-B86A696ADB57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578494",
            "matchCriteriaId" : "2EE2C49D-9239-40E0-83B2-82045694B4A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D37084-8449-47CA-86BA-EF4D9291C6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000057",
            "matchCriteriaId" : "998EA3DA-EC26-4419-A94A-5419CB7650B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BA1E17-7260-4BE9-A8D0-FF62A47EA988"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000057",
            "matchCriteriaId" : "515E0126-6944-447C-BB0C-DA4BC5202700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A66E28-F591-4105-8F5C-658047CB28AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000057",
            "matchCriteriaId" : "943561F5-7900-4147-A3F0-CA34D94EC247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A56760E-BDBF-455D-892B-27B3A309E53D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p73a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000057",
            "matchCriteriaId" : "718CAA92-0D9D-42AB-A11F-6DC7AE16FC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p73a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27224374-D245-4709-B6E9-E6AEF10D4A81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578499",
            "matchCriteriaId" : "1B7BF7D0-DE8F-472D-9BD3-7979E80AB08A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BA1E17-7260-4BE9-A8D0-FF62A47EA988"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578499",
            "matchCriteriaId" : "8CABDA70-F7D0-43DE-BFF8-24A691EED2D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A66E28-F591-4105-8F5C-658047CB28AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:a2w79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578499",
            "matchCriteriaId" : "86CEF204-CA69-472F-8745-4AF7348241CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:a2w79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A56760E-BDBF-455D-892B-27B3A309E53D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d7p73a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578499",
            "matchCriteriaId" : "EA1683D6-0200-40B1-A2B5-A1DE87C551DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d7p73a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27224374-D245-4709-B6E9-E6AEF10D4A81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf235a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578504",
            "matchCriteriaId" : "205C2522-26B7-4410-9B5E-4238F63FBCCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf235a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCEAD56-073F-423B-B1AA-7DE21DFC1DA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf236a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578504",
            "matchCriteriaId" : "C2B43399-B393-4414-91E7-6E152A5D1241"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf236a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D83788-6F36-4826-BA2C-1FFDB83192A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf238a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578504",
            "matchCriteriaId" : "B49DC4F3-27F1-4AE7-BDFA-845CDD26F422"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf238a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EC7506-7169-4B99-BAD5-91E3150B8EB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce989a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "2F1A900C-89F5-4DD9-B651-37F4C0F7A945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce989a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A54EDB-CC34-4BC4-A20A-0EA30FC798DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce990a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "43AFE599-AB6C-4945-A267-3B210549D57B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce990a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD99E74-A75F-44B8-86F3-22850CEBEA9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce991a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "76AEB904-124C-41EB-A7C2-87DD233C8F59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce991a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8412130-F79B-45BF-A8CF-9F24FF5F777A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce992a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "9F0C0661-D928-448E-8BDB-3A9D87D2B3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce992a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2765F303-BA92-4BE1-A672-62CAF0ECC201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce993a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "400B9B8C-818C-4781-A788-2BF192738E9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce993a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C58820-E294-4BE6-9565-78B0EAEE0CF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce994a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "68D744E5-F540-4988-8D7B-00F89629E6E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce994a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB2F91-FCAA-4A92-A7DC-9637C901FB53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce995a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "3034ABA3-ADB1-4B61-B0BB-D8B43758D010"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce995a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6798D2-FD42-44F9-A45D-AA49228F672B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce996a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578503",
            "matchCriteriaId" : "CF44EC14-AA5D-4D07-B81D-CEF7442DBDC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce996a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F40E086-FFDE-4E4E-9DB0-F537F7CEB6E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf116a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000048",
            "matchCriteriaId" : "819CA23F-D4C7-4E38-B22D-69919C9F9381"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf116a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBA452B-6812-48FA-8DEE-AA72F6FFCCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u59a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000048",
            "matchCriteriaId" : "8009F0C0-74B6-46C1-A24E-A73E37CDC955"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u59a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C5D93B-1615-41CC-9724-20EDF073DCFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf117a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000048",
            "matchCriteriaId" : "62B84FFC-9093-41F4-8279-F61FEFBCFDBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf117a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA39F69-75F0-4574-A8B9-435AE52890D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u60a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000048",
            "matchCriteriaId" : "7DADD654-E308-4509-8FAA-0BAD4D96B40D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u60a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CAFF5-4F33-428D-A963-78AB164CF85E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf116a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578493",
            "matchCriteriaId" : "A1010235-44B1-47F0-B86B-BDB16DF2A4A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf116a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBA452B-6812-48FA-8DEE-AA72F6FFCCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u60a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578493",
            "matchCriteriaId" : "6DA014C8-826D-401E-A87C-67E585CD8890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u60a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CAFF5-4F33-428D-A963-78AB164CF85E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cf117a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578493",
            "matchCriteriaId" : "7A250E84-E0F7-45E9-AABE-20ABF3702C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cf117a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA39F69-75F0-4574-A8B9-435AE52890D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u59a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578493",
            "matchCriteriaId" : "A7C83616-43B9-43CE-A901-F93FCA83034C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u59a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C5D93B-1615-41CC-9724-20EDF073DCFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd645a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000045",
            "matchCriteriaId" : "02085202-4497-4B2D-9A55-2977310769CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd645a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD382BD5-E902-47C0-B9E5-3F08D04EEFAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd644a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000045",
            "matchCriteriaId" : "2E3C6D31-68CC-464A-BC5C-AEAEB0258263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9F0833-1CFB-4425-9C66-ACA8680545B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd644a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578502",
            "matchCriteriaId" : "0357C76E-91C6-46C4-A256-3B3039CEBD72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9F0833-1CFB-4425-9C66-ACA8680545B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cd645a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578502",
            "matchCriteriaId" : "40CEF701-4CE0-4E0D-96E0-02D515E5C5D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cd645a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD382BD5-E902-47C0-B9E5-3F08D04EEFAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "6C204479-2FE7-4ED7-9225-3B1DFDB31940"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB24D6A3-4C07-4C62-B980-98BCFB4D792F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "5AE1A402-5316-4660-9E68-FE81835EECA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2028B6D-23B9-44F8-9827-873BACD862B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u56a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "585FCA7A-A9DD-4EA6-B69F-B169BE4ED934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u56a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E988F1FC-1381-4AB0-9962-5273091E4887"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3u55a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "6FBB379A-A30F-40DA-AF96-F88D4BA9E98C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3u55a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344E0E92-8077-4719-8EED-2821DBB10A2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz250a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000042",
            "matchCriteriaId" : "35D99D23-DCFE-436B-9B9A-B1E6E1BB2ABA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz250a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1558200-C015-4972-9CF2-13CC73C6949C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz251a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000042",
            "matchCriteriaId" : "8A0D13A9-AC58-4733-875A-4A5C7D388CCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz251a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6406B6-C95D-43D0-86E4-7C3570AE4CEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz248a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000042",
            "matchCriteriaId" : "F266AD06-D683-46B6-B013-D0E0C579F4C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz248a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C77D996-D2AD-450F-ADB9-BD5F7557AD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz249a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000042",
            "matchCriteriaId" : "39DE3AE4-9C63-4A06-B391-CACE57523516"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz249a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EA5150-015F-4D53-85D7-C81944149BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz250a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578496",
            "matchCriteriaId" : "C137536F-040F-485B-B9F5-235979C52B50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz250a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1558200-C015-4972-9CF2-13CC73C6949C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz248a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578496",
            "matchCriteriaId" : "83DC255E-5922-4AC5-88AB-BD2CFD26153F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz248a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C77D996-D2AD-450F-ADB9-BD5F7557AD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz251a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578496",
            "matchCriteriaId" : "B4B2DC92-482B-4A6E-BBBC-497DE843FFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz251a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6406B6-C95D-43D0-86E4-7C3570AE4CEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz249a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578496",
            "matchCriteriaId" : "B8BB7415-AD3A-41AC-B69B-BEC1E36A9B03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz249a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EA5150-015F-4D53-85D7-C81944149BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "91533CA6-409F-443C-8171-B8EE6E2D83F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09064F4-6D73-4322-BB73-484CC0628F05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a11a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "C26F6FB5-1B62-4635-B5FD-0E63BA733385"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a11a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20A4C4E-5BA9-405C-931F-9996A982BDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000038",
            "matchCriteriaId" : "53820F60-7667-4D5B-AF30-8A60B38E841D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079A4D1F-49F2-42C4-979D-6D7B176A2C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000038",
            "matchCriteriaId" : "0D3703D4-81B1-4C8F-A9A1-379397C0BDBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E43FA4-6AFF-4915-BE06-89CD04256CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000038",
            "matchCriteriaId" : "FD0A2D0E-BBFB-4217-8E14-6AF3F7A46E0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BC58CE-E6D1-46E1-9E0C-4C9C7A8408B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l49a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000038",
            "matchCriteriaId" : "FD70B12E-58CB-485E-A4AC-3B0D2F8D294A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l49a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2F2DEA-8CC7-432E-8AE4-E53E215C00E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l54a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000038",
            "matchCriteriaId" : "D3F2D6EC-ADB4-4F7A-92C2-63D7E6766A2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l54a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FF37D0-1901-474A-8C4D-80C09DF1DC54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l50a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000038",
            "matchCriteriaId" : "2176D410-5844-4716-B23A-1C8E7F6C2DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l50a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC84A4B-8043-400E-8048-681AC90A728A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578488",
            "matchCriteriaId" : "82504C58-234C-4A19-909F-9CF8116FA30F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079A4D1F-49F2-42C4-979D-6D7B176A2C26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578488",
            "matchCriteriaId" : "BC477158-DAD7-4796-A92D-0B129AC7F27E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E43FA4-6AFF-4915-BE06-89CD04256CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578488",
            "matchCriteriaId" : "B465B863-CC77-4214-8C27-191ABDFAC5BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BC58CE-E6D1-46E1-9E0C-4C9C7A8408B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l49a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578488",
            "matchCriteriaId" : "3C516F59-03E5-41BE-9480-8A90E1606B73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l49a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2F2DEA-8CC7-432E-8AE4-E53E215C00E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l50a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578488",
            "matchCriteriaId" : "123AC69B-9DFE-41CE-A8C8-B015450A2236"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l50a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC84A4B-8043-400E-8048-681AC90A728A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l54a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578488",
            "matchCriteriaId" : "796AD91C-84B8-4BA3-A001-360442C6E306"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l54a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0FF37D0-1901-474A-8C4D-80C09DF1DC54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3l08a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578501",
            "matchCriteriaId" : "85AD7382-0125-4644-9E66-D3206A72AEB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3l08a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A251D48-87A8-48FC-AF78-C0B777544F3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3l09a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578501",
            "matchCriteriaId" : "A20AACE7-FC09-41B6-AFE5-147CBC751BDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3l09a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6821F1D6-64E5-4455-BC1E-5D44DDBF7B0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d3l10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578501",
            "matchCriteriaId" : "B6571F1B-AF46-4267-ADA6-44DA8AF86ADB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d3l10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D50185D-D324-4396-975D-1F2ED909F1A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z98a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "9521AEDD-E42D-40FE-AFC5-9DA106F154BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z98a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720AEBB5-C620-484E-B7B1-5F8F4610F559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j7z99a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "BF36D065-587B-446C-B0AC-B6152EAFC371"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j7z99a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "210879DE-341E-4754-AE45-F7FE30950A61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a04a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "25D165EA-5169-4EC3-BCA9-24BF2A68AC4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a04a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F13F451-44AB-4257-9DF7-380FDBF1F341"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a05a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "DA468657-9A83-40DC-AAB8-66D0F8E072B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a05a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A4A90D-0106-447A-BCD7-7E277967E596"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a06a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405130_000068",
            "matchCriteriaId" : "7F65B9D5-F7C3-4474-89B6-62A04A72C170"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a06a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA560B6-08C6-4D7E-94D1-ED757F38CAB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz255a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000047",
            "matchCriteriaId" : "AE9D55B3-5EA8-4BE9-B36F-D2835DB5ECF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz255a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0A2497-71D3-41B3-8605-E8D1571EB422"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz256a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000047",
            "matchCriteriaId" : "7239AE20-EA1E-4AF5-9F29-6A02B38F8EE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz256a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C139B39-BC0A-494B-A397-100BAE4496EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz257a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000047",
            "matchCriteriaId" : "F3276D2D-ACE5-40BB-9339-2955E0D80A38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz257a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9F4435-E0B8-4469-A9CF-E285B788BBC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz258a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000047",
            "matchCriteriaId" : "8A1F37F3-0FA4-4F1E-9C0C-EB03EE8DFCF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz258a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EC177C-8515-431F-88D3-F396EA41AD14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz255a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578497",
            "matchCriteriaId" : "216F94D1-87BC-4089-A70D-9EF6238E7775"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz255a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0A2497-71D3-41B3-8605-E8D1571EB422"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz256a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578497",
            "matchCriteriaId" : "775C264C-8D68-4F1E-808A-560009A27668"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz256a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C139B39-BC0A-494B-A397-100BAE4496EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz257a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578497",
            "matchCriteriaId" : "8EFFCD69-5EC7-42E1-ACE5-FD9F085CFBE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz257a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9F4435-E0B8-4469-A9CF-E285B788BBC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cz258a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578497",
            "matchCriteriaId" : "AE666C78-32EC-47B8-A546-EB3F6E22416F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cz258a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EC177C-8515-431F-88D3-F396EA41AD14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l23a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_57848",
            "matchCriteriaId" : "38361A7D-2137-4F54-B669-C2470CC8A61C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l23a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD1CDCE-AFFD-45EA-B93E-5CDE9FF770A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l24a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_57848",
            "matchCriteriaId" : "DA1F6ECB-C251-4388-B6D1-60582A0A23B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l24a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544AC169-58D0-44C7-A24E-8EFFFB69A76D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l25a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_57848",
            "matchCriteriaId" : "36CDB060-A00F-42C3-81B1-9C29D3256035"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l25a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910E96AE-68FB-403A-A87F-8B1D2CDF38FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:b5l26a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_57848",
            "matchCriteriaId" : "2CAEF2B5-D7B2-480F-8279-A57F17076D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:b5l26a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59748F44-B402-47B3-BE18-F9370BEEF6EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a12a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "E26BEFF2-C964-44D3-8D03-659651FDA080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a12a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A188E86-67C1-4309-8A29-7D2BE87F692A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a13a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "FE365D77-A71F-412D-9D1E-4B27EE2D2A95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a13a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2B1E9-6B39-4750-B674-2DD9BAA6C544"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j8a17a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2405129_000037",
            "matchCriteriaId" : "B6A36060-F74A-4355-B562-B72C1D6F1A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j8a17a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A16962A-4A89-4EE0-BDF3-74A296E38CF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce707a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578508",
            "matchCriteriaId" : "76986CA9-B2BB-4752-BA2E-F6383ABAB3D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce707a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C972F12C-7301-4405-9E48-69716C25709E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce708a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578508",
            "matchCriteriaId" : "CF31BB98-689F-4345-BCE1-AF5873B063E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce708a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C41BE5-5BEB-40FB-925B-24B48ADB7E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:ce709a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578508",
            "matchCriteriaId" : "6E697E33-DA3C-4588-9769-F24C9B778A8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:ce709a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E99DDDD-9BFA-40AB-8872-33A85C795185"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc419a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578507",
            "matchCriteriaId" : "C61378E0-A5DE-43FF-A8AF-D473EE7B63A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc419a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F45F60-5168-4492-A784-AFBBDA8AC4E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc420a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578507",
            "matchCriteriaId" : "5FB98869-A101-4D39-8197-701CFAED7E4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc420a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A200BA-0D92-49C6-B628-D847D725B25A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:cc421a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2308937_578507",
            "matchCriteriaId" : "6BA77C49-FED7-4C2D-AC95-B25A57C936F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:cc421a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2572621C-EF37-4872-89E1-15F0E7B76535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101965",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05839270",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05839270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15432",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:00.673",
      "lastModified" : "2023-11-07T02:39:51.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15433",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:00.767",
      "lastModified" : "2023-11-07T02:39:52.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15434",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:00.813",
      "lastModified" : "2023-11-07T02:39:52.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15435",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:00.860",
      "lastModified" : "2023-11-07T02:39:52.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15436",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:00.923",
      "lastModified" : "2023-11-07T02:39:53.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15437",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.000",
      "lastModified" : "2023-11-07T02:39:53.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15438",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.063",
      "lastModified" : "2023-11-07T02:39:53.533",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15439",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.143",
      "lastModified" : "2023-11-07T02:39:53.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15440",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.190",
      "lastModified" : "2023-11-07T02:39:54.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15441",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.250",
      "lastModified" : "2023-11-07T02:39:54.250",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15442",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.330",
      "lastModified" : "2023-11-07T02:39:54.503",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15443",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.423",
      "lastModified" : "2023-11-07T02:39:54.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15444",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.487",
      "lastModified" : "2023-11-07T02:39:54.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15445",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.547",
      "lastModified" : "2023-11-07T02:39:55.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15446",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.597",
      "lastModified" : "2023-11-07T02:39:55.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15447",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.673",
      "lastModified" : "2023-11-07T02:39:55.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15448",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.720",
      "lastModified" : "2023-11-07T02:39:55.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15449",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.767",
      "lastModified" : "2023-11-07T02:39:56.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15450",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.830",
      "lastModified" : "2023-11-07T02:39:56.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15451",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.893",
      "lastModified" : "2023-11-07T02:39:56.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15452",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:01.957",
      "lastModified" : "2023-11-07T02:39:56.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15453",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.017",
      "lastModified" : "2023-11-07T02:39:57.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15454",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.080",
      "lastModified" : "2023-11-07T02:39:57.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15455",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.143",
      "lastModified" : "2023-11-07T02:39:57.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15456",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.207",
      "lastModified" : "2023-11-07T02:39:57.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15457",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.250",
      "lastModified" : "2023-11-07T02:39:58.183",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15458",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.297",
      "lastModified" : "2023-11-07T02:39:58.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15459",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.347",
      "lastModified" : "2023-11-07T02:39:58.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15460",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.407",
      "lastModified" : "2023-11-07T02:39:58.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15461",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.457",
      "lastModified" : "2023-11-07T02:39:59.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15462",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.517",
      "lastModified" : "2023-11-07T02:39:59.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15463",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.563",
      "lastModified" : "2023-11-07T02:39:59.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15464",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.610",
      "lastModified" : "2023-11-07T02:39:59.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15465",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.657",
      "lastModified" : "2023-11-07T02:40:00.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15466",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.707",
      "lastModified" : "2023-11-07T02:40:00.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15467",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.767",
      "lastModified" : "2023-11-07T02:40:00.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15468",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.813",
      "lastModified" : "2023-11-07T02:40:00.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15469",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.860",
      "lastModified" : "2023-11-07T02:40:01.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15470",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.923",
      "lastModified" : "2023-11-07T02:40:01.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15471",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:02.987",
      "lastModified" : "2023-11-07T02:40:01.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15472",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.033",
      "lastModified" : "2023-11-07T02:40:01.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15473",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.080",
      "lastModified" : "2023-11-07T02:40:02.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15474",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.127",
      "lastModified" : "2023-11-07T02:40:02.507",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15475",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.173",
      "lastModified" : "2023-11-07T02:40:02.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15476",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.220",
      "lastModified" : "2023-11-07T02:40:02.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15477",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.267",
      "lastModified" : "2023-11-07T02:40:03.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15478",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.313",
      "lastModified" : "2023-11-07T02:40:03.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15479",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.360",
      "lastModified" : "2023-11-07T02:40:03.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15480",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.407",
      "lastModified" : "2023-11-07T02:40:03.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15481",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.457",
      "lastModified" : "2023-11-07T02:40:04.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15482",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.500",
      "lastModified" : "2023-11-07T02:40:04.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15483",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.563",
      "lastModified" : "2023-11-07T02:40:04.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15484",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.657",
      "lastModified" : "2023-11-07T02:40:05.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15485",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.707",
      "lastModified" : "2023-11-07T02:40:05.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15486",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.767",
      "lastModified" : "2023-11-07T02:40:05.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15487",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.830",
      "lastModified" : "2023-11-07T02:40:05.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15488",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.893",
      "lastModified" : "2023-11-07T02:40:06.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15489",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.923",
      "lastModified" : "2023-11-07T02:40:06.437",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15490",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:03.970",
      "lastModified" : "2023-11-07T02:40:06.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15491",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.033",
      "lastModified" : "2023-11-07T02:40:06.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15492",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.080",
      "lastModified" : "2023-11-07T02:40:07.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15493",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.110",
      "lastModified" : "2023-11-07T02:40:07.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15494",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.157",
      "lastModified" : "2023-11-07T02:40:07.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15495",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.207",
      "lastModified" : "2023-11-07T02:40:08.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15496",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.267",
      "lastModified" : "2023-11-07T02:40:08.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15497",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.313",
      "lastModified" : "2023-11-07T02:40:08.533",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15498",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.377",
      "lastModified" : "2023-11-07T02:40:08.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15499",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.440",
      "lastModified" : "2023-11-07T02:40:09.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15500",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.487",
      "lastModified" : "2023-11-07T02:40:09.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15501",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.547",
      "lastModified" : "2023-11-07T02:40:09.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15502",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.597",
      "lastModified" : "2023-11-07T02:40:09.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15503",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.657",
      "lastModified" : "2023-11-07T02:40:10.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15504",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.690",
      "lastModified" : "2023-11-07T02:40:10.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15505",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.737",
      "lastModified" : "2023-11-07T02:40:10.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15506",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.783",
      "lastModified" : "2023-11-07T02:40:10.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15507",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.860",
      "lastModified" : "2023-11-07T02:40:11.097",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15508",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.907",
      "lastModified" : "2023-11-07T02:40:11.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15509",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:04.957",
      "lastModified" : "2023-11-07T02:40:11.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15510",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:05.003",
      "lastModified" : "2023-11-07T02:40:11.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15511",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:05.063",
      "lastModified" : "2023-11-07T02:40:12.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15512",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:05.097",
      "lastModified" : "2023-11-07T02:40:12.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15513",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-01-23T17:29:05.143",
      "lastModified" : "2023-11-07T02:40:12.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-23T18:29:00.220",
      "lastModified" : "2024-11-21T03:19:08.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledge_base/get_article_suggestion/."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en RISE Ultimate Project Manager 1.9 permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro search en index.php/knowledge_base/get_article_suggestion/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fairsketch:rise_ultimate_project_manager:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6394D4B6-9C4D-494B-941F-04FBF67ED3FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145902/RISE-1.9-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43591/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145902/RISE-1.9-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43591/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-23T18:29:00.440",
      "lastModified" : "2024-11-21T03:19:12.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch."
      }, {
        "lang" : "es",
        "value" : "La función cirrus_invalidate_region en hw/display/cirrus_vga.c en Qemu permite que usuarios del sistema operativo invitados con privilegios provoquen una denegación de servicio (acceso al array fuera de límites y cierre inesperado del proceso Qemu) mediante vectores relacionados con un paso negativo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/15/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/15/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15531",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-01-23T20:29:00.283",
      "lastModified" : "2024-11-21T03:14:43.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users.  A remote attacker can use brute force search to guess a user password and gain access to Reporter."
      }, {
        "lang" : "es",
        "value" : "Symantec Reporter en versiones 9.5 anteriores a la 9.5.4.1 y 10.1 anteriores a la 10.1.5.5 no restringe los excesivos intentos de autenticación para los usuarios de la interfaz de gestión. Un atacante remoto puede emplear búsquedas de fuerza bruta para adivinar una contraseña de usuario y obtener acceso a Reporter."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:reporter:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5",
            "versionEndExcluding" : "9.5.4.1",
            "matchCriteriaId" : "47BE5353-2F56-4AEF-B3A5-DADF4CC13A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:reporter:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C642BF-9677-434A-B191-52DE0CA41E75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102751",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA158",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12632",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-23T22:29:00.277",
      "lastModified" : "2024-11-21T03:09:56.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release."
      }, {
        "lang" : "es",
        "value" : "Una cabecera de host manipulada en una petición HTTP entrante podría provocar que NiFi cargue recursos de un servidor externo. La solución para sanear cabeceras de host y compararlas con una lista blanca controlada se aplicó en la versión 1.5.0 de Apache NiFi. Los usuarios que ejecuten una distribución 1.x anterior deben actualizarla a la distribución adecuada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "FA92947F-BFC8-4F0A-B24A-7AD9BAFDB0D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-12632",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-12632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15697",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-23T22:29:00.337",
      "lastModified" : "2024-11-21T03:15:01.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious X-ProxyContextPath or X-Forwarded-Context header containing external resources or embedded code could cause remote code execution. The fix to properly handle these headers was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release."
      }, {
        "lang" : "es",
        "value" : "Una cabecera X-ProxyContextPath o X-Forwarded-Context maliciosa que contenga recursos externos o código embebido puede provocar la ejecución remota de código. La solución para gestionar apropiadamente estas cabeceras se aplicó en la distribución 1.5.0 de Apache NiFi. Los usuarios que ejecuten una distribución 1.x anterior deben actualizarla a la distribución adecuada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "B5699FDF-232B-4292-85C3-7835CAC2229B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-15697",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-15697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T10:29:00.223",
      "lastModified" : "2024-11-21T03:19:18.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls."
      }, {
        "lang" : "es",
        "value" : "crypto/pcrypt.c en el kernel de Linux en versiones anteriores a la 4.14.13 gestiona de manera incorrecta la liberación de instancias, lo que permite que un usuario local acceda a la interfaz AEAD basada en AF_ALG (CONFIG_CRYPTO_USER_API_AEAD) y pcrypt (CONFIG_CRYPTO_PCRYPT) para provocar una denegación de servicio (kfree de un puntero incorrecto) o, posiblemente, causar otro tipo de impacto sin especificar mediante la ejecución de una secuencia manipulada de llamadas del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.111",
            "matchCriteriaId" : "59A1E494-3731-439A-9E74-5A560A7363B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.76",
            "matchCriteriaId" : "C2A2A513-DC1C-45F4-B9E2-237203C2C3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.13",
            "matchCriteriaId" : "063D10E5-185A-4A85-9867-844FC6FE2761"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d76c68109f37cb85b243a1cf0f40313afd2bae68",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102813",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d76c68109f37cb85b243a1cf0f40313afd2bae68",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d76c68109f37cb85b243a1cf0f40313afd2bae68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d76c68109f37cb85b243a1cf0f40313afd2bae68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T14:29:00.250",
      "lastModified" : "2024-11-21T03:04:48.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "FreeSSHd 1.3.1 es vulnerable a un servicio con ruta sin entrecomillar, lo que permite que usuarios locales lancen procesos con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freesshd:freesshd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59D8CD0-F332-469C-9EE1-6945A374CD00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lajarajorge/CVE-2017-1000475/blob/master/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/48044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/lajarajorge/CVE-2017-1000475/blob/master/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/48044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15718",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-24T14:29:00.327",
      "lastModified" : "2024-11-21T03:15:04.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications."
      }, {
        "lang" : "es",
        "value" : "El YARN NodeManager en Apache Hadoop 2.7.3 y 2.7.4 puede filtrar la contraseña del proveedor de almacén de contraseñas utilizado por el NodeManager en aplicaciones YARN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9437CAB-BAA4-40E1-9A24-2A801AA132F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hadoop:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879F348C-8748-4392-8862-B197B0D06269"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1769",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-24T14:29:00.420",
      "lastModified" : "2024-11-21T03:22:20.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager 8.6 es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 136783."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324A0484-C50D-4400-B6FD-23D793F032AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102777",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040298",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136783",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12176",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.247",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación extra de longitud en la función ProcEstablishConnection, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12177",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.307",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 era vulnerable a un desbordamiento de enteros en la función ProcDbeGetVisualInfo, lo que permitiría que atacantes provoquen que el cliente malicioso X haga que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12178",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.370",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 tenía una validación extra de longitud equivocada en la función ProcXIChangeHierarchy, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509219",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12179",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.433",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 era vulnerable a un desbordamiento de enteros en las funciones (S)ProcXIBarrierReleasePointer, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12180",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.497",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en XFree86 VidModeExtension, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12181",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.557",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión XFree86 DGA, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509222",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12182",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.620",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión XFree86 DRI, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509223",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced2463404174b50b3581dbd857b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12183",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.700",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión XFIXES, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509224",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12184",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.760",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión XINERAMA, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509225",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12185",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.840",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión MIT-SCREEN-SAVER, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12186",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.903",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión X-Resource, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12187",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:00.997",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "xorg-x11-server en versiones anteriores a la 1.19.5 no tenía una validación de longitud en la extensión RENDER, lo que permitía que atacantes remotos permitan que el cliente malicioso X provoque que el servidor X se cierre inesperadamente o que, posiblemente, ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.5",
            "matchCriteriaId" : "B7738370-58C4-4212-9AF1-5E61186C837F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1509217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T15:29:01.057",
      "lastModified" : "2024-11-21T03:11:27.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer se encuentra en el componente web server de Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16 y Disk Pulse Enterprise 9.9.16, en donde un atacante puede manipular una petición GET maliciosa y explotar el componente web server. La explotación con éxito del software permitirá que un atacante obtenga acceso total al sistema con un nivel de privilegios NT AUTHORITY / SYSTEM. La vulnerabilidad se debe a la manipulación y saneamiento de la petición entrante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:dupscout:9.9.14:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FC8047FB-C516-4FC9-867D-D67AA9D5E300"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:disksavvy:9.9.14:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F934675-28CE-4AD5-A84F-8B08C9FD37B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:9.9.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "89FB9E13-DC1B-4B27-8B8A-7B375509D9B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:diskpulse:9.9.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A10D6DD3-FE0E-487D-891D-CA4A387BFFDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42557",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42558/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42559/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42560/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.rapid7.com/db/modules/exploit/windows/http/disk_pulse_enterprise_get",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42558/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42559/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42560/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.rapid7.com/db/modules/exploit/windows/http/disk_pulse_enterprise_get",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15135",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-24T15:29:01.167",
      "lastModified" : "2024-11-21T03:14:08.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que 389-ds-base, desde la versión 1.3.6.1 y hasta e incluyendo la versión 1.4.0.3, no manipulaba siempre las operaciones de comparación de hash internas de manera correcta durante el proceso de autenticación. Un atacante remoto no autenticado podría emplear este error para omitir el proceso de autenticación bajo circunstancias muy excepcionales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.6.1",
            "versionEndIncluding" : "1.4.0.3",
            "matchCriteriaId" : "9917C1A6-93B5-415D-B8F2-0131B9345A09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0515",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525628",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T22:29:00.230",
      "lastModified" : "2024-11-21T03:04:48.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manage_employee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Stored XSS vulnerability, which leads to remote code executing."
      }, {
        "lang" : "es",
        "value" : "Soyket Chowdhury Vehicle Sales Management System, versión 2017-07-30, es vulnerable a múltiples inyecciones de SQL en los scripts login/vehicle.php, login/profile.php, login/Actions.php, login/manage_employee.php y login/sell.php. Esto conlleva la exposición de las credenciales de inicio de sesión del usuario, una inyección SQL y a una vulnerabilidad de XSS persistente, que conduce a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_sales_management_system_project:vehicle_sales_management_system:2017-07-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86A49C-9A3D-41E8-AA74-231CC928DD25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://singsip.wixsite.com/singsip/vuln",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44318/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://singsip.wixsite.com/singsip/vuln",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44318/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T23:29:00.230",
      "lastModified" : "2024-11-21T03:04:52.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of these agents now requires the 'Run Scripts' permission typically only granted to administrators."
      }, {
        "lang" : "es",
        "value" : "Los usuarios con permisos para crear o configurar agentes en Jenkins 1.37 y anteriores podrían configurar un agente EC2 para ejecutar comandos del shell arbitrarios en el nodo maestro en cualquier momento en el que se suponga que el agente deba ser iniciado. Ahora, la configuración de estos agentes requiere el permiso \"Run Scripts\" que, normalmente, solo se otorga a los administradores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:ec2:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.37",
            "matchCriteriaId" : "647B1C87-EB95-4FDC-9A12-0A1F1228EDB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-12-06/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-12-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T23:29:00.310",
      "lastModified" : "2024-11-21T03:04:53.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related settings not being set to their usual strict default."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera durante el inicio de Jenkins 2.81 hasta la versión 2.94 (incluida) y la versión 2.89.1 podría desembocar en un orden incorrecto de ejecución de comandos durante el proceso de inicialización. En contadas ocasiones, esto podría resultar en el error a la hora de inicializar el asistente de instalación durante el primer inicio. Como resultado, múltiples opciones de seguridad no se establecieron en sus niveles strict por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.81",
            "versionEndIncluding" : "2.94",
            "matchCriteriaId" : "6206303A-CB18-4063-A633-A8AE7BB13885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:2.89.1:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F14937F4-6BF9-4BDC-B698-6EA53CC6FB26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-12-14/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-12-14/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-24T23:29:00.433",
      "lastModified" : "2024-11-21T03:04:53.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after startup during which Jenkins may no longer show the 'Please wait while Jenkins is getting ready to work' message but Cross-Site Request Forgery (CSRF) protection may not yet be effective."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera durante el inicio de Jenkins 2.94 y anteriores y 2.89.1 y anteriores podría desembocar en un orden incorrecto de ejecución de comandos durante el proceso de inicialización. Hay muy poco espacio de tiempo tras el inicio, durante el cual Jenkins podría no mostrar más el mensaje \"Please wait while Jenkins is getting ready to work\", pero la protección Cross-Site Request Forgery (CSRF) tal vez no sea efectiva todavía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.89.1",
            "matchCriteriaId" : "4CFA8D08-609F-49DB-890A-729BC54E6D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.94",
            "matchCriteriaId" : "757908B7-D146-441C-A578-20156BAD6332"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-12-14/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-12-14/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15546",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-25T03:29:00.227",
      "lastModified" : "2024-11-21T03:14:45.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerability to read any unencrypted data from the database."
      }, {
        "lang" : "es",
        "value" : "Security Console en EMC RSA Authentication Manager 8.2 SP1 P6 y anteriores está afectado por una vulnerabilidad de inyección SQL ciega. Usuarios autenticados maliciosos podrían explotar esta vulnerabilidad para leer cualquier dato sin cifrar de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2",
            "matchCriteriaId" : "8603D5EA-A79E-42F3-9007-79A9CE825ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3C063C-76E1-443A-8BAE-FFC9C66DE925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1_p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1672C-E2E7-4F52-8195-1C2714C41C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1_p2:*:*:*:*:*:*",
            "matchCriteriaId" : "72F1E8C7-631E-4279-B43B-5A300ECFBA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE00B3FD-710B-4876-B7C7-271A1C433E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1_p4:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E7AE26-6DA9-4C65-B05F-F941A6386449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "72C1589D-CE78-421B-83AE-C02F8A4B648D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A4C535-24E9-4B94-9ED5-8884D752A2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/81",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102838",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040268",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-25T14:29:00.210",
      "lastModified" : "2023-11-07T02:37:57.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-25T14:29:00.257",
      "lastModified" : "2023-11-07T02:37:57.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4962",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-01-25T15:29:00.223",
      "lastModified" : "2023-11-07T02:48:24.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-25T16:29:00.213",
      "lastModified" : "2024-11-21T03:04:41.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service."
      }, {
        "lang" : "es",
        "value" : "ImpulseAdventure JPEGsnoop 1.7.5 es vulnerable a división entre cero en la manipulación de decodificaciones JFIF, resultando en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:impulseadventure:jpegsnoop:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393CE22-6177-4114-948A-DE013C447574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImpulseAdventure/JPEGsnoop/commit/b4e458612d4294e0cfe01dbf1c0b09a07a8133a4#diff-cf9182aecc9d630e8db2e0e35f1eec65",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.impulseadventure.com/photo/jpeg-snoop-history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ImpulseAdventure/JPEGsnoop/commit/b4e458612d4294e0cfe01dbf1c0b09a07a8133a4#diff-cf9182aecc9d630e8db2e0e35f1eec65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.impulseadventure.com/photo/jpeg-snoop-history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-25T16:29:00.290",
      "lastModified" : "2024-11-21T03:14:33.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking."
      }, {
        "lang" : "es",
        "value" : "sql/event_data_objects.cc en MariaDB en versiones anteriores a la 10.1.30 y 10.2.x anteriores a la 10.2.10 y Percona XtraDB Cluster anterior a 5.6.37-26.21-3 y 5.7.x anteriores a 5.7.19-29.22-3 permite que los usuarios autenticados remotos con acceso SQL omitan las restricciones de acceso y repliquen las sentencias DDL (Data Definition Language) para agrupar nodos utilizando una orden de replicación de DDL y una comprobación de listas de control de acceso incorrectas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4D8269-B407-4C24-AAB0-02F885C7D752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.30",
            "matchCriteriaId" : "44E9AB36-D550-4453-AF71-557A54F8DF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.10",
            "matchCriteriaId" : "9CAD3CAD-7960-408C-B159-D514A6584D41"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:percona:xtradb_cluster:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.37-26.21-3",
            "matchCriteriaId" : "25227672-0E31-48F9-847F-EA2B48650B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:percona:xtradb_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndExcluding" : "5.7.19-29.22-3",
            "matchCriteriaId" : "D6CFE182-20B2-4A96-A705-2F4700282CE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524234",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELCZV46WIYSJ6VMC65GMNN3A3QDRUJGK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mariadb.com/kb/en/library/mariadb-10130-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/library/mariadb-10210-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELCZV46WIYSJ6VMC65GMNN3A3QDRUJGK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mariadb.com/kb/en/library/mariadb-10130-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/library/mariadb-10210-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-25T18:29:00.220",
      "lastModified" : "2024-11-21T03:04:53.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new `File` objects from strings. This allowed reading arbitrary files on the Jenkins master file system. Such a type coercion is now subject to sandbox protection and considered to be a call to the `new File(String)` constructor for the purpose of in-process script approval."
      }, {
        "lang" : "es",
        "value" : "En las versiones 1.36 y anteriores del plugin Script Security de Jenkins, los usuarios que pueden configurar scripts Groovy en sandbox pueden utilizar una característica de coerción de tipos en Groovy para crear nuevos objetos \"File\" a partir de las cadenas. Esto permitía leer archivos arbitrarios en el sistema de archivos maestro de Jenkins. Esta coerción de tipos esta sujeta ahora a medidas de protección de sandboxes y se considera una llamada al constructor \"new File(String)\" para la aprobación de scripts dentro del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:script_security:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.36",
            "matchCriteriaId" : "3F534CF3-AC16-439F-80D8-EA76EC27F2E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-12-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-12-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15132",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-25T20:29:00.213",
      "lastModified" : "2024-11-21T03:14:08.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to memory exhaustion."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un fallo en dovecot desde la versión 2.0 hasta la 2.2.33 y 2.3.0. El aborto de una autenticación SASL resulta en una fuga de memoria en el cliente de autenticación de dovecot utilizado por los procesos de inicio de sesión. La fuga provoca un impacto en la configuración de alto rendimiento en donde los mismos procesos de inicio de sesión se reutilizan y pueden provocar que el proceso se cierre de manera inesperada al agotarse la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.2.33",
            "matchCriteriaId" : "F64EF3A1-D4E6-4B36-A8ED-1F5D6A7E179A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891476A9-DA14-4647-A40F-19093E099954"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1532768",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3556-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3556-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dovecot.org/list/dovecot-news/2018-February/000370.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1532768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3556-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3556-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dovecot.org/list/dovecot-news/2018-February/000370.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15703",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-25T21:29:00.207",
      "lastModified" : "2024-11-21T03:15:02.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Any authenticated user (valid client certificate but without ACL permissions) could upload a template which contained malicious code and caused a denial of service via Java deserialization attack. The fix to properly handle Java deserialization was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release."
      }, {
        "lang" : "es",
        "value" : "Cualquier usuario autenticado (certificado de cliente válido pero sin permisos de listas de control de acceso) podía cargar una plantilla que contenga código malicioso y provocar una denegación de servicio (DoS) mediante un ataque de deserialización de Java. La solución para manejar la deserialización de Java se aplicó en la distribución 1.4.0 de Apache NiFi. Los usuarios que ejecuten una distribución 1.x anterior deben actualizarla a la distribución adecuada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "B5699FDF-232B-4292-85C3-7835CAC2229B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-15703",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2017-15703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3762",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-01-26T01:29:00.203",
      "lastModified" : "2024-11-21T03:26:05.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system in which it is installed."
      }, {
        "lang" : "es",
        "value" : "Los datos sensibles almacenados por Lenovo Fingerprint Manager Pro, en su versión 8.01.86 y anteriores, incluyendo las credenciales de inicio de sesión en Windows y los datos de huella digital de los usuarios, se cifran mediante un algoritmo débil, contienen una contraseña embebida y son accesibles a todos los usuarios con acceso local no administrativo al sistema en el que está instalado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:fingerprint_manager_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.01.86",
            "matchCriteriaId" : "4CB543BA-B73D-4C33-BF7E-54531398DF05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D229E41-A971-4284-9657-16D78414B93F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2019/05/08/3",
        "source" : "psirt@lenovo.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/05/08/4",
        "source" : "psirt@lenovo.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/05/08/5",
        "source" : "psirt@lenovo.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102837",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/product_security/LEN-15999",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/05/08/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/05/08/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/05/08/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.lenovo.com/product_security/LEN-15999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.267",
      "lastModified" : "2024-11-21T03:04:36.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page through the 'Active Choices Reactive Reference Parameter' type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the 'Build With Parameters' page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Active Choices en versiones 1.5.3 y anteriores permitía que usuarios con el permiso Job/Configure proporcionasen HTML arbitrarios para que se mostrase en la página \"Build With Parameters\" a través del tipo \"Active Choices Reactive Reference Parameter\". Esto podría incluir, por ejemplo, JavaScript arbitrario. Ahora, Active Choices sanea el HTML insertado en la página \"Build With Parameters\" solo si el script se ejecuta en un sandbox. Como los scripts que no se ejecutan en sandbox están sujetos a la aprobación del administrador, son estos usuarios los que deciden si permitir o no el envío de scripts problemáticos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:active_choices:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "FF04CE1B-11E0-4AED-915E-AD009D611E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:active_choices:1.5.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "06243B6F-3511-4AF2-AA93-C03DA6DCA5C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:active_choices:1.5.3:alpha:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "D4EDB876-32B4-4A2B-BB4B-DA098FB2D5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101538",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.330",
      "lastModified" : "2024-11-21T03:04:36.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Build-Publisher plugin version 1.21 and earlier stores credentials to other Jenkins instances in the file hudson.plugins.build_publisher.BuildPublisher.xml in the Jenkins master home directory. These credentials were stored unencrypted, allowing anyone with local file system access to access them. Additionally, the credentials were also transmitted in plain text as part of the configuration form. This could result in exposure of the credentials through browser extensions, cross-site scripting vulnerabilities, and similar situations."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Build-Publisher en su versión 1.21 y anteriores almacena credenciales en otras instancias de Jenkins en el archivo hudson.plugins.build_publisher.BuildPublisher.xml en el directorio de inicio del servidor maestro de Jenkins. Estas credenciales fueron almacenadas sin cifrar, lo que permite que cualquier persona con acceso al sistema de archivos local pueda acceder a ellas. Además, las credenciales también se transmitieron en texto plano como parte del formulario de configuración. Esto podría resultar en la exposición de credenciales a través de las extensiones del navegador, vulnerabilidades de Cross-Site Scripting (XSS) o situaciones similares."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:build-publisher:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "A5BFB890-DE15-49F1-9654-8981D78FCB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101544",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.377",
      "lastModified" : "2024-11-21T03:04:36.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Dependency Graph Viewer en versiones 0.12 y anteriores no realizaba comprobaciones de permisos para el extremo de la API que modifica el diagrama de dependencia, lo que permite que cualquier persona con permiso Overall/Read pueda modificar estos datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:dependency_graph_viewer:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.12",
            "matchCriteriaId" : "18582E08-B7E2-4E38-B01C-52C4A60B8AD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.423",
      "lastModified" : "2024-11-21T03:04:37.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some URLs provided by Jenkins global-build-stats plugin version 1.4 and earlier returned a JSON response that contained request parameters. These responses had the Content Type: text/html, so could have been interpreted as HTML by clients, resulting in a potential reflected cross-site scripting vulnerability. Additionally, some URLs provided by global-build-stats plugin that modify data did not require POST requests to be sent, resulting in a potential cross-site request forgery vulnerability."
      }, {
        "lang" : "es",
        "value" : "Algunas URL proporcionadas por el plugin Jenkins global-build-stats en su versión 1.4 y anteriores devolvía una respuesta JSON que contenía parámetros de peticiones. Estas respuestas tenían el Content Type: text/html, por lo que podrían interpretarse como HTML por los clientes, lo que resulta en una potencial vulnerabilidad de Cross-Site Scripting (XSS). Además, algunas URL proporcionadas por el plugin global-build-stats que modifican datos no requerían que las peticiones POST se enviasen, lo que resulta en una potencial vulnerabilidad de Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:global-build-stats:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "8B14BDFD-098B-4C3A-8B50-F1B7EDFA66EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.470",
      "lastModified" : "2024-11-21T03:04:37.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Multijob en su versión 1.25 y anteriores no comprobaba los permisos en la acción Resume Build, lo que permite que cualquier persona con permiso Job/Read continúe el build."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:multijob:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.25",
            "matchCriteriaId" : "A7C7EB01-E52C-4F81-A293-3B47B03F5394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102824",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.533",
      "lastModified" : "2024-11-21T03:04:37.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional escaping, potentially resulting in problems like overwriting of unrelated configuration files."
      }, {
        "lang" : "es",
        "value" : "Jenkins, en versiones 2.88 y anteriores y versiones 2.73.2 y anteriores almacena metadatos relacionados con \"people\", que incluye cuentas reales de usuario, así como usuarios que aparecen en SCM en directorios que corresponden con el ID de usuario en disco. Estos directorios empleaban el ID de usuario para su nombre sin escape adicional, lo que puede resultar en problemas como la sobrescritura de archivos de configuración no relacionados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.2",
            "matchCriteriaId" : "6CB777B6-8E8D-44E3-B5DF-FA6662C0C937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.88",
            "matchCriteriaId" : "28F368AB-CEF2-4D4A-826F-EC10BD281C62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-11-08/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-11-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.610",
      "lastModified" : "2024-11-21T03:04:37.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters."
      }, {
        "lang" : "es",
        "value" : "En Jenkins 2.88 y anteriores y 2.73 y anteriores, las sugerencias de autocompletar para los campos de texto no se escaparon, lo que resulta en una vulnerabilidad de Cross-Site Scripting (XSS) persistente si el origen para las sugerencias permitía especificar texto que incluye metacaracteres como menor que y mayor que."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.2",
            "matchCriteriaId" : "6CB777B6-8E8D-44E3-B5DF-FA6662C0C937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.88",
            "matchCriteriaId" : "28F368AB-CEF2-4D4A-826F-EC10BD281C62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101773",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102826",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-11-08/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-11-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.673",
      "lastModified" : "2024-11-21T03:04:37.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.73.1 and earlier, 2.83 and earlier users with permission to create or configure agents in Jenkins could configure a launch method called 'Launch agent via execution of command on master'. This allowed them to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of this launch method now requires the Run Scripts permission typically only granted to administrators."
      }, {
        "lang" : "es",
        "value" : "Los usuarios de Jenkins 2.73.1 y anteriores y 2.83 y anteriores con permiso para crear o configurar agentes podrían configurar un método de inicio llamado \"Launch agent via execution of command on master\". Esto les permitía ejecutar comandos shell arbitrarios en el nodo del servidor maestro cada vez que se supone que se iba a iniciar el agente. Ahora, la configuración de este método de inicio requiere el permiso \"Run Scripts\" que, normalmente, solo se otorga a los administradores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.767",
      "lastModified" : "2024-11-21T03:04:37.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins."
      }, {
        "lang" : "es",
        "value" : "Jenkins 2.73.1 y anteriores y 2.83 y anteriores incluía una versión  de la biblioteca commons-fileupload con la vulnerabilidad de denegación de servicio (DoS) conocida como CVE-2016-3092. La solución para esa vulnerabilidad se ha trasladado a la versión de la biblioteca incluida con Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.830",
      "lastModified" : "2024-11-21T03:04:38.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/(username)/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote API now no longer includes information beyond the most basic (user ID and name) unless the user requesting it is a Jenkins administrator."
      }, {
        "lang" : "es",
        "value" : "Jenkins 2.73.1 y anteriores y 2.83 y anteriores proporciona información sobre las cuentas de usuario de Jenkins, lo que suele estar disponible para cualquier usuario con permisos Overall/Read mediante la API remota /user/(username)/api. Esto incluía, por ejemplo, las direcciones de email de usuarios de Jenkins si Mailer Plugin está instalado. La API remota ya no incluye información más allá de lo más básico (ID de usuario y nombre), a no ser que el usuario que lo solicite sea un administrador de Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.893",
      "lastModified" : "2024-11-21T03:04:38.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins plugins. The fix for CVE-2012-6153 was backported to the version of commons-httpclient that is bundled in core and made available to plugins."
      }, {
        "lang" : "es",
        "value" : "Jenkins 2.73.1 y anteriores y 2.83 y anteriores incluía una versión de la biblioteca commons-httpclient con la vulnerabilidad CVE-2012-6153 que verificaba incorrectamente los certificados SSL, volviéndolo susceptible a ataques de Man-in-the-Middle (MitM). Esta biblioteca es ampliamente empleada como dependencia transitiva en los plugins de Jenkins. La solución para CVE-2012-6153 se trasladó a la versión de commons-httpclient incluida en core y se puso a disposición de los plugins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:00.970",
      "lastModified" : "2024-11-21T03:04:38.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Maven 2.73.1 y anteriores y 2.17 y anteriores incluía una versión de la biblioteca commons-httpclient con la vulnerabilidad CVE-2012-6153 que verificaba incorrectamente los certificados SSL, volviéndolo susceptible a ataques de Man-in-the-Middle (MitM). El plugin Maven 3.0 ya no depende de commons-httpclient."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:maven:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.17",
            "matchCriteriaId" : "D3319343-42B0-4C0C-9A5C-B3ACF027D301"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.047",
      "lastModified" : "2024-11-21T03:04:38.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The remote API in Jenkins 2.73.1 and earlier, 2.83 and earlier at /computer/(agent-name)/api showed information about tasks (typically builds) currently running on that agent. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only shows information about accessible tasks."
      }, {
        "lang" : "es",
        "value" : "La API remota en Jenkins 2.73.1 y anteriores y 2.83 y anteriores en /computer/(agent-name)/api mostraba información sobre tareas (normalmente builds) que se están ejecutando en el agente. Esto incluía información sobre tareas que, de otra forma, no son accesibles para el usuario actual, por ejemplo, debido a la falta de permisos Item/Read. Esto se ha solucionado y, ahora, la API solo muestra información sobre las tareas accesibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.097",
      "lastModified" : "2024-11-21T03:04:38.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /queue/item/(ID)/api showed information about tasks in the queue (typically builds waiting to start). This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API endpoint is now only available for tasks that the current user has access to."
      }, {
        "lang" : "es",
        "value" : "La API remota de Jenkins 2.73.1 y anteriores y 2.83 y anteriores en /queue/item/(ID)/api mostraba información sobre las tareas en la cola (normalmente, builds esperando iniciarse). Esto incluía información sobre tareas que, de otra forma, no son accesibles para el usuario actual, por ejemplo, debido a la falta de permisos Item/Read. Esto se ha solucionado y, ahora, el endpoint de la API solo está disponible para tareas a las que el usuario actual tiene acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.157",
      "lastModified" : "2024-11-21T03:04:38.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /job/(job-name)/api contained information about upstream and downstream projects. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only lists upstream and downstream projects that the current user has access to."
      }, {
        "lang" : "es",
        "value" : "La API remota de Jenkins 2.73.1 y anteriores y 2.83 y anteriores en /job/(job-name)/api contenía información sobre los proyectos de subida y bajada. Esto incluía información sobre tareas que, de otra forma, no son accesibles para el usuario actual, por ejemplo, debido a la falta de permisos Item/Read. Esto se ha solucionado y, ahora, la API solo muestra los proyectos de subida y de bajada a los que tiene acceso el usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.203",
      "lastModified" : "2024-11-21T03:04:38.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests were sent via GET, which could result in secrets being logged to a HTTP access log in non-default configurations of Jenkins, and made available to users with access to these log files. Form validation for <f:password/> is now always sent via POST, which is typically not logged."
      }, {
        "lang" : "es",
        "value" : "El control de formularios por defecto en Jenkins 2.73.1 y anteriores y 2.83 y anteriores para contraseñas y otros secretos, , es compatible con validación de formularios (por ejemplo, para claves API). Las peticiones AJAX de validación de formularios se enviaron mediante GET, lo que podría resultar en que los secretos se registren en un log de acceso HTTP en configuraciones que no son por defecto de Jenkins y se pongan a disposición de usuarios con acceso a estos archivos de registro. La validación de formulario para  se envía ahora siempre mediante POST, que no suele registrarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.73.1",
            "matchCriteriaId" : "90FE7614-BB3D-45D2-B287-A9F97D437D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.83",
            "matchCriteriaId" : "D29188BE-532C-4AF8-B5AC-95CC0197B452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.250",
      "lastModified" : "2024-11-21T03:04:39.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks."
      }, {
        "lang" : "es",
        "value" : "Jenkins Swarm Plugin Client 2.73.1 y anteriores y 3.4 y anteriores incluía una versión de la biblioteca commons-httpclient con la vulnerabilidad CVE-2012-6153 que verificaba incorrectamente los certificados SSL, volviéndolo susceptible a ataques de Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:swarm:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.4",
            "matchCriteriaId" : "DEF890C7-D469-411A-BE13-1BAA06DE1CF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.347",
      "lastModified" : "2024-11-21T03:04:39.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Speaks!, en todas las versiones, permite que los usuarios con permiso Job/Configure ejecuten código Groovy arbitrario en el JVM de Jenkins, elevando los privilegios a Overall/Run Scripts."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:speaks\\!:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "B28909EE-B8B1-4987-86CD-4AF44C959F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-10-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T02:29:01.393",
      "lastModified" : "2024-11-21T03:04:39.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullscreen' in its JavaScript, resulting in a cross-site scripting vulnerability through specially crafted URLs."
      }, {
        "lang" : "es",
        "value" : "El plugin Jenkins Delivery Pipeline 1.0.7 y anteriores empleaba el contenido sin escapar del parámetro de consulta \"fullscreen\" en su JavaScript, lo que resulta en una vulnerabilidad de Cross-Site Scripting (XSS) mediante URL especialmente manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:delivery_pipeline:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "FCE49A90-B090-4194-8B38-E3AB77564F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101927",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-11-16/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-11-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14592",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-26T02:29:02.313",
      "lastModified" : "2024-11-21T03:13:09.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree for macOS, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for macOS starting with 1.0b2 before version 2.7.0 are affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Sourcetree para macOS tenía varios errores de inyección de argumentos y comandos en Mercurial y la gestión de repositorios Git. Un atacante con permisos para realizar commits en un repositorio vinculado a Sourcetree para macOS puede explotar este problema para ejecutar código en el sistema. Desde la versión 1.4.0 de Sourcetree para macOS, esta vulnerabilidad puede desencadenarse desde una página web mediante el uso del manipulador de URI de Sourcetree. Las versiones de Sourcetree para macOS desde la 1.0b2 y anteriores a la 2.7.0 se han visto afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "2.7",
            "matchCriteriaId" : "3F24BC5B-A68B-4D43-8F75-19B7BFCF249F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:1.0:beta2:*:*:*:macos:*:*",
            "matchCriteriaId" : "09C4E723-582A-476B-9872-989784007E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:1.0:beta3:*:*:*:macos:*:*",
            "matchCriteriaId" : "DD53F970-5930-4FF8-BC06-E5E9AC08F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:1.0:beta4:*:*:*:macos:*:*",
            "matchCriteriaId" : "47411DAA-1C4D-4F71-AB52-D5518721E844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:1.0:beta5:*:*:*:macos:*:*",
            "matchCriteriaId" : "88D8B733-2AEA-443E-9F88-20276C4FF2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:1.0:rc1:*:*:*:macos:*:*",
            "matchCriteriaId" : "308AA208-CC76-45FE-B76C-FF4C7C3CF26E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/SRCTREE-5243",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/SRCTREE-5243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14593",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-26T02:29:02.377",
      "lastModified" : "2024-11-21T03:13:10.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of Sourcetree for Windows, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for Windows starting with 0.5.1.0 before version 2.4.7.0 are affected by this vulnerability"
      }, {
        "lang" : "es",
        "value" : "Sourcetree para Windows tenía varios errores de inyección de argumentos y comandos en Mercurial y la gestión de repositorios Git. Un atacante con permisos para realizar commits en un repositorio vinculado a Sourcetree para Windows puede explotar este problema para ejecutar código en el sistema. Desde la versión 0.8.4b de Sourcetree para Windows, esta vulnerabilidad puede desencadenarse desde una página web mediante el uso del manipulador de URI de Sourcetree. Las versiones de Sourcetree para Windows desde la 0.5.1.0 y anteriores a la 2.4.7.0 se han visto afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:sourcetree:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "0.5.1.0",
            "versionEndExcluding" : "2.4.7.0",
            "matchCriteriaId" : "3979D87B-78E1-48DA-A9FA-319E7B72FF74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/SRCTREEWIN-8256",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/SRCTREEWIN-8256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2166",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2018-01-26T16:29:00.210",
      "lastModified" : "2024-11-21T03:23:01.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redirección abierta en GroupSession en versiones 4.7.0 y anteriores permite que un atacante remoto redireccione a los usuarios a sitios web arbitrarios y lleven a cabo ataques de phishing mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groupsession:groupsession:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.0",
            "matchCriteriaId" : "A6DE3005-24BF-4A5C-8E57-7DD46D2C04DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN26200083/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN26200083/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T19:29:00.260",
      "lastModified" : "2024-11-21T03:19:18.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In strategy.rb in OmniAuth before 1.3.2, the authenticity_token value is improperly protected because POST (in addition to GET) parameters are stored in the session and become available in the environment of the callback phase."
      }, {
        "lang" : "es",
        "value" : "En strategy.rb en OmniAuth en versiones anteriores a la 1.3.2, el valor authenticity_token se proteje de forma indebida porque los parámetros POST (además de los GET) se almacenan en la sesión y se vuelven disponibles en el entorno de la fase de devolución de llamada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omniauth:omniauth:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "AFDEE807-A6D6-408A-B8A3-972813FAA318"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/888523",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omniauth/omniauth/pull/867",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omniauth/omniauth/pull/867/commits/71866c5264122e196847a3980c43051446a03e9b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4109",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/888523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omniauth/omniauth/pull/867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omniauth/omniauth/pull/867/commits/71866c5264122e196847a3980c43051446a03e9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3768",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-01-26T19:29:00.383",
      "lastModified" : "2024-11-21T03:26:06.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease."
      }, {
        "lang" : "es",
        "value" : "Un atacante sin privilegios con conectividad al IMM2 podría provocar un ataque de denegación de servicio (DoS) en el IMM2 (versiones anteriores a la 4.4 para Lenovo System x y anteriores a la 6.4 para IBM System x). Inundar el IMM2 con un gran volumen de fallos de autenticación mediante el Common Information Model (CIM) empleado por LXCA, OneCLI y otras herramientas puede agotar la memoria del sistema disponible. Esto puede provocar que el IMM2 se reinicie hasta que cesen las peticiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:flex_system_x240_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "7B8ED668-C53C-47A2-A84F-CADC8DB4F3BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:flex_system_x240_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C35790-5983-4275-9E27-D369398682B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:flex_system_x280_x6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "46E6DAE3-7580-47F1-9AFB-181BA9D217D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:flex_system_x280_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCCE0FCA-11A5-4AC5-8124-A521723F4EB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:flex_system_x440_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "A99076DC-8C22-4A11-84E4-91761E4F672D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:flex_system_x440_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D1BEA1-F4A1-4EF3-A471-35A3D0CDF6E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:flex_system_x480_x6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "D2A56F99-CA97-4A47-9EA8-967D7F13BC9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:flex_system_x480_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A129C381-6732-4498-979E-9E8E70C1D9EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:flex_system_x880_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "F5E9DD33-3559-4590-9D86-998EF3526F34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:flex_system_x880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6801CA58-67D9-4E3D-882A-A8327B1194CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:nextscale_nx360_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "5CBD85DC-9E99-45B2-8D9D-DBCE50A02A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:nextscale_nx360_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9058D6-2BA3-4F58-A55F-9E23F6F175BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3250_m6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "1AABC1F2-D93F-42DF-98D2-D3B6A956E834"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3250_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6EFF65-BC96-4D1C-BA54-DAA0DFBCFE4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3500_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "5D3C0596-EA61-4F48-A820-798CA0EDEE1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3500_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B7FF85-F374-48E3-9312-1AB4F4B37E8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3550_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "572732D1-CC28-4F79-8EA0-A536549C8D48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3550_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8235F1EA-EC94-4BB3-B8CB-B6D251A3EFAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3650_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "B4D87909-6C74-46BC-9CB8-5965FCC51BB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3650_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6A511-BEF5-4100-A517-3EF5FC67F5F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3750_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "21D6FFB4-0894-4BD8-8F8F-9E4EE2E69DEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3750_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7091088-0E95-484D-8185-61BA8E2FE0E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3850_x6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "E94D0BE3-DAC8-49E2-8D2C-CC521DD88E3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F5C19-BA44-41FD-811E-F9B2CB95E012"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:system_x3950_x6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "8CC24C86-0B33-4927-A320-CCF16EB2F89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB9721F-324B-4C61-8A26-8BBA4E348AEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenova:flex_system_x240_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4",
            "matchCriteriaId" : "9661B216-A753-4607-A922-D7150CD9B569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenova:flex_system_x240_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F54F2D5-A9FA-4270-8B3F-F7EFA5B074CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:bladecenter_hs22_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "755A6821-94AC-4FB5-8431-2A311EB5122B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs22:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9180CC-F795-4B8D-B9BF-37488D352AC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:bladecenter_hs23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "C7D83555-3984-4403-8148-01BA2E778FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C010052B-1EBD-4129-9DCE-077575B8286A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:bladecenter_hs23e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "319A03D6-4081-4457-A2AA-E36000A8D02B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs23e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F02BE9-BA77-4DC2-AB7A-BF53FE3B7CA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x220_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "DCD0803B-B459-496D-A538-76BA7E93AF2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x220_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0AABD-73B4-4311-9185-643DE173092E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x222_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "D4C1ED1F-2920-4514-8BE7-571A5C0DC0C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x222_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CC2E42-2E9F-4C41-9A36-4A21C32F4CB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x240_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "0221C6DB-5ACF-4EC4-BA98-192322706C4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x240_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594B1D02-B6ED-4F9F-BAEC-313FFD1C17C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x280_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "3C2C015F-81E9-4F65-A71F-0F78F36FCC84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x280_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828C175A-0B5F-453D-A661-0AD955DB22C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x440_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "B0B522C0-3721-4D1F-B623-57ABA4C39FF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x440_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5934364-CF52-411C-B13F-A8688A7BC0FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x480_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "249E0CF6-0D1F-4684-B4B7-68EEDC299627"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x480_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A17A8F8-F833-4F5E-A0ED-CF01B1ABAA9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:flex_system_x880_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "7CAB2B36-1ACB-403E-BFC2-54E042A36C85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x880_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC450128-EDFE-4BD3-A87F-946EED1E0E39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:idataplex_dx360_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "942B1B2C-031A-48AF-967C-E8947B1E8861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:idataplex_dx360_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29845B4B-04B8-4685-948F-4DD19C88D7AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:idataplex_dx360_m4_water_cooled_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "0C180AD0-7956-46E6-95E8-F2B86F98A779"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:idataplex_dx360_m4_water_cooled:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7EABA0-ADB1-4A9B-AB96-FF6BB5720C50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:nextscale_nx360_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "42C3D741-1A79-4859-BA0C-463651D9ED99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:nextscale_nx360_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9642CB05-D7EE-4AFA-A28F-A6E7961A57EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3100_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "AFAB16EB-64D8-40DB-959C-1DE870D6E696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3100_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66DB82A-0FF6-452B-8B11-239BF391AD12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3100_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "8B0FB314-D7CC-4C1A-8767-505D697C05DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3100_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A58320C-8C0B-4819-838A-AE31F9BFC70E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3250_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "F78CFCD7-22E9-4B73-A3DC-91354D6EA905"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3250_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3672040-7C51-4C83-A62C-096B2B0E5289"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3250_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "25DCFC11-3642-4B09-A806-F780E6A40554"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3250_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E3BC19-4A70-4225-91E4-1DAE6C1986E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3300_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "0C13045D-DB2C-4767-951A-B5650FFEF5DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3300_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD693FE0-9B91-4F52-AE89-C82ED55DE43C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3500_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "C93F6F32-8A99-4835-B466-5EB031533A11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3500_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943B01A-635B-4F62-96DE-715FFA007AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3530_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "907258CB-A7EF-4B8B-A4A6-0A9FB7103C2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3530_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAFFBE1-E343-4DCB-A44D-2E29C547CC28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3550_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "952E9BBC-0297-4C9C-972A-08205E5C20E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3550_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F407F5-EF7C-4F65-8978-3FB80CB07C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3630_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "C88F20E9-A0A3-466C-A43F-00D825A718EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3630_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B656E6-B70F-49AB-B17C-F89849CA516E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3650_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "3BDF4C26-0A2F-4A52-8E49-8F68461116DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ED7F3-84FD-4D6C-9EEE-83A52734602A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3650_m4_bd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "B1901D6F-8051-4B0F-865B-B17BCDC68BC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4_bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967EE555-D0BF-4505-BB9D-0A7A92E94889"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3750_m4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "54091626-95DE-43E6-B599-F1E935F8E5A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3750_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268FEAB9-EEB1-4B00-A086-1185B0A35959"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3850_x6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "4D7AC260-B3A5-405E-8999-539F90C5E700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8ED74FB-C819-4BD9-9986-2588FCC2D308"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3950_x6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "B8DA7B09-181D-499B-8B44-A8E903E155D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB4836-D812-4818-AC08-38EABD56F3EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:system_x3650_m4_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "6BB24652-3972-4CD0-9C02-F8C1AE79447E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DF5766-53F1-4AE8-AB8F-97C0F36215B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14450",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-14450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12374",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.283",
      "lastModified" : "2024-11-21T03:09:24.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing operations (mbox.c operations on bounce messages). If successfully exploited, the ClamAV software could allow a variable pointing to the mail body which could cause a used after being free (use-after-free) instance which may lead to a disruption of services on an affected device to include a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un sistema afectado. La vulnerabilidad se debe a la falta de mecanismos de comprobación de validación de entradas durante ciertas operaciones de análisis de email (operaciones mbox.c en mensajes devueltos). Si se explota con éxito, ClamAV podría permitir que una variable que señale al cuerpo del email provoque una instancia de uso de memoria previamente liberada (use-after-free). Esto podría conducir a una interrupción de servicios en el dispositivo afectado para incluir una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11939",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12375",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.363",
      "lastModified" : "2024-11-21T03:09:24.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing functions (the rfc2047 function in mbox.c). An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition on an affected device."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un sistema afectado. La vulnerabilidad se debe a la falta de mecanismos de comprobación de validación de entradas durante ciertas funciones de análisis de email (la función rfc2047 en mbox.c). Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando un email manipulado a un dispositivo afectado. Esta acción podría provocar una condición de desbordamiento de búfer cuando ClamAV escanea el email malicioso, permitiendo que el atacante cree una condición de DoS en un dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11940",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12376",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.427",
      "lastModified" : "2024-11-21T03:09:24.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause a handle_pdfname (in pdf.c) buffer overflow when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) o ejecute código arbitrario en un sistema afectado. La vulnerabilidad se debe a errores en los mecanismos de comprobación de validación de entradas al gestionar los archivos Portable Document Format (.pdf) enviados a un dispositivo afectado. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando un archivo .pdf manipulado a un dispositivo afectado. Esta acción podría provocar un desbordamiento de búfer en handle_pdfname (en pdf.c) cuando ClamAV escanea el archivo malicioso, permitiendo que el atacante cree una condición de DoS o ejecute código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11942",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12377",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.487",
      "lastModified" : "2024-11-21T03:09:25.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in mew packet files sent to an affected device. A successful exploit could cause a heap-based buffer over-read condition in mew.c when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code on the affected device."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) o ejecute código arbitrario en un sistema afectado. La vulnerabilidad se debe a errores en los mecanismos de comprobación de validación de entradas en archivos mew packet enviados a un dispositivo afectado. Un exploit con éxito podría provocar una sobrelectura de búfer basada en memoria dinámica (heap) en mew.c cuando ClamAV escanea el archivo malicioso, permitiendo que el atacante cree una condición de DoS o ejecute código arbitrario en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11943",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12378",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.550",
      "lastModified" : "2024-11-21T03:09:25.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar (Tape Archive) files sent to an affected device. A successful exploit could cause a checksum buffer over-read condition when ClamAV scans the malicious .tar file, potentially allowing the attacker to cause a DoS condition on the affected device."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un sistema afectado. La vulnerabilidad se debe a errores en los mecanismos de comprobación de validación de entradas de archivos .tar (Tape Archive) enviados a un dispositivo afectado. Un exploit con éxito podría provocar una sobrelectura de búfer basada en suma de verificación cuando ClamAV escanea el archivo .tar malicioso, permitiendo que el atacante cree una condición de DoS en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11946",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12379",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.613",
      "lastModified" : "2024-11-21T03:09:25.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a messageAddArgument (in message.c) buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) o ejecute código arbitrario en un sistema afectado. La vulnerabilidad se debe a errores en los mecanismos de comprobación de validación de entradas en la función de análisis de mensajes en un dispositivo afectado. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando un email manipulado a un dispositivo afectado. Esta acción podría provocar una condición de desbordamiento de búfer en messageAddArgument (en message.c) cuando ClamAV escanea el email malicioso, permitiendo que el atacante cree una condición de DoS o ejecute código arbitrario en un dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11944",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12380",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-01-26T20:29:00.690",
      "lastModified" : "2024-11-21T03:09:25.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "ClamAV AntiVirus, en versiones 0.99.2 y anteriores, contiene una vulnerabilidad que podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS) en un sistema afectado. La vulnerabilidad se debe a errores en los mecanismos de comprobación de validación de entradas en mbox.c durante ciertas funciones de análisis de email en un dispositivo afectado. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando un email manipulado a un dispositivo afectado. Un exploit podría desencadenar una condición de desreferencia de puntero NULL cuando ClamAV escanea el email malicioso, lo que podría resultar en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.2",
            "matchCriteriaId" : "6EBE6567-EA27-4686-9351-EA1097D52D5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11945",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.clamav.net/show_bug.cgi?id=11945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3550-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3550-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T20:29:00.783",
      "lastModified" : "2024-11-21T03:12:58.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to malicious File Upload."
      }, {
        "lang" : "es",
        "value" : "En WonderCMS 2.3.1, la funcionalidad de subida acepta extensiones de aplicación aleatorias y conduce a la subida de archivos maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondercms:wondercms:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E1FFA1-C4B2-4E30-87A9-B9E8BC20BFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondercms:wondercms:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3345E32-0808-402C-8F0E-9F576B0AD771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitywarrior9.blogspot.in/2018/01/vulnerability-in-wonder-cms-leading-to.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43963/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://securitywarrior9.blogspot.in/2018/01/vulnerability-in-wonder-cms-leading-to.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43963/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T20:29:00.847",
      "lastModified" : "2024-11-21T03:12:58.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WonderCMS 2.3.1, the application's input fields accept arbitrary user input resulting in execution of malicious JavaScript. NOTE: the vendor disputes this issue stating that this is a feature that enables only a logged in administrator to write execute JavaScript anywhere on their website"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** En WonderCMS 2.3.1, los campos de entrada de la aplicación aceptan entradas arbitrarias de usuario, lo que resulta en la ejecución de JavaScript malicioso. NOTA: el fabricante discute este problema diciendo que esta es una característica que permite que solo un administrador que haya iniciado sesión escriba o ejecute JavaScript en cualquier sitio de su web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondercms:wondercms:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3345E32-0808-402C-8F0E-9F576B0AD771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitywarrior9.blogspot.in/2018/01/stored-xss-in-wonder-cms.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://securitywarrior9.blogspot.in/2018/01/stored-xss-in-wonder-cms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T20:29:00.927",
      "lastModified" : "2024-11-21T03:12:58.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely because the attack can only come from a local machine or from the administrator as a self attack"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** WonderCMS 2.3.1 es vulnerable a un ataque de inyección de cabeceras de host HTTP. Emplea valores introducidos por el usuario para redireccionar páginas. NOTA: el fabricante reporta que es improbable explotar esta vulnerabilidad debido a que el ataque solo puede venir desde un equipo local o desde el administrador como un autoataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondercms:wondercms:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3345E32-0808-402C-8F0E-9F576B0AD771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitywarrior9.blogspot.in/2018/01/host-header-injection-in-wonder-cms.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://securitywarrior9.blogspot.in/2018/01/host-header-injection-in-wonder-cms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-26T20:29:01.020",
      "lastModified" : "2024-11-21T03:19:05.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "En Utilities.php en Perfex CRM 1.9.7, la subida de archivos sin restricción puede conducir a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perfexcrm:perfex_crm:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F164C2B-B3F8-4E2A-BC8F-16097F7CDD4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145903/PerfexCRM-1.9.7-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43590/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145903/PerfexCRM-1.9.7-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43590/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1204",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.307",
      "lastModified" : "2024-11-21T03:21:29.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740."
      }, {
        "lang" : "es",
        "value" : "IBM Tealeaf Customer Experience 8.7, 8.8y 9.0.2 contiene credenciales embebidas. Un atacante remoto podría explotar esta vulnerabilidad para obtener acceso al sistema. IBM X-Force ID: 123740."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B6A77E-1686-44A6-B1E4-AC63A0466AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAC9796-BA52-48AF-9326-3C2343BE2342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006392",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006455",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123740",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1279",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.383",
      "lastModified" : "2024-11-21T03:21:37.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 124757."
      }, {
        "lang" : "es",
        "value" : "IBM Tealeaf Customer Experience 8.7, 8.8 y 9.0.2 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias \"punto punto\" (/../) para visualizar archivos arbitrarios en el sistema. IBM X-Force ID: 124757."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B6A77E-1686-44A6-B1E4-AC63A0466AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAC9796-BA52-48AF-9326-3C2343BE2342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006392",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124757",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22006392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "VDB Entry" ]
      } ],
      "evaluatorComment" : "quried"
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1506",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.447",
      "lastModified" : "2024-11-21T03:21:59.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129617."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos TM1 10.2 y 10.2.2 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 129617."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_tm1:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FE2E05-AFA8-494E-9686-32C8D67BFCAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_tm1:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9F8133-7ED1-461A-A74E-E255D6DDCE30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012623",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102892",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040302",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129617",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1515",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.507",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825."
      }, {
        "lang" : "es",
        "value" : "IBM Doors Web Access 9.5 y 9.6 podría permitir que un usuario autenticado obtenga información de respuestas de error interno del servidor HTTP. IBM X-Force ID: 129825."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102872",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1516",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.570",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
      }, {
        "lang" : "es",
        "value" : "IBM Doors Web Access 9.5 y 9.6 podría permitir que un atacante remoto realizase un secuestro de clic a la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clicado de la víctima y, probablemente, lanzar más ataques contra la víctima. IBM X-Force ID: 129826."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102867",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1532",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.650",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS 9.5 y 9.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130411."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102888",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1540",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.710",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808."
      }, {
        "lang" : "es",
        "value" : "IBM Doors Web Access 9.5 y 9.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 130808."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102890",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1545",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.773",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914."
      }, {
        "lang" : "es",
        "value" : "IBM Doors Web Access 9.5 y 9.6 podría permitir que un atacante con acceso físico al sistema inicie sesión en la aplicación empleando credenciales almacenadas anteriormente. IBM X-Force ID: 130914."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102896",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1563",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.837",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763."
      }, {
        "lang" : "es",
        "value" : "IBM Doors Web Access 9.5 y 9.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131763."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102862",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1567",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.900",
      "lastModified" : "2025-02-05T18:38:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769."
      }, {
        "lang" : "es",
        "value" : "IBM Doors Web Access 9.5 y 9.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131769."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndIncluding" : "9.5.0.7",
            "matchCriteriaId" : "96E0933B-B5DE-4D2D-A618-399EDCA60BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.1.0",
            "versionEndIncluding" : "9.5.1.8",
            "matchCriteriaId" : "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.2.0",
            "versionEndIncluding" : "9.5.2.7",
            "matchCriteriaId" : "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndIncluding" : "9.6.0.6",
            "matchCriteriaId" : "DC96FBA4-2236-4ABF-AA1F-655A00D79F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.1.0",
            "versionEndIncluding" : "9.6.1.9",
            "matchCriteriaId" : "8E068BAB-D96A-49D0-AE8C-049D76F8CF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102851",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1653",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-26T21:29:00.977",
      "lastModified" : "2024-11-21T03:22:10.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133268."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133268."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "366EBB78-E018-4971-BDFB-5670ECE8F08D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "421ADB80-9C0A-4B42-B4A7-5CBF561DC7E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "396EBEA3-CF77-4D2C-B8D8-CAB306391092"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "008561A7-B37F-4F11-8635-B29726FFEFCC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "29540A04-2A13-434B-A9EE-FB9809803000"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "85DDC114-8067-4332-953D-A39D0660E962"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9800CBFC-3169-42CA-BB36-22C34F222FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012712",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102853",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040305",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040306",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040307",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133268",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-27T12:29:00.217",
      "lastModified" : "2024-11-21T03:19:18.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters."
      }, {
        "lang" : "es",
        "value" : "index.js en brace-expansion en versiones anteriores a la 1.1.7 es vulnerable a ataques ReDoS (denegación de servicio con expresiones regulares), tal y como demuestra un argumento expand que contiene muchas comas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brace_expansion_project:brace_expansion:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7",
            "matchCriteriaId" : "D71E70E2-C4FD-455E-8173-C52C8B76A311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/862712",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/juliangruber/brace-expansion/issues/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/juliangruber/brace-expansion/pull/35/commits/b13381281cead487cbdbfd6a69fb097ea5e456c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/862712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/juliangruber/brace-expansion/issues/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/juliangruber/brace-expansion/pull/35/commits/b13381281cead487cbdbfd6a69fb097ea5e456c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T05:29:00.213",
      "lastModified" : "2024-11-21T03:19:18.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks write access, as demonstrated by changing the ownership of the /etc/passwd file."
      }, {
        "lang" : "es",
        "value" : "systemd-tmpfiles en systemd en versiones anteriores a la 237 intenta soportar cambios de propiedad/permisos en archivos con vínculos permanentes incluso aunque el sysctl fs.protected_hardlinks esté apagado. Esto permite que usuarios locales omitan las restricciones de acceso planeadas mediante vectores relacionados con un enlace permanente a un archivo para el que el usuario no tiene acceso de escritura, tal y como demuestra el cambio de propiedad del archivo /etc/passwd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "237",
            "matchCriteriaId" : "8FFE2618-BA1B-4FAB-8449-83CAAFCDCFAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-updates/2018-02/msg00109.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/146184/systemd-Local-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/29/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/issues/7736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43935/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2018/01/29/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2018-02/msg00109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/146184/systemd-Local-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/issues/7736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43935/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2018/01/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T05:29:00.260",
      "lastModified" : "2024-11-21T03:19:19.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated."
      }, {
        "lang" : "es",
        "value" : "drivers/input/serio/i8042.c en el kernel de Linux en versiones anteriores a la 4.12.4 permite que atacantes provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado del sistema) o que, posiblemente, tengan otro tipo de impacto sin especificar debido a que el valor port->exists puede cambiar tras ser validado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.94",
            "matchCriteriaId" : "E6489590-820D-4647-91C4-01D00B61FF57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.16.49",
            "matchCriteriaId" : "6D2B2AB6-A208-4834-8CF4-03EF0774B915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.63",
            "matchCriteriaId" : "7E7373BF-7059-470B-B762-F3696EED61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.44",
            "matchCriteriaId" : "C2695139-BE23-4BAC-97F1-4CD2A6240BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.79",
            "matchCriteriaId" : "6C4F1EAA-26DD-4383-BB29-9304CE7705F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.40",
            "matchCriteriaId" : "E0B96CF8-017F-4BA8-A487-1308681D0C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.12.4",
            "matchCriteriaId" : "6D215460-34F8-4C32-939B-270A67F6FA9C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "CB66DB75-2B16-4EBF-9B93-CE49D8086E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=340d394a789518018f834ff70f7534fc463d3226",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102895",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/340d394a789518018f834ff70f7534fc463d3226",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=340d394a789518018f834ff70f7534fc463d3226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/340d394a789518018f834ff70f7534fc463d3226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14190",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-01-29T16:29:00.230",
      "lastModified" : "2024-11-21T03:12:19.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously crafted \"Host\" header in user HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiOS 5.6.0 a 5.6.2; 5.4.0 a 5.4.7 y 5.2 y anteriores permite que un atacante inyecte scripts web o HTML arbitrarios mediante una cabecera \"Host\" maliciosamente manipulada en las peticiones HTTP de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "3085A41F-2305-46D3-AE10-6D256B6E1F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.7",
            "matchCriteriaId" : "7F0AC998-B751-4E73-9C37-D2721F1795CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.2",
            "matchCriteriaId" : "C44E69B8-A1E8-437B-ADA3-10DE256B3368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102779",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040284",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-262",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T16:29:00.293",
      "lastModified" : "2024-11-21T03:13:20.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote attackers to change passwords of arbitrary users via the http_passwd parameter to mod_login.asp."
      }, {
        "lang" : "es",
        "value" : "Los routers ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U y DSL-AC750 permiten que atacantes remotos cambien las contraseñas de usuarios arbitrarios mediante el parámetro http_passwd en mod_login.asp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac51_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606B05F7-7697-407B-923D-DB9125C9E9D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac51:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC348F1-6C46-4637-A27F-D69DD1AC77F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac52u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9A9BD5-BCE8-4DBC-B615-AAF9CEE2C8AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac52u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CC5443-8FEE-4BDB-B775-A1C7CE0021A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac55u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB82EB29-4348-48B3-92E9-59AF27041069"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac55u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84685B17-E252-4519-B857-81717DD21CE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n55u_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4F8FC8-B153-45AA-A70A-4AF23C171FB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n55u_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABC6E2A-73FE-42E1-A8D5-08B894C39AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n55u_d1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C84C544-1C39-4936-B49C-6C01622FD620"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n55u_d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF8875-4CCB-4C9E-9056-DEC84168B762"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac56u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2953F9-5E62-4508-9434-4A8FB1739F62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22236F8C-F904-447A-8E7E-C8D56D5B673F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n10_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909103A0-1F5E-4587-8357-715412FFFE38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n10_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066A3EE0-FEDD-4D77-8B8F-914838378D4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n12u_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9129F191-9999-4ECF-892F-0EA0363F79BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n12u_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821F157F-CFDE-4662-954F-C6B2FD53B373"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n12e_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA74206-AD82-4CA0-82EB-E2FA6854BFA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n12e_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C48CD-4BC0-4355-969E-1C22A58D7FDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n14u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292D7A66-FCE7-466D-9910-4F968E7D157A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n14u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D811DE13-0D12-4CDC-B74A-B873817DC8B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n14u-b1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E42CE2E-9357-4E54-9503-3A00ADFF279F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n14u-b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A0D00F-263F-4CFF-928D-6C39FD947A6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n16_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D346B8AE-2E16-4AD8-8E32-212C206D6947"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF90D44-4CD7-4166-A139-9F4A8D14F483"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n16u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E39DC19-6FB6-4498-9367-7856604DDD9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n16u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7227CEBF-FE58-4EB1-B679-9369DF2801A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n17u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9C64DD-8913-4DEC-BA85-538F2D4F5026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n17u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D25115-DC83-4A67-8680-BC14BC40EFE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n66u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425A53CC-5FE1-4A5C-86E3-DF23672CFB77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CB16A3-1D51-4FA9-8012-4008021772E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac750_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C429544-E8AA-44FE-8B2C-E7AE563A1435"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54AD746-EEEE-4987-B343-36328D638398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T16:29:00.357",
      "lastModified" : "2024-11-21T03:13:20.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote authenticated users to read arbitrary files via a crafted DTD in (1) an UPDATEACCOUNT or (2) a PROPFIND request."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XEE (XML External Entity) en la característica AiCloud en routers ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U y DSL-AC750 permiten que usuarios autenticados remotos lean archivos arbitrarios mediante un DTD manipulado en una petición (1) UPDATEACCOUNT o (2) PROPFIND."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac51_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606B05F7-7697-407B-923D-DB9125C9E9D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac51:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC348F1-6C46-4637-A27F-D69DD1AC77F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac52u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9A9BD5-BCE8-4DBC-B615-AAF9CEE2C8AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac52u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CC5443-8FEE-4BDB-B775-A1C7CE0021A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac55u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB82EB29-4348-48B3-92E9-59AF27041069"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac55u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84685B17-E252-4519-B857-81717DD21CE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n55u_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4F8FC8-B153-45AA-A70A-4AF23C171FB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n55u_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABC6E2A-73FE-42E1-A8D5-08B894C39AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n55u_d1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C84C544-1C39-4936-B49C-6C01622FD620"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n55u_d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AF8875-4CCB-4C9E-9056-DEC84168B762"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac56u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2953F9-5E62-4508-9434-4A8FB1739F62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22236F8C-F904-447A-8E7E-C8D56D5B673F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n10_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909103A0-1F5E-4587-8357-715412FFFE38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n10_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066A3EE0-FEDD-4D77-8B8F-914838378D4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n12u_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9129F191-9999-4ECF-892F-0EA0363F79BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n12u_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821F157F-CFDE-4662-954F-C6B2FD53B373"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n12e_c1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA74206-AD82-4CA0-82EB-E2FA6854BFA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n12e_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C48CD-4BC0-4355-969E-1C22A58D7FDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n14u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292D7A66-FCE7-466D-9910-4F968E7D157A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n14u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D811DE13-0D12-4CDC-B74A-B873817DC8B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n14u-b1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E42CE2E-9357-4E54-9503-3A00ADFF279F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n14u-b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A0D00F-263F-4CFF-928D-6C39FD947A6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n16_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D346B8AE-2E16-4AD8-8E32-212C206D6947"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF90D44-4CD7-4166-A139-9F4A8D14F483"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n16u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E39DC19-6FB6-4498-9367-7856604DDD9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n16u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7227CEBF-FE58-4EB1-B679-9369DF2801A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n17u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9C64DD-8913-4DEC-BA85-538F2D4F5026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n17u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D25115-DC83-4A67-8680-BC14BC40EFE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n66u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425A53CC-5FE1-4A5C-86E3-DF23672CFB77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n66u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CB16A3-1D51-4FA9-8012-4008021772E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-ac750_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C429544-E8AA-44FE-8B2C-E7AE563A1435"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-ac750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54AD746-EEEE-4987-B343-36328D638398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1779",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-29T16:29:00.433",
      "lastModified" : "2024-11-21T03:22:21.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 podría almacenar localmente credenciales en caché que podrían ser obtenidas por un usuario local. IBM X-Force ID: 136824."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EFB3B0-777B-4986-8CFE-DE96BE7D512C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D34331-E975-454D-90FE-11CEC55AE96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A738-C354-4890-9D52-E968FA399D2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011561",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102858",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040299",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136824",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1783",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-29T16:29:00.497",
      "lastModified" : "2024-11-21T03:22:21.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 podría permitir que un usuario local cambie parámetros establecidos desde los menús de Cognos Analytics sin una autenticación correcta. IBM X-Force ID: 136857."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EFB3B0-777B-4986-8CFE-DE96BE7D512C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D34331-E975-454D-90FE-11CEC55AE96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A738-C354-4890-9D52-E968FA399D2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011561",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102863",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040299",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136857",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1784",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-29T16:29:00.620",
      "lastModified" : "2024-11-21T03:22:21.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local user. IBM X-Force ID: 136858."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Analytics 11.0 podría producir resultados en archivos temporales que contengan información altamente sensible que puede ser leída por un usuario local. IBM X-Force ID: 136858."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D3BFCE-18D9-4F2B-8562-ED7756417874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18C634-18F1-42F4-A601-F6AE83FBC15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93335EA-78C6-4D29-A61C-9675D840394F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A61A7F-A5CD-4E39-A74D-8B052FC1221C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C46F3-5EC0-4814-AF0B-DA5FF9626CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EFB3B0-777B-4986-8CFE-DE96BE7D512C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D34331-E975-454D-90FE-11CEC55AE96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_analytics:11.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A738-C354-4890-9D52-E968FA399D2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011561",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040299",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136858",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4947",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-29T16:29:00.730",
      "lastModified" : "2024-11-21T03:26:44.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance."
      }, {
        "lang" : "es",
        "value" : "VMware Realize Automation (7.3 y 7.2) y vSphere Integrated Containers (1.x anteriores a 1.3) contienen una vulnerabilidad de deserialización mediante Xenon. La explotación con éxito de este problema podría permitir que atacantes remotos ejecuten código arbitrario en la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_automation:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DF73CC-89C0-4C85-8F17-C34E435504B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_automation:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF6B998-574C-4CB7-A142-CE4E8F82E5E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_integrated_containers:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "3950B3DF-A706-491B-AE01-7A1F81999177"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102852",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040289",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040290",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4951",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-01-29T16:29:00.777",
      "lastModified" : "2024-11-21T03:26:44.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices."
      }, {
        "lang" : "es",
        "value" : "VMware AirWatch Console (versiones 9.2.x anteriores a 9.2.2 y versiones 9.1.x anteriores a la 9.1.5) contiene una vulnerabilidad de Cross Site Request Forgery al acceder a App Catalog. Un atacante podría explotar esta vulnerabilidad engañando a los usuarios para que instalen una aplicación maliciosa en sus dispositivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.5",
            "matchCriteriaId" : "48A08253-A543-496C-8217-7A666E5E2DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2",
            "versionEndExcluding" : "9.2.2",
            "matchCriteriaId" : "0C80DF8B-AC5F-4324-9F46-6652428448DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102849",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040288",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2018-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T17:29:00.193",
      "lastModified" : "2025-11-05T19:24:40.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the Jenkins CLI, that would be deserialized using a new `ObjectInputStream`, bypassing the existing blacklist-based protection mechanism. We're fixing this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2.54 to LTS 2.46.2, and deprecating the remoting-based (i.e. Java serialization) CLI protocol, disabling it by default."
      }, {
        "lang" : "es",
        "value" : "Jenkins, en versiones 2.56 y anteriores y 2.46.1 LTS y anteriores, es vulnerable a la ejecución remota de código. Una vulnerabilidad de ejecución remota de código permitía que los atacantes transfiriesen un objeto Java \"SignedObject\" en la interfaz de línea de comandos de Jenkins, que se deserializaría mediante un nuevo \"ObjectInputStream\", omitiendo el mecanismo de protección existente basado en listas negras. Se ha solucionado este problema añadiendo \"SignedObject\" a la lista negra. También se va a trasladar el nuevo protocolo HTTP CLI de Jenkins 2.54 a LTS 2.46.2 y dejar en desuso el protocolo CLI basado en remoto (por ejemplo, la serialización Java), deshabilitándolo por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2025-10-02",
      "cisaActionDue" : "2025-10-23",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Jenkins Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.56",
            "matchCriteriaId" : "0CCBCB6B-CDDD-4313-9C7D-C7509E0C19F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.46.1",
            "matchCriteriaId" : "17BB8235-B330-4D12-8C11-FCAF2B7CFE68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA84D6-F312-4C29-A02B-050FCB7A902B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/159266/Jenkins-2.56-CLI-Deserialization-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41965/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/159266/Jenkins-2.56-CLI-Deserialization-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41965/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-1000353",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T17:29:00.253",
      "lastModified" : "2024-11-21T03:04:31.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The `login` command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to authenticate further commands. Users with sufficient permission to create secrets in Jenkins, and download their encrypted values (e.g. with Job/Configure permission), were able to impersonate any other Jenkins user on the same instance."
      }, {
        "lang" : "es",
        "value" : "Jenkins, en versiones 2.56 y anteriores y 2.46.1 LTS y anteriores, es vulnerable a un comando login que permitía suplantar a cualquier usuario de Jenkins. El comando \"login\" disponible en la interfaz de línea de comandos basada en remoto almacenaba el nombre de usuario cifrado del usuario autenticado de forma exitosa en un archivo de caché empleado para autenticar más comandos. Los usuarios con permisos suficientes para crear secretos en Jenkins y descargar sus valores cifrados (por ejemplo, con el permiso Job/Configure) fueron capaces de suplantar a cualquier otro usuario de Jenkins en la misma instancia."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.56",
            "matchCriteriaId" : "73F94786-2CB0-45CE-BDD4-40349CF933AE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.46.1",
            "matchCriteriaId" : "17BB8235-B330-4D12-8C11-FCAF2B7CFE68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98065",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T17:29:00.300",
      "lastModified" : "2024-11-21T03:04:31.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void."
      }, {
        "lang" : "es",
        "value" : "Jenkins, en versiones 2.56 y anteriores y 2.46.1 LTS y anteriores, es vulnerable al cierre inesperado de Java XStream: al intentar crear una instancia void/Void."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.56",
            "matchCriteriaId" : "73F94786-2CB0-45CE-BDD4-40349CF933AE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.46.1",
            "matchCriteriaId" : "17BB8235-B330-4D12-8C11-FCAF2B7CFE68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98066",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-29T17:29:00.363",
      "lastModified" : "2024-11-21T03:04:31.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts."
      }, {
        "lang" : "es",
        "value" : "Jenkins, en versiones 2.56 y anteriores y 2.46.1 LTS y anteriores, es vulnerable a un problema en el realm de autenticación de la base de datos de usuarios de Jenkins. La vulnerabilidad permite crear una cuenta si signup está habilitado o crear una cuenta si la víctima es un administrador, lo que podría eliminar durante el proceso al administrador existente por defecto y permitir una gran variedad de impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.56",
            "matchCriteriaId" : "73F94786-2CB0-45CE-BDD4-40349CF933AE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.46.1",
            "matchCriteriaId" : "17BB8235-B330-4D12-8C11-FCAF2B7CFE68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-04-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12626",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-29T17:29:00.410",
      "lastModified" : "2024-11-21T03:09:55.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295)."
      }, {
        "lang" : "es",
        "value" : "Apache POI, en versiones anteriores al release 3.17, es vulnerable a ataques de denegación de servicio (DoS): 1) bucles infinitos al analizar WMF, EMF, MSG y macros manipuladas (POI bugs 61338 y 61294); y 2) excepciones fuera de memoria al analizar DOC, PPT y XLS manipulados(POI bugs 52372 y 61295)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:poi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.17",
            "matchCriteriaId" : "1C04149C-A260-4129-93DE-EA5815189C17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102879",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b%40%3Cdev.poi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/102879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b%40%3Cdev.poi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15133",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-29T19:29:00.267",
      "lastModified" : "2024-11-21T03:14:08.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de denegación de servicio (DoS) en miekg-dns en versiones anteriores a la 1.0.4. Un atacante remoto podría emplear paquetes TCP cuidadosamente programados para bloquear el servidor DNS y que no acepte nuevas conexiones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miekg-dns_prject:miekg-dns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "0C5E948D-B328-446C-83BC-93B91C04C8F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1538763",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/miekg/dns/issues/627",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1538763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/miekg/dns/issues/627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17070",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.343",
      "lastModified" : "2023-11-07T02:41:07.807",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17071",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.407",
      "lastModified" : "2023-11-07T02:41:08.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17072",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.453",
      "lastModified" : "2023-11-07T02:41:08.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17073",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.517",
      "lastModified" : "2023-11-07T02:41:08.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17074",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.563",
      "lastModified" : "2023-11-07T02:41:08.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17075",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.627",
      "lastModified" : "2023-11-07T02:41:09.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17076",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.687",
      "lastModified" : "2023-11-07T02:41:09.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17077",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.780",
      "lastModified" : "2023-11-07T02:41:09.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17078",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.843",
      "lastModified" : "2023-11-07T02:41:09.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17079",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.890",
      "lastModified" : "2023-11-07T02:41:10.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3739",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2018-01-29T19:29:00.937",
      "lastModified" : "2023-11-07T02:44:12.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7516",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-01-29T19:29:00.983",
      "lastModified" : "2023-11-07T02:50:11.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9513",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-29T19:29:01.063",
      "lastModified" : "2024-11-21T03:36:18.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated attackers to watch any Confluence page & receive notifications when comments are added to the watched page, and vote & watch JIRA issues that they do not have access to, although they will not receive notifications for the issue, via missing permission checks."
      }, {
        "lang" : "es",
        "value" : "Varios recursos rest de acción inline de Atlassian Activity Streams en versiones anteriores a la 6.3.0 permiten que atacantes remotos autenticados vean cualquier página Confluence, reciban notificaciones cuando se añaden comentarios en la página vista y voten y vean problemas JIRA a los que no tienen acceso, aunque no recibirán notificaciones para el problema, mediante la falta de comprobaciones de permisos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:activity_streams:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.0",
            "matchCriteriaId" : "0A56A311-72BB-47C6-A488-16BD13ED0CCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102869",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/STRM-2350",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/STRM-2350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-30T16:29:00.217",
      "lastModified" : "2025-01-10T19:15:27.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el método NCompress::NShrink::CDecoder::CodeReal en 7-Zip, en versiones anteriores a la 18.00 y en p7zip permite que atacantes remotos provoquen una denegación de servicio (escritura fuera de límites) o que ejecuten código arbitrario mediante un archivo ZIP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.00",
            "matchCriteriaId" : "29DB1D61-48E4-4483-8CEE-2A65324FF0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:7-zip:p7zip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.0",
            "matchCriteriaId" : "0B541E55-DEFD-4595-BE62-003F52D39F32"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://0patch.blogspot.si/2018/02/two-interesting-micropatches-for-7-zip.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/p7zip-project/p7zip/issues/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3913-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://0patch.blogspot.si/2018/02/two-interesting-micropatches-for-7-zip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3913-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1731",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-30T18:29:00.223",
      "lastModified" : "2024-11-21T03:22:16.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 podría proporcionar seguridad más débil de la esperada al emplear la consola de administración. Un atacante remoto autenticado podría explotar esta vulnerabilidad para obtener privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndIncluding" : "7.0.0.43",
            "matchCriteriaId" : "98101B85-FFB7-4E21-AB44-9B8BE3ED9225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.14",
            "matchCriteriaId" : "330E398A-A3EE-4546-A8CC-B1C77E5679E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.13",
            "matchCriteriaId" : "45BF11DE-674C-424E-9097-409F4967C612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.6",
            "matchCriteriaId" : "A8A92B56-9F18-4720-900F-6E42FFC4E298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102911",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040356",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134912",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-30T19:29:00.213",
      "lastModified" : "2024-11-21T03:04:15.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user's ability to maintain their own account (changing username, changing primary email address, deleting account). The correct behavior was to either prompt them for their password and/or send a warning to their primary email address."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 18.10.0 de Mahara. Manejaba de manera incorrecta las peticiones de los usuarios que podían interrumpir la capacidad de un usuario de mantener su propia cuenta (cambiar el nombre de usuario, cambiar la dirección de correo electrónico principal, eliminar la cuenta). El comportamiento correcto era pedirles su contraseña y/o enviarles una advertencia a su dirección de correo electrónico principal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.10.0",
            "matchCriteriaId" : "C36CD6DC-F7CE-49D9-98BC-CB7BD78FC617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1422492",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1422492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T14:29:00.420",
      "lastModified" : "2024-11-21T03:04:40.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and 'hard-timeout' are sent to the Openflow Plugin REST API, the expired flows will eventually crash the controller once its resource allocations set with the JVM size are exceeded. Although the installed flows (with timeout set) are removed from network (and thus also from controller's operations DS), the expired entries are still present in CONFIG DS. The attack can originate both from NORTH or SOUTH. The above description is for a north bound attack. A south bound attack can originate when an attacker attempts a flow flooding attack and since flows come with timeouts, the attack is not successful. However, the attacker will now be successful in CONTROLLER overflow attack (resource consumption). Although, the network (actual flow tables) and operational DS are only (~)1% occupied, the controller requests for resource consumption. This happens because the installed flows get removed from the network upon timeout."
      }, {
        "lang" : "es",
        "value" : "OpenFlow Plugin y OpenDayLight Controller, en versiones Nitrogen, Carbon, Boron, Robert Varga y Anil Vishnoi, contienen un error cuando múltiples flujos \"expirados\" consumen los recursos de memoria de CONFIG DATASTORE, lo que conduce a un cierre de CONTROLLER. Si se envían múltiples flujos diferentes con \"idle-timeout\" y \"hard-timeout\" a la API REST de Openflow Plugin, los flujos expirados acabarán cerrando el controlador inesperadamente una vez se excedan as asignaciones de memoria establecidas con el tamaño de la máquina virtual Java. Aunque los flujos instalados (con tiempo de espera establecido) se eliminan de la red (y, por lo tanto, también del DS de operaciones del controlador), las entradas expiradas siguen presentes en CONFIG DS. El ataque puede surgir tanto de una vertical de arriba como de abajo. La descripción anterior corresponde a un ataque desde arriba. Puede darse un ataque desde abajo cuando un atacante intenta realizar una inundación de flujos y, ya que los flujos incluyen tiempos de espera, el ataque no tiene éxito. Sin embargo, el atacante sí tendrá éxito en un ataque de desbordamiento de CONTROLLER (consumo de recursos). Aunque el DS de red (las tablas de flujo) y de operaciones solo está ocupado en un 1% aproximadamente, el controlador pide consumo de recursos. Esto ocurre debido a que los flujos instalados se eliminan de la red una vez ha pasado el tiempo de espera."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:boron:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29365419-EF46-48C0-B986-A7433BED2C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:carbon:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FF78D8-7F1C-4327-B6E6-B2D06ED6B7B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:opendaylight:nitrogen:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A724686D-14A6-4405-8E88-36F132EE409E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:openflow:boron:*:*:*:*:opendaylight:*:*",
            "matchCriteriaId" : "581C9FFB-16ED-4F7C-ACBF-F33ACAB47DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:openflow:carbon:*:*:*:*:opendaylight:*:*",
            "matchCriteriaId" : "ECF06E9B-C2A2-4298-A981-590ED038C3FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendaylight:openflow:nitrogen:*:*:*:*:opendaylight:*:*",
            "matchCriteriaId" : "7426B108-9C5C-4983-ABBA-F0285C6C1213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2018/q1/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102736",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2018/q1/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15698",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-31T14:29:00.467",
      "lastModified" : "2024-11-21T03:15:01.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Al analizar el campo AIA-Extension de un certificado de cliente, Apache Tomcat Native Connector en versiones 1.2.0 a 1.2.14 y 1.1.23 a 1.1.34 no gestionó correctamente los campos superiores a los 127 bytes. El resultado del error de análisis fue la omisión de la comprobación OCSP. Por lo tanto, era posible que se aceptasen certificados de cliente que deberían haber sido rechazados (si se hubiese realizado la comprobación OCSP). Los usuarios que no empleen las comprobaciones OCSP no se han visto afectados por la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.23",
            "versionEndIncluding" : "1.1.34",
            "matchCriteriaId" : "A362CAA5-51E6-45FC-AF1F-92D7D427FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndIncluding" : "1.2.14",
            "matchCriteriaId" : "C6375F66-17C3-402F-A32D-2ECC636A86CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040390",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6eb0a53e5827d97db1a05c736d01101fec21202a5b8fc77bb0eaaed8%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00011.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4118",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/6eb0a53e5827d97db1a05c736d01101fec21202a5b8fc77bb0eaaed8%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15706",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-01-31T14:29:00.500",
      "lastModified" : "2024-11-21T03:15:02.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description of the search algorithm used by the CGI Servlet to identify which script to execute. The update was not correct. As a result, some scripts may have failed to execute as expected and other scripts may have been executed unexpectedly. Note that the behaviour of the CGI servlet has remained unchanged in this regard. It is only the documentation of the behaviour that was wrong and has been corrected."
      }, {
        "lang" : "es",
        "value" : "Como parte de la solución para el bug 61201, la documentación para Apache Tomcat en versiones 9.0.0.M22 a la 9.0.1; versiones 8.5.16 a 8.5.23; 8.0.45 a 8.0.47 y 7.0.79 to 7.0.82 incluía una descripción actualizada del algoritmo de búsqueda empleado por el Servlet CGI para identificar qué script ejecutar. La actualización no fue correcta. Como resultado, algunos scripts no se han ejecutado como se esperaba y otros se han ejecutado inesperadamente. Se debe tener en cuenta que el comportamiento del servlet CGI se ha mantenido sin cambios en este sentido. Lo único erróneo era la documentación del comportamiento, que ya ha sido corregida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.79",
            "versionEndIncluding" : "7.0.82",
            "matchCriteriaId" : "96F2AD27-8BC3-44DB-B732-6AF1ACAA9C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.45",
            "versionEndIncluding" : "8.0.47",
            "matchCriteriaId" : "2D675B52-2C19-4DD8-9BDD-1CDE23DF5520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.16",
            "versionEndIncluding" : "8.5.23",
            "matchCriteriaId" : "48422EF4-3664-491E-8024-D522FD2E1144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "EF411DDA-2601-449A-9046-D250419A0E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "3B266B1E-24B5-47EE-A421-E0E3CC0C7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "29614C3A-6FB3-41C7-B56E-9CC3F45B04F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AB156C-8FF6-4727-AF75-590D0DCB3F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4355F36-B223-4819-8272-751EBB68782F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103069",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e1ef853fc0079cdb55befbd2dac042934e49288b476d5f6a649e5da2%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://usn.ubuntu.com/3665-1/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/103069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e1ef853fc0079cdb55befbd2dac042934e49288b476d5f6a649e5da2%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3665-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16858",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-01-31T14:29:00.563",
      "lastModified" : "2024-11-21T03:17:06.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given the following situation: the Crowd application is bound to directory 1 and has a user called admin and the Google Apps application is bound to directory 2, which also has a user called admin, it was possible to authenticate REST requests using the credentials of the user coming from directory 2 and impersonate the user from directory 1."
      }, {
        "lang" : "es",
        "value" : "El módulo del plugin \"crowd-application\" (empleado principalmente por el plugin Google Apps) en Atlassian Crowd, desde la versión 1.5.0 y antes de la versión 3.1.2, permitía que un atacante suplantase a un usuario de Crowd en peticiones REST pudiendo autenticarse en un directorio vinculado a una aplicación que emplee esa característica. En la siguiente situación: la aplicación Crowd está enlazada al directorio 1 y tiene un usuario llamado admin y la aplicación Google Apps está enlazada al directorio 2, que también tiene un usuario llamado admin, era posible autenticar peticiones REST empleando las credenciales del usuario que viene del directorio 2 y suplanta al usuario del directorio 1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "A3767E19-3A9F-4DB6-B1FE-4061E4877AB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5009",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1233",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-31T15:29:00.243",
      "lastModified" : "2024-11-21T03:21:33.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System or root privileges. IBM X-Force ID: 123912."
      }, {
        "lang" : "es",
        "value" : "IBM Remote Control v9 podría permitir que un usuario local emplee el componente para reemplazar archivos a los que no tiene acceso de escritura y que puede hacer que se ejecuten con privilegios Local System o root. IBM X-Force ID: 123912."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_remote_control:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6F376B-32AF-4F07-9D41-D153BCA160FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011765",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123912",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1773",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-01-31T15:29:00.290",
      "lastModified" : "2024-11-21T03:22:20.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817."
      }, {
        "lang" : "es",
        "value" : "IBM DataPower Gateways 7.1, 7,2, 7.5 y 7.6 podría permitir que un atacante que emplee técnicas de Man-in-the-Middle (MitM) suplante las respuestas DNS para realizar envenenamiento de caché DNS y redireccionar el tráfico de Internet. IBM X-Force ID: 136817."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0.0",
            "versionEndIncluding" : "7.1.0.20",
            "matchCriteriaId" : "5669E73D-FF58-4E38-9CB7-B4530BE426C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0.0",
            "versionEndIncluding" : "7.2.0.17",
            "matchCriteriaId" : "A849CA04-9DE3-497E-9665-1C4F674C04A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.5.0.0",
            "versionEndIncluding" : "7.5.0.11",
            "matchCriteriaId" : "38B7E013-7F8D-4EDF-B3EA-FBC931EBFA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.5.1.0",
            "versionEndIncluding" : "7.5.1.10",
            "matchCriteriaId" : "8BD4E7B2-9045-4A79-BF92-C850AA2E0C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.5.2.0",
            "versionEndIncluding" : "7.5.2.10",
            "matchCriteriaId" : "99EAF1A6-6D65-4665-B781-4149EC9ACB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0.0",
            "versionEndIncluding" : "7.6.0.3",
            "matchCriteriaId" : "BD79658B-6ACA-4D16-ABB7-D0CA3AC8AACB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012758",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136817",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T16:29:00.210",
      "lastModified" : "2024-11-21T03:34:58.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail address and send a forgot password email to themselves, thereby gaining administrative access."
      }, {
        "lang" : "es",
        "value" : "En Center for Internet Security CIS-CAT Pro Dashboard, en versiones anteriores a la 1.0.4, un usuario autenticado puede cambiar la dirección de email de un usuario administrativo y enviarse un email de recuperación de contraseña a sí mismo, por lo que obtendría acceso administrativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisecurity:cis-cat_pro_dashboard:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183B0014-7C8A-4A1C-9920-7B44DC0AA7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisecurity:cis-cat_pro_dashboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CF8B6D-7C1E-4447-98E8-03C75B6EDD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisecurity:cis-cat_pro_dashboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9692AF-DAEC-4355-9DE5-112F0BC86A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisecurity:cis-cat_pro_dashboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED5671D-6C2D-4588-B227-4321B43ED468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisecurity.org/cis-security-updates/incorrect-access-control-cve-2017-8916/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisecurity.org/cis-security-updates/incorrect-access-control-cve-2017-8916/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.227",
      "lastModified" : "2024-11-21T03:14:57.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing administrator session token by using a specific User-Agent string."
      }, {
        "lang" : "es",
        "value" : "La validación indebida de la IP del administrador tras iniciar sesión en el servidor HTTPd en todas las versiones actuales (iguales o inferiores a 3.0.0.4.380.7743) de Asus asuswrt permite que un usuario no autorizado ejecute cualquier acción conociendo el token de administrador mediante el uso de una cadena User-Agent específica."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:asuswrt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "78F4C3DB-DC64-4A1D-AB0E-5199CE17D0F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.290",
      "lastModified" : "2024-11-21T03:14:58.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access."
      }, {
        "lang" : "es",
        "value" : "Los tokens de sesión altamente predecibles en el servidor HTTPd en todas las versiones actuales (iguales o inferiores a 3.0.0.4.380.7743) de Asus asuswrt permiten obtener acceso administrativo al router."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asuswrt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "66979BDA-4814-48F1-8F52-1AC26A4513B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.350",
      "lastModified" : "2024-11-21T03:14:58.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer en el servidor HTTPd en Asus asuswrt en versiones iguales o anteriores a la 3.0.0.4.376.X. Todas se han solucionado en la versión 3.0.0.4.378, pero esta vulnerabilidad no había sido revelada anteriormente. Algunos routers que están en el final de su vida útil tienen esta versión como la más nueva y, por lo tanto, son vulnerables. Esta vulnerabilidad permite un RCE con privilegios de administrador cuando el administrador visita varias páginas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asuswrt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.378",
            "matchCriteriaId" : "94706BE6-DD37-4F86-8154-5809CE4913A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sploit.tech/2018/01/16/ASUS-part-I.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sploit.tech/2018/01/16/ASUS-part-I.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.413",
      "lastModified" : "2024-11-21T03:14:58.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt."
      }, {
        "lang" : "es",
        "value" : "Las contraseñas se almacenan en texto plano en nvram en el servidor HTTPd en todas las versiones actuales (iguales o anteriores a la 3.0.0.4.380.7743) de Asus asuswrt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asuswrt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.380.7743",
            "matchCriteriaId" : "66979BDA-4814-48F1-8F52-1AC26A4513B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/145921/ASUSWRT-3.0.0.4.382.18495-Session-Hijacking-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jan/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.493",
      "lastModified" : "2024-11-21T03:17:15.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip."
      }, {
        "lang" : "es",
        "value" : "El binario arq_updater en Arq 5.10 y anteriores para Mac permite que usuarios locales escriban en archivos arbitrarios y, consecuentemente, obtengan privilegios root mediante una URL de actualización manipulada, tal y como demuestra file:///tmp/blah/Arq.zip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haystacksoftware:arq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "7C6A680A-50A1-481E-869C-35494FC71C39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/146158/Arq-5.10-Local-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/two-local-root-privesc-bugs-in-arq-backup--510.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43925/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/146158/Arq-5.10-Local-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/two-local-root-privesc-bugs-in-arq-backup--510.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43925/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.557",
      "lastModified" : "2024-11-21T03:17:17.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path."
      }, {
        "lang" : "es",
        "value" : "El binario standardrestorer en Arq 5.10 y anteriores para Mac permite que usuarios locales escriban en archivos arbitrarios y, consecuentemente, obtengan privilegios root mediante una ruta de restauración manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haystacksoftware:arq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "7C6A680A-50A1-481E-869C-35494FC71C39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/146159/Arq-5.10-Local-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/two-local-root-privesc-bugs-in-arq-backup--510.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43926/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/146159/Arq-5.10-Local-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/two-local-root-privesc-bugs-in-arq-backup--510.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43926/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-01-31T20:29:00.617",
      "lastModified" : "2024-11-21T03:19:14.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la macro ROUND_UP (n, d) en Quick Emulator (Qemu) permite que un usuario provoque una denegación de servicio (cierre inesperado del proceso Qemu)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndIncluding" : "2.10.1",
            "matchCriteriaId" : "F4F9D02D-23A4-4A01-A595-8F6964A01803"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/19/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102759",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/01/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16911",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-01-31T22:29:00.267",
      "lastModified" : "2024-11-21T03:17:13.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP."
      }, {
        "lang" : "es",
        "value" : "El controlador vhci_hcd en el kernel de Linux, en versiones anteriores a la 4.14.8 y la 4.4.114, permite que atacantes locales revelen direcciones de memoria del kernel. La explotación con éxito requiere que se conecte un dispositivo USB mediante IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.114",
            "matchCriteriaId" : "1D433031-B4B7-4E65-B4E2-6AA6967997C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.79",
            "matchCriteriaId" : "FF57E237-F297-4978-93F4-556D4B0B8357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.0",
            "versionEndExcluding" : "4.14.8",
            "matchCriteriaId" : "3AD03762-3423-4E96-AAE0-A04E1AAAF3A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102156",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/80454/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/80454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16912",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-01-31T22:29:00.377",
      "lastModified" : "2024-11-21T03:17:13.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"get_pipe()\" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet."
      }, {
        "lang" : "es",
        "value" : "La función \"get_pipe()\" (drivers/usb/usbip/stub_rx.c) en el kernel de Linux, en versiones anteriores a la 4.14.8; y las versiones 4.9.71 y 4.4.114, permite que atacantes provoquen una denegación de servicio (lectura fuera de límites) mediante un USB especialmente manipulado en un paquete IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "1FC86F48-57E5-4EAA-9C69-B956264C9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndIncluding" : "4.4.107",
            "matchCriteriaId" : "AAAE1BE8-C827-4E35-BA5D-B69566F29D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndIncluding" : "4.9.71",
            "matchCriteriaId" : "EB1AD707-AFE4-469F-813C-90DD787DEC95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.0",
            "versionEndIncluding" : "4.14.8",
            "matchCriteriaId" : "3E5A654F-35F7-49F8-83F3-F6DCAE7A7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102150",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=635f545a7e8be7596b9b2b6a43cab6bbd5a88e43",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/77000/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=635f545a7e8be7596b9b2b6a43cab6bbd5a88e43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/77000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16913",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-01-31T22:29:00.437",
      "lastModified" : "2024-11-21T03:17:14.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"stub_recv_cmd_submit()\" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet."
      }, {
        "lang" : "es",
        "value" : "La función \"stub_recv_cmd_submit()\" (drivers/usb/usbip/stub_rx.c) en el kernel de Linux, en versiones anteriores a la 4.14.8; y las versiones 4.9.71 y 4.4.114, al gestionar paquetes CMD_SUBMIT, permite que atacantes provoquen una denegación de servicio (lectura fuera de límites) mediante un USB especialmente manipulado en un paquete IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "1FC86F48-57E5-4EAA-9C69-B956264C9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.107",
            "matchCriteriaId" : "2248F2B5-9905-4489-8D4E-F4EC8FDD6274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.71",
            "matchCriteriaId" : "E7FE65A0-D087-4E41-99C2-E7A34428080C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.0",
            "versionEndExcluding" : "4.14.8",
            "matchCriteriaId" : "3AD03762-3423-4E96-AAE0-A04E1AAAF3A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102150",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=c6688ef9f29762e65bce325ef4acd6c675806366",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/80601/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=c6688ef9f29762e65bce325ef4acd6c675806366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/80601/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16914",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-01-31T22:29:00.547",
      "lastModified" : "2024-11-21T03:17:14.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"stub_send_ret_submit()\" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet."
      }, {
        "lang" : "es",
        "value" : "La función \"stub_send_ret_submit()\" (drivers/usb/usbip/stub_tx.c) en el kernel de Linux, en versiones anteriores a la 4.14.8; y las versiones 4.9.71 y 4.4.107, permite que atacantes provoquen una denegación de servicio (lectura fuera de límites) mediante un USB especialmente manipulado en un paquete IP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.49",
            "matchCriteriaId" : "1FC86F48-57E5-4EAA-9C69-B956264C9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.107",
            "matchCriteriaId" : "2248F2B5-9905-4489-8D4E-F4EC8FDD6274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.71",
            "matchCriteriaId" : "E7FE65A0-D087-4E41-99C2-E7A34428080C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.0",
            "versionEndExcluding" : "4.14.8",
            "matchCriteriaId" : "3AD03762-3423-4E96-AAE0-A04E1AAAF3A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102150",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.107",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=be6123df1ea8f01ee2f896a16c2b7be3e4557a5a",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/80722/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=be6123df1ea8f01ee2f896a16c2b7be3e4557a5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/80722/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/linux-usb/msg163480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-01T04:29:00.247",
      "lastModified" : "2024-11-21T03:04:40.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366."
      }, {
        "lang" : "es",
        "value" : "Una fuga de memoria en glibc 2.1.1 (publicado el 24 de mayo de 1999) puede ser alcanzada y amplificada mediante la variable de entorno LD_HWCAP_MASK. Hay que tener en cuenta que muchas versiones de glibc no son vulnerables a este problema si se corrigen con el parche para CVE-2017-1000366."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED8F0E8-A969-4F7F-A100-662F4A5426FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q4/385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/27/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190404-0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43331/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/27/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/06/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190404-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43331/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-01T04:29:00.310",
      "lastModified" : "2024-11-21T03:04:40.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en glibc 2.5 (publicado el 29 de septiembre de 2006) puede ser desencadenado mediante la variable de entorno LD_LIBRARY_PATH. Hay que tener en cuenta que muchas versiones de glibc no son vulnerables a este problema si se corrigen con el parche para CVE-2017-1000366."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0B9503-9AD0-4A1A-BD4F-4B902BFC8E5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q4/385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190404-0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43331/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190404-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/43331/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16861",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-01T04:29:00.373",
      "lastModified" : "2024-11-21T03:17:07.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur. An attacker who can access the web interface of Fisheye or Crucible or who hosts a website that a user who can access the web interface of Fisheye or Crucible visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Fisheye or Crucible. All versions of Fisheye and Crucible before 4.4.5 (the fixed version for 4.4.x) and from 4.5.0 before 4.5.2 (the fixed version for 4.5.x) are affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "La doble evaluación OGNL era posible en algunas acciones de redirección y en la URL WebWork y las etiquetas Anchor de archivos JSP. Un atacante que pueda acceder a la interfaz web de Fisheye o Crucible o que aloje un sitio web que visite un usuario que pueda acceder a la interfaz web de Fisheye o Crucible puede explotar esta vulnerabilidad para ejecutar código Java a voluntad en sistemas que ejecuten una versión vulnerable de Fisheye o de Crucible. Todas las versiones de Fisheye y Crucible anteriores a la 4.4.5 (la versión corregida para 4.4.x) y desde la 4.5.0 anteriores a la 4.5.2 (la versión corregida para 4.5.x) se han visto afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "3A314B49-7DF6-4DB6-A328-F00526C8686A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.2",
            "matchCriteriaId" : "65CA77B1-0C10-45F6-BF53-C039A7389807"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "8010121E-62EF-46BC-BAEC-F82B007DC42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.2",
            "matchCriteriaId" : "74781603-2B1A-462A-9053-604320A63CB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102971",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/x/h-QyO",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/x/iPQyO",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8156",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6991",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://confluence.atlassian.com/x/h-QyO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/x/iPQyO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3160",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-01T21:29:00.197",
      "lastModified" : "2024-11-21T03:24:57.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity of this issue is high due to the fact that the build scripts immediately start a build after Gradle has been fetched. Developers who are concerned about this issue should install version 6.1.2 or higher of Cordova-Android. If developers are unable to install the latest version, this vulnerability can easily be mitigated by setting the CORDOVA_ANDROID_GRADLE_DISTRIBUTION_URL environment variable to https://services.gradle.org/distributions/gradle-2.14.1-all.zip"
      }, {
        "lang" : "es",
        "value" : "Después de añadir la plataforma Android a Cordova por primera vez o después de crear un proyecto utilizando los build scripts, los scripts recuperarán Gradle en su primera build. Sin embargo, dado que la URI por defecto no utiliza https, es vulnerable a MiTM y el ejecutable Gradle no es seguro. La criticidad de esta vulnerabilidad es alta dado que los build scripts empiezan inmediatamente una build después de que se recupere Gradle. Los desarrolladores que sean conscientes de este problema deberían instalar la versión 6.1.2 o superior de Cordova-Android. Si los desarrolladores no pueden instalar la última versión, esta vulnerabilidad se puede mitigar fácilmente configurando la variable de entorno CORDOVA_ANDROID_GRADLE_DISTRIBUTION_URL en https://services.gradle.org/distributions/gradle-2.14.1-all.zip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cordova:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "6.1.2",
            "matchCriteriaId" : "022BC79F-AC22-41B8-B6AF-BC027E8F38D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95838",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cordova.apache.org/announcements/2017/01/27/android-612.html",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/95838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cordova.apache.org/announcements/2017/01/27/android-612.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2293",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2018-02-01T22:29:00.230",
      "lastModified" : "2024-11-21T03:23:13.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Puppet Enterprise anteriores a 2016.4.5 o 2017.2.1 fueron publicadas con una configuración de MCollective que permitía que el plugin package instale o elimine paquetes arbitrarios en todos los agentes que gestiona. Esta publicación añade la configuración por defecto para no permitir estas acciones. Los clientes que confíen en esta funcionalidad pueden cambiar esta política."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2016.4.5",
            "matchCriteriaId" : "E0BA51D7-8EA1-4AB2-8E3F-EFD07E4ADB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2016.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299ACFD1-609F-42CA-B0E5-F7B54A1ACBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2016.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1540BC44-B4EB-4CF9-88DD-EECD855F6BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1364714C-1FD3-4195-BD35-548544EB6424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F91CE9-C65E-4E6E-85C0-FAF898DE0064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://puppet.com/security/cve/cve-2017-2293",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2296",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2018-02-01T22:29:00.277",
      "lastModified" : "2024-11-21T03:23:13.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2."
      }, {
        "lang" : "es",
        "value" : "En Puppet Enterprise 2017.1.x y 2017.2.1, cuando se utilizan cadenas especialmente formateadas como nombres de grupos del nodo Classifier o nombres de roles RBAC, se provocan errores generando como consecuencia una denegación de servicio. Este problema se resolvió en Puppet Enterprise 2017.2.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1364714C-1FD3-4195-BD35-548544EB6424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F91CE9-C65E-4E6E-85C0-FAF898DE0064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E60CC-6A1D-4983-B8C3-0E6726D8014D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://puppet.com/security/cve/cve-2017-2296",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2297",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2018-02-01T22:29:00.357",
      "lastModified" : "2024-11-21T03:23:14.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens."
      }, {
        "lang" : "es",
        "value" : "Puppet Enterprise en versiones anteriores a la 2016.4.5 y 2017.2.1 no autenticaba correctamente los usuarios antes de devolver los tokens de acceso RBAC etiquetados. Este problema se ha solucionado en Puppet Enterprise 2016.4.5 y 2017.2.1. Esto solo afecta a los usuarios con tokens etiquetados, algo que no viene por defecto para los tokens."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2016.4.5",
            "matchCriteriaId" : "E0BA51D7-8EA1-4AB2-8E3F-EFD07E4ADB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2016.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299ACFD1-609F-42CA-B0E5-F7B54A1ACBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2016.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1540BC44-B4EB-4CF9-88DD-EECD855F6BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1364714C-1FD3-4195-BD35-548544EB6424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:2017.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F91CE9-C65E-4E6E-85C0-FAF898DE0064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://puppet.com/security/cve/cve-2017-2297",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2017-2297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-02T09:29:00.227",
      "lastModified" : "2024-11-21T03:19:23.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled, a different vulnerability than CVE-2017-1000421."
      }, {
        "lang" : "es",
        "value" : "Un error de doble liberación (double free) en la función read_gif en gifread.c en gifsicle 1.90 permite que un atacante remoto provoque un ataque de denegación de servicio (DoS) u otro tipo de impacto sin especificar mediante un archivo maliciosamente manipulado. Esta vulnerabilidad es diferente de CVE-2017-1000421."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lcdf:gifsicle:1.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDD745B-40DB-4F6E-8E7D-1457F8BD0179"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878739",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881120",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kohler/gifsicle/issues/117",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kohler/gifsicle/issues/117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14177",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2018-02-02T14:29:00.263",
      "lastModified" : "2024-11-21T03:12:18.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324."
      }, {
        "lang" : "es",
        "value" : "Apport, hasta la versión 2.20.7, no gestiona adecuadamente lo volcados de núcleo de binarios setuid, lo que permite que los usuarios locales creen ciertos archivos como root. Un atacante podría aprovechar estos archivos para realizar una denegación de servicio (DoS) mediante el agotamiento de recursos o, posiblemente, obtener privilegios root.  NOTA: Esta vulnerabilidad existe debido a una solución incompleta para CVE-2015-1324."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20.7",
            "matchCriteriaId" : "F2519820-9513-4C0E-AF95-639587329310"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bazaar.launchpad.net/~apport-hackers/apport/trunk/revision/3171",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1726372",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14177",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3480-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bazaar.launchpad.net/~apport-hackers/apport/trunk/revision/3171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1726372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3480-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14178",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2018-02-02T14:29:00.340",
      "lastModified" : "2024-11-21T03:12:18.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions."
      }, {
        "lang" : "es",
        "value" : "En snapd 2.27 hasta la versión 2.29.2, el comando \"snap logs\" podría llamar a journalctl sin argumentos match y, por lo tanto, permitir que usuarios no autenticados y sin privilegios omitan las restricciones de acceso a systemd-journald."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snapcraft:snapd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.27",
            "versionEndIncluding" : "2.29.2",
            "matchCriteriaId" : "5FB59582-298D-46EB-B4CD-2BD7E8F6C69E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/snapcore/snapd/pull/4194",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1730255",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14178.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/snapcore/snapd/pull/4194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1730255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14178.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14179",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2018-02-02T14:29:00.403",
      "lastModified" : "2024-11-21T03:12:18.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers."
      }, {
        "lang" : "es",
        "value" : "Apport, en versiones anteriores a la 2.13, no gestiona adecuadamente los cierres inesperados provenientes de un espacio de nombre PID, lo que permite que los usuarios locales creen ciertos archivos como root. Un atacante podría aprovechar estos archivos para realizar una denegación de servicio (DoS) mediante el agotamiento de recursos o, posiblemente, obtener privilegios root o escapar de contenedores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13",
            "matchCriteriaId" : "346D6903-A9B3-491B-8C4F-0506F18E7EAD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.net/bugs/1726372",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14179",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1726372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14180",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2018-02-02T14:29:00.467",
      "lastModified" : "2025-11-03T20:15:41.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability than CVE-2017-14179."
      }, {
        "lang" : "es",
        "value" : "Apport 2.13 hasta la versión 2.20.7 no gestiona adecuadamente los cierres inesperados provenientes de un espacio de nombre PID, lo que permite que los usuarios locales creen ciertos archivos como root. Un atacante podría aprovechar estos archivos para realizar una denegación de servicio (DoS) mediante el agotamiento de recursos o, posiblemente, obtener privilegios root. Esta vulnerabilidad es diferente de CVE-2017-14179."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.13",
            "versionEndIncluding" : "2.20.7",
            "matchCriteriaId" : "ACBD0C3D-87F4-4B78-B12B-1E676FBE9698"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588D4F37-0A56-47A4-B710-4D5F3D214FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bazaar.launchpad.net/~apport-hackers/apport/trunk/revision/3171",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1726372",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14180",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3480-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2025/Jun/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bazaar.launchpad.net/~apport-hackers/apport/trunk/revision/3171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1726372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/usn/usn-3480-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18034",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.543",
      "lastModified" : "2024-11-21T03:19:13.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 allows allows remote attackers that have write access to an indexed repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in via a specially crafted repository branch name when trying to display deleted files of the branch."
      }, {
        "lang" : "es",
        "value" : "El recurso de exploración de fuentes en Atlassian Fisheye y Crucible en versiones anterores 4.5.1 y 4.6.0 permite a los atacantes remotos que tienen acceso de escritura a un repositorio indexado inyectar HTML o JavaScript arbitrario a través de una vulnerabilidad de scripts de sitios cruzados (XSS) a través de un nombre de rama del repositorio especialmente elaborado cuando se intenta mostrar los archivos eliminados de la rama"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "CC7AF5E6-136F-4DED-823F-602C6863265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F48646D-1774-4036-8BBF-3BAA34EF4787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "557AE134-DC5B-4546-8DF4-1E89BB32558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5342E75B-39DD-45F5-B794-CB63D7E8894A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8161",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6994",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18035",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.607",
      "lastModified" : "2024-11-21T03:19:13.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a permissions check, this allows remote attackers who do not have access to a particular repository to determine its existence and access review coverage statistics for it."
      }, {
        "lang" : "es",
        "value" : "El recurso /rest/review-coverage-chart/1.0/data//.json en Atlassian Fisheye y Crucible, en versiones anteriores a la 4.5.1 y la 4.6.0, no tenía una comprobación de permisos. Esto permite que atacantes remotos que no tengan acceso a un repositorio en concreto determinen su existencia y accedan a sus estadísticas de cobertura de revisión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "557AE134-DC5B-4546-8DF4-1E89BB32558E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "CC7AF5E6-136F-4DED-823F-602C6863265B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8163",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6996",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-6996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18036",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.670",
      "lastModified" : "2024-11-21T03:19:13.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports via a Server Side Request Forgery (SSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "El importador de repositorios Github en Atlassian Bitbucket Server, en versiones anteriores a la 5.3.0, permite que atacantes remotos determinen si un servicio al que no hubiesen podido acceder de otra forma tiene puertos abiertos mediante una vulnerabilidad de SSRF (Server-Side Request Forgery)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.0",
            "matchCriteriaId" : "2BBA4F7C-4E62-4546-B1FF-ACC467157122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102932",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10591",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18037",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.733",
      "lastModified" : "2024-11-21T03:19:13.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before 5.0.9 (the fixed version for 5.0.x), from version 5.1.0 before 5.1.8 (the fixed version for 5.1.x), from version 5.2.0 before 5.2.6 (the fixed version for 5.2.x), from version 5.3.0 before 5.3.4 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.2 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.1 (the fixed version for 5.5.x) and before 5.6.0 allows remote attackers to read arbitrary files via a path traversal vulnerability through the name of a git tag."
      }, {
        "lang" : "es",
        "value" : "El recurso rest de etiquetas de git repository en Atlassian Bitbucket Server, desde la versión 3.7.0 hasta la 4.14.11 (la versión solucionada para 4.14.x); desde la versión 5.0.0 hasta la 5.0.9 (la versión solucionada para 5.0.x); desde la versión 5.1.0 hasta la 5.1.8 (la versión solucionada para 5.1.x); desde la versión 5.2.0 hasta la 5.2.6 (la versión solucionada para 5.2.x); desde la versión 5.3.0 hasta la 5.3.4 (la versión solucionada para 5.3.x); desde la versión 5.4.0 hasta la 5.4.2 (la versión solucionada para 5.4.x); desde la versión 5.5.0 hasta la 5.5.1 (la versión solucionada para 5.5.x) y en versiones anteriores a la 5.6.0 permite que atacantes remotos lean archivos arbitrarios mediante una vulnerabilidad de salto de directorio a través del nombre de una etiqueta git."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "4.14.11",
            "matchCriteriaId" : "5C25D6B2-925D-454F-94A4-932C36750004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.9",
            "matchCriteriaId" : "38DB1A81-D0F0-4FEC-B4D7-4D3743970D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.8",
            "matchCriteriaId" : "892FF567-63AF-45A6-A4FC-DC49EAA8BE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.6",
            "matchCriteriaId" : "637D06F4-A793-43D0-A93E-E742E16DE64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "85004234-0089-4076-9151-B304C0BCBFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.2",
            "matchCriteriaId" : "3C178873-0E12-45FA-B7A5-3AAE98CB7F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C087CCB5-E39F-4338-B390-D929C0540BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FC3472-E23A-49E4-BC52-31E36514B688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FB88BA-26C7-4966-BE36-9511F94D7AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D289E4E-3E36-44D9-A1AC-D88E271E3C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4045969-A843-403E-BE74-86FE57C89D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18883184-B4FF-429F-8DD1-3A310226F494"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/BSERV-10595",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18038",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.780",
      "lastModified" : "2024-11-21T03:19:13.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the default branch name."
      }, {
        "lang" : "es",
        "value" : "El recurso de opciones del repositorio en Atlassian Bitbucket Server, en versiones anteriores a la 5.6.0, permite que atacantes remotos lean la primera línea de archivos arbitrarios mediante una vulnerabilidad de salto de directorio a través del nombre de rama por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "D478F979-E3FE-45B1-A8EF-DDFC11EA6AD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/BSERV-10592",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18039",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.827",
      "lastModified" : "2024-11-21T03:19:13.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso IncomingMailServers en Atlassian Jira desde la versión 6.2.1 hasta antes de la versión 7.4.4 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad cross-Site Scripting (XSS) en el parámetro messagesThreshold."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.1",
            "versionEndExcluding" : "7.4.4",
            "matchCriteriaId" : "A4407A5F-4FE9-4C90-9681-2B950EE3C590"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103086",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66719",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-66719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18040",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.873",
      "lastModified" : "2024-11-21T03:19:13.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release."
      }, {
        "lang" : "es",
        "value" : "El recurso viewDeploymentVersionCommits en Atlassian Bamboo, en versiones anteriores a la 6.2.0, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el nombre de una versión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "44C21470-8C72-47DC-AA27-6E952CFCC2F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103070",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19661",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18041",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.937",
      "lastModified" : "2024-11-21T03:19:13.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release."
      }, {
        "lang" : "es",
        "value" : "El recurso viewDeploymentVersionJiraIssuesDialog en Atlassian Bamboo, en versiones anteriores a la 6.2.0, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el nombre de una versión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.0",
            "matchCriteriaId" : "17B08059-ED44-4125-9AA6-0C8C42B1E21E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103071",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19662",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18042",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:00.983",
      "lastModified" : "2024-11-21T03:19:14.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "El recurso de actualización de administración de usuarios en Atlassian Bamboo, en versiones anteriores a la 6.3.1, permite que atacantes remotos modifiquen los datos de usuario, incluyendo las contraseñas, mediante una vulnerabilidad de Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "81E848FD-F297-4BA3-A186-F1C8494373CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103110",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19663",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18080",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.047",
      "lastModified" : "2024-11-21T03:19:19.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "El recurso saveConfigureSecurity en Atlassian Bamboo, en versiones anteriores a la 6.3.1, permite que atacantes remotos modifiquen las opciones de seguridad mediante una vulnerabilidad de Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "81E848FD-F297-4BA3-A186-F1C8494373CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/BAM-19664",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18081",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.137",
      "lastModified" : "2024-11-21T03:19:19.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the value of the csrf token cookie."
      }, {
        "lang" : "es",
        "value" : "El recurso signupUser en Atlassian Bamboo, en versiones anteriores a la 6.3.1, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el valor de la cookie del token csrf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "81E848FD-F297-4BA3-A186-F1C8494373CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103087",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19665",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18082",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.217",
      "lastModified" : "2024-11-21T03:19:19.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a branch."
      }, {
        "lang" : "es",
        "value" : "El recurso de ramas de configuración de plan en Atlassian Bamboo, en versiones anteriores a la 6.2.3, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el nombre de una rama."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3",
            "matchCriteriaId" : "5CB48F4C-78DE-4BD7-988D-6D83286CA99F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/BAM-19666",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-19666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18083",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.263",
      "lastModified" : "2024-11-21T03:19:19.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of an uploaded file."
      }, {
        "lang" : "es",
        "value" : "El recurso editinword en Atlassian Confluence Server, en versiones anteriores a la 6.4.0, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través del contenido de un archivo subido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "C972D279-9B88-43EB-B8B4-30A136DA42F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54903",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18084",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.327",
      "lastModified" : "2024-11-21T03:19:19.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro."
      }, {
        "lang" : "es",
        "value" : "El recurso usermacros en Atlassian Confluence Server, en versiones anteriores a la 6.3.4, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través de la descripción de una macro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.4",
            "matchCriteriaId" : "C00E90C8-E089-43E3-94AD-BB40AE4E94BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103064",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54904",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18085",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.373",
      "lastModified" : "2024-11-21T03:19:19.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the key parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso viewdefaultdecorator en Atlassian Confluence Server, en versiones anteriores a la 6.6.1, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través del parámetro key."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.1",
            "matchCriteriaId" : "14B56B6A-7BEB-43B1-86B8-0579B0CE403A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103062",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54905",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18086",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-02T14:29:01.437",
      "lastModified" : "2024-11-21T03:19:19.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuesURL parameter."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en Atlassian Confluence Server, en versiones anteriores a la 6.4.2, permiten que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el parámetro issuesURL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.2",
            "matchCriteriaId" : "34D19774-13E8-4499-B37B-376919F42D3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103061",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54907",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-54907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-02T15:29:00.207",
      "lastModified" : "2024-11-21T03:19:23.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The consentAdmin module in SimpleSAMLphp through 1.14.15 is vulnerable to a Cross-Site Scripting attack, allowing an attacker to craft links that could execute arbitrary JavaScript code on the victim's web browser."
      }, {
        "lang" : "es",
        "value" : "El módulo consentAdmin en SimpleSAMLphp, hasta la versión 1.14.15, es vulnerable a un ataque de Cross-Site Scripting (XSS), lo que permite que un atacante manipule enlaces que podrían ejecutar código JavaScript arbitrario en el navegador web de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.15",
            "matchCriteriaId" : "A6C026A1-38B0-413B-BB13-432D16DA3C44"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201709-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201709-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-02T15:29:00.283",
      "lastModified" : "2024-11-21T03:19:23.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider using SAML 1.1 will regard as valid any unsigned SAML response containing more than one signed assertion, provided that the signature of at least one of the assertions is valid. Attributes contained in all the assertions received will be merged and the entityID of the first assertion received will be used, allowing an attacker to impersonate any user of any IdP given an assertion signed by the targeted IdP."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de omisión de validación de firmas en SimpleSAMLphp hasta la versión 1.14.16. Un proveedor de servicios SimpleSAMLphp que emplee SAML 1.1 considerará como válida cualquier respuesta SAML que contenga más de una aserción válida, siempre y cuando la firma de, al menos, una de las aserciones sea válida. Los atributos contenidos en todas las aserciones recibidas se fusionarán y se empleará el entityID de la primera aserción recibida. Esto permite que un atacante suplante cualquier usuario de cualquier IdP si tiene una aserción firmada por el IdP objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.16",
            "matchCriteriaId" : "7D301951-F71A-418F-A0EF-77D0D23620FE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201710-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://simplesamlphp.org/security/201710-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5727",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-02-02T15:29:00.363",
      "lastModified" : "2024-11-21T03:28:18.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows unprivileged user to elevate privileges via local access."
      }, {
        "lang" : "es",
        "value" : "Una desreferencia de puntero en Intel Graphics Driver 15.40.x.x, 15.45.x.x y 15.46.x.x permite que un usuario sin privilegios eleve sus privilegios mediante acceso local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.1.64.4256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2024D-1B35-44CD-8918-3549D92D8B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.4.64.4256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A142D12-514E-4B13-A77E-A63D2525A2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.7.64.4279:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE08572D-F0E3-4F5E-A5E1-D69486E87129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.14.4352:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B59E90-097C-4BF8-BCDE-321C810D1389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.26.4474:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E584F3-65D0-4D38-ABBB-83C86CDF169D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB6338-23B0-4C1D-97C2-345A22EDCFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7C8297-0E65-4659-8049-34401194D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D10DEC-49BC-4226-83CE-0C4B805CD296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A67F6-415F-4B0E-AA2B-40286CC492A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B637567-0958-488D-ACCA-E5A61D71433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9579A4DB-D506-4570-9C40-1CB4BD666A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F53D97-D600-4AB1-8898-2491AC8B90A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.46.02.4729:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A32D02-2A6C-4E07-A021-13080036E761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.46.05.4771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D642F69C-7292-4350-8697-147F7E717ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00089&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00089&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-03T15:29:00.497",
      "lastModified" : "2024-11-21T03:17:30.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system files, as well as upload specially crafted JSP files and in turn gain access to the server."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el panel administrativo en KonaKart eCommerce Platform, en versiones 8.7 y anteriores, podría permitir que un atacante descargue archivos del sistema, así como subir archivos JSP especialmente manipulados para obtener acceso al servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konakart:konakart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.0.0",
            "matchCriteriaId" : "E08B6908-6F31-4BF5-B113-7423B90A5604"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541742/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541742/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-03T15:29:00.577",
      "lastModified" : "2024-11-21T03:19:23.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs."
      }, {
        "lang" : "es",
        "value" : "El parámetro call de /lib/exe/ajax.php en DokuWiki hasta 2017-02-19e no cifra correctamente las entradas de usuario, lo que conduce a una vulnerabilidad de descarga de archivos reflejada y permite que atacantes remotos ejecuten programas arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-02-19e",
            "matchCriteriaId" : "9CB0CE3C-3563-4C9B-B168-FD1FA7F960D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/splitbrain/dokuwiki/commit/238b8e878ad48f370903465192b57c2072f65d86",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2029",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/pull/2019",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/238316",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://vulnhive.com/2018/000004",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/commit/238b8e878ad48f370903465192b57c2072f65d86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/issues/2029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/splitbrain/dokuwiki/pull/2019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/238316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vulnhive.com/2018/000004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-04T01:29:00.247",
      "lastModified" : "2024-11-21T03:18:29.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS."
      }, {
        "lang" : "es",
        "value" : "Synacor Zimbra Collaboration Suite (ZCS) en versiones anteriores a la 8.8.3 tiene XSS persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.8.3",
            "matchCriteriaId" : "ED1B70E3-80AD-4B09-AEE0-11E6B74D04E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=108265",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=108265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-04T01:29:00.307",
      "lastModified" : "2024-11-21T03:34:41.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS."
      }, {
        "lang" : "es",
        "value" : "Synacor Zimbra Collaboration Suite (ZCS) en versiones anteriores a la 8.7.10 tiene XSS persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.10",
            "matchCriteriaId" : "0B2F81FB-C848-45D9-9693-96C57DB8400B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=107878",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=107885",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Security_Center",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=107878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.zimbra.com/show_bug.cgi?id=107885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Security_Center",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-05T03:29:00.220",
      "lastModified" : "2024-11-21T03:14:44.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain access to the CDSW database which includes Kerberos keytabs of CDSW users and bcrypt hashed passwords, and gain access to other privileged information such as session tokens, invitation tokens, and environment variables."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Cloudera Data Science Workbench (CDSW) en versiones 1.x anteriores a la 1.2.0. Varias vulnerabilidades de aplicación web permiten que usuarios autenticados maliciosos de CDSW escalen sus privilegios en la aplicación. Los usuarios de CDSW pueden explotar estas vulnerabilidades conjuntamente para obtener acceso root a los nodos CDSW, obtener acceso a la base de datos de la aplicación (que incluye keytabs de Kerberos de los usuarios de CDSW y contraseñas bcrypt hasheadas) y obtener acceso a otra información privilegiada como los tokens de sesión, tokens de invitación o variables de entorno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:data_science_workbench:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "FADA5325-628E-416F-963B-BC7CAC74BE2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-05T16:29:00.630",
      "lastModified" : "2024-11-21T03:36:04.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting (XSS) attacks or possibly have unspecified other impact via the name parameter to playerSettings.view."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Request Forgery (CSRF) en la característica Subscribe to Podcast en Subsonic 6.1.1 permite que los atacantes remotos secuestren la autenticación de víctimas no especificadas para peticiones que realicen ataques Cross-Site Request Forgery (CSRF) o posiblemente causen otro impacto mediante el parámetro name en playerSettings.view."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subsonic:subsonic:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1EA39E-CFA6-4FCA-93A2-BA6938702E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142796/Subsonic-6.1.1-Persistent-XSS.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42120/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/142796/Subsonic-6.1.1-Persistent-XSS.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42120/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6169",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-02-06T13:29:00.240",
      "lastModified" : "2024-11-21T03:29:11.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel (TMM) to produce a core file when it receives malformed URLs during categorization."
      }, {
        "lang" : "es",
        "value" : "En las versiones 13.0.0 y 12.0.0-12.1.3 o 11.6.0-11.6.2, un servidor virtual F5 BIG-IP que emplee la característica de categorización de URL podría provocar que el Traffic Management Microkernel (TMM) genere un archivo de volcado cuando recibe URL mal formadas durante la categorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BD328A-30C0-42B2-A08F-ED269DB3D285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60CA151-1C3A-45B3-B939-E6F80063C595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4031DCCB-5110-48B6-9906-7893553ED908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040332",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K31404801",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K31404801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6258",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-02-06T13:29:00.303",
      "lastModified" : "2024-11-21T03:29:21.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-38027496. Reference: N-CVE-2017-6258."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvmmlite_audio.so contiene una vulnerabilidad de elevación de privilegios al ejecutarse en media server. Esto puede provocar una escritura fuera de límites y conducir a la ejecución local de código en un proceso privilegiado. Este problema se ha clasificado como grave, Producto: Android. Versión: N/A. Android: A-38027496. Referencia: N-CVE-2017-6258."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6279",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-02-06T13:29:00.350",
      "lastModified" : "2024-11-21T03:29:26.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-65023166. Reference: N-CVE-2017-6279."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvmmlite_audio.so contiene una vulnerabilidad de elevación de privilegios al ejecutarse en media server. Esto puede provocar una escritura fuera de límites y conducir a la ejecución local de código en un proceso privilegiado. Este problema se ha clasificado como grave, Producto: Android. Versión: N/A. Android: A-65023166. Referencia: N-CVE-2017-6279."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15095",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-02-06T15:29:00.233",
      "lastModified" : "2024-11-21T03:14:03.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de deserialización en jackson-databind, en versiones anteriores a la 2.8.10 y a la 2.9.1, que podría permitir que un usuario no autenticado ejecute código enviando las entradas maliciosamente manipuladas al método readValue de ObjectMapper. Este problema amplía el error previo de CVE-2017-7525 metiendo en la lista negra más clases que podrían emplearse de forma maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.6.7.2",
            "matchCriteriaId" : "1AF3A54B-F0A1-4929-976B-6C57090B5AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.9.2",
            "matchCriteriaId" : "5BBA4A48-37C7-4165-B422-652EFD99B05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.10",
            "matchCriteriaId" : "6C4C1153-B607-4BD1-AB91-E362F4F27B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5F565BD2-F759-47FB-B8BB-95AE50DF8389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDA05E4-4693-4AA0-843B-476059E345CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF988893-BBEE-4BE3-949F-E4B8158B3046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease3:*:*:*:*:*:*",
            "matchCriteriaId" : "6875BC5F-2EF7-40E3-B319-F7A53385DDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease4:*:*:*:*:*:*",
            "matchCriteriaId" : "90DF71E0-C581-4510-AB9F-9471E88797C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87326E-0B56-4356-A889-73D026DB1D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB283C80-F7AF-4776-8432-655E50D7D65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite_capsule:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461407B5-C167-4DE1-A934-FD5ADFB4AD4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064E7BDD-4EF0-4A0D-A38D-8C75BAFEDCEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "54E72B69-4E04-42A3-B532-53E98C6796D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35AD0C07-9688-4397-8D45-FBB88C0F0C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8972497F-6E24-45A9-9A18-EB0E842CB1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400509A8-D6F2-432C-A2F1-AD5B8778D0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132CE62A-FBFC-4001-81EC-35D81F73AF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:clusterware:12.1.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9084DB-329E-403F-8D0A-5B9F53183714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6039DC7-08F2-4DD9-B5B5-B6B22DD2409F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7231AF76-3D46-41C4-83E9-6E9E12940BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "CF5A0F0D-313D-4F5C-AD6D-8C118D5CD8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B3B8-B176-4359-97B5-D2E2FEE5BFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150B7605-A960-4535-B65F-4FBF82426BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E97F04-00ED-48E9-AB40-7A02B3419641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCE5A11-39E7-4BBB-9E1A-BA4B754103BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AEC7F5-C353-4CF5-96CE-8C713A2B0C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB79BB43-E0AB-4F0D-A6EA-000485757EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F238CB66-886D-47E8-8DC0-7FC2025771EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B7B8AD-1210-4C40-8EF7-E2E8156630A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE4A291-4358-42A9-A68D-E59D9998A1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D19CF00-FE20-4690-AAB7-8E9DBC68A94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A030A498-3361-46F8-BB99-24A66CAE11CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_lifecycle_management_opatchauto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2.0.1.14",
            "matchCriteriaId" : "C54D621E-E274-47EA-95A4-123B82BD4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142CD3F8-6523-49C9-BCC1-B01F55DBBE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA10CA55-C155-4DAD-A109-87A80116F1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "B8249A74-C34A-4F66-8F11-F7F50F8813BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55A54FD-7DD1-49CD-BE81-0BE73990943C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EB08C0-2D46-4635-88DF-E54F6452D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_advanced_spatial_and_operational_analytics:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD0EC40-B96B-4E9C-9A81-4E65C4B9512E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103880",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039769",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3189",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3190",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0577",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1447",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1451",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2858",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3892",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1737",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171214-0003/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171214-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7525",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-02-06T15:29:00.297",
      "lastModified" : "2024-11-21T03:32:04.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de deserialización en jackson-databind, en versiones anteriores a la 2.6.7.1, 2.7.9.1 y a la 2.8.9, que podría permitir que un usuario no autenticado ejecute código enviando las entradas maliciosamente manipuladas al método readValue de ObjectMapper."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.7.1",
            "matchCriteriaId" : "2BD0008C-1562-400E-9E79-973384BAE68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.9.1",
            "matchCriteriaId" : "350AD21A-F820-4106-BA80-84595398977D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.9",
            "matchCriteriaId" : "20D21D56-9399-40C1-A187-C0628E71EE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDA05E4-4693-4AA0-843B-476059E345CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF988893-BBEE-4BE3-949F-E4B8158B3046"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "54E72B69-4E04-42A3-B532-53E98C6796D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "698C6261-679D-45C1-A396-57AC96AD64D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD81527-A341-42C3-9AB9-880D3DB04B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064E7BDD-4EF0-4A0D-A38D-8C75BAFEDCEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28F9AF-3D06-4532-B397-96D7E4792503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BF3B2C-B121-483A-AEF2-8082F6DA5310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7117F117-D439-45EB-BB95-397E5E52C9BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87326E-0B56-4356-A889-73D026DB1D4B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35AD0C07-9688-4397-8D45-FBB88C0F0C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8972497F-6E24-45A9-9A18-EB0E842CB1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400509A8-D6F2-432C-A2F1-AD5B8778D0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132CE62A-FBFC-4001-81EC-35D81F73AF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6039DC7-08F2-4DD9-B5B5-B6B22DD2409F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7231AF76-3D46-41C4-83E9-6E9E12940BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_communications_policy_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.5.2",
            "matchCriteriaId" : "2914F3C1-E05D-4F70-A87F-D74A7F2AD163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_route:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3",
            "matchCriteriaId" : "7867B73E-38DD-4333-9D6B-868AAF299ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622B95F1-8FA4-4AA6-9B68-5FE4302BA150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B3B8-B176-4359-97B5-D2E2FEE5BFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E97F04-00ED-48E9-AB40-7A02B3419641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCE5A11-39E7-4BBB-9E1A-BA4B754103BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AEC7F5-C353-4CF5-96CE-8C713A2B0C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDBFC313-007A-427A-A23E-A8ACA726FC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF4622A-CDCB-4247-B0C4-6256A3F1D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A03EBE-1A06-4D25-B534-A6B0A9446751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF30373-5239-4D7D-8FDD-E48668CD7BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C353B-A4D8-44D2-AB6E-8830EA1A4BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1CFFE2-56BE-4CD4-9791-3C8B0E3ABE1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_lifecycle_management_opatchauto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2.0.1.14",
            "matchCriteriaId" : "C54D621E-E274-47EA-95A4-123B82BD4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "B8249A74-C34A-4F66-8F11-F7F50F8813BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55A54FD-7DD1-49CD-BE81-0BE73990943C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EB08C0-2D46-4635-88DF-E54F6452D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_advanced_spatial_and_operational_analytics:2.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD0EC40-B96B-4E9C-9A81-4E65C4B9512E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99623",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039744",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1835",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1836",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1837",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1839",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1840",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2546",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2547",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2633",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2635",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2636",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2637",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2638",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3141",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0294",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0910",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2858",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1462702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-055",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1599",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1723",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3c87dc8bca99a2b3b4743713b33d1de05b1d6b761fdf316224e9c81f%40%3Cdev.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5008bcbd45ee65ce39e4220b6ac53d28a24d6bc67d5804e9773a7399%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/b1f33fe5ade396bb903fdcabe9f243f7692c7dfce5418d3743c2d346%40%3Cdev.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c10a2bf0fdc3d25faf17bd191d6ec46b29a353fa9c97bebd7c4e5913%40%3Cdev.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c2ed4c0126b43e324cf740012a0edd371fd36096fd777be7bfe7a2a6%40%3Cdev.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c9d5ff20929e8a3c8794facf4c4b326a9c10618812eec356caa20b87%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f60afd3c7e9ebaaf70fad4a4beb75cf8740ac959017a31e7006c7486%40%3Cdev.lucene.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r68acf97f4526ba59a33cc6e592261ea4f85d890f99e79c82d57dd589%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00039.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171214-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1462702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cwiki.apache.org/confluence/display/WW/S2-055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/1723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/3c87dc8bca99a2b3b4743713b33d1de05b1d6b761fdf316224e9c81f%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5008bcbd45ee65ce39e4220b6ac53d28a24d6bc67d5804e9773a7399%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b1f33fe5ade396bb903fdcabe9f243f7692c7dfce5418d3743c2d346%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c10a2bf0fdc3d25faf17bd191d6ec46b29a353fa9c97bebd7c4e5913%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c2ed4c0126b43e324cf740012a0edd371fd36096fd777be7bfe7a2a6%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c9d5ff20929e8a3c8794facf4c4b326a9c10618812eec356caa20b87%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f60afd3c7e9ebaaf70fad4a4beb75cf8740ac959017a31e7006c7486%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r68acf97f4526ba59a33cc6e592261ea4f85d890f99e79c82d57dd589%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20171214-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-06T16:29:00.637",
      "lastModified" : "2024-11-21T03:19:07.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in \"Add command\" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise server and possibly remote command execution with SYSTEM privilege."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer en la funcionalidad \"Add command\" de Flexense SyncBreeze Enterprise, en versiones iguales o anteriores a la 10.3.14. Esta vulnerabilidad puede ser desencadenada por un atacante autenticado que envíe más de 5000 caracteres como nombre de comando. Provocará la finalización del servidor SyncBreeze Enterprise y la posible ejecución remota de comandos con privilegios SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexense:syncbreeze:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "10.3.14",
            "matchCriteriaId" : "5692D898-183D-4EAD-AA58-72FAD21F9D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Feb/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ryantzj.com/flexense-syncbreeze-entreprise-10314-buffer-overflow-seh-bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Feb/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ryantzj.com/flexense-syncbreeze-entreprise-10314-buffer-overflow-seh-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-06T16:29:00.683",
      "lastModified" : "2024-11-21T03:29:14.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to cause a denial of service by launching a fork bomb in the sandbox, or by using a large amount of disk space."
      }, {
        "lang" : "es",
        "value" : "El Supervisor en Sandstorm no establece y aplica los límites de recurso de un proceso. Esto permite que atacantes remotos provoquen una denegación de servicio (DoS) lanzando una bomba fork en el sandbox o empleando una gran cantidad de espacio del disco."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandstorm:sandstorm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.203",
            "matchCriteriaId" : "683ED5F0-D297-4A47-ADF9-186832F3A3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/blob/v0.202/src/sandstorm/supervisor.c++#L824",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/blob/v0.202/src/sandstorm/supervisor.c++#L824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-06T16:29:00.730",
      "lastModified" : "2024-11-21T03:29:14.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field."
      }, {
        "lang" : "es",
        "value" : "Un atacante remoto podría omitir la restricción de organización de Sandstorm antes de la build 0.203 mediante una coma en un campo email-address."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandstorm:sandstorm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.203",
            "matchCriteriaId" : "683ED5F0-D297-4A47-ADF9-186832F3A3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/blob/v0.202/shell/packages/sandstorm-db/db.js#L1112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/37bd9a7f4eb776cdc2d3615f0bfea1254b66f59d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sandstorm.io/news/2017-03-02-security-review",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/blob/v0.202/shell/packages/sandstorm-db/db.js#L1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/37bd9a7f4eb776cdc2d3615f0bfea1254b66f59d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sandstorm.io/news/2017-03-02-security-review",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-06T16:29:00.790",
      "lastModified" : "2024-11-21T03:29:14.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backup function. The root cause is that the findFilesToZip function doesn't filter Line Feed (\\n) characters in a directory name."
      }, {
        "lang" : "es",
        "value" : "Sandstorm antes de la build 0.203 permite que atacantes remotos lean cualquier archivo especificado bajo /etc o /run mediante la función de copia de seguridad del sandbox. La causa principal es que la función findFilesToZip no filtra los caracteres nueva línea (\\n) en un nombre de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandstorm:sandstorm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.203",
            "matchCriteriaId" : "683ED5F0-D297-4A47-ADF9-186832F3A3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/blob/v0.202/src/sandstorm/backup.c%2B%2B#L271",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/4ea8df7403381d9b657b121b3c98d8081b27414d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/6e8572ea8bb56d0216bb1b410e5040edc051b120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sandstorm.io/news/2017-03-02-security-review",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/blob/v0.202/src/sandstorm/backup.c%2B%2B#L271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/4ea8df7403381d9b657b121b3c98d8081b27414d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/6e8572ea8bb56d0216bb1b410e5040edc051b120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sandstorm.io/news/2017-03-02-security-review",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-06T16:29:00.887",
      "lastModified" : "2024-11-21T03:29:14.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Server Side Request Forgery en el proceso de instalación de app en Sandstorm antes de la build 0.203. Un atacante remoto podría explotar este problema proporcionando una URL. Podría omitir controles de acceso, como los firewalls, que evitan que los atacantes accedan directamente a las URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandstorm:sandstorm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.203",
            "matchCriteriaId" : "683ED5F0-D297-4A47-ADF9-186832F3A3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/164997fb958effbc90c5328c166706280a84aaa1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sandstorm.io/news/2017-03-02-security-review",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sandstorm-io/sandstorm/commit/164997fb958effbc90c5328c166706280a84aaa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sandstorm.io/news/2017-03-02-security-review",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-06T17:29:00.207",
      "lastModified" : "2024-11-21T03:18:25.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution."
      }, {
        "lang" : "es",
        "value" : "La implementación htpasswd de mini_httpd, en versiones anteriores a la v1.28 y de thttpd, en versiones anteriores a la v2.28, se ha visto afectada por un desbordamiento de búfer que podría ser explotado de forma remota para ejecutar código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme:mini_httpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28",
            "matchCriteriaId" : "6FCD438D-EC8A-44D0-9697-C4DD3642581A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme:thttpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.28",
            "matchCriteriaId" : "CA1828A8-F0BB-4431-868B-E4AFDE052472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acme.com/updates/archive/199.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://acme.com/updates/archive/199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T15:29:00.223",
      "lastModified" : "2024-11-21T03:18:01.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en OpenVMS hasta al versión V8.4-2L2 en Alpha y hasta V8.4-2L1 en IA64, y en VAX/VMS en versiones 4.0 y posteriores. Una tabla de comandos DCL mal formada podría resultar en un desbordamiento de búfer que permitiría un escalado de privilegios local cuando una cuenta no privilegiada introduce una línea de comandos manipulada. Este error se puede explotar en VAX y Alpha y podría provocar un cierre inesperado del proceso en IA64. El software se ha visto afectado independientemente de si ha sido distribuido directamente por VMS Software, Inc. (VSI), HPE, HP, Compaq o Digital Equipment Corporation."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:*:*:*:*:alpha:*:*:*",
            "versionEndIncluding" : "8.4-2l1",
            "matchCriteriaId" : "5F922203-A85E-42A0-B60B-72D3BCCB3B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:*:*:*:*:ia64:*:*:*",
            "versionEndIncluding" : "8.4-2l1",
            "matchCriteriaId" : "E60E251F-CAC3-487F-B092-B1981263A9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:*:*:*:*:vax:*:*:*",
            "versionStartIncluding" : "4.0",
            "matchCriteriaId" : "2738F42A-F8EE-416A-8CB5-EC1C3E480E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:*:*:*:*:vms:*:*:*",
            "versionStartIncluding" : "4.0",
            "matchCriteriaId" : "C5D51861-4CB9-4738-ACF7-A06990924F2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openvms.org/node/121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/comp.os.vms/BYIUQ0lJ-s0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.theregister.co.uk/2018/02/06/openvms_vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openvms.org/node/121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/comp.os.vms/BYIUQ0lJ-s0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.theregister.co.uk/2018/02/06/openvms_vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.480",
      "lastModified" : "2024-11-21T03:09:25.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow."
      }, {
        "lang" : "es",
        "value" : "ccn-lite-ccnb2xml en CCN-lite, en versiones anteriores a la 2.0.0, permite que atacantes dependientes del contexto provoquen un impacto sin especificar mediante un archivo manipulado, lo que desencadena una recursión infinita y un desbordamiento de pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/128",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.543",
      "lastModified" : "2024-11-21T03:09:33.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet format is unknown."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en la función ccnl_app_RX en ccnl-uapi.c en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen una denegación de servicio (consumo de memoria) mediante vectores relacionados con un puntero de estructura envelope_s cuando el formato del paquete es desconocido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/129",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.607",
      "lastModified" : "2024-11-21T03:09:33.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via vectors involving the keyfile variable."
      }, {
        "lang" : "es",
        "value" : "ccn-lite-valid.c en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen una denegación de servicio (desreferencia de puntero NULL) mediante vectores relacionados con la variable keyfile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.670",
      "lastModified" : "2024-11-21T03:09:34.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en CCN-lite, en versiones anteriores a la 2.00, permiten que atacantes dependientes del contexto provoquen un impacto sin especificar mediante vectores relacionados con (1) la variable vallen en la función iottlv_parse_sequence o (2) las variables typ, vallen e i en la función localrpc_parse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.717",
      "lastModified" : "2024-11-21T03:09:34.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access."
      }, {
        "lang" : "es",
        "value" : "CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto tengan un impacto sin especificar mediante vectores relacionados con ssl_halen al ejecutar ccn-lite-sim, lo que desencadena un acceso fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/132",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.777",
      "lastModified" : "2024-11-21T03:09:34.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure member."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen una denegación de servicio (consumo de memoria) aprovechando un error a la hora de asignar memoria en el miembro de estructura comp o complen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/133",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.827",
      "lastModified" : "2024-11-21T03:09:34.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ccn-lite-ccnb2xml.c en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen un impacto sin especificar mediante vectores relacionados con las variables vallen y len."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/134",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.873",
      "lastModified" : "2024-11-21T03:09:34.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en util/ccnl-common.c en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen un impacto sin especificar aprovechando la asignación de memoria incorrecta.Desbordamiento de búfer en util/ccnl-common.c en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen un impacto sin especificar aprovechando la asignación de memoria incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/135",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.920",
      "lastModified" : "2024-11-21T03:09:35.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la función ndn_parse_sequence en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen un impacto sin especificar mediante vectores relacionados con las variables typ y vallen."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/136",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:00.967",
      "lastModified" : "2024-11-21T03:09:35.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function."
      }, {
        "lang" : "es",
        "value" : "La función cnb_parse_lev en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen un impacto sin especificar aprovechando el error a la hora de comprobar condiciones fuera de límites, lo que desencadena una lectura inválida en la función hexdump."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/137",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:01.027",
      "lastModified" : "2024-11-21T03:09:35.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnl_malloc."
      }, {
        "lang" : "es",
        "value" : "ccnl-ext-mgmt.c en CCN-lite, en versiones anteriores a la 2.00, permite que atacantes dependientes del contexto provoquen un impacto sin especificar aprovechando la falta de comprobaciones de puntero NULL tras ccnl_malloc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:01.077",
      "lastModified" : "2024-11-21T03:09:35.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with \"wrong L values.\""
      }, {
        "lang" : "es",
        "value" : "ccnl_ccntlv_bytes2pkt en CCN-lite permite que atacantes dependientes del contexto provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante vectores relacionados con paquetes con \"valores L incorrectos\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccn-lite:ccn-lite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "E507B42A-708A-40E9-BC27-0CC03250C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/139",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-uofbasel/ccn-lite/issues/139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1692",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-07T17:29:01.123",
      "lastModified" : "2024-11-21T03:22:13.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067."
      }, {
        "lang" : "es",
        "value" : "IBM AIX, en versiones 5.3, 6.1, 7.1 y 7.2, contiene una vulnerabilidad sin especificar que permitiría que un usuario autenticado localmente obtenga privilegios de nivel root. IBM X-Force ID: 134067."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0402E20C-8B41-4A2A-BFF9-92EC843985F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6791504A-A48A-4ED0-94AF-4C8A3B91516F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040330",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134067",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-07T17:29:01.183",
      "lastModified" : "2025-10-24T15:47:02.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted."
      }, {
        "lang" : "es",
        "value" : "/LoadFrame en Zoho ManageEngine AD Manager Plus build 6590 - 6613 permite que atacantes lleven a cabo ataques de redirección de URL mediante el parámetro src, lo que resulta en la omisión de la protección CSRF o en la ocultación potencial de una URL maliciosa como fiable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6",
            "matchCriteriaId" : "29E24686-B1CF-4852-94F2-5BD518D204B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6601:*:*:*:*:*:*",
            "matchCriteriaId" : "D994022C-D135-46BC-BAE9-76EA8727E563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6602:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2233F8-FF67-4FBD-9A0D-1A5FBFC38C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6610:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C5554B-26F0-4FCE-90D2-6877B4E2D53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6611:*:*:*:*:*:*",
            "matchCriteriaId" : "04EC2A2A-3630-462D-9B90-145167786DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6612:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B10B3A-112A-4848-83F8-4CAB356548A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6613:*:*:*:*:*:*",
            "matchCriteriaId" : "C9209E78-EDF1-413A-81E4-8F435BE93F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://umbrielsecurity.wordpress.com/2018/01/31/dangerous-url-redirection-and-csrf-in-zoho-manageengine-ad-manager-plus-cve-2017-17552/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://umbrielsecurity.wordpress.com/2018/01/31/dangerous-url-redirection-and-csrf-in-zoho-manageengine-ad-manager-plus-cve-2017-17552/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1785",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-07T17:29:01.230",
      "lastModified" : "2024-11-21T03:22:21.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect 5.0.7 y 5.0.8 podría permitir que un usuario autenticado remoto modifique parámetros de la consulta para obtener información sensible. IBM X-Force ID: 136859."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336EC55F-E19B-4D26-8AEA-40DC40F6C0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB6EF04-A24E-4857-8C7A-DE779AFA8B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6AFDC6-3596-4640-8E92-984B308A1C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3282F566-5B1F-4F9C-97BE-5DCD2204F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:5.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703DFAD0-170F-4DB4-B4F3-7DFED8DEEFF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013061",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136859",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15386",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.217",
      "lastModified" : "2024-11-21T03:14:36.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante remoto suplante el contenido del Omnibox (barra de URL) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/752003",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/752003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15387",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.297",
      "lastModified" : "2024-11-21T03:14:36.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La aplicación insuficiente de políticas de seguridad de contenidos en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante remoto abriese ventanas javascript: URL cuando no deberían ser capaces de hacerlo mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/756040",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/756040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15388",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.357",
      "lastModified" : "2024-11-21T03:14:36.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La iteración mediante puntos no finitos en Skia en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante remoto realice una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/756563",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/756563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15389",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.420",
      "lastModified" : "2024-11-21T03:14:37.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un temporizador guardián insuficiente en navigation en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante remoto suplante el contenido del Omnibox (barra de URL) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/739621",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/739621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15390",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.467",
      "lastModified" : "2024-11-21T03:14:37.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "La aplicación de políticas insuficiente en Omnibox en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto realice una suplantación de dominios mediante homógrafos IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/750239",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/750239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15391",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.530",
      "lastModified" : "2024-11-21T03:14:37.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La aplicación de políticas insuficiente en Extensions en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto acceda a las páginas Extension sin autorización mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/598265",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/598265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15392",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.607",
      "lastModified" : "2024-11-21T03:14:37.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration."
      }, {
        "lang" : "es",
        "value" : "La validación de datos insuficiente en V8 en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante que pueda escribir en Windows Registry pudiese explotar la corrupción de la memoria dinámica (heap) mediante una entrada manipulada al Windows Registry, relacionado con PlatformIntegration."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/714401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/714401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15393",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.670",
      "lastModified" : "2024-11-21T03:14:37.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak."
      }, {
        "lang" : "es",
        "value" : "La aplicación de políticas insuficiente en la depuración remota de Devtools en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto obtenga acceso a la funcionalidad de depuración remota mediante una página HTML manipulada. Esto también se conoce como fuga de Referers."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/732751",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/732751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15394",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.733",
      "lastModified" : "2024-11-21T03:14:37.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "La aplicación de políticas insuficiente en Extensions en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto realice una suplantación de dominios en diálogos de permiso mediante homógrafos IDN en una Extensión Chrome manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/745580",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/745580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15395",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.780",
      "lastModified" : "2024-11-21T03:14:37.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante una página HTML manipulada. Esto también se conoce como desreferencia de puntero NULL ImageCapture."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/759457",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/759457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15397",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.843",
      "lastModified" : "2024-11-21T03:14:37.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker in a privileged network position to observe or tamper with certain cleartext HTTP requests by leveraging that position."
      }, {
        "lang" : "es",
        "value" : "La implementación inadecuada en ChromeVox en Google Chrome OS, en versiones anteriores a la 62.0.3202.74, permitía que un atacante remoto en una posición de red privilegiada observe o manipule ciertas peticiones HTTP en texto claro aprovechándose de esa posición."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.74",
            "matchCriteriaId" : "87004649-1263-4704-A4EE-B3132BFC08FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102435",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/627300",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2018/01/01/chromeos-doesnt-always-use-ssl-during-startup-cve-2017-15397/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/627300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wwws.nightwatchcybersecurity.com/2018/01/01/chromeos-doesnt-always-use-ssl-during-startup-cve-2017-15397/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15400",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.937",
      "lastModified" : "2024-11-21T03:14:38.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue."
      }, {
        "lang" : "es",
        "value" : "La restricción insuficiente de filtros IPP en CUPS en Google Chrome OS, en versiones anteriores a la 62.0.3202.74, permite que un atacante remoto ejecute un comando con los mismos privilegios que el demonio cups mediante un archivo PPD manipulado. Esto también se conoce como problema CRLF zeroconfig de impresora."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.74",
            "matchCriteriaId" : "87004649-1263-4704-A4EE-B3132BFC08FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/777215",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-08",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4243",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/777215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201908-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5124",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:00.997",
      "lastModified" : "2024-11-21T03:27:06.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación incorrecta del sandbox en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante remoto inyecte scripts o HTML (UXSS) arbitrarios mediante una página MHTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromium.googlesource.com/chromium/src/+/4558c2885e618557a674660aff57404d25537070",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/762930",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://github.com/Bo0oM/CVE-2017-5124",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.reddit.com/r/netsec/comments/7cus2h/chrome_61_uxss_exploit_cve20175124/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromium.googlesource.com/chromium/src/+/4558c2885e618557a674660aff57404d25537070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/762930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Bo0oM/CVE-2017-5124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.reddit.com/r/netsec/comments/7cus2h/chrome_61_uxss_exploit_cve20175124/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5125",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.093",
      "lastModified" : "2024-11-21T03:27:06.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en Skia en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/749147",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/749147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5126",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.170",
      "lastModified" : "2024-11-21T03:27:06.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en PDFium en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/760455",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/760455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5127",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.247",
      "lastModified" : "2024-11-21T03:27:06.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en PDFium en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765384",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5128",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.310",
      "lastModified" : "2024-11-21T03:27:06.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante una página HTML manipulada. Esto se relaciona con WebGL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765469",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5129",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.373",
      "lastModified" : "2024-11-21T03:27:07.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en WebAudio en Blink en Google Chrome, en versiones anteriores a la 62.0.3202.62, permitía que un atacante remoto realice una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765495",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5130",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.420",
      "lastModified" : "2024-11-21T03:27:07.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en xmlmemory.c en versiones anteriores a la 2.9.5 de libxml2, tal y como se emplea en Google Chrome, en versiones anteriores a la 62.0.3202.62 y en otros productos, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante un archivo XML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.5",
            "matchCriteriaId" : "C4B3A4BD-14E7-4D4D-81C9-6A355F49C978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=783026",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/722079",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=897dffbae322b46b83f99a607d527058a72c51ed",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00034.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190719-0001/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=783026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/722079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=897dffbae322b46b83f99a607d527058a72c51ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190719-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5131",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.497",
      "lastModified" : "2024-11-21T03:27:07.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en Skia en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante una página HTML manipulada. Esto también se conoce como escritura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/744109",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/744109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5132",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.577",
      "lastModified" : "2024-11-21T03:27:07.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation."
      }, {
        "lang" : "es",
        "value" : "La implementación indebida en V8 en Google Chrome, en versiones anteriores a la 62.0.3202.62, permite que un atacante remoto explote la corrupción de la memoria dinámica (heap) mediante una página HTML manipulada. Esto también se conoce como manipulación de pila WebAssembly."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/718858",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/718858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5133",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-02-07T23:29:01.640",
      "lastModified" : "2024-11-21T03:27:07.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Lectura/escritura por un paso en la memoria dinámica (heap) en Blink en Google Chrome en versiones anteriores a la 62.0.3202.62 permitía que un atacante remoto corrompiese la memoria y filtrase información, pudiendo ejecutar código mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/762106",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/762106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-08T15:29:00.277",
      "lastModified" : "2024-11-21T03:31:40.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de inyección SQL en un manipulador de subida de archivos en REDCap, en versiones 7.x anteriores a la 7.0.11, mediante una subcadena final a SendITController:upload."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.11",
            "matchCriteriaId" : "F4E4E26B-01A3-472F-B4CA-0944E7B86212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://labs.nettitude.com/blog/cve-2017-7351-redcap-7-0-0-7-0-10-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://labs.nettitude.com/blog/cve-2017-7351-redcap-7-0-0-7-0-10-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17412",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.210",
      "lastModified" : "2024-11-21T03:17:53.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute arbitrary code in the context of the underlying database. Was ZDI-CAN-4223."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4223."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-974",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17413",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.257",
      "lastModified" : "2024-11-21T03:17:53.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4224."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUBackupTargetSet. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4224."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-978",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17414",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.307",
      "lastModified" : "2024-11-21T03:17:53.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4225."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUPhaseStatus. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4225."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-979",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17415",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.353",
      "lastModified" : "2024-11-21T03:17:53.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Count method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4226."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método Count NVBUPhaseStatus. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4226."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-980",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17416",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.400",
      "lastModified" : "2024-11-21T03:17:53.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus GetPlugins method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4227."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GetPlugins NVBUPhaseStatus. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4227."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-981",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17417",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.447",
      "lastModified" : "2024-11-21T03:17:53.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4228."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método Acknowledge NVBUPhaseStatus. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4228."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/46446/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-982",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/46446/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17418",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.493",
      "lastModified" : "2024-11-21T03:17:54.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4229."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUPolicy. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4229."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-983",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17419",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.557",
      "lastModified" : "2024-11-21T03:17:54.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUTransferHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4230."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUTransferHistory. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4230."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-984",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17420",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.617",
      "lastModified" : "2024-11-21T03:17:54.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4231."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUJobCountHistory. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4231."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-985",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17421",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.663",
      "lastModified" : "2024-11-21T03:17:54.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSelectionSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4232."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUSelectionSet. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4232."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-986",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17422",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.697",
      "lastModified" : "2024-11-21T03:17:54.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4233."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUBackup. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4233."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-975",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17423",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.773",
      "lastModified" : "2024-11-21T03:17:54.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupSegment Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4234."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUBackupSegment. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4234."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-976",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17424",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.820",
      "lastModified" : "2024-11-21T03:17:54.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4235."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUScheduleSet. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4235."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-977",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17425",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.867",
      "lastModified" : "2024-11-21T03:17:54.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4237."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUSourceDeviceSet. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4237."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-987",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17652",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.913",
      "lastModified" : "2024-11-21T03:18:24.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4238."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método Count NVBUBackup. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4238."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-988",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17653",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.960",
      "lastModified" : "2024-11-21T03:18:24.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4286."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUBackupOptionSet. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4286."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-989",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17654",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:00.993",
      "lastModified" : "2024-11-21T03:18:24.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4287."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método ClientList NVBUBackup. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4287."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-990",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17655",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:01.040",
      "lastModified" : "2024-11-21T03:18:24.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4289."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método PluginList NVBUBackup. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4289."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-991",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17656",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:01.087",
      "lastModified" : "2024-11-21T03:18:24.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4292."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método JobList NVBUBackup. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4292."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-992",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17657",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:01.133",
      "lastModified" : "2024-11-21T03:18:24.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4294."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método TimeRange NVBUBackup. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4294."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-993",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17658",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:01.180",
      "lastModified" : "2024-11-21T03:18:24.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4316."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUJobDefinitions. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4316."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-994",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17659",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2018-02-08T18:29:01.243",
      "lastModified" : "2024-11-21T03:18:25.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4906."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Quest NetVault Backup 11.3.0.12. No se requiere autenticación para explotar esta vulnerabilidad. Este error en concreto existe en la gestión de peticiones de método GET NVBUJobHistory. El problema deriva de la falta de validación correcta de una cadena proporcionada por el usuario antes de emplearla para construir consultas SQL. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto de la base de datos subyacente. Anteriormente era ZDI-CAN-4906."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quest:netvault_backup:11.3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF09118D-83F5-41E0-A956-24922A284703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-995",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zerodayinitiative.com/advisories/ZDI-17-995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6225",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2018-02-08T22:29:00.207",
      "lastModified" : "2024-11-21T03:29:18.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en la interfaz de gestión web de productos Brocade Fibre Channel SAN que ejecutan Brocade Fabric OS (FOS) en versiones anteriores a la 7.4.2b, 8.1.2 y la 8.2.0 podría permitir que los atacantes remotos ejecuten código arbitrario o accedan a información sensible del navegador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.2b",
            "matchCriteriaId" : "E80B46F5-ED68-4AA1-BB45-14CCE854385D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9EBAFF-2358-4EEC-9E83-EBCAC8805414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79418EEC-72C2-4A85-97CE-7B472E9AAF79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brocade:fabric_os:8.0.1b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5AF95-9000-4787-8528-1B9B076C4E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brocade:fabric_os:8.0.2b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DA1CFC-AFF3-421F-90CD-61BA8DF01796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brocade:fabric_os:8.1.0c1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DE33C2-6513-4FF1-8094-85E9175B8A02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us",
        "source" : "sirt@brocade.com"
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525",
        "source" : "sirt@brocade.com"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6227",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2018-02-08T22:29:00.270",
      "lastModified" : "2024-11-21T03:29:18.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router Advertisement (RA) messages to a targeted system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la pila IPv6 de productos Brocade Fibre Channel SAN que ejecutan versiones de Brocade Fabric OS (FOS) anteriores a la 7.4.2b, 8.1.2 y 8.2.0 podría permitir que un atacante provoque una condición de denegación de servicio (consumo de CPU y bloqueo del dispositivo) enviando mensajes Router Advertisement (RA) manipulados a un sistema objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.2b",
            "matchCriteriaId" : "E80B46F5-ED68-4AA1-BB45-14CCE854385D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A234DD0C-6C62-4A5E-B093-14F54710C2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA532CBE-FCAF-4AE7-9A39-808864223E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9EBAFF-2358-4EEC-9E83-EBCAC8805414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7727C720-11C5-48DA-B604-6D296B0A9521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79418EEC-72C2-4A85-97CE-7B472E9AAF79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E064A2B0-8316-4192-A319-81778BE7923C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:brocade:fabric_os:8.0.2b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C315549C-5ABE-4EC5-AF7C-741AD70E2112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-526",
        "source" : "sirt@brocade.com"
      }, {
        "url" : "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-08T23:29:01.030",
      "lastModified" : "2024-11-21T03:15:26.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3."
      }, {
        "lang" : "es",
        "value" : "La implementación incorrecta de controles de acceso permite que usuarios remotos reemplacen restricciones de repositorio en los servidores Borg en versiones 1.1.x anteriores a la 1.1.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:borgbackup:borg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "750D1683-42FC-40BB-9152-E05BEE25FE98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1761",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-09T17:29:00.227",
      "lastModified" : "2024-11-21T03:22:19.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Portal 7.0, 8.0, 8.5 y 9.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 136005."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4FF84B-A17F-464B-A718-67C44D2C69BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F40E0F5-B964-4BDC-828E-7571619F7C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF6533-4FE9-4A9B-ABF6-CEDD30402A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012416",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040333",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136005",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10689",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2018-02-09T20:29:00.207",
      "lastModified" : "2024-11-21T03:06:18.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores de Puppet Agent, era posible instalar un módulo con permisos de modificación para cualquier usuario. Puppet Agent 5.3.4 y 1.10.10 incluían una solución para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "10D3BEEC-EBCB-44C6-AA87-7BF082B1CE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.10.0",
            "versionEndExcluding" : "1.10.10",
            "matchCriteriaId" : "8907AFF7-0ACE-47FD-AAE7-23082B38D519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2016.4.10",
            "matchCriteriaId" : "7CCE1F4F-925E-436E-9E0C-B83F0CEA8B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.1.0",
            "versionEndExcluding" : "2017.3.4",
            "matchCriteriaId" : "454F114A-3C66-4809-865A-65824B6A6677"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB283C80-F7AF-4776-8432-655E50D7D65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/CVE-2017-10689",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3567-1/",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/CVE-2017-10689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3567-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10690",
      "sourceIdentifier" : "security@puppet.com",
      "published" : "2018-02-09T20:29:00.270",
      "lastModified" : "2024-11-21T03:06:18.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4"
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores de Puppet Agent, era posible que el agente recuperase hechos de un entorno para el que no estaba clasificado. Esto se solucionó en Puppet Agent 5.3.4, incluido en Puppet Enterprise 2017.3.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "10D3BEEC-EBCB-44C6-AA87-7BF082B1CE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.3.4",
            "matchCriteriaId" : "2F819975-5B9D-45BD-81E7-1CE986D14183"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB283C80-F7AF-4776-8432-655E50D7D65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "security@puppet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/CVE-2017-10690",
        "source" : "security@puppet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/CVE-2017-10690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0911",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-02-09T22:29:00.613",
      "lastModified" : "2024-11-21T03:03:52.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the \"Login with Twitter\" component allowing an attacker to provide alternate credentials. In the final step of \"Login with Twitter\" authentication information is passed back to the application using the registered custom URL scheme (typically twitterkit-<consumer-key>) on iOS. Because the callback handler did not verify the authenticity of the response, this step is vulnerable to forgery, potentially allowing attacker to associate a Twitter account with a third-party service."
      }, {
        "lang" : "es",
        "value" : "Twitter Kit para iOS, en versiones 3.0 a 3.2.1, es vulnerable a una verificación de devolución de llamada en el componente \"Login with Twitter\". Esto permite que un atacante proporcione credenciales alternativas. En el último paso de \"Login with Twitter\", la información de autenticación se devuelve a la aplicación empleando el esquema de URL personalizado registrados (normalmente twitterkit-) en iOS. Debido a que el manipulador de devolución de llamada no verificaba la autenticidad de la respuesta, este paso es vulnerable a falsificación, lo que puede permitir que un atacante asocie una cuenta de Twitter con un servicio de terceros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-360"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twitter:twitter_kit:*:*:*:*:*:iphone_os:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "963FC6A7-945F-4A66-9870-0141701210FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/twitter-kit-ios/wiki/Changelog#322-november-28-2017",
        "source" : "support@hackerone.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/290229",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/twitter-kit-ios/wiki/Changelog#322-november-28-2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/290229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-09T23:29:00.213",
      "lastModified" : "2024-11-21T03:04:53.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Mautic, en versiones 2.11.0 y anteriores, contiene una vulnerabilidad de Cross Site Scripting (XSS) en el nombre de compañía que puede resultar en una denegación de servicio (DoS) y en la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mautic:mautic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.0",
            "matchCriteriaId" : "D05D8DC2-ED57-417E-84CB-2A9727B32D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/issues/5222",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mautic/mautic/issues/5222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-09T23:29:00.260",
      "lastModified" : "2024-11-21T03:04:53.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Canvs Canvas, en versiones 3.4.2 y anteriores, contiene una vulnerabilidad de Cross Site Scripting (XSS) en los detalles de usuario que puede resultar en una denegación de servicio (DoS) y en la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cnvs:canvas:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1887464-C732-4644-AEC3-2D77250B495D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cnvs/canvas/issues/359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cnvs/canvas/issues/359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-09T23:29:00.290",
      "lastModified" : "2024-11-21T03:04:53.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invoice Plane version 1.5.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Client's details that can result in execution of javascript code . This vulnerability appears to have been fixed in 1.5.5 and later."
      }, {
        "lang" : "es",
        "value" : "Invoice Plane, en versiones 1.5.4 y anteriores, contiene una vulnerabilidad de Cross Site Scripting (XSS) en los detalles de cliente que puede resultar en la ejecución de código JavaScript. Parece ser que la vulnerabilidad se ha solucionado en la versión 1.5.5 y siguientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.4",
            "matchCriteriaId" : "961CB40E-AD09-4BEF-A451-6FA2114527EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/557",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/557/commits/3fc256ccef403f5be9982f02ef340d9e01daabb2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/557/commits/3fc256ccef403f5be9982f02ef340d9e01daabb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-09T23:29:00.353",
      "lastModified" : "2024-11-21T03:04:53.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr version 6.0.2 contains a Cross Site Scripting (XSS) vulnerability in Product details that can result in execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Dolibarr, en su versión 6.0.2, contiene una vulnerabilidad de Cross Site Scripting (XSS) en los detalles de producto que puede resultar en la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DBB444-9776-4131-86FA-E10E777FA8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dolibarr/dolibarr/issues/7727",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dolibarr/dolibarr/issues/7727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-09T23:29:00.387",
      "lastModified" : "2024-11-21T03:04:54.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) vulnerability in Page name that can result in execution of javascript code."
      }, {
        "lang" : "es",
        "value" : "Croogo, en su versión 2.3.1-17-g6f82e6c, contiene una vulnerabilidad de Cross Site Scripting (XSS) en un nombre de página que puede resultar en la ejecución de código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:croogo:croogo:2.3.1-17-g6f82e6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014888F5-94FF-4CB0-A25D-ACBF9D9A61B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/croogo/croogo/issues/847",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/croogo/croogo/issues/847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-11T18:29:00.227",
      "lastModified" : "2024-11-21T03:19:29.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, en versiones anteriores a la 4.7, la función amd_gpio_remove en drivers/pinctrl/pinctrl-amd.c llama a la función pinctrl_unregister, lo que conduce a una doble liberación (double free)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7",
            "matchCriteriaId" : "5F952CED-2EA6-447E-BE5D-84CEEF065E4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=251e22abde21833b3d29577e4d8c7aaccd650eee",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dca4a41f1ad65043a78c2338d9725f859c8d2c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/251e22abde21833b3d29577e4d8c7aaccd650eee",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8dca4a41f1ad65043a78c2338d9725f859c8d2c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3848-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3848-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=251e22abde21833b3d29577e4d8c7aaccd650eee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dca4a41f1ad65043a78c2338d9725f859c8d2c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/251e22abde21833b3d29577e4d8c7aaccd650eee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/8dca4a41f1ad65043a78c2338d9725f859c8d2c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3848-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3848-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T14:29:00.210",
      "lastModified" : "2024-11-21T03:19:29.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixed in 10.1."
      }, {
        "lang" : "es",
        "value" : "Progress Sitefinity 9.1 tiene XSS mediante Content Management Template Configuration (también llamado Templateconfiguration), tal y como demuestra el atributo src de un elemento IMG. Esto se ha solucionado en la versión 10.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F361531-8E0F-42AB-8ECF-541A201438E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T14:29:00.270",
      "lastModified" : "2024-11-21T03:19:29.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1."
      }, {
        "lang" : "es",
        "value" : "Progress Sitefinity 9.1 tiene XSS mediante la subida de archivos, debido a que el código JavaScript en un archivo HTML tiene el mismo origen que el propio código de la aplicación. Esto se ha solucionado en la versión 10.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F361531-8E0F-42AB-8ECF-541A201438E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T14:29:00.317",
      "lastModified" : "2024-11-21T03:19:29.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1."
      }, {
        "lang" : "es",
        "value" : "Progress Sitefinity 9.1 tiene XSS mediante los campos Last name, First name y About en la página de creación de nuevo usuario. Esto se ha solucionado en la versión 10.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F361531-8E0F-42AB-8ECF-541A201438E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T14:29:00.367",
      "lastModified" : "2024-11-21T03:19:29.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1."
      }, {
        "lang" : "es",
        "value" : "Authenticate/SWT en Progress Sitefinity 9.1 tiene un problema de redirección abierta en el que un token de autenticación se envía al destinatario de la redirección, siempre y cuando el objetivo se especifique empleando una sintaxis %40 en concreto. Esto se ha solucionado en la versión 10.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F361531-8E0F-42AB-8ECF-541A201438E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T14:29:00.427",
      "lastModified" : "2024-11-21T03:19:29.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1."
      }, {
        "lang" : "es",
        "value" : "Progress Sitefinity 9.1 emplea wrap_access_token como token de autenticación sin caducidad que sigue siendo válido tras un cambio de contraseña o una finalización de sesión. Además, se transmite como parámetro GET. Esto se ha solucionado en la versión 10.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F361531-8E0F-42AB-8ECF-541A201438E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13228",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.227",
      "lastModified" : "2024-11-21T03:11:11.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425."
      }, {
        "lang" : "es",
        "value" : "En la función ih264d_ref_idx_reordering de libavc, hay una escritura fuera de límites debido a que modCount se define como carácter no firmado. Esto podría llevar a una ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13229",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.290",
      "lastModified" : "2024-11-21T03:11:12.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103016",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13230",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.337",
      "lastModified" : "2024-11-21T03:11:12.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65483665."
      }, {
        "lang" : "es",
        "value" : "Hay una escritura fuera de límites en el códec hevc debido a una comprobación incorrecta de límites en el valor i2_pic_width_in_luma_samples. Esto podría llevar a un escalado de privilegios remoto sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65483665."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13231",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.400",
      "lastModified" : "2024-11-21T03:11:12.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232."
      }, {
        "lang" : "es",
        "value" : "Hay una escritura fuera de límites en libmediadrm debido a una validación indebida de entradas. Esto podría llevar a una elevación de privilegios local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-67962232."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13232",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.447",
      "lastModified" : "2024-11-21T03:11:12.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68953950."
      }, {
        "lang" : "es",
        "value" : "Hay una escritura fuera de límites en audioserver debido a una instrucción log que emplea símbolos \"%\" con un array que podría no estar finalizado como NULL. Esto podría llevar a una divulgación de información local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68953950."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13233",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.493",
      "lastModified" : "2024-11-21T03:11:12.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62851602."
      }, {
        "lang" : "es",
        "value" : "En ihevcd_ctb_boundary_strength_pbslice en libhevc, hay un posible agotamiento de recursos. Esto podría llevar a una denegación de servicio (DoS) temporal remota sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62851602."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13234",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.557",
      "lastModified" : "2024-11-21T03:11:12.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68159767."
      }, {
        "lang" : "es",
        "value" : "En DLSParser en la biblioteca sonivox, hay un posible agotamiento de recursos debido a un filtrado de memoria. Esto podría llevar a una denegación de servicio (DoS) temporal remota sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68159767."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13235",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.603",
      "lastModified" : "2024-11-21T03:11:12.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en el media framework de Android (n/a). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13236",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.637",
      "lastModified" : "2024-11-21T03:11:12.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217699."
      }, {
        "lang" : "es",
        "value" : "En el servicio KeyStore, hay una omisión de permisos que permite el acceso a recursos protegidos. Esto podría llevar a un escalado de privilegios local sin necesitar privilegios de ejecución del sistema. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-68217699."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102979",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43996/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43996/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13238",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.697",
      "lastModified" : "2024-11-21T03:11:12.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-64610940."
      }, {
        "lang" : "es",
        "value" : "En el modo XBLRamDump, hay una característica de depuración que puede emplearse para volcar el contenido de la memoria si un atacante tiene acceso físico al dispositivo. Esto podría llevar a una divulgación de información local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-64610940."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103024",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13239",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.743",
      "lastModified" : "2024-11-21T03:11:13.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el framework de Android (ui framework). Producto: Android. Versiones: 8.0. ID: A-66244132."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103012",
        "source" : "security@android.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13240",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.777",
      "lastModified" : "2024-11-21T03:11:13.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1. ID: A-68694819."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el framework de Android (crypto framework). Producto: Android. Versiones: 8.0, 8.1. ID: A-68694819."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103011",
        "source" : "security@android.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13241",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.823",
      "lastModified" : "2024-11-21T03:11:13.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-69065651."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libstagefright_soft_avcenc). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-69065651."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103017",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13242",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.887",
      "lastModified" : "2024-11-21T03:11:13.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-62672248."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-62672248."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103014",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13243",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.917",
      "lastModified" : "2024-11-21T03:11:13.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (ui). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103013",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13244",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:00.963",
      "lastModified" : "2024-11-21T03:11:13.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el easel del kernel de Upstream. Producto: Android. Versiones: Android kernel. ID: A-62678986."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103008",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13245",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:01.010",
      "lastModified" : "2024-11-21T03:11:13.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador de audio del kernel de Upstream. Producto: Android. Versiones: Android kernel. ID: A-64315347."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103008",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13246",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:01.073",
      "lastModified" : "2024-11-21T03:11:13.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el controlador de red del kernel de Upstream. Producto: Android. Versiones: Android kernel. ID: A-36279469."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103029",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13247",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-12T19:29:01.120",
      "lastModified" : "2024-11-21T03:11:13.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-71486645."
      }, {
        "lang" : "es",
        "value" : "Hay una falta de comprobación de permisos en el bootloader de Pixel 2 que omite el bloqueo de bootloader del operador. Esto podría llevar a una elevación de privilegios local sin necesitar privilegios de ejecución de usuario. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-71486645."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103027",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T22:29:00.227",
      "lastModified" : "2024-11-21T03:18:31.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file."
      }, {
        "lang" : "es",
        "value" : "En Exiv2 0.26, hay una aserción alcanzable en la función readHeader en bigtiffimage.cpp, que conducirá a un ataque de denegación de servicio (DoS) remoto mediante un archivo TIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524116",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T22:29:00.257",
      "lastModified" : "2024-11-21T03:18:31.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file."
      }, {
        "lang" : "es",
        "value" : "Existe una sobrelectura de búfer basado en memoria dinámica (heap) en la función Exiv2::Image::byteSwap4 de image.cpp en la versión 0.26 de Exiv2. Los atacantes remotos pueden explotar esta vulnerabilidad para revelar datos de la memoria o provocar una denegación de servicio (DoS) mediante un archivo TIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T22:29:00.320",
      "lastModified" : "2024-11-21T03:18:31.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the \"!= 0x1c\" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file."
      }, {
        "lang" : "es",
        "value" : "En Exiv2 hay una sobrelectura de búfer basada en memoria dinámica (heap) en la función Exiv2::IptcData::printStructure en iptc.cpp, relacionada con el caso \"!= 0x1c\". Los atacantes remotos podrían explotar esta vulnerabilidad para provocar una denegación de servicio (DoS) mediante un archivo TIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-12T22:29:00.383",
      "lastModified" : "2024-11-21T03:18:32.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864, which is an invalid memory address dereference."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros que conduce a una sobrelectura de búfer basado en memoria dinámica (heap) en la función Exiv2::getULong de types.cpp en la versión 0.26 de Exiv2. Los atacantes remotos pueden aprovechar esta vulnerabilidad para provocar una denegación de servicio (DoS) mediante un archivo de imagen manipulado. Hay que tener en cuenta que esta vulnerabilidad es diferente de CVE-2017-14864, que es una desreferencia de dirección de memoria inválida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E025A-62BF-4024-BB8D-D8C2FFE1D213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/188",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1525055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9963",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-02-12T23:29:00.213",
      "lastModified" : "2024-11-21T03:37:15.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Request Forgery (CSRF) en el componente Secure Gateway de PowerSCADA Anywhere v1.0 redistribuido con PowerSCADA Expert v8.1 y PowerSCADA Expert v8.2 y Citect Anywhere versión 1.0, de Schneider Electric para múltiples peticiones de cambio de estado. Este tipo de ataque requiere cierto nivel de ingeniería social para conseguir que un usuario legítimo haga clic o acceda a un enlace o página maliciosa que contenga el ataque CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445511E-70B8-4E03-A178-FFDBE02E1609"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9967",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-02-12T23:29:00.307",
      "lastModified" : "2024-11-21T03:37:16.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization (ASLR) and Data Execution prevention (DEP) were not properly configured resulting in weak security."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de configuración de seguridad errónea en Schneider Electric's IGSS SCADA Software, en versiones 12 y anteriores. Las opciones de configuración de seguridad como Address Space Layout Randomization (ASLR) y Data Execution Prevention (DEP) no se configuraron correctamente, lo que resultaba en una seguridad débil."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0",
            "matchCriteriaId" : "DA1E8EFC-6060-4BA0-95E5-81BBC3AF1353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103022",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-037-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-037-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9968",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-02-12T23:29:00.357",
      "lastModified" : "2024-11-21T03:37:16.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de configuración de seguridad errónea en la aplicación Schneider Electric's IGSS Mobile, en versiones 3.01 y anteriores, en la cual la falta de asignación de certificados durante el proceso de establecimiento de conexión TLS/SSL puede desembocar en un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "813AC34A-B612-4B5F-A372-2F3EED3E3129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "EDF8B4C6-943B-426A-A53A-D1E41A1C596F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103048",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9969",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-02-12T23:29:00.403",
      "lastModified" : "2024-11-21T03:37:16.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en la aplicación Schneider Electric's IGSS Mobile, en versiones 3.01 y anteriores. Las contraseñas se almacenan en texto claro en la configuración, lo que puede resultar en la exposición de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "813AC34A-B612-4B5F-A372-2F3EED3E3129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "EDF8B4C6-943B-426A-A53A-D1E41A1C596F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103046",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9970",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-02-12T23:29:00.450",
      "lastModified" : "2024-11-21T03:37:16.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código en Schneider Electric's StruxureOn Gateway, en versiones 1.1.3 y anteriores. La subida de un zip que contiene metadatos cuidadosamente manipulados permite que el archivo sea subido a cualquier directorio de la información de la máquina host, lo que puede desembocar en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureon_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.3",
            "matchCriteriaId" : "7D7E12DF-0D45-43DE-B886-7916D05F40F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103052",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-046-04",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-039-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-046-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-039-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-13T19:29:00.307",
      "lastModified" : "2024-11-21T03:19:30.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 7.0.0 de QPDF. Hay un bucle infinito en la función QPDFWriter::enqueueObject() en libqpdf/QPDFWriter.cc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "73F0E411-FD17-40ED-87AB-D320CB6A39FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qpdf/qpdf/commit/8249a26d69f72b9cda584c14cc3f12769985e481",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/143",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/qpdf/qpdf/commit/8249a26d69f72b9cda584c14cc3f12769985e481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-13T19:29:00.370",
      "lastModified" : "2024-11-21T03:19:30.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 7.0.0 de QPDF. Hay una lectura fuera de límites basada en pila en la función iterate_rc4 en QPDF_encryption.cc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "73F0E411-FD17-40ED-87AB-D320CB6A39FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qpdf/qpdf/commit/dea704f0ab7f625e1e7b3f9a1110b45b63157317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/147",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/qpdf/qpdf/commit/dea704f0ab7f625e1e7b3f9a1110b45b63157317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-13T19:29:00.417",
      "lastModified" : "2024-11-21T03:19:30.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is caused by an integer overflow in the PNG filter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 7.0.0 de QPDF. Hay una gran lectura fuera de límites basada en memoria dinámica (heap) en la función Pl_Buffer::write en Pl_Buffer.cc. Esto lo ha provocado un desbordamiento de enteros en el filtro PNG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "73F0E411-FD17-40ED-87AB-D320CB6A39FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qpdf/qpdf/commit/ec7d74a386c0b2f38990079c3b0d2a2b30be0e71",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/150",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/qpdf/qpdf/commit/ec7d74a386c0b2f38990079c3b0d2a2b30be0e71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-13T19:29:00.463",
      "lastModified" : "2024-11-21T03:19:30.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 7.0.0 de QPDF. Hay un bucle infinito debido a las tablas xref en bucle en QPDF.cc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "73F0E411-FD17-40ED-87AB-D320CB6A39FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qpdf/qpdf/commit/85f05cc57ffa0a863d9d9b23e73acea9410b2937",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/149",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/qpdf/qpdf/commit/85f05cc57ffa0a863d9d9b23e73acea9410b2937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qpdf/qpdf/issues/149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3638-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15709",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-13T20:29:00.217",
      "lastModified" : "2024-11-21T03:15:03.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text."
      }, {
        "lang" : "es",
        "value" : "Al utilizar el protocolo OpenWire en ActiveMQ, versiones 5.14.0 a 5.15.2, se ha descubierto que ciertos detalles del sistema (como el sistema operativo y la versión del kernel) se exponen en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.14.0",
            "versionEndIncluding" : "5.15.2",
            "matchCriteriaId" : "E22A040E-A5DC-45AB-8DF4-F7CC5C304C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc%40%3Ccommits.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/2b6f04a552c6ec2de6563c2df3bba813f0fe9c7e22cce27b7829db89%40%3Cdev.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/3f1e41bc9153936e065ca3094bd89ff8167ad2d39ac0b410f24382d2%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/c0ec53b72b3240b187afb1cf67e4309a9e5f607282010aa196734814%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b%40%3Cdev.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc%40%3Ccommits.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/2b6f04a552c6ec2de6563c2df3bba813f0fe9c7e22cce27b7829db89%40%3Cdev.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/3f1e41bc9153936e065ca3094bd89ff8167ad2d39ac0b410f24382d2%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c0ec53b72b3240b187afb1cf67e4309a9e5f607282010aa196734814%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b%40%3Cdev.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1711",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-13T20:29:00.263",
      "lastModified" : "2024-11-21T03:22:15.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532."
      }, {
        "lang" : "es",
        "value" : "Las versiones 8.5 y 9.0 de IBM iNotes SUService pueden manipularse para que ejecuten código malicioso de un DLL disfrazado de DLL de windows en el directorio temp. IBM X-Force ID: 134532."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0295E4E8-6A3E-44AE-935A-3BF4282AA4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFB0E44-E747-4685-8273-EF12E556D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB11113-37E2-4A92-A100-BA2BD01043FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D60EB9-26DF-4B03-923B-12DE5D8E5D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9327CB4C-30F0-47E0-9D3D-445CE49F6C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B784D714-6267-4314-AAC1-E8D1E8479F05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFB3033-7E8C-4042-A93D-0D9E43456120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B201085B-5565-45DA-B82B-8E34B808B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.1:interim_fix_1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E31A15-D77C-4DF7-A0A3-B4FA3D87892E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.2:interim_fix_1:*:*:*:*:*:*",
            "matchCriteriaId" : "B20619CD-4A2C-499D-9349-81283A76B0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010774",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010775",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134532",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1714",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-13T20:29:00.327",
      "lastModified" : "2024-11-21T03:22:15.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. IBM X-Force ID: 134633."
      }, {
        "lang" : "es",
        "value" : "IBM Notes and Domino NSD 8.5 y 9.0 podrían permitir que un usuario local autenticado sin privilegios administrativos obtenga privilegios System. IBM X-Force ID: 134633."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0295E4E8-6A3E-44AE-935A-3BF4282AA4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFB0E44-E747-4685-8273-EF12E556D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB11113-37E2-4A92-A100-BA2BD01043FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D60EB9-26DF-4B03-923B-12DE5D8E5D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9327CB4C-30F0-47E0-9D3D-445CE49F6C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B784D714-6267-4314-AAC1-E8D1E8479F05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFB3033-7E8C-4042-A93D-0D9E43456120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B201085B-5565-45DA-B82B-8E34B808B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.1:interim_fix_1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E31A15-D77C-4DF7-A0A3-B4FA3D87892E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.2:interim_fix_1:*:*:*:*:*:*",
            "matchCriteriaId" : "B20619CD-4A2C-499D-9349-81283A76B0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010776",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010777",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134633",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1720",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-13T20:29:00.387",
      "lastModified" : "2024-11-21T03:22:15.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807."
      }, {
        "lang" : "es",
        "value" : "Las versiones 8.5 y 9.0 de IBM Notes podrían permitir que un atacante local ejecute comandos arbitrarios manipulando cuidadosamente una línea de comandos enviada mediante el IPC de la memoria compartida. IBM X-Force ID: 134807."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0295E4E8-6A3E-44AE-935A-3BF4282AA4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFB0E44-E747-4685-8273-EF12E556D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB11113-37E2-4A92-A100-BA2BD01043FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:8.5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D60EB9-26DF-4B03-923B-12DE5D8E5D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9327CB4C-30F0-47E0-9D3D-445CE49F6C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B784D714-6267-4314-AAC1-E8D1E8479F05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFB3033-7E8C-4042-A93D-0D9E43456120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B201085B-5565-45DA-B82B-8E34B808B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.1:interim_fix_1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E31A15-D77C-4DF7-A0A3-B4FA3D87892E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_application_access:1.0.1.2:interim_fix_1:*:*:*:*:*:*",
            "matchCriteriaId" : "B20619CD-4A2C-499D-9349-81283A76B0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010766",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010767",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134807",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15699",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-13T22:29:00.207",
      "lastModified" : "2024-11-21T03:15:01.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and shut down."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de denegación de servicio (DoS) en Apache Qpid Dispatch Router 0.7.0 y 0.8.0. Para explotar esta vulnerabilidad, un usuario remoto debe poder establecer una conexión AMQP a Qpid Dispatch Router y enviar un frame AMQP especialmente manipulado, lo que provocará un fallo de segmentación y el cierre."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:qpid_dispatch:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE1BF5-D6FD-4D5C-9357-A61A40435227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:qpid_dispatch:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DAACD3-615B-4040-BB10-6A6AFC87C174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103067",
        "source" : "security@apache.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/DISPATCH-924",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/DISPATCH-924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1499",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-14T15:29:00.207",
      "lastModified" : "2024-11-21T03:21:58.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Asset Management versiones 7.5 y 7.6 podría permitir que un atacante remoto incluya archivos arbitrarios y, como consecuencia, ejecute código en el servidor Web vulnerable. IBM X-Force ID: 129106."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B590C42-21A1-4C62-8293-5A0D7AD628E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B028794E-5FA0-4E3D-AC4D-A2826DD6282C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA89D39-C008-49CD-9D1E-7109644970AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012781",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129106",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1682",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-14T15:29:00.270",
      "lastModified" : "2024-11-21T03:22:12.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134004."
      }, {
        "lang" : "es",
        "value" : "IBM Connections 4.0, 4.5, 5.0, 5.5 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134004."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEAD70-A16A-4618-994A-455A16F0A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D749AA83-99AF-49CD-B9E0-09F667E907E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F522A3A-A452-4D8F-B7A0-3AC80A0DD4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E02CAE7-BB6B-4AC7-AFE7-B1234ED0B8F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8200F7F9-94B4-4F72-82F0-E4AFC5D49CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012900",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134004",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-14T17:29:00.237",
      "lastModified" : "2024-11-21T03:19:30.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c."
      }, {
        "lang" : "es",
        "value" : "En ARM mbed TLS, en versiones anteriores a la 2.7.0, hay una omisión de comprobación de límites mediante un desbordamiento de enteros en el análisis de identidad PSK en la función ssl_parse_client_psk_identity() en library/ssl_srv.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "66C08355-4796-425A-A20D-DCA782BEDA6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103055",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/blob/master/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/commit/83c9f495ffe70c7dd280b41fdfd4881485a3bc28",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-19",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4267-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4147",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/blob/master/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ARMmbed/mbedtls/commit/83c9f495ffe70c7dd280b41fdfd4881485a3bc28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201804-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4267-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6229",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2018-02-14T19:29:00.213",
      "lastModified" : "2024-11-21T03:29:18.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems."
      }, {
        "lang" : "es",
        "value" : "Ruckus Networks Unleashed AP, en versiones de firmware anteriores a 200.6.10.1.x y Ruckus Networks Zone Director, en versiones de firmware 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x y 10.0.1.0.x o anteriores, contienen inyección de comandos root autenticados en la interfaz de línea de comandos que podrían permitir que usuarios autenticados válidos ejecuten comandos privilegiados en los respectivos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:r500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "7842F7BA-DB75-44BA-A505-03AC07443F55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDBE9C-BE4B-4ED6-AF62-8FE484C519E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:r600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "01AEB940-2D3C-4F8A-B2D2-075665F893EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5421B1D7-E630-4BDA-BA34-7DD8D0738DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:r310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "08795F10-C276-4A7D-83FD-C39A8844D854"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D3129E-4C02-484F-96B6-59D76F787D21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:h320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "2B282766-1ACE-4249-99CB-CF8DD099EBDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282C3A1D-711C-4415-B9BE-A9B518204AEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:h510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "01348379-0624-46A2-B0EF-8877A6CBB8B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1FAB48-786A-4FB3-AB6D-3118E94E68C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:r710_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "61041E50-BDB8-431E-959F-BA6BF734F889"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95884E9-C6AF-4106-A178-9274AD27EF65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:r720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "F40E9FA2-CAD7-43E4-AACC-6E61B5D3B41C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFDAF0A-9F5D-4E34-805E-6F27103AAA32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:t300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "ACA58F89-2F73-42A6-AF00-BD17275650EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0511674E-59A6-427C-A265-B277D84DE301"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:t301_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "F5B07FA9-7E5A-4429-A4F6-B2AD1AB89388"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFEA172-9781-4FA8-96F2-DE09FB6340FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:t300e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "3FAD7213-2C06-4B24-8E36-9D5EE2B32720"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787156EB-F6AA-445F-8B56-4C3696E08697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:t610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "0395ED7F-AE77-4FF3-A139-718956FA13A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "210D55AB-9305-4D0B-B9F0-47889D37373B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:t710_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "A02D3DD9-5369-45E4-84BE-678EC3DDDAC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ruckuswireless:t710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862672CC-0480-405C-9791-8993D19931A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:r510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "200.6.10.1.0",
            "matchCriteriaId" : "6248C61C-ED6C-42AC-8B0D-DF197BF1107D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B2E8CC-EACE-4A80-9EB1-DADAB8034415"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.2.0.11",
            "versionEndIncluding" : "9.10.2.0.53",
            "matchCriteriaId" : "BA60F3C8-CF88-4336-A214-98292E45B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.3.0.28",
            "versionEndIncluding" : "9.12.3.0.83",
            "matchCriteriaId" : "87A7791C-AD3E-433E-9383-69BCC6F1A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13.3.0.22",
            "versionEndIncluding" : "9.13.3.0.145",
            "matchCriteriaId" : "882D995A-9677-46BD-BF59-91DDAA4C73F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.1.0.17",
            "versionEndIncluding" : "10.0.1.0.44",
            "matchCriteriaId" : "AB97CF78-F5A4-4BEE-B447-4E27CE05022B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:10.1.0.0.1515:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832AD5B-50F7-4BB1-9116-33B67286D197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zonedirector_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE0C2B2-D14B-4798-95C4-F911B3B1D88E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_3000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.2.0.11",
            "versionEndIncluding" : "9.10.2.0.53",
            "matchCriteriaId" : "E3DBB4B6-0ED3-425A-AB4A-B8B76521312F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_3000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.3.0.28",
            "versionEndIncluding" : "9.12.3.0.83",
            "matchCriteriaId" : "77C9E693-D648-4636-97E0-62B819DDB9CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_3000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13.3.0.22",
            "versionEndIncluding" : "9.13.3.0.145",
            "matchCriteriaId" : "CC11B771-8CB6-4009-861F-0AC6CA0519C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_3000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.1.0.17",
            "versionEndIncluding" : "10.0.1.0.44",
            "matchCriteriaId" : "26F9F52E-11E2-4995-AA03-F0AC4F33D0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:zonedirector_3000_firmware:10.1.0.0.1515:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8636729-51EA-4292-8477-C78C11C5A8AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zonedirector_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1F42A8-8785-48A5-B0B0-68504EFD38B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt",
        "source" : "sirt@brocade.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6230",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2018-02-14T19:29:00.260",
      "lastModified" : "2024-11-21T03:29:18.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems."
      }, {
        "lang" : "es",
        "value" : "Ruckus Networks Solo APs, en versiones de firmware R110.x o anteriores y Ruckus Networks SZ managed APs, en versiones de firmware R5.x o anteriores, contienen inyección de comandos root autenticados en la interfaz gráfica de usuario web que podrían permitir que usuarios autenticados válidos ejecuten comandos privilegiados en los respectivos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:solo_access_point_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r110.0",
            "matchCriteriaId" : "1AFA6DC2-3DC2-4589-BCAB-EDB7D559DA66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:smartzone_managed_access_point_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r5.0",
            "matchCriteriaId" : "3E842015-B338-4202-B438-7F6F4C660427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt",
        "source" : "sirt@brocade.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-14T20:29:00.220",
      "lastModified" : "2024-11-21T03:19:30.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which \"chown -R\" will be run."
      }, {
        "lang" : "es",
        "value" : "OpenRC opentmpfiles, hasta la versión 0.1.3, cuando el sysctl fs.protected_hardlinks está desactivado, permite que los usuarios locales se hagan dueños de archivos arbitrarios mediante la creación de un vínculo físico en un directorio en el que se ejecutará \"chown -R\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openr:opentmpfiles:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.3",
            "matchCriteriaId" : "79DCFC80-265C-4682-8831-BD66BAC4EEB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenRC/opentmpfiles/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenRC/opentmpfiles/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13273",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-02-15T02:29:00.827",
      "lastModified" : "2024-11-21T03:11:16.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158."
      }, {
        "lang" : "es",
        "value" : "Hay una condición de carrera en xt_qtaguid.c debido a un bloqueo insuficiente. Esto podría llevar a una elevación de privilegios local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-65853158."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12718",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.227",
      "lastModified" : "2024-11-21T03:10:05.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on the target device. The pump receives the potentially malicious input infrequently and under certain conditions, increasing the difficulty of exploitation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de desbordamiento de búfer clásico en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. Un componente de terceros empleado en la bomba no verifica el tamaño de entrada del búfer antes de la copia, lo que desemboca en un desbordamiento de búfer que permite la ejecución remota de código en el dispositivo objetivo. La bomba recibe las entradas potencialmente maliciosas de forma infrecuente y bajo ciertas condiciones, lo que dificulta su explotación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101252",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43776/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43776/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12720",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.273",
      "lastModified" : "2024-11-21T03:10:05.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de control de acceso incorrecto en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. El servidor FTP en la bomba no requiere autenticación si la bomba está configurada para permitir conexiones FTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12721",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.320",
      "lastModified" : "2024-11-21T03:10:05.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle (MITM) attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de validación de certificados incorrecta en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. La bomba no valida los certificados del host, lo que hace que la bomba sea vulnerable a ataques Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12722",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.383",
      "lastModified" : "2024-11-21T03:10:05.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the communications module would not impact the operation of the therapeutic module."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de lectura fuera de límites en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. Un componente de terceros empleado en la bomba lee memoria fuera de límites, lo que provoca que el módulo de comunicaciones se cierre inesperadamente. Smiths Medical estima que el cierre inesperado del módulo de comunicaciones no tendría ningún impacto en la operación del módulo terapéutico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101252",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12723",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.430",
      "lastModified" : "2024-11-21T03:10:05.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump stores some passwords in the configuration file, which are accessible if the pump is configured to allow external communications."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de contraseña en archivo de configuración en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. La bomba almacena algunas contraseñas en el archivo de configuración, a las que se puede acceder si la bomba está configurada para permitir comunicaciones externas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12724",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.477",
      "lastModified" : "2024-11-21T03:10:06.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured to allow FTP connections."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de credenciales embebidas en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. El servidor FTP en la bomba contiene credenciales embebidas que no están inicializadas completamente. El servidor FTP solo es accesible si la bomba está configurada para permitir conexiones FTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12725",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.523",
      "lastModified" : "2024-11-21T03:10:06.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establish a wireless network connection even if the pump is Ethernet connected and active; however, if the wireless association is established and the Ethernet cable is attached, the pump does not attach the network stack to the wireless network. In this scenario, all network traffic is instead directed over the wired Ethernet connection."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de credenciales embebidas en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. La bomba con configuración de red por defecto emplea credenciales embebidas para establecer automáticamente una conexión de red inalámbrica. La bomba establecerá una conexión de red inalámbrica incluso aunque la bomba esté conectada por Ethernet y activa. Sin embargo, si se establece la asociación inalámbrica y el cable de Ethernet está conectado, la bomba no conecta la pila de red a la red inalámbrica. En este caso, todo el tráfico de red se dirige a través de la conexión de Ethernet cableada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12726",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-02-15T10:29:00.570",
      "lastModified" : "2024-11-21T03:10:06.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that it is not possible to upload files via Telnet and the impact of this vulnerability is limited to the communications module."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de uso de contraseñas embebidas en Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, en versiones 1.1, 1.5 y 1.6. El telnet de la bomba emplea credenciales embebidas que pueden emplearse si la bomba está configurada para permitir comunicaciones externas. Smiths Medical estima que no es posible subir archivos mediante Telnet y que el impacto de esta vulnerabilidad se limita al módulo de comunicaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB2BFA-A772-4A90-B79B-D6FB2090A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC867D0F-2FF0-4E99-87FF-84A873F56341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048B188C-D620-42EE-84D5-61C3F03F7FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:smiths-medical:medfusion_4000_wireless_syringe_infusion_pump:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874E6FE-4025-484B-A7D4-62824A299ECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-15T10:29:00.617",
      "lastModified" : "2024-11-21T03:19:31.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service."
      }, {
        "lang" : "es",
        "value" : "En la función startread en xa.c en Sound eXchange (SoX) hasta la versión 14.4.2, una cabecera que especifica cero canales desencadena un bucle infinito con una desreferencia de puntero NULL resultante, lo que podría permitir que un atacante remoto provoque una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sound_exchange_project:sound_exchange:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.4.2",
            "matchCriteriaId" : "4FB3FA1C-FBCE-4D0A-90AB-68D2F7EF2686"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62RARFRXGKPNNFFNVDV7DHJSOKAIZ3CX/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUKFZQSZG2ABMTAMOGBMY7MJNSGEIYTL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://public-inbox.org/sox-devel/20171109114554.16297-1-mans%40mansr.com/raw",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62RARFRXGKPNNFFNVDV7DHJSOKAIZ3CX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUKFZQSZG2ABMTAMOGBMY7MJNSGEIYTL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://public-inbox.org/sox-devel/20171109114554.16297-1-mans%40mansr.com/raw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18087",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-15T13:29:00.250",
      "lastModified" : "2024-11-21T03:19:20.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them to gain code execution, exploit CVE-2017-1000117 if a vulnerable version of git is in use, and or determine if an internal service exists via an argument injection vulnerability in the at parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso download commit en Atlassian Bitbucket Server, desde la versión 5.1.0 anterior a la versión 5.1.7, desde la versión 5.2.0 anterior a la versión 5.2.5, desde la versión 5.3.0 anterior a la versión 5.3.3 y desde la versión 5.4.0 anterior a la versión 5.4.1, permite que atacantes remotos escriban archivos en el disco, permitiéndoles que puedan ejecutar código, explotar CVE-2017-1000117 si se está empleando una versión vulnerable de git o para determinar si existe un servicio interno por medio de una vulnerabilidad de inyección de argumentos en el parámetro at."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.7",
            "matchCriteriaId" : "8016084B-D350-4BEB-8DF5-8535B0731E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "CD7D36AD-BC10-4E62-8425-E192FE08404D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.3",
            "matchCriteriaId" : "5DE43F75-BEBE-4F4F-A913-6FE0B8EF0FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.4.0",
            "versionEndExcluding" : "5.4.1",
            "matchCriteriaId" : "F191B55F-E311-4B7C-90CA-0089D2044E6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103038",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10593",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18088",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-15T13:29:00.297",
      "lastModified" : "2024-11-21T03:19:20.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.6 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.6 (the fixed version for 5.5.x), from version 5.6.0 before 5.6.3 (the fixed version for 5.6.x), from version 5.7.0 before 5.7.1 (the fixed version for 5.7.x) and before 5.8.0 allow remote attackers to conduct clickjacking attacks via framing various resources that lacked clickjacking protection."
      }, {
        "lang" : "es",
        "value" : "Varios recursos del servlet del plugin en Atlassian Bitbucket Server, en versiones anteriores a la 5.3.7 (la versión solucionada para 5.3.x), desde la versión 5.4.0 anterior a la 5.4.6 (la versión solucionada para 5.4.x), desde la versión 5.5.0 anterior a la 5.5.6 (la versión solucionada para 5.5.x), desde la versión 5.6.0 anterior a la 5.6.3 (la versión solucionada para 5.6.x), desde la versión 5.7.0 anterior a la 5.7.1 (la versión solucionada para 5.7.x) y en versiones anteriores a la 5.8.0, permiten que los atacantes remotos lleven a cabo ataques de secuestro de clics integrando varios recursos que carecían de protección contra secuestro de clics."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.7",
            "matchCriteriaId" : "59FACEA5-6BFF-4F86-AAD0-A010E635781F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.6",
            "matchCriteriaId" : "846BD10D-C2A1-402D-BACA-EC410D291253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.6",
            "matchCriteriaId" : "563880B8-8258-408B-AEFD-550977F2DD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.6.3",
            "matchCriteriaId" : "8CF75C29-BCCA-4994-BE58-BCD08950D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndExcluding" : "5.7.1",
            "matchCriteriaId" : "A0A49A1F-0B79-4BB3-B53A-D4905F5E6AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103040",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10594",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BSERV-10594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15329",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.203",
      "lastModified" : "2024-11-21T03:14:28.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests that contain user-supplied input, successful exploitation may allow the attacker to execute arbitrary SQL queries."
      }, {
        "lang" : "es",
        "value" : "Huawei UMA V200R001C00 tiene una vulnerabilidad de inyección SQL en el módulo de operación y mantenimiento. Un atacante inicia sesión en el sistema como usuario común y envía peticiones HTTP manipuladas que contienen instrucciones SQL al sistema afectado. Debido a la falta de validación de entradas de peticiones HTTP que contienen entradas proporcionadas por el usuario, la explotación con éxito podría permitir que el atacante ejecute consultas SQL arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:uma_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207D80F3-6DB4-4BDE-AE72-38BAF4EE2B67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:uma:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1940680-0927-4E56-83E3-3525797978B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171116-01-uma-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171116-01-uma-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15330",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.283",
      "lastModified" : "2024-11-21T03:14:28.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky-AL00AC00B157D, Vicky-AL00AC00B167 has a double free vulnerability. An attacker can trick a user to install a malicious application which has a high privilege to exploit this vulnerability. Successful exploitation may cause denial of service (DoS) attack."
      }, {
        "lang" : "es",
        "value" : "El controlador Flp en determinados smartphones Huawei del software Vicky-AL00AC00B124D, Vicky-AL00AC00B157D y Vicky-AL00AC00B167. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa con un nivel alto de privilegios para explotar esta vulnerabilidad. Su explotación exitosa podría provocar un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00a_firmware:vicky-al00ac00b124d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9E7B9D-52E9-467C-9087-D4805EEB7C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00a_firmware:vicky-al00ac00b157d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E1BE8D-4843-48CB-8285-EE1C4F8CB0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vicky-al00a_firmware:vicky-al00ac00b167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB59274F-9064-49EA-8261-442A04D95A57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vicky-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014F48F-8F37-41FA-A7DE-F281B3BFFA99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15331",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.330",
      "lastModified" : "2024-11-21T03:14:28.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, MAX PRESENCE V100R001C00, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00SPC200, V600R006C00, RSE6500 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, V500R002C00T, V600R006C00, V600R006C00T, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, have an out-of-bounds read vulnerability in H323 protocol. An unauthenticated, remote attacker may send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, MAX PRESENCE V100R001C00, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00SPC200, V600R006C00, RSE6500 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, V500R002C00T, V600R006C00, V600R006C00T, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02 y V100R011C03 tienen una vulnerabilidad de lectura fuera de límites en el protocolo H323. Un atacante remoto no autenticado podría enviar paquetes manipulados a los productos afectados. Dada la verificación insuficiente de los paquetes, una explotación exitosa podría hacer que el proceso se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F5C31-6000-48C4-A9CA-D3F91A0549E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611E69A3-AB62-4584-B611-93583D84FCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E7481E-B5B8-481C-AC35-A8029AA2DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F64B04C-27B1-4621-86B3-827D6F83D3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E7CCC4-60A8-48FA-A9EA-7A327B3A29B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892BC18-F3D0-4B0A-8F6D-E0C2A98E8A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15332",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.377",
      "lastModified" : "2024-11-21T03:14:28.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, MAX PRESENCE V100R001C00, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00SPC200, V600R006C00, RSE6500 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, V500R002C00T, V600R006C00, V600R006C00T, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, have a memory leak vulnerability in H323 protocol. The vulnerability is due to insufficient verification of the packets. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted packets. A successful exploit could cause a memory leak and eventual denial of service (DoS) condition on an affected device."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, MAX PRESENCE V100R001C00, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00SPC200, V600R006C00, RSE6500 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, V500R002C00T, V600R006C00, V600R006C00T, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02 y V100R011C03 tienen una vulnerabilidad de fuga de memoria en el protocolo H323. Esta vulnerabilidad se debe a una protección de de verificación de paquetes insuficiente. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando paquetes manipulados. Una explotación con éxito podría provocar una fuga de memoria y una condición de denegación de servicio (DoS) en un dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F5C31-6000-48C4-A9CA-D3F91A0549E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611E69A3-AB62-4584-B611-93583D84FCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E7481E-B5B8-481C-AC35-A8029AA2DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F64B04C-27B1-4621-86B3-827D6F83D3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E7CCC4-60A8-48FA-A9EA-7A327B3A29B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892BC18-F3D0-4B0A-8F6D-E0C2A98E8A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15333",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.423",
      "lastModified" : "2024-11-21T03:14:29.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400 has a DOS vulnerability. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks."
      }, {
        "lang" : "es",
        "value" : "El analizador XML en Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221 y V100R004C10SPC400 tiene una vulnerabilidad de denegación de servicio. Un atacante podría manipular archivos XML específicos para los productos afectados. Dado que no se comprueba este archivo XML, al analizarlo se podría provocar un ataque DOS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81469B-EC6C-493D-B632-4DF821A1F304"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336AA440-AEF4-482B-A037-8976DC38BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DE9FE-5EC9-462E-86F0-EE772C944DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4907FBB8-5157-460D-9240-DD7D610C0FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2898D6C5-77AB-4C1F-8134-B2DBD13EDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF23DAE-1215-41B2-88C5-4436D846266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7B7285-F4C6-415C-A948-D7612750A77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6DC0AF-017E-41BC-A19D-F9AA055F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AC16A-8F4E-4709-A3B4-DE74FFB91130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7B7285-F4C6-415C-A948-D7612750A77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6DC0AF-017E-41BC-A19D-F9AA055F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AC16A-8F4E-4709-A3B4-DE74FFB91130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49D3EAD-1EB3-4C62-80BA-4C9C3CE0408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75B012-A57D-4C6D-AB26-51D2ECC02F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DFF0C0-AA17-4AA1-A418-4759D1A58852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F05D5-BA7D-485B-91C2-273349335CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F0B3D-1923-42C3-A3DB-03D11BE059D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB6ED15-477B-4BB5-AA94-0D7897FBD962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AD9ACA-E0C3-4096-BE50-94E717CDA318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325D6523-A07A-48D4-AD44-CF838BD77432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C6245A-D192-4D02-BB4E-285ABD2BB328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26692835-0934-46B9-99F3-16C6C445716C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16ED12F-F226-4D51-ACF3-7F0B17E3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E94D2A-8B69-498F-9326-4973F81BA53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4EC75E-9FE1-4E3E-A884-D05EA6BC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A07D70E-8237-4D0C-BE2A-ABEE76BB78A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A6D1CC-5E68-41DD-B983-44B5070FD71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC368972-3057-4E2C-BC6A-234AC7A700B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ecns210_td:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FCDC81-B742-4D42-BD52-52BBDDDD4BE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15334",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.470",
      "lastModified" : "2024-11-21T03:14:29.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker may send specially crafted messages to the affected products. Due to the insufficient validation of some values for SIP messages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "La característica de copia de seguridad SIP en DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20 y V200R003C30 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante podría enviar mensajes especialmente manipulados a los productos afectados. Dada la validación insuficiente de algunos valores para los mensajes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127DAC4-427F-4AD1-A94A-904F383E9A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED7AC3-F922-44FE-B29C-ED7383FC30E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15335",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.517",
      "lastModified" : "2024-11-21T03:14:29.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker may send specially crafted messages to the affected products. Due to the insufficient validation of some values for SIP messages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "La característica de copia de seguridad SIP en DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20 y V200R003C30 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante podría enviar mensajes especialmente manipulados a los productos afectados. Dada la validación insuficiente de algunos valores para los mensajes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127DAC4-427F-4AD1-A94A-904F383E9A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED7AC3-F922-44FE-B29C-ED7383FC30E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15336",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.563",
      "lastModified" : "2024-11-21T03:14:29.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker may send specially crafted messages to the affected products. Due to the insufficient validation of some values for SIP messages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "La característica de copia de seguridad SIP en DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20 y V200R003C30 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante podría enviar mensajes especialmente manipulados a los productos afectados. Dada la validación insuficiente de algunos valores para los mensajes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127DAC4-427F-4AD1-A94A-904F383E9A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED7AC3-F922-44FE-B29C-ED7383FC30E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15337",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.610",
      "lastModified" : "2024-11-21T03:14:29.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker would have to find a way to craft specific messages to the affected products. Due to the insufficient validation for SIP messages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo SIP en DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20 y V200R003C30 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante tendría que averiguar la forma de manipular mensajes específicos en los productos afectados. Dada la validación insuficiente de los mensajes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127DAC4-427F-4AD1-A94A-904F383E9A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED7AC3-F922-44FE-B29C-ED7383FC30E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15338",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.657",
      "lastModified" : "2024-11-21T03:14:29.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker would have to find a way to craft specific messages to the affected products. Due to the insufficient validation for SIP messages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo SIP en DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20 y V200R003C30 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante tendría que averiguar la forma de manipular mensajes específicos en los productos afectados. Dada la validación insuficiente de los mensajes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127DAC4-427F-4AD1-A94A-904F383E9A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED7AC3-F922-44FE-B29C-ED7383FC30E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15339",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.720",
      "lastModified" : "2024-11-21T03:14:29.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker would have to find a way to craft specific messages to the affected products. Due to the insufficient validation for SIP messages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo SIP en DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20 y V200R003C30 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante tendría que averiguar la forma de manipular mensajes específicos en los productos afectados. Dada la validación insuficiente de los mensajes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127DAC4-427F-4AD1-A94A-904F383E9A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAED7AC3-F922-44FE-B29C-ED7383FC30E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC147B8B-BA90-4BE9-A018-0B85D7D85784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5D04E4-9B18-4B6C-A9B1-93A43B3D9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15340",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.783",
      "lastModified" : "2024-11-21T03:14:30.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could result in information disclosure."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software TAG-AL00C92B168 tienen una vulnerabilidad de divulgación de información. Un atacante engaña a un usuario para que instale una aplicación manipulada que simula una acción de clic para realizar una copia de seguridad de los datos de forma no cifrada mediante la función Android assist. La explotación con éxito podría resultar en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tag-al00_firmware:tag-al00c92b168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09874F25-A23B-4A16-86E6-9C0B05317F49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tag-al00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3386F709-6AA6-404D-995E-B968A3A26376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-05-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-05-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15341",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.830",
      "lastModified" : "2024-11-21T03:14:30.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability. The software decodes X.509 certificate in an improper way. A remote unauthenticated attacker could send a crafted X.509 certificate to the device. Successful exploit could result in a denial of service on the device."
      }, {
        "lang" : "es",
        "value" : "Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00 y TE60 V600R006C00 tienen una vulnerabilidad de denegación de servicio. El software descifra los certificados X.509 de forma indebida. Un atacante remoto no autenticado podría enviar un certificado X.509 manipulado al dispositivo. Su explotación con éxito podría resultar en una denegación de servicio en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-cert-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-cert-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15342",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.860",
      "lastModified" : "2024-11-21T03:14:30.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability. The software does not correctly calculate the rest size in a buffer when handling SSL connections. A remote unauthenticated attacker could send a lot of crafted SSL messages to the device, successful exploit could cause no space in the buffer and then denial of service."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00 y eSpace U1981 V200R003C30SPC100 tienen una vulnerabilidad de denegación de servicio. El software no calcula correctamente el tamaño en reposo en un búfer al gestionar las conexiones SSL. Un atacante remoto no autenticado podría enviar una gran cantidad de mensajes SSL manipulados al dispositivo, por lo que la explotación con éxito haría que el búfer se quede sin espacio y provocaría una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752D5F91-EE1E-436C-91AC-54C7CF6380E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ssl-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ssl-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15343",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.907",
      "lastModified" : "2024-11-21T03:14:30.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot."
      }, {
        "lang" : "es",
        "value" : "Huawei AR3200 con software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20 y V200R008C30 tiene una vulnerabilidad de desbordamiento de enteros. El software no valida suficientemente ciertos campos en los mensajes SCTP, por lo que un atacante remoto no autenticado podría enviar un mensaje SCTP manipulado al dispositivo. Una explotación con éxito podría provocar el reinicio del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-sctp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-sctp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15344",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:00.953",
      "lastModified" : "2024-11-21T03:14:30.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could cause system reboot."
      }, {
        "lang" : "es",
        "value" : "Huawei AR3200 con software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20 y V200R008C30 tiene una vulnerabilidad de desbordamiento de enteros. El software no valida suficientemente ciertos campos en los mensajes SCTP, por lo que un atacante remoto no autenticado podría enviar un mensaje SCTP manipulado al dispositivo. Una explotación con éxito podría provocar el rearranque del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15345",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.000",
      "lastModified" : "2024-11-21T03:14:30.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software LON-L29DC721B186 tienen una vulnerabilidad de denegación de servicio. Un atacante podría crear una condición de salida de bucle inalcanzable mediante el envío del mensaje 3GPP manipulado. Una explotación exitosa podría hacer que el dispositivo se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:lon-l29d_firmware:lon-l29dc721b186:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520827CA-E768-4605-9E70-C6FA6E5D29E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:lon-l29d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3652DBA0-1519-4D93-AA2B-C66F381F5C6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15346",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.047",
      "lastModified" : "2024-11-21T03:14:30.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400 has a DOS vulnerability. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks."
      }, {
        "lang" : "es",
        "value" : "El analizador XML en Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221 y V100R004C10SPC400 tiene una vulnerabilidad de denegación de servicio. Un atacante podría manipular archivos XML específicos para los productos afectados. Dado que no se comprueba este archivo XML, al analizarlo se podría provocar un ataque DOS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81469B-EC6C-493D-B632-4DF821A1F304"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336AA440-AEF4-482B-A037-8976DC38BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DE9FE-5EC9-462E-86F0-EE772C944DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4907FBB8-5157-460D-9240-DD7D610C0FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2898D6C5-77AB-4C1F-8134-B2DBD13EDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF23DAE-1215-41B2-88C5-4436D846266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7B7285-F4C6-415C-A948-D7612750A77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6DC0AF-017E-41BC-A19D-F9AA055F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AC16A-8F4E-4709-A3B4-DE74FFB91130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7B7285-F4C6-415C-A948-D7612750A77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6DC0AF-017E-41BC-A19D-F9AA055F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AC16A-8F4E-4709-A3B4-DE74FFB91130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49D3EAD-1EB3-4C62-80BA-4C9C3CE0408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75B012-A57D-4C6D-AB26-51D2ECC02F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DFF0C0-AA17-4AA1-A418-4759D1A58852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F05D5-BA7D-485B-91C2-273349335CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F0B3D-1923-42C3-A3DB-03D11BE059D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB6ED15-477B-4BB5-AA94-0D7897FBD962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AD9ACA-E0C3-4096-BE50-94E717CDA318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325D6523-A07A-48D4-AD44-CF838BD77432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C6245A-D192-4D02-BB4E-285ABD2BB328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26692835-0934-46B9-99F3-16C6C445716C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16ED12F-F226-4D51-ACF3-7F0B17E3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E94D2A-8B69-498F-9326-4973F81BA53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4EC75E-9FE1-4E3E-A884-D05EA6BC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A07D70E-8237-4D0C-BE2A-ABEE76BB78A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A6D1CC-5E68-41DD-B983-44B5070FD71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC368972-3057-4E2C-BC6A-234AC7A700B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ecns210_td:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FCDC81-B742-4D42-BD52-52BBDDDD4BE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15347",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.097",
      "lastModified" : "2024-11-21T03:14:30.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this vulnerability to cause the mobile phone to crash."
      }, {
        "lang" : "es",
        "value" : "Los teléfonos móviles Huawei Mate 9 Pro con versiones de software anteriores a LON-AL00BC00B235 tienen una vulnerabilidad de uso de memoria previamente liberada (UAF). Un atacante engaña a un usuario para que instale una aplicación maliciosa que desencadene un acceso a la memoria tras liberarla. Un atacante local podría explotar esta vulnerabilidad para provocar que el teléfono móvil se cierre inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:lon-al00bc00b235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2A17FE-A0E9-4393-9ED7-7A324E588394"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-phone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-phone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15348",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.143",
      "lastModified" : "2024-11-21T03:14:31.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset."
      }, {
        "lang" : "es",
        "value" : "Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00 y USG9500 V500R001C00 tienen una vulnerabilidad de validación de entradas insuficiente. Un atacante remoto no autenticado podría enviar mensajes MPLS Echo Request específicos a los productos afectados. Dada la validación de entradas insuficiente de algunos parámetros en los mensajes, la explotación con éxito podría provocar que el dispositivo se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-routers-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-routers-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15349",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.203",
      "lastModified" : "2024-11-21T03:14:31.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products. Due to not release the memory to handle the packets, successful exploit will result in memory leak of the affected products and lead to a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10 y V100R006C00 tienen una vulnerabilidad de fuga de memoria. Un atacante no autenticado podría enviar paquetes RSVP (Resource ReServation Protocol) a los productos afectados. Dado que no se libera la memoria para gestionar los paquetes, una explotación con éxito resultará en la fuga de memoria de los productos afectados y en una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB5929-1526-4910-BE22-07FCDDA06D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58D7203-2EE3-412A-B39C-94D82B0BBB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EF4F82-092F-4D19-832B-A174F7D47477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2DACA5-0AA6-419B-AC6A-8CC19326758E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8A2875-0F7E-4790-A925-5999396B7578"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90200F0F-FF1A-42D9-A4EF-8DD5F6DB6BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B93684-6903-4A54-B631-15873D3D3744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDAAAC-0585-406F-B547-FB71C5352209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916288E9-1DAB-40BE-9C29-3E8603FC0F02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42246DF-E736-4D98-AF73-3F5B731485D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31AD6C5-E687-47C9-8473-2486A6864128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A10D-8B77-4F43-87A9-803ED9855AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E574B02-F89A-4D5C-B462-3AF56F1C0A57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374AD269-B0F4-4534-ABAC-D08343B2CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A6E23-962D-4A92-B14D-949B01489F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B676B444-6128-4A04-B3E7-421F74FA9CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6985E0-9375-4DE2-A879-AAACF923381C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-router-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-router-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15350",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.250",
      "lastModified" : "2024-11-21T03:14:31.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10,SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3206 V100R002C00, V100R002C10,USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50 haa a buffer overflow vulnerability. An unauthenticated, remote attacker could exploit this vulnerability by sending specially crafted message to the affected products. The vulnerability is due to insufficient input validation of the message, which could result in a buffer overflow. Successful exploit may cause some services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo Common Open Policy Service Protocol (COPS) en Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10,SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3206 V100R002C00, V100R002C10,USG9500 V500R001C00, V500R001C20, V500R001C30 y V500R001C50 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando un mensaje especialmente manipulado a los productos afectados. La vulnerabilidad se debe a la validación insuficiente de entradas del mensaje, lo que podría resultar en un desbordamiento de búfer. Una explotación con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A51677-9D99-491C-B524-C5ED5774AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-buffer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-buffer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15351",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.297",
      "lastModified" : "2024-11-21T03:14:31.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally."
      }, {
        "lang" : "es",
        "value" : "La función \"Find Phone\" en los smartphones Huawei Honor V9 play con versiones anteriores a la Jimmy-AL00AC00B135 tiene una vulnerabilidad de omisión de autenticación. Esto se debe a la realización indebida de la autenticación en la función \"Find Phone\". Un atacante podría explotar esta vulnerabilidad para omitir la función \"Find Phone\" y emplear el teléfono de forma normal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_play_firmware:jimmy-al00ac00b135:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0A99C-F731-4477-AFCF-8B0D0B3AA380"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9_play:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B543AF24-5D59-4A46-AC76-0EFF314E3D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15352",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.347",
      "lastModified" : "2024-11-21T03:14:31.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10 y V300R003C20 tienen una vulnerabilidad de control de acceso indebido. Dado que se restringe incorrectamente el acceso a un recurso, un atacante cn altos privilegios podría explotar la vulnerabilidad para consultar información o enviar mensajes específicos para provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:S/C:P/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_2800_firmware:v300r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD19CCE-F22C-4636-9311-EC459DD3AB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_2800_firmware:v300r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC954881-0BA7-410F-9554-EA5D4B25E5B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A989B44-34DD-48AF-9D99-815AFF231E2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5300_firmware:v300r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199C6717-CAFD-4AA5-AE70-D0ECB41942EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5300_firmware:v300r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8171C2B9-F8AC-47F5-B8BB-907BA8CC3AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5300_firmware:v300r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643EA85E-E7D7-46CB-AB93-2F4B7CC0D73B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E3A522-763E-4EE4-8AB5-88F28F2241C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5500_firmware:v300r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1030966-8C2D-43D0-A6BF-4B5953B51B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5500_firmware:v300r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528FFD53-1B32-42FE-B83D-FF3F2CB790EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5500_firmware:v300r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E4DD55-63DB-40FC-B517-AE376610FFE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F725060-2172-4060-8D14-A82D0E50170A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5600_firmware:v300r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0194C365-6B21-413F-B499-776C9D9E82CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5600_firmware:v300r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0DFB60-C36B-4BF2-9E2E-BBEF9C81967C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5600_firmware:v300r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0CA8C65-D80A-4B8B-A4A2-95D440674C99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D5CD5C-0455-49DC-9F20-FF23DF3AA54D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5800_firmware:v300r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D40A94E-6BD7-4666-A7F6-DC4973C7ED74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5800_firmware:v300r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2726002-55D0-4013-9529-F1FDD02EFD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:oceanstor_5800_firmware:v300r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74107EEC-8F96-4BA5-85CF-747860B50B71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:oceanstor_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD3D8AB-C0D7-4F80-8F2A-9A93B306510F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15353",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.407",
      "lastModified" : "2024-11-21T03:14:31.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C03, Viewpoint 8660, V100R008C03 have an out-of-bounds read vulnerability. An attacker has to control the peer device and send specially crafted messages to the affected products. Due to insufficient input validation, successful exploit may cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C03, Viewpoint 8660 y V100R008C03 tienen una vulnerabilidad de lectura fuera de límites. Un atacante debe controlar el dispositivo del mismo nivel y enviar mensajes especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente, una explotación con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD47BE6-70B0-49FE-91D1-D5EE4BD9C750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD35F8E5-9819-4E59-8A42-01990DE8D5CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tx50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DA9D0A-C4E0-48A8-8863-5D54228A405A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15354",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.453",
      "lastModified" : "2024-11-21T03:14:31.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante podría enviar mensajes HTTP especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente de los diferentes parámetros en los mensajes, la explotación con éxito podría provocar que algunos servicios funcionen erróneamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD47BE6-70B0-49FE-91D1-D5EE4BD9C750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD35F8E5-9819-4E59-8A42-01990DE8D5CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tx50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DA9D0A-C4E0-48A8-8863-5D54228A405A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15355",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.500",
      "lastModified" : "2024-11-21T03:14:32.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante podría enviar mensajes HTTP especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente de los diferentes parámetros en los mensajes, la explotación con éxito podría provocar que algunos servicios funcionen erróneamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD47BE6-70B0-49FE-91D1-D5EE4BD9C750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD35F8E5-9819-4E59-8A42-01990DE8D5CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tx50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DA9D0A-C4E0-48A8-8863-5D54228A405A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15356",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.547",
      "lastModified" : "2024-11-21T03:14:32.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante podría enviar mensajes HTTP especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente de los diferentes parámetros en los mensajes, la explotación con éxito podría provocar que algunos servicios funcionen erróneamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD47BE6-70B0-49FE-91D1-D5EE4BD9C750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tx50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD35F8E5-9819-4E59-8A42-01990DE8D5CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tx50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DA9D0A-C4E0-48A8-8863-5D54228A405A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17151",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.597",
      "lastModified" : "2024-11-21T03:17:35.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks."
      }, {
        "lang" : "es",
        "value" : "Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660 y ViewPoint 9030 tienen una vulnerabilidad de validación insuficiente. Debido a que la validación de paquetes es insuficiente, un atacante no autenticado podría enviar paquetes H323 especiales para explotar la vulnerabilidad. Una explotación con éxito podría permitir que el atacante envíe paquetes maliciosos y provoque un ataque de DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DF1050-B3C1-4E01-ADEF-B5804AEB3BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100_firmware:v200r008c20spc700pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB926A8-925D-452C-ADCC-60353E0F97CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722D63A0-8846-4A25-8DED-791C2018CE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100_firmware:v200r008c20spc800pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB1F93A-A1B8-4FE1-921C-3CA3B5F79C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1B14D9-A66B-42A1-95F0-E25864D2ECC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1026E62-E92D-484A-AA47-EFEFCB40313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r007c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C3B21F-0060-4697-A153-DB1779B18F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C8622F-4472-4CB5-9B1E-DF72AB511DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6C0299-0991-4F3E-A3D5-485C2A1CE628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A629EDF7-4014-43E3-A12E-92373FD20D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FB5E82-95E0-4A13-8182-7E44017C4336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r008c20spc800pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBBA1F8-408E-44CC-A112-20960C262B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar100-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D40ED4-E991-4238-976F-936F41BA2218"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar100-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142D5EBC-FDB6-44E7-9D31-F6B5F730F381"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar110-s_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC67638F-E0D5-49A4-99CB-E4B0C1437E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar110-s_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AADF2C-034B-4CA1-8386-BE278596E6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar110-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558089C7-28E8-4B3F-84F2-F159D1093BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar110-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646553AB-1BAE-4087-B2C1-09B6DE284350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar110-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1A66BD-C684-4707-A7D7-959753CCFA12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar110-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F4598A-EC24-4B1F-AEC5-46991DAA1FA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4315CB6D-EA8E-4508-880B-AC3C0F51EDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FACE7C-561C-4EA2-B90F-06F65B64277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D74652-895C-48C4-BD84-1D4A42FCD804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EC6F54-88C2-41E1-9BCE-0571E4845523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AB19CA-F09F-43A8-9ACA-C70E2F3C5B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7551A08-E830-4FA6-BBD0-5E9282060D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72B7251-F311-4038-8515-3AFAF4AA46DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF0DDE9-C1D2-426E-AD66-A3DD9B0CB7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83B6ECB-6188-413D-BB3E-9012872705F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FB3B1A-CC60-4C68-8DB9-AD2510F1B1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594086E2-8174-49FB-94FE-988AA42CCEF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303D2633-18F1-406A-9940-FBD48FF86046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679B56B5-80C9-42D3-8AE5-69E335E42641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4213CC61-D1E7-4FE9-8AC3-7AA39B0D84C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E646CD-173D-4CBB-B527-555115EB5E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424CAE88-0F57-4F43-B0FE-EDBD76EEDC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CC4699-94C9-440F-BB89-3E0E266EB2E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9001FF9F-84D5-454C-BDB9-53D2D1CAA37B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BBD38E-5589-450D-BC91-A581272DEE19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523D5705-0356-4FD6-B845-8384739C165E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D21711B-49B5-4C61-BEF7-DB00B3580370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202CC4F0-AC28-43E8-8CA4-A593E223B699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E3AE22-F4D7-4B73-B1F0-5CCFEE5DF89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2CB09F-4F9B-4AFA-96AE-AD1031FD610C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B9E1E9-C97A-4418-8594-8526D1A8AB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBE292C-E42C-4862-A4BA-461D141ACEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17619258-04F3-4E15-BFE5-E215DBA27A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A14D9B-E8B7-45A6-942C-1C7567A9D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E1A2C8-499C-4D6D-BD9A-093BF545B042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10spc030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0343F7-5487-436E-8D5D-17CA4E891207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB95E2F8-B775-41CC-8C25-30B4E0A6C546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E297BB15-CA1E-4924-8C00-7064C51A21E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DC5681-CB65-4078-9A4D-D595A0C9DBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5964C2AF-7B32-4540-9F7F-B27DC4AC980F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82C8A28-DE70-42A1-8D84-8FD2A6B146C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83CD38B-01A1-42E9-9EA4-B8725F8D9A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2304F6-A8E1-4721-B6FB-7F745F2D2E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878D6596-69D4-41E7-A03B-5B895CBC7EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B453E3B-6CFD-46A2-8C00-56B195BB1142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2E3EED-F962-43CE-9332-2CC7D8AE9BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809F7AB4-4AB1-4191-9149-8485C6996EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CD4F39-D343-4B8D-8C88-DF1C8FCB0F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEF27A5-2C1F-4A85-A9D0-2FC9BBC3A486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB5ACF4-0554-4149-8BF6-D4E1467FF5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F9FAE4-1EFA-41D8-9919-CE6EFBC62325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F39F2DBE-06BE-412D-B864-189502A22ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0608F722-D442-4D99-972E-8E811133C17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E633A8-006D-4A0B-9260-769534601E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E905414-A400-439C-A4DD-B7733A95CA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209E87C6-7B95-4E1F-A4BE-5BBCAC58E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFFB2E5-3F36-438D-A865-5BE40F52575F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E5FF9D-907D-444F-8D61-1DB841EED95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7844CAD8-8C2C-4089-8F42-B688B2518C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C793-1030-4E50-AF5F-66DAFB156639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20spc800pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE100760-9A5B-484B-8D64-47840094356C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810D5C4A-FD13-4002-85F6-424A2D8D4F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED86CA03-2ECE-4D75-8245-D74AD86EB4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83266DB-86E4-4640-A804-FF955009AE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B41F805-5B64-410D-BE59-6A6F206B76D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0D286E-84B6-4E43-ABB3-A8783420DEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E34DFE-9026-4717-BEBB-27241924FEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8563F273-6F42-4C1F-876D-521121CD71C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CDA810-5C90-4B79-9D28-60EB10017522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E4070E-DB13-457C-96B4-CC44F87F0EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66700350-7733-4BBE-A35E-C4BC5DC36C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845C5755-0207-412D-B362-BBA81873371E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5E98BF-4841-4FF7-852A-6B2E172B0E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902DA8C7-D7E3-4595-BE0C-1BE89237113A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C3F79F7-D694-4542-AB86-69F24BC0A5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B5A0D1-D1FE-4846-8A80-67D95739F3F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A905F8A9-BC7F-4985-AAAA-385FE93C7CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C47118-22C9-443A-81E8-08572A4E062F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFB0565-10D1-430A-8D92-B8F4F1809B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E5D607-8261-4699-9C0D-312132DCBF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE8592A-527F-43D1-A58C-12F73C29F9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1BAEAC-A6B3-4E13-9447-6D573995022D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A18594-B753-4DEE-BF64-78DFC9DD60BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44BF3BC-56DC-4E0E-AE99-F363B0B6AD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59FB542-3570-408D-826A-7B0B5FC90763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A126AFD-5D9A-4BB6-B502-90877B4CA752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A542A66-2C65-4001-B5C4-49E258C1A0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88016893-B0EB-4383-AE33-6B0D0CFBB25D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19094209-264F-4B16-BB93-12B93E37926E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAFFEB3-2435-4B38-9013-54AF795C7A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0FC9CF-948F-4F90-A4FC-4B615B0C2CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0133D049-DA7A-489C-94CB-F122DBC2DDBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED053EC-FEA2-45B7-BB85-3B2EFB84C4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C04942-190A-431A-A6E1-7B28FFDF36C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CA7E71-10DD-40B0-BC14-6BB365C58259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F192465-AD4A-4C02-A3B7-13ABF4729FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED7DC11-E079-4325-AABC-8C42AB5E1993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E50A93F-78A6-472D-89A3-755F1FBB8AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD629F66-B032-49CA-ADCB-14EB8D65217C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20spc500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4862BD10-C671-4CE7-92C1-B78B3046D181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20spc501t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B965B1-42B1-4555-9205-EF3D09635A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6AD84C-CBD2-403E-B10E-9D7A8679A008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CE79D9-6A11-4C21-8C2F-1BB52B271F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D49A15-6244-4A68-9527-4F4898C8D773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DD399A-36A4-4ADC-8630-D720EEC9A916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD85AD5F-83E0-4C48-9FDC-9E24C268213E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A3C737-9C9D-407F-A453-F6C74DAD474C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006C9C6D-5BB9-43C9-975E-42890440738F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603DD908-9CE2-41FE-BFF2-ADC03D1EC539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A6A3AF-5794-414D-9E79-E330B2101A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F1DCB9-360D-4E63-9983-DA3F56533019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBB07BC-112F-424E-9C99-9A077A515425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C81C4DD-6694-4C92-AC70-F6CD146CF899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7034E914-2325-4D13-94CE-E3A2AA1A0070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22F550A-091F-44E3-B10B-B3408907E061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1C12C4-950E-4EDC-8471-84D01E66D764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE59F45F-5445-487F-A2A6-169F98109A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002FD618-7483-4ED5-ABBF-FB7F38D9F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28AEDF9-12B3-4C0C-9EBF-0BE745F90B16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1771610B-7EDA-460F-BB33-BBBFA5FD88C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD2DD93-6492-46F8-9DF1-4A3F183E6679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6B363B-4DB1-4CBC-9AE6-55805C90E558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03329B7E-5F96-4AA2-9F15-1EC00A1FD7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D4DA88-71EE-4A25-99F2-DA389CF405F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A355DAD5-E5F6-4BD5-9D37-1D4372971C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5A83E2-937A-483D-9CDF-532B9C516FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F6B1CF-4EC0-4C63-B0E0-338749027A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42AE1C2-0B11-4585-BBF9-1E36BAEE4810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E900FBE-E15E-47C7-9421-E185F39B14B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7444BA08-02FF-447C-9BC8-C4F7AC887507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA3BEAF-325A-4BA3-BACD-085D64E99032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A929490-D11C-4CBB-8C88-CC83EC38C317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808010D-8332-40E2-B2CC-4BFEA895F0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E0081E-C7C9-48BE-A1C5-BDD38857431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BD348A-8ED2-40D8-9D28-FE97CEB42AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3A90D7-6F2F-47E3-A202-E70C4294249D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDDD916-ADD1-4A3D-8E78-02C31F4D003D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB40B7A-4F24-4EF3-BC90-A680D02DFAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778C7079-ABCD-4C4B-9FA2-2AFD25E55E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D561D3-FF1B-4A54-AA9B-4E790FE9C9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B86082-E529-44EF-BAEA-9B53EEA0C73D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614DEA4C-5917-46D9-874F-F9655BEA72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AAACCF-4676-4C96-B0F0-84E5134DDA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8471609C-D277-4152-8955-64C485B73668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAF6DD3-1C3A-40B5-A368-943C47E5C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD36A7DB-E9C9-4463-B072-91E47CBCADA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1E64F2-CB26-47A5-93F7-1CF26AA24BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF001FB-E967-4FBA-B425-B06C34C2AF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A92178-021A-4871-983F-B9D0E6D1A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70D5234-DA0E-4593-BB8C-B45973D5EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C23D9B-EA01-42D7-963C-1B84E0F43785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6694C7-A0C6-4FA3-85AA-B287DBE87AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075DE40B-855A-4F66-9433-B5A758BB9778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E6E4A9-B81A-4BB5-A2B6-184C94ED91E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEC2BCA-29D5-4000-9E9F-0315993A6227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4221651E-EE8E-406D-9B7F-451AFCCF2374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BC23C6-26DE-45A9-BE04-F69313083ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20spc800pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87AFA10-0F26-4994-8BAF-AEBC821845D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDBE76B-2546-4CCD-A2DE-2179E89C3128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4222A7C-C20B-4A59-AB1D-8CAA51B5318D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCC6E3D-3FBF-4523-BE18-E7D0F7FAD880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D59BD5-28F6-45ED-9305-F1B61DE3157D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FFE4B8-BAE9-4E2C-A478-1B3B44B64684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1195E6-02DE-4ECF-BC60-B8F4BD083204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827194F9-8804-47FB-B4BC-63D670E94A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2498E0E-E68B-4F4C-8B72-72105887EC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0164A1-1A1C-4F87-B391-0B1C063DC46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DFC7AE-2EC8-432B-A1E6-CEFDF3AA9228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc510t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833D6F53-70F8-45CA-90C3-EF4FE1A2BCE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C55093-D49E-4DA4-92B7-A40E95619BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc600pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9250C0E8-96DE-4715-987F-1D4E951F6B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6751A62B-6BCD-4CB7-AD52-1C5BBECB2EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc900pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623DC079-7FD2-41CC-8D71-4C0B0390BAB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D512536-FBCC-4118-A1AA-F5BFD7B599A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E35FE1-0F62-4154-84BC-C31FE38E4677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spcb00pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83479550-BC03-4A96-9E60-0E9A981BAFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spcc00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3F7A0C-3DAA-4D5B-8E46-78CF54C7AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20b560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E8FBCA-B352-4259-8E07-867C530A6E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20b570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA5506F-7994-49EE-A879-4BC01C05E5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20b580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4A1C7F-1DB9-43DA-9EA3-6725D077E813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BE62A5-D6D2-4FD8-99D2-9320B05B4E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA524466-E64D-4966-8986-B025656FA2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA63795-7D8C-454F-A305-BC071AFDC420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E4EB18-43DE-43F1-82E4-8484865A6935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67401A45-ABB6-43B4-B67A-0A91D4F28432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A85755E-CE72-468C-8CF1-D32F04170901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E16E2E6-5E58-4C63-8FEE-7023DA57C670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA494A11-A2BC-43AD-A283-AC27EB503B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30b080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32365E97-F0E3-476D-B786-EB14F177EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30spc067t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16804E77-84B9-42B9-B2D6-AAB73D2A1C2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB744CB-EEEE-4987-99EB-B0BB0865A01B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19656C2-9FA9-4362-97EC-C0A89A21B2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B45D09-DB3F-4414-88BF-7486400FFDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C526D0-9638-4BF3-823E-48F758FD3B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9129C5-08E9-4689-8D19-478083484A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDCE428-7453-4259-AAD9-091F0CF1413E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D55FF1-6603-46D0-8E13-474549EF8A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56FF03DD-492E-486A-A478-D4808BAE72DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F288683-3029-49C0-BEA8-6E1D8290C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A8BF59-3685-43F2-A0A9-34A82728E84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20A8F0-D5B2-41C8-9034-0F85E23A8D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A739BF9A-48BA-4BB6-B933-171FE0F398D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D37F5B-6ED7-428C-B452-A3612B9A5D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2837EA-8DCA-4E7E-85CF-53ED0B786361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605B58F5-BB35-4C49-96A5-FF9301B79C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B172FF2-1004-4824-8A82-378B681705FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2F1E0C-0CC6-45F6-BAE8-6B80DC852029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6044A36A-B660-4096-B855-D2FFB4C49C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0EFF60-35FE-4EC1-B7FC-2428D48B1C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4779E4B0-A285-4C9C-AE3F-3939AA540680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A292DD8D-4B0E-40A4-B086-DA835873A7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6626D65B-343F-4790-9559-D3594D700B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B719F8F6-EC9A-4B88-9AFD-4EA7B28090C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A68A80-DDC8-43A0-ABF8-8137EFF2B3C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097FD179-EEED-4EB9-85E7-4038E6B2F2C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5314EB9C-9146-4C60-BF66-9500758369EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C39939-5841-431D-969B-92DB75C4E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8712A1-DBE4-4DD0-9599-5C013370364D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE12D48-BDF3-40E1-803C-4E2A221CE8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E40C34-A2D4-4D7A-BE1C-810DD28DB79F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD92023-F342-4588-BAE2-F25CD0FDC2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425CE7D8-7D23-4888-A26A-E7A525D25D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA493790-6452-4EBD-ABA4-8CC2AE4523C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E71665B-85F4-4914-812E-8E763FD5E9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32747682-E8C2-450D-BE34-A427442C6A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBEE4A4-0D51-4845-83DD-EE326F227150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E656A39-4954-442B-83C2-587B78702C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13BEC8-7124-4DA2-9B61-8B1848F33C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB3DB2-810A-4FB2-BE52-9694824F90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AFB31-BF50-4AAA-AD42-309C86C0A9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E11E0F5-C34B-4745-B6F0-8DF3522FA15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D02AA-1B42-4B4E-BB7B-0B063DE5F2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E5A0D4-E459-4230-94DB-E94946425071"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C8433-FEA5-4784-8C0A-174C677AD50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F48D7B-BAAB-46F8-A428-5EC68EC34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D177F9-8A65-4E1F-9576-D03171336510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38671934-B566-4A73-9C97-C0236D4EEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382868EB-07B6-448B-AF15-8C66046C9422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75CBAE-59AC-4290-989E-8897B7FFE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71366A4-11F7-42F6-A1C7-A3D3E38E0ACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5547844C-BEDD-4819-8080-832AF545E80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C3A8D6-39E4-4C40-932C-39E26E8826F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F23F7-CD43-4C33-B08A-72D34DF152BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2630F664-C5D1-4E38-9ABC-C5EEC0E61B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc502t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3301DA-A791-4FB1-A875-4F024B84446C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AF9B11-C3EE-482C-AD20-7482C87EDEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2027FA-F73C-4769-9404-F6CFF8F36120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC82CFB2-6CBD-47FE-9A9F-66B3FF36EFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC7E5EE-0F99-4089-ABF8-709D15AA4B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD64645-CD8A-4FE3-9C28-E6001F210F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06047C06-B5D8-4495-A5E8-03FBC65AE2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18152B19-FD04-4983-B18A-0E362E8158F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592AC67D-2210-46A4-9BB2-DA04C67E171B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE6C6E-BDF3-4841-9836-4C81A41F2129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F0893C-8D47-43D7-A69B-E16F77E0F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA427C8-B75F-4C98-BCBF-5588409CDD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305174D3-15DE-4BAC-8AA6-699E487DDA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r001c06b020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE13570-E4B2-4653-8BF0-3BD17D9E3F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00b026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF961E38-2607-4BE9-AAC7-A1D0EA70F362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00b027:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C900D770-13A0-4E95-BAE3-F8B628FA57B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00b028:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B5F65B-0445-4A41-BFA0-80683E962B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00b029:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58546B7C-E504-45F2-8090-D0999E66AAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc100b022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54AA1AE-220D-487C-8334-3735F0281E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc100b022sp01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770DF23A-9A7F-46A6-A484-8DF6248591CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc100b023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1976E836-D654-44BF-B728-BE49AE17A58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc100b024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDAC22E-240E-4B94-877C-3E0C7D384CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc100b025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F88D3C-2439-4B92-8765-234D52BEF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc101t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAA4015-C51F-4D59-8948-4E55D7854346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6753A5A-A0EE-4A88-8294-D40CB47F029B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB67C3FC-C4DA-409E-8020-54A7DA6D7E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EE5D80-938B-40BB-83D6-6A86F5C61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1E2178-E20B-4429-A3E5-01DA4057B9A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B55AEFB-2EA2-40C3-9D22-399EFA7829C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B35E57-A796-4B2E-A59E-7FA2410C542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB025223-5E20-43AA-956E-31550012D839"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03b013sp02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCC4FFA-7667-4C15-931F-DDE0A906ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03b013sp03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684699EA-D32E-4E33-BAE5-95DD1125EC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03b013sp04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBB7D41-217D-4499-90F3-E8F196A13D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0069A6-C44E-4437-82C6-CB3A276DC0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc100b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC293B4-ABCC-4A81-B2B4-838D3C654F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc100b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C79C9C-83AC-4A60-9424-0687975B1891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7590CB38-B8E7-41C6-A2E3-29C6B5EE044B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc200t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03B297C-FD3D-42B9-A912-8A45E4CD2E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3ABDFA-156D-4C26-B1B5-A443E7550E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5DCC1E-D02D-4AFD-B2C5-4DAF527609EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621CCEC0-A80E-4838-B246-1F955AB35EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1767A728-DD4D-4BEC-8177-7295DB246E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc600t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCFF996-B22A-4805-853F-EEA57A69B2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E568A07-DD57-40AE-883E-3DE3B0CED74B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D4F8-2BAF-42EF-BB4F-9B114DA729D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034865C2-C8A1-4FB9-BDE8-7B05C9B47F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F467A7FC-B0F2-454C-825F-A9A685F8F9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527370A7-4361-43D7-9B0C-1EC3658436A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03spcc00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8124C805-982B-422C-BCEB-BEEC1B6A883B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEABC547-7345-4DEB-99DB-5EDAB2C8B7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02spc100b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEAE18E9-0FCC-4A65-B121-036186DE14C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E40DF15-0B29-42BD-88EC-7F5A19796690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271BFB9-7655-44D8-BF5C-AAEB5B191C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b015sp03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18627C53-7136-434E-AAAC-0E91714597EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03lgwl01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3544AA-D3C3-4B79-B102-AF8C8DB8FDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03lgwl01spc100b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C00440-F202-43C2-9FE1-D7B1B46BA0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF1DB39-2C29-4102-A824-2ABA83A9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC70FD7-4016-431C-85E3-61BD65456D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A35CBC6-A794-4629-A30A-A36961DB0EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818663EA-DF77-4C97-BBD6-B2CFCB528124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F37C402-C5B8-44D9-9C46-2E8CA5601F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9159B699-1785-4B78-81E7-0B2C06914663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE20FF5-BCFC-4875-9D8F-D629CFE23F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA6963D-FD64-41E7-854E-E8A1D1933BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17152",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.657",
      "lastModified" : "2024-11-21T03:17:35.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds write vulnerability due to insufficient input validation. An attacker could exploit it to craft special packets to trigger out-of-bounds memory write, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "IKEv2 en Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078 y V500R001C20SPC300PWE tiene una vulnerabilidad de escritura fuera de límites debido a una validación de entradas insuficiente. Un atacante podría aprovecharse de esto para manipular paquetes y desencadenar una escritura en memoria fuera de límites, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF0D589-9465-4EE0-AD03-F21217A2F22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C914-D0C3-43E1-AA41-A7ACE64D888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C87357-07E0-4982-AFFC-D7699CDB34DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45E268-47AA-4C00-B605-F4BDF6FCE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014FEFD-60EF-4E8A-86E7-78D45CE3B199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3164827A-5A1A-43D3-B533-EA573F2B9A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57613658-FDB2-45FE-B063-3EEA5C4C3B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD32B6-9778-4095-A607-EFC61BC935AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E93DD-62EC-4591-9FB0-E66659599751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0443AE6A-5A62-42DB-93D3-00BA211E761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD9CA31-F5D3-474A-BA42-9B01D9F9D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA82768F-5CBA-469E-9004-07F2A95878EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E1D99F-BD6F-4DDD-BDBC-13D23F0E40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966F8527-58F0-4B6B-93D2-53433F98B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308B172-E4C7-42CC-972E-4E4AF129EBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387A5FE-B6D6-46C8-A002-855FD109486C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7CDFB-990B-496C-9EB9-430F80C19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A18B5DE-9552-4C66-A674-47533719AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4772C8-9E09-4ABB-B75A-541CDB904F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881265DF-4D78-4837-A766-BE2E0B3CA334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45481EA3-AB06-4C71-8994-24688EA611F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440776E4-E48D-4932-AC89-DC9062BD63A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F6137-F546-4887-8538-88EBB7A400B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91226C06-9E48-493D-A2A4-2A7619C1AB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC1FB12-31EE-41DC-A3D1-0919E43100D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165D9537-2E98-4A20-BE9C-71EEEDEB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68837186-E482-40E9-8F40-75B2E0AA10D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFBC7B3-5886-4982-8200-8062236CB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01CA368-6476-49AB-8CE1-090F7DAA5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D493EC-C5C8-444B-BCA6-227D047AAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB63DB6A-7D35-4FD2-9707-C38098CB004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9975E43-DEAF-4738-AB02-EADA280D69E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1AB25-9A98-46F9-853C-574CDE7E6677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BBD592-7528-4CAA-AA4F-6A6B0BEC785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC740E-19B2-4F35-935D-56B87C73CA82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09239A0-8680-4485-B6B7-6565500DCB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68435D97-592E-4633-BE7D-E8C47D89CD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CD24E9-2CE1-4006-A281-90B4373CFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A4D97-365C-4259-9E54-77053798FD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19E9912-4CBD-4734-9E2F-F4262FDE7DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3880-BDBE-4CE1-8F9C-C2E488EC56E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B573FC8A-39A8-4256-97B7-1E85CA7260DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC9D0D-9AF8-42DE-8B40-DA4764FBC92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD2D344-EFF9-4EA8-B387-2C80FC70DC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0738D7-FDF6-4F3F-B24D-4558659F927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD6055-1957-476B-A4D0-977B41488256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CB65D-401E-4566-92E1-6434A1A9DC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327AC408-B751-4E73-B1E3-AFD5B9EA3DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E546CF7-8F50-4884-84E4-845E3AEEAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F637A262-F7CE-43E9-89DD-A3FA2D1A22B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA5F47-A215-40D5-A8F0-16FF8AF51FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A01CAB-F734-474E-B2D6-72CC4FAFD316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3048F85-AE72-4B2D-AC6B-314E6768D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9429428-8612-4845-97DD-BB21F536D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C6A570-E932-441A-ADA9-F2B8C3B76974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB40CB-963C-4BDE-B45C-F23708A37F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDF2D76-BDAB-4A3F-BD52-A04B8F8EA8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28D1553-532B-4A19-A3E4-2301DA1334B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095F561-6B8B-48F0-BF0E-11FDD8135AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B17639-2CB8-44B4-AF5F-E09567AFED37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E963401-E680-47C7-82CE-7F80254C5BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D888E88-D444-4BD5-AFEA-479EAC71E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40798CE9-F011-4A81-B299-9F15ED1C94E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B566B18-15AF-4D81-B708-4DF02B974208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8C8BA-20CE-4F4B-AB13-EDF7D53F6218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136C075A-0069-4CA3-9174-C17B538398EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBA56A-4786-4D70-A1C0-CE4FE7A5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CE9D09-77BB-4376-9067-44AD8F717E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D677E-F8A7-44D0-8001-3D7300241D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BE57A-F895-4A89-8265-768CF5B6B7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8FC65E-DD9E-4179-84D4-9BC78E70AC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97B8657-3BDF-44D2-B22A-D47BFD787D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C39533-D4AF-47CA-9EFD-8C69AA3E5B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC55D6F-A02A-4BE6-A25D-83C89BB3F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13593E94-606F-42EF-9253-4FED0F109B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B53D29-9848-43A1-948B-2F468BFBEDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C40FB-306E-4461-879D-F8BE8F4BC20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6E88F3-6B23-4868-8487-0A1172D10DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C078DB-743F-4E37-A435-8FF79DA908DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EE488E-AB7D-4945-8D97-37BF2CA14505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723D96F-7D16-4167-B3D8-382C6A59265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04B355-93F0-44FB-AAD4-33D91B19A55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC19D43-B5B6-41A5-A36E-C79F32695E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDFD04F-0B0F-43BC-AF5C-E78D0E001D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704C7C2-698A-4AC7-8578-33F17FC3A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB66A-59CA-493C-89F8-9DF2A310C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A19C8F-8767-491F-81A1-FB9D1A1C2836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E531FD6-E2D1-4D45-8D85-DC2F27821AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D267A3FE-A65D-4E0D-BA2B-32BFAE75BA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204D7B25-C780-4A26-BBFE-517BD9DC8F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98908E00-9D94-40E7-A239-29B290248E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F37D1-E22E-41D9-9D5C-C2D12B5A7F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB5C85-EBC7-45AB-893B-8BF994EBD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1060F94-E175-46D8-A38D-13AEBB0407BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850C9DD-4321-4B67-90F5-B14E4B3DC0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8DE068-7DDB-441E-91AF-F0B127F6C5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B8E60F-58F5-4B23-A97D-67E11B5668EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135C58D-652B-40FD-B8FB-ADEEF09E7590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17153",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.720",
      "lastModified" : "2024-11-21T03:17:35.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has a memory leak vulnerability due to memory release failure resulted from insufficient input validation. An attacker could exploit it to cause memory leak, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "IKEv2 en Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078 y V500R001C20SPC300PWE tiene una vulnerabilidad de fuga de memoria debido a un error de liberación de memoria derivado de una validación de entradas insuficiente. Un atacante podría aprovecharse de esto para provocar una fuga de memoria, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF0D589-9465-4EE0-AD03-F21217A2F22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C914-D0C3-43E1-AA41-A7ACE64D888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C87357-07E0-4982-AFFC-D7699CDB34DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45E268-47AA-4C00-B605-F4BDF6FCE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014FEFD-60EF-4E8A-86E7-78D45CE3B199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3164827A-5A1A-43D3-B533-EA573F2B9A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57613658-FDB2-45FE-B063-3EEA5C4C3B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD32B6-9778-4095-A607-EFC61BC935AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E93DD-62EC-4591-9FB0-E66659599751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0443AE6A-5A62-42DB-93D3-00BA211E761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD9CA31-F5D3-474A-BA42-9B01D9F9D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA82768F-5CBA-469E-9004-07F2A95878EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E1D99F-BD6F-4DDD-BDBC-13D23F0E40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966F8527-58F0-4B6B-93D2-53433F98B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308B172-E4C7-42CC-972E-4E4AF129EBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387A5FE-B6D6-46C8-A002-855FD109486C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7CDFB-990B-496C-9EB9-430F80C19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A18B5DE-9552-4C66-A674-47533719AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4772C8-9E09-4ABB-B75A-541CDB904F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881265DF-4D78-4837-A766-BE2E0B3CA334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45481EA3-AB06-4C71-8994-24688EA611F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440776E4-E48D-4932-AC89-DC9062BD63A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F6137-F546-4887-8538-88EBB7A400B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91226C06-9E48-493D-A2A4-2A7619C1AB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC1FB12-31EE-41DC-A3D1-0919E43100D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165D9537-2E98-4A20-BE9C-71EEEDEB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68837186-E482-40E9-8F40-75B2E0AA10D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFBC7B3-5886-4982-8200-8062236CB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01CA368-6476-49AB-8CE1-090F7DAA5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D493EC-C5C8-444B-BCA6-227D047AAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB63DB6A-7D35-4FD2-9707-C38098CB004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9975E43-DEAF-4738-AB02-EADA280D69E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1AB25-9A98-46F9-853C-574CDE7E6677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BBD592-7528-4CAA-AA4F-6A6B0BEC785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC740E-19B2-4F35-935D-56B87C73CA82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09239A0-8680-4485-B6B7-6565500DCB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68435D97-592E-4633-BE7D-E8C47D89CD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CD24E9-2CE1-4006-A281-90B4373CFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A4D97-365C-4259-9E54-77053798FD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19E9912-4CBD-4734-9E2F-F4262FDE7DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3880-BDBE-4CE1-8F9C-C2E488EC56E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B573FC8A-39A8-4256-97B7-1E85CA7260DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC9D0D-9AF8-42DE-8B40-DA4764FBC92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD2D344-EFF9-4EA8-B387-2C80FC70DC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0738D7-FDF6-4F3F-B24D-4558659F927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD6055-1957-476B-A4D0-977B41488256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CB65D-401E-4566-92E1-6434A1A9DC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327AC408-B751-4E73-B1E3-AFD5B9EA3DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E546CF7-8F50-4884-84E4-845E3AEEAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F637A262-F7CE-43E9-89DD-A3FA2D1A22B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA5F47-A215-40D5-A8F0-16FF8AF51FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A01CAB-F734-474E-B2D6-72CC4FAFD316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3048F85-AE72-4B2D-AC6B-314E6768D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9429428-8612-4845-97DD-BB21F536D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C6A570-E932-441A-ADA9-F2B8C3B76974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB40CB-963C-4BDE-B45C-F23708A37F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDF2D76-BDAB-4A3F-BD52-A04B8F8EA8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28D1553-532B-4A19-A3E4-2301DA1334B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095F561-6B8B-48F0-BF0E-11FDD8135AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B17639-2CB8-44B4-AF5F-E09567AFED37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E963401-E680-47C7-82CE-7F80254C5BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D888E88-D444-4BD5-AFEA-479EAC71E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40798CE9-F011-4A81-B299-9F15ED1C94E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B566B18-15AF-4D81-B708-4DF02B974208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8C8BA-20CE-4F4B-AB13-EDF7D53F6218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136C075A-0069-4CA3-9174-C17B538398EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBA56A-4786-4D70-A1C0-CE4FE7A5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CE9D09-77BB-4376-9067-44AD8F717E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D677E-F8A7-44D0-8001-3D7300241D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BE57A-F895-4A89-8265-768CF5B6B7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8FC65E-DD9E-4179-84D4-9BC78E70AC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97B8657-3BDF-44D2-B22A-D47BFD787D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C39533-D4AF-47CA-9EFD-8C69AA3E5B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC55D6F-A02A-4BE6-A25D-83C89BB3F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13593E94-606F-42EF-9253-4FED0F109B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B53D29-9848-43A1-948B-2F468BFBEDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C40FB-306E-4461-879D-F8BE8F4BC20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6E88F3-6B23-4868-8487-0A1172D10DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C078DB-743F-4E37-A435-8FF79DA908DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EE488E-AB7D-4945-8D97-37BF2CA14505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723D96F-7D16-4167-B3D8-382C6A59265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04B355-93F0-44FB-AAD4-33D91B19A55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC19D43-B5B6-41A5-A36E-C79F32695E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDFD04F-0B0F-43BC-AF5C-E78D0E001D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704C7C2-698A-4AC7-8578-33F17FC3A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB66A-59CA-493C-89F8-9DF2A310C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A19C8F-8767-491F-81A1-FB9D1A1C2836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E531FD6-E2D1-4D45-8D85-DC2F27821AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D267A3FE-A65D-4E0D-BA2B-32BFAE75BA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204D7B25-C780-4A26-BBFE-517BD9DC8F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98908E00-9D94-40E7-A239-29B290248E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F37D1-E22E-41D9-9D5C-C2D12B5A7F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB5C85-EBC7-45AB-893B-8BF994EBD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1060F94-E175-46D8-A38D-13AEBB0407BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850C9DD-4321-4B67-90F5-B14E4B3DC0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8DE068-7DDB-441E-91AF-F0B127F6C5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B8E60F-58F5-4B23-A97D-67E11B5668EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135C58D-652B-40FD-B8FB-ADEEF09E7590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17154",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.767",
      "lastModified" : "2024-11-21T03:17:35.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has a DoS vulnerability due to insufficient input validation. An attacker could exploit it to cause unauthorized memory access, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "IKEv2 en Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078 y V500R001C20SPC300PWE tiene una vulnerabilidad de denegación de servicio debido a una validación de entradas insuficiente. Un atacante podría aprovecharse de esto para provocar un acceso no autorizado a la memoria, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF0D589-9465-4EE0-AD03-F21217A2F22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C914-D0C3-43E1-AA41-A7ACE64D888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C87357-07E0-4982-AFFC-D7699CDB34DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45E268-47AA-4C00-B605-F4BDF6FCE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014FEFD-60EF-4E8A-86E7-78D45CE3B199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3164827A-5A1A-43D3-B533-EA573F2B9A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57613658-FDB2-45FE-B063-3EEA5C4C3B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD32B6-9778-4095-A607-EFC61BC935AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E93DD-62EC-4591-9FB0-E66659599751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0443AE6A-5A62-42DB-93D3-00BA211E761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD9CA31-F5D3-474A-BA42-9B01D9F9D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA82768F-5CBA-469E-9004-07F2A95878EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E1D99F-BD6F-4DDD-BDBC-13D23F0E40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966F8527-58F0-4B6B-93D2-53433F98B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308B172-E4C7-42CC-972E-4E4AF129EBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387A5FE-B6D6-46C8-A002-855FD109486C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7CDFB-990B-496C-9EB9-430F80C19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A18B5DE-9552-4C66-A674-47533719AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4772C8-9E09-4ABB-B75A-541CDB904F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881265DF-4D78-4837-A766-BE2E0B3CA334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45481EA3-AB06-4C71-8994-24688EA611F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440776E4-E48D-4932-AC89-DC9062BD63A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F6137-F546-4887-8538-88EBB7A400B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91226C06-9E48-493D-A2A4-2A7619C1AB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC1FB12-31EE-41DC-A3D1-0919E43100D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165D9537-2E98-4A20-BE9C-71EEEDEB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68837186-E482-40E9-8F40-75B2E0AA10D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFBC7B3-5886-4982-8200-8062236CB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01CA368-6476-49AB-8CE1-090F7DAA5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D493EC-C5C8-444B-BCA6-227D047AAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB63DB6A-7D35-4FD2-9707-C38098CB004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9975E43-DEAF-4738-AB02-EADA280D69E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1AB25-9A98-46F9-853C-574CDE7E6677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BBD592-7528-4CAA-AA4F-6A6B0BEC785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC740E-19B2-4F35-935D-56B87C73CA82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09239A0-8680-4485-B6B7-6565500DCB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68435D97-592E-4633-BE7D-E8C47D89CD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CD24E9-2CE1-4006-A281-90B4373CFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A4D97-365C-4259-9E54-77053798FD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19E9912-4CBD-4734-9E2F-F4262FDE7DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3880-BDBE-4CE1-8F9C-C2E488EC56E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B573FC8A-39A8-4256-97B7-1E85CA7260DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC9D0D-9AF8-42DE-8B40-DA4764FBC92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD2D344-EFF9-4EA8-B387-2C80FC70DC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0738D7-FDF6-4F3F-B24D-4558659F927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD6055-1957-476B-A4D0-977B41488256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CB65D-401E-4566-92E1-6434A1A9DC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327AC408-B751-4E73-B1E3-AFD5B9EA3DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E546CF7-8F50-4884-84E4-845E3AEEAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F637A262-F7CE-43E9-89DD-A3FA2D1A22B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA5F47-A215-40D5-A8F0-16FF8AF51FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A01CAB-F734-474E-B2D6-72CC4FAFD316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3048F85-AE72-4B2D-AC6B-314E6768D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9429428-8612-4845-97DD-BB21F536D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C6A570-E932-441A-ADA9-F2B8C3B76974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB40CB-963C-4BDE-B45C-F23708A37F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDF2D76-BDAB-4A3F-BD52-A04B8F8EA8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28D1553-532B-4A19-A3E4-2301DA1334B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095F561-6B8B-48F0-BF0E-11FDD8135AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B17639-2CB8-44B4-AF5F-E09567AFED37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E963401-E680-47C7-82CE-7F80254C5BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D888E88-D444-4BD5-AFEA-479EAC71E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40798CE9-F011-4A81-B299-9F15ED1C94E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B566B18-15AF-4D81-B708-4DF02B974208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8C8BA-20CE-4F4B-AB13-EDF7D53F6218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136C075A-0069-4CA3-9174-C17B538398EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBA56A-4786-4D70-A1C0-CE4FE7A5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CE9D09-77BB-4376-9067-44AD8F717E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D677E-F8A7-44D0-8001-3D7300241D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BE57A-F895-4A89-8265-768CF5B6B7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8FC65E-DD9E-4179-84D4-9BC78E70AC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97B8657-3BDF-44D2-B22A-D47BFD787D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C39533-D4AF-47CA-9EFD-8C69AA3E5B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC55D6F-A02A-4BE6-A25D-83C89BB3F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13593E94-606F-42EF-9253-4FED0F109B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B53D29-9848-43A1-948B-2F468BFBEDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C40FB-306E-4461-879D-F8BE8F4BC20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6E88F3-6B23-4868-8487-0A1172D10DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C078DB-743F-4E37-A435-8FF79DA908DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EE488E-AB7D-4945-8D97-37BF2CA14505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723D96F-7D16-4167-B3D8-382C6A59265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04B355-93F0-44FB-AAD4-33D91B19A55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC19D43-B5B6-41A5-A36E-C79F32695E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDFD04F-0B0F-43BC-AF5C-E78D0E001D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704C7C2-698A-4AC7-8578-33F17FC3A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB66A-59CA-493C-89F8-9DF2A310C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A19C8F-8767-491F-81A1-FB9D1A1C2836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E531FD6-E2D1-4D45-8D85-DC2F27821AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D267A3FE-A65D-4E0D-BA2B-32BFAE75BA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204D7B25-C780-4A26-BBFE-517BD9DC8F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98908E00-9D94-40E7-A239-29B290248E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F37D1-E22E-41D9-9D5C-C2D12B5A7F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB5C85-EBC7-45AB-893B-8BF994EBD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1060F94-E175-46D8-A38D-13AEBB0407BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850C9DD-4321-4B67-90F5-B14E4B3DC0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8DE068-7DDB-441E-91AF-F0B127F6C5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B8E60F-58F5-4B23-A97D-67E11B5668EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135C58D-652B-40FD-B8FB-ADEEF09E7590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17155",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.830",
      "lastModified" : "2024-11-21T03:17:35.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds memory access vulnerability due to incompliance with the 4-byte alignment requirement imposed by the MIPS CPU. An attacker could exploit it to cause unauthorized memory access, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "IKEv2 en Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078 y V500R001C20SPC300PWE tiene una vulnerabilidad de acceso a la memoria fuera de límites debido al incumplimiento del requerimiento de alineación de 4 bytes impuesto por la CPU de MIPS. Un atacante podría aprovecharse de esto para provocar un acceso no autorizado a la memoria, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF0D589-9465-4EE0-AD03-F21217A2F22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C914-D0C3-43E1-AA41-A7ACE64D888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C87357-07E0-4982-AFFC-D7699CDB34DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45E268-47AA-4C00-B605-F4BDF6FCE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014FEFD-60EF-4E8A-86E7-78D45CE3B199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3164827A-5A1A-43D3-B533-EA573F2B9A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57613658-FDB2-45FE-B063-3EEA5C4C3B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD32B6-9778-4095-A607-EFC61BC935AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E93DD-62EC-4591-9FB0-E66659599751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0443AE6A-5A62-42DB-93D3-00BA211E761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD9CA31-F5D3-474A-BA42-9B01D9F9D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA82768F-5CBA-469E-9004-07F2A95878EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E1D99F-BD6F-4DDD-BDBC-13D23F0E40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966F8527-58F0-4B6B-93D2-53433F98B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308B172-E4C7-42CC-972E-4E4AF129EBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387A5FE-B6D6-46C8-A002-855FD109486C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7CDFB-990B-496C-9EB9-430F80C19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A18B5DE-9552-4C66-A674-47533719AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4772C8-9E09-4ABB-B75A-541CDB904F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881265DF-4D78-4837-A766-BE2E0B3CA334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45481EA3-AB06-4C71-8994-24688EA611F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440776E4-E48D-4932-AC89-DC9062BD63A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F6137-F546-4887-8538-88EBB7A400B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91226C06-9E48-493D-A2A4-2A7619C1AB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC1FB12-31EE-41DC-A3D1-0919E43100D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165D9537-2E98-4A20-BE9C-71EEEDEB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68837186-E482-40E9-8F40-75B2E0AA10D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFBC7B3-5886-4982-8200-8062236CB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01CA368-6476-49AB-8CE1-090F7DAA5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D493EC-C5C8-444B-BCA6-227D047AAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB63DB6A-7D35-4FD2-9707-C38098CB004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9975E43-DEAF-4738-AB02-EADA280D69E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1AB25-9A98-46F9-853C-574CDE7E6677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BBD592-7528-4CAA-AA4F-6A6B0BEC785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC740E-19B2-4F35-935D-56B87C73CA82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09239A0-8680-4485-B6B7-6565500DCB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68435D97-592E-4633-BE7D-E8C47D89CD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CD24E9-2CE1-4006-A281-90B4373CFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A4D97-365C-4259-9E54-77053798FD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19E9912-4CBD-4734-9E2F-F4262FDE7DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3880-BDBE-4CE1-8F9C-C2E488EC56E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B573FC8A-39A8-4256-97B7-1E85CA7260DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC9D0D-9AF8-42DE-8B40-DA4764FBC92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD2D344-EFF9-4EA8-B387-2C80FC70DC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0738D7-FDF6-4F3F-B24D-4558659F927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD6055-1957-476B-A4D0-977B41488256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CB65D-401E-4566-92E1-6434A1A9DC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327AC408-B751-4E73-B1E3-AFD5B9EA3DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E546CF7-8F50-4884-84E4-845E3AEEAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F637A262-F7CE-43E9-89DD-A3FA2D1A22B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA5F47-A215-40D5-A8F0-16FF8AF51FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A01CAB-F734-474E-B2D6-72CC4FAFD316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3048F85-AE72-4B2D-AC6B-314E6768D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9429428-8612-4845-97DD-BB21F536D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C6A570-E932-441A-ADA9-F2B8C3B76974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB40CB-963C-4BDE-B45C-F23708A37F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDF2D76-BDAB-4A3F-BD52-A04B8F8EA8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28D1553-532B-4A19-A3E4-2301DA1334B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095F561-6B8B-48F0-BF0E-11FDD8135AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B17639-2CB8-44B4-AF5F-E09567AFED37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E963401-E680-47C7-82CE-7F80254C5BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D888E88-D444-4BD5-AFEA-479EAC71E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40798CE9-F011-4A81-B299-9F15ED1C94E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B566B18-15AF-4D81-B708-4DF02B974208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8C8BA-20CE-4F4B-AB13-EDF7D53F6218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136C075A-0069-4CA3-9174-C17B538398EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBA56A-4786-4D70-A1C0-CE4FE7A5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CE9D09-77BB-4376-9067-44AD8F717E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D677E-F8A7-44D0-8001-3D7300241D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BE57A-F895-4A89-8265-768CF5B6B7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8FC65E-DD9E-4179-84D4-9BC78E70AC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97B8657-3BDF-44D2-B22A-D47BFD787D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C39533-D4AF-47CA-9EFD-8C69AA3E5B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC55D6F-A02A-4BE6-A25D-83C89BB3F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13593E94-606F-42EF-9253-4FED0F109B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B53D29-9848-43A1-948B-2F468BFBEDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C40FB-306E-4461-879D-F8BE8F4BC20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6E88F3-6B23-4868-8487-0A1172D10DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C078DB-743F-4E37-A435-8FF79DA908DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EE488E-AB7D-4945-8D97-37BF2CA14505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723D96F-7D16-4167-B3D8-382C6A59265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04B355-93F0-44FB-AAD4-33D91B19A55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC19D43-B5B6-41A5-A36E-C79F32695E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDFD04F-0B0F-43BC-AF5C-E78D0E001D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704C7C2-698A-4AC7-8578-33F17FC3A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB66A-59CA-493C-89F8-9DF2A310C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A19C8F-8767-491F-81A1-FB9D1A1C2836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E531FD6-E2D1-4D45-8D85-DC2F27821AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D267A3FE-A65D-4E0D-BA2B-32BFAE75BA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204D7B25-C780-4A26-BBFE-517BD9DC8F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98908E00-9D94-40E7-A239-29B290248E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F37D1-E22E-41D9-9D5C-C2D12B5A7F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB5C85-EBC7-45AB-893B-8BF994EBD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1060F94-E175-46D8-A38D-13AEBB0407BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850C9DD-4321-4B67-90F5-B14E4B3DC0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8DE068-7DDB-441E-91AF-F0B127F6C5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B8E60F-58F5-4B23-A97D-67E11B5668EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135C58D-652B-40FD-B8FB-ADEEF09E7590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17156",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.877",
      "lastModified" : "2024-11-21T03:17:36.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds memory access vulnerability due to insufficient input validation. An attacker could exploit it to craft special packets to trigger out-of-bounds memory access, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "IKEv2 en Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078 y V500R001C20SPC300PWE tiene una vulnerabilidad de acceso a la memoria fuera de límites debido a una validación de entradas insuficiente. Un atacante podría aprovecharse de esto para manipular paquetes y desencadenar un acceso a la memoria fuera de límites, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF0D589-9465-4EE0-AD03-F21217A2F22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C914-D0C3-43E1-AA41-A7ACE64D888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C87357-07E0-4982-AFFC-D7699CDB34DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45E268-47AA-4C00-B605-F4BDF6FCE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014FEFD-60EF-4E8A-86E7-78D45CE3B199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3164827A-5A1A-43D3-B533-EA573F2B9A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57613658-FDB2-45FE-B063-3EEA5C4C3B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD32B6-9778-4095-A607-EFC61BC935AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E93DD-62EC-4591-9FB0-E66659599751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0443AE6A-5A62-42DB-93D3-00BA211E761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD9CA31-F5D3-474A-BA42-9B01D9F9D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA82768F-5CBA-469E-9004-07F2A95878EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E1D99F-BD6F-4DDD-BDBC-13D23F0E40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966F8527-58F0-4B6B-93D2-53433F98B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308B172-E4C7-42CC-972E-4E4AF129EBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387A5FE-B6D6-46C8-A002-855FD109486C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7CDFB-990B-496C-9EB9-430F80C19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A18B5DE-9552-4C66-A674-47533719AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4772C8-9E09-4ABB-B75A-541CDB904F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881265DF-4D78-4837-A766-BE2E0B3CA334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45481EA3-AB06-4C71-8994-24688EA611F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440776E4-E48D-4932-AC89-DC9062BD63A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F6137-F546-4887-8538-88EBB7A400B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91226C06-9E48-493D-A2A4-2A7619C1AB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC1FB12-31EE-41DC-A3D1-0919E43100D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165D9537-2E98-4A20-BE9C-71EEEDEB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68837186-E482-40E9-8F40-75B2E0AA10D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFBC7B3-5886-4982-8200-8062236CB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01CA368-6476-49AB-8CE1-090F7DAA5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D493EC-C5C8-444B-BCA6-227D047AAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB63DB6A-7D35-4FD2-9707-C38098CB004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9975E43-DEAF-4738-AB02-EADA280D69E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1AB25-9A98-46F9-853C-574CDE7E6677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BBD592-7528-4CAA-AA4F-6A6B0BEC785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC740E-19B2-4F35-935D-56B87C73CA82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09239A0-8680-4485-B6B7-6565500DCB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68435D97-592E-4633-BE7D-E8C47D89CD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CD24E9-2CE1-4006-A281-90B4373CFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A4D97-365C-4259-9E54-77053798FD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19E9912-4CBD-4734-9E2F-F4262FDE7DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3880-BDBE-4CE1-8F9C-C2E488EC56E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B573FC8A-39A8-4256-97B7-1E85CA7260DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC9D0D-9AF8-42DE-8B40-DA4764FBC92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD2D344-EFF9-4EA8-B387-2C80FC70DC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0738D7-FDF6-4F3F-B24D-4558659F927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD6055-1957-476B-A4D0-977B41488256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CB65D-401E-4566-92E1-6434A1A9DC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327AC408-B751-4E73-B1E3-AFD5B9EA3DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E546CF7-8F50-4884-84E4-845E3AEEAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F637A262-F7CE-43E9-89DD-A3FA2D1A22B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA5F47-A215-40D5-A8F0-16FF8AF51FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A01CAB-F734-474E-B2D6-72CC4FAFD316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3048F85-AE72-4B2D-AC6B-314E6768D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9429428-8612-4845-97DD-BB21F536D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C6A570-E932-441A-ADA9-F2B8C3B76974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB40CB-963C-4BDE-B45C-F23708A37F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDF2D76-BDAB-4A3F-BD52-A04B8F8EA8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28D1553-532B-4A19-A3E4-2301DA1334B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095F561-6B8B-48F0-BF0E-11FDD8135AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B17639-2CB8-44B4-AF5F-E09567AFED37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E963401-E680-47C7-82CE-7F80254C5BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D888E88-D444-4BD5-AFEA-479EAC71E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40798CE9-F011-4A81-B299-9F15ED1C94E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B566B18-15AF-4D81-B708-4DF02B974208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8C8BA-20CE-4F4B-AB13-EDF7D53F6218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136C075A-0069-4CA3-9174-C17B538398EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBA56A-4786-4D70-A1C0-CE4FE7A5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CE9D09-77BB-4376-9067-44AD8F717E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D677E-F8A7-44D0-8001-3D7300241D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BE57A-F895-4A89-8265-768CF5B6B7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8FC65E-DD9E-4179-84D4-9BC78E70AC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97B8657-3BDF-44D2-B22A-D47BFD787D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C39533-D4AF-47CA-9EFD-8C69AA3E5B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC55D6F-A02A-4BE6-A25D-83C89BB3F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13593E94-606F-42EF-9253-4FED0F109B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B53D29-9848-43A1-948B-2F468BFBEDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C40FB-306E-4461-879D-F8BE8F4BC20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6E88F3-6B23-4868-8487-0A1172D10DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C078DB-743F-4E37-A435-8FF79DA908DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EE488E-AB7D-4945-8D97-37BF2CA14505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723D96F-7D16-4167-B3D8-382C6A59265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04B355-93F0-44FB-AAD4-33D91B19A55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC19D43-B5B6-41A5-A36E-C79F32695E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDFD04F-0B0F-43BC-AF5C-E78D0E001D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704C7C2-698A-4AC7-8578-33F17FC3A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB66A-59CA-493C-89F8-9DF2A310C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A19C8F-8767-491F-81A1-FB9D1A1C2836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E531FD6-E2D1-4D45-8D85-DC2F27821AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D267A3FE-A65D-4E0D-BA2B-32BFAE75BA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204D7B25-C780-4A26-BBFE-517BD9DC8F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98908E00-9D94-40E7-A239-29B290248E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F37D1-E22E-41D9-9D5C-C2D12B5A7F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB5C85-EBC7-45AB-893B-8BF994EBD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1060F94-E175-46D8-A38D-13AEBB0407BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850C9DD-4321-4B67-90F5-B14E4B3DC0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8DE068-7DDB-441E-91AF-F0B127F6C5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B8E60F-58F5-4B23-A97D-67E11B5668EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135C58D-652B-40FD-B8FB-ADEEF09E7590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17157",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.923",
      "lastModified" : "2024-11-21T03:17:36.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds memory access vulnerability due to insufficient input validation. An attacker could exploit it to craft special packets to trigger out-of-bounds memory access, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "IKEv2 en Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078 y V500R001C20SPC300PWE tiene una vulnerabilidad de acceso a la memoria fuera de límites debido a una validación de entradas insuficiente. Un atacante podría aprovecharse de esto para manipular paquetes y desencadenar un acceso a la memoria fuera de límites, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF0D589-9465-4EE0-AD03-F21217A2F22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C914-D0C3-43E1-AA41-A7ACE64D888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C87357-07E0-4982-AFFC-D7699CDB34DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45E268-47AA-4C00-B605-F4BDF6FCE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014FEFD-60EF-4E8A-86E7-78D45CE3B199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3164827A-5A1A-43D3-B533-EA573F2B9A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57613658-FDB2-45FE-B063-3EEA5C4C3B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD32B6-9778-4095-A607-EFC61BC935AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E93DD-62EC-4591-9FB0-E66659599751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0443AE6A-5A62-42DB-93D3-00BA211E761A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD9CA31-F5D3-474A-BA42-9B01D9F9D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA82768F-5CBA-469E-9004-07F2A95878EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E1D99F-BD6F-4DDD-BDBC-13D23F0E40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966F8527-58F0-4B6B-93D2-53433F98B09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2308B172-E4C7-42CC-972E-4E4AF129EBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B387A5FE-B6D6-46C8-A002-855FD109486C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7CDFB-990B-496C-9EB9-430F80C19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A18B5DE-9552-4C66-A674-47533719AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4772C8-9E09-4ABB-B75A-541CDB904F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881265DF-4D78-4837-A766-BE2E0B3CA334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45481EA3-AB06-4C71-8994-24688EA611F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440776E4-E48D-4932-AC89-DC9062BD63A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909F6137-F546-4887-8538-88EBB7A400B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91226C06-9E48-493D-A2A4-2A7619C1AB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC1FB12-31EE-41DC-A3D1-0919E43100D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165D9537-2E98-4A20-BE9C-71EEEDEB4D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68837186-E482-40E9-8F40-75B2E0AA10D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFBC7B3-5886-4982-8200-8062236CB760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01CA368-6476-49AB-8CE1-090F7DAA5842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D493EC-C5C8-444B-BCA6-227D047AAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB63DB6A-7D35-4FD2-9707-C38098CB004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9975E43-DEAF-4738-AB02-EADA280D69E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1AB25-9A98-46F9-853C-574CDE7E6677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BBD592-7528-4CAA-AA4F-6A6B0BEC785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC740E-19B2-4F35-935D-56B87C73CA82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09239A0-8680-4485-B6B7-6565500DCB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68435D97-592E-4633-BE7D-E8C47D89CD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64CD24E9-2CE1-4006-A281-90B4373CFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A4D97-365C-4259-9E54-77053798FD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19E9912-4CBD-4734-9E2F-F4262FDE7DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3880-BDBE-4CE1-8F9C-C2E488EC56E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B573FC8A-39A8-4256-97B7-1E85CA7260DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DC9D0D-9AF8-42DE-8B40-DA4764FBC92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD2D344-EFF9-4EA8-B387-2C80FC70DC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0738D7-FDF6-4F3F-B24D-4558659F927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD6055-1957-476B-A4D0-977B41488256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CB65D-401E-4566-92E1-6434A1A9DC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327AC408-B751-4E73-B1E3-AFD5B9EA3DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E546CF7-8F50-4884-84E4-845E3AEEAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F637A262-F7CE-43E9-89DD-A3FA2D1A22B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA5F47-A215-40D5-A8F0-16FF8AF51FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A01CAB-F734-474E-B2D6-72CC4FAFD316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3048F85-AE72-4B2D-AC6B-314E6768D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9429428-8612-4845-97DD-BB21F536D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C6A570-E932-441A-ADA9-F2B8C3B76974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB40CB-963C-4BDE-B45C-F23708A37F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDF2D76-BDAB-4A3F-BD52-A04B8F8EA8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28D1553-532B-4A19-A3E4-2301DA1334B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095F561-6B8B-48F0-BF0E-11FDD8135AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B17639-2CB8-44B4-AF5F-E09567AFED37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E963401-E680-47C7-82CE-7F80254C5BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D888E88-D444-4BD5-AFEA-479EAC71E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40798CE9-F011-4A81-B299-9F15ED1C94E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B566B18-15AF-4D81-B708-4DF02B974208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F8C8BA-20CE-4F4B-AB13-EDF7D53F6218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136C075A-0069-4CA3-9174-C17B538398EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBA56A-4786-4D70-A1C0-CE4FE7A5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CE9D09-77BB-4376-9067-44AD8F717E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D677E-F8A7-44D0-8001-3D7300241D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87BE57A-F895-4A89-8265-768CF5B6B7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8FC65E-DD9E-4179-84D4-9BC78E70AC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97B8657-3BDF-44D2-B22A-D47BFD787D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C39533-D4AF-47CA-9EFD-8C69AA3E5B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC55D6F-A02A-4BE6-A25D-83C89BB3F1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13593E94-606F-42EF-9253-4FED0F109B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B53D29-9848-43A1-948B-2F468BFBEDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6C40FB-306E-4461-879D-F8BE8F4BC20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6E88F3-6B23-4868-8487-0A1172D10DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C078DB-743F-4E37-A435-8FF79DA908DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EE488E-AB7D-4945-8D97-37BF2CA14505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723D96F-7D16-4167-B3D8-382C6A59265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04B355-93F0-44FB-AAD4-33D91B19A55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC19D43-B5B6-41A5-A36E-C79F32695E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDFD04F-0B0F-43BC-AF5C-E78D0E001D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704C7C2-698A-4AC7-8578-33F17FC3A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAEB66A-59CA-493C-89F8-9DF2A310C4F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A19C8F-8767-491F-81A1-FB9D1A1C2836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E531FD6-E2D1-4D45-8D85-DC2F27821AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D267A3FE-A65D-4E0D-BA2B-32BFAE75BA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204D7B25-C780-4A26-BBFE-517BD9DC8F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98908E00-9D94-40E7-A239-29B290248E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F37D1-E22E-41D9-9D5C-C2D12B5A7F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB5C85-EBC7-45AB-893B-8BF994EBD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1060F94-E175-46D8-A38D-13AEBB0407BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B850C9DD-4321-4B67-90F5-B14E4B3DC0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8DE068-7DDB-441E-91AF-F0B127F6C5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B8E60F-58F5-4B23-A97D-67E11B5668EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135C58D-652B-40FD-B8FB-ADEEF09E7590"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17159",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:01.970",
      "lastModified" : "2024-11-21T03:17:36.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01 y NTS-AL00C00B535 tienen una vulnerabilidad de denegación de servicio (DoS) debido a una validación de entradas insuficiente. Un atacante no autenticado podría enviar mensajes SI (System Information) a los smartphones en el rango de radio por medio de un dispositivo inalámbrico especial. La explotación exitosa de esta vulnerabilidad puede provocar el reinicio del smartphone.</"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-al10c00b386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA661-6E9F-41AE-90E4-A6A7A8020B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-cl00c92b386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62251E4-B231-475C-A05D-C313FC903F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-dl00c17b386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BAB4BA7-E393-4393-84F5-A17096D98A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-tl00c01b386sp01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8972C3-53D2-413B-A1E3-E1EA92CAED2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mt8-emui4.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAACD61-C2A8-4C6B-BABF-503B732D7ACB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nts-al00_firmware:nts-al00c00b535:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A67583F-687E-4F3F-9B34-9016C68985DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nts-al00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B9A942-4791-4B65-9EB7-8E52F6C3A25A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17160",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.017",
      "lastModified" : "2024-11-21T03:17:36.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, NetEngine16EX V200R006C10, V200R007C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, SRG2300 V200R006C10, V200R007C00, V200R007C02, SRG3300 V200R006C10, V200R007C00 have a buffer overflow vulnerability due to incomplete range checks of the input data. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious IKE packets to the targeted device. An exploit could allow the attacker to cause the device to write out of bound and restart."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, NetEngine16EX V200R006C10, V200R007C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, SRG2300 V200R006C10, V200R007C00, V200R007C02, SRG3300 V200R006C10 y V200R007C00 tienen una vulnerabilidad de desbordamiento de búfer debido a las comprobaciones de rango incompletas de los datos de entrada. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando paquetes IKE maliciosos al dispositivo objetivo. Una explotación podría permitir que el atacante provoque que el dispositivo escriba fuera de límites y se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-ike-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-ike-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17161",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.063",
      "lastModified" : "2024-11-21T03:17:36.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'Find Phone' function in some Huawei smart phones with software earlier than Duke-L09C10B186 versions, earlier than Duke-L09C432B187 versions, earlier than Duke-L09C636B186 versions has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally."
      }, {
        "lang" : "es",
        "value" : "La función \"Find Phone\" en algunos smartphones Huawei con software en versiones anteriores a Duke-L09C10B186, Duke-L09C432B187 y Duke-L09C636B186 tiene una vulnerabilidad de omisión de autenticación. Esto se debe a la realización indebida de la autenticación en la función \"Find Phone\". Un atacante podría explotar esta vulnerabilidad para omitir la función \"Find Phone\" y emplear el teléfono de forma normal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:duke-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-l09c10b186",
            "matchCriteriaId" : "56BAE6F2-6A4C-4895-809B-7BC0C5AF81AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:duke-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF74374-C6A1-4D04-915B-B23E3C9AC2FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:duke-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-l09c432b187",
            "matchCriteriaId" : "5D031688-BAB3-4D49-AC49-29B9218BC326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:duke-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF74374-C6A1-4D04-915B-B23E3C9AC2FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:duke-l09_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "duke-l09c636b186",
            "matchCriteriaId" : "997FF290-B213-4A51-8ACF-E0D254D337F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:duke-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF74374-C6A1-4D04-915B-B23E3C9AC2FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17162",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.110",
      "lastModified" : "2024-11-21T03:17:36.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 tienen una vulnerabilidad de fuga de memoria debido a que la memoria no se libera cuando un atacante local autenticado ejecuta comandos especiales muchas veces. Un atacante podría aprovecharse de esto para provocar una fuga de memoria, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CEF009-33BC-4F61-9C43-F01BE6DE87F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA7BE1F-853E-4CBA-8A90-BAEA0BCC6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7412661D-D8CB-4F2C-ADDF-C4D3358E94CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A5E70C-79F7-49DF-A621-01965486E295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BF5257-8CD1-4951-9C53-07B85D468F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C986370-A4E1-4EA0-BA3E-122F4D16D3F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-firewall-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-firewall-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17163",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.157",
      "lastModified" : "2024-11-21T03:17:37.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Huawei Secospace USG6600 V500R001C30SPC100 tiene una vulnerabilidad de acceso a la memoria fuera de límites debido a una verificación insuficiente. Un atacante local autenticado puede provocar que el proceso se cierre inesperadamente mediante la ejecución de algunos comandos. El atacante puede explotar esta vulnerabilidad para provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CEF009-33BC-4F61-9C43-F01BE6DE87F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-firewall-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-firewall-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17164",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.203",
      "lastModified" : "2024-11-21T03:17:37.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacker could exploit it to cause memory leak, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "Huawei Secospace AntiDDoS8000 V500R001C20SPC500 tiene una vulnerabilidad de fuga de memoria debido a que la memoria no se libera cuando el sistema abre algunas funciones. Un atacante podría aprovecharse de esto para provocar una fuga de memoria, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c20spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2E6F99-BCED-41D3-A0CF-0960231A6681"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_antiddos8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE75ACF-D29C-4846-932D-FB9C84E1D35F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-antidos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-antidos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17165",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.250",
      "lastModified" : "2024-11-21T03:17:37.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S2700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5300 V200R003C00, V200R003C00SPC300T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R005C05, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5700 V200R003C00, V200R003C00SPC316T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S600-E V200R008C00, V200R009C00, S6300 V200R003C00, V200R005C00, V200R007C00, V200R008C00, V200R009C00, S6700 V200R003C00, V200R005C00, V200R005C01, V200R005C02, V200R007C00, V200R008C00, V200R009C00 has an out-of-bounds read vulnerability. An unauthenticated attacker may send crafted malformed IPv6 packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause device to reset."
      }, {
        "lang" : "es",
        "value" : "La función IPv6 en Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S2700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5300 V200R003C00, V200R003C00SPC300T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R005C05, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5700 V200R003C00, V200R003C00SPC316T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S600-E V200R008C00, V200R009C00, S6300 V200R003C00, V200R005C00, V200R007C00, V200R008C00, V200R009C00, S6700 V200R003C00, V200R005C00, V200R005C01, V200R005C02, V200R007C00, V200R008C00 y V200R009C00 tiene una vulnerabilidad de lectura fuera de límites. Un atacante no autenticado podría enviar paquetes mal formados IPv6 manipulados a los productos afectados. Dada la verificación insuficiente de los paquetes, una explotación exitosa podría hacer que el dispositivo se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:quidway_s2700_firmware:v200r003c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E7609-C571-4153-AF1F-120B2DE2E7FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:quidway_s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5853F5-8FEB-4B7E-9303-4BB25BE292F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:quidway_s5300_firmware:v200r003c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3FED39-7AA4-4F95-804E-906CEBFED132"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:quidway_s5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C872196-628D-42A2-AC58-69CD8784CE5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:quidway_s5700_firmware:v200r003c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4323CCE-DD88-4955-8D80-30D7A6733C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:quidway_s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E83E3A8-C28D-437E-AC09-153B8A2FD14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6CC00C-1056-426B-9828-1A886F2C8D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r003c00spc300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2309FEA1-08EF-4D7C-A696-A9A38E6AEDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C82DA6-8D95-45D2-B54C-CFE1AA9CC1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F982369-1A22-4F39-90AD-ABB824845774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FA2FDA-DB2D-47D9-8017-0E5D4EC8D620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40EFA43-E71F-464D-829C-8D4C60A57765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2300_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C946DD64-C69E-4806-850C-D956D96CDE08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17566603-275F-4E6B-B5D9-4A716EEC03DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED7DFC5-846F-4F90-91A8-13E9E805C9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193FCE7A-C793-446B-9C39-20597FA7BC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F69BC3-E6C0-4E70-AC13-D79D840579DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD601FFF-E623-4ADC-B286-D11B8004D7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c00spc300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BED3B4C-4656-4676-97BE-EE5012F73FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922D09A3-AC4E-4CAE-8737-5E3A8EB4F269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5A6744-9B7F-4FF4-BE1B-AB6E6249ECE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EAEF900-7C8C-4569-B74B-A802F951CC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2B09C5-81F1-48B4-940D-6DFD06200139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC356D3-F015-46A0-8F7A-1C594F19535B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r005c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4676DD73-3F04-4327-842A-1FCB6CB7650D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r005c05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E6A13C-2E5B-4130-BD37-5521852AFEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C2E728-E8F2-461D-A069-4BEC88B94FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6B13D4-07F3-4CB5-8194-89781E685A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5454BC21-A04F-4B3D-8533-2414B6E1BC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5300_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F31814D-5879-4FB9-BDAE-01CFC75D9AF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFEF08E-54C5-4D60-AFF0-37B00D6E2DDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4907FBB8-5157-460D-9240-DD7D610C0FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00spc316t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B32A0A-E35B-438E-A666-54700EF2ED69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6F9128-F253-4EAC-84B1-93DC8F40C3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2898D6C5-77AB-4C1F-8134-B2DBD13EDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF23DAE-1215-41B2-88C5-4436D846266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64CA8E2-AF04-42B3-8E26-2EF379703B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB33B908-085C-43C6-B8B7-25BBF3614C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B18ABC1-A970-472A-A8BF-934D1180930E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s600-e_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299234CD-AD78-4C53-8B7E-C0B22681ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s600-e_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40ADCF0-4FE9-492E-B34A-69BEF6DEAFE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s600-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E02D610-AB78-476B-9049-FDB66D9E9907"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C330A14-C941-4B28-AA9C-B78A96A9011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6818ECD-730B-40D6-9108-B8540CC4BF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5811970-FE82-4888-A01D-B356B5578296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "939C73D9-E0E9-47A5-970E-6C84F5ECD2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6300_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39BBA0F-8EB9-40BA-B8DF-5C735F2216A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3C8988-A1FC-4B04-9134-F2BDDADEAFB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4979AA8-0D8E-4F37-A7DC-709BE4821D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AC16A-8F4E-4709-A3B4-DE74FFB91130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4AF711-D921-4261-A459-2A0780EA951F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-02-ipv6-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-02-ipv6-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17166",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.297",
      "lastModified" : "2024-11-21T03:17:37.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a resource exhaustion vulnerability. The software does not process certain field of H.323 message properly, a remote unauthenticated attacker could send crafted H.323 message to the device, successful exploit could cause certain service unavailable since the stack memory is exhausted."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00 y V500R002C10 tienen una vulnerabilidad de agotamiento de recursos. El software no procesa ciertos campos de los mensajes H.323 correctamente, por lo que un atacante no autenticado podría enviar mensajes H.323 manipulados al dispositivo. Esto provocaría que ciertos servicios no estén disponibles ya que la memoria de la pila está agotada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17182",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.347",
      "lastModified" : "2024-11-21T03:17:39.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a process."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 tienen una vulnerabilidad de lectura fuera de límites. Dada la validación de entradas insuficiente, un atacante autenticado remoto podría enviar paquetes SOAP mal formados al dispositivo objetivo. Una explotación con éxito podría hacer que el dispositivo acceda a la memoria inválida y reinicie un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17183",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.393",
      "lastModified" : "2024-11-21T03:17:39.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de enteros. Dada la validación de entradas insuficiente, un atacante autenticado remoto podría enviar paquetes SOAP mal formados al dispositivo objetivo. Una explotación con éxito podría provocar un desbordamiento de enteros y podría reiniciar un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17184",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.440",
      "lastModified" : "2024-11-21T03:17:39.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de enteros. Dada la validación de entradas insuficiente, un atacante autenticado remoto podría enviar paquetes SOAP mal formados al dispositivo objetivo. Una explotación con éxito podría provocar un desbordamiento de enteros y podría reiniciar un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17185",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.487",
      "lastModified" : "2024-11-21T03:17:39.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a process."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 tienen una vulnerabilidad de lectura fuera de límites. Dada la validación de entradas insuficiente, un atacante autenticado remoto podría enviar paquetes SOAP mal formados al dispositivo objetivo. Una explotación con éxito podría hacer que el dispositivo acceda a la memoria inválida y reinicie un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17186",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.533",
      "lastModified" : "2024-11-21T03:17:39.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a DoS vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make some data overwritten, leak device memory and potentially reset a process."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de denegación de servicio. Dada la validación de entradas insuficiente, un atacante autenticado remoto podría enviar paquetes SOAP mal formados al dispositivo objetivo. Una explotación con éxito podría hacer que algunos datos se sobrescriban, que la memoria del dispositivo se filtre y que se pueda reiniciar un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17187",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.580",
      "lastModified" : "2024-11-21T03:17:39.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de enteros. Dada la validación de entradas insuficiente, un atacante autenticado remoto podría enviar paquetes SOAP mal formados al dispositivo objetivo. Una explotación con éxito podría provocar un desbordamiento de enteros y podría reiniciar un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17201",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.627",
      "lastModified" : "2024-11-21T03:17:40.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some huawei smartphones with software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 have a DoS vulnerability. Due to insufficient input validation, an attacker could trick a user to execute a malicious application, which could be exploited by attacker to launch DoS attacks."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160 y MHA-AL00AC00B125 tienen una vulnerabilidad de DoS. Dada la validación insuficiente de entradas, un atacante podría engañar a un usuario para que ejecute una aplicación maliciosa, que podría ser aprovechada para iniciar ataques de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:btv-emui5.0_firmware:btv-dl09c233b350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5562C702-A701-4D63-B3B0-82864E6925BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:btv-emui5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B690891F-C103-4FF1-BDF2-963B16707719"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l21hnc432b360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921A5DE3-FDFA-4EF9-9533-BEA5241EA61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l22hnc636b360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF4C520-4467-435C-9BA2-90BF15935027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l24hnc567b360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B57B48B-4F7F-442B-813D-0521E558DCB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-emui5.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387CFA7F-8E93-4D3F-84CF-1810BA0E6043"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c10b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D190578-F8E6-42A0-81B4-C33AC051370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c185b132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E4D965-4133-4EF2-80FA-0F3A8D3FBD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c464b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73F0353-83BA-4401-A451-473FD4900206"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C723516F-04EB-48E5-9057-7FB1DACB5D28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c346b140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3639B382-6447-4324-B692-3A214F8DE4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c636b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD33173D-04F8-42B5-845A-649BE0BC1FE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l22:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1D3863-B8D9-4D1B-BA06-C88E65FFF74F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23c605b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D149B33F-FDEE-40C6-BC7E-463F53A443F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23domc109b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEDF1D0-E543-4B80-9781-150ABD93E534"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA727F8-6B56-43B2-A7A1-D143CB966244"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mha-al00a_firmware:mha-al00ac00b125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6E9E44-6FFA-481E-8CDE-E8F13A7D6D37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mha-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987F6D9F-B6FB-4A78-A4A1-9B37424D73A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-dos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-dos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17202",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.673",
      "lastModified" : "2024-11-21T03:17:40.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated, remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a service to be unavailable."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 tienen una vulnerabilidad de lectura fuera de límites debido a una validación de entradas insuficiente. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando paquetes SIP (Session Initiation Protocol) maliciosos al dispositivo objetivo. Una explotación con éxito podría hacer que el dispositivo lea fuera de límites y, por lo tanto, haga que un servicio no esté disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81E2517-263C-4B59-9D28-A3DE98289B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4045CC4E-3B44-4E32-A04F-39C8572921B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7D76DA-E30F-4071-807B-DED30596CD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A3CE39-6AC0-45E4-94B0-535AA92DAAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01485D20-8F48-4D48-9242-95CD59069023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABEF8DE-D6CA-45DD-B10E-C3FFB5B82FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A87025-03BE-4671-9687-85510E9AE4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325B983-F920-4006-8F3B-738B1B4EBEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272E6F06-9FAF-421B-8E87-7F1F1705B598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA6C55E-DF1F-475D-B1E9-C09CF8278276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D96DF6-070E-44A1-837C-8690859960B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D01E86-0F60-4A99-8E48-15B0B0BF3678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25185C6-3F8D-4D86-84D9-4D81A3DF5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E586B837-E86A-4B3E-8701-3C92123F9FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17283",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.703",
      "lastModified" : "2024-11-21T03:17:44.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00 have an out-of-bound read vulnerability. A remote attacker send specially crafted Session Initiation Protocol (SIP) messages to the affected products. Due to insufficient input validation, successful exploit will cause some services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de lectura fuera de límites. Un atacante remoto envía mensajes SIP (Session Initiation Protocol) especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente, una explotación con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-02-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-02-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17284",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.767",
      "lastModified" : "2024-11-21T03:17:44.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00 have a resource management error vulnerability. A remote attacker may send huge number of specially crafted SIP messages to the affected products. Due to improper handling of some value in the messages, successful exploit will cause some services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de error de gestión de recursos. Un atacante remoto podría enviar un gran número de mensajes SIP especialmente manipulados a los productos afectados. Dada la gestión indebida de algunos valores en los mensajes, la explotación con éxito podría provocar que algunos servicios funcionen erróneamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-02-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-02-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17285",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.813",
      "lastModified" : "2024-11-21T03:17:45.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow. Successful exploit may cause code execution."
      }, {
        "lang" : "es",
        "value" : "El módulo Bluetooth en algunos teléfonos móviles Huawei con software LON-AL00BC00B229 y anteriores tiene una vulnerabilidad de desbordamiento de búfer. Dada la validación de entradas insuficiente, un atacante no autenticado podría manipular los mensajes AVDTP/AVCTP Bluetooth tras el emparejamiento exitoso, lo que provocaría un desbordamiento de búfer. Una explotación con éxito podría provocar la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:lon-al00b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "lon-al00bc00b229",
            "matchCriteriaId" : "D4DE7235-8357-4368-8485-F09E7E3AC660"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:lon-al00b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2919FA-046B-49BC-9DDA-2BB499D33DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180129-01-bluetooth-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180129-01-bluetooth-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17286",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.860",
      "lastModified" : "2024-11-21T03:17:45.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bound write vulnerability. Due to insufficient input validation, a remote, unauthenticated attacker may craft encryption key to the affected products. Successful exploit may cause buffer overflow, services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 tienen una vulnerabilidad de escritura fuera de límites. Dada una validación de entradas insuficiente, un atacante remoto no autenticado podría manipular la clave de cifrado de los productos afectados. Una explotación con éxito podría provocar un desbordamiento de búfer y el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81E2517-263C-4B59-9D28-A3DE98289B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4045CC4E-3B44-4E32-A04F-39C8572921B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7D76DA-E30F-4071-807B-DED30596CD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A3CE39-6AC0-45E4-94B0-535AA92DAAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01485D20-8F48-4D48-9242-95CD59069023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABEF8DE-D6CA-45DD-B10E-C3FFB5B82FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A87025-03BE-4671-9687-85510E9AE4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325B983-F920-4006-8F3B-738B1B4EBEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272E6F06-9FAF-421B-8E87-7F1F1705B598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA6C55E-DF1F-475D-B1E9-C09CF8278276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D96DF6-070E-44A1-837C-8690859960B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D01E86-0F60-4A99-8E48-15B0B0BF3678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25185C6-3F8D-4D86-84D9-4D81A3DF5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E586B837-E86A-4B3E-8701-3C92123F9FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17287",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.907",
      "lastModified" : "2024-11-21T03:17:45.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bound read vulnerability in some Huawei products. Due to insufficient input validation, a remote, unauthenticated attacker may send crafted signature to the affected products. Successful exploit may cause buffer overflow, services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 tienen una vulnerabilidad de lectura fuera de límites en algunos productos Huawei. Dada una validación de entradas insuficiente, un atacante remoto no autenticado podría enviar una firma manipulada a los productos afectados. Una explotación con éxito podría provocar un desbordamiento de búfer y el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81E2517-263C-4B59-9D28-A3DE98289B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4045CC4E-3B44-4E32-A04F-39C8572921B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7D76DA-E30F-4071-807B-DED30596CD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A3CE39-6AC0-45E4-94B0-535AA92DAAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01485D20-8F48-4D48-9242-95CD59069023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABEF8DE-D6CA-45DD-B10E-C3FFB5B82FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A87025-03BE-4671-9687-85510E9AE4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325B983-F920-4006-8F3B-738B1B4EBEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272E6F06-9FAF-421B-8E87-7F1F1705B598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA6C55E-DF1F-475D-B1E9-C09CF8278276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D96DF6-070E-44A1-837C-8690859960B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D01E86-0F60-4A99-8E48-15B0B0BF3678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25185C6-3F8D-4D86-84D9-4D81A3DF5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E586B837-E86A-4B3E-8701-3C92123F9FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17288",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:02.953",
      "lastModified" : "2024-11-21T03:17:45.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. An unauthenticated, remote attacker may send specially crafted messages to the affected products. Due to insufficient input validation, successful exploit may cause integer overflow and some process abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de desbordamiento de enteros. Un atacante remoto no autenticado podría enviar mensajes especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente, una explotación con éxito podría provocar un desbordamiento de enteros y el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-integer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-integer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17289",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.017",
      "lastModified" : "2024-11-21T03:17:45.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. The software does not release allocated memory properly when handling XML data. An authenticated, local attacker could upload crafted XML file repeatedly to cause memory leak and service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de fuga de memoria. El software no libera la memoria asignada correctamente al gestionar los datos XML. Un atacante local autenticado podría subir archivos XML manipulados repetidamente para provocar una fuga de memoria y el funcionamiento erróneo del servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17290",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.063",
      "lastModified" : "2024-11-21T03:17:45.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Light Directory Access Protocol (LDAP) clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by controlling the LDAP server. Due to improper management of LDAP connection resource, a successful exploit may cause the connection resource exhausted of the LDAP client."
      }, {
        "lang" : "es",
        "value" : "Los clientes Light Directory Access Protocol (LDAP) de Huawei TE60 con software V600R006C00 y ViewPoint 9030 con software V100R011C02, V100R011C03 tienen una vulnerabilidad de error de gestión de recursos. Un atacante remoto no autenticado podría hacer que el servidor LDAP no responda a las peticiones del cliente mediante la toma de control del servidor LDAP. Dada la gestión indebida del recurso de la conexión LDAP, una explotación con éxito podría provocar el agotamiento del recurso de conexión del cliente LDAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-ldap-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-ldap-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17291",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.110",
      "lastModified" : "2024-11-21T03:17:45.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 have a memory leak vulnerability. An authenticated, local attacker may craft a specific XML file to the affected products. Due to not free the memory to parse the XML file, successful exploit will result in memory leak of the affected products."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 tienen una vulnerabilidad de fuga de memoria. Un atacante local autenticado podría manipular un archivo XML específico de los productos afectados. Dado que no se libera la memoria para analizar el archivo XML, una explotación con éxito resultará en la fuga de memoria de los productos afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17292",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.157",
      "lastModified" : "2024-11-21T03:17:45.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 have a denial of service vulnerability in the specific module. An authenticated, local attacker may craft a specific XML file to the affected products. Due to improper handling of input, successful exploit will cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00 y V100R002C10 tienen una vulnerabilidad de denegación de servicio en el módulo específico. Un atacante local autenticado podría manipular un archivo XML específico de los productos afectados. Dada la gestión incorrecta de las entradas, la explotación con éxito podría provocar que algunos servicios funcionen erróneamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17293",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.203",
      "lastModified" : "2024-11-21T03:17:46.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 have a buffer overflow vulnerability. An authenticated, local attacker may craft a specific XML file to the affected products. Due to insufficient input validation, successful exploit will cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00 y V100R002C10 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante local autenticado podría manipular un archivo XML específico de los productos afectados. Dada la validación de entradas insuficiente, una explotación con éxito podría provocar el funcionamiento erróneo de algunos servicios"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17294",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.250",
      "lastModified" : "2024-11-21T03:17:46.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 have a null pointer dereference vulnerability. Due to insufficient input validation, an authenticated, local attacker may craft a specific XML file to the affected products to cause null pointer dereference. Successful exploit will cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00 y V100R002C10 tienen una vulnerabilidad de desreferencia de puntero null. Dada la validación de entradas insuficiente, un atacante local autenticado podría manipular un archivo XML específico en los productos afectados para provocar una desreferencia de puntero null. Una explotación con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15C564B-B409-4304-AF39-AD971BC8E82B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:max_presence:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E933011-8C8D-47C2-BD80-1D7D040755F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17295",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.313",
      "lastModified" : "2024-11-21T03:17:46.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V200R003C20SPC900, V200R003C30SPC200 have a buffer overflow vulnerability. An unauthenticated, remote attacker may send specially crafted SIP packages to the affected products. Due to the insufficient validation of some values for SIP packages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V200R003C20SPC900 y V200R003C30SPC200 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante remoto no autenticado podría enviar paquetes SIP especialmente manipulados a los productos afectados. Dada la validación insuficiente de algunos valores para los paquetes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F044EC-B6CB-4311-859B-C061B1049D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73298C1-595F-4A64-AA67-FF56D53BDEF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-buffer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-buffer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17296",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.360",
      "lastModified" : "2024-11-21T03:17:46.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V200R003C20SPC900, V200R003C30SPC200 have a memory leak vulnerability. An unauthenticated, remote attacker may send specially crafted H323 packages to the affected products. Due to not release the allocated memory properly to handle the packets, successful exploit may cause memory leak and some services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V200R003C20SPC900 y V200R003C30SPC200 tienen una vulnerabilidad de fuga de memoria. Un atacante remoto no autenticado podría enviar paquetes H323 especialmente manipulados a los productos afectados. Dado que no se libera la memoria asignada correctamente para gestionar los paquetes, una explotación con éxito podría provocar una fuga de memoria y que algunos servicios funcionen de manera errónea."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F044EC-B6CB-4311-859B-C061B1049D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73298C1-595F-4A64-AA67-FF56D53BDEF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-buffer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-buffer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17297",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.407",
      "lastModified" : "2024-11-21T03:17:46.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V200R003C20SPC900, V200R003C30SPC200 have a buffer overflow vulnerability. An unauthenticated, remote attacker may send specially crafted SIP packages to the affected products. Due to the insufficient validation of some values for SIP packages, successful exploit may cause services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V200R003C20SPC900 y V200R003C30SPC200 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante remoto no autenticado podría enviar paquetes SIP especialmente manipulados a los productos afectados. Dada la validación insuficiente de algunos valores para los paquetes SIP, una explotación con éxito podría provocar fallos en los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94682861-8E53-408E-97F2-06A22DAC5466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056FA6A9-8CA4-45DE-A3B0-71C4206377B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F044EC-B6CB-4311-859B-C061B1049D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73298C1-595F-4A64-AA67-FF56D53BDEF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-buffer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-buffer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17298",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.470",
      "lastModified" : "2024-11-21T03:17:46.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, ViewPoint 9030 V100R011C02, V100R011C03 have a buffer overflow vulnerability. An unauthenticated, remote attacker may send specially crafted certificates to the affected products. Due to insufficient validation of the certificates, successful exploit may cause buffer overflow and some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, ViewPoint 9030 V100R011C02 y V100R011C03 tienen una vulnerabilidad de desbordamiento de búfer. Un atacante remoto no autenticado podría enviar certificados especialmente manipulados a los productos afectados. Dada la validación de certificados insuficiente, una explotación con éxito podría provocar un desbordamiento de búfer y el funcionamiento erróneo de algunos servicios"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-overflow-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-overflow-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17299",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.517",
      "lastModified" : "2024-11-21T03:17:47.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, IPS Module V500R001C30, NIP6300 V500R001C30, NetEngine16EX V200R006C10, V200R007C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker may send crafted IKE V2 messages to the affected products. Due to the insufficient validation of the messages, successful exploit will cause invalid memory access and result in a denial of service on the affected products."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, IPS Module V500R001C30, NIP6300 V500R001C30, NetEngine16EX V200R006C10 y V200R007C00 tienen una vulnerabilidad de validación de entradas insuficiente. Un atacante remoto no autenticado podría enviar mensajes IKE V2 manipulados a los productos afectados. Debido a la validación insuficiente de los mensajes, una explotación con éxito provocará un acceso inválido a la memoria y resultará en una denegación de servicio (DoS) en los productos afectados"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F794C7-F69F-4D06-8074-E664158FAE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C732C2-60D0-4CC9-A2C4-76F6478159EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ike-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ike-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17300",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.563",
      "lastModified" : "2024-11-21T03:17:47.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specific TCP messages with keychain authentication option to the affected products. Due to the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit will cause the affected products to reset."
      }, {
        "lang" : "es",
        "value" : "Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00 y V200R009C00 tienen una vulnerabilidad de errores numéricos. Un atacante remoto no autenticado podría enviar mensajes TCP específicos con la opción de autenticación keychain a los productos afectados. Debido a la validación indebida de los mensajes, provocará errores numéricos al gestionar los mensajes. Su explotación con éxito provocará que los productos afectados se restablezcan."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-router-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-router-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17301",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.610",
      "lastModified" : "2024-11-21T03:17:47.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR2200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 5800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 6800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 7800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, DP300 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, TE30 V100R001C10, TE60 V100R003C00, V500R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, ViewPoint 8660 V100R008C02, V100R008C03, eSpace IAD V300R002C01, eSpace U1981 V200R003C20, V200R003C30, eSpace USM V100R001C01, V300R001C00 have a weak cryptography vulnerability. Due to not properly some values in the certificates, an unauthenticated remote attacker could forges a specific RSA certificate and exploits the vulnerability to pass identity authentication and logs into the target device to obtain permissions configured for the specific user name."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR2200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 5800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 6800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 7800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, DP300 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, TE30 V100R001C10, TE60 V100R003C00, V500R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, ViewPoint 8660 V100R008C02, V100R008C03, eSpace IAD V300R002C01, eSpace U1981 V200R003C20, V200R003C30, eSpace USM V100R001C01 y V300R001C00 tienen una vulnerabilidad de criptografía débil. Debido a que no se validan correctamente algunos valores en los certificados, un atacante remoto no autenticado podría falsificar un certificado RSA específico y explotar la vulnerabilidad para pasar la autenticación de identidad y los registros en el dispositivo objetivo para obtener los permisos configurados para el nombre de usuario específico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81E2517-263C-4B59-9D28-A3DE98289B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8934C1-9162-4C52-A0FC-6B2914E93304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4045CC4E-3B44-4E32-A04F-39C8572921B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7D76DA-E30F-4071-807B-DED30596CD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABEF8DE-D6CA-45DD-B10E-C3FFB5B82FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A87025-03BE-4671-9687-85510E9AE4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325B983-F920-4006-8F3B-738B1B4EBEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F159E208-A535-4B5E-A7A5-791EB01C0839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r005c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DE9947-C096-4B7F-8F3E-748DEFC677C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA92D38-95BA-4FEB-9A5E-A2604B97B6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272E6F06-9FAF-421B-8E87-7F1F1705B598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA6C55E-DF1F-475D-B1E9-C09CF8278276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C579A9-2768-4202-9171-BC803554E923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB5929-1526-4910-BE22-07FCDDA06D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4D77D6-4CCA-45A3-8B8F-2A2E3AD82753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58D7203-2EE3-412A-B39C-94D82B0BBB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EF4F82-092F-4D19-832B-A174F7D47477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2DACA5-0AA6-419B-AC6A-8CC19326758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4492E892-7BE5-413A-AD53-2D39BD6626F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8A2875-0F7E-4790-A925-5999396B7578"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90200F0F-FF1A-42D9-A4EF-8DD5F6DB6BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061D3731-37D1-40A9-BE2B-7C43CADC3190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B93684-6903-4A54-B631-15873D3D3744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDAAAC-0585-406F-B547-FB71C5352209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916288E9-1DAB-40BE-9C29-3E8603FC0F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1573B4A5-A78B-4A17-8E1B-673A11D18221"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42246DF-E736-4D98-AF73-3F5B731485D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3752F8-78AB-43C9-B499-B3E2031BB29B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31AD6C5-E687-47C9-8473-2486A6864128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A10D-8B77-4F43-87A9-803ED9855AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E574B02-F89A-4D5C-B462-3AF56F1C0A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5BEF58-456D-4983-B1CA-A53CE5C4E24E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374AD269-B0F4-4534-ABAC-D08343B2CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5D868B-B2F8-4C25-8134-5ED8758AFB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A6E23-962D-4A92-B14D-949B01489F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B676B444-6128-4A04-B3E7-421F74FA9CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6985E0-9375-4DE2-A879-AAACF923381C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FFE8C7-6E03-45ED-A581-779C75A5C432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F5C31-6000-48C4-A9CA-D3F91A0549E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611E69A3-AB62-4584-B611-93583D84FCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E7481E-B5B8-481C-AC35-A8029AA2DF7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D01E86-0F60-4A99-8E48-15B0B0BF3678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25185C6-3F8D-4D86-84D9-4D81A3DF5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E586B837-E86A-4B3E-8701-3C92123F9FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13F79BF-2919-45A3-9AB0-9D501DDA94B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38768F-F3CC-404D-9C3E-7DB9A7C4C580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_iad_firmware:v300r002c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647B85DB-2E81-4EBA-A42C-7DBEF1EDD9D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_iad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C8CF3B-2907-4E9C-8CA9-6FECDDC68812"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_usm_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECD4671-FA6A-434E-B3A8-5141AB850661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_usm_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D516A52-BA26-4841-96AC-A0718698C92A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_usm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B099CC1-0C25-46B3-B772-C61AC1657E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171222-01-cryptography-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171222-01-cryptography-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17302",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-02-15T16:29:03.657",
      "lastModified" : "2024-11-21T03:17:47.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. An authenticated, local attacker may craft and load some specific Certificate Revocation List(CRL) configuration files to the devices repeatedly. Due to not release allocated memory properly, successful exploit may result in memory leak and services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de fuga de memoria. Un atacante local autenticado podría manipular y cargar algunos archivos de configuración CRL (Certificate Revocation List) repetidamente en los dispositivos. Debido a que no se libera adecuadamente la memoria asignada, un exploit con éxito podría resultar en una fuga de memoria y en un funcionamiento anormal de los servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-memory-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-memory-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15089",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-02-15T17:29:00.207",
      "lastModified" : "2024-11-21T03:14:02.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el cliente Hotrod en Infinispan, en versiones anteriores a la 9.2.0.CR1 lee de forma insegura los datos deserializados en la información de la caché. Un atacante autenticado podría inyectar un objeto malicioso en la caché de datos y lograr la deserialización en el cliente, además de llevar a cabo ataques a mayores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.6",
            "matchCriteriaId" : "73C3E6FB-4EE2-4538-A190-3F680D9E7A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:9.2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A2B14A3-8FAE-4C32-9E1A-F32D49E1EFAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:9.2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "35E90E01-47E7-44CB-A617-385AB0E6CB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:9.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC00B1CC-C522-44FC-AB04-973D0E75C4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:9.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7248C01A-3848-4E22-AC9D-9D0E9D31EE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:9.2.0:cr1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDEC571-F826-4993-ABE3-3E94ECA684C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0294",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/infinispan/infinispan/pull/5639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/infinispan/infinispan/pull/5639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12487",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.543",
      "lastModified" : "2024-11-21T03:09:37.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12488",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.623",
      "lastModified" : "2024-11-21T03:09:37.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12489",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.670",
      "lastModified" : "2024-11-21T03:09:37.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12490",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.717",
      "lastModified" : "2024-11-21T03:09:37.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12491",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.763",
      "lastModified" : "2024-11-21T03:09:37.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12492",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.810",
      "lastModified" : "2024-11-21T03:09:37.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12493",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.873",
      "lastModified" : "2024-11-21T03:09:37.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12494",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.920",
      "lastModified" : "2024-11-21T03:09:37.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12495",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:01.967",
      "lastModified" : "2024-11-21T03:09:37.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12496",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.027",
      "lastModified" : "2024-11-21T03:09:38.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12497",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.077",
      "lastModified" : "2024-11-21T03:09:38.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12498",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.153",
      "lastModified" : "2024-11-21T03:09:38.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12499",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.217",
      "lastModified" : "2024-11-21T03:09:38.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12500",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.247",
      "lastModified" : "2024-11-21T03:09:38.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44648/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44648/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12501",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.310",
      "lastModified" : "2024-11-21T03:09:38.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12502",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.357",
      "lastModified" : "2024-11-21T03:09:38.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12503",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.403",
      "lastModified" : "2024-11-21T03:09:38.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12504",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.433",
      "lastModified" : "2024-11-21T03:09:38.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12505",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.480",
      "lastModified" : "2024-11-21T03:09:39.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12506",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.543",
      "lastModified" : "2024-11-21T03:09:39.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12507",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.577",
      "lastModified" : "2024-11-21T03:09:39.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12508",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.623",
      "lastModified" : "2024-11-21T03:09:39.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12509",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.670",
      "lastModified" : "2024-11-21T03:09:39.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12510",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.730",
      "lastModified" : "2024-11-21T03:09:39.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12511",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.777",
      "lastModified" : "2024-11-21T03:09:39.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12512",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.827",
      "lastModified" : "2024-11-21T03:09:39.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12513",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.873",
      "lastModified" : "2024-11-21T03:09:39.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12514",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.920",
      "lastModified" : "2024-11-21T03:09:40.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12515",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:02.967",
      "lastModified" : "2024-11-21T03:09:40.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12516",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.013",
      "lastModified" : "2024-11-21T03:09:40.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12517",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.060",
      "lastModified" : "2024-11-21T03:09:40.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12518",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.107",
      "lastModified" : "2024-11-21T03:09:40.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12519",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.153",
      "lastModified" : "2024-11-21T03:09:40.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12520",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.200",
      "lastModified" : "2024-11-21T03:09:40.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12521",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.247",
      "lastModified" : "2024-11-21T03:09:40.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12522",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.293",
      "lastModified" : "2024-11-21T03:09:40.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12523",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.357",
      "lastModified" : "2024-11-21T03:09:41.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12524",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.403",
      "lastModified" : "2024-11-21T03:09:41.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12525",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.433",
      "lastModified" : "2024-11-21T03:09:41.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12526",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.497",
      "lastModified" : "2024-11-21T03:09:41.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12527",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.543",
      "lastModified" : "2024-11-21T03:09:41.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12528",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.590",
      "lastModified" : "2024-11-21T03:09:41.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12529",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.637",
      "lastModified" : "2024-11-21T03:09:41.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12530",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.683",
      "lastModified" : "2024-11-21T03:09:41.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12531",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.730",
      "lastModified" : "2024-11-21T03:09:42.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12532",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.763",
      "lastModified" : "2024-11-21T03:09:42.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12533",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.827",
      "lastModified" : "2024-11-21T03:09:42.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12534",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.887",
      "lastModified" : "2024-11-21T03:09:42.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12535",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.933",
      "lastModified" : "2024-11-21T03:09:42.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12536",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:03.980",
      "lastModified" : "2024-11-21T03:09:42.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12537",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.027",
      "lastModified" : "2024-11-21T03:09:42.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12538",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.077",
      "lastModified" : "2024-11-21T03:09:42.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12539",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.123",
      "lastModified" : "2024-11-21T03:09:42.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12540",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.153",
      "lastModified" : "2024-11-21T03:09:43.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12541",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.200",
      "lastModified" : "2024-11-21T03:09:43.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT versión PLAT 7.3 (E0504). El problema se ha resuelto en HPE Intelligent Management Center PLAT v7.3 (E0506) o en versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F6C54E-D905-49E3-B848-8401E0B41B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12542",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.263",
      "lastModified" : "2024-11-21T03:09:43.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de autenticación y ejecución de código en HPE Integrated Lights-out 4 (iLO 4) en versiones anteriores a la 2.53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.53",
            "matchCriteriaId" : "B004A3E9-7318-4AD3-B808-0F0E3BE12799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:integrated_lights-out_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47EEB8DA-1CDD-428C-988C-249E2816F18C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100467",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039222",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44005/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12543",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.310",
      "lastModified" : "2024-11-21T03:09:43.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación remota de información en Moonshot Remote Console Administrator en versiones anteriores a la 2.50; iLO 4 en versiones anteriores a la v2.53, iLO3 en versiones anteriores a la v1.89 y iLO2 en versiones anteriores a la v2.30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:moonshot_remote_console_administrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.50",
            "matchCriteriaId" : "C5DC0A0A-A646-4C5F-A5B9-FB3BCE9B1D86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30",
            "matchCriteriaId" : "98ABA457-206A-4F12-9580-A4170D846072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.89",
            "matchCriteriaId" : "185FF3D4-F12D-4B34-BCB1-0A4992B21DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.53",
            "matchCriteriaId" : "B004A3E9-7318-4AD3-B808-0F0E3BE12799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3BB462-1E25-4D84-ABC6-68F6762D719D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101944",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03705en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03705en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12544",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.373",
      "lastModified" : "2024-11-21T03:09:43.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de Cross-Site Scripting (XSS) en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12545",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.433",
      "lastModified" : "2024-11-21T03:09:43.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de denegación de servicio (DoS) remota en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-30",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12546",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.497",
      "lastModified" : "2024-11-21T03:09:43.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desbordamiento de búfer local en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:N",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12547",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.543",
      "lastModified" : "2024-11-21T03:09:43.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución local de comandos arbitrarios en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:C/A:C",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12548",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.577",
      "lastModified" : "2024-11-21T03:09:44.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución local de comandos arbitrarios en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:C/A:C",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12549",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.623",
      "lastModified" : "2024-11-21T03:09:44.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de error de configuración de seguridad en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:N",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12550",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.670",
      "lastModified" : "2024-11-21T03:09:44.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de error de configuración de seguridad en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:C/A:C",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12551",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.717",
      "lastModified" : "2024-11-21T03:09:44.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución local de comandos arbitrarios en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:C/A:C",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12552",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.777",
      "lastModified" : "2024-11-21T03:09:44.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución local de comandos arbitrarios en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:C/A:C",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12553",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.827",
      "lastModified" : "2024-11-21T03:09:44.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de autenticación local en HPE System Management Homepage para Windows y Linux en versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:N",
            "baseScore" : 5.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "74107D7F-60E9-4A88-85D4-9594553A01C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12554",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.873",
      "lastModified" : "2024-11-21T03:09:44.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT iMC Plat 7.3 E0504P2 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT iMC Plat 7.3 E0504P2 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p2:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACA9165-E2A7-462E-8D89-FD1B3FD44F9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03782en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03782en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12555",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.920",
      "lastModified" : "2024-11-21T03:09:44.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de descarga remota de archivos arbitrarios y de revelación de información en HPE Intelligent Management Center (iMC) Service Operation Management (SOM) en su versión IMC SOM 7.3 E0501."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0501:*:*:*:*:*:*",
            "matchCriteriaId" : "BF29D20B-13A0-4DFD-B2CA-159DD22C6E76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039496",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-27",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12556",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.950",
      "lastModified" : "2024-11-21T03:09:44.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT en su versión IMC Plat 7.3 E0504P2 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p2:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACA9165-E2A7-462E-8D89-FD1B3FD44F9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12557",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:04.997",
      "lastModified" : "2024-11-21T03:09:45.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT en su versión IMC Plat 7.3 E0504P2 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p2:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACA9165-E2A7-462E-8D89-FD1B3FD44F9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45952/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45952/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12558",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.043",
      "lastModified" : "2024-11-21T03:09:45.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT en su versión IMC Plat 7.3 E0504P2 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p2:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACA9165-E2A7-462E-8D89-FD1B3FD44F9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101152",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12559",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.090",
      "lastModified" : "2024-11-21T03:09:45.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de denegación de servicio (DoS) remota en HPE Intelligent Management Center (iMC) PLAT versión iMC Plat 7.3 E0504P2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03777en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03777en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12560",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.137",
      "lastModified" : "2024-11-21T03:09:45.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de denegación de servicio (DoS) remota en HPE Intelligent Management Center (iMC) PLAT versión iMC Plat 7.3 E0504P2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03777en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03777en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12561",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.183",
      "lastModified" : "2024-11-21T03:09:45.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT en su versión Plat 7.3 E0504P4 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BA41BBA8-B9A5-45F6-A3E2-9A0DEB6700E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03781en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03781en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5780",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.230",
      "lastModified" : "2024-11-21T03:28:20.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de secuestro de clics remoto en HPE Matrix Operating Environment v7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5B13C-7BC0-4E6B-9260-12C29AD068AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5781",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.277",
      "lastModified" : "2024-11-21T03:28:20.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de CSRF en HPE Matrix Operating Environment v7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5B13C-7BC0-4E6B-9260-12C29AD068AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5782",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.340",
      "lastModified" : "2024-11-21T03:28:20.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de falta de cabecera HSTS en HPE Matrix Operating Environment v7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5B13C-7BC0-4E6B-9260-12C29AD068AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5783",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.373",
      "lastModified" : "2024-11-21T03:28:20.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de secuestro de clics remoto en HPE Matrix Operating Environment v7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5B13C-7BC0-4E6B-9260-12C29AD068AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5784",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.450",
      "lastModified" : "2024-11-21T03:28:20.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de falta de cabecera HSTS en HPE Matrix Operating Environment v7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5B13C-7BC0-4E6B-9260-12C29AD068AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5785",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.480",
      "lastModified" : "2024-11-21T03:28:20.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota en HPE Matrix Operating Environment v7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5B13C-7BC0-4E6B-9260-12C29AD068AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5786",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.527",
      "lastModified" : "2024-11-21T03:28:21.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de modificación de datos no autorizada en HPE OfficeConnect Network Switches, en versiones PT.02.01 incluyendo PT.01.03 hasta PT.01.14."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "pt.01.03",
            "versionEndIncluding" : "pt.01.14",
            "matchCriteriaId" : "91868E9A-4761-454C-AEE2-D03F088150FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:pt.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4BF49-B849-4EA7-831C-712972980C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:officeconnect_1820_8g_switch_j9979a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6829C8C-511C-4BD7-BC9A-215D34B025E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_24g_poe\\+_\\(185w\\)_switch_j9983a_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "pt.01.03",
            "versionEndIncluding" : "pt.01.14",
            "matchCriteriaId" : "D4D58113-EFF5-4FDC-BAD9-81AD35219616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_24g_poe\\+_\\(185w\\)_switch_j9983a_firmware:pt.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C35CCA-8078-4881-B00B-EA8EE5A5B662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:officeconnect_1820_24g_poe\\+_\\(185w\\)_switch_j9983a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5264853E-2649-4C44-B078-796A02BC53B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_24g_switch_j9980a_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "pt.01.03",
            "versionEndIncluding" : "pt.01.14",
            "matchCriteriaId" : "69FB1A10-1D67-496E-8FCF-B405EC86C26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_24g_switch_j9980a_firmware:pt.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED834CFF-D254-4B8F-8C4B-3299B0B4BAFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:officeconnect_1820_24g_switch_j9980a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8BDA52-7752-4FD2-802E-67573BF74F30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_48g_poe\\+_\\(370w\\)_switch_j9984a_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "pt.01.03",
            "versionEndIncluding" : "pt.01.14",
            "matchCriteriaId" : "6EB18E42-63D6-43AE-AAFA-570F9FECB677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_48g_poe\\+_\\(370w\\)_switch_j9984a_firmware:pt.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819C364A-CC2D-4785-BA94-6C8D41190258"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:officeconnect_1820_48g_poe\\+_\\(370w\\)_switch_j9984a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B37EFA-2611-443A-B1EB-2687D6BD5C2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_48g_switch_j9981a_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "pt.01.03",
            "versionEndIncluding" : "pt.01.14",
            "matchCriteriaId" : "574ABA9E-E279-4619-8976-5EBBD8238CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_48g_switch_j9981a_firmware:pt.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6894F66F-BFAF-4BF1-85F4-8B906E17B82A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:officeconnect_1820_48g_switch_j9981a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B51B09-3023-4A9E-940C-E803CC0EE909"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_8g_poe\\+_\\(65w\\)_switch_j9982a_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "pt.01.03",
            "versionEndIncluding" : "pt.01.14",
            "matchCriteriaId" : "5964E4AA-F0FF-4F7F-B2DC-92076EB7B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:officeconnect_1820_8g_poe\\+_\\(65w\\)_switch_j9982a_firmware:pt.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C298A396-9A70-479D-AA96-622825C159E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:officeconnect_1820_8g_poe\\+_\\(65w\\)_switch_j9982a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A4E198-C861-4961-8AF4-23BEAB22DBF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96149",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05388948",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05388948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5787",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.607",
      "lastModified" : "2024-11-21T03:28:21.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de denegación de servicio remoto en HPE Version Control Repository Manager (VCRM) en todas las versiones anteriores a la 7.6."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_repository_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6",
            "matchCriteriaId" : "E08DDFC5-1DE5-4729-927C-823BB2E087FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96395",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05356363",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05356363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5788",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.637",
      "lastModified" : "2024-11-21T03:28:21.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Local Disclosure of Sensitive Information vulnerability in HPE NonStop Software Essentials version T0894 T0894H02 through T0894H02^AAI was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información local en HPE NonStop Software Essentials T0894 T0894H02 hasta T0894H02^AAI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0894h02",
            "versionEndIncluding" : "t0894h02\\^aai",
            "matchCriteriaId" : "534F2619-5232-489A-ABD9-B240EA76E874"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:nonstop_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2C32B-5ABC-4679-9A99-F17829E36182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038026",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03708en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03708en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5790",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.683",
      "lastModified" : "2024-11-21T03:28:21.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de deserialización remota de datos no fiables en HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:e0403p06:*:*:*:*:*:*",
            "matchCriteriaId" : "22620468-5BE5-4B0B-AC44-DC7BE11C5E5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96755",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03710en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-12",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03710en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5792",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.747",
      "lastModified" : "2024-11-21T03:28:21.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96769",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03713en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03815en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43927/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-18",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-01",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03713en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03815en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43927/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2018-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5793",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.793",
      "lastModified" : "2024-11-21T03:28:22.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código arbitrario en HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:e0403p06:*:*:*:*:*:*",
            "matchCriteriaId" : "22620468-5BE5-4B0B-AC44-DC7BE11C5E5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03717en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03717en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5794",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.840",
      "lastModified" : "2024-11-21T03:28:23.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de descarga remota de archivos arbitrarios en HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:e0403p06:*:*:*:*:*:*",
            "matchCriteriaId" : "22620468-5BE5-4B0B-AC44-DC7BE11C5E5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03715en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03715en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5795",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.887",
      "lastModified" : "2024-11-21T03:28:23.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) version PLAT 7.2 E0403P06 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de descarga local de archivos arbitrarios en HPE Intelligent Management Center (IMC) en versiones PLAT 7.2 E0403P06."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:e0403p06:*:*:*:*:*:*",
            "matchCriteriaId" : "22620468-5BE5-4B0B-AC44-DC7BE11C5E5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96773",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03714en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03714en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5796",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.933",
      "lastModified" : "2024-11-21T03:28:23.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de Cross Site Request Forgery (CSRF) remoto en HPE 2620 Series Network Switches RA.15.05.0006."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9627a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ra.15.15.0014",
            "matchCriteriaId" : "DE6143EC-B848-4C54-B250-4A20825C2FCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9627a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2066788A-4B15-4A67-89F1-BC64D6EC4037"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9626a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ra.15.15.0014",
            "matchCriteriaId" : "F49C72ED-C9DD-4C55-85BB-980A30138135"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9626a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D2F70-A9D5-4D0E-BA09-2B23C746BD97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9625a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ra.15.15.0014",
            "matchCriteriaId" : "3C8918AB-BD8E-4215-8A00-7469B1E21DCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9625a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679263E7-7C3A-4E4C-881B-693121036F6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9624a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ra.15.15.0014",
            "matchCriteriaId" : "BC9FD7B8-B0D5-4C23-ABC0-686EF6692B50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9624a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B657883E-E1BE-4040-BB2A-397675302F1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j9623a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ra.15.15.0014",
            "matchCriteriaId" : "EFDA9F42-B804-4E1A-8918-B33A1458561A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j9623a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBA2FBA-01DD-44C9-A7D2-554F425F4CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96813",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03711en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03711en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5797",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:05.980",
      "lastModified" : "2024-11-21T03:28:23.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Unauthenticated Disclosure of Information vulnerability in HPE Intelligent Management Center (IMC) SOM version v7.3 (E0501) was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información no autenticada remota en HPE Intelligent Management Center (IMC) SOM versión v7.3 (E0501)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0501:*:*:*:*:*:*",
            "matchCriteriaId" : "BF29D20B-13A0-4DFD-B2CA-159DD22C6E76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97214",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03719en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03719en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5798",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.027",
      "lastModified" : "2024-11-21T03:28:24.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x)."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE OpenCall Media Platform (OCMP). La vulnerabilidad impacta en versiones de OCMP anteriores a la 3.4.2 RP201 (para OCMP 3.x) y todas las versiones anteriores a la 4.4.7 RP702 (para OCMP 4.x)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:opencall_media_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "FCEE6039-6EB7-4171-8C53-F5EE7B438598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:opencall_media_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.4.7",
            "matchCriteriaId" : "B34CCD07-1BD9-4EF8-B330-228A1B870B50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98013",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41927/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41927/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5799",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.077",
      "lastModified" : "2024-11-21T03:28:24.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x)."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE OpenCall Media Platform (OCMP). La vulnerabilidad impacta en versiones de OCMP anteriores a la 3.4.2 RP201 (para OCMP 3.x) y todas las versiones anteriores a la 4.4.7 RP702 (para OCMP 4.x)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:opencall_media_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "FCEE6039-6EB7-4171-8C53-F5EE7B438598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:opencall_media_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.4.7",
            "matchCriteriaId" : "B34CCD07-1BD9-4EF8-B330-228A1B870B50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98013",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41927/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41927/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5800",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.123",
      "lastModified" : "2024-11-21T03:28:24.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics version v3.0 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de Cross-Site Scripting (XSS) remoto en HPE Operations Bridge Analytics v3.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:operations_bridge_analytics:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A365ED87-D7FB-4371-A12C-A5D3C0DDAD38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97412",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03721en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03721en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5801",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.200",
      "lastModified" : "2024-11-21T03:28:24.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de acceso remoto no autorizado a datos en HPE Business Process Monitor v09.2x y v09.30."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE835A0-4BC2-4265-954A-386C611DDC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D3CD2E-F21C-43A7-93DE-46D397BAFEB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CD20C3-DBFC-4827-A5EA-152119EE5D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1EEBEA-2BE8-4368-8E53-206D0111715B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D20B41-9CB4-4BC7-AD8F-B1A193AB8857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178D9A6F-109A-48E7-A386-891EBF8E14C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75AD0E6-6362-4434-A62B-CCAA8C60F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:business_process_monitor:09.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE3B77C-450C-4FE3-A137-241FF148434D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97386",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038176",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5802",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.230",
      "lastModified" : "2025-11-19T13:30:31.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de obtención de acceso privilegiado remoto en HPE Vertica Analytics Platform en versiones v4.1 y posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.3-20",
            "matchCriteriaId" : "FEF3D973-762B-4C0E-894A-9606094322F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.0.2-13",
            "matchCriteriaId" : "14C71968-69F3-46D0-858F-18157DCD078E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.2-21",
            "matchCriteriaId" : "16664B5C-763F-4B63-883B-9B65900ECC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "versionEndExcluding" : "7.2.3-18",
            "matchCriteriaId" : "011C4EE6-5AF4-4398-9689-46727F044B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.0.1-3",
            "matchCriteriaId" : "0CAE19D1-E374-43AA-992A-EBE4686ADE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1",
            "versionEndExcluding" : "8.1.0-1",
            "matchCriteriaId" : "53231C57-C6D3-4A28-98A6-6C5AE29B9CB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97706",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03734en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03734en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5803",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.277",
      "lastModified" : "2024-11-21T03:28:24.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de revelación remota de información en HPE NonStop Servers que emplean SSH Service version L series: T0801L02 hasta T0801L02^ABX; J y H series: T0801H01 hasta T0801H01^ACA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0801h01",
            "versionEndIncluding" : "t0801h01\\^aca",
            "matchCriteriaId" : "9AEBC02A-0B3A-444D-BE7A-A3ECDACB0747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0801l02",
            "versionEndIncluding" : "t0801l02\\^abx",
            "matchCriteriaId" : "BF7227BC-AC62-490B-AF3D-CD0037105D25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:nonstop_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2C32B-5ABC-4679-9A99-F17829E36182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98052",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038370",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us",
        "source" : "security-alert@hpe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/98052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5804",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.327",
      "lastModified" : "2024-11-21T03:28:24.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C2A93-6B1B-44C4-9208-7848D6B37BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98088",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038377",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5805",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.387",
      "lastModified" : "2024-11-21T03:28:25.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C2A93-6B1B-44C4-9208-7848D6B37BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98088",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038377",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5806",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.450",
      "lastModified" : "2024-11-21T03:28:25.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C2A93-6B1B-44C4-9208-7848D6B37BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98088",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038377",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5807",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.480",
      "lastModified" : "2024-11-21T03:28:25.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código arbitrario en HPE Data Protector en versiones anteriores a 8.17 y 9.09."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.17",
            "matchCriteriaId" : "336E78D0-C617-47DE-B088-1779F0CB265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector:9.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA985E76-63DC-41BC-9BBC-ACABB76FDBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100088",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-26",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5808",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.527",
      "lastModified" : "2024-11-21T03:28:25.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código arbitrario en HPE Data Protector en versiones anteriores a 8.17 y 9.09."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.17",
            "matchCriteriaId" : "336E78D0-C617-47DE-B088-1779F0CB265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector:9.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA985E76-63DC-41BC-9BBC-ACABB76FDBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100088",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-26",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5809",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.577",
      "lastModified" : "2024-11-21T03:28:25.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código arbitrario en HPE Data Protector en versiones anteriores a 8.17 y 9.09."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.17",
            "matchCriteriaId" : "336E78D0-C617-47DE-B088-1779F0CB265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector:9.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA985E76-63DC-41BC-9BBC-ACABB76FDBF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100088",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5810",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.623",
      "lastModified" : "2024-11-21T03:28:25.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de inyección SQL remota en HPE Network Automation 9.1x, 9.2x, 10.0x, 10.1x y 10.2x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB242214-2612-474E-96E2-DFD9CBE05454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3A3A47-D944-4FBC-BEA5-8FD304645328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055A9E2-C916-48D7-AF36-3A1CC397954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984B5D-5FC7-45B8-8B07-63930B1DA0FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE3CCA6-5D24-4B84-960A-83A70E8AFA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C74FE8A-030D-4C47-AE1F-2DC84C2D55BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB416A81-70B4-4FAC-B636-69F0A51CE5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05254E3-3015-4CA0-8E3A-A2FFF8664CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA263E-3137-4B14-81B1-CA3DF5AAD845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A3AA40-2F05-4802-95A2-CCB57D9B1B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1241B3F6-44BF-4190-959E-24E88419458A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5811",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.670",
      "lastModified" : "2024-11-21T03:28:25.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Network Automation 9.1x, 9.2x, 10.0x, 10.1x y 10.2x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB242214-2612-474E-96E2-DFD9CBE05454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3A3A47-D944-4FBC-BEA5-8FD304645328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055A9E2-C916-48D7-AF36-3A1CC397954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984B5D-5FC7-45B8-8B07-63930B1DA0FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE3CCA6-5D24-4B84-960A-83A70E8AFA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C74FE8A-030D-4C47-AE1F-2DC84C2D55BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB416A81-70B4-4FAC-B636-69F0A51CE5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05254E3-3015-4CA0-8E3A-A2FFF8664CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA263E-3137-4B14-81B1-CA3DF5AAD845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A3AA40-2F05-4802-95A2-CCB57D9B1B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1241B3F6-44BF-4190-959E-24E88419458A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5812",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.717",
      "lastModified" : "2024-11-21T03:28:25.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información sql remota en HPE Network Automation 9.1x, 9.2x, 10.0x, 10.1x y 10.2x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB242214-2612-474E-96E2-DFD9CBE05454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3A3A47-D944-4FBC-BEA5-8FD304645328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055A9E2-C916-48D7-AF36-3A1CC397954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984B5D-5FC7-45B8-8B07-63930B1DA0FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE3CCA6-5D24-4B84-960A-83A70E8AFA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C74FE8A-030D-4C47-AE1F-2DC84C2D55BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB416A81-70B4-4FAC-B636-69F0A51CE5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05254E3-3015-4CA0-8E3A-A2FFF8664CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA263E-3137-4B14-81B1-CA3DF5AAD845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A3AA40-2F05-4802-95A2-CCB57D9B1B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1241B3F6-44BF-4190-959E-24E88419458A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5813",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.763",
      "lastModified" : "2024-11-21T03:28:26.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de acceso remoto no autenticado en HPE Network Automation 9.1x, 9.2x, 10.0x, 10.1x y 10.2x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB242214-2612-474E-96E2-DFD9CBE05454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3A3A47-D944-4FBC-BEA5-8FD304645328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055A9E2-C916-48D7-AF36-3A1CC397954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984B5D-5FC7-45B8-8B07-63930B1DA0FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE3CCA6-5D24-4B84-960A-83A70E8AFA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C74FE8A-030D-4C47-AE1F-2DC84C2D55BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB416A81-70B4-4FAC-B636-69F0A51CE5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05254E3-3015-4CA0-8E3A-A2FFF8664CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA263E-3137-4B14-81B1-CA3DF5AAD845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A3AA40-2F05-4802-95A2-CCB57D9B1B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1241B3F6-44BF-4190-959E-24E88419458A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5814",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.810",
      "lastModified" : "2024-11-21T03:28:26.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de autenticación remota de inyección SQL en HPE Network Automation 9.1x, 9.2x, 10.0x, 10.1x y 10.2x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB242214-2612-474E-96E2-DFD9CBE05454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3A3A47-D944-4FBC-BEA5-8FD304645328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055A9E2-C916-48D7-AF36-3A1CC397954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984B5D-5FC7-45B8-8B07-63930B1DA0FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:9.22.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE3CCA6-5D24-4B84-960A-83A70E8AFA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C74FE8A-030D-4C47-AE1F-2DC84C2D55BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB416A81-70B4-4FAC-B636-69F0A51CE5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05254E3-3015-4CA0-8E3A-A2FFF8664CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA263E-3137-4B14-81B1-CA3DF5AAD845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A3AA40-2F05-4802-95A2-CCB57D9B1B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_automation:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1241B3F6-44BF-4190-959E-24E88419458A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5815",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.887",
      "lastModified" : "2024-11-21T03:28:26.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038472",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03743en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03743en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5816",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.933",
      "lastModified" : "2024-11-21T03:28:26.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100470",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43198/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43493/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43198/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43493/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5817",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:06.980",
      "lastModified" : "2024-11-21T03:28:26.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43195/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43492/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43195/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43492/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5818",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.027",
      "lastModified" : "2024-11-21T03:28:26.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5819",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.077",
      "lastModified" : "2024-11-21T03:28:26.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5820",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.137",
      "lastModified" : "2024-11-21T03:28:26.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5821",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.183",
      "lastModified" : "2024-11-21T03:28:27.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5822",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.217",
      "lastModified" : "2024-11-21T03:28:27.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5823",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.263",
      "lastModified" : "2024-11-21T03:28:27.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "70962382-6FA5-4E21-81D8-09FE48D77A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65BCDB-0795-4DE6-8B33-BCB636DD9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*",
            "matchCriteriaId" : "E205ACEE-9DB1-449F-855C-3A71DF35000C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5824",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.310",
      "lastModified" : "2024-11-21T03:28:27.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código sin autenticar en HPE Aruba ClearPass Policy Manager 6.6.x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "031F5F6F-E10F-4CB9-8489-F7D20902F398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5825",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.373",
      "lastModified" : "2024-11-21T03:28:27.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de escalado de privilegios en HPE Aruba ClearPass Policy Manager 6.6.x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "031F5F6F-E10F-4CB9-8489-F7D20902F398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5826",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.420",
      "lastModified" : "2024-11-21T03:28:27.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código autenticada en HPE Aruba ClearPass Policy Manager 6.6.x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "031F5F6F-E10F-4CB9-8489-F7D20902F398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5827",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.467",
      "lastModified" : "2024-11-21T03:28:27.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en HPE Aruba ClearPass Policy Manager 6.6.x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "031F5F6F-E10F-4CB9-8489-F7D20902F398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5828",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.527",
      "lastModified" : "2024-11-21T03:28:27.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución de comandos arbitrarios en HPE Aruba ClearPass Policy Manager 6.6.x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "031F5F6F-E10F-4CB9-8489-F7D20902F398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5829",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.577",
      "lastModified" : "2024-11-21T03:28:28.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de restricción de acceso en HPE Aruba ClearPass Policy Manager 6.6.x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.5",
            "matchCriteriaId" : "031F5F6F-E10F-4CB9-8489-F7D20902F398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8944",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.623",
      "lastModified" : "2024-11-21T03:35:02.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota en HPE Cloud Optimizer v3.0x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:cloud_optimizer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.00",
            "versionEndIncluding" : "3.03",
            "matchCriteriaId" : "39CCFD16-AA1D-4787-BB45-8D3212E0B251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98558",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03748en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03748en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8945",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.670",
      "lastModified" : "2024-11-21T03:35:02.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota no autorizada en HPE IceWall Federation Agent 3.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3261B40-5CBE-4AA6-990A-0A7BE96E5518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98711",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038570",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03737en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03737en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8946",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.717",
      "lastModified" : "2024-11-21T03:35:02.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Aruba AirWave Glass v1.0.0 y 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:aruba_airwave_glass:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9DCD5C-DF8B-4102-A2FB-465A121CA4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:aruba_airwave_glass:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5711A5E-6AF0-4905-8AFF-C8C36A6B344A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98644",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03751en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03751en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8947",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.793",
      "lastModified" : "2024-11-21T03:35:02.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE UCMDB v10.10, v10.11, v10.20, v10.21, v10.22, v10.30 y v10.31."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51748783-95F1-400A-A435-12D1F4A1312E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3837E366-A291-4E93-9AC7-595BF661CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E3B18E-18CE-42C5-BDCC-93A339C2E80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FA4110-8DB1-4CC1-A768-F33E91BB5AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00348879-766F-4CBA-9761-AE4E258CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954DA087-FBCA-4256-A32B-88CA0AE966F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:ucmdb_configuration_manager:10.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CE6771-5921-4843-8274-88E2F6FDF719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98960",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038643",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03758en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03758en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8948",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.840",
      "lastModified" : "2024-11-21T03:35:03.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de restricción de seguridad remota en HPE Network Node Manager i (NNMi) Software v10.0x, v10.1x y v10.2x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F62362-4E86-49AA-A577-822CA8EA81AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager_i:10.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F0CEDE-3476-4B75-970E-BB7527D047B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager_i:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F18276-DD9D-487A-9F29-D93C034CABDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager_i:10.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09779C6-B8CA-4BFC-A07C-9BE21A74C2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager_i:10.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49E752F-69D7-4787-88A1-96CE883F6000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99342",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03762en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03762en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8949",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.887",
      "lastModified" : "2024-11-21T03:35:03.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota en HPE SiteScope v11.2x y v11.3x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8172205D-C9CE-487E-BF67-33A46EBF056E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8F86F8-D697-44B8-9216-2319EF7A76D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5290D701-53C2-4C14-B380-F9DE30DA57D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3D0E42-4BC5-4109-A069-5E1A79A13051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE7D552-5C3F-4B3D-A7B3-AE9D4AD0FAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24.391:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C737A71B-03DF-4436-ACE5-43D47E8C7138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F02A47A-24BB-42CA-AC9C-D3A7B2FECEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30.521:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06DD563-7712-4CC4-AD78-27F534003479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230FF2E9-DEDC-4B99-BC2B-7D2488423596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027F6746-2AA5-41E8-BE67-A2CAAFEA5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779FEDAE-F5D9-4055-A275-FD70C6C93F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8950",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.933",
      "lastModified" : "2024-11-21T03:35:03.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota en HPE SiteScope v11.2x y v11.3x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8172205D-C9CE-487E-BF67-33A46EBF056E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8F86F8-D697-44B8-9216-2319EF7A76D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5290D701-53C2-4C14-B380-F9DE30DA57D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3D0E42-4BC5-4109-A069-5E1A79A13051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE7D552-5C3F-4B3D-A7B3-AE9D4AD0FAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24.391:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C737A71B-03DF-4436-ACE5-43D47E8C7138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F02A47A-24BB-42CA-AC9C-D3A7B2FECEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30.521:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06DD563-7712-4CC4-AD78-27F534003479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230FF2E9-DEDC-4B99-BC2B-7D2488423596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027F6746-2AA5-41E8-BE67-A2CAAFEA5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779FEDAE-F5D9-4055-A275-FD70C6C93F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8951",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:07.967",
      "lastModified" : "2024-11-21T03:35:03.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota en HPE SiteScope v11.2x y v11.3x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8172205D-C9CE-487E-BF67-33A46EBF056E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8F86F8-D697-44B8-9216-2319EF7A76D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5290D701-53C2-4C14-B380-F9DE30DA57D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3D0E42-4BC5-4109-A069-5E1A79A13051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE7D552-5C3F-4B3D-A7B3-AE9D4AD0FAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24.391:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C737A71B-03DF-4436-ACE5-43D47E8C7138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F02A47A-24BB-42CA-AC9C-D3A7B2FECEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30.521:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06DD563-7712-4CC4-AD78-27F534003479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230FF2E9-DEDC-4B99-BC2B-7D2488423596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027F6746-2AA5-41E8-BE67-A2CAAFEA5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779FEDAE-F5D9-4055-A275-FD70C6C93F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99331",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8952",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.013",
      "lastModified" : "2024-11-21T03:35:03.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de divulgación de información remota en HPE SiteScope v11.2x y v11.3x."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8172205D-C9CE-487E-BF67-33A46EBF056E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8F86F8-D697-44B8-9216-2319EF7A76D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5290D701-53C2-4C14-B380-F9DE30DA57D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3D0E42-4BC5-4109-A069-5E1A79A13051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE7D552-5C3F-4B3D-A7B3-AE9D4AD0FAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.24.391:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C737A71B-03DF-4436-ACE5-43D47E8C7138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F02A47A-24BB-42CA-AC9C-D3A7B2FECEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.30.521:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06DD563-7712-4CC4-AD78-27F534003479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230FF2E9-DEDC-4B99-BC2B-7D2488423596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027F6746-2AA5-41E8-BE67-A2CAAFEA5CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:sitescope:11.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779FEDAE-F5D9-4055-A275-FD70C6C93F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99333",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8953",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.077",
      "lastModified" : "2024-11-21T03:35:03.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de Cross-Site Scripting (XSS) remoto en HPE LoadRunner en versiones v12.53 y anteriores y en HPE Performance Center en versiones v12.53 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:loadrunner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.53",
            "matchCriteriaId" : "0458950F-9181-4A1A-8CEF-E41425A347AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:performance_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.53",
            "matchCriteriaId" : "0A1D654F-0D62-46CB-BEBC-3BB68A097FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1038867",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038868",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03764en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03764en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8954",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.123",
      "lastModified" : "2024-11-21T03:35:03.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C2A93-6B1B-44C4-9208-7848D6B37BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99925",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03764en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03764en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8955",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.153",
      "lastModified" : "2024-11-21T03:35:03.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C2A93-6B1B-44C4-9208-7848D6B37BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99925",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03764en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03764en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8956",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.200",
      "lastModified" : "2024-11-21T03:35:04.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p04:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4C972-D942-40A3-AFDE-A3A2B34416BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8957",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.247",
      "lastModified" : "2024-11-21T03:35:04.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C2A93-6B1B-44C4-9208-7848D6B37BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99925",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03764en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03764en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8958",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.293",
      "lastModified" : "2024-11-21T03:35:04.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3",
            "matchCriteriaId" : "39293796-E695-4592-9E0E-0AAED065F515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p04:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4C972-D942-40A3-AFDE-A3A2B34416BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101202",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03786en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03786en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8959",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.340",
      "lastModified" : "2024-11-21T03:35:04.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de omisión de autenticación en HPE MSA 1040 y HPE MSA 2040 SAN Storage en versiones GL220P008 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:msa_1040_san_storage_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gl220p008",
            "matchCriteriaId" : "F030D3F0-BBB9-4EBB-810D-4DCDBE6E339B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:msa_1040_san_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B9C5B7-AB52-455D-8491-69D68739232E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:msa_2040_san_storage_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gl220p008",
            "matchCriteriaId" : "535E6A19-E6A7-488A-B696-18C47B6DC815"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:msa_2040_san_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A854035A-C6FF-447C-9CE5-BDEC523E8696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbst03780en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbst03780en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8960",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.403",
      "lastModified" : "2024-11-21T03:35:04.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas circunstancias, un usuario malicioso que provoque un cierre inesperado por división entre cero puede evitar que usuarios legítimos accedan a SAP Internet Graphics Server 7.20, 7.20EXT, 7.45, 7.49, 7.53 y sus servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:msa_1040_san_storage_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gl220p008",
            "matchCriteriaId" : "F030D3F0-BBB9-4EBB-810D-4DCDBE6E339B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:msa_1040_san_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B9C5B7-AB52-455D-8491-69D68739232E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:msa_2040_san_storage_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "gl220p008",
            "matchCriteriaId" : "535E6A19-E6A7-488A-B696-18C47B6DC815"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:msa_2040_san_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A854035A-C6FF-447C-9CE5-BDEC523E8696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbst03780en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbst03780en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8961",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.450",
      "lastModified" : "2024-11-21T03:35:04.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas circunstancias, un usuario malicioso que provoque una desreferencia de puntero NULL puede evitar que usuarios legítimos accedan a SAP Internet Graphics Server 7.20, 7.20EXT, 7.45, 7.49, 7.53 y sus servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039702",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03788en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03788en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8962",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.513",
      "lastModified" : "2024-11-21T03:35:04.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) reflejado en SAP internet Graphics Server 7.20, 7.20EXT, 7.45, 7.49 y 7.53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8963",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.560",
      "lastModified" : "2024-11-21T03:35:04.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en SAP internet Graphics Server 7.20, 7.20EXT, 7.45, 7.49 y 7.53 podría permitir que un usuario malicioso almacene gráficos en un área controlada y, por lo tanto, obtenga información del área del sistema que no estaría disponible al usuario de otra forma."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8964",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.607",
      "lastModified" : "2024-11-21T03:35:05.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de deserialización de datos no fiables en Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8965",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.653",
      "lastModified" : "2024-11-21T03:35:05.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) no realiza las comprobaciones necesarias de autorización para un usuario autenticado, lo que resulta en un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8966",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.700",
      "lastModified" : "2024-11-21T03:35:05.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "En SAP HANA Extended Application Services 1.0, un usuario no autenticado podría probar si un usuario determinado es válido evaluando los mensajes de error de un endpoint en concreto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8967",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.747",
      "lastModified" : "2024-11-21T03:35:05.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "En SAP HANA Extended Application Services 1.0, los usuarios no autorizados pueden leer datos estadísticos sobre las aplicaciones desplegadas, incluyendo el consumo de recursos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8969",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.827",
      "lastModified" : "2024-11-21T03:35:05.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found."
      }, {
        "lang" : "es",
        "value" : "En SAP HANA Extended Application Services 1.0, algunos datos de estado y estadísticas generales del servidor podrían recuperarse por usuarios no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:insight_control:7.6:lr1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC30BFD-2BF3-48BF-8658-F4D3ED037D37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101883",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03794en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03794en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8970",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.873",
      "lastModified" : "2024-11-21T03:35:05.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found."
      }, {
        "lang" : "es",
        "value" : "En SAP HANA Extended Application Services 1.0, un usuario controller que tenga la autorización SpaceAuditor en un espacio específico podría recuperar entornos de la aplicación en ese espacio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:lr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5675FF15-7648-4110-9518-87BABC175D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8971",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.920",
      "lastModified" : "2024-11-21T03:35:05.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found."
      }, {
        "lang" : "es",
        "value" : "En SAP HANA Extended Application Services 1.0, un usuario controller que tenga la autorización SpaceAuditor en un espacio específico podría recuperar entornos de la aplicación en ese espacio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:lr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5675FF15-7648-4110-9518-87BABC175D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8972",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:08.967",
      "lastModified" : "2024-11-21T03:35:06.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found."
      }, {
        "lang" : "es",
        "value" : "En SAP HANA Extended Application Services 1.0, un usuario controller que tenga la autorización SpaceAuditor en un espacio específico podría recuperar datos sensibles de la aplicación como los enlaces del servicio en ese espacio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:lr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5675FF15-7648-4110-9518-87BABC175D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8973",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.027",
      "lastModified" : "2024-11-21T03:35:06.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas circunstancias, un endpoint específico de la API del controlador podría ser empleado erróneamente por usuarios no autenticados para ejecutar instrucciones SQL que envían información sobre la configuración del sistema en SAP HANA Extended Application Services 1.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:matrix_operating_environment:7.6:lr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5675FF15-7648-4110-9518-87BABC175D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8974",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.077",
      "lastModified" : "2024-11-21T03:35:06.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found."
      }, {
        "lang" : "es",
        "value" : "En la versión 1.0 de SAP HANA Extended Application Services, una contraseña keystore plana se escribe en un archivo de registro del sistema, lo que podría poner en peligro la confidencialidad de la comunicación SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t6533h02",
            "versionEndIncluding" : "t6533h04\\^adf",
            "matchCriteriaId" : "AB8E3429-4707-4147-B517-2FA1761611DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t6533l01",
            "versionEndIncluding" : "t6533l01\\^adn",
            "matchCriteriaId" : "31E59888-AEC4-442C-BE32-48B71954AA93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:nonstop_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C2C32B-5ABC-4679-9A99-F17829E36182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102530",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8975",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.123",
      "lastModified" : "2024-11-21T03:35:06.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found."
      }, {
        "lang" : "es",
        "value" : "El proveedor de servicios SAML 2.0 de SAP Netweaver AS Java Web Application 7.50 no codifica lo suficiente las entradas controladas por el usuario, lo que resulta en una vulnerabilidad de Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:moonshot_provisioning_manager_appliance:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681D4DCC-C81B-4BC7-BAF8-B30CBEC33C41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102410",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8976",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.170",
      "lastModified" : "2024-11-21T03:35:06.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Server Side Request Forgery (SSRF) en SAP Central Management Console, BI Launchpad y Fiori BI Launchpad, 4.10, de 4.20 y de 4.30, podría permitir que un usuario malicioso emplee técnicas comunes para determinar qué puertos están en uso en el servidor backend."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:moonshot_provisioning_manager_appliance:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681D4DCC-C81B-4BC7-BAF8-B30CBEC33C41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102410",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8977",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.200",
      "lastModified" : "2024-11-21T03:35:06.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas condiciones, SAP HANA 1.00 y 2.00 permite que un atacante no autenticado acceda a información que, de otra forma, estaría restringida. Un atacante puede emplear erróneamente la función de autenticación del servidor de SAP HANA en su interfaz de SQL y revelar 8 bytes de la memoria del proceso del servidor. El atacante no puede influenciar o predecir la ubicación de la memoria filtrada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:moonshot_provisioning_manager_appliance:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681D4DCC-C81B-4BC7-BAF8-B30CBEC33C41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102410",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8978",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.247",
      "lastModified" : "2024-11-21T03:35:06.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found."
      }, {
        "lang" : "es",
        "value" : "SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01 y S4FND 1.02, no valida suficientemente y/o codifica los campos ocultos, lo que resulta en una vulnerabilidad de Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_mcrp:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3797D08F-16ED-49E0-9CF1-7A73035D7AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0444520D-5D40-4637-B200-8413DE664DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1AC7D65E-80B4-4031-9E76-FDC2302A505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso:10.0:p8:*:*:dfw:*:*:*",
            "matchCriteriaId" : "04C02CA4-A7C0-4D20-9CA9-E71F0B7F1535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA1E625-903D-49CC-B03E-C06B4699C8B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03806en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03806en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8979",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.293",
      "lastModified" : "2024-11-21T03:35:06.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass, code execution, and denial of service."
      }, {
        "lang" : "es",
        "value" : "En Apache JMeter 2.X y 3.X, al emplear solo Distributed Test (basado en RMI), el servidor jmeter enlaza el registro RMI al host de caracteres comodín. Esto podría permitir que un atacante obtenga acceso a JMeterEngine y envíe código no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_2_firmware:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D443C13F-AA9A-4644-98B0-AB9E323456BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3BB462-1E25-4D84-ABC6-68F6762D719D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03797en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03797en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03797en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03797en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8980",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.357",
      "lastModified" : "2024-11-21T03:35:06.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found."
      }, {
        "lang" : "es",
        "value" : "El kernel de Windows en Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server, versión 1709 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que se gestionan los objetos en la memoria. Esto también se conoce como \"Windows Kernel Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2018-0756. CVE-2018-0809, CVE-2018-0820 y CVE-2018-0843."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*",
            "matchCriteriaId" : "16728216-DDCF-4842-9C7F-02FE7E055E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102925",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03810en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03810en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8981",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.420",
      "lastModified" : "2024-11-21T03:35:07.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506 was found."
      }, {
        "lang" : "es",
        "value" : "Ruckus Networks Solo APs, en versiones de firmware R110.x o anteriores y Ruckus Networks SZ managed APs, en versiones de firmware R5.x o anteriores, contienen inyección de comandos root autenticados en la interfaz gráfica de usuario web que podrían permitir que usuarios autenticados válidos ejecuten comandos privilegiados en los respectivos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0506:*:*:*:*:*:*",
            "matchCriteriaId" : "394C1F2C-5852-4A99-82AD-1B874E8F4164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03813en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03813en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8982",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.480",
      "lastModified" : "2024-11-21T03:35:07.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found."
      }, {
        "lang" : "es",
        "value" : "Ruckus Networks Unleashed AP, en versiones de firmware anteriores a 200.6.10.1.x y Ruckus Networks Zone Director, en versiones de firmware 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x y 10.0.1.0.x o anteriores, contienen inyección de comandos root autenticados en la interfaz de línea de comandos que podrían permitir que usuarios autenticados válidos ejecuten comandos privilegiados en los respectivos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p04:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4C972-D942-40A3-AFDE-A3A2B34416BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040283",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03809en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44648/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-18-139/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03809en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44648/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8983",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.543",
      "lastModified" : "2024-11-21T03:35:07.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found."
      }, {
        "lang" : "es",
        "value" : "OpenRC opentmpfiles, hasta la versión 0.1.3, cuando el sysctl fs.protected_hardlinks está desactivado, permite que los usuarios locales se hagan dueños de archivos arbitrarios mediante la creación de un vínculo físico en un directorio en el que se ejecutará \"chown -R\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BA41BBA8-B9A5-45F6-A3E2-9A0DEB6700E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03808en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03808en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8984",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.590",
      "lastModified" : "2024-11-21T03:35:07.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found."
      }, {
        "lang" : "es",
        "value" : "En ARM mbed TLS, en versiones anteriores a la 2.7.0, hay una omisión de comprobación de límites mediante un desbordamiento de enteros en el análisis de identidad PSK en la función ssl_parse_client_psk_identity() en library/ssl_srv.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:intelligent_management_center:7.3:e0506p03:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8C4E2F-25CF-4949-A6FE-7FDF6F27B36D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102922",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03811en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03811en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8985",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.637",
      "lastModified" : "2024-11-21T03:35:07.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00."
      }, {
        "lang" : "es",
        "value" : "IBM Connections 4.0, 4.5, 5.0, 5.5 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134004."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:xp_storage_hitachi_global_link_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0-00",
            "versionEndIncluding" : "8.5.2-00",
            "matchCriteriaId" : "556A1044-3DC5-447D-8700-C51F7D7E6D67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03819en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03819en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8993",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-02-15T22:29:09.683",
      "lastModified" : "2024-11-21T03:35:08.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Asset Management versiones 7.5 y 7.6 podría permitir que un atacante remoto incluya archivos arbitrarios y, como consecuencia, ejecute código en el servidor Web vulnerable. IBM X-Force ID: 129106."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:project_and_portfolio_management:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C473C7-52B6-4AB1-B71C-2F4CED7AB1D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:project_and_portfolio_management:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEF1692-B5E6-4DDD-8CFD-12AE7ED0C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:project_and_portfolio_management:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3C3EE7-40E4-45EA-9624-FF28FF74716F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:project_and_portfolio_management:9.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAB4FD1-6A7A-40B7-B0FA-4E5436C369ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100087",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039065",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03766en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03766en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-16T04:29:00.213",
      "lastModified" : "2024-11-21T03:13:00.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php."
      }, {
        "lang" : "es",
        "value" : "trixbox 2.8.0.4 tiene inyección de comandos del sistema operativo mediante metacaracteres shell en el parámetro lang en /maint/modules/home/index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netfortris:trixbox:2.8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD1F2A5-E5E7-42D9-83E9-4686F51F119D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162854/Trixbox-2.8.0.4-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103004",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14535-Exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/tiger_tigerboy/status/962689803270500352",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/pulse/trixbox-os-command-injection-vulnerability-sachin-wagh-ceh-ecsa-/?published=t",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162854/Trixbox-2.8.0.4-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14535-Exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/tiger_tigerboy/status/962689803270500352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/pulse/trixbox-os-command-injection-vulnerability-sachin-wagh-ceh-ecsa-/?published=t",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-16T04:29:00.290",
      "lastModified" : "2024-11-21T03:13:00.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php."
      }, {
        "lang" : "es",
        "value" : "trixbox 2.8.0.4 tiene XSS mediante PATH_INFO en /maint/index.php o /user/includes/language/langChooser.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netfortris:trixbox:2.8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD1F2A5-E5E7-42D9-83E9-4686F51F119D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103009",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-cross-site-scripting-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-cross-site-scripting-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-16T04:29:00.337",
      "lastModified" : "2024-11-21T03:13:00.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php."
      }, {
        "lang" : "es",
        "value" : "trixbox 2.8.0.4 tiene salto de directorio mediante el parámetro del array xajaxargs en /maint/index.php?packages o el parámetro lang en /maint/modules/home/index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netfortris:trixbox:2.8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD1F2A5-E5E7-42D9-83E9-4686F51F119D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103007",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14537-Exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-14537-Exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-16T17:29:00.217",
      "lastModified" : "2024-11-21T03:19:31.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1)."
      }, {
        "lang" : "es",
        "value" : "Una entrada en la lista blanca localhost.localdomain en valid_host() en scheduler/client.c en CUPS, en versiones anteriores a la 2.2.2, permite que atacantes remotos ejecuten comandos IPP arbitrarios mediante el envío de peticiones POST al demonio CUPS junto con reenlaces DNS. El nombre localhost.localdomain suele resolverse mediante un servidor DNS (ni el sistema operativo ni el navegador web son responsables de garantizar que localhost.localdomain sea 127.0.0.1)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "295435A4-C8D6-4FB5-9C28-D63A1B88DCFA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1048",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3577-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3577-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18089",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-16T18:29:00.210",
      "lastModified" : "2024-11-21T03:19:20.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The view review history resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the invited reviewers for a review."
      }, {
        "lang" : "es",
        "value" : "El recurso view review history en Atlassian Crucible en versiones anteriores a la 4.4.3 (la versión solucionada para 4.4.x) y 4.5.0 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través de los críticos (reviewers) invitados para una revisión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "C1A5C301-8708-4774-9DC5-717E88A805F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103075",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8169",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18090",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-16T18:29:00.273",
      "lastModified" : "2024-11-21T03:19:20.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a commit author."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en Atlassian Fisheye en versiones anteriores a la 4.5.1 (la versión solucionada para 4.5.x) y en versiones anteriores a la 4.6.0 permiten que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en nombre de un autor de commit."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4FA7F3-F6C3-4976-9E2A-2C7A6FE8329D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103076",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7000",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18091",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-16T18:29:00.337",
      "lastModified" : "2024-11-21T03:19:20.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The admin backupprogress action in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the filename of a backup."
      }, {
        "lang" : "es",
        "value" : "La acción de administrador backupprogress en Atlassian Fisheye y Crucicle en versiones anteriores a la 4.4.3 (la versión solucionada para 4.4.x) y en versiones anteriores a la 4.5.0 permite que atacantes remotos con privilegios de administrador inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el nombre de archivo de una copia de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "97718354-9B00-4E93-A879-7423456E0344"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "C1A5C301-8708-4774-9DC5-717E88A805F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103079",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8173",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7006",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T04:29:00.233",
      "lastModified" : "2024-11-21T03:17:15.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for configuration policies via a predictable /client-data/<client_id>/collections/##/usermgmt.xml URL, as demonstrated by passwords and Wi-Fi keys. This is fixed in build 100157."
      }, {
        "lang" : "es",
        "value" : "Una revelación de información remota y un escalado de privilegios en ManageEngine Desktop Central MSP 10.0.137 permiten que atacantes descarguen archivos XML sin cifrar que contienen todos los datos de las políticas de configuración mediante una URL /client-data//collections/##/usermgmt.xml predecible, tal y como demuestran las contraseñas y las claves Wi-Fi. Esto se ha solucionado en la build 100157."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_desktop_central:10.0.137:*:*:*:managed_service_providers:*:*:*",
            "matchCriteriaId" : "3A4F1EBC-6218-4CC4-BC06-E031E5881001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/snoonan77/security-research/blob/master/CVE-2017-16924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/desktop-management-msp/password-encryption-policy-violation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/snoonan77/security-research/blob/master/CVE-2017-16924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/desktop-management-msp/password-encryption-policy-violation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15712",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-19T14:29:00.207",
      "lastModified" : "2024-11-21T03:15:03.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad permite que un usuario de Apache Oozie desde la versión 3.1.3-incubating hasta la 4.3.0 y 5.0.0-beta1 exponga archivos privados en el proceso del servidor Oozie. Este usuario malicioso puede construir un archivo XML de flujo de trabajo que contenga directivas XML y configuración que haga referencia a archivos sensibles en el host del servidor del Oozie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E27E277-5C05-4A7F-8F3A-705A69CC64C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553025E8-0C63-4884-AF2B-DE273495FEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDD671D-4BB7-4E34-9FA3-9CBC5D8C72E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE1BFA-1092-451C-8298-2B18E504C0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.2.0:incubating:*:*:*:*:*:*",
            "matchCriteriaId" : "2E3F39F1-D6A4-4A3D-A599-BDA44C35F325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB5A75F-E3D6-4473-ACC9-A395784E9257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "54AA2C05-D12A-40B2-9057-678DE35A26D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7EF67B4-BAFB-487D-972C-258213C6A400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D645772-64AA-4D4D-9206-A858592E053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "34085D87-5EE4-478D-8A6B-97E05F965AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5682A48E-976D-4F0D-BA4C-63B42788500F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0D2683-519E-4833-9A68-0EA11DF93829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:3.3.2:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA8E7A5-530A-4EEE-8613-ECD01CCFA0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A0A49A-A1B4-4FEB-94E3-762E40A816E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "92AFFD7F-3B8F-4A06-9EF9-C1BFC6D97519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "160E96D4-289C-4021-B1D7-2EA9001150A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEC1364-33EE-41EB-8692-9039BA7D7969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A24D04C-CE3C-49FF-B340-D204CFF458E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC90787-032C-48CC-BCAF-F1D0123B73B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "963D7266-7665-4849-867F-4DDEC8166813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE25673C-5D56-42CF-8611-E6189B6A7FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.1.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "6343A815-8D76-458C-BB3E-2B095543DA2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2BC58D-1695-453B-809C-EAC92D2BDD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F5CE52-B0A6-433E-B8C0-346A9E16FC7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.2.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "CF297DCD-64F6-4035-9998-010CEE6E59F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD866B64-C655-4FEA-B1DA-012A0AE5397F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.3.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "39A5D900-5625-4653-BC46-B42E2BF97D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C14F101-7DBA-4872-A055-45B0D6DE2F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:oozie:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5FADBD-3A42-4BA4-A48E-3AB3AF941C48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103102",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4606709264fe7cb0285e2a12aca2d01a06b14cd58791c9fc32abd216%40%3Cdev.oozie.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/103102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/4606709264fe7cb0285e2a12aca2d01a06b14cd58791c9fc32abd216%40%3Cdev.oozie.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T14:29:00.257",
      "lastModified" : "2024-11-21T03:16:54.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting vulnerability exists in the \"return\" parameter of the \"index.php?pg=moderated\" endpoint. It executes when the return link is clicked."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 4.7.2 de Userscape HelpSpot. Existe una vulnerabilidad Cross-Site Scripting (XSS) en el parámetro return del endpoint index.php?pg=moderated. Se ejecuta cuando se accede al enlace de retorno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:userscape:helpspot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "9FAC5507-EB1F-4858-8962-504ECBE20149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ruby.sh/helpspot-disclosure-20180206.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases/version-4-7-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ruby.sh/helpspot-disclosure-20180206.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases/version-4-7-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T14:29:00.333",
      "lastModified" : "2024-11-21T03:16:54.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Userscape HelpSpot before 4.7.2. A cross-site request forgery vulnerability exists on POST requests to the \"index.php?pg=password.change\" endpoint. This allows an attacker to change the password of another user's HelpSpot account."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 4.7.2 de Userscape HelpSpot. Existe una vulnerabilidad Cross-Site Request Forgery (CSRF) en las peticiones POST en el endpoint index.php?pg=password.change. Esto permite que un atacante cambie la contraseña de la cuenta de HelpSpot de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:userscape:helpspot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "9FAC5507-EB1F-4858-8962-504ECBE20149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ruby.sh/helpspot-disclosure-20180206.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases/version-4-7-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ruby.sh/helpspot-disclosure-20180206.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.helpspot.com/releases/version-4-7-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18092",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-19T14:29:00.397",
      "lastModified" : "2024-11-21T03:19:20.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of a comment on the snippet."
      }, {
        "lang" : "es",
        "value" : "El recurso print snippet en Atlassian Crucible en versiones anteriores a la 4.4.3 (la versión parcheada para 4.4.x) y anteriores a la 4.5.0 permite que atacantes remotos inyecten código HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través de los contenidos de un comentario en el snippet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "8D3D670E-B0C7-4D4F-8E9B-C74BC2400146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103082",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8176",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18093",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-19T14:29:00.457",
      "lastModified" : "2024-11-21T03:19:20.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allow remote attackers who have permission to add or modify a repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the location setting of a configured repository."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en Atlassian Fisheye y Crucible en versiones anteriores a la 4.4.3 (la versión parcheada para 4.4.x) y anteriores a la 4.5.0 permite que atacantes remotos que tengan permiso para añadir o modificar un repositorio inyecten código HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través de la configuración de localización de un repositorio configurado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "97718354-9B00-4E93-A879-7423456E0344"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "C1A5C301-8708-4774-9DC5-717E88A805F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103095",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8175",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7008",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18095",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-02-19T14:29:00.520",
      "lastModified" : "2024-11-21T03:19:21.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 allows remote attackers to comment on snippets they do not have authorization to access via an improper authorization vulnerability."
      }, {
        "lang" : "es",
        "value" : "La clase SnippetRPCServiceImpl en Atlassian Crucible en versiones anteriores a la 4.5.1 (la versión parcheada de 4.5.x) y anteriores a la 4.6.0 permite que los atacantes remotos comenten en snippets en los cuales no tienen autorización de acceso mediante una vulnerabilidad de autorización incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "CC7AF5E6-136F-4DED-823F-602C6863265B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103207",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8178",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12609",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-19T16:29:00.253",
      "lastModified" : "2023-11-07T02:38:25.787",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T17:29:00.203",
      "lastModified" : "2024-11-21T03:19:31.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en OpenStack Nova en versiones 15.x hasta la 15.1.0 y 16.x hasta la 16.1.1. Al desconectar y volver a conectar un volumen cifrado, un atacante podría acceder al volumen en bruto subyacente y corromper la cabecera LUKS, resultando en un ataque de denegación de servicio (DoS) en el host de computación. (El mismo código de error resulta en pérdida de datos, pero no se trata de una vulnerabilidad porque el usuario pierde sus propios datos). Todas las configuraciones de Nova que soportan volúmenes cifrados están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndIncluding" : "15.1.0",
            "matchCriteriaId" : "C4941F71-BCC5-4D52-A640-29ECE6A1EC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndIncluding" : "16.1.1",
            "matchCriteriaId" : "314BD034-893F-42AF-B3A2-C44117AD4E9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2018/04/20/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2332",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2714",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2855",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1739593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/539893",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.openstack.org/ossa/OSSA-2018-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2018/04/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1739593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/539893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.openstack.org/ossa/OSSA-2018-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T19:29:00.610",
      "lastModified" : "2024-11-21T03:16:47.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file."
      }, {
        "lang" : "es",
        "value" : "a funcionalidad de importación de proyectos en SoapUI 5.3.0 permite que los atacantes remotos ejecuten código Java arbitrario mediante un parámetro request manipulado en un archivo de proyecto WSDL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:soapui:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0D6CB-19D5-469F-92A5-E12AD14F864D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/146339/SoapUI-5.3.0-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/146339/SoapUI-5.3.0-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T19:29:00.657",
      "lastModified" : "2024-11-21T03:17:29.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration files with all the passwords, system information, and much more. With this vulnerability, anyone can access to a vulnerable webcam with 'super admin' privilege."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el software Apexis APM-H803-MPC utilizado con muchos modelos diferentes de cámara IP. Un método CGI no protegido dentro de la aplicación web permite que usuario no autenticado omita la pantalla de inicio de sesión y acceda a los contenidos de la webcam, incluyendo emisiones en directo, archivos de configuración con todas las contraseñas, información del sistema y mucho más. Con esta vulnerabilidad, cualquiera puede acceder a una webcam vulnerable con privilegio \"super admin\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apexis:apm-h803-mpc_firmware:1.1.2.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70927042-AC5D-420D-AC46-450F0696A3BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:apexis:apm-h803-mpc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE434DF1-49F2-4390-82B1-9DBD8BCFD474"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://youtu.be/B75C13Zw35Y",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/B75C13Zw35Y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T19:29:00.703",
      "lastModified" : "2024-11-21T03:31:45.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with default parser flags, and expose content from local files, HTTP, or FTP servers (which might be otherwise unreachable)."
      }, {
        "lang" : "es",
        "value" : "Un error en libxml2 permite la inclusión de entidades XML con marcas de analizador por defecto (por ejemplo, cuando el \"caller\" no solicitó la sustitución de entidades, validación DTD, carga de subconjuntos DTD externo o los atributos DTD por defecto). Dependiendo del contexto, esto podría exponer una superficie de ataque de mayor riesgo en libxml2 que, normalmente, no sería accesible mediante marcas de analizador por defecto. Además, podría exponer contenido de archivos locales o de servidores HTTP y FTP (que serían inalcanzables de otra forma)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.4",
            "matchCriteriaId" : "8CC4875D-A4B2-4A7C-B020-7C2E86412B7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "22C47A2C-C09C-404B-9E77-AA6E10C300D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E6D2E2-FBA0-479E-B242-D15014FD4E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libxml2/+/308396a55280f69ad4112d4f9892f4cbeff042aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1462203",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=90ccb58242866b0ba3edbef8fe44214a101c2b3e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3952",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libxml2/+/308396a55280f69ad4112d4f9892f4cbeff042aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1462203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=90ccb58242866b0ba3edbef8fe44214a101c2b3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-19T19:29:00.767",
      "lastModified" : "2024-11-21T03:31:45.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en libxml2 permite que atacantes remotos ejecuten código arbitrario aprovechando un límite incorrecto para los valores del puerto cuando se gestionan las redirecciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.5",
            "matchCriteriaId" : "C4B3A4BD-14E7-4D4D-81C9-6A355F49C978"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1462216",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3952",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1462216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T06:29:00.433",
      "lastModified" : "2024-11-21T03:17:03.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Photo,Video Locker-Calculator\" application 12.0 for Android has android:allowBackup=\"true\" in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an \"adb backup '-f smart.calculator.gallerylock'\" command."
      }, {
        "lang" : "es",
        "value" : "La aplicación Photo,Video Locker-Calculator 12.0 para Android tiene android:allowBackup=\"true\" en AndroidManifest.xml, lo que permite que atacantes remotos obtengan información sensible en texto claro mediante un comando \"adb backup '-f smart.calculator.gallerylock'\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo\\,video_locker-calculator_project:photo\\,video_locker-calculator:12.0:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A77D64A1-F6CA-4757-B4D6-76E161EBABDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T06:29:00.477",
      "lastModified" : "2024-11-21T03:19:31.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smart/calculator/gallerylock/CalculatorActivity.java in the \"Photo,Video Locker-Calculator\" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN."
      }, {
        "lang" : "es",
        "value" : "smart/calculator/gallerylock/CalculatorActivity.java en la aplicación \"Photo,Video Locker-Calculator\" hasta la versión 18 para Android permite que los atacantes accedan a archivos mediante la puerta trasera 17621762 PIN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo\\,video_locker-calculator_project:photo\\,video_locker-calculator:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "18.0",
            "matchCriteriaId" : "683B72C4-8462-44D7-851A-FECD63A72947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T15:29:00.303",
      "lastModified" : "2024-11-21T03:16:19.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/plugin_sige/print.php link with a crafted img, name, or caption parameter."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) reflejado en Kubik-Rubik SIGE (Simple Image Gallery Extended), en versiones anteriores a la 3.3.0, permite que atacantes ejecuten JavaScript en el navegador de la víctima haciendo que visite un enlace plugins/content/sige/plugin_sige/print.php con un parámetro img, name o caption manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubik-rubik:simple_image_gallery_extended:*:*:*:*:*:joomla\\!:*:*",
            "versionEndExcluding" : "3.3.0",
            "matchCriteriaId" : "715A8B44-6503-4054-9C2D-F2951CAAFBCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/146422/Joomla-Kubik-Rubik-SIGE-3.2.3-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44104/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/146422/Joomla-Kubik-Rubik-SIGE-3.2.3-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44104/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T16:29:00.197",
      "lastModified" : "2024-11-21T03:29:13.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arbitrary code via a crafted image containing a malformed chunk size descriptor."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en APNGDis 2.8 y anteriores permite que atacantes remotos provoquen una denegación de servicio (DoS) y la posible ejecución de código arbitrario mediante una imagen manipulada que contiene un descriptor de tamaño de fragmento malformado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng_disassembler_project:apng_disassembler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "791F5052-35FD-4FBA-B26F-CBB351B28A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97053",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41668/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41669/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.onvio.nl/nieuws/cve-2017-6191-apngdis-chunk-size-descriptor-buffer-overflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41668/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41669/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.onvio.nl/nieuws/cve-2017-6191-apngdis-chunk-size-descriptor-buffer-overflow",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T16:29:00.257",
      "lastModified" : "2024-11-21T03:29:13.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted image containing a malformed image size descriptor in the IHDR chunk."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en APNGDis 2.8 y anteriores permite que atacantes remotos provoquen una denegación de servicio (DoS) y la posible ejecución de código arbitrario mediante una imagen manipulada que contiene un descriptor de tamaño de imagen malformado en el fragmento IHDR."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng_disassembler_project:apng_disassembler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "791F5052-35FD-4FBA-B26F-CBB351B28A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97053",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41668/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41669/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.onvio.nl/nieuws/cve-2017-6192-apngdis-width-height-buffer-overflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41668/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41669/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.onvio.nl/nieuws/cve-2017-6192-apngdis-width-height-buffer-overflow",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T19:29:00.210",
      "lastModified" : "2024-11-21T03:06:50.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container (without the user's knowledge) by inspecting network traffic from a Samsung server and injecting content at a certain point in the update sequence. This installed application can further leak information stored inside the Knox container to the outside world."
      }, {
        "lang" : "es",
        "value" : "En Knox SDS IAM (Identity Access Management) y EMM (Enterprise Mobility Management) 16.11 en dispositivos móviles de Samsung, un atacante Man-in-the-Middle (MitM) puede instalar cualquier aplicación en el contenedor de Knox (sin que el usuario lo sepa) inspeccionando el tráfico de red de un servidor Samsung e inyectando contenido en un punto específico de la secuencia de actualización. La aplicación instalada puede filtrar información almacenada en el contenedor de Knox al exterior."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:knox_enterprise_mobility_management:16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B010D51-9627-438A-8C21-FF4647A9DA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:knox_identity_access_management:16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010D6038-4313-46D6-9460-517B6150357C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/e96e02/12ce905e3b724954273dd7d543a968f1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.lgsinnovations.com/lgs-innovations-discovers-samsung-mobile-product-security-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/e96e02/12ce905e3b724954273dd7d543a968f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.lgsinnovations.com/lgs-innovations-discovers-samsung-mobile-product-security-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T22:29:00.223",
      "lastModified" : "2024-11-21T03:17:57.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site Scripting (XSS) vulnerability when a user enters invalid UTF-8 characters. These are now going to be discarded in Mahara along with NULL characters and invalid Unicode characters. Mahara will also avoid direct $_GET and $_POST usage where possible, and instead use param_exists() and the correct param_*() function to fetch the expected value."
      }, {
        "lang" : "es",
        "value" : "Mahara 16.10 en versiones anteriores a la 16.10.7, versiones 17.04 anteriores a la 17.04.5 y versiones 17.10 anteriores a la 17.10.2 tiene una vulnerabilidad de Cross Site Scripting (XSS) cuando un usuario introduce caracteres UTF-8 no válidos. Estos serán descartados en Mahara junto con caracteres NULL y caracteres Unicode inválidos. Mahara también evitará el uso directo de $_GET y $_POST cuando sea posible; a su vez empleará param_exists() y la función correcta param_*() para recuperar el valor esperado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.10.0",
            "versionEndExcluding" : "16.10.7",
            "matchCriteriaId" : "2EC68C57-F2E1-4E20-9E38-99D3218BAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.04.0",
            "versionEndExcluding" : "17.04.5",
            "matchCriteriaId" : "00BD0F18-7087-4D31-B8E0-159F79C4B13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.10.0",
            "versionEndExcluding" : "17.10.2",
            "matchCriteriaId" : "892E2FAA-F01B-432E-9473-774949895AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1732987",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://reviews.mahara.org/#/c/8191/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1732987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://reviews.mahara.org/#/c/8191/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T22:29:00.283",
      "lastModified" : "2024-11-21T03:17:57.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present."
      }, {
        "lang" : "es",
        "value" : "Mahara 16.10 en versiones anteriores a la 16.10.7, versiones 17.04 anteriores a la 17.04.5 y versiones 17.10 anteriores a la 17.10.2 es vulnerable a ser forzado, mediante un ataque Man-in-the-Middle (MitM), a interactuar con Mahara en el protocolo HTTP en lugar de HTTPS, incluso auque haya un certificado SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.10.0",
            "versionEndExcluding" : "16.10.7",
            "matchCriteriaId" : "2EC68C57-F2E1-4E20-9E38-99D3218BAC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.04.0",
            "versionEndExcluding" : "17.04.5",
            "matchCriteriaId" : "00BD0F18-7087-4D31-B8E0-159F79C4B13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.10.0",
            "versionEndExcluding" : "17.10.2",
            "matchCriteriaId" : "892E2FAA-F01B-432E-9473-774949895AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1734767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8150",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://reviews.mahara.org/#/c/8312/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/mahara/+bug/1734767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mahara.org/interaction/forum/topic.php?id=8150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://reviews.mahara.org/#/c/8312/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T23:29:00.247",
      "lastModified" : "2024-11-21T03:09:26.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OXID eShop Community Edition before 6.0.0 RC2 (development), 4.10.x before 4.10.5 (maintenance), and 4.9.x before 4.9.10 (legacy), Enterprise Edition before 6.0.0 RC2 (development), 5.2.x before 5.2.10 (legacy), and 5.3.x before 5.3.5 (maintenance), and Professional Edition before 6.0.0 RC2 (development), 4.9.x before 4.9.10 (legacy) and 4.10.x before 4.10.5 (maintenance) allow remote attackers to hijack the cart session of a client via Cross-Site Request Forgery (CSRF) if the following pre-conditions are met: (1) the attacker knows which shop is presently used by the client, (2) the attacker knows the exact time when the customer will add product items to the cart, (3) the attacker knows which product items are already in the cart (has to know their article IDs), and (4) the attacker would be able to trick user into clicking a button (submit form) of an e-mail or remote site within the period of visiting the shop and placing an order."
      }, {
        "lang" : "es",
        "value" : "OXID eShop Community Edition en versiones anteriores a la 6.0.0 RC2 (development), 4.10.x anteriores a la 4.10.5 (maintenance) y versiones 4.9.x anteriores a la 4.9.10 (legacy); Enterprise Edition en versiones anteriores a la 6.0.0 RC2 (development), versiones 5.2.x anteriores a la 5.2.10 (legacy) y versiones 5.3.x anteriores a la 5.3.5 (maintenance) y Professional Edition en versiones anteriores a la 6.0.0 RC2 (development), versiones 4.9.x anteriores a la 4.9.10 (legacy) y 4.10.x anteriores a la 4.10.5 (maintenance) permiten que atacantes remotos secuestren la sesión de la cesta de un cliente mediante Cross-Site Request Forgery (CSRF) si se cumplen los siguientes requisitos: (1) el atacante conoce qué tienda está siendo empleada actualmente por el cliente; (2) el atacante sabe en qué momento exacto añadirá el cliente productos en la cesta; (3) el atacante sabe qué productos están ya en la cesta (debe conocer los ID de los artículos) y (4) el atacante podría engañar a un usuario para que haga clic en un botón (formulario de envío) de un email o sitio remoto en el período entre que se visita la tienda y se realiza un pedido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.10",
            "matchCriteriaId" : "1FEEDC08-0C1C-4116-8AE5-49CD7D425EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:professional:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.10",
            "matchCriteriaId" : "33F13A43-3670-4D55-BD70-5E26ACA45CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.10.5",
            "matchCriteriaId" : "4AF4EC8F-7117-4DD0-BD1E-2B044D642FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:professional:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.10.5",
            "matchCriteriaId" : "1A69D17A-994A-48EC-9B4F-01257A68BF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.10",
            "matchCriteriaId" : "5CE46B4B-7F2A-4629-BDBC-FD2FCB969E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.5",
            "matchCriteriaId" : "F650109B-FF62-4837-B0EC-1A9B0ECA05A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:community:*:*:*",
            "matchCriteriaId" : "B70B24C9-3B67-4577-B91E-DEA55FDBA401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A019B397-0B3D-4BC2-BD89-D704718D9ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:professional:*:*:*",
            "matchCriteriaId" : "913BA158-23AE-4129-9533-0091496460B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.oxid-esales.com/view.php?id=6674",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://oxidforge.org/en/security-bulletin-2017-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.oxid-esales.com/view.php?id=6674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://oxidforge.org/en/security-bulletin-2017-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-20T23:29:00.307",
      "lastModified" : "2024-11-21T03:13:54.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.11 (legacy), and 5.3.x before 5.3.6 (maintenance), and Professional Edition before 6.0.0 RC3 (development), 4.9.x before 4.9.11 (legacy) and 4.10.x before 4.10.6 (maintenance) allow remote attackers to crawl specially crafted URLs (aka \"forced browsing\") in order to overflow the database of the shop and consequently make it stop working. Prerequisite: the shop allows rendering empty categories to the storefront via an admin option."
      }, {
        "lang" : "es",
        "value" : "OXID eShop Community Edition en versiones anteriores a la 6.0.0 RC3 (development), 4.10.x anteriores a la 4.10.6 (maintenance) y versiones 4.9.x anteriores a la 04/09/2011 (legacy); Enterprise Edition en versiones anteriores a la 6.0.0 RC3 (development), versiones 5.2.x anteriores a la 05/02/2011 (legacy) y versiones 5.3.x anteriores a la 5.3.6 (maintenance) y Professional Edition en versiones anteriores a la 6.0.0 RC3 (development), versiones 4.9.x anteriores a la 04/09/2011 (legacy) y 4.10.x anteriores a la 4.10.6 (maintenance) permiten que atacantes remotos rastreen URL especialmente manipuladas (\"navegación forzada\") para desbordar la base de datos de la tienda y hacer que deje de funcionar. Prerrequisito: la tienda permite mostrar las categorías vacías en la vista principal mediante una opción de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.11",
            "matchCriteriaId" : "E272C8A6-A5B7-4C04-8F14-B374857A3263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:professional:*:*:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndExcluding" : "4.9.11",
            "matchCriteriaId" : "E5D4F566-3F07-4D92-8C3E-FC4DDF5BF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.10.6",
            "matchCriteriaId" : "DF8C0A78-24C1-4751-9B5B-8D4980351DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:professional:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.10.6",
            "matchCriteriaId" : "710F4268-7682-429B-ADB3-99008B38FD49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.11",
            "matchCriteriaId" : "CF6863A0-FED8-4092-89AA-0AE5F169F80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.6",
            "matchCriteriaId" : "240BEC7B-F5EC-4761-9133-19EB4AC8238A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:community:*:*:*",
            "matchCriteriaId" : "B70B24C9-3B67-4577-B91E-DEA55FDBA401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A019B397-0B3D-4BC2-BD89-D704718D9ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:professional:*:*:*",
            "matchCriteriaId" : "913BA158-23AE-4129-9533-0091496460B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:community:*:*:*",
            "matchCriteriaId" : "4339F463-2EF8-4072-8E06-51A865AE78C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D361898B-F113-4D5E-8ABD-ACCE5DF36FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:professional:*:*:*",
            "matchCriteriaId" : "91E65058-886F-4E13-97B8-711804F95F5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.oxid-esales.com/view.php?id=6678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oxidforge.org/en/security-bulletin-2017-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.oxid-esales.com/view.php?id=6678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oxidforge.org/en/security-bulletin-2017-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12161",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-02-21T18:29:00.213",
      "lastModified" : "2024-11-21T03:08:57.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que keycloak, en versiones anteriores a la 3.4.2 final, permitiría el mal uso de una entrada /etc/hosts del lado del cliente para suplantar una URL en una petición de restablecimiento de contraseña. Un atacante podría emplear este error para manipular una petición maliciosa de restablecimiento de contraseña y obtener un token de restablecimiento válido, lo que conduciría a una divulgación de información o a ataques a mayores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keycloak:keycloak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "B68A0229-AF93-42B1-9058-1E39FDFC63D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484564",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keycloak/keycloak-documentation/pull/268/commits/a2b58aadee42af2c375b72e86dffc2cf23cc3770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1484564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keycloak/keycloak-documentation/pull/268/commits/a2b58aadee42af2c375b72e86dffc2cf23cc3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1462",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-21T21:29:00.267",
      "lastModified" : "2024-11-21T03:21:54.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128461."
      }, {
        "lang" : "es",
        "value" : "IBM Rhapsody DM 5.0 y 6.0 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128461."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B3E2B-B33D-4FB4-A8CF-0D3C781B371E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2214FC95-71C7-4EB5-B924-9626D663E8FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EF2E53-3618-4610-AC36-602584DB26EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF978C93-8747-416A-890B-09575EF0BA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BEB8AD-ACD5-4F5B-8C95-8C1EA8BFE815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57DF8BD-34A6-481A-902A-8E1D190201FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013739",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103127",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040393",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128461",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1604",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-21T21:29:00.327",
      "lastModified" : "2024-11-21T03:22:08.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132851."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo Anywhere 7.5 y 7.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132851."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226D17FE-B528-4712-870A-0FB13B316E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4531212E-95F5-478E-923C-9CA30F76F52D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218237F6-145E-4334-B5B3-DE3DCF87612C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384FF8B2-97DD-424B-82E8-01CCC5596B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD3018-546A-4CFF-B28B-A7DF2EE71634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E203B3E-6A26-40BD-8F72-B738D4BF6EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_anywhere:7.6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184E4817-EC0C-440C-9DF3-28F09B965129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011883",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103126",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132851",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1758",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-21T21:29:00.377",
      "lastModified" : "2024-11-21T03:22:19.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859."
      }, {
        "lang" : "es",
        "value" : "IBM Financial Transaction Manager para ACH Services Multi-Platform (IBM Control Center 6.0 y 6.1; IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4 y 3.1.0; IBM Transformation Extender Advanced 9.0) es vulnerable a un ataque de XEE (XML External Entity) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 135859."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "84CBA4CA-B6A0-46A0-90A1-31ACB24DEA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:cps_services:*:*",
            "matchCriteriaId" : "97879C5D-9C1A-472E-A310-58A4BD641F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.1:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "BD4E52FE-E3DE-433D-93F6-D05AB9DBA462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.3.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "E34E5E99-AE0C-413B-AE92-2B982EDAC330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.0.4.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "FDA7F3AE-EC33-4802-8A89-FDD6C3186B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:financial_transaction_manager:3.1.0.0:*:*:*:*:ach_services:*:*",
            "matchCriteriaId" : "E5BB666B-92D0-413C-9A2B-A65DDC513668"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:transformation_extender_advanced:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51961B3B-AA03-4021-8804-F9D2FE07C073"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:control_center:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25AFD79-FD16-41A5-8BB0-B85E02EE0CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:control_center:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B67822-6ED4-4487-98F6-3E9AA36DC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:control_center:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADF5BB2-AE21-4F3F-9882-C471DE94CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:control_center:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD12F576-7CD7-4B83-800E-EAC369E79F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:control_center:6.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188797B-0146-491B-8AF4-278DDD578974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012828",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013375",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013432",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103130",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135859",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-22T15:29:00.257",
      "lastModified" : "2024-11-21T03:19:31.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service (BUG) via an application with multiple threads."
      }, {
        "lang" : "es",
        "value" : "fs/f2fs/extent_cache.c en el kernel de Linux, en versiones anteriores a la 4.13, gestiona de forma incorrecta los árboles extent, lo que permite que usuarios locales provoquen una denegación de servicio (error) mediante una aplicación con múltiples hilos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2894F22-5448-4402-AE27-6E43BD08E14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dad48e73127ba10279ea33e6dbc8d3905c4d31c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103147",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/dad48e73127ba10279ea33e6dbc8d3905c4d31c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3654-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3654-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3656-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dad48e73127ba10279ea33e6dbc8d3905c4d31c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/dad48e73127ba10279ea33e6dbc8d3905c4d31c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3654-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3654-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3656-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-22T16:29:00.217",
      "lastModified" : "2024-11-21T03:19:31.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in users/signup.php in the \"signup\" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the \"utype\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en users/signup.php en el componente \"signup\" en HamayeshNegar CMS permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro \"utype\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hamayeshnegar:hamayeshnegar_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "9.1.3",
            "matchCriteriaId" : "9D6CFD81-6D36-4F60-9BF5-461F64953454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2017090094",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2018020267",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2017090094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2018020267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5249",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2018-02-22T16:29:00.280",
      "lastModified" : "2024-11-21T03:27:21.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner."
      }, {
        "lang" : "es",
        "value" : "En la versión 6.1.0.19 y anteriores de la aplicación para Android Wink Labs's Wink - Smart Home, el token OAuth empleado por la app para autorizar el acceso de los usuarios no se almacena de forma cifrada y segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        }, {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wink:wink:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "6.1.0.19",
            "matchCriteriaId" : "B9B6FB51-A07C-4828-AAA7-B3ABCABFB1D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5250",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2018-02-22T16:29:00.310",
      "lastModified" : "2024-11-21T03:27:22.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner."
      }, {
        "lang" : "es",
        "value" : "En la versión 1.9.7 y anteriores de la aplicación para Android Insteon for Hub de Insteon, el token OAuth empleado por la app para autorizar el acceso de los usuarios no se almacena de forma cifrada y segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        }, {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insteon:insteon_for_hub:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.9.7",
            "matchCriteriaId" : "E5997BAB-1F22-490C-9367-5EE49BBF1DBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5251",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2018-02-22T16:29:00.357",
      "lastModified" : "2024-11-21T03:27:22.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted."
      }, {
        "lang" : "es",
        "value" : "En la versión 1012 y anteriores de Insteon's Insteon Hub, las comunicaciones de radio empleadas para comunicarse entre el hub y los dispositivos conectados no están cifradas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1012",
            "matchCriteriaId" : "5533AC7C-7C15-4901-823D-EA9F6BD0CA35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-23T21:29:00.243",
      "lastModified" : "2024-11-21T03:19:32.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif."
      }, {
        "lang" : "es",
        "value" : "Leptonica 1.74.4 construye nombres de ruta no planeados (que contienen componentes de ruta duplicados) al operar en archivos en subdirectorios /tmp. Esto podría permitir que usuarios locales omitan las restricciones de archivo planeadas aprovechando el acceso a un directorio situado en el árbol de directorio /tmp, tal y como demuestra /tmp/ANY/PATH/ANY/PATH/input.tif."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leptonica:leptonica:1.74.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B51F5CF-D92B-4D55-8913-762F0FF01383"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/885704",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.debian.org/885704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16769",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-02-23T22:29:00.217",
      "lastModified" : "2024-11-21T03:16:56.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de exposición de información privada en Photo Viewer en Synology Photo Station 6.8.1-3458 permite que atacantes remotos obtengan metadatos de fotografías protegidas con contraseña mediante el modo de vista de mapa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:6.8.1-3458:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE65E503-89C0-46A5-BF53-0EFA176F2E92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_76",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14884",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.217",
      "lastModified" : "2024-11-21T03:13:41.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable \"data_len\" from the function WLANQCMBR_McProcessMsg, a buffer overflow may potentially occur in WLANFTM_McProcessMsg."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, debido a la falta de comprobación de límites en la variable \"data_Ien\" de la función WLANQCMBR_McProcessMsg, podría ocurrir un desbordamiento de búfer en WLANFTM_McProcessMsg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14910",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.297",
      "lastModified" : "2024-11-21T03:13:44.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file."
      }, {
        "lang" : "es",
        "value" : "En Snapdragon Automobile, Snapdragon IoT y Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835 y SD 845, es posible una sobrelectura de búfer si no hay nuevas líneas en un archivo de entradas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:s820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "482F1C72-713F-4D3A-805C-D6BCA2E9D519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:s820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD783AA-2CAD-448E-9C4D-4AA6D4C95A55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:s820am_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD188A-896D-47C4-9CB3-5ABD62FA34AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:s820am:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092D280A-10DA-4482-93D2-5ECB379FF081"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15518",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-02-23T23:29:00.343",
      "lastModified" : "2024-11-21T03:14:42.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Since the affected password is changed during every upgrade/installation no further action is required."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de OnCommand API Services, en versiones anteriores a la 2.1 y NetApp Service Level Manager, en versiones anteriores a la 1.0RC4, registran una contraseña de cuenta de usuario de base de datos privilegiada. Se recomienda encarecidamente que todos los usuarios empleen una versión solucionada. Debido a que la contraseña afectada se cambia en cada actualización/instalación, no es necesario realizar más acciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_api_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "6FA0BED1-643B-4A26-8D13-42FD779C0B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:service_level_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "8EB1BE30-F7FB-4FD8-A3B4-8D53A4EF56E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:service_level_manager:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D72396-C484-4B19-9E30-ADE3012C019C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:service_level_manager:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "80A266E2-11F0-4654-8553-0E88C3EA4188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:service_level_manager:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "450C4C6E-FFCE-44A9-8556-BA52B39EC012"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20180223-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/NTAP-20180223-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15817",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.420",
      "lastModified" : "2024-11-21T03:15:17.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones de Android de CAF que utilizan el kernel de Linux, cuando un punto de acceso envía un texto de desafío con más de 128 bytes, el controlador del host es incapaz de validarlo, lo que desemboca en un fallo de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15820",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.483",
      "lastModified" : "2024-11-21T03:15:17.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, en un manipulador IOCTL KGSL, podría ocurrir una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15829",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.530",
      "lastModified" : "2024-11-21T03:15:18.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en un controlador GPU en todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux podría desembocar en una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15860",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.577",
      "lastModified" : "2024-11-21T03:15:21.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con sistemas operativos Android distribuidos desde el CAF utilizando el kernel de Linux, cuando se procesa una tramacifrada de gestión de autenticación, podría ocurrir un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15861",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.640",
      "lastModified" : "2024-11-21T03:15:21.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel de Linux, en la función wma_roam_synch_event_handler se recibe vdev_id desde el firmware y se emplea para acceder a un array sin validación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15862",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.687",
      "lastModified" : "2024-11-21T03:15:21.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, en wma_unified_link_radio_stats_event_handler(), el número de canales de radio que provienen del firmware no se valida, lo que podría desembocar en una vulnerabilidad de desbordamiento de enteros y en un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17764",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.750",
      "lastModified" : "2024-11-21T03:18:36.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, el valor num_failure_info del firmware no se valida correctamente en wma_rx_aggr_failure_event_handler(), por lo que una vulnerabilidad de desbordamiento de enteros en un cálculo de tamaño de búfer podría desembocar en un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17765",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.813",
      "lastModified" : "2024-11-21T03:18:36.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocate the sizes of buffers and may be vulnerable to integer overflow leading to buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, los múltiples valores recibidos del firmware no se validan correctamente en wma_get_ll_stats_ext_buf() y se emplean para asignar los tamaños de los búfers y podrían ser vulnerables a un desbordamiento de enteros y a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17767",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-02-23T23:29:00.873",
      "lastModified" : "2024-11-21T03:18:37.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer."
      }, {
        "lang" : "es",
        "value" : "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, el cliente IL podría liberar un búfer OMX Video Encoder Component y, a continuación, acceder al búfer ya liberado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-24T02:29:01.893",
      "lastModified" : "2024-11-21T03:19:32.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView."
      }, {
        "lang" : "es",
        "value" : "En mxGraphViewImageReader.java en mxGraph, en versiones anteriores a la 3.7.6, la instancia SAXParserFactory en convert() carece de marcas para evitar ataques de XEE (XML External Entity), tal y como demuestra /ServerView."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgraph:mxgraph:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.5",
            "matchCriteriaId" : "0ADA12EA-1AB1-41A9-A03F-95DFB3037475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jgraph/mxgraph/issues/124",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jgraph/mxgraph/issues/124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-24T06:29:00.240",
      "lastModified" : "2024-11-21T03:19:32.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file."
      }, {
        "lang" : "es",
        "value" : "print_iso9660_recurse en iso-info.c en GNU libcdio, en versiones anteriores a la 1.0.0, permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap) o, probablemente, provocar cualquier otro tipo de problema mediante un archivo iso modificado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libcdio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "1C6D0E1F-FEE1-40C2-B372-A023B6CE9311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103200",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://savannah.gnu.org/bugs/?52265",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://savannah.gnu.org/bugs/?52265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-24T06:29:00.320",
      "lastModified" : "2024-11-21T03:19:32.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file."
      }, {
        "lang" : "es",
        "value" : "realloc_symlink en rock.c en GNU libcdio, en versiones anteriores a la 1.0.0, permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante un archivo iso manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libcdio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "1C6D0E1F-FEE1-40C2-B372-A023B6CE9311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103202",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://savannah.gnu.org/bugs/?52264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://savannah.gnu.org/bugs/?52264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15696",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-26T02:29:00.317",
      "lastModified" : "2024-11-21T03:15:01.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code."
      }, {
        "lang" : "es",
        "value" : "Cuando un clúster de Apache Geode, en versiones anteriores a la v1.4.0, está operando en modo seguro, el servicio de configuración Geode no autoriza las peticiones de configuración correctamente. Esto permite que un usuario no privilegiado que obtenga acceso al localizador Geode extraiga datos de configuración y el código de la aplicación anteriormente implementado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "5D65BE37-D049-4FB0-A749-34B5F461F1D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/28989e6ed0d3c29e46a489ae508302a50407a40691d5dc968f78cd3f%40%3Cdev.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/28989e6ed0d3c29e46a489ae508302a50407a40691d5dc968f78cd3f%40%3Cdev.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T03:29:00.227",
      "lastModified" : "2024-11-21T03:19:32.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs_wait_discard_bios calls, which allows local users to cause a denial of service (BUG), as demonstrated by fstrim."
      }, {
        "lang" : "es",
        "value" : "La implementación f2fs en el kernel de Linux, en versiones anteriores a la 4.14, gestiona erróneamente las cuentas asociadas a las llamadas f2fs_wait_discard_bios. Esto permite que usuarios locales provoquen una denegación de servicio (bug), tal y como demuestra fstrim."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.13",
            "matchCriteriaId" : "F74D9BEC-6597-40F8-9E56-253FAA432D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=638164a2718f337ea224b747cf5977ef143166a4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/638164a2718f337ea224b747cf5977ef143166a4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=638164a2718f337ea224b747cf5977ef143166a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/638164a2718f337ea224b747cf5977ef143166a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T04:29:00.210",
      "lastModified" : "2024-11-21T03:36:05.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action."
      }, {
        "lang" : "es",
        "value" : "La extensión Facetag 0.0.3 para Piwigo permite XSS mediante el parámetro name en ws.php en una acción facetag.changeTag."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facetag_project:facetag:0.0.3:*:*:*:*:piwigo:*:*",
            "matchCriteriaId" : "6661282C-9F6E-4336-866D-B65D56E68CE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://touhidshaikh.com/blog/poc/facetag-ext-piwigo-stored-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42098/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=_ha7XBT_Omo",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://touhidshaikh.com/blog/poc/facetag-ext-piwigo-stored-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42098/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=_ha7XBT_Omo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T04:29:00.273",
      "lastModified" : "2024-11-21T03:36:05.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action."
      }, {
        "lang" : "es",
        "value" : "ws.php en la extensión Facetag 0.0.3 para Piwigo permite inyección SQL mediante el parámetro imageId en ws.php en una acción facetag.changeTag o facetag.listTags."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facetag_project:facetag:0.0.3:*:*:*:*:piwigo:*:*",
            "matchCriteriaId" : "6661282C-9F6E-4336-866D-B65D56E68CE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://touhidshaikh.com/blog/poc/facetag-extension-piwigo-sqli/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42094/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=MVCe_zYtFsQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://touhidshaikh.com/blog/poc/facetag-extension-piwigo-sqli/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42094/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=MVCe_zYtFsQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1774",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-02-26T14:29:00.210",
      "lastModified" : "2024-11-21T03:22:20.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium Big Data Intelligence (SonarG) 3.1 divulga información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 136818."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_big_data_intelligence:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC22A3C0-BD3E-4FB6-9B4D-2241F7AF228A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013595",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103214",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136818",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T14:29:00.273",
      "lastModified" : "2024-11-21T03:19:33.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 2.0.0 de GNU libcdio. Hay una doble liberación (double free) en get_cdtext_generic() en lib/driver/_cdio_generic.c."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libcdio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "EFBA40B1-3EE0-4EDC-8ECE-B9C71CCACAB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103190",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T17:29:00.227",
      "lastModified" : "2024-11-21T03:19:32.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments from all blog posts by POSTing requests to /index.php/tools/required/conversations/view_ajax with incremental 'cnvID' integers."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en tools/conversations/view_ajax.php en Concrete5, en versiones anteriores a la 8.3.0. Un usuario no autenticado puede enumerar comentarios de todos los posts de blog realizando peticiones POST a /index.php/tools/required/conversations/view_ajax con enteros \"cnvID\" incrementales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3.0",
            "matchCriteriaId" : "818039D1-CF32-45D5-BFCA-D95FC7DB2A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/concrete5/concrete5/pull/6008/files",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5/releases/tag/8.3.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/r3naissance/NSE/blob/master/http-vuln-cve2017-18195.nse",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44194/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5/pull/6008/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/concrete5/concrete5/releases/tag/8.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/r3naissance/NSE/blob/master/http-vuln-cve2017-18195.nse",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.243",
      "lastModified" : "2024-11-21T03:08:09.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos Wireless IP Camera 360. Existe una cuenta root con un hash de contraseña SHA-512, lo que facilita que atacantes remotos obtengan acceso administrativo mediante una sesión TELNET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:-:wireless_ip_camera_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDF33C-C39A-4DF5-AA73-31F6EB07CA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.290",
      "lastModified" : "2024-11-21T03:08:09.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos Wireless IP Camera 360. Los atacantes remotos pueden descubrir las credenciales RTSP conectándose al puerto TCP 9527 y leyendo el campo InsertConnect."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:-:wireless_ip_camera_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDF33C-C39A-4DF5-AA73-31F6EB07CA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.350",
      "lastModified" : "2024-11-21T03:08:09.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos Wireless IP Camera 360. Los atacantes remotos pueden descubrir una contraseña de administrador cifrada semanalmente conectándose al puerto TCP 9527 y leyendo el campo password de la información de depuración. Por ejemplo, nTBCS19C se corresponde con una contraseña de 123456."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:-:wireless_ip_camera_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDF33C-C39A-4DF5-AA73-31F6EB07CA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.413",
      "lastModified" : "2024-11-21T03:08:09.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or /mnt/idea1 on the SD memory card."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos Wireless IP Camera 360. Los atacantes pueden leer grabaciones navegando a /mnt/idea0 o a /mnt/idea1 en la tarjeta de memoria SD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:-:wireless_ip_camera_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDF33C-C39A-4DF5-AA73-31F6EB07CA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.477",
      "lastModified" : "2024-11-21T03:16:04.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse."
      }, {
        "lang" : "es",
        "value" : "En la versión 2.8.1 de la gema Ox para Ruby, el proceso se cierra inesperadamente con una sobrelectura de búfer basada en pila en la función read_from_str en sax_buf.c cuando se proporciona una entrada manipulada a sax_parse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ox_project:ox:2.8.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "92069AF4-4506-48C0-8454-EAB755FD8B08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ohler55/ox/issues/195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/ox/versions/2.8.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ohler55/ox/issues/195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/ox/versions/2.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.523",
      "lastModified" : "2024-11-21T03:17:01.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the \"filename\" parameter via Wi-Fi, since the app could fail to parse this."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de denegación de servicio (DoS) en la aplicación Foxit MobilePDF en versiones anteriores a la 6.1. Esto ocurre cuando un usuario sube un archivo que incluye un carácter Unicode hexadecimal en el parámetro \"filename\" mediante Wi-Fi, ya que la aplicación podría no ser capaz de analizarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:mobilepdf:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "A9B4264A-D0D3-48D8-8FFD-4E28046F0160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-26T22:29:00.570",
      "lastModified" : "2024-11-21T03:17:01.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL + escape character during a Wi-Fi transfer, which could be exploited by attackers to bypass intended restrictions on local application files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de salto de directorio en la aplicación Foxit MobilePDF en versiones anteriores a la 6.1. Esto ocurre al abusar del carácter URL + escape durante una transferencia Wi-Fi, lo que podría ser explotado por atacantes para omitir las restricciones planeadas en los archivos locales de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:mobilepdf:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "A9B4264A-D0D3-48D8-8FFD-4E28046F0160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-27T06:29:00.257",
      "lastModified" : "2024-11-21T03:19:33.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window."
      }, {
        "lang" : "es",
        "value" : "La función __oom_reap_task_mm en mm/oom_kill.c en el kernel de Linux, en versiones anteriores a la 4.14.4, gestiona de manera incorrecta las operaciones de recopilación. Esto permite que los atacantes provoquen una denegación de servicio (filtrado de entrada TLB o uso de memoria previamente liberada) u otro tipo de impacto sin especificar desencadenando una llamada copy_to_user en un periodo de tiempo determinado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.9.68",
            "matchCriteriaId" : "0C05C4A8-5FCB-4D28-9A8B-709FEFB394A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.4",
            "matchCriteriaId" : "526A67F6-8D42-4C55-99BE-B68231777244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=687cb0884a714ff484d038e9190edc874edcf146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103161",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2772",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/687cb0884a714ff484d038e9190edc874edcf146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=687cb0884a714ff484d038e9190edc874edcf146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/687cb0884a714ff484d038e9190edc874edcf146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10938",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2018-02-27T14:29:00.217",
      "lastModified" : "2023-11-07T02:38:07.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10939",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2018-02-27T14:29:00.263",
      "lastModified" : "2023-11-07T02:38:07.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15692",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-27T15:29:00.207",
      "lastModified" : "2024-11-21T03:15:00.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath."
      }, {
        "lang" : "es",
        "value" : "En Apache Geode, en versiones anteriores a la v1.4.0, el TcpServer en el localizador Geode abre un puerto de red que deserializa datos. Si un usuario sin privilegios obtiene acceso al localizador Geode, podría ser capaz de provocar la ejecución remota de código si ciertas clases están presentes en la ruta de clase."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "27606D2D-12E3-4B11-BEC9-02F373BE4E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103205",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/103205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15693",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-27T15:29:00.257",
      "lastModified" : "2024-11-21T03:15:01.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Geode before v1.4.0, the Geode server stores application objects in serialized form. Certain cluster operations and API invocations cause these objects to be deserialized. A user with DATA:WRITE access to the cluster may be able to cause remote code execution if certain classes are present on the classpath."
      }, {
        "lang" : "es",
        "value" : "En Apache Geode, en versiones anteriores a la v1.4.0, el servidor Geode almacena objetos de aplicación de forma serializada. Ciertas operaciones del clúster e invocaciones de la API hacen que estos objetos se deserialicen. Un usuario con acceso DATA:WRITE al clúster podría ser capaz de provocar la ejecución remota de código si ciertas clases están presentes en la ruta de clase."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "27606D2D-12E3-4B11-BEC9-02F373BE4E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103206",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/cc3ec1d06062f54fdaa0357874c1d148fc54bb955f2d2df4ca328a3d%40%3Cuser.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/103206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/cc3ec1d06062f54fdaa0357874c1d148fc54bb955f2d2df4ca328a3d%40%3Cuser.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16767",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-02-27T15:29:00.317",
      "lastModified" : "2024-11-21T03:16:56.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en User Profile en Synology Surveillance Station en versiones anteriores a la 8.1.2-5469 permite que atacantes remotos autenticados inyecten scripts web o HTML arbitrarios mediante el parámetro userDesc."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:surveillance_station:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.2-5469",
            "matchCriteriaId" : "E5DF9EAA-EAB8-4EB7-B1F7-168ADB98BFEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_77",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16770",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-02-27T15:29:00.380",
      "lastModified" : "2024-11-21T03:16:56.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de exposición de información de archivos y directorios en SYNO.SurveillanceStation.PersonalSettings.Photo en Synology Surveillance Station, en versiones anteriores a la 8.1.2-5469, permite que usuarios autenticados remotos obtengan los archivos sensibles de otros usuarios mediante el parámetro filename."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:surveillance_station:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.2-5469",
            "matchCriteriaId" : "E5DF9EAA-EAB8-4EB7-B1F7-168ADB98BFEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_77",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-27T15:29:00.443",
      "lastModified" : "2024-11-21T03:18:00.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. A user with developer credentials can insert malicious code (up to 64 characters) into a text field in Designer Studio, after establishing context. Designer Studio is the developer workbench for Pega Platform. That XSS payload will execute when other developers visit the affected pages."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema de XSS en Designer Studio en Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1 y 7.2.2. Un usuario con credenciales de desarrollador puede insertar código malicioso (hasta 64 caracteres) en un campo de texto en Designer Studio, tras haber establecido el contexto. Designer Studio es el área de trabajo para Pega Platform. La carga útil de XSS se ejecutará cuando otros desarrolladores visiten las páginas afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D9BC47-71D5-4B94-A080-CFAC9333B2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E12061-0EE0-438C-8404-ECE0F47B0618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFE81F3-D39E-4C6E-AFD3-079557547329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919692B1-B283-4B23-A5D8-7319A11F319E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED25574F-17E0-488D-998C-3840BD4BB742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15022B1-12CE-446D-95D8-FF81D8974897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:pega_platform:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6229EED8-044C-4DB0-94BB-2451D54BE1C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-17478/pegasystems-security-bulletin-cve-2017-17478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-17478/pegasystems-security-bulletin-cve-2017-17478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12091",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-02-27T16:29:00.273",
      "lastModified" : "2023-11-07T02:38:21.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14462, CVE-2017-14463, CVE-2017-14464, CVE-2017-14465, CVE-2017-14466, CVE-2017-14467, CVE-2017-14468, CVE-2017-14469, CVE-2017-14470, CVE-2017-14471, CVE-2017-14472, and CVE-2017-14473.  Reason: This candidate originally combined multiple issues.  Notes: All CVE users should reference CVE-2017-14462, CVE-2017-14463, CVE-2017-14464, CVE-2017-14465, CVE-2017-14466, CVE-2017-14467, CVE-2017-14468, CVE-2017-14469, CVE-2017-14470, CVE-2017-14471, CVE-2017-14472, and CVE-2017-14473 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-27T20:29:00.260",
      "lastModified" : "2024-11-21T03:19:33.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices."
      }, {
        "lang" : "es",
        "value" : "La función dm_get_from_kobject en drivers/md/dm.c en el kernel de Linux, en versiones anteriores a la 4.14.3, permite que usuarios locales provoquen una denegación de servicio (bug) aprovechando una condición de carrera en __dm_destroy durante la creación y eliminación de dispositivos DM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.3",
            "matchCriteriaId" : "9F3C9534-2349-43A8-A1B3-E683DCE46BE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103184",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-27T20:29:00.340",
      "lastModified" : "2024-11-21T03:19:33.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests."
      }, {
        "lang" : "es",
        "value" : "La función ocfs2_setattr en fs/ocfs2/file.c en el kernel de Linux, en versiones anteriores a la 4.14.2, permite que usuarios locales provoquen una denegación de servicio (deadlock) mediante peticiones DIO."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.2",
            "matchCriteriaId" : "8BFBFB82-9C5E-45C1-AD36-05E379DAE87F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28f5a8a7c033cbf3e32277f4cc9c6afd74f05300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103183",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/28f5a8a7c033cbf3e32277f4cc9c6afd74f05300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28f5a8a7c033cbf3e32277f4cc9c6afd74f05300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/28f5a8a7c033cbf3e32277f4cc9c6afd74f05300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3617-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3617-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5660",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-27T20:29:00.403",
      "lastModified" : "2024-11-21T03:28:07.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad en Apache Traffic Server (ATS) en versiones 6.2.0 y anteriores y versiones 7.0.0 y anteriores con la cabecera Host y el plegado de líneas. Esto puede provocar problemas al interactuar con proxies ascendentes empleando el host erróneo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "CE6129F1-1EAD-4000-A691-A062409DEA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F9A2D-B0AC-44B1-A29F-08D9DB7C415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:6.2.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "02670FD4-41D9-4FFC-8E66-C8F2D76977C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFC3680-1EB6-4AAB-A338-D0BB0B18FF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:6.2.2:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "89019855-BC68-421C-8703-271E859CB5BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00287C7A-7B52-4917-893E-6BBC83734F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:7.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC971C0-5391-42E9-A43C-7EC19C431420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:7.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "20065789-2909-4588-A672-91FE0F6C8C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:7.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8576A4CE-BF77-4DC8-B3BC-85AC647DD2A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/22d84783d94c53a5132ec89f002fe5165c87561a9428bcb6713b3c98%40%3Cdev.trafficserver.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4128",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/22d84783d94c53a5132ec89f002fe5165c87561a9428bcb6713b3c98%40%3Cdev.trafficserver.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7671",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-02-27T20:29:00.450",
      "lastModified" : "2024-11-21T03:32:25.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de ataque de denegación de servicio en Apache Traffic Server (ATS) de las versión 5.2.0 a la 5.3.2; versión 6.0.0 a 6.2.0 y la versión 7.0.0 con la negociación TLS. Este problema puede provocar que el sistema vuelque la memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.3.2",
            "matchCriteriaId" : "AA76F610-D6FB-420F-A62A-D7E1A761278D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.0.0",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "BCDB92CA-A8F6-4F6C-BAC4-7C94303E4D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00287C7A-7B52-4917-893E-6BBC83734F0B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/203bdcf9bbb718f3dc6f7aaf3e2af632474d51fa9e7bfb7832729905%40%3Cdev.trafficserver.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4128",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/203bdcf9bbb718f3dc6f7aaf3e2af632474d51fa9e7bfb7832729905%40%3Cdev.trafficserver.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15136",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-02-27T21:29:00.250",
      "lastModified" : "2024-11-21T03:14:08.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates."
      }, {
        "lang" : "es",
        "value" : "Al registrar y activar un nuevo sistema en Red Hat Satellite 6, si el nombre de host del nuevo sistema se restablece al nombre de host de un sistema registrado previamente, este sistema anterior perderá el acceso a actualizaciones, incluyendo las de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C92A9-0677-442B-8D52-A448F2019903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1540343",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1540343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-27T22:29:00.480",
      "lastModified" : "2024-11-21T03:19:33.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set."
      }, {
        "lang" : "es",
        "value" : "En builtin.c en zsh, en versiones anteriores a la 5.4, cuando se emplea el modo de compatibilidad sh, hay una desreferencia de puntero NULL durante el procesamiento del comando cd sin argumento si no está establecido HOME."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zsh_project:zsh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4",
            "matchCriteriaId" : "72B0529A-A54D-412F-BD7E-1BC8871E82AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/zsh/code/ci/eb783754bdb74377f3cea4ceca9c23a02ea1bf58",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3593-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/zsh/code/ci/eb783754bdb74377f3cea4ceca9c23a02ea1bf58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3593-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-27T22:29:00.543",
      "lastModified" : "2024-11-21T03:19:33.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In utils.c in zsh before 5.4, symlink expansion had a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En utils.c en zsh, en versiones anteriores a la 5.4, la expansión symlink tiene un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zsh:zsh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4",
            "matchCriteriaId" : "232587B5-81C9-4BEB-B36F-FACE9E9A86AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1932",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/zsh/code/ci/c7a9cf465dd620ef48d586026944d9bd7a0d5d6d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3593-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201805-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/zsh/code/ci/c7a9cf465dd620ef48d586026944d9bd7a0d5d6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3593-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12191",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-02-28T13:29:00.210",
      "lastModified" : "2024-11-21T03:09:01.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error en la configuración de cuentas CloudForms al emplear VMware. Por defecto, se emplea una cuenta compartida con acceso privilegiado a funciones VMRC (VMWare Remote Console) que tal vez no sean apropiadas para usuarios de CloudForms (y, por lo tanto, esta cuenta). Un atacante podría emplear esta vulnerabilidad para ver y realizar cambios en las opciones de VMRC y de las máquinas virtuales que controla a las que no debería tener acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1BA91-4695-4E64-A9D7-4A6CB6904D41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0374",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1500517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-02-28T15:29:00.273",
      "lastModified" : "2024-11-21T03:36:09.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the \"RASHTML5Gateway\" directory. A remote, unauthenticated attacker could exploit this weakness to read arbitrary files from the vulnerable system using path traversal sequences."
      }, {
        "lang" : "es",
        "value" : "En la interfaz web de Parallels Remote Application Server (RAS) 15.5 Build 16140, existe una vulnerabilidad debido a la validación incorrecta de la ruta de archivo al solicitar un recurso en el directorio \"RASHTML5Gateway\". Un atacante remoto no autenticado podría explotar esta debilidad para leer archivos arbitrarios del sistema vulnerable empleando secuencias de salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:remote_application_server:15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4CA739-F161-41BE-A3EB-57BC70C07DEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.runesec.com/2018/02/22/parallels-ras-path-traversal/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/442321/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://blog.runesec.com/2018/02/22/parallels-ras-path-traversal/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/442321/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-01T05:29:00.227",
      "lastModified" : "2024-11-21T03:19:34.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications \"need to be prepared to handle a wide variety of exceptions."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La función Wave_read._read_fmt_chunk en Lib/wave.py en Python, hasta la versión 3.6.4, no garantiza un valor de canal nonzero, lo que permite que atacantes remotos provoquen una denegación de servicio (error de división entre cero y cierre inesperado de la aplicación) mediante un archivo de audio wav manipulado. NOTA: el vendedor informa que las aplicaciones de Python \"necesitan estar preparadas para manejar una amplia variedad de excepciones\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.4",
            "matchCriteriaId" : "3CCA920B-9E95-4960-B3B7-40A704F2973D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.python.org/issue32056",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.python.org/issue32056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-01T05:29:00.320",
      "lastModified" : "2024-11-21T03:19:34.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping."
      }, {
        "lang" : "es",
        "value" : "La función madvise_willneed en mm/madvise.c en el kernel de Linux, en versiones anteriores a la 4.14.4, permite que usuarios locales provoquen una denegación de servicio (bucle infinito) desencadenando el uso de MADVISE_WILLNEED para un mapeo DAX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.4",
            "matchCriteriaId" : "273770A3-0E6A-491C-ABE6-E3B747F4C5BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:3967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3653-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3657-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12627",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-03-01T14:29:00.250",
      "lastModified" : "2024-11-21T03:09:55.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca Apache Xerces-C XML Parser en versiones anteriores a la 3.2.1, el procesamiento de rutas DTD externas puede resultar en una desreferencia de puntero NULL bajo ciertas condiciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:xerces-c\\+\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "067DAA5D-2C5C-4591-817A-6CB6DBDF2D83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2018/q1/203",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103219",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xerces.apache.org/xerces-c/secadv/CVE-2017-12627.txt",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00032.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://seclists.org/oss-sec/2018/q1/203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://xerces.apache.org/xerces-c/secadv/CVE-2017-12627.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6150",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-03-01T16:29:00.230",
      "lastModified" : "2024-11-21T03:29:08.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM)."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas condiciones para los sistemas F5 BIG-IP 13.0.0 o 12.1.0 - 12.1.3.1 que emplean perfiles FastL4, cuando la opción Reassemble IP Fragments está deshabilitada (por defecto), algunos paquetes grandes fragmentados podrían reiniciar el TMM (Traffic Management Microkernel)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "2A3E8BFC-B1CF-4685-BC18-D991DAFE5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "B74CDA31-23E8-4AB9-9D52-3107185379CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "34C598BD-EA65-411F-8D2E-BB0C10700B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "367A6C6C-8FEC-4040-B199-B5E76B7DB81E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "4B2C21C8-E666-4240-80B1-C0184A601524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "F65C12F1-E3E5-4473-A48D-47941A159ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "D6CAD89E-DE40-4EC8-B7D4-B0BF809D906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93674162-3A63-4F05-B68F-B7D54B0AAE98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "8E6B9E75-3DC4-479A-8031-7CA01A682116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "A2487AD7-F334-4BDF-A7E5-2217608A0016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "76C8BE66-5528-468B-8C07-804E34D9B66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103235",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K62712037",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K62712037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6154",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-03-01T16:29:00.293",
      "lastModified" : "2024-11-21T03:29:09.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores."
      }, {
        "lang" : "es",
        "value" : "En sistemas F5 BIG-IP 13.0.0, 12.1.0 - 12.1.3.1 o 11.6.1 - 11.6.2, el demonio bd BIG-IP ASM podría volcar memoria del núcleo bajo ciertas circunstancias al procesar tipos de datos no revelados en sistemas con más de 48 núcleos de CPU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "0BE301F2-BF84-4B0D-BD32-F58899A93106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3.1",
            "matchCriteriaId" : "F65C12F1-E3E5-4473-A48D-47941A159ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103233",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K38243073",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K38243073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14798",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.210",
      "lastModified" : "2024-11-21T03:13:31.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en el script init de postgresql podría ser aprovechada por atacantes para acceder a la cuenta postgresql y escalar sus privilegios a root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4-0.5.3.1",
            "matchCriteriaId" : "BBA74A80-297A-441C-B12D-799AAB5BB669"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4BBD63-E038-45CE-9537-D96831E99A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1062722",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45184/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-14798/",
        "source" : "security@opentext.com"
      }, {
        "url" : "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1062722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-14798/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14799",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.303",
      "lastModified" : "2024-11-21T03:13:31.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page."
      }, {
        "lang" : "es",
        "value" : "Un ataque de Cross-Site Scripting (XSS) en la gestión del parámetro ESP login en NetIQ Access Manager, en versiones anteriores a la 4.3.3, podría emplearse para inyectar código JavaScript en la página de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "C10FC0FE-724E-4E73-97C8-AE22C9F3AB3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022358",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14800",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.367",
      "lastModified" : "2024-11-21T03:13:31.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the \"typecontainerid\" parameter of the policy editor could allowed code injection into pages of authenticated users."
      }, {
        "lang" : "es",
        "value" : "Un ataque de Cross-Site Scripting (XSS) reflejado en NetIQ Access Manager, en versiones anteriores a la 4.3.3, al emplear el parámetro \"typecontainerid\" del editor de políticas, podría permitir la inyección de código en páginas de usuarios autenticados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "C10FC0FE-724E-4E73-97C8-AE22C9F3AB3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022356",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14804",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.413",
      "lastModified" : "2024-11-21T03:13:32.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots."
      }, {
        "lang" : "es",
        "value" : "El paquete de build anterior a 20171128 no comprobó nombres de directorio durante la extracción de resultados de build que permitían que builds no fiables escribiesen en el sistema objetivo. Esto provocaba el escape fuera de los buildroots."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A798E-0D69-43C7-9A63-1E5921138EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F150BD9-4B94-42D3-9E14-58665B7FF220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B779A4B4-0721-4F4C-B3BD-C640BEAB2463"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00030.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5188",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.477",
      "lastModified" : "2024-11-21T03:27:13.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information."
      }, {
        "lang" : "es",
        "value" : "El código bs_worker en open build service, anterior a 20170320, seguía symlinks relativos, lo que permitía la lectura de archivos fuera del directorio origen del paquete durante la build. Esto permitía el filtrado de información privada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:open_build_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.3",
            "matchCriteriaId" : "4ED15B92-D7FF-4901-AC00-94D9A59489E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1029824",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://github.com/openSUSE/open-build-service/commit/ba27c91351878bc297ec4baba0bd488a2f3b568d",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-5188/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1029824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openSUSE/open-build-service/commit/ba27c91351878bc297ec4baba0bd488a2f3b568d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-5188/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7426",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.537",
      "lastModified" : "2024-11-21T03:31:52.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks."
      }, {
        "lang" : "es",
        "value" : "NetIQ Identity Manager Plugins, en versiones anteriores a la 4.6.1, contenía varios errores de gestión de XEE (XML External Entity) que podrían ser empleados por atacantes para filtrar información o provocar ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "B5B7AD27-ED0A-4EF9-A97E-BE8552310BC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7021173",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7021173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7435",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.617",
      "lastModified" : "2024-11-21T03:31:53.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system."
      }, {
        "lang" : "es",
        "value" : "En libzypp, en versiones anteriores a la 20170803, fue posible añadir repositorios YUM no firmados sin avisar al usuario. Esto podía resultar en que un atacante Man-in-the-Middle (MitM) o servidores maliciosos inyectasen paquetes RPM maliciosos en el sistema de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.15.2",
            "matchCriteriaId" : "4CAACEA3-7214-40A7-B212-DE6BED99F2C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1009127",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-7435/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1009127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-7435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7436",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.693",
      "lastModified" : "2024-11-21T03:31:53.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system."
      }, {
        "lang" : "es",
        "value" : "En libzypp, en versiones anteriores a la 20170803, fue posible recuperar paquetes no firmados sin avisar al usuario. Esto podía resultar en que un atacante Man-in-the-Middle (MitM) o servidores maliciosos inyectasen paquetes RPM maliciosos en el sistema de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.15.2",
            "matchCriteriaId" : "4CAACEA3-7214-40A7-B212-DE6BED99F2C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1038984",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-7436/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1038984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-7436/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9268",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.757",
      "lastModified" : "2024-11-21T03:35:43.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption)."
      }, {
        "lang" : "es",
        "value" : "En open build service, en versiones anteriores a la 201707022, las acciones wipetrigger y rebuild comprobaban el proyecto equivocado en busca de permisos. Esto permitía que usuarios autenticados operasen en proyectos en los que no tenían permisos, lo que conducía a una denegación de servicio (consumo de recursos)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:open_build_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.2",
            "matchCriteriaId" : "22C62CDA-5803-482D-8D18-C40C4E95A41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1045519",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://github.com/openSUSE/open-build-service/pull/3267",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1045519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openSUSE/open-build-service/pull/3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9269",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.820",
      "lastModified" : "2024-11-21T03:35:43.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content."
      }, {
        "lang" : "es",
        "value" : "En libzypp, en versiones anteriores a agosto de 2018, las claves GPG adjuntadas en repositorios YUM no se anclaban correctamente, lo que permitía que mirrors de repositorio maliciosos degradasen silenciosamente a repositorios no firmados con contenido potencialmente malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-757"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:libzypp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA09C23E-91B3-4E29-91B2-F517F293488C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1045735",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9269/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1045735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9269/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9270",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.883",
      "lastModified" : "2024-11-21T03:35:43.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database."
      }, {
        "lang" : "es",
        "value" : "En cryptctl, en versiones anteriores a la 2.0, un servidor malicioso podría enviar peticiones RPC que podrían sobrescribir archivos fuera de la base de datos de claves de cryptctl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:cryptctl:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA1797F-08C3-465F-B81F-8D11D9B10EB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1041963",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00022.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9270/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1041963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9270/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9271",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:00.960",
      "lastModified" : "2024-11-21T03:35:43.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used."
      }, {
        "lang" : "es",
        "value" : "La herramienta de actualización de paquete de línea de comandos zypper escribe credenciales del proxy HTTP en su archivo de registro, lo que permite que atacantes locales obtengan acceso a los proxies empleados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:zypper:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCCB6B71-6FA6-4DB1-BE64-85085629D035"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1050625",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9271/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1050625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9271/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9274",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:01.007",
      "lastModified" : "2024-11-21T03:35:44.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs."
      }, {
        "lang" : "es",
        "value" : "Una inyección de comandos shell en obs-service-source_validator, en versiones anteriores a la 0.7, podría emplearse para ejecutar código como el empaquetador cuando se comprueban archivos RPM SPEC con construcciones de macro específicas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:obs-service-source_validator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7",
            "matchCriteriaId" : "F96AD7E7-B139-43CB-8269-E9795605DA3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=938556",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9274/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=938556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9274/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9286",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-01T20:29:01.070",
      "lastModified" : "2024-11-21T03:35:45.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade."
      }, {
        "lang" : "es",
        "value" : "El paquete de NextCloud en openSUSE empleaba /srv/www/htdocs de forma no segura, lo que podría haber permitido que los scripts ejecutándose como usuario wwwrun escalasen privilegios a root durante la actualización del paquete NextCloud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1036756",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-updates/2017-10/msg00010.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9286/",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1036756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.opensuse.org/opensuse-updates/2017-10/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.suse.com/de-de/security/cve/CVE-2017-9286/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-01T21:29:00.220",
      "lastModified" : "2024-11-21T03:19:34.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory."
      }, {
        "lang" : "es",
        "value" : "En la función GetOpenCLCachedFilesDirectory en magick/opencl.c en ImageMagick 7.0.7, una vulnerabilidad de desreferencia de puntero NULL ocurre debido a que no se comprueba un resultado de asignación de memoria. Esto se relaciona con GetOpenCLCacheDirectory."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EE134-ACEE-4E13-8AD2-C95F0C15246E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE001E6E-5FD8-4C62-BEAC-9C2A5D992901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F35D8FA-7454-4154-9117-7D8DBAA4DA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06181770-7500-4FEE-BB32-F677752AFEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F44FBF-D02B-4F11-85E3-7CE3C6F9AE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8B911-FC57-45F7-81E6-A7C8A24B57F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D11FDA6-5D28-4DA3-994A-2340D9F26189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4834CAA9-3A24-43B1-9A51-CBFA76972185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64F74F7-157F-4B71-A0D5-30B0F11918F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A2FA10-1583-44B2-ABC3-BCD062C74B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3692A225-3E31-4A33-B0FA-0EFDF28FB41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD42E2C-FF78-4128-8B42-A8C201472823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11E77F2-DCAE-40BA-8A3C-E6E26787926C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32ADE8C1-C690-42EF-AB36-AE08D8620B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9FCDCD-DF62-4FA8-A558-00CEFA04B1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94B38F-16EC-44CB-B46F-257DACD2CA61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BF292C-AF06-48A8-ADE9-4D085E9E79B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD1B307-E8B7-484A-B7A7-8D4015EB3D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2CAFAD-681F-40C4-9CDC-BF714630B2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E56BFF8-6EDC-4DEE-A80C-A69D0A963D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09347370-B478-4067-BE6B-0B04F718EF85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103218",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/790",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-01T21:29:00.280",
      "lastModified" : "2024-11-21T03:19:34.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.7, se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función BenchmarkOpenCLDevices en MagickCore/opencl.c debido a que no se comprueba un resultado de asignación de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EE134-ACEE-4E13-8AD2-C95F0C15246E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE001E6E-5FD8-4C62-BEAC-9C2A5D992901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F35D8FA-7454-4154-9117-7D8DBAA4DA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06181770-7500-4FEE-BB32-F677752AFEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F44FBF-D02B-4F11-85E3-7CE3C6F9AE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8B911-FC57-45F7-81E6-A7C8A24B57F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D11FDA6-5D28-4DA3-994A-2340D9F26189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4834CAA9-3A24-43B1-9A51-CBFA76972185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64F74F7-157F-4B71-A0D5-30B0F11918F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A2FA10-1583-44B2-ABC3-BCD062C74B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3692A225-3E31-4A33-B0FA-0EFDF28FB41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD42E2C-FF78-4128-8B42-A8C201472823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11E77F2-DCAE-40BA-8A3C-E6E26787926C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32ADE8C1-C690-42EF-AB36-AE08D8620B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9FCDCD-DF62-4FA8-A558-00CEFA04B1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94B38F-16EC-44CB-B46F-257DACD2CA61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BF292C-AF06-48A8-ADE9-4D085E9E79B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD1B307-E8B7-484A-B7A7-8D4015EB3D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2CAFAD-681F-40C4-9CDC-BF714630B2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E56BFF8-6EDC-4DEE-A80C-A69D0A963D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09347370-B478-4067-BE6B-0B04F718EF85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103212",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/791",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-01T21:29:00.343",
      "lastModified" : "2024-11-21T03:19:34.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.7, se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función saveBinaryCLProgram en magick/opencl.c debido a que no se comprueba un resultado de búsqueda de programa. Esto se relaciona con CacheOpenCLKernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EE134-ACEE-4E13-8AD2-C95F0C15246E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2E7C40-868A-40F5-B496-3B15AC111320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE001E6E-5FD8-4C62-BEAC-9C2A5D992901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B296460-7B41-4975-960C-0B46083F09C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F35D8FA-7454-4154-9117-7D8DBAA4DA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06181770-7500-4FEE-BB32-F677752AFEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F44FBF-D02B-4F11-85E3-7CE3C6F9AE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8B911-FC57-45F7-81E6-A7C8A24B57F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D11FDA6-5D28-4DA3-994A-2340D9F26189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4834CAA9-3A24-43B1-9A51-CBFA76972185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ED8498-964B-45F1-97B2-ED773D422816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64F74F7-157F-4B71-A0D5-30B0F11918F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A2FA10-1583-44B2-ABC3-BCD062C74B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3692A225-3E31-4A33-B0FA-0EFDF28FB41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD42E2C-FF78-4128-8B42-A8C201472823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11E77F2-DCAE-40BA-8A3C-E6E26787926C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32ADE8C1-C690-42EF-AB36-AE08D8620B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9FCDCD-DF62-4FA8-A558-00CEFA04B1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94B38F-16EC-44CB-B46F-257DACD2CA61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BF292C-AF06-48A8-ADE9-4D085E9E79B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD1B307-E8B7-484A-B7A7-8D4015EB3D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2CAFAD-681F-40C4-9CDC-BF714630B2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E56BFF8-6EDC-4DEE-A80C-A69D0A963D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09347370-B478-4067-BE6B-0B04F718EF85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103220",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15134",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-01T22:29:00.237",
      "lastModified" : "2024-11-21T03:14:08.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error de desbordamiento de búfer basado en pila en la forma en la que 389-ds-base, en versiones 1.3.6.x anteriores a la 1.3.6.13, versiones 1.3.7.x anteriores a la 1.3.7.9 y versiones 1.4.x anteriores a la 1.4.0.5, gestionaba ciertos filtros de búsqueda LDAP. Un atacante remoto no autenticado podría emplear este error para hacer que ns-slapd se cierre inesperadamente mediante una petición LDAP especialmente manipulada que resulta en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.6.1",
            "versionEndExcluding" : "1.3.6.13",
            "matchCriteriaId" : "565E7C1C-4D37-4ECA-8875-86224B5F3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.7.1",
            "versionEndExcluding" : "1.3.7.9",
            "matchCriteriaId" : "5A10FA2A-2A2A-48EC-86A9-CD2A3A6F1892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0.0",
            "versionEndExcluding" : "1.4.0.5",
            "matchCriteriaId" : "FDACC20A-32B4-4E80-BE6E-89F72EA705B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041F9200-4C01-4187-AE34-240E8277B54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4AB18C-40FC-4E48-830D-481A97B34256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0163",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1531573",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://pagure.io/389-ds-base/c/6aa2acdc3cad9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/102790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1531573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pagure.io/389-ds-base/c/6aa2acdc3cad9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-01T22:29:00.297",
      "lastModified" : "2024-11-21T03:19:34.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp(\"[\\x0\"); payload."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en JerryScript 1.0. Hay una sobrelectura de búfer basada en memoria dinámica (heap) en la función lit_read_code_unit_from_hex en lit/lit-char-helpers.c mediante una carga útil RegExp(\"[\\x0\");."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CCB68A-559D-430C-BD80-B6AFE8EF3FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/2140",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/2140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6926",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.233",
      "lastModified" : "2024-11-21T03:30:49.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comments they do not have access to, and are also able to add comments to this content. This vulnerability is mitigated by the fact that the comment system must be enabled and the attacker must have permission to post comments."
      }, {
        "lang" : "es",
        "value" : "En las versiones 8.4.x de Drupal anteriores a la 8.4.5, los usuarios con permisos para publicar comentarios pueden ver contenido y comentarios a los que no tienen acceso y, además, también pueden añadir comentarios en estos contenidos. Esta vulnerabilidad se mitiga por el hecho de que el sistema de comentarios debe estar activado y el atacante debe tener permiso para publicar comentarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndExcluding" : "8.4.5",
            "matchCriteriaId" : "5C4AF907-5109-48BA-B510-8BC32A82C632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6927",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.297",
      "lastModified" : "2024-11-21T03:30:49.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function which is used to escape potentially dangerous text before outputting it to HTML (as JavaScript output does not typically go through Twig autoescaping). This function does not correctly handle all methods of injecting malicious HTML, leading to a cross-site scripting vulnerability under certain circumstances. The PHP functions which Drupal provides for HTML escaping are not affected."
      }, {
        "lang" : "es",
        "value" : "Las versiones 8.4.x de Drupal anteriores a la 8.4.5 y las versiones 7.x anteriores a la 7.57 tienen una función de JavaScript Drupal.checkPlain() que se emplea para escapar texto potencialmente peligroso antes de extraerlo como HTML (ya que la exportación JavaScript no suele pasar un proceso de autoescape Twig). Esta función no gestiona adecuadamente todos los métodos de inyección de HTML malicioso, lo que conduce a una vulnerabilidad de Cross-Site Scripting (XSS) en ciertas circunstancias. Las funciones de PHP que Drupal proporciona para escapar HTML no se han visto afectadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.57",
            "matchCriteriaId" : "EAF33815-3D31-4DC0-90EB-2649F94EA368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndExcluding" : "8.4.5",
            "matchCriteriaId" : "5C4AF907-5109-48BA-B510-8BC32A82C632"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103138",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6928",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.357",
      "lastModified" : "2024-11-21T03:30:49.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or download it. This check fails under certain conditions in which one module is trying to grant access to the file and another is trying to deny it, leading to an access bypass vulnerability. This vulnerability is mitigated by the fact that it only occurs for unusual site configurations."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.x de Drupal core anteriores a la 7.57, cuando emplean el sistema de archivos privado de Drupal, comprobarán si un usuario tiene acceso a un archivo antes de permitirle verlo o descargarlo. Esta comprobación fracasa en ciertos casos en los que un módulo intenta otorgar acceso al archivo y otro intenta denegarlo, lo que conduce a una vulnerabilidad de omisión de acceso. La vulnerabilidad se mitiga por el hecho de que solo ocurre en configuraciones de sitio poco comunes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.57",
            "matchCriteriaId" : "EAF33815-3D31-4DC0-90EB-2649F94EA368"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6929",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.403",
      "lastModified" : "2024-11-21T03:30:49.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it requires contributed or custom modules in order to exploit. For Drupal 8, this vulnerability was already fixed in Drupal 8.4.0 in the Drupal core upgrade to jQuery 3. For Drupal 7, it is fixed in the current release (Drupal 7.57) for jQuery 1.4.4 (the version that ships with Drupal 7 core) as well as for other newer versions of jQuery that might be used on the site, for example using the jQuery Update module."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de Cross-Site Scripting (XSS) jQuery cuando se realizan peticiones Ajax a dominios no fiables. La vulnerabilidad se mitiga por el hecho de que requiere módulos que hayan sido entregados o personalizados para explotarla. En Drupal 8, esta vulnerabilidad ya se ha solucionado en la actualización core a jQuery 3 de la versión 8.4.0 de Drupal. En Drupal 7, se ha solucionado en la versión actual (Drupal 7.57) para jQuery 1.4.4 (la versión incluida en Drupal 7 core) y para otras versiones de jQuery que puedan estar empleándose en el sitio, por ejemplo, utilizando el módulo jQuery Update."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.57",
            "matchCriteriaId" : "EAF33815-3D31-4DC0-90EB-2649F94EA368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.4.0",
            "matchCriteriaId" : "96D916B8-5791-4A14-8484-B360FDBEC170"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6930",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.450",
      "lastModified" : "2024-11-21T03:30:50.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node. This can result in an access bypass vulnerability. This issue is mitigated by the fact that it only applies to sites that a) use the Content Translation module; and b) use a node access module such as Domain Access which implement hook_node_access_records()."
      }, {
        "lang" : "es",
        "value" : "En las versiones 8.4.x de Drupal anteriores a la 8.4.5, al emplear controles de acceso a nodos con un sitio multilingüe, Drupal marca la versión sin traducir de un nodo como la reserva por defecto para consultas de acceso. Esta reserva se emplea para lenguajes que aún no cuentan con una versión traducida del nodo creado. Esto puede resultar en una vulnerabilidad de omisión de acceso. El problema se mitiga por el hecho de que solo aplica a sitios que a) emplean el módulo Content Translation y b) emplean un módulo de acceso a nodos como Domain Access que implementa hook_node_access_records()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndExcluding" : "8.4.5",
            "matchCriteriaId" : "5C4AF907-5109-48BA-B510-8BC32A82C632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6931",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.497",
      "lastModified" : "2024-11-21T03:30:50.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the permissions for. If you have implemented a Settings Tray form in contrib or a custom module, the correct access checks should be added. This release fixes the only two implementations in core, but does not harden against other such bypasses. This vulnerability can be mitigated by disabling the Settings Tray module."
      }, {
        "lang" : "es",
        "value" : "En las versiones 8.4.x de Drupal anteriores a la 8.4.5, el módulo Settings Tray tiene una vulnerabilidad que permite que los usuarios actualicen ciertos datos para los que no tienen permisos. Si se ha implementado un formulario Settings Tray en el módulo contrib o en el custom, deberían añadirse las comprobaciones de acceso correctas. Esta versión solo soluciona las dos implementaciones de core, pero no protege contra otras omisiones. La vulnerabilidad puede mitigarse deshabilitando el módulo Settings Tray."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndExcluding" : "8.4.5",
            "matchCriteriaId" : "5C4AF907-5109-48BA-B510-8BC32A82C632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6932",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-03-01T23:29:00.560",
      "lastModified" : "2024-11-21T03:30:50.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly navigating to an external site."
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.x de Drupal core anteriores a la 7.57 tienen una vulnerabilidad de inyección de enlaces externos cuando se emplea el bloque de cambio de lenguaje. Existe una vulnerabilidad similar en varios módulos personalizados y contribuidos. Esta vulnerabilidad podría permitir que un atacante engañe a usuarios para que naveguen sin querer a un sitio externo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.57",
            "matchCriteriaId" : "EAF33815-3D31-4DC0-90EB-2649F94EA368"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14461",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-03-02T15:29:00.210",
      "lastModified" : "2024-11-21T03:12:50.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server."
      }, {
        "lang" : "es",
        "value" : "Un email especialmente manipulado enviado mediante SMTP y pasado a Dovecot, de MTA, puede desencadenar una lectura fuera de límites que resulta en la posible revelación de información sensible y una denegación de servicio (DoS). Para desencadenar esta vulnerabilidad, un atacantes necesita enviar un mensaje de email especialmente manipulado al servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:2.2.33.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA6B30F-59C7-4B98-AEDF-9341F3886A6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "80D933F0-A437-4AAA-88C2-9AF7153F9046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "DEC57FA0-E21B-4F6B-B7DC-90BA281826BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC71056-D783-44B4-AAF1-CA176B4C25BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103201",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0510",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3587-1/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3587-2/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4130",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dovecot.org/list/dovecot-news/2018-February/000370.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3587-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3587-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dovecot.org/list/dovecot-news/2018-February/000370.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15130",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-02T15:29:00.273",
      "lastModified" : "2024-11-21T03:14:07.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de denegación de servicio (DoS) en dovecot en versiones anteriores a la 2.2.34. Un atacante que pueda generar nombres aleatorios del servidor SNI podría explotar las búsquedas de configuración TLS SNI, lo que conduce a un uso excesivo de memoria y al reinicio del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.34",
            "matchCriteriaId" : "C372D0FA-228E-4F34-BC6F-EA6F038E392E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2018/q1/205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1532356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3587-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3587-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dovecot.org/list/dovecot-news/2018-February/000370.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2018/q1/205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1532356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3587-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3587-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dovecot.org/list/dovecot-news/2018-February/000370.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1654",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-02T17:29:00.217",
      "lastModified" : "2024-11-21T03:22:10.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Scale 4.1.1 y 4.2.0 - 4.2.3 podría permitir que un usuario local sin privilegios acceda a información situada en archivos de volcado. Los datos de usuario podrían enviarse a IBM durante las interacciones del servicio. IBM X-Force ID: 133378."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.1.0",
            "versionEndIncluding" : "4.1.1.18",
            "matchCriteriaId" : "FFC783AA-F7AA-40A1-8277-214F0D8B118A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0.0",
            "versionEndIncluding" : "4.2.0.4",
            "matchCriteriaId" : "9D23238D-249E-4DE9-9AD1-561EFB0B8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.1.0",
            "versionEndIncluding" : "4.2.1.2",
            "matchCriteriaId" : "208F0B90-ABE8-40DA-8344-39C7815B3116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.2.0",
            "versionEndIncluding" : "4.2.2.3",
            "matchCriteriaId" : "4D93CD87-07E5-4020-9383-CFE6219BD243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.3.0",
            "versionEndIncluding" : "4.2.3.6",
            "matchCriteriaId" : "6305DEAF-8694-4BCD-8974-A5270268DC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C6E40C-8563-438B-AA6A-1C716B6FF1D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E78F4327-0160-467E-8C2C-BDEBB4149227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD19B4F-5738-4CB1-99FC-F40FDA8388AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B497D629-62AB-4F21-BDF4-02336A19E04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E68BB2-4132-46F1-B8E9-9FA03FEB92BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CBA1A7-02AF-4D59-A6FF-9C52903986EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAC1912-1412-45B6-920C-A52510095977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A4A5C6-8DF0-4431-BE2C-5C6815371C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90908FF-0E10-4AFD-A38C-4D5E50C05FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591E5985-29A1-4C06-8832-DA1587CFE101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040747",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1787",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-02T17:29:00.280",
      "lastModified" : "2025-03-25T14:26:28.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022."
      }, {
        "lang" : "es",
        "value" : "IBM Publishing Engine 2.1.2 y 6.0.5 contiene una vulnerabilidad sin revelar que podría permitir que un usuario con privilegios administrativos obtenga credenciales de usuario embebidas. IBM X-Force ID: 137022."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6F33B2-7C70-45B1-B942-DE4C67AFE13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D427ADAB-C11B-4A0B-AF88-DFC316B6BFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013961",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103252",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137022",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14801",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.270",
      "lastModified" : "2024-11-21T03:13:31.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) reflejado en NetIQ Access Manager, en versiones anteriores a la 4.3.3, permitía que atacantes reflejasen XSS en la página llamada empleando el parámetro url."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "C10FC0FE-724E-4E73-97C8-AE22C9F3AB3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022357",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14802",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.317",
      "lastModified" : "2024-11-21T03:13:32.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites."
      }, {
        "lang" : "es",
        "value" : "Los servidores Novell Access Manager Admin Console y IDP en versiones anteriores a la 4.3.3 tienen una URL que podría ser empleada por atacantes remotos para desencadenar redirecciones sin validar a sitios de terceros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3",
            "matchCriteriaId" : "6A8EA971-4151-4119-B5DE-5BE07011A373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022360",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5189",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.380",
      "lastModified" : "2024-11-21T03:27:13.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extract and establish their own connections to the Sentinel appliance."
      }, {
        "lang" : "es",
        "value" : "NetIQ iManager, en versiones anteriores a la 3.0.3, entregaba una clave privada SSL en una aplicación Java (archivo JAR) para autenticación en Sentinel, lo que permite que atacantes remotos extraigan y establezcan sus propias conexiones en la aplicación de Sentinel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9044A0FA-BD4E-4041-B16A-0C70551C65F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94134CE0-B4A4-477B-99E7-87F34B0F2CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB1AB4D-3906-4EDA-A514-FAE007A27095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9CA1AA-A933-4BB6-81F1-B803A2D12FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B58611-550D-408E-8104-71ACD4A19FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1842E298-D918-433F-9681-DF4AF9849029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93EB7FE-4A3A-4273-B5B5-CF6473C4D1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "46A640AB-5C61-4801-9EB3-DA4FD6C43FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6B6F6C-1CD2-4823-A224-DDFAC5FD7C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "52355F37-8540-4868-A565-E2109DA7ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B213A2-2BED-4D5F-86AA-E4FE29352E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "B2413E8E-7B96-434D-BF9B-3C769F931157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "A70BA4BB-6398-46C5-9E16-4536AAD30011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6644CB8E-DC8E-46F4-8EFF-CEF34EC40116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "088DA16B-2DCA-4EA5-86BC-93796D9F0E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7.10:hf1:*:*:*:*:*:*",
            "matchCriteriaId" : "7447ECD4-EA24-45F9-BF0D-971D074EAB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:2.7.7.10:hf2:*:*:*:*:*:*",
            "matchCriteriaId" : "91F3BCB4-6160-48DA-8CFA-88BD1FED1C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3D7F7B-CF13-4729-BDC8-FA7C25EB0856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8EC935-B012-4F5C-AF33-3438EEA18BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A86186-B039-4F7F-BE13-A5C2987C63B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C76139-7684-4E41-B8BC-5D9DC6B47ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AF38F2-611C-4557-8CB8-FEA46F84A779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "F68364C6-7A48-49E7-BC89-6DF5181EEF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2482872E-C1FE-4E4E-833A-A426CC4E1230"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1021637",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1021637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/support/kb/doc.php?id=7016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7419",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.427",
      "lastModified" : "2024-11-21T03:31:51.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped \"description\" field that could be specified by the provider."
      }, {
        "lang" : "es",
        "value" : "Una aplicación OAuth en NetIQ Access Manager, en versiones 4.3 anteriores a la 4.3.2 y versiones 4.2 anteriores a la 4.2.4, permitía ataques de Cross-Site Scripting (XSS) debido a un campo \"description\" sin escapar que podría especificar el proveedor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.4",
            "matchCriteriaId" : "BECB6A29-C463-45BF-9127-22F51AB538DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "4.3.2",
            "matchCriteriaId" : "0F301AAF-EB18-4E7E-B266-5A30710A5A92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1031853",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7019893",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1031853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7019893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7429",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.490",
      "lastModified" : "2024-11-21T03:31:52.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server."
      }, {
        "lang" : "es",
        "value" : "La subida de certificados en el plugin NetIQ eDirectory PKI, en versiones anteriores a 8.8.8 Patch 10 Hotfix 1, podría aprovecharse para subir código JSP que puede ser empleado por atacantes autenticados para ejecutar applets JSP en el servidor iManager."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:edirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.8.8",
            "matchCriteriaId" : "F84A12FE-0920-45C3-BF8F-6B9D1030AE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:8.8.8:patch10:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F19781-7439-4D43-9FE7-6ACB4C154513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:8.8.8:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FD6CA7-4B36-4835-8841-C964BCC98400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:8.8.8:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "92A0DBF5-B69E-49C5-8D70-137B27619AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:8.8.8:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "EC21192D-9C4A-4841-861F-127AB1C5F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:8.8.8:patch8:*:*:*:*:*:*",
            "matchCriteriaId" : "C60A8A5D-F154-4520-8CE1-2EC889484562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:8.8.8:patch9:*:*:*:*:*:*",
            "matchCriteriaId" : "4942CADE-A224-4929-91D8-AD0D82BE7341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1024957",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/edir88/edir88810hf1_releasenotes/data/edir88810hf1_releasenotes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=3426981",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1024957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/edir88/edir88810hf1_releasenotes/data/edir88810hf1_releasenotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=3426981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7434",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.553",
      "lastModified" : "2024-11-21T03:31:53.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles."
      }, {
        "lang" : "es",
        "value" : "En el controlador JDBC en NetIQ Identity Manager en versiones anteriores a la 4.6, el envío de configuraciones XML incorrectas podría resultar en que las contraseñas se registren en archivos de registro de excepciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6",
            "matchCriteriaId" : "EF2D3537-DBB2-4FF2-A3C2-F1766370C489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1005907",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/identity-manager-46/releasenotes_idm46/data/releasenotes_idm46.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1005907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/identity-manager-46/releasenotes_idm46/data/releasenotes_idm46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7438",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.613",
      "lastModified" : "2024-11-21T03:31:54.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter."
      }, {
        "lang" : "es",
        "value" : "NetIQ Privileged Account Manager, en versiones anteriores a 3.1 Patch Update 3, permitía ataques de Cross-Site Scripting (XSS) mediante la modificación DOM empleando el parámetro proporcionado por la cookie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "42575893-2C89-4FED-9C95-82D7C420365F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:3.1:hotfix1:*:*:*:*:*:*",
            "matchCriteriaId" : "234CF596-9A8D-42CB-8FD0-D818D9F795B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:3.1:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "082DBA77-B571-43D4-9240-32E8CED9D577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1001355",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/privileged-account-manager-3/npam3103-release-notes/data/npam3103-release-notes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1001355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/privileged-account-manager-3/npam3103-release-notes/data/npam3103-release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9267",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.677",
      "lastModified" : "2024-11-21T03:35:43.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations."
      }, {
        "lang" : "es",
        "value" : "En Novell eDirectory, en versiones anteriores a la 9.0.3.1, la interfaz LDAP no imponía de forma estricta las restricciones de cifrado, lo que permite que cifrados débiles se empleen durante las operaciones SSL BIND."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-757"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.3.1",
            "matchCriteriaId" : "E194EC2C-A930-42DD-8A50-09C045D4B185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9276",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.723",
      "lastModified" : "2024-11-21T03:35:44.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the \"a\" parameter."
      }, {
        "lang" : "es",
        "value" : "Novell Access Manager iManager, en versiones anteriores a la 4.3.3, no validaba parámetros, por lo que el contenido de Cross-Site Scripting (XSS) podía reflejarse de nuevo en la página de resultados mediante un parámetro \"a\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "C10FC0FE-724E-4E73-97C8-AE22C9F3AB3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022359",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7022359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9277",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.770",
      "lastModified" : "2024-11-21T03:35:44.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA."
      }, {
        "lang" : "es",
        "value" : "El backend LDAP en Novell eDirectory, en versiones anteriores a la 9.0 SP4, al cambiar a EBA (Enhanced Background Authentication) mantenía las conexiones abiertas sin EBA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "BBDF50B6-0B4C-4610-B5D6-6D96D3F1C78A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:9.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "47DF7010-C59C-43CA-B30D-2C90EE93B1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DC14FC-3A10-4B29-8F88-C44B2013B508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:9.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B60F3208-693F-4701-9A6F-062365E8406F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1005473",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1005473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9278",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.847",
      "lastModified" : "2024-11-21T03:35:44.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables."
      }, {
        "lang" : "es",
        "value" : "El controlador NetIQ Identity Manager Oracle EBS, en versiones anteriores a la 4.0.2.0, enviaba logs EBS que contenían las contraseña de autenticación del controlador. Esto podría revelar esta información a atacantes capaces de leer las tablas EBS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.2.0",
            "matchCriteriaId" : "17E62796-0785-4DED-B0C9-2C2B3766772B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1053200",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.novell.com/Download?buildid=DKFkx_xPeaw~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1053200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://download.novell.com/Download?buildid=DKFkx_xPeaw~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9279",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.910",
      "lastModified" : "2024-11-21T03:35:44.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users."
      }, {
        "lang" : "es",
        "value" : "NetIQ Identity Manager, en versiones anteriores a la 4.5.6.1, permitía la subida de archivos con doble extensión o contenido sin imágenes en la manipulación de temas de User Application Administration. Esto permitía que usuarios administradores maliciosos ejecutasen código o confundiesen a los usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.6.1",
            "matchCriteriaId" : "B66D9825-C8A9-45E2-B932-BA2444FCA62E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049129",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.novell.com/Download?buildid=K7lbPAGJyIk~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://download.novell.com/Download?buildid=K7lbPAGJyIk~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9280",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:00.957",
      "lastModified" : "2024-11-21T03:35:44.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar."
      }, {
        "lang" : "es",
        "value" : "Algunas versiones de NetIQ Identity Manager Applications anteriores a la Identity Manager 4.5.6.1 incluían el token de sesión en las URL GET. Esto podría permitir se expongan sesiones de usuario a terceros mediante proxies, url de referencia o similares."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.6.1",
            "matchCriteriaId" : "B66D9825-C8A9-45E2-B932-BA2444FCA62E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049143",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.novell.com/Download?buildid=K7lbPAGJyIk~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1049143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://download.novell.com/Download?buildid=K7lbPAGJyIk~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9285",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-02T20:29:01.020",
      "lastModified" : "2024-11-21T03:35:45.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when \"ebaclient\" was used, allowing unpermitted access to eDirectory services."
      }, {
        "lang" : "es",
        "value" : "NetIQ eDirectory, en versiones anteriores a la 9.0 SP4, no imponía restricciones de inicio de sesión al emplear \"ebaclient\". Esto permitía el acceso no autorizado a los servicios de eDirectory."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:edirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "A43799B6-460B-4460-8220-B95A8598DCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:9.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "747AA5D9-EB98-4612-8DED-ECC34715396A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2F19B5-AB42-44F9-A142-0DD7F982BF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:edirectory:9.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1039C58-C75E-441C-910A-CF08F5AD7DD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1029077",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1029077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7016794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-04T02:29:02.130",
      "lastModified" : "2024-11-21T03:19:34.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "En Exponent CMS, en versiones anteriores a la 2.4.1 Patch #6, ciertos usuarios admin pueden elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "C584D529-5D81-43BA-AE73-753AF04DDE7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E1A691-B64C-4D4D-927E-AD62276903D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB19E4C-971F-411C-8BEE-BC541F324FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "536E55C4-B126-4D5E-8532-DC7D30D41899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A9CB32-1B83-4EC2-8E9E-8633EF49B513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4E702-2D0C-479B-A6CE-1838C961BB81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exponentcms.org/news/patch-6-released-for-v2-4-1-to-fix-a-few-big-issues",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.exponentcms.org/news/patch-6-released-for-v2-4-1-to-fix-a-few-big-issues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-04T21:29:00.230",
      "lastModified" : "2024-11-21T03:19:35.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055."
      }, {
        "lang" : "es",
        "value" : "El módulo moment en versiones anteriores a la 2.19.3 para Node.js es propenso a una denegación de servicio de expresión regular (DoS) mediante una cadena de fecha manipulada. Esta vulnerabilidad es diferente de CVE-2016-4055."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:momentjs:moment:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.19.2",
            "matchCriteriaId" : "6C7F9902-2D2A-4232-93BC-914B6F425A62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.3",
            "matchCriteriaId" : "427DA624-2397-4A61-A2ED-23F5C22C174E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moment/moment/issues/4163",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/532",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "URL Repurposed" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/moment/issues/4163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "URL Repurposed" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7427",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-05T16:29:00.260",
      "lastModified" : "2024-11-21T03:31:52.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector, via vdtData in the Version discovery and via nextFrame in the Object Inspector and via Host GUID in the System details plugins."
      }, {
        "lang" : "es",
        "value" : "Se han encontrado múltiples ataques de Cross-Site Scripting (XSS) en el plugin Identity Manager, alojado en iManager 2.7.7.7, anterior a Identity Manager 4.6.1. En ciertos escenarios, era posible ejecutar código JavaScript arbitrario en el contexto de la aplicación vulnerable mediante user.Context en Object Selector, mediante vdtData en el descubrimiento de Version y mediante nextFrame en Object Inspector y mediante Host GUID en los plugins System details."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.7.7",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "6FD61806-F33A-4648-A42D-B7C966026344"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1033828",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7021423",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1033828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.novell.com/support/kb/doc.php?id=7021423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7437",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-03-05T16:29:00.370",
      "lastModified" : "2024-11-21T03:31:53.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the \"type\" and \"account\" parameters of json requests."
      }, {
        "lang" : "es",
        "value" : "NetIQ Privileged Account Manager, en versiones anteriores a 3.1 Patch Update 3, permitía ataques de Cross-Site Scripting (XSS) mediante los parámetros \"type\" y \"account\" de peticiones json."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "46C3E488-50BC-4604-9F54-79D314C9510A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F73305-2868-4798-9FF3-7E6B6917D76A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:3.1:hotfix1:*:*:*:*:*:*",
            "matchCriteriaId" : "234CF596-9A8D-42CB-8FD0-D818D9F795B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:privileged_account_manager:3.1:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "082DBA77-B571-43D4-9240-32E8CED9D577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1001069",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/privileged-account-manager-3/npam3103-release-notes/data/npam3103-release-notes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1001069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netiq.com/documentation/privileged-account-manager-3/npam3103-release-notes/data/npam3103-release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7633",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-05T17:29:00.473",
      "lastModified" : "2024-11-21T03:32:20.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device."
      }, {
        "lang" : "es",
        "value" : "QNAP Qfinder Pro 6.1.0.0317 y anteriores podría exponer información sensible contenida en dispositivos NAS. Esto permitiría que atacantes comprometan aún más el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:qfinder_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.0317",
            "matchCriteriaId" : "B5F2243B-B9A5-45A8-A2F0-5B195873FBF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T18:29:00.173",
      "lastModified" : "2024-11-21T03:17:14.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request."
      }, {
        "lang" : "es",
        "value" : "En com.wowza.wms.timedtext.http.HTTPProviderCaptionFile en Wowza Streaming Engine en versiones anteriores a la 4.7.1, es posible el salto de la estructura de directorio y la recuperación de un archivo mediante una petición HTTP remota y especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.1",
            "matchCriteriaId" : "DD1497CC-FD76-42D7-9947-8B9621EC31A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2017-16922.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2017-16922.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T18:29:00.237",
      "lastModified" : "2024-11-21T03:17:55.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack."
      }, {
        "lang" : "es",
        "value" : "Los SDK (software development kit) de Cavium Nitrox SSL, Nitrox V SSL y TurboSSL permiten que atacantes remotos descifren datos TLS cifrados aprovechando un oráculo de relleno RSA Bleichenbacher. Esto también se conoce como ataque ROBOT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cavium:nitrox_ssl_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "A8DF06BB-1F8B-4A8B-BA66-028AFF9FA36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cavium:nitrox_v_ssl_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "274D753A-E022-4E41-9114-0B26A472BB63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cavium:octeon_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "7529F21A-0F87-421A-9D96-9B21A11F77D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cavium:octeon_ssl_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "5ACC7912-4FF4-49FE-B5D8-6CEAEFC25DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cavium:turbossl_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "E3B94D6A-7AC9-48B6-9A7C-7C8D23F3AFCB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_conect_im:7.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0143CB5D-07F4-4BC3-85C4-5A1A5F10D255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CD55EC-37E6-4E00-97CA-CBCA430AA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:t32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D55BE2-8399-4B10-9430-BEB0036800C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ace4710_application_control_engine_firmware:3.0\\(0\\)a5\\(2.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BD18A8-AEAD-459A-9E16-3790BE6543D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ace4710_application_control_engine_firmware:3.0\\(0\\)a5\\(3.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD10B359-AB2A-41A6-96D2-C904F705DE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ace4710_application_control_engine_firmware:3.0\\(0\\)a5\\(3.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7F0F7C-295C-4565-B818-FF9FBAB36249"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ace_4710_application_control_engine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E8DDD6-4B63-4430-AF9C-2A9ABCC79E24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ace30_application_control_engine_module_firmware:3.0\\(0\\)a5\\(2.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "60340950-50AD-47C2-B9CB-2D930D180EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ace30_application_control_engine_module_firmware:3.0\\(0\\)a5\\(3.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4C206B-1375-41BE-8811-E334E7879A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ace30_application_control_engine_module_firmware:3.0\\(0\\)a5\\(3.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF73E89-9C67-4A37-B9BC-EC9E17C0E0CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ace30_application_control_engine_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD4CC24-D2B1-4DEB-85AE-393CDCDD24F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5520_firmware:9.1\\(7.16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AA2A28-18CB-4C73-B52A-4DE306B55896"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35954D5D-F767-485F-94AB-0CD8B58F6352"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5540_firmware:9.1\\(7.16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "337DC063-042E-43AF-810E-8598CCEB2FD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCBF299-D6F5-4D00-8616-9EDE7EAFAC28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5550_firmware:9.1\\(7.16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "07348020-F675-40B9-9477-914ADCB85991"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24537C8-4F9C-4979-BB1A-466ADA6C3FF5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5510_firmware:9.1\\(7.16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A7DCB5-936E-4039-B798-2B6EF5A148BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF7123A-5538-48AF-BD7A-A0D7962CB10E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_5505_firmware:9.1\\(7.16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71174C79-2DC1-4CE7-923D-2EF2D4362CAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC84224-8B1A-4D92-9FBD-813F6C857A77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cavium.com/security-advisory-cve-2017-17428.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cavium.com/security-advisory-cve-2017-17428.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/144389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T18:29:00.297",
      "lastModified" : "2024-11-21T03:19:35.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value."
      }, {
        "lang" : "es",
        "value" : "xvpng.c en xv 3.10a tiene corrupción de memoria (escritura fuera de límites) al descifrar campos de comentario de PNG, lo que conduce a cierres inesperados o a la posible ejecución de código debido a que usa un valor de longitud incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xv_project:xv:3.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8097D2BF-7E41-4C14-9E2A-22234D9164EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/attachment.cgi?id=728337",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1043479",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.opensuse.org/opensuse-updates/2018-02/msg00088.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/attachment.cgi?id=728337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1043479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.opensuse.org/opensuse-updates/2018-02/msg00088.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T18:29:00.360",
      "lastModified" : "2024-11-21T03:19:35.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used."
      }, {
        "lang" : "es",
        "value" : "En fs/ocfs2/cluster/nodemanager.c en el kernel de Linux, en versiones anteriores a la 4.15, los usuarios locales pueden provocar una denegación de servicio (desreferencia de puntero NULL y error) debido a que no se emplea un mutex requerido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.15",
            "matchCriteriaId" : "A4344060-7D43-4A74-A2EF-DE9A6F8457A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=853bc26a7ea39e354b9f8889ae7ad1492ffa28d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/853bc26a7ea39e354b9f8889ae7ad1492ffa28d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3776-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3776-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3798-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3798-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=853bc26a7ea39e354b9f8889ae7ad1492ffa28d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/853bc26a7ea39e354b9f8889ae7ad1492ffa28d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3776-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3776-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3798-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3798-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17131",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.207",
      "lastModified" : "2024-11-21T03:17:32.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated remote attacker can place a malformed putty key file in system when a system manager load the key an infinite loop happens which lead to reboot the system."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 tienen una vulnerabilidad de denegación de servicio (DoS) debido a la validación insuficiente del parámetro cuando se carga un comentario putty. Un atacante remoto autenticado puede colocar un archivo de clave putty mal formado en un sistema y provocar un bucle infinito y el reinicio del sistema cuando un gestor de sistema carga la clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-vpp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-vpp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17132",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.270",
      "lastModified" : "2024-11-21T03:17:32.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Huawei VP9660 V500R002C10 tiene una vulnerabilidad de cadena de formato no controlada cuando el módulo license envía la información del log. Un atacante local autenticado podría explotar esta vulnerabilidad para provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17133",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.330",
      "lastModified" : "2024-11-21T03:17:32.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification. An authenticated local attacker could place a malicious license file into system which cause memory null pointer accessing and related processing crash. The attacker can exploit this vulnerability to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Huawei VP9660 V500R002C10 tiene una vulnerabilidad de desreferencia de puntero null en el módulo license debido a la verificación insuficiente. Un atacante local autenticado podría colocar un archivo de licencia malicioso en el sistema y provocar un acceso al puntero null de la memoria y el cierre inesperado de los procesos relacionados. El atacante puede explotar esta vulnerabilidad para provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17134",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.377",
      "lastModified" : "2024-11-21T03:17:33.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has a DoS vulnerability. Due to not check the specially XML file enough an authenticated local attacker may craft specific XML files to the affected products and parse this file which cause to null pointer accessing and result in DoS attacks."
      }, {
        "lang" : "es",
        "value" : "El analizador XML en Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de denegación de servicio. Debido a que no se comprueba el archivo XML especialmente manipulado, un atacante local autenticado podría manipular archivos XML específicos de los productos afectados y analizar estos archivos. Esto provocaría un acceso al puntero null y ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-02-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-02-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17135",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.427",
      "lastModified" : "2024-11-21T03:17:33.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a null pointer reference vulnerability due to insufficient verification. An authenticated local attacker calls PEM decoder with special parameter which could cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "El módulo PEM de Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 tiene una vulnerabilidad de referencia de puntero null debido a la verificación insuficiente. Un atacante local autenticado llama al descodificador PEM con un parámetro especial, lo que podría provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933755CC-4A0B-42FB-9491-3C841059851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410E8DAA-E961-46E1-96E2-3AC4B40D8359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D26AA-09DF-49DA-930F-A2EAEA486361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F69BC3-E6C0-4E70-AC13-D79D840579DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5561195B-7385-4175-9D29-77E95E4E9AB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18553F87-9928-4AE8-87D5-EB8014999E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DB85A7-54F1-4726-9D9C-07CC35621C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17136",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.487",
      "lastModified" : "2024-11-21T03:17:33.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a heap overflow vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "El módulo PEM de Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 tiene una vulnerabilidad de referencia de puntero null debido a la verificación insuficiente. Un atacante local autenticado puede provocar que el proceso se cierre inesperadamente mediante certificados maliciosos. El atacante puede explotar esta vulnerabilidad para provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933755CC-4A0B-42FB-9491-3C841059851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410E8DAA-E961-46E1-96E2-3AC4B40D8359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D26AA-09DF-49DA-930F-A2EAEA486361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F69BC3-E6C0-4E70-AC13-D79D840579DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5561195B-7385-4175-9D29-77E95E4E9AB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18553F87-9928-4AE8-87D5-EB8014999E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DB85A7-54F1-4726-9D9C-07CC35621C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17137",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.533",
      "lastModified" : "2024-11-21T03:17:33.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "El módulo PEM de Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 tiene una vulnerabilidad de acceso a la memoria fuera de límites debido a la verificación insuficiente. Un atacante local autenticado puede provocar que el proceso se cierre inesperadamente mediante certificados maliciosos. El atacante puede explotar esta vulnerabilidad para provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933755CC-4A0B-42FB-9491-3C841059851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410E8DAA-E961-46E1-96E2-3AC4B40D8359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D26AA-09DF-49DA-930F-A2EAEA486361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F69BC3-E6C0-4E70-AC13-D79D840579DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5561195B-7385-4175-9D29-77E95E4E9AB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18553F87-9928-4AE8-87D5-EB8014999E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DB85A7-54F1-4726-9D9C-07CC35621C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17138",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.580",
      "lastModified" : "2024-11-21T03:17:33.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a DoS vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker can make processing into deadloop by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "El módulo PEM de DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 de Huawei tiene una vulnerabilidad de denegación de servicio (DoS) debido a la verificación insuficiente. Un atacante local autenticado puede provocar que el proceso entre en un deadloop mediante certificados maliciosos. El atacante puede explotar esta vulnerabilidad para provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933755CC-4A0B-42FB-9491-3C841059851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410E8DAA-E961-46E1-96E2-3AC4B40D8359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D26AA-09DF-49DA-930F-A2EAEA486361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F69BC3-E6C0-4E70-AC13-D79D840579DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5561195B-7385-4175-9D29-77E95E4E9AB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18553F87-9928-4AE8-87D5-EB8014999E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DB85A7-54F1-4726-9D9C-07CC35621C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17139",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.643",
      "lastModified" : "2024-11-21T03:17:33.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to get kernel date which may cause sensitive information leak."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Mate 9 y Mate 9 pro con software en versiones anteriores a la MHA-AL00B 8.0.0.334(C00) y a la LON-AL00B 8.0.0.334(C00) tienen una vulnerabilidad de filtrado de información en la implementación del proxy de servicio de fecha. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa que pueda explotar la vulnerabilidad para obtener la fecha del kernel, lo que podría causar una filtración de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.334\\(c00\\)",
            "matchCriteriaId" : "1C983B9F-8A7B-4FF1-8073-7C397714991A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00b_8.0.0.334\\(c00\\)",
            "matchCriteriaId" : "B9640332-F80C-4360-A67E-C00C99D807D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-04-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-04-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17140",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.690",
      "lastModified" : "2024-11-21T03:17:33.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and the application can read some sensitive information in kernel memory which may cause sensitive information leak."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Enjoy 5s y Y6 Pro con software en versiones anteriores a la TAG-AL00C92B170 y versiones anteriores a la TIT-L01C576B121 tienen una vulnerabilidad de filtrado de información debido a la falta de validación de parámetros. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone que pueda leer información sensible en la memoria del kernel, lo que podría causar una filtración de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:enjoy_5s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tag-al00c92b170",
            "matchCriteriaId" : "EBB58894-5BF4-48D0-8119-968F0CCEE653"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:enjoy_5s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60819E83-1C4F-4C5F-BA95-ECA74AAFACDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:y6_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tit-l01c576b121",
            "matchCriteriaId" : "934F4514-119F-4756-90DF-742C25935603"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:y6_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F54999-3926-438D-BF21-8417C6B7A175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17141",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.737",
      "lastModified" : "2024-11-21T03:17:34.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products."
      }, {
        "lang" : "es",
        "value" : "Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 tienen una vulnerabilidad de filtrado de información. En algunas condiciones específicas, si los atacantes envían mensajes PING MPLS Service especialmente mal formados a los productos afectados, estos no liberan la memoria al gestionar los paquetes. Por lo tanto, esto resulta en el filtrado de memoria de los productos afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81469B-EC6C-493D-B632-4DF821A1F304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F2C4C7-3438-42B8-8999-C17E45C8CF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985C07E4-1E27-4191-9FB8-4714A177479D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "410E8DAA-E961-46E1-96E2-3AC4B40D8359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DC34F-C000-4E51-A70E-38610D31AE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v100r006c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA85312-3C8F-4F1F-8138-1A091C453193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9888DCAA-118C-4091-8425-8FBEE3AAABC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED7DFC5-846F-4F90-91A8-13E9E805C9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193FCE7A-C793-446B-9C39-20597FA7BC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D26AA-09DF-49DA-930F-A2EAEA486361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00b050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339CF153-DF87-4522-8041-E4F65D67D008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00spc009t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD2B901-E5B8-4A6D-BDBD-804CECC27B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00spc019t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC14AAEC-0E25-4B32-9E12-5565B4BF8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F69BC3-E6C0-4E70-AC13-D79D840579DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s3700_firmware:v100r006c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85611E3B-826E-4B8F-884B-C121DE4EECEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F84390-E120-406B-967D-B473EB110EA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336AA440-AEF4-482B-A037-8976DC38BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228D261C-DB88-4AEE-91D3-772DD28E4CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2DE9FE-5EC9-462E-86F0-EE772C944DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4907FBB8-5157-460D-9240-DD7D610C0FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r003c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2898D6C5-77AB-4C1F-8134-B2DBD13EDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF23DAE-1215-41B2-88C5-4436D846266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64CA8E2-AF04-42B3-8E26-2EF379703B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB33B908-085C-43C6-B8B7-25BBF3614C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B18ABC1-A970-472A-A8BF-934D1180930E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5973A534-F961-4A97-B20E-994BA28AFE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B5A9B7-A931-4806-8AC7-302C6CA49CF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7B7285-F4C6-415C-A948-D7612750A77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD40F46-5E04-43F0-A2DB-0ACBEC92C53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6DC0AF-017E-41BC-A19D-F9AA055F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749B68B9-9F62-4E7A-AC86-F4073BA32E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D9776-5CE7-4DD3-9119-7FB08A35B955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4979AA8-0D8E-4F37-A7DC-709BE4821D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898AC16A-8F4E-4709-A3B4-DE74FFB91130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EA93B5-01A5-4506-9B0A-993621E6940E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49D3EAD-1EB3-4C62-80BA-4C9C3CE0408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65902ABB-3EF2-4C8B-BAC1-84BC585019BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75B012-A57D-4C6D-AB26-51D2ECC02F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DFF0C0-AA17-4AA1-A418-4759D1A58852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F05D5-BA7D-485B-91C2-273349335CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345DA517-033D-4C94-A7F2-77C047309E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55C2AC7-FF47-4160-B524-E3E6C54612E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6712B77-1268-4A5A-B383-E51D9D51F108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F0B3D-1923-42C3-A3DB-03D11BE059D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032E5E4D-B1B8-4659-8B62-3DC237234501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB6ED15-477B-4BB5-AA94-0D7897FBD962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AD9ACA-E0C3-4096-BE50-94E717CDA318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325D6523-A07A-48D4-AD44-CF838BD77432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17142",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.800",
      "lastModified" : "2024-11-21T03:17:34.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 has an overflow vulnerability that attacker can exploit by sending a specially crafted SIP message leading to a process reboot at random."
      }, {
        "lang" : "es",
        "value" : "El módulo SIP en Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 tiene una vulnerabilidad de desbordamiento que un atacante puede explotar mediante el envío de un mensaje SIP especialmente manipulado, lo que conduce al reinicio aleatorio de un proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A71A4-EA55-406A-AA4E-8440D1308469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBAB577-4080-47F3-AA55-BFB7125F5495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C4FD49-92A2-484E-8426-C82AF33D6866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D418DBF4-55CB-434F-B68D-74D5EECBC137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F0817-ED09-4F75-BC61-B49389D7F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612AD4DF-9DC0-4AC5-9120-C3727986439E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C8CFF6-D9D0-45EB-888F-C34D188836CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3C0DF6-A0B7-4A5B-9BF0-6359F7C03221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5430555D-532E-47D8-A731-E6E453BD7756"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32747682-E8C2-450D-BE34-A427442C6A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc200b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F751F8-83CD-400C-B43B-599DFD73A569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBEE4A4-0D51-4845-83DD-EE326F227150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B125233A-3A7D-41E9-826C-BC7A5DA8A93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E656A39-4954-442B-83C2-587B78702C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc700b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E5060-F247-4B4F-86C4-D72F54287905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13BEC8-7124-4DA2-9B61-8B1848F33C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB3DB2-810A-4FB2-BE52-9694824F90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA29F7B-86A4-4D58-B868-33CB70337A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AFB31-BF50-4AAA-AD42-309C86C0A9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E11E0F5-C34B-4745-B6F0-8DF3522FA15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D02AA-1B42-4B4E-BB7B-0B063DE5F2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E5A0D4-E459-4230-94DB-E94946425071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C8433-FEA5-4784-8C0A-174C677AD50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F48D7B-BAAB-46F8-A428-5EC68EC34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D177F9-8A65-4E1F-9576-D03171336510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38671934-B566-4A73-9C97-C0236D4EEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF59A18A-7FDD-4AF9-B0B4-A0894A1E4E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382868EB-07B6-448B-AF15-8C66046C9422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75CBAE-59AC-4290-989E-8897B7FFE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71366A4-11F7-42F6-A1C7-A3D3E38E0ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24C343C-1500-4016-97AB-D4C891AB6877"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5547844C-BEDD-4819-8080-832AF545E80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc107tb010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3415AF06-1643-40BE-AF08-C271EAFF0DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F23F7-CD43-4C33-B08A-72D34DF152BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2630F664-C5D1-4E38-9ABC-C5EEC0E61B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7B30D7-FD50-495D-B56D-BE29C6D42831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AF9B11-C3EE-482C-AD20-7482C87EDEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2027FA-F73C-4769-9404-F6CFF8F36120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC82CFB2-6CBD-47FE-9A9F-66B3FF36EFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC7E5EE-0F99-4089-ABF8-709D15AA4B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD64645-CD8A-4FE3-9C28-E6001F210F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06047C06-B5D8-4495-A5E8-03FBC65AE2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38CC7A1-D039-41BB-A795-95F5B877B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18152B19-FD04-4983-B18A-0E362E8158F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592AC67D-2210-46A4-9BB2-DA04C67E171B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE6C6E-BDF3-4841-9836-4C81A41F2129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F0893C-8D47-43D7-A69B-E16F77E0F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA427C8-B75F-4C98-BCBF-5588409CDD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305174D3-15DE-4BAC-8AA6-699E487DDA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcd00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3751B91-F430-463D-832F-63C1D95A4DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908B4607-CBF3-4CFE-B6D7-EAA6E8262B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040454F6-FCDB-4320-8933-8F7DBB9956ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F3BB83-7F0A-4C59-B889-7EF95BD581BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6753A5A-A0EE-4A88-8294-D40CB47F029B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB67C3FC-C4DA-409E-8020-54A7DA6D7E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EE5D80-938B-40BB-83D6-6A86F5C61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E086778-CB49-4BAA-A371-3B979E167D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9CA21C-8309-47E1-8CEA-15A658E11C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B55AEFB-2EA2-40C3-9D22-399EFA7829C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B35E57-A796-4B2E-A59E-7FA2410C542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB025223-5E20-43AA-956E-31550012D839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B604E6-C954-42B9-B780-7ED337EF862B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEABC547-7345-4DEB-99DB-5EDAB2C8B7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E40DF15-0B29-42BD-88EC-7F5A19796690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271BFB9-7655-44D8-BF5C-AAEB5B191C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b015sp03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18627C53-7136-434E-AAAC-0E91714597EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03lgwl01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3544AA-D3C3-4B79-B102-AF8C8DB8FDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF1DB39-2C29-4102-A824-2ABA83A9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F37C402-C5B8-44D9-9C46-2E8CA5601F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9159B699-1785-4B78-81E7-0B2C06914663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE20FF5-BCFC-4875-9D8F-D629CFE23F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA6963D-FD64-41E7-854E-E8A1D1933BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7C11E8-F3ED-4D96-8361-9D22C5F6D5C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A9E39-A256-461D-BFD5-F9B6629089D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB552A67-C220-4E5F-94DA-1ACEEEE59F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BE345C-4C6D-4C6F-9198-B2B1CC204A86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17143",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.863",
      "lastModified" : "2024-11-21T03:17:34.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 has an overflow vulnerability that the module cannot parse a malformed SIP message when validating variables. Attacker can exploit it to make one process reboot at random."
      }, {
        "lang" : "es",
        "value" : "El módulo SIP en Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 tiene una vulnerabilidad de desbordamiento por la cual el módulo no puede analizar un mensaje SIP mal formado al validar variables. Un atacante podría explotarlo para hacer que un proceso se reinicie de forma aleatoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A71A4-EA55-406A-AA4E-8440D1308469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBAB577-4080-47F3-AA55-BFB7125F5495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C4FD49-92A2-484E-8426-C82AF33D6866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D418DBF4-55CB-434F-B68D-74D5EECBC137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F0817-ED09-4F75-BC61-B49389D7F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612AD4DF-9DC0-4AC5-9120-C3727986439E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C8CFF6-D9D0-45EB-888F-C34D188836CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3C0DF6-A0B7-4A5B-9BF0-6359F7C03221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5430555D-532E-47D8-A731-E6E453BD7756"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32747682-E8C2-450D-BE34-A427442C6A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc200b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F751F8-83CD-400C-B43B-599DFD73A569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBEE4A4-0D51-4845-83DD-EE326F227150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B125233A-3A7D-41E9-826C-BC7A5DA8A93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E656A39-4954-442B-83C2-587B78702C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc700b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E5060-F247-4B4F-86C4-D72F54287905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13BEC8-7124-4DA2-9B61-8B1848F33C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB3DB2-810A-4FB2-BE52-9694824F90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA29F7B-86A4-4D58-B868-33CB70337A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AFB31-BF50-4AAA-AD42-309C86C0A9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E11E0F5-C34B-4745-B6F0-8DF3522FA15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D02AA-1B42-4B4E-BB7B-0B063DE5F2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E5A0D4-E459-4230-94DB-E94946425071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C8433-FEA5-4784-8C0A-174C677AD50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F48D7B-BAAB-46F8-A428-5EC68EC34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D177F9-8A65-4E1F-9576-D03171336510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38671934-B566-4A73-9C97-C0236D4EEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF59A18A-7FDD-4AF9-B0B4-A0894A1E4E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382868EB-07B6-448B-AF15-8C66046C9422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75CBAE-59AC-4290-989E-8897B7FFE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71366A4-11F7-42F6-A1C7-A3D3E38E0ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24C343C-1500-4016-97AB-D4C891AB6877"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5547844C-BEDD-4819-8080-832AF545E80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc107tb010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3415AF06-1643-40BE-AF08-C271EAFF0DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F23F7-CD43-4C33-B08A-72D34DF152BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2630F664-C5D1-4E38-9ABC-C5EEC0E61B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7B30D7-FD50-495D-B56D-BE29C6D42831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AF9B11-C3EE-482C-AD20-7482C87EDEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2027FA-F73C-4769-9404-F6CFF8F36120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC82CFB2-6CBD-47FE-9A9F-66B3FF36EFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC7E5EE-0F99-4089-ABF8-709D15AA4B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD64645-CD8A-4FE3-9C28-E6001F210F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06047C06-B5D8-4495-A5E8-03FBC65AE2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38CC7A1-D039-41BB-A795-95F5B877B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18152B19-FD04-4983-B18A-0E362E8158F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592AC67D-2210-46A4-9BB2-DA04C67E171B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE6C6E-BDF3-4841-9836-4C81A41F2129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F0893C-8D47-43D7-A69B-E16F77E0F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA427C8-B75F-4C98-BCBF-5588409CDD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305174D3-15DE-4BAC-8AA6-699E487DDA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcd00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3751B91-F430-463D-832F-63C1D95A4DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908B4607-CBF3-4CFE-B6D7-EAA6E8262B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040454F6-FCDB-4320-8933-8F7DBB9956ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F3BB83-7F0A-4C59-B889-7EF95BD581BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6753A5A-A0EE-4A88-8294-D40CB47F029B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB67C3FC-C4DA-409E-8020-54A7DA6D7E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EE5D80-938B-40BB-83D6-6A86F5C61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E086778-CB49-4BAA-A371-3B979E167D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9CA21C-8309-47E1-8CEA-15A658E11C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B55AEFB-2EA2-40C3-9D22-399EFA7829C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B35E57-A796-4B2E-A59E-7FA2410C542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB025223-5E20-43AA-956E-31550012D839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B604E6-C954-42B9-B780-7ED337EF862B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEABC547-7345-4DEB-99DB-5EDAB2C8B7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E40DF15-0B29-42BD-88EC-7F5A19796690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271BFB9-7655-44D8-BF5C-AAEB5B191C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b015sp03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18627C53-7136-434E-AAAC-0E91714597EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03lgwl01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3544AA-D3C3-4B79-B102-AF8C8DB8FDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF1DB39-2C29-4102-A824-2ABA83A9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F37C402-C5B8-44D9-9C46-2E8CA5601F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9159B699-1785-4B78-81E7-0B2C06914663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE20FF5-BCFC-4875-9D8F-D629CFE23F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA6963D-FD64-41E7-854E-E8A1D1933BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7C11E8-F3ED-4D96-8361-9D22C5F6D5C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A9E39-A256-461D-BFD5-F9B6629089D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB552A67-C220-4E5F-94DA-1ACEEEE59F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BE345C-4C6D-4C6F-9198-B2B1CC204A86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17144",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.910",
      "lastModified" : "2024-11-21T03:17:34.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 has an overflow vulnerability when the module process a specific amount of state. The module cannot handle it causing SIP module DoS."
      }, {
        "lang" : "es",
        "value" : "La característica de copia de seguridad del módulo SIP en Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 tiene una vulnerabilidad de desbordamiento cuando el módulo procesa una cantidad de estado determinada. El módulo no es capaz de gestionarlo, por lo que se provoca una denegación de servicio (DoS) en el módulo SIP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A71A4-EA55-406A-AA4E-8440D1308469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBAB577-4080-47F3-AA55-BFB7125F5495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C4FD49-92A2-484E-8426-C82AF33D6866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D418DBF4-55CB-434F-B68D-74D5EECBC137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F0817-ED09-4F75-BC61-B49389D7F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612AD4DF-9DC0-4AC5-9120-C3727986439E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C8CFF6-D9D0-45EB-888F-C34D188836CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3C0DF6-A0B7-4A5B-9BF0-6359F7C03221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5430555D-532E-47D8-A731-E6E453BD7756"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32747682-E8C2-450D-BE34-A427442C6A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc200b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F751F8-83CD-400C-B43B-599DFD73A569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBEE4A4-0D51-4845-83DD-EE326F227150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B125233A-3A7D-41E9-826C-BC7A5DA8A93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E656A39-4954-442B-83C2-587B78702C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc700b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E5060-F247-4B4F-86C4-D72F54287905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13BEC8-7124-4DA2-9B61-8B1848F33C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB3DB2-810A-4FB2-BE52-9694824F90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA29F7B-86A4-4D58-B868-33CB70337A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AFB31-BF50-4AAA-AD42-309C86C0A9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E11E0F5-C34B-4745-B6F0-8DF3522FA15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D02AA-1B42-4B4E-BB7B-0B063DE5F2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E5A0D4-E459-4230-94DB-E94946425071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C8433-FEA5-4784-8C0A-174C677AD50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F48D7B-BAAB-46F8-A428-5EC68EC34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D177F9-8A65-4E1F-9576-D03171336510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38671934-B566-4A73-9C97-C0236D4EEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF59A18A-7FDD-4AF9-B0B4-A0894A1E4E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382868EB-07B6-448B-AF15-8C66046C9422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75CBAE-59AC-4290-989E-8897B7FFE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71366A4-11F7-42F6-A1C7-A3D3E38E0ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24C343C-1500-4016-97AB-D4C891AB6877"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5547844C-BEDD-4819-8080-832AF545E80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01spc107tb010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3415AF06-1643-40BE-AF08-C271EAFF0DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F23F7-CD43-4C33-B08A-72D34DF152BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2630F664-C5D1-4E38-9ABC-C5EEC0E61B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7B30D7-FD50-495D-B56D-BE29C6D42831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AF9B11-C3EE-482C-AD20-7482C87EDEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2027FA-F73C-4769-9404-F6CFF8F36120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC82CFB2-6CBD-47FE-9A9F-66B3FF36EFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC7E5EE-0F99-4089-ABF8-709D15AA4B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD64645-CD8A-4FE3-9C28-E6001F210F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06047C06-B5D8-4495-A5E8-03FBC65AE2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38CC7A1-D039-41BB-A795-95F5B877B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18152B19-FD04-4983-B18A-0E362E8158F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592AC67D-2210-46A4-9BB2-DA04C67E171B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE6C6E-BDF3-4841-9836-4C81A41F2129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F0893C-8D47-43D7-A69B-E16F77E0F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA427C8-B75F-4C98-BCBF-5588409CDD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305174D3-15DE-4BAC-8AA6-699E487DDA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcd00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3751B91-F430-463D-832F-63C1D95A4DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908B4607-CBF3-4CFE-B6D7-EAA6E8262B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040454F6-FCDB-4320-8933-8F7DBB9956ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F3BB83-7F0A-4C59-B889-7EF95BD581BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6753A5A-A0EE-4A88-8294-D40CB47F029B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB67C3FC-C4DA-409E-8020-54A7DA6D7E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EE5D80-938B-40BB-83D6-6A86F5C61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E086778-CB49-4BAA-A371-3B979E167D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9CA21C-8309-47E1-8CEA-15A658E11C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B55AEFB-2EA2-40C3-9D22-399EFA7829C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B35E57-A796-4B2E-A59E-7FA2410C542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB025223-5E20-43AA-956E-31550012D839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B604E6-C954-42B9-B780-7ED337EF862B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEABC547-7345-4DEB-99DB-5EDAB2C8B7DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E40DF15-0B29-42BD-88EC-7F5A19796690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b012sp16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271BFB9-7655-44D8-BF5C-AAEB5B191C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03b015sp03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18627C53-7136-434E-AAAC-0E91714597EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03lgwl01spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3544AA-D3C3-4B79-B102-AF8C8DB8FDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF1DB39-2C29-4102-A824-2ABA83A9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F37C402-C5B8-44D9-9C46-2E8CA5601F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9159B699-1785-4B78-81E7-0B2C06914663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE20FF5-BCFC-4875-9D8F-D629CFE23F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA6963D-FD64-41E7-854E-E8A1D1933BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7C11E8-F3ED-4D96-8361-9D22C5F6D5C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A9E39-A256-461D-BFD5-F9B6629089D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB552A67-C220-4E5F-94DA-1ACEEEE59F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BE345C-4C6D-4C6F-9198-B2B1CC204A86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8164",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:00.957",
      "lastModified" : "2024-11-21T03:33:26.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation can cause camera application unusable."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131 y VIE-L29C636B202 tienen una vulnerabilidad de denegación de servicio (DoS). Un atacante puede engañar a un usuario para que instale una aplicación maliciosa para explotar esta vulnerabilidad. Si se logra, la aplicación de la cámara podría volverse inutilizable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-al10_firmware:eva-al10c00b198:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE78FD9-CCA6-4745-B161-61223C72B9A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-al10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89B86B6-A9A5-40A5-A414-F816345B8238"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-cl00_firmware:eva-cl00c92b198:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B97C600-CDE2-4B7C-9B83-2AFFEB1EF1D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-cl00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B288E-2A85-433A-B21E-1C40A443EC2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-dl00_firmware:eva-dl00c17b198:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3608AC2-958C-4849-B299-CE2C89D761B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-dl00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C6AD31-521D-40AA-8723-E4A47939D3D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c02b143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7AA711-DF53-498D-A724-6652B75B548A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c09b150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D6401A-104B-4CB8-9C5D-1C222809EF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c22b140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FAD316-034E-4101-BD3E-D6B76C0DC84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c25b133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C4E1E9-0448-4E25-B8B0-770ABE783D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c33b191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB12B5E4-0DB1-472E-B6C2-A4A42D1064A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c34b142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04135E0A-6FB0-4F0C-86F0-9688C47F86C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c40b196:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57C8E02-0AEB-484F-8FC2-65C766531EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c55b190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2B57AB-041B-44AF-B6F3-73D54539E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c109b196:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C6D075-B1A2-4B94-AEED-73AC4B47D8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c113b150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1CD52B-FB5D-4B30-8090-E26279DF07B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c150b192:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F5493D-6852-4031-B595-808B22CCFC95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c178b161:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A95D49-0BBE-4A9B-B54C-4E8C06F060F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c185b180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC333CD3-93C7-4573-A7AB-2E1B2D8609F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c432b210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07149C6-9A52-4212-9DD3-B46BD5C75286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c440b138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23F3BE6-451D-4157-8D2D-A7F0B108E768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c464b150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE0B8D8-A463-4BA8-821B-58377A8A6D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c530b127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7665D2BC-1920-427B-A7F3-936E05986711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c576b150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F7EEAC-7DBC-4468-AC70-5AE60CD606E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c635b221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094AC920-589C-4797-90F2-85B84794090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c636b193:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD2FB18-BC05-43D1-863E-209D810C3423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c675b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6DB765-AF9C-4096-83CB-E07334A90BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c688b143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D98F47-CDAF-4F9B-9425-10A627E30B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c703b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494FF928-6FA1-48E9-8ED0-07B19814A56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09c706b145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FEACD5-CEDB-4627-A58D-9FE1DAC41174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09gbrc555b171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE18A15-A05E-4146-B96D-3E9D84D8A724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l09_firmware:eva-l09irlc368b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94205400-EE8D-4580-8DFC-4060D08C9D5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l19_firmware:eva-l19c10b190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5805F9CB-D153-476B-8DBC-AB36CC3F777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l19_firmware:eva-l19c20b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF5DD42-9D54-45E8-B02F-92154295CD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l19_firmware:eva-l19c185b220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1D5B05-76AC-42AF-83F2-5DC38D3F7490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l19_firmware:eva-l19c432b210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB82C0F-0FF3-4A01-BCA2-77E2167031AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l19_firmware:eva-l19c636b190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4051A2C-2ECB-40DE-9D28-1E9173F15D96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l19:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35B4B3F-E1A8-45BA-88DB-971D22E43095"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l29_firmware:eva-l29c20b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80F7FD5-11B5-46DD-A63D-A1D556751897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-l29_firmware:eva-l29c636b191:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C615E8F-FD15-4D0D-A970-B429FF200F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-l29:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610E3786-99F3-4F20-8F1C-52FCE288A3E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:eva-tl00_firmware:eva-tl00c01b198:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D7C5D1-04B6-4A3E-AEEE-D001C80C727B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:eva-tl00:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E80ED4-3E08-4101-8259-4695CA1876FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c02b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE4B9AE-0105-4EC7-99F3-745226B0A22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c25b120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEBEA0-CEF6-4E86-B1D2-63A8EBD61F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c40b181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB32681D-6B9F-4F18-B3C6-E33DC8973EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c55b170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D999CCDA-FE37-43F6-AB62-4FD0CDCB2E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c109b181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D148C2-67D9-430F-BA69-675BD29EFC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c113b170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1CAC5F-F560-473D-B4D4-4BA8DCA06579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c150b170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E582E0E9-6C5C-4DBA-9B99-494E352C20E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c432b181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B2CF2-B789-4C11-9B76-D1959514BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c605b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB91E9C0-6B55-4A76-91AD-BCCF497D33C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l09_firmware:vie-l09itac555b130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1EA148-A22F-426D-A98B-F289585D51BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vie-l09:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65CF98-06E4-46F7-BC6D-56F16667F2B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l29_firmware:vie-l29c10b170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E11FFF-5D47-4AF6-B38C-B76316BE6F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l29_firmware:vie-l29c185b181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE19691-EFCF-45DF-8537-5607E0EBA6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l29_firmware:vie-l29c605b131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837F6F0E-B50C-45F6-AA70-45F65E13EDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vie-l29_firmware:vie-l29c636b202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6D0AC2-0420-4C01-8E4D-07909BF03DC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vie-l29:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5368CD8-0F79-4503-A5EF-F93884B32616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8165",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-05T19:29:01.003",
      "lastModified" : "2024-11-21T03:33:27.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Mate 9 con versiones anteriores a la MHA-AL00BC00B233 tienen una vulnerabilidad de filtrado de información sensible. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa para explotar esta vulnerabilidad. Si se logra, se podría producir una fuga de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00bc00b233",
            "matchCriteriaId" : "F75D7B56-4497-4D2D-A20E-3524E95767CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171117-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171117-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T20:29:00.210",
      "lastModified" : "2024-11-21T03:19:35.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in InvoicePlane before 1.5.5. It was observed that the Email address and Web address parameters are vulnerable to Cross Site Scripting, related to application/modules/clients/views/view.php, application/modules/invoices/views/view.php, and application/modules/quotes/views/view.php."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 1.5.5 de InvoicePlane. Se ha observado que los parámetros Email address y Web address son vulnerables a Cross Site Scripting (XSS), relacionado con application/modules/clients/views/view.php, application/modules/invoices/views/view.php y application/modules/quotes/views/view.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.5",
            "matchCriteriaId" : "1C8C9C35-6690-419F-B795-08A2DC3EE6CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.isecurion.com/2018/04/23/invoice-plane-v1-5-cross-site-scripting-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/542",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.isecurion.com/2018/04/23/invoice-plane-v1-5-cross-site-scripting-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/pull/551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T20:29:00.270",
      "lastModified" : "2024-11-21T03:19:35.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit."
      }, {
        "lang" : "es",
        "value" : "En drivers/net/ethernet/hisilicon/hns/hns_enet.c en el kernel de Linux, en versiones anteriores a la 4.13, los usuarios locales pueden provocar una denegación de servicio (uso de memoria previamente liberada y error) u otro tipo de impacto sin especificar aprovechando las diferencias en la gestión skb en hns_nic_net_xmit_hw y hns_nic_net_xmit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.92",
            "matchCriteriaId" : "8347294E-AA12-4F18-939B-D38A58907D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "6FCB36DB-56CB-4283-9F37-46669CDBB0B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T22:29:00.213",
      "lastModified" : "2024-11-21T03:19:35.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large png_pixels array allocation."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en GraphicsMagick 1.3.26. Se ha encontrado una vulnerabilidad de error de asignación en la función ReadOnePNGImage en coders/png.c, lo que permite que atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado que desencadena un intento de asignación de un gran array png_pixels."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/cadd4b0522fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103258",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/459/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/cadd4b0522fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/459/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-05T22:29:00.277",
      "lastModified" : "2024-11-21T03:19:36.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/blob.c CloseBlob use-after-free) or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403."
      }, {
        "lang" : "es",
        "value" : "Las funciones ReadOneJNGImage y ReadJNGImage en coders/png.c en GraphicsMagick 1.3.26 permiten que atacantes remotos provoquen una denegación de servicio (DoS) (uso de memoria previamente liberada en CloseBlob en magick/blob.c) u otro tipo de impacto sin especificar mediante un archivo manipulado. Este problema está relacionado con CVE-2017-11403."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/98721124e51f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103276",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/438/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/98721124e51f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/438/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6280",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-06T16:29:00.230",
      "lastModified" : "2024-11-21T03:29:26.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980."
      }, {
        "lang" : "es",
        "value" : "El controlador NVIDIA contiene una posible vulnerabilidad de lectura fuera de límites debido a una filtración que podría desembocar en la revelación de información. Este problema se ha clasificado como moderado, Android: A-63851980."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2017-12-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6282",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-06T16:29:00.277",
      "lastModified" : "2024-11-21T03:29:27.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high."
      }, {
        "lang" : "es",
        "value" : "El controlador del kernel NVIDIA Tegra contiene una vulnerabilidad en NVMAP por la cual un atacante podría escribir un valor arbitrario en una ubicación arbitraria, que podría conducir a un escalado de privilegios. Este problema se ha clasificado como grave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-123"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "78C328C9-DEF4-47AE-91F2-8C8AA43B4E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6283",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-06T16:29:00.327",
      "lastModified" : "2024-11-21T03:29:27.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Security Engine contiene una vulnerabilidad en la función RSA, donde los permisos de bloqueo de lectura/escritura del keyslot se limpian en un restablecimiento del chip. Esto podría conducir a la divulgación de información. Este problema se ha clasificado como grave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "78C328C9-DEF4-47AE-91F2-8C8AA43B4E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6284",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-06T16:29:00.387",
      "lastModified" : "2024-11-21T03:29:27.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that is unable to protect sensitive data which may lead to information disclosure.This issue is rated as moderate."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Security Engine contiene una vulnerabilidad en el DRBG (Deterministic Random Bit Generator) donde este no inicializa o almacena y transmite datos sensibles mediante un esquema de cifrado débil que no puede proteger correctamente datos sensibles y que puede desembocar en una divulgación de información. Este problema se ha clasificado como moderado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "78C328C9-DEF4-47AE-91F2-8C8AA43B4E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6295",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-06T16:29:00.433",
      "lastModified" : "2024-11-21T03:29:29.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high."
      }, {
        "lang" : "es",
        "value" : "NVIDIA TrustZone Software contiene una vulnerabilidad en la implementación Keymaster donde el software lee datos más allá del final o antes del comienzo del búfer. Y podría conducir a una denegación de servicio (DoS) o a una divulgación de información. Este problema se ha clasificado como grave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "78C328C9-DEF4-47AE-91F2-8C8AA43B4E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6296",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-06T16:29:00.480",
      "lastModified" : "2024-11-21T03:29:29.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate."
      }, {
        "lang" : "es",
        "value" : "NVIDIA TrustZone Software contiene un problema de TOCTOU en la aplicación DRM, lo que podría conducir a una denegación de servicio (DoS) o a una escalada de privilegios. Este problema se ha clasificado como moderado,"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "78C328C9-DEF4-47AE-91F2-8C8AA43B4E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-06T16:29:00.527",
      "lastModified" : "2024-11-21T03:36:50.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en ProjectSend (anteriormente cFTP) en versiones anteriores al commit con ID 6c3710430be26feb5371cb0377e5355d6f9a27ca permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el campo Description en un nombre de sitio actualizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r754",
            "matchCriteriaId" : "D8DDDB8E-761B-40A9-9231-CF30E142CBBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ignacionelson/ProjectSend/compare/448/commits",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ignacionelson/ProjectSend/pull/448/commits/6c3710430be26feb5371cb0377e5355d6f9a27ca",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ignacionelson/ProjectSend/compare/448/commits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ignacionelson/ProjectSend/pull/448/commits/6c3710430be26feb5371cb0377e5355d6f9a27ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-06T16:29:00.590",
      "lastModified" : "2024-11-21T03:36:50.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en ProjectSend (anteriormente cFTP) en versiones anteriores al commit con ID 6c3710430be26feb5371cb0377e5355d6f9a27ca permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el campo Description en un nombre actualizado en My account. Esto se relaciona con home.php y actions-log.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r754",
            "matchCriteriaId" : "D8DDDB8E-761B-40A9-9231-CF30E142CBBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ignacionelson/ProjectSend/pull/448/commits/6c3710430be26feb5371cb0377e5355d6f9a27ca",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ignacionelson/ProjectSend/pull/448/commits/6c3710430be26feb5371cb0377e5355d6f9a27ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15519",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-03-06T20:29:00.453",
      "lastModified" : "2024-11-21T03:14:42.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation."
      }, {
        "lang" : "es",
        "value" : "Desde la versión 2.0 a la 3.0.1 de SnapCenter, atacantes remotos no autenticados pueden ver y modificar copias de seguridad relacionadas con el plug-in para NAS File Services.    Se recomienda encarecidamente que los usuarios empleen la versión 3.0.1 y realicen los pasos de mitigación o actualicen a la versión 4-0 siguiendo las instrucciones del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "91928FC1-5469-45D5-8C13-87F4A31F8DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20180306-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180306-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-07T02:29:00.517",
      "lastModified" : "2024-11-21T03:08:13.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Request Forgery (CSRF) en dispositivos DrayTek Vigor AP910C con firmware 1.2.0_RC3 build r6594 permite que atacantes remotos secuestren la autenticación de usuarios sin especificar para peticiones que habilitan SNMP en el dispositivo remoto mediante vectores relacionados con goform/setSnmp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigorap_910c_firmware:1.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A47E218D-D40D-4F24-B158-1DF0F011D8A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigorap_910c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DE2DE3-EB97-45F2-87EF-B7F2B72F036B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-07T02:29:00.563",
      "lastModified" : "2024-11-21T03:08:13.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en dispositivos DrayTek Vigor AP910C con firmware 1.2.0_RC3 build r6594 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores relacionados con home.asp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigorap_910c_firmware:1.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A47E218D-D40D-4F24-B158-1DF0F011D8A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigorap_910c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DE2DE3-EB97-45F2-87EF-B7F2B72F036B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-07T08:29:00.263",
      "lastModified" : "2024-11-21T03:19:36.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls."
      }, {
        "lang" : "es",
        "value" : "La función __munlock_pagevec en mm/mlock.c en el kernel de Linux, en versiones anteriores a la 4.11.4, permite que usuarios locales provoquen una denegación de servicio (corrupción de contabilidad NR_MLOCK) mediante el uso manipulado de llamadas del sistema mlockall y munlockall."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "D5585AF1-24A5-486E-B916-B18EBF5851A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=70feee0e1ef331b22cc51f383d532a0d043fbdcc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/70feee0e1ef331b22cc51f383d532a0d043fbdcc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=70feee0e1ef331b22cc51f383d532a0d043fbdcc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/70feee0e1ef331b22cc51f383d532a0d043fbdcc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-07T20:29:00.247",
      "lastModified" : "2024-11-21T03:14:33.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server."
      }, {
        "lang" : "es",
        "value" : "Bacula-web, en versiones anteriores a la 8.0.0-rc2, se ha visto afectado por múltiples vulnerabilidades que podrían permitir que un atacante acceda a la base de datos de Bacula y, dependiendo de la configuración, escalar privilegios en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacula:bacula-web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.0",
            "matchCriteriaId" : "8834B1C4-AE49-4354-BCCE-618334E740D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacula:bacula-web:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7677C4-EE67-4938-9EF3-0D5921479100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bacula-web.org/download/articles/bacula-web-8-0-0-rc2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.bacula-web.org/view.php?id=211",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bacula-web/bacula-web/commit/90d4c44a0dd0d65c6fb3ab2417b83d700c8413ae",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44272/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bacula-web.org/download/articles/bacula-web-8-0-0-rc2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.bacula-web.org/view.php?id=211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bacula-web/bacula-web/commit/90d4c44a0dd0d65c6fb3ab2417b83d700c8413ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44272/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12174",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-07T22:29:00.243",
      "lastModified" : "2024-11-21T03:08:59.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que cuando Artemis y HornetQ, en versiones anteriores a la 2.4.0, se configuran con detección UDP y detección JGroups, se crea un array con muchos bytes al recibir un mensaje multicast inesperado. Esto podría resultar en un agotamiento de la memoria dinámica (heap), GC completo o OutOfMemoryError."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "6DDDD508-EA1C-45E5-9C26-88FDB905781E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:hornetq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "EB309328-D250-4F6C-8ABC-1E015B49E4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0268",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0269",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0275",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc96ad63f148f784c84ea7f0a178c84a8985c6afccabbcd9847a82088%40%3Ccommits.activemq.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc96ad63f148f784c84ea7f0a178c84a8985c6afccabbcd9847a82088%40%3Ccommits.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-08T14:29:00.223",
      "lastModified" : "2024-11-21T03:19:36.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux en versiones anteriores a la 4.12, Hisilicon Network Subsystem (HNS) no considera el caso ETH_SS_PRIV_FLAGS a la hora de recuperar los datos de sset_count, lo que permite que los usuarios locales provoquen una denegación de servicio (desbordamiento de búfer y corrupción de memoria) o, posiblemente, otro impacto no especificado, tal y como ha quedado demostrado por la incompatibilidad entre hns_get_sset_count y ethtool_get_strings."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12",
            "matchCriteriaId" : "D9BBDA7A-EA95-41C5-8F4C-CA458BCB7E1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=412b65d15a7f8a93794653968308fc100f2aa87c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103349",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/412b65d15a7f8a93794653968308fc100f2aa87c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3654-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3654-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3656-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=412b65d15a7f8a93794653968308fc100f2aa87c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/412b65d15a7f8a93794653968308fc100f2aa87c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3654-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3654-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3656-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6152",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-03-08T14:29:00.303",
      "lastModified" : "2024-11-21T03:29:09.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password."
      }, {
        "lang" : "es",
        "value" : "Un usuario local en F5 BIG-IQ Centralized Management 5.1.0-5.2.0 con el rol Access Manager tiene privilegios para cambiar las contraseñas de otros usuarios en el sistema, incluyendo la contraseña de la cuenta del administrador local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "77721E26-BA5B-447E-906A-685B4948969E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103441",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K35195140",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K35195140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7634",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-08T14:29:00.350",
      "lastModified" : "2024-11-21T03:32:20.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en el add-on Media Streaming de la aplicación NAS de QNAP, en versiones 421.1.0.2, 430.1.2.0 y anteriores, permite que los atacantes remotos inyecten scripts web o HTML arbitrarios. El código inyectado sólo se activará mediante un enlace manipulado, no en la página normal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "430.1.2.0",
            "matchCriteriaId" : "DF3F2E18-39EA-416E-8351-88D492F10423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "421.1.0.2",
            "matchCriteriaId" : "12C164C9-CD35-48D5-9856-0CEC646E63C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "939BC735-3214-4222-91A7-F24A8B66B218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7638",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-08T14:29:00.410",
      "lastModified" : "2024-11-21T03:32:20.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS."
      }, {
        "lang" : "es",
        "value" : "El add-on Media Streaming de la aplicación NAS de QNAP en versiones 421.1.0.2, 430.1.2.0 y anteriores no autentica las peticiones correctamente.  Su explotación exitosa podría provocar que se cambie la configuración de Media Streaming y que se fugue información sensible del NAS de QNAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "430.1.2.0",
            "matchCriteriaId" : "DF3F2E18-39EA-416E-8351-88D492F10423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "421.1.0.2",
            "matchCriteriaId" : "12C164C9-CD35-48D5-9856-0CEC646E63C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "939BC735-3214-4222-91A7-F24A8B66B218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7640",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-08T14:29:00.473",
      "lastModified" : "2024-11-21T03:32:21.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges."
      }, {
        "lang" : "es",
        "value" : "El add-on Media Streaming de la aplicación NAS de QNAP en versiones 421.1.0.2, 430.1.2.0 y anteriores permite que los atacantes remotos ejecuten comandos arbitrarios del sistema operativo contra el sistema con privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "430.1.2.0",
            "matchCriteriaId" : "DF3F2E18-39EA-416E-8351-88D492F10423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "421.1.0.2",
            "matchCriteriaId" : "12C164C9-CD35-48D5-9856-0CEC646E63C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "939BC735-3214-4222-91A7-F24A8B66B218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7641",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-08T14:29:00.520",
      "lastModified" : "2024-11-21T03:32:21.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections."
      }, {
        "lang" : "es",
        "value" : "El add-on Media Streaming de la aplicación NAS de QNAP en versiones 421.1.0.2, 430.1.2.0 y anteriores no utiliza medidas de seguridad contra CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "430.1.2.0",
            "matchCriteriaId" : "DF3F2E18-39EA-416E-8351-88D492F10423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "421.1.0.2",
            "matchCriteriaId" : "12C164C9-CD35-48D5-9856-0CEC646E63C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "939BC735-3214-4222-91A7-F24A8B66B218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9971",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-03-08T15:29:00.233",
      "lastModified" : "2023-11-07T02:50:56.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9972",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-03-08T15:29:00.280",
      "lastModified" : "2023-11-07T02:50:56.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9973",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-03-08T15:29:00.327",
      "lastModified" : "2023-11-07T02:50:56.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9974",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-03-08T15:29:00.377",
      "lastModified" : "2023-11-07T02:50:56.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9975",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2018-03-08T15:29:00.453",
      "lastModified" : "2023-11-07T02:50:57.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1625",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-08T16:29:00.250",
      "lastModified" : "2024-11-21T03:22:09.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 133123."
      }, {
        "lang" : "es",
        "value" : "IBM Pulse para QRadar 1.0.0 - 1.0.3 divulga información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 133123."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_pulse:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39253FA-18B6-4542-8976-BBF90630BF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_pulse:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0973F9C-5D9F-47D4-80AE-1B4DBA205327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_pulse:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65379BC5-BFCC-4223-A3FA-6CBC5EF8C3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_pulse:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDDDF8-4244-46CF-B54E-E826B6B42FE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014284",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103398",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133123",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10852",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2018-03-09T16:29:00.220",
      "lastModified" : "2024-11-21T03:06:38.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Corega CG-WGR1200, con firmware en versiones 2.20 y anteriores, permite que un atacante ejecute código arbitrario mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:corega:cg-wgr_1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "BBF44962-443F-458E-9978-35DDAE95BB5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:corega:cg-wgr_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE649AB-B089-4054-AEF5-8CF85AE2E7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corega.jp/support/security/20180309_wgr1200.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN15201064/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://corega.jp/support/security/20180309_wgr1200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN15201064/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10853",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2018-03-09T16:29:00.283",
      "lastModified" : "2024-11-21T03:06:38.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Corega CG-WGR1200, con firmware en versiones 2.20 y anteriores, permite que un atacante ejecute comandos arbitrarios mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:corega:cg-wgr_1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "BBF44962-443F-458E-9978-35DDAE95BB5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:corega:cg-wgr_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE649AB-B089-4054-AEF5-8CF85AE2E7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corega.jp/support/security/20180309_wgr1200.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN15201064/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://corega.jp/support/security/20180309_wgr1200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN15201064/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10854",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2018-03-09T16:29:00.347",
      "lastModified" : "2024-11-21T03:06:38.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Corega CG-WGR1200, con firmware en versiones 2.20 y anteriores, permite que un atacante omita la autenticación y cambie la contraseña de inicio de sesión mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:corega:cg-wgr_1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "BBF44962-443F-458E-9978-35DDAE95BB5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:corega:cg-wgr_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE649AB-B089-4054-AEF5-8CF85AE2E7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corega.jp/support/security/20180309_wgr1200.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN15201064/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://corega.jp/support/security/20180309_wgr1200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN15201064/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17145",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.330",
      "lastModified" : "2024-11-21T03:17:34.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without authentication."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Honor V9 Play con versiones anteriores a Jimmy-AL00AC00B135 tienen una vulnerabilidad de omisión de autenticación debido a un diseño incorrecto de un componente. Un atacante que consiga el smartphone de un usuario puede ejecutar operaciones específicas y eliminar la huella del teléfono sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_v9_play_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "jimmy-al00ac00b135",
            "matchCriteriaId" : "CF744446-5C60-4C66-BE6B-DD108487B46C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_v9_play:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B543AF24-5D59-4A46-AC76-0EFF314E3D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-03-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-03-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17146",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.377",
      "lastModified" : "2024-11-21T03:17:34.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks or remote code execution on the device."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación. Un atacante local autenticado puede manipular archivos XML específicos en los productos afectados y analizar este archivo, lo que resulta en ataques de denegación de servicio (DoS) o en la ejecución remota de código en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v500r002c00",
            "matchCriteriaId" : "EE172360-88CE-4CA5-A6E8-1CC66932E17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17147",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.437",
      "lastModified" : "2024-11-21T03:17:34.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00 tiene una vulnerabilidad de desbordamiento de enteros debido a la falta de validación. Un atacante local autenticado puede manipular archivos XML específicos en los productos afectados y analizar este archivo, lo que resulta en ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v500r002c00",
            "matchCriteriaId" : "EE172360-88CE-4CA5-A6E8-1CC66932E17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17148",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.487",
      "lastModified" : "2024-11-21T03:17:35.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00 tiene una vulnerabilidad de denegación de servicio (DoS) debido a la falta de validación cuando se llama a malloc. Un atacante local autenticado puede manipular archivos XML específicos en los productos afectados y analizar este archivo, lo que resulta en ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v500r002c00",
            "matchCriteriaId" : "EE172360-88CE-4CA5-A6E8-1CC66932E17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17149",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.533",
      "lastModified" : "2024-11-21T03:17:35.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successful exploit of this vulnerability can allow an attacker to change the lock pattern of HiWallet."
      }, {
        "lang" : "es",
        "value" : "La aplicación Huawei HiWallet, en versiones anteriores a la 8.0.4, tiene una vulnerabilidad de cambio arbitrario de patrón de bloqueo. Durante el cambio de bloqueo, necesita verificar el ID de Huawei del usuario. Un atacante con privilegios root que consiga el smartphone de un usuario podría omitir la verificación de ID de Huawei mediante operaciones especiales. La explotación con éxito de esta vulnerabilidad puede permitir que un atacante cambie el patrón de bloqueo de HiWallet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:hiwallet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.4",
            "matchCriteriaId" : "2A6BD482-0923-44CD-AEB3-D987653D0129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-hiwallet-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-hiwallet-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17150",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.597",
      "lastModified" : "2024-11-21T03:17:35.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the parameter. An authenticated local attacker may call a special API with special parameter, which cause an infinite loop. Successful exploit of this vulnerability can allow an attacker to launch DOS attack."
      }, {
        "lang" : "es",
        "value" : "El módulo Timergrp en Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00 y V600R006C00 tiene una vulnerabilidad de denegación de servicio (DoS) debido a la validación insuficiente del parámetro. Un atacante local autenticado podría llamar a una API especial con un parámetro especial, lo que provocaría un bucle infinito. La explotación con éxito de esta vulnerabilidad puede permitir que un atacante inicie un ataque DoS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-vpp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-vpp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17167",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.643",
      "lastModified" : "2024-11-21T03:17:37.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; TP3206 V100R002C00; ViewPoint 9030 V100R011C02; V100R011C03 have a use of a broken or risky cryptographic algorithm vulnerability. The software uses risky cryptographic algorithm in SSL. This is dangerous because a remote unauthenticated attacker could use well-known techniques to break the algorithm. Successful exploit could result in the exposure of sensitive information."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00; TP3206 V100R002C00 y ViewPoint 9030 V100R011C02 y V100R011C03 tienen una vulnerabilidad de uso de algoritmo criptográfico roto o con riesgo. El software emplea un algoritmo criptográfico con riesgo en SSL. Esto es peligroso porque un atacante remoto no autenticado podría emplear técnicas conocidas para romper el algoritmo. La explotación exitosa de esta vulnerabilidad podría resultar en la exposición de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ssl-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103513",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ssl-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17168",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.687",
      "lastModified" : "2024-11-21T03:17:38.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900."
      }, {
        "lang" : "es",
        "value" : "El protocolo CIDAM en algunos productos de Huawei tiene múltiples vulnerabilidades de validación de entrada debido a la validación insuficiente de mensajes específicos cuando se implementa el protocolo. Un atacante remoto autenticado podría enviar un mensaje malicioso a un sistema de destino. La explotación con éxito podría permitir al atacante alterar los negocios y hacer que el sistema sea anormal. Afectados los productos de Huawei son: versiones DP300 V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versiones V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versiones V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; Versiones TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC500, V600R006C00SPC400; TE50 versiones V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; versiones TE60 V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 versión V200R003C20SPC900."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4373F57A-4C2F-40B2-81B8-9D164578E306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50F296-53EF-4471-A262-23B81EF72FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BED9031-7993-40BF-8D64-B13AEA5FED60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5D7E4-A21E-4269-9477-F8073B1D58F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C67B34-5C0C-4937-B9B1-70FDB0E8E871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A695BA-A34B-441A-8426-F323BB240027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F561F8-63C3-49C9-969C-5D6C67102D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17169",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.737",
      "lastModified" : "2024-11-21T03:17:38.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900."
      }, {
        "lang" : "es",
        "value" : "El protocolo CIDAM en algunos productos de Huawei tiene múltiples vulnerabilidades de validación de entrada debido a la validación insuficiente de mensajes específicos cuando se implementa el protocolo. Un atacante remoto autenticado podría enviar un mensaje malicioso a un sistema de destino. La explotación con éxito  podría permitir al atacante alterar los negocios y hacer que el sistema sea anormal. Afectados los productos de Huawei son: versiones DP300 V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versiones V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versiones V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; Versiones TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC500, V600R006C00SPC400; TE50 versiones V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; versiones TE60 V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 versión V200R003C20SPC900"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4373F57A-4C2F-40B2-81B8-9D164578E306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50F296-53EF-4471-A262-23B81EF72FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BED9031-7993-40BF-8D64-B13AEA5FED60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5D7E4-A21E-4269-9477-F8073B1D58F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C67B34-5C0C-4937-B9B1-70FDB0E8E871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A695BA-A34B-441A-8426-F323BB240027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F561F8-63C3-49C9-969C-5D6C67102D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17170",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.813",
      "lastModified" : "2024-11-21T03:17:38.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900."
      }, {
        "lang" : "es",
        "value" : "El protocolo CIDAM en algunos productos de Huawei tiene múltiples vulnerabilidades de validación de entrada debido a la validación insuficiente de mensajes específicos cuando se implementa el protocolo. Un atacante remoto autenticado podría enviar un mensaje malicioso a un sistema de destino. La explotación con éxito podría permitir al atacante alterar los negocios y hacer que el sistema sea anormal. Afectados los productos de Huawei son: versiones DP300 V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versiones V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versiones V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; Versiones TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC500, V600R006C00SPC400; TE50 versiones V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; versiones TE60 V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 versión V200R003C20SPC900."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4373F57A-4C2F-40B2-81B8-9D164578E306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50F296-53EF-4471-A262-23B81EF72FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BED9031-7993-40BF-8D64-B13AEA5FED60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5D7E4-A21E-4269-9477-F8073B1D58F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C67B34-5C0C-4937-B9B1-70FDB0E8E871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A695BA-A34B-441A-8426-F323BB240027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F561F8-63C3-49C9-969C-5D6C67102D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17199",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.877",
      "lastModified" : "2024-11-21T03:17:40.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00 y V600R006C000 tienen una vulnerabilidad de lectura fuera de límites debido al procesamiento incorrecto de mensajes H323 mal formados. Un atacante remoto que controle un servidor podría explotar esta vulnerabilidad enviando mensajes de respuesta H323 mal formados a un dispositivo objetivo. Un exploit con éxito podría hacer que el dispositivo lea fuera de límites y, probablemente, hacer que un servicio no esté disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17200",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:00.937",
      "lastModified" : "2024-11-21T03:17:40.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00 y V600R006C000 tienen una vulnerabilidad de lectura fuera de límites debido al procesamiento incorrecto de mensajes H323 mal formados. Un atacante remoto que controle un servidor podría explotar esta vulnerabilidad enviando mensajes de respuesta H323 mal formados a un dispositivo objetivo. Un exploit con éxito podría hacer que el dispositivo lea fuera de límites y, probablemente, hacer que un servicio no esté disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17216",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.000",
      "lastModified" : "2024-11-21T03:17:40.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may cause process reboot."
      }, {
        "lang" : "es",
        "value" : "El protocolo MGCP (Media Gateway Control Protocol) en Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00 y V600R006C00 tiene una vulnerabilidad de lectura fuera de límites. Un atacante remoto no autenticado puede manipular paquetes mal formados con un parámetro específico en los productos afectados. Dada la validación insuficiente de los paquetes, una explotación exitosa podría hacer que el proceso se reinicie."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17217",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.063",
      "lastModified" : "2024-11-21T03:17:40.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds write vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service."
      }, {
        "lang" : "es",
        "value" : "El protocolo MGCP (Media Gateway Control Protocol) en Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00 y V600R006C00 tiene una vulnerabilidad de escritura fuera de límites. Un atacante remoto no autenticado puede manipular paquetes mal formados con un parámetro específico en los productos afectados. Dada la validación insuficiente de los paquetes, una explotación exitosa podría tener un impacto sobre la disponibilidad del servicio del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17218",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.110",
      "lastModified" : "2024-11-21T03:17:41.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service."
      }, {
        "lang" : "es",
        "value" : "El módulo SCCPX en Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de lectura fuera de límites. Un atacante remoto no autenticado puede manipular paquetes mal formados con un parámetro específico en los productos afectados. Dada la validación insuficiente de los paquetes, una explotación exitosa podría tener un impacto sobre la disponibilidad del servicio del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17219",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.157",
      "lastModified" : "2024-11-21T03:17:41.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service."
      }, {
        "lang" : "es",
        "value" : "El módulo SCCPX en Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de acceso inválido a la memoria. Un atacante remoto no autenticado puede manipular paquetes mal formados con un parámetro específico en los productos afectados. Dada la validación insuficiente de los paquetes, una explotación exitosa podría tener un impacto sobre la disponibilidad del servicio del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17220",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.203",
      "lastModified" : "2024-11-21T03:17:41.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service."
      }, {
        "lang" : "es",
        "value" : "El módulo SCCPX en Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de acceso inválido a la memoria. Un atacante remoto no autenticado puede manipular paquetes mal formados con un parámetro específico en los productos afectados. Dada la validación insuficiente de los paquetes, una explotación exitosa podría tener un impacto sobre la disponibilidad del servicio del producto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17221",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.250",
      "lastModified" : "2024-11-21T03:17:41.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "La función Import Signal Tone en Huawei eSpace 7950 V200R003C30 y eSpace 8950 V200R003C00 y V200R003C30 tiene una vulnerabilidad de ejecución remota de código. Un atacante remoto autenticado puede manipular y enviar los paquetes a los productos afectados una vez se haya subido el Signal Tone. Dada la verificación insuficiente de los paquetes, esto podría explotarse para ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4523A712-FF77-4BDA-B213-0AE2BDC4152C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185783AE-3135-471E-8D55-4BAB3A187F21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_8950_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72548F60-D6B8-4498-8668-9074A706C3A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_8950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0B1E39-ACEB-44FB-BDDE-F3856CF6137A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_8950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BFC4FD-DC7A-47E9-BC06-86F11E2211AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17222",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.283",
      "lastModified" : "2024-11-21T03:17:41.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "La función Import Language Package en Huawei eSpace 7950 V200R003C30 y eSpace 8950 V200R003C00 y V200R003C30 tiene una vulnerabilidad de ejecución remota de código. Un atacante remoto autenticado puede manipular y enviar los paquetes a los productos afectados una vez se haya subido el Language Package. Dada la verificación insuficiente de los paquetes, esto podría explotarse para ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4523A712-FF77-4BDA-B213-0AE2BDC4152C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185783AE-3135-471E-8D55-4BAB3A187F21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_8950_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72548F60-D6B8-4498-8668-9074A706C3A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_8950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0B1E39-ACEB-44FB-BDDE-F3856CF6137A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_8950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BFC4FD-DC7A-47E9-BC06-86F11E2211AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17223",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.347",
      "lastModified" : "2024-11-21T03:17:41.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash."
      }, {
        "lang" : "es",
        "value" : "Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30 y eSpace 8950 V200R003C00 y V200R003C30 tienen una vulnerabilidad de salto de directorio. Un atacante remoto autenticado podría manipular un archivo URL específicas en los productos afectados. Dada la validación insuficiente de la URL, un exploit con éxito cargará y descargará archivos y provocará un filtrado de información y el cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_7910_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD48657-22D4-4CAD-88DB-F60A2964CABF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_7910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC59BBCD-9CBC-4D16-AB67-5C28FE9CFAF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4523A712-FF77-4BDA-B213-0AE2BDC4152C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185783AE-3135-471E-8D55-4BAB3A187F21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_8950_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72548F60-D6B8-4498-8668-9074A706C3A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_8950_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0B1E39-ACEB-44FB-BDDE-F3856CF6137A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_8950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BFC4FD-DC7A-47E9-BC06-86F11E2211AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17225",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.407",
      "lastModified" : "2024-11-21T03:17:41.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobile phone. Successful exploit could lead to system restart or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El módulo NFC (Near Field Communication) en los smartphones Huawei Mate 9 Pro con versiones anteriores a LON-AL00B 8.0.0.340a(C00) tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de entradas. Un atacante podría emplear un lector de tarjetas NFC u otro dispositivo para inyectar datos maliciosos en un teléfono móvil objetivo. La explotación con éxito de esta vulnerabilidad podría desembocar en el reinicio del sistema o en la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.340a\\(c00\\)",
            "matchCriteriaId" : "2F28C13F-A296-43E1-8361-733C3BF4DAB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180130-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180130-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17226",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.453",
      "lastModified" : "2024-11-21T03:17:41.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vulnerability due to insufficient input validation and improper configuration. An attacker may exploit this vulnerability to invoke TripAdvisor to load a specific URL and execute malicious code contained in the URL."
      }, {
        "lang" : "es",
        "value" : "La aplicación TripAdvisor, en versiones anteriores a la TAMobileApp-24.6.4 preinstalada en algunos móviles Huawei, tiene una vulnerabilidad de carga arbitraria de URL debido a una validación de entradas insuficiente y a la configuración incorrecta. Un atacante podría explotar esta vulnerabilidad para hacer que TripAdvisor cargue una URL en concreto y ejecute código malicioso contenido en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tripadvisor:tamobileapp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.6.4",
            "matchCriteriaId" : "85E13E84-C4FF-4BD9-9B4A-0B4A69C8F5E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180130-01-tripadvisor-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180130-01-tripadvisor-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17227",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.500",
      "lastModified" : "2024-11-21T03:17:42.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652) has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can call the driver with special parameter and cause accessing out-of-bounds memory. Successful exploit may result in phone crash or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador de la GPU en smartphones Huawei Mate 10, en versiones anteriores a la ALP-L09 8.0.0.120(C212); ALP-L09 8.0.0.127(C900) y ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652) tiene una vulnerabilidad de acceso a la memoria fuera de límites debido a la validación de parámetros de entrada. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone que pueda llamar al controlador con un parámetro especial y provocar un acceso a la memoria fuera de límites. La explotación con éxito de esta vulnerabilidad podría desembocar en el cierre inesperado del teléfono o en la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.120\\(c212\\)",
            "matchCriteriaId" : "F9C32EE8-78A0-4766-8DCC-4D2EDAFF1751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.127\\(c900\\)",
            "matchCriteriaId" : "76397448-23A4-4182-ADE1-A537ABE5AFC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.128\\(402\\)",
            "matchCriteriaId" : "8253F411-9C04-471A-BBFB-CA05FE351B17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.128\\(c02\\)",
            "matchCriteriaId" : "522E227F-F78E-48A8-B397-3E90405906F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.128\\(c109\\)",
            "matchCriteriaId" : "83D5D1AB-85A9-4370-8264-202E3C95705F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.128\\(c346\\)",
            "matchCriteriaId" : "9B240EC7-A97B-4483-BCA9-3C795544095B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.128\\(c432\\)",
            "matchCriteriaId" : "EC12F50A-34FE-4A5F-9254-42913E936F66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "alp-l09_8.0.0.128\\(c652\\)",
            "matchCriteriaId" : "8F07C467-F3E2-442D-B559-525D3652AE40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394490F2-5E47-4A28-A71C-075DBBA34C9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17250",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.547",
      "lastModified" : "2024-11-21T03:17:42.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V200R005C32; V200R007C00; AR510 V200R005C32; NetEngine16EX V200R005C32; SRG1300 V200R005C32; SRG2300 V200R005C32; SRG3300 V200R005C32 have an out-of-bounds write vulnerability. When a user executes a query command after the device received an abnormal OSPF message, the software writes data past the end of the intended buffer due to the insufficient verification of the input data. An unauthenticated, remote attacker could exploit this vulnerability by sending abnormal OSPF messages to the device. A successful exploit could cause the system to crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V200R005C32; V200R007C00; AR510 V200R005C32; NetEngine16EX V200R005C32; SRG1300 V200R005C32; SRG2300 V200R005C32; SRG3300 V200R005C32 tienen una vulnerabilidad de escritura fuera de límites. Cuando un usuario ejecuta un comando de consulta cuando un dispositivo recibe un mensaje OSPF fuera de lo normal, el software escribe datos más allá del final del búfer planeado debido a la verificación insuficiente de los datos de entrada. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando mensajes OSPF anormales al dispositivo. Una explotación exitosa podría hacer que el dispositivo se cierre inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81E2517-263C-4B59-9D28-A3DE98289B24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4045CC4E-3B44-4E32-A04F-39C8572921B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7D76DA-E30F-4071-807B-DED30596CD45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A3CE39-6AC0-45E4-94B0-535AA92DAAF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABEF8DE-D6CA-45DD-B10E-C3FFB5B82FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A87025-03BE-4671-9687-85510E9AE4C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325B983-F920-4006-8F3B-738B1B4EBEAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01485D20-8F48-4D48-9242-95CD59069023"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272E6F06-9FAF-421B-8E87-7F1F1705B598"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA6C55E-DF1F-475D-B1E9-C09CF8278276"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D96DF6-070E-44A1-837C-8690859960B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1D26AA-09DF-49DA-930F-A2EAEA486361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E364889D-CDEE-4D8C-82E5-6D5BC3DD768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40745A01-E5AC-4207-A34F-D8E7F7231F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D01E86-0F60-4A99-8E48-15B0B0BF3678"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25185C6-3F8D-4D86-84D9-4D81A3DF5632"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E586B837-E86A-4B3E-8701-3C92123F9FED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180214-01-ospf-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180214-01-ospf-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17279",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.610",
      "lastModified" : "2024-11-21T03:17:44.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343(C00) has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker bypass the authentication, the attacker can control the phone to sent short messages and make call within audio range to the phone."
      }, {
        "lang" : "es",
        "value" : "El módulo soundtrigger en los smartphones Huawei Mate 9 Pro, con software en versiones anteriores a la LON-AL00B 8.0.0.343(C00), tiene una vulnerabilidad de omisión de autenticación debido al diseño incorrecto del módulo. Un atacante engaña a un usuario para que instale una aplicación maliciosa, que puede explotar la vulnerabilidad y hacer que el atacante omita la autenticación, controle el teléfono para enviar mensajes cortos y hacer llamadas en el rango de audio al teléfono."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.343\\(c00\\)",
            "matchCriteriaId" : "5639F635-C643-4140-9471-08E49DE282BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103360",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17280",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.657",
      "lastModified" : "2024-11-21T03:17:44.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some information leak."
      }, {
        "lang" : "es",
        "value" : "El módulo NFC (Near Field Communication) en teléfonos móviles Huawei, con software LON-AL00BC00, tiene una vulnerabilidad de filtrado de información. El atacante debe engañar a un usuario para que realice ciertas operaciones y, a continuación, manipule el mensaje NFC para explotar esta vulnerabilidad. Su explotación con éxito podría provocar un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:lon-al00b_firmware:lon-al00bc00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E8D752-75F0-4D25-BD3A-1A0D521B360B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:lon-al00b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2919FA-046B-49BC-9DDA-2BB499D33DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-phone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-phone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17281",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.703",
      "lastModified" : "2024-11-21T03:17:44.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. A remote, authenticated attacker could exploit this vulnerability by sending specially crafted messages to a target device. Successful exploit may cause some information leak."
      }, {
        "lang" : "es",
        "value" : "El módulo SFTP en Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00 y V600R006C00 tiene una vulnerabilidad de lectura fuera de límites. Un atacante remoto autenticado podría explotar esta vulnerabilidad enviando mensajes especialmente manipulados a un dispositivo objetivo. Un exploit con éxito podría provocar un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17303",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.750",
      "lastModified" : "2024-11-21T03:17:47.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200 y V600R006C00SPC300 emplean el protocolo CIDAM que contiene información sensible en el mensaje cuando se implementa. Por lo tanto, estos productos tienen una vulnerabilidad de divulgación de información. Un atacante remoto autenticado podría rastrear y obtener el mensaje de un sistema objetivo. Si se explota con éxito esta vulnerabilidad, el atacante podría obtener la información y provocar una divulgación de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4373F57A-4C2F-40B2-81B8-9D164578E306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50F296-53EF-4471-A262-23B81EF72FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BED9031-7993-40BF-8D64-B13AEA5FED60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5D7E4-A21E-4269-9477-F8073B1D58F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C67B34-5C0C-4937-B9B1-70FDB0E8E871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A695BA-A34B-441A-8426-F323BB240027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F561F8-63C3-49C9-969C-5D6C67102D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A71A4-EA55-406A-AA4E-8440D1308469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDE6312-7A5D-44C1-B2AA-1AD3E9750690"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBEE4A4-0D51-4845-83DD-EE326F227150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B125233A-3A7D-41E9-826C-BC7A5DA8A93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E656A39-4954-442B-83C2-587B78702C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc700b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E5060-F247-4B4F-86C4-D72F54287905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB3DB2-810A-4FB2-BE52-9694824F90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA29F7B-86A4-4D58-B868-33CB70337A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AFB31-BF50-4AAA-AD42-309C86C0A9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E11E0F5-C34B-4745-B6F0-8DF3522FA15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D02AA-1B42-4B4E-BB7B-0B063DE5F2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E5A0D4-E459-4230-94DB-E94946425071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E53273-FD34-4209-B912-9E07FA649395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913406CC-E280-47EA-985E-8BB06ABD7B9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C8433-FEA5-4784-8C0A-174C677AD50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F48D7B-BAAB-46F8-A428-5EC68EC34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D177F9-8A65-4E1F-9576-D03171336510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38671934-B566-4A73-9C97-C0236D4EEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF59A18A-7FDD-4AF9-B0B4-A0894A1E4E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87C31D7-9A1C-45A3-8846-E2DF20844267"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382868EB-07B6-448B-AF15-8C66046C9422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75CBAE-59AC-4290-989E-8897B7FFE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71366A4-11F7-42F6-A1C7-A3D3E38E0ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24C343C-1500-4016-97AB-D4C891AB6877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0093FC5-3660-44A3-9B97-792B19F6A949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E8481F-CFE3-47F3-8D12-52B7D2D32BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50290E7-8B75-45DE-A4DF-EAAFC5844A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C3A8D6-39E4-4C40-932C-39E26E8826F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91AB1862-D21B-4A07-8CF8-1848B80E243D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D231513A-8123-4A0B-8F8A-0B5DE1B7FB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BC10B7-3C89-4058-84C8-2F10EE429C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED99B82F-91B6-48B8-8986-83AA59945371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0781EC-F6CC-470D-BCC2-24467DE446BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FC64F2-A0A9-4BE9-AEF2-87E421E1C82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DC1189-21E1-464E-BD60-88DE64B1F592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10b019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDF19B7-B16F-4085-96F2-53E795577DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2630F664-C5D1-4E38-9ABC-C5EEC0E61B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7B30D7-FD50-495D-B56D-BE29C6D42831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AF9B11-C3EE-482C-AD20-7482C87EDEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2027FA-F73C-4769-9404-F6CFF8F36120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc800b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F3A5B4-1098-4174-B1F5-3B6CB08BAF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC7E5EE-0F99-4089-ABF8-709D15AA4B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953A196D-144D-4AAB-81C3-95A4F91C4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B806DC8A-0829-4FF9-88A4-F4299FE031F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD64645-CD8A-4FE3-9C28-E6001F210F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06047C06-B5D8-4495-A5E8-03FBC65AE2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38CC7A1-D039-41BB-A795-95F5B877B9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18152B19-FD04-4983-B18A-0E362E8158F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592AC67D-2210-46A4-9BB2-DA04C67E171B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE6C6E-BDF3-4841-9836-4C81A41F2129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F0893C-8D47-43D7-A69B-E16F77E0F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA427C8-B75F-4C98-BCBF-5588409CDD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305174D3-15DE-4BAC-8AA6-699E487DDA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spcd00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3751B91-F430-463D-832F-63C1D95A4DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00spce00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1805FB0-0A97-4525-B065-251C453E00FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908B4607-CBF3-4CFE-B6D7-EAA6E8262B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040454F6-FCDB-4320-8933-8F7DBB9956ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F3BB83-7F0A-4C59-B889-7EF95BD581BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17304",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.813",
      "lastModified" : "2024-11-21T03:17:47.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900."
      }, {
        "lang" : "es",
        "value" : "El protocolo CIDAM en algunos productos de Huawei tiene múltiples vulnerabilidades de validación de entrada debido a la validación insuficiente de mensajes específicos cuando se implementa el protocolo. Un atacante remoto autenticado podría enviar un mensaje malicioso a un sistema de destino. La explotación con éxito podría permitir al atacante alterar los negocios y hacer que el sistema sea anormal. Afectados los productos de Huawei son: versiones DP300 V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versiones V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versiones V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; Versiones TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC500, V600R006C00SPC400; TE50 versiones V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; versiones TE60 V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 versión V200R003C20SPC900."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4373F57A-4C2F-40B2-81B8-9D164578E306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB50F296-53EF-4471-A262-23B81EF72FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BED9031-7993-40BF-8D64-B13AEA5FED60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5D7E4-A21E-4269-9477-F8073B1D58F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C67B34-5C0C-4937-B9B1-70FDB0E8E871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A695BA-A34B-441A-8426-F323BB240027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F561F8-63C3-49C9-969C-5D6C67102D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5C3DCE-2DCD-4CF4-BD3C-2BEBB32E2EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89172AA-DEE1-4213-A6A4-4AC438ED6B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B282E-BC42-406F-B139-B783B71819FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA511BD-4174-4040-8805-9BEF0A1EEFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70EEFED5-98BE-4F19-852F-0BB69530B8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578B2AA4-BA2F-41A3-B30C-9E94F23ED062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE78FCC-B1AB-403E-92C8-36825D566829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5308396A-9F09-40D8-BCD8-9E592D2D851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3B3E9-47AA-4BFA-A114-13FB1469B02A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17321",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.877",
      "lastModified" : "2024-11-21T03:17:49.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability. Due to the improper validation of specific command line parameter, a local attacker could exploit this vulnerability to cause the software process abnormal."
      }, {
        "lang" : "es",
        "value" : "El software Huawei eNSP, en versiones anteriores a V100R002C00B510, tiene una vulnerabilidad de desbordamiento de búfer. Debido a la validación incorrecta de un parámetro específico de la línea de comandos, un atacante local podría explotar esta vulnerabilidad para provocar que el proceso del software funcione de manera errónea."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ensp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v100r002c00b510",
            "matchCriteriaId" : "9C19AF1E-9761-45F5-8683-D27834A05264"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ensp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973864DA-E85C-4D7A-A554-0CBF8D0819C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ensp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103425",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ensp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17322",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.923",
      "lastModified" : "2024-11-21T03:17:50.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information disclosure."
      }, {
        "lang" : "es",
        "value" : "La aplicación Huawei Honor Smart Scale 1.1.1 tiene una vulnerabilidad de divulgación de información. La aplicación no restringe lo suficiente el recurso al que se puede acceder por medio de cierto protocolo. Un atacante podría engañar al usuario para que haga clic en un enlace malicioso, por lo que la explotación exitosa de esta vulnerabilidad podría provocar una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_smart_scale_application_firmware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723021AF-AE1F-4487-B822-4C738AA17E1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_smart_scale_application:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F963FFC3-0533-4892-85E9-EC0EE959B42C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103442",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17323",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:01.987",
      "lastModified" : "2024-11-21T03:17:50.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure."
      }, {
        "lang" : "es",
        "value" : "Huawei iBMC V200R002C10; V200R002C20 y V200R002C30 tiene una vulnerabilidad de autorización incorrecta. El software realiza de manera errónea una comprobación de autorización cuando un usuario normal intenta acceder a cierta información a la que se supone que solo pueden acceder los usuarios admin. La explotación con éxito podría resultar en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ibmc_firmware:v200r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99103586-1B75-414F-836B-BEFB99F0E2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ibmc_firmware:v200r002c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D45CCA3-AF5E-4176-881D-3DFFC7EF7138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ibmc_firmware:v200r002c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7A4CF-20AF-4A2B-8B83-0FF661479F5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ibmc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D24EE92-DD14-4263-9E90-A6546F7603BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17324",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.047",
      "lastModified" : "2024-11-21T03:17:50.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Mate 9 Pro con software LON-AL00BC00B139D y LON-AL00BC00B229 tienen una vulnerabilidad de desbordamiento de enteros. El controlador de la cámara no valida los parámetros de entradas externas y provoca un desbordamiento de enteros, que tras el posprocesado resulta en un desbordamiento de búfer. Un atacante engaña al usuario para que instale una aplicación maliciosa, por lo que la explotación exitosa de esta vulnerabilidad podría provocar la ejecución de código malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:lon-al00bc00b139d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B7E8D3-3C62-48C4-B0C8-F8039B38C87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:lon-al00bc00b229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E6F318-3844-4A3A-8CCE-BC015974C3B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17325",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.080",
      "lastModified" : "2024-11-21T03:17:50.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability. Due to improper verification of specific interface, an attacker who is on the same network with the user can obtain some information through a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones de vídeo de Huawei HiCinema, con versiones de software 8.0.3.308 y 8.0.4.300, tienen una vulnerabilidad de control de permisos. Debido a la verificación indebida de una interfaz específica, un atacante que esté en la misma red que el usuario podría obtener información mediante un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hicinema:8.0.3.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C646C0-CC55-4E33-AFA2-797180AA87C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hicinema:8.0.4.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7876F-7C87-4091-921A-8E1FCE65723A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hicinema:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6433F5-D90B-4476-BCBF-D119B10C8F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-hicinema-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-hicinema-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17326",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.143",
      "lastModified" : "2024-11-21T03:17:50.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of activation lock. Successful exploit could allow an attacker to bypass the activation lock and activate the smartphone by a new account after a series of operation."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Mate 9 Pro con software LON-AL00BC00B139D y LON-AL00BC00B229 tienen una vulnerabilidad de omisión de bloqueo de activación. Se supone que el smartphone debe ser activado por la cuenta anterior tras el restablecimiento si la función find my phone está activada. El software no cuenta con suficiente protección del bloqueo de activación. La explotación con éxito de esta vulnerabilidad podría permitir que un atacante omita el bloqueo de activación y active el smartphone con una nueva cuenta tras una serie de operaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_fimware:lon-al00bc00b139d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71521F8F-079D-4148-B00A-F85395D8970F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_fimware:lon-al00bc00b229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1FB6DDC-D992-403A-B27E-FBB8431D5115"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17327",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.190",
      "lastModified" : "2024-11-21T03:17:50.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause certain service unavailable."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software MHA-AL00AC00B125 tienen una vulnerabilidad de gestión incorrecta de recursos. El software no gestiona adecuadamente el recurso al realizar operaciones de registro de dispositivo. Un atacante engaña al usuario con privilegios root para que instale una aplicación maliciosa, por lo que la explotación exitosa de esta vulnerabilidad podría provocar que ciertos servicios no estén disponibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mha-al00a_firmware:mha-al00ac00b125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6E9E44-6FFA-481E-8CDE-E8F13A7D6D37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mha-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987F6D9F-B6FB-4A78-A4A1-9B37424D73A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17328",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.220",
      "lastModified" : "2024-11-21T03:17:50.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei con software MHA-AL00AC00B125 tienen una vulnerabilidad de desbordamiento de enteros. El software no procesa ciertas variables correctamente cuando gestiona cierto proceso. Un atacante engaña al usuario con privilegios root para que instale una aplicación maliciosa, por lo que la explotación exitosa de esta vulnerabilidad podría provocar una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mha-al00a_firmware:mha-al00ac00b125:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6E9E44-6FFA-481E-8CDE-E8F13A7D6D37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mha-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987F6D9F-B6FB-4A78-A4A1-9B37424D73A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17329",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.283",
      "lastModified" : "2024-11-21T03:17:50.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML Schema data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory."
      }, {
        "lang" : "es",
        "value" : "Huawei ViewPoint 8660 V100R008C03 tiene una vulnerabilidad de filtrado de memoria. El software no libera la memoria asignada correctamente al analizar los datos XML Schema. Un atacante autenticado podría subir un archivo XML manipulado, por lo que la explotación exitosa de esta vulnerabilidad podría provocar que los servicios del sistema funcionen de manera incorrecta, ya que se quedarían sin memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-03-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-03-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17330",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T17:29:02.330",
      "lastModified" : "2024-11-21T03:17:51.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory."
      }, {
        "lang" : "es",
        "value" : "Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20 y V500R002C00 tienen una vulnerabilidad de filtrado de memoria. El software no libera la memoria asignada correctamente al analizar los datos de elementos XML. Un atacante autenticado podría subir un archivo XML manipulado, por lo que la explotación exitosa de esta vulnerabilidad podría provocar que los servicios del sistema funcionen de manera incorrecta, ya que se quedarían sin memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15314",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T21:29:00.470",
      "lastModified" : "2024-11-21T03:14:26.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability due to memory don't be released when the XML parser process some node fail. An attacker could exploit it to cause memory leak, which may further lead to system exceptions."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de fuga de memoria debido a que la memoria no se libera cuando el analizador XML fracasa a la hora de procesar algunos nodos. Un atacante podría aprovecharse de esto para provocar una fuga de memoria, lo que podría conducir a excepciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC535D5-0C05-4695-976F-ACF447431A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBEE4A4-0D51-4845-83DD-EE326F227150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B125233A-3A7D-41E9-826C-BC7A5DA8A93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E656A39-4954-442B-83C2-587B78702C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9291F7F-E159-475A-8DC8-B8EFFF42170F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB3DB2-810A-4FB2-BE52-9694824F90F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA29F7B-86A4-4D58-B868-33CB70337A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509AFB31-BF50-4AAA-AD42-309C86C0A9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E11E0F5-C34B-4745-B6F0-8DF3522FA15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D02AA-1B42-4B4E-BB7B-0B063DE5F2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E5A0D4-E459-4230-94DB-E94946425071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C8433-FEA5-4784-8C0A-174C677AD50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F48D7B-BAAB-46F8-A428-5EC68EC34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spc900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D177F9-8A65-4E1F-9576-D03171336510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38671934-B566-4A73-9C97-C0236D4EEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382868EB-07B6-448B-AF15-8C66046C9422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spc700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F75CBAE-59AC-4290-989E-8897B7FFE389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71366A4-11F7-42F6-A1C7-A3D3E38E0ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-xml-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-xml-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15315",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T21:29:00.517",
      "lastModified" : "2024-11-21T03:14:26.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200 has a memory leak vulnerability. An authenticated attacker could execute special commands many times, the memory leaking happened, which would cause the device to reset finally."
      }, {
        "lang" : "es",
        "value" : "El módulo patch en Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100 y V500R001C20SPC200 tienen una vulnerabilidad de filtrado de memoria. Un atacante autenticado podría ejecutar comandos especiales en numerosas ocasiones, por lo que ocurriría un filtrado de memoria y, finalmente, el dispositivo se reiniciaría"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC85C8-F102-4E5F-BAD3-9658D87CE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3921D5-81A0-4700-A302-7F4C276D4ABE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9038E75D-50F4-4849-BD2C-8846A353B53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0545D687-6670-41B4-A1B1-1048879658B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE3431-EBFA-4C4A-97B1-6384869FD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F11B551-9147-4DCA-8FEF-0874EEB83984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7BA85B-9D77-44C2-B91D-5C8FC20B25A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED44F95-064A-4E85-A030-B15E88FBEAB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15323",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T21:29:00.567",
      "lastModified" : "2024-11-21T03:14:27.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R001C01, V100R001C10, V100R003C00, V500R002C00, V600R006C00, TP3106 V100R001C06, V100R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eCNS210_TD V100R004C10, eSpace U1981 V200R003C30 have a DoS vulnerability caused by memory exhaustion in some Huawei products. For lacking of adequate input validation, attackers can craft and send some malformed messages to the target device to exhaust the memory of the device and cause a Denial of Service (DoS)."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R001C01, V100R001C10, V100R003C00, V500R002C00, V600R006C00, TP3106 V100R001C06, V100R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eCNS210_TD V100R004C10 y eSpace U1981 V200R003C30 tienen una vulnerabilidad de denegación de servicio (DoS) provocada por el agotamiento de memoria en algunos productos Huawei. Dada la falta de validación de entradas adecuada, los atacantes pueden manipular y enviar mensajes mal formados al dispositivo objetivo para agotar su memoria y provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13F79BF-2919-45A3-9AB0-9D501DDA94B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r001c06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AFC9C8-548B-4A63-BE1D-98685E353434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ABAEF6-DC14-4C11-A570-44C23705933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF9499-2D42-49A2-BBC8-54472DEEB95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C6245A-D192-4D02-BB4E-285ABD2BB328"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ecns210_td:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FCDC81-B742-4D42-BD52-52BBDDDD4BE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17282",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-09T21:29:00.627",
      "lastModified" : "2024-11-21T03:17:44.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo SCCP (Signalling Connection Control Part) en Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante debe averiguar la forma de enviar repetidamente paquetes mal formados a los productos afectados. Dada la validación de entradas insuficiente, un exploit con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-10T22:29:00.210",
      "lastModified" : "2024-11-21T03:19:36.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access."
      }, {
        "lang" : "es",
        "value" : "BMC Remedy AR System, en versiones anteriores a la 9.1 SP3, cuando Remedy AR Authentication está habilitado, permite que los atacantes obtengan acceso administrativo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:remedy_action_request_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.03",
            "matchCriteriaId" : "8E0058F4-0AD8-4DA7-B022-73DDDBCC61E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://communities.bmc.com/thread/165887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://communities.bmc.com/thread/165887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-12T03:29:00.260",
      "lastModified" : "2024-11-21T03:19:36.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service (BUG) by modifying a certain e_cpos field."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, en versiones anteriores a la 4.15, fs/ocfs2/aops.c omite el uso de un semáforo y, por consiguiente, tiene una condición de carrera al acceder al árbol extent durante las operaciones de lectura en modo DIRECT. Esto permite que usuarios locales provoquen una denegación de servicio (bug) modificando cierto campo e_cpos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.15",
            "matchCriteriaId" : "A4344060-7D43-4A74-A2EF-DE9A6F8457A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3e4c56d41eef5595035872a2ec5a483f42e8917f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103353",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3e4c56d41eef5595035872a2ec5a483f42e8917f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3e4c56d41eef5595035872a2ec5a483f42e8917f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3e4c56d41eef5595035872a2ec5a483f42e8917f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-12T04:29:00.227",
      "lastModified" : "2024-11-21T03:19:36.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber account, which might allow local users to gain privileges by leveraging access to this account and then waiting for root to execute one of these programs."
      }, {
        "lang" : "es",
        "value" : "El paquete net-im/jabberd2 de Gentoo, hasta la versión 2.6.1, instala jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s y jabberd2-sm en /usr/bin, propiedad de la cuenta jabber. Esto podría permitir que usuarios locales obtengan privilegios aprovechando el acceso a esta cuenta y esperando a que root ejecute uno de estos programas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberd2:jabberd2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "11AA2845-2976-43B9-B64A-1D8F93A58E5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92121D8A-529E-454A-BC8D-B6E0017E615D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/629412",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/629412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-12T04:29:00.273",
      "lastModified" : "2024-11-21T03:19:37.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a \"kill -TERM `cat /var/run/jabber/filename.pid`\" command."
      }, {
        "lang" : "es",
        "value" : "El paquete net-im/jabberd2 de Gentoo, hasta la versión 2.6.1, establece la propiedad de /var/run/jabber en la cuenta jabber, lo que podría permitir que usuarios locales finalicen procesos arbitrarios aprovechando el acceso a esta cuenta para modificar archivos PID antes de que un script root ejecute un comando \"kill -TERM `cat /var/run/jabber/filename.pid`\""
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberd2:jabberd2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "11AA2845-2976-43B9-B64A-1D8F93A58E5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92121D8A-529E-454A-BC8D-B6E0017E615D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/631068",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/631068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-12T04:29:00.307",
      "lastModified" : "2024-11-21T03:19:37.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature."
      }, {
        "lang" : "es",
        "value" : "TitanHQ WebTitan Gateway tiene una validación incorrecta de certificados para la característica de interceptación TLS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:titanhq:webtitan_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633746B7-D76B-40E8-89DC-5DEE612CDA19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dx.doi.org/10.14722/ndss.2017.23456",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://jhalderm.com/pub/papers/interception-ndss17.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/security-impact-https-interception/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "http://dx.doi.org/10.14722/ndss.2017.23456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://jhalderm.com/pub/papers/interception-ndss17.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/security-impact-https-interception/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15719",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-03-12T13:29:00.273",
      "lastModified" : "2024-11-21T03:15:04.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor."
      }, {
        "lang" : "es",
        "value" : "En Wicket jQuery UI, en versiones 6.28.0 y anteriores, 7.9.1 y anteriores y 8.0.0-M8 y anteriores, se ha descubierto un problema de seguridad en el editor WYSIWYG que permite que un atacante envíe código JS arbitrario a ese editor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.28.0",
            "matchCriteriaId" : "5578A395-9103-421A-8917-8BFC086226A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9D57EDC2-BA93-4648-8822-93F59B5E6F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "3749CF94-44FA-4888-9BA4-FE4CCE53C7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "33FC7B1E-DAC4-4D75-BBA7-187E407E4D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "79DF88C0-876D-4A74-8CD3-985829BFDF87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A255DCF-54BB-427B-A1BB-34E1C9F8B9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC56B169-1AE2-4299-917F-09C10B8A0475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8558735-6681-4006-81BD-EA84CA0674A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A06597-626C-4ADE-9076-CB9A549A00A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164E6E05-3A09-464F-A8B7-E7ECB5AA7613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AD5019-19AD-436D-B782-EC1C28EDCEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BBEA8C-7D41-4DBA-9C39-CBA8F653AAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73382927-679D-4D27-9EBC-43CC23E70F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396F6C9A-E45D-40B6-984F-B0EDA16C81EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8E28CE-EF56-4AD0-816E-0808B606424A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF14C6DE-A41A-4E43-971A-56F16E211013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA6EAC1-9445-4DBF-850E-A1F82F9C680E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6979F466-DBA1-46D8-A2D2-07FD46CA7551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F247AD-8C4E-45FA-8566-4AF4F79BE7E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F77014BE-833B-4927-87AB-337F18F2FAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B81CA3E0-CBCE-4E00-9595-1F00B467E6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "222E321F-DCB5-438F-974A-7D55066F4F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "89217C79-B140-45CB-947A-FC1979735D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "C58BF87E-49A1-48D8-82AB-3406AC0BEC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAF829A-1DB7-43B6-8DCB-5C6202240D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA1D57-5440-481B-AA73-FC5E78C9DD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4.1:*:*:*:*:*:*",
            "matchCriteriaId" : "C82DD8B2-EDCE-49D1-A72D-C89EAEBA606F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA8F3BD-67C7-4552-8829-65F026D01A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "A11606C1-4C50-4D39-BA99-D97B7B8862F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "37528AC9-D2A7-4984-BA13-4657F476FABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "44CB866A-45AC-4D4C-8B27-7B8415F14BDE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.1",
            "matchCriteriaId" : "BEF681E0-D8CB-4B6E-AE66-AC2E0439D37E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openmeetings.apache.org/security.html#_toc_cve-2017-15719_-_wicket_jquery_ui_xss_in_wysiwyg_e",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebfz1/wicket-jquery-ui/wiki#cve-2017-15719---xss-in-wysiwyg-editor",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openmeetings.apache.org/security.html#_toc_cve-2017-15719_-_wicket_jquery_ui_xss_in_wysiwyg_e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebfz1/wicket-jquery-ui/wiki#cve-2017-15719---xss-in-wysiwyg-editor",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6281",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-12T13:29:00.337",
      "lastModified" : "2024-11-21T03:29:26.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N/A. Android: A-66969318. Reference: N-CVE-2017-6281."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvomx contiene una posible escritura fuera de límites debido a una validación de entradas inválida que podría provocar un escalado local de privilegios. Este problema se ha clasificado como grave. Producto: Android. Versión: N/A. Android: A-66969318. Referencias: N-CVE-2017-6281."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103286",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6285",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-12T13:29:00.383",
      "lastModified" : "2024-11-21T03:29:27.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-64893156. Reference: N-CVE-2017-6285."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvrm contiene una posible lectura fuera de límites debido a una comprobación de límites faltante que podría provocar una divulgación de información local. Este problema se ha clasificado como moderado, Producto: Android. Versión: N/A. Android: A-64893156. Referencias: N-CVE-2017-6285."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6286",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-12T13:29:00.447",
      "lastModified" : "2024-11-21T03:29:27.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N/A. Android: A-64893247. Reference: N-CVE-2017-6286."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvomx contiene una posible escritura fuera de límites debido a una comprobación de límites faltante que podría provocar un escalado local de privilegios. Este problema se ha clasificado como grave. Producto: Android. Versión: N/A. Android: A-64893247. Referencias: N-CVE-2017-6286."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103286",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6287",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-12T13:29:00.493",
      "lastModified" : "2024-11-21T03:29:28.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate.Product: Android. Version: N/A. Android: A-64893264. Reference: N-CVE-2017-6287."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvrm contiene una posible lectura fuera de límites debido a una comprobación de límites faltante que podría provocar una divulgación de información local. Este problema se ha clasificado como grave. Producto: Android. Versión: N/A. Android: A-64893264. Referencias: N-CVE-2017-6287."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6288",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-12T13:29:00.540",
      "lastModified" : "2024-11-21T03:29:28.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-65482562. Reference: N-CVE-2017-6288."
      }, {
        "lang" : "es",
        "value" : "NVIDIA libnvrm contiene una posible lectura fuera de límites debido a una comprobación de límites faltante que podría provocar una divulgación de información local. Este problema se ha clasificado como moderado. Producto: Android. Versión: N/A. Android: A-65482562. Referencias: N-CVE-2017-6288."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2585",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-12T15:29:00.397",
      "lastModified" : "2024-11-21T03:23:46.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to timing attacks."
      }, {
        "lang" : "es",
        "value" : "Red Hat Keycloak, en versiones anteriores a la 2.5.1, tiene una implementación de la verificación HMAC para los tokens JWS que emplea un método que se ejecuta en tiempo no constante, lo que podría hacer que la aplicación sea vulnerable a ataques de sincronización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "E2C6178C-0196-42C2-9947-777F4F397D9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign_on:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FE6021-DBE7-4FFD-B021-F97EF80BDEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign_on:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB839F9-8CE2-4EAE-90F2-2CA55742957E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0876.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97393",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038180",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0872",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412376",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0876.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2619",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-12T15:29:00.443",
      "lastModified" : "2024-11-21T03:23:50.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition."
      }, {
        "lang" : "es",
        "value" : "Samba, en versiones anteriores a 4.6.1, 4.5.7 y 4.4.11, es vulnerable a un cliente malicioso que emplee una carrera symlink para permitir el acceso a áreas del sistema de archivos del servidor que no se exportan bajo la definición compartida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.12",
            "matchCriteriaId" : "D4B7275C-E576-47DB-815F-59B41A60E00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.7",
            "matchCriteriaId" : "B4B76B98-699A-42A0-B3C4-27363FCAD55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "6D983DA0-9B5D-4D47-87A7-A2CA67417F45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038117",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2778",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1429472",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41740/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-2619.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1429472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41740/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-2619.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2628",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-12T15:29:00.490",
      "lastModified" : "2024-11-21T03:23:51.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVE_GSSAPI define was meanwhile substituted by USE_HTTP_NEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl only."
      }, {
        "lang" : "es",
        "value" : "curl, tal y como se distribuye en Red Hat Enterprise Linux 6, en versiones anteriores a la 7.19.7-53, no realizó correctamente el backport de la solución para CVE-2015-3148 debido a que no reflejó el hecho de que la definición HAVE_GSSAPI se sustituyó mientras tanto por USE_HTTP_NEGOTIATE. Este problema se introdujo en RHEL 6.7 y solo afecta a RHEL 6 curl."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:7.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490D1BDC-33B9-43BA-B6DA-42DEE577082A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0847.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97187",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422464",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0847.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2661",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-12T15:29:00.553",
      "lastModified" : "2024-11-21T03:23:55.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster."
      }, {
        "lang" : "es",
        "value" : "ClusterLabs pcs, en versiones anteriores a la 0.9.157, es vulnerable a Cross-Site Scripting (XSS) debido a la validación incorrecta del campo Node name al crear un nuevo clúster o al añadir uno ya existente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clusterlabs:pcs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.157",
            "matchCriteriaId" : "31F44CBF-B8CB-4CB8-B88C-F6C357759763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1428948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ClusterLabs/pcs/commit/1874a769b5720ae5430f10c6cedd234430bc703f",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1428948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ClusterLabs/pcs/commit/1874a769b5720ae5430f10c6cedd234430bc703f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2667",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-12T15:29:00.617",
      "lastModified" : "2024-11-21T03:23:56.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks."
      }, {
        "lang" : "es",
        "value" : "Hammer CLI, una utilidad CLI para Foreman, en versiones anteriores a la 0.10.0, no estableció explícitamente la marca verify_ssl para apipie-bindings que lo deshabilita por defecto. Como resultado, los certificados del servidor no se comprueban y las conexiones son propensas a ataques Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:hammer_cli:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "8E6002FC-2700-44AA-B4AA-2986C0F09948"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F6E32E-6AF3-489A-AFEF-D5309E0D1779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite_capsule:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FB21E6-FFBC-4286-959E-7418C6A356E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.theforeman.org/issues/19033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97153",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1436262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://projects.theforeman.org/issues/19033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1436262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-12T23:29:00.210",
      "lastModified" : "2024-11-21T03:19:37.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request."
      }, {
        "lang" : "es",
        "value" : "Remedy Mid Tier en BMC Remedy AR System 9.1 permite Cross-Site Scripting (XSS) mediante el parámetro ATTKey en una petición arsys/servlet/AttachServlet."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:remedy_action_request_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "5ED25D5E-45E7-4FCF-B39F-A7B8025A0FD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://communities.bmc.com/thread/164169",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://communities.bmc.com/thread/164169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002101",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2018-03-13T17:29:00.233",
      "lastModified" : "2024-11-21T03:04:58.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem."
      }, {
        "lang" : "es",
        "value" : "En Kubernetes, en versiones 1.3.x, 1.4.x, 1.5.x, 1.6.x y en versiones anteriores a la 1.7.14, 1.8.9 y 1.9.4, los contenedores que emplean montajes de volumen subpath con cualquier tipo de volumen (incluyendo pods no privilegiados, dependientes de los permisos de archivo) pueden acceder a archivos/directorios fuera del volumen, incluyendo el sistema de archivos del host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.3.10",
            "matchCriteriaId" : "85841C2A-31F1-4725-BE9D-0E346D133CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "3CE7BB45-879A-48CE-BE8B-463CB97B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndIncluding" : "1.5.8",
            "matchCriteriaId" : "0990DE9E-F42A-42E5-9589-ACFCD79950E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndIncluding" : "1.6.13",
            "matchCriteriaId" : "520D312F-37C8-4604-B4C3-D9DB8317CF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.14",
            "matchCriteriaId" : "F39F83C4-3CC3-4681-8363-0986209D4E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.9",
            "matchCriteriaId" : "CEE0979F-ED58-43D8-9E3B-7261B1782DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.4",
            "matchCriteriaId" : "E4818E0C-B0ED-424F-AD73-B87777FD9D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
        "source" : "jordan@liggitt.net"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0475",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bgeesaman/subpath-exploit/",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubernetes/kubernetes/issues/60813",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bgeesaman/subpath-exploit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubernetes/kubernetes/issues/60813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002102",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2018-03-13T17:29:00.280",
      "lastModified" : "2024-11-21T03:04:58.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running."
      }, {
        "lang" : "es",
        "value" : "En Kubernetes, en versiones 1.3.x, 1.4.x, 1.5.x, 1.6.x y en versiones anteriores a la 1.7.14, 1.8.9 y 1.9.4, los contenedores que emplean un volumen secreto, configMap, proyectado o downwardAPI pueden desencadenar la eliminación de archivos/directorios arbitrarios de los nodos en los que se están ejecutando."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.3.10",
            "matchCriteriaId" : "85841C2A-31F1-4725-BE9D-0E346D133CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.4.12",
            "matchCriteriaId" : "3CE7BB45-879A-48CE-BE8B-463CB97B8ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndIncluding" : "1.5.8",
            "matchCriteriaId" : "0990DE9E-F42A-42E5-9589-ACFCD79950E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndIncluding" : "1.6.13",
            "matchCriteriaId" : "520D312F-37C8-4604-B4C3-D9DB8317CF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.14",
            "matchCriteriaId" : "F39F83C4-3CC3-4681-8363-0986209D4E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.9",
            "matchCriteriaId" : "CEE0979F-ED58-43D8-9E3B-7261B1782DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.4",
            "matchCriteriaId" : "E4818E0C-B0ED-424F-AD73-B87777FD9D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0475",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubernetes/kubernetes/issues/60814",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubernetes/kubernetes/issues/60814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17442",
      "sourceIdentifier" : "secure@blackberry.com",
      "published" : "2018-03-13T18:29:00.227",
      "lastModified" : "2024-11-21T03:17:56.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the context of the affected UEM Management Console account by crafting a malicious link and then persuading a user with legitimate access to the Management Console to click on the malicious link."
      }, {
        "lang" : "es",
        "value" : "En BlackBerry UEM Management Console, en versiones 12.7.1 y anteriores, existe una vulnerabilidad de Cross-Site Scripting (XSS) que podría permitir que un atacante ejecute comandos script en el contexto de la cuenta UEM Management Console afectada manipulando un enlace malicioso y persuadiendo a un usuario con acceso legítimo a la Management Console para que haga clic en el enlace malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackberry:unified_endpoint_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.7.1",
            "matchCriteriaId" : "15FD68A5-5B9A-496C-A063-8EF2587E2063"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000047227",
        "source" : "secure@blackberry.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000048073",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000047227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-13T19:29:00.217",
      "lastModified" : "2024-11-21T03:16:06.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad in Mitel ST 14.2, release GA28 y anteriores, podría permitir que un atacante emplee la función API para enumerar a través de user-ids, que podría emplearse para identificar ID de usuario válidos y nombres de usuario asociados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:st14.2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ga28",
            "matchCriteriaId" : "22CF80BB-56C8-40CF-AD9C-D8911F5D5C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-13T19:29:00.280",
      "lastModified" : "2024-11-21T03:16:06.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of the application."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente conferencing de Mitel ST 14.2, release GA28 y anteriores, podría permitir que un usuario autenticado suba un script malicioso a la Biblioteca Personal mediante una petición POST manipulada. El exploit con éxito podría permitir que un atacante ejecute código arbitrario en el contexto de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:st14.2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "ga28",
            "matchCriteriaId" : "22CF80BB-56C8-40CF-AD9C-D8911F5D5C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1741",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-14T00:29:00.217",
      "lastModified" : "2024-11-21T03:22:17.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 podría permitir que un atacante remoto obtenga información sensible provocado por la gestión incorrecta de los campos del panel Administrative Console. Al explotarse, un atacante podría leer archivos en el sistema de archivos. IBM X-Force ID: 134931."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012342",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040485",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134931",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-14T02:29:00.223",
      "lastModified" : "2024-11-21T03:19:37.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile allocations."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en GraphicsMagick 1.3.26. Se ha encontrado una vulnerabilidad de error de asignación en la función ReadTIFFImage en coders/tiff.c, lo que permite que atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado, debido a que el tamaño del archivo no se emplea adecuadamente para restringir las asignaciones scanline, strip y tile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/752c0b41fa32",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/461/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/752c0b41fa32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/461/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-14T02:29:00.287",
      "lastModified" : "2024-11-21T03:19:37.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en GraphicsMagick 1.3.26. Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función ReadCINEONImage en coders/cineon.c, que permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/53a4d841e90f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/473/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/53a4d841e90f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/473/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-14T02:29:00.347",
      "lastModified" : "2024-11-21T03:19:37.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en GraphicsMagick 1.3.26. Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función ReadEnhMetaFile en coders/emf.c, que permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C227898-C6EC-41BE-A3AD-229FFD8B86D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/ea074081678b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/475/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/ea074081678b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/graphicsmagick/bugs/475/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12194",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-03-14T21:29:00.207",
      "lastModified" : "2024-11-21T03:09:01.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable."
      }, {
        "lang" : "es",
        "value" : ">Se ha encontrado un error en la forma en la que spice-client procesaba ciertos mensajes enviados desde el servidor. Un atacante con control del spice-server malicioso podría emplear este error para cerrar inesperadamente el cliente o ejecutar código arbitrario con los permisos del usuario que está ejecutando el cliente. Se cree que las versiones de spice-gtk hasta la 0.34 son vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spice-gtk_project:spice-gtk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.34",
            "matchCriteriaId" : "C8FE897E-EBE6-459A-8527-7EBD128D0A90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103413",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501200",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-20",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/3659-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/103413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1501200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201811-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3659-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T04:29:00.227",
      "lastModified" : "2024-11-21T03:19:38.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code."
      }, {
        "lang" : "es",
        "value" : "La implementación SAS (Serial Attached SCSI) en el kernel de Linux, hasta la versión 4.15.9, gestiona de manera incorrecta un mutex en libsas. Esto permite que usuarios locales provoquen una denegación de servicio (deadlock) desencadenando cierto código de gestión de errores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.15.9",
            "matchCriteriaId" : "9511E3E2-F4FD-42A1-941F-D47186F35DCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103423",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4163-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4163-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4163-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4163-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T19:29:00.203",
      "lastModified" : "2024-11-21T03:19:38.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .avi file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 2.4.4 de Exempi. Desbordamiento de enteros en la clase Chunk en XMPFiles/source/FormatSupport/RIFF.cpp permite que los atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante datos XMP manipulados en un archivo .avi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exempi_project:exempi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "D200AA23-5B69-448C-B381-54D13C06AF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=65a8492832b7335ffabd01f5f64d89dec757c260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=65a8492832b7335ffabd01f5f64d89dec757c260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T19:29:00.267",
      "lastModified" : "2024-11-21T03:19:38.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp, and XMPFiles/source/FormatSupport/TIFF_Support.hpp."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 2.4.3 de Exempi. Permite que los atacantes remotos provoquen una denegación de servicio (memcpy no válido con uso de memoria previamente liberada) o, posiblemente, otro impacto no especificado mediante un archivo .pdf que contenga datos JPEG. Esto está relacionado con XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp y XMPFiles/source/FormatSupport/TIFF_Support.hpp."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exempi_project:exempi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "30DEC55E-01D0-4A4A-AE45-66F8E936F486"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=c26d5beb60a5a85f76259f50ed3e08c8169b0a0c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=100397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=c26d5beb60a5a85f76259f50ed3e08c8169b0a0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T19:29:00.327",
      "lastModified" : "2024-11-21T03:19:38.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted .webp file."
      }, {
        "lang" : "es",
        "value" : ">Se ha descubierto un problema en versiones anteriores a la 2.4.3 de Exempi. La clase VPXChunk en XMPFiles/source/FormatSupport/WEBP_Support.cpp no se asegura de que los valores de ancho y alto no sean ceros, lo que permite a los atacantes remotos provocar una denegación de servicio (fallo de aserción y salida de la aplicación) mediante un archivo .webp manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exempi_project:exempi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "30DEC55E-01D0-4A4A-AE45-66F8E936F486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101913",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=9e76a7782a54a242f18d609e7ba32bf1c430a5e4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=9e76a7782a54a242f18d609e7ba32bf1c430a5e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T19:29:00.377",
      "lastModified" : "2024-11-21T03:19:38.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted .asf file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 2.4.4 de Exempi. La función ASF_Support::ReadHeaderObject en XMPFiles/source/FormatSupport/ASF_Support.cpp permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo .asf manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exempi_project:exempi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "D200AA23-5B69-448C-B381-54D13C06AF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=fe59605d3520bf2ca4e0a963d194f10e9fee5806",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=fe59605d3520bf2ca4e0a963d194f10e9fee5806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T19:29:00.437",
      "lastModified" : "2024-11-21T03:19:39.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 2.4.3 de Exempi. La función PostScript_Support::ConvertToDate en XMPFiles/source/FormatSupport/PostScript_Support.cpp permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero no válido y bloqueo de aplicación) mediante un archivo .ps manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exempi_project:exempi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "30DEC55E-01D0-4A4A-AE45-66F8E936F486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101914",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=f19d0107fbae1fb41836cd110d4425e407e64048",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=101914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=f19d0107fbae1fb41836cd110d4425e407e64048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-15T19:29:00.500",
      "lastModified" : "2024-11-21T03:19:39.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .qt file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en versiones anteriores a la 2.4.4 de Exempi. La función TradQT_Manager::ParseCachedBoxes en XMPFiles/source/FormatSupport/QuickTime_Support.cpp permite que los atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante datos XMP manipulados en un archivo .qt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exempi_project:exempi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "D200AA23-5B69-448C-B381-54D13C06AF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=886cd1d2314755adb1f4cdb99c16ff00830f0331",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=102483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://cgit.freedesktop.org/exempi/commit/?id=886cd1d2314755adb1f4cdb99c16ff00830f0331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3668-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14878",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.260",
      "lastModified" : "2024-11-21T03:13:41.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is used to copy data has a size of only 8 bits and can be exceeded resulting in a denial of service."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una variable de longitud que se utiliza para copiar datos tiene un tamaño de solo 8 bits y se puede exceder, lo que resulta en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=27f1c544d6737bcb3dc4bb114badcd47ce946a8b",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=27f1c544d6737bcb3dc4bb114badcd47ce946a8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14882",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.337",
      "lastModified" : "2024-11-21T03:13:41.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se procesa una trama de acción VENDOR específica en la función lim_process_action_vendor_specific(), se realiza una comparación con el cuerpo de la trama de acción entrante sin validar si el cuerpo de la trama de acción recibida es de una longitud válida, pudiendo conducir a un acceso fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cd10091f03f6255a47d7146eea5738f1f4ceea35",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cd10091f03f6255a47d7146eea5738f1f4ceea35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14885",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.400",
      "lastModified" : "2024-11-21T03:13:41.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, wma_unified_link_peer_stats_event_handler function has a variable num_rates which represents the sum of all the peer_stats->num_rates. The current behavior in this function is to validate only the num_rates of the first peer stats (peer_stats->num_rates) against WMA_SVC_MSG_MAX_SIZE, but not the sum of all the peer's num_rates (num_rates) which may lead to a buffer overflow when the firmware buffer is copied in to the allocated buffer (peer_stats) as the size for the memory allocation - link_stats_results_size is based on num_rates."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la función wma_unified_link_peer_stats_event_handler tiene una variable num_rates que representa la suma de todos los peer_stats->num_rates. El comportamiento actual en esta función es el de validar solo los num_rates del primer peer stats (peer_stats->num_rates) contra WMA_SVC_MSG_MAX_SIZE, pero no la suma de todos los peer num_rates (num_rates), lo que puede conducir a un desbordamiento de búfer cuando el búfer del firmware se copia al búfer asignado (peer_stats). Esto se debe a que el tamaño de asignación de memoria - link_stats_results_size se basa en num_rates."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44e992e169dbd601f95e845961cb2181b167a553",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44e992e169dbd601f95e845961cb2181b167a553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15815",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.463",
      "lastModified" : "2024-11-21T03:15:17.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un desbordamiento de búfer a la hora de procesar tramas MGMT 802.11 como la trama Auth en limProcessAuthFrame."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a5096157fd80350a0e0409e7ad96265ae60861f6",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a5096157fd80350a0e0409e7ad96265ae60861f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15821",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.510",
      "lastModified" : "2024-11-21T03:15:17.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_p2p_noa_event_handler(), there is no bound check on a value coming from firmware which can potentially lead to a buffer overwrite."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la función wma_p2p_noa_event_handler() no se verifican los límites en un valor proveniente del firmware, lo que podría conducir a una sobrescritura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44cd589c8a0f5a245e0003a7d0c4be1b5f3ba890",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44cd589c8a0f5a245e0003a7d0c4be1b5f3ba890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17773",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.573",
      "lastModified" : "2024-11-21T03:18:37.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in video_fmt_mp4r_process_atom_avc1() causes a potential buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Snapdragon Automobile, Snapdragon Wearable y Snapdragon Mobile MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 602A, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820Am, SD 835, SD 845 y MSM8909W, una validación de entradas insuficiente en video_fmt_mp4r_process_atom_avc1() podría provocar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:s820am_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD188A-896D-47C4-9CB3-5ABD62FA34AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:s820am:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092D280A-10DA-4482-93D2-5ECB379FF081"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607AA2E2-69A9-4A8A-B9E3-137D37CB7632"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF1492A-884D-4E59-8A1C-E39A105E2CAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_602a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F4DA0C-D35C-43A7-AF74-0231D7EC6B0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_602a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4199D397-6ECA-4525-93BB-C85FBA62CF87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103292",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18056",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.620",
      "lastModified" : "2024-11-21T03:19:15.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_id in wma_unified_bcntx_status_event_handler() which is received from firmware leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para vdev_id en wma_unified_bcntx_status_event_handler(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18063",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.683",
      "lastModified" : "2024-11-21T03:19:16.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for nlo_event in wma_nlo_match_evt_handler(), which is received from firmware, leads to potential out of bound memory access."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para nlo_event en wma_nlo_match_evt_handler(), la cual se recibe desde el firmware, puede conducir a un acceso a memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=b9c0beac8f021f774f39df54e1f96fd87c2660f0",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=b9c0beac8f021f774f39df54e1f96fd87c2660f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18064",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.743",
      "lastModified" : "2024-11-21T03:19:16.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for p2p_noa_info in wma_send_bcn_buf_ll() which is received from firmware leads to potential buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para p2p_noa_info en wma_send_bcn_buf_ll(), la cual se recibe desde el firmware, puede conducir a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=84f144bedd81ad154a26c76fb322903c25374d20",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=84f144bedd81ad154a26c76fb322903c25374d20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18067",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.790",
      "lastModified" : "2024-11-21T03:19:17.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame in lim_send_auth_mgmt_frame() leads to buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta durante el procesamiento de una trama de gestión de autenticación cifrada en plim_send_auth_mgmt_frame() conduce a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e1e9d0cb8a0bc33965d112725e205a78aab82986",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e1e9d0cb8a0bc33965d112725e205a78aab82986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18068",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.837",
      "lastModified" : "2024-11-21T03:19:17.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper buffer length calculation in wma_roam_scan_filter() leads to buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el cálculo incorrecto de la longitud del búfer en wma_roam_scan_filter() conduce a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=b91ad6cf984a48ad52fe5af13cb3e0ac4bf012ed",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=b91ad6cf984a48ad52fe5af13cb3e0ac4bf012ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18069",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-15T21:29:00.900",
      "lastModified" : "2024-11-21T03:19:17.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to buffer overread."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, el cálculo incorrecto de la longitud del mensaje en oem_cmd_handler() cuando se procesa un mensaje netlink WLAN_NL_MSG_OEM conduce a una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16745",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-15T23:29:00.253",
      "lastModified" : "2024-11-21T03:16:53.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type ('type confusion') vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de confusión de tipos en Delta Industrial Automation Screen Editor de Delta Electronics en las versiones 2.00.23.00 y anteriores. Un acceso de recurso que utiliza una vulnerabilidad de tipo incompatible (confusión de tipos) podría permitir que un atacante ejecute código remotamente cuando se procesan archivos .dpb especialmente manipulados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:delta_industrial_automation_screen_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.23.00",
            "matchCriteriaId" : "1FE7B554-B7E3-4864-80E7-D49678FEBCC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16747",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-15T23:29:00.313",
      "lastModified" : "2024-11-21T03:16:53.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files may cause the system to write outside the intended buffer area."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de escritura fuera de límites en Delta Industrial Automation Screen Editor de Delta Electronics en las versiones 2.00.23.00 y anteriores. Los archivos .dpb especialmente manipulados podrían causar que el sistema escriba fuera del area del búfer pertinente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:delta_industrial_automation_screen_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.23.00",
            "matchCriteriaId" : "1FE7B554-B7E3-4864-80E7-D49678FEBCC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16749",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-15T23:29:00.360",
      "lastModified" : "2024-11-21T03:16:53.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de uso de memoria previamente liberada en Delta Industrial Automation Screen Editor de Delta Electronics en las versiones 2.00.23.00 y anteriores. Los archivos .dpb especialmente manipulados podrían explotar una vulnerabilidad de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:delta_industrial_automation_screen_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.23.00",
            "matchCriteriaId" : "1FE7B554-B7E3-4864-80E7-D49678FEBCC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16751",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-15T23:29:00.423",
      "lastModified" : "2024-11-21T03:16:53.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dpb files may allow an attacker to remotely execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de desbordamiento de búfer basado en pila en Delta Industrial Automation Screen Editor de Delta Electronics en las versiones 2.00.23.00 y anteriores. Las vulnerabilidades de desbordamiento de búfer basado en pila provocadas por el procesamiento de archivos .dpb especialmente manipulados podrían permitir que un atacante ejecute código arbitrario remotamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:delta_industrial_automation_screen_editor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.23.00",
            "matchCriteriaId" : "1FE7B554-B7E3-4864-80E7-D49678FEBCC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-16T14:29:00.267",
      "lastModified" : "2024-11-21T03:09:49.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the \"flag\" parameter."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ASUS RT-N14UHP, en versiones anteriores a la 3.0.0.4.380.8015, tienen una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en el parámetro \"flag\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-n14uhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.380.8015",
            "matchCriteriaId" : "BDF69059-8E64-4938-952F-EFEE7D967AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-n14uhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE76A8DF-A914-4700-8EE2-29CD4205F4B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iscouncil.blogspot.com/2018/03/asus-rt-n14uhp-cross-site-scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iscouncil.blogspot.com/2018/03/asus-rt-n14uhp-cross-site-scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3895",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.317",
      "lastModified" : "2023-11-07T02:44:17.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3929",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.363",
      "lastModified" : "2023-11-07T02:44:24.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3930",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.410",
      "lastModified" : "2023-11-07T02:44:24.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3931",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.470",
      "lastModified" : "2023-11-07T02:44:25.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3938",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.517",
      "lastModified" : "2023-11-07T02:44:26.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3939",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.567",
      "lastModified" : "2023-11-07T02:44:26.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3940",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.643",
      "lastModified" : "2023-11-07T02:44:26.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3941",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.690",
      "lastModified" : "2023-11-07T02:44:26.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3942",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.753",
      "lastModified" : "2023-11-07T02:44:27.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3943",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.800",
      "lastModified" : "2023-11-07T02:44:27.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3944",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.847",
      "lastModified" : "2023-11-07T02:44:27.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3945",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.893",
      "lastModified" : "2023-11-07T02:44:27.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3946",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.940",
      "lastModified" : "2023-11-07T02:44:28.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3947",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:00.987",
      "lastModified" : "2023-11-07T02:44:28.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3949",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.050",
      "lastModified" : "2023-11-07T02:44:28.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3950",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.097",
      "lastModified" : "2023-11-07T02:44:28.753",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3951",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.143",
      "lastModified" : "2023-11-07T02:44:28.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3952",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.173",
      "lastModified" : "2023-11-07T02:44:29.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3953",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.237",
      "lastModified" : "2023-11-07T02:44:29.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3954",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.283",
      "lastModified" : "2023-11-07T02:44:29.707",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3955",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.330",
      "lastModified" : "2023-11-07T02:44:29.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3956",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.363",
      "lastModified" : "2023-11-07T02:44:30.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3957",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.423",
      "lastModified" : "2023-11-07T02:44:30.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3958",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.457",
      "lastModified" : "2023-11-07T02:44:30.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3959",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.503",
      "lastModified" : "2023-11-07T02:44:30.913",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3963",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.567",
      "lastModified" : "2023-11-07T02:44:32.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3973",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.613",
      "lastModified" : "2023-11-07T02:44:34.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3974",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.660",
      "lastModified" : "2023-11-07T02:44:35.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3975",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.707",
      "lastModified" : "2023-11-07T02:44:35.443",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3976",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.753",
      "lastModified" : "2023-11-07T02:44:35.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3977",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.783",
      "lastModified" : "2023-11-07T02:44:35.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3978",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.830",
      "lastModified" : "2023-11-07T02:44:36.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3979",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.877",
      "lastModified" : "2023-11-07T02:44:36.407",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3981",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.940",
      "lastModified" : "2023-11-07T02:44:36.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3982",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:01.987",
      "lastModified" : "2023-11-07T02:44:36.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3983",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.017",
      "lastModified" : "2023-11-07T02:44:37.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3984",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.080",
      "lastModified" : "2023-11-07T02:44:37.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3985",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.113",
      "lastModified" : "2023-11-07T02:44:37.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3986",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.173",
      "lastModified" : "2023-11-07T02:44:37.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3987",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.220",
      "lastModified" : "2023-11-07T02:44:38.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3990",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.253",
      "lastModified" : "2023-11-07T02:44:38.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3991",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.300",
      "lastModified" : "2023-11-07T02:44:39.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3992",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.347",
      "lastModified" : "2023-11-07T02:44:39.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3993",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.393",
      "lastModified" : "2023-11-07T02:44:39.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3994",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.440",
      "lastModified" : "2023-11-07T02:44:39.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3995",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.470",
      "lastModified" : "2023-11-07T02:44:40.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3997",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.517",
      "lastModified" : "2023-11-07T02:44:40.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3998",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.567",
      "lastModified" : "2023-11-07T02:44:40.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3999",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.613",
      "lastModified" : "2023-11-07T02:44:41.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4000",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.660",
      "lastModified" : "2023-11-07T02:44:41.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4001",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.720",
      "lastModified" : "2023-11-07T02:44:41.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4002",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.767",
      "lastModified" : "2023-11-07T02:44:41.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4003",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.830",
      "lastModified" : "2023-11-07T02:44:42.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4004",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.877",
      "lastModified" : "2023-11-07T02:44:42.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4005",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.923",
      "lastModified" : "2023-11-07T02:44:42.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4006",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:02.957",
      "lastModified" : "2023-11-07T02:44:42.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4007",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.003",
      "lastModified" : "2023-11-07T02:44:43.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4008",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.067",
      "lastModified" : "2023-11-07T02:44:43.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4009",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.113",
      "lastModified" : "2023-11-07T02:44:43.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4010",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.173",
      "lastModified" : "2023-11-07T02:44:43.807",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4018",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.220",
      "lastModified" : "2023-11-07T02:44:44.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4019",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.253",
      "lastModified" : "2023-11-07T02:44:44.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4020",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.300",
      "lastModified" : "2023-11-07T02:44:44.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4021",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.347",
      "lastModified" : "2023-11-07T02:44:44.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4022",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.393",
      "lastModified" : "2023-11-07T02:44:45.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4023",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.423",
      "lastModified" : "2023-11-07T02:44:45.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4024",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.470",
      "lastModified" : "2023-11-07T02:44:45.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4025",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.517",
      "lastModified" : "2023-11-07T02:44:45.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4026",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.567",
      "lastModified" : "2023-11-07T02:44:46.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4027",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.613",
      "lastModified" : "2023-11-07T02:44:46.277",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4029",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.660",
      "lastModified" : "2023-11-07T02:44:46.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4030",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.707",
      "lastModified" : "2023-11-07T02:44:47.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4031",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.753",
      "lastModified" : "2023-11-07T02:44:47.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4032",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.800",
      "lastModified" : "2023-11-07T02:44:47.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4033",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.847",
      "lastModified" : "2023-11-07T02:44:47.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4034",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.893",
      "lastModified" : "2023-11-07T02:44:48.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4035",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.940",
      "lastModified" : "2023-11-07T02:44:48.250",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4037",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:03.987",
      "lastModified" : "2023-11-07T02:44:48.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4038",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.033",
      "lastModified" : "2023-11-07T02:44:48.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4039",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.113",
      "lastModified" : "2023-11-07T02:44:49.183",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4040",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.160",
      "lastModified" : "2023-11-07T02:44:49.477",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4041",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.207",
      "lastModified" : "2023-11-07T02:44:49.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4042",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.253",
      "lastModified" : "2023-11-07T02:44:50.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4043",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.300",
      "lastModified" : "2023-11-07T02:44:50.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4044",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.347",
      "lastModified" : "2023-11-07T02:44:50.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4045",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.393",
      "lastModified" : "2023-11-07T02:44:50.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4046",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.440",
      "lastModified" : "2023-11-07T02:44:51.097",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4047",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.487",
      "lastModified" : "2023-11-07T02:44:51.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4048",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.533",
      "lastModified" : "2023-11-07T02:44:51.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4049",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.567",
      "lastModified" : "2023-11-07T02:44:51.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4056",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.613",
      "lastModified" : "2023-11-07T02:44:52.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4058",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.660",
      "lastModified" : "2023-11-07T02:44:52.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4059",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.707",
      "lastModified" : "2023-11-07T02:44:53.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4060",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.767",
      "lastModified" : "2023-11-07T02:44:53.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4061",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.817",
      "lastModified" : "2023-11-07T02:44:53.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4062",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.863",
      "lastModified" : "2023-11-07T02:44:53.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4063",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.910",
      "lastModified" : "2023-11-07T02:44:54.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4064",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.957",
      "lastModified" : "2023-11-07T02:44:54.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4065",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:04.987",
      "lastModified" : "2023-11-07T02:44:54.557",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4066",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:05.033",
      "lastModified" : "2023-11-07T02:44:54.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4067",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:05.080",
      "lastModified" : "2023-11-07T02:44:55.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4068",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:05.113",
      "lastModified" : "2023-11-07T02:44:55.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4069",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:05.160",
      "lastModified" : "2023-11-07T02:44:55.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4070",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:05.220",
      "lastModified" : "2023-11-07T02:44:55.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4071",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:06.767",
      "lastModified" : "2023-11-07T02:44:56.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4072",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:06.817",
      "lastModified" : "2023-11-07T02:44:56.250",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4073",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:06.863",
      "lastModified" : "2023-11-07T02:44:56.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4074",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:06.910",
      "lastModified" : "2023-11-07T02:44:56.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4075",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:06.987",
      "lastModified" : "2023-11-07T02:44:56.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4076",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.033",
      "lastModified" : "2023-11-07T02:44:57.213",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4077",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.080",
      "lastModified" : "2023-11-07T02:44:57.443",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4078",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.127",
      "lastModified" : "2023-11-07T02:44:57.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4079",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.173",
      "lastModified" : "2023-11-07T02:44:57.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4080",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.220",
      "lastModified" : "2023-11-07T02:44:58.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4081",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.267",
      "lastModified" : "2023-11-07T02:44:58.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4082",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.317",
      "lastModified" : "2023-11-07T02:44:58.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4083",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.363",
      "lastModified" : "2023-11-07T02:44:58.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4084",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.410",
      "lastModified" : "2023-11-07T02:44:59.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4085",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.440",
      "lastModified" : "2023-11-07T02:44:59.387",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4086",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.487",
      "lastModified" : "2023-11-07T02:44:59.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4087",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.533",
      "lastModified" : "2023-11-07T02:44:59.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4088",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.580",
      "lastModified" : "2023-11-07T02:45:00.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4089",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.627",
      "lastModified" : "2023-11-07T02:45:00.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4090",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.660",
      "lastModified" : "2023-11-07T02:45:00.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4091",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.720",
      "lastModified" : "2023-11-07T02:45:00.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4092",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.753",
      "lastModified" : "2023-11-07T02:45:01.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4093",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.800",
      "lastModified" : "2023-11-07T02:45:01.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4094",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.847",
      "lastModified" : "2023-11-07T02:45:02.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4095",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.893",
      "lastModified" : "2023-11-07T02:45:02.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4096",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.940",
      "lastModified" : "2023-11-07T02:45:02.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4097",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:07.987",
      "lastModified" : "2023-11-07T02:45:03.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4098",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.050",
      "lastModified" : "2023-11-07T02:45:03.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4099",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.097",
      "lastModified" : "2023-11-07T02:45:04.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4100",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.143",
      "lastModified" : "2023-11-07T02:45:04.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4101",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.207",
      "lastModified" : "2023-11-07T02:45:04.993",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4102",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.253",
      "lastModified" : "2023-11-07T02:45:05.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4103",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.300",
      "lastModified" : "2023-11-07T02:45:05.740",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4104",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.347",
      "lastModified" : "2023-11-07T02:45:05.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4105",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.393",
      "lastModified" : "2023-11-07T02:45:06.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4106",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.440",
      "lastModified" : "2023-11-07T02:45:06.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4107",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.470",
      "lastModified" : "2023-11-07T02:45:06.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4108",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.517",
      "lastModified" : "2023-11-07T02:45:07.010",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4109",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.567",
      "lastModified" : "2023-11-07T02:45:07.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4110",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.627",
      "lastModified" : "2023-11-07T02:45:07.517",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4111",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.673",
      "lastModified" : "2023-11-07T02:45:07.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4112",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.707",
      "lastModified" : "2023-11-07T02:45:08.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4113",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.753",
      "lastModified" : "2023-11-07T02:45:08.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4114",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.800",
      "lastModified" : "2023-11-07T02:45:08.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4115",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.847",
      "lastModified" : "2023-11-07T02:45:08.737",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4116",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.893",
      "lastModified" : "2023-11-07T02:45:08.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4117",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.923",
      "lastModified" : "2023-11-07T02:45:09.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4118",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:08.970",
      "lastModified" : "2023-11-07T02:45:09.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4119",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.017",
      "lastModified" : "2023-11-07T02:45:09.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4120",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.067",
      "lastModified" : "2023-11-07T02:45:10.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4121",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.127",
      "lastModified" : "2023-11-07T02:45:10.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4122",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.173",
      "lastModified" : "2023-11-07T02:45:10.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4123",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.220",
      "lastModified" : "2023-11-07T02:45:10.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4124",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.267",
      "lastModified" : "2023-11-07T02:45:11.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4125",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.317",
      "lastModified" : "2023-11-07T02:45:11.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4126",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.347",
      "lastModified" : "2023-11-07T02:45:11.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4127",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.393",
      "lastModified" : "2023-11-07T02:45:11.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4128",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.440",
      "lastModified" : "2023-11-07T02:45:12.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4129",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.487",
      "lastModified" : "2023-11-07T02:45:12.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4130",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.533",
      "lastModified" : "2023-11-07T02:45:12.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4131",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.580",
      "lastModified" : "2023-11-07T02:45:12.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4132",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.627",
      "lastModified" : "2023-11-07T02:45:12.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4133",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.673",
      "lastModified" : "2023-11-07T02:45:13.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4134",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.720",
      "lastModified" : "2023-11-07T02:45:13.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4135",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.767",
      "lastModified" : "2023-11-07T02:45:13.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4136",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.817",
      "lastModified" : "2023-11-07T02:45:13.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4137",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.847",
      "lastModified" : "2023-11-07T02:45:14.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4138",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.910",
      "lastModified" : "2023-11-07T02:45:14.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4139",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:09.957",
      "lastModified" : "2023-11-07T02:45:14.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4140",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.003",
      "lastModified" : "2023-11-07T02:45:14.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4141",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.050",
      "lastModified" : "2023-11-07T02:45:15.213",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4142",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.097",
      "lastModified" : "2023-11-07T02:45:15.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4143",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.143",
      "lastModified" : "2023-11-07T02:45:15.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4144",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.190",
      "lastModified" : "2023-11-07T02:45:15.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4145",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.220",
      "lastModified" : "2023-11-07T02:45:16.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4146",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.267",
      "lastModified" : "2023-11-07T02:45:16.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4147",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.317",
      "lastModified" : "2023-11-07T02:45:16.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4148",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.363",
      "lastModified" : "2023-11-07T02:45:16.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4149",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.410",
      "lastModified" : "2023-11-07T02:45:17.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4150",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.457",
      "lastModified" : "2023-11-07T02:45:17.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4151",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.487",
      "lastModified" : "2023-11-07T02:45:17.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4152",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.550",
      "lastModified" : "2023-11-07T02:45:17.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4153",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.580",
      "lastModified" : "2023-11-07T02:45:18.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4154",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.627",
      "lastModified" : "2023-11-07T02:45:18.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4155",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.690",
      "lastModified" : "2023-11-07T02:45:18.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4156",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.737",
      "lastModified" : "2023-11-07T02:45:18.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4157",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.783",
      "lastModified" : "2023-11-07T02:45:19.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4158",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.847",
      "lastModified" : "2023-11-07T02:45:19.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4159",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.893",
      "lastModified" : "2023-11-07T02:45:19.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4160",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.940",
      "lastModified" : "2023-11-07T02:45:20.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4161",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:10.970",
      "lastModified" : "2023-11-07T02:45:20.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4162",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.017",
      "lastModified" : "2023-11-07T02:45:20.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4163",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.067",
      "lastModified" : "2023-11-07T02:45:20.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4164",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.113",
      "lastModified" : "2023-11-07T02:45:21.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4165",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.160",
      "lastModified" : "2023-11-07T02:45:21.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4166",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.207",
      "lastModified" : "2023-11-07T02:45:21.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4167",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.253",
      "lastModified" : "2023-11-07T02:45:21.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4168",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.300",
      "lastModified" : "2023-11-07T02:45:22.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4169",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.330",
      "lastModified" : "2023-11-07T02:45:22.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4170",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.377",
      "lastModified" : "2023-11-07T02:45:22.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4171",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.423",
      "lastModified" : "2023-11-07T02:45:22.797",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4172",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.487",
      "lastModified" : "2023-11-07T02:45:23.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4173",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.533",
      "lastModified" : "2023-11-07T02:45:23.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4174",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.580",
      "lastModified" : "2023-11-07T02:45:23.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4175",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.627",
      "lastModified" : "2023-11-07T02:45:23.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4176",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.673",
      "lastModified" : "2023-11-07T02:45:24.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4177",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.720",
      "lastModified" : "2023-11-07T02:45:24.297",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4178",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.783",
      "lastModified" : "2023-11-07T02:45:24.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4179",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.830",
      "lastModified" : "2023-11-07T02:45:24.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4180",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.877",
      "lastModified" : "2023-11-07T02:45:25.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4181",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.923",
      "lastModified" : "2023-11-07T02:45:25.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4182",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:11.970",
      "lastModified" : "2023-11-07T02:45:25.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4183",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.017",
      "lastModified" : "2023-11-07T02:45:25.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4184",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.050",
      "lastModified" : "2023-11-07T02:45:26.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4185",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.097",
      "lastModified" : "2023-11-07T02:45:26.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4186",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.143",
      "lastModified" : "2023-11-07T02:45:26.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4187",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.190",
      "lastModified" : "2023-11-07T02:45:26.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4188",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.237",
      "lastModified" : "2023-11-07T02:45:27.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4189",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.283",
      "lastModified" : "2023-11-07T02:45:27.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4190",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.317",
      "lastModified" : "2023-11-07T02:45:27.533",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4191",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.363",
      "lastModified" : "2023-11-07T02:45:27.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4192",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.410",
      "lastModified" : "2023-11-07T02:45:28.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4193",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.457",
      "lastModified" : "2023-11-07T02:45:28.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4194",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.503",
      "lastModified" : "2023-11-07T02:45:28.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4195",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.550",
      "lastModified" : "2023-11-07T02:45:28.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4196",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.597",
      "lastModified" : "2023-11-07T02:45:28.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4197",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.643",
      "lastModified" : "2023-11-07T02:45:29.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4198",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.673",
      "lastModified" : "2023-11-07T02:45:29.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4199",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.720",
      "lastModified" : "2023-11-07T02:45:29.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4200",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.767",
      "lastModified" : "2023-11-07T02:45:29.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4201",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.847",
      "lastModified" : "2023-11-07T02:45:30.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4202",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.877",
      "lastModified" : "2023-11-07T02:45:30.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4203",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.923",
      "lastModified" : "2023-11-07T02:45:30.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4204",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:12.970",
      "lastModified" : "2023-11-07T02:45:30.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4205",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.017",
      "lastModified" : "2023-11-07T02:45:31.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4206",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.067",
      "lastModified" : "2023-11-07T02:45:31.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4207",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.113",
      "lastModified" : "2023-11-07T02:45:31.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4208",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.160",
      "lastModified" : "2023-11-07T02:45:31.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4209",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.207",
      "lastModified" : "2023-11-07T02:45:32.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4210",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.253",
      "lastModified" : "2023-11-07T02:45:32.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4211",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.300",
      "lastModified" : "2023-11-07T02:45:32.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4212",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.347",
      "lastModified" : "2023-11-07T02:45:32.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4213",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.393",
      "lastModified" : "2023-11-07T02:45:33.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4214",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.440",
      "lastModified" : "2023-11-07T02:45:33.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4215",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.487",
      "lastModified" : "2023-11-07T02:45:33.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4216",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.533",
      "lastModified" : "2023-11-07T02:45:33.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4217",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.580",
      "lastModified" : "2023-11-07T02:45:34.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4218",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.627",
      "lastModified" : "2023-11-07T02:45:34.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4219",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.673",
      "lastModified" : "2023-11-07T02:45:34.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4220",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.720",
      "lastModified" : "2023-11-07T02:45:35.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4221",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.767",
      "lastModified" : "2023-11-07T02:45:35.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4222",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.817",
      "lastModified" : "2023-11-07T02:45:35.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4223",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.863",
      "lastModified" : "2023-11-07T02:45:35.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4224",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.910",
      "lastModified" : "2023-11-07T02:45:36.010",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4225",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:13.957",
      "lastModified" : "2023-11-07T02:45:36.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4226",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.003",
      "lastModified" : "2023-11-07T02:45:36.487",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4227",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.050",
      "lastModified" : "2023-11-07T02:45:36.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4228",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.097",
      "lastModified" : "2023-11-07T02:45:36.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4229",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.143",
      "lastModified" : "2023-11-07T02:45:37.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4230",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.190",
      "lastModified" : "2023-11-07T02:45:37.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4231",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.237",
      "lastModified" : "2023-11-07T02:45:37.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4232",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.283",
      "lastModified" : "2023-11-07T02:45:37.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4233",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.317",
      "lastModified" : "2023-11-07T02:45:38.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4234",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.363",
      "lastModified" : "2023-11-07T02:45:38.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4235",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.410",
      "lastModified" : "2023-11-07T02:45:38.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4236",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.457",
      "lastModified" : "2023-11-07T02:45:38.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4237",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.503",
      "lastModified" : "2023-11-07T02:45:39.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4238",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.550",
      "lastModified" : "2023-11-07T02:45:39.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4239",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.597",
      "lastModified" : "2023-11-07T02:45:39.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4240",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.643",
      "lastModified" : "2023-11-07T02:45:39.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4241",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.690",
      "lastModified" : "2023-11-07T02:45:40.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4242",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.737",
      "lastModified" : "2023-11-07T02:45:40.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4243",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.783",
      "lastModified" : "2023-11-07T02:45:40.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4244",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.830",
      "lastModified" : "2023-11-07T02:45:40.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4245",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.877",
      "lastModified" : "2023-11-07T02:45:41.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4246",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.923",
      "lastModified" : "2023-11-07T02:45:41.367",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4247",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:14.957",
      "lastModified" : "2023-11-07T02:45:41.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4248",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.003",
      "lastModified" : "2023-11-07T02:45:41.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4249",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.067",
      "lastModified" : "2023-11-07T02:45:42.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4250",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.113",
      "lastModified" : "2023-11-07T02:45:42.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4251",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.143",
      "lastModified" : "2023-11-07T02:45:42.557",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4252",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.190",
      "lastModified" : "2023-11-07T02:45:42.793",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4253",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.237",
      "lastModified" : "2023-11-07T02:45:43.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4254",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.283",
      "lastModified" : "2023-11-07T02:45:43.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4255",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.330",
      "lastModified" : "2023-11-07T02:45:43.513",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4256",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.363",
      "lastModified" : "2023-11-07T02:45:43.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4257",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.410",
      "lastModified" : "2023-11-07T02:45:43.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4258",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.457",
      "lastModified" : "2023-11-07T02:45:44.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4259",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.503",
      "lastModified" : "2023-11-07T02:45:44.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4260",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.550",
      "lastModified" : "2023-11-07T02:45:44.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4261",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.597",
      "lastModified" : "2023-11-07T02:45:45.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4262",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.643",
      "lastModified" : "2023-11-07T02:45:45.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4263",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.690",
      "lastModified" : "2023-11-07T02:45:45.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4264",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.720",
      "lastModified" : "2023-11-07T02:45:45.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4265",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.767",
      "lastModified" : "2023-11-07T02:45:45.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4266",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.817",
      "lastModified" : "2023-11-07T02:45:46.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4267",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.863",
      "lastModified" : "2023-11-07T02:45:46.437",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4268",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.910",
      "lastModified" : "2023-11-07T02:45:46.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4269",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:15.957",
      "lastModified" : "2023-11-07T02:45:46.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4270",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.003",
      "lastModified" : "2023-11-07T02:45:47.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4271",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.050",
      "lastModified" : "2023-11-07T02:45:47.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4272",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.097",
      "lastModified" : "2023-11-07T02:45:47.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4273",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.143",
      "lastModified" : "2023-11-07T02:45:47.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4274",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.173",
      "lastModified" : "2023-11-07T02:45:48.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4275",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.220",
      "lastModified" : "2023-11-07T02:45:48.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4276",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.267",
      "lastModified" : "2023-11-07T02:45:48.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4277",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.317",
      "lastModified" : "2023-11-07T02:45:48.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4278",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.363",
      "lastModified" : "2023-11-07T02:45:49.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4279",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.423",
      "lastModified" : "2023-11-07T02:45:49.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4280",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.470",
      "lastModified" : "2023-11-07T02:45:49.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4281",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.517",
      "lastModified" : "2023-11-07T02:45:49.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4282",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.597",
      "lastModified" : "2023-11-07T02:45:50.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4283",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.643",
      "lastModified" : "2023-11-07T02:45:50.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4284",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.690",
      "lastModified" : "2023-11-07T02:45:50.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4285",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.737",
      "lastModified" : "2023-11-07T02:45:50.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4286",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.783",
      "lastModified" : "2023-11-07T02:45:51.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4287",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.830",
      "lastModified" : "2023-11-07T02:45:51.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4288",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.877",
      "lastModified" : "2023-11-07T02:45:51.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4289",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.923",
      "lastModified" : "2023-11-07T02:45:51.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4290",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:16.970",
      "lastModified" : "2023-11-07T02:45:52.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4291",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.017",
      "lastModified" : "2023-11-07T02:45:52.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4292",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.067",
      "lastModified" : "2023-11-07T02:45:52.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4293",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.113",
      "lastModified" : "2023-11-07T02:45:52.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4294",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.160",
      "lastModified" : "2023-11-07T02:45:53.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4295",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.207",
      "lastModified" : "2023-11-07T02:45:53.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4296",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.237",
      "lastModified" : "2023-11-07T02:45:53.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4297",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.283",
      "lastModified" : "2023-11-07T02:45:53.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4298",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.347",
      "lastModified" : "2023-11-07T02:45:54.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4299",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.393",
      "lastModified" : "2023-11-07T02:45:54.250",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4300",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.440",
      "lastModified" : "2023-11-07T02:45:54.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4301",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.487",
      "lastModified" : "2023-11-07T02:45:54.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4302",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.533",
      "lastModified" : "2023-11-07T02:45:55.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4303",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.580",
      "lastModified" : "2023-11-07T02:45:55.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4304",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.627",
      "lastModified" : "2023-11-07T02:45:55.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4305",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.673",
      "lastModified" : "2023-11-07T02:45:55.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4306",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.720",
      "lastModified" : "2023-11-07T02:45:56.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4307",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.753",
      "lastModified" : "2023-11-07T02:45:56.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4308",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.817",
      "lastModified" : "2023-11-07T02:45:56.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4309",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.863",
      "lastModified" : "2023-11-07T02:45:56.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4310",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.910",
      "lastModified" : "2023-11-07T02:45:57.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4311",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.957",
      "lastModified" : "2023-11-07T02:45:57.287",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4312",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:17.987",
      "lastModified" : "2023-11-07T02:45:57.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4313",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.050",
      "lastModified" : "2023-11-07T02:45:57.763",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4314",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.080",
      "lastModified" : "2023-11-07T02:45:58.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4315",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.143",
      "lastModified" : "2023-11-07T02:45:58.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4316",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.190",
      "lastModified" : "2023-11-07T02:45:58.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4317",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.237",
      "lastModified" : "2023-11-07T02:45:58.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4318",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.283",
      "lastModified" : "2023-11-07T02:45:58.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4319",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.330",
      "lastModified" : "2023-11-07T02:45:59.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4320",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.363",
      "lastModified" : "2023-11-07T02:45:59.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4321",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.423",
      "lastModified" : "2023-11-07T02:45:59.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4322",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.457",
      "lastModified" : "2023-11-07T02:45:59.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4323",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.503",
      "lastModified" : "2023-11-07T02:46:00.220",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4324",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.550",
      "lastModified" : "2023-11-07T02:46:00.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4325",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.597",
      "lastModified" : "2023-11-07T02:46:00.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4326",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.643",
      "lastModified" : "2023-11-07T02:46:00.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4327",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.690",
      "lastModified" : "2023-11-07T02:46:01.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4328",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.737",
      "lastModified" : "2023-11-07T02:46:01.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4329",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.767",
      "lastModified" : "2023-11-07T02:46:01.737",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4330",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.817",
      "lastModified" : "2023-11-07T02:46:01.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4331",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.863",
      "lastModified" : "2023-11-07T02:46:02.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4332",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.910",
      "lastModified" : "2023-11-07T02:46:02.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4333",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:18.957",
      "lastModified" : "2023-11-07T02:46:02.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4334",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.003",
      "lastModified" : "2023-11-07T02:46:02.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4335",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.050",
      "lastModified" : "2023-11-07T02:46:03.207",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4336",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.097",
      "lastModified" : "2023-11-07T02:46:03.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4337",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.160",
      "lastModified" : "2023-11-07T02:46:03.700",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4338",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.207",
      "lastModified" : "2023-11-07T02:46:03.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4339",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.253",
      "lastModified" : "2023-11-07T02:46:04.183",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4340",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.300",
      "lastModified" : "2023-11-07T02:46:04.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4341",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.347",
      "lastModified" : "2023-11-07T02:46:04.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4342",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.393",
      "lastModified" : "2023-11-07T02:46:05.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4343",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.440",
      "lastModified" : "2023-11-07T02:46:05.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4344",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.487",
      "lastModified" : "2023-11-07T02:46:05.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4345",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.517",
      "lastModified" : "2023-11-07T02:46:05.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4346",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.567",
      "lastModified" : "2023-11-07T02:46:06.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4347",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.613",
      "lastModified" : "2023-11-07T02:46:06.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4348",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.660",
      "lastModified" : "2023-11-07T02:46:06.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4349",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.707",
      "lastModified" : "2023-11-07T02:46:06.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4350",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.753",
      "lastModified" : "2023-11-07T02:46:07.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4351",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.800",
      "lastModified" : "2023-11-07T02:46:07.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4352",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.830",
      "lastModified" : "2023-11-07T02:46:07.700",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4353",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.893",
      "lastModified" : "2023-11-07T02:46:07.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4354",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.923",
      "lastModified" : "2023-11-07T02:46:08.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4355",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:19.987",
      "lastModified" : "2023-11-07T02:46:08.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4356",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.033",
      "lastModified" : "2023-11-07T02:46:08.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4357",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.080",
      "lastModified" : "2023-11-07T02:46:08.913",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4358",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.127",
      "lastModified" : "2023-11-07T02:46:09.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4359",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.173",
      "lastModified" : "2023-11-07T02:46:09.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4360",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.220",
      "lastModified" : "2023-11-07T02:46:09.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4361",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.267",
      "lastModified" : "2023-11-07T02:46:09.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4362",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.317",
      "lastModified" : "2023-11-07T02:46:10.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4363",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.377",
      "lastModified" : "2023-11-07T02:46:10.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4364",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.423",
      "lastModified" : "2023-11-07T02:46:10.647",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4365",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.470",
      "lastModified" : "2023-11-07T02:46:10.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4366",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.517",
      "lastModified" : "2023-11-07T02:46:11.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4367",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.567",
      "lastModified" : "2023-11-07T02:46:11.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4368",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.613",
      "lastModified" : "2023-11-07T02:46:11.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4369",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.673",
      "lastModified" : "2023-11-07T02:46:11.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4370",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.720",
      "lastModified" : "2023-11-07T02:46:12.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4371",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.753",
      "lastModified" : "2023-11-07T02:46:12.357",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4372",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.800",
      "lastModified" : "2023-11-07T02:46:12.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4373",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.847",
      "lastModified" : "2023-11-07T02:46:12.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4374",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.910",
      "lastModified" : "2023-11-07T02:46:13.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4375",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:20.957",
      "lastModified" : "2023-11-07T02:46:13.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4376",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.003",
      "lastModified" : "2023-11-07T02:46:13.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4377",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.050",
      "lastModified" : "2023-11-07T02:46:13.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4378",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.097",
      "lastModified" : "2023-11-07T02:46:14.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4379",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.143",
      "lastModified" : "2023-11-07T02:46:14.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4380",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.190",
      "lastModified" : "2023-11-07T02:46:14.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4381",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.237",
      "lastModified" : "2023-11-07T02:46:14.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4382",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.267",
      "lastModified" : "2023-11-07T02:46:14.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4383",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.330",
      "lastModified" : "2023-11-07T02:46:15.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4384",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.363",
      "lastModified" : "2023-11-07T02:46:15.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4385",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.410",
      "lastModified" : "2023-11-07T02:46:15.753",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4386",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.470",
      "lastModified" : "2023-11-07T02:46:15.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4387",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.503",
      "lastModified" : "2023-11-07T02:46:16.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4388",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.550",
      "lastModified" : "2023-11-07T02:46:16.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4389",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.613",
      "lastModified" : "2023-11-07T02:46:16.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4390",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.690",
      "lastModified" : "2023-11-07T02:46:16.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4391",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.720",
      "lastModified" : "2023-11-07T02:46:17.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4392",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.767",
      "lastModified" : "2023-11-07T02:46:17.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4393",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.817",
      "lastModified" : "2023-11-07T02:46:17.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4394",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.863",
      "lastModified" : "2023-11-07T02:46:17.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4395",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.910",
      "lastModified" : "2023-11-07T02:46:18.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4396",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.957",
      "lastModified" : "2023-11-07T02:46:18.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4397",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:21.987",
      "lastModified" : "2023-11-07T02:46:18.613",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4398",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.050",
      "lastModified" : "2023-11-07T02:46:18.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4399",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.097",
      "lastModified" : "2023-11-07T02:46:19.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4400",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.143",
      "lastModified" : "2023-11-07T02:46:19.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4401",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.190",
      "lastModified" : "2023-11-07T02:46:19.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4402",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.237",
      "lastModified" : "2023-11-07T02:46:19.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4403",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.283",
      "lastModified" : "2023-11-07T02:46:20.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4404",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.330",
      "lastModified" : "2023-11-07T02:46:20.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4405",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.377",
      "lastModified" : "2023-11-07T02:46:20.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4406",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.423",
      "lastModified" : "2023-11-07T02:46:20.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4407",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.470",
      "lastModified" : "2023-11-07T02:46:21.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4408",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.517",
      "lastModified" : "2023-11-07T02:46:21.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4409",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.550",
      "lastModified" : "2023-11-07T02:46:21.663",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4410",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.597",
      "lastModified" : "2023-11-07T02:46:21.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4411",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.643",
      "lastModified" : "2023-11-07T02:46:22.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4412",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.690",
      "lastModified" : "2023-11-07T02:46:22.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4413",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.737",
      "lastModified" : "2023-11-07T02:46:22.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4414",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.783",
      "lastModified" : "2023-11-07T02:46:22.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4415",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.817",
      "lastModified" : "2023-11-07T02:46:23.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4416",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.863",
      "lastModified" : "2023-11-07T02:46:23.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4417",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.910",
      "lastModified" : "2023-11-07T02:46:23.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4418",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:22.957",
      "lastModified" : "2023-11-07T02:46:23.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4419",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.003",
      "lastModified" : "2023-11-07T02:46:24.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4420",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.050",
      "lastModified" : "2023-11-07T02:46:24.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4421",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.080",
      "lastModified" : "2023-11-07T02:46:24.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4422",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.127",
      "lastModified" : "2023-11-07T02:46:24.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4423",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.173",
      "lastModified" : "2023-11-07T02:46:25.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4424",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.220",
      "lastModified" : "2023-11-07T02:46:25.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4425",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.267",
      "lastModified" : "2023-11-07T02:46:25.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4426",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.317",
      "lastModified" : "2023-11-07T02:46:25.857",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4427",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.347",
      "lastModified" : "2023-11-07T02:46:26.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4428",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.393",
      "lastModified" : "2023-11-07T02:46:26.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4429",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.440",
      "lastModified" : "2023-11-07T02:46:26.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4430",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.503",
      "lastModified" : "2023-11-07T02:46:26.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4431",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.550",
      "lastModified" : "2023-11-07T02:46:27.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4432",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.580",
      "lastModified" : "2023-11-07T02:46:27.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4433",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.627",
      "lastModified" : "2023-11-07T02:46:27.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4434",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.673",
      "lastModified" : "2023-11-07T02:46:27.797",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4435",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.720",
      "lastModified" : "2023-11-07T02:46:28.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4436",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.767",
      "lastModified" : "2023-11-07T02:46:28.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4437",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.817",
      "lastModified" : "2023-11-07T02:46:28.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4438",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.863",
      "lastModified" : "2023-11-07T02:46:28.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4439",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.910",
      "lastModified" : "2023-11-07T02:46:29.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4440",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.940",
      "lastModified" : "2023-11-07T02:46:29.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4441",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:23.987",
      "lastModified" : "2023-11-07T02:46:29.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4442",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.033",
      "lastModified" : "2023-11-07T02:46:29.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4443",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.080",
      "lastModified" : "2023-11-07T02:46:30.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4444",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.127",
      "lastModified" : "2023-11-07T02:46:30.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4445",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.173",
      "lastModified" : "2023-11-07T02:46:30.497",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4446",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.207",
      "lastModified" : "2023-11-07T02:46:30.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4447",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.253",
      "lastModified" : "2023-11-07T02:46:31.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4448",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.300",
      "lastModified" : "2023-11-07T02:46:31.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4449",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.347",
      "lastModified" : "2023-11-07T02:46:31.503",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4450",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.393",
      "lastModified" : "2023-11-07T02:46:31.767",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4451",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.440",
      "lastModified" : "2023-11-07T02:46:32.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4452",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.487",
      "lastModified" : "2023-11-07T02:46:32.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4453",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.533",
      "lastModified" : "2023-11-07T02:46:32.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4454",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.580",
      "lastModified" : "2023-11-07T02:46:32.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4455",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.613",
      "lastModified" : "2023-11-07T02:46:32.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4456",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.660",
      "lastModified" : "2023-11-07T02:46:33.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4457",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.707",
      "lastModified" : "2023-11-07T02:46:33.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4458",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.753",
      "lastModified" : "2023-11-07T02:46:33.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4459",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.800",
      "lastModified" : "2023-11-07T02:46:33.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4460",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.847",
      "lastModified" : "2023-11-07T02:46:34.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4461",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.893",
      "lastModified" : "2023-11-07T02:46:34.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4462",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.940",
      "lastModified" : "2023-11-07T02:46:34.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4463",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:24.987",
      "lastModified" : "2023-11-07T02:46:35.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4464",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.033",
      "lastModified" : "2023-11-07T02:46:35.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4465",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.067",
      "lastModified" : "2023-11-07T02:46:35.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4466",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.113",
      "lastModified" : "2023-11-07T02:46:35.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4467",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.160",
      "lastModified" : "2023-11-07T02:46:36.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4468",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.220",
      "lastModified" : "2023-11-07T02:46:36.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4469",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.253",
      "lastModified" : "2023-11-07T02:46:36.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4470",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.300",
      "lastModified" : "2023-11-07T02:46:36.797",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4471",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.347",
      "lastModified" : "2023-11-07T02:46:37.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4472",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.393",
      "lastModified" : "2023-11-07T02:46:37.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4473",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.440",
      "lastModified" : "2023-11-07T02:46:37.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4474",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.470",
      "lastModified" : "2023-11-07T02:46:37.763",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4475",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.517",
      "lastModified" : "2023-11-07T02:46:37.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4476",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.567",
      "lastModified" : "2023-11-07T02:46:38.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4477",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.613",
      "lastModified" : "2023-11-07T02:46:38.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4478",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.660",
      "lastModified" : "2023-11-07T02:46:38.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4479",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.707",
      "lastModified" : "2023-11-07T02:46:38.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4480",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.737",
      "lastModified" : "2023-11-07T02:46:39.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4481",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.783",
      "lastModified" : "2023-11-07T02:46:39.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4482",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.830",
      "lastModified" : "2023-11-07T02:46:39.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4483",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.877",
      "lastModified" : "2023-11-07T02:46:39.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4484",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.923",
      "lastModified" : "2023-11-07T02:46:40.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4485",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:25.957",
      "lastModified" : "2023-11-07T02:46:40.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4486",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.003",
      "lastModified" : "2023-11-07T02:46:40.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4487",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.050",
      "lastModified" : "2023-11-07T02:46:40.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4488",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.097",
      "lastModified" : "2023-11-07T02:46:41.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4489",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.143",
      "lastModified" : "2023-11-07T02:46:41.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4490",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.190",
      "lastModified" : "2023-11-07T02:46:41.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4491",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.237",
      "lastModified" : "2023-11-07T02:46:41.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4492",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.283",
      "lastModified" : "2023-11-07T02:46:42.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4493",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.330",
      "lastModified" : "2023-11-07T02:46:42.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4494",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.377",
      "lastModified" : "2023-11-07T02:46:42.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4495",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.423",
      "lastModified" : "2023-11-07T02:46:42.857",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4496",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.470",
      "lastModified" : "2023-11-07T02:46:43.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4497",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.517",
      "lastModified" : "2023-11-07T02:46:43.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4498",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.567",
      "lastModified" : "2023-11-07T02:46:43.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4499",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.597",
      "lastModified" : "2023-11-07T02:46:43.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4500",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.643",
      "lastModified" : "2023-11-07T02:46:44.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4501",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.707",
      "lastModified" : "2023-11-07T02:46:44.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4502",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.753",
      "lastModified" : "2023-11-07T02:46:44.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4503",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.800",
      "lastModified" : "2023-11-07T02:46:44.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4504",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.863",
      "lastModified" : "2023-11-07T02:46:45.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4505",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.893",
      "lastModified" : "2023-11-07T02:46:45.287",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4506",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.940",
      "lastModified" : "2023-11-07T02:46:45.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4507",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:26.987",
      "lastModified" : "2023-11-07T02:46:45.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4508",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.033",
      "lastModified" : "2023-11-07T02:46:46.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4509",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.080",
      "lastModified" : "2023-11-07T02:46:46.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4510",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.127",
      "lastModified" : "2023-11-07T02:46:46.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4511",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.173",
      "lastModified" : "2023-11-07T02:46:46.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4512",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.220",
      "lastModified" : "2023-11-07T02:46:47.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4513",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.267",
      "lastModified" : "2023-11-07T02:46:47.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4514",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.317",
      "lastModified" : "2023-11-07T02:46:47.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4515",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.347",
      "lastModified" : "2023-11-07T02:46:47.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4516",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.410",
      "lastModified" : "2023-11-07T02:46:48.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4517",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.457",
      "lastModified" : "2023-11-07T02:46:48.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4518",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.503",
      "lastModified" : "2023-11-07T02:46:48.503",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4519",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.550",
      "lastModified" : "2023-11-07T02:46:48.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4520",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.597",
      "lastModified" : "2023-11-07T02:46:48.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4521",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.643",
      "lastModified" : "2023-11-07T02:46:49.223",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4522",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.690",
      "lastModified" : "2023-11-07T02:46:49.477",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4523",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.737",
      "lastModified" : "2023-11-07T02:46:49.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4524",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.783",
      "lastModified" : "2023-11-07T02:46:50.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4525",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.830",
      "lastModified" : "2023-11-07T02:46:50.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4526",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.877",
      "lastModified" : "2023-11-07T02:46:50.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4527",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.923",
      "lastModified" : "2023-11-07T02:46:50.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4528",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:27.970",
      "lastModified" : "2023-11-07T02:46:51.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4529",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.017",
      "lastModified" : "2023-11-07T02:46:51.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4530",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.050",
      "lastModified" : "2023-11-07T02:46:51.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4531",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.097",
      "lastModified" : "2023-11-07T02:46:51.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4532",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.160",
      "lastModified" : "2023-11-07T02:46:52.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4533",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.190",
      "lastModified" : "2023-11-07T02:46:52.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4534",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.253",
      "lastModified" : "2023-11-07T02:46:52.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4535",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.300",
      "lastModified" : "2023-11-07T02:46:52.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4536",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.347",
      "lastModified" : "2023-11-07T02:46:53.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4537",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.393",
      "lastModified" : "2023-11-07T02:46:53.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4538",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.423",
      "lastModified" : "2023-11-07T02:46:53.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4539",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.470",
      "lastModified" : "2023-11-07T02:46:53.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4540",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.517",
      "lastModified" : "2023-11-07T02:46:54.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4541",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.567",
      "lastModified" : "2023-11-07T02:46:54.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4542",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.613",
      "lastModified" : "2023-11-07T02:46:54.497",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4543",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.660",
      "lastModified" : "2023-11-07T02:46:54.763",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4544",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.707",
      "lastModified" : "2023-11-07T02:46:55.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4545",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.737",
      "lastModified" : "2023-11-07T02:46:55.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4546",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.783",
      "lastModified" : "2023-11-07T02:46:55.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4547",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.830",
      "lastModified" : "2023-11-07T02:46:55.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4548",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.893",
      "lastModified" : "2023-11-07T02:46:55.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4549",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:28.957",
      "lastModified" : "2023-11-07T02:46:56.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4550",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.003",
      "lastModified" : "2023-11-07T02:46:56.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4551",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.050",
      "lastModified" : "2023-11-07T02:46:56.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4552",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.080",
      "lastModified" : "2023-11-07T02:46:57.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4553",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.127",
      "lastModified" : "2023-11-07T02:46:57.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4554",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.173",
      "lastModified" : "2023-11-07T02:46:57.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4555",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.220",
      "lastModified" : "2023-11-07T02:46:57.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4556",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.267",
      "lastModified" : "2023-11-07T02:46:57.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4557",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.317",
      "lastModified" : "2023-11-07T02:46:58.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4558",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.363",
      "lastModified" : "2023-11-07T02:46:58.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4559",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.410",
      "lastModified" : "2023-11-07T02:46:58.700",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4560",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.457",
      "lastModified" : "2023-11-07T02:46:58.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4561",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.487",
      "lastModified" : "2023-11-07T02:46:59.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4562",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.533",
      "lastModified" : "2023-11-07T02:46:59.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4563",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.580",
      "lastModified" : "2023-11-07T02:46:59.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4564",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.627",
      "lastModified" : "2023-11-07T02:46:59.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4565",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.673",
      "lastModified" : "2023-11-07T02:47:00.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4566",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.707",
      "lastModified" : "2023-11-07T02:47:00.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4567",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.753",
      "lastModified" : "2023-11-07T02:47:00.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4568",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.800",
      "lastModified" : "2023-11-07T02:47:00.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4569",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.847",
      "lastModified" : "2023-11-07T02:47:01.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4570",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.893",
      "lastModified" : "2023-11-07T02:47:01.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4571",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.940",
      "lastModified" : "2023-11-07T02:47:01.627",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4572",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:29.987",
      "lastModified" : "2023-11-07T02:47:01.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4573",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.017",
      "lastModified" : "2023-11-07T02:47:02.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4574",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.067",
      "lastModified" : "2023-11-07T02:47:02.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4575",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.113",
      "lastModified" : "2023-11-07T02:47:02.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4576",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.160",
      "lastModified" : "2023-11-07T02:47:02.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4577",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.207",
      "lastModified" : "2023-11-07T02:47:03.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4578",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.253",
      "lastModified" : "2023-11-07T02:47:03.353",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4579",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.300",
      "lastModified" : "2023-11-07T02:47:03.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4580",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.363",
      "lastModified" : "2023-11-07T02:47:03.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4581",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.410",
      "lastModified" : "2023-11-07T02:47:04.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4582",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.457",
      "lastModified" : "2023-11-07T02:47:04.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4583",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.503",
      "lastModified" : "2023-11-07T02:47:04.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4584",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.550",
      "lastModified" : "2023-11-07T02:47:05.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4585",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.597",
      "lastModified" : "2023-11-07T02:47:05.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4586",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.643",
      "lastModified" : "2023-11-07T02:47:05.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4587",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.690",
      "lastModified" : "2023-11-07T02:47:05.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4588",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.737",
      "lastModified" : "2023-11-07T02:47:06.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4589",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.783",
      "lastModified" : "2023-11-07T02:47:06.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4590",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.817",
      "lastModified" : "2023-11-07T02:47:06.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4591",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.877",
      "lastModified" : "2023-11-07T02:47:06.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4592",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.927",
      "lastModified" : "2023-11-07T02:47:07.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4593",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:30.970",
      "lastModified" : "2023-11-07T02:47:07.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4594",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.017",
      "lastModified" : "2023-11-07T02:47:07.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4595",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.067",
      "lastModified" : "2023-11-07T02:47:07.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4596",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.097",
      "lastModified" : "2023-11-07T02:47:08.097",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4597",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.143",
      "lastModified" : "2023-11-07T02:47:08.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4598",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.190",
      "lastModified" : "2023-11-07T02:47:08.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4599",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.237",
      "lastModified" : "2023-11-07T02:47:08.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4600",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.283",
      "lastModified" : "2023-11-07T02:47:09.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4601",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.330",
      "lastModified" : "2023-11-07T02:47:09.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4602",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.423",
      "lastModified" : "2023-11-07T02:47:09.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4603",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.470",
      "lastModified" : "2023-11-07T02:47:09.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4604",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.503",
      "lastModified" : "2023-11-07T02:47:10.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4605",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.567",
      "lastModified" : "2023-11-07T02:47:10.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4606",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.597",
      "lastModified" : "2023-11-07T02:47:10.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4607",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.643",
      "lastModified" : "2023-11-07T02:47:10.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4608",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.690",
      "lastModified" : "2023-11-07T02:47:11.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4609",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.737",
      "lastModified" : "2023-11-07T02:47:11.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4610",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.800",
      "lastModified" : "2023-11-07T02:47:11.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4611",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.847",
      "lastModified" : "2023-11-07T02:47:11.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4612",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.893",
      "lastModified" : "2023-11-07T02:47:12.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4613",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.940",
      "lastModified" : "2023-11-07T02:47:12.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4614",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:31.987",
      "lastModified" : "2023-11-07T02:47:12.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4615",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.017",
      "lastModified" : "2023-11-07T02:47:12.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4616",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.067",
      "lastModified" : "2023-11-07T02:47:13.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4617",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.113",
      "lastModified" : "2023-11-07T02:47:13.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4618",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.160",
      "lastModified" : "2023-11-07T02:47:13.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4619",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.207",
      "lastModified" : "2023-11-07T02:47:13.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4620",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.253",
      "lastModified" : "2023-11-07T02:47:14.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4621",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.300",
      "lastModified" : "2023-11-07T02:47:14.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4622",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.347",
      "lastModified" : "2023-11-07T02:47:14.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4623",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.393",
      "lastModified" : "2023-11-07T02:47:15.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4624",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.440",
      "lastModified" : "2023-11-07T02:47:15.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4625",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.470",
      "lastModified" : "2023-11-07T02:47:15.523",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4626",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.517",
      "lastModified" : "2023-11-07T02:47:15.807",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4627",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.567",
      "lastModified" : "2023-11-07T02:47:16.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4628",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.613",
      "lastModified" : "2023-11-07T02:47:16.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4629",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.660",
      "lastModified" : "2023-11-07T02:47:16.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4630",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.707",
      "lastModified" : "2023-11-07T02:47:16.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4631",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.753",
      "lastModified" : "2023-11-07T02:47:17.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4632",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.800",
      "lastModified" : "2023-11-07T02:47:17.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4633",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.847",
      "lastModified" : "2023-11-07T02:47:17.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4634",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.893",
      "lastModified" : "2023-11-07T02:47:17.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4635",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.940",
      "lastModified" : "2023-11-07T02:47:18.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4636",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:32.987",
      "lastModified" : "2023-11-07T02:47:18.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4637",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.033",
      "lastModified" : "2023-11-07T02:47:18.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4638",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.080",
      "lastModified" : "2023-11-07T02:47:18.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4639",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.127",
      "lastModified" : "2023-11-07T02:47:19.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4640",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.160",
      "lastModified" : "2023-11-07T02:47:19.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4641",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.207",
      "lastModified" : "2023-11-07T02:47:19.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4642",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.253",
      "lastModified" : "2023-11-07T02:47:19.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4643",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.300",
      "lastModified" : "2023-11-07T02:47:20.183",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4644",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.347",
      "lastModified" : "2023-11-07T02:47:20.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4645",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.393",
      "lastModified" : "2023-11-07T02:47:20.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4646",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.427",
      "lastModified" : "2023-11-07T02:47:20.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4647",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.470",
      "lastModified" : "2023-11-07T02:47:21.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4648",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.517",
      "lastModified" : "2023-11-07T02:47:21.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4649",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.567",
      "lastModified" : "2023-11-07T02:47:21.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4650",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.613",
      "lastModified" : "2023-11-07T02:47:21.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4651",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.660",
      "lastModified" : "2023-11-07T02:47:22.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4652",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.707",
      "lastModified" : "2023-11-07T02:47:22.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4653",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.753",
      "lastModified" : "2023-11-07T02:47:22.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4654",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.800",
      "lastModified" : "2023-11-07T02:47:22.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4655",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.830",
      "lastModified" : "2023-11-07T02:47:23.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4656",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.877",
      "lastModified" : "2023-11-07T02:47:23.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4657",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.927",
      "lastModified" : "2023-11-07T02:47:23.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4658",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:33.970",
      "lastModified" : "2023-11-07T02:47:23.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4659",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.017",
      "lastModified" : "2023-11-07T02:47:24.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4660",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.067",
      "lastModified" : "2023-11-07T02:47:24.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4661",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.113",
      "lastModified" : "2023-11-07T02:47:24.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4662",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.160",
      "lastModified" : "2023-11-07T02:47:24.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4663",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.207",
      "lastModified" : "2023-11-07T02:47:25.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4664",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.237",
      "lastModified" : "2023-11-07T02:47:25.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4665",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.300",
      "lastModified" : "2023-11-07T02:47:25.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4666",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.330",
      "lastModified" : "2023-11-07T02:47:25.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4667",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.377",
      "lastModified" : "2023-11-07T02:47:26.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4668",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.427",
      "lastModified" : "2023-11-07T02:47:26.357",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4669",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.470",
      "lastModified" : "2023-11-07T02:47:26.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4670",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.533",
      "lastModified" : "2023-11-07T02:47:26.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4671",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.580",
      "lastModified" : "2023-11-07T02:47:27.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4672",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.627",
      "lastModified" : "2023-11-07T02:47:27.407",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4673",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.677",
      "lastModified" : "2023-11-07T02:47:27.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4674",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.720",
      "lastModified" : "2023-11-07T02:47:27.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4675",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.753",
      "lastModified" : "2023-11-07T02:47:28.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4676",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.800",
      "lastModified" : "2023-11-07T02:47:28.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4677",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.847",
      "lastModified" : "2023-11-07T02:47:28.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4678",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.893",
      "lastModified" : "2023-11-07T02:47:28.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4679",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.940",
      "lastModified" : "2023-11-07T02:47:29.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4680",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:34.987",
      "lastModified" : "2023-11-07T02:47:29.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4681",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.033",
      "lastModified" : "2023-11-07T02:47:29.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4682",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.080",
      "lastModified" : "2023-11-07T02:47:29.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4683",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.127",
      "lastModified" : "2023-11-07T02:47:30.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4684",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.177",
      "lastModified" : "2023-11-07T02:47:30.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4685",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.207",
      "lastModified" : "2023-11-07T02:47:30.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4686",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.253",
      "lastModified" : "2023-11-07T02:47:30.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4687",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.300",
      "lastModified" : "2023-11-07T02:47:31.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4688",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.347",
      "lastModified" : "2023-11-07T02:47:31.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4689",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.393",
      "lastModified" : "2023-11-07T02:47:31.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4690",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.427",
      "lastModified" : "2023-11-07T02:47:31.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4691",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.470",
      "lastModified" : "2023-11-07T02:47:32.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4692",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.517",
      "lastModified" : "2023-11-07T02:47:32.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4693",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.567",
      "lastModified" : "2023-11-07T02:47:32.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4694",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.613",
      "lastModified" : "2023-11-07T02:47:32.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4695",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.660",
      "lastModified" : "2023-11-07T02:47:33.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4696",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.707",
      "lastModified" : "2023-11-07T02:47:33.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4697",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.753",
      "lastModified" : "2023-11-07T02:47:33.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4698",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.800",
      "lastModified" : "2023-11-07T02:47:33.753",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4699",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.847",
      "lastModified" : "2023-11-07T02:47:33.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4700",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.893",
      "lastModified" : "2023-11-07T02:47:34.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4701",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.927",
      "lastModified" : "2023-11-07T02:47:34.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4702",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:35.973",
      "lastModified" : "2023-11-07T02:47:34.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4703",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.017",
      "lastModified" : "2023-11-07T02:47:35.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4704",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.067",
      "lastModified" : "2023-11-07T02:47:35.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4705",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.113",
      "lastModified" : "2023-11-07T02:47:35.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4706",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.160",
      "lastModified" : "2023-11-07T02:47:35.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4707",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.207",
      "lastModified" : "2023-11-07T02:47:36.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4708",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.237",
      "lastModified" : "2023-11-07T02:47:36.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4709",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.283",
      "lastModified" : "2023-11-07T02:47:36.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4710",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.330",
      "lastModified" : "2023-11-07T02:47:36.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4711",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.377",
      "lastModified" : "2023-11-07T02:47:37.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4712",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.427",
      "lastModified" : "2023-11-07T02:47:37.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4713",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.473",
      "lastModified" : "2023-11-07T02:47:37.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4714",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.517",
      "lastModified" : "2023-11-07T02:47:37.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4715",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.567",
      "lastModified" : "2023-11-07T02:47:38.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4716",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.597",
      "lastModified" : "2023-11-07T02:47:38.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4717",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.660",
      "lastModified" : "2023-11-07T02:47:38.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4718",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.707",
      "lastModified" : "2023-11-07T02:47:38.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4719",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.753",
      "lastModified" : "2023-11-07T02:47:39.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4720",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.800",
      "lastModified" : "2023-11-07T02:47:39.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4721",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.847",
      "lastModified" : "2023-11-07T02:47:39.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4722",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.910",
      "lastModified" : "2023-11-07T02:47:39.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4723",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:36.957",
      "lastModified" : "2023-11-07T02:47:40.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4724",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.003",
      "lastModified" : "2023-11-07T02:47:40.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4725",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.050",
      "lastModified" : "2023-11-07T02:47:40.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4726",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.097",
      "lastModified" : "2023-11-07T02:47:40.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4727",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.143",
      "lastModified" : "2023-11-07T02:47:41.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4728",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.190",
      "lastModified" : "2023-11-07T02:47:41.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4729",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.237",
      "lastModified" : "2023-11-07T02:47:41.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4730",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.283",
      "lastModified" : "2023-11-07T02:47:41.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4731",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.330",
      "lastModified" : "2023-11-07T02:47:42.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4732",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.377",
      "lastModified" : "2023-11-07T02:47:42.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4733",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.427",
      "lastModified" : "2023-11-07T02:47:42.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4734",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.457",
      "lastModified" : "2023-11-07T02:47:42.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4735",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.517",
      "lastModified" : "2023-11-07T02:47:43.067",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4736",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.567",
      "lastModified" : "2023-11-07T02:47:43.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4737",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.597",
      "lastModified" : "2023-11-07T02:47:43.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4738",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.643",
      "lastModified" : "2023-11-07T02:47:43.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4739",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.690",
      "lastModified" : "2023-11-07T02:47:44.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4740",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.737",
      "lastModified" : "2023-11-07T02:47:44.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4741",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.783",
      "lastModified" : "2023-11-07T02:47:44.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4742",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.830",
      "lastModified" : "2023-11-07T02:47:44.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4743",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.877",
      "lastModified" : "2023-11-07T02:47:45.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4744",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.927",
      "lastModified" : "2023-11-07T02:47:45.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4745",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:37.973",
      "lastModified" : "2023-11-07T02:47:45.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4746",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.017",
      "lastModified" : "2023-11-07T02:47:45.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4747",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.067",
      "lastModified" : "2023-11-07T02:47:46.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4748",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.113",
      "lastModified" : "2023-11-07T02:47:46.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4749",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.160",
      "lastModified" : "2023-11-07T02:47:46.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4750",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.207",
      "lastModified" : "2023-11-07T02:47:46.833",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4751",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.253",
      "lastModified" : "2023-11-07T02:47:47.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4752",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.283",
      "lastModified" : "2023-11-07T02:47:47.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4753",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.330",
      "lastModified" : "2023-11-07T02:47:47.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4754",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.377",
      "lastModified" : "2023-11-07T02:47:47.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4755",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.427",
      "lastModified" : "2023-11-07T02:47:48.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4756",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.473",
      "lastModified" : "2023-11-07T02:47:48.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4757",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.517",
      "lastModified" : "2023-11-07T02:47:48.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4758",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.567",
      "lastModified" : "2023-11-07T02:47:48.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4759",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.613",
      "lastModified" : "2023-11-07T02:47:49.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4760",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.660",
      "lastModified" : "2023-11-07T02:47:49.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4761",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.707",
      "lastModified" : "2023-11-07T02:47:49.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4762",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.753",
      "lastModified" : "2023-11-07T02:47:50.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4763",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.800",
      "lastModified" : "2023-11-07T02:47:50.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4764",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.830",
      "lastModified" : "2023-11-07T02:47:50.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4765",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.877",
      "lastModified" : "2023-11-07T02:47:50.787",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4766",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.927",
      "lastModified" : "2023-11-07T02:47:51.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4767",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:38.973",
      "lastModified" : "2023-11-07T02:47:51.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4768",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.017",
      "lastModified" : "2023-11-07T02:47:51.497",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4769",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.067",
      "lastModified" : "2023-11-07T02:47:51.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4770",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.113",
      "lastModified" : "2023-11-07T02:47:51.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4771",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.143",
      "lastModified" : "2023-11-07T02:47:52.220",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4772",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.190",
      "lastModified" : "2023-11-07T02:47:52.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4773",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.237",
      "lastModified" : "2023-11-07T02:47:52.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4774",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.283",
      "lastModified" : "2023-11-07T02:47:52.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4775",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.330",
      "lastModified" : "2023-11-07T02:47:53.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4776",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.363",
      "lastModified" : "2023-11-07T02:47:53.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4777",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.427",
      "lastModified" : "2023-11-07T02:47:53.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4778",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.457",
      "lastModified" : "2023-11-07T02:47:53.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4779",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.503",
      "lastModified" : "2023-11-07T02:47:54.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4780",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.550",
      "lastModified" : "2023-11-07T02:47:54.387",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4781",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.597",
      "lastModified" : "2023-11-07T02:47:54.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4782",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.643",
      "lastModified" : "2023-11-07T02:47:54.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4783",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.690",
      "lastModified" : "2023-11-07T02:47:55.173",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4784",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.737",
      "lastModified" : "2023-11-07T02:47:55.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4785",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.783",
      "lastModified" : "2023-11-07T02:47:55.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4786",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.830",
      "lastModified" : "2023-11-07T02:47:55.913",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4787",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.863",
      "lastModified" : "2023-11-07T02:47:56.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4788",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.910",
      "lastModified" : "2023-11-07T02:47:56.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4789",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:39.957",
      "lastModified" : "2023-11-07T02:47:56.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4790",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.017",
      "lastModified" : "2023-11-07T02:47:56.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4791",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.050",
      "lastModified" : "2023-11-07T02:47:57.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4792",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.097",
      "lastModified" : "2023-11-07T02:47:57.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4793",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.143",
      "lastModified" : "2023-11-07T02:47:57.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4794",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.190",
      "lastModified" : "2023-11-07T02:47:57.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4795",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.237",
      "lastModified" : "2023-11-07T02:47:58.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4796",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.283",
      "lastModified" : "2023-11-07T02:47:58.387",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4797",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.330",
      "lastModified" : "2023-11-07T02:47:58.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4798",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.363",
      "lastModified" : "2023-11-07T02:47:58.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4799",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.427",
      "lastModified" : "2023-11-07T02:47:59.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4800",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.457",
      "lastModified" : "2023-11-07T02:47:59.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4801",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.503",
      "lastModified" : "2023-11-07T02:47:59.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4802",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.550",
      "lastModified" : "2023-11-07T02:47:59.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4803",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.597",
      "lastModified" : "2023-11-07T02:48:00.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4804",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.643",
      "lastModified" : "2023-11-07T02:48:00.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4805",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.690",
      "lastModified" : "2023-11-07T02:48:00.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4806",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.737",
      "lastModified" : "2023-11-07T02:48:00.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4807",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.783",
      "lastModified" : "2023-11-07T02:48:01.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4808",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.830",
      "lastModified" : "2023-11-07T02:48:01.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4809",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.877",
      "lastModified" : "2023-11-07T02:48:01.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4810",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.927",
      "lastModified" : "2023-11-07T02:48:01.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4811",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:40.973",
      "lastModified" : "2023-11-07T02:48:02.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4812",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.020",
      "lastModified" : "2023-11-07T02:48:02.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4813",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.067",
      "lastModified" : "2023-11-07T02:48:02.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4814",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.113",
      "lastModified" : "2023-11-07T02:48:02.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4815",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.160",
      "lastModified" : "2023-11-07T02:48:03.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4816",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.207",
      "lastModified" : "2023-11-07T02:48:03.287",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4817",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.253",
      "lastModified" : "2023-11-07T02:48:03.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4818",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.300",
      "lastModified" : "2023-11-07T02:48:03.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4819",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.347",
      "lastModified" : "2023-11-07T02:48:04.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4820",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.393",
      "lastModified" : "2023-11-07T02:48:04.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4821",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.440",
      "lastModified" : "2023-11-07T02:48:04.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4822",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.487",
      "lastModified" : "2023-11-07T02:48:05.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4823",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.533",
      "lastModified" : "2023-11-07T02:48:05.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4824",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.567",
      "lastModified" : "2023-11-07T02:48:05.513",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4825",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.613",
      "lastModified" : "2023-11-07T02:48:05.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4826",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.660",
      "lastModified" : "2023-11-07T02:48:06.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4827",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.723",
      "lastModified" : "2023-11-07T02:48:06.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4828",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.770",
      "lastModified" : "2023-11-07T02:48:06.513",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4829",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.817",
      "lastModified" : "2023-11-07T02:48:06.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4830",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.847",
      "lastModified" : "2023-11-07T02:48:07.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4831",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.893",
      "lastModified" : "2023-11-07T02:48:07.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4832",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:41.957",
      "lastModified" : "2023-11-07T02:48:07.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4833",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.003",
      "lastModified" : "2023-11-07T02:48:07.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4834",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.050",
      "lastModified" : "2023-11-07T02:48:08.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4835",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.097",
      "lastModified" : "2023-11-07T02:48:08.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4836",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.143",
      "lastModified" : "2023-11-07T02:48:08.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4837",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.207",
      "lastModified" : "2023-11-07T02:48:08.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4838",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.253",
      "lastModified" : "2023-11-07T02:48:09.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4839",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.300",
      "lastModified" : "2023-11-07T02:48:09.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4840",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.330",
      "lastModified" : "2023-11-07T02:48:09.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4841",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.377",
      "lastModified" : "2023-11-07T02:48:09.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4842",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.427",
      "lastModified" : "2023-11-07T02:48:10.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4843",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.473",
      "lastModified" : "2023-11-07T02:48:10.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4844",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.520",
      "lastModified" : "2023-11-07T02:48:10.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4845",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.567",
      "lastModified" : "2023-11-07T02:48:10.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4846",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.597",
      "lastModified" : "2023-11-07T02:48:11.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4847",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.677",
      "lastModified" : "2023-11-07T02:48:11.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4848",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.723",
      "lastModified" : "2023-11-07T02:48:11.623",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4849",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.770",
      "lastModified" : "2023-11-07T02:48:11.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4850",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.817",
      "lastModified" : "2023-11-07T02:48:12.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4851",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.863",
      "lastModified" : "2023-11-07T02:48:12.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4852",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.910",
      "lastModified" : "2023-11-07T02:48:12.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4853",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:42.957",
      "lastModified" : "2023-11-07T02:48:12.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4854",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.003",
      "lastModified" : "2023-11-07T02:48:13.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4855",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.033",
      "lastModified" : "2023-11-07T02:48:13.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4856",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.080",
      "lastModified" : "2023-11-07T02:48:13.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4857",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.127",
      "lastModified" : "2023-11-07T02:48:13.857",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4858",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.177",
      "lastModified" : "2023-11-07T02:48:14.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4859",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.223",
      "lastModified" : "2023-11-07T02:48:14.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4860",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.270",
      "lastModified" : "2023-11-07T02:48:14.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4861",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.317",
      "lastModified" : "2023-11-07T02:48:14.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4862",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.363",
      "lastModified" : "2023-11-07T02:48:15.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4863",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.410",
      "lastModified" : "2023-11-07T02:48:15.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4864",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.457",
      "lastModified" : "2023-11-07T02:48:15.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4865",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.503",
      "lastModified" : "2023-11-07T02:48:15.833",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4866",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.550",
      "lastModified" : "2023-11-07T02:48:16.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4867",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.580",
      "lastModified" : "2023-11-07T02:48:16.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4868",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.627",
      "lastModified" : "2023-11-07T02:48:16.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4869",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.677",
      "lastModified" : "2023-11-07T02:48:16.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4870",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.723",
      "lastModified" : "2023-11-07T02:48:17.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4871",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.770",
      "lastModified" : "2023-11-07T02:48:17.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4872",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.817",
      "lastModified" : "2023-11-07T02:48:17.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4873",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.863",
      "lastModified" : "2023-11-07T02:48:17.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4874",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.910",
      "lastModified" : "2023-11-07T02:48:18.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4875",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:43.957",
      "lastModified" : "2023-11-07T02:48:18.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4876",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.003",
      "lastModified" : "2023-11-07T02:48:18.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4877",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.050",
      "lastModified" : "2023-11-07T02:48:18.787",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4878",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.097",
      "lastModified" : "2023-11-07T02:48:19.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4879",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.143",
      "lastModified" : "2023-11-07T02:48:19.243",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4880",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.177",
      "lastModified" : "2023-11-07T02:48:19.517",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4881",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.223",
      "lastModified" : "2023-11-07T02:48:19.970",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4882",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.270",
      "lastModified" : "2023-11-07T02:48:20.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4883",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.317",
      "lastModified" : "2023-11-07T02:48:20.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4884",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.363",
      "lastModified" : "2023-11-07T02:48:20.710",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4885",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.393",
      "lastModified" : "2023-11-07T02:48:20.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4886",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.440",
      "lastModified" : "2023-11-07T02:48:21.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4887",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.487",
      "lastModified" : "2023-11-07T02:48:21.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4888",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.533",
      "lastModified" : "2023-11-07T02:48:21.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4889",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.580",
      "lastModified" : "2023-11-07T02:48:21.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4890",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.627",
      "lastModified" : "2023-11-07T02:48:22.153",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4891",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.677",
      "lastModified" : "2023-11-07T02:48:22.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4892",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.707",
      "lastModified" : "2023-11-07T02:48:22.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4893",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.753",
      "lastModified" : "2023-11-07T02:48:22.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4894",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-16T14:29:44.800",
      "lastModified" : "2023-11-07T02:48:23.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14384",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-03-16T20:29:00.290",
      "lastModified" : "2024-11-21T03:12:40.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 16.3.20 de Dell Storage Manager, el servicio EMConfigMigration se ha visto afectado por una vulnerabilidad de salto de directorio. Un usuario malicioso remoto podría explotar esta vulnerabilidad para leer archivos no autorizados proporcionando cadenas especialmente manipuladas en los parámetros de entrada de la aplicación. Un usuario malicioso no puede borrar o modificar archivos mediante esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.20",
            "matchCriteriaId" : "DC143803-C9B4-4054-B171-9FBD2E77209B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103467",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8013",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2018-03-16T20:29:00.350",
      "lastModified" : "2024-11-21T03:33:09.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: \"Apollo System Test\", \"emc.dpa.agent.logon\" and \"emc.dpa.metrics.logon\". An attacker with knowledge of the password could potentially use these accounts via REST APIs to gain unauthorized access to EMC Data Protection Advisor (including potentially access with administrative privileges)."
      }, {
        "lang" : "es",
        "value" : "Las versiones 6.3.x anteriores al patch 67 y las versiones 6.4.x anteriores a patch 130 de EMC Data Protection Advisor contienen cuentas no documentadas con contraseñas embebidas y varios privilegios. Las cuentas afectadas son: \"Apollo System Test\", \"emc.dpa.agent.logon\" y \"emc.dpa.metrics.logon\". Un atacante que conozca las contraseñas podría emplear estas cuentas mediante API REST para obtener acceso no autorizado a EMC Data Protection Advisor (incluyendo el potencial acceso con privilegios administrativos)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:data_protection_advisor:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF0EB8B-2808-4853-BF33-F8BA3115E772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:data_protection_advisor:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487958A0-C038-47D0-A977-15A0F63F1626"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/36",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100846",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039370",
        "source" : "security_alert@emc.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Sep/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11074",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.227",
      "lastModified" : "2024-11-21T03:07:03.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is an obsolete set/reset ssid hotlist API."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, hay una API hotlist ssid set/reset obsoleta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=f5ae7b35c90f14b7e66b3a91d4fb247563a8a22b",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=f5ae7b35c90f14b7e66b3a91d4fb247563a8a22b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11082",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.303",
      "lastModified" : "2024-11-21T03:07:04.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in a firmware loading routine, a buffer overflow could potentially occur if multiple user space threads try to update the WLAN firmware file through sysfs."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, debido a una condición de carrera en una rutina de carga de firmware, podría ocurrir un desbordamiento de búfer si múltiples hilos de espacio de usuario intentan actualizar el archivo de firmware WLAN mediante sysfs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2d4f8cd8d11f8fb1491a20d7e316cc0fd03eeb59",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2d4f8cd8d11f8fb1491a20d7e316cc0fd03eeb59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14887",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.350",
      "lastModified" : "2024-11-21T03:13:42.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of messages of type eWNI_SME_MODIFY_ADDITIONAL_IES, an integer overflow leading to heap buffer overflow may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en el procesamiento de mensajes de tipo eWNI_SME_MODIFY_ADDITIONAL_IES, puede ocurrir un desbordamiento de enteros que conduce a un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4ce28e7c85f89e2c3555ec840b6adda47bd5dab0",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4ce28e7c85f89e2c3555ec840b6adda47bd5dab0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14889",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.397",
      "lastModified" : "2024-11-21T03:13:42.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, debido a la falta de comprobación de rango en el índice de arrays en el grupo de descriptores WMI, podría ocurrir la ejecución de direcciones arbitrarias en el manipulador de finalización de proceso mgmt."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e11e9dc8298dc0632050cacce96e9652d017f755",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e11e9dc8298dc0632050cacce96e9652d017f755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15814",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.460",
      "lastModified" : "2024-11-21T03:15:17.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in msm_flash_subdev_do_ioctl of drivers/media/platform/msm/camera_v2/sensor/flash/msm_flash.c, there is a possible out of bounds read if flash_data.cfg_type is CFG_FLASH_INIT due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En Android para MSM, Firefox OS para MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en msm_flash_subdev_do_ioctl en drivers/media/platform/msm/camera_v2/sensor/flash/msm_flash.c, hay una posible lectura fuera de límites si flash_data.cfg_type es CFG_FLASH_INIT debido a la validación de entradas incorrecta. Esto podría llevar a una divulgación de información local con privilegios de ejecución System necesarios. No se necesita interacción del usuario para explotarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15830",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.507",
      "lastModified" : "2024-11-21T03:15:18.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper ch_list array index initialization in function sme_set_plm_request() causes potential buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la inicialización del índice de arrays ch_list en la función sme_set_plm_request() provoca un potencial desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=8a7a2a9c5d203e3395811963061c79d3bc257ebe",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=8a7a2a9c5d203e3395811963061c79d3bc257ebe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15831",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.570",
      "lastModified" : "2024-11-21T03:15:18.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end_indication_event_handler(), there is no input validation check on a event_info value coming from firmware, which can cause an integer overflow and then leads to potential heap overwrite."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, en la función wma_ndp_end_indication_event_handler() no hay comprobación de validación de entradas en un valor event_info proveniente del firmware, lo que podría conducir a un desbordamiento de enteros y a una potencial sobrescritura de memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=31e6a657320e4299c659e3d57d38a89afe8c1ce1",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=31e6a657320e4299c659e3d57d38a89afe8c1ce1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15833",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.617",
      "lastModified" : "2024-11-21T03:15:18.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in update_userspace_power() function in power leads to information exposure."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una desreferencia de puntero no fiable en la función update_userspace_power() en power puede provocar una exposición de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=51ce6aec73d80e1f1fcc9c7fa71e9c2fcbdbc0fd",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=51ce6aec73d80e1f1fcc9c7fa71e9c2fcbdbc0fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15834",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.663",
      "lastModified" : "2024-11-21T03:15:18.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, race condition in diag_dbgfs_read_dcistats(), while accessing diag_dbgfs_dci_data_index, causes potential heap overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, una condición de carrera en diag_dbgfs_read_dcistats() al acceder a diag_dbgfs_dci_data_index puede provocar un desbordamiento de memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=2e1b54e38f1516e70d9f6581c4f1ee935effb903",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=2e1b54e38f1516e70d9f6581c4f1ee935effb903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18050",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.727",
      "lastModified" : "2024-11-21T03:19:15.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which is received from firmware, leads to potential buffer overwrite and out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para vdev_map en wma_tbttoffset_update_event_handler(), la cual se recibe desde el firmware, puede conducir a una potencial sobrescritura de búfer y lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=63b57442d65dfdb4b4634ff32059b1bca8c72fb7",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=63b57442d65dfdb4b4634ff32059b1bca8c72fb7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18051",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.773",
      "lastModified" : "2024-11-21T03:19:15.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event->vdev_id in wma_rcpi_event_handler(), which is received from firmware, leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para event->vdev_id en wma_rcpi_event_handler(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=38fba6a9f6ca3c7bf0c4c1bd84fa2b89fbcaeb93",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=38fba6a9f6ca3c7bf0c4c1bd84fa2b89fbcaeb93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18052",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.833",
      "lastModified" : "2024-11-21T03:19:15.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmpl_params->num_reports, param_buf->desc_ids and param_buf->status in wma_mgmt_tx_bundle_completion_handler(), which is received from firmware, leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para cmpl_params->num_reports, param_buf->desc_ids y param_buf->status en wma_mgmt_tx_bundle_completion_handler(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=c04c4870bd86a5f878553d7acf207388f3d6c3bd",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=c04c4870bd86a5f878553d7acf207388f3d6c3bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18053",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.880",
      "lastModified" : "2024-11-21T03:19:15.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for fix_param->vdev_id in wma_p2p_lo_event_handler(), which is received from firmware, leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para fix_param->vdev_id en wma_p2p_lo_event_handler(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=da1c6e996ac7635c202296e31118f088f9427947",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=da1c6e996ac7635c202296e31118f088f9427947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18054",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.927",
      "lastModified" : "2024-11-21T03:19:15.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for num_vdev_mac_entries in wma_pdev_hw_mode_transition_evt_handler(), which is received from firmware, leads to potential buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para num_vdev_mac_entries en wma_pdev_hw_mode_transition_evt_handler(), la cual se recibe desde el firmware, puede conducir a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=6eefc756612e39fab49ff719b3dc9b94def53396",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=6eefc756612e39fab49ff719b3dc9b94def53396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18055",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:00.990",
      "lastModified" : "2024-11-21T03:19:15.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wmi_event->num_vdev_mac_entries in wma_pdev_set_hw_mode_resp_evt_handler(), which is received from firmware, leads to potential buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para wmi_event->num_vdev_mac_entries en wma_pdev_set_hw_mode_resp_evt_handler(), la cual se recibe desde el firmware, puede conducir a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=50a0554d12cff58b3ffbd51d3194304244b87023",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=50a0554d12cff58b3ffbd51d3194304244b87023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18057",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.037",
      "lastModified" : "2024-11-21T03:19:16.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wma_nlo_scan_cmp_evt_handler(), which is received from firmware, leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para vdev id en wma_nlo_scan_cmp_evt_handler(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=24d41d2bd3d98325b3800345f4ba27a334b3894b",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=24d41d2bd3d98325b3800345f4ba27a334b3894b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18058",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.130",
      "lastModified" : "2024-11-21T03:19:16.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wow_buf_pkt_len in wma_wow_wakeup_host_event() which is received from firmware leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para wow_buf_pkt_len en wma_wow_wakeup_host_event(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=d6d42a10d4abf09299cdfacdd8aed5c26731b5ff",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=d6d42a10d4abf09299cdfacdd8aed5c26731b5ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18059",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.193",
      "lastModified" : "2024-11-21T03:19:16.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wma_scan_event_callback(), which is received from firmware, leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para vdev id en wma_scan_event_callback(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=217705da7726002ffe61dad51a6c9cc97c52f649",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=217705da7726002ffe61dad51a6c9cc97c52f649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18060",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.240",
      "lastModified" : "2024-11-21T03:19:16.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for resp_event->vdev_id in wma_unified_bcntx_status_event_handler(), which is received from firmware, leads to potential out of bounds memory read."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para resp_event->vdev_id en wma_unified_bcntx_status_event_handler(), la cual se recibe desde el firmware, puede conducir a una lectura de memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=f3d81bd0b3cb992c214d94196b33168b02589c6b",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=f3d81bd0b3cb992c214d94196b33168b02589c6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18061",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.303",
      "lastModified" : "2024-11-21T03:19:16.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen when processing AOA measurement event from WIGIG firmware in wil_aoa_evt_meas()."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un desbordamiento de búfer a la hora de procesar un evento AOA de medida del firmware WIGIG en wil_aoa_evt_meas()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=b65cf2a007e88fe86dbd6d3269682fc585a4130f",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=b65cf2a007e88fe86dbd6d3269682fc585a4130f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18062",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.350",
      "lastModified" : "2024-11-21T03:19:16.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen when processing UTF event in wma_process_utf_event()."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, puede ocurrir un desbordamiento de búfer a la hora de procesar un evento UTF en wma_process_utf_event()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=d7927eb7c9c2d79a3e24cddd1e9447ab98bf6700",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=d7927eb7c9c2d79a3e24cddd1e9447ab98bf6700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18065",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.413",
      "lastModified" : "2024-11-21T03:19:17.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vent->vdev_id in wma_action_frame_filter_mac_event_handler(), which is received from firmware, leads to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la validación de entradas incorrecta para vent->vdev_id en wma_action_frame_filter_mac_event_handler(), la cual se recibe desde el firmware, puede conducir a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a8bc0f90ef49ea0aee90047a17772e4eebff259a",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a8bc0f90ef49ea0aee90047a17772e4eebff259a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18066",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-16T22:29:01.477",
      "lastModified" : "2024-11-21T03:19:17.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads to use memory after it is freed in msm_core_ioctl()."
      }, {
        "lang" : "es",
        "value" : "En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, los controles incorrectos en MSM CORE pueden provocar un uso de memoria tras su liberación en msm_core_ioctl()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=ff11f44c0c10c94170f03a8698f73f7e08b74625",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=ff11f44c0c10c94170f03a8698f73f7e08b74625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-18T03:29:00.213",
      "lastModified" : "2024-11-21T03:19:39.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de igualdad sensible al tiempo en la firma JWT en el método JsonWebToken.validate en main/scala/authentikat/jwt/JsonWebToken.scala en authentikat-jwt (también conocido como com.jason-goodwin/authentikat-jwt), en versiones 0.4.5 y anteriores, permite que el proveedor de un token JWT adivine bit tras bit de la firma mediante la repetición de peticiones de validación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:authentikat-jwt_project:authentikat-jwt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.5",
            "matchCriteriaId" : "2DC45D86-D60C-4F0F-9166-ACC747C1222E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jasongoodwin/authentikat-jwt/commit/2d2fa0d40ac8f2f7aa7e9b070fa1a25eee082cb0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasongoodwin/authentikat-jwt/issues/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasongoodwin/authentikat-jwt/pull/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasongoodwin/authentikat-jwt/commit/2d2fa0d40ac8f2f7aa7e9b070fa1a25eee082cb0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasongoodwin/authentikat-jwt/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasongoodwin/authentikat-jwt/pull/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-19T02:29:00.207",
      "lastModified" : "2024-11-21T03:19:39.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped)."
      }, {
        "lang" : "es",
        "value" : "El paquete app-admin/collectd de Gentoo, en versiones anteriores a la 5.7.2-r1, establece la propiedad del directorio de archivos PID en la cuenta collectd, lo que podría permitir que usuarios locales finalicen procesos arbitrarios aprovechando el acceso a esta cuenta para modificar archivos PID antes de que un script root envíe un SIGKILL (cuando el servicio está parado)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collectd:collectd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.2",
            "matchCriteriaId" : "9AF6CD8D-5905-4258-8230-67D16CF9A6BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collectd:collectd:5.7.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07FB0A-27C0-4A03-B8D2-211126262AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103469",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.gentoo.org/628540",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.gentoo.org/628540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14191",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-03-20T13:29:00.247",
      "lastModified" : "2024-11-21T03:12:19.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under \"Signed Security Mode\", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiWeb versión 5.6.0 hasta 6.1.0 en \"Signed Security Mode\", permite al atacante omitir la protección de la cookie de usuario firmada eliminando la propia cookie de sesión de protección de FortiWeb."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "6.1.0",
            "matchCriteriaId" : "8852A454-A129-447C-9B2E-6E16184EFA22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103430",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-279",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-20T14:29:00.350",
      "lastModified" : "2024-11-21T03:18:25.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El mecanismo de escritura en memoria de los controladores NCR S1 Dispenser, en versiones de firmware anteriores a 0x0156, permite que un usuario no autenticado actualice o degrade el firmware del dispositivo, incluyendo versiones más antiguas con vulnerabilidades conocidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ncr:s1_dispenser_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0x0156",
            "matchCriteriaId" : "D16E9485-2D83-44BB-BB02-24AFCF832DF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ncr:s1_dispenser_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2433B1-C85A-45FF-9603-6D7E1D917E74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17215",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.203",
      "lastModified" : "2024-11-21T03:17:40.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Huawei HG532 con algunas versiones personalizadas tiene una vulnerabilidad de ejecución remota de código. Un atacante autenticado podría enviar paquetes maliciosos al puerto 37215 para iniciar ataques. Si se explota con éxito, podría conducir a la ejecución remota de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hg532_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1370CC-7DB4-4162-8C4F-12EB7F781D06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hg532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37D1DF9F-CD5A-4AB0-84C5-500CCFBDC6B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102344",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17306",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.267",
      "lastModified" : "2024-11-21T03:17:48.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds of array and possibly cause the device abnormal."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160 o VNS-L21C703B140 tienen una vulnerabilidad de lectura de array fuera de límites. Debido a la falta de verificación del array, un atacante engaña a un usuario para que instale una aplicación maliciosa que pueda explotar la vulnerabilidad y hacer que el atacante lea fuera de los límites del array y que pueda hacer que el dispositivo funcione de forma errónea."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vns-l21_firmware:vns-l21autc555b141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599B0730-82A5-4DC9-A830-817ED14FACCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vns-l21_firmware:vns-l21c10b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDF5D9E-E608-4A46-82F3-4E5D8E0D5288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vns-l21_firmware:vns-l21c66b160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6E201-2634-4269-84CF-18E8DD402F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vns-l21_firmware:vns-l21c703b140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D677E2E5-C167-41AD-BEC1-D20ED5A5FBF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vns-l21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58ED157-A56B-4779-9731-7B7D859ACE02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-arrayover-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-arrayover-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17307",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.347",
      "lastModified" : "2024-11-21T03:17:48.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei Smartphones with software of VNS-L21AUTC555B141 have an out-of-bounds read vulnerability. Due to the lack string terminator of string, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds and possibly cause the device abnormal."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei con software VNS-L21AUTC555B141 tienen una vulnerabilidad de lectura de array fuera de límites. Debido a la falta de terminador de una cadena, un atacante engaña a un usuario para que instale una aplicación maliciosa que pueda explotar la vulnerabilidad y hacer que el atacante lea fuera de límites y que pueda hacer que el dispositivo funcione de forma errónea."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vns-l21_firmware:vns-l21autc555b141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599B0730-82A5-4DC9-A830-817ED14FACCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vns-l21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58ED157-A56B-4779-9731-7B7D859ACE02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-read-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-read-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17319",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.407",
      "lastModified" : "2024-11-21T03:17:49.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain resource which can be accessed by multithreading. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in kernel information disclosure."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei P9 con software en versiones anteriores a EVA-AL10C00B399SP02 tienen una vulnerabilidad de divulgación de información. El software no protege correctamente ciertos recursos a los que se puede acceder mediante múltiples hilos. Un atacante engaña al usuario con privilegios root para que instale una aplicación maliciosa, por lo que la explotación exitosa de esta vulnerabilidad podría desembocar en una divulgación de información del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b399sp02",
            "matchCriteriaId" : "43B5EEC6-FEB2-4DDE-9B94-67FC7525BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17320",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.470",
      "lastModified" : "2024-11-21T03:17:49.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code execution."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei Mate 9 Pro con software LON-AL00BC00B139D, LON-AL00BC00B229 y LON-L29DC721B188 tienen una vulnerabilidad de doble liberación (double free) de memoria. El sistema no gestiona la memoria correctamente, ya que libera dos veces en la misma dirección de memoria. Un atacante engaña al usuario con privilegios root para que instale una aplicación maliciosa, por lo que la explotación exitosa de esta vulnerabilidad podría desembocar en la ejecución de código malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:lon-al00bc00b139d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B7E8D3-3C62-48C4-B0C8-F8039B38C87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:lon-al00bc00b229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E6F318-3844-4A3A-8CCE-BC015974C3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:lon-l29dc721b188:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304BBC5F-37F3-4FD1-81CC-40D04618C006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8176",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.533",
      "lastModified" : "2024-11-21T03:33:28.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free."
      }, {
        "lang" : "es",
        "value" : "Huawei IPTV STB, con versiones anteriores a IPTV STB V100R003C01LMYTa6SPC001, tiene una vulnerabilidad de omisión de autenticación. Un atacante podría explotar esta vulnerabilidad para acceder a la interfaz serie y modificar la configuración. Si se explota con éxito, podría desembocar en una omisión de autenticación y en la visión de canales gratuitamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:iptv_stb_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v100r003c01lmyta6spc001",
            "matchCriteriaId" : "D5235F6C-40BC-40FD-947C-16B0ECA74D39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:iptv_stb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC278E31-C7CA-40C9-A6C9-64112505993F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.my/post/165370836947/cve-2017-8176",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://security.my/post/165370836947/cve-2017-8176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8187",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-20T15:29:00.597",
      "lastModified" : "2024-11-21T03:33:29.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) tiene una vulnerabilidad de escalado de privilegios. Debido a las restricciones de privilegios incorrectas, un atacante con altos privilegios podría obtener los certificados de otros usuarios. Un exploit con éxito podría provocar el escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:fusionsphere_openstack_firmware:v100r006c00spc102\\(nfv\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBE05D2-19E0-4DE1-8D8B-2A826262995A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:fusionsphere_openstack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9645000A-1813-4824-8D09-A0C6BECD0C9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14002",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-20T16:29:00.267",
      "lastModified" : "2024-11-21T03:11:56.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices."
      }, {
        "lang" : "es",
        "value" : "GE Infinia/Infinia con sistemas de imagen médica Hawkeye 4 en todas las versiones actuales afectadas, estos dispositivos emplean credenciales por defecto o embebidas. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante remoto omita la autenticación y obtenga acceso a los dispositivos afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:infinia_hawkeye_4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5AA421-033E-4087-9CCC-F055060846BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:infinia_hawkeye_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032F6796-5DE3-4D64-A522-F277F818B9BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103405",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14004",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-20T16:29:00.327",
      "lastModified" : "2024-11-21T03:11:56.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices."
      }, {
        "lang" : "es",
        "value" : "El servidor GE GEMNet License (EchoServer) en todas las versiones actuales afectadas, estos dispositivos emplean credenciales por defecto o embebidas. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante remoto omita la autenticación y obtenga acceso a los dispositivos afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:gemnet_license_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8200EE-B5B1-4AE1-867F-EC260FCB7926"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14006",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-20T16:29:00.373",
      "lastModified" : "2024-11-21T03:11:57.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices."
      }, {
        "lang" : "es",
        "value" : "GE Infinia/Infinia, en versiones 1.0, 1.1, 2.1, 3.0 y 3.1, con sistemas de imagen médica Hawkeye 3,1 en todas las versiones actuales afectadas, estos dispositivos emplean credenciales por defecto o embebidas. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante remoto omita la autenticación y obtenga acceso a los dispositivos afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:xeleris:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9FC013-22FA-43F0-A7C3-CF1955A1DA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:xeleris:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6522AA-1060-4014-9249-EB5F7F6EBCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:xeleris:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31D0274-3664-41AC-B300-BA9071D07D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:xeleris:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D430803D-4C3B-4D37-881B-963F3E7CCACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:xeleris:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5DCB64-AD1D-47BC-B343-3B7C2E61BDB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14008",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-03-20T16:29:00.437",
      "lastModified" : "2024-11-21T03:11:57.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices."
      }, {
        "lang" : "es",
        "value" : "GE Centricity PACS RA1000, para analizar imágenes de diagnóstico, en todas las versiones actuales afectadas, estos dispositivos emplean credenciales por defecto o embebidas. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante remoto omita la autenticación y obtenga acceso a los dispositivos afectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:centricity_pacs_ra1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41609401-5C1F-42EB-84C1-DE9ACB90A110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103400",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5736",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-03-20T20:29:00.227",
      "lastModified" : "2024-11-21T03:28:18.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator."
      }, {
        "lang" : "es",
        "value" : "Una elevación de privilegios en Intel Software Guard Extensions Platform Software Component, en versiones anteriores a la 1.9.105.42329, permite que un atacante local ejecute código arbitrario como administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:software_guard_extensions_platform_software_component:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.105.42329",
            "matchCriteriaId" : "FB930E63-B355-46FF-A540-A9D29D361C30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103482",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-21T16:29:00.200",
      "lastModified" : "2024-11-21T03:19:39.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a noflush_merge option that triggers a NULL value for a flush_cmd_control data structure."
      }, {
        "lang" : "es",
        "value" : "fs/f2fs/segment.c en el kernel de Linux, en versiones anteriores a la 4.13, permite que usuarios locales provoquen una denegación de servicio (desreferencia de puntero NULL y pánico) mediante el uso de una opción noflush_merge que desencadena un valor NULL para una estructura de datos flush_cmd_control."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2894F22-5448-4402-AE27-6E43BD08E14E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4fdf8ba0e5808ba9ad6b44337783bd9935e0982",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d4fdf8ba0e5808ba9ad6b44337783bd9935e0982",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3910-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3910-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4fdf8ba0e5808ba9ad6b44337783bd9935e0982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d4fdf8ba0e5808ba9ad6b44337783bd9935e0982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3910-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3910-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0914",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.230",
      "lastModified" : "2024-11-21T03:03:53.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database."
      }, {
        "lang" : "es",
        "value" : "Las ediciones Community y Enterprise de Gitlab, en sus versiones 10.1, 10.2 y 10.2.4, son vulnerables a una inyección SQL en el componente MilestoneFinder que resulta en la divulgación de todos los datos en la base de datos de una instancia de Gitlab."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "6E361A47-7091-4BA7-A0E0-9B549C440676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "B3AF96C8-23DF-4055-A827-4FEC6B58B0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/298176",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/298176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0915",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.293",
      "lastModified" : "2024-11-21T03:03:53.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.2.4 es vulnerable a una falta de validación de entradas en GitlabProjectsImportService que resulta en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.9.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "492C2FA2-F309-417A-A04E-D218264806AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.9.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "EE2C46FA-7B81-452E-A413-4AB4983753FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/298873",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/298873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0916",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.357",
      "lastModified" : "2024-11-21T03:03:53.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.3 es vulnerable a una falta de validación de entradas en la cola system_hook_push mediante el componente de enlace web que resulta en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "B7170487-5E65-4281-A5B4-6CCFE975B670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "19E0A120-3CE9-43FE-AEB6-A93F70BDD776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/299473",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/299473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0917",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.417",
      "lastModified" : "2024-11-21T03:03:53.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.2.4 es vulnerable a una falta de validación de entradas en el componente de trabajo CI que resulta en Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "5E1314D0-32F8-4DE6-BC90-0D37B1D132B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "4EC6E637-7340-438F-BBFD-996A60D7D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/299525",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/299525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0918",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.467",
      "lastModified" : "2024-11-21T03:03:53.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.3 es vulnerable a un problema de salto de directorio en el componente GitLab CI runner que resulta en la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "1033EBE8-93CE-4E62-AC6D-FDA3AEB607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "A5815FFE-1A31-4936-89B7-30CCA633295A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.15",
            "matchCriteriaId" : "377A106A-E5AA-4572-A3AA-04DEE8757307"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "DBE72BC6-155E-4E8C-A2DC-B9B4B6610F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "14A161A7-2715-447D-8E30-6D11500B3B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301432",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0922",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.527",
      "lastModified" : "2024-11-21T03:03:54.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object."
      }, {
        "lang" : "es",
        "value" : "Gitlab Enterprise Edition 10.3 es vulnerable a un problema de omisión de autenticación en el componente GitLab Projects::BoardsController que resulta en la divulgación de información en cualquier objeto board."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "CE655DA2-9821-4004-A47A-A2E2CFDFDFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "9D0E09B1-7E2D-43AC-A0D2-E16DEE929E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301123",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0923",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.620",
      "lastModified" : "2024-11-21T03:03:54.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 9.1 es vulnerable a una falta de validación de entradas en el componente IPython notebooks que resulta en Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CBC18895-4291-4172-830B-AB92434083A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D2B5DC8B-85D4-478A-9CEB-CA94E149628D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:10.1.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "EE50DF93-D1C9-41CC-BBD7-CE91E0351A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:10.1.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8EBFDA9D-CA29-4831-A8F7-D71F7F9ED4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:10.2.5:*:*:*:community:*:*:*",
            "matchCriteriaId" : "BCD5E2ED-8C98-4E24-A7B9-65787D27F747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:10.2.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "99A00636-B6CC-4708-9EB0-5A728F45FAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:10.3.3:*:*:*:community:*:*:*",
            "matchCriteriaId" : "9F0F462A-CC51-470E-8CE6-EF28B06E88E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:10.3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "93689CC4-AFC7-4A8D-87A7-01F2A467A832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/293740",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/293740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0924",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.683",
      "lastModified" : "2024-11-21T03:03:54.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.2.4 es vulnerable a una falta de validación de entradas en el componente labels que resulta en Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "9B7A2187-0C1C-4B6C-8F1F-5317331A3C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "6B3402C2-32D0-4B4E-B889-07863D0BAF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/294099",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/294099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0925",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.747",
      "lastModified" : "2024-11-21T03:03:54.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password."
      }, {
        "lang" : "es",
        "value" : "Gitlab Enterprise Edition 10.1.0 es vulnerable a un problema de credenciales protegidas de forma insuficiente en el endpoint de API de proyecto de integración de servicio que resulta en la divulgación de información de contraseñas en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "05870508-1CE3-4659-858A-6065F3D8B6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "8D9B47D4-A6DB-4EBC-BD09-31CD3A77E430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/3847",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/3847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0926",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.810",
      "lastModified" : "2024-11-21T03:03:54.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.3 es vulnerable a un problema de autorización incorrecta en el componente Oauth sign-in que resulta en el inicio de sesión de un usuario no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "B1883059-C7CA-4A1C-8602-1747AA3D07E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "CA9D3B79-2565-4F11-87CD-745D2F49A477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/32198",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/32198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0927",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-21T20:29:00.857",
      "lastModified" : "2024-11-21T03:03:54.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users."
      }, {
        "lang" : "es",
        "value" : "Gitlab Community Edition 10.3 es vulnerable a un problema de autorización incorrecta en el componente deployment keys que resulta en el uso no autorizado de claves de implementación por parte de usuarios invitados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.16.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "8895687A-8E7F-41BF-9219-C0B7A1E30DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.16.0",
            "versionEndIncluding" : "9.5.10",
            "matchCriteriaId" : "CC959153-DA6C-452B-B06B-8C925CEFEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "81E7F704-BE11-4C38-A69B-27D22298703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "64162AE5-7888-44B6-9E40-F8003806408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "643E78E8-2909-41D4-BC2A-2CADDA141DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "7E7D952B-AB31-4962-B178-53260246B33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/37594",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/37594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-22T05:29:00.237",
      "lastModified" : "2024-11-21T03:18:34.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing the /bin/sh string. In some situations, authentication can be achieved via the bhu85tgb default password for the admin account."
      }, {
        "lang" : "es",
        "value" : "Saneamiento de entradas indebido en el shell de administración restringido en dispositivos UCOPIA Wireless Appliance en versiones anteriores a la 4.4.20, versiones 5.0.x anteriores a la 5.0.19 y versiones 5.1.x anteriores a la 5.1.11 permite que atacantes remotos escapen el shell y escalen sus privilegios mediante la subida de un archivo .bashrc que contenga la cadena /bin/sh. En algunas situaciones, la autenticación puede lograrse mediante la contraseña por defecto bhu85tgb para la cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ucopia:wireless_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.20",
            "matchCriteriaId" : "64DF4E1D-4B7A-4A05-A61E-D43B63EFCC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ucopia:wireless_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0.19",
            "matchCriteriaId" : "1BC12478-521A-40FF-A634-9C48C4FD0613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ucopia:wireless_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.1.11",
            "matchCriteriaId" : "6231AD45-84FE-4975-9725-4F8F2A36D021"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ucopia:wireless_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1C8FCD-6DE1-4356-B646-8A790A4B6DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securite.intrinsec.com/2018/03/19/cve-2017-17743-ucopia-shell-escape/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://securite.intrinsec.com/2018/03/19/cve-2017-17743-ucopia-shell-escape/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1571",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-22T12:29:00.313",
      "lastModified" : "2024-11-21T03:22:06.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 131853."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 (IBM DB2 para Linux, UNIX y Windows (incluyendo DB2 Connect Server), en versiones 9.7, 10.1, 10.5 y 11.1, emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 131853."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC3F2DB-9AE2-4B11-A838-167E857D831D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC3F2DB-9AE2-4B11-A838-167E857D831D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012948",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103494",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131853",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1677",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-22T12:29:00.377",
      "lastModified" : "2024-11-21T03:22:12.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/connlicj.bin which leads to object injection and potentially arbitrary code execution depending on the classpath. IBM X-Force ID: 133999."
      }, {
        "lang" : "es",
        "value" : "IBM Data Server Driver para JDBC y SQLJ (IBM DB2 para Linux, UNIX y Windows 9.7, 10.1, 10.5 y 11.1) deserializa el contenido de /tmp/connlicj.bin, lo que conduce a una inyección de objetos y a una potencial ejecución de código arbitrario dependiendo del classpath. IBM X-Force ID: 133999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC3F2DB-9AE2-4B11-A838-167E857D831D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2952EB24-A015-4EC7-85E3-88588D0AB15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC3F2DB-9AE2-4B11-A838-167E857D831D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012896",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103422",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041227",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133999",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1788",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-22T12:29:00.440",
      "lastModified" : "2024-11-21T03:22:21.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 137031."
      }, {
        "lang" : "es",
        "value" : "Las instalaciones de IBM WebSphere Application Server 9 que emplean Form Login podrían permitir que un atacante remoto lleve a cabo ataques de suplantación. IBM X-Force ID: 137031."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.7",
            "matchCriteriaId" : "7B036736-F0B6-412E-BF29-5898FE922118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012341",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103497",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137031",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1789",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-22T12:29:00.503",
      "lastModified" : "2024-11-21T03:22:22.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Monitoring V6 6.2.3 y 6.3.0 podría permitir que un usuario no autenticado ejecute código de forma remota mediante métodos sin especificar. IBM X-Force ID: 137034."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88380637-715A-49CB-A9B6-0F8411225E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A90709-74AD-4C1B-806C-E7E335A3A773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17308E6-B755-434F-8D2B-E5BBA37BA1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6368EC-1103-419B-8A11-14443501B435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E58E2E4-ADA3-4189-BE8C-1943CDEA7791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1EEA0F-0501-4316-BD33-ECF44BDD9008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDE2E0B-6F98-4289-A3AF-EF4105782C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9F4C32-6077-475E-A285-F98A0336C53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0355309B-CCBF-49EA-BE50-7B8E9B637473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C781C7-70D8-44EA-8847-54815053A092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F409ECF-2033-49E0-9599-DD827CD4DB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C84EAD-BA6A-45B8-A628-2E5003E87778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00506901-696A-4EC1-B560-08BBDCBB41CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7484661E-4906-4027-B4B7-9AA952661923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014096",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18094",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-03-22T13:29:00.217",
      "lastModified" : "2024-11-21T03:19:20.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the base path setting of a configured file system repository."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en Atlassian Fisheye y Crucible en versiones anteriores a la 4.4.3 (la versión parcheada para 4.4.x) y 4.5.0 permiten que atacantes remotos con privilegios administrativos inyecten código HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través de la configuración de ruta base de un repositorio de sistema de archivos configurado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "97718354-9B00-4E93-A879-7423456E0344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4FA7F3-F6C3-4976-9E2A-2C7A6FE8329D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "C1A5C301-8708-4774-9DC5-717E88A805F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86BAE07-084C-411C-AAD9-676E8FC50703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CRUC-8177",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7010",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0932",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-22T14:29:00.223",
      "lastModified" : "2024-11-21T03:03:55.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator (read-only) account and ssh connection to the devices could escalate privileges to admin (root) access in the system."
      }, {
        "lang" : "es",
        "value" : "Ubiquiti Networks EdgeOS, en versiones 1.9.1.1 y anteriores, sufre de una vulnerabilidad de gestión incorrecta de privilegios debido a la falta de validación de las entradas de la funcionalidad Feature. Un atacante con acceso a una cuenta operator (solo lectura) y conexión SSH a los dispositivos podría escalar sus privilegios a acceso admin (root) en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubnt:edgeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1.1",
            "matchCriteriaId" : "916CDC26-434C-45EE-AB34-1AE7BE8C45AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-security-release-v1-9-7-hotfix-3/ba-p/2054117",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/239719",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-security-release-v1-9-7-hotfix-3/ba-p/2054117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/239719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0933",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-22T14:29:00.287",
      "lastModified" : "2024-11-21T03:03:55.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the attacker to gain admin privileges in the system."
      }, {
        "lang" : "es",
        "value" : "Ubiquiti Networks EdgeOS, en versiones 1.9.1 y anteriores, sufre de una vulnerabilidad Cross-Site Request Forgery (CSRF). Un atacante con acceso a una cuenta operator (solo lectura) podría engañar a un usuario admin (root) para que acceda a la página controlada por el atacante, lo que le permitiría obtener privilegios en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubnt:edgeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "242ADBE9-D81C-46F9-A4EB-905A0FED5354"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-9-1-1/ba-p/1910524",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/240098",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-9-1-1/ba-p/1910524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/240098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0934",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-22T14:29:00.347",
      "lastModified" : "2024-11-21T03:03:55.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator (read-only) account could escalate privileges to admin (root) access in the system."
      }, {
        "lang" : "es",
        "value" : "Ubiquiti Networks EdgeOS, en versiones 1.9.1 y anteriores, sufre de una vulnerabilidad de gestión incorrecta de privilegios debido a la falta de protección del sistema de archivos. Esto provoca que se exponga información sensible. Un atacante con acceso a una cuenta operator (solo lectura) podría escalar sus privilegios a acceso admin (root) en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubnt:edgeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "242ADBE9-D81C-46F9-A4EB-905A0FED5354"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-9-1-1/ba-p/1910524",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/241044",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-9-1-1/ba-p/1910524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/241044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0935",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-22T14:29:00.427",
      "lastModified" : "2024-11-21T03:03:55.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator (read-only) account could escalate privileges to admin (root) access in the system."
      }, {
        "lang" : "es",
        "value" : "Ubiquiti Networks EdgeOS, en versiones 1.9.1.1 y anteriores, sufre de una vulnerabilidad de gestión incorrecta de privilegios debido a la falta de protección del sistema de archivos. Esto provoca que se exponga información sensible. Un atacante con acceso a una cuenta operator (solo lectura) podría escalar sus privilegios a acceso admin (root) en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1.1",
            "matchCriteriaId" : "1D5CED05-149F-4CA5-A18D-B508E6EF1EBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-security-release-v1-9-7-hotfix-3/ba-p/2054117",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/242407",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-security-release-v1-9-7-hotfix-3/ba-p/2054117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/242407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16771",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-03-22T14:29:00.487",
      "lastModified" : "2024-11-21T03:16:56.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en Log Viewer en Synology Photo Station, en versiones anteriores a la 6.8.3-3463 y anteriores a la 6.3-2971, permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8",
            "versionEndExcluding" : "6.8.3-3463",
            "matchCriteriaId" : "30430328-602F-4557-BD99-F389E90D9F60"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.3-2971",
            "matchCriteriaId" : "5809B007-0B00-4658-AAF6-5859BF87318E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_02",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16772",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-03-22T14:29:00.537",
      "lastModified" : "2024-11-21T03:16:56.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the prog_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de validación de entradas incorrecta en PixlrEditorHandler.php en SYNOPHOTO_Flickr_MultiUpload en Synology Photo Station, en versiones anteriores a la 6.8.3-3463 y a la 6.3-2971, permite que usuarios autenticados remotos ejecuten código arbitrario mediante el parámetro prog_id."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8",
            "versionEndExcluding" : "6.8.3-3463",
            "matchCriteriaId" : "30430328-602F-4557-BD99-F389E90D9F60"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.3-2971",
            "matchCriteriaId" : "5809B007-0B00-4658-AAF6-5859BF87318E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_02",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0920",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-22T15:29:00.217",
      "lastModified" : "2024-11-21T03:03:54.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance."
      }, {
        "lang" : "es",
        "value" : "Las ediciones Community y Enterprise de Gitlab, en versiones anteriores a la 10.1.6, 10.2.6 y 10.3.4, son vulnerables a un problema de omisión de autenticación en el componente Projects::MergeRequests::CreationsController. Esto resulta en que un atacante puede ver todos los nombres de proyecto y sus respectivos espacios de nombre en una instancia de GitLab."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "8.8.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "403C99AA-5E14-4ECB-AF6A-20DBE371998D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndIncluding" : "10.1.5",
            "matchCriteriaId" : "19E0A120-3CE9-43FE-AEB6-A93F70BDD776"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "DBE72BC6-155E-4E8C-A2DC-B9B4B6610F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndIncluding" : "10.2.5",
            "matchCriteriaId" : "AA884C1E-9F66-41DA-9F23-1231086A75CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "14A161A7-2715-447D-8E30-6D11500B3B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "3CEEA359-A827-43C5-8489-FD49AE744CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301336",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4206",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-22T15:29:00.277",
      "lastModified" : "2024-11-21T03:16:06.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on MECO USB Memory Stick with Fingerprint MECOZiolsamDE601 devices. The fingerprint authentication requirement for data access can be bypassed. An attacker with physical access can send a static packet to a serial port exposed on the PCB to unlock the key and get access to the data without possessing the required fingerprint."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en MECO USB Memory Stick con dispositivos Fingerprint MECOZiolsamDE601. Se puede omitir el requisito de autenticación por huella dactilar para acceder a los datos. Un atacante con acceso físico puede enviar un paquete estático a un puerto en serie expuesto en PCB para desbloquear la clave y obtener acceso a los datos sin poseer la huella necesaria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meco:usb_memory_stick_with_fingerprint_firwmare:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA5821B-7627-4459-A618-4A3AC786C90C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meco:usb_memory_stick_with_fingerprint:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0B95CE-227A-4994-A456-41DE74F51BB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/audebert/ef6e206a27ededd1386cff48604e9335",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.blackhat.com/docs/us-17/thursday/us-17-Picod-Attacking-Encrypted-USB-Keys-The-Hard%28ware%29-Way.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.blackhat.com/us-17/briefings/schedule/index.html#attacking-encrypted-usb-keys-the-hardware-way-7443",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elie.net/talk/attacking-encrypted-usb-keys-the-hardware-way",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/audebert/ef6e206a27ededd1386cff48604e9335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.blackhat.com/docs/us-17/thursday/us-17-Picod-Attacking-Encrypted-USB-Keys-The-Hard%28ware%29-Way.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.blackhat.com/us-17/briefings/schedule/index.html#attacking-encrypted-usb-keys-the-hardware-way-7443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elie.net/talk/attacking-encrypted-usb-keys-the-hardware-way",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-22T21:29:00.307",
      "lastModified" : "2024-11-21T03:19:39.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file."
      }, {
        "lang" : "es",
        "value" : "La función apply_dependent_coupling en libavcodec/aacdec.c en Libav 12.2 permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) utilizando un archivo aac manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1093",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-22T21:29:00.383",
      "lastModified" : "2024-11-21T03:19:39.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unpack_parse_unit function in libavcodec/dirac_parser.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función unpack_parse_unit en libavcodec/dirac_parser.c en Libav 12.2 permite a atacantes remotos causar una denegación de servicio (fallo de segmentación) utilizando un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1088",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-22T21:29:00.430",
      "lastModified" : "2024-11-21T03:19:40.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The stereo_processing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file, related to ff_ps_apply."
      }, {
        "lang" : "es",
        "value" : "La función stereo_processing en libavcodec/aacps.c en Libav 12.2 permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) utilizando un archivo aac manipulado. Esto se relaciona con ff_ps_apply."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1105",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-23T15:29:00.223",
      "lastModified" : "2024-11-21T03:18:33.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard."
      }, {
        "lang" : "es",
        "value" : "**RECHAZADA** NO USAR ESTE NÜMERO DE CANDIDATO. ConsultIDs: ninguna. Motivo: Este candidato estaba en un grupo de CNA que no estaba asignado a ningún problema durante 2017. Notas: ninguna."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kentico:kentico_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.51",
            "matchCriteriaId" : "FDF700F6-E919-4C62-A719-02F12BF817AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kentico:kentico_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.0.48",
            "matchCriteriaId" : "337AC613-5949-4753-9423-44FB5E30E438"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.hivint.com/advisory-access-control-bypass-in-kentico-cms-cve-2017-17736-49e1e43ae55b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.hivint.com/advisory-access-control-bypass-in-kentico-cms-cve-2017-17736-49e1e43ae55b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15325",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-23T16:29:00.130",
      "lastModified" : "2024-11-21T03:14:28.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and execute it as a specific privilege; the APP can then send a specific parameter to the driver of the smart phone, causing arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El controlador Bdat de determinados smartphones Prague con versiones de software anteriores a Prague-AL00BC00B211, Prague-AL00BC00B205, Prague-AL00CC00B211, Prague-TL00AC01B211 y Prague-TL10AC01B211 tiene una vulnerabilidad de desbordamiento de enteros debido a la falta de validación de parámetros. Un atacante engaña a un usuario para que instale una app maliciosa y la ejecute con un privilegio específico. La app podría entonces enviar un parámetro específico al controlador del smartphone, provocando la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-al00ac00b211",
            "matchCriteriaId" : "0489925C-DCD2-4D82-B971-ADD451543B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E54AE0-CB98-47D2-AF52-516EADEF1F5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-al00bc00b211",
            "matchCriteriaId" : "B97CF66D-BF8A-49FC-B972-B9ECD8617CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C5A77-355C-4797-8B3F-706C9A7C2F1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-al00cc00b211",
            "matchCriteriaId" : "D317F9D8-F9CE-4404-961C-FCB924CEA769"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BB6D0A-0545-456D-85CC-9A302BAC9A0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-tl00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-tl00ac01b211",
            "matchCriteriaId" : "DA4B09A2-5E22-428F-9377-5DD800D60A1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-tl00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338F548C-DA7E-4EA4-9D54-7DDF1D5F99B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-tl10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-tl10ac01b211",
            "matchCriteriaId" : "A738D9B3-8D29-4F18-82CE-4CB882525D2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-tl10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248688D-F679-42E9-BAA4-34187D5EC5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180321-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180321-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15326",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-03-23T16:29:00.177",
      "lastModified" : "2024-11-21T03:14:28.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE supports SSL/TLS protocol negotiation using insecure encryption algorithms. If an insecure encryption algorithm is negotiated in the communication, an unauthenticated remote attacker can exploit this vulnerability to crack the encrypted data and cause information leakage."
      }, {
        "lang" : "es",
        "value" : "DBS3900 LTE TDD versiones V100R003C00 y V100R004C10 tiene una vulnerabilidad de seguridad de algoritmo de cifrado débil. DBS3900 LTE TDD soporta la negociación de protocolos SSL/TLS empleando algoritmos de cifrado inseguros. Si se negocia un algoritmo de cifrado inseguro en la comunicación, un atacante remoto no autenticado puede explotar esta vulnerabilidad para descifrar los datos cifrados y provocar una fuga de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dbs3900_tdd_lte_firmware:v100r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403CCA52-CB4F-4ABC-B7CF-4FAD9E12E1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dbs3900_tdd_lte_firmware:v100r004c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAB4847-06F9-4A7C-9CFD-99DC7635166E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dbs3900_tdd_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FCC014-251D-4BE8-A43E-01456A28AEEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1524",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-23T19:29:00.230",
      "lastModified" : "2024-11-21T03:22:01.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 y 6.0) podría permitir que un usuario autenticado obtenga información sensible de una petición HTTP especialmente manipulada que podría emplear como ayuda para futuros ataques. IBM X-Force ID: 129970."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "257BF4B4-97A1-4893-B1EA-4CE1D1C68E0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "92A37B81-7F7D-4942-8FAB-CDAAAA00C524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E3F0FEE7-6D74-494E-9081-D4942FE17CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "76C7E065-EAF0-4A4D-B6F8-A2705C287EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDFE57E-7905-4DC8-93FC-CAE5BC070790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "19611ED3-74F3-4124-A334-09A66A9274A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B3E2B-B33D-4FB4-A8CF-0D3C781B371E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "EC9DA362-C185-4467-B0BC-20703EAE5D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED534E3-80EF-40AF-927A-20D59DA7B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129970",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1602",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-23T19:29:00.277",
      "lastModified" : "2024-11-21T03:22:07.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625."
      }, {
        "lang" : "es",
        "value" : "IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 y 6.0) podría permitir a un usuario autenticado acceder a ajustes para los que no debería estar autorizado mediante una URL especialmente manipulada. IBM X-Force ID: 132625."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "257BF4B4-97A1-4893-B1EA-4CE1D1C68E0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "92A37B81-7F7D-4942-8FAB-CDAAAA00C524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "C5C61916-4F4D-4DD3-8F09-F55322767C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E3F0FEE7-6D74-494E-9081-D4942FE17CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "76C7E065-EAF0-4A4D-B6F8-A2705C287EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDFE57E-7905-4DC8-93FC-CAE5BC070790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "19611ED3-74F3-4124-A334-09A66A9274A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6B3E2B-B33D-4FB4-A8CF-0D3C781B371E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "EC9DA362-C185-4467-B0BC-20703EAE5D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED534E3-80EF-40AF-927A-20D59DA7B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFDE569-8BE3-4CFD-8228-FF785B004068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132625",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1629",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-23T19:29:00.337",
      "lastModified" : "2024-11-21T03:22:09.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 y 6.0) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133127."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1F04AB63-431B-4AB3-B8B0-48664B7340CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "DF1C422A-3D5F-48B1-BC6E-954D1AFA34F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "51CDEB94-002E-479A-A055-F3FD38D3AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0F767CA4-A024-44A4-A987-17057E1A6245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "5B398352-76E1-4727-B34C-620F26CBD5BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "19611ED3-74F3-4124-A334-09A66A9274A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "B07DA35D-2527-4DE8-97F1-9FC1C48255EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1B2601D1-4D55-4B4A-9CED-CF736270E63F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2D29F101-F08E-42A1-B7F2-1BD982F81221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "1113669B-B338-4ABD-9A34-B57880020C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "EA82CE3A-560B-4D43-98B9-BD9EF9E8DFE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133127",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1655",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-23T19:29:00.387",
      "lastModified" : "2024-11-21T03:22:10.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 y 6.0) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133379."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1F04AB63-431B-4AB3-B8B0-48664B7340CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "DF1C422A-3D5F-48B1-BC6E-954D1AFA34F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "51CDEB94-002E-479A-A055-F3FD38D3AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0F767CA4-A024-44A4-A987-17057E1A6245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "5B398352-76E1-4727-B34C-620F26CBD5BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "19611ED3-74F3-4124-A334-09A66A9274A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "B07DA35D-2527-4DE8-97F1-9FC1C48255EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1B2601D1-4D55-4B4A-9CED-CF736270E63F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2D29F101-F08E-42A1-B7F2-1BD982F81221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "1113669B-B338-4ABD-9A34-B57880020C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "EA82CE3A-560B-4D43-98B9-BD9EF9E8DFE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133379",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1762",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-23T19:29:00.447",
      "lastModified" : "2024-11-21T03:22:19.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 y 6.0) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 136006."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1F04AB63-431B-4AB3-B8B0-48664B7340CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "DF1C422A-3D5F-48B1-BC6E-954D1AFA34F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "51CDEB94-002E-479A-A055-F3FD38D3AE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "E769AC93-2F4C-4ADC-8228-B5C82FC445A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0F767CA4-A024-44A4-A987-17057E1A6245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "5B398352-76E1-4727-B34C-620F26CBD5BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "19611ED3-74F3-4124-A334-09A66A9274A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "B07DA35D-2527-4DE8-97F1-9FC1C48255EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1B2601D1-4D55-4B4A-9CED-CF736270E63F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "2D29F101-F08E-42A1-B7F2-1BD982F81221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "1113669B-B338-4ABD-9A34-B57880020C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "EA82CE3A-560B-4D43-98B9-BD9EF9E8DFE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136006",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-23T19:29:00.510",
      "lastModified" : "2024-11-21T03:19:40.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mpc8_probe function in libavformat/mpc8.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted audio file."
      }, {
        "lang" : "es",
        "value" : "La función mpc8_probe en libavformat/mpc8.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap) mediante un archivo de audio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1094",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-23T19:29:00.573",
      "lastModified" : "2024-11-21T03:19:40.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted media file."
      }, {
        "lang" : "es",
        "value" : "La funciónpcm_encode_frame en libavcodec/pcm.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap) mediante un archivo multimedia manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1095",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-23T19:29:00.637",
      "lastModified" : "2024-11-21T03:19:40.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted media file."
      }, {
        "lang" : "es",
        "value" : "La función av_audio_fifo_size en libavutil/audio_fifo.c en Libav 12.2 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL) mediante un archivo multimedia manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F87DEA5-F8BE-4657-B131-9C56ADF746DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1089",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-24T18:29:00.237",
      "lastModified" : "2024-11-21T03:18:35.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Bose SoundTouch permiten Cross-Site Scripting (XSS) mediante datos de canción desde un servicio de música, como ha sido demostrado por Pandora."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "30F325BE-66CB-481E-961D-57CBC32C52E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bose:soundtouch:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "61C479AD-F550-49B0-A4D2-E12582E5C1D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aryanitin.com/2017-01-01-CVE-2017-17749/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://aryanitin.com/2017-01-01-CVE-2017-17749/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-24T18:29:00.317",
      "lastModified" : "2024-11-21T03:18:35.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Bose SoundTouch permiten Cross-Site Scripting (XSS) mediante una lista de reproducción pública de Spotify manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "30F325BE-66CB-481E-961D-57CBC32C52E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bose:soundtouch:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "61C479AD-F550-49B0-A4D2-E12582E5C1D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aryanitin.com/2017-12-20-CVE-2017-17750/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://aryanitin.com/2017-12-20-CVE-2017-17750/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-24T18:29:00.377",
      "lastModified" : "2024-11-21T03:18:35.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol."
      }, {
        "lang" : "es",
        "value" : "Dispositivos Bose SoundTouch permiten que atacantes remotos consigan control remoto mediante un sitio web manipulado que utilice el protocolo WebSocket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "30F325BE-66CB-481E-961D-57CBC32C52E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bose:soundtouch:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "61C479AD-F550-49B0-A4D2-E12582E5C1D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aryanitin.com/2017-12-20-CVE-2017-17751/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://aryanitin.com/2017-12-20-CVE-2017-17751/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15710",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-03-26T15:29:00.227",
      "lastModified" : "2024-11-21T03:15:03.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all."
      }, {
        "lang" : "es",
        "value" : "Si mod_authnz_ldap se configura con AuthLDAPCharsetConfig, en las versiones 2.0.23 hasta la 2.0.65, versiones 2.2.0 hasta la 2.2.34 y versiones 2.4.0 hasta la 2.4.29 en Apache httpd, usa el valor de cabecera Accept-Language para buscar la codificación de charset adecuado cuando se verifican las credenciales de usuario. Si el valor de la cabecera no está presente en la tabla de conversión de charset, se utiliza un mecanismo alternativo para truncarlo en un valor de dos caracteres para permitir que se efectúe un quick retry (por ejemplo, 'en-US' se trunca a 'en'). Un valor de cabecera inferior a dos caracteres fuerza una lectura fuera de límites de un byte NULL a una ubicación de memoria que no forma parte de la cadena. En el peor de los casos, aunque poco probable, el proceso se bloquearía, lo que se podría utilizar como un ataque denegación de servicio (DoS). Es mucho más probable que esta memoria ya esté reservada para su uso futuro y que el problema no tenga ningún tipo de impacto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCD3C8C-9BF8-4F30-981A-593EEAEB9EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046487A3-752B-4D0F-8984-96486B828EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D2E052-51CD-4B57-A8B8-FAE51988D654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA27058-BACF-4F94-8E3C-7D38EC302EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEAB0DF-04A9-4F99-8666-0BADC5D642B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D924D1-8A36-4C43-9E56-52814F9A6350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CDFECC-E26D-47E0-976F-6629040B3764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3ECBCB1-0675-41F5-857B-438F36925F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6CBFBF-74F6-42AF-BC79-AA53EA75F00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8717A96B-9DB5-48D6-A2CF-A5E2B26AF3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F45B27-504B-4202-87B8-BD3B094003F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FB2B98-DFD2-420A-8A7F-9B288651242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B803D25B-0A19-4569-BA05-09D58F33917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8510442C-212F-4013-85FA-E0AB59F6F2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5673AB-53BB-40B2-83A7-8B82B2D0EBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB3ED63-45CA-44AB-973C-9AD2569AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF30AD98-9CBA-456E-A827-79FCEDEB30A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C117BF2F-1E5B-4AEC-8770-3153E5B4CD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437BC6D8-D103-452C-9C86-D89FC977A50F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED6CAE-D97F-49E0-9D00-1642A3A427B4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041F9200-4C01-4187-AE34-240E8277B54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB48767-F095-444F-9E05-D9AC345AB803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6FA12B-504C-4DBF-A32E-0548557AA2ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2018/03/24/8",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103512",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040569",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0366",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0367",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0004/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-1/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-2/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3937-2/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4164",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/03/24/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3937-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15715",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-03-26T15:29:00.287",
      "lastModified" : "2024-11-21T03:15:04.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename."
      }, {
        "lang" : "es",
        "value" : "En las versiones 2.4.0 hasta la 2.4.29 de Apache httpd, la expresión especificada en  podría unir \"$\" con un carácter nueva línea o newline en un nombre de archivo malicioso, en lugar de interpretarse, únicamente, como el final del nombre de archivo. Esto se podría explotar en entornos donde las subidas de algunos archivos están bloqueadas de manera externa, pero solo uniendo la porción final del nombre del archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.29",
            "matchCriteriaId" : "47C95C21-306A-4F45-BA45-0CCAEEEC8ADF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED6CAE-D97F-49E0-9D00-1642A3A427B4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041F9200-4C01-4187-AE34-240E8277B54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB48767-F095-444F-9E05-D9AC345AB803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6FA12B-504C-4DBF-A32E-0548557AA2ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2018/03/24/6",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103525",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040570",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0366",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0367",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.elarlang.eu/cve-2017-15715-apache-http-server-filesmatch-bypass-with-a-trailing-newline-at-the-end-of-the-file-name.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0004/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-1/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-2/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4164",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2018/03/24/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.elarlang.eu/cve-2017-15715-apache-http-server-filesmatch-bypass-with-a-trailing-newline-at-the-end-of-the-file-name.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180601-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3627-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2019-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15534",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-03-26T16:29:00.223",
      "lastModified" : "2024-11-21T03:14:44.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of circumstance, the exploit can allow the user to kill the app to prevent it from locking the device, thereby allowing the individual to gain device access."
      }, {
        "lang" : "es",
        "value" : "Norton App Lock en versiones anteriores a la 1.3.0.13 puede ser vulnerable a un exploit de omisión de autenticación En este caso específico, el exploit puede permitir al usuario forzar el cierre de la aplicación para evitar que bloquee el dispositivo y, de ese modo, permitir al individuo obtener acceso a él."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_app_lock:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.13",
            "matchCriteriaId" : "70C63C19-EAAB-4BC6-ACAD-B7D5F11663EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103377",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180326_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180326_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6278",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-03-26T16:29:00.287",
      "lastModified" : "2024-11-21T03:29:25.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "El kernel de NVIDIA Tegra contiene una vulnerabilidad en el controlador CORE DVFS Thermal, donde existe la posibilidad de que se produzca una lectura o escritura de búfer empleando un índice o un puntero que haga referencia a una ubicación en la memoria después del final del búfer, lo que puede conducir a una denegación de servicio (DoS) o a un posible escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:jetson_tx1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.2.2",
            "matchCriteriaId" : "793B313B-6FB5-4F93-881F-FF642DBCC010"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1FDAD-C594-43D9-9BF6-F7461177AB91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:jetson_tx1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "28.1",
            "matchCriteriaId" : "EF603C72-0BD8-4B30-93C8-10EB14843961"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1FDAD-C594-43D9-9BF6-F7461177AB91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:jetson_tk1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.6",
            "matchCriteriaId" : "CB7AB0B7-97FA-43BD-9848-0D32ECAE6549"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tk1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810B05A3-29CF-464F-9E63-8238AA0651AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:tegra_k1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.6",
            "matchCriteriaId" : "BBF80A23-E509-4327-BE03-8F9C440DDCC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:tegra_k1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839C2B2C-58AA-451A-BAEF-855D4F6DC852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4635",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/4635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-26T17:29:00.207",
      "lastModified" : "2024-11-21T03:19:40.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification."
      }, {
        "lang" : "es",
        "value" : "La función add_job en scheduler/ipp.c en CUPS, en versiones anteriores a la 2.2.6, cuando un soporte D-Bus está habilitado, podría experimentar un cierre inesperado llevado a cabo por atacantes remotos mediante el envío de tareas de impresión con un nombre de usuario no válido. Esto está relacionado con una notificación D-Bus."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.6",
            "matchCriteriaId" : "6A17CA65-4B96-400E-B3EE-EA8D32F0AB63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apple/cups/issues/5143",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apple/cups/releases/tag/v2.2.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00018.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.cucumberlinux.com/security/details.php?id=346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3713-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apple/cups/issues/5143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apple/cups/releases/tag/v2.2.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.cucumberlinux.com/security/details.php?id=346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3713-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-26T20:29:00.227",
      "lastModified" : "2024-11-21T03:19:40.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads."
      }, {
        "lang" : "es",
        "value" : "La función add_free_nid en fs/f2fs/noce.c en el kernel de Linux, en versiones anteriores a la 4.12, no rastrea correctamente un nid asignado, lo cual podría permitir a los usuarios locales provocar una denegación de servicio (condición de carrera) o, posiblemente, causar otro impacto sin especificar mediante hilos concurrentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12",
            "matchCriteriaId" : "D9BBDA7A-EA95-41C5-8F4C-CA458BCB7E1F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a61ddf8117c26ac5b295e1233eaa9629a94ca3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/30a61ddf8117c26ac5b295e1233eaa9629a94ca3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3932-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3932-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a61ddf8117c26ac5b295e1233eaa9629a94ca3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/30a61ddf8117c26ac5b295e1233eaa9629a94ca3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3932-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3932-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-26T21:29:00.203",
      "lastModified" : "2024-11-21T03:09:25.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of arbitrary programs with \"NT AUTHORITY\\SYSTEM\" privileges."
      }, {
        "lang" : "es",
        "value" : "Es posible explotar una vulnerabilidad Time of Check Time of Use (TOCTOU) al ganar una condición de carrera cuando las versiones 9.3.0.11 y anteriores del agente Kaseya Virtual System Administrator intentan ejecutar sus binarios de las carpetas de trabajo y/o temporales. Resultados de explotación exitosos en la ejecución de programas arbitrarios con privilegios \"NT AUTHORITY\\SYSTEM\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaseya:virtual_system_administrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0.11",
            "matchCriteriaId" : "34BF73AE-44FF-4050-AFF0-8EC536159CC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541884/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541884/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-26T21:29:00.267",
      "lastModified" : "2024-11-21T03:10:15.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from an arbitrary website using <object> and/or <appletHTML> tags. Successful exploitation results in file creation/modification/deletion in the operating system and with privileges of the user that ran the Java applet."
      }, {
        "lang" : "es",
        "value" : "El análisis del Applet 52790 y anteriores de JavaStart.jar en Bomgar Remote Support Portal reveló que es susceptible a una vulnerabilidad de salto de directorio. Este archivo se puede descargar desde una determinada implementación de Bomgar Remote Support Portal en https://domain/api/content/JavaStart.jar y se puede invocar desde un sitio web arbitrario mediante las etiquetas <object> y/o . Una explotación exitosa resulta en la creación, modificación o eliminación de archivos en el sistema operativo y con los privilegios del usuario que ejecutó el applet de Java."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomgar:remote_support:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874F3CB5-0242-45FB-A352-5EF16BCF4C43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/541885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/541885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-27T03:29:00.213",
      "lastModified" : "2024-11-21T03:19:41.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la versión 7.0.7 de ImageMagick. Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función LogOpenCLBuildFailure en MagickCore/opencl.c, lo que permite a los atacantes provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD6A151-47EB-4305-B4CB-F9003BC2E5DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/793",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-27T03:29:00.277",
      "lastModified" : "2024-11-21T03:19:41.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la versión 7.0.7 de ImageMagick. Se ha encontrado una vulnerabilidad de filtrado de memoria en la función ReadPCDImage en coders/pcd.c que permite a atacantes remotos provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE44262E-5678-44A7-B2DC-102128A569A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/809",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-27T03:29:00.340",
      "lastModified" : "2024-11-21T03:19:41.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la versión 7.0.7 de ImageMagick. La función MogrigyImageList en MagickWand/mogrify.c permite a los atacantes provocar una denegación de servicio (fallo de aserción y salida de la aplicación en ReplaceImageInList) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE44262E-5678-44A7-B2DC-102128A569A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/802",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-27T03:29:00.387",
      "lastModified" : "2024-11-21T03:19:41.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la versión 7.0.7 de ImageMagick. Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en la función LogOpenCLBuildFailure en MagickCore/opencl.c que permite a los atacantes provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE44262E-5678-44A7-B2DC-102128A569A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/794",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-27T03:29:00.433",
      "lastModified" : "2024-11-21T03:19:41.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en la versión 7.0.7 de ImageMagick. Se ha encontrado una vulnerabilidad de filtrado de memoria en la función WriteGIFImage en coders/gif.c que permite a atacantes remotos provocar una denegación de servicio (DoS) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE44262E-5678-44A7-B2DC-102128A569A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/808",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12310",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-03-27T09:29:00.217",
      "lastModified" : "2024-11-21T03:09:17.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sensitive information in the unencrypted headers of an HTTP method request. The attacker could use this information to conduct additional reconnaissance attacks leading to the disclosure of sensitive customer data. The vulnerability exists in the auto discovery phase because an unencrypted HTTP request is made due to requirements for implementing the Hybrid Calendar service. An attacker could exploit this vulnerability by monitoring the unencrypted traffic on the network. An exploit could allow the attacker to access sensitive customer data belonging to Office365 users, such as email and calendar events. Cisco Bug IDs: CSCvg35593."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la fase de descubrimiento de Cisco Spark Hybrid Calendar Service podría permitir a un atacante remoto no autenticado visualizar información sensible en las cabeceras no cifradas de una petición HTTP method. El atacante podría utilizar esta información para realizar ataques adicionales de reconocimiento que den lugar a la revelación de datos sensibles de clientes. La vulnerabilidad existe en la fase de autodescubrimiento debido a que se realiza una petición HTTP no cifrada por requisitos de implementación del servicio Hybrid Calendar. Un atacante podría explotar esta vulnerabilidad monitorizando el tráfico no cifrado de la red. Un exploit podría permitir que el atacante acceda a datos sensibles de clientes que pertenecen a usuarios de Office365 como correos electrónicos y eventos de calendario. Cisco Bug IDs: CSCvg35593."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:spark_hybrid_calendar_service:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55386B52-E000-4C92-B373-A07DB019D447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171023-spark",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171023-spark",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12319",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-03-27T09:29:00.280",
      "lastModified" : "2025-10-28T13:58:31.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability. The vulnerability exists due to changes in the implementation of the BGP MPLS-Based Ethernet VPN RFC (RFC 7432) draft between IOS XE software releases. When the BGP Inclusive Multicast Ethernet Tag Route or BGP EVPN MAC/IP Advertisement Route update packet is received, it could be possible that the IP address length field is miscalculated. An attacker could exploit this vulnerability by sending a crafted BGP packet to an affected device after the BGP session was established. An exploit could allow the attacker to cause the affected device to reload or corrupt the BGP routing table; either outcome would result in a DoS. The vulnerability may be triggered when the router receives a crafted BGP message from a peer on an existing BGP session. This vulnerability affects all releases of Cisco IOS XE Software prior to software release 16.3 that support BGP EVPN configurations. If the device is not configured for EVPN, it is not vulnerable. Cisco Bug IDs: CSCui67191, CSCvg52875."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo BGP (Border Gateway Protocol) en una red Ethernet Virtual Private Network (EVPN) para Cisco IOS XE Software podría permitir que un atacante remoto no autenticado haga que el dispositivo se reinicie, lo que da lugar a una denegación de servicio (DoS) o, posiblemente, a que se corrompa la tabla de enrutamiento BGP, que a su vez puede dar como resultado la inestabilidad de la red. La vulnerabilidad existe debido a cambios en la implementación de la versión de borrador de BGP MPLS-Based Ethernet VPN RFC (RFC 7432) entre distribuciones de software IOS XE. Cuando se reciben los paquetes de actualización BGP Inclusive Multicast Ethernet Tag Route or BGP EVPN MAC/IP Advertisement Route, es posible que el campo de longitud de dirección IP se calcule de manera incorrecta. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete BGP manipulado a un dispositivo afectado después de que se establezca una sesión BGP. Un exploit podría permitir que el atacante haga que se reinicie el dispositivo afectado o que corrompa la tabla de enrutamiento BGP. En cualquiera de los dos casos, el resultado sería una denegación de servicio (DoS). Esta vulnerabilidad puede tener lugar cuando el router recibe un mensaje BGP manipulado desde un peer o una sesión BGP existente. La vulnerabilidad afecta a todas las distribuciones de Cisco IOS XE Software anteriores a la versión 16.3 que soporta configuraciones BGP EVPN. Si el dispositivo no está configurado para EVPN, no es vulnerable. Cisco Bug IDs: CSCui67191, CSCvg52875."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4A8AE730-B4DA-4CC7-8B48-BB603AC495DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62564BB8-1282-4597-A645-056298BE7CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5E48D7-2266-4649-90A9-62C476AFE6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99581637-E184-4A02-8313-57C7C31E5479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6D4A90-31B9-4B6C-ADAC-44C49DB44115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AF3F75-0BD8-4AA6-B696-3624BEE86681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C58CEA6-69F8-4021-98C9-4676C70AB167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF156D97-7C39-49CF-9938-D9681066FF05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871AC0F6-5C01-43A1-8436-7885439BD81F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2147DBF8-B733-4F76-90C5-9D94F1E93625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222CA59-F4FD-478D-83C9-566B389140B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A273EE-41C1-41E9-9002-46F83FC6533F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C90C43-2D7D-43F8-AD7F-421878909AE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445597DA-7EEC-470D-9A71-BC43A9F7DE5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86049773-C88D-4A26-A0D3-D40F3C312AEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB4B7C2-4D45-4267-BCBB-57D36C6104A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8A4630-8B21-4994-8EF5-E105593A64E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F799DC02-EB06-458C-8545-A174475FE7A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89FBA68-A8ED-4C5A-916E-A68468F59730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD272E6E-2ED1-4408-8FF7-0B82F9DCBEF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC278B77-AD63-42AD-B9E8-EE4DE97E27E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:44461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697BEF89-6D9B-4870-BE85-9090152F3E6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34DAD43-0C95-4830-8078-EFE3E6C0A930"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F5CBF0-7F55-44C0-B321-896BDBA22679"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D381E343-416F-42AF-A780-D330954F238F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2514A1-486C-40F7-8746-56E2B973CBE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3816C-95F4-443C-9C79-72F0251528F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1810C73-93B8-4EB5-85FC-3585AD5256BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2BC76E-A166-4E71-B058-F49FF84A9E19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542244A0-300C-4630-812A-BF45F61E38DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2182E7-C813-4966-A36C-E648A9344299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA873342-542E-4FC8-9C22-B5A43F9F3E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64B28-7F3F-40BC-B289-0D1DB55B6461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5603296-34B3-4EEB-B242-C44BC56BFBB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2A515C-797D-47EE-8051-F3FBE417BCE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E673A75F-EFF8-4591-8E0F-A21083563DBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5456C70-6BA4-456A-BCFA-06FD052E44EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515CD97F-DDBD-4F75-A6DB-646890A30B32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E181FC9-6790-4C12-874F-67252B6879BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD4F12D-3F97-44D2-9DE2-571425E75F4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-4sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1288DB-5946-4091-A6E8-42E0A0E7B2B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70352B04-C3FD-47F5-A2F8-691CF63EB50D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE063AF2-5579-4D7E-8829-9102FC7CB994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737F22AB-C5A9-4A18-BA3D-38A222491397"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5DCFD5-2B46-4D06-9E4C-B2325F440F02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9407r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5508320-8318-41A8-8026-4A61907C1CD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9410r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD337D8-8C72-4025-A8C3-E63598DE7BDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FC868-0B38-4F24-BA40-87966FF80AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19A801D-02D7-40B0-88E8-FE7BA8630E60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA59279-3504-417D-9E86-E5886EE198BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4035136-CC10-4DDD-92AF-9DC41D19CF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cloud_services_router_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCB8270-A01D-40A6-BF4B-26BAF65E68F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-con-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E69A6F-DFC0-4C8A-B77F-B7329FA5F567"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-ncp-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA015C4-7163-4FCD-ADE1-D5481B10EACA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:integrated_services_virtual_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5361C70A-C036-4254-9698-BC58F48C465B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:network_convergence_system_520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A35D05-30AC-460F-ADBF-5B7EB0801ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101676",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171103-bgp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171103-bgp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12319",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7630",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-27T21:29:00.440",
      "lastModified" : "2024-11-21T03:32:19.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinfoReq.cgi."
      }, {
        "lang" : "es",
        "value" : "QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 y anteriores permiten que atacantes remotos obtengan información potencialmente sensible (versión de firmware y servicios en ejecución) mediante una petición en sysinfoReq.cgi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9E6F8F-A433-45A7-8839-5D478FE179A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-23",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7631",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-27T21:29:00.500",
      "lastModified" : "2024-11-21T03:32:20.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en la función de compartición de enlaces de File Station, en QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 y anteriores, permite que atacantes remotos inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9E6F8F-A433-45A7-8839-5D478FE179A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-23",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7632",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-03-27T21:29:00.563",
      "lastModified" : "2024-11-21T03:32:20.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en File Station, en QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 y anteriores, permite que atacantes remotos inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9E6F8F-A433-45A7-8839-5D478FE179A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-23",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201803-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11509",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2018-03-28T17:29:00.210",
      "lastModified" : "2024-11-21T03:07:54.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement."
      }, {
        "lang" : "es",
        "value" : "Un atacante remoto autenticado puede ejecutar código arbitrario en Firebird SQL Server, versiones 2.5.7 y 3.0.2, ejecutando una instrucción SQL mal formada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13393620-4886-4BDC-A4F7-582939A1E13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40DAE39-D9A9-4753-A9E4-DFADBBA75B23"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-36",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11510",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2018-03-28T17:29:00.273",
      "lastModified" : "2024-11-21T03:07:54.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request."
      }, {
        "lang" : "es",
        "value" : "Existe un filtrado de información en la cámara de red HW0021 de Wanscam que permite que un atacante remoto no autenticado recupere el nombre de usuario y contraseña del administrador mediante una petición ONVIF GetSnapshotUri."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wanscam:hw0021_firmware:11.6.5.1.1-20161213:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0969C2DE-C3F6-4572-B316-6838F78951E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wanscam:hw0021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD623C0-2A52-4B2A-BC2C-90776AF2A619"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2017-33",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2017-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0936",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-03-28T20:29:00.270",
      "lastModified" : "2024-11-21T03:03:55.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server en versiones anteriores a la 11.0.7 y versiones 12.0.5 contiene una vulnerabilidad de omisión de autorización mediante una clave controlada por el usuario. La falta de una verificación de propiedad permitía a los usuarios con sesión iniciada modificar el alcance de las contraseñas de la aplicación de otros usuarios. Hay que tener en cuenta que las contraseñas de app no se revelaban de por sí y que el error no se puede utilizar para identificarse como otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.7",
            "matchCriteriaId" : "651BDB58-3505-4B06-B55E-4F65A997F795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:12.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB2F56C-B9AF-4EAF-B41D-C18EA221CF58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/297751",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2018-001",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/297751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=nc-sa-2018-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3777",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.217",
      "lastModified" : "2023-11-07T02:44:13.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3778",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.293",
      "lastModified" : "2023-11-07T02:44:13.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3779",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.357",
      "lastModified" : "2023-11-07T02:44:13.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3780",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.420",
      "lastModified" : "2023-11-07T02:44:14.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3781",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.467",
      "lastModified" : "2023-11-07T02:44:14.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3782",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.513",
      "lastModified" : "2023-11-07T02:44:14.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3783",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.577",
      "lastModified" : "2023-11-07T02:44:14.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3784",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.637",
      "lastModified" : "2023-11-07T02:44:15.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3785",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.687",
      "lastModified" : "2023-11-07T02:44:15.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3786",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.730",
      "lastModified" : "2023-11-07T02:44:15.663",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3787",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.827",
      "lastModified" : "2023-11-07T02:44:15.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3788",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.887",
      "lastModified" : "2023-11-07T02:44:16.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3789",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-03-29T15:29:00.950",
      "lastModified" : "2023-11-07T02:44:16.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-29T18:29:01.310",
      "lastModified" : "2024-11-21T03:28:43.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboot the device into the Qualcomm Emergency Download (EDL) mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as the Android Bootloader."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en dispositivos OnePlus One, X, 2, 3, 3T y 5 con OxygenOS 5.0 y anteriores. El atacante puede reiniciar el dispositivo en modo Qualcomm Emergency Download (EDL) mediante ADB o empleando la tecla de subir volumen al estar conectado a USB. Esto podría permitir la degradación de particiones como Android Bootloader."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "4A8EE237-7537-4691-9B54-2287B47C1695"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B048C-6522-41A7-9DAB-834FBFCA3C00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B1891E-38B0-42C5-89D3-3DC12217F087"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_3t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E02CB-9EAC-4BFD-8CCC-337610E1CCEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F179266A-2A67-4A9D-89E6-B3CCE4430A68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8AD37A-7539-4F16-8AC2-2556035B0DE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oneplus:oneplus_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A390FA-9B56-4645-991D-5E9CB16966B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://alephsecurity.com/vulns/aleph-2017007",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://alephsecurity.com/vulns/aleph-2017007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-29T22:29:00.540",
      "lastModified" : "2024-11-21T03:16:28.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available."
      }, {
        "lang" : "es",
        "value" : "El proceso de actualización vagrant en Hashicorp vagrant-vmware-fusion, de la versión 5.0.2 a la 5.0.4, permite que usuarios locales roben privilegios root mediante una petición manipulada de actualización cuando no hay ninguna actualización disponible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.2",
            "versionEndIncluding" : "5.0.4",
            "matchCriteriaId" : "39275375-022D-4013-9F11-D2EA213F8DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-29T22:29:00.603",
      "lastModified" : "2024-11-21T03:17:04.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed."
      }, {
        "lang" : "es",
        "value" : "Hashicorp vagrant-vmware-fusion 5.0.4 permite que usuarios locales roben privilegios root si VMware Fusion no está instalado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40784AC0-3872-46DC-8481-AAD6E192D2B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201716839-hashicorp-vagrantvmwarefusion-v504-local-root.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201716839-hashicorp-vagrantvmwarefusion-v504-local-root.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-29T22:29:00.650",
      "lastModified" : "2024-11-21T03:17:09.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5.0.4 in order to escalate to root privileges."
      }, {
        "lang" : "es",
        "value" : "Es posible explotar una ruta sin sanear en el binario suid que se distribuye con vagrant-vmware-fusion, de la versión 4.0.25 a la 5.0.4, para escalar a privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.25",
            "versionEndIncluding" : "5.0.4",
            "matchCriteriaId" : "576449F3-2E48-4A77-B9C9-E668157CD8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201716873-hashicorp-vagrantvmwarefusion-v4025504-local-root.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201716873-hashicorp-vagrantvmwarefusion-v4025504-local-root.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11010",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.290",
      "lastModified" : "2024-11-21T03:06:56.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, access control left a configuration space unprotected."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores al 2018-01-05, en Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, el control de acceso dejaba un espacio de la configuración sin protección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14906",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.370",
      "lastModified" : "2024-11-21T03:13:44.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding is not supported by the crypto storage APIs."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores al 2018-01-05 en Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12 y PKCS7, el rellenado no está permitido por las API de criptoalmacenaje."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14911",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.433",
      "lastModified" : "2024-11-21T03:13:44.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores al 2018-01-05 en Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820 y SD 835, es posible que el cargador XBL omita la autenticación de la configuración del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD17C0A3-A200-4659-968B-B2DA03CB683F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F31FFB-982A-4308-82F8-C2480DABDED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14912",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.493",
      "lastModified" : "2024-11-21T03:13:44.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 835, the attributes of buffers in Secure Display were not marked properly."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores al 2018-01-05 en Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800 y SD 835, los atributos de los búfers en Secure Display no se han marcado correctamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14913",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.557",
      "lastModified" : "2024-11-21T03:13:44.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores al 2018-01-05 en Qualcomm Snapdragon IoT y Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835 y SD 845, la validación de entradas de la dirección DDR se está truncando incorrectamente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14915",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.603",
      "lastModified" : "2024-11-21T03:13:45.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores al 2018-01-05 en Qualcomm Snapdragon Mobile SD 625, SD 650/52 y SD 835, acceder a las funciones SPCOM con una estructura de cliente comprometida puede resultar en una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9681",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T15:29:00.667",
      "lastModified" : "2024-11-21T03:36:38.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl, it will print kernel address data. A user could set it to an arbitrary kernel address, hence information disclosure (for kernel) could occur."
      }, {
        "lang" : "es",
        "value" : "En Android en versiones anteriores a la 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android y todas las distribuciones desde CAF que empleen el kernel de Linux, si la dirección de memoria del kernel se pasa desde el espacio de usuario a través de una llamada ioctl iris_vidioc_s_ext_ctrls, se imprimirán los datos de la dirección del kernel. Un usuario podría establecerlo en una dirección de kernel arbitraria, pudiendo así ocurrir una divulgación de información (del kernel)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1705",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-30T16:29:00.153",
      "lastModified" : "2024-11-21T03:22:14.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it can be obtained by viewing the page source. IBM X-Force ID: 134427."
      }, {
        "lang" : "es",
        "value" : "IBM Security Privileged Identity Manager 2.1.0 contiene información sensible residual en los comentarios de la página. Aunque en un principio esta información no es visible, se puede obtener visualizando el código fuente de la página. IBM X-Force ID: 134427."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_privileged_identity_manager:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B33A72-C804-4292-BC18-76A26E2BE3B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014988",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103677",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134427",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1747",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-30T16:29:00.200",
      "lastModified" : "2024-11-21T03:22:18.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applications consuming messages that it needs to perform data conversion on. IBM X-Force ID: 135520."
      }, {
        "lang" : "es",
        "value" : "Un mensaje especialmente manipulado podría provocar una denegación de servicio (DoS) en las aplicaciones de IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3 y 9.0.4, consumiendo mensajes que necesita para realizar conversiones de datos. IBM X-Force ID: 135520."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E773A8-4ED2-47AA-A2D7-5CD02CBA47C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4084EE93-8B41-493E-BB50-9ABC8E956C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA310DB1-904C-45D0-8CAC-0B01638A7D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C2DE42-FE8C-4023-A495-A2DBFE2F97F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406AADD2-9732-44F1-91FC-F8C90088AD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018595DD-9AAD-44C7-9A46-BC78AF1F6C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF68ED28-0999-4622-A923-624284229F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012992",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103590",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135520",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1756",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-30T16:29:00.247",
      "lastModified" : "2024-11-21T03:22:19.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856."
      }, {
        "lang" : "es",
        "value" : "La versión 8.6 de IBM Business Process Manager permite que las páginas web se almacenen localmente, lo que permite que sean leídas por otro usuario en el sistema. IBM X-Force ID: 135856."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "91BDDE54-95C6-4E95-9427-D83E61355E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8057C7D0-978D-490B-BE80-597A2CB27A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "3DEBE193-CDE1-406C-9042-4085AA0EED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "EF781F2F-05FB-4DBD-8BC1-98A630CD375A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "0F1442C9-ED96-40C5-BE20-987C928BAD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:advanced:*:*:*",
            "matchCriteriaId" : "5FD533D8-D3B2-4661-BD35-C48C1C3C47E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E5105E85-7A37-4A2D-9C56-955B7A414560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:advanced:*:*:*",
            "matchCriteriaId" : "F2D29466-67FB-4096-9F5C-1CE4C6E9388F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:advanced:*:*:*",
            "matchCriteriaId" : "33424F24-7A35-489A-B1B8-BEEBC165CDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:advanced:*:*:*",
            "matchCriteriaId" : "A9BD1DCB-5A74-4131-818F-62B6D6350D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:advanced:*:*:*",
            "matchCriteriaId" : "B6807E40-534F-475E-89CA-9D8D84E501C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "16617000-4388-43EF-AE14-8C108068155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "05B6C389-9332-4C33-A3AD-270A54AC564E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "17E42B0A-0947-4799-993F-CBF8A84EBD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "50B6287C-5A45-46B7-A685-93D1CBA0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:express:*:*:*",
            "matchCriteriaId" : "32F2F148-4CF2-46BF-AA7D-D019CBA72C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:express:*:*:*",
            "matchCriteriaId" : "54C2CBF0-838B-4F7F-9E63-25053EC6D2E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:express:*:*:*",
            "matchCriteriaId" : "0D6B3497-1C02-43C0-8B73-9289F7FC00A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:express:*:*:*",
            "matchCriteriaId" : "7B136A70-552E-4545-853A-BAFD0919D52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:express:*:*:*",
            "matchCriteriaId" : "94F5B156-9994-4A1A-A552-FA4108908883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*",
            "matchCriteriaId" : "BD42A0F7-540B-4673-AD8C-373A424A27B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "542E8F0D-8326-48E1-9D72-C61EF104573D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "1D338AF3-8FE6-4E51-B961-344E157EECFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E4B6A964-F948-4FAA-A6C7-41641AF12504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "07630F25-A03C-401D-A16A-51B63014C963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E95968B6-FF99-4234-9EC7-6EAA9C7DA753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3693DBD8-F30F-44D0-A154-4C268120D7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:standard:*:*:*",
            "matchCriteriaId" : "D67D59BD-B0B2-47A8-8045-7C62721EA081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:standard:*:*:*",
            "matchCriteriaId" : "A30BF550-893B-4F5D-B128-157655B6F8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:standard:*:*:*",
            "matchCriteriaId" : "82E8F8FF-7C1E-4684-B479-BB3F8EA13B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:standard:*:*:*",
            "matchCriteriaId" : "25AFA35A-B7BC-430C-8AF9-73653E6D36B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:standard:*:*:*",
            "matchCriteriaId" : "6E9348B4-025E-4A86-A3B5-616840F28B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:standard:*:*:*",
            "matchCriteriaId" : "1B8D6782-F9D8-4B89-8C1D-9BB8992BD89F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager_enterprise_service_bus:8.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FE592-6983-4C3C-8552-B38735CB2D25"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere:7.2.0.0:*:*:*:lombardi:*:*:*",
            "matchCriteriaId" : "1D822D62-D3B2-4B71-BD84-4FC15CE7CCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere:7.2.0.1:*:*:*:lombardi:*:*:*",
            "matchCriteriaId" : "96510E62-70F4-40AB-8DE4-220C833CB306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere:7.2.0.2:*:*:*:lombardi:*:*:*",
            "matchCriteriaId" : "041B6ACD-FE0B-4EE0-BCF4-10D4555ED9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere:7.2.0.3:*:*:*:lombardi:*:*:*",
            "matchCriteriaId" : "7D75BE32-0A9B-448F-BE20-E80BD599A14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere:7.2.0.4:*:*:*:lombardi:*:*:*",
            "matchCriteriaId" : "5B80E411-3F24-4BF0-8B3F-116E0C998E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere:7.2.0.5:*:*:*:lombardi:*:*:*",
            "matchCriteriaId" : "51B1CAA3-E2AA-4284-A0DC-19E9C76A8149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010796",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103589",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135856",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22010796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1765",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-30T16:29:00.293",
      "lastModified" : "2024-11-21T03:22:20.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150."
      }, {
        "lang" : "es",
        "value" : "La versión 8.6 de IBM Business Process Manager podría permitir que un usuario autenticado con privilegios especiales revele información sensible sobre el servidor de la aplicación. IBM X-Force ID: 136150."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E71AC948-9F71-403E-8035-172D5F667B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E77872E9-D66C-47FF-AA1D-7764D65997A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7B3D03C8-B7F4-43AF-9270-555507AAC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E69BBEFA-B321-4085-AEA1-BAE2B0B54524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "BE4F0900-83C3-4228-9F3B-2664C1C816F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "9942841D-3E36-4159-AA5A-B534CB701B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "7A1FCB4E-DC46-4780-9017-1E8E789E785F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "19B921EC-DE16-4A2B-BB29-B02A9B416470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:advanced:*:*:*",
            "matchCriteriaId" : "5FD533D8-D3B2-4661-BD35-C48C1C3C47E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E5105E85-7A37-4A2D-9C56-955B7A414560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:advanced:*:*:*",
            "matchCriteriaId" : "F2D29466-67FB-4096-9F5C-1CE4C6E9388F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:advanced:*:*:*",
            "matchCriteriaId" : "33424F24-7A35-489A-B1B8-BEEBC165CDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:advanced:*:*:*",
            "matchCriteriaId" : "A9BD1DCB-5A74-4131-818F-62B6D6350D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:advanced:*:*:*",
            "matchCriteriaId" : "B6807E40-534F-475E-89CA-9D8D84E501C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "FE68791B-B7AE-4715-810E-0C278E5C363F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "00CC8270-5ABE-428C-9090-16EC8298E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "A05F59A1-3063-45ED-B1E8-AABC4FC0A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "60F679C8-74FB-40F5-A5B8-FBD6BF424379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*",
            "matchCriteriaId" : "0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8FE10C1D-2077-435A-8C14-2746A685681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "EE43BACD-D187-49C9-85D1-51E3F71D2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8578A0D7-3330-4F79-A934-4940673383A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:express:*:*:*",
            "matchCriteriaId" : "32F2F148-4CF2-46BF-AA7D-D019CBA72C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:express:*:*:*",
            "matchCriteriaId" : "54C2CBF0-838B-4F7F-9E63-25053EC6D2E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:express:*:*:*",
            "matchCriteriaId" : "0D6B3497-1C02-43C0-8B73-9289F7FC00A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:express:*:*:*",
            "matchCriteriaId" : "7B136A70-552E-4545-853A-BAFD0919D52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:express:*:*:*",
            "matchCriteriaId" : "94F5B156-9994-4A1A-A552-FA4108908883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*",
            "matchCriteriaId" : "BD42A0F7-540B-4673-AD8C-373A424A27B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "542E8F0D-8326-48E1-9D72-C61EF104573D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "37281A0A-3BE1-4B22-840F-65CA7B8AB360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "3FC25EB0-CA22-4176-8752-8BD26B111F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "7C097D2E-5BB7-4979-A755-E928094A92C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "021FABA7-6B97-4511-8E07-B7A34A387493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F6E31F25-6E71-4A5C-A940-0A935AF19035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "F646DABB-4C10-4308-8169-EC42C358CF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CC44A2D4-F3D3-4D98-8FDC-8274E1725800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:standard:*:*:*",
            "matchCriteriaId" : "D67D59BD-B0B2-47A8-8045-7C62721EA081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:standard:*:*:*",
            "matchCriteriaId" : "A30BF550-893B-4F5D-B128-157655B6F8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:standard:*:*:*",
            "matchCriteriaId" : "82E8F8FF-7C1E-4684-B479-BB3F8EA13B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:standard:*:*:*",
            "matchCriteriaId" : "25AFA35A-B7BC-430C-8AF9-73653E6D36B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:standard:*:*:*",
            "matchCriteriaId" : "6E9348B4-025E-4A86-A3B5-616840F28B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:standard:*:*:*",
            "matchCriteriaId" : "1B8D6782-F9D8-4B89-8C1D-9BB8992BD89F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager_enterprise_service_bus:8.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FE592-6983-4C3C-8552-B38735CB2D25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011844",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103678",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040622",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136150",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1766",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-30T16:29:00.327",
      "lastModified" : "2024-11-21T03:22:20.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151."
      }, {
        "lang" : "es",
        "value" : "Debido a una autorización incorrecta en la versión 8.6 de IBM Business Process Manager, un atacante puede reclamar y trabajar en tareas ad hoc a las que no está asignado. IBM X-Force ID: 136151."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:advanced:*:*:*",
            "matchCriteriaId" : "5FD533D8-D3B2-4661-BD35-C48C1C3C47E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E5105E85-7A37-4A2D-9C56-955B7A414560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:advanced:*:*:*",
            "matchCriteriaId" : "F2D29466-67FB-4096-9F5C-1CE4C6E9388F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:advanced:*:*:*",
            "matchCriteriaId" : "33424F24-7A35-489A-B1B8-BEEBC165CDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:advanced:*:*:*",
            "matchCriteriaId" : "A9BD1DCB-5A74-4131-818F-62B6D6350D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:advanced:*:*:*",
            "matchCriteriaId" : "B6807E40-534F-475E-89CA-9D8D84E501C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:express:*:*:*",
            "matchCriteriaId" : "32F2F148-4CF2-46BF-AA7D-D019CBA72C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:express:*:*:*",
            "matchCriteriaId" : "54C2CBF0-838B-4F7F-9E63-25053EC6D2E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:express:*:*:*",
            "matchCriteriaId" : "0D6B3497-1C02-43C0-8B73-9289F7FC00A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:express:*:*:*",
            "matchCriteriaId" : "7B136A70-552E-4545-853A-BAFD0919D52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:express:*:*:*",
            "matchCriteriaId" : "94F5B156-9994-4A1A-A552-FA4108908883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*",
            "matchCriteriaId" : "BD42A0F7-540B-4673-AD8C-373A424A27B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "542E8F0D-8326-48E1-9D72-C61EF104573D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201712:*:*:express:*:*:*",
            "matchCriteriaId" : "837E1B12-4B58-46E6-910F-7BAC4FB47216"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:standard:*:*:*",
            "matchCriteriaId" : "D67D59BD-B0B2-47A8-8045-7C62721EA081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:standard:*:*:*",
            "matchCriteriaId" : "A30BF550-893B-4F5D-B128-157655B6F8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:standard:*:*:*",
            "matchCriteriaId" : "82E8F8FF-7C1E-4684-B479-BB3F8EA13B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:standard:*:*:*",
            "matchCriteriaId" : "25AFA35A-B7BC-430C-8AF9-73653E6D36B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:standard:*:*:*",
            "matchCriteriaId" : "6E9348B4-025E-4A86-A3B5-616840F28B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:standard:*:*:*",
            "matchCriteriaId" : "1B8D6782-F9D8-4B89-8C1D-9BB8992BD89F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011866",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136151",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22011866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1767",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-03-30T16:29:00.373",
      "lastModified" : "2024-11-21T03:22:20.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152."
      }, {
        "lang" : "es",
        "value" : "IBM Business Process Manager 8.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 136152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66A4A455-A75B-4363-AC6D-DAD50287EB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "240E404A-0420-4731-8DFE-076746B14807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "66327978-D257-4ADE-8AEA-22547B0E4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",
            "matchCriteriaId" : "8F88ED9A-7D7F-4C1F-87AA-555C941DE583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:advanced:*:*:*",
            "matchCriteriaId" : "E5105E85-7A37-4A2D-9C56-955B7A414560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:advanced:*:*:*",
            "matchCriteriaId" : "F2D29466-67FB-4096-9F5C-1CE4C6E9388F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:advanced:*:*:*",
            "matchCriteriaId" : "33424F24-7A35-489A-B1B8-BEEBC165CDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:advanced:*:*:*",
            "matchCriteriaId" : "A9BD1DCB-5A74-4131-818F-62B6D6350D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:advanced:*:*:*",
            "matchCriteriaId" : "B6807E40-534F-475E-89CA-9D8D84E501C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "80D84C06-5E93-4DA4-A333-D3CECB7D74E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "D06A925E-C739-48A9-B211-36DE458A7898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*",
            "matchCriteriaId" : "28D39434-BC55-40CC-B02C-68C272C67013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*",
            "matchCriteriaId" : "ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:express:*:*:*",
            "matchCriteriaId" : "54C2CBF0-838B-4F7F-9E63-25053EC6D2E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:express:*:*:*",
            "matchCriteriaId" : "0D6B3497-1C02-43C0-8B73-9289F7FC00A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:express:*:*:*",
            "matchCriteriaId" : "7B136A70-552E-4545-853A-BAFD0919D52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:express:*:*:*",
            "matchCriteriaId" : "94F5B156-9994-4A1A-A552-FA4108908883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*",
            "matchCriteriaId" : "BD42A0F7-540B-4673-AD8C-373A424A27B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:express:*:*:*",
            "matchCriteriaId" : "542E8F0D-8326-48E1-9D72-C61EF104573D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "DF7E8429-8750-4D3C-90E1-829031C7C306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "570E9DFF-F991-4D14-87F4-F7FE9554E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "E590C058-EC80-48FB-87C7-3F84E2BC07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*",
            "matchCriteriaId" : "CD9103EF-29E7-48E6-ADF4-66D74C3FF427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:standard:*:*:*",
            "matchCriteriaId" : "A30BF550-893B-4F5D-B128-157655B6F8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:standard:*:*:*",
            "matchCriteriaId" : "82E8F8FF-7C1E-4684-B479-BB3F8EA13B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:standard:*:*:*",
            "matchCriteriaId" : "25AFA35A-B7BC-430C-8AF9-73653E6D36B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:standard:*:*:*",
            "matchCriteriaId" : "6E9348B4-025E-4A86-A3B5-616840F28B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:standard:*:*:*",
            "matchCriteriaId" : "1B8D6782-F9D8-4B89-8C1D-9BB8992BD89F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012396",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103679",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040623",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136152",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11087",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.293",
      "lastModified" : "2024-11-21T03:07:04.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the \"filled length\", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver."
      }, {
        "lang" : "es",
        "value" : "libOmxVenc en Android for MSM, Firefox OS for MSM y QRD Android copia el búfer de salida a una aplicación con una longitud mayor al tamaño real del búfer de salida, lo que provoca un problema de fuga de información en el contexto del mediaserver."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103669",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14875",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.357",
      "lastModified" : "2024-11-21T03:13:40.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists."
      }, {
        "lang" : "es",
        "value" : "En el manipulador del comando ioctl VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE en Android for MSM, Firefox OS for MSM y QRD Android anteriores al 2017-05-23, existe una vulnerabilidad de sobrelectura de memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=755261330733bb2440907a8407ed691c99451ddc",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=755261330733bb2440907a8407ed691c99451ddc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14876",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.403",
      "lastModified" : "2024-11-21T03:13:40.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "En msm_ispif_config_stereo() en Android for MSM, Firefox OS for MSM y QRD Android, en versiones anteriores al 2017-06-21, el parámetro params->entries[i].vfe_intf viene del espacio de usuario sin ninguna comprobación de límites, lo que podría resultar en una escritura fuera de límites del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=f26dbd9d9491333766ba383044064b1304127ac0",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=f26dbd9d9491333766ba383044064b1304127ac0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14877",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.463",
      "lastModified" : "2024-11-21T03:13:41.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX while another sends an ioctl cmd IPA_IOC_DEL_RT_RULE, a use-after-free condition may occur."
      }, {
        "lang" : "es",
        "value" : "Cuando el controlador IPA en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-08-31 procesa comandos IOCTL, no se bloquea el mutex de la memoria asignada. Si un hilo envía un ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX cuando otro envía un ioctl cmd IPA_IOC_DEL_RT_RULE, podría ocurrir una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ca395c15c49cf6463a39d197b6a9331d183d94cb",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ca395c15c49cf6463a39d197b6a9331d183d94cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14881",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.527",
      "lastModified" : "2024-11-21T03:13:41.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur."
      }, {
        "lang" : "es",
        "value" : "Cuando se llama al manipulador IOCTL IP para IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-10-13, podría ocurrir una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=81ea9c34f575422a78015535c619500c34b8a69c",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=81ea9c34f575422a78015535c619500c34b8a69c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14883",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.607",
      "lastModified" : "2024-11-21T03:13:41.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the function wma_unified_power_debug_stats_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-18, if the value param_buf->num_debug_register received from the FW command buffer is close to max of uint32, then the computation performed using this variable to calculate stats_registers_len may overflow to a smaller value leading to less than required memory allocated for power_stats_results and potentially a buffer overflow while copying the FW buffer to local buffer."
      }, {
        "lang" : "es",
        "value" : "En la función wma_unified_power_debug_stats_event_handler() en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-10-18, si el valor param_buf->num_debug_register recibido del búfer del comando FW es cercano al valor máximo de uint32, entonces el procesamiento que utilice esta variable para calcular stats_registers_len podría desbordarse a un valor más pequeño, provocando que se asigne una memoria inferior a la requerida para power_stats_results y pudiendo originar un desbordamiento de búfer cuando se copia el búfer FW al búfer local."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3de34af4e2ca91e1a2260deb380b81620a631c85",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3de34af4e2ca91e1a2260deb380b81620a631c85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14891",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.683",
      "lastModified" : "2024-11-21T03:13:42.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents of the stack can get leaked due to an uninitialized variable."
      }, {
        "lang" : "es",
        "value" : "En la función del driver KGSL _gpuobj_map_useraddr() en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores a la 2017-10-12, los contenidos de la pila se podrían filtrar a causa de una variable no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=736667bf08b03fdca824e88b901c2dbdd6703a0c",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=736667bf08b03fdca824e88b901c2dbdd6703a0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14892",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.747",
      "lastModified" : "2024-11-21T03:13:42.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the function msm_pcm_hw_params() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-19, the return value of q6asm_open_shared_io() is not checked properly potentially leading to a possible dangling pointer access."
      }, {
        "lang" : "es",
        "value" : "En la función msm_pcm_hw_params() en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-09-19, el valor de retorno de q6asm_open_shared_io() no se comprueba correctamente, pudiendo conducir a un acceso por puntero colgante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=a3bed71777c133cfec78b5140877c6ba109961a0",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=a3bed71777c133cfec78b5140877c6ba109961a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15823",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.793",
      "lastModified" : "2024-11-21T03:15:17.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In spectral_create_samp_msg() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, some values from firmware are not properly validated potentially leading to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En spectral_create_samp_msg() en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-10-11, algunos valores del firmware no están validados correctamente, pudiendo provocar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=49c1ce19c8a4689c33e6e8f17ab77d77fae6ff93",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=49c1ce19c8a4689c33e6e8f17ab77d77fae6ff93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15826",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.870",
      "lastModified" : "2024-11-21T03:15:18.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may potentially exist when two threads free the same perf structures."
      }, {
        "lang" : "es",
        "value" : "Debido a una condición de carrera en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores a la 2017-10-20, podría existir una vulnerabilidad de doble liberación (double free) cuando dos hilos liberan las mismas estructuras perf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=5ac3e9d038a7ee7edf77dde2dffae6f8ba528848",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=5ac3e9d038a7ee7edf77dde2dffae6f8ba528848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15846",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.933",
      "lastModified" : "2024-11-21T03:15:19.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer dereference may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En la función video_ioctl2() en el controlador de la cámara en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-09-16, podría ocurrir una desreferencia de puntero no fiable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=9fdbd92ec9196ba3629f68f4c22342aa6eedc960",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=9fdbd92ec9196ba3629f68f4c22342aa6eedc960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15852",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:00.997",
      "lastModified" : "2024-11-21T03:15:20.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una fuga de información de la dirección base ISPIF en Android for MSM, Firefox OS for MSM y QRD Android en el controlador de la cámara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15859",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.057",
      "lastModified" : "2024-11-21T03:15:21.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-11 a buffer overrun occurs."
      }, {
        "lang" : "es",
        "value" : "Cuando se procesa el comando vendor QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB cuyo atributo QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contiene menos de 1 byte, en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-08-11, ocurre un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=88dcc44ea8fbe158d1dee3ea197e47794bf4449d",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=88dcc44ea8fbe158d1dee3ea197e47794bf4449d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-30T21:29:01.120",
      "lastModified" : "2024-11-21T03:16:42.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter."
      }, {
        "lang" : "es",
        "value" : "SSRF (Server-Side Request Forgery) en tpshop 2.0.5 y 2.0.6 permite que los atacantes remotos obtengan información sensible, ataquen los hosts de la intranet o incluso desencadenen la ejecución de comandos mediante el parámetro fBill en plugins/payment/weixin/lib/WxPay.tedatac.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tp-shop:tpshop:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A5D862-61D6-403B-A6BA-9999A71244C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tp-shop:tpshop:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E211B989-0603-4935-A360-03A998D255CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Mar/77",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Mar/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17766",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.183",
      "lastModified" : "2024-11-21T03:18:37.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wma_peer_info_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of num_peers received from firmware is not properly validated so that an integer overflow vulnerability in the size of a buffer allocation may potentially lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En wma_peer_info_event_handler() en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-10-03, el valor de num_peers recibido del firmware no se valida correctamente, por lo que una vulnerabilidad de desbordamiento de enteros en la asignación de búfers podría conducir a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a37d8a78f5bd0e9a2c91de46721a6d80bd229a43",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a37d8a78f5bd0e9a2c91de46721a6d80bd229a43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17769",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.247",
      "lastModified" : "2024-11-21T03:18:37.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una fuga de información en Android for MSM, Firefox OS for MSM y QRD Android en el controlador de audio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17771",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.307",
      "lastModified" : "2024-11-21T03:18:37.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In msm_isp_prepare_v4l2_buf in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-02-12, an array out of bounds can occur."
      }, {
        "lang" : "es",
        "value" : "En msm_isp_prepare_v4l2_buf en el controlador de la cámara en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-02-12, podría ocurrir una vulnerabilidad de array fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a452045792bc09548b4e1b940aa8adfed822b51c",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a452045792bc09548b4e1b940aa8adfed822b51c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9691",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.370",
      "lastModified" : "2024-11-21T03:36:39.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver."
      }, {
        "lang" : "es",
        "value" : "Existe una condición de carrera en Android for MSM, Firefox OS for MSM y QRD Android que permite que se acceda a memoria ya liberada en la funcionalidad de envío de mensajes de depuración que está contenida en el controlador mobicore."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2017/11/28/november-2017-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2017/11/28/november-2017-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9692",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.417",
      "lastModified" : "2024-11-21T03:36:39.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-03, a NULL pointer dereference may potentially occur."
      }, {
        "lang" : "es",
        "value" : "Cuando un commit atómico se envía a un panel writeback con un parámetro output_layer NULL en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-06-03, podría ocurrir una desreferencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=061556e74a08f89f04b3da30119029ca3fd87ad8",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=ef8e3cd4588b5ae71b73a3aca751d59e882e6748",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/02/16/february-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=061556e74a08f89f04b3da30119029ca3fd87ad8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=ef8e3cd4588b5ae71b73a3aca751d59e882e6748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/02/16/february-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9693",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.497",
      "lastModified" : "2024-11-21T03:36:39.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The length of attribute value for STA_EXT_CAPABILITY in __wlan_hdd_change_station in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-06 being less than the actual lenth of StaParams.extn_capability results in a read for extra bytes when a memcpy is done from params->ext_capab to StaParams.extn_capability using the sizeof(StaParams.extn_capability)."
      }, {
        "lang" : "es",
        "value" : "La longitud del valor de attribute para STA_EXT_CAPABILITY en __wlan_hdd_change_station en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-06-06 es inferior a la longitud real de StaParams.extn_capability, lo que resulta en una lectura de bytes extra cuando memcpy se realiza desde params->ext_capab a StaParams.extn_capability utilizando sizeof(StaParams.extn_capability)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05a5abb21e4d97001f77d344444a3ec2f9c275f9",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05a5abb21e4d97001f77d344444a3ec2f9c275f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9694",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.557",
      "lastModified" : "2024-11-21T03:36:39.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While parsing Netlink attributes in QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur."
      }, {
        "lang" : "es",
        "value" : "Cuando se analizan los atributos Netlink en QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE en qcacld 2.0 en versiones anteriores al 2017-05-16, podría ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qcacld_2.0_project:qcacld_2.0:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.40.004",
            "matchCriteriaId" : "2B229CBA-C5F1-4AD2-BC23-5B6E4EF6503A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=1e47d44de7bab5500d27f17ae5c4ebebc7d2b4ef",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=1e47d44de7bab5500d27f17ae5c4ebebc7d2b4ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9723",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-03-30T21:29:01.637",
      "lastModified" : "2024-11-21T03:36:42.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The touchscreen driver synaptics_dsx in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-05, the size of a stack-allocated buffer can be set to a value which exceeds the size of the stack."
      }, {
        "lang" : "es",
        "value" : "En el controlador de pantalla táctil synaptics_dsx en Android for MSM, Firefox OS for MSM y QRD Android en versiones anteriores al 2017-06-05, el tamaño del búfer asignado a la pila se puede establecer en un valor que excede el tamaño de la pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e83ebd2098009b0d336ffab11e00f739902bd5d9",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e83ebd2098009b0d336ffab11e00f739902bd5d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-03-31T17:29:00.263",
      "lastModified" : "2024-11-21T03:19:41.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation."
      }, {
        "lang" : "es",
        "value" : "La función perf_cpu_time_max_percent_handler en kernel/events/core.c en el kernel de Linux en versiones anteriores a la 4.11 permite que los usuarios locales provoquen una denegación de servicio (desbordamiento de enteros) o, posiblemente, otro impacto no especificado mediante un valor de gran tamaño, tal y como queda demostrado con un cálculo incorrecto de la frecuencia de muestreo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.11",
            "matchCriteriaId" : "68E74529-58C5-4D73-8176-DDDF25C71F22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1572e45a924f254d9570093abde46430c3172e3d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1572e45a924f254d9570093abde46430c3172e3d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3696-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3696-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1572e45a924f254d9570093abde46430c3172e3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/1572e45a924f254d9570093abde46430c3172e3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3696-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3696-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13806",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.267",
      "lastModified" : "2024-11-21T03:11:42.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Profiles\" component. It does not enforce the configuration profile's settings for whether pairings are allowed."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11 se han visto afectadas. El problema afecta al componente \"Profiles\". No aplica las opciones del perfil de configuración que indican si está permitido el emparejamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13827",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.343",
      "lastModified" : "2024-11-21T03:11:45.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"kext tools\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema afecta al componente \"kext tools\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado mediante una app manipulada que carga kexts."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3DDB99-A585-427A-9236-9ACC85660116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13837",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.407",
      "lastModified" : "2024-11-21T03:11:46.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Installer\" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema afecta al componente \"Installer\". No restringe correctamente los derechos de una aplicación para acceder a la clave de desbloqueo de FileVault."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3DDB99-A585-427A-9236-9ACC85660116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13839",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.467",
      "lastModified" : "2024-11-21T03:11:46.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Spotlight\" component. It allows local users to see results for other users' files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema afecta al componente \"Spotlight\". Permite que usuarios locales vean los resultados de los archivos de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3DDB99-A585-427A-9236-9ACC85660116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13850",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.530",
      "lastModified" : "2024-11-21T03:11:47.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"Font Importer\" component. It allows remote attackers to cause a denial of service (memory corruption) or obtain sensitive information from process memory via a crafted font."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.12.6 se han visto afectadas. El problema afecta al componente \"Font Importer\". Permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria) u obtengan información sensible mediante una fuente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13851",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.577",
      "lastModified" : "2024-11-21T03:11:47.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"DesktopServices\" component. It allows local users to bypass intended access restrictions on home folder files."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13. El problema afecta al componente \"DesktopServices\". Permite que usuarios locales omitan las restricciones de acceso planeadas en los archivos de carpeta del directorio principal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3DDB99-A585-427A-9236-9ACC85660116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13853",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.640",
      "lastModified" : "2024-11-21T03:11:48.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \"AppleGraphicsControl\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.12.6 se han visto afectadas. El problema afecta al componente \"AppleGraphicsControl\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13854",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.687",
      "lastModified" : "2024-11-21T03:11:48.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema afecta al componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.0",
            "matchCriteriaId" : "B6FAB439-8EE0-4248-9016-1D88FFAC72C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "11895153-2FE5-4D73-B7FC-182FA280BA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "C3F6DCF4-7988-4B28-A03F-882EFC0BAB03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13863",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.767",
      "lastModified" : "2024-11-21T03:11:49.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"APNs\" component. It allows man-in-the-middle attackers to track users by leveraging the transmission of client certificates."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11 se han visto afectadas. El problema afecta al componente \"APNs\". Permite que atacantes Man-in-the-Middle (MitM) rastreen usuarios aprovechando la transmisión de certificados de cliente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13873",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.827",
      "lastModified" : "2024-11-21T03:11:50.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \"Kernel\" component. It allows attackers to obtain sensitive network-activity information about arbitrary apps via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11, las versiones de macOS anteriores a la 10.13, las versiones de tvOS anteriores a la 11 y las versiones de watchOS anteriores a la 4. El problema afecta al componente \"Kernel\". Permite que atacantes obtengan información sensible de la actividad de red mediante una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13",
            "matchCriteriaId" : "089EFF21-6A9B-40E4-9154-44174E26D5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "11895153-2FE5-4D73-B7FC-182FA280BA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "C3F6DCF4-7988-4B28-A03F-882EFC0BAB03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13877",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.920",
      "lastModified" : "2024-11-21T03:11:50.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Sandbox Profiles\" component. It allows attackers to determine whether arbitrary files exist via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11 se han visto afectadas. El problema afecta al componente \"Sandbox Profiles\". Permite que atacantes determinen si existen archivos arbitrarios mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13884",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:00.983",
      "lastModified" : "2024-11-21T03:11:51.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13885",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.063",
      "lastModified" : "2024-11-21T03:11:51.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13890",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.140",
      "lastModified" : "2024-11-21T03:11:51.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. macOS before 10.13 is affected. The issue involves the \"CoreTypes\" component. It allows remote attackers to trigger disk-image mounting via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de macOS anteriores a la 10.13.4 y 10.13. El problema afecta al componente \"CoreTypes\". Permite que atacantes remotos desencadenen el montado de una imagen de disco mediante un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.4",
            "matchCriteriaId" : "D053772A-D0AE-474A-AE49-26A251C4B5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103579",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040608",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208692",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13904",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.187",
      "lastModified" : "2024-11-21T03:11:52.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que atacantes ejecuten código arbitrario en un contexto privilegiado o provoquen una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2492",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.280",
      "lastModified" : "2024-11-21T03:23:38.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \"JavaScriptCore\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that triggers prototype mishandling."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 10.1 y las versiones de tvOS anteriores a la 10.2. El problema afecta al componente \"JavaScriptCore\". Permite que atacantes remotos lleven a cabo ataques de XSS Universal (UXSS) mediante un sitio web manipulado que desencadena la gestión incorrecta de prototipos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "BE118A00-4F9E-496A-9408-88E2CD12339F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2493",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.343",
      "lastModified" : "2024-11-21T03:23:38.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted elements on a web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 10.1, las versiones de iCloud para Windows anteriores a la 6.2 y las versiones de tvOS anteriores a la 10.2. El problema afecta al componente \"WebKit\". Permite que atacantes remotos omitan la Política del Mismo Origen y obtengan información sensible mediante elementos manipulados en un sitio web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "BE118A00-4F9E-496A-9408-88E2CD12339F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "5ED07EC9-BC97-415F-BF16-79CA4A399095"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6976",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.437",
      "lastModified" : "2024-11-21T03:30:54.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \"Sandbox Profiles\" component. It allows attackers to bypass intended access restrictions (for iCloud user records) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3 se han visto afectadas. El problema afecta al componente \"Sandbox Profiles\". Permite que atacantes omitan las restricciones de acceso planeadas (para registros de usuario de iCloud) mediante una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "9BB02169-ACC7-45C1-8D4D-03CB1E4799FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207617",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7000",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.517",
      "lastModified" : "2024-11-21T03:30:56.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 10.3.2 y las versiones de macOS anteriores a la 10.12.5. El problema afecta al componente \"SQLite\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chromium:chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.79",
            "matchCriteriaId" : "14A6C4F7-4572-4172-9DC5-28707B76B5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98767",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3926",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7001",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.563",
      "lastModified" : "2024-11-21T03:30:57.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 10.3.2 y las versiones de macOS anteriores a la 10.12.5. El problema afecta al componente \"SQLite\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98768",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7002",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.623",
      "lastModified" : "2024-11-21T03:30:57.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 10.3.2 y las versiones de macOS anteriores a la 10.12.5. El problema afecta al componente \"SQLite\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98773",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7003",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.703",
      "lastModified" : "2024-11-21T03:30:57.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to cause a denial of service (application crash) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3.2, las versiones de macOS anteriores a la 10.12.5, las versiones de tvOS anteriores a la 10.2.1 y las versiones de watchOS anteriores a la 3.2.2 se han visto afectadas. El problema afecta al componente \"CoreText\". Permite que los atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "69FDE126-98A5-4BA8-B963-0D1B5EB008A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7004",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.767",
      "lastModified" : "2024-11-21T03:30:57.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"Security\" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 10.3.2 y las versiones de macOS anteriores a la 10.12.5. El problema afecta al componente \"Security\". Una condición de carrera permite que atacantes omitan las restricciones de derechos para enviar mensajes XPC mediante una aplicación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.5",
            "matchCriteriaId" : "4FBED4E2-D14C-4884-99A4-8DD729D4EE3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207797",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42145/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42145/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7005",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.827",
      "lastModified" : "2024-11-21T03:30:57.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \"JavaScriptCore\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 10.1.1 y las versiones de tvOS anteriores a la 10.2.1. El problema afecta al componente \"JavaScriptCore\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "E41B300D-8147-46F8-A0F7-EDFD2B0D8613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2",
            "matchCriteriaId" : "708FF05D-EDB2-4CE2-B689-F79A0A80CAF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "5118C36B-1C20-4481-8207-0E4435D60DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Quindecim/Orbis-Exploit-5.x",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42188/",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Quindecim/Orbis-Exploit-5.x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42188/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7065",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.890",
      "lastModified" : "2024-11-21T03:31:06.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the \"Wi-Fi\" component. It allows remote attackers to execute arbitrary code (on the Wi-Fi chip) or cause a denial of service (memory corruption) by leveraging proximity for 802.11."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3.3, las versiones de macOS anteriores a la 10.12.6 y las versiones de tvOS anteriores a la 10.2.2 se han visto afectadas. El problema afecta al componente \"Wi-Fi\". Permite a los atacantes remotos ejecutar código arbitrario (en el chip Wi-Fi) o provocar una denegación de servicio (corrupción de memoria) aprovechando la proximidad para 802.11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "5D3003F5-F330-48A9-A4E3-FC97BEEE5FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7066",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:01.953",
      "lastModified" : "2024-11-21T03:31:06.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. tvOS before 10.2.2 is affected. The issue involves the \"Wi-Fi\" component. It allows attackers to cause a denial of service (memory corruption on the Wi-Fi chip) by leveraging proximity for 802.11."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 10.3.3 y las versiones de tvOS anteriores a la 10.2.2. El problema afecta al componente \"Wi-Fi\". Permite que atacantes remotos provoquen una denegación de servicio (corrupción de memoria en el chip Wi-Fi) aprovechando la proximidad para 802.11."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.3",
            "matchCriteriaId" : "533AA345-BC74-4AE5-9C16-26909ECB4AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.2",
            "matchCriteriaId" : "BF329265-5AEB-4305-80FF-40366687B432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207923",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7070",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.017",
      "lastModified" : "2024-11-21T03:31:06.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Kernel\" component. It allows physically proximate attackers to bypass the screen-locking protection mechanism that should have been in place upon closing the lid."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.12.4 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que atacantes próximos físicamente omitan el mecanismo de protección de bloqueo de pantalla que tendrían que haber estado activos al cerrar la tapa."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.12.4",
            "matchCriteriaId" : "8B4B9740-12D8-4FA7-9B9C-EC15BCD23773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT207615",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT207615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7071",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.093",
      "lastModified" : "2024-11-21T03:31:06.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se ha visto afectado Safari en versiones anteriores a la 10,1. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "29363908-B057-4FFE-89C0-590368A11FAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100613",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/HT207600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7075",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.140",
      "lastModified" : "2024-11-21T03:31:07.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \"Notes\" component. It allows local users to obtain sensitive information by reading search results that contain locked-note content."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11 se han visto afectadas. El problema afecta al componente \"Notes\". Permite que usuarios locales obtengan información sensible mediante la lectura de resultados de búsqueda que contienen contenido de notas bloqueado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "17CE3EBB-FF76-4158-81FE-63AECECA988E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208112",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7153",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.233",
      "lastModified" : "2024-11-21T03:31:16.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to spoof user-interface information (about whether the entire content is derived from a valid TLS session) via a crafted web site that sends a 401 Unauthorized redirect."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"WebKit\". Permite que atacantes remotos suplanten información de la interfaz de usuario (sobre si el contenido se deriva de una sesión TLS válida) mediante un sitio web manipulado que envía un mensaje de error 401: redirección no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7161",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.343",
      "lastModified" : "2024-11-21T03:31:17.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the \"WebKit Web Inspector\" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se ha visto afectado Safari en versiones anteriores a la 11.0.2. El problema afecta al componente \"WebKit Web Inspector\". Permite que los atacantes remotos ejecuten código arbitrario mediante caracteres especiales que desencadenan la inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7164",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.390",
      "lastModified" : "2024-11-21T03:31:18.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. The issue involves the \"App Store\" component. It allows man-in-the-middle attackers to spoof password prompts."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.2 y las versiones de tvOS anteriores a la 11.2. El problema afecta al componente \"App Store\". Permite que atacantes Man-in-the-Middle (MitM) suplanten avisos de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7165",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.437",
      "lastModified" : "2024-11-21T03:31:18.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2 se han visto afectadas. Se han visto afectadas las versiones de Safari anteriores a la 11.0.2, las versiones de iCloud anteriores a la 7.2 en Windows, las versiones de iTunes anteriores a la 12.7.2 en Windows, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"WebKit\". Permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria y cierre inesperado de la aplicación) mediante una página web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "F385DECA-23C1-4B6E-8C3C-4255870CC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208324",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3551-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7167",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.530",
      "lastModified" : "2024-11-21T03:31:18.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. Xcode before 9.2 is affected. The issue involves the \"ld64\" component. A buffer overflow allows remote attackers to execute arbitrary code via crafted source code."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Se ha visto afectado Xcode en versiones anteriores a la 9,2. El problema afecta al componente \"ld64\". Un desbordamiento de búfer permite que atacantes remotos ejecuten código arbitrario mediante código fuente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2",
            "matchCriteriaId" : "D5E36089-F392-4BE2-896B-6601292F7245"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208456",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7170",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.577",
      "lastModified" : "2024-11-21T03:31:18.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Security\" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.1 se han visto afectadas. El problema afecta al componente \"Security\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.1",
            "matchCriteriaId" : "C43CA59D-847F-4225-A7A6-02DEB1BB4F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7171",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.640",
      "lastModified" : "2024-11-21T03:31:18.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"CoreAnimation\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2 se han visto afectadas. El problema afecta al componente \"CoreAnimation\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7172",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.703",
      "lastModified" : "2024-11-21T03:31:18.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"CFNetwork Session\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.2, las versiones de macOS anteriores a la 10.13.2, las versiones de iCloud para Windows anteriores a la 7.2, las versiones de iTunes para Windows anteriores a la 12.7.2, las versiones de tvOS anteriores a la 11.2 y las versiones de watchOS anteriores a la 4.2. El problema afecta al componente \"CFNetwork Session\". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado o provocar una denegación de servicio (corrupción de memoria) mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "38F90EA2-2903-4BF7-9E5E-405CBD84A835"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7173",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2018-04-03T06:29:02.780",
      "lastModified" : "2024-11-21T03:31:18.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.2 se han visto afectadas. El problema afecta al componente \"Kernel\". Permite que los atacantes omitan las restricciones de lectura de memoria planeadas mediante una app manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11075",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.223",
      "lastModified" : "2024-11-21T03:07:03.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, if cmd_pkt and reg_pkt are called from different userspace threads, a use after free condition can potentially occur in wdsp_glink_write()."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, si cmd_pkt y reg_pkt se llaman desde diferentes hilos de espacio de usuario, podría ocurrir una condición de uso de memoria previamente liberada en wdsp_glink_write()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14880",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.287",
      "lastModified" : "2024-11-21T03:13:41.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while IPA WAN-driver is processing multiple requests from modem/user-space module, the global variable \"num_q6_rule\" does not have a mutex lock and thus can be accessed and modified by multiple threads."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, mientras IPA WAN-driver está procesando múltiples peticiones del módulo modem/user-space, la variable global \"num_q6_rule\" no tiene un bloqueo mutex y, por lo tanto, puede ser accedido y modificado por múltiples hilos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14890",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.333",
      "lastModified" : "2024-11-21T03:13:42.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the processing of an SWBA event, the vdev_map value is not properly validated leading to a potential buffer overwrite in function wma_send_bcn_buf_ll()."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, durante el procesamiento de un evento SWBA, el valor vdev_map no se valida correctamente. Esto podría desembocar en una sobrescritura de búfer en la función wma_send_bcn_buf_ll()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14894",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.380",
      "lastModified" : "2024-11-21T03:13:42.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in wma_vdev_start_resp_handler(), vdev id is received from firmware as part of WMI_VDEV_START_RESP_EVENTID. This vdev id can be greater than max bssid stored in wma handle and this would result in buffer overwrite while accessing wma_handle->interfaces[vdev_id]."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, en wma_vdev_start_resp_handler(), vdev id se recibe del firmware como parte de WMI_VDEV_START_RESP_EVENTID. Este vdev id puede ser más grande que el bssid máximo almacenado en wma handle, lo que resultaría en una sobrescritura de búfer al acceder a wma_handle->interfaces[vdev_id]."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15822",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.427",
      "lastModified" : "2024-11-21T03:15:17.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, mientras se procesa un frame de gestión 802.11, podría ocurrir un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15836",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.473",
      "lastModified" : "2024-11-21T03:15:18.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, if the firmware sends a service ready event to the host with a large number in the num_hw_modes or num_phy, then it could result in an integer overflow which may potentially lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, si el firmware envía un evento service ready al host con un número grande en num_hw_modes o num_phy, podría resultar en un desbordamiento de enteros que podría desembocar en un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15837",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.537",
      "lastModified" : "2024-11-21T03:15:18.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211_PKTPAT_OFFSET is not defined which can lead to a buffer over-read in nla_get_u32()."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM y QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, no se define una política para el atributo de patrón de paquete NL80211_PKTPAT_OFFSET, lo que puede desembocar en una sobrelectura de búfer en nla_get_u32()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15853",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.583",
      "lastModified" : "2024-11-21T03:15:20.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, mientras se procesan comandos PTT, se invoca ptt_sock_send_msg_to_app() sin validar la longitud del paquete. Si la longitud del paquete no es válida, podría ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17770",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.630",
      "lastModified" : "2024-11-21T03:18:37.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, en un manipulador ioctl power driver, podría ocurrir una desreferencia de puntero no fiable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18147",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-03T17:29:00.693",
      "lastModified" : "2024-11-21T03:19:27.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux antes del parche de seguridad nivel 2018-04-05, en MMCP, no se valida correctamente un mensaje downlink."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3773",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-04-03T18:29:00.207",
      "lastModified" : "2023-11-07T02:44:13.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5703",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-04-03T21:29:00.220",
      "lastModified" : "2024-11-21T03:28:15.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service."
      }, {
        "lang" : "es",
        "value" : "La configuración de SPI Flash, en plataformas basadas en múltiples plataformas de Intel, permite que un atacante local altere el comportamiento del flash SPI. Esto podría conducir a una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8550u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693B3F32-45EB-4F2E-BB3D-6AF263247852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8559u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5517EA-C8C0-4DE4-B4B5-56AB02C71439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8650u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A471AB-172F-4A16-AD8A-3A2B3707133A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2224D32D-6AB9-4325-9FCF-A93D94B255F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8700b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065359D3-E5E5-449D-8C73-2AE53951342B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8700k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B4EC6C-7473-4BED-A928-4333259726F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8700t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B43636-BE68-4199-A8CF-0D0F8EA5E87F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8705g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7FE538-89CE-4782-97D6-18DAA5E8DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8706g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FF9A98-4DA2-4334-B176-38BF2CC975F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8709g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBF7393-AB67-494A-893A-9F72F489997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8750h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14D1B3D-B70D-4E64-899D-E9693CB0FDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8809g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CB41C8-8AA7-41A5-9F9E-BD53ACFE82B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-8850h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F7D7B86-D22E-433E-A823-FF7EC0EA802B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87CE76-0005-462A-808A-8AEB4306A874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7560u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AA8013-D2BE-4E34-B1D1-13341585CBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7567u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02307362-3E32-42C6-A7D1-8C9F70D67498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F50B5E-C833-430E-9D45-99929A163E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7660u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBCADE8-5CE6-444F-8D2E-AC9ED2E123A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4767B546-DE0D-4183-B6B7-C1CE6EEA6D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7700hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4A5617-561C-4898-8961-E5F316348DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7700k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A1051F-65EE-4D76-B108-06E362DD8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7700t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72A37AA-7382-4387-98BC-5276A4809E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7820eq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA79DEE-A146-4A19-AC6A-08C0C5A2D293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7820hk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED14D8D-A662-4714-9230-7408CC977FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7820hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F00303-0572-407B-A67D-952F130C698E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7920hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5391BF2-032D-4CA9-8BB8-1068974C9258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-7y75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726E9DE-9839-4875-8BE9-FFA0C1A6121B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69210158-0E90-443F-995B-B0C170E47ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6560u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3607BDC8-5B2C-4A5B-ABDA-5345C867C808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6567u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529E3DA0-905E-4B8B-B422-75C69DEEC3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51950A6E-93B1-488F-BB0C-3CA655C1F548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6650u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14CDAFCE-DCBA-4044-9BE6-7B6439D0F657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6660u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF89ED0C-77CB-4204-BD76-E95C30D5DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8F1767-A191-4EFB-B801-98A4B70E1484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6700hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF63771C-7C83-467A-A10F-1A4CC1212C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6700k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E81041-61B7-4D33-8C35-E19144C7C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6700t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7525AF3C-7EFD-4AF7-838A-22D981DE2360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6700te:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AC652-B884-4103-9B4E-8A335A0EA897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6770hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4896C8A9-43A8-4666-89BC-F3CCB3E519D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6785r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74DBBC5-13A4-4BF4-8C64-5BD9BD6DCCA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6820eq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668EF52A-6A4A-46B3-819B-595144E11157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6820hk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8A9988-B09F-4917-A2BE-E22AF33AEE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6820hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB63964-D402-4D5D-9D20-627EE37997D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6822eq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA15F9A-E2A2-4E1F-990D-2935D020EE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6870hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE64956-1A34-4228-BF72-51354BF94061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6920hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF4402E-0AC2-4362-BBF5-795754EAC377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-6970hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418382D5-03A3-439D-8DCE-3A52232A5DEE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A800FF6-A509-414F-ABED-B9FD164E33F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5550u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FC2EB-4749-4896-B58E-70E1CBB2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5557u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A14A46-0C45-445A-A44B-16746A7766CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAA088-28DB-4FFE-BA14-A4FE34EECB51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5650u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7631342-B144-48E2-A7C8-242AE72AD6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5700eq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9F156A-9426-4892-8BD3-9249833E42C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5700hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0CC403-1102-4C8A-898C-CCEFE8AF2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5750hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DEFC32-CC0D-4A9C-8093-FE9F5640FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5775c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E9E5-A2A7-4AD9-8E5B-AEB70AB15A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5775r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE13A22-71AA-40A1-A3FE-8F34D83320DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5850eq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509810AA-AE4A-479E-8223-8E84A6068063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5850hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9211FAE8-CCF3-4C8D-927D-7CFEBFEF8A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:core_i7-5950hq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CE32EA-7BC5-49D8-A757-37A237EAC304"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2805:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4B2773-7422-4AA4-8B46-72AA633DA16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2806:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD8A651-07C7-4796-89FE-3F039EE8BC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2807:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BDD615-E481-4556-94DE-0CB469A05E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C71726-87E4-43AE-8404-BA13637C1510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B91BFB-B31D-4CA0-ACA8-6DDBC79CCFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F121062-635D-4E6E-9A69-81575C7A2AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00F35DD-CABD-4728-8624-580E9AAC8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C687D203-FA68-489F-BFF2-6D28F97F5058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE50987-707C-4BA6-A832-78BEA7AA99E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n2920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8431FF8D-26B0-40D6-9E0A-A54414D516D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n3520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EF1E6E-3CF5-4A2B-A555-8B1098D50779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:pentium_n3520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B8C398-7292-44CA-A341-AC963D52724C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-e3930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B8D969-3328-43BE-B386-1804BDAF5264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-e3940:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5EF922-294C-42F6-AA2C-0A3315330A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-e8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1648A4-2DFB-4324-8034-05DB37098116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-z8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4794A16F-F588-4CC9-B988-D193091D0DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-z8330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A177174-A3D2-43D8-853C-505D8B3CFB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-z8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624D0A21-D86D-4137-A658-6DA44AE6E5D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-z8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC49540-D3FE-4FC8-9F12-4C389CB2FA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-z8550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97608FD-BA5D-414D-86C5-C04441ED6412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x7-z8700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED29D19F-A85C-42B8-A2D6-437F8EA4F780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x7-z8750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54B733B-50C9-4A77-B503-31587BE3E769"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:pentium_j3710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5A9531-06FC-49FE-B36D-471ED60CD4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:pentium_n3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC0EEFD-F6CE-4480-A8E1-C8EE19692ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:pentium_n3710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59C1D92-1D82-4404-B11B-1A1E67C89D69"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_j3060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3611E19-5443-4B56-9B1D-0CE7E3331A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_j3160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A069A3-868B-47D7-B5E4-17D0FA254BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_j3355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75E274C-E832-4031-85D9-4804B6868C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_j3455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A23986-A0A4-4E3E-87E1-74D8292E1A7A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x5-e8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1648A4-2DFB-4324-8034-05DB37098116"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:pentium_j4205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC399655-1A8E-4C70-BEE9-4D02CCA7D858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:pentium_n4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322E2E66-BD2D-422E-926A-B2683388C93F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_j3355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75E274C-E832-4031-85D9-4804B6868C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_j3455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A23986-A0A4-4E3E-87E1-74D8292E1A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n3350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757845CE-65C6-477E-A024-163BF4FF83A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:celeron_n3450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF09955-31EA-42A4-BC0B-C4CE53DB8D7A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_x7-e3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53920B52-FBFA-46EF-A09E-77FB8FD6DD18"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_3104:-:*:*:*:bronze:*:*:*",
            "matchCriteriaId" : "C2B8BF3C-53F9-4AF8-BC0C-F05CA913B67D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_3106:-:*:*:*:bronze:*:*:*",
            "matchCriteriaId" : "124D0B6B-74C7-413F-969C-6D2F36D4E42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4108:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "7D2261EA-F412-4EF2-A30D-BB41169A0C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4109t:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "FA8B4E78-FF81-4490-9B7A-F76F2DBC11A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4110:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "E05B1263-1DB6-4F67-AD04-89E9F73DEAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4112:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "BE7B49A6-88F4-4A4E-8DBE-49ADD937FFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4114:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "CA71580B-F3EF-4975-9010-FBAEEF844680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4114t:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "EAA26629-6F90-41B3-AB51-3E98390C4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4116:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "EF7DAC0D-FB14-4E0F-882D-6765653BD435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_4116t:-:*:*:*:silver:*:*:*",
            "matchCriteriaId" : "957A3843-385F-421E-AF9C-A1391E4A57B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_5115:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "699DCD39-ECC9-4453-A996-5BAE90BB0562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_5118:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "785107C9-C893-4C40-83D0-1BC3EFA03089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_5119t:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "39A1F6FF-1EF5-4FB6-96E6-B3B637EA2701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_5120:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "7EA02034-28AF-4960-957A-B1155FEAE1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_5120t:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "99CDA4C1-23FD-4CBB-95FD-251E538CC828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_5122:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "0092F236-E583-4BA0-BEB1-29D8D6D05E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6126:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "3CC69201-4DC6-4264-AD4C-19D42358B3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6126f:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "5F43F7A7-94D8-4B30-AA83-0A90E8056210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6126t:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "0B3C953E-3872-4568-B33C-4BF189DD49FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6128:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "79EA4921-5C65-4DF9-B9B6-18F57B2E05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6130:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "67714936-F62F-444B-99BB-1ADC4CE34B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6130f:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "567852DC-E599-4B38-B5B1-6CBFABBEAAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6130t:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "92B6A527-032A-4BFD-96C0-D8EFF2BF5587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6132:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "A16E58DC-2004-4D3A-AB32-7572F3A97B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6134:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "81C0EC38-0A6A-4BBF-95A8-7E6443EFDD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6134m:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "C45DD856-AE13-46E4-8BC2-6191C03F90A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6136:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "790FEAD3-9FFB-49D9-9683-BE40BA6F7F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6138:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "C196E3C7-F31E-464B-AD77-46755A0D8D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6138f:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "AFFC174E-B5AE-4BCA-83E8-284DCBEB06D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6138t:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "67E93C5B-9189-4D5D-AD58-5BD061788EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6140:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "42248F40-3ED3-438A-A097-E24FEDEE4594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6140m:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "6125900B-7E0B-476B-B0D2-5CC9AEE75292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6142:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "CA69CD2A-7620-4365-87BB-75CC0C81C3D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6142f:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "265832DA-6D95-4909-A7BB-44F4E23FE3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6142m:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "8A0EB05E-B428-4CFF-8610-237413CE0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6144:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "5A5409AB-6F6F-419E-9B3A-9EE4AA9EC5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6146:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "C387C6C9-EE45-461D-9746-C9B07C9A6CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6148:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "2B74FD21-2957-4E25-822C-C103485C7791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6148f:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "259E869A-D5B4-475E-BA85-ADBECE9A2EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6150:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "26CDC6C0-82EF-46C7-846A-A5391BA5F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6152:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "23F7672E-FD18-4F4C-94C6-123D51E10C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_6154:-:*:*:*:gold:*:*:*",
            "matchCriteriaId" : "65BE0979-5AE7-4235-9E98-CA448B3F0C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8153:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "B672678C-28B9-49C7-BF6C-9ADE820522BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8156:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "BF910433-C10E-449D-AF2F-D6668FB7452D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8158:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "53313517-2D32-4CD7-8AA5-2EE4FF8A18D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8160:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "C2D58ACD-217D-4EAB-BA75-00B86A6BA702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8160f:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "BB32B32B-1D9E-4F2A-A596-32B682054BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8160m:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "1E18B226-6B1A-4801-9441-174B3CC23063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8160t:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "9CE62F37-CC7B-4477-9B03-5EC56E97F833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8164:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "1556B0CB-8061-4236-8352-9C4C591862A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8168:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "B432F993-F5A5-4AC0-8C76-83C3CEB0B016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8170:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "37E40A5C-F088-47C4-BFDA-D23FA1E0516C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8170m:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "0B04884D-15D0-4831-BFD5-990F789CF32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8176:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "65F3525C-8754-4B07-953E-DED94CCFE8FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8176f:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "3CCC57C4-EB3D-4C87-BCB2-2CAD0F1E1148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8176m:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "12F20E3B-D05F-477D-8711-07DD9E4F64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8180:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "8E8FC6CB-EA33-43CB-939A-F8E2E2A3CFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_8180m:-:*:*:*:platinum:*:*:*",
            "matchCriteriaId" : "839F878D-6125-46C1-9273-10E3E0A49566"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1220_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64313708-BB62-464D-8C83-73DE072AD085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1225_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7E3BBF-38DF-4C80-A18B-43329CB8172C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1230_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB5B743-64FD-4275-9394-ACE2C6BF97AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1240_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8182C0-D3E1-4921-B5EA-E15116D4ED49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1245_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FCD947-9568-4C32-95DD-CEBBBB3553ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1270_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D46C8B-2B0D-40EF-B15E-CD873C880E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1275_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202E2A44-843A-4944-9A1E-3CAC488B387F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1280_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B50772D-33EB-453F-86D2-83A450A1C402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1285_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CFC97E-B8E6-4806-AAC3-AE7962A06BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1501l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E74BF6-910D-4F74-A318-7AC02F0A9B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1501m_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D9A4BB-F80C-402D-B4A2-42CCF0090FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1505l_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6EFFFA-8D3D-4F24-8479-735BEA67D895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1505m_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17C86D4-C835-4364-A12F-21DFBE199020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1535m_v6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B777711-C858-40A3-A434-EB9BD61D9B2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1220_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D7A8CF-895F-4738-B0A0-30901238FCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1225_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF73358-62AF-46DB-8749-FCE6DF806B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1230_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515AC93A-2F72-440A-B00D-6240415A3F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1235l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2C33A1-3A4D-47D8-AF03-4F46DA97CC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1240_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235D8447-DB65-4145-85B0-994E9A716682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1240l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4410E753-CCA8-4F8A-84D1-9F021D96F058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1245_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A977AC0-39FD-431C-8402-8D70EF24B0C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1260l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51EF74B-9901-4DE9-89C6-3EE9D2D53225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1268l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED612A6D-0000-49DF-B1C0-38ED8C06E911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1270_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC05B5E2-72A2-47EA-A4B5-D535E681F075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1275_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45945918-500E-4BB8-8F03-8F58AA34295E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1280_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C8CF3C-1787-4214-BD45-33045C182C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1505l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765FFC88-B577-4D9D-9665-C9343B620082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1505m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354B5928-DDC5-403F-836B-01BFA138F7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1515m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABC5D4A-AE8D-4541-A09F-D1FDB8645611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1535m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE540BB-6526-4924-B822-BE3C9CD140D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1545m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4917D4E2-E2AE-430D-BD8B-C0D3B6FA5FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1558l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566B3BF7-4286-4BC1-AEE3-B8F25E0A5713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1565l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06345931-A260-4303-8011-33A9815BE705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1575m_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3BF238-B00D-4963-BB2F-95D5A5EC84FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1578l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2441B06F-929F-4C52-B019-CFB3A3418D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1585_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E8A3E-5F63-4C29-A1FB-C63CE836A055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e3-1585l_v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A616C9-3200-4F47-B66D-C73710C054DB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4809_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41022CB9-5A18-4D5A-A6E2-06AADA0C109F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4820_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB7AA05-A4B9-4C29-A774-C60E0FD370B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4830_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83B5FBC-C5D1-4FD5-BE98-1BD90996FD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4850_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404CCA3F-45C6-484C-A4AF-A1ED812FE3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8860_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9161FFA-1BA0-43FC-BC75-E076407FCD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8867_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CD060F-718B-464E-BBC8-B4A5AF28387D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8870_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE231427-419C-4219-B2E0-926CCEAF02A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8880_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E67F3FC-A970-4E44-B6F1-204991290A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8890_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24062D42-66AE-455A-8210-E509C6ACFCD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8891_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BA8007-7F9F-4E8B-8664-58BF00782BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8893_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CEED16-8A8B-4A1A-A985-6FBE75ED01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8894_v4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE564185-300F-485B-9518-A2B4CB510336"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4809_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BBA11A-8ABF-433F-B398-37C11704D400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4820_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E00CC2-E17F-4E30-843A-886318208E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4830_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D747957-5F9F-43A4-81CC-E43AD6BB390D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4850_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FD0B93-D260-4CDA-8EAD-8011819218EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8860_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C992-6782-4488-974F-F136B996C138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8867_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECAC3FD-94D4-4099-BF13-6105F6104113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8870_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2E1402-FAFA-496E-B227-9CAB0CB5D954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8880_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA9B817-B352-4245-B9E6-6F4B93836088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8880l_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72E85A8-56BC-48A5-BC6D-543A5BFE2CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8890_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B38EDDC-E352-4756-9255-CCDA07F8DD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8891_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5517B6B9-6A6E-44AD-9E8B-F6BAF55DD329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8893_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870254C9-F530-4098-BF2C-761D36162DDE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-2850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD503436-A707-4787-BB93-F4E983BE3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-2870_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8DBD9F-2995-44DB-AF0D-C67830ED04EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-2880_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD064B55-638E-42A9-8BAD-C3F277731904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-2890_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58227F7-B412-4D76-894B-81B2FFB6075D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4809_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFF73DE-6B26-42D9-8057-EC39D07420D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4820_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C11B173-434E-4F01-A2A9-4110931EBA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4830_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ADA3170-8987-4EFF-BB5A-83AC6B3DB6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F592710B-EF12-4909-A88B-E81D0F10CA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612FA1ED-2ACE-4C0C-BDAE-7454483B90A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4870_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E461F0BF-BD25-4052-81A4-63F04E873516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4880_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8568CB42-AA9F-4556-B5E9-B72E02C47DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-4890_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8AF0157-A0B7-4905-9587-96BA193679FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2E8890-7F0B-4122-957C-7C6C718A4BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8857_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE99CEBA-EF98-4080-A7F6-B2C8FCF73709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8870_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB9D96F-BD76-4CCD-8985-FA3B1630709F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8880_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFDB666-3AA8-485F-876E-63B116666908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8880l_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE302B2-16D2-42BC-9DB8-4A0AC2B65F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8890_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCB1F44-29F4-4023-98B9-488B82438033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8891_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2250554D-BE8E-4DC5-A51B-43D75A41432C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_e7-8893_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541E60DC-7D97-46A8-8A3C-C36075681D8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDC94BE-83A9-4315-8BCE-3245B9468200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7210f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA1C1D9-FD23-4B41-969C-5D85DE6ADB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE897475-9B74-47F0-BB5C-E64949B3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7230f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9C2F78-5710-4EC9-8CF3-088E9297526D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C99640-2128-4D11-92B5-1E7BF4D03754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7250f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69082D24-B0A2-4104-9535-CA828023619D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF2A91F-9488-4D02-BAF8-89A45671490E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_phi_7290f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63076C89-15A0-413D-BE05-5EE8209AA678"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1513n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63650AC6-E7E4-418C-A6DA-CC2AAC8CD064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBBB4CE-0F65-4A00-AF20-00532F0DDCAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748B8681-5B53-4151-AC55-8D4160FC81AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82E0D65-D7F2-44FD-9468-9436EDB858FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1523n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02441463-E5E1-475B-A896-56DC1A00149E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1527:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826EEBEE-7FD7-41C0-B793-77935F971E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1528:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261220BE-F434-4D53-83B9-EAA0784E9893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1529:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD78470-2518-4BF6-A3AA-D96FC918A529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756D89FE-2AC3-40B9-8CF3-AC7B72A390AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1533n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B51A81-A5C9-41C3-A304-5F7EE485E46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1537:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B3494C-B267-4148-A23B-5B7E584CF7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1539:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50F873-ADB4-4934-8220-8F14D6B4AC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3850FC-B983-4C56-9CA2-7DE45298973B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1541:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED1C-6CA9-45D8-A1B6-DE5732BC0623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1543n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CB13CC-2C62-4B82-8066-638B2A12D4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6F4CF5-792F-4508-A666-28EBCEE20970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1553n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB3ED94-A6B9-4255-9C8A-ADE79DBB302B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1557:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C152983C-0A29-4031-83B0-BBDAF4835827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1559:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E859CEB-4307-4302-9B16-68C5D52E71FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1567:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE4EBA2-21E2-41B3-A52B-7635729AC771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1571:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906956C2-EB1D-4CDA-83F6-B9826E2AF5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-1577:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45482C35-85DE-463C-9D15-94802F0E5D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2123it:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB098881-2FFE-4D08-8695-4F190F6F2D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2141i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0376AE86-AECE-41D4-BAB1-83851FFAA24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2142it:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60CDF80-AEF9-406A-9ED3-0B622D1C231D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2143it:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A659368E-5E82-4FBB-9981-F56D09D7CFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2145nt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A600F9-618A-4C8C-91BE-4B6C3B5A4F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2146nt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12D3588-5B90-46EC-9391-8BEA1C18AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2161i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E239EE-F3B2-4360-8EC6-182868201D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2163it:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE943DE-033C-4453-9F10-D590AF680BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2166nt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D10BB4-0890-484B-BD1B-6DB24417357A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2173it:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31276F1E-1E1B-4498-841C-0C0ECF4E2937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2177nt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B181C0B3-0856-47DC-86E1-7C8468C094DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2183it:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5AFE96-DC6C-4A77-A340-D0FC7E006499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:xeon_d-2187nt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27551319-89F6-45D7-BF92-CEA091F80597"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAD1191-1489-4A36-8AE9-A5C686878ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2316:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF6EB8B-9C8B-485D-9626-AF4F68439EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B39BBC-C3B0-4B12-9C1E-E51157CA6C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65A6901-D71C-41F7-902C-3789CC1B8256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2358:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDC8CBD-9DF1-446E-89D9-7256F2F922B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBEE990-B48A-4C40-A783-E0B0A83CEACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BF016F-61DA-4ABB-890E-C1C5CC138AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E046034F-2210-4C75-BD4A-9A6C873C3F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6DBEEA-BC34-4AD2-B656-B652FFE07135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2538:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2530241C-6235-4B53-9A39-2D51588826C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E18DB5-2DBE-438D-ABA1-131DDCF246ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2558:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3B8E15-64C0-413B-8E09-96D884292893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35FA6F1-BD74-46E8-93E0-DD3499D9E10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDA0633-A6F1-4F4F-B07A-D11FC4B60DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2738:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF890BA-6A96-42CA-A9F3-1025480A8883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11962182-68C2-4358-AA4D-7CB5BCD2E92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c2758:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C6DF31-E9AE-42D2-8421-1315D9E32A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4063CE-44D0-41B8-8673-06B4FE1AFEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA77954C-F29D-452F-87AE-63685463459D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D0785E-1A59-47F6-A44D-F98844D8A1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3538:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7072C450-C8F5-45D4-8E99-5D6230F5799E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3558:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12972627-887F-4F1D-835E-56C280B56669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3708:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328925E1-1DB3-41E5-AAB4-6745E5CFE29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F530913C-E528-41FA-88C2-5174558EDE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3758:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF802082-F74D-4F9B-AD93-2B07C0D7C6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99996FC1-548C-4668-B52D-947132DD7FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CF43F1-F0BB-4326-81B9-718112B9BB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F39386D-8AB9-4384-ACA9-FADB32A91070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD5CD8-4067-4F0E-9589-A04CCB7A1E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84F967F-A48B-4891-A912-A048543D1131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6494E03D-20D1-4E7F-BD21-2C6E47924659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:atom_c3958:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7027C5CB-F989-4490-B4E1-7B3228CE4319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040626",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00087&languageid=en-fr",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180924-0004/",
        "source" : "secure@intel.com"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03867en_us",
        "source" : "secure@intel.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00087&languageid=en-fr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180924-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03867en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-03T22:29:00.383",
      "lastModified" : "2024-11-21T03:18:34.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick."
      }, {
        "lang" : "es",
        "value" : "Ruby, en versiones anteriores a la 2.2.10, versiones 2.3.x anteriores a la 2.3.7, versiones 2.4.x anteriores a la 2.4.4, versiones 2.5.x anteriores a la 2.5.1 y la versión 2.6.0-preview1, permite un ataque de separación de respuesta HTTP. Un atacante puede inyectar una clave y un valor manipulados en una respuesta HTTP para el servidor HTTP de WEBrick."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.10",
            "matchCriteriaId" : "79C0C7FF-8814-4F49-8DFE-8763BE582055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.7",
            "matchCriteriaId" : "17DC7068-E1B8-4699-BDE0-14305D35D24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "7172D61A-F82C-4EB5-9763-611CFE08A09B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "4A56E97B-C7E3-48AC-AAEF-4FA056276D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:2.6.0:preview1:*:*:*:*:*:*",
            "matchCriteriaId" : "787FDFC6-E780-4F95-9E46-C5CF77E7EBC7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/103684",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/http-response-splitting-in-webrick-cve-2017-17742/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/103684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1042004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/12/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3685-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/http-response-splitting-in-webrick-cve-2017-17742/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3972",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-03T22:29:00.477",
      "lastModified" : "2024-11-21T03:26:23.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de foot printing basada en infraestructura en la interfaz web en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes ejecuten código arbitrario mediante el banner del servidor, filtrando información potencialmente sensible o relevante para la seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4028",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-03T22:29:00.523",
      "lastModified" : "2024-11-21T03:26:25.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de registro maliciosamente configurado en todos los productos Microsoft Windows en productos para consumidores y empresas de McAfee permite que un administrador inyecte código arbitrario en un proceso McAffee depurado mediante la manipulación de parámetros de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:anti-virus_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3320DA-317A-4668-8CB7-B253CF4E26BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_security:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA3764B-02A5-4CB8-A2CF-BDEC69A3F1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "0B258695-3C79-4EF0-9F57-96867BBCE2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "551CDFD4-6CB5-478C-87BD-E8FCA2564452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8C36BD-4C81-43A2-A1B0-FD6FC43D7077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_3:*:*:*:*:*:*",
            "matchCriteriaId" : "7507AF42-7435-408F-8D13-12AEB6BD2D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_4:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF5032E-F91D-48D8-AAEE-35784BD87778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_5:*:*:*:*:*:*",
            "matchCriteriaId" : "22BBD8D0-3D09-4A0C-AF5F-5655329D01E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_6:*:*:*:*:*:*",
            "matchCriteriaId" : "143B1FC1-CD35-411F-B67F-4879DCE4531F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_7:*:*:*:*:*:*",
            "matchCriteriaId" : "31C16E08-FFB3-426E-9A9F-D496A50F10BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_8:*:*:*:*:*:*",
            "matchCriteriaId" : "E096860A-4AA2-4A3F-8B45-998E6E48F175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:host_intrusion_prevention:8.0:patch_9:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6F788-8D23-44D8-AFAF-780F45885341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B53E987-4329-4FA9-AC94-0286D64B7E88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251D56EC-7153-451F-A558-92E0F5BFACEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virus_scan_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.8",
            "matchCriteriaId" : "5EF52F97-EC0A-4CE9-A62B-4881210CA186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virus_scan_enterprise:8.8:patch_9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4B5233-94A6-4E3E-B13B-08C6633BDCF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97958",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10193",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/97958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-04T02:29:00.273",
      "lastModified" : "2024-11-21T03:19:41.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert() argument in JavaScript code, because window dialogs are mishandled."
      }, {
        "lang" : "es",
        "value" : "Brave Browser, en versiones anteriores a la 0.13.0, permite que atacantes remotos provoquen una denegación de servicio (consumo de recursos) mediante un argumento alert() largo en código JavaScript, ya que se gestionan de manera incorrecta los diálogos de ventana."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brave:brave_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.0",
            "matchCriteriaId" : "EC51F98F-8FD9-4206-A72E-55FBA03B8E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/176066",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44474/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerone.com/reports/176066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44474/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18096",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-04-04T12:29:00.217",
      "lastModified" : "2024-11-21T03:19:21.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative rights to access the content of internal network resources via a Server Side Request Forgery (SSRF) by creating an OAuth application link to a location they control and then redirecting access from the linked location's OAuth status rest resource to an internal location. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access credentials and other potentially confidential information."
      }, {
        "lang" : "es",
        "value" : "El recurso rest de estado OAuth en Atlassian Application Links, en versiones anteriores a la 5.2.7, desde la versión 5.3.0 y anterior a la 5.3.4 y desde la versión 5.4.0 anterior a la 5.4.3, permite que atacantes remotos con derechos administrativos accedan al contenido de recursos internos de red mediante SSRF (Server-Side Request Forgery) creando un enlace de aplicación OAuth a una ubicación que controlan y después redirigiendo el acceso desde el recurso rest de estado OAuth de la ubicación enlazada a una ubicación interna. Cuando se ejecuta en un entorno como Amazon EC2, este error puede emplearse para acceder a un recurso de metadatos que proporciona credenciales de acceso y otro tipo de información potencialmente confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.7",
            "matchCriteriaId" : "E48B5EFD-618A-41A2-8CA9-B181E80230B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "CB5BEC1E-10C4-4483-B465-11BC0DBD8676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.3",
            "matchCriteriaId" : "62C0EA11-1465-4133-979E-FDD8F5504043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ecosystem.atlassian.net/browse/APL-1359",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/APL-1359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3964",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-04T13:29:00.210",
      "lastModified" : "2024-11-21T03:26:22.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) reflejado en la interfaz web en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes inyecten scripts web o HTML arbitrarios mediante un parámetro URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3965",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-04T13:29:00.273",
      "lastModified" : "2024-11-21T03:26:22.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Request Forgery (CSRF), también conocido como Session Riding, en la interfaz web de Session Riding en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes remotos realicen tareas no autorizadas como la recuperación de información interna del sistema o la manipulación de la base de datos mediante URL especialmente manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3966",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-04T13:29:00.333",
      "lastModified" : "2024-11-21T03:26:23.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de explotación de variables de sesión, ID de los recursos y otras credenciales de confianza en la interfaz web en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes remotos exploten o dañen el navegador de un usuario reutilizando el token de sesión expuesto en la URL de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3967",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-04T13:29:00.380",
      "lastModified" : "2024-11-21T03:26:23.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de influencia de objetivo mediante framing en la interfaz web en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes remotos inyecten scripts web o HTML arbitrarios aprovechándose de la incapacidad de las páginas de aplicación de liberarse de los frames HTML de terceros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3969",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-04T13:29:00.443",
      "lastModified" : "2024-11-21T03:26:23.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate implementation of SSL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de abuso de canales de comunicación en el servidor en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes Man-in-the-Middle (MitM) descifren mensajes mediante la implementación inadecuada de SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3971",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-04-04T13:29:00.490",
      "lastModified" : "2024-11-21T03:26:23.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de criptoanálisis en la interfaz web en McAfee Network Security Management (NSM), en versiones anteriores a la 8.2.7.42.2, permite que atacantes vean información confidencial mediante el uso inseguro de un cypher de cifrado RC4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13267",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.227",
      "lastModified" : "2024-11-21T03:11:16.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69479009."
      }, {
        "lang" : "es",
        "value" : "En avrc_pars_vendor_cmd de avrc_pars_tg.cc, hay una posible corrupción de pila debido a la falta de una comprobación de límites. Esto podría llevar a un escalado de privilegios remoto sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69479009."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13274",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.290",
      "lastModified" : "2024-11-21T03:11:16.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71360761."
      }, {
        "lang" : "es",
        "value" : "En la función getHost() de UriTest.java, existe la posibilidad de una determinación incorrecta de origen web. Esto podría llevar a decisiones de seguridad incorrectas sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71360761."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13275",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.337",
      "lastModified" : "2024-11-21T03:11:17.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-70808908."
      }, {
        "lang" : "es",
        "value" : "En getVSCoverage de CmapCoverage.cpp, hay una posible lectura fuera de límites debido a una comprobación de límites incorrecta. Esto podría llevar a una divulgación de información local sin necesitar privilegios adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-70808908."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13276",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.417",
      "lastModified" : "2024-11-21T03:11:17.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599."
      }, {
        "lang" : "es",
        "value" : "En CProgramConfig_ReadHeightExt de tpdec_asc.cpp, hay un posible desbordamiento de búfer basado en pila debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13277",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.463",
      "lastModified" : "2024-11-21T03:11:17.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72165027."
      }, {
        "lang" : "es",
        "value" : "En ihevcd_fmt_conv de ihevcd_fmt_conv.c, hay una posible escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72165027."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13278",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.527",
      "lastModified" : "2024-11-21T03:11:17.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70546581."
      }, {
        "lang" : "es",
        "value" : "En MediaPlayerService::Client::notify de MediaPlayerService.cpp, hay un posible uso de memoria previamente liberada. Esto podría llevar a un escalado de privilegios local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70546581."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13279",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.573",
      "lastModified" : "2024-11-21T03:11:17.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399439."
      }, {
        "lang" : "es",
        "value" : "En M3UParser::parse de M3UParser.cpp, hay un agotamiento de recursos de la memoria debido a un bucle largo al insertar items en un vector. Esto podría llevar a una denegación de servicio (DoS) remota sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399439."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13280",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.633",
      "lastModified" : "2024-11-21T03:11:17.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451."
      }, {
        "lang" : "es",
        "value" : "En la función FrameSequence_gif::FrameSequence_gif de libframesequence, hay una lectura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a una denegación de servicio (DoS) remota sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13281",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.697",
      "lastModified" : "2024-11-21T03:11:17.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71603262."
      }, {
        "lang" : "es",
        "value" : "En avrc_pars_browsing_cmd de avrc_pars_tg.cc, hay un posible desbordamiento de búfer basado en pila debido a una comprobación de límites incorrecta. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-71603262."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13282",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.760",
      "lastModified" : "2024-11-21T03:11:17.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603315."
      }, {
        "lang" : "es",
        "value" : "En avrc_ctrl_pars_vendor_rsp de avrc_pars_ct.cc, hay un posible desbordamiento de búfer basado en pila debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603315."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13283",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.807",
      "lastModified" : "2024-11-21T03:11:18.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603410."
      }, {
        "lang" : "es",
        "value" : "En avrc_ctrl_pars_vendor_rsp de bluetooth avrcp_ctrl, hay una posible escritura fuera de límites en la pila debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603410."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105482",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13284",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.867",
      "lastModified" : "2024-11-21T03:11:18.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273."
      }, {
        "lang" : "es",
        "value" : "En config_set_string de config.cc, es posible emparejar un segundo teclado BT sin la aprobación del usuario debido a la validación de entradas incorrecta. Esto podría llevar a un escalado de privilegios remoto sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13285",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.900",
      "lastModified" : "2024-11-21T03:11:18.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177126."
      }, {
        "lang" : "es",
        "value" : "En SvoxSsmlParser y startElement de svox_ssml_parser.cpp, hay una posible escritura fuera de límites debido a un búfer no inicializado. Esto podría llevar a una ejecución remota de código en un proceso no privilegiado sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177126."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13286",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:00.963",
      "lastModified" : "2024-11-21T03:11:18.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69683251."
      }, {
        "lang" : "es",
        "value" : "En writeToParcel y readFromParcel de OutputConfiguration.java, hay una omisión de permisos debido a una deserialización no coincidente. Esto podría conducir a un escalado de privilegios local donde un usuario puede comenzar una actividad con privilegios del sistema, sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-69683251."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13287",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.010",
      "lastModified" : "2024-11-21T03:11:18.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeToParcel were null, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71714464."
      }, {
        "lang" : "es",
        "value" : "En createFromParcel de VerifyCredentialResponse.java, hay una posible lectura de parcel no válida debido a la validación de entradas incorrecta. Esto podría llevar a un escalado de privilegios local si mPayload en writeToParcel fuese null, sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71714464."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13288",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.073",
      "lastModified" : "2024-11-21T03:11:18.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69634768."
      }, {
        "lang" : "es",
        "value" : "En writeToParcel y readFromParcel de PeriodicAdvertisingReport.java, hay una omisión de permisos debido a una mala coincidencia del int 64/32bit. Esto podría conducir a un escalado de privilegios local donde un usuario puede comenzar una actividad con privilegios del sistema, sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-69634768."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13289",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.103",
      "lastModified" : "2024-11-21T03:11:18.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70398564."
      }, {
        "lang" : "es",
        "value" : "En writeToParcel y createFromParcel de RttManager.java, hay una omisión de permisos debido a una mala coincidencia del tamaño de escritura. Esto podría conducir a un escalado de privilegios local donde un usuario puede comenzar una actividad con privilegios del sistema, sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70398564."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13290",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.167",
      "lastModified" : "2024-11-21T03:11:18.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69384124."
      }, {
        "lang" : "es",
        "value" : "En sdp_server_handle_client_req de sdp_server.cc, hay una lectura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a una divulgación de información local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69384124."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13291",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.227",
      "lastModified" : "2024-11-21T03:11:19.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603553."
      }, {
        "lang" : "es",
        "value" : "En avrc_ctrl_pars_vendor_rsp de avrc_pars_ct.cc, hay una posible desreferencia de puntero NULL debido a la falta de comprobaciones de límites. Esto podría llevar a una denegación de servicio (DoS) remota sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603553."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13292",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.277",
      "lastModified" : "2024-11-21T03:11:19.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-70722061. References: B-V2018010201."
      }, {
        "lang" : "es",
        "value" : "En wl_get_assoc_ies de wl_cfg80211.c, hay una posible escritura fuera de límites debido a una comprobación de límites incorrecta. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-70722061. Referencias: B-V2018010201."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13293",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.323",
      "lastModified" : "2024-11-21T03:11:19.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-62679701."
      }, {
        "lang" : "es",
        "value" : "En la función nfc_hci_cmd_received() de core.c, hay una posible escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a un escalado de privilegios local en el kernel sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: Android kernel. Android ID: A-62679701."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13294",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.383",
      "lastModified" : "2024-11-21T03:11:19.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el framework de Android (aosp email application). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13295",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.430",
      "lastModified" : "2024-11-21T03:11:19.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62537081."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) en el framework de Android (package installer). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62537081."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13296",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.493",
      "lastModified" : "2024-11-21T03:11:19.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el media framework de Android (libavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13297",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.540",
      "lastModified" : "2024-11-21T03:11:19.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libhevc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13298",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.587",
      "lastModified" : "2024-11-21T03:11:19.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de revelación de información en el media framework de Android (libhavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13299",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.633",
      "lastModified" : "2024-11-21T03:11:20.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el media framework de Android (libhavc). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13300",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.697",
      "lastModified" : "2024-11-21T03:11:20.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio en el media framework en Android (libhevc). Producto: Android. Versiones: 6.0, 6.0(1). Android ID: A-71567394."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13301",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.743",
      "lastModified" : "2024-11-21T03:11:20.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio (DoS) en el sistema Android (system ui). Producto: Android. Versiones: 8.0. Android ID: A-66498711."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13302",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.807",
      "lastModified" : "2024-11-21T03:11:20.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio (DoS) en el sistema Android (system ui). Producto: Android. Versiones: 8.0. Android ID: A-69969749."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13303",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.853",
      "lastModified" : "2024-11-21T03:11:20.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V2018010501."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador bcmdhd de Broadcom. Producto: Android. Versiones: Android kernel. Android ID: A-71359108. Referencias: B-V2018010501."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13304",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.900",
      "lastModified" : "2024-11-21T03:11:20.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información en el controlador mnh_sm del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-70576999."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13305",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:01.947",
      "lastModified" : "2024-11-21T03:11:20.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información en encrypted-keys del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-70526974."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2165",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3631-1/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3631-2/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3631-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3631-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3655-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13306",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:02.010",
      "lastModified" : "2024-11-21T03:11:20.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador mnh del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-70295063."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13307",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T16:29:02.057",
      "lastModified" : "2024-11-21T03:11:20.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en pci sysfs del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-69128924."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13248",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.240",
      "lastModified" : "2024-11-21T03:11:14.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70349612."
      }, {
        "lang" : "es",
        "value" : "En impeg2_idct_recon_sse42() de impeg2_idct_recon_sse42_intr.c, hay una escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70349612."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13249",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.287",
      "lastModified" : "2024-11-21T03:11:14.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70399408."
      }, {
        "lang" : "es",
        "value" : "En impeg2d_api_set_display_frame de impeg2d_api_main.c, hay una escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70399408."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13250",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.347",
      "lastModified" : "2024-11-21T03:11:14.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71375536."
      }, {
        "lang" : "es",
        "value" : "En ih264d_fmt_conv_420sp_to_420p de ih264d_utils.c, hay una escritura fuera de límites debido a la falta de una comprobación de límites provocada por un error de multiplicación. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71375536."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13251",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.397",
      "lastModified" : "2024-11-21T03:11:14.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when running multi threaded with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69269702."
      }, {
        "lang" : "es",
        "value" : "En impeg2d_dec_pic_data_thread de impeg2d_dec_hdr.c, hay una posible escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a un escalado de privilegios local al ejecutarse con múltiples hilos sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69269702."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13252",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.443",
      "lastModified" : "2024-11-21T03:11:14.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-70526702."
      }, {
        "lang" : "es",
        "value" : "En CryptoHal::decrypt de CryptoHal.cpp, hay una escritura fuera de límites debido a la validación de entradas incorrecta que resulta en una lectura de memoria no inicializada. Esto podría llevar a un escalado de privilegios local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-70526702."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13253",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.503",
      "lastModified" : "2024-11-21T03:11:14.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71389378."
      }, {
        "lang" : "es",
        "value" : "En CryptoPlugin::decrypt de CryptoPlugin.cpp, hay una posible escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a un escalado de privilegios local sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-71389378."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44291/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13254",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.567",
      "lastModified" : "2024-11-21T03:11:14.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el media framework de Android (AACExtractor). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13255",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.613",
      "lastModified" : "2024-11-21T03:11:14.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68776054."
      }, {
        "lang" : "es",
        "value" : "En process_service_attr_req de sdp_server.c, hay una escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68776054."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13256",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.677",
      "lastModified" : "2024-11-21T03:11:14.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68817966."
      }, {
        "lang" : "es",
        "value" : "En process_service_search_attr_req de sdp_server.c, hay una escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68817966."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13257",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.740",
      "lastModified" : "2024-11-21T03:11:14.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110692."
      }, {
        "lang" : "es",
        "value" : "En bta_pan_data_buf_ind_cback en bta_pan_act.cc, hay un uso de memoria previamente liberada que puede resultar en una lectura fuera de límites de memoria asignada mediante malloc. Esto podría llevar a una divulgación de información sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110692."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13258",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.787",
      "lastModified" : "2024-11-21T03:11:15.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67863755."
      }, {
        "lang" : "es",
        "value" : "En bnep_data_ind de bnep_main.cc, hay una posible lectura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a una divulgación remota de información sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67863755."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13259",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.847",
      "lastModified" : "2024-11-21T03:11:15.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546."
      }, {
        "lang" : "es",
        "value" : "En una funcionalidad implementada en sdp_discovery.cc, hay posibles lecturas fuera de límites debido a la falta de comprobaciones de límites. Esto podría llevar a una divulgación remota de información sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13260",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.897",
      "lastModified" : "2024-11-21T03:11:15.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177251."
      }, {
        "lang" : "es",
        "value" : "En bnep_data_ind de bnep_main.cc, hay una posible lectura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a una divulgación remota de información sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177251."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13261",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:00.943",
      "lastModified" : "2024-11-21T03:11:15.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177292."
      }, {
        "lang" : "es",
        "value" : "En bnep_data_ind de bnep_utils.cc, hay una posible lectura fuera de límites debido a la falta de una comprobación de límites. Esto podría llevar a una divulgación remota de información sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177292."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13262",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.003",
      "lastModified" : "2024-11-21T03:11:15.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69271284."
      }, {
        "lang" : "es",
        "value" : "En bnep_data_ind de bnep_main.cc, hay una posible lectura fuera de límites debido a la falta de una operación de reducción de longitud. Esto podría llevar a una divulgación remota de información sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69271284."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44326/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13263",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.050",
      "lastModified" : "2024-11-21T03:11:15.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el framework de Android. Producto: Android. Versiones: 8.0, 8.1. Android ID: A-69383160."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13264",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.097",
      "lastModified" : "2024-11-21T03:11:15.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el media framework de Android (Avcdec). Producto: Android. Versiones: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13265",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.147",
      "lastModified" : "2024-11-21T03:11:15.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el sistema de Android (actualizaciones OTA). Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13266",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.207",
      "lastModified" : "2024-11-21T03:11:15.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478941."
      }, {
        "lang" : "es",
        "value" : "En avrc_pars_vendor_cmd de avrc_pars_tg.cc, hay una posible corrupción de pila debido a la falta de una comprobación de límites. Esto podría llevar a la ejecución remota de código sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478941."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13268",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.253",
      "lastModified" : "2024-11-21T03:11:16.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13269",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.317",
      "lastModified" : "2024-11-21T03:11:16.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). Producto: Android. Versiones: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13270",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.380",
      "lastModified" : "2024-11-21T03:11:16.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador mnh_sm del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-69474744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13271",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.427",
      "lastModified" : "2024-11-21T03:11:16.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador mnh_sm del kernel Upstream. Producto: Android. Versiones: Android kernel. Android ID: A-69006799."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13272",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T17:29:01.473",
      "lastModified" : "2024-11-21T03:11:16.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110137."
      }, {
        "lang" : "es",
        "value" : "En alarm_ready_generic de alarm.cc, hay una posible escritura fuera de límites debido a un uso de memoria previamente liberada. Esto podría llevar a un escalado de privilegios remoto sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Android. Versiones: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110137."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-04T17:29:01.520",
      "lastModified" : "2024-11-21T03:19:42.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl."
      }, {
        "lang" : "es",
        "value" : "La función __get_data_block en fs/f2fs/data.c en el kernel de Linux, en versiones anteriores a la 4.11, permite que usuarios locales provoquen una denegación de servicio (desbordamiento de enteros y bucle) mediante el uso manipulado de las llamadas del sistema open y fallocate con un ioctl FS_IOC_FIEMAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.11",
            "matchCriteriaId" : "68E74529-58C5-4D73-8176-DDDF25C71F22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b86e33075ed1909d8002745b56ecf73b833db143",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833db143",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3696-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3696-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b86e33075ed1909d8002745b56ecf73b833db143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833db143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/3696-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3696-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1624",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-04T18:29:01.827",
      "lastModified" : "2024-11-21T03:22:09.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar 7.3 y 7.3.1 especifica permisos para un recurso crítico para la seguridad de forma que permite que ese recurso sea leído o modificado por actores no planeados. IBM X-Force ID: 133122."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089DD20-49FB-4057-B9A0-D32FC186E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCE0A40-18A5-4408-A3A4-44D8CB3C450F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EECABA4-E97D-419E-90C1-ED79B0F527D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015236",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133122",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1733",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-04T18:29:01.887",
      "lastModified" : "2024-11-21T03:22:17.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 134914."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar 7.3 almacena información potencialmente sensible en archivos de registro que pueden ser leídos por un usuario local. IBM X-Force ID: 134914."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089DD20-49FB-4057-B9A0-D32FC186E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCE0A40-18A5-4408-A3A4-44D8CB3C450F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EECABA4-E97D-419E-90C1-ED79B0F527D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015243",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103736",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134914",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1772",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-04T18:29:01.933",
      "lastModified" : "2024-11-21T03:22:20.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786."
      }, {
        "lang" : "es",
        "value" : "IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1 y 8.0) es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 136786."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:6.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C251EF2-D519-4CAD-961E-BC3C244E2180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8422B50A-0F9D-412C-92EC-0D640E01F7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152FC3F6-FDE0-43E3-BB1B-7FDE50E3588B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mobilefirst_platform_foundation:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BCA59D-888E-4E25-8C11-12FEAF0807BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000369",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103735",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136786",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6423",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T18:29:01.997",
      "lastModified" : "2024-11-21T03:29:44.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. References: QC-CR#1103158."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el controlador kyro L2 de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-32831370. Referencias: QC-CR#1103158."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97387",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6424",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T18:29:02.060",
      "lastModified" : "2024-11-21T03:29:44.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. References: QC-CR#1102648."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador WiFi de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-32086742. Referencias: QC-CR#1102648."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97396",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6425",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T18:29:02.123",
      "lastModified" : "2024-11-21T03:29:44.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#1103689."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador de vídeo de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-32577085. Referencias: QC-CR#1103689."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97362",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6426",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-04T18:29:02.167",
      "lastModified" : "2024-11-21T03:29:44.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106842."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador SPMI de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-33644474. Referencias: QC-CR#1106842."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97355",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0431",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-05T18:29:00.317",
      "lastModified" : "2024-11-21T03:02:58.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en los componentes propietario de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-32573899."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96068",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0744",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-05T18:29:00.377",
      "lastModified" : "2024-11-21T03:03:33.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References: N-CVE-2017-0744."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el código de procesamiento del firmware de NVIDIA. Producto: Android. Versiones: Android kernel. Android ID: A-34112726. Referencias: N-CVE-2017-0744."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0748",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-05T18:29:00.427",
      "lastModified" : "2024-11-21T03:03:34.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References: QC-CR#2029798."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en el controlador de audio de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-35764875. Referencias: QC-CR#2029798."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0751",
      "sourceIdentifier" : "security@android.com",
      "published" : "2018-04-05T18:29:00.533",
      "lastModified" : "2024-11-21T03:03:34.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. References: QC-CR#2045061."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de elevación de privilegios en el controlador QCE de Qualcomm. Producto: Android. Versiones: Android kernel. Android ID: A-36591162. Referencias: QC-CR#2045061."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2017-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12095",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T19:29:00.250",
      "lastModified" : "2024-11-21T03:08:49.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed \"de-auth\" packets to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable en la característica WiFi Access Point de Circle with Disney 2.0.1. Una serie de paquetes WiFi pueden forzar a Circle para que configure un punto de acceso con credenciales por defecto. Un atacante debe enviar una serie de paquetes \"de-auth\" suplantados para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E642C-D156-4E0E-B8F7-2EFEEDC77E99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0447",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2853",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T19:29:00.313",
      "lastModified" : "2024-11-21T03:24:19.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad RequestForPatientInfoEEGfile de Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar un desbordamiento de búfer basado en pila que resulta en la ejecución de comandos arbitrarios. Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0355",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2861",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T19:29:00.360",
      "lastModified" : "2024-11-21T03:24:20.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en el uso de un valor de retorno en el comando NewProducerStream en Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar una lectura fuera de límites, lo que resulta en una denegación de servicio (DoS). Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0365",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2867",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T19:29:00.423",
      "lastModified" : "2024-11-21T03:24:21.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad SavePatientMontage de Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar un desbordamiento de búfer basado en pila que resulta en la ejecución de código. Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0373",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2868",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T19:29:00.487",
      "lastModified" : "2024-11-21T03:24:21.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad NewProducerStream de Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar un desbordamiento de búfer basado en pila que resulta en la ejecución de código. Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0374",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2869",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T19:29:00.547",
      "lastModified" : "2024-11-21T03:24:21.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad OpenProducer de Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar un desbordamiento de búfer basado en pila que resulta en la ejecución de código. Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0375",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12088",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.273",
      "lastModified" : "2024-11-21T03:08:48.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one unauthenticated packet to trigger this vulnerability"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad Ethernet de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar un ciclo de energía del dispositivo, lo que resulta en un estado de error y la eliminación de la lógica de escala. Un atacante puede enviar un paquete sin autenticación para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0440",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12089",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.337",
      "lastModified" : "2024-11-21T03:08:48.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de descarga de programas de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar un error en el dispositivo, lo que resulta en la interrupción de las operaciones. Un atacante puede enviar un paquete sin autenticación para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0441",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12090",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.397",
      "lastModified" : "2024-11-21T03:08:48.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle resulting in downtime for the device. An attacker can send one packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en el procesamiento de comandos snmp-set de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Una petición snmp-set especialmente manipulada, cuando se envía sin comandos snmp-set asociados al flasheo de firmware, puede provocar un ciclo de energía del dispositivo que resulta en tiempo de inactividad para el dispositivo. Un atacante puede enviar un paquete para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0442",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12093",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.460",
      "lastModified" : "2024-11-21T03:08:48.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to the PLC being disconnected. An attacker can send unauthenticated packets to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de comunicación de sesión de Allen Bradley Micrologix 1400 Series B Firmware, en versiones 21.2 y anteriores. Un flujo de paquetes especialmente manipulado puede provocar la inundación del pool de recursos de sesión que resulta en conexiones legítimas al PCL que se está desconectando. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0445",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14462",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.507",
      "lastModified" : "2024-11-21T03:12:50.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG (also RUN for some) Description: Allows an attacker to enable SNMP, Modbus, DNP, and any other features in the channel configuration. Also allows attackers to change network parameters, such as IP address, name server, and domain name."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE o PROG (también RUN para algunos) Descripción: Permite que un atacante habilite SNMP, Modbus, DNP y cualquier otra característica en la configuración de canal. También permite que atacantes cambien parámetros de red, tales como la dirección IP, nombre del servidor y nombre de dominio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14463",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.570",
      "lastModified" : "2024-11-21T03:12:50.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG Associated Fault Code: 0012 Fault Type: Non-User Description: A fault state can be triggered by overwriting the ladder logic data file (type 0x22 number 0x02) with null values."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE o PROG. Código de error asociado: 0012. Tipo de error: Non-User. Descripción: Se puede desencadenar un estado de error sobrescribiendo el archivo de datos de lógica de escala (tipo 0x22 número 0x02) con valores null."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14464",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.633",
      "lastModified" : "2024-11-21T03:12:50.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability.Required Keyswitch State: REMOTE or PROG Associated Fault Code: 0001 Fault Type: Non-User Description: A fault state can be triggered by setting the NVRAM/memory module user program mismatch bit (S2:9) when a memory module is NOT installed."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE o PROG. Código de error asociado: 0001. Tipo de error: Non-User. Descripción: Se puede desencadenar un estado de error estableciendo el bit de no coincidencia (S2:9) del programa de usuario del módulo NVRAM/memory cuando un módulo de memoria NO está instalado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14465",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.693",
      "lastModified" : "2024-11-21T03:12:50.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE Description: Any input or output can be forced, causing unpredictable activity from the PLC."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE. Descripción: Se puede forzar cualquier entrada o salida, lo que provoca una actividad impredecible en el PLC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14466",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.787",
      "lastModified" : "2024-11-21T03:12:51.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG Description: The filetype 0x03 allows users write access, allowing the ability to overwrite the Master Password value stored in the file."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE o PROG. Descripción: El filetype 0x03 permite el acceso de escritura a los usuarios, lo que les permite sobrescribir el valor Master Password almacenado en el archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14467",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.867",
      "lastModified" : "2024-11-21T03:12:51.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE Description: Live rung edits are able to be made by an unauthenticated user allowing for addition, deletion, or modification of existing ladder logic. Additionally, faults and cpu state modification can be triggered if specific ladder logic is used."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE. Descripción: Un usuario no autenticado puede realizar ediciones live rung, lo que permite la adición, eliminación o modificación de la lógica de escala existente. Adicionalmente, puede desencadenarse la modificación de errores y del estado de la cpu si se emplea lógica de escala."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14468",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.913",
      "lastModified" : "2024-11-21T03:12:51.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG Description: This ability is leveraged in a larger exploit to flash custom firmware."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE o PROG. Descripción: Esta capacidad se aprovecha en un gran exploit para flashear firmware personalizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14469",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:00.977",
      "lastModified" : "2024-11-21T03:12:51.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG Associated Fault Code: 0028 Fault Type: Non-User Description: Values 0x01 and 0x02 are invalid values for the user fault routine. By writing directly to the file it is possible to set these values. When this is done and the device is moved into a run state, a fault is triggered. NOTE: This is not possible through RSLogix."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de control de acceso explotable en la funcionalidad de permisos de archivos de datos, programas y funciones de Allen Bradley Micrologix 1400 Serie B FRN 21.2 y anteriores. Un paquete especialmente diseñado puede causar una operación de lectura o escritura que resulte en la divulgación de información sensible, la modificación de la configuración o la modificación de la lógica de escalera. Un atacante puede enviar paquetes no autentificados para activar esta vulnerabilidad. Estado del interruptor de llave requerido: REMOTO o PROG Código de fallo asociado: 0028 Tipo de fallo: No Usuario Descripción: Los valores 0x01 y 0x02 son valores no válidos para la rutina de fallos de usuario. Escribiendo directamente en el archivo es posible establecer estos valores. Cuando se hace esto y el dispositivo pasa a un estado de ejecución, se dispara un fallo. NOTA: Esto no es posible a través de RSLogix"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14470",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:01.037",
      "lastModified" : "2024-11-21T03:12:51.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG or RUN Description: The value 0xffffffff is considered NaN for the Float data type. When a float is set to this value and used in the PLC, a fault is triggered. NOTE: This is not possible through RSLogix."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de control de acceso explotable en la funcionalidad de permisos de archivos de datos, programas y funciones de Allen Bradley Micrologix 1400 Serie B FRN 21.2 y anteriores. Un paquete especialmente diseñado puede causar una operación de lectura o escritura que resulte en la divulgación de información sensible, la modificación de la configuración o la modificación de la lógica de escalera. Un atacante puede enviar paquetes no autentificados para activar esta vulnerabilidad. Estado del interruptor de llave requerido: REMOTE o PROG o RUN Descripción: El valor 0xffffff se considera NaN para el tipo de datos Float. Cuando se establece un flotador con este valor y se utiliza en el PLC, se desencadena un fallo. NOTA: Esto no es posible a través de RSLogix"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14471",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:01.087",
      "lastModified" : "2024-11-21T03:12:51.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG Associated Fault Codes: 0023, 002e, and 0037 Fault Type: Recoverable Description: The STI, EII, and HSC function files contain bits signifying whether or not a fault has occurred. Additionally there is a bit signaling the module to auto start. When these bits are set for any of the three modules and the device is moved into a run state, a fault is triggered."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: REMOTE o PROG. Códigos de error asociados: 0023, 002e y 0037. Tipo de error: Recoverable. Descripción: Los archivos de función STI, EII y HSC contienen bits que indican si ha ocurrido un error o no. Adicionalmente, hay un bit que señala que el módulo se autoinicie. Cuando estos bits se establecen para cualquiera de estos tres módulos y el dispositivo se mueve a un estado de ejecución, se desencadena el error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14472",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:01.133",
      "lastModified" : "2024-11-21T03:12:51.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: Any Description: Requests a specific set of bytes from an undocumented data file and returns the ASCII version of the master password."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: Cualquiera. Descripción: Solicita un conjunto específico de bytes de un archivo de datos no documentado y devuelve la versión en ASCII de la contraseña maestra."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14473",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-05T21:29:01.193",
      "lastModified" : "2024-11-21T03:12:51.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: Any Description: Reads the encoded ladder logic from its data file and print it out in HEX."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de control de acceso en las funcionalidades data, program y function file de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una operación de lectura o escritura que resulta en la revelación de información sensible, modificación de opciones o modificación de la lógica de escala. Un atacante puede enviar paquetes sin autenticación para provocar esta vulnerabilidad. Estado de Keyswitch requerido: Cualquiera. Descripción: Lee la lógica de escala cifrada de su archivo de datos y lo imprime en HEX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18097",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-04-06T13:29:00.267",
      "lastModified" : "2024-11-21T03:19:21.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to import their Trello board to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the title of a Trello card."
      }, {
        "lang" : "es",
        "value" : "El recurso de importación de tableros de Trello en Atlassian Jira, en versiones anteriores a la 7.6.1, permite que atacantes remotos que puedan convencer a un administrador de Jira para que importe su tablero de Trello inyecten HTML o JavaScript arbitrarios mediante una vulnerabilidad de Cross-Site Scripting (XSS) en el título de una tarjeta de Trello."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "A2F243B1-7B91-4254-8F09-A516329EE956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103764",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67076",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18098",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-04-06T13:29:00.327",
      "lastModified" : "2024-11-21T03:19:21.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through various fields."
      }, {
        "lang" : "es",
        "value" : "El recurso searchrequest-xml en Atlassian Jira, en versiones anteriores a la 7.6.1, permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) a través de varios campos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "A2F243B1-7B91-4254-8F09-A516329EE956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103765",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67075",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-08T17:29:00.237",
      "lastModified" : "2024-11-21T03:19:42.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file."
      }, {
        "lang" : "es",
        "value" : "La función xz_head en xzlib.c en libxml2, en versiones anteriores a la 2.9.6, permite que atacantes remotos provoquen una denegación de servicio (consumo de memoria) mediante un archivo LZMA. Esto se dene a que la funcionalidad de descifrado no restringe el uso de memoria a lo que se requiere para un archivo legítimo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.6",
            "matchCriteriaId" : "C19E3EB6-7136-4235-B7FC-5719DABACD78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190719-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3739-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190719-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3739-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2826",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-09T20:29:00.217",
      "lastModified" : "2024-11-21T03:24:13.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en la petición del proxy iConfig en las versiones 2.4.X del servidor Zabbix. Una petición del proxy iConfig especialmente manipulada puede hacer que el servidor Zabbix envíe la información de configuración de cualquier proxy de Zabbix, lo que resulta en una divulgación de información. Un atacante puede realizar peticiones de un proxy Zabbix activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B847CEDA-6C3E-44DC-952B-9F92EF2E060A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "379C720C-1F28-487D-8AF8-873E916B18DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "10D1EA2C-35CC-4E35-BA5C-B0BC9D3BEEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1A799E7F-C2FB-4F2C-A8C0-6254DAF8C625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E036381E-C3B3-4E13-9FB3-1CAF15D900DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "66CF407E-71E0-4163-B4E7-346BF6164183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B81CDC64-CB3F-4939-BAC1-591F92D69D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9080E8A-E1E6-46CB-B766-D8E4B68C4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "074D6347-699F-4FEB-969C-CC02751B17D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32BD321-01C3-4910-9058-A5582A27A6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA0EC11-C95B-42E5-B5D0-6D938D7F909B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ACEED4-E5FD-42D2-BDF3-96B46EE2B9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7D63B5-8660-4B23-89EA-009EF560F95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B67B9-7184-4E7E-AA3D-52CD8A7A0CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A84A1-06C7-4300-BEA6-39C4E7468665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B2EB47-2255-4B56-85A5-2B6261EA93AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "55C1F15D-DF51-447D-87AD-C2DA4F118E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE8C066D-3290-4073-AF74-C13ED3C733DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A610E4AB-BA66-4059-B9C4-D13C4B54804A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D7778B-738C-42B4-81D7-DFB5456D8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8623D3-5A16-45E7-8F26-6F1B7DAC51A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E5EA48-E8E3-4214-9D23-25AB677FE96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:2.4.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "556EE336-9968-48A6-9B1B-064ABF39D95A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0327",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1081",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2018-04-10T13:29:00.213",
      "lastModified" : "2024-11-21T03:21:18.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using \"keep state\" or \"keep frags\" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD, en versiones anteriores a la 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE y 10.3-RELEASE-p19, cuando ipfilter emplea las opciones \"keep state\" o \"keep frags\", puede provocar un pánico del kernel cuando se le alimentan fragmentos de paquetes manipulados debido a la gestión incorrecta de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secteam@freebsd.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "4E50013C-15A6-485D-AE56-0918E9E3694F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102E760-362C-4DC7-BDED-E2CF9F94ECE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:10.3:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "9754186C-D76B-4E06-B04C-EB555AD8C1D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F416BC-1C99-47FD-9B74-C00E8E7D19E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98089",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038369",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18100",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-04-10T13:29:00.323",
      "lastModified" : "2024-11-21T03:19:21.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of quick filters."
      }, {
        "lang" : "es",
        "value" : "El gadget agile wallboard en Atlassian Jira, en versiones anteriores a la 7.8.1, permite que atacantes remotos inyecten HTML o JavaScript arbitrarios mediante una vulnerabilidad de Cross-Site Scripting (XSS) en el nombre de los filtros rápidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.8.1",
            "matchCriteriaId" : "0F712C14-2DA8-46BB-9070-3507C84148A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103729",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67106",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18101",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-04-10T13:29:00.383",
      "lastModified" : "2024-11-21T03:19:21.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks."
      }, {
        "lang" : "es",
        "value" : "Varos recursos administrativos de importación de sistema externo en Atlassian JIRA Server (incluyendo JIRA Core), en versiones anteriores a la 7.6.5, de la versión 7.7.0 antes de la 7.7.3, de la versión 7.8.0 anterior a la 7.8.3 y antes de la versión 7.9.0, permite que atacantes remotos ejecuten operaciones de importación y determinen si existe un servicio interno a través de la falta de comprobación de permisos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "3517B751-F490-40D0-9612-F64511DA1D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.3",
            "matchCriteriaId" : "D0281160-9946-46A0-A6FC-B63971CFDEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.8.0",
            "versionEndExcluding" : "7.8.3",
            "matchCriteriaId" : "DBBB1C9A-EB14-4C67-8077-D97CEE12525F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103730",
        "source" : "security@atlassian.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67107",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-10T15:29:01.080",
      "lastModified" : "2024-11-21T03:12:33.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter."
      }, {
        "lang" : "es",
        "value" : "SSRF (Server Side Request Forgery) en getRemoteImage.php en Ueditor en Onethink V1.0 y V1.1 permite que atacantes remotos obtengan información sensible, ataquen hosts de la intranet o desencadenen la ejecución de comandos remotos mediante el parámetro upfile."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onethink:onethink:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00DF0F2-182A-4AB4-A287-18D1AC29DFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onethink:onethink:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119125BC-9E3E-470E-88C8-4C653FB5AD3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Apr/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Apr/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-10T15:29:01.143",
      "lastModified" : "2024-11-21T03:13:12.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component."
      }, {
        "lang" : "es",
        "value" : "SSRF (Server Side Request Forgery) en Cockpit 0.13.0 permite que atacantes remotos lean archivos arbitrarios o envíen tráfico TCP a los hosts de la intranet mediante el parámetro url. Esto está relacionado con el uso del componente descontinuado aheinze/fetch_url_contents."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentejo:cockpit:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9AF66A-6651-44E3-8F1B-4B71E27E3F9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Apr/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Apr/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-11T03:29:00.223",
      "lastModified" : "2024-11-21T03:19:42.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM is affected by stored Cross-Site Scripting (XSS) in versions through 7.0.0."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM se ha visto afectado por Cross-Site Scripting (XSS) persistente hasta la versión 7.0.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.0",
            "matchCriteriaId" : "E8A2E468-AF15-40B1-BBEA-C853B55C9C35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-11T03:29:00.270",
      "lastModified" : "2024-11-21T03:19:42.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter)."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM se ha visto afectado por múltiples vulnerabilidades de inyección SQL hasta la versión 7.0.0 mediante comm/propal/list.php (parámetro viewstatut) o comm/propal/list.php (parámetro propal_statut, también conocido como search_statut)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.0",
            "matchCriteriaId" : "E8A2E468-AF15-40B1-BBEA-C853B55C9C35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-010",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-11T03:29:00.333",
      "lastModified" : "2024-11-21T03:36:57.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting (XSS) vulnerabilities in versions before 5.0.4: index.php (leftmenu parameter), core/ajax/box.php (PATH_INFO), product/stats/card.php (type parameter), holiday/list.php (month_create, month_start, and month_end parameters), and don/card.php (societe, lastname, firstname, address, zipcode, town, and email parameters)."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM se ha visto afectado por múltiples vulnerabilidades de Cross-Site Scripting (XSS) reflejado en las versiones anteriores a la 5.0.4: index.php (parámetro leftmenu), core/ajax/box.php (PATH_INFO), product/stats/card.php (parámetro type), holiday/list.php (parámetros month_create, month_start y month_end) y don/card.php (parámetros societe, lastname, firstname, address, zipcode, town e email)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "0672E294-2AAB-4196-BA13-A46537EDF7C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-11T03:29:00.397",
      "lastModified" : "2024-11-21T03:36:57.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter)."
      }, {
        "lang" : "es",
        "value" : "Dolibarr ERP/CRM se ha visto afectado por una inyección SQL en las versiones anteriores a la 5.0.4 mediante product/stats/card.php (parámetro type)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "0672E294-2AAB-4196-BA13-A46537EDF7C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-010",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13677",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-04-11T14:29:00.313",
      "lastModified" : "2024-11-21T03:11:24.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service through management console application crashes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio (DoS) en las consolas de gestión Symantec Advanced Secure Gateway (ASG) y ProxySG. Un atacante remoto puede emplear peticiones HTTP/HTTPS manipuladas para provocar el cierre inesperado de la aplicación a través de una denegación de servicio (DoS) en la consola de gestión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.5.14",
            "matchCriteriaId" : "EF86C5BD-ABB2-4B5D-901D-42153FB2ED15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.7.3.1",
            "matchCriteriaId" : "8A8D1880-B9D6-4AA2-B266-ACDFD0E046E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.10.8",
            "matchCriteriaId" : "71233B55-5E11-42A3-AE39-EAD381E32607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.5.14",
            "matchCriteriaId" : "2D262D81-F928-4847-87C8-D20849ABA94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.7.3.1",
            "matchCriteriaId" : "EADC894C-8F9E-4BE1-9A1D-45A0B3AB4462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103685",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040757",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA162",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13678",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-04-11T14:29:00.377",
      "lastModified" : "2024-11-21T03:11:24.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) persistente en las consolas de gestión Symantec Advanced Secure Gateway (ASG) y ProxySG. Un administrador de aparatos malicioso puede inyectar código JavaScript arbitrario en la aplicación cliente de la consola de gestión web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.5.14",
            "matchCriteriaId" : "EF86C5BD-ABB2-4B5D-901D-42153FB2ED15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.3",
            "versionEndExcluding" : "6.7.3.7",
            "matchCriteriaId" : "1D365F8C-3F0E-4596-9AE0-840E966E7E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.4",
            "versionEndExcluding" : "6.7.4.107",
            "matchCriteriaId" : "FCD17841-CC52-427D-9B77-B3787276D1FE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.10.8",
            "matchCriteriaId" : "71233B55-5E11-42A3-AE39-EAD381E32607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.5.14",
            "matchCriteriaId" : "2D262D81-F928-4847-87C8-D20849ABA94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.3",
            "versionEndExcluding" : "6.7.3.7",
            "matchCriteriaId" : "A161CEF7-078D-400B-82FF-F4CCD5561F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.4",
            "versionEndExcluding" : "6.7.4.107",
            "matchCriteriaId" : "F473B1BD-A298-4809-AAB1-E7B520AA5222"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103685",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040757",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA162",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11011",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.240",
      "lastModified" : "2024-11-21T03:06:56.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 835, a Use After Free condition can occur in a communication API."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820 y SD 835, puede ocurrir una condición de uso de memoria previamente liberada en la API de comunicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18071",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.287",
      "lastModified" : "2024-11-21T03:19:17.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, debug policy can potentially be bypassed."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625 y SD 650/52, podría omitirse la política de depuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18072",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.350",
      "lastModified" : "2024-11-21T03:19:17.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the probe requests originated by this DUT. Hence, control the presence of which information elements is supported."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660 y Snapdragon_High_Med_2016, la petición de sondeo originada en el teléfono del usuario contiene los elementos de información que especifican las características Wi-Fi soportadas. Esto impactaría en la privacidad del usuario si alguien rastrease las peticiones de sondeo originadas por esta DUT. Por lo tanto, se puede controlar qué elementos de información soportados están presentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CFB656-804A-453C-A39B-1B08C0A16BB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0C9ED5-27E3-48EC-9A05-862715EE2034"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DDA896-576C-44B8-85B6-F71F473F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9378_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A2F0ED-CB0C-40F4-9EAF-28111D9E6E2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9378au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD25E82-86AC-4AA7-AD70-2AABA34700C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FE294D-4BE0-4436-9273-507E760884EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424CB795-58E5-43A4-A2EC-C563D93C5E72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca4531_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A13DB5D-38AC-4E50-A279-130AF24256E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca4531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A67611-CA55-4039-B4B5-AB87CD6CEA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18073",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.397",
      "lastModified" : "2024-11-21T03:19:18.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, the HLOS can gain access to unauthorized memory."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 820, SD 820A y SD 835, el HLOS podría obtener acceso a la memoria no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18074",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.460",
      "lastModified" : "2024-11-21T03:19:18.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, SD 835, while playing a .wma file with modified media header with non-standard bytes per second parameter value, a reachable assert occurs."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820 y SD 835, mientras se reproduce un archivo .wma con una cabecera media manipulada con un valor de parámetro de bytes por segundo no estándar, ocurre una aserción alcanzable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18125",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.507",
      "lastModified" : "2024-11-21T03:19:24.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845 y SD 850, cuando secure camera está activado, almacena los datos capturados en búfers protegidos. La aplicación TEE que emplea secure camera espera que esos búfers contengan datos capturados durante la sesión de cámara actual. Sin embargo, es posible que HLOS deje a un lado y reutilice uno o más búfers protegidos con datos previamente capturados durante la próxima sesión de cámara. Debe evitarse la reutilización de datos, ya que la aplicación TEE espera recibir datos válidos capturados solo durante la sesión actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18126",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.553",
      "lastModified" : "2024-11-21T03:19:24.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the original mac spoofing feature does not use the following in probe request frames: (a) randomized sequence numbers and (b) randomized source address for cfg80211 scan, vendor scan and pno scan which may affect user privacy."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660 y Snapdragon_High_Med_2016, la característica original de suplantación de mac no emplea lo siguiente en los frames de petición de sondeo: (a) números de secuencia aleatorizados y (b) una dirección de origen aleatorizada para cfg80211 scan, vendor scan y pno scan, lo que podría afectar a la privacidad del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CFB656-804A-453C-A39B-1B08C0A16BB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0C9ED5-27E3-48EC-9A05-862715EE2034"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DDA896-576C-44B8-85B6-F71F473F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18127",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.617",
      "lastModified" : "2024-11-21T03:19:24.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted name_len and value_len values are not checked and could potentially cause a buffer overflow in subsequent calls to memcpy()."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835 y SD 845, al procesar un paquete de comando SetParam en el servicio VR, los valores extraídos name_len y value_len no se comprueban. Esto podría provocar un desbordamiento de búfer en llamadas subsecuentes a memcpy()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18128",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.663",
      "lastModified" : "2024-11-21T03:19:24.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers may potentially lead to exposure of related secured data."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile SD 845, SD 850, el control de acceso incorrecto al configurar los registros de corrección de errores de protección MPU podría desembocar en la divulgación de datos relativos a la seguridad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18129",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.727",
      "lastModified" : "2024-11-21T03:19:24.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996 y MSM8998, es posible que los canales IPA (Internet Protocol Accelerator) propiedad de un dominio de seguridad sean controlados desde otros dominios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25AB827-02D7-4FDE-BFB7-3F5DE8071477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAB0FCA-8F94-4FB1-ACCC-02E0222BAE49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9154AF-E52E-4E84-9322-2CA7EBD3E6FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4796F9BD-61B3-45ED-B5E3-B061887285E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18130",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.787",
      "lastModified" : "2024-11-21T03:19:24.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while playing an ASF file, a buffer over-read can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile, Snapdragon Mobile, y Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835 y SD 845, al reproducir un archivo ASF, podría ocurrir una sobrelectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18132",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.850",
      "lastModified" : "2024-11-21T03:19:25.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, MDM8996, an out-of-bounds access can potentially occur in tz_assign()."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile y Snapdragon Mobile MDM9206, MDM9607 y MDM8996 puede ocurrir un acceso fuera de límites en tz_assign()."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25AB827-02D7-4FDE-BFB7-3F5DE8071477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAB0FCA-8F94-4FB1-ACCC-02E0222BAE49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18133",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.897",
      "lastModified" : "2024-11-21T03:19:25.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an out of bound access for ebi channel array can potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205 y SD 835 podría ocurrir un acceso fuera de límites para el array del canal ebi."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18134",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:00.977",
      "lastModified" : "2024-11-21T03:19:25.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, a buffer overflow may potentially occur while processing a response from the SIM card."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile SD 845 y SD 850 podría ocurrir un desbordamiento de búfer al procesar una respuesta de la tarjeta SIM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18135",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.037",
      "lastModified" : "2024-11-21T03:19:25.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service (WDS) module, a buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845 y SD 850 puede ocurrir un desbordamiento de búfer en el módulo Wireless Data Service (WDS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18136",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.100",
      "lastModified" : "2024-11-21T03:19:25.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, in the omx aac component, a Use After Free condition may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835 y SD 845 podría ocurrir una condición de uso de memoria previamente liberada en el componente omx aac."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18137",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.180",
      "lastModified" : "2024-11-21T03:19:25.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while processing the IPv6 pdp address of the pdp context, a buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad 2018-04-05 en Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820 y SD 835 al procesar la dirección pdp IPv6 del contexto pdp, podría ocurrir un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18138",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.257",
      "lastModified" : "2024-11-21T03:19:26.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, in GERAN, a buffer overflow may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845 y SD 850 podría ocurrir un desbordamiento de búfer en GERAN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18139",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.303",
      "lastModified" : "2024-11-21T03:19:26.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, a buffer overflow vulnerability may potentially exist while making an IMS call."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845 y SD 850 podría existir una vulnerabilidad de desbordamiento de búfer al realizar una llamada IMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18140",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.367",
      "lastModified" : "2024-11-21T03:19:26.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, when processing a call disconnection, there is an attempt to print the RIL token-id to the debug log. If eMBMS service is enabled while processing the call disconnect, a Use After Free condition may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835 y SD 845, al procesar una desconexión de llamada, hay un intento de impresión del token-id RIL en el log de depuración. Si el servicio eMBMS está habilitado mientras se procesa la desconexión de llamada, podría ocurrir una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18142",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.413",
      "lastModified" : "2024-11-21T03:19:26.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845 y SD 850 podría ocurrir un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18143",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.460",
      "lastModified" : "2024-11-21T03:19:26.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are collected when debugging is not enabled."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile SD 845 y SD 850 se recopilan volcados PD en un dispositivo seguro cuando la depuración no está habilitada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18144",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.523",
      "lastModified" : "2024-11-21T03:19:27.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing the retransmission of WPA supplicant command send failures, there is a make after break of the connection to WPA supplicant where the local pointer is not properly updated. If the WPA supplicant command transmission fails, a Use After Free condition will occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835 y SD 845, al procesar la retransmisión de errores de envío de comandos suplicantes WPA, hay un \"make after break\" de la conexión al suplicante WPA donde el puntero local no se actualiza correctamente. Si la transmisión del comando suplicante WPA fracasa, ocurrirá una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18145",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.587",
      "lastModified" : "2024-11-21T03:19:27.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while the DPM native process is processing framework events, the iterator pointer is deleted after processing an event. When processing subsequent events, a Use After Condition will occur."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835 y SD 845 mientras el proceso nativo DPM procesa eventos del framework, el puntero de iteración se elimina tras procesar un evento. Al procesar otros eventos, ocurrirá una condición de uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18146",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.633",
      "lastModified" : "2024-11-21T03:19:27.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, in some corner cases, ECDSA signature verification can fail."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845 y SD 850, en algunos casos corner, la verificación de firmas ECDSA puede fallar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8274",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.680",
      "lastModified" : "2024-11-21T03:33:40.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, an access control vulnerability exists in Core."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile y Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625 y SD 650/52, existe una vulnerabilidad de control de acceso en Core."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8275",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-04-11T15:29:01.740",
      "lastModified" : "2024-11-21T03:33:40.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, SD 835, an integer overflow vulnerability exists in a video library."
      }, {
        "lang" : "es",
        "value" : "En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820 y SD 835, existe una vulnerabilidad de desbordamiento de enteros en una biblioteca de vídeo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33257838-2D70-4C43-8EE8-7538764EFFD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D83E1-F1F2-48E5-B3E0-806DAB14B60B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14459",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-11T16:29:00.213",
      "lastModified" : "2024-11-21T03:12:50.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client in firmware versions 1.4 to 1.7 (current). An attacker can inject commands via the username parameter of several services (SSH, Telnet, console), resulting in remote, unauthenticated, root-level operating system command execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de inyección de comandos del sistema operativo en las funcionalidades Telnet, SSH e inicio de sesión en consola en el AP/bridge/cliente inalámbrico Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n, en versiones de firmware de la 1.4 a la 1.7 (actual). Un atacante puede inyectar comandos mediante el parámetro username de varios servicios (SSH, Telnet, consola), lo que resulta en la ejecución remota no autenticada de comandos del sistema operativo a nivel root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:awk-3131a_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C624D249-F591-4B80-8225-00F14DA81DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:awk-3131a_firmware:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544170D3-65F2-4D16-8B07-9D2A6A16BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:awk-3131a_firmware:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D969E1FE-77B3-46D5-8D52-1A6C2AFB63BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:awk-3131a_firmware:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058AAB67-CB52-4521-9D8E-7A9F3DAC22B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:awk-3131a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143AB2D7-E663-4F5D-A9EC-5E3A15B114E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0507",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2599",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-04-11T16:29:00.277",
      "lastModified" : "2024-11-21T03:23:48.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321)."
      }, {
        "lang" : "es",
        "value" : "Jenkins, en versiones anteriores a la 2.44 y 2.32.2, es vulnerable a una comprobación de permisos insuficiente. Esto permite que usuarios con permisos para crear nuevos items (por ejemplo, jobs) para sobrescribir items existentes a los que no tienen acceso (SECURITY-321)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15327",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-11T17:29:00.147",
      "lastModified" : "2024-11-21T03:14:28.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010C00 have an improper authorization vulnerability on Huawei switch products. The system incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by authenticated user. Successful exploit could cause information disclosure."
      }, {
        "lang" : "es",
        "value" : "S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00 y V200R010C00 tienen una vulnerabilidad de autorización incorrecta en productos switch de Huawei. El sistema realiza de manera errónea una comprobación de autorización cuando un usuario normal intenta acceder a cierta información a la que se supone que solo pueden acceder los usuarios autenticados. La explotación con éxito podría resultar en una divulgación de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81469B-EC6C-493D-B632-4DF821A1F304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F2C4C7-3438-42B8-8999-C17E45C8CF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r006c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACAB5D62-CAC9-41D0-BBBC-93E22AD8EAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CBC93B-5CF6-45BF-A90A-84B7693E27FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985C07E4-1E27-4191-9FB8-4714A177479D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A787767-F56E-4930-B366-C7E103CAC1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17A34EF-677D-4264-82FB-F7F582C9F56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933755CC-4A0B-42FB-9491-3C841059851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49D3EAD-1EB3-4C62-80BA-4C9C3CE0408C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65902ABB-3EF2-4C8B-BAC1-84BC585019BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75B012-A57D-4C6D-AB26-51D2ECC02F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DFF0C0-AA17-4AA1-A418-4759D1A58852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F05D5-BA7D-485B-91C2-273349335CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r006c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345DA517-033D-4C94-A7F2-77C047309E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377CD30-6F57-46CB-9DD1-E29458A7D928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55C2AC7-FF47-4160-B524-E3E6C54612E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6712B77-1268-4A5A-B383-E51D9D51F108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A3C92-C5C6-4BE6-A9F6-21C28D68C080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1F0B3D-1923-42C3-A3DB-03D11BE059D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032E5E4D-B1B8-4659-8B62-3DC237234501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB6ED15-477B-4BB5-AA94-0D7897FBD962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AD9ACA-E0C3-4096-BE50-94E717CDA318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325D6523-A07A-48D4-AD44-CF838BD77432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r006c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702A6BB8-B9D5-4160-94C9-12CF35485FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78DAB13-32AA-4813-AB0A-0EA870F41183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0EC8F-6A8A-487F-A92A-789E3789788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180328-01-authentication-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180328-01-authentication-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17308",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-11T17:29:00.207",
      "lastModified" : "2024-11-21T03:17:48.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote attacker may send specially crafted packets to the affected products. Due to insufficient validation of packets, successful exploit may cause some services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo SCCPX en Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de acceso inválido a la memoria. Un atacante remoto no autenticado podría enviar paquetes especialmente manipulados a los productos afectados. Dada la validación de paquetes insuficiente, un exploit con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDC74F3-643A-4978-A76E-36978FAD887B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-sccpx-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-sccpx-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8154",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-11T17:29:00.257",
      "lastModified" : "2024-11-21T03:33:25.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes."
      }, {
        "lang" : "es",
        "value" : "Los teléfonos móviles Themes App Honor 8 Lite Huawei con versiones de software anteriores a Prague-L31C576B172, anteriores a Prague-L31C530B160 y anteriores a Prague-L31C432B180 tienen una vulnerabilidad Man-in-the-Middle (MitM) debido al uso del protocolo no seguro HTTP para la descarga de temas. Un atacante podría explotar esta vulnerabilidad para manipular temas descargados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-l31c530b160",
            "matchCriteriaId" : "A3DF33DB-3A11-42AE-855C-9E85BC1F0FC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A76E53-8352-4639-97D4-EC8CB1BED996"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-l31c576b172",
            "matchCriteriaId" : "1E8C6DF2-9FA8-4E43-8DBE-00988DB65399"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A76E53-8352-4639-97D4-EC8CB1BED996"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "prague-l31c432b180",
            "matchCriteriaId" : "3F09593D-5FC0-401E-9A5F-1222B7D959CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:honor_8_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A76E53-8352-4639-97D4-EC8CB1BED996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7534",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-04-11T19:29:00.213",
      "lastModified" : "2024-11-21T03:32:06.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.x de OpenShift Enterprise son vulnerables a Cross-Site Scripting (XSS) persistente mediante el visor de logs para pods. El error se debe a la falta de saneamiento de entradas de usuario, específicamente los caracteres de escape de terminal, y la creación de enlaces sobre los que se puede hacer clic automáticamente al ver los archivos log para un pod."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "45690263-84D9-45A1-8C30-3ED2F0F11F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F8E35FAB-695F-44DA-945D-60B47C1F200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F33CEF04-05FA-444C-BB14-F3E3434AF61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "84C890EC-229B-458B-AEF7-EA03C6248A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E1056A33-690E-4120-821F-52B9705CB84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0FB4CEB9-3106-41D7-BBAA-FA92D2698FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.6:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4B196A82-385B-492A-8927-723CB8690CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.7:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2D9724B7-D99B-4376-B1B5-5CE5F336D767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "A8F8362B-DA49-439F-ADA1-B5BA443F91F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103754",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1443003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1443003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1790",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-12T15:29:00.473",
      "lastModified" : "2024-11-21T03:22:22.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137035."
      }, {
        "lang" : "es",
        "value" : "IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1 y 5.0.2 y desde la versión 6.0 hasta la 6.0.5 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 137035."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638AED13-42EE-4CAE-A891-8E8F27BDCF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93778FE9-8ED2-471D-BEC8-EF7D7E5AFC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requirements_composer:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F403652E-333E-4828-A3A6-FED1DF447AA4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27404EC5-26B2-490E-8211-09783FEF084C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A158959-BD73-40D2-BB26-537D8ACBF7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C026ED-A008-475D-A2E6-C663E6B760FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012660",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137035",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-12T15:29:00.537",
      "lastModified" : "2024-11-21T03:30:46.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hotfix-4, 4.0.7, 4.0.9 before hotfix-19, 4.4.x before 4.4.2 hotfix-1, 4.5.x before 4.5.3 hotfix-1, and Gateway Community and Enterprise Editions before 5.6.0 allow remote attackers to bypass intended access restrictions and obtain sensitive information via vectors related to HTTP request handling."
      }, {
        "lang" : "es",
        "value" : "Los componentes del motor HTTP y WebSocket en el servidor en Kaazing Gateway, en versiones anteriores a la 4.5.3 hotfix-1; Gateway - JMS Edition, en versiones anteriores a la 4.0.5 hotfix-15, 4.0.6 anteriores al hotfix-4, 4.0.7, 4.0.9 anteriores al hotfix-19, 4.4.x anteriores a la 4.4.2 hotfix-1, 4.5.x anteriores a la 4.5.3 hotfix-1; y las ediciones Community y Enterprise de Gateway anteriores a la versión 5.6.0 permiten que atacantes remotos omitan las restricciones de acceso planeadas y obtengan información sensible mediante vectores relacionados con la gestión de peticiones HTTP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.3",
            "matchCriteriaId" : "DC457927-FBA7-40B4-A8F3-43D77E050A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605F8BA7-68CF-42B0-85A9-21AADA2DBBC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.5.3:hotfix1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CE7386-A6A7-4083-ABCC-308BDCBB72EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:*:hotfix1:*:*:jms:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.2",
            "matchCriteriaId" : "07C4DEAC-6739-4195-BB6A-F61549C05608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:*:*:*:*:jms:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.3",
            "matchCriteriaId" : "664A2CB3-B739-40FE-9E39-2304886E562F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.0.5:*:*:*:jms:*:*:*",
            "matchCriteriaId" : "205D9C60-D31B-4F7D-8C18-B249A8A17164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.0.6:*:*:*:jms:*:*:*",
            "matchCriteriaId" : "73B41C3E-184E-4D8B-A51D-A2FA2B813FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.0.6:hotfix2:*:*:jms:*:*:*",
            "matchCriteriaId" : "8C21A5D5-D0CD-4C0A-B4B1-B347334854A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.0.7:*:*:*:jms:*:*:*",
            "matchCriteriaId" : "41F28304-6392-4FA2-AC2D-E29BD96EB414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.4.2:hotfix1:*:*:jms:*:*:*",
            "matchCriteriaId" : "58CA61F8-6B9E-4A4E-88C5-D438BE71EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaazing:kaazing_gateway:4.5.3:hotfix1:*:*:jms:*:*:*",
            "matchCriteriaId" : "CEA5CD95-09A5-4B76-A070-765430822B05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenefit:kaazing_websocket_gateway:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "4285FC8E-DC4C-4C33-99EB-D00753AE6A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenefit:kaazing_websocket_gateway:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "195047EF-F9E8-4502-B773-5A6476A55345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.kaazing.com/hc/en-us/articles/115004752368",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.kaazing.com/hc/en-us/articles/115004752368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6143",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-04-13T13:29:00.207",
      "lastModified" : "2024-11-21T03:29:08.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5."
      }, {
        "lang" : "es",
        "value" : "La verificación de certificados X509 no se implementó correctamente en las características feed-list de IP Intelligence Subscription e IP Intelligence. Por lo tanto, la identidad del servidor remoto no se valida correctamente en F5 BIG-IP, de la versión 12.0.0 a la 12.1.2, la versión 11.6.0 a la 11.6.2 o de la versión 11.5.0 a la 11.5.5."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "424205B0-5E73-4AF2-860A-52129B9734D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2C838ECE-BCC6-4D71-A36B-CF053A95BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "39403241-7F3D-44F3-8F56-576DCABB28CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "0BE301F2-BF84-4B0D-BD32-F58899A93106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "12.1.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "33071D5C-9574-4EA1-BB42-7303FB6BA15F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K11464209",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K11464209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6148",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-04-13T13:29:00.267",
      "lastModified" : "2024-11-21T03:29:08.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane is not impacted by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Las respuestas a peticiones SOCKS del proxy realizadas a través de F5 BIG-IP, en su versión 13.0.0, de la versión 12.0.0 a la 12.1.3.1, de la versión 11.6.1 a la 11.6.2 o de la versión 11.5.1 a la 11.5.5, podría causar una interrupción de los servicios proporcionados por TMM. El plano de datos se ve impactado y expuesto solo cuando se adjunta un perfil de proxy SOCKS a un servidor virtual. El plano de control no se ha visto afectado por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "6E3612B2-6722-4833-A386-DFBE4F957126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "597AB2D4-B0E0-4437-9298-C9FC2E34247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "47D07AA7-1E0E-4FC3-B8BF-05729619B0AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "2591686E-97C4-465F-A725-0037A193C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "9ECBB647-0E28-4A45-8E49-A02C4974B6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "A1521279-5F72-45D7-810E-5D906A44E0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "424205B0-5E73-4AF2-860A-52129B9734D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2C838ECE-BCC6-4D71-A36B-CF053A95BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "95FB4B1F-53F3-45B9-8C49-5FC46ECD637D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5800062B-A845-449E-AB3A-86F5A89E6428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2DEB3F5D-E82B-4B0F-9EF2-0CC7CCCE3E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "3DB0A78D-FE61-4506-AB98-6F20D2BFE48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "39403241-7F3D-44F3-8F56-576DCABB28CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "0BE301F2-BF84-4B0D-BD32-F58899A93106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D4349A22-234E-44EC-B324-7CA9DA2F0B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "65560D3E-3AFD-4D3D-8EFF-E277836D5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "9984B71A-89EA-4E5E-8E4D-1EA3D06F003F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "34C6AD93-361F-4065-92AB-3066A116D72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "573B289C-DFB1-4AE0-A792-0F591D407200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2BC5F967-BD7E-4B43-BB24-07B66A7006D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "7C9CDAFA-2B51-4815-9857-694187C27779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "3039312F-757B-4441-9108-2BF369C5A500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "C2F2D318-6CE1-471C-AF57-8D790000962C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "8098C6AC-5AB6-4177-AE2A-D3A6918C4460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K55225440",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K55225440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6155",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-04-13T13:29:00.330",
      "lastModified" : "2024-11-21T03:29:09.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP, en su versión 13.0.0, de la versión 12.0.0 a la 12.1.3.1, de la versión 11.6.0 a la 11.6.2, la versión 11.4.1a la 11.5.5 o en la versión 11.2.1, las peticiones SPDY o HTTP/2 mal formadas podrían resultar en una interrupción del servicio en TMM. El plano de datos solo se ve expuesto cuando se adjunta un perfil SPDY o HTTP/2 a un servidor virtual. No hay ninguna exposición del plano de control."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "6E3612B2-6722-4833-A386-DFBE4F957126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "597AB2D4-B0E0-4437-9298-C9FC2E34247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "2CD4DFE3-9071-4808-AE24-2CCA5DB5BA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "2591686E-97C4-465F-A725-0037A193C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "9ECBB647-0E28-4A45-8E49-A02C4974B6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E5D00EED-F95D-4458-BDC4-3390DE85348B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "424205B0-5E73-4AF2-860A-52129B9734D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2C838ECE-BCC6-4D71-A36B-CF053A95BD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E5011C2D-FBB5-4117-BB97-11DE70117345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5800062B-A845-449E-AB3A-86F5A89E6428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2DEB3F5D-E82B-4B0F-9EF2-0CC7CCCE3E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6BB42D3A-71EE-4367-9F65-86404D74E59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "39403241-7F3D-44F3-8F56-576DCABB28CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "0BE301F2-BF84-4B0D-BD32-F58899A93106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "397AC4A5-B67C-483B-84F7-8CB294BB460C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C4832316-B149-4316-8D86-DF7C12154979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "730BC966-10B2-4A2E-BF12-EC4DE70DE968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6A11E433-943D-4D92-B45E-3FA268094278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3374BE-6A37-48B5-83D4-D61558A8433E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "65560D3E-3AFD-4D3D-8EFF-E277836D5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "9984B71A-89EA-4E5E-8E4D-1EA3D06F003F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "60189636-02D6-44CA-BE2A-7777E3C409CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "573B289C-DFB1-4AE0-A792-0F591D407200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "2BC5F967-BD7E-4B43-BB24-07B66A7006D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "5AD75094-3248-4D37-969E-75272F6F31D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5224C47E-1765-4E8A-BF6A-268DB70617B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "725BAE35-A9A3-4AEF-BAC1-18D445D241D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E7860523-E8B3-4BEE-853A-6F0B5BCDDA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E703FAB-BFCD-47A1-94BD-DD63879DE883"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "3039312F-757B-4441-9108-2BF369C5A500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "C2F2D318-6CE1-471C-AF57-8D790000962C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "937055BD-53FC-4D8E-B965-D676AA5ABA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD9136F-100A-4747-84B7-33D6D8905DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "AFD9C447-ABE5-4ED0-9D2D-4D776C07BC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.2",
            "matchCriteriaId" : "5C91C5E5-575B-429D-A73F-308E2D383441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "BBE27AF5-E86D-4ABD-B5A5-B91097EDFB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA54B88F-4A16-4F40-8A3B-B107F0CA2334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12C123A-DBE7-4B9B-8DCC-EA3BA063652E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K10930474",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K10930474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6156",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-04-13T13:29:00.377",
      "lastModified" : "2024-11-21T03:29:09.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. The attacker must possess the necessary credentials to negotiate the phase 1 of the IPSec exchange to exploit this vulnerability; in many environment this limits the attack surface to other endpoints under the same administration."
      }, {
        "lang" : "es",
        "value" : "Cuando el sistema F5 BIG-IP, de la versión 12.1.0 a la 12.1.1, la versión 11.6.0 a la 11.6.1, la versión 11.5.1 a la 11.5.5 o la versión 11.2.1, se configura con un endpoint comodín del túnel IPSec tunnel, podría permitir que un atacante remoto interrumpa o suplante los túneles que hayan completado la fase 1 de las negociaciones IPSec. El atacante debe poseer las credenciales necesarias para negociar la fase 1 del intercambio IPSec para explotar esta vulnerabilidad; en muchos entornos, esto limita la superficie de ataque a otros endpoints bajo la misma administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "6E3612B2-6722-4833-A386-DFBE4F957126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "0A55BC11-6204-4B20-BDC1-09F3FCD408F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B502F2-404C-463B-B6BE-87489DC881F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "2591686E-97C4-465F-A725-0037A193C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "85FDFF5C-5658-48CE-9FA9-AA0298D6BE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE0210-7058-462A-BA17-845D3E4F52FA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "424205B0-5E73-4AF2-860A-52129B9734D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "28BE711A-61D2-4F5D-AA20-351588882467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAB92C5-2D50-49CC-AECA-0D16BC44A788"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C56690F7-E53D-453C-AF8B-04D951D96D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "BFA08D70-9CEC-4550-97B4-542D0FF7D90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867B2CA9-DAE5-4070-B8E6-F624C59F5054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A065BC0-56BD-4665-A860-EBA37F1A4D8C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5800062B-A845-449E-AB3A-86F5A89E6428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "3758CC1E-8F37-481B-B4A3-D9A88CA076F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33BCA5B-CE91-451C-9821-2023A9E461C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "39403241-7F3D-44F3-8F56-576DCABB28CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "FCAEB8C7-36B5-4524-86F1-C3E6E8B9A81E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DBCD7A-E4DA-4C08-87A4-960CF53A83E6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C4832316-B149-4316-8D86-DF7C12154979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "509A8D3F-C50C-4AAC-8919-8B95B6CC86BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BA400B-F025-4DB9-BA37-53D7A393994D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "53C744A7-4EA6-4CAE-BA28-7FC9E102DD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "4E1D0CC8-8EFA-41AD-B55B-58B9A43344D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84452450-77FA-4708-9C86-5464D541C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911BB6DB-B2D1-4855-A65C-F0799E034358"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "65560D3E-3AFD-4D3D-8EFF-E277836D5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "760123A6-3916-40F8-8EBB-537657CAEBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C641B4F-DCFF-4A1B-9E00-EDF18A270241"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "573B289C-DFB1-4AE0-A792-0F591D407200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "11ECB505-786F-4226-B4D5-9AF239F43F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EA4F45-35F7-4687-8D1A-A5ACD846500A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5224C47E-1765-4E8A-BF6A-268DB70617B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "69AC83F9-48EE-41AD-A6AB-6F0EB9176909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8894E5E8-FC08-48E5-BF06-6F5AC814CBF5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "3039312F-757B-4441-9108-2BF369C5A500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "B2E2B531-9242-4A2C-8D85-3FFDB56F03C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD9136F-100A-4747-84B7-33D6D8905DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452C59B8-230D-4FC0-B76D-FA6E381E3713"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "0B8B038F-8E96-463E-83E9-5D5A6ACD7E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.1",
            "matchCriteriaId" : "35E3B1DC-17CF-4F05-9565-69538CDFC534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE6A792-9D75-4BAF-A8BA-DC5879948BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E6EC85-AEDB-41DB-95A9-5514980C2C67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K05263202",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K05263202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6158",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-04-13T13:29:00.423",
      "lastModified" : "2024-11-21T03:29:09.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses."
      }, {
        "lang" : "es",
        "value" : "En F5 BIG-IP, de la versión 12.0.0 a la 12.1.2, de la versión 11.6.0 a la 11.6.1, de la versión 11.5.1 a la 11.5.5 o en la versión 11.2.1, hay una vulnerabilidad en TMM relacionada con la gestión de direcciones IP no válidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "6E3612B2-6722-4833-A386-DFBE4F957126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "2A113DC2-B084-48C2-8ECF-F0281AC34246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C1F5FF67-5D17-4760-AFDC-4234EC1E6306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "2591686E-97C4-465F-A725-0037A193C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "2AC4ECCE-9343-4462-872C-FA4860998B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "39E45CF5-C9E4-4AB9-A6D5-66F8336DDB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "424205B0-5E73-4AF2-860A-52129B9734D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "55D59D80-4DC5-4A84-BF42-A5AC2D39CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "93212B86-21EA-4340-9149-E58F65285C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C56690F7-E53D-453C-AF8B-04D951D96D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "857B3A62-F808-4CA9-BFAD-C133D94CF531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "25944BCA-3EEB-4396-AC8F-EF58834BC47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867B2CA9-DAE5-4070-B8E6-F624C59F5054"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5800062B-A845-449E-AB3A-86F5A89E6428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "DDE31583-1329-468C-87C9-BBB8FB5132B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "0ACC0695-E62E-4748-AA8A-46772EB8C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "39403241-7F3D-44F3-8F56-576DCABB28CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "C8FF324E-8533-403A-BEA9-617A28033CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "7CB146EF-CCAB-4194-9735-F8909E283308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C4832316-B149-4316-8D86-DF7C12154979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "C6A378E8-5AD0-4640-A236-1B4655D2CDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "2669BE56-A3EF-4080-A6FE-4565A85BD954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "53C744A7-4EA6-4CAE-BA28-7FC9E102DD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "80E2E5FE-217F-4267-AEB9-719E376D2FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "5EF737FD-7706-4536-912A-C22E0B2FE3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84452450-77FA-4708-9C86-5464D541C8ED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "65560D3E-3AFD-4D3D-8EFF-E277836D5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "48D3CF2B-1D30-461B-836D-A16EAA15F5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "C4A5CD9B-D257-4EC9-8C57-D9552C2FFFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "573B289C-DFB1-4AE0-A792-0F591D407200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "A5AB7A86-4C18-4FCA-90A0-BA9116FF31C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "BDE77CCE-7F97-48EA-A9D3-090B1481616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5224C47E-1765-4E8A-BF6A-268DB70617B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "E84D701A-96D1-43A8-B87C-0BAA6912F16E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "2C4A4202-DBAD-4717-80E5-B6818551B20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "3039312F-757B-4441-9108-2BF369C5A500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "8552AED4-DC7B-4DA1-AD49-9AD856A69DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "57010E5E-5940-4DDA-AD56-D646D54084AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD9136F-100A-4747-84B7-33D6D8905DDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "0B8B038F-8E96-463E-83E9-5D5A6ACD7E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.6.1",
            "matchCriteriaId" : "B7F1641A-D20C-4F6B-86A2-5F246A12B446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.1.2",
            "matchCriteriaId" : "EA4894E2-8DFE-47FC-B0B2-EF5E8C5648AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE6A792-9D75-4BAF-A8BA-DC5879948BAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K19361245",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K19361245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0356",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T15:29:00.273",
      "lastModified" : "2024-11-21T03:02:49.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters."
      }, {
        "lang" : "es",
        "value" : "Existe un error similar a CVE-2016-9646 en ikiwiki, en versiones anteriores a la 3.20170111, en el uso del plugin passwordauth de CGI::FormBuilder. Esto permite que un atacante omita la autenticación mediante parámetros repetidos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20170111",
            "matchCriteriaId" : "2D8DC37A-4530-4DCB-AD78-45C4D020D3BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95420",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ikiwiki.info/security/#cve-2017-0356",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://marc.info/?l=oss-security&m=148418234314276&w=2",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3760",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ikiwiki.info/security/#cve-2017-0356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://marc.info/?l=oss-security&m=148418234314276&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0357",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T15:29:00.337",
      "lastModified" : "2024-11-21T03:02:49.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption."
      }, {
        "lang" : "es",
        "value" : "Existe un error de desbordamiento de memoria dinámica (heap) en el cargador -tr de iucode-tool, desde la versión v1.4 y antes de la versión v2.1.1. Esto podría conducir a SIGSEGV o a una corrupción del heap."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iucode-tool_project:iucode-tool:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "573EA661-9112-4BA4-A272-E73C897B8456"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95432",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/iucode-tool/iucode-tool/issues/3",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0357",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/iucode-tool/iucode-tool/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0358",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T15:29:00.397",
      "lastModified" : "2024-11-21T03:02:49.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Jann Horn, de Google Project Zero, descubrió que NTFS-3G, un controlador NTFS de lectura-escritura para FUSE, no limpia en profundidad el entorno antes de ejecutar modprobe con privilegios elevados. Un usuario local puede aprovecharse de este error para escalar privilegios locales a root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuxera:ntfs-3g:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016.2.22",
            "matchCriteriaId" : "251D763B-8EFE-4E2C-99D3-B905CF54E117"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/04/1",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95987",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://marc.info/?l=oss-security&m=148594671929354&w=2",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-10",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3780",
        "source" : "security@debian.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41240/",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41356/",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://marc.info/?l=oss-security&m=148594671929354&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41356/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0359",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.220",
      "lastModified" : "2024-11-21T03:02:49.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive."
      }, {
        "lang" : "es",
        "value" : "diffoscope, en versiones anteriores a la 77, escribe en ubicaciones arbitrarias del disco basándose en el contenido de un archivo no fiable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reproducible_builds:diffoscope:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "77",
            "matchCriteriaId" : "E60C88EC-8828-4C75-B317-2B8FCAC1ED52"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/854723",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0359",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/854723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0361",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.283",
      "lastModified" : "2024-11-21T03:02:50.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error de divulgación de información en el que api.log podría contener contraseñas en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T125177",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0361",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T125177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0362",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.347",
      "lastModified" : "2024-11-21T03:02:50.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the \"Mark all pages visited\" on the watchlist does not require a CSRF token."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error por el cual \"Mark all pages visited\" en la lista de control no requiere un token CSRF"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T150044",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0362",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T150044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0363",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.407",
      "lastModified" : "2024-11-21T03:02:50.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error por el cual Special:UserLogin?returnto=interwiki:foo redirigirá a sitios externos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T109140",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0363",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T109140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0364",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.470",
      "lastModified" : "2024-11-21T03:02:50.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error por el cual Special:Search permite la redirección a cualquier enlace de interwiki."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T122209",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0364",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T122209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0365",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.547",
      "lastModified" : "2024-11-21T03:02:50.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene una vulnerabilidad de Cross-Site Scripting (XSS) en SearchHighlighter::highlightText() con configuraciones que no son por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T144845",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0365",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T144845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0366",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.610",
      "lastModified" : "2024-11-21T03:02:50.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error que permite la omisión del filtro SVG mediante el uso de valores de atributo por defecto en una declaración DTD."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T151735",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0366",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T151735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0367",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.673",
      "lastModified" : "2024-11-21T03:02:50.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1 y la 1.27.2, contiene un uso inseguro de un directorio temporal, en el que tener por defecto el directorio LocalisationCache en el directorio system tmp no es seguro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T161453",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0367",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T161453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0368",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.737",
      "lastModified" : "2024-11-21T03:02:50.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error que hace que el modo rawHTML se aplique a los mensajes del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T156184",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0368",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T156184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0369",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.813",
      "lastModified" : "2024-11-21T03:02:50.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error que permite que un sysops deshaga la eliminación de páginas aunque esta esté protegida contra ello."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T108138",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0369",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T108138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0370",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.877",
      "lastModified" : "2024-11-21T03:02:51.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter."
      }, {
        "lang" : "es",
        "value" : "Mediawiki, en versiones anteriores a la 1.28.1, 1.27.2 y la 1.23.16, contiene un error por el cual la lista negra de Spam no es efectiva en URL embebidas en el parámetro link de la sintaxis de inclusión de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.23.16",
            "matchCriteriaId" : "07C776BA-0AEF-4225-AC4C-38753A764076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.27.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "E9419B89-A512-4C79-8085-2AB9D7A19C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T48143",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0370",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T48143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0372",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2018-04-13T16:29:00.940",
      "lastModified" : "2024-11-21T03:02:51.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Inyección de parámetros en la extensión SyntaxHighlight de Mediawiki, en versiones anteriores a la 1.23.16, 1.27.3 y 1.28.2 podría resultar en múltiples vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.23.15",
            "matchCriteriaId" : "7098F7B9-4E9A-462D-B8D5-CA0D57E4C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75E06F7-6D23-4BEB-80B4-3DE33193CA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D567-FB83-48ED-A22F-2486085B8AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFBF825-C397-4A0C-8A1C-48260A135A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CAB8A9-39D5-41F4-800C-79E4FE57B12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A060BA59-05C8-4646-97D7-4F382B4EBCC6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/861585",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T158689",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0372",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/861585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T158689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2017-0372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-16T17:29:00.220",
      "lastModified" : "2024-11-21T03:05:27.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory."
      }, {
        "lang" : "es",
        "value" : "Postfix, en versiones anteriores a la 2.11.10, versiones 3.0.x anteriores a la 3.0.10, versiones 3.1.x anteriores a la 3.1.6 y versiones 3.2.x anteriores a la 3.2.2, podría permitir que usuarios locales obtengan privilegios aprovechando una funcionalidad no documentada en Berkeley DB, en versiones 2.x y posteriores. Esto está relacionado con la lectura de opciones de DB_CONFIG en el directorio actual."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.10",
            "matchCriteriaId" : "C4E46DED-C952-4EC2-8418-B94092708565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.10",
            "matchCriteriaId" : "5514620D-4D5B-4090-9462-13C7F6EC6FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.6",
            "matchCriteriaId" : "FBE1FAC6-6422-43D8-8981-08359639366B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "0B5C3C4E-E289-4F5E-A211-A9EE33EDE36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/285",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.postfix.org/announcements/postfix-3.2.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0366",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.postfix.org/announcements/postfix-3.2.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6323",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-04-16T19:29:00.340",
      "lastModified" : "2024-11-21T03:29:33.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts."
      }, {
        "lang" : "es",
        "value" : "Symantec Management Console, en versiones anteriores a la ITMS 8.1 RU1, ITMS 8.0_POST_HF6 e ITMS 7.6_POST_HF7, tiene un problema por el cual las entradas XML que contienen una referencia a una entidad externa son procesadas por un analizador XML mal configurado. Este ataque podría conducir a la revelación de datos confidenciales, denegación de servicio (DoS), Server-Side Request Forgery, escaneo de puertos desde la perspectiva de la máquina en la que está el analizador y otros impactos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:management_console:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1",
            "matchCriteriaId" : "1B267A2A-6418-4465-89DE-6162EB657F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:management_console:7.6:hf7:*:*:*:*:*:*",
            "matchCriteriaId" : "625B07E1-76DD-4A78-9506-F15C8E61CB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:management_console:8.0:hf6:*:*:*:*:*:*",
            "matchCriteriaId" : "078D2993-8477-4241-93E0-B5ADEC1DEB18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98621",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170628_00",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170628_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18102",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-04-17T13:29:00.223",
      "lastModified" : "2024-11-21T03:19:21.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in nested wiki markup."
      }, {
        "lang" : "es",
        "value" : "El componente review dashboard en atlassian-renderer desde la versión 8.0.0 hasta antes de la versión 8.0.22 permite que atacantes remotos inyecten HTML o JavaScript arbitrario mediante una vulnerabilidad cross-Site Scripting (XSS) en el marcado wiki anidado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.5.0",
            "versionEndExcluding" : "7.6.8",
            "matchCriteriaId" : "D9BD635D-6166-4253-B676-F7761F17F872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.1",
            "matchCriteriaId" : "DA3AB314-0604-4CB8-A386-8C8EA535ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.22",
            "matchCriteriaId" : "274FA588-6062-4551-939B-DC0E47992FEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67108",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/RNDR-153",
        "source" : "security@atlassian.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-67108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/RNDR-153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12701",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-17T14:29:00.243",
      "lastModified" : "2024-11-21T03:10:03.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "BMC Medical Luna CPAP Machines, lanzadas antes del 1 de julio de 2017, contienen una vulnerabilidad de validación de entradas incorrecta, lo que puede permitir que un atacante autenticado provoque el cierre inesperado del módulo Wi-Fi de CPAP. Esto resulta en una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cpap:luna_cpap_machine_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20170701",
            "matchCriteriaId" : "7D998581-1856-4930-B810-3E13A7BF4FC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cpap:luna_cpap_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DCEAFE-CA49-4866-881F-6164AB809AAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100354",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-227-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-227-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6020",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-17T14:29:00.290",
      "lastModified" : "2024-11-21T03:28:55.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level."
      }, {
        "lang" : "es",
        "value" : "El software de Leao Consultoria e Desenvolvimento de Sistemas (LCDS), LTDA ME LAquis SCADA, en versiones anteriores a la 4.1.0.3237, no neutraliza las entradas externas para asegurarse de que los usuarios no están llamando a secuencias de ruta absolutas fuera de su nivel de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lcds:laquis_scada:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0.3237",
            "matchCriteriaId" : "16D7E67B-A131-425C-A3B5-1E8FD4C0EDFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97055",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42885/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42885/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9634",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-17T14:29:00.353",
      "lastModified" : "2024-11-21T03:36:33.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash."
      }, {
        "lang" : "es",
        "value" : "Mitsubishi E-Designer, Version 7.52 Build 344, contiene dos secciones de código que podrían ser explotadas para permitir que un atacante sobrescriba ubicaciones de memoria arbitrarias. Esto puede resultar en la ejecución de código arbitrario, el compromiso de la integridad de los datos, denegación de servicio (DoS) y cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:e-designer:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F159210-BEA9-4E62-BFDD-84CD41852E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100097",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9636",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-17T14:29:00.417",
      "lastModified" : "2024-11-21T03:36:33.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash."
      }, {
        "lang" : "es",
        "value" : "Mitsubishi E-Designer, Version 7.52 Build 344, contiene cinco secciones de código que podrían ser explotadas para sobrescribir la memoria dinámica (heap). Esto puede resultar en la ejecución de código arbitrario, el compromiso de la integridad de los datos, denegación de servicio (DoS) y cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:e-designer:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F159210-BEA9-4E62-BFDD-84CD41852E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100097",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9638",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-17T14:29:00.463",
      "lastModified" : "2024-11-21T03:36:34.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash."
      }, {
        "lang" : "es",
        "value" : "Mitsubishi E-Designer, Version 7.52 Build 344, contiene seis secciones de código que podrían ser explotadas para sobrescribir la pila. Esto puede resultar en la ejecución de código arbitrario, el compromiso de la integridad de los datos, denegación de servicio (DoS) y cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:e-designer:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F159210-BEA9-4E62-BFDD-84CD41852E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100097",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2871",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-17T20:29:00.223",
      "lastModified" : "2024-11-21T03:24:21.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image."
      }, {
        "lang" : "es",
        "value" : "Existen comprobaciones de seguridad insuficientes en el procedimiento de recuperación empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Un atacante que esté en la misma subred de la cámara o que tenga acceso remoto de administrador puede comprometer por completo el dispositivo realizando una restauración de firmware con una imagen personalizada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0378",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12196",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-04-18T01:29:01.443",
      "lastModified" : "2024-11-21T03:09:01.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que undertow, en sus versiones 1.4.18.SP1, 2.0.2.Final y 1.4.24.Final, es vulnerable al usar la autenticación Digest, ya que el servidor no garantiza que el valor del URI en la cabecera Authorization coincida con el URIb en la línea de petición HTTP. Esto permite que el atacante provoque un ataque Man-in-the-Middle (MitM) y acceda al contenido que desee en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.18",
            "matchCriteriaId" : "5EB2078E-40F6-4DAD-A307-E141E1CFB313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:1.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FE5FE4-37B9-4FD7-A3FB-59DD4C6E372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5270A0F-6A16-4ACE-8650-493D91A41EC4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_fuse:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A305F012-544E-4245-9D69-1C8CD37748B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1525",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2405",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3768",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.jboss.org/browse/UNDERTOW-1190",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.jboss.org/browse/UNDERTOW-1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-19T08:29:00.207",
      "lastModified" : "2024-11-21T03:19:42.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel before 4.13 allows local users to cause a denial of service (infinite recursion) by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace, PREEMPT_TRACER, and FUNCTION_GRAPH_TRACER."
      }, {
        "lang" : "es",
        "value" : "La macro arch_timer_reg_read_stable en arch/arm64/include/asm/arch_timer.h en el kernel de Linux, en versiones anteriores a la 4.13, permite que usuarios locales provoquen una denegación de servicio (recursión infinita) escribiendo en un archivo en /sys/kernel/debug en ciertas circunstancias, tal y como se demuestra por un escenario que implica debugfs, ftrace, PREEMPT_TRACER y FUNCTION_GRAPH_TRACER."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2894F22-5448-4402-AE27-6E43BD08E14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17310",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-19T14:29:00.260",
      "lastModified" : "2024-11-21T03:17:48.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a buffer error vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted ENUM packets to the affected products. Due to insufficient verification of some values in the packets, successful exploit may cause buffer error and some services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo ENUM (Electronic Numbers to URI Mapping) en algunos productos Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tiene una vulnerabilidad de error de búfer. Un atacante remoto no autenticado debe controlar el dispositivo del mismo nivel y enviar paquetes ENUM especialmente manipulados a los productos afectados. Dada la verificación insuficiente de algunos valores en los paquetes, su explotación con éxito podría provocar un error en el búfer y el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDC74F3-643A-4978-A76E-36978FAD887B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-enum-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-enum-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17313",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-19T14:29:00.307",
      "lastModified" : "2024-11-21T03:17:49.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot."
      }, {
        "lang" : "es",
        "value" : "El controlador inputhub de los teléfonos móviles HUAWEI P9 Lite en versiones anteriores a la VNS-L21C02B341, anteriores a la VNS-L21C22B380, anteriores a la VNS-L31C02B341, anteriores a la VNS-L31C440B390 y anteriores a la VNS-L31C636B396 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante engaña a un usuario para que instale una aplicación maliciosa y esta envía datos concretos al controlador inputhub para explotar esta vulnerabilidad que, si se explota correctamente, podría provocar el reinicio del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vns-l31c02b341",
            "matchCriteriaId" : "E34C5BE5-CBB5-4249-9E26-0DFEB47A0B94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vns-l21c22b380",
            "matchCriteriaId" : "C7F99B76-4B29-40B2-BB7C-F132D3455E93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vns-l31c02b341",
            "matchCriteriaId" : "E34C5BE5-CBB5-4249-9E26-0DFEB47A0B94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vns-l31c440b390",
            "matchCriteriaId" : "4183378F-ABEA-419A-8271-3583AB4D07C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vns-l31c636b396",
            "matchCriteriaId" : "6FC2D8E5-7D6D-4A5E-89B9-8DB7DE35DCF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866C3F90-FC3B-4A9F-8BAC-83A89077F96E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3774",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-04-19T14:29:00.357",
      "lastModified" : "2024-11-21T03:26:06.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack, resulting in stack corruption."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de desbordamiento de pila en el servicio de administración web en Integrated Management Module 2 (IMM2), en versiones anteriores a la 4.70 empleadas en algunos servidores de Lenovo y en versiones anteriores a la 6.60 empleadas en algunos servidores de IBM. Un atacante que proporcione una combinación de ID y contraseña manipulados puede hacer que una porción de la rutina de autenticación desborde su pila, lo que provoca una corrupción de la pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:integrated_management_module_2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.70",
            "matchCriteriaId" : "0304A99D-9E06-43AA-9D67-195BCA4D10E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x240_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783B2E41-3FC3-4E39-802F-546EC7AA12E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x240_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2CE7A5-1CEE-40C4-BE0E-573C28663A11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x280_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1563A13F-2E56-4E83-9C16-68B2C81843DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x440_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC55C49B-2A5C-452C-8345-1C19A48FBB6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x480_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86B6B27-0E42-47C1-B2D9-A6C5B1364D9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ED17ED-BE60-4EE3-9599-C88C3C7A626C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:nextscale_nx360_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723D2A74-F6F3-4C73-AFD9-CDAE930D0FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3250_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89A2206-7012-4938-9BE2-ACF014E3F3B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3500_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC3467C-3F00-4EE3-B40E-3AE7F93094DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3550_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A78B63-6588-4C40-BEBB-88C8DF467A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3650_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145F0B3C-A945-443B-AB08-329F72358801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3750_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A554CB8-7FE1-454D-8E3D-AA3EC80EEB90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70A2471-D476-4FB7-8D1F-FEE0E4BF460C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A3A89F-CB39-4E76-BC64-3C4F4788FB8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:integrated_management_module_2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.60",
            "matchCriteriaId" : "B5E813F6-4EB2-4E3D-AD4D-7D8EB1BFB71D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs22:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9180CC-F795-4B8D-B9BF-37488D352AC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C010052B-1EBD-4129-9DCE-077575B8286A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter_hs23e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F02BE9-BA77-4DC2-AB7A-BF53FE3B7CA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x220_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0AABD-73B4-4311-9185-643DE173092E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x222_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CC2E42-2E9F-4C41-9A36-4A21C32F4CB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x240_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594B1D02-B6ED-4F9F-BAEC-313FFD1C17C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x280_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828C175A-0B5F-453D-A661-0AD955DB22C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x440_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5934364-CF52-411C-B13F-A8688A7BC0FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x480_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A17A8F8-F833-4F5E-A0ED-CF01B1ABAA9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:flex_system_x880_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC450128-EDFE-4BD3-A87F-946EED1E0E39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:idataplex_dx360_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29845B4B-04B8-4685-948F-4DD19C88D7AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:idataplex_dx360_m4_water_cooled:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7EABA0-ADB1-4A9B-AB96-FF6BB5720C50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:nextscale_nx360_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9642CB05-D7EE-4AFA-A28F-A6E7961A57EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3100_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66DB82A-0FF6-452B-8B11-239BF391AD12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3100_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A58320C-8C0B-4819-838A-AE31F9BFC70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3250_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3672040-7C51-4C83-A62C-096B2B0E5289"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3250_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E3BC19-4A70-4225-91E4-1DAE6C1986E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3300_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD693FE0-9B91-4F52-AE89-C82ED55DE43C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3500_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F943B01A-635B-4F62-96DE-715FFA007AA9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3530_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAFFBE1-E343-4DCB-A44D-2E29C547CC28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3550_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F407F5-EF7C-4F65-8978-3FB80CB07C06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3630_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B656E6-B70F-49AB-B17C-F89849CA516E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ED7F3-84FD-4D6C-9EEE-83A52734602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4_bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967EE555-D0BF-4505-BB9D-0A7A92E94889"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3650_m4_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DF5766-53F1-4AE8-AB8F-97C0F36215B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3750_m4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268FEAB9-EEB1-4B00-A086-1185B0A35959"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8ED74FB-C819-4BD9-9986-2588FCC2D308"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDB4836-D812-4818-AC08-38EABD56F3EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-19586",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-19586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3776",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-04-19T14:29:00.417",
      "lastModified" : "2024-11-21T03:26:06.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information."
      }, {
        "lang" : "es",
        "value" : "La aplicación para móviles Lenovo Help Android, en versiones anteriores a la 6.1.2.0327, permitía que la información se transmitiese por medio de un canal HTTP, lo que permitía que otras personas que estuviesen observando el canal pudiesen ver dicha información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:lenovo_help:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "6.1.2.0327",
            "matchCriteriaId" : "A869A271-D42E-43A6-9AEA-2D2FB6EA681E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-20475",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-20475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8315",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2018-04-20T19:29:00.503",
      "lastModified" : "2024-11-21T03:33:45.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml."
      }, {
        "lang" : "es",
        "value" : "El analizador Eclipse XML para Eclipse IDE, en versiones 2017.2.5 y anteriores, es vulnerable a un ataque de XML External Entity. Un atacante puede explotar la vulnerabilidad implementando código malicioso en Androidmanifest.xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:ide:2017.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB13CB7E-DE2D-41BC-944E-52AABD13A953"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2825",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-20T21:29:00.563",
      "lastModified" : "2024-11-21T03:24:13.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la funcionalidad trapper de Zabbix Server 2.4.x, los paquetes trapper específicamente manipulados pueden pasar comprobaciones de lógica de base de datos, lo que resulta en escrituras en la base de datos. Un atacante puede establecer un servidor Man-in-the-Middle para alterar las peticiones trapper realizadas entre un proxy y un servidor Zabbix para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.8",
            "matchCriteriaId" : "52E766F0-9C78-4A6E-9321-B7F78885CC5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98094",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0326",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3937",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-21T21:29:00.227",
      "lastModified" : "2024-11-21T03:14:56.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter."
      }, {
        "lang" : "es",
        "value" : "app/sections/user-menu.php en phpIPAM, en versiones anteriores a la 1.3.1 tiene Cross-Site Scripting (XSS) mediante el parámetro ip."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "D438BFDC-ED6C-4E18-A5A1-A8ADA73120AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/issues/1521",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/releases/tag/1.3.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/issues/1521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/releases/tag/1.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-22T15:29:00.313",
      "lastModified" : "2024-11-21T03:18:54.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php."
      }, {
        "lang" : "es",
        "value" : "Kliqqi CMS 3.5.2 tiene Cross-Site Scripting (XSS) mediante un nombre de grupo manipulado en pligg/groups.php, una cadena Homepage manipulada en un perfil o una cadena manipulada en Tags o Description en pligg/submit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kliqqi:kliqqi_cms:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665D0DB0-7974-4608-99A8-96FB45C10E2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-22T15:29:00.390",
      "lastModified" : "2024-11-21T03:18:56.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI."
      }, {
        "lang" : "es",
        "value" : "Existe inyección SQL en Kliqqi CMS 3.5.2 mediante el parámetro randkey de una nueva historia en el URI pligg/story.php?title=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kliqqi:kliqqi_cms:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665D0DB0-7974-4608-99A8-96FB45C10E2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://edricteo.com/kliqqi-cms-sqli-vulnerability-in-version-3.5.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://edricteo.com/kliqqi-cms-sqli-vulnerability-in-version-3.5.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1473",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-23T13:29:00.247",
      "lastModified" : "2024-11-21T03:21:55.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager Appliance 8.0.0 hasta 8.0.1.6 y 9.0.0 hasta la 9.0.3.1 emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 128605."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB40FA5B-56C0-4F30-B1FF-4AE319342216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B5235B-7CB8-4BED-A621-A07E41DBC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E742D56D-85BB-4389-9852-8071437D4482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D66204-3C44-4CA6-996B-AD3BFD3370DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE0F597-8CD6-4E07-9F06-6F8471586D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585E5EC5-4614-47BD-8526-4E74B9F7FC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63033A8-07D0-49C0-9C52-004D0A531ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E4F115-166B-455C-A9F9-C41F2C1E7F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCC4761-86E0-44C8-A267-BB346CFFC1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "502A2DA1-6D96-4FF5-9879-A2872485CBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB020561-2D4E-4F20-99B0-E8E12E014284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_firmware:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A346626B-8FD3-46E5-A233-9B7481F5CB01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266A82C7-1172-417D-A7CA-0CA7C393347E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3848FA8-8B62-42D4-BB98-D3CB19F0FDDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C93808-34DD-4728-860C-8DE54F6D127F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F763BDC-4AF6-4A73-836A-D49724BA2BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8CCBD9-0284-4FC9-97AA-026692065431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78F5BA3-A644-40A2-8254-BBB976486359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7C0967-F5DC-43BA-AB23-F74F6CF5D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A47C7F1-18B0-486D-898E-14E2EE5596DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C6C6169-E124-486A-BD13-E4CFCAC5CFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C6D6A0-52F4-49F7-AF57-C32BCF7E9A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2310A59-7BA2-450F-95E7-E90B9FB90B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8219A4-7426-4585-B54D-B1A46229DD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_for_mobile:8.0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF31C09C-F6BD-4283-A183-F0EE896733C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9795ED-23D5-4792-A8E8-3014E48DC67F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEF9594-C2A9-4D2C-9D55-DBFDD5E5EC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C682FD-1176-4D21-AB41-6F3FDB6E5428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D58EA8-CB22-47AD-965E-35C46F2369AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42F3AC0-9DA3-4DEE-ADB7-0ED69FC77B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956D8D10-495A-4DF1-B014-87E7E2F57748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282521FB-EA6A-4BAA-8BBE-9A0D66AA2186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:security_access_manager_firmware:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8ADF36-1217-474C-BB54-F5658F63EA87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:security_access_manager_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC9E6E2-005E-4EC3-87A0-AF1A7E7B3F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012268",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128605",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1486",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-23T13:29:00.310",
      "lastModified" : "2024-11-21T03:21:57.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128624."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1 y 10.2.2 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 128624."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6588FEE1-5A6F-4ED6-998A-B8CF54954F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA8132D-A09E-4D4C-9A5D-D708010CCFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCBB0AE-ECD1-4192-B1BB-18439A4CF7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2AA637-B4F6-4C44-BC71-B9C6B06BA670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014202",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128624",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1701",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-23T13:29:00.357",
      "lastModified" : "2024-11-21T03:22:14.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393."
      }, {
        "lang" : "es",
        "value" : "IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4 y 6.0.5 almacena credenciales para los usuarios mediante un algoritmo de cifrado débil, lo que podría permitir que un usuario autenticado obtenga información altamente sensible. IBM X-Force ID: 134393."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D60CEDB8-034B-45E2-9CD6-EDBAC42F8004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015454",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134393",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1764",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-23T13:29:00.420",
      "lastModified" : "2024-11-21T03:22:19.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149."
      }, {
        "lang" : "es",
        "value" : "IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1 y 10.2.2, en circunstancias especiales, podría exponer credenciales en texto plano a un usuario local. IBM X-Force ID: 136149."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6588FEE1-5A6F-4ED6-998A-B8CF54954F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA8132D-A09E-4D4C-9A5D-D708010CCFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCBB0AE-ECD1-4192-B1BB-18439A4CF7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2AA637-B4F6-4C44-BC71-B9C6B06BA670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014202",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136149",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1786",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-23T13:29:00.483",
      "lastModified" : "2024-11-21T03:22:21.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all resources due to a memory leak resulting in service loss. IBM X-Force ID: 136975."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ, desde la versión 8.0 hasta la versión 8.0.0.8 y la versión 9.0 hasta la 9.0.4, bajo circunstancias especiales, podría permitir que un usuario autenticado consuma todos los recursos debido a una fuga de memoria que resulta en la pérdida del servicio. IBM X-Force ID: 136975."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.0.8",
            "matchCriteriaId" : "2D422EF1-ACA1-4109-99EE-DD34E0FBEBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.0.4",
            "matchCriteriaId" : "A6D2E1F1-C1BD-46B3-AE9D-4FA9849F16F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013023",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136975",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13073",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-04-23T14:29:01.103",
      "lastModified" : "2024-11-21T03:10:54.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en la aplicación Photo Station de QNAP NAS, en versiones 5.2.7, 5.4.3 y anteriores, permite que los atacantes remotos inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.2.7",
            "matchCriteriaId" : "18817062-85D3-4E34-A3C3-5932EE8931BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.3",
            "matchCriteriaId" : "C7F06645-C98D-415B-83D3-BBF4DA58D17F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201804-23",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/zh-tw/security-advisory/nas-201804-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14458",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-23T15:29:00.250",
      "lastModified" : "2024-11-21T03:12:50.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de uso de memoria previamente liberada en el motor JavaScript de Foxit PDF Reader, de Foxit Software, en su versión 8.3.2.25013. Un documento PDF especialmente manipulado puede hacer que se reutilice un objeto previamente liberado en la memoria, lo que resulta en la ejecución de código arbitrario. Un atacante necesita engañar a un usuario para que abra el archivo malicioso para desencadenar esta vulnerabilidad. Si la extensión del plugin del navegador está habilitada, visitar un sitio malicioso también puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxit:pdf_reader:8.3.2.25013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84547866-535A-4A11-A2FA-C4A0B922A567"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103942",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040733",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0506",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-23T18:29:00.663",
      "lastModified" : "2024-11-21T03:18:46.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenSLP en las secuencias de código 1.0.2 y 1.1.0 tienen un problema de corrupción de memoria relacionada con la memoria dinámica (heap), que puede manifestarse como una vulnerabilidad de denegación de servicio (DoS) o de ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF96BA3-6A2E-4371-8A6A-2D90BAA787A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslp:openslp:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8B97B6-84FF-49EF-B7FF-EEA147CEF00E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd350g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B766A835-96C7-41F7-AB60-4690F5D59A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd350g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6157D72E-534F-4DA5-AD9E-ED9BEDAD0DB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd350x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02C1B7D-291F-4897-83EC-7A68697960B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd350x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAFE2B4-2F30-42A5-9A3F-0FAB6567EAD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd450x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D119B1-EB2A-4715-8EA4-77037E9919B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd450x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313A342C-E7C4-40BE-A97F-CB4711CF154C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_hr630x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A999E2F-A0E7-4E86-AAAB-392AA0F13027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_hr630x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF947D32-62E3-4957-86E2-EC3FA6F220D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_hr650x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EC9023-8344-4818-A341-C6866A631F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_hr650x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346F827E-369C-4087-BFB6-E74B1CAC1B15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993EE14E-929C-4983-9BCD-9F08906EA3FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:flex_system_fc3171_8gb_san_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.13.02.00",
            "matchCriteriaId" : "CAE27025-E34D-4FD4-ADC2-4DA56D2F51CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_fc3171_8gb_san_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A3649-7EF7-4D20-B28A-63D810FA4F08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:storage_n3310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "087C37F7-3895-40C6-82B3-F45039E9FB9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:storage_n3310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319412A8-D5BD-4214-AA5A-1E7383AA27A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:storage_n4610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "E974B81E-4DB3-492F-8904-2C0CFF50DD7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:storage_n4610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D320E2FC-E2E1-45F3-9B0E-2FA647D657BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:bm_nextscale_fan_power_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24p-2.15",
            "matchCriteriaId" : "F5E3A306-93AA-476C-930D-DE48CBFB13D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:cmm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "48CE3ABD-1FA9-4E26-A873-1027955F968F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:fan_power_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "30r-1.13",
            "matchCriteriaId" : "6F751FD5-004F-4C4F-9651-9EF33FA095E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:imm1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55",
            "matchCriteriaId" : "64CF298E-5107-489B-9E08-93084D528F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:imm2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.70",
            "matchCriteriaId" : "6F086091-169B-47F8-A2E8-F5437433AE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "070219DA-DDD4-4E8A-A23B-3E46E4CB37DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "50.00",
            "matchCriteriaId" : "639A266B-2A2F-43C9-9871-2F1E5D3AA990"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A48E001-1D62-4A25-8C7F-D4691BAEC3DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "B63891A2-CDA8-4FC8-ADAB-512378D6B8FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A988370E-47F4-4DC3-91AB-025360D07160"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd440_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "50.00",
            "matchCriteriaId" : "77D8669A-6716-439E-AA6F-EF6A1456FF71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED7B28A-1E10-4011-8250-8E060F74E3CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "FE30B73E-1918-4465-A948-829AD3D92E07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B994FC89-D6B6-4191-BC53-A36211DE94F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "D5017F43-C28F-4B3E-900A-96FEC8BE537D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDCBFD8-D031-4034-AEF9-6F31CC1C5814"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd540_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "50.00",
            "matchCriteriaId" : "D0D2D3BB-77F2-4798-BF81-B9EDB607CE94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30925DE-F919-472F-AA5B-0E2566F99DDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd640_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "50.00",
            "matchCriteriaId" : "7057A245-999D-4334-AF82-305ECC09F795"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E66D761-1400-41AE-AAB7-E54B80B3FAC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "7D6F1A92-C568-4CA4-8DBC-459B9DC93A24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2211D4D-0EB0-4E15-83D5-E94138D68284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rq750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.40",
            "matchCriteriaId" : "707CAEBE-5ED4-4755-B2DB-7A135DB0AE8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rq750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A3486A-5BEF-4B6A-B516-DCABBF7DE66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_rs160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32",
            "matchCriteriaId" : "74A43A48-4E30-4BA6-A4C4-CA565A78B0FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_rs160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA619AB-82E2-4E76-943A-0E68379FD583"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_sd350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034D2231-4D6D-42C2-8CDA-85D25B62ECFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_sd350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87959493-B6D7-4765-930C-40A9FBAED2E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_td340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "46.00",
            "matchCriteriaId" : "68A5907C-6A3C-4657-8B9E-DAA6BC1681E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_td340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42109D0F-9FDD-4199-A946-64C453B40CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_td350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.351",
            "matchCriteriaId" : "973D779E-E3F0-419A-97A1-C0F55AFC9ECE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_td350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDBAD4-5483-4D37-A727-D5FE876FF26E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkserver_ts460_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32",
            "matchCriteriaId" : "29A2F7DE-1C65-499B-98BA-E751E754312D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkserver_ts460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4EFAC5-9268-49A3-BDFF-4F1C87FA7867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.lenovo.com/us/en/solutions/LEN-18247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2240",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2308",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3708-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.lenovo.com/us/en/solutions/LEN-18247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202005-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3708-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-23T22:29:00.227",
      "lastModified" : "2024-11-21T03:32:54.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master."
      }, {
        "lang" : "es",
        "value" : "En SaltStack Salt, en versiones anteriores a la 2016.3.6, los salt-minions comprometidos pueden suplantar al salt-master."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "C82EA51C-9F85-46A1-96C9-91EC0E899F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1700",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-24T14:29:00.233",
      "lastModified" : "2024-11-21T03:22:14.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) could allow an authenticated user to cause a denial of service due to incorrect authorization for resource intensive scenarios. IBM X-Force ID: 134392."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Team Server afecta a los siguientes productos IBM Rational: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM) y Rational Software Architect (RSA DM), que podrían permitir que un usuario autenticado provoque una denegación de servicio (DoS) debido a la autorización incorrecta para los escenarios que emplean una cantidad intensa de recursos. IBM X-Force ID: 134392."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "50F8C5C0-7688-42E8-862B-3CB138274858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "DE15C4BA-1322-4EF3-83D3-F78B9D37E81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0F767CA4-A024-44A4-A987-17057E1A6245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "5B398352-76E1-4727-B34C-620F26CBD5BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "B07DA35D-2527-4DE8-97F1-9FC1C48255EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1B2601D1-4D55-4B4A-9CED-CF736270E63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "1113669B-B338-4ABD-9A34-B57880020C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "A237ED01-A834-46B3-9396-6BA0EFF2B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015635",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134392",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1725",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-24T14:29:00.310",
      "lastModified" : "2024-11-21T03:22:16.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain an undisclosed vulnerability with the potential for information disclosure. IBM X-Force ID: 134820."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Team Server afecta a los siguientes productos IBM Rational: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM) y Rational Software Architect (RSA DM) contienen una vulnerabilidad no revelada que tiene el potencial de provocar una divulgación de información. IBM X-Force ID: 134820."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "50F8C5C0-7688-42E8-862B-3CB138274858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "DE15C4BA-1322-4EF3-83D3-F78B9D37E81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0F767CA4-A024-44A4-A987-17057E1A6245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "5B398352-76E1-4727-B34C-620F26CBD5BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "B07DA35D-2527-4DE8-97F1-9FC1C48255EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1B2601D1-4D55-4B4A-9CED-CF736270E63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "1113669B-B338-4ABD-9A34-B57880020C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "A237ED01-A834-46B3-9396-6BA0EFF2B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015635",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134820",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1734",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-24T14:29:00.373",
      "lastModified" : "2024-11-21T03:22:17.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Team Server afecta a los siguientes productos IBM Rational: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM) y Rational Software Architect (RSA DM) almacenan información potencialmente sensible en una caché que podría ser leída por usuarios autenticados. IBM X-Force ID: 134915."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "50F8C5C0-7688-42E8-862B-3CB138274858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "E64000F3-395D-4826-92DD-DB2489470462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "DE15C4BA-1322-4EF3-83D3-F78B9D37E81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0F767CA4-A024-44A4-A987-17057E1A6245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "5B398352-76E1-4727-B34C-620F26CBD5BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "B07DA35D-2527-4DE8-97F1-9FC1C48255EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1B2601D1-4D55-4B4A-9CED-CF736270E63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "1113669B-B338-4ABD-9A34-B57880020C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "A237ED01-A834-46B3-9396-6BA0EFF2B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A559F0D7-DFB9-4CBB-8F64-EE7FE1B4DFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "8934D3C7-2C1C-4BE0-B3F5-320364879DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015635",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134915",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7651",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-04-24T14:29:00.437",
      "lastModified" : "2024-11-21T03:32:22.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authentications if occur in connection phase of MQTT protocol."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Mosquitto 1.4.14, un usuario puede cerrar el servidor Mosquitto simplemente llenando la memoria RAM con muchas conexiones con una carga útil grande. Esto puede hacerse sin autenticaciones si ocurre en la fase de conexión del protocolo MQTT."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.14",
            "matchCriteriaId" : "01C2095B-D7E4-46EE-89C0-0FC635DB4E05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=529754",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00037.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00016.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=529754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17251",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.277",
      "lastModified" : "2024-11-21T03:17:42.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 have a null pointer dereference vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products. Due to insufficient validation of packets, which could be exploited to cause process crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de desreferencia de puntero null en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados y enviarlos a los productos afectados. Dada la validación insuficiente de los paquetes, esto podría explotarse para provocar el cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17252",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.337",
      "lastModified" : "2024-11-21T03:17:42.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 has an out-of-bounds read vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets with specific parameters and send the packets to the affected products. Due to insufficient validation of packets, which could be exploited to cause process crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de lectura fuera de límites en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados con parámetros específicos y enviarlos a los productos afectados. Dada la validación insuficiente de los paquetes, esto podría explotarse para provocar el cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17253",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.383",
      "lastModified" : "2024-11-21T03:17:43.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 has an out-of-bounds read vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets with specific parameters and send the packets to the affected products. Due to insufficient validation of packets, which could be exploited to cause process crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de lectura fuera de límites en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados con parámetros específicos y enviarlos a los productos afectados. Dada la validación insuficiente de los paquetes, esto podría explotarse para provocar el cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17254",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.463",
      "lastModified" : "2024-11-21T03:17:43.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 have a null pointer dereference vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products. Due to insufficient validation of packets, which could be exploited to cause process crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de desreferencia de puntero null en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados y enviarlos a los productos afectados. Dada la validación insuficiente de los paquetes, esto podría explotarse para provocar el cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17255",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.527",
      "lastModified" : "2024-11-21T03:17:43.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 have a null pointer dereference vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products. Due to insufficient validation of packets, which could be exploited to cause process crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de desreferencia de puntero null en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados y enviarlos a los productos afectados. Dada la validación insuficiente de los paquetes, esto podría explotarse para provocar el cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17256",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.570",
      "lastModified" : "2024-11-21T03:17:43.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 has a memory leak vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a memory leak and eventual denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de fuga de memoria en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados y enviarlos a los productos afectados. Dado la verificación insuficiente de los paquetes, una explotación exitosa podría provocar una fuga de memoria y acabar con una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17257",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.617",
      "lastModified" : "2024-11-21T03:17:43.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 has a memory leak vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a memory leak and eventual denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de fuga de memoria en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados y enviarlos a los productos afectados. Dado la verificación insuficiente de los paquetes, una explotación exitosa podría provocar una fuga de memoria y acabar con una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17258",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-24T15:29:00.713",
      "lastModified" : "2024-11-21T03:17:43.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 has a resource management vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products in the case of failure to apply for memory. Due to insufficient validation of packets, which could be exploited to cause process crash."
      }, {
        "lang" : "es",
        "value" : "Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03 y ViewPoint 9030 V100R011C02 tienen una vulnerabilidad de gestión de recursos en el protocolo H323. Un atacante remoto no autenticado puede manipular paquetes mal formados y enviarlos a los productos afectados si se fracasa a la hora de solicitarlos a la memoria. Dada la validación insuficiente de los paquetes, esto podría explotarse para provocar el cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD9E894-321E-4A61-9DA6-677042DDD739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA91B4-77A6-4A37-8799-5E548184D49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42376C56-573F-4A88-B18E-43F636B17B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE416CD-53B5-4E08-BB30-682887740C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D6C34F-ED85-461D-89AF-3B8C439867FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334E0095-CF32-497D-85AC-AE8AEDE4EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4459EF03-890E-446E-8702-8F7CE499FB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C623D44E-463B-49A3-81F8-AD219E035B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89B2A9-5DE3-4822-BE2E-4C71447A4FFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D125153E-FE39-49A7-95AA-9482C78E7114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0C5EF2-05D5-4DE5-AFA3-5394E51B33E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB071D6-18CE-4FC5-855E-01E64F15BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455D7A4E-523E-40C8-958D-59D128F3E797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B0016-0A4A-471F-BBEA-D2E485587B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1B1393-1D47-448D-A5FF-0B2EF74CF172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B64AE02-D345-4628-A086-7C63C255707C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DC83BF-B7AA-4654-95A2-54C43F379A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526371A8-11FE-4D00-AFBB-8E867A320B27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86EA007-4A57-44D9-8867-C1587E785805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787AC5E3-CE88-491D-8211-BAB11112019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868602DB-D063-4BE4-A02B-936433CD8231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A35FE7-D526-455A-934B-08D54A0302A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A72083-717F-4C71-A2D7-62E1C64FEE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB93A84-773E-4DDF-B8B6-8705D2000CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF92D98E-60C8-43F9-B6F7-D43193D102EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CCEC64-BD07-49F7-8804-98A74257F060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685289C-08B1-43D4-9970-84A7FC75E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DBC628-F348-4204-B212-11E8E6A0AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137A007D-A498-483F-8B4F-DCA118B25F11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622686BB-9302-449F-9351-75B189D1B184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5186D104-FD41-4F54-9923-25B0C8C09E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344D64D1-A9B3-4BFA-ACF3-B421ED427A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D139E125-0A75-4094-ABFD-A47DAE94CDC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9B95EB-A848-4311-8500-9C909784393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EC4F9-EB14-4628-9F89-34168BBD6A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B487D436-B96E-4781-AFFD-2136154F9166"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F042B27-F875-4BA3-9002-E5ADC544208B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC62ECA-1F47-4316-87F4-60E7E8FFCEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r006c16pwe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD069FB1-8A7E-4D29-94F2-D7F94BA306D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F377CE1E-77A7-447F-B692-A54682A26BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF9B214-A3C7-4D4E-B92D-63E1085B76C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CCF46F-1B0F-4829-BB28-758777313451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7DDB3-4A2B-46A5-B952-F0FECF88373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDAED9E-1B9F-42EA-A344-E50FA1ED609A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50662078-4827-4706-AE29-170E2239C5AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32119825-AF22-44AA-8D04-1FAACF9E2E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BC38B-D016-4E83-A14E-FE8575135DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B897F931-00B2-4FDF-90CE-5077416E42BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EEE539-796F-4638-9EE1-0BC1BE25CA1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BE6310-A42C-4BB3-BB02-7CE6F4FF340D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9752658E-3CF5-4D9E-98FB-D15FD892479C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595B3AA-8911-44AF-996B-2F431517FBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC727A7A-CF3D-4DC9-9083-A0CE8ED886A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A842B77-C902-4B20-A171-3F98C75E6160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC61DFB2-E24C-4148-892E-A14F1EC3F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D0F6C6-5A87-482B-8B2A-693AC7736CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01969DE-DC37-4F2F-BB9B-5242810A8317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CFB676-658E-4DEF-8C29-13CA633D7270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D395DD8-E338-457E-A4E6-D3A08DE1B571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B650408-1E40-49DF-9271-6248CC1DCC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E52BCED-46D1-4ED9-9A8A-41AA4B88A1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A14BFE-B957-4BD9-AD25-01011BF9BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4072905-CA96-44F9-8868-BB20BDC56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE13681-CF1A-4765-B35A-E6E674C334B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F77B216-3E00-4EC0-9BEB-6ACD322874C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F06D60-CC92-4B27-9248-40C9CD8EF000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F01709-8D14-4C0D-9990-0BC01AAEE1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc180t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0059E57A-4F76-4F17-8C4A-1D46CB7F6473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EB46B1-A4FE-42AD-BA60-8134A34F5901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5C6B89-A46F-43C6-908B-FE5FBFB696BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9E893-609B-4C97-82E6-0651AEC39D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3103CC5F-E44E-49D8-A100-45476CD24A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B55442-9A8C-4291-9086-17516814DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84477B1C-413A-4F74-86DC-55E58AD07AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C53E6-0A9E-4F10-8BE6-0B4BC7123416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074FE8AB-6BE1-4E77-84E2-1D5C7205D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B135BE9A-A4B9-433F-BA82-548E0E859C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D17C34-47FB-478A-BB12-5F7C68045120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246D5D93-F372-4CA8-BFA2-250B61CCEF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D35DF-AD4F-4F55-BAE5-B0CC9E14D730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80411236-6B22-4937-87F3-E06C991B14D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8E1096-F070-4CE9-B2B4-6368890706A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46A81BE-C125-4CAE-8EE1-23177FE0C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6AACD8-9F94-4A4E-8E69-01D78BEB8711"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536A7B9-402F-4CEB-8BE4-EE3DDDBDDAEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678FFB3B-C6E1-4694-B51C-D56E26B53E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5066C9-7581-4284-AF23-0782870B2F03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7A0E2C-8383-443D-8625-77CBC53D2140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F719A3F-2EEE-470B-B42B-0E4B7C7CBD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA500A69-F8E4-46A8-9B46-F318F9110C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51387999-E9D0-497F-A309-CA5E3126EB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6224ECC-6949-4204-94D1-C7374C142A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B319F31F-94D7-468F-8F71-96F40867AEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D882C1-BFE2-4C29-86FF-C10F86323D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C655B04-5CAD-4BA0-AD0D-658DBDD36D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9C4A-6005-4B82-B809-FF3DBF47C17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10EBBF2-8F03-472C-96DB-C72E426E4E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E2E7D1-1F41-4EB2-9401-A3C4F988D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F2A04-2F59-4BD7-9FCE-E37E4FAAF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0AF0C0-46BF-4984-8378-954DF82EE227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4619CF2C-AB5D-475A-ACF6-61EE02306F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r007c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC4230-A773-4BCD-AEF6-0ECFD9FE7BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497D97B-F044-4F9A-84B0-378978FBDC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E57098-7E8D-4956-82E6-1474A50569C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43681AE7-5C12-4772-85A9-0A10177C6CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10310664-CBCC-4FD0-BF0A-77CBB0B3B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C216CE3-3481-4F96-9D10-15B627929046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE0FA6-7E53-488F-81A7-B2C906D65552"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231B6AC5-AC4E-46CB-ACB2-9D9D4286AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F25CE01-7CD4-43A6-B54D-F88D48DB06E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C80D3BB-868B-461C-B97A-9C94C9F80858"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019D2365-8BD9-4243-97CC-22264F30A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC3D1EE-0368-48DF-9B38-4751330E23A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:svn5800-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD8D36D-A4F2-4423-B57E-E9933710201E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796200FB-E4C3-4579-B474-502F6D57448B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:semg9811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219AF4A5-4134-4265-BF69-C340665714F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFD36-2046-4E75-96FB-CBA7071C3257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC78B8F-B4BC-429D-9685-C30B47810B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D137236-B70C-4AC9-A041-5857FE01F293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E335D2-FE4B-4316-8827-4741EC9AA674"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F5005B-13E9-49EB-82A1-9A03F3583037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B184673-1E6E-44F8-82FB-42E42E0F19D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D588964F-A5F2-4D5C-AE5D-17962E599370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D01ED2-70BC-411A-9BB8-A4EB04C92F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A0733-814F-4A5E-8030-3390D5C47136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1E5B1-FB85-4889-B18B-818DB6E0F1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8B3C52-C668-43D7-875D-55047B26B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3142B435-CE92-4D8A-B34B-E81B672359DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EB0020-7162-4E3C-8E6B-D2FF8D7ECF36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DABB3-66CF-47E9-92D4-518154559A7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E0627-0B19-4616-933E-76294F83813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C4071A-502F-46E4-80FF-C6647161A178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:tp3206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45ED506D-5094-476B-83F0-CBBED04EF348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22007E6A-68FC-4AF4-A570-95873AFBF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1A4CC-2F7E-40AF-8874-EE3986176623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C329182-E16A-4E89-A43C-0DB90BDE4AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8205DE-4325-4DA8-90D1-8969642F8FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D4CD-42FB-4290-8EB9-F1496F9B89BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94DE238-F32F-48D9-86D1-ED1F5D6F1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31E688-B5EC-47FE-92B7-C3CF0C9FEF8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92747AD5-0EED-44E8-BCB6-6663442ACD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24845D47-3AF8-43BA-9844-6529F8DAABD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C83F8B1-67D2-4D4C-8FB5-2C61EDD0FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADEC8B2-CD7F-4246-88C0-E27B939829AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6208C34-D92D-4605-B4AF-6EA597CBA0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000v_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60C4269-BE98-4381-8197-4787E09AD870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E8A1C0-CD02-4D4E-8DFC-0E03CF914C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68709FF-9E1C-4174-A925-70A88D4376A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ED692-8BED-4877-9BC9-D41386B660C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573BD5BC-48CE-4752-834D-6F6368780FB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:viewpoint_8660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FC7FB-FABD-4BC2-A0F5-3149F958EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9654",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-24T15:29:00.777",
      "lastModified" : "2024-11-21T03:36:35.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N."
      }, {
        "lang" : "es",
        "value" : "La aplicación basada en web Philips DoseWise Portal, en sus versiones 1.1.7.333 y 2.1.1.3069, almacena las credenciales de inicio de sesión en texto claro en los archivos de sistema del backend. Puntuación base de CVSS v3: 6.5, cadena de vector CVSS: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:dosewise:1.1.7.333:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80593A69-82A9-47D2-A64A-248018A0C59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:dosewise:2.1.1.3069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE12F34E-51D6-4045-888A-5D702FE85B1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.philips.com/productsecurity",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100471",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.philips.com/productsecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9656",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-24T15:29:00.867",
      "lastModified" : "2024-11-21T03:36:35.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can affect confidentiality, integrity, and availability of the database. For an attacker to exploit this vulnerability, elevated privileges are first required for an attacker to access the web application backend system files that contain the hard-coded credentials. Successful exploitation may allow a remote attacker to gain access to the database of the DWP application, which contains PHI. CVSS v3 base score: 9.1, CVSS vector string: AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H."
      }, {
        "lang" : "es",
        "value" : "La base de datos del backend de la aplicación Philips DoseWise Portal, en sus versiones 1.1.7.333 y 2.1.1.3069, emplea credenciales embebidas para una cuenta de la base de datos con privilegios que puede afectar a la confidencialidad, integridad y disponibilidad de la base de datos. Para que un atacante explote esta vulnerabilidad, primero necesita privilegios elevados para poder acceder a los archivos del sistema del backend de la aplicación web que contienen las credenciales embebidas. Si se explota esta vulnerabilidad con éxito, un atacante remoto podría obtener acceso a la base de datos de la aplicación DWP, que contiene PHI. Puntuación base de CVSS v3: 9.1, cadena de vector CVSS: AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:dosewise:1.1.7.333:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80593A69-82A9-47D2-A64A-248018A0C59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:dosewise:2.1.1.3069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE12F34E-51D6-4045-888A-5D702FE85B1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.philips.com/productsecurity",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100471",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.philips.com/productsecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12081",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:00.797",
      "lastModified" : "2024-11-21T03:08:47.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la actualización de un atributo Mesh heredado de la suite de código abierto de creación 3D Blender v2.78c. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0433",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12082",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:00.847",
      "lastModified" : "2024-11-21T03:08:47.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file with a specially crafted external data file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to edit an object within a .blend library in their Scene in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga 'CustomData' de Mesh de la suite de código abierto de creación 3D Blender. Un archivo .blend con un archivo de datos externo especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que edite un objeto en una biblioteca .blend en su Scene para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0434",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12086",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:00.907",
      "lastModified" : "2024-11-21T03:08:48.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad 'BKE_mesh_calc_normals_tessface' de la suite de código abierto de creación 3D Blender. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra un archivo .blend para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0438",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12087",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:00.970",
      "lastModified" : "2024-11-21T03:08:48.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with attacker controlled values. An attacker needs send a dns packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de memoria dinámica (heap) en la biblioteca tinysvcmdns en su versión 2016-07-18. Un paquete especialmente manipulado puede hacer que la biblioteca sobrescriba una cantidad arbitraria de datos en la memoria dinámica con valores controlados por el atacante. Un atacante debe enviar un paquete DNS para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinysvcmdns_project:tinysvcmdns:2016-07-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFF6E70-12FC-44F5-ABF6-FE3CBC0CEE1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0439",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12099",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.017",
      "lastModified" : "2024-11-21T03:08:49.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la actualización del atributo 'tface' de Mesh heredado de la suite de código abierto de creación 3D Blender v2.78c. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0451",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12100",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.063",
      "lastModified" : "2024-11-21T03:08:49.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad 'multires_load_old_dm' de la suite de código abierto de creación 3D Blender v2.78c. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra un archivo .blend para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0452",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12101",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.127",
      "lastModified" : "2024-11-21T03:08:49.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad 'modifier_mdef_compact_influences' de la suite de código abierto de creación 3D Blender v2.78c. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra un archivo .blend para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0453",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12102",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.190",
      "lastModified" : "2024-11-21T03:08:50.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la forma en la que la suite de código abierto de creación 3D Blender v2.78c convierte las curvas en polígonos. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0454",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12103",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.237",
      "lastModified" : "2024-11-21T03:08:50.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la forma en la que la suite de código abierto de creación 3D Blender v2.78c convierte el texto representado como fuente en una curva. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0455",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12104",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.283",
      "lastModified" : "2024-11-21T03:08:50.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la forma en la que la suite de código abierto de creación 3D Blender v2.78c dibuja un objeto Particle. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0456",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12105",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.347",
      "lastModified" : "2024-11-21T03:08:50.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mesh. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la forma en la que la suite de código abierto de creación 3D Blender v2.78c aplica un modificador de objeto en concreto a un Mesh. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0457",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12107",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.393",
      "lastModified" : "2024-11-21T03:08:50.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. A specially crafted .PCX file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .PCX file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de corrupción de memoria en la funcionalidad de análisis sintáctico de los archivos .PCX en Computerinsel Photoline 20.02. Un archivo .PCX especialmente manipulado puede provocar una vulnerabilidad que podría daría lugar a la ejecución de código. Un atacante puede enviar un archivo .PCX específico para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pl32:photoline:20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60D6566-A566-4FC8-BEA9-7EFC7E8721A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0459",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12108",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.440",
      "lastModified" : "2024-11-21T03:08:50.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de enteros en la función xls_preparseWorkSheet de libxls 1.4 al gestionar un registro MULBLANK. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D591F1-0D14-4A24-92A7-239B872148ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0460",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12109",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.500",
      "lastModified" : "2024-11-21T03:08:50.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de enteros en la función xls_preparseWorkSheet de libxls 1.4 al gestionar un registro MULRK. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D591F1-0D14-4A24-92A7-239B872148ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0461",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12122",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.547",
      "lastModified" : "2024-11-21T03:08:52.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de renderización de imágenes ILBM de SDL2_image-2.0.2. Una imagen ILBM especialmente manipulada puede provocar un desbordamiento de memoria dinámica (heap) que daría lugar a la ejecución de código. Un atacante puede mostrar una imagen especialmente manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0488",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14440",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.627",
      "lastModified" : "2024-11-21T03:12:47.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de renderización de imágenes ILBM de SDL2_image-2.0.2. Un paquete de red especialmente manipulado puede provocar un desbordamiento de pila que resulta en la ejecución de código. Un atacante puede mostrar una imagen especialmente manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0489",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14441",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.673",
      "lastModified" : "2024-11-21T03:12:48.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de renderización de imágenes ICO de SDL2_image-2.0.2. Una imagen ICO especialmente manipulada puede provocar un desbordamiento de enteros y un desbordamiento de memoria dinámica (heap) que daría lugar a la ejecución de código. Un atacante puede mostrar una imagen especialmente manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14442",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.720",
      "lastModified" : "2024-11-21T03:12:48.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de renderización de imágenes BMP de SDL2_image-2.0.2. Una imagen BMP especialmente manipulada puede provocar un desbordamiento de búfer basado en pila que resulta en la ejecución de código. Un atacante puede mostrar una imagen especialmente manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0491",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14448",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.797",
      "lastModified" : "2024-11-21T03:12:48.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de renderización de imágenes XCF de SDL2_image-2.0.2. Un archivo XCF especialmente manipulado puede provocar un desbordamiento de montículos que daría lugar a la ejecución remota de código. Un atacante puede mostrar una imagen especialmente manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0497",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14449",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.860",
      "lastModified" : "2024-11-21T03:12:49.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de doble liberación (double free) en la funcionalidad de renderización de imágenes XCF de SDL2_image-2.0.2. Una imagen XCF especialmente manipulada puede hacer que ocurra una situación de doble liberación (double free). Un atacante puede mostrar una imagen especialmente manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14450",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.940",
      "lastModified" : "2024-11-21T03:12:49.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer en la funcionalidad de renderización de imágenes GIF de SDL2_image-2.0.2. Una imagen GIF especialmente manipulada puede desembocar en un desbordamiento de búfer en una sección global. Un atacante puede mostrar una imagen para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACCFE82-277E-4B12-8BD4-C7B8FBFB37BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0499",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201903-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2802",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:01.987",
      "lastModified" : "2024-11-21T03:24:10.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimizer software version 3.5.5.0. A specifically named malicious dll file located in one of directories pointed to by the PATH environment variable will lead to privilege escalation. An attacker with local access to vulnerable system can exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de secuestro de DLL en el componente del servicio poaService.exe del software Dell Precision Optimizer 3.5.5.0. Un archivo DLL malicioso nombrado de forma específica ubicado en uno de los directorios a los que señala la variable del entorno PATH conducirá a un escalado de privilegios. Un atacante con acceso local al sistema vulnerable puede explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:precision_optimizer:3.5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D871C670-6995-4348-9430-66B277F4DEB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99360",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0247",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2803",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.080",
      "lastModified" : "2024-11-21T03:24:11.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de escritura fuera de límites remota en la funcionalidad de análisis sintáctico de TIFF de Core PHOTO-PAINT X8 18.1.0.661. Un archivo TIFF especialmente manipulado puede provocar una vulnerabilidad que podría daría lugar a una potencial corrupción de memoria. Un atacante puede enviar un archivo TIFF específico para provocar esta vulnerabilidad. Esta vulnerabilidad solo existe en la versión de 64 bits."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corel:coreldraw_photo_paint_x8:18.1.0.661:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A29F41-E174-41AD-B7F3-BCDEFF467187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99900",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0297",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2804",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.157",
      "lastModified" : "2024-11-21T03:24:11.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de escritura fuera de límites remota en la funcionalidad de análisis sintáctico de TIFF de Core PHOTO-PAINT X8 18.1.0.661. Un archivo TIFF especialmente manipulado puede provocar una vulnerabilidad que podría daría lugar a una potencial corrupción de memoria. Un atacante puede enviar un archivo TIFF específico para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corel:coreldraw_photo_paint_x8:18.1.0.661:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A29F41-E174-41AD-B7F3-BCDEFF467187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99900",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0298",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2811",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.220",
      "lastModified" : "2024-11-21T03:24:11.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución de código en el análisis de imágenes JPEG 2000 comprimidas en la versión 7.9 de Kakadu SDK. Un archivo JPEG 2000 especialmente manipulado puede ser leído por el programa, lo que puede conducir a una escritura fuera de límites que haga que surja una condición explotable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kakadusoftware:kakadu_sdk:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17FFFBD7-B2C5-488C-BAE9-14415570164A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100141",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0308",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2812",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.250",
      "lastModified" : "2024-11-21T03:24:12.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución de código en la función kdu_buffered_expand de Kakadu SDK 7.9. Un archivo JPEG 2000 especialmente manipulado puede ser leído por el programa, lo que puede conducir a una escritura fuera de límites que haga que surja una condición explotable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kakadusoftware:kakadu_sdk:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17FFFBD7-B2C5-488C-BAE9-14415570164A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100140",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0309",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2832",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.330",
      "lastModified" : "2024-11-21T03:24:14.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during a password change resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.37. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell durante un cambio de contraseña, lo que resulta en una inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2063FBC2-43D6-4837-9D80-B2580540CF02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0335",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2833",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.377",
      "lastModified" : "2024-11-21T03:24:14.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters resulting in command injection during the boot process. To trigger this vulnerability, an attacker needs to send an HTTP request and reboot the device."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.37. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell, lo que resulta en una inyección de comandos durante el proceso de arranque. Para desencadenar esta vulnerabilidad, un atacante necesita enviar una petición HTTP y reiniciar el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2063FBC2-43D6-4837-9D80-B2580540CF02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0334",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2834",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.423",
      "lastModified" : "2024-11-21T03:24:14.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad de autenticación de FreeRDP 2.0.0-beta1+android11. Una respuesta del servidor especialmente manipulada podría provocar una escritura fuera de límites, desembocando en una condición explotable. Un atacante puede comprometer el servidor o utilizar un ataque Man-in-the-Middle (MitM) para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "713589FE-376E-4E66-8282-66324EDF8264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2835",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.470",
      "lastModified" : "2024-11-21T03:24:14.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad RDP receive de FreeRDP 2.0.0-beta1+android11. Una respuesta del servidor especialmente manipulada podría provocar una escritura fuera de límites, desembocando en una condición explotable. Un atacante puede comprometer el servidor o utilizar un ataque Man-in-the-Middle (MitM) para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "713589FE-376E-4E66-8282-66324EDF8264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2836",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.517",
      "lastModified" : "2024-11-21T03:24:14.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la lectura de certificados propietarios del servidor en FreeRDP 2.0.0-beta1+android11. Un paquete challenge especialmente manipulado puede provocar que el programa se cierre, conduciendo a una denegación de servicio (DoS). Un atacante puede comprometer el servidor o utilizar un ataque Man-in-the-Middle (MitM) para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "713589FE-376E-4E66-8282-66324EDF8264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2837",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.563",
      "lastModified" : "2024-11-21T03:24:14.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la gestión de datos de seguridad en FreeRDP 2.0.0-beta1+android11. Un paquete challenge especialmente manipulado puede provocar que el programa se cierre, conduciendo a una denegación de servicio (DoS). Un atacante puede comprometer el servidor o utilizar un ataque Man-in-the-Middle (MitM) para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "713589FE-376E-4E66-8282-66324EDF8264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2838",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.643",
      "lastModified" : "2024-11-21T03:24:15.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la gestión de paquetes challenge en FreeRDP 2.0.0-beta1+android11. Un paquete challenge especialmente manipulado puede provocar que el programa se cierre, conduciendo a una denegación de servicio (DoS). Un atacante puede comprometer el servidor o utilizar un ataque Man-in-the-Middle (MitM) para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "713589FE-376E-4E66-8282-66324EDF8264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2839",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.690",
      "lastModified" : "2024-11-21T03:24:15.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la gestión de paquetes challenge en FreeRDP 2.0.0-beta1+android11. Un paquete challenge especialmente manipulado puede provocar que el programa se cierre, conduciendo a una denegación de servicio (DoS). Un atacante puede comprometer el servidor o utilizar un ataque Man-in-the-Middle (MitM) para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "713589FE-376E-4E66-8282-66324EDF8264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2840",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.737",
      "lastModified" : "2024-11-21T03:24:15.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la funcionalidad de análisis ISO de EZB Systems UltraISO 9.6.6.3300. Un archivo .ISO especialmente manipulado puede provocar una vulnerabilidad que podría daría lugar a la ejecución de código. Un atacante puede proporcionar un archivo .ISO específico para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.6.6.3300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4079AD6-153F-425E-A279-384F55C9A3CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100084",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0342",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2885",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.783",
      "lastModified" : "2024-11-21T03:24:23.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en pila en GNOME libsoup 2.58. Una petición HTTP especialmente manipulada puede provocar un desbordamiento de pila que daría lugar a la ejecución remota de código. Un atacante puede enviar una petición HTTP especial al servidor vulnerable para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libsoup:2.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD5FB77-9583-4CFE-858A-774344AE8222"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Dec/3",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100258",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2459",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3929",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2020/Dec/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2899",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.847",
      "lastModified" : "2024-11-21T03:24:25.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de TIFF de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .tif especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0406",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2900",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:02.953",
      "lastModified" : "2024-11-21T03:24:25.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de PNG de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .png especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0407",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2901",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.173",
      "lastModified" : "2024-11-21T03:24:25.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de IRIS de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .iris especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0408",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2902",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.347",
      "lastModified" : "2024-11-21T03:24:25.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de DPX de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .cin especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0409",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2903",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.440",
      "lastModified" : "2024-11-21T03:24:25.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de DPX de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .cin especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0410",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2904",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.500",
      "lastModified" : "2024-11-21T03:24:25.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de RADIANCE de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .hdr especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0411",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2905",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.563",
      "lastModified" : "2024-11-21T03:24:25.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de bmp de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .bmp especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0412",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2906",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.627",
      "lastModified" : "2024-11-21T03:24:26.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de reproducción de animaciones de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .avi especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0413",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2907",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.673",
      "lastModified" : "2024-11-21T03:24:26.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de reproducción de animaciones de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .avi especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que utilice el archivo como un activo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0414",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2908",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.737",
      "lastModified" : "2024-11-21T03:24:26.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to render the thumbnail for the file while in the File->Open dialog."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de miniaturas de la suite de código abierto de creación 3D Blender 2.78c. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que renderice la miniatura para el archivo mientras está en el diálogo File->Open."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0415",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2918",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.797",
      "lastModified" : "2024-11-21T03:24:27.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de enteros explotable en la funcionalidad de carga de imágenes de la suite de código abierto de creación 3D Blender v2.78c. Un archivo .blend especialmente manipulado puede provocar un desbordamiento de enteros y un desbordamiento de búfer, que puede permitir la ejecución de código bajo el contexto de la aplicación. Un atacante puede convencer a un usuario para que abra el archivo o emplearlo como biblioteca para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F24FDB-1DDA-40F1-A572-2B8FA21D5FA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0425",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2923",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.860",
      "lastModified" : "2024-11-21T03:24:27.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en memoria dinámica (heap) en la función read_biff_next_record de FreeXL 1.0.3. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freexl_project:freexl:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB58C5-B235-4C39-AD5C-535B06C488DF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100807",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3976",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0430",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2924",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-04-24T19:29:03.907",
      "lastModified" : "2024-11-21T03:24:28.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en pila en la función read_legacy_biff de FreeXL 1.0.3. Un archivo XLS especialmente manipulado puede provocar una corrupción de memoria que daría lugar a la ejecución remota de código. Un atacante puede enviar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freexl_project:freexl:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB58C5-B235-4C39-AD5C-535B06C488DF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100799",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3976",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0431",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-24T20:29:00.357",
      "lastModified" : "2024-11-21T03:18:09.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "En Foxit Reader, en versiones anteriores a la 9.1, y Foxit PhantomPDF, en versiones anteriores a la 9.1, existe un error en el análisis del registro BITMAPINFOHEADER en los archivos BMP. El problema deriva de la falta de validación correcta del miembro biSize, lo que puede dar como resultado un desbordamiento de búfer basado en memoria dinámica (heap). Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1",
            "matchCriteriaId" : "FFC9B3F1-2218-4A8A-90CA-25E04AD215EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1",
            "matchCriteriaId" : "F525A712-972F-4060-ABAF-1882444264F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103999",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040733",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.0patch.com/2018/05/0patching-foxit-reader-buffer-oops.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.0patch.com/2018/05/0patching-foxit-reader-buffer-oops.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12712",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-25T13:29:00.227",
      "lastModified" : "2024-11-21T03:10:04.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El algoritmo de autenticación en los marcapasos de Abbott Laboratories fabricados antes del 28 de agosto de 2017, que está relacionado con una clave de autenticación y una marca de tiempo, puede comprometerse u omitirse. Esto puede permitir que un atacante cercano envíe comandos no autorizados al marcapasos mediante comunicaciones de radiofrecuencia. Puntuación base de CVSS v3: 7.5, cadena de vector CVSS: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott ha desarrollado una actualización de firmware para ayudar a mitigar las vulnerabilidades identificadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f0b.0e.7e",
            "matchCriteriaId" : "BFF25F4E-CF32-41A5-9AEC-5CF2A1D70732"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7261AA88-1BD6-4CDF-AFC0-31FD7F52B9E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:anthem_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f0b.0e.7e",
            "matchCriteriaId" : "D6C940D7-5EA3-4D42-8FFE-0C38D2D0065E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:anthem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28402F-D4DF-448B-8ED3-676E0B438331"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_mri_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f10.08.6c",
            "matchCriteriaId" : "BFC7CD6D-57F8-4479-A25C-9B9937FD3793"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent_mri:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C752B8AA-8990-43DE-AB8B-57329E1E0AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_st_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f10.08.6c",
            "matchCriteriaId" : "3CCA1805-9253-4267-ACE9-B9F3BBB1549A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794620AF-C8D5-4511-B4AF-5E8B4347F558"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:assurity_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f14.07.80",
            "matchCriteriaId" : "0BF37E32-78D2-48CD-BF19-17533E3CB5DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:assurity:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B2EBFC-FB8A-402E-8C5C-118D4362B143"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:allure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f14.07.80",
            "matchCriteriaId" : "858B3E80-0179-4AD7-BC32-3AA87A7341C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:allure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B30268-EC36-42C3-8028-D345DC22A3DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:assurity_mri_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f17.01.49",
            "matchCriteriaId" : "95E52CB5-DB4A-42FE-B963-CE891D3C1A95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:assurity_mri:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43025EB2-8644-4BC5-BC3D-D67305C504B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100523",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12714",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-25T13:29:00.287",
      "lastModified" : "2024-11-21T03:10:04.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted \"RF wake-up\" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Los marcapasos de Abbott Laboratories fabricados antes del 28 de agosto de 2017 no restringen o limitan el número de comandos \"RF wake-up\" formateados correctamente que pueden recibir. Esto puede permitir que un atacante cercano envíe comandos repetidamente para reducir la batería del marcapasos. Puntuación base de CVSS v3: 5.3, cadena de vector CVSS: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott ha desarrollado una actualización de firmware para ayudar a mitigar las vulnerabilidades identificadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-920"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-920"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f0b.0e.7e",
            "matchCriteriaId" : "BFF25F4E-CF32-41A5-9AEC-5CF2A1D70732"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7261AA88-1BD6-4CDF-AFC0-31FD7F52B9E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:anthem_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f0b.0e.7e",
            "matchCriteriaId" : "D6C940D7-5EA3-4D42-8FFE-0C38D2D0065E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:anthem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28402F-D4DF-448B-8ED3-676E0B438331"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_mri_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f10.08.6c",
            "matchCriteriaId" : "BFC7CD6D-57F8-4479-A25C-9B9937FD3793"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent_mri:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C752B8AA-8990-43DE-AB8B-57329E1E0AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_st_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f10.08.6c",
            "matchCriteriaId" : "3CCA1805-9253-4267-ACE9-B9F3BBB1549A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794620AF-C8D5-4511-B4AF-5E8B4347F558"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:assurity_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f14.07.80",
            "matchCriteriaId" : "0BF37E32-78D2-48CD-BF19-17533E3CB5DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:assurity:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B2EBFC-FB8A-402E-8C5C-118D4362B143"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:allure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f14.07.80",
            "matchCriteriaId" : "858B3E80-0179-4AD7-BC32-3AA87A7341C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:allure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B30268-EC36-42C3-8028-D345DC22A3DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:assurity_mri_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f17.01.49",
            "matchCriteriaId" : "95E52CB5-DB4A-42FE-B963-CE891D3C1A95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:assurity_mri:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43025EB2-8644-4BC5-BC3D-D67305C504B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100523",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12716",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-25T13:29:00.333",
      "lastModified" : "2024-11-21T03:10:05.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Los marcapasos Accent y Anthem de Abbott Laboratories fabricados antes del 28 de agosto de 2017 transmiten información no cifrada del paciente mediante comunicaciones de radiofrecuencia y unidades de monitorización doméstica. Además, los marcapasos Accent y Anthem almacenan la información opcional del paciente sin cifrar. Puntuación base de CVSS v3: 3.1, cadena de vector CVSS: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott ha desarrollado una actualización de firmware para ayudar a mitigar las vulnerabilidades identificadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f0b.0e.7e",
            "matchCriteriaId" : "BFF25F4E-CF32-41A5-9AEC-5CF2A1D70732"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7261AA88-1BD6-4CDF-AFC0-31FD7F52B9E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:anthem_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f0b.0e.7e",
            "matchCriteriaId" : "D6C940D7-5EA3-4D42-8FFE-0C38D2D0065E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:anthem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28402F-D4DF-448B-8ED3-676E0B438331"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_mri_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f10.08.6c",
            "matchCriteriaId" : "BFC7CD6D-57F8-4479-A25C-9B9937FD3793"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent_mri:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C752B8AA-8990-43DE-AB8B-57329E1E0AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abbott:accent_st_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f10.08.6c",
            "matchCriteriaId" : "3CCA1805-9253-4267-ACE9-B9F3BBB1549A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abbott:accent_st:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794620AF-C8D5-4511-B4AF-5E8B4347F558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100523",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1750",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-25T13:29:00.413",
      "lastModified" : "2024-11-21T03:22:18.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135523."
      }, {
        "lang" : "es",
        "value" : "IBM Jazz Reporting Service (JRS), de la versión 5.0 a la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 135523."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D226029-A37F-486C-9DCD-1921671F242D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83152595-8909-4AA4-A7D1-2E113A197B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103F9E24-E11F-4BAC-8EDB-86D332B9EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCC8D80-8974-41F7-8225-474A9814ABD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3BEA54-9927-4117-8EB8-0D87A42198C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC88614B-EEB1-41C5-B28A-4E3E35008855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:jazz_reporting_service:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BB2E1C-ED64-4BFF-9FE4-C104BCE35CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015712",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104012",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135523",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7652",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-04-25T13:29:00.490",
      "lastModified" : "2024-11-21T03:32:22.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Mosquitto, si se establece una instancia de Mosquitto ejecutándose con un archivo de configuración, el envío de una señal HUP al servidor provoca que la configuración se recargue desde el disco. Si hay muchos clientes conectados de tal forma que ya no queden más descriptores de archivos/sockets disponibles (el límite normal por defecto suele ser de 1024 descriptores de archivos en Linux), no se podrá abrir el archivo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.4.14",
            "matchCriteriaId" : "369612A8-37B4-444B-AD17-9DF374006CB7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=530102",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00037.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00016.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=530102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/03/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/06/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6888",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-04-25T21:29:00.217",
      "lastModified" : "2024-11-21T03:30:43.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error in the \"read_metadata_vorbiscomment_()\" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file."
      }, {
        "lang" : "es",
        "value" : "Un error en la función read_metadata_vorbiscomment_() en src/libFLAC/stream_decoder.c en la versión 1.3.2 de FLAC puede explotarse para provocar una fuga de memoria mediante un archivo FLAC especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flac_project:flac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "8F7B9F8D-AE8C-4DFE-BACF-27861286F5BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.xiph.org/?p=flac.git%3Ba=commit%3Bh=4f47b63e9c971e6391590caf00a0f2a5ed612e67",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00001.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNZYTAU5UWBVXVJ4VHDWPR66ZVDLQZRE/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/82639/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-7/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.xiph.org/?p=flac.git%3Ba=commit%3Bh=4f47b63e9c971e6391590caf00a0f2a5ed612e67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNZYTAU5UWBVXVJ4VHDWPR66ZVDLQZRE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/82639/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-26T14:29:00.233",
      "lastModified" : "2024-11-21T03:13:26.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) en GeniXCMS 1.1.0 permite que usuarios remotos autenticados inyecten scripts web o HTML arbitrarios mediante Menu ID cuando se añade un menú."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genixcms:genixcms:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8109866-D6B8-4EAD-8107-396191B85488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/faizzaidi/GeniXCMS-Version-1.1.0-Cross-Site-Scripting-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faizzaidi/GeniXCMS-Version-1.1.0-Cross-Site-Scripting-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1721",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-26T14:29:00.313",
      "lastModified" : "2024-11-21T03:22:16.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810."
      }, {
        "lang" : "es",
        "value" : "IBM Security QRadar SIEM 7.2 y 7.3 podría permitir que un usuario no autenticado ejecute código remoto con privilegios de bajo nivel bajo circunstancias inusuales. IBM X-Force ID: 134810."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "C48729A8-0CF2-486B-99E4-623C9C65F994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "73151221-C102-4425-9316-1EE4CAAB6531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9DDCD-6D22-4175-94EF-D8A5457E7355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35AB906F-43CD-4D54-8274-1FD551532E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2356A4E6-561B-40CA-8348-B30D581B1E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74509F3F-840E-48B8-88B1-EA4FFB90ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7BD528-628F-4CA9-9FE8-8A79BDC97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "26118C2B-78CC-4038-9DEA-7A9417029790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "4F445D93-D482-4A74-810D-66D78CBCAFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9F200C-ECC9-4D51-AFE7-E99C16D09148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "56B87CB5-0F77-4040-BB58-9DBF5723A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "36CA1C3A-63CA-4FBD-9E84-7E83248265EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "79A243C5-59EF-4EC6-B6E3-EC905317C144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "719DA85E-0541-48D2-8164-4CA53CB80826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE0EC49-2831-4E3A-8EA4-659FAF660620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "93EB825A-16E1-442F-AC36-D9A3E1657762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "120215E3-863D-4C52-9DA0-1A3C487CB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "0E07CA72-7CE3-4E7A-AF5B-7F109EF9B004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015799",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1722",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-26T14:29:00.377",
      "lastModified" : "2024-11-21T03:22:16.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 134811."
      }, {
        "lang" : "es",
        "value" : "IBM Security QRadar SIEM 7.2 y 7.3 es vulnerable a la inyección SQL. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. IBM X-Force ID: 134811."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "C48729A8-0CF2-486B-99E4-623C9C65F994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "73151221-C102-4425-9316-1EE4CAAB6531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9DDCD-6D22-4175-94EF-D8A5457E7355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35AB906F-43CD-4D54-8274-1FD551532E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2356A4E6-561B-40CA-8348-B30D581B1E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74509F3F-840E-48B8-88B1-EA4FFB90ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7BD528-628F-4CA9-9FE8-8A79BDC97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "26118C2B-78CC-4038-9DEA-7A9417029790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "4F445D93-D482-4A74-810D-66D78CBCAFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9F200C-ECC9-4D51-AFE7-E99C16D09148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "56B87CB5-0F77-4040-BB58-9DBF5723A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "36CA1C3A-63CA-4FBD-9E84-7E83248265EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "79A243C5-59EF-4EC6-B6E3-EC905317C144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "719DA85E-0541-48D2-8164-4CA53CB80826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE0EC49-2831-4E3A-8EA4-659FAF660620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "93EB825A-16E1-442F-AC36-D9A3E1657762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "120215E3-863D-4C52-9DA0-1A3C487CB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "0E07CA72-7CE3-4E7A-AF5B-7F109EF9B004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015802",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134811",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1723",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-26T14:29:00.437",
      "lastModified" : "2024-11-21T03:22:16.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812."
      }, {
        "lang" : "es",
        "value" : "IBM Security QRadar SIEM 7.2 y 7.3 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias \"punto punto\" (/../) para visualizar archivos arbitrarios en el sistema. IBM X-Force ID: 134812."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "C48729A8-0CF2-486B-99E4-623C9C65F994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "73151221-C102-4425-9316-1EE4CAAB6531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9DDCD-6D22-4175-94EF-D8A5457E7355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35AB906F-43CD-4D54-8274-1FD551532E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2356A4E6-561B-40CA-8348-B30D581B1E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74509F3F-840E-48B8-88B1-EA4FFB90ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7BD528-628F-4CA9-9FE8-8A79BDC97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "26118C2B-78CC-4038-9DEA-7A9417029790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "4F445D93-D482-4A74-810D-66D78CBCAFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9F200C-ECC9-4D51-AFE7-E99C16D09148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "56B87CB5-0F77-4040-BB58-9DBF5723A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089DD20-49FB-4057-B9A0-D32FC186E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCE0A40-18A5-4408-A3A4-44D8CB3C450F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EECABA4-E97D-419E-90C1-ED79B0F527D7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "21BD7B43-20E4-4BB0-8B6A-0279B2A8609A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC674A8-D18C-403A-A01B-9EA1B7221056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B613958-19C3-47D4-9997-8C9D39A8D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "5C297E30-FAFB-4432-9FA1-2A6A1B7BC4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FB83F1-7F90-4308-BAF3-C8FEE34CE97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "366F7003-17AC-4112-9659-97B715D6560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD604D9-46CC-4A6F-ABE3-7461CB1C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FDCCEB-F357-4DB4-8BD8-57A658993A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D22B95D-B523-4065-B5EA-8BA8DD5AA854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "E8ECD101-34AB-4E19-B436-A2991BBE687F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "2980D256-32C5-4F05-8FA4-B29AF42E31A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "459B769B-8407-483B-8122-64E10DBC9CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4F686-B150-4647-8AE3-A85FCC64D773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD90E11B-A267-4E26-B524-3AE58CA29425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FF2EF8-3E6B-4E38-BF37-93EDFB469F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "29774363-82E3-47FB-A8C5-8636ADA784AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "C09571F4-70DF-49D2-AED1-4AB4D7E7F193"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "4D65F2B0-682C-47CD-8084-28A18C096B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EB41BF-9C1D-4898-B832-1F2158FEF174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "505F24EF-6D39-4EA3-B31A-9727D5DFD4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A88CB-438F-42B8-81ED-A361E9EC437C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35A41EBC-2018-489F-9EBC-4F8F0B21A37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "276B6252-C9AC-47A9-B527-464AB9639272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "FD23C131-4E13-4353-A7C9-A5A9C031562E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7A50E9-D6C5-4D02-B3AF-9C97D99355B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6F9F58-BA8A-4D67-BB5C-2426ED0DA246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "1C241E98-0EC4-4DEC-BC60-BDFC705C8C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF702AC-633C-460B-9030-FB0BF5E880C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "11DBF480-7FA3-42AB-8C4F-1E47BD56EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "5758EF46-5014-4B12-8453-647E36CB1292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB09C844-9735-455B-8C96-373D5A78E83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F664970F-145B-401A-A9E5-5F6A739ACBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F2A58-212C-4BA9-BDEA-E3A7D74A4733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "AD73A539-9DF2-4A93-9486-2CE0CF7E5A03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015804",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134812",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1724",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-26T14:29:00.517",
      "lastModified" : "2024-11-21T03:22:16.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814."
      }, {
        "lang" : "es",
        "value" : "IBM Security QRadar SIEM 7.2 y 7.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134814."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "C48729A8-0CF2-486B-99E4-623C9C65F994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "73151221-C102-4425-9316-1EE4CAAB6531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9DDCD-6D22-4175-94EF-D8A5457E7355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35AB906F-43CD-4D54-8274-1FD551532E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2356A4E6-561B-40CA-8348-B30D581B1E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74509F3F-840E-48B8-88B1-EA4FFB90ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7BD528-628F-4CA9-9FE8-8A79BDC97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "26118C2B-78CC-4038-9DEA-7A9417029790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "4F445D93-D482-4A74-810D-66D78CBCAFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9F200C-ECC9-4D51-AFE7-E99C16D09148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "56B87CB5-0F77-4040-BB58-9DBF5723A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0063D4AA-6C00-4ABB-A315-27B06B5D3928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D089DD20-49FB-4057-B9A0-D32FC186E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCE0A40-18A5-4408-A3A4-44D8CB3C450F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EECABA4-E97D-419E-90C1-ED79B0F527D7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "2BC2A9EA-6BAA-4D97-BE30-5213A55A1CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56E0B63-7B9D-4C6A-A6A4-C639C405279F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E825B-F327-4C2E-B5E7-8B4B4DA6F834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "1FEED5E6-6646-4E5A-A40F-6031AA69544A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7D0432-D082-4513-9314-7D3CC667319C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF38D08-27E8-4B5F-B63F-D6CD9EE14E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D712EEE-85C6-4AC4-812E-12CDB7341C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "591883D6-F507-498B-80B7-D4F8D32623B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "47F5E074-42D3-4B86-9C92-ED8E4EE5BAC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3F5319-94B8-434E-BEC5-DB57C75202EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "39BC1FFC-C669-4570-8D20-EACC71499EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A3A029-29BE-484B-8B65-5EB4CFDDDC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "76A3B160-4A66-45A6-8B49-1C6320807160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4C63B1-5E82-43F1-8305-A5DAC2ED1EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F00239F-0DEC-44CA-898A-F1CE13D242FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "425F4448-DA58-4E29-9179-B6B2946F5C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_risk_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "89D0A650-6C07-431D-AA31-81197CFBE052"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "5FB42EB8-43AD-4CB8-8C48-72C5C05DE387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE0268F-64B2-4CC3-B127-EB43240C6F01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "A36D6991-3728-4F60-A443-37652DFAA053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "4142CC4E-9F0D-4017-8D17-D59FBCEB36F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0F7CA-5F3C-41D4-AAD6-084643115D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E63ECF-25CB-4E7F-BF51-B4D7B3541AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF14DD4F-6779-4B17-AB1B-D4DE58E7E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "7AAEE176-631A-41B9-BC40-93F866DA9D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "75C963D5-F2D1-49EE-93B5-CA7FE7EAB98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "9388D932-9818-4A68-9543-B0643166DB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "770A9287-C910-4690-9402-0C0B7BAC8912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8AC068-D5AC-4042-8A7C-5B95EA0E85F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "B503F1F7-F439-420D-B465-9A51CCECAB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12733B0-C8A1-4566-9EF4-51F269290BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308BC557-DB89-499E-BD5D-96D9219E0E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "735258DB-72DF-446E-B193-EC304AF32677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0CD838-0376-4E0F-A27E-1D1FE279E92E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "21BD7B43-20E4-4BB0-8B6A-0279B2A8609A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC674A8-D18C-403A-A01B-9EA1B7221056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B613958-19C3-47D4-9997-8C9D39A8D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "5C297E30-FAFB-4432-9FA1-2A6A1B7BC4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FB83F1-7F90-4308-BAF3-C8FEE34CE97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "366F7003-17AC-4112-9659-97B715D6560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD604D9-46CC-4A6F-ABE3-7461CB1C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FDCCEB-F357-4DB4-8BD8-57A658993A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D22B95D-B523-4065-B5EA-8BA8DD5AA854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "E8ECD101-34AB-4E19-B436-A2991BBE687F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "2980D256-32C5-4F05-8FA4-B29AF42E31A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "459B769B-8407-483B-8122-64E10DBC9CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4F686-B150-4647-8AE3-A85FCC64D773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD90E11B-A267-4E26-B524-3AE58CA29425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FF2EF8-3E6B-4E38-BF37-93EDFB469F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "29774363-82E3-47FB-A8C5-8636ADA784AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "C09571F4-70DF-49D2-AED1-4AB4D7E7F193"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "4D65F2B0-682C-47CD-8084-28A18C096B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EB41BF-9C1D-4898-B832-1F2158FEF174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "505F24EF-6D39-4EA3-B31A-9727D5DFD4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A88CB-438F-42B8-81ED-A361E9EC437C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35A41EBC-2018-489F-9EBC-4F8F0B21A37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "276B6252-C9AC-47A9-B527-464AB9639272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "FD23C131-4E13-4353-A7C9-A5A9C031562E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7A50E9-D6C5-4D02-B3AF-9C97D99355B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6F9F58-BA8A-4D67-BB5C-2426ED0DA246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "1C241E98-0EC4-4DEC-BC60-BDFC705C8C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF702AC-633C-460B-9030-FB0BF5E880C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "11DBF480-7FA3-42AB-8C4F-1E47BD56EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "5758EF46-5014-4B12-8453-647E36CB1292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB09C844-9735-455B-8C96-373D5A78E83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F664970F-145B-401A-A9E5-5F6A739ACBCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F2A58-212C-4BA9-BDEA-E3A7D74A4733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_network_insights:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "AD73A539-9DF2-4A93-9486-2CE0CF7E5A03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015807",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134814",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9275",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-04-26T15:29:00.307",
      "lastModified" : "2024-11-21T03:35:44.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack."
      }, {
        "lang" : "es",
        "value" : "NetIQ Identity Reporting en versiones anteriores a la 5.5 Service Pack 1 es susceptible a un ataque Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_reporting:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "11E1C796-5D09-4C67-86E6-0491334E1BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_reporting:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9222C8-17AA-4F71-8F2D-C7890FF6783A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.microfocus.com/Download?buildid=iGYyq6xwjhE~&donotredirect=true",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.microfocus.com/Download?buildid=iGYyq6xwjhE~&donotredirect=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9284",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2018-04-26T15:29:00.417",
      "lastModified" : "2024-11-21T03:35:45.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information."
      }, {
        "lang" : "es",
        "value" : "IDM 4.6 Identity Applications en versiones anteriores a la 4.6.2.1 puede exponer información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.6.2.1",
            "matchCriteriaId" : "0B734D1C-96DC-4735-A98D-836AE7B7373F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.microfocus.com/Download?buildid=Xg1dZMVbBzs~",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://download.microfocus.com/Download?buildid=Xg1dZMVbBzs~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15691",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-04-26T17:29:00.293",
      "lastModified" : "2024-11-21T03:15:00.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content."
      }, {
        "lang" : "es",
        "value" : "En Apache uimaj en versiones anteriores a la 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as anteriores a la 2.10.2, Apache uimaFIT anteriores a la 2.4.0 y Apache uimaDUCC anteriores a la 2.2.2, esta vulnerabilidad está relacionada con una capacidad de expansión XEE (XML External Entity) de varios analizadores sintácticos de archivos XML. UIMA, como parte de su configuración y operación, puede leer XML desde varios orígenes, los cuales se pueden corromper para provocar fugas inadvertidas de archivos locales u otro contenido interno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uimaj:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.2",
            "matchCriteriaId" : "97A78884-7491-462D-AF97-62DD47C9269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uimaj:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EA72A9-1FF4-4A61-8C4B-F79324E8BA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uimaj:3.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "81712F4E-9DDD-4FC0-A0AB-D71995D90B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uimaj:3.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "96910D04-F0D5-41CD-92D4-2AE1FF355317"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uima-as:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.2",
            "matchCriteriaId" : "F7CC83F8-D102-4B60-9F2D-AA56C93272E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uimafit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "72C5A564-55B8-4D54-BA0A-6B311F4AB356"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:uimaducc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "5DB6C37E-E654-42A8-AC6B-A82221FFBDB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1545",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/00407c65738e625a8cc9d732923a4ab2d8299603cc7c7e5cc2da9c79%40%3Ccommits.uima.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://uima.apache.org/security_report#CVE-2017-15691",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:1545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/00407c65738e625a8cc9d732923a4ab2d8299603cc7c7e5cc2da9c79%40%3Ccommits.uima.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://uima.apache.org/security_report#CVE-2017-15691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14010",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-26T19:29:00.370",
      "lastModified" : "2024-11-21T03:11:57.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path.  If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system."
      }, {
        "lang" : "es",
        "value" : "En SpiderControl MicroBrowser en Windows XP, Vista 7, 8 y 10, en sus versiones 1.6.30.144 y anteriores, se ha identificado una vulnerabilidad no controlada del elemento de ruta de búsqueda que podría explotarse colocando un archivo DLL especialmente manipulado en la ruta de búsqueda. Si el DLL malicioso se carga antes que el DLL válido, un atacante podría ejecutar código arbitrario en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidercontrol:scada_microbrowser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.30.144",
            "matchCriteriaId" : "AE60B541-01B0-404E-A17E-F3BC85B560EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B960E10-B1BD-494E-9A52-3FCA90AD2D85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://spidercontrol.net/download/downloadarea/?lang=en",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101505",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://spidercontrol.net/download/downloadarea/?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17543",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-04-26T20:29:00.243",
      "lastModified" : "2024-11-21T03:18:08.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms."
      }, {
        "lang" : "es",
        "value" : "Las credenciales de autenticación de VPN de los usuarios se cifran de manera no segura en Fortinet FortiClient para Windows en versiones 5.6.0 y anteriores, FortiClient para Mac OSX en versiones 5.6.0 y anteriores y FortiClient SSLVPN Client para Linux en versiones 4.4.2335 y anteriores, debido a la uso de una clave de cifrado estático y algoritmos de cifrado débiles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "5.6.0",
            "matchCriteriaId" : "05C9130B-9139-407F-B6F9-9B64A8B830D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "versionEndIncluding" : "5.6.0",
            "matchCriteriaId" : "6DA8975F-A2E7-47D2-83BA-6990673124BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*",
            "versionEndIncluding" : "4.4.2335",
            "matchCriteriaId" : "B0DB26D0-44AA-4958-A926-B6BDCAA9402A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-214",
        "source" : "psirt@fortinet.com"
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1116",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-04-27T15:29:00.247",
      "lastModified" : "2024-11-21T03:21:21.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side which could provide information useful for an authenticated user to conduct other attacks. IBM X-Force ID: 121154."
      }, {
        "lang" : "es",
        "value" : "IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2 y 10.0 contiene demasiados detalles del lado del cliente, lo que podría proporcionar información útil para que un usuario autenticado lleve a cabo otros ataques. IBM X-Force ID: 121154."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCF7E4A-B159-45CA-A3F6-C6D26B2AF08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B312534-625C-4AE1-9B32-29245C231175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511BB84-F922-496D-B508-C4116599FCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3D9E35-1594-4D84-AF18-170D20960D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C2D913-808F-4705-8AD5-17157FA833C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB3F73F-3C2B-4C1B-B81E-99B5384DE43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015569",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104011",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121154",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22015569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-28T01:29:01.453",
      "lastModified" : "2024-11-21T03:19:43.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url."
      }, {
        "lang" : "es",
        "value" : "Seagate Media Server en Seagate Personal Cloud, en versiones anteriores a la 4.3.18.4 , tiene un salto de directorio en getPhotoPlaylistPhotos.psp mediante un parámetro url."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seagate:personal_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.18.4",
            "matchCriteriaId" : "A216FAE2-81D8-4624-9252-ECF4D90D424F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seagate:personal_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40574EDB-7B2D-46FC-B08D-246F44416522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/147274/Seagate-Media-Server-Path-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2017/seagate-media-server-path-traversal-vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/147274/Seagate-Media-Server-Path-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2017/seagate-media-server-path-traversal-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2591",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-04-30T12:29:00.220",
      "lastModified" : "2024-11-21T03:23:47.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the \"attribute uniqueness\" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service."
      }, {
        "lang" : "es",
        "value" : "389-ds-base, en versiones anteriores a la 1.3.6, es vulnerable a un array terminado indebidamente en NULL en la función uniqueness_entry_to_config() en el plugin \"attribute uniqueness\" de 389 Directory Server. Un atacante autenticado o, posiblemente, sin autenticar, podría emplear este error para forzar una lectura fuera de límites de la memoria dinámica (heap), desencadenando un cierre inesperado del servicio LDAP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.6",
            "matchCriteriaId" : "8C32AFB8-385C-43D2-A22B-CC6E3B8AAE3B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95670",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pagure.io/389-ds-base/issue/48986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pagure.io/389-ds-base/issue/48986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-04-30T13:29:00.260",
      "lastModified" : "2024-11-21T03:19:42.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI."
      }, {
        "lang" : "es",
        "value" : "Blackboard Learn (desde, al menos, el 17 de octubre de 2017) ha permitido redirecciones no validadas en cualquier usuario que haya iniciado sesión mediante sus endpoints para gestionar inicios de sesión de Shibboleth. Esto se demuestra por un URI webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl=."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "30CF5A1E-02A2-4D02-A215-33B458C9DDB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2016:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E0E9DB-BC5C-4F68-BCBD-9E4EA81D7755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017:*:*:*:*:*:*",
            "matchCriteriaId" : "241DD4F3-BD1C-45AB-9F33-6F795BC87506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learn:9.1:q4_2015:*:*:*:*:*:*",
            "matchCriteriaId" : "426531EE-872D-4C4A-B4E0-E9AC45EFD4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learn:9.1:q4_2016:*:*:*:*:*:*",
            "matchCriteriaId" : "0C800C52-41EA-4707-94F0-56582DED6CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learn:9.1:q4_2017:*:*:*:*:*:*",
            "matchCriteriaId" : "7D069CC7-307A-466A-B9AB-E76767F7E762"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Apr/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ethan.pm/blackboard.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Apr/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ethan.pm/blackboard.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17314",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-30T14:29:00.207",
      "lastModified" : "2024-11-21T03:17:49.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an invalid memory access vulnerability. An unauthenticated attacker has to find a way to send malformed SCCP messages to the affected products. Due to insufficient input validation of some values in the messages, successful exploit may cause buffer error and some service abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 tienen una vulnerabilidad de acceso no válido a la memoria. Un atacante no autenticado debe averiguar la forma de enviar mensajes SCCP mal formados a los productos afectados. Dada la validación de entradas insuficiente de algunos valores en los mensajes, su explotación con éxito podría provocar un error en el búfer y el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180425-02-buffer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180425-02-buffer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17318",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-04-30T14:29:00.267",
      "lastModified" : "2024-11-21T03:17:49.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Los productos Huawei MBB (Mobile Broadband) E5771h-937 en versiones anteriores a la E5771h-937TCPU-V200R001B328D62SP00C1133 y versiones anteriores a la E5771h-937TCPU-V200R001B329D05SP00C1308 tienen una vulnerabilidad de denegación de servicio (DoS). Cuando un atacante que accede al dispositivo envía una petición http especial al dispositivo, el proceso webserver intentará aplicar demasiada memoria, lo que puede hacer que el dispositivo deje de responder. Un atacante puede iniciar un ataque de denegación de servicio (DoS) explotando esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:e5771h-937_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v200r001b329d05sp00c1308",
            "matchCriteriaId" : "4F84E369-96ED-4A13-AE99-2895FB270992"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:e5771h-937:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BB197F-7CBE-4EA1-8172-192DFFCD2FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:e5771h-937_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v200r001b328d62sp00c1133",
            "matchCriteriaId" : "4CB19716-C380-4B72-8559-592533FC35EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:e5771h-937:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BB197F-7CBE-4EA1-8172-192DFFCD2FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9657",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-30T15:29:00.163",
      "lastModified" : "2024-11-21T03:36:35.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor, and thus should be operating in local monitoring mode (local audio-on, screen-on), but the MX40 WLAN itself can instead still be operating in telemetry mode (local audio-off, screen-off). If a patient experiences an alarm event and clinical staff expects the MX40 to provide local alarming when it is not available from the local device, a delay of treatment can occur. CVSS v3 base score: 6.5, CVSS vector string: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Philips has released software update, Version B.06.18, to fix the improper cleanup on thrown exception vulnerability, and implement mitigations to reduce the risk associated with the improper handling of exceptional conditions vulnerability. The software update implements messaging and alarming on the MX40 and at the central monitoring station, when the MX40 disconnects from the access point."
      }, {
        "lang" : "es",
        "value" : "Bajo condiciones especiales de la red 802.11, es posible realizar una reasociación parcial del monitor WLAN Philips IntelliVue MX40 B.06.18 con la estación central de monitorización. En este estado, la estación central de monitorización puede indicar que el MX40 no está conectado o asociado al monitor central y, por lo tanto, debería estar funcionando en modo de monitorización local (local audio-on, screen-on), pero el propio MX40 WLAN podría seguir funcionando en modo telemetría (local audio-off, screen-off). Si un paciente experimenta un evento de alarma y el personal clínico espera que MX40 proporcione una alarma local cuando no está disponible desde el dispositivo local, el tratamiento podría demorarse. Puntuación base de CVSS v3: 6.5, cadena de vector CVSS: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Philips ha lanzado una actualización de software, la versión B.06.18, para solucionar la vulnerabilidad de limpieza indebida de excepción lanzada. Además, también ha implementado mitigaciones para reducir el riesgo asociado con la vulnerabilidad de gestión incorrecta de condiciones excepcionales. La actualización de software implementa mensajes y alarmas en el MX40 y en la estación central de monitorización cuando el MX40 se desconecta del punto de acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-460"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:philips:intellivue_mx40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "b.06.18",
            "matchCriteriaId" : "493FB2C6-0962-4E8E-BB55-BB02072BEA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:philips:intellivue_mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C26579-482B-4B19-8C5E-71A26A059894"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100813",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usa.philips.com/healthcare/about/customer-support/product-security",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usa.philips.com/healthcare/about/customer-support/product-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9658",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-04-30T15:29:00.227",
      "lastModified" : "2024-11-21T03:36:35.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this state, the Philips IntelliVue MX40 Version B.06.18 can either connect to an alternative access point within signal range for association to a central monitoring station, or it can remain in local monitoring mode until the device is reset by hospital staff. CVSS v3 base score: 6.5, CVSS vector string: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Philips has released software update, Version B.06.18, to fix the improper cleanup on thrown exception vulnerability, and implement mitigations to reduce the risk associated with the improper handling of exceptional conditions vulnerability. The software update implements messaging and alarming on the MX40 and at the central monitoring station, when the MX40 disconnects from the access point."
      }, {
        "lang" : "es",
        "value" : "Se ha determinado que ciertos mensajes de gestión de red 802.11 invocan defensas de seguridad de introducción en lista negra de puntos de acceso cuando no es necesario, lo que podría necesitar la intervención del personal hospitalario para restablecer el dispositivo y la conexión de red con el punto de acceso Wi-Fi. Durante este estado, Philips IntelliVue MX40 B.06.18 puede conectarse a un punto de acceso alternativo con un rango de señal para asociarlo a una estación central de monitorización o puede seguir en modo de monitorización local hasta que el personal hospitalario restablezca el dispositivo. Puntuación base de CVSS v3: 6.5, cadena de vector CVSS: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Philips ha lanzado una actualización de software, la versión B.06.18, para solucionar la vulnerabilidad de limpieza indebida de excepción lanzada. Además, también ha implementado mitigaciones para reducir el riesgo asociado con la vulnerabilidad de gestión incorrecta de condiciones excepcionales. La actualización de software implementa mensajes y alarmas en el MX40 y en la estación central de monitorización cuando el MX40 se desconecta del punto de acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:philips:intellivue_mx40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "b.06.18",
            "matchCriteriaId" : "493FB2C6-0962-4E8E-BB55-BB02072BEA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:philips:intellivue_mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C26579-482B-4B19-8C5E-71A26A059894"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100813",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usa.philips.com/healthcare/about/customer-support/product-security",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usa.philips.com/healthcare/about/customer-support/product-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-01T16:29:00.210",
      "lastModified" : "2024-11-21T03:17:21.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd (binary responsible for running the camera's web server) allows remote authenticated attackers to execute code through sanitized /setSystemAdmin user input in the AdminID field being passed directly to a call to system."
      }, {
        "lang" : "es",
        "value" : "En dispositivos D-Link DCS-5009 con firmware 1.08.11 y anterior, dispositivos DCS-5010 con firmware 1.14.09 y anterior y dispositivos DCS-5020L con firmware anterior a 1.15.01, la inyección de comandos en alphapd (binario responsable de ejecutar el servidor web de la cámara) permite que los atacantes remotos autenticados ejecuten código al pasar entradas saneadas de usuario /setSystemAdmin en el campo AdminID directamente a una llamada al sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5009_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08.11",
            "matchCriteriaId" : "49C903D2-CBE0-40D8-B9B1-F8EA4FAB9CD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5009:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6FCD9B-6546-4FB2-9867-FC4D7AB36A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5010_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.09",
            "matchCriteriaId" : "FB172849-0BBE-464E-8927-8BE78241C4D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE256639-E8D7-47C7-9B8D-8267469567AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5020l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.09",
            "matchCriteriaId" : "D0EC7C9D-950F-443C-B2B5-065A7BEEECA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5020l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00912CC-6F2F-4F13-BED1-0DCD4DF965DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fidusinfosec.com/dlink-dcs-5030l-remote-code-execution-cve-2017-17020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fidusinfosec.com/dlink-dcs-5030l-remote-code-execution-cve-2017-17020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-01T17:29:00.237",
      "lastModified" : "2024-11-21T03:19:43.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given '' as the first argument."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en libraries/common.inc.php en phpMyAdmin en versiones 4.0 anteriores a la 4.0.10.20, 4.4.x, 4.6.x y 4.7.0 \"prereleases\". Las restricciones causadas por $cfg['Servers'][$i]['AllowNoPassword'] = false se omiten en determinadas versiones PHP (por ejemplo, la versión 5). Esto puede permitir que inicien sesión los usuarios que no tengan una contraseña establecida incluso si el administrador tiene establecido $cfg['Servers'][$i]['AllowNoPassword'] en \"false\" (que es también el valor por defecto). Esto ocurre porque determinadas implementaciones de la función de PHP substr devuelven el valor \"falso\" cuando se proporciona el carácter \" como primer argumento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.10.20",
            "matchCriteriaId" : "55082B30-4479-44A1-BF12-28833A589B50"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndIncluding" : "4.4.15.10",
            "matchCriteriaId" : "928D191C-A3A7-4DEE-87AF-CF2A03295798"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndIncluding" : "4.6.6",
            "matchCriteriaId" : "F21A70D3-CFF3-4A41-82BC-9EA2D7A190B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "02F545DB-D076-4FFB-8169-3E59D367D381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:4.7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "75C9463D-85A0-4B8C-A2EA-0C18381E3C2E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97211",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2017-8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14012",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-01T18:29:00.367",
      "lastModified" : "2024-11-21T03:11:57.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N."
      }, {
        "lang" : "es",
        "value" : "Boston Scientific ZOOM LATITUDE PRM Model 3120 no cifra PHI en reposo. Puntuación base de CVSS v3: 4.6; cadena de vector CVSS: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bostonscientific:zoom_latitude_prm_3120_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08497AF5-5697-4225-81CD-28D1CEB6B7C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bostonscientific:zoom_latitude_prm_3120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA25924-BADE-4A8D-8B94-BBDD11BA6916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101510",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14014",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-01T18:29:00.413",
      "lastModified" : "2024-11-21T03:11:58.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N."
      }, {
        "lang" : "es",
        "value" : "Boston Scientific ZOOM LATITUDE PRM Model 3120 emplea una clave criptográfica embebida para cifrar PHI antes de transferirlo a un medio extraíble. Puntuación base de CVSS v3: 4.6; cadena de vector CVSS: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bostonscientific:zoom_latitude_prm_3120_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08497AF5-5697-4225-81CD-28D1CEB6B7C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bostonscientific:zoom_latitude_prm_3120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA25924-BADE-4A8D-8B94-BBDD11BA6916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101510",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5535",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2018-05-01T18:29:00.477",
      "lastModified" : "2024-11-21T03:27:50.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0."
      }, {
        "lang" : "es",
        "value" : "Los componentes GridServer Broker, GridServer Driver y GridServer Engine en TIBCO DataSynapse GridServer Manager de TIBCO Software Inc. contienen vulnerabilidad relacionadas con el uso incorrecto de mecanismos de cifrado y el uso de cifrados débiles. En teoría, un actor malicioso podría comprometer el tráfico entre cualquiera de sus componentes. Las distribuciones afectadas de TIBCO DataSynapse GridServer Manager de TIBCO Software Inc. son: todas las versiones hasta la 5.1.3, 6.0.0, 6.0.1, 6.0.2, 6.1.0, 6.1.1 y 6.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.3",
            "matchCriteriaId" : "CC2BAE6B-9ED9-42CE-99B3-9CDDF18E8017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EA58BA-253F-4B2F-9FDD-77D83D83B2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D6224E-023B-4BE9-B0F6-C9E1E95C08FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663D8FE4-19D8-4FD9-8507-4DB72E28DEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9562E33D-669A-47DA-B7CA-DF92BEE85163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE8EAE-97FE-45F4-BE02-82836C5CB737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812E2864-CFEA-4FF6-AB37-00A10FD5047E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5536",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2018-05-01T18:29:00.540",
      "lastModified" : "2024-11-21T03:27:50.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0."
      }, {
        "lang" : "es",
        "value" : "Los componentes GridServer Broker y GridServer Director en TIBCO DataSynapse GridServer Manager de TIBCO Software Inc. contienen vulnerabilidades que podrían permitir a un usuario autenticado realizar Cross-Site Scripting (XSS). Además, un usuario autenticado podría ser víctima de un ataque Cross-Site Request Forgery (CSRF). Las distribuciones afectadas de TIBCO DataSynapse GridServer Manager de TIBCO Software Inc. son: todas las versiones hasta la 5.1.3, 6.0.0, 6.0.1, 6.0.2, 6.1.0, 6.1.1 y 6.2.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.3",
            "matchCriteriaId" : "CC2BAE6B-9ED9-42CE-99B3-9CDDF18E8017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EA58BA-253F-4B2F-9FDD-77D83D83B2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D6224E-023B-4BE9-B0F6-C9E1E95C08FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663D8FE4-19D8-4FD9-8507-4DB72E28DEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9562E33D-669A-47DA-B7CA-DF92BEE85163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE8EAE-97FE-45F4-BE02-82836C5CB737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:datasynapse_gridserver_manager:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812E2864-CFEA-4FF6-AB37-00A10FD5047E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5536",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1255",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-05-02T13:29:00.223",
      "lastModified" : "2024-11-21T03:21:35.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 124675."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0, 10.0.1 y 10.1 hasta la 10.1.4 utiliza algoritmos criptográficos más débiles que lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 124675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552A0A69-388F-4842-A882-78F267D4BF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148A8443-DF7A-42AA-8D86-128CCC1D871E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0057282B-A778-4B71-97EC-D054B1EF96A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6030F33-83B9-4F5F-88A7-560893F39A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014537",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124675",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1601",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-05-02T13:29:00.287",
      "lastModified" : "2024-11-21T03:22:07.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624."
      }, {
        "lang" : "es",
        "value" : "En IBM Security Guardium 10.0, 10.0.1 y 10.1 hasta la 10.1.4, Database Activity Monitor no pide que los usuarios tengan contraseñas fuertes por defecto, lo que hace que sea más fácil que los atacantes comprometan las cuentas de usuario. IBM X-Force ID: 132624."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D81340-4C19-4425-8C66-49DD3455EDFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA18ADA-7A89-4DE1-B69C-CB687B8EEEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812ADB6B-451E-41E6-938A-D21E97FB5014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05019805-EF93-4ECC-B49F-863D3933274B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C9351-52F7-437B-B947-BEDCE449C177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D12512-3BA9-42A3-85A9-9E2A3900FE84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014230",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040899",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132624",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22014230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4952",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2018-05-02T14:29:00.380",
      "lastModified" : "2024-11-21T03:26:45.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure."
      }, {
        "lang" : "es",
        "value" : "VMware Xenon en versiones 1.x anteriores a la 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1 y 1.5.4_8, contiene una vulnerabilidad de omisión de autenticación debido a los controles de acceso insuficiente para los endpoints de la utilidad. Una explotación exitosa de esta vulnerabilidad podría resultar en un escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.5.3",
            "matchCriteriaId" : "41FE1566-9CF4-4A2C-8B96-DC477B453732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.1.0:cr0-3:*:*:*:*:*:*",
            "matchCriteriaId" : "393C8F1B-3E97-475C-ACE0-AD60A40A3480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.1.0:cr3_1:*:*:*:*:*:*",
            "matchCriteriaId" : "908287BA-7E5D-4338-A3D4-39353F90B4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.3.7:cr1_2:*:*:*:*:*:*",
            "matchCriteriaId" : "256FB7C5-FAE1-4844-8BD1-63346EF86E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.4.2:cr4_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA29AB6-196C-4894-AF9B-4AC802346227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr2:*:*:*:*:*:*",
            "matchCriteriaId" : "718A5001-9D4B-40F2-A8DD-5B6271252F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr3:*:*:*:*:*:*",
            "matchCriteriaId" : "14B90D4B-5381-460E-86EC-4A0245DFD29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr4:*:*:*:*:*:*",
            "matchCriteriaId" : "A46B85FE-C297-45F1-BE2D-E2E55BE5552F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr5:*:*:*:*:*:*",
            "matchCriteriaId" : "14521FD5-177A-4C62-B3AB-6C2396A4609D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr6:*:*:*:*:*:*",
            "matchCriteriaId" : "178168B2-DF60-45B8-BB94-82151B4A10D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr6_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB5E354-E700-47A8-A2A3-553EEC9BDAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr6_2:*:*:*:*:*:*",
            "matchCriteriaId" : "6694BADF-CD2E-4ADD-B867-2DC0146FA901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4:cr7:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7B077C-ADC1-4A3A-B1E6-FAB98A5EFB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.4_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A47F10-AFF8-41B5-8BE6-9F6C2524D849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:xenon:1.5.7_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14AA307-523D-4694-B50E-DB897AEA61E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2018/q1/153",
        "source" : "security@vmware.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103093",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21c",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2018/q1/153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1743",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-05-04T14:29:00.227",
      "lastModified" : "2024-11-21T03:22:17.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 podría permitir que un atacante remoto obtenga información sensible provocado por la gestión incorrecta de los campos del panel Administrative Console. Al explotarse, un atacante podría navegar por el sistema de archivos. IBM X-Force ID: 134933."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EBB48B-4EE2-4333-851E-BA1B104FBE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013601",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104134",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040890",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134933",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-04T14:29:00.307",
      "lastModified" : "2023-11-07T02:50:01.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3775",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2018-05-04T17:29:00.223",
      "lastModified" : "2024-11-21T03:26:06.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code."
      }, {
        "lang" : "es",
        "value" : "Algunas versiones BIOS/UEFI del servidor x de Lenovo, cuando Secure Boot está habilitado por un administrador del sistema, no autentican correctamente el código firmado antes de cargarlo. Como resultado, un atacante con acceso físico al sistema podría cargar código no firmado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:flex_system_x240_m5_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.61",
            "matchCriteriaId" : "21457BA1-04A2-44F5-A33A-85FF81F09C44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x240_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2CE7A5-1CEE-40C4-BE0E-573C28663A11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:flex_system_x280_x6_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.21",
            "matchCriteriaId" : "83D664BC-39A8-4A7E-95E1-ACF88A5D71D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x280_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1563A13F-2E56-4E83-9C16-68B2C81843DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:flex_system_x480_x6_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.21",
            "matchCriteriaId" : "5763A810-2C14-49F4-895E-D511B4C3FDB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x480_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86B6B27-0E42-47C1-B2D9-A6C5B1364D9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:flex_system_x880_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.21",
            "matchCriteriaId" : "61334EC1-3C26-4056-BBC5-E6D0066BDC31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:flex_system_x880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ED17ED-BE60-4EE3-9599-C88C3C7A626C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:nextscale_nx360_m5_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.61",
            "matchCriteriaId" : "1E315447-AD2F-4861-A5BA-21DEA5ED1DA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:nextscale_nx360_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723D2A74-F6F3-4C73-AFD9-CDAE930D0FB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:system_x3250_m6_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.23",
            "matchCriteriaId" : "3B60CE27-0BF7-4672-857C-2340913EF887"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3250_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89A2206-7012-4938-9BE2-ACF014E3F3B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:system_x3500_m5_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.61",
            "matchCriteriaId" : "4EA1D294-138D-44B4-A86B-58D4B9A70539"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3500_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC3467C-3F00-4EE3-B40E-3AE7F93094DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:system_x3550_m5_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.61",
            "matchCriteriaId" : "F6CB9785-3660-4578-A4E2-0DE50C7E57EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3550_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A78B63-6588-4C40-BEBB-88C8DF467A18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:system_x3650_m5_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.61",
            "matchCriteriaId" : "3D08A24F-EAF0-4A74-9DDC-7564C09172D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3650_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145F0B3C-A945-443B-AB08-329F72358801"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:system_x3850_x6_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "BB2B0B1A-F876-4280-B8CA-C829CCA51291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3850_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70A2471-D476-4FB7-8D1F-FEE0E4BF460C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:system_x3950_x6_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "85425D7F-3087-477C-82B6-B829CDD6EA33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:system_x3950_x6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A3A89F-CB39-4E76-BC64-3C4F4788FB8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-20241",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/solutions/LEN-20241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-04T20:29:00.437",
      "lastModified" : "2024-11-21T03:13:59.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los routers Sierra Wireless AirLink GX400, GX440, ES440 y LS300 con firmware en versiones anteriores a la 4.4.5 y los routers GX450, ES450, RV50, RV50X, MP70 y MP70E con firmware en versiones anteriores a la 4.9 podría permitir que un atacante remoto autenticado ejecute código arbitrario y obtenga el control total de un sistema afectado, incluyendo el envío de comandos con privilegios root. La vulnerabilidad se debe a la validación de entradas insuficiente en las entradas controladas por el usuario en una petición HTTP al dispositivo objetivo. Un atacante en posesión de credenciales de inicio de sesión en el router podría explotar esta vulnerabilidad mediante el envío de una petición HTTP manipulada a un sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:gx440_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "3F62EE7B-AB25-4C04-A371-820B576E6C1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:gx440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DD2CF2-3A83-4ED7-BCD8-05F60782AE17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:es440_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "5CD0AECA-02EF-4F63-9EB6-D943F8737188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:es440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2098BAB-AF80-4C32-A5B8-FD6296C74110"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:ls300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "1F202AE1-78F2-49B2-B36F-92EA4C269BD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:ls300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4A4F52-F99E-4F72-8A2C-8D2CC21461BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:gx400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "B66A0424-6393-481E-87A2-DBF193E1EEE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:gx400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBA7B93-E1C2-41C6-B21E-6DA8B568D751"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:es450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "99A45D03-C605-4440-9945-584D2A755F0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524DF1AE-21F2-4AA6-99E7-6F98304FF845"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:rv50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "0E858A9C-82C0-4E78-91DE-A5511C3BFF61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:rv50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54218BC7-D942-4907-8052-ECB308753162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:rv50x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "AD72D6BB-A8FC-40B6-89CA-7F6E327CD404"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:rv50x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D3EF27-E823-4E49-BD58-D050EB02D294"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:mp70_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "3EEB3877-AC02-43F5-8E41-83A55650485D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:mp70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007D4629-4BE2-4C7A-AC8B-E87739E22D12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:mp70e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "475D25CD-3A4D-48EF-A850-82C7049EBEF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:mp70e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBB86D-8089-4A6C-8485-5E5CB400645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sierrawireless:gx450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "015058E9-315F-4220-89AE-54D2220BD1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C12CF71-FE0E-44EA-9F2E-7CFB42E7C216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/swi-psa-2018-003-technical-bulletin-reaper/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/swi-psa-2018-003-technical-bulletin-reaper/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17539",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-05-08T04:29:00.207",
      "lastModified" : "2024-11-21T03:18:07.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell."
      }, {
        "lang" : "es",
        "value" : "La presencia de una cuenta embebida en Fortinet FortiWLC en versiones 7.0.11 y anteriores permite que atacantes obtengan acceso de lectura/escritura mediante un shell remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.0.11",
            "matchCriteriaId" : "7337AA30-3FBE-4AC4-ABED-5B6976573E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.3.3",
            "matchCriteriaId" : "709F03A8-5B27-472A-AAAF-6D0B2BAD3099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104119",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-274",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17540",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-05-08T04:29:00.380",
      "lastModified" : "2024-11-21T03:18:07.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell."
      }, {
        "lang" : "es",
        "value" : "La presencia de una cuenta embebida en Fortinet FortiWLC 8.3.3 permite que atacantes obtengan acceso de lectura/escritura mediante un shell remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.0.11",
            "matchCriteriaId" : "7337AA30-3FBE-4AC4-ABED-5B6976573E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.3.3",
            "matchCriteriaId" : "709F03A8-5B27-472A-AAAF-6D0B2BAD3099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104119",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-274",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2592",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-08T17:29:00.560",
      "lastModified" : "2024-11-21T03:23:47.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example, keystone tokens)."
      }, {
        "lang" : "es",
        "value" : "python-oslo-middleware en versiones anteriores a la 3.8.1, 3.19.1 y 3.23.1 es vulnerable a una divulgación de información. El software que emplea la clase CatchError incluye valores sensibles en un mensaje de error de traceback. Los usuarios del sistema podrían explotar este error para obtener información sensible de los registros de errores del componente openStack (por ejemplo, los tokens keystone)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:oslo.middleware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "88B696F3-BF22-4724-9FA2-A0398D0E91C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:oslo.middleware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndIncluding" : "3.19.0",
            "matchCriteriaId" : "0B4DC9E1-ADC3-4764-946F-82FCFE45B409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:oslo.middleware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.20.0",
            "versionEndIncluding" : "3.23.0",
            "matchCriteriaId" : "A869ACFE-4EA8-4DAB-91B2-BC81A564A26E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.openstack.org/pipermail/openstack-announce/2017-January/002002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0300.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0435.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0300",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0435",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/keystonemiddleware/+bug/1628031",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2592",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/425730/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/425732/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/425734/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3666-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.openstack.org/pipermail/openstack-announce/2017-January/002002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0300.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/keystonemiddleware/+bug/1628031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/425730/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/425732/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://review.openstack.org/#/c/425734/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3666-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2594",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-08T17:29:00.670",
      "lastModified" : "2024-11-21T03:23:47.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root."
      }, {
        "lang" : "es",
        "value" : "hawtio en versiones anteriores a la 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3 y 1.5 es vulnerable a un salto de directorio que conduce a una excepción de puntero NULL con una stacktrace completa. Un atacante podría utilizar este fallo para reunir información no publicada de la raíz de hawtio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hawt:hawtio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.68",
            "matchCriteriaId" : "5505C9D3-0CEE-4C5B-8F1B-B12DF491B37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2594",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2611",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-08T18:29:00.310",
      "lastModified" : "2024-11-21T03:23:49.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44, 2.32.2 es vulnerable a una exposición de información en la API interna que permite el acceso a los nombres de los elementos que no deberían ser visibles (SECURITY-380). Esto solo afecta a los usuarios anónimos (otros usuarios tienen acceso legítimo) que podrían obtener una lista de los elementos mediante un UnprotectedRootAction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "884F5BE8-59F5-4502-9765-F3A3E505570F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "45690263-84D9-45A1-8C30-3ED2F0F11F47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95956",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2611",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/97a61a9fe55f4c16168c123f98301a5173b9fa86",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/97a61a9fe55f4c16168c123f98301a5173b9fa86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2606",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-08T20:29:00.390",
      "lastModified" : "2024-11-21T03:23:48.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44, 2.32.2 es vulnerable a una exposición de información en la API interna que permite el acceso a los nombres de los elementos que no deberían ser visibles (SECURITY-380). Esto solo afecta a los usuarios anónimos (otros usuarios tienen acceso legítimo) que podrían obtener una lista de los elementos mediante un UnprotectedRootAction."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95962",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2606",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/09cfbc9cd5c9df7c763bc976b7f5c51266b63719",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/09cfbc9cd5c9df7c763bc976b7f5c51266b63719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-09T17:29:00.227",
      "lastModified" : "2024-11-21T03:19:43.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module."
      }, {
        "lang" : "es",
        "value" : "Prosody en versiones anteriores a la 0.10.0 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación). Esto está relacionado con una incompatibilidad con ciertas versiones de la biblioteca LuaSocket, como el paquete lua-socket de Debian stretch. El atacante necesita desencadenar un error de stream. Se puede observar un cierre inesperado, por ejemplo, en el módulo c2s."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prosody:prosody:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "74F219C3-EABA-407F-BBD6-65C8381B2238"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/875829",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://hg.prosody.im/0.9/rev/176b7f4e4ac9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hg.prosody.im/0.9/rev/adfffc5b4e2a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://prosody.im/issues/issue/987",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4198",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://bugs.debian.org/875829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://hg.prosody.im/0.9/rev/176b7f4e4ac9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hg.prosody.im/0.9/rev/adfffc5b4e2a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://prosody.im/issues/issue/987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5175",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-09T19:29:00.247",
      "lastModified" : "2024-11-21T03:27:12.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Advantech WebAccess en versiones 8.1 y anteriores contiene una vulnerabilidad de secuestro de DLL, lo que podría permitir que un atacante ejecute un archivo DLL malicioso en la ruta de búsqueda, desembocando en la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "715345BC-B19A-4605-AB4E-C26AB4F4D65C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96210",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-045-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-045-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14474",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.213",
      "lastModified" : "2024-11-21T03:12:51.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::_execute function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::_execute en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1, u mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F247AC-687D-449E-BC9B-F8F4C8538949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14475",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.260",
      "lastModified" : "2024-11-21T03:12:52.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Linux), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::Network::add_ip en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para Linux), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "308FC473-F1B8-4D7D-B387-8887FE5718AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14476",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.340",
      "lastModified" : "2024-11-21T03:12:52.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Solaris), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "MySQL Multi-Master Replication Manager\tCVE-2017-14476\tEn la función MMM::Agent::Helpers::Network::add_ip en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para Solaris), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:solaris:*:*",
            "matchCriteriaId" : "487ADB02-AAE3-4190-81A2-055591145B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14477",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.400",
      "lastModified" : "2024-11-21T03:12:52.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for FreeBSD), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::Network::add_ip en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para FreeBSD), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:freebsd:*:*",
            "matchCriteriaId" : "31DB6494-2AD0-494F-B186-09A0DA25D95C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14478",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.447",
      "lastModified" : "2024-11-21T03:12:52.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Linux), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::Network::clear_ip en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para Linux), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "308FC473-F1B8-4D7D-B387-8887FE5718AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14479",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.497",
      "lastModified" : "2024-11-21T03:12:52.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Solaris), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::Network::clear_ip en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para Solaris), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:solaris:*:*",
            "matchCriteriaId" : "487ADB02-AAE3-4190-81A2-055591145B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14480",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.543",
      "lastModified" : "2024-11-21T03:12:52.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for FreeBSD), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::Network::clear_ip en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para FreeBSD), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:freebsd:*:*",
            "matchCriteriaId" : "31DB6494-2AD0-494F-B186-09A0DA25D95C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14481",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-09T20:29:00.590",
      "lastModified" : "2024-11-21T03:12:52.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the MMM::Agent::Helpers::Network::send_arp function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Solaris), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\\_agentd process. An attacker that can initiate a TCP session with mmm\\_agentd can trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En la función MMM::Agent::Helpers::Network::send_arp en MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (para Solaris), un mensaje de protocolo MMM especialmente manipulado puede provocar una inyección de comandos shell que resulte en la ejecución de comandos arbitrarios con los privilegios del proceso mmm\\_agentd. Un atacante que pueda iniciar una sesión TCP con mmm_agentd puede desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-mmm:mysql_multi-master_replication_manager:2.2.1:*:*:*:*:solaris:*:*",
            "matchCriteriaId" : "487ADB02-AAE3-4190-81A2-055591145B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2601",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-10T13:29:00.233",
      "lastModified" : "2024-11-21T03:23:48.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44, 2.32.2 es vulnerable a Cross-Site Scripting (XSS) persistente en nombres y descripciones de parámetros (SECURITY-353). Los usuarios con el permiso para configurar jobs pudieron inyectar JavaScript en nombres y descripciones de parámetro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2022/04/12/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/05/17/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/06/22/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/06/30/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/10/19/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/95960",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/fd2e081b947124c90bcd97bfc55e1a7f2ef41a74",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/04/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/05/17/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/06/22/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/06/30/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/10/19/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/95960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/fd2e081b947124c90bcd97bfc55e1a7f2ef41a74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-10T14:29:00.207",
      "lastModified" : "2024-11-21T03:19:43.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment variable."
      }, {
        "lang" : "es",
        "value" : "La función open_envvar en xdg-open en xdg-utils en versiones anteriores a la 1.1.3 no valida cadenas antes de iniciar el programa especificado por la variable de entorno BROWSER. Esto permite que atacantes remotos lleven a cabo ataques de inyección de argumentos mediante una URL manipulada, tal y como demuestra %s en esta variable de entorno."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:xdg-utils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "6A02FF8D-D825-4D34-B929-9296A6108D94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103807",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=5647afb35e4bcba2060148e1a2a47bc43cc240f2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=ce802d71c3466d1dbb24f2fe9b6db82a1f899bcb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xdg/xdg-utils/tree/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3650-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4211",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=103807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=5647afb35e4bcba2060148e1a2a47bc43cc240f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=ce802d71c3466d1dbb24f2fe9b6db82a1f899bcb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xdg/xdg-utils/tree/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3650-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6289",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-05-10T14:29:00.267",
      "lastModified" : "2024-11-21T03:29:28.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as critical. Android: A-72830049. Reference: N-CVE-2017-6289."
      }, {
        "lang" : "es",
        "value" : "En Android antes del nivel de seguridad del 2018-05-05, NVIDIA Trusted Execution Environment (TEE) contiene una vulnerabilidad de corrupción de memoria (debido a una causa inusual rootdue ) que, si se ejecuta con la ejecución especulativa de TEE, podría conducir al escalado local de privilegios. Este problema se ha clasificado como crítico. Android: A-72830049. Referencia: N-CVE-2017-6289."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104145",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6293",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-05-10T14:29:00.317",
      "lastModified" : "2024-11-21T03:29:29.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android: A-69377364. Reference: N-CVE-2017-6293."
      }, {
        "lang" : "es",
        "value" : "En Android antes del nivel de seguridad del 2018-05-05, NVIDIA Tegra X1 TZ contiene una vulnerabilidad en Widevine TA en la que el software escribe datos más allá del final, o antes del inicio, del búfer planeado, lo que podría desembocar en un escalado de privilegios. Este problema se ha clasificado como grave. Android: A-69377364. Referencia: N-CVE-2017-6293."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104145",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-10T15:29:00.220",
      "lastModified" : "2024-11-21T03:19:43.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops."
      }, {
        "lang" : "es",
        "value" : "La función FoFiType1C::cvtGlyph en fofi/FoFiType1C.cc en Poppler 0.64.0 permite que atacantes remotos provoquen una denegación de servicio (recursión infinita) mediante un archivo PDF manipulado, tal y como demuestra pdftops."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.64.0",
            "matchCriteriaId" : "A9361705-A469-4AC8-9F0A-5FD1EEC9580A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5319543-0143-4E2E-AA77-B7F116C1336C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHBA-2019:0327",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3140",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3505",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.freedesktop.org/show_bug.cgi?id=103238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3647-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2019:0327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.freedesktop.org/show_bug.cgi?id=103238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3647-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6015",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-11T13:29:00.297",
      "lastModified" : "2024-11-21T03:28:54.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may allow an authorized, but not privileged local user to execute arbitrary code with elevated privileges on the system. CVSS v3 base score: 8.8, CVSS vector string: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation has released a new version of FactoryTalk Activation, Version 4.01, which addresses the identified vulnerability. Rockwell Automation recommends upgrading to the latest version of FactoryTalk Activation, Version 4.01 or later."
      }, {
        "lang" : "es",
        "value" : "Sin comillas, cualquier espacio en blanco en la ruta de archivo de Rockwell Automation FactoryTalk Activation 4.00.02 se mantiene ambiguo. Esto puede permitir que un atacante vincule o ejecute un archivo malicioso. Esto puede permitir que un usuario local autorizado sin privilegios ejecute código arbitrario con privilegios elevados en el sistema. Puntuación base de CVSS v3: 8.8, cadena de vector CVSS: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation ha lanzado una nueva versión de FactoryTalk Activation, versión 4.01, que aborda esta vulnerabilidad identificada. Rockwell Automation recomienda actualizar a la última versión de FactoryTalk Activation, la 4.01 o posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:factorytalk_activation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.00.02",
            "matchCriteriaId" : "175856ED-7BC9-459A-B3C5-E71CC791DA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96996",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-047-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/939382",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-047-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/939382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16860",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-05-14T13:29:00.353",
      "lastModified" : "2024-11-21T03:17:07.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from version 5.4.0 before version 5.4.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the redirectUrl parameter link in the redirect warning message."
      }, {
        "lang" : "es",
        "value" : "La plantilla invalidRedirectUrl en Atlassian Application Links en versiones anteriores a la 5.2.7, desde la versión 5.3.0 hasta la 5.3.4 y desde la 5.4.0 hasta la 5.4.3 permite que los atacantes remotos inyecten código JavaScript o HTML arbitrario mediante una vulnerabilidad Cross-Site Scripting (XSS) en el enlace del parámetro redirectUrl en el mensaje de advertencia de redirección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.7",
            "matchCriteriaId" : "E48B5EFD-618A-41A2-8CA9-B181E80230B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "CB5BEC1E-10C4-4483-B465-11BC0DBD8676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.3",
            "matchCriteriaId" : "62C0EA11-1465-4133-979E-FDD8F5504043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104188",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/APL-1363",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/APL-1363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6021",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-14T14:29:00.193",
      "lastModified" : "2024-11-21T03:28:55.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "En Schneider Electric ClearSCADA 2014 R1 (build 75.5210) y anteriores, 2014 R1.1 (build 75.5387) y anteriores, 2015 R1 (build 76.5648) y anteriores y 2015 R2 (build 77.5882) y anteriores, un atacante con acceso de red al servidor ClearSCADA puede enviar secuencias de comandos especialmente manipuladas y paquetes de datos al servidor ClearSCADA que pueden provocar que el proceso del servidor ClearSCADA y los procesos del controlador de comunicaciones ClearSCADA finalicen. Se ha calculado una puntuación base de CVSS v3 de 7.5; la cadena de vector CVSS es (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:clearscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2010",
            "matchCriteriaId" : "DAF38D64-EC72-4D39-80BB-4B3958C18B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:clearscada:2014:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "441BA0DB-0BF8-4CDC-9715-9E5227954061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:clearscada:2014:r1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2497FA-9965-4C1A-B9F8-34FC76F0A552"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:clearscada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2010",
            "matchCriteriaId" : "DAF38D64-EC72-4D39-80BB-4B3958C18B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:clearscada:2015:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE9EABB-597E-4198-9C2D-3886A969483D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:clearscada:2015:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "23FD329C-7118-44C1-8BE2-EED715564C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96768",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12120",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.203",
      "lastModified" : "2024-11-21T03:08:52.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An attacker can inject OS commands into the ip= parm in the \"/goform/net_WebPingGetValue\" URI to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Una petición POST especialmente manipulada puede provocar un escalado de privilegios, resultando en un shell root. Un atacante puede inyectar comandos de sistema operativo en el parámetro ip= en el URI \"/goform/net_WebPingGetValue\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0472",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12121",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.267",
      "lastModified" : "2024-11-21T03:08:52.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the rsakey\\_name= parm in the \"/goform/WebRSAKEYGen\" uri to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Una petición POST especialmente manipulada puede provocar un escalado de privilegios, resultando en un shell root. Un atacante puede inyectar comandos de sistema operativo en el parámetro rsakey\\_name= en el URI \"/goform/WebRSAKEYGen\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0473",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12123",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.313",
      "lastModified" : "2024-11-21T03:08:52.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de transmisión de contraseñas en texto claro en las funcionalidades de servidor web y telnet de Moxa EDR-810 V4.1 build 17030317. Un atacante puede visualizar el tráfico de red para obtener la contraseña de administrador del dispositivo. El atacante puede entonces utilizar las credenciales para iniciar sesión como admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0475",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12124",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.360",
      "lastModified" : "2024-11-21T03:08:52.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Un URI HTTP especialmente manipulado puede provocar una desreferencia de puntero NULL, resultando en el cierre inesperado del servidor web. Un atacante puede enviar un URI manipulado para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0476",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12125",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.407",
      "lastModified" : "2024-11-21T03:08:52.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the CN= parm in the \"/goform/net_WebCSRGen\" uri to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Una petición POST especialmente manipulada puede provocar un escalado de privilegios, resultando en un shell root. Un atacante puede inyectar comandos de sistema operativo en el parámetro CN= en el URI \"/goform/net_WebCSRGen\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0477",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12126",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.453",
      "lastModified" : "2024-11-21T03:08:52.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-site request forgery. An attacker can create malicious HTML to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Cross-Site Request Forgery (CSRF) explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Un paquete HTTP especialmente manipulado puede provocar Cross-Site Request Forgery (CSRF). Un atacante puede crear HTML malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0478",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12127",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.517",
      "lastModified" : "2024-11-21T03:08:53.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de almacenamiento de contraseñas en la funcionalidad del sistema operativo de Moxa EDR-810 V4.1 build 17030317. Un atacante con acceso shell podría extraer contraseñas en texto claro desde el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0479",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12128",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.563",
      "lastModified" : "2024-11-21T03:08:53.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información explotable en la funcionalidad Server Agent de Moxa EDR-810 V4.1 build 17030317. Un paquete TCP especialmente manipulado puede provocar la divulgación de información. Un atacante puede enviar un paquete TCP manipulado para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0480",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12129",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.640",
      "lastModified" : "2024-11-21T03:08:53.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de criptografía de contraseñas débil explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Un atacante podría interceptar contraseñas con cifrado débil y realizar ataques de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0481",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14432",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.687",
      "lastModified" : "2024-11-21T03:12:47.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the openvpnServer0_tmp= parameter in the \"/goform/net\\_Web\\_get_value\" uri to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Una petición POST especialmente manipulada puede provocar un escalado de privilegios, resultando en un shell root. Un atacante puede inyectar comandos de sistema operativo en el parámetro openvpnServer0_tmp= en el URI \"/goform/net\\_Web\\_get_value\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14433",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.737",
      "lastModified" : "2024-11-21T03:12:47.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetwork0= parameter in the \"/goform/net\\_Web\\_get_value\" uri to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Una petición POST especialmente manipulada puede provocar un escalado de privilegios, resultando en un shell root. Un atacante puede inyectar comandos de sistema operativo en el parámetro remoteNetwork0= en el URI \"/goform/net\\_Web\\_get_value\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14434",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.797",
      "lastModified" : "2024-11-21T03:12:47.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetmask0= parameter in the \"/goform/net\\_Web\\_get_value\" uri to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Una petición POST especialmente manipulada puede provocar un escalado de privilegios, resultando en un shell root. Un atacante puede inyectar comandos de sistema operativo en el parámetro remoteNetmask0= en el URI \"/goform/net\\_Web\\_get_value\" para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14435",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.843",
      "lastModified" : "2024-11-21T03:12:47.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to \"/MOXA\\_CFG.ini\" without a cookie header to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Un URI HTTP especialmente manipulado puede provocar una desreferencia de puntero NULL, resultando en una denegación de servicio (DoS). Un atacante puede enviar una petición GET a \"/MOXA\\_CFG.ini\" sin una cabecera de cookie para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0474",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14436",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.890",
      "lastModified" : "2024-11-21T03:12:47.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to \"/MOXA\\_CFG2.ini\" without a cookie header to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Un URI HTTP especialmente manipulado puede provocar una desreferencia de puntero NULL, resultando en una denegación de servicio (DoS). Un atacante puede enviar una petición GET a \"/MOXA\\_CFG2.ini\" sin una cabecera de cookie para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0474",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14437",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.937",
      "lastModified" : "2024-11-21T03:12:47.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to \"/MOXA\\_LOG.ini\" without a cookie header to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) explotable en la funcionalidad de servidor web de Moxa EDR-810 V4.1 build 17030317. Un URI HTTP especialmente manipulado puede provocar una desreferencia de puntero NULL, resultando en una denegación de servicio (DoS). Un atacante puede enviar una petición GET a \"/MOXA\\_LOG.ini\" sin una cabecera de cookie para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0474",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14438",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:00.987",
      "lastModified" : "2024-11-21T03:12:47.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existen vulnerabilidades de denegación de servicio (DoS) explotables en la funcionalidad Service Agent de Moxa EDR-810 V4.1 build 17030317. Un paquete especialmente manipulado puede provocar una denegación de servicio (DoS). Un atacante puede enviar un paquete grande a 4000/tcp para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0487",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14439",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-14T20:29:01.033",
      "lastModified" : "2024-11-21T03:12:47.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4001/tcp to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existen vulnerabilidades de denegación de servicio (DoS) explotables en la funcionalidad Service Agent de Moxa EDR-810 V4.1 build 17030317. Un paquete especialmente manipulado puede provocar una denegación de servicio (DoS). Un atacante puede enviar un paquete grande a 4001/tcp para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5AD896-998A-4CA4-AA8C-8B320856247F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6BD14C-FD19-4AF7-A221-91B1A49C0A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0487",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2815",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-05-15T17:29:00.227",
      "lastModified" : "2024-11-21T03:24:12.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de inyección de entidades XML en OpenFire User Import Export Plugin 2.6.0. Una petición web especialmente manipulada puede provocar la recuperación de archivos arbitrarios o una denegación de servicio (DoS). Un atacante puede enviar una petición web manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:user_import_export:2.6.0:*:*:*:*:openfire:*:*",
            "matchCriteriaId" : "3E6D789D-C77D-48E1-AD0E-0E656C47A298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2600",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T20:29:00.213",
      "lastModified" : "2024-11-21T03:23:48.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343)."
      }, {
        "lang" : "es",
        "value" : "En Jenkins en versiones anteriores a la 2.44 y 2.32.2, los usuarios con privilegios bajos podrían visualizar los datos del monitor de nodos mediante la API remota. Estos datos incluyen la configuración del sistema y la información de arranque de estos nodos (SECURITY-343)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-325"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95954",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2600",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/0f92cd08a19207de2cceb6a2f4e3e9f92fdc0899",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/0f92cd08a19207de2cceb6a2f4e3e9f92fdc0899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2608",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T20:29:00.277",
      "lastModified" : "2024-11-21T03:23:49.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383)."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y 2.32.2 es vulnerable a una vulnerabilidad de ejecución remota de código que implica la deserialización de varios tipos en javax.imageio en API basadas en XStream (SECURITY-383)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.44",
            "matchCriteriaId" : "28565CD8-E17B-4C83-89A1-E54530E6A563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95953",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2608",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2612",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T20:29:00.340",
      "lastModified" : "2024-11-21T03:23:49.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK."
      }, {
        "lang" : "es",
        "value" : "En Jenkins en versiones anteriores a la 2.44 y 2.32.2, usuarios con pocos privilegios fueron capaces de omitir las credenciales de descarga JDK (SECURITY-392), lo que resulta en que las próximas builds no puedan descargar un JDK."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F43F1677-395C-4DB8-B54F-C6F54CEDD224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95957",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2612",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2602",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T21:29:00.227",
      "lastModified" : "2024-11-21T03:23:48.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358)."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y 2.32.2 es vulnerable a una lista negra incorrecta de los archivos de metadatos de Pipeline en el subsistema de seguridad de agente-maestro. Esto podría permitir que los archivos de metadatos sean escritos por agentes maliciosos (SECURITY-358)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95952",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2602",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/414ff7e30aba66bed18c4ee8a8660fb36fc8c655",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/414ff7e30aba66bed18c4ee8a8660fb36fc8c655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2603",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T21:29:00.290",
      "lastModified" : "2024-11-21T03:23:48.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens (SECURITY-362)."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y 2.32.2 es vulnerable a una fuga de datos de usuario en la API config.xml de los agentes desconectados. Esto podría filtrar datos sensibles como tokens de API (SECURITY-362)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-325"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F43F1677-395C-4DB8-B54F-C6F54CEDD224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2603",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/3cd946cbef82c6da5ccccf3890d0ae4e091c4265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/3cd946cbef82c6da5ccccf3890d0ae4e091c4265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2604",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T21:29:00.353",
      "lastModified" : "2024-11-21T03:23:48.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371)."
      }, {
        "lang" : "es",
        "value" : "En Jenkins en versiones anteriores a la 2.44 y 2.32.2, los usuarios de privilegios bajos podían realizar acciones en los monitores administrativos debido a que no estaban protegidos de forma consistente por controles de permisos (SECURITY-371)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F43F1677-395C-4DB8-B54F-C6F54CEDD224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/6efcf6c2ac39bc5c59ac7251822be8ddf67ceaf8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/6efcf6c2ac39bc5c59ac7251822be8ddf67ceaf8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2610",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T21:29:00.400",
      "lastModified" : "2024-11-21T03:23:49.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping users with less-than and greater-than characters in their names (SECURITY-388)."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y 2.32.2 es vulnerable a Cross-Site Scripting (XSS) persistente en las sugerencias de búsqueda debido al escapado incorrecto de usuarios con los caracteres \"menor que\" y \"mayor que\" en sus nombres (SECURITY-388)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95951",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2610",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/307ed31caba68a46426b8c73a787a05add2c7489",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/307ed31caba68a46426b8c73a787a05add2c7489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2613",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-15T22:29:00.207",
      "lastModified" : "2024-11-21T03:23:49.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406)."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y 2.32.2 es vulnerable a Cross-Site Request Forgery (CSRF) de creación de usuarios mediante el uso de GET por parte de los administradores. Aunque este registro de usuarios solo se retiene hasta el reinicio en la mayoría de casos, los navegadores web de los administradores se podrían manipular para crear un gran número de registros de usuario (SECURITY-406)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95967",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2613",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/b88b20ec473200db35d0a0d29dcf192069106601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/b88b20ec473200db35d0a0d29dcf192069106601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-16T19:29:00.223",
      "lastModified" : "2024-11-21T03:18:27.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La especificación OpenPGP permite un ataque malleability-gadget Cipher Feedback Mode (CFB) que puede conducir indirectamente a la exfiltración en texto plano. Esto también se conoce como EFAIL. NOTA: terceros indican que este es un problema en aplicaciones que gestionan de manera incorrecta la característica de Modification Detection Code (MDC) o que afectan un tipo de paquete obsoleto, en lugar de un problema en la especificación OpenPGP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217117AE-C16C-4265-A9A9-152D06FCD64E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "081D62F6-B751-4109-B10B-3CF9535B3C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F389CED1-846A-4807-B8E7-00FBECAA41A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930AFDDA-C32A-45E7-BA6E-5827E59B573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2616EA-332D-4D6E-B66C-137A166E181D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C26D918-1548-4A62-BC5C-72DF9168A34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAD39AA-B9FD-492B-9BDA-57F74F4FABE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D789259A-034E-40BB-9DFF-76B3104B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF583CDC-DE9E-45AB-9861-CB203BFA8862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BA111F-A9FB-457D-818E-412195F9EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19296516-EAD4-4B08-8D9A-5E853C7BEF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5010756A-99B8-4C05-9DAC-9BE19B8B6373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104162",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040904",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://efail.de",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060334.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=17066419",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://protonmail.com/blog/pgp-vulnerability-efail",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/matthew_d_green/status/995996706457243648",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.patreon.com/posts/cybersecurity-15-18814817",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://efail.de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=17066419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://protonmail.com/blog/pgp-vulnerability-efail",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/matthew_d_green/status/995996706457243648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.patreon.com/posts/cybersecurity-15-18814817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-16T19:29:00.303",
      "lastModified" : "2024-11-21T03:18:27.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL."
      }, {
        "lang" : "es",
        "value" : "La especificación S/MIME permite un ataque malleability-gadget Cipher Block Chaining (CBC) que puede conducir indirectamente a la exfiltración en texto plano. Esto también se conoce como EFAIL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:9folders:nine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE489EA-2250-4BF0-800C-EDA6EA7D6AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217117AE-C16C-4265-A9A9-152D06FCD64E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "081D62F6-B751-4109-B10B-3CF9535B3C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F389CED1-846A-4807-B8E7-00FBECAA41A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930AFDDA-C32A-45E7-BA6E-5827E59B573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2616EA-332D-4D6E-B66C-137A166E181D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C26D918-1548-4A62-BC5C-72DF9168A34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B06B0D-E60A-4B61-9E39-F5116C8F22A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C671802A-2362-4E66-B5D5-079E5E6B89A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAD39AA-B9FD-492B-9BDA-57F74F4FABE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:notes:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91669C83-56A0-4087-8B6D-2012EB0AE9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F01C924-2AE4-4214-9139-ED08293D198C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:trojita:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93076D12-C4AD-4DE8-A76C-9819493FF516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D789259A-034E-40BB-9DFF-76B3104B212F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A009EAF-41A1-4E6D-B1EB-A2DACE197A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD3770E-9513-43B2-BC9E-0CA3F63D59FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF583CDC-DE9E-45AB-9861-CB203BFA8862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BA111F-A9FB-457D-818E-412195F9EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19296516-EAD4-4B08-8D9A-5E853C7BEF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A3CC49-2FAC-40C9-9CDA-E4440577205E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104165",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://efail.de",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=17066419",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/gNCc8aYm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/matthew_d_green/status/996371541591019520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://efail.de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=17066419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/gNCc8aYm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/matthew_d_green/status/996371541591019520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_18_22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15533",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-05-17T13:29:00.210",
      "lastModified" : "2024-11-21T03:14:44.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish multiple millions of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session."
      }, {
        "lang" : "es",
        "value" : "Symantec SSL Visibility (SSLV) 3.8.4FC, versiones 3.10 anteriores a la 3.10.4.1, 3.11, y versiones 3.12 anteriores a la 3.12.2.1 son vulnerables a un ataque ROBOT (Return of the Bleichenbacher Oracle Threat). Todas las versiones afectadas de SSLV actúan como oráculos débiles, según la clasificación de oráculos empleada en el documento de investigación de ROBOT. Un atacante remoto que haya capturado una sesión SSL previamente grabada inspeccionada por SSLV puede establecer millones de conexiones SSL manipuladas en el objetivo y obtener las claves de sesión necesarias para descifrar la sesión SSL pregrabada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:ssl_visibility_appliance:3.8.4fc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5207441A-FB6D-400F-9151-012DCF01885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:ssl_visibility_appliance:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629C7D06-4DD7-478E-831D-4F6DB9DFF8AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:ssl_visibility_appliance:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B231AB3B-4BFD-4A7A-928C-CDF23FD21D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:ssl_visibility_appliance:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52526D68-F66D-459B-A007-F32BEAFB5CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104163",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA160",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18268",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2018-05-17T13:29:00.257",
      "lastModified" : "2024-11-21T03:19:43.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session."
      }, {
        "lang" : "es",
        "value" : "Symantec IntelligenceCenter 3.3 es vulnerable a un ataque ROBOT (Return of the Bleichenbacher Oracle Threat). Un atacante remoto que haya capturado una sesión SSL previamente grabada inspeccionada por SSLV puede establecer un gran número de conexiones SSL manipuladas en el objetivo y obtener las claves de sesión necesarias para descifrar la sesión SSL pregrabada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_intelligencecenter:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2EBF00-ACDE-4A98-BDB8-6017105975AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104164",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA160",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.symantec.com/security-center/network-protection-security-advisories/SA160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15855",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-05-17T22:29:00.247",
      "lastModified" : "2024-11-21T03:15:20.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, the camera application triggers \"user-memory-access\" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked userspace value (ioctl_ptr->len) is used to copy contents to a kernel buffer which can lead to kernel buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En Qualcomm Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, la aplicación de cámara desencadena un problema \"user-memory-access\" ya que el controlador de Linux del módulo CPP de la cámara accede al búfer proporcionado por la aplicación, e cual reside en userspace. Un valor userspace sin chequear (ioctl_ptr->len) se utiliza para copiar contenidos al búfer del kernel, lo que puede provocar un desbordamiento de búfer del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/03/29/march-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/03/29/march-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9635",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-18T13:29:00.223",
      "lastModified" : "2024-11-21T03:36:33.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm could be exploited to reverse the user's password. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible."
      }, {
        "lang" : "es",
        "value" : "Schneider Electric Ampla MES 6.4 proporciona capacidades para configurar usuarios y sus privilegios. Cuando los usuarios Ampla MES se configuran para emplear Simple Security, una debilidad en el algoritmo de hasheo de contraseñas podría explotarse para revertir la contraseña de usuario. Schneider Electric recomienda que los usuarios de Ampla MES en versiones 6.4 y anteriores actualicen a la versión 6.5 de Ampla MES tan pronto como les sea posible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ampla_manufacturing_execution_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4",
            "matchCriteriaId" : "FDB21341-79E5-4D5D-BD51-DE44C0284B21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99469",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9637",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-18T13:29:00.283",
      "lastModified" : "2024-11-21T03:36:33.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible."
      }, {
        "lang" : "es",
        "value" : "Schneider Electric Ampla MES 6.4 proporciona capacidades para interactuar con datos de bases de datos de terceros. Cuando la conectividad a esas bases de datos se configura para emplear un nombre de usuario y contraseña SQL, un atacante podría ser capaz de rastrear detalles de la cadena de conexión. Schneider Electric recomienda que los usuarios de Ampla MES en versiones 6.4 y anteriores actualicen a la versión 6.5 de Ampla MES tan pronto como les sea posible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ampla_manufacturing_execution_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4",
            "matchCriteriaId" : "FDB21341-79E5-4D5D-BD51-DE44C0284B21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99469",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-18T16:29:00.227",
      "lastModified" : "2024-11-21T03:19:43.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution."
      }, {
        "lang" : "es",
        "value" : "Una implementación memmove optimizada para SSE2 para i386 en sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S en GNU C Library (también conocida como glibc o libc6), desde la versión 2.21 hasta la 2.27 no realiza correctamente la comprobación de solapamiento de memoria si el rango de memoria de origen se extiende por el medio del espacio de memoria. Esto resulta en que se produzcan datos corruptos en la operación de copia. Esto podría revelar información a atacantes que dependen del contexto o resultar en una denegación de servicio (DoS) o una posible ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.21",
            "versionEndIncluding" : "2.27",
            "matchCriteriaId" : "4FE48C40-C85D-4EFE-8343-E8F54BE9AC27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fingolfin/memmove-bug",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22644",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4416-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/fingolfin/memmove-bug",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190329-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190401-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4416-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-18T16:29:00.307",
      "lastModified" : "2024-11-21T03:19:44.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or causing a denial of service."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, en versiones anteriores a la 4.13.5, un usuario local podría crear keyrings para otros usuarios mediante comandos keyctl, estableciendo configuraciones por defecto no deseadas o provocando una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13.5",
            "matchCriteriaId" : "72E6ACD1-0BF7-4E96-9C91-280176AA3A4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=237bbd29f7a049d310d907f4b2716a7feef9abf3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104254",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1580979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1856774#c11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1856774#c9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/237bbd29f7a049d310d907f4b2716a7feef9abf3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K37301725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=237bbd29f7a049d310d907f4b2716a7feef9abf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1580979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1856774#c11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1856774#c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/237bbd29f7a049d310d907f4b2716a7feef9abf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K37301725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-18T19:29:00.287",
      "lastModified" : "2024-11-21T03:19:44.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de bucle infinito en ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22 en la función ReadMIFFImage en coders/miff.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de CPU) mediante un archivo de imagen MIFF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-18T19:29:00.337",
      "lastModified" : "2024-11-21T03:19:44.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call."
      }, {
        "lang" : "es",
        "value" : "Hay un uso de memoria previamente liberada en ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25 en la función ReadOneMNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (DoS) mediante un archivo de imagen MNG manipulado que se gestiona de manera incorrecta durante una llamada MngInfoDiscardObject."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.7-16",
            "versionEndExcluding" : "7.0.7-21",
            "matchCriteriaId" : "77904877-C4E4-440F-A7EB-2BCAFAB99020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-18T19:29:00.413",
      "lastModified" : "2024-11-21T03:19:44.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de bucle infinito en ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22 en la función ReadTXTImage en coders/txt.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de CPU) mediante un archivo de imagen manipulado que se gestiona de manera incorrecta durante una llamada GetImageIndexInList."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B79C0E-E457-4E6B-B12F-8F2EDDA348A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3681-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11240",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2018-05-19T17:29:00.227",
      "lastModified" : "2024-11-21T03:07:23.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explotación con éxito podría permitir la ejecución arbitraria de código en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "D502ABB0-269C-4801-AE4B-F092EA6BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "74CEFCFF-A61D-4999-A2C2-CFC2D3D891A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "E3D25805-A792-408E-97AD-69A3E5D68EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "8D9B947B-81A6-428C-A435-8BD53823FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "7179E918-E45F-46FB-93C4-5C6D2A02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "AF1557C3-9BC3-4F13-927A-5C298C7511CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11250",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2018-05-19T17:29:00.290",
      "lastModified" : "2024-11-21T03:07:24.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explotación con éxito podría permitir la ejecución arbitraria de código en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "D502ABB0-269C-4801-AE4B-F092EA6BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "74CEFCFF-A61D-4999-A2C2-CFC2D3D891A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "E3D25805-A792-408E-97AD-69A3E5D68EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "8D9B947B-81A6-428C-A435-8BD53823FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "7179E918-E45F-46FB-93C4-5C6D2A02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "AF1557C3-9BC3-4F13-927A-5C298C7511CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11253",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2018-05-19T17:29:00.337",
      "lastModified" : "2024-11-21T03:07:25.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explotación con éxito podría permitir la ejecución arbitraria de código en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "D502ABB0-269C-4801-AE4B-F092EA6BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "74CEFCFF-A61D-4999-A2C2-CFC2D3D891A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "E3D25805-A792-408E-97AD-69A3E5D68EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "8D9B947B-81A6-428C-A435-8BD53823FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "7179E918-E45F-46FB-93C4-5C6D2A02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "AF1557C3-9BC3-4F13-927A-5C298C7511CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11306",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2018-05-19T17:29:00.370",
      "lastModified" : "2024-11-21T03:07:31.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explotación con éxito podría permitir la ejecución arbitraria de código en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "D502ABB0-269C-4801-AE4B-F092EA6BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.30066",
            "versionEndExcluding" : "17.011.30068",
            "matchCriteriaId" : "285A2F70-4F85-4828-A841-9B0270F969BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "74CEFCFF-A61D-4999-A2C2-CFC2D3D891A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "E3D25805-A792-408E-97AD-69A3E5D68EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "8D9B947B-81A6-428C-A435-8BD53823FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.30066",
            "versionEndExcluding" : "17.011.30068",
            "matchCriteriaId" : "8B465700-D376-4396-BCF3-72F3C4FE126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "7179E918-E45F-46FB-93C4-5C6D2A02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "AF1557C3-9BC3-4F13-927A-5C298C7511CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11307",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2018-05-19T17:29:00.417",
      "lastModified" : "2024-11-21T03:07:31.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explotación con éxito podría permitir la ejecución arbitraria de código en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "D502ABB0-269C-4801-AE4B-F092EA6BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.30066",
            "versionEndExcluding" : "17.011.30068",
            "matchCriteriaId" : "285A2F70-4F85-4828-A841-9B0270F969BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "74CEFCFF-A61D-4999-A2C2-CFC2D3D891A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "E3D25805-A792-408E-97AD-69A3E5D68EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "8D9B947B-81A6-428C-A435-8BD53823FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.30066",
            "versionEndExcluding" : "17.011.30068",
            "matchCriteriaId" : "8B465700-D376-4396-BCF3-72F3C4FE126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "7179E918-E45F-46FB-93C4-5C6D2A02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "AF1557C3-9BC3-4F13-927A-5C298C7511CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11308",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2018-05-19T17:29:00.463",
      "lastModified" : "2024-11-21T03:07:31.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat y Reader 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores, y 11.0.22 y anteriores tiene una vulnerabilidad explotable de desbordamiento de memoria dinámica (heap). Su explotación con éxito podría permitir la ejecución arbitraria de código en el contexto del usuario actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "D502ABB0-269C-4801-AE4B-F092EA6BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.30066",
            "versionEndExcluding" : "17.011.30068",
            "matchCriteriaId" : "285A2F70-4F85-4828-A841-9B0270F969BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "74CEFCFF-A61D-4999-A2C2-CFC2D3D891A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "E3D25805-A792-408E-97AD-69A3E5D68EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.22",
            "matchCriteriaId" : "8D9B947B-81A6-428C-A435-8BD53823FB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.011.30066",
            "versionEndExcluding" : "17.011.30068",
            "matchCriteriaId" : "8B465700-D376-4396-BCF3-72F3C4FE126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.006.30355",
            "versionEndExcluding" : "15.006.30392",
            "matchCriteriaId" : "7179E918-E45F-46FB-93C4-5C6D2A02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "17.012.20098",
            "versionEndExcluding" : "18.009.20044",
            "matchCriteriaId" : "AF1557C3-9BC3-4F13-927A-5C298C7511CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb17-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2607",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-21T23:29:00.207",
      "lastModified" : "2024-11-21T03:23:49.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). Jenkins allows plugins to annotate build logs, adding new content or changing the presentation of existing content while the build is running. Malicious Jenkins users, or users with SCM access, could configure jobs or modify build scripts such that they print serialized console notes that perform cross-site scripting attacks on Jenkins users viewing the build logs."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44, 2.32.2 es vulnerable a Cross-Site Scripting (XSS) persistente en las notas de la consola (SECURITY-382). Jenkins permite que los plugins anoten registros de build, añadiendo nuevo contenido o cambiando la presentación del contenido ya existente mientras se ejecuta la build.  Los usuarios maliciosos de Jenkins o los usuarios que tengan acceso SCM, podrían configurar los jobs o modificar los scripts de las builds para que impriman notas de consola serializadas que realicen ataques de Cross-Site Scripting (XSS) contra los usuarios de Jenkins que estén visualizando los registros de build."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2607",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2609",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-22T17:29:00.330",
      "lastModified" : "2024-11-21T03:23:49.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y 2.32.2 es vulnerable a una divulgación de información en las sugerencias de búsqueda (SECURITY-385). La característica de autocompletado en la caja de búsqueda revela los nombres de las vistas en sus sugerencias, incluyendo aquellas para las que el usuario actual no tiene acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2609",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/13905d8224899ba7332fe9af4e330ea96a2ae319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/13905d8224899ba7332fe9af4e330ea96a2ae319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2617",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-22T17:29:00.407",
      "lastModified" : "2025-08-05T14:35:48.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed."
      }, {
        "lang" : "es",
        "value" : "hawtio en versiones anteriores a la 1.5.5 es vulnerable a la ejecución remota de código mediante la subida de archivos. Un atacante podría usar esta vulnerabilidad para subir un archivo manipulado que podría ejecutarse en una máquina objetivo en la que se está desplegando hawtio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hawt:hawtio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.5",
            "matchCriteriaId" : "0EC5BD76-F168-4E28-A8F8-E6B4FA70860A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2617",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.240",
      "lastModified" : "2023-11-07T02:39:10.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.320",
      "lastModified" : "2023-11-07T02:39:10.793",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.350",
      "lastModified" : "2023-11-07T02:39:10.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.397",
      "lastModified" : "2023-11-07T02:39:10.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.443",
      "lastModified" : "2023-11-07T02:39:10.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.490",
      "lastModified" : "2023-11-07T02:39:10.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.537",
      "lastModified" : "2023-11-07T02:39:10.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.587",
      "lastModified" : "2023-11-07T02:39:10.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.633",
      "lastModified" : "2023-11-07T02:39:10.993",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.680",
      "lastModified" : "2023-11-07T02:39:11.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.727",
      "lastModified" : "2023-11-07T02:39:11.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.773",
      "lastModified" : "2023-11-07T02:39:11.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.803",
      "lastModified" : "2023-11-07T02:39:11.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.850",
      "lastModified" : "2023-11-07T02:39:11.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.897",
      "lastModified" : "2023-11-07T02:39:11.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.943",
      "lastModified" : "2023-11-07T02:39:11.203",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:00.990",
      "lastModified" : "2023-11-07T02:39:11.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:01.023",
      "lastModified" : "2023-11-07T02:39:11.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-22T20:29:01.070",
      "lastModified" : "2023-11-07T02:39:11.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-7502.  Reason: This candidate is a reservation duplicate of CVE-2018-7502.  Notes: All CVE users should reference CVE-2018-7502 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2598",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-05-23T13:29:00.217",
      "lastModified" : "2024-11-21T03:23:48.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304)."
      }, {
        "lang" : "es",
        "value" : "Jenkins en versiones anteriores a la 2.44 y la 2.32.2 emplea el modo de cifrado en bloque AES ECB sin IV para cifrar secretos, lo que hace que Jenkins y los secretos almacenados sean vulnerables a riesgos innecesarios (SECURITY-304)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-325"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.44",
            "matchCriteriaId" : "D4595374-F7F2-43D5-BB78-37E8377B1E45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.32.2",
            "matchCriteriaId" : "F1F48E96-6C2B-4773-98A4-BFF626A0811F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/e6aa166246d1734f4798a9e31f78842f4c85c28b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jenkinsci/jenkins/commit/e6aa166246d1734f4798a9e31f78842f4c85c28b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-02-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9317",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2018-05-23T15:29:00.207",
      "lastModified" : "2024-11-21T03:35:49.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de escalado de privilegios en algunos dispositivos Dahua IP. Un atacante en posesión de una cuenta con bajos privilegios puede obtener acceso a información de credenciales de una cuenta con altos privilegios y obtener información sobre el dispositivo o atacarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:xvr5x16_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.218.0000002.1.r.171229",
            "matchCriteriaId" : "59E05D25-E22C-4239-9803-03C060886FA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:xvr5x16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2330FA1-AE30-4B9D-981F-932C8FB9920A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:xvr5x08_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.218.0000002.1.r.171229",
            "matchCriteriaId" : "45D055D5-7BA3-4411-9127-05FCC31D01B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:xvr5x08:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79EC839-5AE5-4F77-95D3-7CEB7464E88E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:xvr5x04_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.218.0000002.1.r.171229",
            "matchCriteriaId" : "63C550AC-0214-42FA-8ACF-8DC86F7FFADC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:xvr5x04:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B81F3251-8E82-42B1-9F30-22DE149A9E30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:xvr7x16_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.218.0000002.1.r.171229",
            "matchCriteriaId" : "04FF13D0-D69E-4393-AF26-ADD8F3B5F191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:xvr7x16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F8EAB9-77A2-4BAA-A4A6-D0FE852D1A5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw4xxx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.622.0000000.18.r.20171110",
            "matchCriteriaId" : "0F9CD479-B6BB-402F-BFBB-FC0B647A2A03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5855375E-7076-4673-ABD6-68D52AC6E3AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw4xxx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.621.0000.28.r.20170912",
            "matchCriteriaId" : "68159A96-4C1A-4606-AA79-5F8D7C827EF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw4xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5855375E-7076-4673-ABD6-68D52AC6E3AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw5xxx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.622.0000000.18.r.20171110",
            "matchCriteriaId" : "C99060D8-BEB4-467E-B848-6933E562230D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4F9A7-6E9E-4081-8028-3AF07BC3984C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ipc-hdbw5xxx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.621.0000.28.r.20170912",
            "matchCriteriaId" : "159BC39A-E64C-46D6-85EB-4FA142DD45C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ipc-hdbw5xxx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4F9A7-6E9E-4081-8028-3AF07BC3984C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337",
        "source" : "cybersecurity@dahuatech.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-05-24T13:29:00.227",
      "lastModified" : "2024-11-21T03:36:05.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación en Accellion kiteworks en versiones anteriores a la 2017.01.00 permite que atacantes remotos ejecuten ciertas llamadas API en nombre de un usuario web que emplea un token recopilado mediante una petición POST en oauth/token."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.01.00",
            "matchCriteriaId" : "6B06FEDE-73B4-4265-888E-DC1B4E381A41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jer1nj0y/Vulns/blob/master/Kiteworks%20Vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jer1nj0y/Vulns/blob/master/Kiteworks%20Vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17158",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-05-24T14:29:00.250",
      "lastModified" : "2024-11-21T03:17:36.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages, successful exploit may cause information exposure."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei en versiones anteriores a Berlin-L21HNC185B381, Prague-AL00AC00B223, Prague-AL00BC00B223, Prague-AL00CC00B223, Prague-L31C432B208, Prague-TL00AC01B223 y Prague-TL00AC01B223 tienen una vulnerabilidad de exposición de información. Cuando el smartphone del usuario se conecta al dispositivo malicioso para cargarlo, un atacante no autenticado podría activar algunas funciones específicas mediante el envío de algunos mensajes especialmente manipulados. Dada la validación de entradas insuficiente de los mensajes, la explotación con éxito podría provocar una exposición de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:berlin-l21hn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "l21hnc185b381",
            "matchCriteriaId" : "46D34421-0B1F-4A24-9273-3802413E9BD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:berlin-l21hn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E8FDB9-B279-4D37-BBC3-9625AB5E42DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "al00ac00b223",
            "matchCriteriaId" : "98401C63-6798-462D-9544-30D8ADB5C138"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E54AE0-CB98-47D2-AF52-516EADEF1F5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "al00bc00b223",
            "matchCriteriaId" : "50902B2C-18B2-410C-BFB8-C34EA09485B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C5A77-355C-4797-8B3F-706C9A7C2F1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-al00c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "al00cc00b223",
            "matchCriteriaId" : "1690FC62-A1FB-4CC4-B05E-8F8B16BA8223"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-al00c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BB6D0A-0545-456D-85CC-9A302BAC9A0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-l31_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "l31c432b208",
            "matchCriteriaId" : "2A9FD8DD-17CE-4B28-98E3-8EE844B4C620"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-l31:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C9121DA-1ADB-41AE-A2D4-2AFF7729A16A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-tl00a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tl00ac01b223",
            "matchCriteriaId" : "A010E681-A33A-46D9-9A2E-E91E4A90BD7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-tl00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338F548C-DA7E-4EA4-9D54-7DDF1D5F99B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:prague-tl10a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "tl00ac01b223",
            "matchCriteriaId" : "E1A9B72A-9B0E-491C-BE2B-EB4EAEA0D9CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:prague-tl10a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248688D-F679-42E9-BAA4-34187D5EC5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-phone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-phone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17315",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-05-24T14:29:00.297",
      "lastModified" : "2024-11-21T03:17:49.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specially crafted SCCP messages to the affected products. Due to the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit will cause some services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de errores numéricos. Un atacante remoto no autenticado podría enviar mensajes SCCP especialmente manipulados a los productos afectados. Debido a la validación indebida de los mensajes, provocará errores numéricos al gestionar los mensajes. Un exploit con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-sccp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-sccp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14187",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-05-24T20:29:00.210",
      "lastModified" : "2024-11-21T03:12:19.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalado de privilegios local y ejecución de código local en Fortinet FortiOS, de la versión 5.6.0 hasta la 5.6.2, de la versión 5.4.0 hasta la 5.4.8 y en versiones 5.2 y anteriores, permite que un atacante ejecute un programa binario no autorizado en una memoria USB conectada en un FortiGate enlazando dicho programa binario con un comando que puede ser ejecutado por el comando fnsysctl de la interfaz de línea de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "3085A41F-2305-46D3-AE10-6D256B6E1F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.8",
            "matchCriteriaId" : "DCDB1D22-D470-4AA4-AFB9-1A3D28E69C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.2",
            "matchCriteriaId" : "C44E69B8-A1E8-437B-ADA3-10DE256B3368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104312",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040983",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-245",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9664",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-24T20:29:00.257",
      "lastModified" : "2024-11-21T03:36:36.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which refers to files using ../../ relative paths. Once the internal password file is retrieved, the password hash can be identified using a brute force attack. There is also an exploit allowing running of commands after authorization."
      }, {
        "lang" : "es",
        "value" : "En ABB SREA-01 revisiones A, B, C: en versiones de la aplicación hasta la 3.31.5 y en SREA-50 revisión A: en versiones de la aplicación hasta la 3.32.8, un atacante podría acceder a archivos internos de las herramientas de monitorización antiguas remotas de ABB SREA-01 y SREA-50 sin autorización a través de la red mediante una petición HTTP que se refiere a los archivos que emplean rutas ../../ relativas. Una vez que se recupera el archivo interno de contraseñas, el hash de la contraseña se puede identificar mediante un ataque de fuerza bruta. También hay un exploit que permite ejecutar comandos tras la autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:srea-50_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.32.8",
            "matchCriteriaId" : "1DF23E98-6E25-4D94-925E-E836C7D706B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:srea-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52210FA9-8C19-4717-9C1E-CD2ADF4BD540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:srea-01_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.31.5",
            "matchCriteriaId" : "4EF6D274-B243-4246-802C-8A90DF57176A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:srea-01:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A677B3B0-7EAF-44AE-B75E-119E8EB72496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100260",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3961",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-05-25T13:29:00.210",
      "lastModified" : "2024-11-21T03:26:22.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting (XSS) en la interfaz web en McAfee Network Security Management (NSM) en versiones anteriores a la 8.2.7.42.2 permite que usuarios autenticados puedan reflejar código HTML arbitrario en la página web de respuesta mediante entradas de atributos de usuarios que hayan sido manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1752",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-05-25T14:29:00.277",
      "lastModified" : "2024-11-21T03:22:18.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547."
      }, {
        "lang" : "es",
        "value" : "IBM UrbanCode Deploy 6.1 y 6.2 podría permitir que un usuario autenticado privilegiado obtenga información altamente sensible. IBM X-Force ID: 135547."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndIncluding" : "6.1.3.8",
            "matchCriteriaId" : "FB22FB2E-831E-41B4-AC40-F7564C80CC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndIncluding" : "6.2.7.0",
            "matchCriteriaId" : "665BE1E1-B05E-4367-8332-3DCC0625CFEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000376",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104289",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135547",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg2C1000376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9641",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-05-25T15:29:00.210",
      "lastModified" : "2024-11-21T03:36:34.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability."
      }, {
        "lang" : "es",
        "value" : "PI Coresight 2016 R2 contiene una vulnerabilidad de Cross-Site Request Forgery (CSRF) que podría permitir el acceso al sistema PI. OSIsoft recomienda que los usuarios actualicen a PI Vision 2017 o siguientes para mitigar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_coresight:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-r2",
            "matchCriteriaId" : "11887654-16DB-483B-9F0F-F5332B0BD6E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99540",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14185",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-05-25T16:29:00.230",
      "lastModified" : "2024-11-21T03:12:19.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fuga de información en Fortinet FortiOS, de la versión 5.6.0 a la 5.6.2, de la 5.4.0 a la 5.4.8 y todas las versiones de 5.2, permite que usuarios del portal web SSL VPN accedan a información de configuración interna de FortiOS (por ejemplo, a las direcciones) mediante URL especialmente manipuladas dentro del portal web SSL-VPN."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.2.13",
            "matchCriteriaId" : "DAE351C0-A75B-47C6-9B53-59CF67C6A552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.8",
            "matchCriteriaId" : "DCDB1D22-D470-4AA4-AFB9-1A3D28E69C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.2",
            "matchCriteriaId" : "C44E69B8-A1E8-437B-ADA3-10DE256B3368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104288",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-231",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1768",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-05-29T13:29:00.273",
      "lastModified" : "2024-11-21T03:22:20.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium Big Data Intelligence (SonarG) 3.1 genera un mensaje de error que incluye información sensible sobre su entorno, usuarios o datos asociados. IBM X-Force ID: 136471."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium_big_data_intelligence:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC22A3C0-BD3E-4FB6-9B4D-2241F7AF228A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016515",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104493",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136471",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/136471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16003",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-05-29T20:29:02.143",
      "lastModified" : "2024-11-21T03:15:38.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "windows-build-tools is a module for installing C++ Build Tools for Windows using npm. windows-build-tools versions below 1.0.0 download resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server."
      }, {
        "lang" : "es",
        "value" : "windows-build-tools es un módulo para instalar C++ Build Tools para Windows mediante npm. windows-build-tools en versiones anteriores a la 1.0.0 descarga recursos por HTTP, lo que lo deja vulnerable a ataques MITM. Podría ser posible provocar la ejecución remota de código (RCE) cambiando los recursos solicitados por otros controlados por el atacante si éste está en la red o posicionado entre el usuario y el servidor remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows-build-tools_project:windows-build-tools:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "6A463AD3-7F9E-4EF4-B9C5-852FC9782EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/felixrieseberg/windows-build-tools/commit/9835d33e68f2cb5e4d148e954bb3ed0221d98e90",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/304",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/felixrieseberg/windows-build-tools/commit/9835d33e68f2cb5e4d148e954bb3ed0221d98e90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16010",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-05-29T20:29:02.190",
      "lastModified" : "2024-11-21T03:15:39.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user input is assumed to be escaped, but is not. This vulnerability affects i18next 2.0.0 and later."
      }, {
        "lang" : "es",
        "value" : "i18next es un framework de traducción de idiomas. Al emplear el método .init, al pasar opciones de interpolación sin pasar un escapeValue volverán por defecto a \"undefined\" en lugar de a \"true\", que es lo esperado. Esto puede resultar en una vulnerabilidad de Cross-Site Scripting (XSS) debido a que se asume que se escapan las entradas de usuario, pero en realidad no se hace. La vulnerabilidad afecta a i18next en versiones 2.0.0 y posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i18next:i18next:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "3.4.3",
            "matchCriteriaId" : "731B691A-4FCD-4D82-82AD-3F1781154FBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/i18next/i18next/pull/826",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/326",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i18next/i18next/pull/826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16047",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-05-29T20:29:02.253",
      "lastModified" : "2024-11-21T03:15:43.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "mysqljs era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysqljs_project:mysqljs:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0258D2AC-6639-4B35-8F48-EA935AC376FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/494",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16061",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-05-29T20:29:02.297",
      "lastModified" : "2024-11-21T03:15:44.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "tkinter era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tkinter_package:tkinter:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CA5C12-D9DF-4FBA-9A50-03E02D225B29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/500",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16062",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-05-29T20:29:02.330",
      "lastModified" : "2024-11-21T03:15:44.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "node-tkinter era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-tkinter_project:node-tkinter:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F4498E98-E124-4D26-AA1A-6BC95F372CDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/501",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16153",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-05-29T20:29:02.377",
      "lastModified" : "2024-11-21T03:15:55.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "gaoxuyan es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gaoxuyan_project:gaoxuyan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BCE4F5-2A8C-4DC4-8B87-B69F0ACA7DB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gaoxuyan",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/378",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gaoxuyan",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17171",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-06-01T14:29:00.207",
      "lastModified" : "2024-11-21T03:17:38.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart."
      }, {
        "lang" : "es",
        "value" : "Algunos smartphones Huawei tienen una vulnerabilidad de denegación de servicio (DoS) debido al procesamiento incorrecto de parámetros maliciosos. Un atacante podría engañar a un usuario objetivo para que descargar un APK malicioso e inicie ataques mediante una aplicación preinstalada con permisos específicos. Su explotación con éxito podría permitir que la aplicación envíe parámetros específicos al controlador del smartphone, lo que resultará en un reinicio del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-al10c00b593",
            "matchCriteriaId" : "905EEB31-9199-45DA-9707-97CA3D24248C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-cl00c92b593",
            "matchCriteriaId" : "9923FC00-4B0B-403A-B641-47CF1F414897"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-dl00c17b593",
            "matchCriteriaId" : "F48E0240-9154-4144-9B68-2B350727BD83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l09c636b598a",
            "matchCriteriaId" : "151EB2CE-A996-4FA8-8C42-B5BAB4EC6968"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l09c185b583",
            "matchCriteriaId" : "F43B3E59-1E12-499E-9367-963068C96F4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l09c432b582",
            "matchCriteriaId" : "77182E39-EBC4-472A-8C61-954A50E0A481"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l09c605b585custc605d590",
            "matchCriteriaId" : "298DCBD1-45DA-42F9-B2E6-58791DF440D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l29c10b583",
            "matchCriteriaId" : "8ED6C569-061E-4BD8-96E1-E5C0AF042FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l29c185b585",
            "matchCriteriaId" : "5064CD25-C8C6-4AE9-8225-E8383F20AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxt-l29c636b594a",
            "matchCriteriaId" : "CCCD3A0A-EF4D-4116-A740-0CBBCC238FD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "nxtl00c01b593",
            "matchCriteriaId" : "08807CFB-61C1-42CD-974F-2059F253B0DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541130D9-3327-4991-A7AB-29AA3B37861C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al00c00b398",
            "matchCriteriaId" : "DCEFBA79-B38F-4282-9042-5CCA4941324F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-al10c00b398",
            "matchCriteriaId" : "252DD1ED-A685-4586-BAAD-B58587AC0779"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-cl00c92b398",
            "matchCriteriaId" : "E9BB4220-2B80-48CC-926C-CD67B4A99776"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-dl00c17b398",
            "matchCriteriaId" : "F968BC60-5D73-4230-9879-8E6E659ABA14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c185b391",
            "matchCriteriaId" : "F2FD0823-23D6-4C07-A413-39440A239901"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c432b395",
            "matchCriteriaId" : "6235D596-51CF-4D0E-80F1-C7DB059EC597"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c464b383",
            "matchCriteriaId" : "AE83C73F-3A2A-4606-BC89-30D00186A868"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l09c605b392",
            "matchCriteriaId" : "5617EB95-DF52-4BA0-883C-CEE5EB83720B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "eva-l09c636b388",
            "matchCriteriaId" : "00645D3A-13BF-4C89-B9AC-87852EDF444C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c10b394",
            "matchCriteriaId" : "B16A2326-3CBD-4A77-92B3-9D3E7CA5691B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c432b392",
            "matchCriteriaId" : "EEACF9EC-012B-4A61-BA89-36BC3975A7AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c605b390",
            "matchCriteriaId" : "08B08602-B43E-4C14-A0CF-7BCD1F8C7C4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l19c636b393",
            "matchCriteriaId" : "F3F0E218-3843-4B29-BDB8-3F96C8207994"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-l29c636b389",
            "matchCriteriaId" : "D2F10C27-327A-42F0-96C9-8663B6EA5660"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "eva-tl00c01b398",
            "matchCriteriaId" : "39FC0DF7-E01B-43E5-816F-E549707A91FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l09c318b182",
            "matchCriteriaId" : "75AE4F1B-36F9-4524-BC3E-449354A633B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l09c432b380",
            "matchCriteriaId" : "EA1645EB-7CF9-4950-AB39-3DE5F9C23307"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l09c576b180",
            "matchCriteriaId" : "627FD3D9-40DD-441F-8ABA-1A2A6DCC0BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l29c605b370",
            "matchCriteriaId" : "BD7CF8A7-4EBA-4083-9E6D-6ABE018EA22C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "vie-l29c636b388",
            "matchCriteriaId" : "10CE62B4-B8C4-4F9E-9278-B75FAB53177A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8604D307-4355-4426-A043-F9AD507190D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6153",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-06-01T14:29:00.253",
      "lastModified" : "2024-11-21T03:29:09.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a \"Zip Bomb\" attack."
      }, {
        "lang" : "es",
        "value" : "Las características en el sistema F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5 o 11.2.1 que emplean directamente la funcionalidad inflate, mediante un iRule o mediante el código inflate del módulo PEM están sujetos a una interrupción del servicio mediante un ataque de \"Zip Bomb\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "2591686E-97C4-465F-A725-0037A193C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "14E85172-80FB-4A48-A02F-B2BCEEEFD764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E5D00EED-F95D-4458-BDC4-3390DE85348B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074CB0CC-E7CD-402E-9EFD-954DAB79D68B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "6E3612B2-6722-4833-A386-DFBE4F957126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "CB73A745-E16B-4084-8CBE-FBBF8F52E72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "2CD4DFE3-9071-4808-AE24-2CCA5DB5BA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7D64DC-7271-4617-BD46-99C8246779CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD7E85A-BE85-4CA1-B9CB-0888735EA132"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "424205B0-5E73-4AF2-860A-52129B9734D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "2749969B-5CDD-42A4-9DE3-DE111D41969F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E5011C2D-FBB5-4117-BB97-11DE70117345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EAD6EA-811F-4193-A83D-E70A9A53AFC0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C56690F7-E53D-453C-AF8B-04D951D96D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "A5455A25-7557-4801-BC0F-8E78149A883C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "79344F94-2CB8-4F08-9373-61614A38476C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867B2CA9-DAE5-4070-B8E6-F624C59F5054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D75E7F-B65F-421D-92EE-6B20756019C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D536A57-C7DB-4CE1-AE13-254C650343A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5800062B-A845-449E-AB3A-86F5A89E6428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "5CC4967B-F2FC-4A94-8A6D-469D5B9F98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6BB42D3A-71EE-4367-9F65-86404D74E59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB630A86-FB84-4199-9E4D-38EB620806CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF89E7C-806E-4800-BAA9-0225433B6C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491BC3C-EE0C-43FA-B870-BBF9FC4FADB2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "39403241-7F3D-44F3-8F56-576DCABB28CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "961AFB08-734F-4C41-BE91-B4649B23E45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "397AC4A5-B67C-483B-84F7-8CB294BB460C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A635FEC4-4F52-4971-A67D-47E68108E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569977A-E567-4115-B00C-4B0CBA86582E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FDBD38-369B-4007-8D9A-B65B83B2AABD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "0B8B038F-8E96-463E-83E9-5D5A6ACD7E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "50165503-DAD4-4472-A029-27D378D6B3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "1466F808-2596-4028-8884-27EDD5CACB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE6A792-9D75-4BAF-A8BA-DC5879948BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F72B2-84F2-4FA2-9B53-E98344235EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFAF12-3981-4180-9C2C-994B93DACFCB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "C4832316-B149-4316-8D86-DF7C12154979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "13414479-696D-41FB-919F-783741919610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6A11E433-943D-4D92-B45E-3FA268094278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3374BE-6A37-48B5-83D4-D61558A8433E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7714D5-C0B3-42E0-9F33-C52A93472D04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "53C744A7-4EA6-4CAE-BA28-7FC9E102DD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "288029B5-863C-492C-83A6-C206A85201ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "57CCB85A-6F90-4DB7-B0F8-AE5250E1DCFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84452450-77FA-4708-9C86-5464D541C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB414A2A-AA17-4137-8881-9B7BAFA5E918"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "65560D3E-3AFD-4D3D-8EFF-E277836D5651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "73EFB5D4-2BB0-402C-8CE2-5F33A68C42AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "60189636-02D6-44CA-BE2A-7777E3C409CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD53088-3BD4-4AF9-8934-4905231A75E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1E194-8FBF-4546-B8D6-6C3B9B142401"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "573B289C-DFB1-4AE0-A792-0F591D407200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "4016BD06-2BC7-4CBD-806F-2ED718E2418C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "5AD75094-3248-4D37-969E-75272F6F31D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42821916-E601-4831-B37B-3202ACF2C562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0948894-8098-4532-9E4A-9491E3761C95"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "5224C47E-1765-4E8A-BF6A-268DB70617B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "FD85C59D-43E8-4091-B0F6-5ACC40CC7257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E7860523-E8B3-4BEE-853A-6F0B5BCDDA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E703FAB-BFCD-47A1-94BD-DD63879DE883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE647AD-9B1C-4C8F-9374-9E06677AFF2D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.1",
            "versionEndIncluding" : "11.5.5",
            "matchCriteriaId" : "6C896BDB-1F3F-47D8-A1AD-656A623D20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.3",
            "matchCriteriaId" : "C1A6391D-E411-472A-A714-88D435789095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D4C3D6F5-D94D-46A3-991C-A11275B59F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED205EF-578E-4D57-A326-52D74BA9E48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADC28EF-ED7A-411A-8BA8-3D16452C733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58E8A11-9D44-48BA-BCE1-3505F18E0D41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041024",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K52167636",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K52167636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2852",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-06-01T15:29:00.233",
      "lastModified" : "2024-11-21T03:24:19.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de deserialización de listas de Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar una lectura fuera de límites, lo que resulta en una denegación de servicio (DoS). Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0354",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2858",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-06-01T15:29:00.267",
      "lastModified" : "2024-11-21T03:24:20.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de salto de listas de Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar una lectura fuera de límites, lo que resulta en una denegación de servicio (DoS). Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0362",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2860",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-06-01T15:29:00.327",
      "lastModified" : "2024-11-21T03:24:20.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de búsqueda de entradas de KeyTrees en Natus Xltek NeuroWorks 8. Un paquete de red especialmente manipulado puede provocar una lectura fuera de límites, lo que resulta en una denegación de servicio (DoS). Un atacante puede enviar un paquete malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natus:xltek_neuroworks:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093E6A8F-F409-4E7B-B521-342858DFBD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0364",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-04T06:29:00.217",
      "lastModified" : "2024-11-21T03:19:46.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL."
      }, {
        "lang" : "es",
        "value" : "El paquete app-backup/burp de Gentoo, en versiones anteriores a la 2.1.32, establece la propiedad del directorio de archivos PID en la cuenta burp, lo que podría permitir que usuarios locales finalicen procesos arbitrarios aprovechando el acceso a esta cuenta para modificar archivos PID antes de que un script root envíe un SIGKILL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:burp_project:burp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.32",
            "matchCriteriaId" : "425C5F23-AAE2-44FA-BD22-855552B51890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92121D8A-529E-454A-BC8D-B6E0017E615D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/628770",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201806-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/628770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201806-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-04T06:29:00.327",
      "lastModified" : "2024-11-21T03:19:46.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change."
      }, {
        "lang" : "es",
        "value" : "El paquete app-backup/burp de Gentoo, en versiones anteriores a la 2.1.32, tiene la propiedad incorrecta del directorio /etc/burp, que podría permitir que usuarios locales obtengan acceso de lectura y escritura a archivos arbitrarios aprovechando el acceso a cierta cuenta para un cambio en burp-server.conf."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:burp_project:burp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.32",
            "matchCriteriaId" : "425C5F23-AAE2-44FA-BD22-855552B51890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92121D8A-529E-454A-BC8D-B6E0017E615D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/641842",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201806-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-05",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/641842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201806-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201904-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1748",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-06-04T17:29:00.227",
      "lastModified" : "2024-11-21T03:22:18.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 135521."
      }, {
        "lang" : "es",
        "value" : "IBM Connections en sus versiones 5.0, 5.5 y 6.0 podría permitir que un atacante remoto lleve a cabo ataques de phishing empleando un ataque de redirección abierta. Al persuadir a una víctima para que visite un sitio web especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para suplantar la URL mostrada y redirigir al usuario a un sitio web malicioso que, a priori, parecería de confianza. Esto podría permitir que el atacante obtuviese información sumamente sensible o que llevase a cabo más ataques contra la víctima. IBM X-Force ID: 135521."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36F2948-3B6C-4F31-A08C-C80E908FBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B309632B-7039-4E34-8766-96ECF00D5F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:connections:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8200F7F9-94B4-4F72-82F0-E4AFC5D49CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016698",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135521",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0928",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.380",
      "lastModified" : "2024-11-21T03:03:55.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed."
      }, {
        "lang" : "es",
        "value" : "El módulo de node html-janitor sufre de una vulnerabilidad de control externo de datos de estado críticos mediante el control de usuario de la variable \"_sanitized\", lo que provoca que se omita el saneamiento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-642"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-642"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theguardian:html-janitor:2.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "99234AFC-33E9-4845-8DC2-441723812D4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/guardian/html-janitor/issues/35",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/308158",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/guardian/html-janitor/issues/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/308158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0930",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.427",
      "lastModified" : "2024-11-21T03:03:55.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path."
      }, {
        "lang" : "es",
        "value" : "El módulo de node augustine sufre de una vulnerabilidad de salto de directorio debido a la falta de validación de una URL, que permite que un usuario malicioso lea contenido de cualquier archivo con una ruta conocida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:augustine_project:augustine:0.2.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "340DA415-0930-44C0-97DC-52B7A395C8D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/296282",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/296282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0931",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.477",
      "lastModified" : "2024-11-21T03:03:55.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values."
      }, {
        "lang" : "es",
        "value" : "El módulo de node html-janitor sufre de una vulnerabilidad de Cross-Site Scripting (XSS), ya que clean() acepta variables controladas por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:html-janitor_project:html-janitor:2.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5677FD5B-6D1F-4E1B-BD9B-E63903428C9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/guardian/html-janitor/issues/34",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/308155",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/guardian/html-janitor/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/308155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16005",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.523",
      "lastModified" : "2024-11-21T03:15:39.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Http-signature is a \"Reference implementation of Joyent's HTTP Signature Scheme\". In versions <=0.9.11, http-signature signs only the header values, but not the header names. This makes http-signature vulnerable to header forgery. Thus, if an attacker can intercept a request, he can swap header names and change the meaning of the request without changing the signature."
      }, {
        "lang" : "es",
        "value" : "Http-signature es una \"implementación de referencia del esquema de firmas HTTP de Joyent\". En las versiones iguales o anteriores a la 0.9.11, http-signature solo firma los valores de cabecera, pero no los nombres de cabecera. Esto hace que http-signature sea vulnerable a falsificación de cabeceras. Así, si un atacante puede interceptar una petición, puede cambiar los nombres de cabecera y cambiar el significado de la petición sin cambiar la firma."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joyent:http-signature:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.9.11",
            "matchCriteriaId" : "6A1A0551-373C-4B42-9F8E-A16C849FB481"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/joyent/node-http-signature/issues/10",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/318",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/joyent/node-http-signature/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16006",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.570",
      "lastModified" : "2024-11-21T03:15:39.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript."
      }, {
        "lang" : "es",
        "value" : "Remarkable es un analizador de markdown. En las versiones 1.6.2 y anteriores, Remarkable permite el uso de URI \"data:\" en los enlaces y, por lo tanto, puede ejecutar JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remarkable_project:remarkable:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "340DFEFE-6FEE-4331-AFC3-67F3B2B14771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jonschlinkert/remarkable/issues/227",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/319",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jonschlinkert/remarkable/issues/227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16007",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.617",
      "lastModified" : "2024-11-21T03:15:39.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static (ECDH-ES) is used."
      }, {
        "lang" : "es",
        "value" : "node-jose es una implementación de JavaScript de JSON Object Signing and Encryption (JOSE) para los navegadores web actuales y los servidores basados en node.js. node-jose en versiones anteriores a la 0.9.3 es vulnerable a un ataque de curva inválida. Esto permite que un atacante recupere la clave privada secreta cuando se emplea JWE con ECDH-ES (Elliptic Curve Diffie-Hellman Ephemeral Static)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:node-jose:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.9.3",
            "matchCriteriaId" : "933B574A-74B7-418B-BA6C-5054E990D969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cisco/node-jose",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/324",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cisco/node-jose",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16008",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.677",
      "lastModified" : "2024-11-21T03:15:39.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser. This affects i18next <=1.10.2."
      }, {
        "lang" : "es",
        "value" : "i18next es un framework de traducción de idiomas. Debido a la forma en la que está implementada la interpolación, al hacer sustituciones del diccionario una a una, las entradas de usuario no fiables pueden emplear el nombre de una de las claves de diccionario para inyectar scripts en el navegador. Esto afecta a i18next en versiones iguales o anteriores a la 1.10.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i18next:i18next:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.10.2",
            "matchCriteriaId" : "BF1F0BDB-62F1-461C-9997-39C860728C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/i18next/i18next/pull/443",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/325",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i18next/i18next/pull/443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16009",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.727",
      "lastModified" : "2024-11-21T03:15:39.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid."
      }, {
        "lang" : "es",
        "value" : "ag-grid es una cuadrícula de datos avanzada para diferentes bibliotecas.. ag-grid es vulnerable a Cross-Site Scripting (XSS) mediante expresiones angulares (Angular Expressions), si se emplea AngularJS en combinación con ag-grid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ag-grid:ag-grid:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "AAD8492C-4FF8-4A84-ABA4-D18C33863EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:angularjs:angularjs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "F470BF2F-1604-44A8-9DBA-4AF57970302A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ceolter/ag-grid/issues/1287",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/327",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://spring.io/blog/2016/01/28/angularjs-escaping-the-expression-sandbox-for-xss",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ceolter/ag-grid/issues/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://spring.io/blog/2016/01/28/angularjs-escaping-the-expression-sandbox-for-xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16011",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.773",
      "lastModified" : "2023-11-07T02:40:26.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6708.  Reason: This candidate is a duplicate of CVE-2012-6708.  Notes: All CVE users should reference CVE-2012-6708 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16012",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.833",
      "lastModified" : "2023-11-07T02:40:26.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-9251.  Reason: This candidate is a duplicate of CVE-2015-9251.  Notes: All CVE users should reference CVE-2015-9251 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16013",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.880",
      "lastModified" : "2024-11-21T03:15:39.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached."
      }, {
        "lang" : "es",
        "value" : "hapi es un framework de aplicación de servicios y web. Cuando hapi, desde la versión 15.0.0 hasta la 16.1.0 (ambas incluidas), se encuentra una cabecera \"accept-encoding\" mal formada, se lanza una excepción no detectada. Esto podría provocar el cierre inesperado de hapi o el bloqueo de la conexión del cliente hasta que se alcance el período de agotamiento de tiempo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hapijs:hapi:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndIncluding" : "16.1.0",
            "matchCriteriaId" : "64294ABB-AD92-4452-8C5E-636A26C86736"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hapijs/hapi/issues/3466",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/335",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hapijs/hapi/issues/3466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16014",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.943",
      "lastModified" : "2024-11-21T03:15:39.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service."
      }, {
        "lang" : "es",
        "value" : "Http-proxy es una biblioteca de proxying. Debido a la forna en la que se gestionan los errores en las versiones anteriores a la 0.7.0, un atacante que fuerce un error podría provocar el cierre inesperado del servidor, lo que desencadena una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:http-proxy_project:http-proxy:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.7.0",
            "matchCriteriaId" : "51610308-2147-41C5-AE95-AB322E828482"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nodejitsu/node-http-proxy/pull/101",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/323",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nodejitsu/node-http-proxy/pull/101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16015",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:00.977",
      "lastModified" : "2024-11-21T03:15:40.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Forms is a library for easily creating HTML forms. Versions before 1.3.0 did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to cross site scripting"
      }, {
        "lang" : "es",
        "value" : "Forms es una biblioteca para crear formularios HTML fácilmente. Las versiones anteriores a la 1.3.0 no contaban con un escapado HTML adecuado. Esto significa que, si la aplicación no saneaba código html en representación de los formularios, su uso podría ser vulnerable a Cross-Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forms_project:forms:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "10A11156-1800-4EDD-9645-CB77601B5257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/158",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16016",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.023",
      "lastModified" : "2024-11-21T03:15:40.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sanitize-html is a library for scrubbing html input of malicious values. Versions 1.11.1 and below are vulnerable to cross site scripting (XSS) in certain scenarios: If allowed at least one nonTextTags, the result is a potential XSS vulnerability."
      }, {
        "lang" : "es",
        "value" : "Sanitize-html es una biblioteca para limpiar entradas html de valores maliciosos. Las versiones 1.11.1 y anteriores son vulnerables a Cross-Site Scripting (XSS) en ciertos escenarios: si se permite al menos un nonTextTags, el resultado es una vulnerabilidad potencial de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punkave:sanitize-html:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.11.1",
            "matchCriteriaId" : "9C288C74-9CFE-4A0B-9526-D7ADE59D849E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/punkave/sanitize-html/issues/100",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/154",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/punkave/sanitize-html/issues/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16017",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.083",
      "lastModified" : "2024-11-21T03:15:40.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability."
      }, {
        "lang" : "es",
        "value" : "Sanitize-html es una biblioteca para limpiar entradas html de valores maliciosos. Las versiones 1.2.2 y anteriores tienen una vulnerabilidad de Cross-Site Scripting (XSS)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punkave:sanitize-html:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "38DF8221-7EC9-430B-98B5-BEF9C0785164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/punkave/sanitize-html/issues/19",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/punkave/sanitize-html/pull/20",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/155",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/punkave/sanitize-html/issues/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/punkave/sanitize-html/pull/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16018",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.147",
      "lastModified" : "2024-11-21T03:15:40.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers."
      }, {
        "lang" : "es",
        "value" : "Restify es un framework para construir API REST. Restify desde la versión 2.0.0 hasta la 4.0.4 (ambas incluidas), al emplear etiquetas de script cifradas de URL en una URL que no existe, un atacante puede conseguir ejecutar scripts en algunos navegadores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:restify:restify:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "4.0.4",
            "matchCriteriaId" : "40114976-C843-4E4D-A040-569D2540D814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/restify/node-restify/issues/1018",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/314",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/restify/node-restify/issues/1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16019",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.193",
      "lastModified" : "2024-11-21T03:15:40.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader."
      }, {
        "lang" : "es",
        "value" : "GitBook es una herramienta de línea de comandos (y biblioteca de Node.js) para construir hermosos libros mediante GitHub/Git y Markdown (o AsciiDoc). Es posible Cross-Site Scripting (XSS) persistente en GitBook en versiones anteriores a la 3.2.2 incluyendo código fuera de acentos graves en cualquier ebook. El código será ejecutado en el lector online."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitbook:gitbook:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "CCA955D1-C951-4D04-8049-4049C5468EC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GitbookIO/gitbook/issues/1609",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/159",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GitbookIO/gitbook/issues/1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16020",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.240",
      "lastModified" : "2024-11-21T03:15:40.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name."
      }, {
        "lang" : "es",
        "value" : "Summit es un framework web de node. Al emplear el controlador PouchDB en el módulo, Summit 0.1.0 y siguientes permite que un atacante ejecute comandos arbitrarios mediante el nombre de colección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:summit_project:summit:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndIncluding" : "0.1.21",
            "matchCriteriaId" : "1B6D8179-37B3-4F00-BFA8-289258635FE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/notduncansmith/summit/issues/23",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/315",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/notduncansmith/summit/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16021",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.303",
      "lastModified" : "2024-11-21T03:15:40.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100% usage while uri-js is trying to validate if the supplied URL is valid or not. To check if you're vulnerable, look for a call to `require(\"uri-js\").parse()` where a user is able to send their own input. This affects uri-js 2.1.1 and earlier."
      }, {
        "lang" : "es",
        "value" : "uri-js es un módulo que intenta implementar RFC 3986 completamente. Una de estas características es validar si una URL proporcionada es válida o no. Para hacerlo, uri-js emplea una expresión regular que es vulnerable a una denegación de servicio con expresiones regulares (ReDoS). Esto provoca que el programa se bloquee y que la CPU se vuelva inactiva al uso al 100% mientras uri-js intenta validar si la URL proporcionada es válida o no. Para comprobar si se es vulnerable, se debe buscar una llamada a \"require(\"uri-js\").parse()\" en la que el usuario pueda enviar sus propias entradas. Esto afecta a uri-js en versiones 2.1.1 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:garycourt:uri-js:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "540B9C87-F30C-4317-8B31-F95A5429BBCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/garycourt/uri-js/issues/12",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/100",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/garycourt/uri-js/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16022",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.350",
      "lastModified" : "2024-11-21T03:15:40.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Morris.js creates an svg graph, with labels that appear when hovering over a point. The hovering label names are not escaped in versions 0.5.0 and earlier. If control over the labels is obtained, script can be injected. The script will run on the client side whenever that specific graph is loaded."
      }, {
        "lang" : "es",
        "value" : "Morris.js crea un gráfico svg con etiqueta que aparecen cuando se pasa por un puntero. Los nombres de etiqueta flotantes no se escapan en las versiones 0.5.0 y anteriores. Si se obtiene el control de las etiquetas, se pueden inyectar scripts. Este script se ejecutará en el lado del cliente siempre que se cargue ese gráfico en concreto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morris.js_project:morris.js:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "77FC2E5A-F28F-4650-B697-FB431EE5F10A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/morrisjs/morris.js/pull/464",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/307",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/morrisjs/morris.js/pull/464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16023",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.380",
      "lastModified" : "2024-11-21T03:15:40.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Decamelize se emplea para convertir una cadena separada por guion/punto/guion bajo/espacio en camelCase. Decamelize, desde la versión 1.1.0 hasta la 1.1.1 emplea expresiones regulares para evaluar una cadena y toma valores de separador no escapados, lo que puede emplearse para crear un ataque de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:decamelize_project:decamelize:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240BE027-432D-4D32-A631-93F596847B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:decamelize_project:decamelize:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67883201-B5E9-4AC6-BDDF-B073A97A9B3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sindresorhus/decamelize/issues/5",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/308",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sindresorhus/decamelize/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16024",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.427",
      "lastModified" : "2024-11-21T03:15:41.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists."
      }, {
        "lang" : "es",
        "value" : "El módulo sync-exec se emplea para simular child_process.execSync en la versiones de node anteriores a la 0.11.9. Sync-exec emplea directorios tmp como búfer antes de devolver valores. Otros usuarios en el servidor tienen acceso de lectura al directorio tmp, lo que podría permitir que un atacante en el servidor obtenga información confidencial del archivo tmp/del búfer mientras existe."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sync-exec_project:sync-exec:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.6.2",
            "matchCriteriaId" : "EFF1F70B-F9DC-479F-91BB-379EC093C7E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.11.9",
            "matchCriteriaId" : "2709829F-CB8C-40A5-A703-FBB404507CD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/377.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gvarsanyi/sync-exec/issues/17",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/310",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.owasp.org/index.php/Insecure_Temporary_File",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cwe.mitre.org/data/definitions/377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gvarsanyi/sync-exec/issues/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.owasp.org/index.php/Insecure_Temporary_File",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16025",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.490",
      "lastModified" : "2024-11-21T03:15:41.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerability via an invalid Cookie header. This is only present when websocket authentication is set to `cookie`. Submitting an invalid cookie on the websocket upgrade request will cause the node process to error out."
      }, {
        "lang" : "es",
        "value" : "Nes es una biblioteca de extensiones websocket para hapi. Hapi es un framework de servidores web. Las versiones anteriores a, e incluyendo, la 6.4.0, tienen una vulnerabilidad de denegación de servicio (DoS) mediante una cabecera Cookie inválida. Esto solo está presente cuando la autenticación websocket está establecida en \"cookie\". El envío de una cookie inválida en la petición de actualización de websocket provocará que el proceso node genere un error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hapijs:nes:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "160C670F-52B7-46F7-BA0A-B24372E55CBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hapijs/nes/commit/249ba1755ed6977fbc208463c87364bf884ad655",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hapijs/nes/issues/171",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/331",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hapijs/nes/commit/249ba1755ed6977fbc208463c87364bf884ad655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hapijs/nes/issues/171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16026",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.537",
      "lastModified" : "2024-11-21T03:15:41.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is passed in the body. This affects Request >=2.2.6 <2.47.0 || >2.51.0 <=2.67.0."
      }, {
        "lang" : "es",
        "value" : "Request es un cliente http. Si se hace una petición mediante ```multipart``` y el tipo de cuerpo es ```number```, el número especificado de memoria que no es cero se pasa en el cuerpo. Esto afecta a Request desde la versión 2.2.6 hasta la 2.47.0 y desde la versión 2.51.0 hasta la 2.67.0, todas incluidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:request_project:request:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.2.6",
            "versionEndExcluding" : "2.47.0",
            "matchCriteriaId" : "2A6F49D5-3B4E-4458-8619-E9FA7142BAB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:request_project:request:*:*:*:*:*:node.js:*:*",
            "versionStartExcluding" : "2.51.0",
            "versionEndIncluding" : "2.67.0",
            "matchCriteriaId" : "4A539ABF-1016-49AA-8974-04E5C779E3E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/request/request/issues/1904",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/request/request/pull/2018",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/309",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/request/request/issues/1904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/request/request/pull/2018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16028",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.583",
      "lastModified" : "2024-11-21T03:15:41.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random())."
      }, {
        "lang" : "es",
        "value" : "react-native-meteor-oauth es una biblioteca para iniciar sesión mediante Oauth2 en un servidor Meteor en React Native. El token aleatorio oauth se genera mediante un RNG débil criptográficamente (Math.random())."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randomatic_project:randomatic:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "F42B16F2-5E06-450F-8E64-70055C26E856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tableflip/react-native-meteor-oauth/blob/a7eb738b74c469f5db20296b44b7cae4e2337435/src/meteor-oauth.js#L66",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/157",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tableflip/react-native-meteor-oauth/blob/a7eb738b74c469f5db20296b44b7cae4e2337435/src/meteor-oauth.js#L66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16029",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.647",
      "lastModified" : "2024-11-21T03:15:41.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3.5 and earlier that allows an attacker to read files outside the current directory by sending `../` in the url path for GET requests."
      }, {
        "lang" : "es",
        "value" : "hostr es un sencillo servidor web que sirve los contenidos del directorio actual. Hay una vulnerabilidad de salto de directorio en hostr, en versiones 2.3.5 y anteriores, que permite que un atacante lea archivos fuera del directorio actual mediante el envío de \"../\" en la ruta URL para peticiones GET."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostr_project:hostr:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.3.5",
            "matchCriteriaId" : "BC0E939D-7A08-4723-B443-87D74BD68358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/henrytseng/hostr/issues/8",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/303",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/henrytseng/hostr/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16030",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.677",
      "lastModified" : "2024-11-21T03:15:41.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2.1.12 and earlier."
      }, {
        "lang" : "es",
        "value" : "Useragent se emplea para analizar cabeceras useragent. Emplea varias expresiones regulares para lograrlo. Un atacante podría editar sus propias cabeceras, creando una cadena useragent larga de forma arbitraria, lo que provocaría el bloqueo del bucle de eventos y el servidor. Esto afecta a Useragent 2.1.12 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:useragent_project:useragent:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.1.12",
            "matchCriteriaId" : "59EC3D4C-308F-4BF3-ABC5-CDC8BDDA9F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/312",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16031",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.727",
      "lastModified" : "2024-11-21T03:15:41.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Socket.io is a realtime application framework that provides communication via websockets. Because socket.io 0.9.6 and earlier depends on `Math.random()` to create socket IDs, the IDs are predictable. An attacker is able to guess the socket ID and gain access to socket.io servers, potentially obtaining sensitive information."
      }, {
        "lang" : "es",
        "value" : "Socket.io es un framework de aplicación en tiempo real que proporciona comunicaciones mediante websockets. Debido a que las versiones 0.9.6 y anteriores de socket.io dependen de \"Math.random()\" para crear ID de socket, estos ID son predecibles. Un atacante puede adivinar el ID de socket y obtener acceso a los servidores socket.io, pudiendo obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socket:socket.io:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.9.6",
            "matchCriteriaId" : "922F52F1-F3F6-40AB-8C62-71D6A24E7B3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/socketio/socket.io/commit/67b4eb9abdf111dfa9be4176d1709374a2b4ded8",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/socketio/socket.io/issues/856",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/socketio/socket.io/pull/857",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/321",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/socketio/socket.io/commit/67b4eb9abdf111dfa9be4176d1709374a2b4ded8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/socketio/socket.io/issues/856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/socketio/socket.io/pull/857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16035",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.787",
      "lastModified" : "2024-11-21T03:15:41.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hubl-server module is a wrapper for the HubL Development Server. During installation hubl-server downloads a set of dependencies from api.hubapi.com. It appears in the code that these files are downloaded over HTTPS however the api.hubapi.com endpoint redirects to a HTTP url. Because of this behavior an attacker with the ability to man-in-the-middle a developer or system performing a package installation could compromise the integrity of the installation."
      }, {
        "lang" : "es",
        "value" : "El módulo hubl-server es un wrapper para el servidor de desarrollo de HubL. Durante la instalación, hubl-server descarga una serie de dependencias de api.hubapi.com. En el código se muestra que estos archivos se descargan mediante HTTPS; sin embargo, el endpoint de api.hubapi.com redirige a una URL HTTP. Debido a este comportamiento, un atacante que pueda realizar un ataque Man-in-the-Middle (MitM) sobre un desarrollador o sistema que realiza la instalación de un paquete podría comprometer la integridad de la instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hubspot:hubl-server:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "C31C5209-1150-4005-82F4-1260F2BF6A87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/334",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16036",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.820",
      "lastModified" : "2024-11-21T03:15:41.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`badjs-sourcemap-server` receives files sent by `badjs-sourcemap`. `badjs-sourcemap-server` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"badjs-sourcemap-server\" recibe archivos enviados por \"badjs-sourcemap\". \"badjs-sourcemap-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:badjs-sourcemap-server_project:badjs-sourcemap-server:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "807DE0A0-E1FA-4AFC-825E-246A15769BEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/badjs-sourcemap-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/349",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/badjs-sourcemap-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16037",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.880",
      "lastModified" : "2024-11-21T03:15:42.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`gomeplus-h5-proxy` is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL."
      }, {
        "lang" : "es",
        "value" : "\"gomeplus-h5-proxy\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso a cualquier archivo del sistema colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gomeplus-h5-proxy_project:gomeplus-h5-proxy:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "139B4CEF-225C-48BC-9950-291067A3241E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gomeplus-h5-proxy",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/350",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gomeplus-h5-proxy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16038",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.913",
      "lastModified" : "2024-11-21T03:15:42.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url. This is compounded by `f2e-server` requiring elevated privileges to run."
      }, {
        "lang" : "es",
        "value" : "\"f2e-server\" en versiones 1.12.11 y anteriores es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. Esto se complica, ya que \"f2e-server\" requiere privilegios elevados para ejecutarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f2e-server_project:f2e-server:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.12.11",
            "matchCriteriaId" : "36F093F7-F894-4890-B848-A6F6FCCDB77C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shy2850/node-server/issues/10",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shy2850/node-server/pull/12/files",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/346",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shy2850/node-server/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shy2850/node-server/pull/12/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16039",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:01.960",
      "lastModified" : "2024-11-21T03:15:42.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`hftp` is a static http or ftp server `hftp` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"hftp\" es un servidor http o ftp estático. \"hftp\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hftp_project:hftp:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "80A0962F-1B98-4D15-BB53-08E3027BEBF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/hftp",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/384",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/hftp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16040",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.007",
      "lastModified" : "2024-11-21T03:15:42.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server."
      }, {
        "lang" : "es",
        "value" : "gfe-sass es una biblioteca para promises (CommonJS/Promises/A,B,D). gfe-sass descarga recursos por HTTP, lo que lo deja vulnerable a ataques MITM. Podría ser posible provocar la ejecución remota de código (RCE) cambiando los recursos solicitados por otros controlados por el atacante si éste están en la red o posicionado entre el usuario y el servidor remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfe-sass_project:gfe-sass:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.0.19",
            "matchCriteriaId" : "BFE5E01C-2000-4A20-B93E-A6D4D037FAB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/291",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16041",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.053",
      "lastModified" : "2024-11-21T03:15:42.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks."
      }, {
        "lang" : "es",
        "value" : "ikst en versiones anteriores a la 1.1.2 descarga recursos por HTTP, lo que lo deja vulnerable a ataques MITM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikst_project:ikst:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "662EB4C0-4AEB-421E-9927-FF9B832C32A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/249",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16042",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.100",
      "lastModified" : "2024-11-21T03:15:42.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution."
      }, {
        "lang" : "es",
        "value" : "Growl agrega soporte de notificaciones a nodejs. Growl en versiones anteriores a la1.10.2 no sanea correctamente las entradas antes de pasarlas a exec, lo que permite la ejecución de comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:growl_project:growl:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.10.2",
            "matchCriteriaId" : "8837D937-07E5-4569-8A6F-4DC20F14316B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tj/node-growl/issues/60",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tj/node-growl/pull/61",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/146",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tj/node-growl/issues/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tj/node-growl/pull/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16043",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.147",
      "lastModified" : "2024-11-21T03:15:42.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3."
      }, {
        "lang" : "es",
        "value" : "Shout es un cliente IRC. Debido a que el comando \"/topic\" no se escapa en los mensajes, los atacantes tienen la capacidad de inyectar scripts HTML que se ejecutarán en el navegador de la víctima. Afecta a Shout desde la versión 0.44.0 hasta la 0.49.3, ambas incluidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shout_project:shout:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.44.0",
            "versionEndExcluding" : "0.50.0",
            "matchCriteriaId" : "0E6314FB-5F8A-410A-B6BA-7C92CE638906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erming/shout/pull/344",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/322",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erming/shout/pull/344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16044",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.177",
      "lastModified" : "2024-11-21T03:15:42.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"d3.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d3.js_project:d3.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC550FD7-BCFF-4351-A791-65E1833780D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/497",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16045",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.227",
      "lastModified" : "2024-11-21T03:15:42.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"jquery.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jquery.js_project:jquery.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D27864EF-AB88-4429-A952-0D8106812855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/496",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16046",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.273",
      "lastModified" : "2024-11-21T03:15:43.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"mariadb\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:2.13.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AABD7282-92BB-4387-A664-120EB8607CE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/495",
        "source" : "support@hackerone.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16048",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.320",
      "lastModified" : "2024-11-21T03:15:43.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"node-sqlite\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-sqlite_project:node-sqlite:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BE8526CC-710A-49E8-859B-54DD974DF7AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/493",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16049",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.367",
      "lastModified" : "2024-11-21T03:15:43.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodesqlite\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodesqlite_project:nodesqlite:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40FAF91A-3DD9-40B2-82D2-4BE0D02AC34B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/492",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16050",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.413",
      "lastModified" : "2024-11-21T03:15:43.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"sqlite.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlite.js_project:sqlite.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35F47FDC-5B8F-4B6B-8D1F-1535F6985371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/491",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16051",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.443",
      "lastModified" : "2024-11-21T03:15:43.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"sqliter\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqliter_project:sqliter:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FBECF1B3-4036-449E-B079-6045759DF076"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/490",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16052",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.507",
      "lastModified" : "2024-11-21T03:15:43.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"node-fabric\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-fabric_project:node-fabric:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "10B2C056-38F3-43F6-8E98-BAFC5826813D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/489",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16053",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.537",
      "lastModified" : "2024-11-21T03:15:43.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"fabric-js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabric-js_project:fabric-js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "071BD9F5-82CA-401C-82E6-21BEE6CF225B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/487",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16054",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.583",
      "lastModified" : "2024-11-21T03:15:44.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodefabric\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodefabric_project:nodefabric:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF367940-0A93-457F-9FC6-098C10A8EB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/488",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16055",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-04T19:29:02.630",
      "lastModified" : "2024-11-21T03:15:44.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"sqlserver\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlserver_project:sqlserver:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9A1F36A3-8905-4D0E-9259-91C32C0B0A6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/486",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12092",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-06-04T20:29:00.467",
      "lastModified" : "2024-11-21T03:08:48.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de escritura de archivos en la funcionalidad del módulo de memoria de Allen Bradley Micrologix 1400 Series B FRN, en versiones 21.2 y anteriores. Un paquete especialmente manipulado puede provocar una escritura de archivos, lo que resulta en que se escribe un nuevo programa en el módulo de memoria. Un atacante puede enviar un paquete sin autenticación para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2",
            "matchCriteriaId" : "E3CFD00A-A73C-46AA-B6BD-93C44FBCC98F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0444",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-05T06:29:00.220",
      "lastModified" : "2024-11-21T03:19:46.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nZEDb v0.7.3.3 has XSS in the 404 error page."
      }, {
        "lang" : "es",
        "value" : "nZEDb v0.7.3.3 tiene Cross-Site Scripting (XSS) en una página de error 404."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nzedb:nzedb:0.7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DB27FC-AA9F-4FA2-8C85-8FE0B6CC7901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1350",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-06-05T15:29:00.207",
      "lastModified" : "2024-11-21T03:21:45.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server 9.1, 11.3, 11.5 y 11.7 podría permitir que un usuario escale sus privilegios a administrador debido a controles de acceso incorrectos. IBM X-Force ID: 126526."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9923389A-6B64-482B-A631-1B6B841CB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005503",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104550",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041042",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126526",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22005503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7653",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-06-05T20:29:00.293",
      "lastModified" : "2024-11-21T03:32:23.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect themselves from the broker by sending a topic string which is not valid UTF-8, and so cause a denial of service for the clients."
      }, {
        "lang" : "es",
        "value" : "El broker Eclipse Mosquitto hasta la versión 1.4.15 no rechaza strings que no son UTF-8 válidos. Un cliente malicioso podría provocar que otros clientes que sí rechazan strings UTF-8 no válidos se desconecten del broker enviando un string topic que no es un UTF-8 válido, provocando así una denegación de servicio (DoS) a los clientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.15",
            "matchCriteriaId" : "B0C0DA37-B417-4600-A550-BEC814978C77"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.oasis-open.org/mqtt/disallowed-chars/v1.0/disallowed-chars-v1.0.pdf",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=532113",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4023-1/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://docs.oasis-open.org/mqtt/disallowed-chars/v1.0/disallowed-chars-v1.0.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=532113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4023-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7654",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-06-05T20:29:00.340",
      "lastModified" : "2024-11-21T03:32:23.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in the Mosquitto Broker."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Mosquitto en versiones 1.4.15 y anteriores, se ha descubierto una vulnerabilidad de fuga de memoria en el broker Mosquitto. Los clientes no autenticados pueden enviar paquetes CONNECT manipulados que podrían provocar una denegación de servicio (DoS) en el broker Mosquitto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.15",
            "matchCriteriaId" : "B0C0DA37-B417-4600-A550-BEC814978C77"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=533493",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4023-1/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=533493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4023-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-05T21:29:00.273",
      "lastModified" : "2024-11-21T03:32:20.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections."
      }, {
        "lang" : "es",
        "value" : "El servidor proxy de la aplicación NAS de QNAP hasta la versión 1.2.0 no utiliza protecciones contra Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:nas_proxy_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "21031C8B-269C-44B9-A090-9E9F18331129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-05T21:29:00.337",
      "lastModified" : "2024-11-21T03:32:20.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or HTML."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en el servidor proxy de la aplicación NAS de QNAP hasta la versión 1.2.0 permite que los atacantes remotos inyecten scripts web o HTML arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:nas_proxy_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "21031C8B-269C-44B9-A090-9E9F18331129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-05T21:29:00.383",
      "lastModified" : "2024-11-21T03:32:20.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges."
      }, {
        "lang" : "es",
        "value" : "El servidor proxy de la aplicación NAS de QNAP hasta la versión 1.2.0 permite que los atacantes remotos ejecuten comandos arbitrarios del sistema operativo contra el sistema con privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:nas_proxy_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "21031C8B-269C-44B9-A090-9E9F18331129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-05T21:29:00.430",
      "lastModified" : "2024-11-21T03:32:21.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server."
      }, {
        "lang" : "es",
        "value" : "El servidor proxy de la aplicación NAS de QNAP hasta la versión 1.2.0 no autentica las peticiones correctamente. Su explotación con éxito puede provocar el cambio de la configuración del servidor proxy."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:nas_proxy_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "21031C8B-269C-44B9-A090-9E9F18331129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201806-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1474",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-06-06T17:29:00.263",
      "lastModified" : "2024-11-21T03:21:55.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager Appliance 7.0.0, desde la versión 8.0.0 hasta la 8.0.1.6 y desde la 9.0.0 hasta la 9.0.3.1 revela información sensible a usuarios no autorizados. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 128606."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.0.3.1",
            "matchCriteriaId" : "F51B15B3-FE28-412E-97B5-4CF536074CD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.1.6",
            "matchCriteriaId" : "AAA90E65-CDC9-416D-B0D8-8A0816DCA4BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.0.32",
            "matchCriteriaId" : "A76B6ACA-0778-4513-9EE8-3AC0F4BEE571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.1.6",
            "matchCriteriaId" : "D009088C-AD9E-4C49-944D-05E0714F327D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012329",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104476",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128606",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1476",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-06-06T17:29:00.327",
      "lastModified" : "2024-11-21T03:21:55.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 128610."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server 7.0.0, desde la versión 8.0.0 hasta la 8.0.1.6 y desde la 9.0.0 hasta la 9.0.3.1 podría permitir que un atacante remoto obtenga información sensible, provocado por la imposibilidad de habilitar correctamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información sensible empleando técnicas man-in-the-Middle (MitM). IBM X-Force ID: 128610."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.0.3.1",
            "matchCriteriaId" : "F51B15B3-FE28-412E-97B5-4CF536074CD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.0.32",
            "matchCriteriaId" : "A76B6ACA-0778-4513-9EE8-3AC0F4BEE571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.1.6",
            "matchCriteriaId" : "D009088C-AD9E-4C49-944D-05E0714F327D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.1.6",
            "matchCriteriaId" : "AAA90E65-CDC9-416D-B0D8-8A0816DCA4BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012310",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104501",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128610",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1480",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-06-06T17:29:00.390",
      "lastModified" : "2024-11-21T03:21:56.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager Appliance desde la versión 8.0.0 hasta la 8.0.1.6 y desde la 9.0.0 hasta la 9.0.3.1 almacena información potencialmente sensible en archivos de registro que podrían ser leídos por un usuario remoto. IBM X-Force ID: 128617."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.0.3.1",
            "matchCriteriaId" : "F51B15B3-FE28-412E-97B5-4CF536074CD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.1.6",
            "matchCriteriaId" : "D009088C-AD9E-4C49-944D-05E0714F327D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.1.6",
            "matchCriteriaId" : "AAA90E65-CDC9-416D-B0D8-8A0816DCA4BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012309",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104471",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128617",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7906",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-06-06T20:29:00.267",
      "lastModified" : "2024-11-21T03:32:56.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user."
      }, {
        "lang" : "es",
        "value" : "En ABB IP GATEWAY en versiones 3.39 y anteriores, el servidor web no verifica lo suficiente que se haya realizado una petición por parte del usuario autenticado. Esto podría permitir que un atacante lance una petición suplantando a dicho usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:ip_gateway_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.39",
            "matchCriteriaId" : "4A2AE041-1C90-4BFC-90C9-4576BA446637"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:ip_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4567E7-6481-49F6-9C88-D994B2424AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104388",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7931",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-06-06T20:29:00.317",
      "lastModified" : "2024-11-21T03:32:59.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication."
      }, {
        "lang" : "es",
        "value" : "En ABB IP GATEWAY en versiones 3.39 y anteriores, al acceder a una URL en concreto en el servidor web, un usuario malicioso es capaz de acceder a los archivos de configuración y páginas de la aplicación sin autenticarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:ip_gateway_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.39",
            "matchCriteriaId" : "4A2AE041-1C90-4BFC-90C9-4576BA446637"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:ip_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4567E7-6481-49F6-9C88-D994B2424AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104388",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7933",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-06-06T20:29:00.363",
      "lastModified" : "2024-11-21T03:32:59.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "En ABB IP GATEWAY en versiones 3.39 y anteriores, algunos archivos de configuración contienen contraseñas almacenadas en texto plano, lo que podría permitir que un atacante obtenga acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:ip_gateway_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.39",
            "matchCriteriaId" : "4A2AE041-1C90-4BFC-90C9-4576BA446637"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:ip_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4567E7-6481-49F6-9C88-D994B2424AD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104388",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18154",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-06T21:29:00.207",
      "lastModified" : "2024-11-21T03:19:27.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
      }, {
        "lang" : "es",
        "value" : "Una petición binder arbitraria puede provocar un desmapeo arbitrario en MediaServer en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM, QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16056",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.207",
      "lastModified" : "2024-11-21T03:15:44.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"mssql.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mssql.js_project:mssql.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B23CDD4F-DC57-42E4-905E-6F185959F68E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/485",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16057",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.270",
      "lastModified" : "2024-11-21T03:15:44.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodemssql\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodemssql_project:nodemssql:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1AE5137D-A413-44E6-9E02-3E101003C351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/484",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16058",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.333",
      "lastModified" : "2024-11-21T03:15:44.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"gruntcli\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gruntcli_project:gruntcli:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5AF1CC49-7F21-4F52-A91E-3958B4BD0DFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/498",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16059",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.380",
      "lastModified" : "2024-11-21T03:15:44.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"mssql-node\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mssql-node_project:mssql-node:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "20CE193F-63D7-4BE1-A92E-6865478F4D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/480",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16060",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.427",
      "lastModified" : "2024-11-21T03:15:44.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"babelcli\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:babelcli_project:babelcli:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EB9FAE7C-F7FD-4C85-BA9F-8B2C4A3CEEF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/499",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16063",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.473",
      "lastModified" : "2024-11-21T03:15:45.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "node-opensl era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-opensl_project:node-opensl:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "371D470F-AE96-45EF-9D58-755F5EFD4D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/502",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16064",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.520",
      "lastModified" : "2024-11-21T03:15:45.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "node-openssl era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-openssl_project:node-openssl:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "51581641-2247-49C7-BD25-E82DE4E3BBF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/503",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16065",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.567",
      "lastModified" : "2024-11-21T03:15:45.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"openssl.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl.js_project:openssl.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5044C9C4-F6B9-4926-9E73-2F104806EBD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/504",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16066",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.630",
      "lastModified" : "2024-11-21T03:15:45.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"opencv.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencv.js_project:opencv.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C9BB545C-BA1C-40FF-9385-09B5075061C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/505",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16067",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.660",
      "lastModified" : "2024-11-21T03:15:45.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "node-opencv era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-opencv_project:node-opencv:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2BC68299-3E7B-48B8-8608-91858D2FE96C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/506",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16068",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.723",
      "lastModified" : "2024-11-21T03:15:45.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"ffmepg\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmepg_project:ffmepg:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "117517F8-95A9-4D42-A4D2-13EFFF43B77C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/507",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16069",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.770",
      "lastModified" : "2024-11-21T03:15:45.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodeffmpeg\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodeffmpeg_project:nodeffmpeg:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "20923904-EE84-489E-B775-67FAF7ED4F4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/508",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16070",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.817",
      "lastModified" : "2024-11-21T03:15:45.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodecaffe\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodecaffe_project:nodecaffe:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ED4F240E-0678-4473-ABA0-15C107AD603E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/509",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16071",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.863",
      "lastModified" : "2024-11-21T03:15:45.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodemailer-js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodemailer-js_project:nodemailer-js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C01581FC-BC71-44A8-BD18-5419782A9FCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/510",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16072",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.910",
      "lastModified" : "2024-11-21T03:15:46.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodemailer.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodemailer.js_project:nodemailer.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "892EC0BF-22A1-40DE-BC33-DC83A57A57CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/511",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16073",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:00.957",
      "lastModified" : "2024-11-21T03:15:46.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"noderequest\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noderequest_project:noderequest:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9943C7CB-F765-409C-B26D-FC208229C796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/512",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16074",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.020",
      "lastModified" : "2024-11-21T03:15:46.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"crossenv\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossenv_project:crossenv:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FC8E3F6A-2690-47FD-85CF-B61D96CC07ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/513",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16075",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.067",
      "lastModified" : "2024-11-21T03:15:46.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"http-proxy.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:http-proxy.js_project:http-proxy.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "132ADC18-39EB-41D2-BB98-19F6462B912D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/514",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16076",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.113",
      "lastModified" : "2024-11-21T03:15:46.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"proxy.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proxy.js_project:proxy.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "718A514D-D8FD-44AC-A69D-5F31041D1577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/515",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16077",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.160",
      "lastModified" : "2024-11-21T03:15:46.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"mongose\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongose_project:mongose:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40730640-5AA9-4C1C-AFB2-02C89C460303"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/516",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16078",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.207",
      "lastModified" : "2024-11-21T03:15:46.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"shadowsock\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsock_project:shadowsock:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EBD6597A-7925-4A0B-ACDC-2642B218CD8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/517",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16079",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.253",
      "lastModified" : "2024-11-21T03:15:46.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"smb\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smb_project:smb:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E096811D-0C30-43D6-AF62-383E2614D9CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/518",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16080",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.300",
      "lastModified" : "2024-11-21T03:15:47.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"nodesass\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodesass_project:nodesass:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CF6792A5-AB9E-49F7-BFB1-1B50243D4B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/519",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16081",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.363",
      "lastModified" : "2024-11-21T03:15:47.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cross-env.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."
      }, {
        "lang" : "es",
        "value" : "\"cross-env.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cross-env.js_project:cross-env.js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4E9BC992-7A6B-4BD5-96C6-99F8DC79CE17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/520",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16082",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.393",
      "lastModified" : "2024-11-21T03:15:47.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de ejecución remota de código en el módulo pg cuando la base de datos o consulta remotas especifican un nombre de columna especialmente manipulado. Hay dos escenarios en los que se podría ser vulnerable. 1) La ejecución de SQL inseguro proporcionado por el usuario, el cual contiene un nombre de columna malicioso. 2) La conexión a una base de datos insegura y la ejecución de una consulta que devuelve resultados en los que alguno de los nombres de columna es malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-postgres:pg:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.11.2",
            "matchCriteriaId" : "B2E86DE6-91B1-40C9-A2E9-B48D8516233F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-postgres:pg:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.6.4",
            "matchCriteriaId" : "2A7F10EE-D2CE-418B-BE57-2C377964D7F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-postgres:pg:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.5.7",
            "matchCriteriaId" : "629AB425-6D93-4F01-9F92-84F43811EF67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-postgres:pg:*:*:*:*:*:node.js:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "08F10CAA-2246-4988-A15E-B2C3DDB0C1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-postgres:pg:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.2",
            "matchCriteriaId" : "1D8D3D99-E330-4AA1-89F9-321A4346C7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-postgres:pg:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "548A5428-2541-420D-AFB7-3E92A103655A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/521",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16083",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.440",
      "lastModified" : "2024-11-21T03:15:47.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"node-simple-router\" es un router minimalista para Node. \"node-simple-router\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-simple-router:node-simple-router:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.10.0",
            "matchCriteriaId" : "E2DAD61F-016C-4412-BCCD-145A81E4933D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-simple-router",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/352",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-simple-router",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16084",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.487",
      "lastModified" : "2024-11-21T03:15:47.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "list-n-stream is a server for static files to list and stream local videos. list-n-stream v0.0.10 or lower is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "list-n-stream es un servidor para que los archivos estáticos listen y transmitan vídeos locales. list-n-stream en versiones v0.0.10 o anteriores es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:list-n-stream_project:list-n-stream:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.0.10",
            "matchCriteriaId" : "F6112196-B948-4120-B1C7-5FD1B584DF76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/list-n-stream",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/344",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/list-n-stream",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16085",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.537",
      "lastModified" : "2024-11-21T03:15:47.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "tinyserver2 es un servidor web para archivos estáticos. tinyserver2 es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinyserver2_project:tinyserver2:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.6.0",
            "matchCriteriaId" : "BF9C9BC9-7A1A-4E44-B820-04FC64F153AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tinyserver2",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/371",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tinyserver2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16086",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.597",
      "lastModified" : "2024-11-21T03:15:47.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header."
      }, {
        "lang" : "es",
        "value" : "ua-parser es un port del analizador de agente de usuario de Browserscope. ua-parser es vulnerable a un ataque de denegación de servicio con expresiones regulares (ReDoS) cuando se proporciona una cabecera UserAgent especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ua-parser_project:ua-parser:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6AF63D28-CA78-44CA-81E5-14054512D980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/316",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16088",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.643",
      "lastModified" : "2024-11-21T03:15:47.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox."
      }, {
        "lang" : "es",
        "value" : "El módulo safe-eval se describe como una versión más segura de eval. Mediante el acceso a los constructores de objeto, las entradas de usuario no saneadas pueden acceder a la totalidad de la biblioteca estándar y salir del sandbox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-eval_project:safe-eval:0.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4D79B731-E0EB-45EE-AAE5-67DF7A6C7FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-eval_project:safe-eval:0.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C15792D-0910-4081-8862-70FFF06200AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-eval_project:safe-eval:0.2.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1F446425-972B-4721-A9C5-343B4D0F1935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-eval_project:safe-eval:0.3.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6484CD1E-EE5E-4CEB-AC87-CD05D6FE08F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/5",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/issues/59",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/337",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/issues/59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16089",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.690",
      "lastModified" : "2024-11-21T03:15:47.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverlyr is a simple http server. serverlyr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serverlyr\" es un servidor http sencillo. \"serverlyr\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverlyr_project:serverlyr:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE98808F-8727-4D3C-8DCD-5A20A75F1AE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverlyr",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/365",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverlyr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16090",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.737",
      "lastModified" : "2024-11-21T03:15:48.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"fsk-server\" es un servidor http sencillo. \"fsk-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fsk-server_project:fsk-server:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40DE470E-5E88-4678-B9CC-0271B8555391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/fsk-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/345",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/fsk-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16091",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.787",
      "lastModified" : "2024-11-21T03:15:48.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "xtalk ayuda al navegador a comunicarse con nodex, un sencillo framework web. xtalk es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtalk_project:xtalk:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.0.2",
            "matchCriteriaId" : "78452B7E-1D7F-4C95-BE13-F9E74847D3E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/339",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16092",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.833",
      "lastModified" : "2024-11-21T03:15:48.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "Sencisho es un sencillo servidor http para el desarrollo en local. Sencisho es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sencisho_project:sencisho:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "84C03903-7379-4D5E-8B1A-06D4095F4FAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/sencisho",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/340",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/sencisho",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16093",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.863",
      "lastModified" : "2024-11-21T03:15:48.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cyber-js is a simple http server. A cyberjs server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "cyber-js es un sencillo servidor http. \"cyber-js\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyber-js_project:cyber-js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C5358C25-269A-4A73-96BC-A0451F44B485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/cyber-js",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/347",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/cyber-js",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16094",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.927",
      "lastModified" : "2024-11-21T03:15:48.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "iter-http es un servidor para archivos estáticos. iter-http es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iter-http_project:iter-http:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FBD5A87-1678-4710-AF51-F8E0BEAB14F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/iter-http",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/343",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/iter-http",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16095",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:01.973",
      "lastModified" : "2024-11-21T03:15:48.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serverliujiayi1\" es un servidor http sencillo. \"serverliujiayi1\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverliujiayi1_project:serverliujiayi1:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "68049449-B928-4D65-9DE1-759A985E314A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverliujiayi1",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/367",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverliujiayi1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16096",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.020",
      "lastModified" : "2024-11-21T03:15:48.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serveryaozeyan is a simple HTTP server. serveryaozeyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serveryaozeyan\" es un servidor http sencillo. \"serveryaozeyan\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serveryaozeyan_project:serveryaozeyan:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4737C9A8-9CF3-40DC-989F-9829618CED60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryaozeyan",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/355",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryaozeyan",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16097",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.067",
      "lastModified" : "2024-11-21T03:15:48.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"tiny-http\" es un servidor http sencillo. \"tiny-http\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiny-http_project:tiny-http:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B35D75F3-88BC-46C5-9B93-9D8A01BCACDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/342",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16098",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.113",
      "lastModified" : "2024-11-21T03:15:49.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "charset 1.0.0 and below are vulnerable to regular expression denial of service. Input of around 50k characters is required for a slow down of around 2 seconds. Unless node was compiled using the -DHTTP_MAX_HEADER_SIZE= option the default header max length is 80kb, so the impact of the ReDoS is relatively low."
      }, {
        "lang" : "es",
        "value" : "charset en versiones 1.0.0 y anteriores es vulnerable a una denegación de servicio (DoS) con expresiones regulares. Se requiere una entrada de 50k caracteres aproximadamente para una ralentización de 2 segundos aproximadamente. A no ser que el nodo se haya compilado mediante la opción -DHTTP_MAX_HEADER_SIZE=, el tamaño máximo por defecto de la cabecera es 80 kb, por lo que el impacto del ReDoS es relativamente bajo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charset_project:charset:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "00D50E3B-819F-409A-84EC-BBC688A11F8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-modules/charset/issues/10",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/524",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-modules/charset/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16099",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.143",
      "lastModified" : "2024-11-21T03:15:49.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "El módulo no-case es vulnerable a una denegación de servicio (DoS) con expresiones regulares. Cuando se pasan entradas de usuario no fiables a no-case, puede bloquear el bucle de eventos, provocando una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:no-case_project:no-case:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "7E48A28D-3CA5-4AD6-A75D-A4DC7D6C07C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakeembrey/no-case/issues/17",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/529",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blakeembrey/no-case/issues/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16100",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.207",
      "lastModified" : "2024-11-21T03:15:49.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible."
      }, {
        "lang" : "es",
        "value" : "dns-sync es un solucionador dns sync/blocking. Si se permiten entradas de usuario no fiables en el método resolve(), es posible llevar a cabo una inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dns-sync_project:dns-sync:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "B8722761-027D-498E-893C-42F06831CCEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/skoranga/node-dns-sync/issues/5",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/523",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/skoranga/node-dns-sync/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16101",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.237",
      "lastModified" : "2024-11-21T03:15:49.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serverwg\" es un servidor http simple. \"serverwg\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverwg_project:serverwg:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FE85FE6E-E25E-40B9-A789-BDF306C9FF69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwg",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/364",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16102",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.287",
      "lastModified" : "2024-11-21T03:15:49.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serverhuwenhui\" es un servidor http simple. \"serverhuwenhui\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverhuwenhui_project:serverhuwenhui:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9958CFE5-11E9-4A01-B8A6-CC67EE2B9C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverhuwenhui",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/366",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverhuwenhui",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16103",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.333",
      "lastModified" : "2024-11-21T03:15:49.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serveryztyzt\" es un servidor http simple. \"serveryztyzt\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serveryztyzt_project:serveryztyzt:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1568EB29-0F88-44BE-A582-D81BBE6DBFB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryztyzt",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/354",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryztyzt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16104",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.380",
      "lastModified" : "2024-11-21T03:15:49.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "citypredict.whauwiller es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citypredict.whauwiller_project:citypredict.whauwiller:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "850EBE23-DDA7-4444-95D1-56AE266A9B5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/citypredict.whauwiller",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/370",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/citypredict.whauwiller",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16105",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.427",
      "lastModified" : "2024-11-21T03:15:49.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the URL."
      }, {
        "lang" : "es",
        "value" : "\"serverwzl\" es un servidor http simple. \"serverwzl\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverwzl_project:serverwzl:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F121770D-1954-4559-988D-0867EFD79D62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwzl",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/363",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwzl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16106",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.473",
      "lastModified" : "2024-11-21T03:15:50.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"tmock\" es un servidor estático de archivos. \"tmock\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tmock_project:tmock:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "594C729D-3776-4DDF-858B-757BE6A84D81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tmock",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/375",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tmock",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16107",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.503",
      "lastModified" : "2024-11-21T03:15:50.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pooledwebsocket is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "pooledwebsocket es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pooledwebsocket_project:pooledwebsocket:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.0.1",
            "versionEndIncluding" : "0.0.18",
            "matchCriteriaId" : "E4AF249D-EC19-4C4F-92FF-1E5ADF3EBE30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/341",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16108",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.550",
      "lastModified" : "2024-11-21T03:15:50.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gaoxiaotingtingting is an HTTP server. gaoxiaotingtingting is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"gaoxiaotingtingting\" es un servidor HTTP. \"gaoxiaotingtingting\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gaoxiaotingtingting_project:gaoxiaotingtingting:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8AD03062-CCFB-4DFF-9EA1-4E31AC956ED0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/static-html-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/377",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/static-html-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16109",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.597",
      "lastModified" : "2024-11-21T03:15:50.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url. Access is constrained, however, to supported file types. Requesting a file such as /etc/passwd returns a \"not supported\" error."
      }, {
        "lang" : "es",
        "value" : "\"easyquick\" es un servidor web simple. \"easyquick\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. Sin embargo, el acceso está restringido solo a los tipos de archivo soportados. La petición de un archivo como /etc/passwd devuelve un error \"not supported\" (no soportado)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyquick_project:easyquick:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "91C5B74D-682E-4821-B8A4-BA62A33A5EFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/easyquick",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/373",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/easyquick",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16110",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.643",
      "lastModified" : "2024-11-21T03:15:50.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "weather.swlyons is a simple web server for weather updates. weather.swlyons is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"weather.swlyons\" es un servidor http sencillo para actualizaciones meteorológicas. \"weather.swlyonsr\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weather.swlyons_project:weather.swlyons:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2D0F9010-23C2-4ABB-8F52-DF9BB4D7FCBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weather.swlyons_project:weather.swlyons:0.1.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "83149086-B9CD-42A6-8783-F8F8011FB9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weather.swlyons_project:weather.swlyons:0.1.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE1FB33A-AABC-41F3-BCF7-A1C93EE02D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weather.swlyons_project:weather.swlyons:0.1.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7AD21AD9-552E-4625-9762-84BE5F6D66B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weather.swlyons_project:weather.swlyons:0.1.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C00BCA6-58C2-48BD-AB60-BA305A46EC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weather.swlyons_project:weather.swlyons:0.1.6:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9BC587AA-563B-45F6-B0C0-3AF90A5D7709"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/weather.swlyons",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/379",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/weather.swlyons",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16111",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.677",
      "lastModified" : "2024-11-21T03:15:50.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Disposition header."
      }, {
        "lang" : "es",
        "value" : "El módulo content sirve para analizar cabeceras HTTP Content-*. El framework hapijs lo emplea para proporcionar esta funcionalidad. El módulo es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se pasa una cabecera Content-Type o Content-Disposition especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:content_project:content:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "CC43A6E8-5FFE-41FF-A2BD-67B3FD65F578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/530",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16113",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.723",
      "lastModified" : "2024-11-21T03:15:50.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed."
      }, {
        "lang" : "es",
        "value" : "El módulo parsejson es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se le pasan entradas de usuario no fiables para que sean analizadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parsejson_project:parsejson:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.0.3",
            "matchCriteriaId" : "35E0943A-5819-4DF7-81DB-9AB79BA7C204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/get/parsejson/issues/4",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/528",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/get/parsejson/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16114",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.770",
      "lastModified" : "2024-11-21T03:15:50.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds."
      }, {
        "lang" : "es",
        "value" : "El módulo marked es vulnerable a una denegación de servicio (DoS) con expresiones regulares. En base a la información publicada en el issue público, 1k caracteres pueden provocar un bloqueo durante, aproximadamente, 6 segundos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marked_project:marked:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.9",
            "matchCriteriaId" : "F9C8D7E7-C9E4-4AE1-A9A9-D4C3803980EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chjj/marked/issues/937",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/531",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chjj/marked/issues/937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16115",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.817",
      "lastModified" : "2024-11-21T03:15:51.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds."
      }, {
        "lang" : "es",
        "value" : "El módulo timespan es vulnerable a una denegación de servicio (DoS) con expresiones regulares. Si se pasan 50k aproximados de caracteres de entrada de usuario no fiable, el bucle de eventos se bloqueará durante más o menos 10 segundos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timespan_project:timespan:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ABD8B1D3-FF59-4418-960B-519C9C9A5508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/indexzero/TimeSpan.js/issues/10",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/533",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/indexzero/TimeSpan.js/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16116",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.863",
      "lastModified" : "2024-11-21T03:15:51.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods."
      }, {
        "lang" : "es",
        "value" : "El módulo string proporciona operaciones de cadena adicionales. El módulo string es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se pasan entradas de usuario no fiables en los métodos underscore o unescapeHTML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:string_project:string:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.2.1",
            "matchCriteriaId" : "C3FB16B7-31ED-4B26-9F65-CF7B16E59EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:string_project:string:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.2.2",
            "versionEndIncluding" : "3.3.3",
            "matchCriteriaId" : "883CDD25-E14D-41D4-817D-6D87308E6649"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jprichardson/string.js/issues/212",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/536",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jprichardson/string.js/issues/212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16117",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.910",
      "lastModified" : "2024-11-21T03:15:51.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds."
      }, {
        "lang" : "es",
        "value" : "slug es un módulo para \"slugificar\" cadenas, incluso aunque contengan unicode. slug es vulnerable a una denegación de servicio (DoS) por expresiones regulares si se pasan entradas no fiables especialmente manipuladas como entrada. Una cantidad aproximada de 50k caracteres pueden bloquear el bucle de eventos durante 2 segundos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slug_project:slug:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.9.1",
            "matchCriteriaId" : "B4A860E8-738F-47B1-8D22-44B57392F9F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dodo/node-slug/issues/82",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/537",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dodo/node-slug/issues/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16118",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.940",
      "lastModified" : "2024-11-21T03:15:51.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "El módulo forwarded es empleado por el framework Express.js para gestionar la cabecera X-Forwarded-For. Es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se le pasan entradas especialmente manipuladas para su análisis. Esto provoca que el bucle de eventos se bloquee, provocando una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forwarded_project:forwarded:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.1.2",
            "matchCriteriaId" : "96AB0720-709E-40E5-92F9-85D3512DF495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104427",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/527",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16119",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:02.987",
      "lastModified" : "2024-11-21T03:15:51.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Fresh es un módulo empleado por el framework Express.js para las pruebas de \"frescura\" de las respuestas HTTP. Es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se le pasan entradas especialmente manipuladas para su análisis. Esto provoca que el bucle de eventos se bloquee, provocando una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fresh_project:fresh:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.5.2",
            "matchCriteriaId" : "9BB3B576-C56A-4C4F-A0EF-F295392C4285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/526",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16120",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.037",
      "lastModified" : "2024-11-21T03:15:51.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"liyujing\" es un servidor estático de archivos. \"liyujing\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liyujing_project:liyujing:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8812312A-62F1-48AA-86E7-AD33D386DF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liyujing_project:liyujing:1.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "36B9ECD5-18F6-48F4-B5C6-7B3BB5960C13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/liyujing",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/387",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/liyujing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16121",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.083",
      "lastModified" : "2024-11-21T03:15:51.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "datachannel-client is a signaling implementation for DataChannel.js. datachannel-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "datachannel-client es una implementación de señalización para DataChannel.js. datachannel-client es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachannel-client_project:datachannel-client:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A312940-C7A9-488D-87EA-FCDB9816E826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachannel-client_project:datachannel-client:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B8AF3616-AC3A-46CE-B18C-1AE92726B882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachannel-client_project:datachannel-client:1.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1EBA851A-4DD9-4445-81C3-5BD822755568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/datachannel-client",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/391",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/datachannel-client",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16122",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.130",
      "lastModified" : "2024-11-21T03:15:51.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cuciuci is a simple fileserver. cuciuci is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"cuciuci\" es un servidor de archivos simple. \"cuciuci\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cuciuci_project:cuciuci:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2E5A866D-46C6-465E-80BE-04E3F94E9AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cuciuci_project:cuciuci:1.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A80119CF-A271-402B-AC5A-F5D76F6CB107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/cuciuci",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/381",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/cuciuci",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16123",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.177",
      "lastModified" : "2024-11-21T03:15:52.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"welcomyzt\" es un servidor http simple. \"welcomyzt\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:welcomyzt_project:welcomyzt:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "8FAD44F6-98D2-4AFB-A5BF-750EDB93A920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/388",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16124",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.223",
      "lastModified" : "2024-11-21T03:15:52.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"node-server-forfront\" es un servidor estático de archivos sencillo. \"node-server-forfront\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-server-forfront_project:node-server-forfront:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.10.7",
            "matchCriteriaId" : "DAF440A8-4B17-4683-B949-74073C1E820E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-server-forfront",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/382",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-server-forfront",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16125",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.253",
      "lastModified" : "2024-11-21T03:15:52.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager. rtcmulticonnection-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "rtcmulticonnection-client es una implementación de señalización para RTCMultiConnection.js, un gestor multisesión. rtcmulticonnection-client es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtcmulticonnection-client_project:rtcmulticonnection-client:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "98FFD5DC-F5BD-4BBC-A3EB-8D310C6E18A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtcmulticonnection-client_project:rtcmulticonnection-client:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "02F07557-544B-4443-8F88-236CBFDDA4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtcmulticonnection-client_project:rtcmulticonnection-client:1.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AED3E216-C04E-43EF-BDFC-A16CDE84A607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtcmulticonnection-client_project:rtcmulticonnection-client:1.0.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "05E09182-AC03-4D4C-AAA4-579103D6A592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtcmulticonnection-client_project:rtcmulticonnection-client:1.0.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "39F7EF55-ED8E-4BF9-BD89-1307D7D5B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rtcmulticonnection-client_project:rtcmulticonnection-client:1.0.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BA44E68C-7F15-4C2B-B7DB-864B58BA399E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/rtcmulticonnection-client",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/385",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/rtcmulticonnection-client",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16126",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.300",
      "lastModified" : "2024-11-21T03:15:52.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked (test, require, pre-install)"
      }, {
        "lang" : "es",
        "value" : "El módulo botbait es una herramienta empleada para rastrear el uso de bots y de herramientas automáticas en el ecosistema npm. Se sabe que botbait graba y rastrea información de usuario. El módulo rastrea la siguiente información. Proceso de IP de origen. Proceso de versiones. Forma en la que se ha invocado el módulo (test, require, pre-install)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botbait_project:botbait:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "2873CA9E-CBFE-4F35-9A17-2F11117088D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/483",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16127",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.363",
      "lastModified" : "2024-11-21T03:15:52.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The module pandora-doomsday infects other modules. It's since been unpublished from the registry."
      }, {
        "lang" : "es",
        "value" : "El módulo pandora-doomsday infecta a otros módulos. Desde ese momento, se ha retirado del registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-509"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pandora-doomsday_project:pandora-doomsday:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B8A22A40-4353-49DC-A2EE-47836CD1B9BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/482",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16128",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.410",
      "lastModified" : "2024-11-21T03:15:52.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry."
      }, {
        "lang" : "es",
        "value" : "El módulo npm-script-demo abrió una conexión a un servidor C&C. Se ha retirado del registro de npm."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npm-script-demo_project:npm-script-demo:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F36684C8-3A18-4ACA-986D-51A1A52FFB55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/481",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16129",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.457",
      "lastModified" : "2024-11-21T03:15:52.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive CPU and/or memory consumption. An attacker might exploit such a weakness for a DoS attack. To exploit this the attacker must control the location (URL) that superagent makes a request to."
      }, {
        "lang" : "es",
        "value" : "El módulo HTTP del cliente superagent es vulnerable a ataques de bomba ZIP. En un ataque de bomba ZIP, el servidor HTTP responde con una respuesta comprimida que se agranda significativamente una vez descomprimida. Si un cliente no toma las suficientes precauciones al procesar tales respuestas, podría resultar en un consumo excesivo de CPU y/o memoria. Un atacante podría explotar una debilidad como esa para un ataque DoS. Para explotarla, el atacante debe controlar la ubicación (URL) a la que superagent realiza una petición."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:superagent_project:superagent:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.7.0",
            "matchCriteriaId" : "8A86D4C2-09BE-45F0-985E-8AB163C926E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/visionmedia/superagent/issues/1259",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/479",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/visionmedia/superagent/issues/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16130",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.503",
      "lastModified" : "2024-11-21T03:15:52.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url. Accessible files are restricted to those with a file extension. Files with no extension such as /etc/passwd throw an error."
      }, {
        "lang" : "es",
        "value" : "\"exxxxxxxxxxx\" es una guía de estilo de JavaScript de Google para el frame eX Http. \"exxxxxxxxxxx\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. Los archivos accesibles se restringen a los que tienen una extensión de archivo. Los archivos que no tienen extensión, como por ejemplo /etc/passwd, generan un error."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exxxxxxxxxxx_project:exxxxxxxxxxx:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B3EFF6C9-21D3-4B7F-80A5-88B953DA63F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exxxxxxxxxxx_project:exxxxxxxxxxx:1.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C852872B-B806-4AA8-8B02-337348DFCE0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/exxxxxxxxxxx",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/478",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/exxxxxxxxxxx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16131",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.537",
      "lastModified" : "2024-11-21T03:15:52.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unicorn-list is a web framework. unicorn-list is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"unicorn-list\" es un framework web. \"unicorn-list\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unicorn-list_project:unicorn-list:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "9667965A-1C34-45A3-B625-922341303E29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/unicorn-list",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/477",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/unicorn-list",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16132",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.583",
      "lastModified" : "2024-11-21T03:15:53.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "simple-npm-registry is a local npm package cache. simple-npm-registry is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"simple-npm-registry\" es una caché de paquete local de npm. \"simple-npm-registry\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple-npm-registry_project:simple-npm-registry:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.0.4",
            "matchCriteriaId" : "C5D7AF75-F4EA-449E-B9EF-639839D3C21E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/simple-npm-registry",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/452",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/simple-npm-registry",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16133",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.643",
      "lastModified" : "2024-11-21T03:15:53.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"goserv\" es un servidor http. \"goserv\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goserv_project:goserv:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3CD9001E-29CC-4289-A25A-A994FF379415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/goserv",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/473",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/goserv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16134",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.690",
      "lastModified" : "2024-11-21T03:15:53.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "http_static_simple is an http server. http_static_simple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"http_static_simple\" es un servidor http. \"http_static_simple\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:http_static_simple_project:http_static_simple:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5EA0F8A1-590F-41F1-A0BD-E66D7AA076E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/http_static_simple",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/472",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/http_static_simple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16135",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.723",
      "lastModified" : "2024-11-21T03:15:53.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverzyy is a static file server. serverzyy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"serverzyy\" es un servidor estático de archivos. \"serverzyy\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverzyy_project:serverzyy:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D0626566-2D11-4BE4-B548-FEB078929DA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverzyy",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/431",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverzyy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16136",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.770",
      "lastModified" : "2024-11-21T03:15:53.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header."
      }, {
        "lang" : "es",
        "value" : "method-override es un módulo empleado por el framework Express.js para permitir el uso de verbos HTTP como PUT o DELETE en lugares no soportados por el cliente. method-override es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se pasan entradas especialmente manipuladas para que sean analizadas por la cabecera X-HTTP-Method-Override."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressjs:method-override:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "151AB27E-8444-4579-A27A-A3AEB2C78A27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/538",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16137",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.817",
      "lastModified" : "2024-11-21T03:15:53.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue."
      }, {
        "lang" : "es",
        "value" : "El módulo debug es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se le pasan entradas de usuario no fiables en el formateador o. Son necesarios alrededor de 50.000 caracteres para bloquear durante 2 segundos, por lo que este es un problema de baja gravedad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.6.9",
            "matchCriteriaId" : "F2573252-A4FF-4CEF-8A11-0CAC9DEA9C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "99ADECFD-F975-432D-A043-217796B14EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/visionmedia/debug/issues/501",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/visionmedia/debug/pull/504",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63%40%3Cnotifications.netbeans.apache.org%3E",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nodesecurity.io/advisories/534",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/visionmedia/debug/issues/501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/visionmedia/debug/pull/504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63%40%3Cnotifications.netbeans.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nodesecurity.io/advisories/534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16138",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.863",
      "lastModified" : "2024-11-21T03:15:53.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input."
      }, {
        "lang" : "es",
        "value" : "El módulo mime en versiones anteriores a la 1.4.1, 2.0.1 y 2.0.2 es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se realiza una búsqueda mime en entradas de usuario no fiables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mime_project:mime:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "150700EE-A06B-4FFD-8660-8DE16C09D8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mime_project:mime:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.1",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "3F4557A9-9350-4D50-AC50-584B6153A1EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/broofa/node-mime/issues/167",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/535",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/broofa/node-mime/issues/167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16139",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.910",
      "lastModified" : "2024-11-21T03:15:53.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jikes is a file server. jikes is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url. Accessible files are restricted to files with .htm and .js extensions."
      }, {
        "lang" : "es",
        "value" : "\"jikes\" es un servidor de archivos. \"jikes\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. Los archivos accesibles se restringen a los que tienen una extensión .htm o .js."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jikes_project:jikes:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4C030FE7-1350-4BB6-B168-48382DF54D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jikes",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/476",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jikes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16140",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:03.957",
      "lastModified" : "2024-11-21T03:15:54.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"lab6.brit95\" es un servidor de archivos. \"lab6.brit95\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lab6.brit95_project:lab6.brit95:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "55F30131-E5FB-461A-9638-AD23C6189998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6.brit95",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/475",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6.brit95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16141",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.003",
      "lastModified" : "2024-11-21T03:15:54.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"lab6drewfusbyu\" es un servidor http. \"lab6drewfusbyu\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lab6drewfusbyu_project:lab6drewfusbyu:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "8FC8F15B-9565-4B68-9F75-AF10A193CF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6drewfusbyu",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/474",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6drewfusbyu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16142",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.050",
      "lastModified" : "2024-11-21T03:15:54.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "infraserver is a RESTful server. infraserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"infraserver\" es un servidor RESTful. \"infraserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infraserver_project:infraserver:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D1A1CCDE-A67B-49DF-819E-5900DFC61C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/infraserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/471",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/infraserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16143",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.097",
      "lastModified" : "2024-11-21T03:15:54.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"commentapp.stetsonwood\" es un servidor http. \"commentapp.stetsonwood\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:commentapp.stetsonwood_project:commentapp.stetsonwood:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6655E00F-ABEE-4B98-AFE5-C08BD1152A26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/commentapp.stetsonwood",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/470",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/commentapp.stetsonwood",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16144",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.143",
      "lastModified" : "2024-11-21T03:15:54.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "myserver.alexcthomas18 is a file server. myserver.alexcthomas18 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"myserver.alexcthomas18\" es un servidor de archivos. \"myserver.alexcthomas18\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myserver.alexcthomas18_project:myserver.alexcthomas18:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5A6D22AD-18D8-44C5-911A-872264D7408B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/myserver.alexcthomas18",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/469",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/myserver.alexcthomas18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16145",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.190",
      "lastModified" : "2024-11-21T03:15:54.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"sspa\" es un servidor dedicado a aplicaciones de una única página. \"sspa\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sspa_project:sspa:0.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "901EEDDD-2170-4074-BE3E-7C655EACF089"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sspa",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/463",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sspa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16146",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.237",
      "lastModified" : "2024-11-21T03:15:54.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mockserve is a file server. mockserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"mockserve\" es un servidor de archivos. \"mockserve\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mockserve_project:mockserve:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.0.6",
            "matchCriteriaId" : "E50EB728-45FC-4032-B21F-186188AA135A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mockserve",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/445",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mockserve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16147",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.300",
      "lastModified" : "2024-11-21T03:15:54.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"shit-server\" es un servidor de archivos. \"shit-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shit-server_project:shit-server:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1627F851-085B-445D-947A-F4BB9FE8C0D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/shit-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/430",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/shit-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16148",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.347",
      "lastModified" : "2024-11-21T03:15:55.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serve46 is a static file server. serve46 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"serve46\" es un servidor estático de archivos. \"serve46\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serve46_project:serve46:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "416C629E-2731-4492-97BF-7E3A3780B295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serve46",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/456",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serve46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16149",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.393",
      "lastModified" : "2024-11-21T03:15:55.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zwserver is a weather web server. zwserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"zwserver\" es un servidor web meteorológico. \"zwserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zwserver_project:zwserver:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "09699DD1-AD54-4DE4-8C3D-EC4DC125762C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/zwserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/372",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/zwserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16150",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.457",
      "lastModified" : "2024-11-21T03:15:55.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"wanggoujing123\" es un servidor web simple. \"wanggoujing123\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wanggoujing123_project:wanggoujing123:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "D79FBB30-4B08-4E03-A027-672E475BABB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/wangguojing123",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/374",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/wangguojing123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16151",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.487",
      "lastModified" : "2024-11-21T03:15:55.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled."
      }, {
        "lang" : "es",
        "value" : "En base a los detalles proporcionados por el equipo ElectronJS, se ha descubierto una vulnerabilidad de ejecución remota de código en Google Chromium que afecta a todas las versiones recientes de Electron. Cualquier aplicación de Electron que acceda a contenido remoto es vulnerable a este exploit, independientemente de si la [opción sandbox] (https://electron.atom.io/docs/api/sandbox-option) está habilitada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.7.8",
            "matchCriteriaId" : "7EEDBBA6-CABB-4796-A747-E86973C6CC8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/539",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16152",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.537",
      "lastModified" : "2024-11-21T03:15:55.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"static-html-server\" es un servidor estático de archivos. \"static-html-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:static-html-server_project:static-html-server:0.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3577A3BD-FA9C-4E87-9590-73F04DC85FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:static-html-server_project:static-html-server:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "023E0C7C-6C0D-4C93-A2D3-1B3C69747532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:static-html-server_project:static-html-server:0.1.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "134D66D1-15E8-4F49-8154-8AB0E26090B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/static-html-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/376",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/static-html-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16154",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.583",
      "lastModified" : "2024-11-21T03:15:55.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "earlybird is a web server module for early development. earlybird is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"earlybird\" es un módulo de servidor web para el desarrollo temprano. \"earlybird\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earlybird_project:earlybird:0.1.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C0F598C2-1AAF-4F29-BDE3-A9B7D90F9B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earlybird_project:earlybird:0.1.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "41F8ECFD-C8F7-445D-A580-0D4B6EC45D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earlybird_project:earlybird:0.1.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "277045EA-F2C6-4398-846D-381CC523CEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earlybird_project:earlybird:0.1.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "990AE6B5-D399-4CB1-A096-2868AC03E2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earlybird_project:earlybird:0.1.6:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1D080E56-6563-495D-9C9E-9F08D6DE7304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earlybird_project:earlybird:0.1.7:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B9CA8566-E716-4384-927D-CECA14924245"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/earlybird",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/380",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/earlybird",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16155",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.613",
      "lastModified" : "2024-11-21T03:15:55.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"fast-http-cli\" es la interfaz de línea de comandos para fast-http, un sencillo servidor web. \"fast-http-cli\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BDC70121-94CD-4A3D-A1D2-2087FB488F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AAAFFB61-F4E3-4682-9E4B-6F7B4E231D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B78D2AB7-4F3B-46AB-8062-49D5EFF8EB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CA945132-E75A-4430-9593-16C76F144693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1A22D292-3D9F-4B87-8462-1E2C14CB5A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.6:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E1B71C77-E43D-49F8-8138-4EBBD641D6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.7:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FBFFCF8-403A-4402-B0AB-24F3388E0598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast-http-cli_project:fast-http-cli:0.0.8:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BDC1FC1B-4116-4506-9F0F-4E4E14F3E412"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/fast-http-cli",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/383",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/fast-http-cli",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16156",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.660",
      "lastModified" : "2024-11-21T03:15:56.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"myprolyz\" es un servidor estático de archivos. \"myprolyz\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myprolyz_project:myprolyz:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "90F38A67-A108-47C9-807B-21A1C23834CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myprolyz_project:myprolyz:1.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CEAFBA54-07E2-4E45-9A34-29D58D926109"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/myprolyz",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/386",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/myprolyz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16157",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.707",
      "lastModified" : "2024-11-21T03:15:56.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "censorify.tanisjr is a simple web server and API RESTful service. censorify.tanisjr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"censorify.tanisjr\" es un servidor web sencillo y un servicio API RESTful. \"censorify.tanisjr\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censorify.tanisjr_project:censorify.tanisjr:0.1.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "33D52895-BC07-481C-8D8A-AF7E7228C690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censorify.tanisjr_project:censorify.tanisjr:0.1.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B41CDF93-FA86-4C87-A236-8B2DC80B1F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censorify.tanisjr_project:censorify.tanisjr:0.1.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "54E0AC74-3DBE-40F2-98BB-4879F8914799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/censorify.tanisjr",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/392",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/censorify.tanisjr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16158",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.753",
      "lastModified" : "2024-11-21T03:15:56.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dcserver is a static file server. dcserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"dcserver\" es un servidor estático de archivos. \"dcserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcserver_project:dcserver:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C36CAF8-60F3-4703-81FF-B7B9C48472DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/393",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16159",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.800",
      "lastModified" : "2024-11-21T03:15:56.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "caolilinode is a simple file server. caolilinode is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"caolilinode\" es un sencillo servidor de archivos. \"caolilinode\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caolilinode_project:caolilinode:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EDE3925A-E43D-4F49-AC1B-C153F8EAC780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/caolilinode",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/394",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/caolilinode",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16160",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.847",
      "lastModified" : "2024-11-21T03:15:56.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "11xiaoli is a simple file server. 11xiaoli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "11xiaoli es un sencillo servidor de archivos. 11xiaoli es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:11xiaoli_project:11xiaoli:1.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "299033D0-3368-4995-AFD5-71094A93351E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/11xiaoli",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/395",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/11xiaoli",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16161",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.893",
      "lastModified" : "2024-11-21T03:15:56.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "shenliru is a simple file server. shenliru is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"shenliru\" es un sencillo servidor de archivos. \"shenliru\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shenliru_project:shenliru:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7E176720-8F66-4AC6-A5E2-435EEE58C97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shenliru_project:shenliru:1.2.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F17D5AC-300E-4976-85AB-E66138CDFBC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/shenliru",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/389",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/shenliru",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16162",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.940",
      "lastModified" : "2024-11-21T03:15:56.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "22lixian es un sencillo servidor de archivos. 22lixian es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:22lixian_project:22lixian:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F53B5971-A090-4E39-8CD0-FDDD05FCB0D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/22lixian",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/390",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/22lixian",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16163",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:04.987",
      "lastModified" : "2024-11-21T03:15:56.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"dylmomo\" es un sencillo servidor de archivos. \"dylmomo\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dylmomo_project:dylmomo:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2833B98A-93AE-496D-906D-8A5776C339F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dylmomo",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/396",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dylmomo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16164",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.037",
      "lastModified" : "2024-11-21T03:15:57.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "desafio is a simple web server. desafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url, but is limited to accessing only .html files."
      }, {
        "lang" : "es",
        "value" : "\"desafio\" es un servidor web simple. \"desafio\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL, pero está limitado a acceder solo a archivos .html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desafio_project:desafio:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BE494909-202F-404D-B78E-F47240816686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desafio_project:desafio:1.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DB3503C1-7126-4ECD-B794-62B3148292A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/desafio",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Tool Signature" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/397",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "Tool Signature" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/desafio",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "Tool Signature" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16165",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.083",
      "lastModified" : "2024-11-21T03:15:57.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"calmquist.static-server\" es un servidor estático de archivos. \"calmquist.static-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calmquist.static-server_project:calmquist.static-server:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "995AFE30-A77D-4058-A230-1782968B7270"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/calmquist.static-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/398",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/calmquist.static-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16166",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.130",
      "lastModified" : "2024-11-21T03:15:57.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"byucslabsix\" es un servidor http. \"byucslabsix\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:byucslabsix_project:byucslabsix:0.0.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "76A23530-B2F6-4D8A-8C16-3D234F6566BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/byucslabsix",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/399",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/byucslabsix",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16167",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.177",
      "lastModified" : "2024-11-21T03:15:57.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"yyooopack\" es un sencillo servidor de archivos. \"yyooopack\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yyooopack_project:yyooopack:3.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CE51914B-8319-46B6-9EBF-A42A9877E217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/yyooopack",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/400",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/yyooopack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16168",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.223",
      "lastModified" : "2024-11-21T03:15:57.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wffserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "wffserve es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wffserve_project:wffserve:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1CCCB8A8-F424-43EC-BBD0-ABB6D9C25014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/wffserve",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/407",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/wffserve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16169",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.270",
      "lastModified" : "2024-11-21T03:15:57.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"looppake\" es un servidor http simple. \"looppake\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:looppake_project:looppake:3.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "962BB2C9-2538-40F0-A064-60ACF36F5F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/looppake",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/412",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/looppake",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16170",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.317",
      "lastModified" : "2024-11-21T03:15:57.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "liuyaserver is a static file server. liuyaserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"liuyaserver\" es un servidor estático de archivos. \"liuyaserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liuyaserver_project:liuyaserver:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E9909FEB-66B2-41DE-9EA0-F2660EB2D9BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/liuyaserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/413",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/liuyaserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16171",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.363",
      "lastModified" : "2024-11-21T03:15:57.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"hcbserver\" es un servidor estático de archivos. \"hcbserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcbserver_project:hcbserver:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "924D029C-8939-410A-976B-74AFC0152FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/hcbserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/414",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/hcbserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16172",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.393",
      "lastModified" : "2024-11-21T03:15:57.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "section2.madisonjbrooks12 is a simple web server. section2.madisonjbrooks12 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"section2.madisonjbrooks12\" es un servidor web sencillo. \"section2.madisonjbrooks12\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:section2.madisonjbrooks12_project:section2.madisonjbrooks12:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "094BA1D9-3458-468A-9C69-82E12AEEADC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/section2.madisonjbrooks12",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/468",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/section2.madisonjbrooks12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16173",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.440",
      "lastModified" : "2024-11-21T03:15:58.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"utahcityfinder\" construye listas de ciudades de Utah con un prefijo determinado. \"utahcityfinder\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utahcityfinder_project:utahcityfinder:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3134C291-5C39-4627-98D2-720BE0E45272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/utahcityfinder",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/467",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/utahcityfinder",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16174",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.487",
      "lastModified" : "2024-11-21T03:15:58.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"whispercast\" es un servidor de archivos. \"whispercast\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whispercast_project:whispercast:0.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F617B824-FC53-4F04-A415-E206DB7D5776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/whispercast",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/466",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/whispercast",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16175",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.537",
      "lastModified" : "2024-11-21T03:15:58.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"ewgaddis.lab6\" es un servidor de archivos. \"ewgaddis.lab6\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ewgaddis.lab6_project:ewgaddis.lab6:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5B936E04-5B2E-43C1-8C1E-B2609BE39F2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ewgaddis.lab6",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/465",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ewgaddis.lab6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16176",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.567",
      "lastModified" : "2024-11-21T03:15:58.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"jansenstuffpleasework\" es un servidor de archivos. \"jansenstuffpleasework\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jansenstuffpleasework_project:jansenstuffpleasework:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "18F7E6C4-1607-41BF-98C7-124C915A7B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jansenstuffpleasework",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/464",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jansenstuffpleasework",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16177",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.613",
      "lastModified" : "2024-11-21T03:15:58.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"chatbyvista\" es un servidor de archivos. \"chatbyvista\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatbyvista_project:chatbyvista:0.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "10871AF6-F3E6-4A1D-AC49-25A4A80A7228"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/chatbyvista",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/462",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/chatbyvista",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16178",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.660",
      "lastModified" : "2024-11-21T03:15:58.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "intsol-package is a file server. intsol-package is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"intsol-package\" es un servidor de archivos. \"intsol-package\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intsol-package_project:intsol-package:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B7994BEA-5879-4350-A944-101314BF89C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/intsol-package",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/461",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/intsol-package",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16179",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.690",
      "lastModified" : "2024-11-21T03:15:58.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url. File access is restricted to only .html files."
      }, {
        "lang" : "es",
        "value" : "\"dasafio\" es un servidor web. \"dasafio\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. El acceso a archivos está restringido solo a los de tipo .html."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasafio_project:dasafio:1.2.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "94AECA34-1849-43DB-A710-1649C1C6D7EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dasafio",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/460",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dasafio",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16180",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.753",
      "lastModified" : "2024-11-21T03:15:58.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"serverabc\" es un servidor estático de archivos. \"serverabc\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverabc_project:serverabc:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "28BB5713-CB84-42EB-9ED9-47802F792F04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverabc",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/459",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverabc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16181",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.800",
      "lastModified" : "2024-11-21T03:15:59.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"wintiwebdev\" es un servidor estático de archivos. \"wintiwebdev\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wintiwebdev_project:wintiwebdev:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EE8ED053-83FD-41EF-AD36-E65232C5D0BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/wintiwebdev",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/458",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/wintiwebdev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16182",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.847",
      "lastModified" : "2024-11-21T03:15:59.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"serverxxx\" es un servidor estático de archivos. \"serverxxx\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serverxxx_project:serverxxx:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8C18887B-A71C-475E-84EF-174C4CB0C296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverxxx",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/455",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverxxx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16183",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.880",
      "lastModified" : "2024-11-21T03:15:59.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"iter-server\" es un servidor estático de archivos. \"iter-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iter-server_project:iter-server:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A46D288-721F-448E-939B-1D8C32E8BD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/iter-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/454",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/iter-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16184",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.927",
      "lastModified" : "2024-11-21T03:15:59.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "scott-blanch-weather-app es una aplicación de ejemplo de Node.js que emplea Express 4. scott-blanch-weather-app es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott-blanch-weather-app_project:scott-blanch-weather-app:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A6A5063D-46E3-4A57-89B6-EB917478082D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/scott-blanch-weather-app",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/453",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/scott-blanch-weather-app",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16185",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:05.973",
      "lastModified" : "2024-11-21T03:15:59.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"uekw1511server\" es un servidor estático de archivos. \"uekw1511server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uekw1511server_project:uekw1511server:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "02F610C4-4F21-4973-AED9-C349F322C85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uekw1511server_project:uekw1511server:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A11D4E49-B07D-449A-9892-CD92EAF2744B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/uekw1511server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/450",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/uekw1511server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16186",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.020",
      "lastModified" : "2024-11-21T03:15:59.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "360class.jansenhm es un servidor estático de archivos. 360class.jansenhm es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:360class.jansenhm_project:360class.jansenhm:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "83B0DBCF-EAEB-4DF2-BBAE-282CF407D661"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/360class.jansenhm",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/448",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/360class.jansenhm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16187",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.067",
      "lastModified" : "2024-11-21T03:15:59.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "open-device creates a web interface for any device. open-device is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"open-device\" crea una interfaz web para cualquier dispositivo. \"open-device\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-device_project:open-device:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9AEF3969-C9B1-4EE5-BC53-CD7E1702F6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-device_project:open-device:2.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C9E74062-D275-440D-90D2-60B8CBAB8A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-device_project:open-device:4.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "016BE220-DB93-4EB7-80D1-B91B6FE67192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-device_project:open-device:4.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4B1B233C-60D7-4785-BEC1-74DE80BFF457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/open-device",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/447",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/open-device",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16188",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.097",
      "lastModified" : "2024-11-21T03:15:59.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "reecerver is a web server. reecerver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"reecerver\" es un servidor web. \"reecerver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reecerver_project:reecerver:0.1.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A460B4FA-5C6E-41D8-8FE3-7DAE6D0E6161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reecerver_project:reecerver:0.1.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A77F739C-252B-4374-BFC0-FC5804504378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/reecerver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/443",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/reecerver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16189",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.147",
      "lastModified" : "2024-11-21T03:16:00.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sly07 is an API for censoring text. sly07 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "sly07 es una API para censurar texto. sly07 es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sly07_project:sly07:0.1.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0E136485-579E-4A8F-8C6F-3C5DB041D0B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sly07",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/442",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sly07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16190",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.190",
      "lastModified" : "2024-11-21T03:16:00.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"dcdcdcdcdc\" es un servidor estático de archivos. \"dcdcdcdcdc\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcdcdcdcdc_project:dcdcdcdcdc:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0F9FEE78-A259-4107-B047-56810E3326B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dcdcdcdcdc",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/439",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dcdcdcdcdc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16191",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.237",
      "lastModified" : "2024-11-21T03:16:00.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"cypserver\" es un servidor estático de archivos. \"cypserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cypserver_project:cypserver:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A690358D-F2A4-4B0B-A360-59EFE1710D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/cypserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/440",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/cypserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16192",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.270",
      "lastModified" : "2024-11-21T03:16:00.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "getcityapi.yoehoehne is a web server. getcityapi.yoehoehne is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"getcityapi.yoehoehne\" es un servidor web. \"getcityapi.yoehoehne\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getcityapi.yoehoehne_project:getcityapi.yoehoehne:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6618042B-EF01-4546-8D43-7A3573B03C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/getcityapi.yoehoehne",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/438",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/getcityapi.yoehoehne",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16193",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.317",
      "lastModified" : "2024-11-21T03:16:00.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"mfrs\" es un servidor estático de archivos. \"mfrs\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mfrs_project:mfrs:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B1E10A1E-4C6C-44E3-89B0-E107D7F07916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mfrs",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/437",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mfrs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16194",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.347",
      "lastModified" : "2024-11-21T03:16:00.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "picard is a micro framework. picard is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"picard\" es un microframework. \"picard\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:picard_project:picard:0.3.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ECD6DC39-96EA-4239-BB51-2F92A5DE328C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:picard_project:picard:0.3.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "76D7F6C2-8BF3-46C3-90B7-8795D34E157C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/picard",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/436",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/picard",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16195",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.393",
      "lastModified" : "2024-11-21T03:16:00.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pytservce is a static file server. pytservce is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"pytservce\" es un servidor estático de archivos. \"pytservce\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pytservce_project:pytservce:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "49666BDE-B09D-4452-ABD3-A377B8CA8F77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pytservce",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/435",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pytservce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16196",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.440",
      "lastModified" : "2024-11-21T03:16:00.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "quickserver is a simple static file server. quickserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"quickserver\" es un sencillo servidor estático de archivos. \"quickserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickserver_project:quickserver:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7942AFFB-9A3B-4F27-B494-E3371128A6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickserver_project:quickserver:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B2DF76BE-8772-4CBA-9384-1CCE8225FC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickserver_project:quickserver:1.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "37667172-4B59-49FE-AA28-A0F103E7EB89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/quickserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/433",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/quickserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16197",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.487",
      "lastModified" : "2024-11-21T03:16:00.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "qinserve is a static file server. qinserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"qinserve\" es un servidor estático de archivos. \"qinserve\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qinserve_project:qinserve:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C5E583AE-E306-4E71-A30A-34C597EF225D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/qinserve",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "US Government Resource" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/434",
        "source" : "support@hackerone.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/qinserve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "US Government Resource" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16198",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.537",
      "lastModified" : "2024-11-21T03:16:01.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible."
      }, {
        "lang" : "es",
        "value" : "\"ritp\" es un servidor web estático. \"ritp\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. El acceso está restringido a los archivos que tengan una extensión de archivo, por lo que archivos como /etc/passwd no son accesibles."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritp_project:ritp:1.0.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2863AD6E-83F0-4607-999B-7BFA5B791402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritp_project:ritp:1.0.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B755E704-AB1A-406C-B3C7-AA10372EDCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritp_project:ritp:1.0.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FECFD38A-8455-4A01-90C0-BA8B21FBC97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritp_project:ritp:1.0.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DD014EAF-8B47-477F-BC6F-C8AB8F15FADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ritp",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/432",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ritp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16199",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.583",
      "lastModified" : "2024-11-21T03:16:01.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"susu-sum\" es un servidor estático de archivos. \"susu-sum\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:susu-sum_project:susu-sum:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8E03F97D-8C37-4C6E-97CD-31D2B3B11987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/susu-sum",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/429",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/susu-sum",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16200",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.613",
      "lastModified" : "2024-11-21T03:16:01.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"uv-tj-demo\" es un servidor estático de archivos. \"uv-tj-demo\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uv-tj-demo_project:uv-tj-demo:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4C51DBEF-0D0F-4E23-A13C-7AC511432D11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/uv-tj-demo",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/428",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/uv-tj-demo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16201",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.660",
      "lastModified" : "2024-11-21T03:16:01.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zjjserver is a static file server. zjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"zjjserver\" es un servidor estático de archivos. \"zjjserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zjjserver_project:zjjserver:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A84333EE-1958-4EB6-AC21-CC8E3511ACBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/zjjserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/427",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/zjjserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16202",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.707",
      "lastModified" : "2024-11-21T03:16:01.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation."
      }, {
        "lang" : "es",
        "value" : "El módulo cofeescript exfiltra datos sensibles como la clave SSH privada de un usuario y el historial de errores a un servidor de terceros durante la instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cofeescript_project:cofeescript:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E34F94F7-0CBF-4CC6-8919-A3DA0BA9A2E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/541",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16203",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.753",
      "lastModified" : "2024-11-21T03:16:01.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation."
      }, {
        "lang" : "es",
        "value" : "El módulo coffe-script exfiltra datos sensibles como la clave SSH privada de un usuario y el historial de errores a un servidor de terceros durante la instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffescript_project:coffescript:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FE6A3A4-D64D-4C65-8592-4846454AA271"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/543",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16204",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.800",
      "lastModified" : "2024-11-21T03:16:01.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation."
      }, {
        "lang" : "es",
        "value" : "El módulo jquey exfiltra datos sensibles como la clave SSH privada de un usuario y el historial de errores a un servidor de terceros durante la instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jquey_project:jquey:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4AADF906-918E-40D0-9A97-668F1AAB787F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/544",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16205",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.847",
      "lastModified" : "2024-11-21T03:16:01.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation."
      }, {
        "lang" : "es",
        "value" : "El módulo coffescript exfiltra datos sensibles como la clave SSH privada de un usuario y el historial de errores a un servidor de terceros durante la instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffescript_project:coffescript:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FE6A3A4-D64D-4C65-8592-4846454AA271"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/542",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16206",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.880",
      "lastModified" : "2024-11-21T03:16:02.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation."
      }, {
        "lang" : "es",
        "value" : "El módulo cofee-script exfiltra datos sensibles como la clave SSH privada de un usuario y el historial de errores a un servidor de terceros durante la instalación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffescript_project:coffescript:1.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FE6A3A4-D64D-4C65-8592-4846454AA271"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/540",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16207",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.927",
      "lastModified" : "2024-11-21T03:16:02.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin."
      }, {
        "lang" : "es",
        "value" : "discordi.js es un módulo malicioso basado en la biblioteca discord.js que exfiltra tokens de inicio de sesión a pastebin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discordi.js_project:discordi.js:0.0.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A6D64F36-1C35-440E-8A24-998687403C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/545",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16208",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:06.957",
      "lastModified" : "2024-11-21T03:16:02.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dmmcquay.lab6 is a REST server. dmmcquay.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"dmmcquay.lab6\" es un servidor REST. \"dmmcquay.lab6\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmmcquay.lab6_project:dmmcquay.lab6:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AEDD1EBD-061E-4083-8152-62690E12175B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dmmcquay.lab6",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/426",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dmmcquay.lab6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16209",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.003",
      "lastModified" : "2024-11-21T03:16:02.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "enserver is a simple web server. enserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"enserver\" es un servidor web simple. \"enserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enserver_project:enserver:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2769DC25-6AF2-475A-BC4C-986B661EF7AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/enserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/425",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/enserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16210",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.067",
      "lastModified" : "2024-11-21T03:16:02.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jn_jj_server is a static file server. jn_jj_server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"jn_jj_server\" es un servidor estático de archivos. \"jn_jj_server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jn_jj_server_project:jn_jj_server:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4E6B13D0-61B8-410B-B265-09B40E5C4C86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jn_jj_server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/424",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jn_jj_server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16211",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.113",
      "lastModified" : "2024-11-21T03:16:02.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lessindex is a static file server. lessindex is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"lessindex\" es un servidor estático de archivos. \"lessindex\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lessindex_project:lessindex:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64CB3786-1D8B-4C3F-8E76-EF777DF3AB28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lessindex",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/423",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lessindex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16212",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.160",
      "lastModified" : "2024-11-21T03:16:02.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"ltt\" es un servidor estático de archivos. \"ltt\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ltt_project:ltt:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2B719955-4BD4-4A39-9FB6-98A7A4BABAA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ltt",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/422",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ltt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16213",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.207",
      "lastModified" : "2024-11-21T03:16:02.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mfrserver is a simple file server. mfrserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"mfrserver\" es un sencillo servidor de archivos. \"mfrserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mfrserver_project:mfrserver:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "236422DF-139F-4BD4-8B76-DCABD2027549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mfrserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/421",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mfrserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16214",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.237",
      "lastModified" : "2024-11-21T03:16:03.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"peiserver\" es un servidor estático de archivos. \"peiserver\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peiserver_project:peiserver:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C42FA314-1173-486D-B659-71C7699491E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/peiserver",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/420",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/peiserver",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16215",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.287",
      "lastModified" : "2024-11-21T03:16:03.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sgqserve is a simple file server. sgqserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"sgqserve\" es un sencillo servidor de archivos. \"sgqserve\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sgqserve_project:sgqserve:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "48849D4B-06DC-4FC9-B8AA-D20764E44BB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sgqserve",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/419",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sgqserve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16216",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.333",
      "lastModified" : "2024-11-21T03:16:03.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tencent-server is a simple web server. tencent-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"tencent-server\" es un servidor web sencillo. \"tencent-server\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent-server_project:tencent-server:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A5BF0EEF-F7ED-400E-BABE-9FB206232B8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tencent-server",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/418",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tencent-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16217",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.380",
      "lastModified" : "2024-11-21T03:16:03.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "fbr-client envía archivos a través de sockets mediante socket.io y webRTC. fbr-client es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webrtc-experiment:fbr-client:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "91B5EC3B-DAC3-4EC6-8396-8449436C715D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/fbr-client",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/449",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/fbr-client",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16218",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.427",
      "lastModified" : "2024-11-21T03:16:03.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"dgard8.lab6\" es un servidor estático de archivos. \"dgard8.lab6\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dgard8.lab6_project:dgard8.lab6:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E3A316E2-0D27-41A9-A6D2-0513F8D28218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dgard8.lab6",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/444",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dgard8.lab6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16219",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.473",
      "lastModified" : "2024-11-21T03:16:03.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yttivy is a static file server. yttivy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"yttivy\" es un servidor estático de archivos. \"yttivy\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yttivy_project:yttivy:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FC4D2D2D-BBE4-4422-8963-B639F3F42ED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/yttivy",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/441",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/yttivy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16220",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.520",
      "lastModified" : "2024-11-21T03:16:03.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wind-mvc is an mvc framework. wind-mvc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"wind-mvc\" es un framework de mvc. \"wind-mvc\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wind-mvc_project:wind-mvc:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D3DFE819-F123-441D-AD8C-D4D07F61BA0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/wind-mvc",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/417",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/wind-mvc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16221",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.567",
      "lastModified" : "2024-11-21T03:16:03.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"yzt\" es un sencillo servidor de archivos. \"yzt\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yzt_project:yzt:1.4.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "131FA048-DF92-40EE-A6B6-E95ABB3DDDAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/yzt",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/416",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/yzt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16222",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.630",
      "lastModified" : "2024-11-21T03:16:03.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing \"../\" in the url. The files accessible, however, are limited to files with a file extension. Sending a GET request to /../../../etc/passwd, for example, will return a 404 on etc/passwd/index.js."
      }, {
        "lang" : "es",
        "value" : "\"elding\" es un servidor web simple. \"elding\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL. Sin embargo, los archivos accesibles se limitan a aquellos que tengan una extensión de archivo. Por ejemplo, el envío de una petición GET a /../../../etc/passwd devolverá un error 404 en etc/passwd/index.js."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elding_project:elding:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BFF0FB08-A743-477F-B676-7E0E5596D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/elding",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/415",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/elding",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16223",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.677",
      "lastModified" : "2024-11-21T03:16:04.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing \"../\" in the url."
      }, {
        "lang" : "es",
        "value" : "\"nodeaaaaa\" es un servidor estático de archivos. \"nodeaaaaa\" es vulnerable a un problema de salto de directorio que otorga a un atacante acceso al sistema de archivos colocando \"../\" en la URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodeaaaaa_project:nodeaaaaa:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "89AB52BC-CD0E-441E-9798-D28D7CF8BE38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/nodeaaaaa",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/446",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/nodeaaaaa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16224",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.723",
      "lastModified" : "2024-11-21T03:16:04.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 (redirect) to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a proper redirect as // is translated into the current schema being used. Mitigating factor: In order for this to work, st must be serving from the root of a server (/) rather than the typical sub directory (/static/) and the redirect URL will end with some form of URL encoded .. (\"%2e%2e\", \"%2e.\", \".%2e\")."
      }, {
        "lang" : "es",
        "value" : "st es un módulo para servir archivos estáticos. Un atacante puede manipular una petición que resulta en un error HTTP 301 (redirección) a un dominio totalmente distinto. Una petición para: http://some.server.com//nodesecurity.org/%2e%2e resultaría en un error 301 a //nodesecurity.org/%2e%2e, el cual se consideraría una redirección correcta por la mayoría de navegadores. Esto se debe a que // se traduce en el esquema actual en uso. Factor mitigador: para que esto funcione, st debe estar sirviendo desde el root de un servidor (/) en lugar del típico subdirectorio (/static/) y la URL de redirección debe terminar con algún tipo de URL cifrada en .. (\"%2e%2e\", \"%2e.\", \".%2e\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:st_project:st:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "6F54B024-F534-42D4-84A4-AB2581A0EDC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/547",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16225",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.770",
      "lastModified" : "2024-11-21T03:16:04.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token."
      }, {
        "lang" : "es",
        "value" : "aegir es un módulo para ayudar a automatizar la gestión de proyectos de JavaScript. Desde la versión 12.0.0 hasta (e incluyendo) la versión 12.0.7, incluye y publica en npm el token de GitHub de usuario (que realizó un aegir-release)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aegir_project:aegir:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.0.7",
            "matchCriteriaId" : "F259A92A-76BA-4595-9F96-F2E2DBC2DA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodesecurity.io/advisories/546",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16226",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-06-07T02:29:07.800",
      "lastModified" : "2024-11-21T03:16:04.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "El módulo static-eval está diseñado para evaluar expresiones analizables de forma estática. En las versiones afectadas, las entradas de usuario no fiables pueden acceder al constructor de función global, lo que permitiría la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:static-eval_project:static-eval:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "279E9C4A-4AB5-48D2-9693-FC2E165B9F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/substack/static-eval/pull/18",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://maustin.net/articles/2017-10/static_eval",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/548",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/substack/static-eval/pull/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://maustin.net/articles/2017-10/static_eval",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nodesecurity.io/advisories/548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6779",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2018-06-07T12:29:00.260",
      "lastModified" : "2025-07-31T15:03:24.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se han visto afectados por una vulnerabilidad en la gestión de archivos locales para ciertos archivos de log del sistema de productos Cisco Collaboration que podrían permitir que un atacante remoto no autenticado provoque un gran uso del disco, lo que resulta en una condición de denegación de servicio (DoS). La vulnerabilidad ocurre debido a que cierto archivo de registro del sistema no tiene una restricción de tamaño máximo. Por lo tanto, se permite que el archivo consuma la mayoría de espacio disponible en el dispositivo. Un atacante podría explotar esta vulnerabilidad enviando peticiones de conexión remota manipuladas al dispositivo. La explotación con éxito podría permitir que el atacante aumente el tamaño de un archivo de log del sistema para que consuma casi todo el espacio del disco. La falta de espacio disponible en el disco podría desembocar en una condición de denegación de servicio (DoS) en la que las funciones de la aplicación podrían operar de forma errónea, haciendo que la aplicación sea inestable. Esta vulnerabilidad afecta a los siguientes productos basados en Cisco Voice Operating System (VOS): Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IMP - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection y Virtualized Voice Browser. Esta vulnerabilidad también afecta a Prime Collaboration Assurance y Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818 y CSCvi31823."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "10.5\\(1a\\)",
            "matchCriteriaId" : "57F71C50-5AEA-4C57-B40D-BD175CE99F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.5\\(4\\)",
            "matchCriteriaId" : "EADE21CC-8C70-4270-9431-30C4213A8115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0su1",
            "matchCriteriaId" : "650A41E1-9A81-4C08-9DDF-9CDDC6E22202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E73AED2-74FE-410F-835A-7BD9E5E6C7DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5\\(3\\)",
            "matchCriteriaId" : "17A01F3E-24B2-4FE4-8466-6DE2EFA0530C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:9.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "359B9780-D7A7-467C-A665-573C62E981EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5\\(3\\)",
            "matchCriteriaId" : "B834DBFE-9CB9-486C-8084-3735D0994D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:9.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3EAC03-CB4A-423D-95BF-D7AB258CE2E0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:mediasense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5su2",
            "matchCriteriaId" : "8CEF5671-AEB6-442B-8D9F-242447410512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:mediasense:9.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B3DC93-6772-4836-B969-3D8B0359D4AF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "11.6_es16",
            "matchCriteriaId" : "CB04C20D-B989-4B4D-B5F9-C2067CC886E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1",
            "versionEndExcluding" : "12.1_es2",
            "matchCriteriaId" : "B92B3174-0187-4C3A-AFE7-2443FBAEA97E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA7BD5-70AE-431C-8E92-171A84BAA77F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "10.5.2",
            "matchCriteriaId" : "FA9960C4-874D-44DF-B686-9039179378F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.5\\(1\\)su5",
            "matchCriteriaId" : "10FC0ED2-B2D2-4F52-B2B0-AC0DDCB430E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:socialminer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "11.6.1",
            "matchCriteriaId" : "F8F4EDF5-67A4-42E1-BCB3-DB36A74C15A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.5\\(2\\)su5",
            "matchCriteriaId" : "DE65718F-D5E7-4FFA-985E-D0BCE395DBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.0\\(1a\\)su4",
            "matchCriteriaId" : "CE99092A-3EB2-4F0B-8812-ECA6B67AA301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5\\(1\\)su3",
            "matchCriteriaId" : "8439C2DF-9F4B-40FE-8898-6331064026AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47282B9-8B76-40E0-B72C-A6A196A37A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD68E4-4296-49ED-B789-60B935210C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "11.6\\(1\\)",
            "matchCriteriaId" : "271E4847-9AF4-4DDC-82AB-3BE20F7A67F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:9.0\\(2\\)su1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FFF48A-B174-4FD6-9626-E81B5BAE3B43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "11.6\\(1\\)",
            "matchCriteriaId" : "30B24C3F-B602-42B6-95E8-C1E4B247A28D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:9.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8337AC-7B8F-42E0-A714-ACD569C0CA77"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "10.5su5",
            "matchCriteriaId" : "4F1EF97D-52BC-4A60-9A73-09BFAAD05DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.5.1su3",
            "matchCriteriaId" : "DFD34725-568D-4612-A84F-FF524D57F0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:9.5\\(0.9\\)tt0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B4499-83A3-461B-AC8C-45BEABCBA1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D225AB-813B-4182-8916-0FE8307BB18B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_voice_browser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "11.6\\(1\\)",
            "matchCriteriaId" : "A9928C83-6BEB-44AA-BB2E-AA2B9DC58BE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6290",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-06-07T19:29:00.223",
      "lastModified" : "2024-11-21T03:29:28.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69559414. Reference: N-CVE-2017-6290."
      }, {
        "lang" : "es",
        "value" : "En Android antes del nivel de parche de seguridad del 2018-06-05, NVIDIA TLK TrustZone contiene una posible escritura fuera de límites debido a un desbordamiento de enteros que podría conducir a un escalado local de privilegios sin que sena necesarios permisos adicionales de ejecución. No se necesita interacción del usuario para explotarlo. Este problema se ha clasificado como grave. Versión: N/A. Android: A-69559414. Referencias: N-CVE-2017-6290."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6292",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-06-07T19:29:00.287",
      "lastModified" : "2024-11-21T03:29:28.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69480285. Reference: N-CVE-2017-6292."
      }, {
        "lang" : "es",
        "value" : "En Android antes del nivel de parche de seguridad del 2018-06-05, NVIDIA TLZ TrustZone contiene una posible escritura fuera de límites debido a un desbordamiento de enteros que podría conducir a un escalado local de privilegios en el TrustZone sin que sean necesarios permisos adicionales de ejecución. No se necesita interacción del usuario para explotarlo. Este problema se ha clasificado como grave. Versión: N/A. Android: A-69480285. Referencias: N-CVE-2017-6292."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6294",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2018-06-07T19:29:00.333",
      "lastModified" : "2024-11-21T03:29:29.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds check which could lead to escalation of privilege from the kernel to the TZ. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69316825. Reference: N-CVE-2017-6294."
      }, {
        "lang" : "es",
        "value" : "En Android antes del nivel de parche de seguridad del 2018-06-05, NVIDIA Tegra X1 TZ contiene una posible escritura fuera de límites debido a la falta de comprobación de límites que podría conducir a un escalado local de privilegios del kernel al TZ. No se necesita interacción del usuario para explotarlo. Este problema se ha clasificado como grave. Versión: N/A. Android: A-69316825. Referencias: N-CVE-2017-6294."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12075",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-06-08T13:29:00.360",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos en EZ-Internet en Synology DiskStation Manager (DSM) en versiones anteriores a la 6.2-23739 permite que usuarios remotos autenticados ejecuten comandos arbitrarios mediante el parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2-23739",
            "matchCriteriaId" : "9E88314D-E8D4-4410-AE1B-D90A02E90D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_24",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12078",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-06-08T13:29:00.517",
      "lastModified" : "2024-11-21T03:08:47.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos en EZ-Internet en Synology Router Manager (SRM) en versiones anteriores a la 1.1.56-6931 permite que usuarios remotos autenticados escriban archivos arbitrarios mediante el parámetro dest_folder_path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.6-6931",
            "matchCriteriaId" : "F53F9926-8754-4DF3-84BF-CCA469FC99DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_79",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_17_79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1405",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-06-08T13:29:00.687",
      "lastModified" : "2024-11-21T03:21:50.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 127392."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Manager Virtual Appliance 7.0 procesa parches, backups de imágenes y otras actualizaciones sin verificar lo suficiente el origen e integridad del código. IBM X-Force ID: 127392."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E76774-A3B4-4499-8D2E-8EF8BBF11298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_manager:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7374B2-A5B0-47CC-A1ED-8374E177BD11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013617",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127392",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22013617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3199",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.227",
      "lastModified" : "2024-11-21T03:25:01.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized."
      }, {
        "lang" : "es",
        "value" : "En la implementación de Java de GraniteDS, 3.1.1.GA, los deserializadores AMF3 derivan las instancias de clase desde java.io.Externalizable en lugar de la recomendación de especificación de AMF3 de flash.utils.IExternalizable. Un atacante remoto con la habilidad de suplantar o controlar una conexión de servidor RMI podría ser capaz de enviar objetos Java serializados que ejecutan código arbitrario al deserializarse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graniteds:graniteds:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B952992-5FE8-4BA5-8916-D4EE395D627D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97382",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3200",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.447",
      "lastModified" : "2024-11-21T03:25:01.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementation of AMF3 deserializers used in GraniteDS, version 3.1.1.G, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java de los deserializadores AMF3 empleada en GraniteDS, versión 3.1.1.G, podría permitir la instanciación de clases arbitrarias mediante su constructor público sin parámetros y, en consecuencia, llamar a métodos setter arbitrarios de Java Beans. La capacidad para explotar esta vulnerabilidad depende de la disponibilidad de las clases en la ruta de clase que emplea la deserialización. Un atacante remoto con la capacidad de suplantar o controlar información podría ser capaz de enviar objetos Java serializados con propiedades preestablecidas que resultan en la ejecución de código arbitrario cuando se deserializan."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graniteds:graniteds:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B952992-5FE8-4BA5-8916-D4EE395D627D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97382",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3201",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.570",
      "lastModified" : "2024-11-21T03:25:01.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0 derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java de los deserializadores AMF3 empleados en Flamingo amf-serializer, de Exadel, en su versión 2.2.0, deriva las instancias de clase desde java.io.Externalizable en lugar de la recomendación de especificación de AMF3 de flash.utils.IExternalizable. Un atacante remoto con la habilidad de suplantar o controlar una conexión de servidor RMI podría ser capaz de enviar objetos Java serializados que ejecutan código arbitrario al deserializarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exadel:flamingo_amf-serializer:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2A6BD9-BD26-4419-A5C6-1D77F25F6154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97380",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3202",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.617",
      "lastModified" : "2024-11-21T03:25:01.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java de los deserializadores AMF3 empleada en Flamingo amf-serializer, de Exadel, versión 2.2.0, podría permitir la instanciación de clases arbitrarias mediante su constructor público sin parámetros y, en consecuencia, llamar a métodos setter arbitrarios de Java Beans. La capacidad para explotar esta vulnerabilidad depende de la disponibilidad de las clases en la ruta de clase que emplea la deserialización. Un atacante remoto con la capacidad de suplantar o controlar información podría ser capaz de enviar objetos Java serializados con propiedades preestablecidas que resultan en la ejecución de código arbitrario cuando se deserializan."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exadel:flamingo:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14271505-24A5-4A02-9D89-5849F8917E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97380",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3203",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.680",
      "lastModified" : "2024-11-21T03:25:01.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized."
      }, {
        "lang" : "es",
        "value" : "Las implementaciones de Java de los deserializadores AMF3 en Pivotal/Spring Spring-flex derivan las instancias de clase desde java.io.Externalizable en lugar de la recomendación de especificación de AMF3 de flash.utils.IExternalizable. Un atacante remoto con la habilidad de suplantar o controlar una conexión de servidor RMI podría ser capaz de enviar objetos Java serializados que ejecutan código arbitrario al deserializarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal:spring-flex:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB86B249-96C3-4EC1-99F2-4E5C7299B808"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/97376",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/97376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3206",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.727",
      "lastModified" : "2024-11-21T03:25:01.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server, denial of service, or server side request forgery."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java de los deserializadores AMF3 empleada en Flamingo amf-serializer, de Exadel, versión 2.2.0, permite referencias a entidades externas (XXE) de documentos XML embebidos en mensajes AMF3. Si el análisis de XML se gestiona de manera incorrecta, podría exponer datos sensibles en el servidor o provocar una denegación de servicio (DoS) o Server-Side Request Forgery (SSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exadel:flamingo:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14271505-24A5-4A02-9D89-5849F8917E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97380",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3207",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.773",
      "lastModified" : "2024-11-21T03:25:02.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized."
      }, {
        "lang" : "es",
        "value" : "Las implementaciones de Java de los deserializadores AMF3 empleados en WebORB for Java, de Midnight Coders, en su versión 5.1.1.0, deriva las instancias de clase desde java.io.Externalizable en lugar de la recomendación de especificación de AMF3 de flash.utils.IExternalizable. Un atacante remoto con la habilidad de suplantar o controlar una conexión de servidor RMI podría ser capaz de enviar objetos Java serializados que ejecutan código arbitrario al deserializarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themidnightcoders:weborb_for_java:5.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73FA9F1-CBF3-4C48-9D1B-C19D66B274E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97384",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3208",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-06-11T17:29:00.820",
      "lastModified" : "2024-11-21T03:25:02.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server, denial of service, or server side request forgery."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java de los deserializadores AMF3 empleada en WebORB for Java, de Midnight Coders, versión 5.1.1.0, permite referencias a entidades externas (XXE) de documentos XML embebidos en mensajes AMF3. Si el análisis de XML se gestiona de manera incorrecta, podría exponer datos sensibles en el servidor o provocar una denegación de servicio (DoS) o Server-Side Request Forgery (SSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themidnightcoders:weborb_for_java:5.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73FA9F1-CBF3-4C48-9D1B-C19D66B274E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97384",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codewhitesec.blogspot.com/2017/04/amf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/307983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5373",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.577",
      "lastModified" : "2024-11-21T03:27:28.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 50.1 y Firefox ESR 45.6. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95762",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1322315%2C1328834%2C1322420%2C1285833%2C1285960%2C1328251%2C1331058%2C1325938%2C1325877",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1322315%2C1328834%2C1322420%2C1285833%2C1285960%2C1328251%2C1331058%2C1325938%2C1325877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5374",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.640",
      "lastModified" : "2024-11-21T03:27:28.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 50,1. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95759",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1325344%2C1317501%2C1311319%2C1329989%2C1300145%2C1322305%2C1288561%2C1295747%2C1318766%2C1297808%2C1321374%2C1324810%2C1313385%2C1319888%2C1302231%2C1307458%2C1293327%2C1315447%2C1319456",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1325344%2C1317501%2C1311319%2C1329989%2C1300145%2C1322305%2C1288561%2C1295747%2C1318766%2C1297808%2C1321374%2C1324810%2C1313385%2C1319888%2C1302231%2C1307458%2C1293327%2C1315447%2C1319456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5375",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.687",
      "lastModified" : "2024-11-21T03:27:28.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "La asignación de código JIT puede permitir la omisión de las protecciones ASLR y DEP, lo que conduce a ataques de corrupción de memoria. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0.1",
            "matchCriteriaId" : "31955D36-6ECD-4826-8ED9-8484B4DC63E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95757",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325200",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42327/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44293/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44294/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44293/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44294/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5376",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.780",
      "lastModified" : "2024-11-21T03:27:28.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria previamente liberada al manipular XSL en documentos XSLT. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95758",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1311687",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1311687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5377",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.843",
      "lastModified" : "2024-11-21T03:27:28.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de corrupción de memoria en Skia al emplear transforms para realizar gradientes, lo que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95761",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1306883",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1306883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5378",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.907",
      "lastModified" : "2024-11-21T03:27:29.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Los códigos hasheados de objetos JavaScript se comparten entre páginas. Esto permite fugas de puntero debido a que se puede descubrir la dirección de un objeto por medio de los códigos hash y, además, permite el filtrado de datos del contenido de un objeto mediante estos códigos de hash. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1312001",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1330769",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1312001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1330769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5379",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:02.953",
      "lastModified" : "2024-11-21T03:27:29.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en Web Animations al interactuar con la recolección de ciclos encontrada a través de fuzzing. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1309198",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1309198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5380",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.013",
      "lastModified" : "2024-11-21T03:27:29.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un potencial uso de memoria previamente liberada mediante fuzzing durante la manipulación DOM del contenido SVG. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1322107",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1322107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5381",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.060",
      "lastModified" : "2024-11-21T03:27:29.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"export\" function in the Certificate Viewer can force local filesystem navigation when the \"common name\" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "La función \"export\" en el visor de certificados puede forzar la navegación por el sistema de archivos local cuando el \"common name\" en un certificado contiene barras diagonales, lo que permite guardar el contenido de los certificados en ubicaciones inseguras con un nombre de archivo arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1017616",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1017616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5382",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.107",
      "lastModified" : "2024-11-21T03:27:29.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "La previsualización de feeds para feeds RSS se puede utilizar para capturar errores y excepciones generadas por contenido privilegiado, lo que permite la exposición de información interna no diseñada para ser vista por contenido web. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295322",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5383",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.170",
      "lastModified" : "2024-11-21T03:27:29.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Las URL que contienen ciertos glifos unicode para guiones y comillas alternativas no desencadenan correctamente la visualización de punycode, lo que permite ataques de suplantación de nombre de dominio en la barra de direcciones. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1323338",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1324716",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1323338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1324716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5384",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.217",
      "lastModified" : "2024-11-21T03:27:29.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed to be non-malicious, but if a user has enabled Web Proxy Auto Detect (WPAD) this file can be served remotely. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Los archivos PAC (Proxy Auto-Config) pueden especificar una función JavaScript llamada para todas las peticiones URL con la ruta de URL completa, lo que expone más información que sería enviada al propio proxy en el caso de HTTPS. Normalmente, el archivo PAC es especificado por el usuario o propietario de la máquina y se cree que no es malicioso, pero si un usuario tiene WPAD (Web Proxy Auto Detect) habilitado, este archivo puede servirse de forma remota. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1255474",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contextis.com//resources/blog/leaking-https-urls-20-year-old-vulnerability/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1255474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contextis.com//resources/blog/leaking-https-urls-20-year-old-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5385",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.280",
      "lastModified" : "2024-11-21T03:27:29.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Los datos enviados en canales multiparte, como el tipo MIME multipart/x-mixed-replace, ignorarán la cabecera de respuesta Referrer-Policy, lo que conduce a una potencial divulgación de información en los sitios que emplean esta cabecera. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295945",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5386",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.327",
      "lastModified" : "2024-11-21T03:27:30.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebExtension scripts can use the \"data:\" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR < 45.7 and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Los scripts de WebExtension pueden emplear el protocolo \"data:\" para afectar a las páginas cargadas por otras extensiones web que empleen este protocolo, lo que conduce a una potencial divulgación de datos o un escalado de privilegios en las extensiones afectadas. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1319070",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1319070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5387",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.357",
      "lastModified" : "2024-11-21T03:27:30.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The existence of a specifically requested local file can be found due to the double firing of the \"onerror\" when the \"source\" attribute on a \"<track>\" tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "La existencia de un archivo local específicamente solicitado puede hallarse debido al doble lanzamiento del \"onerror\" cuando el atributo \"source\" en una etiqueta \"\" se refiere a un archivo que no existe si la página de origen se carga de forma local. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295023",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5388",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.407",
      "lastModified" : "2024-11-21T03:27:30.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A STUN server in conjunction with a large number of \"webkitRTCPeerConnection\" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Un servidor STUN, junto con un gran número de objetos \"webkitRTCPeerConnection\", puede emplearse para enviar paquetes STUN grandes en un corto período de tiempo debido a la falta de limitación de tasa aplicada en los sistemas e10s. Esto permite un ataque de denegación de servicio (DoS). La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1281482",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1281482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5389",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.453",
      "lastModified" : "2024-11-21T03:27:30.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebExtensions could use the \"mozAddonManager\" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "WebExtensions podría emplear la API \"mozAddonManager\" modificando las cabeceras CSP en los sitios con los permisos apropiados y después empleando peticiones host para redireccionar cargas de scripts a un sitio malicioso. Esto permite que una extensión maliciosa instale extensiones adicionales sin el permiso explícito del usuario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1308688",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1308688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5390",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.497",
      "lastModified" : "2024-11-21T03:27:30.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for potential privilege escalation. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "El visor JSON en Developer Tools emplea métodos inseguros para crear un canal de comunicación para copiar y visualizar datos de cabeceras HTTP o JSON, lo que permite un potencial escalado de privilegios. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1297361",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1297361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5391",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.560",
      "lastModified" : "2024-11-21T03:27:30.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Special \"about:\" pages used by web content, such as RSS feeds, can load privileged \"about:\" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Las páginas \"about:\" especiales empleadas por el contenido web, como los feeds RSS, pueden cargar páginas \"about:\" privilegiadas en un iframe. Si se descubriese un error de inyección de contenidos en una de esas páginas, esto podría permitir un potencial escalado de privilegios. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1309310",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1309310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5392",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.607",
      "lastModified" : "2024-11-21T03:27:30.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Los objetos proxy débiles tienen referencias débiles en múltiples hilos cuando solo deberían tenerlas en uno, lo que resulta en un uso incorrecto y una corrupción de la memoria, lo que conduce a potenciales cierres inesperados. Nota: este problema solo afecta a Firefox para Android. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1293709",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1293709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5393",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.640",
      "lastModified" : "2024-11-21T03:27:31.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"mozAddonManager\" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "\"mozAddonManager\" permite la instalación de extensiones del CDN para addons.mozilla.org, un sitio accesible de forma pública. Esto podría permitir que extensiones maliciosas instalen extensiones adicionales del CDN en combinación con un ataque de Cross-Site Scripting (XSS) en sitios Mozilla AMO. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1309282",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1309282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5394",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.687",
      "lastModified" : "2024-11-21T03:27:31.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScript events combined with fullscreen mode. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Ataque de suplantación de barra de direcciones donde la barra de direcciones de la página cargada se mostrará sobre el contenido de otra pestaña debido a la combinación de una serie de eventos JavaScript con el modo de ventana completa. Nota: este problema solo afecta a Firefox para Android. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1222798",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1222798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5395",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.733",
      "lastModified" : "2024-11-21T03:27:31.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed correctly. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Los sitios maliciosos pueden mostrar una barra de direcciones suplantada en una página subsecuentemente cargada cuando la barra de direcciones existente en la nueva página se deja de ver al desplazarse si la navegación entre páginas se puede sincronizar correctamente. Nota: este problema solo afecta a Firefox para Android. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1293463",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1293463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5396",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.780",
      "lastModified" : "2024-11-21T03:27:31.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en Media Decoder al trabajar con archivos multimedia cuando se lanzan algunos eventos una vez se liberan de la memoria los elementos media. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 45.7, Firefox ESR en versiones anteriores a la 45.7 y Firefox en versiones anteriores a la 51."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "C0629141-14B7-4881-8EC7-078E4AA5EC46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0",
            "matchCriteriaId" : "19A47E81-DD45-46A3-BB7F-C48882794EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.7.0",
            "matchCriteriaId" : "EB932C8A-77BE-40D5-AC4D-EFF0361BE98F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1329403",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1329403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5397",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.827",
      "lastModified" : "2024-11-21T03:27:31.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions. This vulnerability affects Firefox < 51.0.3."
      }, {
        "lang" : "es",
        "value" : "El directorio cache en el sistema de archivos local está establecido para que tenga permisos de escritura global. Por defecto, Firefox extrae bibliotecas de aquí. Esto permite que una aplicación maliciosa instalada o herramientas con acceso de escritura al sistema de archivos reemplacen archivos empleados por Firefox por sus propias versiones. La vulnerabilidad afecta a Firefox en versiones anteriores a la 51.0.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "51.0.3",
            "matchCriteriaId" : "B796317F-3CE1-4730-9F14-D0602DAEC04B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96144",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1337304",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1337304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5398",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.873",
      "lastModified" : "2024-11-21T03:27:31.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Thunderbird 45.7. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "055C933B-35CC-4459-A548-7D9E554FDFC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96651",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5399",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:03.953",
      "lastModified" : "2024-11-21T03:27:31.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 51. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332569%2C1315248%2C1261335%2C1321038%2C1331771%2C1339566%2C1339591%2C1240893%2C1341905%2C1323241%2C1336467%2C1270288%2C1295299%2C1296024%2C1304201%2C1306142%2C1307557%2C1308036%2C1334246%2C1334290%2C1317085%2C1339116%2C1324000%2C1323150%2C1332501%2C1320894%2C1333752%2C1303713%2C1321566%2C1264053%2C1343513",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332569%2C1315248%2C1261335%2C1321038%2C1331771%2C1339566%2C1339591%2C1240893%2C1341905%2C1323241%2C1336467%2C1270288%2C1295299%2C1296024%2C1304201%2C1306142%2C1307557%2C1308036%2C1334246%2C1334290%2C1317085%2C1339116%2C1324000%2C1323150%2C1332501%2C1320894%2C1333752%2C1303713%2C1321566%2C1264053%2C1343513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5400",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.000",
      "lastModified" : "2024-11-21T03:27:31.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Un spray JIT que apunta a asm.js combinado con un heap spray permite la omisión de las protecciones ASLR y DEP, lo que conduce a ataques de corrupción de memoria. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96654",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1334933",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1334933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5401",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.047",
      "lastModified" : "2024-11-21T03:27:32.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A crash triggerable by web content in which an \"ErrorResult\" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Un cierre inesperado desencadenable mediante contenido web en el que un \"ErrorResult\" referencia memoria no asignada debido a un error de lógica. El cierre inesperado resultante podría ser explotado. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96677",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328861",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5402",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.107",
      "lastModified" : "2024-11-21T03:27:32.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free can occur when events are fired for a \"FontFace\" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un uso de memoria previamente liberada cuando se lanzan eventos para un objeto \"FontFace\" una vez el objeto ha sido ya destruido mientras se trabaja con fuentes. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96664",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1334876",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1334876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5403",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.157",
      "lastModified" : "2024-11-21T03:27:32.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When adding a range to an object in the DOM, it is possible to use \"addRange\" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Al añadir un rango a un objeto en el DOM, es posible utilizar \"addRange\" para añadir el rango a un objeto root incorrecto. Esto desencadena un uso de memoria previamente liberada, lo que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96691",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1340186",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1340186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5404",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.217",
      "lastModified" : "2024-11-21T03:27:32.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un uso de memoria previamente liberada cuando se manipulan rangos en selecciones con un nodo en un árbol nativo anónimo y un nodo fuera de él. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96664",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1340138",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41660/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1340138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41660/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5405",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.263",
      "lastModified" : "2024-11-21T03:27:32.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Ciertos códigos de respuesta en las conexiones FTP pueden resultar en el uso de valores no inicializados para los puertos en las operaciones FTP. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1187"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336699",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5406",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.327",
      "lastModified" : "2024-11-21T03:27:32.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un fallo de segmentación en la biblioteca de gráficos Skia durante algunas operaciones canvas debido a problemas con la intersección de máscaras/clips y las máscaras vacías. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1306890",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1306890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5407",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.373",
      "lastModified" : "2024-11-21T03:27:33.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Mediante el uso de filtros SVG que no emplean la implementación de matemática de punto fijo en un iframe objetivo, una página maliciosa puede extraer valores de píxeles de un usuario objetivo. Esto puede emplearse para extraer información de historial y leer valores de texto en dominios. Esto viola la política del mismo origen y conduce a una divulgación de información. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336622",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5408",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.437",
      "lastModified" : "2024-11-21T03:27:33.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Los archivos de vídeo cargaron capturas de vídeo Cross-Origin sin comprobar la presencia de cabeceras CORS que permiten tal uso de Cross-Origin, lo que conduce a una potencial divulgación de información para capturas de vídeo. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1313711",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1313711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5409",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.483",
      "lastModified" : "2024-11-21T03:27:33.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 45.8 and Firefox < 52."
      }, {
        "lang" : "es",
        "value" : "El actualizador Mozilla para Windows puede ser llamado por un usuario sin privilegios para eliminar un archivo local arbitrario pasando una ruta especial al parámetro callback mediante Mozilla Maintenance Service, que tiene acceso privilegiado. Nota: Este ataque requiere acceso local al sistema y solo afecta a Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 45.8 y Firefox en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96696",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1321814",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1321814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5410",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.593",
      "lastModified" : "2024-11-21T03:27:34.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8."
      }, {
        "lang" : "es",
        "value" : "Corrupción de memoria que resulta en un cierre inesperado potencialmente explotable durante la recolección de elementos JavaScript no utilizados debido a errores en la forma en la que se gestiona el rastreo incremental para la limpieza de memoria. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52, Firefox ESR en versiones anteriores a la 45.8, Thunderbird en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 45.8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "55EF46FB-6727-4FAC-943E-E5CC4F8CCBF7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.8.0",
            "matchCriteriaId" : "B87A8A50-E690-4827-B3BE-75B35A14E1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1330687",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1330687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5411",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.640",
      "lastModified" : "2024-11-21T03:27:34.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in \"libGLES\", which is only in use on Windows. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un uso de memoria previamente liberada durante las operaciones de almacenamiento de búfer en la biblioteca de gráficos ANGLE, empleada para el contenido WebGL. El almacenamiento de búfer puede liberarse mientras sigue en uso en algunas circunstancias, lo que conduce a un cierre inesperado potencialmente explotable. Nota: Este problema está presente en \"libGLES\", que solo está en uso en Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325511",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5412",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.687",
      "lastModified" : "2024-11-21T03:27:34.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Lectura por desbordamiento de búfer durante las operaciones de valor de color de filtrado SVG, lo que resulta en una exposición de datos. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328323",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5413",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.733",
      "lastModified" : "2024-11-21T03:27:34.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un fallo de segmentación durante algunas operaciones de diseño bidireccional. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1337504",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1337504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5414",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.797",
      "lastModified" : "2024-11-21T03:27:34.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "El diálogo file picker puede elegir y mostrar el directorio local por defecto equivocado cuando se instancia. En algunos sistemas operativos, esto puede conducir a una divulgación de información, como el sistema operativo o el nombre de la cuenta local. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1319370",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1319370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5415",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.890",
      "lastModified" : "2024-11-21T03:27:34.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by \"blob:\" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox < 52."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede utilizar una URL y script blob para suplantar una URL arbitraria de la barra de direcciones precedida por \"blob:\" como protocolo, lo que conduce a una confusión de usuario y a más ataques de suplantación. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1321719",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1321719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5416",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:04.953",
      "lastModified" : "2024-11-21T03:27:34.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "En determinadas circunstancias, un escuchador de eventos de red puede liberarse prematuramente. Esto parece resultar en la práctica en una desreferencia NULL. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328121",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1328121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5417",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.000",
      "lastModified" : "2024-11-21T03:27:35.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox < 52."
      }, {
        "lang" : "es",
        "value" : "Al arrastrar contenido del panel del navegador primario a la barra de direcciones de un sitio web malicioso, es posible cambiar la barra de direcciones para que la localización después de la navegación no coincida con la URL de la nueva página cargada. Esto permite ataques de suplantación. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=791597",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=791597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5418",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.047",
      "lastModified" : "2024-11-21T03:27:35.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Ocurre un error de lectura fuera de límites al analizar algunas respuestas HTTP de autorización digest, lo que resulta en una fuga de información mediante la lectura de memoria aleatoria que contiene coincidencias a patrones establecidos específicamente. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1338876",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1338876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5419",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.093",
      "lastModified" : "2024-11-21T03:27:35.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service (DOS) attack. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Si un sitio web malicioso desencadena repetidamente un mensaje de autenticación modal, la interfaz de usuario del navegador dejará de responder y será necesario cerrarlo a través del sistema operativo. Esto es un ataque de denegación de servicio (DoS). La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1312243",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1312243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5420",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.140",
      "lastModified" : "2024-11-21T03:27:35.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"javascript:\" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52."
      }, {
        "lang" : "es",
        "value" : "Una URL \"javascript:\" cargada por una página maliciosa puede ofuscar su ubicación dejando en blanco la URL mostrada en la barra de direcciones, lo que permite que un atacante suplante una página existente sin que la dirección maliciosa de la página se muestre correctamente. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1284395",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1284395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5421",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.203",
      "lastModified" : "2024-11-21T03:27:35.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Un sitio malicioso podría suplantar el contenido de la ventana de previsualización de impresión si las ventanas emergentes están habilitadas, lo que resulta en una confusión del usuario de qué sitio está cargado actualmente. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0.",
            "matchCriteriaId" : "EEF14BDF-6CEE-44CF-A838-1BB4D1DB31C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0.",
            "matchCriteriaId" : "149C7AA3-8508-4D1A-B7DA-2F54D9EBCA83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1301876",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1301876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5422",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.250",
      "lastModified" : "2024-11-21T03:27:35.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a malicious site uses the \"view-source:\" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected. This was fixed by no longer making \"view-source:\" linkable. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "Si un sitio malicioso emplea el protocolo \"view-source:\" en una serie en un único hipervínculo, puede desencadenar un cierre inesperado no explotable del navegador cuando se selecciona el hipervínculo. Esto se solucionó haciendo que \"view-source:\" ya no fuese enlazable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295002",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5425",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.297",
      "lastModified" : "2024-11-21T03:27:35.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of \"/private/var\" that could expose personal or temporary data. This has been updated to not allow access to \"/private/var\" and its subdirectories. Note: this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "El sandbox Gecko Media Plugin permite el acceso a archivos locales que coinciden con expresiones regulares concretas. En OS OX, esta coincidencia permite el acceso a algunos datos en subdirectorios de \"/private/var\" que podría exponer datos personales o temporales. Esto se ha actualizado para no permitir el acceso a \"/private/var\" y sus subdirectorios. Nota: este problema solo afecta a OS X. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1322716",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1322716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5426",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.343",
      "lastModified" : "2024-11-21T03:27:35.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox are run protected only by the running filter which is typically weak compared to the sandbox. Note: this issue only affects Linux. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52."
      }, {
        "lang" : "es",
        "value" : "En Linux, si el filtro BPF en modo secure computing (seccomp-bpf) se está ejecutando cuando se inicia el sandbox Gecko Media Plugin, el sandbox no se puede aplicar y los ítems que se ejecutarían en el sandbox estarían protegidos solo por el filtro en ejecución, el cual suele ser débil en comparación con el sandbox. Nota: este problema solo afecta a Linux. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52 y Thunderbird en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "566987B8-698A-4EB8-8380-FA44DB228B81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96694",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1257361",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1257361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5427",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.407",
      "lastModified" : "2024-11-21T03:27:35.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in malicious software being added without consent or modification of referenced installed files. This vulnerability affects Firefox < 52."
      }, {
        "lang" : "es",
        "value" : "Un archivo chrome.manifest inexistente intentará cargarse durante el arranque desde el directorio de instalación primario. Si un usuario malicioso con acceso local coloca chrome.manifest y otros archivos referenciados en este directorio, se cargarán y activarán durante el arranque. Esto podría resultar en que se añadirá software malicioso sin consentimiento o modificación de archivos referenciados instalados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 52."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0",
            "matchCriteriaId" : "6239EC26-A3A1-4FD4-B96F-F47B09C0CA00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295542",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1295542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5428",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.453",
      "lastModified" : "2024-11-21T03:27:36.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in \"createImageBitmap()\" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the \"createImageBitmap\" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1."
      }, {
        "lang" : "es",
        "value" : "Se ha informado acerca de un desbordamiento de enteros en \"createImageBitmap()\" a través del concurso Pwn2Own. La solución para esta vulnerabilidad deshabilita las extensiones experimentales a la API \"createImageBitmap\". Esta función se ejecuta en el sandbox de contenido, siendo necesaria una segunda vulnerabilidad para comprometer el ordenador de un usuario. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.0.1 y Firefox en versiones anteriores a la 52.0.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0.1",
            "matchCriteriaId" : "2DD8C0EA-69A7-44B4-860E-351324686856"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.0.1",
            "matchCriteriaId" : "9A52364C-861F-436E-954D-F1F6E58AC2AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0558.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96959",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038060",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1348168",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-08/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0558.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1348168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5429",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.483",
      "lastModified" : "2024-11-21T03:27:36.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 52, Firefox ESR 45.8, Firefox ESR 52 y Thunderbird 52. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5430",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.547",
      "lastModified" : "2024-11-21T03:27:36.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 52, Firefox ESR 52, y Thunderbird 52. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1342101%2C1340482%2C1344686%2C1329796%2C1346419%2C1349621%2C1344081%2C1344305%2C1348143%2C1349719%2C1353476%2C1337418%2C1346140%2C1339722",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1342101%2C1340482%2C1344686%2C1329796%2C1346419%2C1349621%2C1344081%2C1344305%2C1348143%2C1349719%2C1353476%2C1337418%2C1346140%2C1339722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5432",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.593",
      "lastModified" : "2024-11-21T03:27:36.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Ocurre una vulnerabilidad de uso de memoria previamente liberada durante determinadas selecciones de entrada de texto que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1346654",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1346654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5433",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.657",
      "lastModified" : "2024-11-21T03:27:36.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Ocurre una vulnerabilidad de uso de memoria previamente liberada en las funciones de animación SMIL cuando los punteros a elementos animation en un array se separan del controlador de animación mientras siguen en uso. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347168",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5434",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.703",
      "lastModified" : "2024-11-21T03:27:36.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Ocurre una vulnerabilidad de uso de memoria previamente liberada al redireccionar la gestión de focus que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1349946",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1349946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5435",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.750",
      "lastModified" : "2024-11-21T03:27:36.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Ocurre una vulnerabilidad de uso de memoria previamente liberada durante el procesamiento de transacciones en el editor durante las interacciones del modo de diseño. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1350683",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1350683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5436",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.827",
      "lastModified" : "2024-11-21T03:27:36.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Se desencadena una escritura fuera de límites en la biblioteca Graphite 2 con una fuente Graphite maliciosamente manipulada. Esto resulta en un cierre inesperado potencialmente explotable. Este problema se solucionó en la biblioteca Graphite 2, así como en los productos Mozilla. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6DCF7E-7EA2-472D-A36A-AFB39E03F212"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1345461",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-25",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1345461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5438",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.890",
      "lastModified" : "2024-11-21T03:27:37.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada durante el procesamiento XSLT debido a que el gestor de resultados es mantenido por un gestor liberado durante la gestión. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336828",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5439",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.937",
      "lastModified" : "2024-11-21T03:27:37.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada durante el procesamiento XSLT debido a la mala gestión de parámetros de plantilla. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "52.0",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "EE6829EF-1620-42AA-A43B-5336E8357B68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103053",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336830",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/103053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5440",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:05.983",
      "lastModified" : "2024-11-21T03:27:37.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada durante el procesamiento XSLT debido al error para propagar condiciones de error durante el proceso de búsqueda de coincidencias mientras se evalúa el contexto, lo que conduce a que se empleen objetos cuando ya no existen. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336832",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5441",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.030",
      "lastModified" : "2024-11-21T03:27:37.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada al mantener una selección durante los eventos de desplazamiento. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343795",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5442",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.107",
      "lastModified" : "2024-11-21T03:27:37.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada durante los cambios de estilo al manipular elementos DOM. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347979",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5443",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.157",
      "lastModified" : "2024-11-21T03:27:37.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites al descodificar archivos de formato BinHex creados incorrectamente. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1342661",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1342661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5444",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.217",
      "lastModified" : "2024-11-21T03:27:38.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability while parsing \"application/http-index-format\" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer al analizar contenido de formato \"application/http-index-format\" cuando la cabecera contiene datos formateados incorrectamente. Esto permite la lectura fuera de límites de los datos de la memoria. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344461",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5445",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.280",
      "lastModified" : "2024-11-21T03:27:38.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability while parsing \"application/http-index-format\" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad al analizar contenido de formato \"application/http-index-format\" en el que se emplean variables no inicializadas para crear un array. Esto podría permitir la lectura de memoria no inicializada en los arrays afectados. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344467",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5446",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.343",
      "lastModified" : "2024-11-21T03:27:38.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read when an HTTP/2 connection to a servers sends \"DATA\" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites cuando una conexión HTTP/2 a un servidor envía frames \"DATA\" con contenido data erróneo. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343505",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5447",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.390",
      "lastModified" : "2024-11-21T03:27:38.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites durante el procesamiento de anchos de glifo durante el diseño de texto. Esto resulta en un cierre inesperado potencialmente explotable y podría permitir que un atacante lea datos de la memoria que, de otra forma, serían inaccesibles. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343552",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42071/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42071/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5448",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.453",
      "lastModified" : "2024-11-21T03:27:38.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write in \"ClearKeyDecryptor\" while decrypting some Clearkey-encrypted media content. The \"ClearKeyDecryptor\" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Escritura fuera de límites en \"ClearKeyDecryptor\" mientras se descodifican algunos contenidos multimedia cifrados mediante Clearkey. El código \"ClearKeyDecryptor\" se ejecuta en el sandbox Gecko Media Plugin (GMP). Si se descubre que un segundo mecanismo escapa del sandbox, esta vulnerabilidad permite la escritura de datos arbitrarios en la memoria, lo que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 45.9, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "52.0",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "EE6829EF-1620-42AA-A43B-5336E8357B68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1346648",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1346648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5449",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.500",
      "lastModified" : "2024-11-21T03:27:38.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Cierre inesperado posiblemente explotable desencadenado durante el diseño y manipulación de texto unicode bidireccional junto con animaciones CSS. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1340127",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1340127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5450",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.560",
      "lastModified" : "2024-11-21T03:27:38.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism to spoof the Firefox for Android addressbar using a \"javascript:\" URI. On Firefox for Android, the base domain is parsed incorrectly, making the resulting location less visibly a spoofed site and showing an incorrect domain in appended notifications. This vulnerability affects Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Mecanismo para suplantar la barra de direcciones en Firefox para Android mediante un URI \"javascript:\". En Firefox para Android, el dominio base se analiza incorrectamente, lo que hace que sea menos visible que la dirección resultante es un sitio suplantado y mostrando un dominio incorrecto en las notificaciones anexadas. La vulnerabilidad afecta a Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325955",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5451",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.607",
      "lastModified" : "2024-11-21T03:27:39.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism to spoof the addressbar through the user interaction on the addressbar and the \"onblur\" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Mecanismo para suplantar la barra de direcciones mediante interacción del usuario en la barra de direcciones y el evento \"onblur\". El evento podría ser utilizado por el script para afectar la visualización de texto y hacer que el sitio cargado parezca ser diferente del que se ha cargado realmente en la barra de direcciones. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1273537",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1273537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5452",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.657",
      "lastModified" : "2024-11-21T03:27:39.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page element is user selected. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Los sitios maliciosos pueden mostrar una barra de direcciones suplantada en una página cuando la barra de direcciones existente en la nueva página se deja de ver al desplazarse si un elemento HTML editable de página es seleccionado por el usuario. Nota: este ataque solo afecta a Firefox para Android. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344517",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5453",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.703",
      "lastModified" : "2024-11-21T03:27:39.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's \"TITLE\" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Mecanismo para inyectar HTML estático en la página de previsualización del lector RSS debido a un error a la hora de escapar caracteres enviados como parámetros de URL para un elemento \"TITLE\" de un feed. Esta vulnerabilidad permite la suplantación, pero no se puede ejecutar el contenido que no esté en script. La vulnerabilidad afecta a Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1321247",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1321247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5454",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.750",
      "lastModified" : "2024-11-21T03:27:39.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Mecanismo para omitir las protecciones de acceso al sistema de archivos en el sandbox para emplear el picker de archivos para acceder a diferentes archivos que los seleccionados en el picker mediante el uso de rutas relativas. Esto permite acceso de solo lectura en el sistema de archivos local. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1349276",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1349276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5455",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.810",
      "lastModified" : "2024-11-21T03:27:39.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Las API del lector de feeds interno que cruzaron la barrera del sandbox permitieron un escape del sandbox y un escalado de privilegios si se combinaban con otra vulnerabilidad que resultaba en la ejecución remota de código dentro del proceso sandbox. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1341191",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1341191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5456",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.873",
      "lastModified" : "2024-11-21T03:27:39.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Mecanismo para omitir las protecciones de acceso al sistema de archivos en el sandbox mediante el constructor de peticiones al sistema de archivos mediante un mensaje IPC. Esto permite acceso de lectura y escritura al sistema de archivos local. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344415",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5458",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.937",
      "lastModified" : "2024-11-21T03:27:39.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a \"javascript:\" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. This vulnerability affects Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario arrastra y suelta una URL \"javascript:\" en la barra de direcciones, la URL será procesada y ejecutada. Esto permite que se le aplique ingeniería social a los usuarios para ejecutar un ataque de Cross-Site Scripting (XSS) en ellos mismos. La vulnerabilidad afecta a Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1229426",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1229426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5459",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:06.967",
      "lastModified" : "2024-11-21T03:27:39.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en WebGL desencadenable por el contenido web, lo que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1333858",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1333858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5460",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.030",
      "lastModified" : "2024-11-21T03:27:40.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en la selección de frames desencadenada por una combinación de contenido de script malicioso y pulsaciones de tecla por parte de un usuario. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343642",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1343642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5462",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.093",
      "lastModified" : "2024-11-21T03:27:40.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Error en la generación de números DRBG en la biblioteca Network Security Services (NSS) cuando el V de estado interno no transporta bits correctamente. La biblioteca NSS ha sido actualizada para solucionar este problema y Firefox ESR 52.1 ha sido actualizado con la versión 3.28.4 de NSS. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.28.4",
            "matchCriteriaId" : "64C04620-45D6-4375-A21E-FA5B220BFB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1345089",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-04",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3872",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1345089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201705-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5463",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.140",
      "lastModified" : "2024-11-21T03:27:40.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Los intents de Android se pueden emplear para iniciar Firefox para Android en modo lector con una URL especificada por el usuario. Esto permite que un atacante suplante los contenidos de la barra de direcciones tal y como se muestran a los usuarios. Nota: este ataque solo afecta a Firefox para Android. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1338867",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1338867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5464",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.187",
      "lastModified" : "2024-11-21T03:27:40.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Durante la manipulación DOM del árbol de accesibilidad mediante scripts, el árbol DOM puede desincronizarse con el árbol de accesibilidad, lo que conduce a una corrupción de memoria y a un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347075",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5465",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.250",
      "lastModified" : "2024-11-21T03:27:40.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read while processing SVG content in \"ConvolvePixel\". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites al procesar contenido SVG en \"ConvolvePixel\". Esto resulta en un cierre inesperado y también permite que memoria normalmente inaccesible se copie en contenido gráfico SVG, que podría mostrarse después. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347617",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42072/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42072/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5466",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.297",
      "lastModified" : "2024-11-21T03:27:40.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a page is loaded from an original site through a hyperlink and contains a redirect to a \"data:text/html\" URL, triggering a reload will run the reloaded \"data:text/html\" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Si se carga una página desde un sitio original mediante un hipervínculo y contiene una redirección a una URL \"data:text/html\", desencadenar una recarga ejecutará la página \"data:text/html\" recargada con su origen establecido incorrectamente. Esto permite un ataque de Cross-Site Scripting (XSS). La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "A198F107-231C-4DF7-AA34-6138E2EA95E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1353975",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1353975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5467",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.357",
      "lastModified" : "2024-11-21T03:27:41.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Corrupción de memoria y cierre inesperado potencial al emplear el contenido Skia cuando se dibuja contenido fuera de los límites de una región de recorte. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1",
            "matchCriteriaId" : "66C479AC-43EA-4099-9C20-55C1BFEB8AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347262",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1347262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5468",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.407",
      "lastModified" : "2024-11-21T03:27:41.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue with incorrect ownership model of \"privateBrowsing\" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Se ha expuesto un problema con el modelo incorrecto de propiedad de la información \"privateBrowsing\" mediante las herramientas de desarrollador. Esto puede resultar en un cierre inesperado no explotable cuando se desencadena manualmente durante la depuración. La vulnerabilidad afecta a Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1329521",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1329521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5469",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.453",
      "lastModified" : "2024-11-21T03:27:41.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53."
      }, {
        "lang" : "es",
        "value" : "Se han solucionado potenciales desbordamientos de búfer en el código Firefox generado debido a un problema CVE-2016-6354 en Flex. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.1, Firefox ESR en versiones anteriores a la 45.9, Firefox en versiones anteriores a la 52.1 y Firefox en versiones anteriores a la 53."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "53.0",
            "matchCriteriaId" : "83FECC93-8DC3-41D0-8E53-45E1F4D53321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C00F05B-5B10-401D-8C5E-517FAF7BCFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "45.9.0",
            "matchCriteriaId" : "58F03A98-1317-4A15-BAB3-AC045AA9AAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "762A750E-2FFF-48F5-941A-99ED9FC2549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1292534",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1292534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5470",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.513",
      "lastModified" : "2024-11-21T03:27:41.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 53 y Firefox ESR 52.1. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99041",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1359639%2C1349595%2C1352295%2C1352556%2C1342552%2C1342567%2C1346012%2C1366140%2C1368732%2C1297111%2C1362590%2C1357462%2C1363280%2C1349266%2C1352093%2C1348424%2C1347748%2C1356025%2C1325513%2C1367692",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1359639%2C1349595%2C1352295%2C1352556%2C1342552%2C1342567%2C1346012%2C1366140%2C1368732%2C1297111%2C1362590%2C1357462%2C1363280%2C1349266%2C1352093%2C1348424%2C1347748%2C1356025%2C1325513%2C1367692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5471",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.577",
      "lastModified" : "2024-11-21T03:27:41.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 53. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99042",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1349604%2C1318645%2C1361098%2C1361100%2C1341026%2C1349421%2C1360852%2C1299147%2C1352073%2C1354853%2C1366446%2C1342181%2C1343069",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1349604%2C1318645%2C1361098%2C1361100%2C1341026%2C1349421%2C1360852%2C1299147%2C1352073%2C1354853%2C1366446%2C1342181%2C1343069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5472",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.607",
      "lastModified" : "2024-11-21T03:27:41.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en el frameloader durante la reconstrucción de árboles cuando se regenera el diseño CSS al intentar emplear un nodo en el árbol que ya no existe. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99040",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1365602",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1365602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7749",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.657",
      "lastModified" : "2024-11-21T03:32:34.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada al emplear una URL incorrecta durante la recarga de un docshell. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1355039",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1355039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7750",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.717",
      "lastModified" : "2024-11-21T03:32:34.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability during video control operations when a \"<track>\" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada durante las operaciones de control de vídeo cuando un elemento \"\" mantiene una referencia a una ventana más antigua si esa ventana ha sido reemplazada en el DOM. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356558",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7751",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.763",
      "lastModified" : "2024-11-21T03:32:35.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en los escuchadores del visor de contenido que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1363396",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1363396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7752",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.827",
      "lastModified" : "2024-11-21T03:32:35.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada durante interacciones de usuario específicas con el IME (input method editor) en algunos lenguajes debido a la forma en la que se gestionan los eventos. Esto resulta en un cierre inesperado potencialmente explotable, pero sería necesaria interacción específica del usuario para desencadenarlo. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1359547",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1359547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7753",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.873",
      "lastModified" : "2024-11-21T03:32:35.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Ocurre una lectura fuera de límites al aplicar reglas de estilo a pseudo-elementos, como ::first-line, mediante el uso de datos de estilo en caché. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100315",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1353312",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1353312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7754",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.920",
      "lastModified" : "2024-11-21T03:32:35.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read in WebGL with a maliciously crafted \"ImageInfo\" object during WebGL operations. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en WebGL con un objeto \"ImageInfo\" maliciosamente manipulado durante las operaciones WebGL. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1357090",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1357090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7755",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:07.967",
      "lastModified" : "2024-11-21T03:32:35.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "El instalador de Firefox en Windows puede cargar archivos DLL maliciosos almacenados en el mismo directorio que el instalador cuando se ejecuta. Esto permite la ejecución con privilegios si el instalador se ejecuta con privilegios elevados. Nota: este ataque solo afecta a sistemas operativos Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1361326",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1361326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7756",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.030",
      "lastModified" : "2024-11-21T03:32:35.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada y \"use-after-scope\" al registrar errores de las cabeceras XHR (XML HTTP Request). Esto podría resultar en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1366595",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1366595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7757",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.093",
      "lastModified" : "2024-11-21T03:32:36.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en IndexedDB cuando uno de sus objetos se destruye en la memoria mientras un método se sigue ejecutando dentro. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356824",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7758",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.140",
      "lastModified" : "2024-11-21T03:32:36.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en el codificador Opus cuando el número de canales en una transmisión de audio cambia mientras el codificador sigue en uso. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B067C7-735E-43C9-9188-7E1522A02491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368490",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7759",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.187",
      "lastModified" : "2024-11-21T03:32:36.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local \"file:\" URLs, allowing for the reading of local data through a violation of same-origin policy. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Las URL de intent Android dadas a Firefox para Android pueden emplearse para navegar desde URL HTTP o HTTPS hasta URL \"file:\" locales, lo que permite la lectura de datos locales mediante una violación de la política del mismo origen. Nota: este ataque solo afecta a Firefox para Android. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99052",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356893",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7760",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.250",
      "lastModified" : "2024-11-21T03:32:36.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malicious user by passing a special path to the callback parameter through the Mozilla Maintenance Service, allowing the manipulation of files in the installation directory and privilege escalation by manipulating the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "El actualizador de Mozilla para Windows modifica algunos archivos para que sean actualizados mediante la lectura del archivo original y aplicándole los cambios. La ubicación del archivo original puede ser alterada por un usuario malicioso pasando una ruta especial al parámetro callback a través de Mozilla Maintenance Service, lo que permite la manipulación de archivos en el directorio de instalación y un escalado de privilegios manipulando Mozilla Maintenance Service, el cual tiene acceso privilegiado. Nota: Este ataque requiere acceso local al sistema y solo afecta a Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.2 y Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-417"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1348645",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1348645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7761",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.297",
      "lastModified" : "2024-11-21T03:32:36.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mozilla Maintenance Service \"helper.exe\" application creates a temporary directory writable by non-privileged users. When this is combined with creation of a junction (a form of symbolic link), protected files in the target directory of the junction can be deleted by the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"helper.exe\" de Mozilla Maintenance Service crea un directorio temporal escribible por usuarios no privilegiados. Cuando esto se combina con la creación de un junction (un tipo de vínculo simbólico), los archivos protegidos en el directorio objetivo del junction pueden ser eliminados por Mozilla Maintenance Service, el cual tiene acceso privilegiado. Nota: Este ataque requiere acceso local al sistema y solo afecta a Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.2 y Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1215648",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/nsis/bugs/1125/",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1215648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/nsis/bugs/1125/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7762",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.343",
      "lastModified" : "2024-11-21T03:32:36.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Al acceder a él directamente, Reader Mode no eliminó la sección de nombre de usuario y contraseña de las URL mostradas en la barra de direcciones. Esto puede emplearse para suplantar el dominio de la página actual. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99047",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2112",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2113",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1358248",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1358248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7763",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.390",
      "lastModified" : "2024-11-21T03:32:36.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Las fuentes por defecto en OS X muestran algunos caracteres tibetanos como espacios en blanco. Cuando se emplean en la barra de direcciones como parte de un IDN, se pueden utilizar en ataques de suplantación de nombres de dominio. Nota: este ataque solo afecta a sistemas operativos OS X. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7764",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.437",
      "lastModified" : "2024-11-21T03:32:36.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Characters from the \"Canadian Syllabics\" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw \"punycode\" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from \"Aspirational Use Scripts\" such as Canadian Syllabics to be mixed with Latin characters in the \"moderately restrictive\" IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as \"Limited Use Scripts.\". This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Los caracteres del bloque unicode \"Canadian Syllabics\" pueden mezclarse con caracteres de otros bloques unicode en la barra de direcciones en lugar de ser presentados en su forma \"punycode\" sin procesar. Esto permite ataques de suplantación de nombres de dominio mediante la confusión de caracteres. El estándar Unicode actual permite que los caracteres \"Aspirational Use Scripts\" como Canadian Syllabics se mezclen con los caracteres latinos en el perfil IDN \"moderadamente restrictivo\". Se ha modificado el comportamiento de Firefox para que coincida con la inminente versión 10.0 de Unicode, que elimina esta categoría y los trata como \"Limited Use Scripts\". La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.unicode.org/reports/tr31/tr31-26.html#Aspirational_Use_Scripts",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1364283",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.unicode.org/reports/tr31/tr31-26.html#Aspirational_Use_Scripts",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1364283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7765",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.483",
      "lastModified" : "2024-11-21T03:32:37.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Mark of the Web\" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "\"Mark of the Web\" no se guardó correctamente en Windows cuando se descargaron de Internet archivos con nombres muy largos. Sin los datos Mark of the Web, no se muestra la advertencia de seguridad que muestra Windows antes de ejecutar archivos ejecutables descargados de Internet. Nota: este ataque solo afecta a sistemas operativos Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1273265",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1273265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7766",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.530",
      "lastModified" : "2024-11-21T03:32:37.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attack using manipulation of \"updater.ini\" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Maintenance Service to allow for arbitrary file execution and deletion by the Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Un ataque que emplea la manipulación del contenido de \"updater.ini\", empleado por Mozilla Windows Updater, y un escalado de privilegios mediante Mozilla Maintenance Service permite la ejecución y eliminación de archivos arbitrarios por parte de Maintenance Service, que tiene acceso privilegiado. Nota: Este ataque requiere acceso local al sistema y solo afecta a Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.2 y Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1342742",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1342742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7767",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.577",
      "lastModified" : "2024-11-21T03:32:37.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows Updater, which runs with the Maintenance Service's privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Mozilla Maintenance Service puede ser invocado por un usuario sin privilegios para sobrescribir archivos arbitrarios con datos basura mediante Mozilla Windows Updater, el cual se ejecuta con el acceso privilegiado de Maintenance Service. Nota: Este ataque requiere acceso local al sistema y solo afecta a Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.2 y Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336964",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7768",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.640",
      "lastModified" : "2024-11-21T03:32:37.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access, bypassing system protections against unprivileged users. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Mozilla Maintenance Service puede ser invocado por un usuario sin privilegios para leer 32 bytes de cualquier archivo arbitrario en el sistema local convenciendo al servicio de que está leyendo un archivo de estado proporcionado por Mozilla Windows Updater. Mozilla Maintenance Service se ejecuta con acceso privilegiado, omitiendo las protecciones del sistema contra usuarios sin privilegios. Nota: Este ataque requiere acceso local al sistema y solo afecta a Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.2 y Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336979",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1336979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7770",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.687",
      "lastModified" : "2024-11-21T03:32:37.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendered. This would allow a malicious site to displayed a spoofed addressbar, showing the location of an arbitrary website instead of the one loaded. Note: this issue only affects Firefox for Android. Desktop Firefox is unaffected. This vulnerability affects Firefox < 54."
      }, {
        "lang" : "es",
        "value" : "Por medio de un mecanismo en el cual se carga una nueva pestaña mediante eventos de JavaScript, si se entra en modo de ventana completa, la barra de direcciones no se mostrará. Esto podría permitir que un sitio malicioso muestre una barra de direcciones suplantada que muestra la dirección de un sitio web arbitrario en lugar del que se ha cargado. Nota: este problema solo afecta a Firefox para Android. La versión de escritorio de Firefox no se ha visto afectada. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99049",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1317242",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1317242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7778",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.717",
      "lastModified" : "2024-11-21T03:32:38.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2."
      }, {
        "lang" : "es",
        "value" : "Hay una serie de vulnerabilidades de seguridad en la biblioteca Graphite 2, incluyendo lecturas fuera de límites, lecturas y escrituras por desbordamiento de búfer y el uso de memoria no inicializada. Estos problemas fueron abordados en la versión 1.3.10 de Graphite 2. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "35834B4C-4C58-48A9-9D51-2F590C8ABEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.2.0",
            "matchCriteriaId" : "37E2AFA4-8E1E-4074-BA83-B32D702B439C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1793",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1349310",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1350047",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1352745",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1352747",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1355174",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1355182",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356607",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1358551",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-13",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3894",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1349310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1350047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1352745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1352747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1355174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1355182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1358551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7779",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.797",
      "lastModified" : "2024-11-21T03:32:38.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 54, Firefox ESR 52.2, y Thunderbird 52.2. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100201",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7780",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.843",
      "lastModified" : "2024-11-21T03:32:38.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Se han reportado errores de seguridad de memoria en Firefox 54. Algunos de estos errores mostraron evidencias de corrupción de memoria y se entiende que, con el suficiente esfuerzo, algunos de estos podrían explotarse para ejecutar código arbitrario. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100199",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1353763%2C1353356%2C1370070%2C1375435%2C1373663%2C1363150%2C1370817%2C1273678%2C1367850%2C1347968%2C1361749%2C1349138%2C1371982%2C1344666%2C1369836%2C1330739%2C1371511%2C1371484",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1353763%2C1353356%2C1370070%2C1375435%2C1373663%2C1363150%2C1370817%2C1273678%2C1367850%2C1347968%2C1361749%2C1349138%2C1371982%2C1344666%2C1369836%2C1330739%2C1371511%2C1371484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7781",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.890",
      "lastModified" : "2024-11-21T03:32:38.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result \"POINT_AT_INFINITY\" when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Ocurre un error en el algoritmo de suma de puntos de curva elíptica que emplea coordenadas mixtas Jacobian-affine que pueden dar como resultado \"POINT_AT_INFINITY\", aunque no deberían. Un atacante Man-in-the-Middle (MitM) podría aprovecharlo para interferir con una conexión, lo que resulta en que la parte atacada calcula un secreto compartido de forma incorrecta. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100383",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1352039",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1352039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7782",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:08.920",
      "lastModified" : "2024-11-21T03:32:38.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error in the \"WindowsDllDetourPatcher\" where a RWX (\"Read/Write/Execute\") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Error en \"WindowsDllDetourPatcher\", donde un bloque 4k RWX (\"Read/Write/Execute\") se asigna, pero nunca se proteje, violando las protecciones DEP. Nota: este ataque solo afecta a sistemas operativos Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100243",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344034",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1344034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7783",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.030",
      "lastModified" : "2024-11-21T03:32:39.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a long user name is used in a username/password combination in a site URL (such as \" http://UserName:Password@example.com\"), the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Si se emplea un nombre de usuario largo en una combinación nombre de usuario/contraseña en una URL de un sitio (como \" http://NombreUsuario:Contraseña@ejemplo.com\"), el mensaje modal resultante se mantendrá en un estado sin respuesta o se cerrará inesperadamente, provocando una denegación de servicio (DoS). La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100401",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1360842",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43020/",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1360842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7784",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.077",
      "lastModified" : "2024-11-21T03:32:39.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada al leer un observador de imagen durante la reconstrucción de frames una vez se ha liberado el observador. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3",
            "matchCriteriaId" : "37697885-01C6-4905-8932-3FFCD7A78753"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100202",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1376087",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1376087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7785",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.140",
      "lastModified" : "2024-11-21T03:32:39.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un desbordamiento de búfer al manipular atributos ARIA (Accessible Rich Internet Applications) en el DOM. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100206",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356985",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7786",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.170",
      "lastModified" : "2024-11-21T03:32:39.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir un desbordamiento de búfer cuando el renderizador de imagen intenta pintar elementos SVG no mostrables. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "52.0",
            "versionEndExcluding" : "52.1.0",
            "matchCriteriaId" : "EE6829EF-1620-42AA-A43B-5336E8357B68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3",
            "matchCriteriaId" : "4C4159A4-3422-411F-A74A-14D007B5BDED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3",
            "matchCriteriaId" : "37697885-01C6-4905-8932-3FFCD7A78753"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100206",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7787",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.233",
      "lastModified" : "2024-11-21T03:32:39.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Las protecciones de política del mismo origen se pueden omitir en páginas con iframes embebidos durante la recarga de páginas, lo que permite que los iframes accedan a contenido en la página de nivel más alto, lo que conduce a una divulgación de información. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3",
            "matchCriteriaId" : "4C4159A4-3422-411F-A74A-14D007B5BDED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3",
            "matchCriteriaId" : "37697885-01C6-4905-8932-3FFCD7A78753"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100234",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1322896",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1322896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7788",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.280",
      "lastModified" : "2024-11-21T03:32:39.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an \"iframe\" has a \"sandbox\" attribute and its content is specified using \"srcdoc\", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included \"allow-same-origin\". This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "cuando un iframe tiene un atributo \"sandbox\" y su contenido se especifica mediante \"srcdoc\", dicho contenido no hereda el CSP (Content Security Policy) de la página que lo contiene, tal y como debería, a no ser que el atributo sandbox incluya \"allow-same-origin\". La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100379",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1073952",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1073952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7789",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.327",
      "lastModified" : "2024-11-21T03:32:39.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Transport Security (HSTS) will not be enabled for the connection. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Si un servidor envía dos cabeceras Strict-Transport-Security (STS) para una única conexión, serán rechazadas com inválidas y no se habilitará HTTP Strict Transport Security (HSTS) para la conexión. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100374",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1074642",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1074642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7790",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.373",
      "lastModified" : "2024-11-21T03:32:40.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can be copied until a null is found. This can potentially contain private data from the local system. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "En sistemas Windows, si se copian cadenas no acabadas en null en el crash reporter para algunas claves de registro específicas, los datos de la pila se pueden copiar hasta que se encuentre un null. Esto podría contener datos privados del sistema local. Nota: este ataque solo afecta a sistemas operativos Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1350460",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1350460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7791",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.407",
      "lastModified" : "2024-11-21T03:32:40.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "En las páginas que contienen un iframe, el protocolo \"data:\" se puede emplear para crear una alerta modal que se representará sobre dominios arbitrarios siguiendo la navegación, suplantando el origen de la alerta modal del contenido iframe. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100240",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1365875",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1365875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7792",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.453",
      "lastModified" : "2024-11-21T03:32:40.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Ocurrirá un desbordamiento de búfer al ver un certificado en el gestor de certificados si el certificado tiene un OID (Object Identifier) o identificador de objeto demasiado largo. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100206",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368652",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7793",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.500",
      "lastModified" : "2024-11-21T03:32:40.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada en la API Fetch cuando el trabajador o la ventana asociada se liberan mientras siguen en uso, lo que resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Firefox en versiones anteriores a la 56, Firefox ESR en versiones anteriores a la 52.4 y Thunderbird en versiones anteriores a la 52.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101055",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1371889",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1371889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7794",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.547",
      "lastModified" : "2024-11-21T03:32:40.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "En sistemas Linux, si el proceso content se ve comprometido, el broker del sandbox permitirá el truncado de archivos aunque el sandbox solo tenga explícitamente acceso de lectura al sistema de archivos local y no tenga permisos de escritura. Nota: este ataque solo afecta al sistema operativo Linux. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1374281",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1374281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7796",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.593",
      "lastModified" : "2024-11-21T03:32:40.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Windows systems, the logger run by the Windows updater deletes the file \"update.log\" before it runs in order to write a new log of that name. The path to this file is supplied at the command line to the updater and could be used in concert with another local exploit to delete a different file named \"update.log\" instead of the one intended. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "En sistemas Windows, el logger ejecutado por Windows Updater elimina el archivo \"update.log\" antes de ejecutarlo para escribir un nuevo registro con ese nombre. La ruta a este archivo se proporciona en la línea de comandos al Updater y podría emplearse junto con otro exploit local para eliminar un archivo diferente llamado \"update.log\" en lugar del que se pretende. Nota: este ataque solo afecta a sistemas operativos Windows. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1234401",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1234401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7797",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.640",
      "lastModified" : "2024-11-21T03:32:40.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "El internamiento de nombres de cabecera de respuesta no tiene protecciones del mismo origen y estas cabeceras se almacenan en un registro global. Esto permite que los nombres de cabecera almacenados estén disponibles mediante Cross-Origin. La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1334776",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1334776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7798",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.687",
      "lastModified" : "2024-11-21T03:32:40.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "La característica Developer Tools sufre de una vulnerabilidad de inyección XUL debido al saneamiento incorrecto del código fuente de la página web. En el peor de los casos, esto podría permitir la ejecución de código arbitrario cuando se abre una página maliciosa con la herramienta de editor de estilo. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100198",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7799",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.733",
      "lastModified" : "2024-11-21T03:32:41.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JavaScript in the \"about:webrtc\" page is not sanitized properly being assigned to \"innerHTML\". Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficult to exploit, but the vulnerability could possibly be used for a cross-site scripting (XSS) attack. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "No se sanea correctamente el JavaScript en la página \"about:webrtc\" antes de asignarse a \"innerHTML\". Los datos en esta página son proporcionados por el uso de WebRTC y no está bajo control de terceros, lo que dificulta su explotación, pero la vulnerabilidad podría emplearse para realizar ataques de Cross-Site Scripting (XSS). La vulnerabilidad afecta a Firefox en versiones anteriores a la 55."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100377",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1372509",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1372509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7800",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.780",
      "lastModified" : "2024-11-21T03:32:41.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada en WebSockets cuando el objeto que mantiene la conexión se libera antes de que concluya la operación de desconexión. Esto resulta en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100196",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1374047",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1374047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7801",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.843",
      "lastModified" : "2024-11-21T03:32:41.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando vuelve a calcular la disposición del elemento \"marquee\" durante el reajuste del tamaño de la ventana cuando el objeto estilo actualizado se libera mientras se utiliza. Esto resulta en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100197",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1371259",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1371259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7802",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.890",
      "lastModified" : "2024-11-21T03:32:41.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando se manipula el DOM durante el evento de redimensionamiento de un elemento \"image\". Si estos elementos se han liberado por la flta de referencias robustas, podría ocurrir un cierre inesperado potencialmente explotable cuando se acceden a los elementos liberados. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100202",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1378147",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1378147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7803",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.937",
      "lastModified" : "2024-11-21T03:32:41.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Cuando la cabecera CSP (Content Security Policy) de una página contiene una directiva \"sandbox\", se ignoran otras directivas. Esto resulta en el cumplimiento incorrecto de CSP. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100234",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1377426",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1377426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7804",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:09.983",
      "lastModified" : "2024-11-21T03:32:41.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The destructor function for the \"WindowsDllDetourPatcher\" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "La función destructor para la clase \"WindowsDllDetourPatcher\" puede ser reutilizada por un código malicioso junto con otra vulnerabilidad para introducir datos arbitrarios a una ubicación controlada por el atacante en la memoria. Esto se puede utilizar para omitir las protecciones de memoria existentes en esta situación. Nota: Este ataque solo afecta a sistemas operativos Windows. Los otros sistemas operativos no se ven afectados. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100234",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1372849",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1372849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7805",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.047",
      "lastModified" : "2024-11-21T03:32:41.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer pointing to the old, freed buffer, resulting in a use-after-free when handshake hashes are then calculated afterwards. This can result in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Durante los intercambios TLS 1.2, los hashes de los handshakes se generan apuntando a un búfer de mensaje. Estos datos guardados se utilizan para futuros mensajes pero, en determinados casos, la transcripción del handshake puede exceder el espacio disponible en el búfer actual, provocando la asignación de un nuevo búfer. Esto deja al puntero apuntando al búfer antiguo liberado, resultando en una condición de uso de memoria previamente liberada cuando los hashes del handshake se calculan posteriormente. Esto puede resultar en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:52.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147EE39E-C1BB-4793-8932-D474FE8C89DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:56.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE4FDF7-3856-4D26-A4F3-DDD5D18DE940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:52.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65D17DC-9741-4A1C-A059-FF59F4429BA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "security@mozilla.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1377618",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3998",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1377618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7806",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.093",
      "lastModified" : "2024-11-21T03:32:42.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando el gestor de capas se liberar demasiado pronto cuando se \"renderizar\" determinados contenidos SVG, resultando en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100389",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1378113",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1378113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7807",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.140",
      "lastModified" : "2024-11-21T03:32:42.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Un mecanismo que utiliza AppCache para secuestrar una URL en un dominio utilizando fallback sirviendo los archivos desde una subruta en el dominio. Esto se ha solucionado al requerir que los archivos fallback estén dentro del directorio manifest. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100242",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1376459",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1376459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7808",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.217",
      "lastModified" : "2024-11-21T03:32:42.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A content security policy (CSP) \"frame-ancestors\" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Una directiva CSP (Content Security Policy) \"frame-ancestors\" que contiene orígenes con rutas permite comparaciones con dichas rutas en vez de con el origen. Esto resultan en una fuga de información de orígenes cruzados de esta información de rutas. Esta vulnerabilidad afecta a las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100373",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1367531",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1367531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7809",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.263",
      "lastModified" : "2024-11-21T03:32:42.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando un nodo DOM editor se borra de manera prematura durante el salto de árbol cuando aún sigue vinculado al documento. Esto resulta en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 52.3 de Thunderbird, las versiones anteriores a la 52.3 de Firefox ESR y las versiones anteriores a la 55 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "55.0",
            "matchCriteriaId" : "4E741DB2-0D96-41AD-A083-544CAFD70780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "C77437DA-2E55-4C1D-BDD0-BE70A9641EE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.3.0",
            "matchCriteriaId" : "41ED0EAB-AA13-4C2D-A493-243FE20522D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100203",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1380284",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1380284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7810",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.343",
      "lastModified" : "2024-11-21T03:32:42.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Se han informado de errores de seguridad de memoria en Firefox 55 y Firefox ESR 52.3. Algunos de estos errores mostraron evidencias de corrupción de memoria y se cree que, con el esfuerzo necesario, se podrían explotar para ejecutar código arbitrario. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101054",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1386787%2C1389974%2C1371657%2C1360334%2C1390550%2C1380824%2C1387918%2C1395598",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3688-1/",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1386787%2C1389974%2C1371657%2C1360334%2C1390550%2C1380824%2C1387918%2C1395598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3688-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7811",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.407",
      "lastModified" : "2024-11-21T03:32:42.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "Se han informado de errores de seguridad de memoria en Firefox 55. Algunos de estos errores mostraron evidencias de corrupción de memoria y se cree que, con el esfuerzo necesario, se podrían explotar para ejecutar código arbitrario. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1392105%2C1395919%2C1388113%2C1348955%2C1394522%2C1387659%2C1369560%2C1388045%2C1378658%2C1379414%2C1385112%2C1367497",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1392105%2C1395919%2C1388113%2C1348955%2C1394522%2C1387659%2C1369560%2C1388045%2C1378658%2C1379414%2C1385112%2C1367497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7812",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.437",
      "lastModified" : "2024-11-21T03:32:42.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through \"file:\" URLs. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "Si el contenido web en una página se arrastra a porciones de la interfaz de usuario del navegador como una barra de pestañas, los enlaces se pueden abrir, algo que de otra manera no se podrían abrir. Esto puede permitir que un contenido web malicioso abra un archivo almacenado localmente mediante URL \"file:\". Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1379842",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1379842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7813",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.500",
      "lastModified" : "2024-11-21T03:32:43.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "Dentro del analizador JavaScript, el retorno de un entero a un tipo más estrecho puede resultar en que los datos leídos desde fuera del búfer sean analizados. Esto generalmente resulta en un cierre inesperado no explotable, pero puede filtrar una cantidad limitada de información de la memoria si coincide con la sintaxis del identificador JavaScript. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1383951",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1383951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7814",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.547",
      "lastModified" : "2024-11-21T03:32:43.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File downloads encoded with \"blob:\" and \"data:\" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. This would allow malicious sites to lure users into downloading executables that would otherwise be detected as suspicious. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Las descargas de archivos codificados con elementos URL \"blob:\" y \"data:\" omitían las comprobaciones de descarga de archivos normales a pesar de la característica Phishing and Malware Protection y sus listas de bloqueo de páginas y archivos sospechosos. Esto permitiria a los sitios maliciosos engañar a los usuarios para que descarguen ejecutables que, de otra manera, se habrían detectado como sospechosos. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1376036",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1376036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7815",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.607",
      "lastModified" : "2024-11-21T03:32:43.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On pages containing an iframe, the \"data:\" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiprocess turned off. Installations with e10s turned on do not support the modal dialog functionality. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "En las páginas que contienen un iframe, se podría utilizar el protocolo \"data:\" para crear un diálogo modal mediante JavaScript que tendría un dominio arbitrario como la ubicación del diálogo, suplantando el origen del diálogo modal desde la vista del usuario. Nota: Este ataque solo afecta a las instalaciones con multiprocesos e10 desactivadas. Las intalaciones con e10 activado no soporta la funcionalidad de dialogo modal. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368981",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7816",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.657",
      "lastModified" : "2024-11-21T03:32:43.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebExtensions could use popups and panels in the extension UI to load an \"about:\" privileged URL, violating security checks that disallow this behavior. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "WebExtensions podría utilizar las ventanas emergentes y los paneles en la interfaz de usuario de la extensión para cargar una URL privilegiada \"about:\", violando las comprobaciones de seguridad que no permiten este comportamiento. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1380597",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1380597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7817",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.703",
      "lastModified" : "2024-11-21T03:32:43.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake address bar to be displayed. This allows an attacker to spoof which page is actually loaded and in use. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de suplantación cuando una página cambia a modo pantalla completa sin notificarlo al usuario, permitiendo que se muestre una barra de direcciones falsa. Esto permite que un atacante suplante la página que está en realidad cargada y en uso. Nota: Este ataque solo afecta a Firefox for Android. Los otros sistemas operativos no se ven afectados. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8255F035-04C8-4158-B301-82101711939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356596",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1356596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7818",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.750",
      "lastModified" : "2024-11-21T03:32:43.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando se manipulan arrays de elementos ARIA (Accesible Rich Internet Applications) en los contenedores mediante el DOM. Esto resulta en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B067C7-735E-43C9-9188-7E1522A02491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101055",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1363723",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1363723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7819",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.810",
      "lastModified" : "2024-11-21T03:32:43.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory. This results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando los objetos imagen se redimensionan si los objetos referenciados durante el redimensionamiento se han liberado de la memoria. Esto resulta en un cierre inesperado explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101055",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1380292",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1380292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7820",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.873",
      "lastModified" : "2024-11-21T03:32:44.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"instanceof\" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "El operador \"instanceof\" puede omitir el mecanismo del wrapper Xray. Cuando se le llama en un contenido web desde el propio navegador o una extensión, el contenido web puede proporcionar su propio resultado para ese operador, pudiendo engañar al navegador o extensión para que manipule erróneamente el elemento. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1378207",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1378207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7821",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.920",
      "lastModified" : "2024-11-21T03:32:44.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el que WebExtensions puede descargar e intentar abrir un archivo de tipos que no sean ejecutables. Esto se puede desencadenar sin la interacción expresa del usuario para las acciones de descarga y apertura de archivos. Esto se podría utilizar para provocar vulnerabilidades conocidas en los programas que manipula dichos tipos de documentos. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1346515",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1346515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7822",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:10.953",
      "lastModified" : "2024-11-21T03:32:44.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox < 56."
      }, {
        "lang" : "es",
        "value" : "La implementación AES-GCM en WebCrypto API acepta 0-length IV cuando debería exigir una longitud de 1 de acuerdo con la especificación NIST Special Publication 800-38D. Esto podría permitir que se determine la clave de autenticación en algunas instancias. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "55.0.3",
            "matchCriteriaId" : "FEC7D85F-EE10-4144-B49D-DC88DE61352E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368859",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1368859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7823",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.000",
      "lastModified" : "2024-11-21T03:32:44.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The content security policy (CSP) \"sandbox\" directive did not create a unique origin for the document, causing it to behave as if the \"allow-same-origin\" keyword were always specified. This could allow a Cross-Site Scripting (XSS) attack to be launched from unsafe content. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "La directiva CSP (Content Security Policy) \"sandbox\" no creaba un origen único para el documento, provocando que se comporte como si estuviera siempre especificada la palabra clave \"allow-same-origin\". Esto podría permitir que se lance un ataque Cross-Site Scripting (XSS) desde contenido no seguro. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1396320",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1396320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7824",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.060",
      "lastModified" : "2024-11-21T03:32:44.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Ocurre un desbordamiento de búfer cuando se dibujan y validan elementos con la librería de gráficos ANGLE, utilizado para contenidos WebGL. Esto se debe a que se pasa un valor incorrecto en la librería durante las comprobaciones y resulta en un cierre inesperado potencialmente explotable. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB33390A-F51F-4451-8FEA-7FC31F1AA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101053",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1398381",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1398381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7825",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.107",
      "lastModified" : "2024-11-21T03:32:44.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."
      }, {
        "lang" : "es",
        "value" : "Varias fuentes en OS X muestran caracteres Tibetan y Arabic como espacios en blanco. Cuando se utilizan en la barra de direcciones como parte de un IDN, se puede utilizar para realizar ataques de suplantación de nombres de dominio. Nota: Este ataque solo afecta a sistemas operativos OS X. Los otros sistemas operativos no se ven afectados. Esta vulnerabilidad afecta a las versiones anteriores a la 56 de Firefox, las versiones anteriores a la 52.4 de Firefox ESR y las versiones anteriores a la 52.4 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0",
            "matchCriteriaId" : "52C27207-A6C6-4F3E-AA7F-4CBE552D6C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "5C911A05-085A-4673-8837-3D514794DC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.4.0",
            "matchCriteriaId" : "A6DA61C1-AAB0-494C-A8AD-0CA56643F70A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1390980",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1393624",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1390980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1393624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201803-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7826",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.187",
      "lastModified" : "2024-11-21T03:32:44.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5."
      }, {
        "lang" : "es",
        "value" : "Se han informado de errores de seguridad de memoria en Firefox 56 y Firefox ESR 52.4. Algunos de estos errores mostraron evidencias de corrupción de memoria y se cree que, con el esfuerzo necesario, se podrían explotar para ejecutar código arbitrario. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox, las versiones anteriores a la 52.5 de Firefox ESR y las versiones anteriores a la 52.5 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0",
            "matchCriteriaId" : "99ADDAA5-F036-40EF-B5F1-7C376F457CB4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.0",
            "matchCriteriaId" : "8792AE40-56DF-413A-A4C3-B72470A16D4E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.0",
            "matchCriteriaId" : "AC536E02-5078-403F-B9A4-5744D19AEC49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3247",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3372",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1394530%2C1369561%2C1411458%2C1400003%2C1395138%2C1408412%2C1393840%2C1400763%2C1339259%2C1394265%2C1407740%2C1407751%2C1408005%2C1406398%2C1387799%2C1261175%2C1400554%2C1375146%2C1397811%2C1404636%2C1401804",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00018.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00001.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3688-1/",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4035",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-25/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-26/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1394530%2C1369561%2C1411458%2C1400003%2C1395138%2C1408412%2C1393840%2C1400763%2C1339259%2C1394265%2C1407740%2C1407751%2C1408005%2C1406398%2C1387799%2C1261175%2C1400554%2C1375146%2C1397811%2C1404636%2C1401804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3688-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7827",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.233",
      "lastModified" : "2024-11-21T03:32:44.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Se han informado de errores de seguridad de memoria en Firefox 56. Algunos de estos errores mostraron evidencias de corrupción de memoria y se cree que, con el esfuerzo necesario, se podrían explotar para ejecutar código arbitrario. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1399922%2C1403646%2C1403716%2C1365894%2C1402876%2C1406154%2C1384121%2C1384615%2C1407375%2C1339485%2C1361432%2C1394031%2C1383019%2C1407032%2C1387845%2C1386490",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1399922%2C1403646%2C1403716%2C1365894%2C1402876%2C1406154%2C1384121%2C1384615%2C1407375%2C1339485%2C1361432%2C1394031%2C1383019%2C1407032%2C1387845%2C1386490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7828",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.297",
      "lastModified" : "2024-11-21T03:32:45.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability can occur when flushing and resizing layout because the \"PressShell\" object has been freed while still in use. This results in a potentially exploitable crash during these operations. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5."
      }, {
        "lang" : "es",
        "value" : "Puede ocurrir una vulnerabilidad de uso de memoria previamente liberada cuando se alinea y redimensiona la disposición porque el objeto \"PressShell'\" se ha liberado cuando se estaba utilizando. Esto resulta en un cierre inesperado potencialmente explotable durante estas operaciones. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox, las versiones anteriores a la 52.5 de Firefox ESR y las versiones anteriores a la 52.5 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0",
            "matchCriteriaId" : "99ADDAA5-F036-40EF-B5F1-7C376F457CB4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.0",
            "matchCriteriaId" : "8792AE40-56DF-413A-A4C3-B72470A16D4E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.0",
            "matchCriteriaId" : "AC536E02-5078-403F-B9A4-5744D19AEC49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3247",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3372",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1406750",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1412252",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00018.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00001.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4035",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-25/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-26/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1406750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1412252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7829",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.343",
      "lastModified" : "2024-11-21T03:32:45.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2."
      }, {
        "lang" : "es",
        "value" : "Es posible suplantar la dirección de correo del remitente y mostrar una dirección de envío arbitraria al correo receptor. La dirección de envío real no se muestra si viene precedida de un carácter nulo en la cadena de muestra. La vulnerabilidad afecta a las versiones anteriores a la 52.5.2 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "DAAC1C50-B5AD-4BA6-B6D4-457AAC258BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB33390A-F51F-4451-8FEA-7FC31F1AA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1423432",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3529-1/",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1423432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3529-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7830",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.373",
      "lastModified" : "2024-11-21T03:32:45.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data theft of URLs loaded by users. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5."
      }, {
        "lang" : "es",
        "value" : "La API Resource Timing revelaba incorrectamente las navegaciones en iframes cross-origin. Esta es una violación de la política same-origin y podría permitir el robo de datos de URL cargadas por los usuarios. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox, las versiones anteriores a la 52.5 de Firefox ESR y las versiones anteriores a la 52.5 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0",
            "matchCriteriaId" : "99ADDAA5-F036-40EF-B5F1-7C376F457CB4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.0",
            "matchCriteriaId" : "8792AE40-56DF-413A-A4C3-B72470A16D4E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.0",
            "matchCriteriaId" : "AC536E02-5078-403F-B9A4-5744D19AEC49"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3247",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3372",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1408990",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00018.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00001.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4035",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-25/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-26/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1408990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7831",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.437",
      "lastModified" : "2024-11-21T03:32:45.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated \"_exposedProps_\" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la que el wrapper de seguridad no deniega el acceso a determinadas propiedades expuestas usando el mecanismo obsoleto \"_exposedProps_\" en los objetos proxy. Estas propiedades deberían no estar disponibles explícitamente para los objetos proxy. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1392026",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1392026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7832",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.483",
      "lastModified" : "2024-11-21T03:32:45.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the addressbar by the dotless version of 'i' followed by the same accent as a second character with most font sets. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "El carácter único, combinado, versión de la letra \"i\"con uno de los acentos potenciales en unicode, como el agudo o el grave, se pueden suplantar en la barra de dirección mediante la versión sin puntos de \"i\" seguido del mismo acento como carácter secundarios con la mayoría de las familias de fuentes. Esto permite la realización de ataques de suplantación de dominios porque estos nombres de dominio combinados no se muestran como punycode. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1408782",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1408782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7833",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.530",
      "lastModified" : "2024-11-21T03:32:45.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Algunos caracteres marcas de vocales árabes e indios se pueden combinar con caracteres latinos en un nombre de dominio para eclipsar caracteres no latinos con algunas familias de fuentes en la barra de direcciones. El carácter no latino no será visible en la mayoría de los visualizadores. Esto permite la realización de ataques de suplantación de dominios porque estos nombres de dominio combinados no se muestran como punycode. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1370497",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1370497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7834",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.577",
      "lastModified" : "2024-11-21T03:32:45.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"data:\" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when \"data:\" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Una URL \"data:\" cargada en una nueva pestaña no hereda la política de seguridad de contenido (CSP) de la página original, permitiendo la omisión de la política, incluyendo la ejecución de código JavaScript. Las versiones anteriores, cuando los documentos \"data:\" también heredaban el contexto de la página original, permitirían ataques Cross-Site Scripting (XSS) potenciales. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1358009",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1358009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7835",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.607",
      "lastModified" : "2024-11-21T03:32:46.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for resources that redirect from HTTPS to HTTP, allowing content that should be blocked, such as scripts, to be loaded on a page. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Bloqueo de contenido mixto de subrecursos no seguros (HTTP) en un documento seguro (HTTPS) no se ha aplicado correctamente para los recursos que se redirigen de HTTPS a HTTP, permitiendo que el contenido que se debería bloquear, como los scripts, se carguen en una página. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1402363",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1402363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7836",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.657",
      "lastModified" : "2024-11-21T03:32:46.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"pingsender\" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "El ejecutable \"pingsender\" utilizado por Firefox Health Report carga dinámicamente una copia de sistema de libcurl, el cual un atacante puede reemplazar. Esto permite el escalado de privilegios ya que el código de libcurl reemplazar se ejecutará con los privilegios de Firefox. Nota: Este ataque necesita que un atacante tenga acceso local al sistema y solo afecta a OS X y Linux. Los sistemas Windows no se ven afectados. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1401339",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1401339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7837",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.703",
      "lastModified" : "2024-11-21T03:32:46.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVG loaded through \"<img>\" tags can use \"<meta>\" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "SVG cargado mediante etiquetas \"\" pueden utilizar etiquetas \"\" en los datos SVG para configurar cookies para esta página. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325923",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1325923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7838",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.733",
      "lastModified" : "2024-11-21T03:32:46.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the punycode display instead of the primary domain being displayed in native script and the sub-domain only displaying as punycode. This could be used for limited spoofing attacks due to user confusion. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "El texto de formato punycode se mostrará a todos los nombres de dominio internacionales cualificados en determinadas instancias cuando un subdominio fuerza la aparición del punycode en vez de mostrar el dominio primario en código script nativo y solo mostrar el subdominio como punycode. Esto se podría utilizar para ataques de suplantación limitados gracias a la confusión del usuario. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1399540",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1399540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7839",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.780",
      "lastModified" : "2024-11-21T03:32:46.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Control characters prepended before \"javascript:\" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Caracteres de control precedidos de las URL \"javascript:\" pegadas en la barra de direcciones pueden hacer que se ignoren los caracteres principales y que se ejecute el código JavaScript pegado en lugar de bloquearse. Esto podría utilizarse en ataques de ingeniería social y auto-Cross-Site Scripting (self-XSS) donde se convence a los usuarios de que copien y peguen texto en la barra de direcciones. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1402896",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1402896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7840",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.827",
      "lastModified" : "2024-11-21T03:32:46.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this JavaScript will be executed. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users were convinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Se puede inyectar código JavaScript en un archivo de marcadores exportado colocando código JavaScript en las etiquetas proporcionadas por el usuario en los marcadores guardados. Si el archivo HTML exportado resultante se abre posteriormente en un navegador, se ejecutará este código JavaScript. Esto podría utilizarse en ataques de ingeniería social y auto-Cross-Site Scripting (self-XSS) si se convenciera a los usuarios de añadir etiquetas maliciosas a los marcadores, exportarlas y, a continuación, abrir el archivo resultante. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1366420",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1366420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7842",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.890",
      "lastModified" : "2024-11-21T03:32:46.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a document's Referrer Policy attribute is set to \"no-referrer\" sometimes two network requests are made for \"<link>\" elements instead of one. One of these requests includes the referrer instead of respecting the set policy to not include a referrer on requests. This vulnerability affects Firefox < 57."
      }, {
        "lang" : "es",
        "value" : "Si el atributo Referrer Policy de un documento se establece en \"no-referrer\", a veces se hacen dos peticiones de red para elementos \"\" en lugar de una. Una de estas peticiones incluye al referrer en lugar de respetar la política establecida de no incluir un referrer en las peticiones. Esta vulnerabilidad afecta a las versiones anteriores a la 57 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "56.0.2",
            "matchCriteriaId" : "EA62B76A-2D57-426E-8529-6B3C1AF85F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1397064",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1397064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7843",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.920",
      "lastModified" : "2024-11-21T03:32:46.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not cleared when exiting. This vulnerability affects Firefox ESR < 52.5.2 and Firefox < 57.0.1."
      }, {
        "lang" : "es",
        "value" : "Cuando se utiliza el modo Navegación Privada, es posible que un trabajador web escriba datos persistentes en IndexedDB y realice fingerprinting en un usuario de forma única. IndexedDB no debería estar disponible en modo Navegación Privada y estos datos almacenados persistirán en varias sesiones en modo Navegación Privada porque no se borran al cerrar. Esta vulnerabilidad afecta a las versiones anteriores a la 52.5.2 de Firefox ESR y las versiones anteriores a la 57.0.1 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.1",
            "matchCriteriaId" : "6499BB9D-0946-495F-9585-6578DCAEC49A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "2AD1A6A6-04B0-4689-8BA2-F6D8D5B37E0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102039",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102112",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039954",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3382",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1410106",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00003.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4062",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-27/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-28/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1410106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7844",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:11.967",
      "lastModified" : "2024-11-21T03:32:47.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier releases are not affected. This vulnerability affects Firefox < 57.0.1."
      }, {
        "lang" : "es",
        "value" : "Se puede utilizar una combinación de una imagen SVG externa referenciada en una página y el coloreado de los enlaces de anclaje almacenados en esta imagen para determinar qué páginas tiene un usuario en su historial. Esto puede permitir que un sitio web malicioso consulte el historial de usuarios. Nota: este problema solo afecta a Firefox 57. Las versiones anteriores no se ven afectadas. La vulnerabilidad afecta a las versiones anteriores a la 57.0.1 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.1",
            "matchCriteriaId" : "6499BB9D-0946-495F-9585-6578DCAEC49A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102039",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039954",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1420001",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-27/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1420001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7845",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:12.013",
      "lastModified" : "2024-11-21T03:32:47.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird < 52.5.2, Firefox ESR < 52.5.2, and Firefox < 57.0.2."
      }, {
        "lang" : "es",
        "value" : "Ocurre un desbordamiento de búfer cuando se dibujan y validan elementos usando Direct 3D 9 con la librería de gráficos ANGLE, utilizado para contenidos WebGL. Esto se debe a que se pasa un valor incorrecto en la librería durante las comprobaciones y resulta en un cierre inesperado potencialmente explotable. Nota: este ataque solo afecta a sistemas operativos Windows. Los otros sistemas operativos no se ven afectados. Esta vulnerabilidad afecta a las versiones anteriores a la 52.5.2 de Thunderbird, las versiones anteriores a la 52.5.2 de Firefox ESR y las versiones anteriores a la 57.0.2 de Firefox."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.0.2",
            "matchCriteriaId" : "B8010688-45E8-466D-99D6-B963C6A55A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "2AD1A6A6-04B0-4689-8BA2-F6D8D5B37E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "DAAC1C50-B5AD-4BA6-B6D4-457AAC258BDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102115",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1402372",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-28/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-29/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1402372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-29/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7846",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:12.060",
      "lastModified" : "2024-11-21T03:32:47.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via \"View -> Feed article -> Website\" or in the standard format of \"View -> Feed article -> default format\". This vulnerability affects Thunderbird < 52.5.2."
      }, {
        "lang" : "es",
        "value" : "Es posible ejecutar código JavaScript en el canal RSS analizado cuando el canal RSS se ve como un sitio web, por ejemplo, a través de \"View -> Feed article -> Website\" o en el formato estándar de \"View -> Feed article -> default format\". La vulnerabilidad afecta a las versiones anteriores a la 52.5.2 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "DAAC1C50-B5AD-4BA6-B6D4-457AAC258BDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1411716",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1411716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7847",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:12.107",
      "lastModified" : "2024-11-21T03:32:47.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2."
      }, {
        "lang" : "es",
        "value" : "El CSS creado en un feed RSS puede filtrar y revelar cadenas de rutas locales que pueden contener el nombre de un usuario. La vulnerabilidad afecta a las versiones anteriores a la 52.5.2 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB33390A-F51F-4451-8FEA-7FC31F1AA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96E3779-F56A-45FF-BB3D-4980527D721E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "DAAC1C50-B5AD-4BA6-B6D4-457AAC258BDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1411708",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1411708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7848",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2018-06-11T21:29:12.157",
      "lastModified" : "2024-11-21T03:32:47.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2."
      }, {
        "lang" : "es",
        "value" : "Los campos RSS pueden inyectar nuevas líneas en la estructura del correo electrónico creado, modificando el cuerpo del mensaje. La vulnerabilidad afecta a las versiones anteriores a la 52.5.2 de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52.5.2",
            "matchCriteriaId" : "DAAC1C50-B5AD-4BA6-B6D4-457AAC258BDA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1411699",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1411699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2017-30/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3960",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-06-12T14:29:00.210",
      "lastModified" : "2024-11-21T03:26:22.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de explotación de autorización en la interfaz web en McAfee Network Security Management (NSM) en versiones anteriores a la 8.2.7.42.2 permite que usuarios autenticados obtengan privilegios elevados mediante un parámetro HTTP request manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3962",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-06-12T14:29:00.273",
      "lastModified" : "2024-11-21T03:26:22.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de explotación de recuperación de contraseña en el mecanismo de autenticación sin estar basado en certificados en McAfee Network Security Management (NSM) en versiones anteriores a la 8.2.7.42.2 permite que atacantes descifren contraseñas de usuario mediante hashes sin sal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-12T18:29:00.257",
      "lastModified" : "2024-11-21T03:19:46.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PvPGN Stats 2.4.6. Existe una inyección SQL en ladder/stats.php mediante el parámetro POST user_search."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9991B3E4-8532-464A-862B-92347D5B13CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-12T18:29:00.317",
      "lastModified" : "2024-11-21T03:19:46.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PvPGN Stats 2.4.6. Existe una inyección SQL en ladder/stats.php mediante el parámetro GET game."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9991B3E4-8532-464A-862B-92347D5B13CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-12T18:29:00.380",
      "lastModified" : "2024-11-21T03:19:46.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PvPGN Stats 2.4.6. Existe una inyección SQL en ladder/stats.php mediante el parámetro GET type."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9991B3E4-8532-464A-862B-92347D5B13CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-12T18:29:00.427",
      "lastModified" : "2024-11-21T03:19:47.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PvPGN Stats 2.4.6. Existe una inyección SQL en ladder/stats.php mediante el parámetro GET sort_direction."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9991B3E4-8532-464A-862B-92347D5B13CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-12T18:29:00.490",
      "lastModified" : "2024-11-21T03:19:47.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PvPGN Stats 2.4.6. Existe una inyección SQL en ladder/stats.php mediante el parámetro GET user."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9991B3E4-8532-464A-862B-92347D5B13CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15842",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-12T20:29:00.233",
      "lastModified" : "2024-11-21T03:15:19.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
      }, {
        "lang" : "es",
        "value" : "Se podría emplear un búfer después de ser liberado debido al desbloqueo del mutex antes de liberar el búfer en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM, QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15843",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-12T20:29:00.280",
      "lastModified" : "2024-11-21T03:15:19.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
      }, {
        "lang" : "es",
        "value" : "Debido a una condición de carrera en un controlador de bus, puede ocurrir una doble liberación (double free) en msm_bus_floor_vote_context() en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM, QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15854",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-12T20:29:00.313",
      "lastModified" : "2024-11-21T03:15:20.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handler() for the derived length len leading to a subsequent buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
      }, {
        "lang" : "es",
        "value" : "Se recibe el valor de fix_param->num_chans del firmware y, si es demasiado largo, puede ocurrir un desbordamiento de enteros en wma_radio_chan_stats_event_handler() para el tamaño len derivado que conduce a un subsecuente desbordamiento de búfer en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM, QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15857",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-12T20:29:00.360",
      "lastModified" : "2024-11-21T03:15:20.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
      }, {
        "lang" : "es",
        "value" : "En el controlador de la cámara, puede ocurrir un acceso fuera de límites debido a un error en los parámetros de región de copia del espacio de usuario en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM, QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18070",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-12T20:29:00.407",
      "lastModified" : "2024-11-21T03:19:17.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable \"event->num_ndp_end_rsp_per_ndi_list\" is very large which can then lead to a heap overwrite of the heap object end_rsp in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
      }, {
        "lang" : "es",
        "value" : "En wma_ndp_end_response_event_handler(), la variable len_end_rsp es un uint32 que puede desbordarse si el valor de la variable \"event->num_ndp_end_rsp_per_ndi_list\" es muy grande, lo que puede conducir a una sobrescritura de la memoria dinámica (heap) del objeto heap end_rsp en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM, QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-13T16:29:00.267",
      "lastModified" : "2024-11-21T03:16:46.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates a redirect response, but no check is performed on the path, which could be an absolute URL to an external domain. This Open redirect vulnerability can be exploited for example to mount effective phishing attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Symfony en versiones 2.7.x anteriores a la 2.7.38, versiones 2.8.x anteriores a la 2.8.31, versiones 3.2.x anteriores a la 3.2.14 y versiones 3.3.x anteriores a la 3.3.13. DefaultAuthenticationSuccessHandler o DefaultAuthenticationFailureHandler toman el contenido del parámetro _target_path y generan una respuesta de redirección, pero no se realiza una comprobación de ruta, que puede ser una URL absoluta o un dominio externo. Esta vulnerabilidad de redirección abierta puede ser explotada, por ejemplo, para realizar ataques de phishing efectivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "2.7.0",
            "versionEndExcluding" : "2.7.38",
            "matchCriteriaId" : "825CCE18-2656-4AE2-B7B1-61F62FD3F36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "2.8.0",
            "versionEndExcluding" : "2.8.31",
            "matchCriteriaId" : "05D2DF8E-04EA-4970-BF77-9C53144F794F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.2.0",
            "versionEndExcluding" : "3.2.14",
            "matchCriteriaId" : "520D5A73-8A5B-4BAE-8F6B-EDC2DF522D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.13",
            "matchCriteriaId" : "102C3897-59F3-42E8-9771-B0CC8709681B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15695",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-06-13T17:29:00.220",
      "lastModified" : "2024-11-21T03:15:01.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privileges is allowed to deploy code by invoking an internal Geode function. This allows remote code execution. Code deployment should be restricted to users with DATA:MANAGE privilege."
      }, {
        "lang" : "es",
        "value" : "Cuando un servidor de Apache Geode entre las versiones 1.0.0 y 1.4.0 está configurado con un gestor de seguridad, un usuario con privilegios DATA:WRITE puede implementar código mediante la invocación de una función Geode interna. Esto permite la ejecución remota de código. La implementación de código debe estar restringida a usuarios con el privilegio DATA:MANAGE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "CC1620D7-7554-4ED4-AE45-E8E2F1EF992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104465",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/dc8875c0b924885a884eba6d5bd7dc3f123411b2d33cffd00e351c99%40%3Cuser.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/104465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/dc8875c0b924885a884eba6d5bd7dc3f123411b2d33cffd00e351c99%40%3Cuser.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-13T18:29:00.323",
      "lastModified" : "2024-11-21T03:08:16.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "OPC Foundation Local Discovery Server (LDS) en versiones anteriores a la 1.03.367 está instalado como servicio de Windows sin añadir comillas dobles alrededor de la ruta ejecutable de opcualds.exe, lo que podría permitir que los usuarios locales obtengan privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opcfoundation:local_discovery_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.03.367",
            "matchCriteriaId" : "1238198B-9FFA-43E1-80B6-C2FFCE625AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-11672.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-11672.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-13T18:29:00.510",
      "lastModified" : "2024-11-21T03:17:56.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the configuration file is stored; however, if the configuration file is altered the LDS will be unavailable until it is repaired."
      }, {
        "lang" : "es",
        "value" : "OPC Foundation Local Discovery Server (LDS) 1.03.370 requería una actualización de seguridad para resolver múltiples vulnerabilidades que permiten que los atacantes desencadenen un cierre inesperado mediante la colocación de datos no válidos en el archivo de configuración. Esta vulnerabilidad requiere un atacante con acceso al sistema de archivos en el que se almacena el archivo de configuración; sin embargo, si se altera el archivo de configuración, LDS dejará de estar disponible hasta que se repare."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opcfoundation:local_discovery_server:1.03.370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EE1298-A24A-4BB2-B07D-29E69E36A3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-17443.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-17443.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3968",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-06-13T20:29:00.213",
      "lastModified" : "2024-11-21T03:26:23.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de fijación de sesión en la interfaz web en McAfee Network Security Manager (NSM) en versiones anteriores a la 8.2.7.42.2 y McAfee Network Data Loss Prevention (NDLP) en versiones anteriores a la 9.3.4.1.5 permite que atacantes remotos revelen información sensible o manipulen la base de datos mediante una cookie de autenticación manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3.4.1.5",
            "matchCriteriaId" : "2EBD64DA-659A-4EA6-9DAA-CD2431B21531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.7.42.2",
            "matchCriteriaId" : "1BAB1F42-EE61-4A4E-BFAA-550B220CA0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3907",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-06-13T21:29:00.220",
      "lastModified" : "2024-11-21T03:26:20.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código en la extensión ePolicy Orchestrator (ePO) en McAfee Threat Intelligence Exchange (TIE) Server en versiones 2.1.0 y anteriores permite que atacantes remotos ejecuten código HTML arbitrario que se refleja en la página web de respuesta mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:mcafee_threat_intelligence_exchange:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA931A-58D6-4241-A93F-6A4DD1B13112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10207",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3936",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-06-13T21:29:00.440",
      "lastModified" : "2024-11-21T03:26:21.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos del sistema operativo en McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1 y 5.1.0 permite que los atacantes ejecuten comandos del sistema operativo con privilegios limitados al no sanear los datos de entrada del usuario antes de exportarlos a formato CSV."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE33AFB8-9962-4D75-B613-D5032A0949A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBA52A8-233F-4015-B44B-1BF7B5593CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DBB72F-A984-4641-9230-97B815FCD31C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F542C3-C2BB-420A-BCDB-AB5A688689B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0E33E0-5B8F-4448-A5F3-5AE901AC8774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9220E40-8664-4DB3-AF96-802F8CDEC58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB90C24-D252-4099-A7A1-9F8754DFB4A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/103155",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10227",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/103155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17172",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-06-14T14:29:00.213",
      "lastModified" : "2024-11-21T03:17:38.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause the attacker to obtain a higher privilege of the smart phones."
      }, {
        "lang" : "es",
        "value" : "Los smartphones Huawei LYO-L21 con software en versiones LYO-L21C479B107 y LYO-L21C479B107 tienen una vulnerabilidad de escalado de privilegios. Un atacante local autenticado puede manipular paquetes mal formados tras engañar a un usuario para que instale una aplicación maliciosa y explotar esta vulnerabilidad mientras se está en el proceso de gestión de excepciones. La explotación exitosa de esta vulnerabilidad podría provocar que el atacante obtenga privilegios mayores en el smartphone."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:huawei:lyo-l21:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3197E9-9768-4186-A33E-46D1AE6C682F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:huawei:lyo-l21_firmware:lyo-l21c479b107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A68539-C54A-49B9-9A5C-8F97B241E301"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:huawei:lyo-l21_firmware:lyo-l21c577b126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "402A8154-D280-4948-81B3-1F23F95A3072"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17173",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-06-14T14:29:00.277",
      "lastModified" : "2024-11-21T03:17:38.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to driver to release special kernel memory resource. Successful exploit may result in phone crash or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Debido a la insuficiente verificación de parámetros, el controlador de la GPU de los smartphones Mate 9 Pro de Huawei en versiones anteriores a la LON-AL00B 8.0.0.356(C00) tiene una vulnerabilidad de liberación de memoria arbitraria. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar un parámetro dado al controlador para que libere recursos especiales de la memoria del kernel. La explotación con éxito de esta vulnerabilidad podría desembocar en el cierre inesperado del teléfono o en la ejecución arbitraria de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_fimware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.356\\(c00\\)",
            "matchCriteriaId" : "B9326923-3A08-4AA1-8C6C-FDB51DB96CA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17309",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-06-14T14:29:00.323",
      "lastModified" : "2024-11-21T03:17:48.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication."
      }, {
        "lang" : "es",
        "value" : "Huawei HG255s-10 V100R001C163B025SP02 tiene una vulnerabilidad de salto de directorio debido a la validación insuficiente de las peticiones HTTP recibidas. Un atacante remoto podría acceder a los archivos locales en el dispositivo sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hg255s-10_firmware:v100r001c163b025sp02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73399178-5D3D-4EC7-BCE8-6A0C9416EBEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hg255s-10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0704513-EED1-4444-A093-B7880376522D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html",
        "source" : "psirt@huawei.com"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-14T20:29:00.207",
      "lastModified" : "2024-11-21T03:08:46.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code."
      }, {
        "lang" : "es",
        "value" : "Las versiones sin firmar de los DLL distribuidos por OPC Foundation podrían reemplazarse por código malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opcfoundation:ua-.net-legacy:1.02.336.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8573777-674B-44BA-B887-028186FE0F42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12070.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12070.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18169",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-06-15T20:29:00.217",
      "lastModified" : "2024-11-21T03:19:28.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel."
      }, {
        "lang" : "es",
        "value" : "El proceso de usuario puede realizar una denegación de servicio en el kernel en ashmem al realizar la operación de mantenimiento de caché en en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-16T01:29:02.913",
      "lastModified" : "2024-11-21T03:17:25.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management."
      }, {
        "lang" : "es",
        "value" : "El componente backend en Open-Xchange OX App Suite en versiones anteriores a la 7.6.3-rev35, versiones 7.8.x anteriores a la 7.8.2-rev38, versiones 7.8.3 anteriores a la 7.8.3-rev41 y versiones 7.8.4 anteriores a la 7.8.4-rev19 permite que usuarios remotos autenticados guarden atributos de usuario arbitrarios aprovechando la gestión incorrecta de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.3",
            "matchCriteriaId" : "CEE77111-9626-48C1-9C13-6FF650B91363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev14:*:*:*:*:*:*",
            "matchCriteriaId" : "D4417841-A79D-479F-BBB4-13892CD29CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev15:*:*:*:*:*:*",
            "matchCriteriaId" : "11FED64F-98F2-4155-A34D-DCC0DCF55CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev16:*:*:*:*:*:*",
            "matchCriteriaId" : "544677BC-DEFB-45B8-BB08-124E5666A04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev17:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA212B4-FC4B-4268-A778-23D588E76880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev18:*:*:*:*:*:*",
            "matchCriteriaId" : "10D10170-9528-49BB-88B8-92A4D016EA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev20:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA48ACB-659B-408C-B7E1-945A6333C1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev22:*:*:*:*:*:*",
            "matchCriteriaId" : "23D2DCAA-FAB7-426D-8680-2A6F69AE90DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev23:*:*:*:*:*:*",
            "matchCriteriaId" : "90C2E1F5-73DA-4FA7-BEDF-E9726F5D0D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev24:*:*:*:*:*:*",
            "matchCriteriaId" : "449B4C7A-6287-4018-86AA-D34BEF8DB83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev25:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E6C22C-C3B3-4914-A1D8-A6202EEBF1C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev26:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF46085-0E23-4C9C-9899-30EB63EFC392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev28:*:*:*:*:*:*",
            "matchCriteriaId" : "39BB146E-14BF-4AC7-B267-3176545CBCB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev29:*:*:*:*:*:*",
            "matchCriteriaId" : "64201845-70B6-4124-BA02-DE0646BE75A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev30:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A9B0B-F4B9-410B-AA32-D4A5A3B285DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev31:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5DE686-E794-4C06-9AC8-5682B1CF68AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev32:*:*:*:*:*:*",
            "matchCriteriaId" : "E4710EAE-6227-4A72-9549-6EEF0CEB6E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.6.3:rev33:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD9AE40-5AE0-4DA6-BD1D-CC02746DA917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B66B2-9BE8-4843-9B4B-D673FAC44023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2633E559-38E4-4024-BB5F-94EDFE5F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E804C89F-033F-43B3-B63B-172F9B2136CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev10:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7C6765-34DD-4326-99A8-F85DA19ECE91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev11:*:*:*:*:*:*",
            "matchCriteriaId" : "13FAD9B6-5790-4C7A-8A9B-09B1002DA75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev12:*:*:*:*:*:*",
            "matchCriteriaId" : "B040A950-FEC3-465D-AD19-3AA8EE11AE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev13:*:*:*:*:*:*",
            "matchCriteriaId" : "F5971D8D-A2E6-4E3D-8FDA-04F89FC65A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev14:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF67234-BDCA-48FA-8616-6B0E4A38FA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev15:*:*:*:*:*:*",
            "matchCriteriaId" : "76D18DCA-5D64-4D38-99B0-1B984C402E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev16:*:*:*:*:*:*",
            "matchCriteriaId" : "46718CD2-0403-4DA2-B157-5714BD654EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev17:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA1274B-9103-449F-ABD1-C898B716B433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev18:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB485BC-3247-4E06-8017-118B597B0184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev19:*:*:*:*:*:*",
            "matchCriteriaId" : "6C447C6E-6188-47C6-BC68-8FD99B49F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev20:*:*:*:*:*:*",
            "matchCriteriaId" : "211647E5-8BCA-4393-B54B-CE382D5DF3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev21:*:*:*:*:*:*",
            "matchCriteriaId" : "855C2E78-C554-43A7-BD3F-747053F45709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev22:*:*:*:*:*:*",
            "matchCriteriaId" : "64594DD5-2816-4123-A12C-505FE4480AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev23:*:*:*:*:*:*",
            "matchCriteriaId" : "606D294C-EAEC-43EC-BA0F-BC5484B7C5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev24:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1D645-706F-4CCA-88A7-F5077BCE4AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev25:*:*:*:*:*:*",
            "matchCriteriaId" : "30145547-3406-4639-A5AD-52EFAA734EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev26:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6642D-C5AF-41D7-B2EA-A1F333E5B12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev27:*:*:*:*:*:*",
            "matchCriteriaId" : "91040A22-04F6-43ED-A6A1-060703D285C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev28:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3E2338-E774-4188-B352-B79FBB9C5511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev29:*:*:*:*:*:*",
            "matchCriteriaId" : "22961BA6-C0B1-488A-8F7D-68EB3F9DA6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev30:*:*:*:*:*:*",
            "matchCriteriaId" : "E8381BB7-3602-4DCF-A070-1067C277AAA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev31:*:*:*:*:*:*",
            "matchCriteriaId" : "98B758CC-D26C-4B83-98E7-3BA4ECF96966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev32:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCE965A-70BE-4159-93D8-A2520C8C4CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev33:*:*:*:*:*:*",
            "matchCriteriaId" : "1152B60C-3188-4BE7-897A-B09C5732ECAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev34:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1F087A-7373-4B7F-87BD-8509704F47CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev35:*:*:*:*:*:*",
            "matchCriteriaId" : "D82CB956-9A14-49C5-8308-52198589BAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev36:*:*:*:*:*:*",
            "matchCriteriaId" : "2F202094-2A74-44DA-BB3A-06AF3326E544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev38:*:*:*:*:*:*",
            "matchCriteriaId" : "DC128D82-A687-4043-AC01-9A329ED9F9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev39:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE4CF1D-B716-4992-B3DE-599AD7407780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev40:*:*:*:*:*:*",
            "matchCriteriaId" : "49FCC4A7-3078-421A-A3A1-C58976F47262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev5:*:*:*:*:*:*",
            "matchCriteriaId" : "F57910B1-968D-4DF3-8C2D-9EB3765C7214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev6:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1FD7DD-DC8C-416C-A55B-FA7B961ECD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev8:*:*:*:*:*:*",
            "matchCriteriaId" : "A07A8019-D7D7-4E1D-AEA7-DF509175393D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev9:*:*:*:*:*:*",
            "matchCriteriaId" : "9FEEF620-CD8A-49C4-89D6-565503A1790F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6164303F-253E-440C-A45C-94FFF7B492AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev10:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD257D7-D9B2-4036-92D6-3A923B7DC59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev11:*:*:*:*:*:*",
            "matchCriteriaId" : "36383B07-AF6C-4EDA-A35E-50633D1612A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev13:*:*:*:*:*:*",
            "matchCriteriaId" : "032B8B47-9E01-41B3-99D4-DECD4727DEA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev14:*:*:*:*:*:*",
            "matchCriteriaId" : "F7211571-4614-4169-A897-D0047304A4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev15:*:*:*:*:*:*",
            "matchCriteriaId" : "992082E5-5E00-40F0-8246-FD44D189C70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev16:*:*:*:*:*:*",
            "matchCriteriaId" : "4279A168-8A9A-43FF-8766-738EE31D6E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev17:*:*:*:*:*:*",
            "matchCriteriaId" : "5A734819-B817-4E54-89B1-B6A5FD52C758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev18:*:*:*:*:*:*",
            "matchCriteriaId" : "63AFF50B-7ABD-455D-A2A5-05432B41E4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev3:*:*:*:*:*:*",
            "matchCriteriaId" : "8681201A-5DB3-42A9-A203-9641B4459537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev4:*:*:*:*:*:*",
            "matchCriteriaId" : "C567F8B8-D9D0-4006-819C-C995C6573FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev5:*:*:*:*:*:*",
            "matchCriteriaId" : "07FEF270-E3ED-463D-9940-7FC9573E40C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev6:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1E38C-EC1A-42D1-86AF-D53D8BF0098C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF75100-6E38-4FCB-BC21-FFB1C4B3EC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev8:*:*:*:*:*:*",
            "matchCriteriaId" : "BF34B133-486B-4D77-8745-4D0E082FF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev9:*:*:*:*:*:*",
            "matchCriteriaId" : "33B507D7-536B-4AC3-BCB3-BF3A6BA257F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/148118/OX-App-Suite-7.8.4-XSS-Privilege-Management-SSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jun/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44881/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/148118/OX-App-Suite-7.8.4-XSS-Privilege-Management-SSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Jun/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44881/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13072",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2018-06-21T13:29:00.273",
      "lastModified" : "2024-11-21T03:10:54.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en App Center en QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223 y sus versiones anteriores podría permitir que los atacantes remotos inyecten código JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9E6F8F-A433-45A7-8839-5D478FE179A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C7D2D4-769F-4297-89F4-75366FFA7618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201805-16",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/nas-201805-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2669",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-06-21T13:29:00.317",
      "lastModified" : "2024-11-21T03:23:56.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang."
      }, {
        "lang" : "es",
        "value" : "Dovecot en versiones anteriores a la 2.2.29 es vulnerable a una denegación de servicio (DoS). Cuando se emplearon los \"dict\" passdb y userdb para la autenticación de usuarios, el nombre de usuario enviado por el cliente IMAP/POP3 se envió mediante var_expand() para realizar la expansión de %variable. El envío de campos %variable especialmente manipulados podría resultar en un uso excesivo de memoria que provoca que el proceso se cierre inesperadamente (y se reinicie) o en un uso excesivo de CPU que provoca que todas las autenticaciones dejen de responder."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.26",
            "versionEndIncluding" : "2.2.28",
            "matchCriteriaId" : "D6A0F511-D72E-464A-BA7B-477C9CC0B479"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/11/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97536",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://dovecot.org/pipermail/dovecot-news/2017-April/000341.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dovecot/core/commit/000030feb7a30f193197f1aab8a7b04a26b42735.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://dovecot.org/pipermail/dovecot-news/2017-April/000341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dovecot/core/commit/000030feb7a30f193197f1aab8a7b04a26b42735.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2672",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-06-21T13:29:00.397",
      "lastModified" : "2024-11-21T03:23:56.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error en foreman en versiones anteriores a la 1.15 en el registro de adición y registro de imágenes. Un atacante con acceso al archivo de logs de foreman podría ver contraseñas para sistemas aprovisionados en el archivo de registro, lo que les permitiría acceder a esos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15",
            "matchCriteriaId" : "FAFCDA3D-772E-429D-A35E-00D2B8868C45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F6E32E-6AF3-489A-AFEF-D5309E0D1779"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97526",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2672",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/19169",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/19169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2668",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-06-22T13:29:00.213",
      "lastModified" : "2024-11-21T03:23:56.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service."
      }, {
        "lang" : "es",
        "value" : "389-ds-base en versiones anteriores a la 1.3.5.17 y 1.3.6.10 es vulnerable a una desreferencia de puntero inválido en la forma en la que se gestionan las peticiones LDAP. Un atacante remoto no autenticado podría emplear este error para hacer que ns-slapd se cierre inesperadamente mediante una petición bind LDAP especialmente manipulada que resulta en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.5.0",
            "versionEndExcluding" : "1.3.5.17",
            "matchCriteriaId" : "D834E7AF-34D0-47D2-8556-C32E22FBA651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.6.0",
            "versionEndExcluding" : "1.3.6.10",
            "matchCriteriaId" : "77128973-2750-48DC-9F5D-FD62B15AA106"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97524",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0920",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2668",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pagure.io/389-ds-base/issue/49220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://pagure.io/389-ds-base/issue/49220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7466",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-06-22T13:29:00.277",
      "lastModified" : "2024-11-21T03:31:57.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges."
      }, {
        "lang" : "es",
        "value" : "Ansible en versiones anteriores a la 2.3 tiene una vulnerabilidad de validación de entradas en la gestión de datos enviados desde los sistemas del cliente. Un atacante que tenga el control de un sistema de cliente gestionado por Ansible y la capacidad de enviar hechos de vuelta al servidor de Ansible podría usar este error para ejecutar código arbitrario en el servidor de Ansible utilizando los privilegios del servidor de Ansible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3",
            "matchCriteriaId" : "17F74DE0-4CE3-45DD-8217-DE1700F66B82"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97595",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1244",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1476",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1499",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1599",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7568",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2018-06-22T15:29:00.217",
      "lastModified" : "2024-11-21T03:32:11.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface."
      }, {
        "lang" : "es",
        "value" : "NetApp OnCommand Unified Manager for 7-Mode (paquete core) en versiones anteriores a la 5.2.3 podría revelar información sensible de la cuenta LDAP a usuarios autenticados cuando la configuración de autenticación LDAP se prueba a través de la interfaz de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.3",
            "matchCriteriaId" : "54BA008D-3E43-4B0B-9FE3-A2FBD8BC6EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104536",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180621-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180621-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-25T15:29:00.207",
      "lastModified" : "2024-11-21T03:35:48.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the device reboots immediately."
      }, {
        "lang" : "es",
        "value" : "El procesamiento del campo option implementado de forma incorrecta en la pila TCP/IP en los dispositivos de seguridad Allen-Bradley L30ERMS en versiones v30 y anteriores provoca una denegación de servicio (DoS). Cuando se recibe un paquete TCP, el dispositivo se reinicia de forma inmediata."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:allen-bradley_l30erms_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "30",
            "matchCriteriaId" : "9CD65B57-57B5-41C6-BBDB-263F87949E66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:allen-bradley_l30erms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BBB966-7ADD-44CC-A619-907E922DD7F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104528",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-172-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-172-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7656",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-06-26T15:29:00.217",
      "lastModified" : "2024-11-21T03:32:23.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty, en versiones 9.2.x y anteriores, versiones 9.3.x (todas las configuraciones) y versiones 9.4.x (configuración personalizada con el cumplimiento RFC2616 habilitado), HTTP/0.9 se gestiona de forma incorrecta. Una línea de petición de estilo HTTP/1 (p.ej., método espacio URI espacio versión) que declara una versión de HTTP/0.9 se aceptó y trató como petición 0.9. Si se implementa tras un intermediario que también aceptó y pasó la versión 0.9 (pero no actuó en consecuencia), la respuesta enviada podría ser interpretada por el intermediario como cabeceras HTTP/1.  Esto podría utilizarse para envenenar la caché si el servidor permite que el cliente de origen genere contenido arbitrario en la respuesta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.26",
            "matchCriteriaId" : "486E784F-1FC5-42AA-B144-EDBE5FE9B993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.24",
            "matchCriteriaId" : "C513260A-7AD7-44C2-97F0-167B5819475E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.11",
            "matchCriteriaId" : "5A720480-0A8A-48FE-85FE-6973DAB7A7D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041194",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=535667",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbf4565a0b63f9c8b07fab29352a97bbffe76ecafed8b8555c15b83c6%40%3Cissues.maven.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181014-0001/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4278",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "http://www.securitytracker.com/id/1041194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=535667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbf4565a0b63f9c8b07fab29352a97bbffe76ecafed8b8555c15b83c6%40%3Cissues.maven.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181014-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7657",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-06-26T16:29:00.257",
      "lastModified" : "2024-11-21T03:32:23.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty, en versiones 9.2.x y anteriores, versiones 9.3.x (todas las configuraciones) y versiones 9.4.x (configuración personalizada con el cumplimiento RFC2616 habilitado), los fragmentos transfer-encoding se gestionan de forma incorrecta. El análisis de longitud de fragmento era vulnerable a un desbordamiento de enteros. Así, podría interpretarse un tamaño de fragmento grande como un tamaño menor y el contenido enviado como cuerpo del fragmento podría interpretarse como una petición pipelined. Si Jetty se despliega tras un intermediario que imponía autorización y el intermediario permitía que se pasasen o no se cambiasen grandes fragmentos arbitrarios, este error podría emplearse para omitir la autorización impuesta por el intermediario, ya que la petición pipelined falsa no sería interpretada por el intermediario como una petición."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.26",
            "matchCriteriaId" : "486E784F-1FC5-42AA-B144-EDBE5FE9B993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.24",
            "matchCriteriaId" : "C513260A-7AD7-44C2-97F0-167B5819475E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.11",
            "matchCriteriaId" : "5A720480-0A8A-48FE-85FE-6973DAB7A7D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF77086-43C1-44DB-A574-61A9A3DD1220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.50.1",
            "matchCriteriaId" : "F5F95A41-A496-481C-A906-E0307AC1EA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680ECEAE-D73F-47D2-8AF8-7704469CF3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E902EEC6-9A41-4FBC-8D81-891DF846A5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_storage_nodes:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855D6A52-F96F-4CA0-A59C-4D42173F22E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_system_manager:3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE20EF7-C8A3-4C2A-BE0C-C26452830C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.4",
            "matchCriteriaId" : "97547862-C382-4F46-B393-481D40E924E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snap_creator_framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "9E234481-81F5-42D7-A4EC-F71245268D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1p3",
            "matchCriteriaId" : "33862093-55AD-46CE-97F5-0A00A62766FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:oracle:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "41436638-0B88-4823-8208-81C01F2CA6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:sap:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "910F5303-1F70-44E3-A951-567447BC46FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:xp_p9000_command_view:*:*:*:*:advanced:*:*:*",
            "versionStartIncluding" : "8.4.0-00",
            "versionEndExcluding" : "8.6.2-00",
            "matchCriteriaId" : "92C306B7-185C-4CC4-8DEF-4C57B61C49AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:xp_p9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC9BC28-72E9-4D53-B388-6A8AB7CFD22E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:*",
            "matchCriteriaId" : "36FC547E-861A-418C-A314-DA09A457B13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "DF9FEE51-50E3-41E9-AA0D-272A640F85CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:*",
            "matchCriteriaId" : "E69E905F-2E1A-4462-9082-FF7B10474496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0F9B692C-8986-4F91-9EF4-2BB1E3B5C133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA6839-849D-4CEF-85F3-38FE75E07183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE78490-A4BE-40BD-8C72-0A4526BBD4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE3629-4A66-49E4-A33D-6D81CC94962F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041194",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0910",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=535668",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181014-0001/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4278",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=535668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181014-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7658",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2018-06-26T17:29:00.210",
      "lastModified" : "2024-11-21T03:32:23.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty Server, en versiones 9.2.x y anteriores, versiones 9.3.x (todas las configuraciones que no sean HTTP/1.x) y versiones 9.4.x (todas las configuraciones HTTP/1.x), cuando se presentan con dos cabeceras content-lengths, Jetty ignora la segunda. Cuando se presenta con una cabecera de cifrado fragmentada y otra content-length, esta última fue ignorada (según RFC 2616). Si un intermediario se decide por el tamaño más pequeño, pero se sigue pasando como el cuerpo más grande, el contenido del cuerpo podría ser interpretado por Jetty como petición pipelined. Si el intermediario impone la autorización, la petición pipelined falsa omitiría dicha autorización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.26",
            "matchCriteriaId" : "486E784F-1FC5-42AA-B144-EDBE5FE9B993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.24",
            "matchCriteriaId" : "C513260A-7AD7-44C2-97F0-167B5819475E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.11",
            "matchCriteriaId" : "5A720480-0A8A-48FE-85FE-6973DAB7A7D5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:*",
            "matchCriteriaId" : "36FC547E-861A-418C-A314-DA09A457B13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "DF9FEE51-50E3-41E9-AA0D-272A640F85CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:*",
            "matchCriteriaId" : "E69E905F-2E1A-4462-9082-FF7B10474496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0F9B692C-8986-4F91-9EF4-2BB1E3B5C133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_payment:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBA1229-8AC0-4E6F-9F31-AB647160FB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA6839-849D-4CEF-85F3-38FE75E07183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE78490-A4BE-40BD-8C72-0A4526BBD4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE3629-4A66-49E4-A33D-6D81CC94962F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:xp_p9000_command_view:*:*:*:*:advanced:*:*:*",
            "versionStartIncluding" : "8.4.0-00",
            "versionEndIncluding" : "8.6.2-00",
            "matchCriteriaId" : "3C209829-7941-4B64-89CA-0220804B6163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:xp_p9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC9BC28-72E9-4D53-B388-6A8AB7CFD22E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF77086-43C1-44DB-A574-61A9A3DD1220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.50.1",
            "matchCriteriaId" : "F5F95A41-A496-481C-A906-E0307AC1EA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680ECEAE-D73F-47D2-8AF8-7704469CF3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3246A7D-243B-415A-827D-C5D7F62AFE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "B9273745-6408-4CD3-94E8-9385D4F5FE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_for_7-mode:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D774A4A1-3D1E-4C31-B876-97BEA9E95027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4754FB-E3EB-454A-AB1A-AE3835C5350C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_services_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27762B9-8042-429B-B714-3B3A17B2842A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106566",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041194",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=535669",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574%40%3Ccommits.druid.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181014-0001/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4278",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=535669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181014-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-06-27T12:29:00.210",
      "lastModified" : "2024-11-21T03:19:53.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function."
      }, {
        "lang" : "es",
        "value" : "En PyYAML en versiones anteriores a 5.1, la API yaml.load () podría ejecutar código arbitrario si se usara con datos no confiables. La función load () ha quedado en desuso en la versión 5.1 y se ha introducido el \"UnsafeLoader\" para una compatibilidad hacia atrás con la función."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyyaml:pyyaml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1",
            "matchCriteriaId" : "9B1739DE-EE4C-4F2D-BAFB-1D56C3624D08"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D100F7CE-FC64-4CC6-852A-6136D72DA419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marshmallow-code/apispec/issues/278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/blob/master/CHANGES",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/issues/193",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/pull/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load%28input%29-Deprecation",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEX7IPV5P2QJITAMA5Z63GQCZA5I6NVZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSQQMRUQSXBSUXLCRD3TSZYQ7SEZRKCE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6JCFGEIEOFMWWIXGHSELMKQDD4CV2BA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-45",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marshmallow-code/apispec/issues/278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/blob/master/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/issues/193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/pull/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load%28input%29-Deprecation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEX7IPV5P2QJITAMA5Z63GQCZA5I6NVZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSQQMRUQSXBSUXLCRD3TSZYQ7SEZRKCE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6JCFGEIEOFMWWIXGHSELMKQDD4CV2BA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202003-45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7465",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-06-27T16:29:00.207",
      "lastModified" : "2024-11-21T03:31:57.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a 'javax.xml.transform.TransformerFactory'. If the FEATURE_SECURE_PROCESSING feature is set to 'true', it mitigates this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la implementación JAXP empleada en JBoss EAP 7.0 para el procesamiento XSLT es vulnerable a una inyección de código. Un atacante podría emplear este error para provocar la ejecución remota de código si puede proporcionar contenido XSLT para que sea analizado. La realización de una transformación en JAXP requiere el uso de \"javax.xml.transform.TransformerFactory\". Si la característica FEATURE_SECURE_PROCESSING está marcada como \"true\", mitiga esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97605",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16718",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-06-27T19:29:00.233",
      "lastModified" : "2024-11-21T03:16:50.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption uses a fixed key, that could be extracted by an attacker. Precondition of the exploitation of this weakness is network access at the moment a route is added."
      }, {
        "lang" : "es",
        "value" : "Beckhoff TwinCAT 3 soporta comunicaciones mediante ADS. ADS es un protocolo para la automatización industrial en entornos protegidos. Este protocolo emplea rutas configuradas que pueden ser editadas de forma remota mediante ADS. Este comando especial soporta la autenticación cifrada con un nombre de usuario y una contraseña. El cifrado emplea una clave fija que podría ser extraída por un atacante. Una precondición para la explotación de esta debilidad es contar con acceso de red en el momento en el que se añade una ruta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beckhoff:twincat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934FE489-5AC5-4BD9-B301-25C6FCC14206"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-002.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16726",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-06-27T19:29:00.280",
      "lastModified" : "2024-11-21T03:16:51.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable."
      }, {
        "lang" : "es",
        "value" : "Beckhoff TwinCAT soporta comunicaciones por ADS. ADS es un protocolo para la automatización industrial en entornos protegidos. ADS no se ha diseñado desde el punto de vista de la seguridad y, por lo tanto, no incluye ningún algoritmo de cifrado por su efecto negativo en el rendimiento y el throughput. Un atacante podría forjar paquetes ADS arbitrarios cuando es observable tráfico ADS legítimo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beckhoff:twincat:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0324B77D-8923-4C9B-8F06-535FBC758AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16859",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-06-28T14:29:00.213",
      "lastModified" : "2024-11-21T03:17:06.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command parameter."
      }, {
        "lang" : "es",
        "value" : "El recurso review attachment en Atlassian Fisheye y Crucible en versiones anteriores a la 4.3.2, desde la 4.4.0 hasta la 4.4.3 y en versiones anteriores a la 4.5.0 permite que los atacantes remotos lean archivos contenidos en la ruta context de la aplicación en ejecución mediante una vulnerabilidad de salto de directorio en el parámetro command."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.2",
            "matchCriteriaId" : "236344F6-D714-4CBB-A741-7492ED0C1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "C1A5C301-8708-4774-9DC5-717E88A805F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.5",
            "versionEndExcluding" : "4.5.0",
            "matchCriteriaId" : "6ECAA854-F8F5-443C-BA81-428CE40C0E4A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.2",
            "matchCriteriaId" : "AD4FFE7E-3037-4CA3-86D6-89087986840C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "97718354-9B00-4E93-A879-7423456E0344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.5",
            "versionEndExcluding" : "4.5.0",
            "matchCriteriaId" : "57504A18-A951-40C9-A2A9-994298B806E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104578",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8212",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7061",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CRUC-8212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17175",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-07-02T13:29:00.210",
      "lastModified" : "2024-11-21T03:17:38.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Short Message Service (SMS) module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354(C00) has a Denial of Service (DoS) vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone to fail to make calls and send and receive text messages."
      }, {
        "lang" : "es",
        "value" : "El módulo Short Message Service (SMS) de los smartphones Mate 9 Pro Huawei con versiones anteriores a la LON-AL00B 8.0.0.354(C00) tiene una vulnerabilidad de denegación de servicio (DoS). Un atacante no autenticado podría montar una pseudo estación base y enviar mensajes de texto de malware especiales al teléfono, lo que hace que éste no pueda realizar llamadas ni recibir mensajes de texto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:mate_9_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00b_8.0.0.354\\(c00\\)",
            "matchCriteriaId" : "ADDB11C3-4FFB-4AE2-B02E-9535C6D1B7EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180629-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180629-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17316",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-07-02T13:29:00.257",
      "lastModified" : "2024-11-21T03:17:49.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker has to control the peer device and craft the Signalling Connection Control Part (SCCP) messages to the target devices. Due to insufficient input validation of some values in the messages, successful exploit will cause out-of-bounds read and some services abnormal."
      }, {
        "lang" : "es",
        "value" : "Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00 y V600R006C00 tienen una vulnerabilidad de lectura fuera de límites. Un atacante remoto no autenticado debe controlar el dispositivo peer y manipular los mensajes SCCP (Signalling Connection Control Part) a los dispositivos objetivo. Dada la validación de entradas insuficiente de algunos valores en los mensajes, un exploit con éxito podría provocar una lectura fuera de límites y el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-sccp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-sccp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17317",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-07-02T13:29:00.317",
      "lastModified" : "2024-11-21T03:17:49.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00 has a buffer overflow vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted message to the affected products. Due to insufficient input validation, successful exploit may cause some services abnormal."
      }, {
        "lang" : "es",
        "value" : "El módulo COPS (Common Open Policy Service Protocol) en dispositivos Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00 y V600R006C00 tiene una vulnerabilidad de desbordamiento de búfer. Un atacante remoto no autenticado debe controlar el dispositivo del mismo nivel y enviar mensajes especialmente manipulados a los productos afectados. Dada la validación de entradas insuficiente, su explotación con éxito podría provocar el funcionamiento erróneo de algunos servicios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871106B-D3AF-4CFB-A544-1FA411642428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3483B2-9EB6-4E34-900A-945C04A3160D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C1ED34-BC94-4AAC-ADF4-5FCD637E5B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67731A77-1DD4-49B2-B437-2850C9583750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98275088-2FBE-42F4-AAEC-DF02950B803D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686651A5-6F2F-4AF3-9B96-FF5905F2303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EF476-42D7-4758-8DCB-373F46BF1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEA387B-4F45-438F-8086-6E80B553163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018039EB-7265-4B71-B462-4734FD1D0503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD87254-ABAD-4DFF-BC0D-2CF030063D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931FD3B3-A333-4277-AE55-494F5DB9F09F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C3AF58-E030-4E12-A2FD-A4337A5021ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A4D51-314B-4A77-86A7-9C5237BC4275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F8924-DC80-4D6F-BA3E-DBFE32FED788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6EACB9-6832-4B2A-9C5B-C1E2747D6359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092C9FAF-8892-4E16-9C0E-BB1E3488C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC9042-0485-437F-811F-F8898B3B7EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29049D-F472-4772-8750-20730DA624E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999117E9-90C8-4E76-90B5-7D364C0B84BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-cops-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-cops-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2615",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-03T01:29:00.393",
      "lastModified" : "2024-11-21T03:23:50.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host."
      }, {
        "lang" : "es",
        "value" : "Quick emulator (QEMU) con soporte integrado para el emulador Cirrus CLGD 54xx VGA es vulnerable a un problema de acceso fuera de límites. Podría ocurrir mientras se copian datos VGA mediante la copia bitblt en modo backward. Un usuario privilegiado en un invitado podría emplear este error para provocar el cierre inesperado del proceso QEMU, lo que resulta en una denegación de servicio (DoS) o en la potencial ejecución de código arbitrario en el host con los privilegios del proceso QEMU en el host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.0",
            "matchCriteriaId" : "B256D13F-3021-486C-B9BD-A5F97F716FA7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "878949E0-D656-4E0E-858A-C6AD948A2A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCF6643-ACDE-4DDB-8B01-D952DDF8951E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5647AEA-DCE6-4950-A7EB-05465ECDDE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B152EDF3-3140-4343-802F-F4F1C329F5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "E26BFEBF-36AE-4956-918E-0F3745F67103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC6689-C725-4A0D-B18F-F06C63F43AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDCD905-A9D3-4BF7-BC92-35886465241E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCF1B40-C3A8-4505-B8C9-2F2C7753BFC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E37280FF-ADAF-4829-9193-E1C203E1BE42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0309.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0331.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0332.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0333.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0334.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0344.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0350.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0396.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0454.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95990",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037804",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX220771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0309.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0350.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0396.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0454.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/01/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201702-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX220771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1250",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.277",
      "lastModified" : "2024-11-21T03:21:34.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force 124630."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124630."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124630",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1275",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.370",
      "lastModified" : "2024-11-21T03:21:37.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124750."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124750."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124750",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1277",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.417",
      "lastModified" : "2024-11-21T03:21:37.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124752."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124752."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124752",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1280",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.467",
      "lastModified" : "2024-11-21T03:21:37.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124758."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124758."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124758",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1281",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.513",
      "lastModified" : "2024-11-21T03:21:37.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124759."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124759."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124759",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1293",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.557",
      "lastModified" : "2024-11-21T03:21:39.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125154."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125154."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125154",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1294",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.620",
      "lastModified" : "2024-11-21T03:21:39.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125155."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125155."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125155",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1299",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.653",
      "lastModified" : "2024-11-21T03:21:40.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125161."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125161."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125161",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1306",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.717",
      "lastModified" : "2024-11-21T03:21:41.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125460."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125460."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125460",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1312",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.760",
      "lastModified" : "2024-11-21T03:21:41.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125723."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125723."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125723",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1313",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.823",
      "lastModified" : "2024-11-21T03:21:41.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125724."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125724."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125724",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1314",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.887",
      "lastModified" : "2024-11-21T03:21:41.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125725."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125725."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125725",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1315",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.933",
      "lastModified" : "2024-11-21T03:21:42.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125727."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125727."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125727",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1316",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:00.980",
      "lastModified" : "2024-11-21T03:21:42.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125728."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125728."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125728",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1317",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.027",
      "lastModified" : "2024-11-21T03:21:42.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125729."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 125729."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1561",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.057",
      "lastModified" : "2024-11-21T03:22:04.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131760."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131760."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131760",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1562",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.107",
      "lastModified" : "2024-11-21T03:22:05.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131761."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131761."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131761",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1564",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.167",
      "lastModified" : "2024-11-21T03:22:05.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131764."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131764."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131764",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1565",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.217",
      "lastModified" : "2024-11-21T03:22:05.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131765."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131765."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131765",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1568",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.263",
      "lastModified" : "2024-11-21T03:22:05.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131778."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 131778."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131778",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1592",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.293",
      "lastModified" : "2024-11-21T03:22:06.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132493."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132493."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132493",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1608",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.357",
      "lastModified" : "2024-11-21T03:22:08.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132928."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132928."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132928",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1621",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.387",
      "lastModified" : "2024-11-21T03:22:08.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133088."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133088."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133088",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1651",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.450",
      "lastModified" : "2024-11-21T03:22:10.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133261."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133261."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133261",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1652",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.497",
      "lastModified" : "2024-11-21T03:22:10.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133263."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133263."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133263",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1690",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.543",
      "lastModified" : "2024-11-21T03:22:13.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134065."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134065."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08EF876-5D00-45DC-A724-D2496854D87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88989B56-B482-4FCA-98D7-9869CD86C15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094EE5E-DF84-4922-A612-35CD4DC4D875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569ED1E-D61E-4F97-825B-2B20A1C03319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134065",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1691",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.607",
      "lastModified" : "2024-11-21T03:22:13.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134066."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134066."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134066",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1715",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.653",
      "lastModified" : "2024-11-21T03:22:15.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134637."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134637."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134637",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1717",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-03T19:29:01.717",
      "lastModified" : "2024-11-21T03:22:15.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134796."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager y IBM Rational Collaborative Lifecycle Management, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134796."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E396E-905A-4CE3-8AEB-12BFBE679B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7E998F-416E-4E1F-BF85-606224B468CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F871EF36-B640-42B3-AC50-DFD707E53953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52984F5-4372-4D13-95B1-51F4DB19D425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E547E-F256-4B0B-92B0-5A0934516534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C2970D-4872-48D2-B472-88F79D421C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9773E58-D118-445C-9F1C-A897BF742176"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A32DF4D-B68E-4C3E-AF20-05C80B26461A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3010A6F8-A2C7-4236-B5F8-21BC6581B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CFA6A6-19E4-4325-BCDF-5AFA8A366196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23D62A7-F471-456B-BD89-766371848DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F33689-E176-46CA-8D5E-088081F424FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715AA08F-7DA8-4157-8A0B-C5A3A47E969B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134796",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0912",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-07-03T21:29:00.217",
      "lastModified" : "2024-11-21T03:03:52.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the lack sanitization, it is possible to inject arbitrary HTML code by manipulating the uploaded filename. Successful exploitation requires valid credentials to an account with \"Edit\" access to \"Scheduling\"."
      }, {
        "lang" : "es",
        "value" : "Ubiquiti UCRM desde la versión 2.5.0 a la 2.7.7 es vulnerable a Cross-Site Scripting (XSS) persistente. Debido a la falta de saneamiento, es posible inyectar código HTML arbitrario manipulando el nombre de archivo subido. La explotación exitosa de esta vulnerabilidad requiere credenciales válidas para una cuenta con acceso \"Edit\" a \"Scheduling\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:ucrm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndIncluding" : "2.7.7",
            "matchCriteriaId" : "6BFDCEF6-A604-40E3-800A-BC5A2EDE822D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0913",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-07-03T21:29:00.247",
      "lastModified" : "2024-11-21T03:03:53.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with \"Edit\" access to \"System Customization\"."
      }, {
        "lang" : "es",
        "value" : "Ubiquiti UCRM desde la versión 2.3.0 a la 2.7.7 permite que un usuario autenticado lea archivos arbitrarios en el sistema de archivos local. Por defecto, el sistema de archivos local está aislado en un contenedor de tipo docker. La explotación exitosa de esta vulnerabilidad requiere credenciales válidas para una cuenta con acceso \"Edit\" a \"System Customization\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubnt:ucrm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndIncluding" : "2.7.7",
            "matchCriteriaId" : "469CD514-8882-406F-BEB2-ABAF78B04710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301406",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0919",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-07-03T21:29:00.293",
      "lastModified" : "2024-11-21T03:03:53.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized."
      }, {
        "lang" : "es",
        "value" : "Las ediciones Community y Enterprise de Gitlab, en versiones anteriores a la 10.1.6, 10.2.6 y 10.3.4, son vulnerables a un problema de omisión de autorización en el componente de importación de GitLab. Esto resulta en que un atacante puede realizar operaciones bajo un grupo en el que antes no estaban autorizados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "10.1.6",
            "matchCriteriaId" : "BFB57431-FE27-4D54-9A61-020DFD237029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "10.1.6",
            "matchCriteriaId" : "84575803-64B2-4E3A-81A0-F1B964D91258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "18CE7EFC-7939-4B85-8E2D-D9A584A303C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "42BEB1BB-7805-40E9-B323-525A0C2506AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.4",
            "matchCriteriaId" : "13F71B19-2DB0-453E-9020-947E26D61C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.4",
            "matchCriteriaId" : "18718016-0189-4AA9-8BD3-F0D172082B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/301137",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/301137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0921",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-07-03T21:29:00.340",
      "lastModified" : "2024-11-21T03:03:54.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised."
      }, {
        "lang" : "es",
        "value" : "Las ediciones Community y Enterprise de Gitlab, en versiones anteriores a la 10.1.6, 10.2.6 y 10.3.4, son vulnerables a un problema de cambio de contraseña sin verificar en el componente PasswordsController, lo que resulta en la toma de control de la cuenta si la sesión de la víctima se ve comprometida."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "10.1.6",
            "matchCriteriaId" : "BFB57431-FE27-4D54-9A61-020DFD237029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "10.1.6",
            "matchCriteriaId" : "84575803-64B2-4E3A-81A0-F1B964D91258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "18CE7EFC-7939-4B85-8E2D-D9A584A303C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.6",
            "matchCriteriaId" : "42BEB1BB-7805-40E9-B323-525A0C2506AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.4",
            "matchCriteriaId" : "13F71B19-2DB0-453E-9020-947E26D61C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.4",
            "matchCriteriaId" : "18718016-0189-4AA9-8BD3-F0D172082B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/2018/05/29/security-release-gitlab-10-dot-8-dot-2-released/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://about.gitlab.com/2018/05/29/security-release-gitlab-10-dot-8-dot-2-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0929",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2018-07-03T21:29:00.370",
      "lastModified" : "2024-11-21T03:03:55.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources."
      }, {
        "lang" : "es",
        "value" : "DNN (también conocido como DotNetNuke) en versiones anteriores a la 9.2.0 sufre de una vulnerabilidad Server-Side Request Forgery (SSRF) en la clase DnnImageHandler. Los atacantes podrían ser capaces de acceder a información sobre recursos de red internos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "9EF6E634-A756-4E96-9870-F3906147D58C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/commit/d3953db85fee77bb5e6383747692c507ef8b94c3",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/commit/d3953db85fee77bb5e6383747692c507ef8b94c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16773",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2018-07-05T13:29:00.240",
      "lastModified" : "2024-11-21T03:16:56.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización incorrecta en Highlight Preview en Synology Universal Search en versiones anteriores a la 1.0.5-0135 permite que usuarios autenticados remotos omitan las comprobaciones de permisos para los directorios en modo POSIX."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:universal_search:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5-0135",
            "matchCriteriaId" : "2B2EB4FB-5F98-4872-ACBA-31603944F943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_27",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/support/security/Synology_SA_18_27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-05T18:29:00.253",
      "lastModified" : "2024-11-21T03:07:15.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login."
      }, {
        "lang" : "es",
        "value" : "En J2 Innovations FIN Stack 4.0, el formulario web de autenticación es vulnerable a Cross-Site Scripting (XSS) reflejado mediante la cadena de consulta en /login."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:fin_stack:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204BF717-8E42-4179-B18B-DD633B3269DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-05T20:29:00.260",
      "lastModified" : "2024-11-21T03:17:01.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions."
      }, {
        "lang" : "es",
        "value" : "El componente condor_schedd en HTCondor en versiones anteriores a la 8.6.8 y versiones 8.7.x anteriores a la 8.7.5 permite que usuarios autenticados remotos provoquen una denegación de servicio (cierre inesperado del demonio) aprovechando el uso de las extensiones GSI y VOMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.6.8",
            "matchCriteriaId" : "6A357B40-A36A-4847-9C6C-946800195C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.5",
            "matchCriteriaId" : "B2DA257B-07F2-4317-8A25-AC48A69AEE33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www-auth.cs.wisc.edu/lists/htcondor-users/2017-November/msg00022.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www-auth.cs.wisc.edu/lists/htcondor-users/2017-November/msg00022.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2665",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-06T13:29:00.217",
      "lastModified" : "2024-11-21T03:23:56.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plain text."
      }, {
        "lang" : "es",
        "value" : "El comando skyring-setup crea contraseñas aleatorias para la base de datos mongodb de skyring, pero escribe contraseñas en texto plano en el archivo /etc/skyring/skyring.conf, propiedad de root, pero leído por un usuario local. Cualquier usuario local que tenga acceso al sistema que ejecuta el servicio skyring será capaz de obtener la contraseña en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A50102-AB27-4077-A7B3-0E74EA1021F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:storage_console:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E916298F-E4F3-49FB-92DA-C92013188C44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97612",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2665",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1237",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.507",
      "lastModified" : "2024-11-21T03:21:33.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124355."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones basadas en IBM Jazz son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124355."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "55F41839-16F2-4DF0-851E-4549F906BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "76C7E065-EAF0-4A4D-B6F8-A2705C287EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "C5C61916-4F4D-4DD3-8F09-F55322767C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124355",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1238",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.567",
      "lastModified" : "2024-11-21T03:21:33.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124356."
      }, {
        "lang" : "es",
        "value" : "IBM Quality Manager (RQM) en versiones 5.0.x y desde la 6.0 hasta la 6.0.5 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 124356."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "6.0.3",
            "matchCriteriaId" : "91C31818-990D-4CA2-8AB1-3039E447F2E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124356",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1239",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.617",
      "lastModified" : "2024-11-21T03:21:33.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124357."
      }, {
        "lang" : "es",
        "value" : "IBM Quality Manager (RQM) en versiones 5.0.x y desde la 6.0 hasta la 6.0.5 podría revelar información sensible en respuestas de error \"HTTP 500: Error interno del servidor\". IBM X-Force ID: 124357."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "6.0.3",
            "matchCriteriaId" : "91C31818-990D-4CA2-8AB1-3039E447F2E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124357",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1242",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.663",
      "lastModified" : "2024-11-21T03:21:34.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124524."
      }, {
        "lang" : "es",
        "value" : "IBM Quality Manager (RQM) en versiones 5.0.x y desde la 6.0 hasta la 6.0.5 es vulnerable a inyección HTML. Un atacante remoto podría ejecutar código HTML malicioso que, cuando se visualiza, se ejecutaría en el navegador web de la víctima en el contexto de seguridad del sitio anfitrión. IBM X-Force ID: 124524."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "6.0.3",
            "matchCriteriaId" : "91C31818-990D-4CA2-8AB1-3039E447F2E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124524",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1248",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.710",
      "lastModified" : "2024-11-21T03:21:34.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124628."
      }, {
        "lang" : "es",
        "value" : "IBM Quality Manager (RQM) en versiones 5.0.x y desde la 6.0 hasta la 6.0.5 es vulnerable a inyección HTML. Un atacante remoto podría ejecutar código HTML malicioso que, cuando se visualiza, se ejecutaría en el navegador web de la víctima en el contexto de seguridad del sitio anfitrión. IBM X-Force ID: 124628."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "6.0.3",
            "matchCriteriaId" : "91C31818-990D-4CA2-8AB1-3039E447F2E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124628",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1329",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.757",
      "lastModified" : "2024-11-21T03:21:43.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 126231."
      }, {
        "lang" : "es",
        "value" : "IBM Quality Manager (RQM) en versiones 5.0.x y desde la 6.0 hasta la 6.0.5 es vulnerable a inyección HTML. Un atacante remoto podría ejecutar código HTML malicioso que, cuando se visualiza, se ejecutaría en el navegador web de la víctima en el contexto de seguridad del sitio anfitrión. IBM X-Force ID: 126231."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "6.0.3",
            "matchCriteriaId" : "91C31818-990D-4CA2-8AB1-3039E447F2E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126231",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1488",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.803",
      "lastModified" : "2024-11-21T03:21:57.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad no conocida en los productos comunes de Jazz que podría permitir la divulgación de información. IBM X-Force ID: 128627."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "55F41839-16F2-4DF0-851E-4549F906BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "76C7E065-EAF0-4A4D-B6F8-A2705C287EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "C5C61916-4F4D-4DD3-8F09-F55322767C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128627",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/128627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1509",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.850",
      "lastModified" : "2024-11-21T03:22:00.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719."
      }, {
        "lang" : "es",
        "value" : "Los productos IBM Jazz Foundation podrían permitir que un usuario autenticado obtenga información sensible de una traza de pila que se podría utilizar para futuros ataques. IBM X-Force ID: 129719."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "55F41839-16F2-4DF0-851E-4549F906BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "76C7E065-EAF0-4A4D-B6F8-A2705C287EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "C5C61916-4F4D-4DD3-8F09-F55322767C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129719",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/129719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1559",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.897",
      "lastModified" : "2024-11-21T03:22:04.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos de IBM Rational podrían permitir que un atacante que intercepte peticiones vulnerables divulgue información sensible. IBM X-Force ID: 131758."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "55F41839-16F2-4DF0-851E-4549F906BB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B877D86-6ABE-43E8-A681-0C937C779388"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "76C7E065-EAF0-4A4D-B6F8-A2705C287EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEC305-F98D-45F4-B149-1188744DE408"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "C5C61916-4F4D-4DD3-8F09-F55322767C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1186E8-2639-476F-802E-580D98F2E255"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4BC069-34DB-4B2F-BD6C-494BEEEF65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131758",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/131758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-prd-trops.events.ibm.com/node/715709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1795",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-06T14:29:00.943",
      "lastModified" : "2024-11-21T03:22:22.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ 7.5, 8.0 y 9.0 hasta la versión 9.0.4 podría permitir que un usuario local obtenga información sensible mediante registros de rastreo en IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.8",
            "matchCriteriaId" : "0B2A493C-D6E6-4070-9CDE-4EFEB364FF63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.2",
            "matchCriteriaId" : "E89947A3-BFA4-4DFC-95F3-DC9B47EAE785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:7.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7538DDD1-50C2-4137-A76C-A543E3886C55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:9.0.1:*:*:*:cd:*:*:*",
            "matchCriteriaId" : "A49064A0-8731-4C2C-BED1-F09B81125F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:9.0.2:*:*:*:cd:*:*:*",
            "matchCriteriaId" : "95EC6CB1-446A-436B-BB8B-77A2846106DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:9.0.3:*:*:*:cd:*:*:*",
            "matchCriteriaId" : "E18ADF29-E47B-4439-A836-46CA4D474E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq_managed_file_transfer:9.0.4:*:*:*:cd:*:*:*",
            "matchCriteriaId" : "C810ED10-60AB-4AA6-B03A-ED79DAA178EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012389",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137042",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22012389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11088",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.240",
      "lastModified" : "2024-11-21T03:07:04.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845."
      }, {
        "lang" : "es",
        "value" : "Validación de entradas incorrecta en Linux io-prefetch en Snapdragon Mobile y Snapdragon Wear. Existe una vulnerabilidad de inyección SQL en las versiones MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835 y SD 845."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14872",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.303",
      "lastModified" : "2024-11-21T03:13:40.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05."
      }, {
        "lang" : "es",
        "value" : "Al \"flashear\" una metaimagen, podría ocurrir una sobrelectura de búfer cuando el número de imágenes supera el rango de 32 en las distribuciones de Android desde CAF que utilizan el kernel de Linux (Android for MSM, Firefox OS for MSM y QRD Android) anteriores al nivel de parche de seguridad del 05/06/2018."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=1daa83baa41d1e6291e89f69e6487695b6890c01",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=1daa83baa41d1e6291e89f69e6487695b6890c01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14893",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.367",
      "lastModified" : "2024-11-21T03:13:42.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05."
      }, {
        "lang" : "es",
        "value" : "Al \"flashear\" una metaimagen, podría ocurrir una sobrelectura de búfer cuando el tamaño de la imagen es menor que el tamaño de la cabecera de la imagen o es menor que el tamaño de la cabecera de la imagen + la entrada total de la cabecera de la imagen en las distribuciones de Android desde CAF que utilizan el kernel de Linux (Android for MSM, Firefox OS for MSM y QRD Android) anteriores al nivel de parche de seguridad del 05/06/2018."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c8dc3bf07ee909e6e57ad7887f9d3c0ffa5df795",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c8dc3bf07ee909e6e57ad7887f9d3c0ffa5df795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15824",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.413",
      "lastModified" : "2024-11-21T03:15:17.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function UpdateDeviceStatus() writes a local stack buffer without initialization to flash memory using WriteToPartition() which may potentially leak memory."
      }, {
        "lang" : "es",
        "value" : "En las distribuciones de Android de CAF que utilizan el kernel de Linux (Android for MSM, Firefox OS for MSM y QRD Android) anteriores al nivel de parche de seguridad del 05/06/2018, la función UpdateDeviceStatus() escribe un búfer de pila local sin inicialización en la memoria flash utilizando WriteToPartition(), lo que puede provocar una fuga de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15856",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.460",
      "lastModified" : "2024-11-21T03:15:20.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05."
      }, {
        "lang" : "es",
        "value" : "Debido a una condición de carrera al procesar el archivo de depuración de estadísticas de potencia, podría ocurrir una doble liberación (double free) en las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux antes del parche de seguridad de nivel del 05/06/2018."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ed02c0ccd6f7461a69d64903738372eaf21babcd",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ed02c0ccd6f7461a69d64903738372eaf21babcd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18158",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.523",
      "lastModified" : "2024-11-21T03:19:28.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05 while flashing images."
      }, {
        "lang" : "es",
        "value" : "Posibles desbordamientos de búfer y accesos al array fuera de límites en las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux antes del parche de seguridad de nivel del 05/06/2018 al flashear imágenes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=316136f292cedaecf17823d6f3b63cf2d11314b3",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=316136f292cedaecf17823d6f3b63cf2d11314b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18159",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T17:29:00.587",
      "lastModified" : "2024-11-21T03:19:28.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur."
      }, {
        "lang" : "es",
        "value" : "En las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux antes del nivel de parche de seguridad del 05/06/2018, al procesar un StrHwPlatform con una longitud inferior a EFICHIPINFO_MAX_ID_LENGTH, podría ocurrir un acceso al array fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=04f23441b8c0c897644f9bf391b691039fa0ab70",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=3129148e5a4cfe83003449a1048660823bfddc51",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=4a63a848c062851776123d4bc7ec10eb498a70dd",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=5471b0cdf4bace12d872d074b97eae29f1317e6a",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=633fa4ffb38bbfb0fad79204e19b9f59d42d7680",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=7dcbee530800b16534d0f3e8db375492c03b3e0a",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=9057a8b3339abc4eb2c4e462279f34bbe6410e7c",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=b6b318431983f35a7734cae227478df3dc93a818",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=bcceb2ceeea07aedaa5f97207cc88f9d8b4416ea",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=04f23441b8c0c897644f9bf391b691039fa0ab70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=3129148e5a4cfe83003449a1048660823bfddc51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=4a63a848c062851776123d4bc7ec10eb498a70dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=5471b0cdf4bace12d872d074b97eae29f1317e6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=633fa4ffb38bbfb0fad79204e19b9f59d42d7680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=7dcbee530800b16534d0f3e8db375492c03b3e0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=9057a8b3339abc4eb2c4e462279f34bbe6410e7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=b6b318431983f35a7734cae227478df3dc93a818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=bcceb2ceeea07aedaa5f97207cc88f9d8b4416ea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15851",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-06T19:29:00.233",
      "lastModified" : "2024-11-21T03:15:20.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of copy_from_user and information leak in function \"msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel"
      }, {
        "lang" : "es",
        "value" : "La falta de copy_from_user y una fuga de información en la función \"msm_ois_subdev_do_ioctl en el archivo msm_ois.c puede conducir al cierre inesperado de la cámara en todas en todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulnerabilitycenter.com/#%21vul=87351",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulnerabilitycenter.com/#%21vul=87351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-09T11:29:00.230",
      "lastModified" : "2024-11-21T03:17:11.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero."
      }, {
        "lang" : "es",
        "value" : "SWFTools 0.9.2 tiene un error de división entre cero en la función wav_convert2mono en lib/wav.c porque el valor align podría ser cero."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7471",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-09T14:29:00.210",
      "lastModified" : "2024-11-21T03:31:58.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
      }, {
        "lang" : "es",
        "value" : "Quick Emulator (Qemu) interado con VirtFS, compartición de directorios host mediante el soporte 9pfs (Plan 9 File System), es vulnerable a un control de acceso incorrecto. Podría ocurrir cuando se acceden a archivos en un directorio host compartido. Un usuario privilegiado dentro del guest podría utilizar este fallo para acceder al sistema de archivos del host más allá de la carpeta compartida y podría escalar sus privilegios en un host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1.1",
            "matchCriteriaId" : "A965C2D1-C447-4324-95A4-27285ECF8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9F615830-8EC7-41C0-9A77-6C7D4E718429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "15D5C1F9-C3B4-4733-8782-0E54AE543C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "286D3DE9-9796-42AE-88E1-F6E04BF8B449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B54248FC-FD5C-445E-BD8F-886D9D8736D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:2.9.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "89FB8D92-4A3A-4B52-93B0-6F809D313C40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/19/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97970",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3197",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-09T19:29:00.247",
      "lastModified" : "2024-11-21T03:25:00.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash."
      }, {
        "lang" : "es",
        "value" : "El firmware de GIGABYTE BRIX UEFI para las plataformas GB-BSi7H-6500 (versión F6) y GB-BXi7-5775 (versión F2) no implementa las características BIOSWE, BLE, SMM_BWP, y PRx de manera segura. En consecuencia, la BIOS no está protegida del acceso de escritura arbitraria y podría permitir modificaciones en el flash SPI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigabyte:gb-bsi7h-6500_firmware:f6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A53C8F-B252-4602-9356-F77A7650F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gigabyte:gb-bsi7h-6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B912BED-19DC-44B7-B06F-4CDF9135FB5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigabyte:gb-bxi7-5775_firmware:f2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E43347-B80C-45F4-AA26-A4ADA1F02CF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gigabyte:gb-bxi7-5775:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2564C261-8E5D-4EE6-A785-47DA1E7E0730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97294",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/507496",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/507496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3198",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-09T19:29:00.343",
      "lastModified" : "2024-11-21T03:25:01.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected."
      }, {
        "lang" : "es",
        "value" : "El firmware de GIGABYTE BRIX UEFI no valida las imágenes criptográficamente antes de actualizar el firmware del sistema. Adicionalmente, las actualizaciones de firmware se sirven mediante HTTP. Un atacante puede hacer modificaciones arbitrarias en las imágenes de firmware sin ser detectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigabyte:gb-bsi7h-6500_firmware:f6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A53C8F-B252-4602-9356-F77A7650F5D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gigabyte:gb-bsi7h-6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B912BED-19DC-44B7-B06F-4CDF9135FB5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigabyte:gb-bxi7-5775_firmware:f2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E43347-B80C-45F4-AA26-A4ADA1F02CF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gigabyte:gb-bxi7-5775:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2564C261-8E5D-4EE6-A785-47DA1E7E0730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97294",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/507496",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/507496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1729",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-10T16:29:00.207",
      "lastModified" : "2024-11-21T03:22:16.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134909."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 134909."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134909",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1738",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-10T16:29:00.267",
      "lastModified" : "2024-11-21T03:22:17.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, contiene una vulnerabilidad sin revelar que permitiría que un usuario autenticado obtenga privilegios elevados. IBM X-Force ID: 134919."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134919",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1791",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-10T16:29:00.313",
      "lastModified" : "2024-11-21T03:22:22.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137036."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 137036."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137036",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1792",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-10T16:29:00.360",
      "lastModified" : "2024-11-21T03:22:22.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137037."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 137037."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137037",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1793",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-10T16:29:00.407",
      "lastModified" : "2024-11-21T03:22:22.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137038."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager, desde la versión 5.0 hasta la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 137038."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "1428CCDC-D542-4983-B035-66FC28E5FF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137038",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5704",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-07-10T21:29:00.233",
      "lastModified" : "2024-11-21T03:28:15.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "El firmware de código de muestra de la aplataforma en los procesadores Intel Core de 4ª, 5ª, 6ª y 7ª generación podría exponer información de contraseñas en la memoria a un atacante local con privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4000m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D0265F-840B-45A1-90BD-9ED8846A9F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BAC0EC-2B38-4553-A399-4BD5483C4753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4477EBA6-F0A7-452B-96E8-BA788370CCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4010y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1285D817-B5B8-4940-925D-FCDD24810AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4012y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D289F7B4-27CD-4433-BB45-06AF98A59B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4020y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00168903-6012-4414-87D1-2EE52AA6D78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4025u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE8D524-577E-4994-8A4B-D15022C84D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75977B0B-C44D-43BC-8D7A-AF966CDB1901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4030y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7F5D52-9F41-49A4-B941-E0D777203FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B5B3FD-5BEA-4DE8-B010-55FED1547167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167B1B04-5823-4038-A019-3975A3B447C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C7A4EA-0B5E-47CD-8924-3B1B60EB4BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA096E0-5480-47CB-822B-D11D7E20F69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30357469-0B8F-4385-A282-2F50181EA442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4110m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE70772-7796-4594-880A-6AAD046E4D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4112e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9E2F8D-2974-4833-9EC2-233CEE257C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4120u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EE3078-454F-48F8-B201-3847DB40D5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE32C500-55C2-41A7-8621-14EBF793BF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4130t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D3DF52-501A-4656-98F1-8DD51D04F31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA603AD-6CF1-44B2-876D-6F1C0B7EF2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4150t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578301-CF39-4C24-951A-535743E277EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4158u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4D14AA-7DBF-4B73-BDEF-6248EF5C0F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A65F303-96C8-4884-8D6F-F439B86BA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4160t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E046105-9DF5-425F-A97E-16081D54613C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2987BCF-39E6-49B6-8DEE-963A38F12B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4170t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEDE2B7-9AA2-4A14-8A02-9A2BFF0DDCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD92AD8-033A-4AAD-91E5-CB446CCE9732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0E73A-F1B4-4E70-B9F1-EE97785B8891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4330te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D6E3CC-79B1-4995-9A76-41683C7F254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CEB2B1-BD1A-4B89-8E03-4F90F04A0F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4340te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE5773D-3CD1-4E63-8983-E0105C46D185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7C307A-6576-4A0A-8F4E-0981C9EE2901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4350t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B3A53B-902C-46A5-8CE7-B55102703278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB843479-729A-4E58-8027-0FC586F051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4360t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF5A233-1E77-49FD-AC2C-60D185481E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18519CF2-B0DA-42DD-8A3E-9084298C210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:4370t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "329D5FCF-7EC5-4471-906B-3619A180BD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5005u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD43EAA-F3A5-4748-9187-A6E6707ACD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5010u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F3C14D-4BFC-4205-8781-95E6B28C83C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5015u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20942AD8-ADB7-4A50-BDBE-DB36249F4F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5020u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC6ED02-134B-4322-AB72-75A0AB22701E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:5157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA74EEE-54CC-4F80-B1D3-99F7771335ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B859F7-0373-4ADD-92B3-0FAB42FCF23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC76F31-00A5-4719-AA50-92F773919B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49996F5A-51B2-4D4E-AE04-E98E093A76CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8406B0-D1E5-4633-B17E-53DC99FE7622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D49435C-7C33-454B-9F43-9C10F28A28A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17E1A0F-1150-4899-81BC-BE84E4EF5FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADD98AE-BAB0-440D-AB9F-2D76BE5109E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED44A404-8548-4EDC-8928-4094D05A6A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6E4AA3-BEBC-4B14-9A52-A8F8B2954D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AAD8F0-0D31-4806-8A88-A30E5BE43630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8164EE5F-6ABA-4365-8718-2F98C2E57A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7110AF9-A407-4EE2-9C46-E5F1E3638E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A06696D-37F0-427D-BFC5-1606E7441C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F8A5FC-5EFE-42EC-A49B-D3A312FB5F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7020u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54EC3F7-0B8C-46CE-A8C7-4BB61B355843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233009BD-0DEC-405C-AD1A-B58AEB48B0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7100e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D332B6F4-DB19-4E02-A2B6-23D7235BCAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7100h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D29927-72F4-4AF9-B096-57DB2712FBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7100t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5AE231-F198-49EC-8A97-FF250A742840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7100u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A6603F-9646-4220-BFCB-81266F1FC60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7101e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E25472-7F96-425C-87DD-D1835B12589E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7101te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09253F55-3355-44C1-862C-9A6DAD5C461C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7102e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CAE041-761F-4D81-B075-D3E567CFFE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7130u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843E440C-3847-4B13-BB0C-E0C282853850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7167u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB1AF20-A65B-45F7-8C60-3475A640E2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154B92C1-04B9-459D-9FC7-6EA1E09CE12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7300t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0F9407-BCB5-4F50-8D54-74389DA58E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F6B441-537F-4255-9BC6-CE807B46DC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i3:7350k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7EFD6E-5954-4041-8245-0AB2D45E583F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7y54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0195D5-380D-401F-92EB-37AEA34E7478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7y57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6AB8D9-FEA0-4830-941B-A2605830ADD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CC28B6-57D1-4919-AA55-A262CC16AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB4C54D-1265-425A-B507-E1099844875A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97362147-3A71-430D-9064-4435D45C3B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4200y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89212CF3-4E99-4389-94CE-F4211DDCA01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4202y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEA4DA3-0AFB-4FCE-92DB-5B316775BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611C0A0A-1FA3-42F9-82E8-BFCB71A077DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F027D9-DCB4-4A3D-8987-41F2941DBD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BCEC9-2BFB-4B41-9A7A-18B1347C6202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4210y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4924CE39-A846-4DB4-9547-6322FC5AD6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4220y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9E2C9A-94A1-456B-90D5-54932DF64C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC04C652-B2D8-4002-A50E-8AFE83204A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4258u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D413F0-CDBC-4A63-B9A7-9E7725BA1E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A8826-59F7-4A71-B74B-737BE9C7DE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4278u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB6BDA-6825-489B-AB39-7729BA45DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4288u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7913F57E-E600-4767-AF51-D045E1898E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3783F4-5A05-45AA-9791-A681011FD78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3114D-31D2-4DBF-A664-F4049D8B6266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4300y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EE6578-981D-470C-BB24-4960B3CB1478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4302y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3320D50-C5C9-4D75-BF1A-5BB7BCBFE2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4308u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE59839-8EB9-47FE-88E2-F0D54BE787A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75694A3D-080A-4AA7-97DF-5A5833C9D9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4310u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C5E27D-BBAB-4395-8FC6-8E3D4FB9A1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4330m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E996176-3DEA-46E6-93B7-9C0DF32B59D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4340m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4417007D-126A-478B-87EA-039D088A4515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78C2825-F6A3-4188-9D25-59EAEC8A7B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2FA85D-B117-410D-B247-8C5A3479319A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4400e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A041D27-132C-4B15-976F-1750C039A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D495E06-BF2B-4C5A-881D-94C93CD2BA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4402ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C31DFB8-8D8C-47D6-AAFF-BAE829A3D965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4410e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088BC395-06D5-4156-85EB-63C4A9552898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4422e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A220A2-A6D2-46A7-B168-607400EEDCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E79232F-7196-440B-82D4-165885251232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4430s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED866954-77AB-4CA8-8AED-4252C595FC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A1F516-B180-45D4-8EB1-754B7497CB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4440s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36758A04-64D3-4150-A004-CF042FA31CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E01752E-F1DD-400A-A917-216CAF15B0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD47EC58-F776-4F59-8F15-4B208904CF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4460t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3781F4-2123-4FA1-8AF5-D0D1E6C1A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94565E35-8A58-4CB6-A489-C796DCB97FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49964D35-5323-4412-BD54-661630F9A8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A37E7D-1BF6-4A2A-BF52-5F0EC4B4F341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F66468-87D0-41FC-934B-5924BE2956CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4570te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E0F93E1-4607-4DF4-AC6E-4B7254D4A8DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C0D99E-443E-4AB1-A07A-900A09FE177E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D0FD76-C1FB-43D0-8511-FC0BA6DA7960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4590t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DAEE52-09C3-4A09-9958-9D6807B2700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97690D4-E814-4D40-B170-BE56D7AE2C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89804F2C-D32D-4444-ABEA-5B241153D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAAAF9C-B29B-4020-BAFF-C87B1A08294A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE60E1E-AB8D-46E4-A779-A54F2D20B5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4670t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB958A28-7C9A-4BD0-B002-4E1A65CDB0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E58E3D0-1154-4B13-BA16-67CE67DF0637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D2ACB3-B906-4944-A021-03C4645965BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:4690t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFF834A-D7F0-4E48-AD3D-DD0BCE6DEC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1A41BA-A1D6-484A-BAD2-68DF85598354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5250u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11260C9D-69A9-4D81-9CCF-2E116DD75F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5257u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C020F06-FD27-46E3-A48F-3F60F33BB969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C74F10-6A7F-4F68-8A34-E981E1760DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24741B98-8D0E-4307-AAEF-A14B2531DCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4FA4BA-4304-4A70-9F86-120F2A3D8148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5350u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367FC8BA-F046-4264-A049-49E933E7698F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5575r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9B68D3-1DFB-4468-85C4-AC13E6CBC111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C966A016-B650-44D9-B8C4-1ED50AB318DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:5675r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC448FF0-6D3F-4609-864B-4191905EE2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC246FE-4CA6-4B2D-83C3-D50A386C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758A14DB-1BAF-442A-BA7C-5E9C67847BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61309100-CFA7-4607-A236-8910838AA057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D76265-7BD0-4C51-AE77-22B22524DE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38B195-BB8D-4747-881D-E8033760B4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA8BE76-168D-48A3-8DF6-E91F44600408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B656975-5D71-4712-9820-BDB7BC248AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA045267-114D-4587-B6D7-E273C28DC9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77018415-E122-406E-896D-1BC6CF790BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADF37F1-546B-4EF0-8DEC-DC3B9F5309FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7469256-1A64-46FF-8F5A-A8E9E3CF5BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9069B9-9FE3-4AD5-9A8E-55C0F73BD756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E1C012-3E05-44DB-B6D2-BFD619C034B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D689D6-8594-42F2-8EEF-DCAEBA885A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6446000-0494-4DC5-ABAA-F20A44546068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B94EEC-6690-45D0-B086-F4A5B25C25CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B767B6E-B3E6-4424-97A6-89A7E7EB0EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832AB3CD-E3A1-4CCB-A210-287973563D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A26C0CC-68AD-40F5-96B8-87E6C643F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C4221A-9994-43B3-9C7A-E13815A50A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20070B1D-B91C-40BA-A9D8-E80170A2933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70129C9-371F-4542-A388-C095869E593A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7200u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A2B089-EF84-4CC6-BFF6-8E74584688CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7260u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2A5D20-2921-4FA2-B62F-01A6A2957D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7267u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5427051C-F785-4190-86E4-7F6E226968B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7287u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E5D44F-183D-4B1B-8ACF-6954A834B63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7300hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AEABB2-D597-4126-AEA2-D67117E86962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7300u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E84AC40-E06A-42B9-B125-E7263A191702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7360u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1869D54-7B07-400D-8941-59DE0FE4127D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27F73DD-FDC1-4A7B-85B1-543FFB036CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7400t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC66A91-0BA2-4073-B4B7-E8354B3D2409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7440eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD36097-3356-49B6-93A4-B6AC9203C2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7440hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0CE988-82FB-4412-AF06-91A1E056FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7442eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CBCB6-5345-433A-9D2A-B36A86178982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE27EBE2-D4BD-412C-8DB0-C30DF71E5788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7500t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F2AE62-2E44-4F70-B790-1D5399DF61A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBF09B5-A51E-4579-A5E4-3B755CDDB737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7600k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4D20EC-92C4-4BB3-8F13-540AAA001E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i5:7600t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC49B2C-12AB-463F-AB13-7C9A9E381014"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEC55DF-1950-45E5-A5F2-B5604AFA1CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1B00A1-9C15-47C2-9F57-66586DEACC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4510u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5BF932-459F-4DD2-B160-5FE0371C7D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58ACE96-F1BE-4261-8F94-FC3C6E7C7561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4558u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783D6EA7-C016-4314-A87B-4FED1DC7114B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4578u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD0176F-FFAE-4A85-9327-CE72FE059E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56970C7-F8D3-41B2-A78B-0C7F4A2A4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D4CE1F-86C8-4E48-9146-9DB57BF540FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7F9D65-5537-4C25-B02B-2393F60D1299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4610y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09C8A92-820D-4572-A797-180E17A7DEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7D77A2-0D9A-4D0D-B0DC-152757917BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07D3F1A-16CE-461F-A2F4-80FE5F841CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C04557A-C508-4FAD-A535-1C0AEFF08075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFAE489-6679-4705-BF9C-BB6D385A1DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4700mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429A99C8-BC55-4887-893C-7124C1A5DB08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A2B709-CC19-4116-A5BE-5DB5C8B45A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79DAC74-1F28-4EC8-B417-3FAFFB74C4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4702mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F1377-6220-43FB-BEF9-BAA7B0158147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18422CA8-3000-46B1-9065-2369E6B0BE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4710mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D558C66-E80E-4FC7-A0DF-485466390C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EA9AE-9E70-47B5-AD9B-0DF13A0939E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4712mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F22F6-4C87-47C5-965E-02A1AFF41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4720hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A2CA86-BFA8-4C78-987D-AD26F32622F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4722hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF64E0A-CDB0-427E-A96F-095EFEBA0A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425F6D34-EE60-464B-8EA6-8116EDAA1219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4760hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB9F657-1239-4424-A2E8-F8BD98C0095E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4765t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631403C-0A67-42CB-815C-133EB87E0C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4A5A57-B1A2-4BBA-AC36-7EA7DF9CDE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0453C0EA-BA67-49D5-964F-35493F97D905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4D237E-ACB7-4382-AF5B-D27E634BF867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5461EB2-2958-4923-86AF-C74D449120B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C22141-E698-4E38-AF50-9CE04C1168FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D0E470-427D-4A68-AFD2-982A4F7CE2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4770te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AB50F3-14AC-44BD-B7F0-A683C5FD1A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4771:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713C4B7A-C38A-4818-A258-D07DEDEC906E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4785t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59740BE-FC30-4400-B978-1DB41282971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839728F0-5F23-462F-B493-C37EE4C874F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B47DA-BA53-4D7A-9B5B-582238D5E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D452F1BF-1FA5-463C-8F13-6357509FB5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4790t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D1F4C-B396-468C-BA32-9367A68C95DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4800mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76A812F-D77A-49C8-B7A5-0C08258D4BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4810mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E001AAB-07EC-47BF-BDE9-BB927872781D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF11F5-61E8-4A98-86C8-49D6B3224FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4860hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED153E7-99A2-4C02-B81B-C3DDF8FAE1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4870hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D024802A-EA60-4D9B-B04C-027A0703EABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4900mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA731F3C-1F04-4EE2-83EC-9486F5032903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4910mq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544A59F6-E731-43C8-8455-69256933E71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624258EE-7FFF-4432-9B6D-4D60AA73CD9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4960hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A2701A-35A8-4268-B9CF-40BA3219373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:4980hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E671F6-8DED-4735-BE97-58A60E5B5C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC68B2A-8570-4311-BB60-49DBBDAF7430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5550u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9826FA02-937E-4323-B9D5-8AE059ADBE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5557u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8630BB-48AA-4688-A6F0-212C1BB4D14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC98D35-D7D5-4C24-B47E-EDE2A80B2B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F8ABCB-12C3-4C45-844E-B07F77DA2DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326105AC-3926-437E-8AFF-916960107050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E1275-7541-4B80-8FDF-53246A204C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5750hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E190929D-D3CC-46E1-A903-0848829061DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E4EBCB-B660-4F6A-AD73-81B9D8964162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5775r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D58CC5-CB46-464D-93B8-6AD5A19AF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5820k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92FCC67-2697-4EC4-BE1D-CE059FAAEF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16541D3E-EBBD-4D92-96D8-F169733377AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5850hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F08D257-F570-4D39-A6E8-0F60E55472E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:5950hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20ED667-2BFB-41C7-82BA-9F0C0044DA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923D2D73-F953-44D2-9A25-E118136E8C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6560u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B219CA1A-FFBD-4434-B7FC-EFD52EBC955F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6567u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2AEDB1-8C35-4210-B045-69216480B384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484C1B49-7D90-4360-BE33-C1DAB755ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6650u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08FE92E-D97F-40E1-8482-1DA777EBC785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6660u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBD6720-F788-4FD7-BC7F-AAEFAA137486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08032549-991F-465D-8794-21C8ED2C98D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94514F41-CDCF-4EED-896E-8B5AE7360F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F79141-5702-4157-8D13-FFB1C2F23FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6700t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114D7086-4C6D-4EE8-A2ED-7D4F63FD6A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6700te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8D239C-B3D6-4F08-AF99-E64752B72346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6770hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207507FE-1DC7-4569-A5A9-392290622EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6785r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FC32E2-9228-4903-9F0A-AF327A1C2D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6820eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50D5C4-DFC1-4306-B2C8-09D6788904FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6820hk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0665FECD-A31D-4EB2-A360-CFA1E58CDEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6820hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62783CBF-1299-4045-A0D9-E95E7B385164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6822eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B04C754-50CD-4C8C-B56F-A50944EE5799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6870hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A7DE62-EB8A-4C5B-B143-3892CF1EE7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6920hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BA712E-4516-4823-8E85-6AC24BE3240F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:6970hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1303D7-33B3-48AA-BD62-74984AD22AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6158ED8A-007E-48B7-99BF-8BA03BF584BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA7096A-F321-49A0-911A-F9683ABE6E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A471395-7F8F-4BA5-962D-4D8F271FAB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9484380-92B9-44DB-8E20-DC8DE02D1CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8010808D-805D-4CA3-9EA2-55EB1E57964C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FE9F-A056-42A3-A241-F2FE37A6386A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73422A3-ECA0-4C41-9AA5-CF7D77885CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A96A5AF-C9EF-4DED-AE25-4540A2B02915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5115B12-053A-4866-A833-D6EC88D8F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5619D4D-9685-4595-8A5F-A18273FE4213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77E00E7-0EA4-4E32-A693-0E0F66BA4C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA3457E-7E1A-4878-9752-79382E954A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68630C63-4457-4E12-B7BD-AD456B237FC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00160.html",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-11T13:29:00.270",
      "lastModified" : "2024-11-21T03:31:57.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error de desbordamiento de búfer en la forma en la que minicom en versiones anteriores a la 2.7.1 gestionaba secuencias de escape VT100. Un dispositivo terminal malicioso podría emplear este error para provocar el cierre inesperado de minicom o ejecutar código arbitrario en el contexto del proceso minicom."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minicom_project:minicom:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "ACFE31C5-DD8B-4967-AC8A-0301D36F350D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/18/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97966",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-13",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/04/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-11T16:29:00.487",
      "lastModified" : "2024-11-21T03:16:49.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Crestron Airmedia AM-100 con firmware en versiones anteriores a la 1.6.0 y dispositivos AM-101 con firmware en versiones anteriores a la 2.7.0 permite que administradores autenticados remotos ejecuten código arbitrario mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:crestron:airmedia_am-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "74861E2E-FB7C-447A-88FB-2D44BC7F9965"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:crestron:airmedia_am-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA211175-30DE-466A-BEE9-8BD9EF2A25DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:crestron:airmedia_am-101_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "BDA038ED-8177-45A0-924F-79F747B3A664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:crestron:airmedia_am-101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A784153-EBE8-41D8-9328-5B8A40C4C71C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2019-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2019-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-11T16:29:00.517",
      "lastModified" : "2024-11-21T03:16:50.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Scripting (XSS) en dispositivos Crestron Airmedia AM-100 con firmware en versiones anteriores a la 1.6.0 y dispositivos AM-101 con firmware en versiones anteriores a la 2.7.0 permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:crestron:airmedia_am-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "74861E2E-FB7C-447A-88FB-2D44BC7F9965"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:crestron:airmedia_am-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA211175-30DE-466A-BEE9-8BD9EF2A25DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:crestron:airmedia_am-101_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "BDA038ED-8177-45A0-924F-79F747B3A664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:crestron:airmedia_am-101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A784153-EBE8-41D8-9328-5B8A40C4C71C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16710",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18155",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-07-12T14:29:00.210",
      "lastModified" : "2024-11-21T03:19:27.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault."
      }, {
        "lang" : "es",
        "value" : "Al reproducir contenido HEVC mediante HD DMB en Snapdragon Automobile y Snapdragon Mobile en las versiones MSM8996AU, SD 450, SD 625, SD 820, SD 820A y SD 835, puede emplearse una variable no inicializada, lo que conduce a un fallo del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-06-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-12T16:29:03.140",
      "lastModified" : "2024-11-21T03:13:12.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"Shpock Boot Sale & Classifieds\" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Shpock Boot Sale Classifieds\" en versiones anteriores a la 3.17.0 (también llamada shpock-boot-sale-classifieds/id557153158) para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shpock:shpock:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "3.17.0",
            "matchCriteriaId" : "2D54AF2D-6EA8-4D34-99AB-C09442B7432B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-12T16:29:03.877",
      "lastModified" : "2024-11-21T03:13:21.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The komoot GmbH \"Komoot - Cycling & Hiking Maps\" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"Komoot - Cycling Hiking Maps\", de komoot GmbH, en versiones anteriores a la 9.3.2 (también llamada komoot-cycling-hiking-maps/id447374873) para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:komoot:komoot:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "9.3.2",
            "matchCriteriaId" : "A88EEBEF-FFA2-4CA8-8455-13BB10D1F896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-12T16:29:04.203",
      "lastModified" : "2024-11-21T03:13:21.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Shein Group Ltd. \"SHEIN - Fashion Shopping\" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "La aplicación \"SHEIN - Fashion Shopping\", de Shein Group Ltd., (también llamada fashion-shopping/id878577184) para iOS no verifica los certificados X.509 de los servidores SSL, lo que permite que atacantes Man-in-the-Middle (MitM) suplanten servidores y obtengan información sensible mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shein:shein-fashion_shopping_online:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "C08B8999-A480-4A74-86DA-DAEDC9BDC550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1367",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-13T16:29:00.207",
      "lastModified" : "2024-11-21T03:21:47.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126860."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance y Intelligence Virtual Appliance desde la versión 5.2 hasta la 5.2.3.2 almacena información sensible en parámetros URL. Esto podría llevar a una divulgación de información si partes no autorizadas tienen acceso a las URL mediante registros del servidor, cabeceras referrer o el historial del navegador. IBM X-Force ID: 126860."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.2.3.2",
            "matchCriteriaId" : "D039F1A0-520F-489B-8DBF-167F232E86F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126860",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Not Applicable", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1395",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-13T16:29:00.283",
      "lastModified" : "2024-11-21T03:21:49.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 127341."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance y Intelligence Virtual Appliance desde la versión 5.2 hasta la 5.2.3.2 podría permitir que un atacante remoto obtenga información sensible, provocado por la imposibilidad de habilitar correctamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información sensible empleando técnicas man-in-the-Middle (MitM). IBM X-Force ID: 127341."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndIncluding" : "5.2.3.2",
            "matchCriteriaId" : "88FA01E2-E052-4A1A-841B-AF3AA49C5499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127341",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13091",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.113",
      "lastModified" : "2024-11-21T03:10:57.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including improperly specified padding in CBC mode allows use of an EDA tool as a decryption oracle. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo el relleno especificado erróneamente en modo CBC que permite el uso de una herramienta EDA como oráculo de descifrado. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007: The P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts. \n<br />\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable. \nThe CPE configuration provided is likely not inclusive of all vulnerable products. Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13092",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.160",
      "lastModified" : "2024-11-21T03:10:57.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la sintaxis HDL especificada erróneamente que permite el uso de una herramienta EDA como oráculo de descifrado. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13093",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.207",
      "lastModified" : "2024-11-21T03:10:57.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of encrypted IP cyphertext to insert hardware trojans. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de texto IP cifrado para insertar troyanos de hardware. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13094",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.253",
      "lastModified" : "2024-11-21T03:10:57.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of the encryption key and insertion of hardware trojans in any IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de la clave de cifrado y la inserción de troyanos de hardware en cualquier IP. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13095",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.283",
      "lastModified" : "2024-11-21T03:10:57.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of a license-deny response to a license grant. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de una respuesta license-deny a una concesión de licencia. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13096",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.330",
      "lastModified" : "2024-11-21T03:10:57.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of Rights Block to remove or relax access control. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de Rights Block para eliminar o relajar los controles de acceso. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13097",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-13T20:29:02.363",
      "lastModified" : "2024-11-21T03:10:57.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of Rights Block to remove or relax license requirement. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
      }, {
        "lang" : "es",
        "value" : "El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de Rights Block para eliminar o relajar los requisitos de licencia. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:-:-:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57298C9-DC87-4CF3-AEAA-D86A51ED410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/739007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ],
      "evaluatorComment" : "According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2638",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-16T13:29:00.223",
      "lastModified" : "2024-11-21T03:23:53.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la API REST en Infinispan en versiones anteriores a la 9.0.0 no aplicaba correctamente las restricciones auth. Un atacante podría emplear esta vulnerabilidad para leer o modificar datos en la caché por defecto o un nombre de caché conocido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinispan:infinispan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0",
            "matchCriteriaId" : "4A8499D5-3044-41F2-91D8-5B97521FD35A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_data_grid:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8912FC8-FAC1-4503-85F7-3231675450FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1097.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2638",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/infinispan/infinispan/pull/4936/commits",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.jboss.org/browse/ISPN-7485",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1097.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/infinispan/infinispan/pull/4936/commits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.jboss.org/browse/ISPN-7485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7468",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-16T13:29:00.287",
      "lastModified" : "2024-11-21T03:31:57.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate). libcurl supports by default the use of TLS session id/ticket to resume previous TLS sessions to speed up subsequent TLS handshakes. They are used when for any reason an existing TLS connection couldn't be kept alive to make the next handshake faster. This flaw is a regression and identical to CVE-2016-5419 reported on August 3rd 2016, but affecting a different version range."
      }, {
        "lang" : "es",
        "value" : "En curl y libcurl 7.52.0 hasta e incluyendo la versión 7.53.1, libcurl intenta retomar una sesión TLS aunque el certificado del cliente haya cambiado. Esto es inaceptable, ya que un servidor por sus especificaciones puede saltarse la comprobación de certificado de cliente al retomar su operativa para emplear en su lugar la identidad antigua que fue establecida por el anterior certificado (o no certificado). Por defecto, libcurl soporta el uso de un ID/ticket TLS para retomar sesiones TLS anteriores para acelerar los handshakes TLS subsecuentes. Se emplean cuando, por algún motivo, una conexión TLS no pudo mantenerse activa para hacer que el siguiente handshake fuese más rápido. Este error es una regresión y es idéntico a CVE-2016-5419, reportado el 3 de agosto de 2016, pero afectando a un rango de versiones diferente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.52.0",
            "versionEndIncluding" : "7.53.1",
            "matchCriteriaId" : "3EDCC18C-69F4-4185-A846-513424A4E8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97962",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038341",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7468",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170419.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170419.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201709-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15137",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-16T20:29:00.223",
      "lastModified" : "2024-11-21T03:14:08.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as \"oc tag\", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed."
      }, {
        "lang" : "es",
        "value" : "La lista blanca de importación de imágenes de OpenShift falló a la hora de aplicar restricciones correctamente al ejecutar comandos como, por ejemplo, \"oc tag\". Esto podría permitir que un usuario con acceso a OpenShift ejecute imágenes de registros en los que no debería estarle permitido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08E234C-BDCF-4B41-87B9-96BD5578CBBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309CB6F8-F178-454C-BE97-787F78647C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHBA-2018:0489",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2018:0489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17541",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2018-07-16T20:29:00.270",
      "lastModified" : "2024-11-21T03:18:08.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiManager 6.0.0, 5.6.4 y anteriores y FortiAnalyzer 6.0.0, 5.6.4 y anteriores permite inyectar código JavaScript y etiquetas HTML mediante el valor CN de los certificados CA y CRL mediante la característica de importación de certificados CA y CRL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortianalyzer_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.4",
            "matchCriteriaId" : "14395CC2-7264-4F1C-BB71-BA70BB97980F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortianalyzer_firmware:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9E13C1-4CEC-45FD-B7BE-207537565BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortimanager_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.4",
            "matchCriteriaId" : "DEBC8DBF-8BC5-4DD8-A724-985DE305EA04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortimanager_firmware:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E0D6CE-4731-4A1E-BFEE-E57EEF25F63B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041246",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041247",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-305",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18103",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-07-18T14:29:00.210",
      "lastModified" : "2024-11-21T03:19:21.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml."
      }, {
        "lang" : "es",
        "value" : "La biblioteca atlassian-http, tal y como se emplea en varios productos Atlassian, en versiones anteriores a la 2.0.2, permite que atacantes remotos suplanten el contenido web en el navegador Mozilla Firefox mediante archivos subidos que tienen un tipo de contenido de application/mathml+xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:http_library:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "04B30004-5679-49BF-A1D7-D30F005EB2B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/HTTP-3",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/HTTP-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2673",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-19T13:29:00.277",
      "lastModified" : "2024-11-21T03:23:57.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error de comprobación de autorización en las configuraciones de federación del servicio Identity de OpenStack (keystone). Un usuario autenticado federado podría solicitar permisos para un proyecto y, de forma no intencionada, se le proporcionarían todos los roles relacionados, incluyendo los roles administrativos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98032",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/keystone/+bug/1677723",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2673",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/keystone/+bug/1677723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7481",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-19T13:29:00.340",
      "lastModified" : "2024-11-21T03:31:59.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated."
      }, {
        "lang" : "es",
        "value" : "Ansible en versiones anteriores a la 2.3.1.0 y 2.4.0.0 no marca correctamente los resultados del plugin lookup como no seguros. Si un atacante pudiese controlar los resultados de las llamadas lookup(), podrían inyectar cadenas Unicode para que sean analizadas por el sistema de plantillas jinja2, resultando en una ejecución de código. Por defecto, el lenguaje de plantillas jinja2 se marca ahora como \"no seguro\" y no se evalúa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3ADA26-2B9E-4ABA-A224-910BD75CCE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E80045-56E4-4A83-8168-CFED5E55CE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E792B5DC-CCD2-4A50-B72F-860A3BFAF165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:storage_console:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E916298F-E4F3-49FB-92DA-C92013188C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB0F63-DB24-4240-BC44-C92BAE7EAF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF786B57-02C3-48B7-B902-318356B3A3B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:gluster_storage:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518056FB-E049-45AF-876A-C1682118E29D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.0",
            "matchCriteriaId" : "5F675D17-E806-4C38-8A36-49032C25ECAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.2.0",
            "versionEndExcluding" : "2.4.0.0",
            "matchCriteriaId" : "3885EAB7-4ED7-493B-8124-A4434312C75B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD783B0C-9246-47D9-A937-6144FE8BFF0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98492",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1244",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1476",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1499",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1599",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2524",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4072-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4072-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-20T00:29:00.237",
      "lastModified" : "2024-11-21T03:19:53.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS via an array key during exception pretty printing in ExceptionHandler.php, as demonstrated by a /_debugbar/open?op=get URI. NOTE: the vendor's position is that this is not a vulnerability because the debug tools are not intended for production use. NOTE: the Symfony Debug component is used by Laravel Debugbar"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El manipulador de depuración en Symfony, en versiones anteriores a la v2.7.33, versiones 2.8.x anteriores a la v2.8.26, versiones 3.x anteriores a la v3.2.13 y versiones 3.3.x anteriores a la v3.3.6, tiene Cross-Site Scripting (XSS) mediante una clave de array durante la impresión de excepciones pretty en ExceptionHandler.php, tal y como queda demostrado con un URI /_debugbar/open?op=get. NOTA: el fabricante sostiene que esta no es una vulnerabilidad debido a que las herramientas de depuración no están diseñadas para ser empleadas en producción. NOTA: el componente Symfony Debug es empleado por Laravel Debugbar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.33",
            "matchCriteriaId" : "FFE043B4-4689-4BC1-86B0-4BB00B545D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.26",
            "matchCriteriaId" : "EAC436C0-4E79-45BD-9B31-2DD8A42E2427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.2.13",
            "matchCriteriaId" : "2CD89B10-CD20-4BEF-ABEE-8C2248B55BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.6",
            "matchCriteriaId" : "59558D75-9E6C-4C41-852C-E6E78C50B9CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/barryvdh/laravel-debugbar/issues/850",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/debug/pull/7/commits/e48bda29143bd1a83001780b4a78e483822d985c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/issues/27987",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/23684",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/barryvdh/laravel-debugbar/issues/850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/debug/pull/7/commits/e48bda29143bd1a83001780b4a78e483822d985c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/issues/27987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/23684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1544",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-20T16:29:00.260",
      "lastModified" : "2024-11-21T03:22:02.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway desde la versión 2.2.0 hasta la 2.2.6) cachea los nombres de usuario y las contraseñas en navegadores que podrían ser empleados por un atacante local para obtener información sensible. IBM X-Force ID: 130812."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "A0456BFF-649E-47E1-879A-5AAE9D3640E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716997",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104885",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130812",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/130812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1575",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-20T16:29:00.307",
      "lastModified" : "2024-11-21T03:22:06.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorithms that could allow a local attacker to decrypt highly sensitive information. IBM X-Force ID: 132032."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway desde la versión 2.2.0 hasta la 2.2.6) emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante local descifre información altamente sensible. IBM X-Force ID: 132032."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "A0456BFF-649E-47E1-879A-5AAE9D3640E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716997",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104885",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132032",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1633",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-07-20T16:29:00.370",
      "lastModified" : "2024-11-21T03:22:09.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180."
      }, {
        "lang" : "es",
        "value" : "IBM Sterling B2B Integrator desde la versión 5.2 hasta la 5.2.6 podría permitir que un atacante autenticado obtenga información sensible de nombres de variables mediante peticiones HTTP especialmente manipuladas. IBM X-Force ID: 133180."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*",
            "versionStartIncluding" : "5.2.0.1",
            "versionEndIncluding" : "5.2.6.3",
            "matchCriteriaId" : "86A10A01-CAD7-49CA-8B1E-FA27904FA451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716747",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104927",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133180",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10716747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18104",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2018-07-24T13:29:00.230",
      "lastModified" : "2024-11-21T03:19:22.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remote attackers who are able to observe or otherwise intercept webhook events to learn information about changes in issues that should not be sent because they are not contained within the results of a specified JQL query."
      }, {
        "lang" : "es",
        "value" : "El componente Webhooks en Atlassian Jira, en versiones anteriores a la 7.6.7 y desde la versión 7.7.0 hasta la 7.11.0, permite que atacantes remotos que puedan observar o interceptar eventos webhook aprendan información sobre cambios en problemas que no deberían ser enviados, puesto que no están incluidos en los resultados de una consulta JQL especificada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.7",
            "matchCriteriaId" : "9F0C2FA0-B59B-441B-B6EC-5A0D79491FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.11.0",
            "matchCriteriaId" : "D5FD7431-491B-4B69-8084-169989C45ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-59980",
        "source" : "security@atlassian.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-59980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3180",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.327",
      "lastModified" : "2024-11-21T03:24:58.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The products and versions that are affected include the following: TIBCO Silver Fabric Enabler for Spotfire Web Player 2.1.2 and earlier TIBCO Spotfire Analyst 7.5.0 TIBCO Spotfire Analyst 7.6.0 TIBCO Spotfire Analyst 7.7.0 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.0.2 and earlier TIBCO Spotfire Automation Services 6.5.3 and earlier TIBCO Spotfire Automation Services 7.0.0, and 7.0.1 TIBCO Spotfire Connectors 7.6.0 TIBCO Spotfire Deployment Kit 6.5.3 and earlier TIBCO Spotfire Deployment Kit 7.0.0, and 7.0.1 TIBCO Spotfire Deployment Kit 7.5.0 TIBCO Spotfire Deployment Kit 7.6.0 TIBCO Spotfire Deployment Kit 7.7.0 TIBCO Spotfire Desktop 6.5.2 and earlier TIBCO Spotfire Desktop 7.0.0, and 7.0.1 TIBCO Spotfire Desktop 7.5.0 TIBCO Spotfire Desktop 7.6.0 TIBCO Spotfire Desktop 7.7.0 TIBCO Spotfire Desktop Developer Edition 7.7.0 TIBCO Spotfire Desktop Language Packs 7.0.1 and earlier TIBCO Spotfire Desktop Language Packs 7.5.0 TIBCO Spotfire Desktop Language Packs 7.6.0 TIBCO Spotfire Desktop Language Packs 7.7.0 TIBCO Spotfire Professional 6.5.3 and earlier TIBCO Spotfire Professional 7.0.0 and 7.0.1 TIBCO Spotfire Web Player 6.5.3 and earlier TIBCO Spotfire Web Player 7.0.0 and 7.0.1"
      }, {
        "lang" : "es",
        "value" : "Múltiples productos TIBCO son propensos a múltiples vulnerabilidades sin especificar de Cross-Site Scripting (XSS) debido a que fracasan a la hora de sanear entradas proporcionadas por el usuario. Un atacante podría aprovechar estos problemas para ejecutar código script arbitrario en el navegador de un usuario incauto en el contexto del sitio afectado. Esto puede permitir que el atacante robe credenciales de autenticación basadas en cookies y lance otros ataques. Los productos y versiones afectadas incluyen: TIBCO Silver Fabric Enabler for Spotfire Web Player en versiones 2.1.2 y anteriores; TIBCO Spotfire Analyst 7.5.0; TIBCO Spotfire Analyst 7.6.0; TIBCO Spotfire Analyst 7.7.0; TIBCO Spotfire Analytics Platform for AWS Marketplace en versiones 7.0.2 y anteriores; TIBCO Spotfire Automation Services en versiones 6.5.3 y anteriores; TIBCO Spotfire Automation Services 7.0.0 y 7.0.1; TIBCO Spotfire Connectors 7.6.0; TIBCO Spotfire Deployment Kit en versiones 6.5.3 y anteriores; TIBCO Spotfire Deployment Kit 7.0.0 y 7.0.1; TIBCO Spotfire Deployment Kit 7.5.0; TIBCO Spotfire Deployment Kit 7.6.0; TIBCO Spotfire Deployment Kit 7.7.0; TIBCO Spotfire Desktop en versiones 6.5.2 y anteriores; TIBCO Spotfire Desktop 7.0.0 y 7.0.1; TIBCO Spotfire Desktop 7.5.0; TIBCO Spotfire Desktop 7.6.0; TIBCO Spotfire Desktop 7.7.0; TIBCO Spotfire Desktop Developer Edition 7.7.0; TIBCO Spotfire Desktop Language Packs en versiones 7.0.1 y anteriores; TIBCO Spotfire Desktop Language Packs 7.5.0; TIBCO Spotfire Desktop Language Packs 7.6.0; TIBCO Spotfire Desktop Language Packs 7.7.0; TIBCO Spotfire Professional en versiones 6.5.3 y anteriores; TIBCO Spotfire Professional 7.0.0 y 7.0.1 TIBCO Spotfire Web Player en versiones 6.5.3 y anteriores; y TIBCO Spotfire Web Player 7.0.0 y 7.0.1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:silver_fabric_enabler_for_spotfire_web_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "173CF2F8-3802-4D0B-B825-518F22753246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA67C3-1E04-4CF9-9DBF-5AAC32ED1BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE259A9-18D9-48D2-B1DF-E9244F6C79B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD36D84-B44B-48AA-9FD0-966DFBE5CFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.2",
            "matchCriteriaId" : "648B466E-6DDA-4A8E-BCD1-60A50B8E7680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_automation_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.3",
            "matchCriteriaId" : "2CB0628A-9C75-4196-A28C-7C1B1A116C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_automation_services:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0424905D-696E-4D5F-957E-9D360F03E296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_automation_services:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA7ABF1-F6DE-4908-9C09-8B523FD317A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_connectors:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE55C07-E141-4DEA-A9E2-B075E1F56449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.3",
            "matchCriteriaId" : "F27A296C-6D4A-405B-86BB-F7D383C656E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D050885E-62BF-454F-A653-129269829390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA0A8EB-9A3B-415F-9823-50C4AAD4C9AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2A9DC-8D5F-4516-8581-0A719FEAC867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADE970A-E3D6-41AC-A3E6-9F49090A0445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E31011-0D3C-4339-86F0-81CD77BC3439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.2",
            "matchCriteriaId" : "DBC24CB8-3411-438A-A99C-5DC0DD4A3128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981372F8-3050-42BA-BF94-16478E4B04A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19D3881-3807-4EB0-B07E-116393FAA836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584E8D2D-E0D9-4886-81D4-B2A629884F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12851913-2BAF-4B35-AD03-7C6B4A91C43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF48FC-2634-4D66-8BD2-CB6D3CA04C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.7.0:*:*:*:developer:*:*:*",
            "matchCriteriaId" : "CA0557E9-5277-4D60-A1C6-1DC24FD7ECE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop_language_packs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.1",
            "matchCriteriaId" : "D894B719-865C-4EB3-B0E8-6853F1BC31A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop_language_packs:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26FF0F0-3126-4AF6-A1FA-C911FB429648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop_language_packs:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FF6CF3-B05C-4014-83F5-3C44D09F4FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop_language_packs:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D9DCB1-D307-42D0-A5CB-904D5DCCCD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_professional:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.3",
            "matchCriteriaId" : "AAF9238B-B335-4AC3-A866-A25D708CBE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_professional:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D883BEDD-2A54-4D01-8322-E7804D1D057A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_professional:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE1B65E-1DAF-43A4-B5AC-956ABA66A078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_web_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.3",
            "matchCriteriaId" : "E9D754F3-9358-4163-9999-23AB931AA790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_web_player:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C96AC0E-4C68-4CDD-A73F-3B19D2EEFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_web_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1959D810-72DC-4B6A-8BD9-6B80C49A5315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.securityfocus.com/bid/95699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tibco.com//support/advisories/2017/01/tibco-security-advisory-january-10-2017-tibco-spotfire-2017-3180",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/95699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tibco.com//support/advisories/2017/01/tibco-security-advisory-january-10-2017-tibco-spotfire-2017-3180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3181",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.373",
      "lastModified" : "2024-11-21T03:24:58.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. The following products and versions are affected: TIBCO Spotfire Analyst 7.7.0 TIBCO Spotfire Connectors 7.6.0 TIBCO Spotfire Deployment Kit 7.7.0 TIBCO Spotfire Desktop 7.6.0 TIBCO Spotfire Desktop 7.7.0 TIBCO Spotfire Desktop Developer Edition 7.7.0 TIBCO Spotfire Desktop Language Packs 7.6.0 TIBCO Spotfire Desktop Language Packs 7.7.0 The following components are affected: TIBCO Spotfire Client TIBCO Spotfire Web Player Client"
      }, {
        "lang" : "es",
        "value" : "Múltiples productos TIBCO son propensos a múltiples vulnerabilidades sin especificar de inyección SQL debido a que fracasan a la hora de sanear entradas proporcionadas por el usuario antes de emplearlas en una consulta SQL. La explotación de estos problemas podría permitir que un atacante comprometa la aplicación, acceda o modifique datos o explote vulnerabilidades latentes en la base de datos subyacente. Los siguientes productos y versiones se han visto afectados: TIBCO Spotfire Analyst 7.7.0; TIBCO Spotfire Connectors 7.6.0; TIBCO Spotfire Deployment Kit 7.7.0; TIBCO Spotfire Desktop 7.6.0; TIBCO Spotfire Desktop 7.7.0; TIBCO Spotfire Desktop Developer Edition 7.7.0; TIBCO Spotfire Desktop Language Packs 7.6.0; y TIBCO Spotfire Desktop Language Packs 7.7.0. Los siguientes componentes se han visto afectados: TIBCO Spotfire Client y TIBCO Spotfire Web Player Client."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD36D84-B44B-48AA-9FD0-966DFBE5CFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E5094B-61AD-4DF2-A3FF-4BCE872B4032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_connectors:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE55C07-E141-4DEA-A9E2-B075E1F56449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_deployment_kit:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E31011-0D3C-4339-86F0-81CD77BC3439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12851913-2BAF-4B35-AD03-7C6B4A91C43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF48FC-2634-4D66-8BD2-CB6D3CA04C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:7.7.0:*:*:*:developer:*:*:*",
            "matchCriteriaId" : "CA0557E9-5277-4D60-A1C6-1DC24FD7ECE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop_language_packs:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FF6CF3-B05C-4014-83F5-3C44D09F4FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop_language_packs:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D9DCB1-D307-42D0-A5CB-904D5DCCCD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_web_player_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2BBAD2-C1EB-4698-A598-1AF7A58B94D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.securityfocus.com/bid/95696",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/01/tibco-security-advisory-january-10-2017-tibco-spotfire-2017-3181",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/95696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2017/01/tibco-security-advisory-january-10-2017-tibco-spotfire-2017-3181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3182",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.437",
      "lastModified" : "2024-11-21T03:24:58.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections, which may allow an attacker to perform a man-in-the-middle (MITM) attack. ThreatMetrix is a security library for mobile applications, which aims to provide fraud prevention and device identity capabilities. The ThreatMetrix SDK versions prior to 3.2 do not validate SSL certificates on the iOS platform. An affected application will communicate with https://h-sdk.online-metrix.net, regardless of whether the connection is secure or not. An attacker on the same network as or upstream from the iOS device may be able to view or modify ThreatMetrix network traffic that should have been protected by HTTPS."
      }, {
        "lang" : "es",
        "value" : "En la plataforma iOS, ThreatMetrix SDK en versiones anteriores a la 3.2 no valida los certificados SSL proporcionados por las conexiones HTTPS, lo que podría permitir que un atacante realice un ataque Man-in-the-Middle (MitM). ThreatMetrix es una biblioteca de seguridad para aplicaciones móviles que proporciona capacidades de prevención de fraude e identificación de dispositivos. Las versiones anteriores a la 3.2 de ThreatMetrix SDK no validan los certificados SSL en la plataforma iOS. Una aplicación afectada se comunicará con https://h-sdk.online-metrix.net, independientemente de que la conexión sea segura o no. Un atacante en la misma red o en upstream desde el dispositivo iOS podría ser capaz de ver o modificar tráfico de red ThreatMetrix que debería haber estado protegido por HTTPS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:threatmetrix:threatmetrix_sdk:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "3.2",
            "matchCriteriaId" : "7E3D6610-8464-4109-B4C9-63BA43B3F7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/767208",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/95360",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/767208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/95360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3183",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.500",
      "lastModified" : "2024-11-21T03:24:59.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determined by the USER_CODE field associated with the querying user. By modifying the USER_CODE value to match that of a privileged user, a low-privileged, authenticated user may gain privileged access to the SQL database. A remote, authenticated user can submit specially crafted SQL queries to gain privileged access to the application database."
      }, {
        "lang" : "es",
        "value" : "Sage XRT Treasury, en su versión 3, no restringe correctamente el acceso a la base de datos a los usuarios autorizados, lo que podría hacer que cualquier usuario autenticado obtenga acceso total a las funciones privilegiadas de la base de datos. Sage XRT Treasury es una aplicación de gestión de financias empresariales. Los privilegios de acceso de usuario a la base de datos se determinan mediante el campo USER_CODE asociado al usuario que realiza la consulta. Al modificar el valor USER_CODE para que coincida con el de un usuario privilegiado, un usuario autenticado con pocos privilegios podría obtener acceso privilegiado a la base de datos SQL. Un usuario remoto autenticado puede enviar consultas SQL especialmente manipuladas para obtener acceso privilegiado a la base de datos de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sage:xrt_treasury:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96473AFD-36A2-4923-908D-ED6B5576F7F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/742632",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/96477",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/742632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/96477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3187",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.547",
      "lastModified" : "2024-11-21T03:24:59.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery. The dotCMS administrator panel contains a cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. An unauthenticated remote attacker may perform actions with the dotCMS administrator panel with the same permissions of a victim user or execute arbitrary system commands with the permissions of the user running the dotCMS application."
      }, {
        "lang" : "es",
        "value" : "El panel de administración de dotCMS, en versiones 3.7.1 y anteriores, es vulnerable a Cross-Site Request Forgery (CSRF). El panel de administración de dotCMS contiene una vulnerabilidad de Cross-Site Request Forgery (CSRF). Un atacante puede realizar acciones con los mismos permisos que los del usuario víctima, siempre que la víctima tenga una sesión activa y sea inducida a desencadenar la petición maliciosa. Un atacante remoto no autenticado podría realizar acciones con el panel de administrador de dotCMS con los mismos permisos que un usuario víctima o ejecutar comandos arbitrarios del sistema con los permisos del usuario que ejecuta la aplicación dotCMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.1",
            "matchCriteriaId" : "B9E0DEC1-1F66-46E4-B9C7-9E403541CADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96616",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/168699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/168699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3188",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.593",
      "lastModified" : "2024-11-21T03:24:59.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dotCMS administration panel, versions 3.7.1 and earlier, \"Push Publishing\" feature in Enterprise Pro is vulnerable to path traversal. When \"Bundle\" tar.gz archives uploaded to the Push Publishing feature are decompressed, the filenames of its contents are not properly checked, allowing for writing files to arbitrary directories on the file system. These archives may be uploaded directly via the administrator panel, or using the CSRF vulnerability (CVE-2017-3187). An unauthenticated remote attacker may perform actions with the dotCMS administrator panel with the same permissions of a victim user or execute arbitrary system commands with the permissions of the user running the dotCMS application."
      }, {
        "lang" : "es",
        "value" : "En el panel de administrador de dotCMS, en versiones 3.7.1 y anteriores, la característica \"Push Publishing\" en Enterprise Pro es vulnerable a un salto de directorio. Cuando los archivos \"Bundle\" tar.gz se suben a la funcionalidad Push Publishing se descomprimen, los nombres de archivo de sus contenidos no se comprueban correctamente, lo que permite escribir archivos en directorios arbitrarios del sistema de archivos. Estos archivos podrían subirse directamente mediante el panel de administración o mediante la vulnerabilidad CSRF (CVE-2017-3187). Un atacante remoto no autenticado podría realizar acciones con el panel de administrador de dotCMS con los mismos permisos que un usuario víctima o ejecutar comandos arbitrarios del sistema con los permisos del usuario que ejecuta la aplicación dotCMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.1",
            "matchCriteriaId" : "B9E0DEC1-1F66-46E4-B9C7-9E403541CADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96616",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/168699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://doc.dotcms.com/security/SI-41",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/168699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3189",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.640",
      "lastModified" : "2024-11-21T03:24:59.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dotCMS administration panel, versions 3.7.1 and earlier, \"Push Publishing\" feature in Enterprise Pro is vulnerable to arbitrary file upload. When \"Bundle\" tar.gz archives uploaded to the Push Publishing feature are decompressed, there are no checks on the types of files which the bundle contains. This vulnerability combined with the path traversal vulnerability (CVE-2017-3188) can lead to remote command execution with the permissions of the user running the dotCMS application. An unauthenticated remote attacker may perform actions with the dotCMS administrator panel with the same permissions of a victim user or execute arbitrary system commands with the permissions of the user running the dotCMS application."
      }, {
        "lang" : "es",
        "value" : "En el panel de administrador de dotCMS, en versiones 3.7.1 y anteriores, la característica \"Push Publishing\" en Enterprise Pro es vulnerable a una subida de archivos arbitrarios. Cuando los archivos \"Bundle\" tar.gz se suben a la funcionalidad Push Publishing y se descomprimen, no hay comprobaciones de los tipos de archivos que contiene el bundle. Esto, combinado con la vulnerabilidad de salto de directorio (CVE-2017-3188) puede conducir a la ejecución remota de comandos con los permisos del usuario que ejecuta la aplicación dotCMS. Un atacante remoto no autenticado podría realizar acciones con el panel de administrador de dotCMS con los mismos permisos que un usuario víctima o ejecutar comandos arbitrarios del sistema con los permisos del usuario que ejecuta la aplicación dotCMS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.1",
            "matchCriteriaId" : "B9E0DEC1-1F66-46E4-B9C7-9E403541CADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96616",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/168699",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/168699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3209",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.687",
      "lastModified" : "2024-11-21T03:25:02.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem read/write permissions to the anonymous user. A remote user within range of the open access point on the drone may utilize the anonymous user of the FTP server to read arbitrary files, such as images and video recorded by the device, or to replace system files such as /etc/shadow to gain further access to the device. Furthermore, the DBPOWER U818A WIFI quadcopter drone uses BusyBox 1.20.2, which was released in 2012, and may be vulnerable to other known BusyBox vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El dron DBPOWER U818A WIFI quadcopter proporciona acceso FTP a través de su propio punto de acceso local y permite al usuario anónimo obtener permisos totales de archivo. El dron DBPOWER U818A WIFI quadcopter ejecuta un servidor FTP que, por defecto, permite el acceso anónimo sin contraseña y proporciona permisos de lectura/escritura totales en el sistema de archivos al usuario anónimo. Un usuario remoto en el rango del punto de acceso abierto en el dron podría emplear el usuario anónimo del servidor FTP para leer archivos arbitrarios, como imágenes y vídeos tomados por el dispositivo, o reemplazar archivos del sistema como /etc/shadow para obtener aún más acceso al dispositivo. Además, el dron DBPOWER U818A WIFI quadcopter emplea BusyBox 1.20.2, lanzado en 2012, que podría conte4ner otras vulnerabilidades conocidas de BusyBox."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dbpower:u818a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295792DB-9F07-4DE4-B2DB-64022FED3B80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:busybox:busybox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74FCFCA-FD79-4141-A80B-179105089201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dbpower:u818a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01265BD8-D20E-49A4-9270-8D2641EC5705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.acm.org/citation.cfm?id=3139943",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/334207",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/97564",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://dl.acm.org/citation.cfm?id=3139943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/334207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/97564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3210",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.733",
      "lastModified" : "2024-11-21T03:25:02.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the component pdiservice.exe with NT AUTHORITY/SYSTEM permissions. This component is also read/writable by all Authenticated Users. This allows local authenticated attackers to run arbitrary code with SYSTEM privileges. The following applications have been identified by Portrait Displays as affected: Fujitsu DisplayView Click: Version 6.0 and 6.01. The issue was fixed in Version 6.3. Fujitsu DisplayView Click Suite: Version 5. The issue is addressed by patch in Version 5.9. HP Display Assistant: Version 2.1. The issue was fixed in Version 2.11. HP My Display: Version 2.0. The issue was fixed in Version 2.1. Philips Smart Control Premium: Versions 2.23, 2.25. The issue was fixed in Version 2.26."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones que se desarrollan mediante Portrait Displays SDK, desde la versión 2.30 hasta la 2.34, vuelven por defecto a configuraciones inseguras que permiten la ejecución de código arbitrario. Una serie de aplicaciones desarrolladas con Portrait Displays SDK no emplean permisos seguros al ejecutarse. Estas aplicaciones ejecutan el componente pdiservice.exe con permisos AUTHORITY/SYSTEM. Este componente también puede ser leído/escrito por todos los usuarios autenticados. Esto permite que atacantes locales autenticados ejecuten código arbitrario con privilegios SYSTEM. Portrait Displays ha identificado que las siguientes aplicaciones se han visto afectadas: Fujitsu DisplayView Click: versiones 6.0 y 6.01. Este problema se ha solucionado en la versión 6.3. Fujitsu DisplayView Click Suite: versión 5. Este problema se ha solucionado mediante un parche en la versión 5.9. HP Display Assistant: versión 2.1. Este problema se ha solucionado en la versión 2.11. HP My Display: versión 2.0. Este problema se ha solucionado en la versión 2.1. Philips Smart Control Premium: versiones 2.23 y 2.25. Este problema se ha solucionado en la versión 2.26."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portrait:portrait_display_sdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.30",
            "versionEndExcluding" : "2.34",
            "matchCriteriaId" : "B880BA41-30C2-40B7-8A42-D42DB378F303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:displayview_click:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86AF784-46C3-4793-BECC-58183F3BD50D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:displayview_click:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83868594-9F70-4961-8932-455890647854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:displayview_click_suite:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AAD1654-2049-47D4-8EFA-57DFC7AF6108"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:display_assistant:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "365FF3B6-EEE3-404A-9C55-77E31A9DA6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:my_display:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E155A15D-C3F7-46A5-8455-B5E643E09DB4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:smart_control_premium:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92683BCE-0B6B-48B5-80C8-895307290E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philips:smart_control_premium:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E861D9-7DF3-4E4C-904D-5B11E66D8DE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/219739",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/98006",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/219739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/98006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3217",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.797",
      "lastModified" : "2024-11-21T03:25:03.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the device (via an IMSI Catcher, for example) to send administrative commands to the device. These commands can be used to provide ongoing, real-time access to the device and can configure parameters such as IP addresses, firewall rules, and passwords."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos CalAmp LMU 3030 de las series OBD-II CDMA y GSM tienen una interfaz de SMS (mensajes de texto) que puede desplegarse donde el integrador/vendedor no configura una contraseña para esta interfaz. Esta interfaz debe estar protegida por contraseña; de otra forma, el atacante solo necesita saber el teléfono móvil del dispositivo (mediante un IMSI Catcher, por ejemplo) para enviar comandos administrativos al dispositivo. Estos comandos pueden emplearse para proporcionar acceso continuado en tiempo real al dispositivo y pueden configurar parámetros como direcciones IP, reglas de firewall y contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:calamp:lmu_3030_obd-ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902CC5A1-F184-4376-8649-0DB8D6145401"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:calamp:lmu_3030_obd-ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846C275B-FABB-4596-95CD-D4FFDCB0972D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:calamp:lmu_3030_cdma_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278E4B57-1A19-4217-88E4-CA26ADD1573A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:calamp:lmu_3030_cdma:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B288AFCD-8336-46A2-849A-78154F6519EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:calamp:lmu_3030_gsm_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAAD150-4886-4766-AEAE-1E24A86AAD73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:calamp:lmu_3030_gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB48FDD-E3CF-4D82-97BB-9536B7499E72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/251927",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/98964",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/251927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.securityfocus.com/bid/98964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3223",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.843",
      "lastModified" : "2024-11-21T03:25:04.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia (/usr/bin/sonia) that provides the web interface and other services for controlling the IP camera remotely. Versions of Sonia included in firmware versions prior to DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621 do not validate input data length for the 'password' field of the web interface. A remote, unauthenticated attacker may submit a crafted POST request to the IP camera's Sonia web interface that may lead to out-of-bounds memory operations and loss of availability or remote code execution. The issue was originally identified by the researcher in firmware version DH_IPC-HX1X2X-Themis_EngSpnFrn_N_V2.400.0000.30.R.20160803."
      }, {
        "lang" : "es",
        "value" : "Los productos de cámaras Dahua IP que emplean versiones de firmware anteriores a la V2.400.0000.14.R.20170713 incluyen una versión de la interfaz web de Sonia que podría ser vulnerable a un desbordamiento de búfer basado en pila. Los productos de cámaras Dahua IP incluyen una aplicación conocida como Sonia (/usr/bin/sonia) que proporciona la interfaz web y otros servicios para controlar de forma remota la cámara IP. Las versiones de Sonia incluidas en las versiones de firmware anteriores a DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621 no validan la longitud de los datos de entrada para el campo \"password\" de la interfaz web. Un atacante remoto no autenticado podría enviar una petición POST manipulada a la interfaz web Sonia de las cámaras IP que podría conducir a operaciones de memoria fuera de límites y a la pérdida de disponibilidad o a la ejecución remota de código. El problema fue identificado originariamente por el investigador en la versión de firmware DH_IPC-HX1X2X-Themis_EngSpnFrn_N_V2.400.0000.30.R.20160803."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "dh_ipc-ack-themis_eng_p_v2.400.0000.14.r.20170713.bin",
            "matchCriteriaId" : "43A5DA4C-934D-4C9B-8246-8E729219D552"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1DB735-F54C-4E47-BC00-C246E4C5911B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dahuasecurity:ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.400.0000.14.r.20170713",
            "matchCriteriaId" : "82BABFE4-CA54-432F-A91A-B09CDE3C5AB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dahuasecurity:ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1DB735-F54C-4E47-BC00-C246E4C5911B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99620",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/547255",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/547255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3224",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.890",
      "lastModified" : "2024-11-21T03:25:04.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same LSA, recency is determined by first comparing sequence numbers, then checksums, and finally MaxAge. In a case where the sequence numbers are the same, the LSA with the larger checksum is considered more recent, and will not be flushed from the Link State Database (LSDB). Since the RFC does not explicitly state that the values of links carried by a LSA must be the same when prematurely aging a self-originating LSA with MaxSequenceNumber, it is possible in vulnerable OSPF implementations for an attacker to craft a LSA with MaxSequenceNumber and invalid links that will result in a larger checksum and thus a 'newer' LSA that will not be flushed from the LSDB. Propagation of the crafted LSA can result in the erasure or alteration of the routing tables of routers within the routing domain, creating a denial of service condition or the re-routing of traffic on the network. CVE-2017-3224 has been reserved for Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages)."
      }, {
        "lang" : "es",
        "value" : "Las implementaciones del protocolo Open Shortest Path First (OSPF) podrían determinar el recency Link State Advertisement (LSA) para los LSA con MaxSequenceNumber. Según la sección 13.1 de RFC 2328, para dos instancias del mismo LSA, el recency se determina comparando, en primer lugar, los números de secuencia, las sumas de verificación y, finalmente, MaxAge. En el caso en el que los números de secuencia son los mismos, el LSA con la suma de verificación más grande se considera más reciente y no será vaciado del LSDB (Link State Database). Debido a que el RFC no indica explícitamente que los valores de los enlaces conducidos por un LSA deben ser los mismos cuando un LSA autogenerado se caduca prematuramente con MaxSequenceNumber, en las implementaciones OSPF vulnerables es posible que un atacante manipule un LSA con MaxSequenceNumber y enlaces inválidos que resultarán en una suma de verificación más grande y, por lo tanto, no se vaciará un LSA \"más nuevo\" desde el LSDB. La propagación del LSA manipulado puede resultar en la eliminación o alteración de las tablas de enrutamiento en el dominio de enrutamiento, lo que crea una condición de denegación de servicio (DoS) o el reenrutamiento de tráfico en la red. CVE-2017-3224 ha sido reservado para Quagga y las implementaciones descendientes (paquetes SUSE, openSUSE y Red Hat)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94C24FF-068A-4944-863B-9E936DD6DE32"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:opensuse:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E45392-D24F-46FC-8DBC-456D2D6EDDB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB65EF0-0E6A-4178-8564-3CC96891A072"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:package_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B51A2D-AD64-4F47-A148-0565B6A1974D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/793496",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/793496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3225",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.953",
      "lastModified" : "2024-11-21T03:25:04.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data. Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector. This allows an attacker to perform dictionary attacks on encrypted data produced by Das U-Boot to learn information about the encrypted data."
      }, {
        "lang" : "es",
        "value" : "Das U-Boot es un bootloader de dispositivos que puede leer su configuración desde un archivo cifrado por AES. Para los dispositivos que emplean este modo de cifrado de entorno, el uso de U-Boot de un vector de inicialización cero podría permitir ataques contra la implementación criptográfica subyacente y permitir que un atacante descifre los datos. La característica de cifrado AES-CBC de Das U-Boot emplea un vector de inicialización cero (0). Esto permite que un atacante realice ataques de diccionario sobre datos cifrados producidos por Das U-Boot para aprender información sobre los datos cifrados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-329"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.09",
            "matchCriteriaId" : "99AD5D11-E001-46BE-A0A4-3380D41E26D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100675",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/166743",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/166743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3226",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-07-24T15:29:00.983",
      "lastModified" : "2024-11-21T03:25:04.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption (i.e., setting the configuration parameter CONFIG_ENV_AES=y) read environment variables from disk as the encrypted disk image is processed. An attacker with physical access to the device can manipulate the encrypted environment data to include a crafted two-byte sequence which triggers an error in environment variable parsing. This error condition is improperly handled by Das U-Boot, resulting in an immediate process termination with a debugging message."
      }, {
        "lang" : "es",
        "value" : "Das U-Boot es un bootloader de dispositivos que puede leer su configuración desde un archivo cifrado por AES. Los dispositivos que emplean la característica de cifrado AES-CBC de Das U-Boot mediante cifrado de entorno (por ejemplo, estableciendo el parámetro de configuración CONFIG_ENV_AES=y) leen variables de entorno del disco según se procesa la imagen del disco cifrada. Un atacante con acceso físico al dispositivo puede manipular los datos cifrados de entorno para incluir una secuencia de dos bytes manipulada que desencadena un error en el análisis de variables de entorno. Das U-Boot gestiona erróneamente esta condición de error, lo que resulta en la terminación inmediata del proceso con un mensaje de depuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-329"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.09",
            "matchCriteriaId" : "99AD5D11-E001-46BE-A0A4-3380D41E26D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100675",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/166743",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/166743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10934",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2018-07-25T15:29:00.200",
      "lastModified" : "2024-11-21T03:06:47.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones anteriores a la V5.09.02.02T4 del producto ZTE ZXIPTV-EPG emplean el servicio Java RMI por el que los servidores emplean la biblioteca Apache Commons Collections (ACC), lo que podría resultar en vulnerabilidades de deserialización Java. Un atacante remoto no autenticado puede explotar estas vulnerabilidades mediante el envío de una petición RMI para ejecutar código arbitrario en el host objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxiptv-epg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.09.02.02t4",
            "matchCriteriaId" : "22EB411D-4A92-4937-8DCE-C677674217D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxiptv-epg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07733C51-F6D6-445D-B2CD-E72C74246A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008682",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10935",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2018-07-25T15:29:00.263",
      "lastModified" : "2024-11-21T03:06:47.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones anteriores a ZSRV2 V3.00.40 de los productos ZTE ZXR10 1800-2S permiten que usuarios autenticados remotos omitan la protección de autenticación por contraseña original para cambiar las contraseñas de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_1800-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.00.40",
            "matchCriteriaId" : "720817E2-2A6C-458D-A755-734D3950ACB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_1800-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2AC22D-CC1C-4F6E-AFA1-EEC6C2A294DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008723",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10936",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2018-07-25T15:29:00.310",
      "lastModified" : "2024-11-21T03:06:47.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en todas las versiones anteriores a la V4.01.01 del producto ZTE ZXCDN-SNS permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro aoData, lo que resulta en la divulgación de información de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxcdn-sns_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.01.01",
            "matchCriteriaId" : "8EFB0475-73ED-4FE8-AA91-352909C909C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxcdn-sns:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381BF275-174E-4109-A90C-48E56F37D8A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008722",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10937",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2018-07-25T15:29:00.343",
      "lastModified" : "2024-11-21T03:06:47.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en todas las versiones anteriores a la V2.01.05.09 del producto ZTE ZXIPTV-UCM permite que atacantes remotos ejecuten comandos SQL arbitrarios mediante el parámetro opertype, lo que resulta en la divulgación de información de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxiptv-ucm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.01.05.09",
            "matchCriteriaId" : "32D64013-ED55-4958-BA1D-FC94E4F7DA38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxiptv-ucm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BE4D3F-0178-4A02-AA7C-17D62268308C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008782",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2637",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T12:29:00.217",
      "lastModified" : "2024-11-21T03:23:52.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default (by director) listening on 0.0.0.0 (all interfaces) with no-authentication or encryption. Anyone able to make a TCP connection to any compute host IP address, including 127.0.0.1, other loopback interface addresses, or in some cases possibly addresses that have been exposed beyond the management interface, could use this to open a virsh session to the libvirtd instance and gain control of virtual machine instances or possibly take over the host."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un fallo de diseño en el director de Red Hat OpenStack Platform que utiliza TripleO para permitir migraciones live basadas en libvirtd. Libvirtd se implementa por defecto (por el director) escuchando en 0.0.0.0 (todas las interfaces) sin ninguna autenticación o cifrado. Cualquiera que sea capaz de hacer una conexión TCP a cualquier dirección IP del host, incluyendo 127.0.0.1, otras direcciones de interfaz loopback o, en algunos casos, posibles direcciones que hayan sido expuestas más allá de la interfaz de administración, podría utilizar esto para abrir una sesión virsh en la instancia libvirtd y obtener el control de las instancias de la máquina virtual o posiblemente tomar el control del host."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1242",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1504",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1546",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/solutions/3022771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2637",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.openstack.org/wiki/OSSN/OSSN-0007",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/solutions/3022771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.openstack.org/wiki/OSSN/OSSN-0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7526",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T13:29:00.183",
      "lastModified" : "2024-11-21T03:32:05.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used."
      }, {
        "lang" : "es",
        "value" : "libgcrypt en versiones anteriores a la 1.7.8 es vulnerable a un ataque de canal lateral de memoria caché, resultando en una brecha completa de RSA-1024 cuando se utiliza un método left-to-right para procesar la expansión de la ventana deslizante. Se cree que el mismo ataque funciona en RSA-2048 con un nivel de procesamiento moderadamente mayor. Este canal lateral necesita que el atacante pueda ejecutar software arbitrario en el hardware en donde se utiliza la clave privada RSA."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.8",
            "matchCriteriaId" : "3D6643E3-48B2-425D-84A4-4CEDB17A8C22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://eprint.iacr.org/2017/627",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=78130828e9a140a9de4dafadbc844dbb64cb709a",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=8725c99ffa41778f382ca97233183bcd687bb0ce",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=e6a3dc9900433bbc8ad362a595a3837318c28fa9",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3733-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3733-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3901",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3960",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://eprint.iacr.org/2017/627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=78130828e9a140a9de4dafadbc844dbb64cb709a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=8725c99ffa41778f382ca97233183bcd687bb0ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=e6a3dc9900433bbc8ad362a595a3837318c28fa9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3733-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3733-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7530",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T13:29:00.247",
      "lastModified" : "2024-11-21T03:32:05.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to (e.g. destroying VMs)."
      }, {
        "lang" : "es",
        "value" : "En CloudForms Management Engine (cfme) en versiones anteriores a la 5.7.3 y versiones 5.8.x anteriores a la 5.8.1, se ha detectado que falta la comprobación de privilegios cuando se invocan métodos arbitrarios filtrando las máquinas virtuales que MiqExpression va a ejecutar. Esta condición puede ser desencadenada por los usuarios de la API. Un atacante podría utilizarlo para ejecutar acciones para las que no debería estar autorizado (por ejemplo, destruir máquinas virtuales)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1BA91-4695-4E64-A9D7-4A6CB6904D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.3",
            "matchCriteriaId" : "B52B10CC-FCE3-4C84-A8D8-4DCA9EAB9F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8.0",
            "versionEndExcluding" : "5.8.1",
            "matchCriteriaId" : "D77E449C-9886-41FB-959C-EFBA7551CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100151",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7530",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7535",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T13:29:00.293",
      "lastModified" : "2024-11-21T03:32:06.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action."
      }, {
        "lang" : "es",
        "value" : "foreman en versiones anteriores a la 1.16.0 es vulnerable a Cross-Site Scripting (XSS) persistente en la asignación de organizaciones o ubicaciones a los hosts. Su explotación requiere que un usuario asigne activamente los hosts a una organización que contenga html en su nombre, algo que es visible para el usuario antes de tomar cualquier acción."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "ADC9D85F-FD01-4772-8F97-9DCFDDE8D399"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/521",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7535",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/20963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/20963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7537",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T13:29:00.340",
      "lastModified" : "2024-11-21T03:32:06.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado que un plugin de autenticación CMC simulado con un secreto embebido se ha habilitado por accidente y por defecto en el paquete pki-core en versiones anteriores a la 10.6.4. Un atacante podría utilizar este fallo para omitir el proceso de autenticación regular y engañar al servidor CA para que envíe certificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-592"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.4",
            "matchCriteriaId" : "F309A611-99DF-4E0D-B05F-562C7E47939E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2335",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/commit/876d13c6d20e7e1235b9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/commit/876d13c6d20e7e1235b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12610",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-07-26T14:29:00.327",
      "lastModified" : "2024-11-21T03:09:53.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka."
      }, {
        "lang" : "es",
        "value" : "En Apache Kafka desde la versión 0.10.0.0 hasta 0.10.2.1 y desde la 0.11.0.0 hasta la 0.11.0.1, los clientes autenticados de Kafka pueden suplantar identidades mediante un mensaje de protocolo manipulado con autenticación SASL/PLAIN o SASL/SCRAM cuando se utilizan las implementaciones incorporadas del servidor PLAIN o SCRAM en Apache Kafka."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0.0",
            "versionEndIncluding" : "0.10.2.1",
            "matchCriteriaId" : "7C70CB00-3825-45E7-A1BA-ECE1DEE7A2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.11.0.0",
            "versionEndIncluding" : "0.11.0.1",
            "matchCriteriaId" : "E7098816-1EC3-4C30-91CD-3CBFA78135AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104899",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/b6157be1a09df332294213bd21e90dcf9fe4c1810193be54620e4210%40%3Cusers.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/104899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/b6157be1a09df332294213bd21e90dcf9fe4c1810193be54620e4210%40%3Cusers.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2664",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T14:29:00.377",
      "lastModified" : "2024-11-21T03:23:55.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods within the rails application portion of CloudForms to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "CloudForms Management Engine (cfme) en versiones anteriores a la 5.7.3 y 5.8.x anteriores a la 5.8.1 carece de controles RBAC en determinados métodos en la parte de la aplicación rails de CloudForms. Un atacante con acceso podría utilizar una variedad de métodos en la parte de la aplicación rails de CloudForms para escalar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B1692-9199-4352-9BAA-423C8424B227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F7263F-113D-4BAE-B8CB-86A61531A2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.3",
            "matchCriteriaId" : "B52B10CC-FCE3-4C84-A8D8-4DCA9EAB9F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8",
            "versionEndExcluding" : "5.8.1",
            "matchCriteriaId" : "06BB4E14-78FE-4DA5-944B-7E5AAC0C7DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100148",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3484",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7539",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T14:29:00.420",
      "lastModified" : "2024-11-21T03:32:07.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un fallo de aserción en Qemu en versiones anteriores a la 2.10.1 en la negociación de conexión inicial de los servidores de NBD (Network Block Device) en el que la corrutina I/O no estaba definida. Esto podría provocar el cierre inesperado del servidor qemu-nbd si un cliente envía datos no esperados durante la negociación de la conexión. Un proceso o usuario remoto podría utilizar este fallo para provocar el cierre inesperado del servidor qemu-nbd, resultando en una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "12B552F4-85B9-41D8-8408-BB42CC30F8CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86166F9-BBF0-4650-8CCD-0F9C97104D21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/21/4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2628",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7539",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=2b0bbc4f8809c972bad134bc1a2570dbb01dea0b",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=ff82911cd3f69f028f2537825c9720ff78bc3f19",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/07/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=2b0bbc4f8809c972bad134bc1a2570dbb01dea0b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=ff82911cd3f69f028f2537825c9720ff78bc3f19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7543",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T14:29:00.483",
      "lastModified" : "2024-11-21T03:32:07.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una condición de carrera en openstack-neutron en versiones anteriores a la 7.2.0-12.1, 8.x anteriores a la 8.3.0-11.1, 9.x anteriores a la 9.3.1-2.1 y 10.x anteriores a la 10.0.2-1.1, cuando, siguiendo a una actualización overcloud menor, los grupos de seguridad neutron estaban deshabilitados. De manera específica, lo siguiente se ha reiniciado a 0: net.bridge.bridge-nf-call-ip6tables y net.bridge.bridge-nf-call-iptables. La carrera solo se desencadenó con una actualización, en cuyo momento un atacante podía acceder a las máquinas virtuales de los inquilinos y a los recursos de red expuestos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.2.0-12.1",
            "matchCriteriaId" : "535B14F3-B477-4410-82A7-4B05601B99EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.3.0-11.1",
            "matchCriteriaId" : "0743F5FE-B914-4C56-BBEA-421DBF312226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.3.1-2.1",
            "matchCriteriaId" : "888D9FEF-5818-42A8-B419-0338CAA7437D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2-1.1",
            "matchCriteriaId" : "8BF58FC3-DFD1-4620-82D2-6FD1441FCD24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2447",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2449",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2451",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2452",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7543",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2589",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T15:29:00.217",
      "lastModified" : "2024-11-21T03:23:47.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el servlet 1.4 de hawtio utiliza una única instancia HttpClient para las peticiones del proxy con un almacén de cookies persistente (las cookies se almacenan localmente y no se pasan entre el cliente y la URL final), lo que significa que todos los clientes que utilicen ese proxy están compartiendo las mismas cookies."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hawt:hawtio:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADADDFFB-A294-4F5D-B70A-E4AE083AA6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_fuse:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D071664D-9B31-45EB-A5DD-237EB3F36E63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7538",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T15:29:00.260",
      "lastModified" : "2024-11-21T03:32:07.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad Cross-Site Scripting (XSS) en la manera en la que se muestra un nombre de organización en Satellite 5 en versiones anteriores a la 5.8. Un usuario capaz de cambiar el nombre de una organización podría explotar esta vulnerabilidad para realizar ataques Cross-Site Scripting (XSS) contra otros usuarios de Satellite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8",
            "matchCriteriaId" : "EAC7E694-84AE-4EBD-BCA6-5A1564FABD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039267",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2645",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7538",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7545",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T15:29:00.307",
      "lastModified" : "2024-11-21T03:32:08.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la clase XmlUtils en jbpmmigration 6.5 realizaba la expansión de entidades externas de parámetros mientras analizaba archivos XML. Un atacante remoto podría utilizar este fallo para leer archivos accesibles para el usuario que ejecuta el servidor de aplicaciones y, potencialmente, realizar otros ataques más avanzados de XXE (XML External Entity)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:decision_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68146098-58F8-417E-B165-5182527117C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_bpm_suite:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD62F32D-D362-4A64-988D-A063C92BBDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jbpm:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7A96C1-B17D-4312-88C3-56E0F2464C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3354",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3355",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7545",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kiegroup/jbpm-designer/commit/a143f3b92a6a5a527d929d68c02a0c5d914ab81d",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kiegroup/jbpm-designer/commit/a143f3b92a6a5a527d929d68c02a0c5d914ab81d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7558",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T15:29:00.357",
      "lastModified" : "2024-11-21T03:32:09.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information. As a result, up to 100 bytes of the slab data could be leaked to a userspace."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una fuga de datos del kernel debido a una lectura fuera de límites en el kernel de Linux en las funciones inet_diag_msg_sctp{,l}addr_fill() y sctp_get_sctp_info() presentes desde la versión 4.7-rc1 hasta la versión 4.13. Ocurre una fuga de datos cuando estas funciones rellenan las estructuras de datos sockaddr utilizadas para exportar la información de diagnóstico del socket. Como resultado, se podían filtrar hasta 100 bytes de los datos de la slab a un espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7",
            "versionEndIncluding" : "4.13",
            "matchCriteriaId" : "0089AC9A-CBAA-4489-A0D9-FCA4F78CC3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "49A670AB-795C-429C-9F52-0794799C230C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB7866D3-A8CE-42A1-A3E1-783DA7F3DB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "4940B9A0-CF62-4B5F-9E69-91C1594B2107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6F4E31-42D4-4DAA-B9D8-0514F11AE778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEB1797-95E0-4344-91B3-8C3AEE42BDB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E4C538-05B3-47AA-8464-087549C0D8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.7:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "45FA346F-1039-4607-871B-B9F236A30C16"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q3/338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100466",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7558",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-netdev&m=150348777122761&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q3/338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://marc.info/?l=linux-netdev&m=150348777122761&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7562",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T15:29:00.403",
      "lastModified" : "2024-11-21T03:32:10.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un error de omisión de autenticación en la forma en que la interfaz de certauth de krb5 en versiones anteriores a la 1.16.1 gestionaba la validación de los certificados de cliente. Un atacante remoto capaz de comunicarse con el KDC podría utilizar este fallo para hacerse pasar por directores arbitrarios en circunstancias poco frecuentes y erróneas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.16.1",
            "matchCriteriaId" : "1E0680FA-F303-4FDF-8679-7FB8D2959D00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100511",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694/commits/1de6ca2f2eb1fdbab51f1549a25a6903aefcc196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694/commits/50fe4074f188c2d4da0c421e96553acea8378db2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694/commits/b7af544e50a4d8291524f590e20dd44430bf627d",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694/commits/1de6ca2f2eb1fdbab51f1549a25a6903aefcc196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694/commits/50fe4074f188c2d4da0c421e96553acea8378db2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/krb5/krb5/pull/694/commits/b7af544e50a4d8291524f590e20dd44430bf627d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12163",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T16:29:00.263",
      "lastModified" : "2024-11-21T03:08:57.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de fuga de información en la manera en la que Samba, en versiones anteriores a la 4.4.16, versiones 4.5.x anteriores a la 4.5.14 y versiones 4.6.x anteriores a la 4.6.8, implementó el protocolo SMB1. Un cliente malicioso podría utilizar esta vulnerabilidad para volcar los contenidos de la memoria del servidor en un archivo en el almacenamiento de samba o en una impresora compartida, aunque el atacante no pueda controlar el área exacta de memoria del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.16",
            "matchCriteriaId" : "3FF52F5F-8DF4-48FC-A4F1-F41C17DEEC0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.14",
            "matchCriteriaId" : "5CE62DA6-5CD9-4805-BBE3-65F342B13AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.8",
            "matchCriteriaId" : "8EF4B09A-5F81-4A13-B7FA-F4A97C773405"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1986832-44C9-491E-A75D-AAD8FAE683E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039401",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2858",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12163",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170921-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-12163.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_57_Samba",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170921-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-12163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/support/security/Synology_SA_17_57_Samba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12164",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T16:29:00.327",
      "lastModified" : "2024-11-21T03:08:57.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en gdm 3.24.1, en donde gdm greeter no establecía el valor booleano ran_once durante el inicio automático de sesión. Si el inicio de sesión automático estaba habilitado para una víctima, un atacante podría simplemente seleccionar \"login as another user\" para desbloquear su pantalla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-592"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome_display_manager:3.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E8A3E9-3626-4EC8-8EB6-54BBDEF504D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12164",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/gdm/commit/ff98b28",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/gdm/commit/ff98b28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7509",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T16:29:00.373",
      "lastModified" : "2024-11-21T03:32:02.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un error de validación de entradas en cómo gestiona Red Hat Certificate System los certificados proporcionados por el cliente en versiones anteriores a la 8.1.20-1. Si el campo certreq no está presente en un certificado, se desencadena un error de aserción que provoca una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.20-1",
            "matchCriteriaId" : "7688A94B-4736-4CD4-8AAC-C9FAACB335BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039248",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2560",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7509",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12167",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T17:29:00.253",
      "lastModified" : "2024-11-21T03:08:58.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado en EAP 7 en versiones anteriores a la 7.0.9 que los archivos basados en propiedades de la administración y la configuración del dominio de la aplicación que contienen mapeo de usuario a rol son legibles para todos los usuarios, permitiendo el acceso a la información de usuarios y roles a todos los usuarios conectados al sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "3CA44E14-96C3-45E9-97F8-37F8EAC5DB9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100903",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12167",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12171",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T17:29:00.300",
      "lastModified" : "2024-11-21T03:08:58.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the \"Allow\" and \"Deny\" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una regresión en la versión 6.9 de Red Hat Enterprise Linux de httpd 2.2.15-60, provocando que los comentarios en las líneas de configuración \"Allow\" y \"Deny\" se analicen incorrectamente. Un administrador web podría permitir de manera involuntaria que cualquier cliente acceda a un recurso HTTP restringido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A7795D-CFD3-4643-A7A1-7AD7629B5511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.15-60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B731C73C-DD0D-46B4-B8DD-E53DC73E96DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039633",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12175",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T17:29:00.347",
      "lastModified" : "2024-11-21T03:08:59.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality."
      }, {
        "lang" : "es",
        "value" : "Red Hat Satellite en versiones anteriores a la 6.5 es vulnerable a Cross-Site Scripting (XSS) en la regla discovery cuando se introduce un filtro y se utiliza la funcionalidad de autocompletado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "FC4F5FE5-625D-4229-AD32-85A76706E59E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/22042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/22042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2582",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T17:29:00.410",
      "lastModified" : "2024-11-21T03:23:46.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the \"InResponseTo\" field in the response."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que cuando se analizan los mensajes SAML, la clase StaxParserUtil de keycloak en versiones anteriores a la 2.5.1 reemplaza cadenas especiales para obtener valores de atributos con la propiedad del sistema. Esto podría permitir que un atacante determine valores de las propiedades del sistema en el sistema atacado formateando el campo ID de petición SAML para que sea la propiedad del sistema elegida, la cual se puede obtener en el campo \"InResponseTO\" en la respuesta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "E2C6178C-0196-42C2-9947-777F4F397D9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2808",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2809",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2810",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3219",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2740",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2741",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0139",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2582",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/keycloak/keycloak/pull/3715/commits/0cb5ba0f6e83162d221681f47b470c3042eef237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/keycloak/keycloak/pull/3715/commits/0cb5ba0f6e83162d221681f47b470c3042eef237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12150",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-26T18:29:00.213",
      "lastModified" : "2024-11-21T03:08:56.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce \"SMB signing\" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que Samba en versiones anteriores a la 4.4.16, versiones 4.5.x anteriores a la 4.5.14 y versiones 4.6.x anteriores a la 4.6.8 no cumple \"SMB signing\" cuando están habilitadas determinadas opciones de configuración. Un atacante remoto podría lanzar un ataque Man-in-the-Middle (MitM) y recuperar información en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.25",
            "versionEndExcluding" : "4.4.16",
            "matchCriteriaId" : "8383DE21-061C-4A6B-94AE-6CE07244275D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.14",
            "matchCriteriaId" : "5CE62DA6-5CD9-4805-BBE3-65F342B13AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.8",
            "matchCriteriaId" : "8EF4B09A-5F81-4A13-B7FA-F4A97C773405"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1986832-44C9-491E-A75D-AAD8FAE683E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039401",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2858",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170921-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-12150.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170921-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-12150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-26T19:29:00.427",
      "lastModified" : "2024-11-21T03:19:53.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE)."
      }, {
        "lang" : "es",
        "value" : "La implementación de llamada del sistema timer_create en kernel/time/posix-timers.c en el kernel de Linux en versiones anteriores a la 4.14.8 no valida correctamente el campo sigevent->sigev_notify, conduciendo a un acceso fuera de límites en la función show_timer (que se llama cuando se lee /proc/$PID/timers). Esto permite que las aplicaciones del espacio del usuario lean memoria del kernel arbitraria (en un kernel construido con CONFIG_POSIX_TIMERS y CONFIG_CHECKPOINT_RESTORE)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.8",
            "matchCriteriaId" : "41108D9D-6660-4D49-A5EE-169D8290F391"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mrg_realtime:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0FFE3-4BE1-4024-BCC6-1B87074DE2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104909",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041414",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3459",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3540",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3586",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3590",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3742-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3742-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45175/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3742-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3742-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45175/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6146",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.567",
      "lastModified" : "2023-11-07T02:49:49.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to an erroneous publication.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6149",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.613",
      "lastModified" : "2023-11-07T02:49:50.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6170",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.643",
      "lastModified" : "2023-11-07T02:49:50.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6171",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.707",
      "lastModified" : "2023-11-07T02:49:50.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6172",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.737",
      "lastModified" : "2023-11-07T02:49:51.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6173",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.783",
      "lastModified" : "2023-11-07T02:49:51.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6174",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.830",
      "lastModified" : "2023-11-07T02:49:51.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6175",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.863",
      "lastModified" : "2023-11-07T02:49:51.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6176",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.910",
      "lastModified" : "2023-11-07T02:49:52.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6177",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2018-07-26T20:29:00.957",
      "lastModified" : "2023-11-07T02:49:52.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12151",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T12:29:00.223",
      "lastModified" : "2024-11-21T03:08:56.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en la forma en la que el cliente samba en versiones anteriores a samba 4.4.16, samba 4.5.14 y samba 4.6.8 utilizaba cifrado con el protocolo max establecido en SMB3. La conexión podía perder el requisito de firmar y cifrar con cualquier redirección DFS, lo que permitía a un atacante leer o alterar el contenido de la conexión mediante un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.16",
            "matchCriteriaId" : "3FF52F5F-8DF4-48FC-A4F1-F41C17DEEC0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.14",
            "matchCriteriaId" : "5CE62DA6-5CD9-4805-BBE3-65F342B13AC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.8",
            "matchCriteriaId" : "8EF4B09A-5F81-4A13-B7FA-F4A97C773405"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:cifs_server:b.04.05.11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68013CEA-3847-44BE-8019-93F7B06B50FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039401",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2858",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170921-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-12151.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20170921-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2017-12151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7464",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T12:29:00.287",
      "lastModified" : "2024-11-21T03:31:57.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker could use this flaw to cause DoS, SSRF, or information disclosure if they are able to provide XML content for parsing."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que la implementación de JAXP utilizada en JBoss EAP 7.0 para el análisis SAX y DOM es vulnerable a ciertas vulnerabilidades XXE. Un atacante podría utilizar este defecto para provocar DoS, SSRF, o la divulgación de información si son capaces de proporcionar contenido XML para el análisis."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BF3B2C-B121-483A-AEF2-8082F6DA5310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7464",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2622",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T13:29:00.240",
      "lastModified" : "2024-11-21T03:23:51.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo de accesibilidad en el servicio de OpenStack Workflow (mistral) en el que un directorio de registro de servicio se hacía legible para todos los usuarios de manera incorrecta. Un usuario malicioso del sistema podría explotar esta vulnerabilidad para acceder a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1584",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2639",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T13:29:00.287",
      "lastModified" : "2024-11-21T03:23:53.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado que CloudForms no verifica que el nombre de host del servidor coincida con el nombre de dominio en el certificado cuando se utiliza una CA personalizada y se comunica con Red Hat Virtualization (RHEV) y OpenShift. Esto permitiría a un atacante falsificar sistemas RHEV u OpenShift y potencialmente obtener información sensible de CloudForms."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1BA91-4695-4E64-A9D7-4A6CB6904D41"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797195CF-CED6-4B72-878C-F7E987E9932F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98769",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038599",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1367",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7470",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T13:29:00.333",
      "lastModified" : "2024-11-21T03:31:58.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que spacewalk-channel puede ser utilizado por un usuario no administrador o por usuarios deshabilitados para realizar tareas administrativas debido a una verificación de autorización incorrecta en backend/servidor/rhnChannel.py."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:spacewalk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4453945E-AECE-4BD2-B952-99E7DC306CA1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4840254-CC76-4113-BC61-360BD15582B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EA16E0-9261-45C4-840F-5366E9EAC5E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98569",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7470",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2666",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T14:29:00.207",
      "lastModified" : "2024-11-21T03:23:56.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto en Undertow que el código que analizaba la línea de petición HTTP permitía caracteres no válidos. Esto podría ser explotado, en conjunto con un proxy que también permita caracteres inválidos pero con una interpretación diferente, para inyectar datos en la respuesta HTTP. Al manipular la respuesta HTTP, el atacante puede envenenar una memoria caché web, realizar un ataque Cross-Site Scripting (XSS) u obtener información confidencial de solicitudes que no sean las suyas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8190B427-8350-43AE-8F54-6A40B701C95E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1409.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98966",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1410",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1409.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7519",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T14:29:00.253",
      "lastModified" : "2024-11-21T03:32:03.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library."
      }, {
        "lang" : "es",
        "value" : "En Ceph, se ha encontrado un defecto de cadena de formato en la forma en la que libradosstriper analiza las entradas del usuario. Un usuario puede cerrar de manera inesperada una aplicación o servicio usando la librería libradosstriper."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ceph:ceph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F488D9-BD97-4155-B172-096DBC508395"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7519",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4339",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12165",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.237",
      "lastModified" : "2024-11-21T03:08:57.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que Undertow en versiones anteriores a la 1.4.17, 1.3.31 y 2.0.0 procesa cabeceras de petición HTTP con espacios en blanco inusuales que pueden provocar HTTP Request Smuggling."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.31",
            "matchCriteriaId" : "66B1C1E1-8B49-4A08-B29B-C3B6ACFCCC6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.17",
            "matchCriteriaId" : "06F12B32-A552-4B7E-9798-DE867BB05EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:2.0.0:alpha_1:*:*:*:*:*:*",
            "matchCriteriaId" : "25CF0002-D9DF-40E0-BAE8-D01CF5535BF5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12165",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12195",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.297",
      "lastModified" : "2024-11-21T03:09:01.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en todas las versiones de Openshift Enterprise que utilizan el plugin openshift elasticsearch. Un atacante con conocimiento del nombre usado para autenticar y acceder a Elasticsearch puede acceder a él más tarde sin el token, evitando la autenticación. Este ataque también requiere que Elasticsearch esté configurado con una ruta externa y los datos a los que se accede se limitan a los índices."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E80045-56E4-4A83-8168-CFED5E55CE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E792B5DC-CCD2-4A50-B72F-860A3BFAF165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75DC91F-0D25-42F9-8B7B-3ECCE6AB8174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB533B9-9AA8-47AC-839C-F0C1AD131B0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3188",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15120",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.343",
      "lastModified" : "2024-11-21T03:14:06.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema en el análisis de respuestas autorizadas en PowerDNS Recursor en versiones anteriores a la 4.0.8, lo que conduce a una desreferencia de puntero NULL al analizar una respuesta especialmente manipulada que contiene un CNAME de una clase diferente a IN. Un atacante remoto no autenticado podría provocar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.8",
            "matchCriteriaId" : "0C5D2712-9696-4D7C-998A-0726D88EDBAB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q4/382",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106335",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4063",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q4/382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15125",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.390",
      "lastModified" : "2024-11-21T03:14:07.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en CloudForms en versiones anteriores a la 5.9.0.22 en la función de instantánea de la interfaz de usuario de autoservicio, donde el campo de nombre no está correctamente saneado para la entrada de código HTML y JavaScript. Un atacante podría aprovechar este fallo para ejecutar un ataque de Cross-Site Scripting (XSS) persistente en un administrador de aplicaciones que emplee CloudForms. Nótese que el CSP (Content Security Policy) evita la explotación de este Cross-Site Scripting (XSS). Sin embargo, no todos los navegadores soportan CSP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.9.0.22",
            "matchCriteriaId" : "1C015BD8-6D27-4273-9FA5-F8BC43E5D8CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102287",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0380",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2595",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.437",
      "lastModified" : "2024-11-21T03:23:47.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que el visor de archivos de log en Red Hat JBoss Enterprise Application 6 y 7 permite que un archivo arbitrario sea leído por el usuario autenticado a través de un salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ABA871-3271-48E2-A69C-5AD70AF94E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1409.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1551.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98967",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038757",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1410",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1548",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1549",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1550",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1552",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2595",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1409.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2670",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.487",
      "lastModified" : "2024-11-21T03:23:56.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado en Undertow en versiones anteriores a la 1.3.28 que con el cierre no seguro de TCP, el servidor Websocket entra en bucle infinito en cada hilo IO, provocando efectivamente una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.28",
            "matchCriteriaId" : "1924AB4B-804C-405F-8889-7D0CBED7381F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A54BDA-311C-413B-8E4D-388AD65A170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868C0845-F25C-487F-A697-72917BE9D78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1409.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98965",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1410",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2670",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-1409.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7497",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T15:29:00.517",
      "lastModified" : "2024-11-21T03:32:01.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant."
      }, {
        "lang" : "es",
        "value" : "El diálogo para crear volúmenes de cloud (cinder provider) en CloudForms no filtra a los inquilinos de cloud por usuario. Un atacante con la capacidad de crear volúmenes de almacenamiento podría usar esto para crear volúmenes de almacenamiento para cualquier otro inquilino."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886BAA5E-B586-4FE7-88B3-573113E6286A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0678E212-F06D-403C-9D16-CAF33027019D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7497",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12148",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T16:29:00.223",
      "lastModified" : "2024-11-21T03:08:55.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en la interfaz de Ansible Tower en versiones anteriores a la 3.1.5 y 3.2.0 con repositorios SCM. Si la definición de un proyecto de Tower (repositorio SCM) no tiene el flag \"delete before update\" marcado, un atacante con acceso commit al repositorio de origen del playbook upstream podría crear un playbook troyano que, cuando es ejecutado por Tower, modifique el repositorio SCM comprobado para añadiir hooks git. Estos hooks git podrían, a su vez, provocar una ejecución arbitraria de comandos y código a medida que la Torre de usuario se ejecuta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.5",
            "matchCriteriaId" : "F27EF98F-D341-400A-B3B7-1E934A0524FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:scm_repositories:*:*:*",
            "versionEndExcluding" : "3.2.0",
            "matchCriteriaId" : "9DA7BCC0-1E50-458C-B19E-AB89BD18D45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1BA91-4695-4E64-A9D7-4A6CB6904D41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12148",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12173",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T16:29:00.257",
      "lastModified" : "2024-11-21T03:08:59.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que la función sysdb_search_user_by_upn_res() de sssd en versiones anteriores a la 1.16.0 no saneaba las peticiones al consultar su caché local y era vulnerable a inyecciones. En un entorno de inicio de sesión centralizado, si un hash de contraseña se almacenaba en la caché local de un usuario determinado, un atacante autenticado podía utilizar este error para recuperarlo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "C0C01FF2-083A-462F-AAC5-37C36BC966FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1877",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12173",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15113",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T16:29:00.303",
      "lastModified" : "2024-11-21T03:14:05.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues."
      }, {
        "lang" : "es",
        "value" : "ovirt-engine en versiones anteriores a la 4.1.7.6 con el nivel de registro configurado en DEBUG incluye contraseñas en el archivo de registro sin enmascarar. Solo los administradores pueden cambiar el nivel de registro y solo los administradores pueden acceder a los registros. Esto presenta un riesgo cuando los registros de nivel de depuración se comparten con proveedores u otras partes para solucionar problemas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovirt:ovirt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.7.6",
            "matchCriteriaId" : "C58D385B-4DE1-4290-8FFA-C294D8875483"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB0F63-DB24-4240-BC44-C92BAE7EAF42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2017:3138",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15113",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commitdiff%3Bh=f4a5d0cc772127dbfe40789e26c4633ceea07d14%3Bhp=e6e8704ac9eb115624ff66e2965877d8e63a45f4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHEA-2017:3138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commitdiff%3Bh=f4a5d0cc772127dbfe40789e26c4633ceea07d14%3Bhp=e6e8704ac9eb115624ff66e2965877d8e63a45f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15119",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T16:29:00.350",
      "lastModified" : "2024-11-21T03:14:06.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS."
      }, {
        "lang" : "es",
        "value" : "El servidor Network Block Device (NBD) en Quick Emulator (QEMU) en versiones anteriores a la 2.11 es vulnerable a un problema de denegación de servicio (DoS). Esto puede ocurrir si un cliente envía grandes peticiones de opciones, haciendo que el servidor pierda tiempo de CPU al leer hasta 4GB por petición.  Un cliente podría usar esta vulnerabilidad para evitar que el servidor NBD sirva otras peticiones, resultando en una denegación de servicio (DoS),"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.0",
            "matchCriteriaId" : "14022821-5A0A-49F2-876C-DCE93C2BABC6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102011",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2579",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.313",
      "lastModified" : "2024-11-21T03:23:45.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de lectura fuera de límites en netpbm en versiones anteriores a la 10.61. La función expandCodeOntoStack() tiene una comprobación de valor de código insuficiente, de modo que un archivo manipulado maliciosamente podría provocar que la aplicación se cierre de manera inesperada o, posiblemente, permitir la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm_project:netpbm:10.61.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA83F226-2F68-4914-A58D-D54ABB6C5A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2579",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2580",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.360",
      "lastModified" : "2024-11-21T03:23:46.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de límites fue encontrada en netpbm en versiones anteriores a la 10.61. Un archivo maliciosamente manipulado puede provocar que la aplicación se cierre de manera inesperada o, posiblemente, permitir la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm_project:netpbm:10.61.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA83F226-2F68-4914-A58D-D54ABB6C5A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96712",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2580",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2581",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.423",
      "lastModified" : "2024-11-21T03:23:46.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de límites fue encontrada en netpbm en versiones anteriores a la 10.61. Un archivo maliciosamente manipulado puede provocar que la aplicación se cierre de manera inesperada o, posiblemente, permitir la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm_project:netpbm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.61.00",
            "matchCriteriaId" : "BC9C8753-8DB7-4DB6-BD75-EAA32357A904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96710",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2581",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2586",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.517",
      "lastModified" : "2024-11-21T03:23:46.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en netpbm en versiones anteriores a la 10.61. Un archivo SVG maliciosamente manipulado puede provocar que la aplicación se cierre de manera inesperada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm_project:netpbm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.61.00",
            "matchCriteriaId" : "BC9C8753-8DB7-4DB6-BD75-EAA32357A904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96708",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2586",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2587",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.577",
      "lastModified" : "2024-11-21T03:23:46.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de asignación de memoria en netpbm en versiones anteriores a la 10.61. Un archivo SVG maliciosamente manipulado puede provocar que la aplicación se cierre de manera inesperada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm_project:netpbm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.61.00",
            "matchCriteriaId" : "BC9C8753-8DB7-4DB6-BD75-EAA32357A904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2590",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.627",
      "lastModified" : "2024-11-21T03:23:47.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en ipa en versiones anteriores a la 4.4. Los comandos ca-del, ca-disable, y ca-enable de IdM no comprobaban correctamente los permisos del usuario mientras modificaban las CA en Dogtag. Un atacante autenticado y no autorizado podría utilizar este fallo para eliminar, deshabilitar o habilitar las CA que provocan diversos problemas de denegación de servicio con la emisión de certificados, la firma de OCSP y la eliminación de claves secretas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "B472E8B9-D33D-49E7-ADDC-AEF3A4BF422F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0388.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96557",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0388.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2614",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.687",
      "lastModified" : "2024-11-21T03:23:50.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those accounts."
      }, {
        "lang" : "es",
        "value" : "Cuando se actualiza una contraseña en la base de datos rhvm, las herramientas de ovirt-aaaa-jdbc-tool en versiones anteriores a la 1.1.3 no verifican correctamente si la contraseña actual ha caducado. Esto permitiría el acceso a un atacante con acceso para cambiar la contraseña en cuentas con contraseñas caducadas, obteniendo acceso a esas cuentas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:enterprise_virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12544770-1AF9-4DD3-BC72-579DA0BC0F3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0257.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2621",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.737",
      "lastModified" : "2024-11-21T03:23:51.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo de control de acceso en OpenStack Orchestration (heat) en versiones anteriores a la 8.0.0, 6.1.0 y 7.0.2, en el que un directorio de registro de servicio se hacía legible para todos los usuarios de manera incorrecta. Un usuario malicioso del sistema podría explotar esta vulnerabilidad para acceder a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:heat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "60809669-2541-42D6-A0AE-AE027BC82BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96280",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1464",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2623",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.767",
      "lastModified" : "2024-11-21T03:23:51.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que rpm-ostree y rpm-ostree-client en versiones anteriores a la 2017.3 no comprueban correctamente las firmas GPG en los paquetes al crear las capas. Los paquetes con contenido sin firmar o mal firmado podrían no ser rechazados tal y como se esperaría. Este problema se mitiga parcialmente en RHEL Atomic Host, donde se utiliza la fijación de certificados por defecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm-ostree:rpm-ostree:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.3",
            "matchCriteriaId" : "1688272D-EBF4-40BA-8085-D67968137121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm-ostree:rpm-ostree-client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.3",
            "matchCriteriaId" : "D8677BDA-0FD4-42C0-9C98-620856183F9E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96558",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2623",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2624",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.827",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que xorg-x11-server en versiones anteriores a la 1.19.0 que uttilizan memcmp() para comprobar la cookie MIT recibida contra una serie de cookies válidas. Si la cookie es correcta, se puede adjuntar a la sesión de Xorg. Dado que la mayoría de las implementaciones de memcmp() retornan después de que se identifique un byte no válido, esto provoca una diferencia de tiempo entre un byte válido y otro no válido, lo que podría permitir un ataque de fuerza bruta eficiente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-385"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.4",
            "matchCriteriaId" : "B1C84A19-1449-4B04-9A47-D3C1A1152ED3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037919",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2624",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/commit/d7ac755f0b618eb1259d93c8a16ec6e39a18627c",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-03",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/commit/d7ac755f0b618eb1259d93c8a16ec6e39a18627c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201710-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2625",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.860",
      "lastModified" : "2024-11-21T03:23:51.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que libXdmcp en versiones anteriores a la 1.1.2 usaba entropía débil para generar claves de sesión. En un sistema multiusuario que utilice xdmcp, un atacante local podría utilizar la información disponible en la lista de procesos para usar un ataque de fuerza bruta en la clave, permitiéndole secuestrar las sesiones de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-320"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libxdmcp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "E0896D7E-B141-40BB-A78B-7BB07F46830D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037919",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2625",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXdmcp/commit/?id=0554324ec6bbc2071f5d1f8ad211a1643e29eb1f",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00024.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-03",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libXdmcp/commit/?id=0554324ec6bbc2071f5d1f8ad211a1643e29eb1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2630",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.923",
      "lastModified" : "2024-11-21T03:23:52.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo de desbordamiento de búfer basado en pila en  Quick Emulator (QEMU) en versiones anteriores a la 2.9 construida con el soporte de cliente de Network Block Device (NBD). El fallo puede ocurrir durante el procesamiento de la respuesta del servidor a una petición \"NBD_OPT_LIST\". Un servidor NBD malicioso podría usar este problema para provocar el cierre inesperado de un cliente NBD remoto, resultando en una denegación de servicio (DoS) o potencialmente ejecutando código arbitrario en el host del cliente con privilegios del proceso QEMU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9",
            "matchCriteriaId" : "87FA1FA4-BC4E-48D3-BB02-E0364BC21D3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2630",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qemu/qemu/commit/2563c9c6b8670400c48e562034b321a7cf3d9a85",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01246.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/15/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1422415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qemu/qemu/commit/2563c9c6b8670400c48e562034b321a7cf3d9a85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2640",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:00.970",
      "lastModified" : "2024-11-21T03:23:53.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de escritura fuera de límites en el modo en que Pidgin en versiones anteriores a la 2.12.0 procesaba el contenido XML. Un servidor remoto malicioso podría usar esta vulnerabilidad para provocar el cierre inesperado de Pidgin o ejecutar código arbitrario en el contexto del proceso pidgin."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "F1D52019-18B7-49AB-B932-DDCD34F7C0EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96775",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2640",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3806",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2646",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:01.017",
      "lastModified" : "2024-11-21T03:23:54.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse() method ends in a infinite loop. An attacker could use this flaw to conduct denial of service attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que cuando Keycloak en versiones anteriores a la 2.5.5 recibe una solicitud Logout con un Extensions en el medio de la solicitud, el método SAMLSloRequestParser.parse() termina en un bucle infinito. Un atacante podría utilizar este fallo para realizar ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.5",
            "matchCriteriaId" : "A217504B-04EC-4A23-A81C-DEC9220C04DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96882",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2646",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2651",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:01.063",
      "lastModified" : "2024-11-21T03:23:54.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses."
      }, {
        "lang" : "es",
        "value" : "jenkins-mailer-plugin en versiones anteriores a la 1.20 es vulnerable a una divulgación de información mientras usa la característica para enviar correos electrónicos a una lista de usuarios creada dinámicamente basada en los changelogs. Esto podría en algunos casos resultar en el envío de correos electrónicos a personas que no tienen una cuenta de usuario en Jenkins, y en casos raros incluso a personas que no estaban involucradas en algún proyecto que se estuviera desarrollando, debido a algún mapeo basado en la parte local de las direcciones de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:mailer:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.20",
            "matchCriteriaId" : "B7A4035E-0BF1-4586-AC91-67C17A99A1C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96984",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2651",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2653",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:01.140",
      "lastModified" : "2024-11-21T03:23:55.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests. This could allow an attacker to bypass the protect_from_forgery XSRF protection causing the routes to be used. This attack would require additional cross-site scripting or similar attacks in order to execute."
      }, {
        "lang" : "es",
        "value" : "Una serie de rutas de borrado no utilizadas están presentes en CloudForms en versiones anteriores a la 5.7.2.1, a las que se puede acceder a través de peticiones GET en lugar de sólo peticiones POST. Esto podría permitir a un atacante omitir la protección protect_from_forgery XSRF que provoca el uso de esas rutas. Este ataque requeriría Cross-Site Scripting (XSS) adicional o ataques similares para ejecutarse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.2.1",
            "matchCriteriaId" : "77543C16-72BE-47DC-8301-F4B96200794A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B1692-9199-4352-9BAA-423C8424B227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0898",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2653",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2658",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:01.187",
      "lastModified" : "2024-11-21T03:23:55.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking)."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que la página de inicio de sesión de Dashbuilder tal y como se utilizaba en Red Hat JBoss BPM Suite en versiones anteriores a la 6.4.2 y en Red Hat JBoss Data Virtualization Services en versiones anteriores a la 6.4.3 podía abrirse en un IFRAME, lo que permitía interceptar y manipular las solicitudes. Un atacante podría usar este defecto para engañar a un usuario para que realice acciones arbitrarias en la consola (clickjacking)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_bpm_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.2",
            "matchCriteriaId" : "8A87B62D-04DC-441E-84DB-1599F9D2FF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_data_virtualization_\\&_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.3",
            "matchCriteriaId" : "0989836C-2239-4CF7-8E58-2B041BE93AA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0557.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97025",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2658",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0557.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2674",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:01.237",
      "lastModified" : "2024-11-21T03:23:57.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly sanitized before showing to other users, including admins."
      }, {
        "lang" : "es",
        "value" : "JBoss BRMS 6 y BPM Suite 6 en versiones anteriores a la 6.4.3 son vulnerables a un Cross-Site Scripting (XSS) persistente a través de varias listas en Business Central. La vulnerabilidad se debe a la falta de saneamiento de las entradas de los usuarios al crear nuevas listas. Los atacantes remotos y autenticados que tienen privilegios para crear listas pueden almacenar scripts en ellas, las cuales no se sanean correctamente antes de mostrarlas a otros usuarios, incluidos los administradores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_bpm_suite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.3",
            "matchCriteriaId" : "EA1DA47E-68D6-4347-80D0-8C5AAC4C10E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98390",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7463",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T18:29:01.280",
      "lastModified" : "2024-11-21T03:31:57.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Successful exploitation would allow execution of script code within the context of the affected user."
      }, {
        "lang" : "es",
        "value" : "JBoss BRMS 6 y BPM Suite 6 en versiones anteriores a la 6.4.3 son vulnerables a un Cross-Site Scripting (XSS) reflejado a través de la carga de artefactos. Un archivo XML mal formado, si se carga, provoca que aparezca un mensaje de error que incluye parte del código XML incorrecto verbatim sin filtrar los scripts. Su explotación exitosa permitiría la ejecución del código del script dentro del contexto del usuario afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_bpm_suite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.3",
            "matchCriteriaId" : "EA1DA47E-68D6-4347-80D0-8C5AAC4C10E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/98385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7463",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/98385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2616",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.207",
      "lastModified" : "2024-11-21T03:23:50.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una condición de carrera en util-linux en versiones anteriores a la 2.32.1 en la forma en la que \"su\" manejaba los procesos hijo. Un atacante local autenticado podría usar este defecto para matar otros procesos con privilegios de root bajo condiciones específicas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-267"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:util-linux_project:util-linux:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32.1",
            "matchCriteriaId" : "2681A35D-0016-4E9D-8448-58B6B3200D34"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0654.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96404",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0907",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2616",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/karelzak/util-linux/commit/dffab154d29a288aa171ff50263ecc8f2e14a891",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-02",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0654.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/karelzak/util-linux/commit/dffab154d29a288aa171ff50263ecc8f2e14a891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201706-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2618",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.267",
      "lastModified" : "2024-11-21T03:23:50.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en el manejo del kernel de Linux para borrar los atributos SELinux de los ficheros /proc/pid/attr en versiones anteriores a la 4.9.10. Una escritura vacía (null) en este archivo puede cerrar de manera inesperada el sistema haciendo que el sistema intente acceder a la memoria no mapeada del kernel."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.10",
            "matchCriteriaId" : "B8543C77-05EE-4613-97BA-FDC92B07DEF4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96272",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0931",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0932",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0c461cb727d146c9ef2d3e86214f498b78b7d125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://marc.info/?l=selinux&m=148588165923772&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:0933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0c461cb727d146c9ef2d3e86214f498b78b7d125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://marc.info/?l=selinux&m=148588165923772&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2620",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.330",
      "lastModified" : "2024-11-21T03:23:50.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
      }, {
        "lang" : "es",
        "value" : "Quick emulator (QEMU) en versiones anteriores a la 2.8 construido con el soporte del emulador Cirrus CLGD 54xx VGA Emulator es vulnerable a un problema de acceso fuera de límites. El problema puede ocurrir al copiar datos VGA en cirrus_bitblt_cputovideo. Un usuario privilegiado dentro de guest podría usar esta vulnerabilidad para bloquear el proceso de QEMU o potencialmente ejecutar código arbitrario en el host con privilegios del proceso de QEMU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.0",
            "matchCriteriaId" : "10EE7DD6-EC30-4385-A028-E579F232BEFA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCF191B-971A-4945-AB14-08091689BE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "878949E0-D656-4E0E-858A-C6AD948A2A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCF6643-ACDE-4DDB-8B01-D952DDF8951E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405F950F-0772-41A3-8B72-B67151CC1376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5647AEA-DCE6-4950-A7EB-05465ECDDE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B152EDF3-3140-4343-802F-F4F1C329F5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EC146C-A6F6-4C0D-AF87-685286262DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAA72A4-AC7D-4544-89D4-5B07961D5A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B8C725-34CF-4340-BE7B-37E58CF706D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.1",
            "matchCriteriaId" : "E26BFEBF-36AE-4956-918E-0F3745F67103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC6689-C725-4A0D-B18F-F06C63F43AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDCD905-A9D3-4BF7-BC92-35886465241E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCF1B40-C3A8-4505-B8C9-2F2C7753BFC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E37280FF-ADAF-4829-9193-E1C203E1BE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "A0619169-9642-47F9-8F15-C5497E790CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ECE000-A99A-4ED4-B5E3-5162EC48CFB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.7.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "CF50E3A9-19A3-4015-BF56-070833B5D2CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0331.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0332.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0333.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0334.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0350.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0351.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0352.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0396.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0454.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96378",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037870",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-07",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX220771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-209.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0350.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0351.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0352.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0396.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0454.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX220771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-209.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2626",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.377",
      "lastModified" : "2024-11-21T03:23:51.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que libICE en versiones anteriores a la 1.0.9-8 usaba una entropía débil para generar claves. Un atacante local podría utilizar este fallo para secuestrar sesiones utilizando la información disponible en la lista de procesos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:libice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "432B67E9-224C-474E-8BEB-F0422AA2FF0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2019/07/14/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/96480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037919",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libICE/commit/?id=ff5e59f32255913bb1cdf51441b98c9107ae165b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00022.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-03",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/07/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/96480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cgit.freedesktop.org/xorg/lib/libICE/commit/?id=ff5e59f32255913bb1cdf51441b98c9107ae165b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201704-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2629",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.440",
      "lastModified" : "2024-11-21T03:23:52.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server doesn't support the TLS extension in question. This could lead to users not detecting when a server's certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status)."
      }, {
        "lang" : "es",
        "value" : "curl en versiones anteriores a la 7.53.0 tiene una característica de extensión TLS Certificate Status Request que solicita una nueva prueba de la validez del certificado del servidor en el código que comprueba el éxito o el fracaso de una prueba. Acaba siempre pensando que hay pruebas válidas, incluso cuando no hay ninguna o si el servidor no soporta la extensión TLS en cuestión.  Esto podría llevar a que los usuarios no detecten cuándo el certificado de un servidor no es válido o que de otra manera se confunda que el servidor está en \"mejor forma\" de lo que está en realidad. Esta vulnerabilidad también existe en la herramienta de línea de comandos (--cert-status)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.53.0",
            "matchCriteriaId" : "8C79FEE1-2147-48CF-A4B7-862CC64321E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96382",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037871",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2629",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170222.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-04",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-09",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.haxx.se/docs/adv_20170222.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201703-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2017-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2632",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.487",
      "lastModified" : "2024-11-21T03:23:52.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges."
      }, {
        "lang" : "es",
        "value" : "Un error lógico en valid_role() en la validación de roles de CloudForms en versiones anteriores a la 5.7.1.3 podría permitir a un administrador inquilino crear grupos con un nivel de privilegios superior al que debería tener el administrador inquilino. Esto permitiría a un atacante con acceso de administración de inquilinos elevar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.1.3",
            "matchCriteriaId" : "9BFB4C63-DD7D-4652-9DD6-1C55C08432B5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B1692-9199-4352-9BAA-423C8424B227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0320.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0320.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2633",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.533",
      "lastModified" : "2024-11-21T03:23:52.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un problema de acceso a la memoria fuera de límites en Quick Emulator (QEMU) en versiones anteriores a la 1.7.2 en el controlador de pantalla VNC. Esta vulnerabilidad podría ocurrir mientras se refresca la superficie del display de VNC en el \"vnc_refresh_server_surface\". Un usuario dentro de un guest podría usar esta vulnerabilidad para provocar el cierre inesperado del proceso de QEMU."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "28E9188E-054F-4D32-ABB7-79F588AFB98E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/23/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1206",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1441",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1856",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/02/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2634",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T19:29:00.580",
      "lastModified" : "2024-11-21T03:23:52.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que la implementación del Protocolo de Control de Congestión de Datagramas (DCCP) del kernel de Linux en versiones anteriores a la 2.6.22.17 usaba la función inet_sk_rebuild_header() solo para IPv4 y conexiones DCCP IPv6, lo que podría resultar en corrupciones de memoria. Un atacante remoto podría utilizar este fallo para provocar un cierre inesperado del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.22.17",
            "matchCriteriaId" : "8B7EC444-FB0D-4E70-9819-1738FCE18C22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6ADFB8-210D-4E46-82A2-1C8705928382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C9F1C4-55B0-426D-BB5E-01372C23AF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0323.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0346.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0347.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96529",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037909",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2634",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f53dc67c5e7babafe239b93a11678b0e05bead51",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0346.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f53dc67c5e7babafe239b93a11678b0e05bead51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15097",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.280",
      "lastModified" : "2024-11-21T03:14:03.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine."
      }, {
        "lang" : "es",
        "value" : "Se encontraron vulnerabilidades de escalado de privilegios en los scripts de inicialización de Red Hat de PostgreSQL. Un atacante con acceso a la cuenta de usuario de postgres podría usar estas vulnerabilidades para obtener acceso root en la máquina del servidor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1039983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3402",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3403",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3404",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3405",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15097",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15101",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.327",
      "lastModified" : "2024-11-21T03:14:04.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado que faltaba un parche para un desbordamiento de búfer basado en pila en findTable() en la versión Red Hat de liblouis en versiones anteriores a la la 2.5.4. Un atacante podría provocar una denegación de servicio (DoS) o incluso ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "8B1FDC03-0925-4A07-9D47-4F377FDD7502"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3384",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15101",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2648",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.390",
      "lastModified" : "2024-11-21T03:23:54.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que jenkins-ssh-slaves-plugin en versiones anteriores a la 1.15 no realizaba la verificación de la clave del host, permitiendo así ataques Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:ssh_slaves:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.15",
            "matchCriteriaId" : "E98A0295-FAD5-47B9-9B58-F9AC8C0DAECC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96985",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2648",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2649",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.453",
      "lastModified" : "2024-11-21T03:23:54.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el plugin Active Directory para Jenkins hasta la versión 2.2 inclusive no verificaba los certificados del servidor de Active Directory, lo que permitía ataques Man-in-the-Middle."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:active_directory:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "584398D5-C43B-451D-8FAC-E5131E954608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2650",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.500",
      "lastModified" : "2024-11-21T03:23:54.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el uso del plugin Pipeline: Classpath Step de Jenkins permite la omisión  del sandbox de Script Security para los usuarios con acceso de commit SCM, así como para los usuarios con permiso Job/Configure en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-592"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline_classpath_step:0.1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "CB70EDD9-E9B3-4422-B53F-58D232CB7BE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2652",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.530",
      "lastModified" : "2024-11-21T03:23:54.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all connected nodes."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que no se habían realizado comprobaciones de permisos en el plugin Distributed Fork en versiones anteriores a la 1.5.0 inclusive para Jenkins que proporciona el comando CLI dist-fork más allá de la comprobación básica de permisos Overall/Read, permitiendo a cualquiera con ese permiso ejecutar comandos shell arbitrarios en todos los nodos conectados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:distributed_fork:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "AE3E5AD7-AEAD-447B-BE7A-C824F412CB0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/96980",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2663",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T20:29:00.577",
      "lastModified" : "2024-11-21T03:23:55.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que la interfaz DBus de subscription-manager en versiones anteriores a la 1.19.4 permitía al usuario sin privilegios acceder a los métodos com.redhat.RHSM1.Facts.GetFacts y com.redhat.RHSM1.Config.Set.  Un atacante local sin privilegios podría utilizar estos métodos para obtener acceso a información privada o lanzar un ataque de escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-270"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:subscription-manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.4",
            "matchCriteriaId" : "D656E547-BC17-4B37-AE25-13B0F8DA41A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97015",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2663",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/candlepin/subscription-manager/commit/2aa48ef65",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/candlepin/subscription-manager/commit/2aa48ef65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15118",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-27T21:29:00.337",
      "lastModified" : "2024-11-21T03:14:06.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de desbordamiento de búfer basado en pila en la implementación de servidor NBD en qemu en versiones anteriores a la 2.11, permitiendo a un cliente solicitar un nombre de exportación de hasta 4096 bytes, que de hecho debería estar limitado a 256 bytes, provocando una escritura de pila fuera de límites en el proceso qemu. Si el servidor NBD requiere TLS, el atacante no puede activar el desbordamiento del búfer sin haber negociado primero con éxito el TLS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11",
            "matchCriteriaId" : "2CA4C93C-41E3-4365-B877-650C2EF52ACA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101975",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15118",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05045.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43194/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/28/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3575-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7482",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-30T14:29:02.990",
      "lastModified" : "2024-11-21T03:31:59.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation."
      }, {
        "lang" : "es",
        "value" : "en el kernel de Linux en versiones anteriores a la 4.12, los tickets de Kerberos 5 descifrados al emplear las claves RXRPC de forma incorrecta asumen el tamaño de un campo. Esto podría conducir a un wrapping de la variable que mantiene el tamaño y en que el puntero de datos vaya más allá final del búfer. Esto podría conducir a una corrupción de memoria y a un posible escalado de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.90",
            "matchCriteriaId" : "429C1A9C-998E-457D-8DE5-1CCBA72086E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "3.10.108",
            "matchCriteriaId" : "7AEC5142-D74C-40FD-9F20-286B9566A40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndExcluding" : "3.16.45",
            "matchCriteriaId" : "63252E95-BB44-4171-81B3-530571754ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.59",
            "matchCriteriaId" : "DFCD44DB-A537-4F77-B2DC-E0F3EF3FC431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.43",
            "matchCriteriaId" : "5F6B255F-0933-4983-B3F6-AD5B128A8F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.75",
            "matchCriteriaId" : "210DE424-BB18-453F-8EC0-528DB62330A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.35",
            "matchCriteriaId" : "756E8245-FDA8-4533-839F-003E1102C971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11.8",
            "matchCriteriaId" : "EC396324-C7F1-4F5F-8C7B-1F084DF92D5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C60FA8B1-1802-4522-A088-22171DCF7A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/602",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99299",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0641",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7482",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5f2f97656ada8d811d3c1bef503ced266fcd53a0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3945",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5f2f97656ada8d811d3c1bef503ced266fcd53a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7514",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-30T15:29:00.513",
      "lastModified" : "2024-11-21T03:32:03.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo de Cross-Site Scripting (XSS) en la forma en la que la entrada de acción se procesa en Red Hat Satellite en versiones anteriores a la 5.8.0. Un usuario que pueda especificar una acción fallida podría explotar este fallo para realizar ataques XSS contra otros usuarios de Satellite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.0",
            "matchCriteriaId" : "5B0FC22D-3C28-48A5-8DB6-7A66788FDAD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1558",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7514",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7518",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-07-30T15:29:00.560",
      "lastModified" : "2024-11-21T03:32:03.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un error en el kernel de Linux en versiones anteriores a la 4.12 en la forma en la que el módulo KVM procesó el bit trap flag(TF) en EFLAGS durante la emulación de la instrucción de la llamada del sistema, lo que conduce a que se lance una excepción de depuración (#DB) en la pila invitada. Un usuario/proceso en un invitado podría utilizar este error para escalar sus privilegios en el invitado. Los invitados de Linux no se han visto afectados por esto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12",
            "matchCriteriaId" : "D9BBDA7A-EA95-41C5-8F4C-CA458BCB7E1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/23/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038782",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/articles/3290921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0395",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7518",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg151817.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/06/23/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/articles/3290921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3619-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3754-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/kvm/msg151817.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17174",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-07-31T14:29:00.247",
      "lastModified" : "2024-11-21T03:17:38.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace U1981 V100R001C20; V200R003C20; V200R003C30; V200R003C50 have a weak algorithm vulnerability. To exploit the vulnerability, a remote, unauthenticated attacker has to capture TLS traffic between clients and the affected products. The attacker may launch the Bleichenbacher attack on RSA key exchange to decrypt the session key and the previously captured sessions by some cryptanalytic operations. Successful exploit may cause information leak."
      }, {
        "lang" : "es",
        "value" : "Algunos productos Huawei RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace U1981 V100R001C20; V200R003C20; V200R003C30 y V200R003C50 tienen una vulnerabilidad de algoritmo débil. Para explotar esta vulnerabilidad, un atacante no autenticado remoto debe capturar tráfico TLS entre los clientes y los productos afectados. El atacante podría iniciar un ataque Bleichenbacher en el intercambio de claves RSA para descifrar la clave de sesión y las sesiones previamente capturadas por medio de operaciones de criptoanálisis. Un exploit con éxito podría provocar un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:rse6500_firmware:v500r002c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "649BB696-BDBE-46FC-A23D-287DE306D8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:rse6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD9417D-0515-4B21-AD32-E6B137575D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:softco_firmware:v200r003c20spcb00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCA190A-D381-4139-B2A6-28B19A534C75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:softco:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0BB461-988A-4E55-BEFC-C5BB8245E751"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:vp9660_firmware:v600r006c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D888F94-B0D9-4CFF-8A29-7F1720B5BEDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC5311E-194E-4891-B762-8FC1EAA27E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82BCBDF-4F07-47F1-BB91-6148E2403133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC865317-D874-469D-AE84-7700B0F1485C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E676EE-B0B5-4177-8676-2936DE259C39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD4D80-D901-4082-B74D-A1D0CC24CA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180703-01-algorithm-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180703-01-algorithm-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-31T14:29:00.293",
      "lastModified" : "2024-11-21T03:18:29.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3. To perform those actions on an entry, the user needs to know the corresponding \"CredentialId\" value, which uniquely identifies a password safe entry. Since \"CredentialId\" values are implemented as GUIDs, they are hard to guess. However, if for example an entry's owner grants read-only access to a malicious user, the value gets exposed to the malicious user. The same holds true for temporary grants."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de comprobaciones de autorización, cualquier usuario autenticado puede listar, subir o eliminar adjuntos a entradas password safe en Pleasant Password Server en versiones anteriores a la 7.8.3. Para realizar estas acciones sobre una entrada, el usuario necesita conocer el valor \"CredentialId\", que identifica de forma única una entrada password safe. Como los valores \"CredentialId\" se implementan como GUID, son difíciles de adivinar. Sin embargo, si el propietario de una entrada, por ejemplo, otorga acceso de solo lectura a un usuario malicioso, el valor será expuesto a este usuario malicioso. Lo mismo ocurre con los permisos temporales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pleasantsolutions:pleasant_password_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.8.3",
            "matchCriteriaId" : "FBE79A77-C056-4042-AE9F-89F6D669500E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.profundis-labs.com/advisories/CVE-2017-17707.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.profundis-labs.com/advisories/CVE-2017-17707.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-31T14:29:00.340",
      "lastModified" : "2024-11-21T03:18:30.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3."
      }, {
        "lang" : "es",
        "value" : "Debido a comprobaciones de autorización incorrectas, es posible que cualquier usuario autenticado cambie los datos del perfil de otros usuarios en Pleasant Password Server en versiones anteriores a la 7.8.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pleasantsolutions:pleasant_password_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.8.3",
            "matchCriteriaId" : "FBE79A77-C056-4042-AE9F-89F6D669500E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.profundis-labs.com/advisories/CVE-2017-17708.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.profundis-labs.com/advisories/CVE-2017-17708.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-07-31T16:29:00.280",
      "lastModified" : "2024-11-21T03:11:22.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface."
      }, {
        "lang" : "es",
        "value" : "NetApp OnCommand Insight 7.3.0 y en versiones anteriores a la 7.2.0 es susceptible a ataques de secuestro de clics, lo que podría provocar que un usuario realice una acción no planeada en la interfaz de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.0",
            "matchCriteriaId" : "EF1CE755-EBF0-412B-9022-0FD590DCFAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F302A850-6657-4B46-9126-7ADBD46E7265"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20180731-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180731-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5693",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-07-31T19:29:00.807",
      "lastModified" : "2024-11-21T03:28:14.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a denial of service via crafted network traffic."
      }, {
        "lang" : "es",
        "value" : "El firmware en Intel Puma, en las series 5, 6 y 7, podría experimentar un vaciado de recursos o un timeout, lo que permite que un atacante de red cree una denegación de servicio (DoS) mediante tráfico de red manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:puma_firmware:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15EBAA0-59D6-41DC-B9C1-88856ED891DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:puma:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121751E1-5AE5-4F26-9A2C-695CC9C7CC63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:puma_firmware:6.0_soc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E577AFF7-93AD-4C00-9E0E-9E36449B61E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:puma:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121751E1-5AE5-4F26-9A2C-695CC9C7CC63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:puma_firmware:7.0_soc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE23FBE-6A56-4C06-8F71-B3620126BE2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:puma:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121751E1-5AE5-4F26-9A2C-695CC9C7CC63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104941",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-000097.html",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-000097.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5692",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2018-08-01T15:29:00.237",
      "lastModified" : "2024-11-21T03:28:13.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local users to perform a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Una condición de lectura fuera de límites en versiones antiguas de algunos controladores Intel Graphics para ramas de código de Windows permite que usuarios locales realicen un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.19.64.4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AB3801-E266-42CD-8793-9427B2ACFCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.19.4170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DEA672-792E-48F2-873B-87C734896805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.21.64.4223:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC2F14-3AA5-40CC-A846-7DE0A46DA86B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.21.4222:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998E3509-575A-44E1-B0BA-D7787BF1B2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.23.64.4251:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF10A26-4036-455F-A94F-4A401716955F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.23.4251:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF99D82-EA86-4408-B7CA-B3846DDF65EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.24.64.4264:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E09F45F-4FCA-4920-8415-CB033FFAB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.24.4264:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE511F6-BCD5-4F37-895D-A3E5308FE7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E25D2E3-B3C5-4D54-AC38-51EA755753DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565BC82E-A142-4660-B14A-E6D53FFCB39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.29.64.4371:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26ADA2F7-7689-440E-AF08-02AF8F85619E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116D57F0-4884-4545-BDDA-2C97474DD95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9875754-1D9E-4547-B6F8-35D49EF10A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24752A43-443A-434A-AE3C-3FC6537FCAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.36.35.5057:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADFD9FC-1236-4414-A7CF-459840B117CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.0.64.4279:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC2C626-D1E8-4195-902A-232A7FCFE6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.10.4300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8DA08-83A0-497F-8E02-F8F62E1164A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.28.64.4501:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0DA5E7-66E5-47D9-A0D7-75DE119B74F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB6338-23B0-4C1D-97C2-345A22EDCFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_driver:15.45.9.64.4534:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483FB1A8-4CD3-4450-A579-98C3DE45AF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/104957",
        "source" : "secure@intel.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00077.html",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/104957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-02T15:29:00.230",
      "lastModified" : "2024-11-21T03:35:21.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call."
      }, {
        "lang" : "es",
        "value" : "PHP 7.1.5 tiene un acceso fuera de límites en php_pcre_replace_impl mediante una llamada preg_replace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.27",
            "matchCriteriaId" : "61574DFD-0717-429E-8780-274F83B79387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.14",
            "matchCriteriaId" : "50002153-C748-4C8A-8357-FA745EF967C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "125AE526-EE12-41E4-B898-408B5404B2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22CE03-DFE5-4CD3-B229-10B219A55434"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74604",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181107-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181107-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-02T15:29:00.277",
      "lastModified" : "2024-11-21T03:35:22.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string."
      }, {
        "lang" : "es",
        "value" : "PHP en versiones 7.x hasta la 7.1.5, permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer y cierre inesperado de la aplicación) o, probablemente, cualquier otro tipo de problema mediante una cadena larga debido a un desbordamiento de enteros en mysqli_real_escape_string."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.1.5",
            "matchCriteriaId" : "99C0E54A-AA13-4E05-A54D-365E1D261EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.23",
            "matchCriteriaId" : "28F655C2-4A73-417A-B36B-313F84A6C763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.10",
            "matchCriteriaId" : "B6C16052-5EDF-4DB6-BE5B-8A6820502834"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7A6697-98CC-4E36-93DB-B7160F8399F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74544",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181107-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20181107-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14444",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.233",
      "lastModified" : "2024-11-21T03:12:48.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the URL parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en Insteon Hub, con la versión 1012 de firmware. La implementación del servidor HTTP maneja incorrectamente el parámetro URL durante una petición de actualización de firmware, lo que conduce a un desbordamiento de búfer en una sección global. Un atacante puede enviar una petición HTTP GET manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0493",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14445",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.280",
      "lastModified" : "2024-11-21T03:12:48.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en Insteon Hub, con la versión 1012 de firmware. La implementación del servidor HTTP maneja incorrectamente el parámetro host durante una petición de actualización de firmware, lo que conduce a un desbordamiento de búfer en una sección global. Un atacante puede enviar una petición HTTP GET manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0494",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14446",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.327",
      "lastModified" : "2024-11-21T03:12:48.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading to a buffer overflow on the stack. An attacker can send an HTTP GET request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer basado en pila en Insteon Hub, con la versión 1012 de firmware. La implementación del servidor HTTP extrae incorrectamente parámetros de la cadena de consulta, lo que conduce a un desbordamiento de búfer en la pila. Un atacante puede enviar una petición HTTP GET manipulada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0495",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16338",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.357",
      "lastModified" : "2024-11-21T03:16:17.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bad0 the value for the host key is copied using strcpy to the buffer at 0xa00016e0. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01bad0, el valor de la clave del host se copia mediante strcpy al búfer en 0xa00016e0. Este búfer tiene un tamaño de 32 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16339",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.403",
      "lastModified" : "2024-11-21T03:16:17.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bb1c the value for the uri key is copied using strcpy to the buffer at 0xa00016a0. This buffer is 64 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01bb1c, el valor de la clave del uri se copia mediante strcpy al búfer en 0xa00016a0. Este búfer tiene un tamaño de 64 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16340",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.450",
      "lastModified" : "2024-11-21T03:16:17.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c0e8 the value for the s_dport key is copied using strcpy to the buffer at 0xa000180c. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c0e8, el valor de la clave s_dport se copia mediante strcpy al búfer en 0xa000180c. Este búfer tiene un tamaño de 6 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16341",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.497",
      "lastModified" : "2024-11-21T03:16:17.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c224 the value for the s_vol_play key is copied using strcpy to the buffer at 0xa0000418. This buffer is maximum 8 bytes large (this is the maximum size it could be, it is possible other global variables are stored between this variable and the next one that we could identify), sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c224, el valor de la clave s_vol_play se copia mediante strcpy al búfer en 0xa0000418. El búfer tiene un tamaño máximo de 8 bytes (este es el máximo posible, pero es posible que haya otras variables globales almacenadas entre esta variable y la siguiente), por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16342",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.543",
      "lastModified" : "2024-11-21T03:16:17.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c254 the value for the s_vol_dim_delta key is copied using strcpy to the buffer at 0xa0000514. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c254, el valor de la clave s_vol_dim_delta se copia mediante strcpy al búfer en 0xa0000514. Este búfer tiene un tamaño de 4 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16343",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.577",
      "lastModified" : "2024-11-21T03:16:17.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for the s_vol_brt_delta key is copied using strcpy to the buffer at 0xa0000510. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c284, el valor de la clave s_vol_brt_delta se copia mediante strcpy al búfer en 0xa0000510. Este búfer tiene un tamaño de 4 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16344",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.623",
      "lastModified" : "2024-11-21T03:16:18.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2c8 the value for the s_url key is copied using strcpy to the buffer at 0xa0001a0c. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between \"0\" and \"3\"."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c2c8, el valor de la clave s_url se copia mediante strcpy al búfer en 0xa0001a0c. Este búfer tiene un tamaño de 16 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer. El destino también puede cambiarse mediante un parámetro sn_speaker entre \"0\" y \"3\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16345",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.653",
      "lastModified" : "2024-11-21T03:16:18.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c318 the value for the s_port key is copied using strcpy to the buffer at 0xa00017f4. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between \"0\" and \"3\"."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c318, el valor de la clave s_port se copia mediante strcpy al búfer en 0xa00017f4. Este búfer tiene un tamaño de 6 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer. El destino también puede cambiarse mediante un parámetro sn_speaker entre \"0\" y \"3\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16346",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.700",
      "lastModified" : "2024-11-21T03:16:18.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c368 the value for the s_mac key is copied using strcpy to the buffer at 0xa000170c. This buffer is 25 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between \"0\" and \"3\"."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01c368, el valor de la clave s_mac se copia mediante strcpy al búfer en 0xa000170c. Este búfer tiene un tamaño de 25 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer. El destino también puede cambiarse mediante un parámetro sn_speaker entre \"0\" y \"3\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16347",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.747",
      "lastModified" : "2024-11-21T03:16:18.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01e7d4 the value for the s_vol key is copied using strcpy to the buffer at 0xa0001700. This buffer is maximum 12 bytes large (this is the maximum size it could be, it is possible other global variables are stored between this variable and the next one that we could identify), sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un atacante podría enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad en Insteon Hub, con la versión 1012 de firmware. En 0x9d01e7d4, el valor de la clave s_vol se copia mediante strcpy al búfer en 0xa0001700. El búfer tiene un tamaño máximo de 12 bytes (este es el máximo posible, pero es posible que haya otras variables globales almacenadas entre esta y la siguiente), por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:C",
            "baseScore" : 8.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16349",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-02T19:29:00.793",
      "lastModified" : "2024-11-21T03:16:18.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de XEE (XML External Entity) en la funcionalidad de reporte de SAP BPC. Una petición XML especialmente manipulada puede provocar que se referencie una entidad externa XML, lo que resulta en una divulgación de información y una potencial denegación de servicio (DoS). Un atacante puede enviar peticiones HTTP autenticadas para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_planning_and_consolidation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E5A463-E36B-43EB-8720-A534DCC987E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/SAP",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/SAP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-02T21:29:00.213",
      "lastModified" : "2024-11-21T03:29:15.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution."
      }, {
        "lang" : "es",
        "value" : "paypal/invoice-sdk-php es vulnerable a Cross-Site Scripting (XSS) reflejado en samples/permissions.php mediante el parámetro permToken, lo que resulta en la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paypal:php_invoice_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.0",
            "matchCriteriaId" : "3BC70C12-1A07-45DB-9C86-2116D50AD2A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/paypal/invoice-sdk-php/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/paypal/invoice-sdk-php/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-02T21:29:00.277",
      "lastModified" : "2024-11-21T03:29:15.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution."
      }, {
        "lang" : "es",
        "value" : "paypal/permissions-sdk-php es vulnerable a Cross-Site Scripting (XSS) reflejado en samples/GetAccessToken.php mediante el parámetro verification_code, lo que resulta en la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paypal:php_permissions_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "A56E9E92-D380-4893-8D66-ACF7D21CA1C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/paypal/permissions-sdk-php/issues/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/paypal/permissions-sdk-php/issues/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8316",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2018-08-03T15:29:00.293",
      "lastModified" : "2024-11-21T03:33:45.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que el analizador XML de IntelliJ IDEA es vulnerable a un ataque de XEE (XML External Entity) por el que un atacante podría explotar la vulnerabilidad implementando código malicioso en ambos archivos Androidmanifest.xml."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.2.2",
            "matchCriteriaId" : "68AC438C-6A55-464F-A2DD-0AF104176E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://youtrack.jetbrains.com/issue/IDEA-175381",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://youtrack.jetbrains.com/issue/IDEA-175381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-03T18:29:00.203",
      "lastModified" : "2024-11-21T03:14:32.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el binario suid Charles Proxy Settings en Charles Proxy en versiones anteriores a la 4.2.1 permite que usuarios locales obtengan privilegios mediante vectores relacionados con la opción --self-repair"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charlesproxy:charles:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "DDA2D4FC-D316-46BB-95BB-1B64718246AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45107/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/45107/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12614",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-08-06T13:29:00.233",
      "lastModified" : "2024-11-21T03:09:53.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto Cross-Site Scripting (XSS) en ciertas páginas 404 que podría explotarse para realizar un ataque de Cross-Site Scripting (XSS). Chrome lo detectará como un intento de Cross-Site Scripting (XSS) reflejado y evitará que la página se cargue. Firefox y otros navegadores no, por lo que son vulnerables a este ataque. Mitigación: la solución a este problema es actualizar a Apache Airflow 1.9.0 o siguientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.0",
            "matchCriteriaId" : "9A155253-3A8A-4428-B0B1-8E8CB8E2D567"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940f%40%3Cdev.airflow.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940f%40%3Cdev.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1366",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.217",
      "lastModified" : "2024-11-21T03:21:47.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126859."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance Virtual Appliance desde la versión 5.2 hasta la 5.2.3.2 emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 126859."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126859",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1368",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.277",
      "lastModified" : "2024-11-21T03:21:47.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 126861."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance Virtual Appliance, desde la versión 5.2 hasta la 5.2.3.2, no establece el atributo secure en los tokens de autorización o las cookies de sesión. Los atacantes podrían ser capaces de obtener el valor de las cookies mediante el envío de un enlace http:// a un usuario o colocando este enlace en un sitio que visita el usuario. La cookie se enviará al enlace inseguro y el atacante podrá entonces obtener el valor de la cookie rastreando el tráfico. IBM X-Force ID: 126861."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126861",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1396",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.327",
      "lastModified" : "2024-11-21T03:21:49.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 127342."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance Virtual Appliance, desde la versión 5.2 hasta la 5.2.3.2, especifica permisos para un recurso crítico para la seguridad de forma que permite que ese recurso sea leído o modificado por actores no planeados. IBM X-Force ID: 127342."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127342",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1409",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.403",
      "lastModified" : "2024-11-21T03:21:50.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 127396."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance y Intelligence Virtual Appliance desde la versión 5.2 hasta la 5.2.3.2 revela información sensible a usuarios no autorizados. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 127396."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127396",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1411",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.450",
      "lastModified" : "2024-11-21T03:21:50.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance Virtual Appliance, desde la versión 5.2 hasta la 5.2.3.2, no requiere que los usuarios tengan contraseñas fuertes por defecto, lo que facilita que los atacantes comprometan las cuentas de usuario. IBM X-Force ID: 127399."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127399",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1412",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.513",
      "lastModified" : "2024-11-21T03:21:50.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 127400."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium Big Data Intelligence (SonarG) desde la versión 5.2 hasta la 5.2.3.2 genera un mensaje de error que incluye información sensible sobre su entorno, usuarios o datos asociados. IBM X-Force ID: 127400."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127400",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1755",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-06T14:29:00.560",
      "lastModified" : "2024-11-21T03:22:19.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 could allow a local attacker to inject commands into malicious files that could be executed by the administrator. IBM X-Force ID: 135855."
      }, {
        "lang" : "es",
        "value" : "IBM Security Identity Governance Virtual Appliance desde la versión 5.2 hasta la 5.2.3.2 podría permitir que un atacante local inyecte comandos en archivos maliciosos que podrían ser ejecutados por el administrador. IBM X-Force ID: 135855."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3FF17-CA69-4AD0-9E2F-08EF894E4707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B59F0-C465-476F-9775-09D411D9C019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDADC801-315E-4B7F-8464-CEFC6934A657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACF2C48-1490-4114-84D3-94F13D2375AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBF441F-7F14-4626-B705-8E422BAE4348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5F964B-B22B-43F0-9B2D-F3FB3C0EF0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F7911BA-F5BF-44FD-A377-0B25EAFC2930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135855",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6920",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2018-08-06T15:29:00.237",
      "lastModified" : "2024-11-21T03:30:48.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations."
      }, {
        "lang" : "es",
        "value" : "Drupal core 8 en versiones anteriores a la 8.3.4 permite que los atacantes remotos ejecuten código arbitrario debido a que el analizador PECL YAML no maneja objetos PHP de forma segura durante determinadas operaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-19"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.3.4",
            "matchCriteriaId" : "B0C572FD-C76D-4714-85A3-5CFF9F292C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99211",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038781",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14447",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-06T17:29:01.303",
      "lastModified" : "2024-11-21T03:12:48.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el manejador de mensajes PubNub para el canal \"ad\" de Insteon Hub que ejecuta la versión 1012 del firmware. Los comandos especialmente manipulados enviados mediante el servicio PubNub pueden provocar un desbordamiento de búfer basado en pila que sobrescriba datos arbitrarios. Un atacante debe enviar una petición HTTP autenticada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0496",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8968",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:00.897",
      "lastModified" : "2024-11-21T03:35:05.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm). The issue is resolved in iLOREST v2.1 or subsequent versions."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una ejecución remota de código arbitrario en HPE RESTful Interface Tool 1.5 y 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm). Este problema ha sido resuelto en iLOREST v2.1 o siguientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:restful_interface_tool:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6FFED9-13A5-41DA-8793-A8AA1FABAEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:restful_interface_tool:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC1670D-B96D-46A1-9990-D1BF0E99C977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03796en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03796en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8987",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:00.943",
      "lastModified" : "2024-11-21T03:35:07.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de denegación de servicio (DoS) remota no autenticada en HPE Integrated Lights-Out 3 (iLO 3) solo en la versión v1.88. La vulnerabilidad ha sido resuelta en iLOREST v1.89 o siguientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_3_firmware:1.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E73865F-5FE4-414D-8197-A7D72C10D1C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3BB462-1E25-4D84-ABC6-68F6762D719D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040429",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03826en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03826en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8988",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:00.990",
      "lastModified" : "2024-11-21T03:35:07.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 (for Windows, Linux), RepMgr earlier than 8.5.3-00 (for Windows, Linux) and HDLM earlier than 8.5.3-00 (for Windows, Linux, Solaris, AIX)."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de omisión remota de restricciones de seguridad en HPE XP Command View Advanced Edition en versiones anteriores a la 8.5.3-00. La vulnerabilidad afecta a DevMgr en versiones anteriores a la 8.5.3-00 (para Windows y Linux), RepMgr en versiones anteriores a la 8.5.3-00 (para Windows y Linux) y HDLM en versiones anteriores a la 8.5.3-00 (para Windows, Linux, Solaris y AIX)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:xp_command_view:*:*:*:*:advanced:*:*:*",
            "versionEndExcluding" : "8.5.3-00",
            "matchCriteriaId" : "C9655F20-64DB-4A0A-91FD-DCA003832EE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03822en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03822en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8989",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.037",
      "lastModified" : "2024-11-21T03:35:07.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad en HPE IceWall SSO Dfw 10.0 y 11.0 en RHEL, HP-UX y Windows podría ser explotado remotamente para permitir la redirección de URL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA405A7-3F53-4C6A-9C93-CA94EC8660EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA1E625-903D-49CC-B03E-C06B4699C8B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7347E2-C2A4-4230-A1BC-F6FE93943D4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03833en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03833en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8990",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.087",
      "lastModified" : "2024-11-21T03:35:08.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WSM 7.3 (E0506). This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de ejecución remota de código en HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software en versiones anteriores a la WSM 7.3 (E0506). El problema se resolvió en HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 y siguientes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:imc_wireless_service_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "BB459E14-9A08-482E-A9DC-B14760192804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:imc_wireless_service_manager:7.3:e0506:*:*:*:*:*:*",
            "matchCriteriaId" : "D84DB80A-BCE1-4D7C-BDCE-7EB040576C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040988",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03852en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03852en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8991",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.133",
      "lastModified" : "2024-11-21T03:35:08.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version."
      }, {
        "lang" : "es",
        "value" : "HPE ha identificado una vulnerabilidad Cross-Site Scripting (XSS) en HPE CentralView Fraud Risk Management en versiones anteriores a la CV 6.1. El problema se ha resuelto en HF16 para HPE CV 6.1 o posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:centralview_fraud_risk_management:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "A24BD336-3D72-4B75-8BC1-C50541168CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8992",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.177",
      "lastModified" : "2024-11-21T03:35:08.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version."
      }, {
        "lang" : "es",
        "value" : "HPE ha identificado una vulnerabilidad de escalado de privilegios remota en HPE CentralView Fraud Risk Management en versiones anteriores a la CV 6.1. El problema se ha resuelto en HF16 para HPE CV 6.1 o posteriores."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:centralview_fraud_risk_management:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "A24BD336-3D72-4B75-8BC1-C50541168CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9000",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.240",
      "lastModified" : "2024-11-21T03:35:08.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An unauthenticated user with network access to an Aruba mobility controller on TCP port 8080 or 8081 may be able to access arbitrary files stored on the mobility controller. Ports 8080 and 8081 are used for captive portal functionality and are listening, by default, on all IP interfaces of the mobility controller, including captive portal interfaces. The attacker could access files which could contain passwords, keys, and other sensitive information that could lead to full system compromise."
      }, {
        "lang" : "es",
        "value" : "ArubaOS, en todas las versiones anteriores a la 6.3.1.25, versiones 6.4 anteriores a la 6.4.4.16, versiones 6.5.x anteriores a la 6.5.1.9, 6.5.2, versiones 6.5.3 anteriores a la 6.5.3.3, versiones 6.5.4 anteriores a la 6.5.4.2, versiones 8.x anteriores a la 8.1.0.4 de versiones FIPS y non-FIPS (afectadas por igual), se ha visto afectado por un acceso no autenticado a archivos arbitrarios. Un usuario no autenticado con acceso de red a un controlador de movilidad de Aruba en los puertos TCP 8080 u 8081 podría ser capaz de acceder a archivos arbitrarios almacenados en el controlador de movilidad. Los puertos 8080 y 8081 se emplean para funcionalidades de portal cautivo y escuchan, por defecto, en todas las interfaces IP del controlador de movilidad, incluyendo las interfaces de portal cautivo. El atacante podría acceder a archivos que contienen contraseñas, claves y otro tipo de información sensible que podría conducir al compromiso total del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.25",
            "matchCriteriaId" : "654C901E-FBEC-4F81-82A5-F37A0891684F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "6.4.4.16",
            "matchCriteriaId" : "05C3E6BA-AA3E-4C39-8627-09C9D11464B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.5.1.9",
            "matchCriteriaId" : "B917EA2C-D262-4CC8-82F6-029864A8AA1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.3",
            "versionEndExcluding" : "6.5.3.3",
            "matchCriteriaId" : "E05007D8-D3AB-4DDB-9D1B-AB023FAEBFD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4",
            "versionEndExcluding" : "6.5.4.2",
            "matchCriteriaId" : "66C75DCE-602F-4073-9F3B-3D8A1F8E459D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.1.0.4",
            "matchCriteriaId" : "0EB27058-96DC-4EAF-A122-6A0D63E278B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:arubaos:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4A37BF-2115-4112-B367-6B31C40F2AF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039580",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9001",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.287",
      "lastModified" : "2024-11-21T03:35:08.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aruba ClearPass 6.6.3 and later includes a feature called \"SSH Lockout\", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user to execute arbitrary commands on the underlying operating system with \"root\" privilege level. This vulnerability is only present when a specific feature has been enabled. The SSH Lockout feature is not enabled by default, so only systems which have enabled this feature are vulnerable."
      }, {
        "lang" : "es",
        "value" : "Aruba ClearPass en versiones 6.6.3 y posteriores incluye una característica llamada \"SSH Lockout\", que provoca que ClearPass bloquee cuentas con demasiados errores de inicio de sesión mediante SSH. Cuando esta característica está habilitada, una vulnerabilidad de ejecución remota de comandos no autenticada está presente, lo que podría permitir que un usuario no autenticado ejecute comandos arbitrarios en el sistema operativo subyacente con el nivel de privilegios \"root\". Esta vulnerabilidad solo está presente cuando se habilita una característica en concreto. La característica SSH Lockout no está habilitada por defecto, por lo que solo los sistemas que tienen esta característica habilitada son vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.3",
            "versionEndExcluding" : "6.6.8",
            "matchCriteriaId" : "47D951FA-4169-431B-B074-1F9DCA035B53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9002",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.337",
      "lastModified" : "2024-11-21T03:35:08.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can trick a logged-in ClearPass administrative user into clicking a link could obtain sensitive information, such as session cookies or passwords. The vulnerability requires that an administrative users click on the malicious link while currently logged into ClearPass in the same browser."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de Aruba ClearPass anteriores a la 6.6.8 contienen vulnerabilidades de Cross-Site Scripting reflejado. Al explotar esta vulnerabilidad, un atacante que pueda engañar a un usuario administrativo de ClearPass que haya iniciado sesión para que haga clic en un enlace podrá obtener información sensible, como las cookies de sesión o las contraseñas. La vulnerabilidad requiere que el usuario administrativo haga clic en el enlace malicioso mientras tiene la sesión iniciada en ClearPass en el mismo navegador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.8",
            "matchCriteriaId" : "DE95D729-D8A4-49A9-89B0-222DA890DBC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9003",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2018-08-06T20:29:01.383",
      "lastModified" : "2025-01-07T11:22:47.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed."
      }, {
        "lang" : "es",
        "value" : "Están presentes múltiples errores de corrupción de memoria en ArubaOS, que podrían permitir que un usuario no autenticado provoque el cierre inesperado de los procesos de ArubaOS. Con el suficiente tiempo y esfuerzo, es posible que estas vulnerabilidades conduzcan a la capacidad de ejecutar código arbitrario; la ejecución remota de código no se ha confirmado todavía."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:arubaos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BA5DC7-B863-44B9-AB3A-2BBEFB02563F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039580",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16252",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-06T21:29:00.237",
      "lastModified" : "2024-11-21T03:16:06.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.At 0x9d014cc0 the value for the cmd key is copied using strcpy to the buffer at $sp+0x11c. This buffer is 20 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Los comandos especialmente manipulados enviados mediante el servicio PubNub en Insteon Hub 2245-222 con firmware en versión 1012 pueden provocar un desbordamiento de búfer basado en pila que sobrescriba datos arbitrarios. Un atacante debe enviar una petición HTTP autenticada para desencadenar esta vulnerabilidad. En 0x9d014cc0, el valor para la clave cmd se copia mediante strcpy en el búfer en $sp+0x11c. Este búfer tiene un tamaño de 20 bytes, por lo que el envío de algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub_2245-222:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150E9049-5523-4BC3-A5A5-473B6D320B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-06T21:29:00.283",
      "lastModified" : "2024-11-21T03:16:46.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The current implementation of CSRF protection in Symfony (Version >=2) does not use different tokens for HTTP and HTTPS; therefore the token is subject to MITM attacks on HTTP and can then be used in an HTTPS context to do CSRF attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Symfony en versiones anteriores a la 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5 y 4.0-BETA5. La implementación actual de la protección CSRF en Symfony (versiones a partir de la 2) no emplea tokens diferentes para HTTP y HTTPS; por lo tanto, el token es vulnerable a ataques Man-in-the-Middle (MitM) en HTTP y puede emplearse en un contexto HTTPS para realizar ataques Cross-Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndIncluding" : "2.7.37",
            "matchCriteriaId" : "5B84DB7E-B758-4D6A-B10B-AE602F172EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.13",
            "matchCriteriaId" : "13E4D371-1EC1-49A7-BED2-F9C36E8C5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.12",
            "matchCriteriaId" : "49BB635A-5911-4DB0-A75C-D73EBC772283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndIncluding" : "3.8.30",
            "matchCriteriaId" : "1B081CEE-9990-48CE-9ED2-06CBB6F977EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/symfony/symfony/pull/24992",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16653-csrf-protection-does-not-use-different-tokens-for-http-and-https",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/24992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16653-csrf-protection-does-not-use-different-tokens-for-http-and-https",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-06T21:29:00.330",
      "lastModified" : "2024-11-21T03:16:46.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are used to read resource bundles from the local filesystem. The read() methods of these classes use a path and a locale to determine the language bundle to retrieve. The locale argument value is commonly retrieved from untrusted user input (like a URL parameter). An attacker can use this argument to navigate to arbitrary directories via the dot-dot-slash attack, aka Directory Traversal."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Symfony en versiones anteriores a la 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5 y 4.0-BETA5. El componente Intl incluye varios lectores bundle que se emplean para leer bundles de recursos desde el sistema de archivos local. Los métodos read() de estas clases emplean una ruta y una locale para determinar qué bundle de idioma deben recuperar. El valor del argumento locale suele recuperarse desde entradas de usuario no fiables (como un parámetro URL). Un atacante puede emplear este argumento para navegar a directorios arbitrarios mediante el ataque dot-dot-slash (punto-punto-barra), también conocido como salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndIncluding" : "2.7.37",
            "matchCriteriaId" : "5B84DB7E-B758-4D6A-B10B-AE602F172EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.13",
            "matchCriteriaId" : "13E4D371-1EC1-49A7-BED2-F9C36E8C5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.12",
            "matchCriteriaId" : "49BB635A-5911-4DB0-A75C-D73EBC772283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndIncluding" : "3.8.30",
            "matchCriteriaId" : "1B081CEE-9990-48CE-9ED2-06CBB6F977EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/symfony/symfony/pull/24994",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16654-intl-bundle-readers-breaking-out-of-paths",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/24994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16654-intl-bundle-readers-breaking-out-of-paths",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-06T21:29:00.407",
      "lastModified" : "2024-11-21T03:16:58.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array forms the data that are then bound to the form. At this stage there is no difference anymore between submitted POST data and uploaded files. A user can send a crafted HTTP request where the value of a \"FileType\" is sent as normal POST data that could be interpreted as a local file path on the server-side (for example, \"file:///etc/passwd\"). If the application did not perform any additional checks about the value submitted to the \"FileType\", the contents of the given file on the server could have been exposed to the attacker."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Symfony en versiones anteriores a la 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5 y 4.0-BETA5. Cuando un usuario envía un formulario, las clases del manipulador de petición del componente Form combinan los datos POST y suben los archivos en un array. Este array grande forma los datos que se enlazan al formulario. En este punto, ya no hay diferencias entre los datos POST enviados y los archivos subidos. Un usuario puede enviar una petición HTTP manipulada donde el valor de un \"FileType\" se envía como datos POST normales que podrían ser interpretados como ruta de archivo local del lado del servidor (por ejemplo, \"file:///etc/passwd\"). Si la aplicación no realiza comprobaciones adicionales sobre el valor enviado a \"FileType\", el contenido del archivo dado en el servidor podría haberse expuesto al atacante."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndIncluding" : "2.7.37",
            "matchCriteriaId" : "5B84DB7E-B758-4D6A-B10B-AE602F172EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndIncluding" : "2.8.30",
            "matchCriteriaId" : "EFE14BFC-CE4D-4BCB-8179-53243E6657E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.13",
            "matchCriteriaId" : "13E4D371-1EC1-49A7-BED2-F9C36E8C5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.3.12",
            "matchCriteriaId" : "49BB635A-5911-4DB0-A75C-D73EBC772283"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2654",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-06T22:29:00.280",
      "lastModified" : "2024-11-21T03:23:55.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses."
      }, {
        "lang" : "es",
        "value" : "jenkins-email-ext en versiones anteriores a la 2.57.1 es vulnerable a una exposición de información. Email Extension Plugins puede enviar emails a una lista de usuarios creada dinámicamente en base a los changelogs, como los autores de cambios en SCM desde la última build exitosa. En algunos casos, esto podría resultar en el envío de emails a personas que no tienen cuenta de usuario en Jenkins y, en casos más raros, incluso a personas que no estuvieron implicadas en el proyecto que se esté realizando, debido al mapeo basado en la parte local de las direcciones de email."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:email_extension:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.57.1",
            "matchCriteriaId" : "974DEFB4-058D-421D-92CB-41EDC610E22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jenkins.io/security/advisory/2017-03-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1286",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-13T16:29:00.370",
      "lastModified" : "2024-11-21T03:21:38.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147."
      }, {
        "lang" : "es",
        "value" : "La información sensible sobre la configuración del servidor y la base de datos de IBM UrbanCode Deploy desde la versión 6.1 hasta la 6.9.6.0 puede ser obtenida por un usuario al que se le hayan otorgado permisos elevados en la interfaz de usuario, incluso después de que dichos permisos elevados hayan sido revocados. IBM X-Force ID: 125147."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.1",
            "versionEndIncluding" : "6.9.6.0",
            "matchCriteriaId" : "05C24458-E25B-45D8-BBFE-FB730137EC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125147",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg2C1000377",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/125147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg2C1000377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1749",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-13T16:29:00.497",
      "lastModified" : "2024-11-21T03:22:18.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deployments. IBM X-Force ID: 135522."
      }, {
        "lang" : "es",
        "value" : "IBM UrbanCode Deploy desde la versión 6.1 hasta la 6.9.6.0 podría permitir que un atacante remoto salte directorios del sistema. Un atacante no autenticado podría alterar las implementaciones de UCD. IBM X-Force ID: 135522."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndIncluding" : "6.9.6.0",
            "matchCriteriaId" : "20731EEA-C0EE-4E84-AC10-7C10890110E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135522",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg2C1000374",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg2C1000374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15138",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-13T17:29:00.233",
      "lastModified" : "2024-11-21T03:14:08.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens."
      }, {
        "lang" : "es",
        "value" : "La lectura en clúster de OpenShift Enterprise puede acceder a tokens webhook que permitirían a un atacante con privilegios suficientes ver tokens webhook confidenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309CB6F8-F178-454C-BE97-787F78647C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHBA-2018:0489",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15138",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHBA-2018:0489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7500",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-13T17:29:00.357",
      "lastModified" : "2024-11-21T03:32:01.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado que rpm no manejaba correctamente las instalaciones RPM cuando una ruta de destino era un enlace simbólico a un directorio, posiblemente cambiando la propiedad y los permisos de un directorio arbitrario y los archivos RPM se colocaban en un destino arbitrario. Un atacante con acceso de escritura a un directorio en el que se instalará un subdirectorio podría redirigir ese directorio a una ubicación arbitraria y obtener privilegios root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13.0.0",
            "versionEndExcluding" : "4.13.0.2",
            "matchCriteriaId" : "570A3E92-EA84-4106-9C64-B0F597F1C9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.14.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3206925E-EF01-4CC1-ABCA-68283CCF7041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.14.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE6C7F0-274D-4205-83E6-963422C7AC29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/c815822c8bdb138066ff58c624ae83e3a12ebfa9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/f2d3be2a8741234faaa96f5fd05fdfdc75779a79",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/c815822c8bdb138066ff58c624ae83e3a12ebfa9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/f2d3be2a8741234faaa96f5fd05fdfdc75779a79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13100",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:00.277",
      "lastModified" : "2024-11-21T03:10:58.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación de iOS The Moron Test, de DistinctDev, Inc., en su versión 6.3.1 del 2017-05-04, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:distinctdev:the_moron_test:6.3.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "8FD76618-0335-4CF3-9E33-AC29E10193E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13101",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:00.403",
      "lastModified" : "2024-11-21T03:10:58.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación de iOS musical.ly - your video social network, de Musical.ly Inc., en su versión 6.1.6 del 03/10/2017, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiktok:musical.ly:6.1.6:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "0DE28ED8-1533-4AB8-8DFF-AAB405A68997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13102",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:00.510",
      "lastModified" : "2024-11-21T03:10:58.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación de iOS Gameloft Asphalt Xtreme: Offroad Rally Racing The Moron Test, en su versión 1.6.0 del 13/08/2017, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gameloft:asphalt_xtreme:1.6.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "5556CBB8-88CD-49F8-B1B6-EE6011AFFF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13103",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:00.637",
      "lastModified" : "2023-11-07T02:38:34.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13104",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:00.760",
      "lastModified" : "2024-11-21T03:10:58.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación para iOS UberEATS: Uber for Food Delivery, de Uber Technologies, Inc., en su versión 1.108.10001 del 02/11/2017, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uber:ubereats:1.108.10001:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "DCE382A1-BFB6-42B1-9AFE-7B0220C891CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13105",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:00.887",
      "lastModified" : "2024-11-21T03:10:58.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and read by an attacker."
      }, {
        "lang" : "es",
        "value" : "La aplicación para Android Hi Security Virus Cleaner - Antivirus, Booster, en su versión 3.7.1.1329 del 2017-09-13, acepta todos los certificados SSL durante la comunicación SSL. Esto deja la aplicación expuesta a un ataque Man-in-the-Middle (MitM) que haría que un atacante pueda interceptar y leer todo su tráfico cifrado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hisecuritylab:virus_cleaner:3.7.1.1329:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4D41B92C-E28C-44CE-9F99-A924698B214C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13106",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:01.010",
      "lastModified" : "2024-11-21T03:10:58.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación para Android CM Launcher 3D - Theme, wallpaper, Secure, Efficient, de Cheetahmobile, en su versión 5.0.3 del 2017-09-19, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmcm:cm_launcher_3d:5.0.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "CE0B9343-2E6B-4FF9-9B8E-E33D6097D917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13107",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:01.137",
      "lastModified" : "2024-11-21T03:10:58.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación para Android Live.me - live stream video chat, en su versión 3.7.20 del 2017-11-06, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liveme:liveme:3.7.20:*:*:*:*:android:*:*",
            "matchCriteriaId" : "5D9D8034-38D5-49C9-8C3C-B5A19F115DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13108",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2018-08-15T22:29:01.247",
      "lastModified" : "2024-11-21T03:10:58.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
      }, {
        "lang" : "es",
        "value" : "La aplicación para Android DFNDR Security Antivirus, Anti-hacking Cleaner, en su versión 5.0.9 del 01/11/2017, emplea una clave embebida para el cifrado. Los datos almacenados utilizando esta clave pueden ser descifrados por cualquiera que pueda acceder a esta clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psafe:dfndr_security:5.0.9:*:*:*:*:android:*:*",
            "matchCriteriaId" : "921518D8-8508-410D-9087-11B2AA55FFC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/787952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1732",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-17T16:29:00.230",
      "lastModified" : "2024-11-21T03:22:17.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 134913."
      }, {
        "lang" : "es",
        "value" : "IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 no establece el atributo secure en los tokens de autorización o cookies de sesión. Los atacantes podrían obtener los valores de las cookies enviando un enlace http:// o plantando este enlace en un sitio al que el usuario accede. La cookie se enviará al enlace no seguro y el atacante podría entonces obtener el valor de la cookie para rastrear el tráfico. IBM X-Force ID: 134913."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D33D16-A432-46C5-81C1-FF385AF79F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10726017",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134913",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10726017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16744",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-08-20T21:29:00.683",
      "lastModified" : "2024-11-21T03:16:53.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en sistemas Tridium Niagara AX en versiones 3.8 y anteriores y Niagara 4 en versiones 4.4 y anteriores instalados en sistemas de Microsoft WIndows se puede explotar utilizando unas credenciales válidas de la plataforma (admin)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tridium:niagara:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "3A6232E5-26AD-4C52-B6A6-8459E85B8A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tridium:niagara_ax_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "A005B024-6358-4533-BE31-AA229B1B6084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105101",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-191-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-022-01",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/105101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-191-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-022-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16748",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-08-20T21:29:00.807",
      "lastModified" : "2024-11-21T03:16:53.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede iniciar sesión en la plataforma Niagara local (Niagara AX Framework en versiones 3.8 y anteriores y Niagara 4 en versiones 4.4 y anteriores) utilizando un nombre de cuenta deshabilitado y una contraseña en blanco, concediendo al atacante el acceso de administrador al sistema Niagara."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tridium:niagara:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "F34EB1B8-23E2-46B3-8395-4703C5B3AD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tridium:niagara_ax_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "A005B024-6358-4533-BE31-AA229B1B6084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105101",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-191-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-022-01",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "http://www.securityfocus.com/bid/105101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-191-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-022-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1753",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-08-20T21:29:00.933",
      "lastModified" : "2024-11-21T03:22:18.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos IBM Rational son vulnerables a inyección HTML. Un atacante remoto podría ejecutar código HTML malicioso que, cuando se visualice, se ejecutaría en el navegador web de la víctima en el contexto de seguridad del sitio anfitrión. IBM X-Force ID: 135655."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "F5C09499-13C3-4F91-A68D-C8FEB77B18DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "130C05BE-0919-4A40-9F1E-C7AB4D718D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "8BABC587-0E98-4CE1-AD8C-4045D3CA2941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "4EB5653C-C3DD-471B-B644-6E3128CA7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "C5C61916-4F4D-4DD3-8F09-F55322767C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "3A1EBFE0-1EA4-46A9-866B-3ED2E1187612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "82E0686F-C62F-4A6A-861E-19467C8018A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "A48EFB76-A843-46B9-8840-83DC35330DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "98DCDC04-6FD5-49CB-BC20-757A69C4AC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "909CD52D-BC7A-467F-A88B-15150C6A41ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10713739",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10713739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17305",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-08-21T13:29:00.263",
      "lastModified" : "2024-11-21T03:17:48.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security."
      }, {
        "lang" : "es",
        "value" : "Algunos productos Firewall de Huawei, en sus modelos USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR y V300R001C00 tienen una vulnerabilidad de oráculo de Bleichenbacher en las implementaciones IPSEC IKEv1. Los atacantes remotos puedes descifrar los datos del texto cifrado mediante un túnel IPSEC utilizando un oráculo de Bleichenbacher en el relleno (padding) de RSA. Esto puede provocar un ataque de oráculo de Bleichenbacher. Su explotación con éxito puede afectar a la seguridad del túnel IPSec."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg2205bsr_firmware:v300r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9DEE4-F23B-4F54-9868-EDF5AC95D333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg2205bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D90A5F-E41D-4CFD-86D2-FB208031CBAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg2220bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8F1406-67A4-4A46-8248-1712E85FE1D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg2220bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4257B6-A1C0-4585-93EF-63081534C5E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg5120bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B9E222-40C0-408C-A669-8CF99836FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg5120bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C515743-EA4D-41A6-B295-90EBA5553AD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg5150bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E5A858-16C9-4085-BE5A-78A680D2F4D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg5150bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F058EF4-A6D4-4931-B571-332E0C1B052D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17311",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-08-21T13:29:00.373",
      "lastModified" : "2024-11-21T03:17:48.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent crafted packets to the affected device to exploit these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service."
      }, {
        "lang" : "es",
        "value" : "Algunos productos Firewall de Huawei, en sus modelos USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR y V300R001C00 tienen una vulnerabilidad de denegación de servicio (DoS) en las implementaciones IPSEC IKEv1.de productos Firewall de Huawei. Debido a un manejo incorrecto de los mensajes mal formados, un atacante podría enviar paquetes manipulados al dispositivo afectado para explotar estas vulnerabilidades. Su explotación con éxito podría conducir a una denegación de servicio del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg2205bsr_firmware:v300r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9DEE4-F23B-4F54-9868-EDF5AC95D333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg2205bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D90A5F-E41D-4CFD-86D2-FB208031CBAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg2220bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8F1406-67A4-4A46-8248-1712E85FE1D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg2220bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4257B6-A1C0-4585-93EF-63081534C5E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg5120bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B9E222-40C0-408C-A669-8CF99836FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg5120bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C515743-EA4D-41A6-B295-90EBA5553AD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg5150bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E5A858-16C9-4085-BE5A-78A680D2F4D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg5150bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F058EF4-A6D4-4931-B571-332E0C1B052D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17312",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-08-21T13:29:00.483",
      "lastModified" : "2024-11-21T03:17:48.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent crafted packets to the affected device to exploit these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service."
      }, {
        "lang" : "es",
        "value" : "Algunos productos Firewall de Huawei, en sus modelos USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR y V300R001C00 tienen una vulnerabilidad de denegación de servicio (DoS) en las implementaciones IPSEC IKEv1. de productos Firewall de Huawei. Debido a un manejo incorrecto de los mensajes mal formados, un atacante podría enviar paquetes manipulados al dispositivo afectado para explotar estas vulnerabilidades. Su explotación con éxito podría conducir a una denegación de servicio del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg2205bsr_firmware:v300r001c10spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9DEE4-F23B-4F54-9868-EDF5AC95D333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg2205bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D90A5F-E41D-4CFD-86D2-FB208031CBAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg2220bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8F1406-67A4-4A46-8248-1712E85FE1D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg2220bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4257B6-A1C0-4585-93EF-63081534C5E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg5120bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B9E222-40C0-408C-A669-8CF99836FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg5120bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C515743-EA4D-41A6-B295-90EBA5553AD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg5150bsr_firmware:v300r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E5A858-16C9-4085-BE5A-78A680D2F4D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg5150bsr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F058EF4-A6D4-4931-B571-332E0C1B052D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7513",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-22T15:29:00.207",
      "lastModified" : "2024-11-21T03:32:03.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado que Satellite 5 configurado con SSL/TLS para el backend PostgreSQL no pudo validar correctamente los campos de nombre de host de certificado de servidor X.509. Un atacante Man-in-the-Middle (MitM) podría usar este fallo para falsificar un servidor PostgreSQL usando un certificado X.509 especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6BFE59-8452-45DF-A6DD-75EACE54E180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE8617F-627D-4C10-B7BB-B0B842406085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDDEC74-7E97-4498-A136-B270BD1AC72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FDDB68-9828-4DAF-8417-4E3B68ABA2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCE54F9-0195-4E9D-A15F-3947EA0EBED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06D3AA8-F88F-4FD6-B147-7451EFAFF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6D3920-6A7D-4AF8-A620-80C89FF454F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4840254-CC76-4113-BC61-360BD15582B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EA16E0-9261-45C4-840F-5366E9EAC5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F86C3C-B99C-44C6-97D7-163DC3F59687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-7513",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2662",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-22T16:29:01.417",
      "lastModified" : "2024-11-21T03:23:55.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un fallo en la versión 3.4.5 del plugin katello de Foreman. Después de establecer un nuevo rol para permitir el acceso restringido a un repositorio con un filtro (filtro establecido en el nombre del producto), el filtro no se respeta cuando las acciones se realizan a través de hammer usando el id del repositorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:katello:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C987F0-1607-478C-9DAE-0849C52F6A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/18838",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://projects.theforeman.org/issues/18838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7528",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-22T16:29:03.040",
      "lastModified" : "2024-11-21T03:32:05.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback)."
      }, {
        "lang" : "es",
        "value" : "Ansible Tower tal y como viene con Red Hat CloudForms Management Engine 5 es vulnerable a la inyección de CRLF. Se ha detectado que la cabecera X-Forwarded-For permite a los servidores internos desplegar otros sistemas (usando callback)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455489FE-C40C-4D6B-85A0-EF832A664A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7098B44F-56BF-42E3-8831-48D0A8E99EE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105143",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2627",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-22T17:29:00.257",
      "lastModified" : "2024-11-21T03:23:51.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal with '..' and it grants full passwordless root access to the validations user."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un defecto en opentack-tripleo-common tal y como viene en Red Hat Openstack Enterprise 10 y 11. El archivo sudoers instalado con el paquete opentack-tripleo-common de OSP es demasiado permisivo. Contiene varias líneas para el usuario mistral que tienen wildcards que permiten el salto de directorio con '...' y otorga acceso root completo sin contraseñas al usuario de validaciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9AF77C-5D49-4842-9817-AD710A919073"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:tripleo-common:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18BA39-0CF0-41DD-8AB4-E89F114A01DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2627",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2575",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-22T21:29:00.320",
      "lastModified" : "2024-11-21T03:23:45.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the BPG encoder. This vulnerability appeared while converting a malicious JPEG file to BPG."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad al hacer fuzzing en libbpg 0.9.7. Se trata de un problema de desreferencia de puntero NULL debido a la falta de comprobación del valor de retorno de la función malloc en el codificador BPG. Esta vulnerabilidad apareció al convertir un archivo JPEG malicioso a BPG."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbpg_project:libbpg:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53046B-9F6C-49AF-A281-DC124B84303A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/oss-sec/2017/q2/100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148857",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/oss-sec/2017/q2/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2635",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-22T21:29:00.430",
      "lastModified" : "2024-11-21T03:23:52.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un defecto de desferencia del puntero NULL en la forma en la que libvirt desde la versión 2.5.0 hasta la 3.0.0 manejaba las unidades vacías. Un atacante autenticado remoto podría usar este defecto para provocar el cierre inesperado del demonio libvirtd, lo que provocaría una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "C6023086-B53C-412A-800B-A3DB0BB90182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2635",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=c3de387380f6057ee0e46cd9f2f0a092e8070875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=c3de387380f6057ee0e46cd9f2f0a092e8070875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16348",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-23T14:29:00.213",
      "lastModified" : "2024-11-21T03:16:18.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functionality allows for arbitrarily rebooting the device without authentication. An attacker can send a UDP packet to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de denegación de servicio (DoS) explotable en Insteon Hub con la versión de firmware 1012. La funcionalidad leftover demo permite el reinicio arbitrario del dispositivo sin autenticación. Un atacante puede enviar un paquete UDP para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0485",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14453",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-23T15:29:00.227",
      "lastModified" : "2024-11-21T03:12:49.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. An attacker should impersonate PubNub and answer an HTTPS GET request to trigger this vulnerability. A strcpy overflows the buffer insteon_pubnub.channel_ad_r, which has a size of 16 bytes. An attacker can send an arbitrarily long \"ad_r\" parameter in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Insteon Hub 2245-222 con la versión de firmware 1012, las respuestas especialmente manipuladas recibidas desde el servicio PubNub pueden provocar desbordamientos de búfer en una sección global sobrescribiendo datos arbitrarios. Un atacante debe suplantar PubNub y responder una petición GET HTTP para desencadenar esta vulnerabilidad. Un strcpy desborda el búfer insteon_pubnub.channel_ad_r, el cual tiene un tamaño de 16 bytes. Un atacante puede enviar un parámetro \"ad_r \" arbitrariamente largo para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_2245-222_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2532FA22-D435-47E6-8DFA-47377B1959D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub_2245-222:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150E9049-5523-4BC3-A5A5-473B6D320B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14455",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-23T15:29:00.333",
      "lastModified" : "2024-11-21T03:12:49.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. An attacker should impersonate PubNub and answer an HTTPS GET request to trigger this vulnerability. A strcpy overflows the buffer insteon_pubnub.channel_ak, which has a size of 16 bytes. An attacker can send an arbitrarily long \"ak\" parameter in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Insteon Hub 2245-222 con la versión de firmware 1012, las respuestas especialmente manipuladas recibidas desde el servicio PubNub pueden provocar desbordamientos de búfer en una sección global sobrescribiendo datos arbitrarios. Un atacante debe suplantar PubNub y responder una petición GET HTTP para desencadenar esta vulnerabilidad. Un strcpy desborda el búfer insteon_pubnub.channel_ak, el cual tiene un tamaño de 16 bytes. Un atacante puede enviar un parámetro \"ak \" arbitrariamente largo para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_2245-222_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2532FA22-D435-47E6-8DFA-47377B1959D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub_2245-222:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150E9049-5523-4BC3-A5A5-473B6D320B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/144975",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16337",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-23T15:29:00.443",
      "lastModified" : "2024-11-21T03:16:17.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. At 0x9d01ef24 the value for the s_offset key is copied using strcpy to the buffer at $sp+0x2b0. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Insteon Hub 2245-222 con la versión de firmware 1012, comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer basado en pila sobrescribiendo datos arbitrarios. Un atacante debe enviar una petición HTTP autenticada para provocar esta vulnerabilidad. En 0x9d01ef24, el valor para la clave s_offset key se copia usando strcpy al búfer en $sp+0x2b0. El búfer es de 32 bytes. Enviar algo más grande provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_2245-222_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2532FA22-D435-47E6-8DFA-47377B1959D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub_2245-222:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150E9049-5523-4BC3-A5A5-473B6D320B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14452",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-08-23T18:29:00.280",
      "lastModified" : "2024-11-21T03:12:49.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the PubNub message handler for the \"control\" channel of Insteon Hub running firmware version 1012. Specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. A strcpy overflows the buffer insteon_pubnub.channel_cc_r, which has a size of 16 bytes. An attacker can send an arbitrarily long \"c_r\" parameter in order to exploit this vulnerability. An attacker should impersonate PubNub and answer an HTTPS GET request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer explotable en el manipulador de mensajes PubNub para el canal \"control\" de Insteon Hub en su versión de firmware 1012. Las respuestas especialmente manipuladas recibidas desde el servicio PubNub pueden provocar desbordamientos de búfer en una sección global sobrescribiendo datos arbitrarios. Un strcpy desborda el búfer insteon_pubnub.channel_cc_r, el cual tiene un tamaño de 16 bytes. Un atacante puede enviar un parámetro \"c_r \" arbitrariamente largo para explotar esta vulnerabilidad. Un atacante debe suplantar PubNub y responder una petición GET HTTP para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:00.267",
      "lastModified" : "2024-11-21T03:08:01.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP \"Discover\" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device."
      }, {
        "lang" : "es",
        "value" : "D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 tiene una vulnerabilidad de ejecución remota de código. Un servicio UDP \"Discover\", que proporciona múltiples funciones como el cambio de contraseñas y la obtención de información básica, se instaló en el dispositivo. Un atacante remoto puede enviar una petición UDP manipulada a finderd para realizar un desbordamiento de pila y ejecutar código arbitrario con privilegios root en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:eyeon_baby_monitor_firmware:1.08.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC62EFC-8232-4C61-B947-8C6C6D836EE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:eyeon_baby_monitor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9192BADA-5325-4126-90A2-E8BA3E4DB479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:00.407",
      "lastModified" : "2024-11-21T03:08:01.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack."
      }, {
        "lang" : "es",
        "value" : "D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 tiene múltiples vulnerabilidades de inyección de comandos en el framework del servicio web. Un atacante puede falsificar peticiones HTTP para ejecutar comandos; se requiere autenticación antes de ejecutar el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:eyeon_baby_monitor_firmware:1.08.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC62EFC-8232-4C61-B947-8C6C6D836EE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:eyeon_baby_monitor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9192BADA-5325-4126-90A2-E8BA3E4DB479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:00.533",
      "lastModified" : "2024-11-21T03:09:46.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page \"/cgi-bin/nasset.cgi\". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en los dispositivos PLANEX CS-W50HD con firmware en versiones anteriores a la 030720. El dispositivo tiene una vulnerabilidad de inyección de comandos en la interfaz de usuario de gestión web en la página de opciones NAS \"/cgi-bin/nasset.cgi\". Un atacante puede enviar una petición HTTP POST manipulada para ejecutar código arbitrario. Se requiere autenticación antes de ejecutar el ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-w50hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "030720",
            "matchCriteriaId" : "90E29744-0045-45BB-9F8D-E770733018AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-w50hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94DCF20-56F6-4D91-817A-EC033CAAAE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:00.657",
      "lastModified" : "2024-11-21T03:09:46.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential \"supervisor:dangerous\" was injected into web authentication database \"/.htpasswd\" during booting process, which allows attackers to gain unauthorized access and control the device completely; the account can't be modified or deleted."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en los dispositivos PLANEX CS-W50HD con firmware en versiones anteriores a la 030720. Se ha inyectado una credencial embebida \"supervisor:dangerous\" en la base de datos de autenticación web \"/.htpasswd\" durante el proceso de arranque, lo que permite que los atacantes obtengan acceso no autorizado y controlen completamente el dispositivo; la cuenta no puede ser modificada o eliminada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-w50hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "030720",
            "matchCriteriaId" : "90E29744-0045-45BB-9F8D-E770733018AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-w50hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94DCF20-56F6-4D91-817A-EC033CAAAE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:00.800",
      "lastModified" : "2024-11-21T03:09:47.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and network status (ex.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d \"REQ_ID=SUPPORT_IF_GET\")."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un error en NEC Aterm WG2600HP2 1.0.2. El router tiene una serie de API del servicio web para acceder y configurar las opciones. Algunas API no requieren autenticación. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP manipulada para recuperar clientes DHCP, la versión del firmware y el estado de red (ej.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d \"REQ_ID=SUPPORT_IF_GET\")."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hp2_firmware:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082FA530-D838-435C-9063-FEE69190367A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hp2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261CC711-5970-41E2-89C9-A964453ABECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:00.907",
      "lastModified" : "2024-11-21T03:09:47.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can execute any command."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PLANEX CS-QR20 1.30. Una página oculta y no documentada de gestión permite que un atacante ejecute código arbitrario en el dispositivo cuando el usuario está autenticado. La página de gestión se empleó por motivos de depuración; una vez que se inicia sesión y se accede a la página directamente (/admin/system_command.asp), se puede ejecutar cualquier comando."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-qr20_firmware:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5A373F-9FF4-4B30-AA1D-B113503473A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-qr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFA7189-C7EF-4B2C-A395-C65227DC0E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T19:29:01.017",
      "lastModified" : "2024-11-21T03:09:47.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password (\"admin:password\") is used in the Android application that allows attackers to use a hidden API URL \"/goform/SystemCommand\" to execute any command with root permission."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en PLANEX CS-QR20 1.30. Se utiliza una cuenta/contraseña embebida (\"admin:password\") en la aplicación de Android que permite que los atacantes empleen una URL API \"/goform/SystemCommand\" para ejecutar cualquier comando con permisos root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-qr20_firmware:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5A373F-9FF4-4B30-AA1D-B113503473A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-qr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFA7189-C7EF-4B2C-A395-C65227DC0E68"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planex:smacam_night_vision:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "C0F51893-19A9-4BEB-A061-AB5446DDCDA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Aug/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T21:29:00.247",
      "lastModified" : "2024-11-21T03:36:55.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access."
      }, {
        "lang" : "es",
        "value" : "La aplicación National Payments Corporation of India BHIM 1.3 para Android depende de una contraseña de cuatro dígitos, lo que facilita que los atacantes obtengan acceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npci:bharat_interface_for_money_\\(bhim\\):1.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0370FB3B-B038-403D-A5A2-9D924E5A12E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148927",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T21:29:00.357",
      "lastModified" : "2024-11-21T03:36:55.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "La aplicación National Payments Corporation of India BHIM 1.3 para Android no restringe adecuadamente el uso de la característica OTP, lo que facilita que los atacantes omitan la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npci:bharat_interface_for_money_\\(bhim\\):1.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0370FB3B-B038-403D-A5A2-9D924E5A12E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148926",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T21:29:00.467",
      "lastModified" : "2024-11-21T03:36:55.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "La aplicación National Payments Corporation of India BHIM 1.3 para Android emplea un teclado personalizado para el que el elemento input está disponible para el servicio Accessibility, lo que facilita que los atacantes omitan la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npci:bharat_interface_for_money_\\(bhim\\):1.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0370FB3B-B038-403D-A5A2-9D924E5A12E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148925",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-24T21:29:00.560",
      "lastModified" : "2024-11-21T03:36:55.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM) for SMS validation, which makes it easier for attackers to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "La aplicación National Payments Corporation of India BHIM 1.3 para Android depende de tres cadenas embebidas (AK-NPCIMB, IM-NPCIBM y VK-NPCIBM) para la validación de SMS, lo que facilita que los atacantes omitan la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npci:bharat_interface_for_money_\\(bhim\\):1.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0370FB3B-B038-403D-A5A2-9D924E5A12E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148923",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-26T21:29:00.233",
      "lastModified" : "2024-11-21T03:19:53.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request."
      }, {
        "lang" : "es",
        "value" : "El componente Joomanager hasta la versión 2.0.0 para Joomla! tiene un problema de subida de archivos arbitrarios, lo que resulta en la exposición de credenciales de la base de datos mediante una petición index.php?option=com_joomanagercontroller=detailstask=downloadpath=configuration.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomanager_project:joomanager:*:*:*:*:*:joomla\\!:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "7EC116A7-E0C6-432E-854D-2D323C32449C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/issue/WLB-2018030054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cxsecurity.com/issue/WLB-2018030054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/44252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15139",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2018-08-27T17:29:00.217",
      "lastModified" : "2024-11-21T03:14:08.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad en las versiones de openstack-cinder hasta (e incluyendo) Queens, que permite que los volúmenes nuevos creados en ciertas configuraciones de volúmenes de almacenamiento contengan datos anteriores. Específicamente, esto afecta a los volúmenes ScaleIO que emplean volúmenes finos y un relleno de cero. Esto podría conducir al filtrado de información sensible entre inquilinos (tenants)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openstack:cinder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.4-7",
            "matchCriteriaId" : "4E29F557-0E0B-445D-8969-1E1DC5F95869"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704CFA1A-953E-4105-BFBE-406034B83DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15139",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.openstack.org/wiki/OSSN/OSSN-0084",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:3601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:0917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.openstack.org/wiki/OSSN/OSSN-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15407",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:00.723",
      "lastModified" : "2024-11-21T03:14:38.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server."
      }, {
        "lang" : "es",
        "value" : "Una escritura fuera de límites en la pila de networking QUIC en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese ejecutar código mediante un servidor malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/778505",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/778505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15408",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:01.583",
      "lastModified" : "2024-11-21T03:14:39.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en memoria dinámica (heap) en Omnibox en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de heap mediante un archivo PDF manipulado que es gestionado erróneamente por PDFium."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/762374",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/762374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15409",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:02.707",
      "lastModified" : "2024-11-21T03:14:39.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Skia en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/763972",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/763972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15410",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:03.737",
      "lastModified" : "2024-11-21T03:14:39.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria previamente liberada en PDFium en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765921",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15411",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:04.520",
      "lastModified" : "2024-11-21T03:14:39.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria previamente liberada en PDFium en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante un archivo PDF manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/770148",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/770148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15412",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:05.737",
      "lastModified" : "2024-11-21T03:14:39.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria previamente liberada en libxml2 en versiones anteriores a la 2.9.5, tal y como se emplea en Google Chrome en versiones anteriores a la 63.0.3239.84 y otros productos, permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.5",
            "matchCriteriaId" : "C4B3A4BD-14E7-4D4D-81C9-6A355F49C978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040348",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0287",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=783160",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/727039",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4086",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=783160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/727039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15413",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:06.847",
      "lastModified" : "2024-11-21T03:14:39.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Confusión de tipos en WebAssembly en V8 en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/766666",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/766666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15415",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:07.677",
      "lastModified" : "2024-11-21T03:14:39.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Serialización incorrecta en IPC en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto filtrase el valor de un puntero mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765512",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15416",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:08.567",
      "lastModified" : "2024-11-21T03:14:39.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Blob API en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada. Esto también se conoce como lectura Blink fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/779314",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/779314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15417",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:09.443",
      "lastModified" : "2024-11-21T03:14:39.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en las operaciones composite de canvas de Skia en Google Chrome, en versiones anteriores a la 63.0.3239.84, permitía que un atacante remoto filtrase datos cross-origin mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/699028",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/699028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15418",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:10.177",
      "lastModified" : "2024-11-21T03:14:40.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Uso de memoria no inicializada en Skia en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese obtener información potencialmente sensible del la memoria del proceso mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/765858",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/765858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15419",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:10.317",
      "lastModified" : "2024-11-21T03:14:40.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Aplicación de políticas insuficiente en Resource Timing API in Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto dedujese el historial de navegación desencadenando una URL cross-origin filtrada mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/780312",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/780312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15420",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:10.973",
      "lastModified" : "2024-11-21T03:14:40.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La gestión incorrecta de la navegación hacia atrás en las páginas de error en  Navigation en Google Chrome, en versiones anteriores a la 63.0.3239.84, permitía que un atacante remoto suplantase el contenido de Omnibox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1040282",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/777419",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4103",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securitytracker.com/id/1040282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/777419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15422",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:11.520",
      "lastModified" : "2024-11-21T03:14:40.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en el manejo de fechas internacionales en International Components for Unicode (ICU) for C/C++ en versiones anteriores a la 60.1, tal y como se emplea en V8 en Google Chrome en versiones anteriores a la 63.0.3239.84 y otros productos, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*",
            "versionEndExcluding" : "60.1",
            "matchCriteriaId" : "33CB3BC8-BCAF-49A8-87BC-FFB324B9E222"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/774382",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://usn.ubuntu.com/3610-1/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4150",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/774382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3610-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15423",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:12.083",
      "lastModified" : "2024-11-21T03:14:40.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic."
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en BoringSSL SPAKE2 en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto filtrase bits de orden bajo de SHA512(contraseña) inspeccionando el tráfico del protocolo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/778101",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/778101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15424",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:13.207",
      "lastModified" : "2024-11-21T03:14:40.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en Omnibox en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto suplantase dominios mediante homogramas IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/756226",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/756226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15425",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:13.847",
      "lastModified" : "2024-11-21T03:14:40.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en Omnibox en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto suplantase dominios mediante homogramas IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/756456",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/756456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15426",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:14.457",
      "lastModified" : "2024-11-21T03:14:40.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en Omnibox en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto suplantase dominios mediante homogramas IDN en un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/756735",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/756735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15427",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:14.943",
      "lastModified" : "2024-11-21T03:14:40.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en Omnibox en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un usuario creado mediante ingeniería social emplee Cross-Site Scripting (XSS) contra sí mismo arrastrando y soltando una URL javascript: en la barra de direcciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/768910",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/768910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15430",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T19:29:15.347",
      "lastModified" : "2024-11-21T03:14:41.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La insuficiente validación de datos en el plugin  Chromecast en Google Chrome antes del 63.0.3239.84 permitió a un atacante remoto inyectar scripts arbitrarios o HTML (UXSS) a través de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.84",
            "matchCriteriaId" : "BD398356-6BFE-46FE-A6AA-16F55BC5490C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/780484",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/780484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15396",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T20:29:00.233",
      "lastModified" : "2024-11-21T03:14:37.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en NumberingSystem en International Components for Unicode (ICU) for C/C++ en versiones anteriores a la 60.2, tal y como se emplea en V8 en Google Chrome en versiones anteriores a la 62.0.3202.75 y otros productos, permitía que un atacante remoto explote una corrupción de memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.75",
            "matchCriteriaId" : "49AD781C-D336-4638-B5A1-DB33C32E3DBF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*",
            "versionEndExcluding" : "60.2",
            "matchCriteriaId" : "13071233-DC50-4853-B2F2-BBDB9D19AFE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.icu-project.org/trac/changeset/40494",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101597",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3082",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/770452",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://bugs.icu-project.org/trac/changeset/40494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/101597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/770452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15398",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T20:29:00.373",
      "lastModified" : "2024-11-21T03:14:38.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en la pila de networking QUIC en Google Chrome en versiones anteriores a la 62.0.3202.89 permitía que un atacante remoto pudiese ejecutar código mediante un servidor malicioso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.89",
            "matchCriteriaId" : "C0904F6A-E465-4D43-94CD-30BA7EA501BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101692",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3151",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/777728",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4024",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/777728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15399",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T20:29:00.513",
      "lastModified" : "2024-11-21T03:14:38.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de memoria previamente liberada en V8 en Google Chrome en versiones anteriores a la 62.0.3202.89 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.89",
            "matchCriteriaId" : "C0904F6A-E465-4D43-94CD-30BA7EA501BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101692",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3151",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/776677",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-02",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4024",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/101692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/776677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201711-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-4024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15406",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T20:29:00.640",
      "lastModified" : "2024-11-21T03:14:38.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en V8 en Google Chrome, en versiones anteriores a la 62.0.3202.75, permitía que un atacante remoto pudiese realizar una lectura de memoria fuera de límites mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.75",
            "matchCriteriaId" : "49AD781C-D336-4638-B5A1-DB33C32E3DBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/770450",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/770450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15429",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2018-08-28T20:29:00.750",
      "lastModified" : "2024-11-21T03:14:41.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Implementación inadecuada en los enlaces V8 WebAssembly JS en Google Chrome en versiones anteriores a la 63.0.3239.108 permitía que un atacante remoto inyectase scripts o HTML arbitrarios (UXSS) mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "63.0.3239.108",
            "matchCriteriaId" : "50C28298-6797-49D4-B8C7-DC6CC5BE7C5F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102196",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3479",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/788453",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4103",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:3479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/788453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/201801-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-08-29T19:29:00.187",
      "lastModified" : "2024-11-21T03:18:36.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XEE (XML External Entity) en Episerver 7 patch 4 y anteriores permite que atacantes remotos lean archivos arbitrarios mediante un DTD manipulado en una petición XML relacionada con util/xmlrpc/Handler.ashx."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episerver:episerver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "304EDDAF-E2E1-4A99-AF36-155276BD605A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episerver:episerver:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A9E979-B6C0-4590-AEBB-584B33336CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episerver:episerver:7:patch_1:*:*:*:*:*:*",
            "matchCriteriaId" : "57F8672F-B0BA-40AD-B0FB-C8AEBCB3D46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episerver:episerver:7:patch_2:*:*:*:*:*:*",
            "matchCriteriaId" : "254BD8E5-A9DC-4659-928E-76FB2ED77AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episerver:episerver:7:patch_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D35C6F07-55FC-4DB6-89DD-614D5C3D68BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:episerver:episerver:7:patch_4:*:*:*:*:*:*",
            "matchCriteriaId" : "113433E9-7F81-4B32-96B2-BEA318235DD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/jonaslejon/5f92779848360a1a1e676af0795bd9aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kryptera.se/sarbarhet-i-episerver/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/jonaslejon/5f92779848360a1a1e676af0795bd9aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kryptera.se/sarbarhet-i-episerver/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10651",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.243",
      "lastModified" : "2023-11-07T02:38:03.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10652",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.320",
      "lastModified" : "2023-11-07T02:38:03.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10653",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.397",
      "lastModified" : "2023-11-07T02:38:03.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10654",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.477",
      "lastModified" : "2023-11-07T02:38:04.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10655",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.570",
      "lastModified" : "2023-11-07T02:38:04.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10656",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.663",
      "lastModified" : "2023-11-07T02:38:04.700",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10657",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.743",
      "lastModified" : "2023-11-07T02:38:05.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10658",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.820",
      "lastModified" : "2023-11-07T02:38:05.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10659",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.913",
      "lastModified" : "2023-11-07T02:38:05.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10660",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2018-08-29T21:29:00.993",
      "lastModified" : "2023-11-07T02:38:05.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-09-06T12:29:00.233",
      "lastModified" : "2024-11-21T03:04:54.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress version <4.9 contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require additional plugins in order to be exploited however this has not been confirmed at this time. This issue appears to have been partially, but not completely fixed in WordPress 4.9"
      }, {
        "lang" : "es",
        "value" : "WordPress en versiones anteriores a la 4.9 contiene una vulnerabilidad de validación de entradas (CWE-20) en el procesamiento de miniaturas que puede resultar en la ejecución remota de código. El ataque parece ser explotable mediante una miniatura subida por un usuario autenticado y podría requerir plugins adicionales para su explotación. Sin embargo, esto aún no ha sido confirmado. El problema parece haber sido parcialmente solucionado, pero no completamente, en la versión 4.9 de WordPress."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9",
            "matchCriteriaId" : "EA8C7C9E-F39F-4008-BEA7-DC2ECF9C69BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105305",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.theregister.co.uk/2018/08/20/php_unserialisation_wordpress_vuln/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/GePBmsNJw6Y?t=1763",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.theregister.co.uk/2018/08/20/php_unserialisation_wordpress_vuln/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/GePBmsNJw6Y?t=1763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14026",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-09-06T19:29:00.253",
      "lastModified" : "2024-11-21T03:11:59.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 4.13 de Ice Qube Thermal Management Center, la aplicación web no autentica correctamente a los usuarios, lo que podría permitir que un atacante obtenga acceso a información sensible."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iceqube:thermal_management_center_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2C1BBB5-8DE9-4092-A744-1DFD8F2FB1DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iceqube:thermal_management_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A23450-45E8-4184-B7C0-8E39924E1B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105303",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16714",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-09-06T19:29:00.377",
      "lastModified" : "2024-11-21T03:16:50.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication."
      }, {
        "lang" : "es",
        "value" : "En versiones anteriores a la 4.13 de Ice Qube Thermal Management Center, las contraseñas se almacenan en texto plano en un archivo accesible sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iceqube:thermal_management_center_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2C1BBB5-8DE9-4092-A744-1DFD8F2FB1DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iceqube:thermal_management_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A23450-45E8-4184-B7C0-8E39924E1B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105303",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1114",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-09-07T15:29:00.237",
      "lastModified" : "2024-11-21T03:21:20.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121152."
      }, {
        "lang" : "es",
        "value" : "IBM Campaign 9.1, 9.1.2 y 10 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 121152."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511BB84-F922-496D-B508-C4116599FCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C2D913-808F-4705-8AD5-17157FA833C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB3F73F-3C2B-4C1B-B81E-99B5384DE43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121152",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10729773",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10729773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1115",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-09-07T15:29:00.377",
      "lastModified" : "2024-11-21T03:21:21.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153."
      }, {
        "lang" : "es",
        "value" : "IBM Campaign 9.1, 9.1.2 y 10 es vulnerable a una inyección HTML. Un atacante remoto podría inyectar código HTML malicioso que, al ser visualizado, se ejecutaría en el navegador web de la víctima en el contexto de seguridad del sitio que aloja. IBM X-Force ID: 121153."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511BB84-F922-496D-B508-C4116599FCC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C2D913-808F-4705-8AD5-17157FA833C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:campaign:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB3F73F-3C2B-4C1B-B81E-99B5384DE43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121153",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10729769",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10729769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2792",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-07T16:29:00.637",
      "lastModified" : "2024-11-21T03:24:09.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de corrupción de la memoria dinámica (heap) en la funcionalidad iBldDirInfo de AntennaHouse DMC HTMLFilter empleado por MarkLogic 8.0-6. Un archivo XLS especialmente manipulado puede provocar una corrupción del heap que daría lugar a la ejecución de código arbitrario. Un atacante puede proporcionar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0284",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2795",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-07T16:29:00.763",
      "lastModified" : "2024-11-21T03:24:10.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de corrupción de la memoria dinámica (heap) en la funcionalidad Txo de AntennaHouse DMC HTMLFilter empleado por MarkLogic 8.0-6. Un archivo XLS especialmente manipulado puede provocar una corrupción del heap que daría lugar a la ejecución de código arbitrario. Un atacante puede enviar/proporcionar un archivo XLS malicioso para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6C766C-1C46-4182-9B95-C063099F833F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0288",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-09-07T22:29:00.260",
      "lastModified" : "2024-11-21T03:18:28.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack."
      }, {
        "lang" : "es",
        "value" : "Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 y anteriores emplea texto claro para intercambiar el nombre de usuario y la contraseña entre las instancias del servidor y el cliente, lo que permite que atacantes remotos obtengan información sensible mediante un ataque Man-in-the-Middle (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contronics:homeputer_cl_studio_fur_homematic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "9E8EA98F-C07B-4D72-A2FE-1E2FAC8EC904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-031_homematic.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-031_homematic.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1679",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-09-10T14:29:01.113",
      "lastModified" : "2024-11-21T03:22:12.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001."
      }, {
        "lang" : "es",
        "value" : "IBM OpenPages GRC Platform 7.2, 7.3, 7.4 y 8.0 podría permitir que un atacante obtenga información sensible de archivos de registro de errores. IBM X-Force ID: 134001"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6851C762-82A7-42B8-982B-AAAD9B467826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:7.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E848E6B9-A7DA-4D30-B855-20DA47C45AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:openpages_grc_platform:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C4094E2-A4ED-462D-A5EF-00CCBD886D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134001",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10728737",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10728737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3170",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.240",
      "lastModified" : "2023-11-07T02:44:05.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3171",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.333",
      "lastModified" : "2023-11-07T02:44:05.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3172",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.427",
      "lastModified" : "2023-11-07T02:44:05.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3173",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.503",
      "lastModified" : "2023-11-07T02:44:06.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3174",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.597",
      "lastModified" : "2023-11-07T02:44:06.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3175",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.677",
      "lastModified" : "2023-11-07T02:44:06.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3176",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.753",
      "lastModified" : "2023-11-07T02:44:06.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3177",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.863",
      "lastModified" : "2023-11-07T02:44:07.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3178",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:00.943",
      "lastModified" : "2023-11-07T02:44:07.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3179",
      "sourceIdentifier" : "security@marklogic.com",
      "published" : "2018-09-11T19:29:01.037",
      "lastModified" : "2023-11-07T02:44:07.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1082",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2018-09-12T14:29:00.250",
      "lastModified" : "2024-11-21T03:21:18.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern. Feeding a pathological input to the algorithm can lead to excessive stack usage and potential overflow. Applications that use qsort to handle large data set may crash if the input follows the pathological pattern."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD en versiones 11.x anteriores a la 11.1-RELEASE y versiones 10.x anteriores a la 10.4-RELEASE, el algoritmo qsort tiene un patrón determinístico de recursión. Si se proporciona una entrada patológica al algoritmo, se puede producir un uso excesivo de la pila y un potencial desbordamiento. Las aplicaciones que emplean qsort para gestionar grandes grupos de datos podrían cerrarse inesperadamente si la entrada sigue el patrón patológico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "89978DF5-365D-47EB-BD67-7CC84D4F0222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.1",
            "matchCriteriaId" : "702C5136-33B6-4F0F-8FF7-C2BE3668DE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1083",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2018-09-12T14:29:00.407",
      "lastModified" : "2024-11-21T03:21:18.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD en versiones anteriores a la 11.2-RELEASE, una página guard de pila está disponible, pero está deshabilitada por defecto. Esto resulta en la posibilidad de que un proceso mal escrito provoque un desbordamiento de pila"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "B7354D16-6431-43C2-97BA-EBBF482572C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1084",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2018-09-12T14:29:00.547",
      "lastModified" : "2024-11-21T03:21:18.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD en versiones anteriores a la 11.2-RELEASE, múltiples problemas con la implementación de la página guard de la pila reducen las protecciones de la página guard. Esto resulta en la posibilidad de que un proceso mal escrito provoque un desbordamiento de pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "B7354D16-6431-43C2-97BA-EBBF482572C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42277/",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42278/",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42277/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42278/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1085",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2018-09-12T14:29:00.780",
      "lastModified" : "2024-11-21T03:21:18.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD en versiones anteriores a la 11.2-RELEASE, una aplicación que llama a setrlimit() para incrementar RLIMIT_STACK podría hacer que una región de memoria de solo lectura bajo la pila pase a ser una región de lectura y escritura. Un ejecutable especialmente manipulado podría explotarse para ejecutar código arbitrario en el contexto del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "B7354D16-6431-43C2-97BA-EBBF482572C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42279/",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42279/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-09-12T15:29:00.233",
      "lastModified" : "2024-11-21T03:19:53.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection."
      }, {
        "lang" : "es",
        "value" : "Control de acceso incorrecto en RDP Level 1 en productos STMicroelectronics, serie STM32F0, permite que atacantes físicamente presentes extraigan el firmware protegido del dispositivo mediante una secuencia especial de comandos SWD (Serial Wire Debug) debido a que hay una condición de carrera entre la inicialización completa de la interfaz SWD y la instalación de la protección flash."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f071rb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5509D8A9-90F1-4A8B-8609-DC7254130070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f071rb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3C2FB2-6308-45E3-831E-B2F779A886E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f071v8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC1010B-3D2D-405B-9FAF-98F37CA4D510"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f071v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D5341B-1D44-44C6-8FA7-05BF066C052B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f071vb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9997D6-D64D-4BA7-B127-20B00A13E63A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f071vb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD473E0-5E09-4726-A6A3-6715E5945947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f072c8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF3EB0E-8C87-4894-A307-5177E0458739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f072c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F655B8F1-B21E-476A-908D-EBA16E4D7B8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f072cb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FE3842-9E90-4BBE-B14E-51C68CF6B04C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f072cb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBFC44D-586E-4B08-90AF-9075B969DDDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f072r8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FF7F8F-DD22-440E-84BB-334035942D2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f072r8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAA5EB5-0464-4935-BB49-FDD2794DB324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f072rb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D47F34-47E8-4AF2-957A-4938787FF0B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f072rb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1EBA26-B15E-4D52-AD68-AA39BA0BED6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f072v8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04A9CA0-C3DD-42A0-B837-ACEF1474B876"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f072v8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D50185-E096-4196-A8F6-3F6DE4A88A07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f072vb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BC9541-A6F8-4C7C-8928-B9E6616C6981"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f072vb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4D7C2E-0694-4009-B044-5F19E20D26AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f078cb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3C19F5-A323-4A21-A5B0-7E9C44F175CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f078cb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC45637-2870-483A-A0D6-F5EE3ECE8129"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f078rb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A309559-E88B-4485-A727-E09722471311"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f078rb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDDC99E-81C6-4371-AD36-8DDD74E1FF11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f078vb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1C652E-0587-4023-AB80-E8E1C5DFDBE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f078vb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CB03A2-FBE8-4092-B96B-530D55E38F5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f091cb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9BEF33-5012-4851-BB32-7317E76364DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f091cb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3854C570-5D65-4185-9FE4-3C0E3FCFC928"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f091cc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07279D5B-7190-47F9-A2F1-B15049172412"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f091cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83ED0B1F-3831-428B-95B2-2DB7F1557977"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f091rb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEAE2F6B-707D-4619-B8F8-3CEB8CAB28D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f091rb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF7DB68-02A2-4A33-9C7F-5538643D9D63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f091rc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163232DF-E010-4D70-8C5E-247C65975C57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f091rc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403C1FAC-E503-4748-ACF9-09B4E49FDDDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f091vb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE64EBE-6325-4586-BA67-344E7AC8189F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f091vb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FC942C-0D48-46AE-8985-57F73C268C7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f091vc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAFE18D1-C7F5-4CA2-B007-DC3069896E80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f091vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA685A2-86CE-4AB0-9E88-84B50E1CEB9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f098cc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84C56E7-3F4D-412C-B6B3-FBA7059A6C82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f098cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6CDF39-5239-40A0-9C56-EAC9D4318A1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f098rc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAB99B0-E616-4F04-AFC8-1FDC18D6A2E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f098rc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9851C88C-D3DE-4F74-816D-304D975966BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f098vc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881FDD55-1BDF-4978-A393-D842CB41A322"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f098vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DDD12F-1DA2-4D0C-A40D-EC1B1A376A7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f070c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E778F9F-7A39-4FE7-8AF6-2558F9587859"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f070c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A682E34-56CA-4AEB-88F2-C2250DB96B97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f070cb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF2D955-2A57-4D95-AA25-E6436CE26097"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f070cb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EF334F-3F94-4F62-B75C-8E4C0424E7EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f070f6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F0583F-8E73-409E-9400-05307EB486C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f070f6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CFF601-FAA4-4311-8735-723EA6DFE843"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f070rb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DA1F05-F3D1-4FDF-AB94-A36717776C71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f070rb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B7B4B9-7F40-4186-9BA7-003891222286"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f071c8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F420D3-0E17-4AD5-A600-FAD2688CD82E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f071c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8445AD-0008-4A76-B40E-68BDE9AEBDAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f071cb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC047AC5-29F6-4C30-A203-32F6050F8055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f071cb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895177EE-48AF-4AF9-BF4F-EA4C70D2C915"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051t8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A511A9BF-C9DA-457F-B23F-86B754C39F05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BC3D27-3200-42BE-8328-C800C36352A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f058c8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7706AA-9A60-4581-9575-32E0A071902E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f058c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A88BFC-2EBD-494A-9161-912AF9BC5C86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f058r8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6CC26D-B49A-4D8A-A382-F8518A810B3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f058r8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D39C1E1-D37C-4335-A740-8C3323ECBB48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f058t8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8605528E-18BC-42C9-BBFB-213F23E08FA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f058t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDDC0B6-91CB-489F-A610-716707E87C31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f070c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E778F9F-7A39-4FE7-8AF6-2558F9587859"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f070c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A682E34-56CA-4AEB-88F2-C2250DB96B97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051k4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C5BCB9-9784-428E-A0AB-7FF8185D2DDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051k4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4176235-C90E-44F4-933E-F26BCFC4E76B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051k6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4510C5-5F95-4DC3-BE91-9B1B5B8EBF20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051k6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4DF827-1BAC-4A47-BE20-0BEE66D97AA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051k8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40792AAC-0582-4DFA-BE9A-1C8CFE1B2F45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051k8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D3E77C-1F07-4262-82DF-BE1FD9696B8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051r4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012DBF7D-8560-4A1A-A08A-097BC865925B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051r4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EECDEF9-5DB6-4950-B73F-F43D66995F59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051r6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70615138-87BD-4E9F-9960-9F26BB61F1AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051r6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83518586-7B47-4835-A73E-1110AED734A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051r8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010E5741-22C1-418B-996F-83C16C3ABAB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051r8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4925C5F7-5334-4677-B81C-A9DDF9336467"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042t6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E90EB1-31B5-4359-96A8-F3EE10CB0F5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042t6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7123ECA-1D0A-49B0-84DB-6E3E98FC8919"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f048c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F797567B-0D2C-447F-AF01-7F6685DF5561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f048c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193CE88D-7759-410E-83A6-24FE7F68D7EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f048g6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A16A88B-0A46-485F-9A67-D15013A6A6E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f048g6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB0E481-45F2-40DD-A624-F6CBBCFC5529"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f048t6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34563948-F5AD-49ED-B630-68406256F779"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f048t6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CBB866-B901-43D2-8DE9-39282F783563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051c4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F374F62-79A3-49D8-8B07-6EE13622E05A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051c4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F38061A-F47E-498B-819C-65949A76E559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C479195-140D-41BF-917C-7A88D13A4C74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B910D47-DB2F-4D13-8761-1E8A202A11ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f051c8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF28B8A7-42B8-4908-BE62-E91B29E4227B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f051c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42997AF8-4E4A-42E4-8178-783C8942263D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042f4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4411447F-DB71-4CDF-8F18-2708B1038855"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042f4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0921456A-F7FF-4DD8-A3A6-F9C2B946838C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042f6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BB7054-E3D4-4F37-A49E-76430B1DDC63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042f6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC05830-A76B-46C6-983E-A0DE922EEAA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042g4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA9D71-F2D7-4E4D-B180-C0273FF5F56E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B94DEAA6-78DA-41D9-A125-F471B85FA9AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042g6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32A470E-F8CD-4D1A-B9F6-36352DE8D35A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042g6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B43690C-1EA8-4A2E-93AB-E0A7FBE76BCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042k4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66BF697-B6AE-4402-BBD9-EA4F0E0B747B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042k4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F3B325-997A-4A7B-900B-1D4A4FA7C35A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042k6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C25A621-4ED2-4174-9589-D1A9CBC85F83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042k6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23504ADB-4452-490F-A144-8CCDE569CA3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f038c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC75636D-7D37-41C9-BE1C-7DE0C3F70791"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f038c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C850D66F-CA4B-4078-A5C4-8A343710ADE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f038e6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D21D5D-3624-4054-979E-154948C9D388"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f038e6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D431AC60-716A-4CC5-85AE-3BE7B3A421BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f038f6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53F48D4-0A3B-401B-9DCE-9395679F97DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f038f6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3900982A-06EB-4F2F-A91D-D414622A0B7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f038g6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3015D28B-A4BD-4AC2-8A7B-175B543FF320"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f038g6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51E6B85-BE97-4365-86D9-DE106001DF43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f038k6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C9E10C-3D51-4F06-BD4B-80D548FCABD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f038k6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7A3BCB-F1F3-44AA-933A-598B611FD060"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042c4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B547890C-16CD-4121-AA09-A83B88E7D4C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042c4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6336D349-E7CF-451B-A085-EC9E1F1458B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f042c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EB0E21-6508-44D8-93EA-FB6FFBBCC0B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f042c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8344E3-524F-40C0-8884-FFA3C600BC24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031e6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E3C923-8112-44A1-9F11-0C081BDFBDD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031e6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62CA7EA-D2AB-4C62-8FAC-5E157A58C294"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031f4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50520E1E-CFBB-4A17-B62E-17617B3F6788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031f4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD1DDDF-4B45-434B-B2AD-1E688ACD5069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031f6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBCF6E9-CDC2-413A-81F0-877F61BF37B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031f6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D40595-F301-4645-9091-C8F8BC8CB97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031g4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96ED0959-0E85-4805-9CB1-B5BC0B2A25D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99770A7-F301-48A8-B1D0-6B9DDF1549E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031g6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D5ED7-1479-4DC9-B1D5-52058A6F15ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031g6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C4407E-9995-4186-B435-11336911A46A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031k4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D18840-D242-4CBD-9073-3F64EEBF897A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031k4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928FEDDD-B9BA-4BC0-8F27-537A2ED31A76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030f4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F615CF-68A8-4487-AAE9-606EA4635CB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030f4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D382F295-975E-4885-8EF8-3D35C8C65BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030k6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CE9EC3-EB61-4900-9D65-C36A03DD7C46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030k6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07495388-69B7-42AA-8846-5EF1C6F47BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030r8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409CFEF6-77B6-4371-9C77-683B9501D943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030r8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A59F1F0-B3ED-4E8F-9425-FD7FAC1A6D44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030rc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E61C78-E402-4B4C-B518-837C88DD134B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030rc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADE7E38-8E24-458A-8590-4325693DD828"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031c4_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2841FB0-3E44-441E-BF90-C330058D981F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031c4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D84B76-6CF4-46D7-9A93-BDD4685A4E84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f031c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7D523C-5970-4F36-BA69-E9717F16B673"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f031c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8F3ED0-4779-45FD-9B9A-0A3C931F47B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030c6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A8E329-27BB-4B97-BEE2-A5A5F32914CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030c6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CED26B-188C-4A83-A3D8-DC149F4A4A9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030c8_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6788A3-DFA0-46EE-ADB3-53A6DAD7F353"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509F7642-7B18-48B2-B478-324E898EB76C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:st:stm32f030cc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F492A485-3389-4C42-B53D-DFF92EA6553D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:st:stm32f030cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54184704-1385-40C7-90E5-8F41E49B401F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-09-14T21:29:03.100",
      "lastModified" : "2024-11-21T03:16:44.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Tor Browser en Windows en versiones anteriores a la 8.0 permite que atacantes remotos omitan la característica de anonimato planeada y descubrir una dirección IP de cliente. Esta vulnerabilidad es diferente de CVE-2017-16541. Se requiere interacción del usuario para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0",
            "matchCriteriaId" : "75CDAF47-C531-4AB1-8274-424531102F68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105346",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2018/Sep/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wearesegment.com/research/tor-browser-deanonymization-with-smb/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2018/Sep/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wearesegment.com/research/tor-browser-deanonymization-with-smb/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15705",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-09-17T14:29:00.293",
      "lastModified" : "2024-11-21T03:15:02.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the \"open\" event is immediately followed by a \"close\" event - even if the tag *does not* close in the HTML being parsed. Because of this, we are missing the \"text\" event to deal with the object normally. This can cause carefully crafted emails that might take more scan time than expected leading to a Denial of Service. The issue is possibly a bug or design decision in HTML::Parser that specifically impacts the way Apache SpamAssassin uses the module with poorly formed html. The exploit has been seen in the wild but not believed to have been purposefully part of a Denial of Service attempt. We are concerned that there may be attempts to abuse the vulnerability in the future."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de denegación de servicio (DoS) en Apache SpamAssassin en versiones anteriores a la 3.4.2. La vulnerabilidad ocurre con ciertas etiquetas no cerradas en correos electrónicos que provocan que las marcas se manejen incorrectamente, lo que conduce al agotamiento del tiempo de escaneo. En Apache SpamAssassin, empleando HTML::Parser, se establece un objeto y se engancha a los manejadores de etiqueta de inicio y final. En ambos casos, el evento \"open\" está inmediatamente seguido por un evento \"close\"; incluso si la etiqueta *no* se cierra en el HTML que se está analizando. Debido a esto, falta que el evento \"text\" gestione el objeto de forma normal. Esto puede provocar que los correos electrónicos cuidadosamente manipulados tarden más tiempo en escanearse del planeado, lo que conduce a una denegación de servicio (DoS). El problema es posiblemente un error o decisión en HTML::Parser que impacta en la forma en la que Apache SpamAssassin emplea el módulo con HTML mal formado. El exploit se ha visto \"in the wild\", pero no se cree que haya sido parte a propósito de un intento de denegación de servicio (DoS). Se cree que podrían haber intentos de abusar de la vulnerabilidad en el futuro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "3B11FE5D-8764-42A3-A534-0EBA21F550D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/105347",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2916",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-07",
        "source" : "security@apache.org"
      }, {
        "url" : "https://usn.ubuntu.com/3811-1/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3811-2/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/105347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:2916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201812-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/3811-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3811-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14443",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T17:29:00.267",
      "lastModified" : "2024-11-21T03:12:48.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly checks the number of GET parameters supplied, leading to an arbitrarily controlled information leak on the whole device memory. An attacker can send an authenticated HTTP request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de fuga de información en Insteon Hub, con la versión 1012 de firmware. La implementación del servidor HTTP comprueba de forma incorrecta el número de parámetros GET proporcionados, lo que conduce a una fuga de información controlada de forma arbitraria en toda la memoria del dispositivo. Un atacante puede enviar una petición HTTP autenticada para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_2245-222_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2532FA22-D435-47E6-8DFA-47377B1959D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub_2245-222:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150E9049-5523-4BC3-A5A5-473B6D320B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0492",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2777",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T17:29:00.377",
      "lastModified" : "2024-11-21T03:24:08.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de memoria dinámica (heap) en la función ipStringCreate de Iceni Argus en su versión 6.6.05. Un archivo PDF especialmente manipulado podría provocar un desbordamiento de enteros que daría lugar a un desbordamiento de memoria dinámica (heap). Un atacante puede enviar un archivo para provocar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iceni:argus:6.6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F7129E-65D9-40D4-B7F4-291726839149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0271",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2874",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T18:29:00.263",
      "lastModified" : "2024-11-21T03:24:22.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de divulgación de información en la interfaz Multi-Camera empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Una petición especialmente manipulada en el puerto 10001 puede permitir que un usuario recupere información sensible sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0381",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2854",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T20:29:00.367",
      "lastModified" : "2024-11-21T03:24:19.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el cliente DDNS empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. En dispositivos con DDNS habilitado, un atacante que pueda interceptar conexiones HTTP podrá comprometer completamente el dispositivo creando un servidor HTTP corrupto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0357",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2856",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T20:29:00.523",
      "lastModified" : "2024-11-21T03:24:20.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el cliente DDNS empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. En dispositivos con DDNS habilitado, un atacante que pueda interceptar conexiones HTTP podrá comprometer completamente el dispositivo creando un servidor HTTP fraudulento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0359",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2857",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T20:29:00.650",
      "lastModified" : "2024-11-21T03:24:20.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el cliente DDNS empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. En dispositivos con DDNS habilitado, un atacante que pueda interceptar conexiones HTTP podrá comprometer completamente el dispositivo creando un servidor HTTP fraudulento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0360",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2872",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-17T20:29:00.790",
      "lastModified" : "2024-11-21T03:24:21.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Existen comprobaciones de seguridad insuficientes en el procedimiento de recuperación empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Una petición HTTP puede permitir que un usuario realice una actualización de firmware mediante una imagen manipulada. Antes de que se \"flasheen\" actualizaciones de firmware en esta imagen en el dispositivo, los binarios y los argumentos a los comandos shell contenidos en la imagen se ejecutan con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0379",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15818",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-18T18:29:00.270",
      "lastModified" : "2024-11-21T03:15:17.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an integer overflow could potentially occur if the application partition size is rounded up to page_size."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, al cargar una aplicación de usuario en qseecom, podría ocurrir un desbordamiento de enteros si el tamaño de la partición del archivo se redondea a page_size."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105872",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=abe4f7042cbdef928ffc152335a17150fb39b096",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=abe4f7042cbdef928ffc152335a17150fb39b096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15825",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-18T18:29:00.443",
      "lastModified" : "2024-11-21T03:15:17.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, an out of bounds memory access may potentially occur."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, al procesar una actualización gpt, puede ocurrir un acceso a la memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=252e22c9adb9b59c36e59e00d8b43013facec4d6",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=252e22c9adb9b59c36e59e00d8b43013facec4d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15828",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-18T18:29:00.677",
      "lastModified" : "2024-11-21T03:15:18.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer overflow vulnerability exists which may potentially lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, al acceder al almacén de claves en LK, puede ocurrir una vulnerabilidad de desbordamiento de enteros que conduciría a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=86ea9e5dd16d918f8960067157012cc15176f82f",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=86ea9e5dd16d918f8960067157012cc15176f82f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15844",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-18T18:29:00.850",
      "lastModified" : "2024-11-21T03:15:19.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, al procesar una función para escribir valores del dispositivo en flash, la memoria sin inicializar se puede escribir en flash."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=19622514c69e798d91e7908090b3d79dfdb14715",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=19622514c69e798d91e7908090b3d79dfdb14715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-09-18T20:29:00.263",
      "lastModified" : "2024-11-21T03:30:47.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) en Open-Xchange webmail en versiones anteriores a la 7.6.3-rev28 permite que atacantes remotos inyecten scripts web o HTML mediante el atributo event en una etiqueta time."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.3",
            "matchCriteriaId" : "CEE77111-9626-48C1-9C13-6FF650B91363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gquere/CVE-2017-6913",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4133_7.6.3_2017-05-15.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gquere/CVE-2017-6913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4133_7.6.3_2017-05-15.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3912",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2018-09-18T22:29:00.307",
      "lastModified" : "2024-11-21T03:26:21.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de contraseña de seguridad en McAfee Application and Change Control (MACC) 7.0.1 y 6.2.0 permite que usuarios autenticados ejecuten comandos arbitrarios mediante una utilidad de línea de comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-274"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:application_and_change_control:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9BFAE1-40F8-4127-9252-4236287E0648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:application_and_change_control:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C0F15E-86AB-4654-A1D4-7AE9D56CBA8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102988",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10224",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/102988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1794",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-09-19T15:29:01.233",
      "lastModified" : "2024-11-21T03:22:22.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Monitoring desde la versión 6.2.3 hasta la 6.2.3.5 y desde la 6.3.0 hasta la 6.3.0.7 es vulnerable a un escalado de privilegios del usuario TEPS y una posible denegación de servicio (DoS) debido a un crecimiento de memoria sin restricciones. IBM X-Force ID: 137039."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.3",
            "versionEndIncluding" : "6.2.3.5",
            "matchCriteriaId" : "161EFDEA-8E0B-444D-A5E0-B3DB65596813"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_monitoring:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndIncluding" : "6.3.0.7",
            "matchCriteriaId" : "AE2623FD-FF70-4E0A-A808-56C8CB9BB05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137039",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22014097",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/137039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22014097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2855",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T16:29:00.443",
      "lastModified" : "2024-11-21T03:24:20.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el cliente DDNS utilizado por los dispositivos Foscam C1 Indoor HD Camera que ejecuten el firmware de aplicación 2.52.2.43. En dispositivos con DDNS habilitado, un atacante que sea capaz de interceptar conexiones HTTP podría comprometer por completo el dispositivo creando un servidor HTTP fraudulento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0358",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2875",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T16:29:00.550",
      "lastModified" : "2024-11-21T03:24:22.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la interfaz Multi-Camera utilizada por los dispositivos Foscam C1 Indoor HD Camera que ejecuten el firmware de aplicación 2.52.2.43. Una petición especialmente manipulada en el puerto 10000 puede provocar un desbordamiento de búfer, lo que provoca la sobrescritura de datos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0382",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2878",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T16:29:00.647",
      "lastModified" : "2024-11-21T03:24:22.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Una petición HTTP especialmente manipulada puede provocar un desbordamiento de búfer, lo que provoca la sobrescritura de datos arbitrarios. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2879",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T16:29:00.770",
      "lastModified" : "2024-11-21T03:24:22.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la implementación UPnP utilizada por los dispositivos Foscam C1 Indoor HD Camera que ejecuten el firmware de aplicación 2.52.2.43. Una respuesta de descubrimiento UPnP especialmente manipulada puede provocar un desbordamiento de búfer, lo que provoca la sobrescritura de datos arbitrarios. Un atacante necesita estar en la misma subred y responder al mensaje de descubrimiento para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0386",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2873",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T18:29:00.343",
      "lastModified" : "2024-11-21T03:24:22.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en la interfaz de gestión web empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Una petición HTTP especialmente manipulada puede permitir que un usuario inyecte caracteres shell durante la configuración de SoftAP, lo que resulta en una inyección de comandos. Un atacante puede simplemente enviar una petición HTTP al dispositivo para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0380",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2876",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T18:29:00.437",
      "lastModified" : "2024-11-21T03:24:22.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en la interfaz Multi-Camera utilizada por los dispositivos Foscam C1 Indoor HD Camera que ejecuten el firmware de aplicación 2.52.2.43. Una petición especialmente manipulada en el puerto 10000 puede provocar un desbordamiento de búfer, lo que provoca la sobrescritura de datos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0383",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2877",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2018-09-19T18:29:00.547",
      "lastModified" : "2024-11-21T03:24:22.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication."
      }, {
        "lang" : "es",
        "value" : "Falta una comprobación de error en la interfaz Multi-Camera utilizada por los dispositivos Foscam C1 Indoor HD Camera que ejecuten el firmware de aplicación 2.52.2.43. Una petición especialmente manipulada en el puerto 10001 podría permitir que un atacante reinicie las cuentas de usuario a datos de fábrica sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:foscam:c1_firmware:2.52.2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669982BF-3C42-4030-AA74-C21621F73451"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F616DB3E-95FA-4679-A831-036AA3CF25EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0384",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18280",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-20T13:29:00.247",
      "lastModified" : "2024-11-21T03:19:45.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, Snapdragon_High_Med_2016, when a Trusted Application has opened the SPI/I2C interface to a particular device, it is possible for another Trusted Application to read the data on this open interface by calling the SPI/I2C read function."
      }, {
        "lang" : "es",
        "value" : "En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632 y Snapdragon_High_Med_2016, cuando una aplicación de confianza abre la interfaz SPI/I2C a un dispositivo en concreto, es posible para otra aplicación de confianza leer los datos de esta interfaz abierta llamando a la función read de SPI/I2C."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6D6965-B5B2-46D2-8718-43B7B22441C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C7497-A7DC-436B-BACD-71F69D99517D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC3A8D2-2860-4A34-B9A8-0077263E4563"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67ABF7B-5719-4C99-87C4-75499E98A281"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AB5135-6391-45C1-81DE-803E3834F196"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF246C-6B39-4DC2-81B0-040DCAAD5177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ECC0E-0120-47E5-9D00-440DC38F2C0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352E745F-375B-43AE-9B29-8A2D50C695B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CDD792-89BC-4A7B-A971-4C04663E62A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D6ACA2-47C7-4E44-A838-22600B5BC52E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6652C54-B207-4816-B70D-5DD2C792D1DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3B99CC-CC53-42A6-9C42-0C06E734A554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2951AF-E04B-433B-B327-03D8D28B2BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BB475-8F09-408E-AF1C-D0CA4DD8D414"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6EA9F3-ED14-4DAC-93D1-2DF63C7C3EAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EF0B75-2431-4E44-B515-11C9BD4BC982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D690E-908B-49DF-8341-9CFAE6DF5E44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274F8FC2-F564-4D87-B259-6AB5E035E73E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5E72A3-2117-4190-978F-EFB4DDE4EC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EEF23-73EB-49AE-B9F1-4702D545D643"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A83A1CF-396D-403F-AA22-0ED817DD384B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AEAA09-3C1B-4413-8418-63644DB3FABA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C536B0-32E9-42D0-B298-B4D77CC94914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81E096-820A-4B27-A539-5D3BA39FA5C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC508C49-0B76-43A8-B2AF-0F8EB989E238"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9665200-D306-4EEB-9F42-6C5963524179"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB757118-0F90-4E6E-AD4F-A05A5791B20C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCD9420-26A7-4444-9AA4-D7B0AC42FA84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18301",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-20T13:29:00.370",
      "lastModified" : "2024-11-21T03:19:48.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart."
      }, {
        "lang" : "es",
        "value" : "En Small Cell SoC and Snapdragon (Automobile, Mobile y Wear) en versiones FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20 y Snapdragon_High_Med_2016, proporcionar el argumento NULL del regulador ICE mientras se procesan llamadas IOCTL create key resulta en el reinicio del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm9055_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEF02F2-2BFE-4108-B3EE-53C3F8745B6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm9055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4868AC-4F4B-49A4-AFDD-09FDA1882E22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm9955_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFEC421-838E-4E51-8293-918D1C5ABE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm9955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E55D52-C52F-4E15-A371-CD40A52642AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ECC0E-0120-47E5-9D00-440DC38F2C0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352E745F-375B-43AE-9B29-8A2D50C695B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CDD792-89BC-4A7B-A971-4C04663E62A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D6ACA2-47C7-4E44-A838-22600B5BC52E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6652C54-B207-4816-B70D-5DD2C792D1DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3B99CC-CC53-42A6-9C42-0C06E734A554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2951AF-E04B-433B-B327-03D8D28B2BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BB475-8F09-408E-AF1C-D0CA4DD8D414"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6EA9F3-ED14-4DAC-93D1-2DF63C7C3EAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EF0B75-2431-4E44-B515-11C9BD4BC982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D690E-908B-49DF-8341-9CFAE6DF5E44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274F8FC2-F564-4D87-B259-6AB5E035E73E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5E72A3-2117-4190-978F-EFB4DDE4EC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EEF23-73EB-49AE-B9F1-4702D545D643"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A83A1CF-396D-403F-AA22-0ED817DD384B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AEAA09-3C1B-4413-8418-63644DB3FABA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C536B0-32E9-42D0-B298-B4D77CC94914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81E096-820A-4B27-A539-5D3BA39FA5C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC508C49-0B76-43A8-B2AF-0F8EB989E238"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9665200-D306-4EEB-9F42-6C5963524179"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB757118-0F90-4E6E-AD4F-A05A5791B20C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCD9420-26A7-4444-9AA4-D7B0AC42FA84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB222869-9CDB-43B1-8947-954C8C8520B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306DAB18-F737-47DE-A47D-C39F1B25D515"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18302",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-20T13:29:00.510",
      "lastModified" : "2024-11-21T03:19:48.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can modify the structure in memory passed to a QSEE application between the time of check and the time of use, resulting in arbitrary writes to TZ kernel memory regions."
      }, {
        "lang" : "es",
        "value" : "En Snapdragon (Automobile y Mobile) en versiones MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660 y Snapdragon_High_Med_2016, un cliente HLOS manipulado puede modificar la estructura en la memoria pasada a una aplicación QSEE entre el momento de la comprobación y el momento del uso, lo que desemboca en escrituras arbitrarias a las regiones de memoria del kernel TZ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ECC0E-0120-47E5-9D00-440DC38F2C0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352E745F-375B-43AE-9B29-8A2D50C695B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CDD792-89BC-4A7B-A971-4C04663E62A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D6ACA2-47C7-4E44-A838-22600B5BC52E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6652C54-B207-4816-B70D-5DD2C792D1DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3B99CC-CC53-42A6-9C42-0C06E734A554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2951AF-E04B-433B-B327-03D8D28B2BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BB475-8F09-408E-AF1C-D0CA4DD8D414"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6EA9F3-ED14-4DAC-93D1-2DF63C7C3EAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EF0B75-2431-4E44-B515-11C9BD4BC982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5E72A3-2117-4190-978F-EFB4DDE4EC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EEF23-73EB-49AE-B9F1-4702D545D643"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A83A1CF-396D-403F-AA22-0ED817DD384B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AEAA09-3C1B-4413-8418-63644DB3FABA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C536B0-32E9-42D0-B298-B4D77CC94914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81E096-820A-4B27-A539-5D3BA39FA5C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC508C49-0B76-43A8-B2AF-0F8EB989E238"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9665200-D306-4EEB-9F42-6C5963524179"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB757118-0F90-4E6E-AD4F-A05A5791B20C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCD9420-26A7-4444-9AA4-D7B0AC42FA84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18314",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-09-20T13:29:00.667",
      "lastModified" : "2024-11-21T03:19:50.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, on TZ cold boot the CNOC_QDSS RG0 locked by xBL_SEC is cleared by TZ."
      }, {
        "lang" : "es",
        "value" : "En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660 y Snapdragon_High_Med_2016, en TZ se podría arrancar CNOC_QDSS RG0 bloqueado por xBL_SEC al ser limpiado por TZ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6D6965-B5B2-46D2-8718-43B7B22441C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C7497-A7DC-436B-BACD-71F69D99517D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC3A8D2-2860-4A34-B9A8-0077263E4563"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67ABF7B-5719-4C99-87C4-75499E98A281"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AB5135-6391-45C1-81DE-803E3834F196"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF246C-6B39-4DC2-81B0-040DCAAD5177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD160D5-5DE6-4A74-A941-AFC4607C0F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39B97F7-1A96-4773-B46F-88F3DE07DC2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31A926B-2FDD-4642-9B21-AF63DCCC263E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2D115F-66D0-4D45-959A-F60AA111356F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ECC0E-0120-47E5-9D00-440DC38F2C0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352E745F-375B-43AE-9B29-8A2D50C695B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CDD792-89BC-4A7B-A971-4C04663E62A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D6ACA2-47C7-4E44-A838-22600B5BC52E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6652C54-B207-4816-B70D-5DD2C792D1DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3B99CC-CC53-42A6-9C42-0C06E734A554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2951AF-E04B-433B-B327-03D8D28B2BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084BB475-8F09-408E-AF1C-D0CA4DD8D414"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6EA9F3-ED14-4DAC-93D1-2DF63C7C3EAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EF0B75-2431-4E44-B515-11C9BD4BC982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BB71F6-FABD-423D-AC7D-CA66BCE1A89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FB761D-7C87-4A9A-A227-17D5DBE0BDBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73516F0-831B-40F0-BAE5-B45660D3507A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8F5E3A-2FEF-4713-AC4D-EBAFFD697CE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D289EE-7423-4396-9F32-3D576E72238E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43EA6FCE-2BFD-4588-B793-758BA0308C24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D690E-908B-49DF-8341-9CFAE6DF5E44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274F8FC2-F564-4D87-B259-6AB5E035E73E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5E72A3-2117-4190-978F-EFB4DDE4EC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EEF23-73EB-49AE-B9F1-4702D545D643"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A83A1CF-396D-403F-AA22-0ED817DD384B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AEAA09-3C1B-4413-8418-63644DB3FABA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C536B0-32E9-42D0-B298-B4D77CC94914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81E096-820A-4B27-A539-5D3BA39FA5C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA7F1BB-B099-41D3-94A6-196CD4DF2548"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F00BF76-0D5E-4647-9BB5-0B4B57F64110"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC508C49-0B76-43A8-B2AF-0F8EB989E238"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9665200-D306-4EEB-9F42-6C5963524179"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB757118-0F90-4E6E-AD4F-A05A5791B20C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCD9420-26A7-4444-9AA4-D7B0AC42FA84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5639",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-09-24T13:15:05.893",
      "lastModified" : "2023-11-07T02:49:28.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-09-26T21:29:00.743",
      "lastModified" : "2024-11-21T03:14:50.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings."
      }, {
        "lang" : "es",
        "value" : "Inedo ProGet en versiones anteriores a la 5.0 Beta5 tiene Cross-Site Request Forgery (CSRF), lo que permite que un atacante cambie opciones avanzadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inedo:proget:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "A12EAC89-7D43-41C0-8815-81AFEC390AC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://inedo.com/blog/proget-50-beta5-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/PG-1118",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.com/blog/proget-50-beta5-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://inedo.myjetbrains.com/youtrack/issue/PG-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1649",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-10-02T15:29:00.297",
      "lastModified" : "2024-11-21T03:22:10.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133259."
      }, {
        "lang" : "es",
        "value" : "IBM Rational Quality Manager (RQM), de la versión 5.0 a la 5.02 y desde la versión 6.0 hasta la 6.0.6, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 133259."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.6",
            "matchCriteriaId" : "EC59848F-DC84-4972-8E46-BFC3C4A4D744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10733078",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133259",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10733078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7908",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2018-10-02T21:29:00.380",
      "lastModified" : "2024-11-21T03:32:56.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en memoria dinámica (heap) en el producto de terceros Gigasoft, en versiones v5 y anteriores, que está incluido en GE Communicator en versiones 3.15 y anteriores. Un archivo HTML malicioso que carga los controles ActiveX puede desencadenar la vulnerabilidad mediante llamadas de función no comprobadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gigasoft:proessentials:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5",
            "matchCriteriaId" : "4FD5CC14-F5FE-42D4-A2E4-8885922C8997"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:ge_communicator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.15",
            "matchCriteriaId" : "8832BED7-6E93-43AC-87FB-158A2C8D9B27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99580",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-275-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-275-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2751",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2018-10-03T20:29:07.067",
      "lastModified" : "2024-11-21T03:24:07.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014."
      }, {
        "lang" : "es",
        "value" : "Se ha notificado una vulnerabilidad de extracción de contraseñas de la BIOS en determinados notebooks de consumo con firmware F.22 y otros. La contraseña de la BIOS se almacenó en CMOS de forma que permitía su extracción. Esto aplica a los notebooks de consumo lanzados a principios del 2014."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_240_g1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.48",
            "matchCriteriaId" : "E9DB1258-6E70-4DD4-9514-3855F2429673"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_240_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72BA7CD-FBA2-4E05-AAD6-853195402357"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_245_g1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.48",
            "matchCriteriaId" : "AB09A5B8-AF3E-4765-B98D-DBEBC205831F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_245_g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEE8165-AC48-4095-B86A-ED5B2FCEE65D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_1000-1300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.48",
            "matchCriteriaId" : "D1377EE5-B841-45F3-ABFB-F260BF0E5039"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_1000-1300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B642BF-9E93-47A1-936E-8341F5362F07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_250_g1_notebook_pc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.47",
            "matchCriteriaId" : "623532B7-B51F-4359-944C-0AAAECAE02F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_250_g1_notebook_pc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3FFB1C-5700-49F0-8B4F-963119DAE2BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_255_g1_notebook_pc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.47",
            "matchCriteriaId" : "20A2CC80-F40A-427A-BA36-C3577A36F640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_255_g1_notebook_pc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF8C752-EF9D-445E-8594-638529621EC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_15-j000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.22",
            "matchCriteriaId" : "4DA95C39-EDC2-4EF5-8BBA-9F30D29B1781"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_15-j000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1A7E3-55C1-4F7F-BEC4-1FF448EFE258"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_15-j100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.71",
            "matchCriteriaId" : "E53AED41-743C-43BD-91A5-94526F38692E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_15-j100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBF73B-D0D8-4081-866F-43A8631B47BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_pavilion_15-n000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.72",
            "matchCriteriaId" : "9A7C03C4-287F-42A5-9F2C-07AF1642394F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_pavilion_15-n000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D914CD6E-1B9A-4F96-A514-55B65848162B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_246_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.04",
            "matchCriteriaId" : "6E987549-AF36-41C8-A358-FEB4459EDA3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72FF0A3-AAF9-406C-8530-95088262F484"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_455_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.08",
            "matchCriteriaId" : "123EF587-8A6C-45D8-B540-9E9E25659EED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BE3F5F-A75C-44C2-935F-3E5BDCC79812"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_17_j100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.71",
            "matchCriteriaId" : "A324CD90-1CED-4B22-B189-3D7F62A7DC05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_17_j100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2F53B3-BCEB-4BE1-8A29-87CD3C857808"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_17-j100_leap_motion_se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.71",
            "matchCriteriaId" : "85829DE0-5A07-4124-8524-29776CE5543C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_17-j100_leap_motion_se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE413AA-8383-4C38-820C-D31029D185D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_split_13-g200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.25",
            "matchCriteriaId" : "FC2AF89B-5A3A-42EA-AA18-84C062D8E796"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_split_13-g200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427F6261-BF22-475B-AF6F-0A95B5FAE680"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.22",
            "matchCriteriaId" : "C5DDED43-9978-4AF2-90C3-B32FDD20C2F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07060A43-D86A-4EF7-9242-7CDDB307572D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_pavilion_14-n000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.72",
            "matchCriteriaId" : "772A8216-DBCB-4232-9F6B-217BCB19EB1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_pavilion_14-n000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795CC1F1-286E-4D3C-AFD4-72B40FBF2F33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_14-k100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.22",
            "matchCriteriaId" : "465C34CA-18C8-44B3-B09B-140E6A587C4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_14-k100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49B97D94-E322-4287-B314-5A853D5E19D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_spectre_x2_13-smb_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.25",
            "matchCriteriaId" : "5F31BF4F-E38E-4DB4-BE2E-5354743250CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_spectre_x2_13-smb_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37750215-D12A-47E0-B2E7-5D525F2334E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_spectre_13-h200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.25",
            "matchCriteriaId" : "3FAE1026-A662-455B-8FC9-898F228A2AB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_spectre_13-h200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3425A-94FC-43CD-AC0C-B7A5C03C9A20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_pavilion_15-n200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.72",
            "matchCriteriaId" : "EBA56385-E4A0-4798-AF32-6F7F81724391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_pavilion_15-n200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB78F2A-001A-48B7-A9C7-DCE1856D1A70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_pavilion_15-n300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.72",
            "matchCriteriaId" : "BA1DC99D-7602-4AB0-A6C1-951A16FD794D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_pavilion_15-n300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B0CFDC-8F7E-4493-9D54-7D3C378E4A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_envy_m6-n000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.26",
            "matchCriteriaId" : "2D0FA653-53EB-4DCD-91AA-67B1D0B3E1AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_envy_m6-n000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC85AB2-6858-4D95-A508-1BF869F27F08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_255_g3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.45",
            "matchCriteriaId" : "F11E3E53-F029-486C-9672-7514874EAD93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_255_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F105D8AB-C5D8-4769-AA69-6C036CD8962F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_14-g000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.45",
            "matchCriteriaId" : "BAD39CA7-DEC4-42D8-96CD-5595C797260A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_14-g000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49F29F3-F2FF-4A46-AA5E-10D83273921A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_pavilion_11-n000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.2e",
            "matchCriteriaId" : "8A84F157-7976-48ED-9702-F0985345C78E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_pavilion_11-n000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930323A7-3E13-4DB6-8512-3E3A0DB90E29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_15-r000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.43",
            "matchCriteriaId" : "D7E40444-EBA5-4343-9EEF-4B9059289A0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_15-r000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05798B79-4983-4D41-90FA-50DA2ABB682F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_15-r500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.43",
            "matchCriteriaId" : "817696B2-07DB-475A-9776-810E4B271FD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_15-r500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E248B54-D68A-4DCD-9787-61F0EB7AAA7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_pavilion_10-f000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.0e",
            "matchCriteriaId" : "28A571D9-D675-4ABE-8C2E-C42C8061C465"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_pavilion_10-f000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAF2478-273C-4861-A50C-B55D8E569D4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_g14-a000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.06",
            "matchCriteriaId" : "13FAB4DD-EA2A-46AE-983E-8EE2A8DE0E61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_g14-a000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452B3FBD-1F03-4B04-93D9-AF86B7042526"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_14-r000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.43",
            "matchCriteriaId" : "56F11C1F-CE19-4A1D-B17E-1C1C47088533"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_14-r000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AFB8DA-67FA-4ECE-A4C9-F52F336B96AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_240_g3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.43",
            "matchCriteriaId" : "5D17C7AB-B230-48F3-8DAF-0C68D85DF2D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_240_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29215BC-B932-41E4-AAF8-792FE0FA59CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp_246_g3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "f.43",
            "matchCriteriaId" : "5FA02D32-7D42-471C-B3E8-D66B0B311F62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:hp_246_g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB518672-B78B-4EA0-8AC1-B118513DC65F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:compaq_cq45-900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D28BD1-53A3-4B5F-882D-96A8C123DAD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:compaq_cq45-900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FA4277-7C9C-4045-B257-EF69FDCE05B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:compaq_14-h000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C1083B-D598-419C-B81E-1CC62D9C86D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:compaq_14-h000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BBAF0F-E427-4D2F-9193-9DC4777087A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:compaq_14-s000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAB6136-A3C0-4C6B-8EE8-C7F5421EB185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:compaq_14-s000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722CA200-C8A7-4F03-B455-981457999D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05913581",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05913581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5658",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2018-10-04T14:29:00.327",
      "lastModified" : "2024-11-21T03:28:07.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the content itself. As this was primarily used as a caching feature for faster loading times, the caching was disabled by default to prevent this. Users using 0.9 should upgrade to 0.10 to address this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado que el generador de estadísticas en Apache Pony Mail desde la versión 0.7 hasta la 0.9 devuelve datos de marcas de tiempo sin las comprobaciones de autorización apropiadas. Esto podría conducir a una divulgación de información derivada en listas privadas sobre las sincronizaciones de los asuntos o los cuerpos de texto de determinados correos, aunque sin divulgar su contenido. Ya que se usó en primera instancia como una característica de cacheo de memoria para aumentar la velocidad de carga, el cacheo de memoria estaba deshabilitado por defecto para prevenir esto. Los usuarios que utilicen la versión 0.9 deberían actualizar a la versión 0.10 para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:pony_mail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.7",
            "versionEndIncluding" : "0.9",
            "matchCriteriaId" : "DB4A83C5-8DFB-465C-9024-AA58DC021750"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/6a18cf5690d54231836f277f2b4346b53da3b6b6b08fee4c4ef4977e%40%3Cdev.ponymail.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/6a18cf5690d54231836f277f2b4346b53da3b6b6b08fee4c4ef4977e%40%3Cdev.ponymail.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1231",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-10-12T05:29:00.357",
      "lastModified" : "2024-11-21T03:21:32.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Platform 9.5 - 9.5.9 almacena las credenciales de usuario en formato de texto plano, por lo que podrían ser leídos por un usuario local. IBM X-Force ID: 123910."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5",
            "versionEndIncluding" : "9.5.9",
            "matchCriteriaId" : "AB2C8863-EEBD-492B-9DAE-2E5C296B0BCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123910",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10724511",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10724511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-10-15T19:29:00.507",
      "lastModified" : "2024-11-21T03:28:42.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting (XSS) en el diálogo de enlaces en el editor de la interfaz gráfica de MoinMoin en versiones anteriores a la 1.9.10 permite a atacantes remotos inyectar scripts web o HTML arbitrarios utilizando vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmo:moinmoin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.10",
            "matchCriteriaId" : "85D1682C-984C-4532-9DA9-B36E5FBFBD73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E78106-58E6-4D59-990F-75DA575BFAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://moinmo.in/SecurityFixes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moinwiki/moin-1.9/commit/70955a8eae091cc88fd9a6e510177e70289ec024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3794-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4318",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://moinmo.in/SecurityFixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moinwiki/moin-1.9/commit/70955a8eae091cc88fd9a6e510177e70289ec024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/10/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3794-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17176",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2018-10-17T15:29:00.633",
      "lastModified" : "2024-11-21T03:17:39.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156, versions earlier before LON-CL00BC00B156, versions earlier before LON-DL00BC00B156, versions earlier before LON-TL00BC00B156 has a arbitrary memory read/write vulnerability due to the input parameters validation. An attacker with the root privilege of the Android system could exploit this vulnerability to read and write memory data anywhere or execute arbitrary code in the TrustZone."
      }, {
        "lang" : "es",
        "value" : "El módulo de seguridad del hardware en los smartphones Huawei Mate 9 y Mate 9 Pro en versiones anteriores a la MHA-AL00BC00B156, versiones anteriores a la MHA-CL00BC00B156, versiones anteriores a la MHA-DL00BC00B156, versiones anteriores a la MHA-TL00BC00B156, versiones anteriores a la LON-AL00BC00B156, versiones anteriores a la LON-CL00BC00B156, versiones anteriores a la LON-DL00BC00B156 y versiones anteriores a la LON-TL00BC00B156 tiene una vulnerabilidad de lectura/escritura en la memoria arbitraria debido a la validación de parámetros de entrada. Un atacante con el privilegio root del sistema Android podría explotar esta vulnerabilidad para leer y escribir memoria en cualquier sitio o ejecutar código arbitrario en TrustZone."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-al00bc00b156",
            "matchCriteriaId" : "CE3C7F2E-D3F8-4D8A-A156-07F99329C9BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-cl00bc00b156",
            "matchCriteriaId" : "EC783EF1-0595-4734-BB6D-000274D52D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-dl00bc00b156",
            "matchCriteriaId" : "4562F553-AA92-49C4-AF96-AA5D639AB57F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mha-tl00bc00b156",
            "matchCriteriaId" : "4F7F4EC8-BFB0-44C3-9883-88EF066AC4A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FB7D8B-A819-4CBB-85D1-D3984D963351"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-al00bc00b156",
            "matchCriteriaId" : "E3154098-1B5C-4CAD-B533-AB0DC6F24ED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-cl00bc00b156",
            "matchCriteriaId" : "1A1BABDC-8CEF-4AC8-870C-0BB35DE027EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-dl00bc00b156",
            "matchCriteriaId" : "922DF6D9-9DC1-45B7-B5A5-CCA7C1ECD089"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lon-tl00bc00b156",
            "matchCriteriaId" : "CEB18BA8-631E-4855-8288-73E3CE9A298B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC4AF8-2F6D-41FC-9697-17472AF32FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170306-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170306-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-10-19T08:29:00.263",
      "lastModified" : "2024-11-21T03:19:54.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNK_HOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNK_HOME/bin, because the non-root setup instructions state that chown should be run across all of $SPLUNK_HOME to give non-root access."
      }, {
        "lang" : "es",
        "value" : "Splunk Enterprise 6.6.x, cuando se configura para ser ejecutado como root pero dejando sus privilegios a una cuenta no root determinada, permite que usuarios locales obtengan privilegios aprovechando el acceso a esa cuenta no root para modificar $SPLUNK_HOME/etc/splunk-launch.conf e insertar programas troyanhos en $SPLUNK_HOME/bin. Esto se debe a que las instrucciones de instalación no root especifican que se debe ejecutar chown en todo $SPLUNK_HOME para otorgar acceso no root."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndIncluding" : "6.6.11",
            "matchCriteriaId" : "FE89C8C6-F466-4DF9-90D2-E7E1BB7F54C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/101664",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://korelogic.com/Resources/Advisories/KL-001-2017-022.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAP3M",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://korelogic.com/Resources/Advisories/KL-001-2017-022.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.splunk.com/view/SP-CAAAP3M",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18170",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:00.260",
      "lastModified" : "2024-11-21T03:19:28.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Validación de entradas incorrecta en la función Bluetooth Controller puede conducir a una posible corrupción de memoria en Snapdragon Mobile en versiones QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D045BE4B-BC19-4A51-90E6-00C18389C81B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F006960-CDE3-4E74-B4F0-2C4B2CA93959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18171",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:00.417",
      "lastModified" : "2024-11-21T03:19:28.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Validación de entradas incorrecta para los paquetes de datos GATT en la función Bluetooth Controller puede conducir a una posible corrupción de memoria en Snapdragon Mobile en versiones QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D045BE4B-BC19-4A51-90E6-00C18389C81B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F006960-CDE3-4E74-B4F0-2C4B2CA93959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18172",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:00.540",
      "lastModified" : "2024-11-21T03:19:28.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "En un dispositivo, con un tamaño de pantalla de 1440x2560, la comprobación de un búfer continuo se desbordará en ciertos tamaños de búfer, lo que resulta en un desbordamiento de búfer o un wraparound en la UI del sistema en Snapdragon Automobile y Snapdragon Mobile en versiones MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C20F8-9EFD-457C-B0B2-DA3C44A8B26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B562043-7A0C-4692-A94F-EF4086BAA654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18277",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:00.680",
      "lastModified" : "2024-11-21T03:19:45.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCN5502, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835."
      }, {
        "lang" : "es",
        "value" : "Cuando la asignación de memoria dinámica fracasa, actualmente el proceso duerme durante un segundo y continúa con un bucle infinito sin reintentar asignar la memoria en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCN5502, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A y SD 835."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn5502_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33E62D2-931E-465C-BC8E-71FB36CF6E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn5502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254F1AB0-C21A-41A6-9B9B-ED074A4C9EBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607AA2E2-69A9-4A8A-B9E3-137D37CB7632"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF1492A-884D-4E59-8A1C-E39A105E2CAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18282",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:00.837",
      "lastModified" : "2024-11-21T03:19:45.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660."
      }, {
        "lang" : "es",
        "value" : "Un software inseguro puede provocar que SDCC genere accesos seguros al bus, lo que podría exponer el acceso RPM en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6D6965-B5B2-46D2-8718-43B7B22441C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C7497-A7DC-436B-BACD-71F69D99517D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC3A8D2-2860-4A34-B9A8-0077263E4563"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67ABF7B-5719-4C99-87C4-75499E98A281"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AB5135-6391-45C1-81DE-803E3834F196"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF246C-6B39-4DC2-81B0-040DCAAD5177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ECC0E-0120-47E5-9D00-440DC38F2C0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352E745F-375B-43AE-9B29-8A2D50C695B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6652C54-B207-4816-B70D-5DD2C792D1DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3B99CC-CC53-42A6-9C42-0C06E734A554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6EA9F3-ED14-4DAC-93D1-2DF63C7C3EAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EF0B75-2431-4E44-B515-11C9BD4BC982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5E72A3-2117-4190-978F-EFB4DDE4EC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EEF23-73EB-49AE-B9F1-4702D545D643"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A83A1CF-396D-403F-AA22-0ED817DD384B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AEAA09-3C1B-4413-8418-63644DB3FABA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C536B0-32E9-42D0-B298-B4D77CC94914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81E096-820A-4B27-A539-5D3BA39FA5C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18283",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:00.977",
      "lastModified" : "2024-11-21T03:19:45.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660."
      }, {
        "lang" : "es",
        "value" : "Posible corrupción de memoria cuando se recibe Read Val Blob Req con parámetros inválidos en Snapdragon Mobile en versiones QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C7497-A7DC-436B-BACD-71F69D99517D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18292",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.133",
      "lastModified" : "2024-11-21T03:19:47.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A."
      }, {
        "lang" : "es",
        "value" : "Una aplicación segura ejecutándose en un espacio no seguro puede reiniciar TZ llamando a la API de la app Widevine repetidamente en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820 y SD 820A."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18293",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.260",
      "lastModified" : "2024-11-21T03:19:47.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660."
      }, {
        "lang" : "es",
        "value" : "Cuando un GPIO en concreto está protegido bloqueando el acceso a los registros de recursos GPIO correspondientes, la protección se puede omitir mediante los registros GPIO correspondientes en su lugar en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18294",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.400",
      "lastModified" : "2024-11-21T03:19:47.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20."
      }, {
        "lang" : "es",
        "value" : "Al leer el tipo de clase de archivo de la cabecera ELF, podría ocurrir un desbordamiento de búfer si el tamaño del archivo ELF es menor al tamaño de la cabecera ELF64 en Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660 y SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm9055_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEF02F2-2BFE-4108-B3EE-53C3F8745B6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm9055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4868AC-4F4B-49A4-AFDD-09FDA1882E22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18295",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.523",
      "lastModified" : "2024-11-21T03:19:47.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20."
      }, {
        "lang" : "es",
        "value" : "Posible desbordamiento de búfer si la entrada no está acabada en null en el módulo del servicio DSP en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en la versión MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835 y SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18296",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.650",
      "lastModified" : "2024-11-21T03:19:47.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20."
      }, {
        "lang" : "es",
        "value" : "No se aplica el control de acceso en las aplicaciones al acceder a los servicios SafeSwitch, lo que puede conducir a un acceso incorrecto en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en la versión MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660 y SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18297",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.760",
      "lastModified" : "2024-11-21T03:19:48.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820."
      }, {
        "lang" : "es",
        "value" : "Doble liberación (double free) de memoria al cerrar la gestión de la sesión de la API TEE SE en Snapdragon Mobile en la versión SD 425, SD 430, SD 450, SD 625, SD 650/52 y SD 820."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18298",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:01.883",
      "lastModified" : "2024-11-21T03:19:48.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 ."
      }, {
        "lang" : "es",
        "value" : "La falta de validación de entradas en la API SDMX puede conducir a un acceso de puntero NULL en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850 y SDA660 ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18299",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.010",
      "lastModified" : "2024-11-21T03:19:48.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660"
      }, {
        "lang" : "es",
        "value" : "La lógica de consolidación de tablas de traducción conduce al agotamiento de recursos y un error QSEE en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18300",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.150",
      "lastModified" : "2024-11-21T03:19:48.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SDA660."
      }, {
        "lang" : "es",
        "value" : "Aplicaciones de terceros fiables podrían acceder a contenido de muestra seguro tras crear un error en otras aplicaciones fiables en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18303",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.290",
      "lastModified" : "2024-11-21T03:19:48.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDA660, SDX20."
      }, {
        "lang" : "es",
        "value" : "Al procesar el archivo de configuración de registro del sensor, si las entradas no se validan, ocurrirá un desbordamiento de búfer en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDA660 y SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607AA2E2-69A9-4A8A-B9E3-137D37CB7632"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF1492A-884D-4E59-8A1C-E39A105E2CAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18304",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.430",
      "lastModified" : "2024-11-21T03:19:49.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 and SDX20"
      }, {
        "lang" : "es",
        "value" : "Asignación de memoria insuficiente en boot debido a que se pasa el tamaño incorrecto podría resultar en un acceso fuera de límites en Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 y SDX20"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qaulcomm:fsm9055_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E4F475-27BC-4F69-AC12-D7AC98D3A864"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qaulcomm:fsm9055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E0E87E2-895F-4F3C-BC53-DAA7FF21EAEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18305",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.557",
      "lastModified" : "2024-11-21T03:19:49.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835."
      }, {
        "lang" : "es",
        "value" : "La llamada del sistema XBL sec mem dump permite el control total de EL3 desbloqueando todos los XPU si no se se sobrecarga un fusible \"enable\" en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205 y SD 835."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18312",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.697",
      "lastModified" : "2024-11-21T03:19:49.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdragon Mobile in version MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820, SD 820A"
      }, {
        "lang" : "es",
        "value" : "Al acceder a los servicios SafeSwitch, los terceros pueden manipular un dispositivo determinado y realizar operaciones no autorizadas debido a la falta de comprobaciones de algunas transiciones del mismo estado en Snapdragon Automobile y Snapdragon Mobile en versiones MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820 y SD 820A"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18313",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-23T13:29:02.837",
      "lastModified" : "2024-11-21T03:19:50.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is located within the authenticated image in Snapdragon Mobile and Snapdragon Wear in version MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617."
      }, {
        "lang" : "es",
        "value" : "En ciertos modos de operaciones, HLOS podría ser capaz de obtener acceso directo o indirecto mediante los canales DXE para manipular el firmware WCNSS autenticado almacenado en DDR debido a que la memoria DXE accesible se ubica en la imagen autenticada en Snapdragon Mobile y Snapdragon Wear en versiones MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415 y SD 617."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:C/A:N",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-10-23T20:29:00.263",
      "lastModified" : "2024-11-21T03:19:54.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java."
      }, {
        "lang" : "es",
        "value" : "parseObject en Fastjson en versiones anteriores a la 1.2.25, tal y como se emplea en FastjsonEngine en Pippo 1.11.0 y otros productos, permite que atacantes remotos ejecuten código arbitrario mediante una petición JSON manipulada, tal y como queda demostrado con un URI rmi:// manipulado en el campo dataSourceName de los datos HTTP POST en el URI Pippo /json, que se gestiona de manera incorrecta en AjaxApplication.java."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alibaba:fastjson:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.25",
            "matchCriteriaId" : "8436E191-4479-4DFD-828B-654553572421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pippo:pippo:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1D9885-9998-45F3-8127-8701BE87F70E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/encyclopedia/ips/44059",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/fastjson/wiki/security_update_20170315",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pippo-java/pippo/issues/466",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/encyclopedia/ips/44059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/fastjson/wiki/security_update_20170315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pippo-java/pippo/issues/466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18124",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-26T13:29:00.277",
      "lastModified" : "2024-11-21T03:19:23.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20"
      }, {
        "lang" : "es",
        "value" : "Durante el arranque seguro, se realiza una suma en uint8 ptrs, lo que conduce a un problema de desbordamiento en Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 y SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm9055_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEF02F2-2BFE-4108-B3EE-53C3F8745B6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm9055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4868AC-4F4B-49A4-AFDD-09FDA1882E22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CB547F-0078-47CD-B511-06DE96882D5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA679375-BB14-4B24-8AD9-B2BFBACE2FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18308",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-26T13:29:00.357",
      "lastModified" : "2024-11-21T03:19:49.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430"
      }, {
        "lang" : "es",
        "value" : "Los segmentos del módem se desbloquean tras la autenticación, lo que los deja abiertos a todos en Snapdragon Mobile y Snapdragon Wear en versiones MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425 y SD 430."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18309",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-26T13:29:00.450",
      "lastModified" : "2024-11-21T03:19:49.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850."
      }, {
        "lang" : "es",
        "value" : "Un micronúcleo del transporte QMP puede provocar que un macronúcleo lea o escriba en memoria arbitraria en Snapdragon Mobile en versiones SD 845 y SD 850."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:N",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18310",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-26T13:29:00.543",
      "lastModified" : "2024-11-21T03:19:49.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016"
      }, {
        "lang" : "es",
        "value" : "ClientEnv expone los servicios 0-32 al HLOS en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18311",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-26T13:29:00.637",
      "lastModified" : "2024-11-21T03:19:49.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Es posible escalar privilegios a XPU Master debido al control de acceso incorrecto de puertos de configuración xPU sin utilizar cuando éstos están abiertos en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18281",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-10-29T18:29:00.510",
      "lastModified" : "2024-11-21T03:19:45.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel"
      }, {
        "lang" : "es",
        "value" : "Una variable bool en la función Video que se cambia a int antes de ser leída podría resultar en un acceso de lectura fuera de límites en todas las distribuciones de Android desde CAF que emplean el kernel de Linux."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1041432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-10-30T19:29:00.337",
      "lastModified" : "2024-11-21T03:35:00.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Bitdefender GravityZone VMware en versiones anteriores a la 6.2.1-35 podría permitir que los atacantes obtengan acceso con privilegios root mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.1-35",
            "matchCriteriaId" : "235D89A4-E534-48D4-BF0B-C2304435F7FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.bitdefender.com/support/bitdefender-gravityzone-6-2-1-35-release-notes-1909.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.bitdefender.com/support/bitdefender-gravityzone-6-2-1-35-release-notes-1909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1609",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-11-02T15:29:00.310",
      "lastModified" : "2024-11-21T03:22:08.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132929."
      }, {
        "lang" : "es",
        "value" : "IBM Quality Manager (RQM), de la versión 5.0 a la 5.0.2 y desde la versión 6.0 hasta la 6.0.6, es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. Esto podría dar lugar a una revelación de credenciales en una sesión de confianza. IBM X-Force ID: 132929."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "886BE49D-114F-4BF7-BE5C-2EEFA44CAFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.0.6",
            "matchCriteriaId" : "EC59848F-DC84-4972-8E46-BFC3C4A4D744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10738137",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106384",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132929",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10738137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1119",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-11-09T01:29:00.337",
      "lastModified" : "2024-11-21T03:21:21.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attacks against the affected system. IBM X-Force ID: 121171."
      }, {
        "lang" : "es",
        "value" : "IBM Marketing Operations 9.1.0, 9.1.2 y 10.1 pueden permitir que un atacante remoto obtenga información sensible. Un atacante puede enviar una petición especialmente manipulada para que se devuelva un mensaje de error que contenga la ruta de root completa. Un atacante podría utilizar esta información para lanzar más ataques contra el sistema afectado. IBM X-Force ID: 121171."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndIncluding" : "9.1.0.12",
            "matchCriteriaId" : "45596737-8425-4E13-BEE8-3F58E6405393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.2.0",
            "versionEndIncluding" : "9.1.2.7",
            "matchCriteriaId" : "93137CAF-FF3A-4D92-9867-202EDBB95C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_operations:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED76351E-8D8B-43FA-985E-E80F3208F7A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10738519",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121171",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10738519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/121171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-11-10T22:29:00.247",
      "lastModified" : "2024-11-21T03:18:08.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos ZyXEL ZyWALL USG 2.12 AQQ.2 y 3.30 AQQ.7 se ven afectados por una vulnerabilidad Cross-Site Request Forgery (CSRF) mediante una acción cmd en cgi-bin/zysh-cgi para añadir una cuenta de usuario. El acceso a la cuenta podría, por ejemplo, usarse en consecuencia para Cross-Site Scripting (XSS) persistente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:zywall_usg_100_firmware:2.12\\(aqq.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F913F0-41C5-4B8F-AEAB-854DB4B8295A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:zywall_usg_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB902356-D134-434B-8BAF-2CB366F32050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:zywall_usg_100_firmware:3.30\\(aqq.7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C687B5FA-8282-4181-A637-B493DDB2031A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:zywall_usg_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB902356-D134-434B-8BAF-2CB366F32050"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.shellcode.it/article/cve-2017-17550/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.shellcode.it/article/cve-2017-17550/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1418",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-11-26T16:29:00.243",
      "lastModified" : "2024-11-21T03:21:50.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406."
      }, {
        "lang" : "es",
        "value" : "La versiones 9.0.0.0, 9.0.0.11, 10.0.0.0 y 10.0.0.14 de IBM Integration Bus (inclusivas las 8.0.0.0 y 8.0.0.9 de WebSphere Message Broker) tienen permisos inseguros en determinados archivos. Un atacante local podría explotar esta vulnerabilidad para modificar o borrar dichos archivos con un impacto desconocido. IBM X-Force ID: 127406."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.0.11",
            "matchCriteriaId" : "A68EC78E-2917-499E-879E-BF3B8F4A0763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integration_bus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0.0",
            "versionEndIncluding" : "10.0.0.14",
            "matchCriteriaId" : "072958FE-6DB0-4CB4-B569-757963A8E8B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.9",
            "matchCriteriaId" : "371E38F9-286D-4D31-A654-1970EFD8BDEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10735181",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127406",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10735181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/127406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11078",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-11-27T16:29:00.397",
      "lastModified" : "2024-11-21T03:07:03.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bounds read can occur in boot."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, al procesar la cabecera \"boot image\", puede ocurrir una lectura fuera de límites en boot."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=c975b4c716511c9086f6eb885f9a3524c428a19b",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=c975b4c716511c9086f6eb885f9a3524c428a19b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18315",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-11-28T15:29:00.237",
      "lastModified" : "2024-11-21T03:19:50.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de sobrelectura de búfer en una versión antigua del analizador ASN.1 en Snapdragon Mobile en versiones SD 600."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607AA2E2-69A9-4A8A-B9E3-137D37CB7632"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF1492A-884D-4E59-8A1C-E39A105E2CAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18316",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-11-28T15:29:00.283",
      "lastModified" : "2024-11-21T03:19:50.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130."
      }, {
        "lang" : "es",
        "value" : "Una aplicación segura puede acceder a la memoria del kernel QSEE mediante el controlador del kernel Ontario en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24 y SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7D87-F60F-4DD2-9E0B-A9DFD3D69B22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FA5777-1B35-4BD1-BB81-CB5DE62F3D56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18317",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-11-28T15:29:00.330",
      "lastModified" : "2024-11-21T03:19:50.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A."
      }, {
        "lang" : "es",
        "value" : "Las restricciones relacionadas con el módem (sim lock, sim kill) pueden omitirse manipulando el sistema para que lance una secuencia de flujo de desactivación en Snapdragon Automobile y Snapdragon Mobile en versiones MSM8996AU, SD 410/12, SD 820 y SD 820A."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18318",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-11-28T15:29:00.377",
      "lastModified" : "2024-11-21T03:19:50.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A."
      }, {
        "lang" : "es",
        "value" : "Falta una comprobación de validación en el nombre del proveedor CRL en Snapdragon Automobile y Snapdragon Mobile en versiones MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820 y SD 820A."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/105838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1622",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-12-05T17:29:00.227",
      "lastModified" : "2024-11-21T03:22:09.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar SIEM 7.2.8 y 7.3 no valida un certificado, o lo hace de forma incorrecta. Esta debilidad podría permitir que un atacante suplante una entidad de confianza mediante un ataque de Man-in-the-Middle (MitM). IBM X-Force ID: 133120."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.8",
            "matchCriteriaId" : "21BD7B43-20E4-4BB0-8B6A-0279B2A8609A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.1",
            "matchCriteriaId" : "4C0334B4-F2FF-4FF2-9332-99A784A1DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC5DF5D-8240-46E3-B6B1-53C6537FEA0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B613958-19C3-47D4-9997-8C9D39A8D1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "5C297E30-FAFB-4432-9FA1-2A6A1B7BC4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "C9FB83F1-7F90-4308-BAF3-C8FEE34CE97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFCD881-F682-49BA-822A-B2100B0545AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "6E33BA32-7A94-4844-A1BA-E6E1F4BA693E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD604D9-46CC-4A6F-ABE3-7461CB1C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FDCCEB-F357-4DB4-8BD8-57A658993A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D22B95D-B523-4065-B5EA-8BA8DD5AA854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "E8ECD101-34AB-4E19-B436-A2991BBE687F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "2980D256-32C5-4F05-8FA4-B29AF42E31A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "459B769B-8407-483B-8122-64E10DBC9CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC4F686-B150-4647-8AE3-A85FCC64D773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "686839F1-5170-412A-A35A-2C757ECE0836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "29774363-82E3-47FB-A8C5-8636ADA784AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "C09571F4-70DF-49D2-AED1-4AB4D7E7F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "05254BF1-A6D1-4BFA-B4E7-7B50FBC68192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B428267-8C01-4A9E-A700-0182CA3A9FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "33547012-E214-46A5-8CFB-F8042620A00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "809CD77D-AE15-4F1A-AE31-19A44233B434"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133120",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10742713",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/133120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10742713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14888",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-12-07T14:29:00.290",
      "lastModified" : "2024-11-21T03:13:42.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Userspace can pass IEs to the host driver and if multiple append commands are received, then the integer variable that stores the length can overflow and the subsequent copy of the IE data may potentially lead to a heap buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, el espacio de usuario puede pasar IE al controlador del host y, si se reciben múltiples comandos \"append\", la variable del entero que almacena la longitud puede desbordarse y la copia de los datos IE puede conducir a un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-11-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-11-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15835",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-12-07T14:29:00.587",
      "lastModified" : "2024-11-21T03:15:18.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While processing the RIC Data Descriptor IE in an artificially crafted 802.11 frame with IE length more than 255, an infinite loop may potentially occur resulting in a denial of service."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, al procesar el descriptor de datos IE RIC en un frame 802.11 manipulado artificialmente con una longitud de IE mayor que 255, podría ocurrir un bucle infinito y una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-11-01#qualcomm-components",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-11-01#qualcomm-components",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16909",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-12-07T22:29:00.240",
      "lastModified" : "2024-11-21T03:17:13.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error related to the \"LibRaw::panasonic_load_raw()\" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image."
      }, {
        "lang" : "es",
        "value" : "Un error relacionado con la función \"LibRaw::panasonic_load_raw()\" (dcraw_common.cpp) en las versiones anteriores a la 0.18.6 de LibRaw puede explotarse para provocar un desbordamiento de búfer basado en memoria dinámica (heap) y un cierre inesperado mediante una imagen TIFF especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.18.6",
            "matchCriteriaId" : "036305D4-5201-467D-8C37-BB46FE267729"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/f1394822a0152ceed77815eafa5cac4e8baab10a",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76000/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3615-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/f1394822a0152ceed77815eafa5cac4e8baab10a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3615-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16910",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2018-12-07T22:29:00.350",
      "lastModified" : "2024-11-21T03:17:13.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An error within the \"LibRaw::xtrans_interpolate()\" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition."
      }, {
        "lang" : "es",
        "value" : "Un error en la función \"LibRaw::xtrans_interpolate()\" (internal/dcraw_common.cpp) en LibRaw en versiones anteriores a la 0.18.6 se puede explotar para provocar un acceso de lectura a la memoria inválido y una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.18.6",
            "matchCriteriaId" : "036305D4-5201-467D-8C37-BB46FE267729"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/5563e6ddc3f7cb93d98b491194ceebdee7288d36",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76000/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3615-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LibRaw/LibRaw/commit/5563e6ddc3f7cb93d98b491194ceebdee7288d36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/advisories/76000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3615-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1268",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-12-13T16:29:00.147",
      "lastModified" : "2024-11-21T03:21:36.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 124743."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10 y 10.5 emplea un hash criptográfico en un sentido contra una entrada que no debería ser reversible, como una contraseña, pero el software tampoco emplea una sal como parte de la entrada. IBM X-Force ID: 124743."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.5",
            "matchCriteriaId" : "CA8ECB1B-0D2A-4821-A11A-D39D156E4021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106339",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124743",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10737077",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10737077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-12-17T07:29:00.233",
      "lastModified" : "2024-11-21T03:19:54.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs."
      }, {
        "lang" : "es",
        "value" : "El informe de errores en Rendertron 1.0.0 permite Cross-Site Scripting (XSS) reflejado desde URL inválidas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:rendertron:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D70E656-EEC7-43B2-8B6B-EB20B7025AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-12-17T07:29:00.327",
      "lastModified" : "2024-11-21T03:19:54.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application."
      }, {
        "lang" : "es",
        "value" : "Rendertron 1.0.0 incluye una ruta _ah/stop para cerrar la instancia de Chrome responsable de servir peticiones render a todos los usuarios. La visita a esta ruta con una petición GET permite que cualquier atacante remoto no autorizado deshabilite el servicio core de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:rendertron:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D70E656-EEC7-43B2-8B6B-EB20B7025AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-12-17T07:29:00.437",
      "lastModified" : "2024-11-21T03:19:54.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker."
      }, {
        "lang" : "es",
        "value" : "Rendertron 1.0.0 permite que protocolos alternativos como \"file://\" que introducen un error LFI (Local File Inclusion) por el que los archivos arbitrarios pueden ser leídos por un atacante remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:rendertron:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D70E656-EEC7-43B2-8B6B-EB20B7025AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-12-17T07:29:00.577",
      "lastModified" : "2024-11-21T03:19:54.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the \"_where\" attribute of package.json files."
      }, {
        "lang" : "es",
        "value" : "Los paquetes instalados se han visto expuestos por node_modules en Rendertron 1.0.0, lo que permite que atacantes remotos lean rutas absolutas en el servidor examinando el atributo \"_where\" de los archivos package.json."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:rendertron:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D70E656-EEC7-43B2-8B6B-EB20B7025AFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=759111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleChrome/rendertron/pull/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1265",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-12-17T16:29:00.370",
      "lastModified" : "2024-11-21T03:21:36.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) techniques. IBM X-Force ID: 124740."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4 y 10.5 no valida, o lo hace incorrectamente, un certificado. Esta debilidad podría permitir que un atacante suplante una entidad de confianza mediante técnicas Man-in-the-Middle (MitM). IBM X-Force ID: 124740."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.5",
            "matchCriteriaId" : "CA8ECB1B-0D2A-4821-A11A-D39D156E4021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106234",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124740",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22014229",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22014229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1272",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-12-17T16:29:00.433",
      "lastModified" : "2024-11-21T03:21:36.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0 y 10.5 almacena información sensible en parámetros de URL. Esto podría llevar a una divulgación de información si partes no autorizadas tienen acceso a las URL mediante registros del servidor, cabeceras referrer o el historial del navegador. IBM X-Force ID: 124747. IBM X-Force ID: 124747."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.5",
            "matchCriteriaId" : "CA8ECB1B-0D2A-4821-A11A-D39D156E4021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106237",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124747",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10731655",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10731655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1597",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2018-12-17T16:29:00.497",
      "lastModified" : "2024-11-21T03:22:07.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610."
      }, {
        "lang" : "es",
        "value" : "IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4 y 10.5 Database Activity Monitor no requiere que los usuarios tengan contraseñas fuertes por defecto, lo que facilita que los atacantes comprometan las cuentas de usuario. IBM X-Force ID: 132610."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_guardium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.5",
            "matchCriteriaId" : "CA8ECB1B-0D2A-4821-A11A-D39D156E4021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106236",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132610",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22014231",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=swg22014231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-12-18T16:29:00.250",
      "lastModified" : "2024-11-21T03:13:58.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de ARM Trusted Firmware hasta e incluyendo la v1.4, la no inicialización del guardado/restauración del registro PMCR_EL0 puede filtrar información segura de tiempo global."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:arm-trusted-firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "5CC2661C-EAFA-4BC4-9501-F6544B1AF31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106271",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9704",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2018-12-20T15:29:00.237",
      "lastModified" : "2024-11-21T03:36:40.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, There is no synchronization between msm_vb2 buffer operations which can lead to use after free."
      }, {
        "lang" : "es",
        "value" : "En todas las distribuciones de Android de CAF (Android for MSM, Firefox OS for MSM y QRD Android) que utilizan el kernel de Linux, no hay sincronización entre las operaciones del búfer msm_vb2, lo que puede conducir a un uso de memoria previamente liberada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2018-12-20T23:29:00.237",
      "lastModified" : "2024-11-21T03:36:43.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host."
      }, {
        "lang" : "es",
        "value" : "La función read_packet en knc (Kerberised NetCat) en versiones anteriores a la 1.11-1 es vulnerable a una denegación de servicio (agotamiento de memoria) que puede explotarse de forma remota sin autenticación y que podría afectar a otros servicios que se ejecutan en el host objetivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure-endpoints:kerberised_netcat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11-1",
            "matchCriteriaId" : "FC734909-600C-43A3-AE43-DE7A0BD8A560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Nov/65",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/irsl/knc-memory-exhaustion/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Nov/65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/irsl/knc-memory-exhaustion/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14808",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.583",
      "lastModified" : "2023-11-07T02:39:13.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14809",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.600",
      "lastModified" : "2023-11-07T02:39:14.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14810",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.617",
      "lastModified" : "2023-11-07T02:39:14.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14811",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.630",
      "lastModified" : "2023-11-07T02:39:14.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14812",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.647",
      "lastModified" : "2023-11-07T02:39:14.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14813",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.647",
      "lastModified" : "2023-11-07T02:39:15.153",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14814",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.663",
      "lastModified" : "2023-11-07T02:39:15.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14815",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.677",
      "lastModified" : "2023-11-07T02:39:15.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14816",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.693",
      "lastModified" : "2023-11-07T02:39:15.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14817",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2019-01-02T19:15:08.707",
      "lastModified" : "2023-11-07T02:39:16.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11004",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.270",
      "lastModified" : "2024-11-21T03:06:56.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Un usuario inseguro podría acceder a determinados registros en snapdragon automobile, snapdragon mobile y en snapdragon wear en sus versiones IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914BF98-E69C-4C8D-8B10-759642ADD7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2118C404-402F-463C-8160-3CC3B703DF30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE3EA03-0373-4FEF-B1FC-123A8073520B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64D3E69-0784-4DEA-96C1-2D41EAFA1906"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CE0F1-29BD-46E1-ACFE-D076192F138E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D205DB4E-68C2-4B13-8373-128870DF83D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2126866-3B02-42B4-A57A-4EFF30848B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832FE19-8D65-4779-B6F5-BD90BD131FD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18141",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.333",
      "lastModified" : "2024-11-21T03:19:26.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "En las versiones IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24 y Snapdragon_High_Med_2016 de Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear, el hecho de cargar un TEE de terceros para el mundo no seguro con el fin de crear una llamada de monitorización segura, la cual concederá a dicho TEE el acceso a funciones privilegiadas, significaba ser solamente accesible desde el TEE."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914BF98-E69C-4C8D-8B10-759642ADD7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2118C404-402F-463C-8160-3CC3B703DF30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE3EA03-0373-4FEF-B1FC-123A8073520B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64D3E69-0784-4DEA-96C1-2D41EAFA1906"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CE0F1-29BD-46E1-ACFE-D076192F138E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D205DB4E-68C2-4B13-8373-128870DF83D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2126866-3B02-42B4-A57A-4EFF30848B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832FE19-8D65-4779-B6F5-BD90BD131FD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18319",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.413",
      "lastModified" : "2024-11-21T03:19:50.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Filtrado de información en los mensajes de depuración de la API UIM en snapdragon mobile y snapdragon wear en sus versiones MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-320"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18320",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.583",
      "lastModified" : "2024-11-21T03:19:51.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130."
      }, {
        "lang" : "es",
        "value" : "Intento de descarga QSEE en un TEE de terceros sin cargar los resultados previamente en un \"data abort\" en snapdragon automobile y snapdragon mobile en sus versiones MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016 y SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE3EA03-0373-4FEF-B1FC-123A8073520B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64D3E69-0784-4DEA-96C1-2D41EAFA1906"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CE0F1-29BD-46E1-ACFE-D076192F138E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D205DB4E-68C2-4B13-8373-128870DF83D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2126866-3B02-42B4-A57A-4EFF30848B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832FE19-8D65-4779-B6F5-BD90BD131FD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFF8872-645F-4A05-BAF9-7797CFBE37C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB91AFF-C149-4F5C-92EC-E78E66935528"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B529780-DB0A-4F9C-AE63-6DEC593B86E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E7360-E8C3-4BB8-A3B6-61BD58AFAF62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49606C5-7306-4F33-864C-C1905594F09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43964AF-7CEC-420A-935B-D3895B2BAC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18321",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.833",
      "lastModified" : "2024-11-21T03:19:51.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM9655, SD 835, SDA660."
      }, {
        "lang" : "es",
        "value" : "Las claves de seguridad utilizadas por el terminal y NW para una sesión podrían filtrarse en snapdragon mobile en sus versiones MDM9650, MDM9655, SD 835 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18322",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.867",
      "lastModified" : "2024-11-21T03:19:51.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Material de clave criptográfica filtrado en los mensajes de depuración de WCDMA en snapdragon mobile y snapdragon wear en sus versiones MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18323",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.897",
      "lastModified" : "2024-11-21T03:19:51.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130."
      }, {
        "lang" : "es",
        "value" : "Material de clave criptográfica filtrado en los mensajes de depuración de TDSCDMA RRC en snapdragon automobile, snapdragon mobile y snapdragon wear en sus versiones MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20 y SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-320"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFF8872-645F-4A05-BAF9-7797CFBE37C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB91AFF-C149-4F5C-92EC-E78E66935528"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B529780-DB0A-4F9C-AE63-6DEC593B86E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E7360-E8C3-4BB8-A3B6-61BD58AFAF62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49606C5-7306-4F33-864C-C1905594F09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43964AF-7CEC-420A-935B-D3895B2BAC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130._firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E426155C-83E0-423E-9C04-BDB26313C4B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130.:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042932FB-BA8F-425B-874E-FCFF7EEE3E99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18324",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.927",
      "lastModified" : "2024-11-21T03:19:51.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SD 855, SDX24, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Material de clave criptográfica filtrado en los mensajes de depuración de GERAN en snapdragon mobile y snapdragon wear en sus versiones MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SD 855, SDX24 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91400943-3D25-4E44-9FFD-9E3076305D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B16867-710D-4748-8636-635E2C6F7389"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18326",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.960",
      "lastModified" : "2024-11-21T03:19:51.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Se imprimen claves criptográficas en los mensajes de depuración de los módems en snapdragon mobile y snapdragon wear en sus versiones MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDA660, SDM630, SDM660 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18327",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:00.990",
      "lastModified" : "2024-11-21T03:19:52.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130."
      }, {
        "lang" : "es",
        "value" : "Se registran claves de seguridad cuando cualquier llamada WCDMA se configura/reconfigura en snapdragon automobile, snapdragon mobile y snapdragon wear en sus versiones MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20 y SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFF8872-645F-4A05-BAF9-7797CFBE37C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB91AFF-C149-4F5C-92EC-E78E66935528"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B529780-DB0A-4F9C-AE63-6DEC593B86E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E7360-E8C3-4BB8-A3B6-61BD58AFAF62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49606C5-7306-4F33-864C-C1905594F09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43964AF-7CEC-420A-935B-D3895B2BAC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18328",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:01.020",
      "lastModified" : "2024-11-21T03:19:52.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 820, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso de memoria previamente liberada en el procesamiento de reglas del cliente en QSH en snapdragon mobile y snapdragon wear en sus versiones MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 820, SD 835, SDA660, SDM630, SDM660 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18329",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:01.067",
      "lastModified" : "2024-11-21T03:19:52.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130"
      }, {
        "lang" : "es",
        "value" : "Posible desbordamiento de búfer durante la trasferencia de un paquete RTP en snapdragon automobile y snapdragon wear en sus versiones MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016 y SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9CA0-59C4-4C7E-8D5E-E0226117C45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467A5C4D-9909-44B5-9D1B-B746902FF094"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFF8872-645F-4A05-BAF9-7797CFBE37C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB91AFF-C149-4F5C-92EC-E78E66935528"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B529780-DB0A-4F9C-AE63-6DEC593B86E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E7360-E8C3-4BB8-A3B6-61BD58AFAF62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49606C5-7306-4F33-864C-C1905594F09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43964AF-7CEC-420A-935B-D3895B2BAC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18330",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-03T15:29:01.117",
      "lastModified" : "2024-11-21T03:19:52.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el cifrado de AES-CCM y AES-GCM mediante el vector de inicialización en snapdragon automobile, snapdragon mobile y snapdragon wear en sus versiones IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914BF98-E69C-4C8D-8B10-759642ADD7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2118C404-402F-463C-8160-3CC3B703DF30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE3EA03-0373-4FEF-B1FC-123A8073520B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64D3E69-0784-4DEA-96C1-2D41EAFA1906"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CE0F1-29BD-46E1-ACFE-D076192F138E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D205DB4E-68C2-4B13-8373-128870DF83D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2126866-3B02-42B4-A57A-4EFF30848B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832FE19-8D65-4779-B6F5-BD90BD131FD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15401",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-01-09T19:29:00.430",
      "lastModified" : "2024-11-21T03:14:38.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un error de corrupción de memoria en WebAssembly podría provocar una lectura fuera de límites hasta V8 de Google Chome, en versiones anteriores a la 62.0.3202.62, permitió que un atacante remoto ejecutara código arbitrario en un sandbox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.62",
            "matchCriteriaId" : "5A8B890B-083C-4977-8C31-AAC2F13E96A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/766260",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/766260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15402",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-01-09T19:29:00.493",
      "lastModified" : "2024-11-21T03:14:38.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La utilización de un identificador que puede ser controlado por un renderizador que permite a cualquier trama sobreescribir el parámetro page_state de cualquier otra trama en el mismo proceso en \"Navigation\" en Google Crome en Chrome OS, en versiones anteriores a la 62.0.3202.74, permitió a un atacante remoto, que había comprometido el proceso del renderizador, realizar un sandbox esape mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.74",
            "matchCriteriaId" : "53FF6039-F9B6-4C98-A6AA-BD2C24895042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACCACAF-7BD6-4C0A-8E6A-67E13D5E341D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/766262",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/766262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15403",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-01-09T19:29:00.540",
      "lastModified" : "2024-11-21T03:14:38.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Validación insuficiente de datos en crosh podría conducir a una inyección de comandos con privilegios de chronos en Networking en Google Chrome, en Chrome OS en versiones anteriores a la 61.0.3163.113, lo que permitía que un atacante local ejecute código arbitrario mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.113",
            "matchCriteriaId" : "A79C7C71-F89D-47B6-B58D-570FA10A5359"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACCACAF-7BD6-4C0A-8E6A-67E13D5E341D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/766271",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/766271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15404",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-01-09T19:29:00.603",
      "lastModified" : "2024-11-21T03:14:38.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una capacidad de procesar volcados de cierre con privilegios de root y la gestión incorrecta de symlinks inapropriados podría provocar una escalación de privilegios en Crash Reporting en Google Chrome en Chrome OS, en versiones anteriores a 61.0.3163.113, permitió a un atacante local realizar el escalado de privilegios mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.113",
            "matchCriteriaId" : "A79C7C71-F89D-47B6-B58D-570FA10A5359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/766275",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/766275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15405",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-01-09T19:29:00.917",
      "lastModified" : "2024-11-21T03:14:38.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root privileges in cryptohomed in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La gestión de symlink inapropiada y una condición de carrera en la implementación de la funcionalidad de recuperación de estado podría provocar una persistencia establecida por código malicioso que se ejecuta con privilegios root en cryptohomed en Google Chrome en Chroms OS, en sus versiones anteriores a la 61.0.3163.113, permitió a un atacante local ejecutar código arbitrario mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.0.3163.113",
            "matchCriteriaId" : "A79C7C71-F89D-47B6-B58D-570FA10A5359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/766276",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/766276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15428",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-01-09T19:29:01.573",
      "lastModified" : "2024-11-21T03:14:40.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una validación de datos insuficiente en V8 builtins string generator podría provocar un acceso de lectura y escritura hasta V8 en Google Chome, en versiones anteriores a la 62.0.3202.94, permitió que un atacante remoto ejecutara código arbitrario en un sandbox mediante una página HTML manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.0.3202.94",
            "matchCriteriaId" : "47B013C1-2115-4EEC-BD92-52EB5434FCFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/782145",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop_13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/782145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3718",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2019-01-10T20:29:00.237",
      "lastModified" : "2024-11-21T03:26:01.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access."
      }, {
        "lang" : "es",
        "value" : "La configuración incorrecta de las opciones del dispositivo en el firmware del sistema para los kits Intel(R) NUC podría permitir que un usuario privilegiado pueda habilitar el escalado de privilegios mediante acceso físico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:nuc_kit_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AA56A6-EB26-4A62-83EC-6961BC24D4DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_d33217gke:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BFB59F-D932-43E5-9A41-3AE3A9047DCE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_d53427rke:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412647D8-EA12-4EE6-A2D3-71DDFD963BF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_d54250wyb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DB94BE-7F38-4029-954E-EFE1AC614798"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_de3815tybe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83FBC94-6D65-4A44-992D-2A5AECC59E49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_dn2820fykh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738AD9B2-1055-42D0-8D16-205340BE3BE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc5cpyh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB62714-4F2E-4980-9898-BBC4B06085F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc5i3myhe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B8B238-D4DA-40A8-92CD-42B0EB6B1E2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc5i5myhe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5226BE-680C-4915-AB23-EABC588DCC0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc5i7ryh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D56B57-D4CD-47E9-AE86-B1307D3609B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc5pgyh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9ED06A8-FABF-431E-A5F4-F1B50E1F51B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc6cays:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A261B82-5F54-4556-B1D1-53F0CFDF1830"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc6i5syh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3892CA36-86BF-4861-8C32-657212EABC92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc6i7kyk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC80B8F-D912-40D3-90AF-00DDF6A91AED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc7cjyh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573F0989-6A34-4595-A298-EA1B88C61BD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3143ABA5-9741-4CD2-AB9A-A7600EA6E32F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF7E820-8567-4E9A-8247-5E1665FFF8BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc7i7bnh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DE3105-8418-4CA3-80B0-5EE4E394D58F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFDFEB2-B10D-489E-B51C-10FA84E65858"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:nuc_kit_nuc8i7hnk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "244CD6EC-780A-405E-8CFA-666A666FF7D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:compute_card_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F811493-1AB4-47BC-B942-2E93A7349843"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_card_cd1iv128mk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEA643F-FE21-45B0-AC74-D87D7D864D10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_card_cd1m3128mk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FA6131-F3C8-4B98-B4E8-C320C262F750"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_card_cd1p64gk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3D93D1-5772-4806-9428-9AB26B32D210"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:compute_stick_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202B4308-A49D-487D-A04D-FE34235F61C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_stick_stck1a32wfc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E453448C-AA11-48E3-8423-60E62A10D0CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_stick_stk1aw32sc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8B7517-4313-4DA8-953E-B36279157FC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_stick_stk2m3w64cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A90BE5-6136-43A9-BC91-9474D3D0EEF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_stick_stk2mv64cc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0C9D80-37A3-43E5-B818-55532F613436"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002152",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2019-01-10T21:29:00.220",
      "lastModified" : "2024-11-21T03:04:59.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles."
      }, {
        "lang" : "es",
        "value" : "Bodhi, en versiones 2.9.0 e inferiores, es vulnerable a Cross-Site Scripting (XSS), lo que resulta en la inyección de código provocada por la validación incorrecta de títulos de error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:bodhi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "F9A4DD02-BC9C-4FCB-A583-59421CCEDD04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fedora-infra/bodhi/issues/1740",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/fedora-infra/bodhi/issues/1740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002157",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2019-01-10T21:29:00.267",
      "lastModified" : "2024-11-21T03:04:59.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "modulemd, en versiones 1.3.1 y anteriores, emplea una función insegura para el procesamiento de datos proporcionados externamente, lo que conduce a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-242"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:modulemd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "F51B1F26-D5C6-4A35-8F8C-210C7FA86A71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pagure.io/modulemd/issue/55",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://pagure.io/modulemd/issue/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13886",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-01-11T18:29:00.577",
      "lastModified" : "2024-11-21T03:11:51.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions."
      }, {
        "lang" : "es",
        "value" : "En macOS High Sierra en versiones anteriores a la 10.13.2, existía un problema de accesos con la configuración privilegiada del sistema Wi-Fi. Este problema se abordó mediante restricciones adicionales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13887",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-01-11T18:29:00.610",
      "lastModified" : "2024-11-21T03:11:51.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addressed with improved state management."
      }, {
        "lang" : "es",
        "value" : "En macOS High Sierra en versiones anteriores a la 10.13.2, existía un problema de lógica en APFS al eliminar claves durante la hibernación. Esto fue abordado con la mejora de la gestión de estados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-320"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13888",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-01-11T18:29:00.640",
      "lastModified" : "2024-11-21T03:11:51.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In iOS before 11.2, a type confusion issue was addressed with improved memory handling."
      }, {
        "lang" : "es",
        "value" : "En iOS en versiones anteriores a la 11.2, se abordó un problema de confusión de tipos con la mejora de la gestión de memoria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13889",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-01-11T18:29:00.687",
      "lastModified" : "2024-11-21T03:11:51.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the validation of credentials. This was addressed with improved credential validation."
      }, {
        "lang" : "es",
        "value" : "En macOS High Sierra en versiones anteriores a la 10.13.3, la actualización de seguridad (Security Update) 2018-001 Sierra y el Security Update 2018-001 El Capitan, existía un error de lógica en la validación de credenciales. Esto fue abordado con la mejora de la validación de credenciales."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.13.0",
            "versionEndExcluding" : "10.13.3",
            "matchCriteriaId" : "538E0411-C102-4DE8-856B-F16F3ABDEC3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208465",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13891",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-01-11T18:29:00.737",
      "lastModified" : "2024-11-21T03:11:51.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management."
      }, {
        "lang" : "es",
        "value" : "En iOS en versiones anteriores a la 11.2, se abordó un problema de interfaz de usuario inconsistente mediante la mejora de la gestión de estados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2411",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-01-11T18:29:00.797",
      "lastModified" : "2024-11-21T03:23:28.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates."
      }, {
        "lang" : "es",
        "value" : "En iOS en versiones anteriores a la 11.2, los tipos de cambio se recuperaron de HTTP en lugar de HTTPS. Esto se abordó habilitando HTTPS para los tipos de cambio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-01-15T16:29:00.257",
      "lastModified" : "2024-11-21T03:19:55.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager privileges. The attacker then constructs a specifically crafted string that will turn into a PHP object injection involving the includes/shortcodes/class-wc-shortcode-products.php WC_Shortcode_Products::get_products() use of cached queries within shortcodes."
      }, {
        "lang" : "es",
        "value" : "En el plugin Automattic WooCommerce en versiones anteriores a la 3.2.4 para WordPress, es posible realizar un ataque tras obtener acceso al sitio objetivo con una cuenta de usuario que tiene, al menos, privilegios de gerente de tienda. El atacante construye una cadena especialmente manipulada que se convertirá en una inyección de objetos PHP relacionada con el uso de consultas en caché en códigos cortos en WC_Shortcode_Products::get_products(), en includes/shortcodes/class-wc-shortcode-products.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woocommerce:woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "186F1844-20C8-4475-B801-D713E2FEE425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ripstech.com/2018/woocommerce-php-object-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://woocommerce.wordpress.com/2017/11/16/woocommerce-3-2-4-security-fix-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://blog.ripstech.com/2018/woocommerce-php-object-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://woocommerce.wordpress.com/2017/11/16/woocommerce-3-2-4-security-fix-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-01-15T16:29:00.320",
      "lastModified" : "2024-11-21T03:19:55.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object."
      }, {
        "lang" : "es",
        "value" : "Shopware en versiones anteriores a la 5.3.4 tiene un problema de instanciación de objetos PHP mediante el parámetro sort en el método loadPreviewAction() del controlador Shopware_Controllers_Backend_ProductStream, con XEE (XML External Entity) resultante mediante la instanciación de un objeto SimpleXMLElement."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "6E668232-7609-4B68-9D51-E4070D957EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/152995/Shopware-createInstanceFromNamedArguments-PHP-Object-Instantiation.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.ripstech.com/2017/shopware-php-object-instantiation-to-blind-xxe/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://demo.ripstech.com/projects/shopware_5.3.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/152995/Shopware-createInstanceFromNamedArguments-PHP-Object-Instantiation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.ripstech.com/2017/shopware-php-object-instantiation-to-blind-xxe/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://demo.ripstech.com/projects/shopware_5.3.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-01-15T16:29:00.383",
      "lastModified" : "2024-11-21T03:19:55.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel."
      }, {
        "lang" : "es",
        "value" : "LimeSurvey en versiones anteriores a la 2.72.4 tiene Cross-Site Scripting (XSS) persistente mediante el uso de la característica \"Continue Later\" (también conocida como \"Resume later\") para introducir una dirección de correo electrónico, que se gestiona de manera incorrecta en el panel de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.72.4",
            "matchCriteriaId" : "56AE5B70-097C-4DF2-A709-FEF829B35F7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LimeSurvey/LimeSurvey/commit/700b20e2ae918550bfbf283f433f07622480978b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LimeSurvey/LimeSurvey/commit/700b20e2ae918550bfbf283f433f07622480978b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6925",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2019-01-15T17:29:00.210",
      "lastModified" : "2024-11-21T03:30:49.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affects entities that do not use or do not have UUIDs, and entities that have different access restrictions on different revisions of the same entity."
      }, {
        "lang" : "es",
        "value" : "En versiones de Drupal 8 core anteriores a la 8.3.7, hay una vulnerabilidad en el sistema de acceso de entidades que podría permitir el acceso no deseado para visualizar, crear, actualizar o eliminar entidades. Esto solo afecta a las entidades que no emplean o no poseen UUID, así como a las entidades que tienen diferentes restricciones de acceso en diferentes revisiones de la misma entidad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.3.7",
            "matchCriteriaId" : "3FBCD6DA-4FA4-449D-BF4F-4B24C9E4AFA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100368",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039200",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6924",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2019-01-15T20:29:00.237",
      "lastModified" : "2024-11-21T03:30:49.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST that are approved even if the user does not have permission to post approved comments. This issue only affects sites that have the RESTful Web Services (rest) module enabled, the comment entity REST resource enabled, and where an attacker can access a user account on the site with permissions to post comments, or where anonymous users can post comments."
      }, {
        "lang" : "es",
        "value" : "Al emplear la API REST en Drupal 8, en versiones anteriores a la 8.3.4, los usuarios que carezcan del permiso correcto pueden publicar comentarios mediante REST que están aprobados incluso aunque dicho usuario no tenga permiso para publicar comentarios aprobados. Este problema solo afecta a sitios que tengan el módulo RESTful Web Services (rest) habilitado, el recurso REST de comentario habilitado y si un atacante puede acceder a una cuenta de usuario en el sitio con permisos para publicar comentarios (o donde los usuarios anónimos puedan publicar comentarios)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.3.7",
            "matchCriteriaId" : "3FBCD6DA-4FA4-449D-BF4F-4B24C9E4AFA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100368",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039200",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6921",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2019-01-15T21:29:00.243",
      "lastModified" : "2024-11-21T03:30:48.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource."
      }, {
        "lang" : "es",
        "value" : "En Drupal 8, en versiones anteriores a la 8.3.4, el recurso de archivo REST no valida correctamente algunos campos al manipular archivos. Un sitio solo se ve afectado por esto si tiene el módulo RESTful Web Services (rest) habilitado, el recurso de archivo REST habilitado, permite peticiones PATCH, y un atacante es capaz de obtener o registrar una cuenta de usuario en el sitio con permisos para subir archivos y modificar el recurso de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.3.4",
            "matchCriteriaId" : "B0C572FD-C76D-4714-85A3-5CFF9F292C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99222",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038781",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3135",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.283",
      "lastModified" : "2024-11-21T03:24:54.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1."
      }, {
        "lang" : "es",
        "value" : "En ciertas condiciones, al emplear DNS64 y RPZ para rescribir respuestas a consultas, el procesamiento de consultas puede continuar de forma inconsistente, lo que puede conducir a un fallo de aserción de INSIST o a un intento para leer a través de un puntero NULL. Afecta a BIND en su versión 9.8.8, desde la versión 9.9.3-S1 hasta la 9.9.9-S7, desde la versión 9.9.3 hasta la 9.9.9-P5, la versión 9.9.10b1, desde la versión 9.10.0 hasta la 9.10.4-P5, la versión 9.10.5b1, desde la versión 9.11.0 hasta la 9.11.0-P2 y a la versión 9.11.1b1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BE793-7717-4019-8F50-158C309E48B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC182A9-5989-4A87-A3BA-F1CFAEDC95E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF19353-E509-4864-ADDD-39F3012A262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "012A3C08-2A0F-4168-9DE0-F609707E4C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7132A53F-7DF2-4B79-AC86-75A0C73843B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8F0163-FF32-44E0-B05C-F89263CD56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92ECA27E-4248-49BD-A84C-4854CCA19AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2D2132-62E8-4E73-A0BF-4790DAFC5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "E253BD9F-25B8-42E7-BEAB-E843381ED155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5E42E5-27C6-4D6F-B7DC-903B10BF2017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "7E211374-A4F5-41D4-A89E-E6522E9D0DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "21CC7BA7-6D75-4561-ACF3-F1F61A0CBA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "278142AB-9CE9-4DAC-A0C5-A3E05A715829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3160C5ED-75EA-47B2-998E-EDFC46B37DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "086C327B-DF9F-4D4E-A538-1E29FEDC34C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "1440B408-76B6-4FA7-899D-E28049A37704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6ED392-74B9-487E-83B0-ECAAEEAB3AB3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E902EEC6-9A41-4FBC-8D81-891DF846A5CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0276.html",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96150",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037801",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01453",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180926-0005/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3795",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/96150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1037801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180926-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3136",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.313",
      "lastModified" : "2024-11-21T03:24:54.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8."
      }, {
        "lang" : "es",
        "value" : "Una consulta con un conjunto determinado de características podría provocar que un servidor que emplea DNS64 se encuentre con un fallo de aserción y termine. Un atacante podría construir deliberadamente una consulta, habilitando una denegación de servicio (DoS) contra un servidor si está configurado para emplear la característica DNS64 y se cumplen otras precondiciones. Afecta a BIND desde la versión 9.8.0 hasta la9.8.8-P1, desde la versión 9.9.0 hasta la 9.9.9-P6, desde la versión 9.9.10b1 hasta la 9.9.10rc1, desde la versión 9.10.0 hasta la 9.10.4-P6, desde la versión 9.10.5b1 hasta la 9.10.5rc1, desde la versión 9.11.0 hasta la 9.11.0-P3, desde la versión 9.11.1b1 hasta la 9.11.1rc1 y desde la versión 9.9.3-S1 hasta 9.9.9-S8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.8.0",
            "versionEndIncluding" : "9.8.8",
            "matchCriteriaId" : "6BCD9327-F097-49B8-BEFF-07785EE8BB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9.0",
            "versionEndIncluding" : "9.9.9",
            "matchCriteriaId" : "4418EDD7-AC58-48A3-BE65-273C0E8222E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.0",
            "versionEndIncluding" : "9.10.4",
            "matchCriteriaId" : "C1DE78F6-B88E-44A7-BECD-B78B7E9052C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.8.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "25855A5C-302F-4A82-AEC1-8C4C9CB70362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "86C1A668-D648-4E72-876B-E72D341003D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFD0CE9-FE4D-4FB3-9486-36FA1A4FADF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E134536A-0F48-4F54-8399-5EF4C09BFF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "63C9ED44-1207-4BE6-B5BB-56D198DC0C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "561BF14D-8D6A-4DDB-82BB-6B8EBF34C326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "931DBFCE-F071-490F-867F-52A150DBD245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BE793-7717-4019-8F50-158C309E48B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC182A9-5989-4A87-A3BA-F1CFAEDC95E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8F0163-FF32-44E0-B05C-F89263CD56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "94C0C9FC-5CCF-4AD7-8D83-7B579102F7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2D2132-62E8-4E73-A0BF-4790DAFC5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "E253BD9F-25B8-42E7-BEAB-E843381ED155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5E42E5-27C6-4D6F-B7DC-903B10BF2017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "7E211374-A4F5-41D4-A89E-E6522E9D0DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "21CC7BA7-6D75-4561-ACF3-F1F61A0CBA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "70586A2A-AA52-48F5-B2B0-390CA77807E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5A0370-9490-40CC-84E8-EEE95A6F233B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC78396-4667-4A45-8DBD-0D0C2AAE1549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3160C5ED-75EA-47B2-998E-EDFC46B37DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "086C327B-DF9F-4D4E-A538-1E29FEDC34C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "1440B408-76B6-4FA7-899D-E28049A37704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "4D50373F-C1C4-4EC9-B94F-854C3444717D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6ED392-74B9-487E-83B0-ECAAEEAB3AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA791E2-27E0-49C5-9823-0C57647C788F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/97653",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038259",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1095",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1105",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01465",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180802-0002/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3854",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/97653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180802-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3137",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.377",
      "lastModified" : "2024-11-21T03:24:54.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8."
      }, {
        "lang" : "es",
        "value" : "Las asunciones equivocadas sobre el orden de los registros en la sección de respuesta de una respuesta que contiene registros de recursos CNAME o DNAME podría conducir a una situación en la que named se cerraría con un fallo de aserción al procesar una respuesta en la que los registros ocurrieron en un orden inusual. Afecta a BIND en versiones 9.9.9-P6, desde la versión 9.9.10b1 hasta la 9.9.10rc1, la versión 9.10.4-P6, desde la versión 9.10.5b1 hasta la 9.10.5rc1, la versión 9.11.0-P3, desde la versión 9.11.1b1 hasta la 9.11.1rc1 y en la versión 9.9.9-S8."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDE2752-E5CD-4AE6-A404-2C209F942B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:s8:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE9D5AE-65D4-4744-9789-09AE3B1F4BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8F0163-FF32-44E0-B05C-F89263CD56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "94C0C9FC-5CCF-4AD7-8D83-7B579102F7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "70586A2A-AA52-48F5-B2B0-390CA77807E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5A0370-9490-40CC-84E8-EEE95A6F233B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC78396-4667-4A45-8DBD-0D0C2AAE1549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "4D50373F-C1C4-4EC9-B94F-854C3444717D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "A923D26C-3BE1-492E-99CF-1BB14D8A6388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA791E2-27E0-49C5-9823-0C57647C788F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D0378-F0F4-4AAA-80AF-8287C790EC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF83BB87-B203-48F9-9D06-48A5FE399050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E6D998-B41D-4B49-9E00-8336D2E40A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81647C-9A53-481D-A54C-36770A093F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B067C7-735E-43C9-9188-7E1522A02491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E02156-E748-4820-B76F-7074793837E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97651",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038258",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040195",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1095",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1105",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1582",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1583",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01466",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180802-0002/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3854",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180802-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3138",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.407",
      "lastModified" : "2024-11-21T03:24:54.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9."
      }, {
        "lang" : "es",
        "value" : "named contiene una característica que permite que los operadores envíe comandos a un servidor en ejecución comunicándose con el proceso del servidor mediante un canal de control utilizando un programa como rndc.  Una regresión empleada en un cambio de características reciente ha creado una situación en la cual algunas versiones de named pueden cerrarse con un error de aserción de REQUIRE si se le envía una cadena de comandos null. Afecta a BIND desde la versión 9.9.9 hasta la 9.9.9-P7, desde la versión 9.9.10b1 hasta la 9.9.10rc2, desde la versión 9.10.4 hasta la 9.10.4-P7, desde la versión 9.10.5b1 hasta la 9.10.5rc2, desde la versión 9.10.5b1 hasta la 9.10.5rc2, desde la versión 9.11.0 hasta la 9.11.0-P4, desde la versión 9.11.1b1 hasta la 9.11.1rc2 y desde la versión 9.9.9-S1 hasta 9.9.9-S9."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECB4D34-0D20-46C5-A389-0296EF60E795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "376915CA-6BDB-423E-B216-64B098344DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "03215B90-9860-4CB4-B7D2-3DF045B129EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "88335D70-E98B-469E-A2E7-1958EB5F10DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "795DA9EE-489D-402E-8427-C9E3650BA1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "012A3C08-2A0F-4168-9DE0-F609707E4C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDE2752-E5CD-4AE6-A404-2C209F942B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "0387826C-AE6B-44C8-9888-4088CF66D78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21FBF6B7-BA47-46AC-B7EB-3A3A2E985BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.9:s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7132A53F-7DF2-4B79-AC86-75A0C73843B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8F0163-FF32-44E0-B05C-F89263CD56A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "94C0C9FC-5CCF-4AD7-8D83-7B579102F7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF50431-599D-40DD-A2B3-30A6D5652FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E76DCB3-8063-415D-A774-9191E69E6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2D2132-62E8-4E73-A0BF-4790DAFC5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "E253BD9F-25B8-42E7-BEAB-E843381ED155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5E42E5-27C6-4D6F-B7DC-903B10BF2017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "7E211374-A4F5-41D4-A89E-E6522E9D0DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "21CC7BA7-6D75-4561-ACF3-F1F61A0CBA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "70586A2A-AA52-48F5-B2B0-390CA77807E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.4:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "060E10B1-5501-4BD0-A148-B04C56D499F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5A0370-9490-40CC-84E8-EEE95A6F233B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC78396-4667-4A45-8DBD-0D0C2AAE1549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD813E5-0C4A-4B55-A1B9-9C5C6C2504D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3160C5ED-75EA-47B2-998E-EDFC46B37DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "086C327B-DF9F-4D4E-A538-1E29FEDC34C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "1440B408-76B6-4FA7-899D-E28049A37704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "4D50373F-C1C4-4EC9-B94F-854C3444717D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "6658F26D-C088-4470-8AFD-58BB54201C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "A923D26C-3BE1-492E-99CF-1BB14D8A6388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA791E2-27E0-49C5-9823-0C57647C788F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E654717-4EF6-4397-A637-A9789CD5D1D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/97657",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038260",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01471",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180802-0002/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3854",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/97657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180802-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3140",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.457",
      "lastModified" : "2024-11-21T03:24:55.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1."
      }, {
        "lang" : "es",
        "value" : "Si named está configurado para que emplee RPZ (Response Policy Zones), un error a a hora de procesar algunos tipos de regla puede conducir a una condición en la que BIND entrará en un bucle infinito al manejar una consulta. Afecta a BIND en la versión 9.9.10, 9.10.5, desde la versión 9.11.0 hasta la 9.11.1 y en las versiones  9.9.10-S1 y 9.10.5-S1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0",
            "versionEndIncluding" : "9.11.1",
            "matchCriteriaId" : "A8E6E2D9-E137-498C-B175-1CA268B6E551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64173CC-F89B-4276-8E33-525CC89A22A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "96715BE6-F6C4-4A9E-85F2-4E53FE740776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30ACDFC4-CD8D-4B89-B6C8-8466174B3D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6F259-EB06-4F31-9F68-A76F257756DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DF4B3F-4BBC-42B7-B729-096934523D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99088",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038692",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01495",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180926-0001/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180926-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3141",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.503",
      "lastModified" : "2024-11-21T03:24:55.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1."
      }, {
        "lang" : "es",
        "value" : "El instalador de BIND en Windows emplea una ruta de servicio sin entrecomillar que puede permitir que un usuario local logre escalar privilegios si los permisos del sistema host de archivos lo permiten.  Afecta a BIND desde la versión 9.2.6-P2 hasta la 9.2.9, desde la 9.3.2-P1 hasta la 9.3.6, desde la 9.4.0 hasta la 9.8.8, desde la 9.9.0 hasta la 9.9.10, desde la 9.10.0 hasta la 9.10.5, desde la 9.11.0 hasta la 9.11.1, desde la 9.9.3-S1 hasta la 9.9.10-S1 y en la versión 9.10.5-S1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.6",
            "versionEndIncluding" : "9.2.9",
            "matchCriteriaId" : "880FF52C-CE36-4DE2-8FF7-8FEFCA53854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.2",
            "versionEndIncluding" : "9.3.6",
            "matchCriteriaId" : "6756023D-C9EF-460D-A498-F9A3238B3570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndIncluding" : "9.8.8",
            "matchCriteriaId" : "343E9DD3-BBEA-4385-9A8E-0675BE74EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9.0",
            "versionEndIncluding" : "9.9.10",
            "matchCriteriaId" : "4D75A16E-2EB4-4A10-9B63-AC04755AC1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.0",
            "versionEndIncluding" : "9.10.5",
            "matchCriteriaId" : "E8039263-E38B-40B2-B3AA-3673C0DD8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0",
            "versionEndIncluding" : "9.11.1",
            "matchCriteriaId" : "A8E6E2D9-E137-498C-B175-1CA268B6E551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.6:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "16C74641-25F0-42CD-9523-5E026CCB716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC920B0-8C10-4C41-9AAD-C42AA4DF8368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99089",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038693",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01496",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180926-0001/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42121/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/201708-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180926-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42121/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3142",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.550",
      "lastModified" : "2024-11-21T03:24:55.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2."
      }, {
        "lang" : "es",
        "value" : "Un atacante que pueda enviar y recibir mensajes a un servidor DNS autoritativo y que conozca un nombre de clave TSIG válido podría ser capaz de omitir la autenticación TSIG de las peticiones AXFE mediante un paquete de petición cuidadosamente construido. Un servidor que solo depende de las claves TSIG para protegerse sin ningún otro mecanismo de protección de listas de control de acceso podría manipularse para: proporcionar el AXFR de una zona a un destinatario no autorizado o aceptar paquetes NOTIFY falsos. Afecta a BIND desde la versión 9.4.0 hasta la versión 9.8.8, desde la versión 9.9.0 hasta la versión 9.9.10-P1, desde la versión 9.10.0 hasta la versión 9.10.5-P1, desde la versión 9.11.0 hasta la versión 9.11.1-P1, desde la versión 9.9.3-S1 hasta la versión 9.9.10-S2 y desde la versión 9.10.5-S1 hasta la versión 9.10.5-S2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndIncluding" : "9.8.8",
            "matchCriteriaId" : "343E9DD3-BBEA-4385-9A8E-0675BE74EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9.0",
            "versionEndIncluding" : "9.9.10",
            "matchCriteriaId" : "4D75A16E-2EB4-4A10-9B63-AC04755AC1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.0",
            "versionEndIncluding" : "9.10.5",
            "matchCriteriaId" : "E8039263-E38B-40B2-B3AA-3673C0DD8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0",
            "versionEndIncluding" : "9.11.1",
            "matchCriteriaId" : "A8E6E2D9-E137-498C-B175-1CA268B6E551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "86C1A668-D648-4E72-876B-E72D341003D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC182A9-5989-4A87-A3BA-F1CFAEDC95E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19F83C65-E07D-4057-B2DB-9906993C2F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAAAEEE-999C-4334-85BC-8BC8BAE99930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6F259-EB06-4F31-9F68-A76F257756DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D1ED1A-ECD7-4068-B630-43A7646C97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "83B24247-3BEE-4338-9750-8B6DE27301E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99339",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038809",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1679",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1680",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01504",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190830-0003/",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3904",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190830-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3143",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.580",
      "lastModified" : "2024-11-21T03:24:55.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2."
      }, {
        "lang" : "es",
        "value" : "Un atacante que pueda enviar y recibir mensajes a un servidor DNS autoritativo y que conozca un nombre de clave TSIG válido para la zona y el servicio objetivos podría ser capaz de manipular BIND para que acepte una actualización dinámica no autorizada. Afecta a BIND desde la versión 9.4.0 hasta la versión 9.8.8, desde la versión 9.9.0 hasta la versión 9.9.10-P1, desde la versión 9.10.0 hasta la versión 9.10.5-P1, desde la versión 9.11.0 hasta la versión 9.11.1-P1, desde la versión 9.9.3-S1 hasta la versión 9.9.10-S2 y desde la versión 9.10.5-S1 hasta la versión 9.10.5-S2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndIncluding" : "9.8.8",
            "matchCriteriaId" : "343E9DD3-BBEA-4385-9A8E-0675BE74EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9.0",
            "versionEndIncluding" : "9.9.10",
            "matchCriteriaId" : "4D75A16E-2EB4-4A10-9B63-AC04755AC1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.0",
            "versionEndIncluding" : "9.10.5",
            "matchCriteriaId" : "E8039263-E38B-40B2-B3AA-3673C0DD8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0",
            "versionEndIncluding" : "9.11.1",
            "matchCriteriaId" : "A8E6E2D9-E137-498C-B175-1CA268B6E551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "86C1A668-D648-4E72-876B-E72D341003D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC182A9-5989-4A87-A3BA-F1CFAEDC95E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.10:s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19F83C65-E07D-4057-B2DB-9906993C2F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAAAEEE-999C-4334-85BC-8BC8BAE99930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6F259-EB06-4F31-9F68-A76F257756DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D1ED1A-ECD7-4068-B630-43A7646C97CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "83B24247-3BEE-4338-9750-8B6DE27301E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99337",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038809",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1679",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1680",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01503",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190830-0003/",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3904",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2017:1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190830-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3144",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.627",
      "lastModified" : "2024-11-21T03:24:55.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad derivada del error al limpiar correctamente las conexiones OMAPI cerradas puede conducir al agotamiento del grupo de descriptores del socket disponibles para el servidor DHCP. Afecta a ISC DHCP desde la versión 4.1.0 hasta la 4.1-ESV-R15, desde la versión 4.2.0 hasta la 4.2.8 y desde la versión 4.3.0 hasta la 4.3.6. Las versiones anteriores podrían hacerse visto afectadas, pero han sobrepasado por mucho su fin de vida útil. Las versiones anteriores a la 4.1.0 no han sido probadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "4.2.8",
            "matchCriteriaId" : "3B88B6F8-3F13-4984-BBCF-F79BE911F15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndIncluding" : "4.3.6",
            "matchCriteriaId" : "ADAC6E78-8F98-42C3-BE19-276826F84752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F27D0660-2F07-430B-A651-5D0B6AA763C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAABA4E-0D34-4644-AC26-E272CEE6C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "179443DC-4B6A-408A-8BE5-B3E72188F43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BE7736-58CD-468B-84AB-B38C9B254BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB6F7F0-B2A0-47E3-AD7A-4E7618A36F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF80D19-3B0A-4A74-944E-F33CCC30EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "40B21FCB-43A8-4266-934D-ECFF8138F637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "69D49F23-9074-49E7-985F-4D93393324CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F729D1D-7234-4BC2-839B-AE1BB9D16C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA64EEC-C0C7-4F11-8131-2868691E54DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "157520D7-AE39-4E23-A8CF-DD75EA78C055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B07118EC-9508-42B8-8D09-5CE310DA2B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
            "matchCriteriaId" : "A157E664-6ACE-44CE-AC07-64898B182EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "0056BF7A-4A70-4F1D-89C2-25CCDB65217B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
            "matchCriteriaId" : "1D21F05D-246F-41F5-81FD-286C26168E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "12103C87-C942-481A-A68C-7BC83F964C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
            "matchCriteriaId" : "924E91FF-495F-4963-827F-57F7340C6560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E2FFC7-6E73-463E-846C-C403E41A2022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D08285-745D-40AB-9A78-F467712CDA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1D115F1F-1A3A-4924-AF10-723B3BB0CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "E84D5E5B-0336-4166-AAAC-49375E3AF971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "09561C97-563C-4DDC-9EE4-E83EFFD467D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "519CF0CC-FB12-4C68-88A0-E0E15738C620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB131E-32E5-458F-8DDA-48835D2D883F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "69F6E619-A52B-4A60-8247-41ADD0E7D655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "AA48EBAA-10B7-43D6-9A27-99F2578DF7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "20040BB3-F157-4505-BB60-0D919A7D1436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "974A8587-8351-490A-82D9-B541862CA4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "7DABD43E-818A-4B21-B4E7-753056D4A184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE991D0E-2E2D-4844-9BBD-235D8BC5FB7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "975EF88C-988F-40A6-B7D1-D27439144CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B46352-9D4D-4C74-876F-3685016025CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9070C9D8-A14A-467F-8253-33B966C16886"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102726",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040194",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0158",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01541",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3586-1/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4133",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3586-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3145",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-01-16T20:29:00.690",
      "lastModified" : "2024-11-21T03:24:55.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1."
      }, {
        "lang" : "es",
        "value" : "BIND secuenciaba incorrectamente las operaciones de limpieza en contextos fetch de recursión ascendente, lo que conduce en algunos casos a un error de uso de memoria previamente liberada que puede desencadenar un fallo de aserción y un cierre inesperado en named. Afecta a BIND desde la versión 9.0.0 hasta la versión 9.8.x, desde la versión 9.9.0 hasta la versión 9.9.11, desde la versión 9.10.0 hasta la versión 9.10.6, desde la versión 9.11.0 hasta la versión 9.11.2, desde la versión 9.9.3-S1 hasta la versión 09.9.11-S1, desde la versión 9.10.5-S1 hasta la versión 9.10.6-S1 y desde la 9.12.0a1 hasta la 9.12.0rc1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndIncluding" : "9.8.8",
            "matchCriteriaId" : "343E9DD3-BBEA-4385-9A8E-0675BE74EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9.0",
            "versionEndIncluding" : "9.9.11",
            "matchCriteriaId" : "6EFFE58B-0BAE-43FF-94BD-F03D0FC31BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.0",
            "versionEndIncluding" : "9.10.6",
            "matchCriteriaId" : "DD179483-9754-4498-AE38-4CF1EB8F4063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0",
            "versionEndIncluding" : "9.11.2",
            "matchCriteriaId" : "8E5186B7-78C5-486D-97D7-E64B9709ED65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC182A9-5989-4A87-A3BA-F1CFAEDC95E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.11:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9BC3D9-B2F6-4995-A757-E1BB68BC7F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6F259-EB06-4F31-9F68-A76F257756DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.6:s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6C3FDB-B57C-4DF5-AFDB-EEF17F5DAE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.12.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "646FE55D-D8DF-483E-8DBE-65FB8A3FC18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.12.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1653E806-4F31-4ACA-B51F-5F0067D99208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.12.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5AB236-CBDE-48F3-B6E1-5C6B08996ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F57F84D2-76D0-42B9-BA61-96204F527B7A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBCD86A-E6C7-4444-9D74-F861084090F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF83BB87-B203-48F9-9D06-48A5FE399050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E6D998-B41D-4B49-9E00-8336D2E40A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81647C-9A53-481D-A54C-36770A093F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E02156-E748-4820-B76F-7074793837E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6755B6AD-0422-467B-8115-34A60B1D1A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.1x46-d76:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A2BAF7-8D71-474C-9F72-FF5DABC69749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48-d70:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB0418C-F53F-4CA9-9AC3-4735A06B19C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d140:-:*:*:*:*:*:*",
            "matchCriteriaId" : "63C3C7CE-3877-462F-ACAE-61E196D6F1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4r2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8F91A3-DAC7-42E7-8722-17C57115F9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1r2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E33DCDB7-DE93-406F-AF78-BD3D9E8D4E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2r1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F40716-E190-4C67-BCF8-831069B95398"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/102716",
        "source" : "security-officer@isc.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040195",
        "source" : "security-officer@isc.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0101",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0102",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0487",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0488",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01542",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00029.html",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0003/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4089",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/102716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1040195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2018:0488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/docs/aa-01542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/01/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20180117-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2018/dsa-4089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17197",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-01-16T21:15:07.950",
      "lastModified" : "2023-11-07T02:41:14.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18160",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-18T22:29:00.253",
      "lastModified" : "2024-11-21T03:19:28.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850"
      }, {
        "lang" : "es",
        "value" : "Fallo de sesión AGPS en el módulo GNSS debido a que los conjuntos de cifrado están embebidos y que cada vez necesitaban ser actualizados manualmente en snapdragon mobile y snapdragon wear en sus versiones MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845 y SD 850."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18331",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-18T22:29:00.287",
      "lastModified" : "2024-11-21T03:19:52.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660"
      }, {
        "lang" : "es",
        "value" : "Control de acceso incorrecto en búferes de visualización seguros en snapdragon automobile, snapdragon mobile y snapdragon wear en sus versiones MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835 y SDA660."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18332",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-18T22:29:00.333",
      "lastModified" : "2024-11-21T03:19:52.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130"
      }, {
        "lang" : "es",
        "value" : "Se registran claves de seguridad cuando cualquier llamada WCDMA se configura/reconfigura en snapdragon automobile, snapdragon mobile y snapdragon wear en sus versiones MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20 y SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5C59A-ABCF-4F62-8C6D-ECDACDAA83C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8F856B-70D7-4A1A-8257-90AAAE62CD6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFF8872-645F-4A05-BAF9-7797CFBE37C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB91AFF-C149-4F5C-92EC-E78E66935528"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B529780-DB0A-4F9C-AE63-6DEC593B86E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E7360-E8C3-4BB8-A3B6-61BD58AFAF62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49606C5-7306-4F33-864C-C1905594F09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43964AF-7CEC-420A-935B-D3895B2BAC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8276",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-01-18T22:29:00.380",
      "lastModified" : "2024-11-21T03:33:40.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Autorización incorrecta que implica un fusible en TrustZone en snapdragon automobile y snapdragon wear en sus versiones MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24 y Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE3EA03-0373-4FEF-B1FC-123A8073520B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64D3E69-0784-4DEA-96C1-2D41EAFA1906"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CE0F1-29BD-46E1-ACFE-D076192F138E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D205DB4E-68C2-4B13-8373-128870DF83D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2126866-3B02-42B4-A57A-4EFF30848B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832FE19-8D65-4779-B6F5-BD90BD131FD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6922",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2019-01-22T15:29:00.223",
      "lastModified" : "2024-11-21T03:30:49.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system."
      }, {
        "lang" : "es",
        "value" : "En Drupal core, en las versiones 8.x anteriores a la 8.3.4 y en las 7.x anteriores a la 7.56, los archivos privados subidos por un usuario anónimo que no estén conectados al contenido del sitio deberían ser visibles solo para el mismo usuario anónimo que los subió, en lugar de todos los usuarios anónimos.  Anteriormente, Drupal core no disponía de esta protección, permitiendo que ocurriera una vulnerabilidad de omisión de acceso. Este problema se mitiga por el hecho de que, para que se vea afectado, el sitio deberá permitir a los usuarios anónimos subir archivos a un sistema de archivos privado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.56",
            "matchCriteriaId" : "67B5E690-BB08-4EB3-BD48-5301A360187C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.3.4",
            "matchCriteriaId" : "B0C572FD-C76D-4714-85A3-5CFF9F292C2C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/99219",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038781",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3897",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/99219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1038781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.debian.org/security/2017/dsa-3897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6923",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2019-01-22T15:29:00.270",
      "lastModified" : "2024-11-21T03:30:49.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter parameters. The views subsystem/module did not restrict access to the Ajax endpoint to only views configured to use Ajax. This is mitigated if you have access restrictions on the view. It is best practice to always include some form of access restrictions on all views, even if you are using another module to display them."
      }, {
        "lang" : "es",
        "value" : "En Drupal, en sus versiones 8.x anteriores a la 8.3.7, cuando se crea una vista se puede usar Ajax de manera opcional para actualizar los datos mostrados mediante parámetros filter.  Las vistas \"subsystem\" y \"module\" no restringían el acceso al endpoint de Ajax a visualizaciones configuradas para usar Ajax. Esto se puede mitigar si se tienen restricciones de acceso en la previsualización. Es una buena práctica siempre incluir algún tipo de restricciones de acceso en todas las visualizaciones, incluso aunque se utilice otro módulo para mostrarlas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.3.7",
            "matchCriteriaId" : "1DDF87C8-9836-467E-8B7D-449C172383AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/100368",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039200",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/100368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id/1039200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15720",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-01-23T17:29:00.257",
      "lastModified" : "2024-11-21T03:15:04.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object."
      }, {
        "lang" : "es",
        "value" : "En Apache Airflow, en versiones 1.8.2 y anteriores, un usuario autenticado puede ejecutar código de forma remota en el servidor web de Airflow mediante la creación de un objeto especial."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "2E9757BB-D71C-41F6-9D27-E63AC6B39D35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17835",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-01-23T17:29:00.303",
      "lastModified" : "2024-11-21T03:18:46.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow."
      }, {
        "lang" : "es",
        "value" : "En Apache Airflow, en versiones 1.8.2 y anteriores, una vulnerabilidad de Cross-Site Request Forgery (CSRF) permitía la inyección remota de comandos en una instalación por defecto de Airflow."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "2E9757BB-D71C-41F6-9D27-E63AC6B39D35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17836",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-01-23T17:29:00.367",
      "lastModified" : "2024-11-21T03:18:47.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limited access to airflow, whether it be via XSS or by leaving a machine unlocked can exfiltrate all credentials from the system."
      }, {
        "lang" : "es",
        "value" : "En Apache Airflow versión 1.8.2 y anteriores, una función experimental de Airflow mostraba cookies identificadas, así como contraseñas a las bases de datos utilizadas por Airflow. Un atacante que presenta acceso limitado a Airflow, ya sea por medio  de Cross-Site Scripting (XSS) o al dejar una máquina desbloqueada puede eliminar todas las credenciales del sistema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "2E9757BB-D71C-41F6-9D27-E63AC6B39D35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-01-25T05:29:00.700",
      "lastModified" : "2024-11-21T03:19:55.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by an abnormal server termination for \"SELECT ST_AsX3D('LINESTRING EMPTY');\" because empty geometries are mishandled."
      }, {
        "lang" : "es",
        "value" : "PostGIS, en sus versiones 2.x anteriores a la 2.3.3, tal y como se utiliza con PostgreSQL permite a los atacantes remotos provocar una denegación de servicio (DoS) mediante las entradas de la función ST_AsX3D manipuladas, tal y como queda demostrado con una terminación de servidor anormal para \"SELECT ST_AsX3D('LINESTRING EMPTY');\" debido a la mala gestión de geometrías vacías."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgis:postgis:*:*:*:*:*:postgresql:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "6B14D351-4875-42B0-B891-05226D67ACFB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.osgeo.org/postgis/changeset/15444",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.osgeo.org/postgis/changeset/15445",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.osgeo.org/postgis/ticket/3704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/01/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.osgeo.org/postgis/changeset/15444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.osgeo.org/postgis/changeset/15445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://trac.osgeo.org/postgis/ticket/3704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-01-31T09:29:00.220",
      "lastModified" : "2024-11-21T03:19:55.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates."
      }, {
        "lang" : "es",
        "value" : "En change_port_settings en drivers/usb/serial/io_ti.c en el kernel de Linux, en versiones anteriores a la 4.11.3, los usuarios locales podrían provocar una denegación de servicio (DoS) por medio de una división entre cero en la capa del dispositivo en serie intentando establecer tasas de baudio muy altas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.11.3",
            "matchCriteriaId" : "BE3BBF22-09CC-4B94-B634-572E29C66ACA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "8D305F7A-D159-4716-AB26-5E38BB5CD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106802",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1123706",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3933-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3933-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/106802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1123706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3933-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3933-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-02-01T09:29:00.233",
      "lastModified" : "2024-11-21T03:19:55.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis."
      }, {
        "lang" : "es",
        "value" : "En Pylons Colander, hasta la versión 1.6, el validador de URL permite a un atacante provocar un bucle infinito, lo que conduce a una denegación de servicio (DoS) mediante un paréntesis no cerrado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pylonsproject:colander:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "10A6769F-FEF6-4B61-9A5D-731A871D2094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pylons/colander/issues/290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pylons/colander/pull/323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pylons/colander/issues/290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pylons/colander/pull/323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-02-05T06:29:00.233",
      "lastModified" : "2025-11-05T19:24:28.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication."
      }, {
        "lang" : "es",
        "value" : "La integración ConnectWise ManagedITSync, hasta la versión 2017 para Kaseya VSA, es vulnerable a comandos remotos no autenticados que permiten el acceso directo completo a la base de datos de Kaseya VSA. En febrero de 2019, los atacantes se han aprovechado de este hecho \"in the wild\" de manera activa para descargar y ejecutar cargas útiles en todos los endpoints gestionados por el servidor VSA. Si la página ManagedIT.asmx está disponible mediante la interfaz web de Kaseya VSA, cualquier usuario con acceso a ésta es capaz de ejecutar consultas SQL, tanto de lectura como de escritura, sin autenticarse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-05-24",
      "cisaActionDue" : "2022-06-14",
      "cisaRequiredAction" : "The impacted product is end-of-life and should be disconnected if still in use.",
      "cisaVulnerabilityName" : "Kaseya VSA SQL Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:manageditsync:*:*:*:*:*:kaseya_vsa:*:*",
            "versionEndIncluding" : "2017",
            "matchCriteriaId" : "7F8C874A-4793-4258-8DE8-D015CCADA702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archive.today/rdkeQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kbni/owlky",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://webcache.googleusercontent.com/search?q=cache:ZEo8ZRF_iEIJ:https://helpdesk.kaseya.com/hc/en-gb/articles/360022495572-Connectwise-API-Vulnerability+",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://archive.today/rdkeQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kbni/owlky",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://webcache.googleusercontent.com/search?q=cache:ZEo8ZRF_iEIJ:https://helpdesk.kaseya.com/hc/en-gb/articles/360022495572-Connectwise-API-Vulnerability+",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-18362",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1177",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-02-05T18:29:00.303",
      "lastModified" : "2024-11-21T03:21:26.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Compliance, desde la versión 1.7 hasta la 1.9.91, divulga información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. IBM X-Force ID: 123429."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_compliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndIncluding" : "1.9.91",
            "matchCriteriaId" : "F7396620-43E2-40E2-883D-AC1519B158D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123429",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1198",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-02-05T18:29:00.383",
      "lastModified" : "2024-11-21T03:21:28.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Compliance, desde la versión 1.7 hasta la 1.9.9.1 (TEMA SUAv1 SCA SCM), almacena información sensible en parámetros de URL. Esto podría llevar a una divulgación de información si partes no autorizadas tienen acceso a las URL mediante registros del servidor, cabeceras referrer o el historial del navegador. IBM X-Force ID: 123673."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_compliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndIncluding" : "1.9.91",
            "matchCriteriaId" : "F7396620-43E2-40E2-883D-AC1519B158D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123673",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1200",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-02-05T18:29:00.447",
      "lastModified" : "2024-11-21T03:21:29.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Compliance, desde la versión 1.7 hasta la 1.9.91 (TEMA SUAv1 SCA SCM), no valida un certificado de manera correcta o en absoluto. Esta debilidad podría permitir a un atacante suplantar una entidad fiable mediante la utilización de un ataque Man-in-the-Middle (MitM). El software podría conectarse a un host malicioso cuando cree que éste es fiable o podría ser estafado para que acepte datos suplantados que parecen originarse desde un host fiable. IBM X-Force ID: 123675."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_compliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndIncluding" : "1.9.91",
            "matchCriteriaId" : "F7396620-43E2-40E2-883D-AC1519B158D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123675",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1202",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-02-05T18:29:00.507",
      "lastModified" : "2024-11-21T03:21:29.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677."
      }, {
        "lang" : "es",
        "value" : "IBM BigFix Compliance, desde la versión 1.7 hasta la 1.9.9.1 (TEMA SUAv1 SCA SCM), es vulnerable a una inyección de HTML. Un atacante remoto podría inyectar código HTML que, al ser visualizado, se ejecuta en el navegador web de la víctima dentro del contexto de seguridad del sitio que aloja. IBM X-Force ID: 123677."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:bigfix_compliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndIncluding" : "1.9.91",
            "matchCriteriaId" : "F7396620-43E2-40E2-883D-AC1519B158D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123677",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/123677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10737581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17834",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-02-07T23:15:09.540",
      "lastModified" : "2023-11-07T02:41:46.503",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0938",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2019-02-12T22:29:00.267",
      "lastModified" : "2024-11-21T03:03:56.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks."
      }, {
        "lang" : "es",
        "value" : "Ataque de denegación de servicio (DoS) en airMAX, en versiones anteriores a la 8.3.2 y la 6.0.7; y EdgeMAX, en versiones anteriores a la 1.9.7, permite que los atacantes empleen el protocolo de descubrimiento en ataques de amplificación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:airos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.7",
            "matchCriteriaId" : "9AFC9BEF-9863-4546-881A-6C0115AAE1C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:airmax_ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7522076-32AA-4C46-A383-55496EB8E403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:airos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.7",
            "versionEndExcluding" : "8.3.2",
            "matchCriteriaId" : "86BFAADA-5DA5-4DE3-ADDA-BE9B68F221F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:airmax_ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7522076-32AA-4C46-A383-55496EB8E403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.7",
            "matchCriteriaId" : "EF1F2636-CE55-4CE8-862A-872B1C2FD028"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:edgemax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FF6603-3476-46EB-BC4B-0A00D7DCE6DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v6-0-7-Has-Been-Released/ba-p/2056522",
        "source" : "support@hackerone.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v8-3-2-Has-Been-Released/ba-p/2049215",
        "source" : "support@hackerone.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/221625",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v6-0-7-Has-Been-Released/ba-p/2056522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v8-3-2-Has-Been-Released/ba-p/2049215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/221625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1695",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-02-15T20:29:00.237",
      "lastModified" : "2024-11-21T03:22:13.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar SIEM 7.2 y 7.3 emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 134177."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndIncluding" : "7.2.8",
            "matchCriteriaId" : "BC538D4E-D18E-4321-8476-DC46F53C1BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndIncluding" : "7.3.1",
            "matchCriteriaId" : "EFD0B247-3C9E-4509-A83C-73CE9BAF26A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EC724282-7431-465E-8E60-4037121B8838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "73151221-C102-4425-9316-1EE4CAAB6531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9DDCD-6D22-4175-94EF-D8A5457E7355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "35AB906F-43CD-4D54-8274-1FD551532E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "2356A4E6-561B-40CA-8348-B30D581B1E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74509F3F-840E-48B8-88B1-EA4FFB90ACC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7BD528-628F-4CA9-9FE8-8A79BDC97680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "26118C2B-78CC-4038-9DEA-7A9417029790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "4F445D93-D482-4A74-810D-66D78CBCAFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9F200C-ECC9-4D51-AFE7-E99C16D09148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "56B87CB5-0F77-4040-BB58-9DBF5723A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "873EF168-F0E4-45C1-81B3-54CA4A16AD84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCE0A40-18A5-4408-A3A4-44D8CB3C450F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EECABA4-E97D-419E-90C1-ED79B0F527D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "172A4B85-CCFB-4354-8764-4ED2D9341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E8F646-A036-4164-9526-79DC2537E4D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/107060",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134177",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10719107",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10719107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-02-19T15:15:08.700",
      "lastModified" : "2023-11-07T02:37:53.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  This issue lacks details and  cannot be determined if it is a security issue or not.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15515",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2019-03-04T22:29:00.267",
      "lastModified" : "2024-11-21T03:14:42.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field."
      }, {
        "lang" : "es",
        "value" : "NetApp SnapCenter Server, en versiones anteriores a la 4.0, es susceptible a una vulnerabilidad de Cross-Site Scripting (XSS) que podría permitir a un usuario privilegiado inyectar scripts arbitrarios en el campo \"label\" de la política personalizada secundaria."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "E41CB7C3-3BAC-4DA2-93E0-5DCCE6CFB250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/107272",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190304-0002/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190304-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11247",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:15.330",
      "lastModified" : "2023-11-07T02:38:11.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11264",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:15.347",
      "lastModified" : "2023-11-07T02:38:12.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11266",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:15.360",
      "lastModified" : "2023-11-07T02:38:12.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11483",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.407",
      "lastModified" : "2023-11-07T02:38:15.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11484",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.423",
      "lastModified" : "2023-11-07T02:38:15.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11485",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.423",
      "lastModified" : "2023-11-07T02:38:15.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11486",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.440",
      "lastModified" : "2023-11-07T02:38:16.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11487",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.457",
      "lastModified" : "2023-11-07T02:38:16.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11488",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.470",
      "lastModified" : "2023-11-07T02:38:16.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11489",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.487",
      "lastModified" : "2023-11-07T02:38:16.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11490",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.503",
      "lastModified" : "2023-11-07T02:38:16.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11491",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.533",
      "lastModified" : "2023-11-07T02:38:17.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11492",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.550",
      "lastModified" : "2023-11-07T02:38:17.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11493",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2019-03-05T20:15:15.563",
      "lastModified" : "2023-11-07T02:38:17.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12826",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.597",
      "lastModified" : "2023-11-07T02:38:29.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12827",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.610",
      "lastModified" : "2023-11-07T02:38:29.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12828",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.643",
      "lastModified" : "2023-11-07T02:38:29.557",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12829",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.657",
      "lastModified" : "2023-11-07T02:38:29.793",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12830",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.657",
      "lastModified" : "2023-11-07T02:38:30.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12831",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.673",
      "lastModified" : "2023-11-07T02:38:30.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12832",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.707",
      "lastModified" : "2023-11-07T02:38:30.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12833",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.720",
      "lastModified" : "2023-11-07T02:38:30.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12834",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.720",
      "lastModified" : "2023-11-07T02:38:31.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12835",
      "sourceIdentifier" : "cert@airbus.com",
      "published" : "2019-03-05T20:15:15.737",
      "lastModified" : "2023-11-07T02:38:31.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13109",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.767",
      "lastModified" : "2023-11-07T02:38:34.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13110",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.783",
      "lastModified" : "2023-11-07T02:38:34.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13111",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.800",
      "lastModified" : "2023-11-07T02:38:35.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13112",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.813",
      "lastModified" : "2023-11-07T02:38:35.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13113",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.830",
      "lastModified" : "2023-11-07T02:38:35.767",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13114",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.847",
      "lastModified" : "2023-11-07T02:38:36.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13115",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.860",
      "lastModified" : "2023-11-07T02:38:36.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13116",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.860",
      "lastModified" : "2023-11-07T02:38:36.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13117",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.877",
      "lastModified" : "2023-11-07T02:38:37.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13118",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.893",
      "lastModified" : "2023-11-07T02:38:37.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13119",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.907",
      "lastModified" : "2023-11-07T02:38:37.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13120",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.923",
      "lastModified" : "2023-11-07T02:38:37.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13121",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.940",
      "lastModified" : "2023-11-07T02:38:38.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13122",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.957",
      "lastModified" : "2023-11-07T02:38:38.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13123",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.970",
      "lastModified" : "2023-11-07T02:38:38.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13124",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.987",
      "lastModified" : "2023-11-07T02:38:38.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13125",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:15.987",
      "lastModified" : "2023-11-07T02:38:39.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13126",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:16.003",
      "lastModified" : "2023-11-07T02:38:39.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14381",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.017",
      "lastModified" : "2023-11-07T02:38:58.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14382",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.033",
      "lastModified" : "2023-11-07T02:38:59.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14655",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.050",
      "lastModified" : "2023-11-07T02:39:03.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14656",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.063",
      "lastModified" : "2023-11-07T02:39:03.443",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14657",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.080",
      "lastModified" : "2023-11-07T02:39:03.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14658",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.097",
      "lastModified" : "2023-11-07T02:39:03.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14659",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.110",
      "lastModified" : "2023-11-07T02:39:04.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14660",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.127",
      "lastModified" : "2023-11-07T02:39:04.623",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14661",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.127",
      "lastModified" : "2023-11-07T02:39:04.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14662",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.143",
      "lastModified" : "2023-11-07T02:39:05.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14663",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.173",
      "lastModified" : "2023-11-07T02:39:05.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14664",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.173",
      "lastModified" : "2023-11-07T02:39:05.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14665",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.190",
      "lastModified" : "2023-11-07T02:39:05.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14666",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.207",
      "lastModified" : "2023-11-07T02:39:06.153",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14667",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.220",
      "lastModified" : "2023-11-07T02:39:06.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14668",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.220",
      "lastModified" : "2023-11-07T02:39:06.740",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14669",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.237",
      "lastModified" : "2023-11-07T02:39:06.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14670",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.253",
      "lastModified" : "2023-11-07T02:39:07.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14671",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.267",
      "lastModified" : "2023-11-07T02:39:07.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14672",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.283",
      "lastModified" : "2023-11-07T02:39:07.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14673",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.283",
      "lastModified" : "2023-11-07T02:39:07.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14674",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.300",
      "lastModified" : "2023-11-07T02:39:08.207",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14675",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.313",
      "lastModified" : "2023-11-07T02:39:08.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14676",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.330",
      "lastModified" : "2023-11-07T02:39:08.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14677",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.347",
      "lastModified" : "2023-11-07T02:39:08.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14678",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.347",
      "lastModified" : "2023-11-07T02:39:09.223",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14679",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2019-03-05T20:15:16.360",
      "lastModified" : "2023-11-07T02:39:09.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15547",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.830",
      "lastModified" : "2023-11-07T02:40:15.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15551",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.847",
      "lastModified" : "2023-11-07T02:40:16.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15552",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.860",
      "lastModified" : "2023-11-07T02:40:16.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15553",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.877",
      "lastModified" : "2023-11-07T02:40:16.633",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15554",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.877",
      "lastModified" : "2023-11-07T02:40:16.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15555",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:16.893",
      "lastModified" : "2023-11-07T02:40:17.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16421",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:16.907",
      "lastModified" : "2023-11-07T02:40:30.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16422",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:16.923",
      "lastModified" : "2023-11-07T02:40:31.173",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16423",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:16.940",
      "lastModified" : "2023-11-07T02:40:31.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16424",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:16.957",
      "lastModified" : "2023-11-07T02:40:31.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16425",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:16.957",
      "lastModified" : "2023-11-07T02:40:31.943",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16426",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.003",
      "lastModified" : "2023-11-07T02:40:32.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16427",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.017",
      "lastModified" : "2023-11-07T02:40:32.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16428",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.033",
      "lastModified" : "2023-11-07T02:40:32.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16429",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.050",
      "lastModified" : "2023-11-07T02:40:32.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16430",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.063",
      "lastModified" : "2023-11-07T02:40:33.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16431",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.063",
      "lastModified" : "2023-11-07T02:40:33.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16432",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.080",
      "lastModified" : "2023-11-07T02:40:33.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16433",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.097",
      "lastModified" : "2023-11-07T02:40:33.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16434",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.110",
      "lastModified" : "2023-11-07T02:40:34.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16435",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.127",
      "lastModified" : "2023-11-07T02:40:34.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16436",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.127",
      "lastModified" : "2023-11-07T02:40:34.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16437",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.143",
      "lastModified" : "2023-11-07T02:40:34.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16438",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.157",
      "lastModified" : "2023-11-07T02:40:35.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16439",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.173",
      "lastModified" : "2023-11-07T02:40:35.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16440",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.173",
      "lastModified" : "2023-11-07T02:40:35.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16441",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.190",
      "lastModified" : "2023-11-07T02:40:35.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16442",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.207",
      "lastModified" : "2023-11-07T02:40:36.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16443",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.220",
      "lastModified" : "2023-11-07T02:40:36.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16444",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.220",
      "lastModified" : "2023-11-07T02:40:36.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16445",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.237",
      "lastModified" : "2023-11-07T02:40:36.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16446",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.253",
      "lastModified" : "2023-11-07T02:40:37.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16447",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.267",
      "lastModified" : "2023-11-07T02:40:37.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16448",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.283",
      "lastModified" : "2023-11-07T02:40:37.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16449",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.283",
      "lastModified" : "2023-11-07T02:40:38.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16450",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.300",
      "lastModified" : "2023-11-07T02:40:38.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16451",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.313",
      "lastModified" : "2023-11-07T02:40:38.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16452",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.330",
      "lastModified" : "2023-11-07T02:40:38.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16453",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.347",
      "lastModified" : "2023-11-07T02:40:39.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16454",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.347",
      "lastModified" : "2023-11-07T02:40:39.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16455",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.360",
      "lastModified" : "2023-11-07T02:40:39.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16456",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.377",
      "lastModified" : "2023-11-07T02:40:39.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16457",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.393",
      "lastModified" : "2023-11-07T02:40:40.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16458",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.393",
      "lastModified" : "2023-11-07T02:40:40.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16459",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.407",
      "lastModified" : "2023-11-07T02:40:40.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16460",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.423",
      "lastModified" : "2023-11-07T02:40:40.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16461",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.440",
      "lastModified" : "2023-11-07T02:40:41.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16462",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.457",
      "lastModified" : "2023-11-07T02:40:41.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16463",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.457",
      "lastModified" : "2023-11-07T02:40:41.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16464",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.470",
      "lastModified" : "2023-11-07T02:40:41.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16465",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.487",
      "lastModified" : "2023-11-07T02:40:42.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16466",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.503",
      "lastModified" : "2023-11-07T02:40:42.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16467",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.517",
      "lastModified" : "2023-11-07T02:40:42.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16468",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.533",
      "lastModified" : "2023-11-07T02:40:42.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16469",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.550",
      "lastModified" : "2023-11-07T02:40:43.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16470",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.563",
      "lastModified" : "2023-11-07T02:40:43.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16471",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.563",
      "lastModified" : "2023-11-07T02:40:43.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16472",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.580",
      "lastModified" : "2023-11-07T02:40:43.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16473",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.597",
      "lastModified" : "2023-11-07T02:40:44.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16474",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.610",
      "lastModified" : "2023-11-07T02:40:44.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16475",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.627",
      "lastModified" : "2023-11-07T02:40:44.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16476",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.643",
      "lastModified" : "2023-11-07T02:40:44.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16477",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.657",
      "lastModified" : "2023-11-07T02:40:45.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16478",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.657",
      "lastModified" : "2023-11-07T02:40:45.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16479",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.690",
      "lastModified" : "2023-11-07T02:40:45.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16480",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.707",
      "lastModified" : "2023-11-07T02:40:45.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16481",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.707",
      "lastModified" : "2023-11-07T02:40:46.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16482",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.720",
      "lastModified" : "2023-11-07T02:40:46.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16483",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.737",
      "lastModified" : "2023-11-07T02:40:46.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16484",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.753",
      "lastModified" : "2023-11-07T02:40:46.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16485",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.767",
      "lastModified" : "2023-11-07T02:40:47.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16486",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.767",
      "lastModified" : "2023-11-07T02:40:47.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16487",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.783",
      "lastModified" : "2023-11-07T02:40:47.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16488",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.800",
      "lastModified" : "2023-11-07T02:40:47.810",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16489",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.813",
      "lastModified" : "2023-11-07T02:40:48.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16490",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.830",
      "lastModified" : "2023-11-07T02:40:48.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16491",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.847",
      "lastModified" : "2023-11-07T02:40:48.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16492",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.860",
      "lastModified" : "2023-11-07T02:40:48.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16493",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.877",
      "lastModified" : "2023-11-07T02:40:49.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16494",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.877",
      "lastModified" : "2023-11-07T02:40:49.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16495",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.893",
      "lastModified" : "2023-11-07T02:40:49.753",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16496",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.907",
      "lastModified" : "2023-11-07T02:40:49.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16497",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.907",
      "lastModified" : "2023-11-07T02:40:50.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16498",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.923",
      "lastModified" : "2023-11-07T02:40:50.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16499",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.940",
      "lastModified" : "2023-11-07T02:40:50.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16500",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.970",
      "lastModified" : "2023-11-07T02:40:50.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16501",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:17.987",
      "lastModified" : "2023-11-07T02:40:51.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16502",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.003",
      "lastModified" : "2023-11-07T02:40:51.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16503",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.017",
      "lastModified" : "2023-11-07T02:40:51.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16504",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.033",
      "lastModified" : "2023-11-07T02:40:51.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16505",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.050",
      "lastModified" : "2023-11-07T02:40:52.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16506",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.050",
      "lastModified" : "2023-11-07T02:40:52.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16507",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.063",
      "lastModified" : "2023-11-07T02:40:52.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16508",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.080",
      "lastModified" : "2023-11-07T02:40:52.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16509",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2019-03-05T20:15:18.097",
      "lastModified" : "2023-11-07T02:40:53.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17177",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.110",
      "lastModified" : "2023-11-07T02:41:11.437",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17178",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.127",
      "lastModified" : "2023-11-07T02:41:11.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17179",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.143",
      "lastModified" : "2023-11-07T02:41:11.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17180",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.143",
      "lastModified" : "2023-11-07T02:41:12.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17181",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.157",
      "lastModified" : "2023-11-07T02:41:12.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17188",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.173",
      "lastModified" : "2023-11-07T02:41:12.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17189",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.190",
      "lastModified" : "2023-11-07T02:41:12.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17190",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.207",
      "lastModified" : "2023-11-07T02:41:13.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17191",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.207",
      "lastModified" : "2023-11-07T02:41:13.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17192",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.220",
      "lastModified" : "2023-11-07T02:41:13.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17193",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.237",
      "lastModified" : "2023-11-07T02:41:13.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17194",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.253",
      "lastModified" : "2023-11-07T02:41:14.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17195",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.253",
      "lastModified" : "2023-11-07T02:41:14.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17196",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.267",
      "lastModified" : "2023-11-07T02:41:14.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17198",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.330",
      "lastModified" : "2023-11-07T02:41:15.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17203",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.347",
      "lastModified" : "2023-11-07T02:41:15.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17204",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.360",
      "lastModified" : "2023-11-07T02:41:15.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17205",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.377",
      "lastModified" : "2023-11-07T02:41:15.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17206",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.393",
      "lastModified" : "2023-11-07T02:41:16.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17207",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.407",
      "lastModified" : "2023-11-07T02:41:16.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17208",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.423",
      "lastModified" : "2023-11-07T02:41:16.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17209",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.457",
      "lastModified" : "2023-11-07T02:41:16.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17210",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.470",
      "lastModified" : "2023-11-07T02:41:17.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17211",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.503",
      "lastModified" : "2023-11-07T02:41:17.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17212",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.517",
      "lastModified" : "2023-11-07T02:41:17.497",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17213",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.533",
      "lastModified" : "2023-11-07T02:41:17.733",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17214",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.563",
      "lastModified" : "2023-11-07T02:41:17.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17228",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.580",
      "lastModified" : "2023-11-07T02:41:18.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17229",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.597",
      "lastModified" : "2023-11-07T02:41:18.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17230",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.610",
      "lastModified" : "2023-11-07T02:41:18.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17231",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.627",
      "lastModified" : "2023-11-07T02:41:19.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17232",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.643",
      "lastModified" : "2023-11-07T02:41:19.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17233",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.657",
      "lastModified" : "2023-11-07T02:41:19.740",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17234",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.673",
      "lastModified" : "2023-11-07T02:41:19.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17235",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.690",
      "lastModified" : "2023-11-07T02:41:20.223",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17236",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.707",
      "lastModified" : "2023-11-07T02:41:20.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17237",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.720",
      "lastModified" : "2023-11-07T02:41:20.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17238",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.737",
      "lastModified" : "2023-11-07T02:41:20.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17239",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.753",
      "lastModified" : "2023-11-07T02:41:21.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17240",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.767",
      "lastModified" : "2023-11-07T02:41:21.453",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17241",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.783",
      "lastModified" : "2023-11-07T02:41:21.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17242",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.800",
      "lastModified" : "2023-11-07T02:41:21.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17243",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.813",
      "lastModified" : "2023-11-07T02:41:22.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17244",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.847",
      "lastModified" : "2023-11-07T02:41:22.407",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17245",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.860",
      "lastModified" : "2023-11-07T02:41:22.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17246",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.877",
      "lastModified" : "2023-11-07T02:41:22.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17247",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.893",
      "lastModified" : "2023-11-07T02:41:23.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17248",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.907",
      "lastModified" : "2023-11-07T02:41:23.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17249",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.923",
      "lastModified" : "2023-11-07T02:41:23.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17259",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.940",
      "lastModified" : "2023-11-07T02:41:23.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17260",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.957",
      "lastModified" : "2023-11-07T02:41:24.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17261",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.970",
      "lastModified" : "2023-11-07T02:41:24.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17262",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:18.987",
      "lastModified" : "2023-11-07T02:41:24.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17263",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.003",
      "lastModified" : "2023-11-07T02:41:24.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17264",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.017",
      "lastModified" : "2023-11-07T02:41:25.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17265",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.033",
      "lastModified" : "2023-11-07T02:41:25.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17266",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.050",
      "lastModified" : "2023-11-07T02:41:25.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17267",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.097",
      "lastModified" : "2023-11-07T02:41:25.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17268",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.110",
      "lastModified" : "2023-11-07T02:41:26.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17269",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.127",
      "lastModified" : "2023-11-07T02:41:26.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17270",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.143",
      "lastModified" : "2023-11-07T02:41:26.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17271",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.173",
      "lastModified" : "2023-11-07T02:41:26.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17272",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.190",
      "lastModified" : "2023-11-07T02:41:27.223",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17273",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.207",
      "lastModified" : "2023-11-07T02:41:27.507",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17274",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.220",
      "lastModified" : "2023-11-07T02:41:27.787",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17275",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.237",
      "lastModified" : "2023-11-07T02:41:28.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17276",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.253",
      "lastModified" : "2023-11-07T02:41:28.357",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17277",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.267",
      "lastModified" : "2023-11-07T02:41:28.633",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17278",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-03-05T20:15:19.283",
      "lastModified" : "2023-11-07T02:41:28.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1089",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2019-03-05T20:15:19.313",
      "lastModified" : "2023-11-07T02:42:19.707",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1090",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2019-03-05T20:15:19.330",
      "lastModified" : "2023-11-07T02:42:19.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3228",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:19.360",
      "lastModified" : "2023-11-07T02:44:08.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3229",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2019-03-05T20:15:19.377",
      "lastModified" : "2023-11-07T02:44:08.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4996",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:19.423",
      "lastModified" : "2023-11-07T02:48:25.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8010",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:19.457",
      "lastModified" : "2023-11-07T02:50:19.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8014",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-03-05T20:15:19.470",
      "lastModified" : "2023-11-07T02:50:19.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9321",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2019-03-05T20:15:19.487",
      "lastModified" : "2023-11-07T02:50:43.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9322",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2019-03-05T20:15:19.517",
      "lastModified" : "2023-11-07T02:50:44.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9323",
      "sourceIdentifier" : "cybersecurity@dahuatech.com",
      "published" : "2019-03-05T20:15:19.533",
      "lastModified" : "2023-11-07T02:50:44.377",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-07T23:29:00.377",
      "lastModified" : "2024-11-21T03:09:30.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder."
      }, {
        "lang" : "es",
        "value" : "GdkPixBuf (también conocido como gdk-pixbuf), posiblemente en la versión 2.32.2, tal y como se utiliza en GNOME Nautilus 3.14.3 en Ubuntu 16.04 permite a los atacantes provocar una denegación de servicio (corrupción de pila) o, posiblemente, otro impacto sin especificar mediante una carpeta de archivos manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdk-pixbuf:2.32.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF219B3-9A08-4AFA-B301-60313C09373C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:nautilus:3.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD268F74-2C19-4514-976C-672723F8D4E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712507AC-DAB8-4FFE-9426-08282919411F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=785979",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/gnome",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3912-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=785979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hackerlib/hackerlib-vul/tree/master/gnome",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/3912-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3164",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-03-08T21:29:00.250",
      "lastModified" : "2024-11-21T03:24:57.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the \"shards\" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL."
      }, {
        "lang" : "es",
        "value" : "Hay Server-Side Request Forgery (SSRF) en Apache Solr en versiones desde la 1.3 hasta la 7.6 (inclusivas). Como el parámetro \"shards\" no tiene un mecanismo de introducción en lista blanca correspondiente, un atacante remoto con acceso al servidor podría hacer que Solr realizara una petición HTTP GET hacia cualquier URL alcanzable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "7.6.0",
            "matchCriteriaId" : "D4810193-4CB3-4450-B5CA-1555D547506F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/201902.mbox/%3CCAECwjAVjBN%3DwO5rYs6ktAX-5%3D-f5JDFwbbTSM2TTjEbGO5jKKA%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107026",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/43026507844ada1ac658ccf7bc939378c13e492fd6538416ce65df39%40%3Cdev.lucene.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/75dc651478f9d04505b46d44fe3ac739e7aaf3d7bf1257973685f8f7%40%3Cdev.lucene.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ca3105b6934ccd28e843dffe39724f6963ff49825e9b709837203649%40%3Cdev.lucene.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/e0f9c652b57a91fdcc287efcead620af9f4d8e46b88f0b761aa265de%40%3Cdev.lucene.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc400db37710ee79378b6c52de3640493ff538c2beb41cefdbbdf2ab8%40%3Ccommits.submarine.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190327-0003/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "security@apache.org"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/201902.mbox/%3CCAECwjAVjBN%3DwO5rYs6ktAX-5%3D-f5JDFwbbTSM2TTjEbGO5jKKA%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/43026507844ada1ac658ccf7bc939378c13e492fd6538416ce65df39%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/75dc651478f9d04505b46d44fe3ac739e7aaf3d7bf1257973685f8f7%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ca3105b6934ccd28e843dffe39724f6963ff49825e9b709837203649%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/e0f9c652b57a91fdcc287efcead620af9f4d8e46b88f0b761aa265de%40%3Cdev.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc400db37710ee79378b6c52de3640493ff538c2beb41cefdbbdf2ab8%40%3Ccommits.submarine.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20190327-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-21T15:59:56.217",
      "lastModified" : "2024-11-21T03:16:05.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** En PCRE 8.41, tras la compilación, una prueba de concepto de carga pcrtest produce un desbordamiento de cierre en la función match() en pcre_exec.c debido a una llamada autorecursiva. NOTA: los terceros discuten la relevancia de este informe, indicando que hay opciones que pueden emplearse para limitar la cantidad de pila que se emplea."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcre:pcre:8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4917CD-FA24-46D5-89D2-0E6785BF2CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Dec/33",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101688",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2047",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Dec/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugs.exim.org/show_bug.cgi?id=2047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-21T15:59:56.530",
      "lastModified" : "2024-11-21T03:16:05.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** LibTIFF 4.0.8 tiene múltiples vulnerabilidades de fuga de memoria, lo que permite que los atacantes provoquen una denegación de servicio (consumo de memoria), tal y como queda demostrado con tif_open.c, tif_lzw.c y tif_aux.c. NOTA: los terceros eran incapaces de reproducir el problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3BFA08-D819-4896-8E7B-FEDF1711C407"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CFAD92-EECD-417D-ADDB-8178C320B204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DCD75C-9775-4922-8A44-C4707C640946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F84B2729-7B52-4505-9656-1BD31B980705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*",
            "matchCriteriaId" : "F2681D87-58A9-4A56-BE97-B00C5061CA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "631BB7F0-5F27-4244-8E72-428DA824C75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F150BD9-4B94-42D3-9E14-58665B7FF220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B779A4B4-0721-4F4C-B3BD-C640BEAB2463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Dec/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Dec/47",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101696",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Dec/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2018/Dec/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/11/01/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/101696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1713",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-03-21T15:59:56.857",
      "lastModified" : "2024-11-21T03:22:15.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Streams 4.2.1 emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 134632."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_streams:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91159AC7-A6CB-41AB-85E7-A3A2F12D2566"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016056",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134632",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=swg22016056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2659",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2019-03-21T15:59:57.093",
      "lastModified" : "2024-11-21T03:23:55.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que dropbear, en versiones anteriores a la 2013.59 con GSSAPI filtra si un nombre de usuario es válido o no.  Cuando se proporciona un nombre de usuario inválido, el error de autenticación de GSSAPI se contó erróneamente hacia el máximo número permitido de intentos de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2013.59",
            "matchCriteriaId" : "EBC6AE23-FAEA-491F-806C-8D634FA765B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2659",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secure.ucc.asn.au/hg/dropbear/rev/d7784616409a#l1.86",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://secure.ucc.asn.au/hg/dropbear/rev/d7784616409a#l1.86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16253",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-03-21T17:29:00.243",
      "lastModified" : "2024-11-21T03:16:06.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el manejador de mensajes PubNub de Insteon Hub 2245-222, en la versión de firmware 1012, para el canal cc de Insteon Hub que ejecuta la versión 1012 de firmware. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer basado en pila que sobrescribe datos arbitrarios. Un atacante puede enviar una petición HTTP autenticada en 0x9d014dd8, donde se copia el valor para la clave ID mediante strcpy al búfer en $sp+0x290. Este búfer tiene una longitud de 32 bytes; el envío de algo mayor provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16254",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-03-21T17:29:00.290",
      "lastModified" : "2024-11-21T03:16:07.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at 0x9d014e4c the value for the flg key is copied using strcpy to the buffer at $sp+0x270. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el manejador de mensajes PubNub de Insteon Hub 2245-222, en la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer basado en pila que sobrescribe datos arbitrarios. Un atacante puede enviar una petición HTTP autenticada en 0x9d014e4c, donde se copia el valor para la clave flg mediante strcpy al búfer en $sp+0x270. Este búfer tiene una longitud de 16 bytes; el envío de algo mayor provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16255",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-03-21T17:29:00.303",
      "lastModified" : "2024-11-21T03:16:07.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at At 0x9d014e84 the value for the cmd1 key is copied using strcpy to the buffer at $sp+0x280. This buffer is 16 bytes large."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad explotable de desbordamiento de búfer en el manejador de mensajes PubNub de Insteon Hub 2245-222, en la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer basado en pila que sobrescribe datos arbitrarios. Un atacante puede enviar una petición HTTP autenticada en 0x9d014e84, donde se copia el valor para la clave cmd1 mediante strcpy al búfer en $sp+0x280. Este búfer tiene una longitud de 16 bytes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-25T16:29:03.177",
      "lastModified" : "2024-11-21T03:35:55.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API."
      }, {
        "lang" : "es",
        "value" : "ManageEngine ServiceDesk Plus en sus versiones anteriores a la 9312 contiene una inyección XML en los ítems de adición de configuración de la API CMDB."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "9164DE27-BE62-4EB3-B2F1-899A3D284DEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://labs.integrity.pt/advisories/cve-2017-9362",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://labs.integrity.pt/advisories/cve-2017-9362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-25T16:29:03.223",
      "lastModified" : "2024-11-21T03:35:57.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do."
      }, {
        "lang" : "es",
        "value" : "ManageEngine ServiceDesk Plus en sus versiones anteriores a la 9314 contiene una vulnerabilidad de inclusión de archivo local en el parámetro defModule en DefaultConfigDef.do y AssetDefaultConfigDef.do."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "9164DE27-BE62-4EB3-B2F1-899A3D284DEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/107558",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labs.integrity.pt/advisories/cve-2017-9376/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labs.integrity.pt/advisories/cve-2017-9376/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7510",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2019-03-25T18:29:00.387",
      "lastModified" : "2024-11-21T03:32:02.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface."
      }, {
        "lang" : "es",
        "value" : "En ovirt-engine 4.1, si un host fuera aprovisionado con un cloud-init, la contraseña root podría ser revelada a través de la interfaz REST."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ovirt-engine:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FD99FCF5-F433-4DED-98D5-954FB8E05DEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7510",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7340",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2019-03-25T21:29:03.787",
      "lastModified" : "2024-11-21T03:31:39.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Cross-Site Scripting en Fortinet FortiPortal en su versión 4.0.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante el parámetro applicationSearch en la funcionalidad FortiView."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7342",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2019-03-25T22:29:00.263",
      "lastModified" : "2024-11-21T03:31:39.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de debilidad del proceso de recuperación de contraseña en Fortinet FortiPortal en su versión 4.0.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante un botón ‘‘Close’’ oculto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "F12C46D5-F018-4114-86A5-AF643CFA348C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-17-114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2660",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2019-03-26T18:15:08.230",
      "lastModified" : "2023-11-07T02:43:54.277",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-27T17:29:00.277",
      "lastModified" : "2024-11-21T03:19:56.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter."
      }, {
        "lang" : "es",
        "value" : "phpFK lite tiene Cross-Site Scripting (XSS) mediante las cadenas de consulta en faq.php, members.php o search.php o el parámetro user en user.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frank-karau:phpfk:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "34B0BE60-75E3-4799-8184-840AE9AB5F4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153591/phpFK-lite-version-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Jul/15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-17-030-multiple-reflected-xss-vulnerabilities-in-phpfkl-lite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153591/phpFK-lite-version-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Jul/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-17-030-multiple-reflected-xss-vulnerabilities-in-phpfkl-lite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2748",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2019-03-27T17:29:00.340",
      "lastModified" : "2024-11-21T03:24:06.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad provocada por el uso de transacciones inseguras (http) durante el inicio de sesión en versiones antiguas de la aplicación móvil \"Smartwatch\", de Isaac Mizrahi. HP no tiene acceso a los datos del cliente como consecuencia de este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.0.2.10:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "8E7F98E9-9344-4060-BE90-87A3F2408179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.0.201601214:*:*:*:*:android:*:*",
            "matchCriteriaId" : "6F08A4CF-6D1C-41AA-9AD4-10D5F118A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.2.2.12:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "A1E5459D-772C-4B54-83D2-C3AE39792606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.2.2016040820:*:*:*:*:android:*:*",
            "matchCriteriaId" : "5C183EB0-D056-47CA-9B1A-682EFE538B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.3.7:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "C640A169-5D67-4C34-B547-8A3A46691FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.3.2016052319:*:*:*:*:android:*:*",
            "matchCriteriaId" : "84ACB156-7F29-4CD3-971C-DD021EF4CE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.4.8:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B617851A-688C-420D-8FB1-227CCF51CEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:isaac_mizrahi_smartwatch:1.4.2016072601:*:*:*:*:android:*:*",
            "matchCriteriaId" : "1B913ED9-0864-4DDF-86A7-160C4CFDEAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05976868",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05976868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2752",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2019-03-27T17:29:00.370",
      "lastModified" : "2024-11-21T03:24:07.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una potencial vulnerabilidad de seguridad provocada por la completa ofuscación de la información de configuración de la aplicación en la aplicación de Android Tommy Hilfiger TH24/7, en versiones 2.0.0.11, 2.0.1.14, 2.1.0.16 y 2.2.0.19. HP no tiene acceso a los datos del cliente como consecuencia de este problema."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.0.0.11:*:*:*:*:android:*:*",
            "matchCriteriaId" : "FEDB7BA6-529F-4DB2-922F-3AFAE90BBCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.0.1.14:*:*:*:*:android:*:*",
            "matchCriteriaId" : "3D03878F-D231-4C5E-8A27-2B9E6DBA91DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.1.0.16:*:*:*:*:android:*:*",
            "matchCriteriaId" : "7722D836-9B15-4123-A384-704016BA9C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.2.0.19:*:*:*:*:android:*:*",
            "matchCriteriaId" : "BE153BB9-CDA2-482E-956F-91F7A3EBE7D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/c05904705",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/c05904705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7655",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2019-03-27T20:29:02.987",
      "lastModified" : "2024-11-21T03:32:23.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Mosquitto, desde la versión 1.0 hasta la 1.4.15, se ha descubierto una vulnerabilidad de desreferencia de puntero null en la biblioteca Mosquitto que podría conducir a cierres inesperados de las aplicaciones que la emplean."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.4.15",
            "matchCriteriaId" : "BBA76CC4-4F26-4CF3-87A3-E03576CD5F1F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=533775",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/10/msg00035.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=533775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/10/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9626",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2019-03-27T20:29:03.083",
      "lastModified" : "2024-11-21T03:36:32.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication."
      }, {
        "lang" : "es",
        "value" : "Los sistemas que emplean la plataforma Marel Food Processing Systems Pluto no restringen el acceso remoto. Marel ha creado una actualización para las aplicaciones basadas en Pluto. Esta actualización restringirá el acceso remoto mediante la implementación de la autenticación SSH."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marel:pluto1203:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA541EA-7C77-436B-AF39-8A086652AC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marel:pluto2:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F78DC2-8AD7-4E74-B840-641953F66E00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02B",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02B",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-03-28T06:29:00.267",
      "lastModified" : "2024-11-21T03:19:56.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a crafted cookie signed with this secret, one can call Marshal.load with arbitrary data, which is a problem because the Marshal data format allows Ruby objects."
      }, {
        "lang" : "es",
        "value" : "La consola de gestión en GitHub Enterprise, en las versiones 2.8.x anteriores a la 2.8.7, tiene un fallo de deserialización que permite a los atacantes remotos sin autenticar ejecutar código arbitrario. Esto ocurre debido a que el secreto de sesión \"enterprise\" es siempre el mismo y puede encontrarse en el código fuente del producto. Al enviar una cookie manipulada firmada con este secreto, se puede llamar a Marshal.load con datos arbitrarios. Esto es problemático, ya que el formato de los datos Marshal permite los objetos Ruby."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.7",
            "matchCriteriaId" : "1CC784DE-8B67-4DEE-8F7A-76FF72FFA1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D710BF3A-560D-495E-A51A-E4484F7CC251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://enterprise.github.com/releases/2.8.7/notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exablue.de/blog/2017-03-15-github-enterprise-remote-code-execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://enterprise.github.com/releases/2.8.7/notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exablue.de/blog/2017-03-15-github-enterprise-remote-code-execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18105",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-03-29T14:29:00.267",
      "lastModified" : "2024-11-21T03:19:22.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who have previously obtained a user's JSESSIONID cookie, to gain access to some of the built-in and potentially third party rest resources via a session fixation vulnerability."
      }, {
        "lang" : "es",
        "value" : "El recurso de inicio de sesión en consola de Atlassian Crowd, en versiones anteriores a la 3.0.2, y desde la 3.1.0 hasta la 3.1.1, permite a los atacantes que hayan obtenido previamente la cookie JSESSIONID del usuario obtener acceso a algunos de los recursos rest integrados y, potencialmente, de terceros mediante una vulnerabilidad de fijación de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "234F761D-80DE-47CB-99E6-26D19EC586F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "F2D13DD5-3221-43A6-8F03-5C51E8D6ADDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5072",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18106",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-03-29T14:29:00.313",
      "lastModified" : "2024-11-21T03:19:22.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain access to another user's session provided they can make their identifier hash collide with another user's session identifier hash."
      }, {
        "lang" : "es",
        "value" : "Un hash de identificación para un token de sesión en Atlassian Crowd, en versiones anteriores a la 2.9.1, podría colisionar con un identifier_hash para otro usuario o un usuario en un directorio diferente. Esto permite a los atacantes remotos obtener acceso a la sesión de otro usuario, con tal de que puedan hacer que su hash de identificación colisione con el hash de identificación de la sesión de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.1",
            "matchCriteriaId" : "EC94F873-D56A-4527-94D2-00B3677E6592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5061",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18108",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-03-29T14:29:00.360",
      "lastModified" : "2024-11-21T03:19:22.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection."
      }, {
        "lang" : "es",
        "value" : "El recurso de configuración de administración SMTP en Atlassian Crowd, en versiones anteriores a la 2.10.2, permite a los atacantes remotos con derechos de administrador ejecutar código arbitrario mediante una inyección JNDI."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.2",
            "matchCriteriaId" : "F001C4FF-9943-4C1D-8F2B-9A277F430A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5062",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18109",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-03-29T14:29:00.407",
      "lastModified" : "2024-11-21T03:19:22.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect."
      }, {
        "lang" : "es",
        "value" : "El recurso de inicio de sesión de Crowdld en Atlassian Crowd, en versiones anteriores a la 3.0.2 y desde la 3.1.0 hasta la 3.1.1, permite a los atacantes remotos redirigir a los usuarios a otro sitio web que pueden utilizar como parte de la realización de un ataque de phishing mediante un redireccionamiento abierto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "234F761D-80DE-47CB-99E6-26D19EC586F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B344F727-5300-4EE1-A552-1BF7BE0E8E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5071",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18110",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-03-29T14:29:00.437",
      "lastModified" : "2024-11-21T03:19:22.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability."
      }, {
        "lang" : "es",
        "value" : "El recurso de administración de copias de memoria en Atlassian Crowd, en versiones anteriores a la 3.0.2 y desde la 3.1.1, permite a los atacantes remotos leer archivos desde el sistema de archivos mediante una vulnerabilidad de XEE (XML External Entity)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "234F761D-80DE-47CB-99E6-26D19EC586F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B344F727-5300-4EE1-A552-1BF7BE0E8E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5070",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18111",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-03-29T14:29:00.483",
      "lastModified" : "2024-11-21T03:19:22.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked applications to probe internal network resources by requesting internal locations, read the contents of files and also cause an out of memory exception affecting availability via an XML External Entity vulnerability."
      }, {
        "lang" : "es",
        "value" : "OAuthHelper en Atlassian Application Links, en versiones anteriores a la 5.0.10, desde la 5.1.0 hasta la 5.1.3 y desde la 5.2.0 hasta la 5.2.6, utilizaba un constructor de documentos XML que era vulnerable a XEE (XML External Entity) al consumir una petición OAuth del cliente. Esto permitía a las aplicaciones enlazadas a aplicaciones oauth maliciosas sondear recursos de red internos, solicitando ubicaciones internas, leyendo los contenidos de los archivos y causando una excepción de fuera de memoria mediante una vulnerabilidad de XEE (XML External Entity)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.10",
            "matchCriteriaId" : "39C7E940-29B1-4A70-82F2-9EBA6A5E75EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.3",
            "matchCriteriaId" : "8F67A8D7-CB6A-438A-822D-244A84DD4887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.6",
            "matchCriteriaId" : "EAF55B98-3B2F-44CD-9613-5B5E22786547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ecosystem.atlassian.net/browse/APL-1338",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ecosystem.atlassian.net/browse/APL-1338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16774",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2019-04-01T15:29:00.263",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Scripting (XSS) en SYNO.Core.PersonalNotification.Event en Synology DiskStation Manager (DSM), en versiones anteriores a la 6.1.4-15217-3, permite a los usuarios remotos autenticados inyectar scripts web o HTML arbitrarios mediante el parámetro \"package\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "6.1.4-15217-3",
            "matchCriteriaId" : "17D02EF8-945D-4B89-A379-4485C586EEA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_18_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_18_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16775",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2019-04-01T15:29:00.310",
      "lastModified" : "2024-11-21T03:16:56.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una restricción incorrecta de capas UI o tramas renderizadas en SSOOauth.cgi en Synology SSO Server, en versiones anteriores a la 2.1.3-0219, permite a los atacantes remotos realizar ataques de secuestro de clics mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:sso_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.3-0129",
            "matchCriteriaId" : "9F4C392A-785B-4085-9D12-57F8F0C0E9DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_18_28",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_18_28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8023",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2019-04-01T21:29:24.263",
      "lastModified" : "2024-11-21T03:33:10.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "EMC NetWorker, podría ser vulnerable a una ejecución remota de código sin autenticar en el servicio de ejecución \"Networker Client\" (nsrexecd) cuando se utiliza el método de autenticación \"oldauth\". Un atacante remoto no autenticado podría enviar comandos arbitrarios mediante un servicio RPC que se ejecutará en el sistema host con los privilegios del servicio \"nsrexecd\", que se ejecuta con privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0.0",
            "versionEndExcluding" : "8.2.4.11",
            "matchCriteriaId" : "EA8B675E-2B3D-42BF-9BB1-17E0987D74C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.1.9",
            "matchCriteriaId" : "4FF5DC2D-86B4-4470-A855-B078DEE0DA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndExcluding" : "9.1.1.5",
            "matchCriteriaId" : "72A5D229-468B-4DEA-8D53-857675175A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0.0",
            "versionEndExcluding" : "9.2.1.0",
            "matchCriteriaId" : "B9576971-C495-4FCF-BEE1-52860CFFD803"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/107712",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2019/Mar/50",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2019/Mar/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6047",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2019-04-02T20:29:00.287",
      "lastModified" : "2024-11-21T03:28:59.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Detcon Sitewatch Gateway sin celular, las contraseñas se presentan como texto plano en un archivo que es accesible sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3m:detcon_sitewatch_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796FB710-731A-447B-9E35-7C7A981ACB1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6049",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2019-04-02T20:29:00.333",
      "lastModified" : "2024-11-21T03:28:59.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de Detcon Sitewatch Gateway sin celular, un atacante puede editar los ajustes del dispositivo utilizando una URL especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3m:detcon_sitewatch_gateway:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E1764-D113-401C-AB30-8945AEACA7F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13911",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-04-03T18:29:00.313",
      "lastModified" : "2024-11-21T03:11:53.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2."
      }, {
        "lang" : "es",
        "value" : "Un problema de configuración se abordó con restricciones adicionales. El problema afectaba a macOS X El Capitan, en versiones anteriores a 10.11.6 con la actualización de seguridad 2018-002; macOS Sierra, en versiones anteriores a la 10.12.6 con la actualización de seguridad 2018-002; y macOS High Sierra en versiones anteriores a la 10.13.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "345C1D2B-0795-4041-BB43-0196DC1A37E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "D01E4F9E-15B1-4470-8FAF-DB5DCD69CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.13",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "AB6763FA-1EC6-48EB-A31A-B65B669934D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/kb/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208692",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7151",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2019-04-03T18:29:00.503",
      "lastModified" : "2024-11-21T03:31:16.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera se abordó con una validación adicional. El problema afectaba a iOS, en versiones anteriores a la 11.2; macOS High Sierra,en versiones anteriores a la 10.13.2; tvOS, en versiones anteriores a la 11.2; watchOS, en versiones anteriores a la 4.2; iTunes para Windows, en versiones anteriores a la 12.7.2 y macOS High Sierra, en versiones anteriores a la 10.13.4."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "3153410F-C87F-41E4-A662-5EB88346BA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.13.3",
            "versionEndExcluding" : "10.13.4",
            "matchCriteriaId" : "E50AF5C2-B236-4285-9AE0-074942BDCC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.7.2",
            "matchCriteriaId" : "D18B3810-D8DC-4A49-82B5-6819B9BE22AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/kb/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208692",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT208692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7912",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2019-04-08T15:29:00.263",
      "lastModified" : "2024-11-21T03:32:56.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication."
      }, {
        "lang" : "es",
        "value" : "Hanwha Techwin SRN-4000, versiones de firmware SRN-4000 anteriores a SRN4000_v2.16_170401, una petición y respuesta http especialmente creada podría permitir a un atacante obtener acceso a la página de administración de dispositivos con privilegios de administrador sin la autenticación apropiada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hanwhasecurity:srn-4000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16_170401",
            "matchCriteriaId" : "F5657519-9C53-44A6-8A0F-46FCE0415E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hanwhasecurity:srn-4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA6FB1B-0993-4FA9-A989-CD44C1ED9DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17544",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2019-04-09T16:29:00.367",
      "lastModified" : "2024-11-21T03:18:08.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin users to elevate their profile to super_admin via restoring modified configurations."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios en Fortinet FortiOS en las versiones 6.0.0 a 6.0.6, 5.6.0 a 5.6.10, 5.4 e inferiores permite a los usuarios administradores elevar su perfil a super_admin mediante la restauración de configuraciones modificadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.0",
            "matchCriteriaId" : "42CF4335-25C7-473E-83E8-37C1B9575D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.10",
            "matchCriteriaId" : "9BC4C822-47EB-4EA0-834D-7A63D9F0E46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.6",
            "matchCriteriaId" : "8FA4CED9-EAB9-4FE4-B058-CC4D3E03C520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/107839",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-053",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/107839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-17-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-04-09T18:29:00.280",
      "lastModified" : "2024-11-21T03:17:21.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, \"Sophos IPSec Client\" 11.04 is a rebranded version of NCP \"Secure Entry Client\" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows a man-in-the-middle (MITM) or man-on-the-side (MOTS) attacker to execute arbitrary, malicious software on a target user's computer. This is related to SIC_V11.04-64.exe (Sophos), NCP_EntryCl_Windows_x86_1004_31799.exe (NCP), and ncpmon.exe (both Sophos and NCP). The vulnerability exists because: (1) the VPN client requests update metadata over an insecure HTTP connection; and (2) the client software does not check if the software update is signed before running it."
      }, {
        "lang" : "es",
        "value" : "El Endpoint UTM VPN de Sophos interactúa con el software de cliente proporcionado por NPC Engineering (www.ncp-e.com). El software cliente afectado, \"Sophos IPSec Client\" versión 11.04 es una versión rebautizada de NCP \"Secure Entry Client\" versión 10.11 r32792. Una vulnerabilidad en la función software update del cliente VPN permite que un atacante man-in-the-middle (MITM) o man-on-the-side (MOTS) ejecute software malicioso y arbitrario en el equipo de un usuario de destino. Esto está relacionado con SIC_V versión 11.04-64.exe (Sophos), NCP_EntryCl_Windows_x86_1004_31799.exe (NCP) y ncpmon.exe (tanto Sophos como NCP). La vulnerabilidad existe porque: (1) el cliente VPN solicita metadatos de actualización por medio de una conexión HTTP no segura; y (2) el software cliente no comprueba si la actualización de software está firmada previo a ejecutarla."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp-e:ncp_secure_entry_client:10.11:32792:*:*:*:windows:*:*",
            "matchCriteriaId" : "C3154F49-4D0F-46DF-B81F-59F4A24A8790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:ipsec_client:11.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A81C85C-AD5F-4A7E-8E12-2B396AFCDEC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ncp-e.com/en/resources/download-vpn-client/#c8680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ncp-e.com/fileadmin/pdf/service_support/release_notes/NCP_Secure_Clients/NCP_Secure_Entry_Client/NCP_RN_Win_Secure_Entry_Client_11_14_r42039_en.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ncp-e.com/en/resources/download-vpn-client/#c8680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ncp-e.com/fileadmin/pdf/service_support/release_notes/NCP_Secure_Clients/NCP_Secure_Entry_Client/NCP_RN_Win_Secure_Entry_Client_11_14_r42039_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3139",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2019-04-09T18:29:00.343",
      "lastModified" : "2024-11-21T03:24:54.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de denegación de servicio en la forma en que BIND maneja la comprobación de DNSSEC. Un atacante remoto podría utilizar este fallo para hacer la salida nombrada inesperadamente con un error de aserción por medio de una respuesta DNS especialmente creada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D0378-F0F4-4AAA-80AF-8287C790EC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF83BB87-B203-48F9-9D06-48A5FE399050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E6D998-B41D-4B49-9E00-8336D2E40A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81647C-9A53-481D-A54C-36770A093F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E02156-E748-4820-B76F-7074793837E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/cve-2017-3139",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1447743",
        "source" : "security-officer@isc.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2017-3139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1447743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14199",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2019-04-12T17:29:00.210",
      "lastModified" : "2024-11-21T03:12:20.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo buffer overflow ha sido encontrada en la implementación de getaddrinfo() de Zephyr Project, versiones 1.9.0 y 1.10.0."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D313158-4E41-4829-8F2C-FEC375A2E0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F233F223-9600-437F-803B-AD8A6616BDE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/pull/6158",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-12",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/pull/6158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7772",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-12T18:29:00.320",
      "lastModified" : "2024-11-21T03:32:37.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Graphinte2 en versiones de Firefox anteriores a la 54 en lz4::decompress function."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7775",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-15T12:16:31.573",
      "lastModified" : "2023-11-07T02:50:16.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-04-15T12:30:57.697",
      "lastModified" : "2024-11-21T03:19:56.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Subrion CMS 4.1.5 has CSRF in blog/delete/."
      }, {
        "lang" : "es",
        "value" : "Subrion CMS 4.1.5 es vulnerable a un CSRF en blog/delete/."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:subrion_cms:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3499035D-709C-40B3-ADE9-5B00F7790E2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intelliants/subrion/issues/477",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/intelliants/subrion/issues/477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7771",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-15T12:31:08.413",
      "lastModified" : "2024-11-21T03:32:37.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en la librería Graphite2 para versiones de Firefox anteriores a la 54 en la función graphite2::Pass::readPass."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1472212",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7773",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-15T12:31:08.447",
      "lastModified" : "2024-11-21T03:32:37.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor."
      }, {
        "lang" : "es",
        "value" : "La librería Graphite2, en versiones de Firefox anteriores a la 54, es vulnerable a un desbordamiento de búfer de escritura basado en memoria dinámica en lz4::decompress src/Decompressor."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7774",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-15T12:31:08.507",
      "lastModified" : "2024-11-21T03:32:38.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function."
      }, {
        "lang" : "es",
        "value" : "La librería Graphite2, en versiones de Firefox anteriores a la 54, es vulnerable a una lectura fuera de límites en la función graphite2::Silf::readGraphite."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7776",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-15T12:31:08.557",
      "lastModified" : "2024-11-21T03:32:38.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph."
      }, {
        "lang" : "es",
        "value" : "La librería Graphite2, en versiones de Firefox anteriores a la 54, es vulnerable a un desbordamiento de búfer de lectura basado en memoria dinámica en graphite2::Silf::getClassGlyph."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7777",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2019-04-15T12:31:08.603",
      "lastModified" : "2024-11-21T03:32:38.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function."
      }, {
        "lang" : "es",
        "value" : "La librería Graphite2, en versiones de Firefox anteriores a la 54, es vulnerable a un uso de memoria no inicializada en la función graphite2::GlyphCache::Loader::read_glyph."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "54.0",
            "matchCriteriaId" : "12FE3109-0EE6-49DC-974A-E522F55B17E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "5F864FFA-7BE6-48D8-A22E-986CCB5B45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11427",
      "sourceIdentifier" : "security@duo.com",
      "published" : "2019-04-17T14:29:00.247",
      "lastModified" : "2024-11-21T03:07:46.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers."
      }, {
        "lang" : "es",
        "value" : "OneLogin PythonSAML versión 2.3.0 y versiones anteriores pueden utilizar incorrectamente los resultados de las API de automatización y canonicalización de XML DOM de tal manera que un atacante pueda manipular los datos SAML sin invalidar la firma criptográfica, lo que permite que el ataque omita la identificación de los proveedores de servicio SAML"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@duo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@duo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onelogin:pythonsaml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "3804188A-61A9-4CF7-A57C-D6329D14A3A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "security@duo.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "security@duo.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11428",
      "sourceIdentifier" : "security@duo.com",
      "published" : "2019-04-17T14:29:00.323",
      "lastModified" : "2024-11-21T03:07:46.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers."
      }, {
        "lang" : "es",
        "value" : "OneLogin Ruby-SAML versión 1.6.0 y versiones anteriores pueden utilizar incorrectamente los resultados de las API de migración y canonicalización de DOM de XML de tal manera que un atacante pueda manipular los datos SAML sin invalidar la firma criptográfica, lo que permite que el ataque omita la autorización de los proveedores de servicio SAML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@duo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@duo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "A91764B6-BE43-4720-B876-620FE48D3C71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "security@duo.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "security@duo.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11429",
      "sourceIdentifier" : "security@duo.com",
      "published" : "2019-04-17T14:29:00.387",
      "lastModified" : "2024-11-21T03:07:46.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers."
      }, {
        "lang" : "es",
        "value" : "Clever saml2-js versión 2.0 y versiones anteriores pueden utilizar incorrectamente los resultados de las API de transversalización y canonicalización de DOM de XML de tal manera que un atacante pueda manipular los datos SAML sin invalidar la firma criptográfica, lo que permite que el ataque omita la identificación de los proveedores del servicio SAML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@duo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@duo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever:saml2-js:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A1B55F7F-28CC-46B5-85C3-1D2A4712EAA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "security@duo.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "security@duo.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11430",
      "sourceIdentifier" : "security@duo.com",
      "published" : "2019-04-17T14:29:00.433",
      "lastModified" : "2024-11-21T03:07:46.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers."
      }, {
        "lang" : "es",
        "value" : "OmniAuth OmnitAuth-SAML versión 1.9.0 y versiones anteriores pueden utilizar incorrectamente los resultados de las API de transversalización y canonicalización de DOM de XML de tal manera que un atacante pueda manipular los datos de SAML sin invalidar la firma criptográfica, lo que permite que el ataque omita la identificación de los proveedores de servicio SAML."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@duo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@duo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omniauth:omniauth_saml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.0",
            "matchCriteriaId" : "5AF7B4BD-83F0-43D0-9899-917AF4DA3153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "security@duo.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "security@duo.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/475445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12619",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-04-23T15:29:00.233",
      "lastModified" : "2024-11-21T03:09:54.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by \"stone lone\"."
      }, {
        "lang" : "es",
        "value" : "Apache Zeppelin,versión anterior a 0.7.3, era vulnerable a la fijación de sesiones, lo que permitía a un atacante secuestrar una sesión de usuario válida. El tema fue reportado por \"stone lone\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.3",
            "matchCriteriaId" : "BAADB20F-7BF2-416E-81A2-354B86126B10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2019/04/23/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108050",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ff6b995a5a3ba8db4d6b14b4d9dd487e7bf2e3bdd5b375b64a25fd06%40%3Cusers.zeppelin.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://zeppelin.apache.org/releases/zeppelin-release-0.7.3.html",
        "source" : "security@apache.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/04/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ff6b995a5a3ba8db4d6b14b4d9dd487e7bf2e3bdd5b375b64a25fd06%40%3Cusers.zeppelin.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://zeppelin.apache.org/releases/zeppelin-release-0.7.3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15716",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-04-23T16:15:08.327",
      "lastModified" : "2023-11-07T02:40:22.663",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-04-24T21:29:00.243",
      "lastModified" : "2024-11-21T03:19:56.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument."
      }, {
        "lang" : "es",
        "value" : "libseccomp-golang versión 0.9.0 y anteriores, BPF generan incorrectamente múltiples argumentos OR en lugar de ANDing. Un proceso que se realiza bajo un filtro seccomp restrictivo que especificó múltiples argumentos de syscall podría omitir las restricciones de acceso previstas al especificar un único argumento coincidente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libseccomp-golang_project:libseccomp-golang:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "6BE659D4-728B-49ED-878F-D0F43E9C2B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2019/04/25/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/seccomp/libseccomp-golang/commit/06e7a29f36a34b8cf419aeb87b979ee508e58f9e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seccomp/libseccomp-golang/issues/22",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4574-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2019/04/25/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2019:4090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/seccomp/libseccomp-golang/commit/06e7a29f36a34b8cf419aeb87b979ee508e58f9e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seccomp/libseccomp-golang/issues/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4574-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-04-25T17:29:00.220",
      "lastModified" : "2024-11-21T03:16:35.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module."
      }, {
        "lang" : "es",
        "value" : "Contao versiones desde la 3.0.0 hasta la 3.5.30 y desde la 4.0.0 hasta la 4.4.7 presenta una vulnerabilidad de inyección SQL en el back end así como en el listado de módulos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.5.30",
            "matchCriteriaId" : "114710AA-2F2A-41A6-B22E-C466D43BB8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.4.7",
            "matchCriteriaId" : "82AD7A27-EF01-475A-A3DF-8FB35F8E4BB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://contao.org/de/changelog/versions/4.4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://contao.org/en/news/contao-4_4_8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://contao.org/de/changelog/versions/4.4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://contao.org/en/news/contao-4_4_8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:00.287",
      "lastModified" : "2025-11-05T19:23:50.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter."
      }, {
        "lang" : "es",
        "value" : "El router P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 de ZyXEL distribuido por TrueOnline tiene una vulnerabilidad de inyección de comandos en la función de reenvío de registro del sistema remoto (Remote System Log forwarding), que es accesible por un usuario identificado. La vulnerabilidad está en la página ViewLog.asp y puede ser aprovechada por medio del parámetro remote_host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-08-07",
      "cisaActionDue" : "2023-08-28",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Zyxel P660HN-T1A Routers Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C756E02F-45B7-4F40-AEEC-DCC334023F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345E3D41-AF56-47DA-9719-E84FB9DB300B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6D563A-3210-4459-BE4D-5CC36CAF6784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB423D04-654A-4FD5-8973-17E5B08C7453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF29B50-0AE2-444C-A251-C27DEBDC064B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-18368",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:00.647",
      "lastModified" : "2024-11-21T03:19:57.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter."
      }, {
        "lang" : "es",
        "value" : "El router 5200W-T 1.02b.rc5.dt49 de Billion distribuido por TrueOnline tiene una vulnerabilidad de inyección de comandos en la función de reenvío de registro del sistema remoto (Remote System Log forwarding), que es accesible por un usuario identificado. La vulnerabilidad está en la página adv_remotelog.asp y puede ser aprovechada por medio del parámetro syslogServerAddr."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:1.02b:rc5.dt49:*:*:*:*:*:*",
            "matchCriteriaId" : "0425FE15-2C4A-4684-81D2-242BBB3241C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:00.880",
      "lastModified" : "2024-11-21T03:19:57.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371."
      }, {
        "lang" : "es",
        "value" : "El router P660HN-T1A v2 TCLinux Fw # 7.3.37.6 de ZyXEL distribuido por TrueOnline tiene una vulnerabilidad de inyección de comandos en la función de reenvío de registro del sistema remoto (Remote System Log forwarding), que solo es accesible por un usuario identificado. La vulnerabilidad está en la página logSet.asp y puede ser aprovechada por medio del parámetro ServerIP. La autorización  se puede lograr mediante la función de CVE-2017-18371."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C756E02F-45B7-4F40-AEEC-DCC334023F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.37.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A338A056-6EC1-4CFB-A10D-1CB8D1771502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6D563A-3210-4459-BE4D-5CC36CAF6784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.37.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524CE722-B1A3-43F9-84D5-F63B57D6BCC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF29B50-0AE2-444C-A251-C27DEBDC064B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:01.067",
      "lastModified" : "2024-11-21T03:19:57.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes."
      }, {
        "lang" : "es",
        "value" : "El router P660HN-T1A v2 TCLinux Fw # 7.3.37.6 de ZyXEL distribuido por TrueOnline, tiene tres cuentas de usuario con contraseñas por defecto, incluidas dos cuentas de servicio codificadas: una con el nombre de usuario y contraseña auténticos, y otro con el nombre de usuario supervisor y la contraseña zyad1234. Estas cuentas pueden ser usadas para iniciar sesión en la interfaz web, aprovechar  inyecciones de comandos identificadas y cambiar la configuración del router para fines maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C756E02F-45B7-4F40-AEEC-DCC334023F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.37.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A338A056-6EC1-4CFB-A10D-1CB8D1771502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6D563A-3210-4459-BE4D-5CC36CAF6784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.37.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524CE722-B1A3-43F9-84D5-F63B57D6BCC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF29B50-0AE2-444C-A251-C27DEBDC064B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:01.257",
      "lastModified" : "2024-11-21T03:19:57.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373."
      }, {
        "lang" : "es",
        "value" : "El router 5200W-TTCLinux Fw $ 7.3.8.0 versión 008 130603 de Billion distribuido por TrueOnline, tiene una vulnerabilidad de inyección de comandos en la función de configuración de tiempo (Time Setting), que solo es accesible por un usuario identificado. La vulnerabilidad está en la página tools_time.asp y puede ser aprovechada por medio del parámetro uiViewSNTPServer. La identificación puede ser logrado mediante la operación de CVE-2017-18373."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C756E02F-45B7-4F40-AEEC-DCC334023F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345E3D41-AF56-47DA-9719-E84FB9DB300B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6D563A-3210-4459-BE4D-5CC36CAF6784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB423D04-654A-4FD5-8973-17E5B08C7453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF29B50-0AE2-444C-A251-C27DEBDC064B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:01.363",
      "lastModified" : "2024-11-21T03:19:57.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes."
      }, {
        "lang" : "es",
        "value" : "El router 5200W-T TCLinux Fw $ 7.3.8.0 versión 008 130603 de Billion distribuido por TrueOnline tiene tres cuentas de usuario con contraseñas por defecto, incluyendo dos cuentas de servicio codificadas: una con el nombre de usuario y contraseña auténtico, y el otro con el nombre de usuario user3 y una contraseña larga que consiste en una repetición de la cadena 0123456789. Estas cuentas pueden ser usadas para iniciar sesión en la interfaz web, aprovechar inyecciones de comandos identificadas y cambiar la configuración del router para fines maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C756E02F-45B7-4F40-AEEC-DCC334023F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-02T17:29:01.490",
      "lastModified" : "2024-11-21T03:19:57.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes."
      }, {
        "lang" : "es",
        "value" : "El router ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 distribuido por TrueOnline tiene dos cuentas de usuario con contraseñas predeterminadas, incluyendo una cuenta de servicio con el nombre de usuario true y password true. Estas cuentas se pueden utilizar para iniciar sesión en la interfaz web, explotar inyecciones de comandos autenticadas y cambiar la configuración del router con fines maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C756E02F-45B7-4F40-AEEC-DCC334023F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F97C92-C53D-4578-92ED-9327E3646FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345E3D41-AF56-47DA-9719-E84FB9DB300B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6D563A-3210-4459-BE4D-5CC36CAF6784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB423D04-654A-4FD5-8973-17E5B08C7453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:p660hn-t1a_v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF29B50-0AE2-444C-A251-C27DEBDC064B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zyxel.com/support/announcement_unauthenticated.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Jan/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/index.php/archives/2910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15841",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.220",
      "lastModified" : "2024-11-21T03:15:19.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "Cuando HOST envía un paquete de ID de comando especial, el controlador activa un volcado de RAM y un restablecimiento de FW en Snapdragon Mobile en las versiones SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18131",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.297",
      "lastModified" : "2024-11-21T03:19:25.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "En QTEE, se puede sobrecargar un valor de fusible incorrecto en Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear en las versiones MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18156",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.360",
      "lastModified" : "2024-11-21T03:19:27.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 625, SD 820, SD 820A, SD 835, SDX20."
      }, {
        "lang" : "es",
        "value" : "Durante el procesamiento de los búferes de la cámara en el controlador de la cámara, se puede producir una condición de referencia a memoria después de que haya sido liberada en Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear en MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 625, SD 820, SD 820A, SD 835, SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18157",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.440",
      "lastModified" : "2024-11-21T03:19:27.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20."
      }, {
        "lang" : "es",
        "value" : "Una condición de uso después de liberar la memoria puede ocurrir en Thermal Engine en Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear en MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18173",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.487",
      "lastModified" : "2024-11-21T03:19:28.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "En caso de utilizar una firma de arranque verificada por Android no válida con una longitud muy grande, se produce un subdesbordamiento de enteros en Snapdragon Mobile en SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18274",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.547",
      "lastModified" : "2024-11-21T03:19:44.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835"
      }, {
        "lang" : "es",
        "value" : "Al iterar a través de los modelos contenidos en un array de tamaño fijo en la estructura actData, que también almacena un número incorrecto de modelos mayor que el tamaño del array, se produce un desbordamiento de búfer en Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear en MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18275",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.610",
      "lastModified" : "2024-11-21T03:19:44.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845."
      }, {
        "lang" : "es",
        "value" : "Se puede insertar una nueva cuenta en el servicio simContacts utilizando la herramienta de línea de comandos Android en Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear en MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18276",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.673",
      "lastModified" : "2024-11-21T03:19:44.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850"
      }, {
        "lang" : "es",
        "value" : "La lógica segura de la cámara permite que los controladores de cámara de pantalla/seguridad accedan a la memoria HLOS durante la visualización segura o la sesión de cámara en Snapdragon Mobile, Snapdragon Wear en MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845 y SD 850."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18278",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.737",
      "lastModified" : "2024-11-21T03:19:45.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the segment header, which may result in a buffer overflow, in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850."
      }, {
        "lang" : "es",
        "value" : "Puede producirse un subdesbordamiento de enteros debido a la falta de comprobación cuando la longitud de los datos recibidos de font_mgr_qsee_request_service es mayor que el valor mínimo de la cabecera de segmento, lo que puede dar lugar a un desbordamiento del búfer, en Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear en MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18279",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-05-06T23:29:00.783",
      "lastModified" : "2024-11-21T03:19:45.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016."
      }, {
        "lang" : "es",
        "value" : "La falta de comprobación de la longitud del búfer antes de copiar puede provocar un desbordamiento del búfer en el módulo de la cámara en Small Cell SoC, Snapdragon Mobile, Snapdragon Wear en FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm9055_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEF02F2-2BFE-4108-B3EE-53C3F8745B6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm9055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4868AC-4F4B-49A4-AFDD-09FDA1882E22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm9955_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFEC421-838E-4E51-8293-918D1C5ABE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm9955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E55D52-C52F-4E15-A371-CD40A52642AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CB547F-0078-47CD-B511-06DE96882D5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA679375-BB14-4B24-8AD9-B2BFBACE2FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9531_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71452E6-551F-4E93-9951-2582C60BDFCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69FB0E-FDFF-42B8-ADAD-797B7C91E979"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9558_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A974EE-8003-4482-BC09-F7C24AB20267"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9558:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F2B1C1-8267-43EA-B3FA-314A588F4A6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9563_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DCC558-4298-4D86-BC40-45B03DC9C823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9563:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979B7BE3-AB01-4CE7-BF10-E78A459B7D08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9880_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F81D132-B2DD-4D09-8561-21A2CFBCC9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F099A893-232B-48FB-81B3-F01AF2A19426"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9886_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311229F9-4A32-462D-AE8D-E5E2B2C416CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A523C3F-FB62-4728-8173-4C117C28AC5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC53AC-E040-40E0-B09B-4117E641C9D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE49086-E95B-4852-8A09-16A83DD63EC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0DD11-0B28-4B6D-BDB7-0DBFA34A7187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551512D0-ED24-4B5A-BEB2-B090BB8DEE0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1CC1C1-F2CA-4C43-B9E9-1288C3496C7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC82552A-9E7C-4A13-B7A5-43CEA218675C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T15:29:00.230",
      "lastModified" : "2024-11-21T03:10:11.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows remote attackers to inject arbitrary web script or HTML via the (1) class1 parameter or the (2) anyid parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de cross-site scripting (XSS) en admin/index.php en Metinfo 5.3.18 permite a los atacantes remotos inyectar secuencias de comandos web arbitrarias o HTML a través del parámetro (1) class1 o (2) anyid."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40699668-1D48-4A15-A7BA-002DF947CDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T16:29:00.247",
      "lastModified" : "2024-11-21T03:10:13.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service (hmemory exhaustion) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "La función iwgif_init_screen en imagew-gif.c: 510 en ImageWorsener versión 1.3.2, permite a los atacantes remotos generar una Denegación de Servicio (DoS) (agotamiento de memoria) por medio de un archivo creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:imageworsener:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E435E26A-659E-4A65-A6BF-1AA33DFE4D7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsummers/imageworsener/issues/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/imageworsener/issues/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T16:29:00.327",
      "lastModified" : "2024-11-21T03:10:13.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick versión 7.0.6-6, se encontró una vulnerabilidad de agotamiento de la memoria en la función ReadTIFFImage, que permite a los atacantes generar una Denegación de Servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/664",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4034-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4034-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T16:29:00.373",
      "lastModified" : "2024-11-21T03:10:14.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "En ImageMagick 7.0.6-6, se encontró una vulnerabilidad de agotamiento de memoria en la función format8BIM, que permite a los atacantes causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157776E9-D30D-48D2-B845-ED6315B8C5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4034-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4034-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T17:29:00.250",
      "lastModified" : "2024-11-21T03:10:10.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UI Lock feature in qBittorrent version 3.3.15 is vulnerable to Authentication Bypass, which allows Attack to gain unauthorized access to qBittorrent functions by tampering the affected flag value of the config file at the C:\\Users\\<username>\\Roaming\\qBittorrent pathname. The attacker must change the value of the \"locked\" attribute to \"false\" within the \"Locking\" stanza. NOTE: This is an intended behavior. See https://github.com/qbittorrent/qBittorrent/wiki/I-forgot-my-UI-lock-password"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La función UI Lock en qBittorrent versión 3.3.15 es vulnerable a la Omisión de autorización, lo que permite al atacante conseguir acceso no autorizado a las funciones de qBittorrent al manipular el valor del indicador afectado del archivo de configuración en el pathname C:\\ Users\\\\Roaming\\qBittorrent nombre de ruta. El atacante debe cambiar el valor del atributo \"locked\" a \"false\" dentro de la expresión \"Bloqueo\". NOTA: Este es un comportamiento intencionado. Ver https://github.com/qbittorrent/qBittorrent/wiki/I-forgot-my-UI-lock-password."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbittorrent:qbittorrent:3.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386562DD-73C5-4F3C-BF0D-197EEF0D61EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archive.is/eF2GR",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qbittorrent/qBittorrent/wiki/I-forgot-my-UI-lock-password",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40BaYinMin/cve-2017-12778-qbittorrent-ui-lock-authentication-bypass-30959ff55ada",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archive.is/eF2GR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qbittorrent/qBittorrent/wiki/I-forgot-my-UI-lock-password",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://medium.com/%40BaYinMin/cve-2017-12778-qbittorrent-ui-lock-authentication-bypass-30959ff55ada",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T17:29:00.357",
      "lastModified" : "2024-11-21T03:10:11.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/index.php. The attack vector is: The administrator clicks on the malicious link in the login state."
      }, {
        "lang" : "es",
        "value" : "Metinfo 5.3.18 se ve afectado por: Cross-Site Request Forgery (CSRF). El impacto es: Divulgación de información (remota). El componente es: admin/index.php. El vector de ataque es: El administrador hace clic en el enlace malicioso en el estado de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40699668-1D48-4A15-A7BA-002DF947CDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T17:29:00.420",
      "lastModified" : "2024-11-21T03:10:16.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service (out-of-bounds read) or possibly have unspecified other impact via a crafted mp3 file."
      }, {
        "lang" : "es",
        "value" : "se presenta una vulnerabilidad en una sobre-lectura  del búfer en la región heap de la memoria en la función getbits en src/libmpg123/ getbits.h en mpg123 versión 1.25.5, permite a los atacantes remotos generar una posible Denegación de Servicio (DoS) (lectura fuera de límites) o posiblemente tiene otro impacto no especificado por medio de un archivo mp3 creado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.25.5",
            "matchCriteriaId" : "49C27154-8828-4751-A845-2307670C47CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/mpg123/bugs/255/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mpg123.de/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mpg123.de/cgi-bin/scm/mpg123/trunk/src/libmpg123/getbits.h?r1=2024&r2=4323&sortby=date",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/mpg123/bugs/255/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mpg123.de/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mpg123.de/cgi-bin/scm/mpg123/trunk/src/libmpg123/getbits.h?r1=2024&r2=4323&sortby=date",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T18:29:01.883",
      "lastModified" : "2024-11-21T03:10:08.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image Sharing Script 4.13i and Tech Job Script 9.27i and Tech Movie Script 7.51i and Tech Multi Vendor Script 6.63i and Tech Social Networking Script 3.08i and Tech Travel Script 9.49. The impact is: Code execution (remote)."
      }, {
        "lang" : "es",
        "value" : "Algunos productos de Ambit Technologies Pvt. Ltd. se ven afectados por: Inyección SQL. Esto afecta a iTech B2B Script 4.42i y Tech Business Networking Script 8.26i y Tech Caregiver Script 2.71i y Tech Classifieds Script 7.41i y Tech Dating Script 3.40i y Tech Freelancer Script 5.27i y Tech Image Sharing Script 4.13i y Tech Job Script 9.27i y Tech Movie Script 7.51i y Tech Multi Vendor Script 6.63i y Tech Social Networking Script 3.08i y Tech Travel Script 9.49. El impacto es: Ejecución de código (remota)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_b2b_script:4.42i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE8E077-00E7-4D2E-8687-E06D1D783848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_business_networking_script:8.26i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F9FF2F-262F-4347-BFAA-39FEA7F6C53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_caregiver_script:2.71i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79335270-FDBA-471E-92E8-3F5FEAF412C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_classifieds_script:7.41i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3B4ECA-A369-4663-A3AF-D9993D626ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_dating_script:3.40i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CD7C57-4B51-456E-8C79-154DCA795FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_freelancer_script:5.27i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EFAD16-D639-4304-B650-EAB91CB84C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_image_sharing_script:4.13i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8AB1C0-0077-4BCE-823E-AB7ECE4AA37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_job_script:9.27i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486B3E2E-4CF9-47BF-BC3B-0D02A6D2ADED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_movie_script:7.51i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA28A846-FEAA-4028-95E2-83CBCFD89153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_multi_vendor_script:6.63i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE0AB6B-8DA4-494F-8526-B928CABD8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_social_networking_script:3.08i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1E4C5-1D49-40EA-AFDB-5127A92F21A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambittechnologies:itech_travel_script:9.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1447341F-A7E7-49B1-9BC1-19ED2B6C4F69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ambit.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://itech.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ambit.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://itech.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T18:29:02.007",
      "lastModified" : "2024-11-21T03:10:08.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution (remote). The component is: com_appointment component."
      }, {
        "lang" : "es",
        "value" : "https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 está afectado por: Inyección SQL. El impacto es: Ejecución de código (remota). El componente es: com_appointment component."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlaextensions:component_appointment:1.1:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "F87C9873-C692-43FA-B9FD-42B57B380EDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://joomlaextension.biz/appointment/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://joomlaextension.biz/appointment/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T18:29:02.100",
      "lastModified" : "2024-11-21T03:10:08.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 is affected by: SQL Injection. The impact is: Code execution (remote)."
      }, {
        "lang" : "es",
        "value" : "Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 se ve afectado por: Inyección SQL. El impacto es: Ejecución de código (remota)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ynetinteractive:soa_school_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317BC616-1EC0-4602-820A-19261A285DE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://demo.ynetinteractive.com/soa/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://soa.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42499",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://demo.ynetinteractive.com/soa/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://soa.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T18:29:02.243",
      "lastModified" : "2024-11-21T03:10:08.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ynet Interactive - http://demo.ynetinteractive.com/mobiketa/ Mobiketa 4.0 is affected by: SQL Injection. The impact is: Code execution (remote)."
      }, {
        "lang" : "es",
        "value" : "Ynet Interactive - http://demo.ynetinteractive.com/mobiketa/ Mobiketa 4.0 se ve afectado por: Inyección SQL. El impacto es: Ejecución de código (remota)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ynetinteractive:mobiketa:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445A5C33-0DF7-4134-A049-B0C3D17CB3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://demo.ynetinteractive.com/mobiketa/index.php?url=myCampaign&view=-9999%27+/%2A%2150000union%2A/+select=%5BSQL%5D",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41283",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://demo.ynetinteractive.com/mobiketa/index.php?url=myCampaign&view=-9999%27+/%2A%2150000union%2A/+select=%5BSQL%5D",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-09T18:29:02.350",
      "lastModified" : "2024-11-21T03:10:09.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download (remote). The component is: $file = $_GET['id'] in download.php. The attack vector is: http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php."
      }, {
        "lang" : "es",
        "value" : "http://codecanyon.net/user/Endober WebFile Explorer, versión 1.0, está afectado por: Inyección SQL. El impacto es: Descarga de archivos arbitrarios (remoto). El componente es: $file = $_GET['id'] en download.php. El vector de ataque es: http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webfile_explorer_project:webfile_explorer:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1941D9B-74FA-4A42-BE4E-553BBE9668B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://codecanyon.net/user/Endober",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://webfile.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://codecanyon.net/user/Endober",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://webfile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-10T15:29:00.247",
      "lastModified" : "2024-11-21T03:10:11.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/interface/online/delete.php. The attack vector is: The administrator clicks on the malicious link in the login state."
      }, {
        "lang" : "es",
        "value" : "Metinfo versión 5.3.18 que está afectado por: una vulnerabilidad de tipo  Cross Site Request Forgery (CSRF). El impacto es: Revelación de información (remota). El componente es: admin/interface/online/delete.php. El vector de ataque es: El administrador hace clic en un enlace malicioso en el estado de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metinfo:metinfo:5.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40699668-1D48-4A15-A7BA-002DF947CDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-10T15:29:00.353",
      "lastModified" : "2024-11-21T03:10:12.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation)."
      }, {
        "lang" : "es",
        "value" : "OpenMRS openmrs-module-htmlformormentry 3.3.2 se ve afectado por: (Verificación de entrada incorrecta)"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmrs:openmrs-module-htmlformentry:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7109B82C-B72E-4CA2-987F-51D2531B4110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openmrs-module-htmlformentry.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://openmrs.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openmrs/openmrs-module-htmlformentry/commit/86f35221c8a57cdd7557ce731a56b90db216c8e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openmrs/openmrs-module-htmlformentry/compare/f50bdf1...cc0be04",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openmrs-module-htmlformentry.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://openmrs.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openmrs/openmrs-module-htmlformentry/commit/86f35221c8a57cdd7557ce731a56b90db216c8e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openmrs/openmrs-module-htmlformentry/compare/f50bdf1...cc0be04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-10T15:29:00.527",
      "lastModified" : "2024-11-21T03:10:22.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH App Suite versión 7.8.4 y anteriores estan afectadas por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://app.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://app.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-10T16:29:00.250",
      "lastModified" : "2024-11-21T03:10:22.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH App Suite 7.8.4 y anteriores se ve afectada por: Divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://app.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://app.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T18:29:00.227",
      "lastModified" : "2024-11-21T03:29:56.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the \"author_name\":\" substring."
      }, {
        "lang" : "es",
        "value" : "WordPress 4.7.2 maneja de manera inapropiada los listados de los autores de las publicaciones, esto permite a los atacantes remotos obtener información confidencial (Path Disclosure) mediante un /wp-json/oembed/1.0/embed?url= request, relacionada con la subcadena \"author_name\": \"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8459259A-4895-42B6-A242-D0B5871BE672"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/CFSECURITE/wordpress",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://web.archive.org/web/20180612235401/https://github.com/CFSECURITE/wordpress",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/CFSECURITE/wordpress",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://web.archive.org/web/20180612235401/https://github.com/CFSECURITE/wordpress",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T19:29:00.237",
      "lastModified" : "2024-11-21T03:36:54.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH OX App Suite 7.8.4 y versión anterior, se ven afectados por: Exposición de Información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.277",
      "lastModified" : "2024-11-21T03:28:33.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Control de Acceso Incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.370",
      "lastModified" : "2024-11-21T03:28:33.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.433",
      "lastModified" : "2024-11-21T03:28:34.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote)."
      }, {
        "lang" : "es",
        "value" : "Odoo Versión <= 8.0-20160726 y Versión 9, es afectada por: CWE-601: Redirección abierta. El impacto es: obtener información confidencial (remota)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D140CBF-E659-4E87-8FEE-F19CD2E6B947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:8.0:20160726:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D22138-711E-4A13-80C5-B52C66565BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59408702-9C9E-4F25-85FB-D4F9AD4949BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odoo:odoo:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75A14CA-5B6C-4324-B5E5-BED6890D1426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sysdream.com/news/lab/2017-11-20-cve-2017-5871-odoo-url-redirection-to-distrusted-site-open-redirect/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.odoo.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sysdream.com/news/lab/2017-11-20-cve-2017-5871-odoo-url-redirection-to-distrusted-site-open-redirect/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.odoo.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.497",
      "lastModified" : "2024-11-21T03:28:49.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libavcodec in Libav 9.21, ff_h264_execute_ref_pic_marking() has a heap-based buffer over-read."
      }, {
        "lang" : "es",
        "value" : "En libavcodec en Libav 9.21, ff_h264_execute_ref_pic_marking (), tiene una lectura en exceso del búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libav:libav:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC929204-B8FE-48AE-8D32-DC6BFCB99DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patches.libav.org/patch/62534/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.libav.org/show_bug.cgi?id=1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://patches.libav.org/patch/62534/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.543",
      "lastModified" : "2024-11-21T03:30:47.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite Versión 7.8.3 y anteriores, se ven afectados por: Control de Acceso Incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.620",
      "lastModified" : "2024-11-21T03:33:48.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Control de Acceso Incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.697",
      "lastModified" : "2024-11-21T03:33:48.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Suplantación de Contenido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.777",
      "lastModified" : "2024-11-21T03:34:40.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX Cloud Plugins versión 1.4.0 y anteriores, se ven afectados por: Falta de Autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:ox_cloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "AFEAA326-A612-4042-92B3-378BE34081AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4137_1.2.2_2017-05-12.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4137_1.2.2_2017-05-12.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-22T20:29:00.870",
      "lastModified" : "2024-11-21T03:36:53.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH OX App Suite versión 7.8.4 y anteriores, se ven afectados por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.287",
      "lastModified" : "2024-11-21T03:13:58.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.4 y anteriores, se ven afectadas por: SSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.350",
      "lastModified" : "2024-11-21T03:13:58.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.4 y anteriores, se ven afectados por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.430",
      "lastModified" : "2024-11-21T03:14:57.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well."
      }, {
        "lang" : "es",
        "value" : "Ghostscript versión 9.22 de Artifex, se ve afectado por: Obtención de Información. El impacto es: conseguir información confidencial. El componente es: archivo de código fuente afectado, función afectada, ejecutable afectado, libga afectado (imagemagick used that). El vector de ataque es: Alguien debe abrir un archivo postscript por medio de ghostscript. Debido a que imagemagick también usa libga, de la misma manera fue afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7ED7728-3EC2-4423-AC71-BAEE7822397E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2fc463d0e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/108463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2fc463d0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/108463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=698676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.523",
      "lastModified" : "2024-11-21T03:17:25.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH OX App Suite versión 7.8.4 y anteriores, se ven afectadas por: Permisos Inseguros."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/components/releasenotes/7.8.3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/components/releasenotes/7.8.3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.587",
      "lastModified" : "2024-11-21T03:17:25.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH OX App Suite versión 7.8.4 y anteriores, se ven afectados por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/components/releasenotes/7.8.3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/components/releasenotes/7.8.3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.647",
      "lastModified" : "2024-11-21T03:27:17.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Exposición de la Información."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.727",
      "lastModified" : "2024-11-21T03:27:17.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Suplantación de Contenido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.803",
      "lastModified" : "2024-11-21T03:27:17.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 esta afectada por: Control de Acceso Incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E804C89F-033F-43B3-B63B-172F9B2136CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T15:29:00.867",
      "lastModified" : "2024-11-21T03:27:17.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Open-Xchange GmbH OX App Suite versión 7.8.3 y anteriores, se ven afectados por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.3",
            "matchCriteriaId" : "C77DCBA3-CB5A-4F73-817E-717C8335463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-xchange.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://open-xchange.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T16:29:08.073",
      "lastModified" : "2024-11-21T03:08:01.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the \"Group Chat\" or \"Alarm\" section. This functionality can be abused by a malicious user by uploading a web shell."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ZOHO ManageEngine OpManager versión 12.2. Un usuario autenticado puede cargar cualquier archivo que desee compartir en la sección \"Group Chat\" or \"Alarm\". Un usuario malicioso puede abusar de esta funcionalidad cargando un Web Shell ."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF7ED07-3132-4670-831B-CCD6F34E5C3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://opmanager.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://opmanager.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T16:29:08.153",
      "lastModified" : "2024-11-21T03:08:24.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack."
      }, {
        "lang" : "es",
        "value" : "En Zoho ManageEngine Application Manager anterior a la version 14.6 Build 14660, el parámetro 'haid' del módulo '/auditLogAction.do' es vulnerable a un ataque de inyección SQL tipo time-based-blind"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.1:13100:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADA2415-EC81-4764-9649-010776AF62CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://application.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-11738.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://application.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-11738.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T16:29:08.213",
      "lastModified" : "2024-11-21T03:08:24.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a \"Utility Widget\" with a \"Custom HTML or Text\" field. Once this widget is created, it will be loaded on the dashboard where it was added. An attacker can abuse this functionality by creating a \"Utility Widget\" that contains malicious JavaScript code, aka XSS."
      }, {
        "lang" : "es",
        "value" : "En Zoho ManageEngine Application Manager 13.1 Build 13100, un usuario autenticado, con privilegios administrativos, tiene la facultad de agregar un widget en cualquier panel. Este widget puede ser un \"Utility Widget\" con un campo \"Custom HTML or Text\". Una vez que este  widget sea creado, será cargado en el panel donde fue agregado. Un atacante puede abusar de esta funcionalidad mediante la creación de un \"Utility Widget\" que contenga un código JavaScript malicioso, también conocido como XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.1:13100:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADA2415-EC81-4764-9649-010776AF62CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://application.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://application.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T16:29:08.293",
      "lastModified" : "2024-11-21T03:08:24.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse this functionality by uploading a malicious script that can be executed on the remote system."
      }, {
        "lang" : "es",
        "value" : "En Zoho ManageEngine Application Manager 13.1 Build 13100, el usuario administrativo tiene la capacidad para cargar archivos binarios que pueden ejecutarse cuando ocurre una alarma. Un atacante puede abusar de esta funcionalidad cargando un script malicioso que puede ser ejecutado en el sistema remoto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:13.1:13100:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADA2415-EC81-4764-9649-010776AF62CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://application.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://application.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T16:29:08.370",
      "lastModified" : "2024-11-21T03:11:23.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH OX App Suite versión 7.8.4 y anteriores, se ven afectados por: Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T18:29:00.373",
      "lastModified" : "2024-11-21T03:07:39.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator."
      }, {
        "lang" : "es",
        "value" : "Ciertos productos de Symfony se ven afectados por: Control de Acceso Incorrecto. Esto afecta a Symfony versión 2.7.30 y Symfony versión 2.8.23 y Symfony versión 3.2.10 y Symfony versión 3.3.3. El tipo de explotación es: remota. El componente es: validador de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:2.7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6568EAFA-31AB-4A0F-880B-F6663FBE3286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:2.8.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E38D99-9CE1-4CEE-A635-8CE9E14AE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:3.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DDF7CB-FAB7-4536-BA76-6CD826202CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A2186-9B0C-4E44-A788-02A0C9B03BE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/23507",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/23507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T18:29:00.450",
      "lastModified" : "2024-11-21T03:08:00.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ZOHO ManageEngine Applications Manager versión 12.3. Es posible que un usuario no autenticado vea la lista de nombres de dominio y nombres de usuario utilizados en el entorno de red de una empresa por medio de una solicitud userconfiguration.do?method=editUser."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC75B6D-A432-46BE-AFD7-2D4B7E4EC82C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://applications.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://applications.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T18:29:00.560",
      "lastModified" : "2024-11-21T03:08:01.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of \"/api/json/admin/getmailserversettings\" and \"/api/json/dashboard/gotoverviewlist\" is vulnerable to a Blind SQL Injection attack."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ZOHO ManageEngine OpManager 12.2. El parámetro 'apiKey' de \"/ api / json / admin / getmailserversettings\" y \"/ api / json / dashboard / gotoverviewviewlist\" es vulnerable a un ataque de Inyección de tipo Blind SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF7ED07-3132-4670-831B-CCD6F34E5C3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://opmanager.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://opmanager.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T18:29:00.637",
      "lastModified" : "2024-11-21T03:08:01.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload an HTML file. This HTML file is then rendered in various locations of the application. JavaScript inside the uploaded HTML is also interpreted by the application. Thus, an attacker can inject a malicious JavaScript payload inside the HTML file and upload it to the application."
      }, {
        "lang" : "es",
        "value" : "Fue encontrado un problema en ZOHO ManageEngine OpManager 12.2. Al agregar un Google Map a la aplicación, un usuario autenticado puede cargar un archivo HTML. Este archivo HTML se procesa en varias ubicaciones de la aplicación. JavaScript dentro del HTML cargado también es interpretado por la aplicación. Por lo tanto, un atacante puede inyectar una carga maliciosa de JavaScript dentro del archivo HTML y cargarlo a la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF7ED07-3132-4670-831B-CCD6F34E5C3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://opmanager.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://opmanager.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-23T18:29:00.683",
      "lastModified" : "2024-11-21T03:11:23.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF."
      }, {
        "lang" : "es",
        "value" : "OX Software GmbH OX App Suite 7.8.4 y anteriores, se ven afectados por: SSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.8.4",
            "matchCriteriaId" : "21A45377-C1DE-44AB-A02F-A377BE4E9A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://ox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-05-24T18:29:00.723",
      "lastModified" : "2024-11-21T03:19:57.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php."
      }, {
        "lang" : "es",
        "value" : "Ampache versión 3.8.3, permite la instanciación de objetos PHP por medio de los archivos Democratic.ajax.php y Democratic.class.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1725910A-B635-4EFD-A8D3-6757A44C897F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fenceposterror.github.io/2017/06/16/Hacking-For-Fun-And-Non-Profit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://fenceposterror.github.io/2017/06/16/Hacking-For-Fun-And-Non-Profit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-02T20:29:00.230",
      "lastModified" : "2024-11-21T03:19:58.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de autorización inapropiada en la API de usuario en TheHive anterior a versión 2.13.4 y versión 3.x anterior a 3.3.1, permite a los usuarios con acceso de solo lectura o lectura/escritura escalar sus privilegios a privilegios de administrador. Esto afecta a la app/controllers/UserCtrl.scala."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strangebee:thehive:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13.4",
            "matchCriteriaId" : "18A298BF-3067-46BF-8E35-380C2165EBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strangebee:thehive:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "62666BC5-10D7-4F09-9B15-5415FAA9BA57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/RaJiska/c1b4521aefd77ed43b06045ca05e2591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/TheHive-Project/TheHive/issues/408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TheHive-Project/TheHive/releases/tag/3.3.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/RaJiska/c1b4521aefd77ed43b06045ca05e2591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/TheHive-Project/TheHive/issues/408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TheHive-Project/TheHive/releases/tag/3.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-03T19:29:00.220",
      "lastModified" : "2024-11-21T03:13:24.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat BOS versions are affected, prior to the submission of this exploit. Also, the SiteOmat does not force administrators to switch passwords, leaving SSH and HTTP remote authentication open to public."
      }, {
        "lang" : "es",
        "value" : "Se encontró una omisión de autenticación en un área desconocida del código fuente de SiteOmat. Todas las versiones de SiteOmat BOS se ven afectadas, antes de enviar este exploit. Además, SiteOmat no obliga a los administradores a cambiar las contraseñas, dejando la autenticación remota de SSH y HTTP abierta al público."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.414.084",
            "matchCriteriaId" : "FF41A56A-914A-4D8D-A310-AED1BC1CE9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.orpak.com/allproducts/siteomat-station-controller-sw/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.orpak.com/allproducts/siteomat-station-controller-sw/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-03T19:29:00.297",
      "lastModified" : "2024-11-21T03:13:37.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones conocidas de la consola de administración web de Orpak SiteOmat son vulnerables para múltiples instancias de Cross-Site Scripting (XSS) debido a una validación de entrada de usuario externa incorrecta. Un atacante con acceso a la interfaz web puede secuestrar sesiones o navegar a las víctimas fuera de SiteOmat, a un servidor malicioso de su propiedad."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.414.084",
            "matchCriteriaId" : "FF41A56A-914A-4D8D-A310-AED1BC1CE9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.orpak.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.orpak.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-03T19:29:00.360",
      "lastModified" : "2024-11-21T03:13:37.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de SQL en todas las versiones de Orpak SiteOmat anteriores al 25-09-2017. La vulnerabilidad se encuentra en la página de inicio de sesión, donde el proceso de validación de autenticación contiene una consulta SELECT insegura. El ataque permite la omisión de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.414.084",
            "matchCriteriaId" : "FF41A56A-914A-4D8D-A310-AED1BC1CE9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.orpak.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.orpak.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-03T19:29:00.437",
      "lastModified" : "2024-11-21T03:13:38.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data."
      }, {
        "lang" : "es",
        "value" : "Se encontró una comunicación insegura entre el usuario y la consola de administración de Orpak SiteOmat para todas las versiones conocidas, debido a un certificado SSL no válido. El ataque le permite a un intruso captar la comunicación y descifrar los datos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.414.084",
            "matchCriteriaId" : "FF41A56A-914A-4D8D-A310-AED1BC1CE9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.orpak.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.orpak.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-03T19:29:00.500",
      "lastModified" : "2024-11-21T03:13:38.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device."
      }, {
        "lang" : "es",
        "value" : "El componente Orpak SiteOmat OrCU es vulnerable a la inyección de código, para todas las versiones anteriores al 25-09-2017, debido a una consulta de búsqueda que utiliza un comando de shell directo. Al manipular la solicitud, un atacante puede ejecutar comandos de shell y recibir una salida válida del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.414.122",
            "matchCriteriaId" : "8861CCCC-203F-4586-8966-93B3BB3691DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.orpak.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.orpak.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-03T20:29:00.220",
      "lastModified" : "2024-11-21T03:13:38.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer de pila en uno de los componentes CGI de Orpak SiteOmat, que permite la ejecución remota de código. La vulnerabilidad afecta a todas las versiones anteriores al 2017-09-25."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.414.122",
            "matchCriteriaId" : "8861CCCC-203F-4586-8966-93B3BB3691DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.orpak.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.orpak.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6261",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2019-06-05T14:29:11.247",
      "lastModified" : "2024-11-21T03:29:21.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.1, 2.0 y 2.2 de Vibrante Linux de NVIDIA presenta una vulnerabilidad en el controlador de espacio de usuario en la que los mecanismos de protección son insuficientes, lo que conllevaría a la Denegación de Servicio o a la Divulgación de Información"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:vibrante_linux:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65245F30-5542-4C18-A40C-FFC7D06A1F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:vibrante_linux:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF41C43-C429-416F-8598-542A62FCDECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:vibrante_linux:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB27A02-1BCB-487B-A0CC-44A9D8AAE64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://data.hackinn.com/ppt/BlackHat-USA-2018/us-18-Liu-Over-The-Air-How-We-Remotely-Compromised-The-Gateway-Bcm-And-Autopilot-Ecus-Of-Tesla-Cars-wp.pdf",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://data.hackinn.com/ppt/BlackHat-USA-2018/us-18-Liu-Over-The-Air-How-We-Remotely-Compromised-The-Gateway-Bcm-And-Autopilot-Ecus-Of-Tesla-Cars-wp.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-10T22:29:00.263",
      "lastModified" : "2024-11-21T03:11:30.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to \"*\". This allows any hosted file on any domain to make calls to the device's webserver and brute force the credentials and pull any information that is stored on the device. In this case, a user's Wi-Fi credentials are stored in clear text on the device and can be pulled easily."
      }, {
        "lang" : "es",
        "value" : "Starry Station (conocido como Starry Router) establece el encabezado Access-Control-Allow-Origin en \"Esto permite que cualquier archivo alojado en cualquier dominio realice llamadas al servidor web del dispositivo y fuerce las credenciales y extraiga cualquier información almacenada en el dispositivo. En este caso, las credenciales de Wi-Fi de un usuario se almacenan en texto claro en el dispositivo y se pueden extraer fácilmente."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:starry:s00111_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B525E59-1A21-495E-9272-8D2BBD0D1C4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:starry:s00111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23DA127-C508-4BA1-A87D-237D5E395E83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-10T22:29:00.327",
      "lastModified" : "2024-11-21T03:11:30.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to change the Wi-Fi settings and PIN, as well as port forward and expose any internal device's port to the Internet. It was identified that the device uses custom Python code called \"rodman\" that allows the mobile appication to interact with the device. The APIs that are a part of this rodman Python file allow the mobile application to interact with the device using a secret, which is a uuid4 based session identifier generated by the device the first time it is set up. However, in some cases, these APIs can also use a security code. This security code is nothing but the PIN number set by the user to interact with the device when using the touch interface on the router. This allows an attacker on the Internet to interact with the router's HTTP interface when a user navigates to the attacker's website, and brute force the credentials. Also, since the device's server sets the Access-Control-Allow-Origin header to \"*\", an attacker can easily interact with the JSON payload returned by the device and steal sensitive information about the device."
      }, {
        "lang" : "es",
        "value" : "la HTTP API apoyada por Stary Station (conocido como (Starry Router) permite el uso brusco de la configuración de PIN por parte del usuario en el dispositivo, y esto permite que un atacante cambie la configuración de Wi-Fi y el PIN, así como el puerto hacia adelante y exponga cualquier dispositivo interno. puerto a internet. Se identificó que el dispositivo utiliza un código Python personalizado llamado \"rodman\" que permite que la aplicación móvil interactúe con el dispositivo. Las API que forman parte de este archivo rodman Python permiten que la aplicación móvil interactúe con el dispositivo mediante un secreto, que es un identificador de sesión basado en uuid4 generado por el dispositivo la primera vez que se configura. Sin embargo, en algunos casos, estas API también pueden usar un código de seguridad. Este código de seguridad no es más que el número de PIN establecido por el usuario para interactuar con el dispositivo cuando se utiliza la interfaz táctil en el enrutador. Esto permite que un atacante en Internet interactúe con la interfaz HTTP del enrutador cuando un usuario navega al sitio web del atacante y fuerza bruta de las credenciales. Además, dado que el servidor del dispositivo establece el encabezado de Access-Control-Allow-Origin en \"*\", un atacante puede interactuar fácilmente con la carga JSON devuelta por el dispositivo y robar información confidencial sobre el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:starry:s00111_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B525E59-1A21-495E-9272-8D2BBD0D1C4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:starry:s00111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23DA127-C508-4BA1-A87D-237D5E395E83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-11T21:29:00.473",
      "lastModified" : "2024-11-21T03:19:58.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un error en las cámaras  WIFICAM de la cámara inalámbrica (P2P) . Hay una inyección en the set_ftp.cgi script a través de metacaracteres Shell  en la variable pwd, así como se demuestra un set_ftp.cgi? Svr = 192.168.1.1 & port = 21 & user = ftp URI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:goahead:wireless_ip_camera_wificam_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCBD904-8FCC-461D-85BF-458A466FB382"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:goahead:wireless_ip_camera_wificam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDB90FC-6B35-4D6A-9861-46C866D78361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-root-rce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-root-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-11T21:29:00.520",
      "lastModified" : "2024-11-21T03:19:58.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution."
      }, {
        "lang" : "es",
        "value" : "En NETGEAR ReadyNAS Surveillance anterior de 1.4.3-17 x86 y anterior de 1.1.4-7 ARM, $ _GET ['uploaddir'] no se escapa y se pasa al sistema () a través de $ tmp_upload_dir, lo que lleva a upgrade_handle.php? Cmd = writeuploaddir Ejecución remota de comandos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_surveillance_firmware:*:*:*:*:*:*:arm:*",
            "versionEndExcluding" : "1.1.4-7",
            "matchCriteriaId" : "E1815ED4-E574-4B3A-92BD-0DAA2EEB605F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_surveillance_firmware:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "1.4.3-17",
            "matchCriteriaId" : "E10517E5-5DA2-4DC8-A273-504B1C91C8FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:readynas_surveillance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF14ED8-692A-432D-B575-9591B5648634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049072/Security-Advisory-for-Command-Injection-in-ReadyNAS-Surveillance-Application-PSV-2017-2653",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42956",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000049072/Security-Advisory-for-Command-Injection-in-ReadyNAS-Surveillance-Application-PSV-2017-2653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15123",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2019-06-12T14:29:00.243",
      "lastModified" : "2024-11-21T03:14:06.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un defecto en el CloudFoms en el interface, versiones 5.8- 5.10, donde  las  URL de las fuentes RSS No están restringidas adecuadamente para los usuarios autorizados solamente. Un atacante podría usar este defecto para ver potencialmente información confidencial del CloudForms incluyendo datos como máquinas virtuales de nueva creación"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:cloudforms_management_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "7640D7D5-ED5C-4FCC-90B0-AD726EAD7572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108690",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15123",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://hacked0x90.wordpress.com/2019/07/17/cve-2017-15123-exploit/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/108690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://hacked0x90.wordpress.com/2019/07/17/cve-2017-15123-exploit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8252",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-06-14T17:29:00.220",
      "lastModified" : "2024-11-21T03:33:37.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130"
      }, {
        "lang" : "es",
        "value" : "Kernel puede inyectar fallos en los cálculos durante la ejecución de TrustZone que conlleva a la divulgación de información en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking en las versiones IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CB547F-0078-47CD-B511-06DE96882D5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA679375-BB14-4B24-8AD9-B2BFBACE2FDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914BF98-E69C-4C8D-8B10-759642ADD7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2118C404-402F-463C-8160-3CC3B703DF30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2F2D26-2833-45A4-81F0-8E9F338C1E13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB171B1-D163-4801-A241-8DD7193A5DCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF77DD1-BE11-4132-9889-646196FAE567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB323C15-2018-4CB8-858E-56F088B03FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7AFDBF8-D08A-4C98-B4A4-A4C7049DD05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520B217E-C02B-493D-8C11-E155E50357B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1C53DC-D2F3-4C92-9725-9A85340AF026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0585FF-E390-46E8-8701-70964A4057BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05FD66D-13A6-40E9-A64B-E428378F237E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D665C1-3EBA-42F2-BF56-55E6C365F7DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qc_215_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A0487D-9E99-4BCA-8BC3-799AE578DCFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qc_215:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74A759B-C771-4987-8D0E-697DF42A7F4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F683C42D-A310-4369-9689-3DBC9288591E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EADE10A-0F63-4149-8F03-030673D6D7CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78C9449-5EB0-459B-AA72-EFF00592C30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D583172-F1F1-4DF8-99CE-B94A84D14CCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE3EA03-0373-4FEF-B1FC-123A8073520B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64D3E69-0784-4DEA-96C1-2D41EAFA1906"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11CE0F1-29BD-46E1-ACFE-D076192F138E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D205DB4E-68C2-4B13-8373-128870DF83D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2126866-3B02-42B4-A57A-4EFF30848B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F832FE19-8D65-4779-B6F5-BD90BD131FD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE94E380-CB75-462E-B411-BF38F17D53B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0947F38F-3DC2-45F1-B3B3-963922F32054"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F900C8F-9763-441A-B97E-E5394A68A08A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589C1001-E9F6-41A6-BCC8-A94A3C97F2E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFF8872-645F-4A05-BAF9-7797CFBE37C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB91AFF-C149-4F5C-92EC-E78E66935528"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B529780-DB0A-4F9C-AE63-6DEC593B86E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E7360-E8C3-4BB8-A3B6-61BD58AFAF62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49606C5-7306-4F33-864C-C1905594F09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43964AF-7CEC-420A-935B-D3895B2BAC70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91400943-3D25-4E44-9FFD-9E3076305D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B16867-710D-4748-8636-635E2C6F7389"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_8cx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71D1A7C-537F-458B-BA56-A11F95E36EA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_8cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716DEC4D-D854-44CD-8A14-AA5AFD96809E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63A748F-2236-4486-83F1-DE4BCBE5D56D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184F3DFC-27E8-48AC-B46C-C589DBCBF030"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T17:15:10.537",
      "lastModified" : "2024-11-21T03:35:59.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as proxy.sh which allows the device to proxy a specific request to and from from another website. This is primarily used as a method of communication between the device and Vera website when the user is logged in to the https://home.getvera.com and allows the device to communicate between the device and website. One of the parameters retrieved by this specific script is \"url\". This parameter is not sanitized by the script correctly and is passed in a call to \"eval\" to execute \"curl\" functionality. This allows an attacker to escape from the executed command and then execute any commands of his/her choice."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Vera VeraEdge 1.7.19 y Veralite 1.7.481. El dispositivo proporciona una interfaz de usuario web que permite a un usuario administrar el dispositivo. Como parte de la funcionalidad, el archivo de firmware del dispositivo contiene un archivo conocido como proxy.sh que le permite al dispositivo enviar una solicitud específica hacia y desde otro sitio web. Esto se usa principalmente como un método de comunicación entre el dispositivo y el sitio web de Vera cuando el usuario ha iniciado sesión en https://home.getvera.com y permite que el dispositivo se comunique entre el dispositivo y el sitio web. Uno de los parámetros recuperados por este script específico es \"url\". Este parámetro no está correctamente saneado por el script y se pasa en una llamada a \"eval\" para ejecutar la funcionalidad \"curl\". Esto permite a un atacante escapar del comando ejecutado y luego ejecutar cualquier comando de su elección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T18:15:10.577",
      "lastModified" : "2024-11-21T03:35:58.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection mechanism which allows an attacker to trick a user who navigates to an attacker controlled page to install or delete an application on the device. Note: The cross-site request forgery is a systemic issue across all other functionalities of the device."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Vera VeraEdge 1.7.19 y Veralite 1.7.481. El dispositivo proporciona a un usuario la capacidad de instalar o eliminar aplicaciones en el dispositivo mediante la interfaz de administración web. Parece que el dispositivo no implementa ningún mecanismo de protección de falsificación de solicitud entre sitios que permita a un atacante engañar a un usuario que navega a una página controlada por un atacante para instalar o eliminar una aplicación en el dispositivo. Nota: la falsificación de solicitudes entre sitios es un problema sistémico en todas las demás funciones del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T18:15:10.627",
      "lastModified" : "2024-11-21T03:35:58.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as relay.sh which allows the device to create relay ports and connect the device to Vera servers. This is primarily used as a method of communication between the device and Vera servers so the devices can be communicated with even when the user is not at home. One of the parameters retrieved by this specific script is \"remote_host\". This parameter is not sanitized by the script correctly and is passed in a call to \"eval\" to execute another script where remote_host is concatenated to be passed a parameter to the second script. This allows an attacker to escape from the executed command and then execute any commands of his/her choice."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Vera VeraEdge 1.7.19 y Veralite 1.7.481. El dispositivo proporciona una interfaz de usuario web que permite a un usuario administrar el dispositivo. Como parte de la funcionalidad, el archivo de firmware del dispositivo contiene un archivo conocido como relay.sh que permite al dispositivo crear puertos de retransmisión y conectar el dispositivo a los servidores Vera. Esto se usa principalmente como un método de comunicación entre el dispositivo y los servidores de Vera para que los dispositivos puedan comunicarse incluso cuando el usuario no está en casa. Uno de los parámetros recuperados por este script específico es \"remote_host\". Este parámetro no está correctamente saneado por la secuencia de comandos y se pasa en una llamada a \"eval\" para ejecutar otra secuencia de comandos donde se concatena remote_host para pasar un parámetro a la segunda secuencia de comandos. Esto permite a un atacante escapar del comando ejecutado y luego ejecutar cualquier comando de su elección."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.180",
      "lastModified" : "2024-11-21T03:35:58.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url \"/port_3480\". It seems that the UPnP services provide \"file\" as one of the service actions for a normal user to read a file that is stored under the /etc/cmh-lu folder. It retrieves the value from the \"parameters\" query string variable and then passes it to an internal function \"FileUtils::ReadFileIntoBuffer\" which is a library function that does not perform any sanitization on the value submitted and this allows an attacker to use directory traversal characters \"../\" and read files from other folders within the device."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera. El dispositivo proporciona servicios UPnP que están disponibles en el puerto 3480 y también pueden ser accedidos por medio del puerto 80 mediante la url \"/port_3480\". Parece que los servicios UPnP proporcionan \"file\" como una de las acciones de servicio para que un usuario normal lea un archivo que está almacenado en la carpeta /etc/cmh-lu. Recupera el valor de la variable de cadena de consulta de los \"parameters\" y luego lo pasa a una función interna \"FileUtils::ReadFileIntoBuffer\" que es una función de biblioteca que no realiza ningún saneamiento en el valor enviado y esto permite a un atacante utilizar caracteres \"../\" de un salto de directorios y leer archivos de otras carpetas dentro del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.227",
      "lastModified" : "2024-11-21T03:35:58.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url \"/port_3480\". It seems that the UPnP services provide \"wget\" as one of the service actions for a normal user to connect the device to an external website. It retrieves the parameter \"URL\" from the query string and then passes it to an internal function that uses the curl module on the device to retrieve the contents of the website."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera. El dispositivo proporciona servicios UPnP que están disponibles en el puerto 3480 y también pueden ser accedidos por medio del puerto 80 mediante la url \"/port_3480\". Al parecer los servicios UPnP proporcionan \"wget\" como una de las acciones de servicio para que un usuario normal conecte el dispositivo a un sitio web externo. Recupera el parámetro \"URL\" de la cadena de consulta y después lo pasa a una función interna que utiliza el módulo curl en el dispositivo para recuperar el contenido del sitio web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.290",
      "lastModified" : "2024-11-21T03:35:58.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to the standard web interface which allows the highest privileges a user can obtain on the device. This web interface uses root as the username and the password in the /etc/cmh/cmh.conf file which can be extracted by an attacker using a directory traversal attack, and then log in to the device with the highest privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos Veralite versión 1.7.481 de Vera. El dispositivo tiene una interfaz OpenWRT adicional además de la interfaz web estándar que permite los más altos privilegios que un usuario puede obtener en el dispositivo. Esta interfaz web utiliza root como nombre de usuario y la contraseña en el archivo /etc/cmh/cmh.conf, que puede ser extraída por un atacante utilizando un ataque de salto de directorio, y después iniciar sesión en el dispositivo con los más altos privilegios."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.337",
      "lastModified" : "2024-11-21T03:35:59.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a script file called \"get_file.sh\" which allows a user to retrieve any file stored in the \"cmh-ext\" folder on the device. However, the \"filename\" parameter is not validated correctly and this allows an attacker to directory traverse outside the /cmh-ext folder and read any file on the device. It is necessary to create the folder \"cmh-ext\" on the device which can be executed by an attacker first in an unauthenticated fashion and then execute a directory traversal attack."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y versión Veralite 1.7.481 de Vera. El dispositivo proporciona un archivo script llamado \"get_file.sh\" que le permite al usuario recuperar cualquier archivo almacenado en la carpeta \"cmh-ext\" del dispositivo. Sin embargo, el parámetro \"filename\" no se comprueba correctamente y esto permite a un atacante saltar de directorio fuera de la carpeta /cmh-ext y leer cualquier archivo en el dispositivo. Es necesario crear la carpeta \"cmh-ext\" en el dispositivo que puede ser ejecutada primero por un atacante de manera no autenticada y luego ejecutar un ataque de salto de directorio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.383",
      "lastModified" : "2024-11-21T03:35:59.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a shell script called relay.sh which is used for creating new SSH relays for the device so that the device connects to Vera servers. All the parameters passed in this specific script are logged to a log file called log.relay in the /tmp folder. The user can also read all the log files from the device using a script called log.sh. However, when the script loads the log files it displays them with content-type text/html and passes all the logs through the ansi2html binary which converts all the character text including HTML meta-characters correctly to be displayed in the browser. This allows an attacker to use the log files as a storing mechanism for the XSS payload and thus whenever a user navigates to that log.sh script, it enables the XSS payload and allows an attacker to execute his malicious payload on the user's browser."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera. El dispositivo proporciona un script shell llamado relay.sh que se utiliza para crear nuevos relés SSH para el dispositivo, de manera que el dispositivo se conecte a los servidores Vera. Todos los parámetros pasados ??en este script específico se registran en un archivo de registro llamado log.relay en la carpeta /tmp. El usuario también puede leer todos los archivos de registro del dispositivo usando un script llamado log.sh. Sin embargo, cuando el script carga los archivos de registro, los muestra con text/html de tipo de contenido y pasa todos los registros por medio del binario ansi2html que convierte todo el texto de caracteres, incluidos los metacaracteres HTML, para que se muestren correctamente en el navegador. Esto permite que un atacante use los archivos de registro como un mecanismo de almacenamiento para la carga XSS y, por lo tanto, cada vez que un usuario navega a ese script log.sh, habilita la carga XSS y permite que un atacante ejecute su carga maliciosa en el navegador del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.430",
      "lastModified" : "2024-11-21T03:36:00.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device allows a user to install applications written in the Lua programming language. Also the interface allows any user to write his/her application in the Lua language. However, this functionality is not protected by authentication and this allows an attacker to run arbitrary Lua code on the device. The POST request is forwarded to LuaUPNP daemon on the device. This binary handles the received Lua code in the function \"LU::JobHandler_LuaUPnP::RunLua(LU::JobHandler_LuaUPnP *__hidden this, LU::UPnPActionWrapper *)\". The value in the \"code\" parameter is then passed to the function \"LU::LuaInterface::RunCode(char const*)\" which actually loads the Lua engine and runs the code."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera. El dispositivo proporciona una interfaz de usuario web que permite a un usuario administrar el dispositivo. Como parte de la funcionalidad, el dispositivo le permite al usuario instalar aplicaciones escritas en el lenguaje de programación Lua. Además, la interfaz permite a cualquier usuario escribir su aplicación en el lenguaje de programación Lua. Sin embargo, esta funcionalidad no está protegida por autenticación y permite que un atacante ejecute un código Lua arbitrario en el dispositivo. La petición POST se reenvía al demonio LuaUPNP en el dispositivo. Este binario maneja el código Lua recibido en la función \"LU::JobHandler_LuaUPnP::RunLua(LU::JobHandler_LuaUPnP*__hidden this, LU::UPnPActionWrapper*)\". El valor en el parámetro \"code\" se pasa luego a la función \"LU::LuaInterface::RunCode(char const*)\" que en realidad carga al motor Lua y ejecuta el código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T20:15:09.477",
      "lastModified" : "2024-11-21T03:36:01.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a shell script called connect.sh which is supposed to return a specific cookie for the user when the user is authenticated to https://home.getvera.com. One of the parameters retrieved by this script is \"RedirectURL\". However, the application lacks strict input validation of this parameter and this allows an attacker to execute the client-side code on this application."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera. El dispositivo proporciona un script shell llamado connect.sh que se supone que retorna una cookie específica para el usuario cuando éste se identifica en https://home.getvera.com. Uno de los parámetros recuperados por este script es \"RedirectURL\". Sin embargo, la aplicación no cuenta con una comprobación de entrada estricta de este parámetro y esto permite que un atacante ejecute el código del lado del cliente en esta aplicación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T21:15:09.550",
      "lastModified" : "2024-11-21T03:36:01.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url \"/port_3480\". It seems that the UPnP services provide \"request_image\" as one of the service actions for a normal user to retrieve an image from a camera that is controlled by the controller. It seems that the \"URL\" parameter passed in the query string is not sanitized and is stored on the stack which allows an attacker to overflow the buffer. The function \"LU::Generic_IP_Camera_Manager::REQ_Image\" is activated when the lu_request_image is passed as the \"id\" parameter in query string. This function then calls \"LU::Generic_IP_Camera_Manager::GetUrlFromArguments\" and passes a \"pointer\" to the function where it will be allowed to store the value from the URL parameter. This pointer is passed as the second parameter $a2 to the function \"LU::Generic_IP_Camera_Manager::GetUrlFromArguments\". However, neither the callee or the caller in this case performs a simple length check and as a result an attacker who is able to send more than 1336 characters can easily overflow the values stored on the stack including the $RA value and thus execute code on the device."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera. El dispositivo proporciona servicios UPnP que están disponibles en el puerto 3480 y también pueden ser accedidos por medio del puerto 80 mediante la url \"/port_3480\". Parece que los servicios UPnP proporcionan \"request_image\" como una de las acciones de servicio para que un usuario normal recupere una imagen de una cámara que es controlada por el controlador. Al parecer el parámetro \"URL\" pasado en la cadena de consulta no está saneado y es almacenado en la pila, lo que permite a un atacante desbordar el búfer. La función \"LU::Generic_IP_Camera_Manager::REQ_Image\" se activa cuando lu_request_image se pasa como el parámetro \"id\" en la cadena de consulta. Esta función después llama a \"LU::Generic_IP_Camera_Manager::GetUrlFromArguments\" y pasa un \"pointer\" a la función donde será permitido almacenar el valor del parámetro de URL. Este puntero es pasado como segundo parámetro $a2 a la función \"LU::Generic_IP_Camera_Manager::GetUrlFromArguments\". Sin embargo, ni el llamado ni la persona que llama en este caso realizan una comprobación de longitud simple y, como resultado, un atacante que puede enviar más de 1336 caracteres y puede desbordar fácilmente los valores almacenados en la pila, incluyendo el valor de $RA y, por lo tanto, ejecutar el código en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T21:15:09.613",
      "lastModified" : "2024-11-21T03:36:02.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url \"/port_3480\". It seems that the UPnP services provide \"request_image\" as one of the service actions for a normal user to retrieve an image from a camera that is controlled by the controller. It seems that the \"res\" (resolution) parameter passed in the query string is not sanitized and is stored on the stack which allows an attacker to overflow the buffer. The function \"LU::Generic_IP_Camera_Manager::REQ_Image\" is activated when the lu_request_image is passed as the \"id\" parameter in the query string. This function then calls \"LU::Generic_IP_Camera_Manager::GetUrlFromArguments\". This function retrieves all the parameters passed in the query string including \"res\" and then uses the value passed in it to fill up buffer using the sprintf function. However, the function in this case lacks a simple length check and as a result an attacker who is able to send more than 184 characters can easily overflow the values stored on the stack including the $RA value and thus execute code on the device."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos VeraEdge versión 1.7.19 y Veralite versión 1.7.481 de Vera . El dispositivo proporciona servicios UPnP que están disponibles en el puerto 3480 y también pueden ser accedidos por medio del puerto 80 mediante la url \"/port_3480\". Parece que los servicios UPnP proporcionan \"request_image\" como una de las acciones de servicio para que un usuario normal recupere una imagen de una cámara que es controlada por el controlador. Al parecer el parámetro \"res\" (resolución) pasado en la cadena de consulta no está saneado y se almacena en la pila, lo que permite a un atacante desbordar el búfer. La función \"LU::Generic_IP_Camera_Manager::REQ_Image\" se activa cuando lu_request_image se pasa como el parámetro \"id\" en la cadena de consulta. Esta función llama a \"LU::Generic_IP_Camera_Manager::GetUrlFromArguments\". Esta función recupera todos los parámetros pasados ??en la cadena de consulta incluyendo \"res\" y después usa el valor pasado en ella para llenar el búfer usando la función sprintf. Sin embargo, la función en este caso carece de una comprobación de longitud simple y, como resultado, un atacante que puede enviar más de 184 caracteres puede desbordar fácilmente los valores almacenados en la pila, incluyendo el valor de $RA y así ejecutar el código en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.19",
            "matchCriteriaId" : "49C1D79D-A586-4D41-A10C-1815E6E0D765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3D3CAC-84A4-4F14-8FB6-1E6437F8D2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.481",
            "matchCriteriaId" : "AC96E7A8-DB6C-47C8-9B33-AE4ED418C70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914728A7-7BA3-4612-A6AA-172B24431947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:09.903",
      "lastModified" : "2024-11-21T03:06:19.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar , cualquier usuario malicioso que se conecte al dispositivo puede cambiar el SSID y la contraseña por defecto, lo que le niega al propietario el acceso a su propio dispositivo. Este dispositivo actúa como una cámara endoscópica que permite a sus usuarios utilizarla en diversos sistemas y configuraciones industriales, talleres de coches y también, en ciertos casos, en clínicas médicas para poder acceder a áreas que son difíciles de alcanzar para un ser humano. Cualquier violación de este sistema puede permitirle a un atacante obtener acceso a fuentes de video e imágenes que visualiza ese usuario, y podría permitirle tener un pie firme en redes con protección Air Grap, especialmente en el caso de infraestructuras/industrias críticas para la nación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:09.983",
      "lastModified" : "2024-11-21T03:06:19.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has default Wi-Fi credentials that are exactly the same for every device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar, el dispositivo cuenta con credenciales de Wi-Fi por defecto que son exactamente las mismas para todos los dispositivos. Este dispositivo actúa como una cámara endoscópica que permite a sus usuarios utilizarla en diversos sistemas y configuraciones industriales, talleres de coches y también, en ciertos casos, en clínicas médicas para acceder a áreas que son difíciles de alcanzar para un ser humano. Cualquier violación de este sistema puede permitirle a un atacante obtener acceso a fuentes de video e imágenes que visualiza ese usuario, y podría permitirle tener un pie firme en redes con protección Air Grap, especialmente en el caso de infraestructuras/industrias críticas para la nación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:10.030",
      "lastModified" : "2024-11-21T03:06:20.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi name. This application is installed on the device and an attacker who can provide the right payload can execute code on the user's system directly. Any breach of this system can allow an attacker to get access to all the data that the user has access too. The application uses a dynamic link library(DLL) called \"avilib.dll\" which is used by the application to send binary packets to the device that allow to control the device. One such action that the DLL provides is change password in the function \"sendchangename\" which allows a user to change the Wi-Fi name on the device. This function calls a sub function \"sub_75876EA0\" at address 0x758784F8. The function determines which action to execute based on the parameters sent to it. The \"sendchangename\" passes the datastring as the second argument which is the name we enter in the textbox and integer 1 as first argument. The rest of the 3 arguments are set to 0. The function \"sub_75876EA0\" at address 0x75876F19 uses the first argument received and to determine which block to jump to. Since the argument passed is 1, it jumps to 0x75876F20 and proceeds from there to address 0x75876F56 which calculates the length of the data string passed as the first parameter. This length and the first argument are then passed to the address 0x75877001 which calls the memmove function which uses a stack address as the destination where the password typed by us is passed as the source and length calculated above is passed as the number of bytes to copy which leads to a stack overflow."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar, la aplicación de escritorio utilizada para conectarse al dispositivo sufre un desbordamiento de pila si se le pasan más de 26 caracteres como nombre del Wi-Fi. Esta aplicación está instalada en el dispositivo y un atacante que puede proporcionar la carga correcta puede ejecutar el código directamente en el sistema de usuario. Cualquier violación de este sistema puede permitir que un atacante tenga acceso a todos los datos a los que el usuario tiene acceso. La aplicación utiliza una biblioteca de enlace dinámico (DLL) llamada \"avilib.dll\", que es usada por la aplicación para enviar paquetes binarios al dispositivo que permiten controlarlo. Una de las acciones que proporciona la DLL es cambiar la contraseña en la función \"sendchangename\" que le permite a un usuario cambiar el nombre del Wi-Fi en el dispositivo. Esta función llama a una subfunción \"sub_75876EA0\" en la dirección 0x758784F8. La función determina cual acción ejecutar de acuerdo a los parámetros que se le envíen. El \"sendchangename\" pasa la cadena de datos como el segundo argumento, que es el nombre que ingresamos en el cuadro de texto y el entero 1 como primer argumento. El resto de los 3 argumentos se establecen en 0. La función \"sub_75876EA0\" en la dirección 0x75876F19 utiliza el primer argumento recibido y determina hacia qué bloque saltar. Dado que el argumento pasado es 1, salta a 0x75876F20 y procede de allí a la dirección 0x75876F56, que calcula la longitud de la cadena de datos pasada como primer parámetro. Esta longitud y el primer argumento son entonces pasados a la dirección 0x75877001 que llama a la función memmove que utiliza una dirección de pila como el destino donde la contraseña escrita por nosotros es pasada como la fuente y la longitud calculada anteriormente se pasa como el número de bytes a copiar lo que conlleva a un desbordamiento de pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:10.090",
      "lastModified" : "2024-11-21T03:06:20.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has Telnet functionality enabled by default. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar, se descubrió que el dispositivo tiene la funcionalidad Telnet habilitada por defecto. Este dispositivo actúa como una cámara endoscópica que permite a sus usuarios usarla en diversos sistemas y configuraciones industriales, talleres de coches y también, en ciertos casos, en clínicas médicas para acceder a áreas que son difíciles de alcanzar para un ser humano. Cualquier violación de este sistema puede permitirle a un atacante obtener acceso a fuentes de video e imágenes que visualiza ese usuario, y podría permitirle tener un pie firme en redes con protección Air Grap, especialmente en el caso de infraestructuras/industrias críticas para la nación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:10.137",
      "lastModified" : "2024-11-21T03:06:20.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is installed on the device and an attacker who can provide the right payload can execute code on the user's system directly. Any breach of this system can allow an attacker to get access to all the data that the user has access too. The application uses a dynamic link library(DLL) called \"avilib.dll\" which is used by the application to send binary packets to the device that allow to control the device. One such action that the DLL provides is change password in the function \"sendchangepass\" which allows a user to change the Wi-Fi password on the device. This function calls a sub function \"sub_75876EA0\" at address 0x7587857C. The function determines which action to execute based on the parameters sent to it. The \"sendchangepass\" passes the datastring as the second argument which is the password we enter in the textbox and integer 2 as first argument. The rest of the 3 arguments are set to 0. The function \"sub_75876EA0\" at address 0x75876F19 uses the first argument received and to determine which block to jump to. Since the argument passed is 2, it jumps to 0x7587718C and proceeds from there to address 0x758771C2 which calculates the length of the data string passed as the first parameter.This length and the first argument are then passed to the address 0x7587726F which calls a memmove function which uses a stack address as the destination where the password typed by us is passed as the source and length calculated above is passed as the number of bytes to copy which leads to a stack overflow."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar, la aplicación de escritorio utilizada para conectarse al dispositivo sufre un desbordamiento de pila si se le pasan más de 26 caracteres como contraseña del Wi-Fi. Esta aplicación está instalada en el dispositivo y un atacante que puede proporcionar la carga correcta puede ejecutar el código directamente en el sistema de usuario. Cualquier violación de este sistema puede permitir que un atacante tenga acceso a todos los datos a los que el usuario tiene acceso. La aplicación utiliza una biblioteca de enlace dinámico (DLL) llamada \"avilib.dll\", que es utilizada por la aplicación para enviar paquetes binarios al dispositivo que permiten controlarlo. Una de las acciones que proporciona la DLL es cambiar la contraseña en la función \"sendchangepass\" que le permite a un usuario cambiar la contraseña de Wi-Fi en el dispositivo. Esta función llama a una subfunción \"sub_75876EA0\" en la dirección 0x7587857C. La función determina cual acción ejecutar de acuerdo  los parámetros que se le envíen. El \"sendchangepass\" pasa la cadena de datos como segundo argumento, que es la contraseña que ingresamos en el cuadro de texto y el entero 2 como primer argumento. El resto de los 3 argumentos se establecen en 0. La función \"sub_75876EA0\" en la dirección 0x75876F19 utiliza el primer argumento recibido y determina hacia qué bloque saltar. Dado que el argumento pasado es 2, salta a 0x7587718C y procede de allí a la dirección 0x758771C2 que calcula la longitud de la cadena de datos pasada como primer parámetro. Esta longitud y el primer argumento son pasados a la dirección 0x7587726F que llama a la función memmove que usa una dirección de pila como destino donde se pasa la contraseña que escribimos, ya que la fuente y la longitud calculada anteriormente se pasan como el número de bytes a copiar, lo que conlleva a un desbordamiento de pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:10.200",
      "lastModified" : "2024-11-21T03:06:20.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries. The firmware contains binary uvc_stream that is the UDP daemon which is responsible for handling all the UDP requests that the device receives. The client application sends a UDP request to change the Wi-Fi name which contains the following format: \"SETCMD0001+0001+[2 byte length of wifiname]+[Wifiname]. This request is handled by \"control_Dev_thread\" function which at address \"0x00409AE0\" compares the incoming request and determines if the 10th byte is 01 and if it is then it redirects to 0x0040A74C which calls the function \"setwifiname\". The function \"setwifiname\" uses a memcpy function but uses the length of the payload obtained by using strlen function as the third parameter which is the number of bytes to copy and this allows an attacker to overflow the function and control the $PC value."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar, un atacante conectado al dispositivo SSID Wi-Fi puede explotar un problema de corrupción de memoria y ejecutar código remoto en el dispositivo. Este dispositivo actúa como una cámara endoscópica que permite a sus usuarios usarla en diversos sistemas y configuraciones industriales, talleres de coches y también, en ciertos casos, en clínicas médicas para acceder a áreas que son difíciles de alcanzar para un ser humano. Cualquier violación de este sistema puede permitirle a un atacante obtener acceso a fuentes de video e imágenes que visualiza ese usuario, y podría permitirle tener un pie firme en redes con protección Air Grap, especialmente en el caso de infraestructuras/industrias críticas para la nación. El firmware contiene uvc_stream binario que es el demonio UDP que es responsable de manejar todas las solicitudes UDP que recibe el dispositivo. La aplicación cliente envía una solicitud UDP para cambiar el nombre de Wi-Fi que contiene el siguiente formato: \"SETCMD0001+0001+[2 byte length of wifiname]+[Wifiname]. Esta solicitud es manejada por la función \"control_Dev_thread\" que se encuentra en la dirección \"0x00409AE0\" compara la solicitud entrante y determina si el décimo byte es 01 y si es así, redirige a 0x0040A74C que llama a la función \"setwifiname\". La función \"setwifiname\" usa una función memcpy pero utiliza la longitud de la carga obtenida usando la función strlen como el tercer parámetro, que es el número de bytes a copiar y esto le permite a un atacante desbordar la función y controlar el valor $PC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-17T22:15:10.263",
      "lastModified" : "2024-11-21T03:06:20.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries. The firmware contains binary uvc_stream that is the UDP daemon which is responsible for handling all the UDP requests that the device receives. The client application sends a UDP request to change the Wi-Fi name which contains the following format: \"SETCMD0001+0002+[2 byte length of wifipassword]+[Wifipassword]. This request is handled by \"control_Dev_thread\" function which at address \"0x00409AE4\" compares the incoming request and determines if the 10th byte is 02 and if it is then it redirects to 0x0040A7D8, which calls the function \"setwifipassword\". The function \"setwifipassword\" uses a memcpy function but uses the length of the payload obtained by using strlen function as the third parameter which is the number of bytes to copy and this allows an attacker to overflow the function and control the $PC value."
      }, {
        "lang" : "es",
        "value" : "Recientemente, como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el Endoscopio Shekar, un atacante conectado al dispositivo SSID Wi-Fi puede explotar un problema de corrupción de memoria y ejecutar código remoto en el dispositivo. Este dispositivo actúa como una cámara endoscópica que permite a sus usuarios usarla en diversos sistemas y configuraciones industriales, talleres de coches y también, en ciertos casos, en clínicas médicas para acceder a áreas que son difíciles de alcanzar para un ser humano. Cualquier violación de este sistema puede permitirle a un atacante obtener acceso a fuentes de video e imágenes que visualiza ese usuario, y podría permitirle tener un pie firme en redes con protección Air Grap, especialmente en el caso de infraestructuras/industrias críticas para la nación. El firmware contiene uvc_stream binario que es el demonio UDP que es responsable de manejar todas las solicitudes UDP que recibe el dispositivo. La aplicación cliente envía una solicitud UDP para cambiar el nombre de Wi-Fi que contiene el siguiente formato: \"SETCMD0001+0002+[2 byte length of wifipassword]+[Wifipassword]. Esta solicitud se maneja mediante la función \"control_Dev_thread\" que se encuentra en la dirección \"0x00409AE4\" compara la solicitud entrante y determina si el décimo byte es 02 y si es así, redirige a 0x0040A7D8, que llama a la función \"setwifipassword\". La función \"setwifipassword\" usa una función memcpy pero utiliza la longitud de la carga obtenida usando la función strlen como tercer parámetro, que es el número de bytes a copiar, lo que permite a un atacante desbordar la función y controlar el valor $PC."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D620235-1706-4284-A45B-308C32A8DB90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46805FDE-1451-44FF-86EF-B52C0A39F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T19:15:10.763",
      "lastModified" : "2024-11-21T03:33:47.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting name for wireless network. These values are stored by the device in NVRAM (Non-volatile RAM). It seems that the POST parameters passed in this request to set up names on the device do not have a string length check on them. This allows an attacker to send a large payload in the \"mssid_1\" POST parameter. The device also allows a user to view the name of the Wifi Network set by the user. While processing this request, the device calls a function named \"getCfgToHTML\" at address 0x004268A8 which retrieves the value set earlier by \"mssid_1\" parameter as SSID2 and this value then results in overflowing the stack set up for this function and allows an attacker to control $ra register value on the stack which allows an attacker to control the device by executing a payload of an attacker's choice. If the firmware version AL-R096 is dissected using binwalk tool, we obtain a cpio-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"goahead\" is the one that has the vulnerable function that recieves the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows a MIPS little endian format. The function sub_00420F38 in IDA pro is identified to be receiving the values sent in the POST parameter \"mssid_1\" at address 0x0042BA00 and then sets in the NVRAM at address 0x0042C314. The value is later retrieved in the function \"getCfgToHTML\" at address 0x00426924 and this results in overflowing the buffer due to \"strcat\" function that is utilized by this function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona al usuario la capacidad de configurar el nombre de la red inalámbrica. Estos valores son almacenados por el dispositivo en NVRAM (RAM no volátil). Parece que los parámetros POST pasados en esta solicitud para configurar nombres en el dispositivo no tienen una verificación de longitud de cadena en ellos. Esto permite que un atacante envíe una gran carga útil en el parámetro POST \"mssid_1\". El dispositivo también permite que un usuario vea el nombre de la red Wifi configurada por el usuario. Mientras procesa esta solicitud, el dispositivo llama a una función llamada \"getCfgToHTML\" en la dirección 0x004268A8 que recupera el valor establecido anteriormente por el parámetro \"mssid_1\" como SSID2 y este valor produce un desbordamiento de la configuración de pila para esta función y permite que un atacante controle Valor de registro de $ra en la pila que permite a un atacante controlar el dispositivo ejecutando una carga útil a elección del atacante. Si la versión de firmware AL-R096 se disecciona con la herramienta binwalk, obtenemos un archivo cpio-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"goahead\" es el que tiene la función vulnerable que recibe los valores enviados por la solicitud POST. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato MIPS little endian. La función sub_00420F38 en IDA pro está identificada para recibir los valores enviados en el parámetro POST \"mssid_1\" en la dirección 0x0042BA00 y luego se establece en la NVRAM en la dirección 0x0042C314. El valor se recupera posteriormente en la función \"getCfgToHTML\" en la dirección 0x00426924 y esto provoca el desbordamiento del búfer debido a la función \"strcat\" que utiliza esta función."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T19:15:10.827",
      "lastModified" : "2024-11-21T03:33:47.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way that would result in overflowing the stack set up and allow an attacker to control the $ra register stored on the stack. If the firmware version AL-R096 is dissected using binwalk tool, we obtain a cpio-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"goahead\" is the one that has the vulnerable function that recieves the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows a MIPS little endian format. The function sub_00420F38 in IDA pro is identified to be receiving the values sent in the POST request. The POST parameter \"gateway\" allows to overflow the stack and control the $ra register after 1546 characters. The value from this post parameter is then copied on the stack at address 0x00421348 as shown below. This allows an attacker to provide the payload of his/her choice and finally take control of the device."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona al usuario la capacidad de agregar nuevas rutas al dispositivo. Parece que los parámetros POST pasados ??en esta solicitud para configurar rutas en el dispositivo se pueden configurar de tal manera que resulte en desbordar la configuración de la pila y permitir que un atacante controle el registro $ra almacenado en la pila. Si la versión de firmware AL-R096 se disecciona con la herramienta binwalk, obtenemos un archivo cpio-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"goahead\" es el que tiene la función vulnerable que recibe los valores enviados por la solicitud POST. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato MIPS little endian. La función sub_00420F38 en IDA pro está identificada para recibir los valores enviados en la solicitud POST. El parámetro POST \"gateway\" permite desbordar la pila y controlar el registro $ra después de 1546 caracteres. El valor de este parámetro posterior se copia en la pila en la dirección 0x00421348 como se muestra a continuación. Esto permite que un atacante proporcione la carga útil de su elección y finalmente tome el control del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T20:15:11.750",
      "lastModified" : "2024-11-21T03:33:46.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting a name for the wireless network. These values are stored by the device in NVRAM (Non-volatile RAM). It seems that the POST parameters passed in this request to set up names on the device do not have a string length check on them. This allows an attacker to send a large payload in the \"mssid_1\" POST parameter. The device also allows a user to view the name of the Wifi Network set by the user. While processing this request, the device calls a function at address 0x00412CE4 (routerSummary) in the binary \"webServer\" located in Almond folder, which retrieves the value set earlier by \"mssid_1\" parameter as SSID2 and this value then results in overflowing the stack set up for this function and allows an attacker to control $ra register value on the stack which allows an attacker to control the device by executing a payload of an attacker's choice. If the firmware version AL-R096 is dissected using binwalk tool, we obtain a cpio-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"goahead\" is the one that has the vulnerable function that receives the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows a MIPS little endian format. The function sub_00420F38 in IDA pro is identified to be receiving the values sent in the POST parameter \"mssid_1\" at address 0x0042BA00 and then sets in the NVRAM at address 0x0042C314. The value is later retrieved in the function at address 0x00412EAC and this results in overflowing the buffer as the function copies the value directly on the stack."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona a un usuario la capacidad de establecer un nombre para la red inalámbrica. Estos valores son almacenados por el dispositivo en NVRAM (RAM no volátil). Parece que los parámetros POST pasados en esta solicitud para configurar nombres en el dispositivo no tienen una verificación de longitud de cadena en ellos. Esto permite que un atacante envíe una gran carga útil en el parámetro POST \"mssid_1\". El dispositivo también permite que un usuario vea el nombre de la red Wifi configurada por el usuario. Mientras procesa esta solicitud, el dispositivo llama a una función en la dirección 0x00412CE4 (routerSummary) en el \"servidor web\" binario ubicado en la carpeta Almond, que recupera el valor establecido anteriormente por el parámetro \"mssid_1\" como SSID2 y este valor produce un desbordamiento del conjunto de pilas para esta función y permite que un atacante controle el valor de registro de $ra en la pila, lo que le permite controlar el dispositivo ejecutando una carga útil a elección del atacante. Si la versión de firmware AL-R096 se disecciona con la herramienta binwalk, obtenemos un archivo cpio-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"goahead\" es el que tiene la función vulnerable que recibe los valores enviados por la solicitud POST. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato MIPS little endian. La función sub_00420F38 en IDA pro está identificada para recibir los valores enviados en el parámetro POST \"mssid_1\" en la dirección 0x0042BA00 y luego se establece en la NVRAM en la dirección 0x0042C314. El valor se recupera posteriormente en la función en la dirección 0x00412EAC y esto provoca el desbordamiento del búfer a medida que la función copia el valor directamente en la pila."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T20:15:11.813",
      "lastModified" : "2024-11-21T03:33:46.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new port forwarding rules to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way that would result in passing commands to a \"system\" API in the function and thus result in command injection on the device. If the firmware version AL-R096 is dissected using binwalk tool, we obtain a cpio-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"goahead\" is the one that has the vulnerable function that recieves the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows a MIPS little endian format. The function sub_43C280in IDA pro is identified to be receiving the values sent in the POST request and the value set in POST parameter \"ip_address\" is extracted at address 0x0043C2F0. The POST parameter \"ipaddress\" is concatenated at address 0x0043C958 and this is passed to a \"system\" function at address 0x00437284. This allows an attacker to provide the payload of his/her choice and finally take control of the device."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona a un usuario la capacidad de agregar nuevas reglas de reenvío de puertos al dispositivo. Parece que los parámetros POST pasados ??en esta solicitud para configurar rutas en el dispositivo se pueden configurar de tal manera que resulten en pasar comandos a una API de \"sistema\" en la función y, por lo tanto, dar como resultado la inyección de comandos en el dispositivo. Si la versión de firmware AL-R096 se disecciona con la herramienta binwalk, obtenemos un archivo cpio-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"goahead\" es el que tiene la función vulnerable que recibe los valores enviados por la solicitud POST. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato MIPS little endian. La función sub_43C280in IDA pro está identificada para recibir los valores enviados en la solicitud POST y el valor establecido en el parámetro POST \"dirección_ip\" se extrae en la dirección 0x0043C2F0. El parámetro POST \"ipaddress\" se concatena en la dirección 0x0043C958 y se pasa a una función de \"sistema\" en la dirección 0x00437284. Esto permite que un atacante proporcione la carga útil de su elección y finalmente tome el control del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T20:15:11.860",
      "lastModified" : "2024-11-21T03:33:46.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way that would result in passing commands to a \"popen\" API in the function and thus result in command injection on the device. If the firmware version AL-R096 is dissected using binwalk tool, we obtain a cpio-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"goahead\" is the one that has the vulnerable function that receives the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows a MIPS little endian format. The function sub_00420F38 in IDA pro is identified to be receiving the values sent in the POST request and the value set in POST parameter \"dest\" is extracted at address 0x00420FC4. The POST parameter \"dest is concatenated in a route add command and this is passed to a \"popen\" function at address 0x00421220. This allows an attacker to provide the payload of his/her choice and finally take control of the device."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona al usuario la capacidad de agregar nuevas rutas al dispositivo. Parece que los parámetros POST pasados ??en esta solicitud para configurar rutas en el dispositivo se pueden configurar de tal manera que resulten en pasar comandos a una API \"emergente\" en la función y, por lo tanto, dar como resultado la inyección de comandos en el dispositivo. Si la versión de firmware AL-R096 se disecciona con la herramienta binwalk, obtenemos un archivo cpio-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"goahead\" es el que tiene la función vulnerable que recibe los valores enviados por la solicitud POST. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato MIPS little endian. La función sub_00420F38 en IDA pro está identificada para recibir los valores enviados en la solicitud POST y el valor establecido en el parámetro POST \"dest\" se extrae en la dirección 0x00420FC4. El parámetro POST \"dest se concatena en un comando de agregar ruta y se pasa a una función\" popen \"en la dirección 0x00421220. Esto permite que un atacante proporcione la carga útil de su elección y finalmente tome el control del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T21:15:09.713",
      "lastModified" : "2024-11-21T03:33:46.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface to change a user's password. Also this is a systemic issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona a un usuario la capacidad de cambiar la contraseña administrativa para la interfaz de administración web. Parece que el dispositivo no implementa ningún mecanismo de protección de falsificación de solicitud entre sitios que permita a un atacante engañar a un usuario que ha iniciado sesión en la interfaz de administración web para cambiar la contraseña de un usuario. También este es un problema sistémico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T21:15:09.777",
      "lastModified" : "2024-11-21T03:33:46.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the \"NewInMessage\" SOAP parameter passed with a huge payload results in crashing the process. If the firmware version AL-R096 is dissected using binwalk tool, we obtain a cpio-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"miniupnpd\" is the one that has the vulnerable function that receives the values sent by the SOAP request. If we open this binary in IDA-pro we will notice that this follows a MIPS little endian format. The function WscDevPutMessage at address 0x0041DBB8 in IDA pro is identified to be receiving the values sent in the SOAP request. The SOAP parameter \"NewInMesage\" received at address 0x0041DC30 causes the miniupnpd process to finally crash when a second request is sent to the same process."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona una funcionalidad UPnP para que los dispositivos interactúen con el router e interactúen con el dispositivo. Parece que el parámetro SOAP \"NewInMessage\" pasado con una carga útil enorme provoca un fallo en el proceso. Si la versión de firmware AL-R096 se disecciona con la herramienta binwalk, obtenemos un archivo cpio-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"miniupnpd\" es el que tiene la función vulnerable que recibe los valores enviados por la solicitud SOAP. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato MIPS little endian. La función WscDevPutMessage en la dirección 0x0041DBB8 en IDA pro está identificada para recibir los valores enviados en la solicitud SOAP. El parámetro SOAP \"NewInMesage\" recibido en la dirección 0x0041DC30 hace que el proceso miniupnpd se bloqueé  finalmente cuando se envía una segunda solicitud al mismo proceso."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T21:15:09.840",
      "lastModified" : "2024-11-21T03:33:46.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface. It seems that the device does not implement any cross-site scripting protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a stored cross-site scripting payload on the user's browser and execute any action on the device provided by the web management interface."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona a un usuario la capacidad de bloquear direcciones IP mediante la interfaz de administración web. Parece que el dispositivo no implementa ningún mecanismo de protección de falsificación de scripts entre sitios que permita a un atacante engañar a un usuario que ha iniciado sesión en la interfaz de administración web para que ejecute una carga útil de scripts entre sitios en el navegador del usuario y ejecute cualquier acción en El dispositivo proporcionado por la interfaz de gestión web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T21:15:09.903",
      "lastModified" : "2024-11-21T03:33:47.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user's browser and execute any action on the device provided by the web management interface."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona a un usuario la capacidad de bloquear direcciones IP mediante la interfaz de administración web. Parece que el dispositivo no implementa ningún mecanismo de protección de falsificación de scripts entre sitios que permita a un atacante engañar a un usuario que ha iniciado sesión en la interfaz de administración web para que ejecute una carga útil de scripts entre sitios en el navegador del usuario y ejecute cualquier acción en El dispositivo proporcionado por la interfaz de gestión web."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-18T21:15:09.963",
      "lastModified" : "2024-11-21T03:33:47.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of executing various actions on the web management interface. It seems that the device does not implement any Origin header check which allows an attacker who can trick a user to navigate to an attacker's webpage to exploit this issue and brute force the password for the web management interface. It also allows an attacker to then execute any other actions which include management if rules, sensors attached to the devices using the websocket requests."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos Securifi Almond, Almond + y Almond 2015 con firmware AL-R096. El dispositivo proporciona al usuario la capacidad de ejecutar diversas acciones en la interfaz de administración web. Parece que el dispositivo no implementa ninguna comprobación de encabezado de origen que permita a un atacante que puede engañar a un usuario para que navegue a la página web de un atacante para aprovechar este problema y forzar la contraseña para la interfaz de administración web. También permite que un atacante ejecute cualquier otra acción que incluya administración de reglas, sensores conectados a los dispositivos mediante las solicitudes de websocket."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_2015_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208D57C5-306D-4759-9A80-9FC41EAABAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927187D5-C000-4DC3-BECA-7872D2294820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond\\+firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006ED0DA-A55E-419B-ADE6-F116A64DBE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3472E5F-5B79-4D36-B6AF-DFAE3021B803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securifi:almond_firmware:al-r096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B428E1-51D5-48DA-B852-93434A9A8945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:securifi:almond:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF61C46-EE6E-4592-B912-93D733A82095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153227/Securifi-Almond-2015-Buffer-Overflow-Command-Injection-XSS-CSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Securifi_Almond_plus_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1107",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2019-06-19T14:15:10.740",
      "lastModified" : "2024-11-21T03:21:20.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906."
      }, {
        "lang" : "es",
        "value" : "Las versiones 9.1.0, 9.1.2, 10.0, y 10.1 de IBM Marketing Platform exponen información sensible en las cabeceras que podría ser usado por un atacante autenticado en futuros ataques contra el sistema. ID de IBM X-Force:120906."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_platform:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A0E390-060B-4037-BD87-B0F96DE21CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_platform:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D695B1C-958A-49A9-87DE-D8A53D5B6C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_platform:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A394A760-E812-4D3C-9B00-F55EEA03CFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:marketing_platform:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345B35F7-541A-47B0-9B8B-20AEEB876EBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108918",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120906",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10887815",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/108918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/120906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10887815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-19T22:15:13.593",
      "lastModified" : "2024-11-21T03:12:41.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect."
      }, {
        "lang" : "es",
        "value" : "El servidor de autorización OAuth versión 2.0 de ForgeRock Access Management (OpenAM) versión 13.5.0-13.5.1 y Access Management (AM) versión 5.0.0-5.1.1, no comprueba correctamente redirect_uri para algunas peticiones no válidas, lo que permite a los atacantes realizar phishing por medio de un redireccionamiento no validado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "31F2A6D9-D3BB-4D1D-BA49-D120B32EF6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:openam:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndIncluding" : "13.5.1",
            "matchCriteriaId" : "C991BD33-4EE1-4CD4-80EF-4F539F27E159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a45958025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a45958025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-19T22:15:13.673",
      "lastModified" : "2024-11-21T03:12:41.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to execute a script in the user's browser via reflected XSS."
      }, {
        "lang" : "es",
        "value" : "El servidor de autorización Auth versión 2.0 de ForgeRock Access Management (OpenAM) versión 13.5.0-13.5.1 y Access Management (AM) versión 5.0.0-5.1.1, no comprueba correctamente redirect_uri para algunas peticiones no válidas, lo que permite a los atacantes ejecutar un script en el navegador del usuario por medio de un XSS reflejado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "31F2A6D9-D3BB-4D1D-BA49-D120B32EF6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:openam:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndIncluding" : "13.5.1",
            "matchCriteriaId" : "C991BD33-4EE1-4CD4-80EF-4F539F27E159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a45958025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a45958025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-20T15:15:10.537",
      "lastModified" : "2024-11-21T03:19:01.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation."
      }, {
        "lang" : "es",
        "value" : "La aplicación ASUS Vivobaby anterior a la versión 1.1.09 para Android ha perdido la validación del certificado SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:hivivo:*:*:*:*:*:vivowatch:*:*",
            "versionEndExcluding" : "5.6.27",
            "matchCriteriaId" : "B696258A-9A71-4F7C-A453-74BE06752AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:vivobaby:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "1.1.09",
            "matchCriteriaId" : "95BDE42F-91AF-408E-825D-32C949A21F18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15694",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2019-06-21T16:15:09.937",
      "lastModified" : "2024-11-21T03:15:01.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster."
      }, {
        "lang" : "es",
        "value" : "Cuando un servidor Apache Geode versiones desde 1.0.0 hasta 1.8.0 está operando en modo seguro, un usuario con permisos de escritura para regiones de datos específicas puede modificar los metadatos del clúster interno. Un usuario malicioso podría modificar estos datos de manera que afecte la operación del clúster."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "53F829EF-5CEA-4BA5-8E22-DDC3F0E6B5C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/108870",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/311505e7b7a045aaa246f0a1935703acacf41b954621b1363c40bf6f%40%3Cuser.geode.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/108870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/311505e7b7a045aaa246f0a1935703acacf41b954621b1363c40bf6f%40%3Cuser.geode.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-06-24T19:15:10.273",
      "lastModified" : "2024-11-21T03:19:01.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation."
      }, {
        "lang" : "es",
        "value" : "La aplicación  ASUS HiVivo anterior a versión 5.6.27 para ASUS Watch ha perdido la comprobación del certificado SSL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:hivivo:*:*:*:*:*:vivowatch:*:*",
            "versionEndExcluding" : "5.6.27",
            "matchCriteriaId" : "B696258A-9A71-4F7C-A453-74BE06752AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:vivobaby:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "1.1.09",
            "matchCriteriaId" : "95BDE42F-91AF-408E-825D-32C949A21F18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5028",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2019-06-27T17:15:11.130",
      "lastModified" : "2024-11-21T03:26:53.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La validación de datos insuficientes en V8 en Google Chrome antes de 56.0.2924.76 permitió a un atacante remoto filtrar datos de origen cruzado a través de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0.2924.76",
            "matchCriteriaId" : "DEC759A8-5689-4A74-825E-95857577F10F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://crbug.com/653555",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://crbug.com/653555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T16:15:11.643",
      "lastModified" : "2024-11-21T03:33:58.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings recorded by the device. It seems that the GET parameters passed in this request (to test if SMB credentials and hostname sent to the device work properly) result in being passed as commands to a \"system\" API in the function and thus result in command injection on the device. If the firmware version is dissected using binwalk tool, we obtain a cramfs-root archive which contains the filesystem set up on the device that contains all the binaries. The binary \"cgibox\" is the one that has the vulnerable function \"sub_7EAFC\" that receives the values sent by the GET request. If we open this binary in IDA-pro we will notice that this follows a ARM little endian format. The function sub_7EAFC in IDA pro is identified to be receiving the values sent in the GET request and the value set in GET parameter \"user\" is extracted in function sub_7E49C which is then passed to the vulnerable system API call."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en los dispositivos D-Link DCS-1130. El dispositivo proporciona al usuario la capacidad de configurar una carpeta SMB para los recortes de video grabados por el dispositivo. Parece que los parámetros GET pasados ??en esta solicitud (para probar si las credenciales SMB y el nombre de host enviados al dispositivo funcionan correctamente) dan como resultado que se pasen como comandos a una API de \"sistema\" en la función y, por lo tanto, resulten en una inyección de comandos en el dispositivo. Si la versión del firmware se disecciona con la herramienta binwalk, obtenemos un archivo cramfs-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. El binario \"cgibox\" es el que tiene la función vulnerable \"sub_7EAFC\" que recibe los valores enviados por la solicitud GET. Si abrimos este binario en IDA-pro, notaremos que esto sigue un formato ARM en little endian. La función sub_7EAFC en IDA pro está identificada para recibir los valores enviados en la solicitud GET y el valor establecido en el parámetro GET \"usuario\" se extrae en la función sub_7E49C que luego se pasa a la llamada API del sistema vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T19:15:10.413",
      "lastModified" : "2024-11-21T03:33:58.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings recorded by the device. It seems that the POST parameters passed in this request (to test if email credentials and hostname sent to the device work properly) result in being passed as commands to a \"system\" API in the function and thus result in command injection on the device. If the firmware version is dissected using binwalk tool, we obtain a cramfs-root archive which contains the filesystem set up on the device that contains all the binaries. The library \"libmailutils.so\" is the one that has the vulnerable function \"sub_1FC4\" that receives the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows an ARM little endian format. The function sub_1FC4 in IDA pro is identified to be receiving the values sent in the POST request and the value set in POST parameter \"receiver1\" is extracted in function \"sub_15AC\" which is then passed to the vulnerable system API call. The vulnerable library function is accessed in \"cgibox\" binary at address 0x0008F598 which calls the \"mailLoginTest\" function in \"libmailutils.so\" binary as shown below which results in the vulnerable POST parameter being passed to the library which results in the command injection issue."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1130 de D-Link. El dispositivo provee al usuario la capacidad de configurar una carpeta SMB para los recortes de video grabados por el dispositivo. Al parecer los parámetros POST pasados ??en esta petición (para probar si las credenciales de correo electrónico y el nombre de host enviados al dispositivo funcionan apropiadamente) dan como resultado que sean pasadas como comandos a una API de \"system\" en la función y, por lo tanto, resulten en una inyección de comandos en el dispositivo. Si la versión del firmware se disecciona con la herramienta binwalk, obtenemos un archivo cramfs-root que contiene el sistema de archivos configurado en el dispositivo que comprende todos los archivos binarios. La biblioteca \"libmailutils.so\" es la que tiene la función vulnerable \"sub_1FC4\" que recibe los valores enviados por la petición POST. Si abrimos este binario en IDA-pro, notaremos que este sigue un formato ARM en little endian. La función sub_1FC4 en IDA pro está identificada para recibir los valores enviados en la petición POST y el valor establecido en el parámetro POST \"receiver1\" se extrae en la función \"sub_15AC\" que luego se pasa hacia la llamada API del sistema vulnerable. Se accede a la función de la biblioteca vulnerable en el binario \"cgibox\" en la dirección 0x0008F598 que llama a la función \"mailLoginTest\" en el binario \"libmailutils.so\" como se muestra a continuación, lo que resulta en el parámetro POST vulnerable siendo pasado hacia la biblioteca, lo que ocasiona el problema de inyección de comandos ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T19:15:10.493",
      "lastModified" : "2024-11-21T03:33:58.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross-site request forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface to change the user's password."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1130 de D-Link. El dispositivo provee a un usuario la capacidad de cambiar la contraseña administrativa para la interfaz de administración web. Al parecer el dispositivo no implementa ningún mecanismo de protección contra un problema de tipo Cross-Site Request forgery que permite a un atacante engañar a un usuario que ha iniciado sesión en la interfaz de administración web para cambiar la contraseña del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T19:15:10.570",
      "lastModified" : "2024-11-21T03:33:59.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings recorded by the device. It seems that the POST parameters passed in this request (to test if email credentials and hostname sent to the device work properly) result in being passed as commands to a \"system\" API in the function and thus result in command injection on the device. If the firmware version is dissected using binwalk tool, we obtain a cramfs-root archive which contains the filesystem set up on the device that contains all the binaries. The library \"libmailutils.so\" is the one that has the vulnerable function \"sub_1FC4\" that receives the values sent by the POST request. If we open this binary in IDA-pro we will notice that this follows an ARM little endian format. The function sub_1FC4 in IDA pro is identified to be receiving the values sent in the POST request and the value set in POST parameter \"receiver1\" is extracted in function \"sub_15AC\" which is then passed to the vulnerable system API call. The vulnerable library function is accessed in \"cgibox\" binary at address 0x00023BCC which calls the \"Send_mail\" function in \"libmailutils.so\" binary as shown below which results in the vulnerable POST parameter being passed to the library which results in the command injection issue."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1130 de D-Link. El dispositivo provee al usuario la capacidad de configurar una carpeta SMB para los recortes de vídeo grabados por el dispositivo. Al parecer los parámetros POST pasados ??en esta petición (para probar si las credenciales de correo electrónico y el nombre de host enviados al dispositivo funcionan apropiadamente) dan como resultado que sean pasados como comandos a una API de \"system\" en la función y, por lo tanto, resulten en una inyección de comandos en el dispositivo. Si la versión del firmware se disecciona con la herramienta binwalk, obtenemos un archivo cramfs-root que contiene el sistema de archivos configurado en el dispositivo que contiene todos los archivos binarios. La biblioteca \"libmailutils.so\" es la que tiene la función vulnerable \"sub_1FC4\" que recibe los valores enviados por la petición POST. Si abrimos este binario en IDA-pro, notaremos que este sigue un formato ARM en little endian. La función sub_1FC4 en IDA pro está identificada para recibir los valores enviados en la petición POST y el valor establecido en el parámetro POST \"receiver1\" se extrae en la función \"sub_15AC\" que luego se pasa hacia la llamada API del sistema vulnerable. Se accede a la función de la biblioteca vulnerable en el binario \"cgibox\" en la dirección 0x00023BCC que llama a la función \"Send_mail\" en el binario \"libmailutils.so\" como se muestra a continuación, lo que hace que el parámetro POST vulnerable se transfiera hacia la biblioteca, lo que resulta en el problema de inyección de comandos ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T20:15:10.870",
      "lastModified" : "2024-11-21T03:33:58.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems that the binary loads at address 0x00012CF4 a flag called \"Authenticate\" that indicates whether a user should be authenticated or not before allowing access to the video feed. By default, the value for this flag is zero and can be set/unset using the HTTP interface and network settings tab as shown below. The device requires that a user logging to the HTTP management interface of the device to provide a valid username and password. However, the device does not enforce the same restriction by default on RTSP URL due to the checkbox unchecked by default, thereby allowing any attacker in possession of external IP address of the camera to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1130 y DCS-1100 de D-Link. El rtspd binario en la carpeta /sbin del dispositivo maneja todas las conexiones rtsp recibidas por el dispositivo. Al parecer el binario carga en la dirección 0x00012CF4 un flag llamado \"Autenticar\" que indica si un usuario debe estar autenticado o no anterior a permitir el acceso a la fuente de video. Por defecto, el valor de este flag es cero y se puede configurar y desconfigurar mediante la interfaz HTTP y la pestaña de configuración de red, como se muestra a continuación. El dispositivo requiere que un usuario inicie sesión en la interfaz de administración HTTP del dispositivo para suministrar un nombre de usuario y una contraseña válida. Sin embargo, el dispositivo no impone la misma restricción por defecto en la URL RTSP debido a que la casilla de comprobación no está activada por defecto, lo que permite que cualquier atacante que posea la dirección IP externa de la cámara visualice la fuente de vídeo en tiempo real. La severidad de este ataque se incrementa por el hecho de que hay más de 100.000 dispositivos D-Link instalados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T20:15:10.967",
      "lastModified" : "2024-11-21T03:33:58.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on who can access the webserver. This allows an hosted flash file on any domain to make calls to the device's webserver and pull any information that is stored on the device. In this case, user's credentials are stored in clear text on the device and can be pulled easily. It also seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site flashing attack on the user's browser and execute any action on the device provided by the web management interface which steals the credentials from tools_admin.cgi file's response and displays it inside a Textfield."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1130 de D-Link. El dispositivo provee un archivo crossdomain.xml sin restricciones sobre quién puede acceder al servidor web. Esto permite que un archivo flash alojado en cualquier dominio realice llamadas al servidor web del dispositivo y extraiga cualquier información almacenada en el mismo. En este caso, las credenciales del usuario son almacenadas en texto sin cifrar en el dispositivo y pueden ser  extraídas fácilmente. También parece que el dispositivo no implementa ningún mecanismo de protección contra un problema de tipo cross-site scripting forgery, que permite a un atacante engañar a un usuario que ha iniciado sesión en la interfaz de administración web para ejecutar un ataque de tipo cross-site flashing en el navegador del usuario y ejecutar cualquier acción sobre el dispositivo provisto mediante la interfaz de administración web que roba las credenciales de la respuesta del archivo tools_admin.cgi y las muestra dentro de un campo de texto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T20:15:11.043",
      "lastModified" : "2024-11-21T03:33:58.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1130 de D-Link. El dispositivo requiere que un usuario inicie sesión en el dispositivo para suministrar un nombre de usuario y contraseña. Sin embargo, el dispositivo no impone la misma restricción en una URL específica, lo que permite que cualquier atacante en posesión de esta, pueda visualizar la fuente de video en tiempo real. La severidad de este ataque se incrementa por el hecho de que hay más de 100.000 dispositivos D-Link instalados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T20:15:11.120",
      "lastModified" : "2024-11-21T03:33:59.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems that the binary performs a memcpy operation at address 0x00011E34 with the value sent in the \"Authorization: Basic\" RTSP header and stores it on the stack. The number of bytes to be copied are calculated based on the length of the string sent in the RTSP header by the client. As a result, memcpy copies more data then it can hold on stack and this results in corrupting the registers for the caller function sub_F6CC which results in memory corruption. The severity of this attack is enlarged by the fact that the same value is then copied on the stack in the function 0x00011378 and this allows to overflow the buffer allocated and thus control the PC register which will result in arbitrary code execution on the device."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El rtspd binario en la carpeta /sbin del dispositivo maneja todas las conexiones rtsp recibidas por el dispositivo. Al parecer el binario realiza una operación memcpy en la dirección 0x00011E34 con el valor enviado en el encabezado RTSP \"Authorization: Basic\" y lo almacena en la pila. El número de bytes que se copiarán se calcula según la longitud de la cadena enviada por el cliente en el encabezado RTSP. Como resultado, memcpy copia más datos que luego puede mantener en la pila y esto resulta en una corrupción de los registros sub_F6CC de la función caller, lo que resulta en la corrupción de la memoria. La severidad de este ataque se incrementa por el hecho de que el mismo valor se copia en la pila en la función 0x00011378 y esto permite desbordar el búfer asignado y, por lo tanto, controlar el registro de la PC, que resultará en una ejecución de código arbitraria en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T20:15:11.200",
      "lastModified" : "2024-11-21T03:33:59.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handles all the UPnP connections received by the device. It seems that the binary performs a sprintf operation at address 0x0000A3E4 with the value in the command line parameter \"-f\" and stores it on the stack. Since there is no length check, this results in corrupting the registers for the function sub_A098 which results in memory corruption."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El orthrus binario en la carpeta /sbin del dispositivo maneja todas las conexiones UPnP recibidas por el mismo. Al parecer el binario realiza una operación sprintf en la dirección 0x0000A3E4 con el valor en el parámetro de línea de comando \"-f\" y lo almacena en la pila. En vista de que no hay una comprobación de longitud, esto resulta en una corrupción de los registros para la función sub_A098, que resulta en una corrupción de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:09.870",
      "lastModified" : "2024-11-21T03:08:04.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using plain text HTTP protocol. The user uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is connected to the Blipcare's device wireless network to easily sniff these values using a MITM attack."
      }, {
        "lang" : "es",
        "value" : "Se detectó como parte de la investigación sobre dispositivos IoT en el firmware más reciente para el dispositivo Blipcare, que el dispositivo permite conectarse a la interfaz de administración web en una conexión no SSL usando el protocolo HTTP de texto plano. El usuario utiliza la interfaz de administración web del dispositivo para proveer las credenciales Wi-Fi del usuario para que el dispositivo pueda conectarse a él y tener acceso a Internet. Este dispositivo actúa como un monitor de presión Sanguínea Inalámbrico y es usado para medir los niveles de presión sanguínea de una persona. Esto permite a un atacante que está conectado a la red inalámbrica del dispositivo Blipcare poder espiar fácilmente estos valores mediante un ataque de tipo MITM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blipcare:wi-fi_blood_pressure_monitor_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "bp700_10.1",
            "matchCriteriaId" : "AFBC8640-C65D-4A08-90C9-1DEAEE598C91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blipcare:wi-fi_blood_pressure_monitor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB414505-7BE8-463E-B036-16B53ADED4AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:09.930",
      "lastModified" : "2024-11-21T03:08:04.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the most recent firmware for Blipcare, the device provides an open Wireless network called \"Blip\" for communicating with the device. The user connects to this open Wireless network and uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is in vicinity of Wireless signal generated by the Blipcare device to easily sniff the credentials. Also, an attacker can connect to the open wireless network \"Blip\" exposed by the device and modify the HTTP response presented to the user by the device to execute other attacks such as convincing the user to download and execute a malicious binary that would infect a user's computer or mobile device with malware."
      }, {
        "lang" : "es",
        "value" : "En el firmware más reciente para Blipcare, el dispositivo provee una red inalámbrica abierta llamada \"Blip\" para comunicarse con el dispositivo. El usuario se conecta a esta red inalámbrica abierta y utiliza la interfaz de administración web del dispositivo para proporcionar las credenciales de Wi-Fi del usuario para que el dispositivo pueda conectarse a él y tener acceso a Internet. Este dispositivo actúa como un monitor de presión Sanguínea Inalámbrico y es usado para medir los niveles de presión sanguínea de una persona. Esto permite a un atacante que esté cerca de la señal inalámbrica generada por el dispositivo Blipcare poder espiar fácilmente las credenciales. Adicionalmente, un atacante puede conectarse a la red inalámbrica abierta \"Blip\" expuesta por el dispositivo y modificar la respuesta HTTP presentada al usuario mediante el dispositivo para ejecutar otros ataques, tales como convencer al usuario de descargar y ejecutar un binario malicioso que infectaría con malware a un ordenador o dispositivo móvil del usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blipcare:wi-fi_blood_pressure_monitor_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "bp700_10.1",
            "matchCriteriaId" : "AFBC8640-C65D-4A08-90C9-1DEAEE598C91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blipcare:wi-fi_blood_pressure_monitor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB414505-7BE8-463E-B036-16B53ADED4AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:10.010",
      "lastModified" : "2024-11-21T03:08:04.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the \"Blip\" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device could become completely unresponsive. Presumably this happens as the memory footprint provided to this device is very small. According to the specs from Rezolt, the Wi-Fi module only has 256k of memory. As a result, an incorrect string copy operation using either memcpy, strcpy, or any of their other variants could result in filling up the memory space allocated to the function executing and this would result in memory corruption. To test the theory, one can modify the demo application provided by the Cypress WICED SDK and introduce an incorrect \"memcpy\" operation and use the compiled application on the evaluation board provided by Cypress semiconductors with exactly the same Wi-Fi SOC. The results were identical where the device would completely stop responding to any of the ping or web requests."
      }, {
        "lang" : "es",
        "value" : "El monitor de presión Wifi blood BP700 versión 10.1 de Blipcare, permite la corrupción de memoria que resulta en la Denegación de Servicio. Cuando está conectado a la conexión inalámbrica abierta \"Blip\" proporcionada por el dispositivo, si se envía una cadena larga como parte de la petición HTTP en cualquier parte de los encabezados HTTP, el dispositivo podría dejar de responder por completo. Presuntamente esto sucede ya que la huella de memoria suministrada a este dispositivo es muy pequeña. De acuerdo con las especificaciones de Rezolt, el módulo Wi-Fi solo tiene 256k de memoria. Como resultado, una operación de copia de cadena incorrecta que usando memcpy, strcpy o cualquiera de sus otras variantes podría resultar en el llenado del espacio de memoria asignado a la función que se ejecuta y esto podría provocar una corrupción de la memoria. Para probar la teoría, uno puede modificar la aplicación de demostración provista por el WICED SDK de Cypress e introducir una operación \"memcpy\" incorrecta y utilizar la aplicación compilada en la placa de evaluación suministrada por los semiconductores Cypress con exactamente el mismo SOC de Wi-Fi. Los resultados fueron idénticos donde el dispositivo se detendría completamente a cualquiera de las peticiones web o de ping."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blipcare:wi-fi_blood_pressure_monitor_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "bp700_10.1",
            "matchCriteriaId" : "AFBC8640-C65D-4A08-90C9-1DEAEE598C91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blipcare:wi-fi_blood_pressure_monitor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB414505-7BE8-463E-B036-16B53ADED4AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:10.103",
      "lastModified" : "2024-11-21T03:33:59.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seems that this binary dumps the HTTP VERB in the system logs. As a part of doing that it retrieves the HTTP VERB sent by the user and uses a vulnerable sprintf function at address 0x0000C3D4 in the function sub_C210 to copy the value into a string and then into a log file. Since there is no bounds check being performed on the environment variable at address 0x0000C360 this results in a stack overflow and overwrites the PC register allowing an attacker to execute buffer overflow or even a command injection attack."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El dispositivo presenta un binario personalizado llamado mp4ts en la carpeta /var/www/video. Al parecer este binario vuelca el VERB HTTP en los registros del sistema. Como parte de ello, recupera el VERB HTTP enviado por el usuario y usa una función sprintf vulnerable en la dirección 0x0000C3D4 en la función sub_C210 para copiar el valor en una cadena y luego en un archivo de registro. Dado que no se realiza ninguna comprobación de límites en la variable de entorno en la dirección 0x0000C360, esto resulta en un desbordamiento de pila y sobrescribe el registro PC, lo que permite a un atacante ejecutar un desbordamiento de búfer o incluso un ataque de inyección de comando."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:10.180",
      "lastModified" : "2024-11-21T03:33:59.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called \"dldps2121\" and listens for broadcast packets sent on 255.255.255.255. This daemon handles custom D-Link UDP based protocol that allows D-Link mobile applications and desktop applications to discover D-Link devices on the local network. The binary processes the received UDP packets sent from any device in \"main\" function. One path in the function traverses towards a block of code that handles commands to be executed on the device. The custom protocol created by D-Link follows the following pattern: Packetlen, Type of packet; M=MAC address of device or broadcast; D=Device Type;C=base64 encoded command string;test=1111. If a packet is received with the packet type being \"S\" or 0x53 then the string passed in the \"C\" parameter is base64 decoded and then executed by passing into a System API. We can see at address 0x00009B44 that the string received in packet type subtracts 0x31 or \"1\" from the packet type and is compared against 0x22 or \"double quotes\". If that is the case, then the packet is sent towards the block of code that executes a command. Then the value stored in \"C\" parameter is extracted at address 0x0000A1B0. Finally, the string received is base 64 decoded and passed on to the system API at address 0x0000A2A8 as shown below. The same form of communication can be initiated by any process including an attacker process on the mobile phone or the desktop and this allows a third-party application on the device to execute commands on the device without any authentication by sending just 1 UDP packet with custom base64 encoding."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El dispositivo ejecuta un demonio personalizado en el puerto UDP 5978 que es llamado \"dldps2121\" y escucha los paquetes de difusión enviados en 255.255.255.255. Este demonio maneja el protocolo basado en UDP D-Link personalizado, que permite a las aplicaciones móviles D-Link y a las aplicaciones de escritorio detectar dispositivos D-Link en la red local. El binario procesa los paquetes UDP recibidos enviados desde cualquier dispositivo en la función \"main\". Una ruta (path) en la función se dirige hacia un bloque de código que maneja los comandos que se ejecutarán en el dispositivo. El protocolo personalizado creado por D-Link sigue el siguiente patrón: Paquete, Tipo de paquete; M=dirección MAC del dispositivo o transmisión; D=Tipo de dispositivo; C=cadena de comando codificada en base64; prueba=1111. Si un paquete es recibido con el tipo de paquete \"S\" o 0x53, la cadena pasada en el parámetro \"C\" se descodifica en base64 y luego se ejecuta pasando a una API del Sistema. Podemos ver en la dirección 0x00009B44 que la cadena recibida en el tipo de paquete sustracción 0x31 o \"1\" del tipo de paquete y se compara con 0x22 o \"double quotes\". Si este es el caso, entonces el paquete se envía hacia el bloque de código que ejecuta un comando. Luego, el valor almacenado en el parámetro \"C\" se extrae en la dirección 0x0000A1B0. Finalmente, la cadena recibida se descodifica en base 64 y se transmite a la API del sistema en la dirección 0x0000A2A8 como se muestra a continuación. La misma forma de comunicación puede ser inicializada mediante cualquier proceso, incluido un proceso de atacante en el teléfono móvil o en el escritorio, y esto permite que una aplicación de terceros en el dispositivo ejecute comandos en el dispositivo sin alguna autenticación por medio del envío de solo 1 paquete UDP con codificación base64 personalizada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:10.493",
      "lastModified" : "2024-11-21T03:33:59.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file using the function getspnam at address 0x00053894. Then performs a crypt operation on the password retrieved from the user at address 0x000538E0 and performs a strcmp at address 0x00053908 to check if the password is correct or incorrect. However, the /etc/shadow file is a part of CRAM-FS filesystem which means that the user cannot change the password and hence a hardcoded hash in /etc/shadow is used to match the credentials provided by the user. This is a salted hash of the string \"admin\" and hence it acts as a password to the device which cannot be changed as the whole filesystem is read only."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El dispositivo presenta un demonio telnet personalizado como parte de la busybox y recupera la contraseña del archivo instantáneo utilizando la función getspnam en la dirección 0x00053894. Luego realiza una operación de cifrado en la contraseña recuperada del usuario en la dirección 0x000538E0 y realiza un strcmp en la dirección 0x00053908 para comprobar si la contraseña es correcta o incorrecta. Sin embargo, el archivo /etc/shadow es una parte del sistema de archivos CRAM-FS, lo que quiere decir que el usuario no puede cambiar la contraseña y, por lo tanto, se utiliza un hash codificado en /etc/shadow para que coincida con las credenciales suministradas por el usuario. Este es un hash con sal de la cadena \"admin\" y, por lo tanto, actúa como una contraseña para el dispositivo que no se puede cambiar debido a que todo el sistema de archivos es de solo lectura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:10.573",
      "lastModified" : "2024-11-21T03:33:59.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called \"dldps2121\" and listens for broadcast packets sent on 255.255.255.255. This daemon handles custom D-Link UDP based protocol that allows D-Link mobile applications and desktop applications to discover D-Link devices on the local network. The binary processes the received UDP packets sent from any device in \"main\" function. One path in the function traverses towards a block of code that processing of packets which does an unbounded copy operation which allows to overflow the buffer. The custom protocol created by Dlink follows the following pattern: Packetlen, Type of packet; M=MAC address of device or broadcast; D=Device Type;C=base64 encoded command string;test=1111 We can see at address function starting at address 0x0000DBF8 handles the entire UDP packet and performs an insecure copy using strcpy function at address 0x0000DC88. This results in overflowing the stack pointer after 1060 characters and thus allows to control the PC register and results in code execution. The same form of communication can be initiated by any process including an attacker process on the mobile phone or the desktop and this allows a third-party application on the device to execute commands on the device without any authentication by sending just 1 UDP packet with custom base64 encoding."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El dispositivo ejecuta un demonio personalizado en el puerto UDP 5978 que se llama \"dldps2121\" y escucha los paquetes de difusión enviados en 255.255.255.255. Este demonio maneja el protocolo basado en UDP D-Link personalizado que permite a las aplicaciones móviles de D-Link y las aplicaciones de escritorio detectar dispositivos D-Link en la red local. El binario procesa los paquetes UDP recibidos, enviados desde cualquier dispositivo en la función \"main\". Una ruta (path) en la función se dirige hacia un bloque de código que procesa paquetes que realizan una operación de copia ilimitada que permite desbordar el búfer. El protocolo personalizado creado por Dlink sigue el siguiente patrón: Packetlen, Tipo de paquete; M=dirección MAC del dispositivo o transmisión; D=Tipo de dispositivo; C=cadena de comando codificada en base64; prueba=1111 Podemos visualizar que la función de dirección que comienza en la dirección 0x0000DBF8 maneja todo el paquete UDP y realiza una copia no segura usando la función strcpy en la dirección 0x0000DC88. Esto genera el desbordamiento del puntero de la pila después de 1060 caracteres y, por lo tanto, permite controlar el registro PC y resulta en la ejecución del código. La misma forma de comunicación puede iniciarse mediante cualquier proceso, incluido un proceso de atacante en el teléfono móvil o en el escritorio, y esto permite que una aplicación de terceros en el dispositivo ejecute comandos en el dispositivo sin ninguna autenticación mediante el envío de solo 1 paquete UDP con la codificación base64 personalizada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-02T21:15:10.633",
      "lastModified" : "2024-11-21T03:34:00.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device provide a username and password. However, the device allows D-Link apps on the mobile devices and desktop to communicate with the device without any authentication. As a part of that communication, the device uses custom version of base64 encoding to pass data back and forth between the apps and the device. However, the same form of communication can be initiated by any process including an attacker process on the mobile phone or the desktop and this allows a third party to retrieve the device's password without any authentication by sending just 1 UDP packet with custom base64 encoding. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos DCS-1100 y DCS-1130 de D-Link. El dispositivo requiere que un usuario que inicie sesión en el dispositivo suministre un nombre de usuario y contraseña. Sin embargo, el dispositivo permite que las aplicaciones D-Link en los dispositivos móviles y de escritorio se comuniquen con el dispositivo sin ninguna autenticación. Como parte de esa comunicación, el dispositivo utiliza una versión personalizada de la codificación base64 para pasar datos en ambos sentidos entre las aplicaciones y el dispositivo. Sin embargo, la misma forma de comunicación puede iniciarse mediante cualquier proceso, incluido un proceso de atacante en el teléfono móvil o el escritorio, lo que permite a un tercero recuperar la contraseña del dispositivo sin ninguna autenticación mediante el envío de solo 1 paquete UDP con codificación base64 personalizada. La severidad de este ataque se incrementa por el hecho de que hay más de 100.000 dispositivos D-Link instalados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554817F7-7E3D-4D69-90AC-46D86056143B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704F9608-72CE-49C0-B7D2-F2FE84DF0C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB53465-4FE2-43EF-B2C6-839DFEA80D62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A388EC-275D-4180-83E2-AD73F7EEB54F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.297",
      "lastModified" : "2024-11-21T03:19:04.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "packages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?subjecttypeid=xxx request, aka Open Bug Bounty ID OBB-466362."
      }, {
        "lang" : "es",
        "value" : "packages / subject / pub / subjects.php en Archon 3.21 rev-1 tiene XSS en el parámetro de referencia en un index.php? subjecttypeid = solicitud xxx, conocido como Open Bug Bounty ID OBB-466362."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archon_project:archon:3.21:rev-1:*:*:*:*:*:*",
            "matchCriteriaId" : "F5694F3D-274A-463E-829C-E67E03EAF7F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.openbugbounty.org/reports/466362/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openbugbounty.org/reports/466362/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.360",
      "lastModified" : "2024-11-21T03:19:53.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbg_login parameter."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección de SQL en /wbg/core/_includes/authorization.inc.php en CMS Web-Gooroo hasta el 2013-01-19 permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro wbg_login"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-gooroo:cms_web-gooroo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2013-01-19",
            "matchCriteriaId" : "E4C97AF5-6926-4505-9C98-34FDD25511AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.123295",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42577/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.123295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42577/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.440",
      "lastModified" : "2024-11-21T03:29:16.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution"
      }, {
        "lang" : "es",
        "value" : "novaksolutions / infusionsoft-php-sdk v2016-10-31 es vulnerable a un XSS reflejado en la ejecución del código resultante de leadscoring.php"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novaksolutions:infusionsoft-php-sdk:2016-10-31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44A3F9-1A76-4042-80D5-1A4434380617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/novaksolutions/infusionsoft-php-sdk/issues/111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novaksolutions/infusionsoft-php-sdk/issues/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.517",
      "lastModified" : "2024-11-21T03:30:45.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python script used for authentication. When calling wrongpass, the variables $VAL0 and $VAL1 should be enclosed in quotes to prevent the potential for Bash command injection. Further to this, VAL0 and VAL1 should be sanitised to ensure they do not contain malicious characters. Passing it the username of '-' will cause it to time out and log the user in because of poor error handling. This will log the attacker in as an administrator where the telnet / ssh services can be enabled, and the credentials for local users can be reset. Also, login.cgi accepts the username as a GET parameter, so login can be achieved by browsing to the /cgi-bin/login.cgi?username=-%20a URI."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Riello NetMan 204 14-2 y 15-2. El problema está relacionado con la secuencia de comandos de inicio de sesión y la secuencia de comandos de Python utilizada incorrectamente para la identificación. Al llamar a paso incorrecto, las variables $ VAL0 y $ VAL1 deben incluirse entre comillas para evitar el potencial de inyección del comando Bash. Además de esto, VAL0 y VAL1 deben limpiarse para garantizar que no contengan caracteres maliciosos. Al pasarle el nombre de usuario de '-', se cerrará el tiempo de espera y el usuario iniciará sesión debido a un mal manejo de errores. Esto registrará al atacante como administrador, donde los servicios de telnet / ssh se pueden habilitar, y las credenciales de los usuarios locales se pueden restablecer. Además, login.cgi acepta el nombre de usuario como un parámetro GET, por lo que el inicio de sesión se puede lograr al buscar en la URI /cgi-bin/login.cgi?username=-%20a."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riello-ups:netman_204_firmware:14-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7E16E6-C88E-4686-A680-70296EB18C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riello-ups:netman_204_firmware:15-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6F8422-1A9C-497B-87D5-D9A453A04586"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:riello-ups:netman_204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06001306-7B00-453C-9C45-17E5A64DF4C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://web.archive.org/web/20170205100702/https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://web.archive.org/web/20170205100702/https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.610",
      "lastModified" : "2024-11-21T03:35:49.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs."
      }, {
        "lang" : "es",
        "value" : "La configuración de ejemplo de solrconfig.xml segura provista no impone la autorización de Sentry en / update / json / docs."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.8.0",
            "matchCriteriaId" : "1F9C307E-88BC-4A70-80C0-77B876A0D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8.2",
            "versionEndIncluding" : "5.9.2",
            "matchCriteriaId" : "55010C94-40AB-464B-B19C-E7D35CAC1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.0",
            "versionEndIncluding" : "5.10.1",
            "matchCriteriaId" : "5CEA2DB4-19CD-4B5B-A07B-6EBE7101E362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11.0",
            "versionEndIncluding" : "5.11.1",
            "matchCriteriaId" : "6B87564F-1DBF-418A-BBAA-E850089CDA03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.673",
      "lastModified" : "2024-11-21T03:35:50.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed."
      }, {
        "lang" : "es",
        "value" : "La contraseña del almacén de claves para Spark History Server puede estar expuesta en archivos no protegidos en el directorio /var/run/cloudera-scm-agent administrado por Cloudera Manager. El archivo de almacén de claves en sí no está expuesto."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8407AD-B285-44FD-A4A9-AA75D2F981BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T17:15:09.737",
      "lastModified" : "2024-11-21T03:35:50.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secret data of processes managed by CM is not secured by file permissions."
      }, {
        "lang" : "es",
        "value" : "Los datos secretos de los procesos administrados por CM no están protegidos por permisos de archivo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:5.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED574096-F087-46A0-BC5C-A38E607B6CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814E11D0-DF7D-452D-A57B-554EB743C1E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8407AD-B285-44FD-A4A9-AA75D2F981BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T20:15:10.337",
      "lastModified" : "2024-11-21T03:11:30.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encoded in the Authorization HTTP header. However, a missing length check in the code allows an attacker to send a string of 1024 characters in the password field, and allows an attacker to exploit a memory corruption issue. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 is dissected using the binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that has many of the binaries in the /usr folder. The binary \"sonia\" is the one that has the vulnerable function that performs the credential check in the binary for the HTTP API specification. If we open this binary in IDA Pro we will notice that this follows an ARM little-endian format. The function at address 00415364 in IDA Pro starts the HTTP authentication process. This function calls another function at sub_ 0042CCA0 at address 0041549C. This function performs a strchr operation after base64 decoding the credentials, and stores the result on the stack, which results in a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "El Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 permite solicitudes HTTP que permiten habilitar varias funcionalidades de la cámara mediante API HTTP, en lugar de la interfaz de administración web que proporciona la aplicación. Esta API HTTP recibe las credenciales como base64 codificada en el encabezado HTTP de Autorización. Sin embargo, una verificación de longitud faltante en el código le permite a un atacante enviar una cadena de 1024 caracteres en el campo de contraseña, y le permite a un atacante aprovechar un problema de corrupción de memoria. Esto puede permitir a un atacante eludir el mecanismo de protección de la cuenta y forzar las credenciales. Si la versión del firmware Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 se diseca con la herramienta binwalk, se obtiene un archivo _user-x.squashfs.img.extracted que contiene el sistema de archivos configurado en el dispositivo que tiene muchos de Los binarios en la carpeta / usr. El \"sonia\" binario es el que tiene la función vulnerable que realiza la comprobación de credenciales en el binario para la especificación de la API HTTP. Si abrimos este binario en IDA Pro, notaremos que esto sigue un formato ARM little-endian. La función en la dirección 00415364 en IDA Pro inicia el proceso de autorización HTTP. Esta función llama a otra función en sub_ 0042CCA0 en la dirección 0041549C. Esta función realiza una operación strchr después de que la base64 decodifique las credenciales, y almacena el resultado en la pila, lo que resulta en un desbordamiento de búfer stack-based."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amcrest:ipm-721s_firmware:amcrest_ipc-awxx_eng_n_v2.420.ac00.17.r.20170322:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C41BC1C-F4B4-4605-841B-15948F7D1F5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A354BD-B8FC-45D1-B8B2-5A44334CF2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T20:15:10.430",
      "lastModified" : "2024-11-21T03:33:34.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary \"sonia\" is the one that has the vulnerable function that sets up the default credentials on the device. If one opens this binary in IDA-pro, one will notice that this follows a ARM little endian format. The function sub_3DB2FC in IDA pro is identified to be setting up the values at address 0x003DB5A6. The sub_5C057C then sets this value and adds it to the Configuration files in /mnt/mtd/Config/Account1 file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Amcrest IPM-721S V2.420.AC00.16.R.20160909 tienen credenciales predeterminadas que están codificadas en el firmware y pueden ser extraídas por cualquiera que invierta el firmware para identificarlas. Si la versión del firmware V2.420.AC00.16.R 9/9/2016 se diseca con la herramienta binwalk, se obtiene un archivo _user-x.squashfs.img.extracted que contiene el sistema de archivos configurado en el dispositivo que muchos de los binarios en la carpeta / usr. El \"sonia\" binario es el que tiene la función vulnerable que configura las credenciales predeterminadas en el dispositivo. Si uno abre este binario en IDA-pro, notará que sigue un formato ARM en little endian. La función sub_3DB2FC en IDA pro se identifica para configurar los valores en la dirección 0x003DB5A6. El sub_5C057C luego establece este valor y lo agrega a los archivos de Configuración en el archivo / mnt / mtd / Config / Account1."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amcrest:ipm-721s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.420.ac00.16.r.20160909",
            "matchCriteriaId" : "2EC72AB3-67BC-4187-8918-8030B045F383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A354BD-B8FC-45D1-B8B2-5A44334CF2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T20:15:10.510",
      "lastModified" : "2024-11-21T03:33:34.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification (which is supported by the same binary) then there is no account lockout or timeout executed. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary \"sonia\" is the one that has the vulnerable function that performs the credential check in the binary for the ONVIF specification. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 00671618 in IDA pro is parses the WSSE security token header. The sub_ 603D8 then performs the authentication check and if it is incorrect passes to the function sub_59F4C which prints the value \"Sender not authorized.\""
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Amcrest IPM-721S V2.420.AC00.16.R.20160909 tienen una política de tiempo de espera para esperar 5 minutos en caso de que se detecten 30 intentos de contraseña incorrectos mediante la interfaz web y API de HTTP proporcionada por el dispositivo. Sin embargo, si se realiza el mismo intento de fuerza bruta utilizando la especificación ONVIF (que es compatible con el mismo binario), entonces no se ejecuta el bloqueo de la cuenta o el tiempo de espera. Esto puede permitir a un atacante eludir el mecanismo de protección de la cuenta y forzar las credenciales. Si la versión del firmware V2.420.AC00.16.R 9/9/2016 se diseca con la herramienta binwalk, se obtiene un archivo _user-x.squashfs.img.extracted que contiene el sistema de archivos configurado en el dispositivo que muchos de los binarios en la carpeta / usr. El \"sonia\" binario es el que tiene la función vulnerable que realiza la verificación de credenciales en el binario para la especificación ONVIF. Si uno abre este binario en IDA-pro, notará que sigue un formato ARM little endian. La función en la dirección 00671618 en IDA pro es analizar el encabezado del token de seguridad WSSE. El sub_ 603D8 luego realiza la verificación de autorización y si es incorrecto pasa a la función sub_59F4C que imprime el valor \"Remitente no autorizado\"."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amcrest:ipm-721s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.420.ac00.16.r.20160909",
            "matchCriteriaId" : "2EC72AB3-67BC-4187-8918-8030B045F383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A354BD-B8FC-45D1-B8B2-5A44334CF2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T20:15:10.573",
      "lastModified" : "2024-11-21T03:33:35.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the serial number of the camera. This can allow an attacker who knows the serial number to easily add another user's camera to an attacker's cloud account and control it completely. This is possible in case of any camera that is currently not a part of an Amcrest cloud account or has been removed from the user's cloud account. Also, another requirement for a successful attack is that the user should have rebooted the camera in the last two hours. However, both of these conditions are very likely for new cameras that are sold over the Internet at many ecommerce websites or vendors that sell the Amcrest products. The successful attack results in an attacker being able to completely control the camera which includes being able to view and listen on what the camera can see, being able to change the motion detection settings and also be able to turn the camera off without the user being aware of it. Note: The same attack can be executed using the Amcrest Cloud mobile application."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Amcrest IPM-721S V2.420.AC00.16.R.20160909 no se manejan correctamente durante las últimas dos horas. Los servicios en la nube de Amcrest no realizan una verificación exhaustiva cuando permiten que el usuario agregue una nueva cámara a la cuenta del usuario para garantizar que el usuario sea el propietario de la cámara, aparte de saber el número de serie de la cámara. Esto puede permitir que un atacante que conoce el número de serie agregue fácilmente la cámara de otro usuario a la cuenta de la nube de un atacante y la controle completamente. Esto es posible en el caso de que cualquier cámara que actualmente no sea parte de una cuenta en la nube de Amcrest o haya sido eliminada de la cuenta en la nube del usuario. Además, otro requisito para un ataque exitoso es que el usuario debería haber reiniciado la cámara en las últimas dos horas. Sin embargo, ambas condiciones son muy probables para las nuevas cámaras que se venden a través de Internet en muchos sitios web de comercio electrónico o proveedores que venden los productos Amcrest. El ataque con éxito hace que un atacante pueda controlar completamente la cámara, lo que incluye poder ver y escuchar lo que la cámara puede ver, poder cambiar la configuración de detección de movimiento y también poder apagar la cámara sin que el usuario esté consciente de ello. Nota: El mismo ataque se puede ejecutar utilizando la aplicación móvil Amcrest Cloud."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amcrest:ipm-721s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.420.ac00.16.r.20160909",
            "matchCriteriaId" : "2EC72AB3-67BC-4187-8918-8030B045F383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A354BD-B8FC-45D1-B8B2-5A44334CF2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T20:15:10.633",
      "lastModified" : "2024-11-21T03:33:35.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary \"sonia\" is the one that has the vulnerable function that sets up the default credentials on the device. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function sub_436D6 in IDA pro is identified to be setting up the configuration for the device. If one scrolls to the address 0x000437C2 then one can see that /current_config is being set as an ALIAS for /mnt/mtd/Config folder on the device. If one TELNETs into the device and navigates to /mnt/mtd/Config folder, one can observe that it contains various files such as Account1, Account2, SHAACcount1, etc. This means that if one navigates to http://[IPofcamera]/current_config/Sha1Account1 then one should be able to view the content of the files. The security researchers assumed that this was only possible only after authentication to the device. However, when unauthenticated access tests were performed for the same URL as provided above, it was observed that the device file could be downloaded without any authentication."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Amcrest IPM-721S V2.420.AC00.16.R.20160909 permiten que un atacante no identificado descargue las credenciales administrativas. Si la versión del firmware V2.420.AC00.16.R 9/9/2016 se diseca con la herramienta binwalk, se obtiene un archivo _user-x.squashfs.img.extracted que contiene el sistema de archivos configurado en el dispositivo que muchos de los binarios en la carpeta / usr. El \"sonia\" binario es el que tiene la función vulnerable que configura las credenciales predeterminadas en el dispositivo. Si uno abre este binario en IDA-pro, notará que sigue un formato ARM little endian. La función sub_436D6 en IDA pro se identifica para configurar la configuración del dispositivo. Si uno se desplaza a la dirección 0x000437C2, se puede ver que / current_config se está configurando como ALIAS para la carpeta / mnt / mtd / Config en el dispositivo. Si se coloca un TELNET en el dispositivo y se navega a la carpeta / mnt / mtd / Config, se puede observar que contiene varios archivos como Account1, Account2, SHAACcount1, etc. Esto significa que si se navega a http: // [IPofcamera] / current_config / Sha1Account1 entonces uno debería poder ver el contenido de los archivos. Los investigadores de seguridad asumieron que esto solo era posible después de la autorización  en el dispositivo. Sin embargo, cuando se realizaron pruebas de acceso no autenticado para la misma URL que se proporcionó anteriormente, se observó que el archivo del dispositivo podía descargarse sin ninguna autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amcrest:ipm-721s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.420.ac00.16.r.20160909",
            "matchCriteriaId" : "2EC72AB3-67BC-4187-8918-8030B045F383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A354BD-B8FC-45D1-B8B2-5A44334CF2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Jun/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-03T20:15:10.697",
      "lastModified" : "2024-11-21T03:33:35.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups \"admin\" and \"user\". However, as a part of security analysis it was identified that a low privileged user who belongs to the \"user\" group and who has access to login in to the web administrative interface of the device can add a new administrative user to the interface using HTTP APIs provided by the device and perform all the actions as an administrative user by using that account. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary \"sonia\" is the one that has the vulnerable functions that performs the various action described in HTTP APIs. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 0x00429084 in IDA pro is the one that processes the HTTP API request for \"addUser\" action. If one traces the calls to this function, it can be clearly seen that the function sub_ 41F38C at address 0x0041F588 parses the call received from the browser and passes it to the \"addUser\" function without any authorization check."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Amcrest IPM-721S V2.420.AC00.16.R.20160909, los usuarios del dispositivo se dividen en 2 grupos \"admin\" y \"usuario\". Sin embargo, como parte del análisis de seguridad, se identificó que un usuario con pocos privilegios que pertenece al grupo de \"usuarios\" y que tiene acceso para iniciar sesión en la interfaz administrativa web del dispositivo puede agregar un nuevo usuario administrativo a la interfaz mediante HTTP Las API proporcionadas por el dispositivo y realizar todas las acciones como un usuario administrativo mediante el uso de esa cuenta. Si la versión del firmware V2.420.AC00.16.R 9/9/2016 se diseca con la herramienta binwalk, se obtiene un archivo _user-x.squashfs.img.extracted que contiene el sistema de archivos configurado en el dispositivo que muchos de los binarios en la carpeta / usr. El \"sonia\" binario es el que tiene las funciones vulnerables que realizan las diversas acciones descritas en las API de HTTP. Si uno abre este binario en IDA-pro, notará que sigue un formato ARM little endian. La función en la dirección 0x00429084 en IDA pro es la que procesa la solicitud de API HTTP para la acción \"addUser\". Si se rastrean las llamadas a esta función, se puede ver claramente que la función sub_ 41F38C en la dirección 0x0041F588 analiza la llamada recibida desde el navegador y la pasa a la función \"addUser\" sin ninguna verificación de autorización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amcrest:ipm-721s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.420.ac00.16.r.20160909",
            "matchCriteriaId" : "2EC72AB3-67BC-4187-8918-8030B045F383"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A354BD-B8FC-45D1-B8B2-5A44334CF2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-10T15:15:10.993",
      "lastModified" : "2025-06-09T16:15:26.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libpng before 1.6.32 does not properly check the length of chunks against the user limit."
      }, {
        "lang" : "es",
        "value" : "En libpng anterior a versión 1.6.32, no comprueba apropiadamente la longitud de fragmentos en comparación con el límite del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.32",
            "matchCriteriaId" : "E7CB8F9C-2796-478B-898D-74AD09F9EC4F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "E8F29E19-3A64-4426-A2AA-F169440267CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/109269",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pnggroup/libpng/commit/347538efbdc21b8df684ebd92d37400b3ce85d55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220506-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K88124225",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K88124225?utm_source=f5support&amp;utm_medium=RSS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/109269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220506-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K88124225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K88124225?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-10T15:15:11.100",
      "lastModified" : "2024-11-21T03:29:16.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution"
      }, {
        "lang" : "es",
        "value" : "El programa paypal/adaptivepayments-sdk-php versión v3.9.2, es vulnerable a un problema de tipo XSS reflejado en el archivo SetPaymentOptions.php resultando en la ejecución del código."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paypal:adaptive_payments_sdk:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B12965C-3F78-4521-83F0-8FA05E0389F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/paypal/adaptivepayments-sdk-php/issues/87",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/paypal/adaptivepayments-sdk-php/issues/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-10T15:15:11.163",
      "lastModified" : "2024-11-21T03:31:20.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number (i.e., 443 in this example) is hardcoded into an application as a security policy, but the hostname argument (i.e., 127.0.0.1:80 in this example) is obtained from untrusted input."
      }, {
        "lang" : "es",
        "value" : "El archivo main/streams/xp_socket.c en PHP versiones 7.x antes del 07-03-2017 analiza inapropiadamente las llamadas fsockopen, como por ejemplo interpretando fsockopen('127.0.0.1:80', 443) como si la dirección y el puerto fuera 127.0.0.1:80:443, que luego se trunca a 127.0.0.1:80. Este comportamiento presenta un riesgo de seguridad si el número de puerto proporcionado explícitamente (es decir, 443 en este ejemplo) está codificado en una aplicación como una política de seguridad, pero el argumento hostname (es decir, 127.0.0.1:80 en este ejemplo) es obtenido de una entrada no segura."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.16",
            "matchCriteriaId" : "6D46367B-C8BB-4700-A6B8-79A5DAF5EF33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.php.net/bug.php?id=74192",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=74192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-27T22:15:11.573",
      "lastModified" : "2024-11-21T03:19:58.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux anterior a versión 4.14, se presentó un acceso fuera del límite en el archivo drivers/nvme/target/fc.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14",
            "matchCriteriaId" : "AF85AA17-87E7-4A75-BBC4-F88A1E4CEBDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c319d3a144d4b8f1ea2047fd614d2149b68f889",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0c319d3a144d4b8f1ea2047fd614d2149b68f889",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K74012105",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K74012105?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c319d3a144d4b8f1ea2047fd614d2149b68f889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0c319d3a144d4b8f1ea2047fd614d2149b68f889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K74012105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K74012105?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-30T13:15:13.310",
      "lastModified" : "2024-11-21T03:19:58.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name."
      }, {
        "lang" : "es",
        "value" : "edx-platform antes de 03-08-2017, permite a los atacantes activar mensajes de correo electrónico de restablecimiento de contraseña en los que el enlace de restablecimiento presenta un nombre de dominio controlado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edx:edx-platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-08-03",
            "matchCriteriaId" : "735E9E27-47F7-4DBE-8072-DD477069081A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/edx/edx-platform/pull/15773",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/openedx-announce/QTvijt48bAY",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/edx/edx-platform/pull/15773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/openedx-announce/QTvijt48bAY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-07-30T19:15:11.953",
      "lastModified" : "2024-11-21T03:19:58.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials."
      }, {
        "lang" : "es",
        "value" : "El proceso de instalación en Open edX antes del 10-01-2017 expone una instancia de MongoDB a conexiones externas con credenciales por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edx:edx-platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-01-10",
            "matchCriteriaId" : "565D5EC1-AA63-4CC9-8E09-9DF34343919A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://groups.google.com/forum/#%21topic/openedx-announce/jRXyo1HJzNk",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/openedx-announce/mpyyx34LWSY",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/openedx-announce/jRXyo1HJzNk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/openedx-announce/mpyyx34LWSY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.327",
      "lastModified" : "2024-11-21T03:19:59.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite el uso de una dirección de correo electrónico no reservada en los registros SOA de la zona DNS (SEC-306)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.420",
      "lastModified" : "2024-11-21T03:19:59.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, escribe copias de seguridad del directorio de inicio en una ubicación incorrecta (SEC-309)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.467",
      "lastModified" : "2024-11-21T03:19:59.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite cuentas enjauladas para restaurar archivos que están fuera de la jaula (SEC-310)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.547",
      "lastModified" : "2024-11-21T03:19:59.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite a los usuarios sin privilegios acceder a directorios restringidos durante las restauraciones de cuentas (SEC-311)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.623",
      "lastModified" : "2024-11-21T03:19:59.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite la ejecución de código arbitraria por medio de la inyección de Maketext en PostgresAdmin (SEC-313)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.700",
      "lastModified" : "2024-11-21T03:19:59.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite la ejecución de código arbitraria por medio de la inyección de Maketext en una carga de estilo de Reseller (SEC-314)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.763",
      "lastModified" : "2024-11-21T03:19:59.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, puede realizar operaciones de archivo no seguras debido a que Jailshell no ajusta la umask (SEC-315)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.843",
      "lastModified" : "2024-11-21T03:20:00.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite una inyección de formato de cadenas en dovecot-xaps-plugin (SEC-318)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.903",
      "lastModified" : "2024-11-21T03:20:00.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite la ejecución de código en el contexto de la cuenta root debido a permisos débiles en copias de seguridad de tipo incremental (SEC-322)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T13:15:11.983",
      "lastModified" : "2024-11-21T03:20:00.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite a los atacantes leer archivos de copia de seguridad debido a que son legibles por todo el mundo durante un intervalo de tiempo corto (SEC-323)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://forums.cpanel.net/threads/cpanel-tsr-2017-0006-full-disclosure.615839/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.020",
      "lastModified" : "2024-11-21T03:20:00.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite colisiones debido a que las bases de datos PostgreSQL se pueden asignar a varias cuentas (SEC-325)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.363",
      "lastModified" : "2024-11-21T03:20:00.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, no bloquea un nombre de usuario de postmaster, lo que podría permitir la recepción de correo electrónico privado (SEC-326)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.427",
      "lastModified" : "2024-11-21T03:20:00.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, no presenta una lista suficiente de nombres de usuario reservados (SEC-327)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.490",
      "lastModified" : "2024-11-21T03:20:00.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 does not block a username of ssl (SEC-328)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, no bloquea un nombre de usuario del protocolo SSL (SEC-328)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.567",
      "lastModified" : "2024-11-21T03:20:01.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite operaciones arbitrarias de lectura de archivos por medio de vdomainaliases de Exim (SEC-329)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.613",
      "lastModified" : "2024-11-21T03:20:01.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, no conserva los permisos para el transporte del respaldo local (SEC-330)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.707",
      "lastModified" : "2024-11-21T03:20:01.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331)."
      }, {
        "lang" : "es",
        "value" : "DnsUtils en cPanel anterior a versión 68.0.15, permite la creación de zonas para los subdominios hostname y account (SEC-331)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.757",
      "lastModified" : "2024-11-21T03:20:01.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite a los atacantes leer el archivo crontab de root durante un intervalo de tiempo corto al habilitar o deshabilitar sqloptimizer (SEC-332)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.833",
      "lastModified" : "2024-11-21T03:20:01.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite la ejecución del código root local por medio de cpdavd (SEC-333)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.910",
      "lastModified" : "2024-11-21T03:20:01.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite que las cuentas de usuario sean creadas parcialmente con formatos de nombre de usuario no válidos (SEC-334)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:12.990",
      "lastModified" : "2024-11-21T03:20:01.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite un ataque de tipo XSS almacenado durante una actualización moderada de cpaddons (SEC-336)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.050",
      "lastModified" : "2024-11-21T03:20:02.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite la ejecución de código en el contexto de la cuenta nobody por medio de archivos de Mailman (SEC-337)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.130",
      "lastModified" : "2024-11-21T03:20:02.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite que los datos del dominio sean eliminados para dominios con el TLD .lock (SEC-341)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.193",
      "lastModified" : "2024-11-21T03:20:02.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 68.0.15, permite operaciones de lectura de archivos arbitrarias debido a la lógica de modificación .htaccess de copia de seguridad (SEC-345)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.35",
            "matchCriteriaId" : "803D8E28-06A7-4D3C-861F-EBCE8ED61B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.42",
            "matchCriteriaId" : "9C170CE5-10F2-4638-9ABA-55E5C44176D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.34",
            "matchCriteriaId" : "8F465016-041B-48FD-B659-8698FF0E8181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "68.0.15",
            "matchCriteriaId" : "1EF55CA0-F55E-4DCA-8EB0-3DD897251D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0006-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.257",
      "lastModified" : "2024-11-21T03:20:02.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 67.9999.103, permite la inyección SQL durante el procesamiento de eximstats (SEC-276)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "CB7EBC48-3B0B-4641-9A6F-57229E8CE7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.317",
      "lastModified" : "2024-11-21T03:20:02.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 67.9999.103, no impone la comprobación del nombre de host SSL para la descarga del acuerdo de soporte (SEC-279)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "CB7EBC48-3B0B-4641-9A6F-57229E8CE7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.363",
      "lastModified" : "2024-11-21T03:20:02.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 67.9999.103, permite un ataque de tipo XSS almacenado en las interfaces MySQL Password Change de WHM (SEC-282)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "08B24A9B-F2D3-4282-9270-0A6E3166B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "CB7EBC48-3B0B-4641-9A6F-57229E8CE7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.443",
      "lastModified" : "2024-11-21T03:20:03.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 67.9999.103, la interfaz backup podría devolver un archivo de copia de seguridad con todas las bases de datos MySQL (SEC-283)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "08B24A9B-F2D3-4282-9270-0A6E3166B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "CB7EBC48-3B0B-4641-9A6F-57229E8CE7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.490",
      "lastModified" : "2024-11-21T03:20:03.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 67.9999.103, el archivo de copia de seguridad de una cuenta de usuario podría contener todas las bases de datos MySQL en el servidor (SEC-284)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "08B24A9B-F2D3-4282-9270-0A6E3166B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "CB7EBC48-3B0B-4641-9A6F-57229E8CE7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.567",
      "lastModified" : "2024-11-21T03:20:03.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"addon domain conversion\" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285)."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de \"addon domain conversion\" en cPanel anterior a versión 67.9999.103, puede copiar todas las bases de datos MySQL en la nueva cuenta (SEC-285)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "08B24A9B-F2D3-4282-9270-0A6E3166B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "179399A2-B445-44BF-BB64-F212CB267EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.630",
      "lastModified" : "2024-11-21T03:20:03.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior al versión 67.9999.103, permite que los archivos de registro del Servidor HTTP de Apache sean legibles en todo el mundo debido al manejo inapropiado de un cambio de nombre de cuenta (SEC-296)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "08B24A9B-F2D3-4282-9270-0A6E3166B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "179399A2-B445-44BF-BB64-F212CB267EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.693",
      "lastModified" : "2024-11-21T03:20:03.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 67.9999.103, el sistema de copia de seguridad sobrescribe el directorio de inicio de root cuando un montaje desaparece (SEC-299)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "08B24A9B-F2D3-4282-9270-0A6E3166B726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "9C72F220-BEF2-41F6-8312-A5DE70D2E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "179399A2-B445-44BF-BB64-F212CB267EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "E6FDB6E8-4C9D-47B4-90AD-6022D9DD5976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "67.9999.64",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "07B4EC93-FA39-4633-92FD-B7CA330D3F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.740",
      "lastModified" : "2024-11-21T03:20:03.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 67.9999.103, permite una redireccionamiento abierto en el archivo /unprotected/redirect.html (SEC-300)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "F5BD6FC3-11D4-47B4-8BD3-CF2CBE7B1138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "736F9A38-5BD2-441A-A9D3-25BF752C8928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.31",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "95F311F5-58EF-4985-A79D-8614EB1A0709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.42",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "3A63076C-335A-47AD-AEF5-6556B630770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.24",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "9B349761-D09A-477E-93D9-E053A2AC8732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.800",
      "lastModified" : "2024-11-21T03:20:03.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 67.9999.103, permite la ejecución de código en el contexto de la cuenta mailman debido al filtrado incorrecto de la variable de entorno (SEC-302)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "F5BD6FC3-11D4-47B4-8BD3-CF2CBE7B1138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "736F9A38-5BD2-441A-A9D3-25BF752C8928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.31",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "95F311F5-58EF-4985-A79D-8614EB1A0709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.42",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "3A63076C-335A-47AD-AEF5-6556B630770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.24",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "9B349761-D09A-477E-93D9-E053A2AC8732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T14:15:13.897",
      "lastModified" : "2024-11-21T03:20:04.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 67.9999.103, permite operaciones arbitrarias de sobrescritura de archivos durante una actualización del esquema SQLite de Roundcube (SEC-303)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.0.52",
            "matchCriteriaId" : "F5BD6FC3-11D4-47B4-8BD3-CF2CBE7B1138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "60.0.48",
            "matchCriteriaId" : "736F9A38-5BD2-441A-A9D3-25BF752C8928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.30",
            "matchCriteriaId" : "A6F6E962-A1DA-4B7F-9A32-1182DAA065D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.31",
            "versionEndExcluding" : "64.0.40",
            "matchCriteriaId" : "95F311F5-58EF-4985-A79D-8614EB1A0709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.42",
            "versionEndExcluding" : "66.0.23",
            "matchCriteriaId" : "3A63076C-335A-47AD-AEF5-6556B630770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.24",
            "versionEndExcluding" : "67.9999.103",
            "matchCriteriaId" : "9B349761-D09A-477E-93D9-E053A2AC8732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/68+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:11.787",
      "lastModified" : "2024-11-21T03:20:04.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante la instalación de WHM (SEC-263)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "7408F14F-6D46-411A-B62A-08F632537813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:11.850",
      "lastModified" : "2024-11-21T03:20:04.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante las operaciones de archivos de cPAddons de WHM (SEC-265)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "7408F14F-6D46-411A-B62A-08F632537813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:11.897",
      "lastModified" : "2024-11-21T03:20:04.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante la desinstalación de cPAddons de WHM (SEC-266)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "7408F14F-6D46-411A-B62A-08F632537813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:11.977",
      "lastModified" : "2024-11-21T03:20:04.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante el procesamiento de cPAddons de WHM (SEC-269)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "7408F14F-6D46-411A-B62A-08F632537813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.037",
      "lastModified" : "2024-11-21T03:20:04.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.2, permite a las cuentas demo crear bases de datos y usuarios (SEC-271)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "5DB00CEC-8A7C-4A6D-B7F0-44888D0F654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "D1A61832-3412-4384-B09C-4E559FCC2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "9AE17BA2-BDD4-42E3-AA74-04B481FAFAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.1",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "AF1F5D15-72DA-4E1A-8531-E78BA42520EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.117",
      "lastModified" : "2024-11-21T03:20:04.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, la conversión EasyApache 4 establece una propiedad y permisos de domlog débiles (SEC-272)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "56.0.1",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "7C5C0F44-05FE-4C26-9CD9-13A5630C8DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "58.0.3",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "9FCAEC05-C807-4607-A362-6438A069D5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "5DB00CEC-8A7C-4A6D-B7F0-44888D0F654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "D1A61832-3412-4384-B09C-4E559FCC2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "9AE17BA2-BDD4-42E3-AA74-04B481FAFAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.1",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "AF1F5D15-72DA-4E1A-8531-E78BA42520EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.163",
      "lastModified" : "2024-11-21T03:20:05.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, los archivos de registro de dominio se vuelven legibles después del procesamiento de registro (SEC-273)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "56.0.1",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "7C5C0F44-05FE-4C26-9CD9-13A5630C8DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "58.0.3",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "9FCAEC05-C807-4607-A362-6438A069D5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "5DB00CEC-8A7C-4A6D-B7F0-44888D0F654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "D1A61832-3412-4384-B09C-4E559FCC2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "9AE17BA2-BDD4-42E3-AA74-04B481FAFAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.1",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "AF1F5D15-72DA-4E1A-8531-E78BA42520EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.240",
      "lastModified" : "2024-11-21T03:20:05.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, el archivo de configuración del Servidor HTTP de Apache se cambia a legible para todo el mundo cuando se reconstruye (SEC-274)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "5DB00CEC-8A7C-4A6D-B7F0-44888D0F654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "D1A61832-3412-4384-B09C-4E559FCC2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "9AE17BA2-BDD4-42E3-AA74-04B481FAFAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.1",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "AF1F5D15-72DA-4E1A-8531-E78BA42520EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.303",
      "lastModified" : "2024-11-21T03:20:05.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, el archivo cpdavd_error_log puede ser creado con permisos débiles (SEC-280)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "56.0.1",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "7C5C0F44-05FE-4C26-9CD9-13A5630C8DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "58.0.3",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "9FCAEC05-C807-4607-A362-6438A069D5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "5DB00CEC-8A7C-4A6D-B7F0-44888D0F654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "D1A61832-3412-4384-B09C-4E559FCC2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "9AE17BA2-BDD4-42E3-AA74-04B481FAFAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "66.0.1",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "AF1F5D15-72DA-4E1A-8531-E78BA42520EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.380",
      "lastModified" : "2024-11-21T03:20:05.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.2, permite a los proveedores (resellers) leer los archivos de registro de dominio de otras cuentas (SEC-288)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "7408F14F-6D46-411A-B62A-08F632537813"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.443",
      "lastModified" : "2024-11-21T03:20:05.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, pueden presentarse permisos débiles de archivos de registro después de la modificación de cuenta (SEC-289)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "CB86F18E-DCE6-4780-9A4D-A95E1C44AD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "4E1655B2-A0F5-48FD-9A8C-03129C02A2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "EDBFF216-2F0A-48F8-9A4D-63179DFACD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "2F646E95-64DD-4F95-9CF2-DD02A8E15931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "64EC469B-7352-479A-B1A2-A8564B979477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "53F31B57-361E-4D48-AF91-85DFA98D0011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.537",
      "lastModified" : "2024-11-21T03:20:05.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, los domlogs del Servidor HTTP de Apache se vuelven legibles por todo el mundo temporalmente durante el procesamiento de registros (SEC-290)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "CB86F18E-DCE6-4780-9A4D-A95E1C44AD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "4E1655B2-A0F5-48FD-9A8C-03129C02A2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "EDBFF216-2F0A-48F8-9A4D-63179DFACD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "2F646E95-64DD-4F95-9CF2-DD02A8E15931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "64EC469B-7352-479A-B1A2-A8564B979477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "53F31B57-361E-4D48-AF91-85DFA98D0011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.617",
      "lastModified" : "2024-11-21T03:20:05.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, los registros de dominio SSL del servidor HTTP de Apache pueden persistir sobre el disco después de la finalización de una cuenta (SEC-291)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "CB86F18E-DCE6-4780-9A4D-A95E1C44AD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "4E1655B2-A0F5-48FD-9A8C-03129C02A2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "EDBFF216-2F0A-48F8-9A4D-63179DFACD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "2F646E95-64DD-4F95-9CF2-DD02A8E15931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "64EC469B-7352-479A-B1A2-A8564B979477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "53F31B57-361E-4D48-AF91-85DFA98D0011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.693",
      "lastModified" : "2024-11-21T03:20:06.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 66.0.2, la propiedad de usuarios y grupos puede ser establecida incorrectamente cuando se este usando la función reassign_post_terminate_cruft (SEC-294)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.51",
            "matchCriteriaId" : "CB86F18E-DCE6-4780-9A4D-A95E1C44AD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.52",
            "matchCriteriaId" : "4E1655B2-A0F5-48FD-9A8C-03129C02A2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.45",
            "matchCriteriaId" : "EDBFF216-2F0A-48F8-9A4D-63179DFACD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.27",
            "matchCriteriaId" : "2F646E95-64DD-4F95-9CF2-DD02A8E15931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.33",
            "matchCriteriaId" : "64EC469B-7352-479A-B1A2-A8564B979477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.2",
            "matchCriteriaId" : "53F31B57-361E-4D48-AF91-85DFA98D0011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.773",
      "lastModified" : "2024-11-21T03:20:06.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 66.0.1, no realiza de manera confiable las operaciones de suspender/no suspender en cuentas (CPANEL-13941)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "65.9999.38",
            "versionEndExcluding" : "66.0.1",
            "matchCriteriaId" : "3ACD0003-3D8E-4B4C-9771-5D00B64900D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/66+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.850",
      "lastModified" : "2024-11-21T03:20:06.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 64.0.21, la conversión Horde de MySQL a SQLite puede filtrar una contraseña de base de datos (SEC-234)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.913",
      "lastModified" : "2024-11-21T03:20:06.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite la ejecución de código mediante cuentas webmail y demo por medio de una llamada de la API de store_filter (SEC-236)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:12.977",
      "lastModified" : "2024-11-21T03:20:06.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite la ejecución de código en el contexto de la cuenta root por medio de una llamada de adminbin multilang de SET_VHOST_LANG_PACKAGE (SEC-237)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T16:15:13.053",
      "lastModified" : "2024-11-21T03:20:06.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo ejecutar código por medio de la API de BoxTrapper (SEC-238)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.027",
      "lastModified" : "2024-11-21T03:20:06.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo leer archivos por medio de una llamada de la API2 de la función Fileman::getfileactions (SEC-239)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.230",
      "lastModified" : "2024-11-21T03:20:07.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a una cuenta Webmail ejecutar código por medio de forwarders (SEC-240)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.403",
      "lastModified" : "2024-11-21T03:20:07.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo ejecutar código por medio de llamadas de la API de Encoding (SEC-242)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.467",
      "lastModified" : "2024-11-21T03:20:07.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo ejecutar código por medio de una llamada de la API de ImageManager_dimensions (SEC-243)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.527",
      "lastModified" : "2024-11-21T03:20:07.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a los usuarios demo ejecutar traceroute por medio de la api2 (SEC-244)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "56.0.1",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "DE91306B-6904-409F-B07B-138F02A33F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "58.0.3",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "BBC7D380-7D81-410E-BCBA-849B43DF3D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "C30C71E1-3637-4822-BB84-7DD3888F30DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "7C618804-1CA5-4B06-9707-9B61F8A7F642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "1E7DCF36-29DD-4EBC-8F12-2951DF18FDA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.590",
      "lastModified" : "2024-11-21T03:20:07.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo redireccionar el tráfico web (SEC-245)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.653",
      "lastModified" : "2024-11-21T03:20:07.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo ejecutar comandos de la API de la función Cpanel::SPFUI (SEC-246)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.717",
      "lastModified" : "2024-11-21T03:20:08.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo y cuentas suspendidas utilizar el reenvío de puertos en SSH (SEC-247)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.777",
      "lastModified" : "2024-11-21T03:20:08.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo ejecutar comandos de la API en SSH (SEC-248)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.840",
      "lastModified" : "2024-11-21T03:20:08.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, no aplica restricciones demo para llamadas de la API en SSL (SEC-249)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.903",
      "lastModified" : "2024-11-21T03:20:08.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite operaciones de lectura de archivos y escritura de archivos para cuentas demo por medio de la API de SourceIPCheck (SEC-250)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:12.967",
      "lastModified" : "2024-11-21T03:20:08.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a las cuentas demo ejecutar código por medio de la API de ClamScanner_getsocket (SEC-251)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.027",
      "lastModified" : "2024-11-21T03:20:08.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite ciertas operaciones de lectura de archivos por medio de una llamada de la API de Serverinfo_manpage (SEC-252)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.387",
      "lastModified" : "2024-11-21T03:20:08.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite ciertas operaciones de cambio de nombre de archivo en el contexto de la cuenta root por medio del archivo scripts/convert_roundcube_mysql2sqlite (SEC-254)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.450",
      "lastModified" : "2024-11-21T03:20:08.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite ciertas operaciones de file-chmod por medio del archivo /scripts/convert_roundcube_mysql2sqlite (SEC-255)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.527",
      "lastModified" : "2024-11-21T03:20:09.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite a los atacantes leer el archivo crontab de un usuario durante un intervalo de tiempo corto sobre una actualización de cPAddon (SEC-257)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "56.0.1",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "DE91306B-6904-409F-B07B-138F02A33F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "58.0.3",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "BBC7D380-7D81-410E-BCBA-849B43DF3D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "C30C71E1-3637-4822-BB84-7DD3888F30DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "7C618804-1CA5-4B06-9707-9B61F8A7F642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "1E7DCF36-29DD-4EBC-8F12-2951DF18FDA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.577",
      "lastModified" : "2024-11-21T03:20:09.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, permite la ejecución de código por medio de archivos de configuración de Rails (SEC-259)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "63.9999.74",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "7E6AACBD-F1B1-473A-976D-3775D78BB335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.637",
      "lastModified" : "2024-11-21T03:20:09.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 64.0.21, no conserva los grupos suplementarios tras los cambios de nombre de cuenta (SEC-260)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "56.0.1",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "DE91306B-6904-409F-B07B-138F02A33F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "58.0.3",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "BBC7D380-7D81-410E-BCBA-849B43DF3D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "60.0.3",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "C30C71E1-3637-4822-BB84-7DD3888F30DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "62.0.1",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "7C618804-1CA5-4B06-9707-9B61F8A7F642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "64.0.0",
            "versionEndExcluding" : "64.0.21",
            "matchCriteriaId" : "1E7DCF36-29DD-4EBC-8F12-2951DF18FDA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/64+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.700",
      "lastModified" : "2024-11-21T03:20:09.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.24, permite un ataque de tipo XSS almacenado en la interfaz de instalación cPAddons de WHM (SEC-262)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.49",
            "matchCriteriaId" : "AF9C5E6B-ADA9-4C43-BF11-004BA45AB616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.49",
            "matchCriteriaId" : "9435A6B6-54C3-4072-ABD3-EFA966EC3E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.43",
            "matchCriteriaId" : "923B5DF2-0F38-4780-A5FE-5DE690D8DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.24",
            "matchCriteriaId" : "48CC56C7-8AAD-4222-A368-D16369546408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.763",
      "lastModified" : "2024-11-21T03:20:09.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión  62.0.17, la conversión de dominio addon no requirió un paquete para proveedores (resellers) (SEC-208)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.827",
      "lastModified" : "2024-11-21T03:20:09.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.17, permite un ataque de tipo XSS propio en la interfaz cPAddons showsecurity de WHM (SEC-217)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.873",
      "lastModified" : "2024-11-21T03:20:09.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218)."
      }, {
        "lang" : "es",
        "value" : "cPanel versiones anteriores a la 62.0.17 permite operaciones arbitrarias de lectura de archivos a través de WHM / styled / URLs (SEC-218)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.950",
      "lastModified" : "2024-11-21T03:20:10.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.17, permite la sobrescritura de archivos al renombrar  una cuenta (SEC-219)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:13.997",
      "lastModified" : "2024-11-21T03:20:10.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.17, permite la ejecución de código arbitrario durante la modificación de cuenta (SEC-220)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:14.090",
      "lastModified" : "2024-11-21T03:20:10.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.17, permite la ejecución de código arbitrario durante la instalación automática de SSL (SEC-221)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:14.153",
      "lastModified" : "2024-11-21T03:20:10.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a  versión  62.0.17, permite no conservar las preguntas de la política de seguridad tras un cambio de nombre de cuenta (SEC-223)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-02T17:15:14.230",
      "lastModified" : "2024-11-21T03:20:10.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.17, permite la ejecución de código en el contexto de la cuenta root por medio de una ruta (path) de DocumentRoot larga (SEC-225)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://news.cpanel.com/cpanel-tsr-2017-0002-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T12:15:11.380",
      "lastModified" : "2024-11-21T03:20:10.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión  62.0.17, permite la omisión de prohibición por un día de CPHulk  cuando la protección basada en IP está habilitada (SEC-224)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T12:15:11.443",
      "lastModified" : "2024-11-21T03:20:10.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión  62.0.17, permite operaciones arbitrarias de sobrescritura de archivos por medio del Editor de Plantillas de Zona  de WHM (SEC-226)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T12:15:11.537",
      "lastModified" : "2024-11-21T03:20:11.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión  62.0.17, no presenta una lista de nombres de usuario reservados  suficiente (SEC-227)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T12:15:11.583",
      "lastModified" : "2024-11-21T03:20:11.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión  62.0.17, no reconoce la propiedad del dominio apropiadamente  durante la adición de dominios aparcados en una configuración de correo (SEC-228)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T12:15:11.693",
      "lastModified" : "2024-11-21T03:20:11.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión  62.0.17, permite el acceso a recursos restringidos debido a un error de filtrado URL (SEC-229)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T12:15:11.753",
      "lastModified" : "2024-11-21T03:20:11.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión  62.0.17, permite que las cuentas demo ejecuten código por medio de la API de la función Htaccess::setphppreference (SEC-232)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:11.777",
      "lastModified" : "2024-11-21T03:20:11.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.17, permite que las cuentas demo ejecuten código por medio de una llamada de la API de NVData_fetchinc (SEC-233)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.46",
            "matchCriteriaId" : "47E22D10-EA36-41E7-9E6E-4225F1EAFBCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.45",
            "matchCriteriaId" : "318EEDB6-58C6-491A-B15E-5049D1B205D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.39",
            "matchCriteriaId" : "F022EBEE-AA7C-49E7-8A8C-949533E383F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.17",
            "matchCriteriaId" : "2270415F-4273-4951-8B94-02FB24BD73B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:11.857",
      "lastModified" : "2024-11-21T03:20:11.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, presenta una contraseña fija para la cuenta de prueba Munin MySQL (SEC-196)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:11.920",
      "lastModified" : "2024-11-21T03:20:11.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, permite un ataque de tipo auto XSS en la pantalla de cambio de contraseña de paper_lantern (SEC-197)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:11.997",
      "lastModified" : "2024-11-21T03:20:11.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, permite un ataque de tipo XSS reflejado en las interfaces reset-password (SEC-198)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.060",
      "lastModified" : "2024-11-21T03:20:12.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, permite un ataque de tipo auto XSS en la página Password and Security de correo web (SEC-199)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.137",
      "lastModified" : "2024-11-21T03:20:12.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, permite operaciones de lectura de archivos arbitrarias por medio de valuaciones de Exim (SEC-201)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.200",
      "lastModified" : "2024-11-21T03:20:12.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 62.0.4, los filtros canalizados de Exim se ejecutaron en el contexto de una cuenta de usuario incorrecta durante la entrega para un usuario del sistema (SEC-204)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.263",
      "lastModified" : "2024-11-21T03:20:12.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205)."
      }, {
        "lang" : "es",
        "value" : "Leech Protect en cPanel anterior a versión 62.0.4, no protege ciertos directorios (SEC-205)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.327",
      "lastModified" : "2024-11-21T03:20:12.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 62.0.4, los transportes de Exim podrían ejecutarse en el contexto de la cuenta nobody (SEC-206)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.373",
      "lastModified" : "2024-11-21T03:20:12.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 62.0.4, podrían presentarse comprobaciones incorrectas de la ACL en la api xml para acciones de Reorganizar Cuenta (SEC-207)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.450",
      "lastModified" : "2024-11-21T03:20:12.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209)."
      }, {
        "lang" : "es",
        "value" : "En cPanel anterior a versión 62.0.4, la generación del certificado SSL de WHM utiliza una dirección de correo electrónico no reservada (SEC-209)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.513",
      "lastModified" : "2024-11-21T03:20:13.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, no aplica la propiedad de la cuenta para las llamadas de la API de WHM de has_mycnf_for_cpuser (SEC-210)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.577",
      "lastModified" : "2024-11-21T03:20:13.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, permite un ataque de tipo XSS almacenado en la interfaz Account Suspension List de WHM (SEC-211)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://news.cpanel.com/tsr-2017-0001-full-disclosure/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-05T13:15:12.747",
      "lastModified" : "2024-11-21T03:20:13.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non-rearrange modules (SEC-213)."
      }, {
        "lang" : "es",
        "value" : "cPanel anterior a versión 62.0.4, permite a los proveedores (resellers) utilizar la API de enqueue_transfer_item de WHM para colocar en cola los módulos no reorganizados (SEC-213)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.54.0.0",
            "versionEndExcluding" : "11.54.0.36",
            "matchCriteriaId" : "CA4B4DFA-B2D7-4EA7-A94A-8F60027FD024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "55.9999.61",
            "versionEndExcluding" : "56.0.43",
            "matchCriteriaId" : "D11E1492-C7CE-42BA-A721-1163B4C9EA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "57.9999.48",
            "versionEndExcluding" : "58.0.43",
            "matchCriteriaId" : "8193ADD4-1299-49BA-AE70-F515F12D01D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "59.9999.58",
            "versionEndExcluding" : "60.0.35",
            "matchCriteriaId" : "EBCB32F8-DE9E-4C6E-9F5B-1629E53936B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "61.9999.55",
            "versionEndExcluding" : "62.0.4",
            "matchCriteriaId" : "448BB5AF-3153-4957-A76B-04057E42C912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.cpanel.net/display/CL/62+Change+Log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-07T13:15:13.280",
      "lastModified" : "2024-11-21T03:20:13.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos de cámara inalámbrica SP1 HD de ANNKE versión 3.4.1.1604071109, permiten un ataque de tipo XSS por medio de un SSID diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:annke:sp1_firmware:3.4.1.160407110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8787C0C4-965B-4D99-8555-DE41C7A80E76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:annke:sp1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98393949-AB99-4596-8C10-70122F1D9863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-08T21:15:11.223",
      "lastModified" : "2024-11-21T03:20:13.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cognitoys Dino devices allow XSS via the SSID."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Cognitoys Dino permiten XSS a través del SSID."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elementalpath:cognitoys_dino_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4228DA7D-74E9-4E93-86DD-60D56DA40A6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elementalpath:cognitoys_dino:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBFE5D7-2DCF-478A-BEB5-EB6E60A840AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-08T21:15:11.287",
      "lastModified" : "2024-11-21T03:20:13.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cognitoys Dino devices allow profiles_add.html CSRF."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Cognitoys Dino permiten profiles_add.html CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elementalpath:cognitoys_dino_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4228DA7D-74E9-4E93-86DD-60D56DA40A6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elementalpath:cognitoys_dino:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBFE5D7-2DCF-478A-BEB5-EB6E60A840AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-09T17:15:10.847",
      "lastModified" : "2024-11-21T03:20:13.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user."
      }, {
        "lang" : "es",
        "value" : "Jitbit Helpdesk en versiones anteriores a 9.0.3, permite a los atacantes remotos escalar privilegios debido al manejo inapropiado del parámetro userHash del archivo User/AutoLogin. Mediante la inspección del valor de token proporcionado en un vínculo de restablecimiento de contraseña, un usuario puede aprovechar un PRNG débil para recuperar el secreto compartido utilizado por el servidor para la autenticación remota. El secreto compartido puede ser usado para escalar privilegios forjando nuevos tokens por parte de cualquier usuario. Estos tokens pueden ser usados para iniciar sesión automáticamente como el usuario afectado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-332"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jitbit:helpdesk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.3",
            "matchCriteriaId" : "0ECE08E5-F602-4959-938E-025D22B6BA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T15:15:11.933",
      "lastModified" : "2024-11-21T03:20:16.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens."
      }, {
        "lang" : "es",
        "value" : "El plugin woocommerce-pdf-invoices-packaging-slips anterior a la versión 2.0.13 para WordPress tiene XSS a través de la pestaña o la variable de sección en las pantallas de configuración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpovernight:woocommerce_pdf_invoices\\&_packing_slips:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.13",
            "matchCriteriaId" : "9742D91F-D866-445F-896B-750056284D57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T15:15:11.997",
      "lastModified" : "2024-11-21T03:20:16.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin wp-live-chat-support anterior a la versión 7.1.03 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:live_chat:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.1.03",
            "matchCriteriaId" : "70C19154-7F3B-4358-8B80-6A2374C867A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wp-live-chat-support/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9719",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-live-chat-support/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:12.977",
      "lastModified" : "2024-11-21T03:20:15.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The simple-membership plugin before 3.5.7 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin simple-membership anterior a  la versión 3.5.7 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple-membership-plugin:simple_membership:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.5.7",
            "matchCriteriaId" : "22747E16-0157-45AB-A4BC-13DC06E893EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/simple-membership/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9718",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/simple-membership/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:13.040",
      "lastModified" : "2024-11-21T03:20:15.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin social-buttons-pack anterior a la versión 1.1.1 para WordPress tiene múltiples problemas de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:social_buttons_pack:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "4BB66CF0-48EA-4AB6-AE8F-5F181D94BEA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/social-buttons-pack/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/social-buttons-pack/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:13.117",
      "lastModified" : "2024-11-21T03:20:15.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin social-login-bws antes de la versión 0.2 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:social_login:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.2",
            "matchCriteriaId" : "E716E32A-0620-4E51-A04F-89CD903E7057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/social-login-bws/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/social-login-bws/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:13.213",
      "lastModified" : "2024-11-21T03:20:16.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin subscriber anterior a la versión 1.3.5 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:subscriber:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.5",
            "matchCriteriaId" : "2A50BC34-4B8F-4DA7-B5DF-9B9712D4CD42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/subscriber/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/subscriber/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:13.277",
      "lastModified" : "2024-11-21T03:20:16.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin twitter-cards-meta anterior a la versión 2.5.0 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdeveloper:twitter_cards_meta:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "F50B6FB2-F08F-431D-A431-734A5E7E223C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/twitter-cards-meta/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/twitter-cards-meta/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:13.383",
      "lastModified" : "2024-11-21T03:20:16.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF."
      }, {
        "lang" : "es",
        "value" : "El plugin twitter-cards-meta anterior a la versión 2.5.0 para WordPress tiene CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdeveloper:twitter_cards_meta:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "F50B6FB2-F08F-431D-A431-734A5E7E223C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/twitter-cards-meta/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/twitter-cards-meta/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-12T16:15:13.477",
      "lastModified" : "2024-11-21T03:20:16.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The twitter-plugin plugin before 2.55 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin twitter-plugin antes de la versión 2.55 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:twitter_button:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.55",
            "matchCriteriaId" : "716438B9-FA21-4E25-893F-9BEB9E8B6172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/twitter-plugin/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/twitter-plugin/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T14:15:11.977",
      "lastModified" : "2024-11-21T03:20:16.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187."
      }, {
        "lang" : "es",
        "value" : "Se detecto un problema en net / ipv6 / ip6mr.c en el kernel de Linux antes de 4.11. Al establecer una opción de socket específica, un atacante puede controlar un puntero en la tierra del kernel y causar una falla de protección general inet_csk_listen_stop, o potencialmente ejecutar código arbitrario bajo ciertas circunstancias. El problema se puede desencadenar como root (por ejemplo, dentro de un contenedor LXC predeterminado o con la capacidad CAP_NET_ADMIN) o después de compartir el espacio de nombres. Esto ocurre porque sk_type y el protocolo no se verifican en la parte apropiada de las funciones ip6_mroute_ *. NOTA: esto afecta a las distribuciones de Linux que usan núcleos a largo plazo 4.9.x anteriores a 4.9.187."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.16.72",
            "matchCriteriaId" : "E21EF678-8293-4EB3-BEA1-B35262A1C235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "4.4.187",
            "matchCriteriaId" : "FDF8054B-AF6C-4939-9851-0D88BE49B3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.187",
            "matchCriteriaId" : "3D233DCB-31B1-497B-B266-DA830EAEAE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.11",
            "matchCriteriaId" : "28FFE753-2608-40BE-A218-483B3D8C0241"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99253eb750fda6a644d5188fb26c43bad8d5a745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/99253eb750fda6a644d5188fb26c43bad8d5a745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.openwall.net/netdev/2017/12/04/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-inetcsklistenstop-gpf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://salsa.debian.org/kernel-team/linux/commit/baefcdc2f29923e7325ce4e1a72c3ff0a9800f32",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Aug/26",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K41582535",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K41582535?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4145-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2019/dsa-4497",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99253eb750fda6a644d5188fb26c43bad8d5a745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/99253eb750fda6a644d5188fb26c43bad8d5a745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.openwall.net/netdev/2017/12/04/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-inetcsklistenstop-gpf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://salsa.debian.org/kernel-team/linux/commit/baefcdc2f29923e7325ce4e1a72c3ff0a9800f32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/bugtraq/2019/Aug/26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K41582535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K41582535?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4145-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2019/dsa-4497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.093",
      "lastModified" : "2024-11-21T03:20:14.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El complemento contact-form-7-sms-addon anterior de 2.4.0 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:contact_form_7_-_clockwork_sms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "DA1073D4-C063-4DE2-B9A2-02479907B7CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/contact-form-7-sms-addon/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/contact-form-7-sms-addon/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.157",
      "lastModified" : "2024-11-21T03:20:14.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento contact-form-multi anterior de 1.2.1 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form_multi:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "30189291-E1A8-4300-AC14-C9BB2D54A587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/contact-form-multi/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/contact-form-multi/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.220",
      "lastModified" : "2024-11-21T03:20:14.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento contact-form-plugin anterior de 4.0.6 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.0.6",
            "matchCriteriaId" : "89380FF9-A53C-4E85-8806-49B07B2CFBCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/contact-form-plugin/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/contact-form-plugin/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.297",
      "lastModified" : "2024-11-21T03:20:14.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento contact-form-to-db anterior de 1.5.7 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form_to_db:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "F57AC99E-0ED7-4776-B56F-732BECFDEB68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/contact-form-to-db/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/contact-form-to-db/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.360",
      "lastModified" : "2024-11-21T03:20:14.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento de custom-admin-page anterior de 0.1.2 para WordPress tiene múltiples problemas de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:custom_admin_page:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.1.2",
            "matchCriteriaId" : "4BD5F37C-65B9-44CC-BFCC-22D1B9181345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/custom-admin-page/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/custom-admin-page/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.423",
      "lastModified" : "2024-11-21T03:20:15.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento custom-search-plugin anterior de 1.36 para WordPress tiene múltiples problemas de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:custom_search:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.36",
            "matchCriteriaId" : "F62FD9AD-B6BC-46D4-9E98-1FBD1037120C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/custom-search-plugin/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/custom-search-plugin/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.500",
      "lastModified" : "2024-11-21T03:20:15.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El complemento gravity-forms-sms-notifications anterior  de 2.4.0 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:gravity_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "F542980C-E49B-4DB2-B720-422B34FADDBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/gravity-forms-sms-notifications/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/gravity-forms-sms-notifications/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.577",
      "lastModified" : "2024-11-21T03:20:15.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento htaccess anterior a 1.7.6 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:htaccess:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.6",
            "matchCriteriaId" : "6FEC6308-9A42-4312-B7A1-161D770746DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/htaccess/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/htaccess/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.673",
      "lastModified" : "2024-11-21T03:20:15.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The liveforms plugin before 3.4.0 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El complemento liveforms anterior a 3.4.0 para WordPress tiene XSS"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3eden:live_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "F0634EE5-7353-425C-A799-9A3F4721F6F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/liveforms/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/liveforms/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.737",
      "lastModified" : "2024-11-21T03:20:15.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search."
      }, {
        "lang" : "es",
        "value" : "El complemento the simple-job-board anterior  de 2.4.4 para WordPress ha reflejado XSS a través de la búsqueda de palabras clave."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:presstigers:simple_job_board:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "424841B1-FF53-4BBB-A192-6B2E88A37045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/simple-job-board/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/simple-job-board/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T17:15:13.813",
      "lastModified" : "2024-11-21T03:20:16.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin wp-live-chat-support anterior de 7.1.05 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:live_chat:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.1.05",
            "matchCriteriaId" : "1E61EC76-0A18-4A6F-BB26-77FEFCF15687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wp-live-chat-support/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-live-chat-support/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T18:15:11.790",
      "lastModified" : "2024-11-21T03:20:14.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento adsense-plugin (también conocido como Google AdSense) versión anteriores a 1.44 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google_adsense_project:google_adsense:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.44",
            "matchCriteriaId" : "CCBD0AE4-8D56-4D2A-8D76-7738A245254E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/adsense-plugin/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/adsense-plugin/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-13T18:15:11.853",
      "lastModified" : "2024-11-21T03:20:14.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento Backup Guard versión anterior a 1.1.47 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backup-guard:backup_guard:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.47",
            "matchCriteriaId" : "8E8E9E02-E934-4C8F-BBA1-A3D37161F7B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/backup/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/backup/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-14T14:15:14.857",
      "lastModified" : "2024-11-21T03:20:17.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp-statistics plugin before 12.0.8 for WordPress has SQL injection."
      }, {
        "lang" : "es",
        "value" : "El plugin wp-statistics versiones anteriores a 12.0.8 para WordPress, presenta una inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veronalabs:wp_statistics:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "12.0.8",
            "matchCriteriaId" : "BE684537-1440-49E0-986C-61574B89917A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wp-statistics/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-statistics/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-14T15:15:11.783",
      "lastModified" : "2024-11-21T03:20:17.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The simple-login-log plugin before 1.1.2 for WordPress has SQL injection."
      }, {
        "lang" : "es",
        "value" : "El plugin simple-login-log versiones anteriores a 1.1.2 para WordPress, presenta una inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplerealtytheme:simple_login_log:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "F4065CEB-FB04-4F8F-B347-A143E504939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/simple-login-log/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/simple-login-log/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-14T16:15:12.127",
      "lastModified" : "2024-11-21T03:20:17.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions."
      }, {
        "lang" : "es",
        "value" : "El plugin custom-sidebars versiones anteriores a  3.1.0 para WordPress, presenta una vulnerabilidad de tipo CSRF relacionada con ubicación establecida, acciones de importación y acciones de exportación."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmudev:custom_sidebars:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "ED4C1E93-171E-43FD-B736-DD33E390BE38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/custom-sidebars/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/custom-sidebars/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-14T16:15:12.207",
      "lastModified" : "2024-11-21T03:20:17.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF."
      }, {
        "lang" : "es",
        "value" : "El plugin custom-sidebars versiones anteriores a  3.0.8.1 para WordPress, presenta una vulnerabilidad de tipo CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmudev:custom_sidebars:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.8.1",
            "matchCriteriaId" : "979BD99E-83C6-4C01-8D17-B9A80451FC36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/custom-sidebars/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/custom-sidebars/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-14T16:15:12.267",
      "lastModified" : "2024-11-21T03:20:17.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF."
      }, {
        "lang" : "es",
        "value" : "El plugin newsletter-by-supsystic versiones anteriores a 1.1.8 para WordPress, presenta una vulnerabilidad de tipo CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supsystic:newsletter_by_supsystic:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.8",
            "matchCriteriaId" : "CCD8695B-7501-4481-B2C0-DCDA22B68F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/newsletter-by-supsystic/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/newsletter-by-supsystic/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-14T16:15:12.347",
      "lastModified" : "2024-11-21T03:20:17.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface."
      }, {
        "lang" : "es",
        "value" : "El plugin responsive-menu versiones anteriores a 3.1.4 para WordPress, no presenta un mecanismo de protección CSRF para la interfaz de la administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "8807FAD6-8115-4EDF-AF02-9CF236066B31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/responsive-menu/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/responsive-menu/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-15T17:15:11.520",
      "lastModified" : "2024-11-21T03:12:22.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file."
      }, {
        "lang" : "es",
        "value" : "La función read_chunk en el archivo flif-dec.cpp en Free Lossless Image Format (FLIF) versión 0.3, permite a los atacantes remotos causar una denegación de servicio (lectura de memoria no válida y bloqueo de aplicación) por medio de un archivo flif diseñado."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flif:flif:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1526B174-2A54-4118-B442-5FACED6B7B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.16",
            "matchCriteriaId" : "55834B3A-AFF8-4F69-93B9-8DB0CAB4E14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cxsecurity.com/cveshow/CVE-2017-14232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cxsecurity.com/cveshow/CVE-2017-14232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T14:15:09.757",
      "lastModified" : "2024-11-21T03:20:22.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The note-press plugin before 0.1.2 for WordPress has SQL injection."
      }, {
        "lang" : "es",
        "value" : "El plugin note-press versiones anteriores a 0.1.2 para WordPress, presenta una inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datainterlock:note_press:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.1.2",
            "matchCriteriaId" : "48935BEE-7DA1-46C9-A337-E787626833C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/note-press/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/note-press/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:10.627",
      "lastModified" : "2024-11-21T03:20:21.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xo-security plugin before 1.5.3 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin xo-security versiones anteriores a 1.5.3 para WordPress, presenta una vulnerabilidad de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xakuro:xo_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.3",
            "matchCriteriaId" : "D74927D7-7BF9-450C-82A1-B108DD42A891"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/xo-security/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/xo-security/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:10.690",
      "lastModified" : "2024-11-21T03:20:21.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin zendesk-help-center versiones anteriores a 1.0.5 para WordPress, presenta múltiples problemas de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:zendesk_help_center:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "2E63517A-6086-4208-8161-141D7AF73B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/zendesk-help-center/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/zendesk-help-center/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:10.753",
      "lastModified" : "2024-11-21T03:20:21.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations."
      }, {
        "lang" : "es",
        "value" : "El plugin invite-anyone versiones anteriores a 1.3.16 para WordPress, presenta un control de acceso incorrecto para las invitaciones basadas en correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invite_anyone_project:invite_anyone:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.16",
            "matchCriteriaId" : "67AC0C77-A439-436B-9C47-EC466C60D14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/invite-anyone/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/invite-anyone/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:10.817",
      "lastModified" : "2024-11-21T03:20:21.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF."
      }, {
        "lang" : "es",
        "value" : "El plugin invite-anyone versiones anteriores a 1.3.16 para WordPress, presenta una vulnerabilidad de tipo CSRF en el panel de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invite_anyone_project:invite_anyone:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.16",
            "matchCriteriaId" : "67AC0C77-A439-436B-9C47-EC466C60D14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/invite-anyone/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/invite-anyone/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:10.893",
      "lastModified" : "2024-11-21T03:20:22.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input."
      }, {
        "lang" : "es",
        "value" : "El plugin invite-anyone versiones anteriores a 1.3.16 para WordPress, presenta un escape incorrecto del Panel de Control y una entrada del front-end no seguro"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invite_anyone_project:invite_anyone:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.16",
            "matchCriteriaId" : "67AC0C77-A439-436B-9C47-EC466C60D14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/invite-anyone/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/invite-anyone/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:10.940",
      "lastModified" : "2024-11-21T03:20:22.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF."
      }, {
        "lang" : "es",
        "value" : "El plugin jayj-quicktag versiones anteriores a 1.3.2 para WordPress, presenta una vulnerabilidad de tipo CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jayj_quicktag_project:jayj_quicktag:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "EBBEEA99-B298-4157-AD69-CF54E12BFBFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/jayj-quicktag/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/jayj-quicktag/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-16T21:15:11.003",
      "lastModified" : "2024-11-21T03:20:22.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms."
      }, {
        "lang" : "es",
        "value" : "El plugin nelio-ab-testing versiones anteriores a 4.6.4 para WordPress, presenta una vulnerabilidad de tipo CSRF en formularios de experimento."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neliosoftware:nelio_ab_testing:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "A94C67D4-DEF3-4C06-9E90-8107693800DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/nelio-ab-testing/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/nelio-ab-testing/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-19T02:15:09.953",
      "lastModified" : "2024-11-21T03:20:22.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_send_raw_srb does not initialize the reply structure."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo drivers/scsi/aacraid/commctrl.c en el kernel de Linux versiones anteriores a 4.13. Se presenta una exposición potencial de la memoria de pila del kernel porque la función  aac_send_raw_srb no inicializa la estructura de respuesta."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2894F22-5448-4402-AE27-6E43BD08E14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-19T02:15:10.017",
      "lastModified" : "2024-11-21T03:20:22.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_get_hba_info does not initialize the hbainfo structure."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo drivers/scsi/aacraid/commctrl.c en el kernel de Linux versiones anteriores a  4.13. Se presenta una exposición potencial de la memoria de pila del Kernel porque la función aac_get_hba_info no inicializa la estructura de hbainfo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.13",
            "matchCriteriaId" : "D2894F22-5448-4402-AE27-6E43BD08E14E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-19T02:15:10.077",
      "lastModified" : "2024-11-21T03:20:22.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo drivers/i2c/i2c-core-smbus.c en el kernel de Linux versiones anteriores a 4.14.15. Se presenta una escritura fuera de límites en la función i2c_smbus_xfer_emulated."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.15",
            "matchCriteriaId" : "65746862-9FE5-44AF-9622-50BBE586E601"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E78106-58E6-4D59-990F-75DA575BFAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c6efa61f5709327ecfa24bff18e57a4e80c7fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K48073202?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c6efa61f5709327ecfa24bff18e57a4e80c7fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K48073202?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-19T02:15:10.140",
      "lastModified" : "2024-11-21T03:20:23.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of bounds write and read in the function rds_recv_track_latency."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo net/rds/af_rds.c en el kernel de Linux versiones anteriores a 4.11. Se presenta una escritura y lectura fuera de límites en la función rds_recv_track_latency."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.11",
            "matchCriteriaId" : "68E74529-58C5-4D73-8176-DDDF25C71F22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=780e982905bef61d13496d9af5310bf4af3a64d3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02460950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.f5.com/csp/article/K02460950?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=780e982905bef61d13496d9af5310bf4af3a64d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02460950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.f5.com/csp/article/K02460950?utm_source=f5support&amp%3Butm_medium=RSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T15:15:11.870",
      "lastModified" : "2024-11-21T03:20:18.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin bws-pinterest anterior a 1.0.5 para WordPress tiene múltiples problemas XSS"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:pinterest:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "795AF088-4903-4FEA-B774-66CDE2161BE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/bws-pinterest/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/bws-pinterest/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T15:15:11.933",
      "lastModified" : "2024-11-21T03:20:18.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php."
      }, {
        "lang" : "es",
        "value" : "El plugin de democracy-poll antes de 5.4 para WordPress tiene XSS a través de update_l10n en admin / class.DemAdminInit.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-kama:democracy_poll:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.4",
            "matchCriteriaId" : "2557504A-095A-4312-A535-6EA464806CF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/democracy-poll/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wordpress.org/plugins/democracy-poll/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T15:15:11.993",
      "lastModified" : "2024-11-21T03:20:25.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp-all-import plugin before 3.4.6 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin wp-all-import antes de 3.4.6 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soflyy:wp_all_import:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.6",
            "matchCriteriaId" : "72E7ED26-EFFE-4BF9-A260-ED5E04F126C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wp-all-import/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-all-import/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T15:15:12.040",
      "lastModified" : "2024-11-21T03:20:25.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The my-wp-translate plugin before 1.0.4 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin my-wp-translate antes de 1.0.4 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mythemeshop:my_wp_translate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "C5AF12DC-F281-4C24-9F42-78490A5618E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/my-wp-translate/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/my-wp-translate/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T15:15:12.103",
      "lastModified" : "2024-11-21T03:20:25.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The my-wp-translate plugin before 1.0.4 for WordPress has CSRF."
      }, {
        "lang" : "es",
        "value" : "El plugin my-wp-translate antes de 1.0.4 para WordPress tiene CSRF."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mythemeshop:my_wp_translate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "C5AF12DC-F281-4C24-9F42-78490A5618E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/my-wp-translate/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/my-wp-translate/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:11.407",
      "lastModified" : "2024-11-21T03:20:18.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin bws-smtp antes de 1.1.0 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:smtp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "08C68363-F0CD-4C08-A207-A3E652CD652B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/bws-smtp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/bws-smtp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:11.487",
      "lastModified" : "2024-11-21T03:20:18.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages."
      }, {
        "lang" : "es",
        "value" : "El plugin de área de cliente antes de 7.4.3 para WordPress tiene XSS a través de páginas de administración."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marvinlabs:wp_customer_area:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "D432CA6A-32B2-4B2B-8E69-B829ADC1B8E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/customer-area/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/customer-area/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:11.547",
      "lastModified" : "2024-11-21T03:20:18.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book."
      }, {
        "lang" : "es",
        "value" : "El plugin de boletín de noticias de eelv antes de 4.6.1 para WordPress tiene XSS en la libreta de direcciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eelv_newsletter_project:eelv_newsletter:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "E2513A50-1A6C-44AF-B62C-7AC0766BAFE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/eelv-newsletter/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/eelv-newsletter/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:11.610",
      "lastModified" : "2024-11-21T03:20:19.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book."
      }, {
        "lang" : "es",
        "value" : "El plugin de boletín de noticias de eelv antes de 4.6.1 para WordPress tiene CSRF en la libreta de direcciones."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eelv_newsletter_project:eelv_newsletter:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "E2513A50-1A6C-44AF-B62C-7AC0766BAFE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/eelv-newsletter/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/eelv-newsletter/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:11.690",
      "lastModified" : "2025-07-16T13:14:10.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de piscina de fútbol antes de 2.6.5 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antoineh:football_pool:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.5",
            "matchCriteriaId" : "E977AED8-46BF-4396-A70F-ADF81DBB099A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/football-pool/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/football-pool/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.000",
      "lastModified" : "2024-11-21T03:20:19.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The moreads-se plugin before 1.4.7 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin moreads-se antes de 1.4.7 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lamp-solutions:moreads_se:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.7",
            "matchCriteriaId" : "76670187-972D-4D18-9A4B-BF5311A78F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/moreads-se/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/moreads-se/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.110",
      "lastModified" : "2024-11-21T03:20:19.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pagination plugin before 1.0.7 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de paginación anterior a 1.0.7 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:pagination:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.7",
            "matchCriteriaId" : "188D64BC-4CE4-4BF6-B48B-2A20B812DB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/pagination/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/pagination/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.220",
      "lastModified" : "2024-11-21T03:20:19.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de impresión pdf antes de 1.9.4 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:pdf_\\&_print:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.9.4",
            "matchCriteriaId" : "338A22F7-0253-4B96-BCD0-F5318E1BAD08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/pdf-print/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/pdf-print/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.283",
      "lastModified" : "2024-11-21T03:20:19.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The promobar plugin before 1.1.1 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin promobar antes de 1.1.1 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:promobar:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "FCB8F799-4475-4D33-BF5D-DCB70929BFEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/promobar/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/promobar/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.377",
      "lastModified" : "2024-11-21T03:20:19.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rating-bws plugin before 0.2 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin rating-bws antes de 0.2 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:rating:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.2",
            "matchCriteriaId" : "8294392C-AA4D-465B-A631-9897F71F8838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/rating-bws/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/rating-bws/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.453",
      "lastModified" : "2024-11-21T03:20:20.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288."
      }, {
        "lang" : "es",
        "value" : "El plugin raygun4wp antes de 1.8.3 para WordPress tiene XSS en la configuración, un problema diferente que CVE-2017-9288."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raygun:raygun4wp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "BBB0BEEC-9243-4D26-AB0E-72A0EE6E8968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/raygun4wp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/raygun4wp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.533",
      "lastModified" : "2024-11-21T03:20:20.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The realty plugin before 1.1.0 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de realty anterior a 1.1.0 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:realty:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "A850854E-169B-4AC3-8318-4E0D382CF6DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/realty/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/realty/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:12.627",
      "lastModified" : "2024-11-21T03:20:20.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rimons-twitter-widget plugin before 1.3 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin rimons-twitter-widget antes de 1.3 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimons_twitter_widget_project:rimons_twitter_widget:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "079C5DEA-0F63-46A1-8F24-C44327D73786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/rimons-twitter-widget/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/rimons-twitter-widget/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-20T16:15:13.157",
      "lastModified" : "2024-11-21T03:20:25.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user-role plugin before 1.5.6 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de rol de usuario anterior a 1.5.6 para WordPress tiene varios problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:user_role:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.6",
            "matchCriteriaId" : "58BCF01A-7B59-4C57-BD9E-FA6A0C9BC8D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/user-role/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/user-role/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T12:15:10.807",
      "lastModified" : "2024-11-21T03:20:20.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters."
      }, {
        "lang" : "es",
        "value" : "El plugin share-on-diaspora versiones anteriores a 0.7.2 para WordPress, presenta una vulnerabilidad de tipo XSS reflejado en los parámetros de URL de uso compartido."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:share_on_diaspora_project:share_on_diaspora:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.7.2",
            "matchCriteriaId" : "AD06BD3D-286A-4DC2-B9E4-AD4CAD37AD83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/share-on-diaspora/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/share-on-diaspora/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T12:15:10.887",
      "lastModified" : "2024-11-21T03:20:20.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin stop-user-enumeration versiones anteriores a 1.3.8 para WordPress, presenta una vulnerabilidad de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworks:stop_user_enumeration:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.8",
            "matchCriteriaId" : "03EAF53A-ECE3-4AD4-B7AE-A660E1EA5B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/stop-user-enumeration/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/stop-user-enumeration/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T12:15:10.947",
      "lastModified" : "2024-11-21T03:20:20.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin visitors-online versiones anteriores a 1.0.0 para WordPress, presenta múltiples problemas de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:visitors_online:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "56BBD547-1CF6-4291-A77E-D697A653D3F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/visitors-online/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/visitors-online/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T12:15:11.043",
      "lastModified" : "2024-11-21T03:20:21.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes."
      }, {
        "lang" : "es",
        "value" : "El plugin weblibrarian versiones anteriores a 3.4.8.5 para WordPress, presenta una vulnerabilidad de tipo XSS por medio de códigos cortos de front-end."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepsoft:weblibrarian:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.8.5",
            "matchCriteriaId" : "E4C816B9-5977-49E1-BCEE-DBE708FDB1BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/weblibrarian/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9723",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/weblibrarian/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T12:15:11.103",
      "lastModified" : "2024-11-21T03:20:21.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes."
      }, {
        "lang" : "es",
        "value" : "El plugin weblibrarian versiones anteriores a 3.4.8.6 para WordPress, presenta una vulnerabilidad de tipo XSS por medio de códigos cortos de front-end."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepsoft:weblibrarian:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.8.6",
            "matchCriteriaId" : "038A977A-23D6-4218-ACD0-8B75F21EF675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/weblibrarian/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9724",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/weblibrarian/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T12:15:11.197",
      "lastModified" : "2024-11-21T03:20:21.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes."
      }, {
        "lang" : "es",
        "value" : "El plugin weblibrarian versiones anteriores a 3.4.8.7 para WordPress, presenta una vulnerabilidad de tipo XSS por medio de códigos cortos de front-end."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepsoft:weblibrarian:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.8.7",
            "matchCriteriaId" : "0087A2E6-5681-40F1-8CB5-6CE2560F0A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/weblibrarian/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9725",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/weblibrarian/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:11.657",
      "lastModified" : "2024-11-21T03:20:23.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ad-buttons plugin before 2.3.2 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin de botones publicitarios antes de 2.3.2 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ad_buttons_project:ad_buttons:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "3FE080A7-6224-4F57-8704-5CEE926F6154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/ad-buttons/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/ad-buttons/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:11.737",
      "lastModified" : "2024-11-21T03:20:23.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event."
      }, {
        "lang" : "es",
        "value" : "El plugin analytics-tracker antes de 1.1.1 para WordPress tiene XSS a través de un evento de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:analytics_tracker_project:analytics_tracker:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "AB9BF987-F19F-4588-8A26-95AE58B735F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/analytics-tracker/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/analytics-tracker/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:11.783",
      "lastModified" : "2024-11-21T03:20:23.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The booking-sms plugin before 1.1.0 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin booking-sms anterior a 1.1.0 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaburst:booking_calendar:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "DCD911B2-D4E7-4D1F-A0A3-D0EA94145021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/booking-sms/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/booking-sms/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:11.860",
      "lastModified" : "2024-11-21T03:20:23.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin bws-google-analytics anterior a 1.7.1 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_analytics:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "F75794DB-F6FA-4995-A8F4-246BDEBD1DCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/bws-google-analytics/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/bws-google-analytics/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:11.923",
      "lastModified" : "2024-11-21T03:20:23.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin bws-google-maps antes de 1.3.6 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:google_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.6",
            "matchCriteriaId" : "F170124B-9794-40EF-A0CE-98E5CF4D2C93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/bws-google-maps/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/bws-google-maps/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:11.987",
      "lastModified" : "2024-11-21T03:20:23.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin bws-testimonials antes de 0.1.9 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:testimonials:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.1.9",
            "matchCriteriaId" : "DAD599BC-9359-4114-BDA9-DC56118FC6F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/bws-testimonials/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/bws-testimonials/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:12.063",
      "lastModified" : "2024-11-21T03:20:24.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The content-audit plugin before 1.9.2 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin de auditoría de contenido anterior a 1.9.2 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:content_audit_project:content_audit:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.9.2",
            "matchCriteriaId" : "8F582BFC-74F5-47C4-B23F-B890EFC93BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/content-audit/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/content-audit/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T13:15:12.127",
      "lastModified" : "2024-11-21T03:20:24.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The updater plugin before 1.35 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin actualizador anterior a 1.35 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:updater:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.35",
            "matchCriteriaId" : "D6518364-F572-4A4E-BE08-DD50994EBCFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/updater/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/updater/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T18:15:11.057",
      "lastModified" : "2024-11-21T03:20:24.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen."
      }, {
        "lang" : "es",
        "value" : "El plugin rsvp anterior a la versión 2.3.8 para WordPress tiene XSS persistente a través del campo de nota en la pantalla de la lista de asistentes."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swimordiesoftware:rsvp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.8",
            "matchCriteriaId" : "5C30EE96-8018-4692-9F97-E8DDBFDF54ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/rsvp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/rsvp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T18:15:11.117",
      "lastModified" : "2024-11-21T03:20:24.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sender plugin before 1.2.1 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin sender anterior a la versión 1.2.1 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:sender:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "BAA15E95-0855-4546-B5A4-68216535ACF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/sender/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/sender/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.467",
      "lastModified" : "2024-11-21T03:20:18.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin bws-linkedin anterior a la versión 1.0.5 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:linkedin:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "40F8D297-6CBF-47CA-9BD4-D175DDD216DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/bws-linkedin/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/bws-linkedin/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.527",
      "lastModified" : "2024-11-21T03:20:18.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n."
      }, {
        "lang" : "es",
        "value" : "El plugin democracy-poll anterior a la versión 5.4 para WordPress tiene CSRF a través de wp-admin / options-general.php? Page = democracia-poll & subpage = l10n."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-kama:democracy_poll:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.4",
            "matchCriteriaId" : "2557504A-095A-4312-A535-6EA464806CF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/democracy-poll/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/democracy-poll/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.590",
      "lastModified" : "2024-11-21T03:20:19.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The megamenu plugin before 2.4 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin megamenu anterior a la versión 2.4 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:megamenu:max_mega_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4",
            "matchCriteriaId" : "B9E9CBD2-C0CA-417E-97A2-FBD11E1F01E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/megamenu/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/megamenu/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.637",
      "lastModified" : "2024-11-21T03:20:20.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The smokesignal plugin before 1.2.7 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin smokesignal anterior a la versión 1.2.7 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smokesignal_project:smokesignal:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.7",
            "matchCriteriaId" : "52F6E410-CA16-4176-8B40-AF889F71615B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/smokesignal/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/smokesignal/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.700",
      "lastModified" : "2024-11-21T03:20:24.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin cforms2 anterior a la versión 14.13.3 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cformsii_project:cformsii:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "14.13.3",
            "matchCriteriaId" : "7D101779-1E3C-4DAC-95B3-FB9AC9D98776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/cforms2/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9727",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/cforms2/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.777",
      "lastModified" : "2024-11-21T03:20:24.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embed-comment-images plugin before 0.6 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin embed-comment-images anterior a la versión 0.6 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embed_images_in_comments_project:embed_images_in_comments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.6",
            "matchCriteriaId" : "8772E59D-8438-46E1-AADD-892CBBBCF126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/embed-comment-images/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/embed-comment-images/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-21T19:15:12.827",
      "lastModified" : "2024-11-21T03:20:24.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de error-log-viewer anterior a la versión 1.0.6 para WordPress tiene múltiples problemas de XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:error_log_viewer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "9F8886DD-38B1-46BE-BDA5-C79E84B69BCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/error-log-viewer/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/error-log-viewer/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T13:15:12.107",
      "lastModified" : "2024-11-21T03:20:25.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries."
      }, {
        "lang" : "es",
        "value" : "El plugin cforms2 versiones anteriores a 14.13 para WordPress, presenta una inyección SQL en la GUI de la DB de seguimiento por medio de Eliminar entradas o Descargar entradas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cformsii_project:cformsii:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "14.13",
            "matchCriteriaId" : "A8818C32-EEC8-48D7-8F42-F9DA7E23F644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/cforms2/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/cforms2/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T13:15:12.167",
      "lastModified" : "2024-11-21T03:20:25.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316."
      }, {
        "lang" : "es",
        "value" : "El plugin search-everything versiones anteriores a 8.1.7 para WordPress, presenta una inyección SQL relacionada con las versiones 4.7.x de WordPress, una vulnerabilidad diferente de CVE-2014-2316."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:search_everything_project:search_everything:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.1.7",
            "matchCriteriaId" : "4648B35F-E09F-4427-927D-9AF37157F801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/search-everything/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/search-everything/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T13:15:12.230",
      "lastModified" : "2024-11-21T03:20:25.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gnucommerce plugin before 1.4.2 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin gnucommerce versiones anteriores a 1.4.2 para WordPress, presenta una vulnerabilidad de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sir:gnucommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "12C030B5-FB19-44D8-A320-FC61D4E5C904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/gnucommerce/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/gnucommerce/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T13:15:12.310",
      "lastModified" : "2024-11-21T03:20:25.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The simple-login-log plugin before 1.1.2 for WordPress has SQL injection."
      }, {
        "lang" : "es",
        "value" : "El plugin simple-login-log versiones anteriores a 1.1.2 para WordPress, presenta una inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplerealtytheme:simple_login_log:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "F4065CEB-FB04-4F8F-B347-A143E504939C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/simple-login-log/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/simple-login-log/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T13:15:12.387",
      "lastModified" : "2024-11-21T03:20:26.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder."
      }, {
        "lang" : "es",
        "value" : "El plugin ninja-forms versiones anteriores a 3.0.31 para WordPress, presenta un escape de HTML insuficiente en el builder."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.31",
            "matchCriteriaId" : "79FB5093-F01B-4ADE-8221-000235E6FA58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/ninja-forms/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/ninja-forms/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T13:15:12.450",
      "lastModified" : "2024-11-21T03:20:26.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin newstatpress versiones anteriores a 1.2.5 para WordPress, presenta múltiples problemas de tipo XSS almacenados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newstatpress_project:newstatpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.5",
            "matchCriteriaId" : "B4EBC48C-84FF-4F53-8DD2-CECCCA5FFCA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/newstatpress/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/newstatpress/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:11.960",
      "lastModified" : "2024-11-21T03:20:26.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation."
      }, {
        "lang" : "es",
        "value" : "El  de notificación de eventos anterior a la versión  1.2.1 para WordPress tiene XSS a través de la animación de carga."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:event_notifier_project:event_notifier:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "0FF27DE5-92B9-45C2-8864-C19354A6C8EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/event-notifier/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/event-notifier/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:12.023",
      "lastModified" : "2024-11-21T03:20:26.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg."
      }, {
        "lang" : "es",
        "value" : "El complemento mailchimp-for-wp versiones anterior a 4.1.8 para WordPress tiene XSS a través del valor de retorno de add_query_arg."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibericode:mailchimp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.1.8",
            "matchCriteriaId" : "4AE04576-57F4-4ECC-B315-AB2AF2FEF96C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/mailchimp-for-wp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/mailchimp-for-wp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:12.100",
      "lastModified" : "2024-11-21T03:20:26.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode."
      }, {
        "lang" : "es",
        "value" : "El complemento shortcodes-ultimate en versiones anterior a 5.0.1 para WordPress tiene ejecución remota de código a través de un filtro en un meta, publicación o shortcode de usuario."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getshortcodes:shortcodes_ultimate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.0.1",
            "matchCriteriaId" : "08E0A4FB-8387-4A22-AEE5-674660925ADD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/shortcodes-ultimate/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/shortcodes-ultimate/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:12.147",
      "lastModified" : "2024-11-21T03:20:27.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list."
      }, {
        "lang" : "es",
        "value" : "El complemento de hojas de tiempo en versiones anteriores a 1.5.0 para WordPress tiene XSS a través de la lista de hojas de tiempo anterior."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:time_sheets_project:time_sheets:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "0A500BC2-001A-4CB9-AF0D-0B9B5DF26A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/time-sheets/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/time-sheets/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:12.210",
      "lastModified" : "2024-11-21T03:20:27.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El complemento de hojas de tiempo en versiones anteriores a 1.5.2 para WordPress tiene múltiples problemas XSS"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:time_sheets_project:time_sheets:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "B3FCCD6F-9632-4490-A64C-7C1D1FF4D420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/time-sheets/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/time-sheets/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:12.273",
      "lastModified" : "2024-11-21T03:20:27.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection."
      }, {
        "lang" : "es",
        "value" : "El plugin post-pay-counter en versiones anteriores a 2.731 para WordPress tiene inyección de objetos PHP."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:post_pay_counter_project:post_pay_counter:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.731",
            "matchCriteriaId" : "6F105147-A36E-4A03-8E6E-EBF91F6DD3B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/post-pay-counter/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/post-pay-counter/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T14:15:12.337",
      "lastModified" : "2024-11-21T03:20:27.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action."
      }, {
        "lang" : "es",
        "value" : "El complemento post-pay-counter en versiones anteriores a 2.731 para WordPress no tiene verificación de permisos para una acción de configuración de actualización."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:post_pay_counter_project:post_pay_counter:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.731",
            "matchCriteriaId" : "6F105147-A36E-4A03-8E6E-EBF91F6DD3B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/post-pay-counter/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/post-pay-counter/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T19:15:14.110",
      "lastModified" : "2024-11-21T03:20:27.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths."
      }, {
        "lang" : "es",
        "value" : "El complemento de insertar páginas anteriores a 3.2.4 para WordPress tiene un recorrido de directorio a través de rutas de plantilla personalizadas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insert_pages_project:insert_pages:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "5E2D80EC-3FCB-4591-99FE-0CE3FE92C64A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/insert-pages/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/insert-pages/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T20:15:11.627",
      "lastModified" : "2024-11-21T03:20:26.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El complemento crafty-social-buttons versiones anteriores a 1.5.8 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crafty_social_buttons_project:crafty_social_buttons:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.8",
            "matchCriteriaId" : "A31CA5CB-5993-4D65-B997-95DED91BB5BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/crafty-social-buttons/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/crafty-social-buttons/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T20:15:11.707",
      "lastModified" : "2024-11-21T03:20:26.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The corner-ad plugin before 1.0.8 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El complemento de anuncios de esquina en versiones anterior a 1.0.8 para WordPress tiene XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dwbooster:corner_ad:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "AC6A92FB-F435-41EC-A9FC-9A8C94F1D141"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/corner-ad/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/corner-ad/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-22T20:15:11.767",
      "lastModified" : "2024-11-21T03:20:27.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal."
      }, {
        "lang" : "es",
        "value" : "El complemento posts-in-page en versiones anteriores a 1.3.0 para WordPress tiene ic_add_posts template = '.. / directorio transversal."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivycat:posts_in_page:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "9507721A-2A92-4182-AB27-669582567836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/posts-in-page/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/02/13/authenticated-local-file-inclusion-lfi-vulnerability-in-posts-in-page/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/posts-in-page/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/02/13/authenticated-local-file-inclusion-lfi-vulnerability-in-posts-in-page/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-26T13:15:10.993",
      "lastModified" : "2024-11-21T03:20:27.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers."
      }, {
        "lang" : "es",
        "value" : "Se descubrió  un problema en el paquete (crate) hyper versiones anteriores a 0.9.18 para Rust. Maneja inapropiadamente newlines en los encabezados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper:hyper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.18",
            "matchCriteriaId" : "F1240B4B-D255-4654-8F07-E674B6FD1768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper:hyper:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.10.2",
            "matchCriteriaId" : "E3C6C5CE-E1B7-4EBE-ACAC-31104D97A6B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2017-0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2017-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-26T18:15:11.217",
      "lastModified" : "2024-11-21T03:20:28.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en el paquete security-framework  versiones anteriores a la 0.1.12 para Rust. La verificación del nombre de host para los certificados no se produce si ClientBuilder utiliza certificados raíz personalizados."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:security-framework_project:security-framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.12",
            "matchCriteriaId" : "121C0588-879D-49A4-8F33-52773BC0166B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2017-0003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2017-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-26T18:15:11.267",
      "lastModified" : "2024-11-21T03:20:28.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en el paquete (crate) cookie versiones anteriores a 0.7.6 para Rust. Enteros grandes en la Edad Máxima de una cookie causa un pánico."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cookie_project:cookie:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.6",
            "matchCriteriaId" : "40389E47-C3B7-4E79-903D-C5ECB9AA9D3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2017-0005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2017-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-27T12:15:11.623",
      "lastModified" : "2024-11-21T03:20:28.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin de hoja de horas antes de 0.1.5 para WordPress tiene múltiples problemas XSS."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:timesheet:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.1.5",
            "matchCriteriaId" : "7549D0FA-C392-4207-8679-633A3621355F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/timesheet/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/timesheet/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-27T13:15:10.130",
      "lastModified" : "2025-04-23T16:35:13.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php."
      }, {
        "lang" : "es",
        "value" : "El plugin gd-rating-system antes de 2.1 para WordPress tiene XSS en log.php."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev4press:gd_rating_system:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "658B436A-3132-411E-A534-8C9DA78115C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/gd-rating-system/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/gd-rating-system/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-27T13:15:10.177",
      "lastModified" : "2024-11-21T03:20:28.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads."
      }, {
        "lang" : "es",
        "value" : "El plugin woocommerce-catalog-enquiry antes de 3.1.0 para WordPress tiene un directorio wp_upload incorrecto para las cargas de archivos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wc-marketplace:wc_catalog_enquiry:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "108ABC5B-C911-4FD2-A238-B976D2CDAE33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/woocommerce-catalog-enquiry/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wordpress.org/plugins/woocommerce-catalog-enquiry/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-28T12:15:12.623",
      "lastModified" : "2024-11-21T03:20:28.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file."
      }, {
        "lang" : "es",
        "value" : "El plugin updraftplus versiones anteriores a 1.13.5 para WordPress, tiene una vulnerabilidad de tipo XSS en casos excepcionales en los que un atacante controla una cadena registrada en un archivo de registro."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:updraftplus:updraftplus:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.13.5",
            "matchCriteriaId" : "04CA5A00-F8FA-4832-AF8A-8542160B9EB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/updraftplus/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/updraftplus/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-08-29T00:15:10.467",
      "lastModified" : "2024-11-21T03:20:28.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \\n character to ssh-brute.nse or ssh-auth-methods.nse."
      }, {
        "lang" : "es",
        "value" : "nse_libssh2.cc en Nmap 7.70 está sujeto a una condición de denegación de servicio debido a una doble liberación cuando se produce un error en una conexión SSH, como lo demuestra un carácter principal de .n a ssh-brute.nse o ssh-auth-methods.nse."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nmap:nmap:7.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2B2815-27CD-4A22-9394-332073CF9970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nmap/nmap/issues/1077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nmap/nmap/issues/1227",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/nmap-announce/2019/0",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/nmap-dev/2018/q2/45",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nmap/nmap/issues/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nmap/nmap/issues/1227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/nmap-announce/2019/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/nmap-dev/2018/q2/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14201",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2019-08-29T01:15:10.647",
      "lastModified" : "2024-11-21T03:12:20.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all."
      }, {
        "lang" : "es",
        "value" : "Usar la vulnerabilidad Después de la liberación en el shell de Zephyr permite que un usuario conectado en serie o telnet cause la denegación de servicio, y posiblemente la ejecución remota de código. Este problema afecta a: las versiones del proyectil Zephyr anteriores a 1.14.0 en todas."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerabilities@zephyrproject.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.0",
            "matchCriteriaId" : "824F6D6D-B539-4424-BC2E-D4532017038F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/pull/13260",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-17",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/pull/13260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14202",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2019-08-29T01:15:10.740",
      "lastModified" : "2024-11-21T03:12:21.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all."
      }, {
        "lang" : "es",
        "value" : "Una Restricción Inapropiada de Operaciones dentro de los Límites de una vulnerabilidad del Búfer de la Memoria en el componente shell de Zephyr, permite a un usuario conectado serial o telnet causar un bloqueo, posiblemente con la ejecución de código arbitrario. Este problema afecta a: shell de Zephyr versiones anteriores a 1.14.0 sobre todo."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerabilities@zephyrproject.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.0",
            "matchCriteriaId" : "824F6D6D-B539-4424-BC2E-D4532017038F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/pull/13048",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-18",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/pull/13048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18325",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.510",
      "lastModified" : "2023-11-07T02:41:51.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18333",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.607",
      "lastModified" : "2023-11-07T02:41:52.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18334",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.667",
      "lastModified" : "2023-11-07T02:41:52.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18335",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.747",
      "lastModified" : "2023-11-07T02:41:52.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18336",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.793",
      "lastModified" : "2023-11-07T02:41:52.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18337",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.857",
      "lastModified" : "2023-11-07T02:41:53.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18338",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.917",
      "lastModified" : "2023-11-07T02:41:53.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18339",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:11.980",
      "lastModified" : "2023-11-07T02:41:53.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18340",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:12.027",
      "lastModified" : "2023-11-07T02:41:53.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18341",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-08-30T16:15:12.107",
      "lastModified" : "2023-11-07T02:41:54.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-04T21:15:10.677",
      "lastModified" : "2024-11-21T03:20:29.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones anteriores a 4.14.11. Una doble liberación puede ser causada por la función allocate_trace_buffer en el archivo kernel/trace/trace.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndExcluding" : "3.16.55",
            "matchCriteriaId" : "49901FEE-9793-440B-990B-EFE1BF47A04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17",
            "versionEndExcluding" : "3.18.91",
            "matchCriteriaId" : "DF019A06-E384-45E0-9249-DF86D759E427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "4.1.50",
            "matchCriteriaId" : "F71F6650-13B4-486F-80AC-20D871806D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.4.109",
            "matchCriteriaId" : "E7BEC3D4-7038-49AD-B148-012F960F2B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.74",
            "matchCriteriaId" : "5EED08F2-CAB9-4270-8714-16E9C8FAE7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.11",
            "matchCriteriaId" : "C9DFD0E4-9A4A-40D5-9DC5-D8DD9F99AC93"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E78106-58E6-4D59-990F-75DA575BFAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4397f04575c44e1440ec2e49b6302785c95fd2f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4397f04575c44e1440ec2e49b6302785c95fd2f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T11:15:10.517",
      "lastModified" : "2024-11-21T03:20:29.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions."
      }, {
        "lang" : "es",
        "value" : "El plugin elementor versiones anteriores a 1.8.0 para WordPress, presenta un control de acceso incorrecto para las funciones internas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:elementor_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "F04D9144-41F6-4CBE-8FC3-F2438BABE13F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/elementor/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8965",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/elementor/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T11:15:10.910",
      "lastModified" : "2024-11-21T03:20:29.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin jtrt-responsive-tables versiones anteriores a 4.1.2 para WordPress, presenta inyección SQL por medio del parámetro tableId del archivo admin/class-jtrt-responsive-tables-admin.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtrt_responsive_tables_project:jtrt_responsive_tables:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "544BA90B-7844-4FCF-9ACD-E293D65AFCE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lenonleite.com.br/en/2017/09/11/jtrt-responsive-tables-wordpress-plugin-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/jtrt-responsive-tables/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8953",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lenonleite.com.br/en/2017/09/11/jtrt-responsive-tables-wordpress-plugin-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/jtrt-responsive-tables/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T11:15:10.987",
      "lastModified" : "2024-11-21T03:20:29.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php."
      }, {
        "lang" : "es",
        "value" : "El plugin Qards hasta el 11-10-2017 para WordPress, presenta una vulnerabilidad de tipo XSS por medio de un documento remoto especificado en el parámetro url en el archivo html2canvasproxy.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:designmodo:qards:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2017-10-11",
            "matchCriteriaId" : "4FC87E76-9534-4933-8450-AEEF620E3C63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8934",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T11:15:11.050",
      "lastModified" : "2024-11-21T03:20:29.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter."
      }, {
        "lang" : "es",
        "value" : "El tema Pinfinity versiones anteriores a 2.0 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro s."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinfinity_project:pinfinity:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "FB7106F1-1979-4415-B022-CB17587CBD1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8900",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:10.337",
      "lastModified" : "2024-11-21T03:20:29.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The formcraft3 plugin before 3.4 for WordPress has stored XSS via the \"New Form > Heading > Heading Text\" field."
      }, {
        "lang" : "es",
        "value" : "El plugin formcraft3 versiones anteriores a 3.4 para WordPress, presenta una vulnerabilidad de tipo XSS almacenado por medio del campo \"New Form ) Heading ) Heading Text\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncrafts:formcraft:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.2.31",
            "matchCriteriaId" : "7577CC95-3A76-4A17-A3A9-66C8F2F507E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8877",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:10.430",
      "lastModified" : "2024-11-21T03:20:29.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The examapp plugin 1.0 for WordPress has XSS via exam input text fields."
      }, {
        "lang" : "es",
        "value" : "El plugin examapp versión 1.0 para WordPress, presenta una vulnerabilidad de tipo XSS por medio de campos de texto de entrada de examen."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibps_online_exam_project:ibps_online_exam:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7067EFE9-FAD1-44CE-A9DE-840F3C0C5E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:10.510",
      "lastModified" : "2024-11-21T03:20:30.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin examapp versión 1.0 para WordPress, presenta inyección SQL por medio del parámetro id de wp-admin/admin.php?page=examapp_UserResult."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibps_online_exam_project:ibps_online_exam:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7067EFE9-FAD1-44CE-A9DE-840F3C0C5E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:10.837",
      "lastModified" : "2024-11-21T03:20:30.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin postman-smtp hasta el 04-10-2017 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro page de wp-admin/tools.php?page=postman_email_log."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postman-smtp_project:postman-smtp:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2017-10-04",
            "matchCriteriaId" : "02185AB7-2D03-4B55-BB65-B44D0CA27DB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/postman-smtp/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/06/29/reflected-cross-site-scripting-xss-vulnerability-in-postman-smtp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/postman-smtp/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2017/06/29/reflected-cross-site-scripting-xss-vulnerability-in-postman-smtp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:10.947",
      "lastModified" : "2024-11-21T03:20:30.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request."
      }, {
        "lang" : "es",
        "value" : "El plugin sitebuilder-dynamic-components versiones hasta 1.0 para WordPress, presenta una inyección de objetos PHP por medio de una petición AJAX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebuilder_dynamic_components_project:sitebuilder_dynamic_components:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "9B59F390-D235-426A-8371-ADDC277BD7BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/sitebuilder-dynamic-components/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/sitebuilder-dynamic-components/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.027",
      "lastModified" : "2024-11-21T03:20:30.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection."
      }, {
        "lang" : "es",
        "value" : "El plugin gravitate-qa-tracker versiones hasta 1.2.1 para WordPress, presenta una Inyección de objetos PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravitatedesign:gravitate_qa_tracker:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "DE2E32EE-7F1F-4F98-A39B-2D6A8EEFCA9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/gravitate-qa-tracker/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8824",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/gravitate-qa-tracker/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.087",
      "lastModified" : "2024-11-21T03:20:30.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The avada theme before 5.1.5 for WordPress has stored XSS."
      }, {
        "lang" : "es",
        "value" : "El tema avada versiones anteriores a 5.1.5 para WordPress, presenta una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "6CC030A1-5816-401C-8F21-5F25A80B0F1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8801",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.150",
      "lastModified" : "2024-11-21T03:20:30.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The avada theme before 5.1.5 for WordPress has CSRF."
      }, {
        "lang" : "es",
        "value" : "El tema Avada versiones anteriores a 5.1.5 para WordPress, presenta una vulnerabilidad de tipo CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "6CC030A1-5816-401C-8F21-5F25A80B0F1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpvulndb.com/vulnerabilities/8801",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/8801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.197",
      "lastModified" : "2024-11-21T03:20:30.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues."
      }, {
        "lang" : "es",
        "value" : "El plugin spotim-comments versiones anteriores a 4.0.4 para WordPress, presenta múltiples problemas de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spot:spot.im_comments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "F3D9E388-B35A-4E50-B1A1-D679D8F65C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/spotim-comments/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9360",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/spotim-comments/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpvulndb.com/vulnerabilities/9360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.260",
      "lastModified" : "2024-11-21T03:20:31.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin magic-fields versiones anteriores a 1.7.2 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro custom-write-panel-id."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magicfields:magic_fields:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "6CC182B2-C116-4FEE-87DE-999D4C368B09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/magic-fields/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/magic-fields/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.323",
      "lastModified" : "2024-11-21T03:20:31.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin magic-fields versiones anteriores a 1.7.2 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro custom-group-id del archivo RCCWP_CreateCustomFieldPage.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magicfields:magic_fields:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "6CC182B2-C116-4FEE-87DE-999D4C368B09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/magic-fields/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/magic-fields/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-10T12:15:11.383",
      "lastModified" : "2024-11-21T03:20:31.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin magic-fields versiones anteriores a 1.7.2 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro custom-field-css del archivo RCCWP_CreateCustomFieldPage.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magicfields:magic_fields:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "6CC182B2-C116-4FEE-87DE-999D4C368B09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/magic-fields/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/magic-fields/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-13T12:15:11.563",
      "lastModified" : "2024-11-21T03:20:31.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin wp-whois-domain versión 1.0.0 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro domain del archivo pages/func-whois.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netattingo:wp-whois-domain:1.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6174D9F4-8DDB-4CD2-AD6D-97631AB29990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rastating.github.io/wp-whois-domain-reflected-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-whois-domain/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://rastating.github.io/wp-whois-domain-reflected-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-whois-domain/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-13T12:15:11.640",
      "lastModified" : "2024-11-21T03:20:31.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin trust-form versión 2.0 para WordPress, presenta una vulnerabilidad de tipo XSS por medio del parámetro page del wp-admin/admin.php?page=trust-form-edit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trust_form_project:trust_form:2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "952BC5E3-5F5F-4384-B2AA-F936DEE232B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_trust_form_wordpress_plugin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/trust-form/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_trust_form_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/trust-form/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-13T12:15:11.703",
      "lastModified" : "2024-11-21T03:20:31.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin kama-clic-counter versión 3.4.9 para WordPress, presenta una inyección SQL por medio del parámetro order del archivo admin.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-kama:kama_click_counter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.4.9",
            "matchCriteriaId" : "975275B7-2046-4EA1-8721-A9CBB335AAC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://seclists.org/fulldisclosure/2017/Feb/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/kama-clic-counter/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Feb/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/kama-clic-counter/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-13T12:15:11.767",
      "lastModified" : "2024-11-21T03:20:31.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kama-clic-counter plugin before 3.5.0 for WordPress has XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin kama-clic-counter versiones anteriores a 3.5.0 para WordPress, presenta una vulnerabilidad de tipo XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-kama:kama_click_counter:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.5.0",
            "matchCriteriaId" : "352152D1-36A4-42A1-8C95-2965E68626CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/kama-clic-counter/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/kama-clic-counter/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-16T12:15:10.753",
      "lastModified" : "2024-11-21T03:20:32.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php."
      }, {
        "lang" : "es",
        "value" : "El tema newspaper versiones anteriores a 6.7.2 para WordPress, presenta una inyección de script por medio de la función td_ads[header] en el archivo admin-ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tagdiv:newspaper:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.7.2",
            "matchCriteriaId" : "0B0258F7-5BC6-404D-9F7E-8EEE0C8DA064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sucuri.net/2017/06/unwanted-shorte-st-ads-in-unpatched-newspaper-theme.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sucuri.net/2017/06/unwanted-shorte-st-ads-in-unpatched-newspaper-theme.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-25T23:15:09.937",
      "lastModified" : "2024-11-21T03:20:32.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo XSS en noVNC versiones anteriores a 0.6.2, en la que el servidor remoto VNC podía inyectar HTML arbitrario en la página web de noVNC por medio de los mensajes propagados hacia el campo status, tales como el nombre del servidor VNC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novnc:novnc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.2",
            "matchCriteriaId" : "D7BC0A89-1E36-4C6F-882D-A92A03C5F9D3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704CFA1A-953E-4105-BFBE-406034B83DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2020:0754",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/horizon/+bug/1656435",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ShielderSec/cve-2017-18635",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novnc/noVNC/issues/748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novnc/noVNC/releases/tag/v0.6.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4522-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2020:0754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/horizon/+bug/1656435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ShielderSec/cve-2017-18635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novnc/noVNC/issues/748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/novnc/noVNC/releases/tag/v0.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/4522-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-09-30T13:15:10.480",
      "lastModified" : "2024-11-21T03:20:32.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal."
      }, {
        "lang" : "es",
        "value" : "CDG hasta el 01-01-2017, permite el salto de directorio de downloadDocument.jsp?command=download&amp;pathAndName=."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esafenet:cdg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-01-01",
            "matchCriteriaId" : "0C2B87D4-7979-4661-8D4A-DF34BE8AF52D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.warmeng.com/2017/01/01/CDG-filedown/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.warmeng.com/2017/01/01/CDG-filedown/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2676",
      "sourceIdentifier" : "office@obdev.at",
      "published" : "2019-10-09T23:27:04.773",
      "lastModified" : "2023-11-07T02:43:55.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2677",
      "sourceIdentifier" : "office@obdev.at",
      "published" : "2019-10-09T23:27:04.837",
      "lastModified" : "2023-11-07T02:43:55.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2678",
      "sourceIdentifier" : "office@obdev.at",
      "published" : "2019-10-09T23:27:04.897",
      "lastModified" : "2023-11-07T02:43:55.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2679",
      "sourceIdentifier" : "office@obdev.at",
      "published" : "2019-10-09T23:27:04.960",
      "lastModified" : "2023-11-07T02:43:56.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-10-11T23:15:10.447",
      "lastModified" : "2024-11-21T03:20:32.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is encoded into an image file and then sent to an e-mail address that can be supplied by the attacker. Thus, an attacker can exfiltrate any information."
      }, {
        "lang" : "es",
        "value" : "La función send_email en el archivo graphite-web/webapp/graphite/composer/views.py en Graphite versiones hasta 1.1.5 es susceptible a una vulnerabilidad de tipo SSRF. Un atacante puede utilizar el endpoint SSRF vulnerable para que el servidor web Graphite solicite cualquier recurso. La respuesta a esta petición SSRF es codificada en un archivo de imagen y luego se envía a una dirección de correo electrónico que puede ser proporcionada por el atacante. Por lo tanto, un atacante puede filtrar cualquier información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphite_project:graphite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "C6FBCDF9-4EB9-41AD-9B62-E99FBF3DCF3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html#second-bug-internal-graphite-ssrf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graphite-project/graphite-web/issues/2008",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graphite-project/graphite-web/pull/2499",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graphite-project/graphite-web/security/advisories/GHSA-vfj6-275q-4pvm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/10/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=ds4Gp4xoaeA",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html#second-bug-internal-graphite-ssrf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graphite-project/graphite-web/issues/2008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graphite-project/graphite-web/pull/2499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graphite-project/graphite-web/security/advisories/GHSA-vfj6-275q-4pvm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/10/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=ds4Gp4xoaeA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-10-14T18:15:10.263",
      "lastModified" : "2024-11-21T03:13:49.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution."
      }, {
        "lang" : "es",
        "value" : "Ciertos productos de D-Link se ven afectados por: Desbordamiento de búfer. Esto afecta a DIR-880L 1.08B04 y DIR-895 L/R 1.13b03. El impacto es: ejecutar código arbitrario (remoto). El componente es: htdocs/fileaccess.cgi. El vector de ataque es: una petición HTTP diseñada manejada por fileacces.cgi podría permitir que un atacante realice un ataque ROP: si el campo de encabezado HTTP CONTENT_TYPE comienza con ''boundary='' seguido de más de 256 caracteres, se desencadenará un desbordamiento de búfer, potencialmente causando la ejecución del código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-868l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26512943-D705-484D-B9EA-BF401606DFA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B501D4-BDDD-485E-A5A3-8AA8D5E46061"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-890l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCCA2BB-4577-402C-88B5-F8E10770CA35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-890l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EA89C7-4655-43A3-9D2B-D57640D56C09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-885l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3441E49F-C21B-4B68-89AD-BD46E8D88638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-885l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD481B64-A25D-4123-B575-20EC3C524D9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-895l_firmware:1.13b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC402D8-0279-49B0-BB77-23B036A400C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-895l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9EBC5D-43DE-4B26-8272-5A9AD2ECE2E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-880l_firmware:1.08b04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75AEBC09-E4B8-46D6-BD72-5AB4522B732A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-880l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC772491-6371-4712-B358-E74D9C5062FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-895r_firmware:1.13b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C3BB4D-EEBE-4B06-9C4D-6181D66CB905"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-895r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2DADDD-2F1C-458D-B3F5-07EE0FE35E92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/badnack/d_link_880_bug/blob/master/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/badnack/d_link_880_bug/blob/master/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002201",
      "sourceIdentifier" : "josh@bress.net",
      "published" : "2019-10-15T18:15:10.560",
      "lastModified" : "2024-11-21T03:04:59.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code."
      }, {
        "lang" : "es",
        "value" : "En haml  versiones anteriores a la versión 5.0.0.beta.2, cuando se usa la entrada del usuario para realizar tareas en el servidor, los caracteres como ( ) \" ' necesitan escaparse apropiadamente. En este caso, el carácter ' se perdió. Un atacante puede manipular la entrada para introducir atributos adicionales, ejecutando potencialmente código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haml:haml:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "5.0.0",
            "matchCriteriaId" : "BD7B8475-41D4-4A62-91BB-99A105EBA4F2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/haml/haml/commit/18576ae6e9bdcb4303fdbe6b3199869d289d67c2",
        "source" : "josh@bress.net",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00007.html",
        "source" : "josh@bress.net",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00028.html",
        "source" : "josh@bress.net",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-27",
        "source" : "josh@bress.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-RUBY-HAML-20362",
        "source" : "josh@bress.net",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/haml/haml/commit/18576ae6e9bdcb4303fdbe6b3199869d289d67c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2019/11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202007-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-RUBY-HAML-20362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-10-22T16:15:10.283",
      "lastModified" : "2024-11-21T03:33:18.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El Filtrado de información en PPPoE Packet Padding en AVM Fritz! Box 7490 con versiones de firmware Fritz!OS 6.80 y 6.83, permite a los atacantes físicamente cercanos visualizar segmentos de paquetes previamente transmitidos o porciones de memoria por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avm:fritz\\!os:6.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1B8964-82AC-491C-8AE0-BD8A6AC7FE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:avm:fritz\\!os:6.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DD26CD-518C-4FCE-B7E4-2F200C357DCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:avm:fritz\\!box_7490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409B1299-4F29-45EC-B93B-2EB0001125C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://avm.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://fritzbox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://avm.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://fritzbox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2019/Oct/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11008",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-10-25T16:15:10.600",
      "lastModified" : "2023-11-07T02:38:08.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15816",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-10-25T16:15:10.660",
      "lastModified" : "2023-11-07T02:40:24.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15838",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-10-25T16:15:10.740",
      "lastModified" : "2023-11-07T02:40:24.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15839",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-10-25T16:15:10.803",
      "lastModified" : "2023-11-07T02:40:24.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15840",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-10-25T16:15:10.867",
      "lastModified" : "2023-11-07T02:40:24.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9688",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2019-10-25T16:15:10.927",
      "lastModified" : "2023-11-07T02:50:50.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-10-25T22:15:10.067",
      "lastModified" : "2024-11-21T03:13:26.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer en LabF nfsAxe FTP client versión 3.7, permite a un atacante ejecutar código remotamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:labf:nfsaxe:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB233AB-B65A-4799-8B1D-D7C432223F67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/43236/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/43236/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5731",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2019-10-28T15:15:13.083",
      "lastModified" : "2024-11-21T03:28:18.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access."
      }, {
        "lang" : "es",
        "value" : "La comprobación de límites en Tianocompress en versiones anteriores al 7 de noviembre de 2017 puede permitir que un usuario autenticado permita potencialmente una escalada de privilegios mediante el acceso local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-11-07",
            "matchCriteriaId" : "3635374D-FD01-4005-97EE-6722A7F3E416"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.tianocore.org/show_bug.cgi?id=686",
        "source" : "secure@intel.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.tianocore.org/show_bug.cgi?id=686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5732",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2019-10-28T15:15:13.160",
      "lastModified" : "2023-11-07T02:49:34.680",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5733",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2019-10-28T15:15:13.270",
      "lastModified" : "2023-11-07T02:49:35.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5734",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2019-10-28T15:15:13.347",
      "lastModified" : "2023-11-07T02:49:35.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5735",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2019-10-28T15:15:13.410",
      "lastModified" : "2023-11-07T02:49:35.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-10-28T19:15:10.580",
      "lastModified" : "2024-11-21T03:15:05.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity Injection vulnerability exists in Dzone AnswerHub."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de tipo XML External Entity Injection en Dzone AnswerHub."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devada:dzone_answerhub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B48AE6-B620-4FBA-A43A-EBAE52C78308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://il.linkedin.com/in/nivlevy",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://il.linkedin.com/in/nivlevy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-10-29T19:15:14.187",
      "lastModified" : "2023-11-07T02:49:30.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-13069. Reason: This candidate is a reservation duplicate of CVE-2017-13069. Notes: All CVE users should reference CVE-2017-13069 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14456",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:11.697",
      "lastModified" : "2023-11-07T02:39:00.637",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16350",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:11.757",
      "lastModified" : "2023-11-07T02:40:29.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16351",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:11.820",
      "lastModified" : "2023-11-07T02:40:30.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16964",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:11.883",
      "lastModified" : "2023-11-07T02:40:57.207",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16965",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:11.960",
      "lastModified" : "2023-11-07T02:40:57.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16966",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.023",
      "lastModified" : "2023-11-07T02:40:57.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16967",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.087",
      "lastModified" : "2023-11-07T02:40:57.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16968",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.147",
      "lastModified" : "2023-11-07T02:40:58.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16969",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.210",
      "lastModified" : "2023-11-07T02:40:58.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16970",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.257",
      "lastModified" : "2023-11-07T02:40:58.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16971",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.320",
      "lastModified" : "2023-11-07T02:40:58.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16972",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.367",
      "lastModified" : "2023-11-07T02:40:59.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16973",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.430",
      "lastModified" : "2023-11-07T02:40:59.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16974",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.493",
      "lastModified" : "2023-11-07T02:40:59.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16975",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.557",
      "lastModified" : "2023-11-07T02:40:59.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16976",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.617",
      "lastModified" : "2023-11-07T02:41:00.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16977",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.680",
      "lastModified" : "2023-11-07T02:41:00.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16978",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.743",
      "lastModified" : "2023-11-07T02:41:00.663",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16979",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.807",
      "lastModified" : "2023-11-07T02:41:00.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16980",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.867",
      "lastModified" : "2023-11-07T02:41:01.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16981",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.930",
      "lastModified" : "2023-11-07T02:41:01.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16982",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:12.993",
      "lastModified" : "2023-11-07T02:41:01.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16983",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.057",
      "lastModified" : "2023-11-07T02:41:01.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16984",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.103",
      "lastModified" : "2023-11-07T02:41:02.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16985",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.163",
      "lastModified" : "2023-11-07T02:41:02.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16986",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.227",
      "lastModified" : "2023-11-07T02:41:02.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16987",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.290",
      "lastModified" : "2023-11-07T02:41:02.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16988",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.353",
      "lastModified" : "2023-11-07T02:41:03.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16989",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.413",
      "lastModified" : "2023-11-07T02:41:03.287",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16990",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.477",
      "lastModified" : "2023-11-07T02:41:03.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16991",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.540",
      "lastModified" : "2023-11-07T02:41:03.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16992",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.603",
      "lastModified" : "2023-11-07T02:41:04.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16993",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.647",
      "lastModified" : "2023-11-07T02:41:04.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2776",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.727",
      "lastModified" : "2023-11-07T02:43:58.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2778",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.773",
      "lastModified" : "2023-11-07T02:43:59.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2859",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2019-10-30T16:15:13.837",
      "lastModified" : "2023-11-07T02:44:00.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3989",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2019-11-04T15:15:11.193",
      "lastModified" : "2023-11-07T02:44:38.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5331",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-04T21:15:11.667",
      "lastModified" : "2024-11-21T03:27:24.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la función check_offset en el archivo b/wrestool/fileread.c en icoutils versiones anteriores a la versión  0.31.1, permite a usuarios locales causar una denegación de servicio (bloqueo del proceso) y ejecutar código arbitrario mediante un ejecutable especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.31.1",
            "matchCriteriaId" : "C82D0A7D-0A9A-40AB-9E61-01257D4E8D7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3765",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/3",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95378",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3178-1",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412248",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3178-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5332",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-04T21:15:11.743",
      "lastModified" : "2024-11-21T03:27:24.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable."
      }, {
        "lang" : "es",
        "value" : "La función extract_group_icon_cursor_resource en el archivo wrestool/extract.c en icoutils versiones anteriores a la versión 0.31.1, puede acceder a la memoria no asignada, lo que permite a usuarios locales causar una denegación de servicio (bloqueo del proceso) y ejecutar código arbitrario mediante un ejecutable especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.31.1",
            "matchCriteriaId" : "C82D0A7D-0A9A-40AB-9E61-01257D4E8D7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21690BAC-2129-4A33-9B48-1F3BF30072A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3765",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/3",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95380",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3178-1",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412263",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/icoutils.git/commit/?id=1aa9f28f7bcbdfff6a84a15ac8d9a87559b1596a",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3178-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/icoutils.git/commit/?id=1aa9f28f7bcbdfff6a84a15ac8d9a87559b1596a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5333",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2019-11-04T21:15:11.823",
      "lastModified" : "2024-11-21T03:27:24.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la función extract_group_icon_cursor_resource en el archivo b/wrestool/extract.c en icoutils versiones anteriores a la versión 0.31.1, permite a usuarios locales causar una denegación de servicio (bloqueo del proceso) o ejecutar código arbitrario mediante un archivo ejecutable diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icoutils_project:icoutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.31.1",
            "matchCriteriaId" : "C82D0A7D-0A9A-40AB-9E61-01257D4E8D7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8442C20-41F9-47FD-9A12-E724D3A31FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21690BAC-2129-4A33-9B48-1F3BF30072A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3765",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/3",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95678",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3178-1",
        "source" : "security@debian.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412259",
        "source" : "security@debian.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/icoutils.git/commit/?id=1a108713ac26215c7568353f6e02e727e6d4b24a",
        "source" : "security@debian.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2017-0837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2017/dsa-3765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2017/01/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/95678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-3178-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1412259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/icoutils.git/commit/?id=1a108713ac26215c7568353f6e02e727e6d4b24a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-11-06T16:15:10.540",
      "lastModified" : "2024-11-21T03:20:32.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages Parameter : Image Title, /Content/links Parameter : Link Title, /Content/links Parameter : Link Title, or /Content/Videos/LibraryVideos/default-video-library Parameter : Video Title."
      }, {
        "lang" : "es",
        "value" : "Progress Sitefinity CMS versiones anteriores a 10.1 permite un ataque de tipo XSS mediante /Pages Parámetro : Page Title, /Content/News Parámetro : News Title, /Content/List Parámetro : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parámetro : Document Title, /Content/Images/LibraryImages/newsimages Parámetro : Image Title, /Content/links Parámetro : Link Title, /Content/links Parámetro : Link Title, o /Content/Videos/LibraryVideos/default-video-library Parámetro : Video Title."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "E0B4003A-356B-4816-B5CC-CE9E1D4409AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17224",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2019-11-12T22:15:10.963",
      "lastModified" : "2024-11-21T03:17:41.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal."
      }, {
        "lang" : "es",
        "value" : "Algunos teléfonos inteligentes Huawei con versiones anteriores a Harry-AL00C 9.1.0.206(C00E205R3P1), presentan una vulnerabilidad de desreferencia del puntero null. Un atacante crea paquetes específicos y los envía hacia el producto afectado para explotar esta vulnerabilidad. Una explotación con éxito puede causar que el teléfono afectado sea anormal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hg655m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "harry-al00c_9.1.0.206\\(c00e205r3p1\\)",
            "matchCriteriaId" : "DD442C75-C6AA-4A01-B40E-58A6A0C1C5CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hg655m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFABF5D-8B9C-4E1C-8D3E-3D69576F53DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:hg655m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "v100r001c02b023",
            "matchCriteriaId" : "53CABFAF-4D9E-4921-92DB-0C4432F67C8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:hg655m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFABF5D-8B9C-4E1C-8D3E-3D69576F53DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20180327-01-hg655m-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-18-017",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.huawei.com/en/psirt/security-notices/huawei-sn-20180327-01-hg655m-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/zeroday/FG-VD-18-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-11-26T16:15:11.650",
      "lastModified" : "2024-11-21T03:31:48.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users."
      }, {
        "lang" : "es",
        "value" : "Cloudera Manager versiones 5.8.x anteriores a 5.8.5, versiones 5.9.x anteriores a 5.9.2 y versiones 5.10.x anteriores a 5.10.1, permite a un usuario de solo lectura de Cloudera Manager descubrir los nombres de usuario de otros usuarios y elevar los privilegios de esos usuarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.7",
            "matchCriteriaId" : "EB097F4F-8D21-42E0-9EA8-949F88F603E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.1.6",
            "matchCriteriaId" : "727C854E-66F2-479C-AB4A-C3A244F30358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.2.7",
            "matchCriteriaId" : "F9805EEF-4D1F-4FD9-9A68-9EEF1AC04D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndIncluding" : "5.3.10",
            "matchCriteriaId" : "530EFCBA-1B84-4B43-B6DA-3D53A2BEAF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndIncluding" : "5.4.3",
            "matchCriteriaId" : "FCAD5068-BCAF-4F06-93AC-77C7ACE6FCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.5",
            "versionEndIncluding" : "5.4.10",
            "matchCriteriaId" : "5E427043-3EEE-4642-8BE8-D68500DD2DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.6",
            "matchCriteriaId" : "2DB5A996-58AD-4E2A-BEF1-FA9BC169F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.1",
            "matchCriteriaId" : "36E675A9-9EE7-48A5-BB2F-4CE3B3A7E251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.5",
            "matchCriteriaId" : "072C180B-AA12-4844-93F9-3E7CE22668BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8.0",
            "versionEndIncluding" : "5.8.3",
            "matchCriteriaId" : "D3E38BFE-43E4-44A3-9258-09F7F8EB0A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.9.0",
            "versionEndIncluding" : "5.9.1",
            "matchCriteriaId" : "0795E598-F689-47DC-B1D5-72F1A781F733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:cloudera_manager:5.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20017B20-F87D-43F5-B2BB-0CB7DD04740A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_tvf_34r_1cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_tvf_34r_1cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-11-27T16:15:11.173",
      "lastModified" : "2024-11-21T03:10:29.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root."
      }, {
        "lang" : "es",
        "value" : "La validación insuficiente de la entrada suministrada por el usuario para el Solstice Pod antes de la configuración de red 2.8.4 permite a los atacantes autenticados ejecutar comandos arbitrarios como root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mersive:solstice_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.4",
            "matchCriteriaId" : "03F440DB-2705-4DF0-B437-AD555811A43D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mersive:solstice:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24B6FEA-2227-4941-8FC8-1741A3376F6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://documentation.mersive.com/content/pages/release-notes.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aress31/cve-2017-12945",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/47722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://documentation.mersive.com/content/pages/release-notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aress31/cve-2017-12945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/47722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-12-12T03:15:10.850",
      "lastModified" : "2024-11-21T03:20:32.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564."
      }, {
        "lang" : "es",
        "value" : "La función Alias en SnakeYAML antes de la versión 1.26 permite la expansión de entidades durante una operación de carga, un problema relacionado con CVE-2003-1564"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.26",
            "matchCriteriaId" : "B5ACA011-C76B-4D54-8DF1-0DCA569EDAA4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "06CD704F-068A-4365-88DD-9ABE77BE8D72"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB3BE9F-44AC-4EE0-9E66-2B72CF4AF0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BA317E-3C52-4BAF-B61C-803B7208C155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929638B0-AAD1-4326-9549-2FA8D03AA7ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues/377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457%40%3Ccommits.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r16ae4e529401b75a1f5aa462b272b31bf2a108236f882f06fddc14bc%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1703a402f30c8a2ee409f8c6f393e95a63f8c952cc9ee5bf9dd586dc%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r182e9cf6f3fb22b9be0cac4ff0685199741d2ab6e9a4e27a3693c224%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r191ceadb1b883357384981848dfa5235cb02a90070c553afbaf9b3d9%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1aab47b48a757c70e40fc0bcb1fcf1a3951afa6a17aee7cd66cf79f8%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1dfac8b6a7097bcb4979402bbb6e2f8c36d0d9001e3018717eb22b7e%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1ffce2ed3017e9964f03ad2c539d69e49144fc8e9bf772d641612f98%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r20350031c60a77b45e0eded33e9b3e9cb0cbfc5e24e1c63bf264df12%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22ac2aa053b7d9c6b75a49db78125c9316499668d0f4a044f3402e2f%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r28c9009a48d52cf448f8b02cd823da0f8601d2dff4d66f387a35f1e0%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2a5b84fdf59042dc398497e914b5bb1aed77328320b1438144ae1953%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2b05744c0c2867daa5d1a96832965b7d6220328b0ead06c22a6e7854%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2db207a2431a5e9e95e899858ab1f5eabd9bcc790a6ca7193ae07e94%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r436988d2cfe8a770ae361c82b181c5b2bf48a249bad84d8a55a3b46e%40%3Cdev.phoenix.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r465d2553a31265b042cf5457ef649b71e0722ab89b6ea94a5d59529b%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4c682fb8cf69dd14162439656a6ebdf42ea6ad0e4edba95907ea3f14%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4d7f37da1bc2df90a5a0f56eb7629b5ea131bfe11eeeb4b4c193f64a%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5510f0125ba409fc1cabd098ab8b457741e5fa314cbd0e61e4339422%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r55d807f31e64a080c54455897c20b1667ec792e5915132c7b7750533%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r56805265475919252ba7fc10123f15b91097f3009bae86476624ca25%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r643ba53f002ae59068f9352fe1d82e1b6f375387ffb776f13efe8fda%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r666f29a7d0e1f98fa1425ca01efcfa86e6e3856e01d300828aa7c6ea%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6c91e52b3cc9f4e64afe0f34f20507143fd1f756d12681a56a9b38da%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d54c2da792c74cc14b9b7665ea89e144c9e238ed478d37fd56292e6%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r72a3588d62b2de1361dc9648f5d355385735e47f7ba49d089b0e680d%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ce3de03facf7e7f3e24fc25d26d555818519dafdb20f29398a3414b%40%3Cdev.phoenix.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8464b6ec951aace8c807bac9ea526d4f9e3116aa16d38be06f7c6524%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8b57c57cffa01e418868a3c7535b987635ff1fb5ab534203bfa2d64a%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r900e020760c89f082df1c6e0d46320eba721e4e47bb9eb521e68cd95%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raebd2019b3da8c2f90f31e8b203b45353f78770ca93bfe5376f5532e%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb0e033d5ec8233360203431ad96580cf2ec56f47d9a425d894e279c2%40%3Cpr.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb34d8d3269ad47a1400f5a1a2d8310e13a80b6576ebd7f512144198d%40%3Ccommon-dev.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb5c33d0069c927fae16084f0605895b98d231d7c48527bcb822ac48c%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb7b28ac741e32dd5edb2c22485d635275bead7290b056ee56baf8ce0%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbaa1f513d903c89a08267c91d86811fa5bcc82e0596b6142c5cea7ea%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc3211c71f7e0973a1825d1988a3921288c06cd9d793eae97ecd34948%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcb2a7037366c58bac6aec6ce3df843a11ef97ae4eb049f05f410eaa5%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcb4b61dbe2ed1c7a88781a9aff5a9e7342cc7ed026aec0418ee67596%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rce5c93bba6e815fb62ad38e28ca1943b3019af1eddeb06507ad4e11a%40%3Ccommits.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd582c64f66c354240290072f340505f5d026ca944ec417226bb0272e%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdd34c0479587e32a656d976649409487d51ca0d296b3e26b6b89c3f5%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re791a854001ec1f79cd4f47328b270e7a1d9d7056debb8f16d962722%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re851bbfbedd47c690b6e01942acb98ee08bd00df1a94910b905bc8cd%40%3Cdev.atlas.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb1751562ee5146d3aca654a2df76a2c13d8036645ce69946f9c219e%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/recfe569f4f260328b0036f1c82b2956e864d519ab941a5e75d0d832d%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf95bebee6dfcc55067cebe8482bd31e6f481d9f74ba8e03f860c3ec7%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe0aab6c3bebbd9cbfdedb65ff3fdf420714bcb8acdfd346077e1263%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.25/usages",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-28",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues/377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457%40%3Ccommits.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r16ae4e529401b75a1f5aa462b272b31bf2a108236f882f06fddc14bc%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1703a402f30c8a2ee409f8c6f393e95a63f8c952cc9ee5bf9dd586dc%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r182e9cf6f3fb22b9be0cac4ff0685199741d2ab6e9a4e27a3693c224%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r191ceadb1b883357384981848dfa5235cb02a90070c553afbaf9b3d9%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1aab47b48a757c70e40fc0bcb1fcf1a3951afa6a17aee7cd66cf79f8%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1dfac8b6a7097bcb4979402bbb6e2f8c36d0d9001e3018717eb22b7e%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1ffce2ed3017e9964f03ad2c539d69e49144fc8e9bf772d641612f98%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r20350031c60a77b45e0eded33e9b3e9cb0cbfc5e24e1c63bf264df12%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22ac2aa053b7d9c6b75a49db78125c9316499668d0f4a044f3402e2f%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r28c9009a48d52cf448f8b02cd823da0f8601d2dff4d66f387a35f1e0%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2a5b84fdf59042dc398497e914b5bb1aed77328320b1438144ae1953%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2b05744c0c2867daa5d1a96832965b7d6220328b0ead06c22a6e7854%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2db207a2431a5e9e95e899858ab1f5eabd9bcc790a6ca7193ae07e94%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r436988d2cfe8a770ae361c82b181c5b2bf48a249bad84d8a55a3b46e%40%3Cdev.phoenix.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r465d2553a31265b042cf5457ef649b71e0722ab89b6ea94a5d59529b%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4c682fb8cf69dd14162439656a6ebdf42ea6ad0e4edba95907ea3f14%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4d7f37da1bc2df90a5a0f56eb7629b5ea131bfe11eeeb4b4c193f64a%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5510f0125ba409fc1cabd098ab8b457741e5fa314cbd0e61e4339422%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r55d807f31e64a080c54455897c20b1667ec792e5915132c7b7750533%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r56805265475919252ba7fc10123f15b91097f3009bae86476624ca25%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r643ba53f002ae59068f9352fe1d82e1b6f375387ffb776f13efe8fda%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r666f29a7d0e1f98fa1425ca01efcfa86e6e3856e01d300828aa7c6ea%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6c91e52b3cc9f4e64afe0f34f20507143fd1f756d12681a56a9b38da%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d54c2da792c74cc14b9b7665ea89e144c9e238ed478d37fd56292e6%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r72a3588d62b2de1361dc9648f5d355385735e47f7ba49d089b0e680d%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ce3de03facf7e7f3e24fc25d26d555818519dafdb20f29398a3414b%40%3Cdev.phoenix.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8464b6ec951aace8c807bac9ea526d4f9e3116aa16d38be06f7c6524%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8b57c57cffa01e418868a3c7535b987635ff1fb5ab534203bfa2d64a%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r900e020760c89f082df1c6e0d46320eba721e4e47bb9eb521e68cd95%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raebd2019b3da8c2f90f31e8b203b45353f78770ca93bfe5376f5532e%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb0e033d5ec8233360203431ad96580cf2ec56f47d9a425d894e279c2%40%3Cpr.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb34d8d3269ad47a1400f5a1a2d8310e13a80b6576ebd7f512144198d%40%3Ccommon-dev.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb5c33d0069c927fae16084f0605895b98d231d7c48527bcb822ac48c%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb7b28ac741e32dd5edb2c22485d635275bead7290b056ee56baf8ce0%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbaa1f513d903c89a08267c91d86811fa5bcc82e0596b6142c5cea7ea%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc3211c71f7e0973a1825d1988a3921288c06cd9d793eae97ecd34948%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcb2a7037366c58bac6aec6ce3df843a11ef97ae4eb049f05f410eaa5%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcb4b61dbe2ed1c7a88781a9aff5a9e7342cc7ed026aec0418ee67596%40%3Ccommon-issues.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rce5c93bba6e815fb62ad38e28ca1943b3019af1eddeb06507ad4e11a%40%3Ccommits.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd582c64f66c354240290072f340505f5d026ca944ec417226bb0272e%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdd34c0479587e32a656d976649409487d51ca0d296b3e26b6b89c3f5%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re791a854001ec1f79cd4f47328b270e7a1d9d7056debb8f16d962722%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re851bbfbedd47c690b6e01942acb98ee08bd00df1a94910b905bc8cd%40%3Cdev.atlas.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb1751562ee5146d3aca654a2df76a2c13d8036645ce69946f9c219e%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/recfe569f4f260328b0036f1c82b2956e864d519ab941a5e75d0d832d%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf95bebee6dfcc55067cebe8482bd31e6f481d9f74ba8e03f860c3ec7%40%3Ccommits.cassandra.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe0aab6c3bebbd9cbfdedb65ff3fdf420714bcb8acdfd346077e1263%40%3Ccommon-commits.hadoop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.25/usages",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18107",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2019-12-17T04:15:10.960",
      "lastModified" : "2024-11-21T03:19:22.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups via a Cross-site request forgery (CSRF) vulnerability. Please be aware that the Demo application is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Varios recursos en la aplicación Crowd Demo de Atlassian Crowd en versiones anteriores a la 3.1.1 permiten a los atacantes remotos modificar la vulnerabilidad agregar, modificar y eliminar usuarios y grupos mediante una vulnerabilidad Cross-site request forgery (CSRF). Tenga en cuenta que la aplicación Demo no está habilitada de forma predeterminada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "B8DFA11F-28DB-4552-B768-045172A138F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CWD-5091",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-5091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2019-12-24T14:15:11.590",
      "lastModified" : "2024-11-21T03:16:57.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency (DTMF) tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an access grant. However, due to incorrect access control, an attacker could inject it via the speaker unit to perform an access grant to gain unauthorized access, as demonstrated by a loud DTMF tone representing '1' and a long '#' (697 Hz and 1209 Hz, followed by 941 Hz and 1477 Hz)."
      }, {
        "lang" : "es",
        "value" : "Una debilidad de control de acceso en el receptor de tono DTMF Fermax Outdoor Panel, permite a atacantes físicos inyectar un tono Dual-Tone-Multi-Frequency (DTMF) para invocar una concesión de acceso que permitiría el acceso físico a un piso/nivel restringido. Por diseño, solo el propietario de una unidad residencial puede permitir dicha concesión de acceso. Sin embargo, debido al control de acceso incorrecto, un atacante podría inyectarlo por medio de la unidad de altavoz para realizar una concesión de acceso para conseguir acceso no autorizado, como es demostrado por un fuerte tono DTMF que representa \"1\" y un largo \"#\" (697 Hz y 1209 Hz , seguido de 941 Hz y 1477 Hz)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fermax:outdoor_panel_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2977C96E-02C6-44AA-8F9C-8A0348CBB546"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fermax:outdoor_panel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B3D940-C83D-4251-995A-0E402D80758B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/breaktoprotect/CVE-2017-16778-Intercom-DTMF-Injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/breaktoprotect/CVE-2017-16778-Intercom-DTMF-Injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3211",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2020-01-15T17:15:13.723",
      "lastModified" : "2024-11-21T03:25:02.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization."
      }, {
        "lang" : "es",
        "value" : "El plugin e-commerce notification de Yopify,  hasta el 06 de abril de 2017, filtró el nombre, la última inicial, la ciudad y los datos recientes de compra de los clientes, todo sin la autorización del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cret@cert.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-213"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yopify:yopify:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-04-06",
            "matchCriteriaId" : "E0DE8077-7A3A-45B2-A4A4-6BF767C43D7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rapid7.com/2017/05/31/r7-2017-05-centire-yopify-information-disclosure-cve-2017-3211/",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rapid7.com/2017/05/31/r7-2017-05-centire-yopify-information-disclosure-cve-2017-3211/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14806",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2020-01-27T10:15:11.247",
      "lastModified" : "2024-11-21T03:13:32.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Comprobación de Certificado Inapropiada en susestudio-common de SUSE Studio onsite, permite a atacantes remotos conexiones de tipo MITM hacia los repositorios, lo que permite la modificación de los paquetes recibidos por medio de estas conexiones. Este problema afecta a: susestudio-common de SUSE Studio onsite versión 1.3.17-56.6.3 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BCA435-7594-49E8-9BAE-9E02E129B6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:susestudio-ui-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.17-56.6.3",
            "matchCriteriaId" : "8BBDB492-D0D9-4067-9D26-BA54E26FAD15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1065397",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1065397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14807",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2020-01-27T10:15:11.370",
      "lastModified" : "2024-11-21T03:13:32.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite susestudio-ui-server version 1.3.17-56.6.3 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una Neutralización Inapropiada de Elementos Especiales utilizados en una vulnerabilidad de Comando SQL (\"SQL Injection\") en susestudio-ui-server de SUSE Studio onsite, permite a atacantes remotos con privilegios de administrador en Studio alterar las sentencias SQL, permitiendo una extracción y modificación de datos. Este problema afecta a: susestudio-ui-server de SUSE Studio onsite versión 1.3.17-56.6.3 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BCA435-7594-49E8-9BAE-9E02E129B6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:susestudio-ui-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.17-56.6.3",
            "matchCriteriaId" : "8BBDB492-D0D9-4067-9D26-BA54E26FAD15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1065396",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1065396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16112",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2020-01-27T13:15:10.257",
      "lastModified" : "2023-11-07T02:40:27.707",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:CVE-2017-15010. Reason: This candidate is a reservation duplicate of CVE-2017-15010. Notes: All CVE users should reference CVE-2017-15010 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3146",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2020-02-07T17:15:10.390",
      "lastModified" : "2023-11-07T02:44:02.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3147",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2020-02-07T17:15:10.470",
      "lastModified" : "2023-11-07T02:44:02.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3148",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2020-02-07T17:15:10.533",
      "lastModified" : "2023-11-07T02:44:03.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3149",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2020-02-07T17:15:10.610",
      "lastModified" : "2023-11-07T02:44:03.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-02-10T01:15:10.483",
      "lastModified" : "2024-11-21T03:20:33.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers."
      }, {
        "lang" : "es",
        "value" : "En LXC versión 2.0, muchos scripts de plantilla descargan código por medio de texto sin cifrar HTTP, y omiten una comprobación de firma digital, antes de ejecutarse en los contenedores de arranque."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:lxc:2.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "171010F6-2034-4373-B180-C5E75D533521"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1661447",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1661447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-02-10T21:39:13.023",
      "lastModified" : "2024-11-21T03:20:33.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Syska Smart Bulb versiones hasta el 06-08-2017 reciben parámetros RGB mediante Bluetooth Low Energy (BLE) de texto sin cifrar, lo que conlleva a una detección, ingeniería inversa y ataques de repetición."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:syska:smartlight_rainbow_led_smart_bulb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-08-06",
            "matchCriteriaId" : "13DE31F4-6D7A-40FC-9E5E-28D3BFDBDB12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:syska:smartlight_rainbow_led_smart_bulb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1912BCF7-0BE5-46FF-9BE0-872993628111"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iayanpahwa.github.io/Reverse-Engineering-IoT-Devices/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://iayanpahwa.github.io/Reverse-Engineering-IoT-Devices/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-02-27T04:15:10.483",
      "lastModified" : "2023-11-07T02:49:46.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-1000020. Reason: This candidate is a reservation duplicate of CVE-2017-1000020. Notes: All CVE users should reference CVE-2017-1000020 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-02-27T05:15:11.007",
      "lastModified" : "2024-11-21T03:29:38.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says \"In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.'"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** En la GD Graphics Library (también se conoce como Libgd) versiones hasta 2.2.5, se presenta una lectura excesiva del búfer en la región heap de la memoria en tiffWriter en el archivo gd_tiff.c. NOTA: el proveedor dice \"In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.'\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.5",
            "matchCriteriaId" : "1C8F4811-034F-41ED-B690-188B0BE7D7DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libgd/libgd/issues/383",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgd/libgd/issues/383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-02-27T05:15:11.587",
      "lastModified" : "2024-11-21T03:29:38.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string in the HTTP Referer header."
      }, {
        "lang" : "es",
        "value" : "Synchronet BBS versión 3.16c, para Windows permite a atacantes remotos causar una denegación de servicio (bloqueo de servicio) por medio de una cadena larga en el encabezado HTTP Referer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synchro:bbs:3.16c:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "1B173A49-F3D2-46B4-817A-A1739FCDF898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/141396/Synchronet-BBS-3.16c-For-Windows-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41475/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/141396/Synchronet-BBS-3.16c-For-Windows-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41475/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-02-27T18:15:11.263",
      "lastModified" : "2024-11-21T03:17:12.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force."
      }, {
        "lang" : "es",
        "value" : "Un Control de Acceso Incorrecto en Hunesion i-oneNet versión 3.0.6042.1200, permite al usuario local acceder a la información de otro usuario que no está autorizado por medio de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hunesion:i-onenet:3.0.6042.1200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EF8345-6956-4E5D-B336-924AB4EDD64E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hunesion.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://i-onenet.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/summtime/CVE/tree/master/CVE-2017-16900",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://hunesion.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://i-onenet.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/summtime/CVE/tree/master/CVE-2017-16900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-03-02T16:15:11.643",
      "lastModified" : "2024-11-21T03:09:47.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable (for example, \"ntmarta.dll\"). When the installer EXE is executed by the user, the DLL located in the EXE's current directory will be loaded instead of the Windows DLL, allowing the attacker to run arbitrary code on the affected system."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en IDM UltraEdit versiones hasta 24.10.0.32. Para explotar la vulnerabilidad, en sistemas Windows sin parchear, un atacante podría incluir en el mismo directorio que el ejecutable afectado una biblioteca DLL usando el nombre de una biblioteca DLL de Windows. Esta biblioteca DLL debe ser precargada por el ejecutable (por ejemplo, \"ntmarta.dll\"). Cuando el EXE del instalador es ejecutado por el usuario, la biblioteca DLL ubicada en el directorio actual del EXE se cargará en lugar de la biblioteca DLL de Windows, permitiendo al atacante ejecutar código arbitrario en el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultraedit:ultraedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "24.10.0.32",
            "matchCriteriaId" : "AB47C059-CDE8-4CBF-A36B-EFCB4A47A1FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.microsoft.com/en-us/help/2389418/secure-loading-of-libraries-to-prevent-dll-preloading-attacks",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fortiguard.com/zeroday/FG-VD-17-089",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.microsoft.com/en-us/help/2389418/secure-loading-of-libraries-to-prevent-dll-preloading-attacks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fortiguard.com/zeroday/FG-VD-17-089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14203",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-03-07T00:15:11.350",
      "lastModified" : "2023-11-07T02:38:52.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14204",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-03-07T00:15:11.427",
      "lastModified" : "2023-11-07T02:38:52.647",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14205",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-03-07T00:15:11.490",
      "lastModified" : "2023-11-07T02:38:52.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14206",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-03-07T00:15:11.677",
      "lastModified" : "2023-11-07T02:38:53.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14207",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-03-07T00:15:11.990",
      "lastModified" : "2023-11-07T02:38:53.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14208",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-03-07T00:15:12.100",
      "lastModified" : "2023-11-07T02:38:53.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-10992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-03-10T13:15:12.157",
      "lastModified" : "2024-11-21T03:06:54.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461."
      }, {
        "lang" : "es",
        "value" : "En HPE Storage Essentials versión 9.5.0.142, tiene una Deserialización Java No Autenticada con ejecución de código  remota por medio de comandos del Sistema Operativo en una petición a invoker/JMXInvokerServlet, también se conoce como PSRT110461."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storage_essentials:9.5.0.142:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A837C5-A4E5-4EFA-95AE-977E4E48B307"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://labs.integrity.pt/advisories/cve-2017-10992/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://labs.integrity.pt/advisories/cve-2017-10992/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-03-12T21:15:12.373",
      "lastModified" : "2024-11-21T03:19:54.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name."
      }, {
        "lang" : "es",
        "value" : "bitcoind y Bitcoin-Qt versiones anteriores a 0.15.1, presentan un desbordamiento de búfer en la región stack de la memoria si es usado un servidor proxy SOCKS controlado por el atacante. Esto resulta de un error de la propiedad signedness de enteros cuando el servidor proxy responde con el reconocimiento de un nombre de dominio de destino inesperado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.1",
            "matchCriteriaId" : "C2ED1826-FB8C-42AD-9D4C-A62FBDC99D62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40lukedashjr/cve-2017-18350-disclosure-fe6d695f45d5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40lukedashjr/cve-2017-18350-disclosure-fe6d695f45d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-03-16T20:15:12.423",
      "lastModified" : "2024-11-21T03:10:17.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack would cost more than a million dollars, and is relevant mainly only in situations where an autonomous system relies solely on an SPV proof for transactions of a greater dollar amount."
      }, {
        "lang" : "es",
        "value" : "Bitcoin Core versiones anteriores a 0.14, permite a un atacante crear una prueba SPV ostensiblemente válida para un pago a una víctima que utiliza una billetera SPV, incluso si ese pago no es realizado realmente. Completar el ataque costaría más de un millón de dólares, y es relevante principalmente solo en situaciones donde un sistema autónomo se basa únicamente en una prueba SPV para transacciones de un monto mayor en dólares."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.0",
            "matchCriteriaId" : "1FF2E80C-6192-4654-A3A6-2177A57E1D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitslog.wordpress.com/2018/06/09/leaf-node-weakness-in-bitcoin-merkle-tree-design/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-February/016697.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bitslog.wordpress.com/2018/06/09/leaf-node-weakness-in-bitcoin-merkle-tree-design/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-February/016697.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T14:15:13.700",
      "lastModified" : "2024-11-21T03:20:40.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a resultant buffer overflow, in the sec_ts touchscreen sysfs interface. The Samsung ID is SVE-2016-7501 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890 o Exynos8895). Se presenta una condición de carrera, con un desbordamiento del búfer resultante, en la interfaz sysfs de la pantalla táctil de sec_ts. El ID de Samsung es SVE-2016-7501 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8939:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA7A79E-0F04-41E6-8E37-49B2977D92B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAB0FCA-8F94-4FB1-ACCC-02E0222BAE49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4796F9BD-61B3-45ED-B5E3-B061887285E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_7580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FEB4A0-054B-407C-AAAF-AF7913628AE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_8890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914FF28A-6B33-4FC5-963D-E576967A001C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_8895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E735C6-FF25-4D8C-ACA0-D92DD8CD3F4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T14:15:13.747",
      "lastModified" : "2024-11-21T03:20:40.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0) y N(7.0). Se presenta un desbordamiento de búfer en la entrada fps sysfs. El ID de Samsung es SVE-2016-7510 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T14:15:13.793",
      "lastModified" : "2024-11-21T03:20:40.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. The Samsung ID is SVE-2016-7551 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software hasta el 25-10-2016 (chipsets Exynos5). Los atacantes pueden leer las direcciones del kernel en el registro porque es usado un especificador de formato incorrecto. El ID de Samsung es SVE-2016-7551 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CBA0AA-B7A4-4276-9ED3-34CA2D68E56A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C086DB-7235-4B14-8DD2-2893340EEE86"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB50EA38-FF8E-4708-BAE8-AF6A22497AC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4235F7F-AA2D-428B-9B79-398CCD6C474A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99855F5-EE1B-4BA1-8708-5679A8A2DF67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90941F8E-5F3E-43EB-9CB5-FB235CFA7877"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36182055-4545-405C-8B39-CF5B87C014C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T14:15:13.857",
      "lastModified" : "2024-11-21T03:20:41.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0), y N(7.0). Los atacantes (que controlan un determinado subdominio) pueden detectar las credenciales de un usuario, durante el inicio de sesión de una cuenta de correo electrónico, por medio de un paquete de autodetección EAS. El ID de Samsung es SVE-2016-7654 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T14:15:13.903",
      "lastModified" : "2024-11-21T03:20:41.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.0) (Exynos7420, Exynos8890 o MSM8996). RKP permite una corrupción de la memoria. El ID de Samsung es SVE-2016-7897 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAB0FCA-8F94-4FB1-ACCC-02E0222BAE49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_7420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0280CE1-C8A6-4317-B583-DDF5C6AA2293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_8890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914FF28A-6B33-4FC5-963D-E576967A001C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.057",
      "lastModified" : "2024-11-21T03:20:34.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto v1.0 implementation in Secure Driver has a race condition with a resultant buffer overflow. The Samsung IDs are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 (November 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6,x) y N(7.0). La implementación de TA Scrypto versión v1.0, en Secure Driver presenta una condición de carrera con un desbordamiento del búfer resultante. Los ID de Samsung son SVE-2017-8973, SVE-2017-8974 y SVE-2017-8975 (Noviembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.103",
      "lastModified" : "2024-11-21T03:20:34.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 (November 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4.x), L(5.x), M(6.x) y N(7.x). Las operaciones de lectura y escritura de archivos arbitrarios pueden ocurrir en el estado bloqueado por medio de un comando MTP diseñado. El ID de Samsung es SVE-2017-10086 (Noviembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.167",
      "lastModified" : "2024-11-21T03:20:34.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the \"SamFAIL\" issue. The Samsung ID is SVE-2017-10465 (November 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x). Un atacante puede arrancar un dispositivo con privilegios root porque el cargador de arranque para el chipset Qualcomm MSM8998 carece de una comprobación de integridad de la imagen del sistema, también se conoce como el problema \"SamFAIL\". El ID de Samsung es SVE-2017-10465 (Noviembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4796F9BD-61B3-45ED-B5E3-B061887285E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://androidcommunity.com/samfail-method-gives-root-access-to-samsung-galaxy-note-8-snapdragon-variant-20171009/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://androidcommunity.com/samfail-method-gives-root-access-to-samsung-galaxy-note-8-snapdragon-variant-20171009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.230",
      "lastModified" : "2024-11-21T03:20:34.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.x) software. There is a WifiStateMachine IllegalArgumentException and reboot if a malformed wpa_supplicant.conf is read. The Samsung ID is SVE-2017-9828 (October 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x). Se presenta una IllegalArgumentException de WifiStateMachine y se reinicia si se lee un archivo wpa_supplicant.conf malformado. El ID de Samsung es SVE-2017-9828 (Octubre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.277",
      "lastModified" : "2024-11-21T03:20:34.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is an Integer Overflow in process_M_SetTokenTUIPasswd during handling of a trusted application, leading to memory corruption. The Samsung IDs are SVE-2017-9008 and SVE-2017-9009 (October 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.x) y N(7.x). Se presenta un desbordamiento de enteros en process_M_SetTokenTUIPasswd durante el manejo de una aplicación confiable, conllevando a una corrupción de la memoria. Los ID de Samsung son SVE-2017-9008 y SVE-2017-9009 (Octubre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.337",
      "lastModified" : "2024-11-21T03:20:34.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. SVoice allows arbitrary code execution by changing dynamic libraries. The Samsung ID is SVE-2017-9299 (September 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). SVoice permite una ejecución de código arbitraria al cambiar las bibliotecas dinámicas. El ID de Samsung es SVE-2017-9299 (Septiembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.400",
      "lastModified" : "2024-11-21T03:20:34.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. The Email application allows attackers to send emails on behalf of any user via a broadcasted intent. The Samsung ID is SVE-2017-9357 (September 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0) y N(7.x). La aplicación Email permite a atacantes enviar correos electrónicos en nombre de cualquier usuario por medio de un intent transmitido. El ID de Samsung es SVE-2017-9357 (Septiembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.463",
      "lastModified" : "2024-11-21T03:20:34.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0, 7.1) software. An unauthenticated attacker can register a new security certificate. The Samsung ID is SVE-2017-9659 (September 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.0, 7.1). Un atacante no autenticado puede registrar un nuevo certificado de seguridad. El ID de Samsung es SVE-2017-9659 (Septiembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCA7605-6348-400D-9844-97E0144C2BF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.527",
      "lastModified" : "2024-11-21T03:20:35.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a stack-based buffer overflow with resultant memory corruption in a trustlet. The Samsung IDs are SVE-2017-8889, SVE-2017-8891, and SVE-2017-8892 (August 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta un desbordamiento del búfer en la región stack de la memoria con una corrupción de la memoria resultante en un trustlet. Los ID de Samsung son SVE-2017-8889, SVE-2017-8891 y SVE-2017-8892 (Agosto de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.587",
      "lastModified" : "2024-11-21T03:20:35.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer over-read in a trustlet. The Samsung ID is SVE-2017-8890 (August 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta una lectura excesiva del búfer en un trustlet. El ID de Samsung es SVE-2017-8890 (Agosto de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.650",
      "lastModified" : "2024-11-21T03:20:35.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 (August 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta una escritura arbitraria en un trustlet. El ID de Samsung es SVE-2017-8893 (agosto de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.697",
      "lastModified" : "2024-11-21T03:20:35.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) software. The multiwindow_facade API allows attackers to cause a NullPointerException and system halt via an attempted screen touch of a non-existing display. The Samsung ID is SVE-2017-9383 (August 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0). La API multiwindow_facade permite a atacantes causar un NullPointerException y detener el sistema mediante un intento de tocar la pantalla de una pantalla no existente. El ID de Samsung es SVE-2017-9383 (agosto de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.760",
      "lastModified" : "2024-11-21T03:20:35.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can crash system processes via a broadcast to AdaptiveDisplayColorService. The Samsung ID is SVE-2017-8290 (July 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.x). Los atacantes pueden bloquear los procesos del sistema por medio de una transmisión a AdaptiveDisplayColorService. El ID de Samsung es SVE-2017-8290 (Julio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.823",
      "lastModified" : "2024-11-21T03:20:35.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in tlc_server. The Samsung ID is SVE-2017-8888 (July 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta un desbordamiento de búfer en tlc_server. El ID de Samsung es SVE-2017-8888 (Julio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.900",
      "lastModified" : "2024-11-21T03:20:35.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in process_cipher_tdea. The Samsung ID is SVE-2017-8973 (July 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta un desbordamiento de búfer en process_cipher_tdea. El ID de Samsung es SVE-2017-8973 (Julio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.947",
      "lastModified" : "2024-11-21T03:20:36.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Data outside of the rkp log buffer boundary is read, causing an information leak. The Samsung ID is SVE-2017-9109 (July 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Los datos fuera del límite del búfer del registro rkp se leen, causando una fuga de información. El ID de Samsung es SVE-2017-9109 (Julio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:15.993",
      "lastModified" : "2024-11-21T03:20:36.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.x) software. Because of missing Intent exception handling, system_server can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 (July 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x). Debido a una falta de manejo de excepciones de Intent, system_server puede presentar un NullPointerException con un bloqueo de un proceso del sistema. Los ID de Samsung son SVE-2017-9122, SVE-2017-9123, SVE-2017-9124 y SVE-2017-9126 (Julio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.057",
      "lastModified" : "2024-11-21T03:20:36.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. There is a NULL pointer exception in PersonManager, causing memory corruption. The Samsung ID is SVE-2017-8286 (June 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1) y M(6.0). Se presenta una excepción de puntero NULL en PersonManager, causando corrupción de la memoria. El ID de Samsung es SVE-2017-8286 (Junio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.103",
      "lastModified" : "2024-11-21T03:20:36.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 (June 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0). Se presenta una excepción de puntero NULL en WifiService por medio de adb-cmd, causando corrupción de la memoria. El ID de Samsung es SVE-2017-8287 (Junio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.167",
      "lastModified" : "2024-11-21T03:20:36.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Applications can send arbitrary premium SMS messages. The Samsung ID is SVE-2017-8701 (June 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.x). Las aplicaciones pueden enviar mensajes SMS premium arbitrarios. El ID de Samsung es SVE-2017-8701 (Junio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.230",
      "lastModified" : "2024-11-21T03:20:36.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can prevent users from learning that SMS storage space has been exhausted. The Samsung ID is SVE-2017-8702 (June 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.x). Los atacantes a partir del aprendizaje pueden impedir a los usuarios que el espacio de almacenamiento de SMS haya sido agotado. El ID de Samsung es SVE-2017-8702 (Junio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.277",
      "lastModified" : "2024-11-21T03:20:36.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) software. Attackers can prevent users from making outbound calls and sending outbound text messages. The Samsung ID is SVE-2017-8706 (June 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0). Los atacantes pueden impedir que los usuarios hagan llamadas salientes y envíen mensajes de texto salientes. El ID de Samsung es SVE-2017-8706 (Junio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.323",
      "lastModified" : "2024-11-21T03:20:37.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.x) software. Persona has an unprotected API that allows launch of any activity with system privileges. The Samsung ID is SVE-2017-9000 (June 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x). Persona presenta una API desprotegida que permite iniciar cualquier actividad con privilegios system. El ID de Samsung es SVE-2017-9000 (Junio de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.387",
      "lastModified" : "2024-11-21T03:20:37.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. android.intent.action.SIOP_LEVEL_CHANGED allows a serializable intent reboot. The Samsung ID is SVE-2017-8363 (May 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1) y M(6.0). android.intent.action.SIOP_LEVEL_CHANGED permite un reinicio de un intent serializable. El ID de Samsung es SVE-2017-8363 (Mayo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.433",
      "lastModified" : "2024-11-21T03:20:37.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. Intents related to Wi-Fi have incorrect exception handling, leading to a crash of system processes. The Samsung ID is SVE-2017-8389 (May 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0 / 5.1), M(6.0) y N(7.x). Intents relacionado con Wi-Fi presenta un manejo de excepciones incorrecto, conllevando a un bloqueo de los procesos del sistema. El ID de Samsung es SVE-2017-8389 (Mayo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.497",
      "lastModified" : "2024-11-21T03:20:37.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. Because of incorrect exception handling for Intents, a local attacker can force a reboot within framework.jar. The Samsung ID is SVE-2017-8390 (May 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0 / 5.1), M(6.0) y N(7.x). Debido al manejo incorrecto de excepciones para Intents, un atacante local puede forzar un reinicio dentro del archivo framework.jar. El ID de Samsung es SVE-2017-8390 (Mayo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.540",
      "lastModified" : "2024-11-21T03:20:37.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can disable the Location service on a locked device, making it impossible for the rightful owner to find a stolen device. The Samsung ID is SVE-2017-8524 (May 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x). Un atacante puede deshabilitar el servicio Location en un dispositivo bloqueado, haciendo imposible que el propietario legítimo encuentre un dispositivo robado. El ID de Samsung es SVE-2017-8524 (Mayo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.587",
      "lastModified" : "2024-11-21T03:20:37.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.0) software. The time service (aka Timaservice) allows a kernel panic. The Samsung ID is SVE-2017-8593 (May 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.0). El servicio time (también se conoce como Timaservice) permite un pánico del kernel. El ID de Samsung es SVE-2017-8593 (Mayo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.650",
      "lastModified" : "2024-11-21T03:20:37.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 (April 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x) (Exynos7420 o Exynox8890). La aplicación Camera puede filtrar memoria no inicializada por medio de ion. El ID de Samsung es SVE-2016-6989 (Abril de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_7420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0280CE1-C8A6-4317-B583-DDF5C6AA2293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynox_8890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CA47E2-32C0-4B41-A63A-55F5D3153FE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.697",
      "lastModified" : "2024-11-21T03:20:38.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm chipsets) software. There is an RKP kernel protection bypass (in which unwanted memory mappings may occur) because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 (April 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.0) (chipsets Qualcomm). Se presenta una omisión de la protección de kernel RKP (en la que pueden ocurrir asignaciones de memoria no deseadas) debido a una falta de captura de MSR. El ID de Samsung es SVE-2016-7901 (Abril de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.743",
      "lastModified" : "2024-11-21T03:20:38.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Because of an unprotected Intent, an attacker can reset the configuration of certain applications. The Samsung ID is SVE-2016-7142 (April 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Debido a un Intent no protegido, un atacante puede restablecer la configuración de determinadas aplicaciones. El ID de Samsung es SVE-2016-7142 (Abril de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.807",
      "lastModified" : "2024-11-21T03:20:38.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. An attacker can crash system processes via a Serializable object because of missing exception handling. The Samsung IDs are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SVE-2017-8119 (April 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.x). Un atacante puede bloquear los procesos del sistema por medio de un objeto serializable debido a una falta de manejo de excepciones. Los ID de Samsung son SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118 y SVE-2017-8119 (Abril de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.870",
      "lastModified" : "2024-11-21T03:20:38.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) software. SLocation can cause a system crash via a call to an API that is not implemented. The Samsung ID is SVE-2017-8285 (April 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0). SLocation puede causar un bloqueo del sistema mediante una llamada a una API que no está implementada. El ID de Samsung es SVE-2017-8285 (Abril de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:16.933",
      "lastModified" : "2024-11-21T03:20:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (tablets) software. The lockscreen interface allows Add User actions, leading to an unintended ability to access user data in external storage. The Samsung ID is SVE-2016-7797 (March 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versión de software L(5.0 / 5.1) y M(6.0) (tablets). La interfaz de pantalla de bloqueo permite acciones Add User, conllevando a una capacidad no deseada de acceder a los datos del usuario en el almacenamiento externo. El ID de Samsung es SVE-2016-7797 (Marzo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.027",
      "lastModified" : "2024-11-21T03:20:39.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chipsets). There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 (March 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung Galaxy S5 con versión de software hasta el 20-12-2016 (chipsets Qualcomm AP). Se presentan múltiples desbordamientos de búfer en el cargador de arranque. El ID de Samsung es SVE-2016-7930 (Marzo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:galaxy_s5_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2016-12-20",
            "matchCriteriaId" : "640024B5-0F74-497D-A549-C862F0891140"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:galaxy_s5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7060E1BD-9FFF-4D74-A2EE-20ABB447EA23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.087",
      "lastModified" : "2024-11-21T03:20:39.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Because of incorrect exception handling and an unprotected intent, AudioService can cause a system crash, The Samsung IDs are SVE-2017-8114, SVE-2017-8116, and SVE-2017-8117 (March 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.0). Debido al manejo incorrecto de excepciones y un intent desprotegido, AudioService puede causar un bloqueo del sistema, los ID de Samsung son SVE-2017-8114, SVE-2017-8116 y SVE-2017-8117 (Marzo de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.137",
      "lastModified" : "2024-11-21T03:20:39.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows Hare Hunting during application installation. The Samsung ID is SVE-2016-6942 (February 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0 / 5.1) y M(6.0). SVoice permite un Hare Hunting durante la instalación de la aplicación. El ID de Samsung es SVE-2016-6942 ??(Febrero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.183",
      "lastModified" : "2024-11-21T03:20:39.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 (February 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0 / 5.1) y M(6.0). SVoice permite la incautación de proveedores por medio de una aplicación que usa un proveedor personalizado. El ID de Samsung es SVE-2016-6942 ??(Febrero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.243",
      "lastModified" : "2024-11-21T03:20:39.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. The InputMethod application can cause a system crash via a malformed serializable object in an Intent. The Samsung ID is SVE-2016-7123 (February 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1) y M(6.0). La aplicación InputMethod puede causar un bloqueo del sistema por medio de un objeto serializable malformado en un Intent. El ID de Samsung es SVE-2016-7123 ??(Febrero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.307",
      "lastModified" : "2024-11-21T03:20:39.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) software. Contact information can leak to a log file because of the broadcasting of an unprotected intent. The Samsung ID is SVE-2016-7180 (February 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.0). La información de contacto puede filtrarse hacia un archivo de registro debido a la transmisión de un intent desprotegido. El ID de Samsung es SVE-2016-7180 ????(Febrero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.353",
      "lastModified" : "2024-11-21T03:20:39.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.0). Un atacante puede obtener los nombres completos de las rutas de los archivos sdcard mediante la lectura del registro protegido del sistema tras la recepción de un determinado intent. El ID de Samsung es SVE-2016-7183 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.417",
      "lastModified" : "2024-11-21T03:20:40.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. There is an information disclosure (of memory locations outside a buffer) via /dev/dsm_ctrl_dev. The Samsung ID is SVE-2016-7340 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.1), M(6.0) y N(7.0). Se presenta una divulgación de información (de ubicaciones de memoria fuera de un búfer) por medio de /dev/dsm_ctrl_dev. El ID de Samsung es SVE-2016-7340 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.463",
      "lastModified" : "2024-11-21T03:20:40.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos5433, Exynos7420, or Exynos7870 chipsets) software. An attacker can bypass a ko (aka Kernel Module) signature by modifying the count of kernel modules. The Samsung ID is SVE-2016-7466 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.0) (Exynos5433, Exynos7420 o Exynos7870). Un atacante puede omitir una firma ko (también se conoce como Módulo Kernel) al modificar el conteo de módulos del kernel. El ID de Samsung es SVE-2016-7466 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5433:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9FA5A3-B8EE-4E90-BFDD-B0039381B340"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_7420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0280CE1-C8A6-4317-B583-DDF5C6AA2293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_7870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E73DD2A-67A6-4C19-A2BB-E1F5C44FCC90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.510",
      "lastModified" : "2024-11-21T03:20:40.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets) software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.0) (Exynos54xx, Exynos7420, Exynos8890 o Exynos8895). Se presenta un desbordamiento del búfer en el sensor hub. El ID de Samsung es SVE-2016-7484 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB50EA38-FF8E-4708-BAE8-AF6A22497AC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4235F7F-AA2D-428B-9B79-398CCD6C474A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99855F5-EE1B-4BA1-8708-5679A8A2DF67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90941F8E-5F3E-43EB-9CB5-FB235CFA7877"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10174B0-2829-403D-9C83-3046D04C1430"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_7420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0280CE1-C8A6-4317-B583-DDF5C6AA2293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_8890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914FF28A-6B33-4FC5-963D-E576967A001C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_8895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E735C6-FF25-4D8C-ACA0-D92DD8CD3F4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-07T16:15:17.573",
      "lastModified" : "2024-11-21T03:20:40.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos8890 chipsets) software. There are multiple Buffer Overflows in TSP sysfs cmd_store. The Samsung ID is SVE-2016-7500 (January 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.0) (chipsets Exynos8890). Se presentan múltiples desbordamientos de búfer en TSP sysfs cmd_store. El ID de Samsung es SVE-2016-7500 (Enero de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_8890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914FF28A-6B33-4FC5-963D-E576967A001C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-08T13:15:12.910",
      "lastModified" : "2024-11-21T03:20:33.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 (December 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.x) y N(7.x). Un atacante puede omitir el requisito de contraseña para el cambio de usuario de la tablet al plegar la cubierta magnética. El ID de Samsung es SVE-2017-10602 (Diciembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-08T14:15:12.163",
      "lastModified" : "2024-11-21T03:20:33.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is information disclosure of the kbase_context address of a GPU memory node. The Samsung ID is SVE-2017-8907 (December 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.x) y N(7.x). Se presenta una divulgación de información de la dirección de kbase_context de un nodo de memoria GPU. El ID de Samsung es SVE-2017-8907 (Diciembre de 2017."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-08T14:15:12.207",
      "lastModified" : "2024-11-21T03:20:33.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software. There is a muic_set_reg_sel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 (December 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.1), M(6.x) y N(7.x). Se presenta un desbordamiento de búfer en la región heap de la memoria en muic_set_reg_sel durante la lectura de los valores de registro MUIC. El ID de Samsung es SVE-2017-10011 (Diciembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-08T14:15:12.270",
      "lastModified" : "2024-11-21T03:20:33.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software. There is a panel_lpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 (December 2017)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.x) y N(7.x) (chipsets Qualcomm). Se presenta un desbordamiento de búfer en la región stack de la memoria en panel_lpm sysfs. El ID de Samsung es SVE-2017-9414 (Diciembre de 2017)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T13:15:13.053",
      "lastModified" : "2024-11-21T03:21:05.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a D8500 versiones hasta 1.0.3.28, R6400 versiones hasta 1.0.1.22, R6400v2 versiones hasta 1.0.2.18, R8300 versiones hasta 1.0.2.94, R8500 versiones hasta 1.0.2.94, y R6100 versiones hasta 1.0.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.28",
            "matchCriteriaId" : "71CD35FC-2F4A-40C7-A6D4-0E67C1262314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "43A9840B-1C54-4987-A179-EE8F8F8685FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.18",
            "matchCriteriaId" : "D00EA675-9FCF-4828-BDE8-CBCEDE790936"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D3B299C-B097-4287-B250-DA6488970976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000045850/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000045850/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T13:15:13.130",
      "lastModified" : "2024-11-21T03:21:05.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and WNDR3400v3 before 1.0.1.14."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una vulnerabilidad de tipo CSRF y una omisión de autenticación. Esto afecta a R7300DST versiones anteriores a 1.0.0.54, R8300 versiones anteriores a 1.0.2.100_1.0.82, R8500 versiones anteriores a 1.0.2.100_1.0.82, y WNDR3400v3 versiones anteriores a 1.0.1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "F0EE8EBA-C4CD-4CA1-A684-54338B1254A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "FA4A3678-F7BB-453F-A245-58E58116415B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "BAEFC983-46C7-49F2-8A65-7014BB703036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "DF8551B9-72D9-46B8-9F66-EE7841E29A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000045849/Security-Advisory-for-CSRF-and-Authentication-Bypass-on-Some-Routers-PSV-2017-1206",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000045849/Security-Advisory-for-CSRF-and-Authentication-Bypass-on-Some-Routers-PSV-2017-1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T14:15:12.237",
      "lastModified" : "2024-11-21T03:21:05.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a D6220 versiones anteriores a 1.0.0.26, D6400 versiones anteriores a 1.0.0.60, D8500 versiones anteriores a 1.0.3.29, R6250 versiones anteriores a 1.0.4.12, R6400 versiones anteriores a 1.01.24, R6400v2  versiones anteriores a 1.0.2.30, R6700  versiones anteriores a 1.0.1.22, R6900  versiones anteriores a 1.0.1.22, R6900P versiones anteriores a 1. 0.0.56, R7000 versiones anteriores a 1.0.9.4, R7000P versiones anteriores a 1.0.0.56, R7100LG versiones anteriores a 1.0.0.32, R7300DST versiones anteriores a 1.0.0.54, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.44, R8300 versiones anteriores a 1.0.2.100_1.0.82, y R8500 versiones anteriores a 1.0.2.100_1.0.82."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "F0280B99-ED56-4D26-BE97-0218ED4BB715"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "F3464F16-A6EB-47C0-B2B5-54E86743DC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01.24",
            "matchCriteriaId" : "9671373D-8C7F-4EBC-84CC-88D5FE2BF75A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.30",
            "matchCriteriaId" : "F4621DB5-030E-4370-A6FE-FA3965A616EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.4",
            "matchCriteriaId" : "026E5574-7296-46A2-916D-7FF7BD3F728A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "ADFE7176-BD34-467C-A167-E869E04A8E97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "F0EE8EBA-C4CD-4CA1-A684-54338B1254A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.44",
            "matchCriteriaId" : "94095689-7542-4F90-9743-F3D98CCFDDEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "FA4A3678-F7BB-453F-A245-58E58116415B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "BAEFC983-46C7-49F2-8A65-7014BB703036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000048998/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-or-Modem-Routers-PSV-2017-1208",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000048998/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-or-Modem-Routers-PSV-2017-1208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.227",
      "lastModified" : "2024-11-21T03:21:03.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una escalada de privilegios . Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049024/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049024/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.273",
      "lastModified" : "2024-11-21T03:21:03.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un ataque de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049023/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-2004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049023/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-2004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.337",
      "lastModified" : "2024-11-21T03:21:03.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una denegación de servicio. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049022/Security-Advisory-for-Denial-of-Service-Vulnerability-on-Some-Fully-Managed-Switches-PSV-2017-2005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049022/Security-Advisory-for-Denial-of-Service-Vulnerability-on-Some-Fully-Managed-Switches-PSV-2017-2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.397",
      "lastModified" : "2024-11-21T03:21:03.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.46, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.46, and D7000 before 1.0.1.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos. Esto afecta a R6220 versiones anteriores a 1.1.0.46, R6700v2 versiones anteriores a 1.1.0.38, R6800 versiones anteriores a 1.1.0.38, WNDR3700v5 versiones anteriores a 1.1.0.46, y D7000 versiones anteriores a 1.0.1.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "B6F4D164-91FA-4F84-832F-7C332473CBDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "58DBAB13-0D73-44A2-94BD-9491A474E0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "DC37FC88-B927-43F4-B27B-84A75CD333A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "39A3E558-DA47-49F5-A0A7-32A3A6ABDA35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049018/Security-Advisory-for-Command-Injection-on-Some-Routers-and-a-Modem-Router-PSV-2017-2158",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049018/Security-Advisory-for-Command-Injection-on-Some-Routers-and-a-Modem-Router-PSV-2017-2158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.477",
      "lastModified" : "2024-11-21T03:21:04.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects R7300 before 1.0.0.54, R8500 before 1.0.2.94, DGN2200v1 before 1.0.0.55, and D2200D/D2200DW-1FRNAS before 1.0.0.32."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un ataque de tipo CSRF. Esto afecta a R7300 versiones anteriores a 1.0.0.54, R8500 versiones anteriores a 1.0.2.94, DGN2200v1 versiones anteriores a 1.0.0.55, y D2200D/D2200DW-1FRNAS versiones anteriores a 1.0.0.32."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "D264AB39-63DD-4B32-9A91-D86A3700733D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "FC49A988-DE74-4CF5-92B8-F62466E21DD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F50D834B-D7B3-43D6-8072-8992FBC8C97B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d2200d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "FFF16FE5-7D3D-4EC9-9654-A0F1C453CF9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d2200d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B9B784-975C-40C6-A2B5-B0954FDE904E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d2200dw-1frnas_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "B2775B88-84DE-456C-AAF0-4698FC4C32A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d2200dw-1frnas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A420BD-C0B9-43C7-BE8B-E474CE23FA8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049017/Security-Advisory-for-a-Cross-Site-Request-Forgery-on-Some-Routers-DSL-Gateways-and-a-Modem-Router-PSV-2017-0327",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049017/Security-Advisory-for-a-Cross-Site-Request-Forgery-on-Some-Routers-DSL-Gateways-and-a-Modem-Router-PSV-2017-0327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.537",
      "lastModified" : "2024-11-21T03:21:04.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de credenciales administrativas. Esto afecta a R6700v2 versiones anteriores a 1.1.0.38, R6800 versiones anteriores a 1.1.0.38, y D7000 versiones anteriores a 1.0.1.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "58DBAB13-0D73-44A2-94BD-9491A474E0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "DC37FC88-B927-43F4-B27B-84A75CD333A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049016/Security-Advisory-for-an-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049016/Security-Advisory-for-an-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.617",
      "lastModified" : "2024-11-21T03:21:04.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de credenciales administrativas. Esto afecta a R6700v2 versiones anteriores a 1.1.0.38, R6800 anteriores a 1.1.0.38, y D7000 anteriores a 1.0.1.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "58DBAB13-0D73-44A2-94BD-9491A474E0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "DC37FC88-B927-43F4-B27B-84A75CD333A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049015/Security-Advisory-for-an-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049015/Security-Advisory-for-an-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.680",
      "lastModified" : "2024-11-21T03:21:04.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38 and R6800 before 1.1.0.38."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de credenciales administrativas. Esto afecta a R6700v2 versiones anteriores a 1.1.0.38 y a R6800 versiones anteriores a 1.1.0.38."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "58DBAB13-0D73-44A2-94BD-9491A474E0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "DC37FC88-B927-43F4-B27B-84A75CD333A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049014/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049014/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.727",
      "lastModified" : "2024-11-21T03:21:04.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria. Esto afecta a R6250 versiones anteriores a 1.0.4.12, R6400v2 versiones anteriores a 1.0.2.32, R7000P/R6900P versiones anteriores a 1.0.0.56, R7900 versiones anteriores a 1.0.1.18, R8300 versiones anteriores a 1.0.2.100_1.0.82, R8500 versiones anteriores a 1.0.2.100_1.0.82, y D8500 versiones anteriores a 1.0.3.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "F3464F16-A6EB-47C0-B2B5-54E86743DC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "ADFE7176-BD34-467C-A167-E869E04A8E97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "FA4A3678-F7BB-453F-A245-58E58116415B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "BAEFC983-46C7-49F2-8A65-7014BB703036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.787",
      "lastModified" : "2024-11-21T03:21:04.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por la capacidad de un atacante para leer archivos arbitrarios. Esto afecta a R6400v2 versiones anteriores a 1.0.2.32, R7000P/R6900P versiones anteriores a 1.0.0.56, R7900 versiones anteriores a 1.0.1.18, R8300 versiones anteriores a 1.0.2.100_1.0.82, R8500 versiones anteriores a 1.0.2.100_1.0.82, y D8500 versiones anteriores a 1.0.3.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "ADFE7176-BD34-467C-A167-E869E04A8E97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "FA4A3678-F7BB-453F-A245-58E58116415B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "BAEFC983-46C7-49F2-8A65-7014BB703036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049012/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-PSV-PSV-2017-0783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049012/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-PSV-PSV-2017-0783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.930",
      "lastModified" : "2024-11-21T03:21:05.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un ataque de tipo CSRF. Esto afecta a R6300v2 versiones anteriores a 1.0.0.36, AC1450 versiones anteriores a 1.0.0.36, R7300 versiones anteriores a 1.0.0.54, y R8500 versiones anteriores a 1.0.2.94."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "E5C8387B-1BB9-49C9-86ED-B86E5DBEC694"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ac1450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "95BB1ADE-E6D9-4985-B88F-5FEBBDA9830A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ac1450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BA18B2-8234-4C26-B865-741D467C5EBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "D264AB39-63DD-4B32-9A91-D86A3700733D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049011/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0334",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049011/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T16:15:13.977",
      "lastModified" : "2024-11-21T03:21:05.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos. Esto afecta a D6220 versiones anteriores a 1.0.0.26, D6400 versiones anteriores a 1.0.0.60, D8500 versiones anteriores a 1.0.3.29, R6250 versiones anteriores a 1.0.4.12, R6400 versiones anteriores a 1.01.24, R6400v2 versiones anteriores a 1.0.2.30, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R6900P versiones anteriores a 1. 0.0.56, R7000 anteriores a 1.0.9.4, R7000P anteriores a 1.0.0.56, R7100LG anteriores a 1.0.0.32, R7300DST anteriores a 1.0.0.54, R7900 anteriores a 1.0.1.18, R8000 anteriores a 1.0.3.44, R8300 anteriores a 1.0.2.100_1.0.82, y R8500 anteriores a 1.0.2.100_1.0.82."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "F0280B99-ED56-4D26-BE97-0218ED4BB715"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "F3464F16-A6EB-47C0-B2B5-54E86743DC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01.24",
            "matchCriteriaId" : "9671373D-8C7F-4EBC-84CC-88D5FE2BF75A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.30",
            "matchCriteriaId" : "F4621DB5-030E-4370-A6FE-FA3965A616EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.4",
            "matchCriteriaId" : "026E5574-7296-46A2-916D-7FF7BD3F728A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "ADFE7176-BD34-467C-A167-E869E04A8E97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "F0EE8EBA-C4CD-4CA1-A684-54338B1254A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.44",
            "matchCriteriaId" : "94095689-7542-4F90-9743-F3D98CCFDDEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "FA4A3678-F7BB-453F-A245-58E58116415B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100_1.0.82",
            "matchCriteriaId" : "BAEFC983-46C7-49F2-8A65-7014BB703036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000048999/Security-Advisory-for-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1209",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000048999/Security-Advisory-for-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:12.320",
      "lastModified" : "2024-11-21T03:21:00.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una escalada de privilegios vertical. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049043/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049043/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:12.553",
      "lastModified" : "2024-11-21T03:21:00.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049042/Security-Advisory-for-Security-Misconfiguration-on-Some-Fully-Managed-Switches-PSV-2017-1943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049042/Security-Advisory-for-Security-Misconfiguration-on-Some-Fully-Managed-Switches-PSV-2017-1943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:12.787",
      "lastModified" : "2024-11-21T03:21:00.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by directory traversal. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un salto de directorio. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049041/Security-Advisory-for-Directory-Traversal-on-Some-Fully-Managed-Switches-PSV-2017-1942",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049041/Security-Advisory-for-Directory-Traversal-on-Some-Fully-Managed-Switches-PSV-2017-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:13.007",
      "lastModified" : "2024-11-21T03:21:01.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un ataque de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049040/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049040/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:13.240",
      "lastModified" : "2024-11-21T03:21:01.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una escalada de privilegios vertical. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049039/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049039/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:13.477",
      "lastModified" : "2024-11-21T03:21:01.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un ataque de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049038/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1939",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049038/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:13.697",
      "lastModified" : "2024-11-21T03:21:01.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un ataque de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049033/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1938",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049033/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:13.930",
      "lastModified" : "2024-11-21T03:21:01.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una escalada de privilegios vertical. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049032/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049032/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:14.163",
      "lastModified" : "2024-11-21T03:21:01.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una escalada de privilegios vertical. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049021/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049021/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:14.397",
      "lastModified" : "2024-11-21T03:21:02.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un ataque de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049031/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049031/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:14.633",
      "lastModified" : "2024-11-21T03:21:02.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un ataque de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049030/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1954",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049030/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:14.867",
      "lastModified" : "2024-11-21T03:21:02.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por un ataque de tipo XSS reflejado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049029/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049029/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:14.930",
      "lastModified" : "2024-11-21T03:21:02.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un ataque de tipo XSS reflejado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049028/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049028/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:15.007",
      "lastModified" : "2024-11-21T03:21:02.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados  dispositivos NETGEAR, están afectados por un ataque de tipo XSS reflejado. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049027/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1957",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049027/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:15.070",
      "lastModified" : "2024-11-21T03:21:02.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una denegación de servicio. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049026/Security-Advisory-for-Denial-of-Service-on-Some-Fully-Managed-Switches-PSV-2017-1959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049026/Security-Advisory-for-Denial-of-Service-on-Some-Fully-Managed-Switches-PSV-2017-1959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-20T17:15:15.133",
      "lastModified" : "2024-11-21T03:21:03.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una escalada de privilegios vertical. Esto afecta a M4300-28G versiones anteriores a 12.0.2.15, M4300-52G versiones anteriores a 12.0.2.15, M4300-28G-POE+ versiones anteriores a 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049025/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049025/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Fully-Managed-Switches-PSV-2017-1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T14:15:11.083",
      "lastModified" : "2024-11-21T03:21:00.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una vulnerabilidad de tipo XSS almacenado. Esto afecta a M4300-28G versiones anteriores a la versión  12.0.2.15, M4300-52G versiones anteriores a la versión 12.0.2.15, M4300-28G-POE+ versiones anteriores a la versión 12.0.2.15, M4300-52G-POE+ versiones anteriores a 12.0.2.15, M4300-8X8F versiones anteriores a 12. 0.2.15, M4300-12X12F versiones anteriores a 12.0.2.15, M4300-24X24F versiones anteriores a 12.0.2.15, M4300-24X versiones anteriores a 12.0.2.15, M4300-48X versiones anteriores a 12.0.2.15, y M4200 versiones anteriores a 12.0.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "6835F5FD-7580-43C9-AC0C-523018CFA9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "D983754E-20CE-4AA1-8476-4FB254DD06F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "AFB4FD85-794A-45FC-9515-395FA0335472"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "76DE6248-6808-48E3-B06F-5D606F70219D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "BE7CAC30-97D2-4576-9669-52864912661B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "DFD98F80-65E8-430E-909A-51F0157F90F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "8CD54FE5-F998-4134-A824-0E385A5F2B82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "44DDD172-CA07-4D0B-8368-1C6B434508DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "4F1D3514-4B20-48C6-92E4-CE33D9F73291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.2.15",
            "matchCriteriaId" : "392C3C95-7BAA-4A4C-9123-0BF4B27E519F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049044/Security-Advisory-for-Store-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1948",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049044/Security-Advisory-for-Store-Cross-Site-Scripting-on-Some-Fully-Managed-Switches-PSV-2017-1948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:13.727",
      "lastModified" : "2024-11-21T03:20:59.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión 6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049055/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049055/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:13.787",
      "lastModified" : "2024-11-21T03:20:59.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión 6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049054/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0299",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049054/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:13.850",
      "lastModified" : "2024-11-21T03:20:59.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión  6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049053/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0298",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049053/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:13.913",
      "lastModified" : "2024-11-21T03:20:59.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión 6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049052/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049052/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:13.990",
      "lastModified" : "2024-11-21T03:20:59.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión  6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049051/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0295",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://kb.netgear.com/000049051/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:14.053",
      "lastModified" : "2024-11-21T03:20:59.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión 6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049050/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0291",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049050/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:14.117",
      "lastModified" : "2024-11-21T03:20:59.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión  6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049049/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049049/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:14.177",
      "lastModified" : "2024-11-21T03:21:00.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión 6.8.0, están afectados por una configuración incorrecta de ajustes de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049046/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049046/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T15:15:14.303",
      "lastModified" : "2024-11-21T03:21:00.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión  6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049045/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-ReadyNAS-devices-PSV-2017-0266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049045/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-ReadyNAS-devices-PSV-2017-0266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T16:15:51.337",
      "lastModified" : "2024-11-21T03:20:58.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR, están afectados por una inyección de comandos. Esto afecta a WAC510 versiones anteriores a la versión 1.3.0.10, WAC120 versiones anteriores a la versión  2.1.4, WNDAP620 versiones anteriores a la versión 2.1.3, WND930 versiones anteriores a la versión  2.1.2, WN604 versiones anteriores a la versión 3.3. 7, WNDAP660 versiones anteriores a la versión  3.7.4.0, WNDAP350 versiones anteriores a la versión  3.7.4.0, WNAP320 versiones anteriores a la versión 3.7.4.0, WNAP210v2 versiones anteriores a la versión 3.7.4.0, y WNDAP360 versiones anteriores a la versión 3.7.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wac510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.10",
            "matchCriteriaId" : "806B48FE-912E-488A-A89A-3321BF14B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wac510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B1B759-5015-4489-A2B4-0F580E884868"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wac120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.4",
            "matchCriteriaId" : "AD64ACCC-A1E0-4D9F-B6E4-8AB8AD7936E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wac120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E5414D-8F4F-4E21-B79F-61B14F0C9990"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap620_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "9267B577-EF4D-43A5-BC91-CB363F8EA421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666A5E55-B07C-4615-A9F0-5CA8C7D40637"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnd930_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.2",
            "matchCriteriaId" : "6E7CFEDD-259B-4E40-9308-A071D236D4C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnd930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91593610-E45D-450B-AD40-74375DA37EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.7",
            "matchCriteriaId" : "BEBD44BB-11A5-45C8-A675-E9CBBB31C48F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD31DCAA-BAA5-4463-9EA4-A7076A625407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap660_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "965D072C-3F4F-49EB-93DB-377E91372214"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D2492E-0CDC-4242-9206-7F0453B11CBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "7E3E920F-B954-4D9F-A918-214A00785A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82A16C2-DC48-4792-A4C7-8AC43F84196D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "C1B6AA52-F11E-4836-AF1D-7682FBD56CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnap320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2613E9-CAF9-4C04-85BC-E10BDF4B0E74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnap210_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "AFC5C872-DEC5-47EF-AA32-7D82E8DB9E48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnap210:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B442489B-A88F-477C-A835-2081891A15CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "E46CB6AD-BCE4-4A82-B2CC-22190AEB2F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7975D6EC-1816-4D52-8C87-77C1B6404120"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049061/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049061/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T16:15:51.413",
      "lastModified" : "2024-11-21T03:20:58.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de OS anteriores a la versión 6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049058/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049058/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T16:15:51.507",
      "lastModified" : "2024-11-21T03:20:58.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión  6.8.0, están afectados por una configuración incorrecta de ajustes de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049057/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2000",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049057/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T16:15:51.570",
      "lastModified" : "2024-11-21T03:20:58.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versión de SO 6, al ejecutar ReadyNAS versiones de SO anteriores a la versión 6.8.0, están afectados por una vulnerabilidad de tipo XSS almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "3CB4F8F5-5C42-4CE8-ADD0-871DCDBE0A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049056/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049056/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T18:15:12.423",
      "lastModified" : "2024-11-21T03:20:57.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800 before 1.0.2.32, EX6200v2 before 1.0.1.50, and D7800 before 1.0.1.22."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a R6100 versiones anteriores a la versión  1.0.1.14, R7500 versiones anteriores a la versión  1.0.0.110, R7500v2 versiones anteriores a la versión 1.0.3.16, R7800 versiones anteriores a la versión 1.0.2.32, EX6200v2 versiones anteriores a 1.0.1.50, y D7800 versiones anteriores a 1.0.1.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "7E8197CA-84A2-4714-8EBB-04BA4B66ED29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.110",
            "matchCriteriaId" : "7F227D99-88C9-457F-BCA5-665F531E04AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.16",
            "matchCriteriaId" : "1F587C0F-5A9A-468B-B680-21EB9700DD4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "228D2C78-E876-4E4C-A5E2-FB215B0917E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "373DAD59-79CC-428D-AD6D-935DFD360D39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F62287-CB55-4FB1-AA39-62018654BA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "1C77095E-454B-4B82-B46F-510850A80FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T18:15:12.487",
      "lastModified" : "2024-11-21T03:20:57.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR R7800 devices before 1.0.2.30 are affected by incorrect configuration of security settings."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR R7800 versiones anteriores a la versión 1.0.2.30, están afectados por la configuración incorrecta de los ajustes de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.30",
            "matchCriteriaId" : "68624734-CA96-42D3-970C-EF4F222F8507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049063/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-R7800-Routers-PSV-2017-0136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049063/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-R7800-Routers-PSV-2017-0136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T18:15:12.547",
      "lastModified" : "2024-11-21T03:20:58.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and R9000 before 1.0.2.4."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a R7800 versiones anteriores a 1.0.2.16 y a R9000 versiones anteriores a 1.0.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.16",
            "matchCriteriaId" : "5D358441-C59F-4B37-8732-5C7814D373C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.4",
            "matchCriteriaId" : "FBA97D34-2027-4C33-AB27-8497B72C98F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049062/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-and-R9000-Routers-PSV-2016-0128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049062/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-and-R9000-Routers-PSV-2016-0128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T18:15:12.593",
      "lastModified" : "2024-11-21T03:20:58.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a WAC510 versiones anteriores a la versión  1.3.0.10, WAC120 versiones anteriores a la versión  2.1.4, WNDAP620 versiones anteriores a la versión 2.1.3, WND930 versiones anteriores a la versión 2.1.2, WN604 versiones anteriores a la 3.3. 7, WNDAP660 versiones anteriores a 3.7.4.0, WNDAP350 versiones anteriores a 3.7.4.0, WNAP320 versiones anteriores a 3.7.4.0, WNAP210v2 versiones anteriores a 3.7.4.0, y WNDAP360 versiones anteriores a 3.7.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wac510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.10",
            "matchCriteriaId" : "806B48FE-912E-488A-A89A-3321BF14B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wac510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B1B759-5015-4489-A2B4-0F580E884868"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wac120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.4",
            "matchCriteriaId" : "AD64ACCC-A1E0-4D9F-B6E4-8AB8AD7936E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wac120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E5414D-8F4F-4E21-B79F-61B14F0C9990"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap620_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "9267B577-EF4D-43A5-BC91-CB363F8EA421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666A5E55-B07C-4615-A9F0-5CA8C7D40637"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnd930_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.2",
            "matchCriteriaId" : "6E7CFEDD-259B-4E40-9308-A071D236D4C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnd930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91593610-E45D-450B-AD40-74375DA37EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.7",
            "matchCriteriaId" : "BEBD44BB-11A5-45C8-A675-E9CBBB31C48F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD31DCAA-BAA5-4463-9EA4-A7076A625407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap660_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "965D072C-3F4F-49EB-93DB-377E91372214"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D2492E-0CDC-4242-9206-7F0453B11CBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "7E3E920F-B954-4D9F-A918-214A00785A9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82A16C2-DC48-4792-A4C7-8AC43F84196D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "C1B6AA52-F11E-4836-AF1D-7682FBD56CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnap320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2613E9-CAF9-4C04-85BC-E10BDF4B0E74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnap210_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "AFC5C872-DEC5-47EF-AA32-7D82E8DB9E48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnap210:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B442489B-A88F-477C-A835-2081891A15CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4.0",
            "matchCriteriaId" : "E46CB6AD-BCE4-4A82-B2CC-22190AEB2F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7975D6EC-1816-4D52-8C87-77C1B6404120"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049060/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049060/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:11.833",
      "lastModified" : "2024-11-21T03:20:55.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de información confidencial. Esto afecta a R6700 versiones anteriores a la versión 1.0.1.26, R7000 versiones anteriores a la versión 1.0.9.10, R7100LG versiones anteriores a la versión  1.0.0.32, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.54, y R8500 versiones anteriores a 1.0.2.100."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "DC332E60-A7DB-41C5-B1ED-FE3EDF83F8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.10",
            "matchCriteriaId" : "DD7D570E-C5EF-4D3E-BCCF-926DBDB12016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.54",
            "matchCriteriaId" : "4BE5F241-45D7-42A2-B5EA-3869B1C97098"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100",
            "matchCriteriaId" : "CEE4B878-05AB-4B45-BCA4-28795AA454F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:11.897",
      "lastModified" : "2024-11-21T03:20:55.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a R6050/JR6150 versiones anteriores a la versión  1.0.1.7, PR2000 versiones anteriores a la versión  1.0.0.17, R6220 versiones anteriores a la versión  1.1.0.50, WNDR3700v5 versiones anteriores a la versión  1.1.0.48, JNR1010v2 versiones anteriores a  la versión 1.1.0.40, JWNR2010v5 versiones anteriores a 1. 1.0.40, WNR1000v4 versiones anteriores a 1.1.0.40, WNR2020 versiones anteriores a 1.1.0.40, WNR2050 versiones anteriores a 1.1.0.40, WNR614 versiones anteriores a 1.1.0.40, WNR618 versiones anteriores a 1.1.0.40, y D7000 versiones anteriores a 1.0.1.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.7",
            "matchCriteriaId" : "50342285-48EB-4FF5-8068-CD819017FB19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.7",
            "matchCriteriaId" : "C733375E-342E-426B-A529-3271D03D1268"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.17",
            "matchCriteriaId" : "B47967D5-4D5A-4489-BE54-19765D386612"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "B13F80BA-F4DF-4728-8591-CDEEE82BDF9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "52C2DA42-3B95-43B4-AB3B-103607B44C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "18CB70FD-790E-4342-962A-2C9D8991B3C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "764C3E34-DDED-4530-A314-0D99226B9E1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "013EA9F3-64C4-4F06-989D-D00D86CF555F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr614_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "7B8E442A-011A-4AA0-A3D4-874BEF31702B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr614:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8A668E-4A30-4364-AF7A-F3C814BBAACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr618_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "40488E8A-95D8-4D1B-B8C8-DEA3330D575A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr618:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAA7BF1-2DFE-4ADA-B3A7-F33EEAAC5962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049371/Security-Advisory-for-Cross-Site-Request-Forgery-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-0386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049371/Security-Advisory-for-Cross-Site-Request-Forgery-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-0386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:11.957",
      "lastModified" : "2024-11-21T03:20:56.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR D6100 versiones anteriores a la versión  1.0.0.50_0.0.50, están afectados por una inyección de comando."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50_0.0.50",
            "matchCriteriaId" : "372D9D60-D9CB-4945-8B0B-760EBED9377C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049370/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-PSV-2017-2455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049370/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-PSV-2017-2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.037",
      "lastModified" : "2024-11-21T03:20:56.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR R7800 devices before 1.0.2.36 are affected by command injection."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR R7800 versiones anteriores a la versión 1.0.2.36, están afectados por una inyección de comando."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049369/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-PSV-2017-0618",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049369/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-PSV-2017-0618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.097",
      "lastModified" : "2024-11-21T03:20:56.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.50_0.0.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a R6300v2 versiones anteriores a la versión 1.0.4.8_10.0.77, R6400 versiones anteriores a la versión  1.0.1.24, R6700 versiones anteriores a 1.0.1.26, R7000 versiones anteriores a 1.0.9.10, R7100LG versiones anteriores a 1.0.0.32, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.54, R8500 versiones anteriores a 1.0.2.100, y D6100 versiones anteriores a 1.0.0.50_0.0.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8_10.0.77",
            "matchCriteriaId" : "61FD5738-E14A-4CD2-A750-E75AFFE31119"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "29EA60BF-FBA6-4305-8173-07130A527410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "DC332E60-A7DB-41C5-B1ED-FE3EDF83F8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.10",
            "matchCriteriaId" : "DD7D570E-C5EF-4D3E-BCCF-926DBDB12016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.54",
            "matchCriteriaId" : "4BE5F241-45D7-42A2-B5EA-3869B1C97098"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100",
            "matchCriteriaId" : "CEE4B878-05AB-4B45-BCA4-28795AA454F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50_0.0.50",
            "matchCriteriaId" : "372D9D60-D9CB-4945-8B0B-760EBED9377C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049368/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-and-Some-Routers-PSV-2017-0321",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049368/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-and-Some-Routers-PSV-2017-0321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.177",
      "lastModified" : "2024-11-21T03:20:56.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50_0.0.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a D6220 versiones anteriores a la versión  1.0.0.28 y a D6100 versiones anteriores a 1.0.0.50_0.0.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.28",
            "matchCriteriaId" : "FA24D11F-7DF0-44E7-B122-7C5853043E71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50_0.0.50",
            "matchCriteriaId" : "372D9D60-D9CB-4945-8B0B-760EBED9377C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049367/Security-Advisory-for-Command-Injection-Vulnerability-on-D6220-and-D6100-PSV-2016-0133",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049367/Security-Advisory-for-Command-Injection-Vulnerability-on-D6220-and-D6100-PSV-2016-0133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.240",
      "lastModified" : "2024-11-21T03:20:56.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6900 before 1.0.1.28, R7000 before 1.0.9.10, R7000P before 1.0.1.16, R6900P before 1.0.1.16, and R7800 before 1.0.2.36."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a R6400 versiones anteriores a la versión 1.0.1.24, R6700 versiones anteriores a 1.0.1.26, R6900 versiones anteriores a 1.0.1.28, R7000 versiones anteriores a 1.0.9.10, R7000P versiones anteriores a 1.0.1.16, R6900P versiones anteriores a 1.0.1.16, y R7800 versiones anteriores a 1.0.2.36."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "29EA60BF-FBA6-4305-8173-07130A527410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "DC332E60-A7DB-41C5-B1ED-FE3EDF83F8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "84D9B238-EEFB-4C5A-80B0-E85178338F52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.10",
            "matchCriteriaId" : "DD7D570E-C5EF-4D3E-BCCF-926DBDB12016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "7F08584A-70DE-4008-BB5B-7D5BC70F3353"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "59A98F21-EE5B-461C-BF14-D144C1D19898"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049366/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Routers-PSV-2016-0106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049366/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Routers-PSV-2016-0106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.300",
      "lastModified" : "2024-11-21T03:20:56.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por la capacidad de un atacante para leer archivos arbitrarios. Esto afecta a R6400 versiones anteriores a 1.0.1.24, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.54, y R8500 versiones anteriores a 1.0.2.100."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "29EA60BF-FBA6-4305-8173-07130A527410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.54",
            "matchCriteriaId" : "4BE5F241-45D7-42A2-B5EA-3869B1C97098"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100",
            "matchCriteriaId" : "CEE4B878-05AB-4B45-BCA4-28795AA454F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-Vulnerability-on-Some-Routers-PSV-2017-0318",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-Vulnerability-on-Some-Routers-PSV-2017-0318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.363",
      "lastModified" : "2024-11-21T03:20:57.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, D7000 before 1.0.1.50, and D1500 before 1.0.0.25."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R6700v2 versiones anteriores a 1.1.0.38, R6800 versiones anteriores a 1.1.0.38, D7000 versiones anteriores a 1.0.1.50, y D1500 versiones anteriores a 1.0.0.25."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "58DBAB13-0D73-44A2-94BD-9491A474E0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "DC37FC88-B927-43F4-B27B-84A75CD333A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.25",
            "matchCriteriaId" : "086445B7-C353-4EE7-8799-3CDC2C3A0E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE070E3-C0B1-455F-83A9-5C60C489816F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.25",
            "matchCriteriaId" : "638CC87A-8459-4878-9985-80B8CF8A1B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DC8809-C26D-48D8-9E12-228C3669B824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049358/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-2159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049358/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-2159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.427",
      "lastModified" : "2024-11-21T03:20:57.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.14, R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.1.1.20, R7000 before 1.0.7.10, R7000P/R6900P before 1.0.0.56, R7100LG before 1.0.0.30, R7900 before 1.0.1.14, R8000 before 1.0.3.22, R8500 before 1.0.2.74, and D8500 before 1.0.3.28."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R6200v2 versiones anteriores a 1.0.3.14, R6250 versiones anteriores a 1.0.4.8, R6300v2 versiones anteriores a 1.0.4.8, R6700 versiones anteriores a 1.1.1.20, R7000 versiones anteriores a 1.0.7.10, R7000P/R6900P versiones anteriores a 1. 0.0.56, R7100LG versiones anteriores a 1.0.0.30, R7900 versiones anteriores a 1.0.1.14, R8000 versiones anteriores a 1.0.3.22, R8500 versiones anteriores a 1.0.2.74, y D8500 versiones anteriores a 1.0.3.28."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.14",
            "matchCriteriaId" : "943B629F-0088-4DB8-A9A4-F707147614AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719248B0-BE22-4836-A23E-FE9F7590FB0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "13B4777D-CC2E-4A6B-946F-3E511D8D4B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1.20",
            "matchCriteriaId" : "398A515E-B281-469F-B2E8-1089C1419744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.10",
            "matchCriteriaId" : "B94C2A0A-F26B-4CD2-A91E-DD62C5F788B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "ADFE7176-BD34-467C-A167-E869E04A8E97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "E202CB57-DC15-49BA-9059-0847732D5D64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "1448301E-26E2-4D7E-ABB1-D8C8C2A11154"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.22",
            "matchCriteriaId" : "9A6831F5-19C9-4577-9BC0-FD1F2211EC6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "CC34CE8E-8DB9-4A15-80D8-EB663482A892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.28",
            "matchCriteriaId" : "71CD35FC-2F4A-40C7-A6D4-0E67C1262314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049357/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-D8500-and-Some-Routers-PSV-2017-0528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049357/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-D8500-and-Some-Routers-PSV-2017-0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.473",
      "lastModified" : "2024-11-21T03:20:57.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS reflejado. Esto afecta a R6700v2 versiones anteriores a 1.1.0.42 y a R6800 versiones anteriores a 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049356/Security-Advisory-for-Reflected-Cross-Site-Scripting-Vulnerability-on-R6700v2-and-R6800-PSV-2017-2162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049356/Security-Advisory-for-Reflected-Cross-Site-Scripting-Vulnerability-on-R6700v2-and-R6800-PSV-2017-2162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-21T19:15:12.550",
      "lastModified" : "2024-11-21T03:20:57.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.48, and D7000 before 1.0.1.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comando. Esto afecta a R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.1.0.38, R6800 versiones anteriores a 1.1.0.38, WNDR3700v5 versiones anteriores a 1.1.0.48, y D7000 versiones anteriores a 1.0.1.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "58DBAB13-0D73-44A2-94BD-9491A474E0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.38",
            "matchCriteriaId" : "DC37FC88-B927-43F4-B27B-84A75CD333A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049355/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-2151",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049355/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-2151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T14:15:11.817",
      "lastModified" : "2024-11-21T03:20:55.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220 before 1.0.0.32, D6400 before 1.0.0.66, D7000 before 1.0.1.52, D7000v2 before 1.0.0.44, D7800 before 1.0.1.30, D8500 before 1.0.3.35, DGN2200v4 before 1.0.0.96, DGN2200Bv4 before 1.0.0.96, EX2700 before 1.0.1.28, EX6150v2 before 1.0.1.54, EX6100v2 before 1.0.1.54, EX6200v2 before 1.0.1.52, EX6400 before 1.0.1.72, EX7300 before 1.0.1.72, EX8000 before 1.0.0.102, JNR1010v2 before 1.1.0.44, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6100 before 1.0.1.20, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.0.1.32, R6400v2 before 1.0.2.46, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000 before 1.0.9.18, R6900P before 1.3.0.8, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.58, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R7900 before 1.0.2.4, R8000 before 1.0.4.4_1.1.42, R7900P before 1.1.5.14, R8000P before 1.1.5.14, R8300 before 1.0.2.110, R8500 before 1.0.2.110, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.14, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3400v3 before 1.0.1.16, WNDR3700v4 before 1.0.2.94, WNDR4300 before 1.0.2.96, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.44, WNR2050 before 1.1.0.44, and WNR3500Lv2 before 1.2.0.46."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a D3600 versiones anteriores a 1.0.0.67, D6000 versiones anteriores a 1.0.0.67, D6100 versiones anteriores a 1.0.0.56, D6200 versiones anteriores a 1.1.00.24, D6220 versiones anteriores a 1.0.0.32, D6400 versiones anteriores a 1.0.0.66, D7000 versiones anteriores a 1.0.1.52, D7000v2 versiones anteriores a 1.0.0.44, D7800 versiones anteriores a 1.0.1.30, D8500 versiones anteriores a 1.0.3.35, DGN2200v4 versiones anteriores a 1.0.0.96, DGN2200Bv4 versiones anteriores a 1.0.0.96, EX2700 versiones anteriores a 1.0.1.28, EX6150v2 versiones anteriores a 1.0.1.54, EX6100v2 versiones anteriores a 1.0.1.54, EX6200v2 versiones anteriores a 1.0.1.52, EX6400 versiones anteriores a 1.0.1.72, EX7300 versiones anteriores a 1.0.1.72, EX8000 versiones anteriores a 1.0.0.102, JNR1010v2  versiones anteriores a 1.1.0.44, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6100 versiones anteriores a 1.0.1.20, R6250 versiones anteriores a 1.0.4.16, R6300v2 versiones anteriores a 1.0. 4.18, R6400 versiones anteriores a 1.0.1.32, R6400v2 versiones anteriores a 1.0.2.46, R6700 versiones anteriores a 1.0.1.36, R6900 versiones anteriores a 1.0.1.34, R7000 versiones anteriores a 1.0.9.18, R6900P versiones anteriores a 1.3.0.8, R7000P versiones anteriores a 1.3.0.8, R7100LG versiones anteriores a 1.0.0.34, R7300DST versiones anteriores a 1.0.0.58, R7500 versiones anteriores a 1.0.0.118, R7500v2 versiones anteriores a 1.0.3.24, R7800 versiones anteriores a 1.0.2.40, R7900 versiones anteriores a 1.0.2.4, R8000 versiones anteriores a 1.0.4.4_1.1.42, R7900P versiones anteriores a 1.1.5.14, R8000P versiones anteriores a 1.1.5.14, R8300 versiones anteriores a 1.0.2.110, R8500 versiones anteriores a 1.0.2.110, R9000 versiones anteriores a 1.0.2.52, WN2000RPTv3 versiones anteriores a 1.0.1.14, WN3000RPv3 versiones anteriores a 1.0.2.50, WN3100RPv2 versiones anteriores a 1.0.0.40, WNDR3400v3 versiones anteriores a 1.0.1.16, WNDR3700v4 versiones anteriores a 1.0. 2.94, WNDR4300 versiones anteriores a 1.0.2.96, WNDR4300v2 versiones anteriores a 1.0.0.50, WNDR4500v3 versiones anteriores a 1.0.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2000v5 versiones anteriores a 1.0.0.62, WNR2020 versiones anteriores a 1.1.0.44, WNR2050 versiones anteriores a 1.1.0.44 y WNR3500Lv2 versiones anteriores a 1.2.04 ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d3600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.67",
            "matchCriteriaId" : "47FB5F9D-2B33-44AD-BD57-164DF945ADA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DE9D4E-3CDC-4552-A63F-DD5D95E23F63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.67",
            "matchCriteriaId" : "2089DF5E-598C-4CC2-B910-05C8D209A1BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EA344-FF99-4F27-9860-3C5BE07345A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "1B5A756C-6CA4-46EF-80B8-9051FB607B43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "1FD6552E-5BF6-4E57-90A7-39C4543B469C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "CE087F75-4C99-425C-A9B7-B261E5545297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.44",
            "matchCriteriaId" : "34A8EAED-389E-4B14-949E-ED87A09F4D91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8780623-F362-4FA5-8B33-37E9CB3FEE12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.30",
            "matchCriteriaId" : "0173E81F-5BE3-4249-A620-EC36AD109D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.35",
            "matchCriteriaId" : "9398174B-A4A6-449A-AB91-A93D3D9398DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.96",
            "matchCriteriaId" : "0ABDCFC2-E9EC-40F4-862F-B86FDD0A6AC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.96",
            "matchCriteriaId" : "0D989DB4-5276-4BCF-A15E-BC207E03B2C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200b:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25090794-A90C-40CD-8E95-87EC4E98B928"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex2700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "A7D6C145-E2CD-4030-8AA8-C4071C0E242B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5341B659-DE7D-43F1-954D-82049CBE18AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.54",
            "matchCriteriaId" : "F476F7D7-EAE2-4A09-8C4B-A53F885A1337"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.54",
            "matchCriteriaId" : "9EFE54D2-78A3-4461-BA5E-6807911C5684"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "BCBD76F6-4E46-42E1-A6B6-373F2F7DB4AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F62287-CB55-4FB1-AA39-62018654BA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.72",
            "matchCriteriaId" : "85392ECB-985F-43B2-89BE-755E433FC14B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.72",
            "matchCriteriaId" : "B0D1F6E4-A21F-4B86-B903-C26BB062D0DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.102",
            "matchCriteriaId" : "BBA04A7E-6029-498B-970E-0317BE0CF0F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.16",
            "matchCriteriaId" : "F5E7A8CA-134F-49B4-95D6-79A88CD6BB80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.18",
            "matchCriteriaId" : "55058831-92FF-4A87-8340-E25AC0DDF89E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.32",
            "matchCriteriaId" : "97DE1C91-59A0-4902-B5C7-0CFD2631CAEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.46",
            "matchCriteriaId" : "DBDE97EB-05FE-475E-8A4E-13C97E91548A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.18",
            "matchCriteriaId" : "03DC2062-58D1-40D6-8536-A13C87F2CF11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "326BBECA-9A76-4A3E-90F7-023797D5D186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "09963BE1-D57D-491A-9BD8-A1A46ED993E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.34",
            "matchCriteriaId" : "2FB08FA1-A476-4E05-9904-9BE30C9E77B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "B75230D7-5B50-47C2-B5C5-C60C6974C305"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.118",
            "matchCriteriaId" : "7494430D-BA3F-4EDB-9FB8-7586D4457B9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "C38F66ED-C53D-40F4-9F1E-96254BCD8A0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.4",
            "matchCriteriaId" : "BCE1150D-8464-4421-94BD-EE81977BAC34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.4_1.1.42",
            "matchCriteriaId" : "532B87A3-CE33-4F0F-A0A7-C7D7D568C593"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5.14",
            "matchCriteriaId" : "606460FB-B46F-4490-96FC-B226F3A2C55D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5.14",
            "matchCriteriaId" : "B508ABA6-F17C-43D4-88D8-56ECD0057C65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EF872D-2537-4FEB-8799-499FC9D44339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.110",
            "matchCriteriaId" : "63DDFEFE-402D-4AA8-A2C9-2217A5643DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.110",
            "matchCriteriaId" : "D7A3E675-BB4F-4E8B-A041-C208F85B5C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn2000rpt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "785692C5-AA6D-43E9-B9E8-160352AC816D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn2000rpt:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB1BE0D-E3CF-4C16-8C11-706B238E9934"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3000rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.50",
            "matchCriteriaId" : "030AAA8B-65D9-42E4-ACF6-F2DB13D4AA30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3000rp:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71AC74-2D1B-4F1E-A70F-6590A00AAD9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3100rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.40",
            "matchCriteriaId" : "8AB52FC6-BC09-41ED-BB91-63A4E795E0F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3100rp:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8680F5-0C06-4CFC-8BA0-CF85D0438419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "72DCD4C0-A757-4F98-97BD-FB1FEBF3235C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "026C640E-7594-4B5A-BDF9-FAB1CD135A47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.96",
            "matchCriteriaId" : "5025770E-D9D0-4FB6-BE29-1F48EDC31AF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50",
            "matchCriteriaId" : "1425F7B0-0990-43F4-9621-8DAE8508FEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50",
            "matchCriteriaId" : "81A6B7D4-1CBB-4D9E-8EB2-E5E82AFA59FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.62",
            "matchCriteriaId" : "27B33A47-E305-43CC-9AC2-C35DE8E51F02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.46",
            "matchCriteriaId" : "DB542F95-5AE2-47E4-BD7B-34134B26AA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049527/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2947",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049527/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T14:15:11.877",
      "lastModified" : "2024-11-21T03:20:55.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 before V1.0.1.22, R6400v2 before V1.0.2.32, R7100LG before V1.0.0.32, R7300 before V1.0.0.52, R8300 before V1.0.2.94, R8500 before V1.0.2.100, D6220 before V1.0.0.28, D6400 before V1.0.0.60, and D8500 before V1.0.3.29."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de información confidencial. Esto afecta a R6250 versiones anteriores a la versión V1.0.4.8, R6400 versiones anteriores a la versión  V1.0.1.22, R6400v2 versiones anteriores a la versión V1.0.2.32, R7100LG versiones anteriores a V1.0.0.32, R7300 versiones anteriores a V1.0.0.52, R8300 versiones anteriores a V1.0.2.94, R8500 versiones anteriores a V1.0.2.100, D6220 versiones anteriores a V1.0.0.28, D6400 versiones anteriores a V1.0.0.60 y D8500 versiones anteriores a V1.0.3.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "13B4777D-CC2E-4A6B-946F-3E511D8D4B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "43A9840B-1C54-4987-A179-EE8F8F8685FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "43FCD2C9-C583-49D1-AAB3-B1A1ED483439"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100",
            "matchCriteriaId" : "CEE4B878-05AB-4B45-BCA4-28795AA454F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.28",
            "matchCriteriaId" : "FA24D11F-7DF0-44E7-B122-7C5853043E71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049373/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-0426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049373/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-0426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:11.457",
      "lastModified" : "2024-11-21T03:20:52.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX6200v2 before 1.0.1.50, EX7000 before 1.0.0.56, JR6150 before 1.0.1.18, R6050 before 1.0.1.10J, R6100 before 1.0.1.16, R6150 before 1.0.1.10, R6220 before 1.1.0.50, R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.26, R6700v2 before 1.2.0.4, R6800 before 1.0.1.10, R6900 before 1.0.1.26, R6900P before 1.0.0.58, R6900v2 before 1.2.0.4, R7000 before 1.0.9.6, R7000P before 1.0.0.58, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.40, WNDR3400v3 before 1.0.1.14, WNDR3700v4 before 1.0.2.96, WNDR4300v1 before 1.0.2.98, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR3500Lv2 before 1.2.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a D6220 versiones anteriores a 1.0.0.40, D6400 versiones anteriores a 1.0.0.74, D7000 versiones anteriores a 1.0.1.60, D7800 versiones anteriores a 1.0.1.34, D8500 versiones anteriores a 1.0.3.39, DGN2200v4 versiones anteriores a 1.0.0.94, DGN2200Bv4 versiones anteriores a 1.0.0.94, EX6200v2 versiones anteriores a 1.0.1.50, EX7000 versiones anteriores a 1.0.0.56, JR6150 versiones anteriores a 1.0.1.18, R6050 versiones anteriores a 1.0.1.10J, R6100 versiones anteriores a 1.0.1.16, R6150 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50, R6250 versiones anteriores a 1.0.4.12, R6300v2 versiones anteriores a 1.0.4.12, R6400 versiones anteriores a 1.0.1.24, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.26, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.0.1.10, R6900 versiones anteriores a 1.0.1.26, R6900P versiones anteriores a 1.0.0.58, R6900v2 versiones anteriores a 1.2.0.4, R7000 versiones anteriores a 1.0 .9.6, R7000P versiones anteriores a 1.0.0.58, R7100LG versiones anteriores a 1.0.0.32, R7300 versiones anteriores a 1.0.0.54, R7500 versiones anteriores a 1.0.0.112, R7500v2  versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.48 , R8300 versiones anteriores a 1.0.2.104, R8500 versiones anteriores a 1.0.2.104, R9000 versiones anteriores a 1.0.2.40, WNDR3400v3 versiones anteriores a 1.0.1.14, WNDR3700v4 versiones anteriores a 1.0.2.96, WNDR4300v1 versiones anteriores a 1.0.2.98, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR3500Lv2 versiones anteriores a 1.2.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.40",
            "matchCriteriaId" : "B8AA0851-BFD5-45F6-9673-CA4B83D8B844"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.74",
            "matchCriteriaId" : "DD763D04-70A0-4A50-8866-330B82703680"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "82EB2B81-08D9-4C81-B6DE-8D1FCAEC485A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "EB24F17D-A9A8-4EF9-BF53-580395D60EFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.39",
            "matchCriteriaId" : "D5E70AF3-FFD8-4ACD-9F4C-DB03BFB1125A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.94",
            "matchCriteriaId" : "FCA60A85-77FF-41BF-89FA-7EB3ACFECDB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.94",
            "matchCriteriaId" : "D5C27C8A-1B80-47CD-B015-14588F4F8732"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200b:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25090794-A90C-40CD-8E95-87EC4E98B928"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "373DAD59-79CC-428D-AD6D-935DFD360D39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F62287-CB55-4FB1-AA39-62018654BA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "274A58AC-3E28-411B-8495-2ADD184CFAE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45B620-60B8-40F3-A055-181ADD71EFFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "CC9C60BB-2E7F-4D35-9348-8D8AEFAAD75F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10j",
            "matchCriteriaId" : "D2DECC28-182A-496F-91DA-C2B5DA6F7AF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "0330A404-6120-4F8E-9600-C2524EA1DEC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05ED104B-38C7-4D9E-9239-B8556787C32B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "F3464F16-A6EB-47C0-B2B5-54E86743DC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "E43DA92A-E429-459F-8B34-DDED55F5590B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "29EA60BF-FBA6-4305-8173-07130A527410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "DC332E60-A7DB-41C5-B1ED-FE3EDF83F8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "DE2B75FA-179C-41A9-B5A3-26EFF452EA0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "D21ACC48-8B3D-4A0B-BA04-C9709835A66A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "A6BA926B-4B26-4478-837A-A3B2DE734392"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.6",
            "matchCriteriaId" : "819CC65F-F5DA-4620-BC68-CAAA2B73195D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "3F0C755C-3012-440E-BE85-D98D41F54ED9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "D264AB39-63DD-4B32-9A91-D86A3700733D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.112",
            "matchCriteriaId" : "56014B19-02F8-4942-9889-7F3A4EB8F106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.48",
            "matchCriteriaId" : "7393D4D7-F607-423E-917E-FE520D7A3A73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "DAAB159C-27F2-4645-9FE4-4DBB4465DE3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "A79D8A77-4555-4B2A-8F19-F69AD4A17D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A1664969-D326-4EC5-BF0D-E43820CCB378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "DF8551B9-72D9-46B8-9F66-EE7841E29A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.96",
            "matchCriteriaId" : "FAF6A089-4E7D-43D1-AF1F-01A7A592115E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.98",
            "matchCriteriaId" : "EF96C0EB-8CB6-4C86-A9A2-A4C7AF58C97F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.44",
            "matchCriteriaId" : "7CE20879-71BC-433E-A8B0-D1004A016B34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051474/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-Gateways-and-Extenders-PSV-2016-0122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051474/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-Gateways-and-Extenders-PSV-2016-0122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:11.597",
      "lastModified" : "2024-11-21T03:20:52.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un usuario autenticado. Esto afecta a R7800 versiones anteriores a la versión  1.0.2.36, PLW1000v2 versiones anteriores a la versión 1.0.0.14 y PLW1010v2 versiones anteriores a 1.0.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:plw1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.14",
            "matchCriteriaId" : "FA23B6B8-EC5D-4458-948E-C2793EB20EA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:plw1000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09B6D87-8488-4492-8C76-44C7959618FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:plw1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.14",
            "matchCriteriaId" : "DFEA5486-11CD-413B-BB51-ABB718B2C253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:plw1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4376994-6719-4E78-8881-4F8C2E7D2937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051473/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Powerlines-and-a-Router-PSV-2016-0121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051473/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Powerlines-and-a-Router-PSV-2016-0121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:11.800",
      "lastModified" : "2024-11-21T03:20:52.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900 before 1.0.1.12, R8000 before 1.0.3.24, R8500 before 1.0.2.74, and WNR2000v2 before 1.2.0.8."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a EX3700 versiones anteriores a la versión 1.0.0.64, EX3800 versiones anteriores a la versión 1.0.0.64, EX6120 versiones anteriores a 1.0.0.32, EX6130 versiones anteriores a la versión 1.0.0.16, R6300v2 versiones anteriores a 1.0.4.12, R6700 versiones anteriores a 1.0.1.26, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.6, R7300DST versiones anteriores a 1.0.0.52, R7900 versiones anteriores a 1.0.1.12, R8000 versiones anteriores a 1.0.3.24, R8500 versiones anteriores a 1.0.2.74 y WNR2000v2 versiones anteriores a 1.2.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "B79CB764-3B62-4C39-9B68-A7C949EA91BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAA5899-B73C-4690-853E-B5400F034BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "72C578B9-6D52-492F-854F-067EB36F84B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5488D9-651C-4BAB-A141-06B816690D42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "2AC81E61-E8CD-4929-A1E2-C1B620BCC3E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6DFDB6-1D7A-459A-8D30-FD4900ED718B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.16",
            "matchCriteriaId" : "0EF0C67F-9F79-4D2D-9453-824697828403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305E295C-9C73-4798-A0BE-7973E1EE5EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "E43DA92A-E429-459F-8B34-DDED55F5590B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "DC332E60-A7DB-41C5-B1ED-FE3EDF83F8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.6",
            "matchCriteriaId" : "819CC65F-F5DA-4620-BC68-CAAA2B73195D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "02C2BB4F-8FBB-47BF-A05F-72DDC2D0A31B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "59C6F6E4-C411-486E-BDBF-75F0ABEF5112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "B9FA153F-24E0-47DE-94B4-10F51999BCF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "CC34CE8E-8DB9-4A15-80D8-EB663482A892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.8",
            "matchCriteriaId" : "C9A59121-B980-46B4-ABB8-13DEAE8F3923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5085749-A0E2-448D-B26B-7E25400F1C12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051471/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Extenders-PSV-2017-0424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051471/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Extenders-PSV-2017-0424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:11.863",
      "lastModified" : "2024-11-21T03:20:53.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX6150v2 before 1.0.0.48, R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before V1.0.3.16, R7800 before V1.0.2.36, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a D6100 versiones anteriores a V1.0.0.55, D7800 versiones anteriores a V1.0.1.24, EX6150v2 versiones anteriores a 1.0.0.48, R6100 versiones anteriores a 1.0.1.14, R7500 versiones anteriores a 1.0.0.110, R7500v2 versiones anteriores a V1.0.3.16, R7800 versiones anteriores a V1.0.2. 36, WNDR4300v1 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR2000v5 versiones anteriores a 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "A37AA7DC-5B2C-4E1B-8556-F1C9F6BBE9D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "F3197737-90A5-411B-8F3D-902D7FD3CEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9984CEE5-F523-4546-AEAD-4361D2BC6D2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "7E8197CA-84A2-4714-8EBB-04BA4B66ED29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.110",
            "matchCriteriaId" : "7F227D99-88C9-457F-BCA5-665F531E04AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.16",
            "matchCriteriaId" : "1F587C0F-5A9A-468B-B680-21EB9700DD4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "3C8BF9E6-5EEB-48A3-BF23-30FFB78F339A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049556/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049556/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.003",
      "lastModified" : "2024-11-21T03:20:53.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1.0.0.108, WNDR3700v4 before 1.0.2.86, WNDR4300v1 before 1.0.2.88, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a R6100 versiones anteriores a 1.0.1.12, R7500 versiones anteriores a 1.0.0.108, WNDR3700v4 versiones anteriores a 1.0.2.86, WNDR4300v1 versiones anteriores a 1.0.2.88, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3  versiones anteriores a 1.0.0.48 y WNR2000v5 versiones anteriores a 1.0.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D3B299C-B097-4287-B250-DA6488970976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.108",
            "matchCriteriaId" : "F05A673D-1AA7-4DDA-A00C-EBC353777417"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.86",
            "matchCriteriaId" : "469F00DE-BE32-4417-AE64-1C6340138928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3E6E8DBB-487E-45DE-990D-AF193F05BA97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.42",
            "matchCriteriaId" : "B3B5B30F-0159-48B6-BC8D-BF8F2EE519D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049553/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-and-Gateways-PSV-2017-0388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049553/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-and-Gateways-PSV-2017-0388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.050",
      "lastModified" : "2024-11-21T03:20:53.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.50, D7800 before V1.0.1.24, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, R6100 before 1.0.1.12, R6220 before 1.1.0.50, R7500 before 1.0.0.108, R7500v2 before 1.0.3.10, WNDR4300v1 before 1.0.2.88, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.40, WNR2000v5 before 1.0.0.42, WNR2020 before 1.1.0.40, and WNR2050 before 1.1.0.40."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a D6100 versiones anteriores a V1.0.0.55, D7000 versiones anteriores a V1.0.1.50, D7800 versiones anteriores a V1.0.1.24, JNR1010v2 versiones anteriores a 1.1.0.40, JWNR2010v5 versiones anteriores a 1.1.0.40, R6100 versiones anteriores a 1.0.1.12, R6220 versiones anteriores a 1.1.0.50, R7500 versiones anteriores a 1.0.0.108, R7500v2  versiones anteriores a 1.0.3.10, WNDR4300v1 versiones anteriores a 1.0.2.88, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48, WNR1000v4 versiones anteriores a 1.1.0.40, WNR2000v5 versiones anteriores a 1.0.0.42, WNR2020 versiones anteriores a 1.1.0.50 y WNR2020 versiones anteriores a 1.1.0.50, y WNR2050 versiones anteriores a 1.1.0.40."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "A37AA7DC-5B2C-4E1B-8556-F1C9F6BBE9D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "F3197737-90A5-411B-8F3D-902D7FD3CEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "B13F80BA-F4DF-4728-8591-CDEEE82BDF9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "52C2DA42-3B95-43B4-AB3B-103607B44C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D3B299C-B097-4287-B250-DA6488970976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.108",
            "matchCriteriaId" : "F05A673D-1AA7-4DDA-A00C-EBC353777417"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.10",
            "matchCriteriaId" : "B635B7C8-01C3-4C4F-B0FD-1B826801214B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3E6E8DBB-487E-45DE-990D-AF193F05BA97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "18CB70FD-790E-4342-962A-2C9D8991B3C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.42",
            "matchCriteriaId" : "B3B5B30F-0159-48B6-BC8D-BF8F2EE519D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "764C3E34-DDED-4530-A314-0D99226B9E1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.40",
            "matchCriteriaId" : "013EA9F3-64C4-4F06-989D-D00D86CF555F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049552/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Gateways-PSV-2017-0387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049552/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Gateways-PSV-2017-0387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.097",
      "lastModified" : "2024-11-21T03:20:53.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by administrative password disclosure. This affects D6220 before V1.0.0.28, D6400 before V1.0.0.60, D8500 before V1.0.3.29, DGN2200v4 before 1.0.0.82, DGN2200Bv4 before 1.0.0.82, R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 before 1.0.1.20, R7000 before 1.0.7.10, R7100LG before V1.0.0.32, R7300DST before 1.0.0.52, R7900 before 1.0.1.16, R8000 before 1.0.3.36, R8300 before 1.0.2.94, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.12, and WNR3500Lv2 before 1.2.0.40."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de una contraseña administrativa. Esto afecta a D6220 versiones anteriores a V1.0.0.28, D6400 versiones anteriores a V1.0.0.60, D8500 versiones anteriores a V1.0.3.29, DGN2200v4 versiones anteriores a 1.0.0.82, DGN2200Bv4 versiones anteriores a 1.0.0.82, R6300v2 versiones anteriores a 1.0.4.8, R6400 versiones anteriores a 1.0.1.20, R6700 versiones anteriores a 1.0.1.20, R6900 versiones anteriores a 1.0.1.20, R7000 versiones anteriores a 1.0.7.10, R7100LG versiones anteriores a V1.0.0.32, R7300DST versiones anteriores a 1.0.0.52, R7900 versiones anteriores a 1.0.1.16, R8000 versiones anteriores a 1.0.3.36, R8300 versiones anteriores a 1.0.2.94, R8500 versiones anteriores a 1.0.2.94, WNDR3400v3 versiones anteriores a 1.0.1.12 y WNR3500Lv2 versiones anteriores a 1.2.0.40."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.28",
            "matchCriteriaId" : "FA24D11F-7DF0-44E7-B122-7C5853043E71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.82",
            "matchCriteriaId" : "0B1B2D12-64D5-4A4C-82C2-D3CAF24BC728"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.82",
            "matchCriteriaId" : "10FC1B1C-1E2C-4B9D-8A08-3D01104FC1AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200b:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25090794-A90C-40CD-8E95-87EC4E98B928"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "7084EC75-5CAB-4EB3-BAED-00BFF80F71D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "AA5CCA76-ED97-4B2E-AB06-9C9F375F7C81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "E7A7A9C9-3505-440C-8806-E48AB316C2CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.10",
            "matchCriteriaId" : "B94C2A0A-F26B-4CD2-A91E-DD62C5F788B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "02C2BB4F-8FBB-47BF-A05F-72DDC2D0A31B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "628B45E0-EAE3-4ACD-82EC-8E2250F885BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.36",
            "matchCriteriaId" : "B91B7AB8-E499-416D-8E63-C49CDA753C3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "7000113A-DA3E-4F6E-A926-4682794DBC57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.40",
            "matchCriteriaId" : "8804FB5C-A72C-4413-8F74-2DCEF216F74A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049551/Security-Advisory-for-Administrative-Password-Disclosure-on-Some-Routers-and-Gateways-PSV-2017-0385",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049551/Security-Advisory-for-Administrative-Password-Disclosure-on-Some-Routers-and-Gateways-PSV-2017-0385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.253",
      "lastModified" : "2024-11-21T03:20:53.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D7000 before 1.0.1.52, D7000v2 before 1.0.0.38, D7800 before 1.0.1.24, D8500 before 1.0.3.29, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6050 before 1.0.1.14, R6220 before 1.1.0.60, R6400 before 1.1.0.26, R6400v2 before 1.0.2.46, R6700v2 before 1.2.0.2, R6800 before 1.2.0.2, R6900v2 before 1.2.0.2, R7100LG before 1.0.0.32, R7300DST before 1.0.0.56, R7500 before 1.0.0.112, R7500v2 before 1.0.3.24, R7800 before 1.0.2.36, R7900P before 1.1.4.6, R8000P before 1.1.4.6, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.94, WNDR3700v5 before 1.1.0.50, WNDR4300v1 before 1.0.2.96, WNDR4300v2 before 1.0.0.52, WNDR4500v3 before 1.0.0.52, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D6220 versiones anteriores a 1.0.0.28, D6400 versiones anteriores a 1.0.0.60, D7000 versiones anteriores a 1.0.1.52, D7000v2 versiones anteriores a 1.0.0.38, D7800 versiones anteriores a 1.0.1.24, D8500 versiones anteriores a 1.0.3.29, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.14, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6050 versiones anteriores a 1.0.1.14, R6220 versiones anteriores a 1.1.0.60, R6400 versiones anteriores a 1.1.0.26, R6400v2 versiones anteriores a 1.0.2.46, R6700v2 versiones anteriores a 1.2.0.2, R6800 versiones anteriores a 1.2.0.2, R6900v2 versiones anteriores a 1.2.0.2, R7100LG versiones anteriores a 1.0.0.32, R7300DST versiones anteriores a 1.0.0.56, R7500 versiones anteriores a 1.0.0.112, R7500v2 versiones anteriores a 1.0.3.24, R7800 versiones anteriores a 1.0.2.36, R7900P versiones anteriores a 1.1.4.6, R8000P versiones anteriores a 1.1.4.6, R8300 versiones anteriores a 1.0. 2.104, R8500 versiones anteriores a 1.0.2.104, R9000 versiones anteriores a 1.0.2.52, WNDR3700v4 versiones anteriores a 1.0.2.94, WNDR3700v5 versiones anteriores a 1.1.0.50, WNDR4300v1 versiones anteriores a 1.0.2.96, WNDR4300v2 versiones anteriores a 1.0.0.52, WNDR4500v3 versiones anteriores a 1.0.0.52, WNR1000v4 versiones anteriores a 1.1.0.42 WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.28",
            "matchCriteriaId" : "FA24D11F-7DF0-44E7-B122-7C5853043E71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.38",
            "matchCriteriaId" : "F3052AAF-AA27-4277-AA67-B9C47DF34B88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8780623-F362-4FA5-8B33-37E9CB3FEE12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "F3197737-90A5-411B-8F3D-902D7FD3CEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "E61E9642-91C9-4CA8-BB93-0DE1FEFF48BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "9886E8AE-A8D3-46E3-95E6-6EEAA2B6B581"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.26",
            "matchCriteriaId" : "CE68337A-BA04-424A-8DFC-EEE06400D60F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.46",
            "matchCriteriaId" : "DBDE97EB-05FE-475E-8A4E-13C97E91548A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.2",
            "matchCriteriaId" : "D20223D6-9BC2-40CA-9783-2DE0F5F12F64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.2",
            "matchCriteriaId" : "7E4EF1D0-C132-443E-B7FB-BE050F825D5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.2",
            "matchCriteriaId" : "1088BCE7-C53C-424F-8041-6404D42922F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "F7508FAE-C117-4E21-8D3D-0016E25363DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.112",
            "matchCriteriaId" : "56014B19-02F8-4942-9889-7F3A4EB8F106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "C38F66ED-C53D-40F4-9F1E-96254BCD8A0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.4.6",
            "matchCriteriaId" : "F889C021-1D38-4A7B-94B4-78FE47699827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.4.6",
            "matchCriteriaId" : "93CD0427-0CE9-4F1C-933D-0FE6B5626FAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EF872D-2537-4FEB-8799-499FC9D44339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "DAAB159C-27F2-4645-9FE4-4DBB4465DE3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "A79D8A77-4555-4B2A-8F19-F69AD4A17D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "026C640E-7594-4B5A-BDF9-FAB1CD135A47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.96",
            "matchCriteriaId" : "5025770E-D9D0-4FB6-BE29-1F48EDC31AF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "D26E7527-682C-4145-8AE3-F44661285514"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "29839E12-4949-49EA-B396-968BB832AE8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049543/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2957",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049543/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.410",
      "lastModified" : "2024-11-21T03:20:53.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60, R6700v2 before 1.2.0.12, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer. Esto afecta a D6200 versiones anteriores a 1.1.00.24, D7000 versiones anteriores a 1.0.1.52, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.12, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.12, R6080 versiones anteriores a 1.0.0.26, R6120 versiones anteriores a 1.0.0.36, R6220 versiones anteriores a 1.1.0.60, R6700v2 versiones anteriores a 1.2.0.12, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, WNDR3700v5 versiones anteriores a 1.1.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049541/Security-Advisory-for-Buffer-Overflow-on-Some-Routers-PSV-2017-2956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049541/Security-Advisory-for-Buffer-Overflow-on-Some-Routers-PSV-2017-2956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.473",
      "lastModified" : "2024-11-21T03:20:54.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60, R6700v2 before 1.2.0.12, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una denegación de servicio. Esto afecta a D6200 versiones anteriores a 1.1.00.24, D7000 versiones anteriores a 1.0.1.52, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.12, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.12, R6080 versiones anteriores a 1.0.0.26, R6120 versiones anteriores a 1.0.0.36, R6220 versiones anteriores a 1.1.0.60, R6700v2 versiones anteriores a 1.2.0.12, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, WNDR3700v5 versiones anteriores a 1.1.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049539/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2017-2955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049539/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2017-2955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.520",
      "lastModified" : "2024-11-21T03:20:54.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before 1.1.0.44, JR6150 before 1.0.1.12, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60, R6700v2 before 1.2.0.12, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a D6200 versiones anteriores a 1.1.00.24, D7000 versiones anteriores a 1.0.1.52, JNR1010v2 versiones anteriores a 1.1.0.44, JWNR2010v5  versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.12, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.12, R6080 versiones anteriores a 1.0.0.26, R6120 versiones anteriores a 1.0.0.36, R6220 versiones anteriores a 1.1.0.60, R6700v2 versiones anteriores a 1.2.0.12, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, WNDR3700v5 versiones anteriores a 1.1.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049538/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-2954",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049538/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-2954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.580",
      "lastModified" : "2024-11-21T03:20:54.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JR6150 before 1.0.1.12, JNR1010v2 before 1.1.0.44, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60, R6700v2 before 1.2.0.12, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a D6200 versiones anteriores a 1.1.00.24, D7000 versiones anteriores a 1.0.1.52, JR6150 versiones anteriores a 1.0.1.12, JNR1010v2 versiones anteriores a 1.1.0.44, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.12, R6080 versiones anteriores a 1.0.0.26, R6120 versiones anteriores a 1.0.0.36, R6220 versiones anteriores a 1.1.0.60, R6700v2 versiones anteriores a 1.2.0.12, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, WNDR3700v5 versiones anteriores a 1.1.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049537/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-2953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049537/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-2953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.643",
      "lastModified" : "2024-11-21T03:20:54.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60, R6700v2 before 1.2.0.12, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS. Esto afecta a D6200 versiones anteriores a 1.1.00.24, D7000 versiones anteriores a 1.0.1.52, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.12, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.12, R6080 versiones anteriores a 1.0.0.26, R6120 versiones anteriores a 1.0.0.36, R6220 versiones anteriores a 1.1.0.60, R6700v2 versiones anteriores a 1.2.0.12, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, WNDR3700v5 versiones anteriores a 1.1.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049536/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-PSV-2017-2952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049536/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-PSV-2017-2952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.770",
      "lastModified" : "2024-11-21T03:20:54.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60, R6700v2 before 1.2.0.12, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS. Esto afecta a D6200 versiones anteriores a 1.1.00.24, D7000 versiones anteriores a 1.0.1.52, JNR1010v2 versiones anteriores a 1.1.0.44, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.12, R6080 versiones anteriores a 1.0.0.26, R6120 versiones anteriores a 1.0.0.36, R6220 versiones anteriores a 1.1.0.60, R6700v2 versiones anteriores a 1.2.0.12, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, WNDR3700v5 versiones anteriores a 1.1.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "055A63BF-1787-4B72-8416-B6F77025F738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049535/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-PSV-2017-2951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049535/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-PSV-2017-2951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:12.957",
      "lastModified" : "2024-11-21T03:20:54.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220 before 1.0.0.32, D6400 before 1.0.0.66, D7000 before 1.0.1.52, D7000v2 before 1.0.0.44, D7800 before 1.0.1.30, D8500 before 1.0.3.35, DGN2200v4 before 1.0.0.96, DGN2200Bv4 before 1.0.0.96, EX2700 before 1.0.1.28, EX6100v2 before 1.0.1.54, EX6150v2 before 1.0.1.54, EX6200v2 before 1.0.1.52, EX6400 before 1.0.1.72, EX7300 before 1.0.1.72, EX8000 before 1.0.0.102, JNR1010v2 before 1.1.0.44, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.0.1.32, R6400v2 before 1.0.2.46, R6700 before 1.0.1.36, R6800 before 1.2.0.12, R6900v2 before 1.2.0.12, R6700v2 before 1.2.0.12, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.18, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.58, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R7900 before 1.0.2.4, R7900P before 1.1.5.14, R8000 before 1.0.4.4, R8000P before 1.1.5.14, R8500 before 1.0.2.110, R8300 before 1.0.2.110, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.8, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.42, WNDR3400v3 before 1.0.1.16, WNDR3700v4 before 1.0.2.94, WNDR4300 before 1.0.2.96, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.44, WNR2050 before 1.1.0.44, and WNR3500Lv2 before 1.2.0.46."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS. Esto afecta a D3600 versiones anteriores a 1.0.0.67, D6000 versiones anteriores a 1.0.0.67, D6100 versiones anteriores a 1.0.0.56, D6200 versiones anteriores a 1.1.00.24, D6220 versiones anteriores a 1.0.0.32, D6400 versiones anteriores a 1.0.0.66, D7000 versiones anteriores a 1.0.1.52, D7000v2 versiones anteriores a 1.0.0.44, D7800 versiones anteriores a 1.0.1.30, D8500 versiones anteriores a 1.0.3.35, DGN2200v4 versiones anteriores a 1.0.0.96, DGN2200Bv4 versiones anteriores a 1.0.0.96, EX2700 versiones anteriores a 1.0.1.28, EX6100v2 versiones anteriores a 1.0.1.54, EX6150v2 versiones anteriores a 1.0.1.54, EX6200v2 versiones anteriores a 1.0.1.52, EX6400 versiones anteriores a 1.0.1.72, EX7300 versiones anteriores a 1.0.1.72, EX8000 versiones anteriores a 1.0.0.102, JNR1010v2 versiones anteriores a 1.1.0.44, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6020 versiones anteriores a 1.0.0.26, R6080 versiones anteriores a 1.0.0.26, R6100 versiones anteriores a 1.0. 1.20, R6250 versiones anteriores a 1.0.4.16, R6300v2 versiones anteriores a 1.0.4.18, R6400 versiones anteriores a 1.0.1.32, R6400v2 versiones anteriores a 1.0.2.46, R6700 versiones anteriores a 1.0.1.36, R6800 versiones anteriores a 1.2.0.12, R6900v2 versiones anteriores a 1.2.0.12, R6700v2 versiones anteriores a 1.2.0.12, R6900 versiones anteriores a 1.0.1.34, R6900P versiones anteriores a 1.3.0.8, R7000 versiones anteriores a 1.0.9.18, R7000P versiones anteriores a 1.3.0.8, R7100LG versiones anteriores a 1.0.0.34, R7300DST versiones anteriores a 1.0.0.58, R7500 versiones anteriores a 1.0.0.118, R7500v2 versiones anteriores a 1. 0.3.24, R7800 versiones anteriores a 1.0.2.40, R7900 versiones anteriores a 1.0.2.4, R7900P versiones anteriores a 1.1.5.14, R8000 versiones anteriores a 1.0.4.4, R8000P versiones anteriores a 1.1.5.14, R8500 versiones anteriores a 1.0.2.110, R8300 versiones anteriores a 1.0.2.110, R9000 versiones anteriores a 1.0. 2.52, WN2000RPTv3 versiones anteriores a 1.0.1.8, WN3000RPv3 versiones anteriores a 1.0.2.50, WN3100RPv2 versiones anteriores a 1.0.0.42, WNDR3400v3 versiones anteriores a 1.0.1.16, WNDR3700v4 versiones anteriores a 1.0.2.94, WNDR4300 versiones anteriores a 1.0.2.96, WNDR4300v2 versiones anteriores a 1.0.0.50, WNDR4500v3 versión anteriores a 1.0.0.50, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2000v5 versiones anteriores a 1.0.0.62, WNR2020 versiones anteriores a 1.1.0.44, WNR2050 versiones anteriores a 1.1.0.44 y WNR3500Lv2 versiones anteriores a 1.2.0.46."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d3600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.67",
            "matchCriteriaId" : "47FB5F9D-2B33-44AD-BD57-164DF945ADA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DE9D4E-3CDC-4552-A63F-DD5D95E23F63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.67",
            "matchCriteriaId" : "2089DF5E-598C-4CC2-B910-05C8D209A1BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EA344-FF99-4F27-9860-3C5BE07345A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "1B5A756C-6CA4-46EF-80B8-9051FB607B43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "1FD6552E-5BF6-4E57-90A7-39C4543B469C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "CE087F75-4C99-425C-A9B7-B261E5545297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "327F762B-1F65-4DE0-B05C-1AAC64974A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.44",
            "matchCriteriaId" : "34A8EAED-389E-4B14-949E-ED87A09F4D91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8780623-F362-4FA5-8B33-37E9CB3FEE12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.30",
            "matchCriteriaId" : "0173E81F-5BE3-4249-A620-EC36AD109D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.35",
            "matchCriteriaId" : "9398174B-A4A6-449A-AB91-A93D3D9398DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.96",
            "matchCriteriaId" : "0ABDCFC2-E9EC-40F4-862F-B86FDD0A6AC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.96",
            "matchCriteriaId" : "0D989DB4-5276-4BCF-A15E-BC207E03B2C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200b:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25090794-A90C-40CD-8E95-87EC4E98B928"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex2700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "A7D6C145-E2CD-4030-8AA8-C4071C0E242B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5341B659-DE7D-43F1-954D-82049CBE18AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.54",
            "matchCriteriaId" : "9EFE54D2-78A3-4461-BA5E-6807911C5684"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.54",
            "matchCriteriaId" : "F476F7D7-EAE2-4A09-8C4B-A53F885A1337"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.52",
            "matchCriteriaId" : "BCBD76F6-4E46-42E1-A6B6-373F2F7DB4AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F62287-CB55-4FB1-AA39-62018654BA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.72",
            "matchCriteriaId" : "85392ECB-985F-43B2-89BE-755E433FC14B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.72",
            "matchCriteriaId" : "B0D1F6E4-A21F-4B86-B903-C26BB062D0DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.102",
            "matchCriteriaId" : "BBA04A7E-6029-498B-970E-0317BE0CF0F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.16",
            "matchCriteriaId" : "F5E7A8CA-134F-49B4-95D6-79A88CD6BB80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.18",
            "matchCriteriaId" : "55058831-92FF-4A87-8340-E25AC0DDF89E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.32",
            "matchCriteriaId" : "97DE1C91-59A0-4902-B5C7-0CFD2631CAEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.46",
            "matchCriteriaId" : "DBDE97EB-05FE-475E-8A4E-13C97E91548A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "36949C1B-4E77-447C-A206-B4E8385FA6C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "5B7CDA8C-3ED3-46B2-AC4F-330251B7F454"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.12",
            "matchCriteriaId" : "4096E4AD-F3DA-4D1D-BD48-E39235669A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "326BBECA-9A76-4A3E-90F7-023797D5D186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.18",
            "matchCriteriaId" : "03DC2062-58D1-40D6-8536-A13C87F2CF11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "09963BE1-D57D-491A-9BD8-A1A46ED993E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.34",
            "matchCriteriaId" : "2FB08FA1-A476-4E05-9904-9BE30C9E77B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "B75230D7-5B50-47C2-B5C5-C60C6974C305"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.118",
            "matchCriteriaId" : "7494430D-BA3F-4EDB-9FB8-7586D4457B9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "C38F66ED-C53D-40F4-9F1E-96254BCD8A0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.4",
            "matchCriteriaId" : "BCE1150D-8464-4421-94BD-EE81977BAC34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5.14",
            "matchCriteriaId" : "606460FB-B46F-4490-96FC-B226F3A2C55D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.4",
            "matchCriteriaId" : "78819A69-AF43-4741-AE4D-5FEC4280F25F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5.14",
            "matchCriteriaId" : "B508ABA6-F17C-43D4-88D8-56ECD0057C65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EF872D-2537-4FEB-8799-499FC9D44339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.110",
            "matchCriteriaId" : "D7A3E675-BB4F-4E8B-A041-C208F85B5C0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.110",
            "matchCriteriaId" : "63DDFEFE-402D-4AA8-A2C9-2217A5643DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn2000rpt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.8",
            "matchCriteriaId" : "B569EC22-7AB5-4136-B83E-BC466A6562B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn2000rpt:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB1BE0D-E3CF-4C16-8C11-706B238E9934"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3000rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.50",
            "matchCriteriaId" : "030AAA8B-65D9-42E4-ACF6-F2DB13D4AA30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3000rp:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71AC74-2D1B-4F1E-A70F-6590A00AAD9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3100rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.42",
            "matchCriteriaId" : "B562B414-1A33-4E81-83FF-D8750D977DDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3100rp:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8680F5-0C06-4CFC-8BA0-CF85D0438419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "72DCD4C0-A757-4F98-97BD-FB1FEBF3235C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "026C640E-7594-4B5A-BDF9-FAB1CD135A47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.96",
            "matchCriteriaId" : "5025770E-D9D0-4FB6-BE29-1F48EDC31AF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50",
            "matchCriteriaId" : "1425F7B0-0990-43F4-9621-8DAE8508FEED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50",
            "matchCriteriaId" : "81A6B7D4-1CBB-4D9E-8EB2-E5E82AFA59FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.62",
            "matchCriteriaId" : "27B33A47-E305-43CC-9AC2-C35DE8E51F02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.46",
            "matchCriteriaId" : "DB542F95-5AE2-47E4-BD7B-34134B26AA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049534/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2950",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049534/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:13.050",
      "lastModified" : "2024-11-21T03:20:55.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6050 before 1.0.1.12, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos. Esto afecta a D6200 versiones anteriores a 1.1.00.24, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.12, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6050 versiones anteriores a 1.0.1.12, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44, y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049529/Security-Advisory-for-Command-Injection-on-Some-Routers-PSV-2017-2949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049529/Security-Advisory-for-Command-Injection-on-Some-Routers-PSV-2017-2949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T15:15:13.113",
      "lastModified" : "2024-11-21T03:20:55.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6050, before 1.0.1.12, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos. Esto afecta a D6200 versiones anteriores a 1.1.00.24, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.12, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.20, R6050, versiones anteriores a 1.0.1.12, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "73B06427-B290-4AF9-A872-7505DECFFA2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.20",
            "matchCriteriaId" : "CDFB6345-0D0D-4586-9899-2438AADDCD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D69E1F4-8B63-4C99-8C65-9CFE42608AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049528/Security-Advisory-for-Command-Injection-on-Some-Routers-PSV-2017-2948",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049528/Security-Advisory-for-Command-Injection-on-Some-Routers-PSV-2017-2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.247",
      "lastModified" : "2024-11-21T03:20:51.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a R8300 versiones anteriores a 1.0.2.104 y R8500 versiones anteriores a 1.0.2.104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "DAAB159C-27F2-4645-9FE4-4DBB4465DE3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "A79D8A77-4555-4B2A-8F19-F69AD4A17D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051486/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2227",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051486/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.310",
      "lastModified" : "2024-11-21T03:20:51.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR R8000 versiones anteriores a 1.0.4.2, están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.2",
            "matchCriteriaId" : "EDC9BDA8-A1F1-42D6-8979-3FC7FA96AC62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051484/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8000-PSV-2017-2229",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051484/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8000-PSV-2017-2229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.373",
      "lastModified" : "2024-11-21T03:20:51.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6100 before 1.0.0.57, R6100 before 1.0.1.16, R6900P before 1.2.0.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R7100LG before 1.0.0.40, WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a D3600 versiones anteriores a 1.0.0.68, D6000 versiones anteriores a 1.0.0.68, D6100 versiones anteriores a 1.0.0.57, R6100 versiones anteriores a 1.0.1.16, R6900P versiones anteriores a 1.2.0.22, R7000 versiones anteriores a 1.0.9.10, R7000P versiones anteriores a 1.2.0.22, R7100LG versiones anteriores a 1.0.0.40, WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR4300v1 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR2000v5 versiones anteriores a 1.0.0.58."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d3600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.68",
            "matchCriteriaId" : "D55132B3-B7CF-4BB9-B28B-406136D0C97B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DE9D4E-3CDC-4552-A63F-DD5D95E23F63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.68",
            "matchCriteriaId" : "2B5E3F3F-237F-4ADD-8853-CEBE78AAAC36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EA344-FF99-4F27-9860-3C5BE07345A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.57",
            "matchCriteriaId" : "2ECEA129-164C-4C80-A81E-9688F4AC3583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.22",
            "matchCriteriaId" : "A8D2A56D-4AAA-4E55-AE7A-E343EA9D6133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.10",
            "matchCriteriaId" : "DD7D570E-C5EF-4D3E-BCCF-926DBDB12016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.22",
            "matchCriteriaId" : "4E7FE05C-8ACF-4D53-A6D9-2C99673CE41A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.40",
            "matchCriteriaId" : "EB388895-B579-43B7-A88E-4BD28D41F6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051483/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2017-2451",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051483/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2017-2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.433",
      "lastModified" : "2024-11-21T03:20:51.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.42, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6120 before 1.0.0.30, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.42, WNR2020 before 1.1.0.42, and WNR2050 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a JNR1010v2 versiones anteriores a 1.1.0.42, JR6150 versiones anteriores a 1.0.1.10, JWNR2010v5 versiones anteriores a 1.1.0.42, PR2000 versiones anteriores a 1.0.0.18, R6050 versiones anteriores a 1.0.1.10, R6120 versiones anteriores a 1.0.0.30, R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.2.0.4, R6900v2 versiones anteriores a 1.2.0.4, WNDR3700v5 versiones anteriores a 1.1.0.48, WNR1000v4 versiones anteriores a 1.1.0.42, WNR2020 versiones anteriores a 1.1.0.42 y WNR2050 versiones anteriores a 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0005DB1D-49BA-4099-89DC-5B4C9AA8BF6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "8D0FEB73-5572-48DE-86BE-055364878989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.18",
            "matchCriteriaId" : "6754FA98-E862-4C0B-9146-E858B15B0AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "6E91C5BC-8FAB-4D9F-BADB-D6286D531C75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "A272C3DA-043A-4621-9F16-70F9501FEE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "6880E178-51E5-47DD-8DE6-59EFDAE4FA0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "4130E37C-5B30-46E5-90B0-A7D5E163DF02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "2C4DA2EE-628D-4F25-9B7E-0F77762139B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051482/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Extenders-PSV-2017-2212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051482/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Extenders-PSV-2017-2212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.497",
      "lastModified" : "2024-11-21T03:20:51.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6100 before 1.0.1.14, R6120 before 1.0.0.30, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WNDR3700v4 before 1.0.2.88, WNDR3700v5 before 1.1.0.48, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.58, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a D6100 versiones anteriores a 1.0.0.55, D7000 versiones anteriores a 1.0.1.50, D7800 versiones anteriores a 1.0.1.28, JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.10, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.18, R6050 versiones anteriores a 1.0.1.10, R6100 versiones anteriores a 1.0.1.14, R6120 versiones anteriores a 1.0.0.30, R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.2.0.4, R6900v2 versiones anteriores a 1.2.0.4, R7500 versiones anteriores a 1.0.0.110, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R9000 versiones anteriores a 1.0.2.52, WN3000RPv3 versiones anteriores a 1.0.2.50, WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR3700v5 versiones anteriores a 1.1.0.48, WNDR4300v1 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2000v5 versiones anteriores a 1.0.0.58, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "A37AA7DC-5B2C-4E1B-8556-F1C9F6BBE9D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.18",
            "matchCriteriaId" : "6754FA98-E862-4C0B-9146-E858B15B0AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "7E8197CA-84A2-4714-8EBB-04BA4B66ED29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "6E91C5BC-8FAB-4D9F-BADB-D6286D531C75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "A272C3DA-043A-4621-9F16-70F9501FEE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.110",
            "matchCriteriaId" : "7F227D99-88C9-457F-BCA5-665F531E04AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3000rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.50",
            "matchCriteriaId" : "030AAA8B-65D9-42E4-ACF6-F2DB13D4AA30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3000rp:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71AC74-2D1B-4F1E-A70F-6590A00AAD9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051481/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051481/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.543",
      "lastModified" : "2024-11-21T03:20:51.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by denial of service. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R6700 before 1.0.1.20, R6900 before 1.0.1.20, WNR3500Lv2 before 1.2.0.44, and WNR2000v2 before 1.2.0.8."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una denegación de servicio. Esto afecta a R6300v2 versiones anteriores a 1.0.4.8, R6400 versiones anteriores a 1.0.1.22, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.20, R6900 versiones anteriores a 1.0.1.20, WNR3500Lv2 versiones anteriores a 1.2.0.44 y WNR2000v2 versiones anteriores a 1.2.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "43A9840B-1C54-4987-A179-EE8F8F8685FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "AA5CCA76-ED97-4B2E-AB06-9C9F375F7C81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "E7A7A9C9-3505-440C-8806-E48AB316C2CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.44",
            "matchCriteriaId" : "7CE20879-71BC-433E-A8B0-D1004A016B34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.8",
            "matchCriteriaId" : "C9A59121-B980-46B4-ABB8-13DEAE8F3923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5085749-A0E2-448D-B26B-7E25400F1C12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051480/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2017-0648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051480/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2017-0648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.607",
      "lastModified" : "2024-11-21T03:20:52.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0.6 and WNR2000v2 before 1.2.0.8."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a DST6501 versiones anteriores a 1.1.0.6 y WNR2000v2 versiones anteriores a 1.2.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dst6501_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.6",
            "matchCriteriaId" : "F256FC0A-7041-41D7-B0FE-624E34DC66C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dst6501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909AF8E7-A2CB-4CB0-A795-FEFBB53D95B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.8",
            "matchCriteriaId" : "C9A59121-B980-46B4-ABB8-13DEAE8F3923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5085749-A0E2-448D-B26B-7E25400F1C12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051479/Security-Advisory-for-Arbitrary-File-Read-on-DST6501-and-WNR2000v2-PSV-2017-0425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051479/Security-Advisory-for-Arbitrary-File-Read-on-DST6501-and-WNR2000v2-PSV-2017-0425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.653",
      "lastModified" : "2024-11-21T03:20:52.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6400 before 1.0.1.14, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300 before 1.0.0.56, R7800 before 1.0.2.36, R7900 before 1.0.2.10, R8000 before 1.0.3.24, R8300 before 1.0.2.74, and R8500 before 1.0.2.74."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a D7800 versiones anteriores a 1.0.1.34, D8500 versiones anteriores a 1.0.3.39, R6400 versiones anteriores a 1.0.1.14, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.4, R7100LG versiones anteriores a 1.0.0.32, R7300 versiones anteriores a 1.0.0.56, R7800 versiones anteriores a 1.0.2.36, R7900 versiones anteriores a 1.0.2.10, R8000 versiones anteriores a 1.0.3.24, R8300 versiones anteriores a 1.0.2.74 y R8500 versiones anteriores a 1.0.2.74."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "EB24F17D-A9A8-4EF9-BF53-580395D60EFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.39",
            "matchCriteriaId" : "D5E70AF3-FFD8-4ACD-9F4C-DB03BFB1125A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "BA718258-6EC3-4773-A5E9-B365F8E87473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.4",
            "matchCriteriaId" : "026E5574-7296-46A2-916D-7FF7BD3F728A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "EA41775A-0FDE-46B3-9FA2-C9C726174957"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.10",
            "matchCriteriaId" : "E0C9AB4A-497B-4D5C-93E3-430C3361E24F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "B9FA153F-24E0-47DE-94B4-10F51999BCF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "40529B5B-A0CF-4761-B623-9981F5821C1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "CC34CE8E-8DB9-4A15-80D8-EB663482A892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051476/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2017-0320",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051476/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2017-0320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T16:15:11.717",
      "lastModified" : "2024-11-21T03:20:52.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.54, EX6200v2 before 1.0.1.50, EX6400 before 1.0.1.60, EX7300 before 1.0.1.60, and WN3000RPv3 before 1.0.2.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a EX6100 versiones anteriores a 1.0.2.16_1.1.130, EX6100v2 versiones anteriores a 1.0.1.70, EX6150v2 versiones anteriores a 1.0.1.54, EX6200v2 versiones anteriores a 1.0.1.50, EX6400 versiones anteriores a 1.0.1.60, EX7300 versiones anteriores a 1.0.1.60 y WN3000RPv3 versiones anteriores a 1.0.2.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.16_1.1.130",
            "matchCriteriaId" : "8C2B3463-66AB-4C34-9252-2AC70499C2B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CD03-765C-4D4F-A176-364F8E72A4E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.70",
            "matchCriteriaId" : "4C5401F4-5D39-4A08-BB79-DD6CB2D4C94A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.54",
            "matchCriteriaId" : "F476F7D7-EAE2-4A09-8C4B-A53F885A1337"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "373DAD59-79CC-428D-AD6D-935DFD360D39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F62287-CB55-4FB1-AA39-62018654BA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "4684219C-634D-4147-B1E9-CB736FF41A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "4EB53B93-A502-4C92-830A-B0C968070AC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3000rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.44",
            "matchCriteriaId" : "2B4B8462-40AF-41A1-92EB-99C4D997766C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3000rp:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71AC74-2D1B-4F1E-A70F-6590A00AAD9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051475/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Extenders-PSV-2016-0130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051475/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Extenders-PSV-2016-0130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T17:15:11.510",
      "lastModified" : "2024-11-21T03:20:50.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.94."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a EX3700 versiones anteriores a 1.0.0.64, EX3800 versiones anteriores a 1.0.0.64, EX6120 versiones anteriores a 1.0.0.32, EX6130 versiones anteriores a 1.0.0.16, R6300v2 versiones anteriores a 1.0.4.12, R6700 versiones anteriores a 1.0.1.26, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.6, R7300DST versiones anteriores a 1.0.0.52, R7900 versiones anteriores a 1.0.1.12, R8000 versiones anteriores a 1.0.3.24 y R8500 versiones anteriores a 1.0.2.94."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "B79CB764-3B62-4C39-9B68-A7C949EA91BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAA5899-B73C-4690-853E-B5400F034BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "72C578B9-6D52-492F-854F-067EB36F84B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5488D9-651C-4BAB-A141-06B816690D42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "2AC81E61-E8CD-4929-A1E2-C1B620BCC3E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6DFDB6-1D7A-459A-8D30-FD4900ED718B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.16",
            "matchCriteriaId" : "0EF0C67F-9F79-4D2D-9453-824697828403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305E295C-9C73-4798-A0BE-7973E1EE5EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "E43DA92A-E429-459F-8B34-DDED55F5590B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "DC332E60-A7DB-41C5-B1ED-FE3EDF83F8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.6",
            "matchCriteriaId" : "819CC65F-F5DA-4620-BC68-CAAA2B73195D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "02C2BB4F-8FBB-47BF-A05F-72DDC2D0A31B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "59C6F6E4-C411-486E-BDBF-75F0ABEF5112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "B9FA153F-24E0-47DE-94B4-10F51999BCF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051502/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Extenders-PSV-2017-0319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051502/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Extenders-PSV-2017-0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T17:15:11.667",
      "lastModified" : "2024-11-21T03:20:50.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR4300v1 versiones anteriores a 1.0.2.90 y WNR2000v5 versiones anteriores a 1.0.0.58."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051494/Security-Advisory-for-Post-Authentication-Command-Injection-on-Routers-PSV-2017-0329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051494/Security-Advisory-for-Post-Authentication-Command-Injection-on-Routers-PSV-2017-0329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T17:15:11.777",
      "lastModified" : "2024-11-21T03:20:50.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56, R7300 before 1.0.0.54, R8300 before 1.0.2.106, R8500 before 1.0.2.106, DGN2200v4 before 1.0.0.86, DGND2200Bv4 before 1.0.0.86, R6050 before 1.0.0.86, JR6150 before 1.0.1.10, R6220 before 1.1.0.50, and WNDR3700v5 before V1.1.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a R6300v2 versiones anteriores a 1.0.4.8, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R7000P versiones anteriores a 1.0.0.86, R6900P versiones anteriores a 1.0.0.56, R7300 versiones anteriores a 1.0.0.54, R8300 versiones anteriores a 1.0.2.106, R8500 versiones anteriores a 1.0.2.106, DGN2200v4 versiones anteriores a 1.0.0.86, DGND2200Bv4 versiones anteriores a 1.0.0.86, R6050 versiones anteriores a 1.0.0.86, JR6150 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50 y WNDR3700v5 versiones anteriores a V1.1.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.86",
            "matchCriteriaId" : "5DE72464-B835-46E1-ABFE-47EC0FFB390A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "D264AB39-63DD-4B32-9A91-D86A3700733D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "BCE9CF95-192E-4D43-9DAD-2C8D9AF045E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "4DFD7557-D13D-40EB-94AD-AF092CDE587A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.86",
            "matchCriteriaId" : "3647BF25-4B37-4957-9E9D-10C1E78D4D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgnd2200b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.86",
            "matchCriteriaId" : "5D0512B6-4648-419C-8710-88E154944201"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgnd2200b:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EBFFCE-0D9E-4383-8CD6-3DC4D2412446"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.86",
            "matchCriteriaId" : "329E52C3-1C01-46DB-9151-0B4C0810AEB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051493/Security-Advisory-for-Cross-Site-Request-Forgery-on-Routers-and-Modem-Routers-PSV-2017-0333",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051493/Security-Advisory-for-Cross-Site-Request-Forgery-on-Routers-and-Modem-Routers-PSV-2017-0333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T17:15:11.870",
      "lastModified" : "2024-11-21T03:20:50.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.66, D8500 before 1.0.3.35, DGN2200Bv4 before 1.0.0.94, DGN2200v4 before 1.0.0.94, R6250 before 1.0.4.14, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.30, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7900 before 1.0.2.4, R8000 before 1.0.4.2, WN2500RPv2 before 1.0.1.50, WNDR3400v3 before 1.0.1.14, and WNDR4000 before 1.0.2.10."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D6220 versiones anteriores a 1.0.0.32, D6400 versiones anteriores a 1.0.0.66, D8500 versiones anteriores a 1.0.3.35, DGN2200Bv4 versiones anteriores a 1.0.0.94, DGN2200v4 versiones anteriores a 1.0.0.94, R6250 versiones anteriores a 1.0.4.14, R6300v2 versiones anteriores a 1.0.4.18, R6400 versiones anteriores a 1.01.32, R6400v2 versiones anteriores a 1.0.2.44, R6700 versiones anteriores a 1.0.1.36, R6900 versiones anteriores a 1.0.1.30, R6900P versiones anteriores a 1.3.0.8, R7000 versiones anteriores a 1.0.9.14, R7000P versiones anteriores a 1.3.0.8, R7100LG versiones anteriores a 1.0.0.34, R7900 versiones anteriores a 1.0.2.4, R8000 versiones anteriores a 1.0.4.2, WN2500RPv2 versiones anteriores a 1.0.1.50, WNDR3400v3 versiones anteriores a 1.0.1.14 y WNDR4000 versiones anteriores a 1.0.2.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "1FD6552E-5BF6-4E57-90A7-39C4543B469C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "CE087F75-4C99-425C-A9B7-B261E5545297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.35",
            "matchCriteriaId" : "9398174B-A4A6-449A-AB91-A93D3D9398DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.94",
            "matchCriteriaId" : "D5C27C8A-1B80-47CD-B015-14588F4F8732"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200b:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25090794-A90C-40CD-8E95-87EC4E98B928"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.94",
            "matchCriteriaId" : "FCA60A85-77FF-41BF-89FA-7EB3ACFECDB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.14",
            "matchCriteriaId" : "2DD089FE-0DBF-4C3B-AA02-3A0A27CF9D76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.18",
            "matchCriteriaId" : "55058831-92FF-4A87-8340-E25AC0DDF89E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01.32",
            "matchCriteriaId" : "54D9B854-7E18-439E-8FD2-C0EC88DA6222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.44",
            "matchCriteriaId" : "DDC0DA75-5EB9-4F53-99A9-798FFBFD0C15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.30",
            "matchCriteriaId" : "F4E70DE3-B7E2-4F51-84E7-045BBCCFAD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "326BBECA-9A76-4A3E-90F7-023797D5D186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.14",
            "matchCriteriaId" : "CDE61DB5-86A6-4810-91CC-18D05DC09507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "09963BE1-D57D-491A-9BD8-A1A46ED993E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.34",
            "matchCriteriaId" : "2FB08FA1-A476-4E05-9904-9BE30C9E77B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.4",
            "matchCriteriaId" : "BCE1150D-8464-4421-94BD-EE81977BAC34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.2",
            "matchCriteriaId" : "EDC9BDA8-A1F1-42D6-8979-3FC7FA96AC62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn2500rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "E194887B-3570-4E0F-B8DC-072676EDA4A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn2500rp:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4C1B98-9551-4862-AEAC-3D5C313BD275"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "DF8551B9-72D9-46B8-9F66-EE7841E29A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.10",
            "matchCriteriaId" : "BEC68564-E9BB-4248-A238-2806A9CE824B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C34EC74-D6F1-46F1-B47E-E62793171427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051492/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051492/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T17:15:11.963",
      "lastModified" : "2024-11-21T03:20:50.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.16, R7500 before 1.0.0.116, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR4300v2 before 1.0.0.48, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D7800 versiones anteriores a 1.0.1.30, R6100 versiones anteriores a 1.0.1.16, R7500 versiones anteriores a 1.0.0.116, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R9000 versiones anteriores a 1.0.2.40, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4300v1 versiones anteriores a 1.0.2.90, y WNDR4500v3 versiones anteriores a 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.30",
            "matchCriteriaId" : "0173E81F-5BE3-4249-A620-EC36AD109D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.116",
            "matchCriteriaId" : "65C14251-4C0A-4C72-803D-25BCAC83159C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A1664969-D326-4EC5-BF0D-E43820CCB378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051491/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2016-0120",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051491/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2016-0120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-22T17:15:12.103",
      "lastModified" : "2024-11-21T03:20:50.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42 y R6900v2 versiones anteriores a 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051487/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2157",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051487/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.400",
      "lastModified" : "2024-11-21T03:20:48.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61, D6000 before 1.0.0.61, D6100 before 1.0.0.55, D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D3600 versiones anteriores a 1.0.0.61, D6000 versiones anteriores a 1.0.0.61, D6100 versiones anteriores a 1.0.0.55, D7800 versiones anteriores a 1.0.1.28, R6100 versiones anteriores a 1.0.1.16, R7500 versiones anteriores a 1.0.0.112, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R9000 versiones anteriores a 1.0.2.40, WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR4300 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR2000v5 versiones anteriores a 1.0.0.58."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d3600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.61",
            "matchCriteriaId" : "63465654-D9ED-454C-9A42-0E648952B3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DE9D4E-3CDC-4552-A63F-DD5D95E23F63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.61",
            "matchCriteriaId" : "D1E5FEB3-943A-44F7-9803-3B6DBDC1253E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EA344-FF99-4F27-9860-3C5BE07345A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "A37AA7DC-5B2C-4E1B-8556-F1C9F6BBE9D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.112",
            "matchCriteriaId" : "56014B19-02F8-4942-9889-7F3A4EB8F106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A1664969-D326-4EC5-BF0D-E43820CCB378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E0A938-7669-4B25-97B8-5E3290333DBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051515/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-0615",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051515/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-0615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.507",
      "lastModified" : "2024-11-21T03:20:48.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.0.1.20, R7000 before 1.0.7.10, R7000P before 1.0.0.58, R6900P before 1.0.0.58, R7100LG before 1.0.0.32, R7900 before 1.0.1.14, R8000 before 1.0.3.22, and R8500 before 1.0.2.94."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R6250 versiones anteriores a 1.0.4.8, R6300v2 versiones anteriores a 1.0.4.8, R6700 versiones anteriores a 1.0.1.20, R7000 versiones anteriores a 1.0.7.10, R7000P versiones anteriores a 1.0.0.58, R6900P versiones anteriores a 1.0.0.58, R7100LG versiones anteriores a 1.0.0.32, R7900 versiones anteriores a 1.0.1.14, R8000 versiones anteriores a 1.0.3.22 y R8500 versiones anteriores a 1.0.2.94."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "13B4777D-CC2E-4A6B-946F-3E511D8D4B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "AA5CCA76-ED97-4B2E-AB06-9C9F375F7C81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.10",
            "matchCriteriaId" : "B94C2A0A-F26B-4CD2-A91E-DD62C5F788B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "3F0C755C-3012-440E-BE85-D98D41F54ED9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "A6BA926B-4B26-4478-837A-A3B2DE734392"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "1448301E-26E2-4D7E-ABB1-D8C8C2A11154"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.22",
            "matchCriteriaId" : "9A6831F5-19C9-4577-9BC0-FD1F2211EC6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051514/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0335",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051514/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.570",
      "lastModified" : "2024-11-21T03:20:48.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6250 before 1.0.4.12, R6300v2 before 1.0.4.8, R6700 before 1.0.1.16, R6900 before 1.0.1.16, R7300DST before 1.0.0.54, R7900 before 1.0.1.12, R8000 before 1.0.3.32, and R8500 before 1.0.2.74."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a JR6150 versiones anteriores a 1.0.1.10, R6050 versiones anteriores a 1.0.1.10, R6250 versiones anteriores a 1.0.4.12, R6300v2 versiones anteriores a 1.0.4.8, R6700 versiones anteriores a 1.0.1.16, R6900 versiones anteriores a 1.0.1.16, R7300DST versiones anteriores a 1.0.0.54, R7900 versiones anteriores a 1.0.1.12, R8000 versiones anteriores a 1.0.3.32 y R8500 versiones anteriores a 1.0.2.74."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "F3464F16-A6EB-47C0-B2B5-54E86743DC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "1A08B1CF-6BDA-4D50-9146-2B580593FBAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "7B3C16D1-4124-4CBB-8717-738E13C25C47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "F0EE8EBA-C4CD-4CA1-A684-54338B1254A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "59C6F6E4-C411-486E-BDBF-75F0ABEF5112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.32",
            "matchCriteriaId" : "F30C70DD-52EE-49C1-89B7-0D579B5090D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "CC34CE8E-8DB9-4A15-80D8-EB663482A892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051513/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051513/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.617",
      "lastModified" : "2024-11-21T03:20:48.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 before 1.0.1.20, R7000 before 1.0.7.10, R7100LG before V1.0.0.32, R7300DST before 1.0.0.52, R7900 before 1.0.1.16, R8000 before 1.0.3.36, R8300 before 1.0.2.94, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.12, and WNR3500Lv2 before 1.2.0.40."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a R6300v2 versiones anteriores a 1.0.4.8, R6400 versiones anteriores a 1.0.1.20, R6700 versiones anteriores a 1.0.1.20, R6900 versiones anteriores a 1.0.1.20, R7000 versiones anteriores a 1.0.7.10, R7100LG versiones anteriores a V1.0.0.32, R7300DST versiones anteriores a 1.0.0.52, R7900 versiones anteriores a 1.0. 1.16, R8000 versiones anteriores a 1.0.3.36, R8300 versiones anteriores a 1.0.2.94, R8500 versiones anteriores a 1.0.2.94, WNDR3400v3 versiones anteriores a 1.0.1.12 y WNR3500Lv2 versiones anteriores a 1.2.0.40."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "7084EC75-5CAB-4EB3-BAED-00BFF80F71D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "AA5CCA76-ED97-4B2E-AB06-9C9F375F7C81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "E7A7A9C9-3505-440C-8806-E48AB316C2CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.10",
            "matchCriteriaId" : "B94C2A0A-F26B-4CD2-A91E-DD62C5F788B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "02C2BB4F-8FBB-47BF-A05F-72DDC2D0A31B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "628B45E0-EAE3-4ACD-82EC-8E2250F885BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.36",
            "matchCriteriaId" : "B91B7AB8-E499-416D-8E63-C49CDA753C3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "7000113A-DA3E-4F6E-A926-4682794DBC57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.40",
            "matchCriteriaId" : "8804FB5C-A72C-4413-8F74-2DCEF216F74A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051512/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2017-0330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051512/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2017-0330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.680",
      "lastModified" : "2024-11-21T03:20:49.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un atacante no autenticado. Esto afecta a R6250 versiones anteriores a 1.0.4.12, R6300v2 versiones anteriores a 1.0.4.12, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.4, R7900 versiones anteriores a 1.0.1.12, R8000 versiones anteriores a 1.0.3.24 y R8500 versiones anteriores a 1.0.2.74 ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "F3464F16-A6EB-47C0-B2B5-54E86743DC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.12",
            "matchCriteriaId" : "E43DA92A-E429-459F-8B34-DDED55F5590B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.4",
            "matchCriteriaId" : "026E5574-7296-46A2-916D-7FF7BD3F728A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "59C6F6E4-C411-486E-BDBF-75F0ABEF5112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "B9FA153F-24E0-47DE-94B4-10F51999BCF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "CC34CE8E-8DB9-4A15-80D8-EB663482A892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051511/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051511/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.743",
      "lastModified" : "2024-11-21T03:20:49.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects R6400 before 1.0.1.14, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300DST before 1.0.0.56, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS almacenado. Esto afecta a R6400 versiones anteriores a 1.0.1.14, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.4, R7100LG versiones anteriores a 1.0.0.32, R7300DST versiones anteriores a 1.0.0.56, R7900 versiones anteriores a 1.0.1.12, R8000 versiones anteriores a 1.0.3.24, y R8500 versiones anteriores a 1.0.2.74."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "BA718258-6EC3-4773-A5E9-B365F8E87473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.4",
            "matchCriteriaId" : "026E5574-7296-46A2-916D-7FF7BD3F728A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "F7508FAE-C117-4E21-8D3D-0016E25363DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "59C6F6E4-C411-486E-BDBF-75F0ABEF5112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.24",
            "matchCriteriaId" : "B9FA153F-24E0-47DE-94B4-10F51999BCF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "CC34CE8E-8DB9-4A15-80D8-EB663482A892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051510/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2017-0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051510/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2017-0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.807",
      "lastModified" : "2024-11-21T03:20:49.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a EX3700 versiones anteriores a 1.0.0.64, EX3800 versiones anteriores a 1.0.0.64, EX6000 versiones anteriores a 1.0.0.24, EX6130 versiones anteriores a 1.0.0.16, EX6400 versiones anteriores a 1.0.1.60, EX7000 versiones anteriores a 1.0.0.50, EX7300 versiones anteriores a 1.0.1.60 y WN2500RPv2 versiones anteriores a 1.0.1.46 ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "B79CB764-3B62-4C39-9B68-A7C949EA91BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAA5899-B73C-4690-853E-B5400F034BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "72C578B9-6D52-492F-854F-067EB36F84B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5488D9-651C-4BAB-A141-06B816690D42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.24",
            "matchCriteriaId" : "520E4E2B-FF48-4B11-8A41-975B1A5E9FA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E7CA7E-E6CA-4BAB-8F40-4731EA523D91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.16",
            "matchCriteriaId" : "0EF0C67F-9F79-4D2D-9453-824697828403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305E295C-9C73-4798-A0BE-7973E1EE5EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "4684219C-634D-4147-B1E9-CB736FF41A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50",
            "matchCriteriaId" : "0CE0EC7C-EA3B-4624-BDA4-9FE3257B9E69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45B620-60B8-40F3-A055-181ADD71EFFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "4EB53B93-A502-4C92-830A-B0C968070AC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn2500rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.46",
            "matchCriteriaId" : "07CEF0FF-41A1-485B-8CDA-DB7AE8ECDB69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn2500rp:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4C1B98-9551-4862-AEAC-3D5C313BD275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051508/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051508/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.883",
      "lastModified" : "2024-11-21T03:20:49.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a EX3700 versiones anteriores a 1.0.0.64, EX3800 versiones anteriores a 1.0.0.64, EX6000 versiones anteriores a 1.0.0.24, EX6130 versiones anteriores a 1.0.0.16, EX6400 versiones anteriores a 1.0.1.60, EX7000 versiones anteriores a 1.0.0.50, EX7300 versiones anteriores a 1.0.1.60 y WN2500RPv2 versiones anteriores a 1.0.1.46 ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "B79CB764-3B62-4C39-9B68-A7C949EA91BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAA5899-B73C-4690-853E-B5400F034BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "72C578B9-6D52-492F-854F-067EB36F84B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5488D9-651C-4BAB-A141-06B816690D42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.24",
            "matchCriteriaId" : "520E4E2B-FF48-4B11-8A41-975B1A5E9FA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E7CA7E-E6CA-4BAB-8F40-4731EA523D91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.16",
            "matchCriteriaId" : "0EF0C67F-9F79-4D2D-9453-824697828403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305E295C-9C73-4798-A0BE-7973E1EE5EAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "4684219C-634D-4147-B1E9-CB736FF41A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.50",
            "matchCriteriaId" : "0CE0EC7C-EA3B-4624-BDA4-9FE3257B9E69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45B620-60B8-40F3-A055-181ADD71EFFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "4EB53B93-A502-4C92-830A-B0C968070AC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn2500rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.46",
            "matchCriteriaId" : "07CEF0FF-41A1-485B-8CDA-DB7AE8ECDB69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn2500rp:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4C1B98-9551-4862-AEAC-3D5C313BD275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051507/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051507/Security-Advisory-for-Security-Misconfiguration-on-Some-Extenders-PSV-2016-0115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.930",
      "lastModified" : "2024-11-21T03:20:49.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX6200v2 before 1.0.1.44, R6100 before 1.0.1.12, R7500 before 1.0.0.108, R7500v2 before 1.0.3.10, R7800 before 1.0.2.28, R9000 before 1.0.2.30, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a EX6200v2 versiones anteriores a 1.0.1.44, R6100 versiones anteriores a 1.0.1.12, R7500 versiones anteriores a 1.0.0.108, R7500v2 versiones anteriores a 1.0.3.10, R7800 versiones anteriores a 1.0.2.28, R9000 versiones anteriores a 1.0.2.30, WNDR4300v2 versiones anteriores a 1.0.0.48 y WNDR4500v3 versiones anteriores a 1.0.0.48 ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.44",
            "matchCriteriaId" : "5F842864-3FAC-4F97-BC55-7B5AA73437D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F62287-CB55-4FB1-AA39-62018654BA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.12",
            "matchCriteriaId" : "8D3B299C-B097-4287-B250-DA6488970976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.108",
            "matchCriteriaId" : "F05A673D-1AA7-4DDA-A00C-EBC353777417"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.10",
            "matchCriteriaId" : "B635B7C8-01C3-4C4F-B0FD-1B826801214B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.28",
            "matchCriteriaId" : "1815E034-5CA2-4511-A4BD-9E124AD17F9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.30",
            "matchCriteriaId" : "DD73BEE6-58BC-4FC9-98B9-43E1E32EE366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051506/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Extenders-PSV-2016-0104",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051506/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Extenders-PSV-2016-0104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:12.993",
      "lastModified" : "2024-11-21T03:20:49.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, R6050 before 1.0.1.10, R6100 before 1.0.1.16, R6220 before 1.1.0.50, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR3700v4 before 1.0.2.88, WNDR3700v5 before 1.1.0.48, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.58, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.10, JWNR2010v5 versiones anteriores a 1.1.0.44, R6050 versiones anteriores a 1.0.1.10, R6100 versiones anteriores a 1.0.1.16, R6220 versiones anteriores a 1.1.0.50, R7500 versiones anteriores a 1.0.0.112, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R9000 versiones anteriores a 1.0.2.40, WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR3700v5 versiones anteriores a 1.1.0.48, WNDR4300 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2 1.0.0.58, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.112",
            "matchCriteriaId" : "56014B19-02F8-4942-9889-7F3A4EB8F106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A1664969-D326-4EC5-BF0D-E43820CCB378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051505/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2016-0101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051505/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2016-0101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:13.057",
      "lastModified" : "2024-11-21T03:20:49.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a 1.1.00.24, R6700v2 versiones anteriores a 1.1.0.42, R6800 versiones anteriores a 1.1.0.42 y R6900v2 versiones anteriores a 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051504/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2133",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051504/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T16:15:13.103",
      "lastModified" : "2024-11-21T03:20:50.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D7800 versiones anteriores a 1.0.1.28, R6100 versiones anteriores a 1.0.1.16, R7500 versiones anteriores a 1.0.0.112, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, R9000 versiones anteriores a 1.0.2.52, WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR4300 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48 y WNDR4500v3 versiones anteriores a 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.112",
            "matchCriteriaId" : "56014B19-02F8-4942-9889-7F3A4EB8F106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051503/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2517",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051503/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:11.613",
      "lastModified" : "2024-11-21T03:20:46.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a R6300v2 versiones anteriores a 1.0.4.8, PLW1000v2 versiones anteriores a 1.0.0.14 y PLW1010v2 versiones anteriores a 1.0.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "F8097CEE-2577-4C44-9260-8B2DD2D2CA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:plw1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.14",
            "matchCriteriaId" : "FA23B6B8-EC5D-4458-948E-C2793EB20EA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:plw1000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09B6D87-8488-4492-8C76-44C7959618FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:plw1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.14",
            "matchCriteriaId" : "DFEA5486-11CD-413B-BB51-ABB718B2C253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:plw1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4376994-6719-4E78-8881-4F8C2E7D2937"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051523/Security-Advisory-for-Authentication-Bypass-on-R6300v2-PLW1000v2-and-PLW1010v2-PSV-2016-0069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051523/Security-Advisory-for-Authentication-Bypass-on-R6300v2-PLW1000v2-and-PLW1010v2-PSV-2016-0069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:11.753",
      "lastModified" : "2024-11-21T03:20:46.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R7100LG before 1.0.0.32, R7300DST before 1.0.0.52, R8300 before 1.0.2.94, and R8500 before 1.0.2.100."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a D6220 versiones anteriores a 1.0.0.28, D6400 versiones anteriores a 1.0.0.60, D8500 versiones anteriores a 1.0.3.29, R6250 versiones anteriores a 1.0.4.8, R6400 versiones anteriores a 1.0.1.22, R6400v2 versiones anteriores a 1.0.2.32, R7100LG versiones anteriores a 1.0.0.32, R7300DST versiones anteriores a 1.0.0.52, R8300 versiones anteriores a 1.0.2.94 y R8500 versiones anteriores a 1.0.2.100."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.28",
            "matchCriteriaId" : "FA24D11F-7DF0-44E7-B122-7C5853043E71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.8",
            "matchCriteriaId" : "13B4777D-CC2E-4A6B-946F-3E511D8D4B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "43A9840B-1C54-4987-A179-EE8F8F8685FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.52",
            "matchCriteriaId" : "02C2BB4F-8FBB-47BF-A05F-72DDC2D0A31B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.100",
            "matchCriteriaId" : "CEE4B878-05AB-4B45-BCA4-28795AA454F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051522/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Gateways-PSV-2016-0061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051522/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Gateways-PSV-2016-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:11.910",
      "lastModified" : "2024-11-21T03:20:47.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.10, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.18, R6050 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.2.0.4, R6900v2 versiones anteriores a 1.2.0.4, WNDR3700v5 versiones anteriores a 1.1.0.48, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.18",
            "matchCriteriaId" : "6754FA98-E862-4C0B-9146-E858B15B0AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "A272C3DA-043A-4621-9F16-70F9501FEE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051521/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Extenders-PSV-2017-2154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051521/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Extenders-PSV-2017-2154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:12.147",
      "lastModified" : "2024-11-21T03:20:47.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, and R6900v2 before 1.2.0.4."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a JR6150 versiones anteriores a 1.0.1.10, R6050 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.2.0.4, R6900v2 versiones anteriores a 1.2.0.4 y WNDR3700v5 versiones anteriores a 1.1.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.18",
            "matchCriteriaId" : "6754FA98-E862-4C0B-9146-E858B15B0AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "A272C3DA-043A-4621-9F16-70F9501FEE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051520/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Extenders-PSV-2017-2143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051520/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Extenders-PSV-2017-2143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:12.427",
      "lastModified" : "2024-11-21T03:20:47.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, and WNDR3700v5 before 1.1.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a JR6150 versiones anteriores a 1.0.1.10, R6050 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.2.0.4, R6900v2 versiones anteriores a 1.2.0.4 y WNDR3700v5 versiones anteriores a 1.1.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "A272C3DA-043A-4621-9F16-70F9501FEE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051519/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2017-2142",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051519/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2017-2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:12.490",
      "lastModified" : "2024-11-21T03:20:47.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a JNR1010v2 versiones anteriores a 1.1.0.44, JR6150 versiones anteriores a 1.0.1.10, JWNR2010v5 versiones anteriores a 1.1.0.44, PR2000 versiones anteriores a 1.0.0.18, R6050 versiones anteriores a 1.0.1.10, R6220 versiones anteriores a 1.1.0.50, R6700v2 versiones anteriores a 1.2.0.4, R6800 versiones anteriores a 1.2.0.4, R6900v2 versiones anteriores a 1.2.0.4, WNDR3700v5 versiones anteriores a 1.1.0.48, WNR1000v4 versiones anteriores a 1.1.0.44, WNR2020 versiones anteriores a 1.1.0.44 y WNR2050 versiones anteriores a 1.1.0.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "FC9E7939-E195-44AB-8880-D0BCF26BF2E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "4B5D8AD4-6C67-4DC7-99DF-B29DBA4BC376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "34429B2B-D8CB-4BEC-B5FA-5C7F8AC9A1FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.18",
            "matchCriteriaId" : "6754FA98-E862-4C0B-9146-E858B15B0AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.10",
            "matchCriteriaId" : "CB4D669D-D6C4-403E-896D-55EE4EEB7C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "0EA5FF68-8609-4692-8DBF-A12606882BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "A272C3DA-043A-4621-9F16-70F9501FEE46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.4",
            "matchCriteriaId" : "8B89AB47-7117-4FA7-B8F1-36D0C281C403"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "E5684DEA-5F12-4E72-B8D1-C5F3E1D22726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "36CCD48D-4474-4363-8DE6-846714B99D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.44",
            "matchCriteriaId" : "436026D2-0B8E-4BA5-AD34-9EB285EDA78A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051518/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Extenders-PSV-2017-2140",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051518/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Extenders-PSV-2017-2140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:12.550",
      "lastModified" : "2024-11-21T03:20:48.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX6150v2 before 1.0.1.54, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R6900P before 1.2.0.22, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R6100 before 1.0.1.16, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a EX6150v2 versiones anteriores a 1.0.1.54, R6400 versiones anteriores a 1.0.1.24, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.10, R7000P versiones anteriores a 1.2.0.22, R6900P versiones anteriores a 1.2.0.22, R7100LG versiones anteriores a 1.0.0.32, R7300DST versiones anteriores a 1.0.0.54, R7900 versiones anteriores a 1.0.1.18, R8000 versiones anteriores a 1.0.3.48, R8300 versiones anteriores a 1.0.2.106, R8500 versiones anteriores a 1.0.2.106, R6100 versiones anteriores a 1.0.1.16, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR2000v5 versiones anteriores a 1.0.0.58."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.54",
            "matchCriteriaId" : "F476F7D7-EAE2-4A09-8C4B-A53F885A1337"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "29EA60BF-FBA6-4305-8173-07130A527410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.10",
            "matchCriteriaId" : "DD7D570E-C5EF-4D3E-BCCF-926DBDB12016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.22",
            "matchCriteriaId" : "4E7FE05C-8ACF-4D53-A6D9-2C99673CE41A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.22",
            "matchCriteriaId" : "A8D2A56D-4AAA-4E55-AE7A-E343EA9D6133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "F0EE8EBA-C4CD-4CA1-A684-54338B1254A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.48",
            "matchCriteriaId" : "7393D4D7-F607-423E-917E-FE520D7A3A73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "BCE9CF95-192E-4D43-9DAD-2C8D9AF045E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "4DFD7557-D13D-40EB-94AD-AF092CDE587A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051517/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Extenders-PSV-2017-0706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051517/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Extenders-PSV-2017-0706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-23T17:15:12.613",
      "lastModified" : "2024-11-21T03:20:48.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1.0.50, R7800 before V1.0.2.36, WNDR3400v3 before 1.0.1.14, and WNDR3700v5 before V1.1.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un atacante no autenticado. Esto afecta a R6220 versiones anteriores a V1.1.0.50, R7800 versiones anteriores a V1.0.2.36, WNDR3400v3 versiones anteriores a 1.0.1.14 y WNDR3700v5 versiones anteriores a V1.1.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.50",
            "matchCriteriaId" : "E464FF8D-6202-40BA-9740-9CCE2BC23607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.14",
            "matchCriteriaId" : "DF8551B9-72D9-46B8-9F66-EE7841E29A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051516/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0670",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051516/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T13:15:11.407",
      "lastModified" : "2024-11-21T03:20:46.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados  por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051527/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051527/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T13:15:11.500",
      "lastModified" : "2024-11-21T03:20:46.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6020 versiones anteriores a la versión  1.0.0.30, R6080 versiones anteriores a la versión 1.0.0.30, R6120 versiones anteriores a la versión  1.0.0.36, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "8D6473B1-757C-4B6E-82D3-D1D13731F074"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "23D08587-3258-4B55-AA21-AB7E6D9A8421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051526/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051526/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T13:15:11.563",
      "lastModified" : "2024-11-21T03:20:46.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6020 versiones anteriores a la versión  1.0.0.30, R6080 versiones anteriores a la versión 1.0.0.30, R6120 versiones anteriores a la versión 1.0.0.36, R6700v2 versiones anteriores a 1.1.0.42, R6800 versiones anteriores a 1.1.0.42, y R6900v2 versiones anteriores a 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "8D6473B1-757C-4B6E-82D3-D1D13731F074"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "23D08587-3258-4B55-AA21-AB7E6D9A8421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "4FCFC43E-0B98-48F2-A705-9B1678BC31E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18D2CCD-424F-41D5-919B-E22B9FA68D36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051525/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051525/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T13:15:11.610",
      "lastModified" : "2024-11-21T03:20:46.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, and WNR2000v5 before 1.0.0.58."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R6100 versiones anteriores a la versión  1.0.1.16, R7500 versiones anteriores a 1.0.0.112, R7500v2 versiones anteriores a la verisón 1.0.3.20, R7800 versiones anteriores a la versión  1.0.2.36, y WNR2000v5 versiones anteriores a la versión 1.0.0.58."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "01A66936-4268-4990-8E83-24C74A75B9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.112",
            "matchCriteriaId" : "56014B19-02F8-4942-9889-7F3A4EB8F106"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "E380032C-2E20-4DEC-9F51-A3F4BA29056B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2500:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B347A0-081A-475E-8CCE-2FA552050C5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051524/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2016-0096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051524/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2016-0096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.483",
      "lastModified" : "2024-11-21T03:20:42.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20, R7500 before 1.0.0.118, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R6100 versiones anteriores a la versión  1.0.1.20, R7500 versiones anteriores a la versión 1.0.0.118, WNDR3700v4 versiones anteriores a la versión  1.0.2.88, WNDR4300 versiones anteriores a la versión  1.0.2.90, WNDR4300v2 versiones anteriores a la versión   1.0.0.48, WNDR4500v3 versiones anteriores a la versión  1.0.0.48, y WNR2000v5 versiones anteriores a la versión  1.0.0.62."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.118",
            "matchCriteriaId" : "7494430D-BA3F-4EDB-9FB8-7586D4457B9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.62",
            "matchCriteriaId" : "27B33A47-E305-43CC-9AC2-C35DE8E51F02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053196/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053196/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.547",
      "lastModified" : "2024-11-21T03:20:42.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un usuario autentificado. Esto afecta a R8300 versiones anteriores a la versión 1.0.2.106 y a R8500 versiones anteriores a la versión 1.0.2.106."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "BCE9CF95-192E-4D43-9DAD-2C8D9AF045E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "4DFD7557-D13D-40EB-94AD-AF092CDE587A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053158/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053158/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.607",
      "lastModified" : "2024-11-21T03:20:43.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a R8300 versiones anteriores a la versión 1.0.2.94 y a R8500 versiones anteriores a la versión  1.0.2.94."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053157/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053157/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.670",
      "lastModified" : "2024-11-21T03:20:43.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R8300 versiones anteriores a la versión 1.0.2.94 y a R8500 versiones anteriores a la versión 1.0.2.94."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "A18E8950-B107-4050-AFEF-30C20F6166FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.94",
            "matchCriteriaId" : "58EFB06D-AD59-4F40-B6EC-BD3C1BCACE7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053156/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0326",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053156/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-0326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.733",
      "lastModified" : "2024-11-21T03:20:43.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de información confidencial. Esto afecta a R8300 versiones anteriores a la versión  1.0.2.106 y a R8500 versiones anteriores a la versión 1.0.2.106."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "BCE9CF95-192E-4D43-9DAD-2C8D9AF045E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "4DFD7557-D13D-40EB-94AD-AF092CDE587A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053155/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-PSV-2017-0309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053155/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-PSV-2017-0309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.810",
      "lastModified" : "2024-11-21T03:20:43.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D7800 versiones anteriores a la versión 1.0.1.28, R6400 versiones anteriores a 1.01.32, R6400v2 versiones anteriores a 1.0.2.44, R6700 versiones anteriores a 1.0.1.36, R6900 versiones anteriores a 1.0.1.34, R6900P versiones anteriores a 1.3.0.8, R7000 versiones anteriores a 1. 0.9.14, R7000P versiones anteriores a 1.3.0.8, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.40, R9000 versiones anteriores a 1.0.2.52, WNDR4300v2 versiones anteriores a 1.0.0.48, y WNDR4500v3 versiones anteriores a 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.32",
            "matchCriteriaId" : "97DE1C91-59A0-4902-B5C7-0CFD2631CAEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.44",
            "matchCriteriaId" : "DDC0DA75-5EB9-4F53-99A9-798FFBFD0C15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "09963BE1-D57D-491A-9BD8-A1A46ED993E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.14",
            "matchCriteriaId" : "CDE61DB5-86A6-4810-91CC-18D05DC09507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "326BBECA-9A76-4A3E-90F7-023797D5D186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053137/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2016-0131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053137/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2016-0131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.857",
      "lastModified" : "2024-11-21T03:20:43.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a D7800 versiones anteriores a la versión  1.0.1.28, R6100 versiones anteriores a la versión 1.0.1.20, R7500 versiones anteriores a la versión 1.0.0.118, R7500v2 versiones anteriores a la versión 1.0.3.20, R7800 versiones anteriores a la versión  1.0.2.40, R9000 versiones anteriores a la versión 1.0.2.52, WNDR4300v2 versiones anteriores a la versión  1.0.0.48, y WNDR4500v3 versiones anteriores a la versión 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.118",
            "matchCriteriaId" : "7494430D-BA3F-4EDB-9FB8-7586D4457B9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053136/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Gateways-PSV-2016-0127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053136/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Gateways-PSV-2016-0127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.937",
      "lastModified" : "2024-11-21T03:20:43.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a D7800 versiones anteriores a la versión 1.0.1.28, R6700 versiones anteriores a la versión  1.0.1.36, R6900 versiones anteriores a la versión  1.0.1.34, R7500v2 versiones anteriores a la versión  1.0.3.20, R7800 versiones anteriores a la versión  1.0.2.40, R9000 versiones anteriores a la versión  1.0.2.52, WNDR4300v2 versiones anteriores a la versión 1.0.0.48, y WNDR4500v3 versiones anteriores a la versión 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053135/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Gateways-PSV-2016-0114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053135/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Gateways-PSV-2016-0114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:12.997",
      "lastModified" : "2024-11-21T03:20:44.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR WNDR4500v3 devices before 1.0.0.48 are affected by denial of service."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR WNDR4500v3 versiones anteriores a la versión 1.0.0.48, están afectados por una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053134/Security-Advisory-for-Denial-of-Service-on-WNDR4500v3-PSV-2016-0077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053134/Security-Advisory-for-Denial-of-Service-on-WNDR4500v3-PSV-2016-0077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.060",
      "lastModified" : "2024-11-21T03:20:44.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6100 before 1.0.2.20, EX6120 before 1.0.0.34, EX6150 before 1.0.0.36, EX6200 before 1.0.3.84, and EX7000 before 1.0.0.60."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS reflejado. Esto afecta a EX3700 versiones anteriores a la versión 1.0.0.66, EX3800 versiones anteriores a la versión 1.0.0.66, EX6100 versiones anteriores a 1.0.2.20, EX6120 versiones anteriores a 1.0.0.34, EX6150 versiones anteriores a 1.0.0.36, EX6200 versiones anteriores a 1.0.3.84, y EX7000 versiones anteriores a 1.0.0.60."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "30915FC1-9C6E-4489-B61C-EC7EC311DF8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAA5899-B73C-4690-853E-B5400F034BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "8B16C884-E17F-4E30-8027-A6CF1E489309"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5488D9-651C-4BAB-A141-06B816690D42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.20",
            "matchCriteriaId" : "F28E1B99-7B65-4876-96B4-267CAE21D8F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CD03-765C-4D4F-A176-364F8E72A4E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.34",
            "matchCriteriaId" : "10486221-D787-4403-963E-FADEF2451B77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6DFDB6-1D7A-459A-8D30-FD4900ED718B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "66193CFA-4E07-4905-B41A-C1986B830C71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46452E97-9347-4788-9570-1EECECC7255E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.84",
            "matchCriteriaId" : "D4BC0A4D-0C9D-47AD-9A9A-3416E812EC7D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3186CC67-B567-4A0C-BD2C-0433716FBD1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "42A19A73-B5FC-4D14-82D0-2128D3E7178B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45B620-60B8-40F3-A055-181ADD71EFFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053133/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Extenders-PSV-2016-0075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053133/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Extenders-PSV-2016-0075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.123",
      "lastModified" : "2024-11-21T03:20:44.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión 1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052281/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052281/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.187",
      "lastModified" : "2024-11-21T03:20:44.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión 1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión  1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052280/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2153",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052280/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.247",
      "lastModified" : "2024-11-21T03:20:44.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a  la versión 1.1.00.24, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052279/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2152",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052279/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.297",
      "lastModified" : "2024-11-21T03:20:44.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.1.00.26, R6080 before 1.1.00.26; R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6020 versiones anteriores a la versión 1.1.00.26, R6080 versiones anteriores a la versión  1.1.00.26; R6700v2 versiones anteriores a la versión 1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052278/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2150",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052278/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.373",
      "lastModified" : "2024-11-21T03:20:44.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a D6200 versiones anteriores a la versión1.1.00.24, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42, y R6900v2 versiones anteriores a la versión  1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052277/Security-Advisory-for-Authentication-Bypass-on-Routers-PSV-2017-2148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052277/Security-Advisory-for-Authentication-Bypass-on-Routers-PSV-2017-2148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.733",
      "lastModified" : "2024-11-21T03:20:45.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria  por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión 1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052276/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2147",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052276/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.797",
      "lastModified" : "2024-11-21T03:20:45.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria  por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052275/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052275/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.857",
      "lastModified" : "2024-11-21T03:20:45.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión 1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión  1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052274/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052274/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.920",
      "lastModified" : "2024-11-21T03:20:45.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42, y R6900v2 versiones anteriores a la versión  1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000052273/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000052273/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:13.983",
      "lastModified" : "2024-11-21T03:20:45.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24. R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24. R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión  1.1.0.42, y R6900v2 versiones anteriores a la versión  1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051530/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051530/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:14.047",
      "lastModified" : "2024-11-21T03:20:45.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a R6020 versiones anteriores a la versión  1.0.0.30, R6080 versiones anteriores a la versión  1.0.0.30, R6700v2 versiones anteriores a la versión 1.1.0.42, R6800 versiones anteriores a la versión1.1.0.42, y R6900v2 versiones anteriores a la versión 1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "8D6473B1-757C-4B6E-82D3-D1D13731F074"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.30",
            "matchCriteriaId" : "23D08587-3258-4B55-AA21-AB7E6D9A8421"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051529/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2139",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051529/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T14:15:14.107",
      "lastModified" : "2024-11-21T03:20:46.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a D6200 versiones anteriores a la versión 1.1.00.24, R6700v2 versiones anteriores a la versión  1.1.0.42, R6800 versiones anteriores a la versión 1.1.0.42 y R6900v2 versiones anteriores a la versión  1.1.0.42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.00.24",
            "matchCriteriaId" : "BA902AA9-525D-46BD-B586-1A0DC40EE391"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E6A1B7-4732-4259-9B71-10FF0B56A16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "18561B1D-4322-4B55-A0AD-2F6F5C29AAD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "0A50BDA0-AD10-4CDD-84E7-65A6EAB67D80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09404083-B00B-4C1F-8085-BC242E625CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.42",
            "matchCriteriaId" : "E6F44CFF-B8D7-465B-B0B5-CFAD6ABC2D89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051528/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051528/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Routers-PSV-2017-2138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.160",
      "lastModified" : "2024-11-21T03:20:41.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a R7800 versiones anteriores a la versión 1.0.2.40 y R9000 versiones anteriores a la versión  1.0.2.52."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053205/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053205/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.223",
      "lastModified" : "2024-11-21T03:20:41.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 before 1.0.1.20, R7800 before 1.0.2.40, and R9000 before 1.0.2.52."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a R6100 versiones anteriores a la versión 1.0.1.20, R7800 versiones anteriores a la versión  1.0.2.40 y R9000 versiones anteriores a la versión  1.0.2.52."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053204/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2626",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053204/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.287",
      "lastModified" : "2024-11-21T03:20:41.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a R7800 versiones anteriores a la versión 1.0.2.40 y R9000 versiones anteriores a la versión  1.0.2.52."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053203/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2595",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053203/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.363",
      "lastModified" : "2024-11-21T03:20:41.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R9000 before 1.0.2.52, WNDR3400v3 before 1.0.1.16, WNR3500Lv2 before 1.2.0.46, and WNDR3700v5 before 1.1.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS almacenado. Esto afecta a D6400 versiones anteriores a la versión 1.0.0.60, D7000 versiones anteriores a la versión 1.0.1.50, D8500 versiones anteriores a la versión 1.0.3.29, EX6200 versiones anteriores a la versión 1.0.3.84, EX7000 versiones anteriores a la versión 1.0.0.60, R6250 versiones anteriores a la versión  1.0.4.16, R6300v2 versiones anteriores a la versión  1.0.4.18, R6400 versiones anteriores a la versión 1.01.32, R6400v2 versiones anteriores a la versión  1.0.2.44, R6700 versiones anteriores a la versión 1.0.1.36, R6900 versiones anteriores a la versión 1.0.1.34, R6900P versiones anteriores a la versión  1.3.0.8, R7000 versiones anteriores a la versión 1.0.9.14, R7000P versiones anteriores a la versión  1.3.0.8, R7100LG versiones anteriores a 1.0.0.34, R7300DST versiones anteriores a la versión 1.0.0.56, R7900 versiones anteriores a la versión  1.0.1.26, R8000 versiones anteriores a la versión  1.0.4.4, R8300 versiones anteriores a la versión 1.0.2.106, R8500 versiones anteriores a la versión 1.0.2.106, R9000 versiones anteriores a la versión 1.0.2.52, WNDR3400v3 versiones anteriores a la versión  1.0.1.16, WNR3500Lv2 versiones anteriores a la versión 1.2.0.46 y WNDR3700v5 versiones anteriores a 1.1.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.84",
            "matchCriteriaId" : "D4BC0A4D-0C9D-47AD-9A9A-3416E812EC7D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3186CC67-B567-4A0C-BD2C-0433716FBD1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "42A19A73-B5FC-4D14-82D0-2128D3E7178B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45B620-60B8-40F3-A055-181ADD71EFFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.16",
            "matchCriteriaId" : "F5E7A8CA-134F-49B4-95D6-79A88CD6BB80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.18",
            "matchCriteriaId" : "55058831-92FF-4A87-8340-E25AC0DDF89E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01.32",
            "matchCriteriaId" : "54D9B854-7E18-439E-8FD2-C0EC88DA6222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.44",
            "matchCriteriaId" : "DDC0DA75-5EB9-4F53-99A9-798FFBFD0C15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "326BBECA-9A76-4A3E-90F7-023797D5D186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.14",
            "matchCriteriaId" : "CDE61DB5-86A6-4810-91CC-18D05DC09507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "09963BE1-D57D-491A-9BD8-A1A46ED993E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.34",
            "matchCriteriaId" : "2FB08FA1-A476-4E05-9904-9BE30C9E77B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "F7508FAE-C117-4E21-8D3D-0016E25363DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "0B72579C-51F1-4F16-8FDE-544229C25B07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.4",
            "matchCriteriaId" : "78819A69-AF43-4741-AE4D-5FEC4280F25F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "BCE9CF95-192E-4D43-9DAD-2C8D9AF045E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "4DFD7557-D13D-40EB-94AD-AF092CDE587A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "72DCD4C0-A757-4F98-97BD-FB1FEBF3235C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.46",
            "matchCriteriaId" : "DB542F95-5AE2-47E4-BD7B-34134B26AA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053202/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-Extenders-PSV-2017-0342",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053202/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-Extenders-PSV-2017-0342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.427",
      "lastModified" : "2024-11-21T03:20:42.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS reflejado. Esto afecta a R6700 versiones anteriores a la versión 1.0.1.36 y R6900 versiones anteriores a la versión 1.0.1.34."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053201/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Routers-PSV-2017-2513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053201/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Routers-PSV-2017-2513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.487",
      "lastModified" : "2024-11-21T03:20:42.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR R6220 versiones anteriores a la versión 1.1.0.60, están afectados por una configuración incorrecta de los ajustes de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053200/Security-Advisory-for-Security-Misconfiguration-on-R6220-PSV-2017-2211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053200/Security-Advisory-for-Security-Misconfiguration-on-R6220-PSV-2017-2211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.537",
      "lastModified" : "2024-11-21T03:20:42.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3700v5 before 1.1.0.48, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.46, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a D1500 versiones anteriores a 1.0.0.25, D500 versiones anteriores a 1.0.0.25, D6100 versiones anteriores a 1.0.0.55, D7000 versiones anteriores a 1.0.1.50, D7800 versiones anteriores a 1.0.1.28, EX6100v2 versiones anteriores a 1.0.1.60, EX6150v2 versiones anteriores a 1.0.1.60, JNR1010v2 versiones anteriores a 1.1.0.46, JR6150 versiones anteriores a 1.0.1.16, JWNR2010v5 versiones anteriores a 1.1.0.46, PR2000 versiones anteriores a 1.0.0.18, R6020 versiones anteriores a 1.0.0.26, R6050 versiones anteriores a 1.0.1.16, R6080 versiones anteriores a 1.0.0.26, R6100 versiones anteriores a 1.0.1.20, R6220 versiones anteriores a 1.1.0.60, R7500 versiones anteriores a 1.0.0.118, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.40, R9000 versiones anteriores a 1.0.2.52, WN3000RPv3 versiones anteriores a 1.0.2.50, WN3100RPv2 versiones anteriores a 1.0.0.40, WNDR3700v5 versiones anteriores a 1.1.0.48, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0. 0.48, WNR1000v4 versiones anteriores a 1.1.0.46, WNR2000v5 versiones anteriores a 1.0.0.62, WNR2020 versiones anteriores a 1.1.0.46 y WNR2050 versiones anteriores a 1.1.0.46."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d1500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.25",
            "matchCriteriaId" : "638CC87A-8459-4878-9985-80B8CF8A1B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DC8809-C26D-48D8-9E12-228C3669B824"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.25",
            "matchCriteriaId" : "086445B7-C353-4EE7-8799-3CDC2C3A0E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE070E3-C0B1-455F-83A9-5C60C489816F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "A37AA7DC-5B2C-4E1B-8556-F1C9F6BBE9D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.50",
            "matchCriteriaId" : "4A94DD9D-0F07-4FD7-B1B0-1DD1E319B092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF04B65B-9685-4595-9C71-0F77AD7109BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "E957C14F-0073-48A9-A78B-A3A36C48F6C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "2E8B1526-CE4F-4ACC-B668-36AA69EA0A34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "E90EB0CF-D659-435C-8BDD-379286F0351A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE79B3F-8667-43C9-962D-EE089428F144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "5A7E7F98-C500-48A9-A1F2-86C3AF7130D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67167E5-81D2-4892-AF41-CBB6271232D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jwnr2010_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "8EEBDA31-7845-4598-8E40-63CEF5037E84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jwnr2010:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7399E5E9-40D8-4ECD-8B7B-C96A27E10282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:pr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.18",
            "matchCriteriaId" : "6754FA98-E862-4C0B-9146-E858B15B0AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:pr2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2451CC0C-71B2-474D-93F0-2B2ACD802FE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "DF013048-DE20-49A5-9091-DD0DEA830D33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA7ABF-4C4B-4945-993A-F93BD8FCB55E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "10757AA0-970A-4C71-9085-D797A9906861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363D4DEE-98B9-4294-B241-1613CAD1A3A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.26",
            "matchCriteriaId" : "D70F5F17-5134-47AB-B182-321B1B0CD72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB5C49-53CF-44AE-9A7D-E7E6201BFE62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.60",
            "matchCriteriaId" : "14253C3A-712C-4A7E-83C4-88A6BBEF0AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B131B5C8-CB7F-433B-BA32-F05CE0E92A66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.118",
            "matchCriteriaId" : "7494430D-BA3F-4EDB-9FB8-7586D4457B9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3000rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.50",
            "matchCriteriaId" : "030AAA8B-65D9-42E4-ACF6-F2DB13D4AA30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3000rp:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71AC74-2D1B-4F1E-A70F-6590A00AAD9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn3100rp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.40",
            "matchCriteriaId" : "8AB52FC6-BC09-41ED-BB91-63A4E795E0F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn3100rp:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8680F5-0C06-4CFC-8BA0-CF85D0438419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "DD1F416B-C938-4AE3-B93E-03087575FF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5B6CB8-D439-42D5-ACAE-6246874EA5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.48",
            "matchCriteriaId" : "978E12D1-8C55-4BF2-8213-DE9C23B23EFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "51F31B60-7B0F-41AC-9FEF-FAAD54269194"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8218868-273B-46DB-B636-D3F9A3768069"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.62",
            "matchCriteriaId" : "27B33A47-E305-43CC-9AC2-C35DE8E51F02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "57B186F2-4D0D-44BD-9F5F-DC1D9FD12C5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2189628-03E7-445A-9EF2-656A85539115"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.46",
            "matchCriteriaId" : "55A6E04A-1630-4C5F-8173-B6B725A59D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877579C-D214-4605-93AA-2B78914CF33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053199/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-Gateways-and-Extenders-PSV-2017-0736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053199/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-Gateways-and-Extenders-PSV-2017-0736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.597",
      "lastModified" : "2024-11-21T03:20:42.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R6900P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8500 before 1.0.2.106, R8300 before 1.0.2.106, and WNDR3400v3 before 1.0.1.16."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una capacidad del atacante para leer archivos arbitrarios. Esto afecta a D6220 versiones anteriores a 1.0.0.32, D6400 versiones anteriores a 1.0.0.60, D8500 versiones anteriores a 1.0.3.29, R6250 versiones anteriores a 1.0.4.16, R6300v2 versiones anteriores a 1.0.4.18, R6400 versiones anteriores a 1.01.32, R6400v2 versiones anteriores a 1.0.2.44, R6700 versiones anteriores a 1.0.1.36, R6900 versiones anteriores a 1.0.1.34, R7000 versiones anteriores a 1.0.9.14, R7000P versiones anteriores a 1.3.0.8, R6900P versiones anteriores a 1.3.0.8, R7100LG versiones anteriores a 1.0.0.34, R7300DST versiones anteriores a 1.0.0.56, R7900 versiones anteriores a 1.0.1.26, R8000 versiones anteriores a 1.0.4.4, R8500 versiones anteriores a 1.0.2.106, R8300 versiones anteriores a 1.0.2.106 y WNDR3400v3 versiones anteriores a 1.0.1.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "1FD6552E-5BF6-4E57-90A7-39C4543B469C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.60",
            "matchCriteriaId" : "2D1F0B30-4BB4-4573-BE0D-381B31CD2A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.29",
            "matchCriteriaId" : "20564DE0-E58D-4628-ADD6-AC7C90AD85F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.16",
            "matchCriteriaId" : "F5E7A8CA-134F-49B4-95D6-79A88CD6BB80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.18",
            "matchCriteriaId" : "55058831-92FF-4A87-8340-E25AC0DDF89E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.01.32",
            "matchCriteriaId" : "54D9B854-7E18-439E-8FD2-C0EC88DA6222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.44",
            "matchCriteriaId" : "DDC0DA75-5EB9-4F53-99A9-798FFBFD0C15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.36",
            "matchCriteriaId" : "442F153C-737B-44D4-9A6D-EB6F6C47B986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "81F70E0C-3674-4981-B815-0721F6C6E588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.14",
            "matchCriteriaId" : "CDE61DB5-86A6-4810-91CC-18D05DC09507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "09963BE1-D57D-491A-9BD8-A1A46ED993E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0.8",
            "matchCriteriaId" : "326BBECA-9A76-4A3E-90F7-023797D5D186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.34",
            "matchCriteriaId" : "2FB08FA1-A476-4E05-9904-9BE30C9E77B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "F7508FAE-C117-4E21-8D3D-0016E25363DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.26",
            "matchCriteriaId" : "0B72579C-51F1-4F16-8FDE-544229C25B07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.4",
            "matchCriteriaId" : "78819A69-AF43-4741-AE4D-5FEC4280F25F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "4DFD7557-D13D-40EB-94AD-AF092CDE587A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.106",
            "matchCriteriaId" : "BCE9CF95-192E-4D43-9DAD-2C8D9AF045E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.16",
            "matchCriteriaId" : "72DCD4C0-A757-4F98-97BD-FB1FEBF3235C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053198/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Gateways-PSV-2017-0590",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053198/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Gateways-PSV-2017-0590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-24T15:15:12.677",
      "lastModified" : "2024-11-21T03:20:42.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D7800 versiones anteriores a 1.0.1.28, R6100 versiones anteriores a 1.0.1.20, R7500 versiones anteriores a 1.0.0.118, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.40, R9000 versiones anteriores a 1.0.2.52, WNDR3700v4 versiones anteriores a 1.0.2.88, WNDR4300 versiones anteriores a 1.0.2.90, WNDR4300v2 versiones anteriores a 1.0.0.48, WNDR4500v3 versiones anteriores a 1.0.0.48 y WNR2000v5 versiones anteriores a 1.0.0.62."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.28",
            "matchCriteriaId" : "EB2E25FA-14F1-44ED-99D3-B5ED7D898D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.20",
            "matchCriteriaId" : "76B12C31-83C3-427F-B2CA-D75EA89DCC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.118",
            "matchCriteriaId" : "7494430D-BA3F-4EDB-9FB8-7586D4457B9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B3F26-401C-4ED0-B871-4B4F8521F369"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A2E62164-2324-4AF2-B300-8005DAD433B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.52",
            "matchCriteriaId" : "679AAEA7-6415-4BBA-AE95-887C2CA609DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "3C2E8B48-CF6F-488A-A932-246B434CAF1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257A5E68-8EDC-44F5-A85C-83A91C93CCE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1413C591-D066-4FA2-BEB1-6C60F8645F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.62",
            "matchCriteriaId" : "27B33A47-E305-43CC-9AC2-C35DE8E51F02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000053197/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-0526",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000053197/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-0526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-28T16:15:12.623",
      "lastModified" : "2024-11-21T03:21:07.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by CSRF. This affects ReadyNAS Surveillance 1.4.3-15-x86 and earlier and ReadyNAS Surveillance 1.1.4-5-ARM and earlier."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos de NETGEAR están afectados por una vulnerabilidad de tipo CSRF. Esto afecta a ReadyNAS Surveillance versiones 1.4.3-15-x86 y anteriores y a ReadyNAS Surveillance versiones 1.1.4-5-ARM y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:readynas_surveillance:*:*:*:*:*:*:x86:*",
            "versionEndIncluding" : "1.4.3-15",
            "matchCriteriaId" : "E5C85C15-2A12-435D-8DF2-C4F3118AFDE0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:readynas_surveillance:*:*:*:*:*:*:arm:*",
            "versionEndIncluding" : "1.1.4-5",
            "matchCriteriaId" : "7B5D50E9-DABA-460F-8753-74315C12D901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000038435/Security-Advisory-for-ReadyNAS-Surveillance-CSRF-Remote-Code-Execution-PSV-2017-0578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000038435/Security-Advisory-for-ReadyNAS-Surveillance-CSRF-Remote-Code-Execution-PSV-2017-0578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-28T16:15:12.683",
      "lastModified" : "2024-11-21T03:21:07.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos de NETGEAR están afectados por una omisión de autenticación. Esto afecta a JGS516PE antes del 11-05-2017, JGS524Ev2 antes del 11-05-2017, JGS524PE antes del 11-05-2017, GS105Ev2 antes del 11-05-2017, GS105PE antes del 11-05-2017, GS108Ev3 antes del 11-05-2017, GS108PEv3 antes del 11-05-2017, GS116Ev2 antes del 11-05-2017, GSS108E antes del 11-05-2017, GSS116E antes del 11-05-2017, XS708Ev2 antes del 11-05-2017, y XS716E antes del 11-05-2017."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jgs516pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "49892DB9-4B99-46FC-A353-C5AEAF93918F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jgs516pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC0DAB-226E-4C95-9818-7758D37EFD10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jgs524e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "F28D3423-ABA9-47A4-AE74-75019D649BA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jgs524e:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF899BD-AA1E-4C47-BCFD-5E32F75F538A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:jgs524pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "0774BAE9-FF47-4785-9AA0-86A594335FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:jgs524pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A32288-19B5-4A8F-B883-FCC326B7032D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs105e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "187CA489-3136-4889-AB0F-3ADA5C7D9C89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs105e:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD993BAB-DF89-41AB-936B-9C6F280BAE1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs105pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "288AED3B-8007-4650-9CB2-3342A345533C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs105pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211D1DBE-5D7A-4309-A125-126AF2A16647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs108e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "8A85C689-1FBB-4799-9C27-34C7F6D0CA0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs108e:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5579C6E3-866F-4E6A-BD4C-0A1239DE5699"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs108pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "A6812FA4-1665-4CB5-9C89-DBC58557A742"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs108pe:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA97C4B-C592-4418-8F3B-24C891D3C830"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs116e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "0CE2876A-58F5-4892-89DD-E674A3DE96F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs116e:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA5EF92-9B28-4C81-8A95-C5BCEC19591A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gss108e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "48100EBE-BBE1-4278-8F71-A4A6F758B96A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gss108e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8244C4BA-F166-4C32-BF43-0964CD99921B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gss116e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "69553993-8804-48F4-B408-DDA852B048C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gss116e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7E2A39-F250-49EB-AE39-A1745B8F1569"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xs708e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "DB82FC08-625B-496D-93EB-2673E0147832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xs708e:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD93BF51-A52C-422F-BB05-63CF9E97D3B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xs716e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-11",
            "matchCriteriaId" : "EAB20EA0-D4CF-47D7-8152-45CD65B3FC65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xs716e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6BBBDF-8E4C-42B3-9B23-C0970F5C4B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000037849/Security-Advisory-for-Authentication-Bypass-on-ProSAFE-Web-Managed-Switches-PSV-2015-0043",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000037849/Security-Advisory-for-Authentication-Bypass-on-ProSAFE-Web-Managed-Switches-PSV-2015-0043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-28T16:15:12.747",
      "lastModified" : "2024-11-21T03:21:07.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos de NETGEAR están afectados por una ejecución de comandos por medio de un formulario PHP. Esto afecta a WN604 versiones 3.3.3 y anteriores, WNAP210v2 versiones 3.5.20.0 y anteriores, WNAP320 versiones 3.5.20.0 y anteriores, WNDAP350 versiones 3.5.20.0 y anteriores, WNDAP360 versiones 3.5.20.0 y anteriores, WNDAP620 versiones 2.0.11 y anteriores, WNDAP660 versiones 3.5.20.0 y anteriores, WND930 versiones 2.0.11 y anteriores, y WAC120 versiones 2.0.7 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "28BEFA11-71A8-4FDF-BC54-5AF4D359FF49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD31DCAA-BAA5-4463-9EA4-A7076A625407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnap210_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.20.0",
            "matchCriteriaId" : "A390A970-3C56-4682-853C-16335E95FD9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnap210:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B442489B-A88F-477C-A835-2081891A15CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.20.0",
            "matchCriteriaId" : "D36B032D-EB59-40BC-8D04-1AE8746293A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnap320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2613E9-CAF9-4C04-85BC-E10BDF4B0E74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.20.0",
            "matchCriteriaId" : "D5A85E15-3359-4500-808E-D05160C96A5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82A16C2-DC48-4792-A4C7-8AC43F84196D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.20.0",
            "matchCriteriaId" : "3921F047-FEC6-4AE0-BC6A-B24795970675"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7975D6EC-1816-4D52-8C87-77C1B6404120"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap620_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.11",
            "matchCriteriaId" : "4E8F2DEA-7095-451B-90FD-1D94285EC0FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666A5E55-B07C-4615-A9F0-5CA8C7D40637"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndap660_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.20.0",
            "matchCriteriaId" : "D2E07F80-C2B1-45E6-BBC9-0CD8B598E2C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndap660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D2492E-0CDC-4242-9206-7F0453B11CBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnd930_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.11",
            "matchCriteriaId" : "E6A7D131-F0A6-42BE-B119-20E0A9FCAD34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnd930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91593610-E45D-450B-AD40-74375DA37EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wac120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "49AFDA75-C33C-421E-B4D7-449570944007"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wac120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E5414D-8F4F-4E21-B79F-61B14F0C9990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000037827/Security-Advisory-for-PHP-Vulnerabilities-on-Wireless-Access-Points-PSV-2017-0517-and-PSV-2016-0258",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000037827/Security-Advisory-for-PHP-Vulnerabilities-on-Wireless-Access-Points-PSV-2017-0517-and-PSV-2016-0258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-28T17:15:12.570",
      "lastModified" : "2024-11-21T03:21:06.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement."
      }, {
        "lang" : "es",
        "value" : "La aplicación NETGEAR Insight versiones anteriores a 2.42, para Android e iOS está afectada por una administración inapropiada de contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:insight:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.42",
            "matchCriteriaId" : "DADB6424-A4AE-4053-B4A5-FA2852652FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:insight:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "2.42",
            "matchCriteriaId" : "7E7C6A89-A4DF-463C-8E08-CB96AE349880"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000038799/Security-Fix-for-Password-Management-in-NETGEAR-Insight-App-PSV-2017-1978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000038799/Security-Fix-for-Password-Management-in-NETGEAR-Insight-App-PSV-2017-1978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-28T17:15:12.663",
      "lastModified" : "2024-11-21T03:21:06.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X12F 12.0.2.11 and earlier, M4300-24X24F 12.0.2.11 and earlier, M4300-24X 12.0.2.11 and earlier, and M4300-48X 12.0.2.11 and earlier."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos de NETGEAR están afectados por una ejecución de comandos. Esto afecta a M4200-10MG-POE+ versiones 12.0.2.11 y anteriores, M4300-28G versiones 12.0.2.11 y anteriores, M4300-52G versiones 12.0.2.11 y anteriores, M4300-28G-POE+ versiones 12.0.2.11 y anteriores, M4300-52G-POE+ versiones 12.0.2.11 y anteriores, M4300-8X8F versiones 12.0.2.11 y anteriores, M4300-12X12F versiones 12.0.2.11 y anteriores, M4300-24X24F versiones 12.0.2.11 y anteriores, M4300-24X versiones 12.0.2.11 y anteriores, y M4300-48X versiones 12.0.2.11 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200-10mg-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "F5CAB4BD-BD17-4FD4-8466-C4C3579CADF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200-10mg-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77A4DEF-60B4-465C-A4BE-A65317B2073D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "73A4FA9F-1592-4A94-B367-0E47D3EC1CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DDB059-D64B-40D1-8CD7-0FE7CF387349"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "8FEED95F-F2BC-4BD9-A508-0975835B1199"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FD426-FA6B-4F84-8A21-74B80E8A03ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-28g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "33ACAD6E-1FDB-4009-9892-6A1711E2FD62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-28g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDB8A1F-8F4F-4E8F-8CAF-8E05AC84BE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-52g-poe\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "D6600B6D-9595-48EF-A2FF-394F71C4C430"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-52g-poe\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEA4098-F34F-4EDE-976D-6E63EA2EA3DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-8x8f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "10AFC28C-9793-4792-88BD-28B75B3565B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-8x8f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3BE1A4-2683-4890-BC75-8F7ADEC9AF25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-12x12f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "B9097089-72B2-4363-8AC4-C3DBD3269F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-12x12f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35193973-3D2B-4751-899A-F0270E9F91A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x24f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "CFBD8080-C7B8-4A29-95EC-6DC5775EB47D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x24f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68762E4C-8D20-44B7-873C-6EC849577551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-24x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "367C550A-D764-4C6F-906E-2D5F7132EB84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-24x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552CC93D-334C-4919-9906-688216580DF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300-48x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.11",
            "matchCriteriaId" : "4BC9B3A2-6183-42A5-9D7A-1F28B00751FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300-48x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74F426D-BD60-4F6F-A1AA-8547CDAA2DF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000038655/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-M4200-and-M4300-PSV-2017-1971",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000038655/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-M4200-and-M4300-PSV-2017-1971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-28T17:15:12.790",
      "lastModified" : "2024-11-21T03:21:06.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos de NETGEAR están afectados por una ralentización y parada. Esto afecta a C6300 antes del 30-05-2017, CM400 antes del 30-05-2017, CM700 antes del 30-05-2017, y CMD31T antes del 30-05-2017."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:c6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-30",
            "matchCriteriaId" : "7C10E1EC-D4A4-4E7F-939E-CBBA08AFC493"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:c6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7185DE0B-B15C-417D-9AF5-FBF15F9C2241"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:cm400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-30",
            "matchCriteriaId" : "0A510197-2782-46BE-93EC-A506F2B290EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:cm400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC8E42B-BF1A-47D5-A01F-F1063897D04A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:cm700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-30",
            "matchCriteriaId" : "D6503A8D-C2CF-407F-A205-1E551C7AB044"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:cm700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D13E46E-C2AE-408C-8408-0436B00ED8A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:cmd31t_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-30",
            "matchCriteriaId" : "8E3630EA-A8BF-4BDA-B245-3500B434A60F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:cmd31t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9C4D0C-750C-43BB-98A9-81BB0185F317"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000038560/Security-Advisory-for-Vulnerability-on-Select-Cable-Modems-and-Gateways-PSV-2017-2165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000038560/Security-Advisory-for-Vulnerability-on-Select-Cable-Modems-and-Gateways-PSV-2017-2165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-29T14:15:12.370",
      "lastModified" : "2024-11-21T03:21:05.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier, R7000P 1.0.0.58 and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and earlier, R8300 1.0.2.86 and earlier, R8500 1.0.2.86 and earlier, WNDR3400v3 1.0.1.8 and earlier, and WNDR4500v2 1.0.0.62 and earlier."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una recuperación de la contraseña y el acceso a los archivos. Esto afecta a D8500 versiones 1.0.3.27 y anteriores, DGN2200v4 versiones 1.0.0.82 y anteriores, R6300v2 versiones 1.0.4.06 y anteriores, R6400 versiones 1.0.1.20 y anteriores, R6400v2 versiones 1.0.2.18 y anteriores, R6700 versiones 1.0.1.22 y anteriores, R6900 versiones 1.0.1.20 y anteriores, R7000 versiones 1.0.7.10 y anteriores, R7000P versiones 1.0.0.58 y anteriores, R7100LG versiones 1.0.0.28 y anteriores, R7300DST versiones 1.0.0.52 y anteriores, R7900 versiones 1.0.1.12 y anteriores, R8000 versiones 1.0.3.46 y anteriores, R8300 versiones 1.0.2.86 y anteriores, R8500 versiones 1.0.2.86 y anteriores, WNDR3400v3 versiones 1.0.1.8 y anteriores, y WNDR4500v2 versiones 1.0.0.62 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.27",
            "matchCriteriaId" : "3CABB269-2967-49F4-B8E8-66825747EB97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.82",
            "matchCriteriaId" : "B4B809BE-307B-4309-A333-DB5E7722F8A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099184A0-F1C6-4C3F-9C3B-F0B9AC0D4D14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.06",
            "matchCriteriaId" : "C38C75CA-2B68-4D85-B1FC-3CF9281D5D1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.20",
            "matchCriteriaId" : "11AA26A0-5DAA-46B6-B7B8-E34DB439ABDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.18",
            "matchCriteriaId" : "7C9D4FA9-A99B-4931-B89E-247EB64567AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.22",
            "matchCriteriaId" : "3AC00FC1-A271-477A-B22C-4C58D0915B28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.20",
            "matchCriteriaId" : "A231747C-B62D-445E-8A1E-B233FC057A14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7.10",
            "matchCriteriaId" : "8B34F561-E662-498D-824A-DD4358334396"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.58",
            "matchCriteriaId" : "6B773066-41DF-4EFF-A063-20063C49856D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.28",
            "matchCriteriaId" : "D4B29972-7657-41E4-AB1D-F2183479927E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300dst_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.52",
            "matchCriteriaId" : "83A30682-9882-46FA-8690-C33B9006F54C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300dst:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75148EB-DE6C-4C5C-BF34-4800A66CF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.12",
            "matchCriteriaId" : "5ABC8087-5B43-4C05-B210-3D5519D76B7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.46",
            "matchCriteriaId" : "3C59B5FF-EB54-4CFE-AF59-FCD090847F00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.86",
            "matchCriteriaId" : "C51DBE7B-AC3B-4BB3-91D9-7AA679676B49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.86",
            "matchCriteriaId" : "5DEA7DEA-328B-40B7-865E-88797DEB3965"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.8",
            "matchCriteriaId" : "F271857E-66B1-4AC3-8C8B-07A9C96BB066"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.62",
            "matchCriteriaId" : "FFA07BD5-8D6F-4F1D-A227-BDD67DD8D152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB00ECAD-7474-4D85-8248-D014E5808814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000045848/Security-Advisory-for-Password-Recovery-and-File-Access-on-Some-Routers-and-Modem-Routers-PSV-2017-0677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000045848/Security-Advisory-for-Password-Recovery-and-File-Access-on-Some-Routers-and-Modem-Routers-PSV-2017-0677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-29T14:15:12.717",
      "lastModified" : "2024-11-21T03:21:06.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versiones anteriores a 6.6.1, están afectados por una inyección de comandos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.6.1",
            "matchCriteriaId" : "BD058AF9-B0C1-4D0B-937C-F1C59AD8C5AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000044333/Security-Advisory-for-Operating-System-Command-Injection-on-ReadyNAS-OS-6-Storage-Systems-PSV-2017-2002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000044333/Security-Advisory-for-Operating-System-Command-Injection-on-ReadyNAS-OS-6-Storage-Systems-PSV-2017-2002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-29T14:15:13.153",
      "lastModified" : "2024-11-21T03:21:06.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR WNR854T devices before 1.5.2 are affected by command execution."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR WNR854T versiones anteriores a 1.5.2, están afectados por una ejecución del comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr854t_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "65B46548-42C1-494E-BAE4-9C07FFB3DEEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE71A95C-8A0E-4939-BAD7-B06DBA21961E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000038833/Security-Advisory-for-Unauthenticated-Command-Execution-on-WNR854T-PSV-2017-2317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000038833/Security-Advisory-for-Unauthenticated-Command-Execution-on-WNR854T-PSV-2017-2317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-29T14:15:13.620",
      "lastModified" : "2024-11-21T03:21:06.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR ReadyNAS versiones anteriores a 6.6.1, están afectados por una inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:readynas_os_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.6.1",
            "matchCriteriaId" : "39B2FEB0-E30D-46FF-B5C6-07FCAC92BC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000044333/Security-Advisory-for-Operating-System-Command-Injection-on-ReadyNAS-OS-6-Storage-Systems-PSV-2017-2002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000044333/Security-Advisory-for-Operating-System-Command-Injection-on-ReadyNAS-OS-6-Storage-Systems-PSV-2017-2002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-04-29T14:15:14.013",
      "lastModified" : "2024-11-21T03:21:06.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una ejecución de comandos de depuración. Esto afecta a FS752TP versiones 5.4.2.19  y anteriores, GS108Tv2 versiones 5.4.2.29 y anteriores, GS110TP versiones 5.4.2.29 y anteriores, GS418TPP versiones 6.6.2.6 y anteriores, GS510TLP versiones 6.6.2.6 y anteriores, GS510TP versiones 5.04.2.27 y anteriores, GS510TPP versiones 6.6.2.6 y anteriores, GS716Tv2 versiones 5.4.2.27 y anteriores, GS716Tv3 versiones 6.3.1.16 y anteriores, GS724Tv3 versiones 5.4.2.27 y anteriores, GS724Tv4 versiones 6.3.1.16 y anteriores, GS728TPSB versiones 5.3.0.29 y anteriores, GS728TSB versiones 5.3.0.29 y anteriores, GS728TXS versiones 6.1.0. 35 y anteriores, GS748Tv4 versiones 5.4.2.27 y anteriores, GS748Tv5 versiones 6.3.1.16 y anteriores, GS752TPSB versiones 5.3.0.29 y anteriores, GS752TSB versiones 5.3.0.29 y anteriores, GS752TXS versiones 6.1.0.35 y anteriores, M4200 versiones 12.0.2.10 y anteriores, M4300 versiones 12.0.2. 10 y anteriores, M5300 versiones 11.0.0.28 y anteriores, M6100 versiones 11.0.0.28 y anteriores, M7100 versiones 11.0.0.28 y anteriores, S3300 versiones 6.6.1.4 y anteriores, XS708T versiones 6.6.0.11 y anteriores, XS712T versiones 6.1.0.34 y anteriores, y XS716T versiones 6.6.0.11 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:fs752tp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.19",
            "matchCriteriaId" : "DCAF6CBC-713C-4BCD-BA73-29BD5E6B2CC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:fs752tp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA58F24F-EC29-4592-BAD6-F7710F897E76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs108t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.29",
            "matchCriteriaId" : "07615C61-628A-4168-AEB5-BBEB8E14D039"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs108tv2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9045AE-E205-4FE2-9DD8-51EFA8D9B7EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs110tp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.29",
            "matchCriteriaId" : "57C21A5F-460B-41AF-8C81-59B5C39AFF6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs110tp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3949875-D8ED-4280-B1C7-123674774C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs418tpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.2.6",
            "matchCriteriaId" : "9A3D5437-B5F7-4C11-9935-D95A848DF84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs418tpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF539E-3159-4479-9BC5-AD2A5239415F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs510tlp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.2.6",
            "matchCriteriaId" : "9C26847F-3523-4455-90AB-A84E2422247D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs510tlp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F54D4D-EB69-4B6A-B2D1-7D8013AB04D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs510tp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.04.2.27",
            "matchCriteriaId" : "A4D4AE3C-6585-406D-B596-A9933AA8B57C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs510tp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED4BF26-254F-4550-8B8B-5F90CD4A2556"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs510tpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.2.6",
            "matchCriteriaId" : "57DD367F-50E8-48A2-B44F-FD6AE99A7BEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs510tpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9C4447-DFC2-40B8-AD47-F7D8DDD34570"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs716t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.27",
            "matchCriteriaId" : "BAC7EA9C-0A45-40A4-85A9-563E8922ACB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs716t:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B93D08F-4C7B-4DE6-A72A-5AAAC3E42F29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs716t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1.16",
            "matchCriteriaId" : "47770B21-3153-4B10-817F-D47442D7C3BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs716t:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B048480-9790-4267-9C12-ABADA7646A9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs724t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.27",
            "matchCriteriaId" : "A21595F4-961A-42BE-A530-3304F23C5A24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs724t:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15240AAD-9CDF-4E78-A43D-0AD0A21F0A05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs724t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1.16",
            "matchCriteriaId" : "29FDAE41-1436-4695-9E40-68DC5050910B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs724t:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8C3CE-84D9-4BEE-85AE-82D8346BDECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs728tpsb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.29",
            "matchCriteriaId" : "AF656382-57CD-4017-859E-3A6FFD3E66AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs728tpsb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBECB631-64D3-4944-8E45-683FF12C1D89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs728tsb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.29",
            "matchCriteriaId" : "30712720-94B0-4212-88C0-A5D9DC36C9A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs728tsb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D5C8B5-E199-43E3-9C17-FBF55D916F8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs728txs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.35",
            "matchCriteriaId" : "69D579C0-A6FA-4200-9866-99C8E02BACC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs728txs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB931A26-A4F1-4170-AA66-188C29B46AFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs748t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.27",
            "matchCriteriaId" : "7BC428D3-868A-421D-8AD8-1D8AF1522D82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs748t:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED8AA40-EC6E-4652-A6F8-57856EBDC16A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs748t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.1.16",
            "matchCriteriaId" : "81FEC177-54A7-4D62-B6B8-53FA193B5D24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs748t:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47152C0-F85E-4073-BE49-9DDF1C99E828"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs752tpsb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.29",
            "matchCriteriaId" : "3B8EA70D-EE90-41D9-978C-4377B49AA3FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs752tpsb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD6B178-367D-446C-9EE9-5B2940AE6956"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs752tsb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.29",
            "matchCriteriaId" : "F6B92FCC-AD30-4C5B-AB31-12C564FB36B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs752tsb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5F207F-9977-4390-AB85-EAE8B385E87D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:gs752txs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.35",
            "matchCriteriaId" : "09F17244-9B03-4F30-B565-2A4F21EB6793"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:gs752txs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2BD166-0AF7-48FE-B677-B5D28672DA74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.10",
            "matchCriteriaId" : "FBBD796E-9525-468B-81D1-9A848B3862D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80617DBE-44F0-44E1-B59A-9456D4995C8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.2.10",
            "matchCriteriaId" : "04C8ED4F-822D-4BE5-AB37-D18B779C5AC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28AC8BD-6DDA-481B-A1E9-466A04FB9680"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m5300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.0.28",
            "matchCriteriaId" : "6EA50A8A-FCF6-46F9-8E79-6A44ACF74CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10DCF81-D2AD-403C-AAB8-97ED936FD458"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.0.28",
            "matchCriteriaId" : "4D7FAA5A-D2FC-4D29-B741-B13DD7F7974F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFDB23F-9895-42E4-88A1-83FE4A6D0709"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:m7100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.0.28",
            "matchCriteriaId" : "5E191EAA-A1D4-4629-B16B-AE1B5C8028A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:m7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C43A67-C198-48C3-9CDB-6B2039C306B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:s3300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.1.4",
            "matchCriteriaId" : "1E1ED353-91DC-4A25-995A-0AEFB5B1AC3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:s3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880C8ABD-7469-4D24-8878-D4BA299F890B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xs708t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.0.11",
            "matchCriteriaId" : "C4C1664B-4794-4FC1-BF9F-A1329E572BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xs708t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78D4126-20E7-43C2-BD98-2BEAF2A5FD1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xs712t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.34",
            "matchCriteriaId" : "06EE98ED-4348-4999-8259-493855582249"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xs712t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E3C3C9-946B-4490-B018-152FF64C7A6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xs716t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6.0.11",
            "matchCriteriaId" : "CE8C9DD2-A69A-40B4-9AD1-E0F5B002877B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xs716t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE86C949-F8F4-43FB-9089-9E0BE95A5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000038519/Security-Advisory-for-Authentication-Bypass-and-Remote-Command-Execution-on-Some-Smart-and-Managed-Switches-PSV-2017-0857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000038519/Security-Advisory-for-Authentication-Bypass-and-Remote-Command-Execution-on-Some-Smart-and-Managed-Switches-PSV-2017-0857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-04T16:15:11.803",
      "lastModified" : "2023-11-07T02:41:57.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20734, CVE-2017-18864. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2019-20734 and CVE-2017-18864 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-04T16:15:11.850",
      "lastModified" : "2023-11-07T02:41:57.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20732, CVE-2017-18865. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2019-20732 and CVE-2017-18865 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-04T16:15:11.913",
      "lastModified" : "2023-11-07T02:41:57.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20738, CVE-2017-18866. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2019-20738 and CVE-2017-18866 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-04T16:15:11.960",
      "lastModified" : "2023-11-07T02:41:58.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-21139, CVE-2017-18867. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2018-21139 and CVE-2017-18867 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-05T14:15:12.187",
      "lastModified" : "2024-11-21T03:21:07.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7900 before 1.0.1.18, R8300 before 1.0.2.104, and R8500 before 1.0.2.104."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento de búfer por parte de un atacante no autenticado. Esto afecta a R6400 versiones anteriores a 1.0.1.24, R6400v2 versiones anteriores a 1.0.2.32, R6700 versiones anteriores a 1.0.1.22, R6900 versiones anteriores a 1.0.1.22, R7000 versiones anteriores a 1.0.9.4, R7000P versiones anteriores a 1.0.0. 56, R6900P versiones anteriores a 1.0.0.56, R7100LG versiones anteriores a 1.0.0.32, R7300 versiones anteriores a 1.0.0.54, R7900 versiones anteriores a 1.0.1.18, R8300 versiones anteriores a 1.0.2.104, y R8500 versiones anteriores a 1.0.2.104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "29EA60BF-FBA6-4305-8173-07130A527410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.32",
            "matchCriteriaId" : "DB7B08B9-07D2-4404-846A-D1CA02C16557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "3C3255EE-BBE5-4EBE-92CC-D0C6E6D8563F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.22",
            "matchCriteriaId" : "24E4CE14-4FC5-4F73-BFC8-F0B0D924F788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "2E9EF43B-2542-44CE-A1D6-DECCCFBC1F5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9.4",
            "matchCriteriaId" : "026E5574-7296-46A2-916D-7FF7BD3F728A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.56",
            "matchCriteriaId" : "ADFE7176-BD34-467C-A167-E869E04A8E97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "D264AB39-63DD-4B32-9A91-D86A3700733D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B13F94-F151-4F00-95C3-D9FB22B3CC2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.18",
            "matchCriteriaId" : "A98DFA81-D1BA-41AE-A6A3-1EBBFC452D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "DAAB159C-27F2-4645-9FE4-4DBB4465DE3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "A79D8A77-4555-4B2A-8F19-F69AD4A17D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Routers-PSV-2017-0791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Routers-PSV-2017-0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-05T14:15:12.250",
      "lastModified" : "2024-11-21T03:21:07.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos de NETGEAR están afectados  por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a R8300 versiones anteriores a 1.0.2.104 y a R8500 versiones anteriores a 1.0.2.104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "A79D8A77-4555-4B2A-8F19-F69AD4A17D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.104",
            "matchCriteriaId" : "DAAB159C-27F2-4645-9FE4-4DBB4465DE3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051485/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051485/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-05T14:15:12.327",
      "lastModified" : "2024-11-21T03:21:07.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 before 1.0.0.48, and WNR2000v5 before 1.0.0.58."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una vulnerabilidad de tipo XSS almacenado. Esto afecta a R9000 versiones anteriores a 1.0.2.40, R6100 versiones anteriores a 1.0.1.1, 6R7500 versiones anteriores a 1.0.0.110, R7500v2 versiones anteriores a 1.0.3.20, R7800 versiones anteriores a 1.0.2.36, WNDR4300v2 versiones anteriores a 1.0.0.48, y WNR2000v5 versiones anteriores a 1.0.0.58."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:6r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.110",
            "matchCriteriaId" : "2C71CCA3-7611-4B0F-8CE6-A7B5CBA747F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:6r7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28934607-8D50-4691-824D-BA3586572B3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "A69E079C-1158-48A2-8F0B-51F8F436E63C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F44A123-B256-428B-98C2-17570F2F32DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.20",
            "matchCriteriaId" : "A98819AD-045F-45AE-9579-258E41882CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.36",
            "matchCriteriaId" : "3255D316-04E5-4056-BFFF-38B042167A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.40",
            "matchCriteriaId" : "A1664969-D326-4EC5-BF0D-E43820CCB378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "8B1EBB8F-818F-4E04-BB25-A81C1C309CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4428B145-B86D-4709-BBA9-64BDE7D35A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.58",
            "matchCriteriaId" : "9C819040-B30C-4393-9DD4-8E5744B13050"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317F25FF-B3A2-4C68-888F-D2627C564867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000051472/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Routers-PSV-2016-0100",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000051472/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Routers-PSV-2016-0100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-05T14:15:12.390",
      "lastModified" : "2024-11-21T03:21:08.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a D6100 versiones anteriores a 1.0.0.55, D7800 versiones anteriores a V1.0.1.24, R7100LG versiones anteriores a V1.0.0.32, WNDR4300v1 versiones anteriores a 1.0.2.90, y WNDR4500v3 versiones anteriores a 1.0.0.48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.55",
            "matchCriteriaId" : "A37AA7DC-5B2C-4E1B-8556-F1C9F6BBE9D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.24",
            "matchCriteriaId" : "F3197737-90A5-411B-8F3D-902D7FD3CEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.32",
            "matchCriteriaId" : "833A98AF-A4B0-4C68-AACD-6B3F58E64060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.90",
            "matchCriteriaId" : "3D0CAC32-5F12-45E6-AC84-D9D5020A41E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4300:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99E146D-B278-4CA6-8156-7D9923015779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.48",
            "matchCriteriaId" : "9591B73B-93BF-4976-998B-0200C990EF6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31D6808-4103-4543-B7AB-84A79CD12006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-08T15:15:11.490",
      "lastModified" : "2023-11-07T02:38:40.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-08T15:15:11.537",
      "lastModified" : "2023-11-07T02:38:41.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-08T15:15:11.567",
      "lastModified" : "2023-11-07T02:38:41.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-08T15:15:11.617",
      "lastModified" : "2023-11-07T02:38:41.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15514",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2020-05-08T15:15:11.677",
      "lastModified" : "2023-11-07T02:40:12.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-08T16:15:12.137",
      "lastModified" : "2023-11-07T02:38:40.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-08T16:15:12.183",
      "lastModified" : "2023-11-07T02:38:40.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14200",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2020-05-11T23:15:11.207",
      "lastModified" : "2023-11-07T02:38:52.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unused CVE for 2017"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-05-21T20:15:09.917",
      "lastModified" : "2024-11-21T03:21:08.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Digi XBee versión 2, no tienen un mecanismo de protección efectivo contra los comandos AT remotos, debido a problemas relacionados con la pila de red sobre la cual el protocolo ZigBee se construye."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:digi:xbee_2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146C878E-3D37-4E92-8111-4BC184B71643"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:digi:xbee_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E6AE01-4813-45DB-BD00-FEEA7E4F1B2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hindawi.com/journals/scn/2017/1723658/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.hindawi.com/journals/scn/2017/1723658/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-15T15:15:09.317",
      "lastModified" : "2024-11-21T03:21:08.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo TOCTOU en el paquete chownr versiones anteriores a 1.1.0 para Node.js versión 10.10, podría permitir a un atacante local engañarlo para que descienda a directorios no deseados mediante ataques de tipo symlink"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chownr_project:chownr:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "BA4EAB96-893F-489C-B2A1-C677624250D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863985",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1611614",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/isaacs/chownr/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/npm:chownr:20180731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1611614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/isaacs/chownr/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/npm:chownr:20180731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T14:15:10.390",
      "lastModified" : "2024-11-21T03:35:19.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug may well be exploitable as a remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. Corrompe un puntero cuando un servidor de nombres habla primero debido a un número incorrecto de desreferencias de puntero. Este error puede ser explotable como una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T14:15:10.467",
      "lastModified" : "2024-11-21T03:35:19.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun (depending on the sizes of the types on the current platform). Of course the inputs ought to be right. And there are pointers in there too, so perhaps one could say that the caller ought to check these things. It may be better to require the caller to make the pointer structure right, but to have the code here be defensive about (and tolerate with an error but without crashing) out-of-range integer values. So: it should defend each of these integer conversion sites with a check for the actual permitted range, and return adns_s_invaliddata if not. The lack of this check causes the SOA sign extension bug to be a serious security problem: the sign extended SOA value is out of range, and overruns the buffer when reconverted. This is related to sign extending SOA 32-bit integer fields, and use of a signed data type."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. adns_rr_info maneja inapropiadamente un *datap falso. El patrón general para formatear enteros es sprintf en un búfer de tamaño fijo. Esto es correcto si la entrada está en el rango correcto; de lo contrario, el búfer puede estar desbordado (dependiendo del tamaño de los tipos en la plataforma actual). Por supuesto, las entradas deben ser correctas. Y existen indicadores allí también, así que quizás se podría decir que la persona que llama debe comprobar estas cosas. Puede ser mejor requerir que la persona que llama haga que la estructura del puntero sea correcta, pero que el código aquí sea defensivo sobre (y tolere con un error pero sin bloquear) valores enteros fuera de rango. Por lo tanto: debe defender cada uno de estos sitios de conversión de enteros con una comprobación del rango real permitido y devolver adns_s_invaliddata si no lo hace. La falta de esta comprobación hace que el error de extensión de signo de SOA sea un problema de seguridad grave: el valor de SOA extendido de signo está fuera de rango y supera el búfer cuando se reconvierte. Esto está relacionado con el signo que extiende los campos enteros SOA de 32 bits y el uso de un tipo de datos con signo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T14:15:10.530",
      "lastModified" : "2024-11-21T03:35:20.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \\, and adns_qf_quoteok_query was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart the input buffer and start processing many bytes of arbitrary heap data as if it were the query domain. Eventually it would run out of input or find some other kind of error, and declare the query domain invalid. But before then it might outrun available memory and crash. In principle this could be a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. Invalida la lectura de un búfer si un dominio termina con una barra diagonal inversa. Si el dominio de consulta terminó con \\, y adns_qf_quoteok_query se especificó, qdparselabel leería bytes adicionales del búfer e intentaría tratarlos como la secuencia de escape. Saldría del búfer de entrada y comenzaría a procesar muchos bytes de datos de la pila arbitrarios como si fuera el dominio de consulta. Eventualmente se quedaría sin entrada o encontraría algún otro tipo de error y declararía que el dominio de consulta no es válido. Pero antes de eso podría superar la memoria disponible y bloquearse. En principio, esto podría ser un ataque de denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T14:15:10.593",
      "lastModified" : "2024-11-21T03:35:20.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to r, later. Rather one should be doing what read() would have done. Without this fix, adnshost may read and process one byte beyond the buffer, perhaps crashing or perhaps somehow leaking the value of that byte."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. adnshost maneja inapropiadamente una falta de una nueva línea final en una lectura estándar. Es incorrecto incrementar el uso así como establecer r, ya que el uso se incrementa de acuerdo con r, más adelante. Más bien uno debería estar haciendo lo que la función read() habría hecho. Sin esta corrección, adnshost puede leer y procesar un byte más allá del búfer, quizás bloqueándose o de alguna manera perdiendo el valor de ese byte"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T14:15:10.640",
      "lastModified" : "2024-11-21T03:35:20.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at the first. Otherwise, adns can be confused by interleaving answers for the CNAME target, with the CNAME itself. In that case the answer data structure (on the heap) can be overrun. With this fixed, it prefers to look only at the answer RRs which come after the CNAME, which is at least arguably correct."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. No ignora las respuestas aparentes antes del primer RR que se encontró la primera vez. cuando esto es corregido, el segundo escaneo de respuestas encuentra los mismos RR en el primero. De lo contrario, adns pueden ser confundida entrelazando respuestas para el objetivo CNAME, con el propio CNAME. En ese caso, la estructura de datos de la respuesta (en la pila) puede ser desbordada. Con esto corregido, prefiere mirar solo los RR de respuesta que vienen después del CNAME, que al menos es posiblemente correcto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T15:15:10.087",
      "lastModified" : "2024-11-21T03:35:19.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling program, leaking aspects of the contents of some of its memory, causing it to allocate lots of memory, or perhaps overrunning a buffer. This is only possible with applications which make non-raw queries for SOA or RP records."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. pap_mailbox822 no comprueba apropiadamente st desde adns__findlabel_next. Sin esto, puede ser usado un valor de pila no inicializado como la primera longitud de etiqueta. Dependiendo de las circunstancias, un atacante podría engañar a los publicistas para que bloqueen el programa de llamada, filtrando aspectos del contenido de parte de su memoria, causando que asigne mucha memoria o quizás el desbordamiento de un búfer. Esto solo es posible con aplicaciones que realizan consultas sin no procesar para registros SOA o RP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-18T15:15:10.150",
      "lastModified" : "2024-11-21T03:35:19.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en adns versiones anteriores a 1.5.2. Se cuelga, consumiendo CPU, si un bucle de puntero de compresión es encontrado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "F69A58A4-C51A-493B-A5C9-8C7471A0BFF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T17:15:11.787",
      "lastModified" : "2024-11-21T03:21:08.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.5.0, 4.4.5 y 4.3.4. Manejó inapropiadamente  el control de acceso de webhook en el caso de la función EnableOnlyAdminIntegrations"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.4",
            "matchCriteriaId" : "6CB14F13-D2DB-4395-A0CA-FF719A916C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "E6D90B0D-7882-4818-B2BA-D2B1A92C6C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "251BF2C1-3E96-46BF-9AA4-F30A19AF68C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAD3A2-A337-4A00-B546-0A106A593052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7394620-98B0-4859-B279-CF77E02D1F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D92720-E499-4ED0-B323-49F5840527E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T17:15:11.867",
      "lastModified" : "2024-11-21T03:21:08.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.5.0, 4.4.5, 4.3.4 y 4.2.2. Permite a atacantes causar una denegación de servicio (bloqueo de la aplicación) por medio de un carácter @ antes de un nombre del campo JavaScript"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.2",
            "matchCriteriaId" : "F3D8AAC6-8CFD-408B-A11E-E9F8A1846478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.4",
            "matchCriteriaId" : "2311B658-A293-47CA-873A-E28F7443D4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "E6D90B0D-7882-4818-B2BA-D2B1A92C6C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "251BF2C1-3E96-46BF-9AA4-F30A19AF68C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56BAD3A2-A337-4A00-B546-0A106A593052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7394620-98B0-4859-B279-CF77E02D1F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D92720-E499-4ED0-B323-49F5840527E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T17:15:12.117",
      "lastModified" : "2024-11-21T03:21:09.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2, cuando el almacenamiento local para archivos es usado. Un Administrador System puede crear archivos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T17:15:12.177",
      "lastModified" : "2024-11-21T03:21:09.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2, cuando el almacenamiento local para archivos es usado. Un Administrador System puede probar la existencia de un archivo arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T17:15:12.257",
      "lastModified" : "2024-11-21T03:21:09.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Los ataques de tipo XSS pueden ocurrir contra una página allow/deny de OAuth versión 2.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "68AC27E1-9523-42D5-9A59-B91A3F4EC518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T18:15:10.537",
      "lastModified" : "2024-11-21T03:21:08.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.4.3 y 4.3.3. Los atacantes podrían reconfigurar una aplicación OAuth en algunos casos donde Mattermost es un proveedor de servicios de OAuth versión 2.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "1F608126-B2A9-42F2-A906-1DD6A3935067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "2864E807-573D-49D1-830F-D1CE15D54ECF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T18:15:10.600",
      "lastModified" : "2024-11-21T03:21:08.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Permite a atacantes causar una denegación de servicio (invisibilidad del canal) por medio de una publicación formateada incorrectamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:09.950",
      "lastModified" : "2024-11-21T03:21:09.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2, cuando es usado almacenamiento local para archivos. Un administrador System puede lograr un salto de directorio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.013",
      "lastModified" : "2024-11-21T03:21:09.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. El conocimiento de un ID de sesión permite revocar la sesión de otro usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.077",
      "lastModified" : "2024-11-21T03:21:09.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Un ataque de tipo XSS podría presentarse por medio del campo author_link de un archivo adjunto de Slack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.137",
      "lastModified" : "2024-11-21T03:21:09.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the title_link field of a Slack attachment."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Un ataque de tipo XSS podría presentarse por medio del campo title_link de un archivo adjunto de Slack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.200",
      "lastModified" : "2024-11-21T03:21:10.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via a goto_location response to a slash command."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Un ataque de tipo XSS podría presentarse por medio de una respuesta goto_location a un comando de barra diagonal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.247",
      "lastModified" : "2024-11-21T03:21:10.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Un ataque de tipo XSS puede presentarse por medio de datos de OpenGraph"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.310",
      "lastModified" : "2024-11-21T03:21:10.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2, cuando sirve como proveedor de servicios OAuth versión 2.0. Hay poca entropía para los datos de autorización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.373",
      "lastModified" : "2024-11-21T03:21:10.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by using a registered OAuth application with personal access tokens."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Permite a atacantes obtener privilegios mediante el uso de una aplicación OAuth registrada con tokens de acceso personal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.420",
      "lastModified" : "2024-11-21T03:21:10.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Permite a atacantes obtener privilegios al acceder a endpoints de la API no deseados en nombre de un usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.483",
      "lastModified" : "2024-11-21T03:21:10.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Permite una omisión de las restricciones sobre el uso de comandos de barra diagonal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.530",
      "lastModified" : "2024-11-21T03:21:10.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Revela una dirección de correo electrónico del creador del equipo a los miembros"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.590",
      "lastModified" : "2024-11-21T03:21:11.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Permite una inyección SQL durante la recuperación de múltiples publicaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.653",
      "lastModified" : "2024-11-21T03:21:11.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Un atacante podría crear publicaciones ficticias de mensajes del sistema por medio de webhooks y comandos de barra diagonal, en la API REST versiones v3 o v4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.700",
      "lastModified" : "2024-11-21T03:21:11.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.3.0, 4.2.1 y 4.1.2. Permite a un atacante crear un botón que, cuando es presionado por parte un usuario, inicia una petición de la API"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "72250CFB-47F9-40AE-BBD0-179D27CCF49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "7FE7E6F1-5B34-4D19-8B93-ED2E9EFFCAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB71A82C-2F6A-49EC-A541-1600304F4D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "91E5A299-021B-451B-95E2-4DC2DD6FF50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "471DFF36-36F3-4904-B5E9-091C259181A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8772DEC-C002-443E-9609-1CC2A6FD8037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.780",
      "lastModified" : "2024-11-21T03:21:11.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Permite Phishing porque una página de error puede tener un enlace"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.840",
      "lastModified" : "2024-11-21T03:21:11.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. E-mail templates can have a field in which HTML content is not neutralized."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Las plantillas de correo electrónico pueden tener un campo en el que el contenido HTML no es neutralizado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.903",
      "lastModified" : "2024-11-21T03:21:11.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. Display names allow XSS."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Los nombres a desplegar permiten un ataque de tipo XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:10.967",
      "lastModified" : "2024-11-21T03:21:12.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. Sometimes. resource-owner authorization is bypassed, allowing account takeover."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5, cuando se usaba como proveedor de servicios OAuth versión 2.0. Algunas veces, es omitida la autorización del propietario del recurso, lo que permite la toma de control de la cuenta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.030",
      "lastModified" : "2024-11-21T03:21:12.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to obtain sensitive information (user statuses) via a REST API version 4 endpoint."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Permite a atacantes obtener información confidencial (estados de los usuarios) por medio de un endpoint  de la API REST versión 4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.247",
      "lastModified" : "2024-11-21T03:21:12.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to add DEBUG lines to the logs via a REST API version 3 logging endpoint."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Permite a atacantes agregar líneas  DEBUG en los registros por medio de un endpoint de registro de la API REST versión 3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.327",
      "lastModified" : "2024-11-21T03:21:12.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. It mishandles a deny action for a redirection."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5, cuando es usado como proveedor de servicios OAuth versión 2.0. Maneja inapropiadamente una acción de denegación para una redirección"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.373",
      "lastModified" : "2024-11-21T03:21:12.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows crafted posts that potentially cause a web browser to hang."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Permite publicaciones diseñadas que pueden causar que un navegador web se cuelgue"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.437",
      "lastModified" : "2024-11-21T03:21:12.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It mishandles IP-based rate limiting."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.2.0, 4.1.1 y 4.0.5. Maneja inapropiadamente la limitación de velocidad basada en IP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "8DABD3D9-ABA0-435A-826E-894B85BF330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "C98DA462-E8C3-4011-995F-1D813670A5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCAAA7B-C893-48F1-B72C-06101B26EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7103DBD3-7169-4EF7-8354-122E98FBE442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F4BE86-1DEE-4730-8CC6-64A05A0C85EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:4.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B725A0DC-8A41-4788-A705-2EE23EE13009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.497",
      "lastModified" : "2024-11-21T03:21:12.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.1.0, 4.0.4 y 3.10.3. Permite una inyección de CSV por medio de un informe de cumplimiento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.3",
            "matchCriteriaId" : "D17BC777-43D7-4B7B-B969-23B85BC94AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "88AA2DE4-716D-43AD-BD34-DFA48FCBE22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.577",
      "lastModified" : "2024-11-21T03:21:13.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.1.0, 4.0.4 y 3.10.3. Permite a atacantes detectar un ID de invitación de equipo al solicitar un documento JSON"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.3",
            "matchCriteriaId" : "D17BC777-43D7-4B7B-B969-23B85BC94AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "88AA2DE4-716D-43AD-BD34-DFA48FCBE22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.653",
      "lastModified" : "2024-11-21T03:21:13.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.1.0, 4.0.4 y 3.10.3. Permite a atacantes detectar los ID de invitación de equipo por medio de los endpoints de la API de equipo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.3",
            "matchCriteriaId" : "D17BC777-43D7-4B7B-B969-23B85BC94AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "88AA2DE4-716D-43AD-BD34-DFA48FCBE22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.717",
      "lastModified" : "2024-11-21T03:21:13.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. CSRF can occur if CORS is enabled."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.0.0, 3.10.2 y 3.9.2. Un ataque de tipo CSRF puede presentarse si CORS está habilitado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "B9810018-925D-4842-A38A-00743CDBFCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "592EBE66-F1CC-46C6-BB06-D204C5C20544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.763",
      "lastModified" : "2024-11-21T03:21:13.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. It allows XSS via an uploaded file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.0.0, 3.10.2 y 3.9.2. Permite un ataque de tipo XSS por medio de un archivo cargado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "B9810018-925D-4842-A38A-00743CDBFCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "592EBE66-F1CC-46C6-BB06-D204C5C20544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.827",
      "lastModified" : "2024-11-21T03:21:14.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.9.0 when SAML is used. Encryption and signature verification are not mandatory."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.9.0, cuando se usa SAML. El cifrado y la verificación de firma no son obligatorios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.0",
            "matchCriteriaId" : "4C298EE4-DB54-4B7C-8A07-DE50518F8942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.887",
      "lastModified" : "2024-11-21T03:21:14.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. E-mail notifications can have spoofed links."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. Las notificaciones de correo electrónico pueden tener enlaces falsificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "0FC88F96-4FC6-4A4D-952A-B130E581D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.937",
      "lastModified" : "2024-11-21T03:21:14.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. La comprobación del certificado X.509 puede ser omitida para un servidor de correo electrónico basado en TLS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "0FC88F96-4FC6-4A4D-952A-B130E581D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T19:15:11.997",
      "lastModified" : "2024-11-21T03:21:14.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. It allows an attacker to specify a full pathname of a log file."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. Permite a un atacante especificar un nombre de ruta completo de un archivo de registro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "0FC88F96-4FC6-4A4D-952A-B130E581D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.087",
      "lastModified" : "2024-11-21T03:21:13.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.0.0, 3.10.2 y 3.9.2, cuando se usaba como proveedor de servicios OAuth versión 2.0, una invalidación de Sesión se manejó inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "B9810018-925D-4842-A38A-00743CDBFCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "592EBE66-F1CC-46C6-BB06-D204C5C20544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.147",
      "lastModified" : "2024-11-21T03:21:13.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OAuth2 is used. An attacker could claim somebody else's account."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.0.0, 3.10.2 y 3.9.2, cuando Single Sign-On OAuth2 es usado. Un atacante podría demandar la cuenta de otra persona"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "B9810018-925D-4842-A38A-00743CDBFCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "592EBE66-F1CC-46C6-BB06-D204C5C20544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.197",
      "lastModified" : "2024-11-21T03:21:13.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. XSS could occur via a channel header."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.0.0, 3.10.2 y 3.9.2. Un ataque de tipo XSS podría presentarse por medio de un encabezado de canal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "B9810018-925D-4842-A38A-00743CDBFCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "592EBE66-F1CC-46C6-BB06-D204C5C20544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.257",
      "lastModified" : "2024-11-21T03:21:14.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. A password-reset request was sometime sent to an attacker-provided e-mail address."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 4.0.0, 3.10.2 y 3.9.2. Una petición de restablecimiento de contraseña en algún momento fue enviada a una dirección de correo electrónico proporcionada por el atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "B9810018-925D-4842-A38A-00743CDBFCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "592EBE66-F1CC-46C6-BB06-D204C5C20544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.320",
      "lastModified" : "2024-11-21T03:21:14.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. XSS can occur via a link on an error page."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. Un ataque de tipo XSS puede presentarse por medio de un enlace en una página de error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "0FC88F96-4FC6-4A4D-952A-B130E581D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.367",
      "lastModified" : "2024-11-21T03:21:14.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. An external link can occur on an error page even if it is not on an allowlist."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. Un enlace externo puede presentarse en una página de error incluso si no está en una lista de permitidos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "0FC88F96-4FC6-4A4D-952A-B130E581D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.413",
      "lastModified" : "2024-11-21T03:21:15.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. Luego de reiniciar un servidor, un atacante podría conseguir repentinamente acceso al Endpoint de la API"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "2965755B-6C26-43BB-9EFC-9E9C2DD32C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.477",
      "lastModified" : "2024-11-21T03:21:15.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor an integration permission restriction."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. El control de acceso de endpoint de la API no respeta una restricción de permiso de integración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "0FC88F96-4FC6-4A4D-952A-B130E581D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.523",
      "lastModified" : "2024-11-21T03:21:15.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.8.2, 3.7.5 y 3.6.7. Se usó un proceso de hash débil para invitaciones de correo electrónico, OAuth y tokens de verificación de correo electrónico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "2965755B-6C26-43BB-9EFC-9E9C2DD32C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "A164D156-BF18-421E-B54A-983E24E0F4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "86BDAD96-71AA-4D79-B6E6-142D00B2C799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.587",
      "lastModified" : "2024-11-21T03:21:15.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.7.3 y 3.6.5. Un Administrador de Sistema puede colocar un certificado SAML en un nombre de ruta arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "299E58B9-BB6D-45C0-91FC-545B784B0979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.3",
            "matchCriteriaId" : "8158E430-7C21-486E-9B67-053F258AB134"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.647",
      "lastModified" : "2024-11-21T03:21:15.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. Attackers can use the API for unauthenticated team creation."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.7.0 y 3.6.3. Los atacantes pueden usar la API para la creación de un equipo no autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.3",
            "matchCriteriaId" : "71AC31E7-7EF0-4561-BEB4-7EECA2D7126D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.710",
      "lastModified" : "2024-11-21T03:21:15.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.6.2. La funcionalidad WebSocket no sigue la Política del Mismo Origen"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "31481AAF-DD23-4481-9E33-815D1FAB9946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-19T20:15:12.773",
      "lastModified" : "2024-11-21T03:21:15.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mattermost Server versiones anteriores a 3.6.0 y 3.5.2. Un ataque de tipo XSS puede presentarse por medio de un enlace en una página de error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.2",
            "matchCriteriaId" : "792926E7-A107-40E9-9CB9-5AB8BBC130E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-06-30T11:15:10.380",
      "lastModified" : "2024-11-21T03:21:16.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se detectó que el archivo websockets.c en LibVNCServer versiones anteriores a 0.9.12, no decodificaba apropiadamente determinados tramas de WebSocket. Un atacante malicioso podría explotar esto mediante el envío de tramas de WebSocket especialmente diseñadas hacia un servidor, causando un desbordamiento del búfer en la región heap de la memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvncserver_project:libvncserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.12",
            "matchCriteriaId" : "8A3F7478-C54D-43A6-85A5-5AB59D446D75"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31C8344-3E02-4EB8-8BD8-4C84B7959624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620311B-34A3-48A6-82DF-6F078D7A4493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B009C22E-30A4-4288-BCF6-C3E81DEAF45A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0.0",
            "versionEndExcluding" : "3.2.1.0",
            "matchCriteriaId" : "3A664216-EEA0-423F-8E11-59C746FDEEFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9596C8CD-B03F-4E9D-82AB-0986FDD1B47C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0.0",
            "versionEndExcluding" : "3.2.1.0",
            "matchCriteriaId" : "CD78291E-48D8-4718-AE14-BDF93BD557D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1500_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB898D3-07A3-42A1-8F1B-53C3B005982D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0.0",
            "versionEndExcluding" : "3.2.1.0",
            "matchCriteriaId" : "AD1209DE-2724-493D-8276-1BE959BFE6BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9143A6-A93A-45CA-8A1F-6EE30647B54A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0.0",
            "versionEndExcluding" : "3.2.1.0",
            "matchCriteriaId" : "92F7FC17-F19F-4BD6-9704-49B67D22B532"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc1900_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D34BD13-4E71-48A2-851D-AE7CE2A03C28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0.0",
            "versionEndExcluding" : "3.2.1.0",
            "matchCriteriaId" : "FE4A6F13-385B-4A13-B8D8-3BBC4E9D5B67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E63E423-7450-4043-B33B-3FFF5BBE1CB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0.0",
            "versionEndExcluding" : "3.2.1.0",
            "matchCriteriaId" : "71A51CA4-1A62-47BC-99A3-4DC9F3986FF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_itc2200_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD278558-AB0E-4FC1-9E5B-6B57D29CB86A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/06/30/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1852356",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/4407-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2020/06/30/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/06/30/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1852356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/4407-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2020/06/30/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1659",
      "sourceIdentifier" : "psirt@hcl.com",
      "published" : "2020-07-01T14:15:13.747",
      "lastModified" : "2024-11-21T03:22:11.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.\""
      }, {
        "lang" : "es",
        "value" : "\"HCL iNotes es susceptible a una vulnerabilidad de tipo Cross-Site Scripting (XSS). Un atacante podría usar esta vulnerabilidad para robar las credenciales de autenticación basadas en cookies de la víctima\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inotes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.1.9",
            "matchCriteriaId" : "43D08CBA-AC08-4494-8961-8BA363DBBA23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080512",
        "source" : "psirt@hcl.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1712",
      "sourceIdentifier" : "psirt@hcl.com",
      "published" : "2020-07-01T14:15:14.027",
      "lastModified" : "2024-11-21T03:22:15.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions.\""
      }, {
        "lang" : "es",
        "value" : "\"Una vulnerabilidad en la implementación del protocolo TLS del servidor Domino podría permitir a un atacante remoto no autenticado acceder a información confidencial, también se conoce como un ataque de tipo Oracle Threat (ROBOT) de Return of Bleichenbacher. Un atacante podría consultar iterativamente un servidor que ejecuta una implementación de pila TLS vulnerable para llevar a cabo operaciones criptoanalíticas que pueden permitir un descifrado de sesiones TLS capturadas previamente\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1",
            "matchCriteriaId" : "EA96995E-99EC-4260-A329-B4137AFBEB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080545",
        "source" : "psirt@hcl.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-07-29T20:15:12.303",
      "lastModified" : "2024-11-21T03:21:16.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials."
      }, {
        "lang" : "es",
        "value" : "beroNet VoIP Gateways versiones anteriores a 3.0.16, presentan un script PHP que permite descargar archivos arbitrarios, incluyendo aquellos con credenciales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beronet:voice_over_internet_protocol_gateways_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "6A52452B-5C05-4FBB-B74B-8C67308622E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bf16001e1box:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92542C47-7C84-497E-B008-CFEFF1F5808C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bf16001t1box:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41923990-1DFB-4DC3-90AD-E8B4903D6E20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bf4001e1box:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26F9826-BF11-4BEC-ADCD-56E117E61B2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bf4001t1box:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1ED34D1-80E7-47CD-A48C-4E68260E788F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bf64002e1box:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48CDAAE-0B32-4B4A-933A-F4295E99B9D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bf64002t1box:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D617773-71E4-4FB8-8B73-DE9619BD6C63"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb1s0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A187A2F-7D37-41D5-9BF1-A46837DC61CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb2hy:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D346B0-8AD2-4EE6-A2EC-F09ACFC1D153"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb2s0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2010A08A-9C0D-4F11-BEA9-AA0900911E64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb2s02xo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291EE6F7-5B9C-47F6-A282-0A6CDC4D729E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb4xo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA29D448-F80E-411E-94B9-DB5D8991F3D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb4xo4xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D16E8732-AA00-4662-9DEF-2433110F8B99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bfsb4xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20051927-AFE0-42E1-A8A8-89E651786A5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bn16fxsfax_b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9989C947-95C8-4B2E-9ACF-297E985002C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beronet:bn16fxsfax_c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E167633-77E9-44E4-B5B5-ECCC3C0FABA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://beronet.atlassian.net/wiki/spaces/PUB/pages/88768529/Security+Issues",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.heise.de/security/meldung/Angriffe-auf-VoIP-Gateways-von-beroNet-Patch-sorgt-fuer-Sicherheit-3594737.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://beronet.atlassian.net/wiki/spaces/PUB/pages/88768529/Security+Issues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.heise.de/security/meldung/Angriffe-auf-VoIP-Gateways-von-beroNet-Patch-sorgt-fuer-Sicherheit-3594737.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18112",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2020-08-05T04:15:13.683",
      "lastModified" : "2024-11-21T03:19:23.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Information Disclosure vulnerability in the logging feature. The affected versions are before version 4.8.3."
      }, {
        "lang" : "es",
        "value" : "Las versiones afectadas de Atlassian Fisheye, permiten a atacantes remotos visualizar la contraseña HTTP de un repositorio por medio de una vulnerabilidad de divulgación de información en la funcionalidad logging. Las versiones afectadas son anteriores a la versión 4.8.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.3",
            "matchCriteriaId" : "95BF3B44-3024-440E-9231-0F2503ED8C73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/FE-7309",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/FE-7309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8986",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:11.857",
      "lastModified" : "2023-11-07T02:50:29.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8995",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:11.903",
      "lastModified" : "2023-11-07T02:50:30.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8996",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:11.967",
      "lastModified" : "2023-11-07T02:50:30.347",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8997",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.027",
      "lastModified" : "2023-11-07T02:50:30.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8998",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.090",
      "lastModified" : "2023-11-07T02:50:30.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8999",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.137",
      "lastModified" : "2023-11-07T02:50:31.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9004",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.200",
      "lastModified" : "2023-11-07T02:50:31.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9005",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.247",
      "lastModified" : "2023-11-07T02:50:31.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9006",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.307",
      "lastModified" : "2023-11-07T02:50:31.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9007",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.357",
      "lastModified" : "2023-11-07T02:50:32.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9008",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.403",
      "lastModified" : "2023-11-07T02:50:32.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9009",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.450",
      "lastModified" : "2023-11-07T02:50:32.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9010",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.497",
      "lastModified" : "2023-11-07T02:50:32.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9011",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.543",
      "lastModified" : "2023-11-07T02:50:33.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9012",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.590",
      "lastModified" : "2023-11-07T02:50:33.340",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9013",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.653",
      "lastModified" : "2023-11-07T02:50:33.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9014",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.700",
      "lastModified" : "2023-11-07T02:50:33.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9015",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.760",
      "lastModified" : "2023-11-07T02:50:34.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9016",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.807",
      "lastModified" : "2023-11-07T02:50:34.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9017",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.870",
      "lastModified" : "2023-11-07T02:50:34.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9018",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2020-08-17T15:15:12.917",
      "lastModified" : "2023-11-07T02:50:34.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-09-25T04:23:01.967",
      "lastModified" : "2024-11-21T03:18:00.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views."
      }, {
        "lang" : "es",
        "value" : "Pexip Infinity versiones anteriores a 17, permite a un atacante remoto no autenticado lograr un ataque de tipo XSS almacenado por medio de unas vistas de la interfaz web de administración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10",
            "versionEndExcluding" : "17",
            "matchCriteriaId" : "C224CDDE-D79D-415D-BE18-0261645D52EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.pexip.com/admin/security_bulletins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.pexip.com/security-bulletins",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.pexip.com/admin/security_bulletins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.pexip.com/security-bulletins",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-10-04T05:15:12.140",
      "lastModified" : "2024-11-21T03:21:16.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CVE-2020-7692. NOTE: the vendor states 'As RFC7636 is an extension, I think the claim in the Readme of \"RFC 6749 compliant\" is valid and not misleading and I also therefore wouldn't describe this as a \"vulnerability\" with the library per se."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** oauth2-server (también se conoce como node-oauth2-server) versiones hasta 3.1.1, implementa OAuth versión 2.0 sin PKCE.&#xa0;No impide la inyección de código de autorización.&#xa0;Esto es similar a CVE-2020-7692.&#xa0;NOTA: el proveedor declara \"Como RFC7636 es una extensión, considero que la afirmación en el archivo Léame de \"compatible con RFC 6749\" es válida y no engañosa y, por lo tanto, tampoco describiría esto como una \"vulnerabilidad\" con la biblioteca en sí"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oauth2-server_project:oauth2-server:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "3.1.1",
            "matchCriteriaId" : "7FFE5BBB-4620-482D-A32F-D416AA7E4ADA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codeburst.io/missing-the-point-in-securing-oauth-2-0-83968708b467",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauthjs/node-oauth2-server/issues/637",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauthjs/node-oauth2-server/pull/452",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.ietf.org/html/draft-ietf-oauth-security-topics-15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.ietf.org/html/rfc7636",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codeburst.io/missing-the-point-in-securing-oauth-2-0-83968708b467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauthjs/node-oauth2-server/issues/637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauthjs/node-oauth2-server/pull/452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.ietf.org/html/draft-ietf-oauth-security-topics-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.ietf.org/html/rfc7636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-10-26T18:15:14.090",
      "lastModified" : "2024-11-21T03:21:16.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d entries are mishandled and allow a symlink attack."
      }, {
        "lang" : "es",
        "value" : "opentmpfiles versiones hasta 0.3.1, permite a usuarios locales tomar posesión de archivos arbitrarios porque las entradas d son manejadas inapropiadamente y permiten un ataque de tipo symlink"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openr:opentmpfiles:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.1",
            "matchCriteriaId" : "BC932A61-EBC3-434B-8B2E-DDD8ABFDC956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenRC/opentmpfiles/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenRC/opentmpfiles/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15140",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:13.857",
      "lastModified" : "2023-11-07T02:39:21.597",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15141",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:13.933",
      "lastModified" : "2023-11-07T02:39:21.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15142",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:13.997",
      "lastModified" : "2023-11-07T02:39:22.053",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15143",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.060",
      "lastModified" : "2023-11-07T02:39:22.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15144",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.137",
      "lastModified" : "2023-11-07T02:39:22.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15145",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.200",
      "lastModified" : "2023-11-07T02:39:22.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15146",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.263",
      "lastModified" : "2023-11-07T02:39:23.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15147",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.327",
      "lastModified" : "2023-11-07T02:39:23.250",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15148",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.420",
      "lastModified" : "2023-11-07T02:39:23.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15149",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.480",
      "lastModified" : "2023-11-07T02:39:23.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15150",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.543",
      "lastModified" : "2023-11-07T02:39:23.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15151",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.623",
      "lastModified" : "2023-11-07T02:39:24.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15152",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.700",
      "lastModified" : "2023-11-07T02:39:24.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15153",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.763",
      "lastModified" : "2023-11-07T02:39:24.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15154",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.827",
      "lastModified" : "2023-11-07T02:39:24.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15155",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.920",
      "lastModified" : "2023-11-07T02:39:25.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15156",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:14.980",
      "lastModified" : "2023-11-07T02:39:25.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15157",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.043",
      "lastModified" : "2023-11-07T02:39:25.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15158",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.107",
      "lastModified" : "2023-11-07T02:39:25.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15159",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.183",
      "lastModified" : "2023-11-07T02:39:26.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15160",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.247",
      "lastModified" : "2023-11-07T02:39:26.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15161",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.327",
      "lastModified" : "2023-11-07T02:39:26.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15162",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.387",
      "lastModified" : "2023-11-07T02:39:27.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15163",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.467",
      "lastModified" : "2023-11-07T02:39:27.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15164",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.543",
      "lastModified" : "2023-11-07T02:39:27.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15165",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.610",
      "lastModified" : "2023-11-07T02:39:27.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15166",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.670",
      "lastModified" : "2023-11-07T02:39:27.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15167",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.747",
      "lastModified" : "2023-11-07T02:39:28.220",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15168",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.810",
      "lastModified" : "2023-11-07T02:39:28.453",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15169",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.873",
      "lastModified" : "2023-11-07T02:39:28.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15170",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:15.933",
      "lastModified" : "2023-11-07T02:39:28.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15171",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.013",
      "lastModified" : "2023-11-07T02:39:29.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15172",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.077",
      "lastModified" : "2023-11-07T02:39:29.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15173",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.137",
      "lastModified" : "2023-11-07T02:39:29.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15174",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.200",
      "lastModified" : "2023-11-07T02:39:29.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15175",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.263",
      "lastModified" : "2023-11-07T02:39:30.160",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15176",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.327",
      "lastModified" : "2023-11-07T02:39:30.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15177",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.387",
      "lastModified" : "2023-11-07T02:39:30.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15178",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.450",
      "lastModified" : "2023-11-07T02:39:30.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15179",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.527",
      "lastModified" : "2023-11-07T02:39:31.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15180",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.590",
      "lastModified" : "2023-11-07T02:39:31.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15181",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.670",
      "lastModified" : "2023-11-07T02:39:31.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15182",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.730",
      "lastModified" : "2023-11-07T02:39:31.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15183",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.793",
      "lastModified" : "2023-11-07T02:39:32.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15184",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.873",
      "lastModified" : "2023-11-07T02:39:32.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17331",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.933",
      "lastModified" : "2023-11-07T02:41:29.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17332",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:16.997",
      "lastModified" : "2023-11-07T02:41:30.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17333",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.060",
      "lastModified" : "2023-11-07T02:41:30.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17334",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.123",
      "lastModified" : "2023-11-07T02:41:30.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17335",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.200",
      "lastModified" : "2023-11-07T02:41:31.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17336",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.263",
      "lastModified" : "2023-11-07T02:41:31.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17337",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.340",
      "lastModified" : "2023-11-07T02:41:31.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17338",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.420",
      "lastModified" : "2023-11-07T02:41:31.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17339",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.480",
      "lastModified" : "2023-11-07T02:41:32.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17340",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.543",
      "lastModified" : "2023-11-07T02:41:32.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17341",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.607",
      "lastModified" : "2023-11-07T02:41:32.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17342",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.670",
      "lastModified" : "2023-11-07T02:41:32.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17343",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.730",
      "lastModified" : "2023-11-07T02:41:32.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17344",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.793",
      "lastModified" : "2023-11-07T02:41:33.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17345",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.873",
      "lastModified" : "2023-11-07T02:41:33.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17346",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.937",
      "lastModified" : "2023-11-07T02:41:33.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17347",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:17.997",
      "lastModified" : "2023-11-07T02:41:33.913",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17348",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.060",
      "lastModified" : "2023-11-07T02:41:34.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17349",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.123",
      "lastModified" : "2023-11-07T02:41:34.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17350",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.187",
      "lastModified" : "2023-11-07T02:41:35.040",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17351",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.247",
      "lastModified" : "2023-11-07T02:41:35.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17352",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.310",
      "lastModified" : "2023-11-07T02:41:35.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17353",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.377",
      "lastModified" : "2023-11-07T02:41:35.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17354",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.437",
      "lastModified" : "2023-11-07T02:41:35.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17355",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.497",
      "lastModified" : "2023-11-07T02:41:36.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17356",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.560",
      "lastModified" : "2023-11-07T02:41:36.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17357",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.607",
      "lastModified" : "2023-11-07T02:41:36.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17358",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.687",
      "lastModified" : "2023-11-07T02:41:36.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17359",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.747",
      "lastModified" : "2023-11-07T02:41:37.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17360",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.827",
      "lastModified" : "2023-11-07T02:41:37.477",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17361",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.903",
      "lastModified" : "2023-11-07T02:41:37.710",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17362",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:18.967",
      "lastModified" : "2023-11-07T02:41:37.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17363",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.027",
      "lastModified" : "2023-11-07T02:41:38.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17364",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.090",
      "lastModified" : "2023-11-07T02:41:38.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17365",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.153",
      "lastModified" : "2023-11-07T02:41:38.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17366",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.217",
      "lastModified" : "2023-11-07T02:41:38.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17367",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.277",
      "lastModified" : "2023-11-07T02:41:39.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17368",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.340",
      "lastModified" : "2023-11-07T02:41:39.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17369",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.420",
      "lastModified" : "2023-11-07T02:41:39.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17370",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.513",
      "lastModified" : "2023-11-07T02:41:39.937",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17371",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.577",
      "lastModified" : "2023-11-07T02:41:40.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17372",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.637",
      "lastModified" : "2023-11-07T02:41:40.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17373",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.717",
      "lastModified" : "2023-11-07T02:41:40.680",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17374",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.777",
      "lastModified" : "2023-11-07T02:41:40.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17375",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.857",
      "lastModified" : "2023-11-07T02:41:41.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17376",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.937",
      "lastModified" : "2023-11-07T02:41:41.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17377",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:19.997",
      "lastModified" : "2023-11-07T02:41:41.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17378",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:20.077",
      "lastModified" : "2023-11-07T02:41:41.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17379",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:20.137",
      "lastModified" : "2023-11-07T02:41:42.117",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17380",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2020-11-05T23:15:20.200",
      "lastModified" : "2023-11-07T02:41:42.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-06T18:15:11.967",
      "lastModified" : "2024-11-21T03:21:16.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml)."
      }, {
        "lang" : "es",
        "value" : "La función raptor_xml_writer_start_element_common en el archivo raptor_xml_writer.c en Raptor RDF Syntax Library versión 2.0.15, calcula inapropiadamente las declaraciones máximas nspace para el escritor XML, conllevando a desbordamientos del búfer en la región heap de la memoria (algunas veces se ve en la función raptor_qname_format_as_xml)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librdf:raptor_rdf_syntax_library:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17358FFE-7BE0-41A3-8FE2-25BA7403C244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F0FA5D-8D3B-4C0E-81E2-87998286AF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/13/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/13/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/14/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/16/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/16/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/blob/master/external/redland/raptor/0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/11/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD67AVORGQXORPWNYYUHCH6YPPT6CI4O/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVHFYQDMVEBICIL4DBAGRRLPUR4QYWMV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDZRNM45VPTQF2BKRWG4YRCHJGQ2L7NS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4785",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2017/06/07/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2020/11/16/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreOffice/core/blob/master/external/redland/raptor/0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2020/11/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD67AVORGQXORPWNYYUHCH6YPPT6CI4O/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVHFYQDMVEBICIL4DBAGRRLPUR4QYWMV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDZRNM45VPTQF2BKRWG4YRCHJGQ2L7NS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2020/dsa-4785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2017/06/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:10.830",
      "lastModified" : "2024-11-21T03:14:59.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data."
      }, {
        "lang" : "es",
        "value" : "En Crafter CMS Crafter Studio versión 3.0.1, se presenta una vulnerabilidad IDOR que permite a atacantes no autenticados visualizar y modificar datos administrativos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "8B98251C-3275-4796-8115-5B196EE21790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crafter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://crafter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:10.907",
      "lastModified" : "2024-11-21T03:14:59.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE."
      }, {
        "lang" : "es",
        "value" : "En Crafter CMS Crafter Studio versión 3.0.1, se presenta una vulnerabilidad de salto de directorio que permite a atacantes no autenticados sobrescribir archivos del sistema operativo que pueden conllevar a una RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "0003F68D-860C-456F-950F-FECE6D9BC0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crafter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://crafter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:11.063",
      "lastModified" : "2024-11-21T03:14:59.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel."
      }, {
        "lang" : "es",
        "value" : "En Crafter CMS Crafter Studio versión 3.0.1, un atacante no autenticado es capaz de inyectar código JavaScript malicioso, resultando en una vulnerabilidad de tipo XSS almacenado y oculto en el panel de administración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "0003F68D-860C-456F-950F-FECE6D9BC0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crafter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://crafter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:11.127",
      "lastModified" : "2024-11-21T03:15:00.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band."
      }, {
        "lang" : "es",
        "value" : "En Crafter CMS Crafter Studio versión 3.0.1, un atacante no autenticado es capaz de crear un sitio con XML especialmente diseñado que permite la recuperación de archivos del Sistema Operativo fuera de banda"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "0003F68D-860C-456F-950F-FECE6D9BC0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crafter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://crafter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:11.207",
      "lastModified" : "2024-11-21T03:15:00.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system."
      }, {
        "lang" : "es",
        "value" : "Crafter CMS Crafter Studio versión 3.0.1, presenta una vulnerabilidad de salto de directorios que permite a atacantes no autenticados visualizar archivos del sistema operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "0003F68D-860C-456F-950F-FECE6D9BC0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crafter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://crafter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:11.267",
      "lastModified" : "2024-11-21T03:15:00.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band."
      }, {
        "lang" : "es",
        "value" : "Crafter CMS Crafter Studio versión 3.0.1, está afectado por: un ataque de tipo XML External Entity (XXE).&#xa0;Un atacante no autenticado es capaz de crear un sitio con XML especialmente diseñado que permite la recuperación de archivos del Sistema Operativo fuera de banda"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "0003F68D-860C-456F-950F-FECE6D9BC0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://crafter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://crafter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2020-11-27T18:15:11.330",
      "lastModified" : "2024-11-21T03:15:00.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies."
      }, {
        "lang" : "es",
        "value" : "Crafter CMS Crafter Studio versión 3.0.1, está afectado por: una vulnerabilidad de tipo Cross Site Scripting (XSS), que permite a atacantes remotos robar las cookies de unos usuarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "0003F68D-860C-456F-950F-FECE6D9BC0EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.craftercms.org/en/3.0/security/advisory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14451",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2020-12-02T18:15:12.040",
      "lastModified" : "2024-11-21T03:12:49.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send malicious smart contract to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de lectura fuera de límites explotable en libevm (Ethereum Virtual Machine) de CPP-Ethereum.&#xa0;Un código de contrato inteligente especialmente diseñado puede causar una lectura fuera de límites que posteriormente puede desencadenar una escritura fuera de límites resultando en una ejecución del código remota.&#xa0;Un atacante puede crear y enviar contratos inteligentes maliciosos para desencadenar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:ethereum:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96CA288-99DA-4E74-9AE2-0CF5B4867FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0500",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2910",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2020-12-02T18:15:12.133",
      "lastModified" : "2024-11-21T03:24:26.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites explotable en la función xls_addCell de libxls versión 2.0.&#xa0;Un archivo xls especialmente diseñado puede dañar la memoria y causar una ejecución de código remota.&#xa0;Un atacante puede enviar un archivo xls malicioso para desencadenar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libxls_project:libxls:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD8EE0-DACE-422F-BC3A-9D882DFB9333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0417",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-01T01:15:12.823",
      "lastModified" : "2024-11-21T03:22:25.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy."
      }, {
        "lang" : "es",
        "value" : "El proyecto de cifrado AES versiones 7.x y 8.x para Drupal, no impide suficientemente a atacantes descifrar datos, también se conoce como SA-CONTRIB-2017-027.&#xa0;NOTA: Este proyecto no está cubierto por la política de avisos de seguridad de Drupal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aes_encryption_project:aes_encryption:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "7.x-1.4",
            "versionEndIncluding" : "7.x-1.10",
            "matchCriteriaId" : "6C03F290-B5DB-4A5B-9167-310916F34464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aes_encryption_project:aes_encryption:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "8.x-2.1",
            "versionEndIncluding" : "8.x-2.4",
            "matchCriteriaId" : "8A6D9358-6DB3-46C1-B970-A0F2CF541726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/node/2857028",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.drupal.org/node/2857028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-17T06:15:12.107",
      "lastModified" : "2024-11-21T03:22:25.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). This notably affects environments such as virtual machines automatically generated with a default blank root password, allowing all local users to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "El paquete shadow de Debian versiones anteriores a 4.5-1 para Shadow, enumera incorrectamente pts/0 y pts/1 como terminales físicos en /etc/securetty.&#xa0;Esto permite a usuarios locales iniciar sesión como usuarios sin contraseña incluso si están conectados por medios no físicos como SSH (por lo tanto, omitiendo una configuración nullok_secure de PAM).&#xa0;Esto afecta notablemente a entornos como las máquinas virtuales generadas automáticamente con una contraseña root en blanco predeterminada, permitiendo a todos los usuarios locales escalar privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1317D10-D7BA-4A18-8667-7542A44A4989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877374",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914957",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T07:15:11.493",
      "lastModified" : "2024-11-21T03:22:25.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar en Rust versiones anteriores a 119.0, se presenta un problema de sincronización en el objeto MutexGuard.&#xa0;MutexGuards puede ser usada en subprocesos de cualquier tipo, permitiendo problemas de seguridad de la memoria a través de condiciones de carrera"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "F38A7CFC-D141-4D80-A5B2-2CD43BC89E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/issues/41622",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/41624",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/issues/41622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/41624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20003",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T16:15:07.880",
      "lastModified" : "2023-11-07T02:43:15.513",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-19T14:15:07.263",
      "lastModified" : "2024-11-21T03:18:26.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE)."
      }, {
        "lang" : "es",
        "value" : "BMC Remedy Mid Tier versión 9.1SP3, está afectado por la inclusión de archivos locales y remotos. Debido a una falta de restricciones sobre lo que puede ser atacado, el sistema puede ser vulnerable a ataques como el sistema de huellas dactilares, el escaneo de puertos internos, un Server Side Request Forgery (SSRF) o una ejecución de código remota (RCE)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:remedy_mid-tier:9.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB1B5E3-12D9-4A40-A5F9-B7D787B4E651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bmc.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bmc.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-19T14:15:07.297",
      "lastModified" : "2024-11-21T03:18:26.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data."
      }, {
        "lang" : "es",
        "value" : "BMC Remedy Mid Tier versión 9.1SP3, está afectado por un secuestro de registros.&#xa0;Unos usuarios no autenticados remotos pueden ser accedidos al registro, permitiendo a un atacante apropiarse de los registros del sistema.&#xa0;Estos datos pueden incluir nombres de usuario y datos HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:remedy_mid-tier:9.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB1B5E3-12D9-4A40-A5F9-B7D787B4E651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bmc.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bmc.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-19T14:15:07.330",
      "lastModified" : "2024-11-21T03:18:26.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code."
      }, {
        "lang" : "es",
        "value" : "BMC Remedy versión 9.1SP3, está afectado por una ejecución del código autenticado.&#xa0;Unos usuarios autenticados que presentan derecho a crear informes pueden usar plantillas BIRT para ejecutar código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:remedy_mid-tier:9.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB1B5E3-12D9-4A40-A5F9-B7D787B4E651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bmc.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bmc.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-19T14:15:07.367",
      "lastModified" : "2024-11-21T03:18:26.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS). A DOM-based cross-site scripting vulnerability was discovered in a legacy utility."
      }, {
        "lang" : "es",
        "value" : "BMC Remedy Mid Tier versión 9.1SP3, está afectado por una vulnerabilidad de tipo cross-site scripting (XSS).&#xa0;Se detectó una vulnerabilidad de tipo cross-site scripting basada en DOM en una utilidad heredada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:remedy_mid-tier:9.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB1B5E3-12D9-4A40-A5F9-B7D787B4E651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bmc.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bmc.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://remedy.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2017/Oct/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-06-02T14:15:07.753",
      "lastModified" : "2024-11-21T03:34:38.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected."
      }, {
        "lang" : "es",
        "value" : "En OpenStack Swift versiones hasta 2.10.1, versiones 2.11.0 hasta 2.13.0 y la versión 2.14.0, el servidor proxy registra las rutas tempurl completas, potencialmente filtrando firmas tempurl reutilizables a cualquiera que tenga acceso a estos registros. Todas las implantaciones de Swift que usen el middleware tempurl están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:swift:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.1",
            "matchCriteriaId" : "65898588-B51B-4705-AC87-B287ED51710E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:swift:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.11.0",
            "versionEndIncluding" : "2.13.0",
            "matchCriteriaId" : "BB647119-891D-4DEB-964C-FD41C012C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:swift:2.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B68489-C6F2-4BF1-B5CC-4257615C2CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.net/bugs/1685798",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/1685798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-06-06T22:15:08.417",
      "lastModified" : "2024-11-21T03:22:25.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module."
      }, {
        "lang" : "es",
        "value" : "NGINX versiones anteriores a 1.13.6, presenta un desbordamiento de búfer para los años que superan los cuatro dígitos, como es demostrado por un archivo con una fecha de modificación en 1969 que causa un desbordamiento de enteros (o una falsa fecha de modificación en el futuro), cuando es encontrado por el módulo autoindex"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.6",
            "matchCriteriaId" : "A212321D-5686-4DFF-80DD-3C3AF03971A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nginx.org/en/CHANGES",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nginx/nginx/commit/0206ebe76f748bb39d9de4dd4b3fce777fdfdccf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nginx/nginx/commit/b900cc28fcbb4cf5a32ab62f80b59292e1c85b4b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210805-0006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.nginx.org/nginx/ticket/1368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.org/en/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nginx/nginx/commit/0206ebe76f748bb39d9de4dd4b3fce777fdfdccf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nginx/nginx/commit/b900cc28fcbb4cf5a32ab62f80b59292e1c85b4b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210805-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.nginx.org/nginx/ticket/1368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1070",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.197",
      "lastModified" : "2023-11-07T02:42:16.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1071",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.237",
      "lastModified" : "2023-11-07T02:42:16.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1072",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.270",
      "lastModified" : "2023-11-07T02:42:17.220",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1073",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.303",
      "lastModified" : "2023-11-07T02:42:17.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1074",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.337",
      "lastModified" : "2023-11-07T02:42:17.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1075",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.367",
      "lastModified" : "2023-11-07T02:42:17.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1076",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.397",
      "lastModified" : "2023-11-07T02:42:18.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1077",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.427",
      "lastModified" : "2023-11-07T02:42:18.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1078",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.457",
      "lastModified" : "2023-11-07T02:42:18.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1079",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.487",
      "lastModified" : "2023-11-07T02:42:18.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1080",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.520",
      "lastModified" : "2023-11-07T02:42:19.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3900",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.560",
      "lastModified" : "2023-11-07T02:44:17.670",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3901",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.593",
      "lastModified" : "2023-11-07T02:44:17.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3903",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.627",
      "lastModified" : "2023-11-07T02:44:18.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3905",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.660",
      "lastModified" : "2023-11-07T02:44:18.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3906",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.697",
      "lastModified" : "2023-11-07T02:44:18.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3908",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T17:15:08.730",
      "lastModified" : "2023-11-07T02:44:19.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3909",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:07.930",
      "lastModified" : "2023-11-07T02:44:19.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3910",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:07.963",
      "lastModified" : "2023-11-07T02:44:19.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3911",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:07.993",
      "lastModified" : "2023-11-07T02:44:20.210",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3913",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.030",
      "lastModified" : "2023-11-07T02:44:20.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3914",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.060",
      "lastModified" : "2023-11-07T02:44:20.993",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3915",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.090",
      "lastModified" : "2023-11-07T02:44:21.230",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3916",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.120",
      "lastModified" : "2023-11-07T02:44:21.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3917",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.150",
      "lastModified" : "2023-11-07T02:44:21.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3918",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.177",
      "lastModified" : "2023-11-07T02:44:21.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3919",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.207",
      "lastModified" : "2023-11-07T02:44:22.173",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3920",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.237",
      "lastModified" : "2023-11-07T02:44:22.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3921",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.267",
      "lastModified" : "2023-11-07T02:44:22.660",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3922",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.293",
      "lastModified" : "2023-11-07T02:44:22.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3923",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.323",
      "lastModified" : "2023-11-07T02:44:23.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3924",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.353",
      "lastModified" : "2023-11-07T02:44:23.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3925",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.387",
      "lastModified" : "2023-11-07T02:44:23.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3926",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.417",
      "lastModified" : "2023-11-07T02:44:23.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3927",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.453",
      "lastModified" : "2023-11-07T02:44:24.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3928",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.497",
      "lastModified" : "2023-11-07T02:44:24.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3932",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T20:15:08.540",
      "lastModified" : "2023-11-07T02:44:25.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3937",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.073",
      "lastModified" : "2023-11-07T02:44:25.907",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3970",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.110",
      "lastModified" : "2023-11-07T02:44:34.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3988",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.140",
      "lastModified" : "2023-11-07T02:44:38.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3996",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.167",
      "lastModified" : "2023-11-07T02:44:40.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4036",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.197",
      "lastModified" : "2023-11-07T02:44:48.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4050",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.227",
      "lastModified" : "2023-11-07T02:44:52.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-4051",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.257",
      "lastModified" : "2023-11-07T02:44:52.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5680",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.287",
      "lastModified" : "2023-11-07T02:49:30.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5687",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.317",
      "lastModified" : "2023-11-07T02:49:31.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5690",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.350",
      "lastModified" : "2023-11-07T02:49:31.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5702",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.383",
      "lastModified" : "2023-11-07T02:49:31.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5713",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.413",
      "lastModified" : "2023-11-07T02:49:31.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5714",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.447",
      "lastModified" : "2023-11-07T02:49:32.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5718",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.477",
      "lastModified" : "2023-11-07T02:49:32.707",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5720",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.507",
      "lastModified" : "2023-11-07T02:49:32.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5723",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.537",
      "lastModified" : "2023-11-07T02:49:33.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5724",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.567",
      "lastModified" : "2023-11-07T02:49:33.417",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5725",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.600",
      "lastModified" : "2023-11-07T02:49:33.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5726",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.637",
      "lastModified" : "2023-11-07T02:49:33.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5728",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.667",
      "lastModified" : "2023-11-07T02:49:34.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5730",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.697",
      "lastModified" : "2023-11-07T02:49:34.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5737",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.730",
      "lastModified" : "2023-11-07T02:49:35.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5739",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.763",
      "lastModified" : "2023-11-07T02:49:36.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5740",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.797",
      "lastModified" : "2023-11-07T02:49:36.293",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5741",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.827",
      "lastModified" : "2023-11-07T02:49:36.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5742",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.857",
      "lastModified" : "2023-11-07T02:49:36.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5743",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.887",
      "lastModified" : "2023-11-07T02:49:37.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5744",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.923",
      "lastModified" : "2023-11-07T02:49:37.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5745",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.957",
      "lastModified" : "2023-11-07T02:49:37.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5746",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:08.990",
      "lastModified" : "2023-11-07T02:49:37.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5747",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.023",
      "lastModified" : "2023-11-07T02:49:37.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5748",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.053",
      "lastModified" : "2023-11-07T02:49:38.233",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5749",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.083",
      "lastModified" : "2023-11-07T02:49:38.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5750",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.110",
      "lastModified" : "2023-11-07T02:49:38.707",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5751",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.143",
      "lastModified" : "2023-11-07T02:49:38.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5752",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.173",
      "lastModified" : "2023-11-07T02:49:39.180",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5755",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.203",
      "lastModified" : "2023-11-07T02:49:39.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5756",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.233",
      "lastModified" : "2023-11-07T02:49:39.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5757",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.267",
      "lastModified" : "2023-11-07T02:49:40.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5758",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.297",
      "lastModified" : "2023-11-07T02:49:40.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5759",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.330",
      "lastModified" : "2023-11-07T02:49:40.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5760",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.363",
      "lastModified" : "2023-11-07T02:49:40.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5761",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.397",
      "lastModified" : "2023-11-07T02:49:41.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5762",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.427",
      "lastModified" : "2023-11-07T02:49:41.310",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5763",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.460",
      "lastModified" : "2023-11-07T02:49:41.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5764",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.487",
      "lastModified" : "2023-11-07T02:49:41.797",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5765",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.520",
      "lastModified" : "2023-11-07T02:49:42.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5779",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T21:15:09.553",
      "lastModified" : "2023-11-07T02:49:45.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3904",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.230",
      "lastModified" : "2023-11-07T02:44:18.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5766",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.270",
      "lastModified" : "2023-11-07T02:49:42.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5767",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.303",
      "lastModified" : "2023-11-07T02:49:42.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5768",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.337",
      "lastModified" : "2023-11-07T02:49:42.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5769",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.370",
      "lastModified" : "2023-11-07T02:49:42.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5770",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.400",
      "lastModified" : "2023-11-07T02:49:43.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5771",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.433",
      "lastModified" : "2023-11-07T02:49:43.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5772",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.463",
      "lastModified" : "2023-11-07T02:49:43.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5773",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.493",
      "lastModified" : "2023-11-07T02:49:43.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5774",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.523",
      "lastModified" : "2023-11-07T02:49:44.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5775",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.550",
      "lastModified" : "2023-11-07T02:49:44.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5776",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.580",
      "lastModified" : "2023-11-07T02:49:44.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5777",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.610",
      "lastModified" : "2023-11-07T02:49:44.860",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5778",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-06-11T22:15:09.640",
      "lastModified" : "2023-11-07T02:49:45.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-07-01T03:15:07.420",
      "lastModified" : "2024-11-21T03:22:26.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile)."
      }, {
        "lang" : "es",
        "value" : "UnRAR versiones 5.6.1.2 y 5.6.1.3, presenta un desbordamiento de búfer en la región heap de la memoria en la función Unpack::CopyString (llamado desde Unpack::Unpack5 y CmdExtract::ExtractCurrentFile)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:5.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8EE73C-CCEB-44F2-96CE-C8A6133907E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:unrar:5.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF9D711-DBB7-4841-B746-C7E3D1BBA7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aawc/unrar/commit/0ff832d31470471803b175cfff4e40c1b08ee779",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2017-104.yaml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aawc/unrar/commit/0ff832d31470471803b175cfff4e40c1b08ee779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2017-104.yaml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18113",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-08-02T03:15:07.110",
      "lastModified" : "2024-11-21T03:19:23.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their malicious workflow to execute arbitrary code via a Remote Code Execution (RCE) vulnerability. The vulnerability allowed for various problematic OSWorkflow classes to be used as part of workflows. The fix for this issue blocks usage of unsafe conditions, validators, functions and registers that are build-in into OSWorkflow library and other Jira dependencies. Atlassian-made functions or functions provided by 3rd party plugins are not affected by this fix."
      }, {
        "lang" : "es",
        "value" : "La clase DefaultOSWorkflowConfigurator en Jira Server y Jira Data Center versiones anteriores a 8.18.1, permite a atacantes remotos que pueden engañar a un administrador del sistema para importar su workflow malicioso para ejecutar código arbitrario a través de una vulnerabilidad de Ejecución de Código Remota (RCE).&#xa0;La vulnerabilidad permitió que varias clases problemáticas de OSWorkflow sean usadas como parte de los workflows.&#xa0;La solución para este problema bloquea el uso de condiciones, comprobadores, funciones y registros no seguros que están integrados en la biblioteca OSWorkflow y otras dependencias de Jira.&#xa0;Las funciones creadas por Atlassian o las funciones proporcionadas por complementos de terceros no están afectadas por esta corrección"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@atlassian.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.18.1",
            "matchCriteriaId" : "7EFBCA0F-3598-4FA9-A01E-3594BAE5FD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.18.1",
            "matchCriteriaId" : "4270229A-3AB3-4A4E-B858-2FFE46D9A615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72660",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-08-11T21:15:07.690",
      "lastModified" : "2024-11-21T03:16:42.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For \"Incorrect User\" - it gives an error \"The application failed to identify the user. Please contact administrator for help.\" For \"Correct User and Incorrect Password\" - it gives an error \"Authentication failed. Please login again.\""
      }, {
        "lang" : "es",
        "value" : "En SapphireIMS versión 4097_1, es posible adivinar los nombres de usuario registrados/activos del software a partir de los errores que arroja para cada tipo de usuario en el formulario de inicio de sesión. Para \"Incorrect User\" - da un error \"The application failed to identify the user. Please contact administrator for help.\". Para \"Correct User and Incorrect Password\" - da un error \"Authentication failed. Please login again.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8247C0ED-AF0A-4D81-8C37-002E828CBABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims-login-page-information-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims-login-page-information-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-08-11T21:15:07.733",
      "lastModified" : "2024-11-21T03:16:42.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function."
      }, {
        "lang" : "es",
        "value" : "En SapphireIMS versión 4097_1, un usuario invitado puede crear una cuenta de administrador local en cualquier sistema que tenga SapphireIMS instalado, debido a una Referencia Directa a Objetos Inseguros (IDOR) en la función local user creation"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8247C0ED-AF0A-4D81-8C37-002E828CBABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16630-sapphireims-idor-based-privilege-elevation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16630-sapphireims-idor-based-privilege-elevation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-08-11T21:15:07.770",
      "lastModified" : "2024-11-21T03:16:43.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the \"Account Password Reset\" functionality."
      }, {
        "lang" : "es",
        "value" : "En SapphireIMS versión 4097_1, un usuario invitado puede cambiar la contraseña de un usuario administrativo al usar una Referencia Directa a Objetos Insegura (IDOR) en la funcionalidad \"Account Password Reset\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8247C0ED-AF0A-4D81-8C37-002E828CBABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16631-sapphireims-idor-on-password-reset/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16631-sapphireims-idor-on-password-reset/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-08-11T21:15:07.807",
      "lastModified" : "2024-11-21T03:16:43.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SapphireIMS 4097_1, the password in the database is stored in Base64 format."
      }, {
        "lang" : "es",
        "value" : "En SapphireIMS versión 4097_1, la contraseña de la base de datos es almacenado en formato Base64"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8247C0ED-AF0A-4D81-8C37-002E828CBABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16632-sapphireims-insecure-storage-of-password/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/2020/07/18/cve-2017-16632-sapphireims-insecure-storage-of-password/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.shellcoder.party/tags/sapphireims/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20007",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2021-10-25T14:15:08.537",
      "lastModified" : "2024-11-21T03:22:26.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this vulnerability in order to obtain different configuration files."
      }, {
        "lang" : "es",
        "value" : "La aplicación web Ingeteam INGEPAC DA AU versiones AUC_1.13.0.28 (y anteriores), permiten el acceso a una determinada ruta que contiene información confidencial que podría ser usada por un atacante para ejecutar ataques más sofisticados. Un atacante remoto no autenticado con acceso al servicio web del dispositivo podría explotar esta vulnerabilidad para obtener diferentes archivos de configuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ingeteam:ingepac_da_au_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "auc_1.13.0.28",
            "matchCriteriaId" : "69843CF9-1FDA-4003-9D98-B07D4A10500D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ingeteam:ingepac_da_au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704C1AD2-2698-4F05-801D-96E5231FFB24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/information-exposure-ingepac-da-au",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/information-exposure-ingepac-da-au",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5123",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-11-02T22:15:08.120",
      "lastModified" : "2024-11-21T03:27:06.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in waitid allowed an user to escape sandboxes on Linux."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de datos insuficiente en waitid permitía a un usuario escapar de los sandbox en Linux"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13",
            "versionEndExcluding" : "4.13.7",
            "matchCriteriaId" : "2DF29370-EABC-47FB-8A1E-3A41150F3B93"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crbug.com/772848",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20211223-0003/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/772848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20211223-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14874",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-11-23T21:15:15.313",
      "lastModified" : "2023-11-07T02:39:16.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8232",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-11-23T21:15:15.360",
      "lastModified" : "2023-11-07T02:50:23.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-8249",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-11-23T21:15:15.400",
      "lastModified" : "2023-11-07T02:50:23.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20008",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-11-29T09:15:07.027",
      "lastModified" : "2024-11-21T03:22:26.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting"
      }, {
        "lang" : "es",
        "value" : "El plugin myCred de WordPress versiones anteriores a 1.7.8, no sanea y escapa del parámetro user antes de devolverlo al panel de administración del Registro de Puntos, conllevando a un ataque de tipo Cross-Site Scripting Reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mycred:mycred:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.8",
            "matchCriteriaId" : "6EBDB330-DA01-467C-991B-DFC8A0AB3840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/1639363/mycred",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3175c56d-27bb-4bf1-b6ba-737541483d40",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1639363/mycred",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3175c56d-27bb-4bf1-b6ba-737541483d40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11020",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-12-20T23:15:12.057",
      "lastModified" : "2023-11-07T02:38:09.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11071",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-12-20T23:15:12.097",
      "lastModified" : "2023-11-07T02:38:09.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13835",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.087",
      "lastModified" : "2024-11-21T03:11:46.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. An application may be able to execute arbitrary code with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de corrupción de memoria con un manejo de la memoria mejorada. Este problema es corregido en macOS High Sierra versión 10.13. Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios elevados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13",
            "matchCriteriaId" : "089EFF21-6A9B-40E4-9154-44174E26D5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13880",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.133",
      "lastModified" : "2024-11-21T03:11:50.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An application may be able to execute arbitrary code with kernel privilege."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de corrupción de memoria con un manejo de la memoria mejorada. Este problema se ha corregido en iOS versión 11.2, watchOS versión 4.2. Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios del kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13892",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.177",
      "lastModified" : "2024-11-21T03:11:51.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing."
      }, {
        "lang" : "es",
        "value" : "Se presentó un problema en el manejo del uso Compartido de Contactos. Este problema se abordó con un manejo de la información del usuario mejorada. Este problema se ha corregido en macOS High Sierra versión 10.13.2, Security Update 2017-002 Sierra y Security Update 2017-005 El Capitan. Compartir información de contacto puede conllevar a un intercambio de datos no esperado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "D01E4F9E-15B1-4470-8FAF-DB5DCD69CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
            "matchCriteriaId" : "C47360D3-4390-4F31-BA82-7A4F38408E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
            "matchCriteriaId" : "C03A4DED-974B-4FCE-92F7-83DA939E0847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
            "matchCriteriaId" : "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-004:*:*:*:*:*:*",
            "matchCriteriaId" : "79665061-B72E-4AE9-97FF-C570A2C6BA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.12.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6536473A-2ECF-4806-AC02-2386552BEAB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EFC700-879E-4C5C-8A21-064114E9D7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "D84FBE0D-9C0E-41BA-A297-832BA03083D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13905",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.217",
      "lastModified" : "2024-11-21T03:11:52.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An application may be able to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó una condición de carrera con una comprobación adicional. Este problema es corregido en tvOS versión 11.2, iOS versión 11.2, macOS High Sierra versión 10.13.2, Security Update 2017-002 Sierra y Security Update 2017-005 El Capitan, watchOS versión 4.2. Una aplicación puede ser capaz de conseguir privilegios elevados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "4041D155-EE3F-46C0-A2F9-D3C5D607BCA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12",
            "versionEndExcluding" : "10.12.6",
            "matchCriteriaId" : "D01E4F9E-15B1-4470-8FAF-DB5DCD69CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
            "matchCriteriaId" : "C47360D3-4390-4F31-BA82-7A4F38408E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
            "matchCriteriaId" : "C03A4DED-974B-4FCE-92F7-83DA939E0847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
            "matchCriteriaId" : "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-004:*:*:*:*:*:*",
            "matchCriteriaId" : "79665061-B72E-4AE9-97FF-C570A2C6BA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E84CE847-550E-445B-8972-2FB5BCF6B04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EFC700-879E-4C5C-8A21-064114E9D7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13.2",
            "matchCriteriaId" : "D84FBE0D-9C0E-41BA-A297-832BA03083D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "6132F328-E7B5-4BD6-A966-2EC111886658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "2D921814-C156-44C7-882D-6C5BF02E777F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208325",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208331",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208334",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13906",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.260",
      "lastModified" : "2024-11-21T03:11:52.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de corrupción de memoria con un manejo de la memoria mejorada. Este problema es corregido en macOS High Sierra versión 10.13.1, Security Update 2017-001 Sierra y Security Update 2017-004 El Capitan, macOS High Sierra versión 10.13. Una aplicación maliciosa puede ser capaz de elevar los privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "C9E4E153-2DFD-4F60-851B-E33E3D96058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
            "matchCriteriaId" : "C47360D3-4390-4F31-BA82-7A4F38408E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
            "matchCriteriaId" : "C03A4DED-974B-4FCE-92F7-83DA939E0847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
            "matchCriteriaId" : "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13907",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.303",
      "lastModified" : "2024-11-21T03:11:52.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de administración de estados con una comprobación de estados mejorada. Este problema es corregido en macOS High Sierra versión 10.13.1, Security Update 2017-001 Sierra y Security Update 2017-004 El Capitan. El bloqueo de pantalla puede permanecer desbloqueado inesperadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "C9E4E153-2DFD-4F60-851B-E33E3D96058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
            "matchCriteriaId" : "C47360D3-4390-4F31-BA82-7A4F38408E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
            "matchCriteriaId" : "C03A4DED-974B-4FCE-92F7-83DA939E0847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
            "matchCriteriaId" : "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13908",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.343",
      "lastModified" : "2024-11-21T03:11:52.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A local attacker may be able to execute non-executable text files via an SMB share."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema en el manejo de los permisos de los archivos con una comprobación mejorada. Este problema es corregido en macOS High Sierra versión 10.13.1, Security Update 2017-001 Sierra y Security Update 2017-004 El Capitan, macOS High Sierra versión 10.13. Un atacante local puede ser capaz de ejecutar archivos de texto no ejecutables por medio de un recurso compartido SMB"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11",
            "versionEndExcluding" : "10.11.6",
            "matchCriteriaId" : "DF1A141D-7F31-4175-A5CD-1EB52BE6D8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.12",
            "versionEndIncluding" : "10.12.5",
            "matchCriteriaId" : "C9E4E153-2DFD-4F60-851B-E33E3D96058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7FC88F-6216-480F-A27D-9A2D2D8F3034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-001:*:*:*:*:*:*",
            "matchCriteriaId" : "C47360D3-4390-4F31-BA82-7A4F38408E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-002:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB1158A-9D65-463A-A8AF-D946E95EB2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2016-003:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4E7A2-3022-4B23-A068-FFE58C3A449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-001:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE0F7C4-53B7-4554-8F4D-AAB417A1569F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-002:*:*:*:*:*:*",
            "matchCriteriaId" : "C03A4DED-974B-4FCE-92F7-83DA939E0847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.11.6:security_update_2017-003:*:*:*:*:*:*",
            "matchCriteriaId" : "47EF9186-8EBD-441B-B2DD-FB18C072EEBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13909",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.387",
      "lastModified" : "2024-11-21T03:11:52.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOS High Sierra 10.13. A local attacker may gain access to iCloud authentication tokens."
      }, {
        "lang" : "es",
        "value" : "Se presentó un problema en el almacenamiento de tokens confidenciales. Este problema se abordó al colocar los tokens en el Llavero. Este problema se ha corregido en macOS High Sierra versión 10.13. Un atacante local puede conseguir acceso a los tokens de autenticación de iCloud"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.13",
            "matchCriteriaId" : "78E9048F-92BE-446E-8C15-26AD4B307CAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13910",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.433",
      "lastModified" : "2024-11-21T03:11:53.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de acceso con restricciones adicionales de sandbox en las aplicaciones. Este problema es corregido en macOS High Sierra versión 10.13. Una aplicación puede acceder a archivos restringidos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.13",
            "matchCriteriaId" : "089EFF21-6A9B-40E4-9154-44174E26D5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT208144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2375",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.480",
      "lastModified" : "2024-11-21T03:23:24.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improved logic. This issue is fixed in iOS 10.2.1. Updates for CallKit call history are sent to iCloud."
      }, {
        "lang" : "es",
        "value" : "Se presentó un problema para evitar la carga del historial de llamadas de CallKit a iCloud. Este problema se abordó mediante una lógica mejorada. Este problema se ha corregido en iOS versión 10.2.1. Las actualizaciones del historial de llamadas de CallKit se envían a iCloud"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "9F9688ED-4532-49E5-80C8-C59D0017D3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT207482",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT207482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2488",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-12-23T20:15:08.523",
      "lastModified" : "2024-11-21T03:23:37.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords."
      }, {
        "lang" : "es",
        "value" : "Se presentó una debilidad criptográfica en el protocolo de autenticación de Remote Desktop. Este problema se abordó implementando el protocolo de autenticación Secure Remote Password. Este problema se ha corregido en Apple Remote Desktop versión 3.9. Un atacante puede ser capaz de capturar contraseñas en texto sin cifrar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:remote_desktop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9",
            "matchCriteriaId" : "3FE076AD-095D-4F11-9441-5B6863D1E242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT207622",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT207622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2022-02-18T23:15:07.843",
      "lastModified" : "2024-11-21T03:02:51.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style=\"background-image: attr(title url);\" attack within a DIV element that has an attacker-controlled URL in the title attribute."
      }, {
        "lang" : "es",
        "value" : "MediaWiki versiones anteriores a 1.23.16, versiones 1.24.x hasta 1.27.x anteriores a 1.27.2 y versiones 1.28.x anteriores a 1.28.1, permite a atacantes remotos descubrir las direcciones IP de los visitantes del Wiki por medio de un ataque style=\"background-image: attr(title url);\" dentro de un elemento DIV que presenta una URL controlada por el atacante en el atributo title"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.23.16",
            "matchCriteriaId" : "F57DFB5D-65E7-4E3B-81BF-4BEAD74D1677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.27.2",
            "matchCriteriaId" : "91C09A5A-267C-4075-A66B-B1CA30A0C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.28.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "8ABB422D-95AC-48E6-AEFF-1F2915354494"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T140591",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T68404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T140591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T68404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20011",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.263",
      "lastModified" : "2024-11-21T03:22:26.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an unknown input leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad en WEKA INTEREST Security Scanner versión 1.8. Ha sido calificada como problemática. Este problema afecta a algún procesamiento desconocido del componente HTTP Handler. La manipulación con una entrada desconocida conlleva a una denegación de servicio. Es posible lanzar el ataque en el host local. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weka:interest_security_scanner:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70025675-EE54-4200-9464-8D0BB02AD337"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20012",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.323",
      "lastModified" : "2024-11-21T03:22:26.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad clasificada como problemática en WEKA INTEREST Security Scanner versiones hasta 1.8. Está Afectado Stresstest Scheme Handler que conlleva a una denegación de servicio. El ataque debe ser abordado localmente. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no están soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6C6E298-764C-41E0-8B79-2E263122E4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101970",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20013",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.390",
      "lastModified" : "2024-11-21T03:22:26.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad clasificada como problemática en WEKA INTEREST Security Scanner versiones hasta 1.8. Afectado por esta vulnerabilidad es Stresstest Configuration Handler. Una manipulación conlleva a una denegación de servicio local. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6C6E298-764C-41E0-8B79-2E263122E4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101971",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20014",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.453",
      "lastModified" : "2024-11-21T03:22:26.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functionality of the component Webspider. The manipulation with an unknown input leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad, clasificada como problemática, en WEKA INTEREST Security Scanner versiones hasta 1.8. Afectado por este problema es alguna funcionalidad desconocida del componente Webspider. La manipulación con una entrada desconocida conlleva a una denegación de servicio. Es requerido acceso local para abordar este ataque. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6C6E298-764C-41E0-8B79-2E263122E4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101972",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20015",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.517",
      "lastModified" : "2024-11-21T03:22:27.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad, clasificada como problemática, en WEKA INTEREST Security Scanner versiones hasta 1.8. Esto afecta a una parte desconocida del componente LAN Viewer. La manipulación con una entrada desconocida conlleva a una denegación de servicio. Es requerido atacar localmente. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6C6E298-764C-41E0-8B79-2E263122E4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101973",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20016",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-03-28T21:15:08.577",
      "lastModified" : "2024-11-21T03:22:27.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO DE ASIGNÓ ** Se ha encontrado una vulnerabilidad en WEKA INTEREST Security Scanner versiones hasta 1.8 y ha sido clasificada como problemática. Esta vulnerabilidad afecta a código desconocido del componente Portscan. La manipulación con una entrada desconocida conlleva a una denegación de servicio. El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6C6E298-764C-41E0-8B79-2E263122E4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.computec.ch/news.php?item.117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.101969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.101974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20017",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-08T10:15:08.887",
      "lastModified" : "2024-11-21T03:22:27.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.1.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en The Next Generation of Genealogy Sitebuilding versiones hasta 11.1.0. Este problema afecta a un procesamiento desconocido del archivo /timeline2.php. La manipulación del argumento primaryID conlleva a una inyección sql. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 11.1.1, puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tngsitebuilding:the_next_generation_of_genealogy_sitebuilding:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.1.0",
            "matchCriteriaId" : "D373BCF4-7E35-4D8A-8121-BD007891B08B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.105833",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.105833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20018",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:07.850",
      "lastModified" : "2024-11-21T03:22:27.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en XAMPP versión 7.1.1-0-VC14. ha sido clasificada como problemática. Está afectada una función desconocida del componente Installer. La manipulación conlleva a una escalada de privilegios. Es posible lanzar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:7.1.1-0-vc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4984D58-E0C7-4581-B45E-D3220D61DD2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/142406/xampp-dllhijack.txt",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.100950",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/142406/xampp-dllhijack.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.100950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20019",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:07.923",
      "lastModified" : "2024-11-21T03:22:27.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Solare Solar-Log versión 2.8.4-56/3.5.2-85. Esta vulnerabilidad afecta a una funcionalidad desconocida del componente Config Handler. La manipulación conlleva a una divulgación de información. El ataque puede ser lanzado remotamente. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98929",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20020",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:07.980",
      "lastModified" : "2024-11-21T03:22:27.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en Solare Solar-Log versión 2.8.4-56/3.5.2-85. Este problema afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site request forgery. El ataque puede ser lanzado remotamente. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98930",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20021",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.047",
      "lastModified" : "2024-11-21T03:22:27.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Solare Solar-Log 2.8.4-56/3.5.2-85. Esto afecta a una parte desconocida del componente File Upload. La manipulación conlleva a una escalada de privilegios. Es posible iniciar el ataque de forma remota. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98931",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20022",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.110",
      "lastModified" : "2025-04-15T13:15:45.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Solare Solar-Log 2.8.4-56/3.5.2-85 y ha sido clasificada como problemática. Esta vulnerabilidad afecta a un código desconocido. La manipulación conlleva a una divulgación de información. El ataque puede iniciarse de forma remota. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98932",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20023",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.167",
      "lastModified" : "2024-11-21T03:22:28.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Solare Solar-Log 2.8.4-56/3.5.2-85 y ha sido clasificada como crítica. Este problema afecta a algunos procesos desconocidos del componente Network Config. La manipulación conlleva a una escalada de privilegios. El ataque puede ser iniciado remotamente. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98933",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20024",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.220",
      "lastModified" : "2024-11-21T03:22:28.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Solare Solar-Log 2.8.4-56/3.5.2-85. ha sido clasificada como problemática. La función afectada es desconocida. La manipulación conlleva a una denegación de servicio. Es posible lanzar el ataque de forma remota. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98934",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20025",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.287",
      "lastModified" : "2024-11-21T03:22:28.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Solare Solar-Log 2.8.4-56/3.5.2-85. Se ha declarado como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del componente Flash Memory. La manipulación conlleva a una escalada de privilegios. El ataque puede ser lanzado remotamente. La actualización a versión 3.5.3-86 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BF1028-175F-4771-8E51-CE1B4F1D6C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_250_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AA491A-0F73-41CF-A054-19E4A1C84FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B90A11-AD70-41C0-9C0E-A29CEA393F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8E01D7-0E36-4F3F-B97E-355A904BA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_300_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557DF05F-3078-4A6F-A9A7-A4F67989F5C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C52341D-00C9-412E-9B33-24BA8E9B33E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E8917-1BA5-47B0-8C8B-2947C7C05717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_500_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B9CC8-2A60-4BD5-BF2D-A5B6F86E4FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978CC7AA-DAF0-4891-BCA2-BEE70BFCE3C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C809C3-3278-4776-B925-E07939BAE98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_800e_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB717-80FA-42F0-8C14-B9B45C9B9022"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC786FF-FB72-41A4-8EB8-2EF234D59BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813EBE81-C8EE-41B5-9027-93F0F1E5E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB509869-6952-4A05-97A7-8266BD1C18AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5820511-2D50-4869-8ABA-12432555431B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB17FEC-C3D2-427E-8C1C-AD40F1425DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1000_pm\\+_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF0A3CB-49A9-4D2A-A052-2638FC501084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1000_pm\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B231D-DC7C-458C-A301-9617611AF9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B905F-45B5-4BF4-9E42-7CFBCD0C9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_1200_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F171F8D-15F8-40CD-92F9-BBD5CE6D46A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152D1F1A-67E7-4AAE-8F69-60824CCF451C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:2.8.4-56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA355060-F745-4D4B-B887-8FD85DFC0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:solar-log:solar-log_2000_firmware:3.5.2-85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDD2878-B81E-4338-AA5A-2890C4F67006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:solar-log:solar-log_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF7B66B-5440-4D74-817D-2A43F20060CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20026",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.350",
      "lastModified" : "2024-11-21T03:22:28.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting (Reflected). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en HumHub versiones hasta 1.0.1 y ha sido clasificada como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting (reflejado). El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.1.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humhub:humhub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "E7112E82-E13A-4AF4-9979-22523787123B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/47",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98923",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20027",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.410",
      "lastModified" : "2024-11-21T03:22:28.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting (DOM). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en HumHub versiones hasta 1.0.1 y ha sido clasificada como problemática. Este problema afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting (DOM). El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.1.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humhub:humhub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "E7112E82-E13A-4AF4-9979-22523787123B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/47",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98924",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20028",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-09T23:15:08.467",
      "lastModified" : "2024-11-21T03:22:28.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en HumHub 0.20.1/1.0.0-beta.3. ha sido clasificada como crítica. Afecta a una parte desconocida. La manipulación conlleva a una escalada de privilegios. Es posible iniciar el ataque de forma remota. La actualización a versión 1.0.0 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humhub:humhub:0.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D34949-04CE-46EF-8D60-21998DC34DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humhub:humhub:1.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9450C30-2C7A-4214-BDF5-23D54C7A800E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/48",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98925",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20029",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.287",
      "lastModified" : "2024-11-21T03:22:29.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en PHPList versión 3.2.6 y ha sido clasificada como crítica. Este problema afecta a un procesamiento desconocido del archivo /lists/index.php del componente Edit Subscription. La manipulación conlleva a una inyección sql. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98915",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20030",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.483",
      "lastModified" : "2024-11-21T03:22:29.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the file /lists/admin/ of the component Sending Campain. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en PHPList versión 3.2.6. ha sido clasificada como crítica. Está afectada una función desconocida del archivo /lists/admin/ del componente Sending Campain. La manipulación conlleva a una inyección sql. Es posible lanzar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98916",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20031",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.557",
      "lastModified" : "2024-11-21T03:22:29.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument sortby with the input password leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en PHPList versión 3.2.6. Se ha declarado como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación del argumento sortby con la contraseña de entrada conlleva a una revelación de información. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98917",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20032",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.630",
      "lastModified" : "2024-11-21T03:22:29.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Subscription. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en PHPList versión 3.2.6. Ha sido calificada como crítica. Este problema afecta a una funcionalidad desconocida del componente Subscription. La manipulación conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98918",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20033",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.703",
      "lastModified" : "2024-11-21T03:22:29.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send\\'\\\";><script>alert(8)</script> leads to cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en PHPList versión 3.2.6. Esto afecta a una parte desconocida del archivo /lists/admin/. La manipulación de la página de argumentos con la entrada send\\'\\\";)(script)alert(8)(/script) conlleva a un ataque de tipo cross site scripting (Reflejado). Es posible iniciar el ataque de forma remota. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98919",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20034",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.767",
      "lastModified" : "2024-11-21T03:22:29.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting (Persistent). The attack can be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en PHPList 3.2.6. Esta vulnerabilidad afecta a código desconocido del archivo /lists/admin/ del componente Nombre de la Lista. La manipulación conduce a cross site scripting (Persistente). El ataque puede ser iniciado remotamente. La actualización a la versión 3.3.1 puede solucionar este problema. Se recomienda actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98920",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20035",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.830",
      "lastModified" : "2024-11-21T03:22:29.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en PHPList versión 3.2.6. Este problema afecta a un procesamiento desconocido del archivo /lists/admin/ del componente Subscribe. La manipulación conlleva a un ataque de tipo cross site scripting (Persistente). El ataque puede ser iniciado remotamente. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98921",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20036",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-10T10:15:08.887",
      "lastModified" : "2024-11-21T03:22:29.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en PHPList versión 3.2.6. Afectada es una función desconocida del archivo /lists/admin/ del componente Bounce Rule. La manipulación conlleva a un ataque de tipo cross site scripting (Persistente). Es posible lanzar el ataque de forma remota. La actualización a versión 3.3.1 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A1CBC3-3FC5-418A-BB64-1071EDC4037E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98922",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20037",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-11T10:15:09.693",
      "lastModified" : "2024-11-21T03:22:29.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SICUNET Access Controller versión 0.32-05z y ha sido clasificada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación del argumento c conlleva a una escalada de privilegios. El ataque puede ser lanzado remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sicunet:access_control:0.32-05z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152940F3-49C7-47D7-901B-786092C25E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98905",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20038",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-11T10:15:09.797",
      "lastModified" : "2024-11-21T03:22:30.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SICUNET Access Controller versión 0.32-05z y ha sido clasificada como crítica. Este problema afecta a una funcionalidad desconocida del archivo card_scan_decoder.php. La manipulación del argumento No/door conlleva a una escalada de privilegios. El ataque puede ser lanzado remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sicunet:access_control:0.32-05z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152940F3-49C7-47D7-901B-786092C25E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98906",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20039",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-11T10:15:09.853",
      "lastModified" : "2024-11-21T03:22:30.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SICUNET Access Controller versión 0.32-05z. ha sido clasificada como muy crítica. Afecta a una parte desconocida. La manipulación conlleva a una autenticación débil. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sicunet:access_control:0.32-05z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152940F3-49C7-47D7-901B-786092C25E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98907",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20040",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-11T10:15:09.913",
      "lastModified" : "2024-11-21T03:22:30.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SICUNET Access Controller versión 0.32-05z. Se ha declarado como problemática. Esta vulnerabilidad afecta a código desconocido del componente Password Storage. La manipulación conlleva a un cifrado débil. Atacar localmente es un requisito"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sicunet:access_control:0.32-05z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152940F3-49C7-47D7-901B-786092C25E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98908",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20041",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-13T07:15:07.897",
      "lastModified" : "2024-11-21T03:22:30.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Ucweb UC Browser versión 11.2.5.932. Ha sido clasificada como crítica. Está afectada una función desconocida del componente HTML Handler. La manipulación del argumento title conlleva a una restricción inapropiada de las capas ui renderizadas (URL). Es posible lanzar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ucweb:uc_browser:11.2.5.932:*:*:*:*:android:*:*",
            "matchCriteriaId" : "FFFF486B-F467-4A24-9D87-5BE7C067EF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.98214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20042",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-13T07:15:08.040",
      "lastModified" : "2024-11-21T03:22:30.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection (Blind). The attack can be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Navetti PricePoint versión 4.6.0.0 y Ha sido clasificada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conlleva a una inyección sql (ciega). El ataque puede ser lanzado remotamente. La actualización a versión 4.7.0.0 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vendavo:pricepoint:4.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E5C36-D724-448C-A70F-DF90E27D60D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20043",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-13T07:15:08.107",
      "lastModified" : "2024-11-21T03:22:30.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Navetti PricePoint versión 4.6.0.0 y Ha sido clasificada como problemática. Este problema afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico (persistente). El ataque puede ser lanzado remotamente. La actualización a versión 4.7.0.0 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vendavo:pricepoint:4.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E5C36-D724-448C-A70F-DF90E27D60D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20044",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-13T07:15:08.167",
      "lastModified" : "2024-11-21T03:22:30.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Navetti PricePoint versión 4.6.0.0. Ha sido clasificada como problemática. Esto afecta a una parte desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico (reflejado). Es posible iniciar el ataque de forma remota. La actualización a versión 4.7.0.0 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vendavo:pricepoint:4.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E5C36-D724-448C-A70F-DF90E27D60D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97863",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20045",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-13T07:15:08.220",
      "lastModified" : "2024-11-21T03:22:31.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Navetti PricePoint versión 4.6.0.0. Ha sido declarada como crítica. Esta vulnerabilidad afecta a un código desconocido. La manipulación conlleva a un ataque de tipo cross-site request forgery. El ataque puede iniciarse de forma remota. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 4.7.0.0 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vendavo:pricepoint:4.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E5C36-D724-448C-A70F-DF90E27D60D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97864",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20046",
      "sourceIdentifier" : "product-security@axis.com",
      "published" : "2022-06-15T18:15:08.170",
      "lastModified" : "2023-11-07T02:43:16.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This CVE has been rejected since it is out of scope in accordance to the Vulnerability Policy of Axis: https://www.axis.com/dam/public/76/fe/26/axis-vulnerability-management-policy-en-US-375421.pdf. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20047",
      "sourceIdentifier" : "product-security@axis.com",
      "published" : "2022-06-15T18:15:08.277",
      "lastModified" : "2023-11-07T02:43:16.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This CVE has been rejected as out of scope in accordance to the Vulnerability Policy of Axis: https://www.axis.com/dam/public/76/fe/26/axis-vulnerability-management-policy-en-US-375421.pdf. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20048",
      "sourceIdentifier" : "product-security@axis.com",
      "published" : "2022-06-15T18:15:08.377",
      "lastModified" : "2023-11-07T02:43:17.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This CVE has been rejected since it is out of scope in accordance to the Vulnerability Policy of Axis: https://www.axis.com/dam/public/76/fe/26/axis-vulnerability-management-policy-en-US-375421.pdf. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20049",
      "sourceIdentifier" : "product-security@axis.com",
      "published" : "2022-06-15T18:15:08.470",
      "lastModified" : "2024-11-21T03:22:31.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en los dispositivos Axis heredados, como el P3225 y el M3005. Esto afecta a una parte desconocida del componente CGI Script. La manipulación conduce a una gestión inadecuada de los privilegios. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:p1204_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50.4",
            "matchCriteriaId" : "D80172CB-9700-4FCA-A51C-8E7C09612ECE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:p1204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339417CD-0D80-4A41-8594-380BBFFC38FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:p3225_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.30.1",
            "matchCriteriaId" : "B92C5ECB-3494-4E52-BC13-DA76892AF752"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:p3225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2A7B73-4702-41F9-9B14-284E8DE3ECDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:p3367_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.10.1.2",
            "matchCriteriaId" : "C001DC0F-EA8D-4E3C-9166-6CB01137B8B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:p3367:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF90F760-DEFC-4127-BA83-A60BB13F8721"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:m3045_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.15.4.1",
            "matchCriteriaId" : "F8B93415-A82C-405A-8DE4-A69C6876C1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:m3045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3060B6-71ED-4A15-A2FD-F9BC004930F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:m3005_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50.5.7",
            "matchCriteriaId" : "B8E31A7F-CC9E-4284-8D4E-6C07923FBDF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:m3005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725FBF6F-3736-4897-8AFE-1DE6B6D5EB5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:m3007_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.30.1.1",
            "matchCriteriaId" : "0FA6C9CF-EE9C-4E19-AEFB-13D8FC581A85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:m3007:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4906C0-26D8-45B6-A5FC-4FADE7973781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.axis.com/dam/public/df/f3/dd/cve-2017-20049-en-US-376956.pdf",
        "source" : "product-security@axis.com"
      }, {
        "url" : "https://www.axis.com/dam/public/df/f3/dd/cve-2017-20049-en-US-376956.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20050",
      "sourceIdentifier" : "product-security@axis.com",
      "published" : "2022-06-15T18:15:08.557",
      "lastModified" : "2023-11-07T02:43:17.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This CVE has been rejected due to lack of sufficient information on how to reproduce the vulnerability. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20051",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-16T07:15:07.053",
      "lastModified" : "2024-11-21T03:22:31.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to uncontrolled search path. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en InnoSetup Installer. Ha sido declarada como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conlleva una ruta de búsqueda no controlada. El ataque puede ser lanzado de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jrsoftware:inno_setup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DD97E8-02DF-4850-8028-5EAD0E7668D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97837",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Mar/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20052",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-16T07:15:07.190",
      "lastModified" : "2024-11-21T03:22:31.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Python versión 2.7.13. Esta vulnerabilidad afecta a código desconocido del componente pgAdmin4. La manipulación conlleva una ruta de búsqueda no controlada. El ataque puede iniciarse de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:2.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09FAE5D-232B-4DD9-99AC-66DFFE809375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/92",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220804-0005/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97822",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220804-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20053",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-16T13:15:07.947",
      "lastModified" : "2024-11-21T03:22:31.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el plugin XYZScripts Contact Form Manager. Ha sido declarada como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross-site request forgery. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xyzscripts:contact_form_manager:*:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E2FA78E1-BFD3-42AB-8E92-28AC1AE43834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/99",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97387",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20054",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-16T13:15:08.010",
      "lastModified" : "2024-11-21T03:22:31.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el plugin XYZScripts Contact Form Manager. Ha sido calificada como problemática. Este problema afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xyzscripts:contact_form_manager:*:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E2FA78E1-BFD3-42AB-8E92-28AC1AE43834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/99",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97388",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20055",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-16T13:15:08.073",
      "lastModified" : "2024-11-21T03:22:32.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en BestWebSoft Contact Form Plugin versión 4.0.0. Esto afecta a una parte desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico (almacenado). Es posible iniciar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 4.0.2 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:contact_form:4.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "AB10F929-3A82-4BBF-8CA4-5628D8F26548"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/100",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_contact_form_wordpress_plugin.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97389",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_contact_form_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20056",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-16T13:15:08.140",
      "lastModified" : "2024-11-21T03:22:32.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Stored). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en weblizar User Login Log Plugin 2.2.1. Ha sido clasificada como problemática. La función afectada es desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico (almacenado). Es posible lanzar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intechnosoftware:user_login_log:2.2.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5F42C082-4890-427C-A0E6-096D56B4252A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/98",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_user_login_log_wordpress_plugin.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97386",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_user_login_log_wordpress_plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20057",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.323",
      "lastModified" : "2024-11-21T03:22:32.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Elefant CMS versión 1.3.12-RC. La función afectada es desconocida. La manipulación del argumento username conlleva a un ataque de tipo cross site scripting básico (Persistente). Es posible lanzar el ataque de forma remota. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97254",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20058",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.530",
      "lastModified" : "2024-11-21T03:22:32.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting (Persistent). The attack can be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Elefant CMS versión 1.3.12-RC. Esta vulnerabilidad afecta a una funcionalidad desconocida del componente Version Comparison. La manipulación conlleva a un ataque de tipo cross site scripting básico (persistente). El ataque puede ser lanzado remotamente. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefantcms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A996-8507-40B4-96B3-91D6678AB372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97255",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20059",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.627",
      "lastModified" : "2024-11-21T03:22:32.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the component Title Handler. The manipulation with the input </title><img src=no onerror=alert(1)> leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en Elefant CMS versión 1.3.12-RC. Este problema afecta a una funcionalidad desconocida del componente Title Handler. La manipulación con la entrada (/title)(img src=no onerror=alert(1)) conlleva a un ataque de tipo cross site scripting básico (Persistente). El ataque puede ser lanzado remotamente. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97256",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20060",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.693",
      "lastModified" : "2024-11-21T03:22:32.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting (Persistent). It is possible to initiate the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en Elefant CMS versión 1.3.12-RC. Esto afecta a una parte desconocida del componente Blog Post Handler. La manipulación conlleva a un ataque de tipo cross site scripting básico (persistente). Es posible iniciar el ataque de forma remota. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97257",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20061",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.753",
      "lastModified" : "2024-11-21T03:22:32.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /admin/extended. The manipulation of the argument name with the input %3Cimg%20src=no%20onerror=alert(1)%3E leads to basic cross site scripting (Reflected). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Elefant CMS versión 1.3.12-RC y ha sido clasificado como problemática. Esta vulnerabilidad afecta a código desconocido del archivo /admin/extended. La manipulación del nombre del argumento con el input %3Cimg%20src=no%20onerror=alert(1)%3E conlleva a un ataque de tipo cross site scripting básico (Reflejado). El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97258",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20062",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.813",
      "lastModified" : "2024-11-21T03:22:33.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Elefant CMS versión 1.3.12-RC y ha sido clasificado como problemática. Este problema afecta a algunos procesos desconocidos. La manipulación conlleva a un ataque de tipo cross-site request forgery. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/37",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97259",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20063",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.877",
      "lastModified" : "2024-11-21T03:22:33.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Elefant CMS versión 1.3.12-RC. ha sido clasificado como crítica. Afectada es una función desconocida del archivo /filemanager/upload/drop del componente File Upload. La manipulación conlleva a una administración inapropiada de privilegios. Es posible lanzar el ataque de forma remota. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/39",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97260",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20064",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T05:15:07.937",
      "lastModified" : "2024-11-21T03:22:33.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /designer/add/layout. The manipulation leads to code injection. The attack can be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Elefant CMS versión 1.3.12-RC. Ha sido declarada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /designer/add/layout. La manipulación conlleva a una inyección de código. El ataque puede ser lanzado remotamente. La actualización a versión 1.3.13 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elefantcms:elefant_cms:1.3.12:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "926E5836-46DB-4894-A140-C5ACDA5AC1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/39",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20065",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T20:15:07.797",
      "lastModified" : "2024-11-21T03:22:33.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Supsystic Popup Plugin versión 1.7.6, y ha sido clasificada como problemática. Este problema afecta a algunos procesos desconocidos. La manipulación conlleva a un ataque de tipo cross-site request forgery. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supsystic:popup:1.7.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E8EC6C46-8E55-441E-A12D-69A26C17A6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/97",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://map.httpcs.com/alert/284665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41485/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://map.httpcs.com/alert/284665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41485/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20066",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-20T20:15:07.863",
      "lastModified" : "2024-11-21T03:22:33.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Adminer Login versión 1.4.4, y ha sido clasificada como problemática. Esta vulnerabilidad afecta a un código desconocido. La manipulación conlleva a controles de acceso inapropiados. Es posible lanzar el ataque en el host local. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adminer_login_project:adminer_login:1.4.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C41CDFFA-2135-42E0-B516-9BF29A571BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/96",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20067",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.117",
      "lastModified" : "2024-11-21T03:22:33.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script. Ha sido declarada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /admin/. La manipulación del argumento nombre de usuario/contraseña con la entrada \"o\"\"=\" conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20068",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.317",
      "lastModified" : "2024-11-21T03:22:33.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/usermanagement.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script. Ha sido calificada como crítica. Este problema afecta a una funcionalidad desconocida del archivo /admin/usermanagement.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20069",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.397",
      "lastModified" : "2024-11-21T03:22:33.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/countrymanagement.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Hindu Matrimonial Script. Esto afecta a una parte desconocida del archivo /admin/countrymanagement.php. La manipulación conlleva a una administración inapropiada de privilegios. Es posible iniciar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95409",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20070",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.477",
      "lastModified" : "2024-11-21T03:22:34.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of the file /admin/communitymanagement.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Hindu Matrimonial Script. Esta vulnerabilidad afecta a código desconocido del archivo /admin/communitymanagement.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede iniciarse de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95410",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20071",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.553",
      "lastModified" : "2024-11-21T03:22:34.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some unknown processing of the file /admin/renewaldue.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Hindu Matrimonial Script. Este problema afecta a un procesamiento desconocido del archivo /admin/renewaldue.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95411",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20072",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.633",
      "lastModified" : "2024-11-21T03:22:34.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Hindu Matrimonial Script. La vulnerabilidad afecta a una función desconocida del archivo /admin/generalsettings.php. La manipulación conlleva a una administración inapropiada de privilegios. Es posible lanzar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95412",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20073",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.710",
      "lastModified" : "2024-11-21T03:22:34.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script y se ha clasificado como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /admin/cms.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95413",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20074",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.810",
      "lastModified" : "2024-11-21T03:22:34.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script y se ha clasificado como crítica. Este problema afecta a una funcionalidad desconocida del archivo /admin/newsletter1.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95414",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20075",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.897",
      "lastModified" : "2024-11-21T03:22:34.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script. Se ha clasificado como crítica. Afecta a una parte desconocida del archivo /admin/payment.php. La manipulación conlleva a una administración inapropiada de privilegios. Es posible iniciar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95415",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20076",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:07.973",
      "lastModified" : "2024-11-21T03:22:34.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unknown code of the file /admin/searchview.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script. Ha sido declarada como crítica. Esta vulnerabilidad afecta a código desconocido del archivo /admin/searchview.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95416",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20077",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:08.053",
      "lastModified" : "2024-11-21T03:22:35.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown processing of the file /admin/success_story.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Hindu Matrimonial Script. Ha sido calificada como crítica. Este problema afecta a un procesamiento desconocido del archivo /admin/success_story.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser iniciado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95417",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20078",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:08.137",
      "lastModified" : "2024-11-21T03:22:35.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Hindu Matrimonial Script. Está afectada una función desconocida del archivo /admin/featured.php. La manipulación conlleva a una administración inapropiada de privilegios. Es posible lanzar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95418",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20079",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:08.213",
      "lastModified" : "2024-11-21T03:22:35.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/photo.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Hindu Matrimonial Script. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /admin/photo.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95419",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20080",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:08.293",
      "lastModified" : "2024-11-21T03:22:35.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is some unknown functionality of the file /admin/googleads.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Hindu Matrimonial Script. Este problema afecta a una funcionalidad desconocida del archivo /admin/googleads.php. La manipulación conlleva a una administración inapropiada de privilegios. El ataque puede ser lanzado remotamente. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95420",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20081",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-21T06:15:08.367",
      "lastModified" : "2024-11-21T03:22:35.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Hindu Matrimonial Script. Esto afecta a una parte desconocida del archivo /admin/reports.php. La manipulación conlleva a una administración inapropiada de privilegios. Es posible iniciar el ataque de forma remota. La explotación ha sido revelada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hindu_matrimonial_script_project:hindu_matrimonial_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93502E14-42D2-4B83-BAFD-41FAE9B32CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.95421",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.95421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41044/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20082",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-22T06:15:07.057",
      "lastModified" : "2024-11-21T03:22:35.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. This issue affects some unknown processing. The manipulation leads to backdoor. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en JUNG Smart Visu Server versiones 1.0.804/1.0.830/1.0.832. Este problema afecta a algunos procesos desconocidos. La manipulación conlleva a un backdoor. El ataque debe ser abordado localmente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.0.900 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F3FFF1-510F-407F-B103-A145FB632239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A87AF62-2B51-45BB-8038-507B04BFA29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.832:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82295308-4508-4B08-B42B-D17C6AC836FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jung-group:smart_visu_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72946C8-4DEB-44E6-A22B-21AD3AC95A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96815",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20083",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-22T06:15:07.440",
      "lastModified" : "2024-11-21T03:22:35.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en JUNG Smart Visu Server versiones 1.0.804/1.0.830/1.0.832. Está afectada una función desconocida del componente SSH Server. La manipulación conlleva a un backdoor. El ataque debe que ser abordado localmente. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.0.900 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F3FFF1-510F-407F-B103-A145FB632239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A87AF62-2B51-45BB-8038-507B04BFA29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.832:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82295308-4508-4B08-B42B-D17C6AC836FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jung-group:smart_visu_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72946C8-4DEB-44E6-A22B-21AD3AC95A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96816",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20084",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-22T06:15:07.517",
      "lastModified" : "2024-11-21T03:22:35.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en JUNG Smart Visu Server versiones 1.0.804/1.0.830/1.0.832 y ha sido clasificada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del componente KNX Group Address. La manipulación conlleva a un backdoor. Es requerido acceso local para abordar este ataque. La explotación ha sido revelada al público y puede ser usada. La actualización a versión 1.0.900 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F3FFF1-510F-407F-B103-A145FB632239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A87AF62-2B51-45BB-8038-507B04BFA29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.832:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82295308-4508-4B08-B42B-D17C6AC836FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jung-group:smart_visu_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72946C8-4DEB-44E6-A22B-21AD3AC95A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96817",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20085",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.037",
      "lastModified" : "2024-11-21T03:22:36.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Atahualpa Theme y ha sido clasificada como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conduce a un ataque de tipo cross site scripting básico. El ataque puede ser lanzado remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytesforall:atahualpa:-:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B97AB149-A9AA-48CB-92CE-C058B10D95B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/83",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97375",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20086",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.560",
      "lastModified" : "2024-11-21T03:22:36.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en el plugin VaultPress versión 1.8.4. Esto afecta a una parte desconocida. La manipulación conduce a una inyección de código. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:vaultpress:1.8.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "21EB6D86-83B4-4D64-9AA7-D4A2AFBE58C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/95",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20087",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.637",
      "lastModified" : "2024-11-21T03:22:36.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en Alpine PhotoTile for Instagram Plugin versión 1.2.7.7. Este problema afecta a una funcionalidad desconocida. La manipulación conduce a un ataque de tipo cross site scripting básico. El ataque puede ser lanzado remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thealpinepress:alpine-photo-tile-for-instagram:1.2.7.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "815E5069-6F05-4DA3-8FAD-69BFF4E74B65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/94",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20088",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.710",
      "lastModified" : "2024-11-21T03:22:36.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Atahualpa Theme. Está afectada una función desconocida. La manipulación conduce a un ataque de tipo cross-site request forgery. Es posible lanzar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytesforall:atahualpa:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.7.24",
            "matchCriteriaId" : "64FEE798-FCAE-4175-B718-8902EE3B01F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/90",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97380",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20089",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.787",
      "lastModified" : "2024-11-21T03:22:36.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el plugin Gwolle Guestbook versión 1.7.4. Ha sido calificada como problemática. Este problema afecta a algunos procesos desconocidos. La manipulación conduce a un ataque de tipo cross site scripting básico. El ataque puede ser iniciado remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gwolle_guestbook_project:gwolle_guestbook:1.7.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9F91E105-BD12-464D-9AFA-B836A1421B0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Mar/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Mar/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20090",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.853",
      "lastModified" : "2024-11-21T03:22:36.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el plugin Global Content Blocks 2.1.5. Ha sido declarada como problemática. Esta vulnerabilidad afecta a un código desconocido. La manipulación conduce a la falsificación de peticiones entre sitios. El ataque puede iniciarse de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:global_content_blocks_project:global_content_blocks:2.1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0489C1F2-D3C4-4381-8D3E-DE9395C33DEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Mar/0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Mar/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20091",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-23T05:15:07.920",
      "lastModified" : "2024-11-21T03:22:36.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in File Manager Plugin 3.0.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el Plugin del Gestor de Archivos 3.0.1. ha sido clasificado como problemática. Esto afecta a una parte desconocida. La manipulación conduce a un ataque de tipo cross-site request forgery. Es posible iniciar el ataque de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpjos:library_file_manager:3.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "657E22E8-E9DE-4AF8-8109-73E56DE039CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Feb/57",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Feb/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20092",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-24T07:15:06.973",
      "lastModified" : "2024-11-21T03:22:36.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en el plugin Google Analytics Dashboard versión 2.1.1. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico. El ataque puede lanzarse de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoast:google_analytics_dashboard:2.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "CEA8C983-B872-4C43-AED3-21EB7B114C43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/93",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20093",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-24T07:15:07.247",
      "lastModified" : "2025-03-21T16:07:09.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en el plugin Download Manager versión 2.8.99. La función afectada es desconocida. La manipulación conlleva a un ataque de tipo cross-site request forgery. Es posible lanzar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3eden:download_manager:2.8.99:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BD2F8C51-7FF9-4059-A335-6001C4FA4AF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/82",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97374",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20094",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-24T07:15:07.310",
      "lastModified" : "2024-11-21T03:22:37.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en el plugin NewStatPress versión 1.2.4. Este problema afecta a algunos procesos desconocidos. La manipulación conlleva a un ataque de tipo cross site scripting básico (persistente). El ataque puede ser iniciado remotamente. La actualización a versión 1.2.5 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newstatpress_project:newstatpress:1.2.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "5E3E0FBA-37CF-4352-9868-4F289F36D43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/81",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97373",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20095",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-24T07:15:07.370",
      "lastModified" : "2024-11-21T03:22:37.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en el plugin Simple Ads Manager. Esta vulnerabilidad afecta a un código desconocido. La manipulación conlleva a una inyección de código. El ataque puede iniciarse de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_ads_manager_project:simple_ads_manager:2.9.8.125:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1F9D2CAA-BE01-41BC-AFE7-444BDDAE8AC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/80",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97372",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20096",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-24T07:15:07.433",
      "lastModified" : "2024-11-21T03:22:37.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en el plugin antispam WP-SpamFree versión 2.1.1.4. Esto afecta a una parte desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-spamfree_anti-spam_project:wp-spamfree_anti-spam:2.1.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "B1BA9BDD-10E9-49F8-B8F2-752292F0858D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/79",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97371",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20097",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-24T07:15:07.490",
      "lastModified" : "2024-11-21T03:22:37.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el plugin WP-Filebase Download Manager versión 3.4.4. Se ha calificado como problemática. Este problema afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico. El ataque puede ser lanzado remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-filebase_download_manager_project:wp-filebase_download_manager:3.4.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D05F4C44-0827-459C-A98F-38BBAB6EB892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/78",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97370",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20100",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-27T14:15:07.907",
      "lastModified" : "2024-11-21T03:22:37.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Air Transfer versiones 1.0.14/1.2.1. Ha sido calificada como problemática. Este problema afecta a una funcionalidad desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_transfer_project:air_transfer:1.0.14:*:*:*:*:ipad:*:*",
            "matchCriteriaId" : "9A161150-EF1B-4062-AED2-BCC2026881D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_transfer_project:air_transfer:1.0.14:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B529AF57-7D62-47CE-B79C-ABEFDF178A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_transfer_project:air_transfer:1.2.1:*:*:*:*:ipad:*:*",
            "matchCriteriaId" : "5FA677A3-6967-4F4E-8B35-E7500B287DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_transfer_project:air_transfer:1.2.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B6428525-07D9-4F94-8F30-805B6271F008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.97280",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2035",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20101",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-27T14:15:07.977",
      "lastModified" : "2024-11-21T03:22:38.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en ProjectSend versión r754. Esto afecta a una parte desconocida del archivo process.php?do=zip_download. La manipulación del argumento cliente/archivo conlleva a una divulgación de información. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectsend:projectsend:r754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC26971D-4906-4B94-8BCE-19DC44BF2136"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/Xc6Jg9I7Pj4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/Xc6Jg9I7Pj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20102",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-27T14:15:08.043",
      "lastModified" : "2024-11-21T03:22:38.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Album Lock versión 4.0 y Ha sido clasificada como crítica. Este problema afecta a una funcionalidad desconocida del archivo /getImage. La manipulación del argumento filePaht conlleva a un salto de ruta. Atacar localmente es un requisito. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:album_lock_project:album_lock:4.0:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "FFFF5ABF-0406-4E0F-834A-AFDD6AFE99F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.97268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2033",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20098",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-27T19:15:07.930",
      "lastModified" : "2024-11-21T03:22:37.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el plugin Admin Custom Login versión 2.4.5.2. Ha sido clasificada como problemática. La función afectada es desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico (Persistente). Es posible lanzar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblizar:admin_custom_login:2.4.5.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "AAE009FF-B2DE-45A2-ADC3-DA469B45261F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/75",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97368",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20099",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-27T19:15:08.003",
      "lastModified" : "2024-11-21T03:22:37.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Analytics Stats Counter Statistics Plugin versión 1.2.2.5 y ha sido clasificada como crítica. Este problema afecta a algunos procesamientos desconocidos. La manipulación conlleva a una inyección de código. El ataque puede iniciarse de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:analytics_stats_counter_statistics_project:analytics_stats_counter_statistics:1.2.2.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "620A6D04-D661-4F15-ACF8-61A9BCE32DA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/74",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97367",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20103",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-27T22:15:08.647",
      "lastModified" : "2024-11-21T03:22:38.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument order_by/order with the input ASC%2c(select*from(select(sleep(2)))a) leads to sql injection (Blind). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.9 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en el plugin Kama Click Counter versiones hasta 3.4.8. Esto afecta a una parte desconocida del archivo wp-admin/admin.php. La manipulación del argumento order_by/order con la entrada ASC%2c(select*from(select(sleep(2)))a) conlleva una inyección sql (Ciega). Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada. La actualización a la versión 3.4.9 puede solucionar este problema. Se recomienda actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-kama:kama_click_counter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.4.9",
            "matchCriteriaId" : "975275B7-2046-4EA1-8721-A9CBB335AAC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/67",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20104",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-28T07:15:07.927",
      "lastModified" : "2024-11-21T03:22:38.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWA_SID leads to sql injection (Time). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Simplessus versión 3.7.7. Ha sido declarada como crítica. Esta vulnerabilidad afecta a código desconocido del componente Cookie Handler. La manipulación del argumento UWA_SID conlleva a una inyección sql (Time). El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada. La actualización a versión 3.8.3 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplessus:simplessus:3.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC34EE02-344B-4489-8D83-9290E6C7E019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Feb/39",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97252",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Feb/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20105",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-28T07:15:08.580",
      "lastModified" : "2024-11-21T03:22:38.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument path with the input ..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Simplessus versión 3.7.7. Ha sido calificada como crítica. Este problema afecta a algunos procesos desconocidos. La manipulación del argumento path con la entrada ..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd conlleva a un salto de ruta. El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada. La actualización a versión 3.8.3 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplessus:simplessus:3.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC34EE02-344B-4489-8D83-9290E6C7E019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2017/Feb/40",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97253",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/bugtraq/2017/Feb/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20106",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-28T07:15:08.660",
      "lastModified" : "2024-11-21T03:22:38.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument upload_url leads to server-side request forgery. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Lithium Forum versión 2017 Q1. Este problema afecta a algunos procesamientos desconocidos del componente Compose Message Handler. La manipulación del argumento upload_url conlleva a un ataque de tipo server-side request forgery. El ataque debe ser abordado localmente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:khoros:lithium_forum:2017:q1:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CFECC8-B028-4839-B1B2-E2F765F069C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.97265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2030",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20107",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-28T07:15:08.737",
      "lastModified" : "2024-11-21T03:22:38.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1.12 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en ShadeYouVPN.com Client versión 2.0.1.11. La función afectada es desconocida. La manipulación conlleva a una administración inapropiada de privilegios. Es requerido acceso local para abordar este ataque. La explotación ha sido divulgada al público y puede ser usada. La actualización a versión 2.0.1.12 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadeyouvpn.com_project:shadeyouvpn.com:2.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E519BD-016E-46BF-B26F-BEB05A662943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/28",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97122",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20108",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T07:15:06.870",
      "lastModified" : "2024-11-21T03:22:38.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input \"><script>alert(1)</script> leads to basic cross site scripting. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Easy Table Plugin versión 1.6. Esto afecta a una parte desconocida del archivo /wordpress/wp-admin/options-general.php. La manipulación con la entrada \")(script)alert(1)(/script) conlleva a un ataque de tipo cross site scripting básico. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_table_project:easy_table:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "FD057A1C-4D3D-4379-83FE-5AECE5D5A0C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97119",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20109",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T07:15:07.370",
      "lastModified" : "2024-11-21T03:22:39.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to information disclosure (Credentials). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Teleopti WFM versiones hasta 7.1.0. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /TeleoptiWFM/Administration/GetOneTenant del componente Administration. La manipulación conlleva a una divulgación de información (Credenciales). El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada. Es recomendado aplicar un parche para corregir este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calabrio:teleopti_workforce_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndIncluding" : "7.1.0",
            "matchCriteriaId" : "D04473EE-F75F-48BD-BD87-56644AE7E265"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96805",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20110",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T07:15:07.437",
      "lastModified" : "2024-11-21T03:22:39.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure (Credentials). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en Teleopti WFM versiones hasta 7.1.0. Este problema afecta a una funcionalidad desconocida del componente Administration. La manipulación como parte de JSON conlleva a una divulgación de información (Credenciales). El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada. Es recomendado aplicar un parche para corregir este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calabrio:teleopti_workforce_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndIncluding" : "7.1.0",
            "matchCriteriaId" : "D04473EE-F75F-48BD-BD87-56644AE7E265"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20111",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T07:15:07.497",
      "lastModified" : "2024-11-21T03:22:39.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administration. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Teleopti WFM 7.1.0. Esto afecta a una parte desconocida de la Administración del componente. La manipulación conlleva una administración inapropiada de privilegios. Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada. Es recomendado aplicar un parche para corregir este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calabrio:teleopti_workforce_management:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D022CE81-9DBF-4EA4-B529-72B8DF0E385D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96807",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20112",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T07:15:07.553",
      "lastModified" : "2024-11-21T03:22:39.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.6.2 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en IVPN Client versión 2.6.6120.33863 y ha sido clasificada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación del argumento --up cmd conlleva a una administración inapropiada de privilegios. El ataque debe ser abordado localmente. La explotación ha sido divulgada al público y puede ser usada. La actualización a la versión 2.6.2 puede solucionar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivpn:ivpn:2.6.6120.33863:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "D4BFEDDA-8CD0-467F-8E80-A08CA12C9EB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kacperszurek/exploits/blob/master/IVPN/ivpn_privilege_escalation.py",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kacperszurek/exploits/blob/master/IVPN/ivpn_privilege_escalation.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20113",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:07.777",
      "lastModified" : "2024-11-21T03:22:39.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como problemática, en TrueConf Server versión 4.3.7. Esto afecta a una parte desconocida. La manipulación conlleva a un ataque de tipo cross site scripting básico (almacenado). Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96627",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20114",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:07.850",
      "lastModified" : "2024-11-21T03:22:39.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic. This vulnerability affects unknown code of the file /admin/conferences/get-all-status/. The manipulation of the argument keys[] leads to basic cross site scripting (Reflected). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en TrueConf Server versión 4.3.7 y ha sido clasificada como problemática. Esta vulnerabilidad afecta a código desconocido del archivo /admin/conferences/get-all-status/. La manipulación del argumento keys[] conlleva a un ataque de tipo cross site scripting básico (Reflejado). El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96628",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20115",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:07.910",
      "lastModified" : "2024-11-21T03:22:39.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/list/. The manipulation of the argument sort leads to basic cross site scripting (Reflected). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en TrueConf Server versión 4.3.7 y ha sido clasificada como problemática. Este problema afecta a un procesamiento desconocido del archivo /admin/conferences/list/. La manipulación del argumento sort conlleva a un ataque de tipo cross site scripting básico (Reflejado). El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20116",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:07.967",
      "lastModified" : "2024-11-21T03:22:40.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The manipulation of the argument checked_group_id leads to basic cross site scripting (Reflected). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en TrueConf Server versión 4.3.7. Ha sido clasificada como problemática. Afectada es una función desconocida del archivo /admin/group/list/. La manipulación del argumento checked_group_id conlleva a un ataque de tipo cross site scripting básico (Reflejado). Es posible lanzar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20117",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:08.023",
      "lastModified" : "2024-11-21T03:22:40.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/group. The manipulation leads to basic cross site scripting (DOM). The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en TrueConf Server versión 4.3.7. Se ha declarado como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /admin/group. La manipulación conlleva a un ataque de tipo cross site scripting (DOM) básico. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20118",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:08.080",
      "lastModified" : "2024-11-21T03:22:41.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TrueConf Server 4.3.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/conferences/list/. The manipulation of the argument domxss leads to basic cross site scripting (DOM). The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en TrueConf Server versión 4.3.7. Ha sido calificada como problemática. Este problema afecta a una funcionalidad desconocida del archivo /admin/conferences/list/. La manipulación del argumento domxss conlleva a un ataque de tipo cross site scripting (DOM) básico. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20119",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:08.140",
      "lastModified" : "2024-11-21T03:22:41.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en TrueConf Server versión 4.3.7. Esto afecta a una parte desconocida del archivo /admin/general/change-lang. La manipulación del argumento redirect_url conlleva a un redireccionamiento abierto. Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "97EC3C4F-711D-4B1A-B313-B87841473330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20120",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-29T17:15:08.197",
      "lastModified" : "2024-11-21T03:22:41.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en TrueConf Server versión 4.3.7. Esta vulnerabilidad afecta a código desconocido del archivo /admin/service/stop/. La manipulación conlleva a un ataque de tipo cross-site request forgery. El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:4.3.7.12219:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD61A66E-F4EA-4A91-9968-A140B8E750D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trueconf:server:4.3.7.12255:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB588E0-98C6-4D74-8996-FF086DAB9C32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41184/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20121",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-30T05:15:06.897",
      "lastModified" : "2024-11-21T03:22:41.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Teradici Management Console versión 2.2.0. Ha sido declarada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del componente Database Management. La manipulación conlleva a una administración de privilegios inapropiada. Es posible lanzar el ataque en el host local. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_management_console:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F032FC47-A2C9-415F-915A-5DD2F9851AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/62",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97279",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20122",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-30T05:15:07.067",
      "lastModified" : "2024-11-21T03:22:41.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the component Contact Form. The manipulation of the argument text with the input <img src=\"http://1\"; on onerror=\"$(’p').text(’Hacked’)\" /> leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en Bitrix Site Manager versión 12.06.2015. Esta vulnerabilidad afecta a una funcionalidad desconocida del componente Contact Form. La manipulación del texto del argumento con la entrada (img src=\"http://1\"; on onerror=\"$(\"p'').text('Hacked')\" /) conlleva a un ataque de tipo cross site scripting básico. El ataque puede lanzarse de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix24:bitrix_site_manager:12.06.2015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62224232-FA7D-40A9-BFD5-D5E1A69795CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20123",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-30T05:15:07.130",
      "lastModified" : "2024-11-21T03:22:41.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler. The manipulation leads to untrusted search path. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.8 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Viscosity versión 1.6.7. Ha sido clasificada como crítica. Afecta a una parte desconocida del componente DLL Handler. La manipulación conlleva a una ruta de búsqueda no fiable. Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada. La actualización a versión 1.6.8, puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sparklabs:viscosity:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC10FEF-FABE-4BE3-A00C-24ED178E0F29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kacperszurek/exploits/tree/master/Viscosity",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sparklabs.com/blog/viscosity-for-mac-windows-version-1-6-8/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kacperszurek/exploits/tree/master/Viscosity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sparklabs.com/blog/viscosity-for-mac-windows-version-1-6-8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20124",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-30T05:15:07.207",
      "lastModified" : "2024-11-21T03:22:41.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Online Hotel Booking System Pro Plugin versión 1.0. Está afectada una función desconocida del archivo /front/roomtype-details.php. La manipulación del argumento tid conlleva a una inyección sql. Es posible lanzar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestsoftinc:online_hotel_booking_system:1.0:*:*:*:pro:wordpress:*:*",
            "matchCriteriaId" : "4D614343-ACD9-4F44-8D88-AC738D680AFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41182/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41182/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20125",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-06-30T05:15:07.270",
      "lastModified" : "2024-11-21T03:22:41.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Online Hotel Booking System Pro versión 1.2. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /roomtype-details.php. La manipulación del argumento tid conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestsoftinc:online_hotel_booking_system:1.2:*:*:*:pro:-:*:*",
            "matchCriteriaId" : "B7F3A368-790C-49BC-B16B-FF5796D9C645"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96625",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41181/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41181/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20126",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-13T18:15:08.463",
      "lastModified" : "2024-11-21T03:22:41.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en KB Affiliate Referral Script versión 1.0. Ha sido clasificada como crítica. Afecta a una parte desconocida del archivo /index.php. La manipulación del argumento nombre de usuario/contraseña con la entrada \"o\"\"=\" conlleva a una inyección sql. Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kb_affiliate_referral_script_project:kb_affiliate_referral_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604351F0-934D-41CD-91A0-99657693B275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96621",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41166/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41166/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20127",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-13T18:15:08.537",
      "lastModified" : "2024-11-21T03:22:42.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en KB Login Authentication Script versión 1.1 y ha sido clasificada como crítica. Este problema afecta a una funcionalidad desconocida. La manipulación del argumento nombre de usuario/contraseña con la entrada \"o\"\"=\" conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kb_login_authentication_script_project:kb_login_authentication_script:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F5467F-4578-4EBB-9E3C-93F1A8ED17A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96620",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41167/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41167/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20128",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-13T18:15:08.593",
      "lastModified" : "2024-11-21T03:22:42.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en KB Messages PHP Script 1.0 y ha sido clasificada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación del argumento nombre de usuario/contraseña con la entrada \"o\"\"=\" conlleva una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kb_messages_php_script_project:kb_messages_php_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BAE97C-8E9C-44EC-ACDF-781DA5AB1ED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96619",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41168/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41168/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20129",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-14T07:15:06.807",
      "lastModified" : "2024-11-21T03:22:42.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT CONCAT(CONCAT('qqkkq','VnPVWVaYxljWqGpLLbEIyPIHBjjjjASQTnaqfKaV'),'qvvpq'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oCrh&search= leads to sql injection. It is possible to launch the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en LogoStore. Ha sido clasificada como crítica. Está afectada una función desconocida del archivo /LogoStore/search.php. La manipulación del argumento query con el input test\" UNION ALL SELECT CONCAT(CONCAT(\"qqkkq\",\"VnPVWVaYxljWqGpLLbEIyPIHBjjjASQTnaqfKaV\"),\"qvvpq\"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oCrh&amp;search= conlleva una inyección sql. Es posible lanzar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logostore_project:logostore:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9518EAA-C268-4D38-B7BC-99B09853083C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96540",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20130",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:07.377",
      "lastModified" : "2024-11-21T03:22:42.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/search_property.php. The manipulation of the argument property_for leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech Real Estate Script versión 3.12. Ha sido declarada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /real-estate-script/search_property.php. La manipulación del argumento property_for conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:real_estate_script:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6D8752-0FA0-4701-A4DC-8E88B80C4859"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96289",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41195/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41195/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20131",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:07.977",
      "lastModified" : "2024-11-21T03:22:42.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argument inf leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech News Portal versión 6.28. Ha sido clasificada como crítica. Está afectada una función desconocida del archivo /news-portal-script/information.php. La manipulación del argumento inf conlleva a una inyección sql. Es posible lanzar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:news_portal_script:6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE0CCD1-E812-4579-9E9E-5079DD25E555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96288",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41194/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20132",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.047",
      "lastModified" : "2024-11-21T03:22:42.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech Multi Vendor Script versión 6.49 y ha sido clasificada como crítica. Este problema afecta a un procesamiento desconocido del archivo /multi-vendor-shopping-script/product-list.php. La manipulación del argumento pl conlleva a una inyección sql. El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:multi_vendor_script:6.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86055DE6-A22D-4D53-874F-E6848323A15E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96287",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41193/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41193/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20133",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.123",
      "lastModified" : "2024-11-21T03:22:42.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Itech Job Portal Script versión 9.13. Esto afecta a una parte desconocida del archivo /admin. La manipulación conlleva a una autenticación inadecuada. Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:job_portal_script:9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462F195-3D9B-40FA-8C4E-6FEBCCF1B4A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96285",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20134",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.190",
      "lastModified" : "2024-11-21T03:22:43.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Itech Freelancer Script versión 5.13. Este problema afecta a una funcionalidad desconocida del archivo /category.php. La manipulación del argumento sk conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:freelancer_script:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF064D9-E4DE-4A57-8CA5-DAE2A40A6DCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96284",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41191/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41191/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20135",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.247",
      "lastModified" : "2024-11-21T03:22:43.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unknown functionality of the file /see_more_details.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Itech Dating Script versión 3.26. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /see_more_details.php. La manipulación del argumento id conlleva a una inyección sql. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:dating_script:3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA31732-D3C2-4D7C-89B4-A4383EA28837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41190/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41190/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20136",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.307",
      "lastModified" : "2024-11-21T03:22:43.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function of the file /subpage.php. The manipulation of the argument scat with the input =51' AND 4941=4941 AND 'hoCP'='hoCP leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Itech Classifieds Script versión 7.27. Está afectada una función desconocida del archivo /subpage.php. La manipulación del argumento scat con la entrada =51\" AND 4941=4941 AND \"hoCP\"=\"hoCP conlleva a una inyección sql. Es posible lanzar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:classifieds_script:7.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17943B0B-2F57-4B0E-8E12-0C2C67A786E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96282",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41189/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41189/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20137",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.363",
      "lastModified" : "2024-11-21T03:22:43.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech B2B Script versión 4.28. Se ha calificado como crítica. Este problema afecta a un procesamiento desconocido del archivo /catcompany.php. La manipulación del argumento token con la entrada 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj conlleva a una inyección sql. El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:b2b_script:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D2C7C2-8E1E-4BA3-8AF2-84CCA8125ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96281",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41188/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41188/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20138",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-16T07:15:08.423",
      "lastModified" : "2024-11-21T03:22:43.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech Auction Script versión 6.49. ha sido clasificada como crítica. Afecta a una parte desconocida del archivo /mcategory.php. La manipulación del argumento mcid con la entrada 4\" AND 1734=1734 AND \"Ggks\"=\"Ggks conlleva a una inyección sql (Ciega). Es posible iniciar el ataque de forma remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itechscripts:auction_script:6.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF73C6E0-77E5-48F3-87AA-D718F19C9AA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20139",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-22T17:15:08.017",
      "lastModified" : "2024-11-21T03:22:43.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /show_news.php. The manipulation of the argument id with the input AND (SELECT 1222 FROM(SELECT COUNT(*),CONCAT(0x71786b7a71,(SELECT (ELT(1222=1222,1))),0x717a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) leads to sql injection (Error). The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech Movie Portal Script versión 7.36. Ha sido declarada como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /show_news.php. La manipulación del argumento id con la entrada AND (SELECT 1222 FROM(SELECT COUNT(*),CONCAT(0x71786b7a71,(SELECT (ELT(1222=1222,1)),0x717a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) conlleva a una inyección sql (Error). El ataque puede ser lanzado remotamente. La explotación ha sido divulgado al público y puede ser usado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambit:movie_portal_script:7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5845AF58-7202-4DF0-8D79-547D4C113829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96253",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20140",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-22T17:15:08.170",
      "lastModified" : "2024-11-21T03:22:43.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input <img src=i onerror=prompt(1)> leads to basic cross site scripting (Reflected). The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itech Movie Portal Script 7.36. Ha sido calificada como problemática. Este problema afecta a una funcionalidad desconocida del archivo /movie.php. La manipulación del argumento f con la entrada (img src=i onerror=prompt(1)) conlleva a un cross site scripting básico (Reflejado). El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambit:movie_portal_script:7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5845AF58-7202-4DF0-8D79-547D4C113829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96254",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20141",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-22T17:15:08.233",
      "lastModified" : "2024-11-21T03:22:43.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Itech Movie Portal Script 7.36. This affects an unknown part of the file /movie.php. The manipulation of the argument f leads to sql injection (Union). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Itech Movie Portal Script versión 7.36. Esto afecta a una parte desconocida del archivo /movie.php. La manipulación del argumento f conlleva a una inyección sql (Unión). Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambit:movie_portal_script:7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5845AF58-7202-4DF0-8D79-547D4C113829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96255",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20142",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-22T17:15:08.297",
      "lastModified" : "2024-11-21T03:22:44.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection (Union). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en Itech Movie Portal Script versión 7.36. Esta vulnerabilidad afecta a código desconocido del archivo /artist-display.php. La manipulación del argumento act conlleva a una inyección sql (Unión). El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambit:movie_portal_script:7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5845AF58-7202-4DF0-8D79-547D4C113829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96256",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20143",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-22T17:15:08.357",
      "lastModified" : "2024-11-21T03:22:44.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection (Error). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad, clasificada como crítica, en Itech Movie Portal Script versión 7.36. Este problema afecta a un procesamiento desconocido del archivo /film-rating.php. La manipulación del argumento v conlleva a una inyección sql (Error). El ataque puede ser iniciado remotamente. La explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambit:movie_portal_script:7.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5845AF58-7202-4DF0-8D79-547D4C113829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.96257",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.96257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/41155/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20144",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-24T20:15:07.907",
      "lastModified" : "2024-11-21T03:22:44.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Anvsoft PDFMate PDF Converter Pro 1.7.5.0 y ha sido clasificada como crítica. La manipulación conlleva a una corrupción de la memoria. El ataque puede ser lanzado remotamente. LA explotación ha sido divulgada al público y puede ser usada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anvsoft:pdf_converter:1.7.5.0:*:*:*:free:*:*:*",
            "matchCriteriaId" : "4718B5DA-D6C4-4ED3-9BE3-0709DC5736C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anvsoft:pdf_converter:1.7.5.0:*:*:*:professional:*:*:*",
            "matchCriteriaId" : "6BD5E84D-C815-4054-97B2-4D77C14762C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?id.97267",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2029",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.97267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulnerability-lab.com/get_content.php?id=2029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20145",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-07-25T05:15:07.127",
      "lastModified" : "2024-11-21T03:22:44.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tecrail Responsive Filemanger versiones hasta 9.10.x y ha sido clasificada como crítica. La manipulación conlleva a un salto de ruta. El ataque puede ser lanzado remotamente. La explotación ha sido divulgada al público y puede ser usada. La actualización a versión 9.11.0 puede abordar este problema. Es recomendado actualizar el componente afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tecrail:responsive_filemanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.11.0",
            "matchCriteriaId" : "068ACD3F-2003-4798-879B-D7657DA2CE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96818",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2017/Feb/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.96818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12152",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:11.610",
      "lastModified" : "2023-11-07T02:38:22.517",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15106",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:11.663",
      "lastModified" : "2023-11-07T02:39:20.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15109",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:11.703",
      "lastModified" : "2023-11-07T02:39:20.387",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15122",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:11.903",
      "lastModified" : "2023-11-07T02:39:21.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2588",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:11.950",
      "lastModified" : "2023-11-07T02:43:51.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2593",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:11.993",
      "lastModified" : "2023-11-07T02:43:51.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2597",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:12.030",
      "lastModified" : "2023-11-07T02:43:51.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2631",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:12.070",
      "lastModified" : "2023-11-07T02:43:52.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-2657",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:12.107",
      "lastModified" : "2023-11-07T02:43:54.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7527",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-08-08T19:15:12.153",
      "lastModified" : "2023-11-07T02:50:12.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2022-09-20T18:15:09.953",
      "lastModified" : "2025-05-29T14:15:26.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped."
      }, {
        "lang" : "es",
        "value" : "En el paquete ebuild versiones hasta smokeping-2.7.3-r1 para SmokePing en Gentoo, el initscript usa un archivo PID que es escribible por el usuario smokeping. Al escribir PIDs arbitrarios en ese archivo, el usuario smokeping puede causar una denegación de servicio a PIDs arbitrarios cuando el servicio es detenido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smokeping:smokeping:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.3-r1",
            "matchCriteriaId" : "B6E41EEC-A9B0-4852-9452-EEA3F55A2D71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/631140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/631140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2022-09-20T18:15:09.993",
      "lastModified" : "2025-05-29T14:15:27.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls."
      }, {
        "lang" : "es",
        "value" : "En el paquete ebuild versiones hasta logcheck-1.3.23.ebuild para Logcheck en Gentoo, es posible lograr la escalada de privilegios de root desde el usuario logcheck debido a llamadas chown recursivas no seguras"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:logcheck:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.23",
            "matchCriteriaId" : "F2429DDD-9F97-40F7-AE78-DB3CD333BCC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/630752",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/630752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2022-10-15T02:15:08.497",
      "lastModified" : "2025-05-14T15:15:48.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on the affected system, as exploited in the wild in mid-2017 and later."
      }, {
        "lang" : "es",
        "value" : "El servidor web Mikrotik RouterOS permite una corrupción de memoria en versiones anteriores a Stable 6.38.5 y Long-term 6.37.5, también se conoce como Chimay-Red. Un usuario remoto y no autenticado puede desencadenar la vulnerabilidad mediante el envío de una petición HTTP diseñada. Un atacante puede utilizar esta vulnerabilidad para ejecutar código arbitrario en el sistema afectado, como fue explotado \"in the wild\" mediados de 2017 y más tarde"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:*:*:*:*:ltr:*:*:*",
            "versionEndExcluding" : "6.37.5",
            "matchCriteriaId" : "48A6BC6C-0F39-4F53-AC01-D345CB9F8CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.38",
            "versionEndExcluding" : "6.38.5",
            "matchCriteriaId" : "3F7108B6-52D6-4DEA-A936-B3CBE2AE984D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BigNerd95/Chimay-Red",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/hajime-botnet-makes-a-comeback-with-massive-scan-for-mikrotik-routers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BigNerd95/Chimay-Red",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/hajime-botnet-makes-a-comeback-with-massive-scan-for-mikrotik-routers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7517",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2022-10-17T16:15:14.710",
      "lastModified" : "2025-05-13T21:15:58.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called \"MyProject\", and then later deletes it another user can then create a project called \"MyProject\" and access the metrics stored from the original \"MyProject\" instance."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de comprobación de entrada en Openshift Enterprise debido a un mapeo 1:1 de inquilinos en Hawkular Metrics y proyectos/espacios de nombres en OpenShift. Si un usuario crea un proyecto llamado \"MyProject\", y más tarde lo elimina, otro usuario puede crear un proyecto llamado \"MyProject\" y acceder a las métricas almacenadas de la instancia original \"MyProject\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "45690263-84D9-45A1-8C30-3ED2F0F11F47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-7517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470414",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2017-7517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1470414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20146",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2022-12-27T22:15:11.070",
      "lastModified" : "2025-04-11T23:15:25.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy."
      }, {
        "lang" : "es",
        "value" : "El uso del controlador CORS puede aplicar encabezados CORS inadecuados, lo que permite al solicitante controlar explícitamente el valor del encabezado Access-Control-Allow-Origin, lo que omite el comportamiento esperado de la política del mismo origen."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gorillatoolkit:handlers:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "0731243E-DC58-4998-8161-885D9E0ADF6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145",
        "source" : "security@golang.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gorilla/handlers/pull/116",
        "source" : "security@golang.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2020-0020",
        "source" : "security@golang.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gorilla/handlers/pull/116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2020-0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20150",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-28T19:15:08.837",
      "lastModified" : "2024-11-21T03:22:45.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The name of the patch is f1644b1d3502e5aa5284f31ea80d2623817f4d42. It is recommended to apply a patch to fix this issue. The identifier VDB-216989 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en el sitio web Challenge. Ha sido calificado como crítico. Este problema afecta algún procesamiento desconocido. La manipulación conduce a la inyección de SQL. El nombre del parche es f1644b1d3502e5aa5284f31ea80d2623817f4d42. Se recomienda aplicar un parche para solucionar este problema. A esta vulnerabilidad se le asignó el identificador VDB-216989."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:challenge_website_project:challenge_website:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-01-24",
            "matchCriteriaId" : "6EB8742B-DB30-4331-BF7F-25FF8602A129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Challenge/website/commit/f1644b1d3502e5aa5284f31ea80d2623817f4d42",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.216989",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.216989",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Challenge/website/commit/f1644b1d3502e5aa5284f31ea80d2623817f4d42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.216989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.216989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20151",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-30T12:15:08.730",
      "lastModified" : "2024-11-21T03:22:45.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en iText RUPS y clasificada como problemática. Esta vulnerabilidad afecta a un código desconocido del archivo src/main/java/com/itextpdf/rups/model/XfaFile.java. La manipulación conduce a una referencia de entidad externa xml. El nombre del parche es ac5590925874ef810018a6b60fec216eee54fb32. Se recomienda aplicar un parche para solucionar este problema. VDB-217054 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itextpdf:rups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-08-01",
            "matchCriteriaId" : "2D17FB6C-608B-4B37-96A0-2A56441BBF9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217054",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217054",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20152",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-30T12:15:08.817",
      "lastModified" : "2024-11-21T03:22:45.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is bd23c784f0e5cb12f66d15c100248449f87d72e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217056."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en aerouk imageserve y clasificada como problemática. Una función desconocida del archivo public/viewer.php del componente File Handler es afectada por esta vulnerabilidad. La manipulación del argumento ubicación del archivo conduce a un path traversal. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El nombre del parche es bd23c784f0e5cb12f66d15c100248449f87d72e2. Se recomienda aplicar un parche para solucionar este problema. El identificador de esta vulnerabilidad es VDB-217056."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imageserve_project:imageserve:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2BF72E-B12A-413A-A94F-82A928BF1DF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aerouk/imageserve/commit/bd23c784f0e5cb12f66d15c100248449f87d72e2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aerouk/imageserve/pull/27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217056",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217056",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aerouk/imageserve/commit/bd23c784f0e5cb12f66d15c100248449f87d72e2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aerouk/imageserve/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20153",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-30T12:15:08.910",
      "lastModified" : "2024-11-21T03:22:45.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in aerouk imageserve and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument REQUEST_URI leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2ac3cd4f90b4df66874fab171376ca26868604c4. It is recommended to apply a patch to fix this issue. The identifier VDB-217057 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en aerouk imageserve y clasificada como problemática. Una funcionalidad desconocida es afectada por esta vulnerabilidad. La manipulación del argumento REQUEST_URI conduce a Cross-Site Scripting (XSS). El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El nombre del parche es 2ac3cd4f90b4df66874fab171376ca26868604c4. Se recomienda aplicar un parche para solucionar este problema. A esta vulnerabilidad se le asignó el identificador VDB-217057."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imageserve_project:imageserve:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2BF72E-B12A-413A-A94F-82A928BF1DF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aerouk/imageserve/commit/2ac3cd4f90b4df66874fab171376ca26868604c4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aerouk/imageserve/pull/27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217057",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217057",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aerouk/imageserve/commit/2ac3cd4f90b4df66874fab171376ca26868604c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aerouk/imageserve/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-12073",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2022-12-30T21:15:09.703",
      "lastModified" : "2023-11-07T02:38:21.153",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20154",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-30T21:15:09.787",
      "lastModified" : "2024-11-21T03:22:45.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ghostlander Phoenixcoin. It has been classified as problematic. Affected is the function CTxMemPool::accept of the file src/main.cpp. The manipulation leads to denial of service. Upgrading to version 0.6.6.1-pxc is able to address this issue. The name of the patch is 987dd68f71a7d8276cef3b6c3d578fd4845b5699. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217068."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en ghostlander Phoenixcoin. Ha sido clasificada como problemática. La función CTxMemPool::accept del fichero src/main.cpp es afectada por la vulnerabilidad. La manipulación conduce a la denegación del servicio. La actualización a la versión 0.6.6.1-pxc puede solucionar este problema. El nombre del parche es 987dd68f71a7d8276cef3b6c3d578fd4845b5699. Se recomienda actualizar el componente afectado. El identificador de esta vulnerabilidad es VDB-217068."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcoin_project:phoenixcoin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.6.1",
            "matchCriteriaId" : "EAC54760-4362-4DC9-B382-4C2A0AB219CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ghostlander/Phoenixcoin/commit/987dd68f71a7d8276cef3b6c3d578fd4845b5699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ghostlander/Phoenixcoin/releases/tag/v0.6.6.1-pxc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217068",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217068",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ghostlander/Phoenixcoin/commit/987dd68f71a7d8276cef3b6c3d578fd4845b5699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ghostlander/Phoenixcoin/releases/tag/v0.6.6.1-pxc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20155",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-30T23:15:08.883",
      "lastModified" : "2024-11-21T03:22:45.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal Search. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is 855d9560d3782c105568eedf9b22a769fbf29cc0. It is recommended to upgrade the affected component. The identifier VDB-217069 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Sterc Google Analytics Dashboard para MODX hasta 1.0.5. Ha sido declarada problemática. Una función desconocida del archivo core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl del componente Internal Search es afectada por esta vulnerabilidad. La manipulación conduce a cross-site scripting. El ataque se puede lanzar de forma remota. La actualización a la versión 1.0.6 puede solucionar este problema. El nombre del parche es 855d9560d3782c105568eedf9b22a769fbf29cc0. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-217069."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sterc:google_analytics_dashboard_for_modx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.5",
            "matchCriteriaId" : "41021BB5-14F4-4C48-8C4A-7376B9703258"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/commit/855d9560d3782c105568eedf9b22a769fbf29cc0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/milestone/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/pull/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217069",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217069",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/commit/855d9560d3782c105568eedf9b22a769fbf29cc0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/milestone/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Sterc/Analytics-dashboard-widget/pull/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20156",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-31T10:15:09.183",
      "lastModified" : "2024-11-21T03:22:45.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/prepare_page.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named 5f8c715d6e2cc000f621a6833f0a86a673462136. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217139."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Exciting Printer y clasificada como crítica. Este problema afecta un procesamiento desconocido del archivo lib/printer/jobs/prepare_page.rb del componente Argument Handler. La manipulación del argumento URL conduce a la inyección de comandos. El nombre del parche es 5f8c715d6e2cc000f621a6833f0a86a673462136. Se recomienda aplicar un parche para solucionar este problema. El identificador asociado de esta vulnerabilidad es VDB-217139."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:printer_project:printer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-07-08",
            "matchCriteriaId" : "C9AE5D0C-92AB-4BC2-82D2-FAC3DFB02051"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/exciting-io/printer/commit/5f8c715d6e2cc000f621a6833f0a86a673462136",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/exciting-io/printer/issues/56",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217139",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217139",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/exciting-io/printer/commit/5f8c715d6e2cc000f621a6833f0a86a673462136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/exciting-io/printer/issues/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20157",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-31T10:15:13.073",
      "lastModified" : "2024-11-21T03:22:46.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217140."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Ariadne Component Library hasta 2.x. Ha sido clasificada como crítica. Una función desconocida del archivo src/url/Url.php es afectada por esta vulnerabilidad. La manipulación conduce a server-side request forgery. La actualización a la versión 3.0 puede solucionar este problema. Se recomienda actualizar el componente afectado. El identificador de esta vulnerabilidad es VDB-217140."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariadne-cms:ariadne_component_library:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "56CE1ADC-A3FC-45B7-9FDA-B3AF9CA54991"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ariadne-CMS/arc-web/commit/1feb1cc11e6c9f218408f15f53f537ea0d788656",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ariadne-CMS/arc-web/releases/tag/3.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217140",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217140",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ariadne-CMS/arc-web/commit/1feb1cc11e6c9f218408f15f53f537ea0d788656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ariadne-CMS/arc-web/releases/tag/3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20158",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-31T11:15:08.587",
      "lastModified" : "2024-11-21T03:22:46.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Affected by this vulnerability is the function run of the file actions/UploadAction.php. The manipulation of the argument file leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.1.9 is able to address this issue. The identifier of the patch is c00d1e4fc912257fca1fce66d7a163bdbb4c8222. It is recommended to upgrade the affected component. The identifier VDB-217141 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO SE ASIGNÓ   **** NO SOPORTADO CUANDO SE ASIGNÓ  ** Se encontró una vulnerabilidad en vova07 Yii2 FileAPI Widget hasta 0.1.8. Ha sido declarada problemática. La función de ejecución del archivo action/UploadAction.php es afectada por esta vulnerabilidad. La manipulación del archivo de argumentos conduce a Cross-Site Scripting. El ataque se puede lanzar de forma remota. La actualización a la versión 0.1.9 puede solucionar este problema. El nombre del parche es c00d1e4fc912257fca1fce66d7a163bdbb4c8222. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-217141. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yii2_fileapi_widget_project:yii2_fileapi_widget:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.9",
            "matchCriteriaId" : "5EF05758-DF23-40B4-B8CF-94AE43696310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vova07/yii2-fileapi-widget/commit/c00d1e4fc912257fca1fce66d7a163bdbb4c8222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vova07/yii2-fileapi-widget/releases/tag/0.1.9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217141",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217141",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vova07/yii2-fileapi-widget/commit/c00d1e4fc912257fca1fce66d7a163bdbb4c8222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vova07/yii2-fileapi-widget/releases/tag/0.1.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20159",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-31T11:15:10.750",
      "lastModified" : "2024-11-21T03:22:46.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as 05be4356b0a6ca7de48da926a9b997beb5ffeb4a. It is recommended to upgrade the affected component. VDB-217142 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en rf Keynote hasta 0.x. Ha sido calificada como problemática. Una función desconocida del archivo lib/keynote/rumble.rb es afectada por este problema. La manipulación del valor del argumento conduce a cross-site scripting. El ataque puede lanzarse de forma remota. La actualización a la versión 1.0.0 puede solucionar este problema. El nombre del parche es 05be4356b0a6ca7de48da926a9b997beb5ffeb4a. Se recomienda actualizar el componente afectado. VDB-217142 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keynote_project:keynote:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "B9331122-965E-46E2-AB9D-31D02588C835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rf-/keynote/commit/05be4356b0a6ca7de48da926a9b997beb5ffeb4a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rf-/keynote/releases/tag/v1.0.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217142",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217142",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rf-/keynote/commit/05be4356b0a6ca7de48da926a9b997beb5ffeb4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rf-/keynote/releases/tag/v1.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20160",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2022-12-31T20:15:08.693",
      "lastModified" : "2024-11-21T03:22:46.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. The identifier of the patch is db94f7391ad0a16dcfcba8b9be1af385b25c42db. It is recommended to upgrade the affected component. The identifier VDB-217149 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en flitto express-param hasta 0.x. Ha sido clasificada como crítica. Esto afecta a una parte desconocida del archivo lib/fetchParams.js. La manipulación conduce a un manejo inadecuado de parámetros adicionales. Es posible iniciar el ataque de forma remota. La actualización a la versión 1.0.0 puede solucionar este problema. El nombre del parche es db94f7391ad0a16dcfcba8b9be1af385b25c42db. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-217149."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-235"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flitto:express-param:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "01624055-DEA3-49DB-9CD2-C31E5C8BC146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flitto/express-param/commit/db94f7391ad0a16dcfcba8b9be1af385b25c42db",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flitto/express-param/pull/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flitto/express-param/releases/tag/1.0.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217149",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217149",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flitto/express-param/commit/db94f7391ad0a16dcfcba8b9be1af385b25c42db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flitto/express-param/pull/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flitto/express-param/releases/tag/1.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20161",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-02T16:15:10.530",
      "lastModified" : "2024-11-21T03:22:46.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217188."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en rofl0r MacGeiger y se ha clasificado como problemática. La función dump_wlan_at del archivo macgeiger.c del componente ESSID Handler es afectada por la vulnerabilidad. La manipulación conduce a la inyección. Se requiere acceso a la red local para que este ataque tenga éxito. La complejidad de un ataque es bastante alta. Se dice que la explotabilidad es difícil. El nombre del parche es 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. Se recomienda aplicar un parche para solucionar este problema. El identificador de esta vulnerabilidad es VDB-217188."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.2,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macgeiger_project:macgeiger:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-12-02",
            "matchCriteriaId" : "96142933-882B-4C84-B2C9-B0E74DCE99F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20162",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-05T12:15:09.167",
      "lastModified" : "2025-11-03T22:15:43.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named caae2988ba2a37765d055c4eee63d383320ee662. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217451."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en vercel ms hasta 1.x. Este problema afecta la función de análisis del archivo index.js. La manipulación del argumento str conduce a una complejidad de expresión regular ineficiente. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. La actualización a la versión 2.0.0 puede solucionar este problema. El parche se llama caae2988ba2a37765d055c4eee63d383320ee662. Se recomienda actualizar el componente afectado. El identificador asociado de esta vulnerabilidad es VDB-217451."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vercel:ms:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "271D2469-1D1F-4F1A-A6EC-1FF9673B3948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vercel/ms/commit/caae2988ba2a37765d055c4eee63d383320ee662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vercel/ms/pull/89",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vercel/ms/releases/tag/2.0.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217451",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217451",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vercel/ms/commit/caae2988ba2a37765d055c4eee63d383320ee662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vercel/ms/pull/89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vercel/ms/releases/tag/2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241108-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vuldb.com/?ctiid.217451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20163",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-05T20:15:18.333",
      "lastModified" : "2024-11-21T03:22:46.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217516."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Red Snapper NView y ha sido clasificada como crítica. Esta vulnerabilidad afecta a la función mutate del archivo src/Session.php. La manipulación de la sesión de argumentos conduce a la inyección de SQL. El nombre del parche es cbd255f55d476b29e5680f66f48c73ddb3d416a8. Se recomienda aplicar un parche para solucionar este problema. El identificador de esta vulnerabilidad es VDB-217516."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nview_project:nview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-04-28",
            "matchCriteriaId" : "04818C8D-7466-4B6C-A859-FC29B6275A66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RedSnapper/NView/commit/cbd255f55d476b29e5680f66f48c73ddb3d416a8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217516",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217516",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RedSnapper/NView/commit/cbd255f55d476b29e5680f66f48c73ddb3d416a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20164",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-07T20:15:09.407",
      "lastModified" : "2024-11-21T03:22:47.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin of the file code/extensions/SecurityLoginExtension.php of the component Login. The manipulation of the argument URL leads to open redirect. It is possible to launch the attack remotely. Upgrading to version 6.0.3 is able to address this issue. The patch is identified as b065ebd82da53009d273aa7e989191f701485244. It is recommended to upgrade the affected component. VDB-217626 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en las versiones anteriores a la 6.0.2 de Symbiote Seed. Se ha clasificado como crítica. Se ve afectada por esta vulnerabilidad la función onBeforeSecurityLogin del archivo code/extensions/SecurityLoginExtension.php del componente Login. La manipulación del argumento URL conduce a una redirección abierta. Es posible lanzar el ataque de forma remota. La actualización a la versión 6.0.3 puede solucionar este problema. El parche se identifica como b065ebd82da53009d273aa7e989191f701485244. Se recomienda actualizar el componente afectado. VDB-217626 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:seed:*:*:*:*:*:silverstripe:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "BF29C280-2F4C-4D85-B532-CBBD8EBDEE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/symbiote/silverstripe-seed/commit/b065ebd82da53009d273aa7e989191f701485244",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/symbiote/silverstripe-seed/releases/tag/6.0.3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217626",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217626",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/symbiote/silverstripe-seed/commit/b065ebd82da53009d273aa7e989191f701485244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/symbiote/silverstripe-seed/releases/tag/6.0.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20165",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-09T10:15:10.447",
      "lastModified" : "2024-11-21T03:22:47.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en debug-js debug hasta 3.0.x y ha sido clasificada como problemática. Esto afecta la función useColors del archivo src/node.js. La manipulación del argumento str conduce a una complejidad de expresión regular ineficiente. La actualización a la versión 3.1.0 puede solucionar este problema. El identificador del parche es c38a0166c266a679c8de012d4eaccec3f944e685. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-217665."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.6.9",
            "matchCriteriaId" : "AF3F4D01-6876-4D2B-B379-3A5222828D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "99ADECFD-F975-432D-A043-217796B14EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/debug-js/debug/pull/504",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/debug-js/debug/releases/tag/3.1.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/debug-js/debug/pull/504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/debug-js/debug/releases/tag/3.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T06:15:09.610",
      "lastModified" : "2025-04-09T18:15:42.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise."
      }, {
        "lang" : "es",
        "value" : "Ecto 2.2.0 carece de cierto mecanismo de protección asociado con la interacción entre is_nil y rise."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecto_project:ecto:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4558BE90-7F21-4524-A1DB-3D1DF8F1FFA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-2xxx-fhc8-9qvq",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elixir-ecto/ecto/commit/db55b0cba6525c24ebddc88ef9ae0c1c00620250",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elixir-ecto/ecto/pull/2125",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/elixir-ecto/0m4NPfg_MMU",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/advisories/GHSA-2xxx-fhc8-9qvq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elixir-ecto/ecto/commit/db55b0cba6525c24ebddc88ef9ae0c1c00620250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elixir-ecto/ecto/pull/2125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21topic/elixir-ecto/0m4NPfg_MMU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20168",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-11T15:15:09.000",
      "lastModified" : "2024-11-21T03:22:47.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in jfm-so piWallet. It has been rated as critical. Affected by this issue is some unknown functionality of the file api.php. The manipulation of the argument key leads to sql injection. The patch is identified as b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb. It is recommended to apply a patch to fix this issue. VDB-218006 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en jfm-so piWallet. Ha sido calificada como crítica. Una función desconocida del archivo api.php es afectada por esta vulnerabilidad. La manipulación de la clave del argumento conduce a la inyección SQL. El parche se identifica como b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb. Se recomienda aplicar un parche para solucionar este problema. VDB-218006 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwallet_project:piwallet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-03-26",
            "matchCriteriaId" : "B2640407-7C2D-4ECE-9D91-F1731C81761F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jfm-so/piWallet/commit/b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jfm-so/piWallet/pull/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218006",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218006",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jfm-so/piWallet/commit/b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jfm-so/piWallet/pull/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16256",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:09.587",
      "lastModified" : "2024-11-21T03:16:07.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_sx, at 0x9d014ebc, the value for the `cmd2` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_sx, en 0x9d014ebc, el valor de la clave `cmd2` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16257",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:09.670",
      "lastModified" : "2024-11-21T03:16:07.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_sx, at 0x9d014f28, the value for the `cmd3` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_sx, en 0x9d014f28, el valor de la clave `cmd3` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16258",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:09.750",
      "lastModified" : "2024-11-21T03:16:07.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_sx, at 0x9d014f7c, the value for the `cmd4` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_sx, en 0x9d014f7c, el valor de la clave `cmd4` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16259",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:09.820",
      "lastModified" : "2024-11-21T03:16:07.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_auth, at 0x9d015430, the value for the `usr` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_auth, en 0x9d015430, el valor de la clave `usr` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16260",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:09.913",
      "lastModified" : "2024-11-21T03:16:07.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_auth, at 0x9d015478, the value for the `pwd` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_auth, en 0x9d015478, el valor de la clave `pwd` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16261",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:09.990",
      "lastModified" : "2025-04-09T14:15:20.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd g_b, at 0x9d015714, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd g_b, en 0x9d015714, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16262",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.057",
      "lastModified" : "2024-11-21T03:16:08.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd g_b, at 0x9d015864, the value for the `id` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd g_b, en 0x9d015864, el valor de la clave `id` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16263",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.127",
      "lastModified" : "2024-11-21T03:16:08.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd g_b, at 0x9d015a8c, the value for the `val` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd g_b, en 0x9d015a8c, el valor de la clave `val` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16264",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.197",
      "lastModified" : "2024-11-21T03:16:08.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd l_b, at 0x9d015cfc, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd l_b, en 0x9d015cfc, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16265",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.263",
      "lastModified" : "2024-11-21T03:16:08.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd l_bt, at 0x9d016104, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd l_bt, en 0x9d016104, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16266",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.330",
      "lastModified" : "2024-11-21T03:16:08.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_b, at 0x9d016530, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_b, en 0x9d016530, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16267",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.400",
      "lastModified" : "2024-11-21T03:16:08.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_b, at 0x9d016578, the value for the `val` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_b, en 0x9d016578, el valor de la clave `val` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16268",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.467",
      "lastModified" : "2024-11-21T03:16:08.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_b, at 0x9d0165c0, the value for the `id` key is copied using `strcpy` to the buffer at `$sp+0x270`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_b, en 0x9d0165c0, el valor de la clave `id` se copia usando `strcpy` al búfer en `$sp+0x270`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16269",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.540",
      "lastModified" : "2024-11-21T03:16:08.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_b, at 0x9d01672c, the value for the `s_speaker` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_b, en 0x9d01672c, el valor de la clave `s_speaker` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16270",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.623",
      "lastModified" : "2024-11-21T03:16:08.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_b, at 0x9d01679c, the value for the `s_sonos_cmd` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_b, en 0x9d01679c, el valor de la clave `s_sonos_cmd` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16271",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.700",
      "lastModified" : "2025-04-09T14:15:21.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd e_l, at 0x9d016c94, the value for the `as_c` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd e_l, en 0x9d016c94, el valor de la clave `as_c` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16272",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.773",
      "lastModified" : "2025-04-09T14:15:21.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd e_l, at 0x9d016cf0, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd e_l, en 0x9d016cf0, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16273",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.837",
      "lastModified" : "2025-04-09T14:15:21.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd e_ml, at 0x9d016fa8, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd e_ml, en 0x9d016fa8, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16274",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.910",
      "lastModified" : "2025-04-09T14:15:21.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd e_u, at 0x9d017364, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd e_u, en 0x9d017364, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16275",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:10.980",
      "lastModified" : "2025-04-09T14:15:21.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_grp, at 0x9d01758c, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_grp, en 0x9d01758c, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16276",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.050",
      "lastModified" : "2025-04-09T14:15:21.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_grp, at 0x9d0175f4, the value for the `gbt` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_grp, en 0x9d0175f4, el valor de la clave `gbt` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16277",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.113",
      "lastModified" : "2024-11-21T03:16:09.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_grp, at 0x9d017658, the value for the `gcmd` key is copied using `strcpy` to the buffer at `$sp+0x270`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_grp, en 0x9d017658, el valor de la clave `gcmd` se copia usando `strcpy` al búfer en `$sp+0x270`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16278",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.180",
      "lastModified" : "2025-04-09T14:15:21.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_net, at 0x9d01815c, the value for the `ip` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_net, en 0x9d01815c, el valor de la clave `ip` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16279",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.257",
      "lastModified" : "2024-11-21T03:16:10.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_net, at 0x9d0181a4, the value for the `port` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_net, en 0x9d0181a4, el valor de la clave `port` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16280",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.323",
      "lastModified" : "2024-11-21T03:16:10.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_net, at 0x9d0181ec, the value for the `gate` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_net, en 0x9d0181ec, el valor de la clave `gate` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16281",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.387",
      "lastModified" : "2024-11-21T03:16:10.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_net, at 0x9d018234, the value for the `sub` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_net, en 0x9d018234, el valor de la clave `sub` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento del búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16282",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.453",
      "lastModified" : "2024-11-21T03:16:10.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_net, at 0x9d01827c, the value for the `dhcp` key is copied using `strcpy` to the buffer at `$sp+0x270`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_net, en 0x9d01827c, el valor de la clave `dhcp` se copia usando `strcpy` al búfer en `$sp+0x270`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16283",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.517",
      "lastModified" : "2024-11-21T03:16:10.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_name, at 0x9d0188a8, the value for the `name` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_name, en 0x9d0188a8, el valor de la clave `name` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16284",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.580",
      "lastModified" : "2024-11-21T03:16:10.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_name, at 0x9d018958, the value for the `city` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_name, en 0x9d018958, el valor de la clave `city` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16285",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.647",
      "lastModified" : "2024-11-21T03:16:10.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_time, at 0x9d018e58, the value for the `offset` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_time, en 0x9d018e58, el valor de la clave `offset` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16286",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.713",
      "lastModified" : "2024-11-21T03:16:10.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_time, at 0x9d018ea0, the value for the `dststart` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_time, en 0x9d018ea0, el valor de la clave `dststart` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16287",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.780",
      "lastModified" : "2024-11-21T03:16:11.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_time, at 0x9d018f00, the value for the `dstend` key is copied using `strcpy` to the buffer at `$sp+0x270`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_time, en 0x9d018f00, el valor de la clave `dstend` se copia usando `strcpy` al búfer en `$sp+0x270`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16288",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.840",
      "lastModified" : "2024-11-21T03:16:11.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_time, at 0x9d018f60, the value for the `dst` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_time, en 0x9d018f60, el valor de la clave `dst` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16289",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.907",
      "lastModified" : "2025-04-09T14:15:22.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_utc, at 0x9d0193ac, the value for the `offset` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_utc, en 0x9d0193ac, el valor de la clave `offset` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16290",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:11.973",
      "lastModified" : "2025-04-09T14:15:22.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sun, at 0x9d01980c, the value for the `sunrise` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sun, en 0x9d01980c, el valor de la clave `sunrise` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16291",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.043",
      "lastModified" : "2024-11-21T03:16:11.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sun, at 0x9d019854, the value for the `sunset` key is copied using `strcpy` to the buffer at `$sp+0x334`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sun, en 0x9d019854, el valor de la clave `sunset` se copia usando `strcpy` al búfer en `$sp+0x334`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16292",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.110",
      "lastModified" : "2024-11-21T03:16:11.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd g_schd, at 0x9d019c50, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd g_schd, en 0x9d019c50, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16293",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.177",
      "lastModified" : "2024-11-21T03:16:11.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_schd, at 0x9d01a010, the value for the `grp` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_schd, en 0x9d01a010, el valor de la clave `grp` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16294",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.240",
      "lastModified" : "2024-11-21T03:16:11.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_schd, at 0x9d01a144, the value for the `on` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_schd, en 0x9d01a144, el valor de la tecla `on` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16295",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.307",
      "lastModified" : "2024-11-21T03:16:12.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_schd, at 0x9d01a18c, the value for the `off` key is copied using `strcpy` to the buffer at `$sp+0x270`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_schd, en 0x9d01a18c, el valor de la tecla `off` se copia usando `strcpy` al búfer en `$sp+0x270`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16296",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.370",
      "lastModified" : "2024-11-21T03:16:12.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_schd, at 0x9d01a1d4, the value for the `days` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_schd, en 0x9d01a1d4, el valor de la clave `días` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16297",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.437",
      "lastModified" : "2024-11-21T03:16:12.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_schd, at 0x9d01a21c, the value for the `oncmd` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_schd, en 0x9d01a21c, el valor de la clave `oncmd` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16298",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.500",
      "lastModified" : "2024-11-21T03:16:12.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_schd, at 0x9d01a264, the value for the `offcmd` key is copied using `strcpy` to the buffer at `$sp+0x334`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_schd, en 0x9d01a264, el valor de la clave `offcmd` se copia usando `strcpy` al búfer en `$sp+0x334`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16299",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.567",
      "lastModified" : "2024-11-21T03:16:12.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_raw, at 0x9d01aad8, the value for the `d` key is copied using `strcpy` to the buffer at `$sp+0x334`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_raw, en 0x9d01aad8, el valor de la clave `d` se copia usando `strcpy` al búfer en `$sp+0x334`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16300",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.630",
      "lastModified" : "2024-11-21T03:16:12.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_ex, at 0x9d01ac74, the value for the `id` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_ex, en 0x9d01ac74, el valor de la clave `id` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:insteon_hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCA985-291A-4247-9187-441F5A04AAE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:insteon_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB75024-9744-412B-BCFB-74BB36F352F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16301",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.697",
      "lastModified" : "2024-11-21T03:16:12.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_ex, at 0x9d01ad14, the value for the `flg` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_ex, en 0x9d01ad14, el valor de la clave `flg` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16302",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.757",
      "lastModified" : "2024-11-21T03:16:12.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_ex, at 0x9d01ad78, the value for the `cmd1` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_ex, en 0x9d01ad78, el valor de la clave `cmd1` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16303",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.823",
      "lastModified" : "2024-11-21T03:16:12.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_ex, at 0x9d01addc, the value for the `cmd2` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_ex, en 0x9d01addc, el valor de la clave `cmd2` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16304",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.890",
      "lastModified" : "2024-11-21T03:16:13.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_ex, at 0x9d01ae40, the value for the `d` key is copied using `strcpy` to the buffer at `$sp+0x334`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_ex, en 0x9d01ae40, el valor de la clave `d` se copia usando `strcpy` al búfer en `$sp+0x334`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16305",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:12.960",
      "lastModified" : "2024-11-21T03:16:13.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_exw, at 0x9d01b20c, the value for the `id` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_exw, en 0x9d01b20c, el valor de la clave `id` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16306",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.023",
      "lastModified" : "2024-11-21T03:16:13.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_exw, at 0x9d01b2ac, the value for the `flg` key is copied using `strcpy` to the buffer at `$sp+0x280`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_exw, en 0x9d01b2ac, el valor de la clave `flg` se copia usando `strcpy` al búfer en `$sp+0x280`. Este búfer tiene 16 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16307",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.087",
      "lastModified" : "2025-04-09T14:15:22.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_exw, at 0x9d01b310, the value for the `cmd1` key is copied using `strcpy` to the buffer at `$sp+0x2d0`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_exw, en 0x9d01b310, el valor de la clave `cmd1` se copia usando `strcpy` al búfer en `$sp+0x2d0`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16308",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.150",
      "lastModified" : "2024-11-21T03:16:13.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_exw, at 0x9d01b374, the value for the `cmd2` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_exw, en 0x9d01b374, el valor de la clave `cmd2` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16309",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.213",
      "lastModified" : "2024-11-21T03:16:13.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_exw, at 0x9d01b3d8, the value for the `d` key is copied using `strcpy` to the buffer at `$sp+0x334`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd sn_exw, en 0x9d01b3d8, el valor de la clave `d` se copia usando `strcpy` al búfer en `$sp+0x334`. Este búfer tiene un tamaño de 100 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16310",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.277",
      "lastModified" : "2024-11-21T03:16:13.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_ch, at 0x9d01b7b0, the value for the `ch` key is copied using `strcpy` to the buffer at `$sp+0x334`.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_ch, en 0x9d01b7b0, el valor de la clave `ch` se copia usando `strcpy` al búfer en `$sp+0x334`. Este búfer tiene 100 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16311",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.343",
      "lastModified" : "2024-11-21T03:16:13.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd UpdateCheck, at 0x9d01bb64, the value for the `type` key is copied using `strcpy` to the buffer at `$sp+0x270`.This buffer is 16 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd UpdateCheck, en 0x9d01bb64, el valor de la clave `type` se copia usando `strcpy` al búfer en `$sp+0x270`. Este búfer tiene un tamaño de 16 bytes; enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16312",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.407",
      "lastModified" : "2024-11-21T03:16:13.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01c028, the value for the `sn_discover` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01c028, el valor de la clave `sn_discover` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16313",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.473",
      "lastModified" : "2024-11-21T03:16:14.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01c084, the value for the `s_ddelay` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01c084, el valor de la clave `s_ddelay` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16314",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.537",
      "lastModified" : "2024-11-21T03:16:14.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01c1cc, the value for the `s_speaker` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01c1cc, el valor de la clave `s_speaker` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16315",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.600",
      "lastModified" : "2024-11-21T03:16:14.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01c3a0, the value for the `s_state` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01c3a0, el valor de la clave `s_state` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16316",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.660",
      "lastModified" : "2024-11-21T03:16:14.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01c898, the value for the `g_meta_page` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01c898, el valor de la clave `g_meta_page` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16317",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.727",
      "lastModified" : "2024-11-21T03:16:14.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01d068, the value for the `g_group` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01d068, el valor de la clave `g_group` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16318",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.790",
      "lastModified" : "2024-11-21T03:16:14.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01d16c, the value for the `g_group_off` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01d16c, el valor de la clave `g_group_off` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16319",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.853",
      "lastModified" : "2024-11-21T03:16:14.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01d7a8, the value for the `g_sonos_index` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01d7a8, el valor de la clave `g_sonos_index` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16320",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.917",
      "lastModified" : "2024-11-21T03:16:15.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01ddd4, the value for the `s_sonos_cmd` key is copied using `strcpy` to the buffer at `$sp+0x290`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01ddd4, el valor de la clave `s_sonos_cmd` se copia usando `strcpy` al búfer en `$sp+0x290`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16321",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:13.980",
      "lastModified" : "2024-11-21T03:16:15.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01e050, the value for the `s_sonos_index` key is copied using `strcpy` to the buffer at `$sp+0x1b4`.This buffer is 8 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01e050, el valor de la clave `s_sonos_index` se copia usando `strcpy` al búfer en `$sp+0x1b4`. Este búfer tiene 8 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16322",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.043",
      "lastModified" : "2024-11-21T03:16:15.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01e228, the value for the `c_group` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01e228, el valor de la clave `c_group` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16323",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.107",
      "lastModified" : "2024-11-21T03:16:15.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01e2f4, the value for the `s_group` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01e2f4, el valor de la clave `s_group` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16324",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.170",
      "lastModified" : "2024-11-21T03:16:15.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01e368, the value for the `s_group_vol` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01e368, el valor de la clave `s_group_vol` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16325",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.233",
      "lastModified" : "2024-11-21T03:16:15.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01e3a8, the value for the `s_group_cmd` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01e3a8, el valor de la clave `s_group_cmd` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16326",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.293",
      "lastModified" : "2024-11-21T03:16:15.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_sonos, at 0x9d01e5f4, the value for the `sn_sonos_cmd` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_sonos, en 0x9d01e5f4, el valor de la clave `sn_sonos_cmd` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16327",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.357",
      "lastModified" : "2024-11-21T03:16:15.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_init_event, at 0x9d01ea88, the value for the `s_event_offset` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_init_event, en 0x9d01ea88, el valor de la clave `s_event_offset` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16328",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.420",
      "lastModified" : "2024-11-21T03:16:16.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_alarm, at 0x9d01eb08, the value for the `s_event_offset` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_alarm, en 0x9d01eb08, el valor de la clave `s_event_offset` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16329",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.487",
      "lastModified" : "2024-11-21T03:16:16.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_alarm, at 0x9d01eb44, the value for the `s_event_delay` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_alarm, en 0x9d01eb44, el valor de la clave `s_event_delay` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16330",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.550",
      "lastModified" : "2024-11-21T03:16:16.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_alarm, at 0x9d01eb8c, the value for the `s_event_group` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_alarm, en 0x9d01eb8c, el valor de la clave `s_event_group` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16331",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.613",
      "lastModified" : "2024-11-21T03:16:16.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_alarm, at 0x9d01ebd4, the value for the `s_tid` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_alarm, en 0x9d01ebd4, el valor de la clave `s_tid` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F075DC32-C386-4B3D-88AA-A56D9D4B4E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16332",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.677",
      "lastModified" : "2024-11-21T03:16:16.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_alarm, at 0x9d01ec34, the value for the `s_aid` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_alarm, en 0x9d01ec34, el valor de la clave `s_aid` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16333",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.740",
      "lastModified" : "2024-11-21T03:16:16.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event, at 0x9d01ed7c, the value for the `s_offset` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event, en 0x9d01ed7c, el valor de la clave `s_offset` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16334",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.803",
      "lastModified" : "2024-11-21T03:16:16.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event, at 0x9d01edb8, the value for the `s_raw` key is copied using `strcpy` to the buffer at `$sp+0x10`.This buffer is 244 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event, en 0x9d01edb8, el valor de la clave `s_raw` se copia usando `strcpy` al búfer en `$sp+0x10`. Este búfer tiene un tamaño de 244 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16335",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.863",
      "lastModified" : "2024-11-21T03:16:16.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_var, at 0x9d01ee70, the value for the `s_offset` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_var, en 0x9d01ee70, el valor de la clave `s_offset` se copia usando `strcpy` al búfer en `$sp+0x2b0`. Este búfer tiene 32 bytes de tamaño, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-16336",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-11T22:15:14.950",
      "lastModified" : "2024-11-21T03:16:17.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the \"cc\" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_var, at 0x9d01eeb0, the value for the `s_value` key is copied using `strcpy` to the buffer at `$sp+0x10`.This buffer is 244 bytes large, sending anything longer will cause a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal \"cc\" de Insteon Hub que ejecuta la versión de firmware 1012. Los comandos especialmente manipulados enviados a través del servicio PubNub pueden provocar un desbordamiento de búfer en la región stack de la memoria que sobrescriba datos arbitrarios. Un atacante debería enviar una solicitud HTTP autenticada para activar esta vulnerabilidad. En cmd s_event_var, en 0x9d01eeb0, el valor de la clave `s_value` se copia usando `strcpy` al búfer en `$sp+0x10`. Este búfer tiene un tamaño de 244 bytes, enviar algo más largo provocará un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-14454",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-01-12T00:15:08.627",
      "lastModified" : "2024-11-21T03:12:49.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple exploitable buffer overflow vulnerabilities exists in the PubNub message handler for the \"control\" channel of Insteon Hub running firmware version 1012. Specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. An attacker should impersonate PubNub and answer an HTTPS GET request to trigger this vulnerability. The `strcpy` at [18] overflows the buffer `insteon_pubnub.channel_al`, which has a size of 16 bytes."
      }, {
        "lang" : "es",
        "value" : "Existen múltiples vulnerabilidades de desbordamiento de búfer explotables en el controlador de mensajes PubNub para el canal de \"control\" de Insteon Hub que ejecuta la versión de firmware 1012. Las respuestas especialmente manipuladas recibidas del servicio PubNub pueden causar desbordamientos de búfer en una sección global que sobrescribe datos arbitrarios. Un atacante debería hacerse pasar por PubNub y responder a una solicitud HTTPS GET para activar esta vulnerabilidad. El `strcpy` en [18] desborda el buffer `insteon_pubnub.channel_al`, que tiene un tamaño de 16 bytes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F98B37-72C0-48A5-A4E2-12327F48327E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951165BE-0AC1-4690-8B36-E402CA0197FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2017-0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-5242",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-01-12T22:15:09.263",
      "lastModified" : "2025-04-08T15:15:45.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos virtuales Nexpose e InsightVM descargados entre el 5 de abril de 2017 y el 3 de mayo de 2017 contienen claves de host SSH idénticas. Normalmente, se debe generar una clave de host SSH única la primera vez que se inicia un dispositivo virtual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightvm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017-04-05",
            "versionEndIncluding" : "2017-05-03",
            "matchCriteriaId" : "1DEA2123-D427-48C4-90B1-47B996A255C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2017/05/17/rapid7-nexpose-virtual-appliance-duplicate-ssh-host-key-cve-2017-5242/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2017/05/17/rapid7-nexpose-virtual-appliance-duplicate-ssh-host-key-cve-2017-5242/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20169",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-13T21:15:15.207",
      "lastModified" : "2024-11-21T03:22:47.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in GGGGGGGG ToN-MasterServer. Affected by this issue is some unknown functionality of the file public_html/irc_updater/svr_request_pub.php. The manipulation leads to sql injection. The patch is identified as 3a4c7e6d51bf95760820e3245e06c6e321a7168a. It is recommended to apply a patch to fix this issue. VDB-218306 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en GGGGGGGG ToN-MasterServer y se ha clasificado como crítica. Una función desconocida del archivo public_html/irc_updater/svr_request_pub.php es afectada por esta vulnerabilidad. La manipulación conduce a la inyección de SQL. El parche se identifica como 3a4c7e6d51bf95760820e3245e06c6e321a7168a. Se recomienda aplicar un parche para solucionar este problema. VDB-218306 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ton-masterserver_project:ton-masterserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-12-19",
            "matchCriteriaId" : "37D3ED1D-B72E-459F-AAEB-CC3B3057171E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GGGGGGGG/ToN-MasterServer/commit/3a4c7e6d51bf95760820e3245e06c6e321a7168a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GGGGGGGG/ToN-MasterServer/commit/3a4c7e6d51bf95760820e3245e06c6e321a7168a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20167",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-14T20:15:09.390",
      "lastModified" : "2024-11-21T03:22:47.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipulation of the argument headline leads to cross site scripting. It is possible to initiate the attack remotely. The identifier of the patch is fc0e732e58630cba318d6bf49d1388a7aa9d390e. It is recommended to apply a patch to fix this issue. The identifier VDB-217785 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Minichan y clasificada como problemática. Una parte desconocida del archivo reports.php afecta a esta vulnerabilidad. La manipulación del argumento title conduce a cross site scripting. Es posible iniciar el ataque de forma remota. El identificador del parche es fc0e732e58630cba318d6bf49d1388a7aa9d390e. Se recomienda aplicar un parche para solucionar este problema. A esta vulnerabilidad se le asignó el identificador VDB-217785."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minichan:minichan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-08-02",
            "matchCriteriaId" : "AB9E45B6-12CA-41C7-A317-770197DB9E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Minichan/Minichan/commit/fc0e732e58630cba318d6bf49d1388a7aa9d390e",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://github.com/Minichan/Minichan/pull/54",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217785",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217785",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Minichan/Minichan/commit/fc0e732e58630cba318d6bf49d1388a7aa9d390e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://github.com/Minichan/Minichan/pull/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20170",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-17T14:15:10.613",
      "lastModified" : "2024-11-21T03:22:47.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/index.php. The manipulation of the argument s leads to sql injection. The patch is identified as 6891bb2dec57dca6daabc15a6d2808c8896620e5. It is recommended to apply a patch to fix this issue. VDB-218418 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en ollpu parontalli. Ha sido clasificada como crítica. Una función desconocida del archivo httpdocs/index.php es afectada por esta vulnerabilidad. La manipulación del argumento s conduce a la inyección SQL. El parche se identifica como 6891bb2dec57dca6daabc15a6d2808c8896620e5. Se recomienda aplicar un parche para solucionar este problema. VDB-218418 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parontalli_project:parontalli:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-01-21",
            "matchCriteriaId" : "42B6C9EB-B246-4D92-AB05-7D0E8C46B699"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ollpu/parontalli/commit/6891bb2dec57dca6daabc15a6d2808c8896620e5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218418",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.218418",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ollpu/parontalli/commit/6891bb2dec57dca6daabc15a6d2808c8896620e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.218418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20171",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-17T23:15:15.417",
      "lastModified" : "2024-11-21T03:22:48.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils.js. The manipulation leads to sql injection. The identifier of the patch is 954425f61634b556fe644837a592a5b8fcfca068. It is recommended to apply a patch to fix this issue. The identifier VDB-218457 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en la apersistencia de PrivateSky y se ha clasificado como crítica. Esto afecta a una parte desconocida del archivo db/sql/mysqlUtils.js. La manipulación conduce a la inyección SQL. El identificador del parche es 954425f61634b556fe644837a592a5b8fcfca068. Se recomienda aplicar un parche para solucionar este problema. A esta vulnerabilidad se le asignó el identificador VDB-218457."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apersistence_project:apersistence:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-04-10",
            "matchCriteriaId" : "5078A4F9-4985-4FB0-A1E2-6B9E496F12A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrivateSky/apersistence/commit/954425f61634b556fe644837a592a5b8fcfca068",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.218457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/PrivateSky/apersistence/commit/954425f61634b556fe644837a592a5b8fcfca068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.218457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20172",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-18T15:15:11.083",
      "lastModified" : "2024-11-21T03:22:48.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ridhoq soundslike. It has been classified as critical. Affected is the function get_song_relations of the file app/api/songs.py. The manipulation leads to sql injection. The patch is identified as 90bb4fb667d9253d497b619b9adaac83bf0ce0f8. It is recommended to apply a patch to fix this issue. VDB-218490 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en ridhoq soundslike. Ha sido clasificada como crítica. La función get_song_relations del archivo app/api/songs.py es afectada por la vulnerabilidad. La manipulación conduce a la inyección de SQL. El parche se identifica como 90bb4fb667d9253d497b619b9adaac83bf0ce0f8. Se recomienda aplicar un parche para solucionar este problema. VDB-218490 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soundslike_project:soundslike:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-03-17",
            "matchCriteriaId" : "9F6EEF25-D362-4026-8E60-4D0E2CFBDB3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ridhoq/soundslike/commit/90bb4fb667d9253d497b619b9adaac83bf0ce0f8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ridhoq/soundslike/pull/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ridhoq/soundslike/commit/90bb4fb667d9253d497b619b9adaac83bf0ce0f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ridhoq/soundslike/pull/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20173",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-18T16:15:10.863",
      "lastModified" : "2024-11-21T03:22:48.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in AlexRed contentmap. It has been rated as critical. Affected by this issue is the function Load of the file contentmap.php. The manipulation of the argument contentid leads to sql injection. The name of the patch is dd265d23ff4abac97422835002c6a47f45ae2a66. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218492."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en AlexRed contentmap de GitHub. Ha sido calificada como crítica. La función Load del archivo contentmap.php es afectada por esta vulnerabilidad. La manipulación del argumento contentid conduce a la inyección de SQL. El nombre del parche es dd265d23ff4abac97422835002c6a47f45ae2a66. Se recomienda aplicar un parche para solucionar este problema. El identificador de esta vulnerabilidad es VDB-218492."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentmap_project:contentmap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-03-08",
            "matchCriteriaId" : "7A68B8DB-AC8A-49F1-8199-17890B3D7C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AlexRed/contentmap/commit/dd265d23ff4abac97422835002c6a47f45ae2a66",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AlexRed/contentmap/commit/dd265d23ff4abac97422835002c6a47f45ae2a66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20174",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-19T08:15:12.620",
      "lastModified" : "2024-11-21T03:22:48.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as 55bedea78ae9af916a9a41497bd9996417851502. It is recommended to apply a patch to fix this issue. VDB-218894 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en bastianallgeier Kirby Webmentions de Github y fue clasificada como problemática. Una función desconocida es afectada por este problema. La manipulación conduce a la inyección. El ataque puede lanzarse de forma remota. La complejidad de un ataque es bastante alta. Se sabe que la explotación es difícil. El parche se identifica como 55bedea78ae9af916a9a41497bd9996417851502. Se recomienda aplicar un parche para solucionar este problema. VDB-218894 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkirby:webmentions:*:*:*:*:*:kirby:*:*",
            "versionEndExcluding" : "2017-02-01",
            "matchCriteriaId" : "9CF10F8E-C934-46C1-B99B-20E10BC2901C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bastianallgeier/kirby-webmentions/commit/55bedea78ae9af916a9a41497bd9996417851502",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218894",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218894",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bastianallgeier/kirby-webmentions/commit/55bedea78ae9af916a9a41497bd9996417851502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20175",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-05T20:15:08.393",
      "lastModified" : "2024-11-21T03:22:48.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. This affects an unknown part of the file Piwik.hooks.php of the component Username Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.4.3 is able to address this issue. The patch is named 681324e4f518a8af4bd1f93867074c728eb9923d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220203."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:matomo:*:*:*:*:*:mediawiki:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "D9806448-C289-4E7C-B8EC-CFEC85063725"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DaSchTour/matomo-mediawiki-extension/commit/681324e4f518a8af4bd1f93867074c728eb9923d",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DaSchTour/matomo-mediawiki-extension/pull/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/DaSchTour/matomo-mediawiki-extension/releases/tag/v2.4.3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220203",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220203",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DaSchTour/matomo-mediawiki-extension/commit/681324e4f518a8af4bd1f93867074c728eb9923d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DaSchTour/matomo-mediawiki-extension/pull/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/DaSchTour/matomo-mediawiki-extension/releases/tag/v2.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20176",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-06T04:15:08.043",
      "lastModified" : "2024-11-21T03:22:48.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is fb6fae2f8a9b146471450b5b0281046a17d1ac8d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220204."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:share_on_diaspora_project:share_on_diaspora:0.7.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "481E13E0-A1E7-4E08-933F-E91DCFCDC7D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8d",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220204",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220204",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20177",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-06T20:15:10.763",
      "lastModified" : "2024-11-21T03:22:48.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguard_users_info of the file wangguard-user-info.php of the component WGG User List Handler. The manipulation of the argument userIP leads to cross site scripting. The attack may be launched remotely. The patch is identified as 88414951e30773c8d2ec13b99642688284bf3189. It is recommended to apply a patch to fix this issue. VDB-220214 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wangguard_project:wangguard:1.8.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "136BF087-7C7D-4FA1-9061-45E60780BF42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/joseconti/WangGuard/commit/88414951e30773c8d2ec13b99642688284bf3189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/joseconti/WangGuard/pull/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/joseconti/WangGuard/commit/88414951e30773c8d2ec13b99642688284bf3189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/joseconti/WangGuard/pull/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20178",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T18:15:11.600",
      "lastModified" : "2024-11-21T03:22:49.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.8.1 is able to address this issue. The patch is identified as 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codiad:codiad:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34E0F4-64F8-4452-B546-39C98361B3F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/pull/974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/releases/tag/v.2.8.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/pull/974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Codiad/Codiad/releases/tag/v.2.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20179",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T21:15:10.713",
      "lastModified" : "2024-11-21T03:22:49.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tour_controller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able to address this issue. The patch is named 6ef04f8b5972d5f16f8b86f8b53f62fac68d5498. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221507."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:instedd:pollit:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453F8550-3FE2-443A-B031-7CA8ED1A27AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/instedd/pollit/commit/6ef04f8b5972d5f16f8b86f8b53f62fac68d5498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/instedd/pollit/releases/tag/2.3.2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221507",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221507",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/instedd/pollit/commit/6ef04f8b5972d5f16f8b86f8b53f62fac68d5498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/instedd/pollit/releases/tag/2.3.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0981",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.560",
      "lastModified" : "2023-11-07T02:37:48.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0982",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.623",
      "lastModified" : "2023-11-07T02:37:48.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0983",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.680",
      "lastModified" : "2023-11-07T02:37:48.933",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0984",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.737",
      "lastModified" : "2023-11-07T02:37:49.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0985",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.793",
      "lastModified" : "2023-11-07T02:37:49.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0986",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.850",
      "lastModified" : "2023-11-07T02:37:49.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0987",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.910",
      "lastModified" : "2023-11-07T02:37:50.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0988",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:12.963",
      "lastModified" : "2023-11-07T02:37:50.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0989",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.017",
      "lastModified" : "2023-11-07T02:37:50.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0990",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.073",
      "lastModified" : "2023-11-07T02:37:50.730",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0991",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.123",
      "lastModified" : "2023-11-07T02:37:50.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0992",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.173",
      "lastModified" : "2023-11-07T02:37:51.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0993",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.223",
      "lastModified" : "2023-11-07T02:37:51.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0994",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.273",
      "lastModified" : "2023-11-07T02:37:51.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0995",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.323",
      "lastModified" : "2023-11-07T02:37:51.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0996",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.377",
      "lastModified" : "2023-11-07T02:37:52.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0997",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.430",
      "lastModified" : "2023-11-07T02:37:52.403",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0998",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.480",
      "lastModified" : "2023-11-07T02:37:52.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-0999",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.537",
      "lastModified" : "2023-11-07T02:37:52.863",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1000",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.593",
      "lastModified" : "2023-11-07T02:41:59.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1001",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.647",
      "lastModified" : "2023-11-07T02:41:59.837",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1002",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.697",
      "lastModified" : "2023-11-07T02:42:00.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1003",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.753",
      "lastModified" : "2023-11-07T02:42:00.323",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1004",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.810",
      "lastModified" : "2023-11-07T02:42:00.573",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1005",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.863",
      "lastModified" : "2023-11-07T02:42:00.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1006",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.917",
      "lastModified" : "2023-11-07T02:42:01.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1007",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:13.970",
      "lastModified" : "2023-11-07T02:42:01.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1008",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.023",
      "lastModified" : "2023-11-07T02:42:01.523",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1009",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.080",
      "lastModified" : "2023-11-07T02:42:01.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1010",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.133",
      "lastModified" : "2023-11-07T02:42:01.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1011",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.183",
      "lastModified" : "2023-11-07T02:42:02.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1012",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.233",
      "lastModified" : "2023-11-07T02:42:02.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1013",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.287",
      "lastModified" : "2023-11-07T02:42:02.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1014",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.337",
      "lastModified" : "2023-11-07T02:42:02.870",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1015",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.387",
      "lastModified" : "2023-11-07T02:42:03.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1016",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.440",
      "lastModified" : "2023-11-07T02:42:03.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1017",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.493",
      "lastModified" : "2023-11-07T02:42:03.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1018",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.547",
      "lastModified" : "2023-11-07T02:42:03.763",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1019",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.597",
      "lastModified" : "2023-11-07T02:42:03.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1020",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.650",
      "lastModified" : "2023-11-07T02:42:04.240",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1021",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.703",
      "lastModified" : "2023-11-07T02:42:04.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1022",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.757",
      "lastModified" : "2023-11-07T02:42:05.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1023",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.813",
      "lastModified" : "2023-11-07T02:42:05.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1024",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.867",
      "lastModified" : "2023-11-07T02:42:05.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1025",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.917",
      "lastModified" : "2023-11-07T02:42:05.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1026",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:14.970",
      "lastModified" : "2023-11-07T02:42:06.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1027",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.020",
      "lastModified" : "2023-11-07T02:42:06.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1028",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.073",
      "lastModified" : "2023-11-07T02:42:06.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1029",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.123",
      "lastModified" : "2023-11-07T02:42:06.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1030",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.173",
      "lastModified" : "2023-11-07T02:42:07.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1031",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.223",
      "lastModified" : "2023-11-07T02:42:07.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1032",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.277",
      "lastModified" : "2023-11-07T02:42:07.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1033",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.330",
      "lastModified" : "2023-11-07T02:42:07.803",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1034",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.380",
      "lastModified" : "2023-11-07T02:42:08.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1035",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.433",
      "lastModified" : "2023-11-07T02:42:08.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1036",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.487",
      "lastModified" : "2023-11-07T02:42:08.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1037",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.540",
      "lastModified" : "2023-11-07T02:42:08.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1038",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.593",
      "lastModified" : "2023-11-07T02:42:08.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1039",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.647",
      "lastModified" : "2023-11-07T02:42:09.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1040",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.697",
      "lastModified" : "2023-11-07T02:42:09.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1041",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.753",
      "lastModified" : "2023-11-07T02:42:09.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1042",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.803",
      "lastModified" : "2023-11-07T02:42:10.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1043",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.857",
      "lastModified" : "2023-11-07T02:42:10.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1044",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.907",
      "lastModified" : "2023-11-07T02:42:10.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1045",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:15.957",
      "lastModified" : "2023-11-07T02:42:10.763",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1046",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.010",
      "lastModified" : "2023-11-07T02:42:10.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1047",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.063",
      "lastModified" : "2023-11-07T02:42:11.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1048",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.113",
      "lastModified" : "2023-11-07T02:42:11.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1049",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.167",
      "lastModified" : "2023-11-07T02:42:11.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1050",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.217",
      "lastModified" : "2023-11-07T02:42:11.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1051",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.270",
      "lastModified" : "2023-11-07T02:42:12.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1052",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.327",
      "lastModified" : "2023-11-07T02:42:12.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1053",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.380",
      "lastModified" : "2023-11-07T02:42:12.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1054",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.440",
      "lastModified" : "2023-11-07T02:42:12.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1055",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.497",
      "lastModified" : "2023-11-07T02:42:13.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1056",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.550",
      "lastModified" : "2023-11-07T02:42:13.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1057",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.607",
      "lastModified" : "2023-11-07T02:42:13.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1058",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.660",
      "lastModified" : "2023-11-07T02:42:13.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1059",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.717",
      "lastModified" : "2023-11-07T02:42:14.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1060",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.767",
      "lastModified" : "2023-11-07T02:42:14.297",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1061",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.820",
      "lastModified" : "2023-11-07T02:42:14.547",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1062",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.873",
      "lastModified" : "2023-11-07T02:42:14.833",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1063",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.927",
      "lastModified" : "2023-11-07T02:42:15.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1064",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:16.987",
      "lastModified" : "2023-11-07T02:42:15.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1065",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:17.047",
      "lastModified" : "2023-11-07T02:42:15.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1066",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:17.110",
      "lastModified" : "2023-11-07T02:42:15.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1067",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:17.163",
      "lastModified" : "2023-11-07T02:42:16.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1068",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:17.217",
      "lastModified" : "2023-11-07T02:42:16.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-1069",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2023-02-22T23:15:17.267",
      "lastModified" : "2023-11-07T02:42:16.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20180",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T11:15:09.813",
      "lastModified" : "2024-11-21T03:22:49.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Zerocoin libzerocoin. Affected is the function CoinSpend::CoinSpend of the file CoinSpend.cpp of the component Proof Handler. The manipulation leads to insufficient verification of data authenticity. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as ce103a09ec079d0a0ed95475992348bed6e860de. It is recommended to apply a patch to fix this issue. VDB-222318 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zerocoin:libzerocoin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-11-15",
            "matchCriteriaId" : "8F889383-9916-48A3-AFFE-A149BCA7BDF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zerocoin/libzerocoin/commit/ce103a09ec079d0a0ed95475992348bed6e860de",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Zerocoin/libzerocoin/pull/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Zerocoin/libzerocoin/commit/ce103a09ec079d0a0ed95475992348bed6e860de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Zerocoin/libzerocoin/pull/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20181",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-07T00:15:09.040",
      "lastModified" : "2024-11-21T03:22:49.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in hgzojer Vocable Trainer up to 1.3.0 on Android. This vulnerability affects unknown code of the file src/at/hgz/vocabletrainer/VocableTrainerProvider.java. The manipulation leads to path traversal. Attacking locally is a requirement. Upgrading to version 1.3.1 is able to address this issue. The name of the patch is accf6838078f8eb105cfc7865aba5c705fb68426. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222328."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vocable_trainer_project:vocable_trainer:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "DAF5A5E0-952A-4CAA-A6E7-BFB0ADB49796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hgzojer/vocabletrainer/commit/accf6838078f8eb105cfc7865aba5c705fb68426",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hgzojer/vocabletrainer/releases/tag/v1.3.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hgzojer/vocabletrainer/commit/accf6838078f8eb105cfc7865aba5c705fb68426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hgzojer/vocabletrainer/releases/tag/v1.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20182",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T02:15:58.250",
      "lastModified" : "2024-11-21T03:22:49.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file django_ajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The patch is named 329eb1dd1580ca1f9d4f95bc69939833226515c9. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-222611."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilevikings:django_ajax_utilities:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "A8AA02EA-9287-4486-A26C-FB20EA9ABFAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mvpoland/django-ajax-utilities/commit/329eb1dd1580ca1f9d4f95bc69939833226515c9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222611",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222611",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mvpoland/django-ajax-utilities/commit/329eb1dd1580ca1f9d4f95bc69939833226515c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-6894",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2023-03-29T21:15:07.697",
      "lastModified" : "2025-02-18T18:15:08.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexera:flexnet_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2",
            "matchCriteriaId" : "F96119EE-CA5E-4B16-9844-F2E8EEB811ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexera:flexnet_manager_suite_2015:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5008FE-35BC-495B-BFEC-30FF5EF3D1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexera:flexnet_manager_suite_2015:r2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5F70C306-6E8F-4385-A229-CA5370131593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexera:flexnet_manager_suite_2015:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DB32B277-C607-461B-BDF7-5F7D2CEA3C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexera:flexnet_manager_suite_2015:r2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "124DDE70-4D64-4F74-8826-764854AE6523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexera:flexnet_manager_suite_2015:r2:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D604B146-7F70-4AE5-9FF8-4C71E3AD44A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/A-vulnerability-exists-in-FlexNet-Manager-Suite-release-2015-R2/ta-p/1891",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/A-vulnerability-exists-in-FlexNet-Manager-Suite-release-2015-R2/ta-p/1891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-03T20:15:09.083",
      "lastModified" : "2025-01-30T18:15:26.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the \"add printer\" option."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberark:viewfinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.1.1.220",
            "matchCriteriaId" : "8650DB01-D5B4-4243-B537-6100D31BFB7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberark:viewfinity:5.5.10.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF90CE4-876B-4ACA-96AC-EF5B57931CEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lp.cyberark.com/rs/316-CZP-275/images/ds-Viewfinity-102315-web.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42319",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lp.cyberark.com/rs/316-CZP-275/images/ds-Viewfinity-102315-web.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20184",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2023-05-04T10:15:10.540",
      "lastModified" : "2025-01-31T18:15:27.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gavazzionline:powersoft:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1.1",
            "matchCriteriaId" : "BFBDE720-92B9-4AAE-A80B-9A178A492AA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/42705",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/42705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20183",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-05-05T01:15:08.550",
      "lastModified" : "2024-11-21T03:22:49.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in External Media without Import Plugin up to 1.0.0 on WordPress. It has been declared as problematic. This vulnerability affects the function print_media_new_panel of the file external-media-without-import.php. The manipulation of the argument url/error/width/height/mime-type leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.0.1 is able to address this issue. The patch is identified as 9d2ecd159a6e2e3f710b4f1c28e2714f66502746. It is recommended to upgrade the affected component. VDB-227950 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:external_media_without_import_project:external_media_without_import:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "FE88986E-4CA5-4553-BF78-DAE1CB770A50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zzxiang/external-media-without-import/commit/9d2ecd159a6e2e3f710b4f1c28e2714f66502746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zzxiang/external-media-without-import/releases/tag/v1.0.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227950",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227950",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zzxiang/external-media-without-import/commit/9d2ecd159a6e2e3f710b4f1c28e2714f66502746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zzxiang/external-media-without-import/releases/tag/v1.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20185",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-06-06T02:15:09.473",
      "lastModified" : "2024-11-21T03:22:50.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Fuzzy SWMP. It has been rated as problematic. This issue affects some unknown processing of the file swmp.php of the component GET Parameter Handler. The manipulation of the argument theme leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is 792bcab637cb8c3bd251d8fc8771512c5329a93e. It is recommended to apply a patch to fix this issue. The identifier VDB-230669 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:server_web_monitor_page_project:server_web_monitor_page:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017-05-26",
            "matchCriteriaId" : "03C28F04-33E0-46EC-B0D5-861EB0851B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fuzzymannerz/swmp/commit/792bcab637cb8c3bd251d8fc8771512c5329a93e",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fuzzymannerz/swmp/pull/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.230669",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.230669",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/fuzzymannerz/swmp/commit/792bcab637cb8c3bd251d8fc8771512c5329a93e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fuzzymannerz/swmp/pull/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.230669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.230669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20186",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-08-28T13:15:08.937",
      "lastModified" : "2024-11-21T03:22:50.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in nikooo777 ckSurf up to 1.19.2. It has been declared as problematic. This vulnerability affects the function SpecListMenuDead of the file csgo/addons/sourcemod/scripting/ckSurf/misc.sp of the component Spectator List Name Handler. The manipulation of the argument cleanName leads to denial of service. Upgrading to version 1.21.0 is able to address this issue. The name of the patch is fd6318d99083a06363091441a0614bd2f21068e6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-238156. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikooo777:cksurf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.21.0",
            "matchCriteriaId" : "1E8D49E6-A76F-4528-B517-3CFE36356B76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forums.alliedmods.net/showthread.php?t=297179",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nikooo777/ckSurf/commit/fd6318d99083a06363091441a0614bd2f21068e6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nikooo777/ckSurf/releases/tag/1.21.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.238156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.238156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://forums.alliedmods.net/showthread.php?t=297179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nikooo777/ckSurf/commit/fd6318d99083a06363091441a0614bd2f21068e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nikooo777/ckSurf/releases/tag/1.21.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.238156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.238156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-09-05T18:15:08.537",
      "lastModified" : "2024-11-21T03:36:10.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass."
      }, {
        "lang" : "es",
        "value" : "BMC Server Automation anterior a 8.9.01 parche 1 permite la ejecución del comando Process Spawner debido a la omisión de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:server_automation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.9.01",
            "matchCriteriaId" : "4329258C-D507-4BFE-A99C-46B6BB2047C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.bmc.com/docs/serverautomation/2002/notification-of-critical-security-issue-in-bmc-server-automation-cve-2017-9453-1020706453.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.bmc.com/docs/serverautomation/2002/notification-of-critical-security-issue-in-bmc-server-automation-cve-2017-9453-1020706453.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13893",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:48.837",
      "lastModified" : "2023-11-07T02:38:44.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13894",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:48.927",
      "lastModified" : "2023-11-07T02:38:44.517",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13895",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:49.287",
      "lastModified" : "2023-11-07T02:38:44.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13896",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:49.380",
      "lastModified" : "2023-11-07T02:38:44.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13897",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:49.767",
      "lastModified" : "2023-11-07T02:38:44.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13898",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:49.863",
      "lastModified" : "2023-11-07T02:38:44.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13899",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:49.977",
      "lastModified" : "2023-11-07T02:38:44.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13900",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:50.067",
      "lastModified" : "2023-11-07T02:38:44.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13901",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:50.160",
      "lastModified" : "2023-11-07T02:38:44.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13902",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:50.933",
      "lastModified" : "2023-11-07T02:38:44.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13912",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.113",
      "lastModified" : "2023-11-07T02:38:44.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13913",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.217",
      "lastModified" : "2023-11-07T02:38:44.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13914",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.313",
      "lastModified" : "2023-11-07T02:38:44.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13915",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.427",
      "lastModified" : "2023-11-07T02:38:44.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13916",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.523",
      "lastModified" : "2023-11-07T02:38:44.987",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13917",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.617",
      "lastModified" : "2023-11-07T02:38:45.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13918",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.710",
      "lastModified" : "2023-11-07T02:38:45.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13919",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.807",
      "lastModified" : "2023-11-07T02:38:45.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13920",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:51.920",
      "lastModified" : "2023-11-07T02:38:45.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13921",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.177",
      "lastModified" : "2023-11-07T02:38:45.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13922",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.323",
      "lastModified" : "2023-11-07T02:38:45.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13923",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.427",
      "lastModified" : "2023-11-07T02:38:45.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13924",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.537",
      "lastModified" : "2023-11-07T02:38:45.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13925",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.647",
      "lastModified" : "2023-11-07T02:38:45.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13926",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.757",
      "lastModified" : "2023-11-07T02:38:45.290",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13927",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.877",
      "lastModified" : "2023-11-07T02:38:45.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13928",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:52.973",
      "lastModified" : "2023-11-07T02:38:45.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13929",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.067",
      "lastModified" : "2023-11-07T02:38:45.380",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13930",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.163",
      "lastModified" : "2023-11-07T02:38:45.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13931",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.257",
      "lastModified" : "2023-11-07T02:38:45.443",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13932",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.417",
      "lastModified" : "2023-11-07T02:38:45.473",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13933",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.627",
      "lastModified" : "2023-11-07T02:38:45.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13934",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.743",
      "lastModified" : "2023-11-07T02:38:45.530",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13935",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.843",
      "lastModified" : "2023-11-07T02:38:45.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13936",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:53.977",
      "lastModified" : "2023-11-07T02:38:45.610",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13937",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.070",
      "lastModified" : "2023-11-07T02:38:45.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13938",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.167",
      "lastModified" : "2023-11-07T02:38:45.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13939",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.283",
      "lastModified" : "2023-11-07T02:38:45.727",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13940",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.383",
      "lastModified" : "2023-11-07T02:38:45.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13941",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.480",
      "lastModified" : "2023-11-07T02:38:45.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13942",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.567",
      "lastModified" : "2023-11-07T02:38:45.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13943",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.740",
      "lastModified" : "2023-11-07T02:38:45.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13944",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.847",
      "lastModified" : "2023-11-07T02:38:45.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13945",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:54.947",
      "lastModified" : "2023-11-07T02:38:45.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13946",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.037",
      "lastModified" : "2023-11-07T02:38:45.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13947",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.133",
      "lastModified" : "2023-11-07T02:38:45.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13948",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.223",
      "lastModified" : "2023-11-07T02:38:45.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13949",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.310",
      "lastModified" : "2023-11-07T02:38:46.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13950",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.400",
      "lastModified" : "2023-11-07T02:38:46.047",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13951",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.497",
      "lastModified" : "2023-11-07T02:38:46.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13952",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.603",
      "lastModified" : "2023-11-07T02:38:46.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13953",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.683",
      "lastModified" : "2023-11-07T02:38:46.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13954",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.790",
      "lastModified" : "2023-11-07T02:38:46.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13955",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:55.877",
      "lastModified" : "2023-11-07T02:38:46.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13956",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:56.017",
      "lastModified" : "2023-11-07T02:38:46.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13957",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:56.203",
      "lastModified" : "2023-11-07T02:38:46.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13958",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:56.393",
      "lastModified" : "2023-11-07T02:38:46.317",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13959",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:56.590",
      "lastModified" : "2023-11-07T02:38:46.357",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13960",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:56.783",
      "lastModified" : "2023-11-07T02:38:46.393",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13961",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:56.970",
      "lastModified" : "2023-11-07T02:38:46.420",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13962",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.167",
      "lastModified" : "2023-11-07T02:38:46.447",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13963",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.253",
      "lastModified" : "2023-11-07T02:38:46.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13964",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.347",
      "lastModified" : "2023-11-07T02:38:46.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13965",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.440",
      "lastModified" : "2023-11-07T02:38:46.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13966",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.537",
      "lastModified" : "2023-11-07T02:38:46.567",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13967",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.640",
      "lastModified" : "2023-11-07T02:38:46.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13968",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.737",
      "lastModified" : "2023-11-07T02:38:46.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13969",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.823",
      "lastModified" : "2023-11-07T02:38:46.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13970",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.893",
      "lastModified" : "2023-11-07T02:38:46.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13971",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:57.947",
      "lastModified" : "2023-11-07T02:38:46.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13972",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.007",
      "lastModified" : "2023-11-07T02:38:46.750",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13973",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.077",
      "lastModified" : "2023-11-07T02:38:46.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13974",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.137",
      "lastModified" : "2023-11-07T02:38:46.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13975",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.197",
      "lastModified" : "2023-11-07T02:38:46.843",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13976",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.263",
      "lastModified" : "2023-11-07T02:38:46.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13977",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.320",
      "lastModified" : "2023-11-07T02:38:46.897",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13978",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.383",
      "lastModified" : "2023-11-07T02:38:46.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13979",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.443",
      "lastModified" : "2023-11-07T02:38:46.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13980",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.500",
      "lastModified" : "2023-11-07T02:38:46.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13981",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.560",
      "lastModified" : "2023-11-07T02:38:47.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7166",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.627",
      "lastModified" : "2023-11-07T02:50:01.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7168",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.693",
      "lastModified" : "2023-11-07T02:50:01.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7169",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-09-14T19:15:58.760",
      "lastModified" : "2023-11-07T02:50:01.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-11-03T01:15:07.777",
      "lastModified" : "2024-11-21T03:31:28.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password."
      }, {
        "lang" : "es",
        "value" : "El hash de contraseñas de bcrypt en Botan anterior a 2.1.0 no maneja correctamente las contraseñas con una longitud de entre 57 y 72 caracteres, lo que facilita a los atacantes determinar la contraseña en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.11.0",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "A9209C67-7AAD-43E6-AEE2-8365EC3BD737"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://botan.randombit.net/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1034591",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://botan.randombit.net/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1034591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20187",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-11-05T21:15:09.190",
      "lastModified" : "2024-11-21T03:22:50.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3.1 is able to address this issue. The patch is identified as 500d340e1f6421007413cc08a8383475221c2604. It is recommended to upgrade the affected component. VDB-244482 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO ESTÁ ASIGNADO ** ** NO SOPORTADO CUANDO ESTÁ ASIGNADO ** Se encontró una vulnerabilidad en Magnesium-PHP hasta 0.3.0. Ha sido clasificada como problemática. La función formatEmailString del archivo src/Magnesium/Message/Base.php es afectada por la vulnerabilidad. La manipulación del argumento correo electrónico/nombre conduce a la inyección. La actualización a la versión 0.3.1 puede solucionar este problema. El parche se identifica como 500d340e1f6421007413cc08a8383475221c2604. Se recomienda actualizar el componente afectado. VDB-244482 es el identificador asignado a esta vulnerabilidad. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:floriangaerber:magnesium-php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.0",
            "matchCriteriaId" : "676606C9-E5D4-4AEB-BB62-2532B3B85E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/floriangaerber/Magnesium-PHP/commit/500d340e1f6421007413cc08a8383475221c2604",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/floriangaerber/Magnesium-PHP/releases/tag/v0.3.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.244482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.244482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/floriangaerber/Magnesium-PHP/commit/500d340e1f6421007413cc08a8383475221c2604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/floriangaerber/Magnesium-PHP/releases/tag/v0.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.244482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.244482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20188",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2024-01-02T15:15:08.377",
      "lastModified" : "2024-11-21T03:22:50.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Zimbra zm-ajax up to 8.8.1 and classified as problematic. Affected by this vulnerability is the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 8.8.2 is able to address this issue. The identifier of the patch is 8d039d6efe80780adc40c6f670c06d21de272105. It is recommended to upgrade the affected component. The identifier VDB-249421 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Zimbra zm-ajax hasta 8.8.1 y clasificada como problemática. La función XFormItem.prototype.setError del archivo WebRoot/js/ajax/dwt/xforms/XFormItem.js es afectada por esta vulnerabilidad. La manipulación del mensaje de argumento conduce a cross site scripting. El ataque se puede lanzar de forma remota. La complejidad de un ataque es bastante alta. La explotación parece difícil. La actualización a la versión 8.8.2 puede solucionar este problema. El identificador del parche es 8d039d6efe80780adc40c6f670c06d21de272105. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-249421."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zimbra:zm-ajax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.8.2",
            "matchCriteriaId" : "92DC03A9-1A56-434C-AAF3-79B8DAA0B695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zimbra/zm-ajax/commit/8d039d6efe80780adc40c6f670c06d21de272105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Zimbra/zm-ajax/releases/tag/8.8.2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.249421",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.249421",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Zimbra/zm-ajax/commit/8d039d6efe80780adc40c6f670c06d21de272105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Zimbra/zm-ajax/releases/tag/8.8.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.249421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.249421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2024-01-22T06:15:07.563",
      "lastModified" : "2025-11-03T22:15:43.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects."
      }, {
        "lang" : "es",
        "value" : "En Clojure anterior a 1.9.0, las clases se pueden usar para construir un objeto serializado que ejecuta código arbitrario tras la deserialización. Esto es relevante si un servidor deserializa objetos que no son de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clojure:clojure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.0",
            "matchCriteriaId" : "BF6C5ABE-97CB-400C-880A-453F5CA13383"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://clojure.atlassian.net/browse/CLJ-2204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/clojure/clojure/commit/271674c9b484d798484d134a5ac40a6df15d3ac3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frohoff/ysoserial/pull/68/files",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackmd.io/%40fe1w0/HyefvRQKp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGCLOJURE-5740378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://clojure.atlassian.net/browse/CLJ-2204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/clojure/clojure/commit/271674c9b484d798484d134a5ac40a6df15d3ac3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frohoff/ysoserial/pull/68/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackmd.io/%40fe1w0/HyefvRQKp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241108-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGCLOJURE-5740378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2024-03-27T00:15:07.580",
      "lastModified" : "2024-11-21T03:22:50.817",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a \"Zalgo text\" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability."
      }, {
        "lang" : "es",
        "value" : "Algunas tecnologías de Microsoft utilizadas en Windows 8 a 11 permiten una degradación temporal del rendimiento del lado del cliente durante el procesamiento de múltiples caracteres combinados Unicode, también conocido como ataque de \"texto Zalgo\". NOTA: los terceros cuestionan si el costo computacional de interpretar los datos Unicode debe considerarse una vulnerabilidad."
      } ],
      "metrics" : { },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-176"
        } ]
      } ],
      "references" : [ {
        "url" : "https://aka.ms/windowsbugbar",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://en.wikipedia.org/wiki/Zalgo_text",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://talk.dynalist.io/t/dynalist-is-vulnerable-to-zalgo/1234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://aka.ms/windowsbugbar",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://en.wikipedia.org/wiki/Zalgo_text",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://talk.dynalist.io/t/dynalist-is-vulnerable-to-zalgo/1234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20191",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2024-03-31T09:15:10.280",
      "lastModified" : "2024-11-21T03:22:50.977",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Zimbra zm-admin-ajax up to 8.8.1. It has been classified as problematic. This affects the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js of the component Form Textbox Field Error Handler. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 8.8.2 is able to address this issue. The identifier of the patch is bb240ce0c71c01caabaa43eed30c78ba8d7d3591. It is recommended to upgrade the affected component. The identifier VDB-258621 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Zimbra zm-admin-ajax hasta 8.8.1. Ha sido clasificada como problemática. Esto afecta la función XFormItem.prototype.setError del archivo WebRoot/js/ajax/dwt/xforms/XFormItem.js del componente Form Textbox Field Error Handler. La manipulación del mensaje de argumento conduce a cross-site scripting. Es posible iniciar el ataque de forma remota. La actualización a la versión 8.8.2 puede solucionar este problema. El identificador del parche es bb240ce0c71c01caabaa43eed30c78ba8d7d3591. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-258621."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zimbra/zm-admin-ajax/commit/bb240ce0c71c01caabaa43eed30c78ba8d7d3591",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Zimbra/zm-admin-ajax/releases/tag/8.8.2",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.258621",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.258621",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Zimbra/zm-admin-ajax/commit/bb240ce0c71c01caabaa43eed30c78ba8d7d3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Zimbra/zm-admin-ajax/releases/tag/8.8.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vuldb.com/?ctiid.258621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vuldb.com/?id.258621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3755",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2024-07-29T21:15:10.993",
      "lastModified" : "2024-07-29T21:15:10.993",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3766",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2024-07-29T21:15:11.060",
      "lastModified" : "2024-07-29T21:15:11.060",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3769",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2024-07-29T21:15:11.107",
      "lastModified" : "2024-07-29T21:15:11.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-3772",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2024-07-31T21:15:12.063",
      "lastModified" : "2024-08-13T15:05:53.983",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot."
      }, {
        "lang" : "es",
        "value" : " Se informó una vulnerabilidad en las versiones de Lenovo PC Manager anteriores a la 2.6.40.3154 que podría permitir que un atacante provocara un reinicio del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:pcmanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.40.3154",
            "matchCriteriaId" : "A650CC4E-DCBC-4A77-9601-A0E672F7A8C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iknow.lenovo.com.cn/detail/171959",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20192",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2024-10-16T07:15:05.147",
      "lastModified" : "2024-10-16T16:38:14.557",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser."
      }, {
        "lang" : "es",
        "value" : "El complemento Formidable Form Builder para WordPress es vulnerable a cross-site scripting almacenado a través de múltiples parámetros enviados durante las entradas de formularios, como 'after_html' en versiones anteriores a la 2.05.03, debido a una desinfección de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten secuencias de comandos web arbitrarias que se ejecutan en el navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://klikki.fi/adv/formidable.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/formidable/#developers",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/900fcaab-2424-4ae8-af18-95659db0dbe3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20193",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2024-10-16T08:15:03.223",
      "lastModified" : "2024-10-30T20:46:34.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "Product Vendors son vulnerables a Cross-Site Scripting Reflejado a través del parámetro 'vendor_description' en versiones hasta la 2.0.35 incluida, debido a una desinfección de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten secuencias de comandos web arbitrarias en páginas que se ejecutan si logran engañar a un usuario para que realice una acción, como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woo:product_vendors:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.35",
            "matchCriteriaId" : "76289A49-81AF-456A-8436-712F858E7FCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/253313",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://threatpost.com/reflected-xss-bug-patched-in-popular-woocommerce-wordpress-plugin/127744/",
        "source" : "security@wordfence.com",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://woocommerce.com/products/product-vendors/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.majemedia.com/2017/09/xss-vulnerability-in-woocommerce-product-vendors-plugin/",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a224e745-f9c7-4ca6-b656-e94862b1dc57?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20194",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2024-10-16T08:15:03.453",
      "lastModified" : "2024-10-30T21:00:25.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form."
      }, {
        "lang" : "es",
        "value" : "El complemento Formidable Form Builder para WordPress es vulnerable a la exposición de datos confidenciales en versiones hasta la 2.05.03 incluida a través de la acción AJAX frm_forms_preview. Esto permite que atacantes no autenticados exporten todas las entradas de formulario de un formulario determinado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:formidable_form_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.05.03",
            "matchCriteriaId" : "FBE5CB42-C01D-417D-9F32-B19759A96BBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://klikki.fi/formidable-forms-vulnerabilities/",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c7600fe1-94e4-4e3e-a9a6-ff3589813715?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20195",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2024-10-29T12:15:02.917",
      "lastModified" : "2024-10-29T14:34:04.427",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The manipulation of the argument phone leads to sql injection. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 264813c546dba03989ac0fc365f2022bf65e3be2. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : " Se encontró una vulnerabilidad en LUNAD3v AreaLoad hasta 1a1103182ed63a06dde63d1712f3262eda19c3ec. Se ha calificado como crítica. Este problema afecta a algunos procesamientos desconocidos del archivo request.php. La manipulación del argumento phone conduce a una inyección SQL. Este producto no utiliza control de versiones. Por este motivo, no está disponible la información sobre las versiones afectadas y no afectadas. El parche se llama 264813c546dba03989ac0fc365f2022bf65e3be2. Se recomienda aplicar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LUNAD3v/areaload/commit/264813c546dba03989ac0fc365f2022bf65e3be2",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.281987",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.281987",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13227",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-14T23:15:05.013",
      "lastModified" : "2024-11-20T17:35:01.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the autofill service, the package name that is provided by the app process is trusted inappropriately.  This could lead to information disclosure with no additional execution privileges needed.  User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En el servicio de autocompletar, el nombre del paquete que proporciona el proceso de la aplicación se considera de confianza de forma inapropiada. Esto podría provocar la divulgación de información sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-06-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13309",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-15T21:15:05.980",
      "lastModified" : "2024-12-17T20:31:02.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En readEncryptedData de ConscryptEngine.java, existe una posible fuga de texto plano debido a un cifrado utilizado incorrectamente. Esto podría provocar la divulgación de información local sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13310",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-15T22:15:14.177",
      "lastModified" : "2024-12-17T20:29:35.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En createFromParcel de ViewPager.java, existe un posible problema de serialización de lectura/escritura que conduce a una omisión de permisos. Esto podría conducir a una escalada local de privilegios donde una aplicación puede iniciar una actividad con privilegios del sistema sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13311",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-15T22:15:14.240",
      "lastModified" : "2024-12-18T15:00:52.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En la función read() de ProcessStats.java, existe un posible problema de serialización de lectura/escritura que conduce a una omisión de permisos. Esto podría provocar una escalada local de privilegios donde una aplicación puede iniciar una actividad con privilegios del sistema sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13312",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-15T22:15:14.300",
      "lastModified" : "2024-12-18T14:49:59.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En createFromParcel de MediaCas.java, existe una posible discrepancia entre la lectura y la escritura de paquetes debido a una validación de entrada incorrecta. Esto podría provocar una escalada local de privilegios, donde una aplicación puede iniciar una actividad con privilegios del sistema sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13313",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-15T22:15:14.373",
      "lastModified" : "2024-12-18T14:44:13.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En ElementaryStreamQueue::dequeueAccessUnitMPEG4Video de ESQueue.cpp, existe un posible bucle infinito que conduce al agotamiento de los recursos debido a una comprobación incorrecta de los límites. Esto podría provocar una denegación de servicio remota sin necesidad de privilegios de ejecución adicionales. Se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13314",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-15T22:15:14.440",
      "lastModified" : "2024-12-18T14:36:21.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to local escalation of privilege allowing users to access non-VPN networks, when they are supposed to be restricted to the VPN networks, with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En setAllowOnlyVpnForUids de NetworkManagementService.java, existe una posible omisión de la configuración de seguridad debido a la falta de una verificación de permisos. Esto podría provocar una escalada local de privilegios que permita a los usuarios acceder a redes que no sean VPN, cuando se supone que deben estar restringidos a las redes VPN, sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13315",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-19T18:15:18.613",
      "lastModified" : "2024-12-18T14:23:37.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En writeToParcel y createFromParcel de DcParamObject.java, existe una omisión de permisos debido a una discrepancia en el tamaño de escritura. Esto podría generar una elevación de privilegios donde el usuario puede iniciar una actividad con privilegios del sistema, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-9711",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-22T10:15:03.387",
      "lastModified" : "2024-11-25T19:10:02.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain unprivileged processes are able to perform IOCTL calls."
      }, {
        "lang" : "es",
        "value" : "Ciertos procesos sin privilegios pueden realizar llamadas IOCTL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27A1760-8D1B-4172-B6CE-65C72332F103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5F96F1-D3FB-482B-A3C8-57BA4DE86D5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1650DB-FDF8-4BE5-9437-8ADA11A07116"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DD51F-4BDE-497B-89E5-551D10CF3442"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0752054B-2C29-4490-ADC8-29F82BAA17E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005038B5-BCB7-4A23-8562-ACEF6E156C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-11076",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-26T09:15:04.347",
      "lastModified" : "2025-01-09T21:02:48.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder."
      }, {
        "lang" : "es",
        "value" : "En algunas revisiones de hardware donde la decodificación VP9 está acelerada por hardware, el tamaño del cuadro no está programado correctamente en el hardware del decodificador, lo que puede provocar un acceso no válido a la memoria por parte del decodificador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA80D57-3191-47CF-AD3F-9F2D64E443FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0986EF1-0974-488E-84C4-6880F876CE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08BA58-2EBC-4A22-85A4-2ECD54693B9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27110478-4C08-49E6-BD53-8BAAD9D5BD65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3664D302-D22A-4B25-B534-3097AE2F8573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC939-2FE8-4AB4-B638-35C83B224005"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C12E2-7064-41E6-B357-3F0E6E6D0A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8175FC2D-8B9C-4461-BEAE-E9C688E8A63B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CD09CE-75CC-418F-AB16-4685141BDE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5C66CC-B00C-4581-B8FB-0632232E480D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F57247-08CD-473E-A517-F9E85BFC7BEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55604764-FC96-451C-BB9B-9AD72EF5D245"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CEDACD-D22B-4CCD-93DA-B79CB74BDA22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549E6F7E-A54F-423F-BD4A-A8FB97DBD39E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3835-7183-4D96-8647-DD9916880323"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B95CCC-37F1-4768-8D64-CA2028E93E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1426161-4F7C-44B1-AA9E-EA661AA68947"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF81213-DE2D-4C4B-99E8-71AFD87E92CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E826EF-343B-47FA-AB54-F13E868CE6A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B4B4D4-0357-4E1D-9B72-635106D632CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F992088-5E31-4625-8C3B-CE7F946C61F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA0D645-80F6-48C3-AF0D-99198ADC8778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FF3F3-CD5A-45A3-988C-6457D2CEB48C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D045BE4B-BC19-4A51-90E6-00C18389C81B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F006960-CDE3-4E74-B4F0-2C4B2CA93959"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706B5BF5-3803-4D3C-8A3B-34D30D8B36F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69745BA-DE6A-4646-959D-C45166559952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-15832",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-26T09:15:04.493",
      "lastModified" : "2025-01-09T21:01:42.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW"
      }, {
        "lang" : "es",
        "value" : "Sobrescritura de búfer en el controlador del host WLAN aprovechando un FW WLAN comprometido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17772",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-26T09:15:04.640",
      "lastModified" : "2025-01-09T21:01:09.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation."
      }, {
        "lang" : "es",
        "value" : "En múltiples funciones que procesan tramas 802.11, pueden ocurrir lecturas fuera de los límites debido a una validación insuficiente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18153",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-26T09:15:04.783",
      "lastModified" : "2025-01-09T20:50:28.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition exists in a driver potentially leading to a use-after-free condition."
      }, {
        "lang" : "es",
        "value" : "Existe una condición de ejecución en un controlador que potencialmente puede llevar a una condición de use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:9206_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C2632A-02F2-4C59-AF96-E2C77940360F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:9206_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A104D-951A-4FA9-938A-1324640A998D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA6CA-A0FD-4A72-B856-C8E65AC86902"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D29295A-7183-46BE-B4EE-F891D1C17ED9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar6003_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D852D3BA-1A2E-4C98-B747-8DA14AC44B1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar6003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140FD423-FAC4-4D2D-BCFF-511E0AE8CE95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_630_mobile_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D382DEBB-A358-4EA6-84B9-CB3F9161A1F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_630_mobile:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47A12A6-1DDF-453E-8590-1CA83234DB42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_636_mobile_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA77F18-C031-476E-9552-2BA63152321D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_636_mobile:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59E6158-B097-4209-AE0D-A97A512C0473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18306",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-26T14:15:17.430",
      "lastModified" : "2025-01-09T20:16:22.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure due to uninitialized variable."
      }, {
        "lang" : "es",
        "value" : "Divulgación de información debido a variable no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-18307",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2024-11-26T14:15:17.573",
      "lastModified" : "2025-01-09T20:14:33.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure possible while audio playback."
      }, {
        "lang" : "es",
        "value" : "Es posible divulgar información durante la reproducción de audio. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C621F-0BC0-40C1-9678-1AF6498AC487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C621A62-E346-406B-9D20-8FF6C2B0851F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E0CC35-AC20-42D7-8FEA-CA4685E33E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2C4DED-2367-4736-A0AF-C8356F1271AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E077FC03-F86F-417A-A3E6-BC88CB85C6F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E016356C-94ED-4CDD-8351-97D265FE036E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08016A2-E4FE-4E9C-A915-C66BE157AFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018452D0-007C-4740-B2AF-E5C8BBAC310F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F930E9BF-C502-49C6-8BE8-9A711B89FA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2D2B3B-CB28-46AA-9117-A7FA371FDE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18BF66-B0DB-48BB-B43A-56F01821F5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C10C7CB-3B66-4F17-8146-6A85611E2BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DA765F-53DE-4FB0-B825-6C11B3177641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13316",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-27T20:15:22.363",
      "lastModified" : "2024-12-18T19:49:51.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En checkPermissions de RecognitionService.java, existe una posible omisión de permisos debido a una verificación de permisos faltante. Esto podría provocar una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13319",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-27T20:15:22.493",
      "lastModified" : "2024-12-18T20:30:33.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En pvmp3_get_main_data_size de pvmp3_get_main_data_size.cpp, existe una posible sobrelectura del búfer debido a una verificación de los límites faltante. Esto podría provocar la divulgación remota de información de variables estáticas globales sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13320",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-27T22:15:04.800",
      "lastModified" : "2024-12-18T20:30:58.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En impeg2d_bit_stream_flush() de libmpeg2dec existe una posible lectura OOB debido a una verificación de los límites faltante. Esto podría provocar un ataque DoS remoto sin necesidad de privilegios de ejecución adicionales. Se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13321",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-27T22:15:04.900",
      "lastModified" : "2024-12-18T20:32:50.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En SensorService::isDataInjectionEnabled de frameworks/native/services/sensorservice/SensorService.cpp, existe una posible lectura fuera de los límites debido a una verificación de los límites faltante. Esto podría provocar la divulgación de información local sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13323",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-11-27T22:15:04.983",
      "lastModified" : "2024-12-18T20:33:03.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En String16 de String16.cpp, existe una posible escritura fuera de los límites debido a un desbordamiento de enteros. Esto podría provocar una escalada local de privilegios en un proceso sin privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13308",
      "sourceIdentifier" : "security@android.com",
      "published" : "2024-12-05T22:15:18.177",
      "lastModified" : "2024-12-19T16:54:09.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En tscpu_write_GPIO_out y mtkts_Abts_write de mtk_ts_Abts.c, existe un posible desbordamiento de búfer en un sscanf debido a una validación de entrada incorrecta. Esto podría provocar una escalada local de privilegios con permisos de ejecución de System necesarios. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-06-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13322",
      "sourceIdentifier" : "security@android.com",
      "published" : "2025-01-17T23:15:10.747",
      "lastModified" : "2025-03-13T14:15:19.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed.  User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En endCallForSubscriber de PhoneInterfaceManager.java, existe una forma posible de evitar el acceso a los servicios de emergencia debido a un error lógico en el código. Esto podría provocar una denegación de servicio local sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@android.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-783"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20196",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2025-01-26T18:15:27.443",
      "lastModified" : "2025-01-28T15:15:08.267",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Itechscripts School Management Software 2.75. Se ha clasificado como crítica. Afecta a una parte desconocida del archivo /notice-edit.php. La manipulación del argumento aid provoca una inyección SQL. Es posible iniciar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.95307",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.95307",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41034",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41034/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/41034",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13317",
      "sourceIdentifier" : "security@android.com",
      "published" : "2025-01-28T17:15:08.180",
      "lastModified" : "2025-07-10T20:41:48.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En HeifDecoderImpl::getScanline de HeifDecoderImpl.cpp, existe una posible lectura fuera de los límites debido a una validación de entrada incorrecta. Esto podría provocar la divulgación remota de información sin necesidad de privilegios de ejecución adicionales. Se necesita la interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-13318",
      "sourceIdentifier" : "security@android.com",
      "published" : "2025-01-28T17:15:08.310",
      "lastModified" : "2025-07-10T20:41:28.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En HeifDataSource::readAt de HeifDecoderImpl.cpp, existe una posible lectura fuera de los límites debido a un desbordamiento de enteros. Esto podría provocar la divulgación remota de información sin necesidad de privilegios de ejecución adicionales. Se necesita la interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2018-05-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17542",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2025-03-17T23:15:12.677",
      "lastModified" : "2025-03-17T23:15:12.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17545",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2025-03-17T23:15:13.370",
      "lastModified" : "2025-03-17T23:15:13.370",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17546",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2025-03-17T23:15:13.433",
      "lastModified" : "2025-03-17T23:15:13.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17547",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2025-03-17T23:15:13.490",
      "lastModified" : "2025-03-17T23:15:13.490",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-17548",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2025-03-17T23:15:13.560",
      "lastModified" : "2025-03-17T23:15:13.560",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20197",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2025-04-09T11:15:40.433",
      "lastModified" : "2025-04-09T20:02:41.860",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The name of the patch is b32bb1b940f82d38fb9310cd66ebe349e20a1d0a. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en propanetank Roommate-Bill-Tracking hasta 288437f658fc9ee7d4b92a9da12557024d8bc55c. Se ha declarado crítica. Esta vulnerabilidad afecta al código desconocido del archivo /includes/login.php. La manipulación del argumento \"Username\" provoca una inyección SQL. El ataque puede iniciarse remotamente. El parche se llama b32bb1b940f82d38fb9310cd66ebe349e20a1d0a. Se recomienda aplicar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/propanetank/Roommate-Bill-Tracking/commit/b32bb1b940f82d38fb9310cd66ebe349e20a1d0a",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.303640",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.303640",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-7740",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2025-04-29T03:15:33.353",
      "lastModified" : "2025-04-29T03:15:33.353",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20198",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-07-23T14:15:32.140",
      "lastModified" : "2025-07-25T15:29:44.523",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Marathon UI in DC/OS < 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem (/) with read/write privileges. When using a malicious Docker image, the attacker can write to /etc/cron.d/ on the host, achieving arbitrary code execution with root privileges. This impacts any system where the Docker daemon honors Marathon container configurations without policy enforcement."
      }, {
        "lang" : "es",
        "value" : "La interfaz de usuario de Marathon en DC/OS anterior a la versión 1.9.0 permite a usuarios no autenticados implementar contenedores Docker arbitrarios. Debido a la restricción incorrecta de las configuraciones de montaje de volúmenes, los atacantes pueden implementar un contenedor que monta el sistema de archivos root del host (/) con privilegios de lectura y escritura. Al usar una imagen de Docker maliciosa, el atacante puede escribir en /etc/cron.d/ del host, lo que permite la ejecución de código arbitrario con privilegios de root. Esto afecta a cualquier sistema donde el demonio de Docker respete las configuraciones de los contenedores de Marathon sin la aplicación de políticas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "references" : [ {
        "url" : "https://dcos.io/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dcos_marathon.rb",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://web.archive.org/web/20230609134421/https://warroom.rsmus.com/dcos-marathon-compromise/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/42134",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/dcos-marathon-docker-mount-abuse-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20199",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2025-08-16T00:15:25.553",
      "lastModified" : "2025-08-27T14:57:18.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Affected by this vulnerability is an unknown functionality of the component Vault Handler. The manipulation results in improper access controls. The attack may be performed from a remote location. A high complexity level is associated with this attack. The exploitation appears to be difficult. The exploit has been made public and could be used. Upgrading to version 1.0.1 addresses this issue. The patch is identified as 89. Upgrading the affected component is recommended. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Buttercup buttercup-browser-extension hasta la versión 0.14.2. Esta vulnerabilidad afecta a una funcionalidad desconocida. La manipulación conlleva controles de acceso inadecuados. El ataque puede ejecutarse en remoto. Es un ataque de complejidad bastante alta. Parece difícil de explotar. Se ha hecho público el exploit y puede que sea utilizado. Actualizar a la versión 1.0.1 puede solucionar este problema. El identificador del parche es 89. Se recomienda actualizar el componente afectado. Esta vulnerabilidad solo afecta a los productos que ya no reciben soporte del fabricante."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buttercup:buttercup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "7FFA9CE7-D3B7-40E8-85F7-7BF7101B179A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/buttercup/buttercup-browser-extension/issues/92",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/buttercup/buttercup-browser-extension/issues/92#issuecomment-358449755",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/buttercup/buttercup-browser-extension/issues/92#issuecomment-372991430",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/buttercup/buttercup-browser-extension/pull/89",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/buttercup/buttercup-browser-extension/releases/tag/v1.0.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.319969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.319969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.628170",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/buttercup/buttercup-browser-extension/issues/92#issuecomment-372991430",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20200",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2025-09-23T14:15:35.257",
      "lastModified" : "2025-09-24T18:11:24.520",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor replied with: \"(...) there isn't any security implication associated with your findings.\""
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        }, {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.325143",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.325143",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.653875",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213#issuecomment-332371549",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.reddit.com/r/Bitcoin/comments/72yvnj/so_coinomis_official_response_on_the/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.reddit.com/r/CryptoCurrency/comments/72osq7/security_warning_coinomi_wallet_transmits_all/dnkhpob/",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20201",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-10-08T22:15:30.767",
      "lastModified" : "2025-10-14T15:16:00.230",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 (32-bit builds) contained a malicious pre-entry-point loader that diverts execution from __scrt_common_main_seh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at runtime, and transfers execution to an in-memory payload. The payload performs anti-analysis checks, gathers host telemetry, encodes the data with a two-stage obfuscation, and attempts HTTPS exfiltration to hard-coded C2 servers or month-based DGA domains. Potential impacts include remote data collection and exfiltration, stealthy in-memory execution and persistence, and potential lateral movement. CCleaner was developed by Piriform, which was acquired by Avast in July 2017; Avast later merged with NortonLifeLock to form the parent company now known as Gen Digital. According to vendor advisories, the compromised CCleaner build was released on August 15, 2017 and remediated on September 12, 2017 with v5.34; the compromised CCleaner Cloud build was released on August 24, 2017 and remediated on September 15, 2017 with v1.07.3214."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.avast.com/progress-on-ccleaner-investigation",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://blog.avast.com/update-to-the-ccleaner-5.33.6162-security-incident",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://blog.talosintelligence.com/avast-distributes-malware/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.ccleaner.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.ccleaner.com/knowledge/security-notification-ccleaner-v5336162-ccleaner-cloud-v1073191",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.crowdstrike.com/en-us/blog/protecting-software-supply-chain-deep-insights-ccleaner-backdoor/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.morphisec.com/blog/morphisec-discovers-ccleaner-backdoor/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/ccleaner-and-ccleaner-cloud-malicious-backdoor-supply-chain-compromise",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.crowdstrike.com/en-us/blog/protecting-software-supply-chain-deep-insights-ccleaner-backdoor/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20202",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-10-08T22:15:31.703",
      "lastModified" : "2025-10-14T15:16:00.407",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Developer for Chrome v0.4.9 contained malicious code that generated a domain via a DGA and fetched a remote script. The fetched script conditionally loaded follow-on modules that performed extensive ad substitution and malvertising, displayed fake “repair” alerts that redirected users to affiliate programs, and attempted to harvest credentials when users logged in. Injected components enumerate common banner sizes for substitution, replace third-party ad calls, and redirect victim traffic to affiliate landing pages. Potential impacts include user-level code execution in the browser context, large-scale ad fraud and traffic hijacking, credential theft, and exposure to additional payloads delivered by the actor. The compromise was reported on by the maintainer of Web Developer for Chrome on August 2, 2017 and remediated in v0.5.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromewebstore.google.com/detail/web-developer/bfbameneiokkgbdmiekhjnmfkcnldhhm?pli=1",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://gist.github.com/piedpiperRichard/076516da60f45842f1a6e6ae35a9a240/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://ui.vision/blog/chrome-extension-adware/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://web.archive.org/web/20170803163618/https://chrispederick.com/blog/web-developer-for-chrome-compromised/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.proofpoint.com/us/threat-insight/post/threat-actor-goes-chrome-extension-hijacking-spree",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/web-developer-for-chrome-malicious-backdoor-supply-chain-compromise",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.proofpoint.com/us/threat-insight/post/threat-actor-goes-chrome-extension-hijacking-spree",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20203",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-10-09T17:15:57.423",
      "lastModified" : "2025-10-14T19:37:28.107",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT record for a month‑generated domain. After receiving a decryption key, it then downloads and executes arbitrary code, creates an encrypted virtual file system (VFS) in the registry, and grants the attacker full remote code execution, data exfiltration, and persistence. NetSarang released builds for each product line that remediated the compromise: Xmanager Enterprise Build 1236, Xmanager Build 1049, Xshell Build 1326, Xftp Build 1222, and Xlpd Build 1224. Kaspersky Lab identified an instance of exploitation in the wild in August 2017."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      } ],
      "references" : [ {
        "url" : "https://securelist.com/shadowpad-in-corporate-networks/81432/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://usa.kaspersky.com/about/press-releases/shadowpad-attackers-hid-backdoor-in-software-used-by-hundreds-of-large-companies-worldwide",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://web.archive.org/web/20181022035109/https://www.netsarang.com/news/security_exploit_in_july_18_2017_build.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/netsarang-malicious-backdoor-supply-chain-compromise",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20204",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-10-15T02:15:31.243",
      "lastModified" : "2025-10-16T15:29:11.563",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumented user via a proprietary challenge–response scheme which is fundamentally flawed. Because the challenge response can be computed from the challenge itself, a remote attacker can authenticate without knowledge of a secret and obtain a root shell on the device. This can lead to persistent remote code execution, full device compromise, and arbitrary control of the device and any managed services. The firmware used within these devices was updated in December 2016 to make this vulnerability more complex to exploit. However, it is unknown if DBLTek has taken steps to fully mitigate."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1242"
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dbltek.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/JacobMisirian/DblTekGoIPPwn",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/undocumented-backdoor-account-in-dbltek-goip/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/dbltek-goip-telnet-admin-interface-undocumented-backdoor",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20205",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-10-15T02:15:31.407",
      "lastModified" : "2025-10-16T15:29:11.563",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function `nexttoken` copies characters from an input string into a fixed-size stack buffer without performing bounds checks. When `ParseKeyValue` processes a collisionpair rule longer than the destination buffer (256 bytes), an overflow of the stack buffer `szToken` can occur and overwrite the function return address. A remote attacker can trigger the vulnerable code by supplying a specially crafted ragdoll model which causes the oversized collisionpair rule to be parsed, resulting in remote code execution on affected clients or servers. Valve has addressed this issue in many of their Source games, but independently-developed games must manually apply patch."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ValveSoftware/source-sdk-2013",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.oneupsecurity.com/research/remote-code-execution-in-source-games/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/valve-source-sdk-stack-based-buffer-overflow-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20206",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2025-10-18T04:15:43.243",
      "lastModified" : "2025-10-21T19:31:50.020",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the `wpmudev_appointments` cookie. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/1733186/appointments",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/blog/2017/10/3-zero-day-plugin-vulnerabilities-exploited-wild/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7e8f230e-3f96-4efd-806d-72725b960303?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20207",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2025-10-18T04:15:58.753",
      "lastModified" : "2025-10-21T19:31:25.450",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/1737576/flickr-gallery",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/blog/2017/10/3-zero-day-plugin-vulnerabilities-exploited-wild/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b52ae51d-7b9a-4047-82bf-723ea87d2375?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20208",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2025-10-18T04:15:59.477",
      "lastModified" : "2025-10-21T19:31:25.450",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 (exclusive) via deserialization of untrusted input from the is_expired_by_date() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to fetch a remote file and install it on the site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/1733274/custom-registration-form-builder-with-submission-manager",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/blog/2017/10/3-zero-day-plugin-vulnerabilities-exploited-wild/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2b79193-f8fc-4ea2-8973-fe292cfb926b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20209",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-10-30T22:15:37.393",
      "lastModified" : "2025-11-06T18:23:03.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:fusion:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4051DEB9-2418-4A64-A25A-B09A7C57C40C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/changelog/nagios-fusion/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/nagios-fusion-xss-via-users-servers-page",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20210",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2025-11-11T10:15:35.400",
      "lastModified" : "2025-11-14T17:45:44.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:photo_station:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4F5970-287D-490A-8545-9C68D40B4860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:photo_station:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9DD29B-7922-45DE-9AA1-E55CEEB5D795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en-in/security-advisory/nas-201705-04",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2017-20211",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2025-11-12T22:15:41.660",
      "lastModified" : "2025-11-14T16:42:30.503",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This is because it exposes a RotateShape method that dereferences a user-supplied pointer without sufficient validation. A crafted input may cause the control to dereference an attacker-controlled pointer, enabling remote code execution in the context of the hosting process. The vulnerability requires user interaction (instantiation of the ActiveX control via a web page or a file)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ucancode.net/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/ucancode-e-xd-visualization-enterprise-suite-untrusted-pointer-dereference-rce",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-17-422/",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  } ]
}